From ad76b3026fefc8f516ec717e4cc3640898badba0 Mon Sep 17 00:00:00 2001
From: "mintlify[bot]" <109931778+mintlify[bot]@users.noreply.github.com>
Date: Mon, 31 Aug 2026 09:15:46 +0200
Subject: [PATCH 01/77] docs: brand tone and writing style fixes (#12671)

Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
---
 docs/developer-guide/provider.mdx             | 14 ++---
 .../security-compliance-framework.mdx         | 54 +++++++++----------
 docs/developer-guide/server-sent-events.mdx   | 18 +++----
 docs/getting-started/products/prowler-mcp.mdx |  2 +-
 docs/troubleshooting.mdx                      |  2 +-
 docs/user-guide/cli/tutorials/fixer.mdx       |  2 +-
 docs/user-guide/cli/tutorials/misc.mdx        |  4 +-
 docs/user-guide/cli/tutorials/mutelist.mdx    |  2 +-
 .../getting-started-alibabacloud.mdx          |  8 +--
 .../providers/aws/organizations.mdx           |  2 +-
 .../getting-started-mongodbatlas.mdx          | 20 +++----
 .../providers/okta/authentication.mdx         | 22 ++++----
 .../tutorials/prowler-app-findings-triage.mdx |  8 +--
 .../tutorials/prowler-app-github-action.mdx   | 12 ++---
 .../prowler-app-jira-integration.mdx          |  4 +-
 .../user-guide/tutorials/prowler-app-rbac.mdx |  2 +-
 .../tutorials/prowler-import-findings.mdx     |  2 +-
 17 files changed, 89 insertions(+), 89 deletions(-)

diff --git a/docs/developer-guide/provider.mdx b/docs/developer-guide/provider.mdx
index 70fd519505..3d96e41ab5 100644
--- a/docs/developer-guide/provider.mdx
+++ b/docs/developer-guide/provider.mdx
@@ -25,7 +25,7 @@ For providers supported by Prowler, refer to [Prowler Hub](https://hub.prowler.c
 
 Prowler supports several types of providers, each with its own implementation pattern and use case. Understanding these differences is key to designing your provider correctly.
 
-### Classifying your Provider
+### Classifying Your Provider
 
 Before implementing a new provider, you need to determine which type it belongs to. This classification will guide your implementation approach and help you choose the right patterns and libraries.
 
@@ -1090,7 +1090,7 @@ Main registration makes your provider discoverable by Prowler's core system. It'
                 cis.batch_write_data_to_file()
 ```
 
-#### Step 11: Register in the list of providers
+#### Step 11: Register in the List of Providers
 
 **Explanation:**
 This is needed to be able to use the provider in the generic checks. The provider must be registered in the `init_global_provider` method to handle CLI arguments and initialization.
@@ -1966,7 +1966,7 @@ Main registration makes your provider discoverable by Prowler's core system. It'
 
 This step is the same as the [SDK providers](#step-10-register-in-main).
 
-#### Step 11: Register in the list of providers
+#### Step 11: Register in the List of Providers
 
 **Explanation:**
 This is needed to be able to use the provider in the generic checks. The provider must be registered in the `init_global_provider` method to handle CLI arguments and initialization.
@@ -2648,7 +2648,7 @@ Main registration makes your provider discoverable by Prowler's core system. It'
 
 This step is the same as the [SDK providers](#step-10-register-in-main).
 
-#### Step 7: Register in the list of providers
+#### Step 7: Register in the List of Providers
 
 **Explanation:**
 This is needed to be able to use the provider in the generic checks. The provider must be registered in the `init_global_provider` method to handle CLI arguments and initialization.
@@ -2808,7 +2808,7 @@ def validate_your_provider_uid(value):
 **Provider Model:**
 The `Provider` model already exists and supports all provider types. Ensure your provider type is included in the choices.
 
-### 2.2. Add the provider to the Provider Choices
+### 2.2. Add the Provider to the Provider Choices
 
 Update the `return_prowler_provider` function to include your provider. This function is crucial for the API to instantiate the correct provider class.
 
@@ -3209,7 +3209,7 @@ class YourProviderAPITestCase(APITestCase):
         self.assertEqual(response.status_code, 201)
 ```
 
-#### 2.6.1. Add your mocked provider to the tests
+#### 2.6.1. Add Your Mocked Provider to the Tests
 
 If needed, add a named provider fixture or extend the provider factory defaults so tests can request only the provider they need.
 
@@ -3272,7 +3272,7 @@ Your provider will be available through these endpoints:
 - `DELETE /api/v1/providers/{id}/` - Delete provider
 - `POST /api/v1/providers/secrets/` - Add provider credentials
 
-### 2.9. Update the provider if needed
+### 2.9. Update the Provider If Needed
 
 Depending on your provider's authentication requirements, you may need to add new authentication methods that are compatible with the API. This involves updating the provider class to support additional credential types beyond the basic ones.
 
diff --git a/docs/developer-guide/security-compliance-framework.mdx b/docs/developer-guide/security-compliance-framework.mdx
index 46d8d2722e..3dc84dc58c 100644
--- a/docs/developer-guide/security-compliance-framework.mdx
+++ b/docs/developer-guide/security-compliance-framework.mdx
@@ -18,7 +18,7 @@ A compliance framework must represent the **complete state** of the source catal
 Requirement coverage feeds the compliance percentage calculations and the metadata surfaces (dashboards, widgets, exports). Missing requirements skew those metrics and break the report as a faithful snapshot of the framework.
 </Warning>
 
-### Two supported schemas
+### Two Supported Schemas
 
 | Schema | When to use | File location | Discovered as |
 | --- | --- | --- | --- |
@@ -45,7 +45,7 @@ Before adding a new framework, complete the following checks:
 
 ## Universal Compliance Framework
 
-### Where the file lives
+### Where the File Lives
 
 Place the file at the top level of the compliance directory:
 
@@ -57,7 +57,7 @@ Examples in the repository: `prowler/compliance/csa_ccm_4.0.json`, `prowler/comp
 
 The file is auto-discovered — there is **no** need to register it in any `__init__.py`, modify `prowler/lib/outputs/`, or update any other Python module. The framework key Prowler CLI accepts via `--compliance` is the basename of the JSON file without `.json` (`dora_2022_2554.json` → `dora_2022_2554`).
 
-### Top-level structure
+### Top-Level Structure
 
 ```json
 {
@@ -198,7 +198,7 @@ Per requirement:
 
 For MITRE-style frameworks, additional optional fields are available on the requirement: `tactics`, `sub_techniques`, `platforms`, `technique_url` (these are populated automatically when adapting a legacy MITRE JSON to the universal model).
 
-### Multi-provider frameworks
+### Multi-Provider Frameworks
 
 A single universal file can cover any number of providers. The framework appears under each provider's `--list-compliance` output as long as **at least one** requirement has that provider key in its `checks` dict.
 
@@ -226,7 +226,7 @@ The legacy schema spans **four layers** — a complete contribution must touch e
 
 The universal schema collapses Layers 3 and 4 into declarative configuration inside the JSON — that is the main reason it is preferred for new contributions.
 
-### Directory structure and file naming
+### Directory Structure and File Naming
 
 Compliance frameworks live at:
 
@@ -259,7 +259,7 @@ prowler/lib/outputs/compliance/<framework>/
 └── __init__.py
 ```
 
-### JSON schema reference
+### JSON Schema Reference
 
 Every legacy compliance file is a JSON document with the following top-level keys. `Framework`, `Name` and `Provider` are validated non-empty by the root validator `framework_and_provider_must_not_be_empty` (`compliance_models.py`).
 
@@ -362,7 +362,7 @@ For the remaining attribute classes (`AWS_Well_Architected_Requirement_Attribute
 The `Attributes` field is a Pydantic `Union`. The generic attribute model **must** remain the last element of that Union — otherwise Pydantic v1 silently coerces every framework into the generic shape and your specialized fields are dropped. Adding a brand-new attribute shape requires inserting the Pydantic class **before** `Generic_Compliance_Requirement_Attribute`.
 </Note>
 
-#### Minimal working example
+#### Minimal Working Example
 
 The following snippet is a complete, valid framework file named `my_framework_1.0_aws.json`, saved at `prowler/compliance/aws/my_framework_1.0_aws.json`. It uses the generic attribute shape for simplicity.
 
@@ -408,7 +408,7 @@ The following snippet is a complete, valid framework file named `my_framework_1.
 }
 ```
 
-### Mapping checks to requirements
+### Mapping Checks to Requirements
 
 Each requirement links to the Prowler checks that, together, produce a PASS or FAIL verdict for that control.
 
@@ -425,7 +425,7 @@ To discover available checks:
 uv run python prowler-cli.py <provider> --list-checks
 ```
 
-### Supporting multiple providers (legacy)
+### Supporting Multiple Providers (Legacy)
 
 The legacy schema binds each file to a single provider. To cover several providers with the same framework, ship one JSON file per provider:
 
@@ -439,7 +439,7 @@ Keep the `Framework` and `Version` values identical across the files so the disp
 
 For a brand-new framework that spans several providers, **prefer the universal schema** — it covers every provider from a single file. If you must use the legacy schema, add one transformer per provider in `prowler/lib/outputs/compliance/<framework>/` and extend the summary-table dispatcher accordingly. See [Output Formatter](#output-formatter).
 
-### Output formatter
+### Output Formatter
 
 Legacy frameworks render in two forms: a detailed CSV report written to disk, and a summary table printed in the CLI. Both are produced by the output formatter package for the framework. Universal frameworks do **not** need a Python output formatter — the `outputs` config inside the JSON drives rendering — so this section applies only to the legacy schema.
 
@@ -453,19 +453,19 @@ prowler/lib/outputs/compliance/my_framework/
 └── models.py                  # CSV row Pydantic model
 ```
 
-#### Step 1 — Define the CSV row model
+#### Step 1 — Define the CSV Row Model
 
 In `models.py`, declare a Pydantic v1 model with one field per CSV column. Use existing models such as `AWSCISModel` in `prowler/lib/outputs/compliance/cis/models.py` as the reference. Fields typically include `Provider`, `Description`, `AccountId`, `Region`, `AssessmentDate`, `Requirements_Id`, `Requirements_Description`, one `Requirements_Attributes_*` field per attribute key, plus the finding fields `Status`, `StatusExtended`, `ResourceId`, `ResourceName`, `CheckId`, `Muted`, `Framework`, `Name`.
 
-#### Step 2 — Implement the transformer
+#### Step 2 — Implement the Transformer
 
 In `my_framework_aws.py`, subclass `ComplianceOutput` from `prowler.lib.outputs.compliance.compliance_output` and implement `transform(findings, compliance, compliance_name)`. Iterate over `findings`, match each finding to the requirements it satisfies through `finding.compliance.get(compliance_name, [])`, and append one row per attribute to `self._data`.
 
-#### Step 3 — Add the summary-table dispatcher
+#### Step 3 — Add the Summary-Table Dispatcher
 
 In `my_framework.py`, implement `get_my_framework_table(findings, bulk_checks_metadata, compliance_framework, output_filename, output_directory, compliance_overview)` following the pattern in `prowler/lib/outputs/compliance/cis/cis.py`.
 
-#### Step 4 — Register the framework in the dispatchers
+#### Step 4 — Register the Framework in the Dispatchers
 
 - Add the dispatcher call in `prowler/lib/outputs/compliance/compliance.py`, inside `display_compliance_table`, with a branch such as `elif "my_framework" in compliance_framework:`.
 - Register the CSV model and transformer in `prowler/lib/outputs/compliance/compliance_output.py` so the CSV file is emitted during the scan.
@@ -474,7 +474,7 @@ In `my_framework.py`, implement `get_my_framework_table(findings, bulk_checks_me
 For NIST-style catalogs that use `Generic_Compliance_Requirement_Attribute`, no custom formatter is needed. The generic formatter in `prowler/lib/outputs/compliance/generic/` handles them automatically, provided the JSON validates against the generic attribute schema.
 </Note>
 
-### Legacy-to-universal adapter
+### Legacy-to-Universal Adapter
 
 At load time, every legacy file is transparently adapted to a `ComplianceFramework` via `adapt_legacy_to_universal()` (`compliance_models.py`), which: (a) flattens the first element of `Attributes` into a flat `attributes` dict, (b) wraps `Checks` as `{provider_lower: [...]}`, (c) infers `attributes_metadata` from the matched Pydantic class via `_infer_attribute_metadata()`. The rest of Prowler (CSV/OCSF/PDF output, CLI table) then treats both formats identically.
 
@@ -497,7 +497,7 @@ Configuration guardrails close that gap. A requirement declares the configuratio
 Guardrails are an **optional** safety net for configurable checks. A requirement that maps only to non-configurable checks does not need them. When the field is absent, behavior is unchanged.
 </Note>
 
-### Where guardrails are declared
+### Where Guardrails Are Declared
 
 The field is attached to each requirement and exists in both schemas:
 
@@ -506,7 +506,7 @@ The field is attached to each requirement and exists in both schemas:
 
 When a legacy file is adapted to the universal model, `adapt_legacy_to_universal()` copies `ConfigRequirements` into `config_requirements` (`compliance_models.py`), so downstream code only ever reads one shape.
 
-### Constraint schema
+### Constraint Schema
 
 Each entry in the list is a single constraint with the following fields:
 
@@ -533,7 +533,7 @@ Each entry in the list is a single constraint with the following fields:
 `subset` / `superset` require both the applied value and `Value` to be lists; any other type is treated as not satisfied. For `eq` against a boolean, declare `Value` as a JSON boolean (`false`, not `0`) — the model keeps booleans distinct from integers.
 </Note>
 
-### How guardrails are evaluated
+### How Guardrails Are Evaluated
 
 All evaluation lives in one shared module, `prowler/lib/check/compliance_config_eval.py`, consumed by every compliance output (CSV, OCSF, and the CLI tables) and reused by the Prowler API backend so the rule is defined exactly once.
 
@@ -547,7 +547,7 @@ All evaluation lives in one shared module, `prowler/lib/check/compliance_config_
 Guardrails only ever make a result **stricter** (they can turn PASS into FAIL); they never relax a real FAIL into PASS. A requirement with no constraints, or whose keys all use defaults, is reported exactly as before.
 </Warning>
 
-### Example: legacy framework
+### Example: Legacy Framework
 
 From `prowler/compliance/aws/cis_6.0_aws.json`, requirement 2.11 declares two guardrails — one per configurable check it maps to:
 
@@ -590,7 +590,7 @@ A boolean guardrail from the same file: requirement 2.5 (IAM Access Analyzer) on
 ]
 ```
 
-### Example: universal framework
+### Example: Universal Framework
 
 The universal schema uses the lowercase `config_requirements` key with the identical object shape:
 
@@ -616,7 +616,7 @@ The universal schema uses the lowercase `config_requirements` key with the ident
 
 Each constraint declares the `Provider` it targets so the guardrail is only evaluated on scans of that provider — essential for universal frameworks like CSA CCM and DORA, where one requirement maps checks across `aws`, `azure`, `gcp` and more. Because the operator is `subset`, adding `"TLS 1.0"` to `recommended_minimal_tls_versions` widens the allowlist beyond `["TLS 1.2", "TLS 1.3"]` and the requirement is forced to FAIL.
 
-### What the user sees
+### What the User Sees
 
 With a loosened config, the affected requirement's findings report:
 
@@ -630,7 +630,7 @@ StatusExtended: Configuration not valid for this requirement. The check
 
 The same `Configuration not valid for this requirement.` message appears identically across the CSV, OCSF, and console-table outputs.
 
-### Authoring guidelines
+### Authoring Guidelines
 
 - Declare a guardrail only for keys whose value actually changes whether the requirement is met. Most configurable checks do not need one.
 - Set `Value` to the **strictest** configuration the control tolerates — the same number the control text cites (CIS 45 days, NIST ≤90, and so on).
@@ -639,7 +639,7 @@ The same `Configuration not valid for this requirement.` message appears identic
 - Pick the operator from the value's role: a max threshold is `lte`, a min threshold is `gte`, a toggle is `eq`, an allowlist is `subset`, a denylist is `superset`.
 - An unrecognized operator does **not** block the requirement — a malformed constraint is treated as satisfied rather than failing the whole framework. Validate your JSON with the tests below.
 
-### Testing guardrails
+### Testing Guardrails
 
 The shared evaluator and the per-output integration are covered by:
 
@@ -670,7 +670,7 @@ Prowler matches frameworks by concatenating `Framework` and `Version`. A missing
 
 Before opening a PR, validate the JSON loads cleanly against the model and that every referenced check actually exists.
 
-### 1. Schema validation
+### 1. Schema Validation
 
 For **universal** frameworks, load the file and inspect what was parsed. The framework key inside `bulk` is the **basename of the JSON file** (without `.json`); for `prowler/compliance/dora_2022_2554.json` that key is `dora_2022_2554`, for `prowler/compliance/aws/cis_5.0_aws.json` it is `cis_5.0_aws`.
 
@@ -688,7 +688,7 @@ bulk = get_bulk_compliance_frameworks_universal("aws")
 assert "<your_framework_filename_without_json>" in bulk
 ```
 
-### 2. Check existence cross-check
+### 2. Check Existence Cross-Check
 
 There is **no automatic check-existence validation** at load time. Cross-check that every check name in your framework maps to a real check directory:
 
@@ -708,7 +708,7 @@ missing = referenced - real
 assert not missing, f"checks referenced in framework but not found in repo: {sorted(missing)}"
 ```
 
-### 3. CLI smoke test
+### 3. CLI Smoke Test
 
 ```bash
 uv run python prowler-cli.py <provider> --list-compliance
@@ -728,7 +728,7 @@ Verify that:
 - The CLI summary table lists every section / pillar of the framework.
 - Findings roll up under the expected requirements.
 
-### 4. Inspect the CSV output
+### 4. Inspect the CSV Output
 
 Open the generated CSV and confirm:
 
diff --git a/docs/developer-guide/server-sent-events.mdx b/docs/developer-guide/server-sent-events.mdx
index c91f27227f..6fb9c7a00e 100644
--- a/docs/developer-guide/server-sent-events.mdx
+++ b/docs/developer-guide/server-sent-events.mdx
@@ -12,7 +12,7 @@ This guide explains how to add a **Server-Sent Events (SSE)** endpoint to the Pr
 The platform ships the SSE **infrastructure** (`api.sse`) and wiring. No feature endpoint streams over SSE out of the box — this guide shows how to build one on top of the shared base.
 </Info>
 
-## When to use SSE
+## When to Use SSE
 
 | Need | Use |
 |------|-----|
@@ -22,7 +22,7 @@ The platform ships the SSE **infrastructure** (`api.sse`) and wiring. No feature
 
 SSE is the right tool when the **client only consumes**: scan progress, long-running job checkpoints, streamed LLM tokens, cross-client resource-sync notifications. It rides on plain HTTP, reconnects automatically in the browser via the native [`EventSource`](https://developer.mozilla.org/en-US/docs/Web/API/EventSource) API, and needs no extra protocol.
 
-## How it works
+## How It Works
 
 SSE is wired through [`django-eventstream`](https://github.com/fanout/django_eventstream) and a small platform layer in `api/src/backend/api/sse/`:
 
@@ -34,11 +34,11 @@ SSE is wired through [`django-eventstream`](https://github.com/fanout/django_eve
 | `make_channel_name` / `tenant_id_from_channel` | `api/sse/utils.py` | Single source of truth for the channel-name format, so publishers and the channel manager agree byte-for-byte. |
 | Settings | `config/settings/eventstream.py` | Valkey Pub/Sub backend (dedicated DB), channel manager, allowed headers. |
 
-### Transport: the server runs on ASGI
+### Transport: The Server Runs on ASGI
 
 SSE connections are long-lived. Holding one open per synchronous worker would exhaust the worker pool, so the API runs under Gunicorn's native **`asgi` worker** (`config.asgi:application`). Streams are parked on the event loop while ordinary CRUD endpoints keep their synchronous execution (Django runs sync views in a thread-sensitive executor under ASGI). This is configured in `config/guniconf.py` and used by both the dev and production entrypoints — no separate server process is needed.
 
-### The data flow
+### The Data Flow
 
 ```
 publisher (Celery task / view)             subscriber (browser, CLI)
@@ -53,7 +53,7 @@ publisher (Celery task / view)             subscriber (browser, CLI)
 
 A publisher anywhere in the system (most often a Celery task) calls `send_event(channel, event_type, payload)`. `django-eventstream` fans it out over Valkey Pub/Sub to every connection subscribed to that channel.
 
-## Adding an SSE endpoint to your feature
+## Adding an SSE Endpoint to Your Feature
 
 The example below streams progress for a long-running **scan**. Adapt the resource, prefix, and event names to your feature.
 
@@ -161,7 +161,7 @@ publish_end(channel, scan_id=str(scan.id))
 
 </Steps>
 
-## Event naming convention
+## Event Naming Convention
 
 Every event uses an event type of the form **`<resource>.<verb>`** (lowercased, dot-separated). The verb comes from this platform-wide vocabulary — if you need a verb that is not listed, document the addition in this guide so the catalog stays discoverable.
 
@@ -197,7 +197,7 @@ curl -N -H "Authorization: Bearer $JWT" \
   https://<host>/api/v1/scans/$SCAN_ID/event-stream
 ```
 
-## Tenant isolation & security model
+## Tenant Isolation & Security Model
 
 Authorization is enforced at two layers:
 
@@ -206,7 +206,7 @@ Authorization is enforced at two layers:
 
 Because the tenant id lives inside the channel name, this gate works for any feature without the platform knowing anything about it.
 
-## Reconnect & state recovery
+## Reconnect & State Recovery
 
 The platform deliberately ships **without server-side replay** (`is_channel_reliable` returns `False`). When a client reconnects, it does **not** receive missed events. Instead:
 
@@ -215,7 +215,7 @@ The platform deliberately ships **without server-side replay** (`is_channel_reli
 
 Design your event payloads accordingly: deltas are ephemeral and concatenated in-flight; the durable truth always lives behind a REST resource.
 
-## Local development
+## Local Development
 
 - The dev and production entrypoints both launch Gunicorn with the `asgi` worker (`config.asgi:application`). In dev, `DJANGO_DEBUG=True` enables hot reload; `preload_app` is automatically disabled under debug so edited code is picked up.
 - SSE uses a **dedicated Valkey database** (`EVENTSTREAM_VALKEY_DB`, default `2`) kept separate from the Celery broker so a noisy broker cannot crowd out streaming traffic. It reuses the same `VALKEY_*` connection settings as the rest of the platform.
diff --git a/docs/getting-started/products/prowler-mcp.mdx b/docs/getting-started/products/prowler-mcp.mdx
index 3deb88489c..24520ed739 100644
--- a/docs/getting-started/products/prowler-mcp.mdx
+++ b/docs/getting-started/products/prowler-mcp.mdx
@@ -161,7 +161,7 @@ The Prowler MCP Server enables powerful workflows through AI assistants:
 - "What authentication methods does Prowler support for Azure?"
 - "How can I contribute with a new security check to Prowler?"
 
-### Example: Creating a custom dashboard with Prowler extracted data
+### Example: Creating a Custom Dashboard with Prowler Extracted Data
 
 In the next example you can see how to create a dashboard using Prowler MCP Server and Claude Desktop.
 
diff --git a/docs/troubleshooting.mdx b/docs/troubleshooting.mdx
index 9e0c849796..8b23550c4b 100644
--- a/docs/troubleshooting.mdx
+++ b/docs/troubleshooting.mdx
@@ -22,7 +22,7 @@ See section [Logging](/user-guide/cli/tutorials/logging) for further information
 
 Common issues with the Docker Compose installation of Prowler Local Server.
 
-### Problem adding AWS Provider using "Connect assuming IAM Role" in Docker
+### Problem Adding AWS Provider Using "Connect assuming IAM Role" in Docker
 
 See [GitHub Issue #7745](https://github.com/prowler-cloud/prowler/issues/7745) for more details.
 
diff --git a/docs/user-guide/cli/tutorials/fixer.mdx b/docs/user-guide/cli/tutorials/fixer.mdx
index 4170b340e2..f777d64713 100644
--- a/docs/user-guide/cli/tutorials/fixer.mdx
+++ b/docs/user-guide/cli/tutorials/fixer.mdx
@@ -105,7 +105,7 @@ def fixer(resource_id: str) -> bool:
         return True
 ```
 
-## Fixer Config file
+## Fixer Config File
 
 For some fixers, you can have configurable parameters depending on your use case. You can either use the default config file in `prowler/config/fixer_config.yaml` or create a custom config file and pass it to the fixer with the `--fixer-config` flag. The config file should be a YAML file with the following structure:
 
diff --git a/docs/user-guide/cli/tutorials/misc.mdx b/docs/user-guide/cli/tutorials/misc.mdx
index 0940508ed7..59f34c3660 100644
--- a/docs/user-guide/cli/tutorials/misc.mdx
+++ b/docs/user-guide/cli/tutorials/misc.mdx
@@ -4,7 +4,7 @@ title: 'Miscellaneous'
 
 ## Prowler Version
 
-### Showing the Prowler version:
+### Showing the Prowler Version
 
 ```console
 prowler <provider> -V/-v/--version
@@ -22,7 +22,7 @@ To enable verbose mode in Prowler, similar to Version 2, use:
 prowler <provider> --verbose
 ```
 
-### Filter findings by status
+### Filter Findings by Status
 
 Prowler allows filtering findings based on their status, ensuring reports and CLI display only relevant findings:
 
diff --git a/docs/user-guide/cli/tutorials/mutelist.mdx b/docs/user-guide/cli/tutorials/mutelist.mdx
index 77b710d3df..b11a41f1c9 100644
--- a/docs/user-guide/cli/tutorials/mutelist.mdx
+++ b/docs/user-guide/cli/tutorials/mutelist.mdx
@@ -268,7 +268,7 @@ Accounts:
 
 ## AWS Mutelist
 
-### Muting specific AWS regions
+### Muting Specific AWS Regions
 
 If you want to mute failed findings only in specific regions, create a file with the following syntax and run it with `prowler aws -w mutelist.yaml`:
 
diff --git a/docs/user-guide/providers/alibabacloud/getting-started-alibabacloud.mdx b/docs/user-guide/providers/alibabacloud/getting-started-alibabacloud.mdx
index ce9778a3b5..e887ead21e 100644
--- a/docs/user-guide/providers/alibabacloud/getting-started-alibabacloud.mdx
+++ b/docs/user-guide/providers/alibabacloud/getting-started-alibabacloud.mdx
@@ -144,25 +144,25 @@ prowler alibabacloud --ecs-ram-role RoleName
 
 ### Step 2: Run the First Scan
 
-#### Scan all regions
+#### Scan All Regions
 
 ```bash
 prowler alibabacloud
 ```
 
-#### Scan specific regions
+#### Scan Specific Regions
 
 ```bash
 prowler alibabacloud --region cn-hangzhou cn-shanghai
 ```
 
-#### Run specific checks
+#### Run Specific Checks
 
 ```bash
 prowler alibabacloud --checks ram_no_root_access_key ram_user_mfa_enabled_console_access
 ```
 
-#### Run a compliance framework
+#### Run a Compliance Framework
 
 ```bash
 prowler alibabacloud --compliance cis_2.0_alibabacloud
diff --git a/docs/user-guide/providers/aws/organizations.mdx b/docs/user-guide/providers/aws/organizations.mdx
index 92a4faf2ae..9729a86a26 100644
--- a/docs/user-guide/providers/aws/organizations.mdx
+++ b/docs/user-guide/providers/aws/organizations.mdx
@@ -167,7 +167,7 @@ Include the `ExternalId` parameter in the StackSet if required by the organizati
 
 When encountering issues during deployment or needing to target specific OUs or environments (e.g., dev/staging/prod), reach out to the Prowler team via [Slack Community](https://prowler.com/slack) or [Support](mailto:support@prowler.com).
 
-## Extra: Run Prowler across all accounts in AWS Organizations by assuming roles
+## Extra: Run Prowler Across All Accounts in AWS Organizations by Assuming Roles
 
 ### Running Prowler Across All AWS Organization Accounts
 
diff --git a/docs/user-guide/providers/mongodbatlas/getting-started-mongodbatlas.mdx b/docs/user-guide/providers/mongodbatlas/getting-started-mongodbatlas.mdx
index 2fb415a11b..bf2c76447e 100644
--- a/docs/user-guide/providers/mongodbatlas/getting-started-mongodbatlas.mdx
+++ b/docs/user-guide/providers/mongodbatlas/getting-started-mongodbatlas.mdx
@@ -36,7 +36,7 @@ If **Require IP Access List for the Atlas Administration API** is enabled in the
 
 <VersionBadge version="5.15.0" />
 
-### Step 1: Add the provider
+### Step 1: Add the Provider
 
 1. Navigate to **Providers** and click **Add Provider**.
    ![Add provider list](./img/add-provider-list.png)
@@ -45,13 +45,13 @@ If **Require IP Access List for the Atlas Administration API** is enabled in the
    ![Add organization ID](./img/add-org-id.png)
 4. (Optional) Add a friendly alias to identify this organization in dashboards.
 
-### Step 2: Provide API credentials
+### Step 2: Provide API Credentials
 
 1. Click **Next** to open the credentials form.
 2. Paste the **Atlas Public Key** and **Atlas Private Key** generated in the Atlas console.
    ![Add credentials](./img/add-credentials.png)
 
-### Step 3: Test the connection and start scanning
+### Step 3: Test the Connection and Start Scanning
 
 1. Click **Test connection** to ensure Prowler Cloud can reach the Atlas API.
 2. Save the credentials. The provider will appear in the list with its current connection status.
@@ -66,11 +66,11 @@ If **Require IP Access List for the Atlas Administration API** is enabled in the
 
 You can also run MongoDB Atlas assessments directly from the CLI. Both command-line flags and environment variables are supported.
 
-### Step 1: Select an authentication method
+### Step 1: Select an Authentication Method
 
 Choose one of the following authentication methods:
 
-#### Command-line arguments
+#### Command-Line Arguments
 
 ```bash
 prowler mongodbatlas \
@@ -78,7 +78,7 @@ prowler mongodbatlas \
   --atlas-private-key <private_key>
 ```
 
-#### Environment variables
+#### Environment Variables
 
 ```bash
 export ATLAS_PUBLIC_KEY=<public_key>
@@ -86,9 +86,9 @@ export ATLAS_PRIVATE_KEY=<private_key>
 prowler mongodbatlas
 ```
 
-### Step 2: Run the first scan
+### Step 2: Run the First Scan
 
-#### Scan all projects and clusters
+#### Scan All Projects and Clusters
 
 ```bash
 prowler mongodbatlas
@@ -96,7 +96,7 @@ prowler mongodbatlas
 
 This command enumerates all projects accessible to the API key and scans every cluster.
 
-#### Scan a specific project
+#### Scan a Specific Project
 
 Add the `--atlas-project-id` flag when you only want to assess one project:
 
@@ -104,7 +104,7 @@ Add the `--atlas-project-id` flag when you only want to assess one project:
 prowler mongodbatlas --atlas-project-id <project-id>
 ```
 
-### Additional tips
+### Additional Tips
 
 - Combine flags (for example, `--checks` or `--services`) just like with other providers.
 - Use `--output-modes` to export findings in JSON, CSV, ASFF, etc.
diff --git a/docs/user-guide/providers/okta/authentication.mdx b/docs/user-guide/providers/okta/authentication.mdx
index 8f664160a2..059667ee09 100644
--- a/docs/user-guide/providers/okta/authentication.mdx
+++ b/docs/user-guide/providers/okta/authentication.mdx
@@ -67,7 +67,7 @@ The service application must be assigned **one** of the following Okta admin rol
 
 Okta's Management API enforces a two-layer authorization model: an OAuth **scope** decides which API endpoints the token can call, and an **admin role** decides whether the call returns data. With only a scope granted, the token mint succeeds but every read returns `403 Forbidden`. Read-Only Administrator is the minimum role that lets the granted `okta.*.read` scopes return configuration data to Prowler's checks; without it, the credential probe at provider startup fails and the scan never gets to evaluate any check.
 
-#### When Super Administrator is required
+#### When Super Administrator Is Required
 
 Four checks need to resolve the Authentication Policy bound to Okta's first-party apps (Okta Admin Console, Okta Dashboard) and depend on `/api/v1/apps` returning those system apps — which Okta restricts to Super Administrator:
 
@@ -92,17 +92,17 @@ Read-Only Administrator stays the recommended default for the least-privilege fr
 
 ## Step-by-Step Setup
 
-### 1. Go to the admin console
+### 1. Go to the Admin Console
 
 ![Okta — admin console page](/user-guide/providers/okta/images/select-admin-console.png)
 
-### 2. [Optional] - Disable the privilege-escalation bypass (org-wide, one-time)
+### 2. [Optional] - Disable the Privilege-Escalation Bypass (Org-Wide, One-Time)
 
 In the Okta Admin Console, go to **Settings → Account → Public client app admins** and ensure it is **off**. When enabled, every API Services app can be auto-assigned the Super Administrator role after scopes are granted, which would invalidate the read-only premise of this integration.
 
 ![Okta — disable Public client app admins](/user-guide/providers/okta/images/public-client-app-admins.png)
 
-### 3. Create the API Services app
+### 3. Create the API Services App
 
 1. Go to **Applications → Applications**.
 
@@ -118,7 +118,7 @@ In the Okta Admin Console, go to **Settings → Account → Public client app ad
 
 ![Okta — copy client id](/user-guide/providers/okta/images/copy-client-id.png)
 
-### 4. Switch to private-key authentication and generate a keypair
+### 4. Switch to Private-Key Authentication and Generate a Keypair
 
 On the new app's **General** tab, scroll to **Client Credentials**:
 
@@ -136,13 +136,13 @@ Okta displays the private key **only once**. If you close the modal without copy
 
 ![Okta — create Public Key](/user-guide/providers/okta/images/create-public-key.png)
 
-### 5. Grant the required OAuth scopes
+### 5. Grant the Required OAuth Scopes
 
 On the app, open the **Okta API Scopes** tab and click **Grant** on every scope Prowler needs. The bundled checks require `okta.policies.read`, `okta.brands.read`, `okta.apps.read`, `okta.authenticators.read`, `okta.networkZones.read`, `okta.apiTokens.read`, `okta.roles.read`, `okta.groups.read`, `okta.logStreams.read`, and `okta.idps.read`.
 
 ![Okta — grant OAuth scopes](/user-guide/providers/okta/images/grant-permissions.png)
 
-### 6. Assign an admin role
+### 6. Assign an Admin Role
 
 On the app, open the **Admin roles** tab and click **Edit assignments → Add assignment**:
 
@@ -155,7 +155,7 @@ To additionally evaluate the first-party application checks (Okta Admin Console
 
 ![Okta — grant Read-Only role](/user-guide/providers/okta/images/grant-roles.png)
 
-### 7. [Optional] Verify DPoP setting
+### 7. [Optional] Verify DPoP Setting
 
 Prowler sends DPoP (Demonstrating Proof of Possession) proofs on every token request. The integration works whether the **Require Demonstrating Proof of Possession (DPoP) header in token requests** setting on the service app is on or off — but enabling it is the more secure default.
 
@@ -206,20 +206,20 @@ The org domain must be `<org>.okta.com` (or `.oktapreview.com` / `.okta-emea.com
 
 The file at `OKTA_PRIVATE_KEY_FILE` is missing, unreadable, or empty. Confirm the path and that the file contains a non-empty PEM block or JWK JSON document.
 
-### `OktaInvalidCredentialsError` at provider init
+### `OktaInvalidCredentialsError` at Provider Init
 
 Prowler validates credentials at startup by listing one sign-on policy. This error indicates the credential material itself was rejected:
 
 - **`invalid_client`** — the public key registered in Okta does not match the private key on disk. Generate a fresh keypair and try again.
 
-### `OktaInsufficientPermissionsError` at provider init
+### `OktaInsufficientPermissionsError` at Provider Init
 
 Raised when the credential probe succeeds at the OAuth layer but the request is rejected because the service app lacks the required scope or admin role:
 
 - **`invalid_scope`** — one of the requested scopes (`okta.policies.read`, `okta.brands.read`, `okta.apps.read`, `okta.authenticators.read`, `okta.networkZones.read`, `okta.apiTokens.read`, `okta.roles.read`, `okta.groups.read`, `okta.logStreams.read`, and `okta.idps.read`) is not granted on the service app. Grant the missing scope from **Okta API Scopes**.
 - **`Forbidden` / `not authorized`** — no admin role is assigned to the service app. Assign **Read-Only Administrator** (or **Super Administrator** for the first-party application checks) from **Admin roles**.
 
-### Application-service checks return MANUAL on first-party apps
+### Application-Service Checks Return MANUAL on First-Party Apps
 
 When the service app runs with Read-Only Administrator, the five application-service checks targeting the Okta Admin Console and Okta Dashboard return MANUAL. This is by design — Okta restricts the underlying endpoints (`/api/v1/first-party-app-settings/{appName}` and `/api/v1/apps` for first-party app `name` values `saasure` / `okta_enduser`) to **Super Administrator**. Assign the Super Administrator role to the service app to evaluate those checks. See [Required Admin Role](#required-admin-role) for the full list.
 
diff --git a/docs/user-guide/tutorials/prowler-app-findings-triage.mdx b/docs/user-guide/tutorials/prowler-app-findings-triage.mdx
index 408f201645..ce6632dd66 100644
--- a/docs/user-guide/tutorials/prowler-app-findings-triage.mdx
+++ b/docs/user-guide/tutorials/prowler-app-findings-triage.mdx
@@ -141,18 +141,18 @@ Muting a finding does not fix the underlying configuration. Review the finding b
 
 ## Troubleshooting
 
-### Triage controls do not appear
+### Triage Controls Do Not Appear
 
 Make sure the row is an individual finding row. Finding Groups rows do not show triage controls. Expand a group to see affected resources and their triage controls.
 
-### Changes cannot be saved
+### Changes Cannot Be Saved
 
 Confirm that the user role has **Manage Scans** permission. Prowler Local Server does not support Findings Triage writes.
 
-### Resolved or Reopened is missing from the selector
+### Resolved or Reopened Is Missing from the Selector
 
 **Reopened** is always automatic. **Resolved** is set automatically from scan result changes and appears as a selector option only on `MANUAL` findings, where it records a [Manual Pass](#verify-a-manual-finding-as-pass). On findings with any other status, this is expected.
 
-### Risk Accepted or False Positive muted a finding
+### Risk Accepted or False Positive Muted a Finding
 
 This is expected. Those statuses create a mute rule through Mutelist.
diff --git a/docs/user-guide/tutorials/prowler-app-github-action.mdx b/docs/user-guide/tutorials/prowler-app-github-action.mdx
index c874a37164..faf0993e21 100644
--- a/docs/user-guide/tutorials/prowler-app-github-action.mdx
+++ b/docs/user-guide/tutorials/prowler-app-github-action.mdx
@@ -28,7 +28,7 @@ Source: [`prowler-cloud/prowler`](https://github.com/prowler-cloud/prowler) · M
 
 ## Usage
 
-### AWS scan
+### AWS Scan
 
 ```yaml
 - uses: prowler-cloud/prowler@5.25
@@ -41,7 +41,7 @@ Source: [`prowler-cloud/prowler`](https://github.com/prowler-cloud/prowler) · M
     AWS_SESSION_TOKEN: ${{ secrets.AWS_SESSION_TOKEN }}
 ```
 
-### Push findings to Prowler Cloud
+### Push Findings to Prowler Cloud
 
 Send scan results directly to [Prowler Cloud](/user-guide/tutorials/prowler-import-findings) for centralized visibility, compliance tracking, and team collaboration.
 
@@ -97,7 +97,7 @@ jobs:
 - GitHub Code Scanning is free for public repositories. Private repositories require a [GitHub Code Security](https://docs.github.com/en/get-started/learning-about-github/about-github-advanced-security) license.
 </Warning>
 
-### Combine push-to-cloud with SARIF upload
+### Combine Push-to-Cloud with SARIF Upload
 
 ```yaml
 - uses: prowler-cloud/prowler@5.25
@@ -114,7 +114,7 @@ jobs:
     PROWLER_CLOUD_API_KEY: ${{ secrets.PROWLER_CLOUD_API_KEY }}
 ```
 
-### Scan the current repository with the GitHub provider
+### Scan the Current Repository with the GitHub Provider
 
 ```yaml
 name: Prowler GitHub Scan
@@ -142,7 +142,7 @@ jobs:
 `--repository` scans a single repo. Use `--organization <name>` instead to include org-level checks (MFA, security policies, etc.). See the [GitHub provider authentication](/user-guide/providers/github/authentication) for required token permissions.
 </Info>
 
-### Fail the PR on findings
+### Fail the PR on Findings
 
 By default the action tolerates findings (exit code 3) and succeeds. Set `fail-on-findings: true` to fail the workflow step when Prowler detects findings. Combine with `--severity` to control which severity levels trigger the failure:
 
@@ -258,7 +258,7 @@ Scan results are written to `output/` in the workspace and uploaded as artifacts
 
 When `upload-sarif` is enabled, SARIF results are also uploaded to GitHub Code Scanning and appear on the repository's **Security → Code scanning** tab, filtered by the branch that ran the scan.
 
-### Step summary
+### Step Summary
 
 The action writes a summary to the run page with a per-severity breakdown of failing checks, artifact and Code Scanning links, and (when `push-to-cloud: false`) a pointer to [Prowler Cloud](https://cloud.prowler.com) for continuous monitoring.
 
diff --git a/docs/user-guide/tutorials/prowler-app-jira-integration.mdx b/docs/user-guide/tutorials/prowler-app-jira-integration.mdx
index 3621fd514c..27832352f5 100644
--- a/docs/user-guide/tutorials/prowler-app-jira-integration.mdx
+++ b/docs/user-guide/tutorials/prowler-app-jira-integration.mdx
@@ -159,13 +159,13 @@ Support for custom field mapping is planned for a future release.
 
 ## Troubleshooting
 
-### Connection test fails
+### Connection Test Fails
 
 * Verify Jira instance domain is correct and accessible
 * Confirm API token or credentials are valid
 * Ensure API access is enabled in Jira settings and the needed scopes are granted
 
-### Check task status (API)
+### Check Task Status (API)
 
 If the Jira issue does not appear in your Jira project, follow these steps to verify the export task status via the API.
 
diff --git a/docs/user-guide/tutorials/prowler-app-rbac.mdx b/docs/user-guide/tutorials/prowler-app-rbac.mdx
index 90ecafbcb4..f00a852f19 100644
--- a/docs/user-guide/tutorials/prowler-app-rbac.mdx
+++ b/docs/user-guide/tutorials/prowler-app-rbac.mdx
@@ -257,7 +257,7 @@ The **Scope** column indicates where each permission applies. **All** means the
 </Note>
 To grant all administrative permissions, select the **Grant all admin permissions** option.
 
-### Prowler Cloud exclusive permissions
+### Prowler Cloud Exclusive Permissions
 
 The following permissions are available exclusively in **Prowler Cloud**:
 
diff --git a/docs/user-guide/tutorials/prowler-import-findings.mdx b/docs/user-guide/tutorials/prowler-import-findings.mdx
index f32863b90b..0a55878988 100644
--- a/docs/user-guide/tutorials/prowler-import-findings.mdx
+++ b/docs/user-guide/tutorials/prowler-import-findings.mdx
@@ -444,7 +444,7 @@ For pricing details, see [Prowler Cloud Pricing](https://prowler.com/pricing).
 - The user associated with the API key lacks the **Manage Ingestions** permission
 - Contact the tenant administrator to grant the required permission
 
-### Ingestion job status is "failed"
+### Ingestion Job Status Is "failed"
 
 - Check the `/api/v1/ingestions/{id}/errors` endpoint for details
 - Verify the OCSF file format is valid

From 73d5c6952b9485e654937ae7aaf1ace783040a67 Mon Sep 17 00:00:00 2001
From: "mintlify[bot]" <109931778+mintlify[bot]@users.noreply.github.com>
Date: Mon, 31 Aug 2026 09:18:08 +0200
Subject: [PATCH 02/77] docs: fix typos and grammar (#12672)

Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
---
 docs/changelog.mdx                               | 2 +-
 docs/developer-guide/aws-details.mdx             | 4 ++--
 docs/developer-guide/debugging.mdx               | 2 +-
 docs/developer-guide/end2end-testing.mdx         | 6 +++---
 docs/developer-guide/services.mdx                | 2 +-
 docs/developer-guide/unit-testing.mdx            | 8 ++++----
 docs/getting-started/basic-usage/prowler-cli.mdx | 2 +-
 docs/user-guide/cli/tutorials/pentesting.mdx     | 5 +----
 docs/user-guide/tutorials/prowler-app.mdx        | 2 +-
 9 files changed, 15 insertions(+), 18 deletions(-)

diff --git a/docs/changelog.mdx b/docs/changelog.mdx
index ebde6f419e..68e93b9a94 100644
--- a/docs/changelog.mdx
+++ b/docs/changelog.mdx
@@ -409,7 +409,7 @@ rss: true
 
   All checks are fully passive, using AWS APIs and CloudTrail with no instance access or SSM agent required, and are mapped across 23 compliance frameworks, including NIST 800-53 Rev 5, PCI-DSS v4.0, ISO 27001:2022, SOC 2, HIPAA, and MITRE ATT&CK.
 
-  Read more about it this [blog post](https://prowler.com/blog/your-llm-runs-in-a-nitro-enclave-who-is-checking-the-enclave).
+  Read more about it in this [blog post](https://prowler.com/blog/your-llm-runs-in-a-nitro-enclave-who-is-checking-the-enclave).
 
   Try them out now at [cloud.prowler.com](https://cloud.prowler.com/sign-up)!
 
diff --git a/docs/developer-guide/aws-details.mdx b/docs/developer-guide/aws-details.mdx
index ad24731b4f..a653148a4c 100644
--- a/docs/developer-guide/aws-details.mdx
+++ b/docs/developer-guide/aws-details.mdx
@@ -57,7 +57,7 @@ The AWS provider implementation follows the general [Provider structure](/develo
 The generic service pattern is described in [service page](/developer-guide/services#service-structure-and-initialisation). You can find all the right now implemented services in the following locations:
 
 - Directly in the code, in location [`prowler/providers/aws/services/`](https://github.com/prowler-cloud/prowler/tree/master/prowler/providers/aws/services)
-- In the [Prowler Hub](https://hub.prowler.com/). For a more human-readable view.
+- In the [Prowler Hub](https://hub.prowler.com/) for a more human-readable view.
 
 The best reference to understand how to implement a new service is following the [service implementation documentation](/developer-guide/services#adding-a-new-service) and taking other services already implemented as reference. In next subsection you can find a list of common patterns that are used across all AWS services.
 
@@ -131,7 +131,7 @@ def _get_email_identities(self, identity):
 The AWS checks pattern is described in [checks page](/developer-guide/checks). You can find all the right now implemented checks:
 
 - Directly in the code, within each service folder, each check has its own folder named after the name of the check. (e.g. [`prowler/providers/aws/services/s3/s3_bucket_acl_prohibited/`](https://github.com/prowler-cloud/prowler/tree/master/prowler/providers/aws/services/s3/s3_bucket_acl_prohibited))
-- In the [Prowler Hub](https://hub.prowler.com/). For a more human-readable view.
+- In the [Prowler Hub](https://hub.prowler.com/) for a more human-readable view.
 
 The best reference to understand how to implement a new check is following the [check creation documentation](/developer-guide/checks#creating-a-check) and taking other similar checks as reference.
 
diff --git a/docs/developer-guide/debugging.mdx b/docs/developer-guide/debugging.mdx
index 647b23c614..8bb6643eb7 100644
--- a/docs/developer-guide/debugging.mdx
+++ b/docs/developer-guide/debugging.mdx
@@ -10,7 +10,7 @@ Visual Studio Code (also referred to as VSCode) provides an integrated debugger
 
 ### Debugging Configuration Example
 
-The following file is an example of a [debugging configuration](https://code.visualstudio.com/docs/editor/debugging#_launch-configurations) file for [Virtual Studio Code](https://code.visualstudio.com/).
+The following file is an example of a [debugging configuration](https://code.visualstudio.com/docs/editor/debugging#_launch-configurations) file for [Visual Studio Code](https://code.visualstudio.com/).
 
 This file must be placed inside the *.vscode* directory and named *launch.json*:
 
diff --git a/docs/developer-guide/end2end-testing.mdx b/docs/developer-guide/end2end-testing.mdx
index df99de6fee..f8b54af222 100644
--- a/docs/developer-guide/end2end-testing.mdx
+++ b/docs/developer-guide/end2end-testing.mdx
@@ -50,7 +50,7 @@ When adding or maintaining E2E tests for Prowler Local Server, follow these guid
      ```
 
 5. **Tag and document scenarios**
-   - Follow the existing naming convention for suites and test cases (for example, `SCANS-E2E-001`, `PROVIDER-E2E-003`) and use tags such as `@e2e`, `@serial` and feature tags (for example, `@providers`, `@scans`,`@aws`) to filter and organize tests.
+   - Follow the existing naming convention for suites and test cases (for example, `SCANS-E2E-001`, `PROVIDER-E2E-003`) and use tags such as `@e2e`, `@serial` and feature tags (for example, `@providers`, `@scans`, `@aws`) to filter and organize tests.
 
    **Example:**
      ```typescript
@@ -71,7 +71,7 @@ When adding or maintaining E2E tests for Prowler Local Server, follow these guid
        }
      );
      ```
-   -  Document each one in the Markdown files under `ui/tests`, including **Priority**, **Tags**, **Description**, **Preconditions**, **Flow steps**, **Expected results**,**Key verification points** and **Notes**.
+   -  Document each one in the Markdown files under `ui/tests`, including **Priority**, **Tags**, **Description**, **Preconditions**, **Flow steps**, **Expected results**, **Key verification points** and **Notes**.
 
    **Example**
    ```Markdown
@@ -256,7 +256,7 @@ To execute E2E tests for Prowler Local Server:
    pnpm run test:e2e
    ```
 
-   This command runs Playwright with the configured projects
+   This command runs Playwright with the configured projects.
 
 2. **Run E2E tests with the Playwright UI runner**
 
diff --git a/docs/developer-guide/services.mdx b/docs/developer-guide/services.mdx
index 775c0f52c7..beda2dcd56 100644
--- a/docs/developer-guide/services.mdx
+++ b/docs/developer-guide/services.mdx
@@ -537,7 +537,7 @@ This architecture allows Prowler to efficiently scan AWS accounts with resources
 
 ## Best Practices
 
-- When available in the provider, use threading or parallelization utilities for all methods that can be parallelized by to maximize performance and reduce scan time.
+- When available in the provider, use threading or parallelization utilities for all methods that can be parallelized to maximize performance and reduce scan time.
 - Define a Pydantic `BaseModel` for every resource you manage, and use these models for all resource data handling.
 - Log every major step (start, success, error) in resource discovery and attribute collection for traceability and debugging; include as much context as possible.
 - Catch and log all exceptions, providing detailed context (region, subscription, resource, error type, line number) to aid troubleshooting.
diff --git a/docs/developer-guide/unit-testing.mdx b/docs/developer-guide/unit-testing.mdx
index 8c8ba5ed49..0a07257b0b 100644
--- a/docs/developer-guide/unit-testing.mdx
+++ b/docs/developer-guide/unit-testing.mdx
@@ -154,7 +154,7 @@ Failing to update this table when adding cross-service dependencies may result i
 For AWS provider, different testing approaches apply based on API coverage based on several criteria.
 
 <Note>
-Prowler leverages and contributes to the[Moto](https://github.com/getmoto/moto) library for mocking AWS infrastructure in tests.
+Prowler leverages and contributes to the [Moto](https://github.com/getmoto/moto) library for mocking AWS infrastructure in tests.
 
 </Note>
 - AWS API Calls Covered by [Moto](https://github.com/getmoto/moto):
@@ -408,7 +408,7 @@ In all above scenarios, check execution must occur within the context of mocked
 
 When a service requires API calls that are partially covered by the Moto decorator, additional mocking is necessary. In such cases, custom mocked API calls must be implemented alongside Moto to ensure full coverage.
 
-To achieve this, mock the `botocore.client.BaseClient._make_api_call` function—the method responsible for making actual API requests to AWS—using `mock.patch <https://docs.python.org/3/library/unittest.mock.html#patch>`:
+To achieve this, mock the `botocore.client.BaseClient._make_api_call` function—the method responsible for making actual API requests to AWS—using [`mock.patch`](https://docs.python.org/3/library/unittest.mock.html#patch):
 
 ```python
 
@@ -475,7 +475,7 @@ However, if additional `moto` decorators are applied alongside the patch, Moto w
 
 </Note>
 <Note>
-The source of the above implementation can be found here:[Patch Other Services with Moto](https://docs.getmoto.org/en/latest/docs/services/patching\_other\_services.html)
+The source of the above implementation can be found here: [Patch Other Services with Moto](https://docs.getmoto.org/en/latest/docs/services/patching_other_services.html)
 
 </Note>
 #### Mocking Several Services
@@ -603,7 +603,7 @@ with mock.patch(
 
 will cause that the service is initialized only once—at the moment of mocking out `set_mocked_aws_provider([<region>])` using `mock.patch`.
 
-Later, when Python attempts to import the client at the check level, the execution continues using`from prowler.providers.<provider>.services.<service>.<service>_client`. As a result of it being already mocked out, the execution will continue using `service_client` without getting into `<service>_client.py`.
+Later, when Python attempts to import the client at the check level, the execution continues using `from prowler.providers.<provider>.services.<service>.<service>_client`. As a result of it being already mocked out, the execution will continue using `service_client` without getting into `<service>_client.py`.
 
 ### Testing AWS Services
 
diff --git a/docs/getting-started/basic-usage/prowler-cli.mdx b/docs/getting-started/basic-usage/prowler-cli.mdx
index 0efa1ce8f1..ebf3c6515e 100644
--- a/docs/getting-started/basic-usage/prowler-cli.mdx
+++ b/docs/getting-started/basic-usage/prowler-cli.mdx
@@ -4,7 +4,7 @@ title: 'Basic Usage'
 
 ## Running Prowler
 
-Running Prowler requires specifying the provider (e.g `aws`, `gcp`, `azure`, `kubernetes`, `m365`, `github`, `iac` or `mongodbatlas`):
+Running Prowler requires specifying the provider (e.g. `aws`, `gcp`, `azure`, `kubernetes`, `m365`, `github`, `iac` or `mongodbatlas`):
 
 <Note>
 If no provider is specified, AWS is used by default for backward compatibility with Prowler v2.
diff --git a/docs/user-guide/cli/tutorials/pentesting.mdx b/docs/user-guide/cli/tutorials/pentesting.mdx
index a9a8c728df..0d7be461d7 100644
--- a/docs/user-guide/cli/tutorials/pentesting.mdx
+++ b/docs/user-guide/cli/tutorials/pentesting.mdx
@@ -43,8 +43,7 @@ prowler <provider> --categories secrets
 
 Several checks analyse resources that are exposed to the Internet, these are:
 
-1. apigateway\_restapi\_public
-
+- apigateway\_restapi\_public
 - appstream\_fleet\_default\_internet\_access\_disabled
 - awslambda\_function\_not\_publicly\_accessible
 - ec2\_ami\_public
@@ -58,8 +57,6 @@ Several checks analyse resources that are exposed to the Internet, these are:
 - ecr\_repositories\_not\_publicly\_accessible
 - eks\_control\_plane\_endpoint\_access\_restricted
 - eks\_endpoints\_not\_publicly\_accessible
-- eks\_control\_plane\_endpoint\_access\_restricted
-- eks\_endpoints\_not\_publicly\_accessible
 - elbv2\_internet\_facing
 - kms\_key\_not\_publicly\_accessible
 - opensearch\_service\_domains\_not\_publicly\_accessible
diff --git a/docs/user-guide/tutorials/prowler-app.mdx b/docs/user-guide/tutorials/prowler-app.mdx
index 84095c7da2..ddbd489cdc 100644
--- a/docs/user-guide/tutorials/prowler-app.mdx
+++ b/docs/user-guide/tutorials/prowler-app.mdx
@@ -166,6 +166,6 @@ Once your scan has finished, you don’t need to grab the entire ZIP—just pull
 <Note>
 **API Note**
 
-To fetch a single compliance report via API, see the Retrieve compliance report as CSV endpoint in the Prowler API Reference.[Prowler API Reference - Retrieve compliance report as CSV](https://api.prowler.com/api/v1/docs#tag/Scan/operation/scans_compliance_retrieve)
+To fetch a single compliance report via API, see the Retrieve compliance report as CSV endpoint in the Prowler API Reference. [Prowler API Reference - Retrieve compliance report as CSV](https://api.prowler.com/api/v1/docs#tag/Scan/operation/scans_compliance_retrieve)
 
 </Note>

From 03268445274b3d9052db1badab184e70efb8391f Mon Sep 17 00:00:00 2001
From: ye11oc4t <138095093+ye11oc4t@users.noreply.github.com>
Date: Mon, 31 Aug 2026 17:15:29 +0900
Subject: [PATCH 03/77] fix(github): paginate repository discovery (#12460)

Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
---
 .../github-repository-pagination.fixed.md     |   1 +
 .../services/repository/repository_service.py | 104 ++++++++--
 .../repository/repository_service_test.py     | 191 ++++++++++++++++++
 3 files changed, 277 insertions(+), 19 deletions(-)
 create mode 100644 prowler/changelog.d/github-repository-pagination.fixed.md

diff --git a/prowler/changelog.d/github-repository-pagination.fixed.md b/prowler/changelog.d/github-repository-pagination.fixed.md
new file mode 100644
index 0000000000..e9add3d1a1
--- /dev/null
+++ b/prowler/changelog.d/github-repository-pagination.fixed.md
@@ -0,0 +1 @@
+GitHub repository discovery for unscoped scans now paginates beyond the first 100 accessible repositories instead of silently scanning only the first page
diff --git a/prowler/providers/github/services/repository/repository_service.py b/prowler/providers/github/services/repository/repository_service.py
index dc41df2ea5..f81d9781bb 100644
--- a/prowler/providers/github/services/repository/repository_service.py
+++ b/prowler/providers/github/services/repository/repository_service.py
@@ -10,6 +10,8 @@ from prowler.lib.logger import logger
 from prowler.providers.github.lib.service.service import GithubService
 from prowler.providers.github.models import GithubAppIdentityInfo
 
+GITHUB_GRAPHQL_TIMEOUT = (10, 60)
+
 
 class Repository(GithubService):
     def __init__(self, provider):
@@ -65,41 +67,105 @@ class Repository(GithubService):
             "Content-Type": "application/json",
         }
         query = """
-        {
+        query ($cursor: String) {
           viewer {
-            repositories(first: 100, affiliations: [OWNER, ORGANIZATION_MEMBER]) {
+            repositories(
+              first: 100
+              after: $cursor
+              affiliations: [OWNER, ORGANIZATION_MEMBER]
+            ) {
               nodes {
                 nameWithOwner
               }
+              pageInfo {
+                hasNextPage
+                endCursor
+              }
             }
           }
         }
         """
 
+        repositories = []
+        cursor = None
+        seen_cursors = set()
+
         try:
-            response = requests.post(
-                graphql_url, json={"query": query}, headers=headers
-            )
-            response.raise_for_status()
-            data = response.json()
+            while True:
+                response = requests.post(
+                    graphql_url,
+                    json={"query": query, "variables": {"cursor": cursor}},
+                    headers=headers,
+                    timeout=GITHUB_GRAPHQL_TIMEOUT,
+                )
+                response.raise_for_status()
+                data = response.json()
 
-            if "errors" in data:
-                logger.error(f"Error in GraphQL query: {data['errors']}")
-                return []
+                errors = data.get("errors") if isinstance(data, dict) else None
+                repository_connection = (
+                    ((data.get("data") or {}).get("viewer") or {}).get("repositories")
+                    if isinstance(data, dict)
+                    else None
+                )
+                if not isinstance(repository_connection, dict):
+                    logger.error(
+                        f"Error in GraphQL query: {errors or 'invalid response'}"
+                    )
+                    return repositories
+                if errors:
+                    # GitHub returns partial responses: repositories the token
+                    # cannot access (e.g. behind organization SAML enforcement)
+                    # come back as null nodes together with an "errors" entry,
+                    # while the rest of the page is valid.
+                    logger.warning(
+                        f"GitHub GraphQL returned errors while discovering repositories, "
+                        f"some repositories may be skipped: {errors}"
+                    )
 
-            repo_nodes = (
-                data.get("data", {})
-                .get("viewer", {})
-                .get("repositories", {})
-                .get("nodes", [])
-            )
-            return [repo["nameWithOwner"] for repo in repo_nodes]
+                repo_nodes = repository_connection.get("nodes")
+                page_info = repository_connection.get("pageInfo")
+                if (
+                    not isinstance(repo_nodes, list)
+                    or not isinstance(page_info, dict)
+                    or not isinstance(page_info.get("hasNextPage"), bool)
+                ):
+                    logger.error(
+                        "GitHub GraphQL returned an invalid repositories page; "
+                        "repository discovery may be incomplete."
+                    )
+                    return repositories
 
-        except requests.exceptions.RequestException as error:
+                for repo_node in repo_nodes:
+                    if not repo_node:
+                        logger.warning(
+                            "Skipping a repository the token cannot access during discovery."
+                        )
+                        continue
+                    repositories.append(repo_node["nameWithOwner"])
+
+                if not page_info["hasNextPage"]:
+                    return repositories
+
+                cursor = page_info.get("endCursor")
+                if not cursor or cursor in seen_cursors:
+                    logger.error(
+                        "GitHub GraphQL pagination returned an invalid cursor; "
+                        "repository discovery may be incomplete."
+                    )
+                    return repositories
+                seen_cursors.add(cursor)
+
+        except (
+            requests.exceptions.RequestException,
+            ValueError,
+            KeyError,
+            TypeError,
+            AttributeError,
+        ) as error:
             logger.error(
                 f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
             )
-            return []
+            return repositories
 
     def _default_branch_matches_rule_pattern(
         self, pattern: str, default_branch: str
diff --git a/tests/providers/github/services/repository/repository_service_test.py b/tests/providers/github/services/repository/repository_service_test.py
index 4b77567e32..af174a6e54 100644
--- a/tests/providers/github/services/repository/repository_service_test.py
+++ b/tests/providers/github/services/repository/repository_service_test.py
@@ -1165,3 +1165,194 @@ class Test_Repository_List_Rate_Limit_Propagation:
         ):
             with raises(RateLimitExceededException):
                 repository_service._list_repositories()
+
+
+class Test_Repository_GraphQL_Pagination:
+    """Accessible repository discovery must follow GraphQL pagination."""
+
+    def _repository_service(self):
+        provider = set_mocked_github_provider()
+        provider.repositories = []
+        provider.organizations = []
+        with patch.object(Repository, "__init__", lambda *_: None):
+            repository_service = Repository(provider)
+        repository_service.clients = [MagicMock()]
+        repository_service.provider = provider
+        return repository_service
+
+    @staticmethod
+    def _graphql_response(nodes, has_next_page=False, end_cursor=None, errors=None):
+        response = MagicMock()
+        payload = {
+            "data": {
+                "viewer": {
+                    "repositories": {
+                        "nodes": nodes,
+                        "pageInfo": {
+                            "hasNextPage": has_next_page,
+                            "endCursor": end_cursor,
+                        },
+                    }
+                }
+            }
+        }
+        if errors is not None:
+            payload["errors"] = errors
+        response.json.return_value = payload
+        return response
+
+    def test_graphql_paginates_accessible_repositories(self):
+        repository_service = self._repository_service()
+        first_page_names = [f"owner/repo-{index}" for index in range(100)]
+        second_page_names = ["owner/repo-100"]
+        pages = [
+            self._graphql_response(
+                [{"nameWithOwner": name} for name in first_page_names],
+                has_next_page=True,
+                end_cursor="page-2",
+            ),
+            self._graphql_response(
+                [{"nameWithOwner": name} for name in second_page_names]
+            ),
+        ]
+
+        with patch("requests.post", side_effect=pages) as mock_post:
+            repositories = repository_service._get_accessible_repos_graphql()
+
+        assert repositories == first_page_names + second_page_names
+        assert mock_post.call_count == 2
+        first_request, second_request = mock_post.call_args_list
+        assert "after: $cursor" in first_request.kwargs["json"]["query"]
+        assert first_request.kwargs["json"]["variables"] == {"cursor": None}
+        assert second_request.kwargs["json"]["variables"] == {"cursor": "page-2"}
+        assert first_request.kwargs["timeout"] == (10, 60)
+
+    def test_graphql_keeps_accessible_repositories_on_partial_errors(self):
+        """Per-node errors (e.g. SAML-protected repositories) must not drop the page."""
+        repository_service = self._repository_service()
+        response = self._graphql_response(
+            [{"nameWithOwner": "owner/visible"}, None],
+            errors=[
+                {
+                    "type": "FORBIDDEN",
+                    "path": ["viewer", "repositories", "nodes", 1],
+                    "message": "Resource protected by organization SAML enforcement.",
+                }
+            ],
+        )
+
+        with (
+            patch("requests.post", return_value=response),
+            patch(
+                "prowler.providers.github.services.repository.repository_service.logger"
+            ) as mock_logger,
+        ):
+            repositories = repository_service._get_accessible_repos_graphql()
+
+        assert repositories == ["owner/visible"]
+        assert mock_logger.warning.call_count == 2
+        assert "SAML" in str(mock_logger.warning.call_args_list[0])
+
+    def test_graphql_later_page_failure_keeps_collected_repositories(self):
+        repository_service = self._repository_service()
+        first_page = self._graphql_response(
+            [{"nameWithOwner": "owner/first"}], has_next_page=True, end_cursor="page-2"
+        )
+
+        with (
+            patch(
+                "requests.post",
+                side_effect=[
+                    first_page,
+                    requests.exceptions.Timeout("second page timed out"),
+                ],
+            ) as mock_post,
+            patch(
+                "prowler.providers.github.services.repository.repository_service.logger"
+            ) as mock_logger,
+        ):
+            repositories = repository_service._get_accessible_repos_graphql()
+
+        assert repositories == ["owner/first"]
+        assert mock_post.call_count == 2
+        mock_logger.error.assert_called_once()
+        assert "Timeout" in str(mock_logger.error.call_args)
+
+    def test_graphql_errors_without_data_return_empty_list(self):
+        repository_service = self._repository_service()
+        response = MagicMock()
+        response.json.return_value = {
+            "data": None,
+            "errors": [{"type": "RATE_LIMITED", "message": "API rate limit exceeded"}],
+        }
+
+        with (
+            patch("requests.post", return_value=response),
+            patch(
+                "prowler.providers.github.services.repository.repository_service.logger"
+            ) as mock_logger,
+        ):
+            repositories = repository_service._get_accessible_repos_graphql()
+
+        assert repositories == []
+        assert "RATE_LIMITED" in str(mock_logger.error.call_args)
+
+    def test_graphql_stops_on_repeated_cursor(self):
+        repository_service = self._repository_service()
+        pages = [
+            self._graphql_response(
+                [{"nameWithOwner": "owner/a"}], has_next_page=True, end_cursor="same"
+            ),
+            self._graphql_response(
+                [{"nameWithOwner": "owner/b"}], has_next_page=True, end_cursor="same"
+            ),
+        ]
+
+        with (
+            patch("requests.post", side_effect=pages) as mock_post,
+            patch(
+                "prowler.providers.github.services.repository.repository_service.logger"
+            ) as mock_logger,
+        ):
+            repositories = repository_service._get_accessible_repos_graphql()
+
+        assert repositories == ["owner/a", "owner/b"]
+        assert mock_post.call_count == 2
+        mock_logger.error.assert_called_once()
+
+    @pytest.mark.parametrize(
+        "nodes, page_info",
+        [
+            ("not-a-list", {"hasNextPage": False}),
+            ({}, {"hasNextPage": False}),
+            (None, {"hasNextPage": False}),
+            ([{"nameWithOwner": "owner/b"}], ["invalid"]),
+            ([{"nameWithOwner": "owner/b"}], "invalid"),
+            ([{"nameWithOwner": "owner/b"}], []),
+            ([{"nameWithOwner": "owner/b"}], None),
+            ([{"nameWithOwner": "owner/b"}], {}),
+            ([{"nameWithOwner": "owner/b"}], {"hasNextPage": "false"}),
+        ],
+    )
+    def test_graphql_invalid_page_keeps_collected_repositories(self, nodes, page_info):
+        repository_service = self._repository_service()
+        first_page = self._graphql_response(
+            [{"nameWithOwner": "owner/a"}], has_next_page=True, end_cursor="page-2"
+        )
+        invalid_page = MagicMock()
+        invalid_page.json.return_value = {
+            "data": {
+                "viewer": {"repositories": {"nodes": nodes, "pageInfo": page_info}}
+            }
+        }
+
+        with (
+            patch("requests.post", side_effect=[first_page, invalid_page]),
+            patch(
+                "prowler.providers.github.services.repository.repository_service.logger"
+            ) as mock_logger,
+        ):
+            repositories = repository_service._get_accessible_repos_graphql()
+
+        assert repositories == ["owner/a"]
+        mock_logger.error.assert_called_once()

From 89988dada574973c97d303a9c83f0b93c63d7535 Mon Sep 17 00:00:00 2001
From: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com>
Date: Mon, 31 Aug 2026 10:49:10 +0200
Subject: [PATCH 04/77] fix(ui): refresh cached permissions after token
 rotation (#12640)

---
 ui/actions/auth/auth.test.ts                  |  92 ++++
 ui/actions/auth/auth.ts                       |  42 +-
 ui/auth.config.test.ts                        | 444 ++++++++++++++++++
 ui/auth.config.ts                             |  29 ++
 .../refresh-cached-permissions.fixed.md       |   1 +
 ui/lib/auth-errors.ts                         |   9 +
 6 files changed, 600 insertions(+), 17 deletions(-)
 create mode 100644 ui/changelog.d/refresh-cached-permissions.fixed.md
 create mode 100644 ui/lib/auth-errors.ts

diff --git a/ui/actions/auth/auth.test.ts b/ui/actions/auth/auth.test.ts
index 9b8b44e05b..016747b065 100644
--- a/ui/actions/auth/auth.test.ts
+++ b/ui/actions/auth/auth.test.ts
@@ -154,4 +154,96 @@ describe("auth actions", () => {
     expect(result.permissions.manage_lighthouse_ai_configuration).toBe(false);
     expect(result.permissions.manage_users).toBe(true);
   });
+
+  it("should forward an abort signal when loading the current user", async () => {
+    // Given
+    mockUserMe({ manage_users: true });
+    const abortController = new AbortController();
+
+    // When
+    await getUserByMe("access-token", abortController.signal);
+
+    // Then
+    expect(fetchMock).toHaveBeenCalledWith(
+      "https://api.example.com/api/v1/users/me?include=roles",
+      expect.objectContaining({ signal: abortController.signal }),
+    );
+  });
+
+  it.each([
+    {
+      status: 401,
+      detail: "Rejected by API",
+      message: "Invalid or expired token",
+    },
+    {
+      status: 403,
+      detail: "Database password: super-secret",
+      message: "Access denied",
+    },
+    { status: 404, detail: "Rejected by API", message: "User not found" },
+  ])(
+    "should preserve a $status status when loading the current user fails",
+    async ({ status, detail, message }) => {
+      // Given
+      fetchMock.mockResolvedValue(
+        new Response(JSON.stringify({ errors: [{ detail }] }), { status }),
+      );
+
+      // When
+      const result = getUserByMe("access-token");
+
+      // Then
+      await expect(result).rejects.toMatchObject({ message, status });
+    },
+  );
+
+  it("should preserve a 401 status when the error body is not JSON", async () => {
+    // Given
+    fetchMock.mockResolvedValue(new Response("Unauthorized", { status: 401 }));
+
+    // When
+    const result = getUserByMe("access-token");
+
+    // Then
+    await expect(result).rejects.toMatchObject({
+      message: "Invalid or expired token",
+      status: 401,
+    });
+  });
+
+  it("should preserve a 403 status when the error body is not JSON", async () => {
+    // Given
+    fetchMock.mockResolvedValue(new Response("Forbidden", { status: 403 }));
+
+    // When
+    const result = getUserByMe("access-token");
+
+    // Then
+    await expect(result).rejects.toMatchObject({
+      message: "Access denied",
+      status: 403,
+    });
+  });
+
+  it("should not expose upstream details for unexpected errors", async () => {
+    // Given
+    fetchMock.mockResolvedValue(
+      new Response(
+        JSON.stringify({
+          errors: [{ detail: "Database password: super-secret" }],
+        }),
+        { status: 500 },
+      ),
+    );
+
+    // When
+    const result = getUserByMe("access-token");
+
+    // Then
+    await expect(result).rejects.toMatchObject({
+      message: "Unable to load user",
+      status: 500,
+    });
+  });
 });
diff --git a/ui/actions/auth/auth.ts b/ui/actions/auth/auth.ts
index 646c3d1426..0df5fe81c9 100644
--- a/ui/actions/auth/auth.ts
+++ b/ui/actions/auth/auth.ts
@@ -4,6 +4,7 @@ import { AuthError } from "next-auth";
 
 import { signIn, signOut } from "@/auth.config";
 import { apiBaseUrl } from "@/lib";
+import { UserMeError } from "@/lib/auth-errors";
 import { addAuthEvent } from "@/lib/sentry-breadcrumbs";
 import type { UtmParams } from "@/lib/utm";
 import type { SignInFormData, SignUpFormData } from "@/types";
@@ -140,7 +141,10 @@ export const getToken = async (formData: SignInFormData) => {
   }
 };
 
-export const getUserByMe = async (accessToken: string) => {
+export const getUserByMe = async (
+  accessToken: string,
+  signal?: AbortSignal,
+) => {
   const url = new URL(`${apiBaseUrl}/users/me?include=roles`);
 
   try {
@@ -150,25 +154,23 @@ export const getUserByMe = async (accessToken: string) => {
         Accept: "application/vnd.api+json",
         Authorization: `Bearer ${accessToken}`,
       },
+      signal,
     });
 
-    const parsedResponse = await response.json();
     if (!response.ok) {
-      // Handle different HTTP error codes
-      switch (response.status) {
-        case 401:
-          throw new Error("Invalid or expired token");
-        case 403:
-          throw new Error(parsedResponse.errors?.[0]?.detail);
-        case 404:
-          throw new Error("User not found");
-        default:
-          throw new Error(
-            parsedResponse.errors?.[0]?.detail || "Unknown error",
-          );
-      }
+      const errorMessage =
+        response.status === 401
+          ? "Invalid or expired token"
+          : response.status === 403
+            ? "Access denied"
+            : response.status === 404
+              ? "User not found"
+              : "Unable to load user";
+      throw new UserMeError(errorMessage, response.status);
     }
 
+    const parsedResponse = await response.json();
+
     const userRole = parsedResponse.included?.find(
       (item: any) => item.type === "roles",
     );
@@ -193,8 +195,14 @@ export const getUserByMe = async (accessToken: string) => {
       dateJoined: parsedResponse.data.attributes.date_joined,
       permissions,
     };
-  } catch (error: any) {
-    throw new Error(error.message || "Network error or server unreachable");
+  } catch (error: unknown) {
+    if (error instanceof UserMeError) throw error;
+
+    throw new UserMeError(
+      error instanceof Error
+        ? error.message
+        : "Network error or server unreachable",
+    );
   }
 };
 
diff --git a/ui/auth.config.test.ts b/ui/auth.config.test.ts
index 7125ce9845..a95461cb59 100644
--- a/ui/auth.config.test.ts
+++ b/ui/auth.config.test.ts
@@ -1,6 +1,7 @@
 import { beforeEach, describe, expect, it, vi } from "vitest";
 
 import { authConfig } from "./auth.config";
+import { UserMeError } from "./lib/auth-errors";
 import type { RolePermissionAttributes } from "./types/users";
 
 const { getUserByMeMock } = vi.hoisted(() => ({
@@ -45,6 +46,35 @@ const ELEVATED_PERMISSIONS: RolePermissionAttributes = {
   manage_scans: true,
 };
 
+const accessTokenFor = (tenantId: string, expiration: number) =>
+  `header.${Buffer.from(
+    JSON.stringify({ sub: "user-1", tenant_id: tenantId, exp: expiration }),
+  ).toString("base64url")}.signature`;
+
+const successfulRefreshResponse = (accessToken: string, refreshToken: string) =>
+  new Response(
+    JSON.stringify({
+      data: {
+        attributes: {
+          access: accessToken,
+          refresh: refreshToken,
+        },
+      },
+    }),
+    { status: 200 },
+  );
+
+const mockSuccessfulRefresh = (
+  accessToken: string,
+  refreshToken = "new-refresh-token",
+) => {
+  const fetchMock = vi
+    .fn()
+    .mockResolvedValue(successfulRefreshResponse(accessToken, refreshToken));
+  vi.stubGlobal("fetch", fetchMock);
+  return fetchMock;
+};
+
 describe("authConfig JWT callback", () => {
   beforeEach(() => {
     vi.clearAllMocks();
@@ -194,4 +224,418 @@ describe("authConfig JWT callback", () => {
     });
     expect(result.error).toBeUndefined();
   });
+
+  it("should replace restricted permissions after access token refresh", async () => {
+    // Given
+    const currentAccessToken = accessTokenFor("stale-tenant", 1);
+    const newAccessToken = accessTokenFor("tenant-1", 4_102_444_800);
+    mockSuccessfulRefresh(newAccessToken);
+    getUserByMeMock.mockResolvedValue({
+      name: "Tenant User",
+      email: "tenant@example.com",
+      company: "Tenant Company",
+      dateJoined: "2026-01-01",
+      permissions: ELEVATED_PERMISSIONS,
+    });
+    const jwtCallback = authConfig.callbacks?.jwt;
+    if (!jwtCallback) throw new Error("JWT callback is not configured");
+
+    // When
+    const result = await jwtCallback({
+      token: {
+        accessToken: currentAccessToken,
+        refreshToken: "current-refresh-token",
+        user: {
+          name: "Tenant User",
+          email: "tenant@example.com",
+          dateJoined: "2026-01-01",
+          permissions: RESTRICTED_PERMISSIONS,
+        },
+      },
+      user: {} as Parameters<typeof jwtCallback>[0]["user"],
+    });
+
+    // Then
+    expect(getUserByMeMock).toHaveBeenCalledWith(
+      newAccessToken,
+      expect.any(AbortSignal),
+    );
+    expect(result).toMatchObject({
+      accessToken: newAccessToken,
+      refreshToken: "new-refresh-token",
+      tenant_id: "tenant-1",
+      user: {
+        permissions: ELEVATED_PERMISSIONS,
+      },
+    });
+    expect(result.error).toBeUndefined();
+  });
+
+  it("should replace elevated permissions when access is revoked", async () => {
+    // Given
+    const currentAccessToken = accessTokenFor("tenant-1", 1);
+    const newAccessToken = accessTokenFor("tenant-1", 4_102_444_800);
+    mockSuccessfulRefresh(newAccessToken);
+    getUserByMeMock.mockResolvedValue({
+      name: "Tenant User",
+      email: "tenant@example.com",
+      company: "Tenant Company",
+      dateJoined: "2026-01-01",
+      permissions: RESTRICTED_PERMISSIONS,
+    });
+    const jwtCallback = authConfig.callbacks?.jwt;
+    if (!jwtCallback) throw new Error("JWT callback is not configured");
+
+    // When
+    const result = await jwtCallback({
+      token: {
+        accessToken: currentAccessToken,
+        refreshToken: "current-refresh-token",
+        user: {
+          name: "Tenant User",
+          email: "tenant@example.com",
+          dateJoined: "2026-01-01",
+          permissions: ELEVATED_PERMISSIONS,
+        },
+      },
+      user: {} as Parameters<typeof jwtCallback>[0]["user"],
+    });
+
+    // Then
+    expect(getUserByMeMock).toHaveBeenCalledWith(
+      newAccessToken,
+      expect.any(AbortSignal),
+    );
+    expect(result.user?.permissions).toEqual(RESTRICTED_PERMISSIONS);
+    expect(result.error).toBeUndefined();
+  });
+
+  it("should keep the refreshed tokens and cached user when reloading the user fails", async () => {
+    // Given
+    const currentAccessToken = accessTokenFor("tenant-1", 1);
+    const newAccessToken = accessTokenFor("tenant-1", 4_102_444_800);
+    const warnSpy = vi
+      .spyOn(console, "warn")
+      .mockImplementation(() => undefined);
+    mockSuccessfulRefresh(newAccessToken);
+    getUserByMeMock.mockRejectedValue(
+      new UserMeError("Sensitive backend detail", 500),
+    );
+    const jwtCallback = authConfig.callbacks?.jwt;
+    if (!jwtCallback) throw new Error("JWT callback is not configured");
+    const sessionCallback = authConfig.callbacks?.session;
+    if (!sessionCallback) throw new Error("Session callback is not configured");
+    const cachedUser = {
+      name: "Tenant User",
+      email: "tenant@example.com",
+      dateJoined: "2026-01-01",
+      permissions: ELEVATED_PERMISSIONS,
+    };
+
+    // When
+    const result = await jwtCallback({
+      token: {
+        accessToken: currentAccessToken,
+        refreshToken: "current-refresh-token",
+        user: cachedUser,
+      },
+      user: {} as Parameters<typeof jwtCallback>[0]["user"],
+    });
+    const session = await sessionCallback({
+      session: {
+        expires: "2026-12-31T23:59:59.999Z",
+        user: { name: "Tenant User" },
+      },
+      token: result,
+    } as Parameters<typeof sessionCallback>[0]);
+
+    // Then
+    expect(session).toMatchObject({
+      accessToken: newAccessToken,
+      refreshToken: "new-refresh-token",
+      tenantId: "tenant-1",
+      user: cachedUser,
+    });
+    expect(result.error).toBeUndefined();
+    expect(warnSpy).toHaveBeenCalledWith(
+      "Unable to refresh user after access token refresh",
+    );
+  });
+
+  it("should bound a pending user reload and keep the refreshed session", async () => {
+    // Given
+    const currentAccessToken = accessTokenFor("tenant-1", 1);
+    const newAccessToken = accessTokenFor("tenant-1", 4_102_444_800);
+    const abortController = new AbortController();
+    const timeoutSpy = vi
+      .spyOn(AbortSignal, "timeout")
+      .mockReturnValue(abortController.signal);
+    vi.spyOn(console, "warn").mockImplementation(() => undefined);
+    mockSuccessfulRefresh(newAccessToken);
+    getUserByMeMock.mockImplementation(
+      (_accessToken: string, signal?: AbortSignal) => {
+        if (!signal) return Promise.reject(new Error("Missing abort signal"));
+
+        return new Promise((_resolve, reject) => {
+          signal.addEventListener("abort", () => reject(signal.reason), {
+            once: true,
+          });
+        });
+      },
+    );
+    const jwtCallback = authConfig.callbacks?.jwt;
+    if (!jwtCallback) throw new Error("JWT callback is not configured");
+    const cachedUser = {
+      name: "Tenant User",
+      email: "tenant@example.com",
+      dateJoined: "2026-01-01",
+      permissions: ELEVATED_PERMISSIONS,
+    };
+
+    // When
+    const resultPromise = jwtCallback({
+      token: {
+        accessToken: currentAccessToken,
+        refreshToken: "current-refresh-token",
+        user: cachedUser,
+      },
+      user: {} as Parameters<typeof jwtCallback>[0]["user"],
+    });
+    await vi.waitFor(() => expect(getUserByMeMock).toHaveBeenCalled());
+
+    // Then
+    expect(timeoutSpy).toHaveBeenCalledWith(5_000);
+    expect(getUserByMeMock).toHaveBeenCalledWith(
+      newAccessToken,
+      abortController.signal,
+    );
+
+    abortController.abort(
+      new DOMException("Request timed out", "TimeoutError"),
+    );
+    await expect(resultPromise).resolves.toMatchObject({
+      accessToken: newAccessToken,
+      refreshToken: "new-refresh-token",
+      user: cachedUser,
+      error: undefined,
+    });
+  });
+
+  it.each([401, 403, 404])(
+    "should invalidate the session when reloading the user returns %i",
+    async (status) => {
+      // Given
+      const currentAccessToken = accessTokenFor("tenant-1", 1);
+      const newAccessToken = accessTokenFor("tenant-1", 4_102_444_800);
+      vi.spyOn(console, "warn").mockImplementation(() => undefined);
+      mockSuccessfulRefresh(newAccessToken);
+      getUserByMeMock.mockRejectedValue(
+        new UserMeError("Unable to load user", status),
+      );
+      const jwtCallback = authConfig.callbacks?.jwt;
+      if (!jwtCallback) throw new Error("JWT callback is not configured");
+      const sessionCallback = authConfig.callbacks?.session;
+      if (!sessionCallback)
+        throw new Error("Session callback is not configured");
+
+      // When
+      const result = await jwtCallback({
+        token: {
+          accessToken: currentAccessToken,
+          refreshToken: "current-refresh-token",
+          user: {
+            name: "Tenant User",
+            email: "tenant@example.com",
+            dateJoined: "2026-01-01",
+            permissions: ELEVATED_PERMISSIONS,
+          },
+        },
+        user: {} as Parameters<typeof jwtCallback>[0]["user"],
+      });
+      const session = await sessionCallback({
+        session: {
+          expires: "2026-12-31T23:59:59.999Z",
+          user: { name: "Tenant User" },
+        },
+        token: result,
+      } as Parameters<typeof sessionCallback>[0]);
+
+      // Then
+      expect(result.user).toBeUndefined();
+      expect(result.accessToken).toBeUndefined();
+      expect(result.refreshToken).toBeUndefined();
+      expect(result.error).toBe("RefreshAccessTokenError");
+      expect(session.user).toBeUndefined();
+      expect(session.accessToken).toBeUndefined();
+      expect(session.refreshToken).toBeUndefined();
+    },
+  );
+
+  it("should invalidate the session when access token refresh fails", async () => {
+    // Given
+    const currentAccessToken = accessTokenFor("tenant-1", 1);
+    vi.spyOn(console, "warn").mockImplementation(() => undefined);
+    vi.stubGlobal(
+      "fetch",
+      vi
+        .fn()
+        .mockResolvedValue(
+          new Response(
+            JSON.stringify({ errors: [{ detail: "Refresh token expired" }] }),
+            { status: 401 },
+          ),
+        ),
+    );
+    const jwtCallback = authConfig.callbacks?.jwt;
+    if (!jwtCallback) throw new Error("JWT callback is not configured");
+    const sessionCallback = authConfig.callbacks?.session;
+    if (!sessionCallback) throw new Error("Session callback is not configured");
+
+    // When
+    const result = await jwtCallback({
+      token: {
+        accessToken: currentAccessToken,
+        refreshToken: "expired-refresh-token",
+        user: {
+          name: "Tenant User",
+          email: "tenant@example.com",
+          dateJoined: "2026-01-01",
+          permissions: ELEVATED_PERMISSIONS,
+        },
+      },
+      user: {} as Parameters<typeof jwtCallback>[0]["user"],
+    });
+    const session = await sessionCallback({
+      session: {
+        expires: "2026-12-31T23:59:59.999Z",
+        user: { name: "Tenant User" },
+      },
+      token: result,
+    } as Parameters<typeof sessionCallback>[0]);
+
+    // Then
+    expect(getUserByMeMock).not.toHaveBeenCalled();
+    expect(result.error).toBe("RefreshAccessTokenError");
+    expect(session.error).toBe("RefreshAccessTokenError");
+    expect(session.user).toBeUndefined();
+    expect(session.accessToken).toBeUndefined();
+    expect(session.refreshToken).toBeUndefined();
+    expect(session.tenantId).toBeUndefined();
+  });
+
+  it("should deduplicate concurrent token and user refreshes", async () => {
+    // Given
+    const currentAccessToken = accessTokenFor("tenant-1", 1);
+    const newAccessToken = accessTokenFor("tenant-1", 4_102_444_800);
+    const fetchMock = mockSuccessfulRefresh(newAccessToken);
+    getUserByMeMock.mockResolvedValue({
+      name: "Tenant User",
+      email: "tenant@example.com",
+      company: "Tenant Company",
+      dateJoined: "2026-01-01",
+      permissions: ELEVATED_PERMISSIONS,
+    });
+    const jwtCallback = authConfig.callbacks?.jwt;
+    if (!jwtCallback) throw new Error("JWT callback is not configured");
+    const currentToken = {
+      accessToken: currentAccessToken,
+      refreshToken: "shared-refresh-token",
+      user: {
+        name: "Tenant User",
+        email: "tenant@example.com",
+        dateJoined: "2026-01-01",
+        permissions: RESTRICTED_PERMISSIONS,
+      },
+    };
+
+    // When
+    const [firstResult, secondResult] = await Promise.all([
+      jwtCallback({
+        token: { ...currentToken },
+        user: {} as Parameters<typeof jwtCallback>[0]["user"],
+      }),
+      jwtCallback({
+        token: { ...currentToken },
+        user: {} as Parameters<typeof jwtCallback>[0]["user"],
+      }),
+    ]);
+
+    // Then
+    expect(fetchMock).toHaveBeenCalledTimes(1);
+    expect(getUserByMeMock).toHaveBeenCalledTimes(1);
+    expect(firstResult).toEqual(secondResult);
+    expect(firstResult.user?.permissions).toEqual(ELEVATED_PERMISSIONS);
+  });
+
+  it("should retry reloading the user on the next token rotation", async () => {
+    // Given
+    const currentAccessToken = accessTokenFor("tenant-1", 1);
+    const firstAccessToken = accessTokenFor("tenant-1", 1);
+    const secondAccessToken = accessTokenFor("tenant-1", 4_102_444_800);
+    vi.spyOn(console, "warn").mockImplementation(() => undefined);
+    const fetchMock = vi
+      .fn()
+      .mockResolvedValueOnce(
+        successfulRefreshResponse(
+          firstAccessToken,
+          "first-rotated-refresh-token",
+        ),
+      )
+      .mockResolvedValueOnce(
+        successfulRefreshResponse(
+          secondAccessToken,
+          "second-rotated-refresh-token",
+        ),
+      );
+    vi.stubGlobal("fetch", fetchMock);
+    getUserByMeMock
+      .mockRejectedValueOnce(new Error("Temporary API failure"))
+      .mockResolvedValueOnce({
+        name: "Tenant User",
+        email: "tenant@example.com",
+        company: "Tenant Company",
+        dateJoined: "2026-01-01",
+        permissions: RESTRICTED_PERMISSIONS,
+      });
+    const jwtCallback = authConfig.callbacks?.jwt;
+    if (!jwtCallback) throw new Error("JWT callback is not configured");
+
+    // When
+    const firstResult = await jwtCallback({
+      token: {
+        accessToken: currentAccessToken,
+        refreshToken: "current-refresh-token",
+        user: {
+          name: "Tenant User",
+          email: "tenant@example.com",
+          dateJoined: "2026-01-01",
+          permissions: ELEVATED_PERMISSIONS,
+        },
+      },
+      user: {} as Parameters<typeof jwtCallback>[0]["user"],
+    });
+    const secondResult = await jwtCallback({
+      token: firstResult,
+      user: {} as Parameters<typeof jwtCallback>[0]["user"],
+    });
+
+    // Then
+    expect(fetchMock).toHaveBeenCalledTimes(2);
+    expect(getUserByMeMock).toHaveBeenNthCalledWith(
+      1,
+      firstAccessToken,
+      expect.any(AbortSignal),
+    );
+    expect(getUserByMeMock).toHaveBeenNthCalledWith(
+      2,
+      secondAccessToken,
+      expect.any(AbortSignal),
+    );
+    expect(firstResult.user?.permissions).toEqual(ELEVATED_PERMISSIONS);
+    expect(secondResult).toMatchObject({
+      accessToken: secondAccessToken,
+      refreshToken: "second-rotated-refresh-token",
+      user: { permissions: RESTRICTED_PERMISSIONS },
+    });
+  });
 });
diff --git a/ui/auth.config.ts b/ui/auth.config.ts
index f84ff6496d..ec6880e193 100644
--- a/ui/auth.config.ts
+++ b/ui/auth.config.ts
@@ -11,6 +11,7 @@ import { z } from "zod";
 
 import { getToken, getUserByMe } from "./actions/auth";
 import { apiBaseUrl } from "./lib";
+import { UserMeError } from "./lib/auth-errors";
 import {
   SLACK_CALLBACK_PATH,
   SLACK_EXPIRED_CALLBACK_URL,
@@ -64,6 +65,9 @@ const DEFAULT_PERMISSIONS: RolePermissionAttributes = {
 
 const TENANT_SWITCH_ERROR = "TenantSwitchError";
 
+const NON_RETRYABLE_USER_ME_STATUSES = new Set([401, 403, 404]);
+const USER_REFRESH_TIMEOUT_MS = 5_000;
+
 type TokenUserInput = Partial<TokenUser> & { company?: string };
 
 type JwtCallback = NonNullable<NonNullable<NextAuthConfig["callbacks"]>["jwt"]>;
@@ -206,6 +210,31 @@ const refreshAccessToken = async (token: AuthToken): Promise<AuthToken> => {
 
       applyDecodedClaims(nextToken, newAccessToken, "refreshed access token");
 
+      try {
+        const userMeResponse = await getUserByMe(
+          newAccessToken,
+          AbortSignal.timeout(USER_REFRESH_TIMEOUT_MS),
+        );
+        nextToken.user = tokenUserFromApi(userMeResponse);
+      } catch (error) {
+        if (
+          error instanceof UserMeError &&
+          error.status !== undefined &&
+          NON_RETRYABLE_USER_ME_STATUSES.has(error.status)
+        ) {
+          return {
+            ...nextToken,
+            accessToken: undefined,
+            refreshToken: undefined,
+            user: undefined,
+            error: "RefreshAccessTokenError",
+          };
+        }
+
+        // eslint-disable-next-line no-console
+        console.warn("Unable to refresh user after access token refresh");
+      }
+
       return nextToken;
     } catch (error) {
       // eslint-disable-next-line no-console
diff --git a/ui/changelog.d/refresh-cached-permissions.fixed.md b/ui/changelog.d/refresh-cached-permissions.fixed.md
new file mode 100644
index 0000000000..2a93ce6f29
--- /dev/null
+++ b/ui/changelog.d/refresh-cached-permissions.fixed.md
@@ -0,0 +1 @@
+Cached permissions now refresh from `/users/me?include=roles` after access token rotation
diff --git a/ui/lib/auth-errors.ts b/ui/lib/auth-errors.ts
new file mode 100644
index 0000000000..343252e0e3
--- /dev/null
+++ b/ui/lib/auth-errors.ts
@@ -0,0 +1,9 @@
+export class UserMeError extends Error {
+  constructor(
+    message: string,
+    public readonly status?: number,
+  ) {
+    super(message);
+    this.name = "UserMeError";
+  }
+}

From f05a490cd74a2c0f11a5d66d8ce29d03fa5c64a2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rub=C3=A9n=20De=20la=20Torre=20Vico?= <ruben@prowler.com>
Date: Mon, 31 Aug 2026 10:57:58 +0200
Subject: [PATCH 05/77] feat(mcp): raise instead of returning error objects in
 the Prowler App tools (#12532)

---
 .../mcp-app-tool-failures.added.md            |   1 +
 ...mcp-compliance-scan-or-provider.changed.md |   1 +
 mcp_server/prowler_mcp_server/lib/errors.py   |  29 +-
 mcp_server/prowler_mcp_server/lib/types.py    |  18 +
 .../prowler_app/models/attack_paths.py        |  18 +-
 .../prowler_app/models/providers.py           |  25 +-
 .../prowler_app/models/scans.py               |  39 +-
 .../prowler_mcp_server/prowler_app/server.py  |   2 +-
 .../prowler_app/tools/attack_paths.py         | 202 +++++----
 .../prowler_app/tools/compliance.py           |  55 +--
 .../prowler_app/tools/finding_groups.py       | 198 +++++----
 .../prowler_app/tools/findings.py             |   3 +-
 .../prowler_app/tools/integrations.py         | 382 +++++++++---------
 .../prowler_app/tools/muting.py               | 117 +++---
 .../prowler_app/tools/providers.py            | 234 ++++++++---
 .../prowler_app/tools/resources.py            |   5 +-
 .../prowler_app/tools/roles.py                |  30 +-
 .../prowler_app/tools/scans.py                | 141 ++++---
 .../prowler_app/tools/users.py                |   3 +-
 .../prowler_app/utils/api_client.py           |  16 +-
 .../prowler_app/utils/auth.py                 |  46 ++-
 .../prowler_documentation/server.py           |   7 +-
 .../prowler_mcp_server/prowler_hub/server.py  |  19 +-
 mcp_server/tests/lib/test_errors.py           |  34 +-
 mcp_server/tests/lib/test_types.py            | 125 ++++++
 .../prowler_app/tools/test_attack_paths.py    | 225 +++++++++++
 .../prowler_app/tools/test_compliance.py      | 102 +++++
 .../prowler_app/tools/test_integrations.py    | 156 +++----
 .../tests/prowler_app/tools/test_muting.py    |  64 +++
 .../tests/prowler_app/tools/test_providers.py | 316 +++++++++++++++
 .../tests/prowler_app/tools/test_roles.py     | 147 +++++++
 .../tests/prowler_app/tools/test_scans.py     | 201 +++++++++
 .../tests/prowler_app/utils/test_auth.py      |  85 +++-
 33 files changed, 2364 insertions(+), 682 deletions(-)
 create mode 100644 mcp_server/changelog.d/mcp-app-tool-failures.added.md
 create mode 100644 mcp_server/changelog.d/mcp-compliance-scan-or-provider.changed.md
 create mode 100644 mcp_server/prowler_mcp_server/lib/types.py
 create mode 100644 mcp_server/tests/lib/test_types.py
 create mode 100644 mcp_server/tests/prowler_app/tools/test_attack_paths.py
 create mode 100644 mcp_server/tests/prowler_app/tools/test_compliance.py
 create mode 100644 mcp_server/tests/prowler_app/tools/test_muting.py
 create mode 100644 mcp_server/tests/prowler_app/tools/test_providers.py
 create mode 100644 mcp_server/tests/prowler_app/tools/test_roles.py
 create mode 100644 mcp_server/tests/prowler_app/tools/test_scans.py

diff --git a/mcp_server/changelog.d/mcp-app-tool-failures.added.md b/mcp_server/changelog.d/mcp-app-tool-failures.added.md
new file mode 100644
index 0000000000..c51daa6c86
--- /dev/null
+++ b/mcp_server/changelog.d/mcp-app-tool-failures.added.md
@@ -0,0 +1 @@
+Prowler App tools now report a failure as an MCP tool execution error (`isError: true`, explanation in `content`) instead of as a successful result carrying an `{"error": ...}` object, which clients and models read as a success
diff --git a/mcp_server/changelog.d/mcp-compliance-scan-or-provider.changed.md b/mcp_server/changelog.d/mcp-compliance-scan-or-provider.changed.md
new file mode 100644
index 0000000000..04eebef825
--- /dev/null
+++ b/mcp_server/changelog.d/mcp-compliance-scan-or-provider.changed.md
@@ -0,0 +1 @@
+`prowler_get_compliance_framework_state_details` now rejects a call that passes both `scan_id` and `provider_id` instead of silently ignoring the provider, which could report on a scan belonging to a different provider than the one that was asked about
diff --git a/mcp_server/prowler_mcp_server/lib/errors.py b/mcp_server/prowler_mcp_server/lib/errors.py
index 29e2db6481..9491bf87eb 100644
--- a/mcp_server/prowler_mcp_server/lib/errors.py
+++ b/mcp_server/prowler_mcp_server/lib/errors.py
@@ -19,10 +19,17 @@ class ProwlerAPIError(Exception):
     Attributes:
         status_code: HTTP status the API answered with
         detail: JSON:API `errors[0].detail`, None when there is none to trust
+        payload: Parsed JSON body, for a tool that has to read the answer rather
+            than only report it
     """
 
     def __init__(
-        self, message: str, status_code: int, *, detail: str | None = None
+        self,
+        message: str,
+        status_code: int,
+        *,
+        detail: str | None = None,
+        payload: dict[str, Any] | None = None,
     ) -> None:
         super().__init__(message)
         self.status_code: int = status_code
@@ -32,6 +39,12 @@ class ProwlerAPIError(Exception):
         # that must never be repeated to a model -- and None for a 5xx, see
         # `jsonapi_detail`.
         self.detail: str | None = detail
+        # Not every error status means the request failed: Prowler answers 404
+        # with the result itself when a query ran and matched nothing. A tool
+        # reads this to tell such an answer apart from a real failure. It is the
+        # upstream body, so it is read structurally and never relayed as text --
+        # `detail` above is the only part of it that may be repeated to a model.
+        self.payload: dict[str, Any] | None = payload
 
 
 class ProwlerAPIUnreachable(Exception):
@@ -71,6 +84,10 @@ class InvalidArgument(ValueError):
     """An argument this server rejected before any request went out."""
 
 
+class CredentialError(Exception):
+    """The credential the caller sent is missing, malformed or expired."""
+
+
 # ------------------------------------------------------------------- messages
 
 
@@ -154,6 +171,16 @@ def _describe_failure(exc: BaseException) -> str | None:
             "current state before sending it again."
         )
 
+    if isinstance(exc, CredentialError):
+        # Not an argument problem, so it is worth saying that plainly: the
+        # answer is a credential the user has to fix, not another attempt.
+        return (
+            f"This request carried no usable credential: {exc}. Retrying or "
+            "changing the arguments will not help -- the client has to send an "
+            "'Authorization: Bearer <token>' header holding a valid Prowler API "
+            "key or an unexpired JWT."
+        )
+
     if isinstance(exc, ProwlerAPIUnreachable):
         # The only failure a model can turn into a duplicate write by repeating.
         return (
diff --git a/mcp_server/prowler_mcp_server/lib/types.py b/mcp_server/prowler_mcp_server/lib/types.py
new file mode 100644
index 0000000000..5381b21e8a
--- /dev/null
+++ b/mcp_server/prowler_mcp_server/lib/types.py
@@ -0,0 +1,18 @@
+"""Argument types shared by every tool in this server."""
+
+from typing import Annotated
+
+from pydantic import StringConstraints
+
+# The identifiers tools take -- a scan UUID, a query id, a Jira project key --
+# are required because there is nothing sensible to do without them. A model
+# that does not have one to hand tends to send an empty string rather than omit
+# the argument, and an empty string is not caught by "required": it travels into
+# a URL path or a request body and comes back as a 404 or an opaque API error
+# ("This field may not be blank") that says nothing about which argument was at
+# fault. Rejecting it here names the argument instead, and `minLength` puts the
+# constraint in the tool schema so a client can see it before calling.
+#
+# Whitespace is stripped first, so " abc " is accepted as "abc" and "   " is
+# rejected like "".
+NonBlankStr = Annotated[str, StringConstraints(strip_whitespace=True, min_length=1)]
diff --git a/mcp_server/prowler_mcp_server/prowler_app/models/attack_paths.py b/mcp_server/prowler_mcp_server/prowler_app/models/attack_paths.py
index bbe2eb7401..acaacac540 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/models/attack_paths.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/models/attack_paths.py
@@ -354,6 +354,14 @@ class AttackPathQueryResult(MinimalSerializerMixin, BaseModel):
     relationships: list[AttackPathsGraphRelationship] = Field(
         default_factory=list, description="Relationships connecting the nodes"
     )
+    # A graph with nothing in it serializes to `{}`, since the mixin drops empty
+    # lists. That reads as an answer that went missing rather than as the finding
+    # it is -- the query ran and this account has no such attack path -- so the
+    # empty case carries a sentence saying so.
+    message: str | None = Field(
+        default=None,
+        description="Present only when the query matched nothing, to say the query ran and found no attack path rather than leaving an empty result to interpret",
+    )
 
     @classmethod
     def from_api_response(
@@ -368,7 +376,15 @@ class AttackPathQueryResult(MinimalSerializerMixin, BaseModel):
         Returns:
             AttackPathQueryResult with parsed data and summary
         """
-        attributes = response.get("data", {}).get("attributes")
+        data = response.get("data")
+        attributes = data.get("attributes") if data is not None else None
+        # Prowler spells a graph with nothing in it either as empty lists or as
+        # a null `attributes`. Both say the same thing -- the query ran and
+        # matched nothing -- so the null reads as the empty graph it stands for
+        # instead of crashing the parse.
+        if attributes is None:
+            attributes = {}
+
         nodes_data = attributes.get("nodes", [])
         relationships_data = attributes.get("relationships", [])
 
diff --git a/mcp_server/prowler_mcp_server/prowler_app/models/providers.py b/mcp_server/prowler_mcp_server/prowler_app/models/providers.py
index af9509a963..322d85186c 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/models/providers.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/models/providers.py
@@ -2,7 +2,7 @@
 
 from typing import Any, Literal
 
-from pydantic import BaseModel
+from pydantic import BaseModel, ConfigDict, Field
 
 from prowler_mcp_server.prowler_app.models.base import MinimalSerializerMixin
 
@@ -104,6 +104,29 @@ class ProvidersListResponse(BaseModel):
         )
 
 
+class ProviderDeletionResult(MinimalSerializerMixin, BaseModel):
+    """Outcome of a provider deletion.
+
+    Prowler deletes a provider in a background task, so the answer is not always
+    a finished deletion. A deletion that never started is raised as an error
+    instead of being reported here: this model only describes a deletion Prowler
+    accepted and began.
+    """
+
+    model_config = ConfigDict(frozen=True)
+
+    status: Literal["deleted", "in_progress"] = Field(
+        description="Outcome of the deletion: 'deleted' when Prowler finished removing the provider, 'in_progress' when the background task was accepted and is still running, which is normal for a provider with many scans and findings"
+    )
+    task_id: str | None = Field(
+        default=None,
+        description="UUIDv4 of the background deletion task, present when the deletion did not finish within the polling window so its state can be checked later",
+    )
+    message: str = Field(
+        description="Human-readable description of what happened and what to do next"
+    )
+
+
 class ProviderConnectionStatus(MinimalSerializerMixin, BaseModel):
     """Result of provider connection operation."""
 
diff --git a/mcp_server/prowler_mcp_server/prowler_app/models/scans.py b/mcp_server/prowler_mcp_server/prowler_app/models/scans.py
index f8eef988ce..3fc095eaa8 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/models/scans.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/models/scans.py
@@ -191,18 +191,18 @@ class ScansListResponse(BaseModel):
 
 
 class ScanCreationResult(MinimalSerializerMixin, BaseModel):
-    """Result of scan creation operation.
+    """Result of a scan creation that succeeded.
 
-    Used by trigger_scan() to communicate the outcome of scan creation.
-    Status indicates whether scan was created successfully or failed.
+    Used by trigger_scan(). A scan that was not created leaves the tool as an
+    error instead of being reported here, so this model only ever describes a
+    scan that exists -- which is why it carries no success flag: a field with
+    one reachable value says nothing, and inviting a reader to branch on it
+    suggests there is a failure shape to look for here. There is not; the
+    failure is the error.
     """
 
-    scan: DetailedScan | None = Field(
-        default=None,
-        description="Detailed scan information if creation succeeded, None otherwise",
-    )
-    status: Literal["success", "failed"] = Field(
-        description="Outcome of scan creation: success (scan created successfully) or failed (error)"
+    scan: DetailedScan = Field(
+        description="Detailed information about the scan that was created"
     )
     message: str = Field(
         description="Human-readable message describing the scan creation result"
@@ -210,13 +210,26 @@ class ScanCreationResult(MinimalSerializerMixin, BaseModel):
 
 
 class ScheduleCreationResult(MinimalSerializerMixin, BaseModel):
-    """Result of async schedule creation operation.
+    """Result of a daily schedule creation that succeeded.
 
-    Used by schedule_daily_scan() to communicate scheduling outcome.
+    Used by schedule_daily_scan(). Prowler commits the schedule inside the
+    request that creates it, so an answer means it exists; a provider that
+    already has one is refused with a 409 and leaves the tool as an error. That
+    leaves nothing for a success flag to distinguish, so there is none.
     """
 
-    scheduled: bool = Field(
-        description="Whether the daily scan schedule was created successfully"
+    first_run_state: (
+        Literal[
+            "available", "scheduled", "executing", "completed", "failed", "cancelled"
+        ]
+        | None
+    ) = Field(
+        default=None,
+        description=(
+            "State of the first scan Prowler starts immediately alongside the schedule. "
+            "This describes that one run, not the recurring schedule, which stands "
+            "regardless of it"
+        ),
     )
     message: str = Field(
         description="Human-readable message describing the scheduling result"
diff --git a/mcp_server/prowler_mcp_server/prowler_app/server.py b/mcp_server/prowler_mcp_server/prowler_app/server.py
index e8e854144f..3129a50d09 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/server.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/server.py
@@ -3,7 +3,7 @@ from fastmcp import FastMCP
 from prowler_mcp_server.prowler_app.utils.tool_loader import load_all_tools
 
 # Initialize MCP server
-app_mcp_server = FastMCP("prowler-app")
+app_mcp_server = FastMCP("prowler-app", mask_error_details=True)
 
 # Auto-discover and load all tools from the tools package
 load_all_tools(app_mcp_server)
diff --git a/mcp_server/prowler_mcp_server/prowler_app/tools/attack_paths.py b/mcp_server/prowler_mcp_server/prowler_app/tools/attack_paths.py
index 5bd66760fa..b1914dc795 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/tools/attack_paths.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/tools/attack_paths.py
@@ -7,8 +7,11 @@ through cloud infrastructure relationships.
 
 from typing import Any, Literal
 
+from fastmcp.exceptions import ToolError
 from pydantic import Field
 
+from prowler_mcp_server.lib.errors import ProwlerAPIError
+from prowler_mcp_server.lib.types import NonBlankStr
 from prowler_mcp_server.prowler_app.models.attack_paths import (
     AttackPathCartographySchema,
     AttackPathQuery,
@@ -76,50 +79,47 @@ class AttackPathsTools(BaseTool):
         2. Use prowler_list_attack_paths_queries to see available queries for a scan
         3. Use prowler_run_attack_paths_query to execute analysis
         """
-        try:
-            # Validate pagination
-            self.api_client.validate_page_size(page_size)
+        # Validate pagination
+        self.api_client.validate_page_size(page_size)
 
-            # Build query parameters
-            params: dict[str, Any] = {
-                "page[size]": page_size,
-                "page[number]": page_number,
-            }
+        # Build query parameters
+        params: dict[str, Any] = {
+            "page[size]": page_size,
+            "page[number]": page_number,
+        }
 
-            # Apply provider filters
-            if provider_id:
-                params["filter[provider__in]"] = provider_id
-            if provider_type:
-                params["filter[provider_type__in]"] = provider_type
+        # Apply provider filters
+        if provider_id:
+            params["filter[provider__in]"] = provider_id
+        if provider_type:
+            params["filter[provider_type__in]"] = provider_type
 
-            # Apply state filter
-            if state:
-                params["filter[state__in]"] = state
+        # Apply state filter
+        if state:
+            params["filter[state__in]"] = state
 
-            clean_params = self.api_client.build_filter_params(params)
+        clean_params = self.api_client.build_filter_params(params)
 
-            api_response = await self.api_client.get(
-                "/attack-paths-scans", params=clean_params
-            )
-            simplified_response = AttackPathScansListResponse.from_api_response(
-                api_response
-            )
+        api_response = await self.api_client.get(
+            "/attack-paths-scans", params=clean_params
+        )
+        simplified_response = AttackPathScansListResponse.from_api_response(
+            api_response
+        )
 
-            return simplified_response.model_dump()
-        except Exception as e:
-            self.logger.error(f"Failed to list attack paths scans: {e}")
-            return {"error": f"Failed to list attack paths scans: {str(e)}"}
+        return simplified_response.model_dump()
 
     async def list_attack_paths_queries(
         self,
-        scan_id: str = Field(
-            description="UUID of a COMPLETED attack paths scan. Use `prowler_list_attack_paths_scans` with state=['completed'] to find scan IDs"
+        scan_id: NonBlankStr = Field(
+            description="UUID of a COMPLETED attack paths scan, as returned by `prowler_list_attack_paths_scans` with state=['completed']. This is NOT a regular scan ID: an ID from `prowler_search_scans` or `prowler_get_scan` names a different resource and is rejected here"
         ),
     ) -> list[dict[str, Any]]:
         """Discover available Attack Paths queries for a completed scan.
 
         IMPORTANT: The scan must be in 'completed' state to list queries.
-        Queries are provider-specific
+        Attack Paths covers AWS providers only, so only an AWS provider has an
+        Attack Paths scan to name here, and every query is an AWS one.
 
         Each query includes:
         - id: Query identifier to use with run_attack_paths_query
@@ -141,23 +141,32 @@ class AttackPathsTools(BaseTool):
             api_response = await self.api_client.get(
                 f"/attack-paths-scans/{scan_id}/queries"
             )
+        except ProwlerAPIError as e:
+            # A 404 here is Prowler failing to resolve `scan_id` to an Attack
+            # Paths scan, and its own reason for it -- a bare "Not found." --
+            # does not say what kind of ID it was looking for. The mistake it
+            # stands for is a regular scan ID: an Attack Paths scan is a separate
+            # resource with IDs of its own, and Prowler only creates one for an
+            # AWS provider, so a scan of any other provider has none to pass.
+            #
+            # The endpoint answers 404 for a second thing -- a provider type with
+            # no query catalog -- but that one cannot happen: a scan only exists
+            # where Attack Paths runs, which is AWS, and AWS has a catalog.
+            if e.status_code == 404:
+                raise self._unknown_scan_error(scan_id)
+            raise
 
-            return [
-                AttackPathQuery.from_api_response(query).model_dump()
-                for query in api_response.get("data", [])
-            ]
-        except Exception as e:
-            self.logger.error(
-                f"Failed to list attack paths queries for scan {scan_id}: {e}"
-            )
-            return [{"error": f"Failed to list attack paths queries: {str(e)}"}]
+        return [
+            AttackPathQuery.from_api_response(query).model_dump()
+            for query in api_response.get("data", [])
+        ]
 
     async def run_attack_paths_query(
         self,
-        scan_id: str = Field(
+        scan_id: NonBlankStr = Field(
             description="UUID of a COMPLETED attack paths scan. The scan must be in 'completed' state"
         ),
-        query_id: str = Field(
+        query_id: NonBlankStr = Field(
             description="Query ID to execute (e.g., 'aws-internet-exposed-ec2-sensitive-s3-access'). Use `prowler_list_attack_paths_queries` to discover available queries"
         ),
         parameters: dict[str, str] = Field(
@@ -198,39 +207,61 @@ class AttackPathsTools(BaseTool):
         3. Execute this tool with appropriate parameters
         4. Analyze the returned graph for security insights
         """
-        try:
-            # Build the request payload following JSON:API format
-            request_data: dict[str, Any] = {
-                "data": {
-                    "type": "attack-paths-query-run-requests",
-                    "attributes": {
-                        "id": query_id,
-                    },
+        # Build the request payload following JSON:API format
+        request_data: dict[str, Any] = {
+            "data": {
+                "type": "attack-paths-query-run-requests",
+                "attributes": {
+                    "id": query_id,
                 },
-            }
+            },
+        }
 
-            # Add parameters if provided
-            if parameters:
-                request_data["data"]["attributes"]["parameters"] = parameters
+        # Add parameters if provided
+        if parameters:
+            request_data["data"]["attributes"]["parameters"] = parameters
 
+        try:
             api_response = await self.api_client.post(
                 f"/attack-paths-scans/{scan_id}/queries/run",
                 json_data=request_data,
             )
+        except ProwlerAPIError as e:
+            # Prowler answers a query that matched nothing with 404 and the empty
+            # result as the body. That is an answer -- this account has no such
+            # attack path, which is the good outcome -- so it is returned rather
+            # than raised: reporting it as a failure invites a retry of a call
+            # whose arguments were right, and hides a clean result.
+            if e.status_code == 404 and isinstance(e.payload, dict):
+                if "data" in e.payload:
+                    api_response = e.payload
+                else:
+                    # No result body, so `scan_id` did not resolve to an Attack
+                    # Paths scan. An unknown query_id is a 400, not this.
+                    raise self._unknown_scan_error(scan_id)
+            else:
+                raise
 
-            # Parse the response
-            query_result = AttackPathQueryResult.from_api_response(api_response)
+        # Parse the response
+        query_result = AttackPathQueryResult.from_api_response(api_response)
 
-            return query_result.model_dump()
-        except Exception as e:
-            self.logger.error(
-                f"Failed to run attack paths query '{query_id}' on scan {scan_id}: {e}"
+        if not query_result.nodes:
+            query_result = query_result.model_copy(
+                update={
+                    "message": (
+                        f"The query '{query_id}' ran against scan {scan_id} and matched "
+                        "nothing, so this provider has no attack path of that shape. "
+                        "The scan and the query ID were both valid; running it again "
+                        "will return the same thing."
+                    )
+                }
             )
-            return {"error": f"Failed to run attack paths query '{query_id}': {str(e)}"}
+
+        return query_result.model_dump()
 
     async def get_attack_paths_cartography_schema(
         self,
-        scan_id: str = Field(
+        scan_id: NonBlankStr = Field(
             description="UUID of a COMPLETED attack paths scan. Use `prowler_list_attack_paths_scans` with state=['completed'] to find scan IDs"
         ),
     ) -> dict[str, Any]:
@@ -262,18 +293,43 @@ class AttackPathsTools(BaseTool):
             api_response = await self.api_client.get(
                 f"/attack-paths-scans/{scan_id}/schema"
             )
+        except ProwlerAPIError as e:
+            # Two 404s again, told apart by whether Prowler wrote a JSON:API
+            # error. Absent means the scan resolved and its graph simply records
+            # no Cartography module, so the ID is not the thing to change.
+            if e.status_code == 404:
+                if e.detail is None:
+                    raise ToolError(
+                        f"Scan {scan_id} has no Cartography schema recorded, so there is "
+                        "nothing to write custom queries against. Use "
+                        "prowler_list_attack_paths_queries for the ready-made queries of "
+                        "this scan, which do not need the schema."
+                    )
+                else:
+                    raise self._unknown_scan_error(scan_id)
+            raise
 
-            schema = AttackPathCartographySchema.from_api_response(api_response)
+        schema = AttackPathCartographySchema.from_api_response(api_response)
 
-            schema_content = await self.api_client.fetch_external_url(
-                schema.raw_schema_url
-            )
+        schema_content = await self.api_client.fetch_external_url(schema.raw_schema_url)
 
-            return schema.model_copy(
-                update={"schema_content": schema_content}
-            ).model_dump()
-        except Exception as e:
-            self.logger.error(
-                f"Failed to get cartography schema for scan {scan_id}: {e}"
-            )
-            return {"error": f"Failed to get cartography schema: {str(e)}"}
+        return schema.model_copy(update={"schema_content": schema_content}).model_dump()
+
+    # Private helper methods
+
+    @staticmethod
+    def _unknown_scan_error(scan_id: str) -> ToolError:
+        """Describe a scan ID Prowler could not resolve to an Attack Paths scan.
+
+        Returns:
+            The ``ToolError`` for the caller to raise. Built without a ``from``
+            clause on purpose: the sentence is the final word, not a wrapper
+            around the API's.
+        """
+        return ToolError(
+            f"Prowler has no Attack Paths scan with ID {scan_id}. These are a "
+            "different resource from regular scans and only exist for AWS "
+            "providers, so an ID from prowler_search_scans or prowler_get_scan "
+            "never resolves here. Use prowler_list_attack_paths_scans to get an "
+            "ID these tools take."
+        )
diff --git a/mcp_server/prowler_mcp_server/prowler_app/tools/compliance.py b/mcp_server/prowler_mcp_server/prowler_app/tools/compliance.py
index 33cdd22a69..b7f06be9a8 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/tools/compliance.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/tools/compliance.py
@@ -6,8 +6,11 @@ across all cloud providers.
 
 from typing import Any
 
+from fastmcp.exceptions import ToolError
 from pydantic import Field
 
+from prowler_mcp_server.lib.errors import InvalidArgument
+from prowler_mcp_server.lib.types import NonBlankStr
 from prowler_mcp_server.prowler_app.models.compliance import (
     ComplianceFrameworksListResponse,
     ComplianceRequirementAttributesListResponse,
@@ -34,7 +37,7 @@ class ComplianceTools(BaseTool):
             The scan_id of the latest completed scan for the provider.
 
         Raises:
-            ValueError: If no completed scans are found for the provider.
+            ToolError: If no completed scans are found for the provider
         """
         scan_params = {
             "filter[provider]": provider_id,
@@ -48,7 +51,7 @@ class ComplianceTools(BaseTool):
 
         scans_data = scans_response.get("data", [])
         if not scans_data:
-            raise ValueError(
+            raise ToolError(
                 f"No completed scans found for provider {provider_id}. "
                 "Run a scan first using prowler_trigger_scan."
             )
@@ -93,18 +96,15 @@ class ComplianceTools(BaseTool):
         2. Use prowler_get_compliance_framework_state_details with a specific compliance_id to see which requirements failed
         """
         if not scan_id and not provider_id:
-            return {
-                "error": "Either scan_id or provider_id must be provided. Use prowler_search_providers to find provider IDs or prowler_list_scans to find scan IDs."
-            }
+            raise InvalidArgument(
+                "Either scan_id or provider_id must be provided. Use prowler_search_providers to find provider IDs or prowler_list_scans to find scan IDs."
+            )
         elif scan_id and provider_id:
-            return {
-                "error": "Provide either scan_id or provider_id, not both. To get compliance data for a specific scan, use scan_id. To get data for the latest scan of a provider, use provider_id."
-            }
+            raise InvalidArgument(
+                "Provide either scan_id or provider_id, not both. To get compliance data for a specific scan, use scan_id. To get data for the latest scan of a provider, use provider_id."
+            )
         elif not scan_id and provider_id:
-            try:
-                scan_id = await self._get_latest_scan_id_for_provider(provider_id)
-            except ValueError as e:
-                return {"error": str(e)}
+            scan_id = await self._get_latest_scan_id_for_provider(provider_id)
 
         params: dict[str, Any] = {"filter[scan_id]": scan_id}
 
@@ -253,16 +253,16 @@ class ComplianceTools(BaseTool):
 
     async def get_compliance_framework_state_details(
         self,
-        compliance_id: str = Field(
+        compliance_id: NonBlankStr = Field(
             description="Compliance framework ID to get details for (e.g., 'cis_1.5_aws', 'pci_dss_v4.0_aws'). You can get compliance IDs from prowler_get_compliance_overview or consulting Prowler Hub/Prowler Documentation that you can also find in form of tools in this MCP Server",
         ),
         scan_id: str | None = Field(
             default=None,
-            description="UUID of a specific scan to get compliance data for. Required if provider_id is not specified.",
+            description="UUID of a specific scan to get compliance data for. Required if provider_id is not specified. Do not pass it together with provider_id.",
         ),
         provider_id: str | None = Field(
             default=None,
-            description="Prowler's internal UUID (v4) for a specific provider. If provided without scan_id, the tool will automatically find the latest completed scan for this provider. Use `prowler_search_providers` tool to find provider IDs.",
+            description="Prowler's internal UUID (v4) for a specific provider. The tool will automatically find the latest completed scan for this provider. Use `prowler_search_providers` tool to find provider IDs. Do not pass it together with scan_id.",
         ),
     ) -> dict[str, Any]:
         """Get detailed requirement-level breakdown for a specific compliance framework.
@@ -283,8 +283,8 @@ class ComplianceTools(BaseTool):
            - Use prowler_get_finding_details with these finding IDs for more details and remediation guidance
 
         Default behavior:
-        - Requires either scan_id OR provider_id
-        - With provider_id (no scan_id): Automatically finds the latest completed scan for that provider
+        - Requires exactly one of scan_id OR provider_id; providing both is rejected
+        - With provider_id: Automatically finds the latest completed scan for that provider
         - With scan_id: Uses that specific scan's compliance data
         - Only shows failed requirements with their associated failed finding IDs
 
@@ -293,21 +293,22 @@ class ComplianceTools(BaseTool):
         2. Use this tool with the compliance_id to see failed requirements and their finding IDs
         3. Use prowler_get_finding_details with the finding IDs to get remediation guidance
         """
-        # Validate that either scan_id or provider_id is provided
+        # Exactly one of the two: taking scan_id and ignoring provider_id would
+        # answer for whatever provider that scan belongs to, which is not
+        # necessarily the one the caller named.
         if not scan_id and not provider_id:
-            return {
-                "error": "Either scan_id or provider_id must be provided. Use prowler_search_providers to find provider IDs or prowler_list_scans to find scan IDs."
-            }
+            raise InvalidArgument(
+                "Either scan_id or provider_id must be provided. Use prowler_search_providers to find provider IDs or prowler_list_scans to find scan IDs."
+            )
+        elif scan_id and provider_id:
+            raise InvalidArgument(
+                "Provide either scan_id or provider_id, not both. To get compliance data for a specific scan, use scan_id. To get data for the latest scan of a provider, use provider_id."
+            )
 
         # Resolve provider_id to latest scan_id if needed
         resolved_scan_id = scan_id
         if not scan_id and provider_id:
-            try:
-                resolved_scan_id = await self._get_latest_scan_id_for_provider(
-                    provider_id
-                )
-            except ValueError as e:
-                return {"error": str(e)}
+            resolved_scan_id = await self._get_latest_scan_id_for_provider(provider_id)
 
         # Build params for requirements endpoint
         params: dict[str, Any] = {
diff --git a/mcp_server/prowler_mcp_server/prowler_app/tools/finding_groups.py b/mcp_server/prowler_mcp_server/prowler_app/tools/finding_groups.py
index 05adf8db2b..54bc3bcbcd 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/tools/finding_groups.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/tools/finding_groups.py
@@ -6,8 +6,10 @@ This module provides read-only tools for finding group triage and drill-downs.
 from typing import Any, Literal
 from urllib.parse import quote
 
+from fastmcp.exceptions import ToolError
 from pydantic import Field
 
+from prowler_mcp_server.lib.types import NonBlankStr
 from prowler_mcp_server.prowler_app.models.finding_groups import (
     DetailedFindingGroup,
     FindingGroupResourcesListResponse,
@@ -236,50 +238,46 @@ class FindingGroupsTools(BaseTool):
         prowler_get_finding_group_details for complete counters or
         prowler_list_finding_group_resources to drill into affected resources.
         """
-        try:
-            self.api_client.validate_page_size(page_size)
-            date_range, params = self._base_date_params(date_from, date_to)
-            endpoint = self._group_endpoint(date_range)
+        self.api_client.validate_page_size(page_size)
+        date_range, params = self._base_date_params(date_from, date_to)
+        endpoint = self._group_endpoint(date_range)
 
-            self._apply_common_filters(
-                params,
-                provider,
-                provider_type,
-                provider_uid,
-                provider_alias,
-                region,
-                service,
-                resource_type,
-                resource_name,
-                resource_uid,
-                resource_group,
-                category,
-                check_id,
-                check_title,
-                severity,
-                status,
-                muted,
-                delta,
-            )
+        self._apply_common_filters(
+            params,
+            provider,
+            provider_type,
+            provider_uid,
+            provider_alias,
+            region,
+            service,
+            resource_type,
+            resource_name,
+            resource_uid,
+            resource_group,
+            category,
+            check_id,
+            check_title,
+            severity,
+            status,
+            muted,
+            delta,
+        )
 
-            params["filter[include_muted]"] = self._bool_value(include_muted)
-            params["page[size]"] = page_size
-            params["page[number]"] = page_number
-            params["fields[finding-groups]"] = GROUP_LIST_FIELDS
-            if sort:
-                params["sort"] = sort
+        params["filter[include_muted]"] = self._bool_value(include_muted)
+        params["page[size]"] = page_size
+        params["page[number]"] = page_number
+        params["fields[finding-groups]"] = GROUP_LIST_FIELDS
+        if sort:
+            params["sort"] = sort
 
-            clean_params = self.api_client.build_filter_params(params)
-            api_response = await self.api_client.get(endpoint, params=clean_params)
-            response = FindingGroupsListResponse.from_api_response(api_response)
-            return response.model_dump()
-        except Exception as e:
-            self.logger.error(f"Error listing finding groups: {e}")
-            return {"error": str(e), "status": "failed"}
+        clean_params = self.api_client.build_filter_params(params)
+        api_response = await self.api_client.get(endpoint, params=clean_params)
+        response = FindingGroupsListResponse.from_api_response(api_response)
+        return response.model_dump()
 
     async def get_finding_group_details(
         self,
-        check_id: str = Field(
+        check_id: NonBlankStr = Field(
             description="Public check ID that identifies the finding group. This is not a UUID."
         ),
         date_from: str | None = Field(
@@ -297,39 +295,37 @@ class FindingGroupsTools(BaseTool):
         or historical data when dates are provided. Fully muted groups are
         included by default so accepted risk does not look like a missing group.
         """
-        try:
-            date_range, params = self._base_date_params(date_from, date_to)
-            endpoint = self._group_endpoint(date_range)
+        date_range, params = self._base_date_params(date_from, date_to)
+        endpoint = self._group_endpoint(date_range)
 
-            params.update(
-                {
-                    "filter[check_id]": check_id,
-                    "filter[include_muted]": True,
-                    "page[size]": 1,
-                    "page[number]": 1,
-                    "fields[finding-groups]": GROUP_DETAIL_FIELDS,
-                }
+        params.update(
+            {
+                "filter[check_id]": check_id,
+                "filter[include_muted]": True,
+                "page[size]": 1,
+                "page[number]": 1,
+                "fields[finding-groups]": GROUP_DETAIL_FIELDS,
+            }
+        )
+
+        clean_params = self.api_client.build_filter_params(params)
+        api_response = await self.api_client.get(endpoint, params=clean_params)
+        data = api_response.get("data", [])
+
+        if not data:
+            # No `from`: this names the check and the tool that lists valid ones,
+            # neither of which the shared classifier can know.
+            raise ToolError(
+                f"No finding group exists for check '{check_id}' in this scan. Use "
+                "prowler_list_finding_groups to see the checks that have findings."
             )
 
-            clean_params = self.api_client.build_filter_params(params)
-            api_response = await self.api_client.get(endpoint, params=clean_params)
-            data = api_response.get("data", [])
-
-            if not data:
-                return {
-                    "error": f"Finding group '{check_id}' not found.",
-                    "status": "not_found",
-                }
-
-            group = DetailedFindingGroup.from_api_response(data[0])
-            return group.model_dump()
-        except Exception as e:
-            self.logger.error(f"Error getting finding group details: {e}")
-            return {"error": str(e), "status": "failed"}
+        group = DetailedFindingGroup.from_api_response(data[0])
+        return group.model_dump()
 
     async def list_finding_group_resources(
         self,
-        check_id: str = Field(
+        check_id: NonBlankStr = Field(
             description="Public check ID that identifies the finding group. This is not a UUID."
         ),
         provider: list[str] = Field(
@@ -426,45 +422,41 @@ class FindingGroupsTools(BaseTool):
         `finding_id`. Use `prowler_get_finding_details(finding_id)` to
         retrieve complete remediation guidance for a specific resource finding.
         """
-        try:
-            self.api_client.validate_page_size(page_size)
-            date_range, params = self._base_date_params(date_from, date_to)
-            endpoint = self._resource_endpoint(check_id, date_range)
+        self.api_client.validate_page_size(page_size)
+        date_range, params = self._base_date_params(date_from, date_to)
+        endpoint = self._resource_endpoint(check_id, date_range)
 
-            if muted is None and not self._bool_value(include_muted):
-                muted = False
+        if muted is None and not self._bool_value(include_muted):
+            muted = False
 
-            self._apply_common_filters(
-                params,
-                provider,
-                provider_type,
-                provider_uid,
-                provider_alias,
-                region,
-                service,
-                resource_type,
-                resource_name,
-                resource_uid,
-                resource_group,
-                category,
-                [],
-                None,
-                severity,
-                status,
-                muted,
-                delta,
-            )
+        self._apply_common_filters(
+            params,
+            provider,
+            provider_type,
+            provider_uid,
+            provider_alias,
+            region,
+            service,
+            resource_type,
+            resource_name,
+            resource_uid,
+            resource_group,
+            category,
+            [],
+            None,
+            severity,
+            status,
+            muted,
+            delta,
+        )
 
-            params["page[size]"] = page_size
-            params["page[number]"] = page_number
-            params["fields[finding-group-resources]"] = RESOURCE_FIELDS
-            if sort:
-                params["sort"] = sort
+        params["page[size]"] = page_size
+        params["page[number]"] = page_number
+        params["fields[finding-group-resources]"] = RESOURCE_FIELDS
+        if sort:
+            params["sort"] = sort
 
-            clean_params = self.api_client.build_filter_params(params)
-            api_response = await self.api_client.get(endpoint, params=clean_params)
-            response = FindingGroupResourcesListResponse.from_api_response(api_response)
-            return response.model_dump()
-        except Exception as e:
-            self.logger.error(f"Error listing finding group resources: {e}")
-            return {"error": str(e), "status": "failed"}
+        clean_params = self.api_client.build_filter_params(params)
+        api_response = await self.api_client.get(endpoint, params=clean_params)
+        response = FindingGroupResourcesListResponse.from_api_response(api_response)
+        return response.model_dump()
diff --git a/mcp_server/prowler_mcp_server/prowler_app/tools/findings.py b/mcp_server/prowler_mcp_server/prowler_app/tools/findings.py
index b556101cab..860dfa806f 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/tools/findings.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/tools/findings.py
@@ -8,6 +8,7 @@ from typing import Any, Literal
 
 from pydantic import Field
 
+from prowler_mcp_server.lib.types import NonBlankStr
 from prowler_mcp_server.prowler_app.models.findings import (
     DetailedFinding,
     FindingsListResponse,
@@ -180,7 +181,7 @@ class FindingsTools(BaseTool):
 
     async def get_finding_details(
         self,
-        finding_id: str = Field(
+        finding_id: NonBlankStr = Field(
             description="UUID of the finding to retrieve (must be a valid UUID format, e.g., '019ac0d6-90d5-73e9-9acf-c22e256f1bac'). Returns an error if the finding ID is invalid or not found."
         ),
     ) -> dict[str, Any]:
diff --git a/mcp_server/prowler_mcp_server/prowler_app/tools/integrations.py b/mcp_server/prowler_mcp_server/prowler_app/tools/integrations.py
index d0aac0182a..f458a2ee5f 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/tools/integrations.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/tools/integrations.py
@@ -9,8 +9,11 @@ This module provides tools for managing where Prowler sends its results, includi
 import json
 from typing import Any
 
+from fastmcp.exceptions import ToolError
 from pydantic import Field
 
+from prowler_mcp_server.lib.errors import CredentialError, InvalidArgument
+from prowler_mcp_server.lib.types import NonBlankStr
 from prowler_mcp_server.prowler_app.models.integrations import (
     DetailedIntegration,
     IntegrationConnectionStatus,
@@ -126,7 +129,7 @@ class IntegrationsTools(BaseTool):
 
     async def get_integration(
         self,
-        integration_id: str = Field(
+        integration_id: NonBlankStr = Field(
             description="UUID of the integration to retrieve. Must be a valid UUID format (e.g., '019ac0d6-90d5-73e9-9acf-c22e256f1bac'). Use prowler_list_integrations to find it."
         ),
     ) -> dict[str, Any]:
@@ -157,7 +160,7 @@ class IntegrationsTools(BaseTool):
 
     async def create_amazon_s3_integration(
         self,
-        bucket_name: str = Field(
+        bucket_name: NonBlankStr = Field(
             description="Name of the S3 bucket where Prowler will upload the scan outputs (CSV, HTML, OCSF JSON and compliance reports)."
         ),
         output_directory: str = Field(
@@ -168,15 +171,15 @@ class IntegrationsTools(BaseTool):
             default=[],
             description="Prowler UUIDs of the providers whose scan outputs are exported to this bucket. Use prowler_search_providers to find them. Leave empty to attach no provider yet.",
         ),
-        role_arn: str | None = Field(
+        role_arn: NonBlankStr | None = Field(
             default=None,
             description="ARN of the IAM role Prowler assumes to write to the bucket (e.g. 'arn:aws:iam::123456789012:role/ProwlerS3Integration'). Recommended over static keys.",
         ),
-        external_id: str | None = Field(
+        external_id: NonBlankStr | None = Field(
             default=None,
             description="External ID required by the trust policy of the assumed role. In Prowler Cloud this is the tenant ID.",
         ),
-        role_session_name: str | None = Field(
+        role_session_name: NonBlankStr | None = Field(
             default=None,
             description="Identifier for the role session, useful to track it in AWS logs. Only letters, digits and the characters =,.@_- are allowed.",
         ),
@@ -184,15 +187,15 @@ class IntegrationsTools(BaseTool):
             default=3600,
             description="Duration of the assumed role session in seconds. Must be between 900 and 43200. Defaults to 3600 when omitted.",
         ),
-        aws_access_key_id: str | None = Field(
+        aws_access_key_id: NonBlankStr | None = Field(
             default=None,
             description="AWS access key ID. Only needed when the Prowler deployment has no ambient AWS credentials.",
         ),
-        aws_secret_access_key: str | None = Field(
+        aws_secret_access_key: NonBlankStr | None = Field(
             default=None,
             description="AWS secret access key. Required when 'aws_access_key_id' is provided.",
         ),
-        aws_session_token: str | None = Field(
+        aws_session_token: NonBlankStr | None = Field(
             default=None,
             description="AWS session token, only for temporary credentials.",
         ),
@@ -244,34 +247,30 @@ class IntegrationsTools(BaseTool):
         """
         self.logger.info(f"Creating Amazon S3 integration for bucket {bucket_name}...")
 
-        try:
-            credentials = self._build_aws_credentials(
-                role_arn=role_arn,
-                external_id=external_id,
-                role_session_name=role_session_name,
-                session_duration=session_duration,
-                aws_access_key_id=aws_access_key_id,
-                aws_secret_access_key=aws_secret_access_key,
-                aws_session_token=aws_session_token,
-            )
+        credentials = self._build_aws_credentials(
+            role_arn=role_arn,
+            external_id=external_id,
+            role_session_name=role_session_name,
+            session_duration=session_duration,
+            aws_access_key_id=aws_access_key_id,
+            aws_secret_access_key=aws_secret_access_key,
+            aws_session_token=aws_session_token,
+        )
 
-            return await self._create_integration(
-                integration_type="amazon_s3",
-                configuration={
-                    "bucket_name": bucket_name,
-                    "output_directory": output_directory,
-                },
-                credentials=credentials,
-                provider_ids=provider_ids,
-                enabled=enabled,
-            )
-        except Exception as e:
-            self.logger.error(f"Amazon S3 integration creation failed: {e}")
-            return {"error": str(e), "status": "failed"}
+        return await self._create_integration(
+            integration_type="amazon_s3",
+            configuration={
+                "bucket_name": bucket_name,
+                "output_directory": output_directory,
+            },
+            credentials=credentials,
+            provider_ids=provider_ids,
+            enabled=enabled,
+        )
 
     async def create_aws_security_hub_integration(
         self,
-        provider_id: str = Field(
+        provider_id: NonBlankStr = Field(
             description="Prowler UUID of the AWS provider whose findings are sent to Security Hub. It must be an AWS provider, and it can only have one Security Hub integration. Use prowler_search_providers with provider_type=['aws'] to find it."
         ),
         send_only_fails: bool = Field(
@@ -282,15 +281,15 @@ class IntegrationsTools(BaseTool):
             default=False,
             description="When true, findings that are no longer present in the latest scan are archived in Security Hub.",
         ),
-        role_arn: str | None = Field(
+        role_arn: NonBlankStr | None = Field(
             default=None,
             description="ARN of a dedicated IAM role Prowler assumes to write to Security Hub. Leave every credential parameter empty to reuse the credentials already stored for the provider, which is the recommended setup.",
         ),
-        external_id: str | None = Field(
+        external_id: NonBlankStr | None = Field(
             default=None,
             description="External ID required by the trust policy of the assumed role.",
         ),
-        role_session_name: str | None = Field(
+        role_session_name: NonBlankStr | None = Field(
             default=None,
             description="Identifier for the role session, useful to track it in AWS logs. Only letters, digits and the characters =,.@_- are allowed.",
         ),
@@ -298,14 +297,14 @@ class IntegrationsTools(BaseTool):
             default=None,
             description="Duration of the assumed role session in seconds. Must be between 900 and 43200. Defaults to 3600 when omitted.",
         ),
-        aws_access_key_id: str | None = Field(
+        aws_access_key_id: NonBlankStr | None = Field(
             default=None, description="AWS access key ID for dedicated credentials."
         ),
-        aws_secret_access_key: str | None = Field(
+        aws_secret_access_key: NonBlankStr | None = Field(
             default=None,
             description="AWS secret access key. Required when 'aws_access_key_id' is provided.",
         ),
-        aws_session_token: str | None = Field(
+        aws_session_token: NonBlankStr | None = Field(
             default=None,
             description="AWS session token, only for temporary credentials.",
         ),
@@ -344,40 +343,36 @@ class IntegrationsTools(BaseTool):
             f"Creating AWS Security Hub integration for provider {provider_id}..."
         )
 
-        try:
-            credentials = self._build_aws_credentials(
-                role_arn=role_arn,
-                external_id=external_id,
-                role_session_name=role_session_name,
-                session_duration=session_duration,
-                aws_access_key_id=aws_access_key_id,
-                aws_secret_access_key=aws_secret_access_key,
-                aws_session_token=aws_session_token,
-            )
+        credentials = self._build_aws_credentials(
+            role_arn=role_arn,
+            external_id=external_id,
+            role_session_name=role_session_name,
+            session_duration=session_duration,
+            aws_access_key_id=aws_access_key_id,
+            aws_secret_access_key=aws_secret_access_key,
+            aws_session_token=aws_session_token,
+        )
 
-            return await self._create_integration(
-                integration_type="aws_security_hub",
-                configuration={
-                    "send_only_fails": send_only_fails,
-                    "archive_previous_findings": archive_previous_findings,
-                },
-                credentials=credentials,
-                provider_ids=[provider_id],
-                enabled=enabled,
-            )
-        except Exception as e:
-            self.logger.error(f"AWS Security Hub integration creation failed: {e}")
-            return {"error": str(e), "status": "failed"}
+        return await self._create_integration(
+            integration_type="aws_security_hub",
+            configuration={
+                "send_only_fails": send_only_fails,
+                "archive_previous_findings": archive_previous_findings,
+            },
+            credentials=credentials,
+            provider_ids=[provider_id],
+            enabled=enabled,
+        )
 
     async def create_jira_integration(
         self,
-        domain: str = Field(
+        domain: NonBlankStr = Field(
             description="Atlassian site name, without the '.atlassian.net' suffix. For the site 'https://acme.atlassian.net' the value is 'acme'. Full URLs are accepted and normalized automatically."
         ),
-        user_mail: str = Field(
+        user_mail: NonBlankStr = Field(
             description="Email address of the Atlassian account that owns the API token."
         ),
-        api_token: str = Field(
+        api_token: NonBlankStr = Field(
             description="Atlassian API token, created from the account settings. It needs the 'read:jira-user', 'read:jira-work' and 'write:jira-work' scopes."
         ),
         enabled: bool = Field(
@@ -416,31 +411,25 @@ class IntegrationsTools(BaseTool):
         3. Use prowler_get_jira_issue_types with that project key to pick an issue type
         4. Use prowler_send_findings_to_jira to create the work items
         """
-        try:
-            normalized_domain = self._normalize_atlassian_domain(domain)
-            self.logger.info(
-                f"Creating Jira integration for domain {normalized_domain}..."
-            )
+        normalized_domain = self._normalize_atlassian_domain(domain)
+        self.logger.info(f"Creating Jira integration for domain {normalized_domain}...")
 
-            return await self._create_integration(
-                integration_type="jira",
-                # Jira rejects any configuration in the payload, the API generates it
-                configuration={},
-                credentials={
-                    "domain": normalized_domain,
-                    "user_mail": user_mail,
-                    "api_token": api_token,
-                },
-                provider_ids=[],
-                enabled=enabled,
-            )
-        except Exception as e:
-            self.logger.error(f"Jira integration creation failed: {e}")
-            return {"error": str(e), "status": "failed"}
+        return await self._create_integration(
+            integration_type="jira",
+            # Jira rejects any configuration in the payload, the API generates it
+            configuration={},
+            credentials={
+                "domain": normalized_domain,
+                "user_mail": user_mail,
+                "api_token": api_token,
+            },
+            provider_ids=[],
+            enabled=enabled,
+        )
 
     async def update_integration(
         self,
-        integration_id: str = Field(
+        integration_id: NonBlankStr = Field(
             description="UUID of the integration to update. Use prowler_list_integrations to find it."
         ),
         enabled: bool | None = Field(
@@ -494,96 +483,86 @@ class IntegrationsTools(BaseTool):
         """
         self.logger.info(f"Updating integration {integration_id}...")
 
-        try:
-            current = DetailedIntegration.from_api_response(
-                await self._get_integration_raw(integration_id)
-            )
-            integration_type = current.integration_type
+        current = DetailedIntegration.from_api_response(
+            await self._get_integration_raw(integration_id)
+        )
+        integration_type = current.integration_type
 
-            if provider_ids is not None:
-                if integration_type == "jira":
-                    raise ValueError(
-                        "Jira integrations are tenant-wide and cannot be attached to providers."
-                    )
-                if integration_type == "aws_security_hub" and len(provider_ids) != 1:
-                    raise ValueError(
-                        "AWS Security Hub integrations must stay attached to exactly one AWS "
-                        f"provider, got {len(provider_ids)}. Pass a single provider ID, or use "
-                        "prowler_delete_integration to stop sending findings to Security Hub."
-                    )
-
-            attributes: dict[str, Any] = {}
-            if enabled is not None:
-                attributes["enabled"] = enabled
-
-            if credentials is not None:
-                attributes["credentials"] = self._validate_credentials(
-                    integration_type, self._as_dict(credentials, "credentials")
+        if provider_ids is not None:
+            if integration_type == "jira":
+                raise InvalidArgument(
+                    "Jira integrations are tenant-wide and cannot be attached to providers."
+                )
+            if integration_type == "aws_security_hub" and len(provider_ids) != 1:
+                raise InvalidArgument(
+                    "AWS Security Hub integrations must stay attached to exactly one AWS "
+                    f"provider, got {len(provider_ids)}. Pass a single provider ID, or use "
+                    "prowler_delete_integration to stop sending findings to Security Hub."
                 )
 
-            if configuration is not None:
-                if integration_type == "jira":
-                    raise ValueError(
-                        "Jira integrations do not accept a configuration: it is generated by Prowler. "
-                        "Update the credentials instead, or run prowler_test_integration_connection to "
-                        "refresh the available projects and issue types."
-                    )
-                merged = dict(current.configuration)
-                merged.update(self._as_dict(configuration, "configuration"))
-                # Server-owned, the API repopulates it from the connection check
-                merged.pop("regions", None)
-                merged.pop("enabled_regions", None)
-                attributes["configuration"] = merged
+        attributes: dict[str, Any] = {}
+        if enabled is not None:
+            attributes["enabled"] = enabled
 
-            if not attributes and provider_ids is None:
-                self.logger.info("No changes provided, returning the current state")
-                return current.model_dump()
+        if credentials is not None:
+            attributes["credentials"] = self._validate_credentials(
+                integration_type, self._as_dict(credentials, "credentials")
+            )
 
-            update_body: dict[str, Any] = {
-                "data": {
-                    "type": "integrations",
-                    "id": integration_id,
-                    "attributes": attributes,
-                }
+        if configuration is not None:
+            if integration_type == "jira":
+                raise InvalidArgument(
+                    "Jira integrations do not accept a configuration: it is generated by Prowler. "
+                    "Update the credentials instead, or run prowler_test_integration_connection to "
+                    "refresh the available projects and issue types."
+                )
+            merged = dict(current.configuration)
+            merged.update(self._as_dict(configuration, "configuration"))
+            # Server-owned, the API repopulates it from the connection check
+            merged.pop("regions", None)
+            merged.pop("enabled_regions", None)
+            attributes["configuration"] = merged
+
+        if not attributes and provider_ids is None:
+            self.logger.info("No changes provided, returning the current state")
+            return current.model_dump()
+
+        update_body: dict[str, Any] = {
+            "data": {
+                "type": "integrations",
+                "id": integration_id,
+                "attributes": attributes,
             }
-            if provider_ids is not None:
-                update_body["data"]["relationships"] = _providers_relationship(
-                    provider_ids
-                )
+        }
+        if provider_ids is not None:
+            update_body["data"]["relationships"] = _providers_relationship(provider_ids)
 
-            await self.api_client.patch(
-                f"/integrations/{integration_id}", json_data=update_body
-            )
+        await self.api_client.patch(
+            f"/integrations/{integration_id}", json_data=update_body
+        )
 
-            # A different provider means different effective credentials and different
-            # discovered configuration, so the stored connection state is stale too
-            providers_changed = provider_ids is not None and set(provider_ids) != set(
-                current.provider_ids
-            )
-            recheck_connection = (
-                credentials is not None
-                or configuration is not None
-                or providers_changed
-            )
-            connection_status = (
-                await self._test_connection(integration_id)
-                if recheck_connection
-                else None
-            )
+        # A different provider means different effective credentials and different
+        # discovered configuration, so the stored connection state is stale too
+        providers_changed = provider_ids is not None and set(provider_ids) != set(
+            current.provider_ids
+        )
+        recheck_connection = (
+            credentials is not None or configuration is not None or providers_changed
+        )
+        connection_status = (
+            await self._test_connection(integration_id) if recheck_connection else None
+        )
 
-            updated = await self._get_integration_raw(integration_id)
-            if connection_status is not None:
-                return IntegrationConnectionStatus.create(
-                    updated, connection_status
-                ).model_dump()
-            return DetailedIntegration.from_api_response(updated).model_dump()
-        except Exception as e:
-            self.logger.error(f"Integration update failed: {e}")
-            return {"error": str(e), "status": "failed"}
+        updated = await self._get_integration_raw(integration_id)
+        if connection_status is not None:
+            return IntegrationConnectionStatus.create(
+                updated, connection_status
+            ).model_dump()
+        return DetailedIntegration.from_api_response(updated).model_dump()
 
     async def delete_integration(
         self,
-        integration_id: str = Field(
+        integration_id: NonBlankStr = Field(
             description="UUID of the integration to permanently remove. Use prowler_list_integrations to find it."
         ),
     ) -> dict[str, Any]:
@@ -606,22 +585,15 @@ class IntegrationsTools(BaseTool):
         """
         self.logger.info(f"Deleting integration {integration_id}...")
 
-        try:
-            await self.api_client.delete(f"/integrations/{integration_id}")
-            return {
-                "deleted": True,
-                "message": f"Integration {integration_id} deleted successfully",
-            }
-        except Exception as e:
-            self.logger.error(f"Integration deletion failed: {e}")
-            return {
-                "deleted": False,
-                "message": f"Integration {integration_id} deletion failed: {str(e)}",
-            }
+        await self.api_client.delete(f"/integrations/{integration_id}")
+        # No `deleted` flag: an integration that was not deleted leaves this tool
+        # as an error, so the flag could only ever be True and a reader branching
+        # on it would be looking for a shape that does not exist.
+        return {"message": f"Integration {integration_id} deleted successfully"}
 
     async def test_integration_connection(
         self,
-        integration_id: str = Field(
+        integration_id: NonBlankStr = Field(
             description="UUID of the integration to check. Use prowler_list_integrations to find it."
         ),
     ) -> dict[str, Any]:
@@ -654,10 +626,10 @@ class IntegrationsTools(BaseTool):
 
     async def get_jira_issue_types(
         self,
-        integration_id: str = Field(
+        integration_id: NonBlankStr = Field(
             description="UUID of the Jira integration. Use prowler_list_integrations with integration_type=['jira'] to find it."
         ),
-        project_key: str = Field(
+        project_key: NonBlankStr = Field(
             description="Key of the Jira project to read the issue types from (e.g. 'PROJ'). It must be one of the keys in the 'projects' mapping of the integration configuration."
         ),
     ) -> dict[str, Any]:
@@ -692,13 +664,13 @@ class IntegrationsTools(BaseTool):
 
     async def send_findings_to_jira(
         self,
-        integration_id: str = Field(
+        integration_id: NonBlankStr = Field(
             description="UUID of the Jira integration to send the findings through. It must be enabled."
         ),
-        project_key: str = Field(
+        project_key: NonBlankStr = Field(
             description="Key of the Jira project the work items are created in (e.g. 'PROJ'). It must be one of the keys in the 'projects' mapping of the integration configuration."
         ),
-        issue_type: str = Field(
+        issue_type: NonBlankStr = Field(
             description="Jira issue type for the created work items (e.g. 'Task', 'Bug', 'Story'). It must be one of the values returned by prowler_get_jira_issue_types for this project."
         ),
         finding_ids: list[str] = Field(
@@ -783,20 +755,26 @@ class IntegrationsTools(BaseTool):
                 return self._jira_dispatch_unknown(
                     task_id=None,
                     error=(
-                        f"the request that starts the dispatch failed on the server: {e} "
+                        "the request that starts the dispatch failed on Prowler's side. "
                         "It may have been queued anyway."
                     ),
                 )
 
             self.logger.error(f"Jira dispatch was rejected by Prowler: {e}")
             return self._jira_dispatch_rejected(str(e))
+        except CredentialError:
+            # Authentication happens before the request goes out, so nothing was
+            # queued. It is raised rather than reported as a dispatch outcome:
+            # there is no partial state to describe, and the shared classifier
+            # says what has to be fixed, which no retry of this call can.
+            raise
         except Exception as e:
             # No answer came back, so the request may still have been accepted
             self.logger.error(f"Jira dispatch could not be started: {e}")
             return self._jira_dispatch_unknown(
                 task_id=None,
                 error=(
-                    f"the request that starts the dispatch got no answer: {e} "
+                    "the request that starts the dispatch got no answer. "
                     "It may have been accepted anyway."
                 ),
             )
@@ -866,7 +844,7 @@ class IntegrationsTools(BaseTool):
         normalized = normalized.removesuffix(".atlassian.net")
 
         if not normalized:
-            raise ValueError(
+            raise InvalidArgument(
                 f"Invalid Jira domain: {domain}. Provide the Atlassian site name, for example "
                 "'acme' for the site 'https://acme.atlassian.net'."
             )
@@ -890,7 +868,7 @@ class IntegrationsTools(BaseTool):
             if not isinstance(credentials.get(key), str) or not credentials[key].strip()
         ]
         if missing:
-            raise ValueError(
+            raise InvalidArgument(
                 "Jira credentials are replaced as a whole, so 'domain', 'user_mail' and "
                 f"'api_token' are all required. Missing or empty: {', '.join(missing)}. "
                 "Sending an incomplete object would destroy the stored credentials and break "
@@ -908,29 +886,33 @@ class IntegrationsTools(BaseTool):
             try:
                 value = json.loads(value)
             except json.JSONDecodeError as e:
-                raise ValueError(f"Invalid JSON for {param_name}: {e}")
+                raise InvalidArgument(f"Invalid JSON for {param_name}: {e}") from e
 
         if not isinstance(value, dict):
-            raise ValueError(f"{param_name} must be a JSON object.")
+            raise InvalidArgument(f"{param_name} must be a JSON object.")
         return value
 
     async def _get_integration_raw(self, integration_id: str) -> dict[str, Any]:
         """Fetch the raw JSON:API resource of an integration.
 
         Raises:
-            ValueError: If the payload does not contain a usable integration resource
+            ToolError: If the payload does not contain a usable integration resource.
+                Raised without a ``from`` clause because these messages name the
+                integration and the tool that lists valid IDs, and the two cases
+                are reported differently: a missing resource is the caller's
+                mistake, a resource without attributes is the API's.
         """
         response = await self.api_client.get(f"/integrations/{integration_id}")
         integration = response.get("data")
 
         if not isinstance(integration, dict) or not integration.get("id"):
-            raise ValueError(
+            raise ToolError(
                 f"Integration {integration_id} was not found. Use prowler_list_integrations "
                 "to get a valid integration ID."
             )
 
         if not isinstance(integration.get("attributes"), dict):
-            raise ValueError(
+            raise ToolError(
                 f"Prowler returned integration {integration_id} without its attributes, so "
                 "its state cannot be read."
             )
@@ -970,7 +952,9 @@ class IntegrationsTools(BaseTool):
         integration_id = api_response.get("data", {}).get("id")
 
         if not integration_id:
-            raise ValueError(
+            # The integration may well exist, so this must not read as "nothing
+            # happened" and invite a duplicate.
+            raise ToolError(
                 "Prowler accepted the integration creation but did not return its ID, so the "
                 "connection could not be checked. Use prowler_list_integrations to see whether "
                 "the integration exists before creating it again."
@@ -981,11 +965,17 @@ class IntegrationsTools(BaseTool):
         try:
             integration = await self._get_integration_raw(integration_id)
         except Exception as e:
-            # The integration exists, so surface its ID instead of a plain read failure
-            raise ValueError(
-                f"Integration {integration_id} was created, but reading its state failed: {e} "
+            # The integration exists, so surface its ID instead of a plain read
+            # failure. No `from` clause: a cause would let the shared classifier
+            # replace this with a sentence that does not mention the ID. The
+            # failure text stays in the log, where the classifier would keep it.
+            self.logger.error(
+                f"Integration {integration_id} could not be read back: {e}"
+            )
+            raise ToolError(
+                f"Integration {integration_id} was created, but reading its state failed. "
                 "Use prowler_get_integration with that ID to check it."
-            ) from e
+            )
 
         return IntegrationConnectionStatus.create(
             integration, connection_status
@@ -1030,7 +1020,7 @@ class IntegrationsTools(BaseTool):
             return {
                 "connected": None,
                 "error": (
-                    f"The connection check could not be completed: {e} This says nothing "
+                    "The connection check could not be completed. This says nothing "
                     "about the stored credentials, run prowler_test_integration_connection "
                     "to check them again."
                 ),
diff --git a/mcp_server/prowler_mcp_server/prowler_app/tools/muting.py b/mcp_server/prowler_mcp_server/prowler_app/tools/muting.py
index 37e1504165..69a5f8884c 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/tools/muting.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/tools/muting.py
@@ -8,8 +8,11 @@ This module provides tools for managing finding muting in Prowler, including:
 import json
 from typing import Any
 
+from fastmcp.exceptions import ToolError
 from pydantic import Field
 
+from prowler_mcp_server.lib.errors import InvalidArgument
+from prowler_mcp_server.lib.types import NonBlankStr
 from prowler_mcp_server.prowler_app.models.muting import (
     DetailedMuteRule,
     MutelistResponse,
@@ -28,10 +31,31 @@ class MutingTools(BaseTool):
 
     # ===== MUTELIST TOOLS =====
 
+    async def _get_mutelist_raw(self) -> dict[str, Any] | None:
+        """Return the tenant's mutelist, or None when it has none.
+
+        Returns:
+            The mutelist configuration, or None when the tenant has none
+        """
+        params = {
+            "filter[processor_type]": "mutelist",
+            "fields[processors]": "processor_type,configuration,inserted_at,updated_at",
+        }
+
+        clean_params = self.api_client.build_filter_params(params)
+        api_response = await self.api_client.get("/processors", params=clean_params)
+
+        data = api_response.get("data", [])
+        if not data:
+            return None
+
+        # Only one mutelist can exist per tenant
+        return MutelistResponse.from_api_response(data[0]).model_dump()
+
     async def get_mutelist(self) -> dict[str, Any]:
         """Retrieve the current mutelist configuration for the tenant.
 
-        IMPORTANT: Only one mutelist can exist per tenant. Returns an error message if no mutelist exists.
+        IMPORTANT: Only one mutelist can exist per tenant. Fails with a message saying so if no mutelist exists.
         For detailed information about mutelist structure and configuration, search Prowler documentation
         using prowler_docs_search tool available in this MCP Server.
 
@@ -47,26 +71,15 @@ class MutingTools(BaseTool):
         """
         self.logger.info("Retrieving mutelist configuration...")
 
-        # Query processors filtered by type=mutelist
-        params = {
-            "filter[processor_type]": "mutelist",
-            "fields[processors]": "processor_type,configuration,inserted_at,updated_at",
-        }
-
-        clean_params = self.api_client.build_filter_params(params)
-        api_response = await self.api_client.get("/processors", params=clean_params)
-
-        data = api_response.get("data", [])
-
-        if len(data) == 0:
-            return {
-                "error": "No mutelist found",
-                "message": "No mutelist configuration exists for this tenant. Use prowler_set_mutelist to create one.",
-            }
-
-        # Return the first (and only) mutelist
-        mutelist = MutelistResponse.from_api_response(data[0])
-        return mutelist.model_dump()
+        mutelist = await self._get_mutelist_raw()
+        if mutelist is None:
+            # No `from`: this names the tool that creates one, which the shared
+            # classifier cannot know.
+            raise ToolError(
+                "No mutelist configuration exists for this tenant. Use "
+                "prowler_set_mutelist to create one."
+            )
+        return mutelist
 
     async def set_mutelist(
         self,
@@ -128,9 +141,9 @@ Structure:
             configuration = json.loads(configuration)
 
         # Check if mutelist already exists
-        existing_mutelist = await self.get_mutelist()
+        existing_mutelist = await self._get_mutelist_raw()
 
-        if "error" in existing_mutelist:
+        if existing_mutelist is None:
             # Create new mutelist
             self.logger.info("Creating new mutelist...")
             create_body = {
@@ -183,21 +196,22 @@ Structure:
         self.logger.info("Deleting mutelist configuration...")
 
         # Get existing mutelist
-        existing_mutelist = await self.get_mutelist()
+        existing_mutelist = await self._get_mutelist_raw()
 
-        if "error" in existing_mutelist:
-            return {
-                "success": False,
-                "message": "No mutelist found to delete",
-            }
+        if existing_mutelist is None:
+            raise ToolError(
+                "There is no mutelist configuration to delete. Use "
+                "prowler_get_mutelist to confirm the current state."
+            )
 
         # Delete the mutelist
         mutelist_id = existing_mutelist["id"]
         await self.api_client.delete(f"/processors/{mutelist_id}")
 
+        # No success flag: a deletion that did not happen leaves this tool as an
+        # error, so there is no second shape for one to distinguish.
         return {
-            "success": True,
-            "message": "Mutelist deleted successfully",
+            "message": "Mutelist deleted successfully. Findings it had muted stay muted."
         }
 
     # ===== MUTE RULES TOOLS =====
@@ -268,7 +282,7 @@ Structure:
                 elif enabled.lower() == "false":
                     params["filter[enabled]"] = False
                 else:
-                    raise ValueError(
+                    raise InvalidArgument(
                         f"Invalid enabled value: {enabled}. Valid values are True, False, 'true', 'false' or None."
                     )
         if search:
@@ -282,7 +296,7 @@ Structure:
 
     async def get_mute_rule(
         self,
-        rule_id: str = Field(
+        rule_id: NonBlankStr = Field(
             description="UUID of the mute rule to retrieve. Must be a valid UUID format (e.g., '019ac0d6-90d5-73e9-9acf-c22e256f1bac')."
         ),
     ) -> dict[str, Any]:
@@ -316,10 +330,10 @@ Structure:
 
     async def create_mute_rule(
         self,
-        name: str = Field(
+        name: NonBlankStr = Field(
             description="Name for the mute rule. Should be descriptive and meaningful (e.g., 'Dev S3 Public Access', 'Test Environment IMDSv1')."
         ),
-        reason: str = Field(
+        reason: NonBlankStr = Field(
             description="Reason for muting these findings. Document why this security issue is acceptable or intentional (e.g., 'Development environment with controlled access', 'Legacy application requires IMDSv1')."
         ),
         finding_ids: list[str] = Field(
@@ -367,14 +381,14 @@ Structure:
 
     async def update_mute_rule(
         self,
-        rule_id: str = Field(
+        rule_id: NonBlankStr = Field(
             description="UUID of the mute rule to update. Must be a valid UUID format."
         ),
-        name: str | None = Field(
+        name: NonBlankStr | None = Field(
             default=None,
             description="New name for the rule. If not specified, name remains unchanged.",
         ),
-        reason: str | None = Field(
+        reason: NonBlankStr | None = Field(
             default=None,
             description="New reason for the rule. If not specified, reason remains unchanged.",
         ),
@@ -435,7 +449,7 @@ Structure:
 
     async def delete_mute_rule(
         self,
-        rule_id: str = Field(
+        rule_id: NonBlankStr = Field(
             description="UUID of the mute rule to delete. Must be a valid UUID format."
         ),
     ) -> dict[str, Any]:
@@ -457,15 +471,18 @@ Structure:
         """
         self.logger.info(f"Deleting mute rule {rule_id}...")
 
-        result = await self.api_client.delete(f"/mute-rules/{rule_id}")
+        # A deletion that did not happen answers with an error status, which
+        # leaves this tool as an error. Reaching this line means Prowler accepted
+        # it, whether it answered 204 with no body or 200 with the deleted
+        # resource, so there is no second outcome to report: the previous
+        # "Failed to delete mute rule" fired on the shape of the answer rather
+        # than on anything having gone wrong, and said nothing a caller could act
+        # on.
+        await self.api_client.delete(f"/mute-rules/{rule_id}")
 
-        if result.get("success"):
-            return {
-                "success": True,
-                "message": "Mute rule deleted successfully",
-            }
-        else:
-            return {
-                "success": False,
-                "message": "Failed to delete mute rule",
-            }
+        return {
+            "message": (
+                f"Mute rule {rule_id} deleted successfully. The findings it muted stay "
+                "muted."
+            )
+        }
diff --git a/mcp_server/prowler_mcp_server/prowler_app/tools/providers.py b/mcp_server/prowler_mcp_server/prowler_app/tools/providers.py
index 3ba417d677..542289c652 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/tools/providers.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/tools/providers.py
@@ -6,10 +6,14 @@ including searching, connecting, and deleting providers.
 
 from typing import Any
 
+from fastmcp.exceptions import ToolError
 from pydantic import Field
 
+from prowler_mcp_server.lib.errors import InvalidArgument
+from prowler_mcp_server.lib.types import NonBlankStr
 from prowler_mcp_server.prowler_app.models.providers import (
     ProviderConnectionStatus,
+    ProviderDeletionResult,
     ProvidersListResponse,
 )
 from prowler_mcp_server.prowler_app.tools.base import BaseTool
@@ -95,7 +99,7 @@ class ProvidersTools(BaseTool):
                 elif connected.lower() == "false":
                     params["filter[connected]"] = False
                 else:
-                    raise ValueError(
+                    raise InvalidArgument(
                         f"Invalid connected value: {connected}. Valid values are True, False, 'true', 'false' or None."
                     )
 
@@ -128,13 +132,13 @@ class ProvidersTools(BaseTool):
 
     async def connect_provider(
         self,
-        provider_uid: str = Field(
+        provider_uid: NonBlankStr = Field(
             description="Provider's unique identifier. For supported UID provider formats, please refer to Prowler Hub/Prowler Documentation that you can also find in form of tools in this MCP Server"
         ),
-        provider_type: str = Field(
+        provider_type: NonBlankStr = Field(
             description="Type of provider to be scanned with Prowler. Valid values include: 'aws', 'azure', 'gcp', 'kubernetes'... For more valid values, please refer to Prowler Hub/Prowler Documentation that you can also find in form of tools in this MCP Server."
         ),
-        alias: str | None = Field(
+        alias: NonBlankStr | None = Field(
             default=None,
             description="Human-friendly name for this provider. Optional but recommended for easy identification. Use descriptive names to distinguish multiple accounts of the same type.",
         ),
@@ -291,7 +295,7 @@ class ProvidersTools(BaseTool):
 
     async def delete_provider(
         self,
-        provider_id: str = Field(
+        provider_id: NonBlankStr = Field(
             description="Prowler's internal UUID (v4) for the provider to permanently remove, generated when the provider was registered in the system. Use `prowler_search_providers` tool to find the provider_id if you only know the alias or the provider's own identifier (provider_uid)"
         ),
     ) -> dict[str, Any]:
@@ -300,33 +304,120 @@ class ProvidersTools(BaseTool):
         WARNING: This is a destructive operation that cannot be undone. The provider will need to be
         re-added with prowler_connect_provider if you want to scan it again.
 
-        The tool always returns the deletion status and message.
+        Prowler removes the provider and everything attached to it (its scans, findings and
+        resources) in a background task, so a large provider can take longer than the time
+        this tool waits for it.
+
+        The result includes:
+        - status: 'deleted' when Prowler finished removing the provider, 'in_progress' when
+          the deletion was accepted and is still running
+        - task_id: the background task, present when the deletion was still running
+
+        NEVER send the deletion again while status='in_progress'. Use prowler_search_providers
+        to check whether the provider is gone.
         """
         self.logger.info(f"Deleting provider {provider_id}...")
-        try:
-            # Initiate the deletion task
-            task_response = await self.api_client.delete(f"/providers/{provider_id}")
-            task_id = task_response.get("data", {}).get("id")
 
-            # Poll until task completes (with 60 second timeout)
+        # A failure of the request itself is left to the shared classifier: the
+        # deletion never started, so there is no partial state to describe.
+        task_response = await self.api_client.delete(f"/providers/{provider_id}")
+        task_id = task_response.get("data", {}).get("id")
+
+        if not task_id:
+            # The deletion may well be running, so this must not read as "nothing
+            # happened". No `from` clause: this names the provider and the tool
+            # that checks it, neither of which the shared classifier can know.
+            raise ToolError(
+                f"Prowler accepted the deletion of provider {provider_id} but did not "
+                "return the ID of the background task, so its outcome cannot be checked. "
+                "Use prowler_search_providers to see whether the provider is still there "
+                "before sending the deletion again."
+            )
+
+        try:
             await self.api_client.poll_task_until_complete(
                 task_id=task_id, timeout=60, poll_interval=1.0
             )
-
-            # If we reach here, the task completed successfully
-            return {
-                "deleted": True,
-                "message": f"Provider {provider_id} deleted successfully",
-            }
         except Exception as e:
-            self.logger.error(f"Provider deletion failed: {e}")
-            return {
-                "deleted": False,
-                "message": f"Provider {provider_id} deletion failed: {str(e)}",
-            }
+            self.logger.error(f"Provider deletion did not complete cleanly: {e}")
+            return await self._provider_deletion_fallback(provider_id, task_id)
+
+        return ProviderDeletionResult(
+            status="deleted",
+            message=f"Provider {provider_id} deleted successfully",
+        ).model_dump()
 
     # Private helper methods
 
+    async def _provider_deletion_fallback(
+        self, provider_id: str, task_id: str
+    ) -> dict[str, Any]:
+        """Report a provider deletion whose polling did not end on a completed task.
+
+        Running out of the polling window is not a failure: Prowler removes the
+        provider together with its scans, findings and resources, which outlives
+        60 seconds on a large account. The deletion was accepted and is still
+        going, so calling it failed would be wrong twice over -- it is not, and
+        it invites a retry of a destructive call already in flight.
+
+        The task is read once more here, because polling gives up on the clock
+        rather than on the task: a deletion that finished just after the last
+        poll is a finished deletion and is reported as one.
+
+        Only a task that actually stopped is an error, and it is raised rather
+        than returned, because then the provider is still there.
+
+        Raises:
+            ToolError: If the deletion task ended without deleting the provider.
+                Raised without a ``from`` clause because the message names what
+                was left behind, which the shared classifier cannot know.
+        """
+        state = None
+        try:
+            task = await self.api_client.get(f"/tasks/{task_id}")
+            state = task.get("data", {}).get("attributes", {}).get("state")
+        except Exception as e:
+            self.logger.error(f"Could not read the state of task {task_id}: {e}")
+
+        if state == "completed":
+            # The deletion outran the polling window by a moment, not by more.
+            return ProviderDeletionResult(
+                status="deleted",
+                message=f"Provider {provider_id} deleted successfully",
+            ).model_dump()
+
+        if state in ("failed", "cancelled"):
+            # The failure that got us here is logged, not relayed: it carries
+            # upstream text, and the classifier masks exactly this kind of
+            # message when a tool does not write it itself.
+            raise ToolError(
+                f"The task deleting provider {provider_id} ended as '{state}', so the "
+                "provider was not deleted. Prowler removes a provider together with its "
+                "scans, findings and resources, so part of that may already be gone. Use "
+                "prowler_search_providers to check the current state."
+            )
+
+        if state is None:
+            message = (
+                f"The deletion of provider {provider_id} was accepted, but its progress "
+                "could not be read, so whether it finished is unknown. Do not "
+                "send the deletion again. Use prowler_search_providers to check whether "
+                "the provider is gone."
+            )
+        else:
+            message = (
+                f"The deletion of provider {provider_id} was accepted and is still "
+                f"running (task state '{state}'), which is normal for a provider with "
+                "many scans and findings. Do not send the deletion again. Use "
+                "prowler_search_providers to check whether it is gone."
+            )
+
+        return ProviderDeletionResult(
+            status="in_progress",
+            task_id=task_id,
+            message=message,
+        ).model_dump()
+
     async def _check_provider_exists(self, provider_uid: str) -> str | None:
         """Check if a provider already exists by its UID.
 
@@ -357,7 +448,7 @@ class ProvidersTools(BaseTool):
             return prowler_provider_id
         else:
             # Multiple providers with the same UID is a data integrity issue
-            raise Exception(
+            raise ToolError(
                 f"Data integrity error: Found {len(providers)} providers with UID '{provider_uid}'. "
                 f"Each provider UID should be unique. Please contact support or manually clean up duplicate providers."
             )
@@ -392,7 +483,11 @@ class ProvidersTools(BaseTool):
 
         provider_id = await self._check_provider_exists(provider_uid)
         if provider_id is None:
-            raise Exception(f"Provider {provider_uid} creation failed")
+            raise ToolError(
+                f"Prowler accepted the creation of provider {provider_uid} but the "
+                "provider cannot be found afterwards. Use prowler_search_providers to "
+                "check whether it exists before creating it again."
+            )
         return provider_id
 
     async def _update_provider_alias(
@@ -418,7 +513,10 @@ class ProvidersTools(BaseTool):
             f"/providers/{prowler_provider_id}", json_data=update_body
         )
         if result.get("data", {}).get("attributes", {}).get("alias") != alias:
-            raise Exception(f"Provider {prowler_provider_id} alias update failed")
+            raise ToolError(
+                f"Provider {prowler_provider_id} exists, but its alias was not updated. "
+                "Use prowler_search_providers to read its current alias."
+            )
 
     def _determine_secret_type(self, credentials: dict[str, Any]) -> str:
         """Determine the secret type from credentials structure.
@@ -443,29 +541,32 @@ class ProvidersTools(BaseTool):
             prowler_provider_id: The Prowler-generated provider ID
 
         Returns:
-            The secret ID if exists, None otherwise
-        """
-        try:
-            response = await self.api_client.get(
-                "/providers/secrets",
-                params={"filter[provider]": prowler_provider_id},
-            )
-            secrets = response.get("data", [])
+            The secret ID if the provider has one, None if it has none
 
-            if len(secrets) > 0:
-                secret_id = secrets[0].get("id")
-                self.logger.info(
-                    f"Found existing secret {secret_id} for provider {prowler_provider_id}"
-                )
-                return secret_id
-            else:
-                self.logger.info(
-                    f"No existing secret found for provider {prowler_provider_id}"
-                )
-                return None
-        except Exception as e:
-            self.logger.error(f"Error checking for existing secret: {e}")
-            return None
+        Raises:
+            Exception: If the lookup itself failed, so that "no secret" is never
+                reported for a provider whose secret could not be read
+        """
+        # A failure here is not swallowed into None. None means "this provider has
+        # no secret", which sends `_store_credentials` down the create branch, and
+        # a provider holds at most one secret: creating a second one is refused,
+        # and the caller would be told its credentials were rejected when all that
+        # actually failed was this read.
+        response = await self.api_client.get(
+            "/providers/secrets",
+            params={"filter[provider]": prowler_provider_id},
+        )
+        secrets = response.get("data", [])
+
+        if len(secrets) > 0:
+            secret_id = secrets[0].get("id")
+            self.logger.info(
+                f"Found existing secret {secret_id} for provider {prowler_provider_id}"
+            )
+            return secret_id
+
+        self.logger.info(f"No existing secret found for provider {prowler_provider_id}")
+        return None
 
     async def _get_secret_type(self, secret_id: str) -> str | None:
         """Get the secret type for a given secret ID.
@@ -573,13 +674,24 @@ class ProvidersTools(BaseTool):
                 raise
 
     async def _test_connection(self, prowler_provider_id: str) -> dict[str, Any]:
-        """Test connection to a provider.
+        """Test connection to a provider and wait for the result.
+
+        A test that could not be run is reported as 'connected: None', which
+        `ProviderConnectionStatus` renders as 'not_tested', rather than as a
+        failure. Credentials that do not work come back as a completed task
+        carrying 'connected: False', so an exception here never describes them:
+        it means this server could not get the test run at all -- an expired
+        Prowler credential, a rate limit, a test that outlived the timeout.
+        Reporting that as 'failed' would blame the provider's credentials for
+        something they did not cause, and send the caller off to fix a working
+        role.
 
         Args:
             prowler_provider_id: The Prowler-generated provider ID
 
         Returns:
-            Connection status dictionary with 'connected' boolean and optional 'error' message
+            Connection status dictionary with a 'connected' boolean or None, and
+            an optional 'error' message
         """
         self.logger.info(f"Testing connection for provider {prowler_provider_id}...")
         try:
@@ -589,6 +701,11 @@ class ProvidersTools(BaseTool):
             )
             task_id = task_response.get("data", {}).get("id")
 
+            if not task_id:
+                raise ValueError(
+                    "Prowler did not return the ID of the connection test task."
+                )
+
             # Poll until task completes (with 60 second timeout)
             completed_task = await self.api_client.poll_task_until_complete(
                 task_id=task_id, timeout=60, poll_interval=1.0
@@ -596,13 +713,26 @@ class ProvidersTools(BaseTool):
 
             # Extract the result from the completed task
             task_result = (
-                completed_task.get("data", {}).get("attributes", {}).get("result", {})
+                completed_task.get("data", {}).get("attributes", {}).get("result")
             )
 
+            if not isinstance(task_result, dict):
+                raise ValueError(
+                    "The connection test task completed without reporting a result."
+                )
+
             return task_result
         except Exception as e:
-            self.logger.error(f"Connection test failed: {e}")
-            return {"connected": False, "error": str(e)}
+            self.logger.error(f"Connection test could not be completed: {e}")
+            return {
+                "connected": None,
+                "error": (
+                    "The connection test could not be completed. This says nothing "
+                    "about the provider's credentials, they were never tested. Use "
+                    "prowler_search_providers to read the connection state Prowler has "
+                    "stored for this provider."
+                ),
+            }
 
     async def _get_final_provider_state(
         self, prowler_provider_id: str
diff --git a/mcp_server/prowler_mcp_server/prowler_app/tools/resources.py b/mcp_server/prowler_mcp_server/prowler_app/tools/resources.py
index 88fcca25ae..96a24fb4b2 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/tools/resources.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/tools/resources.py
@@ -8,6 +8,7 @@ from typing import Any
 
 from pydantic import Field
 
+from prowler_mcp_server.lib.types import NonBlankStr
 from prowler_mcp_server.prowler_app.models.resources import (
     DetailedResource,
     ResourceEventsResponse,
@@ -176,7 +177,7 @@ class ResourcesTools(BaseTool):
 
     async def get_resource(
         self,
-        resource_id: str = Field(
+        resource_id: NonBlankStr = Field(
             description="Prowler's internal UUID (v4) for the resource to retrieve, generated when the resource was discovered in the system. Use `prowler_list_resources` tool to find the right ID"
         ),
     ) -> dict[str, Any]:
@@ -347,7 +348,7 @@ class ResourcesTools(BaseTool):
 
     async def get_resource_events(
         self,
-        resource_id: str = Field(
+        resource_id: NonBlankStr = Field(
             description="Prowler's internal UUID (v4) for the resource. Use `prowler_list_resources` to find the right ID, or get it from a finding's resource relationship via `prowler_get_finding_details`."
         ),
         lookback_days: int = Field(
diff --git a/mcp_server/prowler_mcp_server/prowler_app/tools/roles.py b/mcp_server/prowler_mcp_server/prowler_app/tools/roles.py
index 113694d8e8..8fc4daa20b 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/tools/roles.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/tools/roles.py
@@ -11,8 +11,11 @@ adding to it.
 
 from typing import Any
 
+from fastmcp.exceptions import ToolError
 from pydantic import Field
 
+from prowler_mcp_server.lib.errors import ProwlerAPIError
+from prowler_mcp_server.lib.types import NonBlankStr
 from prowler_mcp_server.prowler_app.models.roles import (
     DetailedRole,
     RolesListResponse,
@@ -70,7 +73,7 @@ class RolesTools(BaseTool):
 
     async def get_role(
         self,
-        role_id: str = Field(
+        role_id: NonBlankStr = Field(
             description="Prowler's internal UUID (v4) for the role to retrieve. Use `prowler_list_roles` to find role IDs if you only know a name."
         ),
     ) -> dict[str, Any]:
@@ -98,7 +101,7 @@ class RolesTools(BaseTool):
 
     async def get_user_roles(
         self,
-        user_id: str = Field(
+        user_id: NonBlankStr = Field(
             description="Prowler's internal UUID (v4) for the user whose roles you want. Use `prowler_list_users` to find user IDs, or `prowler_get_current_user` for the caller."
         ),
     ) -> dict[str, Any]:
@@ -124,10 +127,10 @@ class RolesTools(BaseTool):
 
     async def set_user_role(
         self,
-        user_id: str = Field(
+        user_id: NonBlankStr = Field(
             description="Prowler's internal UUID (v4) for the user whose role you want to set. Use `prowler_list_users` to find user IDs."
         ),
-        role_id: str = Field(
+        role_id: NonBlankStr = Field(
             description="Prowler's internal UUID (v4) for the role the user should hold. Use `prowler_list_roles` to find role IDs."
         ),
     ) -> dict[str, Any]:
@@ -166,11 +169,20 @@ class RolesTools(BaseTool):
         # user with no role at all. Confirm the role exists before replacing.
         try:
             await self.api_client.get(f"/roles/{role_id}")
-        except Exception as e:
-            raise ValueError(
-                f"Role {role_id} could not be read ({e}), so user {user_id} was left "
-                f"unchanged. Use `prowler_list_roles` to find a valid role ID."
-            ) from e
+        except ProwlerAPIError as e:
+            if e.status_code != 404:
+                # Only a not-found says anything about the role ID. A permission
+                # error, a rate limit or a server error is about the request, so
+                # it goes to the shared classifier rather than being reported as
+                # an ID the caller should replace.
+                raise
+            # No `from` clause: this says what state the user was left in, which
+            # the shared classifier cannot know, and a cause would let it replace
+            # this message with its own.
+            raise ToolError(
+                f"Role {role_id} does not exist in this tenant, so user {user_id} was "
+                f"left unchanged. Use `prowler_list_roles` to find a valid role ID."
+            )
 
         # PATCH replaces the user's whole role set with this single role, the
         # same call the Prowler UI makes when changing a user's role.
diff --git a/mcp_server/prowler_mcp_server/prowler_app/tools/scans.py b/mcp_server/prowler_mcp_server/prowler_app/tools/scans.py
index 21d1431b71..106fe69d0d 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/tools/scans.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/tools/scans.py
@@ -5,8 +5,10 @@ This module provides tools for managing and monitoring Prowler security scans.
 
 from typing import Any, Literal
 
+from fastmcp.exceptions import ToolError
 from pydantic import Field
 
+from prowler_mcp_server.lib.types import NonBlankStr
 from prowler_mcp_server.prowler_app.models.scans import (
     DetailedScan,
     ScanCreationResult,
@@ -127,7 +129,7 @@ class ScansTools(BaseTool):
 
     async def get_scan(
         self,
-        scan_id: str = Field(
+        scan_id: NonBlankStr = Field(
             description="Prowler's internal UUID (v4) for the scan to retrieve, generated when the scan was created (e.g., '123e4567-e89b-12d3-a456-426614174000'). Use `prowler_list_scans` tool to find scan IDs"
         ),
     ) -> dict[str, Any]:
@@ -171,10 +173,10 @@ class ScansTools(BaseTool):
 
     async def trigger_scan(
         self,
-        provider_id: str = Field(
+        provider_id: NonBlankStr = Field(
             description="Prowler's internal UUID (v4) for the provider to scan, generated when the provider was registered in the system (e.g., '4d0e2614-6385-4fa7-bf0b-c2e2f75c6877'). Use `prowler_search_providers` tool to find the provider ID"
         ),
-        name: str | None = Field(
+        name: NonBlankStr | None = Field(
             default=None,
             description="Optional human-friendly name for the scan. Use descriptive names to identify scan purpose or context, e.g., 'Weekly Production Security Audit', 'Pre-Deployment Validation', 'Compliance Check Q4 2025'",
         ),
@@ -191,60 +193,70 @@ class ScansTools(BaseTool):
         3. Use `prowler_get_scan` with the returned scan 'id' to monitor progress
         4. Once completed, use `prowler_search_security_findings` to analyze results
         """
-        try:
-            # Build request data
-            request_data: dict[str, Any] = {
-                "data": {
-                    "type": "scans",
-                    "attributes": {},
-                    "relationships": {
-                        "provider": {
-                            "data": {
-                                "type": "providers",
-                                "id": provider_id,
-                            },
+        # Build request data
+        request_data: dict[str, Any] = {
+            "data": {
+                "type": "scans",
+                "attributes": {},
+                "relationships": {
+                    "provider": {
+                        "data": {
+                            "type": "providers",
+                            "id": provider_id,
                         },
                     },
                 },
-            }
-            if name:
-                request_data["data"]["attributes"]["name"] = name
+            },
+        }
+        if name:
+            request_data["data"]["attributes"]["name"] = name
 
-            # Create scan (returns Task)
-            self.logger.info(f"Creating scan for provider {provider_id}")
-            task_response = await self.api_client.post("/scans", json_data=request_data)
+        # Create scan (returns Task)
+        self.logger.info(f"Creating scan for provider {provider_id}")
+        task_response = await self.api_client.post("/scans", json_data=request_data)
 
-            scan_id = (
-                task_response.get("data", {})
-                .get("attributes", {})
-                .get("task_args", {})
-                .get("scan_id", None)
+        scan_id = (
+            task_response.get("data", {})
+            .get("attributes", {})
+            .get("task_args", {})
+            .get("scan_id", None)
+        )
+
+        if not scan_id:
+            # The scan may well have been queued, so this must not read as
+            # "nothing happened" and invite a duplicate run. No `from` clause:
+            # this names the provider and the tool that checks for the scan,
+            # neither of which the shared classifier can know.
+            raise ToolError(
+                "Prowler accepted the scan but did not return its ID, so it "
+                "cannot be looked up. Use prowler_list_scans for provider "
+                f"{provider_id} to see whether a scan is already running before "
+                "triggering another one."
             )
 
-            if not scan_id:
-                raise Exception("No scan_id returned from scan creation")
-
-            self.logger.info(f"Scan created successfully: {scan_id}")
+        # The scan exists from here on, so a failure to read it back must name
+        # the ID rather than read as "the scan was not created".
+        try:
             scan_response = await self.api_client.get(f"/scans/{scan_id}")
             scan_info = DetailedScan.from_api_response(scan_response["data"])
-
-            return ScanCreationResult(
-                scan=scan_info,
-                status="success",
-                message=f"Scan {scan_id} created successfully. The scan may take some time to complete. Use prowler_get_scan tool with this ID to monitor progress.",
-            ).model_dump()
-
         except Exception as e:
-            self.logger.error(f"Scan creation failed: {e}")
-            return ScanCreationResult(
-                scan=None,
-                status="failed",
-                message=f"Scan creation failed: {str(e)}",
-            ).model_dump()
+            # The failure itself is logged, not relayed: what it says is the
+            # shared classifier's to mask, and what the caller needs is the ID.
+            self.logger.error(f"Scan {scan_id} could not be read back: {e}")
+            raise ToolError(
+                f"Scan {scan_id} was created for provider {provider_id}, but reading "
+                "its state failed. Use prowler_get_scan with that ID to monitor "
+                "it. Do not trigger the scan again."
+            )
+
+        return ScanCreationResult(
+            scan=scan_info,
+            message=f"Scan {scan_id} created successfully. The scan may take some time to complete. Use prowler_get_scan tool with this ID to monitor progress.",
+        ).model_dump()
 
     async def schedule_daily_scan(
         self,
-        provider_id: str = Field(
+        provider_id: NonBlankStr = Field(
             description="Prowler's internal UUID (v4) for the provider to scan, generated when the provider was registered in the system (e.g., '4d0e2614-6385-4fa7-bf0b-c2e2f75c6877'). Use `prowler_search_providers` tool to find the provider ID"
         ),
     ) -> dict[str, Any]:
@@ -280,26 +292,49 @@ class ScansTools(BaseTool):
                 },
             },
         )
-        task_state = (
+
+        # Reaching this line means the schedule exists. Prowler commits the
+        # recurring schedule and its first scan inside the transaction that
+        # serves this request, so an answer at all means it was created; a
+        # provider that already has one is refused with a 409 instead, which
+        # leaves this tool as an error.
+        #
+        # The task in the answer is the FIRST scan run, queued to start a few
+        # seconds later, not the schedule. Its state therefore says nothing
+        # about whether the schedule was created, and reporting it as the
+        # outcome would call a schedule that exists a failure and invite a
+        # retry that can only hit that 409.
+        first_run_state = (
             task_response.get("data", {}).get("attributes", {}).get("state", None)
         )
 
-        if task_state == "available":
-            return_message = "Daily schedule created successfully. The schedule is being set up in the background. Use prowler_list_scans with provider_id filter to view scheduled scans."
-        else:
-            return_message = "Daily schedule creation failed. Please try again later."
+        message = (
+            f"Daily schedule created for provider {provider_id}. Prowler will scan it "
+            "every 24 hours until the provider is deleted. Use prowler_list_scans with "
+            "this provider_id and trigger='scheduled' to view its scheduled scans."
+        )
+
+        if first_run_state in ("failed", "cancelled"):
+            # Worth saying: the schedule stands, but the run that was supposed to
+            # start now will not produce findings, and only a manual scan fills
+            # the gap before tomorrow.
+            message = (
+                f"{message} Note that the first scan, which Prowler starts immediately, "
+                f"ended as '{first_run_state}'. The daily schedule is unaffected, but "
+                "use prowler_trigger_scan if you need results before the next run."
+            )
 
         return ScheduleCreationResult(
-            scheduled=(task_state == "available"),
-            message=return_message,
+            first_run_state=first_run_state,
+            message=message,
         ).model_dump()
 
     async def update_scan(
         self,
-        scan_id: str = Field(
+        scan_id: NonBlankStr = Field(
             description="Prowler's internal UUID (v4) for the scan to update, generated when the scan was created (e.g., '123e4567-e89b-12d3-a456-426614174000'). Use `prowler_list_scans` tool to find the scan ID if you only know the provider or scan name. Returns an error if the scan ID is invalid or not found."
         ),
-        name: str = Field(
+        name: NonBlankStr = Field(
             description="New human-friendly name for the scan (3-100 characters). Use descriptive names to improve organization and tracking, e.g., 'Production Security Audit - Q4 2025', 'Post-Deployment Compliance Check'. IMPORTANT: Only the scan name can be updated - other attributes (state, progress, duration) are read-only and managed by the system."
         ),
     ) -> dict[str, Any]:
diff --git a/mcp_server/prowler_mcp_server/prowler_app/tools/users.py b/mcp_server/prowler_mcp_server/prowler_app/tools/users.py
index a7e31b60ad..f9b71ccd84 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/tools/users.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/tools/users.py
@@ -9,6 +9,7 @@ from typing import Any
 
 from pydantic import Field
 
+from prowler_mcp_server.lib.types import NonBlankStr
 from prowler_mcp_server.prowler_app.models.users import (
     DetailedUser,
     UsersListResponse,
@@ -79,7 +80,7 @@ class UsersTools(BaseTool):
 
     async def get_user(
         self,
-        user_id: str = Field(
+        user_id: NonBlankStr = Field(
             description="Prowler's internal UUID (v4) for the user to retrieve. Use `prowler_list_users` to find user IDs if you only know a name or email."
         ),
     ) -> dict[str, Any]:
diff --git a/mcp_server/prowler_mcp_server/prowler_app/utils/api_client.py b/mcp_server/prowler_mcp_server/prowler_app/utils/api_client.py
index 217496a347..cb4fbd87e8 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/utils/api_client.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/utils/api_client.py
@@ -118,7 +118,21 @@ class ProwlerAPIClient(metaclass=SingletonMeta):
             if detail:
                 message = f"{message} - {detail}"
 
-            raise ProwlerAPIError(message, status, detail=detail) from e
+            # Carried on the exception, not into the message: a tool needs the
+            # body to tell an answer with an error status -- a 404 holding the
+            # empty result of a query that matched nothing -- apart from a
+            # request that actually failed.
+            try:
+                body = e.response.json()
+            except ValueError:
+                body = None
+
+            raise ProwlerAPIError(
+                message,
+                status,
+                detail=detail,
+                payload=body if isinstance(body, dict) else None,
+            ) from e
         except httpx.RequestError as e:
             # No answer came back, so whether the request was applied is unknown.
             logger.error(f"Error during {method.value} {path}: {e}")
diff --git a/mcp_server/prowler_mcp_server/prowler_app/utils/auth.py b/mcp_server/prowler_mcp_server/prowler_app/utils/auth.py
index eff5d3a117..1af63920ec 100644
--- a/mcp_server/prowler_mcp_server/prowler_app/utils/auth.py
+++ b/mcp_server/prowler_mcp_server/prowler_app/utils/auth.py
@@ -6,6 +6,7 @@ from datetime import datetime
 from fastmcp.server.dependencies import get_http_headers
 
 from prowler_mcp_server import __version__
+from prowler_mcp_server.lib.errors import CredentialError
 from prowler_mcp_server.lib.logger import logger
 
 
@@ -64,7 +65,12 @@ class ProwlerAppAuth:
 
             # Decode and parse JSON
             decoded = base64.b64decode(base64_payload).decode("utf-8")
-            return json.loads(decoded)
+            payload = json.loads(decoded)
+
+            # A JWT payload is a JSON object. A list or a scalar decodes just as
+            # cleanly, so the type is checked here rather than left to blow up as
+            # an AttributeError on the first claim read.
+            return payload if isinstance(payload, dict) else None
         except Exception as e:
             logger.warning(f"Failed to parse JWT token: {e}")
             return None
@@ -76,14 +82,16 @@ class ProwlerAppAuth:
             authorization_header = headers.get("authorization", None)
 
             if not authorization_header:
-                raise ValueError("No authorization header provided")
+                raise CredentialError("No Authorization header was sent")
 
-            # Extract token from Bearer header
-            if authorization_header.startswith("Bearer "):
-                token = authorization_header.replace("Bearer ", "")
-            else:
-                raise ValueError(
-                    "Invalid authorization header format. Expected 'Bearer <token>'"
+            # Extract token from Bearer header. Authentication scheme names are
+            # case-insensitive (RFC 7235), and only the scheme prefix is removed:
+            # a token that happens to contain the word again keeps it.
+            scheme, _, credential = authorization_header.partition(" ")
+            token = credential.strip()
+            if scheme.lower() != "bearer" or not token:
+                raise CredentialError(
+                    "The Authorization header is not in 'Bearer <token>' form"
                 )
 
             # Check if it's an API key or JWT token
@@ -94,17 +102,29 @@ class ProwlerAppAuth:
                 # JWT token - validate and check expiration
                 payload = self._parse_jwt(token)
                 if not payload:
-                    raise ValueError("Invalid JWT token format")
+                    raise CredentialError("The token is not a readable JWT")
+
+                # Check if token is expired. `exp` is a numeric date in the
+                # spec, so a missing or non-numeric one makes the token
+                # unusable rather than merely stale -- comparing it would raise
+                # a TypeError and leave the failure masked as unclassified.
+                exp = payload.get("exp")
+                if isinstance(exp, bool) or not isinstance(exp, (int, float)):
+                    raise CredentialError(
+                        "The token carries no readable 'exp' expiration claim"
+                    )
 
-                # Check if token is expired
                 now = int(datetime.now().timestamp())
-                exp = payload.get("exp", 0)
                 if exp <= now:
-                    raise ValueError("Token has expired")
+                    raise CredentialError("The token has expired")
 
                 return token
         else:
-            raise ValueError(f"Invalid mode: {self.mode}")
+            # PROWLER_MCP_TRANSPORT_MODE holds something this server does not
+            # support. Nothing about a call caused it and nothing about a call
+            # can fix it, so it stays unclassified: masked for the model, logged
+            # for whoever runs the server.
+            raise RuntimeError(f"Invalid mode: {self.mode}")
 
     async def get_valid_token(self) -> str:
         """Get a valid token (API key or JWT token)."""
diff --git a/mcp_server/prowler_mcp_server/prowler_documentation/server.py b/mcp_server/prowler_mcp_server/prowler_documentation/server.py
index 9588302168..de0756a505 100644
--- a/mcp_server/prowler_mcp_server/prowler_documentation/server.py
+++ b/mcp_server/prowler_mcp_server/prowler_documentation/server.py
@@ -3,6 +3,7 @@ from typing import Any
 from fastmcp import FastMCP
 from pydantic import Field
 
+from prowler_mcp_server.lib.types import NonBlankStr
 from prowler_mcp_server.prowler_documentation.search_engine import (
     ProwlerDocsSearchEngine,
 )
@@ -14,7 +15,9 @@ prowler_docs_search_engine = ProwlerDocsSearchEngine()
 
 @docs_mcp_server.tool()
 def search(
-    term: str = Field(description="The term to search for in the documentation"),
+    term: NonBlankStr = Field(
+        description="The term to search for in the documentation"
+    ),
     page_size: int = Field(
         5,
         description="Number of top results to return. It must be between 1 and 20.",
@@ -39,7 +42,7 @@ def search(
 
 @docs_mcp_server.tool()
 def get_document(
-    doc_path: str = Field(
+    doc_path: NonBlankStr = Field(
         description="Path to the documentation file to retrieve. It is the same as the 'path' field of the search results. Use `prowler_docs_search` to find the path first."
     ),
 ) -> dict[str, str]:
diff --git a/mcp_server/prowler_mcp_server/prowler_hub/server.py b/mcp_server/prowler_mcp_server/prowler_hub/server.py
index 41e83eca90..8d18a2c240 100644
--- a/mcp_server/prowler_mcp_server/prowler_hub/server.py
+++ b/mcp_server/prowler_mcp_server/prowler_hub/server.py
@@ -9,6 +9,7 @@ from fastmcp import FastMCP
 from pydantic import Field
 
 from prowler_mcp_server import __version__
+from prowler_mcp_server.lib.types import NonBlankStr
 
 # Initialize FastMCP for Prowler Hub
 hub_mcp_server = FastMCP("prowler-hub")
@@ -149,7 +150,7 @@ async def list_checks(
 
 @hub_mcp_server.tool()
 async def semantic_search_checks(
-    term: str = Field(
+    term: NonBlankStr = Field(
         description="Search term. Examples: 'public access', 'encryption', 'MFA', 'logging'.",
     ),
 ) -> dict:
@@ -208,7 +209,7 @@ async def semantic_search_checks(
 
 @hub_mcp_server.tool()
 async def get_check_details(
-    check_id: str = Field(
+    check_id: NonBlankStr = Field(
         description="The check ID to retrieve details for. Example: 's3_bucket_level_public_access_block'"
     ),
 ) -> dict:
@@ -346,10 +347,10 @@ async def get_check_details(
 
 @hub_mcp_server.tool()
 async def get_check_code(
-    provider_id: str = Field(
+    provider_id: NonBlankStr = Field(
         description="Prowler Provider ID. Example: 'aws', 'azure', 'gcp', 'kubernetes'. Use `prowler_hub_list_providers` to get available provider IDs.",
     ),
-    check_id: str = Field(
+    check_id: NonBlankStr = Field(
         description="The check ID. Example: 's3_bucket_public_access'. Get IDs from `prowler_hub_list_checks` or `prowler_hub_search_checks`.",
     ),
 ) -> dict:
@@ -392,10 +393,10 @@ async def get_check_code(
 
 @hub_mcp_server.tool()
 async def get_check_fixer(
-    provider_id: str = Field(
+    provider_id: NonBlankStr = Field(
         description="Prowler Provider ID. Example: 'aws', 'azure', 'gcp', 'kubernetes'. Use `prowler_hub_list_providers` to get available provider IDs.",
     ),
-    check_id: str = Field(
+    check_id: NonBlankStr = Field(
         description="The check ID. Example: 's3_bucket_public_access'. Get IDs from `prowler_hub_list_checks` or `prowler_hub_search_checks`.",
     ),
 ) -> dict:
@@ -517,7 +518,7 @@ async def list_compliances(
 
 @hub_mcp_server.tool()
 async def semantic_search_compliances(
-    term: str = Field(
+    term: NonBlankStr = Field(
         description="Search term. Examples: 'CIS', 'HIPAA', 'PCI', 'GDPR', 'SOC2', 'NIST'.",
     ),
 ) -> dict:
@@ -568,7 +569,7 @@ async def semantic_search_compliances(
 
 @hub_mcp_server.tool()
 async def get_compliance_details(
-    compliance_id: str = Field(
+    compliance_id: NonBlankStr = Field(
         description="The compliance framework ID to retrieve details for. Example: 'cis_4.0_aws'. Use `prowler_hub_list_compliances` or `prowler_hub_semantic_search_compliances` to find available compliance IDs.",
     ),
 ) -> dict:
@@ -708,7 +709,7 @@ async def list_providers() -> dict:
 
 @hub_mcp_server.tool()
 async def get_provider_services(
-    provider_id: str = Field(
+    provider_id: NonBlankStr = Field(
         description="The provider ID to get services for. Example: 'aws', 'azure', 'gcp', 'kubernetes'. Use `prowler_hub_list_providers` to get available provider IDs.",
     ),
 ) -> dict:
diff --git a/mcp_server/tests/lib/test_errors.py b/mcp_server/tests/lib/test_errors.py
index 5986d883c4..cd32752b42 100644
--- a/mcp_server/tests/lib/test_errors.py
+++ b/mcp_server/tests/lib/test_errors.py
@@ -11,7 +11,11 @@ import pytest
 from fastmcp import Client
 from pydantic import BaseModel, ValidationError
 
-from prowler_mcp_server.lib.errors import InvalidArgument, _describe_failure
+from prowler_mcp_server.lib.errors import (
+    CredentialError,
+    InvalidArgument,
+    _describe_failure,
+)
 from prowler_mcp_server.prowler_app.utils.api_client import (
     ProwlerAPIError,
     ProwlerAPIInvalidResponse,
@@ -99,6 +103,19 @@ def test_an_argument_this_server_rejected_is_repeated_verbatim():
     assert message == "page_size must be between 1 and 1000."
 
 
+def test_a_credential_caught_here_is_answered_like_the_401_it_would_have_got():
+    """It is not an argument problem, and saying so stops a pointless retry."""
+    message = _describe_failure(CredentialError("the token has expired"))
+
+    assert "the token has expired" in message
+    assert "changing the arguments will not help" in message
+
+
+def test_a_transport_this_server_cannot_serve_is_left_masked():
+    """No call caused a bad PROWLER_MCP_TRANSPORT_MODE and no call can fix it."""
+    assert _describe_failure(RuntimeError("Invalid mode: websocket")) is None
+
+
 def test_a_pydantic_rejection_names_the_field_without_echoing_the_value():
     """Pydantic quotes `input_value` back, and these tools take credentials."""
 
@@ -195,3 +212,18 @@ async def test_an_unreadable_api_answer_does_not_reach_the_agent_as_a_bad_argume
     assert result.isError is True
     assert "gateway timeout" not in result.content[0].text
     assert "argument" not in result.content[0].text
+
+
+async def test_a_tool_specific_message_survives_masking(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """A `ToolError` raised without a `from` clause is the final word."""
+    mock_router.add("GET", "/api/v1/integrations/i1", json={"data": None})
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_get_integration", {"integration_id": "i1"}
+        )
+
+    assert result.isError is True
+    assert "prowler_list_integrations" in result.content[0].text
diff --git a/mcp_server/tests/lib/test_types.py b/mcp_server/tests/lib/test_types.py
new file mode 100644
index 0000000000..8af25a7aae
--- /dev/null
+++ b/mcp_server/tests/lib/test_types.py
@@ -0,0 +1,125 @@
+"""Tests for the argument types every tool shares.
+
+The bug these pin: "required" alone does not stop a blank identifier. A model
+that has no scan or query id to hand sends ``""`` rather than omitting the
+argument, and an unguarded empty string travels into a URL path or a request
+body -- where it comes back as a 404, or as an API rejection ("This field may
+not be blank") that names no argument and leaves the model with nothing to fix.
+"""
+
+import pytest
+from fastmcp import Client
+
+from tests.helpers.jsonapi import jsonapi_collection, jsonapi_resource
+
+SCAN_ID = "019ac0d6-90d5-73e9-9acf-c22e256f1bac"
+QUERIES = f"/api/v1/attack-paths-scans/{SCAN_ID}/queries"
+
+
+@pytest.mark.parametrize("query_id", ["", "   "], ids=["empty", "whitespace-only"])
+async def test_a_blank_identifier_is_rejected_before_any_request_goes_out(
+    mcp_root_server, mock_api_client, mock_router, query_id
+):
+    """The reported failure: a blank `query_id` reached Prowler as a 400.
+
+    The message has to name the argument. Prowler's own answer to the blank value
+    ("This field may not be blank") does not say which field, so the model had no
+    way to tell `scan_id` from `query_id` from the reply.
+    """
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_run_attack_paths_query",
+            {"scan_id": SCAN_ID, "query_id": query_id},
+        )
+
+    assert result.isError is True
+    assert "query_id" in result.content[0].text
+    assert mock_router.requests == []
+
+
+async def test_an_identifier_keeps_its_surrounding_whitespace_out_of_the_url(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """A padded id is the same id, and a raw one would build a URL-escaped path."""
+    mock_router.add("GET", QUERIES, json=jsonapi_collection([]))
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_list_attack_paths_queries", {"scan_id": f"  {SCAN_ID}  "}
+        )
+
+    assert result.isError is False
+    assert mock_router.paths() == [f"GET {QUERIES}"]
+
+
+async def test_a_blank_optional_value_is_rejected_rather_than_written(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """An omitted optional means "leave it alone"; a blank one would blank the field.
+
+    The API refuses it, so the only difference an unguarded blank makes is a
+    round trip and an error that names nothing.
+    """
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_update_mute_rule", {"rule_id": SCAN_ID, "name": ""}
+        )
+
+    assert result.isError is True
+    assert "name" in result.content[0].text
+    assert mock_router.requests == []
+
+
+async def test_an_omitted_optional_string_is_still_omitted(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """`NonBlankStr | None` must not turn "not provided" into a rejection."""
+    mock_router.add(
+        "GET",
+        f"/api/v1/mute-rules/{SCAN_ID}",
+        json={
+            "data": jsonapi_resource(
+                "mute-rules",
+                SCAN_ID,
+                {
+                    "name": "unchanged",
+                    "reason": "already reviewed",
+                    "enabled": True,
+                    "finding_uids": [],
+                },
+            )
+        },
+    )
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_update_mute_rule", {"rule_id": SCAN_ID}
+        )
+
+    assert result.isError is False
+
+
+async def test_every_required_string_argument_is_guarded_against_a_blank(
+    mcp_root_server,
+):
+    """A guard only one tool carries is one the next tool will be written without.
+
+    Declared as `minLength` rather than checked inside each tool, so a client sees
+    the constraint in the schema before it calls.
+    """
+    async with Client(mcp_root_server) as client:
+        tools = await client.list_tools()
+
+    unguarded = [
+        f"{tool.name}.{name}"
+        for tool in tools
+        for name, schema in tool.inputSchema.get("properties", {}).items()
+        # Plain required strings only. A union such as `dict | str` takes a JSON
+        # string, where a blank is a parse failure the classifier already
+        # explains, and a blank filter is a filter that matches everything.
+        if schema.get("type") == "string"
+        and name in tool.inputSchema.get("required", [])
+        and schema.get("minLength") != 1
+    ]
+
+    assert unguarded == []
diff --git a/mcp_server/tests/prowler_app/tools/test_attack_paths.py b/mcp_server/tests/prowler_app/tools/test_attack_paths.py
new file mode 100644
index 0000000000..3f20549796
--- /dev/null
+++ b/mcp_server/tests/prowler_app/tools/test_attack_paths.py
@@ -0,0 +1,225 @@
+"""Tests for the Attack Paths tools.
+
+An Attack Paths scan is a separate resource from a regular scan, with IDs of its
+own, and Prowler only creates one for an AWS provider. So the 404 these tools get
+is almost always a regular scan ID passed where an Attack Paths one belongs --
+and Prowler's own reason for it, a bare "Not found.", names neither the resource
+it looked in nor the tool that returns the right ID.
+"""
+
+import pytest
+from fastmcp import Client
+
+from tests.helpers.jsonapi import jsonapi_collection, jsonapi_resource
+
+QUERIES = "/api/v1/attack-paths-scans/s1/queries"
+
+
+async def test_an_id_that_is_not_an_attack_paths_scan_says_which_tool_returns_one(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """Relaying "Not found." sends an agent to re-check an ID it cannot fix.
+
+    The reply has to name the confusion it stands for: regular scan IDs do not
+    resolve here, and only AWS providers have an Attack Paths scan at all.
+    """
+    mock_router.add(
+        "GET",
+        QUERIES,
+        status=404,
+        json={"errors": [{"status": "404", "detail": "Not found."}]},
+    )
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="different resource from regular scans"):
+            await client.call_tool(
+                "prowler_list_attack_paths_queries", {"scan_id": "s1"}
+            )
+
+
+async def test_the_answer_names_the_tool_that_returns_a_usable_id(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """An explanation with no next step leaves the agent guessing IDs."""
+    mock_router.add(
+        "GET",
+        QUERIES,
+        status=404,
+        json={"errors": [{"status": "404", "detail": "Not found."}]},
+    )
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="prowler_list_attack_paths_scans"):
+            await client.call_tool(
+                "prowler_list_attack_paths_queries", {"scan_id": "s1"}
+            )
+
+
+async def test_a_failure_that_is_not_a_404_keeps_the_shared_message(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """Only the 404 means a bad ID. A 403 is a permission the ID cannot fix."""
+    mock_router.add(
+        "GET",
+        QUERIES,
+        status=403,
+        json={"errors": [{"status": "403", "detail": "Denied."}]},
+    )
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="prowler_get_current_user"):
+            await client.call_tool(
+                "prowler_list_attack_paths_queries", {"scan_id": "s1"}
+            )
+
+
+async def test_queries_come_back_as_a_list(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """The success path is unchanged."""
+    mock_router.add(
+        "GET",
+        QUERIES,
+        json=jsonapi_collection(
+            [
+                jsonapi_resource(
+                    "attack-paths-queries",
+                    "aws-ec2-instances-internet-exposed",
+                    {
+                        "name": "Internet exposed EC2",
+                        "description": "Find internet-exposed EC2 instances",
+                        "provider": "aws",
+                        "parameters": [],
+                    },
+                )
+            ]
+        ),
+    )
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool(
+            "prowler_list_attack_paths_queries", {"scan_id": "s1"}
+        )
+
+    assert result.data[0]["id"] == "aws-ec2-instances-internet-exposed"
+
+
+# ------------------------------------------------------------- running a query
+
+RUN = "/api/v1/attack-paths-scans/s1/queries/run"
+SCHEMA = "/api/v1/attack-paths-scans/s1/schema"
+
+EMPTY_RESULT = {
+    "data": {
+        "type": "attack-paths-query-results",
+        "id": "s1",
+        "attributes": {"nodes": [], "relationships": []},
+    }
+}
+
+
+def _run_args(query_id: str = "aws-ec2-instances-internet-exposed") -> dict[str, str]:
+    """Arguments for a query run against the mocked scan."""
+    return {"scan_id": "s1", "query_id": query_id}
+
+
+async def test_a_query_that_matched_nothing_is_an_answer_not_a_failure(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """Prowler answers a query that matched nothing with 404 and the result body.
+
+    Raising on the status called a clean account a failed call and sent the agent
+    off to re-check arguments that were right.
+    """
+    mock_router.add("POST", RUN, status=404, json=EMPTY_RESULT)
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_run_attack_paths_query", _run_args()
+        )
+
+    assert result.isError is False
+    assert "matched nothing" in result.structuredContent["message"]
+
+
+async def test_an_empty_result_does_not_come_back_as_an_empty_object(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """The serializer drops empty lists, so `{}` is all that would be left."""
+    mock_router.add("POST", RUN, status=404, json=EMPTY_RESULT)
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool("prowler_run_attack_paths_query", _run_args())
+
+    assert result.data != {}
+
+
+async def test_a_null_graph_is_read_as_an_empty_one(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """Prowler can spell the empty graph as `null` rather than as empty lists.
+
+    Reading `null` as if it were a graph crashed the parse, turning the same
+    "nothing matched" answer into an error the agent could not act on.
+    """
+    mock_router.add("POST", RUN, status=404, json={"data": {"attributes": None}})
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_run_attack_paths_query", _run_args()
+        )
+
+    assert result.isError is False
+    assert "matched nothing" in result.structuredContent["message"]
+
+
+async def test_a_run_against_an_unknown_scan_still_names_the_confusion(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """A 404 with no result body is the ID being wrong, not an empty answer."""
+    mock_router.add(
+        "POST",
+        RUN,
+        status=404,
+        json={"errors": [{"status": "404", "detail": "Not found."}]},
+    )
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="different resource from regular scans"):
+            await client.call_tool("prowler_run_attack_paths_query", _run_args())
+
+
+async def test_a_scan_whose_graph_records_no_schema_says_so(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """This 404 is about the graph, not the ID, so it must not blame the ID."""
+    mock_router.add(
+        "GET",
+        SCHEMA,
+        status=404,
+        json={"detail": "No cartography schema metadata found for this provider"},
+    )
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="no Cartography schema recorded"):
+            await client.call_tool(
+                "prowler_get_attack_paths_cartography_schema", {"scan_id": "s1"}
+            )
+
+
+async def test_a_schema_request_for_an_unknown_scan_names_the_confusion(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """The other 404 here is the ID, and Prowler writes a JSON:API error for it."""
+    mock_router.add(
+        "GET",
+        SCHEMA,
+        status=404,
+        json={"errors": [{"status": "404", "detail": "Not found."}]},
+    )
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="different resource from regular scans"):
+            await client.call_tool(
+                "prowler_get_attack_paths_cartography_schema", {"scan_id": "s1"}
+            )
diff --git a/mcp_server/tests/prowler_app/tools/test_compliance.py b/mcp_server/tests/prowler_app/tools/test_compliance.py
new file mode 100644
index 0000000000..373e1d7f6c
--- /dev/null
+++ b/mcp_server/tests/prowler_app/tools/test_compliance.py
@@ -0,0 +1,102 @@
+"""Tests for the compliance tools.
+
+Both compliance tools answer for exactly one scan. ``scan_id`` names it
+directly; ``provider_id`` names it indirectly, as "the latest completed scan of
+this provider". Passing both is not a refinement of either -- the scan the
+caller named may belong to a different provider entirely -- so it is rejected
+rather than resolved by preferring one, which would answer confidently for a
+provider nobody asked about.
+
+Tools are driven through an in-memory MCP client so FastMCP resolves the
+pydantic ``Field`` defaults and a raised failure arrives the way a client sees
+it.
+"""
+
+import pytest
+from fastmcp import Client
+
+from tests.helpers.jsonapi import jsonapi_collection, jsonapi_resource
+
+SCANS = "/api/v1/scans"
+OVERVIEWS = "/api/v1/compliance-overviews"
+REQUIREMENTS = f"{OVERVIEWS}/requirements"
+
+TOOLS = [
+    "prowler_get_compliance_overview",
+    "prowler_get_compliance_framework_state_details",
+]
+
+
+def arguments(tool: str, **overrides) -> dict:
+    """Build the arguments for either tool, which differ only in compliance_id."""
+    payload = dict(overrides)
+    if tool.endswith("framework_state_details"):
+        payload["compliance_id"] = "cis_1.5_aws"
+    return payload
+
+
+@pytest.mark.parametrize("tool", TOOLS)
+async def test_neither_a_scan_nor_a_provider_is_refused_before_any_request(
+    mcp_root_server, mock_api_client, mock_router, tool
+):
+    """There is no scan to answer for, and no way to guess one."""
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="must be provided"):
+            await client.call_tool(tool, arguments(tool))
+
+    assert mock_router.paths() == []
+
+
+@pytest.mark.parametrize("tool", TOOLS)
+async def test_a_scan_and_a_provider_together_are_refused_rather_than_reconciled(
+    mcp_root_server, mock_api_client, mock_router, tool
+):
+    """Silently keeping the scan would answer for whichever provider owns it.
+
+    That report names a scan the caller did ask for, so nothing about it looks
+    wrong -- while the provider they also named went unread.
+    """
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="not both"):
+            await client.call_tool(
+                tool, arguments(tool, scan_id="s1", provider_id="p1")
+            )
+
+    assert mock_router.paths() == []
+
+
+@pytest.mark.parametrize("tool", TOOLS)
+async def test_a_provider_on_its_own_resolves_to_its_latest_completed_scan(
+    mcp_root_server, mock_api_client, mock_router, tool
+):
+    """The indirection is the point of accepting a provider at all."""
+    mock_router.add(
+        "GET",
+        SCANS,
+        json=jsonapi_collection(
+            [jsonapi_resource("scans", "s9", {"state": "completed"})]
+        ),
+    )
+    mock_router.add("GET", OVERVIEWS, json=jsonapi_collection([]))
+    mock_router.add("GET", REQUIREMENTS, json=jsonapi_collection([]))
+    # Each tool reads the compliance state from its own endpoint; both filter it
+    # by the scan that had to be resolved first.
+    read = OVERVIEWS if tool.endswith("overview") else REQUIREMENTS
+
+    async with Client(mcp_root_server) as client:
+        await client.call_tool(tool, arguments(tool, provider_id="p1"))
+
+    assert mock_router.query_params("GET", SCANS)["filter[provider]"] == "p1"
+    assert mock_router.query_params("GET", read)["filter[scan_id]"] == "s9"
+
+
+@pytest.mark.parametrize("tool", TOOLS)
+async def test_a_provider_with_no_completed_scan_is_named_as_the_bad_argument(
+    mcp_root_server, mock_api_client, mock_router, tool
+):
+    """Nothing has been scanned yet, so there is no compliance state to report."""
+    mock_router.add("GET", SCANS, json=jsonapi_collection([]))
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="No completed scans found for provider p1"):
+            await client.call_tool(tool, arguments(tool, provider_id="p1"))
diff --git a/mcp_server/tests/prowler_app/tools/test_integrations.py b/mcp_server/tests/prowler_app/tools/test_integrations.py
index 9d165a60c6..d94dd8a21d 100644
--- a/mcp_server/tests/prowler_app/tools/test_integrations.py
+++ b/mcp_server/tests/prowler_app/tools/test_integrations.py
@@ -312,17 +312,16 @@ async def test_creating_a_jira_integration_rejects_an_empty_domain(
 ):
     """A domain that normalizes to nothing is caught before the round trip."""
     async with Client(mcp_root_server) as client:
-        result = await client.call_tool(
-            "prowler_create_jira_integration",
-            {
-                "domain": "https://",
-                "user_mail": "security@acme.com",
-                "api_token": "fake-atlassian-token-for-testing",
-            },
-        )
+        with pytest.raises(Exception, match="Invalid Jira domain"):
+            await client.call_tool(
+                "prowler_create_jira_integration",
+                {
+                    "domain": "https://",
+                    "user_mail": "security@acme.com",
+                    "api_token": "fake-atlassian-token-for-testing",
+                },
+            )
 
-    assert result.data["status"] == "failed"
-    assert "Invalid Jira domain" in result.data["error"]
     assert mock_router.requests == []
 
 
@@ -334,14 +333,10 @@ async def test_creating_a_jira_integration_rejects_an_empty_domain(
     ],
     ids=["security-hub", "amazon-s3"],
 )
-async def test_a_rejected_creation_is_reported_rather_than_raised(
+async def test_a_rejected_creation_fails_with_the_api_reason(
     mcp_root_server, mock_api_client, mock_router, tool, arguments
 ):
-    """Write tools answer with an error object so the agent can act on it.
-
-    A raised exception reaches the model as a tool failure with no detail, and
-    the API's message is exactly what tells it what to do next.
-    """
+    """A refused creation is a tool error, and it still carries the API's reason."""
     mock_router.add(
         "POST",
         INTEGRATIONS,
@@ -350,10 +345,8 @@ async def test_a_rejected_creation_is_reported_rather_than_raised(
     )
 
     async with Client(mcp_root_server) as client:
-        result = await client.call_tool(tool, arguments)
-
-    assert result.data["status"] == "failed"
-    assert "already has this integration" in result.data["error"]
+        with pytest.raises(Exception, match="already has this integration"):
+            await client.call_tool(tool, arguments)
 
 
 async def test_a_creation_with_no_id_back_warns_before_a_blind_retry(
@@ -367,12 +360,11 @@ async def test_a_creation_with_no_id_back_warns_before_a_blind_retry(
     mock_router.add("POST", INTEGRATIONS, json={"data": {}})
 
     async with Client(mcp_root_server) as client:
-        result = await client.call_tool(
-            "prowler_create_amazon_s3_integration", {"bucket_name": "my-reports"}
-        )
+        with pytest.raises(Exception, match="did not return its ID"):
+            await client.call_tool(
+                "prowler_create_amazon_s3_integration", {"bucket_name": "my-reports"}
+            )
 
-    assert result.data["status"] == "failed"
-    assert "did not return its ID" in result.data["error"]
     assert mock_router.paths() == [f"POST {INTEGRATIONS}"]
 
 
@@ -395,12 +387,10 @@ async def test_a_creation_whose_read_back_fails_still_hands_over_the_id(
     )
 
     async with Client(mcp_root_server) as client:
-        result = await client.call_tool(
-            "prowler_create_amazon_s3_integration", {"bucket_name": "my-reports"}
-        )
-
-    assert result.data["status"] == "failed"
-    assert "Integration i1 was created" in result.data["error"]
+        with pytest.raises(Exception, match="Integration i1 was created"):
+            await client.call_tool(
+                "prowler_create_amazon_s3_integration", {"bucket_name": "my-reports"}
+            )
 
 
 async def test_a_connection_check_that_cannot_run_is_not_reported_as_a_failure(
@@ -542,13 +532,12 @@ async def test_a_configuration_that_is_not_an_object_is_rejected_before_the_writ
     stub_integration(mock_router, S3_ATTRIBUTES)
 
     async with Client(mcp_root_server) as client:
-        result = await client.call_tool(
-            "prowler_update_integration",
-            {"integration_id": "i1", "configuration": configuration},
-        )
+        with pytest.raises(Exception, match=message):
+            await client.call_tool(
+                "prowler_update_integration",
+                {"integration_id": "i1", "configuration": configuration},
+            )
 
-    assert result.data["status"] == "failed"
-    assert message in result.data["error"]
     assert f"PATCH {INTEGRATION}" not in mock_router.paths()
 
 
@@ -643,13 +632,12 @@ async def test_updating_a_jira_configuration_is_refused(
     stub_integration(mock_router, JIRA_ATTRIBUTES)
 
     async with Client(mcp_root_server) as client:
-        result = await client.call_tool(
-            "prowler_update_integration",
-            {"integration_id": "i1", "configuration": {"domain": "other"}},
-        )
+        with pytest.raises(Exception, match="do not accept a configuration"):
+            await client.call_tool(
+                "prowler_update_integration",
+                {"integration_id": "i1", "configuration": {"domain": "other"}},
+            )
 
-    assert result.data["status"] == "failed"
-    assert "do not accept a configuration" in result.data["error"]
     assert f"PATCH {INTEGRATION}" not in mock_router.paths()
 
 
@@ -660,12 +648,12 @@ async def test_attaching_a_jira_integration_to_a_provider_is_refused(
     stub_integration(mock_router, JIRA_ATTRIBUTES)
 
     async with Client(mcp_root_server) as client:
-        result = await client.call_tool(
-            "prowler_update_integration",
-            {"integration_id": "i1", "provider_ids": ["p1"]},
-        )
+        with pytest.raises(Exception, match="tenant-wide"):
+            await client.call_tool(
+                "prowler_update_integration",
+                {"integration_id": "i1", "provider_ids": ["p1"]},
+            )
 
-    assert "tenant-wide" in result.data["error"]
     assert f"PATCH {INTEGRATION}" not in mock_router.paths()
 
 
@@ -683,12 +671,12 @@ async def test_security_hub_must_keep_exactly_one_provider(
     stub_integration(mock_router, SECURITY_HUB_ATTRIBUTES, provider_ids=("p1",))
 
     async with Client(mcp_root_server) as client:
-        result = await client.call_tool(
-            "prowler_update_integration",
-            {"integration_id": "i1", "provider_ids": provider_ids},
-        )
+        with pytest.raises(Exception, match="exactly one AWS provider"):
+            await client.call_tool(
+                "prowler_update_integration",
+                {"integration_id": "i1", "provider_ids": provider_ids},
+            )
 
-    assert "exactly one AWS provider" in result.data["error"]
     assert f"PATCH {INTEGRATION}" not in mock_router.paths()
 
 
@@ -708,12 +696,12 @@ async def test_partial_jira_credentials_are_refused_to_protect_the_stored_ones(
     stub_integration(mock_router, JIRA_ATTRIBUTES)
 
     async with Client(mcp_root_server) as client:
-        result = await client.call_tool(
-            "prowler_update_integration",
-            {"integration_id": "i1", "credentials": credentials},
-        )
+        with pytest.raises(Exception, match="replaced as a whole"):
+            await client.call_tool(
+                "prowler_update_integration",
+                {"integration_id": "i1", "credentials": credentials},
+            )
 
-    assert "replaced as a whole" in result.data["error"]
     assert f"PATCH {INTEGRATION}" not in mock_router.paths()
 
 
@@ -751,13 +739,14 @@ async def test_replacing_jira_credentials_normalizes_the_domain(
 # ------------------------------------------------- delete and connection tools
 
 
-async def test_deleting_an_integration_reports_the_outcome_either_way(
+async def test_deleting_an_integration_confirms_it_happened(
     mcp_root_server, mock_api_client, mock_router
 ):
-    """Deletion is irreversible, so both outcomes are stated explicitly.
+    """Deletion is irreversible, so a success says so rather than staying silent.
 
-    A bare exception would leave the agent unsure whether the credentials are
-    gone, and a retry of a delete that actually succeeded reads as a new failure.
+    It says so in the message and nowhere else: a `deleted: true` flag could only
+    ever be true, because an integration that was not deleted leaves the tool as
+    an error.
     """
     mock_router.add("DELETE", INTEGRATION, status=204)
 
@@ -766,24 +755,23 @@ async def test_deleting_an_integration_reports_the_outcome_either_way(
             "prowler_delete_integration", {"integration_id": "i1"}
         )
 
-    assert result.data["deleted"] is True
+    assert "i1 deleted successfully" in result.data["message"]
+    assert "deleted" not in result.data
 
 
-async def test_a_failed_deletion_says_it_did_not_happen(
+async def test_a_refused_deletion_fails_and_says_the_role_is_the_problem(
     mcp_root_server, mock_api_client, mock_router
 ):
-    """`deleted: false` is the part the agent must not have to infer."""
+    """A 403 is the same answer for every tool, so `lib.errors` writes it."""
     mock_router.add(
         "DELETE", INTEGRATION, status=403, json=jsonapi_error(403, "Permission denied.")
     )
 
     async with Client(mcp_root_server) as client:
-        result = await client.call_tool(
-            "prowler_delete_integration", {"integration_id": "i1"}
-        )
-
-    assert result.data["deleted"] is False
-    assert "Permission denied." in result.data["message"]
+        with pytest.raises(Exception, match="prowler_get_current_user"):
+            await client.call_tool(
+                "prowler_delete_integration", {"integration_id": "i1"}
+            )
 
 
 async def test_checking_a_connection_surfaces_why_it_failed(
@@ -1026,6 +1014,32 @@ async def test_an_accepted_dispatch_with_no_task_id_is_not_safe_to_retry(
     assert "task_id" not in result.data
 
 
+async def test_a_dispatch_with_no_usable_credential_is_raised_not_called_unknown(
+    mcp_root_server, mock_api_client, mock_router, monkeypatch
+):
+    """Authentication runs before the request, so nothing was ever queued.
+
+    Reported as `unknown` it reads as "work items may exist in Jira, go and
+    look" -- for a call that never reached Prowler. It is not a dispatch outcome
+    at all: the credential has to be fixed, and no retry of this call does that.
+    """
+    monkeypatch.setattr(mock_api_client.auth_manager, "mode", "http")
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="no usable credential"):
+            await client.call_tool(
+                "prowler_send_findings_to_jira",
+                {
+                    "integration_id": "i1",
+                    "project_key": "PROJ",
+                    "issue_type": "Task",
+                    "finding_ids": ["f1"],
+                },
+            )
+
+    assert mock_router.paths() == []
+
+
 async def test_a_dispatch_task_that_died_halfway_is_never_safe_to_retry(
     mcp_root_server, mock_api_client, mock_router
 ):
diff --git a/mcp_server/tests/prowler_app/tools/test_muting.py b/mcp_server/tests/prowler_app/tools/test_muting.py
new file mode 100644
index 0000000000..7c980600e3
--- /dev/null
+++ b/mcp_server/tests/prowler_app/tools/test_muting.py
@@ -0,0 +1,64 @@
+"""Tests for the muting tools.
+
+Muting is permanent and deleting a rule does not undo it, so the one thing
+these assertions protect is that an agent is never told a deletion failed when
+it did not: the old answer keyed off the *shape* of the API's reply rather than
+off anything having gone wrong, and said nothing a caller could act on.
+"""
+
+import pytest
+from fastmcp import Client
+
+from tests.helpers.jsonapi import jsonapi_document, jsonapi_error, jsonapi_resource
+
+MUTE_RULE = "/api/v1/mute-rules/m1"
+
+
+async def test_a_deleted_rule_is_reported_deleted_whatever_the_body(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """Prowler answers 204 with no body, but 200 with one is just as much a yes.
+
+    The old check read ``success`` out of the parsed body, which only exists for
+    the empty-body case, so a deletion that worked could be reported as
+    "Failed to delete mute rule".
+    """
+    mock_router.add(
+        "DELETE",
+        MUTE_RULE,
+        json=jsonapi_document(jsonapi_resource("mute-rules", "m1", {})),
+    )
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool("prowler_delete_mute_rule", {"rule_id": "m1"})
+
+    assert "m1 deleted successfully" in result.data["message"]
+    assert "stay muted" in result.data["message"]
+    # A flag with one reachable value is not a fact, it is an invitation to
+    # branch on a shape that does not exist.
+    assert "success" not in result.data
+
+
+async def test_an_empty_body_deletion_is_reported_the_same_way(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """The 204 path, which is what Prowler actually sends today."""
+    mock_router.add("DELETE", MUTE_RULE, status=204)
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool("prowler_delete_mute_rule", {"rule_id": "m1"})
+
+    assert "m1 deleted successfully" in result.data["message"]
+
+
+async def test_a_refused_deletion_is_an_error(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """A rule that was not deleted has to leave the tool as an error."""
+    mock_router.add(
+        "DELETE", MUTE_RULE, status=404, json=jsonapi_error(404, "Not found.")
+    )
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="Not found"):
+            await client.call_tool("prowler_delete_mute_rule", {"rule_id": "m1"})
diff --git a/mcp_server/tests/prowler_app/tools/test_providers.py b/mcp_server/tests/prowler_app/tools/test_providers.py
new file mode 100644
index 0000000000..b3438a79a7
--- /dev/null
+++ b/mcp_server/tests/prowler_app/tools/test_providers.py
@@ -0,0 +1,316 @@
+"""Tests for the provider tools.
+
+Two behaviours drive most of the assertions here, and both are about telling a
+failure apart from an outcome that is merely not final yet:
+
+* Deleting a provider removes it together with its scans, findings and
+  resources, in a background task that routinely outlives the polling window.
+  A deletion still running is not a failure, and reporting it as one invites a
+  retry of a destructive call that is already in flight.
+* ``connect_provider`` runs a connection check, and a check that could not be
+  run says nothing about the provider's credentials. Reporting it as ``failed``
+  blames an AWS role for an expired Prowler credential and sends the user off to
+  fix something that works.
+
+Tools are driven through an in-memory MCP client so FastMCP resolves the
+pydantic ``Field`` defaults and a raised failure arrives the way a client sees
+it.
+"""
+
+import pytest
+from fastmcp import Client
+
+from tests.helpers.http import MockRouter
+from tests.helpers.jsonapi import (
+    jsonapi_collection,
+    jsonapi_document,
+    jsonapi_error,
+    jsonapi_resource,
+    task_document,
+)
+
+PROVIDERS = "/api/v1/providers"
+PROVIDER = f"{PROVIDERS}/p1"
+CONNECTION = f"{PROVIDER}/connection"
+SECRETS = f"{PROVIDERS}/secrets"
+TASK = "/api/v1/tasks/t1"
+
+PROVIDER_ATTRIBUTES = {
+    "uid": "123456789012",
+    "provider": "aws",
+    "alias": "production",
+    "connection": {"connected": True},
+}
+
+
+@pytest.fixture
+def mock_fast_polling(monkeypatch, api_client):
+    """Run the real polling loop, with a timeout a test can afford to wait out.
+
+    The timeout path is the one worth testing here -- it is what used to be
+    reported as a failed deletion -- so the loop, its exception and the fallback
+    that reads the task afterwards all stay real. Only the 60 seconds go.
+    """
+    original = type(api_client).poll_task_until_complete
+
+    async def _fast(self, task_id, **_overridden):
+        return await original(self, task_id, timeout=0.3, poll_interval=0.05)
+
+    monkeypatch.setattr(type(api_client), "poll_task_until_complete", _fast)
+
+
+@pytest.fixture
+def mock_polling_timeout(monkeypatch, api_client):
+    """Make the polling window run out on the first call, without the wait.
+
+    The clock is what ends the polling loop here, so a test about *what happens
+    afterwards* has no reason to spend it. The read the fallback then makes is
+    the real one.
+    """
+
+    async def _timeout(self, task_id, **_overridden):
+        raise TimeoutError(f"Task {task_id} polling timed out after 60 seconds.")
+
+    monkeypatch.setattr(type(api_client), "poll_task_until_complete", _timeout)
+
+
+def stub_deletion_start(mock_router: MockRouter) -> MockRouter:
+    """Serve the DELETE as Prowler does: a task to poll, not a finished deletion."""
+    return mock_router.add(
+        "DELETE", PROVIDER, json=jsonapi_document(jsonapi_resource("tasks", "t1", {}))
+    )
+
+
+# --------------------------------------------------------------- deletion
+
+
+async def test_a_refused_deletion_is_an_error_not_a_result(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """Nothing started, so the classifier owns the message.
+
+    Returned as ``{"deleted": false}`` it arrives with ``isError: false`` and a
+    model has no reason to treat it as anything but a completed call.
+    """
+    mock_router.add(
+        "DELETE", PROVIDER, status=403, json=jsonapi_error(403, "Not allowed.")
+    )
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="not allowed to do this"):
+            await client.call_tool("prowler_delete_provider", {"provider_id": "p1"})
+
+
+async def test_a_deletion_with_no_task_back_warns_before_a_blind_retry(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """Prowler accepted it, so the deletion is probably running.
+
+    Without the task ID there is nothing to watch it with, which makes "check
+    whether it is gone" the only safe instruction.
+    """
+    mock_router.add("DELETE", PROVIDER, json={"data": {}})
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="did not return the ID"):
+            await client.call_tool("prowler_delete_provider", {"provider_id": "p1"})
+
+    assert mock_router.paths() == [f"DELETE {PROVIDER}"]
+
+
+async def test_a_finished_deletion_reports_it_plainly(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """The success path is unchanged: the provider is gone."""
+    stub_deletion_start(mock_router)
+    mock_router.add("GET", TASK, json=task_document("t1", "completed"))
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool(
+            "prowler_delete_provider", {"provider_id": "p1"}
+        )
+
+    assert result.data["status"] == "deleted"
+
+
+async def test_a_deletion_still_running_is_not_reported_as_a_failure(
+    mcp_root_server, mock_api_client, mock_router, mock_fast_polling
+):
+    """Outliving the polling window is normal for a provider with many findings.
+
+    The task ID goes back so the deletion can be followed, and the message says
+    not to send it again -- which is the whole point of not calling this failed.
+    """
+    stub_deletion_start(mock_router)
+    mock_router.add("GET", TASK, json=task_document("t1", "executing"))
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool(
+            "prowler_delete_provider", {"provider_id": "p1"}
+        )
+
+    assert result.data["status"] == "in_progress"
+    assert result.data["task_id"] == "t1"
+    assert "Do not send the deletion again" in result.data["message"]
+
+
+async def test_a_deletion_that_finished_just_after_the_wait_is_reported_as_deleted(
+    mcp_root_server, mock_api_client, mock_router, mock_polling_timeout
+):
+    """Polling gives up on the clock, not on the task.
+
+    A deletion that completed a moment after the last poll is a finished
+    deletion, and the read the fallback makes is what says so. Reporting it as
+    still running would send the caller off to watch a provider that is gone.
+    """
+    stub_deletion_start(mock_router)
+    mock_router.add("GET", TASK, json=task_document("t1", "completed"))
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool(
+            "prowler_delete_provider", {"provider_id": "p1"}
+        )
+
+    assert result.data["status"] == "deleted"
+    assert "task_id" not in result.data
+
+
+async def test_a_deletion_task_that_stopped_is_an_error_naming_what_is_left(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """Here the provider really is still there, so this one is a failure.
+
+    A provider is removed together with everything attached to it, so a task
+    that stopped halfway can leave part of that gone -- which is why the message
+    sends the caller to look rather than asserting the state.
+    """
+    stub_deletion_start(mock_router)
+    mock_router.add("GET", TASK, json=task_document("t1", "failed", error="boom"))
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="ended as 'failed'"):
+            await client.call_tool("prowler_delete_provider", {"provider_id": "p1"})
+
+
+async def test_a_deletion_task_failure_does_not_relay_the_upstream_text(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """The task's own error is a celery traceback; it stays in the log."""
+    stub_deletion_start(mock_router)
+    mock_router.add(
+        "GET",
+        TASK,
+        json=task_document("t1", "failed", error="Traceback: secret-internal-detail"),
+    )
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception) as raised:
+            await client.call_tool("prowler_delete_provider", {"provider_id": "p1"})
+
+    assert "secret-internal-detail" not in str(raised.value)
+
+
+async def test_a_deletion_whose_progress_cannot_be_read_still_says_do_not_retry(
+    mcp_root_server, mock_api_client, mock_router, mock_fast_polling
+):
+    """The outcome is unknown, which for a destructive call means: do not repeat.
+
+    Reading the task is what tells "still running" from "stopped", so when that
+    read fails too the message drops the claim rather than guessing at one.
+    """
+    stub_deletion_start(mock_router)
+    mock_router.add("GET", TASK, status=503, json=jsonapi_error(503, "Unavailable."))
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool(
+            "prowler_delete_provider", {"provider_id": "p1"}
+        )
+
+    assert result.data["status"] == "in_progress"
+    assert "could not be read" in result.data["message"]
+    assert "Do not send the deletion again" in result.data["message"]
+    # The failure that got us here is the classifier's to phrase, so its raw
+    # text stays in the log rather than riding along in the message.
+    assert "API request failed" not in result.data["message"]
+
+
+# ------------------------------------------------------- connection check
+
+
+async def test_a_connection_check_that_cannot_run_is_not_reported_as_failed(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """`not_tested` says nothing about the credentials, and that is the point.
+
+    A 401 here is this server's own credential, not the provider's. Calling it
+    `failed` tells the user their AWS role is broken when it is fine.
+    """
+    # Registered in order and consumed in order: the lookup before the create
+    # finds nothing, the one after it finds the provider that was just made.
+    mock_router.add("GET", PROVIDERS, json=jsonapi_collection([]))
+    mock_router.add(
+        "GET",
+        PROVIDERS,
+        json=jsonapi_collection(
+            [jsonapi_resource("providers", "p1", PROVIDER_ATTRIBUTES)]
+        ),
+    )
+    mock_router.add(
+        "POST",
+        PROVIDERS,
+        json=jsonapi_document(jsonapi_resource("providers", "p1", PROVIDER_ATTRIBUTES)),
+    )
+    mock_router.add(
+        "POST", CONNECTION, status=401, json=jsonapi_error(401, "Token expired.")
+    )
+    mock_router.add(
+        "GET",
+        PROVIDER,
+        json=jsonapi_document(jsonapi_resource("providers", "p1", PROVIDER_ATTRIBUTES)),
+    )
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool(
+            "prowler_connect_provider",
+            {"provider_uid": "123456789012", "provider_type": "aws"},
+        )
+
+    assert result.data["connected"] == "not_tested"
+    assert "never tested" in result.data["error"]
+
+
+async def test_a_secret_lookup_failure_does_not_pass_as_having_no_secret(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """Returning None here would send the write down the create branch.
+
+    A provider holds at most one secret, so creating a second one is refused and
+    the caller would be told its credentials were rejected when all that
+    actually failed was this read.
+    """
+    mock_router.add(
+        "GET",
+        PROVIDERS,
+        json=jsonapi_collection(
+            [jsonapi_resource("providers", "p1", PROVIDER_ATTRIBUTES)]
+        ),
+    )
+    mock_router.add(
+        "GET", SECRETS, status=429, json=jsonapi_error(429, "Too many requests.")
+    )
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="rate limiting"):
+            await client.call_tool(
+                "prowler_connect_provider",
+                {
+                    "provider_uid": "123456789012",
+                    "provider_type": "aws",
+                    "credentials": {
+                        "aws_access_key_id": "AKIA",
+                        "aws_secret_access_key": "s",
+                    },
+                },
+            )
+
+    assert f"POST {SECRETS}" not in mock_router.paths()
diff --git a/mcp_server/tests/prowler_app/tools/test_roles.py b/mcp_server/tests/prowler_app/tools/test_roles.py
new file mode 100644
index 0000000000..f792cf0a04
--- /dev/null
+++ b/mcp_server/tests/prowler_app/tools/test_roles.py
@@ -0,0 +1,147 @@
+"""Tests for the role (RBAC) tools.
+
+``prowler_set_user_role`` replaces the single role a user holds, and the API
+silently drops a role ID that does not exist in the tenant -- which would leave
+the user with no role at all. So the tool reads the role first, and what that
+read says has to be told apart carefully: only a not-found is about the role ID
+the caller passed. A permission error, a rate limit or a server error is about
+the request, and reporting either as "find a valid role ID" sends the user to
+fix an ID that was fine.
+
+Tools are driven through an in-memory MCP client so FastMCP resolves the
+pydantic ``Field`` defaults and a raised failure arrives the way a client sees
+it.
+"""
+
+import pytest
+from fastmcp import Client
+
+from tests.helpers.http import MockRouter
+from tests.helpers.jsonapi import (
+    jsonapi_document,
+    jsonapi_error,
+    jsonapi_resource,
+)
+
+USER = "/api/v1/users/u1"
+USER_ROLES = f"{USER}/relationships/roles"
+ROLE = "/api/v1/roles/r2"
+
+ROLE_ATTRIBUTES = {"name": "admin", "manage_account": True}
+
+
+def stub_user_holding(mock_router: MockRouter, role_id: str) -> MockRouter:
+    """Serve ``GET /users/u1?include=roles`` with the user holding one role."""
+    return mock_router.add(
+        "GET",
+        USER,
+        json=jsonapi_document(
+            jsonapi_resource("users", "u1", {"name": "Ada"}),
+            included=[jsonapi_resource("roles", role_id, ROLE_ATTRIBUTES)],
+        ),
+    )
+
+
+async def test_setting_a_role_the_user_already_holds_changes_nothing(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """Idempotent by design: no PATCH goes out, so nothing can be replaced."""
+    stub_user_holding(mock_router, "r2")
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool(
+            "prowler_set_user_role", {"user_id": "u1", "role_id": "r2"}
+        )
+
+    assert result.data["changed"] is False
+    assert mock_router.paths() == [f"GET {USER}"]
+
+
+async def test_a_role_that_does_not_exist_is_named_as_the_bad_argument(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """404 is the one answer that really is about the role ID.
+
+    The PATCH would accept the ID and drop it, leaving the user with no role, so
+    the read has to stop the call -- and say which ID to replace.
+    """
+    stub_user_holding(mock_router, "r1")
+    mock_router.add("GET", ROLE, status=404, json=jsonapi_error(404, "Not found."))
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="does not exist in this tenant") as raised:
+            await client.call_tool(
+                "prowler_set_user_role", {"user_id": "u1", "role_id": "r2"}
+            )
+
+    assert "left unchanged" in str(raised.value)
+    assert f"PATCH {USER_ROLES}" not in mock_router.paths()
+
+
+@pytest.mark.parametrize(
+    ("status", "detail", "expected"),
+    [
+        (403, "Not allowed.", "not allowed to do this"),
+        (429, "Slow down.", "rate limiting"),
+        (500, "Boom.", "failed on Prowler's side"),
+    ],
+    ids=["forbidden", "rate-limited", "server-error"],
+)
+async def test_a_role_read_that_failed_for_another_reason_is_not_a_bad_role_id(
+    mcp_root_server, mock_api_client, mock_router, status, detail, expected
+):
+    """These say nothing about the ID, so the classifier owns the message.
+
+    Told "use prowler_list_roles to find a valid role ID", an agent goes looking
+    for a role that was never the problem -- and finds the same wall.
+    """
+    stub_user_holding(mock_router, "r1")
+    mock_router.add("GET", ROLE, status=status, json=jsonapi_error(status, detail))
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match=expected) as raised:
+            await client.call_tool(
+                "prowler_set_user_role", {"user_id": "u1", "role_id": "r2"}
+            )
+
+    assert "valid role ID" not in str(raised.value)
+    assert f"PATCH {USER_ROLES}" not in mock_router.paths()
+
+
+async def test_a_set_role_reports_the_role_the_user_holds_afterwards(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """The authoritative state is read back rather than assumed from the PATCH."""
+    mock_router.add(
+        "GET",
+        USER,
+        json=jsonapi_document(
+            jsonapi_resource("users", "u1", {"name": "Ada"}),
+            included=[jsonapi_resource("roles", "r1", ROLE_ATTRIBUTES)],
+        ),
+    )
+    mock_router.add(
+        "GET",
+        USER,
+        json=jsonapi_document(
+            jsonapi_resource("users", "u1", {"name": "Ada"}),
+            included=[jsonapi_resource("roles", "r2", ROLE_ATTRIBUTES)],
+        ),
+    )
+    mock_router.add(
+        "GET",
+        ROLE,
+        json=jsonapi_document(jsonapi_resource("roles", "r2", ROLE_ATTRIBUTES)),
+    )
+    mock_router.add("PATCH", USER_ROLES, status=204)
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool(
+            "prowler_set_user_role", {"user_id": "u1", "role_id": "r2"}
+        )
+
+    assert result.data["changed"] is True
+    assert [role["id"] for role in result.data["roles"]] == ["r2"]
+    assert mock_router.json_body("PATCH", USER_ROLES) == {
+        "data": [{"type": "roles", "id": "r2"}]
+    }
diff --git a/mcp_server/tests/prowler_app/tools/test_scans.py b/mcp_server/tests/prowler_app/tools/test_scans.py
new file mode 100644
index 0000000000..93e18c9a69
--- /dev/null
+++ b/mcp_server/tests/prowler_app/tools/test_scans.py
@@ -0,0 +1,201 @@
+"""Tests for the scans tools.
+
+Both write tools here used to answer a failure with a result object that the
+protocol, the client and the model all read as a success, and both are calls
+whose outcome an agent acts on:
+
+* ``prowler_trigger_scan`` starts work. Anything that reads as "nothing
+  happened" invites a second scan of the same provider.
+* ``prowler_schedule_daily_scan`` was deciding whether the schedule existed by
+  reading the state of a different thing entirely -- the first scan Prowler
+  starts alongside it -- so a schedule that had just been created could be
+  reported as a failure. Retrying that can only hit the 409 the API raises for a
+  provider that already has one.
+
+Tools are driven through an in-memory MCP client so FastMCP resolves the
+pydantic ``Field`` defaults and a raised failure arrives the way a client sees
+it.
+"""
+
+import pytest
+from fastmcp import Client
+
+from tests.helpers.http import MockRouter
+from tests.helpers.jsonapi import (
+    jsonapi_document,
+    jsonapi_error,
+    jsonapi_resource,
+)
+
+SCANS = "/api/v1/scans"
+SCAN = f"{SCANS}/s1"
+DAILY = "/api/v1/schedules/daily"
+
+SCAN_ATTRIBUTES = {
+    "name": "Nightly",
+    "trigger": "manual",
+    "state": "executing",
+    "progress": 40,
+}
+
+
+def stub_scan_creation(mock_router: MockRouter, scan_id: str = "s1") -> MockRouter:
+    """Serve the creation as Prowler does: a task carrying the new scan's ID."""
+    return mock_router.add(
+        "POST",
+        SCANS,
+        json=jsonapi_document(
+            jsonapi_resource("tasks", "t1", {"task_args": {"scan_id": scan_id}})
+        ),
+    )
+
+
+# ------------------------------------------------------------- trigger_scan
+
+
+async def test_a_refused_scan_is_an_error_not_a_failed_looking_result(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """A rejection has to leave the tool as an error.
+
+    Returned as a result it arrives with ``isError: false``, and a model reading
+    a successful tool call has no reason to doubt that a scan is now running.
+    """
+    mock_router.add(
+        "POST", SCANS, status=403, json=jsonapi_error(403, "Insufficient permissions.")
+    )
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="not allowed to do this"):
+            await client.call_tool("prowler_trigger_scan", {"provider_id": "p1"})
+
+
+async def test_a_scan_with_no_id_back_warns_before_a_blind_retry(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """Prowler accepted it, so a second call could start a duplicate scan.
+
+    The message names the provider because that is what makes the suggested
+    check actionable without another lookup.
+    """
+    mock_router.add("POST", SCANS, json={"data": {"attributes": {"task_args": {}}}})
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="did not return its ID"):
+            await client.call_tool("prowler_trigger_scan", {"provider_id": "p1"})
+
+    assert mock_router.paths() == [f"POST {SCANS}"]
+
+
+async def test_a_scan_whose_read_back_fails_still_hands_over_the_id(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """The scan is running; only reading it back went wrong.
+
+    Reporting the read failure alone would read as "the scan was not created"
+    and invite a duplicate, so the error carries the ID to monitor instead.
+    """
+    stub_scan_creation(mock_router)
+    mock_router.add("GET", SCAN, status=400, json=jsonapi_error(400, "Server error."))
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="Scan s1 was created") as raised:
+            await client.call_tool("prowler_trigger_scan", {"provider_id": "p1"})
+
+    # Naming the scan is the whole reason this message exists, so it is written
+    # here rather than assembled from the failure. Splicing the failure text in
+    # would put whatever it happens to say in front of the model unclassified,
+    # which is the one thing the shared classifier exists to decide.
+    assert "API request failed" not in str(raised.value)
+
+
+async def test_a_created_scan_comes_back_with_its_details(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """The success path still reports the scan, which is what gets monitored."""
+    stub_scan_creation(mock_router)
+    mock_router.add(
+        "GET",
+        SCAN,
+        json=jsonapi_document(jsonapi_resource("scans", "s1", SCAN_ATTRIBUTES)),
+    )
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool("prowler_trigger_scan", {"provider_id": "p1"})
+
+    assert result.data["scan"]["id"] == "s1"
+    # No status flag: a scan that was not created is raised, so "success" could
+    # only ever be the one value and says nothing a reader can act on.
+    assert "status" not in result.data
+
+
+# ------------------------------------------------------ schedule_daily_scan
+
+
+@pytest.mark.parametrize("first_run_state", ["available", "scheduled", "executing"])
+async def test_a_schedule_is_reported_created_whatever_the_first_run_does(
+    mcp_root_server, mock_api_client, mock_router, first_run_state
+):
+    """The task in the answer is the first scan run, not the schedule.
+
+    Prowler commits the recurring schedule inside the request that serves this
+    call, so an answer at all means it exists. Reading that task's state as the
+    outcome of the scheduling reported a schedule that had just been created as
+    a failure.
+    """
+    mock_router.add(
+        "POST",
+        DAILY,
+        json=jsonapi_document(
+            jsonapi_resource("tasks", "t1", {"state": first_run_state})
+        ),
+    )
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool(
+            "prowler_schedule_daily_scan", {"provider_id": "p1"}
+        )
+
+    assert result.data["first_run_state"] == first_run_state
+    assert "every 24 hours" in result.data["message"]
+    assert "scheduled" not in result.data
+
+
+async def test_a_failed_first_run_leaves_the_schedule_standing(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """Worth saying, but it is not the schedule that failed.
+
+    The gap it leaves is real -- no findings until tomorrow -- so the message
+    points at the manual scan that fills it rather than at the scheduling.
+    """
+    mock_router.add(
+        "POST",
+        DAILY,
+        json=jsonapi_document(jsonapi_resource("tasks", "t1", {"state": "failed"})),
+    )
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool(
+            "prowler_schedule_daily_scan", {"provider_id": "p1"}
+        )
+
+    assert result.data["first_run_state"] == "failed"
+    assert "schedule is unaffected" in result.data["message"]
+    assert "prowler_trigger_scan" in result.data["message"]
+
+
+async def test_an_existing_schedule_is_relayed_as_the_api_explains_it(
+    mcp_root_server, mock_api_client, mock_router
+):
+    """The 409 already says the useful thing, so the classifier relays it."""
+    mock_router.add(
+        "POST",
+        DAILY,
+        status=409,
+        json=jsonapi_error(409, "There is already a scheduled scan for this provider."),
+    )
+
+    async with Client(mcp_root_server) as client:
+        with pytest.raises(Exception, match="already a scheduled scan"):
+            await client.call_tool("prowler_schedule_daily_scan", {"provider_id": "p1"})
diff --git a/mcp_server/tests/prowler_app/utils/test_auth.py b/mcp_server/tests/prowler_app/utils/test_auth.py
index d39e5826d7..3c822cf2dc 100644
--- a/mcp_server/tests/prowler_app/utils/test_auth.py
+++ b/mcp_server/tests/prowler_app/utils/test_auth.py
@@ -6,8 +6,12 @@ Reference for later branches: ``ProwlerAppAuth`` resolves its ``mode`` and
 and ``base_url=`` explicitly, as these tests do.
 """
 
+import base64
+import json
+
 import pytest
 
+from prowler_mcp_server.lib.errors import CredentialError
 from prowler_mcp_server.prowler_app.utils.auth import ProwlerAppAuth
 from tests.helpers.tokens import FAKE_API_KEY, MALFORMED_API_KEY, fake_jwt
 
@@ -42,13 +46,92 @@ async def test_http_mode_accepts_a_bearer_api_key(http_request_headers):
     assert await auth.get_valid_token() == FAKE_API_KEY
 
 
+def _jwt_with_payload(payload: object) -> str:
+    """Mint an unsigned JWT carrying an arbitrary payload.
+
+    ``fake_jwt`` always writes a well-formed object, so the malformed payloads
+    below are built here instead.
+    """
+    encoded = (
+        base64.urlsafe_b64encode(json.dumps(payload).encode()).decode().rstrip("=")
+    )
+    return f"header.{encoded}.fake-signature-not-verified"
+
+
+async def test_http_mode_accepts_a_lowercase_bearer_scheme(http_request_headers):
+    """Authentication scheme names are case-insensitive (RFC 7235)."""
+    http_request_headers(authorization=f"bearer {FAKE_API_KEY}")
+
+    auth = ProwlerAppAuth(mode="http")
+
+    assert await auth.get_valid_token() == FAKE_API_KEY
+
+
+async def test_http_mode_strips_only_the_scheme_prefix(http_request_headers):
+    """A token that repeats the scheme keeps it: only the prefix is removed."""
+    token = f"{FAKE_API_KEY}_Bearer_suffix"
+    http_request_headers(authorization=f"Bearer {token}")
+
+    auth = ProwlerAppAuth(mode="http")
+
+    assert await auth.get_valid_token() == token
+
+
+async def test_http_mode_rejects_an_authorization_header_without_a_token(
+    http_request_headers,
+):
+    """A bare scheme carries no credential to authenticate with."""
+    http_request_headers(authorization="Bearer   ")
+
+    auth = ProwlerAppAuth(mode="http")
+
+    with pytest.raises(CredentialError, match="'Bearer <token>' form"):
+        await auth.get_valid_token()
+
+
+async def test_http_mode_rejects_a_jwt_whose_payload_is_not_an_object(
+    http_request_headers,
+):
+    """A payload that decodes to a list has no claims, so it is a bad credential.
+
+    Without the type check it would reach `payload.get` and fail as an
+    unclassified `AttributeError`, which the client only sees masked.
+    """
+    http_request_headers(authorization=f"Bearer {_jwt_with_payload(['exp'])}")
+
+    auth = ProwlerAppAuth(mode="http")
+
+    with pytest.raises(CredentialError, match="not a readable JWT"):
+        await auth.get_valid_token()
+
+
+@pytest.mark.parametrize(
+    ("payload", "case"),
+    [
+        ({"sub": "user"}, "missing"),
+        ({"exp": "1700000000"}, "string"),
+        ({"exp": None}, "null"),
+    ],
+)
+async def test_http_mode_rejects_a_jwt_without_a_numeric_expiration(
+    http_request_headers, payload: dict, case: str
+):
+    """`exp` is a numeric date: comparing anything else raises a `TypeError`."""
+    http_request_headers(authorization=f"Bearer {_jwt_with_payload(payload)}")
+
+    auth = ProwlerAppAuth(mode="http")
+
+    with pytest.raises(CredentialError, match="no readable 'exp' expiration claim"):
+        await auth.get_valid_token()
+
+
 async def test_http_mode_rejects_an_expired_jwt(http_request_headers):
     """An expired JWT is refused locally instead of being forwarded to the API."""
     http_request_headers(authorization=f"Bearer {fake_jwt(expires_in=-60)}")
 
     auth = ProwlerAppAuth(mode="http")
 
-    with pytest.raises(ValueError, match="Token has expired"):
+    with pytest.raises(CredentialError, match="The token has expired"):
         await auth.get_valid_token()
 
 

From 1679094f22bbb9029a56ea524189d487b3d8be3c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rub=C3=A9n=20De=20la=20Torre=20Vico?= <ruben@prowler.com>
Date: Mon, 31 Aug 2026 13:09:34 +0200
Subject: [PATCH 06/77] feat(mcp): raise instead of returning error objects in
 the Prowler Hub tools (#12533)

---
 .../mcp-hub-check-provider-mismatch.fixed.md  |   1 +
 mcp_server/prowler_mcp_server/lib/errors.py   |  64 ++
 mcp_server/prowler_mcp_server/lib/urls.py     |  36 +
 .../prowler_mcp_server/prowler_hub/server.py  | 679 ++++++++++--------
 mcp_server/tests/lib/test_errors.py           |  78 ++
 mcp_server/tests/lib/test_urls.py             |  59 ++
 mcp_server/tests/prowler_hub/test_server.py   | 335 +++++++++
 7 files changed, 949 insertions(+), 303 deletions(-)
 create mode 100644 mcp_server/changelog.d/mcp-hub-check-provider-mismatch.fixed.md
 create mode 100644 mcp_server/prowler_mcp_server/lib/urls.py
 create mode 100644 mcp_server/tests/lib/test_urls.py
 create mode 100644 mcp_server/tests/prowler_hub/test_server.py

diff --git a/mcp_server/changelog.d/mcp-hub-check-provider-mismatch.fixed.md b/mcp_server/changelog.d/mcp-hub-check-provider-mismatch.fixed.md
new file mode 100644
index 0000000000..da39e914b1
--- /dev/null
+++ b/mcp_server/changelog.d/mcp-hub-check-provider-mismatch.fixed.md
@@ -0,0 +1 @@
+`prowler_hub_get_check_code` and `prowler_hub_get_check_fixer` now report a check ID that belongs to another provider as such, naming that provider, instead of reporting the ID as one that does not exist
diff --git a/mcp_server/prowler_mcp_server/lib/errors.py b/mcp_server/prowler_mcp_server/lib/errors.py
index 9491bf87eb..1aa3a25607 100644
--- a/mcp_server/prowler_mcp_server/lib/errors.py
+++ b/mcp_server/prowler_mcp_server/lib/errors.py
@@ -55,6 +55,59 @@ class ProwlerAPIInvalidResponse(Exception):
     """The API answered, but with a body this server could not read as JSON."""
 
 
+class UpstreamInvalidResponse(Exception):
+    """An upstream this server reads directly answered with a body that is not JSON.
+
+    Raised in place of the `json.JSONDecodeError` httpx would otherwise let out.
+    That one is a ValueError this module reads as a malformed argument, which is
+    the opposite story: it sends a model off to fix a call that was fine.
+
+    Attributes:
+        host: Host that answered, so the message can name what has to be fixed
+    """
+
+    def __init__(self, message: str, *, host: str) -> None:
+        super().__init__(message)
+        self.host: str = host
+
+
+def parse_json_response(response: httpx.Response) -> Any:
+    """Parse an upstream answer as JSON, telling an unreadable body from a bad
+    argument.
+
+    For every upstream a sub-server reads with an httpx client of its own --
+    Prowler Hub, the documentation site. `httpx` lets a body it cannot decode
+    out as a `json.JSONDecodeError`, which is a ValueError this module reads as
+    a malformed argument. Coming from an upstream -- an HTML error page from an
+    edge, a truncated body -- that is the wrong story, and the caller has no
+    argument to fix.
+
+    The Prowler API client parses its own answers and raises
+    `ProwlerAPIInvalidResponse` instead: it also carries writes, where an
+    unreadable answer leaves the outcome unknown rather than merely absent.
+
+    Args:
+        response: The answer to parse.
+
+    Returns:
+        The parsed body.
+
+    Raises:
+        UpstreamInvalidResponse: The body is not JSON.
+    """
+    try:
+        return response.json()
+    except ValueError as e:
+        # `.request` raises rather than returning None when it was never set.
+        request = getattr(response, "_request", None)
+        host = request.url.host if request is not None else "The upstream service"
+        # Status only: the decoder's own message quotes the body it choked on,
+        # and that body is the upstream text this server never relays.
+        raise UpstreamInvalidResponse(
+            f"{response.status_code} body is not JSON", host=host
+        ) from e
+
+
 def jsonapi_detail(response: httpx.Response) -> str | None:
     """Return the API's own JSON:API error detail, when there is one to trust.
 
@@ -171,6 +224,17 @@ def _describe_failure(exc: BaseException) -> str | None:
             "current state before sending it again."
         )
 
+    if isinstance(exc, UpstreamInvalidResponse):
+        # The counterpart of the `json.JSONDecodeError` branch below: the same
+        # decode failure is a malformed argument on one side of this server and
+        # an upstream fault on the other, and only the type tells them apart.
+        return (
+            f"{exc.host} answered with a body this server could not read as JSON, "
+            "so the call has no result to return. Nothing in the arguments caused "
+            f"this and changing them will not help -- {exc.host} is answering with "
+            "something other than the JSON it documents. Retry later."
+        )
+
     if isinstance(exc, CredentialError):
         # Not an argument problem, so it is worth saying that plainly: the
         # answer is a credential the user has to fix, not another attempt.
diff --git a/mcp_server/prowler_mcp_server/lib/urls.py b/mcp_server/prowler_mcp_server/lib/urls.py
new file mode 100644
index 0000000000..0c24a04417
--- /dev/null
+++ b/mcp_server/prowler_mcp_server/lib/urls.py
@@ -0,0 +1,36 @@
+"""URL construction shared by every sub-server.
+
+An identifier joined into a path unencoded is not sent as itself: httpx resolves
+the URL per RFC 3986, so "../" walks the request onto another endpoint.
+"""
+
+from urllib.parse import quote
+
+_DOT_SEGMENTS = frozenset({".", ".."})
+
+
+def path_segment(value: str) -> str:
+    """Encode one path segment, so an identifier names a resource and nothing else.
+
+    Args:
+        value: The segment to encode, taken as a name in full.
+
+    Returns:
+        The segment percent-encoded, with the dots escaped when it is only dots.
+    """
+    encoded = quote(value, safe="")
+    # A dot is legal in a name, so `quote` keeps it: a segment of nothing but
+    # dots would still resolve away rather than name anything.
+    return encoded.replace(".", "%2E") if encoded in _DOT_SEGMENTS else encoded
+
+
+def url_path(*segments: str) -> str:
+    """Build a URL path from one argument per segment, each of them encoded.
+
+    Args:
+        *segments: The path segments, in order.
+
+    Returns:
+        The joined path, with a leading slash.
+    """
+    return "/" + "/".join(path_segment(segment) for segment in segments)
diff --git a/mcp_server/prowler_mcp_server/prowler_hub/server.py b/mcp_server/prowler_mcp_server/prowler_hub/server.py
index 8d18a2c240..2c78ac7c36 100644
--- a/mcp_server/prowler_mcp_server/prowler_hub/server.py
+++ b/mcp_server/prowler_mcp_server/prowler_hub/server.py
@@ -6,13 +6,19 @@ Provides access to Prowler Hub API for security checks and compliance frameworks
 
 import httpx
 from fastmcp import FastMCP
+from fastmcp.exceptions import ToolError
 from pydantic import Field
 
 from prowler_mcp_server import __version__
+from prowler_mcp_server.lib.errors import (
+    UpstreamInvalidResponse,
+    parse_json_response,
+)
 from prowler_mcp_server.lib.types import NonBlankStr
+from prowler_mcp_server.lib.urls import url_path
 
 # Initialize FastMCP for Prowler Hub
-hub_mcp_server = FastMCP("prowler-hub")
+hub_mcp_server = FastMCP("prowler-hub", mask_error_details=True)
 
 # API base URL
 BASE_URL = "https://hub.prowler.com/api"
@@ -27,6 +33,19 @@ prowler_hub_client = httpx.Client(
     },
 )
 
+# Sentences for the not-found cases. They are authored here, and raised as a
+# ToolError without a `from` clause, because they name the resource the caller
+# asked for and the next tool to reach for -- neither of which the shared
+# classifier in lib/errors.py can know.
+_CHECK_NOT_FOUND = (
+    "No check with the ID '{check_id}' exists in Prowler Hub. Use "
+    "prowler_hub_semantic_search_checks to find the right ID."
+)
+_COMPLIANCE_NOT_FOUND = (
+    "No compliance framework with the ID '{compliance_id}' exists in Prowler Hub. "
+    "Use prowler_hub_semantic_search_compliances to find the right ID."
+)
+
 # GitHub raw content base URL for Prowler checks
 GITHUB_RAW_BASE = (
     "https://raw.githubusercontent.com/prowler-cloud/prowler/refs/heads/master/"
@@ -43,6 +62,21 @@ github_raw_client = httpx.Client(
 )
 
 
+def _get_hub_endpoint(
+    *path_segments: str, params: dict[str, str] | None = None
+) -> httpx.Response:
+    """GET a Prowler Hub endpoint, named as one argument per path segment.
+
+    Args:
+        *path_segments: The endpoint path segments, in order.
+        params: Query parameters for the request.
+
+    Returns:
+        The response unread, so a caller can tell a 404 from a failed request.
+    """
+    return prowler_hub_client.get(url_path(*path_segments), params=params)
+
+
 def github_check_path(provider_id: str, check_id: str, suffix: str) -> str:
     """Build the GitHub raw URL for a given check artifact suffix using provider
     and check_id.
@@ -53,7 +87,83 @@ def github_check_path(provider_id: str, check_id: str, suffix: str) -> str:
         service_id = check_id.split("_", 1)[0]
     except IndexError:
         service_id = check_id
-    return f"{GITHUB_RAW_BASE}/{provider_id}/services/{service_id}/{check_id}/{check_id}{suffix}"
+    path = url_path(provider_id, "services", service_id, check_id, check_id)
+    return f"{GITHUB_RAW_BASE}{path}{suffix}"
+
+
+def _hub_provider_for_check(check_id: str) -> str | None:
+    """Ask Prowler Hub which provider it lists a check under.
+
+    Args:
+        check_id: Check ID the caller asked for
+
+    Returns:
+        The provider the Hub lists the check under, or None when the Hub knows
+        no such check.
+
+    Raises:
+        httpx.HTTPError: The Hub could not be reached.
+        UpstreamInvalidResponse: The Hub answered with a body that is not JSON.
+        ValueError: The Hub answered with something that names no provider.
+    """
+    response = _get_hub_endpoint("check", check_id)
+    if response.status_code == 404:
+        return None
+    response.raise_for_status()
+    check = parse_json_response(response)
+
+    # An empty body is how the Hub reports an unknown ID on some routes, so it
+    # is read the same way get_check_details reads it: no such check.
+    if not isinstance(check, dict) or not check:
+        return None
+
+    provider = check.get("provider")
+    if isinstance(provider, str) and provider.strip():
+        return provider
+    # A check the Hub returned without a provider tells us nothing about the
+    # provider the caller asked for, so it counts as unanswered rather than as
+    # a check that does not exist.
+    raise ValueError(f"Prowler Hub listed check '{check_id}' without a provider")
+
+
+def _explain_missing_check_file(
+    provider_id: str,
+    check_id: str,
+    *,
+    when_check_belongs_here: str,
+    when_unverified: str,
+) -> str:
+    """Explain a 404 from GitHub for one of a check's source files.
+
+    GitHub answers 404 to three different mistakes, an ID that exists nowhere,
+    an ID that exists under a different provider, and an ID that exists right
+    here whose file is simply absent, and cannot tell them apart. Prowler Hub
+    can, so it is asked before anything is claimed about the ID.
+
+    Args:
+        provider_id: Provider the caller asked for
+        check_id: Check the caller asked for
+        when_check_belongs_here: Message for the case where the Hub confirms the
+            check does belong to this provider
+        when_unverified: Message for the case where the Hub could not be asked
+
+    Returns:
+        The sentence to fail the tool with
+    """
+    try:
+        hub_provider = _hub_provider_for_check(check_id)
+    except (httpx.HTTPError, UpstreamInvalidResponse, ValueError):
+        return when_unverified
+
+    if hub_provider is None:
+        return _CHECK_NOT_FOUND.format(check_id=check_id)
+    if hub_provider != provider_id:
+        return (
+            f"Provider '{provider_id}' has no check '{check_id}'. Prowler Hub lists "
+            f"that check under provider '{hub_provider}', so retry with "
+            f"provider_id='{hub_provider}'."
+        )
+    return when_check_belongs_here
 
 
 # Security Check Tools
@@ -123,29 +233,22 @@ async def list_checks(
     if compliances:
         params["compliances"] = ",".join(compliances)
 
-    try:
-        response = prowler_hub_client.get("/check", params=params)
-        response.raise_for_status()
-        checks = response.json()
+    response = _get_hub_endpoint("check", params=params)
+    response.raise_for_status()
+    checks = parse_json_response(response)
 
-        # Return checks as a lightweight list
-        checks_list = []
-        for check in checks:
-            check_data = {
-                "id": check["id"],
-                "provider": check["provider"],
-                "title": check["title"],
-                "severity": check["severity"],
-            }
-            checks_list.append(check_data)
-
-        return {"count": len(checks), "checks": checks_list}
-    except httpx.HTTPStatusError as e:
-        return {
-            "error": f"HTTP error {e.response.status_code}: {e.response.text}",
+    # Return checks as a lightweight list
+    checks_list = []
+    for check in checks:
+        check_data = {
+            "id": check["id"],
+            "provider": check["provider"],
+            "title": check["title"],
+            "severity": check["severity"],
         }
-    except Exception as e:
-        return {"error": str(e)}
+        checks_list.append(check_data)
+
+    return {"count": len(checks), "checks": checks_list}
 
 
 @hub_mcp_server.tool()
@@ -182,29 +285,22 @@ async def semantic_search_checks(
     2. Use `prowler_hub_list_checks` with filters for more targeted browsing
     3. Use `prowler_hub_get_check_details` to get complete information for a specific check
     """
-    try:
-        response = prowler_hub_client.get("/check/search", params={"term": term})
-        response.raise_for_status()
-        checks = response.json()
+    response = _get_hub_endpoint("check", "search", params={"term": term})
+    response.raise_for_status()
+    checks = parse_json_response(response)
 
-        # Return checks as a lightweight list
-        checks_list = []
-        for check in checks:
-            check_data = {
-                "id": check["id"],
-                "provider": check["provider"],
-                "title": check["title"],
-                "severity": check["severity"],
-            }
-            checks_list.append(check_data)
-
-        return {"count": len(checks), "checks": checks_list}
-    except httpx.HTTPStatusError as e:
-        return {
-            "error": f"HTTP error {e.response.status_code}: {e.response.text}",
+    # Return checks as a lightweight list
+    checks_list = []
+    for check in checks:
+        check_data = {
+            "id": check["id"],
+            "provider": check["provider"],
+            "title": check["title"],
+            "severity": check["severity"],
         }
-    except Exception as e:
-        return {"error": str(e)}
+        checks_list.append(check_data)
+
+    return {"count": len(checks), "checks": checks_list}
 
 
 @hub_mcp_server.tool()
@@ -274,75 +370,75 @@ async def get_check_details(
     2. Use this tool with the check 'id' to get complete information including remediation guidance
     """
     try:
-        response = prowler_hub_client.get(f"/check/{check_id}")
+        response = _get_hub_endpoint("check", check_id)
         response.raise_for_status()
-        check = response.json()
-
-        if not check:
-            return {"error": f"Check '{check_id}' not found"}
-
-        # Build response with only non-empty fields to save tokens
-        result = {}
-
-        # Core fields
-        result["id"] = check["id"]
-        if check.get("title"):
-            result["title"] = check["title"]
-        if check.get("description"):
-            result["description"] = check["description"]
-        if check.get("provider"):
-            result["provider"] = check["provider"]
-        if check.get("service"):
-            result["service"] = check["service"]
-        if check.get("severity"):
-            result["severity"] = check["severity"]
-        if check.get("risk"):
-            result["risk"] = check["risk"]
-        if check.get("resource_type"):
-            result["resource_type"] = check["resource_type"]
-
-        # List fields
-        if check.get("reference"):
-            result["reference"] = check["reference"]
-        if check.get("additional_urls"):
-            result["additional_urls"] = check["additional_urls"]
-        if check.get("services_required"):
-            result["services_required"] = check["services_required"]
-        if check.get("categories"):
-            result["categories"] = check["categories"]
-        if check.get("compliances"):
-            result["compliances"] = check["compliances"]
-
-        # Other fields
-        if check.get("notes"):
-            result["notes"] = check["notes"]
-        if check.get("related_url"):
-            result["related_url"] = check["related_url"]
-        if check.get("fixer") is not None:
-            result["fixer"] = check["fixer"]
-
-        # Remediation - filter out empty nested values
-        remediation = check.get("remediation", {})
-        if remediation:
-            filtered_remediation = {}
-            for key, value in remediation.items():
-                if value and isinstance(value, dict):
-                    # Filter out empty values within nested dict
-                    filtered_value = {k: v for k, v in value.items() if v}
-                    if filtered_value:
-                        filtered_remediation[key] = filtered_value
-                elif value:
-                    filtered_remediation[key] = value
-            if filtered_remediation:
-                result["remediation"] = filtered_remediation
-
-        return result
     except httpx.HTTPStatusError as e:
-        return {
-            "error": f"HTTP error {e.response.status_code}: {e.response.text}",
-        }
-    except Exception as e:
-        return {"error": str(e)}
+        if e.response.status_code == 404:
+            # No `from`: this names the check, which the shared classifier cannot.
+            raise ToolError(_CHECK_NOT_FOUND.format(check_id=check_id))
+        raise
+
+    check = parse_json_response(response)
+
+    if not check:
+        raise ToolError(_CHECK_NOT_FOUND.format(check_id=check_id))
+
+    # Build response with only non-empty fields to save tokens
+    result = {}
+
+    # Core fields
+    result["id"] = check["id"]
+    if check.get("title"):
+        result["title"] = check["title"]
+    if check.get("description"):
+        result["description"] = check["description"]
+    if check.get("provider"):
+        result["provider"] = check["provider"]
+    if check.get("service"):
+        result["service"] = check["service"]
+    if check.get("severity"):
+        result["severity"] = check["severity"]
+    if check.get("risk"):
+        result["risk"] = check["risk"]
+    if check.get("resource_type"):
+        result["resource_type"] = check["resource_type"]
+
+    # List fields
+    if check.get("reference"):
+        result["reference"] = check["reference"]
+    if check.get("additional_urls"):
+        result["additional_urls"] = check["additional_urls"]
+    if check.get("services_required"):
+        result["services_required"] = check["services_required"]
+    if check.get("categories"):
+        result["categories"] = check["categories"]
+    if check.get("compliances"):
+        result["compliances"] = check["compliances"]
+
+    # Other fields
+    if check.get("notes"):
+        result["notes"] = check["notes"]
+    if check.get("related_url"):
+        result["related_url"] = check["related_url"]
+    if check.get("fixer") is not None:
+        result["fixer"] = check["fixer"]
+
+    # Remediation - filter out empty nested values
+    remediation = check.get("remediation", {})
+    if remediation:
+        filtered_remediation = {}
+        for key, value in remediation.items():
+            if value and isinstance(value, dict):
+                # Filter out empty values within nested dict
+                filtered_value = {k: v for k, v in value.items() if v}
+                if filtered_value:
+                    filtered_remediation[key] = filtered_value
+            elif value:
+                filtered_remediation[key] = value
+        if filtered_remediation:
+            result["remediation"] = filtered_remediation
+
+    return result
 
 
 @hub_mcp_server.tool()
@@ -364,31 +460,38 @@ async def get_check_code(
             "content": "Python source code of the check implementation"
         }
     """
-    if provider_id and check_id:
-        url = github_check_path(provider_id, check_id, ".py")
-        try:
-            resp = github_raw_client.get(url)
-            resp.raise_for_status()
-            return {
-                "content": resp.text,
-            }
-        except httpx.HTTPStatusError as e:
-            if e.response.status_code == 404:
-                return {
-                    "error": f"Check {check_id} not found in Prowler",
-                }
-            else:
-                return {
-                    "error": f"HTTP error {e.response.status_code}: {e.response.text}",
-                }
-        except Exception as e:
-            return {
-                "error": str(e),
-            }
-    else:
-        return {
-            "error": "Provider ID and check ID are required",
-        }
+    url = github_check_path(provider_id, check_id, ".py")
+    try:
+        resp = github_raw_client.get(url)
+        resp.raise_for_status()
+    except httpx.HTTPStatusError as e:
+        if e.response.status_code == 404:
+            # No `from`: this names the check and the provider that does have
+            # it, neither of which the shared classifier in lib/errors.py knows.
+            raise ToolError(
+                _explain_missing_check_file(
+                    provider_id,
+                    check_id,
+                    when_check_belongs_here=(
+                        f"Prowler Hub lists check '{check_id}' under provider "
+                        f"'{provider_id}', but prowler-cloud/prowler has no source file "
+                        "for it on the master branch. The check may have been renamed or "
+                        "moved since the Hub last indexed it."
+                    ),
+                    when_unverified=(
+                        f"Provider '{provider_id}' has no check '{check_id}' in "
+                        "prowler-cloud/prowler, and Prowler Hub could not be asked which "
+                        "provider does. Either the ID is wrong or the check belongs to "
+                        "another provider, prowler_hub_get_check_details reports the "
+                        "provider a check belongs to."
+                    ),
+                )
+            )
+        raise
+
+    return {
+        "content": resp.text,
+    }
 
 
 @hub_mcp_server.tool()
@@ -402,8 +505,9 @@ async def get_check_fixer(
 ) -> dict:
     """Fetch the auto-remediation (fixer) code for a Prowler security check.
 
-    IMPORTANT: Not all checks have fixers. A "fixer not found" response means the check
-    doesn't have auto-remediation code - this is normal for many checks.
+    IMPORTANT: Not all checks have fixers. A check with no auto-remediation code fails
+    with a message saying so - this is normal for many checks and not a problem to
+    report or retry.
 
     Fixer code provides automated remediation that can fix security issues detected by checks.
     Use this to understand how to programmatically remediate findings.
@@ -412,40 +516,37 @@ async def get_check_fixer(
         {
             "content": "Python source code of the auto-remediation implementation"
         }
-        Or if no fixer exists:
-        {
-            "error": "Fixer not found for check {check_id}"
-        }
     """
-    if provider_id and check_id:
-        url = github_check_path(provider_id, check_id, "_fixer.py")
-        try:
-            resp = github_raw_client.get(url)
-            if resp.status_code == 404:
-                return {
-                    "error": f"Fixer not found for check {check_id}",
-                }
-            resp.raise_for_status()
-            return {
-                "content": resp.text,
-            }
-        except httpx.HTTPStatusError as e:
-            if e.response.status_code == 404:
-                return {
-                    "error": f"Check {check_id} not found in Prowler",
-                }
-            else:
-                return {
-                    "error": f"HTTP error {e.response.status_code}: {e.response.text}",
-                }
-        except Exception as e:
-            return {
-                "error": str(e),
-            }
-    else:
-        return {
-            "error": "Provider ID and check ID are required",
-        }
+    url = github_check_path(provider_id, check_id, "_fixer.py")
+    try:
+        resp = github_raw_client.get(url)
+        resp.raise_for_status()
+    except httpx.HTTPStatusError as e:
+        if e.response.status_code == 404:
+            # "No fixer" is only one of the reasons the file is missing, and the
+            # others are the caller's to fix, so they are told apart first.
+            raise ToolError(
+                _explain_missing_check_file(
+                    provider_id,
+                    check_id,
+                    when_check_belongs_here=(
+                        f"Check {check_id} has no auto-remediation code. Many checks do "
+                        "not, and that is normal."
+                    ),
+                    when_unverified=(
+                        f"Provider '{provider_id}' has no auto-remediation code for "
+                        f"check '{check_id}'. Many checks have none, and that is normal, "
+                        f"but Prowler Hub could not be asked whether the check belongs "
+                        f"to '{provider_id}' at all. Confirm it with "
+                        "prowler_hub_get_check_details if you expected a fixer."
+                    ),
+                )
+            )
+        raise
+
+    return {
+        "content": resp.text,
+    }
 
 
 # Compliance Framework Tools
@@ -492,28 +593,21 @@ async def list_compliances(
     if provider:
         params["provider"] = ",".join(provider)
 
-    try:
-        response = prowler_hub_client.get("/compliance", params=params)
-        response.raise_for_status()
-        compliances = response.json()
+    response = _get_hub_endpoint("compliance", params=params)
+    response.raise_for_status()
+    compliances = parse_json_response(response)
 
-        # Return compliances as a lightweight list
-        compliances_list = []
-        for compliance in compliances:
-            compliance_data = {
-                "id": compliance["id"],
-                "name": compliance["name"],
-                "provider": compliance["provider"],
-            }
-            compliances_list.append(compliance_data)
-
-        return {"count": len(compliances), "compliances": compliances_list}
-    except httpx.HTTPStatusError as e:
-        return {
-            "error": f"HTTP error {e.response.status_code}: {e.response.text}",
+    # Return compliances as a lightweight list
+    compliances_list = []
+    for compliance in compliances:
+        compliance_data = {
+            "id": compliance["id"],
+            "name": compliance["name"],
+            "provider": compliance["provider"],
         }
-    except Exception as e:
-        return {"error": str(e)}
+        compliances_list.append(compliance_data)
+
+    return {"count": len(compliances), "compliances": compliances_list}
 
 
 @hub_mcp_server.tool()
@@ -543,28 +637,21 @@ async def semantic_search_compliances(
             ]
         }
     """
-    try:
-        response = prowler_hub_client.get("/compliance/search", params={"term": term})
-        response.raise_for_status()
-        compliances = response.json()
+    response = _get_hub_endpoint("compliance", "search", params={"term": term})
+    response.raise_for_status()
+    compliances = parse_json_response(response)
 
-        # Return compliances as a lightweight list
-        compliances_list = []
-        for compliance in compliances:
-            compliance_data = {
-                "id": compliance["id"],
-                "name": compliance["name"],
-                "provider": compliance["provider"],
-            }
-            compliances_list.append(compliance_data)
-
-        return {"count": len(compliances), "compliances": compliances_list}
-    except httpx.HTTPStatusError as e:
-        return {
-            "error": f"HTTP error {e.response.status_code}: {e.response.text}",
+    # Return compliances as a lightweight list
+    compliances_list = []
+    for compliance in compliances:
+        compliance_data = {
+            "id": compliance["id"],
+            "name": compliance["name"],
+            "provider": compliance["provider"],
         }
-    except Exception as e:
-        return {"error": str(e)}
+        compliances_list.append(compliance_data)
+
+    return {"count": len(compliances), "compliances": compliances_list}
 
 
 @hub_mcp_server.tool()
@@ -599,63 +686,60 @@ async def get_compliance_details(
         }
     """
     try:
-        response = prowler_hub_client.get(f"/compliance/{compliance_id}")
+        response = _get_hub_endpoint("compliance", compliance_id)
         response.raise_for_status()
-        compliance = response.json()
-
-        if not compliance:
-            return {"error": f"Compliance '{compliance_id}' not found"}
-
-        # Build response with only non-empty fields to save tokens
-        result = {}
-
-        # Core fields
-        result["id"] = compliance["id"]
-        if compliance.get("name"):
-            result["name"] = compliance["name"]
-        if compliance.get("framework"):
-            result["framework"] = compliance["framework"]
-        if compliance.get("provider"):
-            result["provider"] = compliance["provider"]
-        if compliance.get("version"):
-            result["version"] = compliance["version"]
-        if compliance.get("description"):
-            result["description"] = compliance["description"]
-
-        # Numeric fields
-        if compliance.get("total_checks"):
-            result["total_checks"] = compliance["total_checks"]
-        if compliance.get("total_requirements"):
-            result["total_requirements"] = compliance["total_requirements"]
-
-        # Requirements - filter out empty nested values
-        requirements = compliance.get("requirements", [])
-        if requirements:
-            filtered_requirements = []
-            for req in requirements:
-                filtered_req = {}
-                if req.get("id"):
-                    filtered_req["id"] = req["id"]
-                if req.get("name"):
-                    filtered_req["name"] = req["name"]
-                if req.get("description"):
-                    filtered_req["description"] = req["description"]
-                if req.get("checks"):
-                    filtered_req["checks"] = req["checks"]
-                if filtered_req:
-                    filtered_requirements.append(filtered_req)
-            if filtered_requirements:
-                result["requirements"] = filtered_requirements
-
-        return result
     except httpx.HTTPStatusError as e:
         if e.response.status_code == 404:
-            return {"error": f"Compliance '{compliance_id}' not found"}
-        return {
-            "error": f"HTTP error {e.response.status_code}: {e.response.text}",
-        }
-    except Exception as e:
-        return {"error": str(e)}
+            raise ToolError(_COMPLIANCE_NOT_FOUND.format(compliance_id=compliance_id))
+        raise
+
+    compliance = parse_json_response(response)
+
+    if not compliance:
+        raise ToolError(_COMPLIANCE_NOT_FOUND.format(compliance_id=compliance_id))
+
+    # Build response with only non-empty fields to save tokens
+    result = {}
+
+    # Core fields
+    result["id"] = compliance["id"]
+    if compliance.get("name"):
+        result["name"] = compliance["name"]
+    if compliance.get("framework"):
+        result["framework"] = compliance["framework"]
+    if compliance.get("provider"):
+        result["provider"] = compliance["provider"]
+    if compliance.get("version"):
+        result["version"] = compliance["version"]
+    if compliance.get("description"):
+        result["description"] = compliance["description"]
+
+    # Numeric fields
+    if compliance.get("total_checks"):
+        result["total_checks"] = compliance["total_checks"]
+    if compliance.get("total_requirements"):
+        result["total_requirements"] = compliance["total_requirements"]
+
+    # Requirements - filter out empty nested values
+    requirements = compliance.get("requirements", [])
+    if requirements:
+        filtered_requirements = []
+        for req in requirements:
+            filtered_req = {}
+            if req.get("id"):
+                filtered_req["id"] = req["id"]
+            if req.get("name"):
+                filtered_req["name"] = req["name"]
+            if req.get("description"):
+                filtered_req["description"] = req["description"]
+            if req.get("checks"):
+                filtered_req["checks"] = req["checks"]
+            if filtered_req:
+                filtered_requirements.append(filtered_req)
+        if filtered_requirements:
+            result["requirements"] = filtered_requirements
+
+    return result
 
 
 # Provider Tools
@@ -684,27 +768,20 @@ async def list_providers() -> dict:
             ]
         }
     """
-    try:
-        response = prowler_hub_client.get("/providers")
-        response.raise_for_status()
-        providers = response.json()
+    response = _get_hub_endpoint("providers")
+    response.raise_for_status()
+    providers = parse_json_response(response)
 
-        providers_list = []
-        for provider in providers:
-            providers_list.append(
-                {
-                    "id": provider["id"],
-                    "name": provider.get("name", ""),
-                }
-            )
+    providers_list = []
+    for provider in providers:
+        providers_list.append(
+            {
+                "id": provider["id"],
+                "name": provider.get("name", ""),
+            }
+        )
 
-        return {"count": len(providers), "providers": providers_list}
-    except httpx.HTTPStatusError as e:
-        return {
-            "error": f"HTTP error {e.response.status_code}: {e.response.text}",
-        }
-    except Exception as e:
-        return {"error": str(e)}
+    return {"count": len(providers), "providers": providers_list}
 
 
 @hub_mcp_server.tool()
@@ -728,24 +805,20 @@ async def get_provider_services(
             "services": ["s3", "ec2", "iam", "rds", "lambda", ...]
         }
     """
-    try:
-        response = prowler_hub_client.get("/providers")
-        response.raise_for_status()
-        providers = response.json()
+    response = _get_hub_endpoint("providers")
+    response.raise_for_status()
+    providers = parse_json_response(response)
 
-        for provider in providers:
-            if provider["id"] == provider_id:
-                return {
-                    "provider_id": provider["id"],
-                    "provider_name": provider.get("name", ""),
-                    "count": len(provider.get("services", [])),
-                    "services": provider.get("services", []),
-                }
+    for provider in providers:
+        if provider["id"] == provider_id:
+            return {
+                "provider_id": provider["id"],
+                "provider_name": provider.get("name", ""),
+                "count": len(provider.get("services", [])),
+                "services": provider.get("services", []),
+            }
 
-        return {"error": f"Provider '{provider_id}' not found"}
-    except httpx.HTTPStatusError as e:
-        return {
-            "error": f"HTTP error {e.response.status_code}: {e.response.text}",
-        }
-    except Exception as e:
-        return {"error": str(e)}
+    known = ", ".join(sorted(str(provider["id"]) for provider in providers))
+    raise ToolError(
+        f"Prowler has no provider with the ID '{provider_id}'. Available: {known}."
+    )
diff --git a/mcp_server/tests/lib/test_errors.py b/mcp_server/tests/lib/test_errors.py
index cd32752b42..a682034bc8 100644
--- a/mcp_server/tests/lib/test_errors.py
+++ b/mcp_server/tests/lib/test_errors.py
@@ -7,6 +7,7 @@ reaches a model is text this server produced.
 
 import json
 
+import httpx
 import pytest
 from fastmcp import Client
 from pydantic import BaseModel, ValidationError
@@ -14,7 +15,9 @@ from pydantic import BaseModel, ValidationError
 from prowler_mcp_server.lib.errors import (
     CredentialError,
     InvalidArgument,
+    UpstreamInvalidResponse,
     _describe_failure,
+    parse_json_response,
 )
 from prowler_mcp_server.prowler_app.utils.api_client import (
     ProwlerAPIError,
@@ -26,6 +29,42 @@ from tests.helpers.jsonapi import jsonapi_error
 LATEST = "/api/v1/findings/latest"
 
 
+# --------------------------------------------------------------- json bodies
+
+
+def _answer(
+    body: str, *, url: str = "https://hub.prowler.com/api/check"
+) -> httpx.Response:
+    """An answer as a client would hand it back, request attached."""
+    return httpx.Response(200, text=body, request=httpx.Request("GET", url))
+
+
+def test_a_json_body_is_returned_as_it_is():
+    """The helper only classifies the failure; the success path is untouched."""
+    assert parse_json_response(_answer('{"id": "s3_bucket_public_access"}')) == {
+        "id": "s3_bucket_public_access"
+    }
+
+
+def test_a_body_that_is_not_json_names_the_host_that_answered():
+    """Which upstream is misbehaving is the one useful fact here, and the shared
+    helper is reached from every sub-server that reads an upstream directly."""
+    with pytest.raises(UpstreamInvalidResponse) as raised:
+        parse_json_response(_answer("<html><body>502 Bad Gateway</body></html>"))
+
+    assert raised.value.host == "hub.prowler.com"
+    assert "Bad Gateway" not in str(raised.value)
+
+
+def test_a_body_that_is_not_json_is_not_a_valueerror():
+    """`JSONDecodeError` is a ValueError, and callers tell an upstream fault from
+    a bad argument by type alone."""
+    with pytest.raises(UpstreamInvalidResponse) as raised:
+        parse_json_response(_answer("not json"))
+
+    assert not isinstance(raised.value, ValueError)
+
+
 # ------------------------------------------------------------ classification
 
 
@@ -94,6 +133,29 @@ def test_an_unreadable_api_answer_is_never_called_safe_to_repeat():
     assert "check the current state" in message
 
 
+def test_an_unreadable_upstream_answer_is_not_blamed_on_the_arguments():
+    """A `JSONDecodeError` from an upstream and one from an argument are the same
+    exception and opposite instructions."""
+    message = _describe_failure(
+        UpstreamInvalidResponse("200 body is not JSON", host="hub.prowler.com")
+    )
+
+    assert "hub.prowler.com" in message
+    assert "could not read as JSON" in message
+    assert "changing them will not help" in message
+
+
+def test_an_unreadable_upstream_answer_never_quotes_the_body():
+    """The body is someone else's text, so only the host and the status leave here."""
+    message = _describe_failure(
+        UpstreamInvalidResponse(
+            "502 body is not JSON", host="raw.githubusercontent.com"
+        )
+    )
+
+    assert "body is not JSON" not in message
+
+
 def test_an_argument_this_server_rejected_is_repeated_verbatim():
     """`InvalidArgument` exists to mark a message as one we wrote."""
     message = _describe_failure(
@@ -227,3 +289,19 @@ async def test_a_tool_specific_message_survives_masking(
 
     assert result.isError is True
     assert "prowler_list_integrations" in result.content[0].text
+
+
+async def test_a_hub_tool_failure_says_which_host_refused_it(
+    mcp_root_server, hub_router
+):
+    """Hub failures arrive as raw httpx errors: host and status relayed, body not."""
+    hub_router.add(
+        "GET", "/api/check", status=503, text="<html>upstream nginx 10.1.2.3</html>"
+    )
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp("prowler_hub_list_checks", {})
+
+    assert result.isError is True
+    assert "hub.prowler.com" in result.content[0].text
+    assert "10.1.2.3" not in result.content[0].text
diff --git a/mcp_server/tests/lib/test_urls.py b/mcp_server/tests/lib/test_urls.py
new file mode 100644
index 0000000000..64798d5445
--- /dev/null
+++ b/mcp_server/tests/lib/test_urls.py
@@ -0,0 +1,59 @@
+"""Tests for the shared URL path builder.
+
+The bug these pin: an identifier interpolated into a path was resolved away by
+httpx per RFC 3986, so "../" reached an endpoint no tool meant to call.
+"""
+
+import pytest
+
+from prowler_mcp_server.lib.urls import path_segment, url_path
+
+
+@pytest.mark.parametrize(
+    ("value", "expected"),
+    [
+        ("s3_bucket_public_access", "s3_bucket_public_access"),
+        ("cis_4.0_aws", "cis_4.0_aws"),
+        ("../../evil", "..%2F..%2Fevil"),
+        ("....//evil", "....%2F%2Fevil"),
+        ("%2e%2e%2f", "%252e%252e%252f"),
+        ("..;/", "..%3B%2F"),
+        ("s3/../evil", "s3%2F..%2Fevil"),
+        ("evil?fields=all", "evil%3Ffields%3Dall"),
+        ("evil#frag", "evil%23frag"),
+        ("evil\\wrong", "evil%5Cwrong"),
+        ("two words", "two%20words"),
+    ],
+    ids=[
+        "plain",
+        "dots-in-a-name",
+        "traversal",
+        "stripped-filter-bypass",
+        "already-encoded",
+        "path-parameter",
+        "mid-path",
+        "query",
+        "fragment",
+        "backslash",
+        "space",
+    ],
+)
+def test_a_segment_survives_as_a_name_and_never_as_syntax(value, expected):
+    """A real ID passes through untouched; URL syntax comes back as characters."""
+    assert path_segment(value) == expected
+
+
+@pytest.mark.parametrize("value", [".", ".."], ids=["here", "up-one"])
+def test_a_segment_of_nothing_but_dots_is_escaped_rather_than_left_to_resolve(value):
+    """`quote` keeps a dot, so a segment of only dots would still resolve away."""
+    assert path_segment(value) == value.replace(".", "%2E")
+
+
+def test_a_path_is_the_segments_it_was_given_and_no_others():
+    """One argument per segment, so no call site has to encode anything."""
+    assert url_path("users", "../../evil", "roles") == "/users/..%2F..%2Fevil/roles"
+
+
+def test_a_single_segment_path_keeps_its_leading_slash():
+    """Every caller joins this onto a base URL that ends without a slash."""
+    assert url_path("providers") == "/providers"
diff --git a/mcp_server/tests/prowler_hub/test_server.py b/mcp_server/tests/prowler_hub/test_server.py
new file mode 100644
index 0000000000..50711aa1fa
--- /dev/null
+++ b/mcp_server/tests/prowler_hub/test_server.py
@@ -0,0 +1,335 @@
+"""Tests for the Prowler Hub tools.
+
+The Hub sub-server uses its own httpx clients, so its failures never pass through
+the Prowler API client. They still have to arrive as tool errors rather than as a
+result object, which the protocol, the client and the model all read as a success.
+"""
+
+import pytest
+from fastmcp import Client
+
+CHECKS = "/api/check"
+PROVIDERS = "/api/providers"
+COMPLIANCE = "/api/compliance"
+CHECK_ID = "s3_bucket_public_access"
+HUB_CHECK = f"{CHECKS}/{CHECK_ID}"
+
+
+def github_check(provider: str, suffix: str = ".py") -> str:
+    """The raw.githubusercontent path a check artifact is fetched from."""
+    return (
+        f"/prowler-cloud/prowler/refs/heads/master/prowler/providers/{provider}"
+        f"/services/s3/{CHECK_ID}/{CHECK_ID}{suffix}"
+    )
+
+
+GITHUB_CHECK = github_check("aws")
+GITHUB_FIXER = github_check("aws", "_fixer.py")
+
+
+async def test_listing_checks_returns_the_lightweight_shape(
+    mcp_root_server, hub_router
+):
+    """The happy path, so the failure tests below are not the only coverage."""
+    hub_router.add(
+        "GET",
+        CHECKS,
+        json=[
+            {
+                "id": "s3_bucket_public_access",
+                "provider": "aws",
+                "title": "S3 buckets should block public access",
+                "severity": "high",
+            }
+        ],
+    )
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool("prowler_hub_list_checks", {})
+
+    assert result.data["count"] == 1
+    assert result.data["checks"][0]["id"] == "s3_bucket_public_access"
+
+
+async def test_an_unknown_check_fails_and_names_the_tool_that_finds_one(
+    mcp_root_server, hub_router
+):
+    """A 404 is the caller's mistake, and the fix is a different tool."""
+    hub_router.add("GET", f"{CHECKS}/nope", status=404)
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_hub_get_check_details", {"check_id": "nope"}
+        )
+
+    assert result.isError is True
+    assert "prowler_hub_semantic_search_checks" in result.content[0].text
+
+
+async def test_an_unknown_provider_fails_and_lists_the_real_ones(
+    mcp_root_server, hub_router
+):
+    """The valid values are already in hand, so withholding them wastes a call."""
+    hub_router.add(
+        "GET",
+        PROVIDERS,
+        json=[{"id": "aws", "name": "Amazon Web Services", "services": ["s3"]}],
+    )
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_hub_get_provider_services", {"provider_id": "alicloud"}
+        )
+
+    assert result.isError is True
+    assert "aws" in result.content[0].text
+
+
+async def test_a_check_without_a_fixer_says_that_is_normal(mcp_root_server, hub_router):
+    """Most checks have no auto-remediation, so this must not read as a defect."""
+    hub_router.add("GET", GITHUB_FIXER, status=404)
+    hub_router.add("GET", HUB_CHECK, json={"id": CHECK_ID, "provider": "aws"})
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_hub_get_check_fixer",
+            {"provider_id": "aws", "check_id": CHECK_ID},
+        )
+
+    assert result.isError is True
+    message = result.content[0].text
+    assert "normal" in message
+    # The Hub confirmed the check is an aws check, so nothing is left to verify.
+    assert "prowler_hub_get_check_details" not in message
+
+
+async def test_a_check_from_another_provider_names_the_provider_that_has_it(
+    mcp_root_server, hub_router
+):
+    """The ID exists; only the provider is wrong. Saying otherwise sends the
+    caller off to search for an ID they already hold."""
+    hub_router.add("GET", github_check("azure"), status=404)
+    hub_router.add("GET", HUB_CHECK, json={"id": CHECK_ID, "provider": "aws"})
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_hub_get_check_code",
+            {"provider_id": "azure", "check_id": CHECK_ID},
+        )
+
+    assert result.isError is True
+    message = result.content[0].text
+    assert "provider_id='aws'" in message
+    assert "No check with the ID" not in message
+
+
+async def test_a_fixer_from_another_provider_is_not_reported_as_a_missing_fixer(
+    mcp_root_server, hub_router
+):
+    """'That check has no fixer' about a check the provider never had is a lie
+    the caller cannot act on."""
+    hub_router.add("GET", github_check("azure", "_fixer.py"), status=404)
+    hub_router.add("GET", HUB_CHECK, json={"id": CHECK_ID, "provider": "aws"})
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_hub_get_check_fixer",
+            {"provider_id": "azure", "check_id": CHECK_ID},
+        )
+
+    assert result.isError is True
+    message = result.content[0].text
+    assert "provider_id='aws'" in message
+    assert "auto-remediation" not in message
+
+
+async def test_a_check_id_that_exists_nowhere_is_still_reported_as_unknown(
+    mcp_root_server, hub_router
+):
+    """The Hub not having the ID either is the one case that does justify the
+    original message."""
+    hub_router.add("GET", github_check("azure"), status=404)
+    hub_router.add("GET", HUB_CHECK, status=404)
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_hub_get_check_code",
+            {"provider_id": "azure", "check_id": CHECK_ID},
+        )
+
+    assert result.isError is True
+    assert "No check with the ID" in result.content[0].text
+
+
+async def test_an_unreachable_hub_leaves_the_cause_open_rather_than_guessing(
+    mcp_root_server, hub_router
+):
+    """With nothing to distinguish the causes, naming one of them is a guess."""
+    hub_router.add("GET", github_check("azure"), status=404)
+    hub_router.add("GET", HUB_CHECK, status=503)
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_hub_get_check_code",
+            {"provider_id": "azure", "check_id": CHECK_ID},
+        )
+
+    assert result.isError is True
+    message = result.content[0].text
+    assert "No check with the ID" not in message
+    assert "prowler_hub_get_check_details" in message
+
+
+async def test_a_check_code_hit_never_asks_the_hub(mcp_root_server, hub_router):
+    """The Hub lookup exists to explain a 404. On the happy path it is dead
+    weight -- a second round trip for every call that already succeeded."""
+    hub_router.add("GET", GITHUB_CHECK, text="class s3_bucket_public_access: ...")
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool(
+            "prowler_hub_get_check_code",
+            {"provider_id": "aws", "check_id": CHECK_ID},
+        )
+
+    assert "class s3_bucket_public_access" in result.data["content"]
+    assert hub_router.paths() == [f"GET {GITHUB_CHECK}"]
+
+
+async def test_a_hub_outage_is_reported_rather_than_returned_as_an_empty_list(
+    mcp_root_server, hub_router
+):
+    """An empty result set and a failed request are different answers."""
+    hub_router.add("GET", CHECKS, status=500, json={"detail": "boom"})
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp("prowler_hub_list_checks", {})
+
+    assert result.isError is True
+    assert result.structuredContent is None
+
+
+@pytest.mark.parametrize(
+    ("check_id", "routed_as", "sent_as"),
+    [
+        ("../../evil", f"{CHECKS}/../../evil", b"/api/check/..%2F..%2Fevil"),
+        ("s3/../evil", f"{CHECKS}/s3/../evil", b"/api/check/s3%2F..%2Fevil"),
+        ("..", f"{CHECKS}/..", b"/api/check/%2E%2E"),
+        (
+            "s3_x?fields=all",
+            f"{CHECKS}/s3_x?fields=all",
+            b"/api/check/s3_x%3Ffields%3Dall",
+        ),
+        ("s3_x#frag", f"{CHECKS}/s3_x#frag", b"/api/check/s3_x%23frag"),
+    ],
+    ids=["traversal", "mid-path", "dot-segment", "query", "fragment"],
+)
+async def test_an_id_names_a_check_and_cannot_name_an_endpoint(
+    mcp_root_server, hub_router, check_id, routed_as, sent_as
+):
+    """The bug this pins: httpx resolved "../.." away and the request left
+    /api/check for another endpoint of the Hub."""
+    hub_router.add("GET", routed_as, status=404)
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_hub_get_check_details", {"check_id": check_id}
+        )
+
+    assert hub_router.requests[0].url.raw_path == sent_as
+    assert result.isError is True
+    assert "No check with the ID" in result.content[0].text
+
+
+async def test_a_compliance_id_cannot_name_an_endpoint_either(
+    mcp_root_server, hub_router
+):
+    """Every Hub path is built by the same helper, so this holds without its own
+    guard."""
+    hub_router.add("GET", f"{COMPLIANCE}/../../evil", status=404)
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_hub_get_compliance_details", {"compliance_id": "../../evil"}
+        )
+
+    assert hub_router.requests[0].url.raw_path == b"/api/compliance/..%2F..%2Fevil"
+    assert result.isError is True
+    assert "No compliance framework with the ID" in result.content[0].text
+
+
+async def test_a_check_source_url_confines_the_provider_and_the_check_alike(
+    mcp_root_server, hub_router
+):
+    """Both halves of the GitHub raw URL come from the caller, so both are
+    confined."""
+    hub_router.add("GET", github_check("../../../../evil"), status=404)
+    hub_router.add("GET", HUB_CHECK, json={"id": CHECK_ID, "provider": "aws"})
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_hub_get_check_code",
+            {"provider_id": "../../../../evil", "check_id": CHECK_ID},
+        )
+
+    assert (
+        hub_router.requests[0].url.raw_path
+        == github_check("..%2F..%2F..%2F..%2Fevil").encode()
+    )
+    assert result.isError is True
+
+
+async def test_a_hub_body_that_is_not_json_is_not_blamed_on_the_arguments(
+    mcp_root_server, hub_router
+):
+    """An edge answering 200 with an HTML page decodes to the same
+    `JSONDecodeError` a malformed argument does, and the two mean opposite
+    things: nothing in this call can be corrected."""
+    hub_router.add("GET", CHECKS, text="<html><body>502 Bad Gateway</body></html>")
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp("prowler_hub_list_checks", {})
+
+    assert result.isError is True
+    message = result.content[0].text
+    assert "hub.prowler.com" in message
+    assert "could not read as JSON" in message
+    assert "Bad Gateway" not in message
+    assert "Send it as a real object" not in message
+
+
+async def test_an_unreadable_hub_answer_does_not_become_an_unknown_check(
+    mcp_root_server, hub_router
+):
+    """The 404 branch is the only one that may claim the ID does not exist. A
+    body that could not be read says nothing about the ID."""
+    hub_router.add("GET", HUB_CHECK, text="<html>not json</html>")
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_hub_get_check_details", {"check_id": CHECK_ID}
+        )
+
+    assert result.isError is True
+    message = result.content[0].text
+    assert "could not read as JSON" in message
+    assert "No check with the ID" not in message
+
+
+async def test_an_unreadable_hub_answer_leaves_a_missing_check_file_unexplained(
+    mcp_root_server, hub_router
+):
+    """The Hub is asked which provider owns the check. A body it could not read
+    is no more of an answer than an outage, so it hedges the same way."""
+    hub_router.add("GET", github_check("azure"), status=404)
+    hub_router.add("GET", HUB_CHECK, text="<html>not json</html>")
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_hub_get_check_code",
+            {"provider_id": "azure", "check_id": CHECK_ID},
+        )
+
+    assert result.isError is True
+    message = result.content[0].text
+    assert "No check with the ID" not in message
+    assert "prowler_hub_get_check_details" in message

From 0715619435ef01c201f4f3458eb0d8e4448cbdc3 Mon Sep 17 00:00:00 2001
From: "Pablo Fernandez Guerra (PFE)"
 <148432447+pfe-nazaries@users.noreply.github.com>
Date: Mon, 31 Aug 2026 17:14:12 +0200
Subject: [PATCH 07/77] feat(ui): import Prowler OCSF findings from the Scans
 page (#12554)

Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
---
 .../msw/handlers/ingestions.fixtures.ts       |  74 ++++
 ui/__tests__/msw/handlers/ingestions.ts       | 100 +++++
 ui/actions/auth/auth.test.ts                  |  23 ++
 ui/actions/auth/auth.ts                       |   1 +
 ui/app/(prowler)/scans/page.tsx               |   4 +
 ui/app/(prowler)/scans/scans-page.harness.tsx | 323 ++++++++++++++++
 .../scans/scans-page.integration.test.tsx     | 326 +++++++++++++++++
 .../ingestions/[ingestionId]/route.test.ts    | 231 ++++++++++++
 ui/app/api/ingestions/[ingestionId]/route.ts  |  59 +++
 ui/app/api/ingestions/route.test.ts           | 345 ++++++++++++++++++
 ui/app/api/ingestions/route.ts                | 114 ++++++
 ui/auth.config.test.ts                        |   3 +
 ui/auth.config.ts                             |   3 +-
 .../import-findings-drag-drop.added.md        |   1 +
 ui/components/scans/import-findings-modal.tsx | 316 ++++++++++++++++
 ui/components/scans/scans-page-shell.test.tsx |  84 ++++-
 ui/components/scans/scans-page-shell.tsx      |   6 +
 ui/components/scans/use-ingestion-polling.ts  | 157 ++++++++
 .../file-upload/file-upload-dropzone.tsx      |  48 ++-
 ui/hooks/use-auth.ts                          |   1 +
 ui/lib/ingestions.ts                          |  55 +++
 ui/types/index.ts                             |   1 +
 ui/types/ingestions.ts                        |  21 ++
 ui/types/users.ts                             |  72 ++--
 24 files changed, 2314 insertions(+), 54 deletions(-)
 create mode 100644 ui/__tests__/msw/handlers/ingestions.fixtures.ts
 create mode 100644 ui/__tests__/msw/handlers/ingestions.ts
 create mode 100644 ui/app/(prowler)/scans/scans-page.harness.tsx
 create mode 100644 ui/app/(prowler)/scans/scans-page.integration.test.tsx
 create mode 100644 ui/app/api/ingestions/[ingestionId]/route.test.ts
 create mode 100644 ui/app/api/ingestions/[ingestionId]/route.ts
 create mode 100644 ui/app/api/ingestions/route.test.ts
 create mode 100644 ui/app/api/ingestions/route.ts
 create mode 100644 ui/changelog.d/import-findings-drag-drop.added.md
 create mode 100644 ui/components/scans/import-findings-modal.tsx
 create mode 100644 ui/components/scans/use-ingestion-polling.ts
 create mode 100644 ui/lib/ingestions.ts
 create mode 100644 ui/types/ingestions.ts

diff --git a/ui/__tests__/msw/handlers/ingestions.fixtures.ts b/ui/__tests__/msw/handlers/ingestions.fixtures.ts
new file mode 100644
index 0000000000..25d7b16719
--- /dev/null
+++ b/ui/__tests__/msw/handlers/ingestions.fixtures.ts
@@ -0,0 +1,74 @@
+export const INGESTION_ID = "ingestion-123";
+
+export interface IngestionFixture {
+  id: string;
+  totalRecords: number;
+  processedRecords: number;
+  invalidRecords: number;
+}
+
+export const INGESTION_REJECTION = {
+  INVALID_REPORT: "invalid-report",
+  SUBSCRIPTION_REQUIRED: "subscription-required",
+  PERMISSION_DENIED: "permission-denied",
+  FILE_TOO_LARGE: "file-too-large",
+  RATE_LIMITED: "rate-limited",
+  UNEXPECTED: "unexpected",
+} as const;
+
+export type IngestionRejection =
+  (typeof INGESTION_REJECTION)[keyof typeof INGESTION_REJECTION];
+
+export interface IngestionRejectionFixture {
+  status: number;
+  message: string;
+}
+
+export const ingestionRejectionFixture = (
+  rejection: IngestionRejection,
+): IngestionRejectionFixture => {
+  const fixtures = {
+    [INGESTION_REJECTION.INVALID_REPORT]: {
+      status: 400,
+      message: "The report is not a valid Prowler OCSF finding report.",
+    },
+    [INGESTION_REJECTION.SUBSCRIPTION_REQUIRED]: {
+      status: 402,
+      message: "A Prowler Cloud subscription is required to import findings.",
+    },
+    [INGESTION_REJECTION.PERMISSION_DENIED]: {
+      status: 403,
+      message: "You do not have permission to import findings.",
+    },
+    [INGESTION_REJECTION.FILE_TOO_LARGE]: {
+      status: 413,
+      message: "The selected file exceeds the allowed upload size.",
+    },
+    [INGESTION_REJECTION.RATE_LIMITED]: {
+      status: 429,
+      message: "Too many import requests. Please try again shortly.",
+    },
+    [INGESTION_REJECTION.UNEXPECTED]: {
+      status: 500,
+      message: "Unable to start the import. Please try again.",
+    },
+  } as const;
+
+  return fixtures[rejection];
+};
+
+export const ingestionFixture = (): IngestionFixture => ({
+  id: INGESTION_ID,
+  totalRecords: 3,
+  processedRecords: 3,
+  invalidRecords: 1,
+});
+
+// Stopped partway: every record read is accounted for, so the unprocessed ones
+// are reported as invalid.
+export const partiallyProcessedIngestionFixture = (): IngestionFixture => ({
+  id: INGESTION_ID,
+  totalRecords: 5,
+  processedRecords: 3,
+  invalidRecords: 2,
+});
diff --git a/ui/__tests__/msw/handlers/ingestions.ts b/ui/__tests__/msw/handlers/ingestions.ts
new file mode 100644
index 0000000000..45a61360e6
--- /dev/null
+++ b/ui/__tests__/msw/handlers/ingestions.ts
@@ -0,0 +1,100 @@
+import { delay, http, HttpResponse } from "msw";
+
+import type {
+  IngestionFixture,
+  IngestionRejectionFixture,
+} from "./ingestions.fixtures";
+
+const API = "/api/ingestions";
+
+// Counters stay zero until the job reaches a terminal status; `failed` still
+// reports progress, which is what tells a partial import from one that landed nothing.
+const ingestionResponse = (
+  fixture: IngestionFixture,
+  status: "pending" | "processing" | "completed" | "failed",
+) => {
+  const terminal = status === "completed" || status === "failed";
+  return {
+    data: {
+      id: fixture.id,
+      status,
+      totalRecords: fixture.totalRecords,
+      processedRecords: terminal ? fixture.processedRecords : 0,
+      invalidRecords: terminal ? fixture.invalidRecords : 0,
+    },
+  };
+};
+
+interface IngestionHandlerOptions {
+  uploadRejection?: IngestionRejectionFixture;
+  uploadDelayMs?: number;
+  statusErrorAt?: number;
+  statusDelayMs?: number;
+  statusResponseGate?: Promise<void>;
+  statusSequence?: Array<"processing" | "completed" | "failed">;
+  onStatusRequest?: (inFlight: number) => void;
+}
+
+export const handlersForIngestion = (
+  fixture: IngestionFixture,
+  {
+    uploadRejection,
+    uploadDelayMs,
+    statusErrorAt,
+    statusDelayMs,
+    statusResponseGate,
+    statusSequence,
+    onStatusRequest,
+  }: IngestionHandlerOptions = {},
+) => {
+  let statusRequestCount = 0;
+  let inFlightStatusRequests = 0;
+
+  return [
+    http.post(API, async ({ request }) => {
+      const formData = await request.formData();
+      if (uploadDelayMs) await delay(uploadDelayMs);
+      if (!(formData.get("file") instanceof File)) {
+        return HttpResponse.json(
+          { error: "A file is required." },
+          { status: 400 },
+        );
+      }
+
+      if (uploadRejection) {
+        return HttpResponse.json(
+          { error: uploadRejection.message },
+          { status: uploadRejection.status },
+        );
+      }
+
+      return HttpResponse.json(ingestionResponse(fixture, "pending"), {
+        status: 202,
+      });
+    }),
+    http.get(`${API}/:id`, async ({ params }) => {
+      if (params.id !== fixture.id) {
+        return HttpResponse.json({ error: "Not found." }, { status: 404 });
+      }
+
+      statusRequestCount += 1;
+      inFlightStatusRequests += 1;
+      onStatusRequest?.(inFlightStatusRequests);
+      if (statusDelayMs) await delay(statusDelayMs);
+      if (statusResponseGate) await statusResponseGate;
+      inFlightStatusRequests -= 1;
+      onStatusRequest?.(inFlightStatusRequests);
+      if (statusRequestCount === statusErrorAt) {
+        return HttpResponse.json(
+          { error: "Unable to retrieve the import status. Please try again." },
+          { status: 503 },
+        );
+      }
+
+      const status =
+        statusSequence?.[statusRequestCount - 1] ??
+        (statusRequestCount === 1 ? "processing" : "completed");
+      return HttpResponse.json(ingestionResponse(fixture, status));
+    }),
+  ];
+};
diff --git a/ui/actions/auth/auth.test.ts b/ui/actions/auth/auth.test.ts
index 016747b065..1f20392bb8 100644
--- a/ui/actions/auth/auth.test.ts
+++ b/ui/actions/auth/auth.test.ts
@@ -132,6 +132,29 @@ describe("auth actions", () => {
     expect(requestUrl.searchParams.get("utm_source")).toBe("blackhat");
   });
 
+  it("should carry manage_ingestions into the session permissions", async () => {
+    // Given
+    mockUserMe({ manage_ingestions: true });
+
+    // When
+    const result = await getUserByMe("access-token");
+
+    // Then
+    expect(result.permissions.manage_ingestions).toBe(true);
+  });
+
+  it("should default manage_ingestions to false when the role omits it", async () => {
+    // Given
+    mockUserMe({ manage_scans: true });
+
+    // When
+    const result = await getUserByMe("access-token");
+
+    // Then
+    expect(result.permissions.manage_ingestions).toBe(false);
+    expect(result.permissions.manage_scans).toBe(true);
+  });
+
   it("should carry manage_lighthouse_ai_configuration into the session permissions", async () => {
     // Given
     mockUserMe({ manage_lighthouse_ai_configuration: true });
diff --git a/ui/actions/auth/auth.ts b/ui/actions/auth/auth.ts
index 0df5fe81c9..6d275bbf92 100644
--- a/ui/actions/auth/auth.ts
+++ b/ui/actions/auth/auth.ts
@@ -180,6 +180,7 @@ export const getUserByMe = async (
       manage_account: userRole.attributes.manage_account || false,
       manage_providers: userRole.attributes.manage_providers || false,
       manage_scans: userRole.attributes.manage_scans || false,
+      manage_ingestions: userRole.attributes.manage_ingestions || false,
       manage_integrations: userRole.attributes.manage_integrations || false,
       manage_billing: userRole.attributes.manage_billing || false,
       manage_alerts: userRole.attributes.manage_alerts || false,
diff --git a/ui/app/(prowler)/scans/page.tsx b/ui/app/(prowler)/scans/page.tsx
index a8330f64aa..4b308921e4 100644
--- a/ui/app/(prowler)/scans/page.tsx
+++ b/ui/app/(prowler)/scans/page.tsx
@@ -193,6 +193,9 @@ export default async function Scans({
   const hasManageScansPermission = Boolean(
     session?.user?.permissions?.manage_scans,
   );
+  const hasManageIngestionsPermission = Boolean(
+    session?.user?.permissions?.manage_ingestions,
+  );
   const activeScanCount = await getActiveScanCount(resolvedSearchParams);
   // Mirrors ScansPageShell's launch gate: it only mounts the view-first-scan trigger
   // when Launch Scan is usable (manage_scans + a connected provider). Without the
@@ -218,6 +221,7 @@ export default async function Scans({
         providers={providers}
         providerGroups={providerGroups}
         hasManageScansPermission={hasManageScansPermission}
+        hasManageIngestionsPermission={hasManageIngestionsPermission}
         activeScanCount={activeScanCount}
       >
         <Suspense
diff --git a/ui/app/(prowler)/scans/scans-page.harness.tsx b/ui/app/(prowler)/scans/scans-page.harness.tsx
new file mode 100644
index 0000000000..0b2688e68b
--- /dev/null
+++ b/ui/app/(prowler)/scans/scans-page.harness.tsx
@@ -0,0 +1,323 @@
+// Aliased: `useRouter()` inside a class trips rules-of-hooks, and under the
+// suite's mock it is a plain getter for the shared router singleton.
+import { useRouter as readMockedRouter } from "next/navigation";
+import { vi } from "vitest";
+
+import { BrowserHarness } from "@/__tests__/browser-harness";
+import { handlersForIngestion } from "@/__tests__/msw/handlers/ingestions";
+import type {
+  IngestionFixture,
+  IngestionRejectionFixture,
+} from "@/__tests__/msw/handlers/ingestions.fixtures";
+import { worker } from "@/__tests__/msw/worker";
+import { render } from "@/__tests__/render-browser";
+import { ScansPageShell } from "@/components/scans/scans-page-shell";
+import { ScanJobsTable } from "@/components/scans/table/scan-jobs-table";
+import { SCAN_JOBS_TAB } from "@/types";
+
+interface MountOptions {
+  hasManageIngestionsPermission?: boolean;
+  hasManageScansPermission?: boolean;
+  holdStatusResponse?: boolean;
+  uploadRejection?: IngestionRejectionFixture;
+  uploadDelayMs?: number;
+  statusErrorAt?: number;
+  statusDelayMs?: number;
+  statusSequence?: Array<"processing" | "completed" | "failed">;
+}
+
+export class ScansPageHarness extends BrowserHarness<IngestionFixture> {
+  private maxInFlightStatusRequests = 0;
+  private mounted: ReturnType<typeof render> | null = null;
+  private releaseHeldStatusResponse: (() => void) | null = null;
+  private statusDelayMs = 0;
+
+  async mount({
+    hasManageIngestionsPermission = true,
+    hasManageScansPermission = false,
+    holdStatusResponse = false,
+    uploadRejection,
+    uploadDelayMs,
+    statusErrorAt,
+    statusDelayMs,
+    statusSequence,
+  }: MountOptions = {}): Promise<void> {
+    const statusResponseGate = holdStatusResponse
+      ? new Promise<void>((resolve) => {
+          this.releaseHeldStatusResponse = resolve;
+        })
+      : undefined;
+
+    worker.use(
+      ...handlersForIngestion(this.fixture, {
+        uploadRejection,
+        uploadDelayMs,
+        statusErrorAt,
+        statusDelayMs,
+        statusResponseGate,
+        statusSequence,
+        onStatusRequest: (inFlight) => {
+          this.maxInFlightStatusRequests = Math.max(
+            this.maxInFlightStatusRequests,
+            inFlight,
+          );
+        },
+      }),
+    );
+    this.trackRequests(worker);
+    this.statusDelayMs = statusDelayMs ?? 0;
+
+    this.mounted = render(
+      <ScansPageShell
+        providers={[]}
+        hasManageIngestionsPermission={hasManageIngestionsPermission}
+        hasManageScansPermission={hasManageScansPermission}
+      >
+        <ScanJobsTable data={[]} tab={SCAN_JOBS_TAB.ACTIVE} />
+      </ScansPageShell>,
+    );
+  }
+
+  async leaveScansPage(): Promise<void> {
+    const mounted = await this.mounted;
+    if (!mounted) throw new Error("leaveScansPage: the page is not mounted");
+    mounted.unmount();
+    this.mounted = null;
+  }
+
+  hasImportFindingsAction(): boolean {
+    return this.buttonByText(/Import Findings/) !== null;
+  }
+
+  async openImportFindings(): Promise<void> {
+    await this.clickButton(/Import Findings/);
+    await this.waitForText(/Import findings/i);
+  }
+
+  async selectFile(file: File): Promise<void> {
+    const input = await this.waitFor(() =>
+      this.container.querySelector<HTMLInputElement>('input[type="file"]'),
+    );
+    await this.user.upload(input, file);
+  }
+
+  async dropFile(file: File): Promise<void> {
+    await this.attemptDrop(file);
+    await this.waitFor(() =>
+      this.q('[data-testid="import-findings-dropzone"]')?.textContent?.includes(
+        file.name,
+      ),
+    );
+  }
+
+  /** Drop without waiting for the file to be taken: dropFile hangs on a refused drop. */
+  async attemptDrop(file: File): Promise<void> {
+    const dropzone = await this.waitFor(() =>
+      this.q('[data-testid="import-findings-dropzone"] [role="button"]'),
+    );
+    const dataTransfer = new DataTransfer();
+    dataTransfer.items.add(file);
+    dropzone.dispatchEvent(
+      new DragEvent("drop", { bubbles: true, dataTransfer }),
+    );
+  }
+
+  /** Both halves matter: drop and keyboard gate on the zone, the file picker on the input. */
+  isDropzoneFrozen(): boolean {
+    const zone = this.q(
+      '[data-testid="import-findings-dropzone"] [role="button"]',
+    );
+    const input = this.container.querySelector<HTMLInputElement>(
+      '[data-testid="import-findings-dropzone"] input[type="file"]',
+    );
+    return (
+      zone?.getAttribute("aria-disabled") === "true" && input?.disabled === true
+    );
+  }
+
+  async activateDropzoneWithKeyboard(): Promise<boolean> {
+    const dropzone = await this.waitFor(() =>
+      this.q('[data-testid="import-findings-dropzone"] [role="button"]'),
+    );
+    const input = await this.waitFor(() =>
+      this.container.querySelector<HTMLInputElement>('input[type="file"]'),
+    );
+    let opened = false;
+    input.addEventListener("click", () => {
+      opened = true;
+    });
+
+    dropzone.focus();
+    await this.user.keyboard("[Enter]");
+    return opened;
+  }
+
+  isImportEnabled(): boolean {
+    return !this.buttonByText(/Start import/i)?.disabled;
+  }
+
+  async waitForValidationMessage(message: RegExp): Promise<void> {
+    await this.waitForText(message);
+  }
+
+  async waitForUploadError(message: RegExp): Promise<void> {
+    await this.waitForText(message);
+  }
+
+  async waitForUploadInProgress(): Promise<void> {
+    await this.waitFor(
+      () => this.buttonByText(/Importing/i),
+      5000,
+      "the upload to report progress",
+    );
+  }
+
+  isUploadInProgress(): boolean {
+    const submit = this.buttonByText(/Importing/i);
+    return submit !== null && submit.disabled;
+  }
+
+  async closeImportFindings(): Promise<void> {
+    await this.user.keyboard("[Escape]");
+    await this.waitFor(() =>
+      this.q('[role="dialog"]') === null ? true : null,
+    );
+  }
+
+  async closeImmediatelyBeforeStatusCompletes(): Promise<void> {
+    const closeButton = await this.waitForButton(/^Close$/i);
+    const releaseStatusResponse = this.releaseHeldStatusResponse;
+    if (!releaseStatusResponse) {
+      throw new Error(
+        "closeImmediatelyBeforeStatusCompletes: no status response is held",
+      );
+    }
+
+    closeButton.click();
+    releaseStatusResponse();
+    this.releaseHeldStatusResponse = null;
+    await this.waitFor(() =>
+      this.q('[role="dialog"]') === null ? true : null,
+    );
+  }
+
+  selectedFileName(): string | null {
+    const dropzone = this.q('[data-testid="import-findings-dropzone"]');
+    return dropzone?.textContent?.match(/[^\s]+\.json/i)?.[0] ?? null;
+  }
+
+  async submitImport(): Promise<void> {
+    await this.clickButton(/Start import/i);
+  }
+
+  async retryUpload(): Promise<void> {
+    await this.clickButton(/Retry import/i);
+    await this.waitFor(() => (this.ingestionPostCount === 2 ? true : null));
+  }
+
+  /** Anchored on "Import completed": the failed summary reports the same counters. */
+  async waitForCompletedSummary(): Promise<void> {
+    const { processedRecords, totalRecords, invalidRecords } = this.fixture;
+    await this.waitForText(
+      new RegExp(
+        `Import completed: ${totalRecords} total records, ${processedRecords} processed, ${invalidRecords} invalid`,
+        "i",
+      ),
+      15000,
+    );
+  }
+
+  hasCompletionNotification(): boolean {
+    return this.containsText(/Findings import completed/i);
+  }
+
+  hasCompletedSummary(): boolean {
+    return this.containsText(/Import completed:/i);
+  }
+
+  hasStopTrackingAction(): boolean {
+    return this.buttonByText(/Stop tracking/i) !== null;
+  }
+
+  async waitForCompletionNotification(): Promise<void> {
+    await this.waitFor(
+      () => this.hasCompletionNotification(),
+      15000,
+      "the import completion notification",
+    );
+  }
+
+  async waitForTrackingStatus(): Promise<void> {
+    await this.waitForText(/Import is processing/i);
+  }
+
+  async waitForStatusError(): Promise<void> {
+    await this.waitForText(/Unable to retrieve the import status/i, 15000);
+  }
+
+  async waitForFailedImport(): Promise<void> {
+    await this.waitForText(/Import failed/i, 15000);
+  }
+
+  async waitForFailedImportSummary(): Promise<void> {
+    const { processedRecords, totalRecords, invalidRecords } = this.fixture;
+    await this.waitForText(
+      new RegExp(
+        `${processedRecords} of ${totalRecords} records processed, ${invalidRecords} invalid`,
+        "i",
+      ),
+      15000,
+    );
+  }
+
+  async retryStatus(): Promise<void> {
+    await this.clickButton(/Retry status/i);
+    await this.waitFor(() =>
+      this.ingestionStatusPollCount >= 2 ? true : null,
+    );
+  }
+
+  async waitForFirstStatusPoll(): Promise<void> {
+    await this.waitFor(
+      () => this.ingestionStatusPollCount >= 1,
+      5000,
+      "the first status poll",
+    );
+  }
+
+  /** Outlast an uncancelled poll: its response lands, then the modal's 5s interval passes and the next would fire. */
+  async waitPastTheNextPoll(): Promise<void> {
+    await this.waitForTransition(this.statusDelayMs + 5700);
+  }
+
+  get ingestionPostCount(): number {
+    return this.countRequests("POST", "/api/ingestions");
+  }
+
+  get ingestionStatusPollCount(): number {
+    return this.countRequests("GET", "/api/ingestions/");
+  }
+
+  get maximumInFlightStatusRequests(): number {
+    return this.maxInFlightStatusRequests;
+  }
+
+  /** A page refresh is the only thing that brings an imported scan into the table. */
+  get pageRefreshCount(): number {
+    return vi.mocked(readMockedRouter().refresh).mock.calls.length;
+  }
+
+  async uploadedFileName(): Promise<string | null> {
+    const entry = [...this.requestLog]
+      .reverse()
+      .find(
+        (request) =>
+          request.method === "POST" &&
+          new URL(request.url).pathname === "/api/ingestions",
+      );
+    if (!entry) return null;
+
+    const file = (await entry.request.formData()).get("file");
+    return file instanceof File ? file.name : null;
+  }
+}
diff --git a/ui/app/(prowler)/scans/scans-page.integration.test.tsx b/ui/app/(prowler)/scans/scans-page.integration.test.tsx
new file mode 100644
index 0000000000..d150a2d0f8
--- /dev/null
+++ b/ui/app/(prowler)/scans/scans-page.integration.test.tsx
@@ -0,0 +1,326 @@
+import { describe, expect } from "vitest";
+
+import { it } from "@/__tests__/fixtures";
+import {
+  INGESTION_REJECTION,
+  ingestionFixture,
+  ingestionRejectionFixture,
+  partiallyProcessedIngestionFixture,
+} from "@/__tests__/msw/handlers/ingestions.fixtures";
+
+import { ScansPageHarness } from "./scans-page.harness";
+
+describe("Scans page import findings", () => {
+  it("imports one valid finding file without scan permission or providers", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount();
+
+    expect(harness.hasImportFindingsAction()).toBe(true);
+    await harness.openImportFindings();
+    await harness.selectFile(
+      new File(['[{"type":"finding"}]'], "findings.ocsf.json", {
+        type: "application/json",
+      }),
+    );
+    await harness.submitImport();
+
+    await harness.waitForCompletedSummary();
+    // The summary is on screen, so the toast would have been raised in the same
+    // render: its absence is the open dialog suppressing it.
+    expect(harness.hasCompletionNotification()).toBe(false);
+    expect(harness.pageRefreshCount).toBe(1);
+    expect(harness.ingestionPostCount).toBe(1);
+    expect(await harness.uploadedFileName()).toBe("findings.ocsf.json");
+    expect(harness.ingestionStatusPollCount).toBeGreaterThanOrEqual(2);
+  });
+
+  it("hides Import Findings in Local Server", async ({ seedRuntimeConfig }) => {
+    seedRuntimeConfig({ cloudEnabled: false });
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount();
+
+    expect(harness.hasImportFindingsAction()).toBe(false);
+  });
+
+  it("hides Import Findings without Manage Ingestions", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount({ hasManageIngestionsPermission: false });
+
+    expect(harness.hasImportFindingsAction()).toBe(false);
+  });
+
+  it("supports keyboard activation and drag-and-drop selection", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount();
+    await harness.openImportFindings();
+
+    await expect(harness.activateDropzoneWithKeyboard()).resolves.toBe(true);
+    await harness.dropFile(
+      new File(["[]"], "dropped.OCSF.JSON", { type: "application/json" }),
+    );
+
+    expect(harness.selectedFileName()).toBe("dropped.OCSF.JSON");
+    expect(harness.isImportEnabled()).toBe(true);
+  });
+
+  it("replaces a selected file and rejects unsupported and empty selections", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount();
+    await harness.openImportFindings();
+    await harness.selectFile(new File(["[]"], "first.ocsf.json"));
+    await harness.selectFile(new File(["[]"], "replacement.ocsf.json"));
+
+    expect(harness.selectedFileName()).toBe("replacement.ocsf.json");
+    await harness.selectFile(new File(["[]"], "unsupported.json"));
+    await harness.waitForValidationMessage(/\.ocsf\.json/i);
+    expect(harness.ingestionPostCount).toBe(0);
+
+    await harness.selectFile(new File([], "empty.ocsf.json"));
+    await harness.waitForValidationMessage(/empty/i);
+    expect(harness.ingestionPostCount).toBe(0);
+  });
+
+  it("clears an unsubmitted selection after closing the dialog", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount();
+    await harness.openImportFindings();
+    await harness.selectFile(new File(["[]"], "findings.ocsf.json"));
+    await harness.closeImportFindings();
+    await harness.openImportFindings();
+
+    expect(harness.selectedFileName()).toBeNull();
+    expect(harness.isImportEnabled()).toBe(false);
+  });
+
+  for (const rejection of Object.values(INGESTION_REJECTION)) {
+    it(`keeps the file recoverable after a ${rejection} upload rejection`, async () => {
+      const rejectionFixture = ingestionRejectionFixture(rejection);
+      const harness = new ScansPageHarness(ingestionFixture());
+      await harness.mount({ uploadRejection: rejectionFixture });
+      await harness.openImportFindings();
+      await harness.selectFile(new File(["[]"], "findings.ocsf.json"));
+      await harness.submitImport();
+
+      await harness.waitForUploadError(
+        new RegExp(rejectionFixture.message, "i"),
+      );
+      expect(harness.selectedFileName()).toBe("findings.ocsf.json");
+      expect(harness.ingestionPostCount).toBe(1);
+
+      await harness.retryUpload();
+      expect(harness.ingestionPostCount).toBe(2);
+    });
+  }
+
+  it("continues tracking an accepted import while the dialog is closed", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount({ statusSequence: ["processing", "completed"] });
+    await harness.openImportFindings();
+    await harness.selectFile(new File(["[]"], "findings.ocsf.json"));
+    await harness.submitImport();
+    await harness.waitForTrackingStatus();
+    await harness.closeImportFindings();
+
+    await harness.openImportFindings();
+    await harness.waitForCompletedSummary();
+    expect(harness.ingestionPostCount).toBe(1);
+  });
+
+  it("keeps an in-flight submission after closing and reopening the dialog", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount({
+      uploadDelayMs: 3000,
+      statusSequence: ["processing", "completed"],
+    });
+    await harness.openImportFindings();
+    await harness.selectFile(new File(["[]"], "findings.ocsf.json"));
+    await harness.submitImport();
+    await harness.waitForUploadInProgress();
+    await harness.closeImportFindings();
+    await harness.openImportFindings();
+
+    expect(harness.isUploadInProgress()).toBe(true);
+    expect(harness.selectedFileName()).toBe("findings.ocsf.json");
+
+    await harness.waitForTrackingStatus();
+    expect(harness.ingestionPostCount).toBe(1);
+  });
+
+  it("refuses to swap the file while an import is in flight", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount({
+      uploadDelayMs: 3000,
+      statusSequence: ["processing", "completed"],
+    });
+    await harness.openImportFindings();
+    await harness.selectFile(new File(["[]"], "findings.ocsf.json"));
+    await harness.submitImport();
+    await harness.waitForUploadInProgress();
+
+    expect(harness.isDropzoneFrozen()).toBe(true);
+    await harness.attemptDrop(new File(["[]"], "swapped.ocsf.json"));
+    await expect(harness.activateDropzoneWithKeyboard()).resolves.toBe(false);
+
+    expect(harness.selectedFileName()).toBe("findings.ocsf.json");
+    // A swap would reset to ready, re-enabling submission for a second POST.
+    expect(harness.isUploadInProgress()).toBe(true);
+
+    await harness.waitForTrackingStatus();
+    expect(harness.ingestionPostCount).toBe(1);
+  });
+
+  it("notifies when an import completes while the dialog is closed", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount({ statusSequence: ["processing", "completed"] });
+    await harness.openImportFindings();
+    await harness.selectFile(new File(["[]"], "findings.ocsf.json"));
+    await harness.submitImport();
+    await harness.waitForTrackingStatus();
+    await harness.closeImportFindings();
+
+    await harness.waitForCompletionNotification();
+    expect(harness.ingestionPostCount).toBe(1);
+  });
+
+  it("offers a fresh import when reopening after a background completion", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount({ statusSequence: ["processing", "completed"] });
+    await harness.openImportFindings();
+    await harness.selectFile(new File(["[]"], "findings.ocsf.json"));
+    await harness.submitImport();
+    await harness.waitForTrackingStatus();
+    await harness.closeImportFindings();
+    await harness.waitForCompletionNotification();
+
+    await harness.openImportFindings();
+    // Without the reopen reset the summary renders in place of the dropzone and
+    // the submit, leaving no way to import a second report.
+    expect(harness.hasCompletedSummary()).toBe(false);
+    await harness.selectFile(new File(["[]"], "another.ocsf.json"));
+    expect(harness.selectedFileName()).toBe("another.ocsf.json");
+    expect(harness.isImportEnabled()).toBe(true);
+    expect(harness.ingestionPostCount).toBe(1);
+  });
+
+  it("notifies when the dialog closes immediately before the import completes", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount({
+      holdStatusResponse: true,
+      statusSequence: ["completed"],
+    });
+    await harness.openImportFindings();
+    await harness.selectFile(new File(["[]"], "findings.ocsf.json"));
+    await harness.submitImport();
+    await harness.waitForFirstStatusPoll();
+
+    await harness.closeImmediatelyBeforeStatusCompletes();
+
+    await harness.waitForCompletionNotification();
+    expect(harness.pageRefreshCount).toBe(1);
+    expect(harness.ingestionPostCount).toBe(1);
+  });
+
+  it("retries a failed terminal import with the selected file", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount({ statusSequence: ["failed"] });
+    await harness.openImportFindings();
+    await harness.selectFile(new File(["[]"], "findings.ocsf.json"));
+    await harness.submitImport();
+    await harness.waitForFailedImport();
+    expect(harness.pageRefreshCount).toBe(0);
+
+    await harness.retryUpload();
+    expect(harness.ingestionPostCount).toBe(2);
+  });
+
+  it("reports how many records a failed import processed", async () => {
+    const harness = new ScansPageHarness(partiallyProcessedIngestionFixture());
+    await harness.mount({ statusSequence: ["failed"] });
+    await harness.openImportFindings();
+    await harness.selectFile(new File(["[]"], "findings.ocsf.json"));
+    await harness.submitImport();
+
+    await harness.waitForFailedImport();
+    await harness.waitForFailedImportSummary();
+    expect(harness.ingestionPostCount).toBe(1);
+  });
+
+  it("clears a terminal result after closing the dialog", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount({ statusSequence: ["failed"] });
+    await harness.openImportFindings();
+    await harness.selectFile(new File(["[]"], "findings.ocsf.json"));
+    await harness.submitImport();
+    await harness.waitForFailedImport();
+    await harness.closeImportFindings();
+    await harness.openImportFindings();
+
+    expect(harness.selectedFileName()).toBeNull();
+    expect(harness.isImportEnabled()).toBe(false);
+  });
+
+  it("retries a transient status failure without re-uploading", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount({
+      statusErrorAt: 1,
+      statusSequence: ["processing", "completed"],
+    });
+    await harness.openImportFindings();
+    await harness.selectFile(new File(["[]"], "findings.ocsf.json"));
+    await harness.submitImport();
+    await harness.waitForStatusError();
+
+    await harness.retryStatus();
+    expect(harness.ingestionPostCount).toBe(1);
+  });
+
+  it("holds a stuck import instead of freeing a second upload", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount({ statusErrorAt: 1 });
+    await harness.openImportFindings();
+    await harness.selectFile(new File(["[]"], "findings.ocsf.json"));
+    await harness.submitImport();
+    await harness.waitForStatusError();
+
+    // The ingestion API has no cancellation and every POST opens a new job, so
+    // letting go of an accepted one would only duplicate it.
+    expect(harness.hasStopTrackingAction()).toBe(false);
+    expect(harness.isDropzoneFrozen()).toBe(true);
+    expect(harness.isImportEnabled()).toBe(false);
+
+    await harness.retryStatus();
+    expect(harness.ingestionPostCount).toBe(1);
+  });
+
+  it("never overlaps status polls for an accepted import", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    // The delay has to outlast POLL_INTERVAL_MS: an interval-driven poll fires
+    // its second request while this first one is still in flight.
+    await harness.mount({
+      statusDelayMs: 7500,
+      statusSequence: ["completed"],
+    });
+    await harness.openImportFindings();
+    await harness.selectFile(new File(["[]"], "findings.ocsf.json"));
+    await harness.submitImport();
+
+    await harness.waitForCompletedSummary();
+    expect(harness.maximumInFlightStatusRequests).toBe(1);
+  });
+
+  it("stops polling a tracked import after leaving the page", async () => {
+    const harness = new ScansPageHarness(ingestionFixture());
+    await harness.mount({ statusDelayMs: 500 });
+    await harness.openImportFindings();
+    await harness.selectFile(new File(["[]"], "findings.ocsf.json"));
+    await harness.submitImport();
+    await harness.waitForFirstStatusPoll();
+    await harness.leaveScansPage();
+    const pollsWhenLeaving = harness.ingestionStatusPollCount;
+
+    // An unaborted poll answers into the dead page and chains the next one,
+    // refreshing and toasting over whatever route the user moved to.
+    await harness.waitPastTheNextPoll();
+    expect(harness.ingestionStatusPollCount).toBe(pollsWhenLeaving);
+  });
+});
diff --git a/ui/app/api/ingestions/[ingestionId]/route.test.ts b/ui/app/api/ingestions/[ingestionId]/route.test.ts
new file mode 100644
index 0000000000..f0723192d1
--- /dev/null
+++ b/ui/app/api/ingestions/[ingestionId]/route.test.ts
@@ -0,0 +1,231 @@
+import { http, HttpResponse } from "msw";
+import { setupServer } from "msw/node";
+import {
+  afterAll,
+  afterEach,
+  beforeAll,
+  describe,
+  expect,
+  it,
+  vi,
+} from "vitest";
+
+import { GET } from "./route";
+
+const { getAuthHeadersMock, isCloudMock } = vi.hoisted(() => ({
+  getAuthHeadersMock: vi.fn(),
+  isCloudMock: vi.fn(),
+}));
+
+vi.mock("@/lib", () => ({
+  apiBaseUrl: "https://api.example.com/api/v1",
+  getAuthHeaders: getAuthHeadersMock,
+}));
+
+vi.mock("@/lib/shared/env", () => ({
+  isCloud: isCloudMock,
+}));
+
+describe("GET /api/ingestions/[ingestionId]", () => {
+  const server = setupServer();
+
+  beforeAll(() => server.listen({ onUnhandledRequest: "error" }));
+
+  afterEach(() => {
+    server.resetHandlers();
+    vi.unstubAllGlobals();
+    vi.clearAllMocks();
+  });
+
+  afterAll(() => server.close());
+
+  it("returns not found in OSS and Local Server before reading the ingestion identifier", async () => {
+    isCloudMock.mockReturnValue(false);
+    const fetchMock = vi.fn();
+    vi.stubGlobal("fetch", fetchMock);
+
+    const response = await GET(new Request("http://localhost/api/ingestions"), {
+      params: Promise.resolve({ ingestionId: "ingestion-123" }),
+    });
+
+    expect(response.status).toBe(404);
+    expect(getAuthHeadersMock).not.toHaveBeenCalled();
+    expect(fetchMock).not.toHaveBeenCalled();
+  });
+
+  it("forwards a Cloud status request and translates its typed response", async () => {
+    isCloudMock.mockReturnValue(true);
+    getAuthHeadersMock.mockResolvedValue({ Authorization: "Bearer token" });
+    server.use(
+      http.get("https://api.example.com/api/v1/ingestions/ingestion-123", () =>
+        HttpResponse.json({
+          data: {
+            id: "ingestion-123",
+            type: "ingestions",
+            attributes: {
+              status: "processing",
+              summary: { total: 5, processed: 3, invalid: 1 },
+              requested_at: "2026-08-26T11:23:20.265770Z",
+              started_at: "2026-08-26T11:23:20.372762Z",
+              completed_at: null,
+            },
+          },
+        }),
+      ),
+    );
+
+    const response = await GET(new Request("http://localhost/api/ingestions"), {
+      params: Promise.resolve({ ingestionId: "ingestion-123" }),
+    });
+
+    await expect(response.json()).resolves.toEqual({
+      data: {
+        id: "ingestion-123",
+        status: "processing",
+        totalRecords: 5,
+        processedRecords: 3,
+        invalidRecords: 1,
+      },
+    });
+  });
+
+  it("forwards an identifier that needs escaping as one encoded path segment", async () => {
+    isCloudMock.mockReturnValue(true);
+    getAuthHeadersMock.mockResolvedValue({ Authorization: "Bearer token" });
+    let requestedUrl = "";
+    server.use(
+      http.get("https://api.example.com/api/v1/ingestions/*", ({ request }) => {
+        requestedUrl = request.url;
+        return HttpResponse.json({
+          data: { id: "2026/08 report", attributes: { status: "pending" } },
+        });
+      }),
+    );
+
+    const response = await GET(new Request("http://localhost/api/ingestions"), {
+      params: Promise.resolve({ ingestionId: "2026/08 report" }),
+    });
+
+    expect(requestedUrl).toBe(
+      "https://api.example.com/api/v1/ingestions/2026%2F08%20report",
+    );
+    expect(response.status).toBe(200);
+  });
+
+  it("sanitizes unreadable upstream status failures", async () => {
+    isCloudMock.mockReturnValue(true);
+    getAuthHeadersMock.mockResolvedValue({ Authorization: "Bearer token" });
+    server.use(
+      http.get(
+        "https://api.example.com/api/v1/ingestions/ingestion-123",
+        () =>
+          new HttpResponse("<html><body>upstream details</body></html>", {
+            status: 503,
+            headers: { "content-type": "text/html" },
+          }),
+      ),
+    );
+
+    const response = await GET(new Request("http://localhost/api/ingestions"), {
+      params: Promise.resolve({ ingestionId: "ingestion-123" }),
+    });
+
+    expect(response.status).toBe(503);
+    await expect(response.json()).resolves.toEqual({
+      error: "Unable to retrieve the import status. Please try again.",
+    });
+  });
+
+  it("returns a safe bad gateway response when the ingestion API connection fails", async () => {
+    // Given
+    isCloudMock.mockReturnValue(true);
+    getAuthHeadersMock.mockResolvedValue({ Authorization: "Bearer token" });
+    vi.stubGlobal(
+      "fetch",
+      vi.fn().mockRejectedValue(new Error("socket hang up from api.internal")),
+    );
+
+    // When
+    const response = await GET(new Request("http://localhost/api/ingestions"), {
+      params: Promise.resolve({ ingestionId: "ingestion-123" }),
+    });
+
+    // Then
+    expect(response.status).toBe(502);
+    await expect(response.json()).resolves.toEqual({
+      error: "Unable to retrieve the import status. Please try again.",
+    });
+  });
+
+  it("does not expose structured upstream status failures", async () => {
+    isCloudMock.mockReturnValue(true);
+    getAuthHeadersMock.mockResolvedValue({ Authorization: "Bearer token" });
+    server.use(
+      http.get("https://api.example.com/api/v1/ingestions/ingestion-123", () =>
+        HttpResponse.json(
+          { errors: [{ code: "internal_error", detail: "upstream details" }] },
+          { status: 503 },
+        ),
+      ),
+    );
+
+    const response = await GET(new Request("http://localhost/api/ingestions"), {
+      params: Promise.resolve({ ingestionId: "ingestion-123" }),
+    });
+
+    expect(response.status).toBe(503);
+    await expect(response.json()).resolves.toEqual({
+      error: "Unable to retrieve the import status. Please try again.",
+    });
+  });
+
+  it("tracks a status response that has not reported its summary yet", async () => {
+    isCloudMock.mockReturnValue(true);
+    getAuthHeadersMock.mockResolvedValue({ Authorization: "Bearer token" });
+    server.use(
+      http.get("https://api.example.com/api/v1/ingestions/ingestion-123", () =>
+        HttpResponse.json({
+          data: {
+            type: "ingestions",
+            id: "ingestion-123",
+            attributes: { status: "pending" },
+          },
+        }),
+      ),
+    );
+
+    const response = await GET(new Request("http://localhost/api/ingestions"), {
+      params: Promise.resolve({ ingestionId: "ingestion-123" }),
+    });
+
+    expect(response.status).toBe(200);
+    await expect(response.json()).resolves.toEqual({
+      data: {
+        id: "ingestion-123",
+        status: "pending",
+        totalRecords: 0,
+        processedRecords: 0,
+        invalidRecords: 0,
+      },
+    });
+  });
+
+  it("rejects malformed accepted status responses", async () => {
+    isCloudMock.mockReturnValue(true);
+    getAuthHeadersMock.mockResolvedValue({ Authorization: "Bearer token" });
+    server.use(
+      http.get("https://api.example.com/api/v1/ingestions/ingestion-123", () =>
+        HttpResponse.json({ data: { id: "ingestion-123", attributes: {} } }),
+      ),
+    );
+
+    const response = await GET(new Request("http://localhost/api/ingestions"), {
+      params: Promise.resolve({ ingestionId: "ingestion-123" }),
+    });
+
+    expect(response.status).toBe(502);
+    await expect(response.json()).resolves.toEqual({
+      error: "Unable to retrieve the import status. Please try again.",
+    });
+  });
+});
diff --git a/ui/app/api/ingestions/[ingestionId]/route.ts b/ui/app/api/ingestions/[ingestionId]/route.ts
new file mode 100644
index 0000000000..aa4555c657
--- /dev/null
+++ b/ui/app/api/ingestions/[ingestionId]/route.ts
@@ -0,0 +1,59 @@
+import { NextResponse } from "next/server";
+
+import { apiBaseUrl, getAuthHeaders } from "@/lib";
+import { parseIngestion } from "@/lib/ingestions";
+import { isCloud } from "@/lib/shared/env";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+interface IngestionRouteContext {
+  params: Promise<{
+    ingestionId: string;
+  }>;
+}
+
+const INVALID_INGESTION_RESPONSE =
+  "Unable to retrieve the import status. Please try again.";
+
+export async function GET(
+  _request: Request,
+  { params }: IngestionRouteContext,
+) {
+  if (!isCloud()) return new Response(null, { status: 404 });
+
+  const { ingestionId } = await params;
+  if (!ingestionId) return new Response(null, { status: 404 });
+
+  const headers = await getAuthHeaders({ contentType: false });
+  let upstreamResponse: Response;
+  try {
+    upstreamResponse = await fetch(
+      `${apiBaseUrl}/ingestions/${encodeURIComponent(ingestionId)}`,
+      { headers, cache: "no-store" },
+    );
+  } catch {
+    return NextResponse.json(
+      { error: INVALID_INGESTION_RESPONSE },
+      { status: 502 },
+    );
+  }
+  const payload = await upstreamResponse.json().catch(() => undefined);
+
+  if (!upstreamResponse.ok) {
+    return NextResponse.json(
+      { error: INVALID_INGESTION_RESPONSE },
+      { status: upstreamResponse.status },
+    );
+  }
+
+  const ingestion = parseIngestion(payload);
+  if (!ingestion) {
+    return NextResponse.json(
+      { error: INVALID_INGESTION_RESPONSE },
+      { status: 502 },
+    );
+  }
+
+  return NextResponse.json({ data: ingestion });
+}
diff --git a/ui/app/api/ingestions/route.test.ts b/ui/app/api/ingestions/route.test.ts
new file mode 100644
index 0000000000..3142c1375b
--- /dev/null
+++ b/ui/app/api/ingestions/route.test.ts
@@ -0,0 +1,345 @@
+import { http, HttpResponse } from "msw";
+import { setupServer } from "msw/node";
+import {
+  afterAll,
+  afterEach,
+  beforeAll,
+  describe,
+  expect,
+  it,
+  vi,
+} from "vitest";
+
+import { POST } from "./route";
+
+// Browser MSW intercepts the same-origin request before Next can run this
+// Route Handler, so these tests call POST directly.
+const { getAuthHeadersMock, isCloudMock } = vi.hoisted(() => ({
+  getAuthHeadersMock: vi.fn(),
+  isCloudMock: vi.fn(),
+}));
+
+vi.mock("@/lib", () => ({
+  apiBaseUrl: "https://api.example.com/api/v1",
+  getAuthHeaders: getAuthHeadersMock,
+}));
+
+vi.mock("@/lib/shared/env", () => ({
+  isCloud: isCloudMock,
+}));
+
+// A browser upload always reaches the route with a length on the wire, and the
+// route refuses anything it cannot measure, so a forwarded Request needs one.
+const uploadRequest = (body = "report") =>
+  new Request("http://localhost/api/ingestions", {
+    method: "POST",
+    headers: {
+      "content-length": String(new TextEncoder().encode(body).length),
+    },
+    body,
+  });
+
+describe("POST /api/ingestions", () => {
+  const server = setupServer();
+
+  beforeAll(() => server.listen({ onUnhandledRequest: "error" }));
+
+  afterEach(() => {
+    server.resetHandlers();
+    vi.unstubAllGlobals();
+    vi.clearAllMocks();
+  });
+
+  afterAll(() => server.close());
+
+  it("returns not found in OSS and Local Server without authenticating or forwarding the upload", async () => {
+    isCloudMock.mockReturnValue(false);
+    const fetchMock = vi.fn();
+    vi.stubGlobal("fetch", fetchMock);
+    const request = new Request("http://localhost/api/ingestions", {
+      method: "POST",
+      headers: { "content-type": "multipart/form-data; boundary=report" },
+      body: "--report--",
+    });
+
+    const response = await POST(request);
+
+    expect(response.status).toBe(404);
+    expect(request.body?.locked).toBe(false);
+    expect(getAuthHeadersMock).not.toHaveBeenCalled();
+    expect(fetchMock).not.toHaveBeenCalled();
+  });
+
+  it("forwards the original multipart stream and boundary in Cloud", async () => {
+    isCloudMock.mockReturnValue(true);
+    getAuthHeadersMock.mockResolvedValue({ Authorization: "Bearer token" });
+    let contentType: string | null = null;
+    let contentLength: string | null = null;
+    let uploadedBody = "";
+    server.use(
+      http.post(
+        "https://api.example.com/api/v1/ingestions",
+        async ({ request }) => {
+          contentType = request.headers.get("content-type");
+          contentLength = request.headers.get("content-length");
+          uploadedBody = await request.text();
+          return HttpResponse.json({
+            data: {
+              id: "ingestion-123",
+              type: "ingestions",
+              attributes: {
+                status: "pending",
+                summary: { total: 0, processed: 0, invalid: 0 },
+                requested_at: "2026-08-26T11:23:20.265770Z",
+                started_at: null,
+                completed_at: null,
+              },
+            },
+          });
+        },
+      ),
+    );
+    // Built by hand: a Request created from FormData carries no content-length
+    // header, which is what this test pins.
+    const boundary = "----ingestionBoundary";
+    const multipartBody = [
+      `--${boundary}`,
+      'Content-Disposition: form-data; name="file"; filename="findings.ocsf.json"',
+      "Content-Type: application/json",
+      "",
+      "finding report",
+      `--${boundary}--`,
+      "",
+    ].join("\r\n");
+    const request = new Request("http://localhost/api/ingestions", {
+      method: "POST",
+      headers: {
+        "content-type": `multipart/form-data; boundary=${boundary}`,
+        "content-length": String(
+          new TextEncoder().encode(multipartBody).length,
+        ),
+      },
+      body: multipartBody,
+    });
+
+    const response = await POST(request);
+
+    expect(contentType).toBe(`multipart/form-data; boundary=${boundary}`);
+    expect(contentLength).toBe(
+      String(new TextEncoder().encode(multipartBody).length),
+    );
+    expect(uploadedBody).toBe(multipartBody);
+    await expect(response.json()).resolves.toEqual({
+      data: {
+        id: "ingestion-123",
+        status: "pending",
+        totalRecords: 0,
+        processedRecords: 0,
+        invalidRecords: 0,
+      },
+    });
+  });
+
+  it("refuses an upload it cannot measure instead of forwarding it chunked", async () => {
+    isCloudMock.mockReturnValue(true);
+    getAuthHeadersMock.mockResolvedValue({ Authorization: "Bearer token" });
+    const fetchMock = vi.fn();
+    vi.stubGlobal("fetch", fetchMock);
+    // A Request built from FormData carries no content-length, and the ingestion
+    // API parses no file out of the chunked body that would be forwarded.
+    const request = new Request("http://localhost/api/ingestions", {
+      method: "POST",
+      headers: { "content-type": "multipart/form-data; boundary=report" },
+      body: "--report--",
+    });
+
+    const response = await POST(request);
+
+    expect(response.status).toBe(411);
+    expect(fetchMock).not.toHaveBeenCalled();
+    expect(request.body?.locked).toBe(false);
+    await expect(response.json()).resolves.toEqual({
+      error: "Unable to start the import. Please try again.",
+    });
+  });
+
+  it("sanitizes unexpected upstream error pages", async () => {
+    isCloudMock.mockReturnValue(true);
+    getAuthHeadersMock.mockResolvedValue({ Authorization: "Bearer token" });
+    server.use(
+      http.post(
+        "https://api.example.com/api/v1/ingestions",
+        () =>
+          new HttpResponse("<html><body>upstream details</body></html>", {
+            status: 502,
+            headers: { "content-type": "text/html" },
+          }),
+      ),
+    );
+
+    const response = await POST(uploadRequest());
+
+    expect(response.status).toBe(502);
+    await expect(response.json()).resolves.toEqual({
+      error: "Unable to start the import. Please try again.",
+    });
+  });
+
+  it("returns a safe bad gateway response when the ingestion API connection fails", async () => {
+    // Given
+    isCloudMock.mockReturnValue(true);
+    getAuthHeadersMock.mockResolvedValue({ Authorization: "Bearer token" });
+    vi.stubGlobal(
+      "fetch",
+      vi.fn().mockRejectedValue(new Error("connect ECONNREFUSED api.internal")),
+    );
+
+    // When
+    const response = await POST(uploadRequest());
+
+    // Then
+    expect(response.status).toBe(502);
+    await expect(response.json()).resolves.toEqual({
+      error: "Unable to start the import. Please try again.",
+    });
+  });
+
+  it.each([
+    [400, "invalid", "The report is not a valid Prowler OCSF finding report."],
+    [
+      402,
+      "subscription_required",
+      "A Prowler Cloud subscription is required to import findings.",
+    ],
+    [
+      403,
+      "permission_denied",
+      "You do not have permission to import findings.",
+    ],
+    [
+      413,
+      "file_too_large",
+      "The selected file exceeds the allowed upload size.",
+    ],
+    [
+      429,
+      "rate_limited",
+      "Too many import requests. Please try again shortly.",
+    ],
+  ])(
+    "maps known upstream rejection %i/%s to safe import guidance",
+    async (status, code, message) => {
+      isCloudMock.mockReturnValue(true);
+      getAuthHeadersMock.mockResolvedValue({ Authorization: "Bearer token" });
+      server.use(
+        http.post("https://api.example.com/api/v1/ingestions", () =>
+          HttpResponse.json(
+            { errors: [{ code, detail: "internal implementation detail" }] },
+            { status },
+          ),
+        ),
+      );
+
+      const response = await POST(uploadRequest());
+
+      expect(response.status).toBe(status);
+      await expect(response.json()).resolves.toEqual({ error: message });
+    },
+  );
+
+  const STATUS_TIER_REJECTIONS = [
+    [400, "The report is not a valid Prowler OCSF finding report."],
+    [402, "A Prowler Cloud subscription is required to import findings."],
+    [403, "You do not have permission to import findings."],
+    [413, "The selected file exceeds the allowed upload size."],
+    [429, "Too many import requests. Please try again shortly."],
+  ] as const;
+
+  it.each(STATUS_TIER_REJECTIONS)(
+    "maps a codeless upstream rejection to the %i status guidance",
+    async (status, message) => {
+      isCloudMock.mockReturnValue(true);
+      getAuthHeadersMock.mockResolvedValue({ Authorization: "Bearer token" });
+      server.use(
+        http.post("https://api.example.com/api/v1/ingestions", () =>
+          HttpResponse.json(
+            { detail: "internal implementation detail" },
+            { status },
+          ),
+        ),
+      );
+
+      const response = await POST(uploadRequest());
+
+      expect(response.status).toBe(status);
+      await expect(response.json()).resolves.toEqual({ error: message });
+    },
+  );
+
+  it.each(STATUS_TIER_REJECTIONS)(
+    "falls through an unrecognized error code to the %i status guidance",
+    async (status, message) => {
+      isCloudMock.mockReturnValue(true);
+      getAuthHeadersMock.mockResolvedValue({ Authorization: "Bearer token" });
+      server.use(
+        http.post("https://api.example.com/api/v1/ingestions", () =>
+          HttpResponse.json(
+            {
+              errors: [
+                {
+                  code: "invalid_findings",
+                  detail: "internal implementation detail",
+                },
+              ],
+            },
+            { status },
+          ),
+        ),
+      );
+
+      const response = await POST(uploadRequest());
+
+      expect(response.status).toBe(status);
+      await expect(response.json()).resolves.toEqual({ error: message });
+    },
+  );
+
+  // An empty id parses into a trackable-looking job whose poll URL,
+  // `/api/ingestions/`, matches no route: a created import reads as a failure.
+  it.each([
+    ["no job identifier", { attributes: { status: "pending" } }],
+    ["an empty job identifier", { id: "", attributes: { status: "pending" } }],
+  ])("refuses an accepted response with %s", async (_shape, data) => {
+    isCloudMock.mockReturnValue(true);
+    getAuthHeadersMock.mockResolvedValue({ Authorization: "Bearer token" });
+    server.use(
+      http.post("https://api.example.com/api/v1/ingestions", () =>
+        HttpResponse.json({ data }),
+      ),
+    );
+
+    const response = await POST(uploadRequest());
+
+    expect(response.status).toBe(502);
+    await expect(response.json()).resolves.toEqual({
+      error: "Unable to start the import. Please try again.",
+    });
+  });
+
+  it("rejects accepted responses that cannot start a trackable ingestion", async () => {
+    isCloudMock.mockReturnValue(true);
+    getAuthHeadersMock.mockResolvedValue({ Authorization: "Bearer token" });
+    server.use(
+      http.post("https://api.example.com/api/v1/ingestions", () =>
+        HttpResponse.json({ data: { id: "ingestion-123", attributes: {} } }),
+      ),
+    );
+
+    const response = await POST(uploadRequest());
+
+    expect(response.status).toBe(502);
+    await expect(response.json()).resolves.toEqual({
+      error: "Unable to start the import. Please try again.",
+    });
+  });
+});
diff --git a/ui/app/api/ingestions/route.ts b/ui/app/api/ingestions/route.ts
new file mode 100644
index 0000000000..d8bf4a0ce6
--- /dev/null
+++ b/ui/app/api/ingestions/route.ts
@@ -0,0 +1,114 @@
+import { NextResponse } from "next/server";
+
+import { apiBaseUrl, getAuthHeaders } from "@/lib";
+import { parseIngestion } from "@/lib/ingestions";
+import { isCloud } from "@/lib/shared/env";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+
+const INVALID_INGESTION_RESPONSE =
+  "Unable to start the import. Please try again.";
+const INGESTION_REJECTION_BY_CODE = {
+  invalid: "The report is not a valid Prowler OCSF finding report.",
+  subscription_required:
+    "A Prowler Cloud subscription is required to import findings.",
+  permission_denied: "You do not have permission to import findings.",
+  file_too_large: "The selected file exceeds the allowed upload size.",
+  rate_limited: "Too many import requests. Please try again shortly.",
+} as const;
+
+const INGESTION_REJECTION_BY_STATUS = {
+  400: INGESTION_REJECTION_BY_CODE.invalid,
+  402: INGESTION_REJECTION_BY_CODE.subscription_required,
+  403: INGESTION_REJECTION_BY_CODE.permission_denied,
+  413: INGESTION_REJECTION_BY_CODE.file_too_large,
+  429: INGESTION_REJECTION_BY_CODE.rate_limited,
+} as const;
+
+const ingestionRejectionMessage = (
+  payload: unknown,
+  status: number,
+  fallback: string,
+): string => {
+  if (typeof payload === "object" && payload !== null && "errors" in payload) {
+    const errors = payload.errors;
+    if (Array.isArray(errors) && typeof errors[0]?.code === "string") {
+      const message =
+        INGESTION_REJECTION_BY_CODE[
+          errors[0].code as keyof typeof INGESTION_REJECTION_BY_CODE
+        ];
+      if (message) return message;
+    }
+  }
+
+  return (
+    INGESTION_REJECTION_BY_STATUS[
+      status as keyof typeof INGESTION_REJECTION_BY_STATUS
+    ] ?? fallback
+  );
+};
+
+export async function POST(request: Request) {
+  if (!isCloud()) return new Response(null, { status: 404 });
+
+  const headers = await getAuthHeaders({ contentType: false });
+  const contentType = request.headers.get("content-type");
+  const contentLength = request.headers.get("content-length");
+
+  if (contentType) headers["Content-Type"] = contentType;
+  // Without the length the stream is forwarded chunked, and the ingestion API
+  // parses no file out of a chunked multipart body: refuse rather than spend
+  // the upload on a request that cannot succeed.
+  if (!contentLength) {
+    return NextResponse.json(
+      { error: INVALID_INGESTION_RESPONSE },
+      { status: 411 },
+    );
+  }
+  headers["Content-Length"] = contentLength;
+
+  const upstreamRequest: RequestInit & { duplex: "half" } = {
+    method: "POST",
+    headers,
+    body: request.body,
+    duplex: "half",
+    cache: "no-store",
+  };
+  let upstreamResponse: Response;
+  try {
+    upstreamResponse = await fetch(`${apiBaseUrl}/ingestions`, upstreamRequest);
+  } catch {
+    return NextResponse.json(
+      { error: INVALID_INGESTION_RESPONSE },
+      { status: 502 },
+    );
+  }
+  const payload = await upstreamResponse.json().catch(() => undefined);
+
+  if (!upstreamResponse.ok) {
+    return NextResponse.json(
+      {
+        error: ingestionRejectionMessage(
+          payload,
+          upstreamResponse.status,
+          INVALID_INGESTION_RESPONSE,
+        ),
+      },
+      { status: upstreamResponse.status },
+    );
+  }
+
+  const ingestion = parseIngestion(payload);
+  if (!ingestion) {
+    return NextResponse.json(
+      { error: INVALID_INGESTION_RESPONSE },
+      { status: 502 },
+    );
+  }
+
+  return NextResponse.json(
+    { data: ingestion },
+    { status: upstreamResponse.status },
+  );
+}
diff --git a/ui/auth.config.test.ts b/ui/auth.config.test.ts
index a95461cb59..5815f31496 100644
--- a/ui/auth.config.test.ts
+++ b/ui/auth.config.test.ts
@@ -35,8 +35,11 @@ const RESTRICTED_PERMISSIONS: RolePermissionAttributes = {
   manage_account: false,
   manage_providers: false,
   manage_scans: false,
+  manage_ingestions: false,
   manage_integrations: false,
+  manage_billing: false,
   manage_alerts: false,
+  manage_lighthouse_ai_configuration: false,
   unlimited_visibility: false,
 };
 
diff --git a/ui/auth.config.ts b/ui/auth.config.ts
index ec6880e193..c741534d24 100644
--- a/ui/auth.config.ts
+++ b/ui/auth.config.ts
@@ -56,6 +56,7 @@ const DEFAULT_PERMISSIONS: RolePermissionAttributes = {
   manage_account: false,
   manage_providers: false,
   manage_scans: false,
+  manage_ingestions: false,
   manage_integrations: false,
   manage_billing: false,
   manage_alerts: false,
@@ -95,7 +96,7 @@ const toTokenUser = (user?: TokenUserInput): TokenUser =>
     email: user?.email ?? undefined,
     companyName: user?.companyName ?? user?.company,
     dateJoined: user?.dateJoined,
-    permissions: user?.permissions ?? { ...DEFAULT_PERMISSIONS },
+    permissions: { ...DEFAULT_PERMISSIONS, ...user?.permissions },
   }) as TokenUser;
 
 type UserMeResponse = Awaited<ReturnType<typeof getUserByMe>>;
diff --git a/ui/changelog.d/import-findings-drag-drop.added.md b/ui/changelog.d/import-findings-drag-drop.added.md
new file mode 100644
index 0000000000..ee9c9b931c
--- /dev/null
+++ b/ui/changelog.d/import-findings-drag-drop.added.md
@@ -0,0 +1 @@
+Finding-report imports from Scans for Cloud and Private Cloud deployments
diff --git a/ui/components/scans/import-findings-modal.tsx b/ui/components/scans/import-findings-modal.tsx
new file mode 100644
index 0000000000..c367829ea2
--- /dev/null
+++ b/ui/components/scans/import-findings-modal.tsx
@@ -0,0 +1,316 @@
+"use client";
+
+import { useRouter } from "next/navigation";
+import { useState } from "react";
+
+import { Button } from "@/components/shadcn/button/button";
+import { FileUploadDropzone } from "@/components/shadcn/file-upload/file-upload-dropzone";
+import { Modal } from "@/components/shadcn/modal/modal";
+import { useToast } from "@/components/shadcn/toast/use-toast";
+import { type Ingestion, type IngestionResponse } from "@/types";
+
+import {
+  type IngestionPollingTarget,
+  useIngestionPolling,
+} from "./use-ingestion-polling";
+
+const IMPORT_STATE = {
+  IDLE: "idle",
+  READY: "ready",
+  UPLOADING: "uploading",
+  TRACKING: "tracking",
+  TRACKING_ERROR: "tracking-error",
+  COMPLETED: "completed",
+  FAILED: "failed",
+  INVALID: "invalid",
+} as const;
+
+interface IdleImportState {
+  type: typeof IMPORT_STATE.IDLE;
+}
+
+interface ReadyImportState {
+  type: typeof IMPORT_STATE.READY;
+  file: File;
+}
+
+interface UploadingImportState {
+  type: typeof IMPORT_STATE.UPLOADING;
+  file: File;
+}
+
+interface TrackingImportState {
+  type: typeof IMPORT_STATE.TRACKING;
+  file: File;
+  ingestion: Ingestion;
+}
+
+interface TrackingErrorImportState {
+  type: typeof IMPORT_STATE.TRACKING_ERROR;
+  error: string;
+  file: File;
+  ingestion: Ingestion;
+}
+
+interface CompletedImportState {
+  type: typeof IMPORT_STATE.COMPLETED;
+  ingestion: Ingestion;
+}
+
+interface FailedImportState {
+  type: typeof IMPORT_STATE.FAILED;
+  error: string;
+  file: File;
+  // Absent when the upload itself was rejected: no job, so no counters.
+  ingestion?: Ingestion;
+}
+
+interface InvalidImportState {
+  type: typeof IMPORT_STATE.INVALID;
+  error: string;
+}
+
+type ImportState =
+  | IdleImportState
+  | ReadyImportState
+  | UploadingImportState
+  | TrackingImportState
+  | TrackingErrorImportState
+  | CompletedImportState
+  | FailedImportState
+  | InvalidImportState;
+
+const validateFile = (file: File): string | null => {
+  if (!file.name.toLowerCase().endsWith(".ocsf.json")) {
+    return "Choose a Prowler .ocsf.json finding report.";
+  }
+  if (file.size === 0) return "The selected file is empty.";
+  return null;
+};
+
+const START_ERROR = "Unable to start the import. Please try again.";
+
+const responseError = async (
+  response: Response,
+  fallback: string,
+): Promise<string> => {
+  const payload = await response.json().catch(() => undefined);
+  if (
+    typeof payload === "object" &&
+    payload !== null &&
+    "error" in payload &&
+    typeof payload.error === "string"
+  ) {
+    return payload.error;
+  }
+  return fallback;
+};
+
+export function ImportFindingsModal() {
+  const router = useRouter();
+  const { toast } = useToast();
+  const [open, setOpen] = useState(false);
+  const [state, setState] = useState<ImportState>({ type: IMPORT_STATE.IDLE });
+  const polling = useIngestionPolling({
+    onCompleted: (ingestion, completedWhileHidden) => {
+      router.refresh();
+      if (completedWhileHidden) {
+        toast({
+          title: "Findings import completed",
+          description: "Imported findings are now available in Scans.",
+        });
+      }
+      setState({ type: IMPORT_STATE.COMPLETED, ingestion });
+    },
+    onFailed: ({ file, ingestion }) => {
+      setState({
+        type: IMPORT_STATE.FAILED,
+        error:
+          "Import failed. Retry the same file or select a different report.",
+        file,
+        ingestion,
+      });
+    },
+    onProgress: ({ file, ingestion }) => {
+      setState({ type: IMPORT_STATE.TRACKING, file, ingestion });
+    },
+    onTrackingError: ({ file, ingestion }, error) => {
+      setState({
+        type: IMPORT_STATE.TRACKING_ERROR,
+        error,
+        file,
+        ingestion,
+      });
+    },
+  });
+
+  const handleFileSelect = (file?: File) => {
+    if (!file) {
+      setState({ type: IMPORT_STATE.IDLE });
+      return;
+    }
+
+    const error = validateFile(file);
+    setState(
+      error
+        ? { type: IMPORT_STATE.INVALID, error }
+        : { type: IMPORT_STATE.READY, file },
+    );
+  };
+
+  const handleOpenChange = (nextOpen: boolean) => {
+    polling.setDialogVisible(nextOpen);
+    // A job that completed while hidden leaves a summary nobody dismissed.
+    // Reset it on the next open so the dropzone is available again.
+    if (nextOpen && state.type === IMPORT_STATE.COMPLETED) {
+      setState({ type: IMPORT_STATE.IDLE });
+    }
+    // Dismissing never aborts the request: resetting here would drop the
+    // accepted job and re-enable submit for a second, concurrent POST.
+    if (
+      !nextOpen &&
+      state.type !== IMPORT_STATE.UPLOADING &&
+      state.type !== IMPORT_STATE.TRACKING &&
+      state.type !== IMPORT_STATE.TRACKING_ERROR
+    ) {
+      setState({ type: IMPORT_STATE.IDLE });
+    }
+    setOpen(nextOpen);
+  };
+
+  const upload = async (file: File) => {
+    setState({ type: IMPORT_STATE.UPLOADING, file });
+    const formData = new FormData();
+    formData.set("file", file);
+    const response = await fetch("/api/ingestions", {
+      method: "POST",
+      body: formData,
+    }).catch(() => undefined);
+    if (!response || !response.ok) {
+      setState({
+        type: IMPORT_STATE.FAILED,
+        error: response
+          ? await responseError(response, START_ERROR)
+          : START_ERROR,
+        file,
+      });
+      return;
+    }
+
+    const payload = (await response.json()) as IngestionResponse;
+    const target: IngestionPollingTarget = { file, ingestion: payload.data };
+    if (!polling.start(target)) return;
+    setState({ type: IMPORT_STATE.TRACKING, ...target });
+  };
+
+  const submit = async () => {
+    if (state.type !== IMPORT_STATE.READY) return;
+    await upload(state.file);
+  };
+
+  const file =
+    state.type === IMPORT_STATE.READY ||
+    state.type === IMPORT_STATE.UPLOADING ||
+    state.type === IMPORT_STATE.FAILED ||
+    state.type === IMPORT_STATE.TRACKING ||
+    state.type === IMPORT_STATE.TRACKING_ERROR
+      ? state.file
+      : undefined;
+  const isSubmitting = state.type === IMPORT_STATE.UPLOADING;
+  const completed = state.type === IMPORT_STATE.COMPLETED;
+
+  return (
+    <>
+      <Button
+        type="button"
+        size="lg"
+        variant="secondary"
+        onClick={() => handleOpenChange(true)}
+        className="w-full md:w-auto"
+      >
+        Import Findings
+      </Button>
+      <Modal
+        open={open}
+        onOpenChange={handleOpenChange}
+        title="Import findings"
+        description="Upload a Prowler OCSF finding report to add it to Scans."
+        size="md"
+      >
+        <div className="flex flex-col gap-4">
+          {completed ? (
+            <p>
+              Import completed: {state.ingestion.totalRecords} total records,{" "}
+              {state.ingestion.processedRecords} processed,{" "}
+              {state.ingestion.invalidRecords} invalid.
+            </p>
+          ) : (
+            <>
+              <div data-testid="import-findings-dropzone">
+                <FileUploadDropzone
+                  file={file}
+                  accept=".ocsf.json,application/json"
+                  onFileSelect={handleFileSelect}
+                  disabled={
+                    isSubmitting ||
+                    state.type === IMPORT_STATE.TRACKING ||
+                    state.type === IMPORT_STATE.TRACKING_ERROR
+                  }
+                />
+              </div>
+              {state.type === IMPORT_STATE.INVALID && (
+                <p role="alert">{state.error}</p>
+              )}
+              {state.type === IMPORT_STATE.FAILED && (
+                <>
+                  <p role="alert">{state.error}</p>
+                  {state.ingestion && (
+                    <p>
+                      Reported progress: {state.ingestion.processedRecords} of{" "}
+                      {state.ingestion.totalRecords} records processed,{" "}
+                      {state.ingestion.invalidRecords} invalid.
+                    </p>
+                  )}
+                  <Button type="button" onClick={() => void upload(state.file)}>
+                    Retry import
+                  </Button>
+                </>
+              )}
+              {state.type === IMPORT_STATE.TRACKING && (
+                <p>Import is {state.ingestion.status}.</p>
+              )}
+              {state.type === IMPORT_STATE.TRACKING_ERROR && (
+                <>
+                  <p role="alert">{state.error}</p>
+                  <Button
+                    type="button"
+                    onClick={() => {
+                      const target: IngestionPollingTarget = {
+                        file: state.file,
+                        ingestion: state.ingestion,
+                      };
+                      setState({
+                        type: IMPORT_STATE.TRACKING,
+                        ...target,
+                      });
+                      polling.start(target);
+                    }}
+                  >
+                    Retry status
+                  </Button>
+                </>
+              )}
+              <Button
+                type="button"
+                onClick={() => void submit()}
+                disabled={state.type !== IMPORT_STATE.READY || isSubmitting}
+              >
+                {isSubmitting ? "Importing..." : "Start import"}
+              </Button>
+            </>
+          )}
+        </div>
+      </Modal>
+    </>
+  );
+}
diff --git a/ui/components/scans/scans-page-shell.test.tsx b/ui/components/scans/scans-page-shell.test.tsx
index 5d953e1ec3..b702f2cdf7 100644
--- a/ui/components/scans/scans-page-shell.test.tsx
+++ b/ui/components/scans/scans-page-shell.test.tsx
@@ -178,24 +178,6 @@ describe("ScansPageShell", () => {
     useScansStore.getState().closeLaunchScanModal();
   });
 
-  it("does not render an imported findings tab", () => {
-    vi.stubEnv("UI_CLOUD_ENABLED", "false");
-
-    render(
-      <ScansPageShell providers={providers} hasManageScansPermission>
-        <div>Scans table</div>
-      </ScansPageShell>,
-    );
-
-    expect(
-      screen.queryByRole("tab", { name: /imported findings/i }),
-    ).not.toBeInTheDocument();
-    expect(
-      screen.queryByRole("button", { name: /import findings/i }),
-    ).not.toBeInTheDocument();
-    expect(screen.queryByRole("dialog")).not.toBeInTheDocument();
-  });
-
   it("uses the shared scan filter bar for scan filters", () => {
     vi.stubEnv("UI_CLOUD_ENABLED", "false");
 
@@ -245,6 +227,72 @@ describe("ScansPageShell", () => {
     expect(screen.getByRole("combobox", { name: /all types/i })).toBeVisible();
   });
 
+  it.each(["Cloud", "Private Cloud"])(
+    "shows Import Findings in %s with Manage Ingestions",
+    () => {
+      // Given
+      vi.stubEnv("UI_CLOUD_ENABLED", "true");
+
+      // When
+      render(
+        <ScansPageShell
+          providers={providers}
+          hasManageScansPermission
+          hasManageIngestionsPermission
+        >
+          <div>Scans table</div>
+        </ScansPageShell>,
+      );
+
+      // Then
+      expect(
+        screen.getByRole("button", { name: /import findings/i }),
+      ).toBeVisible();
+    },
+  );
+
+  it("hides Import Findings without Manage Ingestions", () => {
+    // Given
+    vi.stubEnv("UI_CLOUD_ENABLED", "true");
+
+    // When
+    render(
+      <ScansPageShell
+        providers={providers}
+        hasManageScansPermission
+        hasManageIngestionsPermission={false}
+      >
+        <div>Scans table</div>
+      </ScansPageShell>,
+    );
+
+    // Then
+    expect(
+      screen.queryByRole("button", { name: /import findings/i }),
+    ).not.toBeInTheDocument();
+  });
+
+  it("hides Import Findings in OSS and Local Server", () => {
+    // Given
+    vi.stubEnv("UI_CLOUD_ENABLED", "false");
+
+    // When
+    render(
+      <ScansPageShell
+        providers={providers}
+        hasManageScansPermission
+        hasManageIngestionsPermission
+      >
+        <div>Scans table</div>
+      </ScansPageShell>,
+    );
+
+    // Then
+    expect(
+      screen.queryByRole("button", { name: /import findings/i }),
+    ).not.toBeInTheDocument();
+  });
+
   it("shows the CLI import banner in Cloud", () => {
     vi.stubEnv("UI_CLOUD_ENABLED", "true");
 
diff --git a/ui/components/scans/scans-page-shell.tsx b/ui/components/scans/scans-page-shell.tsx
index 8209957879..6af2c436fd 100644
--- a/ui/components/scans/scans-page-shell.tsx
+++ b/ui/components/scans/scans-page-shell.tsx
@@ -28,6 +28,7 @@ import type { ScanScheduleCapability } from "@/types/schedules";
 const viewFirstScanFlow = getFlowById("view-first-scan")!;
 
 import { CliImportBanner } from "./cli-import-banner";
+import { ImportFindingsModal } from "./import-findings-modal";
 import { LaunchScanModal } from "./launch-scan-modal";
 import { ScansFilterBar } from "./scans-filter-bar";
 import { ScansProvidersEmptyState } from "./scans-providers-empty-state";
@@ -37,6 +38,7 @@ interface ScansPageShellProps {
   providers: ProviderProps[];
   providerGroups?: ProviderGroup[];
   hasManageScansPermission: boolean;
+  hasManageIngestionsPermission?: boolean;
   activeScanCount?: number;
   children: ReactNode;
   /** Cloud overlay seam for the launch-scan modal. */
@@ -48,6 +50,7 @@ export function ScansPageShell({
   providers,
   providerGroups = [],
   hasManageScansPermission,
+  hasManageIngestionsPermission = false,
   activeScanCount = 0,
   children,
   scanScheduleCapability,
@@ -155,6 +158,9 @@ export function ScansPageShell({
         >
           Launch Scan
         </Button>
+        {isCloudEnvironment && hasManageIngestionsPermission && (
+          <ImportFindingsModal />
+        )}
       </div>
 
       {isCloudEnvironment && <CliImportBanner />}
diff --git a/ui/components/scans/use-ingestion-polling.ts b/ui/components/scans/use-ingestion-polling.ts
new file mode 100644
index 0000000000..fb9bab5729
--- /dev/null
+++ b/ui/components/scans/use-ingestion-polling.ts
@@ -0,0 +1,157 @@
+"use client";
+
+import { useEffect, useRef } from "react";
+
+import { INGESTION_STATUS, type Ingestion } from "@/types";
+
+const POLL_INTERVAL_MS = 5000;
+// 60 polls at 5s = ~5 min of watching; timing out ends the watch, not the job.
+const MAX_POLL_ATTEMPTS = 60;
+const STATUS_ERROR = "Unable to check the import status. Please try again.";
+const STATUS_TIMEOUT =
+  "Import is taking longer than expected — it may still be running in the background.";
+
+export interface IngestionPollingTarget {
+  file: File;
+  ingestion: Ingestion;
+}
+
+interface UseIngestionPollingOptions {
+  onCompleted: (ingestion: Ingestion, completedWhileHidden: boolean) => void;
+  onFailed: (target: IngestionPollingTarget) => void;
+  onProgress: (target: IngestionPollingTarget) => void;
+  onTrackingError: (target: IngestionPollingTarget, error: string) => void;
+}
+
+const isTerminal = (ingestion: Ingestion): boolean =>
+  ingestion.status === INGESTION_STATUS.COMPLETED ||
+  ingestion.status === INGESTION_STATUS.FAILED;
+
+const responseError = async (
+  response: Response,
+  fallback: string,
+): Promise<string> => {
+  const payload = await response.json().catch(() => undefined);
+  if (
+    typeof payload === "object" &&
+    payload !== null &&
+    "error" in payload &&
+    typeof payload.error === "string"
+  ) {
+    return payload.error;
+  }
+  return fallback;
+};
+
+export const useIngestionPolling = ({
+  onCompleted,
+  onFailed,
+  onProgress,
+  onTrackingError,
+}: UseIngestionPollingOptions) => {
+  const controllerRef = useRef<AbortController | null>(null);
+  const dialogVisibleRef = useRef(false);
+  const mountedRef = useRef(true);
+  const timeoutRef = useRef<number | null>(null);
+
+  const stop = () => {
+    controllerRef.current?.abort();
+    controllerRef.current = null;
+    if (timeoutRef.current !== null) {
+      window.clearTimeout(timeoutRef.current);
+      timeoutRef.current = null;
+    }
+  };
+
+  const setDialogVisible = (visible: boolean) => {
+    dialogVisibleRef.current = visible;
+  };
+
+  const start = (initialTarget: IngestionPollingTarget): boolean => {
+    if (!mountedRef.current) return false;
+    stop();
+
+    const controller = new AbortController();
+    controllerRef.current = controller;
+    let attempts = 0;
+    let target = initialTarget;
+
+    const finish = () => {
+      if (controllerRef.current === controller) {
+        controllerRef.current = null;
+      }
+      timeoutRef.current = null;
+    };
+
+    const poll = async () => {
+      attempts += 1;
+
+      try {
+        const response = await fetch(`/api/ingestions/${target.ingestion.id}`, {
+          signal: controller.signal,
+        });
+        if (!response.ok) {
+          const error = await responseError(response, STATUS_ERROR);
+          if (controller.signal.aborted) return;
+          finish();
+          onTrackingError(target, error);
+          return;
+        }
+
+        const payload = (await response.json()) as {
+          data?: Ingestion;
+        };
+        if (controller.signal.aborted) return;
+
+        const ingestion = payload.data;
+        if (!ingestion || !isTerminal(ingestion)) {
+          target = {
+            file: target.file,
+            ingestion: ingestion ?? target.ingestion,
+          };
+
+          if (attempts >= MAX_POLL_ATTEMPTS) {
+            finish();
+            onTrackingError(target, STATUS_TIMEOUT);
+            return;
+          }
+
+          onProgress(target);
+          timeoutRef.current = window.setTimeout(
+            () => void poll(),
+            POLL_INTERVAL_MS,
+          );
+          return;
+        }
+
+        finish();
+        if (ingestion.status === INGESTION_STATUS.COMPLETED) {
+          onCompleted(ingestion, !dialogVisibleRef.current);
+          return;
+        }
+
+        onFailed({ file: target.file, ingestion });
+      } catch {
+        if (controller.signal.aborted) return;
+        finish();
+        onTrackingError(target, STATUS_ERROR);
+      }
+    };
+
+    void poll();
+    return true;
+  };
+
+  useEffect(() => {
+    mountedRef.current = true;
+    return () => {
+      mountedRef.current = false;
+      controllerRef.current?.abort();
+      if (timeoutRef.current !== null) {
+        window.clearTimeout(timeoutRef.current);
+      }
+    };
+  }, []);
+
+  return { setDialogVisible, start, stop };
+};
diff --git a/ui/components/shadcn/file-upload/file-upload-dropzone.tsx b/ui/components/shadcn/file-upload/file-upload-dropzone.tsx
index 120bdea59d..e15cb2c25c 100644
--- a/ui/components/shadcn/file-upload/file-upload-dropzone.tsx
+++ b/ui/components/shadcn/file-upload/file-upload-dropzone.tsx
@@ -1,10 +1,27 @@
 "use client";
 
 import { FileUp } from "lucide-react";
-import { type DragEvent, type ReactNode, useId, useState } from "react";
+import {
+  type ChangeEvent,
+  type DragEvent,
+  type KeyboardEvent,
+  type ReactNode,
+  useId,
+  useRef,
+  useState,
+} from "react";
 
 import { cn } from "@/lib/utils";
 
+const KB = 1024;
+const MB = KB * 1024;
+
+// Not toLocaleString: a locale-grouped "15.002 KB" reads as 15 KB in es-ES.
+function formatFileSize(bytes: number) {
+  const kb = Math.ceil(bytes / KB);
+  return kb < KB ? `${kb} KB` : `${(bytes / MB).toFixed(1)} MB`;
+}
+
 interface FileUploadDropzoneProps {
   file?: File | null;
   onFileSelect: (file?: File) => void;
@@ -14,6 +31,7 @@ interface FileUploadDropzoneProps {
   emptyDescription?: string;
   selectText?: string;
   icon?: ReactNode;
+  disabled?: boolean;
 }
 
 export function FileUploadDropzone({
@@ -25,21 +43,40 @@ export function FileUploadDropzone({
   emptyDescription = "or",
   selectText = "Select File",
   icon = <FileUp className="text-text-neutral-secondary size-6" />,
+  disabled = false,
 }: FileUploadDropzoneProps) {
   const inputId = useId();
+  const inputRef = useRef<HTMLInputElement>(null);
   const [isDragging, setIsDragging] = useState(false);
 
   const handleDrop = (event: DragEvent<HTMLLabelElement>) => {
     event.preventDefault();
     setIsDragging(false);
+    if (disabled) return;
     onFileSelect(event.dataTransfer.files[0]);
   };
 
+  const handleKeyDown = (event: KeyboardEvent<HTMLLabelElement>) => {
+    if (disabled || (event.key !== "Enter" && event.key !== " ")) return;
+    event.preventDefault();
+    inputRef.current?.click();
+  };
+
+  const handleChange = (event: ChangeEvent<HTMLInputElement>) => {
+    onFileSelect(event.target.files?.[0]);
+    event.target.value = "";
+  };
+
   return (
     <label
       htmlFor={inputId}
+      role="button"
+      tabIndex={disabled ? -1 : 0}
+      aria-disabled={disabled}
+      onKeyDown={handleKeyDown}
       onDragOver={(event) => {
         event.preventDefault();
+        if (disabled) return;
         setIsDragging(true);
       }}
       onDragLeave={() => setIsDragging(false)}
@@ -48,6 +85,7 @@ export function FileUploadDropzone({
         "border-border-neutral-tertiary bg-bg-neutral-primary hover:bg-bg-neutral-tertiary flex min-h-[132px] cursor-pointer flex-col items-center justify-center gap-2 rounded-lg border border-dashed px-4 py-8 text-center transition-colors",
         isDragging &&
           "border-border-input-primary-press bg-bg-neutral-tertiary",
+        disabled && "hover:bg-bg-neutral-primary cursor-not-allowed opacity-50",
         className,
       )}
     >
@@ -56,9 +94,7 @@ export function FileUploadDropzone({
         {file ? file.name : title}
       </span>
       <span className="text-text-neutral-secondary text-xs">
-        {file
-          ? `${Math.ceil(file.size / 1024).toLocaleString()} KB`
-          : emptyDescription}
+        {file ? formatFileSize(file.size) : emptyDescription}
       </span>
       {!file && (
         <span className="text-button-tertiary text-sm font-medium">
@@ -67,10 +103,12 @@ export function FileUploadDropzone({
       )}
       <input
         id={inputId}
+        ref={inputRef}
         type="file"
         accept={accept}
+        disabled={disabled}
         className="sr-only"
-        onChange={(event) => onFileSelect(event.target.files?.[0])}
+        onChange={handleChange}
       />
     </label>
   );
diff --git a/ui/hooks/use-auth.ts b/ui/hooks/use-auth.ts
index 0946fc7677..4e5d5ea76c 100644
--- a/ui/hooks/use-auth.ts
+++ b/ui/hooks/use-auth.ts
@@ -11,6 +11,7 @@ export function useAuth() {
     manage_account: false,
     manage_providers: false,
     manage_scans: false,
+    manage_ingestions: false,
     manage_integrations: false,
     manage_billing: false,
     manage_alerts: false,
diff --git a/ui/lib/ingestions.ts b/ui/lib/ingestions.ts
new file mode 100644
index 0000000000..ed783212b7
--- /dev/null
+++ b/ui/lib/ingestions.ts
@@ -0,0 +1,55 @@
+import {
+  INGESTION_STATUS,
+  type Ingestion,
+  type IngestionStatus,
+} from "@/types";
+
+interface JsonApiIngestionSummary {
+  total?: unknown;
+  processed?: unknown;
+  invalid?: unknown;
+}
+
+interface JsonApiIngestionAttributes {
+  status?: unknown;
+  summary?: JsonApiIngestionSummary;
+}
+
+interface JsonApiIngestionData {
+  id?: unknown;
+  attributes?: JsonApiIngestionAttributes;
+}
+
+interface JsonApiIngestionResponse {
+  data?: JsonApiIngestionData;
+}
+
+const isIngestionStatus = (value: unknown): value is IngestionStatus =>
+  Object.values(INGESTION_STATUS).includes(value as IngestionStatus);
+
+// Counts are absent until the job reports them: read as 0, not a failure.
+const recordCount = (value: unknown): number =>
+  typeof value === "number" ? value : 0;
+
+export const parseIngestion = (payload: unknown): Ingestion | null => {
+  const data = (payload as JsonApiIngestionResponse)?.data;
+  const attributes = data?.attributes;
+
+  if (
+    typeof data?.id !== "string" ||
+    data.id === "" ||
+    !isIngestionStatus(attributes?.status)
+  ) {
+    return null;
+  }
+
+  const summary = attributes.summary;
+
+  return {
+    id: data.id,
+    status: attributes.status,
+    totalRecords: recordCount(summary?.total),
+    processedRecords: recordCount(summary?.processed),
+    invalidRecords: recordCount(summary?.invalid),
+  };
+};
diff --git a/ui/types/index.ts b/ui/types/index.ts
index 213f41f5b9..ac5812aa20 100644
--- a/ui/types/index.ts
+++ b/ui/types/index.ts
@@ -5,6 +5,7 @@ export * from "./filters";
 export * from "./findings-table";
 export * from "./findings-triage";
 export * from "./formSchemas";
+export * from "./ingestions";
 export * from "./organizations";
 export * from "./processors";
 export * from "./provider-wizard";
diff --git a/ui/types/ingestions.ts b/ui/types/ingestions.ts
new file mode 100644
index 0000000000..b3732d0ddc
--- /dev/null
+++ b/ui/types/ingestions.ts
@@ -0,0 +1,21 @@
+export const INGESTION_STATUS = {
+  PENDING: "pending",
+  PROCESSING: "processing",
+  COMPLETED: "completed",
+  FAILED: "failed",
+} as const;
+
+export type IngestionStatus =
+  (typeof INGESTION_STATUS)[keyof typeof INGESTION_STATUS];
+
+export interface Ingestion {
+  id: string;
+  status: IngestionStatus;
+  totalRecords: number;
+  processedRecords: number;
+  invalidRecords: number;
+}
+
+export interface IngestionResponse {
+  data: Ingestion;
+}
diff --git a/ui/types/users.ts b/ui/types/users.ts
index c9b43494b3..56dfe7c3e5 100644
--- a/ui/types/users.ts
+++ b/ui/types/users.ts
@@ -87,6 +87,7 @@ export const PERMISSION_KEY = {
   MANAGE_ACCOUNT: "manage_account",
   MANAGE_PROVIDERS: "manage_providers",
   MANAGE_SCANS: "manage_scans",
+  MANAGE_INGESTIONS: "manage_ingestions",
   MANAGE_INTEGRATIONS: "manage_integrations",
   MANAGE_BILLING: "manage_billing",
   MANAGE_ALERTS: "manage_alerts",
@@ -98,7 +99,7 @@ export type PermissionKey =
   (typeof PERMISSION_KEY)[keyof typeof PERMISSION_KEY];
 
 export type RolePermissionAttributes = Pick<
-  RoleDetail["attributes"],
+  RoleDetailAttributes,
   PermissionKey
 >;
 
@@ -110,43 +111,54 @@ export const TENANT_MEMBERSHIP_ROLE = {
 export type TenantMembershipRole =
   (typeof TENANT_MEMBERSHIP_ROLE)[keyof typeof TENANT_MEMBERSHIP_ROLE];
 
+export interface RoleDetailAttributes {
+  name: string;
+  manage_users: boolean;
+  manage_account: boolean;
+  manage_providers: boolean;
+  manage_scans: boolean;
+  manage_ingestions?: boolean;
+  manage_integrations: boolean;
+  manage_billing?: boolean;
+  manage_alerts?: boolean;
+  manage_lighthouse_ai_configuration?: boolean;
+  unlimited_visibility: boolean;
+  permission_state?: string;
+  inserted_at?: string;
+  updated_at?: string;
+}
+
 export interface RoleDetail {
   id: string;
   type: "roles";
-  attributes: {
-    name: string;
-    manage_users: boolean;
-    manage_account: boolean;
-    manage_providers: boolean;
-    manage_scans: boolean;
-    manage_integrations: boolean;
-    manage_billing?: boolean;
-    manage_alerts?: boolean;
-    manage_lighthouse_ai_configuration?: boolean;
-    unlimited_visibility: boolean;
-    permission_state?: string;
-    inserted_at?: string;
-    updated_at?: string;
-  };
+  attributes: RoleDetailAttributes;
+}
+
+export interface MembershipDetailAttributes {
+  role: string;
+  date_joined: string;
+  [key: string]: unknown;
+}
+
+export interface MembershipTenantIdentifier {
+  type: string;
+  id: string;
+}
+
+export interface MembershipTenantRelationship {
+  data: MembershipTenantIdentifier;
+}
+
+export interface MembershipDetailRelationships {
+  tenant: MembershipTenantRelationship;
+  [key: string]: unknown;
 }
 
 export interface MembershipDetailData {
   id: string;
   type: "memberships";
-  attributes: {
-    role: string;
-    date_joined: string;
-    [key: string]: any;
-  };
-  relationships: {
-    tenant: {
-      data: {
-        type: string;
-        id: string;
-      };
-    };
-    [key: string]: any;
-  };
+  attributes: MembershipDetailAttributes;
+  relationships: MembershipDetailRelationships;
 }
 
 export interface UserDataWithRoles

From 13a31d922555315111d8ada61ec9fea5a4dd0d19 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rub=C3=A9n=20De=20la=20Torre=20Vico?= <ruben@prowler.com>
Date: Mon, 31 Aug 2026 17:36:19 +0200
Subject: [PATCH 08/77] feat(mcp): raise instead of returning error objects in
 the Prowler Docs tools (#12534)

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .../mcp-docs-search-swallowed-errors.fixed.md |   1 +
 .../prowler_documentation/search_engine.py    | 127 +++++++++---------
 .../prowler_documentation/server.py           |  13 +-
 .../prowler_documentation/test_server.py      |  69 +++++++++-
 4 files changed, 142 insertions(+), 68 deletions(-)
 create mode 100644 mcp_server/changelog.d/mcp-docs-search-swallowed-errors.fixed.md

diff --git a/mcp_server/changelog.d/mcp-docs-search-swallowed-errors.fixed.md b/mcp_server/changelog.d/mcp-docs-search-swallowed-errors.fixed.md
new file mode 100644
index 0000000000..d24445ea71
--- /dev/null
+++ b/mcp_server/changelog.d/mcp-docs-search-swallowed-errors.fixed.md
@@ -0,0 +1 @@
+`prowler_docs_search` no longer reports a failed search as zero matches or an unreadable answer as a bad search term, and `prowler_docs_get_document` no longer reports a failed fetch as a missing page
diff --git a/mcp_server/prowler_mcp_server/prowler_documentation/search_engine.py b/mcp_server/prowler_mcp_server/prowler_documentation/search_engine.py
index 1eb1d10820..990a225239 100644
--- a/mcp_server/prowler_mcp_server/prowler_documentation/search_engine.py
+++ b/mcp_server/prowler_mcp_server/prowler_documentation/search_engine.py
@@ -2,6 +2,7 @@ import httpx
 from pydantic import BaseModel, Field
 
 from prowler_mcp_server import __version__
+from prowler_mcp_server.lib.errors import parse_json_response
 
 
 class SearchResult(BaseModel):
@@ -58,8 +59,7 @@ class ProwlerDocsSearchEngine:
         )
 
     def search(self, query: str, page_size: int = 5) -> list[SearchResult]:
-        """
-        Search documentation using Mintlify API.
+        """Search documentation using Mintlify API.
 
         Args:
             query: Search query string
@@ -69,82 +69,85 @@ class ProwlerDocsSearchEngine:
 
         Returns:
             list of search results
+
+        Raises:
+            httpx.HTTPError: If the search request failed, which is not the same
+                answer as no matches
+            UpstreamInvalidResponse: If the answer is not JSON, which is the
+                documentation site's fault and not the search term's
         """
-        try:
-            # Make request to Mintlify API
-            response = self.mintlify_client.post(
-                self.api_base_url,
-                json={"query": query, "filters": {}},
-            )
-            response.raise_for_status()
-            data = response.json()
+        # Make request to Mintlify API
+        response = self.mintlify_client.post(
+            self.api_base_url,
+            json={"query": query, "filters": {}},
+        )
+        response.raise_for_status()
+        # Not `response.json()`: the decode error it raises is a ValueError, which
+        # the shared classifier reads as a malformed argument and answers by
+        # telling the caller to fix a search term that was never the problem.
+        data = parse_json_response(response)
 
-            # Parse results
-            results = []
-            for match in data.get("results", [])[:page_size]:
-                metadata = match.get("metadata", {})
-                breadcrumbs = metadata.get("breadcrumbs", [])
-                doc_path = match.get("page", "")
+        # Parse results
+        results = []
+        for match in data.get("results", [])[:page_size]:
+            metadata = match.get("metadata", {})
+            breadcrumbs = metadata.get("breadcrumbs", [])
+            doc_path = match.get("page", "")
 
-                # A match is one section of a page rather than the page: the
-                # heading it was found under is its header, and the page's own
-                # title is the last step of its breadcrumb trail.
-                section = match.get("header", "")
-                title = breadcrumbs[-1] if breadcrumbs else section
+            # A match is one section of a page rather than the page: the
+            # heading it was found under is its header, and the page's own
+            # title is the last step of its breadcrumb trail.
+            section = match.get("header", "")
+            title = breadcrumbs[-1] if breadcrumbs else section
 
-                # Sent as "" for the section a page opens with and as null for
-                # the pages that have no anchors at all; both mean the page.
-                anchor = metadata.get("hash")
-                url = f"{self.docs_base_url}/{doc_path}"
-                if anchor:
-                    url = f"{url}#{anchor}"
+            # Sent as "" for the section a page opens with and as null for
+            # the pages that have no anchors at all; both mean the page.
+            anchor = metadata.get("hash")
+            url = f"{self.docs_base_url}/{doc_path}"
+            if anchor:
+                url = f"{url}#{anchor}"
 
-                results.append(
-                    SearchResult(
-                        path=doc_path,
-                        title=title,
-                        section=section,
-                        breadcrumbs=breadcrumbs,
-                        url=url,
-                        excerpt=match.get("content", ""),
-                        score=match.get("score", 0.0),
-                    )
+            results.append(
+                SearchResult(
+                    path=doc_path,
+                    title=title,
+                    section=section,
+                    breadcrumbs=breadcrumbs,
+                    url=url,
+                    excerpt=match.get("content", ""),
+                    score=match.get("score", 0.0),
                 )
+            )
 
-            return results
-
-        except Exception as e:
-            # Return empty list on error
-            print(f"Search error: {e}")
-            return []
+        return results
 
     def get_document(self, doc_path: str) -> str | None:
-        """
-        Get full document content from Mintlify documentation.
+        """Get full document content from Mintlify documentation.
 
         Args:
             doc_path: Path to the documentation file (e.g., "getting-started/installation")
 
         Returns:
-            Full markdown content of the documentation, or None if not found
+            Full markdown content of the documentation, or None if there is no
+            page at that path
+
+        Raises:
+            httpx.HTTPError: If the fetch failed for any reason other than a 404
         """
-        try:
-            # Clean up the path
-            doc_path = doc_path.rstrip("/")
+        # Clean up the path
+        doc_path = doc_path.rstrip("/")
 
-            # Add .md extension if not present (Mintlify serves both .md and .mdx)
-            if not doc_path.endswith(".md"):
-                doc_path = f"{doc_path}.md"
+        # Add .md extension if not present (Mintlify serves both .md and .mdx)
+        if not doc_path.endswith(".md"):
+            doc_path = f"{doc_path}.md"
 
-            # Construct Mintlify URL
-            url = f"{self.docs_base_url}/{doc_path}"
+        # Construct Mintlify URL
+        url = f"{self.docs_base_url}/{doc_path}"
 
-            # Fetch the documentation page
-            response = self.docs_client.get(url)
-            response.raise_for_status()
-
-            return response.text
-
-        except Exception as e:
-            print(f"Error fetching document: {e}")
+        # Fetch the documentation page
+        response = self.docs_client.get(url)
+        if response.status_code == 404:
             return None
+        response.raise_for_status()
+
+        return response.text
diff --git a/mcp_server/prowler_mcp_server/prowler_documentation/server.py b/mcp_server/prowler_mcp_server/prowler_documentation/server.py
index de0756a505..1121d7c419 100644
--- a/mcp_server/prowler_mcp_server/prowler_documentation/server.py
+++ b/mcp_server/prowler_mcp_server/prowler_documentation/server.py
@@ -1,6 +1,7 @@
 from typing import Any
 
 from fastmcp import FastMCP
+from fastmcp.exceptions import ToolError
 from pydantic import Field
 
 from prowler_mcp_server.lib.types import NonBlankStr
@@ -9,7 +10,7 @@ from prowler_mcp_server.prowler_documentation.search_engine import (
 )
 
 # Initialize FastMCP server
-docs_mcp_server = FastMCP("prowler-docs")
+docs_mcp_server = FastMCP("prowler-docs", mask_error_details=True)
 prowler_docs_search_engine = ProwlerDocsSearchEngine()
 
 
@@ -56,6 +57,10 @@ def get_document(
     """
     content: str | None = prowler_docs_search_engine.get_document(doc_path)
     if content is None:
-        return {"error": f"Document '{doc_path}' not found."}
-    else:
-        return {"content": content}
+        # No `from`: this names the path asked for and the tool that produces a
+        # valid one, neither of which the shared classifier can know.
+        raise ToolError(
+            f"The Prowler documentation has no page at '{doc_path}'. Use "
+            "prowler_docs_search and pass the 'path' field of a result verbatim."
+        )
+    return {"content": content}
diff --git a/mcp_server/tests/prowler_documentation/test_server.py b/mcp_server/tests/prowler_documentation/test_server.py
index da5e9f17f4..67ee57decf 100644
--- a/mcp_server/tests/prowler_documentation/test_server.py
+++ b/mcp_server/tests/prowler_documentation/test_server.py
@@ -1,7 +1,9 @@
-"""Tests for the Prowler documentation search tool.
+"""Tests for the Prowler documentation tools.
 
 Mintlify moved the docs search to a new endpoint that answers with page
-sections, so a result is a part of a page and has to read as one.
+sections, so a result is a part of a page and has to read as one. And a failed
+request must not reach an agent as "the documentation has nothing on this",
+which is an answer it would act on, confidently and wrongly.
 """
 
 import json
@@ -9,6 +11,7 @@ import json
 from fastmcp import Client
 
 SEARCH = "/api/search/prowler"
+DOC = "/getting-started/installation.md"
 
 
 def search_match(
@@ -107,3 +110,65 @@ async def test_page_size_caps_a_response_the_api_did_not_size(
         )
 
     assert len(result.data) == 2
+
+
+async def test_a_search_that_failed_is_not_reported_as_no_matches(
+    mcp_root_server, docs_router
+):
+    """An empty list is an answer. A failed request is not, and must not look like one."""
+    docs_router.add("POST", SEARCH, status=500, text="upstream error")
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp("prowler_docs_search", {"term": "install"})
+
+    assert result.isError is True
+    assert result.structuredContent is None
+
+
+async def test_a_missing_page_fails_and_names_the_tool_that_finds_a_valid_path(
+    mcp_root_server, docs_router
+):
+    """A 404 answers the question, and still reaches the agent as an error."""
+    docs_router.add("GET", DOC, status=404, text="Not Found")
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_docs_get_document", {"doc_path": "getting-started/installation"}
+        )
+
+    assert result.isError is True
+    assert "prowler_docs_search" in result.content[0].text
+
+
+async def test_a_fetch_that_failed_is_not_reported_as_a_missing_page(
+    mcp_root_server, docs_router
+):
+    """Only a 404 answers the question; every other status left it unanswered."""
+    docs_router.add("GET", DOC, status=503, text="upstream error")
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp(
+            "prowler_docs_get_document", {"doc_path": "getting-started/installation"}
+        )
+
+    assert result.isError is True
+    assert "no page at" not in result.content[0].text
+
+
+async def test_an_unreadable_body_is_not_reported_as_a_bad_search_term(
+    mcp_root_server, docs_router
+):
+    """An edge serving HTML is the site's fault; the caller has no term to fix."""
+    docs_router.add("POST", SEARCH, status=200, text="<html>edge error page</html>")
+
+    async with Client(mcp_root_server) as client:
+        result = await client.call_tool_mcp("prowler_docs_search", {"term": "install"})
+
+    assert result.isError is True
+    message = result.content[0].text
+    # Named as the upstream at fault, and explicitly not the caller's arguments,
+    # which is the story the shared ValueError branch would otherwise tell.
+    assert "leaves.mintlify.com" in message
+    assert "changing them will not help" in message
+    # The body it choked on is upstream text, which this server never relays.
+    assert "edge error page" not in message

From 587c47bfe2e7a5f1cf82d7c7a78607172091a29c Mon Sep 17 00:00:00 2001
From: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
Date: Mon, 31 Aug 2026 18:00:46 +0200
Subject: [PATCH 09/77] feat(api): add finding labels, finding URL and tenant
 info to Jira issues (#12540)

Co-authored-by: Josema Camacho <josema@prowler.com>
---
 api/.env.example                              |   4 +
 .../jira-finding-labels-url.added.md          |   1 +
 api/src/backend/config/django/base.py         |   5 +
 api/src/backend/tasks/jobs/integrations.py    |  73 ++++++++-
 .../backend/tasks/tests/test_integrations.py  | 139 +++++++++++++++++-
 api/uv.lock                                   |  73 ++++++++-
 .../prowler-app-jira-integration.mdx          |  12 ++
 7 files changed, 301 insertions(+), 6 deletions(-)
 create mode 100644 api/changelog.d/jira-finding-labels-url.added.md

diff --git a/api/.env.example b/api/.env.example
index f97d868890..c9300ab6b9 100644
--- a/api/.env.example
+++ b/api/.env.example
@@ -59,5 +59,9 @@ DJANGO_GITHUB_OAUTH_CLIENT_ID=""
 DJANGO_GITHUB_OAUTH_CLIENT_SECRET=""
 DJANGO_GITHUB_OAUTH_CALLBACK_URL=""
 
+# Public base URL of the Prowler UI, used to link Jira issues back to findings.
+# Leave empty to omit the link.
+DJANGO_UI_BASE_URL=""
+
 # Deletion Task Batch Size
 DJANGO_DELETION_BATCH_SIZE=5000
diff --git a/api/changelog.d/jira-finding-labels-url.added.md b/api/changelog.d/jira-finding-labels-url.added.md
new file mode 100644
index 0000000000..e16b26b77d
--- /dev/null
+++ b/api/changelog.d/jira-finding-labels-url.added.md
@@ -0,0 +1 @@
+Jira issues created from Prowler Cloud now carry the `prowler`, `prowler-<provider>`, `prowler-<severity>`, `prowler-<check-id>`, and `prowler-finding-<finding-uid>` labels, a link back to the finding when `DJANGO_UI_BASE_URL` is configured, and the tenant name
diff --git a/api/src/backend/config/django/base.py b/api/src/backend/config/django/base.py
index a079942600..b967110c10 100644
--- a/api/src/backend/config/django/base.py
+++ b/api/src/backend/config/django/base.py
@@ -303,6 +303,11 @@ SECURE_REFERRER_POLICY = "strict-origin-when-cross-origin"
 
 DJANGO_DELETION_BATCH_SIZE = env.int("DJANGO_DELETION_BATCH_SIZE", 5000)
 
+# Public base URL of the Prowler UI (for example https://cloud.prowler.com). Used to
+# build links back to findings in outbound integrations such as Jira. Empty by
+# default, so self-hosted deployments emit no links unless they configure it.
+UI_BASE_URL = env.str("DJANGO_UI_BASE_URL", "").rstrip("/")
+
 # SAML requirement
 CSRF_COOKIE_SECURE = True
 SESSION_COOKIE_SECURE = True
diff --git a/api/src/backend/tasks/jobs/integrations.py b/api/src/backend/tasks/jobs/integrations.py
index 303d28c139..3fedcdc83a 100644
--- a/api/src/backend/tasks/jobs/integrations.py
+++ b/api/src/backend/tasks/jobs/integrations.py
@@ -2,13 +2,16 @@ import os
 import time
 from datetime import UTC, datetime
 from glob import glob
+from urllib.parse import quote
 
 from api.db_router import READ_REPLICA_ALIAS, MainRouter
 from api.db_utils import REPLICA_MAX_ATTEMPTS, REPLICA_RETRY_BASE_DELAY, rls_transaction
 from api.models import Finding, Integration, Provider
+from api.rls import Tenant
 from api.utils import initialize_prowler_integration, initialize_prowler_provider
 from celery.utils.log import get_task_logger
 from config.django.base import DJANGO_FINDINGS_BATCH_SIZE
+from django.conf import settings
 from django.db import OperationalError
 from prowler.lib.outputs.asff.asff import ASFF
 from prowler.lib.outputs.compliance.generic.generic import GenericCompliance
@@ -16,6 +19,7 @@ from prowler.lib.outputs.csv.csv import CSV
 from prowler.lib.outputs.finding import Finding as FindingOutput
 from prowler.lib.outputs.html.html import HTML
 from prowler.lib.outputs.jira.exceptions.exceptions import JiraBaseException
+from prowler.lib.outputs.jira.jira import Jira
 from prowler.lib.outputs.ocsf.ocsf import OCSF
 from prowler.providers.aws.aws_provider import AwsProvider
 from prowler.providers.aws.lib.s3.s3 import S3
@@ -477,6 +481,55 @@ def upload_security_hub_integration(
         return False
 
 
+JIRA_LABEL_PREFIX = "prowler"
+
+
+def build_jira_finding_url(finding_uid: str) -> str:
+    """Build the Prowler UI link for a finding, or "" when no UI base URL is set.
+
+    The link filters by the finding ``uid`` rather than the per-scan record id so
+    it keeps resolving after the finding is seen again in later scans.
+    """
+    base_url = getattr(settings, "UI_BASE_URL", "")
+    if not base_url or not finding_uid:
+        return ""
+    return f"{base_url}/findings?filter[uid]={quote(finding_uid, safe='')}"
+
+
+def build_jira_issue_labels(
+    finding_uid: str, provider: str, severity: str, check_id: str
+) -> list[str]:
+    """Build the deterministic label set written to every Jira issue.
+
+    Labels are prefixed to avoid colliding with customer labels and sanitized so
+    Jira never rejects them; the finding-uid label is what lets a ticket be traced
+    back (or JQL-filtered) to its finding.
+    """
+    raw_labels = [
+        JIRA_LABEL_PREFIX,
+        f"{JIRA_LABEL_PREFIX}-{provider}" if provider else "",
+        f"{JIRA_LABEL_PREFIX}-{severity}" if severity else "",
+        f"{JIRA_LABEL_PREFIX}-{check_id}" if check_id else "",
+        Jira.build_finding_label(finding_uid),
+    ]
+    return Jira.sanitize_labels(raw_labels)
+
+
+def get_tenant_name(tenant_id: str) -> str:
+    """Return the tenant name for the Jira issue "Tenant Info" row, or "" if unknown.
+
+    The name is informational only, so a lookup failure must never block the send.
+    """
+    try:
+        return (
+            Tenant.objects.filter(id=tenant_id).values_list("name", flat=True).first()
+            or ""
+        )
+    except Exception:
+        logger.warning("Could not resolve tenant name for %s", tenant_id)
+        return ""
+
+
 def send_findings_to_jira(
     tenant_id: str,
     integration_id: str,
@@ -487,6 +540,7 @@ def send_findings_to_jira(
     with rls_transaction(tenant_id):
         integration = Integration.objects.get(id=integration_id)
         jira_integration = initialize_prowler_integration(integration)
+        tenant_info = get_tenant_name(tenant_id)
 
     num_tickets_created = 0
     error_messages = []
@@ -519,6 +573,15 @@ def send_findings_to_jira(
             recommendation = remediation.get("recommendation", {})
             remediation_code = remediation.get("code", {})
 
+            provider_type = finding_instance.scan.provider.provider
+            issue_labels = build_jira_issue_labels(
+                finding_uid=finding_instance.uid,
+                provider=provider_type,
+                severity=finding_instance.severity,
+                check_id=finding_instance.check_id,
+            )
+            finding_url = build_jira_finding_url(finding_instance.uid)
+
             try:
                 # Send the individual finding to Jira
                 result = jira_integration.send_finding(
@@ -527,7 +590,7 @@ def send_findings_to_jira(
                     severity=finding_instance.severity,
                     status=finding_instance.status,
                     status_extended=finding_instance.status_extended or "",
-                    provider=finding_instance.scan.provider.provider,
+                    provider=provider_type,
                     region=region,
                     resource_uid=resource_uid,
                     resource_name=resource_name,
@@ -542,6 +605,9 @@ def send_findings_to_jira(
                     compliance=finding_instance.compliance or {},
                     project_key=project_key,
                     issue_type=issue_type,
+                    issue_labels=issue_labels,
+                    finding_url=finding_url,
+                    tenant_info=tenant_info,
                 )
             except JiraBaseException as error:
                 error_message = error.message or JIRA_GENERIC_SEND_ERROR
@@ -557,6 +623,11 @@ def send_findings_to_jira(
 
             if result:
                 num_tickets_created += 1
+                logger.info(
+                    "Finding %s sent to Jira as %s",
+                    finding_id,
+                    result.get("key") if isinstance(result, dict) else result,
+                )
             else:
                 error_message = JIRA_GENERIC_SEND_ERROR
                 logger.error(error_message)
diff --git a/api/src/backend/tasks/tests/test_integrations.py b/api/src/backend/tasks/tests/test_integrations.py
index a95d02fa7f..421fdb992a 100644
--- a/api/src/backend/tasks/tests/test_integrations.py
+++ b/api/src/backend/tasks/tests/test_integrations.py
@@ -6,15 +6,20 @@ from api.db_router import READ_REPLICA_ALIAS, MainRouter
 from api.models import Integration
 from api.utils import prowler_integration_connection_test
 from django.db import OperationalError
+from django.test import override_settings
 from prowler.lib.outputs.jira.exceptions.exceptions import (
     JiraRefreshTokenError,
     JiraRequiredCustomFieldsError,
 )
+from prowler.lib.outputs.jira.jira import Jira
 from prowler.providers.aws.lib.security_hub.security_hub import SecurityHubConnection
 from prowler.providers.common.models import Connection
 from tasks.jobs.integrations import (
+    build_jira_finding_url,
+    build_jira_issue_labels,
     get_s3_client_from_integration,
     get_security_hub_client_from_integration,
+    get_tenant_name,
     send_findings_to_jira,
     upload_s3_integration,
     upload_security_hub_integration,
@@ -1696,6 +1701,7 @@ class TestJiraIntegration:
 
         finding1 = MagicMock()
         finding1.id = "finding-1"
+        finding1.uid = "prowler-aws-check_001-123456789012-us-east-1-my bucket"
         finding1.check_id = "check_001"
         finding1.severity = "high"
         finding1.status = "FAIL"
@@ -1724,6 +1730,7 @@ class TestJiraIntegration:
 
         finding2 = MagicMock()
         finding2.id = "finding-2"
+        finding2.uid = "prowler-azure-check_002-sub/resource"
         finding2.check_id = "check_002"
         finding2.severity = "medium"
         finding2.status = "PASS"
@@ -1748,9 +1755,13 @@ class TestJiraIntegration:
         ]
 
         # Call the function
-        result = send_findings_to_jira(
-            tenant_id, integration_id, project_key, issue_type, finding_ids
-        )
+        with (
+            override_settings(UI_BASE_URL="https://cloud.example.com"),
+            patch("tasks.jobs.integrations.get_tenant_name", return_value="Acme"),
+        ):
+            result = send_findings_to_jira(
+                tenant_id, integration_id, project_key, issue_type, finding_ids
+            )
 
         # Assertions
         assert result == {"created_count": 2, "failed_count": 0}
@@ -1773,12 +1784,36 @@ class TestJiraIntegration:
         assert first_call.kwargs["provider"] == "aws"
         assert first_call.kwargs["project_key"] == project_key
         assert first_call.kwargs["issue_type"] == issue_type
+        # Finding reference: labels, link back and tenant info
+        assert first_call.kwargs["issue_labels"] == [
+            "prowler",
+            "prowler-aws",
+            "prowler-high",
+            "prowler-check_001",
+            "prowler-finding-prowler-aws-check_001-123456789012-us-east-1-my_bucket",
+        ]
+        assert first_call.kwargs["finding_url"] == (
+            "https://cloud.example.com/findings?filter[uid]="
+            "prowler-aws-check_001-123456789012-us-east-1-my%20bucket"
+        )
+        assert first_call.kwargs["tenant_info"] == "Acme"
 
         # Verify second call
         second_call = mock_jira_integration.send_finding.call_args_list[1]
         assert second_call.kwargs["check_id"] == "check_002"
         assert second_call.kwargs["severity"] == "medium"
         assert second_call.kwargs["status"] == "PASS"
+        assert second_call.kwargs["issue_labels"] == [
+            "prowler",
+            "prowler-azure",
+            "prowler-medium",
+            "prowler-check_002",
+            "prowler-finding-prowler-azure-check_002-sub/resource",
+        ]
+        assert second_call.kwargs["finding_url"] == (
+            "https://cloud.example.com/findings?filter[uid]="
+            "prowler-azure-check_002-sub%2Fresource"
+        )
 
     @patch("tasks.jobs.integrations.rls_transaction")
     @patch("tasks.jobs.integrations.Finding")
@@ -2200,3 +2235,101 @@ class TestJiraIntegration:
         assert call_kwargs["remediation_code_cli"] == ""
         assert call_kwargs["remediation_code_other"] == ""
         assert call_kwargs["compliance"] == {}
+
+
+class TestJiraFindingReference:
+    """Helpers that give Jira issues a stable reference back to the finding."""
+
+    def test_build_jira_issue_labels(self):
+        assert build_jira_issue_labels(
+            finding_uid="prowler-aws-check-123-eu-west-1-hub/unknown",
+            provider="aws",
+            severity="critical",
+            check_id="iam_root_mfa",
+        ) == [
+            "prowler",
+            "prowler-aws",
+            "prowler-critical",
+            "prowler-iam_root_mfa",
+            "prowler-finding-prowler-aws-check-123-eu-west-1-hub/unknown",
+        ]
+
+    def test_build_jira_issue_labels_skips_empty_parts(self):
+        assert build_jira_issue_labels(
+            finding_uid="", provider="", severity="", check_id=""
+        ) == ["prowler"]
+
+    def test_build_jira_issue_labels_sanitizes_metadata(self):
+        assert build_jira_issue_labels(
+            finding_uid=" uid\x00 with spaces ",
+            provider="aws cloud",
+            severity="high severity",
+            check_id="check id",
+        ) == [
+            "prowler",
+            "prowler-aws_cloud",
+            "prowler-high_severity",
+            "prowler-check_id",
+            "prowler-finding-uid_with_spaces",
+        ]
+
+    def test_build_jira_issue_labels_preserves_maximum_length_uid(self):
+        finding_uid = "u" * (Jira.LABEL_MAX_LENGTH - len(Jira.FINDING_LABEL_PREFIX) - 1)
+        finding_label = build_jira_issue_labels(
+            finding_uid=finding_uid,
+            provider="gcp",
+            severity="low",
+            check_id="check",
+        )[-1]
+
+        assert finding_label == f"{Jira.FINDING_LABEL_PREFIX}-{finding_uid}"
+        assert len(finding_label) == Jira.LABEL_MAX_LENGTH
+
+    def test_build_jira_issue_labels_distinguishes_long_uids(self):
+        common_prefix = "u" * 300
+        first_uid = f"{common_prefix}-first"
+        second_uid = f"{common_prefix}-second"
+
+        first_label = build_jira_issue_labels(
+            finding_uid=first_uid,
+            provider="gcp",
+            severity="low",
+            check_id="check",
+        )[-1]
+        second_label = build_jira_issue_labels(
+            finding_uid=second_uid,
+            provider="gcp",
+            severity="low",
+            check_id="check",
+        )[-1]
+
+        assert first_label == Jira.build_finding_label(first_uid)
+        assert second_label == Jira.build_finding_label(second_uid)
+        assert first_label != second_label
+        assert len(first_label) == Jira.LABEL_MAX_LENGTH
+        assert len(second_label) == Jira.LABEL_MAX_LENGTH
+
+    @override_settings(UI_BASE_URL="")
+    def test_build_jira_finding_url_without_base_url(self):
+        assert build_jira_finding_url("prowler-aws-check-1") == ""
+
+    @override_settings(UI_BASE_URL="https://cloud.example.com")
+    def test_build_jira_finding_url_with_base_url(self):
+        assert build_jira_finding_url("prowler-aws-check-1") == (
+            "https://cloud.example.com/findings?filter[uid]=prowler-aws-check-1"
+        )
+        # uid characters that would break the query string are encoded
+        assert build_jira_finding_url("a/b c&d") == (
+            "https://cloud.example.com/findings?filter[uid]=a%2Fb%20c%26d"
+        )
+        assert build_jira_finding_url("") == ""
+
+    @pytest.mark.django_db
+    def test_get_tenant_name(self, tenants_fixture):
+        tenant = tenants_fixture[0]
+        assert get_tenant_name(str(tenant.id)) == tenant.name
+
+    @pytest.mark.django_db
+    def test_get_tenant_name_unknown_or_invalid(self):
+        assert get_tenant_name("00000000-0000-0000-0000-000000000000") == ""
+        assert get_tenant_name("not-a-uuid") == ""
diff --git a/api/uv.lock b/api/uv.lock
index 079bc91c8f..f412da19a6 100644
--- a/api/uv.lock
+++ b/api/uv.lock
@@ -4835,8 +4835,8 @@ wheels = [
 
 [[package]]
 name = "prowler"
-version = "5.40.0"
-source = { git = "https://github.com/prowler-cloud/prowler.git?rev=master#b6e9967da6bebd6c7b8b237317a2a95e2e0c65bc" }
+version = "5.41.0"
+source = { git = "https://github.com/prowler-cloud/prowler.git?rev=master#f05a490cd74a2c0f11a5d66d8ce29d03fa5c64a2" }
 dependencies = [
     { name = "alibabacloud-actiontrail20200706" },
     { name = "alibabacloud-credentials" },
@@ -4928,9 +4928,12 @@ dependencies = [
     { name = "stackit-iaas" },
     { name = "stackit-objectstorage" },
     { name = "stackit-resourcemanager" },
+    { name = "stackit-ske" },
     { name = "tabulate" },
+    { name = "truststore" },
     { name = "tzlocal" },
     { name = "uuid6" },
+    { name = "zstandard" },
 ]
 
 [[package]]
@@ -6117,6 +6120,21 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/c7/9c/38a74d0f7a89b4320f6d2366fb660638bda8860daa08748b12c713d84381/stackit_resourcemanager-0.8.0-py3-none-any.whl", hash = "sha256:dd04bb8353d041a137c4dcba190beabded7acfaff1bc98b218fce20a99389ebc", size = 81288, upload-time = "2026-05-13T09:43:07.81Z" },
 ]
 
+[[package]]
+name = "stackit-ske"
+version = "1.12.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "pydantic" },
+    { name = "python-dateutil" },
+    { name = "requests" },
+    { name = "stackit-core" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/cd/9e/df3ad585cb96d028354f4253568e9879d81bb9395d5ebfa268fa9350e2df/stackit_ske-1.12.0.tar.gz", hash = "sha256:62814279f3b7fb2387648f92d14453a8905ad60115c07579f2741ddb7d1fcc94", size = 37239, upload-time = "2026-06-30T11:18:49.39Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/00/37/dc54fb7185a2d4da37308322ea1a7b992312030b2e37262de4eb4003f5c7/stackit_ske-1.12.0-py3-none-any.whl", hash = "sha256:45bd8084d87f14f818b3d7e824450248c8784ed204ca1b2dc108f491dcbdb1a3", size = 93142, upload-time = "2026-06-30T11:18:48.233Z" },
+]
+
 [[package]]
 name = "statsd"
 version = "4.0.1"
@@ -6225,6 +6243,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/d0/30/dc54f88dd4a2b5dc8a0279bdd7270e735851848b762aeb1c1184ed1f6b14/tqdm-4.67.1-py3-none-any.whl", hash = "sha256:26445eca388f82e72884e0d580d5464cd801a3ea01e63e5601bdff9ba6a48de2", size = 78540, upload-time = "2024-11-24T20:12:19.698Z" },
 ]
 
+[[package]]
+name = "truststore"
+version = "0.10.4"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/53/a3/1585216310e344e8102c22482f6060c7a6ea0322b63e026372e6dcefcfd6/truststore-0.10.4.tar.gz", hash = "sha256:9d91bd436463ad5e4ee4aba766628dd6cd7010cf3e2461756b3303710eebc301", size = 26169, upload-time = "2025-08-12T18:49:02.73Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/19/97/56608b2249fe206a67cd573bc93cd9896e1efb9e98bce9c163bcdc704b88/truststore-0.10.4-py3-none-any.whl", hash = "sha256:adaeaecf1cbb5f4de3b1959b42d41f6fab57b2b1666adb59e89cb0b53361d981", size = 18660, upload-time = "2025-08-12T18:49:01.46Z" },
+]
+
 [[package]]
 name = "typer"
 version = "0.21.1"
@@ -6621,6 +6648,48 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/4a/81/2f171fbc4222066957e6b9220c4fb9146792540102c37e6d94e5d14aad97/zope_interface-8.2-cp312-cp312-win_amd64.whl", hash = "sha256:845d14e580220ae4544bd4d7eb800f0b6034fe5585fc2536806e0a26c2ee6640", size = 212444, upload-time = "2026-01-09T08:05:25.148Z" },
 ]
 
+[[package]]
+name = "zstandard"
+version = "0.25.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/fd/aa/3e0508d5a5dd96529cdc5a97011299056e14c6505b678fd58938792794b1/zstandard-0.25.0.tar.gz", hash = "sha256:7713e1179d162cf5c7906da876ec2ccb9c3a9dcbdffef0cc7f70c3667a205f0b", size = 711513, upload-time = "2025-09-14T22:15:54.002Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/2a/83/c3ca27c363d104980f1c9cee1101cc8ba724ac8c28a033ede6aab89585b1/zstandard-0.25.0-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:933b65d7680ea337180733cf9e87293cc5500cc0eb3fc8769f4d3c88d724ec5c", size = 795254, upload-time = "2025-09-14T22:16:26.137Z" },
+    { url = "https://files.pythonhosted.org/packages/ac/4d/e66465c5411a7cf4866aeadc7d108081d8ceba9bc7abe6b14aa21c671ec3/zstandard-0.25.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:a3f79487c687b1fc69f19e487cd949bf3aae653d181dfb5fde3bf6d18894706f", size = 640559, upload-time = "2025-09-14T22:16:27.973Z" },
+    { url = "https://files.pythonhosted.org/packages/12/56/354fe655905f290d3b147b33fe946b0f27e791e4b50a5f004c802cb3eb7b/zstandard-0.25.0-cp311-cp311-manylinux2010_i686.manylinux2014_i686.manylinux_2_12_i686.manylinux_2_17_i686.whl", hash = "sha256:0bbc9a0c65ce0eea3c34a691e3c4b6889f5f3909ba4822ab385fab9057099431", size = 5348020, upload-time = "2025-09-14T22:16:29.523Z" },
+    { url = "https://files.pythonhosted.org/packages/3b/13/2b7ed68bd85e69a2069bcc72141d378f22cae5a0f3b353a2c8f50ef30c1b/zstandard-0.25.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:01582723b3ccd6939ab7b3a78622c573799d5d8737b534b86d0e06ac18dbde4a", size = 5058126, upload-time = "2025-09-14T22:16:31.811Z" },
+    { url = "https://files.pythonhosted.org/packages/c9/dd/fdaf0674f4b10d92cb120ccff58bbb6626bf8368f00ebfd2a41ba4a0dc99/zstandard-0.25.0-cp311-cp311-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl", hash = "sha256:5f1ad7bf88535edcf30038f6919abe087f606f62c00a87d7e33e7fc57cb69fcc", size = 5405390, upload-time = "2025-09-14T22:16:33.486Z" },
+    { url = "https://files.pythonhosted.org/packages/0f/67/354d1555575bc2490435f90d67ca4dd65238ff2f119f30f72d5cde09c2ad/zstandard-0.25.0-cp311-cp311-manylinux2014_s390x.manylinux_2_17_s390x.whl", hash = "sha256:06acb75eebeedb77b69048031282737717a63e71e4ae3f77cc0c3b9508320df6", size = 5452914, upload-time = "2025-09-14T22:16:35.277Z" },
+    { url = "https://files.pythonhosted.org/packages/bb/1f/e9cfd801a3f9190bf3e759c422bbfd2247db9d7f3d54a56ecde70137791a/zstandard-0.25.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:9300d02ea7c6506f00e627e287e0492a5eb0371ec1670ae852fefffa6164b072", size = 5559635, upload-time = "2025-09-14T22:16:37.141Z" },
+    { url = "https://files.pythonhosted.org/packages/21/88/5ba550f797ca953a52d708c8e4f380959e7e3280af029e38fbf47b55916e/zstandard-0.25.0-cp311-cp311-musllinux_1_1_aarch64.whl", hash = "sha256:bfd06b1c5584b657a2892a6014c2f4c20e0db0208c159148fa78c65f7e0b0277", size = 5048277, upload-time = "2025-09-14T22:16:38.807Z" },
+    { url = "https://files.pythonhosted.org/packages/46/c0/ca3e533b4fa03112facbe7fbe7779cb1ebec215688e5df576fe5429172e0/zstandard-0.25.0-cp311-cp311-musllinux_1_1_x86_64.whl", hash = "sha256:f373da2c1757bb7f1acaf09369cdc1d51d84131e50d5fa9863982fd626466313", size = 5574377, upload-time = "2025-09-14T22:16:40.523Z" },
+    { url = "https://files.pythonhosted.org/packages/12/9b/3fb626390113f272abd0799fd677ea33d5fc3ec185e62e6be534493c4b60/zstandard-0.25.0-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:6c0e5a65158a7946e7a7affa6418878ef97ab66636f13353b8502d7ea03c8097", size = 4961493, upload-time = "2025-09-14T22:16:43.3Z" },
+    { url = "https://files.pythonhosted.org/packages/cb/d3/23094a6b6a4b1343b27ae68249daa17ae0651fcfec9ed4de09d14b940285/zstandard-0.25.0-cp311-cp311-musllinux_1_2_i686.whl", hash = "sha256:c8e167d5adf59476fa3e37bee730890e389410c354771a62e3c076c86f9f7778", size = 5269018, upload-time = "2025-09-14T22:16:45.292Z" },
+    { url = "https://files.pythonhosted.org/packages/8c/a7/bb5a0c1c0f3f4b5e9d5b55198e39de91e04ba7c205cc46fcb0f95f0383c1/zstandard-0.25.0-cp311-cp311-musllinux_1_2_ppc64le.whl", hash = "sha256:98750a309eb2f020da61e727de7d7ba3c57c97cf6213f6f6277bb7fb42a8e065", size = 5443672, upload-time = "2025-09-14T22:16:47.076Z" },
+    { url = "https://files.pythonhosted.org/packages/27/22/503347aa08d073993f25109c36c8d9f029c7d5949198050962cb568dfa5e/zstandard-0.25.0-cp311-cp311-musllinux_1_2_s390x.whl", hash = "sha256:22a086cff1b6ceca18a8dd6096ec631e430e93a8e70a9ca5efa7561a00f826fa", size = 5822753, upload-time = "2025-09-14T22:16:49.316Z" },
+    { url = "https://files.pythonhosted.org/packages/e2/be/94267dc6ee64f0f8ba2b2ae7c7a2df934a816baaa7291db9e1aa77394c3c/zstandard-0.25.0-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:72d35d7aa0bba323965da807a462b0966c91608ef3a48ba761678cb20ce5d8b7", size = 5366047, upload-time = "2025-09-14T22:16:51.328Z" },
+    { url = "https://files.pythonhosted.org/packages/7b/a3/732893eab0a3a7aecff8b99052fecf9f605cf0fb5fb6d0290e36beee47a4/zstandard-0.25.0-cp311-cp311-win32.whl", hash = "sha256:f5aeea11ded7320a84dcdd62a3d95b5186834224a9e55b92ccae35d21a8b63d4", size = 436484, upload-time = "2025-09-14T22:16:55.005Z" },
+    { url = "https://files.pythonhosted.org/packages/43/a3/c6155f5c1cce691cb80dfd38627046e50af3ee9ddc5d0b45b9b063bfb8c9/zstandard-0.25.0-cp311-cp311-win_amd64.whl", hash = "sha256:daab68faadb847063d0c56f361a289c4f268706b598afbf9ad113cbe5c38b6b2", size = 506183, upload-time = "2025-09-14T22:16:52.753Z" },
+    { url = "https://files.pythonhosted.org/packages/8c/3e/8945ab86a0820cc0e0cdbf38086a92868a9172020fdab8a03ac19662b0e5/zstandard-0.25.0-cp311-cp311-win_arm64.whl", hash = "sha256:22a06c5df3751bb7dc67406f5374734ccee8ed37fc5981bf1ad7041831fa1137", size = 462533, upload-time = "2025-09-14T22:16:53.878Z" },
+    { url = "https://files.pythonhosted.org/packages/82/fc/f26eb6ef91ae723a03e16eddb198abcfce2bc5a42e224d44cc8b6765e57e/zstandard-0.25.0-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:7b3c3a3ab9daa3eed242d6ecceead93aebbb8f5f84318d82cee643e019c4b73b", size = 795738, upload-time = "2025-09-14T22:16:56.237Z" },
+    { url = "https://files.pythonhosted.org/packages/aa/1c/d920d64b22f8dd028a8b90e2d756e431a5d86194caa78e3819c7bf53b4b3/zstandard-0.25.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:913cbd31a400febff93b564a23e17c3ed2d56c064006f54efec210d586171c00", size = 640436, upload-time = "2025-09-14T22:16:57.774Z" },
+    { url = "https://files.pythonhosted.org/packages/53/6c/288c3f0bd9fcfe9ca41e2c2fbfd17b2097f6af57b62a81161941f09afa76/zstandard-0.25.0-cp312-cp312-manylinux2010_i686.manylinux2014_i686.manylinux_2_12_i686.manylinux_2_17_i686.whl", hash = "sha256:011d388c76b11a0c165374ce660ce2c8efa8e5d87f34996aa80f9c0816698b64", size = 5343019, upload-time = "2025-09-14T22:16:59.302Z" },
+    { url = "https://files.pythonhosted.org/packages/1e/15/efef5a2f204a64bdb5571e6161d49f7ef0fffdbca953a615efbec045f60f/zstandard-0.25.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:6dffecc361d079bb48d7caef5d673c88c8988d3d33fb74ab95b7ee6da42652ea", size = 5063012, upload-time = "2025-09-14T22:17:01.156Z" },
+    { url = "https://files.pythonhosted.org/packages/b7/37/a6ce629ffdb43959e92e87ebdaeebb5ac81c944b6a75c9c47e300f85abdf/zstandard-0.25.0-cp312-cp312-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl", hash = "sha256:7149623bba7fdf7e7f24312953bcf73cae103db8cae49f8154dd1eadc8a29ecb", size = 5394148, upload-time = "2025-09-14T22:17:03.091Z" },
+    { url = "https://files.pythonhosted.org/packages/e3/79/2bf870b3abeb5c070fe2d670a5a8d1057a8270f125ef7676d29ea900f496/zstandard-0.25.0-cp312-cp312-manylinux2014_s390x.manylinux_2_17_s390x.whl", hash = "sha256:6a573a35693e03cf1d67799fd01b50ff578515a8aeadd4595d2a7fa9f3ec002a", size = 5451652, upload-time = "2025-09-14T22:17:04.979Z" },
+    { url = "https://files.pythonhosted.org/packages/53/60/7be26e610767316c028a2cbedb9a3beabdbe33e2182c373f71a1c0b88f36/zstandard-0.25.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:5a56ba0db2d244117ed744dfa8f6f5b366e14148e00de44723413b2f3938a902", size = 5546993, upload-time = "2025-09-14T22:17:06.781Z" },
+    { url = "https://files.pythonhosted.org/packages/85/c7/3483ad9ff0662623f3648479b0380d2de5510abf00990468c286c6b04017/zstandard-0.25.0-cp312-cp312-musllinux_1_1_aarch64.whl", hash = "sha256:10ef2a79ab8e2974e2075fb984e5b9806c64134810fac21576f0668e7ea19f8f", size = 5046806, upload-time = "2025-09-14T22:17:08.415Z" },
+    { url = "https://files.pythonhosted.org/packages/08/b3/206883dd25b8d1591a1caa44b54c2aad84badccf2f1de9e2d60a446f9a25/zstandard-0.25.0-cp312-cp312-musllinux_1_1_x86_64.whl", hash = "sha256:aaf21ba8fb76d102b696781bddaa0954b782536446083ae3fdaa6f16b25a1c4b", size = 5576659, upload-time = "2025-09-14T22:17:10.164Z" },
+    { url = "https://files.pythonhosted.org/packages/9d/31/76c0779101453e6c117b0ff22565865c54f48f8bd807df2b00c2c404b8e0/zstandard-0.25.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:1869da9571d5e94a85a5e8d57e4e8807b175c9e4a6294e3b66fa4efb074d90f6", size = 4953933, upload-time = "2025-09-14T22:17:11.857Z" },
+    { url = "https://files.pythonhosted.org/packages/18/e1/97680c664a1bf9a247a280a053d98e251424af51f1b196c6d52f117c9720/zstandard-0.25.0-cp312-cp312-musllinux_1_2_i686.whl", hash = "sha256:809c5bcb2c67cd0ed81e9229d227d4ca28f82d0f778fc5fea624a9def3963f91", size = 5268008, upload-time = "2025-09-14T22:17:13.627Z" },
+    { url = "https://files.pythonhosted.org/packages/1e/73/316e4010de585ac798e154e88fd81bb16afc5c5cb1a72eeb16dd37e8024a/zstandard-0.25.0-cp312-cp312-musllinux_1_2_ppc64le.whl", hash = "sha256:f27662e4f7dbf9f9c12391cb37b4c4c3cb90ffbd3b1fb9284dadbbb8935fa708", size = 5433517, upload-time = "2025-09-14T22:17:16.103Z" },
+    { url = "https://files.pythonhosted.org/packages/5b/60/dd0f8cfa8129c5a0ce3ea6b7f70be5b33d2618013a161e1ff26c2b39787c/zstandard-0.25.0-cp312-cp312-musllinux_1_2_s390x.whl", hash = "sha256:99c0c846e6e61718715a3c9437ccc625de26593fea60189567f0118dc9db7512", size = 5814292, upload-time = "2025-09-14T22:17:17.827Z" },
+    { url = "https://files.pythonhosted.org/packages/fc/5f/75aafd4b9d11b5407b641b8e41a57864097663699f23e9ad4dbb91dc6bfe/zstandard-0.25.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:474d2596a2dbc241a556e965fb76002c1ce655445e4e3bf38e5477d413165ffa", size = 5360237, upload-time = "2025-09-14T22:17:19.954Z" },
+    { url = "https://files.pythonhosted.org/packages/ff/8d/0309daffea4fcac7981021dbf21cdb2e3427a9e76bafbcdbdf5392ff99a4/zstandard-0.25.0-cp312-cp312-win32.whl", hash = "sha256:23ebc8f17a03133b4426bcc04aabd68f8236eb78c3760f12783385171b0fd8bd", size = 436922, upload-time = "2025-09-14T22:17:24.398Z" },
+    { url = "https://files.pythonhosted.org/packages/79/3b/fa54d9015f945330510cb5d0b0501e8253c127cca7ebe8ba46a965df18c5/zstandard-0.25.0-cp312-cp312-win_amd64.whl", hash = "sha256:ffef5a74088f1e09947aecf91011136665152e0b4b359c42be3373897fb39b01", size = 506276, upload-time = "2025-09-14T22:17:21.429Z" },
+    { url = "https://files.pythonhosted.org/packages/ea/6b/8b51697e5319b1f9ac71087b0af9a40d8a6288ff8025c36486e0c12abcc4/zstandard-0.25.0-cp312-cp312-win_arm64.whl", hash = "sha256:181eb40e0b6a29b3cd2849f825e0fa34397f649170673d385f3598ae17cca2e9", size = 462679, upload-time = "2025-09-14T22:17:23.147Z" },
+]
+
 [[package]]
 name = "zstd"
 version = "1.5.7.2"
diff --git a/docs/user-guide/tutorials/prowler-app-jira-integration.mdx b/docs/user-guide/tutorials/prowler-app-jira-integration.mdx
index 27832352f5..bc9fdeb504 100644
--- a/docs/user-guide/tutorials/prowler-app-jira-integration.mdx
+++ b/docs/user-guide/tutorials/prowler-app-jira-integration.mdx
@@ -124,6 +124,18 @@ To manually send individual Findings to Jira:
 
     ![Send to Jira modal](/images/prowler-app/jira/send-to-jira-modal.png)
 
+### Finding Reference in the Jira Issue
+
+<VersionBadge version="5.41.0" />
+
+Every Jira issue created from a single Finding carries a stable reference back to that Finding, so issues can be filtered, searched with Jira Query Language (JQL), or matched by automation:
+
+* **Labels**: `prowler`, `prowler-<provider>`, `prowler-<severity>`, `prowler-<check-id>` and `prowler-finding-<finding-uid>`. Labels are sanitized deterministically: whitespace becomes `_`, control characters are removed, and values are truncated to Jira's 255-character label limit.
+* **Finding URL**: a link that opens the Finding in Prowler, filtered by its unique identifier (UID) so it keeps working after later scans.
+* **Tenant Info**: the name of the Prowler organization that sent the Finding.
+
+Prowler Cloud always includes the Finding URL. In Prowler Local Server, set `DJANGO_UI_BASE_URL` in the API environment (for example, `https://prowler.example.com`) to enable it. When the variable is empty, the issue is created without the link.
+
 ## Integration Status
 
 Monitor and manage your Jira integrations through the management interface:

From 6422178b76da904b1ecdeb30171050a686e328a1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Mon, 31 Aug 2026 18:13:30 +0200
Subject: [PATCH 10/77] feat(sdk): AWS partition selection via
 PROWLER_AWS_PARTITION (#12680)

Co-authored-by: David <david.copo@gmail.com>
---
 .../aws-partition-env-var.added.md            |   1 +
 prowler/providers/aws/aws_provider.py         | 134 ++++++++-
 tests/providers/aws/aws_provider_test.py      | 256 ++++++++++++++++++
 3 files changed, 380 insertions(+), 11 deletions(-)
 create mode 100644 prowler/changelog.d/aws-partition-env-var.added.md

diff --git a/prowler/changelog.d/aws-partition-env-var.added.md b/prowler/changelog.d/aws-partition-env-var.added.md
new file mode 100644
index 0000000000..c94ed6b23d
--- /dev/null
+++ b/prowler/changelog.d/aws-partition-env-var.added.md
@@ -0,0 +1 @@
+`PROWLER_AWS_PARTITION` environment variable to select the AWS partition used for STS credential validation and scan bootstrap, with a clear error when the account belongs to a different partition
diff --git a/prowler/providers/aws/aws_provider.py b/prowler/providers/aws/aws_provider.py
index b4c9ed3771..d6b24c748c 100644
--- a/prowler/providers/aws/aws_provider.py
+++ b/prowler/providers/aws/aws_provider.py
@@ -1,6 +1,7 @@
 import os
 import pathlib
 from datetime import datetime
+from functools import lru_cache
 from re import fullmatch
 from typing import Optional
 
@@ -671,7 +672,12 @@ class AwsProvider(Provider):
             if mfa:
                 session = Session(**session_arguments)
                 session._session.set_default_client_config(session_config)
-                sts_client = session.client("sts")
+                sts_region = (
+                    get_env_partition_bootstrap_region()
+                    or session.region_name
+                    or AWS_STS_GLOBAL_ENDPOINT_REGION
+                )
+                sts_client = AwsProvider.create_sts_session(session, sts_region)
 
                 # TODO: pass values from the input
                 mfa_info = AwsProvider.input_role_mfa_token_and_code()
@@ -1352,7 +1358,7 @@ class AwsProvider(Provider):
     @staticmethod
     def test_connection(
         profile: str = None,
-        aws_region: str = AWS_STS_GLOBAL_ENDPOINT_REGION,
+        aws_region: str = None,
         role_arn: str = None,
         role_session_name: str = ROLE_SESSION_NAME,
         session_duration: int = 3600,
@@ -1369,7 +1375,9 @@ class AwsProvider(Provider):
 
         Args:
             profile (str): The AWS profile to use for the session.
-            aws_region (str): The AWS region to validate the credentials in.
+            aws_region (str): The AWS region to validate the credentials in. When not
+                provided, it defaults to the bootstrap region of the partition set in
+                the PROWLER_AWS_PARTITION environment variable or, if unset, to us-east-1.
             role_arn (str): The ARN of the IAM role to assume.
             role_session_name (str): The name of the role session.
             session_duration (int): The duration of the assumed role session in seconds.
@@ -1412,6 +1420,12 @@ class AwsProvider(Provider):
             Connection(is_connected=True, Error=None))
         """
         try:
+            if aws_region is None:
+                aws_region = (
+                    get_env_partition_bootstrap_region()
+                    or AWS_STS_GLOBAL_ENDPOINT_REGION
+                )
+
             session = AwsProvider.setup_session(
                 mfa=mfa_enabled,
                 profile=profile,
@@ -1430,6 +1444,7 @@ class AwsProvider(Provider):
                     external_id=external_id,
                     mfa_enabled=mfa_enabled,
                     role_session_name=role_session_name,
+                    sts_region=aws_region,
                 )
                 assumed_role_credentials = AwsProvider.assume_role(
                     session,
@@ -1451,6 +1466,13 @@ class AwsProvider(Provider):
             if provider_id and caller_identity.account != provider_id:
                 raise AWSInvalidProviderIdError(file=pathlib.Path(__file__).name)
 
+            # Validate that the account belongs to the configured partition, if any
+            env_partition = os.environ.get("PROWLER_AWS_PARTITION", "").strip()
+            if env_partition and caller_identity.arn.partition != env_partition:
+                raise AWSInvalidPartitionError(
+                    message=f"The AWS account is in the {caller_identity.arn.partition} partition, but this deployment is configured for the {env_partition} partition via PROWLER_AWS_PARTITION"
+                )
+
             return Connection(
                 is_connected=True,
             )
@@ -1591,6 +1613,14 @@ class AwsProvider(Provider):
                 raise session_token_expired
             return Connection(error=session_token_expired)
 
+        except AWSInvalidPartitionError as invalid_partition_error:
+            logger.error(
+                f"{invalid_partition_error.__class__.__name__}[{invalid_partition_error.__traceback__.tb_lineno}]: {invalid_partition_error}"
+            )
+            if raise_on_exception:
+                raise invalid_partition_error
+            return Connection(error=invalid_partition_error)
+
         except Exception as error:
             logger.critical(
                 f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
@@ -1618,14 +1648,9 @@ class AwsProvider(Provider):
             sts_client = create_sts_session(session, 'us-west-2')
         """
         try:
-            if os.environ.get("AWS_ENDPOINT_URL"):
-                sts_endpoint_url = os.environ["AWS_ENDPOINT_URL"]
-            elif aws_region.startswith("cn-"):
-                sts_endpoint_url = f"https://sts.{aws_region}.amazonaws.com.cn"
-            elif aws_region.startswith("eusc-"):
-                sts_endpoint_url = f"https://sts.{aws_region}.amazonaws.eu"
-            else:
-                sts_endpoint_url = f"https://sts.{aws_region}.amazonaws.com"
+            # Botocore resolves the regional STS endpoint for every partition
+            # (China, EUSC, GovCloud, ISO); AWS_ENDPOINT_URL overrides it
+            sts_endpoint_url = os.environ.get("AWS_ENDPOINT_URL") or None
             return session.client("sts", aws_region, endpoint_url=sts_endpoint_url)
         except Exception as error:
             logger.critical(
@@ -1702,6 +1727,80 @@ def read_aws_regions_file() -> dict:
     return data
 
 
+@lru_cache(maxsize=1)
+def get_botocore_partition_regions() -> dict:
+    """
+    Get the AWS partitions and their bootstrap region candidates from the
+    botocore endpoints data.
+
+    The region of the partition's global STS endpoint, when declared, is moved
+    to the front since it is never an opt-in region; the rest are sorted
+    alphabetically.
+
+    Returns:
+        dict: A dictionary mapping each partition name to its list of regions.
+    """
+    endpoints_data = BotocoreSession().get_data("endpoints")
+    partition_regions = {}
+    for partition in endpoints_data["partitions"]:
+        regions = sorted(partition.get("regions", {}))
+        sts_service = partition.get("services", {}).get("sts", {})
+        global_endpoint = sts_service.get("partitionEndpoint")
+        global_region = (
+            sts_service.get("endpoints", {})
+            .get(global_endpoint, {})
+            .get("credentialScope", {})
+            .get("region")
+        )
+        if global_region in regions:
+            regions.remove(global_region)
+            regions.insert(0, global_region)
+        partition_regions[partition["partition"]] = regions
+    return partition_regions
+
+
+def get_env_partition_regions() -> Optional[list]:
+    """
+    Get the bootstrap region candidates for the partition set in the
+    PROWLER_AWS_PARTITION environment variable.
+
+    Returns:
+        Optional[list]: The regions of the configured partition, preferred
+            bootstrap region first, or None when the environment variable is
+            not set.
+
+    Raises:
+        AWSInvalidPartitionError: If the value is not a partition known to botocore.
+    """
+    raw_partition = os.environ.get("PROWLER_AWS_PARTITION", "").strip()
+    if not raw_partition:
+        return None
+
+    partition_regions = get_botocore_partition_regions()
+    regions = partition_regions.get(raw_partition)
+    if not regions:
+        raise AWSInvalidPartitionError(
+            message=f"Invalid partition: {raw_partition} set in PROWLER_AWS_PARTITION. Valid partitions: {', '.join(sorted(partition_regions))}"
+        )
+    return regions
+
+
+def get_env_partition_bootstrap_region() -> Optional[str]:
+    """
+    Get the STS bootstrap region for the partition set in the
+    PROWLER_AWS_PARTITION environment variable.
+
+    Returns:
+        Optional[str]: The preferred bootstrap region of the configured
+            partition, or None when the environment variable is not set.
+
+    Raises:
+        AWSInvalidPartitionError: If the value is not a partition known to botocore.
+    """
+    regions = get_env_partition_regions()
+    return regions[0] if regions else None
+
+
 # TODO: This can be moved to another class since it doesn't need self
 def get_aws_region_for_sts(
     session_region: str,
@@ -1711,6 +1810,10 @@ def get_aws_region_for_sts(
     """
     Get the AWS region for the STS Assume Role operation.
 
+    The precedence is: explicit regions, the partition set in the
+    PROWLER_AWS_PARTITION environment variable, the session region and,
+    finally, the bootstrap region candidates.
+
     Args:
         - session_region (str): The region configured in the AWS session.
         - regions (set[str]): The regions passed with the -f/--region/--filter-region option.
@@ -1730,6 +1833,15 @@ def get_aws_region_for_sts(
             if region not in excluded_regions:
                 return region
 
+    env_partition_regions = get_env_partition_regions()
+    if env_partition_regions:
+        # The configured partition constrains the whole fallback chain: prefer
+        # a non-excluded region, but never leave the partition
+        for region in env_partition_regions:
+            if region not in excluded_regions:
+                return region
+        return env_partition_regions[0]
+
     if session_region and session_region not in excluded_regions:
         return session_region
 
diff --git a/tests/providers/aws/aws_provider_test.py b/tests/providers/aws/aws_provider_test.py
index f874ca8812..4bdb438b99 100644
--- a/tests/providers/aws/aws_provider_test.py
+++ b/tests/providers/aws/aws_provider_test.py
@@ -1783,6 +1783,29 @@ aws:
         assert sts_session._endpoint._endpoint_prefix == "sts"
         assert sts_session._endpoint.host == f"https://sts.{aws_region}.amazonaws.eu"
 
+    @mock_aws
+    def test_create_sts_session_empty_endpoint_url(self):
+        current_session = session.Session()
+        aws_region = AWS_REGION_US_EAST_1
+        with mock.patch.dict(os.environ, {"AWS_ENDPOINT_URL": ""}):
+            sts_session = AwsProvider.create_sts_session(current_session, aws_region)
+
+        assert sts_session._service_model.service_name == "sts"
+        assert sts_session._client_config.region_name == aws_region
+        assert sts_session._endpoint._endpoint_prefix == "sts"
+        assert sts_session._endpoint.host == f"https://sts.{aws_region}.amazonaws.com"
+
+    @mock_aws
+    def test_create_sts_session_iso(self):
+        current_session = session.Session()
+        aws_region = "us-iso-east-1"
+        sts_session = AwsProvider.create_sts_session(current_session, aws_region)
+
+        assert sts_session._service_model.service_name == "sts"
+        assert sts_session._client_config.region_name == aws_region
+        assert sts_session._endpoint._endpoint_prefix == "sts"
+        assert sts_session._endpoint.host == f"https://sts.{aws_region}.c2s.ic.gov"
+
     @mock_aws
     @patch(
         "prowler.lib.check.utils.recover_checks_from_provider",
@@ -2219,6 +2242,239 @@ aws:
             == AWS_REGION_US_EAST_1
         )
 
+    def test_get_aws_region_for_sts_env_partition_gov_cloud(self):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+            clear=False,
+        ):
+            assert get_aws_region_for_sts(None, None) == AWS_REGION_GOV_CLOUD_US_EAST_1
+
+    def test_get_aws_region_for_sts_env_partition_china(self):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_CHINA_PARTITION},
+            clear=False,
+        ):
+            assert get_aws_region_for_sts(None, None) == AWS_REGION_CN_NORTH_1
+
+    def test_get_aws_region_for_sts_env_partition_eusc(self):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_EUSC_PARTITION},
+            clear=False,
+        ):
+            assert get_aws_region_for_sts(None, None) == AWS_REGION_EUSC_DE_EAST_1
+
+    def test_get_aws_region_for_sts_env_partition_iso(self):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_ISO_PARTITION},
+            clear=False,
+        ):
+            assert get_aws_region_for_sts(None, None) == "us-iso-east-1"
+
+    def test_get_aws_region_for_sts_env_partition_overrides_session_region(self):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+            clear=False,
+        ):
+            assert (
+                get_aws_region_for_sts(AWS_REGION_EU_WEST_1, None)
+                == AWS_REGION_GOV_CLOUD_US_EAST_1
+            )
+
+    def test_get_aws_region_for_sts_input_regions_take_precedence_over_env_partition(
+        self,
+    ):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+            clear=False,
+        ):
+            assert (
+                get_aws_region_for_sts(None, {AWS_REGION_EU_WEST_1})
+                == AWS_REGION_EU_WEST_1
+            )
+
+    def test_get_aws_region_for_sts_env_partition_invalid_raises(self):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": "aws-invalid"},
+            clear=False,
+        ):
+            with pytest.raises(AWSInvalidPartitionError):
+                get_aws_region_for_sts(None, None)
+
+    @mock_aws
+    def test_test_connection_uses_env_partition_sts_region(self):
+        with (
+            mock.patch.dict(
+                os.environ,
+                {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+                clear=False,
+            ),
+            mock.patch.object(
+                AwsProvider,
+                "validate_credentials",
+                return_value=AWSCallerIdentity(
+                    user_id="test-user-id",
+                    account=AWS_ACCOUNT_NUMBER,
+                    arn=ARN(AWS_GOV_CLOUD_ACCOUNT_ARN),
+                    region=AWS_REGION_GOV_CLOUD_US_EAST_1,
+                ),
+            ) as mock_validate_credentials,
+        ):
+            connection = AwsProvider.test_connection(
+                aws_access_key_id="test-access-key",
+                aws_secret_access_key="test-secret-key",
+                raise_on_exception=False,
+            )
+
+            assert connection.is_connected
+            assert (
+                mock_validate_credentials.call_args.args[1]
+                == AWS_REGION_GOV_CLOUD_US_EAST_1
+            )
+
+    @mock_aws
+    def test_test_connection_role_uses_env_partition_sts_region(self):
+        with (
+            mock.patch.dict(
+                os.environ,
+                {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+                clear=False,
+            ),
+            mock.patch.object(
+                AwsProvider,
+                "assume_role",
+                return_value=AWSCredentials(
+                    aws_access_key_id="assumed-access-key",
+                    aws_secret_access_key="assumed-secret-key",
+                    aws_session_token="assumed-session-token",
+                    expiration=datetime.now(),
+                ),
+            ) as mock_assume_role,
+            mock.patch.object(
+                AwsProvider,
+                "validate_credentials",
+                return_value=AWSCallerIdentity(
+                    user_id="test-user-id",
+                    account=AWS_ACCOUNT_NUMBER,
+                    arn=ARN(AWS_GOV_CLOUD_ACCOUNT_ARN),
+                    region=AWS_REGION_GOV_CLOUD_US_EAST_1,
+                ),
+            ),
+        ):
+            connection = AwsProvider.test_connection(
+                role_arn=f"arn:{AWS_GOV_CLOUD_PARTITION}:iam::{AWS_ACCOUNT_NUMBER}:role/test-role",
+                aws_access_key_id="test-access-key",
+                aws_secret_access_key="test-secret-key",
+                raise_on_exception=False,
+            )
+
+            assert connection.is_connected
+            assumed_role_info = mock_assume_role.call_args.args[1]
+            assert assumed_role_info.sts_region == AWS_REGION_GOV_CLOUD_US_EAST_1
+
+    def test_get_aws_region_for_sts_env_partition_commercial(self):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_COMMERCIAL_PARTITION},
+            clear=False,
+        ):
+            assert get_aws_region_for_sts(None, None) == AWS_REGION_US_EAST_1
+
+    def test_get_aws_region_for_sts_env_partition_excluded_region_stays_in_partition(
+        self,
+    ):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+            clear=False,
+        ):
+            assert (
+                get_aws_region_for_sts(None, None, {AWS_REGION_GOV_CLOUD_US_EAST_1})
+                == "us-gov-west-1"
+            )
+
+    def test_get_aws_region_for_sts_env_partition_all_regions_excluded_stays_in_partition(
+        self,
+    ):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+            clear=False,
+        ):
+            assert (
+                get_aws_region_for_sts(
+                    None, None, {AWS_REGION_GOV_CLOUD_US_EAST_1, "us-gov-west-1"}
+                )
+                == AWS_REGION_GOV_CLOUD_US_EAST_1
+            )
+
+    @mock_aws
+    def test_setup_session_mfa_uses_env_partition_sts_region(self):
+        with (
+            mock.patch.dict(
+                os.environ,
+                {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+                clear=False,
+            ),
+            mock.patch.object(
+                AwsProvider,
+                "input_role_mfa_token_and_code",
+                return_value=AWSMFAInfo(
+                    arn=f"arn:{AWS_GOV_CLOUD_PARTITION}:iam::{AWS_ACCOUNT_NUMBER}:mfa/test",
+                    totp="123456",
+                ),
+            ),
+            mock.patch.object(
+                AwsProvider,
+                "create_sts_session",
+                side_effect=AwsProvider.create_sts_session,
+            ) as mock_create_sts_session,
+        ):
+            AwsProvider.setup_session(
+                mfa=True,
+                aws_access_key_id="test-access-key",
+                aws_secret_access_key="test-secret-key",
+            )
+
+            assert (
+                mock_create_sts_session.call_args.args[1]
+                == AWS_REGION_GOV_CLOUD_US_EAST_1
+            )
+
+    @mock_aws
+    def test_test_connection_env_partition_mismatch(self):
+        with (
+            mock.patch.dict(
+                os.environ,
+                {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+                clear=False,
+            ),
+            mock.patch.object(
+                AwsProvider,
+                "validate_credentials",
+                return_value=AWSCallerIdentity(
+                    user_id="test-user-id",
+                    account=AWS_ACCOUNT_NUMBER,
+                    arn=ARN(AWS_ACCOUNT_ARN),
+                    region=AWS_REGION_US_EAST_1,
+                ),
+            ),
+        ):
+            connection = AwsProvider.test_connection(
+                aws_access_key_id="test-access-key",
+                aws_secret_access_key="test-secret-key",
+                raise_on_exception=False,
+            )
+
+            assert not connection.is_connected
+            assert isinstance(connection.error, AWSInvalidPartitionError)
+
     def test_get_profile_region_avoids_excluded_session_region(self):
         mocked_session = mock.Mock(region_name=AWS_REGION_EU_WEST_1)
 

From ceb601028ed5f985181d75c371e95dde68ced9a3 Mon Sep 17 00:00:00 2001
From: "Pablo Fernandez Guerra (PFE)"
 <148432447+pfe-nazaries@users.noreply.github.com>
Date: Mon, 31 Aug 2026 18:27:11 +0200
Subject: [PATCH 11/77] fix(ui): apply Slack integration design feedback
 (#12677)

---
 .../prowler-app/alerts/create-alert-modal.png | Bin 197991 -> 198139 bytes
 .../prowler-app/alerts/edit-alert-test.png    | Bin 189884 -> 191456 bytes
 .../prowler-app/slack/channel-picker.png      | Bin 123059 -> 122935 bytes
 .../prowler-app/slack/connected-workspace.png | Bin 112258 -> 113939 bytes
 .../slack/disconnect-confirmation.png         | Bin 159804 -> 159397 bytes
 .../slack/no-workspace-connected.png          | Bin 94921 -> 95176 bytes
 .../prowler-app-slack-integration.mdx         |  16 +-
 ui/__tests__/msw/handlers/slack.fixtures.ts   |   4 +-
 .../(prowler)/alerts/alerts-page.harness.ts   |   2 +-
 .../slack/slack-integration.harness.ts        | 123 ++++++++--
 .../slack/slack-page.integration.test.tsx     | 104 ++++++--
 .../slack-connection-check-result.added.md    |   1 +
 .../slack-private-channel-marker.changed.md   |   1 +
 ui/changelog.d/slack-ui-feedback.changed.md   |   1 +
 .../shared/integration-card-header.tsx        |  65 +++--
 .../slack/slack-channel-multi-select.tsx      |  39 ++-
 .../slack/slack-connection-check-status.tsx   | 124 ++++++++++
 .../integrations/slack/slack-inline-code.tsx  |  15 ++
 .../slack/slack-integration-card.tsx          |   6 +-
 .../slack/slack-integration-manager.tsx       | 230 ++++++++++++++----
 ui/lib/external-urls.ts                       |   4 +
 ui/lib/integrations/slack-errors.ts           |   4 +-
 ui/types/integrations.ts                      |   2 +-
 23 files changed, 614 insertions(+), 127 deletions(-)
 create mode 100644 ui/changelog.d/slack-connection-check-result.added.md
 create mode 100644 ui/changelog.d/slack-private-channel-marker.changed.md
 create mode 100644 ui/changelog.d/slack-ui-feedback.changed.md
 create mode 100644 ui/components/integrations/slack/slack-connection-check-status.tsx
 create mode 100644 ui/components/integrations/slack/slack-inline-code.tsx

diff --git a/docs/images/prowler-app/alerts/create-alert-modal.png b/docs/images/prowler-app/alerts/create-alert-modal.png
index 57f7bd32c84bb04e3400aa225bb335d18986ad63..910c4b30d6f54ecf62ac0f30c170dcd78453c33e 100644
GIT binary patch
literal 198139
zcmXtA1yodRx2C(h8$r6eyQM`MM7pHATT%(>p+Qj^q#Kl)p}SkUhK76a`|nz~z~P)X
zcRu^s#A<3NVxp0u!N9;^Dl5rp!@wYiz`!5~p}+y3*wp9~z`)?ZD9cIf`s5rwBAYMT
z`mJGinsfeL{?@qU)O_unbVTakQs$dw<K1XBw9J^@x@2;`Y;wN3<(AQyZMAr4y{HR5
zytGdmY&UZL{K=T%UAuRz9z$nzgj`JsgNXF`Ev6z;DDeq;2!iQabTl@feNm{I6mEJo
z$8Xrzf35mtt$KPbDwD(d=*u<UMASI$+HmYyn3RA-=m`j*r2b;f&9{Mp;t0|>45%Qh
z12bIUCpi+Td5&ou;3tF>!s#t3`#GBycHgWbp?E^=<Z$CPO{VA?HdXCP)!M2r%{fww
zVYNuo$qX=9A1={>SETU}58GZ|W>79b^cb4k?NWHX|A9}$R-cy@EKQFR#=zmTpGX6I
z7n#eTMG2!(aw|}gzgO!?mlh#Sz{;8)*#iNqKnTw`c=;ty=p$L!%hTv&Q6J&_eWmME
z{i3?*%1HWyXKX$FNCxp5KlRmm3Q4}t6ikrKO(DvAe!!hE-s9m;y~wTh<I122qfy2-
z%?Bo?`GdARxc*xF-*7zNAh^m7`H|C{)7BPmT_*aa@e7PndzVPi5`am=$1PqaX9;<v
z{O{>*IFZbwx;1@>bR9XXd5}gn2_;_`O$DZD+{?ffNYFsw8_MUe2q=3#3%dxk9ofvJ
zl=WPvhxpRTsR*2%z>bo2k?y5m4po`&6{1JZQC$ubPVIJ(xnwKCcko?K{AaL!-D~9<
zj#ywEOUUe^&z}Tf-!urV^8a392!IobJgg&OFAUcYQU-=AhUKh&xh@8@IW0Qi!I%xL
zlDt5oA`=hD5a-JvkhN`KjVNKRaIG3ILuj#((IL$Eefc2ldqpQNmh#FM<x{gSScJbd
zdfGs`i}Y)>UZg4V(b*$$D|5zl{QH+lBH%f*|H%Z+)7Vsa2Ik8y3sH0<1PkYESZ)}3
z33gH8{#uzC9Ab7ewq#n)iwwM6aSS?=)63Py{4!sSd)dTLNL2`tbN=fOwsIa23--Z9
z=}*fd!0&syhu^;}Ed}e)=HFgcPF1>bck9P3>E%_B5ldsub3f5r@Hm=tU;%<f)<&Z6
zB3biYZ4|(uN)M2OtF*MV4<9}tB1V#uW+H`CDJ(cb*VhY<kAJ48r$<F0wJvM)ML9Rs
z6D+X*9vL}r66NEYTV7sXV9{$`*R=nVGKpb)$=&akLwD**!dj_e@dN!G-3*gaN7x}6
zI_tiL36D%}rC@Y)Z>F`ghN+nu_RCsPbipsjfM=#D`*QiU$r%|<0k`MhzR6!*UHxDm
z1qC8UBOM8lt4)w&yvuwCic%dOvKh<qJz8i`&ESASp?KUOUK#909k%0zqTa`Rf`Z<j
zo>*8|3js%DpykTSo}R+<^Yi&So7tHe(~bb;N-z3uEh%I(p0}xKz*h|mnJ<O9j;gzk
zD*7gaEgTsgg>cXv!Fn81xxC->UT3vqbwnt<)?8Z<{HD)I+bG6`Up6bJ4d2hfH@Q|U
zX2<N*=(eo&&1;jDqvV2k>po#mv3>2YK*DXsIdEB?CCq^KrC|KG#X^ezwy0g}dqJex
zmBDH9?Z=OrMJFwlzgJQ6pNKe(Iw(9&&o&2RNRIU1zBOz2i%cI&fgx?T`ZJNn`ZjLD
zncx?SZRz)&K>z$thalliz4{;Qw8ta?$2*<}sGN!U!s@?%?~NV^IGR$ovX^tI<Obi`
zJo9fDm&xodv{}d!SUmpCc8N03sRrNY`6pJx>?F{Eq%BVTpM2>!O_^4vJPvO@K9gi3
z@(ufGNztRwNtEaPlh#a7)QhC_z2f9_nf<xk-Y#CIkr)3n4;~h?-C}c~t?hxc<0i*U
ziKqU)3%=FguciBy;#+WNNEDJyZoZl8TGuXKq|A3cL#I6<mYz=)OOR8@=Wi@@c<(YZ
zO>>W0RjA3RN);6n>Jmda)8~yWicjq&%|oxnFW82o%u@npzFNjdB@)3>Hj>bU(f51z
z5|uZ5v0EK*zN?Q>zu|?sz{13o&qB*4`$l)Z@fg6$!h9o?m8FyeGAIt^CRNw}9tr47
z4B~>#Kdoh(Q-2Y&LTzpB^Q|v$%$fuCm*#mnW`*ua3tZp74_7IHi(Oh-5#ZsG`6bol
ze`a~LKUp>~C|r*od2n!0u)N$#y*183-a{qxyYV8Ic{gEV`FW<J9gKH&Iv`qQ^!#_x
zrN4gQkadZoK?eF)xP0O2U>)&0HScT1J~Fy!$!PAgKJl-S3_{t0PGPfW_)KuJ1-;2o
z)Ns6MiNL!{cB95Fvw@1iL`qS=OJ=|tm2^26{#&<%M{q&`1Xy`RbPZRl?c+v#CL@=a
z@#>6k%fJG^6at_&*K_avffwC&q3k`M78b~|m$A~?9-&5un<@KVop*mBKa4yhh&?*6
zeje4z5nd)11(p_2^5K%_6YS*N38SUxa!THd@!y-KWbpD#?O<A3Iq4&<fmm5slpb)F
zQJt1st{lwn4H@n+Lb9Xa0Bbe{d&K)<5gBmiKGLIn{=BD(uJjEK>O0o4Tpx&J4ztpu
zL>FSx>Xk3*pVbst8aiKqS04AshAmcoKUMLi?T8n11S?HSPtFmJ4up8wXo?K1)!Z$%
z{LtU}1pDdiBvwf`H9eFK%VT>jSN@%Ki{a0Y5aXWwGHY7pK2<>CW`i#T8Qy^c{ZhGX
z4Bzywu0BDVfMsnVRhi>5O5;Ar(5Vc{a-9=sA^mehaRscS{G54T-iZ|59}3fn8#Os2
z`qE_+DzkD<e8{|a_zS=KmuGUXsYu=AmUSlztXCiOar0h`da%j&B7J2g4>(ael5&Pl
z5Dbgeg`*Vn%;aR?)n7v3v*PON<PWWfTDW7H@td~D>U~k)3lp$}_PWe%a1(?Vw+UQf
znZpA0^Kfn#KHbOA7*wTP9%u|oC@R;&D$e;|ACF^Y(WGb{OxEuN_;kZaC(9um@zSBE
zUVk6>D~}_0wsuXbMKqTN95IiO;r*pGeo9TWxR;vR57ONFIGIl8v3FwlD?K6aZ3(7$
zA0nHc=60n>6l-Y#WgRb+2Q-y|4pvV(Qj^_c{AWxD$v4YM4kkW|VI8djWnAQT-{rea
z8x8z37#%fa=}(o7!$Z)cz~kvhmjMou%pf6&b+9W(N%8$HA>sBUE6Xvr<d@_Rh1N5-
zIfT{6Yanhc5wyEQw?OOHCH!}TJ~{gLn%@IMY_dENQpnp(<@?~}$-}tt+-JMY?d2%A
z2*{+9`<Mck1I#)rvRaZ3LOZ|x@o&*RnMc>G+{_J^BWrYCRtbZ@>IsMT49CbD`r@8N
z3QzW$7h3q#H@jQ9)p=X3XGO}1rE{8nyq#cdT~?5T`xb_l!D$wBYF-bvov+=Vo}LyU
zmu<bQ8``tbe7-(jre_QJ29ha<4s*)iJG<gRbVoj}fx3zP^XZtWWbpWSr*_c8qP7XV
zX=7c4S%-$+F>Zi<$*D~?8uo3Gqq#$9K-pPY5$wr$l$T?<qO(<I!FQMYoShFmu40nN
z>RP(e(zg1qzE6vYiM3hw$JtGm214g;oSU+%d(FA5tgRQ0pxxcwadBwn>%UXz;o-w-
z578sEE7T{69MpuNp|5t8GKP->H@+F>|5WGX+Zvtu>c&pVPu28^Cg!vBef%k+32#^o
z$|hE%KG}L~4@WLwg$*p3*%8JoSw{s^3BQS%=S;IydFN4_mg~x4x}eYeJQDXeo!BCO
zDhpP>mhMDE_W&cCfMSJNw3u7icpnfqF$#r$6mtERxDRPchnnhqw9Pqj4J2PrG_9)o
z_U*2pRg$St+sNqR=p=x6iCc&QuV5MQOpjYkl34i&Zq$dos{0f@)8F4dtzkc%-kil8
zxkZ+QlnNyzBK)%B>RjKHURD_I2F25>`&}J9#y8-a?eWE;5KcY|G&E932FBf_wsabv
z4v#l9aJIEXR)@&m)V=u`m-8t6jZrx0+)Bq?F2PjGw8NMFq7El1KZG<;F=6dXeO%o6
zXtsd-Pl*3z0WtI8R${}uoh?u-MGb~|{(dJdT-K=@M4{-+fA!w<_ixs>KLc*oqa9{{
zjt&oty6>o&nNeE|R=%st3poF?*yPfAyOZr25FtxQam;DjrnG@PXOlL-wGfb}59Z^-
z;5;2KEo5Qln(@k{iLnH(pjuXDHhxu_;T`T~CFT#l9%>K32s6-3<^`GGj9@A{B-K<x
z$j5g?<F)XK*-uyQIk(TA5Rt`a76fJ%R2aIbXVtPbpM6BwGJ>MgJvy;wKa>hbDLlH!
z9`dRmyd~Z_L=Rju-L;b-&0%F_1sn{0q$KCNmdkEr>afs9m-cB0SIU>W%y#ftj_?;B
z$~5HEF(Ay)@SF5T@D$Oc)kRNRZS&>TZuLH1vcL#N>XNuv>;XO|FERO9jSJbBv)TC4
ztOMHvTPN5c&|4e`K4hc_C8bY@*R~jml1iO~3YQz6^!RVP@x8_R+#=@HCa}9jPR{59
zHP?NM#{y!~0Kd=i2@UL+ol@&jS-D6E-tQ+?8j1WoD2*>XM*k*XLS0dcS7ST((`HvF
zeBK|%ll}dI?>w1mhez%x$k<c}Da+&I(i_ndt;X+%Q0u`SP@9avscY}P319Xf0sI8L
z#uPDl(pT|vQdYC^W_%1EVsE#1{WYTX$t=)IH>GeGK0?xVtbZCElGN?|FcEfz4y`Tj
zDi~#>=dW0>v1hRm1c<R3w|1;wyWsypsR0M=rD!v(o^Fy*(0?g_#2d6CwTzh#e|={;
z0*-2ecBeq;Gt3#*HQv2@=de|ba<L2c7NRix;nf|67zC>hPquP&Hj*dqKe;oiQFgJ^
zTt|B$)1c|gfNN}MI72}jH$@#ph4s6<w6t`Oocdej&<A`-;r#Aioj;|AgKDa|%}=ft
zI{~hR-HM8`H=(jgpLhK(TIOoM)`ggIhKB4Q<m91?k|GOYYPS})i3MoO%lo?OC~tr|
zFL6s?B#{G;mxSM(T1ws@)@5d9YQj?tcRU`sgr`XaJqS^(UYwu*{rmT!LOAZzrzV$G
zQ*CXyrp~qF%wR8)X4mze-e_#IjsQ|?@bBL~SJQ6`$iH&GSMc}0N2U(o68YQEg%rMC
z5KR?k<Sr{Kn;-miJNZUZTtechi24!b)%NbL<Y^cDWT|>MVt6k;vm3MQFA$im0h<qT
zK;odTtk>*x?9%8f0%AbFrWCyj+%zvw?AM>9o%$#}X-fW>Rruod6H0O~aqVZ6y`giA
z4~S#5=$E#3B_CJ{Npnx%r~YUd&VF{IBaR+2)>g3zi?Tc=bNX-<9`qAohXyNJ1E-r)
zQBLj7;qN}mUb5yM4n^<#Ud*GW;CtVZ&*QI|ncI9fkv18M#tpQ%9|sc1=jZ3$cgFOB
zpE5_brXBwu3mE24vm|hgpSEw-H@X;nK9kfNtHdCN0GY`JF<bnSv$PZYZn9G~nA-)$
z!_!k=PY*X`?G8tV+H%o`4EKoFrEt+EYtQ%Rd+SP~v-xl!u&0wdJf!GgAYU(?Bgdx%
zyR+L-c(mbeXGU1p3A3}SZ^I+4F+=x?lC%jBH{Vtoz;fL5#o}{4HSgwyclP%7u6<Hf
zReh{Gxbh>x_FjL`3$@jF^Co(ees6~<&u7EC^PW=8Zzt16N;!NJY4~AE=gl}~w@-uN
zV}eTn{3RcSvIWWU{`St!(`A|Dht3E4K(Z2k5ycib#k=V`YGx4lXGo8S0bf`jsV?|6
zMvFCqG6{({cl|_+)XOy#Ix2vd!e&P#eVeb<JOS5AdO(!^_@|DgFiLqQeJr%@?E@og
zo}btc51FU0B?J&|bR`B5ydDoF+Nd4TPb(`cEG$eOjVxXp4ia+Lj_`1JMn*<n7S@xM
zW_)cR{-=I29AI0olWouxj+L^uo>^O?Sw}g_EfTdYCt_iu<9-dw<P5cx^i1Z(wYI?*
z8bJ*r9H<9BSzh*Hpn9iLKVd+9S1-WP@nS*eTQ&GhC}xe03w<O{BWjil)<TvO!dJqS
zB9B;p2Qxn$gM7|MU4kYhAC6m3q9ld6czG}0cHZf!st!Ys76qM`P-aLFE^~z4rAUE<
zul;<8)w$`upV+K;5`$aY%q;lf<|8vq|IqO8I&)@P8se2u?pXfA7L$3spyOQi`$4Q0
zu088&a8XgwN&7Vw^L`{cabkSD558KB#Ot?q@qNUb6he5$ybpjT+zvtzL0o9I3}YZa
z4Mqq*y%JuSJ{d0J6yOP%$&DN`I`a#W%c~QI`EauoaL3&TZ+XNhM7=OBl~UPo_&i`W
z>EyCJC|XA9_Yk|(Wl3pkz<fyID^#?&7j3r}>n@Y+{`>p;<buwI)#lQmkf2-g)sV9_
zQ>j_50iJ*7yyRSr012%$>+Ar5XsoQ>yulW-t($+?FUyYtTYg&LcpCs`$Z>z@pJ+yU
z;bXcEj!(~Y4pWRA1m{?r&1G{%w1yCIKV;s}f#k7+iDcw`5g+Bclk0qhvgB&OBiLeU
zQplKt`gdiF#wW|SHdgNCxdKjE!3ISZH;CcO&Ms$+tet`P0w}gZaow(3DT4EpquGM{
z9u&Y0#L$5(6mAwF5Ez+vKlI5H6k5g`8wEs~kVcOGX&+5@U0q%0^W#bHavKnBOLHf!
zxqobs$fb#ykh;p50y!uory>D975m>wrZsv?pi^hId)XZ?Y&Xt056NbRm(1IK|Gm%A
zjqMr-4*#sh<B1YV1c`q`Q+(#T+fyIc^F*fHvy6fC{=)}Gj7pQ%bnOar^Yxx@V2MYM
zfPfs1H4hQJjx%BoV;DkND<&qUXr&~Dj=A0Pq!S&b$ip)U^%VaDx+uxXTS0>U9d&Y4
z@3rziG1_qozTBo5MF~ueo;zg88)=VrRaR>nt|FWt-yYw?G0A^}H4KHtfpDo&qdoH9
zBija@eKPB^AUIwdy?~v$AC!FJ_D4RVYQoF^h=m%46{<hsVF850y5K*EfU-&(gaYmj
z)!r6CnqX8ngg5tWURNZ6&VESNTO+lkq2b_gp1bD4<p%!H7N4?&fjyF82q9PB6v5iJ
zzJgVS6bEvOM}^>2H-CjB>w|Nd)9k(<+I+Eds|W-LfYONg-88&4<0rvby*>8s)}a<2
zISqGv(ae-ZejoHclrV`v5xzYy;7QeVHes(rgJN4H*(tB)LNsz&WvhJO-q&33P}JGk
z@g1n2@Zf(!h5aHL;1KyF6DcLBK9b$DS79K+tjwQ)=E3sBQGt0%3U4#6ZB<v@(J9Q8
zZOX3oEtHj&4YRJt*4skDOUG^5*x8*N9TD~)da0jW9Ua*O1)JiBli-b^T1k`N)H&l#
zG0>#AM><1)V;XB025MN9$0l*@$=}e<@56@C#76i;!*OG4#^80iBLR37T+&I<{FVuX
zyDCtkh<%tRjR@Z^rXr0|1x6hnnkk1FTv~wXIku502h-at`%aDY%kKTT%L7!f^EQL}
z5y#Z!Wc7ry*<9K@Gc@$cVb=cQ;zD*{QtHK!bwMEJ`b4{GqvrWdj`Mi^68?*$Lu6zd
zIVK`_w36#dkPoFHfr+7(=VB0sgg^-@-YSp6erfl>pEM>USiiK3Mb6!?k4?%Zh2Iav
z2i`-4DH54)1xfagjw1a(6A}^zpCSjt^k!!2{5j#};mHer@-4rZs?Z^j&s2MrF+9Dz
ztp3ZK+Ma)F)GN{BHXL*We+`FTezkvhh-P#G0H(E}v&pEDLNiE`?g-L1xQ~0?+X(y<
z;~2dq_(<^pFe7K7sgsM&?+T5p@yKefPxX0KSl~aFH(6Eno2_E1N|{{DXwp|dU>2bT
zp3SEClFTE|mX6zTr1q3%4*>SU!oq(3q?vc(BI&w~Pe^EJYMOk1yzGDw$>T7?_Cuf8
z;C$=P7d^dC0xk>2f|=se*g(vw=-kv=T^)l(VTDbSw+AH+v2XsH%Zz|#+dscsI+G6M
zld(4eGLU)A-Hx(r9*rN&tPXLXuU^f$=%>~M73U!^M29%rJ0}u79Wwb+)~`yqtIT(Y
zcXV{DK0jTzdL4bMtUTP`7k1nF{dm0!4)RJGyqGa^aa!$YZ)>B#N<C@2NPK=5V`5@L
z9dOzW03MA_iwXhX?trl7!<T0XoO`Ldfm8>UZ?zt#MU)=q#k_MiU-_K(qb(7ni;>#h
z>1cEXH>2ZeVshj}c2Mvq%ZmvUo;~2y0dQ9(v_pJn6w~RlbnWX6YEntVsP96lnGKa)
zMO}jzt{sTo=2v*)YpF=yg{d@sEs_i2h^HPIZP)tx`jJdt!L8R}AjPMX)yMoUZjOut
z>gV;7{q?5n&TVQ*J|PnAi8prdZjTn5ln@M!jI2kqUa*56L;*510?2Y}AtIc;rCQSW
zz@V$6rWhZHh-jP;w6skKzX9#T&1kAp2d)f{h^+>6-m>Ol+U${VvzYpEPw{EJi^tWU
z{q)F*`l(OKW=t($R`OCB`}s6l5~K3g<r(Vo*t-VeG-;8OByL!`R#J8yy)6DNq4sL>
z=0<4Gt_NLJF~M$OqyBsvNJWF0`O0ma{0bym;SPBTXi(^0m*=HnQt!u8zXnc5;p<l{
zF_yx3eGU?w1RB8bm;cd)gfukJyJi(Nc(17?{75r;U{ifb-~-^uK=|qUy1F=KD>lIs
zHo>HHutlS}+!rn}^0KnM$IIA%uaH`Ejnqs%Ks}kfHbH0oyA1ZN@pd5Tv*6L_XZCv^
z_i|V0;XIH*(9o?DL)^9kkr0iwhFFBzRPP`Dir&*l@+y9V+@E%#bk*vmrVGjkU+xyK
z#&2F=Z!&^j$HhHaHNQ0r4!kH;C)}=i-@89&b2H2w|H1wDX90p`>0zRK3b@%hD>5MB
zYCj3&<mIg^Ek)85%I(^_yE+K{U@nFmGI&Jh&{_%Rn6*g{`<O>|QorDLVt&X=#}1qc
z8uEU8J}poOfxnKX22MnzyZ{#=R*<U2Kh~Av^KXf0n(_BY%^PoOX-`wa*XNF)fUzNF
zH#9a0%!@(R^*LJLFVB&4Zfb1w`t!MDcPtk(Q*Kw1wj+W(g8qN08wAb}>s~E@l&foT
zzyqRrctfh6Na)Bzj!da-L4e)i`*`<uHL;|Hna)~2d9qAMJO^h8KNiTJ8QMsg`aNJf
z{U5I~Onqoe!=IKNst~8MEU`pPp_zh!P&Uk(F4nw%$%Zfe0^hs=1IIs>PkfQA0$)gK
zY9E-T@;;*J_+!9d8ai>?d_p86V5j6^G_U1<OM~%CXohS{;L0do3QDo~PdVf~_*AoE
z%Zh706?Lu%a1+8dXCvdK946_cQ2?0M?+MA^Fj;85o(FKVnlR9nUvKU9@byU&Zh`-8
zZPW7iw^b3yl;?|WNZ}USLuuTL+Yu@P_i7gaej57xA!kc9<>MXl^W`<$(M6vz`zSZH
z?%wDRT&dJ^n$q_}ADD3%A2JVg@SD*-xZLpGzhR=9-CY9(7L1P1)!ONtqC_F4In6UV
zp%Cys^5WkyVP8sF&f8=GCg$<}`ngx~p?CFRbhQnL8MWtZBx!PU-;1Bh+{Y`SOZ+h9
z*2JeqBJ7pWf#n3iMBS+6v*e?3!W2xgYak)TVm_$G-?xi6hiRG5Cp0u4uu<^y_jhn`
z5OiEp`Ugfml4=$;wfffCE)xAi+P=C;q2IdIekG>x@S)qO=p!b`5D9#|KC3Hh*ZSi?
zuVMiiy3g~4PJ0_<`n$w?y_-LqEbDdu2q2#>rquLdi{#@YBBIDP_lKNShdI9o-{j0)
z_n>Q`Ij+?2o9gIPmsux<zp7>HD8{_q1U=6_-<e&0ji>{oe2!S#Hf!rvdI7yZqKIi&
zT6xHXyx_;be?u}2eQ^76yh-Ui_4hUhliF`KIsl9(S}Y+MSyS26^vR*BeW;YH{=NtO
zKAr8|(3M@px)kH>En-#Y*f$es1gdT95pRMZF7IMb<<R)YL2io6Nqj7_5gwrfgC0K@
z9S2n%)lV*VMpDZDW^A9MaX3PDcJw8<?%mnyjI~Uu7zq{Recz>$3MzJ(;PbZ+^hJAC
zRoqU`nk5~B%>2&!SKFavO15~P7?cJ9bo7T&(}duimCp!k7!9}7Jq44d2ms$Jp%3lJ
z!M@ZCmCn!miSs2dM(PAwAIFZ2A~@@IM@;Ix9v5BQmBK!*g;bej9|3VuPe!x*uG3s~
zicTvVDiNf1&W0mWSa;};G_|BVi;8maE$U`lVzmhp2kz(>Xy%a!k1mzx%qY3ft8a<U
zKi~BXODpnqDX)R{%R2B7q&Kh@Z00StbI;xb1uR_RL>@Br`Xx{}P$N;+2E;+~;q-Bk
zYVkef;I?0y)3Bc8kXN_oHR^zFD-wLC&>o{|dRXAj0*9)uPIzp-`|N#ncip&U9K4R0
zBIlnfPv>o4t6(g}?ze|)prm{u()N+`(QH(py5|TAOi!7MRpc%MQ1=+IYM~X&#yz2s
zGDe^%psZqKw7BTf$sgR^bKiIZIlw%$iRj@%A3>>;WsIQrXazj@apyBE1oFSne^;3Z
zl*ceDog0WrJbqLIaNr}qg_pxnkwZRm%6J1P)%lX6XHMqBUSh5g?y~gT)Qryh6Zt6N
zB3+;c*@N9S@+Fc44ZZ|ei&8+WCxrq&JFAZyP!9N9d<lhiKo`CfeYz^C3JlyHn&#%`
zBM7n7B(V-9^&O<?jj!r_`Zj8Pza!Y$U_H9<m5dCC0+})Dy5hC_Bqq!CM2`AsPC7V!
z2I6YZ<9K!+diVu@Vq;?CCZ;JUcZ}F3XB)P^&aUI(QATKM&`K5TuN!Z7;r@RtpvlTN
z^)uVq!Y;2)n9s%CTr;QX@-tD>xeIrh*;(l@Gkz9_EStT(19G&C<Z9`TwNUVn@|a)A
zKq+dn?5*(++^k#^IW>hZ)Am5cl>y%;l!@E1{iVuLNCA;!g%y(rZd}<kD=UkPoSdcf
z&1(C7_flIxQMZ)V)GzcW^5_b`a9U2ms@ht&{vkb4uVV@dGBJ<6;cP({yl%*mM!v-3
zdNlP|xL1P0p3^`ePQJ(3@Nl-U`^?|z@7{oC;NxS^Z`Fd}gepy#p#8X<_J*GL`?;jr
zAWfixy2(24#*DIOonkVvMbLDhnVwJP6<<873o1%7^P7<hM)+kffs}gfWJi6R%JF8R
zgE;v5uLGd}a%iU$8a$RUs7t4SsGx>EyB=BO#P}96B3=Ar5OB7)w*$Ub$m@_fW~a8c
z_7<JU+RBOy!|$tA-F$R(bW3Zi^J>Qxpl6FmUUXED;|wz@v7iT%dLu(a08B~C%-nYI
zwzaKpZM{EU7Oi&NXe394h0EI2D^VjZs-(Q!|N4eAUPcMPj**WDhX|s}mbq<$iC}b5
zsC-x5a}fDPJRi3H1cD{s2yM7S@?MZ$78oqQ;T`qC#C)K<M6(eFeFp~-1@xYQ$+mD4
zQ3S}Hl8ccTPSmO8OgE;Tg#z5An0gvMj1Yina_wX>scw;<AFy+@W&CY!%Q~@Z!F)B1
zBf2-dtxn8-H$XI){5wL_Jl`yE6SJ|TcV;XDTO`X2NgNX^%k>)pP;wKo&6h{Ka0F&9
zM*Es88+2NX`0vtvQ1=k_NwW<NO&=eh_CCNB6-#3RH}bScmNiE4_;>N1bc$CrEQ03~
z`)lW$x_YSa%-@jkD8E92Q{lbQmunz6mC;}T_7NA_^L7qhngL0@K4+~0{h!Wg+Sl2+
zB|oYis=l(vRxz^c%tqQ*3-J9StlRxWtg98|*k6dZqbQ;9l^gP`pt?=bsFc!I6W!b6
zZ;%=*<W);aWEAn3H2YPhr+g`=t)qhq&`O!`3|C8>(bsE88VskCGO5_FsFf%RbDuVM
znUTJJf`8eQ$ScHp0%#_~(^Y43M}BxnqH)#-Mk@WH!gws!0k3_+*C15d2TDFPTLfh!
zhy*%dqL^r2Lo3!YxVA3|?u542V<m7Uc`W{!KIzZstFkDJwP59t0B{(HPJBOn`VV=@
z?@2f1bd^K)u%vsb<SqE4IvB34cPR|_rGr&O*glT+eG;n{bv-@`Oq@?(hVxA{E!hiX
zPHmvhk-Q}n4i!fF=nbhI$&Cl50GJ;~yqpkGRwRpTa!ED@G}ODRHP=K1)Ew${Wh?xn
z6Jv<n1?+$CGRX8cnp1$^ZBlKlAKk~Y?N(iW^OG5@aeNnwC6Xr%i6{zx<r51i1NMT=
zF~~2Gl|qm^h)xL&@513^T|_ePL>XzaWMqo~BWCBHxZyCoGiL(f4@=;qwv{!>%s+52
z7KCejma=<IQJ+K29Y%u}0?ni^&)bA;W&gBDEj@>C7kpNo0}FoaL*lRh^}hpxBZ3oI
zKdcKj^?;~IecP5s2FNimw)xFCTH>4f1f)}=D0q@{Q4)3R(XRCRrdU%D3Mt?bK<p)I
z5co_95b?}}Gk;+jvM{(ofb&6sKjIYy4pYUzMS5up1&{NF)h>)F<{=gbCt<&!ITVZR
z<%(Smc0+bTrRZrM(Ac#CKJo}q%cXvhUIz+HQV@wcnCUu_(`D^nk+^a-uD=Ix1K$ix
z&KsDUVy*wTWIWP82p&sEb)9)rN2T~y+v9-2=pnBM*K|3OAL7`#uj$JtM??kh@n+{z
zgT1*qqs<{NCWQv|6Ca!*Ep*<DT*Njq{ADFnpuj}5Z#G1(^F+UvaTxe<N7;39RG5Ud
zF5Ey-iAXOxjl;l=Yb3?0A|9=qT`2AuR@v4=;o<Bo0jSO&hT1@=lJ9=ZiZIL9IAHTW
zYwN=7dZ%(^>>s={Ax$+e3k#z`i!6vP^k>&Xtmip$H-F^0o~mss7dU8;pNCY}6|M4H
zGj)HGsnBH!$6E2p;b`h5Z51ezHcKrV25XUHBzC|mdUv*$aTdp`6lv`TdL|~d9wt^m
znN^(l{03W>IkHDZ6-o*R)d)_VNN0ad9=YOdkI&A^0#qP2lKT;aZ@VZU4<H>^2E`}J
ziSc>B{o6N!GIJk31g#1Dr2o0TYzC-jtaQdt*aebL+*|k<Qynyvu1^ZS`lPwfx?94Y
z4<FStFFN%&wr)GEr3+nPBvswjNsUue!MqWb5SzK3w@`crb()V2mCO%kbXn~}TsIF+
zZU${QzP_#hz&o;0yWsqMC&*PtE7^HoQMSLZu5*e+=@T%#?{#hReP75I1OFr7yV2^w
z79c;Yf4*CV@sxRMos0dpyNx2J%lID=NTz^JY2&@2e&*FF%XD!dG@*#OVW_Q`=eov|
zi%To<+|G<>b|o@tC8OC9cKiNA)~ZCWnYx1E{)%G5d}e6mYd=5NcJrU~^>VlAVOclJ
z*@D`Jxt&(GIW}e!2z`pcJ#hhwO%f+3RH;*8XZU)Dzl=@;5Y<?w@kEUZzqz>T3EcZu
zU8Fa0FIJ$B_FG8$55+Ha2LyBJ1j}Om7LG#pb+k@bjvMI2r@xjOTPf4C{5NIaU+ON`
zx5ay+m#X+%M(Y%h=2|en21O4lvImxNKq(}6wcox0quT^cQY}&O!Iv4GP`R8>u17_s
z4BU;+%$(J5w;0N5IQPRR$r;%}$*I77fXa8H|A5gHzX#FXk*AIUYDk2eWT?wRHLfXJ
zhwvuhWpxO&ZfJ?c0KiQY`CuG73C=ZW>^F{|9@!TqdXwY(Ybnr$(mTPx!gXsZAt!ov
zZx{`PH5s-q%T$G^OS;*{ZZnD25>n?<ev}K2UBv7y^1OPF$quX#sdphhek9U8`sXT|
zfyO{2lLb@KN}M>B&Bbp1jUwSs)3?9uDJyLaKV}YCL0R^ds-M@&bsy&G!We{oV)>Pa
zn3lRO$$$lmek~10`r=j%>kiyIfT&4DpzJX;f(z@v7Yo@sNfU{iH!n#6#gBFThM(No
z4pTdgBDyVqL@{eLG;|fjOLCc)0{8fw@|pg2&RU+3f*iQgHRy8+NQglP52Q`*8?iCX
z7sNFc;eigoT&TABfyJ&<ypj9-fZ5S9DA`x~OHZR9JBaY+3vg68{k;UR>~Ee4uT6P+
zC_QKDCPmWvA7nPYirAS;CU3OG{4)mJiiBM!Zjwvxz0IQZ<+XIDBDo2O)%pm8266+#
zX@~jznzZus(ThCh=buC>VmsIKnF)!W4=Hz1S?vyvxQWxcLL^wT`yzUT0Dr}OTFW9|
zl*c_m3fPsex{2`vwtIW#6fYFMLPtIZ4(8nntvnA3y04l$EPTzRPZmx68kTqt+#b#N
zXg*7pm@W&#LTdS|b`v9^dK&35HF+za)g}koiOLBzs2l9;A~1n8IHDNCHlKcecWa63
z_1-)#ZSjsEJlGM3n$|4%O|jjdtH{{Of^q4hm&8CiRqbm?`nsB_9Wi>G8)Q6=TdjzX
z#Sd;+4+QtjHM-F_Nt9j4tmiYCsv>_|tAxx#yAZG0%?O``%Ap)d1kY#9D{ir5jsITu
zj6D{B&y{@dbIAUZ(&wf~o$4f^mZ?YVO1%z$_D?}e8CN4ClPzff&wi(><j{e1@KM$F
zd{%#3ZKtYKc`oM4ktF89`bjzQAiO!_Xcu4&H$~k2z1O$*M~A|7GL%uzklh_#%}6R=
z7}x8Fg!I+ni=X<VZojxopa~{9tfX))V&aawb3JoZBYL^zI4~SPAN@a?DULiI8^|}m
zXyZ-sW`y8Tl#S&*`EGjRG~XSQ9eV9~{@fwud2*szz~M*#J%SMrW?tG6!<lhWu9Vhy
z-}%*sn>;TOG}QA&KmF_;Uwo7F@tspg@au#>1P0nC>Uc*^{m&uYsO1pHar1nBBzkej
zeMcrhs2NIH)2!Zt_i`B#o9GLzZUQB>N>FLM3_LbmOs63K^JA&eaVW?~?#84ixiMrK
zM*NCSc^F2eN;?DcmyjC>$=q)2S&fGL64q|9&Z}EdfpQO>&=FGf9eZ9TI*=kc6P3>%
zMIK6b>6Cro*whzPb;f>tL<Pk%`|F52)Nl1InMsno<Mj>!<?C309h1JN5D+*kcx9%x
zc`8OnMv(D#0`Rw+tf<OYSH#gV<geceQ1%OPM0Vo&M7}V0nK8Ow3st*(66}q3aJzPf
z24NVgKe;bDUQs${_iDbYR2K9Fw~AR^P8@ZeyRwuHkLEy^oa2Ia@6n$zOge=9>R?wq
zf<G4efFD=xCMJi>{M;_RiX28P*;oY#iN~=i>aQ=8X5K^?CN<ReD6KYyWIbKt%X&6-
zo7s$1PL<d|oG@40MdyDuQ4YyY86J%=<%KHS7mX)p9!Xjpc6j8y#KHDWpNszrzkaJi
zm)c@-dZEI$aqrtNxx+JY_nyxd<|$z-R$L$jGz%kJ@c2I!V*o5oYDYyS#Q?GbJAcAX
zf7*&5S;I%?{XSW^z+Li2|J?LN_AeipB)L>d{-|XK_^d^Q&sf_)@Q-rEi<-zLcE%#e
zbVZy7dW7*m1T>3^ad;2fL_hrKT|E9$hA!xIs-g3}j+g_bUU4QbFO*!cG~JWOtiGcB
zE1EHt%-v73qZZdFAQjyJ1!9q;{RVj_CbliYHHp!Y!*x31weYCyK=Hzh`Nnbi046nH
zn-F3-+YtE{Y!JEK?n>+0B^`F%G`lVpWrKz2r#<P3UDVSqd>*K?&EzM8E7qu2uP7wm
zAME{EtS4hBeie}16!N2}b@Nj%$9MkftI!2<j_kmNMs}8j88g~?{)MTf^V?mjB>%#X
zP1#tfr2!x3>*>6cl8pTQkxpi=W{h6}=PP8J53j(;R-V_J;`n%`hM~-35L6<6VVCNm
z$3&twAuuu57b1f!j{0x0a-^Dn>;Kpce*6`WYn@N%)6P(>W4&78ACVS2oh-6k&N`$=
z>M@olZ39lWSt4xxYpbW-a;Rn!lxSGxeTg~ef479Cn94Xof?2v@sZvyPbvbu`|DK<q
z*`jp%vYO*h#~2Etc(btYe>`?!W##)Exxb|Cya`GN@z$i$5%gK^s^Y%8>s<Q#K0S)X
z#R>BNV$?ozQ#eD=D=FB~)_6#i5SlH~&|Gh4K`|l3@COGy{iHdUJ)a?9e94(pdRO+u
zg94W9niiv?qjNNn*U{S*53Z2LuWhxC>QIQ&12{FlbQN5z_|a9eu)wDOGS<i*6%Y|Q
z^bkQct2cBqG>qyt*Zf`+uAwC-BGG>VqGhdo^QQ=Z<xf&l(xON!fBOGp0gf{%DHgPp
zd`1xI$^Y!(1{#_zP(pu4s0d4$eRybGCp>E35CVm}l?P-X)~W^!ikGJ7U8ec;!O<L)
z<cbWn{qhHc_)p=<cmY)SteE{d+2#$L89dYS?VAml);f(cL9+JNi?ubFbq#B4fp$?*
z3a>*@3QYvn7rd*l3N?qpj3_bs-}xcZ<O!uUHRIjgL3HqW$=?4NOF4Z_se9nSz6qi2
zkq{6Nbg!<jO9MxwYW1frB_#zhxV2SOcr-2F3?*1mAu48$;aA{JMIQc)=*6Rtrl6{<
zpWmy8qobo8zPF~PuqoEw3ZL<xqQ6IoL27u$@oa5*nia1vJ#a~-kk$VS%0J2iyTlC#
zwjBl~l@_9XyJF)vSnREx4v8F>K$cB8jV!aQ3L8XLCMjPduF8Z+s3Nt$wYIjd%a7!U
zhmx+tJd2CaVk1;0PK+Edc<}F2^0Kl<|CX}FPXDa<S2u9&1t!7s252HND7FnEb;6hc
zJ=9fdMU`ewT>TaA;WtM#S#IWdsBj3%UtyL!WhFS8IU#x;xcgEUZ|k%{(m3UMQTmEV
z6bZxqYH{07KME|aBkF9^DeE;M()cf|D*$Mcf=!^IOHN6#YcK@<&lWq_pEPP6X_BU{
z%#0KnJI7EOh&6+zOnA<wCPM!a5eliV#}HsF_)5^q`}r?JL;Mao&S>!T8k>lC?lcuU
z+#cvZjbgyE1x5?wCW)7o4akd)ps7&G;qX87BG1JTdF9tGeM!y701Dh`>x#=5qYxA^
z&0{5r?$szuOh7#xBYBEfQoX66gVrQ(h=f1fVDEGD$W7vl<F3}h0u>uyPunT`gl=<)
zeFIBcmaF_w07SQN&!nThaq-AaBv=3Y^fnn&0QZ*7HhXTazE&|<g-J=Q8apvwz!PfP
z{QjWZ?2HbD4w)H*D~G^Gc69UW3vk9?ZcNg;HPBjFvOjMek1JQ@5gz7_3o)^uE#%@x
z5awLf76$UM;<KyCh7V5J{xV7LX=f}N-||>+(nr71?7<FTqphN%h?k@=1j>=?rfYL^
z%<E(I?5gPcW7k*~Y+esASJ+icjCHM?OM60IFYIY03{Kdi?oWJxsf-Y<@Xk!pgbJg!
z@sa`Pa;jqO&EDLr1<8fp2MPP_2yr{Rea(gsj$ctC&<y$ZYIVk>dlmn*3nFixxONR&
zbA6qd<W*4k6^KKa<T#S0qkz+|S#2N6!TV#s=nF8soC=(ql>45a_8HXG?K32w{yuWB
ziZzTGwjMmR45JpCM_*J-0H(-CAE*&3#9$7n38IaK*~M1>nD2IIO5>s2Z|v5-BIR4>
z6_dJ{i{_i*cb^h6$(ub22mG@;w8?Dz@ES1lpZUuuBwiX}=os5{TtmV&#%%<O(Uj?(
z#wF-u@RUB@S1vV_6}F*EE7O821)1~8V`4WNU-f^BXZq8DSW|Ci-1UVWHX^{5VxwrY
zZGIj}4qX+SGR*J?H<>zJp9C^qn=uLUD5@)Dr(P|4bl??rJ*}hz-9;3&EpeSIb9k5@
zI+F8JZvY_DO3`trgR-gFP+aMN-IN<lc^t-M%M7Aa@5nTl{P4~3LWQ!|^jn!GFf;?<
zwRBkH4XHPr+#O$14>{#I+;WJ}EW&yfw1)=b#}y+uKp;c`5)6&#TqRgSA*B-I;<OMQ
z{u{Y?1^VpIzN*&va@||({n#kdIH<S}I5KT^vCQ~DUqT^{HdrFM?JX5Wx+dw$JILjf
z)SkX(pZ-=04jX&=gszP-(W{vtwq6-uIa>in@R5wbXC~|BUrvlIoyj6(hTo?bDv9WD
zb?wU{cF2*%C64*BMjTa2^$76fx{LJ)UfKu#;IO^unVc^uPyvU5ig`tXDcMiqM6K6d
zynkNI$1Q{J_k)%SWA?k5lqs9g8gcg=_4+9?!xC*E<))*2eGKx2%|{8~a8&tQH$gg3
zsHTZALX86;;7SPSw%Dt@x`zUIxY$+7XtV{yRMOhfx_`;={z$OC6)!9G-l^9ANH~Gg
zgO&FdKj81$Ud5L^3a$B9S*=m}6N+DkuneVm{&W9WyC}A@8VVYE9}JZ{IKro~op2aT
z=a3Z@vs>?euGCy%02|ptKC08!?C{gTJsGj*7ph_%`oJJ;exVL^&5rdvlM`@86Bsw<
ztM75!{?FIo)S%)+w8BB3W;ps3k!fPXBv>&`n?Kn=b!R;(I%R;?moKR`;PO1g<kXdS
zV#6=aRc4KZcvOT)<aJnSnth?Ly=`Ht6IC0Vhgm)g8QDv@1BDKjf(`^Is_cC{1Klm_
z?mo|mdVbDJ!%|_P`TdAjcWQYazFM1h4$~=HG!2TV0fNYd=VYw;_FR_jw%r~`Fm4?3
z70(cfE1wClr)VHclEJC(L_bUnsx7I2WShZVW4?Y=6(~2HC&RtPP4#9>v&*l5bnT*`
z@0>|nMaDHsX)&>2umpUpsD9fgT$m;+htzwM{Ce&vs*;H%k3^L$nlN_eM01_Ykd$2b
zk{oB|o{4ctB8A*(KZ^JzHpYuX!G(0k3hCPO4@l6*YCH}3!V4bH`ym5Ue*R1b6%I({
z0g)if#wbql_P>w&3^GWdV@}<MALXHYr4?REFDI=?@<Yn9Pi~m<BLzE|h{ro-c}D{l
zF)j&2nF7Mhn4$|0r`dhO=fzBa@8UE<U`8AU+?bp&`YvhWA7*km3}=5#M7|$s@@pX>
zA|mR4_q4L=lT-k#<JQ*Y<z<(zuc;}OTJ7RdXx*MiOJyaS-<)+FCN?&HN_l0ahe$3v
zJ9~tkFftO7Im^0+pI^(kEe7@K?Ch>vGs@@G;^IJoOm*uz(vCUjrbS5}dV2Vd-S_X`
zS3B6)*jz)QQMP7txebQwXC`sIrmuX;z8V5ePI{xGqwCQqU;ZGlV_^;XQYUVRbFY9t
zYM7Ys>V2QCetS3AWr`uncDPyHBr}WTFLJmLTGy2aVD8G;vdH2hA}VrliBz|@w*W5`
zU}&?;oH*7P#Bi-G!HXO`Jp~D|(<-5;eHIQ4^x&JO=+*v&<$%dPmGoWr@6wVn2?+&;
zctPZaQ=E1}JVviGc@a?}mIxCQF&2I3`!$e7P5fvk@7o_*t8E|Q2fBVb)ffy8$cY-q
zB=t}Lpupn<DbRFK@;zU>BL4Q>;lbH2@$@kX60WTe-#iWRT*RE4et`YQO2H~Rc4ZIo
zf#!YU#~bzbfS{_pvd7v}M$XmGdIMYs(0xHS1S&7zd+9Cl_P(wPesp+N`t>XDb~_{Z
zrk6U*JLu_lSMvGc0%-0+7}GO0Zu34_IXn9(^db6_#jhPPf2gBp1Byx@&=00bUKH|l
zH{1ENlkLKz5%&ius$_6nSxba|M;AhmW-J@*1S-CvJCxFRkxHT9>($_AfVUxevlf1L
z=l7iY(tC6Lus2>r6AKUwuV3gBSkd&ZGe8GRcL7Wr?{-mp`(qtg0=>r2F@qK6hX%TO
zzL@VhFiGg<`Y$a#Jv~FiJAkW*C#=+$Yy$vBp(}qY%JL=-t~zf=T^?kJQZE6D%HzrN
z(@8aPm02g%!+C{{G<G^O8(Y9uilVu96eXs82q~vohp~>1ECR2?OeG>ZQP-{14K}ek
zKp%}to`ey4RcTNI@H0FhuBIP>9Rub2HOdWJgyZ`>=1saJeK-}gn8bpDaG3(s&Jq<>
z-p<R0s_w3FdPNS?oCPyC_lu6Fb3ya9wQhL+Zt+*V7N2mo|3thIf2@BlC203@m2iDp
zn&)=_T0un&rDP9)HaiL54Fn2{9k7|}#m?yZI&GL-NFzA%fcRE6Z=a@lMRn!geY<tG
zwxaLIt$|8R(xa^Z=+rbV<Y?54->lMHbntY}+~iAheV1|0pxr>hBKu`;T&a_(VYOdq
zaKPjslT)DVr{}GAJ&~c=*EvNqVR{!YmChdXD;yb<s7xBA4S4UgSRR94uC&HkJ&YfM
zf`S0{W0`O8WfAo_aU8&{N|LzSJ3ZxkZ%)9p;&;IQI_UFr8a9bRz3n)_3VPZ$dy1s_
zlR&Z#zS#8#e_iKcQ^^F_i@k~X?eTkZwcs^pa~rYXC$YoXP`E5i^TaL!{FCjEWWS2V
z{h@8p1&0Xo0%5@%jomlFcavQPj=uQL4935C`@IS9vghmCQI}+#OQT@CrS9+U3Nuo^
zoS(a$4g<6#^B{l_AUt~i-Rv>$7^JGA;&r@)dd0`bhht&<%XNLCL{<B+AK>4?5+f~p
z=;+|H2?$-@AGcy-*_s92GD^?kunLL5TJa5r>;X0Fo>hQ3nerRptQIsi3HoKa7BWV?
zS|`iGb~Umc-{=p8Yq1}v`_ymAlZnD)5G}LX>V47`%K6}O)IoC~xEese)M#UE?KI!g
zP*fxv3uo9!V@m|4MYy71{={zbm{_2-TP+w7aOzbjAxiI8UG2X#eRDiMp8oUjc9PdR
zUCRA&mQ2dNHFvY$C>^(Z?mk*H(F|68OiwDDN1xooz8wqcg&o-S+eqYJ$6%q90V;sK
z5n2g%YFFrj@&FAB{Go58r{}r#8@Gq@mp;NYVp${5WJ&`9s-1|hL_|f&e`2l#T&N30
zMh-s_vg&tTSpk)7VBdy@hEw)ef*ofG_)Hp8)6?T=m8R`}J0qEzPfzzJ(FazB5t*ab
zzYubPwz;{vx$baec=B989nQCh%ha=xj<Jcz?O#bWV{B$;XRnJu+mgPbKmVpr>LQgq
zDuw-}8GKkX7<7@nN`eu!3vl9>y;mc*{|pU<scsZ0Cf!XUay4SHU8m&bt<2B+u62b1
zrZkL!=k^PQWKd2G%-n8Uo7hipX9PUPecnS4AP0L}W%^>U)<r4qZQ9hjuu$&zI|A>`
zkt0k_N-|8tnn2O!q7OHNl2LF#drCx<Im;n&nMQ8dIUogy@36g-_Q<Bl_(y^c=V}H9
z28d04U>m7YBhFmwL;ZMoc%)7vA3B1jzv)#Qb$7rIA~U~v=741hZTC6b=&w$ZwhC8S
zthd9buvvqFL#CKxl->A6+K7_z`eRt!nZ$xY1blOIv#_x6>Gk1!T|8o!ge<^aWpIuN
z8mY4ZS5&!#EaN!8o}Mv9XBIds+~n`I&SBw_IJUR9ceb-*XJvJ<wapQ9S&1j*U1P5C
z*q;E_Z`|&Os80&**x1-8D4^X-ak;Ui^*)?~^)HvKZYeKEY3cD^@kKs%k&b>k8>GfJ
zqhNI8o}*rugL8h5EPzc;nurI<pXi?TP{bC0?NJqtO^w8a!i1U+bWTleXcOeXOWFMG
zbV3@VRQYMvnJ1A5G#(Nrq5^FZu6d_G@!ZSXyVp=E30o0q&&fjGJmEpT?QDSD!y4WI
z=2r%ii-ph0O1nAO;%YyUT$GCN<Nsp;e0~lNtjk0>4^n!rQsHN=Q=bJnldU3@t%)*4
zQfZ6cA<OlaVXyMtke{Q&NS>;PSI~fB_f$!?K(DE?kB@UjX+WP!3BA31I$K!M7W@})
zj!j7RIpG73TRabdhGg^LX1%xG>pgwKN7qli)VgNBxPJU1IaYl<C+;L6C5?hd%n9fT
zT9};;eweG-*(r5J7C-jD!j44Sj;8V>xtqLR$-a9%0kC<gg9ETJ#O{~eF|V!w=CtUg
zQp?lRQ)rQ5qSPao+x9m-*0+^nH{0F0qFz0**MR7zXQnl{?><(qO3z|UJkO06am@N$
z9>EMU3Vq8F^QE&2@byJ}C?VH=^`6~ir?#hyJMirZbatsETG6QGA|1@$>>{5^ra&gz
z2K8N!KVLrB<IZ#+a(TS_^0aVQi1}&Iur*s!5<SfSSAo-(sp52SfMJQgcW$$QM;Rht
zlbxaIS>tw;v5T(gC0u)k%auv<CJEW(hpdaYW5Xt54yRtKlZq=p&=km7j8B&bEqqS(
z@!5(?>df+Uk<_hp(<3<3hIc{`hjVmF)p>!qc-}7>!#6X282pRt>V$%dx{mN?mA$0f
zYyWNx1L<lo*VEmbRZinNE|**2?+~CAlIQ~A9a-~FxUQofv(qw~#Pua&4ti9xOF!{k
zCNd7<b$g;pjyWT)YM`gxRT|}P|GM*8+;~p%YD&jde9f&Hq-8rUDQf&Q9*1Tf{VnFC
zY|tNi2uq7N+fw!>f2G;IOi~U0?@KdTx5d$FCpCvezV8kxvqC^Dr-in!udwm_-L#j7
zRC0HJnIu0I3Xg%3fzKR)tMJ`gI5yC~9emo2ERuU1%ajNDvZY{8DX;^C73(s400%Ez
z^@D*!SRZ;ytz<YVA|otuC{0#x*#wl7!+9Gc7^?x?{Wtc>Q_Q%sXZC9%)_Y~8F5-Z7
z3ydG$>aQk&E|_&oJTHU|-hNkFH0}Khuw=9eVaKlFkDmnvupH{>XlQ%eu!0Eg-Gr~j
zMGwt1$=k!b5^u*9sc~01PF%45Ml`KuN#1VZm*Yb@?+g$w!lXlr@Ws)YS>{^TXRs*n
zyRrb%RU(&jfl_U{cFaIYm{~y)U4{$-><VcM!_7{J0A_xRHRjx|F+>n(JHuSOt8EVp
z3511`?G>+ip;OqeHFEqPP3Pd(S^Itc$+q2OO}3lN$&+nQw(Xj%Pna~-WZSl_$+qh`
zbAO-TKhUdA=j>}=d$09g+X$!Ax95m%Kf1aC?TTzGhauP3L=_Gm10Z1R*ISSptk2gx
zswhay4TUQfrVyY#tquMSNG#d4g1V*Rg1>NDFPz>SFcI=N*3~#tr3riT&oz5J1Ob8~
zpn)nYEnTlMJ&DFkW+uiYkkhKSx(h*=H=oQw(6QFw&|vOFD*}T-avMBqwWy-q+Q2%r
zIb0J#?Y-`$1xpHRgn)pUQt2I(@qU=w&fOML^CyoJ%1IK86-j*q{1iRgXy-|@tF?7?
zn8>VKMR{L<ijtE}K_a)wT2z_cgUmaf(!+<O(706q34;VOaEI&k*~fn$vtH)5{}Vfb
z%ssEezl_ooL--iE(eAaVPx|G{+i-Et#KbU<(>}YmeWT5Ki{~A_Cwf-)AH7<Mvgs~t
z2kz6^;z{@0>cP;^Fk~MO*!zTHkO#D@MC3Zz5t1JGptFnX{DSA~oldJd!h>b_!(Z2d
zf;d5Fu993|jeYa`^SiTC2i0kF6SEDsO&_ikyN#B!^`URw;O6Ee+?P;Ij@;igM%N_6
zYQXNtVlu%8yH*c!`~a!yK3>wZdtA-Scc!P>gIXN*9t3E>1=Tfk#8FF{`(|t~zVEZU
z{aeUWrckL>_xy^*`rt_Gr3*IA$lk8bIF;|){2}YCBlcvC>)m3f3#<vt*u2}G>&tf3
z3Oj~{ezN+y=OsU^wU1ebKB4&}2-z>}cr`<iXU{eI;7jH%o*P$(n@xH0XLqAZg{VP5
z6{VD=rzzJqJrxs;Kw@dAqu%P{@awEBDzuHkM<JA}#>)|pEW+mB);|Dk3YN_66FiLp
zHwO$CWNMQ$6%sBfVE}!v$IX5~ih$ETqCio5`#OmnQtC4Y2gfZ%{DgxYd=1>3nyu{_
z@J~6~qC)j{$aVmF=Ps*lvgWF)OLL(YyzFpSZ|~P(YS1t00C!&CweF9?IcnI_!eo>`
z%C+Pchmao-w5BK*)N$w$7u1RDt*0*^+U^Z|Q|S)Z?eryr-a7pN+^58t5Un_+E=}<H
z<U<BtfUX&*u0mqRzXXSRE7x)w(GOxb_wAks5R79oFCBa`I0)1YUFf^)hsN_smM0#L
zr=o#B4ycD{-t`llQ6ssX0~&FE@FFKnXJ_ZO*K01bi7YsMFB&1YjkWU}J6x0(G>zT(
zbyP;lJoM*4Y_nkTLIE_QSD;#v%sj(!9yNB{eOanFY;?H2tc2pG;trkKHRO0pUrXnL
zX{B`(xgrXw3OEaexPa3);8qXf59w|4;}<|TQQsPBf>40Bqnhsg6=44k_^aF*h)c|u
zL=D68-2`@4cae$tr7m&+^ad1*&+Va7<0{fR9`5SD)@>Ssw@*HkGaxI3pm&PxE0O~N
zca;`yGtj00hUr8>bN>);;E^0jJDeb3zx2WBU+R9xS<4Msm3>!1IHYfFZ4F9I00%+2
z66pDoWT$W@6h(JXB61D2w6siSrNin1RxuCV^$OY4Hp9j2Y~A#9%_`<9YzjIDV5$M`
ze0cez7Y+TDs1AxN+R!I&SJ3qoHw!l57qyi`-43gZoH#$59G}baZ79--B@7WR43fPe
z#Vu7rU_rl5Ln+r<!;I}=5e_52_urwWS+Eya23!4)xk;w2KJ<xreXqOuX{C#cfH|xA
z769j<5HYwbZwbYhAY=nbvF{%62|6ENop3`t9#=P?CL)vRQHUSOC~zdDEsr+LK{uW2
z7jOOOz2GQFNP1=M4HnZzkFqeNy#v9|LJw~yV0Mju2d$gB%~taPOoCy$(8yFEzk43%
zQIqSVe{Ob{4(;n0q!^o=s+pM?@8iGH4pV(z4wuC2U4p&ZxOl|a0wLfz65J~@MCf4h
zqNTK0t-axevtBk_e<fsR^ClHQ&2D@)=Bew;PTOYtS=UE#o{ef+mLj_^gU?nc2<qdL
zX==Y&@L0`LmFPxvvh+JYrlg#{U+ow6Yo~I(zDsRCi#zAU|54!}Ej1Txg*bJ6k8I}h
zeK&k~I$@J(46WmKzaf5=2kHG{IacEx?~3u7<@|y~i(zWGRbjrS)?u#e+22<i8+y^8
z$?F-_7#aWX#1_+0mJ${%7WXbKaF-KL#PgUe+G@dM?CN?+8{e2acJOJnS!PuLe}38g
z5Y*}Gp`_O#A?9@sM>eGDuvYR*&(F^nMu5KS)#SL+g^!Jm?ZM)JEqb~+;Ns%yrL;EK
z+bZ4~nf<`6>sl(oV>9cTFP*mdwHeq+objr=4cHZn&9MWFf}(7JcJUqZ1DSd%z_R=;
zX64MaDLzyj`~thwr38i%q64_HFFc`sd<RKo!MaTWl9|2-(d&Q!u$`#8pi0I^atHcb
zTuvVCqbaiwQCOk3Ta^!r7Iap;5~(mwjLpiI?Iy4n@%4%p0xtWmcDyPDhZCs#goh0;
zreC^CDt~mEzoPWITYxuw)}<Z;pRrmf*SuBb{?#Srd2z#qwAS=v7chX24GsDC!k*fJ
zfor87;}x=@P;3%zIZzYb;;$Ug%?e^{5*aOZ9^&dP5vl*tfqM`W_$da$f$xeTYzb=6
zs@QUTEzQp@yL(8i`rhO2mvWzyf_>P3xXC60f^DU6J|V3%tV9_m$p);E94{xqPM`et
z;g>3b%PQw{H2Rf5&654kh{`x*eJzcz+@HZp<(Y<cNc!Apf?AtzEv2`jtCpO9qkb5@
zT;GMkTt2HLxqmb?x;=Ip09Cdsp83-W)C7@T*y4*+bDw4eSpm7Vg~QZk;rM8#<5Znb
zsDPH%%c*`9?G2%PN|@8zz+K^JO858nybfOp)4hnT*@&L}{EZyq6+sB3J0#K&Cnu*v
zr_qUt*a#|G_%T+*)0Os2Vu(iXYey$)9E%YV(YT|^nBHgkh0d35nBJ4HUBoqo`$ZH_
zd^>6!EUXRdw(r{7yADgs>>^S7NIxZ`m+m#eoOABY{+fGh87#k9!}8Uc*`GF#S{1|K
zf}zQ6{%&;kuvb7_x9fPQ=2{uBeHegQdTIMk(&GHH*W{32*O&yiy6)k*DAbJFsa0pe
z?qXT><^Ut_D{<=R0zpP%KaUxa?fFbm=9V^_T{QuM(|}fsq;{(a3k-Ht4RhavHBKim
z2!~W+rTv_HWWGPs%l2>%+c;(b+Fqa(IPJ8I_yt)5nwiCM|C~<tDl})>OJLsywph)X
z`DKQKAd53V>v~WLeG`w4UBtV%V)2hI1cU;@Vf-Q84nh&E>hQbavnnEfA)7C%ewJfy
z;m*k2$s%y`gBb5N@}Gy-S&4`8XI0XI0ln9P-fWI$3V|y#B!=7345goyrI_HaCtI`J
zAS%J$eD)W_O*!Tv=1agLGbxmad_{ix>FMjqm!)iohd^OqSOqS4!&eQds9bR8y6IqV
zw%TAzn#sz>W~l#(4eM~o;7a&A)BwYa8{@P8r<bJ7z-}XEVr5~hxBJG<5I&8nvK~fg
zu6Dc4*w?D2$8g=Gi3G(d-r0ZCN0@hXeUo<OQ>QM8YptADe)lis86#?H%33?^EEsHF
zVfKh?x}iSsEx+MhWaZ_rQ^N#!9V&l?9c8KBVh|a)1HK^#2iT`>u-nk8Ah!EyMQX&C
zR;j7M+dR@puCQKOK>oXO8|$|Kvxe_?RG1ptQ?t<14XK5~lQtEWaG4lj51}2V>D{TE
zKQO>h*?!O4^bXLY_C~*VS;Eb-s7QZ1{)xOddI%ecqd@9|%o{h+{~6?itiz0QlS$+3
z>U{g~FrLE^^`5`c<{^r4Im+`W!xwZfZ(m$Kui!oTrf-%kBQHtz;w!wh_Zo7O!Xn!>
zBgcLCXJX=;&{MDj<Z&@f(Xo&pu^sml0_3?m$ousQVD<po{RP0>>f0MS2>=2HVon(F
z;T)%I069xg?zUD3^D)-*yq|l}6{`@cvC=tEgBQ-<yVfuvxbTU{Q(m!d4jVB!67Z+b
z(jHkY5H}b?`f?|ASy#8bh71QI%GMA5oH(%xV;rcexn?(GZ={&75wY`~QpuXBWK6Y1
z1vR#9LrtKK#(>&|IIaiUQNf5z4ZRWM|BdnklTfFoj798Kn>Jp;;RfvBB)-P&(Q874
zC<zzCUvWnS(*FT;@6VL9I`2L&tD8Ao_Qbe`DI7pM6Z{4*2+PfKc6^)xc#Vas@I(3d
z_>K&jI}H*>Mn<-H+4!aP-Q2izlpfz)3=Q)-6`H_dR$aDxpgiTmclTw0nVAmVBtSU;
z>gGk~hwm1JMN;f&XpD-Y;wJ>cLYJmb{zf?7s_N>3z)cSrV#4vuOS+&)TK?ZG03E**
zc*k|~X#kUzVd&+<{CEAk4~tLdA^!fM^iC+PQS6FB?>=nkRXd8>hK6WwLrjkoIP&!Q
zyBUT|O<oU-r($?`cn$_|mY5rXXf$+m*B=T!narLw3h^RU-=6%^E;ft5(t(|b4LYLR
zN3RY5>@F5q3sd)lq@;<6x=>#jdGF0vr-Mm2UGK<s=-ef{V&HlZ9UTqnDh=>S!V*45
zBuf9?<my7kx_J;5XcqvM063+&Rb58)T?hkpZgs0f_chlwkw;h?VV_`LPCDKNtF)e=
zo^C}T_+8Xp)m5A@<N|pOXF`r67}2RbaL6MWAJ+W>Uz+IE%l%tr-sb}p(uqkrIvl3_
zA*5tw5d^4&gg}Cx!X9bxWSPDQgZW)}+lOaDv;LZgQpzp6MYV_lLB7CUc6<NF5V^9k
zkJ)fZG0&(49v8SuCh)hkS!#Ql)=$0{?(F0qT|CuWF9J1b*Rl2A+-<;C-L>K41;q=n
z31H!x7ta!4D(mQgKm7Fc{5rGPRgv`Lu|f2~^YjqSGkVyhL1Q2gC+1@s={RiGz2xIC
zA>!8A%xMK!Pa7L@!>(DkxgFfwYMkOcoM|^(VabBYQxUOeeXgrx$1oKQ6Dm%|ni0}8
zgJe7aCL8$(hjr)|s#AkUY>^ximBaOSNcDu=#iPtPe>8EGmsJ18@J?#-mpK=6&2<T!
zJ0iygIEQY(uXy^nKCh*c1Qy`2kI>}KdsZ;gXDcgF@~KaA?dN_;qyL55WcHZZ=*=hq
zr**{b>T&7nG#s0(+NBbh&wvQ*)4<VAj?5$c0wvv44M2IKku%iODwfhjh4$nf<Q?_q
zsCKI8%K;b^7Aq|L14UJ%EP@Lw#z&`at!t1<&;SF#p~B_qdaqh~OY32!-rAu<Rt(CS
zQ|DlI`ODUh2Qch=*O_!MgoF12@L>PeJt(bq*49B$UD<qY_%RYqIcqI0Wgl&A4Gq|T
z*kxp8w@nZj$vYp~F9Iycy#uVe8SK}Z&{97CUGW8I9|knHo^Qa2d<#F>)jUBfjFqYF
z5`4({nf6=m{_<cV`3~t-fu%5Skd|7m4^@YOc~juo(NVP=xE`*n)3f=$5g1wNpL6Wf
z=qmlg+m`y1g`V@H&UQ!w7`yhaFO&nttPAt=0S19YFs|`{wX9q4Yh0KBR5|KU{n(h?
zQt=ke)%t}mS0CYYmpswZ=++1}V-;}7_fjb7U>+tZ7*AOz#Ax??75An66xoaL>t_AA
z^$kMsg@MFo($rAWUv~h#D~5opYZ%_UMOX^g5l||n=^Q>7Rzi9-x}Ir$+<4{TI*<Pw
zw6==8>o30qh<3MoJ>+f%uVc4J9n!y{u!Qn%`!2mc-G~VEUTp&xri~g?+35cKp>8IW
zz|#%a&4!)CozpB}NRM5)S=I4uRL|wkc3Ru2>E?7)Q%G4zIR$Bh!F$AiWeN@ku&9t_
zp-woQ_Q$%gKzweDgxQB_c4<+*TLf!Rey>-9@>Cc$U};dul4}>{^j^iN3QO=T6^8r^
zTumYlQ&Y*0*Mgwf$pI9B=fVAfyOXJc?g`)B=cJNCx2a4nyDm4!#q)LX*`hBx8o;2#
ziW{7Hz<X}N(@(O=Xm4b!yd0R6`&<aUhRs_qgl2O)ECIYK5!cBK0Y2)%6Fh6HKRs~J
zOMl18Pl4;P=$rKdE59zl(Kz7)@BnWp{PEd8A>R0$cSPl$T=PF6XJq=s&d$QldY6Ju
z9!MguuW_OR0oI)RiDOe_=iSLSU=Rp#{4`+=1E}$?I75qZtY)K+*oy8JH=y1G)}}UI
zk4jtgeOTRFLvsES*2b{AMzgy#kTm}V^~ZydGA$nMtUoyH!3)>=+0Nd2$3fY|b`~f6
znh-J2*wCjz1;Fx9)K`7jhyFTcJm7ox?<dV0Ivq}!x*<nHT=m)^uL2yIKrTRwLMjs|
z4(V+53LPu3a30WVPdFCB7ynR6b-m-t3+(J_0WKcfy;$p?%O-&{Nv1o!3|OALx#Jlk
zdME603aPe$TIu+S&mCA3b|QH_$pmO9Q}tUWBtExFO{h?VK9^hFU8;%9E<g!;r^bc`
zzrSyP*a)&-6nftk3bkGbpmX3hOagGfICU5W@0X07$;_q>->uDj{V~E2E>wyYLV^>4
zukjq%W#a2x2GRR{ygeK(%}7;<8a8>q6$m|(bN>jl-a-+2W%hLEP7GhW75N)j=mVTZ
z;zD<$DBf^@qsrhL%JMjQzibUcQV}u{uQTu?gdSd<wtj4}0#m+%0*r1&gRbpEF!U^z
zaeCMvO=KaWV5f?}4g$C=I?r)l0*6_5ObIX<&QX~C@p!o%AAQL#8B6H16#ygrEvPtD
z9hs0DwMs`!kIXuhB0=Fw4@q;S7*t4$Zj_Vv^*eYgdfHl70x2-#WW?=w6{C25dFgz;
zmTf9*G3<ptbb|0(6ZO{Q7T(uubD#EefW2L;0`=q>05kVKx9d-m1fJ-+)Xt^3#oaQ!
zSJYJ#Qo__P%jTdjx-FOra9gNg$-qpSm3i8UbPF#JCo~8U@&UY)zF~~<tqSkWbS4xZ
zIJepypY!GObGyUxZM)?@w+J#ECf&6rOLD>x8+C#q8QuU6!qhFh1zDzcNTSAZvmi>G
z`rX)D0fnWL^r3`l#0wKrZd%Dp`=h|(VQ8#0bY6)QW8(sOc|fz<-*~ZxoDS@g{tZKW
z#xrsB*A5((w)t-i3{r8r_GD9UdEb7kl{MP7qTF|{WMs&86q|(AO>T&2GZ-IC<mfhd
z^Q_fA9ewjfyd$`UF8SzqY3Q{Bztb=OgAB5^ut0S+Tzc6G#b%IDnQagLCJF<?PBoaV
zu3q(bGKbnIzSEJoP#I~>hVU|!*bC7^6WFK~egh3?xIY(UYISh0s^}iLas%GSI(gaJ
z{iN>49ox}NLBaXQ4W(ptl_p=b?346IM>(8w%_+A%<gsKWO&wr~y2`VmuPp@J!Pzs~
z9VDg)C<E?L7C5>$$Cgb4$ZPjgdfheJ#xx6Uu&J`z3TrE}-*k(u2fsAT5S0NRQn*p>
zoMlm3$nTB^ZfO$<?UrRBU1qcG>iZ3MIE&O?k2C#^2-@7%3B3z`4-U8C^75xyU3IUA
zW&#H%K)=s7Uid_@SNc@kShT^MUEmo`%|%^V8Mj(!Cf+~x=MQH-zp&`bPY8!>G)4qG
zKbfqY9ORUkSrr&OV9f?zc6S5%;J;*%*?isS`nTri%~n7ikCvTSYSF7)v|xW-z(f<v
zGBR`rTDrBhHPpgSKFu0>ddutU3Y~HEBGq<V$<Dk)r)lp$7%+VNjf%3B9w|yNexb`5
z{kHn;!cFS`Ib(>KK<I+-PW~(D1v<4XvjxTVHT>#|(cpP<Qqse{E7~5|I^n4bu=_m?
z*!^@`6|K~(NFC>I#EmRWGIISO>d<E}=ERZkK<*DH5>6!Jh@m1-YBeer;)4*&q1f?R
zOjFj7*`{yn!hSIKz)D{^<e<VG=4xx<8)J_S4-*jKMbGEv#uzZWKgh>X-*;GY7I(V=
z?n!Yy^c}-?X1Zjp3MD>>`@TB%3u$|cw>-t8qmBM}Ch(x6HF5#+%<=iz#0w#u0>~(g
zQU7Q{-8MG!7Q)@6NM*}87FkbFFN@i15uWG(pCki*?Pq4C0Wpt8n6_Fip}SeUgETec
zxv<o~BELf522I@pNy1zx2%Dc#?Egt&ETtj{r%un<7JEKNubmw7s~MjV1+FG8-_RA=
zYQhU3Mccf;+H9|cc#Q6&UIZbZ*ORpBIBs5-H)8?o7}sSY%7=<m{vZ7-e2{K3qr@7!
z7g+#dji6=L>Vkw5+vMA7+nf$-VcfPl-P(sU&)_yP^_mWnW^}c>J$ynS2Z9Tp*^bu+
zc(f88m1lRi_P7s++ZUqt6?PS%*gKoBXGz`abwF|15Q!SM$g!;vLiZ|o6M1jWx3b;a
zoOd`l)s@bsfpi<ZzUY2QM7?yaQ8FXM+kO?hK&6SKqo>!dH5&&?FK#dAb|C)@ICF#D
zg9vK6H2Vu7#(ni<jc^F!%yb~|x}33Hy*UcaAVax42bHF0-m|c@e*K!0{NDca$5Wy%
z3pE!aob3`?KjuvtMl8f>?RRnI0VO+GwuzlfG)rtUH+Tz~i2*TE(sLdLNUaU#zu^_b
z#7Od29t@w!ISE$Z!g)BHGzi&cVUY5d&tO;LBqW!!9KC`;=}w|E#b^?+fyj9$&bBxa
zR~kKsB`!7`;SWdWay{QOCjg!N1lN?Hmu!adi%|dqhQbglaMsa)VVNzVB3Mrv^tMXs
za>AtPJN?j`>~EP+*;uW0U}O<AyAx_%Kx!=Bu9)@m+^$(63Mx30WV9NSIJAWM!!=X;
ziL{jO+k&E%8o<SAc;60nLtcfUn)qVlBPxJnf8@lLn-jbHJ(K|OGnqa6#?9VN59hU3
zI6$bU+KuE0t*0IMD4Z+$XwOm?69$p<sIhfBHxhDlIouFOU$i>5zFmqd&V-zlscN~L
zbl+@^x64|)eWl;<RwK@5!P^pK8&d$_=K!${Mc@`yr<@q}-IiPj0tFG#o!?#c>&_>v
zi@A($Na}Y)DvHALr8DJIN!eyZ)hWe80`bq9@LF^W2qKtcmzPzlpVMp3@kcgJz*Fem
z(e`w=!sUlsr%S@Q823Wqn<JtJtyyTbIxY4$h%V{SNdY*82<p?-`t!}N5mUKcuR-CV
zXJ`nf^>+HoQTEg`Em_FiQRc~|+Ws^URHLYXo!dCdLma0|qP%SWBven!V+Yp0rN>t4
z$@`lzb6elT&-5Gwu9%SJ+MHFm2Oc)_WEW7Y!pB%xj_HIOaqwyb@D6ul#?`x;j={?4
zB)1ztOC5L6yIuG=5HdJDM_Y;$q;>^%{{rTxbTOVl%{2U+mpp(HD`LwmXsk~AxChi}
zhslNio4ck8k*Ir`vb<Sr5eRv0&P*Q=yH!86qX&xRcXoah3%$|qK7QBp2qA?NaSRa(
zTRGqs4S6L9PdZNTwUEXkMcc{l*JijymrA_e@VZEF|7<ACMrovLgw8_6`<RV5iuzz-
z5h*HTVVMWMJ3||n-@yzX;f7il4`TRdoxC!-Zlo^V&gGzLHxB2)HeMsUeR#2IR|jPa
zI_we;>03{J`r)M$yTtP-j2h$<3YPZWcrGr^)9=Rg=s2hoFPSo_@*#vV<=pfLJ_d^C
zHZJt=7vaS86euEqh;g|g-(WtlTU)-@O*`ylRpQ)b!gt%($1b$qZAvFg^1}!g+kIh!
z=$7ICCTtMIYcm_NZPk-ta6>ZG&+aPH?^6}~KcbLo9Z02Qg6=ixj2I%=@A2l@2q2k|
zBF!L`z!UDp1Yy3*xMS^Lka`8RSL$GEz~S=_iTrf;W&fYt-Xt+;2<%MKAlj(_{PpMm
z%>tZ53Hb0g`QXuc+Vg3=x}*QFEvAizIL`+h{Q0>II`Sq`4W=>v=!GN`80j)~QnX6u
z98c>sB5r%OKG8<bIw@=Bvz=9*+DXdDTZzT^-a4tfcwpjhJyH4_QP<rsN;>tL1Cc-B
zYy2FU(y0^cZ}Si@^N!Jgd^{0!G_=0DL~rLci2U6@d9>5YUlAxHi0YiHMj`*R{9>0<
z=2Dt&X+b!rINhHC)5JB#?*|cOx9%|_l5Ha6Z@1b&RT%p%C*B<Fo07|P71Hk4^l*K4
z8p0-wI+%s?e3JR`UM*9R@sT}fAzG0gtzKkYSFsLZchDqL29`bTTEbh=#%yiJBW0Dw
z{;(G&%o5k&EM9jYjhur<28)n*m?+G0ugMZH>1YGl?`h6H0f&U;qU`7`<(`6$@~CZU
z`gr)5acF_h>s`Jii$2$)vy&;Nk@(Ab3irQX-{CVQ<gJA)*Nd1E145k3Z39XBsh@UJ
zN2D*=+145MY~9+1Y$LxNm%y+_ynLw|@Lm89Q^j(=U|g4lKI}Iuoopz<iWZ74b1L?2
zRwvj3x3wOWAy^ii$vEvrtLMQ40SudYYV+AdM@B2Npp!c7>$ol}0(R?F&@PW!a<AJe
zv^|F<o1AmhefM<20J6qhtZ}L|UEskt*dFk@$sKZF0DH$!Zp%Kw5^oDZ8KY??t)q@T
z85@W;C^=|cHo(FG<Agwq4G-ie(Es=MBs!N!)j)i0_Wk($NN;DTJ!$amPX1%`jBrw$
zXHp|=-S_X#Iv29l7_^ToudZ_8yefa2lJN|Rj=eKtEY_bgGKLa&XXAyn>i~k7aZr|H
ztj36IMIoDDZJx=?$gA2-wy1G7^&eMIXCCKau~0*VZ@$6%$P=KlTYd@65E2k@E~d19
zS__;<Fz^QC7IZN!SM3E4g4{VAe!S8=m(TDb%2B~plf)!qfA@EcK-4RR;HmzRsY1UV
z>*V`?1nfffKZH<VJaUA?PjbX=hQeELy2Jg_$E6zq|Iu~kszet%`Stsdz+^76Q0YBd
zvJ4UkAv5v58!eCq_thUzDPzjma>^r1FsR<O4@&oZ<=X?KwN(+;`>JUPKcZr0EDpmU
zL$_R;Rjur(<#LG!25s<b6E=|yG;pUjFX2Id3F`wfP=?8niU{UBe$CAci;N4kbKDJJ
z+{S&#|1Sk#`|JNYMj%o`ekUv+aKZqqoM64jkP3AV4^uZcz63(Lznj7oij#yAQ5%22
z89#U$GP1zGlrGRQRaRA0@R(I60yS@ANk~w1M}~C(%t5c%-3Iboxkv;7(y!dylEOXW
zh>+zhXrf=U!zV{q#G#)xuY%iT6YV<`%EDCorl*(AYn%sv1C|F^FJ@RRJwWnp`F0Hs
z=#>*f|Hk<jsW~nl;m40Eea$>7RU8vS5Mrl-DDZ)9S~1@_bE37)NN}4(K<KpqMKB#m
zG+8VZWhSl)vISI6!uG_PG((45f=mM<JAG34*S^pkdsqdR6J*Jz8TN$P7wIU{jkX8p
z;TERhu!^wSF-$~}#3dtHFgIx@0xNIz$=^zu<3;mFa6%<Z2%o>?QIkqLVon_+sh1_o
z4{wyY!R8xyR&K!rlZFTX5<@=hxr=I1Sd2Xvg6xf+9(UfV?PL~FhN=T#Kw2~df^3M-
zX!C+941*EyShpw%`n<Br>R=QRzc0x~epj(e$uy*1=~hAV!9{jdV|KCzM3HzIHYa0)
zS>=}w`$0%ZuaRX|2Q=yIB8TZ#a;=<|M^lToUdh7|t(l?!4dTR=yNu{M=qakIFt2KT
zHtQaF3Z_hh(~@XmTJuK<|K}i)@b|x`m@kwk6+gl0jzab`i?$0*AT5fhS^`WY@xLf(
zC*G$8CGn{}qplPuhyP|{b++aqNg)UO#ll~kC8$dzSWR|Tm8ZmNTZ;6Fi+U}^-WgX%
z7Zw&41gV1?fDESx2PBq-VybqRuyiG~7P44-&|9?TrqJ2kTk-zC)1w=0YWO5qnxQ%R
z81FMKS`2A4#h$dE_Zi!7b0q?-_VQ>N%j(Nx;%)es3%NCgDqI{TmSV3F#HbWa(Hr;>
zVj?1z^f4-@&{;zgw-~P_0WhYocUNvxaA7iq3l?=+*&EwcUI5bG8fN|WN_sG*kZ>m#
zpgdY0bvOW=hCotQ)RaK-Qb5BmCNku)_1J_l(YwV2>_QV1gELm7ja{4+<ti4cUIl2w
z#9`mLP%Y1#Mt+<3XHWJC?ODuht%_>iH7m*muH$Wo*Qjz}rK%fuNlH-1g+izEOjP}p
zn61MeO<T9)!bOxQfb*u=mh>i(#l8J2DTpB4FFn+<&IrH>`T6@^rr=wgwg%eUC~Ifw
z;O{h#Y|MM33G<Ce2=Q!>Pum?~*z5s|0g4<?F2GZu4ZTzWoOiz$2>?r%v=ln!=G4(`
zRawo^)}g?P5guiJLef2toB&3;Nh3|+FUdc9Qo~N1OWEB5)wFQ^xmEL#;JhN?-+&{J
z*0Mp9Ybj+H1?xPAa(YUIsE)b^of+)jiS9Lp3+_BO8R~@8VrLX)-ShC@Hz%SDjpd{t
zl@1%9B$CARa(Nj)Z9xW`XhQM**nCM^QX*`53=l;!920+u^Fj8S!>6qDNonJWR7-I8
zH3!fnCRnly3gBRk;S!RPOG&{-ifN?70p2fxtgdVgXR^)ln8wspj!qH<KaAqcG_WFs
zz#|Q%1Opo^l?kU<z5-@($O!+D2d>Z{SHw6pNNMlWpgbjXqX?4XSr$&tjD!ThLZ^iO
zKH7YHE4L(V_}!EZr(Lp_K@1X?aqTVK3S=CO8V83X3?*Yxnqh3Hze5{Np{QDtrfI-g
ztX+Yf(#ae6kAw7CYKDCK9OJ?#QEgP2al@p)n^!BVA-Ay}n1J(IME-!IAn!ot^#}OZ
zKxYQq6Kv&3nh`{7d-fSN@iCgy4Y~u1Ys$|c7v()aNFp(;FU}BvYhSuKlz`saf`Z=O
z@u0qZz3dDCJZmZX0)rWh52>m)a3O!v`RZhdiIL?rq{aOJPeZqUEf2Ywbblx6xl|3-
z?n85xl}b%vMtK_i@dji)$Fv9vGIL$OQIdrsqA06KNSo}d08!9??KRaLUAC(u_t)<t
zXa^;f=G(yN8&2URL3RR7cFc&XVAv`~mm#aVS}9url$<Q8M5ibV5b;T+0uwQDP_$wu
z44AuZKWC0F2u;ay8&yYl6KAKV%PV1?PE>uvuv7f}@hm;|Yf^PeNGw0pXc((GB(5X_
z&SeMEd#y~XB4ix^F!yddJnCRIp24oSsFy*^i@Qy&xtWIuN4&{M_iZ9xE&Z<6{%PZZ
z%gZ%UVZpAY50ed8O@TR9J{P7>k_F9x2sOli9br5(P5m<NBj;CI<vLfxjhSU&r<Ia(
z+yY#Qzz4+~h5s|bz81W1qvK2zBSDjAX=6Z2E0XE)IB*sd|M0W!!jDwk-32}oURKsq
zLi1#gAT&_j$mQ9zO5B-gwK5{kVc?aR4P}o>!eyEHw@X;{s&{Zjog&%iik+KumdYYB
z#xC(q^(#&KRO>an#<<v6SdR^++fl$k=h?1TvA~QSZ?vBH)=VdT4TTVBnf>_8-i)kX
zy=qubv8Fz|`;iJygoTibz-zI3cvv+%Y!r9j=gvg+!<))5Q6PTm=VO^aP<O*+!u_d~
z2%VST%2?@T0Zap_XrneD#lm7$CIh^baNmH>I(M@#?`_Mk&^F{K`%qpnkDS6X<V1`I
zn^b|LKkl&{0(w+h{#8{G-JP9`c*Y(nE_b+1`!+Z(F*lj!qR<in2xj`9zZ49zXbU!Y
z`>R1yo^GL1W~3urAO)ttyi0|?o`HUj8$9y=C_?r^kNTDw@solo%F72DLMX*1%#VSq
zQdQp2I|nAYVxFIsF*?7|T?zTI;HW>V#VWN!A_&XR6R^wZlw3X}+DZW5D^(z8{*GHr
zngJOQWQ0obNye5{;&7d2;790MbXG{RCFK(^K@dTOGA1DeR`I8;j*AO?LmHpR0c1k}
zWT#f{U*=k+Rh0MdJyc|IsAX`&f4XS{W(#d~N16*I>-M5<BJ=A}6?8;V#BFt!MUuXz
zD&$D%y;HigAHb1Nx?)UAMy#i_ZFWr=TtlLe4Uqn`keQ%^{HcO}24OFdD$#)RNuq>R
zzsmfu4iU{JP8k>H2Q%^mg2Du3PI=SK#ewJk+2FCZYar+&xhi6aywB<@{)^mI4vp<>
z;y4{A+)k<z2{p`>TEW$CIoLpKir7r;wxVf~s5M5a9buq8CWZ~0SGnU>Vy6vw2J3!z
z$Mn!dmwd@OgsnetOa?4YP{J<^GH=6$IZykD;cR5D6Z-5^RK*PZf}RW1W-KTBj**fP
zieWU0UssAB#|QH4P$q}@@!?C9+D6{w-HqbVTffLGRH_JDI~e^${0|}|QUu9Poj4{k
z*!V53wo5(<1K)WDmP}wc$(#J>%*nCDe9!$rY?Ld3A%ZjhSI{_D<a&ArZfM31+t2XJ
z+v&vgLtHHC*if?)M54ODfLU3@z<)rDKuGo%Qj0_}WG#1l+{wQLau~m=Cv_Tr=GLR9
zeG9IFnG6QZ%3;9`lZMCXLq;IVW%V`sn8{MuGWBFk@EFqkp6gM(6ZV)LHaDGQcJpe&
zrn-Dab9Mr`h|&nr_1YzT-sb-dbAc2%z`<X-pF1sBYpvR#@&)LJ0x!vZw<lTIsS11)
zr0&XJ4a{YN(RapzNFyMax(Q9~TxGOUZbSu*(reqzv<t&}AwSDQir-RY1*O!(g%&ZR
z!2m@$5i+=NE4P(1a(*fNEmtZJDN-Wbld7lwx3Jo1gN4pKTSA{;fu{tj1Uk=0DA{Q(
z|L1lib3G}OyK<8YhQuEd{n4ZeTYrj|)6JHB*gvW)t_T?uq(xy)EXcI>@{lvaKf0mn
z1CcZM(n9``x+2mbGE`{l`~xH4SIm`wSPEd*7<kWPG|nIywHCQm1D<O_8}Qg2BOYYV
zfo6dAQO->=J}X9@6q-VVnURN2=kXu-1c-f0Ao&`O%!~dHarUn(`5Jyw3sY#VnqNmy
z10yJ_+lg!HAp(~%mZv!5KcWHOxBgq&Cj)boqE>N%!3qt^jw++JF;*9^HdNh}hFz3H
zna`qGD&xNofMRc2EHjN4nfGgCLOA7e43;wU#C`flGg2dm81U;xk{aIF_X#~guN=@|
zN$Ym{2e#$9E9|OE4d;p}*adrcM7XB(_fR-7kac5k8Rt{N(@;g=!G9?YN|~0R4htG!
z_(vw9jSH2Er0yC1na^m*ZwR5xg_)Xoibk^xH4$S@6%JW4k6$odGH<0u$05?QO_sZE
zmpXe?2jB-5xs{MDK$@zVb;p{&zv(-qIg!C>Cyj=qKEnK{K(3DdzgYkcIGPDt6rFo-
zx0o!BBB3#O=W~!KKyazG1h{a(;gGBWu4RDA9x<iq$zM*7`VcvU;S|grQ}yy$zi(Mn
zVXN+v;eyAhW|G*qpF24^T1SRZ+WFQqXxPM+_f&lpcSt2LxK~^_sBh7t4#-zS4)d|G
zN$NwP6C7dKK6N64795=BQ&Cok#i2<>qm1WH1Qrm;-%jcJv}qftGJ>jOm14qHA${*)
zUS<2LSEY|~i}44={s(O8Ap_R}(8NjHfof1$_>r1w(P;S`J+1qYHIp`(DY+C0_IdGQ
z)B*w!v82WYqL2}ggRcanS47C}%ZShzHX8sX0Uc!r_?o-_HN)rgl;J-V)cUhBPO`_S
zS*C@ixhp(WNr+_CF{Dk{wbke~jz)0dznJmH0@r=%_;3hdC<8DoI8T)wrUb+<@ls^O
zE$0BZZbjf{naI(7cT#Q8A)LUM$VbM+4s(uJ*t7j*ddrmQscsd1AoTFnW{o&*b<fn>
zd+p41umoM&_0|*ORDm-ygcSV~0XAXXau)U`w*_88o&C=d!BNadhB(iZQ9gP#Ug}g^
zc{OuJ@O+z=V1AOwntj$k-&8?_vYb(vnPU~K(j0Xbc~fM?yYby3qpCc>Ckrr&bR31h
z4Uh%>Sg>@#j~O^~jo};A4Q@)4BY}YLT#8>6RCyOl&^EWvC}8iaad<Q+Ulx#KlO!5s
zNcI@E9(bU8P6?MW<;=`hDDK^cottvEOH&43x}U?*)su<f$SYYXmbJ?!6EH-b<|s0A
zMnI@v1USf4eG)UQ+J-tRHt<`TA|W+Q;#(WD0`s4^TZBP<30Z@D)2XR3<P6j+Z<b_X
zWG&ybEJ%_6U<dHMSD%B4^XIMZJl`Ih9^h1i>4~BA8;1ZMQ|7Hh^nUz?pd?<uubHK{
z=P8+8DuN#Kr+d7PvfMn8m~Q6Jj-Y~4RVz`gl#R5ac|0|%2+)1{sk^-kPr2(!iLG<I
z54w55^r7<-96FKAp$Hx)tIhHBG#VL>bgH+g^9x~$y(sSsLy1{>t*yhuL`_aL&HgRy
z8*5KQntqx)9V>PxZBhvba)%~A#<++mM$Wi2KK%GrZp4(;p3{`$@}Zd9)PIGGB4m5N
z-&reLq0(vT%tkb)SE(o{HpmCrGBc7{@Sb}C=|@j*OL*X^6YN&DE@Nu9K`zaRU8<T`
zkvUEV+l{R;`2x$yWf$pLAKFIAoK=N_J#&%iU(6V!yI4f$>U4y2VT~`wkO{a=B$n*y
z(uqH-?lpPu<bqWh&4<_|FBm?)#Qe2I6=|z_-5LHt$5;>-%TPecHO=~WFP;(8vnG~w
zH1dDv8}QEq*D3>p`n8MkNcfdv7a!*@|F=sqP*Ij_uNaR<WP281=ryWNlcU1T-OVkO
zD3~|jOO4^n7C8HInB5QF@N3;FU~y>5z|%}!@2b2zC*_BEbS69ieDG;v?;%(ksw$1p
z=_7x|J7X*R@oK%R7wjfVXj|7bG=r#RMj^8O7$gjrk#u^>6&Rf|EGGLauMj0f0%knF
zx$l2Rr7~6nIN*mrLh_W<z%7-i0BrtR73vi!--IbBaw0x-1u?8@wFX7cOmfq3uo)O&
zU8`raa3pRO&5>mdYL~aPj~$!W+Q=W4!R~pAEe4h@<HZM@A!(t~4)fjxRkV0*4&EmQ
z(tuePR7ePru*l5J4Wv5u(@pSJqh<Mtn(bsgYno70Pv#e`#|vC))|kfrbW14*s~eM&
z`TR38rC*Y*+0;^=T^p&QP0`{9i7ZWhP)d5R>;HcN)C}o!U9{GlX7Lg|dTm(oVk9m-
zk;9C2k_^5{SC;N9%|fwPOuK^;Q-S2k`jvs68whv)F#?g9kOxRkCR>OfB~uU!GxTqF
zp6#$#FG|BBOrkFg5VzQ&73-_Mso{Nzl(GPNIW0Z?h=h%u-TC<MFaVa0|J!e)pbc0p
z0hLG(8~1m$F95C8+Qx>oG*)bTGQtv+T$Yo(n=M`;fF;g0;zBE>w}^4{Le_&X8Lo|u
zkS_0RLp`>LFN*^&A5t8wUKNzW1N)DqD1we!FH;tyDJ5Qd>zTd24NI7wlk;cZ>de1)
zdtfz933h|iu5obBk&jTJLcL)2geX9JUSE0Vr=A4&8vj9+lrn<=XwSJ>w<F9v)=R_t
zyZnEcSwiVa#$X>)XA5R!uo#Km);*?o&ODmmZEZjni=6x3G!A+!L`cXJIe7t#q)g20
zw*R_h85g$=S}lL3oLSg9b{Q4;9sl#8@ySAEr{~^CHv~+_<4)91YK66CA8m1^)$>*+
zA*Rl}>hAt$Xl*+?JrNNw@7b)0QeA?9u3}7X39+qNCK?)ce0l8Axzv9=lD$2iEQQ9=
z<m7B56<f~GRwe>2TdiuNJs=11@Ef7Gv#Tp7VS&LF4ueLM$7l**1gLph_t&%kTRrMP
z8IfpDvnHrgvtlk|07PXv;nBk<S=6f-sZ-%3l`x6HD_^jodn6R<_!LE!TEG~AMWK1A
zgK^wg#hKRUeZc==p7BbcOEu+!<E55~C&B=pxwP#ZT@0rg2<kWHZ7^5f+24!$ajKs(
zg*D4(B{{~Z9yk7>3n#Z$$)03fKcuAT22OX#Vti7--$$j*BMgnvJzy=8WwLcO1gBQV
zOYCm09do?yBVgQYH=7K{Z;$q39x}E&kkH}+1KaF<cKi9<2)e<)f5|!^BxzhWidsZ9
z8!K@?oz_J;U#a$(ZMm*VTv%|m)}S0s{jzbh6jZDL;=;XELpXT2dkD(DjWb!t)NH9c
zemcnEc529g{Y2=j{?0z?piiMYp)4Ha!$`y6eG|j=N4JcKAam-Fd1`6N{op<ui~f5G
zCeGsgdbH-`2=HRMUzY-sT_&wI_qz;^bj|b!{EKPnl8;BBcj{E@w$joFsV>0#^rGi!
z`4ow@_(%W7?;MEe(SLbf%*@PyhJktDzv^3ScCxmz`f4_J>>MZ1aR6A<k&x~#U4eYO
zZvZNLB$*!I3GuD0!oY+r{L$v(XI)!f#&g0mL7n;`(;@Qo5w35$lpDW7^N~9RPfmc6
zQ?K+&bzPFa!>rCt21mP>(f)TPAv}#@%T07_FVP0-Da`^5=_-57N00?M5uMjUDd9;Q
z)C8ENl)L`L*5>D4zenud7G3kbh{XZL3qR&F*fcCeHD`J6HZwj_l>nZMXJVJ&Akz)B
ziU{f(K2lh*onudYiYWm>%<WwF0mvu6xcEWx1Mu#5dMD?XP~Y>5i50fCK3sfU4cgig
zF}Haw-p|Zf29sm$6;7V{wAI$WZ2H};F!|j*H(7gcc9_>03dJ=k`aFewTsxt5;2j;s
z310h88^97u_Z8ICfa?Vqo5?Yu;6Z4wa&m%e=fD~OVE&u^$&anKht?KccKYaGX~j>G
z;+5uap)q`b;Pk#iyYuDD-tYP+iQn^4F(Cbdx{>{5-rWNQ@F5Bc3J`GAe`Hh}JtJl-
z{F5x=Zq#|)EZDA2<OrOAc)7WOU@8H(bN<8@DQ6c7yZY{X&FGb-=w1Cxzex9Ep8Q-i
zeN<`E>|N2XrJ@u8O2=IC+pHO-f^;hu(^_yjV~tu1#?9*V89~UETHcp5{{;f)$vty_
z`x`s6>jS>6S_B(6Xu!-pB{&!y5=-FbK@ttK>g4Pk-3N!fp@{tXe48V}R^*Wi!*YsX
zw%m9OuBiLU)a2LVdJ7*vD|}_+<`XlYS5Lb7M9ET{rLLi&udM89G05l0f%l`=t@C|)
z5axV=3%!y+x5=_M1N3^zg(>d3?zfrM%(l+>P&#{1#-tZgy7{!wv0}}I!=yJgKkxMS
zu+-k?CPe?^dAvBs8`945)Z?`K2+I`k6@y8>{sg_PnB54LUgW{J9pAM)Y<xIB-#Y#r
zcHbSS=nB#4w42Xvje$WX&fEN2eE{-uT&WAp%R?){JKn7EAbKToiv@Iz`{Rup9~*9+
z(EaZ>e$VHUAVMID<Mg1D5>Q8vXD%qv)14k3KHuIj0kLQzP4=rThDV8X7H{|2&>F1~
z@gF7bYdM1?t8d+5Ag&E-D!~^-d!g6IsCXmJvUv-ITEqvm4x6Q>tF`6YIv>4SSE5$|
zw|m4_01S~m$c6Yb_Y-DRA|k$>jm=73>HhJ25Ddzcu@y{vx(28HMpk+<2Rm+3a$#;R
zs#RG@NtG4@Ak+dL%&*QGHZ#>gsENtR#$_A8Rn6ma4H?bA$mp>%Ox?-v?l8Vm@34At
zAoOCXF{|a!NBu2pXky~e@89_cM$)FHg+Mfuy?xMjPEL;g`wrG)m4Wyx)Hw&|AB|@8
z3|x}9w*+Z;s?BiaOsRWKiMufpx`7u9<9?g(@9^j)YLMGfNld>P0&tTwY?XV;3{*(^
z9SMuo`Ll|DRH}4+eWt&h@}t^>Eu$Op5>dRS3MxW>vJ3`3WvNKCtzBF`h6^bajfgJx
zT&;=)$`NvypSTO{LM7f`qS)66wNtxjy)@#mw2D=`Qd1I7Vf3}Kr;n=G6awQO7b;rg
z1Yf&C@5-E<Y5^{QSL=7T{e2Umo7;lMi@DDCfeTu!yS|(-LuEI&i=GgtBRrfhS(|HX
z(5)MPU>a~z<-9K1zr_*rwVwpM2y0{5`@-$E)YDIbI=%O8ILcF(O#)>EUx&&pCiR<~
zujih;<j1ut%+A*|`yR+ce}~+hZ`^sFag?P5kRxjjS@wq@Aw7VnEI(y#c0g5>d2=x7
zwp~UsA#-uE2Uv!<N=iz0lZ&#%A2r%9&XON-ti0S7RJm4myvO!i`P`=u8g>I2F4fMK
zSnkK0?{<FDKc=5u=;08$_=0?(j}VX38zwIs^73eZ;o3MYT?aD(trg&42l7LUH+xcd
zJ6_Hq?hq?&AJz|;prLYcF=Lfc)>fNb=!cFL7j)jPI^V3reSplkO&|}jN*ajnEqi``
z&VJbJbS~v;z;C;mo#cm*0RnFXODjsj5Zc_Y(05+80DoAnhPnB{69A3K1cD4X*S4EZ
zAPAj*NW&Szi31jBBt*oi!TXj>E=h^6Akn4OMHqxnqjEbk{C;YY_nPG^M)HPA)L3T%
zXaa~z8U_X4pL5_57_iXb^#k?czVR=}2fOy^DHM&QS>a5P^*iA|@P^o8jC_QJE2||v
z<f}81L?r#+U68mN501aQMXp|kL-1TCQbpTxYe#KRcUK}gARHFwWvrou{eHRE&&+NJ
z6**VgdM)8%r0t=*nEpEhlz!V=hkS)C5nzPREp9}aV?Nw>I$#nB5Y;F8IB(RK`6gRd
z+71?pXH%q5oGsXXTF<os71nBU)zi4)OJWwh*w$Q&&5*V_wFK#;rr+lHB=ZH)#ME>K
z$;IWtzu(UKf)Mx8a}sc6F{N<<=i&()eQ}wp>Usqq^Yt4F7t5{b|IGq~7NLvDz`kXh
zaiSn2Nou`|hQ$R%-*>t+uhof$bz+aIu5p!5PhAeBhQ)SY4uS}W#>cPR`GNfL*Bg{}
zINmX{*{&@`LlHs4uuYNPDj`f>$ff<NJvjXu*7m$Z01|S$THCQ?t|dUi<DG^aa*yNR
zv;LD(6fhHzb&wjNN12YM_QJIIefSp7f`N3jJfAZ-tO48D+T!BJ070c&U1P6pVoOV=
zS`>D2a_an?PT@fd;IjlW3~=dnsvHdc{7BkDLqiFXz2<v<-#2jfAS<qJ&+uGQqd801
zV0b$~yor4tn!AviM#S19>Rc%)70FYp#v82tt)ap_FWsNUNcbZrw22~K9f<lt-3wB*
z;HTVek*+FF>S_s@AZceUS}C1E%c8>(z+CBdWhmyQ-5V5<)iC$|uT4hX4sIs+HgqKS
z7da-oVqa2IS{lJRCZAy^lTs7$#fFBluHFqQ#Uw{)fE%TAL0l3}NCLtb0SKV!pM?jk
zx6h}wUhj9CzMAo%?^;@~I3I69FHxqZ=Kkcqhuzt1MXAMw>4O6d^73EO)A8_Qp8F3#
z*ErU<%jP?GK`g{CKv}s7IRMR_xFBGUm6o-hIJjfba(hE!JMj*Ng@!sgIUb)}uq<HI
ze#X}*$jOPY!38e#6VgcZH9#9Ng12Ya2y<%XC3#A{LP?0ddC!s#KmmiMWfd~jZ8$UC
zHadU$YAY!jvg6NNaoD8ib$_0k_3(J|Xl@29A<%DgKBW_}$O9{g(7OO_!}^aNN9Jt!
zgRk(*jOi#K<`olqVx}S{nTBr?c<;O-1G;7AI#Ltg($iY0qO?8Cdn}pq9H=?U`3Er;
zbR1j9$lhH9)J6qzZ%y&>GSU)tIJvs8QP_J9uSdBk_0NWKgL!f=Ux+dPHx-UoWDn*+
z=6Lk}tjvUM*;X~0>;hbcwCnMqCv>>|_Fp~n<$~`|v(VM5R&&eGoRR`pcCxatMnm}*
z2Y9up@y+!p)OVZe7~e}1vx@cY7Mo-$%n$=7#>e&AEV?6pnhy?&bh>79|G4kR$zjDu
z3KH!_ijl8ue}9R;ZnWFX<};^qU$tI5=>pJ&(Jkxe|7xPFHQ%<BiqlD2Kd-g=Ue+?3
z-^a$Fl1xt^fZ#d#dS|*Kl_6gw^crN}_Oe0!_68Bm5hN<g=6xg*&gB*?Q#KzMy5YN7
z6n$F<dV6gY?In-n_wHP_G1ANwx`9T7*$+bQYaAbh(}(uyXsW830zr7L`aBQ;pOf5x
z$SlirNXK7-poBd~$*_k4S{jB^Smu7fG7KoYPEL-vjqtOXHe=_l3N{z!=BBKbbabvy
zohAc1?JO+XT;DQ=ZIH`_5~*^8`~+Wh+f3lvUdaI)k;lP=EjrQWBr(kM3tMfzK+km6
z{@qGY5Mc+zaFFwldT9#~#&-ePD<_wYKGEBJ9f@E5;}0@L80<2M>QKWLS8{b?_*zAZ
z7N$UpY+B8*&r=;RtAt`l4(z`%$!01SHD$k5ANcNH2^3ONUU**$zCt1Cs_R_e!(0qz
z(F-vFB$lP^tjH7g!#lIu=1Tnx{n$|}5L_A3NXy3p=7A!ymZ2gB*~m+3&2u6h_i8t{
zUi}R5mm1myt2%={8%_cn!?;2DRQ5+)Lc+ftX%V)d2rj&8wX)gO3dDpS10a7=1A_B@
z?&!ud+itxj`3)k7xh8LW131;p)fFo3n_xmcj}k*F+pid#_E%OiTixur@NWlw8$plC
z-#4wTma7c!UP!!=L9;)-h&z;>0AqBElq@SRXUfm)3gyyVI@Hv~KkI9ChU1Tq?#8>p
z?b%#zDLmueS3C1v&9NjxH+Pi+FNeJ-s`_o<H|I;$P{#qT-9&5+tY+21dptbL1z_FN
zRb-i*e{`!1>~z<&V+a=hXf@x0d>`3jB-r@*!S8w4*Z@Nq9ubjlFjR6fR-8c1C{y;4
z4&gR3eglt<M^EbcAApdN2Lyf2fM-0i+D`%Xa1{b7SL4?!!6!K)Vq(2c-`+Fr#`1-T
zz2z3$Rp1ik_c-}MsDX~i!M#}^i9D;YY{9;K=GwRlu)d(!-T}7Dub@;Q2UAR=%3%BJ
z<I6sQ{ggd0uVVu|V&%UhzvTKLA|j4uaYV&-nlUJ<YQRRBS64;)r3Si(3endoRG-!w
z&Dtpf`M#n&8=B9R9CT)4>0%#dGA_{6Lxh7Rta?-#!@OSksRo)Ahj~+o$QhUVK4?VF
z?(JmcQIY@KJBeM1NrULhH+Rl+N4*E|fCT8qy87<2`U<3h*CUd5Gy$raXgZmC`-|EO
zpV#U3ecJy=)LTYn)pl*$ij;JNq)3R;-QBH7Bi-Fy(%mK9AT83}NOyNgclXJ6aNX}S
zJ_i4A;9{L?&11$s_YDYCd&6l7*dYH_y(LA&tsaI7-Y>=`Qx{8wNNT6ayH0&(Iy*;2
zRn|Uga_L_n9_C98?@eEHj*pM`ot)aM25+c%B(bUah1idgWL|f`PPRS*j6TLBT1|Cr
zZGIjM#s>!efBXl3G{lj6S;Srg)40{8XNYi<bE#$(RJFdb$|&TCr2Td~v6dc%*cBAl
zz<h7r#=~}v;R#em^=irQKxom_#N-TE^*o6y%yhea@IEI|{EWb3w>AmY#p$`-2{2Ee
zKT83)&0=>_fc{gXlJSW0L$1lraB6ybI`)UGrbhScwx^C6S^_P|y*-v_2UGKNhw;}8
zRxUQ9qE?qHP@wa;?i1b`x*14IKNMz?EL^qMe!Ssf;o`bpfy?Z~Pv_NmI$YuPhG;|j
z^lBWdoh$iip!bdNZcjJqsg!nyU~|!HdC=R7;y#ji?2<CvuVp<+X1;#5(bXMKsWIn&
zxSZU*YJPZd*7C4j4SUckE-ND<#!q4Q=9}Bm7mwodC6RrLOsiRIadQku|DB^^mVnsn
zb{*p517LxyOiWPh)`0UI6bPF{tDTXUD5e(!;+C?q)ArC_L4i9YhLu$Xm#%c;Ah#eP
z(_>$nfKX?)BFGb%JcU&1^jre!WZLF&&j+<w>n~qd&VETrUaJXR(a26QS9}(M97|p+
ziH(PoW5%?O>SZj25D^Y*TZQT7_-WF8i&(O(0FPPx+^6gwyRmqK{wzjxaT$h}))#rg
z+Vf-ioQ>_6PG+W;2P)o9yNhvVpx1Nq-<x)F&PiL5gDT8<zQVGf=2UctZ8pj3`D`-O
zKQFnlME?r8OB@euZEs9$NAZVRWXie|dwaOJ+(y)`05;N;S#=l=t=qrspjFqKWx!|K
zMI5dFc>pl>M@QHy0*Jh;8;<w}1Vlr9$!tt4eLn*>kC%H%o(|}dV0o!D3++D}cIQj8
zo-!qe`$V0;F@2cjzx~@j4_LHw24(c_ev^B7;*e8qtutH@^v*}^uJ*4|QV7iIv)A;O
zlCpCOt^?Z`f;B_;Iwo&Y)V(g6>Z;X|X?_fD6^NriPa%D8a6{I*Jl)auxZ29j1$n{1
zgZPBG0b8n0gvr+O%*tKV^W!(J{2GuSH`pO-kuxD9%QF52eQG~W%le80__h6MYT$Ji
zbuxd^@o@40%s+m321+`zTMJe0UV%1R>(ezjGRqe0b^VkJ-(-8Nwc{qyX(4@@86Ssq
zz?}f6oTF6fR%GkcloS+?Gng~0I%#I3As5?KKD<_^vf2ny*hd(|lC_hvMhzb_-LIgg
zWU_`dLt5wfA-^ixxH%XYydfT9uhTQNqmz=vKaxw*=3%;;WX=zx9kh(y=l>MWXv`~7
zn9usYBXzz&*n8s3Q9@lDwf!j<Ce`FqPIeD+fE*skFaG=l3N6rygQuz)N2~gh0xYvr
zF$_S)Lzb)WPjN^`2)RUkrV7<7s1gzn^;7;@{QL;#jfU~M#b%|s9e!77FmW`UnS0p4
z%FLA0^?Imp_gBTx<2<u5TV1WdQ&$&RP$V%7cD>^!WmUgJVJoD4y<#_5u|=-Vbou_>
zWMK)_es7rupcE327+;0cQ{s&XP7Is22wt-(NEXQUFC-T5H%{=B#j8pLR%Tso%BOc{
zJntHXqWGeO2T~T#MDe{dx7Poj0k(TU)?xk3Z7tu^>()0zs{vYN72jJLUB+{O%c7!o
zsaB0%{<ukTlallOkZGeLNa_}*&F$>%X_cw#Yf~1~0de_|*?lj(-SX(@r1i$CI{yak
zy3qP-Mu`zqaywG2>c!6X_RZB5T4bIvZZT^h=&k4Av01CD)Yxcgdp|?!_{k;3jpWMB
zm)Mxl7@1)`BFVZcFK`bo?}LavOjaK6z>3jTfRH;i4GqnUO(2LQf_q-~^Mxo)>A!{Z
z6%HJ@QfbBX&~nG&gU}0^cTJ;DpZxVBhmFW4&^=Ccfi;*0oAuqS_tR{&gyou#W|MB+
zQxA2;@A<0<=0C27OyfArcb%EQ&ee5>GSM?pkrzxG!)}PAV6Q^&InX6NbSby-gB5Wz
z&7fJ1LeA;VIh<-LGkXmwv#Af>dXNEOC%f+{1CnI$M;ivgYs3Er6OzbNpDhpHo1A{y
z+>FyrC9a^b<w*1Att{tje-?^)qwR@ZBw((gp(gpZxqOx}uQi{_?5J3Y-Fg+D5dS=i
zrf)D+OUrBhoB~g)#-k@RUwTwYMZ2O&O<AEauekX5nl@=slc~&QC5^L-j0{lO<)oSE
zwd#NW`n_9{E1s&ZF;n{8v}%#NsVVDR+=(B)!~<Z&wrgh+1{3p>hkXiC5r@*L;jO}^
z@xPA<2aMtq*9^4Q1>%dBEnGU-%LzXGh3gIB_1xl-bz3mG8eZQ&$gLv~v!3lz)N~6B
z{pGNiEL^uQv~yEwa2D(1<J0RN;WK&6%IYY`)ieOSr);ttfe22c#twUKWu<kcw6qkQ
zAhuQI$KCyLo==_{?ADg%)&zuvCZ?8Zib{_AQ$>R+<*K>x+;jk{ELf&|V8bCnBSTp=
zJ-~TV*2R{Xn1HH{_c4s}A8FhBilU;c-O9;~Jnl;7{QLvtKrm4<F$CRy-rAvnrcaKJ
z?BapqYaEpzPm|?K1gAtshSx1M2QgttY$!S5+|)Pm!9Ia^T+8<F<qG45n|aP46Qq}T
z6O)sR3kzIqY&a`mXi-*Hq}xEYdnHEPghXJ#GOhq`5{vhV<90T2%67~@_{lIjPwY-Z
z0IeZr6HDxn&1L2z$Fpv?bIjk$^5`d)NXO5zym9``aB;ya^Qe=YpI;Oa9umpEUGk;h
z2@QKFe5^BFJy3baCRTd+j(Rsyc?nJC+uuwSkCzmxl=Il!mMnq}&tl|Ad6Kq=?RK~n
z+Dtb=`7bW7eXPsLzj7J(UDn<YarCVwCznP78Je8->bmO*>I#ZqRGBOnsN3$4HB-%(
zuI7YMiTFKJP$IXX4qmOC#$Lj!Hnq1Vhk3%LS-v65NG;#cm3DU@(LZpUJlDx<t=IW=
z&!suQRn~<>A~JQ+`Pke{tx_RoDwR7<$ma$eOdTDn!59iy7?m9>Yi}5T{J&nna{JmE
zfprTf!<r|DuC?}RPO<1@XaPVa-&|h)xZXeB+auYHYCPSTGk*7qB;^~+8(5m$%8gRP
z?8bWpNwIdmRA#0JZh{b(?=1-0NB?iicIsqf!Z7d+E)KSE()NV-!pOon23Evu0}U?y
zA85ur5{M{X5pv1@=@yh$NJqk^#=ycnl<XDgl*shPDDcNg3?Sp^5Ig05=7_vw5B_DE
zm5l3Stt8TjMF>?Ks@cHu<?YW`FU7bd<4<UoT;EIh13q4h!BUNu#_GJh=^ehAGIeAt
zE(U4`EV(qkW%T#qMv96wMd#ZR!~Fv@W;L?Im@%;<w#M$_;<|#6VU71$ykul#)wRI2
z-YV)ZLCB#-_;_Vy>5vQ_UEk>Bo&&*bdA{-N!PQ!66%+HlCs%?i(Of%WBHASZ?Poj5
z^6TW@l@&yKw>jtBWT@AgXDvHVY8*P%`MLTVr2gv{53%S3;k{I}$gt#sux)AS39_Ts
zRg1WEs?kZQsR`+timK3VDZkZk{lAW~Y|3$~j+Z_%S>vq1-({hb{+imq9HNO(MqGSX
z%Z5%6JyNum9>b6~reTuFse&zkRoebYFfoPuaqRtIV7qMkmkB8$Mp|&n=_dqms$qx<
z+gBuGup+adb7MLPahSY45CL<(Xn#RW9WH%R=_s}Bs?lnP>mZ@3Z0oE{6s>~(k%2t8
zc0ND7j9YYGB19g(@@W$_<&w$$;L*$pYu&ZO07SX%%znh*`M-m)nqo!j6R$+x>6%*G
zD_l!ZG`TlkT$~GuZQu0*M&>OJZF{yn3huuh{<B+5;PYT<X$d;wUrH4Hkwc6!P1{4S
zYgc7Q>4xa(Y9b;QN|g({A}Q71ucg;;@h&|w{G9w7=mzVaGB>p4)TH>?(WM|vQDlIG
zO{zKu6X<M&5u1&b!#$N--6F%Bajr_@7>aSy?G!rq^p%RGFsF%wrm3>HMkrIF8c|Y|
zXpm{$s2ub-OwN85t4YD7?+T9D{0Z%U5qrksYeTcR!_g9K&??A-uGv`U<6|vKMMeQt
z@vp2kJ6Ytx`6jo<BdtA;m80wH;Lq5K0uA4-3Mh<%g0?t{j+j}KZ3b`t9<&wBMDb^b
z4)66~HzxFE?Axz1*VWW5x9J<dc>0cZzxm68Kiq}N>##L|tuDaK#^*e;R9-%E!~Ymf
z++wl!XO24N=k@$(pTO+gmkLtaK@+*bzLBp*hW(Cl&Gnj_azWEpL`28th9_W=v`{S9
zk>iViG@^yU+!XnE4BeS8)RBGKo6P(#qqdSYq!USEAs<u(2mLcrshKixD(`HtY!WH|
zMB%&-5Z+%SM3cRB(fUvvh{K4L(qJpf`BJRMZ@(ymf#r!L{kE<v#s~e;Pg38AS2267
zR#$3WFO1<(BO@ZpRBMM!SlC1)-0|hajdy<b{P7%|!8DfhGnlXT>bg8XUu``TJN>rY
z-PgSS7WubM^r_zbPQT4T_P+V`HL<>JOj!$}dR47+9`@)s_Rf`NeLsh{r?BvHnFcEV
z?O4Obj=IL;kkLgWtGO=XYH8EE{Il`O@z78NKfx0lj_u*pB<(L_3o}yk_;`3AhcL0W
zwujlClCyb`d6O~4v;;@*+x@m=8c3M;Y`VQrNIyWA$?@}mQ5prx`lwVXa}Us{?W?_A
z;T!=?+u>aCMC6rJ^^|X)w<OKRJ*ssuhYO)b_PIQO{B58oJoF$d**LTg%%Btv@)XBI
zi2t{=#QNGNnRw=7neG0d`hpri)*xnev^Fv4dHeMd{o!(natUxs=DYnDH$Kjo$jX_%
zdE$9F4!l*{9?sdR63lFDPTN(2cpkk-y1giUH0Ch%X|S_c1b80~FQ9X$>ohI9I!v?t
zINToRxSBlYCkz+smUo<*2!Q?C<GyqguR7ZbXky4!{DhQQdkr4h0m3#5JNrZ3YQX*l
z_<?$>MGw8#9YV$j(v1zf2taD_>oBNNllV+#2tl4}{vD(H4KpPAFJIU^0_cg(y2a~e
z=Btc~9Kv8KD?i?CzSrI|!AQ4@?bv&ReU%mwTSUYbabe29;Uyvgv!q~uI_gGBg~g?=
zmW_yGi1kqH&t)R@$6zdeDTD(9b*R$^9FJ39%=}1=va4CDrlrKu-J1NHmzrZ3YoU^m
z4Jjz(Pv(XBU4B>RK|`2OGC948wfyNnCrDLHs#)@Mk=CdqKkj%+=~5jw_V?xMTwGt@
zZy1oJq1uu8dZG}fKkSNm+GdCT5-+w!Qqo3DO`pbpcM03nb!^+DPw#uuGHwE7HF~;V
ze7Mp_)@^JwUlk-uTxvW~#+e!z_;>#ri%U%fCicS7dGCQl>^e8zX)N}w$?wtMf5XF(
zFu%rdKdSws6j8f1s2zO^M5QA%nJEdy6fpgUFtk#>S$OVbTfTiYv5$-Bzx|htwpOBp
zuDI#0erNWEgBWwI<O;QVTIPQi@r6h5S;7}&kK-P604NIho&nBg>QTY7(6pA8)oKNq
z0=pz69FHRpCw0}8kw1(&kDM-QN4s$mkSl(V3mq{(#}XRd_`~6R@%Q?wTUDh=Mlcw`
zsg{}0u`G{fk$Ja?&ch$;@q-vNT!&1P<$^ptmO@6!u_FKf?To012#mex4nAp>!ifo*
z?qR;LRC~WGo^$t|?z_g`ou&|CH8!j`KjDExg806xO4A^X<+R+CyO9CjT@H0Ilt>^Z
zE7(M1L{Z1`#g||EPk9HZz<4kYKffEbDh<{chdF(aLfmB*NtP&O<pt8V(vK#DU324z
zj=BGE-lC5w7-%I9HUmv)&Z}6g<0QP-aqs?plKeyt?+qJr;=lz!yLo-hg8g|#dGf8K
zrNp}HqY4W<^)P&cS^tSuekm%ihS_m)Ml0Z5n0!-ZLe!lWsn9UOq)iXJ7D-92X$y~u
zB$Go?j~5{fPYCtp3E?PEm#&uie=;1`5Ukh3SZjyqE)k>-5RRDlMsYQsu!l!2x}t!2
z(vS3O0;s=YeZPdbOkI(7`AW}<@Wffe*Nx^t^Th>Ut9`hlDRjnpP9@u!pw2cU*VTP4
zL-VksP>5!xFggCIWcMqoB4nF^L>!rj3@b$%_)xN}m-Xa^>#0S3ful_)N$lVmB&~bd
z%=IVus$e7HFh*A=ovR$x<nkEHyG~gB&*)p3a#QjI6{2;pU!o|`iv~kQgU2q1D?vX~
z6v=}!%`ErB2zjHYoZ<;hOkk9C1U!bo5WT9$AM4<w+&fjnB3YK6#k;_FrWipEgh<1m
zLDsbHuyxuUg8RR~^r`sQw~ybfU3flw<E0025Xq&>iMzxKJY^CZVM1Rj!Wx|63q24<
zs^=qk8hpqIC+$ZL<QFgEDraI;pg^b@jmNuA-e{DlG|KV^;|qHQp#{Ct;0;B^-B2+%
zQV9?Ahll<WlryKdeADn6O1cy|SUdAcBIa=qW(ckBdzq3`TH4LR#{T6BG8i`;ne~Mg
zFQZgNJwE?2f+|9c9P=6=!+f*)ei!RU*vyn^jUNtTNly6sW`>05Jn0k`^(a_+p^*9w
zB#aXR{jNpi>7J2`qH(8zEv)~x{{cjUbMNIq>_%+!(&ObNQj3;6IH=J4iJY1|4Gik*
zDhkV5%FeX9juz|g@7;UguktrAIfX*dBZrHP-gf*a-4%KJ5}7OvOrG;5_owh9x~y)Z
z7{OLU%ZOeLM(YtqepgA{Hb<OXp?ySDlqk-a;+Nr!F@jF?Jch;mQ?y#?p&mYF))QS#
z<{;W#-L^-*YIR!p-7J?2_^_1!1r{`NpkP76kXoY3mxzFVrZ!3!k*I;{$}IXxmJ^qe
zSZQ_CJ58;!vxU9X>RGj?<tgrNZf!l<*B8y3bs+wdkL|Ww4qjdkH8($+_T*zv8jmD1
zx7F1>cwF5v8_P$Aqu3XR+B6mftA~6%MMmX8Uxn}NVjySwW}fi{3O`dA?4QMk|Hc^m
zoG@U(qGnm!J_6!gdJa`nobx?AMJoE+55az4OQx$miHSq5by&=bvAO)-VVCUr{~7gv
zzFRU7CNyG9mH{9SLBTQfOLhbk@^=zn9%S+k2mwn|L?Xw(etri~m*I}RZ60dV!JwdC
z(X+PvnCm5DKs)=%ZoPh<@Y3hGoQ|PKC43yhMH|Ks;4pcO&RlAqDAwQx1@}LC?HM$*
z!(4@Va^$sJMd39^`lb)run}gkX;9a?U4!q0ExFnT<<};Db>0%C&n43cd=6$%akS@=
z2#20;m~4Z{^jC~g4?gR&c0ZL4b`7eT*QgI9@dnBsP-Vp!yz0vAB6tf?sYXa%u`MRo
zy1t7EBKCe92SS6}y_haIF)<F<f)}w4ygA@A)h^$(k35jvujM-PLoVN-*i+W|C8`Tx
z{!fh<50yW2AY7pWt}~t;eqq;fxI@i>6~CrK2RyrLN|I)qZ(Dl^-*O@P4;vAXp#HfV
zg5t_M$R8w+@XYw!Im%a+j_$y}B={EDJ93HZ<z@=JCYk{IN;yh>myzEnY%52xv6-)V
zZ)zZrR(ZaAPit%T|L){o{~)!??RcS`ot?JlMV+i{goUv%9Ie<BfMbDY<aPsdjQqBk
zwR2o6cY5EkaSTrZgNq%#@Ip~6NthmnItsHyJ`+LfS|k-;F+T`_K2hd6*`^=5ldSD8
zIc412@V3c4@<Vm;*Ae7ACg5g~_GjEDJ0c&<SUt`Ru6iB}ucmRi#sd-Y``~7v1-Y8v
zX@v}GKR*u5$64&4(|HFVnsoBJzHc&Pgy+Khk5<+npq@W2gLGe^N%p<lEm!>0K-R4L
zl9jxw_xoD*EUdE}DrMr2Mkjd7e3+CP@d($+(vn`r@68ehOjv*$DeMDbgJWF3MU9vT
z6S*(>E2=DEb@>1L07bkWJf0($QIFjI8S~#20;`&r4xOMuVg8-g^04_R-vfqd(LTZP
zpOm1`vkXJzoD8&JubEhhkJc|Aac9D-*RpyyZa^~}o~~8+rU5;6_{WFC5=lD$MPm%3
zFb|6Pr+W3QZ${b*9)&blye?&+z&S|P&&>6O!k2Wx5EuBUb8D}+xHC*p`*`{Bd1_?^
z(2PKrSPlv0TDzp>ygQ=>zl<%0u=><cN2zR1ri_`(>gDHFfY{X8DcH2UNtdKvHh$n3
zPv05u;%WMeK{jDTmgzwT&?9DaI}VvOU7#ZqCi$2Zvz3dKuwZT^99qA4mJDwrc<>m7
zH+&QT9}*iLgz$e)jReTl-Y!bblr7(mm5aCY=})}$E6I;lY4q7WZO3x;^~=hJ{ZXZC
z#x{I?Iez$aWrH0)LA{)}MC-{z{OD?<KC@Me7AV;D<`L>;6Q<RAOR^E)B0mxj!*Xn?
znr0>++Gny<pZ#AiptL+*&xA^dvz0T33>WYcX?z|cwUC>ptclq@cr`}=m?o9>GRCiR
z2auqZ^P;+ACiwosWn4Gp==IiVL5}&Kx=_dX{$o|YZp>SS+#7p?@A;MS-u+~Mq$GaD
zX88kA^&drMd75M#S5m)a{*!|LVYovRdJVtVvElNGUh?lCR}XW~#HvF4Uos2H{Jw{w
z$3Sgi9y<ZVrT6How;e%fA3~6~SK%#ubk33Kz3)~bHw{%EPmBCs9^Q$$-?j%SHK|^w
z&d;ewNQXHJdNc2Lef&F<NY!g5;5S4(ut@oW(7+80`GVd7-%uT;k_0wQO34>15B2k4
zaN-TTc!C6DGeoLKCu-hnTD~>RByrt6gFyIR7Hhz{?Q{H=>(g%W+(>kHe-=d%ZS%E1
zr%LyK`y2iK@K7l-lt*hpk5XTN$V$`5rb4o^ZnTow<5Zn|JJ#ZF4sb>l@gQ%hkIu1M
zcN{Ruw6{Me_P*=~ae()~ARr2rj^&^<rdydVNDfB}Z<wLeU1In0@P~-b3B$v@&-)fv
zCLG_-7gS^{R6$la)W1Q8QJ1K&z_%$39|KJ(C?raSPP~O%60qjoQxvgBR48>D$bTX8
zgajmMMfco}N%Yz;?>Kyp1Wh7inKHNgNb`cZ%3FE=r3LJ*@2~&2|45F%AtLY~*;7vQ
z@3o)IezMG*aVNemfdbn!H4AN$#W}v9f}hA^wqCJ6KcY-4y4E}DiAknf>qXapr?0{9
z2Ap!(#?QOIvljKZ{Up+heuZ#!zw*lxZvWp+^8JZE#?m}#+c#Dxk;C{j!6|eiAv<rZ
z)|uJB(#<!PT=YJv$AIMPu;Lh*<gI--7bAEn6;IFnNE1SdAwz9KQjn?9FAfLWM`T@o
zxFw?)FL&oF14<C^gkvWoD`{P)TXYqXgB?cvyg|^B<?`|}#3ICyWj%da0^l{lawfQO
zSWCd$qY)ELQ85C!7}z=5`E7*tEzIRzas8a}t@qWybkhGG;*eJks$-USuxd9>okZ0f
z7oqAQG{)k$R6^iC6*0=g81v#tHi?R-=R9@!)sOquqtZOH%Z{mn`~ZQ+BLBB|mZ#A&
z+Qrh!4g<pNE)U_%Tft}p!9OKf6nS3TO!~kbKub$dbJ_8~dlm}EMYCH=Ng_)13+|u#
zciRw-yo&$iCI(_#XMN<Gzt&VH7-|&O(%*V>cpyOuyUmMpGUH;kWy2ro05l~zDU;|D
z71bTA^#ftihgtxBy170|eYrP+7|^@5Sr;2DVRQXiceCxcV&Mq+P$Z%+YwLX>>`>}#
za76G4G!<|CErkI&{Rm*}q76P$l)L$t=4JgOXb;~@kiFRl+#;}G0zYOcxWjr!XNze|
zl^W0S8o=QNvHpr6MAmcc{(F7Iyc+nS+V2Iv8T)?zEHA1Cowx_<yVBhIS^RFv){bSq
zHxxY-L`P-+T^9LT<zM0;+=nxZA6AH56+h7JI89<OZG-WkX^%p_bwUg3<G++q-Qvuw
zyB&+!%@SCZpF)~(7Cb&@O`AD#wTR_{qy~$^b;glgG-T41b9Pa5g5T>)@Q-W%nJyL|
zM69>5V^Hwrr02@0pOZ3G#ugV}t`<!MU(4l8^!5SRBHsS};T9NE(RPi$4&$IP=4xoT
z1s!E{d@VHU>91`m!|M?!uc_$b_?7Zc2e5PKlPUZB*S^7}K?mt4_)X{pQGbu@8hZc!
zB|>QeXDbFXMOOAnHV>h-Z%)-Un$He2Qvkoaf5cXGN-0^f+9+MxZCV8$5^U}`bfA^T
z(%$dIB`fyB6==b{_h6TcLQSi`E3<)6%42(eljPrQ<Hud1#Rf{?UrO@s-3$H>knyUW
zQ5?p+9teNsalT&0anRDwT~Eg?lqL>c{N7O|&o>=()Er~27H0eUL%QEKb=D^AOBsq*
znN5YAHDfZg%~IcHQlk!p5-~`!YXl=GDJef`9b`h^_wjvOa{F36`WVvHAKF{@rt8PB
zna_hHv>-XmQB@zqqVY%#e9b7*2}kzq!I2a9e__fL-eK(W2igOYKpjjv?m9BI-G;nv
ztMlQR)9Pa;4awAd?4&`o+AomBB}LG6<5>QWq5I);E4+zI1ot6Zje71Z!5S+Y8y6p4
zNY8{n8_6A|Nq6R=jETv8BIA1CM01G6d>YIrO-Z9D>y;e?1do}$%e}pKY^gna0#|<T
z|B$*`cd|Zmo@)0K$XsQTy<~Q0q+^1J)uUh6$?ahtrIHYka*d{Q#3T7s=jjN*HA{L3
z2y4*hs;BcYGrJoY%#r$xO#G(bKXb|HsTlv9T+$wJZtFY-tTP0sgW(s9A)tOP%+J^8
z6=OJkC%Ewg{wYLal=z=3G{(m}*d*7NQcpye;Xv65Bk}y%BW{C1MFQyg$C|4v>IKJ4
zGG2cE&X(&Cq#$`SyHx1Qg7#=*{v+dpH(N0iR=1W+aL(^g;b<AY`PVbsmtY;)FMW;(
z5zCd79~F2A??c#LjfVM}A=YgP3$wWM`1rWTY@|w?2q<nP(^434_Uh^>^GI*N!LM(l
zj4h+9OZrHJhiAh<2>w%OUBR_)a9x>_eI)3FEPoqraXvD^2ui;)T7TKB?aUI+7PLf0
zMh;F5^Gp3f>4U<h6Q2~V#Xc6&efaU8!x)t1r^RHL)iSY%q0IX9q@Tm4Yy_0x%(_EA
zIP<dw=oSlko9cK28m;Er6Ugc_;4(2k%^W$k-5fW8!JPN>+?W8laK-HC&#!Oa0E`{F
z3(95c>Z23z_++pFn5n{yIZTdz6P6WA6Mr8~)Fp4=_urW`U$ygVdcU@|7VPPP2R(Mm
zpWpF|8{BY)0PRo%-4=|XKFxn<NX+*&0+v2&`1ttb8`&T9(DQ|%8-{KXk~IVAlpG!o
zH4%GN^yZA|s;b1-9z)#B3>ol(Pv8(i2+^tMSyB$^!+;Pjr9__^_k)rJBA)3XwYbyK
z(J?Y2mmqaDH7QTR?WH$!I4{CvG@9YLz9H(ewX=iy+Q8V@dbQGzc%{|T-O7qC=0}%!
zRA<idwJFH>qRA<j__|&-2gERhNWe5jTIXP`4k8@4nCCRDi|{MGgq!XFWsT}>3`9OC
zt_^wz7akv*eTqRxmMXe}+qR!|qMdU)@aW@03mboqWvUQsS8chUnDJ#%nj+o@r;$rQ
zB0j}F?u*5r8V69WQc+Vs?8eCpEUYvt)j1AshyIzEXQr;RSa7MRMDIQ>sc4bI8r6^D
z2eYry3{LyIbHfO+i+|tb|9ezlt;-YT5wV~nhIY-V=GTAhO>x85J&(1aPO>R%1uxHA
zM0mQf?;<=dVgg~?S(x}Qr=x8Ouk8`D1aj10zkYT!a>6}*v%KLp^q^DY6^VxYOt8mc
zI#~cTw>(c%-*8JxfICNcGXQ9@gXtCCui|2L0JTGU+`D-`ydQ2Pf$VBK9nRTa-iG*O
z>&ErF&%`DqT&+SLo;hqz2P4bNfsHj}hyU)|mv+d2(&y<}K#JR~+_WT0m!&Nu@wgnH
zDO=o?eBPvoYz#GAT%JZWYJB0`YP$7rTfM&qvXUn`X^n>j0HW5Dlasqtaxps5x^=(Y
zjj2HKeEY`zhL51d<C1b^;hBwQ2$8<|_V4o<zgCmi=4nhWa5MF1{9V9swF<zDcv>w+
z$S=V{p`DevU?G?#<D*bhEeDL?H}ut0AB21H5C6$Upx;76<C@S#Yl@I_?EJXynil+a
z-fPwqs75?!$RH{YE5zYu6j*sCb4Kbg`1ipTiz^-Az$HNr2L-w=8RJ2}{}EtVuS}Py
zbgho^J&}_yUjR*Wt>rRQd2LBan9JmMgM_3cdf-4hiYYI%s~*aPhjj7?Sq3)54d2Vb
zd(y*KyIglvDNdYCeb*1zeVt(s0%of%?qCB}|KXZQqt?Q6KjdTU{eHAo#Z4W|2p27F
z1TiGF?TKH<OE(Lc%IMu+T6-O6pz=PRE=<2@ukn&d4(|ey33S)SvW0(FdtYlqsOQ!}
z*jX~S2>;#7m;!{mzO2g^|Kd=2PG2=29h|7Z(Gb7tGOI~>$@idi`>Z5vUGcN|-?4~t
zXxYLKK&MlYUk$v(WuaHYFn<R3u*98;3|Pw1I|H8RIRzgGxp0oE-V21)_cA`di@|+F
z&%v!^6Kd|v?2&FIWu#Uq^KAoooAtP2dY~16cvxFkcn=j%m!J~!{I<J0Pi8LApiOLh
zXnRIIya4xc{iyTqLg#U9ZO!w>(i?Jzn`Hx1D>YYFZ|~=0P1I7=T8raDwM?(`w}gsq
zXT#Q=Q_olY&pVB*C3|K&Ln&%sl@V^%f!OHNmoD&?%2uk)U`-d^tg4ADb_?fy!5))H
zV)V60ag45|dW<mKV>`L!>p+#M-p)w6_Z_Y`qxHxk7>+}LP*<4I1gh8jVk=4ac4%+%
zB_78>?}1$DGramgH;i{YuYof_4C2^#pEeEbV0svF4<d(lgJc7ig`KfVlgxk|<&r&;
zJTiEUU>W|M@aF{h6F~1dG>+^V4UwVzW^2oc#KOv2`3W?$Z<fITd8Vup7|EXY=$PvM
z^M1bIFVqjxeH`_^{)XqGGfQ`ixP70!+$1=g!RHv7@dV&N-AOZK3QrCJ{E#~D7P~D3
zq#u;9@<$~M8@bP*g4+h0bvAdmk5%&PM=QoR2o@W0QT&i`)aQn>GTO1WmzwSa8Tq?v
zTnKNq0+ZmN17CpE3-dM^iX|zyZ7+>wo;cZ!b#?S7728&`M5TmDrZA{?a9)QhxblD&
z202q`Yfgy!Epy>Nf|!yRq_CcexiN;^KX%uLoE8Is!P@05Psh*S)|>+ctL45K@mhO{
zk->h3=9b%eh3CGElhzWL@Pau<3bXU^<=!MSGjqsE5=G3ucBLJ~BcP6M(m#?8sm;$j
zXaGw_fWac&qBb7+-s-`Lv{diqrxmcUpnl73JhEgsn5fz6k?f2KmK9$9reLJg5iC-2
zbhsNazw%-~BNdxs#Qz2wz6`HZ5DjqALw=NS@1<E&m1<x($MB?m43_zRWbZ!@Q_h`H
z{9YnW!atLQa%2+@rj!0rE$<(JU744oBP;waAS?xis}w1Y^4{=xkjkfX?Tr>5qSTWb
zXUK#tebHWJ|CDtyGuyT5^ZI15xw+Xd2*n52iGz?;rNZlRJjktOea|=}<PQUIOYyma
z)?>l%f&q9{`KfCaaL}G2q+JfJ7{7yI8KhjYI)no;{-2NulS!ogoisH$=B3EP1Rd;_
zhGve<8jC8UtpxZp;iWq}!}4aw;_3nbceyCK<RrAt(<n4}dxGmA*o;m|s`4KEE036k
zyj}hO>jkhrCX0VNa{$iExB>|L=exPUVZYwxEXVt?e7VW{dVreYw+p&`FVgRcr>7@?
zVD!FA^0oyls;5x$Ja^=CJKF^X54D#0nFhB(-k0LzFqb|1`(TTs?XCkAa{T;AtJ?t<
zJ!DY<baIH_?qZwv^romV6EfI#OG1|<t%C`!M<Pv!-hkJ`O@Z<MRi=(1Xi`USy+R_y
zYZLWoL88`bnf-#@##i)j#?h<I3U-4A+Ed=Uz)bd4m(7_nF29b`nZ*;HR%3Z1Bd}7j
zc+ri?@4bb~aCN#~flq+{Vb~o+hTDh2)n{gJ<p>ZWy>CWNRs-CE>7no;Gwf57*YAow
zAJ2GwssP_;{0)FAV`67qDAxn-Wr1v}Sk&vN$2(j&$U)|F-RTUFsPQ<Lv(Nqwqvv@Z
zJ6?v&lA-cK12Jo;2_{kF(DxL0gE3q}%`d7i$r#!=`hvcj&`MRhMw-kR0;glhR|=#5
ztV8kyFgyOi+;DxRE4y=&Czi{_3~&iE3bex@x5B9x`;{R)Mj*4dm#khE2|m`Gt<~Vl
zpuTIr9<<j-4qUyxViq%uALu5&f9S`9&}6-KrAGxkXJXIWb^120?^;@ree;T@?{uL#
zil0v`4-4FHTJO#WzivN4G9mprJz-$|4??YCK9b4LZ$DGIHJH@2Y{gZ73$Ve@Pu`C`
zwU#$6cQcTJf`XUj9^7FTuo1X3ny%4eGz>@L>2WiXzT8B7dpGJ;3oNA{ju*X-g|7NB
zKVHIiMG|rA=<+=uR-Ml5>6nG}oNsmb`E1IkajZ;E#${%<-82|S5pohT;TBRt0j(rJ
ztByhjpYOq@V>hNeB#HmQOQ)LSr4E8>21Vk$9ukkppVSk)0AW8h4sbUyA|&K*-}0o0
zAMx_qX}_V4RILpP*5+K;Ar~y0F)-S4;{n`P(!wq<I-m%Ze?>$LDV^R!f{hzDAtv5;
zZs-kBK*KAb)wpGj3c!4po>*CdjQKUSU8J8_%{MxZ=ZL<~0sya7kIk#L2YzpME-nm1
zF^0bP70=t&&rZwtS6P0%#PXJww5q1+BOu-)1U}zaJhugrxI(WG^SGR9dtK%NmH&<p
z>*MJ2-Sb0*H)IFM_0*cImH~mxY6<M#RRQ7f>hn|WL+#6(_9d&T>H_Y0RU0e?wIQ40
z<DB;wHs7(M5Ocgj;j+QtxI|s?etyAm0a)Js$LBr%fT3L*4plbvPI~XNus`SL%T3M|
z>Md?SHuqoqxW22a>d#NnzDf8117Epzadb*C%9rYpJUdHKowo2iP3$9WDKZ1PQ0%;M
z6xOv`EN1S~(qn5Yad}lZ5-QOA<r^w|9$;dVLi5LbOO<6BPFbZ~Lb7{8DU>Y)!B$6I
zPkQC1AYlJUdZNgU!RH=*Ki~GWAN72CAc7D2*=yF%|Ab-GaukXRMt{DhoMmFe;WGs+
zBmr;lc&^DwW&j>rThm$Vo0w22nFbV5adJO#Os;e~ZthgM7wMJn?;UOL$JCRjadtiD
zp5_Wf%8bpwhKc=uh(o)+E1ovTtl0E|i3q-62opAa7HAlO>dXzu0vqnZF~pG=b^5P;
zD#UMlY&hE!C0Q*LIkp{7)>J*+$|bm}R!o7YXL0AfFYb)lyGa8RWU(ra1`d%W4535j
z(L`t-_vipmN{lWg-pTsq<G}lSiMaifl?c9vzCN4VzL^>24~#r1p!71y1Th#IjaotV
z%Lf!r-z;7X-q0@-Xl5{fjhTP^?*T<9hf3+i>=E4A*;10r6f9C4-*#>yNIiDE2__rg
z63%Eh{xJ6}l@$f^;K0KP4>tTsh=_nMoP&tBQ^Yh^Vq)SaFD4VdU;|U^8~6^zhp!kf
zwNku<zOd`;=Y<XOz^$JD`fI`Ur(jSJ>o+nu=(!FIsD|Wb$}}JDHLR~MuVY1gl%A=<
zM?J^q?mr|)-siB6UYbeqb>CL3WLkH{m>lMvGZzfMUEKLIdU`jicY$icf1U4qjQB7P
zsi<UC!LbiQcbFkr?_V5_Fkn}pQW%_yn2i-XS4kj?ZM|uC{LkYgDsq_}!UCzX1&4=e
z<>hoc^>GsNURo=cp?hF2RIL6DjZ;O`b+YAyOKU(L`P<YdHP_(kG{SA{&3V7wgqL!q
z8<ih!_`%d)D4w1#^a}z5A}}P9*vQg7{x+wz5$JeZO{hDI?1E^&M=uo`R%f}Kl9Vdl
zj9TGbS6f5$c)q53DtrWk*(hMYGo;q)Fdvc1-rFnk)KTA#HR}6!fVqjqHS>)84Vb9B
zoY=4ok1x^}N!U49!M|_hfHg@hmq|_I<t0r^heW-8otn59Y`WZ|Cxb6JGx~=t(fgLM
zV>l;smi>0dmX;Rdk@T%`1y{9s5a*Z1=g%NTal(GW;E+gVv+%g@FZ6nbxPygh5kkBX
zQaONf2BJ!<I!tuIhoL$-o>Adwf6}iQgcq)l@4K3pLZvVu;h=X0E`~Tywi{htr1-r_
z5wR$hTExV3C^@@M=EZrTj|ed#{u%@(M}`t}Xk~HI2N-<B{_Ok2(QPvZtSfUFdp`FR
z=d+fmprWFBKJI;#+u>*?BE;X{+nc}XL{vh=NdvNfFdKU*DViVXH0w*N9cG_yNFMjU
zeEVh(KBax7k^!kf3%13r5*0Hua~@&^MaA1bKU5-4CyT9fY}nlOLE#|crJ4hvQ3aLw
zE<R{qGlBwo1@44i^AGgE<Ab%=kyF#BQ1u$St;6IhW+o<(c}1mjFtYGeJM>Q|Q7boJ
zZxbk&C>2h&Tz0k=Y`bfFU12N!@c`TVgNa~C_CPt6*2FQH9f}(CU?uirRqxnyNL{pX
z8Y%oKm(kE5haLY2UJ{xQl#fI#qtsfAzF7fkS`CDZpvR#an~?!?J+HTZQ(}wCOQtxn
zx(ZNEk_tK7KX4AS+PLg~YIfk!7AYzUdI=8Ks4wtMB7vFC%?&OVR;P`<^k6NmhTWg4
z2e`FB5S;_Xa)D$`TAG<3vYV?@5|zpGH98a3@H^dX&B5&S=bCwoz`84BWZsq*qI9A$
z$Kh1wB%Co*Q&a3M?81?>K;3j@IEp=-*;1`H<#$4kSG#j_=lO#fE{|s_+TJa>xyu$S
z-_;e|c8=3yH!w_WdoQI_9jW;B??Gnld!5V-A_^EQ$Di)J%0u!7(+=~_&djf>FB$7w
z1lFtim$Jg9Z37zvnwAfE_)<Z&bnJ$CZlnH;yX>R^ugf{c0jWO}*N~(6%=Xq6Oyp}s
z9u^jn549p6SQ8Tx@~6!})hE;ooE?%9<J;Shxa&YCfyMaxuxe+tM6o!T*?6VZ9`5@E
zkb>$Y^55<XGt9DEtw1M$jZ*})vCBghbMq1HdI8kcMo;(g&H%6|z2`8J!HSqzc&x0c
zqk&&zbTyCw3?y1z?l78<c6aB%)3*|6wTfS*Iv~{oQY$vry7;7ot$+X8Q{<>q#Bfp6
zMYpkc!pO_nTC2$5W23)_&~1IvyJg-fz762FxBO~zj{M&MMnVXb+hNhceyR3b@1SY3
zdVVQMN<cvil1aU0h4Otr9!!xH@*b{i_TWv`$EM|DReJ_=6EIBnj_4ipxQ6xX(5t*h
zm^)rJPdUOI)A5Ob1@g00hSuL%?G{Xy%gqUN+WV<_$|bvXV1*S@yuWWnr`_n_CfbwU
z<O~YM<%tFSc=ZM0^YaS<%h61B)PH}xS&+Ig*jZTxhaH|~tyd(NQ>CP(bWK_DuK<(B
zcP8A`Q*B+BHPoh+Y*Y`ca6aIg01Wot-NNGF;20VinOCc)PA|+)^Kmf=MPmt`-LWem
zKC-+dhvbGGuXIIy{&#e|mQ~&9cTgH06oliqh{ntggZ6TDaUtjD$iVL#90blUc|q1w
z%O1BKaQ1e8j7L*gSy+}<#sxhZK$1Jm7X!W7D_fDET%zcJneijCxT&zPqQd&Rbe<?Z
zT~u@uh4`K+j}|DlO9re`758!JwU77C3aHGQXX|w!kENwFs-58QIUFjD-O%$Bw62-w
zYT|mQ9PG-<X%PdT3lB1^g5M?!k9T2f?sKcF?0m;VgY>`BIGb{Fk4DnDQcqBjeW?QS
zM%qZ<KPGRb;X%S*ItF$yg6?P92j_^s+hadibZ}6}@A`+%jdt+x3G-G93XSs$3+w9Y
zD$_JeCJl{&N3!$9tvW%=&o%tCCmN%wcj|<MXz_6(3V;4orK9|vQ#Bc}s!^{30HIS0
zTzci3n=2LC;zqZv&wX%-)3D{Y6ZwO{A?HJ(K=j+t96S397JTG-?xaC%Hl>8rR06&v
zFvusu#@bJci$i4PAQVKMhE9%4eiv`tdt`faV|!~B09KBb?Cmf5`WPh9I?1xg4x?Ab
zWuA;mTOC%G8gv|=tliz+8^TPj7t1Wmz_HVy{%v!3_E5j)&z4bKQB7F{-7B0qD`!Qy
zOh*0t%Y}nk(}tzx<%HxIuk$I%`?7JJYHmWSo9<aUk))N<5{()&B|{B@LmlUX6S>->
z>}MgRFRjNjW#+RL<Crp(aXosZEAYEUb&D+){S%dph#u}KDJh_RR4}=x(~il#%k9D&
z5P|LOG-D4W6OykVnhp9xXJ)nmdo5hvNGQlkf2FxtH0-4c)?MnaRnduB(UD*-R4c_P
znf`DkuFHVWYZbL@6{a9o;zw3H!qj^*jsq`5#_}Af8X*m{@Za#+G`hnlbWG&&5Adts
zUn8wD8f|so85tW}3r#2y17G4|I$60b=@Ef+pXgkV?{=O+X4?jQ>el;wVGxsOH1A8i
zpD7;H+FO)mDqJ?NW<xIX^7ECHXt~_4X$t-NkC#z>>v<f{Mfz?ZNL;f1{5ikBG6yul
zuV2TnkGRzV$Y~=38-hK%cggK^$l>wtG(QYi^6>`&Sc+_gV~ZKwx^`L0^t_kss}rr5
z<-fXQzGUcgrV=i+{8iHA%F_AfNQUyF+4X{6vk}kJ@5FVZs4EDSm2C<xlIC*?>>x8A
z-xUS4@DsR3(ReqbkrZU8yxd$~4~+Vlh*Y*rKF2?`wSnaDGzvB{9S$dKHmTCC%kGD_
zXPv&j;$YLQcR1Cvr3G}^E_Q~4biE6V>QikWMve@nlR7n%8XH4m*1~X=Xcuf(ucedd
z53U;FoL2Z5IBq+{NtoDPD_N?xc?}mUITPTg>2jeCv8tL<y_#sKtEe#R=$tN5ZoRr*
z1Y3Zo`KBkkKLV{*ngu<|mn_&ih#KfoyaZMKu9LUsu)0$p3?UzWkFuA;5vi@s=s8}^
z*O;>p|75%vIpX?2j9=z-wqe-NaHr!BTwj+In(P`DO0p^RkC$L<QqPo^uc!<|L#3po
z2M>RWoBUrdU^I<SP62JGZC%`#wuAFAxr?cf_<ygmWDtg5mM6?6A#}w30;<uvgwu;j
zL;(?~_Ct1Dd;&9=o#`Gpc18TAi8C@{Dvw$pM$)-=(DiYt=z|82Ci$B7m$#q2uSeee
z4k7b=C^=qn&wl4;`JJ(T-2KGo(*M$_fjntxYry%YZE))zn5eBt2w_OPcMzg4z-Q=b
z(P21laUQJAJ4u*<S4*_$2j5;^U%L+vhYk<TS}sPIt4<ytw4W8^R;R)uQO>wenwft$
z2l{rcm#Vi=($k*|Y(d8+nAYpvg(hfwU*+%nA75YB%JV^@k@>H0G5aOi6~2ADr%Uv2
zt$)WH8*7Dh>+21f|JbslXHG^%6%6}|1z{{bok%fWF_W{RD^d%JWm10f(`0lgxz0U<
zpV$)Vio4G9Q2jff*RN-km1}Ao*<<4{=qP>_^bd?6yhWj-rY^DG^<vG<`Ll64PL_wy
ze}CHL;2zE5aWB(cE6h??jfIUHb#|4%jv_WWPsHnGG42~6jZ2S%5RfPSH<MR-pSg*d
zo`3Z3VpG=d=$KWwbc+0ZMLFPsl}qp?(=nVVy}rpE9@;l8ZD^&bk&FA{+)6eXBQY~+
z(X?K2?Dgw!97rGeARGzudJYmcE+%tR)JgOVuL4_f!rP#-1qVoyCo|VQ-n@F%9xUod
zhN4fTw;RgvNN%#J{!29o?I%=T(9F!t=N&<2yVs2|EG8Nn+%4bHXf#@L%4-wJ)1$|}
z><enw+wd{xy5q!$g&mZtRrN-Y(Bp(vXg4|K&o(`b@;oeoEz{$r24P)3?bFUMddTV1
zO{w-w^w{sdJ_+F8ba-en?d%jFG!AHXPn2^1>>Bp=OhLopTl%X(Di2nk$38NCBA$AS
zJ3A@+<HPyb*w};;<%XuFq@;wS<)%W(%EP!`VQx<DGVL}WJuk=r^`}q$#v7Y8M3GZ-
z4Hw%m(9jBx`C#FH@ZXOgJz+_6b8|FmjSjs-$*UGmDStP=_3%CY!&Hdd+bxt&M|%4<
zKkS=|iu3Il>2>J?$5~;9S4x=;3GUM1qWetg{L0D-`G#hLhiT7%(n;G5G4Js17$Oc$
z);J7tR8p$@!)@iJBAl3fZv?^U&IRVbW3+!5N7LQirKK`#rDU6b<>8SLogE!1mQQ-G
z%vq+^ci3a(f}D8orY0S5lIS$^E<!^hQaQ#mp)R|6GWl3vtrDT2L>|mo-|nsXfQNH=
zX-P^dR6Zl?+j0F#t1Nie^#4X8BBY!@U0Z@=BmVGTKc>StI0n7B>Ysh!h+A#ezw2gy
zcX6<DicBFs+B{eU=3h_uHHW2Ecfnq)_YoEr7Sz<#Bi)(h6(n+_4EG3QGOPI2ig)(=
z46-txC*_N+t*j{D{)EE$@U=;`>q$jj`TF?bq)2q7ze$)x8ZnG6M5JgeMqr7XqSAPE
z#hoDZn}kdrL5;h=>;wg;+aX@iASq1Rlv#qZs*`3%i{16Ht^@3TRb*u@j=Q^f!|IOQ
za0Q~0Vtm{yOXHI--!yyh;N5tX;*<VZ@$Pa{Y&A-dD;yK?>*fRnB?SZ+T3R|fIR(~h
z9<%!qA7ehfSz6}(^hHG_H92OYJQy_vV_{{+$k0-@sa#9e#KOeJ(Vm3ci6>oATKeK>
zk-enkxMiH#cEf<)T011~K<>Eg57V&le1_Iae0bNovU1|i(oi0HTl5&b8yB^){316;
zV1TGrtApJ1CI<Gw_V!n0WgcCq8swZm6Toxg*p|{5SLJgw60X_w`MF&f!o|CQhho#o
z&56la-vWQzhP1^xtBE)+4)Ud$nbyk63_5uCnT2v#y#Ajnmpi0^r3U=ZlKB)Yc^ci}
zG`ph>e{#}@Wy49)-~(>>Z~N-cyxhGWNtwwa82K)32$-D+dHILUKl{_&-bQBsEj2@W
zQizB^W~^jhSXfkuwPN7fJlb5GS&%B*uRp`2go7sHKF8E&5fbW3qSF?=dc4fNiB}@(
z;KzI=9AGNz3;PP`-PE+gWY(aRG;d3Diq$@;KwPM}l!=q_4CLvdv$IpVOkK87SJ;!+
z@fG{Bx3{kDdK9<w!omWbX06PJnD0&8izxvUr?)pOEV1UUJal9?aSXNq`gwL%SVT4P
z@S#A?@JcP#bGBSV{PX9%!4HU_cnGWizEYHN5E1i%#yJ-q<B#(wF}-y~Kp2jak}|l<
zAqL$&(up+Rt6feqmKRVoqqS|oWG`Pj>1e6ak7kY!MSTAv{!>Sxe5RSDX+$ccpW=v6
z&!HrRA{O>Jn15=vxUtf*CUmoli+|)oc=$j^<hebhM(&zlP%!k9^8i>CJ=|_a-E-JZ
zBbYa>U0+{=8AD@2T-8M<3@R$%{VGqa&jCK!aN63Av(B?uh@#M+ThOzUOXC>X4GAlu
zUZy4g5F{>Q!<h!U_yp|b2Xq4NuCDZIjgMv<*!V#|8FV`bluDeR>Z|JOe=2%4{)9t4
zG=4f8N#XswyzEyjo+IucbLbloc6~A_jAW4Q{)0}XdrG1>J0ahYW^atyIFrva)~f={
z{#2BeW4Yx0J}4`bm#B)1i+-fkB9+Z#Qdd{2#GRj*Fq{5-=WqhNxuW&>ydhBc`u&4V
zn+M#1W-c4IjEz`|5Ma^bed|TV(`BOn3LH~Gu(Imb-(?O<_@6m*-?-l04gDDV#djl{
z+FBg#q%TC7z{*~?8}HDLCz{9_=n0)_PPK*z?a2W#HUz(4$9ph^^eo9=-8QJcxmodZ
z47ZS3Q`5-$?U`3=tG@Nh5V>p8goubto1NORKJR-SgimdId;R2_a%p%1>PIyt=ji%A
z0s<5El9IX#6H55#`9|SW>q|>%X{l;?kAXq*^38TWTs!fx&>IsIIa5;vU<Eb4r8T>}
zOlf%!j#t&w^RJ;{!FblM=e$?M^yFl``HhXCkr{DulHRHDy@Qjf>e{T{&r?W?^YhM*
zP6meg+*};7$}3Y#s><p@Q8ruwkIhTr;aC${k^_Zj7x#_o81<6&ALmo5jo{pa`d@!b
zNyP^z<>Y&19UTTDI*L2DlM-}dKH9SZ(c}*8S1k0;1Y%`}zwcI~Nq#c_B$=VAST26-
zLJA-xBE+~JTzy=z-XOnc&gTDBqC)p{HR}DVl*$+unHM>cPP^f0vBI$H9&!km>2-Hg
z_k8j=@3LGqr1AS#K>;PJn%}GYFl`7Wmr?JTe$c)dTx+#N8?@}(v+FBf+e?PrXl39<
zQ)8e-bM+37IWKB)&H4G}I(`jp`knAI<Y6($d*QinyKwJ(pF-eyzs_5t(e~(oo=@|)
z$zIA8fjl9%1v%;5<Yd_KFXlq|KV7H;#l;YrVt$fW0@U~AVjRK3NaW^qxRH>s=;U-<
zlnaHq^#FY=9es1@P<u<+h+<gYSHJ39Ak9k^`mSnfIs#dBN$h*sd6}`j&bx(~su8jO
zL_<c1$#ZgYDm0tK)F}d_L#26mdFT0^nP5FUJosFmJ)NK`@=6X`BT_fyGmno_eX+!5
zCWTB)R7DN9fEVe!xk^PW#{6H~#l^+Br1QPhV%e0U-mY=&^UJ-j<Tk5~30-|EQY9XH
z#{8R?pF{Z^9UZZ^wy;x%9u^xwUSJnjkehok{+GC_wl;h4*HQQMm`jJBun+-0ek38M
zOrW-{EqVxqv9i*_&Dc1p(-+D~@8o8&&e3WAs3G-tWv#7)LmH$0b_BsJw9xug(WJyV
zrIO0u!<fkeLqntQZC*-Wj}$;k^7}OScJiZIKud9PXp8(vCbu*O1NHYj@{eVz4WWUr
z?~liMK;}5W@HF-ow@I5tURqXH(=wWlk@NizsG1s92afC9At9ANH>g;6SR%L=X*syx
zzG@j6oBySQl028z*WWDDsM{sZ8o0QFGE#l_+a$l?by;~i#Oi?!pJdIh-qRp)AkX>y
zoQhFDWp~^Txi%(l536U_`F%PfkwJ2=>AEiaFJV7Zx^k<9>sbE*su@#5B(UU4?AZ5F
z_W$GQt>dEnp7-HJN=ZeKhPQ;2(xD(MNOwzz(jeUpA|O)I-QC@(2uL?bcQ-7xu<UdA
z{9fOOzu24Q+^6Q8nQLaQ!2&;JMMcca%sc4?gP&eq%QxF2Wc1R!I^X0K*&i*4<3%V;
z77Y&%ubjD2{`i&k`>Vj}vxzufD^XF(zM(ID>kM*q9Q?--UQvqUX+=@{ttDj*b#+@y
z@eSVrXE7C({^ccJ8@l=U?1V~;rtM^Iq@;NF;@~jY|JYbq_AV}YGUMw@i(UI$^0@7}
zfge6em?q0H(|gbM&Bmp7(+S7CO8;pW@2yeTR1`949bK?bWG1<>xfy*Vckz-wnUL?J
zc}}P(vB>&VBA3}qPaYD(A2>b8o=h&XTg{#dO>@mZzDu{)z0~z>@ES9Vzl&2thusMV
zp2+n#kwTR|kmEl^t4BwtYrwyF-%`fuxX)j%*>+_5F<%0O-)pbdw!vn$#R`+l9L{b`
zOH(kE%HwLxnCQKXG2d|ukHNn$cyV)1oKAKkShHCZS?_a`bejJXGq_)p8+q*7@tKe3
zqca`C3qnHN7CV|1E05{*y32DFVz?nnW)ksxK4_ep+hR243&Z|?U;vsRudvbl6c5id
z?-^cQaDkbKh`&S77ZH*6;ms)Ab%oETi*K~-m7gW`pK%Jl7o!<VZE~EY1Uj59YeMee
zoIa(53jQp_`KQkD<=2$tltTQ0ov`|@Q$j|;KOi_{a(bH6BYRR<>tdp(C)wD<nxQ;h
zV;%kKgz@!jHEqd2@jw|Aeja)gL=Y}s1YU!KO<q9(zTvJ^zNdE8kn6Iw^~Y=WqS8Xm
zj@9;W-$I=No%@dV_R^!$%NKHs6_N-R1W5Z%^~-I3seU-1qySf*RK<#eySK*mK@wO0
zv&YjNSfOW<S+bNIJSsXaWORnylhffnR3M~kz-C<dTX^^zbO%RU#mFBXJFAjAk(-x?
zI(1!TYIaHfIZa8W<>k_HtsXc1aY90|kUcKc3#|rP|KvGl0RfN9ca{tLhllfHV`GL&
z8bXseghX4Q95p96oXyP4#Qr!TrO#fz_4ukfvAMcS`IJO1Bjh<lO{DYO6#Z^?CmIyF
z^7AB<DJxd)9oAI#8dm@CaF)cTZ3dlTUOy<nYR&zVVsv4Fjz9}mPO^K@U-xu3mMO0+
ztxb%ksF3j-1~c7AkJR1yOIBd4!ei_j7?hunkyY7pS3ay@o56wNuS!FkBYm-jeN=aP
z=o%?boRw4KDdXJIm^NH~T*5KO{v2~Opu~R(zd+=6dGzI}l750DAJlvAPt}N!Ploqu
zNpbZVa0zzo?e+f`$aJ}Ne1Ck(kbzi4wt1f|5W%go6K5T_JFZTNdq;HP#sdw%UViF#
z;1#_78zC6H_PpHpVsW@=BAe0l=uSMtw=L}vW@HZ(S))PHO+CZri?|iUj68;V{V=x4
zQkrZLYB%Zu)t-+jLlxgT>^-74U4BH$<+9*UTfiWXcfBl`K`rQgYKw$t^gyM<-KR!1
zk((?tN)pBY(pCQt3*Zk#m0YLxFg`CZ@F6GXvpQED8522Fry6sTAOs99jeJXYzJw<y
zu+J<nh@LlCZ{PbOG}<Ra;^KG?7rj^hT~gz>!p;pC_fHlh+GOL)028V0&M08sA}>bj
zfar#z^ALe6s)$soypMee2HpXL^P?w4YS&>}j<ZrgH6~Lum}krGADne$Vncj4@M)oa
zRqok?i)d7YUPW^bbu1(7hT!3C6&N}<fuRZBu$vhtLf+Gylnl7Xe56_u6nVJZkN1S=
z`ou`_J>pK*(}!QApu@b6Q)0q86T9PX=s3gUQapboBRzf4i5Ss%%)Y3+f9xrol&}XR
z9jc=5!f((#8LXI&JSegDd5(zdi!alaC(6;;oawk-4+_V>yD&JeKK=Aem5E-j#I}8z
zlFzYTyL)HpdVL=0<m8mEJ$78Etxn(OD-`bPbDYvUG=!i&ZdEL3+V50`cWoHPX|pGj
z>=;%@gqV2bccjeGd9e3*6WYmjlAz{L0K}qt{3!2VtQCRERXELsN(QO8t%h>|A|ZE)
z)%%6IiiOWR<G)3g5&iUAnm3vYOT#{7d;5S^WVCl+2u|IMIfvIv{P$39O2l=M_?K#S
zt2r~V;(mzLKuL1O!0x-td;+>67>N5}WqE^*i|x6am+<v#K0AEk-=x%H{8kH=E%0w>
zB>Wj#)N5Fv@b_CTIy=(SFiQ~5`~*K)qX&SN!6zdlRV}Totx9onbabFrE@mVrd(Qne
ze6{vC@KKT4tM-Akg@xD+Ith*|ul*SV6VqHz4|l<nl`byNq*76wgkj~b;IWgjZ(mlZ
zwWz60rG&I2$|au#G*Tqv=k5E$;XK@b@F++_^9PL0jRQ*e9tWkTn3&Mh*;l^_X1>2i
z0d{n&GfN7`BbAWa;$j-XH}80OEEe8EsSNI^bCkZsWe7AiXcOvRii+j~J+r2=5}3J-
zIf*N!C=m-pLG>C*PE93h-n@N;4GfVi2~D!Hp+%w!%mD?#8t(2%@$rhH=Mw$*rL*U4
ztzH{e!SRGsQ@b353%8aVi%pB!$YfLm#N=1v&gJN8A)<s2^{@HoiHs1xOs0?ow&ETq
z7pGR(0RWX8T)FG(UGRm@+`PRPQz|-i)ij0Y7O0ot^G#d@28h|3SuIi|Vnr2>Z9=F`
zC7op8d$X$=x#at9^-*5}P1H_L-5*~BVx;yeT*F}Qd>s!idOu-szY1i}U<vMfe79e5
zPW;CGp5D1b-x!HF@1Xvfbg?Hpa(|gnA<^9<cy=8VwlIsgJllPdC7JQ>a!3P-m|1@G
z^{c+mVFLe_y0{JkgmrWkD1@fIxR`11@!i{~>OkB?0_`P%HQjT4ia15xLkI}FsDB#N
zOVU4ikGcM{qTucC_z@_4qsx_O`+7tg1qFHEJD<DTJDiH>sqh`ya&~ffC4Dt80`=L)
z@6f7r>+4uT{I_j79Xj#_XdGVq708bz+r!lLY5exF7+X7xr3U|f1<ZcC9cS<gxDc)S
zZ(17ZSMBj`n|a&m-=WTT$4DPr2jTy2*Q+b$Dt}HY%w%0n8L}u=@Aer<`rah#R_0^3
zxFGV&416wA`1G?r6bhHGg~+d(uzVcIt%lxr@D+vJATsXvb~nph$l05-N_D8Ah;z2K
zYV%!(=3!sNIrY{X%|8(Z)fcXIPHOs>3>of1tG}C|i2IqzuRnc;dPWj?wuhGQqgc->
z^lwQ8H~FB5*0wgm91^J8Ro6%by}l3p6f=^7|0Kb;Ra8==jAW4<`enZOZ5nZh2HGU6
z(Q$_2d|HLexzeDHZ_M%&sOM2160uE9w>dHT2({C^^WU2s6z!Y)P+{BN#?CKPyFb6b
zcxTOj`|={`^Nx;l{e&SS8_PNDOwES>-8+Cu6y{l2S>?F#mU2SnK5A+0uI}c^Z5@qS
zn}A?a;7iGX`ra=z)xetUR_{P;8X5UT%)sq?rxDdrhsNT5=DoL`Zf=!*Qamm$E~Yqs
z)6ZuDtE;OyjCz=R$9ls^a~8yTzF1p_L_*s(Lq{r>8>z^Ndv`#@OIcfhV8VbAAMljk
zcu|F%HE+fP_Q0kR&4Ht%Bd2Q1kZ&KNI*_@dP|C1KXk2pi!uTPYElD~|t>Nn(pr>K2
z%GjT&c=f8EGJAY;)8SoTpY-k3;XBxbf8~i?ow|AuN&DI!%tK|L%#1E*MJcF*0mi7D
zFL}To|L$AGhc1$R%;-c>QJT-6O{4y3DQiir+fGJaTwc;&Bq{GOg{=aU^;4Frqm2pA
zqBYsPw$4tUxVIshPJT;vYqnaGEGwfd-Q)+Qu9!r(D*aQT?;nF-ayHH5dbW7()2rkt
zya+fF9g2_t=n(nu2W<M|*^|EqcCOaeJWQRetmWl4RDII?xbLff?kO7>_#(8g9`zda
z%8w#!CS7<E$HI2`{itG*xN^R)5TSBQ3m`pN3giNxts?Kcf~Y;$NXJoJ4}U6}56LNF
zClgdV40#Z!M^e9w^;-APD)I^$W9zuyh#FG7xlznUdpGOACdgN_Iq(AmJ^0%<@lu_t
z?*|G$ayh)li=ZCJj^cY?i$C8tjL1@r+I&;rdL&jeULDQW1zd!PjO67FXcSM?9JhMU
zWGE-vcX*x?_xCHM*_xVdE*x-RN#XOu35kieU<(%=$h#P4OgVIg(1<4A!?XT=thwA+
zordGNv)N#Etd`52)c}o(zh+OV1@2Ux4#JM>eWX`MpdP-z(lg#~I{F^H8P!(Smmtc-
zr1m7#&}fQlMYL3CW&E9#)~WVV?=Z{#<`a>DcYwIuXWQ70i_=opU#eiUs4EdUxIeuW
zZ1FK9JdfamUM!GTwEo3YUT9BqTrv03yq?S@pCJj9ZF!T?XGU#i22Qv}V;Q@hzI918
z+kmBBZD8AO^oe|F%*(q$0#42)3lAg=rnz*zLfe77*e4!N%Nkmkf9HuuHS;!-ZFSAP
z`7Erp&k6xlj?^?gOUvS8-<`2Vfd*vdA-RNoaLteRp4NenR@)Z^c8Lc^S{(0oKGiw<
zou51G_GJE2uJaTns(X;ykyjs=-iNgoktx#L9_sMzo{xH$T#)gj8=|o*DUM3${P-!q
zc=$w{8fP;wz-X|Y5R;O}kU2I!J~qCXP1V-+m|e<uRHnL`GbcNTwm@E1TA`}Ge$H;$
z8_)wQ>#$drmU6#;U)tFCU<j!&uXAy6ZVjgCsHp+?Lguh3GSXH$q_r3(FEKElC%eAB
zE+8NP=ux1*Y=47d0=$qs@%gO%{k=ZBv$HcAL5=y<=4O6J2ZtAL^jmF@m+I@Mfgw}r
z_y{Ai9te3YjGI47y+p$dB-1xFVPc>&xeCJnt;Z1&^+r-Nr1`_IQOS)OV^YYUKbJL2
zvpc1E^6Gqxt+23g6d}|%IG8BtX`}THp~3HRaGlAdibok;p}RObDom`KC8_auIp*kT
z%$QV1L|xqwtk7J1+J_8vTsSw{MkgUTqMhfox!I%nkypF$)Y1_y;>ou_ak(Ud)U-5t
zh8C}zAE4LK-Rq`<unWo>U!;C<VM>bt(fI7_FC6NFZ~bHWBBI{YSyF`~`C^_r^WnKA
z>%F(~Pw-NHJ9Y3cj*Ue{MahgLNXKmGecn6b4Dw5traQwx4^&w#dowi6%j+-l5|(R<
z5KwL5HIdPjIlHL8{OIaB^7H5SP~tU<%(!$DUS1bE;n3Hw?=*?~k{Owpuy9gU3=DL1
zG}d=^-aA{WS?+~12cqR*!%8za>A6|B!Uxus%cOokt&xrHFZ|r?^PFMgd0n}FWck~v
zh3@X~@=po50|OJi!^8Tn9a3tfbtTUzDAMgt!yJA|82%UJ$~ll3DMXVGonQ<V8{b^n
zkrLgX8z(Gw>kkb{llIl>pCtvl<^Ykb<>=#ZB}O`B+lA{V_c4zeDazBz(zM^jpne64
zOonHb=X6b38fB8M{*q9jpx|lLR|-By7h$EJ703Vn?v53Eo*%V;i*n@J&ywW3Dz~I|
zzb%I<YpX0YAZ9QF(HAvr9SoH|`RH#hN>cZI2XV|!Yo(B~_aBXna>fUA)a$$woJW{y
z$(my3z2S6zLU;dS5b06Tew~@9o~}%Mk<@~JV3NlrS*?jiJrOxCyToPVM|3I^!(Vp0
z3^tyEmP+Zg4(V3-ciC}+(N4){p3hb`>ebAjE<ptsEu0o|_h<gO!FREb`GwU+Qast%
za_n}*9>H?^`~~WL2YO=kVxv?4z*Dn+CDu-ERMaEf*8Y8pt_K&bDMom`K*pll(tETg
z%N;jeI#pbzdJ2tp@C}Zd^HjXfPL80J_kUkYF#i4$iP!n`la-a3mDK>NR3WUJ!wt8&
zxY!av%h)eiLC(rE+$uBU+zi3z74ch>eX3WBuFD|AQett5Rx;vSaB$7(Ot~IlMq946
zh!OtpH4|&Q*G+Uq1siR~)o9gvF!jeW{qu7T{VYz4!RvwmC~oQMw2L`GESsLpgVP1T
zFD}P$<@r?~em6T1H98`6MG+VSiaVd5;ha^Dx~w$||K10XRLqXz2X}Y(*;AulUYof;
zNBkbJzknd!_Y}VG^a2#HxxG3zf=RxLp%Q{k0EasD@*Uc2Nq2WQLj?7Npr^~n{JOXc
zP&o)FaVaS&yQYR^3&5!f?%6W!w)j|FW~7|g9iY|(o^A2PRPvb$mi(kEM+<6?oo7=+
z_)ACw>JYB+32<DT-C;jC<SvCivc4?2*ct2MG8;@5G^0uwV0!(!)j`}QZK=^d4Ytpa
z;T2RaVP!QxMjIUL`aAV3{C+Iw{})fp-QNuk)zT*QHLjUaoi0tP1)e?`xFsSCi&Cis
z6jaZ-LaFp&i8;Mm9v+-6p=!G;E0zBmXG<LsgM-{3ZHETs=$Ty3HvVgNKLe1gW^GTj
ztn3dl8fEi;YL?l#D$+JK5l4GmIf)wo#uwh39noOL{3!F<OjUMUC4u_T5Eae{iVp>q
zl*})<hZfB_CG+s8do0EjYXsCDmzFxAmW;SXjjj~xDkIW`P;Zzd{=&>8vIw>o`{?@;
z)3i&B_i78H*Rp?{aZX8H$~SLq_2joiEOso{*X0&|e`Gbicm+@C5P0s(%ph<+xEtep
z(<{&x2}%)k|0UMj9hUX4sQ1dQA1)3L9|D}?>t~I`BN=V6c3Iikx>H3}<MS;&^`#Ft
z^Rm)U&XW53Cux~^Ykx2mk0)j}!x+N@1M^t-XZLpO|Mkn1$MNy<FbkrNA8Y<}4aO}Y
z8|6=?*tO_e_G!yI=58C&qpQxWEUpo^J{QVOE>D4<MKZ4vXSk=<UNoH(KLi%H#5taC
zvk5KEaukx%&mG+@ftY*5P8;_2NU3hy(M?9%*#S0N$LXG|``mj26!s6K#nPietc|X_
zN@2KoJSrsd<hvmEWR7{#>{5@#eeKWxVF8*=7~Z!ZmwoGQZrpuu_YMBB7Y!D-wBN&7
zOx|jsgkQP3xG)jVzN$NgFGhW7l3Xk^P&G@X^h4e*-xm*h?oIXqx@>H0>`VDq^dK*B
z+4~mP*$4emyMwccdT~iftTU}tOq)i=d;{`!*cUDcYpO8=#%!l@X=m=CofE%+&vm+<
zes<(V7xd<u)<m=J^YQ&v`j~=goMm8LS|g_{HE}C&MW3O5c?(!al|S7qvmqMQp2J`6
z7`HH_;y#XEaXp-qHk03!%0oP^06t%tH(T(F64=X>kB5`xy6sLp98tLh68FV$`DVmU
z&=(sU8l&j(8jE_bQ;TC!LLwr|*c2-(E46iOtTQO`z-W`{U_k_$S}FR;tk^_D5NmgR
z9{Wt1RYT74h}RqFpI688qO&(%{&QM5*u|_S!CJP{X!C9)#TZ?4gnh6jj_;qxb|N%)
zl(R3>*^J&UYCRELlnU6gd-sB7oOVvFWqGm<z{%M{O-ghGq4RN9+U{CRAxaL24-2ni
z`eV~RsfQ;9x{L)UGulfAtGrf{b=f=%T&iPc9xRA#{nk29!KyK2k6A+b6KBZ$Ls9}g
z14AgT(#x50{TGh|DY~^-o-5tj-~ChUm(PpD%Wf{_yoXh_SM(Hq{{AA5BNiEsVocSD
z41dOnNTR>#xxgi-e(Q0a>A-~F5psX*+qxMd$y@wn6!u3-zTN(4&|-5^8SZHoH&jQ?
zYkhOD4$QC~Ml>0+h&^v-TT>Gi*R_EWAyZ`GCQGtIQ<@-h37DIXj;;nxZg^JF?bl~k
z&3s;nt;3xApfyvMo~?p(^%wg)8yl;u;tazin0mwC$2S%Rv2d^yT2niF(9nYkiC%E?
z5a1g1gsJDN4fh?U%r`hlc|<_n<#q#puOuiFJJ@djH6HIn5h-Fii_<K`<aAkZBl8@k
zueeJ#HWOC}m1(q#P~I8KT7A|}x(qag0tJe^$bg*na)hMOy6HHPDTaT&fbZS65KAWO
zFV<Y+D!Za>qgT)yhl^%h<n0KQ1S0W7l>f=xwf@^$YR|vbdyY>da2DkZ$qH}QMrW%k
z6kz)&BJ%@wboQ1L*Bi2P<i9Wc>qS}e>tx`9y42(6hCAzjZacfW&iyf|-}~HYDu2pK
zN%55XB4=Y0iQ+8kenqvRW%Zti-(>R(7AH@iwrQAj@Nf+U_i*sOQfDH>GTnf?j<MQ@
zHY|KlnA%8Pp<oZ6+Z9T`Pf;RSB+6?ZHfGT!LRS0B#C$wzeomWb37?S3Mq@^YNhMvs
zcw$6`^PAi)3!S&<p%wl`60HH0nVr3{x;k5aqR^qk3GXPR^wcs;B8(=8O!m{%;WioU
zETEbCL&l%xO%A&}=>3Tvr}_QGFlNoxprhkeBA4wdbopjwaQ8Wx-om|;;W1c0Y}^bP
ztU0uf5a<!K`2lWg7n0}(K4~c}+KZdK4CL2=&8oWBQJxMvILQPbzG{1TSjszJkayhs
zy0~0E@?Xi*&_{aAv+_tftH%-1>EB-W&oCzu5Hx?D(q0_VNNAngTTc1?^)4jlm5!#i
z1I*pPKewy6zkg==&X-Pbq8s3P%QCXkG<6AM)Wv=ckrizLw0cuQ(Yp>3(8J~1zw3$$
zX)nYrXlM#LuEvNzt*SB!v2Yn_s~xnWho+{cX80V@QyMJL>L9Pjx@_-{BGdJkob0#Q
zbiFnv(G}xNEIo2O$k{Qz29XYDg!^8E8%(g-Seab`XI}m>c3w}!aYx(neQ>(hR^UI<
z8lUr9P;?Z99BMS3>K&}0fQOT9MfCJ3U3Fz)3FUWM)2R%_1c40Y*N@y!{v}OW@r|<L
zE3)A$DqfBf`rIBPKiPhP3{po3G07Qi#OJ)s#Wk7>lX&}UH8lbQLQ)l*kdXH7ITRG_
zBG&h^=o`<wales_q%i6Hp5G8sG4bA<RGS7pK-Dix2-OfG)ra-uiS3s!gM)G=5(Fn5
zpX}u9Z$#S0%7U$~QwrM34ihR62f&GPyIJ9Te6R-m{MEKs!)!tbC8IS_%&Vwc__P5M
z+}L6%p03Alz0cmF3*GLtbs)FfVz!^Z!!g@W$N*XXl?g>z?ME$T2KU=-k+!-m@Dzjg
zGdK&|-D+9K5!55Ock>0&i~G$oWWm;1nA))((DvF6CCT`UOBta)2PeS6DZ%H|S5kK0
zHruh?3vIn<P~9e=_T6a*ffSt0BD8i+5y-3Uj$_1bZdeq(UI%<@A4;ux>$$sj1LD9?
zB^A7{J6y{xuf$3RNGb0vI%+}(GVae5f!Wmj*1+ffNsHa`YQU{j$bDA^a%pa%^`d0N
z`Rei{vg0nQ_M&Xw^+_NNS^C|~^1bf#z-cYBWdn-Qe@pl4$lLQ}WSe!tg6GP8Tgwjf
zu24W^c_+2c?Z9Tq^myYy_qo|_vwUQP31LDSH-fEwi8V?}nj3kyjz2!3LV{36+_(V2
z>2MXwX_P_U&u198BZds__FN}rQr~%>^-|80baT^0ckiNwhGLOIBp%Ie!<H6}2DLh>
zKWYDXO7aM3IJ_9{d^yKldr}HA+4!guxD*joTp}1(Vk<i&e5p9vlRO_(&2X}`&gERC
zMi$=+v@m<2>?h<ERVh@wPS-bLVR6!<c@ZWtDCW1d1C{?bHB{3oCmGpHu{k3=_FhsZ
zxcBFK9!XnCCFV!93QcdlzgWl>wLlQ3w>tVh7F<SXQvIbBB@^Q8&d!b{C1vWKI-^62
zIYmWPSGQP?`~l58Gi95Wrna`G=H!fpckQ^oC#EDp6y|@6dx;uG2u~wx>xuF4!5zR`
zh)X2o)=TJA#{cJY5ne^yj)MdYb!uw5ut_k>K=OlS$-Qm)sI5%13lRMXXw00oA>$5T
zHWtnbLMdvYOU2d12U*a875IA@xrOTzQ@povprWqzl5z)I@U<n>;C~Zb4E&+a&UM8R
z1@7;cPFP=~`iZz9yDALaZkWWCZUGp4S)mYet2j#=a!=d;<C`n`j*o-Ahsk7P7Iifh
zk|f%bctP%)-s4fxh@2Q5vjR7E1=F(9QuIg4de-!)5O(@6hZGl6y|url7*1CfwEjAU
zk@IE>;iFe#Kp<V=K9Mg~wS1JWN+qb9|3g=m<ftmHu5Or?uC9=<eV6N2+#hjhZS8Gk
zmplJ4HUam`T4jVg&vXYLs%i#lQ_GEMK%;oRRbCE8@c`)<er~=H*AD|TLr#{>?0~&{
zuA)VZpszkTD6k)VLMJEjwmy#|ztbuE%>J0de(|Qw>9o~>O+D@?TcmhIt|Fsi85}FR
z>Ng{k6YhkQX6$P#IEEvcKMwux!$XDYK14naV^2=r12qQ;WuM|3KOyXwnk{;Y0bzF_
ztxOP{l2F~23{yA~48klN5k;9agE;*;$cK^_U4MEr7#mN$0n0#x7@Ff9%^x1E-ULID
zi+z1fjg2P(NW|@l;w>q}uP^iLH?+VYffAKv2B*!=jwHwVXwa1M1K7w8AULtOxL-=l
z#nsgiR?yZKUhV3f{D<EH0-^o%(?lQUE<Q`gWB%}BP|jL{{Z(-oUZb|hEfMMUOPo|9
zG9Cy<PFouyz!fP^4LbauMC~K5lIbEA)yc~+MrwSDm{LM^9x0*nGSWs=+}FOSo!@&6
z_rvyI(x&`P-4-Iz-%a9(fa5?QTi>(hv2z5aFI-;~aa?6aL%>fCc3SQj%3cAg?hmEq
zaa;`J&+H4rVi*vZzrIlBt#}7L8Aj~HNnr&%(@NdgG+)RFUK27lJNxn}kXjF}Y-_%D
z;nDfF(pQ7S$RPdTiINW<Y-*1|yJ3V*S7?IY>(!A6Zxc$tC!gGyJSI_@2q6$ToGz@<
zuvv>y&ZHwNmc1yar$pnlE<d|JcvI;E@{iYV%D{O*>NGzwG=hWPwdRXDk%0n%_`MV_
zc;(=CxMLVkLs3il=;0OrT_@{IiPU+RzQdpUo|w*Nks~#tlys3>R+kj}mc=S%I^Glm
z!etC$c?#l)9N#Wn*1yo>!ihoR(y~Fn?~Z^b{El{xo@lc%5F+S#?^V8S?F4pxnSO}|
zff#<at7D4oWEb|vn6oIXc=lM#<uc-=8|COz1RKttl1aO;q1Co9pO=y78?HY)uHy2i
za8Yd_4-j~#8o7-3p2=Ex+q*fMli#50`DiVVv+{pwkT$mlVC-@2JP*k&sn7pC-rv*H
zqyL{D1}-7Ygk}F+j^lorUQ$DY=&Tsjm#DAh-hF>Hi<V3+SZvt3iHXU9Abs-|ynsu*
zi(6k*?km;GfgvJ+hWnn|*s%!o7?SzTmk)wFHwwDkJT^Ti2e!(K^Q6+O8i?R)^TG+G
z_hmQ-z98Hc0_hQDW22A|kqst4;{bCI6|_h5?WCLIHO?%3kL?o(J4=vs@g~k@S2UNJ
z^uzbhgSZM8J?J=bQdjppe=&k5hS7GOHXj0bpEm1ruj}gK=8>6YbLK-)A#xNs0)AAf
zNZd4;>B>BfkKntVgCuGtW+xw&c)v$W{v-!M*AT;}cAnkB0aV;dU}+6k5))9(V;G6S
zA0Vi|-^$lWb6;2TgAa*Mz2u`jEJpeHzL<_Z!mC&}U5qTdSrJvIml}bDc}Nta?ufLp
zmmKH$A#uUih4JC1VWlza#@=l#_`k`yNQpQpwJmDwQN0@^D7urtP$7Ooc1gdo9p{bU
z;e?ahA{0~*2u`1Qg8J&i#B}cT)VA6s5>-CTW+GJpac0u9Y+&hA{aHnUbP|##qM8dj
z>~2D|kB|O?M?SQsk5jliNgs1>lld-eNsFWw0Uk=c#(0)VS~HWGC4|3r0>=7wuzuYH
z4M~p5gifgezCeo+p`aYZIGwpG|2PpHJdi^deKI=u{j58S=y@r>*e3`?$t00Nm^@nK
zdKvr~BEj%#H&9e^;)5)+=Knt9VGw4LI!<LemkqLOXiwa&zbqwqnEa#9FrvppIbA#l
z_k5#lplNojRUFH!POjbKKqC^4>cAfVXFza-6>(UExwZ-(hPLxCv|Ns6Fq7=Xfu5jw
zVY9*J?r;BFrWIDNo|7;P1Bw8Nd=4AUioYlPi5L*Sv2}>{Rkhqj^a&absJG7I=^7PB
zX<+`#Pv6P8HdKdPhnzXtQid+=Gmr<rs@1{^y|)<q19pQA8pb{9n4nkDD+BYiVbypX
z56dr19$*<AG>B5Gf6oUq{qLSHsFKO`64&W0SxrOhqq_d=T<SbiP;)Vgzm&0wk=5}A
z=O;@$>)o>C?AM_EPRM9x<|S=0nY^R=W$MM-N2Da2lyl~9(#}Luv0}}@c=Eq}#^C1O
z$wJ%X0!Icb27l2kEZH<GudKzuSVz`st4?+_?KY@f5!KtWcmV5Mus7@+H(e*nvn{7A
zWY-0K;s3AzAjpRAoiy~q`Si#hR-p~lXCx~-9EDtvLLfnYSxyk^_ek<r7)2vXDE2%=
zae)msAH1h2n?E{r?=+81<yid%|3t!%GgFB-E#>#W`OP5<VEX_LOG78am8EC=I*W;=
zNL<&BzdzQp_o@jncJTH1nmwFwLHiK+?=dEs$i*D&0DT-?E${&KgSa2>XsQNlLV=_u
zo@58i6!&2Z0M%LR;=Noa3QSngCh?z%%O&m?D~m%>@A}%>r&#D=&sH3oYD^{0Z!k1@
zn~r7XW@i;LUX;sjbY_-F&ipK=dk_ORJNWFhV8JV6I9+>+8Xs3zE8K9)<SE!WBrYDq
zepI?Sd}Frb)p;zSCI*-75sjxOChvH6xAjHwMSo<*G97Pv*Xp-mdA)jL^gNIg6cHDv
z?&_i8?!j826PGUZ<`vE7<ULk+scsdhiqyo*yLeoMfhL#4V?{-dhaIjYNa6i2SuUBd
z(rebzU+FKE$FDp3XRD$D*iRl75Eh!H@gFxooN5B%Oc6A(@kC5P|K23<hU^Lh<JzFv
zt}$!N#mM@oXuZYDyOkt>livI+N%fYdAV}rf|90j^o}_nY<m*k%y5dn;*`P)Fh=9jV
zaEQ;kXMsCxHJl;xaP8DBBH}WI+PAa6Uxg=nEQx^^s;QEgZBMKx%1|NgB>1ox0Vbok
zYwX->sD@7^1I56_+G)HJjWM^LLn(0{{0W--A0|3Fz**Dyy>(yPWDpQ$dnDFuEA;ke
zWGb#M9<dblq^B<xSukz0r9L}BU;X5|Y4{Nt%VeTN6!r1hTgS`E?r)BSk7siKGg}_a
z&M`L5m!>1Q{0=Bn2{TeWWodTLQrM$@FD(gy#I@Myv1ds=kwGO{$D2k$*q7JIil94#
zsSmr+976>=f~pF&YkIb&yjnM9c{|{?V_>lL-7jA_ERkN9^|-}W$P`CL+ao?jV>Ip$
zIib&Shi^#8nCG3_WoaV9v;Gx*LHDrk3jxO_&DTQq2a;A+EOo}z-e*&dAyLLqH&1t)
zn}ZI82)yE`u$P%uni^UXGciC+GKnH0?BNNV6rH%-V74+7@XfU{#^PU`g?xxpk9#vT
z#Al=1mNX%{L{HRM)D$8FQcS)KHdd|IRC9tL|Ghm+Rh7*)8Oj1;9zH(h_^)5zdkWkx
zc}m~r=hQYd^x+r31?&!a?9P-R5;vLMCtHaTc7^|Upkrcsx_DsKDdW`_-nlXyX0Tas
z(v>%SyZV>fvg#$)S#@;CsclERF(Y0i#73!jEh7}$PfL(Su5WbNw+D;7oz>q#50N%u
z6%8>lqV^(Z<MijVZIMtHUzZ+nf8qZKv4lL3)Z#bNt~Pq!_f5UCZ8PPmZiqVK=<>8V
z_~xxq?{#iLYRV2@It>_4$IV{A2=oR&PBiZwzl+WzYTuI)>t!!7e|JYSn^xO8ZTjWw
z?oi2yba*$puarVxqYv%HYOg+E{!b!%_JKZus6g->M(YFvyUz`oU#Irzhg{P$#U`wy
z1tp2<&B}>Fa!Z>Gp(+OU&J5*7O!r#=Jj#<<Id&kAVwSR9Y<FbFFO0#|lSIBed(c22
z5WO+mXTOEGcarCld-8jl9Jhe0RYyx}Mopt6Kaqft(?o{R`}Lbm{yI>6@8X@6W%0i@
zIz|Rv{)%-NjZg*~fmUNnQ$uY%J6uUA5#+cOC`Qtk-A$K$Njn4T2E;F`lksaw6s7Qf
zB*&dCPKer@>S`-%oAJg_2@iaV_m|xT$9H?-8S?2H8mg+U7uuZNif0*>R=vc*co~}Y
zXCh>V_eUv_R#y8H6E(-njX^`#D~Nqo-A3RLyXkPf=k)gY(-ql%(%W!<apZe1SIt9v
zwY&+ND;a4+uEx7AA-;*}^Jx%MMc!^qRE(B`x)W>1NH65zZ0N`M_!5mbaT<zrUMu%?
zk`Zb7Cj)GP7f7GmWNms{+Af7u{*na%d?s=E4&7jD6n<7aTaR2q_FEy3CyN|kyrAK?
z(Q@xr9qE_-SGn7lfk$aZJIgiK<~UHd-xr!-U0hVO*m7%C{I5C>TME!#HqC6aX)BtE
zWWSrBcB0?)-~=-d6G!Gf##GB!=EQFxH<v2}mlpfrPFrrIoZ~sYk#TB`nPNC8*KqH=
z>)rJ`P%CkEHmN`NLzYthPoZ}d?u3d}Cz)a#d|C$atXh2-th(<@6os0C!v;$MO;C1?
zt*MKX)6P$k8O_2Gh@WyW2R|q65(;cI&TJ+5H1NgTo$b@e_xEeqBi25LQ`^YPgk`;U
z2Sn1gPgGJ|jp;=-EbQP)=sK0)4&Gq9+~_erFtOfp*s_Eendg3FZDhpbs<2QUhaVMm
z`!6SD+Q#ipW(^l!s@L{qJxHB_=rai8vq7Ad91@a1ZE!p@Cu`+Ct_-)uD5kVr-PL|t
z{86@ipjm6jD&2Q`NuBk#H^Xao{P%}C50G<0b!3B%-aWU6Oj&M||6J=(17e$#KZq6_
z7Xv3=`)=5eAF{qTTN#XZ2iO&gXIHc>UkP27?VqU>O)d`cuvPrWP4|5lzd8E<9mn3k
zIHagUjZV_Z%rxOX0dI>rm<Ks>@YuoRtBQ1xj(QuKSRWc5EB(xHJzZ<6ttEs)eW&hi
zRn9KRrDt{~=9pc*#wHi&qNFG&C}!Jur+Ht#TrI^0yln~+teUPBz$)XF=u4_8uvs47
z1*emx<!4xKbF<2+UN?BdC^eVn>B4JD;gnirxX;V(OW$K(p<y;oejBF1t7Alvaw!D~
zIagWU%M77hA=Sa_)ArnFp<=(mIZ&$Ilv`cAb<p&!%E;^WYcWZDL}$KkjRzCGQD|9d
z@zHJLeEV{Z-7g9O0iE&EqKz%n8&73<`5{YE9i4eBtWasT>5mE~CQ!`JSzP^tt$jiJ
zdt_3q3@CFGUEaNyBbF?-`30%iIH`0`cLdAv!6n6rvw$7^j3mn@bExz6gN?(9Bjz{#
zcFDrbjGCAaq!VcUM>sb>AKLwSis!KOb=hkoYN3u6+mE^`gzxDmr>2Icr&(WrDQ;^+
z-T#`Cm6iTyGqaN^SLPNTVejBjUcNiV1th7zJxRJ4CI<EGaWjO2GZ^9=OZf%?rl$;v
zn_ZHl_aA}90*`z2vW~A;jF>T&K}-5sLPwjxr#nps2F!6U#dQ9GhLdc3#SQ6<&?g$w
zv_f_#J9}}mJLg>yZ7M~zwWX~!HICB@Q~j}_35z2;Jx%8c#l=?fZ}ciZ-(=f1ApS}A
z@6V`CmuvNJy3D_~DQBJ9oDC%&GJ(D9$OP%+0l3(KkERhYgXR0Oh6XdY4KIz6PFhKY
zT@^e%>E?8BdHSKS6Y9T(IiTXAzj#>R5R_rRqs8;`LPi#5=I<d%O<#6ph>06EV)u(Z
zw?_<G%~w_6Vbsfl=uA93Ma9LRwT)p5P1qLaJr{qDqD`s?64>6peXIOJrO?r4@ihyJ
zvcL;xE!)N6tn6<eUK-(K3ZX*$l8h)YM<xCkBW$0pO-rzl>x8#hTJHNGN)nJ~+sn-@
zO$sn_B;0Cbd3dO#tPE;@HW=1uPT>BIVwe_x+4bySBmkt8<#hDxzx=v$=W4KCe#54<
zV1KFmJEh|;sjV$7AYgGdVE%ZywmvdhP3_~D^1tlAB-i)Bf*tPX+lOnH6Q{)g(5z-&
zdmhd9PC6iN*pB7GA0yT#T(k2f|8y%XBi0kt@F+Frm4Pq0@C1Y&GfECU;m_GAEFwSF
zk&gnc#2vuUiZPguySwuO#p%Ia_*#!YV+`g0BotwoxHafRxVGwo`e3NxFrfNssFhj7
zO6M^ZNf%l4O>*oXv~F_;sBIwt{m5U|m_?~(34{u3LP`Cdp}h4_(L`_I1KY}!+f+8l
zr<AAWO^u67kDJOlSzDul!-UKwC4+nV!=7ex0u4C&*A?#297-+e^|HBjVWq2sMd8>=
zadvaF%MiR5>V-V6xWCgPu#QpXoVNZq_;<!a%Ih$E+4rWqWmrLBXy{GF-I{BuwcXvH
zBzq(8bL<}~DqQ~vs61eSY0JL)+KK(!=YZ_QSH+~RbLs9jE%N@R0XmpYRAYGRUE2i0
zkvqH)dEiPCvydv)sqy;#tt!LkGTgF!vUbq<O7OH7dUvLK=TptEkox}i-&RJ{W!WJk
zoucpA?6fFmJpz$&OhlAW9Yy@Syd6XlciawVH2B`yYq@XIMs`S<!IqKU&9)=cbNwlF
ze+)X(f3rG`@m(qm|G#svM`BUE%3qf_C5_xXAP&qk1cw5zi=%Itb(FYpB&ch4wk}@+
zD!Cd9FwzJV!;{2It|TMEf<AzVX3Ff4POc^~D)vY1Hhf34Ro{+ukC9BqhfOHTEFx^3
zj<2uV*#3u$K6ZOF_N_>kt3q$ji0Ol*q-V4fIF2UQ^z_oCbK@^&q_lK&#$07(Ste{v
z03)d1@)B!B--fhLk_B<Tf<a+y4G-QIma6LN+^WNf2n7jDaPaBr5!6-L{azfZE7leg
z*LD}fcjX%|&Ep3r(9@8w`P~am_HyG)reHj<H3WW#&+4|~^5Xco%g+7hVma%K%O0tG
zXHn135egyd4t;OKShe0VYk6!?vp-;)kfbw%iKB1XkwCHox~7Mf4ZP*ZHQ$(t`Nb0f
z{m4j>db$MW|0d|ITbRQWsW%{g=9Ge~{A60*+G1~yjJroeeTtnwGZeO<M~Y5(jX3tP
z2kICm9+i6WNZ1;J*%~<KHGlpbBmKC3gljQWoZ|GS+Ck5ZdxEF*O&j`yW$4t!9^-Ps
zCSF0&ld2V_H2_8-frSb~!IgUqu58HY^Bm|4$>kPN9&xSs>5r`GOJRLVdaAd_u0kFw
ztJ@@8{^eA9qRr8u`;eNRzorlm*M}CU5>bF42`ftcxU+o3@-*2W)tsKFX{HTzjZtaQ
z%6{e3>bhdP=^&;`#-g{EZ1r;z@K2&aQ47NOgu{Yt6sCCjrohr0eLm>N>&T8Eg|N?&
zYAPxim`(RP!J*E$qf?V(D7E$ib(Gffxf%Q|E#apbU@b^8$(_n}evCQiJQ#})nm#7Q
z;u^-{BfMNll26jRFrVGJZD8O-2Jt|{W)ElEAQjhv{BGS{rbs^*sTA~$40Qc~oP_&L
zetC6kR(*b5Q&D8x6G^UI0iD@@b0C$u*?l^Gi!hJjL30Xv($(V6JHXVL*Z_ua_|Few
zE%O)l9X$sNFPN4<3+o$=zwqDf^Cn%^;D8xo2}X)=%Ur4vl%!|Gzjs}y?V!EWYJ3rA
zvWk-hl)KASxkwW-{Ia_AW~!ePIgGf$KQBsywDVg?JqZ~n9MCQ_lYVJ5AB)Q?fAqeg
z1gM4vzH8K!So`Q#l(wBcbK(ZxoF=c{|HA_6dDRx0qQ0tQ0{Fr;RquWCe6J9h?nNUN
zZeBA7y((bhnyZ$3W8{n5Ryu-Z!Lf6sP36HoK{0jLw(cYr>fT9uQVDOvwtO8Ekh83{
zXE}}n@za_Z8(X4$`uwn8ej<3}?+I_D1wa-+#f9Jf<Ne9)yH(?}V`J0PG*M2{c?3y>
zS3QpdjhYpWDbaRN;`(8*;6hi8Plk1CcCY~;xCc;sgWU`1d=IVKk`Yl1rs7<YiQor2
z07pj8TD_w2p4(g@qqw{@!x|B7u~d<AL9>68N6U%(GEJ$9`5gvz25&pW8uFhoDnx>U
zf;D(x^VH1?#lX<YjE%6FkB?{cyj=R;dYsWzSTumjB~vIsA2>pE=Km>Yww2`-6;b`*
zf&_^!^D0)r`1||een-#2n@2G@lTd<AFzY_QlpJX%$MhBi4^jPcUxw7mj!#X!v@ruD
zqP2m4$A6D&FX8peX$Q6Me?=vOu|K*Xg?$?#{x>UN-?R`P|LTSd9g-RMi$@RjuQjVR
z{hSkM$Mi>&c@1jewxJ?!H4nJLseV!|PEX4KrStdPT)g&={CtldI)8F4h#a;o3%Leg
z#W0?|o;A?}$}g_iHifn^>#q>Yi-IHvZFP?R9^+7GSm;_X-}83kJ_C>70UNZ_!EpsM
zngltd6QU;1J^=Xj1(2IUL#utmPZsJrI<r%=ec;7jSz@&S(18g1I(e=N=R5)17B)UN
zw=l+3-{5L#YsFJnG%9E&oYO}28Au1w!2x9;jk2B|=!xMti3j@cm%R%V!uSstB(M^!
z<nmA`zu_8Q!!Ul?VFp%#1$_17i3}Y}RHL!gc4s1imvfV<?Wv>Pv1k(d&k+C9sygSV
zkH1|w^WZ>oaFQ%zIAUwO<$F<JhN0rbPr=B(o7vT*gmd$GkSqxA2lUT{8Qa*8`l16w
z&tHz2*1qr8Skkvw6G@nYZq%ckl<R{;g(IEUn%c9Pn%X?vlbn!5W(rlccbJ;=F^-Tj
zPfn>JFj7APfM)V<QOID}yTx#!%Z-Zx&9d|7AF&V5`{ctc41bD0mMq7>1v#D6LI!}t
zcHy6<WPlnD#1Im;5`j+vwipD$&-s;H-n<q32Kz?$iXd6ahGr~;0|kdhn2T05AP9~V
zgeKrwu$7N-?Tuk5Me+d|COQeKQULb}gf_~5#D@3UK0JZcn)l)Jhllsl@pHWL%R)1U
zbP8A2)^0fflGh>dN=A+!s5>ZamnEL^qp}ak>m-RAm*szEl=(He518*Lc65rA6U}Z2
zsm*oRub&p?vL>eU?VsUXBm||_2f#N$67!Aisiw|+h}aAMeB#h~9c?m>IC2Q;FaQ4s
zKtr1o7DZ99KvPbl+0UgPI1>jeKMSKIlfEP41}-T&O-;=)*Wku94nZkz7Y7GmXIE5I
zOdW1*YiemJ$Is2ln2(|cb2S(I*(qp9KF0digBDW^S_>nQsEvOAJ!XQzs(}Woy=wTD
z8UoqKj;X7A^F-<Jux#+;lO}jcA2z`wL-W^VrSrj_I5Omb@*r2Jp?*(akTfNclXr54
z9RiDN6`&*c%8-gAkQ)IT17Ry{`(Th3kLI@RmG|x?Iw<{aXisuhfSSKc4`YoOe2NZs
z9Xp?tM>Mt)t*qZi23}rPUf%de2^)04zCx$K3&zNl+AxtLi2D11<4Oyvt)l}xY$WVo
zNlCvJ?7sD*`top+Lts6XGLF7|7@0c}IL}B_z)B@PIb7q_5s-||GVZ$4|6YY=PHkXd
z8TtA1XK!zBX*bginOX`gVq)TFU@wzL{jJW)(R;;XQeq8p=F*^z?Og}Xx5whY`+vw(
zX%0e+ey^W{{Nxs%>6Q;5ol{iOtT(KYbdzYaslm~iZD?sp|3AWMHH`rhtuJz4#7(->
z76iil0TNnnQ%+b|R(447d6^Tn5+_p|>_(DLIKpcbObQHt`JEjcX!dKHi#;Bfs=DGw
z`t`*WH7t#d{enCXU|SJ*$6p6>MtG8T_C(t3?d+an1%ljwV#|cMy14K<T=G`~9e`od
zhy;RzOD7lw5$Bv_SNO`?3ZWz?-(DAm*RTajo8O=Irj;(pHFJrxn2HWCh_S3+bb~O2
zsj0Z!hX~=GzmL%#VPf{egW$sv5h3^YUQ|#4fl!oAAm!N#syxRS78r?X>sL&_egO`F
z)$^8&U}<UT0)@0#ncUnj7-(pO#KZ})v9PGLXnDNHjJs?}T3sAFiZUZ7x5vK1@_tJl
zwg%$j;v2OVPNWwEncKrDe5Qkmib6MuRAZ{Nw6e0Yw@)*jp|~o2fOd<^=QkQ>TA$5P
zw9{gvJuTC2kcBqDKwjq`ulGhi7<v%)=WwN&zWP)?TPmwGhqtM<wY84h!!j+oVPlVR
z9s}2HqxUVZ)@Q&ZlAfME%U6?<lI+}9a&nmE!<=%oEVeA*dSKj{Y47Ohxe+C)suCSZ
zDcFPaF89#Q-QC30gqLUUr7xR)wedouJrZ#&kVbj6W%n&8XgFO^vPqhjWp{TMuq1FE
zYH2~jo=W-AkXnj884X)|Qg_~))-8CkNrRriN?(cPEGJjm{)l^b=6rj^)!zOSpEMD_
z{aT~4i8-I^)h*v*ht*8^@84ewca?J`Mg1^>KK%C-@0KRl@8t4Szv?r(pdu?h-OpjE
z&rV`uVzRQ1zq`>G7z*AwZUaK|EL#(;^e@AyJ~1dfXXocJF)^{xb|&H`0N2tm@R?l_
z>NI%=ia6K%AnHW&AD>>|5e+1Gy5DYWY!DI>j)p&bO7fJ5h@K#Xm1Sv{)DrFlk>7I^
z7pGT`e$*Q&67V3V)ugH9=8l~c1CD^Sl{??(a8I4T%+Js7=g*%23@*_iAkDGATxiP8
z%?%2|z=|Y?rVpl9pK(&6?=1a<>#C^@Vq}V>2!KTA?;#;fZ&;>e{f+{FflB=11&Cun
zLz9aL3p+SCc<*}o8o2#A)AZ8f<EO#d;)as^$3!JQv@UcYSHyOqF=Q;J%BZ(Yt0o9W
zNp@RSRt5wmoyY1$-1!in4rb}co$iP<fwwvC=${PDuf5vE#=HGigS_=<d3bo(*dmp2
z;x;!IL8@IExBJ;#ofVU5Pgv5+msuHJcN~H!`4S4a_>q+j4GjCK&1g(aOtE29^8Lnu
z-duVijC6H%wZ-+gn6V=B8c=A+Cv)%4+jhJR9UAMi`1KW?ii(OLgbvEaCM4uzPGyiU
z?dYf~;^Pmzn;)`HK;&8OFF)E~e97KFN(TD{0hqhV0J;Dsd-gNQyeR=|IIOc%n5?_W
z2hnVKDSx%BIP|9~M-n741Ox=&BVek3CLfcv<{msyaabN4i76+=FkmXdH#UqVC40ei
z_;h%;>|qxe^;~<ndoB+S=P!Q`&uaPH-5&=wye?H_@1~02ZqT!ahKcXpz=Q_mo_*Z-
zI5>9B&N)VlgMFq9_JBlZbOmkqAc-`o_MQFOpIzlKW5?~qrW&VR6)W<6kg&|nDBJ8}
z&w)Ftf3z13eGb;jJZu^OhDR~u(a|Lu6+Z-Oi}y<5snMygmsh^M(Qds)+Y))WVdqGG
zI6uY=O-La2HZwJimXbu_#K6MFeo)%l%57{W^2JpOT0}WKVG`rG*iqd9_=0L08ZE9P
z`n<SFIjZ?`?>u1U|BKn12e2bkn^(PscJqQubYD*xWs7ki0og}}GIt=C)IQfDYHCjA
z<~x9pz3&f={7<ae+THsv)qx5bJ{x0_MJJ0bE;WI@e|mxf1C>|NZ*Iu;M~X)h2nhF~
z-Q6Mqysx=ThjZI|6rq%<0%qlDZHTEqV$GO;D`Dp;Qi8ELl993Tv7BcHt3I4ek<`$7
z^Rdq$hY_SW$1o^V<82noa@sDvZ_*mrd_hPED!x_E*I-KC^WW0>`ZAbpgJQb`fqkzt
z_<V&Hp|$6~Fsb|d`}y5gAoQW3DXYiF$15wsU3A7qGit7EB8pcMQc~<mI~wJ>yX%C-
z#mwhKf)#*duI+M;4hn^S^mDm7`7h6NFp<O9NEOO*YDpu&l}s@D=5TFo98i6vr%Tjx
zlOG=)Q9UOY6+|zF62;jm3#EO3eP@>L9X}ije-_*GYit#i=>avV`JML&J$C_xv<xL*
zb#sIFRa#(P_ra{=j-ub>$=9!U69tN{u6(trv_wL_zaGgbP6G;-*`k;N5JF4}8AKz<
zjIHp-$L@0f(w51f?Cp*4N4=d5HqA)|B@d1O-^+UemZWsNtgKI<H?aRQm+sR9&NM0o
z1qC%K^c_Kr^6o?q1!bCwN;Dw0XtrC;e)9Zo=cV)6hP_9wN_8BIhIF3F9ujaJfB;j#
z8w$=jks+?D>b!v+6nUb|lYjQ>Yo9>~fUflWY=-|@8nc57wv(r<@F@Ak4mtWrfyl!e
zH55kEcaEuFkZtYmichtBZ8{7OrF?1aK+?%5ekCm01CB5@6%tZIZsCR)HRey9b}^1z
z!Gm~Tow{`zZ0hQ3E48y)f(2%uAFvQ>X`LmWeE$xTe17tX`d-i(u<BQf-IG`rYRJAK
zcmj?hcU>wSAuX=jzD>Kn2=^6#%)go-?fwJe+h2=`>qq_zL8vls!+?`Rk7n!0B$db0
zCG^oA&l{b3uk8rRT9()E--GP8tSk;FG$Tx^-EUc-MTs%<WKgSy(H3~WOblAxc8~O0
z%r&IU8T(o$(MA=e$@maQu`1R-s!~z}h!PxGBuPczJhJNMbjS$P1ve<CpoLO2{M%=H
z0Uj*wT4CN(P|LF~86@|oi_y?`CCf9dU^jD}q1Q@Fs-<QE&Se+CwY6zta*2mG`Qj(f
zQ)=HJm$9U1=al$(W`ZA&0=~L=-OtvTaqF{lPN+|sz2c##=YAc=@d(6_rny4dn3=Dy
zph&SH`tED_RM?(X2LeDA9DY+W55}J$N#=|9wfj%;-d6>|Tpf;o;z|7+5^kHTpPo*c
zT}+b{@ND6+npR@?x?xcbl~&5hvXB0+h)ud0<lyM38qw0Hym#lk-~lc==}g@gmp8Z;
zAgxLXo)nut(3b2LII<m;CGPODX#6aqMy|XxN?a`G03-_>R7rh(&B~mOXKQUe^sj3D
z%i$L->xf+I;>7wVW<u@lSCeKzQJ8CMB!+J_X_L5d;d!Nm)0`nxAEGJ?3(bFjdtx<R
zinz{+WF(zU1^h+E>e0Vf4%P?=2xOqA_ujXC4()&(rYP89y$81$mxlKLqv<Q4qI}-A
zK?FoX3F#0C>F!2y>F%zjkwzL3kS^(#?(S5O?rx-{yZak{@Au#1Il7+hnP=vn>%Jm?
zZg$r5>Y)Bd0Nrds0oAxR<UUtFiG07j?KXyEZap5XfY?}6v6baW2#AQWOb;N|V#14s
zodpCn%#nYMo#nTgXR9K<<HwOkmPQNe9DY&hTCoDkou%T!!a_Dn7U-c)Q~eGdx$MsW
zuz*JZem|?*a*B0Y+@fXNS<)94=7H=*5`VeD0&^*Z)6R^Sw>c`$+RzYU#Ph&Ec9As!
zee-MevxTyWVOEP1sN8bLrKF_XJeO}T2zs5`ooVx1b!E2Jc6aMc2XJz1t#~DNVG!Wq
zqf10}k(!)T{6MVAkKI8S12lyNVObbfPn0y6R{M3z8|lLY4BUs+&yD9OKesY>@f9Zf
zy&rF&)`>h%AlqPYV4xYOW4nSe)qzsR>Z%Mlp1PZjkp<4%;S;(zJBLR^P!=Yn2O}Zj
z?0gZ{6nHqt6wi7)CIT8#H}e-(Weg1GC0S@3xr(K5xrVB6QjN9;JQxBI#Jp?&cCiTv
z7G@_Cqtl0#2}ALn-6hA)zE6H0uWf(0B&c(zRWHe*JAukYl5l$eIgML$VGgfQ6lpX1
z6Cwj|LSe1Z?l&ImFyyNUQyXyXZ2EdMcBAWL9c%;|KQl{8&QCXK>m3|u`e}iy4rTGz
z!0c^7sU(j(4oFf>X!@JnT+<xNy9hjy&I{mtceKzD9Wz$oL4x>m3ogm^+|wX7dbYGJ
zq?gL0=PSaCv?EtTeuS7GKIhwG%NE;}5HFf4vJCfK3t+)omDtSF{7FQlkbbt+L)}rC
z)uJJi@3NpyMB#F8rcCj2C?&(7TAHU>(g`?*%s0EfG0oTC_!UIFn-)Efd|Ot0KrD=c
zhDz!mM--QXj_e}9!hhzvKRdQenGwNeHBAVX0WQCDTWMP9su?mevbiK8FQFm9aPf^T
z9AK^mB#IMmMY(@W)x<w)3vxpkXeUrbOf6}%ezv3v6fx%rvx;}lxbE+BBad_$2Lglx
zX2NWHhLmkP%tEPWIGr2w9TB^{Fi_^yTFo47^y`;_z5S!9&0XD5!H8r(Q4(R!xo&H6
zA`l<GU~~Q!YrFW_(Y3z1n(UoCP4u_||J=J3?=x9h8~Uje;GLH$;B`Ayto{RWUaa$s
ze@i#IG$k=nlHZ8MK{{mfakGl0x?n}hf0MIJKmV5<O)Ag7dC~ecJw_4QKijK*hcD+|
z?K@T;8O5C6ZyQH)^Kg4Lnj(uSB^veenR(!ulyvuGP%gw-5BCuJc%E*+&=zB|Z5&U?
zBlh7kFvc!Kfjuf`_w~0IQX+yp;XKw0mqZszg~b>I1jbfYuB^OwRm~nUGAQp<RW!(}
z-YQms4e4;DK2q_1agWpb{d($QQlWBwOmG`GXy6xQrfh(ikukNK@81itKOk2n`2)9y
z(=Vg-J1OUQP3k+MU<2J*&U4K2kMR`c;5!)Vl?2vY0mJV54VC*=dCFw@O1Hr0c$`Rj
zhvdsSI!imGb4MLbPFj}V^^lM(gN!SB7>IKB9OjbU1K8Qq_4GjN5SV4p4@Xau^Ykd^
z%PA&os14JjC6LA8jj{5=1O`0TKmv^d->knLJ*|D^<*AuLfMt?T@CN3igap3Oo=8%7
za71BQ8TaR7U*H^6dIKT^LnA_#9j`v0o6E_{X4M60nYv3xTmPbRf2=ke`uWi~+vrDP
zx^D<Hmrusn|NLBL^k-Zw`N?`D??C@RE(Q|+zWK|+o`s;7<}OEREiGNN33z|78jp_)
zKSX~gKC!;IB$<_;%Ko**UA<ND34vb;Lc;B>(-s4Ry2yXCF`=9<p3ddh#t$R%8Z|3F
zHy`*(-rmR_pQSX|F7ezJn`{cIZfgpYo!PURadC6IfBC{10x97k`DS5Zn+5$lTWOr(
zeruuhu9}5)b59`BXqyyJQzggvu@r=qS2BM%7t<S?8yKvK`s~`*GTWe`p@D?L66N1{
z|0pf-H9BiJP4|C<AMVFeH78o+lT@~}@On5pvd#g4bdjmGa&P|!WMq7YOc>{7^ZUQH
zaZ-P39bl7Ls&-iudcbL<sHDUsZmn**uBb>#UcTHzx!U9B{##{{j<SIFaedp%pOqAp
zw50L`or$MQ_4U=%#9L**;C!8sU>4~KUJp_$(aA`4s%>lQ*+q_y9ve_A0SaRV8k*V1
zrTCB#me=ioH?q)fw*`_|@$q-t=TCue=|G-rWN8W2-F@|yrPXHX4N&Ak2NQu7)AeCK
z&db9`fye-y;9zb|L>oL0&&WYi46t|Zy~g9T1?IY#Y9$)Nr~2+%P4&NdB~+Z)Qo`8%
ztZl3v9qnA5hoJE0w|SD6^oDkJc2%54M#hul)hP}*Bs|}%bHo@l8b()EGG1;&Vkwzl
zU%f}cRVykg+HS6sd;Fj!D_f8AeRr4U#@ak9YAGi}K%Lo^G*0Shv2i`m_Z*SM2oCN=
z=kMRCglUp~6c=h#Z<`wW^|y1*_X!Js{{9rs2(30d+vtm(DT(7H#d^KjN(#lnsq!Eq
zB9fMFeh^h|54Mzy8`Jng0&jgy6CR`!zxS~%BoU7lT0q=8Jbfs)oE8xg0o>NdNM0;e
z7E)7}cpa{;LO%AQ4J!DmShKYA^YevD-=e3@x^5y#4N}?Kxx}8EatPtqcRS|T#jG2z
zuciAu2DG&BHL2yS8c5;6G#Tr_@^Db9F$mxF25d_^AaGsx2^jq-S1b^gmvN7w{P=MI
z>j+*t7X!of#fuj|kah{MXd-3Awfr5tXgHKUU+u^&S*UqYo+6*_*c;nH%TGS5c#9Yt
zYnUg7h9U>Uvvm~Ed{R|$k{2iQBLDD7U@Mw9p=c`GvVu`rxwh|pX2;qe=~=oufd0RS
z69;(qk3g9*BUIi`(NT}Me-75p*_5&-2-8y2-FK<+{f_8`CZbejtbwtFjiMsy#p^XE
zk2D46$01-4{OQxD7jXXOulPTF_)3hNJ*RsFszSLmK8ihM3DZ`7suxQ>)Sko{-i%X)
zs9rLT3TEn;rChI7`04uCE}A7}FRwB-c6YVZX*u`iW-xFVv^KW3@(DQ<u;o~If_F;p
z%;L)!kca|`iquNxP3V$dOpVW8SwEjIy!cqEc2ee_mrYA6{?6Z>JIxF5L0?BJn8wSe
z^27*2T3Qx>gOW|d(JH;ZXJ%MUwd<_glX1|SgH~r+kEtTmE5YMykEc6c-M8A>&Az^W
z%iHeVZbE7qTh4F8_te|2_a6|6=UbfSk`ETz!cwuTJ#Xf17TT=sth~0P^XKQafIVx<
zb1CW@;+&i&M&lF@G-#b~1PQUR<zBGquTE#S>JApom_%1;^6>IN(6R+e;%eU|(E{<L
zX|97jehI<1y1GL#i61+fCQ50Pb}`Y8AScYXLkR4v7@2#(Vd|)9XIr-9_b0Wq3mImw
za&-8xZ$*WD_=6_3F`g&a|9ZqeAjc?#hJ=3c6xegrc^`#LR)kP0K5H_#loHZbD50#X
zS(p%<4)BzuBxa9G!ltz3<R&p(wIs#m;y%{{?OT!S{R#Pe*$g>O7a&P@aypMD3t}B-
zm4qhHfLh~bXt8xwb?1TM8w;|BD5P9@+9d)@z~|8uVgV8DQYjkzL9JX=yx#V>OIwH)
zo9XxEJx*qz^KhFz{5FXXXmhSplKdezkI9HT!E(H*A~pi8RRZ>(`@CaP1=(_?@B3Z?
zyitdt9J-}{sFkA2s_@u5_2HzjAI)+^YW@$;)*-#D+ugObhL66nF<jqbk|yx<Q7eL{
zxe%Sx)%2$gnz>VytF(TxNn-+Z-p08uO!%3BA+{*NSl~>+N*iB(oWW)>5YIRpM**;I
z59*jDGih@Tb6wqo1by2q!82y#9wwR8Zj+MSwZm1?tHf?Y9i1i;9X^4Pp`kPx{+K!o
zu7hX^5(;J>fk!9xt?gDsliQKCTtqWvWlVO&NzT2uuA|o()z#I9a~7f%m6g#|%2y?|
zxl{f9Ar~N(Q!~kP*GWYM>mp$uE7H^h5fNV|ml#J?=>5Loyb^msz)wqsV&O=4%aj67
z{G*&7Mqi#PJi1@5ZqFKjk1jrDP%U!{jY`{8)K(ve9m#iLU|;}8>$-{xjY@}2(Wl^G
zbxexnTR3ul03jxtn5+3yUd$~mExGA&ZAaHaXD&H?&bFw386F%gNs|J%^rwGA8Dsk4
zy}y5gouqs4OaD1^n2@oz-ElbZmU|@jldO%^cz73*_hSt$kNdxyvwYU^&8Y}MF981q
zyv+nt93=#unKs#U^=km;{e7LyLO0sC`no!*Qe_rJLLwqe%<>wxftAfF*9to;8)Mz=
zWdIo2?@<dY13BI-b*`v|1yV{|qvm6JyuZJfm7^6D8dRK8jP|Y(T3~8ohJXMc{mK>!
zbzS`(AaELW-m>#3E2BeLEF62gzqiLasK+HvYhoGGprb>cfj(H)tf#5E!#OqrnsKA@
zf~F=WRO?7C3Vs}nv`z#~p?TusdHMOpC>*^<L8lHkW>Ql9C&s5U4Slz{+Mfi_wJ9?$
zWa3N5Mb(w<RKOvqthA8d`~Ld+WF5FUDk&@N5QCrkr#~gRj>(F$(`Tpm+G%Tj#4gT`
zWWqa(bJZr>0&QPdmx9QJ65`^<R(rphwZ>Ot77Ppw6xxY#<Tp1H@a}XCP04Dr&nlmt
zT+l1FI6`zk$-jx*<1Dk{m)M=-ZjLgl_LyN{xmGXJ;{M{`dxX34_5K9{jH9o+V<)ek
zksIvo_@*?$(L&B5IchTVOA3lVv6S$mqnO3WOs7+CzT(hnG(blVX&|ORBei=+gjH5h
zFv(Reo3}|pW|;{3Z$U=hHTgmLqT^yxvH7_Pmf{>%3I=bTTiS2_5xBrN&L(Q)$#0+J
ztF`|98x;}~0!oV8$;ru7Uf1~W{CM9%WP~s@tWWRs$Khe!6M^$NrPVs9qRHnXO5y;Z
zcw_mE`*do{+%xoX9|Xxk^kn3vtt>6`5dVBT!Q75?zf9%s$N16LyZh6m1eMLW8wIev
zlrU~WxJymSXBXxK?~gmr*)pRYS#rR7L-oLaF-J!zlp;=Kx773wo!NP_Ulr>(V`F3(
z|1i8R-%Cpi|AA+3y7Z&=#KJ%^xYVw6f_IB{zkU1G(9j^8!to9pdtBork=dAPZmKvK
ze_#+?d%?k)HEv@E3yqlfl%p_kDOGuOf%De@(F88Oq25+5Um;iWrPt}q#*~{BC&?vS
zpq|(zoL`tL)u{aX<1i<OJWD}REINLv$A1l&faeGY1rE#*lV>l^I_^S@1U&v-cgse4
zwja=P1nwuYTXBlZg=SHfWVOj%Y?)idT3rF+$fQnHc8gJEVzEXBD-%_sKqz*(iFn$X
z<8!@atYJTgyN8Ak%zEr%VOnjMng+vAs^mV(CX?%jE38`jcIQLRv>F{YFZO2WMSp_g
zBPOlFX2DfOwMs)0KQuVbRSvKutHl&=eSJGri`8_SDdnHT-}1Wiz|M5g{37n%>DWm{
z1rrZL^PvtfrX->Q{jGgkm$?I5Hr?DbUY9C-HZmMGFY{PDJ@Enpb6t%lCrzbsR8CG;
z7E_3%#VaNzpe%U{0}&Ngu{O6>L(vTbM#;bdZSnd<N*xz)wo~@Dw(8AKjK;ra|NPlk
zVd7(TIo0(2`>Q6B)3XiG!QcQi=kkwqY+>$7cb5kPpqcT0PEk>jfMYQsE$&_Bw$g=e
z{d7EbQ+VIEbmDi;C%@sxe?V3>+r1y+XoH=~htoJCZ>99TE;d1_2I41@0eVKk9S}F5
zIa31s<UtB>&Wn$F5GQ;4r0t`Oj0}lZ4slWukm+H!SOW-kKlVS1OMeWM`-b+bZE7CS
z$~`Wv$4el?yZhUdZV~lhp4qL7vkZeQJK>!<3vrEK$cgCWLe8kgFs3DVqmx{Pa$nRI
z#8$-IZ~Y@8BV8S@G^))|!zU{rnL*m<4!W`il^yy7>-fJBZJ}&vV`F_`0Dy70UG59?
zHi0Ay1V`w$x=;O?dWNxxGv~z-w#Vo&G~L|X**Mrn|E7#Ho0Cu#gX|KKY)^3H5wKt5
zDjZ?^$z`|P5)yK{xX63%sb6P}2O*w+iN^GMdw>7!F+9<l3jzwQ38{S}AvmSz<62u-
zWC?bLh9nVT0YeiOe#>}9eeW%~!z9*|Vqj^~ZU_g7N5WyGc|fC$9m`;%pzR%L_uLtu
z?3HvE7){g^@$v#4vM{6CPBIC!ku=`OeVVGJ9d4J6W5aI3zqn#<#BNDWC-n5Clya$(
z?zZmY?h+D+{OZnqy~HdO+)3vOg6+X3MSAV_Uia5XCSR}QWZ*EYSw405f;zp|laY>U
zQsc9hB~9N1EG(?!zw4UX`mrN9N|uB7V>bY7H<?l5rl80L)?q;OtZJ66M#;_|H!sRE
zy5pT`7V&`qKZQYuOVDQi{N`+H!t0axK|m<ZtpH;qLaP(Ab4g%#_P}cAoun<O!~1OI
zB7fS?YLa+eXZ-%!VliRNx%8CC5U{a4+&3u0>%IT}xl@3P+(|Pej-JDgU8JEB9vmE;
z#^J@2{aGSOQYX5cP_lEYCxR%~n?f@`%+sLZ*>>L=-9%jh8cR2RdRlecWE*J+tXd=@
ziGxE^ggY0)JU=<@^kIISbsaUCXP?tiYIbz&d-=h5C#6(-t_v_uO)`4p%>TTc();*3
zx-eC$9-;IVlR;wU>JxBJW7Miil#y-1ygW)^ER-0xR8vzM#lrCL2Z@uC>}V(`CKJkE
zHwV;5iN}+7%Cggun_q7pEG~R&Z*MOy-iv2!o2_>}0<l|wtB&zHz$7Sx*CW0QQ%W3m
zTwIcoQjwQ}LW~Z(`mp!T_t27O8vN7%7s>1=<a6`oG0nMQ3eirZ5xP>*a!&?!>63-Z
zV8xMvihjD9V}))Yg-D|jatReN_f4pvDiypT;_1TnxIWGT@Jn=nouMJR&uvXNMGxK|
zk4uo@k|~(0S#1W`E4#b9z-TAxR;IZoZ5=qy7xwf#UI2s~6#we$8E`OpNJt9gBFvpZ
zivNfdU3n-e4^KD0E#ucjmLGNBaab%)F#-!*R_L%29XXY2iHwNeb4Qbr5Pgi9nT-Ra
z1c<Dwfc`J2?M$%_SvYK3e69|4OXMCp;NFZYyyK_D{X>8au(;cQ3#IH+Q&&s%(F3`U
zK3_m#nk18)k>Rs_oCPdjr}o)?NOZ#Ux;`41n$}uQ;k$ewKt<x=;u@W}>F|57>`5kk
z3$!^QrP}R9sx92_h=@dtdsX=HKR0+kSpHtBkD?M_V;clXoizFxOleqU3^Kt)w!n@I
za2?Kv#wRuM)v=M0X{`trZh4dmS>pQgmE6@;elXp3nz8lZg`4Od-`p?Te(ohCwW(b2
z;*)5zM$X+im@JWC3Gku#L^H+|Ar_z1AX0MprSluqZy7TaRZ~K2M50#c!7T5yn<ufZ
zqnBD)vqvy@SX!%BwvqSC0ML{|zujqn+$~ODs_<aXZvNEYo8v`a;Kf)OkefTs89<{$
ztWL9I|J7=`47g<9-|m%L-20ELyDsuZA3~n93Da~>pPaP(6ei@)R(%A$ZgPi!-o@h%
z0Pas~XKz5`ggHbNkyG&I1-$oDv;NDV=g!+Hqt7F~ZU;2O$8?daUBB(I1!ROgJ?!ZF
zc<;@`z1t+sLI*jrYm9nv<=@(@Z{|Vm`SiGzfz7D-j??%O@#q2ge48!ZB5uF2Tv;Z1
z<|QkR+>v-cj9ZOZ%#u!!N-YH^yYy*H>nplb5C|E?k+U2G_lc73MClS}mZ~62N9RcY
zEGF$*)zF|CcXhTm;YS`vo74IsWpOSpCh?q>142(VEotBO|9DD1rduE5gu6W%O0l^A
zEBN%tshO3-L(NM~_ktA9_3Jb?>Z4#Gj!0`<{6Fkk($_bq^Hm;lKR5eIN>a3wr@Sw1
zF<XuQhDrlxiu1PmLSwOH2<UqpS$sV;?f$d2e4>I0Q71vT=YRRy-4(7jEnAZOr{n%f
z5RxzV-@n_7<BOBaWf|-GfC}Pu!EA$Tiog~;ARy3|BV280%10{$C?KdpUS?P#GN-~!
zjm58vm*s;%j>|+(|9n&JW;#x2%-Y)1<CS3l5Ey4Yyga|nr+@bnwco0tBji-r?z=6t
zmc?ctO_NYZvt0MD(}^9=!<4-uii!5jTsXWARgd~jZ%0L9tBM5(=iD&zfO*JjtG5a%
zc0D&wWAY`>H@L)Y!|tPTSE_BIm32m4N}snDgJqXOnHj1n@0Q1bUINYY?e-hI9~j~+
zzPz^o29rp$vOsH_?N-wGCor1?E1Z|ii`|%QW~y1a_<}qd>c9_dGpaOk&XVl2+x{Gu
z;cm*h?cNl&-HVXe%`?-O*s?!e!;g1@g4^3~^Ya$p!)hg9$PqsEjrHvet=uP_KY%lC
zslHD?SgB!_67zYXWRqIi7X9PPc`H^wLY$E=M5vb=8=Dcq?d3~04vv2tizb87iu(cn
zB?^_I4>KSAG*ZN6T5-dx-KWe(dSltGB&ThDzIhRT#WA-#?`}A6ZALT&6@RpJ$nUNs
zwAm`i`v+%$9d%BQr8OBso3z^bok&H^HV>wG`8{NOf8HO+_`_fG!np%)Q(TxpO9VFI
z7f#TiMCVvb%UND7SEri2y&sGH{mI0Zs29iIazEzL3#I%+F|YM;?)#nh?)$efMMXeI
zsHm&6H8*bnY!MI{qqpuu82-x}gs|Ka^8(v4$@!~veh)Ts<yNfJ$I$VZu;+`Ac@kyY
zyRx>{%EoGHrjWn3g)Mnu{Hr<+IC(i`C&E5>K2@jGie7vtSi>9Ly+dV!)6&KkFQ=1v
zqpW;|H!Ag;>^B)%{?zm|z|Qs6wew4*DEZ-%@tk8bXY6JHOYL|wo*rCty({l3FkXo{
z*Se3Ga$Mkz(n)1$l8Ow3gogSo)>bzZd}ro2*9jfiWPw4Uw<)FPsJqOg7OH3C<l!Dj
zKv8S4$&A(K12Hq&+ClTltAt8$nfd_MV4yMxL`QQx-GFo}Bz9bjDJzp@3n~@<r%#1R
z!;N=-<@a?X$K;l&qhz+)gA;7Zu9X!vwzifAf$zv(j}GdhY8^&*&djjoLgPV4oCyYn
z8&JT=g^<OtDI2g1q3Vc`zG)7Z9O}J9F*@6Px*yTTuiX>z0J~AdkD1b*0B-S_OzaEG
zY?FJVcaZs=AOlPf!1w4U9Sc@`r2q(PI<Q*7)Wst(C}i|Q;pC^unJ}^+SRj2D7gJ&B
zK<<@|zjSX0WKFtc_rcF#j?B|fdiKI5v@<K}*HzD|o3kFky3F}#*5J2-1QQrr$8jUo
zrl!Ubw(~1`VV^J{bMZ-nf_W5?HTf}YMU6G@i|(-%cpWCI(U#;lW=^Wd%cOudDeQn5
zEJx1I+=&W!e1S>bfm#IG9&JJ$i8M`AqriB=UyvTWl@Q~o6A-4txRPcCZ%|^S;bMaL
z5139Fb#<thS9n?)SrBq8UYJ_gQH*>>JHv2C73v!|Yw&nnibT!q5-aDRwVJ<ofE_JP
zLe3mLD*F7MVMs8r_`a+8rL~Q%rBlnx!LS`&OcwPtW<{-N%ks~PMi{4nZ1tK#<8c=}
zIzaJeB9%1y@cj1OY`!q4zL3#Lm6f@<)xX<eUq-XPj~xWbaU55ZG|r%6{&;>e97_zr
zG;Fd+mE!W$vktg}%GZPfBjLZ-V8#QaTLT(4j!Eb5e<C8v^7h~0!-&94_;h?m`SFY&
zGue-B;JwoU>Ui9ws7%o+j9_VUX6C$?KuDd4!o~;u;6Wm>m93>YdlC)>3@#~dTk)SA
zW9bB<K>o*317qW@{WV*wt@jw3&*LOcVr1{3Z0sfLEavD)#@eOO2`%9s(h5<F<Zwa_
za}$4l2oV@KFt0Bz*z?xEh#-NnkU@5radP>7u%AXqPp7Sw%+qy%f*bu8z9XxXkFgdq
z?LNrm<KfYhoLqE&zhDIB+cOE46hm`<jyvoM+1$K<cCh_VBK|*`olhaeG`+8aCRhPA
zRfMVvtO9XTxvFuwlvTT#_y9#=;@&n?)K)gMu&}W)mXMFStc!QCPmy`e3p@%^ujSEp
zcJ~K|<xIiH3^Ou^sVWK)Fcnx{FR*BEW(|Lym>r)xRvqX><FVtXv1~1Dt*xvKW!}9S
zg-N73|C<>Z5D=FeS6iB93`7i22??k=KmaJ>q%tMoU;<;9*Y6=-0780Jki)=FQbi%i
zqJE<uer938h=0i8a%|)yj${N5yq|vmY;6TJcE2{f2?Q|pC{g)Ew>wuqi++&yQ!ufx
z82bMN^>?B}gry8z=fqk}yVBnXb3eW+B__S)ZpquV|Dn%AraV&C6Sqe7m|($YRK9C}
z&W)BY!HwUaP^cnA-?OB16%u1X-K-v9;)*<z-dzEbyyg~ojSin_ckGh>Xs=%7n*H{D
z%p^+FQLS^Y{eAjMth0ZIH=O1QU(@+cIxqQNuedZm4_fw!0+%%1m0T*AR3$dkSF>u)
zphE&DG`*hTA$G2hkU#R`UA_?;!bY2%b^vo6B8)*<uZhyn;$na#Wal;(s_9U(#zOJI
z92kUg&#aJQgA+$FTZ7X=gmo9nW$~w0Xq9@Xtq-v+lIbC%!R*8JYBuy@_|!W_D!YR2
zp3A&{u(`jcr>y)en}cc1MEIJF1owKhc50J`-lKi(RA{0=bihe+qNgtJoKP2&Hm27J
zS9>O>{*8+L=m()Usif$csL%5c2G@Zp7z2#%s~~^9?!Ohaj^@@S&*S8)rvN8B^b!sM
z76oWKV91EUPy+;^lP}LIk|pq10zH_nYmMW11h?VY-%iRfi6B^GV7?Rtd|lti(FJ(K
z$ewDT4t(_z%K(PSkQ@U7vKIgV3lEkDCbH4!=hG1aN)R)S`djd?4k}?mSisdxo`lAn
z@$m38H8tVFyg2o)`5zV_gDa3B-$@QSAUVSIH8tRRGmvz`3Jy||4zvZ@4TEpYKeVbM
zdcL-RJ22bf#4l=qZn*DD&Ze+Cf|+o_i%JbTjNt7<8*8@NaVoH;iU``MJw;GJJ9wX`
zHdE^7Tir)_yJn$0iS;+afVkd4C8SO=3L@*ym*(eRU*IJY0n-00lE)iB;>Ue(o*Vph
zw~0#?{s?(~`h>_x;9$ql_VJiHMV2D?W=vL27@3;wBROl#Fo_>QhsWtnr#&|eC5*%k
z`?V2x2AK9Z2&_L1q`}j1dBB4qjbslIupQPw5*Z^&?(`ANMJ65GitHc(vgcwId0rVj
zr(<yx;*0(2CHXRVSys01pIm`Li^(o*UU|bD<$2wP*?ujt7pNHdOutTKX=?iGy9YHm
z9OXyBAp}+@2EI#>iGu*}+k&PE(8r#5<y6+!`}|9S0;Tli8aR^GSWHlw3B7#za&~_H
zGUDp=^mZcS@%-`bh?j>4Ez^^S=u)R<3art-!gvaBh&IoPJ|+q$-EYrB$Rxp~Q476J
z1pV$t$E~XB>U!%r2hh>w_qcTP@UW7>!^Xbc5`3B)8HxN2$aN9H!G`NIrP^21+IIGh
zaLnpx#C%+Uow9ra97}=E6Fp!Km6wwU-9!pLUi&=V>DTf+PZ@vMf6o&vI$VyQVP;d&
z_$cLB0|e7i!<<H~4+1{`pHaYNUqeU;rmzMu?EoL~!-+aM#)X^=Pc2BY6&FVcAo;Qp
z4UYHKCr{Tsf}nSlqeN}|9%QT*vM{#av&7NG_8};@S*AUY4ECVGe@hew57Ou-PDE*W
z=<{6|2d8};f}%U?_@(0+JrA3eHZPx>0ewl=ydmI&p7C_Q1$<Y5sc_BBVe=8Nx7-7@
zw4uGdy{Kpx;EO0LE8AFGOIGMLd|oB6Yl)7F+uYy39~F6XFk302Ng4MUl)XTwLgI6;
z$bB(8Jst0~0hoy~F&H5;9DT`dcL()_8n1PloOZw|8cTs*kd)L9t<`iO9?<DBxa>br
zQAs96$0)jo_-v)Q{un@_+8azqn>yfZzme6_ng;|l4(r*>L0&-2DN@zbTL#QRh(`YF
z&s?V@lOP@#AZEZ<8X_l`XZ1%M%qZNqB8z|5g8#dyf)sT=Yuq#xc|FUYV9X7=T#O)U
zW@362MwM=x{c$-U1nSqX)!YO<pyMXBN%*EKkO3%r!<!C}Zi-*Y=PP$d?d@4vzW_#R
zV$N|#Ti$ZI7Ru;-yOR%Q0~l(-&wpX|d~WP~?iN61nx5Ng0Qgc6@|ZUQ*FxHH0yi6&
zJcRJXUgu*O5BpH?#aE`LF4Ws^r%u*;GQ2M5%F4>@+8^S>0jKN)OqZ3VX4mR38E$Jx
z9D172ODAHtzp#ZWw}Y%B<dl@&_b0%AJtEglUteD-2^_C1j-tsVmOYO6`+u7~oenVK
z1++)6JYLp2O#`Zr0r<AK=mp*2ua1geP?Qj9rzmL^gQM%|nBCp3!Ra-c=Sjh2fwCVk
zcKo30xGfwzDCKTzW@biWQKs8`86<cwOn(Yox2a!)fKb(S$d=c7IHx50a=VY9O$^4v
ztZ^h#z;6KKt=#|P%n_|VD}mfl{7S&EIxkYx(UE!04qxE;`btjdHzzM?Q*Lg+xe+I4
zeSg1HOkMl+T4<!e?f12Ey;gi;;xhX>mfZUu!AD^~z*z?92}suk)Xk_vz*Rn<w<=fk
zD${9P+u4Dz@T4rStUS%MKRP#k1^(PXh7G=gZ^UPmMIA?!<$ECP-FO~yCu4J19-0as
z=Hl9%pi%411E~|^=^=(i4>WvGxcO#v&k_kaF?j$_doUQAYikaB)ATkLx3g0zfRYQe
z3mM#wflFZWE>@W$6WH3?qM@QLfh^r`NSHvFKu1px|H4m$&g?wMc~rRKl(TP}oEG>f
zcwWvyty^R$$%r(kcqNWnoVHU_30?A7Rq04cg$n~g#x{gn$me28{iyY7`KMT@TsmK)
z-HHHB61ZRul5vGIh{sRCKYdrbqZqg})CqC~V*5*O3)^BK<E#fCP~AHYxe74%rZIQF
zE8PQ#m;Dm%t^-_UQrR#UiqPTIK6g8?dNQpsQ5eoPI5Tr2rHamiWYHMgsWs?O^5*(_
z=k^=+Tk`d~`ueM7vE5_N70>m}&A8Om`(fTACV!zqEZR*2v>;<c!z>!8D`;t^sk8G&
z_9&~yt9F73dRe4e41SrX;~+sDkT&@Ky)XEznRvz=j(JnxjAX#hgMcJ4;>IM3`v<Y6
zMMq$Sf<~dyiL`Ije=?KPcJbOoe%97TMn*<QCsj`@dix%rQA{BhK2&@a>0nRvMIT_o
z|LD(K1JP7PLPC-ke5h${ZDk2W2)jC3IojCh+Lkvn%M<;8^yZCvcT_w*Mlcwi>2m!i
zu>1fnu2qKjt%as0p0R=?%W!Y+_wU~oy1xYm?xv@)o#3&WRe1kIQVk6#8w68J&+9^!
zrlqFl9I$GP!Bi<=niU_i)_!g>_zUGh`EWmkQ3&w{-ZhINa?7`Kra_PKoxHstKhls>
zP$+JI4qlz@Qa{RfKsE;I10TSOd&Xo)J4HQA$%?DZUqH{mwoqGB<N5S(1t|4bmzR3A
zmhS@I5c3uMTWsX4w_SRThE`WqrQ}>ohaC!xc`qV;?mGc<qi4PK_%||u3Ey8Np^eSX
z_O>B!?(E$BOR-}KG`l)n0;|qzi=G@;u&Jzr?V@Q5<cx7$^^o|0Wy2_@7eWhN2bsxz
z_wUD&hX1I;dJ4h82yv3hwzBt~`H7-|8D`F0@y48@ltPsr{@qYxF8_yj_-sg{aA$~1
z0G-g+FUJPW6RF)6#jVkSfzVrLL^Q%gz({VeUoRkYy*^$AU3-o>u+4%MzNEBNSxM;!
zkru}QKraCdn<t+khev(4*ysoXS|#`M_MJq<nI$Y9?{A(LtLzNEFAfLuwP21y<mK~q
ze}snQz62T>z@VRQ_=ygFzGmEpW`9L%<-FS33(zyWUMG3F2D=f+j%)=9&c%SVxv=s$
zZP#7i{+Jw?R0v7q_o%bvLuw%LJQnu!Y!P}7mI5~*7MTq|1R)g{S71Rrs9!nU-p&*<
zF(Efr5V+f~1}Ps=?sCc3fYP?}mYJEE=N~;4)og`fXDDOaHCXBV=%Vx=cGXqT{>)5H
zww!bm_&n_CKi!P@#AtqMy3fz>{ts)JXZ~Fk_*vk&aQi-5h=lC1PI^1+?c=)ASK_JT
ztQbFMf;B4b@4Xs;LqkgoF;@%qIsSzR@qGmQsi&70*iKi$emEXcXoZiCF6_?S{AmnO
z0YKcSGicU<oH5WS1jS~did32g2?@z=+v9QPn;)iuFQkOL#N_4WrCbi?*<(@)3wnq>
z!hTrI=fJ_k!*lcS5DR+WgT!6XI3O2S*8g#Cg;7pDBSGTDR-qc%F=}9CRXl*j3Wd%j
z<3ET?P)REr6T$f&ejYUbhZJN(iJ~_5E1_HQp}t)pmJeNG<}jHhS|;c`RiJK?Hd6%O
zMmssXCV#a+)bspsi?O{XiTP#p1T;5K&lJJ0xR{pT`$7vEnLaBkE8DtWsGDcM1`;1s
zGX^GwlvDJywE80m3E+6j{Qco*zw8Bo+qg5kCQ**4d@@_`5(qjr;Tw(fI|0j<6>$B~
zZ+A~;etG0`eGytNkZt`}H91_5{(B&0?h2b$GHKFoTif_~Whphk#7tKRIg8v=um=U+
zH&42~lM#cRwm`EFP~%m7m_Z~P5!0fR+d#jv*?I2W;z)~54c5#%A>a*2K~qq1U2=$5
zXm<ma4QkGIKp9@vodcKhw{I`S#|l$8Kz_<zwvd?EAAmGbfiCL2;|PC#rDy-AFOc76
zSXRUlc&vdh&SjU(FxnvPW>{y9*z{UmdHHBe7v79|Es{a+=jOY+5r`zg7ov2Ro*~Sh
z#pO}+H_l}9A2NK6B2+(B0E{hXvS#D8-UW+(LS;6V*=~U23OznP236Au*w)zba6zL^
z5X?K!Xv<oZRuesPd|qcU;S@2P`m&81194cmuGq}^S%l?bVZxkhZk^PU%*iKMiBaGJ
z&tYZz9jqX=3=HX-sPp{`VvNvHU0q#S8grR!9j}5KmBWWla8fZbRf;-0JJYO9=84*8
z2nSxe)v&v7mGoY_xw$EH1DX{_dcPtih%3q~Tdy7wXa=$qP;TTl1Md)U6R&)=3dA-K
z1Nx6F)YLmG0CWXJba2@@|5ssxZ_dSq5P~S;?*|o9|7f<my*Agc&A`96iI6<G3X)qd
z)AFuT&C6b3l*cg_t$J5Gy0=l5CudewoyN)wByrfx14aSp7y^@xHqdtu7X1z0lZmE+
z$lZ6qaNJt81Kh>MO581e!SMWkj-64gnMuvcDb%A^eC7$;?-L3-cDv}hucH=qw6#H&
z-jHq8BewI1ToI?m=z4d!F=rgC_$pcq7wDp?gI?)`ykKK<bMYZifjS1knPP&M1ZNQh
z83`C)BwwUa$`C(zb8$petwI5H{XUbxZzUykF@ew9>E>oFSa-FxwU^F7XrY>_D!qPN
zY87Y;y3W^F^y`LV)4QMcef%hs_;-7IdwpGm8E}`L@ix}((MQ6hEI3MVH1$OfOybN=
z%mx215-IcF-U&3tn=JmVUiK)hw=(49<Wbv%@7}Qk!*8H~$OZ8)cXxY<_1W2AStSAu
zpj0*sB_Q<35(xt3rJ~CWIKC9jg7&^*0}wL;V1H_A>iIpHm{6v!0<gfM)ltIyBNVBj
z2!`xcddKhaVKH+<o0z=xlI+&p(n_uIxnc03D4pCL0$NYrdO_RUQ^pW!Nz^eisWT@t
zgT%bley^Xrd?D=7y!=KK_}Rx~<tkAJfRA$b*Z<AoeC^)l!NR^CjWRg~aO`63*vNu~
z(?vk~ujg}qEH`XsVOe4fGfEVJXa4PKIh#$xl)Jy&4+>=~w=7}imx#=b;Jymk*p5*;
zi=PLnjTSXFJE?gy!dO|6%MbUP2^_3}@41}Zy&r8V8~%fJ+&^GwMi6i^^Iy;yzgm7e
z-ow%N5+`n2=q|3gXifIg6kKS^Yb2nbAeALqNOp0!l`o7D>)!duEJ0y^6y@FPe$T3L
zsLSgZb#MBQlR<d5x^-bTuW5ezA7wXrWfjm+J6RUc0awlr$>0CqFG4&CcIYS1n`GxJ
zzOY?ZQpJw#;N09zaEXA_8Ydt;06F(SYk-jrewsKWo_9>(wD%$*bktVpe^@|g?OLcP
zUshC4J`?Nv92Se99BH~8^8*a!MA(j0@axo9I~Ejug#iO4L}dBCAjtrDbasso|M@Wm
z{aQ*eRo$2e9vEfrktD{hx59*r5Jn}$>dJ1OKy}jvohKB(_|j2RTMN2~c0k2Iz+t_;
zyIWLHFx%uzYcYxfLx%4sWNx+hzN%u9xwWAcM5MM=PwYRj?SGrD`$TIt8s%W~3unAX
z&tzh9Y<_m^cOs*BN-+^WJ_ZK<?)Kl$oNI?Fsl<VPp4nw(0<v-laDo2GyCEmuu&S!2
z&y#Ev6KpUoi`EEX4)6DI@v;J(b>j+o@5xc;r^f(v+F^dNLpO16R>E*%fXh?{GgN`^
zbfW3P{z(-&Y9=Zy{HuP&djN*X^8Ll!pQ+fFo40{HOV$wJ8Tih$u#ARPA2oSolQ-BJ
zp088z9b~NTFOt<CS>164ghkV_p8>G2vCf`w<6~onm;0K4I{r~U-AEjV(vS?yLk_md
z8@EW>|AX*+n-wO6P+ziRhCyJ^vBC@n#W?-j5ChR7{MKZnIy$Hww}!GilCG~yO3+zQ
zt$ghg_K+bXW<>&UOs~O&cz@AYTPp@7(-RM-Mm9AW#8k@Ar8@}E5~x<_QxPBvfPD>w
z1Cm~5=O*JD5K_`#VU>P!CBeV%wLSfOzacy?R|-PmFW6Bhg_trqnLdL1C|F7vUtVkA
zxtnCh!YnCjuBfSXf+ZI51M<N1w3@g)Rp=oDuMFzPX!=OwMObc{jELVb@L5?|gTAkj
zkjA)6_4oyyFz>dehuDHuFy6iejb&<#q&*T|a2X4Kl7(S^IZ3FHEhGyEcZ<jYObAf$
z$P8Yb_loB4xTywVrX<VEEbs&T4CODpxTDwBn4CHPb>ql#{7<#unzHP23djzX6P@D;
z;t;bL^1=43M^%g5RiwYMe)Ya?s;)}i#)Vx$`QEtCjV7Ftu@!Bcr1k>JS+=%@=IPD-
zzg4Sf<TE><!r^Xih$P@tB(DOK8754iYwa?x`?h6qfAy+`*+JK~p^q+`qHNvN#d2DM
zIDhALc~wldvnDu)>>aMk`2o&S8AGXyg`}jpu(vk|=n1@jfqL>_1fXE*s*>Vj3OFSM
z393%mpiU6HTT@wCSWp1aUFdn&@H8cjWl>!2X0S5U16p74_De%^ZC#zJ>P)Z6wU=Ko
z*#zq{7B?nIxzn#-VOYlkTrgzVc6KDU<dk}5zAg=fwj{-93{I|>RT#`P;Zv9QED*-x
z&|3t@#nhrMqL2Mn@or5Gny=aiXs2e|#wwF}7jjsr;jn(FtHi1I;;10KLCy3HYSs~!
zlN&&LlQm@9BfA+F@{$zR3+K<~XJYqj!(dT|8M=7aIq$_25$B=LZND&yh$iO89d;aE
z7{8*tkv}~?=kngiW%Z0&G+=2Hcs>@QzbYJg<0L!ErD^wd(DqZp!PWhuR9*tY(CTmo
zC*ymjsBB-lpP@JmIeB^K45IJf0;uc?ROHlseE<v;7FI6PYn7U2_%o8id9>eHjWx0j
zF%WtmJOlDTl3_dj%FAcG2-N20XDd?rsCR%LUzFtewmskFcHVT|<>I0z`$baEI=yz2
zfu-mb?{~m*;dMO#GBW_Wcazi78h15#tNo0HkuAl^7&+SgeX7|JmgS+rQi4eu6i~2j
zejA9egsA4J*lrQCm&}v9gpjH-ktireL{o|(?aXqz{T)bK{xXpB#GcD!<kXbBqO1t}
z9Y@ZONS+T3LPU(hZFO3enWvqw5x<m2e1nCBP4o5ioG?~zclJGdXR!&GSmH<sNypX*
z)p^<EWnOhhspi28!g_uV%HHCHhasB-ON&ca`*XUAiobeIFe$G=UtZ%woLNqBGh}Cf
z{~8q8xgqJ%;iU&9bJfqW-s@LbPe2zcnVVhKV{)jW@txSq4JZ=%z1L(!jFl&Az8_co
zZE6ZU!*M!*o1fL-<>o%T-q<U$y!b-kxYZSXEA!h)$syU_|DmOkmBjmVr_bY^J@n%w
zDU7f8Hn|W;i+LUJ>D6dQN!Bmzrr4x0Q3%9-Esl0H^G>`A^D>1pzcN=>OveTLbsp~m
zFA{tX7nHrmgo8tQ14BN6#$Lix%%(ke44qV{_|uw$CdJNxjOceAuQmeejK}@e!~Pu8
zScHSsf8)H_hf6&{05e<*ID>`t0~$L}g5=Am6*cnG^Kg-qv$1sn5jv>5K&bJ>g)<sj
zgw;&xLY<8^=-Vo`K$t*z0k#sw>qkW57Vm?35KsVxZZXz-3NxdlD?i+SoS&Wjfrayt
zT*umCY~PZM#bG|DFLnq02e^T3!OA?~M&Rcs{G-0CEaFjRpnt;=Vm6pMH92WwXUFNX
z-;gbVrmjA7Eqngv)vF2+oi;LJhvPZ|!Q=GiQ@#J|_ki{91RiMchlcz62PN}meV!oe
z50r$0E<eDv05g~oy=Nvui)rFA@6v~h7qogV_xJE0&)CXSF=IVdD|F-Eavhi54ye0c
z)c9vl<jJN)5b^WaJ+=hi1_CJ$-|eh1bbTHE(<%Tps7}rpTYzrfef9nZsFChv?k!lj
zset7q1p|Za;A|xT!6Cq@wAm$&p4$Pa0)2W}NUe5dJUtB!Vc`Pbjax<#@=nc;{_yyi
z!C^sXxUWId_^y<C^EZ6;!^eoD{oVe)K7Jw}Ka;&bq5rx?CB~O=(pPk})K31yAE{Jh
zCHx@bbGrXGv`|`l`Y3HK8I_WPOg*NmszHu|f;T@8JLTrpX@EOwF;)un1{g=zp4WRY
zW+?3S0BFxf8Bfzh<)NVogiU_C`}aY!W3z%pAgFVb>1;8r<fbL3sXI>&l2e@)6yS+g
z`@QF#gR}e3*I(S?m)Cpy&Q`Ph&`Du8<5W)zN8?n_qvbv2K8|VHax&_2#VT@b8k`3?
z&U92%RV54Xhqx<)&@D1vk3S*rtnUG9)NCj@F44_-<Zy|een>i=Ay<+iL3$_dEaKWT
zJ+79W0GJGi1&6nK-AzY#23fH38Ce=AjE3*cL=y2*Vg&<kOaEBSk4+#MF8BaI03gzN
zProp&wroM3#KpqG!p;5Vsjc<TA2DPc`Za1>6n7<fM8xNCPrffzSy^KXJ+9qhcpy0p
z7+mDE#(tDH8z?C$0HMP*)d?P5F0PK*ukUWJE1FxpJT0w8DZp%j8GJJ=RErLb9RP^I
zzA{A4Pr~c|O|gL*aBCvML!}!MKOZh~iyPuAUbR(Z9s@EP&}Y5fbMX&{!aeKBk{piG
z`L~ACDegWR73pNBvQQ+_#Y!U~t$0^o45#VfS8tuc1HBDCK}t-_I52c^a(ch>MO+6<
zEHBTrkYfEa7r}J-@$qL~rwtR&dw8EGB-(h!oNHj4{8V8~0`GF)@YDf&frmoQue^#8
z{LKkEUI@sr1HBqS!0`sFR3ObXd14#GZucdE+?Ulq8Dl{&1|@~naR_r34Kdi5^hH0Q
zFLh>*!XrAm9<o}D0^0Mrp^$t->Z9tqbK9Y{cHGLMOIwkxzC8u?7?wy#b#v}0gq+F_
zhm|LL0A1n@@nKnCA^*Pdcp7!p{YF48vRNO$sJdFhN*Z=4G8o(DyM$qjlJb>WD;$Ch
zeTAqrdi6@sRN-87C2@WR1c?ZVQt%1vR+_|u*X4WmSca3+<Kv?lGR$Sf`KWt?-jEnU
z88S)=y#e0F&&NL?B|TXMGPaf)yu%gg5ZS!%U#fG~=jC-TE-sjEZtgpLg>c4v66s7$
zO#@<ki|V4HT}z`6DX#rLs5M>lIn-6v8XKA_jy9e%;HRd(d~xRh^iW~yAt3E1)_)%-
z$+x&PvP}40@A<46CM4by#>uH(pS<h6pL=~h@osaoh}p=#c~Kt`)mmMx-@Q!X)2C|S
zY3y=NMIf(++58PjlS1r|n2EQ-wbJk0?QL9jb@gfN7oEe|Z&tSc8ZgF5T^;gzvToJQ
z>oLk-A+7hcJ^jK7mpz@~wA$Ov@c38B3dO|7PthRp-!y%PHLY<9rV>b=68HPLHcsNQ
zZwkYN3eLuy!vBU-de%>7JHFc^l<tYP#K&Xvd{H_nAToksB9T=5S&4~}Q`3qs=ze^8
z=?BBl#Ig${<z|{*L5rc%nXR(EX|?c?w9)-!t6yE2=(MTSlOXnJ&=<3^;>;YaH>=KJ
zpVH&yLtSDS<qC|qm;v>aM=|7mzVx3xpdEBAFKN;`T<o0JVi4L|ZUZvsnjm8D?P+?9
zZ+0`&mq)_6ZCUB4fU@)Y<=0@$hmY4cmCQN}GrxXi)x(t1seRZ1Mn(0&wU6ln)s4^l
z^XKoa{{FGCn0<5SIYzPUlQXnu<7Fj-gU#Ai{lI2nXfAwh%}Ab+QE3YJ41k^W-{C*-
zXCAWNMHqM>^W69|L(z+y4gzZ%qC`;J#N>{_7M1<gF%=DsQqj1W*!~Lw2e`nIb@>#I
zrM|hjp`maT+?ZFm2KYJ+Zh!jvn7Oz<FU@Z<Fvy)i8Hx@s&YjB3%1o!AKY#u#%B_w2
zkaF04F085fXXhGOPmdTj_M^bl;<~<fqi%`{IAhI^8h_9;HYO`{d!9|*9YlysUfT?{
zA98!ffz6P}fme;9n2L&wijx!AoIk^rq8FAt#lf-SCoAuzY%9;sAJSla<DHMM559V*
znp$22!U_|}(0B=R%WP%5(k5tTEZLh1nnPRmc7~cei{&;{bq$>|TUzKC1tTA#L_Nyi
zC%OA7hLw8X4RHdekDS%zrw%xvcAiwp`6vAzt6!h%;B9DJ21qWPnXzi3aBq1zO_UBO
zm);NV>YSYJJivTMcK}(O&>cuc;mH+G#N?n`hldOpnzM6rs_LroadC?JV@pffB`t&l
zz@H8ze7wf@0Qzp_P*5jdTo84lyt-K!Nsb>uLPcJ<@4{qzDQCQkGn{c$*)`0+4yf9J
zK?D$skMd~?ZC;!K&@QpUV2<;YBKqLTxw+g_m@!UORrVa)qkDTFwM%+!f|NpK5j+@~
z1av0YWKdT#Dhk1x<z!|=$asOIVi%?JZEmp@6c|dBhf*cX0kl-6Y+x$(FiyHt^>@$2
zt@4=b)J2*u?vy*VuWmZ*aTFadQ^;&{sCc)Hm4aame<Dh9$bve)LEKU6aF~uGbyG-?
zGN=<0AIsvhpZJbeUANsuwnSrl1WeN^C4tDq4c+iBR#ukVb1^9?+Pcbrx{q(ZmNDdN
zuE^8F!TH-R0(E$*s3C9-Y%`cb)&%*^)uC1p$W<c<OQOC4$TTE(91{CcIV09m2`DMB
zvBmwqe)aqh-h%5PG}FH-Aw%sze))BDv|@4+%X9-&*^PYZ4yRRmDnEdej|Vj;5m6es
z62w?U#LcY><WQIEv~~5u%MJ=Cr2!QA|1<*9tVns{-{=wrc^S(MX3{fo8_ytLX2faY
z?78>{$HuEdG(q^#3xS>C8VeiKO#?f1HMM1lK9%30jC_Ws7B@?mx~8TMof<iBONRPl
z8F0gU&%-#y0QM>#wuMUJ&WStOXk&Z$M1%@je{dI?I9)MltuMEw>?I&pcP6}6KH7T=
zvh?X;%XUQL=y;!Tf<ryO$mm^|3jg!Skx<q!I}pi(4IZ|BF;9Mxw4gP<iC-%1H_cHO
zfmRaxx^Zj?=w5PlPa;#8CuU}@Iv%}<h;(gj4|UTV=Ktuj&Ew<YB}GLEVYjrm`;5pe
z<#~ca50sM7ktD~pjT4}_K=Q@}UB!0Co`}3W@r#^fa|>IrX>NRO^dttJ^gEXPFHK>;
zxE{)chm{mim6sJI|K%K;nhJN?I!t2$tV)QGkPsLbva7ecKnpvv?tqEG@N6&EL1n5i
zUzwg1o~yjF$|e^zcabJUA1ITs-V;Hu*`#7(X#eqwW5*vI9UX8D-w%A-i4D9(z#q9h
zKF&O`p5iR9T^@``<)G*L@PVIxslVT0XdVPU-ayynIoUaQczGTBd{>b{k30L1FRX~v
zVcJ)U&>Lal*bJ8nJ9G0?CPO;1CwRNUAy)=!Y8y*Sy*BIBzSu2b=MZ9wj2tRuX?g3O
zrA!&SxkQ~wuv#g>F|J5RxZldRM1f(UriKP60`6bYr9o^6*uXum3|4=617K(&)Vk(?
zUo)$%t6HTywXEQs12+a9S#)37BwNMF%0K7wHiwdurWG=l%#Y+E(mFr6ODPtco2t81
z8Ds`Zn(~(=vF2+S=yV#6ZKFig&eE5frQNwr)nc61n?gg+Fy#d(;`+fB{#=$t_j*y0
z2zsaXf7xCQDrAk1iQ#iS<O`o0N#kdQ9=3!Na5^;djc1Q!2$mNKTn&Ln+H-d5^?C|5
zP^y*Kcm<S{$Pf^uz$0UW(?5u$3k!4NtoLA?#m2#jBso$qN+gkO1za$EfRWYJsr`2?
znMr>rxBQe)dg*69_fF6BNFyff3!mO+Nl9yKI;1X>&Zu{y#<MaR!0exbQg04eYk>9v
z8+mycSmOoU44xLhoLP9LNev7RHhg|0{1aPS4MaiedS2nb6Bu<Z?d+f(pGAJ2CFtAe
zw|SBlc7hE6nEFEccEFOREDhX}Y7g#~fTe@mMcmdlLq8+ce5Ip)djJWyOH-*XAu$I9
z)n^RI2u1FuL}YqVL5b0`%_@@-k}uEja2Y%MZEYd2&$WMl=qrmUUtS6Px^B0O7nfQG
zq>ynPJLSx6XlslDzvV?tcccArPt4;t>@pX~<ldhdU~KQQEpGXhk1>w>rJjbw>%8(-
zfWBv~_mHUi4RC_aV0;hTv}M2Hy}{mSrp6f2xv8b83Ciiq67+ltr6K3Pz;*CDZ`YCl
zHha$MBL7Qya;&=01vc#Qb&|MIi6igFQ|XlFXo?Qc|B}BvFOm*XljhsQ{&nk5kGMP`
zu@Ooqz%f7IlJR2~PaBrid<d3F7x_n79TwjZkuX=NiRj8D8{E<_C8s^|!2^ro?JHB3
z!uU;!$u~WZWUlbtt5QvDTwZyV2g3{ys6=G61MvKHscfju7LiUmFSlslwGCt-Pi=vt
z2|2x!6A^*`5M5DPnxP0AElD0Hr6EDsWNcwUitP%5Na@Vh4|&V#$W#6UG?zpHpjlCf
ziOXer$ah0mz<P4hxfl9BpWbJa+tFT_^x=OznPMRo@bXlD@gBa+Qt#}lWk~QlJ6}XZ
zpusUc?(OYfNR<!h&XEQk*k2SVJn?e|rkR1hz6GGbacF5dIapA{N&#ncCX;8t5*JyQ
zZpF_WhlQWcB<>VQ)Or~w<BRNgc)^C1r@<m|R>bWpvF$NBIoSm>;Xk?RJq7)=5bElc
zE!_u$iwMec)$|G${&iU*rHnb%uT)G%sltxnr{6|`=&Gr?kG#sGa|j>gD}2WZF;VJH
zRJd`%LZFhAl{H0pxp(v*5#@Q9%ma-x-I&;fd=X#@CMH$vfRCuDY3UhRvdI5IjIj(B
z>dx9C`J(NdV@^R*d8a#6C<;-@$?<7kv175R|Bth`4y&^J`h5vOK@dfxLq)m;L|Orn
z?hZle?oLHOq`SL8K)OSuyE_!5OIkqijOFut-uK<tKKnZ7+V?*wthm>`?m6d}V|>Tw
zo5&3x4y)#R5Gcc7f#-0CAEE+4K%v5<Z3)8r_6`*(O-9w|rLr;+M$hi<EgnM?E2~UK
z?epe+Bc3oGt!Wh_EU%%{-@qW1NqVX-FMkJ->>c`Jp`xlPJHifNRK&qb&qlCVxw@u9
z67<x5pU7fU-@qV<aF9d-L5AgcreJF!o&8E(%1xeM`$2Y1ZF&Dk7To>!LgcBvMBmIF
zD#TX^k5I+fS2zY_i#qPUZh{2W@XNIyaYqQT7o0C8*$$J+ld7VA>YbrbQ!#L?AT-o>
z?eKYk0y;`Se+tWyBV`dpq9aVtC{g&y;5ndgGQlN9VzhwVoTVO}F7)Q*4_1Z9U`M0D
zS8I%T;=hM?z{3r58jH!10bh|<kx8BRw~VdQi4_nAE<@L@8MnaWSj|K`%uR3Jl;m;>
zZGFe5jSD=uqT*sxGc!nUL6MDB51h!-pL0#(u_FcX*za$AvLeJn{inV6!B4)|emAbY
z1JrjCwyLu7>Ozyt=8y1$1BH$>kr#t%jfTr53(n8!$G4x%dnu%46>beAYvOtC8#VJe
z9Q^FQ>yH?%NLWZ>Y@qFXRw!#U-8hhqs0Cpm?g_X$m>nGXCwsH;DKXnin@{-Zch^d;
z&Kv(+Ha7Hy5g(n|<rZr<W=VTc8xFn#)n5<hkk#eB>dub!7}WeJiD|RoH7dTc$?*{q
zBfc#tC3?}*_w@8iZbXKs92^WTYJIjotFmfN`{nITCmCC`f3n}--&ncqU*u2;J?2jB
zJ;(CH?7!SSM}iCMoh%~79`Olyef9Gf5~6%cddsB0GlbmU*4A@b^^enfE`M)K$>qkk
zl!1Yec1e}X9hT<6Bz$(StBAI?KqYezkNI>Tw~^6EE=$)(d~b-!EL*Srss8gjF}3-?
z(Eay*8v_BI;lP})4g0FPx<+<3)y_hr_Q?1PDmneub~`w?oHtJH&BrG@iHPBgIK01m
z{}s{cI<pmicaE2Wp!bPk-&4%`S{J_KzTQW-y?%XZt|i@F?H^Rsw-)==a3<MwaS}Kv
zaHgZH%Stzf2d(y$cvs&qO2k87RXDF4<vktAx3JjB&@<efIh*fKBtm)H($V1;?)Lk(
ztILH<0^dq66UEBfnx*Ff8UexNXl@Af4n#%ad0dWnMs@Ve_(jNjSFBcUk$({M*!HJr
zLX1~)jFc1s0RcV7-CqcOLwIM3A)I=U2J0H^K}7GwAz5VTqW@JTAxmF%r56{&+7ykF
z{#voO=i^`-g%O?rkLTrV_4W=~jTU*p7-R^3EDOSSToL&7yHp}M_;j#59#J$d&&jE)
z%9#OXWq-6A@5>^0fz&^jRV?6*ZfmuOg%J=(dfR<p$o=*6SDKn;Ha6*|J$ZRGk{D~u
zIy{}U_G>T6JzP6+G^cS-b}yg9MX#PeWVvbuI!O^WGn5lRU;J(T8WL-3*ai`f-wi#C
zq2XaRfa2|v?X9h?t**XOR}WA8N6|=)CSp6EmecU*(|Z&!I9l$Mbzjr2Ww{lyv>DEt
zoDyTd(&L-j_`4T$WA6iv07qf0XTg9QFvWOHy!)sha|jHM8hfowOsJ3JQ55o{%+Z~k
za4b0Ye;&!GewYz)QO6*Iou6-OQ4tduX{3SwL=&3O9fTej_%vDC@Z%e^=$$kVcX!~f
z$SWu)XlZ2;H|u_Bh2GvLNf8mYn`7etgde_gv{=}I4Ur5wSRgs4=H*@fdip0j#&8X1
zk#w$^;l6cG&IJYF-hu@^q#lMpo#HLq!Uv^q>3P|cPY7Gg*G5LyeaXm36%~ukBmsB7
z^X*%g-wqk+1}!$W!@svEQsnD(_h%PpXOI=nION^??cYQv#TJxe{gf1v3n2FBFrJ#_
zz3uS`fuVH*h8Uo`Q&@})3|_eWvyT5fIM_cSXNQ4bOYrJ$0AmRGv~2ja`i7@xBnql<
z9w&IDxSg$89XL0{m#;RS2QK#Lmu-Iviit72d9xR^g-MC(fw9HZ8`It0XR20LCIfRX
zJV*m2G%H<E5!}1Cu=Oc^gYg9d@gB*8YSW&+ps^YvJN`!ZydPAOs-yCCcz2<x;P0^-
z$}Et4jP3JU7d}#bZ7uu9fWht4cW5{1M0H-0LXmp<^LGJE^XW2QkNlW$*{m|`8#lTJ
z1}se@WOEPTI5}x@J*H>B526W?<TWy0&!HF?U8}<{DHJWCNoqu$RM7KND0ztnwy?19
z@{(cLZ6M<#AtkVJ-!xe%z-Cafgz{=*q}$eog$_9G%IRBL4(w{rl6xM}nVFH4sx@qN
z?txre!*t{*kI3uKnm-n0Z)39ENgswp?eUguitD+NRpaF?&a%l8?ON-r3fom%t2}Gw
z*waBTuQA|+uMph3C#NseI!%+}zEAPzd_8zFRW*mtW$ANddGD6h@07tcMT2!(_-ei7
zvH5gh`4$uUJ7Y6P{++P_z^1LP{(SNE>(^NV<sna}2pezQxWPzA2Uy@6n3xUr8@ME}
z{tB8+Y#$uhsw|N4BH$r&-e|^TweDxOuCBxmPW*g)h^>+He#BRQ923b;D#CCDT7uHj
zCt`JGK3VLw-!xj+)6<(B8DWf^b+E1O{R1XF(3^-GP?0IzN1fTYce%F*Or$c@_9e%U
zK#@{lIyuNbJd(GJh`Aj7G9RT)A6>@Q{sPVGYBcd-xGyY7e?0&2kchvW+rOO9=51a+
zL^Ch_m{Au?6}3jsyq$UQ_p1kagh*`ua9x{E`s?*;>vMBjj!Wzwgg`0r$OW_7t-Za}
zurQE15E2r$VGiMyn~s}en$Oj2KoQEp!Qro@c<zwp(R@vKobwA>JZL=hiI9)2gmefn
zLL3}8HFcGgDgXpYAG`z_3UH*#cWeWMmrNqQ!%`bSpZF@ZcXlj-gAbsi%*?E@(Suqx
zrSH3S9*NX}lhzy-%*8OB933eYWNBcZ?#%YaeB0e+Gn-&kRjq~@5#$nOck?=fh<NQ*
zrD$kizRH2pLU>0%;<Hi9TBQyU6I|Y{u4d;EmM-$cZ6lTlqt*S-=LQEz;WgBRrw*I?
zhKAH=Cwq%r-uG_MNd3Hv>FeT>wX_N?vCgipj}J`7qBk}+@VdIX#Kgs$fZmt>{7T`c
z@8R0P;Yz`NtM5&pckjgdfSHj8qJbGOP>b#RHy5xqJ@Q6xSuBp3iHTYqrtqbvizmac
z#=lCZkU|-zAuDUEaomU#lozV8@5f-yhy}TrV(i8GFlBr^k^Kic#dqVTd42Z?2wqYV
z;Qfen<~N%#|5#d8^{Uwu)j-hphxO~%-<R40VNOH@o`&fDUyv^D)6&-1{rD+>m<tJQ
zpPK$bWaC<HW6fh3<ExNOKrUHQS63Gx-k?RC8Xmqw2yU|~qG%CgB&4KLi-3!c3R3nI
z-!ZTQ$;%VAeN5i1_$YXfSV%vC{88lPOBx!Q&dyHugC@(XqYe3o;bPp{X2406jAfRT
zs7vpUzMjhRZQuFP2dEAYEPCN$EaIuFs$KxIEMEnt{WoI2sL{A7DYc9I7-Ly<GNSOT
z9UTpQ4Kb~2NpbU6aNTxyj*d81^ey15b))1|G!Q<g{~RqJbo0>Gr>4}h_Y509fByXQ
z@K91#7P6K((h-(0vkWE$sMh(7p_}x>^az?csC<1IkQ6EhtwC(BvWx}jeM3S8i~5#U
zS3MU!Na&uem@zo!pghsi&~QD-a`&Ywz`|I9D+;_585tSK9ojQmP=NxZz9q*l9)#?a
zr;6%xLqjz%25{GJVq!v4=7JxwhGwGlwIQxD$GaDQGjfrgv?vuoqP);XtWgvsBrg}C
zlbiLN-DKp^`7M>SAeax`n<Mj~lN%~#Y7(F_QdU(ZAS3JV$`!h~k?2rANAlKNwhZ{=
z4)9%ppH>IQBOV&6`7p6ZAW+KEDGy&*Sjf_f{GbJ<SMl-UkDVy)>8YA3`2JXhwry}l
zr{Z@7UNV5&w$E*hq@}STKx}#BjrDi&qPpFTnD>)e8;~0RSw2D239^2bjV+hu4(X<*
zCe*~MzOGBFYs06|>d;lS&qr=`d5(>j|M1!A5ZV+KGNM}`3%V*GK*W6!QPsO!l$Uq^
zOqDJia%WH-thTkRtmw+tA8~I!Gh`6&zKPEWqDcVZZ)v9{B_+Ps(3cyEf?;jdbe51@
z+lRSZ5dG%-eeVkF;3A8qDKPo=+ai^|K|=)Mrl!8p`3zwMfW*4J{*YSO8gVnAzX$ae
zP<j<o#qB{A9QW7&GhjG4I2d$blpFEkgC0#BpEm|!<$-nrARN4S;oH-7bcDb^hl?p`
zYD&IiAxrq7hpDREeMt>%w0QUKA+EH8I3FJ$1OVU?26^VG1~RfG&1zftXTGblax{cR
zk<`-6U4vF8;d@kf;@h@h9v3{B(gQvI@2d+7p1M|JOUs<|q3?N9pFdlhnVCI#Rpd8Q
zCY!?NGF`S}G?-EggBxmW;-NXV@WBY#o&|$A4L;YMv|RXl2<fpH5o_<LlY|83g*3|1
zCt%V_X|S3Mnv!$d)7-xw_Vx9Y?^V=XUo8>jm-Ynd`1yA>#|t0*QuuW^C>YK1EjF><
zd4B{h@XHWVxX<|kp^=uB7Bew178M19<_YhPMw$Lbt8d_Yq34p4z3IZ&w>Dk-?5RtC
zO_gTCw3*27CPOihrVNMya*!*d;_!8KO$zmar<K7n=;4&j@|Z6A6S?N+`Jqh6Z!|Cm
zqYUWSJe=r3a(s;)k99e|4(GLRj$womH5ayQ7~T2RWSW-kO1cs&&^0DGl$j|KtCq9>
zA;Gk3c;|i+xvw#;R*qDM{GbijWMhVY0_N@=2d+k`-s~-h+ac(GWZ=?x6Mg@&J%Il7
zV@%SEY>UyczV2nb;F2oGhL>%P)N1pjk@-1|lR1Ui8}Ws*iO+L5<DW>%<&@L+$@k~5
zX%Oi1Uv0<>yj)u@jLmt9L-}?1Sj3?c><)A}U{-0tx{IC?yb9nJ!~Pjqk0Q>2Q6`Fl
zplp=9lGYExiA9*Afbe>oI&~1(UrwNSf%4YzZp<h%bo}C`VNdBn*H_l^$M&Trvpj4G
zLkkPgNMqf3T?6wOXs|}O{*~im{r<(tcnOMZ`UoO@lTGE#y*u6CyX*xY=GKcfo@*pE
zMcCMjWm-s9UkegN*699!P4>9Wy51P_usBV9Mx~J>oFGu;wgZmkQdEs#;PfW?i#7Ix
z#$o1XI2je`x6`hp@yx(>kfh2n<a|?ahV>`b|5(=7)8$i%+A%!~LLMs-5N0`BG%*^-
z+G0Ex2Je{;W9}H{Vm?}IlNH27q3a3@1gLywXShFz;3I;gVSlx`g)uc9MeX4^EUUMO
zyLSlVD~pgbP^N$X=Hucz?didczJ~(Si#M{~7{)R+KgoO+A^X7M!YcvvlvFQGMoT?-
zQjh?2PxA8mgUAdbYTvVJ!nC`h4%Oykf4wYGb%94O-{<3Z1n;T)ix4~EKrS`&&yTR;
zfr0I9C71wOX#LRd7Z$85t}gS3B=~7^`8y9M4BxL3l7m08j(kJpjFFH$9vdbJ<`1@0
zogqF=nl~|;DRJIgUBsV|&aeHGNjPuq=ona7xP!2sMdHje`P;PkcfEPW`!^4O#BO+l
z&*o`;4T<Rv;?yaz{_6LFuwu**uhU2Tw+FH1ww~dou_mv7M~5ro+5hQ3G(^AlcNr6V
zi;(`c{B9ZHBWBgG(g3t+;4ETtOCuP2CddAT5aULBqc;YmO<G9*J{0lNe-Botr-+2f
zyT9@BzrXZ$0hJRu)}6l|QM%V!-@Zl6=SX&_=!h@r&fgwNq*c^cNr*KGNmmyS{>)1A
zPnG~{p&RjA?>pXzC;2=lNF6x$`@#wx(TK<X=g>9%E9y%UjfHfD?j50je-A&sr_*}J
zjJ21(40#g`!T&{R5p*PY7tt1b#M=n{^HJN_!WRg0LzxhN3c`GPX^wOEvm`tl?QWVh
z-rq~+jWYEJ@mJRStnet^yzsyK&tKk%%ZGL2JOO^R-0()NM2W-Wd+VE>95~eKDx#KH
z7IG3()nO`b#EXhVNcK-E1@SWQLh@oBRZb+cN~)Tw%Kbq%KAD?u1QFBUOnZ*XDgk}l
zz{mb(TchG0{(%PX;1`}D`g<knoiO_VDzYN&H<;|YVqZx05w8=+8Rv!Vs%x?)v}tE%
zcb8p3chGmB5TVdaW2xZBQC>!Dl#mb^EL4=YkePX||2kjK)y7RzQPBf7j(V$87)2Jo
zDt&1WR%YI@WQ8_%<>Y5pmS*}QH{QU;#=yXKu>Y*u(d8O<t*ri!_2$;*=#MPK-3Ld|
z<M;Rzl!m+IxFcy6WXXg`=g<FcL*idTKJuS0DeYGNAailbBic!>v5hBUUEs8q!8opL
zuv+;1u-2U>yvW<=SMEc)8GOFiMK$@7Gwt5>j2aczP_X`}`{y*yC-W;vp`f)8d>Gpy
zrhkBVTS64pvs+kx;ihG+c-K+=A#r*45vz3%<l$+psRaZW7<`ECVEx>&g)gLIV&d)C
z+QbBYa*;j}RSvKR*knN%QCh*}cityNrT8})3Lmq!P{2(1Ya^G*LDsi0-M<6s?>nW3
zo%boW^bAp=B5nc)5&RfHx(B7m;m>P3#u3Xr)Fkh$85I6s<&dxYko#5;&+fzHSb|$+
zAP5B9ly{{%QIU-Gk*sbcY)Se$3T=HE^f;-)tCYxcAWQbhO3xfB{f3iZZEqijz3wUR
zKv;C=)>qiBA+&_~#g=APiu3I&wn@p!XYRmN&K7yNkvusuAwwTsRl&jT(=j}pUt8<)
zliZ}C(F3|uA+z>3ofkwrrynDa8;kLn*HJM)VeUJJ_IG6!o0*E$AJ+VQa~q5QQ`h($
zp=%8JN7QKYT3uDM*ZVctRrPdqBuD`&XjkWL?+SQ7LXNTQpl4t}#^dJE@jfOthN+pA
zAeq;5O=2e}RbJlNnS{E886Ja2se^V-b}I)p_wFf^k-1V3ct8JNwT>{pS>HU^_$Uw%
z5KELs#_T`aS>SVXKDqIeNRWhHC4aNjh$K(;t1qNnx%4)j0S5_GDa@Amt$PO&oK;r#
zpH>H+<V*D+p{?9gHn?|yru<L{wTGdgTO!BWR>RS`>&L;z&3Y5lbzVk}w8arI9q>xY
z4i2_(bE^-obdVY72M+@W#~y8~dN*fA&8ncmwa63(T+C2XZUr^9ycmAV4lIRWmRC;)
zu@a&SRbXdPbze}Y^GGr0nxa=|NHIPIDegl{D}Tf&MG7Jp^YBbFd)J|TSHJ3Row?Vy
zHI<WzH10VUyEXJ{=n>mp->t<yG&p}3GBuUh6S{`-9qP1$$%3&FNx)(y!{b=l92Y5b
zr1M;8a4{N8&UO}+ML|Uo77}hgJ2ykex-LITiQkvXbo=Ml7RkcJx0@g1Il8SbXI6yL
z!@^4%sCnI(zt6ewyZYWbaYWcdtEk9`=c_Q-Zxd2T2*3T<Qy?pN;TIf~L|kXz?GCmd
z<fq_6yvCyS8VY?8(a~&gv;-Mo5^NEprsqj$N`HR(_MXm|Rl<+D92t{pea3MPo7jw7
z(JBGiJl#F^A|q)~q?L6d7)cYil#%Gg#JNRV@`<kG)0?<%Od=ldrdY-#Xo}4i76*p7
z3b>9m*{)z-N}V`5f_^EE{9dy4{zHd0;GM}d=7SZ4TwT~uSaxrW<=LCS4ws>?LI5^{
zZF(cxI+RMg^;gd=VUC9Q`B_w3<=(xUnN*h7&(QcYp3Z?&4NztF=Ie7a8r~hq#C=2X
z>;jY$!c%f$8q3QO4A&@$6_v36l2S^XptmDhpv?JLDe;-($Ow2FD?YXMjwT1&*ne*J
zT282{I$5TXwRdzJNV&)BG!T?9a~>3APS$(0zYjO~V&iF8)irkktCgPiM!O=lro8;x
zv#EV{=xPbX?~CVhGL)9qHbhiU36Eit*KLD*Uy}0*CdYcyo&EQhIo&4aCaQO0lYQT9
z44lXaA=3@0V>87E+YVa?<Vr@@P&Q@!A;8)Aa63&oyl~LAJwD(D24g+fmOA-QYp2&E
zaZzLDPF!oAy`{G?fZls}a4_}!U58)CUbPj?a@>6VRwqUDfu)Unsdb1LEnZb+{-4{V
zXMF2m2qSB0V$$8yCnYJFEe6I-<7N}?&6jQy*?!g4gWJ>P&3|6=CQ|Y7wOTESfGNNM
zHRcxNvH#Hp9N6O4lMoY+eavc$QBk3hO$rmM15zmE!yL#!52Zuno#kQ=Oy@bRE_@3S
z*^>G1DgE6D&)G^#LC4T7E{>N%`s^AM4MAzC)nuQ4x>d@cTGV87c@E91e0=<g2?>aZ
z0x9l+#2`r>jkS|q^7`JNl~~P$-Gu9a<zpJq{PpWs1d?=2Ux##}v69<vLoN0(Hndkm
zsS+6T0c$s}6{;4cw+%M`M49FT!HC!Pe&=9Y>VRrPEA)fo5)g11Zcia_2P9l#S%#7+
z#6;p9Sn2}$VMzg@ER2l0E!O2`gR)1x0>?kTZs+-CMt<FyYe-6(BjNgy^T}7N!hGZ1
z{&L3=ewwy+(pp~t3D*PwQ<>?g`02z2wDy0jUKf|hX<>Qgky5do*(q}>@GxLzKqdqu
zwm9OXD9GM6szeM>i>dK0kthqV$jc2ofJqKq9!v{VTSQmb7gpV)7dIdkB-u~yLE8fE
zlKB5uDoVn$`p)pkHA*2=F;{Brgdc|IIkL{5-IvO>JPhNqZyJp_Nu2k42AUEC<~MVI
zT?>U3MM$f9h8m-#NjOU`U38CFm_aTsB)U4<+F)aOtdffHM?8}D%W&q)$Lx>aEH6<@
zC-imE+_MosS(!U-?pn4HmoxnO{f;6`P@@WpIOI?7TUzPVn%)a#kz)#TwFJ*2P$)h)
zo^EZm?H&Q6>mBIJ>4!}(w;gq5P=(9yHX8|-<4t7%Ja1Cs23$iqBMgX*b%L~ogv0@;
zG{s3%`Hf`udNegO6b!(Ig85aAx63HpC@uV==Oc=iySuRWmFB+=fZI_p<Z7jLN1mOU
z3VUrw_kHB-&{kDXf6ChBcSdUl-26kUpfpggCcztAKAdhj$0p&auRGbDw%gsFUXP3W
zkRKk@YC=fF%5nQ@hf8yBu3Nj_lB_v*1=TMlGIyZ#T}cG56K2z&*Lx1W=Tg6%d&htD
z^q5u#LFNI6zox0M+-$A*GT$U#62Bkfq>Nuaf@IC^D?Dgbe?G5`te7>1uJ7(j)Y;kC
z&@renbk|1Dj?56VP7AWOEDl;}sjcIc)=*NGd$E&y3k+|Ls^@SAGw<if=zfbLc=ekI
z?ua0~ph6!&cX|Q=qNg7i5CGL?gAU*K$rn<@_Tu7f9)v@8nRC6yos&y=XH{0Xs*_6!
zW>vMsB{<r{mbNYF>~S%AX4``X)@|E{ef;aq6ih>F3CY1>PTlhWMSO7OpnLczf4H>b
zZfB@$s(=TGOvuQ{T%2sdE5y`|*{}R8fab^6-HEa7=|)LC46---8;ZHv3gYS}bOFt;
zzklcE)(AGd<<HLfaH(&a-O1L@<ghQE9r-OXAM?wz)lKNo?F=D#Im5x=D4W1nTUxrW
zfRf*rRL~=#shJ2#7hhkrO3rcIfUK&Vob>cpv!&bHJBf)22ZsmUwslcqEo)|$P2wH{
zz4gLxVc%Za`vjV^A@oD5sjVAVQaw$khJ5V{7aXr9KnA^dfkqii&0xT<O8X!^9{m9B
zi=GY`tYwmMP$9;@N5DzHaQcuN)S?~Z<CUL2MIq-%7#qupiRo%<Uj{#N@c;Jcc6DI;
z1<ptbBLgGj_kHJbqs|CiZDnmm6%~1%MY&h6rt6<Q_Es&@5_&7_FI&*<va_=UZt_#V
zr%=Iiy1y&A(cYu_@+A)ks<+KILfVCE@w`^#Taw8rlpRDBHfY8XiO^w9rQA>_vs~=V
zf8G0a+wAOhl%tleJgZ$Ltk?;L37cCL)fk`4tG?M#DY*O)OI6U*ieZAaR6aXyn^8y4
zdgGnC`R`T#$;X%kq(^jiMJGS4$FnOOZ7$Aku9avv%Y03Ji;RpTa5R)IEJ!CZYkBL^
zerRGK<XkCn*XvtnGVhFAFe$W!&}vh}M8$~8BzCMERFJ_|^7(x{d;*6*>hc}Hv0Wj%
zLrlE-{ksjYBUe`~tq7s{61?%)N^Q)EF(IeIUMC-xN<mC4G2;p{7T<dcm42EfO--|H
zB}HE!A0Y;*@ms$-GSZz38Aa7Xe~WLs-{qB*vXrs|Ki0)s<`na%c7_Het!^(tN>fzh
z5%v^&ixLLLEv<4>6Em~fQ{EFthkUowlLPy~K^BFkC$VlcUfoMB`1lzo0&5c@FQv1C
zVoS72@;)ipm3-gWXgVvs=yq<3a29?TE)|I7_IvmO7BrUVKG^2*i>7{1)z+p`euiu~
zB&XxCJym+^*3XC6yo*I%w2QoWN%N`}g=>g7yyskpn>90?yRs=jz_)0p_~G-KObeGp
zXC3+WvjQGbFMIAK+P9<hv6kwpBp%-o0?Ile3Q?{+94PVDIt``-1qFdMUqL;vQ}=!>
zoNatV7Dyeeo0JpIS=!d54<8z$i=C`b-&XNNLqU$;#$_@)o|>JV9G{d<6iDt}rW;i>
zoBHw)KQaUyx;*!Wq!ww$>x@o!HKCDX*RoKh1Y}^^l0xw^?T9!ijmwa?C@mwSb$nc!
zX{4iLV$unV{eG7*V5hdpD2VZ^V8rq@HW>F^w4NO%CyXH7eZXkmGsD^2wK-Siq3TfS
z_x*ahT;BOj$TSXDr^%+$>kADgGMt7&m9N%)1K6ebte6Bp@Nz~B2S29su0fpG8Pb``
z=dk-TTv1;FBv*mRx?)7gchi7WyN`>8rz?snnuH9Mg!dbxxfj2F(dq$-4oDh3O=O=~
zpc@rZjUd~bhyEx*Yh4}b;Nm?4R92q1=W{G%5zIF||7_i+|4zq;9GI;j;Lkp-GPzM`
z`cmH;B|aLb<oq#1w1ieBXU_ME7;6m)W0va5)Uyl7B8Mwd;!p^TQElLdlMruuxHr&!
zTUvr#nCHnhk>jSn6txph|LBkQ*6EcL;@!>FnW3R)jU~5icr(>LelAnEN}#9fHGc>4
zdt6x7wSf9PMaaUk_wl1dz!FUpgy=3Wrt6ML0IqSD`Bhq6LV~G;*YY{%#QFFAU%2yD
z=ym%~lluCw&WGX$5}WVyGiiUy`y0iGa_fH#`$<4d9FyQW*xw2Pz6qWdw~IOpJp+9M
zUWku6DOs{{TVrYZ13tbbs7|Od>%94KkS&%d%gVYfl}ub`d-l-xyrEtyk_I~i0@KM(
z#oCRXmEpOO5qqa`%iy12UH<GUvwR^VS}GAf>m1e1c6;ZDzA3RMx(`M&3(>qEKtbH<
z<G+HKpmE){_ICN$`ntN+-)D#Bq4WLy{H(0T^K}kT#E^iQ??`_*qkU`}kU2g)KOssA
zBw$gmw!DmC($P((LaIRi{~^_s#EM60C}4QkcdD<laP%xzz1N?Kn`z#b-J)!>{E4rI
zxU@qhpkn8051DnEq|VDis|UyO!`0Qn1iG}e+iT=efRgKuX@<zdWL(m1V40`pzLrKY
z)p__Z2l(&uy5~o<j()blmI1#?AoZ|l*FD0;xTKcZE^f#IN`WS5ltH@kNPPUug9jYj
z=a(Q(nfXyxrbKOFX2$DrJ_bfj^gX>`S+dyO$ZjA3?G(t>R%;6W7T;TakB^TD?#*x*
zfa7Mmz5>%>KF}ATlOy@5XG3}U==Ai9k#S${mxu}N!;f3JHt+h1_pX_;=@&xZk9qe<
zwoo|jo(!`?_*cq@9l;cTmIsohQaQ%B#IhA|a6&QfvFNw;Cr*cF(TR!-c~=9TD525}
z8r>l{wKO${Ee03>yEo|$Byp48avzR=c=xg+@?7d|mE%6NX-##(&g1J#nF8wGz6K(a
zyWAccBDN9<a8?<<b`g=I7tHZ^JE4MS8nqj{->W=#Y)AA3&g{+1G&MC`C#Fi94%hl2
zXP{E^?M5z#$p!)nLMZN?v%s4_2=Ei=Heb-%fA{WPq3T_6;xuiLn23vW5qkVQIs%xC
z0sj=tY5>Rx{DEqEHYHyPhG)?3ltnN!wO4Cr#K5p3?9TCs7ntx~US8o{@0OOAWmOqe
z4Ap9F?;X!Vv$2>~n)b#<eiq&5mjFB2hHxMm())>t!0-_zzJ}^OE#$@Wze!535`6zZ
zC8f;Zgfm^MM)b8SSFCr9rI#?IZKi%vXr_HhTkxvJcz=l|)ivQs`wp0`#>e6<C+jop
zEmWFay+aGN@_gqi0TJW%lf9C{(QnVGDEa4mXL+fgQ~{G&MP}gGOm*5>!E=p8?N^Hr
zj>0J;C#Ubs<0n_YYs>9c2Q-1jUHS5nLh4gbV2vnOwj7i_HkCFUNKgg_m8z=S`4}BB
z{>R|N=i{_=bm@K((lJR%BG~F;VqGT|vm96hc5xs-h4Lf9y|b|mN=QHy&6gZsM?!(G
zCEVIRuCjwjz9|>iMH%u27h=}Fxvzy7#5(}x=l6AaX{n3xL7)M&{M@^@@~`~#fn-iz
z-a06qdz?3)Qt*BD+HE*HT<xdH^ffQIxi%;dgMAIb1nVg*k^gm&EvX;L+H&-{daucA
zd&hj^s~;01(|Clkit?YDt#3>1cCpOyH26+o?(RHSLW@+96I#k1C0=cH1(~)}U7)(x
z#_j$T&sNGdx?YuEV)fMPJB+DG$Skpn`h!cx=GmG~+Q}Y790mK(><rqX$r2sS(l-e1
zyWrUmz0Ja{SKHtlnIn^&5EmC06Eib5mQ}|9j?L86ey)4b(aNBJc62<^@u<u$DzZ2`
zxVPLHN@G)-oed}vzoT{Fp#+UAIxUKVn;Xz9h}*Lh!YVwzwOm1CIRqnuhkbTvXlMEP
z`A}BJ#=%*vwR>s9)>bd?UtVq|9qh^6ODCzg{A><6kvip-9s|7u;iZk!DKi6SbEW9c
zKfUH+#+$|#+s5JkQf{p`UQY86eo7!+A=n3gRenQL21sM4GjYp+5A}YdJdy794dD5&
z=BzG6uN|I^!HuNR_=Z0eFh%0aQH{U#tZ8{MMmNuX6mA~?oB_5kcq}W{yE|jH$9e8$
z1ADb9KjsQuAmKWCf#l@l{x)oISzbr}>m66}z|H;r`qbv%BZeKfMPyQ=6I`Pat3AgZ
zVxG(M@x!18e-*UO$3({`ieFK#H)0{jPhd0IXh>lYeLbqrco*{G((7awwK$kTo8(sz
zeWNOBv67zk7j!4#ImtJ?Riir<{nXQs5-k=_0Af?`bZR+hIkTI?m0R0k!=k&qAkEgO
z`rw)n%G>i(3B6vFM-QfTXAb|+IV<v)ME#o!um`pI9fi1fqmY5Qgl-<?L&JNNz3&O<
z6_20CfOux5SDh+*P@!s6#f>Xv===L&;~Iyyk;zTM(HcxXzm?&1@x3#9N7(Rv3Xzp+
zXl&eQZC1%FohCkg7?*BN=o!d!|KTeI#cnJtSsWZ?BO^i2S}j_<17}9x8IK99VB$pu
zf98>IagAm{6D!3sI1U&X0UJa)0<!Ay@jkrx{?(z)g=ca6my4*bBU$1{unV!&Im5Yi
zOC3BRrR9*M16bRel$f|CeXrWr29mSQj1g94pW=(5y9Nr{oP=2R@mx$yh}vZQYIrT3
zz>`xmd_^RWr8b+oq~2rKoM!Ld7^c(xeR*1`MO9D_{r(XddgRKl-3!dLHA>1%TJI-b
z@gK4cA(-gxkvKfCtu;Uv&7S?W#i!+_tMG8Ug8<_URlqM<rKCPwAk?*}$QDY$9S%hY
zRRUYa{pOye$$UiYG!4v*maOZuWFfJWg&wo>zUH}u6C`Ql>#RQ^8~u#J&m(l5y6RB#
z?R;q>8HL^HjlksBS1P4D&s)qLiMNIyVENVGQmsShL8WYe-dx6;Q@%g3D4ZF%B21P&
z=zdtVZStlK3w{32TS@0%ajS;vlD$QH26E>O(8QB4RclA1S7#O(L@&n~i(*`<;qlvf
z0-8mrr9XxQ2gBB#5U4)I+Pq*p46^w4{&YS%l&(I$4ryR>4bA=f<t!-ZwfpMBoBiNn
z4LbGJj@`7Rx+3Y_4U@V^HON+JCN2R632Kmq;B0K3fMSWRdz60E@5Ag<s1+z-a>uQ7
zerPg71-<s-K%Jaj_ed1A$QQXB#QeTD2_6^QnRNb50YW7UcUE@A+Udw^1~v~9de{2k
z?`*3_>hz6lYWI}WOoO&)6$iR&0gN>X4Vek7uZ85~!sLwW+~WFQnLxatQ}3AE?1eO`
zH{%*}TrJ5MiO1!2G<=;#Cdt~#3BkM@U38&lWer0n^oWwEg)UEj|J+fp4D|x3z@c}2
zKeO1^p}W4qb*-szoyRnOCbyDRHzqO?h#PG+c{O=YS-3*~bE1UlWslj94b@k_kc;|V
z?IF(t*==pjO51jQ2$?)|a>8-TZ4{=<3E7Ju%gcvD!l6n0Zhj+1#qTwf2G=AX;Yx%-
zR!C7(^J|>{j9Aj+?5vvi21F8h&>Z1-ym^maRzhOej;SIXbPu3=%(*VjclJXul7_}G
z(W(lGwP3x1IKSd8%F2+O(RFbEZ)Cl&FZNotT2HgD$uD=f-{I55xy!D`?f&b=C9<r9
z%*pBDPI*~_a*A1mfA0iLJ4meOL1`D}j_e9L1XvG^I)cbIF)<Hb_H~iqUs62d;uw>S
ze@u1%{?KF0m!S_bj8)|1zC|-I&)rl`m$P>)z-LrzSw75?mL6*bOdSX$`Zvl;v$CFY
zat3dTWlNiwl<Vm&7tk|o<jdsZ+`M@Rz#$ODNK5b7F#+BYI#GE%`3keL^tY#MqF&me
zilPPy;Zaq0C1`2r8!svisz>2foAL5rd&8#lXz8YNH7~9I7vrII2h&E;Y{gLy)GF{U
zANd;aQ4GPJ1j_G-y@Ru}OX1ARF>lYKkLwO>NSA%<Z@A~E;G=;350iEe#3)943sx2?
zaqLD<F71zdCugfX8qKE<d~f1oUPEbo1;in*Z!MmdkAg2RPJylSraK}Vx(NV%v$wzx
z#UQ1Wco#-WN<FApk<lv;RGL+Yhp0YJ#3LrI0<p@Az!3+Yc|d&~9<WZ)2EC%BlxxC{
zB2Yw^#`&knr2E-{KEXq{W4P@@cN(3?$qA0JS-~45UHkPvNE+D+28M<T2a@X6Dk_6t
zBt}NrmzI|D--#~Is2)R$nA6@ud)cSzYA2{_9Pc30g)UTEv4nQQMNNy==x`e7@9!QQ
zgk-S-eYBGEYM)7QQknTy3^@3BSiYOd!Upe>n%rEPqE^==glH9Uc-PC8>|}hJn5X$5
zG<#=%=UHY>q0g&3jes~3^}oVN>yBoK1(Pbn!4!7roPYOjOIjM29t#6QS}cwf56>C4
zU<EC6_?W&s*n!XY*|IwtZ)%f?`rvP{8Q%Ek4Uk%N(?3;dtMr0?eIRIKdy@m}9Wq85
zcs}Pst{HenmAYS0Bws^Z3W7Zd-~U#z{&{NscF2Z#!?6Pr%xbJR(CNLY@i<1my5l_a
za;1;0E>QZ*ko@PN-yBOXm2Nq8BB2kFMiYTp<=-O{>)$~Nzad;0LU#Q?{F59}7yi$I
z`p@mL4vilFb)cdk|F?=CYQ5L~`|+$}PuX+I3rAUR+<x|7Z_^^D=Oks6xx+IM_4R&>
z^o{>a3vfS9S?8Elu)`#lcK!eKicnwvA1{T};{EJzjp^Uh`#+z`|MtY&tVpbct(`%7
zx*U4yn%SZq7^1nR^LJuiGbujd`f`<V@+7qKw{=MAT3MsSj$Z#CB8%eU$<@+%n&6Pc
z#_<oq9l<JQd!-_w$7S;>Z8NVX`(Ff|(A#T9z51#B3sHE+`rOhYx0TD-t8o&qa#8!L
zo=@?u3qc=Go^_$}*4q57o}dW_tDR{#j`7Q<1K+>+3}1;(aT7MwF7LTj51gotERbFg
zn!nnZc)HcoQ_rPme-O5F>+?X9NbW7rq=^RjozokJ-S<W(B=z~#%#Vd3L&1sju?b~;
z)-<AaXJTq0vZHCUT$D!DC|_S+i)Z)^S@C=T&q+$H(%VYK>ubs|k4bgwN2FZv8=)G%
z9K0yjRW`TJ2=Q5KG%S-DZ%}XVI+33qh(4R0Ih(~v+e@pgzw>PI4&tkIBJ=z9U*A3G
zLf#_%52*qAHI#qH3Ot7J_6>x!+J6q9n0WtJ<@o>liQeBs97;)dagqP)enMhxAkt>^
zuh-W_UGM73<F;EBdGTWS2qvyRLD~OQ;t{97iixF!WD$@8ZeC62n+yqQxiPgL(*OJX
zL>piPyNL`|R&pwd3DVi8KtG*D=MV@FL84C`B$`tsT|933-y@DNUX3@?NG-OW2iqqt
z71fyeO;t!rk^IserJtjK4@f$FN=k6JEI5c06S9Cf4DC&?|GgAQx>==vV~}99VCI;w
z_t#I6TnC8mzAP<sz>=1C*h`v8frJ?d(n=WzCnuf0yz|B3`#I!wb;#oLrRBd~q-DM3
zM3H-r?2_o&OVI?&Ct~rBFXt*Ykarh+8f`E*mCMOPz7lB^sieydiD)MNUTVJy99$rz
zS{NIrMO0K&#Kk?;(MbiR{HITS(AZ6%m2{rshVSq1Kl%<lfq>Vrb?iz{5YPsCKL~Le
zhK)bv<)ztLJ_|KUaXHx>?<HW?N;82CeSc!LzLAkmbBZ8H%Qr@iNO>J$#`l>Kv|mrl
zMoR!KxFD=r<>iqvxPkfZ526px+%1E(dQYmZ{ntm)y+#t2cv}ItKNwls#$vBltJ7$8
zz}dxRM3(s^ncc|J)N~UzZZosIhJ9kwpI<KnGf@m<ug+l$YHLu5;p6A0BbYEAi*i@&
z_Bfp<z{7K2>7hzU5#aY7`3{_3c|vImOy7(|GhGw9^r54RI{_kKoOP1`JYwk)jq;Yy
zGlz4s`*ZM{ejnVVZ$4ePaQC>RB_+W0RodO%ZL(T?W%^|`=5L1m?<o%nCK0g{qkr+f
zHbmN^=7v-9Wj-UUmI-j5rKL7eKhUpT%gX9AH;w37u@y*7jfrtQ&_98QF<%B+YnDR=
z@7%qssi3gEx94?sU?35k-vChO#>QmohYue@F{s{Xkc*0n>L^MB5(mo0#%g+cK0eBa
z&fDL=UZ?ZO*~rT)onWe{=*p9R`;67FkC6V)cDXDSE{5K2iN_#+U?_#)!uYs}9msS3
zbEKsb{v99BP}W;okj~G5=sH#S4C7#DUeLNffphM?M$tmm4nx9?Teot=cpkjAefBKP
z;lj1Csip>&#dyG2fu8m3%!N4E&k$NWiG!t}pr9I=c;n_4r8hO`H0Q2OqO5eyjncCx
zq}>}HG#Skyk)}*!zq-oNLAj&{*JcY#fLi@Mo~8a0;&Mv8AD*~oP0~G)x3Rgd#IaSW
zjRlqfsJPGUzT0|w3UKL{b5c;GwzaiQOw5X>(sj=_x)HR4R?#XQEB3K5{SWm1^~cKv
z+6~Si{s^E3nw_SW7Ke-N5@;-8?X_DU`qJ8pQeeeF%vjAlwqd_2`ksHH{p37ypuJ~~
zINx`{=c#7Z`@-oVIawUbu-l26t^YYYq^BYq<yKu!4a_79E8>YP`5GEbmS+<R!k(iB
z86r+ko(XN}iT}4Wq#0*T{zW?b)!hxJlkIrmNOyM9;NfXmnMTN&!8NL_<<{cF!I6zF
z@L`)jA1r~<49;x_EB@rJ&HzQhyO4MkjQ85#&rhC5%AxgZ=a4MDz7(Z|6JSDZf~_xO
zEjEXRbakNub7Q4<u8RcrVUfL>M0R=oWsH;4(}-J<_0hgsivKgl)j$z<WNG&5c3lqR
zBc94vnIrio3I9xLHB7q#&!YqiXQKO9+bo_mzIRk-LjCsGsKegT0d8Jal6OAB!zZ8A
z^C9a37)PbTap>hbTw_Tass*u3PgEAn5k;ESBcn8_?jPv^ncXqlmRmQ&Atx#=U8Kbf
zoMdQ-#t-ex$z7z3?5_EeOsAg0`WmHjZe}JT?rHnN3=<QnU`n=%Sq!5(J$@jaTuw!D
z5183UM@LUXoyl0<RZVRQ_~pxx%ZJ<5?{T`^kDVPFM?0sorn*AK{3x@^ub$3C6ydqm
zT|TvXQCjsFB1b>(xzTab`{ww(eH9T2rMSq;OLrzJl~|ghTs4<MzR5@bL@<N~B9<v%
zOZUpr42Bj?c+ZfZ>O;`6T(oZ-gqUy%WrVHO2!lI7=2G;kk=kW*tWdRhd$!sMk}MEq
z;|7RCy`<>n>%d-j|Mm0Bi@?XYxVTv8deYJk&|9FlDO$7umgOJsG3+(}@$9f4^=kYE
zY3_e?0j=i{2-~3AkaFApYPy(^k70`Bq~Le8hrRccNlTO0m**F-O;l7Ig)O6Tr1ALb
z!9AGV??)>VUhY)8RTw_0zNXuial}pgGzrDPMYGV307D%I2S+1IeTLPY-56Q+_Wcw5
zgNr{U52<D>-Q@!{^4Zr3YfLsqs9=Y%+TA3m=XvFM6Q3DWTl}_1w11aL*190?Ijmud
zBlfD)9{;rW@7s=ouoAj@`WR`uj6~mGg=&B-+SF8v(&{PsJD-B#(S>{4E_;nmpHlJT
zZAM)iQyv?~7yub$c6OG@;h?{vp#j?Li~P+k%_6<dR@S0a6ixerH@?WzM*}DwBXw|%
z{?Cq;*GkV|f_lmP2#WHms7n?7AEEoVZ}<vr*}7?>uyVM#UC5vJVH+%yQmV$|gXP~F
zzXuYjK64&t)x6(CQ)wr2P7--%!=6J<H_|d^koiM!poMwFk93OvM210fQ38q!UDEfx
ztKN?2Kkf{&d3x<S*B0zor2eFHO!IhDeOB*^dl^-wzU%(XyaX+oX!$4x35)X$my_M1
z(PW+y{hpklp)=-fHyo|=zVs6lCh276KW|=UfdqQB3K-H4{tZ?%|IYQ#1y8*Jv|j=f
z;+B;3$AaX&D=Z|Zd5hmB<i%e79wI4D0tce+>(#QkDoiVGZ4PM|YZKxmu+6WJ@15+5
zn(^z}TRnd}7p$+|>t*XwD8m)E$P3xF+aKS5ta`H5>h0~#Tq!zkvsIAwjP~f{WH_&$
zhsV{E@Au^;Hr6OLMV};rsY9&VcCm^RLJT_}?{r%m>!|Q{rdxr4amKK}o9Wq%Gj}0h
zr&UDR$!QlO=r^LSEMlH)**k_x!YC;$pm)QGGbw411%be><!%v^6UPYk961jke!vTU
z%-I<{ZEe#IZh?hY`T6X?=E0%hUznaYD3K8nah5D>$j_fPb|Br`S-FQtI>i`GH@tYu
z4-=6+kykOyF}QKdFl+tKgQt+N?}yHm+js7WhaRpCKGvlOUEzj2YQ#_r8~K|KQ=`ht
zvgeBoJlW;%UOYfns9d$qG<R{9`;fRk`q4G<f=ffSzG_sLgH?BeHvEa06qizb3h5%P
z$t`R)sxDQ#o4Hi&oDvCE6XC;y`Q7^=iA$y1l%WCzlZ)<N>l86(=Y`NiY0&pgTuO?R
z-LQ{qal0z&8ai5$rjwVQ-Qlh_FO%<sFAsWEKY@$s-c-}Pt4%?JVSl6cW-&|iuOuQq
z3E#QSPFeaFf0d=fx86D4#X6#pNTnE&uHZJy7<S7TxVZUTU2zX9VZ|UTx0B}4PiK3n
zwvju-`H?hsw#CPmBD8qfxw)xb0yaCF%CfS9-H~@$w4Tbolu=3v54Qnb2fdM2)a}%;
zsHETf{uGa`CyUg}&0Bw!@?$#faa->sl<UkcmYpFh8>y<RXEz?jGqdm=_8H3JjEaLr
z#sNBkMW9H=@s>(QyQrN*PY**i*aMu6ksy)M(sog>QCg{Cb-`Xr_k)<UWM*nt8rjd=
zA1*%GRVwFm&V2~NuHxBM7+!GApZTWrNy;n>E8%TotFRBPPfpF5gyokCy8U43vJPsx
zuWj*q>(1x3?%nS?MDrtyJnGjH3rt5R&8E^_BbV3L<DfPI<o)xD>uQS;s=1>9?Uw1U
zUq^I^O1_qoGOt&lyNwb5oXRXlDh`h&`mZEm9t|B`HR|5uAuomFFCoqJDLFXPlzE#f
zZ3ikP8br9nb#`mF#53Q=BtNwo88PTRLKpUYWf|IDsnMTk)nvjN*Yt38Wv5a1dn**+
z;;cfmT)^3&#+FcYK&M7QNy+t)$W6AxJzQ)m-}b}}<JGGaWaKNIt1aRDOBs^hSVQZL
z@=EMeumVXDt7WH}93H+)Elt|I+Z3(iUKxmt^cfAAqvZqi>bPCaaqAC-1e|3EY~eBR
z)O~7Qc@}Q1l4j*CCKh1#T(i@`cVo-2_p48qsdP@(9t-&h@ttRy?Ae1kZSnCbQA5^+
zljSB4896?58x*hL`T1RY?DTE8lbqM(G4BI`2ao9sfb%;wocVY<m~xv=ToL9pe*VUU
zgoF@^!H8bX%iq5zi#4kqwp5Bb#(XFrKC~Uqc%fPCDLRV7_iJcHG8Q*i3Ihwv8Bq0k
z`ZGsF(6|D5R*0*3?ar0<kU3m+)yc;NU4P^~YY7brfR4$zA{SA;7cMTq@TWr9xkM=v
z;N!Qob(~n5o+Q;uWRFNQ=I}r>1g!VaOv6QhCzHzNvmv;%^RcRGqU*zcr9(6n##*E+
z%+koN?NAf03&w<VC6(MJ#+B;4XK$U+!0jput$&(Tn)>>9XhZhq<r{CW-y-9SO9@|~
zwwkRpTU%w)3^6jmeBXMpt1TIw>UMQDH<uJSJ*`RZ#m8`{W?(?2S66YH1FS$wmpe>2
z62Kx*QLMj`kCMvZ{D=rjCH5TA(ediq+U+fAWfH0JQ&Zwm0=@c0!1>@W2oTAj3MA+d
zksaE!Z*Mo~d@M_h<!2x{YLuHjG`E)OmeKV5VAn16#L^3r)ZN{Yc88c9p`iyS2TPcl
z4?E?~0VIBKM!=h&3=OvsX%D@)8)FdM@ttD`8SDDLS(mqs8~8|A%st7qSUj8#Pf)8q
zBoSV!cj?vodoKycbl<@KiTAUlf<8*aLn2K!E-@dcGH&qhe$sg${nB#JBGW~vzN~CW
z?t1)V<By3OH2gWzY!2>EvInus-*mg5yD*h}s6_=SSbn*}hWX~tbRYW<4W{Gt#eAmQ
zQ-Eek5%luxJlP>5+kyEiO^7^n4UB;|`1%Qc&Rd=QN^>+Ej2D*QyYjdovODK<Ind{!
z;<aDDO*YD++4OE_OC<*CMn~oO;tJ~W;^Owz=Zu=KUI|#vIft){mi)F^rpZ$xD=MmL
zo|G~R0ta9xr_8yAteUt1bf92&RkC}1d57fXm7}Aq8Z%@<kA|ROdlT*88Badry@8Id
zDQ0XeDH&LHG1Y(O;&L4)E<|m8%8xl_FrN3cZ-ae$dOGMV%&(JROlcA#ptzKgx3{^r
z(W4L1P%M|Out{k1=W6vj1C~2SAy60iil<0TEfX*3bp<Z10%yN6!IRcuYjV`U3f(X0
z#Z76aA3Wh6IWIA#YJd7&sQUZ*ZqIu?Vn5WE>T4S>jFCI5wTo@~H8N&&)?4D_b=d!Q
z0UOh|m9sE5e|%Hezx-40*RRsT!2o0$OyJ&`-m`RB+V^kZ<1g0ge{qh5+OiurAUf-i
zL`Sg+(Ov4Fg}|dU48yEvw@_GHZ9G!xe2NPTv#+Dh?@u);E+5OM&ovd4HL`2Y)D>0*
zL>SYjw{eeY<K4%9QulZ&p52U;zg5Vm<cIymf~A@m>%AxB+~UJ_nfZ1c{91%<@d~;=
zUw%6h1!KMdaOZ5zK~F(JtI+624&oiZV3LgriEM?li?iW;4U>TUS+Uhpskfi^Jl?#r
zWKJGn%PFZVgY|5x*-J;*gP-3boKvvMMN&;oP1q;XhCV~@4ej+@;X_btz;2NGjg<CI
z(H{o7xSXPoAt6nkmpuHzfx%1+Om?gxA7171dTdq<8;3pN447-fh@=4@S7?_TG2Dh?
z@J<i5R5LwY4;ilj^a!X^N7Ccj&PCpaOe=2SyodX56jUED+hq92`l}=CHZJKyGfPJ;
z8ur7uV^*D@GwQEEJ76Pw%RyAXnEw8qVGk+j9$TVE_c5GqMnW2tvyyXeKALVoMlz9%
zlyq)LZV<u*5_UR1Mv;k;gxJMHuRgZ#>33;@+%AKi?n#U~acOF-3<{J}ZT;GK;u}Gt
z`?>VF&}idqpIGYJ+E)2q%W%l8XouR8l6;b@Hu2@VcbBOmaz1=utH5+}Iwj}kZ1H|`
zk?(#(VzBGm;n`f<2O=zDnCOjRSOg%QpZw^Ztz4yKukEmB-@m3);!GjSB_L~ci^qT1
z()@--t^V^&5!2mm^SaJ&AKP!%9MF(!cgDe<@1?M{otoO`NbFUu`U!pVA)f_;qVfJk
zgEA5$gZ}=U+LV+Wq`FU^%vV2+0i*%^aVkDlRAg7~Woa%rW(t;-l%&eh2BqNf+blgQ
zF1b$j@YmTH_l-1Pq2Vm?NT4gMuC5Nm$)4aY-Tj1W3@`*z5`ve=9F-J!q)E^`OipfD
z^4!F(e8oOoh7JNcwHN}z+i7yNO3CzwNJ^?P&Ms%y(0xNFD46i;p@E0>T+TFKsf(cp
zlkK2mXn1;hV{LD%M#fBXk+NO=y`L|Lj@53lo0=BXV)%Ty|LvxNf+0FOn(zDfpBWkO
zPdx<h)$rmoB?$|bmk*xo`jL{8&&<uWW)F%y40p^^Qp#&kf1}tI_qk$>=omXfGS+pW
zKSI;DK5=&T&-v%ZOrHeT)s0RC!$%a{uC2N)I}^w)=#V+2)H2=N9;>K0TpM^zXq<>8
zDx9hvaX34}r1$K4pzrAKMuu75k}CS&BCSV5NFB$Vk99i=OoPe8=j2FkiTvy($~Ph8
z^{^%$jfGlwBG-co(hr&xVNhdpKiKbtu28+sU`cWD?*3kWhsX7*kyR{gH(ulne;qfi
z91hB1(Wx7wujbc6Hv&_#qr()pT{esP{+%=>jlxm2&8V1|fjBlwT3YA18XJ(lB;T^r
z_qm#|c(<;WDud$Up7M+qvIu?N={3j!u%BuPgC^;ST<TNWql1H!)6;7GPUiH&ZJwek
zCzpe<e90Kb?5!1hvc{S`<DEJOEG%rc;k$HbpfvCAXISS4uP~GP=5&oBnMa$;ubx6!
zll4_HSfkOFo2=>a9MVvsDl@moDhijVmW8%Q{n;&mRN(pw0U~#2ZEJLd-Utajl3h;}
z#{sIl8$?8N*Vq*hS>Wz4fm89!$y$u_CY*G%RL=HrQ=jK8Wi|^bL0iVbSaGn|vJ&Ve
zL!Y`CtFBBoEC15YrQm9>S=Nf0Oj(B$S`D@fIL(-~8}d{VEs1y6)+WdF&lL(vLU%}z
zE33L_51Ck4*6NhlS2h1^NO=_RoCH9iLC3<t>vn>r>c6u8#Bz?qv-N#MgeIkyQvuJW
zsTtkv-0M^`LBdza)x}=duA$RLOEk(%K8&QIlD?yxX9H`Bybp7WqJB~mA1BS4itPB&
zkv(~;mm9Kuq{w6HH$f};&0gLMX{r^K;FE9(`ldCh>+De`AJI@qt+4KCovz)b8Jr>Y
zt!;W<rh8?cF88dKo&WggXIfSbpl59op>?;UKA1u<hCHUVt?k#l3<cA$oUg4yZEwOg
ziuMl=fgP0*pyEP;%Gw190h|{gl%O>HfqiqE707N`g9CC~oXluL(x%eM1q=h7>>ab^
zO4D}+YJL|9Yfz$cZTJ|DrX%UN$~a%9iiY0cp=EUyRp6erp|s4&H7%Ed^#4D(0Il<F
zsZ*n+jg_4}qq;vS+)D<ukq$#-&LBz&50`gqnl2hP78VksYlOR0Te}WqW&mY|oW$q@
z2f*a^8{|(%L`0z7Bp~OuRm+!?N#bDR=U?6`Y0BW7SzwhNgzBJ&+bO6OHH0=Jmfn~y
z@_0YFmyn>HHMs>zZbE-rs??;X*?D<GgOg61V<s<N<Txf6^wTS^eHufwT_X9V+p4e)
zuP@gKh2rwqbKC#?2H6jhH#UGYp$Z$#k<AU9v)6BZI!0}kd2<tB8Mpy$x;4lB^gMN9
z@!XNb-M#&XKdp7@ErD=opt8!AEd=m^uI2spx(jg4Qp499#>Rk%yCVq0%p`hk6@TiJ
zoT_SxQdNmY?T@bTyY9$d$30ZzoDPrG3zrR>uUxB-IsG7dd*|u-YnUK{n$Dmf&6f&e
zpG{Wq*x12ATdMEcIjdH0_gC2Fw2&hv6cuglodL3%eO(GA@ZOv1U6`YcNbx}-3F>1L
z5B$)%865QgaQ2pAQT<=rHwLJr3Q7qmD&5^ENJvX5ND0#29g2#yN`pfR2nZ<MAtfC{
zcStu3UC#pj{o{VF>wa<13y(tv_RQ?r`x|SW=jR+X5}+=%{&*7NN9w4}+YhTl65_d_
zpZYG5{QQ0DQbbCG^OuqG?|NLtc?P;a-IungEw$Tij$T>N0_IEhMp$zM%zLqJ3&wm~
zifPK1@W{Jk4pJ%j>_AdghbO#o84)o3TO;Y^z|7<Tbr7>gXod9@6~st3ZZ(Ebhe^FH
zC+`TM5>rAke6(9MR#erhFlZ%VX0}}Xxe!ev71!L<^sW7Zc_JTFSm8@g-3PD%6b=LS
z+TKJp1SuA@!B<qpVi(Jd_`2z!FmbCg&GC*{z1;)0`?SU@!^H$wk*qCkWc)6-oKU^M
z*ac120k>Iv^XS;ps6MSF+yV5cdE%XyFNZ~|bstu5g$z&=A$NZcEcRu4?p+f8GM{VM
z21pN9mWvGPJP{rSL-WTik(Y*dmo}GovY#J$N5my3{ccK+X09CUG0YV#VRy7o8yT*Z
z?J|&xo1f=)#dS#M1Ej2X$|ai6<y5&iVHbuN*iv11%5csF6B|3c@k<s{qH-SFU9sIr
z>+6pZi_NSF3D<D8R9dX2?rxxNI<q*wRZLPelDUw~Dq31|*>r#(HDr(zPVpNO{=V}G
z6h!B!^_$-fuq@wVP678sl&df)V%SL)RE`(VhovV;xYI3-x<)VOU*D``Xs@XmaWk}<
z%FG{9Pi#-oNPjR;n4UD%Rfk3SBStQRlc+SgCy&;$a=T5MS)dwDEH*`U<=(`muv5yc
zM|=O2c76RTuOGp)?oYqdaq&HAsNU3KS4%Y+{igde>a5E0s|#;1$Bj4R3relYVbEl?
zclmyRxOXo18y4o;*-fJG)V={C)Id#*caC&s!4Tmt$aqS-O)|yxayeJTSVRX{mXb-Y
zUSm#6d$|(%jDd>?HT>Y#(d#VvqSDedWyD_{&(mLMMJ-XR2u%d}>6#Q~M!c10w?>7I
zvu5<RPn)9scBGyNpG9;=sW&6LloM6KQ5ijp7GK(vv`jOGA@|aH<Us&^D(j-=%I_#r
z#FV`q_RLT^E1r5F)@dr%U2*)Oz09hW{??$KJ;9&4hI6uooCQba^kGf)M<14fc`O>I
zKGHr`$3YU<_N5)o@pOr-Dj0M+LfVH4o%U@`WiqXLXlNyi3k#?<t6~WjMiDHw8YL)0
za+5^9dbEsGCt_)CY<yuMZDGN5!2mXyyQB2*+Ta6}GZPN089D72x+v03kB)kflgC0h
zltCKX*)c-e;!Rh~kP8RP%|?O>&D}zObS@ezLC#FHOmuC{t$I~UKlf~%o!?LWDR7I2
zeru5_CzfToi~epL%`4VUJy3b@!7Cf1uesj$;L`4*<m;<k=eASe8}1(9yE^r7jAV!S
z+btnCSjXJEPknH(x2>jTQIf{pSfg)x`WA`Y-;EXZlm~c4pw+xSn`Qr*7ht&2xggfa
zm_rqDlX#H3$M)v^y5&JRyjRa!2z__Yle@-f<FgXskd(`1_I<T8sX@bAVRf7SpVbyV
zi(Vdi>!|BQUZvG%Y76L+Ruz1_Ml*)d<WCFt)1THROF!R@)`~k*M!Gx(9ic+52bc0V
zRantj{Qgy$L?cQ>4KiU`jkv$2X(Y24!{sn3;WL_=zYpz!|NN~Inkw^%9yYY3Aa*^z
z({|-Jmk;+Dtm5=TqY<$<G}v(sW=+ZPVxLF-Q}%=z`i1v$s!b7p$A$l`!%MVsDiQd3
z_14*OPXA#UKI_F^6#TEo@1K4?4<!NS$@U<B?|p5z<B7BoHP~66J|1YFwe%m1RqP%n
zO(rf5=P9P?oIQhvaT7v9uorEfroOm();;#Bpe3+LQ`U8kX0vq=ug@tfGxd-7b~r`h
zfuyq>DO&IR@_XK;{CF*)oH{r72^nk$d??)Mm@I5mRK$!QKQS{qB+WjFx~WlcI4XR&
zn*CK|H}Y3R#R>A{;K-7|uV8n#_6B{Q_#<)XQMm2ZNn|qSczIRD9iqb83q8K;*11=B
z9Ct6Rf2+wO2(#?pHIk8WixD|)UCFk!%_>7}v^O<NZF`h@&%j#xaE`hXn9-HJ-O6W<
zdNh`R0W#!((_;N=al+;oS9P#YJLPkv!PD!Ox-wHX@1gnk?rq@SoVO<}0cd8)$+$fx
zeO4>WSBDTBvc_yZ2`FAl-K7SK;~2Kd<YrY@Cl_lh7iVW{^9^SKh(rn37Zv##>oJpD
zR+eE|u}-Moi7zi;sGj6(F}SohwlZLS<ihl}jX-b{{k37-Nx}n~!<|a)Qm2U}&~>r0
zuoQj2ZK=ATk<~iSZje@5@<HhAA`H;^bI+b>KspLn-FEIbqjt32KCy05vUqGX^1C2{
zuK&)<+dJ9Y5vHSWp8F_ZUymYAtE)qYY}|ugz&y;(DooGK6^(yTa1BIK;^5?~Mfn)H
z>||wo95<h=Z*5H(=<Aa+G13A-SXLH6c#XI1`5g*&s*OO;<Hu>rp<y>8A|hxA%n6xe
z%XcbdpXfF8DL?H>hstW}pG%~w!|P0euwS5eFiUXJ7AcP8?vHGfyOG=;U@Q}GJ3(Rh
zr@t^OAv;4e!HpT)x1Z`=EUx)}seXt?Mo!N9LIgFY<r?w)^F<5{dIFnz0o0|VrG<rV
zqi)KN?@bB{=^4EhA_xdO+Iw$;FuxNupUbBLSxwdyWji<j+@@%v7tS;fbI)yUL&~ig
zVJE)jawM#EAS&jZmi(d1(7SqkmawBkK|&tte8o29TGTg7*PYzFA3}C*^^JnOUzk{%
zV{S+7y{#DN=sQ{wGQCR^6ORK;^VMAzrlv9!@;YnZZl)sH!=G?LFp7zwD(9aMj?ENs
zCc|-jl!^=sC1BDls2{1F+9UJ;c%Jw<YkjeSjT<|P;sPE&zYx<JYv?y6)#+N-3pSrW
ze}1-2dKME4YXc;VvXYXzYFwQ5E7D^p#N1tWmYh9dbSe$euH1f)5{q_g$BvHke|@!9
z_SkBw8z1k;8^CIdtJx*}^A<!eyPWEJsu25YM}=|wZCED<KAsy+hlz=YKYzN>9nRHw
zy6+TI9Iot~eBk8Ptgs7`_A@n2&&k2fE_ST>DJG4(G$v@<Yeol9n$e2oTnTRB<@xz!
z)r>;-qcpAT!s5iNtTxZeqd~ox%8=L}p|4jh9XvHnS0ZH7>^zS1)0C8$w1pb}UI!mK
zPq<(GUU$Oqeno7y&87F=j2v74)vIc@sO}!IP(M|SD(9sS6_=R*wazFkHrsiur@f_?
z6q1pv%(kr(XTSDsb`bGZZ#7E##xs8VxgL0Fe&+JEi?)uwk97CbI=^OO0r-uUOsitD
zA`Pi{jPlI3dg~@MW>C8{Jw4Ld*%rvUOeEH$xxi#`)uau;&CCRtV|(qwpc)~H)$-h|
zne|+gX+Mhn(NGx>c;TEL#s93liONqOHg6o#S=w$#lx+Dgrea)rZ*62r4qMNO<*8K@
zAp?2OZLd>TN?;&9rkGUnWLNU0xp_({2KptR7DQ=>BDJt^YF-`>C8fzs3&)~9sBW8@
zmcnxxTmh5?eVT#pZb?w^z3jNM@bT_J@j6A{H#N_#h2+6O6N`^m@DoA4H)j{orUOv`
z3}IZ>)5@?9Sy-ibU|6Q2awG4)_>vQx^nLl@xhT<j+f@-)vd=?9VF9*A%$8B)>{K>&
z>G^Q`yDqO*{sGgX>Cns<qD4=R)Yg8Xf6CPKvQ;Uy4KPm&X-W-@wz)Y$MA#`xtyxUS
zw6sTER!jX4KS~OCdhEZ&G7M|tYM3sEf^UESMa++`p%CAD|Gqpu!>`m7AhCfU&USZA
zh$%HFIId-CJ?Iwi17eQ4VSv!&rD0dyzCyts^s2MP0naEk%WveZsiFIpmqQ-916O+w
zc}IP0^EO?6@S?X_sf2BI>tbj5;9Swb^T2+iVWa$Qa%t2v<{@)22R<HBM#QJji{}Ju
zv(s<hm?_M|9=9k=&pGU<wlrNHrn&~(DF44oFTRlrgJoC-WXeT7>06r?m-M+@9^{tC
zEO^|ST^q0Vpw@T2<jw7P=)T(P>VDMNcI(p8j@QcKkP8=HF2f1#E~_t6o62s%3W{!_
zMqerNkjWlc@gOIhH&hDwl992wF})cZtJP}@8;h+fLOz6CnzCPAipI0#g?M8)NssRZ
z;!}%5O>b-NDW}I_?S4u0<mCD23b(z<?ldGV@$9}X@@Ch?p43a`FC`={U0`v-Sod@#
zy3TUZC!^URuJ-CJ!P$OcC`_G><JH&!`}^uHAbDXqY<zhgyLzIC?cI2h(y5?pr3BuW
zevZN0M8>;%k2S$1V{RYZR_E*6sL}o{Cub7a7c)Um5@qLQb#=SoJIri`fe)N-M9A?^
z=MxmHU?S=}f>rLmDiq0FTwHqlkW{MAoBpinPH$$N+iQ`>Az}7k;%|>NG#FOD4%pp&
zw5Ue;G1B$B*~zz$`U8iD!)t5ry}TYQg21LdaO)ZwS+3h2iHl4mi*F3{b3&q=i^|Id
znJhL0cNiRPZU0_|X9urBJx5!fn3$iP)m8(m@9*``pEE$X(`%cpQEauh;q201hTpmT
zgl5plKGe?EmtBG>;^5#?$0KX&iC97YJoU_JDzWP7J0|vh`KA$g6r+Y5B#DXje;7rl
zFM!6Pv(M<Yy|op?-IJYT{!cBy@`;Yl2L+mqt*zv*eJ)ubvnnl}zjGBe6i)%4Gp<+K
zG%vKfTNwcEFAjHowY0RZTv2io(318Kh~d<4>i+V@nDXPVhK7in^9u{QXRmYij}CmC
zTf_a&v^6z34cpEO#bqm|L4uf(pyT@FjbRAv)3Ua{gOtxx$I<TqE>>Y^cdsg7$?9rr
z<q>?MY09y@A(^Tf#cEHpwW3+?+D|tfU}K1CYT~S@{#%{J68|iv^2$XKgvHwGsswM5
zR`#kUAjiKBzdsm#?f&0Gtl7!Q-m=6u{nZZ3m_~Jv;h7vzOuF|N2Fhi%E!3mFg>ae+
zEEYRZFZ8?4D5Ceuk-2RBKkdp6zP6~VtQ7n<XK^@~l^fZw!&yd}e}QYL4amrjoD{jK
z!k22tvEQPi08LMfoS8rMAr>)0BjnY?gi#?6-5;bdb0r0<k0dMq(r^8=?SOtdpO3!*
z5g;5z=Mf3NP<>yY9S(@IlrvYLq@#nnc2)_elJNuBY-Se2i_<S)zsr*Q4xB2lYYbFO
zzU@<lH)kZ1aU=o7D$Y2F-Vx;Ga4AnIUh@JRoaN1T(4J_%{<B<Rac~Qe%gD?;i$!ZO
zN_|j@G5GLQVkY{wv(BbS`fN??br;@nMaA*y@!~HHa(0~crQw&n+|Q(yRUfP3JB~|s
zV1*gLlII;ia`E&-=un)kNUUmy8srl`oJt_e|M|lzFDnBX!+$NO(IjehxrgnqqM?~3
zo^|@*$md@CTb>Id*?&E1-mq&XA!vO{FZ}o7{y$WmUK6-v@jf)z)&IViYY_kbG-rpx
z)^tmVDV6{5tJRjr@%QPD1-3aZ=7bl}lCb|J9`(B8*JU{N!Mdq8T-BJJ{j;-^GZM?#
zG+hJ(hh^~e1?S#1YzX|-xf?|nGh!q?OzKP9A_<d|MgG}VRGC}vTuDT!^<=$#$GdXB
zquKa$3nceqIUx3h<_ZX_&!6t;yy1@A-o`I2=2z1m=}A*=%2&r>Z`pe<P%cK^LYDM<
zQ1*7BPj<g_+7nt1GHleR&!0m>KQFD$n$oh4^4<F$t2>>!p%Ef*rfby+y;kguyHnAA
zGxQ<s)>zQm{uoW1IL;RQ@V32TY20x!aZ?|tjrJ}Ki;46?z2K&CI2ZO9wt5x*#rNfJ
z506hWBz+4=wYw8l7qIy-EYu;59@@ChIjilFag}4Q-(rb~iU!{jJWIJo3t+m-z%7b>
z`N(TIb>j}roja_8cfF~=Ux9_W5p`{Xt5Ope?QUdYAw_aKor(`q`w6R}zWSS+FW*t0
zX>Bf1y3hQx)BgSYOU!&OmhO~p>OI-BOB=o}aT=+(Jp&DFLAJAZUu&^K7v^VujdAku
z1DU9-SAR@9tl&gV;(C92soB`D**=GL!kOV0{+3ky!KJy6S4P&+s#1oCVm*t3=2q`+
zlx<eDUt7@)8|_H%<ohaWnqdDzz-V%H)vzqH-G9rglj{fe;_U3|^z?mGi<PB?ml#Bu
z^gQ>zd?|W=dQHty-x1$YcJFwUgtycEDLOQ_$@Y+n*7W4E&orp+x++_{3=nNA*2ap8
zu;EJ<NwCT(`<LQ{5gYqDY?5Ak3zQ2$4PL^h+1=NztXxsa(5a}DLdXT2tr-m(e0GGs
zZ<MnXhKsN$<J$4Ca15Nw>g%Zxa<fHjRU`U#Kip^_=q?ZYG>#H(LGf?z-%GlD7WNE3
zci_a(Uafg4;tfX7`c-yS{*25poPDiMTEq<o%qt(#Iekd=K|mlf{3uSfduX__vt%$I
zfsyp;T&}op-b3AzgeKJQUGc}ZMv_-$wObiKhZFSC7+0uChzqAuHS7$i>*$Ox^q7M5
z3Oviu#Ps*~ho(__5AJx!5a>>!n->vIKpI#N>Wnl#l|Y<8Y!(@?X#=;?-Q7KS1B&R3
z5HAAGLv4?}`|KPbkv7gBtQRkXN<7Owh5f@17KyED_<^JN_M_UDo1$F|I~bVn3JMC{
zdDSrW<YrpmqC7$%D#SL^@vcY$jiBJsqitW)r`a%j%f)_nn)vC=H<-KuX8$SbASK?Z
z#5cQdKu8rVeE8v2HH-1&E@&{UZQ0`rhyqjFHF(0EyXK@EgBfEe6zm<q=C~~xCq~)X
zb>CmnAhM#&X-j<+s*7EZq?)>KG|Nm~=*ZKu<Z+touaoXuQo-;V0^gFb?mLeHqBT%W
ze=dfE=mcMOs#IdMB7a3>*BmvQ(ItV4lR}Fc<|-yQ+?0CWnRj{V2A?ylkbd?HGY$-W
z$Zn<NWOP-(gMeGRkuj3%e#MW+z5Vy}BYAAG$>fD2nAJM^Y3vj4Z=d?I=olbh<yN_D
zg^<vWWj_l&=Q1iysl}_<Y5nIkK$fNs`iqKY3~0|AvDq(lx3si?wm{7PrdovMaM5~x
zpVq<dR4_O<3;?KWJy~l$RKV)JTv&NzuBkba?Xg7<<A%;<$(~CwrQH3pcu3S8*NZA6
ze$Pf1ROo>p1L}x7#-SZKcA9SUIr=W%cZ8V>8z$8=XIi<(IEYXj%V)|M5x&?2Z(=&n
zzrvW;-sdSijLKCr_?>8S%SFSuO!v!*(?|lT4u11eKL<)V_T{yc4Q&dk7=1wlb7wOp
zh|PQi`*NHaDVim%a+}A}()4{E;`?PP^bs77W55RN@)QH@J5fJcv~(P;6PJ8DI7-tp
zGhd*MXMN4c5cFKR#b(q{>-Hqh-tPvPrs{-Eyd)2O2ls<}UuuivGp9-t5ttD^mmc>-
z%RC;_7Wl$R=~Vy~WLaN!c0t;N3Ds;v<fCUsS3{aLnrX3dt}Nw}asT)=G*p_H__|aw
z-bl%<!an0c)$9yxM~gRSprsS5KaiLxvac<ginN^u6EgU|zA4Z!Ff;Sp?}w@;L30OM
z5+h)M&nMy3J7zmI8GYr9_871B0m&){FDokz&)U(>sDGe;u&?jH!E$W=VlOCh75S~L
zuM8EM$M8Es5=UQDE;m!@yEkt}bDh?+5c~j*v!}a)dnHQ9UEE62%GTCa%cAWN9jo$i
z5{u9HGry$=n2dshcZ#g1@NV@phj2=W1qRAX0#^KkRI;;kvFs-*b+^ecbH4agw*+k>
zP0gD^?^#l;vZu<@Yv#^q8LSDcRb2oz>G3-pQb1<A9qrpo?}0@Omy8ePuYLGBrSjxx
zHT&5QT^g9R(2~w+p8paTbh2<f!(B;BLsO+a^U#pkxn>VD;ZAiYD=Qo*c4KCa7)W>)
z0~XL~B6xs&)tYjNoX2iW$3@&Frp&xA3lURj#v2<(dlhrF)R9reV`Xm^K9-z;p{4WT
z`nMK6D1imc`|CfnohLFL=J8{La4eZSoP8Ssp#*#`>+9<u8(%^XvZqG{8#^83IRfOX
zlgSygZQ3cRfq|b0V?9mUmek5G81b!W<~Y5OL0!z0d#a(~z_9tHTIX2-hr5G1W~=*g
zG4%rJz151Hv@J?Z{ewbRJlW4YqoK4h*}isZJ+9m2>Di{Ck$B@ZHKIy}vZ?a7(L2iN
zFQ6{D68`?ytciH{kmWY_NaE2gK?eEu&%CmDQgOvu9fC6@O*J*P(96xk*I$W@i0A|K
zJuuZCrlP8=tJBhq31nCtpV-+!H0YQ%-K8S)P<~rtJCg-746|#ztoyki8f@^+HE%ql
zy30|eR8`rPu3)l7`%37=40EaPp1`&Cw92oPLiIu=`X?Wk<{Q@u1i`Lm&3^QyA&)jC
zs67Q0^+J^)N?tg7dQ0#Z8yOCA@A`Dv$7>(IIe&iyvNoJo5}tz*+0Q0sXB~g9O-wc9
z&RMQ5@!A$|fQlUb5;`yz4y#^WxRa0ot>FY4zV|z8Yu}gfcFzk5PNx{_Zhz*rQ!Mlx
z^KhXfxD11h(Q9>uG-U{o2M2$jQFlIPJ`lzPMgw<a+OAC7I0vJmwjTn@Tgl!I>fS{u
zB`%|f=;8St^AB}(DNi+HlFwr(?{NfNUwilN9r(lx8mD)LbNl=H+Fh1!B}mfT9GUC1
z)bxm0-*fZhtpEY6`@yy#szX%c#j|HbZ%KeBy*rq1YCP!=X7tsQ<JEy&LnKFChw>{X
z^24oc&(_AqgsNx*-#TusU*KUoy}%*XRaIqxr&6=rWedOuMmNjd!El@tDtvOdNyx1A
zW$YP<%9rODr$L7eoDgcV55RM0Qp>3=q4leS3ly;P4f-7Af=4JMK$w#Yopx46KoFM`
zs`N?DG{MHDG2AA4cPY1h?t&U{(6jxSET3uNX6}^ljM6hQChs851JQLnOHxuYe(^N{
z>rlpn+%*Z~-9$a`-`~{V`4O|Zxq(a0LYCF>3Wv<T<Ax(2b9-BxK}!R>Kt+5?$;|sb
zw(X$hq2d?ZUq3TnwZex<;Q{M33_^3asm-^S=GkS4^>rsh!L1S}Xgd=UESyNcv)G$W
zc=-)BHl5Iz9WLe7VV=5is^Q_<;rF+0hT5AIdD=gF_G|PAcw+MPwK5vzO?C`+E5pgm
z6~kiq+8*TxF_yR}qr;4BM{cPScl;k&SrbiR8pgQ{G&HyG2pLG}mWd}ZGBD(;5yuPn
zLxtI>G>Cm#R8vG`a&ye}BRK~wRKU*J9>u<ME|=nHt|5G-J;3>L5ZH3)e$TYA#vPX4
zV`H-c2Sc3eN-+*8m(W(X5-8Hg$?7}sgmx7ayOjB)Q$J7&3B6)kQ<powbQz(8BxXDM
z9h;&!gLwDsDn|Hy@1XbZU&a%X5ADQNgHj4F5G%Fe^KD`8j{_=0d4+Q7qocI*Z1%x8
zS4$oGms?0Ag1>i+)APO!hr8v|2OT=IP!4%%wm?kT$98&3xgnWkLU!*z4a2bPJ{x5S
zDYP<#gvA>W;`gWD4Jp~-5n&YV5Pl_>67pmG!-rpAX_}a5tG{Ju2s({Fa8^@`GlkxC
zGJDCpcNR&c0J`Fck%W4MceTQkCl8k;9*MK0)VPlVXHUw{-!%`P3_nAe4tB!>_l(Ot
z1S=cTlNIOdun0*=N$u2S0aR%G__3BnP+r=6S2EPw0!4Z6O3KTp#)185cYDZ^+kCJ#
z5RWFLk=$*q8nD{{bnmQP_1NLZd<`B{<7iyGImfM)($%KRzWM*u0wBX_y^c`(a9-ZC
z1j5ix_OnkW)svcQLM2xFf7E=^f8N1bUwOR6>{m>i0EEaUaJYcyS#%l?%&G03$F_d%
ztHraicO`-puC~;z=S6seGF1LEkM(N#j^g{n`P4W$1Yek`-)l3MzF6m(C=g>;ZuLF~
zdc^8cqQ}X>*vWdZ=a-@~*jRew35_?wl5l#}ebx2kc&Bo;bXBONehpR_9VK)7=k70c
zkMD0S7Mcx+0L6oW*+*+ULDZ+>U}SZ{u0&pF@69>1B6^R5p|P$TLWA!8E%C*uD7yHA
zO_m#{8nKlrCtCK+XV%u&$i6<4>Rw>-eI$Y}D=TX!qpKP9+JH|YMKo!DzXXs?mJX{H
zCTu+nG)2b~J`}+5?tF+>H(>WR%)uO{mnJ%7VT+Q141!hA_;B~fPL^6*n5(NRFsJaz
z`K*5ynGaRaGG@}yFbw>#T}2r`R!)^oFk`_P`pLm18U3Y=+}_pI*<-bsn%lgrU5CSM
zt#h_%+W})dOYe_Lj0GoGuITx-Anc>zYs_qHepm>QPtaHtklT7womvGgq791qC>vmI
z@6FPLG#JOj+V$S>n|?RI&Mo<HyMe;9J4rq&1UzGI?(RTe0;Y?od~U8hYzu<6b6OrG
za&{RgIaDo=R~~Nomx2aCoE<ZMalwSxO0%L&)3ic^t}oJpDt3JF#_H63{p>tWipZg`
z8?`EvS_jR?Xny{f3fvsP2ehTj3zP)0;#EHkem6ezoh7x+yrf%mfI631s{{gi-@Mt~
zg&6UdVArOnr<?D7&sIG!V>v+-DDHQeb{#mKSFW7WG0iKTYlnNOQYGR{Kk`43NJT1Q
z2pTJLpihSSL6&TKdK0<*`3o0}9d$^A2M>u&LOG~d8^epirO<4rprG(W#Y0p3DIq>-
z1GY*iEe!WQlYKC46qlAVtLMF^%2PKFB0id#r&dW~iO#~bLekRG8XFr!F?eDWYcNyE
zM5dUXQB0mT#se-@m+UzS;r-6V?8@V~lS7{rAQ*ALVjg^6O5%rGecAxsi(X_sniW0)
zxx()0gryRH1ru?4l`8FlXMFy>h;?o%kxB}>@$1)SewD_qMV1uLYwPPF6m1nKJ)_Jf
zKBXG6+0)d*dsp7h5Evqrq!MW@QshZEr90U*MaFUIXj&h$<Grm-xPZ5U5kN*p20l%^
zD_0Vb9vEmk<4-VJ(OXd=DU8$MsDYBJ?+8m$7Efh#xQIvWa#%Q6NxAk@tp^5u-O9H3
zd7gx8=(M!#7rb8^5sFjihBGr(>p-eYvyihx_2Gc2DzhHwmx?_qgviNPh6&Fx{;Uy&
z%u|9U(uQ(~gb__n6iME2$eC(m+WMG8eR$*sjE0RCWU%}CbXHdmCI(tn#koByo(Klp
zi4AaK8MbrTZvgY~+m`I*;t8J5+^*ZViZv=+cbE`z67n|;NV&{TGbvuYxT8njrn}Ic
zmXPowFc8P?JVeK}MOJK*RyZuHW8MbxjQF(z87fc@->$>)znP4jzpwJF#4fE^y4&^f
z<HxxM$;WW|Q*41W`~|Z+zB*pmdE*}9dSQM(8HjsLmxnBOI@IX(_FtQ$Ks__Zp~z(E
zJ`-gK-=yShm-24)rPU`D0`B_(U<m}nPltxf1n8|<Sy^{RT`3rgjFA^$v@CU4)&N3M
z=3<Pc40RUeM<+<SK-m~wpef*SW{crp*MjwN^w+Gc#8!O&5y<0VKr~6*Df#)(id#D3
zOG=xZtTaFDLEgP8@MRj@8Mx0|nK{CSVfXzRPwQA|PWh%u#!vZsGI%&T8rpX+7<^0b
zox9eElRxp`V&&(L(Z^pFy^%!J9lXy#AoCNH$E%H!h%l*hc?vH{=AY}yU6{9Ikk#Pv
z)XMI=@>awmu4^`&EsLI!RxQVjHjepyP*4^P^J+OI`H(viTdDRHJ#@E<tx3LeEt;#S
zK8I~)X6EcbQrR)Z$$e3TuxD%vt(QX?!E(jCOI5b#k?BfWTpUF?XI>u@Bd0qe<X~V3
z$Y(V_e=-~m(+Va8M6xEI@JYRj^E}=wD&iR|MtX#k{O;X=6ehKssh<bg%!$87Q|dMC
zLsE+CH#m6}3E!f&EBPH)z7Ums{l!6rU7ibULg-p*kPWIme{CZb7s2?P%Y7g9IE1RR
zt-K}O)%D@SbKKQ$SM!))Q(@JIYKsQ|3-)#2d(I{{!6G130*;lm!_svm>!&@lJfGib
zN)ZfdQU_9l&Nm2eWNH=$y}EOoeX%<%!}-ZaJ$3czP&WCv*e^W`%IOx4h=ioO<~uu~
z3-2GfkKr~@1&Z6kW$<i`D$Q)#&vm9<UK9;S^xZ#7MvXDUXdQ7s58Qb0RMxw|I+Jvs
zT~?bjn7ZzMn}*$-$&O)3j#S@M=tmj2V~lonZM5;9Or*?n*n@#}W_bG|dc)3$<5+>Y
zwvtTC?B?8WtK&m-aIF$xQd7$(3+#l*3qjgzid7V)rurMXyIXc_%mhzlv+^MaM`2Ee
zwm_s)e7-m}m9Vcd+BEQhi&c+Y!#8%rDFxqynYq2YJMY~)7nfHi`Bb#D5Op)vl`NeH
z<o7FJr{0@O!ZW5uL_|n1LcSUyVN9DQ#6}eL&Y>a;cxh;Mo5G|y1l?Wyva^|!mo?-C
z=~8cW=GZaGRx0vk<~wo;<ycctTaXavh5V!6)Zkg0jH%3z=OVhuKsvkJSQOOz%ZoU<
z{ct9C_=Q)wRg_B44>Eg>h}4Co6OTua9yJAo!jgOe#Z7r!z~%hK`6{-t5<a>=kbKyq
zU2~9Q=81izU){j9CX(P4RGIdfX`^#&G=<7n-F!brKJEUFxe|=CE9ftk+}+8@q9w$|
z!~@A(f6us|&*bFhMsjivUQgP4`amrm5gw2e9u5H{@Ammtcx9Vg5Ru&^oahw{%~O0d
zYW0pJk9I~)OZFxXRx2$vB}oTX*8HQCU$K^JbMv_)YhiphEcr05b8Y27)Z9R$k<_y6
z;elPW)8Tr9@w#Q@Q8+Fs4bL&uN{aWv6+su)WMGPsQ5ryE9*Eo5-!DlRmZt9)<_R*7
z%FQ<Z%Ke^fqdpm|?PHRgZ|8k*$r6taUR}6^OCh8I?9}M!L03&Mb6}I91>EW-=FqEf
z@j*FXG%_=b{}tKh09GwEOe7NN>~_2i0?+G>k?&c<Q;(0&xp-@J_HvmIqM%EH;5S{k
zcK^CB`uX9(muq$Pa_YG*Y07j5zm<@6TXj2;6$;N3`fb+=_c0n@@8vQ!l*f{j!_ba{
z6Byv%J5tC-WiYvpZ`h{IGP0?_z!mp+A|B)2)ib}`!-qnGksp&!9El9uK0A-Ux<m<p
zB<&Pbc-JgUqc*v7wA1eh?uv_vslA)B5`XXjZCN3+A!Fgi_7ZPvYmQ~bfNZKQLAS-g
zhLif>5*dGitu0WM+T*xK&V^t9ZHzQ{UpKkG@4~0|1#N$S%Por{1U=IToV?I<HPnyF
zVpmpCL0+Mrx|o*dOQ~m3^7ZS7g7Ds-VGXsl0mSU@Yz)=O&^u5e8;*<m;6nNjFS;@l
zfJKY_7F$~*k;|~`d#|_wvi^3V1A!w8i5F<C$?Y1emW%$x<7i!mhF`ZxBF@iI<)_H?
z+?bsro?2E*U%G6laol?+^W&=+)Wh6)1uten>at_`B#Db;1Vn<e-eFMnnKW=|N^W;|
z@C=XI97dr6at+%Rhi?&I<JA+#>>CR05(P80T#Z~DZxYgErVYXEFx;OR=T7yJ10tyz
zH1g(9X-K~ESSlL3W3U3IefZS$S4;Z@w6q*kZ@7vDSXd-)kGrTKSAIQHSO4^hO(~<3
zW00?inU?W!q(GFax~kUAt5<nmOg?gDL}tCZF5}ny_|eOY%Svp)QQHb^Q7vu-Q8N5F
z9cv0OE)HTCD0H5yf|a@FUbD81{CpYe=UXgT{~y8L^A>~HW7g%}V^peeXKc`OzpOe%
zw^f~M`&(V4<v^t=9P@~ww{~=#Wm^Pm^+qsU*xD!iPwQ`)Bjv`7fSSY(Acd9~#O1jo
zMtb@X{vFb!<%9=&=DGK!!`+VeW<6oOO_P&=lcE!yWp332t56v3_MA6oI^~49xWb!L
zP5|^us>Y6nO&g9K&FYDMaeh-lsf~_`#QoOOxhEn%Og^~e8Wp;4B^hA;N*Za)n@2Xt
zN3PjxQ;(Q$fT2a|X*FE^)$xU)$UQS)0Ch`hS;YGI91PkoLh@5CTQKbnKS*C1Wb8WE
z4pLv1*xw4UwGy+eeY38o?J{8;C=NBxZ^(K1xQdP>bxqB3#eoWw=}&hh<krv+d*~yS
z`??!nW(N5CNjH58p=Q<&Cl@pp(A(E4nm4o<wTHz{!mAR(n_?~723x<h5Y_f-iMG-)
zw#CPt5Zp9;g?#xTu(G~Y3QJ$Rz}*P|(^5%kdBd0%Q8m^ZVcZqMBD^*}2wWvWg{l`(
zDM$l8T3Ko7Q|#XU)((3LmUob1`uFb&gAQ4XH*1C?zoXunT3F1qHO_aRQn{QCB<@M?
z%OvFPSsMiTHt+nnWxlXr;<(Zugc@KCYwP^ADse9-n0}%3n~Ma=sm{1LLIp=#ne%f<
zzPsX+xG{r;!N>TQNM#5c=cr{#Egb`s@ZUBMHjefAw9K3`tjJ5OcNV=B17okXVOMk}
zt6CoHFLr$Yo*H}H2D|ka0~^zIVq%7JF<Ht`o);W*o1(b7)~zHjcrd&fDn!BS_U3rO
zB)<e!e!Khog2%P^V|#6m(8R!78f(uNH?)5B@FB>Of0gZF*|Zd5&f&iuf#FnMXiNEl
z&h4iVu_;2R(E9YIxf|tRn3OuAS_hVr;n~^kY6ms+VPWCFXMQUvAI<3nC#R$!_+1M|
zhe@O5&NFKjT_vQbJU%{{7opNL*T+zCa^kuF9cnohD5}9_Mb)8$<5vOBI)PX4sX87r
z5GpDa97j|hzGbufD2ZCg$d2W)el2G~mK`Lr9C!Ge+Ri-2gzDbC4)j&1HL#>q%x-~i
zy_+Gqy_*2NVR)Xk2OQ-Q##m`^MQ_5rvV3Ty)7@6#e(>7c8)jCTx|Em2z{<$7H5)1j
z{Ap2g?}4c^+!C;}lBS@b7(`3w>U0x(0rOq3z{cga_H#O46FQ=@2r1pkquVx<gIpI7
zQ$s|hzLZmUeejT@vz-lGQ0}zmBO5K&^O=6s9}9vb*e;J$zNjJDbc|$}!?tVZE=`q>
zTkqPbJV6*%NH2eG5vq<{`5a2dYS7XwygPx#Tp?NdbEuRQAH~cU?|yQW8A^p*zX!m-
zw525ZiY0gchv`7V8@h0K<hizyOQ5p3Yot{)@lP$F4D{7?MJp~3*9*wTKn+Ig5)>5M
z(M2~_K3kRCEJwz8p~|TDL@>U1g0pBe4N6}5pGTmZ6S!D0s27QA80q~~%*yJ${T;+o
zT>~`-=VNts^<BaGhVJ>fPv559+PgM?MUhJ~aFcwqSK;^H;z8uCj6E{`c{)}>7AMKV
ze3{GM#&m$FNWw28j%O9&&E+=}6#7f2pY;1S@wv}PSy<kVcyhV$mfgE*BLx%XQA)gs
z@Gc^YO;0g(!g{ZQhPi7mtb)G_=xOxbGv5ag$vks<%(LMvvqJLgY6%J}{S}DgEX<3C
zZEeq~rKN0(B^f3+cM+O}Ox#`CtMbBoks>lHcs5b<uGA?rLWl7~<JSQ+f*Mbm-cT+1
zeV4!w+OdU@@q1^d=VlC$YI5Xn%@(jzakaVKG<2CzixRvf+t%Ei>=P5ikD!UhvM4Kn
z6v>}IMWmE*#0A;=VLE@ro0H7X;&VO->W<Jb3nz^qm|UBvAs|-TUT>n$K3vp3Nz?~}
zW-=My{dwlHwbxtUiMXD`1Fj1N?H}}Ld{4}Z;+S*CD~^>(YS3Y?@v1ypwgj-*u!S8^
z^XvlmVBNX3xtX*S`FiSzJDVFd4~w1IP+FzAr?PRE_^4CqiHC78Ja=m-D%R^sqoSfv
zou4G{1q*Hy)vYK`ARI?|Jq~#^1Ho*V^dVZ;2sWPY6DsAfu^-Et%@V%eP<B^X_2`)X
z_NmK|*3>mLeX&n=tY}(}u{2nd_TXUb*hF)4xo|X3CT`|kH%lCP<<<;o_y%Uk&fFv)
zdW4->%?&PY=`rV7VL(IMO=xFyK9lRn(kPa}!@zi)QMOzYTyZsWt+Zsx!689m+B;Z?
z(7z7DJC^jlcan0!N&D*YLi`cZkjd(<kZqPWbE1#r%O-jblFX?lG{^tesRu{?;MwQ(
znpwGKNUY^ObjO<e&Jy|UQIeFJ#&B9GXjYcGY)OfVUU>Q`GP3ApW7qOfp*6MZ#6)5J
zR}yvuY;<JdPT*5M=alLCKvHcLmAXiYlkX^=8K$+ac_zo3%d3_<GkT4UjiEeC1DiN{
zBx2o_eTT7v33H#=>Mp_FmcW@MMed~@QAW^El189fa4=^57?D%qdY^NV!@80Y-|#Nw
z9nY$U@5lxFJSL1enqrl<5yG}<^l5YV-p=SB+lE_AeP20K@Z7TXKbMNV2v)H&G%|B?
za@xpCo8iAoW7dm}jhWIM0(YOWnb{Y2S;ekUp&egt<ScnW%4!SltCN#s<KCnXOk$Tt
zm#!ZJAN6_De4x|rgwK3lxU|ju>LJiG1zU{bEYfa*Sy3nOge6IvlTp{%khU&X$lc}9
zqc<8%t8;U^;Pii)b`nk8nt1n8^HmCYf%P}`F<>a0FQ-he^f+?i8*^}UEUYlR&ABnM
z>Jiap=vOem`v$9Zer@V$<^GN7anw&*uL2>GA0E7R3NMPiDM8P{*%V)Sqo1sFU|neJ
z`c3|Jx5nY^FteCKc?G&KY-~ZkT%inWA1%i$M-(=|w$C7PI~{YndkPZs?2ZjQ(Xa-6
zzqLy`9C>A!gHRs%IK}%M-%?|Xz)cd85{Kn|2#S+3piM+@nY)0iI|3a-TbZ=VoIqp<
zuAm=3e%M(!k5`?WDKO$NQ5S<OL`}gjf~F!Oucz_sq@}SCCT)=)MF?-uGCNqQ4v&tm
ztgfyuE=u<R%a38Y`#b_67tN8DlvG~lhDD1zonaRX;k;eIk0lS5m9Lbb3b7WI^e%sd
zL5!+O_|WWD$kdmps9r0_$Az8uHSFO^g_}dX_<c&3q*tc`1v$Ak81{(!I<;L5c;YKh
z?7np{m<mN9%(H{OskzK|)ty!;4t6^RG|gpOp@1LdF}a)KDJl_+R1YJbqHGQ`HVr)-
z%vjY4*OST}oep*1vB-r-!A)(^GrbGZ)ibelXZtx0{kPl=v*qBue5&nUhyH%}0cJ}k
z|1X5K@!CbHSB^{lLY~L3!6MWi&FTMo9JY}P7aQ#v;B2PH#E>HDk?NsM+xXN$+8`j0
zxD2XB8N*0?DjDE233&)Kf4Yq<*>)>69O#+`@M;oBAZFV@@l|ht1+31Z)rx~yk9~eS
z)~J*;+N{rQ8O$0*EcOck`|5Wb-78EMN*)C~ur@4*j&@=&0#fFjPmbLSJ2!FTwQ0gO
z#>cH@#JPUU2pffW8A1XwpfZVL?JzWL4WE1UyL#<EG~MEpiZf=!jy&}?aMnR#A|jmb
zk2&L=cLCSl>~rD8O`_DV-#?IFu%@vC7;!%R%0D8|XArgXM>%o9=G<+zuI}onjcM5!
z@_66uO0K|P>q!(xk)&^H*dmHGXDXuTo*ME7mu4`({mH?2-4{yEvo^N2G`<DOr=H$l
zu|dwRu8u%QZu^+#4s@=*Dr0*B+o8|sj<PyB-({%m?XM;OoaVobr++@-{ds+EZb#}x
zM|*okvrO9~Qcuyq;9tm|_4tD?-CxZD%2@L(rRvqUagPe3zD@gx+1P-7B&RYiJGs`S
z)-{7xb(F51voUv1pDt!m7jg9NhG{-IwdtT!ukEs2_m7>HWXx{}KGedP$1);9%jxwz
z9&PT;-@kPjgwfExGx9q3CSwiAcsd=m;>Dd*vkUIH){~#Gap7JJa2HrDeXa7N)0Yo7
zcIO{%@Q{RlZ@Nw4eM|2jL&A;=z04LyczJx-mfr}jUZYM+(-rsY_-f5)FNS?8<!Ujq
z3jfRZz0lRyex1oyPY^mieKW&DGq-gsHc?T-o+lUpBY{or69)nPCV~V7=&u=QR!5<t
zeh71gSL=Ltw7lQ^Ar#HqKk@fXwGe54?BxeN|5uRcRF?PlUy$f-4gsig&;qogvvBd4
zEmaOAi8_L{E|=fJ(24&89n-Na(I@`sJ@0}4^UliJgeXAQAhwiNteuhZbUSN5o4{N3
zot^Fc^w0xmR{ai?&gt<W(&~9?;sE!{Te8?Y*wJt)o_H0cd_=~OqJ8H0evSiqMD?ad
z?D_MdSi!M>Db&2BfX&%)%I54EnmGK+<~)5XXyQ@l&P07@M;<SDVl>2*p%1#<)S+9W
zXYc>)3A8HK)86{u2g~q}GqK(so_~IVrc=aT@(kDU%9-Z<?@#}407`7mzc7hYr5Q*I
z->Z+@zghZ!$nm}d2e8wD%&_UN!39ks6tg%um;!Ws9azh^jkv4fPlq+z>;fH9Zmr<{
zJ<>O|>qJB?@C-_X|MH;h**Vz$;|r1)9J*m{p84_G)G4Zv{vU(~Oayn%or?3$j?m$=
z&~*Kk!h39R_AvY}+QSE9QhqjD7!XEnV`as&^7t|ui%BPwm&3(8{&>XsWs*~!msiE*
zGr1S_Ukm!h|Focg?a{=1TbB6k>RrpzUk&-AXw0RtcrXe7KYg^7l8RcDZ8XvUbpoCK
zEP##ZfAt#yQ4*fiv3e6s+)!mypHm<e7=Rxj*Hdzrp+-H$%;NQt*s?jf>E6UGy>@-q
zu)&7t6ZSz3&FogaQh5?GZr6-!q=BTFy`y@*<cs>HneX$<vts;-mR05oXv)V+*BasF
ziF97QO6ZkW3(sF-&)l{xcW_QQzsVG7uP~vS(c4~17D}ACI69cSW0Zbi{kg{bQqoc2
zcUu-G+lH|n3&iq|FXg<rM5RZ_OzYmTFh|S!x!-q&$aE0yzH(%^=g|VLpV}X9KSaY}
z;rS!J{w!odPT-E-QP^|Ob|~{l`M<QXijBXD>=NtvG)nR9mjrFo&YPy<wq<}^DDqR|
zJs3mUFgk)_cQmWh`{y2!U21o2eThhS&h`7aoRov0-z?1EETnia_R!Svu2;p~GtoBR
zf2uOk{x8th{~sy!zY(h<RoL7f9v+ac$2wBd+dnv%-nSU#@hLP^Lq#P`fyO1&)ye7d
z+r$Dc-cu>+--jHj$2k<h@oQ>oXdDgHAZD+(uMgts3X_r$#q5+HjXD!iOH25`xm#xS
ze+`Jkuh7yn_~);|VPagv>_r9g00C$TP=N@JhO^@2_~4YHKhtK!5nVXyQlrE2ub}|$
z9g27QXy%<@GF%xRV0=!#gF-FL8F?PAQ@4SL+k7x@e0-dH)Cob?63t1^#59UT=BB6n
zv6-gJ+u~oRf|9#x7W%6P52W=C$myAx$I6_gd)L1~I1`<`jLc^~`{?X!?Z=OQNG0cJ
z%>zKMJ0&<+-rinCRh26L@moRF*4a(y4ik`(iQ+>xLAMb4@V_tcDkHWfOA(rz{(<62
zs-}L9;3t6s4m^s0gjD~Tpgr=V4eZFEsQV;;YjG7Al(3G16!SZG?hH@DD!|UsF*_@3
z<|g!;G$y)|oBjNNA2s?|J|rYnT~)&TwDYUD3L~qSIjAdw^an;WVg+5>pxM2>Iwsu%
z{HB@Kn7@{p)AJj^R#SS(?!kj92$D82HDx^VhZ_4&oJpBtE2uDv`rr}}5+afH_3xlk
zWzzL!4)#}rgVDRYZ&FgI=z@cTnVFcn=Iwf0Q@(tGF3vQR#yK>#wIKtkDY*q@yS+33
z(bFIkOHNgskDZNm6{4hk%~j>nGyDz^6jsv!lO9QO|JV0y^?s5^Pa7ciK<EoUXJ=wU
zr(Zjx5NU4o^<;ZUFkFq1F?0A$Wo4!0y>IF1ld&fGgC!+=exGQ)+S;K8YB}nQ-vB~F
z_^gGNW4%d7keLF7&*!mltpQlk77(B!P2cqN^orGh=$d1|WK{4i8vJP^uB+}q3y0I3
zCtj}g?`U4H+@<7t@g!d56_ti48={LfY+g)^jDnuWfI>Ah{`e%vEH_AjCK0n&GuSx#
zx?wbAT)@J29Wue86U@gqSiI8Gd+~fl8y#EkyoHRde@2fcMol2zI%s6{bHYbWp*;kR
zd&a1#qkn1vJ1MZU*KZ1iQXYkn8{7pSU|~rVcK*D#6GL`!apR0eNuq$YqKuexRJGS4
z$O+)l!3|8miIvmy1z9k_3Z3F>ZB@jKhqln-;$rdj=n9uDOuZExO-04)WMor|i>?ru
zHrfmjsP7#LD;95RA?Q1d6#L!eq^`v-ZoM0xXiSai+MZjORG9fGq8mI3r&9)t%$2u4
zE6cZWxkpB`Kx}uk;2%6V_`9v}yT_5J-L;+N!eawl3n!;qJdfSx%HutVb<qz%LQW8h
zPt)1?%HOd-wEuhMl>|Xxi^j)~18f%XGaZjl6L27^y{WmmxHy#mv=&Xu-DZHM`AnI|
zRMq6sqkGf89zSjbcuP1Jgs4O?X^J;;3W5;hXmm#l+S>CYKSl8b;ly9((*u|h9yazD
zmQw;IQ5*P4Yo2QFd7hdRK`K>ou++@Nc(5*U;;}lyz0{hSoqe<?uWd)`P6exySV6<T
zOkt}Fd=K!R)ErQ~2_h46Gph3ogNO^F>0eNQ*DQ4?C@i$i1#$}Qqj0HYE`BS`a+|uo
z21hul=U;tKNH~TqMmPi@C3rVSWcQajW5qFdm~cu2ldIAYlt1TjLH$Zs$<TJ15DVA8
zf4vdvS}=clO~@n|nOcN*P4#zPXcyWMh2(9hL!konH)oPv4|X+5oGkj<n2W4`OitoI
z{Z__IXX0jWKmAnOt-JqOrNxnV-q@GRuE-0)oz-!Y46)GyNhKwd&CJ5#T#v!*=edD=
zdVJh>5+-&3+^dJ6?;*h_qYimoXgLI>qT1FYx5Z2Js>8F3v!1&hqf=@=X$WJaVOI&2
zT)^IlrRTM4tlQN-g#pC)VvKHE(+xMKlmCom0eqlppI{<}fjvUo!@{z6$g)!Zs9T2x
zFq#n!Q()Q3%3@kn6Hi*V^gPJ$t_udmPMgpKWD_K9vgH?ho(TDc0aB9D+F@0Nn~MvE
zb62QU@*%X6o}4a`?xH7`BM@XJ_D`Ey1~ODL50-LwO8HcR1-9)BQx}E=hrsPxvDqS>
zDzCphy4N##pFYlcdwT4sy`45Q1uZ(<-gYOF%be=|uhsH{dOsD@%FULYlhvI{1GU(~
zLcC_Zz4O(%?MLx2lD2Z6u(|JlTNOIkI4Rp_9}Gqg=M8LDj^ygONYT|Hi+Lj;FOTQG
zF<<67GFVp6+iY}0MpSg9SAHyx-LbQL$9#X*)Klm5R)pEvh^SF8o|k}lM=}nf-7(rh
z9IE|1wS8OXHvrR#Sb-$r+Lt{WKq1`N*JlY|sqxdua4uo~gJ&M2D$y~{OXG=R(llOj
zv3#PVgE_Vhgvz^ny?8XiE1hz-xu}>CZR8t`(f!4feNijPug5d39(V6Hyz`MbJjy=F
zKpHPDni#aJU5#T&&iUDm;HBTRGJgC5blxTlW$%AkhdzAzR7C+z^Z9dGTR_@$8Y$30
zkgMA%WC9*l3Tzt}P7TRLw&okB3M=qd(mWJ$c_|!rPbO9*IJvpEgTvKUfm7-O6b*}v
zfxocxt4;P3Y2h`1GjohF@sw3$_2w`%=XmZn4-G4su(Pnd$BMs!iTnT%Hv~zb`n~I0
zMz%wJaTYE*n-s^p;9PDTwR8+8AUvD3?_SoPn_0oXXR~?hljr~mrzRP~&!BwUf$!uT
zPwgPFU`@$zk1^53Gt*1FCBK7PY>aJkPNG@!)EEvHDH8los_Je>E-MM%uHP~mU$$DW
z`wnwx-@fW!OCb9EDTFA@Qo*21YhhvjQOzJfkHa*7Fz#?p&AVEM78?`OU|&%~dF^2A
z2-M!Xja@43ZaW8+`*l0TonKFP_Tp$#agaek`~10ja%;<n-xJfa&-;6o-(r*O$BeKd
z0t>V1Pd7UctMuSRVg^q;Um3YD;#MPg;cnS$%hiX?idfya`SoZ4w<DMlA(AAjnQHRL
zP@#52;fM3O<iUk6rtU8G3QI!bqw`dQ{AZ!NVGUEv+7&b0*@qw7XP+0cSRCGqUR+uE
zF*AA)CM71SSFW#Wuac~usa0aedB5+)gx>L3`!PQU$M9%)N6xu(uK-U(LvS?tv@(X%
zR8CJ+Q_R^{f#$cp_TAGj`a7Ivpd6=bHe##fndiODLts~p{5%7RpJM&F6ym4;4+t-b
zLFDE&XBU5gNPh9++?WTC@U(wKoRT~Ei01C|@<LC1V644QQMb(AchJQztgy*ec7uq>
zOgzbYtdJjE!TukgOyN@O_X^)0H>}*vd~n;y!eSq+!Afs8Ha=xn96C*<NW{4<>_PcJ
zg5p>@yYG47hd4)0LA?PbdC%-*vF%ZQ%Q<_#=5H`2f*E)RT*BqL)9NnK?vpfcN48xa
zfKceLF|}f+LAY`&ghJSnjeoP+C(dcNGc}I{CsT9eZ5B6tau%ES!va2LV}@8w@#RMs
zVBCGaQjhNSRLgm~=c%?n+B@H>DxD~qg#}6}F?x1Ih5cIux8z>s?1@LWVTaVZI5{ck
zj4+rJRS@TSQD465inVvaMoliGFaK*8UrlEGa_{?M(d+;67Jp8bj(~)@DC*1{1O9Uy
z+)p%=-G0w?#^x@6^S9q7RW-}rLa8C^b7M^%6NAbPnN)O^yAz(CY@4n^9}&N$YHEEK
zK&@nCf~&2I%ge~oEDn;=@~1HrCroh-Cu`n?uxfP0Zhg^OgA5V*P2QL<tNSBH-P|um
zEqrTZW2IaiMjP?}XTLG&;KAezr>{VAJ>`|WE9>~W&S?J@yGqB#pk*$B>5t2Zb;MUN
z7mSO<0)P1=<E0a59r$96GpOR4dEpN6^gqEckLGPZl&+#Bx4%(O0m?3R<b7)D5t%s4
zv=F*vzU_KZQy0|NtE7bd_l+?xhz3;0uOfulXYR1wdRdLzWr!RO!ZqwN1oT)yv1!2+
z=Xv-Z(W)d3Pi;7fs3^<&I*6X{x{5aUcxi^o(zaN%P%3!?mn`d?9e9(3tGqdt4)VfN
z+CCzcj^*xAQ}56eD|Fjc#E)`Yf1;^E(X!RO7pJOexXQ5L5dQ(%#Xhfi-sSoewyil8
z?fyx)VDUS3o5fg6ZH!wjJI(#?{-wU8Boo9p?}>H(bdxv3A3DU9E+YD>U%oG4Hsbul
z{xz3>_J{pDt1K~iZW7G@IPwXq8JW%K=U)W}XNxCUSXvVL)pmA<`1$*7xsb7U-Oy-<
zG6i%)|C95p`0Ov|7vT``()q=U1e9fNo?2?It48!cd$7+8t0AOhD@DbH1$of(o;&Yp
zBnj42Gb6Jull&|u@*BKVyv8<$Py2qfgp|)>blfS*4*v2uUD2Kmjb#nYV~nC!fK)ke
z<aLdnlJXPzY<rx3l@NKetyN$3{e)L~0<{4uMHQzk-$njoJJs(r_a3D8-m(Z~#KXh1
z#&=hLV#ywyYM*b)k0XBJ!bnfP9V>%&Ul!L<Rv`Dg8B@hvSrV#ezm>5B!rgy&N^I@N
ztOj>-q-^$SyAKRA=wZm~>P|vG8Vd_kF1DqBNnSEifSxlyu}lDjqzXDZCMN27dUxf9
z;JkQs&HC8ko3}+9p<=&o9*ZdScJq51I1|s$gVd4WQ4WK&#G_O=NMmtt>9qufP>2wv
zJgCjjcnZr7YI(Ubs|f)z-Y3rD;`QtJ4QZdPpNP1LDB5f^P<Z^R(s>_<usbPHq5L=>
zKVZZ`E^NL3r~qr$3sfG#md@Yf<BPH?el&cmdT`=Hp+RwVyj_ryj&7vbHBNlWrV7XE
z(r04iK+k+aR{U*GD<2Q?%coYcobEi1eP8Usb9k?c+WDS74^yuR{MD~x`bO=)-AOvr
zZoW(Pfq2g6?fo@=FS_d8)4sbChvg`8=+Mrs(!&{m#eL_Nl~l5gq8)0$*3e$H{0Zbx
zLr2%51lFIBFTh2Dk(<f|X9)XR+P+T1!^hD=FN5RLpI>W!UT&f<X*Ab{;J+7mUEN`_
z_OWyXBa#$*&snh2^-GV*sN1Hj_g+;^^N?%x&$qDOju&M<a~5Iq+$OdFSt7-7UO{f|
zV#miC^-PC}*Sz!oGmYxM_x9RGv02z`z**Y2jc|2scR_s&tPmQ7+06J8mwX)GeI_QC
z`A?|w16+1A$6%N<Gv#*AK<rRkV9^ElLaeYOE^(fouE*GjssI0IBl>A~kUu@~P%)oM
zsml>hRsHVyIr4?)$^pjM7I)GAKg!-ZD$2HP`v$obK@b&b0h3a?lo%8Q=?>`}y1PRJ
zq@`nk0V!#bZje$srH788V~C;VJMg-%=eh6oyx+T?mw#j}hpF>8&vQTaecQI*K>nnA
zM&wSo_dpnXRd@}3VvR^7<Y@d?%mm&ZUX+3YkiB+B(8T?+b_`96<^ngZiQ(abygcN|
z-iw<0(f)oP5Y(qxWj$&x?QaZ3RV*6irW?QeO;7!BX=^=^iVLxfety_s;!Okaq7Xw6
z<qrJWPEJlHvhek_Z|sed78cJ{(hr&!zEI_2gFs}1QsA`Ec*wRD0J>*t#TpfcXU=?k
znYjuIhQxIAfq&t4Pfda;oR*rVQ~+==S=iVBei{w0^?3`<8Q2;Eipj~xkIlYVdCJLf
z_}IwPc}k+&c&Y4$fj~xfwUcW73|%5zef}}<uXmko11-V-?e%die~ryWJ!R=W=O=<o
zlw*=r^=ry`YqG|zJAP3;=~~8aqsN%y@@kq7gqL^K$oVL~6O`ows_N>$5^Ec8^rrH=
zY*yP*hOcxjci&fZVD1-}0FI}?$Veh;87R~k2y5BdzMkWpOLjAbgm$y&_GRQ+8|-zF
zgwlu6PVxKRzKyR{Zn}M9rvP^9YQ@XiH3qdW_eO|`l(1xog-%->#%_fWJrFR?1O86N
zIG%*qSXv>w<TM`M?k}12(&V)5SOkQB2hLDoV}}|2FMT=IIgk+ph}_b2(db)GE%Zj7
z>Tjr#`mlfJn3JjWq7aodQHNfvBPFahk$-7^K8o*oTwl&@T0T=Ya@8V@_PBT9)OBE=
z3#R@`C%{VC=-H0nA@CtBH#c{A?IY`4ormlD$t1vBH#7Tn`JaiqpT(bQRC->w0ExRV
zy5kcP=-WCqB>{rU)G&<KV|bV{54!F9={ph?76!~U7iY(6Dyj&F{so|%Vah!sCME_>
zP6k063#E@A16j1nKjl;V-=WF*rx(EQTrR`X|MTbWA@@wZ!oxdYs8(H?G2eW7akc*n
zyX~kqFf{aK6XNXPtwW<-Zrt;Z(vjJ-Z@LC7%3pmv;do-WG=E!Ge%@75Q{}s}5IB==
z--up+DKp)q@2{FW^>0DEPXgG(nR%c<b79h-f?isT1e<Yygp=!}0qT1YHQnDd?)EDM
z67%z>Qu6f3$aH3MZf@rjqS=z+^~T9ce){9n{cPkfiI_ak{;Ht9w7R#%noZ+&E1RMl
zq5#_Rb@>7}!r4NdFEMipJM13d6ZZS;h`JA4Wmn>2lh0Q-_Q$>%8yy|;_uF>0oXy)i
z{VLDGSZKM^6JNQVZ}sJAvLu7uZ6~tpp8~=`OuboOp`G$8-APG$G2VAmY<-gCnfEzl
zQdd@a#T=Y7xF!7vZ-7olrtlz$+T|&(|DK=!ZD54(ZRVi$cy*L4@Os2G!D&<T<Kkl#
z-Trr3yW{~s1W7ZnYO}IFGJ%!_P-!qo0@TGqqn8I`;P#BSq9TV%A9v(9Lku?vB>l=w
zX&tZ3)Zn<+q23b9D3Sf_8QQI;5XmB<XhRGC`0*o9wz;~y?V-;XqVL7wAJ>BT0CHyG
z4<bgry%8Hm#xyZp&Q$YiMcdKh(zEI2=H?vEO(J;Ld(A6O=lpQAUQu(~Rk1NLRO={d
zW|~@LnuU}N4;ka);sW>_CmYvOaBGv4G_{J;Z5(nq*~$AAtZja{Er?2^1Xj+qPj>S^
zUd6tZf<Zy7Xia?)01dzC2Btx&gcls-1WA?KiZ|I}Uve6w<P*}O-e6+viJus=nSusT
zrYLB{0K8NTtIb$)rhE-LkP5F+XAhEQ?U{yn;J6Sf;PSPyqT3YTtk+)<c4-*nnfN3h
zhFu=@D~c+<njbc~3Q}`No<e(eLVvHX?A%|mC;q>M=H8~>=Xu3Dzp+7oA3u{`6qs9r
zH@c;RZi3D;@DvUW78jP3goZ{6Ih>AUNepgnNt!9e^kVTbFaXxz&;9cH`Y?TK&!5#X
zg0gygdJ=Y}%ZveYgQe_TgLF38Dei~sqa@4Af1gLGsj1$VUSW;PLk$rktv|rm{UXm%
zMuwaB4LZ}86<q%)$nW33cTX7C*1&G|Sjn&MiJ9b&Ne{KJ%BgUl8l~KgSMkS*y8~Ta
zl-<0$AeTRZwcFN#*yYt=3{W|l9vH&f3<e`oJ+gbj?n)%(pD=_l+q}ForQxAIIDe3S
zx)ldGp_j8npN&OT7&i3_QrUy!V#}TS$^2bnykQX>^0Bd>zHzmx+^vS;T8aIXN|`cG
zWNimI$Cx#STEvw*<cV^>T>g`aYo$3W`aLsq5m?V;0SbZNT1!$=(pqObFJ_`4xx7Iq
z0}WXOjZ;&x;RIG~^SEvbeh|&F+6(gmjq<g`#OQ^4{1xx9;U&Y!L<p)-Y*@G@occ6F
z1Q)15d3ns!16Kht503!<@MsUn@xdmF+za@6vV~bJ;>)X^lao_Ey(h6hvP2W0ql37-
zyo}!*f94oBbGq`2^p{dDu<^x4n1kH=wP-ZZ5`stP$ja2)^xB7u9ZdYT>h0xW;Q?mk
zqNCqY`KlIt(f9E`YD?2%I|6^)$~#_QG6B3a28{b%94s8x=fFSw#2*G2>tJ<0p%_|)
zn4$Q1-^?CADxWLMd8uf{cJn<?-&Bkp^_A+hFRqF`r?0<Ifnns<Oy1JQMrzob5@^^p
zmt!imyl@<+(&XPg-#1mt>=rwUHOf|o+Cv?6WXjIZ&#R|S(Wm2$cjYZYd-T|16A~P>
z^C=Eay7`pg7E^vsP$<dufx(zB{vSR>Jb)OOg#J-U&&{2lQt3ho@$pp|Cb=|ZBF&kL
zihwpR-lkp=_8m5p{8m`sNd>B+viyXqitWN`^MqVi*C$C@LtQ;zbx|i7IDDhtZ*DIx
z^6D#kYHC_ILGf@zu(W-1f4+R>W-i-T<VQC2ZxUwm1K*|xJ{YWqHzlSPFdnPZJP@yx
zD%hHMO{Vm<uYkTd2sd`?&Cgyzxq0}fMsWeltwPj%eC}PtACvriv0Gaanjp1lv-BNL
zZB6ho?aQv2@;g}DU{r8^mvcYxdf?;h<fWe>{31nT)yhp0MR`h2?P%BHkedqY*7TCj
zPT@~rd1sv6hORFP#!B5A6dvZQkekOzzk{ud5t;fk`t(J;nzEW6?w*?MpGC1bc<OMu
zAkGhuXLsi3Wk-dDg%4wCEh?yufmNun(Ho38K%4<j!YI-aSVaKG2F3GiWV1~orc&Ut
zx~ghs>NgcC=hR`f7euFQZ7NR`h&h4Gi61{Y<vD05Nx{uKWMF^|Hku=yBuwHe;5{;4
z8uKNyyGz>N3DkAPO+F&8Uq9r>GHh*Yd$#8WQpz6Wm1840v6{b%)?rQF9oY7D#xJ+f
zOK*xR!&iGgkkOstk2}oCVcaK42>QxT{5(imDTMTY)RcLpTrdAMwe|rpjL4}K-Y1Ze
zkOT%rCh>UjY3qVwP90d#2@Yg##^GPD=wIAp@X{$az1wZ@qPB%h(Ck`vKiA+ycAq%B
z3OyK(dS78L5otbFLMAE}k;Ls#E6;HA)-Cl~qruSvw+PK66l(l@jZPBII2jQcx}uST
z%OcP`)6S>xC&T1?-nZ^KUu<xs-nIHf@4=zI`@h+<@7=J>D=3($!QrLZ^q0&%BAL2)
zO%sKBu-Kz#6d|GURzTIp2qm`oY9d_UO(?H=knB)T!~t$$G?$}M6S#rh`%NrOHjd}l
zs&rAjB$s=d+1GnrY2i7v;ag%7xU3^(JN|({h&=tWGQIu%u=Wf{0^L+;v_~uI=?%ol
z3CiT^FvYFUwfMU`U{GLw#H>?)GXIVyO8n`oS7SidW66@{wQ%x76bVA77Y@*|T5th3
zkgfaj<#$F#7D;L8a+<oDs-b8D7hYbzOybb?SUcSY_t6o%Jhhl*Xf|ky034kyai|$k
zy$j9C+qfq=9Xdg?v!AOLbCI9AWhIm@8ZxAn{8y~b9SZg|=R0e-GfhDL3BoOIGo>s}
ztu07Ku~UDRmXJ*5cVW5S=15TH(0MyJE6NUxst(T44#3qbucUO)yR99+4}#eRXE$a0
ztLdLC(nu!V!Y_vRK;A3^(!u{o(jE8ovhmdL^r}a;$kf%;9e@4()aufGDh=8_r1qj;
zzJR;N?Rw{FZR$hOeuGkE!Iu>e)5x;eVcan6YL6@B75B;)aDyQK%VjYE1H_5-r|Sg-
zVfF}XX$=C-4mi@~u&Afzp4f!VJE4CIT{6zPNy{nwIM2cB6&)AXmyE^`3Tw}|X+WvD
zQVbNE_%cCe=B6&>HKRV2vpg{s=MPyMP}jCF{VGiTaSqz9(r+9l|JoVBgP2%w=MZR=
z>>V!MYFiO8aUf`LOkwNkc3fSkLY$HfcQQYfF3?XEY}7-3)_8aaFeC)mmGqD26DM?@
zvtzpV1q7z~`ILEiLmIeaoXP`^((FWm{U|k6`-VS4=lV9S3$F{G)22dDA3hkxVD`_(
zblm6ha)dx|J%GjNzE5lgRjnf#EnG`MbzFDxP1EH{P(Nla2@om`BYh~SaIbYh{^z_K
zUps+_y*78<pN`VTv#jgi1A04%Gvtl9C>>?J75eM%!21o~r|Fm&4wwLzR#ANM8<(?d
zaDawQ&?p);wXE!DxM|G5d3&q3?AhO}Z4|ED6>B@!PR|=JLt#;K9UsJtaDvJ;o;@Ac
z<;86qS|7Cob`KDZx*d-#3CH7>3a4%Pq<j(Tbiq>EdT9Rm*$->asLw)kK13DnGvO$=
z5euuhGc<a%t3qs;`eC>hk?HmmF8-mB{srl9Kp({WxKei~xnqG%$6_eJ4Nr5~O4?^Q
z@sP!3zbCwJkB{#ZW99U{mkR0Na>GAEWE2j&Pkw(=H;5XvHGllccB+1)k1;pk|CiE_
zy-Ias-_*ukP<!|HR7$qu1UavCo-zlUrPEhs0xSZn{|@sF$D-U0SsU<^gufbjS#-_N
z4n-VNF0l5aIux6f*?{vF6{*HZ*FzUw2*2+v-7pnlIq8iadwY9Q7OiT1jpm7b=idUV
zZ$H8rhID^AwWkv#(|vSQd9COEE=+9LP4#Q886PiMLh=p2sz_ZZlo9M*2SSA((F#HS
z4CwA{9%k2tL!1ZTfp%Eb_wP%asnv~IX(CTwgC7TnGCOkbT;q?Sk$N{Mi>_fi3Mnux
zx3uJFK84i@ygcwBmO_>R47KuPGl3kRe{oG2^XpB)*B9v(?ttn2ueS+?po<F&#*qi#
z(G)P^XXVmVHqNMjg$d6Ug965O><tiU1v}p<hv|U@82HzJP_4*8BT-!Zr(vX(wRyDn
zDY7$OSV*V|@Gk3tl$SF6*6|6*Ov^4Wf1A-<)p0}7XU56aR*l^pFs8v!TK+cSp@aS1
zTFSSfYg(9&*?~7mTP2f?*I~F`7Skr*>`!(9hBEq3n$(mD^bfm^s45)12`t}1lWHTA
zwOcm_i2h+qw{rW+iYIz*O;((ooB$Wr%8K#I?H;&LQ;m8E)+vh=ieQ2~+EqdwW94vH
zP@9IFbJ(K?qe^3<XPVAXBl>%3=&{IIj(gvitZMBkkUAHNetcKAxo+moD*`cpu@a>X
zZl=`a9ExwCH=95stNeET&x|iKA*Z0VwOex(l7)-PWX{?GDQK1y@z`A5-$92B#Md+5
zxk)D{D`5A-+58n4)oN+g|CbJe_kAZ2C)^L=5fZ|TkB<Y#!VBHT6v~NeJ0(Cb2C~Rs
z|DlmcO6s&kB;lV*g&Ze3SXC%8A1R6q{=6A$gR|To`)1hxY77HvO-nEp0<mCR>_(iX
zl5o()zdyuuBOU(gUzA~>`4F^DL9*J2i1^plodHWKaABipP)S3ppd_LJ5YsZHxOg6q
ztx3@B@fI6xGq98FDy*-c26J7BY#HF4bloiN1u{woR@ThyD~z-LkB?yE4)8)@VIDv@
zk?`t6hbF~`ERE5jW(iFyhZoOYv=-kClRyz5Io6K4L-+}6JAXtsS$CBn70(}<_qmB~
z;khj@&JU}&Z;i>2<CFgR7+7L28!8Km^17}#(uhaszqM+WpDSaq*G#Umm=UM&mXdVa
z@qc;&ASIgMgFeM;xwMq`8j8YZ_8{2h^+R${+p9pcovz12fiSrN_{VB%HQbrvw%xXC
zR)K%Z+(JeU4C|Ovb3miPkxv_>NM>gTqyakV2+&@PR$85D<hD|`-uQi8bSuAkJa`*B
zKKfOo!Y`eSSuQfMI$Uc4iF1=)b(+@DduQw6VseeP^>wpI9>jaz*-Yj?yC?8zni*bC
zSl1QCWBbC!y_tgQ3{S2PJdR?3KrX>N_;8nPhM^Etb>{mcG}z@pxgpPxWe!BaS^yH5
zYnvn$uc@iI#hnI+y8u5p`t&p&MBtN>t{uAHxS{Bzrs-y~G2|;jlFEySO@bIsyMADc
z;=M3S555y+0#&p4IR4ItYb2k9>n_XD3cIDc$t`ewY4sa#9cxXvOgRgk7C>LSi_`j9
zCwI`%$&^n+#Y)Cpg=&~~w}o8r#=^l>BMqzd=kBfatF+VAWNwSXTa0m)G=)iNLvj_h
z-Fnr7vzMC_WgP0WQBXHGG;lV8tcP+&rJNoZF9t{%0XhrRg#OIW`bB$&X6vP3pO-mv
zN+ifh+z;*CvL#Eh3*9niUGqN=v;5kng)dP|W{in*k@HYu>3wxL#yi4GdOh)_zD8YD
zWoBY9V|bwtzcu<bgFR3x?H}HH0DG(d<xAcdrAJU}G6;F549460>iupy0L>?mqOkg=
z3Aot<CWGql@Qfrk0R(Wkl2B2>5?n0a>g6e$vyp>c9q>X{-}8Gt*W*g*3DE_#bQtsd
zZ*1J$B-p6e7DJ9&@*}yYZ`XP#9Chl9zN`IIfg1V_czrivYaf877Om*>okv#0N4gwH
z9pN)8{@M+~!4fNvVtcKww`5eR_S(=%rJy|6Pe0<CL3RpF5upmnWy>Rd!$kp4VWSFk
z*arBP15Wo2aONJQFoJ%S#vir7JbP<MLV}vI@<@e+nhI}4RTXf}f>mv*EmJb4B;MeN
z<N!c<cga1}apUn9ATR3W(bUio5ou-knS;E7r|vC06V4cznGs}T`#fo)HwUd$b)+nh
zH_OXe%>G*bt~HwbM#E&f#bEwYElbhhK%q*UQ{^YOYhg{;Sea=+P}@LY?cTe1OC(dN
z!ri+i`_@g0cQo#D$kfqwHx$dT$JY6W6Fn>kTsSSc;O5qkFdlkv;n90ZZY-EieD59~
zpE97s{0;yIUMUwc@<bQnxHbn=Z9F!JAFH>@HF^g#gGlfLdU-%bO_`~}DZtSp+&6kN
z-$fQ`RGbEo=@_Z2K8^zVh)6%bsM*0-UAx7lvhMT?rBMlM4Z{(iNmrTXeL}HJzZ!Oy
zP9gI?TjGSc!z)Fs7>UWL2vIg<xP>_9`Ep2LKK>1{;^d))T|45nhWOYt7yG-OY|RTi
z5Fs{qinF}iV4)DC>65<JW!q4AucmektV?mQ%c)swX>x+AMx;W-CK5S;Kv?IU1Lmmv
z3mt<FLaLeZ@srE59XD6kHAnYwvEJ7{W@aYW>QhRJIcvSoI^&%|SlJCty``nT2-%Ne
znb-~8*Yqv*jJ|LhGS2y93s$4h;Jfl2>;lQIf0CJc0_SYw22IOl;nd$6gEAzug-@sZ
z@i!9voXJ$dBX8H7{T149&0I2+f}DD-fz$&%e70Rp2_e^uiGkCCPe9&&RT7(+(p_m|
z!*;PK149(?lxDjK9+;<qCt%A8YczZS|BM$ts?wuJF2rI!)V4=3?SzWBdY-<A-fViG
z999l+Y>ywNfG30exjNxsb4@d^O5R}d&oRye(Rbv^21L4zuesjyCY&A6>Y`UIFjB+-
zIdWX0J7eM%59PJ4J}&X`cA8BCR@3v}{XVA`KR?-mv@Ud8tJCOMqW&j@o%<|urb=y|
z2SOePO=vvp0XJq-<%+AshZ`O8XS>oVY_cWRpF&gH2t>U8K8f}I0%H%C(C?wIqPtUA
z*85wM^BB!PCuetHW9iAeodo`b!IIv5M+cMf2%@NytLY6}Fc+6&5zm#hTpv3eW6t(&
zWkX4PF3y@Nw@!XfO&y$1_-pbAHHWzusIp`PEk@I<dF8syBBom|^icest`9bj`-xBq
z;l>dg=O8Z(Sq9ce^FZM30g?OHOsnf8pY>EFBt^=h`u&rC{G<XA{^7B#=OF?YQ&USv
zE0B}s+Vd1kHwU2BfPlD_4iaxnyNP`XjZJ>j<*AVO&I;WMzV10<c#OrQl8eOayoCx-
z7?t<?$1aa`Z7!2wXFV=7{7ws+$*yZHhbFSyXNRml;#RULY};~}V_l!K1C0D5l{79p
zPZ29?t<9{=pvsGWA556$=jSQxg26dvPJr;|Kvw9zIwN-lQYU(FvAVItqEkD+<AW~B
zrZS7PIyg9B{K+qBk*ls0L%fk+lHDV|qBC|l9YbvuH=#b;)+y>hC8l{&pnIM!qgrcm
z76kep5!46-OUcP;s7t%SFm)tr8b2@)_CFA+gi&JFF2<Nyrwx8Bh^oJHsgMk9nz=xZ
zfBl4L>OnL;meN;2FY{jR;YNwC^~8^tnT*lLw|%BtV_dw`u!Gv3f^D4mzkx|oX=&SK
zSFW$K`dof*s6h>_UAGV55h7Ze58BSH3Y&D>RCtFsx!^%+Ofw<TbWW}7(|qCH86KY1
zf8(Myq!?bz&~S19_l6fx+?hKbUESg0C5<P6SD}77ue1)IQBPlvp3&By5hd^L+E&%a
zBWP)?rD$gNA70cuUW!}xwD~k0l0hwAc^R9M9#5L#AbeK2ld{$ZE?Et~&>y)vEq01-
zO&?+RW{Z-tBwFn(55HR&pQi@PKEj9oc4eF2<;D4H9|>{s@o)M#z=X>*Pzby#oKHwP
zeuFcH`D$+WPl&DG&)%}K%+{5wL8u(Wb8+SvlG?PU1A$|v%OW{fTv2he=SxkOXOTpL
zr<?04Qa*>FwDti$my6Fat{16?RPaQIAQBu%S|-%tBONUzn(gfoN*TaJk%93+?S(fp
zH5=*8qEB5tlv1C(i}cw?j&U6$Dk4=>#%TCF&j;V}*xs_9wk=Vd@J35+7bXpJ46R}|
z6Pm))xEgczy9Pz37%K{ktF>kyy6yP)d+%PDSXslgie0zhn9ErVIvZGDEqu;qGDOr9
zSXMs<1t<!fu4wM$_G&+hsi;5fpsgXy{0R2C1K&AKWck1Cbh{wVHYav2j4o<b$_bSp
zF)+-HHJ#rr+DKaUE_dDg&~%AZ*_b7H<~7ym>9W(<`g}}4x~V`;$h)qSb$F%Z6F%by
zAMny{mjQ4V&G^gyCJZ8pxzud-^2u@WR1fr%mb<uI-sjRtgp2#}R<F};%fs@#@|J$D
z9n8htyC(Dm#^cw%_hF(`NrKM92I-EzRsGX)Mz9VjtyWh$bv-wu!chffHGHRs)|mAM
zz_zq@U*o@j;ZwFj+*O@tFK#<<b?IQm?2h@MH#D2P4ozS@h<9;52L-h4?V_wYmGeMx
zMC(QKHG-3t2DUTjgXxEZD9MX+w>+VXU!jkq)>4llrRe$jN+aY#0FlsXig3nsok>A?
zjaw^@+@M941@p9pk3qKx$}e||44@7h-6K2eoY>?_pkon{lT#|-`*3{0>9JZF`N1E@
zs_`89oHjjfd;0Pb^Y)y}f}YeS^3R28_VTD|tVB2W(}eL2kSw6A515Hp`;pf^#DBD6
zE@7;9kmZ!HvX9r4g0vbC@`@Ub28SYA^NTRrlQAF2Qgq(f<sO_&*EPhTu{YA%bLXNT
zfzf+Tf@s>4=(OM>Cy*1k@Cp~RU^KI~uCd))pROrm(cuWsJqJ+G%j2ph@uVneeRk1e
zxYdkoz^`Ay2`svq$#BmTy6kXp)t%~2fNoA1YAhl-$-MV7cP6GPG4%((;yY<xemf3b
zlOX01G+J+&9ALl;7tiY5Jv!=Y(m~DaSe9Cj+hC4uP!7l2ICyxa<rHBxQrzv!S^@n{
z(|ddLx`S^)o7?B&w3F2nvl^f9?Wi%%4IO~-T%=CEM6>$1pnpWM&+8u&hR5Uc_=qZt
zKcn?Ld1cs_I_tAqvD1L!G^uQ(lL{0c_R0zR_+Kk19Tj6Rk=t}8Vojo=!X2l=eYB$3
zCe3;f%IY#{X}%oNF4_(iI%~Hv1JVI@A$r*J+yd%tfQ||uLF)P(XrCUcj*VP2!IOkB
z8`nj{E8H9@{2>G=ln-Y27za0U@UQl^jj`f$_bJ}knT^BKzP`R9_)dBdvdV5}A0i~c
zGutv<f2~$vx1{Rw9>v{8@5LDNiVj3j(D^~QOTTWl@Wfs&Z3BAU29rN(ZU&_MN$tJN
zC0|e5OQc&<$HsUEy2FCg(nr^;)lnMv=sTHv-WRAAIM|mcDK{AHJ>HgC9jF`~`R%}p
zsq4qQ<S~vOG<DqNx2u14gxXofJ-rJZ&>D~yGMiMimVg)Cy4pgX-u)X`(F}5}E_ORH
zha0+=-?H;uH|TBTl3%9bCos!k&~i<)gQ^mdO_)QU>L0&i7WZ$3RA)03<plW~FI!pt
zMmpHsFMz@Ys^%}bM^3_!5?WX?e%k8l&t!U}lRC0P-bF%{ZvRZ&w@{at_ieDs{JPyh
zRGHJ4?0wqf#*&ul3-TULWMr1(0+Xj@sCJ0)ZM4SJDytj_o%2TT>)Ho^6e?vnjD?A5
zkq-ZsRI9Lvr)NF$lr;82$^>VPijuR$Gh({8>P-x=rpFr~u_&~@UZBSA-syC7izt-@
zxbgG|W{2V`=Jg=7B+Zb}Ned<jOU~D?u`m|KqIBL+n2vq_55P_xFl^r^=s4eCW?)z`
z9;{8y>W$|K4Yg@x6wNLz&B12BJUaH_=HVe(N@c3`PNwo|Pa=wJaQR$p^t7$h)!p65
zIMry=#}$M}e(-j7%41Z|=}E|$nzCtt#&5k~Va!!=fOTbz3Fmo9Dcvoq)z-NS5W@PN
zRYXKqu;t^4$w}w!bLgq)tCQ51h<oG_?#KROr&njV3-;eA6<qgJv4`bT;d{MRvyl&k
zoJJdn<dV7O0TRYfl7aH_(B}f)Y(*e=vS8~juMdUFv?WqKc?-I0wjv}JT$DaOO|XE*
zu;-97&#C0m?(I4kbW$0aR5#Ptw|SPU9WvH&-8F3kV`DI?&gR+KraTE_n<)ktk9l<N
z*VG9!&YJ7AUPi58d{(bNtc18E*1g!$O_|OA^ogp3or6P*MUCOUWOrfy`Xsm`X_lOh
zAaDKdo;)W}CySsUmQ~Mi$~99{7nA)KmOWPu`BzCW=l|wk$A%E^wt@O@#Plcjc@zf)
zKRjqXc@jJ`cWbNgi!DpfUF5TF-a*4dugIZcfL>$g^--|4UTDs@#nJw!7l7qcEYpGV
zs6*$x{Wvx<GW1pydYJD)OCiL#EVSdfU&4zK;Aj5(aP1~ExuP{>y-iHUz63ZV@t^Fz
zuXK=hWhhFXQkGRwVXk033j1Doaf~@8+JF}6Hi|z*9UnWL^VbMooT2@^O;X=H@d8D^
zZyhL`!Q~g=*IcRx9G$8?CTV^;8F!5=eBg|si^xS)e*4xoHO1w-(;@<LPY-{#;Vqtc
zf*b6qkk4ro=F1Oor4T$otuO}frKQnm3ZcgmG%>A-b&V`qY$khxxAHt^CgUP_MTVXd
z;uG8?K&=|IZ1FdOd-!~CC+(@@M!27hl;m>*18LsSsk)ur*~@*VY(tyN0}R8O7MPO6
zck)no_f%F{33;L?1_siX3us=vV7i!s%RFIK(#Vx(GCMH+5D!f`8X=Axum}!$a1cZ5
zwe$AKY(qUL(x?{(tF$!Z6a5+~SiASLr6fT3(M5+T=hwyt-KcCZO+Qg<I(cLKo3Y}Q
zhgfjK&ZDUF!0Fq~|2VFv-S8%9n4q=gQh-BHBWA(HvM)Q~2!yxUi5QKa3m8!g#l-V1
zw&4C&V8E<D7pkaYM{Q)AU)_6O?eAQ!k})&ycdOY~s|#U}$7Z4q#{F4h-y>j%SR%wl
z=LY7)EAy@Unr*ynZl+5MI177SKL6M-flututa_hM3Ska*sxZ>DiBp%mwo`Jf2UR7P
z^%9ew7sjhld*psa#O=}k%h}NTEON4+1btQ>y4Z-EQrqWMEiVs`#_FDLF8`<>F1Nbv
zO<$EUD<s5r=LH4VkO|Bd#sm(#chKLY0>7Nh(eAPSmBQz02f$wBvt^%CU*mYR8B2?4
zQv13a>EnF?a%>Y=ADAVmz0i*C3s*i{ZECDBTtz6+H^%WM0JPHi+`Ams;3mxcs!6}L
zz_;Ur<JpT&GTm+adWu+rm1Q!C_5Ia;DQM3k!KRRHY;;#iBcfO3rQ5!i*5=c$Men@=
zOoQXA)gV@%W7ngk9f3386rOt(f-o(xw5AFeEID7HFBiPO+ps&-Pc!Z~yAP#^wdUpK
z9<I&rVo_5YW0yTMpW61C_0~~vF9qr~aJOi4|NTn|I38kV>oMCFOroQ+n0-z6tymi|
zv5!8-{F>E%cP%eNE>Q`*)j#t0rNlDl0kWra8XK&D8iGMPuRohU-mw;3|3u!=_v+4h
z<!f5bM@c>xtC<J~r0Ag3RE-5~gEOen=6?<@mRugOV!Su{We&#*@-3#OtZ<WaWq}Fg
zOvq=;rpYRfv_z}ab?ZX&#Z14P5uEWk#AkE&_Nh$c<%-7&iB*G3?>>(@vSt_;;kCml
z*_w*pMS0`q?ata@mQ!7X8eEZ+Ku}MF?}OPG6KdQdB5HVYf4KW8h#~KtLCp>S&Kwx9
zsIj?Nc}Ig7pnF~iwg^YR${b5S+V7e)mbpy~iT-A7Qc^!eDMb#IBtW#U7DKKNSPZWj
z91)FP{6kmv?P~t_#&Zq8saeu^%7nuv4UTEIk)j%z0+SZM3;rL@PFMwcbu16U+u^s9
z)C$bhmB;rYDx3ROO5<t!*pIX-)$+Uw(L$NMqZ5+?8)O!a)0;(NmR#25#T`dlKix+y
z`$<YG)m$9zW;Wo@kU}XkNBO*uVY3ZD4lV5?o>cLWepMJg+D6mpryy}XVe9w(P*Jea
z<WR3_iof51K6O84xQ`#8{4>1F^3gp!>c|tz-r-^YXaj3^aBl~|lbI&uZ)QS97Ekoq
ztk=o}Ej3>XlyT_*4XjB0RvXMuUw-WebSH)J(=&`m_=31OxXzCkkUn@I-h|!lAxV`v
zjC|o>bs6&Yv-hu~?_+*3Y=-fLbZSNBWv{CGiEiuxoUEF;O*hgIc>1c@KQUW+)1+Vs
zPtMMU+VQNDi&<jtr=_NFHGTP>tntm${w3<Nvb>AA$&+44K)S?bfKE+FfVKexCcmym
z2M52WW;I{?!WAd<(cy<DyPpR>>zS2>Q8i5du!G@r?ycem1}rUs9g7j?#rz?!(D|W_
zkCmG_rR?eoMno0EdU!h9rL2cIE4$6~zOLfQw)0!#@|wq$E*3M9iw|f7$hT}hruw(Q
zJT4j|-N$L9CSi-dpfNT>X`-#}c5EDmGaH%Wbo7kR<0UZsQgV%`)hN$Sb<U1@_Rvg=
z{-tMIecB`##wAP3O%&1y^g!m(HCw;O5iuQ&>t$lAYAy#{{n^CKm67I!ndX-8>#~J?
zVpxLJ3_?R2+@L>LG(<N=GLno~6qaZC%|D+#SNN{HD^cvyi6_fY`gnp9`bk3Ro;TQ#
z6zNoOdF}CS)cAO8>BcsCp;|U#l}SnB6uTuP@UDt*%<1tvFKbO3fFtd2ik0FMhf^GE
z%_VMA8D5O6l!#k&Ol$w?1U(eoJn(Nx#9cAoETdqUIv03}q576ot_W*@ZS7t1q38A8
z8~k}@Kuua&c0tO_Y`>8!2oVT#%cAUP=fM?+gHB+8hEcS2e=1=*wP2OgwBCmN4`-~I
z)i1XrC9MM&`*g%|H-GDddB<GYZb|YdiPCq{E9&mPp1pfzn{%Q5yP}~D$qD)P^(F4B
z#Tl2&A8|tGd$elBD~Al2rQwpM6MHpO)?R68%tvAU!Gdg1_4jD+)y-nI&e6|%#P5=F
z7guEbv`c+-((;YY!tCOg9A*mr!u5`j01(-=tR5uYZA<DW0w*aJfy>_p86QWcEE>oo
zg~3wp?Dn2JpJ8gRi98%CG_2m};|V6#ZGde$2vu`08Ko{lHS!npj6lc*%PSZ!FC%^G
z%75y4x!$JfG7`H3AYxa~$~HYu_YwSiVOs8!r=$wo*+$Yptgqobp>F6#=?wF4OG7=`
z(s2_YLRkLTnV?d@LQ!3Pb}ZwU!<+O&A<q%s5b#zA!n9DALv_+S6$hc9VMtoFhsGw4
zw>7=$um)b;X__g-aQmB+-;~6~rjhLv;xU$;`-_m1tFH;lB(jGhblnq>4bI+gJlT9}
z{QHTT<>!Z}Z-PH=CNO-BgVlV~u)I-7fPi%P^DRhAiy_^|aB6x0!L^BTadrd)xf_9x
z{N$Imk;vtZRWkCdF$)c<5NnTV9Zxo~4Da)EtT4)-6`=k07I?G4JIDFJLFfKS&{NP;
zq`otpq{eOk`eX164YHZY^#RB7E_3_Qe4drQIe+%atE~q33#>ruKcAV+m%&DO>92<Q
zzeiSVl7Dj^Z)7@y$24O#V}pXKnT;SFAhAHAm0Nw9=Jx#jn`LWjYk->(JHNQ7L1twc
z(bCd_$Nlr8#dUsdZMj>`8d3j@ho|x#`a85cPXM@<_ZHaMOMx*mVxz6IvqZ;>Rp!%M
zkjFMeFP*rSz8^-xC=UEffsdz~uHIqb-3PVc(6s%n9QmOC>aTYo`<;<-qPDHO`#F=j
zrH98mc(-g42Na+y!W_6Ldo^tu?6xLVaGh5A;XA9V|Lq!n-Bjvg)@NF-{a?OV7M74t
zpMcG(D)uRzY+inTR(+z!`pympgy99h<=y@&JAncd3K?P|LDVkr=Yr9ii~~TM<vr!&
zb6@O`0qODgdhv;9hds1myfzfP-U2ea=yNc01M$@pt7&Hl&}IK>Cnv{h{_f!&`CA~K
z{NbPR&7W@wrzfd+urIcChW!Q38t@1KeOXr4Q>kA-dI_K~APYZ|II{Bqg(~-~W#9*L
zn)Kk-AR;gbCm{g_xNZ4@(O3gOR>&_ebOeotdlHKP!2lfQ?uFfeI?zlu(6%|@z)+89
z^4Z~?-NeVoPv*7JG06>?%uok|!k6|-Y~Y=+-OC%*HYnu>zy5b>1J*e23mj9)_!8ZI
z;2K}D7JX?w{gRj0PF>v$9{S7ZJ6*7Zl2S~Ip12guYi}W-K&_aIhX;h+4{2@4*9H0d
zVo5ewSXclPZ<W<qvapG{-{c??C=;VWQ2o^+Vr<>q(3K3B?!@(%!N&3>{DXhu?3wcb
zW5XvTR~FW5#;#0^j36nz9Z;wfV(&Z5zz^L87r*Q+c6zwG+Z)<_PEXeh5Y{iT_x47B
zfc({s4NX;5)%WjhsS3a+A&)TXjmC>v$R4@@UN60_xp^++yD<1wPn_*42;&#q7IyEN
zBOiWhu5{Ald%>BRnT*uV@<|mwsUlXu2_6c(??>i97u^KBo%bZ36rn&ed2ndxRXri*
zcjOELJS>dbT(3S0{uZSv?wdM1@H<F4o}a`?URqv;pa!1o?b+Ga)R&eHx~r-sn2~dU
z<i)N~vmayqM`S@jcqAz$1)Oqif+RQpinW;1q=xsa<ta}X1BsBdj0`i=k8ChBBPYp!
zE@iL~&0zZVU#cKv*=vTv=2rmShlPTY;||;l&Z?+*CU}tsQc{i*M}htffryHa2lfcN
z()SN+Mm1|HD!5<1e9v$n2q(eP0F{-3_?653&Yfzz;T#~W4+y9v%Aj#y(+7(EB)2g8
zb)fOa&#c*xkN*vF>j4tfzoi+xTA2JZQJ}i+Z0n>4)l-0Qv8oH;#<87#YTt%Hyn&_%
z1a|<`*EVJ2K<^B__|nQN&%p28|3YLjZ!6)ue5l}b4|J+27-qW(G!rr)5r>n510TQm
zIIY5ECoS%|njm^fiI9*mfmK(d((;vBT8u+@m##bV4CGAOd3%Ep$4)>Inw}9f{S78?
zAeU>aXk%^g2{71t&j*mH$7gSP%r<&yp=%sWNSP(!+!nvVMF8YtH18U=F*BwpYpX9T
zFB9Ln&*$w~{(iFq{Ks0Rs>>ksCs-L__4D{yG`8;;yp9MdaxJaQ;&?b)gMt!xt(-NL
zNH|QZalmZ5k}vcsMa6&4`g~v4Z8;7o0pchK077$R=9=i^D6z~^0pMT*g0MbE{hVfv
z++hnY^G?Da-$=>HU&H{|;M+V?sNUPTQh|Ta%gM&pp)IBZYfk13V%bW=<>8c@pApBU
z@eLwPR&*9<I~ZUaZf<ZzK*I&eoD4{=>Xh4Qhlwo!@{Qn3VEX2~UVr#E<n!u0_N)iG
zquH|-&Y6%f!Aq#+gX`pHt_YXw1qPYKP7efjxMQ~JG>$vMENKrXwhyf!cJY6w^z2xh
z;%;}$y9hQvXH%TXQ>}QOG#|)eT3T1Ft=bJP_)C9dJNtLHv1jOENKWKk(yFQ|&c0Ic
zrB%Q2otI^}4+64-XQopNOSadQnU*!SzF}xv-Yp@S_w}~PpN&~xyDR9~t|J+qLCq%j
zPcJ|+1F4su0LWcgOGZ9Ix>CWTNZ-Tz&u!vXla~Mz4*X<>0nVE1p;u-4!1R=mFSf6O
z%|~1i_DuC}ATq6>oBuB$vi?U6<U&48*Kd)13=E`s<sNGn5e0qkIYk0qE|BC&Bkk=<
z!VS3_kl(hvul@+hKYvaHT5@6livcw4o=>*0Sr%O1yFF7=kwYeN`Tx@^_&TfqfqBwo
zZUtMWT2;TIz5P%xD#`BhGZznwv*ghIt7`<-DPi$APP4ede;5HlsdZ%pw6-ayz%{+Q
z8nj7neyt7R>8yvLQ9Qd+1VzWhBu#;+k~RYB4)1($ys`Xm*ExZ$F1A0&`2m=+myI;V
zK}(Rw{ro#;59V1^k%UE*MgDx{q#*3jpYHO~yUOL5Yy&&f;}$+a?JKuM9^d^+)l}Jj
z6zq}Xs!@hKm)%g?P_&{yjYu7Ma)J;)zEeV=Pec0ClY1p@zoS_$+<(v{0RZya(f=!8
z851w>-gs%$R+qDSs8*3Gf73&FKRh-5-h=zD^9ymcryVp7z|00(fQRm04hP{?iO`Ak
zW-L~l61w2>*27{cthx89#yQZNw~e#@IIVz)e`xU>T}Ck8Y3O!)o3HvQmu*;3Vkuw4
zxW+{K4oT`zaLbp^Sa})_)e4mY0t{_3C^ON9Ue0?OYIT*vdR%OoN+su&3XiQ~xs>)$
zORmW`3E7|hRCBnM`z$F9QTQYit`xIKUDazi@s7qTHX<y%16IIJ2?mATE5;O@4?t~@
zp#<sVZ6_qa-`_jR`^vy8gL@+<tH&~0e5t7Dk0AekEJP>^rgxBh{5JFWZR#=EhwnKE
z3a;*Mak)r2@wvUV#825zz9`Yltt@G6%-qy&m6ekdit+;fw*sIyjG+fImHBJbJpcIm
zO0*lgsu><Z9x=W`FA@nE>B(D7y3T@}TC)W}R3Rgc<7=9`@-N9y!V}a61_wE1WK+4l
zKvyb2*iQ>_)X$5^j{f?Sor-rF_;A}*0Am7e+>c%1K0X^k6Ub!J;ppt-{`EP-Pg-^n
zAx+>FCI9vR!yt>OQ!cO4$>(`V@_d+*(cgG3=i5N~4GGTnUN!q$IWoaEmeJfi5)^c4
zp&7{4{b#o*sj_7&kG9fm^79L9P`)(67jb9t91g}(76pq~d@o)IFmXiRN~fZtg3Q*A
znsUt*vw#)%L?RzDzIRvp|77^Pho|iie`z-~1noxM5b@Trj%)`wB9I$z#+KOlc;ydE
z><3^D4IO&?0~3qLkx2#K+baF(>YqSTu3bNJ5YisqervTaNoDpS1u;!m+|9o}yrXH<
zeR_}jWg_rzX1ek{g5+d27|vpw*pS?wdt7J8r<uBS1%-bDINf?}`TrYa*pFCp79yhP
zeD0*^#wJ&Bi?>)-;a^M~7J8)RBu%SFHzt&YC%CSNVazuPZyRhkXGRJ-uNygg0_lme
zGKd8$&3p&_PBrr-_vtgBXmfLS2hAYr{;ue%ic>VYM7zowBzJ0rBRxXz-i-<+WuB}(
z<V^P7%?M)Eu8(~Ql?150vz;V9UuihRa3M<qfk0GLRQ&P!&2^};YYgpxYaioOTw@~y
z`1QxDjy3a?`J6Yae+37>dD8+S#Vb-CNErGD1+6w%>?|IjpQ{#v^zrE?n-X~jpcjOm
zf5dbAB$peN6R$$eY0~%Qdfp+xy}xu=2~*5?Uu%ip)~<8pV=gk?UwWIrvptU(koQ^c
z8kHpxa|dPKeE;~Ou5tQV$;A74ZQeny{lL-^{2AZ`6zy!Q2X$5#EYl=5F0K|@Cn_eU
zfF;w(LnLrA*MfsP#5pvzWCdUg)Ai8qy+Ua|MD;P^%v8Hy5aVfW-S=yAlQ~i-EzS)P
ze52XD#+XdEr$MO_K5WXR#-iKkx_9kw^4BFGe`RFm754P3uQS~U#FCSXgh~x-YA)Xk
z=7K;vbSeM}%q)-dhp>qG#yZG<mRHf1+PiWHHq;BK6={99ZAm$Xj8FdlZAB1o#ow46
z**h#J*yRO~g468=rCJE*%OB8=`$&qsUSBMqzY#4U_H6p&9lfWS(@EXwN=hc2dZ9mq
z2jKw%@g6td$9Hm2WMHRVyNpu}P%MzcL*Y4a9%hgpxIIo&@=*{4e!#jbPM6s)ynp9(
z?WrB$%OE*h3*U3Vy>+^u8*KZ6$_OMmIr2E247~Ag`DQ-KR4ib=Iez^XX^N1Ke&^8^
zHT71vT4A~{P2?&PY4(cm?#+{J8r~abAjlj3U-rN?WI2-a9-Ul{(szGcBEYPJcB_4B
zu!c%31DuAow)Rz8{gXpLG6F_|;*t^}$2GkItwzfUMLzn?&2>J{6E+oa{rZ7a$~Aq=
z%xopymbghwFa4Z@a<x~tIk7QFMP6MYV;ITsI(Ii2s_w2`=q5r>FPmXm`z_s9mRfXW
zr+@$YRf&!z7W8>w;NOu}<NebDl}Vf~+eyPF-^<D<4l?dWvVJYjhuF6{{w0hnJpGMI
zxsU8-b?_Ol<-oclFoM3cJAX-yk%mY8NPI^C6Y{y7;531tPcrxSzdLP=-Ln13&L#h8
zbA=A!GRHvue6oNObig~#c8b1!y<F%{1?k5bxMRSUrm8w>d0~LtE9i2`A%i;MK>)x>
zvF?uZ14NE|e1aMpn1_=DIho9R&e3MEZ**&tyRlwlfcn7m(t~x#pDr=#+N+z*H#-l#
zatLaRi{ohs96JrqWW&ea1=y3FKcC_+%Py)jhcN`_+>=ZZnGwY{&^JuDRdr%(9G>~^
zz3J{~%C!wyi2kD%<#E@grI7Z6-qcK3um2l<j~aJ$NSu2^T0zO@?kcO<jyN?{6`(#G
z`Y4t;^Udx_sw#;52YpaJ6#)FmI8Ey0xc;H>IM}VG#*wcx(WU{|PQKe<5P_%e?vsx#
z5cSJ@-@bhd3_PU?<>KZB@!5;dZ~pqF6dD?0Up)AVM(WY`$jE*W3k(eDIqha;P!4rX
zSV}%H+(yV^YWZXYm#<_jWjTimZ&@tNGMH`5=4)+cAJnBlV`5_D;1CsU715G9b-Fqb
z@cHHOldEh$a_ax|4A#}8Xv{z<OIke(4K}@l?%^konjeBQzuKP9e8E~@QQo#8r&4V2
zx7hG~licjy+qZ9Td+p-5s9SDk{lY5+*4*wcrd&FiN;NA){YZhDgIpTlyJ7B%LqF`x
zG9{&>O~H|giP0e@8`CTzapJ{~C6!y=n}agIIk=EU!<Q20a}mK8iiLV^(h)|pKE%m!
z;tAnpH@M+11}xqhz<l%Aw^0zi?_A`zW>VAP$hr5IZiy?c94|!9hK=OPK4`EUeLehM
zUQL;Uz;P^<(OK}jvEe=JI9RP{5LZy(4gQHaVBJSP4e`))oYds?N%&=*635L8yK%gW
z;<`Qn(z`fKdfh>yfTUzsm!y<Ti?yyz?(~B@#JWO0_=P~?Nhh1qme}O|b8+wd{K5n7
zU-4@>-i%M;ImhZ;3cx#7S63q}2F)w{{N6k&wFB37M@fn23uOWggGY&B5ClXyBcsvJ
zBY(^+ThR=psb6gtC<$N!`dCiR&Zp?JSH;7VL&xHFq`>~o&CMOJT$_`V3}YiFxYnq*
z(xdK}br*OD#}?Zc8h3K9;Yhw9Ez+q0medCVvB+v;Ai2x#eife!U5?|-q32|=cOVuz
zTzc}x5BvJ{cA24-EJnQU_?)`BI;e4~!QUcv+l2HdG|e{?lKJ?#nYYes9LR4>()pL}
z@Z+vjRjmGuLw!|sx*i%ZeBMCCKU!!0bYe)g!wDE?x%AWnRg#K7eLN&#dAHk*9&$kG
zr3{RZ%PXk22%1~iXxo)e3k;pIM1wgr-1B_z@O)!_ex3+|y2Cppy2D&i11RLE0Htt^
zUcqw8-eswTCHqcVJk{n^O&`|ioPf$&Z2*E|SWNS%7Z8NOU=H>U4=R7%3=j@!Dzc%-
z8bhWad#@U7PyF9L#=CtRsj#-ZOikhhtI8q{e*2qjpE){L)@$JxeQRe}RQED{Sy@Hp
zdb4(XeDcE9R<^S9i^POV^Y#TsrF&m(NAsTr2k!}*<6jrvsFE%iwZkoENlH!;M{)*?
z>DtUXoVO*(K`xT<!C=Y3p*8!auXjvbQXX$6o^e()9#gY;AgV@=vY}6A;MnUX^T`Uk
z%jgY%U+7}JAV>(Nq+sK8f4dLsg-bulB$6#t54ysxRGg+y2&iC=XL$qWUU-ZyO;+0(
zsuk%tAcsUNYD0~|m5iG^sWEnaanaCWf;8#MFBlhR2mFG=rh~$%eS2n!rRsFI@NZXo
zl0AC*vKqazb%*&Q$g2w`KHi$K*zW3mn}|EiHrb>%J83T2fOG9yw&J#CjOA-RJ%ziC
zH}Sx3ZrF5lQH*R3`N7eCe<UTvBK`*o<wyg!LDp~HlQ3NTKeJ3c0@(vb477G>@TX^H
z$cJT~Tp;xsQTwO|ygVF2O#`*YhK5RQiQo43sgA?5kbyVw79X>i@({UoCellLS*(3Z
zX3=o0;dt=~>*XKvt{CE5^KBfxHsRAvf(o5QMXZ^u-y?ao3!Vao^@37y)bnB838!Y^
z1k-PS0ZO1$KYj^jc<t_+;Tv*F2+0giwU#vsi3zSqjx{PgCt5=z;DkOqLpzMF2|??I
zT2kMy^ucIJNDhJZiZYz#=~HDnbg9@BbO1m+va+&LAYK|TNZZ@S8^d3617&cn?cf*C
z%wr_!3XY*OHkv*dP0(eE!^edI)TjU;tk4C&9eNrb5)u|3x@avV4ie;nt8vX!E_c+d
zLIZ>4gP#t9bk?LJ*-e%mg^T3N-Oi**Lua^>HQ|r_-{>kR$YRP&;4d@Qm1ShFf)_ho
z`N7)t-*k@IwO3^yT-&M^jyysREDyB!gVNwma68E|)N#gr5`}aWghfb`2Td+nIld8m
z@ggijrm#syMOitK!-0-FIsvviKi}v)Q`^<m1xTxs0gr*4xpQ&Q=@_(@N?&w*p}OLK
zHCb|h>+mNkB)qxX-@`Y0*5L~x6^gaI<z!^MWURcTQ6CpwFEak=1t5oG8c)p07Qbv<
zZ@;zD9}%8Z?mfelr_2Kl$%BKeid5kYBdi-AISu*h_z3;6u(_H)iQ<j)QCIKj(JJ#*
zl#F*Hrk_NoH7F5^tt4iNwizCZiP><a#Z=fW!<DDW(Z_##1k?HP6Ob+W>#n>GCSKnd
z6M5XH*W3+vZI9yJK~6b4#sWgkK?xGBb=1^MO7`Qr6Fz*n2Ev`p{9C>%=G~?d_&T;>
zItXlm3j6?6aZ|JzM1IQ1^?$2530_nW<>274o^InMDvU}^-FoRo_pDtMC;};trx#aN
zWLHCS<x=wtisp?0I`kPgH#0!XfkC(ex*mOC(kq$i@MC&f3qPlZW&l7?zmrb@+-<ev
zo`KgzQA<vL+AB_z?Ru30wSyCZ8ZGb5@lx5i5HLLO)n60P<x^N)p8In4sxh3uUBT!a
zGf{V|nXZrL_MFZ7_6;jW#q@U2s>UT4C+AG8vzeWqN#yWv`8?k`Q*ocMeH~a5(P>8y
zvr5IbqowvSUKh39%iCV839;Q52P?1KMTYVmR<Utz$iJ5M+duWe^!D`VQK~4%!ug!+
zR|?fZradaE-qIUnlgIbM0tso~z)O_69#DCpf6j|=!4X?v4|0*03)d&K5n^IuB2Uzi
zFk`&<X|2d0jqT{{EGr?A_al0>zq7igwl9S}7^2L;#4=IoWuv9_c=&DwW{S3;Bb<8h
z(f3p<`l;{V_rE%jxolOYFkwH0m|O5k?VO7+j@m&Iec7Ea!A1}baF(1{oWOMthrx<A
znA$~8V{u4xjeA=;IBnJ&X>Jh^$jV6>taP-tjLx(KP>9;8s4J+ndc3hCB9HnRaa+J<
zr6>^Yy1@SXYvIRf<xF1kp(#vF8MRcxWpnc7Zms@b<<2(j4<0<&+}!M5C)Px6scZln
zWgev<vqJT=sPO^V$<WaE4ytE0Wnc5HY@MB%Sy`2=#}SB(+FEZ%PVSBM6|r7PXlvBA
zWg<8Om<w3x5MOaM+7W||`TM`=A4oNwE(dpR8-jCmWpQc;<BCECZBNHDohRhE-g;=Y
zP?^t5n2&fTKI-^YNtbCmma8FanrSGo9Vbf`HShU657*)x@>oYv8tG7(rIq)KpLea{
zqq0WsJe6L!T0TbT*_gC}QbB%nVrZz8(}hbJrI%m-%uK_V`D^6)l=X)%6B8wRZSH5u
z*}gTFe7uO)KCquu;l1W?o1Xq1emYExgRLBj=mk;7<)jo7cH_IJ3i5#2%WK7a+l9zR
z`+(hv?HVPP^3dWL<I1TS@DIvX-ae}Qfbn>*t?BUGtI{2fzK)R5F3`^YaDL7DLno`e
z%BYfENA_rv<^`j)cHZ{R9LezNlo7q_h^0j7x(!Eu0hdg{&mj|p)AsbMLTGnZ+uKPs
zUTducl1t7MP>U`+i#)H~9P5!zEx5y!$l;U^LIWnbEfU#4W+Wg$vg*|Tl+FMhad3nJ
zcb<XEOw$VqG%5dR1q|ldT6BlhB6I#*@##;UoOOPc_I8F!Jp_RqT-}SLn$HSI1_p4l
z`wwXed8FS<vzt=gz#4cjDq0g7+V|vx8Hq+zQf__M!sO{**0nE3d1N;Tftzr^HLwz{
zlgM=DZ%8j&d}_jd0U;)dOOCJ9A6|LmkIU&Lc!=V>I6Yp?@i^YTShpx4B!BrC3GNU}
zNRu?s@m{uuoNYR=Hlpqk_k1~{O&4sIURv8DCSuj;0qX(CmzaYi4qC*)mmKz7;Irso
zoV2_hq4oEim+9*K=Jf<X2=MN)O@}q1+kkOm-p3&m5VO0v>1dp0zHV;cb<69)%ymj!
zZEZ~vB<JCe^p=2IWH>lDAW6SuSYxbMr_OaR+Ii=J{9LFBz+D10t;1@MouloiPhs^Q
zi1Tn54{NQ>JUGFVwh<nfi%7`%T-)9vR|81yCw<g{MxQFPn@{AA*6lQqIUQL_N_sJF
z*%@|@kI%(`<|La-wKOS~FCvStk1P}C?6_OfmQBj<fQyaPg`Ov$lWHKX3Y8?UH1ZI5
zP;q?B^9vXxE2~@x2rOyH$qU=%95fPD^9DiY{Q~eGs=9gGkzf+6GkNl$S^ZVhknJ5r
z!|FhW2>SZ<$wKANy0#|+^T4ae!4{RgzD_j;DE8ihbaX4TP8-{4oM&ypi?m+ncrGPx
zAG^)BCq&Q)MJ31oe>}Z+Jk{_2KYmJ)gocu=N*S4DlTkvMA!JM0dym7Rgsddn!7-2Q
z?0Fn}?>*0vz2~tGhu`J(eSd!aRkx1gIj-@z9`{x2(XHL#S9y%<9~#Aa(n9yO9ag*5
z&vR`?W;}FXPVeus7Yuv{^>?p6N-0seGt}qI@;Hdm`^<fFs#-Zg#A{(<UsK;papdfx
zi^GNYbg{v-51JyC;4-``hX?ec=CkOH$x%Xe5;N><VH68H_tj}`Y@Ev}Kvz;Z9-sOJ
zBfQT1f^*mf4fLq5i#V^ok!Q|GA80}2CoFd>U3!zm%55fPTnRf%21VS#-^;D#DPJy_
zJlOaOv<IOcnQ<tOLu9Lv+4hXYxwaD2aCB3w<YNT<-^$86QBLNA>v<<DrikjQEFm*-
z5Vw@so7CObHBo*piG>k>`GrsZF9$eHF|1+Rf~Zf?%BqV}9-YP*oQ1Bx7-yNbIwMnX
z(yu_-aX1rv?3v0c%q=LNsovzJB4&M8Ju3P`O!b(s$b^W{*u?l-+-YRKlD4M0j+&N^
zx`vt-i=92?p7Xy3X?(wjeTdn}w?Y{h2%oi`sMrbSM(^(Jb%Jp19|v)!h?CReUf>78
zN;?gFsu36z*eJj-^L5`_LhtU%1B!0}dZ(ob>y6<5+@f=S!f0FowjIWrLw!ZXP+wmu
zP}TXOi1^p$)&{fOGwbS-?{=QYKmW|k4+WVRoNz&GxmkZJ!V|wCh<(2b1_zxS40^cg
zes=1vZB;LJct$u3B0oQq&w-w}iHZmn;n%pw&rufYpn{2konM%^`i%mi8kiCJd3oxi
zey3?<6cqYsdo>%IP3Tsw)F3zN^g91;&qgO3dUs;2+GV|~rz6RER1Y_X@ZQu4N)fag
z`>3wBKfBi}DlFQchWvR?0(bMU4+A?%1TNV~jDpw98A)`(QMET#`~d@-bBWPH2k7s4
z6NY2Bxbne@@R;+sE>(ILF6h+~0%+^82Q7u4Wf_4l0d}8O<V^|pvu8#S$UWk?sItGA
z90uyrS;26qR^ahnTv|6W)D&X4e^b&|<vYpsC~?O>_N$jmh1`s3z7{dCawBiV!|wa|
z9EAias@l!VSrLZ2s-0Hko-gll*Ssy<9X0Tlc2r6dvR~~Q2eQF@t>P-Mo&so2|6r{^
zH7oKSh%p0sYH2mGmzSfw3zA6}OxOzP`wAHSMsqasL*(Dm3EACjE?OJOPjmTWJn~-B
zbG5`A-0}&uc^6=+aPU*?XF!9N?8!t#e1lHF>ge0?9_!OgIO)y~nnPy<B^$<@shqR+
z8n!PD>^2q__&t|@0epR+J0#?W_D7ekRz@#3{196_Sf}QRZ3cbgy+(5z8X8JU_^QUe
z>wI4MZc?=Y3fPG$VubQ;d3mwHZW|M5vX`V+btm67?*u7wRCn(V_c^RA8F(J!a|)1|
zST?&i(5P=G%Hn5#fW`C7SKlFE;|Td{<=L9^!?OM~l6t|7_<R3%cjLZD@oMM^l`+e6
z2qCNbwC2=PFSGti7r&2-qvPKGJ|}B(giu~>EjjbOTV3B}^e$`|dG1MgOW+fuqQ(o=
zSVTpuEB6+q-^jFWS~IE`%s_{;qp+SQ(<{ZMu2$Gun~jO(<z;4gD2lE#165gBNkykt
z)v-!8NUg4}QM)}WZ#`MMF<#8ly|cSJ)OXFeo63C)QyN@d30&Am-i!E>C9AviyX_~%
zd^W1U#ho5CQtlomp$V+4{z-i9F9Z`4e!p<;7|NfnDkY_4eDUS2vvaA{u_L*P17SB)
zS!{PX4fGLoA$bnGRnA*VXfW7f%Mi>Bjcf8QCAN%@7$t2#qR-khlf+%mE?*r1`$(Es
zC)lLwQinA(sZ5><LyuIFEXA>8ks9ie115tlyx<|_t#Allm(8B@<his*mJH74faY=k
z-bhh;`WO&Iii(<cMk`KL(*2+gb4DnRT?MfbBj9d!cX!z}^KZ}z{jdSC+6&XQzh(rn
zo?c+~#vc*Nv8g>tdf=@Nns#}vu9(8`JFQCysD@)P=y(^IuWXculz>T!_Qth^gP{vM
zZjO;SJxW`Y0i|{pz1DSIU>vtfrdn;WoZ7#dpO5SNsHW3q+|<<DyEXHVDL+47w9Ho2
zX-3jm`l@U9P3KPbt{Ci%2?xAl^>4Ui(Cf{?On_j|Yl2W8)uo^G3|{Mnx0qx(tIlCT
z`?5D^pE0_FHjB?f%Kh>uf>D?1tZyeR`r5}DK*X%Z>;m8HHd0~-kDvJU&$WbJ02>`q
z-n=~Q^m;@lSDjw!B$V+lJ)5Rmn=Ffg?j7Et1VDRVbh~(SChj;~mQl>}$nGMD948#4
zF`BDSXx&0P9ugB1o0yDvKW)Zh5zGu)MIcIgam}_Cb^etE<9@=KumAl`%rl8YtoJ!G
zl$N>+Av<W@(0F%K-3BbU9X&ny&@cwzH<=DcK}TcsqC?-<+|CpCuD?vJIa)M;|Lq3^
z+8HDjYX@!?#vr=gqCZs{i$Q_jx`JSg^HvKElxdatd(ngku5-kS6;+k*V$;)iVyw*@
zmzTUjT&jfQ5{A%OWXvQJGFIuxLInBid2|5CRz6xU(2$AV-t&ploGCMAJj!|P-sogZ
zndv@D912KHw|92|OJWl3Z2)UD<FK{edL-rV|NVO(={$(gHizly5%}xxan)=A#};}~
z7pwlqxxlmXa8plMc;7d~%G%oecze5yFZ|a{<xWj?_2)Mwl@AwL$kd8+>{WmptBRwY
zQ-YBBK#lv}^whM+;R-JRLV&zHfT04h`HX{Os>Xb9a;pX&6(vo&4y@4;-v65aHToxs
zIhq_Mp^O(6!nm{)0;b#A-iojSJHWnYARHP*xvmaZ3u@j;d*`G;X**eFoTG8za=-{X
zEwnltX4hoBgy69^^6(Hr3I6Jqa5%E_)SVK<!VWv+xk0T8J6*{H3Ujdge3{TH#v@1=
zJhw9uu(RFZUO2z)*<ddktPYA&knSiLgOJ&KkRY`EkBM11DfQ6p%fv3oP&e*`L02-U
z_x5%rj+WE(Q6A3gH?=1IVucXE0U}q+RfUd`ni1<=2Z@h}jQn41nG@e{cv+xps;NbP
zb2!Hpbon>dR|oe1@ngIch`BZg(`0*roqwt2=!Xv<rkqEuv|CzQOeRWJsKg3@@8sU1
zBBxH-yv*xDyzN{SZVM{`=pd5^=c}vfAUb_v@o;Svt)8PXS$<ybz9$1LD87=%+`s(j
zi)Kvdfi;taY{Qc|uc2NZ+5hVWOp0NR`sN-HCWKD-TybvCt=_Yn+KL8pcGJxc|Blug
z%RSM%lz1N^8Q}yCOF1z!VpHz?kyNeY6_<v99WS5`C9aWDXdSF^t1&AABfvS(CjNSI
zxH-PJR%A@g-Tbn~t(~k_Lbm+{y*s1l_9a=_fJRy1kq&EU9bMY2bgZECk-%^J_Vx7<
zNGQrIrnTW1tlOM3o+Ivo1Z;P{76tvX$F`jj;)XdrhL_t!86;uuE5HRxEB=@fT0(P1
z^E<oR5}sRIXlc<5_J9@a9tNuXC7{hWAS@SedeP8M^1{=QcQT5);KIOMT;JoKy%Uk-
zwwlGCqsi-~5-;JrN`)VTp8QNS?M<|#Wq@scySlr=>%O#69!4*5w&fqX#I2hElCbZD
zNw_S?aey^O>YB6U=tADrZ-5iT@YXqjQpPBxV6*mk5e~wM1?EVvcIZ_(rG$*t*FR!o
zTLH<Gfq|sC|7a^fj9*i}o+wD#XyF8lZ47X_$j+7nDFh-L^Ff>xbV95=Jaz=Uw>dss
zmO;#wYqcrx4j-t}_9`8>&URWEJ3Hi9l#^Z`?{7};e@>*Mr?<4Qm?z`^Cca6Z%Hzvk
zU&whlaRuwr$=g%zyt5!@cVpY?`53#EV^5TwDV8Gt44a<d_N?T*uwlL_=$mwR70ZYD
zg06~fxz0z>y;*al5w|zJk>~dQes6d8h;!6zswZ)>Sl}P__wT;Qk|YVLJwC};s#4g$
z`}6}BcesGIeojl4dSJACcH$#Ad%qD4(wxQ`|C<%#2(?(zM8Dh_^XmEmR)m#n@T8>t
z_v>S=tpN^8-!3-?69YQgsuO9zuV25w#;~y3b#QP%@$=_(HqO@WZj_RCtNK8nFB<Lb
z?k*kZ5(9U&cizWs|3YggKhk|*XV9fu4%v{bts;Wl475d`&-G_ARyj*$Z(~~`EKJM_
zL$Y0Os`8%?mvT3YKGo)AEC2CfpsC?^ODDU+isZzy#A!wGNfSNpZ8%6_Gi#o1)EV_u
zpx<M!f5lP=m|P$(;$o!*xM!v!+y&%<GRaavp-@qwF|{Y0I_sy$I-^;cxJu`>5wKyG
zD43ZAgFrhi%ObUEkTQqgSY3U6$w{H>X-D!(4Hp;JW=GV=^xlSd`K%$_y^I@!%qgcD
z9+RDEl@XzOzkEeerKy1slF_E1Q$yJ>ZF4;f<6DY+j!xyDepl?i1gM<R>j3%u`+k?l
zCC#r^=}QXntMB`{X4C$uk?&mpn7D35kFiqe%5xpaOD!e#=lJi~3VC>YQS+Oxnwr`j
zMn?4K)&uLwGGJdgS)1hh;aSG<b$JmXA+C>hTgk6{t*xwX-@eUd@G~5(xnPPI+O<V<
zc6N0w4`mG!QNA3i^}0e-zur~NuskyXWNp>v+=a&Eh&bwD4F-<4965Q&+{(%{QR!Z4
zxfj6Ha{a+aZJj7BzoLGK;cbx{anIeH$o-eVB`r54OJ)9KpW`8i7+$%}xws}m&TMFM
zsRVQnK!!AET7Pi_rZv`9PpBl8=D(;x=<nZWt!C%r8yXoA;NxqWp0+;TMN`m=xPh*@
zwLkBmHb8CyC>fEZJ%}(+4^R@-e^HN0;*v}AjH`CfdJ>Vkv^*O!AM{#Kha~<ddv9jo
zNDqb-SnMxc)tkCJw;CWnN6zR|`XUSsJEa9Rk0G+_-@~7Rz+{7SXv9fFE%_b%*zmH+
zJxNUs4OL<>hj~^B3Gbjl0)b#IA|{r|zC%Y#D{9pA7BFr>uNW-TD}$ze4b9EXE-o(m
z`uZgv#U|Y%E>`$iXR!Y&cB}r`0L`nlwcvt^>(<_|*Y0|yRwC8exWK;JJ>RMi!^0XQ
z!}IDfcZWWFkY97i?wsw|qqAOr?@c6WrW*S6Cg?aqAP=6$T<(JyvX#(0$m{mxq1em0
zgtDLWFZ|rvjX>9pj3ALn0bybDr5<|VOXIrrK+wjsQLpUj(+s$P?d-EBNusVc_1~au
zDM%hX7>+?H{H}$7`v=l@f#dNU)fZC}6C03?dkJeKS8Q~<sA46kYE}97PrE_&fr+~`
zOB+whoK?-~bLLE7i4F<yAJ3H1F1W_4Z+9@)A&@S{7Yg7K$&6r^oZQ`ojr#-y1c2un
z6)Ui3ZQo2?v7S6jtJc-ilb4fAFK-=XeCaj==z~D_SyJPvCUN@rgMc3JO>3q`I1bX#
z(4YxrUCqsYmp8$pNbKLq{z=?sf?J<yn9vY5bQR)r{MzmYsCh-Nj6)zJ(y5CG7%2rQ
z(m0>`QF?AA$Y>V#ibe;2GcliA<%;BHPw!O(hb1X|7o1%%t}mqTDkSzU+paFSS{_EX
zwaXAgo~(-o4>&;(^Exs`WGwLhdp`$$&Br?lY3+?Cz=Y)QTcNu4MmR8+;8DAlT>nu?
zpZb4B5P$8WU5Pt7nHmCxA&`%xbb{&)qTpTe5G`sFJ?K)mzdGp{?nhGe!!U96mE~_u
zRRedT&xlKqkmm00#!>FR>Bi3f{y@Oa*w4z%W#xL-*4@s*#s&_R5QsM5UA0JmdcJD}
zaeSCpAoYXWBPb+``@>kOv5vCx*3{H`Qxk1e)P<c+Zdh7caX^4(j=(KHzvK2mX2OHV
zEoVVtRK4KE{P}j94vg+_Cz11dKrxyq+p@C!3|;8(15K)QkXfV=OmWHSVRGXodaC8V
zx@2=VWl)`sP+SQ2eCQGmvj$R)CqYYR2p$N2Q}TbGk|eoC+_CKfJ|{`>pGu+scJpx#
z93GIFDR?3Jc`q42EF#(W>099C*9PEL!e3u-;~)I9>RCO;Uj+_S7db6YoqUoTuMn{Z
zlm~<Fz4hPs^fgU4=KT5N1D+sj3egpMX3!~t_;_4s6Y5e)#h%D^48C~0xV-#52V|o8
z$o=;Xyp~2nk)N*s*5XIL|A_Rnb))SpN=D#Ea{u{U1GldAUw&NM+xrC}?u)_2R^WZ|
zn85BY94mrp5605P#bv*{We)BK;^VSC0=Dv@!vA`~(m}7JcmIm!0_t&cM0Ejp$f&g7
z&_pq!H4RNQJv}WAE&UHF2|60F?GTQ8zZHeY0J?5y^WU$7{74MVLzzm-yJGu_24+)h
zYH~{|I)WTJ7-&8UiUP(wiz&4$B_-k>EQLPUQSEy1?KO*?25<!s$gTgR1dFeiQfgI6
zBeo^v-gb8PnLN+AU$eeEyE02NGqbueGjCzJRF^Adt*EXpZLV$()B2=gto4XD1aA9R
zx%l8%SZkCkA%}zeGo-vf;3iHAA@?OSLqw$dNRW~ukS-wxR{G?SnFu1SniT!%^^Moj
zt9w5opHsjydwFqQ1{1^Nu9hhD2zsR?wXgCa3yUCIWlc#5vMNZ6L=;M5s;Mcc%#FR5
z$QHuYA;-$yVdAkvx-v7fPUC(2*e~RUq!`}rG5@9qOvB_Y+|HwWK11IGa_>ez`^EDH
z;~KC`8XY~J6$T9|JJLVhpdG01?`B~VW|I&N)?y5r2qs%*kq~36pOkp`M;b~U<})>P
zAIXIN%T?+upqZ9--^XRy_qs=YNyv|MYGtK?tHg$!9Ov|3AzQ@1W{Ds^;s4#j+->vZ
zAo=5+mX;9=TK#Z$VE3pvlZHp;)=R>7|8lY$TM>zNN+<Xl@kjKmUP?8$JL`U2{w9Sw
zB}&kn4mq*?R#H=v{!o;C&E)zV5z30y7a4Q2<rPtEJgb!c6EJNIb-}1~dl)tH?uh^n
ze#z%5&!>Ccnxo8Oh3UA;iey$XVEmpCNjn<vSDKm_;XW5B&{=&<EGh&wS}%SsEF@eW
zvix34!-e-u#ymVFs@i#B_1_BhP>o)BQlKW6rg|i=uL|*Wtq!HfqZ9_dSejajPs}f=
z9%I0W-D|b&GH!&_8G@6xfWVRE<(st66VGXkb(*$)yre`TW1^Y7Gy+}7Ht4XwekyXA
zf41Bj%=NMWS<*5fQUm6qF;Mz(F0=Q$NJhRnks0rO<>jYuxSx0kKZo#sN%xJfXfS#+
z3V}SlN9Cw8*6d~k3y+J5iOI=fzk}#WtafvA<M}HGcnW1MN8*=!K9YI~nBt423lj=N
zphu!r$LUiQEt2FD!ar>=C24%zi!^;NBv{Ba>G_a8GkqOJMOI1A43|R%d<1+2{CB?U
zzs9{zjk!a_V~Z5;(mJCBNHs+I|9<Z!+*sip*v3-a<A5LcRT2{3uON&K5K$cl0Rsgf
zftJJB{6sk))YZ*R1O7=vjGhcvruuC@<$3awvk{k%eq@eg9Nf8P78Rb*B*`=(eQ`Z=
zo3!zXNU8Df(VtSRwadR$0UwmD=^R?$$(mClhZh5}*ZNHQT6mKB$O841Zq(g)_d#j3
zv^FJpWe{z%_Er&gjRXQQ3o+ulUVUGgqu5Lm92OfIv|oJn^Y;g4`BCuv>}>5ST=m{k
z8qLRy)m4kYH%6AhulgVw@4(8{)%W~8lK$1g@~pY#(l10}hRxS4^zm|B=DoqDYFo5|
zL>KGX>BeMKr+1&jzqTJ`yh!CQm(%p#hz7aDR9)45Nz^G9%--2K#A&y3n!+$GI@pv#
zfXn{8|N0IB2K;#pP`ys}y{FX&>$;|vmN`7=Y!2svrsoROjsD;~ku1pT*aM6`K46lU
zvF+{QJ3#_z|8D;{O{Tt$N?4X|hIECdknl5v)!a`3>%4~lWv-w~)^($o&*y3Y;Tn3d
zE=((s3;I=Nl9C`wqvI$2B-^zl(ZfyPZC7qFoDBd8Z^FK*yL%-FI6OZi=#-eLXlTIj
zxc1oC`}tR?sbf;40#rWe>Fbw)l0zk}WqqQQ3Gmc#%g=!+mcBj)7!>Lhn>d@8n1nHi
zRRPpsb2AAJhi=b&jf|wyE(AVxLv6Fo@-AB#dPYXqUa><4A-9KY&%;g1K=?BBkm1s$
zOG6VYgPFD%h2g*TPBC!!WLtRJH(x2R^#er8ZguD#@uI)J^v|D43&u}xK)Rw1G$BL(
zw7<$!rlx$jl7?UtAZKlB@Bb_L=FL&`xy!I}2_^QgIqe<9tws{SsgYU}Jk1=`zS9zx
zik&Rm>gSQYw81)|7iFA1r^MolO|5z9yf!gDUTSmKWnY`l@@-dvZWgzjL$6oZiU-@b
z42iSaU4*wg+uFexQ!vm1g)xYBcfo@sQa7hX5``<Pvx6{DO@z4PW|Ci6W`=1S_x4(^
zf#=S!@`EJHxTnF?HseKmCfdY<K@(^*F@0N{gM;HCCwtcy!)BB2cxm)#o=)bcIFL)p
zBp{%%_k#Jc8zlEL$prV$Wgw61`b~6Ica@}RxjsZzaxgGDC&#it9|fpkrQYWl(6#^6
z=-+=jUF{kb9ra4}Ti5^f0-ip3@_tC(ohzejFte8xberKzJ&751aRZ-h_S+*eL9US%
z_6!RoK|uDjxv<b4O61_=1Z?jFpN;~D-Y(F|>r0vQxkLmk*b9xCuUojR4w*Y`Qr~qx
z0GZ~)!~8=WG2CjhF62apY_g!$4ZJ~jL54f)Uyy5FRZvjiPtF{{tcb)~j^>No8F~Y_
z31ooM#KJ*rCEj|gZjXl*!b6_Gv)WTXT%G<`azSrnq6|}hg8d{#!bRBp93T7KYj(g^
zB1y!Uj@||9eHb<W-H|2>_-x^&peJ~3848L6CtJDM%A>VRw&LpH3STi!NqHo*G#bCF
z_6(Xbw+`K^Q6QsQXwK8#Nz2IzZnz9u(|yg$zFOunXab(dW@r^mIpsmx5dv&(wY}02
zIoK_br-RJYx5DNtj&jk5(M_qwLg&`A#E9^M&ud&eTNZS$wLKV+tjcnCpHL~O9-3ZT
zUROaP@q4*(5fQV!A|fL1sc|2HZAbKZWr^{}Wfn%lR<JVm9|JhpqL24uwu~_$<7iW<
z_cM8N6il)=Qs6kdgAIM<LjLYJUg*SE6m2DRD@oK>J58_L@Qg#tV2EQQZmKIMvW|jg
zDh&Q^@Q^$H5W9#j9{e0bIDIPSJH#ZG!pFPV@M(b@iSjsYD;qWNLOxs)Sy+6A&|T0|
zv`l<iHn$_om`qLFognmyul&o$;9vWe-kJF;g?3VCb(`DW>0-qu!`#9&nzQ+d9!Duq
zzL%-YAmUrNy8If&n#Z0AF-n_ilb-*83t+puxCqJs|6R3*N~5E+|E)T8Re)>^65k^p
zn>ds8>Cua9yIfMp@h`s#HrT}qv*6&$Bcp?-Lg0i4q6t!aSGje6*kE3MUwpp^kJ931
zXU_qh;?J#0AOY><U_%k``Mu9hK}seR_lL1^3b^Ri)%kGh2n?<QvWTd|{NK~Q6rkn<
zTL&`z3Ft}cRo<@lJT{2oZk=CTOc1h9PznR;N}z2jE_y)=D`H)Y#-@vV;dQH=c80Pd
z06q(jn;=tSO=X(67(e)gG3X-2eQws~^z6h|&}Jt4&?Kv*q^Z6As-F;KM&MKJ2>S@H
z4hhTX?tp5PYgA-p-ia%_;^|gi*tu@4KeN8)LgMnWJTSt5;oF;o8Qd)JxhE|lGy)c1
zywZ>MskaU{r@hX^!fN(=G7Y@WHvfc6nS)gxCP~KOj`Pbzc+F){C&fzGA|1HrT0?c6
zu+x;BFq@`jnxO{A-j|QPxsBs(Yj<8+*G(M<v-NpyM46f)GXq*v{aj@cVeZ@iOb^$^
zDm<ID<AvQ<zopL)VPm`!V`HamXO2MVM$KUlyMkB;Ba3o%K<AZ8zF#&L6i>}%`!`ix
z3s7nD#?qA?)izT<Bs_3bil_KVZ0iFVx^w(wP)HXCC5Y0b6x_Vkoyf~6F1`|&X+TbC
z`|eoW@(416<?rlC2xZ`fx!BlX{JqbU4_{K%1OJu3{;z7$=lHwU+hSyl20XU+sAp7F
zYwQUKTvI55&lP*t2&UP}mccm)Q{0`OqdY6JYKAg;7H(sN_coJu7BnTEW=_@E?d+aH
zqgieL78k3P=O>E1DT8}&rNwED|8F!qZ&C?6G(GevQc4U;4ZBmZ?J?+&HY+ymcK2Z*
z6MO8T`%Ey<q;_Ybcw;gkjE;9NR8S&yNvsa5Jk2zqYH#0OggxKHyg&YOGNR7twJowR
zjeB)fF^qv9*V&6rVW@m+-qS@B@eNM0fhqJCClhw|WU)R~mY1-k#o(7y^5$B8CL4>N
z%yZ%s<~)ba#8K6}^ea0aX)zI~G%}*KgU#wK{aVks$0kuUd@<sKms9D^a)ZPJUJp%x
zs>tktpEi}XN?o&?@xeQ-o(<a*)tgf}F+rE)z{Z!7lF}FuHe)kTQe6#gJe3T}?(DD$
zWkI{|AwO&qWMHsbt9Vr_5t_7{<D;XaSgZlaP3AhFzJDLMVqP8ZPET(Fm7N*JP_6}J
zHB5rd_xpD@xm23i%=q~D+1bY+RCKrK_k=cv>+W@k;XSJjI=~h9fQgDuy5+pta7^}`
z{Y+mrj(#CZ;#^h2q*$}S#_3mHR+hN^u2ps0S?(vQJ=9@Wl7QpCb~P0ouXV>!wTTk4
zVtcc4kkRdkhRYbV1l}pg0eOJ7TQ6O{S5@Vwxw7-J4GQb=#0NKSY%9NgyE;(W|Gw7m
zu<LARNuuIjEgrwr%2<s^1^HC=yIqr8uog~7yaLYW5~?>rtoOk)y`kZE#YK)u-aDKl
zR9eh$2NjWDzq?Rva5*1NjE#@}$tsi4Iv)Q+CO9|%LYB4`7gsA9zA{rqSHi^3)@;2~
z0+Yn5>`1qU*yhw!2ld@ntm9!v;Y$;x)=W{*L8*Geu%$gWYL_eL93t*Z+oq6Z-%7C&
za04NSC{nBN#G)LtveeIq4ohK;-n4?&rsQ+TYS%S|EJ7S_|JAF0CDyqqecy{C)Ciw*
zvj_(#23n0Le@+<OK-`S>LWF!Jx<hYcd3n3<_Y&9<DHw&Hn-46jr1|%;+>4Y8qY;Eh
zzjRw38++ckV(*1NJ_JK{A~!D&5S}s#jT?`HJch*{bE*J@e_zudw{4gCHu1Kj$5X%n
z9tSQ<*ut&gUX1%8fqS`B(994kyvM-6>oHbKkY!OwI^PMfeR;l~20YF>j&_)~P+L1v
z0bvqHb*K4yB2KF!-y4<}ykXedMhKE=+Q4>LpyI;|zAqO}S!i=@0fT7q&fY6vq_TsI
z$l_pHX&oxN=lXG85Khsrzq5}kChF_I_IQ5rjRee)M^Ph%cr{(?PGeQimk#r7zz$#S
zi{}Qulr19DOdr$JqhBlM>g*hfLisL|i+kYSdV1=DN}GiI!3(>YWOCXOHKCrm8|v!n
z(UCl^u3<qzMHXlI_pU=m6sevjkw4$sqyf`Y#%?d!72{z(F|@<^+SkB+C5uwx%wx^F
z`b@jlWT|Ypxj6$s-Dm$=u}8=FzRViYvy%Y%w<}UukTvF4dM)Me{_cVfW1p&m0y--^
z@Q#i8BOzxz-POMCZ<o=>tAubS;?a>2bq)0->$Y%X)|=^w7=5>ImKp*Q?DEdjtC>me
zgvkPlHsDOVeiSE&J)5tqPgA&}?{%EziiO1)X-#}CK<)Aw=Zd;)oSW_w9~-}TVWUU#
zf|Iimgg-K~x<zfEPETK7_g;tzGsA+4Nyh+H1!MX;xkoQjl363fy*8p<(yCp012qg=
z%sXJqbFp{P7;8{r@^^C|)`b4a&7Hlx{H@`&970R#68Qp4OxE~tC7{~yn15rK+g~Hy
znDkR)8XvEW6nCWWXG(3&umL2{-BwV*wCIa?Fme4W=8itwUAs;m_Lf&d0zrTZxOr5m
z`9>gnmQ2nLTC*#T-i*IEIbckQ;qs~gDE2wM=pm5B7o50u)?Gp|>NyznGUx>d1)0rt
zc60!gb6Ig^YJ3nF_;1E}Q|H~sAl2U+`dFP@`i@L^r6Y$2oNX|4{EJ-eoE#idaFudC
zLY=#oS1&Z}P{QX{n?ylSTidh2WMr77QJ|eZ^>BG+#xO9x_yiy*z@B@3z8z0Sq?(|J
zAU1>fMkFTQrJ{-ia?R=Vm98#kE}^;Q<yef5Qs`!tC51GGgks&)Flm{x^e+!~csNu%
z=udWT-Fq`g!~l0yRP0t(E@|=VMEo;R=&)}xn^77rj@h#YRngbilV96IWE>d=)CiX6
zCx%09DOm44l~12`G_j{|7-xUp7uy@#5!EblbaG0L>xK(f)9HBEqafbs^@OSUNO)Qc
z<|($5WDE6xZYo!&_m<Nrw*-vg<_wGX);}f|*Ubs#EWyE^Ga^|LS6VrplLp7IJcARR
zy?c7ko(<JfMyS6wB;R+3(?!btcOZnWS!8dlt5bfn8R7WFKc82^V*Z$y9d7>UIh&t@
zyA7CcnBieRBeQW-J6l#`0D09g>^&r=hvjJo(9XEw{ntFA8nhf4-n(jQd-(50bbi>d
z(C}U{Q8qPYnIMj*AT=*D-#ch(!hhPL`sAp51;uc%A(5M3@V#lCG-AompAX?RI>d-R
z$IUi>L^0kvUXHL`-k6OmUaH*qwBL%C>7_uGr#HEG%-c%^;4-b^7d`PiaBvdU-S5TU
zVd-`HVa0;xK^>=C&!`@mBF+t*LwiQ=jS}`v3^W@j?{?KswVU?ko((dGBYRDfSl3)x
zWkP`aEb^5Ki(fC_EBkv}pAo_)21ME!r>CAk+rOzT18O|L=F4~srsc@^xO+=TT$;?V
zK?gI4ist3D1cwiB#9SN7;`QrS<@fyqsyr_*0_y`L&V764k$^z?@70<bPmru`q4uw8
z4}d@G)76yDa$^1g0j`@<$GZ#n$#vv8Ika}KSwBkLb?5tam-rH|w0AxzJ%RPOQV$>u
zZQ@K7yt{4(8lP2Ok`zneRehqVvbvsKmA^x6K&aS9>p3oQ!%nj_HBM2R;lOqiEW>7J
zvjJOT6}D=6iB7#3-%9sm1_m3dcZ@Hc)-$LXfTK46;m6917ZSz?%@)DPFaYaE9pwD)
zy+@hKn;yG6BvH^5vlsmQp#!GcCQ}u+t{<x6PwNPK+U3{N()MBy=)HE?b2Xc<ySfqv
zj0Og_L1t;an{WwRldgrFR;2_a6aOLd_0waKn%#Z(IFFJvGuN!@@~Wb){&uYeJ>{4C
z7Ah(`%Z0A}Neb^2Y57f}8@5fOT(*S!%9X>aO%zkY{#~rA>@h#vB@%#F+aRh0VIF`c
zECx??6{{@C%XcmZCfCL94yv`f%9LnA{pP#6*8l#!X;V^43`#P&IQ7j{e|fpu*?<4e
z+J2vCms;5$wFLsI@$T+*Gb9|&E*1^*g7(d+j*f1jVR{nTBD~PiO(LiFF0QVFE4SLg
zE|*44>E-iC9-)pm?e>3nr`2f-6W95TgkpIQT`rE)tj)Ed&D$J$pYZ+Ok1%CCe$qfA
zS67x+hB9d7b=d#TAP}2~VPBaA^1PXwln_YtkJrz*T#;iz4eUXGS=(;2dYMFvT*f!}
z?E%TA+iW094EH&^s3>%8gcF=2XrCKBF>VD4Jy1A(CcjGxeBS#&{{tKvqNAfXCrTYL
zHCLbMh<f0zEes7k5EBKMEkN^UFyEg%X##Kyh~}FI^ogaO>0<#)1%(@aKkqOrIk-4*
z0dtjVS6d^aRR4>e9Sd^bw*NJnld(<Kx@^RIS{l|qd(anH;_Lfair6~%#)HjYvAL<=
zswgKv{I-*FJDU1Pcn~R|tydmVKY5}(s<aTTS={^NflYgFR9l&*IZZy**X$_1uHP2R
z!ErWMoYc*0;hCEDuWCD>Ophn@D;*Ny9}iBj15e`s25=Md?#-(YQ(c@oE}XG~?4pDh
zD2^~XvEvQbPP4@tD1%n<YD~#InTtyq^pGBD6>q}z@o0I%8>Sc{D$lD~Fn%=G>;24i
zXJJ&rTKC*ke?+~b2rw(T%}+HCb~3SL*T{d0pj!L;pL2=tfY!&e@@;I{bc|8H2_}T*
zxkrmK`gFh16>)mnxD-h%elXwJ+#H|Z@JQlHROgjAng5N~qMEkm>9mrHx5xQ2i?8_k
zOSQ&@sTx!P+XB&4Vuu?u_qb-@wX@l=AdznR1^B%b+?9bIZMaIDn6G3;K13hZ$2@(y
z-!9ZVrG~^7ug4T%+%|-(DsipY0$p{e-xrV9ngoKHQp;U#w4Gl{{q;zM?gZ+YtFw&B
zJ<bTYd&b|tM{!GM)XtlayAwp_Fo55Q&thRn6_b=_5OdMilSLB>9gY$5j2}N3Jf9mi
z_8ug;k2BFekxeI=xZlxqu7wJxO(uY<^BliN4U$ELg)4DM#V~Gy3>-Hdp^QElr<T_&
zI2Aq^P!SZQ_UK;2*}jndzw<L>{{8Yx%aL3_gSmz5b$ZbCfPPt>5X#CRmXUq$eL}`;
zcTBFxY~IMwe#VM`nww7M8n&clhnuqvEv52Yc}?l~#;C0rL=W>NezTh=V)wA_5~M5o
zgSMuQj=b$}Hmbb*e51>}EfRP@@m~b74Ba6;_4O&)t33=rLV%op=H2p?z4a9^Ho3>?
zF;jp(d#~v^K0Te-&}5OZ)u>wYHuTR+_vHIkxe6Oc%vYTtfS||D&OSH?PpRWJFgTym
z&8r={kt}hic4@@V?6R4Zb|0Hh^q&MPk55Qp9~%#vZr+kD`2&PO?fJ$9JKuA89J=jC
zmI>GG>TeztEOE5@Fev|Q8;3J<!w#B#N9N>^5j0{~HaBHRbh#d>2T~w`4i23Dbmuce
zC<sYOo0XLojRyIa`36Az4qPufL^3=PSuzL9iExL)qTKfjD6XWhT;iOwTzZC{X<Z^G
zE)3Z|m|h_f5!NjoM#h5K*@4wnB$?2A=KOzI;hCrN&(>F^52pzjQErm*<y8<$7R*+|
zzk6^H$^9txl@HoLzjjuL!a3~ET3yOg7{ixS(Bn$)O<G_?`Vyhca~BRInhBr}w(7!x
zrX578#T3=d7d0plKMdj0^FWAs#qRvOkRmJ>p2TTfDnU*@BQit6l0F0*^OdF@z&I%w
zt4R7@Hnl#!maIq$&^n)fEeCS5V_Y2n4ZdjfI~MK3>GI{-=HM9aQOb{-fGB8hAMP)I
zewUg$C!ye9q{0dKWXQV@qX1E0eF5*>9kyjXr)BR5P`0<QwvH<ImV}krXntVl`0!jn
z?UBc#8H0b<0}A8{O}wf=$7BA?-d#Pl_kWDTjT8I0Qt30eyqKw|@O~~%PA*v-OO;mN
z`~%dcCEaTeu0AeNK*VLUXin#IJyYEodE1GLYs>%03eMEexH;|jw>dZm%66F9sL5j(
z8T2(Y@@=FiZcN;7xzp-zVJJ-c7E%9go1Vc!4k3MQ93Zi=kJdP^Nt$Yb`ynH<thD>*
zHJGU!^Y%%O=6NH4BR^J=?-Wu*7mEfJ-TwBv@xIxc>K`tVi^f5YYNv1#UQ1^@t`c~0
zC(vlVa)~y0@5p?)gyyOUEC_@W{90aUg5=U;+}r+n9RYw+QjNp?ic^HDnwn;Telw^}
zo0I~c_cGHl=;=pp%-*{B0K>J=!cUyt*OSH3ok^eJUf7V^^sBA@SS#)s`zxIq`RAI;
z0W_K;-H|TS9(a-f6D*&xt~~9`^6YOX&gdN=glU}Qe#jq<n79U!N&EaF=ppbykzBWX
zcj1FJqiAChQk>&h{8!^fWS>n+qEz*t_NQwWIeP;I{w1WQhHn5$1U(`7UK;GQzx_o<
zHc@r7<Pva(X2IP~z3Av)0H+Y2m5=+^%mCa;TorOHT4%(nL!tABad7dSp5yXW8`CiR
zzEA*#f%?|vXLM)GJjTiHz>4NpoSPq_{%>D;cF?Y6zbVl-DPNrc(dsIiLrOVqeQniW
ziOr*9rmwk^vUgv5JOZGRiA@^Z8Fe{DsT07qv7G;5uy}L2Ba1ud7Bsiu1_#q`^{ky2
zL)B^@(KA60dfqB^EEUA(#qAzYUb{}710LRV>R^z2Rt%w`>Y=YdQ7)WKOR&4v>;=lo
z%6iq|w;QbjxuH_Y4W|qb4&PjGW0H&)fN(OKNm76|bH4=JeyPyQQv$sFy2UMxUlD4m
zAK&Y1Ypdxs=lUk1e2a5(;F&Qo1qRmE>M;B;^O|^0WQ0>aOS;sFjhO13%|}x)v%aXD
zYT38&ZE#2Fy@qkWAi+12s6fx<`hTEwy_TuJayUCdsLHL%jkqG9)XvVKwA9gXB&7_Q
zot;{e%_kwaU~~b#O6so~3u0$R=tY*6z8Ggt=U(8i*+T!Jt_KHXZSv@#4qAxzYZm~^
z8(z7%3CNY^&(;+5RaBHg2ILBcUmKc=zH#*WL~m3%akF!Bb#$_`b7kkU7G$+FFXSdB
zqEKlO#lh790byamIZ%5WIg9mAy3RMd;voS%UKZ9D?>y{3^f~tGoh#!H8K~G6GYv8s
zse2^_T@A240tY|21Y8bo<m%9SU03-Jy^fAai1-E2>+9bx0B^Fd{~5Q|Sw-G88K4C8
zHt>h%jsO6J>VAK+0*?gpgAS7q2G&z40OA^6S4}XvpU6<H+tGO2qk#;Z{v|0dGe~9-
zV|sg^89uBbC4ul<y%-OMUx;hBVt|~=mbk=n-Y81wE5O=wjOIW8c{NSy_$xX)_Ql^v
z;M<x0!-kQDUM%9CFO3Fue`XaGHT3t#fd}<JKEQd1eOqx0)xCBwLt`&ryq`Pu)R54&
zp_2)|`sW5g!Pj5DtN~-h=l1_2AjFJO*1L(CeQ-Mg*9(@)OF+)UrWEW`IF+DaVBig)
z?&R+jH=SY)4fnT^0Ql$o?+WfI_whcCNV1{H*!%rEwV~nk*Gx2c2$B@^50)XX0!U4+
zF#i<fJVb#z_SwF8;6B4V1)YPzD^`5MJ5`A&u@~UNex>+czW987Q)A7~i64moT(|g-
zj84y+EoG{=^!BoZcD*a|A-yizqp&Pr;Bjg&+M8E5;wJc9|05rYD^5bm7vB*3(C(oC
zqY3V#3V1nnPU{y_d)rUR`U!rzU6$msyi(2P;^MzK>ail@inO#l;H|BxX=$l^`0(qd
zYxCPE!J!v?3Xu<-1i_Cj1NA1v=iR#u1*4*u{Z`WypPWfQE7D9^blxZnpCwjf0Y@x|
z_HAfT?&QHcb%n2GJf}2}y7aDsD*^vuz&X38{|^H;(+7>j(fayVdoRk$%0OJ}?f&^!
zfZ#7KE`FWYoDA;y5CVC~{4Mcd#uJQnjwBxvQ99X+;cg21|6yI8h=DNx3YJ<7YwuNo
z3YV1JI_0GVD=X{c$G_o7pOYl$W@$OKbdBZb&%EAeVqiOK8z0w#F<XBsUhJlU_*A}_
zZclnB#-w|}SK!~fo~7viqji!D{6m1O^4ceL_2GdGY@!5XH}3X>2NS@wj9ENSyA<>y
z<leqDW4u)lsZ-V3(7YUquOMIU;y^Ga=m1Vh+>1u3*jI3?rdG?+Eeb%tg47LhWD?`V
z4yT|%lmMh~@tb`qpUZ8gLDiFQfCf2*!>Q6^00pgRUf<XN#(r-uSZuCan8b((F{kCf
zNn+3eJz$QLA`DK7xwS2R038Kfx66Q+=dwPgbV;z>13+7VZf)o6tSBcZ;xKOqj7qzK
z&h+z}H}mN8{JH3r$#O<#Ao-$*2e>!Gi!Xlw#Hyn5?_XoUo!hgv<%0neJKNiDm6Sy6
z3?)W?7PYlefDnWXXtnbigV!b<7!ORhD(H$|b;G5EEy4S}6nN}t{3Q|mEr{dG6+U}=
z`@-V9-a)`77W2Tx=4cjJO;x0Tw`z+%Q&LhYYR2PME*ON?C*ID^10W4;AmPs+(B#zz
z#o_qhPlRrG)|3&-V;`J(hRz63A|hXa2ljNQ4^_y9C8?;W0Bc0h4*~jX;^y((M?-)e
z7w-ITW~Ofc?VVzi>8ON+8i$3T*w|PADcTL^WF>-zPSQ(vqrJt@p&md${1Bahtez+_
zcLZGhiV7ic)L)PTD~im+(&Rl>N4F<JmY{%{@iW%@`hJRIW#cgfa;@G$MzZt03?04K
zCV(UP5`mcspb~m-0TQ**XYRo_iq889!j5dWKp&~6qr=J35wxgMkNIAqdlQ7c0HYd&
zqinDDr4T8;mzgTJMT3a9_he4IOiW(=sV9>qq-cky8q?8$2r)J>ktD&Wr>gopCPr2s
z9Qag43HW^-^qIyOSgMWNf6D@+PVk=ZYS@nEd%b$~$;O6DQ7s6hhO`1MDKB7^sj}Va
zE>#|GsL<gwpHlg@F8z`pu+coiEG$h;KYtc(R0}}@fU68C6SQ?i)_Qa|cIS&lJBJI^
znZPB;o4U(bBM`|3psY?C2jL<GB_#pD@VK~l=*ma!9RN+OAnia_8rPsu^mOYHzkgR8
z4-XFy6}_&?o4WRN=5We!3mhqRO0I$J-?9~h5r6#H2m}k_cnyI8VV3$&8*q9BoZ=vP
zB9AxIRn9R#BoLP&JTDwYGW#rb><6wu8qx&g4k#$zBKD<DLJt@)f8eo60rGpo9kT>5
zv|@S5=q@R45#}Z4KHLvUUT8%WHGjDS$h|`!fOgD^Cf>!)u5YSmb@;pl0KC?dE`YAy
z4I01YHss}U#>Ucm(|Je$9EZc<nSWCQ0%RqLj&qp&{mZ~GHv;=fTe3k2H8I4jYozD0
z^7W9AgHMXi{6u~JmAW8+7~;cn??|5)po2gZU(`te)Db{JeD1sOKUQgMbaYF1%F6OG
zXc=mJ_yAG~0Q=gG-re23eI&Kw*n-H^bcuw)?GGT%lai8_jDc}e5yaT^6O-4mFp&VJ
zm$bAryXF}uoY#If9S~A47WKZE<hassHS6!okUEwSF9EuPlv^~yU!xwlq3zhg6pSS+
z_C(BsKb)=kJHJA~3<7}r78Wg$f%@DMvcJ7;Ra6i9PjaDbOe5PZg=J*|0s<~gKf=L+
zO2tljpQo?6`KfrV_+n36n-f6UM+?xw!Il8?1WQSUx^}q@VY^YDH8UC*@lRqf`MJ3v
z6O|4N9n1ZnUy7{>=7J#{CXTNN2ncxX8p&@^<y5H9bG+9N7{Lo%&})!;*Y;Q5$j+EH
z;gjr4O=JH4<snX{2G&=0eKY-^TV4dqP%>Pq=J~%~K(Su+fk@utK7)JKfv3sWzkc^C
zy-)zHn4W$QRJcE-V}m)dn6B!ccI`Fw>^r@&ivRt$v@|1vig@)JY`b|<IJ}<L3Ieg`
z>4a3t$8ZJTo8~?ty>a6=T9Ati*lTfKy7U$3IG%BFA*agPiNOlT%gam6tv^s|DM%i?
zfkClzbK9PsUIq7aAGI=7VJ~&DTynFvVbR{+U|9ybf>-h0#|~W^CU;ohAP<qs;>Wo3
zcWOTw#5zKgFr}6(rH+6-BECPwn<f*AsdjZ$Q3>~yef8=URW8U2R);bBO*`SzZ-AUp
zpW3c}9B*neQoT=CM*l3!yWnB!-n)@mKuMaWl%o*K(+<wME6sz0YXb|G3U0(MI6SQ_
zm;Np*uQE_4Y+=$^c!Of}VH?1z(iSV;(A^!Xf4}QB*zY_DEu6KrwG#!8Pdb5oSA9#|
zE3V$t(^CR}G?)j>n^%^MNhlaD)I*?SZ*y=IIJkB;ebiZimLPOFf~neNSXn7t?Xt<r
z#>F7)Ks7hX6!uakY&L)qHeTpRiCS1J=LVtP7HW-`QP9H_(+Kldd%S-L@(sho`+MAI
zaoBEG3KL72)pUQQBQ<hV;(h9gZ2RkAQKoxfDa|p0Jr&X@(9du<qm<x?Qe<If##Gq*
z!WjUWSW7Ez7c?9B0Wn2bP)}1+*1QOX@=|QPnrpmA8!vaXS#4_^Y(05^2o1fEhXP`c
z=hjk>bbnZ0o;5HiwPNN6jFVbmZ`C*XDk$4{_)k{i#$@@sC%0|H)qaPEKSGlik)MGt
zsW4xFf=0w|b&cOVgCrZk=;hY<zownfzQmNmf4vz8r{jln1ab{B2cL1H@!IQRF)MRl
zh&62clIyo>2#Z+}EDhRap8NZPfHu|<@&i-$F7!nRm$-O7boA$NRpjkxg7H2`Ub8(v
z1HKSn{M}cxOpT1VP^SZAxo4~6;^(>gu7rtF;0{vg&mQw~4|fM=a^y=X0o%!lF>pVY
zHo5P?0(=&PIXF0qq)1wFz?Mi!BVx4}k_8&UpcKNj$Ju#h@d4Kea5QbtzHE_vOfz)$
zbf>GhS5sYsVtEv<pTld4k!GX;tPI50XBrRA9`At~X0WhM)p)x4Fjm6*m7U!W0ObNT
z&_sDy-(n(TilECxg7$mQ++X6IZQ$(PIT%;$(8(uj4AM^w={fLxZ?pI4tIAE*>4j`g
zzk^G^=skj=+HpuhD{wjocoF-hf<Q!FZnR*rNh{5elvI5{SFr?a+)TjWGY8=tCj;Z-
z#^+y|y5srhGyoT37ocSgtCq^npkZINOcrxKSsP4CRPpIE;V`ajYih5~mvXQhw7S$f
zO;fo%PY7YPFxYikNyH`e4!WFzUKqB$ZNI7lD|X$$D8rx69>mJ7+PCJTmbhEaN<A~s
z-jMPgMz38OV?o(4g#O7^OJCo;ask*OY<#s*He_BSlk?nWB`mY|&EW4Th*VU?MoQ@T
zU-LB_O>sqBulQj@!^!6PSpdQ;z?0B@`19w_qJ_IIo!?0#qR+OAJ$<QsMr{8Ts;TtH
zV7$(yED)C4|C+;2tJWzkez}l&y-nV%d|$rMQLXn+E6r8Sz;nO5eNd%@Q6~Gr)_9q9
z^|0kxhTh@P9c6n*))nYncR3}aSfMGlK5G!^$Qx7ek>9&sj4wbZ1PS!v?x*wP)CL}Y
zP>x-yq_oBQ`XQLxWSP@m00K5%X^B7}B)V7nd5*Lz*(Nx{#Lk{r4<kCyqir=7KCcXx
zV}sD=DZ^+yUKEH3Y$*F&F7z1Vj?`JQt3Y6Ro*H_5Jc?a5pB+)H1ePG&V|c8R2ZK4Y
z=CI;|e6YFabG0q#A)}Fn{?}k?2_S$zkKn9<HAVyBnWMMX9Tr9RB^0IEsEWa=KvBDC
z#NHyjfctz+*+xV{0_b;Z5zqIyj;}6vZ{WR0`*mza?8bk0>y!bP?ceruEnAr4^M>Y+
z<79J71~8DF(kIL4y}G`x;E3^9)0@!NVgi++cY$vA5L|3&GZbEykNxZ36>C35=j@e*
z>yrw`dMyDHU~>^sQBg55y~c(x@q?zajp~tHJqZikeH#kvRp1)ZsMu>@w>4G0WIyPI
z$7RHf9MD&@C=Kx4K%AYjC?@S5h;H>`MRU*&3O5P+{YmF@1?VWWUDhVee4GC5Rehxw
zd;yQQ;^QBPJk=^*M8xqT+psyi*qbgV&QSci`>NhQ{3`71j8^bmmQmz|eYl0NaxXHr
znWVJsg6DjNgU1J$6TW`^x&hdVZ=%oZF{l%|mrf6vnf))8{`6?a{Kx7?+-6}7ktnDO
z;~3g@x$hsS#;zYuhzf<!izbPGq?d3R0!#%k`Y9P07;ZCzYJrrTJW<?v_juW{<VH6K
z2m@x~Z?>2UqB2#>SG?2v^6=DKNAPfM(s2c#z}x>?`Ajj>jzDE;+8v7@MW6?lIvBn2
z&Ak$5JT5ppxh9O)A(0=s+scBbluk(nv`3F}%6kiVRLtDIBlo(oaT5H$p5^H2-VO^w
z?QC{sWq<6Ba_tU2$Lj=F;j*zh*!!~8`t;YMMw_V$aYy|8&`@NIfmi5om}*QPvQy(c
z{gZQ$Rqe@HrlX2Vnk>0NwaLD#ytk^RWz=NSv1>1EX+sd<wRsFoXa*FtkMhSIVY+w_
z>gG66LW*G5l+^fCt`H{@I?4GWGD6kD{cuXFF@VBiG+#`NUe}jO^1Rq$0W8|V*U8vi
zH4b(EOgbz~=Wpi%k?t#~=t+2EK+VCbJf(QWM_~>Ieh(aQb3B_R>jnF#S-{UkvmP?;
zT43EJ=7=AnMtDa%Z2wGLHTCdt52X>cX`dzWKHnGxEYc}4+e>-;&=IGOimgi56i?rd
zUKJ1RiREx9P&I5-yPg#*O9+3)Q%&gcEu9{lMJe`6!JS7FfNT7Edn;pvt=4g2-&&A3
z>BrjBUbcu9Q&Ur~y$w|xN<Lf6RLh7<)8Be3-7_!=B?!32KewdVq~>>>q7nzXNEo#*
zVjr=t*vlP<Y?m|-2L?`!kQgsd&tcT%!wsx_0eSunij6U!Iv>ZS)CzPi{p9({QQ9FT
z!<aHuW?Dwz*s9|OqxkL~cdZ8@RM6ZKU?S65|K3H)W|^7D5Gw*XC^Eqn)PE6~3eb~0
z!MWL0wC`J;qwyt!O-!jHzT};17Ory1U|xS7D2drz#oeD-4E^b^fAr`<{v8b1+Jqe!
z#gCiPxY4)<-d=H8cuGEZ)H1&$f=(Bmuf7rp4qHIjy_`Y<jP?h^47~Qq^SLb^@hodZ
zN!S7mRGHgmF@VwQ^~&k|yE*wF{!k|1-bi_{HF*M_n)qRtS_xuhFa4;Zf^@FcO81;w
zdVp%ZgFAPZCNdoL<U?)3d_O{f&?$u&v!{H-#3Ti?3+eEd`cg1y|5@hB)vID>O@l=X
zD|6TJc9zo<{IU;-(L{*!XUMMjt0)!FQc3w}2vKA_VH9!Njxm6p0b7Xk)4i}|$0gAD
z_{cMtu>a$HO0JF5Y9v?d<lt88PX;#Dw#@eqIJ3Ld-`F`gP7mM(Kpd`lhMF~5?FK^o
zV*lr^060AcCsn{1DS8S(IvyKOf^;3LV~WC;N$>N1oD?O8cHwNnYIgSbrte@Y>gnO4
z(u|6ZeoqXnH-Y5)$8@y|orsgq#Q9O<A%Okz?bP+Jr(?WMI9Hcj_Samy<CWkY-REls
z5)O_Itho7smWGCJq;oO|ac5O+&6wEOv3x?FJQOI_Y{qK>cjG0_kHlW=j*RXB>D^|o
zjp=BOyWN_A^*a4}3<1x(5dZ|K3tvoKR|eD<80N|XUZ*;$n0g-{X9h;tkV~hNrzIcb
zOD%N-Y(qjqA`Oi9kf9yb(u?zfb07l>oCBlf)>MB-7*jt@tFY)z(xXbMJ=xTua&(k(
zib9Y%>*Uu=-c8~Ux@N99IX;dM_X<j7U*Lx39WNnpI9!@61wzFA@#Dwe_|uoRYWA5o
z2Ebuu?OadLVLmUs3@~5G#6)r52QC|U?_X8SOn>5iJ}sE`0G$wtV3Okjyff5&p!}^Q
z-E8PtjZd9VJh;#Q6kD|WnMS}<2=&Khb4*EeJB<=+dj}Iu`<)9|H|eJi3-ar3`^KjR
zNZDJsxd|OYqC_*oRL$@p2;f~{;1>Fjf-`M1V|YGTOXm3Q+k%9Wl9DrWgefS%%{!yJ
zi%h>Wo3-|xR}45l6TH~yq$b~m?|_44-(|uHW%34YuljDRM@2QT77Lu6%S`ex0f&s;
zocA8k&8cxL>?Dd`H#tm0tK3FWMWsJ}`1}UFNQepMNA<1Sbg#LmOG@AyOpnduUuYp)
zD(vT0`uoX}#J>wc7Zm_a9iVEe!GC%1+mfAf%uF&rF|`B<k9uIx^?P=@)@yjAe{*d6
zR_90_e8p)FIO#t4|F}8}s3^BC?hh9Q6%ZBa5*4IFx=TP(=~ONtUD6#&DF}!(NK2=5
zhop2PE#2My?csgj?_29*t*h5rGsDbz&U4P$d;j<EKlY<8t{)9#GPxRMhle|9bu`Yj
zz*QnAbqm_HSWtc#FC4CPDNQMQ^^jh}@fA3;mu~#2SxvB;Ko@yVdxaHJW3i&{emR;R
z$ylT8_*LN9@k!(~ji~m|^H&BM!*1K`_Dm3Ye`Kj6LZ)1w&t|<f^Um$d#F#9T*dR)#
z!{I;LJONpKPu=zdS%<B@BIyx}hbh$bqTG==Q%btJe3Y;8yA#r1igC*%b?#qa3s{hm
zK>p(jr!`pqX**GWF*L+;J!SK*@<&a5x3J)#lJstS(`irN4nZw@_l}7;zcr_un;YCO
z`kXWiGgQ=1X=&-J+2xhy=ht6+p3(~zlw2vu4#4o?Dzz^Y_gq|9oQiL=vb9yHsSH(g
zbkvkGPfljC!T_2kn<*Iyakd(|kd6y=e+-xLZmxONq`bvjix+bu#pu|Z9#@UQMrHeJ
zBUjKtcxNUvGV+Knzeeu9jj~sDwdMw(o2_wh7Zx7Ml>i=h!DeQ0F|B%m)`8db)~|Ox
zW9@a3b;rBe=-A`|K|!aRvH3LRN{$5;Wo6!EF-1kJ{PsXPa6`Y_!IO*`6U$inro*N4
zkJWyooiIkPK?i5XCbxp*8^t@3u%)T}Y8-E#t~I&EzuM$|!`ZiDghACZ7f7jxqmugi
zseysHm2!>ar56`R`V-%*!is&p`!ReoosEs%SvnNmZx)_n({g+v7u?xS@|tS_ZNX28
zC`Okwn8B=&hl}Ga?R$1-A|0w~1LD?VVn%c19_PP-!J=@3KA~RW<L~h56vr@kAneSx
z9GFf7e0_TbeaMg?wBoeDBw>amsx`FylJeMh_H+aUs}c(-8u3Cr4^65Cr}%aFsg0|r
z3N#ywvd%R9d&;V+9Wf%BXFXZr6Sfn9YZOwc4DUoVi(i+&Eaw<2HIKYU&P2Q^d-may
zQpZ`|_w#P@|8fB*OySiXk$Plq^E#(433Y#=`h8{ERKP1)1`GbYcG<26dobTA*Tv;Z
zdTOWEj+&-uy4{zrH~}>N;`ESf)<BjKpo0^0Ca-%u(fQ^af7lKV736H=2JWrrX;gfC
zEG_79^?lv!L?2S7`U7E{5HG5}F%3&IpFW(9V$q}VT>NOJEm#*UaAMZ?>!!TCA<b$f
zfsOLa*lj>9dz@d6OOV&57dD)qpO1|Z`Ky-G#{zyudn5fNgh`(V?=Pr7Y^vVwr<1`4
zb@$Imy|h=c^nwFLGgT)<rGAGp8e_7<VbI2NXA$Pxmf(BXt?nENoD8x)oCzf7%>wrX
zK!}CnK8e_{cOG<izby8lNJ?t&5mQl#*p0}Z*!b3xp9y*5NNv~48i%Q5(xZ;TX>_dR
z?2|iq(8{#1pf8GkH1d9>?TH_Du2zNa^b|ks*3b%f|3uh73#}qO(!CqcF`hnR_WamE
zH7-9&!;X9JUcKxY`i<AxtBi!nC(RQ-ay3iM#sG)dxS+of#_{|OheC&8=w)Tk_X<T{
zwZ|c^kGn5q<9P88ItN}+=O;4{bMf-Vo_Tu>MUvc36TBhCw;~$!_v_bBZ7-djf{FNj
z(^mGLrHQK;P%%L4oV$hcGSv>|$>&0)(-%LKvm>ll(bYRF&G#0&DvVEWESI0=(zf+D
zC@b1YpgPO{zLM-;n+KuH7t4J%+4$#nTk(^rsj2(Lm-}=5Cm5T?15|w6C&Pxs$fe9<
zvi+)~!g#<J=DElIj^RMM+@O}g__8B4g28w2;co`m>WMMv8^Bp9?*|w8&qwEP{d#-l
zupW?24MS(i)J=!0^8xJry_IL=q<jS)vrWJ61e6%{eWdH^D={r&d{gy?E1yOu$yTrP
z&kiZC9S@`pCX368vU4&%1=h%*EDstFP-3Zxep}mk<DpZdClUOb{&%=U;-TQxuIb4z
zH5<3{e%q`BSt_Erug|KveW=hBjW+R|(rdTQm&;K~R6+({HNWZf_!NtTEsA}<Tkv8x
zR)j%yVFR-16_$M$e%PdgX^<M{=(jK?zwh+7USNTt&UxVur36F}kar3(KZfSEa_4-E
zEzPi~sQSQI6?aA@i;Bug#;xYax6#k-hz?w~>rvXvfxOBt=nec)fWR=q(RrA;^k~Cj
zYHixX^Vf6eN2r7#zPu6#18>6R3Kg4%Pob+vUS5Yn-*93zCe~#4Cke0pyI)PeC+^Ps
z8yMLvn1siX3D_F-C8NiE|Gq5Gq`sRWa@*1=M!QqCy*uxUeg=?{fSE}7^#;p>Nq`7B
zor($ydK+plb#3?WB#kihXA~AHqy?0h6I)p1X@&STi2BCy+xSvRN%=#AJ1iCwM+#)J
zM=h<>W8)9;TsXBv6c?d+0(4Eu9)oZzq5gB8T1ie0Dyq4_tD3Gis{;cAMWTK|tEW8V
zZWezNh4-7BoLpeDra9Gm*wxwIJuC1%(R_32eTB3&;0sDO#!lF^I2CGXKS`aOI86v@
ztL8O1JGoe?x|u=J@l!|&V6&18!g+fV^NjEr$_;0p1PgRu{O+xLKt>k7t6ZRbN&MJl
zvhXyrHJfSbvig|-V~{}2pK_fGh>SXh?f|%7rD&X`X6M#fX&X<zkdglOFcCtC4T)Gp
z<a}Gs(xSfCcPJafr+;->6CNI3$UR<mQTBHVtjTv`&vhZ8^qt>fGdusPXKHHmVB~Fg
zXXk4&B6`vLuOK(cnR69s%JJlh-d==k)e#vz(7~5W)6#r3*N>(n+%6Y5V>$A!Ry%q?
zLDvzUJ*=Xn^4fW~Tho%3?Rb@r$?a^iAJs1irozT#)md)?s)YsZuab+i!|rHa%aQnt
zhnYr%cRHYb+VS0QQJ}6>czHeXaR44z+wX3b6Xu07!#Q6MeSK=S0Dqow;1vvA<tUNO
zRh;Jw0{Lb{GBoYa==hruy3?O}ONaV(SCSv-Q(b}uE4^bg&q3q8z>pqI>rhn<v9QO^
zP+73xWms7-w%d7Pms*?ZTj!ZI%g9Z^m%)>Zvtm+pDY$sYYdzDN-aZ?=@5`%mzQ^|(
z#+$Gum;PS*B*HV6T6{{JUzb&pNkxuva$Xb+C}d65XAF$A8t1*JM2rFHPG>8(O-2ic
zrY`(wm{Vo0;4W7!J580wXRnKjeUUKjy1RnE-$~mE6nw<ZF2CUTC_by|_Q1j2Q9i5L
z<JsomcT4XaHv12x))&5h?Ij+`&mJde57Bnpz-l+S(x}}{LdUoA=nJ#1JzS-mX1e%U
zULIAr2pt6n?Ld&*#lDrOKRY)k9z;TUW>639MAU*8d--)89UYPMc~|?ola=iELqbf4
z^PmAK<;6jt1X)^|(qU@1|AL2nZ?)CH@VD6qubA@5BiviD2vj%MfaaDK6&?Y3dyUJH
z1l2sPr09Lsh|tg?*Jj#N8A@*M&!(`V4o*j0oGxk8?d@9UbI_-uTnu@f9F)189cUN7
zN3q+7$gk$IMRQ+mnNU^L<;5l8e63(oC|H#r4)oOWIq_trr9}v^s_ky0?!Su2QSkdu
zz?IeBUc6tN9&ctl+1(>>vAm^h8t-!14F7u!(c|&@z^mm~!O<vIhCwf1KvIO3aBlvv
z3n*V_8)bx^(f{GU7$B%9?i*9lhLAEHPY5-R59a%fyQpWEfS_=ts^CXo91;EipJ?Or
zI`^wHoZ!jUFZ%mYKOLs|uP()ooSmHT@$g<A5ZS!Y`JNj`s=BY@OD8~w@eWRkd%#aC
zf!+&olw@CN$KOOVjCWi1#gc4{jX$?HsleH9Ucn)gQ-A+u*~XuXU1_HGdd#@5Z5Ou4
zzsANsG2K4koa*fEPJ0?sDuD+$D#oxftpy9!ze`&Q36bd+s5)47;3n?7^f6u?`jPBt
zG(&qrQc|AO(3V%LLA!kzImU(>^eJ_@2z6|fS@zD;eN8!O&f(nrCtl`4Jj<1Xlt}ze
z2ZZQ_%4;fDd75W+oYQwPOiv~qrr&F;^y0dWB_$CA{KI6qRoJg^f)UZ*ZEJ6@qTZ(|
z4Z$C|h`amSP`5tve`=;4+6SQ5Fo!uWJ)Ufr!e#2FO_iDWJz6nq&+l@&rkJsj_wAfD
z1O0TMsLbK@Xvl6I1<6>?zD!@XylBzBM*oU7qQ>p)f*f0*ba@yH*Mp>=%8-q_SUqb}
zS7uMwnVue)HXT01`KipQ#EqJ-r_+>*fAWZfAmI}l@=t`(qrsQ&;>VOtS_Yq_9}tv0
z6aA2~+c}0-7+V-{ocW`I?`K4yk!bA0&&D<UP@+A9>@P1JtD^pCCsD0#{`(q%QP=RQ
zHw$q0t5%HTQV*UDi-%Is^XC%1Wsnt+*iF%9=S&rX9Ln86b~lv~V>{F|(nf7R+TVte
zw44gDhBmNBo*j+6;yYR&fWoh=`*3p5;R>s1MnMj<MEXVM1OAHkm7?}qrAvy8&RS*h
zo>ir`H?qnd9-Nqx38T4!{6h>GXPn;lg^M6otB!~YF;1W-{zGf|)eiI{89qp{ii}TP
zj#6vH4GiNFGqv>v!Tt9eV?!R7>c8s|kQVOilPBiP8F3GXYTNHtO%gu*dZwBIL&W`o
z=k$0_6^AS21<L-R0dz-{FUvnhgVP`$a8RHM|HQ(I>+sFgh=ifCuZ!p@B^8KaP?zOH
zPa(u^XWh~ABwJlwH8Xo}W$k68C`96z=5m2GN&FC(#UjCR%@PWbQGWxe;IH8(r&V;s
zzfl^PHXH<pN%c(*1&uTKAS5xpR-)iXyssQ;I`I1<o^fd<g^A$#CY3s*tW40DO+IE>
zeDtGyf-u;7G&0S@*Sq{dV&>liI5JlXVS%;;(Pf+E+F(g&WRr`>5b_eXT?g=66jo&s
zP*oj4K}ClS%<lm_9SC}ig>-h`H#^w%gU1ZTNs7Pxx$xlE<9tCv9!%f;U=^EsWu3~?
zxzHD#fiW{<UZP#AoISk8X|Z!~U}s|!%dGRDE*qMW|5w<G!1cJYIjX)%K|vwIG-kQs
z8U3ou2^Igr4aDD<CEwF8#!i_G2yP5P_!)OCixI1*iQ`k;3Oqh8-+aTnxVU(FdQx+G
zN_?J|>=t{zyR&0Fo_8_pw>e$tgi~bn;In#A6*{PpP%HV?AuuSog&d~(K}?>C=cmzx
z`J^$EP7AxZ*<i>}?c7xdl>_(nooB{!TT^bsxpg>gwNQE>b9Vgfmkz``zZi7%t%;JJ
zo}L7}&Ayaplf00&*DTxMbKhMLV5-qIHKm&_tW<tT&GdJD{rm!3FpkG&GuAQ^x^S%n
z4%S9I;MDiu(#Auzf$z{H?Xmycu!rxAFSq<~Ixs1T;i2<%$x=Q4(Uio-{^o$Hlj1YE
z80+;WLI6y{KHaA~I0j9cl2~ucZGG_4PAscW4rfxH9j^0o*^Sxeb#a*gQoSsSDE(ls
zx;AWH9!*=OB3){Kh?8)9>N6zSLti&$H|T0%P_%7<?e4Z6cy%X1%|1y#lH%Y^xs%|9
zp;_HZa9trq=wk62uX{^CU0~%^T;y;X<K<?QLy^jzuBoe&_*zABCwJvvp>^6OQ>EY?
zSm*2}El{$EKNh5!s63K%<ni-p!OqxbN^NCzC4a)F9ScBOxbfKKR9x=Fy_5=2rDbNn
zmT!qfIFkyIokf_G#fOl6PLCWp{tV24Rp@JQwBPwA@#G2b3$ZwJyulpNR=FGszc@bq
z)k`-QN*UNiW8)(@^iIRT`lauQAIK&6O$MW?mKYN440~eaD7N^I7{e^p7iimw6RYdJ
zKZkn!C&R2!X3T1N`A-ZE3CZqGy7u|`9JZbWHe5@Wqe*O|v>LC*|39lOn{)&avEJU^
z6~$)>!2;>knY^V}61jcf2Dh@p=`u=K^jhJZ>OA-<iEYmZUmJXv<GI~d19}9{R!uE!
z*Olrxr`(S&++2<@iFyskORvhY6e~)`i1&K^^2po;1;)0fgYje?_igS37%yg=P1lrL
z9!RjpkgDxW?Js#)I5I!jGSGR*c2)4>mC3p!uS;vGTZ;i@^X0bD^!b;j9cck&qv6rX
zXHN^aj<657Y8IB9wsPn?<t}V3ItJ;|#V5|FCf9HYIF<sHpK-chT{QCh+psQHp9EXu
z({f^hph07J`krDER>%Q;JcLGw?CZ6!_;E=Fv<Hy~Y^y$go={U|b#eON44#19^T&mv
z=H?s2(9ji}Amo4rL^*cKaFMqbl9@^x8X5}lpNfijfNV6+##(-Dxz&ZUl+^Cgv>U6*
zzS=?yu1cT52S7%@t#+Kb&NP~vk>8iJ@x><p2}M+Be1L{&_w$*vk5ob~|H}o4`eA`H
zVfqPFi6JxD-qv=!7d%bFqiUr7IK=f}VTsc+O+{Im#*+3xtVTsCOtB6s$;IcO%Nog3
zmo@KaW4MB&Za-V|&VQ1P%crur**4bJ$+%bNb7e<UZn0}(PNpRzcJtM_(*o+>W8+C|
z=uMUq?xRu-bS~t}2~-#xo7?Hjt=erFFpzxLs_;3wyfhFtP>{8wlpUbOKg^?TuXS?0
z;1o8mq%CuG?`hwKt@r9;b_U<pV2ufv^5&BL<pQ}%ozupdY`MF$VQ11ovlAh&yE99o
z*pGCNPa@ZsLg?W>U-cd5iL&pUN)ZQ(pf<Vjt`)9`5Lf@{ObOZq6HkRxMH!W~P2Bg@
zfR|=t#WO$xygDy>)$%H;+-VQZjxLChH^`m3KGhf>AD^*uLC3|~MxVF^tH}aq>Jaj2
zhMm;`v6iN$#199*Q0-bUMMuU$_u7x%yOhlnrN$MR&0=B`-oQsFD?6%1^{a?2=F{(G
z+i5u4sy%FpJrdmRji0Qly;!7cFI2Y3jnJz3M~kl}{*4vggu{D#|FIKJSz99ek;Ks+
zC-jm|DStqN*&oQeyvZ%js(w*wVJsYB_G_w7y<#V8ch<LL)ys~tC@(Xs;Aduj$SnCV
z1@Fn7G6IILHha!O9YL9@avhbg%XAQkS&9W6B)g@T9I41GP*@B-r!~)9mE{~ott7Dl
z5oe*z5~HYJ;PHCVt3d|)`Ryby99<u;^1DsX&%XgI#<S(dqj^K|7pu$@YU#2JAOd7!
zBIYUg0Bzd&`JX=>7>iw?5pj0>{R9G==1Chv7E}NNt0*hE+dE|Y_lu0maBkHTGF=`n
z1<ZZZ3mW}1c44VW5h``!hWpTf%H<fn!@~KPgRV`+#JUlIaQtO?frTU54qJ>01|=6<
zJc(p}kLP2)JHsJLjSPE*PIJEL2~LcQ{msbS(}|dm4-^EnZhnEn`lQX4+r<9In@3Yu
z^`f+~-?V*fxB5aYOw@!%!91=dh<G|j{UT!tRBRB?jmSu7SkR`ImLC53nG&$+@s<5c
zDZr<XPLIfiaO$oql3}xrjwUSTpYXY-d<V;%#i?CsIIOaA>^P$a)qr1i08E=h6E17*
zj_z~V+p~u+tXM69i_nPt9_6=FsmEVbt>j&Jv12!I3B(89NOYx4bJL8(OfaJ%9-;M9
zS?mqw{JR|lf=K$C*M~vRBo52b{Z1RE>g{vZJK!3%$7ylwF#Vy?vifpW+v9TTG5wdc
zj*fOZTDo|r)!X5+zw@mD<Xsn$zdn#%Re4jXRLB&Lh>>)vxv6gf<u>iKCY$zzfm3-g
zJo4@F>3HfHHW@I9Djauyfw(A43b4p}U6oi)6%}AoonO0~Txo}nO}Gon0n5>9Nga2;
zhJmRur|hR~2a3E`?s})EugJfj)p^8g5=wAyb!8hW<bThiW#X>09Afo&lSxlkX=QI|
zj&&6xG<J~jrsJ*4@|u@|@f#<}ncb1Je(zt;+lgCX4#JNGYkpxUqUG<k9Yq&HM&$9T
zM+9YI3R*&}v19Cm@X)aw>OOOZIG%4t<*BX`ikgp&t$lxy)-hgOAp1;a|1K}9K^|LG
zm0Sy=?aC^bhY#mXi=^_W+{hpY>#`M{ULkAedL6<1P~g{7haqTbPIdoLn)8)y<YQ!+
zgN58()2t`qs#;3F8%6_%RLyG@XGi;*CtF(bs$Yz641$M|mGwdYgwHP2nwM9RZ64cw
zVr7<@CnK6?4@eYz&Wg<nGE;n&B7JbnUPOw1BO^67@vg(BNiDqcccCv<nuvvCrR;T5
zqBCyvP0OqJ2;zKwLZgtZoSZOO#r`bWA04^<m3FaE&M{RJVjac3+D}<XYj2b2Da4DB
zNvLR!8V<vmYA@8KV!pEzi&=i3AJvm(SsO8yQ}psiCY;}<uFr4A(a$A^>MTE$!sE6m
zW~0?VAzcAF-esx8&f)D3ZD}8F5yKf=vK|4{01iMAKyd?{mq8#0a%sfiUnZy049u$H
z;xH(wv(G+b7F!27@FO&lo4q(xGG9J@`kN;4h2STU$>AQSphyB0u)y0b0tj4~S$XuU
z0`V6q@Hn<;fnSI4?XSD^Jv3h(e6(v0|IEGhKnP@Up8ZR3ve&M5Y-nuMn{Sh!YYnb*
zVug*xr*P@=;w=5gk6yL`X!Q&T4z@Hf5Vx~qXY~ht!~mLNa3`~C2`b`WTI6w`Z+DO(
zw5F!`bEwu-iV3{^n!)RwPR<KPRO-|Bn(L~Mpeo7oQ|F)MshZYQ=}2m~w3X!KWDr*s
z`1+IVpB?Y$LBAPVmn}XCiS<?uMkKw{yTkQSkf<GZMi*&mX+_rqp%wiu31H<U(yBl#
z3}}z>Z7_C!A@PazuGbh_GtIqeH>m@)7g?6l@atzOhb-cij#M!9Vo-BXYWz2`V3gHp
zgvEsv|7a*!FG($Hp%^`T_H5I@#3YLh#Wny>2O!(h(p65|y$!!Ue)ROL2W53PnD#+1
zwClE$2M#W+<dLxbvP}B;_#A8r{@q_0Kr4msztXwP<BeuU>&pS7{>lHRz<CSqEjV<y
z-+myJo}LbDr&CzFCb~fP{hqZVHcWtA(Ea<$r(r-e|0y=sla<Aqq^G8C>+aSl->#L5
z;{l#FA9cp)V5TDSJ3<p9h$*MtHNh&171Yq%+oixemk1(RfhXwb%*69osW&1vEG8=}
zuJ1B<^Yzn%HMSy&U@{ObPM4am{cR9Ezd!{8Ui;07h6B5;nj<j@3HhLjDhF~68TV`$
zXB>Qo#)bx~zx5wL&<J)<?QJhX45%$9clThb$nceh0US}g#l+%x>=cIYcJ1%&ZGk=-
zG~l4229h;Y-W%DEL9_BIo^Nwyg^+MGDLMJ$;Y=VgXOvw^&5N)#-vL*ZD<|Lh5<o_J
zr@PJ5zi2>)U^ef56?StuLnL}j<m&?xXzjd(i5Vq$6%TreAVOCA{pCK$^+*EmvT1wN
zFhLK?hs)OF_2ZBmH*P$oqO$(X{7g_#kdu>>n)*{3$m3u^g>i`v54T&Car*_d8fvNN
zeC;~>O|6GwHBj1tXf}rei(J6f(be_5)ci^w1Lv6>G@GTJK+z{Yo(zheFJHb)lr^8O
zy?~z5il7XA7Z>!Hm(tRZ@9VgD&9go~|KdJJ7dg9$5(vuxx>IC2a@W5O=(fVFnWp~L
z#<SoY1bE`zjq-|$t|*q!)6``?R#uzk-lRe)QpolK$=JrqDliDlU6Z>~N}`6=v@M0^
zxKRyy;$<7yP!X>a$A70N<(GK>(#AzL5@0;`JtaQ<*$d241cK*2Xw93efDE-f9{F+F
z9df4+i^zCY61Wt#qQDT*euF6ONxR9$#)gfJ&BH}SL>HFV!V8H6UZ>rsvc13H;-xL0
z)PK0JWu>8Un)&53@f;-RN%quIX)EjNIZ&<Ou$=n-&8X5?PfxUun^R$YWQ3DTjb)<R
zi8b6^P1HP4*b5Exw!s{p7GxkSfRr>hH@DVEScQwD<7<3C0KJwY!of-Dm4nvrxbGxz
z<r;9YllH5%>n_8zrBe?q*`TZqQ&1QO7-t|>#=2vIhi?dg0R54?cV&W=i8bwkDI*7=
zn23A4UgDQA$-jK^+>-AAFV6GjG7(hFpsmZZ_Qvf*bx}0ghX$*p_~36p0C$I>&k1-q
zfij>l7Qm+yFNB0VU;KJN)IwTx`kg0z|4<h+3$Uxg8hLPdI3xbb=1B^7baeE@jpkmE
zekfafiH#jU-ocrholQ<jso;i+3uqAU-@gw`HHgyhnA3v!(vM;dl}a7~fe*9R<mB3n
zIz648U(HcX2{^lQrZy%{R94;t36$!ozQX5b{S1+a4;)gscjo~+^KXOg9fd$8kH#-|
zgfK+>9bpx+rFe<x!rf4gq9Moc|A!}hGZj%;P|!9lD5O*C;pyS3^?jX+^JCOd<a)u3
z1#87w`4zw`T-v@;WI}K2igEg@1TtRx99P)6aa!exiDN(GJR2HRvhfPz9!QhL#=uB<
zi4=_ia-!e7E0Bwet8L`LOd8CJidg7AXo<x<m}fPD51U+Xv-}zJ0FS}`#v%00sd2Mr
z)=}K4-o#v2hhr$l70Uh_hs?ZAI^q(kl|ASJu<N=<QxNp&)2ASTXH`);z(3P^qoss4
zs;;gcHs$M6A_I7-SP)wmS~bBmuK;0V1VgOxSVu?fiqYSCVaSVV0?%DvpOO>6)VZJx
z2kmu=xn5a*IrXc@A=L9@aP5GC|D&m*vNFa3=3;eT9wRSrzz6XO3@S>>oA_imJgJr=
zdZ*rM)M-Wbutgn7--ne$4d=p7aBZwG&ol`+LDbmeQI{_-&|jZc8*~vZeEOO_-jV93
zB{}`|>%EONVREhlLBN8q4z94UM1sOUBNEi-Elo{eH$cmzrK~I&aIii)0Dc0{DDnKc
zLIgg5@g0F#4L+lP{$LVwd|ychTs8D+08Go)&hEA)buS3)HGwRzs7MTFoY~pgg@vK?
zSLCC+qoW6u?9`m;5)5?Z!g*Ssk?aJhSi!2XF*heI$;0mth<Y^HhI&H;v#3Z@yHxI@
zTu3Pe{5V@cKQO^d0wsc{rz3Xanjd#INupGr&J~*JNE+K0ue<WxuQf=ezK-NyIRJQp
zl*bktU%I-wcwG)V`%)wZ8R`ssEd1j&OH3BFwmi1~qNoqM!U_Z~D16)XUJs8UPOLA+
zyMLc1q#y#ToEw%*ZoAca*y|xSl_OTsP_dsmcT&%sJwE1oZqQi{%>@=f?H`siFj$0G
zc;#njEN5L-)+#hNfc{<=8rx*-Nku3+gw`;1!05qq%Dd-VpbCQMddtUXSR!Op)f8RW
zHtc@m(3Lhlk+DRDKU@!4MUG^3Qs^S)<vq*FI&B7LGBS5ZfOz3ke_q_Qb8r9+RU}iB
z*`w8NP<=nPT%hfT^rszG*od{geO^Y!*W^D%ZO1?{LZWa(zeWjfJ1#x;KDW$yaoCZF
z7nK+Ia{e;Ek#^OBu(sgGiVtPX(naNd@H4WiU^sh41tVGK4H8>bHkt=c-(rfMWyV~Y
z454{oaK3$=9Vo9M?IdN`FMc)C71yeFcd3A@4-Ih-OPEn4L)gTGmQ^iug*BQ*54xq-
zV7zJcH(@CR75Ddvg*!Af2Gz-~6&V>X7v2!*THI*>ob9cKDE&k`%GcK`ddIUD7g#!p
z$f;Uy?uyo%nMo5P!PcR=WMr*_S~18BBlsU)0O<5h+rB12r88}rn~BK*x_Qd2Nf8L9
zA2PJ}+49(f-zlf(4xUh~RAAqeg7&%QUOInVcgiAyla3oYZySM-EF|MdhLX!YuUxL$
z`=Y#{;5|rv;7pkl(AO@6A#oOf_t+BVTlV9jQ!@FdKd9)CLV`!nk*$hC^qq%V(j!=r
zyM?!4<C#brN>cO`EmfPzg;U(8o7WNQ>&iI$6|3+^^6q;0&thSrL;2#sg|lcBbiG$u
zU!Q%C)y{55K{%Lp;0AAl*VMUc8HG6oDQC~)Yrt%r<N+a*8QZC4sBo}2pEB3`MF@cn
zWXtJp6aBpOO~v*6&p`@to$6J3@m}T0AQizjr8eeA<Oiqf-8R$-O2T`8^98*7TMA@C
zwj))W&`3v>MGBp34L&O?<;1q3=<Ra>lvWFfs*%81gix4_Es?>Xg%j})9~%{T^xrXT
zkKrQ1sp$3kFAngcM^e{0)7?)THF#^EkyD!T?*Ui9L%5Wl&#vFWtTP+4_%A-;FJo$W
z4DF+q`|GU(WN#rt=r(e2SVCgDZhI+hf;9`3BcYM-jDj}|(87(%^ThjVuThqHEl)d_
zE__d_Gtr>4`1&n#I@2(Vl@{I&V3=0<N5p#LK#r<_nGYABDz)(t#IWa>$T&WM@2Pv8
zw|ddGtw>#?d2hVUVgp?m&YfylR(Cz13$(xL_CN_dt)3N`c6_WCq)kwqK}&L)n>5f)
za09Mz@6!-WkKsUpY>kOC>H*OUcqrtWmhAjooK%Q4>$CaiH*kx53X#Y5F|eLsZ;5?g
zeG?wwzaC#{%0*fd9(INyebVnF(Cl}!*Z8<dKtlQQbMhq&zb66mS@+0Y%?rr#c^e3n
zx%T<*51ZgBAupIwqT+#}XmHyvZTGKBdOTB){{})UCBZ0grxA^Pnr^poyx%j#mOG@T
zl`KnFb=`lTLP`>+r8Pkk_kCkMXNTbhn8xUfIjO5lD(l}wMbIsd7r6xxilU;~TVY}7
zs-&^eJXu@znLj|c>3OR!!t&<8uqK*g?_r+9y9yW&bmVv>3etp1$q-_5N^VgP|HX{F
zx>s%$kk+<PQ+@IM`*&$+e`}jNrdiq12S1^hWN!^XwfqcfrnVj(#J}N{byx4Ro%Etg
zk~?c~FFJ`s3#>;fM%)d=(+0K;$;LPhaFV;7uO|WK2P7{%*_#P_m~{!po*`chH7)DL
z#uE995C?H*DXX91X+7R#T>P$Mw~Ogk9d04i5`;Z!EV@>T_{Ok{ISH<sSkDO$I6Lo6
zi9j9d0dh+H{haD{G4NOV{%+kURrZaIg$-3jO~tQ%EOlkQd5NSVRX!-5>?@a-jVNAK
zEaicRXd5^NY{{gTosA3VSe~bF?0EDa2>7GqE2%W$Si^3wM5npG%g|5tWnUd-<K7rU
zu?+!24ShO(gXK`2a06$Iweu6b;W29+)~(wI(E3_0gq)~NceE*T3}<Ocs5IrDZg9T0
zvI2*0-9&FBEEx?koYed!2~&xsKmPs(g)+V6gYDY;mhtc^3?vMFyS0DnaP7$P2I&n3
zbLacD+&tWos$ndz;ltbCMMbRLV=llzRsK?8_=EP@5YyoPFAYwLKN`9|^ic0P_CnrX
zohaHqY~J~q6nuKBA4>rpIhK9bMEt)m|4Za69h_zGh5w1|fng(o>xnQb*<D@OpqSB-
zpZrCqOzlgfzHpR48yb;DTH(2Q9LVcL$@%GC_zK3ZET9MeGMidVf@$pe>3Xie-MLzv
z-cQGwCFTfJq=(y4W0t4Qf9`ANk;>mdn9tjHkY6h5_JHyXbG!fb&6U{1=PO8D_;?jr
z!CF8{vmRM2s`)fNU=sTT3}d(<A9c_4;JKU#BMW7Sx7VxS4o;WkO*G_9Ob{q`*JF`<
z3T`*gKi8kZ{geB>Vv5-G>A5~VhB%dm+t1)u$4v_UCeA&vr|cp6Xpsy0ixDrdkzL8l
zGtxfKsU~q?=jwBDyBv8wAl&=m!w00{5e`}Rmuv`d2ic)O;kVmaU5qL(X2nTJ&1`#I
z^snjU+rB1=H`V-M4VwB0MBlZh%-}<$A_nG1JRfj?OyF}{6nFjA(iNN1qy6WnO(cun
za!TtfaHC;CMKG7_do6KbxxX`ygcFF9-khgj*(*mzL5`4}r<c<gEYnvV^mlv(IVT^(
z*W$YVT2pHKskhb$PotP`#enUUI5a=7u(Ilb9~$YCCk8UHK=Q6IKf7yb2|Luk><aeZ
z|L|Vr#(dk2w-jL3ZPw(!a`2cr2zxW2%~%uNb^P9Lbhv2iyrnZT%1>~wpi~Wc5fQgg
zkz>MLuZkfiR%Y1v(kroRff5Y4@}E9^+8M|10#Pei@xc+Mc5BLIZFN;V5JWeC<aIqf
z0cFy3TW9x)<=J5nDX+EZMTu*3u;3M+!{+2Oxwu;EjZ?b(S}N18DkrOJmW<6>a#E5P
zCnMTWk*_#`7H(~iJ#(4$@HMNQ1oy*=>{wzL^T6d`)jxkmgETJWS|tp<zidwK{ET)J
zaQ%^0PVYV`Q0Z{AK2nD1LT}s=;^8vku<0deEVp?=j81<3-mYl^>w?Vx#3HV^G|2SX
zhR|T?PEVd0zbTA&_xV<2<tkB3h1;yns9}EZjjrn5HN2RNP9}k!^RlZ$t>V(Xk8?fl
zipsBlb$+NNH^p$BZ;pK~-w^u_!tZ}u9cQ=5ng6Z-%Ah$s!2NV`y+5@oJ9~U*&d-?V
zIry;H-!G)ZCY#WF{go-?WtvR1)A?~oP7dbin+ciW_cBb3wAHRBx&{VlFn3wSu41GK
zJcwdgi)AYg>@2d}Z<3win=r&X@Fsw94Vb{3t`%xSpYS`@{5MrZqqU@*vLQQBKlKF9
z|6V}N1^=z9@kZSm?~CH}6KK<ni*dMviK+4PJfD!&pcecjA*h@vbSkQ;xtPvYv0EK<
zS~;4I40~92+~2{_s1ZcS4=!L9&F$g2nkAQ~*-US=w6tAU#7t&Bhy@TJJZ}w#sp4tL
z?r!0(jOO{68LX){uK2}5bOWvIya!{i1mZMYif_|Mc2Dqb$!emXZJ+4v>CN`kp1GLY
z$wnG3E^5mqo^0v}$0bzL9sLUI5Hv5gvtGVj{q>c_t*B=Zy*JkYbI;#MUQ@ZoW2UNN
zDc^6JzcMdtu|=>-TH(1wzFWfQi2MHXJFMrUwg;Tv$NPlBj4(xg%Mcnx$;rQ14dvbs
zK-?LF9~2}In~;D{HkIeFbqR<T@NI-U@?R?Csn7iU_mfGHxBQQF+#WCSu6;TnDTKCP
z#=N{pJ;rR!za^^LCm=`B)zvkM`8by<c;5S%o}QcLvjy7Cn^?;u`N_$;L+#;Kw?9L3
zXfndN-t$AFFP1j5#}qiK8AqF{B3)hU0cdDB?at=0{8tz{&)Mp7a`vIa!u4WEm1e{M
z=y4GqG;cLDmxgM6eDzJ}vd}IL%!-mGjZgQ91y$!C%5WDCX1hfd%T=16vqsjw8Ch82
z&TBw<a(SBI;HSdab+MXddTGJ^<l;5k&EB|#n7GQlcZZ{NHB-)>>|tkZJcI*BjS^$i
zf}btMs;aautwb&M?WQfvqi<#2a$q?h{ez?lAddBaAYw!y)Y4_ZX9Q?xJy@|s_4YCY
z$MWMxSGe;PXhPM53$n2WFhy#M@~F{;>GXS(!{Xw^>Mkr)f4`21jvfVTt15#YivcQE
z(95y4b_}pq%;f#)_!%ZJ@B&ipBCdQ3eQc9864;qal`cmX76*{2?8TO~U3*JD3aj2v
zs7Y1K%p6ciL;D15E<%{!&ui2gnGLZz{`?tdC+-i7O*@WqPq;FpbO<ffJAD%qF-Nq%
zHO0f_K6&}k^!G_5&JXqy<!1eMS*s51GgFtAodC8Fn?u@*H02jWLY%!EZoroBp&e&#
z9>cqd+<iN5^q|-RU!dXv3HXzNc6{mrbl$eBgW*)mQyq~^CIex95*Ooz{{Gf50*lh0
zXh|L$ztVz54^_YQx1?lTm3>G8G;BMLtaIacOK6wB*EtxoLmJv0PJ6(;RcSSM3eK6-
znlhKf@`WMlkgQ^>tIU#0dJ^-h4s=Epl&|6h!~~&h784<KV?vX|X5YG}>LHV0(NjuR
zoePv{M)O$gtp*~0oOS`nJeusQ<F3AOuc}dtnHv_fi?u~(c-3NivDh0^&cmNDerGG$
ztG?0jkXl%tYbd$Lm&JKuZ@kz+|Me5B-w9#YN69FxcvPeI$kZ|cZ!_B)p)buKLL|mB
zs*D%Ey7cl72mlZ!4$fS~PdT_d#OZ79prZ*B&$snGVKwYNU1=q!!C74F)Gqi79)fW^
zPS&6f1HRnZxlK=h4cnCfgA|8^m>4+L*=_aB4gL<b1^wh*$d--+jRB^{@?xQWUCU&-
zFixI@#eNJuP2XXM8Ui7Lu{^?}-}+g4I&W>iiQYnPU!r4fWP`kT-w7AvXhqGDzodiJ
zred(1i)He6Psdc($@+Mmr0E*f#^qRQg|@jqu0zEyaiUs*=0IDEs(;P02^)=)`REcB
zdC^aqe-`e~^yvB_PipnNki)>h@BXdr{hFh$xcDjUYFI?zM0Ipbbo5&_wbx2YZ4hao
zDRVjMwWZ!t=4?Fcch0qb=7pCFeO|SY_XS~{=Ff8`|6rG+%_7I&-yp#ciH~XE#|k)Z
zj%G)K9a!x4_ENk{?eF0r5&^)x9d(sW*PQNlh&78neCOii41TFGi_e-`nKTc_rI~7?
z5+bh}B*;NMnyu&8*8lAR)W`n05cEj?Yhpck=J8{bM-s*AaOKZ;n~{G`?ajFL3wD3y
zZV}xtGuZlYHnn#Ar!y=0L3`XA(SNA6&W0&71YXFEIS=N$RQ=KB92uG*T$>wU=Q~>u
z-%H3fW6=@X)8W^OJxg%jNRQc-lCZ><s-*c9@4l;Qb@$^ihud&<*1ha)j&s5t##h&P
z5!XM=DFr`&TG`vrxEpD3O!xJL#2OnKGQ~!J{|<>!?|mS!h-|ysKMKEiPD;b-iX+2f
zA&q$l0|T_CmEfgNwbXS5zQ|%nOs6O537c;UJO%30_D_745@I>bon3YNr=eb_QBwGO
z*x%njO*U3TOKE@07wZfgK%%Kd2HhFCP|Zt|i&KC!qg!it(NcE_7Ir%0R{>N{N3Ij6
zK#dEFY-3UX2mQJpQ%a6c*k?cdeiBh<te3Cr{rcZ4IZ=1#%*veEzm4Ri9+$lNp9&}h
z>tqt@&(VYbmkW@TV2oZINbOqTbe|G9xw(X}3|8rSmt9<E`O%~2(_TV;<>83^Gwq%}
z)9F1-Z0?i(e$;@eY?^F>%5~);rUspo#)Q<s%SKZO(-9&w=1=45z+o0ewA4(UN${W3
z<DEt}Qo_;9H&wSrzxiQr^>lQEzkI5g)*03XV3FOS?8u7f)?o7A?d|^}sAm6L5p4SH
zDlWvC^{Zh|MfzQxqmkdrNSOEU;Q@2I&%T-(x&8YZ2M$bUJ3YvZ%MJxs@laRT4Jw2O
zSO%Ikdsu?bIfm2H9Y`T3$vv{rYUW^V-T7NSXLr3{$Voukdz>5bh=cXPFpG}TJf4Dh
zPS>~ao6X?KZqFzesM14IU}s(IV59Q3HY;Ors##LkuwybOHzRp}w6E1`$J{Mj{R=j9
zQM95;<8jEWYPgC9U@B*w(FR5i33?(!<j{JQV(y{odL-CuuR-&65Tw6lV>hdxRlT42
zZpOoL_~3$?o+(^vA##KnVuVd0+`EKi(xhtx56Qz5eI5^QC?tOu2#tw}nV)}`mh$bJ
zZa8Ip2N5&a4h=kaqY8SvNvm?Sr%+by<(GXftN9H5RL4N*OT%OG6;?}Pl$Vg1=?n;w
zdJorPTjE_hNu_xZq)2jAbhxe{`9Noo49mdBBM1ThHMmZqJnEdG`>qfk%9Cr6gPv)M
z7O1EQA&ufc52u+4UNt5(yW4W4BUg=oRgh1QBDOhiPZElykLRa2egt0-xElJH9;L?)
zieuNozRiCEsr%Z`$k0lkEM7+?5zXtqg4t#*uer`4lXP;O4iI4}VzMSWsQ#8N+{<+v
zum*Gu<3Ia9H70beyWN{ohNJxJ>)%J=x>FFZblCA@pX^3g>kt&a5IK?cBV=a9A2YEV
zAQbs&;z$fF_P*C&M*h>$yM}t{`&kx}%v97(@`{RjhL$}-w>R*{U}MP<HC8}_2=J$&
zjDo9IkHbw}H)3yO^!Mc-WT<uPCGF*&XnbkCnpa}1g|9<6?n1X5<A3OG;O4{gj<lv;
z2)E(ri=@9Ln}+by#)O+2DDub`-a>`~PQOO5*KWV(C$}NF!B9|G_&}8t8%@fnthXD&
zd(v+s<nI#wX%4^G-Sud35v)c5&tp|&+=#$5oEPpDXK0dFR)-_e=E7X7(B1zVFZ)dt
zsp6<?>h=;KBW4*cXZ-1csF@xZ_eEq(hPWk7yG}@=9r^fS*CQi&yjkkDo}Wb}qG$}F
zRUhqdZQw!7JU?M7Xh<4l@Sb=BYwVc}R~iqMzsYgY`$+QYJv1x|UU(B^`0P3QEAn2m
z4_pr49LjmR$Ip1Z#;{HBRyQ||OGcjlK$pW#u>WVn|CIC}#PCvE&6W-co8KYo1{M`b
z=3ScuQ|SQQ?YGi0+r#*Xdb8`C%U}FBa!E`z;qf86%@(1XC){^~<NzR2>n?0>KYWar
z3|@GJ$$X$93Fk!Qj6$kI?yW}w#P=wuRpq`nS?CmF!b0r!|Jgv%p|i{|2%9Co#SNo%
z?28Q4zr6g~R-7bHrV(K((lflO%4$KIGZ<SxskrUGj*IXtR8?%sAAYgb-vgHO$44=p
ziPzbq`-wNuA!K6>&3~++XD(b*x1PNkLBRm;8bv68{gL2u;zp5ED3rutbTN^mt9D0T
z%m4M3RIki5riLBMa(la!goFeffc~XgE)YX!@{$rHjuPP1kl;fmL=l~2*QrZHGLIPR
z^59S+*}_A7d?=ejjt{{q?8m_4m|5AXhOU(9Pjg@BE@Z|GuH))x)+$;O-RZZD=)xVj
zCe<P&{sD{g24^QHKv4Vd>u9=$Pu1EacCfsrer)retG{-b3cHR%2~e+pC8lozSC+YQ
z-Ov}!PojNY#j#y6ez0Kt_th*HpR$k9$oDU(;hPD0U*9Qx(S47MLfF&XUfuq@qr))%
z|DMerZ+JdStZNoz*j5Z>=H>M$X6V5WH-zg2Px>3D)c*7Vl`|COnT5+jyEC3nFuBJl
z#0-}BXlAcYh|J;Is$Fy^1L`@B)szg5)66&<V`6!4kAf#KLmy7xYbZgF4)GOCL0%Ao
zz(>d`P}f~7EM=#W9p_eL`!Kh=u5JkHyf9IW@X{ivWZ#Lsu&uVHL~0s75t9}m$31_X
z^-H+GUTI#mPy~o)(&{}BlXX`Jsf3Xn^(TU%i{P?bH#2oQ-3GT;PUyB*qNUxFAmLu?
z?A3vfNrd~Etm)4CtA5CN)D(PI&Gt{FTgRsr8#oX<--jEcpwj?JmsGoPX)5IB?fnCO
z(l|~jZ1Ge3+4}0HfUOVP47gIALY?Iai=Sl-arf`vpAW+V0+1LX^V{|u`o}}Ju%_8a
zH8QmKk3T<wy05*%(Z6sx9*g_Y^8DMUlRXnLwNkX{$XMIJbfXET6SsF3N^UolJOF>r
zv5=+pGWWtC08sg6m0%;!z_0-o0I1G&%0SmU9~aj#NCRT<O{WDu_8))&c&{xOSyE?$
z5o`_AXi*Wpoigo0tS7>~A5~`ly4@=_CSoy~oc%UibLN0e&SJlpR)WmI=PbV#L#O94
zi_Y^zV=~TP_7j}`J=XPXQXB<V^?*l?2y;C>MOD>Std9Ul<KTQ4!#+5xR;A*HsDuG2
zEHr_F0U*c#k^==IfOQRfT$zK_B^oQbj*d<k6(^w(^hS$44tbAa3jhb;ys0WFF=wY2
zW^vWz)t;_OqahMMP5(RYieWX#RAV!8_)6e>_D`P|H@7<S!?~WH|05n8eLPFovx--%
z@oonzNdq~TSTtM8AZ60O1uc!@fkgb~WBX7D1OkqNtBlR^kI}}I%Yb@Fk$}7f%cgiJ
zS2K8G;yZYKL0*6e?WQ)??c1L}efr|>Ka00KkiJ!*^91cK3BkR4FEPR*BW?D;S_Z@}
z+}88Uo0C<%JUmm?>Vif*pp`g3!Fc|>KOkU5&we;fmdj@jn#jTq1@?P&V+Lwmf&s^Y
ze)DE?YwOX*xWn#zCcn#JPHuKrTif55gQI-Q2r|8Nxi`xfD4YqV9FT^BqFRbXFeoZy
zp?lE;s`om@PQ^lzd6Q=5W>A(~0j2^tZHGLOI9M5I?df3x-f(Ft6t=5Yg!>p*`%_I-
zRMG+hI$+TCi3!Q3?2%9~QF${lF@0g-T3@ng{iH}KDJhdq^O6#FkR^l-A_XD0>zkWP
zs;j@CL_J|8yfK-9S^OxLUjCR#FgLR@Rq@F;-q6#Wyv+!-{rqSpT4-PL*smD4z7hsK
zZyZ-UKQCj*^W-$zoYKe45{naFn#o;*2Nkvf@a~&DHHXzdFi^n_$2iR@d#sDL7U4C3
z&uxNGBy0$(#YMh!<O=)WBO;u4=Oz7pp~Nh?!qDXa@^uzHs?-_?odN@ECO}Jp1X;Lh
zY7(oes%nmFo>axfkxmx>3}MTel~M-;#!NJ8dgCt*g?$Lttk?hCm---qNj@_-*T~*s
zX9Y%NO-<m6!t1d4*wh|SLx2l|$aD7yJBrQtc~_nLg@%p}g)9lTD>VzthswE9ldDTN
z&{+Tq>)_M<C(Bb1+PxpQIo_TD%-0y-sJO3>k8BKEW?I@}TZpKwO?wzkLqh|Rb1`3`
z^Xz^m;^sa+<99>Ezop(+v+1`aD1PI5EvB=Wo1a*w1P5=`3pc`Q=GoRe^ZBlVZAQNi
zX?#!`T58WK(VSm_W$1f21tFLPP^8~OY4|zC!s258mZzuZ;2?PUo{39HzzUYI*wos}
zpkeFL8Wbm&ARs208X7v+9!>|>b~*1`fB#s_7?ozN)81mplLOUyfGqoeSue0%aRA*0
zs1G0_#fFw|c_wzcpCM*{3Ti7Wd8nvbhK6!g^QVB;^;ac0I2i1-pPIh(0}kN~*e^sx
z*q>Nqrp^~Lmvw^ASB9)bHnr5<+qaWG6LaP%vO$Wj{O8QuxABFtt0Vaya&ky#xgQEN
zH@l9estO>h1MS|~c@iey)gO=bi27nC4GKJY;uU`r4S`pWNh`cJnKt9Y6=e}fuYIs|
z_15j#hJlI5N2kGDD6*UOW+@*}RBgE|d0nj(1Sw^!S90p^<9!)Ovm!$J`T2XI>}SZQ
zRN1a1Gw;C=K+AUP@!wem!NZE;;?C*m>6R8M3W^W0+G=Vq39Vkgz9);0hPF6A|DK!a
zvw(wKY(zz0drs}Ptrdu&@E5IFNl8f5+-3qEsp3b@G)lY=@bN8uZ*QM${@235V2XAi
zBtCwshS$c<PC3X695SGHgZSRP<&6zeA|egVY#O}umoe7%Qh!phw1u;>v%wt4|I??h
z42iPActQ~Z3EVb3PoIXNcs{qOewg&0|CZA2n3YNU3zKSGF9RO7Z((8EYg>X0TE+8K
zmIA^ou-M*16|6(>F!v#6%2-~b_Gzc-4i=^d9vU*uuXYawbs45bf4_oHwAO;|+v79z
z*F4`NBZ*101YM)j^d0(&YijsS+X5DrvQzGjyo}`;v<mEyVrXsB(mhBCHpf*_9r;pJ
zv<GWgM#%B;G3=;gzwj6|m=CDO(pqrI5`ly`e`wD+nsW2&s{}%X8o?gH4f83&{T&>M
ziOC7_x95XBf^LDBuv^Lm^c(U#-54zkxch1>Pj7UE)mIP>^kO&w>aiB9e?S7d7RUv>
zl9bHM&IWtxAAd_=dS+%Gq^81%19~MTxx3$1TwEM(c$!sMAPf$)cTL2ksi>&lkFq!%
z2*zw59`<EAtoAiF?rqPAYVAsYum(kkxnwAv!aJF4;MnbNZy)dV2!aAh?SgsZ^PLXr
z9A!<-*wD~{9Ce#f66XTYwku?x$PlcsdWt=tdSvwBxzRwc2eJLes9YVn$8IxptKTmH
zL2<p3M#&xRa--X+Jrf@!wRO30XZhV)whf^UBV(ZWv9Y_G130yiwt=6A%?e?l5v+DQ
z<EYHe%Gy0WFa;bE1At1Ysh7vgn7XQ+4@^WIenN%^6ebhkaR}L?)<9x>a`IOwwqP|4
z0wI7=(9zNYOax|Ac1P)8WZ7na>Kfqxy5srRmY10=CLC8)RYKHL*Vj*TxB>1VVw3k2
z<YF(KoYX-)xL^K`l8f3XO&@@j6$|=cOTY!TJRquQg=O7zBnS^^r07LN@Ui6O60qvR
zC_VL`C(x3JQ@nd;79-r-`Ss@?+bnG@h4b~j{HvnXU{IYRPkeJkTt<H;QcC8`{+A1=
z+B!QpO0Xq3>vSY?=)BrCbf+MV@IoGmBgE<vr;D-z((nI_kKk*kWt63*Q9XGwcMekG
zzP`f81Ys`}+hsz^yuA4J%c1Fg77ZWiR}E-N*zoq2m=Z<*1QL&c=CF~-M8#~hQonQg
zCy*5-Wo7xDcAJ_$hZavqb#{Kq)hxp#<8uT7*`OKNSc3kLJ^umut3IoVD3&=8ZCC2G
z+TRI-eOfr$+Q0y>c{Gg1CZMm;WH@IOc0`a<h9@LE(~Mi><>m${O|Hik3V<15nV)A=
zGNO!Nym+f~cVn-_^u7>kR1L3Jq7Rv-nY<5I%pdBmWp6=-i$#71CbRLp#^J8D*FkXP
z_|n+J^lyKdx`06Kmg}}4>8b#0{73aQ`r3wha@NOhU=b(0e08)1$F_^NRrY}&I+hz+
zT3Ud+8zI#JTD+urIKfHj)aK^qE@B`|#FLnFyN8Z?edFTZyg?m){Sr)Ieij$MaAJwk
zR!%*o{kSjG-ri1d>-WeA2oGaXqL_+^P~6h*_<3qFgj~!P38zZ(6NOAf4;tEav9iVT
zS&bFbusUp=T3*%0H8&$Ay+Q<=n`8iJBjq=kZRxtQfZa%L%|CU&Xx91MrvfQDNr*=4
zB|rh#vbq`JG>`o{0TEGq96E^Xvd#&iR<qC%S@Erl4;tN88M$8){%lVit$*G=7{`&C
zpl_t39?S;1>r`tNtmyJX9nR%0<f(#$Mlg!|UGE)!wo4{UtSsbt0_{d`XFcZW*a4kH
zFsbo4<7|>2+0o%nZeCXV?*>Cy*Xq+j>7~~q3%&T?n&y9ydt3^fiiF8!?}ZBNi6mOE
zoU2nJy|3~7u52!#YY2LLP2Yk{%jXD!U)P3PMg>6U4(ByK*PbF$vXf31mx&U#p)0Sd
zINIXOc$F{U?v65&*Gxs(lA4~XKmgSmHFfphFyV`#Q)78^b7g61I>+gyS_cONCyVp%
zptEchPU_8+%{=M3uBkl+uU%0a6Ns-F+E(5?Bk2ShjWyN5ZfJkO2D{*f0g(_ZE76TE
zdTOuQlA!!xZ74r!mY9)F@cro-nVy{VO1=T%O(N;(pThET>Svs124h{`O~)X0T3obJ
zRT(KV5)UmZHk0_W!ipo{8PWdgu_ruV@p-!UKlNPqguHy}9~mvk5nV<0a75n@5N0J~
zHQIphuata9HaXU}<?gOBH)EGPQj1ecZsX0FJyx{b*5Zk7cwC_Qf%q>a?vUYayAG4e
zRJ$i*6G_sFR8k4iy{QR=zJhcjNE+d1B%s>U@ug2d?2lhm>ZhFAb&I(r2WBsf+1<wE
zi-PXTS{Z)%Ca%cCnXGI6W^2iiee@*%GN0%~(df2ifXUlv!v3#Z6rT&8SC4Sq)3ur!
zyC=Ng`LN}8R)uJ!cyYC8WZH{w0vN*EkQYS=VO~d@E0WPly2Zs`dLC6;X)54|yFdP&
zNX)=6B<MA)d(%tT$YA1W3=Jj9gAIIrU)SQKyW+TB#yg~eJKwB`axFhJzW&j3&LX~p
z)et>;y+Xf6CQj(XluX_#b8RyJdSo>7+z6G3#q1uNVw^B*ysq|Sj7gX<>kwzLncr<3
z(X|pPLCInfO%3+et9yp#v$wnl6UiwW85_qI?K<|&I_Z-QTO>xY4B8IaxK%rbF-b3T
zCLS|=QFCoPM<xzDeXb42lmE>T?iFbow>FO{yyq9gen9Bl=}6z&;7D+%tJps&n(RzA
zpZ!E8Ia<yug*`v>6^?Upx5ul01-{^7MW@~M^OU_4!^`S6#_9E;r?Y9LNNEEro?x!$
z_O+Di>Gdcbzx2T_^<Mk+;JFc%Blle@A<QnB$QP_F(;brfYKcAF3VuEKwTHjal1*4x
z#YFT^ACt5gX)aGhuMGGot!Y*kr*x6>a8SnYN2`h-+lVg0YA}n;#?@O#YvSJ3!~Pht
zOH8!ekEcz@hEw{KZEmIATLxraRk-`cTJExws>6b3!<lwYXf*<Cb63L4_@5q?4u^An
zeD<MC<h-!}>yOB!3VTM252BBCj>e6{7M&<YAloc#DT4W29T%xL_@Dmi$47%#BE^gg
zDfiIlXuMQPo(B`Mu^Lgc;Z#2M`&HOk|5T&(09P)-$Bi(%$tKW*N{drg1dl>M+*R(&
z<v#IXl8$Ef-Wb|KwF1`BN`H{tk#UXht$xEI#@Y`aKvfnByB@1g1g7`)<1U;2Pg7qV
zRps_Ydk8_15>OgJ36T&yw1AX!Dbh+wcZ$-|AV}AtTLq+BLb^Mo1*8!L0Ra)-I^6er
z<Nb5T9df?d@$J3V+;h#T8Jz8amDQC&*|Z|?bk;zk1I+F?V<#sIt}L$%Z`P50bmveb
z#5dw2XAUh=M8)q8)qYW;;CC~X$Q^Y1fr~L}hIRQ*G|$dk+Ho|c?J4@+T0Bk#EyKZ2
z*N3w)$(Oj^2L}3INf1YlCM+A=4U$0qGcqsIMAA#I7F{9zK1@}o*@-P!Db!V5$x>D!
z7rRJqM{Pn_i$p5#_u&t=@eYnRiYxhjcCnCYwfRSxe-x-~Ht@a)17R?H(To}%Dr}n+
ze4Q{Gyd-gC3_Rj<$53C6T!na1qELi}Ofp%s>`bVbL~P%h#iEnKv3ajREpnOH%~T@>
zIzPcoT0Wf{&CqDWxxlMLSbyFYea(hbv=c9`^dUX}(SxuEN1DQrTQqJRLv_X7k|h1Q
zY~eafA4C`|(rpch%WF%5+d|KA4WnTef#eqq?LE&`L)EI)S~uP<O|{RB(UEZa?lXR|
z5^nUB;00a55x+Y57PhUYUKJ%9Nb?RgLBhQIFXPRJBPKYIqfEoX6}ed=XH<Ng4cX+3
zlP9I`3Kg1VSf$1<8BRW~uByQiMMAH)pHmHyormdpw6X_XfI&XF7pxEs<>2k4wJ*J{
z(K?dJMjp@NBX>35`B|t(`6b;7F%4|uJQ~Oz=Ve!9x#c6=vPrqYL?2lC$zydur+=tH
ziR0&}2@@S%<<rF~3?+-2e%w<(SXMO%&|MQ8bq!Y>Y3R1t<P#Vhgs(Gx^3f6e#telC
z0!)?KhQbnL`kifChK_WfJ9+R;OR-42ywuE+o#%w<oaY^bV~5|AotET~WoF8;QSPAk
zbyXDI>4gY1_{L@ss4hTuC0YFH(_p{ORqTO`B#J-@<Qo}D>LKj()+}|t9;Z<y*Y>bU
zL7xv;++XVW-y5bmnH8C?j~B-O*{F#&A2Ewl`n`}C>5X-RSOATT`CPv+Ik+`$PF!)#
zjWp*Ts|q=z@zOvBrMG0JHYqpHXub9d^S)(35Y6ZAyns!ypaFFWS%RK63YsgQmGb&i
zla8eZ`)EeYK1@@ea?jtqauKJSUvOh~@1IN1obnC0<Mh9}+xZ0rt5+MPB+@I|+>?5!
z6br+BB;KnV$H>ab(5pMHv??*k>(%sAQmMhPNxoysKOBlDef-Oxg&%uBY}AL1ZvU16
zhPpuFBeJD$th|je;z%dBqgt}%3-gW_Bt>?*IQ$u!Dt+b+n}f}=*vFNJ?0la0+p$Ph
z)(i8Pyr4r(vC`E~C%@s0&#iuNV9;-f-(`tFhno`^7sH0Kz;g%|@@pLTe=3@AT>+;b
z8*cv;zVi2ssE8`;n>0mA#T`3(cY>J<gXPk#=Y{wkcl!K8(kK`DZ+YIhanbOui-wmX
zZ5ap)`ZFktR|F^)Bs0}{3hJo;@#{X1=o`AB6eClxrH6q-;l~}qdVASP_sHv+gv?-{
z2Ta$TL8X`ILq0^`#dsGOQmPB|C8|>LEax-wAP-f|O=au)!vyGcG9UR-s}tfW9=m=p
zv3}z%B!(Pb(?7M#KoCu})s|N&te4R}G%SVL`Gvr;hCn(1-AoNMjR=v5@s<LcL+b65
z_Fj_vhCL2k7%+pd__YpvU?(8yKf=$Bn^`Va*V{<AMqkAzb0Z4($^pH<g=SFLR2Xbt
zu2Tfe&1dAc>q6-EB6xf+$ZUR($ow?sLcSDned%?e7_(Nh+9Q@kk}?g4opb5bs$-z|
zZ?wL+CiS(htnrTgFBx_%+>Y+l%ICUaSm{YUWT*(!ONJHuwU5)$M@r4YXf9a^^9{8C
zNlSkN`3!v29|;;)s{7KgPxYa@V0mu~{q-yUit5{R#8Du$h$?Efk#^&_ybwO@Xl6tG
z4HjJ^_WH~^O1*Te7kPs>e*e7Sv1yTB6tMFFa_yJ&0%vahp`yQJW>PaZ52*}E(JU@$
z3DOEb?~5ZPZ}fd5vyQ&hN*ljFzI307JWOTN$NvPN4?_%;FBVflZWv+HKp2=x8r)^~
zI~6b4enX2rqs>iIRCp7kPDW{z=+ki2xJ@A7Xw3EKTm7IWa%03ny)=H#;6|({|K^Pi
zKz<W1-bkav=%YQ?yrki6R~A*Aet%Zj>1px$or5!z=x2(nY_bD~`(!0^Dz~*MB`k;H
zYVLEZS%=3?x*x4;Hmx{oCs+Si^ZtfJ>YP}U#m5R>eARImCts!=#*lW{CjG?M*?4$b
z@j)Qs3XLSP)ji5CU_&*i^{ZipBg|;ss87cTOsn1(%9K$XRq7uXQafn&`V#4fk>#8F
zQ?eWd+xQ#6;Z3AOUd>=42}w`ahqxSA6{jAcRIID3JMl}-Qe4~%r2J2xJC_4t-0L+Q
zT@Vow*+N3{v7{u@;!PcFa6!ez3m~Ncbp^m;N`gqLp?<OH!EMta#Y9J%zF+-(ruh9R
zh-rdb%vTzfs;=oQGLeXf_LD0pznA*;bss-9DRSduX79#4;-?9JqG0ZzG;GrsLo(ox
zmmw)3VFn_Jrv0d~F|w&XsG9(2Uf(cJS*OCB+i8^@r3GiihK6sf&-OQvA|iH|ddO7J
zIpfUXO>(x;=U^rRa(dBrPyqD{FxGBc@B&By191=)M7iG-bVOH4LD`v=r4@XfiSLGs
zrMvq0{7f-p{Y^3P119RO%o~~KafX;?5oW8~`V0S#u!~Y?roH9POA*VKoU`W_oNbnu
zB6_v%Ej!D9sXv#DFZR&0lS1K#kZE9=uNdgKU%M8?Z#Tccx3@XOuy?e(yywcq#02Dd
zg<GY&dxunf&R@5uoV@=Xn0@FV(&V?+N>5IPbRL{u3ZR@RAucZU0eP<BaY;!$oQPzb
zC%<u+bD7*88d42N+Lvq9)c5R0h&^0=czJpqu(8*sL)EBdUO!V`*p#Rw3`OEc8q`cx
zDf-)p&ryT+7CzEaNgw1cHR@|h_ogPB<7||NvM!gv(u9s73rWr~D%d?Wl#@1?`%~t`
zBJii7&IIc10Brevc=#@CJA+sZa8)N4KA<Kj3#F!T8A^zWiJ6+_1>yjPRij>3UjE=E
zO0|6Ie^|iw*hh6XPM<uzx|ct0fL&`sf-9h-v9ZP|q*0qJ=$HftUzV4swp&O`N%{Ws
z=K@%90I(FBpqcW(l}|_rH3219e88mxa?>G{8ct0eS1-grZWej<D>9x#7YcWuczJ&B
zGMs*@vzHlkBVG9Q?C59=ox-C>?NEgYF2rAK64TSY0l1Zr)Eygp3a$tnZ6V9gqCb_%
zSe3w0huiaRTWP6^pCh>i;o%^S@l7^7zJ!w7&(x@qoq^QxP6a2y?&s{pLqi^9gfJ?*
ze@axslK9>6cO_xQo)%#(h0ruR{@dy`{rbI114|#SzGx`9_7zCy$IF5(qmiOcHTWoI
zbM9l=$JBsHIN00E$_4{w3S=d~8j|XmpyX+z+Jniw|4vU%NzLcaDdR*=gvkO9B$q~^
z^e9&l;N<;-gMM%>VMJNQFz@X-&dtu|sibc#Ejj*&RfpySR^76>B{id}EaLcGR%fLz
zX>@Gwd$(Fki_VDi)3GTy>i}DXz^$?V{z`=eTd**Vy*;{|rEJk2cx;O_?aPTwy|n?A
zxv^4EY8#ncTqeUNUQDwSBubI7e+)u@_y~OCv)ihQ!i2%+1G!2AT%UJ4&KGmFKWt9<
zRuwz4il<#uQc_6X*8bQpaf@Mm2UjfZxXHTW>k|&T5CbBOAdTa#=c5l_eXg`S+bF+c
zfIb&Xyq6{;W~H1ixVN0qbhPA@SJ~Co1&F!ChCRSs#>PSW`_5AhRn^CTarb}B6zAmd
zfLgJWAIL)fIXnao4aiS709*%)j=3oeEh#A}U^a52P%GGQeunG5zh3M9=Tl2d3xj0f
zGx$5$y4JmwFboMdZVfyDe-v(R?oXd=p+X9z!7(Qto%d^FSX9aav&O&wY|^xUQEFj`
z_l}58SW8Dof*<t2F6see%~g`_^WJ%{{cM&%Uh}`&!N*UYG%3n~Acc}=w*{&=6FQD4
zDJ=j1KNDl)AwoE^r+*ec)STu|hueSjL*j0;$rb9#LV<|E!z7J<i-ru0nT$F=<{gb%
zVq~Xbr-unHg}sf=1Pa6APfg|DF$Gy6p24knS(ir1rbCWfo_rHGqnQ4c-tvS!)JWpF
zf21oJaka(h>PW5vC+9({KdT#{fxV#T0Yu@NOFEU72V-g~PH4*J`B}a4^w_meD(Q`7
z8)$S9{4}6K6&H83pZi6J<L|k-Iq;>3og~1+b98Z_6!pM%Me<Z!x-?amMNAgqND2h)
z{d(Q%o!Ji6d8H<x5Z54tkiRF4o<$FY`{b#kU1;``q|zVc*UC)MmAoq3KZZG2N0^R_
zP%sHCxP~_uGX&{k1`V!SGXHN%$*qwTA4sKf6_cOP^hMvc_(vazSlqqAzg3el@4WS;
zFw2bjd$XBo?EciN@PZxONjl)1ly^8Gij+dkj_=bdT0xmw_ChLEm+6yr8glYZB~1;D
zovHF<$N5>D>55vngNIP>2hF77Hp12{mW-!|V?%pVvw;*=Ha0cAgn~T=U3TVG5-W;;
z{<&C_1+c4`HJVM?-{(15wDc@F>0OtzyXT#6f{TkA*Dg7BV9tb5;c?Q3@R6yZ%AB9W
zQ^!Yr2-beR(_RB12Jy^bh0Wt%jHnI%6YVUM7fS2|2m<GjRjF8kt*M9%EcePf7`^Z~
z(W}4Pz-x<=AQW&bpW0<`zTCU-r*tDkgXMl1RzVZRoX$?9%9pJ$N~A>|yN|M*9JJ%^
z=p*<XTwD$UuCBQsZVTFfYlc%4a6UFQF<Dz#feP11-3|cH3JagUp6lyVBqACF?Fxr(
zScH*G-+HvUG+(2U)k~L-3mK%qHD;_hum}`e*1wkC=IDN25GnC;lYyICyqAuHWW)?H
z6hD^uI5mT^;z_+nN1Gxnfu?X`yFtT2eLF;BT~5urj=)p;E&+Y^i%=$6p8l&bYXg0+
zAj~_CpHsCS557l&T?J8;_^Zat45P1-#6f_Ih$v#U-%lk~C@wlWWrUuadl%-a&2$Cm
z0UHNq;{O4>d47JL_Q6C%QKR#Q5%5&On+gu0;Pd_`NhE?U{$8mxdhvo4lTO4f4E(U*
zK<a0s`+SAPXdHQVkhZESmthOGPDf{_*+@<|k?=2i{&?+FHccboZgsq)C8wbHnx}LG
z!vD8#->&>Qd<)J(WduF*5-_k3dRkw{FNdF)KTXlPI?{MT8OY1o@H<^v?KAJE6>HIx
z5fjzyrx_d;We=5Tt?E-&uM=xQ_1eGdpL&;=PnL)C`3?DsL%c(ewk4+54MO&{CzSyi
zgB<q~aSl#}HBCj!>Cn)Lu+AiW7E)63jA8Y%8GYkcnh#(jtFn0z8kS^u=XY*!x%c@Q
z)FeawbGB+d9H{}<89cO&c0f!%R<paW?`xe)FBEx`b3T*pRCAMpDWIWO2u1!2-siOZ
zwzCj4SX*1)3CpXj$?V?*7xn)SCy$4%uhI1<-4FK)S%n0zVy+;%v*}8JypCQN1_<QD
zKOjWy&PUlxW{y`gjTsov&0M!ssQ8&^F^?ISzfJOd#<auR2T?a9l04!-pcbTmvVYGx
z{^Q`Bn=_+&TD#R>l-cg|wGlH<23U*`Deug`ZEkAl=}j1iUu9v*hnms;r2C~%`chq;
zpzb{p`1Y*=#E^~+gdFbJ4afhtAd<~^mC`v|eyGFi4oSc{-Z%_`hYQ2wlrLt>ZnLZg
zO`kt8BIc@E%~i;KG_Yycdj3*L3^}o3&%AmYl9rU4KiF4>i7pXF3?a-Y5TO8g9^C(p
zKxx0iDH^LtG8yV~=B_X-db>5);{2gP%MDYFOT*XrlQyz5!{*xF8ww6LQ)apJaN?=k
zo_rS>nK`}e6)0!tQn=G*Xt35Yv7~B=dXT?-Ugj13fZ+FRK*y?oQ6PgiX5kB5ytM)5
zGt$Sd%*B$Ii1O4(b?!U1_<Wx6xJ7%`bLDMBCN<M9zv#UZf4VvCmS(fS{UjE2_VbMo
zouklqo+8a3bLl`bu-==)&9mI_z=d{wCJ5tkRphHXr-k~;1}IM-#a6Pm2l&&8uf7T`
z-pp8eG}!la14)5ECl*~7@qc*IYaEVHpnUB-inP7dAi!WHbcv6hX~Kb;g2<5Pg;7to
zpi<iD?~?Y<xcEodVfT#sz4|y}mdxD4_uhx6Jm9w-aU3xt-OtM6kM)8Pym~>nV-L?I
zUoyChbA_${TPgXMKnecMM?e3*p2Ig)HS5WrF(OhsxO_S6MA2tmdv>&a4eS2WfcQSU
zYy`S>h*uZ4h|Qp=c$3--*rPMPO-klapB6U{a>K`bWgs!LVNaDp()v}{Bd&?5r;#?i
z-(K@48Wp1$T}?Ye(~^cq(LjT*<Ocfm%o&Z%id`r3;|qR9!d~eEEAG3@fbI7of0K3}
zJ~jC4V(o>Md&$=y6F6K6$su~JIxcM1p2lCY%}kXx$^*m!p+<bXC|u%I#h-3I3kT?J
zvDcvs70+`*M9LFrx}=arNt*Sm{1Ra-4i_!P^1T>lD>US>Lg-<dr=0%y<o_WvC0ZJQ
zN036HVT*{+bI1athctYIbxc}4_=yazU=!6Vrsi49G)3)cU!^(f13oQKlF)prNAHCY
z_PC+q)brk8UKk(w0U#ZdwjsqCj6r6??4)m{rFG7jGMpvW9bGF@G5<D77+UPgL!bd|
z`%`515EsKzaADNRQ&wU$^hAvynipnG7%v$r=~kfWH1lvB`yJs$T;$aSET1SX^$B*B
zr+^sR?)NEj|4ItE<5`7`9v89O7n$)Q6@f3`q6P)4pJ@jqpk!Aik<0Kh>5Qn5yD_|v
z?-mh`Kvc`>$LbJdRA-Y~O82(ngWQ)oE5}b<|4?U-e3t-aFxW*W$YN@$!G6U>k?@7B
zuLvYM0GRn=$Lx8a&{kO?>m4)Vj%iiN5hDM|iDuzFZlv69ThasmoqlK7C$9C{a>X>D
zPelOr!bhV%C3s6c8A%%eRa`CT%KVJccPrYQauHXany?!y(TB2eyDjAbaw|BE5_TtW
zPP)LebV^F(hx+92o9Df}!&Cl^0=1#xEV($lAgs5#8Yz$UtHYX9D3yP<?e%*(=*$3^
z4b5n{f9S$RwB$x;dq&Y6=!BxKFW;dPV%mqwI1GjMixggR+?UP$f~h6OftmMURK)T+
zB*}em1{L9W<zi(&xOn<>Db&bKpkP91d{^ae?_&rtH5C%jd2_e{fI9KJNBPz#4+TbH
zW0cQ=4_}*$;tXcu^u;GT@rc`xk8;^;sL%hpV4}psmX{xs8vRlZo)0QgP~4(#s<Q4%
zq(XKMX@Brm1JI~$WUYhi5IqeEF1ku66wtdoB?+c#X7p@Ud-~k~;4#yd{pbiT6oaS9
z<vU+mDEBeRzvu@6j*sbD^!igXHGL?<8a{f}&|<nME#<vhN0w=B>CkmxGj?b82;ReE
zzA#ZZSv15HC!nXt5c8G=;<t&p@Ez2vVgFhrsro+5=&P9M;*S5sESu#+ATE%e$6wa`
zuDUJhLc$TcKT#4&9h`&Fcj+M|sw-NcGM6uL1KoPc7cl>tEiZ7h=UPMb=6NaN$<bGk
z=B6VQsE{(AAWYG_w(rAeVbmx{(>K!Z#7K=2zBXM7PD?U}#<O$$mroD<SIcdg^#K=7
zG63HO+-^TtFm^XerocKRf*C_BF+-)zA-UVhj2X3_WVj8@{jbIsL90DMZ_Zq&L(@mb
zlo{uynP@ZCGuG!3ZT=3i!pHTDN=!kb-EEbaJe0w8Vl25*daw^~#0(#87fXBb*2L;K
z{fa{H!F}SY*gTVZ#;Aj3xc34-0mq8jVBRF~G0H+g*lL`5#B7Sg7+uhOv1$?B;J=Jw
z@YC2%4Pg#6y&G-b%1LZ~%QxIonu{P_>TAhBN_I1|v_LZ7uklSn3<gg==8GrJT|BXY
z-tR_=MXv+bFnpbAB>jCnVe!}Q3s3Og5;Gu>;8J>O!itgf^be&ptiiPC-4AhLHjAi{
ze1y|q_!`bf)BtOt!zrRrPQIrWW_d$MU96cyc{P<;+x*5vn}L~W87}9?^`sEjZ^-ho
zi^Dbji?`N~7r2a?6SW|-6C@0zK(Pi5#`Ci4V5wn`dWchDos|1(MhM_O;Ge6N&9aZ3
z<HEamXHUx8KES)oU0`Kpg?Y{%766z}AFK*j_@!UKxl_G*;YMu84AcLx0K?%vU))8@
z%a^!*QS=2InCR-5^ey$JCb9D4oA4`Qq9-baSTh3U2&zuF{{H?wt2ud3@KPO5kGNq>
z=-sm5q)bugx{enzF%d_q*LBdC+OWv50<+;Z7UN{b&77xHArGBRQT*b<Z)$1)76x(&
z%mqV`V=);<G7X@QPEALYY(<rB1Eya>6aU~cDx{PKmsI8vVfb9~E3t|eX)gcallz9z
zzH6=ams{G}o=KQ7PcRHB8uRie@)CHgUSzKn(vg4u42u30{+G9|UAv8QY3LbF(cU~W
zh=Lp+AA>d);2g5;Ze-4mj(CKGoNR2xprF9Y3Uy#+IKTGxvhqJ<(5JsCJvu&K`)-Ux
z427(i4$*|{T^rqx(8^kjAC}v%=_F%Rnw{VwM~FRmg0-52mu1GGz1VDq9&rP%GZ`@`
z3=Q(~-fcIVRr-W*mX*E3znSEfpO-i5GD#DfsrE#}YM~JLI$)IsS#V7<S(hyw^7Hct
zB`HfuVW(#5)shr&H7O<Yf!utPrvfS=Aw81V`+L_Sgl>8D!`Yo*zkdCs*ANPNUK@Af
zm(3HId^3j>u>&$q=A7CD>2;(>yUg<(?VYn9AP}*#$B8y~vtaYwV-B`)uc5qb2H^k-
z^0j{T`N-lDaqaSLPTMhL<`tC6RK=lR25Zp4?yeqqd8MS#*x98+2C4{p>{Dg>iUNe-
z75RxIBou-Az2L12f`Y(-!NkJaD8<Fb29d?mj~_$d?5wL192+gA)Ya7$H=g)n_{eHG
zGZ4Ppbfi&K<gN&|)R!HbZ*3!8{dhTjoOuuyCZBAlPwYKDPb`P#d`V~Co0+x`Uo7c}
zo7R-YchvGu4c7)}XO-~uEC}2CAslz!{@Oh{iUfzSRr2fC1Ngq#TD|~NFiOe|NFi4@
zb=unJWR;X4m&_*HTMQzf`T8|4cP^(L$UWdM_9irRZ+m+i@)czikDv(9fx;-UaPYG(
z3-I#BY2>$?Uq3-R!|pD3R$EOrR#gSYuL(IiJJX1Iv;lt*NOa0_{6!MahdeCr3V$vF
z4j?FKDJUq&gi`_gX=!nB8069MP;W!=Op@hkhokeAQ~Ub+b7fHR@zT1=^|wH43gl>R
z{Q5%#6ja8_p;{+1p$tGn9of)C#1sLGuO*8Wh9ESgt$pzO!OQJCQD0$_XIZ#Op`BTK
zd&{dp=}agyKUwe5EYXjY=4N{N^GkP`cb1mq?{VND+)DQGb);{7+9SVzYxZu)yekT|
z(=JFXhowcwTKp$5r3=>Jp7kW|f`TJ<KlJMI%Bc0#xT@CjK!zzE0U$j{m<UR}L`J#m
zs;?Cba6r|+%7RoB%xHT&HcaK@LfDmFy0|#m+kd-}tr~4RJvBAT(+}3YH<2&5(IQ^y
zXvXUSU|W#))Tp~1Y$_?yinvvL{AjuTb(cf8D(9HYc=SHtl?|_Ujo>%N#*9oYvv&su
z1`L6o4)V!|+uHI4taxi~!r;K{<(0M?uA;0AALdm&yetb)>B4Jcz4P$ZFEI%TOr|+d
zqgv&&=m<+%Sy_QHR|REdDo8_H&Vc?)!Dp=nf;tis!sVi@)x)+>l)ME=Iwc}Fay;d|
zY@D)myZE%ZnpCO!llG#K6J@oSyZ_#&7wm|p)M6!G3-@k0nY~S?WQ{Vfde;8%!z~|l
zUo{(e#DDwNBce9Mo_zaicASD!m&R}zUT1d<%bjOHCRPC?%gM3q-t#&#TH5EDlTzv?
zIx8Smjh33<7#WEMvhUx&f1Pf>1CAJ<&9s)LCON6oM&sWbKw%OA$cvG&=F!^{4qZO|
zCNEGcL~&9)^pY?zFmQ7dDu~Fp0XI<f=g*Z!W5q{r=N?wlw50+H{Sy={fsvM7IZ=F`
zFrBH+8UZiz2NZBX7m<l1`S;pjXJ_XeSSEps6HtuH#w`kf_36FyYzzo&iPy6|d0+h+
z0!+fx*jN?6AL<4QGj8C@l-{k_P>|@ArM@0$nsv94eRx@USoLw4<d0`AY#*KzBElZk
zKkaA76<{Mhk2HHHfQvppgRSoL+xad39+2g`8EQqqny9L+{TeV(fJps=sx1IAC^2kp
zZE4}NogFeJSkK8}wDsLHnNU6Ry_&&#v}$Pu1jroFH4LoE*noL0^cBq*EU<qO?&s@U
z1I4<=oSqYY<!=?d^z<aj-vCMqg{R+F)v$kl|88w%r7!~}jRLRtV!;xlyIU^do_>7$
z)|)pNU~c`06g2+~G!%ihDe8&(TY-g;>OnyUr2kIx8Ngos2Uk`s3bBfIm3N2lMreH2
zotw5yz(ROZQt@n+1%FLc*y)S<*kEWBj#H<rM*kK)6OK&75U4D(ojt!jWbFybw7!3&
znvRZRqd3d}9DIuJYion*>hamH<~wrxa;mCC2P@0V)e;xDp7-{HHg9o^yp`2;jnXyS
zP0ufqma{W6f90*MCCLxQC4g;MQ(uEIMkc1IuKsVg^Czfa*^K7(2VcvE`+}JuRp{qh
zf(+c9%}o$rqNH|D(q=l|Pr~py(pJLhCkvE#duP+c2oi`=AB<tV*ab#eo&}q)j))<j
z>R9b!lSf@)+32vB44nq~Adc`eY9$5<Ofodt`ZV<fczB*RY6Y2sha%Vp`~(o5OvDLX
z)WJg|RaC}d{tAt^sTeNRl`GCy!x`DHV30_BrNN|L#<B~oETuK${$OpyQmH=W`XQX(
zyCc3=_rtXOxM_^i5`SrGt6UL3Aw?LiwI9K1)iwGz*g}!Sb#@kqEWCZ8wPVOp<Y?y~
zHE_-wof}12_?<k6NKZN+dbm+#DZ2WOoQ%x87jWb2B{p($8^A4Gk+!f%LZu5WAO2fm
znkGo-W!f_D1#PWaPFFcO2aq{zVa}bFxSrnNo*u<FJU`!90=VdG+)Yns#oj44jl#r~
zlxWPIm-S9gzkzVgq+eTG`|#+?!|_S}E=x<V?=B0)-v0`)aP`2G*v{2;a;|>h1Y6>f
zCk}fkjtyQOEnZRSsL#5AG*MulQfsL*E;nw#Dq>=DfNGS`Lt_jQ8GO@ULB#S_glFdB
z-Nl2V)!w@#HuC2GTGN991A#P1=e`XKA)OvnbL1(7t8Bk^G&Ytp`ZPN;H}_n<^5x${
zT9D0*5H902n1Kp|u7>e(UiU*`ZZ7*t{TP60UjCft*f{QHNe8t@&`l`Qp(y0o>cRkk
zwMRqcVT0z9ou;N)SN7)C*7F9Trq7>+0a-hm52xO0e-ZH`-kGyHf=00L$J$nLQ}p_2
zAJUs;_?cJyPmi^mU?%)XTTiq4Y+SSHUgy07ZMx@f`$Iz+RRtj-av#P)@9`lLSq?!}
zO8gwH$xIdPmjmr{Y6`@Y4!H#GM%-czCFb?zGR4m7Hva-<k?pTXE#B=FX(LT^2DT>y
z-|w7_23tO7(>clKULo4b7ELBOphQG+;p8j+^!2Gt%N?9=aMyG!@=mq$c#%HV`e)(%
z?G9~0fo3t;_3ONRw(-SqoH<kN4n~_qF)=ZYnr3T7P)18Y%_l1(>UC;&a6kaY#v^&T
z4(<)tZ_@p>UubMvfJN`yx1sd&(|iyLt5j_sO#4^%{=F9F?nm_km2}aAcJkj2PA^|p
zfh+Ql>7XhQZ1nmUcy{)ntQ%zVXPJ1XRvgiarrxsA?YW{qL9hgNy~7{p=~txQmFMME
zRa7XR^>ufn3ppH?$`ulJJT)?%onGHHwsXWMARuu3x!4-?9XF~IErZ$EpiSlc=+O%7
z_8@P`IyZG*1BUef{{3?-F3jsU`$3cL?e&B@W`{+kaUjAwOk5*gX8xBdB5WzqVd#^O
z;d|55+UE>*s0g;z2R3&@(*+OngAB)H{k7g|#LfubOVM`dD(~pq&=%Z%S{DS+iY%kw
zJzhQcA1qJOZ+m>rU|a;ThMw?m+L;IT^>a|LK4MQk_^nX8(c`$UuWyM7RNq{Gxb27Y
z>uFxS_H3&Qb@Tj4AKsIp(#;SjtovI-ZhpSP>G<y`zcMqqR&GTi4k8X*nqS0wSZ=~}
zAHIJH^3REKy$>QH2(G{vR26t#L(FzVJ*WLqBt>dtg8_2s!g^{ilDy{w{B4aDCVmXu
z{eHe`cs~q~NqX+E6fB*kvO50DZlc@?34?=sg-ZBEMH&5{85SB3ChXJ|8G9jt3HZ#G
zA&P5VStEMyhHWj6Np1um-UA$ln>vIpuU=_k`1Et#tO&vG$1Cc4_U{(m!qS#Weo*iG
zwV-!=e2g1c_%;la0zG{leg7CE>(VGjoMzv{Zp9e3dsE_lKL!WC=)ZkZxnYvje{5YX
zUvWe`O+o#_fPR1NpnK1LgA(Lsk{ZPeh$*MX7zVv<wsqXDKMEr>P#jgVNx%FzI$G&Q
z;(^7tl@PyqmO(s~vhKCnA%QAbUL(mm^t0rg31$1HyUZ(9-(NRyQ~ZL#82W-`N!3(2
zYXTM3s`BRzNj66yd7qXuk3z`ON?8}1RmhvcyT5ACu!PUz5y#ETQa(5&U2+6EQJFCe
zJug<sZ@N3SY{@g0Wxv-~-%7#BF;mEZhefw{u>#*+%QuGEPXoir;SO@p*{~=ill-mY
zX1I@)ja!A%kgCD8(v*)H4;qT1)2<&RH9?_ew<PdA7|98y@1`G_<>D8GG;)q+V=%^&
zhL)!XjFe}IssTbE_XzzXT7qdz_|Y8x5AuI&BqP}vZLA%IX1i48Mf-*C2Vvn8E4v1m
zpll5>fsQtpB-<9>)VH@b9Wq#4zS$iDxW6`Zj5!;>T^iFuAV}VUrjhKWAOc^FKldCs
zc*%4E?yTIPBc}B^7DBYOb+=CqhQeg_`c@tYBm<wP^nhwTX?qR#wG$##O2jYPCNta^
zMzmxI{5{UnvJ@IKgXI~KgO5Rlh!o;6H_7B~&-_?UpisfQLs#Vf0KrV+o?7lQS?=tr
zp;+&56TR{XVVfhw<Sh~;6*~>XGl!^T;>?u_vr`ZBw_`rOX_J$E=_J-$?&dnd^-DVn
zq^CZ}Ko=w;Bs1f#=WD*x%8Comw!}1D7$U_D9uq719>8nHD6Bu`nn;e7&I?`PbA=eX
zV)fe?PLXer1Y2)z2iN%2YHQX%-{K#nzp;>MR0B~bMyn;JW)WWoymHJQZXyxQG?xK=
z9<?|2)A$0<sWkn5`P)~+;kO%~zo~q6x@KcfuXTG^k?hO5!=EXOlHW#S|6Rp{z6$AJ
z@2ByS0<R&lHR#cnAxb%APx?!Dr1{GMRmQ42Q`YeFoV9lJq(?G9Un+J)-BfsA`XX>b
z;Fr@?QihKxgAZU&qP+CIiG3dU)BkA)j&_`BhuFs>_;v<D_fP3Z;1xa44^wm8R5ibD
zD@|w;u_PU$OjWPaDsE6pqE|Fl>I!C*-ek}igeiJrCB~IgSKv|L6|swOJD2=oLgA-U
zeMqaOikI5F&z=71(L_h{8Uo#2+US|Xy!s8N$Xb+a`rf*Xkyyot+#Fl`yX)ewS}<pb
zUc*2LQoz6&7{S2#)Cx9=vn3M+OmOky-pcrhP;ih%57mFau(iE}@aYyjE9)WOw4BLH
zm=RscxOoGyw0f0)CXn`ge*ba0WF~wviV@eKHEi~W0_N8Z?^KknAPjM&u*9U^QSB8b
zI^7mVj|m>S!Efz7{4^NM0yL^pqFV16g=n;yBb1lko)9Kyhz3c*%+tb#nP))DW8O&+
zaCjAYCirb6nU0`Y*~4MZ1~+HzGP>ip(36-w0H>k(1EmfJH>u38b^(^Fh=QSH($pwg
zxxuK%@TJ8|K(94_q)Ew)oB!HJY=OwjWn&O3Mn=OFETP5Z0kDn&`yaiT*?PNkn`xjd
zmh5#LfqNnQg`{Y1hz7dPwTKCXE>j9!mdwG(A;U^JxGl0JgMLL~^eZaytgChnU3(-b
zg)+kztMI@nTx8E#d#?%?PZ)dn%vXHie(+%C{732oPYw<a#}`o5aeRE~Y$ZE8du<>U
z%JtjAaA<KTb<%U)c(|#2=o)KwUUH5&RiGQ#dtX3|pU-x_{!fxmfL-IURr(;*whrR5
zCj_hwrmOvTtzHg((VdT9ZXKGNZX&+PIJ^tGH*1tu9gMyK8&W{bU6}6p_rc`3(%*@#
z13CeFE^sXdnnktu%<ypLoY#-abauKs4LPT$9@XwsElLZ`&CUD!74klSp_G=E!Zv?h
zL{M0;D=KOc)X&c)UQ3jf343}rH2!Mh&dJSPSt+8Tp-Duco`4cz@IYO_z)&d0utKOn
zfU`egvl`x4taM6qfe|O+8|SN%VbE#eCaXSYtNi*pwf8maMb?tHHg>!q5MrFZE9v>C
zzBonr_0rL9(}#5vGxx?n4Vt2-zt$nEI=z~Vs@ncKd^(zb=I(E#_w3o}Uhjg}T59#o
zjNKiC4;{Y8yXf=1G>l<~%dfxu9I2dm0*VeFDSp$A-(z+*dx4$_H;i+M7(N3XYO&SZ
zrS=&VIYJN!#gAVgoO!smx=Oaavywm*pWu#lqetPqgSwav@$Qk|yKWM!tm`&BI^6yJ
z;yE}Zon1mQ8*lyYwTK9pmS(}6FJxuFnBF?*u%C<uMi88zuXI2chF)hm{NY|zQc{wi
zzZUfHbWJV4@eT(^!KY7WEBCy)AuZ6=t$*#L2KBJ6u748r(`;>QIMDLX0pvs=gbj{I
zQ?1pF2SihXf=wqs^?QB*F7)qjI=I5AT5VOf6KQH`jm^$(A805lhCv2)vOR?qO)svf
z*gsy=hXN-*fCB&lIa?w>&vka+sr}a*&jJ224=oqygpYmzc?Pf-*}oIZ-O<_6|6E;M
zXdilguCG^EY^<I?`LTq||77d=V%fBMrU)TGLm;GKh%3dGw;CMdV38zCfPI@&7gI8g
z)E}av5_UhVeVE#NYj3b{Z$5j~SxJ1^H~!BDEe`#(yw#ZfLX=AN)J*lyNZY><UxR-$
z=(LOcoju#Ku>sH5(%AKXfAx>%e$MY~Z^tTq=e#lmTElU1>XwFj7J^lwp*@9#g#!b+
zZ~vsHrv4jIxF@$E`f|G!^y$It*zM)Z!_#A@Cy^_Q-)A7IJv=-N6e?Lc6D+Q@`&X@5
zsO8{Iwe@;0<1I__eEC{Pe0(n`k%Lkt7^E*H+nqsjF109nzP$(tNz94I&aC#a8U}(u
zNVJbQ6))<l1dqx|G>5My@r04RUiJhN?S`Pk|Guc|ii*=!{-&P3zWsX}KY!k&rjDV0
z_;<=%_SeC^^u)yN9}PuW47-|cpJsl<-vTgCSV(AO!CR(&>+r|?!?RtY=^wNYP(Sw%
z{%xrI1QFfmHTH{fntE}<|NbtV?{tK3>DdJos_N-A{u1}g-Ydd3FP;Pj7%w+>=}{@4
zoo%!^r>>HUivDMTh3s5+d7p_L5vSEYFf9rY?&_qQ;n2V9_M`$blB`uTs@k*7f`#G&
zUGL2?ay+7FO~XGsA~(G~3hV2W5d`1penf}i)8ekKaFH(WRmf|2FYnu9##G&lP7&mq
zk(NMj(h~{6tO9g3c)N4we@3n+;$)q<R(!Pl5#hCeZ`y{n>*wd+@4VMUMCQ(9Snu8y
zbw5<Fv0bmNojN?+a&e*l{!&+WtIoxRE<&cx36jXJuHaa6iyqJePxm^pXnt{>oZQUh
zb(-6z#Sh((v7{un93QI%`G5GXkx*tEiM!`r56J@xrIYJ-PI@^v1Spsa#+t7pn?$|O
zj@NekRxq2>DDY_cS650fQ=3GY{^Z_Y5f{JLbARbe<eF4Ae45tcleuEz;+dG%nZ?Df
z-7eq#C(Ef2$SiT{&g+W_*lDKrBmz{A`gSSyQfSb7=JRzb45curW5619pkUelOan`q
zs)uZr=e5to*ER$NWnoEmmun*f5z!nn_=(xZYeBN4Ym3CHi295NETrho^Z|M^r5(-)
zmkz-}bY?zaLB~c0GU$I*;--}`g6$RY_2!1)G5ThIZ@~^`9gd$$fgg;6pw4=bj}5`G
zfh+pgSX{SdT2!+zn)lWRSfyaU5kSCx^9>(AK$%OP2cd;OCs>KTM<;q0O!3E0eN`u4
zaZ4IY?C#O61vwHWJalwnh~8}17$jL9<&YEw4<jPk8<~FQ2QgoT$9$7TKSqt4+qsPW
zan^NiDn!`oXgMA?Pc3?)=c8YZCM<KPyHemKaW+P?ft1<kEfIKBI7FKE!hsU`m~aWc
zm^0r+sI`lJ5*L|JJ3NK>QdYToBupPIG1xx8i3Um}i;Z!goP9(XsMJw24^KTqKVcRf
z02*9_KZbmw@bn%henp9)rLf-~y>2a?14%y}gy{(S%aWP>ETI$)=E=mb3^5YLX+q%d
zmM~ffUvxltIUsY0`38;tvy=M!>QrLU?c|Kz{qf>%a3wx$?ubQhvgunAIH*?z6}J?z
zf~9AVqb95k(U-Tp<rK@$&4o{?K&$o{X9SD8v9T70JdoHX#%+ddfw1_z)={vfCoaya
zzP_HBh2>P?^L$TM)>6IeUtQf|>91T5n=-PpEFB%oa#yyJlD-b=AqLu2&3o|@9PuxY
zhVl^z#9d2@8nR|XHzs~*qE_$m<L>!}zlYne-4+_xZo0jfZfE4@FRnd)Y~nvM!V9(M
zi#yNjt8~8XfBzTu`Lnu>&E$6|#C+FfH8C~@?|GaMo8ZnQr{6HWbf7UlR(Q2Kvvb+P
za(a4r7_b*$lYT(Zn?BQ<4z@d6!QZ_;uDq&A^ygCZCjJT0Y+{p*f$6CmoD31xVOI36
zxP6cM!J<s_(BtSH=#ovBWPVxh))=Oys9|$gm5#ie7PoT6)lRb2^b+#J`}ZG<o)^y@
zy0KYVZB@)5k;v9o$vs{^z8kN9C-cw1&UvbEm+dBSOizFP`qkE!7`tvy9iO1-?ELKK
zRy_v>$QZEPzO9BK)>mPR_=}ei8fHD3BJLwc@n_+Kp|?x3&QTHIoOAIT+7`!qJXaby
zIP?`TVvSxcOK**h#SX5qv9r(DxyU@93mh-_4U+HQ=kxMpG>SPRADWrwZEf+xNLd(`
zHa2pzu*g(Rm%h++|Lel5A8A!>J*A_j22A4d8F$@y?4SMK2th%%<m8)0AGBFSN{fp%
z_j1YPy5E)k2K}{gYU=OT3JNA)3)4;6Pk!oLDV0~4-2bz{%E|e>yrbZU_i~34n}%`s
zNp7wQ>}Ro9k+_>18+*I%l1s3s@bU0eR`w6ZG1w8!)(rD;b3-9KLow>}PIQipG$WIW
z|E$LRd8FFP=`nH-1v^hzcz93C!PZu>o(**GXO{v=J$XSvNn72=r5f{xks>+0ekR6*
z`1>k~VFkHe?$l9!0*L$<LWJ!0lmY~}Yh;lE9skNy)H+0-NnnBi`g12S1*OK9MJpjJ
zhc92wZ}05HmK5Az{snHwy)5Y-JffnUHr1bOmjkYvB@8P3{pR<F>E=D%s@bigXuWO6
z+FUNLqs7JJzat~Yx*IKecI`4ZX;V{EZ7khhjei`6K=q6J@0-owg2SY%-!!lD<OwP@
z)pKJcK)qnE>15NFM$U8<uludcyHj<#-QCXgp8o!r)a`}y5g^GMOUm{2#?QUoc5MBT
zc5`>`>(MVb1<H9PUlYqHA|#X*X|Pu&e;lVNGanNf%>G#GhP-?{xkTDI%>J1w-kU=E
zO$^l>oSaeB1dJ-~!c$I8<<k<cxpU78`}(bH8a8!^_rkHYm6XFOtqShx2?OPE=^-V8
zp3~z#!;QAT-9bb<Y^4H*hNgLnuPaRb(HSkhyxT+nUp;ZXw6s60CSLK|Sb}!n@pkz#
z9Ab`SfZEC0pE8fv;^I;9VN6e~{1WWutrOm{cNdqGX!&OEcW!Uf*w{sr<uY5PU;eX_
zpx>2lVqzt+qjdXveVtqCHi#OiQ6sik>TRs7;;>>;6_mhp*W3Z=J3l`Y9<Jp0ik5bA
z`B?Fh)T1=}*PcxLfAihre@hjd??nS)wRej%U*lKc-cCRYHB^BY6+UAto`gMfBHPMp
z(zQZgMP)EDU@@??*YeV(fF}(mgXjeVM;l9Q%zWr_Yu8;HdQqiotY%BbGFH-L=ml0v
zWs+vd_D|VL?<nJeUi}0Jf8YW?4IWiy@8)J{^aTR91kTh^jl+DgZeP$sU}7?X(GRD#
zA=(-G@w@+$uvAxrg)yiGoIk}}0hb)MyB}{X#HH*1TF-VL85v<@vyv>ws@cKCv^gpl
z@I1-c-;ZPao#wHZ6vyUtJz8QuDKbW!Y9B0tFe{8rY@|Gt2YRNaD7`)7t4Uw}a1$00
zdHxqdxbi*DM+&`@fYoY#@+ji960H1ggD<H5eGtIO(}*YfO&=_JHO{NcbX;6)bZ2-Y
zSab)trR%Y{ND?xJ`p05g?`!ggnd~4#lTg>l&o*!o^vreAVqiY<bGq{H`miKmn-&%u
z+S+NmuU|MhiCTE8sl_~bgG6d#+ud2L$umv;-VXZ9oO<(<uJus1D<e}swh60&n_C?m
zEZy2Js;c@_Q1E+irI=Ag!QR@giL=3Rs_fWruvd3{++}OJk}WzP6!Wxny=`rkEth9!
z3$Z(c=srGAeD#H?9*!>~XQ=sjp4B;v`?^R=$LZj|Mj){4<)p-)2C~yoQ9YFvel2O_
z>?|N6()uvabEPManx9WuN$Hia;M>8-+1by&z7pC_mX`7y_>PnDy#=iLI{A%`xhCTu
zPghqv?<0{aX{TdNHeOzt?7QA<X0a(8y48GUCMKy5&zXLEVsTL{XI#ULc^7x6Fy54O
z%3?y+c|IYj9r&dt7J;DGaP#gg{-md=Td#~+AvLo#shfLAp_lF6pNa8t6%`e^I8m3)
zw&v!!B3;+nIv2Ij67N<B*DbB;-4<I;gIBk=Q*35Xl~YO7RD9sZA;(HbNf~bg9q;#N
zb)g%@yFx&qL~?8869n9fJJB|<Qg=r=znq_~{p~Q-^W$Z&vW{+XPc*E8CNUthJJ&FC
zZ}+jn;E0Hc<Wx>(W@%xehnt&pRrE{NZe0c!P|2wr+Fo<4{r&@6q&yqjjxGO<HK$q2
zQh<epMRd`@q*?a@WTkir=PdEoCyHY=iw0wcTKEuq`3OikT)Oq#&QNvJSgdRG#>aIz
zwr5p}Ld&sf4c*xao_Zb$hr>?O9;1|$Nf@}ye-DpWE134grY*guaY^oD@JK))6ih`x
z#V3&|eY)OTavhDu>@H$rp<zVgt5iJ1q;9T`s{U^%&`D-+@+UzEOPWa%iKv3*QVhog
z|Dk;Ga}e+%h}-CZg)8`Fl6)XebTIo>dIog-M$rk|pU;~b<4cI<k)wQwEhV|pj_ldo
zWbj`$bjTHnK%3gqbJqmJZzPU_s1ZJG2G|hYTxnGWMp<9PK4`z*LSN;By<7$^xT8zy
z7Jvzcq0tydI>}6UEH#9K2sv@|eYCsapA#|AFf1cF%8Ptv40m}FfWFJf1>kt;{1O)v
z+)XO`0sI*a>>-{&EDSdzL|^svHe6+ZiM}fA5rkU*;cSUGza0VSVyS}%F{5#lW{*2?
ziB!N2;I0>N6c;xHu83<xsqj7`=;%yC41(n52=otJ(4A9420v&nT_3oRZ-M4pjc~Sf
z!`rgZLpK;`qhF-ZdiRnbM4kpLQV>^Jzkz7f=Q-B{TtqVt`ns=IAxcKfWJ&=v6okI9
r(!ZM!UYwubcpOs>|AT}6_OKAwZ4{2U#b2qyzW^AkEcHpk!1w<EPSwrS

literal 197991
zcmXtfWk6Kl*EQYUF(4%%UDDkh(%sB}G>CM!gdl=+3rKf&Ne>|14bmyid-?s}=Mw|W
zz4x4b_t~-5+EMDNa+qjjXfQA^m<saJA7EgR17Tng_)*}1zksWC2w-4vU=*Y!v^+D8
zo{%$^c2n2mJI&aqecr@+pSF)A+7HQ`B&TQatMWG6-}pDCth6pEJ<o}@`uKeI@p+fN
z%Og}#vt?pMSo*Jm^qMRGpdDM_=vIu*hS4JrpDw%d02igr(-em849-;8H%EgU(+VTH
zD)f^Cmb?a78bX856HzURhG(Fj>7G<=zZY-x)yB9mM=+m&;D&VC-QVBb$%#(_2SEXr
zap7JU0r-TA#JW^S7EFZ_Om&ev^H*!D_rN?mwPD*fZj(btUINQCNGcOFP{X27%{J6A
z{(A>uktpdsN^k*;Goz&ma1lx(i`ib->*epzXmh3qM3H$F71;A9C2G_3y|Bn6aOk|c
zl|BPcqFd<hzyKa7@c~_1a1o5xfH5@$afg=K$Rfv5q0o@D8Ogo=6ZL2g_<=*G4V5Ng
zs7fK`X)OSgu((ERJc47j87N#>%v<GI3?nYNlf9<-|ByOt+)cc(9t&gB40Y|m*CBHo
zqDD!)Sicr{UD+=VKTy^bEwDCuu6#6#gqj<Dy{8WjL>|{ajX*rOEiwY5vAIxSGh8GT
z;lLIO;OEz<|NAyROOED(D7qse1y5@=-0ogo)T9J0O5*BzA^+=*9nIDvUbj4?5E!Uh
z;HQd**BbR<QUV=*LKGK4LFw#*{ME+bsyEWWUcOpc8i_N^i;j4~Q5&8h-_$Bq-Iq-a
zG2Yp~PfsK`Oa$&@i{#cGo3adiLXoU8{NF`A3^~)kMZZka2tsyJfIlgap25A|R>C5X
z;w|vSU`9&q`voxPq6~8R<LgZnFilin_lm+$b@+M<oWeY6Nwac3{p4@D>>onoc%$f9
zc6UV%+ZSwgED>SBW;~^6?O16yPsE*!DKpAu3cyke;Mvo0flH;Sp2w30Mv#Dy2pR}X
zJ>(ik+=P#bq|uiMu%Bw!S#HAD@m7?p?J2f$fUox<hBUlBP}-=<N#^x~b(gL<dgDYA
z7Y~i#epNF5aZbM@1@Qlk^&QUFrON|WcwK2C#ItZ+-gyyHoj_9<0yiyPHQt}VL(0oR
zjQrnzFkbf)X>VqN1>BU*W&ip<3ZFqoM~8@z5NvHtj^RyWTe}buj?~&Bn4X?~czAg1
zA%si*b0r!L(#R+zG`M!MzAmn-tE==y>o{DhL`7DW+j(-3V8kUlaF;_zFSEyhxJJ56
zt-%*@fsjZi(Z-ldF|&*hd2B<OTdXptu`&I1tq8xsuVzqSDb9U0jXonIqh6Eq#?gY?
z$#V1b)H1^2XEWz6$J%bX_U^CWGU4r-@@nj+3KUY<O+^Eqjnvezap57KyMx2rc1N2(
z9qMRmYJ$OoU0s1=a}}_QV?*!Q*h+r=O5?ItG&WudL*MJS<D)SskIN5K)qWWLdV!Ue
z9%wU{Se59C2ATby7buG(&805#pJ80ZF@d8KEI+hZe<%)X${)~CQ8DY-*w0upN4`6n
z+G@5T3GI%+enVqX=W}zkpp?SKH6=hsmA^NZ-syR6p|Kc?BnM03G1KO;!{mv}39)x{
zw6_fp>K%-ifmrt|_8<m0#Ez+OjGC)1E*X8Ye%qEeySz-$@ipl2*6CTQ@0??9!xGo#
z@qFz$0^-nqJ}$H|do}p7A%;iP)fTIwB9RZLTJ@{+mxu6+aKe{fxwx*i)>v`Pb+RFr
z9R1lZa6oW4m$;4rc0e_Z@SX?o2O3^PL`1^|`{RQHQI9K#{WS;$vaemLOH4rEe?7zI
zPdx-ZfycH#J~@F)2N{YW!;z6?d@?tmJXvWiKnX*FE!VNF&&@AktgLbsZB&wRtIzm7
zG)_6)L7=5a2#MWbouhxOA4`8v&SZ6vBO!7+|I9LqSUXtOJY2MruS2df{ILCLpXH-&
z&}l`qp1(7s_~v5gYk8-~jGgmfC?dz{`np+NNfpiI?kKgZ#<At<a`WMAMeaJjtvwxT
zumx_U6IYt7Tshz)(kxKX|K5;Ax8rLFZ097fN>@a`^3qQ-*r|#BiqqWI_Bh0l-Ql_M
zSn`cw*^&5xG}l>5s$H=VE^2vpR!~@2xv8tp=VW<dYcRgq2(%d1^Z8^s$fMEG@2gy^
zi$>{;IX1P`(p}tlON*enify7?5PU$D+YzIsDq+vzS=1IM(>AUZW+_Hx?_lm?zBEjk
z)bGKpCgh$pI)RUKWkH=0Sa0I=6&D#W6tx~gQSoQX4Uq$ARYlzQq1_?Ks6a$QG?}J(
zJ$x7D_a8CBWC8!@W~^^<e|pR)(Ke{%6APW@5_GODd0LlQJf`=3$H?e;H93e)A?SR#
zi`ny~rNtn91?zj;ztz^Gt%OvM&S&qnSn@ek_8-0!MoZQT&Imkm52I8Tpt?8o1Zh#k
zyST6vtvxuN^LsgV?YU4DYC>5S5G5=H?PKclm%tmTYU}`dv@d~Jxh*Z;D~t8YCUMfZ
zTO;G_aNbY%*YTqF5LH#xIyih^qZaolAgs{m_yH@H_(}&S<cJ_Kh36-e;PYE@DzWB)
zh=}dS&)L`#4HAwNqGF82jc|{i6oxF%i_NghxeDXAaQlbHp9CqGb;`=h%dG`Qw&KOS
zfVaS`%Z3kob#ucHiu=y28-&2Hi3@^d&1t+wBGwFT9Ee5HOxJUPPBIZ#WDkA}T(I>Y
z8G0Y$ffg!;d@&VAQQ3Kpq(Ip9>)Q|W@wM9lK5_BhwK>y(Okkyp>x3+Mbc}^!NMsTy
zDjXLC8b~B)u~hPDxuw7PCNk5EHKspZ5F}(>AI^mcCyYf~X%QXPjQOP;!mruYj*c4c
zeSHhI3uROzS@?X=P!9g;3_f1`BqFksH*Z*6P*se=WOZpT&N#cW^66kohK8iLpsDGH
zb?cD^?zlScpjUR)=S_ZGLiJuwxX?QtPxc=MO@1A^*h=3)Rp(8MR=7vCJ)!cSv}X{q
z>j+^E-zWO7q>hqvCfax5-T+4~CWKzz{f}VntPu=539y$K!0J{(7ydJP?XTJCQIvKV
zuGJN=Ka!kM<*Gdm*G*LfR#eG*OUnwDi^JWv1^f-xb1$%x8}Z}V5A|WIRTNm+zct(_
zpV83JfbivZRGg#L9we@<POYV+SI3;k9{y{-ZUhx`@Ioub#qutvKQ_dqIdO*;L0`A&
zZ*1l%-uY2&r$G;wiI4D;vqew#hLNJeze`i^^M0}RyWN%F6LeOo#i^e}!H8u-{E(QC
zxFFG@4=KhKQzVa;!fff5RWqVgyAm)GbO@EYxaZ=N;Z(R$tsl)e-qT?H_f9UpHCu#N
zu4%2b#w+!j&fJO^|JvIoWt@F}rli3<oU3H$4)WfR@Y%5Lqsgx!c@F+)6W%S|dnWI;
zH@|I@Hw5#*!ok878HP@5%pb7o*od1D_$#Le`1ND~|B&0D%4}ny7VOY~a?CZsWEn2;
zwASvEQU&uX7%g|P-ACrZ(HRe_wd`VMR?5sIGm4B^kE?O6%UHq4AewtLa<NR%$tc4w
zt<2qE(6>#F<_47xm4joNlyF*Y^V%8yJ{bRIt@X3hx~D%@T3&HpUf$P){QP_=DXA|+
ztW2z|PZuNXB9z$X5#46L$HyC%j^W|qXJ%&9dxPMS?;jo%HgmM>G>2GXIVVJ++n@v2
zB{{PKgY4WfMy_qOsUNQ86uJ=Xmk1cDND$xxx4{*p64G>=SYbM38&MZ*nZQY$H!EgD
znk*}2<k2E3g>a19eV-GG$A&TyYV<DU?Tq-SW+n67$zI=LucZ!Ja5|Bblb_z3q4CJZ
zDH24pEs;N943HkxHrFuz7JVRTS^3c9*)ouWojPet`UxWrCl06!0MotP%&g&Pl$4e}
zjhp%sFLUyP@CsK1+;$%?QaVwx5nSIKaVs5wdJ2_@J71nUg?;($T8+%#<-EJeCpS#X
zM}_<#aPhSt0a-Flpe=~Z;4u9|x2DIJHv%7{SK1K%8lrw&V9=Ere+Eq_^6>V%>`zjL
zk~j>^W2+i9+8k$-t(g%q9&N|9r|oX$M1iU?nA?ZC+XJK!cs6!&Vr94fb^L4pnn28M
z^0@s?Et%caL|xr^voC6O)ubnG=o^FB-S#&=r&Zs*%+Kq$C=pEj%h^Jo<LI!eCYWN)
z3wBuYvq;TIOxE*N`nhuh3spu5Zc%8sAlbMc^80D$LXibb78&)q-(_z@fQtJoUBT4>
za=5C|r#g3X<}dBI4jsKD?>#2rPTOBT)cs@UhbSqP78Zud2Z~jsa^^mtE9<dcVz3_g
zQ&fy`3BglVkXU5H8cvwK)VGGA{|t+H)3ne>3wzZUg@3x-jL-V$wfcC6EqaTCape1N
z<^Eo1^f$OcOvrYMZu65C4`b#>-Ac;qpQk8)-E$<1iI_S)jt%NOoK{*0IUh-39!8ze
zrNY!5Vmz9AWX0X8CaMK|A8*@XHr5yBD%QW@Y{mXtjpel+<ere7hJMtoh;b;E5P2i&
z&%$wy%#A^7$#8P!?Ld?s=5`S~gD336(ZUQH@5@hTJ~n^Q{11D%V)6X(G68IFFX+CF
zLds71yXF1I*$REBO|~RqthC=QlwOawF7$AMn_8>Q{2r&PD)H=IpFi_yejl>3aLSgN
zuLWaA9^H66V|x<D0kOey6uoZ3E|YI1acRR3owhtvmz#-5igUC-h!Iz7LY_d{W9(K&
zYAU(O)W2iT9a4zfU?vDus)@+PGX6Kw%~&Il?u-5>26n8r&vpfcCASAE1JQ{-VZrg>
z{t?~Tmpc&}QtF!pZ0--y+vNVB5EIz3P)WH0Af-x~G?dV(mCtn>#`g+1my*ijooMOk
zG)SvOb65^wMD*s)*n!704v3)`IU6E8BG$u6??287W{ztXsfLfD&q(e}N;}KQSZmgK
zLiZ<(;Ynxa=Sh6Fr0Uh1?coe~9zZ@fy$o?t>G<$g|Kh+6av20mqHjc9gk_obn!G9&
zep`>jc^4wUrQth!vmIH1`gnX#X~QLZ=huIJ=#x0T#?6NjL-zao=bfNub++Hl!qJg^
zF>IXm+THl)F2y&Zz9ey{Kp8hzY5K2dmywxysmaCC%S&MSIk*-4ykNdvreAw=x)!j}
zgZM*)nfWl5Z#B>{=jYF#<>kjfwxuLJH!ut7K7&eOcb7MJcXu1NdWbw-O|zvO7KuH*
zQ)Xge@m&u>R#Z|l?_NJchz1Sgu<h539K)*wRZrX-oi@U?abFVAOTe0P5<nvp#jj&x
zXn%ejs3Z(_e!FPWdnk=v&Vxtz2k83f;9G{_q^uL%plBinvNDCy5OMK`pXv?Cs!q=%
z)kYvDH!s9*sASRI9}8p>M~=HdeH$F8G`BmEkxDN+-Vy9@f^-CeIE%-WO&)WrV#3SN
zU7thJjuCFr%HrbN#hFqQJMH}c!vb&_NMi^7{zcWTG#MKk%M^4-^PWp_{MSy9Z)ORU
zj46k9FMrpb1MnGCFo>bX#>U(><I$^*8pafRYhObA;(Xw9YHKZl5?-24D-_vc3H%OX
zZ=Uc)AZGr?t4!J1*&W4x${mNTPqoA4mgLJIWpwbmnu?z4o0~C)=`bNZOa5^#thBR!
zdtR`WRk3fExQWSXgTs=zLhr527ozeDzW}pGw+RtGmrd!`6|4^av;E4sLvyC(uuEOU
zJW_iu&>IOpvGYEB<!W%27gC&%T|F7grKXw)Vm}u*x4Cf4-E3nA;#+eW0|SHgtkp{m
zxb6Jh*;H+^5VrzmXS!l=r=LwAoH_;?K7s}uLD-Fe!?{?`+cTM42^nu{6dIz<V+)Iu
zTlt!hJs6;FNKe4$OM9^{5-82t+g`XA>vSr-XMVZYmkRsm;+sE4;c$9t=k@Ys_n+8D
z?-%@!N~Hm8we#3!m+%8pX0WULa0T4>XcU+!GraCageGmr++V+c7vbQ?ahdv4GTk*F
zNc0g>jEt(u?PB4X8XPQn`>|fHmqDUlT_8%*!(+Uw3uXhwb5AM)D~Q5^5{?uXh+qsf
zoIoYoj2-*(M`Bz$)$bTBA;kAin`BOuyX}0nRqT0V4bLQ!<e4SG&!pA+eVgQxptrkl
zJJOn+e!)74R9Yms#9WK3>tHog42$f>i&sq8Yv;S}WA7W^Gl|=8@Dd^~8`uF5N5|DB
zm#x1ur629=;y?mipZ;p84`gO$R(9O~8r<?a?<Y>>k-}|u+Z*5LjmU)|DE;*-INwTD
z73<HIyI{cGh$$8pR`8$II$L~Aelf8%Gme;;7~k8C2xnxc*)sj!-riLN%`!_VEd$!~
zetzV*KYN}+on4;bpD+X-LM#Xpcqk@rKk-TCVyNE9_hsT*7UEWz@c=E^@WAZU!D-PC
zSf;WqE^VzC72<zwbI6fcXX!a|7FI!KW@sE_TG8&HmNI@9`}Lpo`ZkQaBzRWj7)b3R
ziZr_i+%{cn1FfIAxw!$?=LS09rAEiQqK?OMr*2PY_MDG216)$|;Z+Q8ks8QZVcn^i
zbt_nyn9xWUR#q^v7VUWhfQ@g|&RaB$5M~D^kBG|oT$wHxjA}5K72{R+08y-#eR+O)
zbXOsqI+F64<)RlgOvBjteeSz;{M^&nc$dDY$Ne5Ucc`<ywZB2n^&sst=>o`3NlEFc
zmrNy;K+vPLeStVP;Br?52dbRmsu0DuFkSy~?uR=FSZ^$Kj=Aiup{Xghq<*;$d93Wu
z$=O*Q`bMPDlmAXBRkxd)TflAao1T?6az00KPJ^@NCWCAR9BJDeZ&h39ds=ye5TFP`
zwu2x@Bq<&~n1;uX8jFer+({ZL5zA;&Q%}&g)u8mjJi-*+3Nw<@YDVC=FRaQbhlvG2
z<1L;0jP#Q<w3k0OXUPY4n`P{ydzp0j3KU+@=lyv9@g~L8cf+;$2b^k=<_>wl?kK4`
zr?kh##YN;5Wc!Ps&6H*t6%8KiNG%3P)Wu$Ir#6&!7(0MS5-8{6h)t+KQE6$k3m~3v
zjgf<HhytjGoi7ia@#UXM`!Nt~2rRVf1C-YbAn(PQIbh((!c(PkJ8fQIdYu9u4EbYv
zDB2E0yS!gEi95|sb4129Hs6nvQcFOo#bE=?5faF?CQ1-nY!D>$f^^8tQC~MtFxCzO
zrr)Y9$xEWKi?$JD7+##3^13LHIYNLw!w3yX4>AtPQ%7-0fVGH1j2d`8_cLyh)bK}0
zqXaiB9C?RO3!`}dt+O5Nsymo|qGeD?^W7TwWOF;lx5`0+5pce88eAk=CDwyIoNG{=
zA?-A`&Wgi;a({ac%~=9Er-^jFQ)sT#WF9pp=hBX%Cl*AJ=3$gvHE2lk%*Nv<o$~MB
zGopiWRXRC=yMwvC5&5c04Wko}u7ccQ=GhF1lM4s!b9^qsW6(bNyKoEW<Roms$jAsc
zR~wP1cbCL8ghxk9i-(6N(EWKx&EKM0@8a^3x%rX5>$u9(h}S_@<H$lCCffWNQ`(VZ
z!ZI=BE)5p}mvodlRvLbS6lko`AZt%G=dC$Jm42eR<)fV1Nw~I=rQhFr!%@S}gYmc@
zQ_Ty845>cz@@eDsK%r);1u;Y1zIS{k0mt>(Pge|Q-cEa}r@vFV;YY6i{WI<`($&)=
z;mU&j6*jCufP{?f>dFtcLwaa)TxlV>Sy*yZ9bc!~JDQqAxkC*|V&ld<as%~P*joxm
zs3UzC5PcJuuA8P<!w(5i1t+^emCgCr6%+pco;Y4=%v1%dsEox?2!XKVVjjtH4-O83
zd=i01VeRGlpE<wKgUQ81Sy|a$b^zsHVUHsc84dbxL&qMUKYeofwZ=Jb_d6SC9xjk2
zmL5X<pYvzI`)<GN+drcO|3)&Aq9@$cBYzylMc9x#%12JY{{xZZ#z;{m;~)b7lrV{v
zL!;v7Z^W^Lg}c#clJPQ9pR<JvP4zR4MKwBEEZ40Z1{KbY@%OQI%|GK7ae3uM^=(&k
zjP!)$0MOu<=x9M9AvifQ3?ye!qA!Kz<*}r0{~X~NlYq+mV|`0kqFg*>rijn@;`@)4
z@nE%U_}2<*>6nR)%^VJS0Y03e!4E0Npu(F0DG1KM<tFu(%Q*7ZR}#7q%Q_~M6_?SJ
z-%?Y<DLb2P);aV(L*HnM=5ayouOOt;Z#StX1i8JvJ>dB=yU~7u%Vo3g<m3b%8EZM<
z<>?4qWP88zd2IzKkhHZ4L5ynwFMcnzI6^`~V$Zi*D(Soq^Ho8&TGzy;zTNaMepEL>
zHnH#Kw1lS@y}r9Z9S7UpL1x+Ji686O&r(BCXbAT+zrp6VkcwF$NNm$Ba?1VqA^Wx*
z@>qlq$-_m^KpQ>gbaI5`^C1q-t9h2OmXB}oKA~MYUw$%FVn{$5a19sQZ-Ud}Pu^v7
zvrgb$bwhay3oBR$GE<h|CxhRb2omv+l>ztJL6*yo|6ZQ<UV1S)8!wGtZo7kmz9#xJ
zF_k*5wn^kcr>2CxE|LJS5s$5EQavZoajio}S`r`ZEy+H$>KVX*O9)+<`K~?r(_7Od
zBl3N#<f9E)nAn4Y4D#5JsA2i+%k$ccPoIL=(}CJkZ;<u+jlud-y69t6kZK0WLq))5
z2<huF!_&JId)^YekLZ@j77NJoVq*e@L{7Zt{>FC4k*ds=f_}xb5mvtyU1Fsp+i&q8
z{!NU4>`yIkzI?VO;teSp4nhKf*2Hjly!${rfdtN5T4iNqN<s};W@3y;0Aa;d|KrI7
zF{>*SaZbxGEP9bHFAp<(WKo)}G*$D3BQwKG*3s3)H(dn>Oo0PPX<%u`GF>j6B4zyi
zo@UFj|6U`tW*RD+*yr>pe53aRkW0MUl}OthiSvNoh!@rePq$*{;iPu}CQDDVK@1%p
zeo*$kX|5I+*W|~}=0EYPqDCh(Oxv=#EUqXnt0=aMdD@?F=^UytekY$4_>+<8=GzX|
z8xaFzZEa(189kVryRW+9aySDu0#*v-(Z@N~U;MCwKH77I7?eM+{_9A|%rrJML}$uS
zFmvBg{E8cXE)7#R=wMqqv#0g9W~7_{VbI5j*YK1g#!t2Yai;de236)cw=@o&_4@Of
zRMMm(@+&qQ6>ig#!Z=7Bb>xPECt~xJ`I(L!?u`IR+=^qTZ?ofgMl*OKi+&T95J*v^
zObnAt<)x+Rd`{0Lnha9(oOf!G>>EfMC|W2p1CSKvn84&A(GX1}C-f{n4^CO4!TO0l
z;z?z_CbQz$cL(Kd&8UCl8!&+W&v&cc^Z0}GXc^UDyvy(|>`qi)pq!(9bQ|tw3k-Bv
z$i$P{gS7Y&y3q@(Qji&<n&h_|yL9Y-ImXB5u*l<eVbyN3wzA>}blTHJ{lW!YfspVN
z1F(*5?Ah!VsJ{q{CNbnj-@NMk_-!-58|j3CuJ%a~0WTor-w_9BDf!^Dz2&c|XHC1P
zqHu#snPIdzU&otk84S`|-4|>elAB*#+nccNAMY-g8pRBCb(wW=>P(#Us+>2*1C=Ro
zo1MFtP5`{2Hw5d>!6c-+%JY1)>DX2Bt=rKh`Dr`)GvA`t4}`=;!|*Ua8<<*<SY2}s
zmuGVEj)d~y_Yrlf@QdC1KhhPF3*^tE&(j+Z0>Knm0oAGJj+)ctPVI!P$^|$FDCkT}
zxf)a9;+))K+~)olT^MvJem48Z$16asDE4wG_R=f%*jrlJ!4&3q13$H3dk{pt2$nWD
zv%QWEB75K{=D$fr^8{G00`8-@2>bYoNc;6>fPFy~*N@1AsL>`NL&u)Wpm5xxas@?2
zMHLl}Gk<5K>2jEgq1mwSJz77`MK?I)GVva}(tN;zP@Ad}T?U&{erxOKi5)X}Ly>eF
zY++nf`6B9j(Zt8(<)!rw!@vt@?>o*#ncXISTL<*Hqo}JLp*T88a~~doGLCCI+k)L_
zxUmF1Kvzoa9k)e%YZ%Fk30pZ)EMM4drJnisU+zs`n7Qc>j<|yhs66jdARJSq0OSsW
zi~mMKnn_^B2zV<OmuDW9i8LpjQMi02;r-c$6njULCE%pgYP8$1S|8NaZ+Fw3s@`E7
zcbxUad0p<h`H`9Pt1AFpf}vBjU5bb~oPou|==w~nJ$fzEU?0Vx2h^;cv>c;GNR|j|
z(+zrN@z?5+|J-^nGF>>-=azf$B4{CdD|Ki7;74gGljUd=@BJ|u@4Kv1-Wm^R>^Xd?
zCKUxT$Q)>jCzkiWZE#ki1oy!ny9J9M0Q?6HD`WmQM0cPkr79WGH9hv;O$9r6Jd~&N
zp_u+u&TO#18~(St^%cSLpQC9j@6s!fZu(Oty~A$CPW8BkPEUNqBD<MjSKZbKc}&>?
z#6z%pe&vDpty+ASFtnG;ISNAAIAK4>DY?T5Hg1gu=h@w0<Hf-8?*o)fg)#o&XJmlJ
zcmiAsDJIe`P_s*dTg~q+&>w^9CTe<zg|-G?nHe^aHBTC(S>lzfP0YKxy7Ijkk^_+U
zCW*>DVq_8UxKY)FI%*Le$-l+-B)9z%K+OdJZgU>`c`bZD9tA$PW0MP$GXEq2D$b|;
z>cV#(3jXD8%oDT^Zv1E+7GeNi!w(!iaktL8Et%Knkwdbr>HIe}M*lMqHcMRN4^~0g
zbz6X&kdK~PT)bcPIUWBYaM%%>e&r1h&?g+DaNIpd>Zlti(<iUoT;~fc6nX>>?cqQl
z{atCyTO7$Kf1xKV`oyWXPJ%5!2aC1%a3y&Ts+;q>L=CVp%}Os<<=A>d@fn$ddE=EM
z$AvT59g+lv1--f#U3H%jR(@16p|HR!7pURw?Y-)IiCOyTs?f>T?R>M)<vkBUpoKb#
zO%SQqAXRUSQ~P!Jn2pcQcPDnk24Rh@Smgi10xH78Uz_1x7LI&^>In?H@2Wz)zgthy
zv#MKaezkD9`fn_j>LNuTp$;nMHb90_XvwS~h&Dq*!}J<wv$7iNCGDv>%%v7dR#9`J
z$ij8b$HTYH?5p#4Y>gMEvZ|e%Dk&Q8c#OmKczE9<is?Gr(`9t(=*k)Y&Nw<k#s9@V
zgEltKMnj)(>;6X(*vZ>7I5mrT?^lXbS|BG%2hKD4m6&be;pOG!`J=1$qw3RP$Q@#s
zY)DWZV+#4RTentwxB6F84xp5g`I2J4*yd&CY_`_X4zMS*!RCvZ9OgZ}*kVR7$7He4
zr6ymTY<D(B#veSk7gL2wuO$#aKci0Tq<ZNL84Zp?i&F0Qj`Qbn3N@$r>mS|czEG#O
zmy<=pQVXlNxDk<uQNe(!KSP4^(D~)Q38N78-8AZZXaemSpR6dP*m-5~J-}nVGWH(=
zQ#=xJ<&@XM0TF=$+GE5=!A<E=d{)jM*suKCC!kUV5aNHiQpgfKx;i?5<1hojlo_;_
zE`3athi86f28aQ%l^u)LjZ0CU;;laaP6T{!aq0{;Gz5S&eRKp0XblO02auUYr?p^f
z{Kgds3Jz4blF7P-#QHcVe$da`97EC~TVD`Tss58+_?XT01`I16ww~}=cu-%w*C-;M
zas|L9Luo~kRVs~Z=?!3Q@C1Rzs1NzL79r>JE5D`!m1aQuF9^KDlwbWQ8reqoYsL9?
zH&8YF<4DuHED1sGa5CYGwU^F--6Xt4p^?tVY^sM*9H)_G^Z=ViOd0F|qz4SVRA*!$
zyEt`@HMq|&-d#uxUW}~g%#|BU@oPs@q2Q6%P2>f8@dB9q6yoSOwV3A=@VbKw*xC@>
z6R%=o$Htr<y}(CYK^jvz;cK1&V0+9lt2qCy_DtMA+(N;jTwhq<Io{SP-w2?s=k$J)
zMh0TxN8n6GGOmYZ$O9W8fDfyzA`X_vNP`G;YZ3!)MJJQ{$7cGL>LGPLMR}8wps#LC
zCB&V+qiqPZ3w}ZWMIzQ<p`oxXCn}rD34Iw*+yOPnPxf(+nQzz<S?9%3I7RdmnZIn+
z%fB_(@;8zAPryP~(yheL8M#B?49|dnYfC+h{0*B9yIS?-+>HPpz-M2#L}XCzXe6#=
zo~>|U`htG&Ab_&JU#PDmSxZJ}>8{7wpj0UjtAes|nxi33E6)^oqfhc<Qvg+=Rt>Q;
z)V8PyI`|G-@J9OacWBV7j0Hh~8h{5WB^eX^RAIM$h!6;m72cGot}@DGB`eivSvcYP
zE+YpQP(rd11F0vX>1Oyu{OditEc4&~yTeK+9N-r8IuD?qe4`slmL}$z@So9%$m%9s
z<eNg0txvQND0qSk-a@jyf>!l8QI?i(&8a!%rz(*n+;|k%A5qlu(jftR!Srd^|NmMX
zvIaza&+)V~9BijGH7kJtYn|^{6oWO^h=TjlND}yQSZV8T(SqqjAlc0!e+6=#m-}v`
zsBGnzD@DdW`3tXoi;+*^+S25pN+aHX)o^^(3d#&rWqVMjJIh){v%YLi3dItXfh#O@
zhPwLq0U`sKMQ|K|Y9Jgnus8-Fn5)%2h1m$eXFWt=+Cg0YOAEmT2rLNhQw!jiw*8#%
zfm$Q~u@Nv(Q8(&e-UH=~T*c|QbS_nxel~_!8?tR}pyFJC!2j9Se-jnb#)w8&?aJjv
zQKu!podfuk0@5Pb!|Zo$Qq^j3Qwc7e#+mLEf*Q^p{#z=tX(=~&z+yn8+O8Uh9fJ>&
z6~84ksJY$LvKNgc842zomcR+h@w0*b1?F6DEp$ewjkMVK8cTbV6;o7u-qi-``QMW1
zxD!$LLzln-A_q$<3`4{DA+k83e30y|patG}>Z#qX@@PO<^8y9)3W;T%T9{yU=K$XT
zFn%IiggQxpZ{&4{q9MPoL|FU*gs(NhvR=dL+)6F)O_OH$lmEM_i^cAaI3@-9e+OIM
zm8Kz3C&?SDgjdDqFP*+un85zyqa<*A5*2J7l$E>=B3A|Ie?$YXLt6YYBbg04DXX+#
zOn>cQ|KIhIl2OZ2Uc!_bh;>}YZe~wh|NcaM{l%2|kNbMwSUN@~mxs*QykgPJ`Rb}Q
zTuy!wy0oMM2zXdX9zdvC6B@6@1^|hZQp8F__UVxRXFp*`z2G@QT@O%seJ40B(Wdvi
z*}YrLvsWy?sVExRqO6O_XtypsC1IDe9?ksG>`qUD=3}UKN<3((3n^n`o^OKt!+oxV
znWpE+=kbPLwRQQ~qWN-fo81@%{-$DeH(u;t{6q#%wfz>-j~M|Tqn8ua;;yf{>X&~s
z)rXpB&Y!NK;~N{}(+uHcCuTGNd!iR~BY>ebVV>g-^kF3klwlC8=?`y4N4in}cdqFO
z6GcLC5^$eF^Nt>f)tSDZW=@Pj{-iw~Eh7`fXLO4A{uR_zwuYA0t*RM0aP?Jie4gn!
z@|qr+_o9;d!7UbTrCh?PR&4LP1s^{)o}@+YzA9*|XvvE>o5M+_O~%UI6_fji>AUQf
zq43{T*B(f_e^1ELeWkI3Xch8A9u7hj{NkROx(ITJAv~a$3jQ9WT03p|2YU4X{R#V*
z9=>&}*|*DKbu+^cP1w=B^C&xYf6K-$Bcm<GMVFsw<8DMvzt((~9teI%ddaZDtTHGT
z^*)KvdMtea!^g;R<ai)=@$e?g-^K(w{ML{cK})_`6dQz|A3jYtxK7oULBxCxRjzNI
z2J1L@bIdB%uAMQG0eU%!2N2AsQ-72FP<KI$58aiFnt+=osr|_(`W`1&$9PCqf2w47
z_6OxPl;P#ci5C_4-83?8>u?qsj<GC78^z3wrXJcnOgZ9kK%cU+J?d`oOq*P~H9zt+
z>#tVr^iRvOt)dolje8kxJeB@{b1W@)*h@LlAm<hZZ)7~~pqq8+8CX=5)bQ}cYLm#3
zYf3noZwY|-)_nbZLw|XX^e*5t^hWP0r_Q=UDhE#@wMj=X)e4QPfIuzk8TDRuQBK6t
z8xs%!QYcS%2TnrmyZC|hh(kvji3gk6bEBW+@tpv<yz-reVw{PC#Syo7t1$cnyZ6=?
z5uU;iC67ZLTbUWf?grmACbZ_;Pn*_6;o<iVGo*-qhQ}!2>*<gv%6lzN-_GpS4NCbI
zCEjuG_NBgx*XTqf9*$^Z^Rx2hUJ6Z(sDh~uWXkf5yg{&>WP)s-X`w(SVa$@ph1Q5*
zb5u(==Z|}P(B~q2xeFUO9xzZ>%>VhvZg+XawOZ6UvG!xt6JK^ja?z&MC`S@;Y(D|N
zaYOR>S8K8k4`!zY$!PkPHlvp*&XNq;%oh#w^NCd#cX@?H%fk~c!tdUO6U<aDxGf@p
zfROjBhDjwqi}Sz2^M`v}%m8G6-VF2_?(*#Mu5cuGj0A_j#YrLHlQpBM_|u=O1P+~S
zOg7a+-7_32nMW;=mS-o=ep0|ojppz&yR{8e&q^uEI<BNJ(1D8jdoUo}+^FPGK+vc_
z4i%NFohWHGpMuuXO3F_-A!RL4iAr`nyVu#4T!%$f<W5SwhD5-Vlz#*!Zz!AC5~D}E
zLaU=?e#joYA4Tve?TQ33$x78tzn>+dD6x%?u&9wQ)p}+sfii*xn^>95(mL(cFUdlJ
zNYD5|7WRxCZviNZ%+@J;T1v#SfEy3R|F6qNUDO$f(cvtBeTte(Ffn{U9m4)!Qo<=r
z%t6_|l7_?odqP24nepL(hce>JimwK{@zILkXyBq1N_yDrt`&FbIvME~{f<W2f5Hik
z1&a7Pr83{nX0HV-&FA7asCy`Z=$W`!(CDWMe;w03J`Bs}jh0`GO*}DR6{MXOmvqab
zE+zMxfdK={2eVS2x@kQ|xd%HN+OHN6bsRhW(6VcvJ<2W^8)5NuWzB8>CTOxG)4HsT
zwhLno+Ss0+oZ(Au)i0VR-dSk9hbyvC&HVjm{ofx)^2;Pi#gDwm$$$2Cxz-rsr%5@|
z&^|LQ#<0Xr_F)*dE&^E&Md8r#?aU0fH&~(jIFgane@#ux7B2D)QRZVh@q2gv{~2N@
zm!?PJAw%8B&r$+P%4}17W$<!a_TH_1g5giGhz|KYxF_RBzYyU$e+FfGCMnx;9huEP
zwc#IJlMhD{rkKeCoYTi3G8?2ER%4Ik&Z?3!cl-0QS)cmp+`XVA#rFr*MT7L-%kYg(
zc)+2nn=rTh_Qvj!&=!;>*B88bp(w!U>*8BTb<pv=iSvoJaQJ6FO`OtJC4x!rtIQ2e
z${7voXbEo&8noC}q|=K^R5(p^GH=zodQ>fd@ol)iId%1tEiJ~VsXwV;;Q7O1+ficC
zX%XB&x0qClW6Uxnkk8mBF4=Jjf%cPt{>+-E-R+`7O26GNMs8hQ&#jVooBQOT4zKhQ
zKy3-9a@&EZHO8%mY1F<;MlqJgqmYu>Tle1mp&>xyo#_=%;moYP4~X72hF;1)_vKI3
z!=^x+ZakIzq6hQ4Us;;2g>;f7ONe5X+ceeLx|<VQdF5hR=1A*n^6rn-LkP8i{OTC_
zKUFKvTWV?XqH7iFo%JJ9vi4<2nh0$8yVymZ)&X$n;0K5KbV1fRGAWx}EhYzl-pjk#
zfaoM%v4~W=kH?_qPkffqjg;R_Qbe3~^+<OS2BaGOss~L8k6k~%5!0@-Ypz67S#4{E
zy@{;3zPT}NcCFkvM}U$N&cr<51Vr3d%+zNKO9GMF4JwKpqi6#a8kAji2r{Hhzzj0w
zMKvaU>*g~gp_sPMNJjRb+XmASt-_HV*9MaadiPJxrq{Z_7T#EolJN1<?m1y(H{<HL
z8VP>$Ifq(uBlu;kJj5+5wO;D7>PUnoy?pjcDsM0K`v?2kOb63>Fy-&EhtJUB`wnF6
z50>AjtqMx2??%{d7rAxfDC3iERIUYG(>#|eCbKGnmiWBcG8upnE&$1fmwn4xoYk9P
z|8%a5p}?u<Unp~Fo8+#|K$=kCP**(!8;0c#`d<~pmGg)6=eY!y8*0n0#`<+)mujkC
zkt#YfekJv%pBlP}MN@|vA|c}^67<(@8NV#G6>QyVuEOr@+Q%pP%uY|P`9Yk?@|HYl
z!y}B}hi9iPPY=J$sb7WDmeY^5&^-WR_kznyG;g0);B>hrCf^8z{Q*uFQo=0h7*{Zg
z9M4{||3w_2|2=?i&`wPa<oy@l@S=4}x8CL;+QAV(+eT0vBJ%@na${_tF$>EA!=IR5
zyG0H=9s}UKk~1dsuC}QO7mBDBtyolJVPoULTG`m7E7NDHs%cmVH}Jt|9M_@{C;PIi
zYIfybu6omyF)_g=H?63qkMVMGkuB}B{vQ^w?JkIFT4&%OE1TSHre0bdqN*t^DEjsy
zhnl%eZO9UTb*R;dE#1N0ljH`1oIvId#rR*b-WLSt4I+S+Mdt^`sX01!EM#yB+SM;P
zuo1s}u|iOwEr{~dDba!saW)3u-+P-?(t$Y1RJ^<pogFY*xgW1Rg{6fhkKHa544<hd
z-0@7|i<a-yE?|VXmXW#0Vs%Qb&2qAx2kpm0mwMORKv+T^P<b55c!eQv<$S%HPCNu@
zpnGp$g?TFL=i=gk%2@?sc}4tJ$V+U)BVO?{=I9dw!s3X$JiJ>W9v*QV1oNn?RK9gQ
zK5p)!&Q9bC*M$kh&xx*X=;0B_U84Ba3a$^Mnj#G4pLZY5a~zYyM@Q{%m!_xtZ7YI<
zX>OU%{^7`zb-y@&PeK;dp*MiTR2lfUe{!Nq1HYex`r1X~&~XL^65S#9qa-$L@9yH)
zO`!Ck>R*V4NKk@~Mkd(*9JsT9gH~~edyOF3A-VFmJ(}mbK{pbKNKCi=AL;8R61(NM
zkB*FPYJZHSA{=w~pg#M!f1pIsqbQ`U{05z|@)*s?5T=38711-GESbIzngF7ne2)Zd
zEENq*%dq{p_(Kd8=<7M&?*sRk7z{ADw!LF)XejLB1Km$$g9ng|$Y3aC1RZQ}EH@3U
zS(!3@t<DHjJU79}@UZMd42lfGn{xMg%DVnpXq8WoK2L@cKB+je%4>!OfOl9#p5RCr
zqvea=9ABsoz8n#Y=^RFyI6)yiE=rQ5?W-s|QS)>~eps_;?+7nglm%%~`)$a_e*d=6
z#EX_N52o5ooZ?Dz66bl*4yoNARo3yTL&*uD|DPWr;JkbQNqlW0!5HY45S@^g{OV38
zkpeh21*mR>aF9icGy<O638%*|h>$%~z|p-;SeFAUB2$5aoOnJT5OgIZpIOR0T2l9a
zLb^MDGqq(EX+uAyu~ysd*yu7`+MA>E5d$eir&PP-Pbl+;-H@M&GN%{E^&71l9?eHs
ztvO3R1lk+{iZ@A$mI_%0gMW!xBb(-t!{x|?yxCT3K5bQc;vyu#6F^aD;K*WUcU*zw
zw3*mc%GJ1p*lM?Ip+2zXf`2aWbzNq58Z#hZ9VD7EcA{JrB8vwHZZCtp85@>HpN4i|
zr7c;%TQ=k(Q*r*dz-za&_HoM+)$4lwOa<nla{3@fHou>1)7e>7Kly!0+hd1J3k&yv
z1p|(sDt+6<p2~rsTm2LCKTMLd4S^??*cNyxD4!Fzxum3X)3j~`5Zk!P0Qf9P?$_=9
zE&ZZcTHK?k%}%HYDQT*D{S22hf+Qj<nfrq6Ud~4T_G)@BAFSgMCm-BKEex_l<I=)J
zmXMp|%q$^-28N814WNG|6B7Y|If()~DrBCB3I+-%>>_%FCxIGM&&L*;NIdyYs+8^O
zi3B_mIXQ)QSpuTOF_tdUr0Ta8Pm+nS<8RV7MR#u7#rG4Vo438&gDz~2ao#lw5nix8
z-O$1of!A~7%9CSaSnAUp^wM)V0Qd=RDAho_#ZeS!3=;5G-|=@z6diDrPlY8VGyn=i
zY1D#dKb@0BP0rP@oPw|5S#kn3tv+cN!*3Sa;i}b662iwRIA>N$Fw}3zB5wB)oIDy}
zCwr!(B4F|WVmu1x0VIFsY7XK7MD8goymnlv;Su_NjBlBD5!xd>IME}x7!9~;U;Y}8
z0>E;ldofA?B(E=fjpjE$j|mQSB$s@x68dm!&v4^J_c??!e>w^GVw4RAXG=mqA#mS7
z@iB#DO+oP{g@#x_0zFJRxL5YW@IcJ8Tqs*k4k9lJhAMJ|JvJx@4!NZ6OC6r`uU+SP
z-}vAdb|UwM-J^Ga&6yA{ivVNe4B<TDNVeHVF#;_-N*>PCglI&YE+r^gope<ndUYkf
zucO|lv)zKj!kRp#1(qbDU-f6{m7JvENl)JMpeB!sGh{P2j5=U1hzm!Wv?Z^{i^`c2
zdRrIB4@nt8e510g4Bfqu3}*Zh^A`{B9vaeML>{1FWW)v{RWKb~|I!}ahl%}6QqPJa
z{&ZxulMhI#Vu~eJ+#`Y??pZiGz^YYI$p%uTT6Xb+Dh0G-6g;Mocx2JErha#Q(gYjX
z)Et5<fmC1{(p<oe$Npguw#Hh8?!H%`rn~N;mB0V0YAnUI0N(kvcXc%mnq|tBB$Jr$
zzO)NgqX3C~Ld&FOT9S5~gDT!brWPbFF@tS{;?aC)0TkjY%nhNAnw{C{rZ46~(l|Ml
zDl)hlJ0^zb(~U`s^&ur4K;C07f(vteuQTXZQ-MJV6Wz89xexHXYgTDX%4J^|YE87N
zqIUCg36q)sgGo?=BUOF`#*rcz*ZAsm3y&(t(;?qyV0i9KWd8BH@qXC&0&GJ-f&3xn
zuRhGXgUtTgQAjc_9YUPTWSM2ICJn@(ggz}loL+HZw|k`L>iQrLXi;9{BwiOaTnpsf
zy>3FD>s27kHnMzs_d0Dv!-Uo_VNa|a^;cl1kGbCqZo(BMxGF>@huf4d6GJDiJW3}k
z9LqbO1T*$st~Jc17clow0Q(DNi{|>*+YvA!Ynmz!oxo6*fqshza7d&nr`DN*FDeSS
zj=2fRZb8=FkT=pg#d_!jZh1X9J;W(!J~ElKIs(#G95L9<$gL}1uciC(!3y|QG}ZSM
zOh!`7mb4N6@IBryNzw}puC!yuXRm`6@*i;D!U^)@MktmK%!BC`-WdtE1INN}0tR^G
zhs0IU!GGGgY@&o#*|ZqpUn7gb(SrnUC926})EP&R)2yYHEs#{?qJrbN41)TiqLPI+
z`E_{Q_iNOn=c}|l&3ws1C7HQ!kv;dux9a^LGBosgY#-<W;{YniNlj-2{{6)7Zon^M
zcb5!}Cqha|5*iwl`}_N6XH@|}d>k4XIXpQDzq|+zhWlaFxC9TLJa88f5E!i*vmqxV
zqoLshq=QA%3(L#OG_2r&05Rpa%R{51JY=yOTRuKMD~@~;AMg;Dz}0N|0M0aI&y_xQ
z)_>zE{G6b#uYV@esK-+Eac_6`=ISaGVmhB$Zve={AoC*#rv(3!?QSv_R8&+pB2c~!
zA+Ta${Pubiw<*Fond72rYPP3cI#Z>4KiFl0A;faDRn;gthvXx8v=~&|mGwO{a|}ZY
zS%iyAQW`FfGAt|%P*`JRBd|)I+SeOIajY-H3m$fKi1M>i%cCUFx#2zR>-`dlD<q<r
zB{L{~qg(Rl?(U9*g9FD~5`AxpppcA`GI)hol@&zcZek(|l7$=WlIXRoSI!hvDc3M<
z^(GwXs&J@}GhoT1VC$3f!nz+H_lt24@AStMan64SHXwXZgkU=y?}x!kNi-M~y^RXL
z@w9JWb>sC@4OjG;n3#Wv5MgVq=6IbfEI{CN6OR|#kBJ7r!67wSZBz}Uw{PFR4v)07
zv^?Jqirvfg^dFC~cRqg0ene=yyqpm0{5V%(*yxBjt_?_q{T@7kz*BVO%!x6V!Jw8U
z?4yHF*x`HUTFjak_`J*4c{eU}DxE=)QmB+No_#vz3#Uu$OoXL09usgqqYFPK6ikOc
z3737^`SScKVR$?r1m=&<)$|)3DSRieDTRU2y}>w&m;1_>zs~${;FTI{bP!sXkf!M3
z;$p|+#RyJmzeh71^lu&XYBFDr-MEE-pE8cT7Ccb_h-247up>cqmcO|b!J*<#*MBtC
z4zBO#Onk=Jtt0^5$JI0-&_6Y2H)(c#d%I&f7);5cVPy39n>N1d1Vf1I4-B_SlXGrE
zLo$lZ#r6<4cs%qn=<E$!R~FVFCUp_4v$9?t1a}_1pR>`nd9gFXpqkMo)K`tN{O^Ed
zD=%ILP7y6KE<ZO!G8eV8aQHVz=T)pzS64SY@_1%zW9RlBvG3)MQ+HRENbAQCpV8l;
ztdcPd_@dWW)6eN2Mi;y9x(+lMQdkXt&K!`yVwPv~yFBhE&^m{va$4>J%E9n(Bvic2
zxUEk?)Ds*S0S@gUvDp;w352bFPsAC93?4f!xOt!H)DCX6Gr=wyHd%%1b$i57k91wj
zy2&IomjzD8gz%-OMi73l$TY2U{}~`$MqIYC-07d}ocpq9y!RV2nMnE?=*_FVQF7Tv
zlyT_pf?9{ANk`M(qqC`OB-T__RkgOJPq)45XHwDo|Ni~!u+)Hwi7A5-v)R{r+QHnf
zcF}nQ3lC^97plyAC;V>!9-TM1H`_d3uhrvtrc`%>i^U+7R21ut=<@Wmloef?AJS)d
zp{;}IBJ)lx0;oNV8^X^Yp6v15U2jDIosv_>9sPzZWE`_-`mWUUiHU>Aa5a=%f%roC
zoFc3bJWSvO*Z4KPgu06Yy1KeLZ@pdc>lfOiD;Ui1W38n{Q1$W|(7&1q?gP@rv2;Eu
zk?ZSgX%ax*E)ekCM&NVa=5^T>Cc(EdKacVS6YHtt;UolpakbqCwI|%Ods2ZaUjRv3
zEu9zh8PLy$NP}m7X#>qN8@_5;AC%5W>JruweJoXoPhET>i+j+nK24dv2X!_V`uTKq
zrTu~V#jutA_kHH)RjkJ2g$04b*-9rTC*8cjWLA{4em4}M_&Gx4k<D&H);MY>l)JMP
z59fLTP0M}>AET3SY^*q*&%5J4zP>L3r5&~!VSn<@sHpjb9%**uCv_ab-h<~#2+fI^
zLCQ3!3<(m49gEMp<SRcGVFc(F4XQE(fbT)C$uKR^Vp5-Y<9C&yQwnI%Zh(m!l+Wu1
zxLU*+i>ev?xCmFttcG3EKy>V>?-n|3gD<LbUg(5O(llk+J2;2{GGRBjT0rOnNU%R`
z|4snLkhs6I7`M0s1E}iH&kv^&hgPzosbe-x2mmu1+;0KUplW9Mz@UI}le4+4?K^ol
zJ^SL++ik8GCp){~!})2^O}0nccwsp3V@x{Iy5!TO+#A2+`Z)}wULeN2bR)m%y4c>{
z?s|I;3<^FSz|k~dv0NpjrY=lQRs*al5Kn{Y1gb*1)*`Xeswbp9Ea?2gGb;dXKS2Ki
z(TdAAV(TS_53dTo$G^pL5NjURe9q^fFlC)}pPJ*M^R}Nor)#tSOD^>fw1@s`%fXyS
z;QgCxcCFC<M5>p?tbHTsUYwh|5k_nRBZ2)k%E?kv1V|xNx03#*omNA5^W|o1L0j-i
zVE+`D?_DOsK+pnG7S2M>6d;0zA0*`u?1Dx182ZY8f?^mtl7t}9@Ac**OHa__<6~Q!
z@U0IJPa+Y!M5SPHpmgS;{-c^dmD}BlC_SW_3bk}U3*^kte~FsINIy4$O&I|^^3U?}
z2Yr2Q(=`si`>V7xGJeI;Y_S(${V8n5q1xf?m1Sl2&dxaA+oc_PzX3g8H|1aKGPZZ`
zf-26Q{;fqk7(O{a;{6{M0L=}!SpfGD%b^-#+{p1K1TM`7jrGcg=ObJdDWAQco|IBU
zTRD7wdgw;&QRqoA_4jged51O*o5Ov*#tXlP^;WmSXb3b2NYt<gLxGtLezjX*)(A)!
zW~@1b5w!4E4OKK%vd=)}`rtrc3(EqttQ6A7(FSCSs=cav<v~occ3>*V7G2dphlxL@
z+mqjJD4kfItA~#Ji!#OV*U2*Yyp8DyC$dM(JH)^@w?DhJ&YiF$!X-6@c~_1N8^y&_
zl9E5w`E<50eP8rhy1j8AIbetPJBcP_W@chG4`_CIx=-b{+^buA;9C>(*;TgHCtXgt
zUvUZ$5*9{4M&rK=eX470JUz>mQc;QBz*^jK$HELp+lip`Cb^%+7Hj*bSx_?lQ{-lT
zi{tFbZDM8(pqa!vCt|Gro*o{Gd9K6!!KNi<*RS!M+!XQoXTMrUs@nGX_?}CM0erdp
zVBQ&0L0a&V8-l#zNF0R>N=r*m?-|t9*5<~1hY!RrS?lV6m~yB66NZS?jRyF=jmix}
zZ1Rhmycv#V=t=!Vt=+GN3bO$#weptp!HI{zCrM>#A8ilp7C+Tk?PTQM>p&N3Uyi4l
z>RT@RcDfD6;<|A)Z6y}M!<4_izk(AXcDyoa+aamjuNe#bQnWXbDePR^d_GOv2Oi4p
zNnP`c@pKE}0cvWXKA7IK5y#iZAL&gQc5v$owpJ_uV?)w9VbXYwL54;X;VNhJL+JGM
zv%Y;lGq{)Nccwl(Gs+F=fa%?gT>pp-Axp+<_ec-|ko`SWbJ{RX#<%Ft1bv(t4?Wg&
z8(&N+!57lKJ2XaP!83?H=tvDUHF#_&5@Jtx69M7q4@FttXcfrIj(j|5toPuE5iwbf
z?jv==^QWuZ^T9XB)QEE}ud{@0UbSM%@PA(i47$yafw3?)(QL0>Qbt+dD0cG?fSA>2
z;eN)$Ui@o!f05XGN)#?Vc|Fg00%w7HAophhVGfw|nLTh<6Fx`yM#pDxSjEZbxQs$9
z`I<|Nn0gKH=`<n}o=B|_wk*~SaoN(IZb+BwGBzf1Zv^y2I6LDazG&Z)aZj4FprYOe
zvkS+VU;RIx&M~ag?|u7|ZM(^nZQGcP$+nHjwrx!{S(824c1^Zj&)xTT{GVR+rep8+
zUiVtpx~}v5oWF;SwK_c6bYy#D1ieeJ=|zR8&sG}YTvZ=)0EsWq1Z!cXqoy`Yfm%Zz
zgHSITJFW2(vKd1J<=HRI^_BK+YwzMJL)!?jdVjr{%$Hy4N;5(kgM$Q#ksqVYE7QLS
z(dMz2{bJQ*H~@?404J8%m?X?fkMRmifYE_Y0)06#Mc%^!)nM^BXENH&e-PLS82w$B
z7E;eJz)#_776mCGnzi#bgI50pG1N$~w6UxWfPlgMNw4joKy!9N;>!NL-uAH8;(%to
z*kCbhASI~L_fxCN02BUJ&F`c8uuQIS8W&#Nl+3zzII%Q~-)FzuKM;*l9u)0wR46y#
z37@hgc-x6&u(CP<jNE$4EGUD4hJjKtDYSe}`=`L4fG*;yAz+T#1>pcC>$<}}J+3uu
ziyH(t9=98Ef6c4C^q0MD8=!2zox7|>-Q;uOG=EgU*!sI0OKB2gG-dK>!mxJ_;@KO!
zuPiJ383^BEVGeg*>~BU{E>UEsSyY|fi^yG@(#wM&-@H`_4uz1b?+ycqpK;&Etd=?L
ze&5Hqa?WS*Y#{YU<3C1hbo#975tEYM4439ijF0j->~MP9EmrAuIUg~bqGn~&|7en}
znC`~3=R8HDn6vh}o$kr+@$q`-;lI9Rne3jBtknic3o=`26EPEixb6PrjHaG!@grR2
ztSwlt-czmR1w0$1=Pq}yH`n(miRC6|`)v9={Alw%8<e{c_l3pe<Zyd9ukKFn^XR?)
z>*GvSu~_MG{)8ng-iv*BPCA)aG~~r-!GYb)Hu<*gG^^_i9kR^;KU6dMv$4<X7#eg%
z0CK_lxtTEMEwEGtw{hsqK~tP3W^wr?v<KbGsgU5$ltZOjYIZz_+qJpbX13ddKW#{>
zC&PyIs-JwO0q9x9%rEWxEJ%Z@$%)Iz-8CGvt&6Sfg~7>K5B%Q&5Xu&*rQ3ZXDJjqb
zUIZ=kvR=IDY$oYwqhTDlf4=VYN@!z0l&$kKu07vzi3r8;GmPRb^L4^ci?RbZ$bxQY
zbMSbcFA(UASs8(N0WvxiiIDKfG2O}Aw@0%=qdA-o0XVY@3;ReVAu?|(D_W+gl4hJ7
z5X<1lzW`n5%l(<Gy|RJ9R~<?nz-CgT)gnnxPyc>b?Ke(V;L@t2!2d+X0@FWRu3S2i
z%`?;hu~=YlF#;~v_YK#a`CgOM;BGqrjsAN3JO1w<24aB4?;;mg{B$H4aFCdNY`$zf
z<Y6y$m{;|wBBKdGuHFEWR6}dFgfIPVoCct|U_V$``0Zt*zzGV_dibHf@L-)XM^S_@
zu>U=jvA&iJVHHwRoLp(N5;}j(jddP|VsTlnGs*jzjt_Bmb_UcHRlqH!XOVD3A(OwV
zVigY!`~^j0H*Ou7ULqfLKLFD-NX&#61?}|_fG#jT!+7^JcfHvxRi!oC-(FTja8huF
zFzy<#y``^_+9A3s{|ngRfi(bIMS$8s>+H6#g!F(7b@*^MCHq_19S;MQg}x?h=qm-b
z`3ig#fTU1yvL>__ap2Umzj^3vxjuB6?_e?)$?$orCy+1}>JJNJ6X3EAD1>qjvs$PG
z;ez7`$u|qa-D0=bZ)9`?7$QK~WHN!H|5eZXO3V~>?Kxn8-?1OddvO_t!+iTb;bRW;
zdF1!+-&-a{-DdvlA*q`ZX2wy)-;8Ww`Vi_SCVrz)4hk<~(Q3HAJxAXhbQmlW5M%?z
zYz<=#CK-kOp*}mP^WmjK9}4O#K?4Lwlz~tFF2D03au#%a5~Znq!w$2{TBLgn<JnT}
zZiQNvF}^b}YHkmXpUM=4i@|hSKJVCWO12f|;ImqI2ZPd)hdL##Y3T5I@bv|uOtBAn
z-N&<wigNcuDpIRZtJHyUlQv(;oPl*E@msnEzWfVzR_{hDEO-&U*X*vxNU=z)i{&>}
zN&1-Uh={XE{sX_Z*_X&-XgFR@PW#sL>ntv(Z3eWT@OWs)n|m+Apjnr%18!Yy?!yV|
zdS?MYAQ36rI@ci9nQ{C)pMX-f`b9nh_ZUxu-(WAhc@uOUo&j5bkdgoSaGF%<K&g8c
zS|Wp|Pr`H3G7Sw6Lu`NttI^dx_AKO8WAYX_X608pQGPkDX0Mz522R<G8XLANezc0R
z?Lv_b7q^I%vA-EQ`Aj%<r7FUO`*poMJP!yQE-6*ndQH9tZ@Eb5)meRH$>+Rka0#9>
z^_ktaSo9gLcO1FS*`42&Yx#=?{H@%!?e>FEqm`;>ES{@3=zg#W6v;*f`!_d?{<wRL
z7(1>tBS2WUZESi-s>1qO4s?OST8iR-5`HYpqr{d=Qj=aRqwA#hLSVZS)h}mi5&X6T
zzU6Ky!H>&OfuKl@7USTPKA)F+rmtiDZgj^C%HO}En)l@Sa#m1u%Jjs?qqG!2_JGq@
zmzTrP14ROq0EBwZ`%oUlp!odUT=#tWw7Ky{Ko=qY$B%8m_gHF%>2DYqX`}I_<sJM3
zk#fr4qVg?z<;=AuE<_CU0<+4c42m917w|5g@Egm+MoEgc1ge$zP;?R{JUl$0=~WVW
zyYvwGYa0yK3@?uavA+-rKMr8&JyJ3y$6X1EQ8c7K`mQ4lAuKWc-fZ!`TTyM{09$~u
z?daye-VP-SX@K(@8HmJ6H^4@c>$agRkxzptn*TSPm|ku#=^sC~abSnr;(2!*h{T_k
zoD30)va}8g-oQK$v=9g-JGr{IV|Wftq9#>8-w;oKjUN+Jdkqh*ZaemQ_{?s94i;>8
zG=51SAprrz*@*%M#E+`3)SwR3!I%054h{|xhQZeym}k)?@_cP54+JkC$@jyoEc~)%
zJ<2SwM;7&N-ygcVot}4=`*dUH&BOhR5}^!qv|qF0e$JVu7-t~u@FexD>+Cm>*^6sf
z?;m`7AGjw->;rRu`zGD)x4N?OrdPADz^);Q{qqj=0I|96;!(1#UvrqGu+Ylfe(JKA
zj;iG#59bBmtD)h3xl8|H%!yW$a3Z-veV;+&i{9NckDDchJg?)U{np%0LPE~D?I1tc
zo!hYx?7_hS(?JRW!I_cVcl0z9?4>#v8Wu>~C-i>@u?$muPzZb_UF?V_9J(J1P(<+6
zL@_M(Jj;3lStvbc{}K{*+7R4Mjx7lgc}CSh30RGC-<Y*(gD8KRGX66ee>yQ!J$~$>
zn$PH{Jvdk5VL?Vg?uq)_<mzcB55Hmk=OvwEWzgth5NgS*L!Ic4Y+|4BA*Zg@1yNJe
z-D63JDdkPedf|_a`tp(=M)|@Gt2QSva>F|fQ8BD8mMn6YRSueGgFC!3PK%N<SXBGn
zhD?|tkG^L+&7YGsX$m@U=b<a^!`ifMsa1|(ZPS`b`;!Em`^^T?8PH{gqjb3TI9Zf;
zqT{;lv*yi^6OGJq%(Dyx`Ak8&r(LS>3wVqS;?CKH(Nu;&5HoORNoR~J2xahJ#vhDM
z)R584I09h|@?2Bj9RM;0O{~B>Co5DWh#HN(g$U-Ck$!Um@8@d2x09!v1BDD$7}+)8
zm$&j_l&83@=5&9=jPM1@k^0HYaqvKRu+L-dl{6h$pcgTYA!;LFoy(p98r;>4YKx`I
zNahPUo0i=J!h<Qh_0pHRZ#+DB_YjQA{xR^FNY1MIV|9K9hKSHL3Qu&{wBr3Duw?}R
z6o%kjzXuAW4SVhOj|a<h-wrCNs}i?_h|tLx=i%oSRmMC1PP%py1aH{NV@qFIgVE}~
zLq~NFV{ZeG#i8Eqaj<*cWT`Z-0#~_tu0!hmx<&%(Jb8>UF)_lU01RFsof!fV@v8vm
z&kbbP%P=3-Ihek8demDcC#taR@t$&jAIS3Y(??35?y9R)T~7-}S}Qty*}S{BKo}=%
z7zUh2_8OP8fd?A$5yRTfr+w|MXTXPyNv{K5N**7RF75d}*O^LBTmq%t9`wj*3PP41
z@#)lQD_}Z)vp=t}qocaoZRFqZ7}niNV@1YKy@?+66`Te;Pacyh*Hf?a4`yJ%L4msb
z00zoXI+@j^RS6=)vY*Gp!`=D#>eP!;mW$J({&6&G-#4sBY~TF+T0d#K*23>~pJg(d
zTCLM)xtOY_+u<2p6R0%#aV79Zu(oY#l8c55zP{a-66+d|c+ceu0%;`W`!U~E_`}D)
z_1kkbJ7-8$aAXOK-8V~FV=sIoJ;>;u%;Grg+ozinY}k(J*)s`xm+U_UlcS(=SsY%5
z2jQdJHq-P9Q>QhVW0}Gh!gNpF2zKuNPD`G5i$v>q9(T53KVxbcJA)~Jg)Akc1#Mn4
zNt_+2?n%Ui!Ze5@9*}mQTp8R;l{XtKnkCwUfrZW5MHW2Tb>WRivs(9my?_Ir*-`~4
z(y_Xb`}_MEJzzypmH=k(;^N}>ZcFU*!$bX$p4R}eUzL?XCu5gnK7cUYUTpheabRHJ
zoqHP=-+D2f#Vn2KYfL6hbab?RxsI|ji^ugpz^_4NkIFjIZ_+pTjhZ?DB4(Of=Zj!1
z3qOT?)+5k|&E|9<xnw1f(tSnLN(YRNz3|%?cy{gEAJbpf;6OkS)c0B2B3Ts$-hEhb
zx5D$9c6Lzr<Ml4H8NSgO>|_`)wD`QRpNaw<nHmRS+~8(?aA|4j*RI4%iYUTrG-Kpb
z<#(d}mxuB=>27YO+N^%O-6qeg9Y7J*z})VnC4FG5CDIj0(FwT5W=n(U`3G#l6s?<Q
z=gO5sLqoyZilXs2djH0W4wF4!;OU1(ym;lE=h!aMyhW<0=ok|;_QDM|G&V02+>iVk
zIfj|v2>k-}a<b8>TcZ^$7Ca^d#_J+)D{rJsDjUFUFq2+y^n*<HnqD0K$9dZa_=5u$
zoff!T@@oZHHZu#qx6gJS2vpquzNsnv8kTVkp(0^Pz+cmi-dZYqaZb;dNmhMKiiD)2
zmULQ?t-Mbse~SnHb=aJHt|s-d#RRj~U^H^M9PqzvG|=(Yt(bj$cW{^*dw9LxqX9N0
zCof+8AKQaA^0vP}UXZ*NPM7O@IC-)+^5W|199wed)(H|iA#ICWwpJ0>Pk@d^8WTn0
zvSlMU1MWv5-W*ctmEuPan9<SE*gkxu37Me*C-j<4i`U7%oW?1Z+o?voF^m_8oHrtH
zT(Z?N+fhO8JLWtMJBredXEU<ht9pyKKF~tnI+)6(4<53$Hf{9mua`P&?(dk?3&Ung
zw<{fZI8mxw--qD3>)0N|iCv5`t*g69<Ysc6?S*ccv(K#IC<#{FY5kC=C@vV`pfj)?
z6Vhf>mt?XZziiguW;I1^nDIUA?H(_=mWwR^SqeU&f&IziBH6H0P51zhJt_klY^4~a
zeUL24@pDYi>^nR=v93tn(b6P5_5t8>JR!8!ux$kNGBVALg_FDY$f7uayr#Et0YD|u
z?shkx?~SHzd#8rM9$L3dnAK@_58SM^I=!{#Z1<v~-vhoVz=n!L=(@hL0*mDjSP<E9
zqwV=xecwDkJUo8<AkeW;QBmn0#?%q_z3|!un-+froe$6i_6;^#k-v>^8EjVFiU3du
z0gt_#je2*Ypb^nT*L@oz?r2OoM{vA8mRzD=XhdT6vA7=ejO7Y~rw_y0&8^u5|FX9x
z6R_Z6!68d6R&V~yM!AQ})@}A4a9rYhYfja#@2<jXDMojA(dqIf07pCJtO*=TXMws$
zG37n|rXMW$+r-SQj~_xJ{KEI4?dyIRi0yH=E~I*sy?=IYE)hjIYJuRzQ3JFm-5&=T
zt+GP~2tfyTf9Fo016RGSN&Zo&RVU3Q6#dj%Nc+2ERr@;7TzX{G5buKt0>;*<i#}bL
zYul&mz4wC$VWz_j07C@t7Wmp#_W%|e(B^g_+y&D{=Nvz!{!C;D@6!9m*zyDF7$*h^
zN#OPJkITspEvDH0={i`QSDz2w$jGSUjpM;YW}D;uNd3WtXCOx(Ki~qa9@k^+YA?Xg
z_-WHimQC3yOWX~xtqjWbJ1FEb&|7w9OXLCz(a>fQoS2Zj1KYM@`R>z(jRWYu)OT-(
zy}VhQT%h;DXy;2>rG?!g*dpVzI+J&{PY$8gUx~!NU$uJf!QPtJ)a!LPD$FtS95w<|
z3Z7PzlZAwt8O?fA2F*X{F<(%O_>Yg<yGV5!+#OuyCxA{$*Mr^r_>9SDpFBRNHS*Lr
zaT}#VdP3^KT~uRZ>J~VdwWF*2`Rx%)-n+>tDen(P9-ae+_no!}flEPKUBcUosc<Cm
zk!CbJ+j}kt1yWjFu2A4PYQU1Ei@_2xrJbPD?n3^(WA}O$S@MHYkZ;q|iR0`($wmWR
zS0mG4tn%AgMccYVyKPx#)lsC;;>YDv_qeHP!mJ^ltvQkHsX34RhCpOKBNqGg)LBaB
z=mxm-lN06gOGrj1FTcv>ibDe?E&?t55|nr)K}Se$*7XY}25lN_bpbhxV~Kj34WfDc
zUazReIO;{TE)~qi&rhW?3?|Cd(G?!&eU$6nrmvR*|C)ch-?w<I*jbO8JBE6S<V9Y>
zlRp9XQ#MeO4_QQTT={dy5pt0?`?4gG1^)F?aT8xVF(zz<@_Uo<P>`k?w~U)@Rw1zp
zwpt!em(kLsQA=!>>jpmhdj-2Ud_U<TXV2<>ck1?4FZ1ep{%0l>{&OLt1Hi-}Nva<n
zcinG%49R}Se%t4CsWwir4wyRl?BZ?yg!8rE1126QXxg|{E>!TT)dG(_NL&2`zx_Ws
zSWDa6k~3fHJ@19<>n8Jjw_sB|j#G&qQQ0{-`f>>CG9@BYjj^cY03N{wFyHVye>&*i
z?KYwIo|F(D49M^P**6VF=HAa*P29g7fsP1KBhuK|2uxN|!dD<W-=D2oQ0{;hABzPy
z(4inoK*`w#dTB_!mtPJoF6X930IVHYO5|S|=kYj_nQzk-Uu9m#>RH8v$5>PjrS;W8
z6Y)4vgBY#`Ao@~s!$kG;Hi1dhcFOTD)r!1HgjWZoE0gUn=>WHp>!auElwO}NY-j-R
zM$tBh!SHR;q-3+FiUV>&M9}d4Ku@9|o$K^`pY{Ov@OIJ{L=?qgU{VT(22d??P&^Gd
z&9UJj4^w0D`DW(U`n}EW&sX8x>T`U~mw*4JKdjugU0!kvCpnnN)$TB5!w<GDWRFXh
z1-0U&?^&+|DmNHz+stuD8G6ehf-|qIhDDZX(n8YqME|WK{GP62xEu;R6@BSL&MIwM
zQlLQCGcn<?TZd1dTVB38D$VU4&&1MO+qPfY=5<ogPsQpEzB#z#eoG*i;jnH&y6^e3
zvU1Z|Y8=`yxgn%om7+|kK(En)e7^j8oZ9vC8Nm~5&TrEP&w#`Kc`}<1kAHD%>&t0x
z%|j0YokrB)V4GBK2qL1n624owq!cq8mO`n@uXihiw~Z;I6~#E^CR?HXpqa2>N^9-e
z*ZJY|`b9p(Qt8sq%d?p!c@)EHP0dxk5dsmRiUpf~N4m~rf2z?R^X0LP$Y%ZDmEk60
zGG@RWuJaEM*y6cxVQammwAv(GrQen(>FapTcN|V;U=kk{Ixw1}(_?DT`z=ktq@l3-
z#yxw~vSO*>Ke<1obhbf+w)y=7A?Yyu8j8t>b5Bb!oef_&>XdEh&GqC)EKMGdg6<Kg
z=QqENe_1$aYlZi}mDRWRkN=r*WYWM&tth`RTx@uu9pNWaIDcB!7@B3qkB_CYv#Ufs
zeumsrLTz!A>R^h$eseH2rO;rPS0IRz1W-O2RhzH-9R9INo&X@o_c}3`Gg}^c93_?4
z@Wiu2w{ZGWTUiu2JTiFOe>n>#!^oad?cA|NXKZ8y1k0!vp5+2fTCoz(ojh9}il@X6
ze^itxFAc{Gogd~Hyc|4{MAfC*g_F3u1aFivlk)=qM(#WD1!}1@qd6-qY=pLU<_;ze
zL-p~|5!ndXAFid+SC6G-upy8o15$AWk!)Vjh;7a<K2)QdNIfW|hB+0r?L;8nH<_Ef
z?w7=p-f1Sz&aD54!K^@{#pTk;oBL$h`Q#+<qnL%in@^w>D5<Cb<XGfp4PD)yzn6mT
zkPtTDfjw<@GtRF*v(^(oFPesSV>-!#Ogk8<leMapc)$R?5&VUeo%vh7VtV?<KpX=o
z=}c>=yj>7!_n~=KF0>a>Qv=EV1^;rkhU=rFspFqPq@FW-C2Hwnr6IZ_AH>jsl5xh6
zC^tlHHd7J(f~eYSLfrOxEx(IW7WvV#!7?O<;XrdZw3yX%Z~?><NlwS3+|AF59W`(M
zc!mUuwKON(jRO*X)8>Lx&FTavXf>gAwnAocJTwPVoc)YjvmFpG1(f%{<OR0bgwiK%
zHZz)O-DN*Kw4KEO`?MQ=E9VLTvXrJF(%8Sq;#SZlY@av0z+=YTOZlB`N8eQ%yRAmO
z_TkL)!#)(v_IC(vNbx|XaFO{kEugV_%xV5&q!LoAYriF~Y<Fg3<rT}`r_x{yiH3tf
zi3*I8x)HR8^2AbYLNfdGm%^*vE;^js_OBX$nEj4sb;X8rqG_f#`z4kDx*^X#7}eL8
zm3v44DyEd2oIILB*9H)X`)lM{h+~_+plCP05QmMCCHoLkF1Qenj^Q~91;aB>2fRDb
z0=3PXqreIxgv)baIVs1Pk+o}Z5HHP}7v=7C@gGBZ8xpbx0||KLv1)lv08^-oA%`>6
zLPy|$85(O||2GFTBcYxN1v<<N5zaq_1D?y$s!l>g*_%)X8znRP%om-D%}E2FRR#*7
zV0jmMC01N~Da&!TcXF)t>(MN9A(YSy$i<pRd(1Fw_O@3P8q!=PTiC<Vd3;bcJBuSW
z5$C4h%PE~j%ta&wy)5U~QQ+(=09Q#f5TO-sgE|)AJZ$3Xe$5z#{WJOFf^**ommy20
zg|_hBY|(S;p0(Y@Q-NWv&~>O=a@F4nw;siF<(&p$jP{G<aZF)jl2$T@TSApx+56ku
z{d=twoc4wOLo43%D{Wcn+vPxh$P}&ra_8nQtFNc?r7PUp&v}y!M>APQO!wSG9{1A5
zs~e*j|LykW#BOJf3;ub(Gy15D4)=PS4=%+SU|?6#aGb(d+LP&(x^Nz(*8cR%ynqQu
zJcGx;HGsJH@A$aSVSebAp^Mw49o{x>OIKHJ$yHep*%#{Ra<)Ji`BxlSNomd6)#9bt
z6i1x0y!<JS2;n;P29<U!KwFrf|FvA0*<_t9sbdj>R{fG>q^(;iGr_G;Ny$!U1OdYl
z4JUTd5Ol+1W0P0F;-y5&`-}yUfF&S%H@_b`w?<h!ULr$lZt8Cpx4G@PEboudjfQ^#
zE(RGxi#TvjTdq`RS99;i2a-lmnk)?WI>eQu=i0{fbYHr>-yU-Px5+zm$DDIpfx0OB
zb<MP8GM%rr?qm*Q-;95ZR{3K`sKsVg+Y3*&wz!z3f`ZCH^?VFBZmt8%Zu9MtQDc8B
zV<ut#M!!e@`$4T%vN+$<@_0?$lyu)vXdXLuE?X<;t0N#2ZZWf>r)jTu+O$_L6(CaE
z?`Phh?pF7Ei*M{$+;yyf>Oc(;Ev&A-Q15zH?Y{!pY1Bdq0Y&hBG16r|@{B5fyZj}~
zbGV{XoIw)4ZfLd-2s8K>Q4#q*ew9K;g=AGGSs<rSGAan%9Ik<fi47^?EDB1&q-Lbg
zF2J}8Mv*KC%nPs4qx)1F!Wg_ZQyy*Su~BpwF*?$Qj8fk|yjXUq<z_DX-O>NuoIdy6
z$zP9o<a!iD4)h5DNmDnPYZGtpda851@7=5n-%F}~xO;E^yEwp%fg5?9Mufm5#g#>x
zFMtNdqtj{d7bg?>|9SyR(+TNd9Jryj&G73M1f8o)d%-VvPnv~%VEc8T`&c41-HAgN
zcqhzqh>7{T?sV?<R@z8c0EeH9xB~lROKvYXkRwA!4bOC2Fs=detX`#G6V>9B<(C;d
zv@S0CIPl;UoP~QM{!Y52?xz&IhxF2GrL93_b&d<92!A#Ip9cLer$s#2N^Cdw!4f=M
z1BbUeGMS^Pi`4m8#spd_X)4^&FR;lUL-hhIPuyixN`vpAFrr>b{;T_WbJR8=wf57_
z?sxO+78^dln(tkYG5~V#H<uvG)mWWlZWpoKREXbPfWCAp_@OyXYvCKJJ4rBL!mC?4
zP*ItLeVFi01ruWlAR{FSvmk#u41yA+)DclGC=SAuhUGCo(#Hb-M4*#l9g*je7k@bN
zIj1PQSx=j0@Y=c!#mkJjM+-@`3yu4Xtxli&x2UE|U&Gwc3hC{@d2K3A24@20fgtiw
zHrDfrRo91XvD)}!qy&yg6+x_;sbPae+cTehs&oZN_Vk|%YjIVFi3aMpIYx_>Q6zsu
zLW}b#%SmN?UQ$tH%%UlBf5X#yL(ts4CFqE|3G=K(T<ZOzxyQImT5^=j=8=)h>2S8`
zT2|*rjoMVQGMCnVj_^9NZ%27d(4XG&ZDB3w!}xvrd(8q3%%+Bi27>l2Kkar$_8ZX^
z|IG1{nO8tMWF8xuZcIB;JohVqm2SLEp}gTZzGR{$Sws~O3xpnPYu{%xsiV8(cET=j
znt8GrfMmh^ldU@La6VaB^#X<%o~IKVE31tBUXBp2<GCC-m~Gp;eIE6ci0iflEz@P=
z%uIAEP~stYD+WrdNI!^=pmPMiLc>k*N5;P1<ILCBG);332{j=kF`K57!)R*q^1zDY
z6J>{0WpvNs$7@U0D;}!2O<5x;5H8Tf2z|0lzJ*2<aT6z90LEOu0Xpjw!b5(q@sDfH
z9}tnHc#%%4h*@oK_k_{Qd6VPD(!UxqjziV0WS@b(I0i)KDq=YZVt!TaK(^wzYh~*8
ziRqxG(Q(v~VwVMPgoB=5hq;f-{D{-B{Nz@(QAl8Wnr#dX0uF1EN|$SBgJ<b>;0n-S
zK){t^&}GByj<VCLSj+(>WBbe1Hc+oguJ|viLnr8x1^blvAjfCQg!vF!rNZifQY*d3
z?aZ<#cSFddqi<p*NN+6?Q}8ZwI^a>~EpL&>`5KgA!}WszBJ6Tbez+fBA9w?~UsYBm
zsFGnn#n|{Fq~J=7_x^zC0+4totytp{MQQz4M@qr%CQ;gK_EY>$SKbb5sbrTfG$2I9
z4j4L9D{swa^!K#aw8pKE-$c;Yz@FN?gatrpI1rSC31Yai9A!7=<;BW@D}Eji8+hD@
zL?4;2?ExDbw!OjsD=7ibY$h3!7*i(85BdWj@8B?4@3O7362D5#s`jrvtbFh*UKsds
zdY}39s%rP1zz`5XkXJmXg@KOV+{8XWr>3hrKa2J;WF{#rHNg30;v^|7T5t$2sbyL)
zB0@SN^CH1LZ5(Gxh&#JIhfqNRI{}0H-;ZD3Hx}HaEMEF~n=J2eTjqeQg{8A2x&|sR
zZ?E`arYfbw3|IhR;O32g<`jB*%KibeW8*!Yk5&7$GBdl{LzAUECY%Df9n0MC=E>r;
zF~R}{*?!B$bczI5eSqszL#p~41i+lO=8+&i$M^A%R_CChozhBaiY2(JAJIM}Ko2C<
zmtW!=!?P1f)!EQa40EH#7Y6=W)E5+w`YCjT8~yCv%eiFTG&V*Hlp@m3(&p4<<4MB<
z`LlQc#7^f0o)eNTuvrUuDv(9vZ*|%~Q!B_w=^O>Is<UQ2+HH*w__1TK*T=y5U*OQl
zest3a0Q~zy=lV&DvK(a%?$S6zOcPa&ch}tSmnkx*0p!b4il@=VkICC5sV1q@yZr3a
zxZJ*lw#}p4H79rCZ9YktRvfk8@|7oqKAlrNoKu@ab>2ha+=!sKEJCA_i|G|j=OF*B
z8W7M7`Q^iOK#sjN(9bCmWg8MtToPWh1UO9MlE}#?-e(!^H30>;;9ZvVhUQfp-pbE8
z!N-F#VmnM56ZG<X(481D2D-2ybMuTd4FR<Za#B(>f(Fzn^9IO53uEKI<0K%gU{n)8
z!{SrVr0IKV2IN|hn{JsZzvO>P??t5pNb{5zg%aHzapqZs8A))3ND>k#-@+Rw%W}kQ
zRBr2-3yKDME4+eePP<rOczPmQ!XmiVl}$Ao#&9##sc!%Ntr<3EPp{8HY#Ti*&|ICA
zoTuCnq9i~UE1xIMbphD1{BWUtJy9m<xaEMry?I^JcasFDdTYSh8j_r|TO;lP+zt*j
zFu<GvEM<no|9GeN9D6mfUjZZ$6>3EHK*EYCp2<dk_n9jWJS52g3HS$ISOWl+ov+`S
zFhi{s{O0)`>b&pFbpAk?NzVXF2sNxug)KQwZMR!Oyfh|c!MyP|G>-+XoK>UNsVmRz
zqIjWH@y=^rHWTWLMsFUaz_sQVY9V1vd95}2)O7<Qo~oURsqBUP=ca%s<vL1rY?<ph
zZn}zPM$*u-|L;}m9m4~h5F$nRQ-^u+tRj!!D6@Qz?jX^pBw-VThdG?NMfCI()(|Ib
zoA>rHk*Be~K5hyoEbxbxn~@}*ViqUe{%yp!@R%r>J?i1B{RT6TcX>z!dr0<`sXPax
zq-fc6U0*v!K&8biMO36u{#Z3#rC;%|%%&%rJklfxnrxV$p-!Iw{4BV{i+(K#AYTA*
z7ckX-otP{r#1?^6diVMHLWR=+(QQET>x(sO#`ey_0152Oo}-Wym4c`U;S2tK8Jo23
z3$2F}dId@N>%{jShGFWI%4{-F+vk`l`1;Rx#3=L~?CBoD<kZx9HP!KJd02MZ-*JFy
zT+7GZ`%Cf_MG+<BAE|j}Nk0eyY0@W9gsRNjZ<o`2C@z>-^4f?9IywPa=9M!W5olS{
z&;TO$0<yGGt}3<E^mI1Xxk*QQDwsVsTvq|;=r-t{4@i<<J~1r9yn{MlFsSm2En|Xx
zq>6|W1eNj)O@Z4l7q_L!Qw1p%WUv8dKoKwMIe+*DrDh}T-cGbSer4f+1q};}m$Nha
zL~&q7WDR&iyap73V8nk!0r2o3OK;+oKthWn3h0Daz{&#NiNP_|)zyXd4p>3IhyIH-
zz?p2%pPZODIXiO&*IgUz-?qQKcisE<udiJc`Ll>5%lApq;~UDPe@Ioah6(<i&J!g~
zhzl#LAvNF&NUeMI>bYoar3Si?&n4?H&>mWAES2kuajVl{k2k;@A@0+oa>YWM1`LzT
zfe+0%0M;Y*)r%YQKNm~9V#Rs!YwV1wVn3JRc&4fdGTE>N&?w}xj@BMCW{r*+WWbCW
zU<Um|O-UJBppuuuONa#Y*2$k32vw*LH*dFoMTtA<={36~ttxnA>EhS$0L$DHzZZe}
zpPs;Q`fWPwbExE;B5x~6^CgNZOTIjQV62yFMI&V3H&Rl#b0h@#Tc`Dysj3%WnD}w$
zsVT9<q9D|l<dm>39MoFX-DZmAYth3s&gOz?_lHA3-MUoR5o;E<taz$akdF<O4f{Vj
zN&pa00vvzv*l6=YskFI(#}5`@WfZ@h-re_Mfenc|2|js1bacEHzHg&qO_U-)7D{$)
zO2mmG-;Ma!a}^J~Re_|25FobATjCHBqB>eY^^RJzpEz@0s)4u+Wi#|b{Lw!ws}fD8
zMfJUtg^JaOIAQoQVDhJElbSzQ^WVHmKSaynDm9bUo@?8w>kF_W#T~o}cV)%LmoJ{o
zTgvr=ey`O2C7@0&)~PQfszuq!FZVl8_0?5_4yJj&=<VZse&NoxD~}EP>fgV}Yp2nA
z88J7yvZ#-;z35)VU$b8;K6|ZUP+@h*AaaJBha)ek#tO8Q&<R1nVBGfgRpYN@IH2w(
z<10__?)#tsIfMG3v7w3I2;Tt5;1*6$YmrYf0zp+#-jN*R*00H$Ba??H{wYDa^Yv{Z
z4?=E#orHj2IzY{^J+*|+d8+r5LkJxZ1qRB^2q8g?LJuBtyb9>f%E@v8&(JhrnHt?-
zIUT)`@9`%t2N*rupRXo|cD-ySP5pv@aj=~P52<I5CzUcO_?iWuB*`FZiTWT#{&B#t
z-z(iU;_xd~AEeCd4l)`Qi~6<0I5R$ikqk`;PwA>nT!#?_00BZX$1p&I4r3R)0iJ)B
ze`b5*8EHzoWuxo>%^Rq7;^RwVfYzH09~cUpKJZ_Q5)W5nQgMx0kKG4;B-ex=lJ;8)
z*IC(1Z#i3Nr#jjmq1Zg3wilSw1tm^Ri74TzyCN4)6(>?Ar24@Sj!$nF_S=%&Q`N2}
zJm6vD%I5qN>c{@C!hgIh-eP?EZg1}}6`**E5!^iyzt5PW_szD-zAVvnS!WK7`2HY(
z^+d^V5ywLfu#BRDh6un}^FHdqWQOqzS5g$!PNH9g&#==iR~jag`QqF;SjK6vWt5Es
z5t|F4wzLjd;Sx0bJv01d&;ZP;FCcvH@R-~?^TI{74K*jQTJfpmFb$K#F^XRF>OfT1
z%ohNpHJ7V(oNhPq6P&d7;#CaH#&M;0x6sVT5VP5qzSKPl+9eE>yvQeF(;EM{#6y06
zT2U~1NA=t;AVxs?w24ZyOCF@ECtQyDfBVu`Q4#kzLqJIB;~4;9TbDJJmne>WBvt$m
z@0(q&vIrl|5D%qxXSj+~gMSgeb*Iwl#9Tk)9C~iLXi#Zv%9!X-Ij0A!bI{0?5DhkG
zM?dj@zGz9odZYk~Z~yXwA40-qJ5ekGSntzET~Qm<KySj4@3+#C0fTVd+&z~pADZTA
zJ=to6S8+HOhQa)=1mQdsQ56keuHEbsCGUOtvV?uw6tGmaxxFZpz;8@!4rN}L+9IV*
z|GDSm=14d}x!3Vo0b*11i0iN5&qLgojQ&+KWYD-_QmQ;BndnqDTv0g70|<oMB2P0K
z8<&?Fb@cr!LF?4CXkAgnC5t>GswiqV!)30S88(GZu>;t~g}(o+LC2R}6tBg_Ya~Md
z)*v(utu!gxqJ~jsxr`}S=1GyTWCj>EQR9s#y7Hl4XcZ)@m(sBkH2G+jc_NLol$b~*
zSzAslTuU@viN*zJwRl5ijAy2LxHH1kJjwzocKqyxs`3K&5rNAw@M;D7KljmL>GJgJ
z0`4_cJ|mnGg7SP~v{*)`Nt#JoD!))^N)!9q8!>HZ%AsrY3(!nR+^|kd73Y(~2FEBO
zBy<1I1OGkv5b3KZ6am5~YVGrb_)2!W95};9t+ax$43=B`TQ91vJr7)NUy;g0(1aFZ
z$96u6UoOHdL6gb~voQ>m18sa+d#IYWE=0|h$~kD)S5EN%dI6S2u2YWj%>P}lBv%T<
z*_eFros-Z>m1OGhXo~a$&R9O2@NBKZfLBEqn%Uo!^u7k(1rv3`A72m%52359!K%0f
zq42B~=qK;QGup^tseKL60J`oWQ5kea*#s7Jt?y8Dh0*c|P|=#4pJfCgLOeS6$Z%o-
zy}@A(NI9Ogq|`lh(kbY{APbr(C_H4LZmGHzs|vFjcM39n=D@B4Pxi$0v{Lh`SQ6NZ
z8RmRRrDw|VEEfKLmh2E7FFT3w7Eymbv}oKo?XN8aC^Whsf(}_Qug6G;!QxQkB}%}f
z2QH-sz`*>4rpTntq-HB=kRKw#Vt9nJ#FyUU7>-YADebk~Qy#Lomd!HsnB>U|NmEfJ
z5^#a4p53fveM|O?Ju`T4D>BR;1xS}k^R@xJaD4{N8sd^Wd8mbB2^0L3Mq5sx9W3N~
z|3v*Aag;!ZNy}URo#gGRf8CI-Wt+y2a>=qZw?%uLC%R-n8L}-c3hZ3u{NHL!Kn2EY
zy#&q;{V0{xTXTwQzjmUKt57!BDC2!hR~x{|!@c2x$=EzQ2v6&6=8he?U{Dcal(q?D
zSGRwrj_Wg;n3^IWA;pWv<^98xvdvZEbE>A7igNlxy??87p~4>?{uWMQK5q1U=w6p0
zNm97{ORGm(9f095%{mkn1<L!2;->|J0h?2YL25wY(YJuf8Wn2k!iBPVOAL6W?>g+1
zpv%vq+_w!>$8F}%IrE$(4Vh-uMVjIwPzw2)sm4#s?&d4I_dAZQyo3r_)bUB;RSU+(
z#+r0}BO~bX!b{d__EUL}Xn0U`qzU&n-<QqOfqsV4q@#yfvGl=QUDeU?n3!OaTx!yR
z2-AYj;9dAp;_k3%ykTOiDn)q+CLOxgKWBVqPV;nX0KzB~hwd+fczC5@%s9baC0{u0
z&TE@GyGPMaFnlW}xQ&J9xN0`?LFsvND(4gxqJfD>6ve?qV6mUJOCn>Ud(FM$h2bP4
zS`0Wv<x6L`?ZGY0c{yZhWGNEYOKNxrzCm%CJBc@qn<jejP@XRbqBf?{0?m_dv-EkE
z0R!6A;ex^~Gz#>ga(`n123cg3MTzI&U4}w(#%X5r!@r0b$XDJ>$)bo_zGqpW|9hBl
z`>wtQu})hydUkB=UGw`#*axd!x<szsd$dbs7_o-l-g6C7-LuH-&hBDewX9zTfYeN0
z{(wM0u!IkRiGRVDEB=nh?07o}Uo}zoUFNl6GHDQR4zU^aR4vnF%Amd`3(i)!8%y8V
zJ&w2*<yA$zw9l3mS3*1_T&GCq8e#g(Nuv|t=(IjB!(^hVXPsx%bFd(7mh^TMnsUe2
z0JZ$D#%qaU!2;)_>6I)i6oQ;PJEaAcGdPr7kQz;HV9KaCWn17NEk1DRwt(kgD49KW
z_RQ|HHN(5ck6|Wo20e9>TvbWBx*Dpr4MSr+A%U%%{QA?)wQU{p6YJTwE^kc6(!7-Q
z!@M3oR!cne848;+<`RsbA7FvZ;?-S`n6L1yZ4Qfz1p2tPGTv(<Zuu5X8&iCfpII?G
znqxuv-kSAw62GJVwVCyMvk>@I?{y^QP<cxfKlh)glr_=OxKxopiicO+0kky#;X1&j
zU^t=8t03{?VidNVpr@m(gyU{_{bTs#xKcxg9k0>-xcCTT=PlXNWf{Bsg=C_|D<;2H
zI&)>O+l(J(i}{yWl=guzj9$j|7>A5o;T+e(-}mRp6n~#>zexP5bLqZT(-^KpM)Hbt
z#!}(%YPG8y<R*e|)6nvF242gQOltcvP!J{~>GYH%A}VEARHi7u80mBWDQNu%AMgpg
zn!#uS)hhmegy1Qmfn6?M1&{=^s?@4d6a>l0H=Mv2EgDAmnt1d@Rt~3#_XL?3Xf-sD
zPYp}C7@`jIC-76cP3wD_=gwTc$k-F~b8n<AX+;9naAr}8FxV>w44U`;0ob}bNk6mG
zUY)KY@xt1c7Vu8$%iyEaQ{-*a%xjb^KM}wP@vLb~Ry$cxvL45Gsaa<tALo`*3DPho
zsr5B6Gi5+R!f|va!@LPs%Oihkhd)Kp5{iyR>MV~54yf5A|MaQ}o-}Z$&f+9^^jS0e
z*MU?Y*mLR>fO|=M$|ZN_*tT0l559!)W~&*o?rVtCB9@X?k`Z{2O8&WY*1wrykNXL0
zvE$&?mwV^gF(*BZl@)ofsRguD{oK@bmBLq#unCSR4HdPtnhf_MEM`lfV%i;cpTl=4
zS5{Xgj}6()05|FhkY%!slLb)0jcPS;agU|`kSaYoIj#T{0<%4LGbJkpiRmcEAF$sS
z??hiZ!)gYVc2Wj}P0<K8VQv}+XM%;5x4-3MoaUJz{`Zx{k%?B#SngteSEBCFHFE=B
zo*5gH1zKEC_=rdwgHb}=O;_&bn<Ce|)Dg_-vYiHQK?$h2x8gy4<4%Z?WCJrdn(|9C
zouOub%rQ4r6Q^0ZEy?kR$LK<QOpNV`wSckZZrdKiJ9|FWuV25s-Iqw(ub1FphWvMS
zdbhXZTS$us_niNsr^FyWh-s^Eas#H#W*%SM!zVaQe!#D6@3gbk1EvQ=?`?IzJDE+o
zxVosRs#XJTY~%i!>1lb5#9Tc^6&3JJR<rIia%`~N1eVv3MC|TTJrxz;J`RAm^nmrH
zuBf<W&%KSDn3xHt3<SZs>8Vv~)|*f702z=>nJC`Qwzl;6CHhx@H@4Ar{m;$8WbM=X
zPhGozwWIdr!3lO$Yy8T9)=XM|9A*E2Sq+_P+Oo92QkI@dNiPh&Xw!`Bnnb4cIi9-2
zkRS|#R{T{HVs5O0FJ(UDou;MN{6g%PPRcsjVHTB?tL$e99IXUK9nEf=TRd+msNjya
z67!+E3M{3y+U2vdoLyv-8~1vl7CzJZ;ca_QbA_M;mC9u?3EUT2h}YD_VbonylwXq~
zf)y&qYdgQ*bAE^MH{=mtw3_9*+m8;;SER_LDbCwB!<?@oUr|w0Ki)U%w!5@}&|aQu
z&Sul6j+>I=mzS6OI<KZcHCt=7nTn~Jc*w}Cnro25VU78`PD8~K2-q+lnoVX*uP#El
z&Ily9C>y`OE>8+P^oJ*!!RT$-gNG7V=@Om!2hl>@-r}$jdKlwjFHQ2l6}7eD_0wGO
zsUn3~Suymu?E{wLlPjT}TKB62${cS?Kosn>Kk?&_wWh25{d!1SO>SRN*K_j+5v`Pw
z5o!F-jEry|KpMMUAO?s|@BPmA_VzX(_c=0g@t`0f3H^4$fd^uKVIgF!Z2pMQ=ky9l
zLYQCN^lyd}>=(Eh1I(d-m~mxw1ric6wOWITm3MA>8pRFA7<mdtx>M-sBTUa`DKBn?
z>LYIowh#{~r%~yZ;<_vyNMq(Cf%&$V(J?m@AC^Y8?Itp|mtYO?lx7ZsaFspg!_S16
z03d~x;-9p0+Yz~!zjuFvk$bP6%`Uo}UmcA^_*+YqDx$@WBn4Sf{nPLk_GEq-vf_}Y
z7Abf0Q_|mv7X<)GGKJfhb8_<7%#PM6@#YEy-tWtlf7-l!pX=52-q!KZ#rUosMMPDA
z6wdd_k2f)^3JyiLlay!-jN%~Dc~y)_8^6lJ!jlI-_Zv4q_t8Dqv!$yj_R|9tvkBeD
z;YnYx1U?!Tr&UrUY=n^Rcu`(Vx-2}mC>P`Yv~(HpFCm_QPm@8n-TrW^Ck#TLS2mbg
zk=a$1M!jmo`{RwnZtZdQr1}F$^LqrmZYA>Bko&2UlVh4JK=iMKxVY(f#<<1cF$^1b
z_W8niCS$wl*~%Rrdls+9jDU-NUROm04H=zO#@Ffj_?CIdRWl|_BbFFHoA+-!<p*T}
z;@(1J{?797QpJezWa8zUtihv)l6OkA;*kr|m&Tp*b%djhTGRN>?(;i=691K{FeYn5
z)6+cCD-{;_zU#8Hkbyk_xs;yPIct4;Y>ZKxYF-1`nPh7VVGntSwOYy=Zg4)VeHxEN
zoGu<sHgFd}KehYr-cMaZw{LiTB(AODo6huS95-62p<`jOb2R&2?dgWjKG}7?j4KGN
z`n<@4$!2rdEo7*U`aYd3Qbky|esq@4Qh2Q87!4`p^0~p3ybm<H&Hd<PcRL@Om;f?H
zVtrncu>e$rTaM>73LqYNEJTto``zw(hRM03_x>Eqp82qxkHpuaS-t4<IE{ryp^`2;
zSfOqQPXBKNL&kR9cB$jw%ME4(-^W^Faj{rnV4ot(T$k+`?Bj{!AGK=T`-wIppNqE5
zpN1djA1~*nxfiD5@6R07XnNRpD{P}OG7+n*JY7qT&84MCK`$Y975kH!2vwWysz_E)
zZlIF9`jI_4QzSQ-A$_AQKjdRatL8JaTytuhl}qG-a~}%HeGxc<?N-{4`mfOX`b5&x
zHEGm-KYDKRH?R6!cJ~1B213Jli`5bpP`1`Urd-MWOfjFAD~r)FWP7^C!tWoM*@-Ni
z$Vth?Wo7O_W&!Y1sCEK)h9&{?nzxCSB}D)PJuPj+vNa%w<aND;j-sWZ@!J`ud^lgO
zw|;VLIeW;|`=GA0pyS*rl!yVaViP%hndy<_fbp_n^~}bmig9gy{jF`Y6P5_GGOVk6
zJtPEhH;JIh>bryX{KI3iL>uNGEz5Zl`Sh4qrk#!G386Md0KrRFV#(ylfv6R7((V}6
z$Aua(yK}JP9=H$O5VS>Ipczjr@8TM&OdD_k2^=`A$zuw@gb^r7qP`Ge)%IP-6!l1h
zmw?P$Hrgr?a;5dwoWHHx#y%Rfe&;mFxYNjYk%sWL_%`f&Sv-%EjR@qZ*f;MFMz5|C
z`s&Y*6hA$+78W)&vD?W9zP7KK<!rd#EMzxtyt5P+<hZ{Yq|E^!N~;A{(?PC!Q&zUd
z-rvo8{?R6T#lVPsphsk=nb)4k+$s$g)nnj#pj1JR)8U%7GIiNFK$`#QmL|>ldF-ih
zNPg4Cdd89s5PSmOAf~Y#wzqqm>P6iqV-U`rxL{g3n%~u3cr{}ai@JVTTIx@hIRb7A
zK<I&8nO)EYbpsDGGbkZWguiT;#|<J&f@a~Ff?Z&v*KXBARbk;I{|z?n(!XIg;Ov7`
zcze!uO-W6z)TvFY`KdG+<!1W+Y~oBTUn){Di`F?eH@DX5GWuaY^7<MOO5{;g)Byk9
z%UF*W9ix>GpA@B}pya@`280um{ykcp*L@!7dgtxuH#0T0^}E+xD$?_NyUXTrV+S&M
z0D+zXulqr1t_Nh&Emp3duDUiHCUzyqm5)6R4vr$Q<L%y-D{sqvnk&xj*X}_O|5UbT
z)dUqdIywUBsp&>9cK{b8R0If^oLz;3`!XtvDox_28gZ{#xw0c?phSsr!iT~KucV=0
z=>0VZ7LFDJ1y(OWPfCGgK`zL(Uw1+>S?t#j!ASH;3kpMa^#AJxtev1Y$x(d}kw^oJ
zB~q)^n@pJmajX|$pC|Z&S14qtrk1Of>(IMNXRSzs4e?@7CzoY1dz`Y2`<dGQMMli~
zZpAx&G2;Drg%yc44yD(A)yYOzb(ZVX)YevtHOF|kuUtAQ;_stJ^nUK9J2LjStf~z*
z0>`>UzBHRL|9ZSx;7cfv-Fc<k<_olG(BiE{B2bs8ZB9WuW%IdR^$u`j{~aDS#XUYf
zhKyWaS(x6uxXV$mUeDt4IWCq_r;y9~qE~;yVcYXJmVdbzq4NMFhr7?35F0<D>GkEF
z2omSa56(>vI~38cYQf84vqn5nq|fVtAYglve-ltdOU&L@Y2STZP;P(|nAVs3>DRQB
z#npgCv6LNP>AC-DY@{pjp^&98XZv{JXl?b7eXVY$j(xeA<o7zQ9m?@LZv|qQ0OwDd
z)TV4ZVN+=(ZORhew{KrNi49R>fjM$7)E}n<dBuavVH0ChdhMpuodLLx4j;R&H#IM9
zyfq3yPQG%=<wRXU4U`Z}PQXGr@4x!1t-oKX>EqLJiHnc#%z0XGHg0QWLw@?Dk$^rM
z%n#L|)}4sfA^_=kS1c8H`ZK||jC{lPU3EMcJ4JI<>%pr^>J4;xm+uZGa1uI&U+JZa
zFrW*dMW2Y#aTRbJ*2y%~r1jT@4`P347Oj*|p=42G@u6p!@}wwdCtdI6kyo-XeKv}T
z!|Z$45C|N((K<wo%qpIgG<7$|v<j)<V(ypE93wsIwcuYW8E9&n@A_$Q7WrpuwNuYz
zrC<ca!HnPvaCA)o9U4b90HPT3d#~=Ip{6Y>qk5U%eB<$}&03?i?+4C{R#RbB@sMT1
zS|B09%*@P!^%!_2M)WFs%yPpQkp`vsl+@kMf)8@%PFz^b<U4%dn)<foincCMG{%mc
z5fBmg4)%a-8V*A~2Ry@{Y{%#4CLuQLJc)_8YQ{h*foAoKmk{^VQrqj5a)q2gZS$Tf
zJqn0ksFg`cNl72yAAhhj-2lRufHb~FEd*^-dwt|vXCWa2AzxoLwG<({%gOoa4Z>RX
zz#dK@7Ij4?6);KcbP!Fk`}G6>Udg9<4{LLxT3C1Uk4@2dU^GY4Ky2(=ep)YClD3C_
zk0D)|12IQF{~*eQie=-N(YFg1S0hjAttmEML0qN=Bg;B&0{)U=!9Q!LDoIkZt5_0<
zi3E%0@cF?@QsJU<A+kMsf7N2Zv}yl2ilI2EAaKvg;=MC=gjTA6W<t_nc7X0XW*Zn`
zklSd|3bDF?;O#gwvw_=Dl(%G-;gj7PcXK<s>smf{940gc?A1;OW4w;HMWYbUjW>Ve
z6B#-$lcvqFvGIS|nS0+<34|tfIo#YglqYtt>UKI3yl!1yh5=cTZwfq_+AGi!xS3kC
z3)4WxnS3_$(Ik;CW+55v((O^=WL8Hvwp9J_ZR+NyFVJ^maZy2og^^QZR|ZMAy_Hl&
zs|u6#cJO7v*u?Y|IM9(05d^L;-%RVnO>AWMqd7J`i6B95grGoI@lUz7W&Hf~gnWB6
zRH^U!VtIEQ+ctd<vOnDumlJNACbINN;RK*-8|QE45fPEAV6qObu85C&!1KcB&=1eO
z=|mtQVKWAJB(+TGMn*<*ea^Wq7w_&6fYO>hecb;}Vz!^fbnIuB)4_OPs^7mNsYD>f
zPReliW!cD2PtR3eKI;2EeDxwB_SPkVBtcPRg&aUhZa>zH$gQ}cKq<i5V<v&H?o?;a
z&QnTgpq3PmG%FyVnPLtWrkNFrq>eOUnjA*RikWGN{ybvC%qNY}7H}@Jy#{8A^>cf8
zK1LbdG2VY`)S(a7q}SHu36{=7#4sJ+J$ZPDk{CBm(!$lz!9-|k=akZoE+%7i%jl^Y
zQ_+N^){bS0cP}q&-W<iZ+-p`$t0k%bOe>^H?kWNTw!@F=B_meMx{t7<Q=+h~caK#^
z&sS?8*Q|7HCn7K+U!I}#jeXwMe~nyAp-~FrFwQY_JhI+I_5b-}l~^iUSzi9Ds!iIv
zyyAkLy;`eLrFsz${uwLB%W<Ldh$+Rm-*9+z+~gOigU8c#BU?pEs}7JiLs8NV?9W(q
z8CcAV+kKSMG7-&uuYw+$QYK={ER(#jcY<xxTD2NgiXOVUwp&gF7jv6cQ~>bP2{%fo
z!}1BK^8*&%oHZjq-=Jo4d08`&auL}TeBTFg42mE?ts*kTGZUD4A^`7>33n*V-R}SK
z^p;^&c5T<Tbc3XTbazX)w3O1_-O`P8BOo1%Qba(I?hufWSai2^cf&im?(g~jD%*l}
zp0kc)jxlzpku8Y-)aVjoph-HB4G-~u+wI88$_f+;9Y`t7s|@@H{55s<i^Qkh(i{^2
zPKt!JFIM?v=anPuvIgx8QI2?q-2y^+``y9O<-wxs$!~-lWm#<w*D03kyWx2!?usjq
z!_fL_%MrT$?V}@h1_l6>8Abhq_iFyYqcmlUn=CB3@7OAAiZRvy+ZS6%37}lzSh#)=
zW-jQ~4LT;Ky$ev|G(t{dz&RWGl85nl5miHD;;!oQuCgq3num=WMbCfWDI#)dBsz{o
zc0P}rPPpw^^`}51bF1EonQ69+^phyIT5LDt2F>igYgG0957K$a!*R9B5$~HDS>+!k
zI`y^}?14{0RDvj#BPVrqc6VjWtVK4S!-antiM#V<q*p444e`n?5pPEfcSStezMrh5
zD$1;H#$^rsW$v)qb({Ot2_ng`YU+Hb#fz0QxIkQ&r$0gLhACUR*b~TKc-!^98td%s
zBP4fLRu=sa`kghrhE;8RTlHCCM4h8<n?1JNeEjfXj*wXRiPBKH(SgA6b{(rRD=B8L
zR`V5iLI_-3R&vf84*rQ*fmF5Y5G=94+Y$${`@O)z5ARnJ;UENr!zZ{_yiWRB1_md^
zd`r}#IjtXil5puqZVRo8RUk=OS+0i*UppEFo0~k_u1;><OAQ}4UGbzlx%|#g(l~S9
z*#6QU$!$KrcU2)1@j$)j;;w3JJcu#4s}rtV?e8TgCi?Y!_^6Zt@pS$kck53lPJzax
zwYBx`Rl+RdIa|Zix68pHhBeNPazwQ<rDNZ7JRW_{L1|~KHSMI`zW0o*zsg-~&Nu<p
z!K2A>pDLolpP#!SV(m|BF+zq5Cm#$97NILEp!Nr*FvO3u*!#T|`i)#*BPiD+7k1s`
zSy1%?9+tb?yXE;CHf@`RKs8NGUVi>c<JI5jM%ym-Rn^r16Qq*Ozck}DEml=`IR@&C
z3z!`tDvrmAw5h2nd}giRZ3`0<guje0LQxzXveyrLs5FwCy0PK(OL6)|tBHGybG_8G
zr(}9EhOvGXMeYCn42{O7fswisjq(0S@8QhzRB6p=S`hL!nR-$#EPh3s{?6tX6CNLJ
zjkXK)i+O(@qhdEU)_+||dHQRyc4kq161PZyOTb<2q1A-s4E`EXwOFllZ-tQ6=C-E%
z@)CTLYS(jjD%r*OBBk96TUuSjYD6k~*_=n@amMWJ+qX{bcf%bkL7Ig*AUKa2OXU6$
ziTwQX60x@1kyDGsXlZ<$`ezV<Pg~C(PaiMW=M*hLVg8q#XuSvX7$76a2?J4tVX@;2
z_SVSs@4x0;h@t~nMF&sUcTcbR@3y~V*jG)ZwRV!fze|R+?y`gM#BIpN*jMJ-TCK_5
zUmfOY^YbLQibKaI^v&PpuyWhxXYS`9OQ6qN`NFY2f@qdpmD~Ab%)*PatGVsg=cp}&
z3=3o9fjZ+2SC&$xOzf$n!`^lK(~*{<f?Yd&yVnU<i<}$mfol!tx7gTG6Ny<$<Nm9|
z#k1>ml^|0@9TG$1#oLRsE%xi}LaYp5I8G2~>2=h4m0F?w%V(0QTp3By8zjLDb6<Ug
zwRUp4yIxP2s#rcAXgTVb|MTb1qLIIJ%lv^KK%T}3d2}3a{B<v9;aVBV-iUK+b9s<i
z>D!zBIg}&hbQ`<l-+Ds+8iZ>ee0qE&;<l8+gNB7k0|+|O<q`c(xEmGL0e3UeTI(y_
zc0AWUwKO*krq^Hg^yLk*a8H^khIgZP3%v)dJLv=!(IRwI42gBS%b@b>c|C6l&Hx?`
z_=sV?@)EBR3~*S*&K;su1>fJVVxyU$#GoPl5p91uk;Nt#?lTW_v~lo1T2G)F{#l^@
zba=On6%~~G#^1*n{yYgNA(e8HOt|=X`N&1QO})&!wJiU9kx$Ol%`|}t4-da06-H)q
ze%O6unY=TVBh-8qIHXPAs$6f`GmwdbtB&V>@h1)(VH)+za!>H1psp`lHIWotCM;w0
zxK6*BJG^^i(MS|iyi<k76^qbiRp9{<%4v6~Z7WMh@zacx6<2F(pALK|jr?2f{1^;!
z1dsflT77^0;?Ze$T<qxR=y{j6Ih^rKhX#g1Hl3OoYaWAkmxt@9b;T0Uj@@{dwz0LP
zCo9`oJ2^E8&VW{s*<o{dM+dvRl`bq(RuQEcNL!EB&&+;vSZ=wsAqd2127qt)lQQ(m
zrU()5e4<RXn=N}lXVLfW)}!qTMV?jsbdw;(jc+;fvP0w=@yDcXgg=j?#@Q>Dg(i19
zSJyLO`3JEgfXvR}G}N65jHe(|^Kh<qZ!PRB^bJ#rF338ycbR(woTY>=f+4wxD9bAR
zn=@1-7~Ry@OI>TU@21KPuFfD&3)rds|30zmnbbcVlvY&DUT{@^^xo(CMZkUW8<JuJ
z@t&ef^-on7p@#~^T#+guTtwgU6Uhgd&}|Y&s=tER!t*HgdcE=|X`Y)=S?5ZIrhJ84
zM*dE}_F4jp9ZnO9NurqKPZaXZZyI}1uGuRBn`wvCNd+<r{2k+Q&XLwTl|n)gaTf=v
zI5@IF=ae;*@2D?oeI@7BaMshzTdbq|W4MU%l1bZl(J^;Oh>!Ot^k<ucOEm$l;~R6e
zp6uGA<ypM-o*sr}rC%9#JMYL}B-i>bi{=<2`RJB^AQkrca{Q@Ql9mTw)b85yAI{yr
z?SW_Ng+;37{JbFRL3v}s&xsU*;EkQf^B@(4_kXI!?xkZGmMa^}7RIKCdD;^S3JU7#
z>OK#mBVm!AVp&<5D}T>*K0aQp8XMdAn|gI|@hN<`zu)`1Gh#SL?CIk1;RfO6HJ|<d
z&cV+1_VxLh3S|CqAEX2lA1=kU9_z1l$`=qG9<eZF*$?#9#CN+ce1vIwx{l&@Ppe3r
zfV~_jTe#0(y0pH`z+FiLu>v5j=487t0U^E}++NrP-cz3iNnCbN^#B^_>q)Zw*qYf?
z>abR$Ca;p>W_pgqdPq~#9QV?44vl3(!O??dN>e>@KYbM}=E9)vu|C2k#r8Nfcn>8L
zz#B)!a2&}sSL$O-PjYc7jSL9Rs+$k~w%WkFIh}dJtIx{Q6o;qoO_ST_^_rqT=JVrR
zk|ytMlDr(}pDN+GP)s`QNQqsV#d3|0e#RfuOeS(6L_pFpiEFs-9f<h;9;fy<!botS
z=>1<WfTzB;YNQ25SAgRjA1|eA)fh1qG*W$^rum$f!|M-7bJ#)Cv?w!b+R-Pl33GGf
z_?H<}g<Q~QpS}GoXQci1M|mOXAC(OLlA4BVQ&L7oCN_3f|BKq`^tlDLt3oUhx9jVZ
z2C@Ex8hq{4LY<+39#L-X;RT*FO>{`>CRP0480?dqp5E3Bv>@*^|Ll(J((7c57Kb!W
zruu0GCSe|9?q^k1RZR^ZJP*TT{jz^?d*BPy^YhE$43XlRB0MP%;Gq7yu?uR!y`z}M
z<Lqgk_vmhXTPYJAL6Rirv(>NU2l79Zx}Kuh7rrf|4nB2)hc%kU61(oO<{@~M28@zf
zLsPS}*rV9Rgv!P1hl}Bn$#Y(d2e@hQ;PNo@nD0aaYPzvZv4$Wan@+E>mPcEn93G92
z68^rL9v?%Q7?=rC!>B*dZ3D3h$(hq<YuD~ff?{PsKfKlU0aO(@Ru2n%UHMG-XHmOc
zCbqn|Y|9%Zv^~)sujK7tFm&^X+z5(1=+&`4q95<Qe65O~9F*KIT4t9>O1uRcb<691
zm1Gbdxe3hA&Bw%`RxG}NQNqH);+~sxtoOB^LmlX^C!{8Lr|iLt{tBO9+pTHxZyI;?
z-i43zl)$Wxzi1Azg@yJ@0T#+_K3#P=d2QuDbn2n%{GTeVL<Y4M-ik%s=&u~+w|()z
zsj@VEuKd6OW_3j3EFpdlU4}YpX-r%k$Nczjqd?=}J#VxB)L;g}&5b}~BW(|@eW8Ml
z#JpO7zOt{8>|14%uY73EU;LnvFVX2-EtP*-eDCF&!L8@eGK2XekQpcaft2x_V9sh-
zgZ6_6Gsjan&jl?qPhS<Kvl@L$O_Hi&%x>Y0wuOmuYBv<RU>ENW)3>*#3X;#|S3!3I
z_gR&igs2p>6B}_ZLWhgtzjnT}S*Pi=yLH+-J2F4N+zZdn{SUBw;EW*>oCy|j$K}D}
z8)LRLETxk+?%i7|8TA~_r-MY_DL?4I)Zq~%nrbB>Pgc2IS7i3ig||;wgYnmhJGyza
zd&tDXfJ~&b@_KxH{6MefMTDrRzPk2xx0#CDm0NvXonf<w2I<b#V<G`h|2{Vy|8{QO
zd`4qWm<2xX-$)0yiJi*AC<0)ZBQDo0<_q!<H}KADo;8Vqge<MQsOi=<d+)xLw+>Wi
zs%2<YmHf<kpMiR#)kNSmQbu@J26E6}9<l6d(c7rA3T}J}9q;|2o<jFS1he$LxO=t|
z54k%jPpLMs?z!srKWFHgONAvPsaqA2L{~r4e;Oot8$WF5K5318<n*1})p-yKD;tZw
z!_}_MXB}E;=~uRPI>Sq|ixyW3TjOL2o*C*)--A9ji`=KBTM8(DxbqvaoSAQmwfH(%
zv*fxJF}GX&YNVfmbVtOO&F^xmZt9ND0kpjL56OI2(q#(0uk$0=3|sn;w<F_JvINVk
ztJe!vL``Ja)7vQ?6#!D=l6zs<hG?JD{2$>EkxrvGQ!PuQ;|ILV%Z41xh(*DP=|3_e
z+`yw+Ef7L6Ryb;HVwY?#+tiJQS~G%z>6a=gLQgXpE@wnc8?BGPitFR}v(HPnd$a3(
zhfZdnsBRD*W=V*vIM3?3chq-q<Wb%3i(?*muFAjiJf{F5C*j5Va%OJGN5+a2GboLA
zAAqO>Z`ZE5TBE~RaHmYbs%^|eyr=U7ZEG#;GOcyguYUxa8->nPnf{ynAG;Uz%iluK
zO9(%tTVfkiTJE0_hFI<GTP)_~M;$pfeq%|aVuC9y>S|B}t=>Oz5#)Z`6FX|GtmT%~
z-aS<tm0=YI?F5A<*nj2R-D^AZJo!n+i&fZJm~3qvOz1AIu)sA9FqSvLx!Te<`db3c
z!BoDX7d8#HmoV9kiMwD(mkD*`7i;%hpuMJILO~AHG|jQGeAd$_91o*t{)n<66REO4
zUYZ!o{=lg6A!f4>A<KI9gKMabwV>O_U=p`~88`=dUCj7Ij2h1a<hlH0R1!C)8@esh
z7;cL-(sP5x`eKoI8L$6&Rp+EtI@#LVN*?%l(}#S=uP_|}321UZ+dOK!XI1!0Oh`EM
za3Pwxd=xS>g4ZvH=Ey+vi)f=Xx2o2C*6-3gmRB+@&aK`<rX-U@*v~p_vCa4~IPUc!
zT(8zLwDM}N_3{Ld7Q4~sVlH$SWjSDDo~*w3>(|DTlK%FG;cSssp9^qAB6zs;tXN~j
zp<>f4eM3(_ec;g<Q^fsYbD4us5i`QzH!DkmKS4D<(;uOq7YtpZ?<#VmX3*%$%C67o
z#oGo(X#_X$s9k3H7&7Ke#`z(L>wgj|e+KE<Vm|7y!-q-sGBLY#n#P(MrKln)VV5LH
zsC}eglN06mPwk-awge-*A&iS_u&_`OFTegBLmxX~T_t{lz1QZ6Z(}a=z~2WfN^}y$
zrMqovsuw8=U#E9u9E7_lK?m`E%U{8SVZW)L;j5cq&iD@De9QY`q(<x>QKa~(6ns2;
zy+SJ6=<iv9t=#q=ns(;U*ZY`42PfS|@XNl1qvG%J_&bkJE3rv1k){zMCvc+tOP9^L
zfXXYGAAjuTCakq}5nevv+^2Om+vIg^lYT#hI+!mB1%v`s_M&59VZToly4U$fC#7?(
zUN<8DHTPzi1(KQagBGFR0)bT_DUZ;XdLy{6HtBvIyE1gaa%1V`&@E}2&x}e8`j9Q&
z-H+`KK0oHDYZ(SNs92IX5++^Nh%}(m07NsuIxdyi*kD(nbg)!tH+}JjHOX_i#Nw;3
zLyX^w=v`lRfJCw55gVEmBFtJz&<YHa{h}}SGmJ*f$~hpO)pi^_xs{=AxZ?zx!a(cJ
zGit{0MaN<rVv?Fa<*ovxj`cBr&U8D!tJ}sMHGT%GfhiH?7-fim>QCjbUv=ct{R#NC
z5cj<QT@Cl2xhoBN;)21>K!+6Z1-#+JJ+pDl`X&L{H)lC1z923$mW1SOzO-U5r71}b
z1N@uZ?x<(&A>a{%I?Cjuz-hVePZ7N`+)+@0Kq#W6P0Qu0+4`$;^IWk12+sNVh>4Ie
z<$djIVM+6ry@-|STKzg=%(3h46EdnOpOGLLC0E%7BzQX@P8dTW(K{qbUQHh2_f}iv
z_ixBouu`G<rAj=DYhzSP%47w<{4M$P<#)Pl*6$=8<Wf41MXoIC9UdN12g|8PE@i=Z
zcmeD8I4)9U>UjU;yIm@3&HuvxPb&E#%^Dk;2%By5X_`=SOXa1!DX-4F6(V3|I==@@
z3MRAaxZg2Fl>N*L7TV4`nR4c*7^?tl*kOe;Df+G`cjJ6`EztF!z7MT>91ZJ!JASar
zPbt)o-{6Nx>lH9BPJl9TbNze%dZ?sp3H^@{x|Uk6*!L`Z*t>aO&$_tMtpxso2vFo;
zXKESL`0to=2QGFKwrQXUN_NB4{a9V1S?Z8D#(?G&8ImduSVfVrpTW2*5KJ+HNTd7F
zW!n}O4AV6ED{CIHB!;Wl$06g0FR*KyRyjo;Jn!ixN<2ODH{nD!NkMKT*qIvOQ-1FZ
ztVSiX|7Ty6f3MD29ACVYXOkip8&9Vkp;kPOolEoni9TXhy;PkotrGI9(BBfteitfB
zx7JUXG-rJ68v6s63Aa$AK=n>B$^^prGX~EIQK2t<jf<YPs5}z?eRede!KgJmygZ9(
zpqTe0<q}(GF|kQ0Q<+rkn($qcw!=pwrA|-w2kxl3y%^8!*fEW0`BSp3aaIE|a7vqd
zc|{qzly0F?S@*hj79A08nPQtKsCEiI;mDa^n1wozIy_-~G`i~TcSg<J<oI|%J4MFg
zm3=8i%pky?QdB*H(rk^hR9PPmymlbvb5b!~+fdg~RW&^$<LmU^Gqx|dvdgg^oZ~Le
z!I`3-ccC0ySjspVB@pJfshd*CGI0L>r8CJw`9JkK1B`+LM`#@S0mMx=N4L;r=HQXj
zvRbEjT1VD<OI_nJPRTHbCoQ8xbg$;Q@kfXaRaYHy+s0UB_>g|^0UCOM;|h>JnZ-KO
zgC=NW`)SJ&nxzOZ7=Oep?UvsEf6I(SQce*nWqx<uhv+G}<95?2`A~Icj{A&gAu8Ss
zA|2+`3d1HZ8wrWgp{!}*qa_<BI~acsVPR{m?ORYkzNF!Gp6BA`e(h+InyR6$lFsA4
z8=IT^bKFV=!td?oWge-f5jy@xdQbr@Il_5`ZP@UnCUWM7<=!7qto<-4!80GopWM|(
zu})F2;L4P7sOuP};O0&S>cVjeuL5&!DhYTOj#z&(GNLGd2bD#;uzq8i9y`I3eeTsj
zQNE>@5jsHJ*<*@=8XRBH4v@?x;z@H>R0dlVzx?SWacF4<MYp!_g`J;5KmjP~vetJ~
zO<!Tu4j6f0p%DJ20;zRAImKt5^799TI1!^;*aDrxmq@G>rs3{GV+>k?&M*ImyX7E+
zA-&w2lauvromLxHwo)zoIcpEgdEm^y;OMC;7?1aEfyVHvShF;0M6`>5n1~1^`cIsB
zOiLlG?{bjh!fIdoRfeU3MN4=C#C^0SyH>OGtKY2IOies2u{;9Dy+BLiN}zNp$C!|E
z3eAA1*eTR3!NK?AQ7${?{<4VhASVaL^FdfUIU}QXwGD}P`3c$!2{@j8Medr;T}xUs
z0h?+3@;?qGvLCE&1y-wJoLfzCiv(1r!VYt|pmg**Fv}>HT1?mqzC~I#jn@zVX2AB!
zUM6cuMwaJqrz)iZyBdqd{#h&4{XX|R(IgZ8f&>aiVEmFGsx=M1I1K5S<Z*j}2H_5A
zu>y`Mq_ot|L-;DLt!-&U?7>w<<v;J(%N<4r1|P3^HE-`5r<OAxGc&mPS*S$Jdok4i
zJO!U((X4U&CW$w!D@JWE1P!dw8BubwBFDX%3jdm<2B-8!O&2et8GbWU!XSBNh!g!a
z$)8T2>(g=H5obJT(X1Z<=w0&^c*XKqb6dwUazBa#EDgG%H%i+dPCb|Xw`$E~v7RxM
z@QG;}rPE?}3w(iBz02AB-d_%ce{WPc!zf+TW0`BQB1#~IJS*;L!d}3XYufOb9o<j=
ze9vauI$DTl0o?;EQp`Q9?n}fkREBsx1MA%fq-OJ0IQ;~pJotumJ^S2gN%zCz0QEa+
z4fGt?`>y9xN_1!2-&25HEf`j?DD3}#k$p~(qve{5eAa~f+q9<-dcL{OO}WT@9=^ra
zfP>TOkv6IKKZGvob%ub}W26f4y$Z6Fn4SE$WWMKbu^LL;K%XanZ#c5<5%Oz%&y9jl
zvWiGG)c;LM7%*d0KDgA17Z0`-T`TMC`X1{xbQMg?#{0*kfETtSPX?0{x;oPD0GTe+
zMY?P(FVA@X)pEgvgxk&fo<PuB-?ihzC4e#lHUGa}fc5I%jvu<e8taF*8^FZ=-2IX+
z4+RbB;G|)}u~xTm+80t(tXUGtUdt)3g2cKYn#`fWW0({cWJyXeC_0Y7>Rgt6DIke&
zo1!cI-Z?>P3vH6Tc6Q-YLT@bh6(K`j;y=VL$Xi|HN39yvD6V~O6TN=$>M~}m6mOq<
zl{6%!lfSzq60})ZS(QSu6hM&^9Lyh7B$)r~u{DKz)WH>uCmRvNHW>LdT|IA)iQiy{
zL1>>N!~AD)0)E45ZPY$UEk5m1Ajv;|I^_d4arB3HC*^<J2sTq;w9d=FN=?#k<1Ra<
z#}C{Z^?CKSsgc%406DBojy#I`tG_b3@PVtl`%t~n<6-;#*>a)(vz!+X)=j?R>16up
z(J5eIYH46MBNUr0@VgXbDyHVe)sIAvxRnX!ey;z{*d@QO-y$PW6d}D^`PxE5%HB-#
z8qegwi81<H7;6chH-x%<b^2uj2^5x3Zh|l1m@-uEW5^93tR6+WU)SG+r}01`_fuq1
z_m|+szb7u$tT3wc8(IecY$gQP{QXPA8)P4f{9}tqjdGq~ej;+|$Pr4Q?vcl@(aniQ
zmg)QIU(kdH@T;`5@fPINtd)5*XX^s!NvAZ0;ADlcWBZQj?!NDB0zjk`{O_9~yQx6s
zCA4}x!ts<5S>+v8Yw3p?ss2|=(n`IAnhV<?iT%?G27a(@F7NrRYa&rE)(`)Z?0cU-
zK+2D%wc&HY$5r<MYY1RwlFeWK+k!m)H^w5VJ}IL%F>P1Q3{xb95QK86aNuYNJa2s6
z)ccg7urJ3-`ll!d%pqM9+^fLH%>flfOMgu+8A-z_kHaJxb<EK2#R~t#tn84u<nklb
z>6&|FVx(g|LDYR~>H_W6@bkhA|DHy(RJwFhIYY4Z@Ras9E@i!kw18H}f8HhdsAzBz
zO%FS#BIsd3iA5M&kn0boi_A>;7o`hSrN6XUEi#|aDTo5Ur?ah&z$QC|YW;~Gj4g|M
z%}YMhp7q}p4gT~KRgh)74t$3XR!p{3n4BFH+b{oDHT<Bkgy(_lskckccS@8pyZ!1~
zv~;pGm4~u-877jI{`M^iYz{U4zpBss)IX^4i)c{-<8|p}#HssHMFTjBK8$ujZnWh3
zA-6=)KaHAQysTFiW|N=4lLTIDm&wS`-;sfVMzz4K17RxKwU=&H;?n-qgm@Ltvv-#w
z0KSGix;ZLUuuo%?VlHoTiz;kXGy?C-tSGe{Fdqq&5%o+^8HO{lT@pQl{^O4KGbfHh
zj_U;}fty~N#8hjJGZO1?OMxcU-&t(Y=;zUvNK^toRGBU_^^_KgM=7pdZUx-6k)(2;
zDpdUpvSbdk`E;4#{x)&zQZ(Xydc0MuGQdosCK-HXpuFHtBLZ(9#6bQ0za8~NJOW{H
z>beja;UY*shM5gJ;#}jo1dSa0Zmmm4B#Y4gA>5Z4VJYJ{qN|sJqbSY)iz|pt=fnF-
zitZ=#8Bgk4<ZA@l<rN1=p+<KqI6*D8c>gC)kxP29NZ@9eZHX;J#PdW<)rMUtS<)ek
z{mel7xE2?bIwXN4`E|e!-DLhHFhvLf1R>3&d`u}BB{L(#4WcTyiRt>H(0|W434XgS
z?~FJwttE>8i;`}3(6it*+KdH3R+7YRH|R3M>FxVDiDxpWeA2$xSnnKif+^}xCi~BJ
z7;7}kD~^y)r(>s=bp+32ngZt-bb>o$9=v$P>k)FaI*=PlYWkx1rO<;@FS{9Sg7Y{r
zz_u)RTG+@Zw|<~%NE0*jMamG(L6j6~TPv6Y(z$>QCpt-ZPcZ2l&2~%n-T~DPxfp|#
z_;~(>RAvW4G`zeu4E*#<|5BtBW)_yi9pF9&znBVxz2%zf{^4J8!h@N(NLOF|l3(&M
zY!mBt%g2wW!LqW4my#p?p+*i1zSroGrtinQri$ipq~{5J3wj#yTOXr7b`m}l!>D+9
z4qTcS+0sDbfKZMy73UQ^&$$TR&<P!bpj{@iF#Tu7`wRl!)N$LY`0th?&CWQkZKfQA
zu`;-Xf@yzuD(8WZcz+2{Cn<KQ@@RDo`@0~GBnp0;8JAe6b~%_ny&gX~xwyChul2vP
zuiT6E95~XNWl<z18|CK*mS#cIa<=By|JEgo+3WJ8__i{K@0Qh$lTEzH73zoJ_FMe9
zDy8DZ`wBZj95<T{bM;DAwwyOBPA;787{dxlDQ<{BkWT5PIfT)%m0`~6k!HnQdVT(r
zNe8cO*d6d&(jXjE_es@_WZPleLa1BTLk%nH=MVlH2St=n32r#aeeVB8Rw$o(UzAwS
z%@XIqLEDX(j_7v@CdxEQ`~3U*#uCtTb8d=xJ~T+FgGSr&M}d9b=RNWDip8(k2K^*$
z7A5PmQKw*;hsL4wa7#xbTt|kXtiIGCozG(_=9k@@{>ooFta6kg85tJUIyso?V#rjl
zldkCWyC85+DJ`9DPXf<;$0R~n(i-tQ5?p02t&R$}k`4}AP1doG=bZx{v*4}Eox&0O
zOb8ZC?o?O10yQ`Z&Nd6iT>-f3i8eA*=hFIwwt;(?w}bpP_y;z2&B(ocy8m!rUyW`!
z=P{84P7v}#l-vl}KW}&(`WwVF@8`q2l!??-`92NH#?uX5kIB!^f`5YZylsqJLh?q1
zpQkO?n%j(sBcEJ(A~sc1$R<S|N^)Vy&fmhXi^uckn1@{0n7YQ_kX@`cH5uo&LN$nA
z#mRsZDsXWo;t#e{q7?|oMb4vxsR({m5AO9u=dl&esVqFwkPBN|Pn4nr6es9EyWnSz
zbX99ry^xTHwav8^x;**35KO`i+M;O;H!7Dq6any1^aeaEJ3UKBMbGF>wrDL~!-vA<
z0cA9x+vnaG7CgmyToP7VP5|q}wY3HQG$0g;jgL?I*9pwqCcIr8kv*oL=5ISe^Q~+7
z@i8Ex>v_Tb>=i2JuIhs{lq=3U*vPhlAYsPxe1@jNrKlBm__PA#cob{-RHoR4Z{ZtB
zPVl*!(G7lVU(PlYU>o(DKpF>!$v&OY@0Fx<8dJ29vw%+wUOjczqosOx?dohN3EBka
z0MlR;aG~+A_~!u$Gne1Jsj&1ep`z80+l49-r`1r*{}$cLh9~<dGvav8u44J8Q_%EY
zpbxcq5(wF+W7TQ;f^0nSrKIvZP%(pNNb?n?euU$NlL?I?)rZcX>#v!6uBw84k23ci
z`DaxopSMOAlL>;t#_r&Rp!i!fQZf~amaC)<LBT4vZ`bWqPBFmE{GO^Htft3ek$Q-2
zCV+nbe8idujOJ(LHO&p*Vd9z=UqPrCGv5uO*QAQrlj%@qEr&1%2Xu5a|3gWx&+X3J
zhy=x4t}wYjUl`SfvxSf<e*c!F3R+lLh|A*T?0U`TI5;vwk5l=yBB4D|u2&CE<e$~)
z?@K~rL+DH;TnJxR;9YfVU**cAH_<E(&@Ps+gMmE;8;r*D3L7gI8(JW+U4(eR9rHfh
zQpNDDY|_>y^UuH6$T;!moNu0;sp8k%PDKl2Ae9ah@F*ZR|C;Y-g;9N7Q<dpJQPkd4
zS=&7Hh3OSgn^8q?jrNj-m|gVa(zEF|<c(VA`t344FWScl`mWvTuSfr!Nm);)=22KP
z?Y<UOm3Wea|6iEGr=S(sA%s_|QZ(1aD|xMT>|@NRX7ap}hA1>+r_k(|RSMWvUu~!=
zl|9UMzTc)9=+$uCk=S_X<_Uk>fuFMyFCK5!R|ek-9n^KVv7({0%b&f@L{I*yfgJ9K
zhX)n0i;2c+D-klRSmD6Od*%v1G(^jhT)@d-A-uj4yU${t{`vH;SZp37(ROyp-XcXP
z(j7URWoKtUoqIlcU*)zQ<mB`!XWx4UJ{-ZF*?d?3;RM);oo^%b=7or}^h6)e$1nEy
zIFcXF5(3=TCTuLPcQ0P63T(s#1h+3g4ts*T>;PB0`JQ*RP*X!g!+i}e%R7&2-{X}}
z6;}sgpAP0BaR#CuxJQS6SOl8@nRZ_qc<01!)Y$aY(Fss{U4+_d>9==ckJ#a9Y<kZJ
z<(HpS%VeY>iJQDy#t8rGToiHUHHv#+Cqm&xawQa~gj+wu$H)l?wfE)!{Ya!Z^-Vh(
z@YeB+T&p1l+o@U|<DWZ=j2|(i9FJuq4ZG)%qfi40*l)tSSuQMO9#3ONUhnR~^+H75
zZM$yWS8RoZgrfL{q?I)^CP9QVIq=SK8oYat7_#~x7Fg-mgIYfiQk(^+d&BQ|g>U<)
z6=~b=Co2rST#)2IsHzjN(>g3P*eo_(sEC|&Pa7SL?;YiwbR_apQ-=^eMg-nNi~~&a
z8XFsZeurwcJsd=k1$f<z(SklXb{hHq4ajUYF<x%-udE3?tAB#oKMu{zY{tNNKgF+%
z3s{?#-x5F?EgY8c3nw5On1G2v>ZsH$f8MksX)1lUG4aVV2AiCU`5{Q~2HG)q43dd^
z@|G<&9OD7hU}*LQ&u@(FNWX(ShzUv^X&(DUzw9gDLX!9=A2h)!FRP1#{1H32I8K6)
zgW;*hM+9&y*1RLc?o7n07fK*R1nfGnfp&IwUGzDC;54{1E+QiG$oVdnZL!+wYAp<n
zeo~RJR`+Qq@WH8a1hD3Uff7zJ;sg#3?rO3A<Yvn#=r<6bq-bdP`}^zF3s+iq2HU97
z1%m%s$!xzEVCJ}Je@uI-GM$}KgDF<dRX5O)7(Y)|5kau^vbMG!`jNt2tP+yAHJpn;
zeSh_Ij5V4{ZuuVY<k_lgpd_*2RB*sKP;Fy+wmBsBIGXTHCFk_tdV)W|yx@h<8Q(Lr
zx1)E_$CJ}PKP%@@nvl!i?Gc&^FKZOH)Cd=zvojXpc+w&%->ft8<E`bv4anEZSwr4}
zii7|r`oky>=rTmb7gSi|kUb7E-pHKW(sY?~fpwx&9Qd!YPQm+Iei-%y(f>=6lL&2u
zEUdBj%}>|l88aq?Pr$N)ibyt7h42{M7+}4p39ao-AT_gW_q}2}`FatlDW<l{{&=wk
zEFYmT(C(EIe|#DL^W|~T=@#EBEl2X^wtLtm$3Tzf4m#1N{c6bLzo*)|I>cK~FgK+9
zLNAkAa9kLeaBJN1Jf7zZ6-*|Y`73M`CGnoN_K$92WqLTCi6HP)iVlFv2KHg64HzF^
zNsPst_q8VqCy?VIw;x+2COP$0-D;NB=C`$3u5~l2eXC*&JlNHEN{~cFLo5AJYO*p^
zzkGPrLkgEnrxM;i{!PVdDU+M4&S@DSNHPHePbr;)Qb;K48plzpG;nmS=lJRftPuB<
zgWy(IQLnM>FJ$NcdI61%V4b4epjXbUabA@qZ1CA&sz!BpcR%*rov=Y8U}<n(g*~GC
zso$vhJo~*PKL<+QN|Cg&<$mKIp%pbdc-Kt$#mPPDcjtfBVtKil$((ayA7MTMSqxVE
zj~50}btCU{1sRH1^Y!9W%`d?D;F`+rnmgee&dwZI3DIDEz{W|ruE8|vIwFFV77UoN
z7h7tV@b^^R!np*EkHa}jE-?Og!=%^q%SZlts;ZS%%c94>F(V3rn+JIHq$>D?9|pNO
z3FxS)xhr$UV`a=5f&y-Le$74JfmeQvnteWaX+@1{ovP#|JcADk02+cz$<)p9<me2P
z=VU#Ju{4HNY0AZ-ndugo)~asS9=(?}BYyLepe&GM`Oe_Y+HEg^eSwS~sOfWxAqL#4
zFpT$obq;{oB<OjV9eAHwt{3>QTgt)Vsr)aN$oT8s?JWS62HdZclM4Cpv~=LAh@xCJ
zmi#(t!`RE9Cwkn#3V5j}4iWOLD=1hae|$Uwv-FYLq;q^kcnF<D)UQwMBe01cUzHR?
z9#0Y;tLG00X5gRCDo8E<hcmH{f1#o963o}{Lt!-NWdG{~CfQpToEvt&s^t`<Xwz!v
zDIV>YERc2${fI;3NYEhjJ@+m2wPHrbtZsQc1@b$fbBL^t=(`N*c?omiCdiU%GXFg+
zGKL3H^Utvr3`U=C?<F85Jx(!KC}#0KEM6@=&9~pIetNi*m6av;xn6}l+#8wfK0X-n
zO-##XT}|{S>jAvM^3$=CamU8T&UCP<KJfr$ef^Tp87StN7#M;$J$H|QDZF_6na%jA
z8VeJX3r<>E8i2W$P*rmL&VTiKw49IaRXijT!I9mhXtnvTbbNYxXn$lZx&RXQ-=<w1
zG3>%mKoWY_3tGCX)$DByjEpe2;Kv@J7Mo*I6mSm@fHp1NBMk;Ad?M^p6o0opCnitg
z{-#i-3F7}eFZNRJDha)K5@vnJJ{rL>$9vU9L>dXqZQ)6Pl!L8*<26?1=FlDIm+&T0
zYq;VO5n^`WlD5;FCo=-^Zo%=@dsNu28Vj_*&0o$`f%3q%0~FH7OBGju5ZQXNspnXq
zRltxka3>f2r`glU`(}gi>=8Vbi|j_%XGU^Nnym^%RK(`=AJB^V2$Rt@Tm$-7;1wjW
z#-z*tsHM63*DseY|Eo{dnAxq3jW@tA^e&C{?s|O0ak;71{V!bm%|!*D!;&A!%~r_~
z@ICLtZtbkJ8K=`uH!unyS`x%nbg0z@&NN*9$G*g_#l=N%LY{~C^6HDb+ERVS61_gd
zdfIe)+6%lp0#HSo^xF<=7x1t`Nri=(V{~xv;YoQSg7LZjcP{$yd($S|t%G^s+>LsP
z4uyff41dau`pet9GB5Ez0y&rYodMv+Y5>mYbTuF5`nQ$E7B;qOdT^RpgbWq0xSrnp
zTP#Pwiww}z(<?n4ot(TFhupUV!Pdq3d3QQCI#-{aYW=K$Kwb#IRjF!e0T0<7k$~_0
z3@67#YGNYrV*O(eJPrYV4)UjMS;{x}X-}tM6h7^NlhFpVree<S5W&Mj^~mGS#k7o!
z4B2cQ#sn`*Ki1>vo!HaOh@>U_yT^ZOOZTsRJ&q8ONcmAnZhOi7;o;`%9Jq<&D7mYg
zs6v+?F6)n4>&JK8Sah1)PLgP!M-Fz*`L>5y(k7+xe?^!?NsaDrqUenVywDIh={pi(
z?wmf1-%<DXzd^d<&uVn63)jpZ>j6+D8$(cnoh46JM`$=;1?^3^t3TS;z3*(~2ktBE
zUCMhhF~XORgC_Fb$bs=<Y4zO|PZwB$7ir5hW1rKuS`(pskE#->LDjjcYU87$CbinX
z!Ty~+vpoH(a2Ny>*6O|ika7O1f&x=FH$Xs5lS53Pa}zWGZtrCE=RezIWF+up?keDz
zb=kNDGh<oJ_D{4bi6shyoEphy!EZ|}qBWG~jsWyAFq!fasoELruyTr)nrvEP1lT~s
zLg^Rz#na4B-$bIb8|BRxCQbV{2PZr{O9#6ICZy(JwU4y0?{h^7_Qy~DQQ%bzxSE@P
z2A4S!J?B7xpBfu$f08V5CP9-@(csJ^;P~EIV+5Tnp%^UP*2#wpZKS@JtE>6PiL9)w
zQl?%!tIqt-xjDheZ!_)jCCSawJ7_=S|2IK{BhkcQlt5Jw9DM&O*FU~z-@NB^!>RR7
z*>jNmfC)|Wp@J}{#`sPVEhFbRjxJIo-}r&W?7G^%<AHpz<x>$QTd~?PHD3>EVEhZn
zu@$CsLj4-aqv9{7Fz|IL6lfV<xx|vGLC29d`rwt`-7)<B_wu>cM*iKQC!QQ>unW|0
z$5-@Ew`UF9PtD}_li*PZ!`IB34-5_M?eDuaWlQ;>qM_2MtML0C>VFaHFul69hRoI_
zZ0X7ACWR)Dt20rt7Oy2aJ^wbjxelPP3LwsZxe=2<^#zun^AGtP=wQ*HWcK-^&c9oz
z#DpYL?>E6XnXo-bd+W@GU+kfso<&{FO5~<aO#wWub})pICLM~9$?LxR`v&c&VYBV8
z$lDN?PmH+;2`N?{Ho1b4^hD3wS-|QDSJ3Kz?LVdtUSvURXVhSs&o#g8hk2~bOD40s
zNERK_EX?~%iNM*ki0wTl2GxV1^&Xtw8)EmB^xWKB++yWZ>yjT;r->0{jz`u{+cTq`
zpE`l`@=d9x*uy`yz{l+_0E?r-#2%)MClw3W+}8ntAX4xL+{=O|!dMbX;pXzrgIgyd
z*qa-g>Pg2||LaBWQaDh>L#aL>NFW*PMOT#Jr_#NacjDrzb{FjG5QoIvsZ72hb_gHQ
z$HKV41xZd{wy(Z*J41mKq>!_Rx#!1Mi+5?@Mn2%OXG^&lZ3z<{6Q}@>yjH_zxvg@A
z{cpiv%SDKO6nG4y)=*Vo`uE}L=*Gv$%uEdo<1yNIOw3FmpDpa&E4w{VS$_F~Cw98>
z773G7x5YWJ(|V@aX*oo%&d>i?+}~eBt;=klOru1dJm7xx-uo<X@W|+{uy;M5!M1;`
zM~zOYe_+7Y!9l?7U*8IJ1^hr7i|+ZRkW)f@{H|M5n&HgojGO1tw9#9jpk>i+FkaPj
zYJX!}jZp6RFRlY<osg5-XtW;Vw2_z6!W>cZ<@w-4#m3Y9KvEC9M0aR=$fkD>v&_pH
zj=#)l)Xy0$?`m{gN39PJ4yamQScz~zvmi!Aq@agbfcQj-TtI00$S+wL@_5@3;DNAS
zQ}p4zbeME)+8*KEAQX#l`t~+DI@+Y6q|v*p$=$oL(f?sd$a4Ifa+t3*&@K@XZT8kV
z!0Gv4ZzmS~mSkA>Xa@COfo92&C3j1!n$hy&`1sN&ror@i$v7cQPGaJF0}cQEZWqES
z8+X+t8<*KJi<QigY!M;TUo6?}D^a~<z<FB_QauJYYw<Vm>m8Sw*qI{;?C2CjH6l*m
z;M$gHG6O|mp1;gzb9$ZM5V+4=_ZflIWhiKYGA7UcUK+-U)?QjUNMy(ze#K`B>yu6j
zYbosQbHs?Z-}%Fd&wb#)X<uGr4Qw$`lb_mkEqQqq&gj}Jot?leO^Z|h3vl?#HOJ@Y
zUvst9S5y?VkRUoPH8na8WtOOY%NF(r7ICFao}JBdy_L+Z!CW}Yn{^d27*~JbKv(UL
zdBp|`Gc*`b^7HaMgM08eE{kt#Fcaii<S1`_=}$KC1|&kVnN*o_ohGl7U+cXi2K-n~
z^YinbEyuz2`B{7{nsydpTH;;Hf4*)00Dk=zVeRp;qz~Vmp-eJ{E^Tsawzxt<K%I{w
z{qI9ARk)bz&uF7-?r8!9dXP{5-(}bvebO4_DE<Zkty~ExtZuAMN+^xQOP+!keu>+X
z?et5;cuz4Z@Dg5KR3a@ekjkg`;Hv3;g>$`JrKX@@^*x@p<_VAGBShES`(6=raJcw~
zQ4|J)V8)t5zug7n&#PDX8A{)PxtM!{*)Ms*7XPfSx_aDb@?vkAU>G8n-*h{5Fc0V)
zHjXwZ3am=W!M|Zu=efVBAT{ojV{}z^1M-I|x7t&Rofh}tx9C$;ZQVE-e_)`<dlS>r
zR+gs|N0oilS54Ss<I%Z@8S!fe(GM;r=3P~_>l@v22e+ESY6o*d@`=y9E3@eZ9V-8g
z_b~$WmzsG0i>V@lhPvk_{`}!Bu)Pw2@sY|cv4b581LGB9uNoXEPl01>@OW}>nk?YB
zv!!K$F_|8m9D)4@*NKUW^uBhsH_2GPb+dNNHYM7I>X^(x%hS`z>F7(p+MJLez=~b%
z&%Yi^)hxZxu&9q?zHoiT=H}^}O!8*IAzi>s2GBHEOk7=E9X*u2buv2hz!j#Tpb%A=
z>c7c<mC^;VRMrr+^tGfhBJRzOtICRs>5Y#Bcmzt>JYQQ|FQ&@(c$Z0uM@L_y6K$gJ
zeRp@8V7iDf<{-Aga;Tp-{W7|1eBiDb6Gnkb|MkoX89C5WfIeL8zv~fw38>-ybklus
zo&XO826ztgXwmN!1ce0CK`2Do;NYMM`&;|X$z3;~#|6+f;kGFmcDe>cE3uea`)~rJ
z+mt);p6mtv;w}@E<|-hh12sRwh{xf=Y}-=Xtg9us3yOMBqlMG*d%On^@M2Vrq7Pmg
zC_oU1;}92e<_|ElehiF^U_t&`R>#F6qh9>|`!|A^1XFfJ4oU==u%FC?Yl<t<y0n->
z0XB*6&6{5fXkWy=;N8BEjtL2VXeX**&k=PX);4&W&&?$}G@YCGcxU&wrbLZ>a?0oI
z&7F3QasI41kU(0X1|ihVlj71(Oem(SdTyXnr!_YTR#$T+kO>X6ydjSDi0E1;x|<8z
z9s_JBKxH>KwPW5lu0L8JbIP)Ol+;jtyp4MeT%MM6>56ovlL{@^P$jYitIn1if*AZZ
z5im4gPdPz%+&IL0v2HO9RZPr!AUPKc=~p@*Iz&gZ>c4;ey0bY{`tw9_8|t745%nF;
zMtH@R?IIu`X2*|6Tn?TY&^d=0hhiX7lZ>(%^6yPTlQ<pb6!`}Lew0=wBPj_GXn)}L
zV&THCCP43Bo4#Sg|F6US`HKW15|bou)L-DG-w8D=uK4l8(bg9JPG47(mrEEukUN5V
zeol9NSkF-Nap7#_>FDXA9aIpjeS;a*n?sPNh~=mF2bLAXQhN3FhbcWNA8>I3`hu>f
z|KydCl7aUO-o<-=JMr@g;7oONN8tifntiSII|T(^$AyW7iGR3PWyci_%Eil|Z}<pz
zHv$oo#X<7Z09i6FGg81O^-aVm;KaMHUb<ph?BbkzkfYC&p{vND0eI3o8L(=&GX}?t
zNB9FD_4hH(qdmO;uNUxmjjM97++LCYsJzmbl=MNHENyQo?IrpJdBD>=;e}$RaF6XT
zaQ+Na8MAc<P;8NaeQN^)R(TxlqLl{OBH#K?^ZEmOOK&5vz`7%HdfcT|VX$|wQ}X?L
zI;TG(`W^S1uEp3akbIdgMt<0&-!96F<9Cuh>&gpSQukqKKCOqJhOVx#(EaXr=&`ec
zerT41@7<p?e{nI)k#qHAbtL>Ei+`-XeYbAGx0omdqamns=6p#AX6)?%ZQ8$&@@$QN
zQ;rS;)AZRJ^?j&O<S9NuQCib&1rHHkE%;VcvA(-Cw2Av{(VuGHpSr*GO1eyjySlpc
zVpwRT<qnf^x=29{5hn-qSLl_}3Ew#EUNw8BrKF5Xt9{T_5K>T4F;mxV%*jc&{1*=q
z9wtPeu!2*Ipd6TCr_3)BE&l4!SPh+68_LouEVN1>BTY}q=uD4aS&1SE$9?Ua<mP}=
z_?BKeG)$$@;{pc`(Jnpc`nBz#GhM7lAa4N%+~Fhoix)4@1z1K=bW>bD=j2ful}g~n
zo4k-8p%G6&L2t=Q9``C9-x!~s1}QfygF@d((Dcv|AHszA1&56)R{;1LRqY-nmXLEz
zK|fo;z+!iA@A07`uw;=huAsH`06<U=^>oxaSDis(6o|v|J+LL|A4pUyF4u0{EoE<q
zx@|i;r1*i@r2Wfv72%ARfkKRozqV}Ux3f51E&c8fL?OqZ+tSd?UMEVYm@ba{LJ+~a
zq$cM_((Cmz!EHiXaqd>P98}UqIoNNn#+~No<}b+w`R)D;eqJ#a`ql95+ogx3-$Dxi
zknj%CPJS|7N^0uV<n%8_fF+epAg7+Z{v}J6|2L#)wR+3+;-H|Uv9a>IwUqb^B~Ol~
z_`~adT(DE?)|p4CGSG+!Uf$nS`Hlqr+uXRlyV-b!$1$)cuB-n+^5Wmt7I!$z#capK
zYE)WUy*NeRpyJ*mK1z3EqYf^8_}0dzoYEG&gVT|!q2_NNjd5SoHP+16>VZN&gW66`
zMz3GbXJ-D0jh(2|v{*nFg^2Mo%z)LA*VfK%>;tZz#ttrBc&!4BsgTg^?w`1Z@LL}&
zm5M}aSs{T&9zH$`tL2g(En@kC9{XNK?JqLZ+Om>0bbt6V&G$|xRJrgkL`PQ*3fZ`I
zVPIq_CX3r1+0a|19Uu3VYOz_19!pO8`1quy62uYVN}c`sN-Ld_krTM-cu1yBITZha
zFC!~UP5X22_gu0}K?fOykHSh`u8rCIWkNuDo-9dCLXr&v)V4z_Wy_E3(cccX!{*EH
zl4l-{Ah*H1cwyXEK>aeJ(Sy@jBYg>FuH^&I6eT<XtPPZgI-YP;;<deknOR|LNC>Ap
z$6u|ovhos2d3qj}SQ#j294o#%Adv$BPlLH4z7yM{4h|0WfSx#YF#7-zzFWu`FFssq
z{manX9=v7bwR(5dX0~1x9v%kLmIQ@_KtIJAF|O#>Rxkn@Y;XL=$3{lR{#We!P`4lp
z^<Ttf-shv_SmcInrU)C2&X0aBE+;=GOIur71{B_19W76P*S(C&T%4GY>zVzKRWA%?
z)GU?FY^4dc|NYHhc6vIx?3lR8dZ7<yTSE|X5)#QBt)>BMmi3U3G!`9OC#QC|*{Y0c
zOaImfX0ikoj62YPwn<k+3b-8HfkHV11%NhRHi4w1g)e&Ab45k$4Bhvq5C3XgKmZ5;
zIypO|#y*;xWCqbv0Y{6TJB~8VhM*PNaI)?#Y^bb!32vH7Fk%y9iQi-vMe$qk!+(|X
zUB3nG4IYnqahU`%TmrJy)m4e6<pVvwcM8#PaJ^%zP%Raa2XxY&6y~&@h5|FoSkiY?
zA)f;pW~!}jUp9Bm&RRT#$BB`N@|bP1sHlvrtrd(HZ-1UA_cE@oPZ;S-ECdtpdU2Q(
zq-uOQINwoo8zUwr4iNS`?nEMQblZWw+gjP(BzWV{6eu1fMb+rOXDQ=T>?hSu{2)_w
ztgikA5+m}i3X$83kXf8t#18uLV#FpWD_!3tTYY(ALJEh&VJ1?l+(GbXJ3uCSF8OLP
zpEw>G_{`4Dxb>OahQ-6L9STJGBV8^(<q3xFP47sycGC3;n)j+?uQ&@71tsg2kD@U<
zmNXcRJo?9Wiu?0&xX(!HmUA6et6!~4Zfsc4hzkh{XlZG1(FJ!K;n><t6_=Gsv8jnh
zP&K}?^f}+|2ntH{JS-Z;NIX@{6+W2Lu!zh83uw{(w;~$VWeyK}4x3s&Ck7$=q+xj<
zHa51%gmwwiq?j1yk}d&(j112)`J1@NbdQI*ui=Om<_tKI?-WpzlN|4E5L8c^Zgu5j
zJfK*5dM@G}-_L8zcawwvAe?#SmoP?YXr$D5;%wu8+(=p9TbCWH(`=yKZ6YDf5iB~`
z*<oZGW-ChJ<9+ib6)%}fIYRu@-`1AO2I@xl`t|EwTRXWGx}h9%yRpoioa|mC6?<EI
z0BQQ>D<{`SGiPA>yZq3Kn#y$d!Y&Q}xSeoLJNNGF#aqpf#?Xc&)66ke^Kb$li28d&
z8NQc)@Q_1)vto$|+PbZ@k+-S5Q?eYy!Vr*&C6UJUn%Y1$L4Jgxw$4@I4hvx16$0Z&
zL6<h_q@F0`<P0lsILv4AePM4bR<85fOhW7|GDeJco#~s}vt+Dg4L*0|C&d@&c&Quk
z7%vFDX0%CSKLj}vZgDJquPRzg#K}y|4FFey$H&K$rPH4swT-kuYD>NM-_+pXU~-Qm
z4`*lXI=@Cmx@PaQa7&$muJz?<sNBzulZIF><=->-%$nVQa=-qNJIWHaKrJ0f+HZDz
z@F9*)YGbLwX4S1p|GSa1)3ij$_<MkZI6wdH>fr3+%m5HLEu?!UnYFB6w3+XWNynt^
zFW09z)Tx_=GS}7OBO~1G-1H`p>($xc92zwD1s|Ar7Ks9*{m%X@H|r29x8*QRO11cg
zNC}-7JA}!5cc<8Cp&>E*i`3fdxP=mv{g4K?m1@f&x_)LxMwiX9SpabC0MyBuu1|Kk
z%>MKX{rw<>Z-}PwsLic^e%`ldK%+*eZoh1{`VTxJnV^>{U0NcGsORAVAX0M4tR1et
zS5tdS^|AY3zdj~CAK%sGfnGQow5=`RU0QjA%LDPy+gRZ0p4@%o8!%&_t}ewSmNVED
zfmwCpWi^tqx3Qr#WS1iMO}3Xszvg-chPqpvpb2r?O(_>gp0&t`H{5Mo#}$N!DYZ{G
zUA$&uVv@@#mdE~;K7rP}^L`w3yk#;)@oVs7W|I{K`*$Z5Jde5}uo6w%j5~kVO#yCR
zGYky%_b_lzm!~Fi!LHY~c6WqG#T6@hO95uOHMHnrI5OUQV@u2moq~@&VFy=maw|8H
za4+@yayms~X-Ua!UYY+NmZ~y=ed-x~I2a>}ZOUV@z2d>Gs{<z;K7^Y_9u6`-$KRnS
zCX<sXVPQ8p0RtqKiYpEC^*<-4n2tQ7;xNuOSv@>l%F9cJ`{XuGy$*h~4+Y;hV<#7v
z#GT&W>Lz8)X38&9atdDk<oY8R*RQ8XJLVffmss=9+=^*@Z?C1*KPNl884c=|-Y<V*
z&tp5*TUcPZ&@cC#GQvSQF*FoHET8i;t^O!SNYGS%Jlot>w@Q+Y-hXy-C`3>lCr=(X
zAx3CKd6M@HZ&H)esawwOb|i?*8_OvXDUwQdQOnm=`=X4Q1D|7McDNwDKWnTQ<KDB(
zVP}TK`WXJPH~Vqnc<^+l{Eyh6c;9HUWLMx#)-qB&scax7PoeAjTuOV}1+eNDK%j0D
zRrsYI0cVpd!^<sC{jUO_&Ylc}$?d!nZ_r+8X=%~ZZod={Jo&q<n2_sz+KoNFjLVbG
z!8yTBu`+Q|7^|SW*ycJicEibIX<YW1j4fpOVHrZNj5>Kvczd<{<agd1lHlkcu3YgR
z_PiqCF5-Hgul@EuIV>ive6ez8BC62x|MB$IaZx>C_lqbf5(-F%gtT<Gbax{q-3`(p
z0@5vA(w)-FB1m^PeCh74<sIM8@BR4~d)>Wv?#!J#^PJ~7=U{&G@%G*g<8{Ac=X=by
zE7=;!yFEvMTzomO`u;d8ZV=`svAP3A37QgLtzrx!R^|>yKu3=P;gSslK+~F)6Yc);
z+T=~?w-&j4V5I+u_6q&<{E|W-;X-x%ChFmaqEtDqm4=P`o0!_<1u#dB(~w^167Lce
z6g<e{!$*XJgca<XWWSw$f9I>=#1>e*T6zlJ2gOF#y}`lJ*H?Cwe5bat6-k&U25iX*
z<ZCfDC-^wh*i|!Ha$y^m6ThVX8}3&@Z?KePf*+Wt+o_M00)lsIS=r|#kF1RN__$x}
zmh%hw(E{+sj0}Mc2_NK&pkXXQTK2NGHu!9HuF1{2ckkkMNQtpJx7?kbnR-Xe{Z@|M
zj$&jYqZZ|77v@?T8wb;Q_OA}pp5-`ziW*9f_!4Ww)81m$i3t_^rRE$fw@^@2_4V(@
zY;B=-5VWQy4ypj6KSfMt`p=Y9e}PSWDt2h5Bzv^bX`W}A?@r@DMyx`7Jm#Ddp^HE?
z26{ncYO2*d@x2Oe4%^%#GD-?_fWp>`DVl=TvdOVOv3k$r#G-*<LRlF@Gg8s1cbh-H
z+8u+=?vZe5NlDvMQ{WbIBat0O&?d_5(&Fd-K`knYi_edT8`wx6Sh^2;|C71bF7)vH
zI*T?xYLeO#QrKp1i4&n*KGC0y-fWD6vk|Luu(h|kd6;|gc6gw#e=yrFm`V-m^B}ch
z>Rdv#e_*M!M7HnX=yG;V`f0++B`w#+1<NqYY4o$+%-C2{(Fy#sb#XU2L|#5a0?`sd
zUOtjMR{lD8%&25Wq^z<uKOH?vq3-(ZOofzG2s2x6Y0+|o_Z^E>u&459ceiJCqqA=!
zwztsJ+sW0r&_n6V3TUAqJ%C*dREq2L=6O~Z=ci>PduXU#FEi1Qw8$SrVPnVNww9A_
z32|@)Z-tJ1FFLRJ^l#^C**A|?cW*mnE8DKe>U&5QM?=il>P|r3bT!|=`x;2}c=;P{
zre3;_Pq?6rzEv&ot@T-e3$!HrP6U$i@i^_3&7B7af15iutvX+*6!d-a(+L&wgYOC&
zuq_BaI^5%CrH-I^s3f1oras*-RnA89rtv2D3PJ|Mm1TB>`wM)QlXi0*Aj}szWV-Qm
zBtZp8dO9j=>-(iqD7G&tcd7~58}!umY|Sf)l)Ub5KwMEOU~+zbj#?3IgU5s!e(a-y
z{SGItxU6hqL6;J9D1$5dv7@^?7%76%blQcGInJ}!ZuD!zW+tJAv1+aojR~s6%F$Q4
z$+us0byBUZtnet5t+UJSEbZ+jYiimMXBbP*zk7M%Vq+JT=K>7wHzXq=xzT7{!W?(I
zY_KdLAwiIVxNng#&F}uu?JBjHhH0hhG@!9@z$F-s_GooAF*WWNTuMHJ+fn7(hO+10
z^Q%HC-rmN+!T$ch_IcB1{Sh=lzoT?dq;HXx9lzkpJ8FuVn8lUc@|euLI{VVj7@&m2
zSZKUyi#p@~umG{|P$(<AJlN{i6%~Pm96KL9Js)4GSydtm<Al45dpxMf0WRi^o`*UZ
zO#P6{lz=;%*-T+q`TSgprP0qWzWdv_qsz<s_Q6VmPARQ5HT)lV$Y^POCyRth3~ott
zRcxjzTX?jGO5RHv<*1UA7tGJja<WgZsPk~|`{$wt<=9ir#mLH>$KnU6P-~tv_NQq{
zOUD)#;$E@{F1MMQ=6im-qi?n!56uuT52&n!vATFU<`mp5(l3oj94#G~t&0kxA(T-<
zT%L3cFNTU&PPtHf`D3;>tIJ2yd0f{fqL+<HZ%WFFZuWJbKn9oPlW7?AwB^Zbt=Qb}
z+RsnWXI00cS4<{_&HfJ%G4(xLOpI>uVWVaLtT(b1LbCMxSjuLxoC&rhU}}Y(Kd4)E
zQ(Nga-o3hBE%Z1y5MkxEodknFwslftkO+vfHYm~TEob__rFc5ca##G@P0Z&U%37-!
z5P`?DH(Fi0-i`cp+&L1J1$}7ndyFn&tt!LeU4VU=(xH<IaoG8K&>3y_xDjsu#cXi-
z?!viFl{!+Fo%n4&i1zm`x!|O>U+-^f(89wqtBtS!_&sViO}-kM8f);v$e6wD%)#}8
zzjh^TTl(#{d!|n61Lruro0{<xJ@h-TeByOJy*ql8q$m`(<T%UM)Ti#^WcY%jF6ey4
z&&k4Ukv`lxa~*EMYCX(PCo8muyK)egIkxL4Ds;p)0xcRoKXw<?YB5s1uKmO5I~KP|
z>U;I>FlgvucDfKYe~QSlRStX96?mV6LhA9*XYPBq)<&v0w#ua6oId7?kJrKEcYa@(
z<rA=bT3A>SQ1OctohYB)suK~TWI*Nq>2Ww@Z$hC*w(xFeH$2O?iNe7qhIipi-MYxg
zrTF2_-EXmR_YVxdPs}OceTLmHy}h@8d^McRAz5nVV*7A9^5o*^n5!{%Tr{V~vE(P1
zq3L@a9&*>>*ZN38yp<{1vx^ZQsBZPg;a6pRACj2{UdofcT{zyK<ZF%gYKSo^sxuK0
z(IGLB%n=WB^-*=+rwJD(%hB%1zb+}5Z4L4&_8~0cbe1kKBGwId4#`W4gv96t9o;!i
zAH5}@M&tRlaqgwdCH&5<2bbnhZb;g_6Zem5uAn6Wwc>HWK7FZn=D_L>Q4SVmBFH#N
z=6}dHT3uyoyIK4G3JZVT(!wU&NOnRXs39*eFIRMHchgkMGD^5T$%@}=hV1aoOP59r
zU}$gC6_$8)b@lGurVfJcMQm19TGGsINkv;__*KtaNgC|l&9Hi}#i2fFxgX|gZQBd5
zJJydJK~$C`-aE0{OLEf)!KF$i+)MfqQAv#0K7O>GUs({(#%tXvN_Kj7N1^nh?voRh
zITXK-X|!B2s8n-z%vD2}T~+{X2OT}-?-fz%^A|6oNd!3Q2NDM0XD`0>_U@vCgc!E8
zEL)_#2fyIukqb{kVv>pZijhH6(;VfzN{=XttoOrZ-DKXkhsAnMfumUz(^)iXNpsg{
zeS6*kZ=(Zd=fkFM5C6&_n_L-{rl!)V_%AJ4ZjH3$&HiYt6KwMZl}TI`J)0)xKNAy+
zKBu8U(JwR5y6c3snW=*xXNk)FA`38Hd>njCd6~(4dN(zYN;`gag`4HWN~VvGkrDhH
zL*PzKPw$Yh5~`*Zqd31vy8N&Z<ZNyLRwVr0;wPUcthhnE#GjHXTbc&mXBWo072SH|
zw<?sFOKl#H27Z3wZ9b2QxYv(W;Ts)7kDH`$3W<l!p{MIB7`)l=bUdrAh<GOa0Okk3
z_F=8n_c)zffuAK7CF4g6o?_=lTn)QBUw^%+rgry!-1K|8Z20dLmcHj@64K8pF@t-6
ztxy!mMWz#6&T#qpZC!-IpqD+VseANEOs(+#*YX4yzT<C|QEU(3aNYT$iV_pTtBcwZ
z`+M+u5c(?V8u3JgOZ0H;_mIN=n5^xr|8#jgSHoCgN4e{JIwxrlU*&q8#PB%7cWk~a
z?YBy;%f>ps{IC!EJ>PVHPi(G0Y;T)5sz2L)@!ayy9@zf=Hn{W_OBIugqD;Bjy0m5z
zyf!&ViT8WDZdnf$oh423nG6ofbK}KW8bMn48Yd4ppzs0B#BUrKv#x}k_D^dQE3I%=
zb&+>Y>Z-wYQ14BGpwFj0PuEC8j&Qi5U%qbjv}rqDaI>wz!-bH~>1Nk}#;6B;U)L`g
z1`M1U4LLLBj}O*<2_7mwZWKBuF+S{G!wRagc4utv2IrhtZVpLzDWCSHvc}lgr_Fu$
zHa7kiZDB0m{#TneQz>}<SF|UJ=x#u0xd3X-8Bq~=>~5n;Jp6j4n6pm7_&Q5*C9%@=
zRH;ABPgVbwkk?W1)8jTN<>tiXGsJd>_C<l*SDv@arR^3yt?f1>d)(aIVhR}rzGI7=
zP!Jswyz>(!HO<c#Y!lpzuBfnM*O=<3h?SzrSeib;P*qb?8+Fji7#e7q=%=Hnx3;x~
zemw;RncKUryW?F0NlYB<7x}-->#VuBE+w~tT$z!3;=4q4yUVL9v)Zx$mgI9we6z3H
z(Q@kQ61FfV&vz&!B9#2ZKiXJYMnwv=9G;KZEw#O4Ge$Dz=iuN_7*_bq82u=Pi;*=#
zp}br*9@gJ4!-Qr%H!u*6u0bEKM1z7t;J(q*SzT=&hl!QS7x*7qM@HuS&#WY`!})ht
zuKUxG`!k93PGh^9z>MbADUey@J6q2=`SG$`T^$LpZSTOPMU^nsj0(w6vj9dFQKW1n
zw)cLT$3I%66L0@TTym!fwWQ?8Ff>h1Us>kdo;~XF{Pp|G6y;soh~4Z^156KUxtFr?
z@>Z61HMI>GDQ|QP40^iVsc5~|{yGrQ$?E8~wt9<*QX8~k%RYXVlnjAFjrDBHd%LM(
z&|=HNfw@9VOsK0X2gmOzMn*f;0<jMtmMY3<xXLX1Ef+$uI>#sCfLG1$u)HizPV&}o
z1RB`fZv65m)6@852&w~1O9H#k-FkVweIAI3Gf@2)f(UY5IjQ8sezbTiKn>R&{yHHF
zU(>^p7PF+E$gTOP`AS3hY5PJ+AC86o;o$J^F6{y>3FzfOFB@RL6*?^eVpH)wQIv~q
zUERyKYv<9VOLs1Yqul*5DLJTEe$*6^@G>en6g0G~R^QDpHGH(O@NVfs_zCpMs{0A3
zN>GwcY!DGXu7gNWP3-ZoO`v5q8PDVmlWw(4X@)@3Vbfzof5iO~Axw!Yc;1_uLf~8>
zNn1G8GFMaC=#$w@B^=a?)vWp#cN9<LHk9cq=QQ6d4<GVf+uUCS$|UM}J?yL!&Loih
zrH+Dg3z%&+EWol4M+Cj?SKCOXi>4wztLbaVpk=3UxiOKD$k2OiHyBj2#QJ#qBvoiF
z?Y}L~$y)Cby@%cIId3}V7bYepUJ}Ua?AyHY^1HEH$vnnSTsfUC%<_8N#GR!LJ2)5=
z?J@48DEPb5)>kAlZ+ow{>ysY)v)OQLJT$&TA&bAj1K(w3rlV`1J36b~j*E-y5oQ3J
z7Erv-$}D)tC2+BG><7TQ*V{W3LmWqZ-YSKp28)~FE?fAU>DB|1S$>CGTl#u>zc*KV
zu8x*(AEPSqr``?IogFm2L-~$;byQ%$%yfO!w=Vg68ew=~DCc!<UY^wc{HWOe_JsRp
zZORlb28+|A1?F6B?a}D|D)Mx)?-~|lprA4~d#E0pEUkqNvyLU14h6X<-Ix{~$*NuD
zed6s;Mhw-VucMD-0s<ec?k+&sh=qlDc<`5y^y_~|OD#IDkw8_NnAmsRckckyprYXF
zsbjUb=y47zb7f>@iiAM^iiS~xz~(|hVxY!!;ES<w{`l4HIc~%&qVu`JtgBC!w6q_!
z32<-#VC|KHiC@h5bI)quVqs<`>Eg3bOD>C(nb{VQhXZ7Arr0_Lt*V&IS35#?=!<XS
zRO5DuD)eiqI5?&zCg@E%o?mK$Fj-98;}$6RN{70+Uyq{hT5`KPJN?Qv-YHsVG$=R)
zN#NHY!z(?_T=i8)XD^-STxMVg76+0Ripkuky>B=BrvO#dr9<7*rHNI^+=~!D(#2?Y
zZcZ^gwSsP5)?65i&`EoHL{d+3B=xJUEpY~dph32!y*o7s2l&0ufRhGDUG5lamT770
z>dMyKM5NR{dnQ4|-<U<Px4S8xD3yOW_}?F1HFPdCg1uS<brGL>N{fzjw};5FTtonS
zWc9iT@-8heD-f_O8FWXgqK8^G4kZ7$S(u?#2zw7rD;U_hk_kLXNO*olKfj(Qy~@J2
zRaG51J|3qH<@oq9G*3$fd8fZ`XvodUX<FM^+A&9p66JLk`J0!UPTC3z1*>~(xpA%*
z`i@7fU3Kzw_4Dh|%Hpf<c{1tP_r8&TN=JG+-(t!!n=k@`(FCratTNG>Qwj?UQLQiM
zKBHE!$-=G$DHpQ{2?=(Nm*%>H3Z^eNX-9t~;1aWi7r0GEkp&nB_N&QS^_sBeC`tWV
zE*diiu(C7HXGvtqa?fsL#i|DPuSY=&mFCEjlB`YMj}Nb#CDtfjcyyQX{K2An{yZWg
zom208VbM$3pY=FT2yC5?<PURfMh?vrxT=3;9>PdydXM?N)<vnXH#RjETkc~cv~+dl
zk%v)6_k1|m*^6>p)ir2gHT!!arSUC186k?#b||8Srod!=g`VPI@kDaj6W<ff3>|y4
zDN@|}5u0mc+ZCQv0an>pX(C~VKa_K|5p<TMYUZWeT{+s(LY|)jP_K5uw!FDB%Kd3~
zS0?wdd!@OrU_#L#rqatlHO(2u0BtFGzT>zq>UQ`LEMI6x&O(+M$s-!i(kK1O;OJ%*
zfK-&WD{8mN7g#=;g7?Zkr*9~|pSCdUy9d*KIF82WCaB98op>QWJw)G}g~F3_P)e8h
zAc!HAm08e0*1sQt>2taCtT|Xcua6g69LCnf!*M3Cy{xSIZ=I`kJciQ+&)Wg(0+bTF
z{{9W>#lwI6Fr2VoZe88jsPi~CBiO*feWwTY{P6z0zw(_x-SHj#e#&|p{;-);tdPnE
zKRt=|*>40$la%!5TDOn#$~|3r70q1d^54!9=^b@RyqSfB{Ejn8FAk4-IzwjcXHO2C
zN5<T|y}kAADx~dj{>??Hua9=y3Yd@5G)(mL0v>CB3x?9>Dx*k+>fH{T4O*`Vh{d(F
z=l%pD<E<;xY)D2wfZWk9>Uu%xD=TH?vEq1YRHn?>Of%|w-Da1R@^V{MRV+Q!vc!dX
zI*_*6+T+-llFq&x>FQ?GYIK-Bm}4Jo^4b5{Kh&C}dVkUxZRHEpF`q7DcsM?IoW|t~
z`M`sYVGDDe{U1zzlL+~`OoJWL)-W|%VRrU^^BnoEp7&QD$1Afu_o!Vsb#y2J-{Da7
z;vLp6-(P+=7Nbg8XhoQNwVR)u)wNUb^H@QWW<t(zC6_n-|FD2k)}o2W#*u=lZ0UI_
zwA9Yc*&jB$=%pS4G#h6dd0+QleJ77)o$Q9%OAUbj_+4FXYa36qf$|$AyZCMGsOCjY
zb+x6ny=Em!QR3nJl<bnOx>k%NlPOx$91)`?y%??+9~FM;SWq*AteF{a%csP}R!8;s
z*iLGa<-?<slV8vNM(;&~tRpUN2_5~Hk<6W2n`BgeDGMj|;UY&NO#|OBvNiZ%ky^)M
z3lAlJZN+aZu#2W+q|1Z(42fMyHy0EHcYD!?`!*N@h=7%Ic>WTj^{V@LxGS@7P>Rp}
z>cRki>UQlD+Vw@EX-CFfd;Z30p+{%G3>3BbopqrzMtj|^-O@WI^$!fN2NIOpGw|Nm
zWDZ;{`l^2FFPpxjcJZ$-K|B^(!dQu+_{HB(*od${M}X(3#h_uei57{r*Xw`5x3#@&
z+Q5NkfhZr9u<_l#ZGPH0^Qearb8fWWtV-O+m()pbTi)wdGV&1D_w2dl{y7fA-979n
zDbZtln~9&o_Bcs0w2dC-MRcwx=zTrj<y<;l_Ov^q?|XHdr0=)c_1Q<33BoLfPeW~?
zs<{Ytqv@s!;iZ)uKtq&~36l<-jzB(iWorAbaCYYObTtF3TF7Iy_Pw0aG$?6sRvYz(
zsm<r;o1{&4>t37HB))ZR@DmSobbAIr_PZ}_K1g9JG&VN2j2RH@%PRmd?1Ft8m5;{z
z|4KD+C%@;JxGuaLH#u&g=DUa4y9*jf1@}jXU;ysJcg|k!CdbES-i06_v1`x_Op?83
ziHV0Rj$y`0NjpZ5C(%N8O3?DTDtEZoiUoD8OzodL^v`;EAz1pVqL{a2ZhZXwB2$K&
zEB2PsuYP~`eaSnLp~!#zD(=7QgE@Ig`ODr-=*vn2`zICp&FON&3-UCL{m}|NsK|Df
zi@wBd(Ot&D0mJ55vV7#lgpx1kNd1V=Zd-Uq$FmG4XL<SGW}d#j%jQ|Wd4k`UT6RLP
zYQ6+%I1WK$1l!nzqBoop)0_);=`AgJz8aFg+dhAxBgsNz5u8A50@cQ~*)}S{LABD%
zW4;UbRSQ>e?-gmlEZ_FVkG~VN7U5-;FWQ64<XG$%s4D$xdst!-+ZqjVnpSXLi|TA_
zY>Xr!)>2kxv}CD6NWD<y81>)`#z3s2i7Z~TzsPY|S+_@hdu{&n`$7Y!o#)BTSm$0o
z|Fa$>C;&>SNtg0I2u~P@sdOB^-X1Q|lkB53ecG6@U2Hv^h_3fLrOm~p5hqu^uJxi8
zD6g(w4ObNU^5PRobkC+!z8-Ztd4b&J#hK1;6GrQ}wv+MFV0Ulm&%>O@f;9z+J+QS?
z*W6#*+dDjzMIKH@7LEFGX0j}ek;1%tH^t3q+L1Tf@$I1->6h={AF+GsR#}UgeZ&2f
zyF6DHuUt`4;<F?~d;5mfXg1aZsVP6uX@1Fh+uN(0YkBl1rl#LHE|!FcgYIbjg+#t&
zh`5}Fm-oWlLKcr}y8bXDqZc|!bP7xOF!Kb)g&uH-iJ0oQJpL~xHC>E}00O%{#kHQc
ze^~K@|A8>e;VDsDoJ+2b!j2K>tp*jiQBc_ex|CGLKTL{xXyY4`d!pTB9~*JUabH?`
zvp?C!jUwMIYO3$n=)2DZUM!M&a-Wc#TwQsb<b)_>@+)g8{kOaOju<N=e!^4)Y9Gth
zJTa0x?P1~4Yh{nZ%F(A|HYnZl$1`Xcxn@C~8OL8^16NNV?AOe5=UnEofzOd_MYld5
zmt=>K3JH|={pAUa-R50lkZh^&=g-LS>Dk%8nSBElp?J(clEqOuk~*wrmkL(~FbLXS
z8?zE>bpMTn?*zK{X5Y>%9FJu3txODf9X*IYdEY-en=9_3I^M76JnCloG6GPJ*24H%
z58UD8W-WgJfAbD+Ggl&-%rp{iWAJdx)cBcXq5q31CGzg~&>YI5{5(o^O?4=I|7m+?
zhw{x!eec`fm2L-PC~BJ8$_i`0{rsKE<3e+c=rt?Z9=@W{mR3G4(e{oI^4YaUmVfL?
z-hL;=TUJ)|^)T{Da-1z=aOD9$wDI?*Lr{QA2JPe=!@<c-xjd%?S2Sv;C-9!sXRVl4
zHJ4^&qu27-_r~MvUu;k<C7VI;j?HiN3t)GcXL^mbBVYGU3wb>35W?<rqbo@>(qDxC
zB;s@KlQd3AJ+jb8iU`fN3=ZEmHt=|yxd;bkP4KlO*zT>EW%YiGJ<06ZiK>u?pxM>|
zXp17dVtWCoLB4K}od7$d(Iyo1%=b0b#pS!Q@6Cp?Mq=o*ls`W6xcS?}vClcKxh&YW
z46;`hmiHrmPZ(ZCh=z|25q(DZYz;)jx_8XmZ+cOYxs#79ApT^s+S<EK&eb4s><JIT
z1)SHPNonp6vyMopmd$B5NVlKpN3n``vYw${;zO`T#}~a<AMnj~0&WPYdN7kn*$Fx&
z8Vg`wbw0!ywB6O>{)2X4aA;bKq^#_D0JKHuX#+7MC7MW3cziF-@39bw$NMb8+-Jas
z$Z~xGW99MQZ&|?Sls9D62H+>b!Jb#_Q!`V(Esx<(t@mSxX<WYN14#y6x3@yAw=;n~
zBWI0^9pApeT5q4~L^5Odpyo5fm2MBh@we|bO{o=$GPr3ISWrd#_pJTg(U0y|G3?=o
zgF*X>{13uz)5P7(I=Z^Mcu&XWu;ZuGx^K#VSDH_|t%Z(tpS(8Dx*{U#M0<w4Phbu9
zJJDh`y>E#hPqWin?z7-$ihu~l%VXeu#nR%iGS-PK6$<av^|QCMnul+i2TOY0^ccXU
z=I^dDyuORXijALD!l3H&A5ZG2bdnH^$>9$G1)5%Yf*Loldj9w4(QAhR|LBjT`F|L&
z$IY;*eG6c&+I8--Tp%B9q*j>0{x|}gr;YEEW`8=!y;h9_@aWjXt()JIZKbAQF0bqp
zd_k89cGb<~d&#%=VK_tJv9p3WqCfJ7i6d|Oua0L({yF}>S<7B4$rJmUEK;&>pQ-xO
z5CtNnu%!E9=yTs32IIdvJ-ztSUKP;E(t(xd$AujgU>PV46W3!~WE>)6-@kGRxmXNM
zOAE1L;av}7=bR)^|J&nkBHolE`}f=GkHnXwMC(i61^9jXWzZsu29#l!@0J8rkQRdz
zns_9Tzm31iMx*Q6U5y`32NeUP(1yc&+y+)N|GdHGc^%Q`su+qR^Qi>o$nON8t)QZ$
z8F}#S%jcgNHHmkIx~HeRy9+8bj>{9<T%Fv=-Zo*3mj{@-*2DPR+^&X(<ReajjJfLO
zBZl0k?Gk8tc}Sx4B%YJl1>)4Snstysj)A0vRVhNt=r>>0@!zF%^k@$$b&QCrpI~n}
zvN1+N!V<{fe1zxsLXYY+*l;*kWi4rOafRJc;=4^B?vJS!kKR!I+lalgX0NZn%D^Hx
zX6^KAU`rJ$glZLv(dG%yFH}#vvnN0)_e1Mn^a8r<5n0L_rmfV%*D7HX<=Mj+-8nmF
z(X>r|9pz#~-+%D@_wqTpIc~$=9!ddeW0S}9RNRX%KbhY`{M%Ol+xb!^Sb!BE+{;1b
z_tc?HgDOYJo-K&+yb1{d35;}X08`U<^yHUWR`dH86T&RjfDF|#EnQPN>~NU()v7<L
z98-FPfM~aV(=^}5nTWHhZ1~E(&>lp8pYf{tD2-xwKjRk#5d7;K%i@uUy_wy#L79Au
z!r&)4ouq)`?3E&nz4HQO(z&b4>$mX~(g_A_PD22>sQBDg1pk>Tqp2)3WnQo_GP9pJ
zQZ!t0X1+%-jIqat=j3pAA`dG${C1iV&Qjj-<0UG~yd~Xl^|gb8?(Nrj>p3cFKdt=l
zP}|=Wj3|SIy?h{_ZeWKOD!Nh@^0T552;PsWCZV+AyHDkVaX(2nE;3(046V>fXZJS`
z&qEsEM|*o3YHBC&C%6wN3_yjne;IvgFy_@8)iz}vq|D77F^A-?QHxGS&V$PB(!alN
zeRx2eo}uT#pQ}!lQkGj>oRi-aivU5@ldBmFXNjiK%|k-F^my<87SjHvTO@HzkZWM4
zk=$n`C^TFo7pdK(uD-tQX&AQK1%V(T$M^SB(b;Hq`78(FZ?3l)$3{N;iDWrC1h!LO
z?w<dIAsF@=*SK~^#>9U7yWND0r0Hokm@9|~@#pxm2k)?PS6L4f-(y&+WB`?|?I#`Y
zE$gE1EJ>5d+3Vfn5mN9_Ip2V$2^gxO?&!1Fg$4^IvJ1?Y3gXRU2PGDdIQZ2w=Z(7s
zDD^@{GstXPPG5XGS~Ybway{jWn9oo~WA)4t0p~R=GW<%p<9kuw?YE*jCYb!DAn8|#
zK#T|iq`iZ=95SSpfmE)9*H-`Qt@i!cdkU3%?T?e&fAX7}#-^vE5Db$)CHb5~y4(p9
zZU`Oxz@r91!VYZi6}-xQ)DEj!aeE1lFn|AV|499QYF|5_v<|<zRcqWVHZzBnFf=be
zG=aN1!$;N`3(^1Gc*wh#wq0&S=nd-QHo%=c3}&>oiM;y1b-j2|tFhUUC?aFJX6H=e
z7Lm%_WoE?xnva8|nI-Z{4sp^vJL|65DnNK+XXBd|(SL%|H|^O7@>{Q;qel(9`~gf`
zX2b|b^GVDRp*&OYyKH2J-?{7sdN|8-y15^}(GY>2kgf`UvzO|vZrHnEpDh?j65GdX
zRWe}P1yV!`&k)!xvVT$Q&Lw+=-99n$1P7NWaf;I=a&mDI9NgO=EJeSSXI?oAe01=W
zz(5DXB{R0#ZH+>`Bj|}t2*b{~U5Y8se+w?`PXLFaS&SAS?XfYVO3PwF@gQ1dJ=&dy
z2%bu#V+8??x+&c7fBgs<3{h6*9{iSxz_novK8m6ZiNAasZmfh?r5dq<2{BYhjZ+)I
z?@jw)o?Y|r`_pKJ1_p$&ee4cM)(0<g!4ZG)j>EgR1a+az7kMe$8+%1l{89b?MoEj?
z3<I(RyCFoHDqD|N76&D+5c*sLXl9?+CvhPw5)q?paLC`c{qW~AwB{9IA0+UKG1f!K
z{`gD(-=!{Iox2R-jIDO=fe(hCPFz0_<bNVutkxFC;BE{^LtAM$%D_;Ie=mT@e1Knq
zkbQsIURGWB?3C-@k12LOu-1GEh>wh{Sd6w9G*P2L-N`SfLcM_EII2l@|NBaJyXjr{
zAD`$=cNL|q`)V)n41MU-(-40^1OM4cI1tuhq~4AR{x<ZuFz`1E{sAUs6KM-F1R|Sf
zkB}WnW2y$R$PEd^6M6=|Br#T4F%cuu9TKp`EP-n@dW{Hy;MF9H`J0vL2L|6QMlXRW
zw_7zIkc1E7hkP8=&*0`!@wt&cr2Nu}-)eYohy%`2g)Ikav_<J~Li8D`cHaacK!oEz
zp+Ib9?%w)=6GHGZwM?+l5#?VCG#UQuPdwgaC2$4xK+ZarX!>sJ|HA?T7cKPQJ&3cE
zjY5c!BcrQ#FUyVFId)FDm>FMy`$S#6*xzr%Wfer}dH==ibtEFib1)LI$r|8XivL<W
z^RKny##fNhM?<aG*WgP2f3#eqfjAua6Ig9T?Bb(WbKgaZn9pZt#{NNL27T5^4XImo
z)!w6BeI<r&=lg}4DRwrNsm@4P6WdAK%epqNy1A*oF25}fG@KdYP}j{!6d!5IJ<Uf~
zvsUo0w`5KdAK#j3BjbTLE+jkJ*Hs!32QpuDLntwkbVG<Zo7nQ=d*fYHX*o?fL#c&j
ze{B74mTdaZj3W{Z_3ln?uah_SW|URa5%38hkh>q~FMi`HPuZlFdT!YKCFyNf!W)&`
z$4|IkSIXuGSF55_BN-jdM#lViG3M5tQq|f`*C7#I<jQs_X=mB_A^On_FJZ={-|QUY
zrN0_SyE+Hl2NUkX7E{;cz|8U2X8G*Ok=4Qu`UBGJ$n+eUeJ226j}43|1Q8!H?|sU}
zfU1)9_{}^4_nk%}4qLmS75zZkp0#8YhU4~GDar&M_#tACq2y|#L4Weuo6dia1CLzW
zOEPfs)qv10mBDXrU#d^JTAxwm2wtOEdfhM8Ve3*eQIEv_BOw^C;w6~;o#}iXpNX2T
z4G#E-i28GmG0-Osu#t0x7=QLHMLGhvwjW}wPJ!|IC1h#l2O*AI>e4e2%At<}MI*pH
zR3yir1raz)UX|^7x4rr)f7BEk6@@-gAb}S*i@d?AZRGZ|r&p;>_%Ap;GikcMAfdhr
zE{ZYh%79gJijkf%^FHg#f6eCA6Ue@w*^NXaYVe*bQKz37&T5$L>r0V$aligt>lt|W
z4v#xZ9vGLuT~+<bq$hm~946^;!uig<XwIEIGD<G$ipS!q6{jA;^h-4=(m1R$p-{v$
z5+Z)btApDEx39A%LrY`fwtbC`e}MY!+m}HH6}XIAygcM__)^(mDHE<t_Ix2yYkVLm
zKid6?TP{<0V~<cxC#LXxA?Ckq`lP67O>?fvjdY$S>h_f+7FsOo2qE_^;f)05d0&Tt
zyLOgbymjqHLxqFgM-ITmb8YI0_7>uFaJlA>7O2_12o>Nb8R_b>+{eNQ>#9!;jrhag
zbeXgE?eEd<NBPJp(+|VT0sn>sYxEf1@eS{(;Ak{dgd991hAa-!h=*t67`gXdRZJ=|
z)N;uQsj1#u2YvPR)1g=*9PZBWj=9-c)eE{tF7FRhvpqdbv^=M4`OeSU-jhFM5)JNU
zq5MWIAsa8@1jZ@OJV(!L#dcI;*pBih^i?L}Oj+?;db+!jWJdb>;`(@>^+e>`0#sC2
zSGT_p?}x~?Y|k9?)dfr7ix$5nWY8XsVPPbHP7WW-7d<~F!ESC#Q&+jbe(FyrGE82!
zg^kK$zHTS~Gvo0>rO+2S87G<M!sGAOGxif#El-cKE_Gw)J<ev5q>Bv#f@C~q(`U)r
z^z-xc3K=(lh84;Z4?Ck_M4+tm09nW&%Qg!>Gu5Td7R&NN-84UngyP@RF7StidFVz5
z2{9__qp=Kla3G=x6kmktJ>}|uEAyhLt7))vaV)j@tSgw|dL*g+*IgjtDV=|4(_a*u
zJ29ae9{w6g>0rhu<jNo}g{P(x6ifN~R>bG3UfWCG7eMRkWfJ(*50x2{COFZEj~As$
z**wdXXi!m5hKE|{W9#s0_&S%qmrJy$3!8$K2F@0-X8$9jb<euQ)pzqh!{g&^=l@1e
zf32yggptmkP42_)gsw`(UvFpfIcL|ip7#W<M7=x#nxu^Vidyw92=|9r(e`~(P=+@z
zzl;0{IeyG#W`f&IM`j6LKfga5vM$v3y1czfGY4qTa_?I>Z76OxQdEH$7gtgx%=@V}
z`bqRs$(E5Z<7d0%@so4U4C#3HgGVi=K$S#kY~|Bhka5q*!`h_~C1t^KbH+vQIukZF
zwqgpA3`Y{qho_AcNy}qJJ0FXIE!Rmy8M#(s+5EHPWew_@%PPCc%c(hY#lzRH(7&jy
zeu6)2RTh6h<KS8Gxp#C|)(z*B4zGg_buTA^0WcIqqCo)*8koafjp8r8Mzc$;O9%-F
zw}$lI5D<{zEC77Max0me%w_E_GvFA|xdJaZIpg8IJ((+A%!Kud&+MbnA0yl0Vx0P!
z`a>UwB3L$XHvnZrJ`G1y$3sIS_><|s3ED1fi1TM^5G<NKM5kOxVkJ1C#JZ^juD;@I
z&=B;jn}_%YzstLk?&#NL6%|lNwt(@T7m;(d`{y75_R-+-jXbm8{iP%ahbt{DzAk6E
z>1)9{)5m<-nLL%<r)Bs+on<_!$HA>o+ij&g{2ZrmI)c?VX}`3R|9TmDVcB=v7}G;Q
zV9|sBNOh!D&H#G-XWQ>-+iQE+0B2#oLK`YK#~*w0=i`1<2Dj`26ZGcd>He@(Co&=e
zRmgR#_0CvT^?dP#H7JOZK+8?d`f4*UPzi^znKRDL{;+`Mn{Fx!m6jQ;Zx#CTJH^SH
zL|Ysm*>c%`V9;)BYHl`rTCOZI8c6y`8GA=P0<AYZMdC%l97<WXu(ZMqCH^-py1zWA
zeD^7tU<g9yLuDr_`S(U;m0;S<9bNLF#e1>+aLWd&3(l@z;|X}$nVA74ja1%JB^tG&
zJVkWLl)tJU`Ds*dsR##Z@=IqUWs^n-RTc2bC_W09&QI>*yN?5W9F4}%f^O0r(q7d`
zgqT7`3i14JkIix5MugDkl<S9N*4NeB?fSO6e#NJ&q!m4=+dlQkBl$-G=fl)Z+G70U
zwkLekn@f9ucXeADkRIE+A9-vG`4!+>czK<+HnIJz^h{=7>>*ufwOhxUsaPqPY33N<
zvi<C%^8v^2q3?>RZBd#qSJJh+OiD(<_{C9ri^qlIaT_UDg+bHfz8)|wrl7rT|6`nR
z^H-G#@K`K36&dO;ug(TXn8s(|D-TB_loF*v^$oK2CG0Mqm1V8R*Yc8TT54wlTyU|4
z5y7YV#%$pldMP6eJPvKfBrgw7;PD+2q+sYNI?vd}`yB!qB_xWEsOF|3Ep|jQJ(!7x
zrsn=3q9=g-+Xi4qockXkRA*$=#yk7!A8iic#>HbHA_lVez)oK^*!8UBY08GPo`{12
zQ8_ASH#Z~L?}l0ov`9ly2NxG9{CvYD9?o1ePVu3pbMu;7Ha=cn0zyK33gCC91l42(
z!yD0qqQT$L4;jTF_RH0js(xJY%8EpZNEbB5w<TSC;>ZPNPgI^(&ORhiDd2Gl60TAd
zIHBLqw}*gbr=_^*<?U-n3dx&=*&k7)x0yptZbPj7-5R>e+EeGg?%oadV;xOk(azIW
z9g>&t-~L5Fm{x~UUnh0;I!uabT2oP6oQdyC4uy<tOQ+q;^mP1Zg=clq4Ko!PS<`BZ
z($cMOFj*DeGkfZj{@c?4^C5ILX0c9T-2iP6RJDKE35S$Bw*j>i%kBssJ3G5)Iir1j
z#pUJl&hmWK<+B=>Yv+7DX5w8z@l?ScU%&Ela|eegIyyO-i8@Tq%)~bGlbMhgj|1Mr
zXT7D8l9mY6v{VAHdd1QSa5Dd3A^qQAE<4gQ+teFkQ5p&R1awnS#F{hQdZJ%@pGVur
z{E%A!QwhFle;k1?Fg`Vv!oD(LK74NLz1xL#JG$?*h&KKMgIKW5Y)Zw`2WAcX%*aIh
zF<vIWcDr18`*V%=YhyfIM*ZTl68$!t)&6(ku(?xF3?BO>na>Sw_(=<v=U+V=H4{x4
zwE3f1f?FR%3=HhubZM}wRtul*wpZ?MZ^gtIPflL(xE(~0UB3MOETt|IOwUndByyAx
zWuxqz_J3P{q%ld1og<3lv$OGzj)$Ec?SZ6nC--YPsn-14!*4HSahP-@D#vp9^kU-T
z*68U63MCY>xa{BhwEFCOnh&9LO_e4AG@$q;?PQ9!yNqo3?<;Z9>9Pa45*Zq7)-A}t
zO{Esk)+>mu1Oq1=X>5A@ef<n^ePeS0ND+DNGTA>)4@?-_{I@fs|7hu^U?(rXR6Mb5
zHk_<L&J@z=aS@BGkahFv{TpVwhE4Ez16r?j&oHz<bzy$Q;D^_Gl902LlZ%@hzvtKO
zpF{he7SbN#9}a`c!y*EX+g7dtoVh$d?a6tCnP#*!zd0gs->6aC06)7*0E(M_XKs^q
zeQaL}4j)%vmxNrE+A}34PO06_RvS;&ZapU+yC|YfBheBKg?X%RMkH`sA<-U-i+^|#
z)CHbsCf#~}7DzSJM>l*d+5tcTC!Op|DVsEZ1BsEq4jzIhcLy&k(wHfV8NiBPi;u&y
zFr-Rc#z_4{cm7Az%N1Lb=HKjeq)i%_(($coE&vs0SZV<E3^8jqQ+Gc$n+RW0P*jvw
zJXY~gRwjcsAJ;*ldgjK#FO^adAR5w7J;55pka?6f`?|>_zNY3G&Hb0^%IfO1Zk<@9
zt=HF@zHo-n`d6XFz}(z4VW0i8-{s{Bkly37tEd20l1xu)?q#+PXOm6J6o_YMud(7)
z<_Ji94{n!Md^A*I{%)TSr$fK$82@fRdbmHtc)D#68cZREI`ko4IBvV&``*rn+r!SQ
z=VP>BZe7VN6hgNb)<Y`NeU|&AU(cfbZZ?Bv15I4hd41rg<w6vPx-0rpnedy5LrL_*
zn|q;^j|_B1SWG=jUr)DTzT1Zlfa;=bsoj;U*eWb}vGU~OWVmvb8pcNn;NrwyMwc-}
za@}fS8Y|lpBha(SgojF9R495ju14AN8vo+TQFm_C9&+TCcCBo|G;}Vm=sm0TXF;m5
z-N8CY{&3^DYm+GLZ&c2c_Kzhw`vnNsVx}5V9gX4#$1_V_v{A$IK6BjA4R(IG#5OJ|
z^!`?s$<9;`LGe8So2fR4qy!kmch=U#;_PI@#psthJ0r!c#O*T@084v0EloFBpRjZN
z)$@mG4O3aL1CWz#V>g{A|D9g${6#lX%SP6D;qXwU8)9Q4Moi3F-sI3RFp*m$vrAsS
zoZFB@Z8`0P_*3JGkhs@a=l?}j&0miLD>I*N*{%h5cll8LnALMGGvLEgIoE;kL83rb
z>jV`CJkc-*_AnRP6?1GoI12*GCG4lb%Pu^85IKef=7v|_B`Z9CmeYqr_B`;Frv}(5
z4IT>Gs2%#~qE<fvgYn)xTaFJYf)o;$F@*q(Yq=XN`iF+@<VksQiuq`8N>CY3ZLd5X
z;ewj1v(eRcD^P1EV34oqW2W{Rlb}ctt1jsXpq^*Z)03%|(O?e|Tr~2<3mLflHP;aR
z3ok#RYJgYq)lD~oCJPuJ(HAdAr!l}14%rEtvk&jI7uM2CwzH;oyFN8$2rk)6^@BaG
z21fJuXd!+kVKTI7$aen!bpcAIzD~#*??Hrb-7{zgk#Gm+3nuZ2MgTFpVKS@QhUROn
zfKilZ!lkq$O`Ev<ft)4HAJO?~fcvjzMB@85C?I5wolKh1+yE~k2ofq=P{0v=`aM9$
zh@L0>i*hJW{Og_m0}vYC(S<Fgxec?mtKj-^GZmf{0Ul(&HE`Zd+SpMdJuPYbNA~Hn
z*dGYNt81$qjNUTVqWB^JpYT6*K$YEh$Cyn*!R~&y#oWC)V?Y8fRmJ-sg6+^hTu4hm
zgFBVg>h@Foq&Z6rl3udY@W=Ni9g{orVKsNDdp`@hNi?X4>K&T+39Dz9`{uejMahn7
zU|ucx%g?R<-R}-zH{ZdPMhBgq|7rt>)eJ}dA-2*q5mGNYQP4vuFy~OdlLJ)y9}9yq
zB(MkfPDE7|=u=`D_c^$f#7Zn84|1_}?Jiks^|V=+(CaPn^TITCN)lNj7h+ElW$z4f
zoM${2EO*d(^h(C7UyIL}S-fl3tdb2v5%3ySP*3*GzqeDvEtpAMa&<UAKe@sT?KunL
zMBND!VYIfl{mHJOiCZA-3HmbE!TI{=fYfWp;rB$dOTv72f=KOm-v-kljX%r0p5oDH
z<Hn;)wfslh_I7qvwazA<b1BpM5e?}V$;jz~ilr+;Ia{ne+}*_aIaC>&s;YWNds_e`
z_Gg@5(B<Qr|DkayIS?{JbHW~N3c1AJ>FAcQp|8(%Z!VWwSojcUmQp6lm_)nL$a(ke
zGnu`m-4_P@sLkbAv^UwV!rQGizv>EgQYud0M3T^5<f~sR){T*IM_l`FC6lLZS&mf-
zV&Jh_5?YR4d;uK}iC58`@L8_l0);4JY4VazPc^&nW#)bHu}k?E+A?uJxAbK#ZSlVc
ztM{?oKGfa5u)s3RcvdIJSW46I<B}6#t}jCdR-HWfNetR?xw&~?1?kI2Ub?`n)!KB~
z=`buTMg!3&%}3F6b@}+b^0~xH^O~xw(Zkpv1)Z~kBSjBL{r%nk{<5GU!WcBzRLLF3
zGhsnQ6g_rC5trcL1p-jRIz!i%l=RZ2pD3HmwH2%9tat18RWcf5y@0+U0?5$YqLFNR
z@3!`_zQln|0Kw87(?TH7i^}~yQA_Jx`mw@)+eei$@w7uxzI!i=m~yZ)a0$4u2+a%9
z7m1C`$UwZrj*N7T5dX$p1JS~%|Kf$AXkh83Yb*Z&Ok~t9Dd^O*jkz{n8C~K3g&YkH
zSMid~w01uou}3Zo@B+OL2=vq0Tf)x%9(T&nv53u_>X&5c*~l*driTWk1Z-`(I5^%B
ztI&dW^ao*%QGg#npkw$!h#6F1%vWV)WmQ}1hWh$`tB-%NtQZ9#&6oiOvr<+7Qj`Lt
zNNiDkJ?0);m4zISIuFf6<}?nZ8N-klyaD~yjcJK3glr%a+gz^-7HA{Di=s+ON{L)M
z^zR2`N%QWw|EvcxB*L>Ey-51${N+#wqXPqLh2NKzmYYHF%xKtKA_6Y1ey0QQupCEJ
z7_>?>6Yjy4*2m@frbC!8uzNnj#Lkh~_r*V;OQhnxBbcy}->C*p1CRVrErJ3pr%@)&
z4Sj98t~l%0?(PVXAhJQmp>*b?X(o;c*=Qq3#h{T8rA`)_zV<joX(2az#{z%x)F0p=
zUR<)21$k3wHL6_A%hl1T>>NSF^Um$p=^0A|1Xh-DVSs@dK*oRa31R`h-7XyLQ1~hm
z7u<4e%wI7PtUh^4UKSjG>E{+^7FM9->W}|_I~((pTG5Ro5Y(55cv+7A-C-wjV4^Z(
z@3y$t_FY@Ib?nrFflq#mnJQ&RJ{DRH0SGQ4<nCK}IdRf}t)(TH4Tz!I&xEgcs|`AJ
zzbVs!3ulY3v?yb}*sn_e@Bw`Ew~JX6`-LT~IB3{uE*C5!X;4x%4}W(wVklfy>uzIb
zXTpHlCTwWFO@ldymkcW}|J~GtP_YO}eu=(j4}K5n9&0)v;Z^!~W-QDMDbF~m)Ra$M
z-=DFwxv*Ol{X0$d+X*l5s2h94+#T%g&CO~74y^HP*T~!OF15UZf@cISE32sXNqFlQ
z8vA+yqv`F%D4>60jHKxM9=W-V!`$f3I^Ure00yftEiVutih)ec&v&4b6uiq$$!UF0
z1}W&)u$keVbym6q?<LC1ru?pxE!x>ZwW_v?RD^8zgibQ?ryenhNkb2S)D!w4dV<Bo
z-zbRjaLPeox;_07vn}$Yjf3X0Jx^u?V^jzBJJ6|BoKl`DC`zKT{?k-cW)gC8sJ5S#
zF?%2oH3x2@RDbf=q-rTKa>B&pTF1J&IzRwmGknR${#<e36=Z3}=3mF`L|G<oE!SLr
z8Y3nkXU+r1sxWmHDAA)BDMe|Kj+@>%zZ!)jAWV{qOZGf}{ygSnkS5XMLml9TOEE)G
z?ZwC!uC6qK7URn61?z@%B9%y@w~vk(v0u^m|AW5p3>Ch5XNK3x7Iu3oT9j8-+9v^H
z1D4vdRt9Rmo|Ac?gZW&<$W=WNr0vCe5;PN5hMESFUos}`ukL;#1jK-Ggs6`b$ODiP
z4$v875~P&FIhZcr%2dJN)F_nFl_ItCUY=c{lL%!>>;oBA)GFqiXKkh7rDEikHg%&@
zfz9inbP5{<nA>wqF;-{HE)QoeQ4PQ<D$t$rAgHL60<jQr*2(w0pVIXGqe4?wj}`Bn
zA-3_O51kk-+D$1g<}w-{qV&YTz@Yn!x%oDb!cY;nwf$&p_WW5uZLO@HPevWo$42Q*
zR?kSUlsSa?#j_kKtKuy^p&>}=>jy!{@w|N5q_f+M>&}~-8#Z%=0aGUx&cMLHaG-4$
z9_~e>FxQQYjC=iasAM(yf;!*p=I2KYt5>7Q7(_HoOwsAQi3+)ZK;3$KE*XIbJdjAo
zK6=WSm`F=YV?3){4f#ZO3uK2Rqwz%x*ye_aYodTwcu&tty)ZowKRG!A0|N^S3oR|k
zPJ+%$91Uz%sNa0JJ=fk(=v<|wrZ#AF&|fAqAC!=CZ~%e;b8~Yhp|{}Q&5g-opM{kT
zYhD>$y=0PTXi5$xBjb?_QDy)q0+3mZ7QEB?@}(nmojMsIq>k9YV5RP&t{aJB<M@MY
zQWOEl9_-0Sciwj;Bv5Xe$9bznXnYW;nDx)qnlmiWzxF44_DYFT6pa=kRe34L?WwAz
zsI={K(OQ2Zw?<A>R1}MbKh>k>pKmXYj*bo_Re}^Ucr7*X=O+fN2ev+XT^-QU^hT%R
zh<ma>w=kr8{%kdyNd)DkkRL3OUUU5M`+@N|zH~$;zlW2vv+Cj|x2EPy)A^QOn|HCf
zsdkF((V~7W!bc!$jET8673U!CAucNmN>RMW=I47%c|KtFT~)TRhK9e19x-V85>%Px
zXJ%&R>no^-_lN9{va&LH>`uvEN@jqBAH+h#M?ppg1p}k-d!CrZzobtv=i_TcTeO>-
zI|lvM<gH2j<;G7T?*RLbfM9-c(R+Q~wc92g=0GMW*w)sTSuYt$B5$T>sa+iKtPUqn
zu;=gJm^(QFcAxJ^wuccUY*f6w&3ScyX%L!`EA*i{N=k;t##luBf~>46bcy=hewhf6
zWPHnzNs#`<=a*v=j&GFfcZ&6OOkv-VPvc~hV0GFk`fWWE*Cy%=1M>**dw?8FfoB`s
z(<^HVC3p6>7p^&X<$F{)w5*Y&K3+WL*{W#k7~iC{w1J|6ekbQ+POgRsLLuL!X4eE(
z=dH5Q(JD~o_~QtoN?s@?CI`yY$@kNPpNEEqCPdoF@7ZK|Kb%ISuu+hcUmY!}>T4+M
zhT|{+v4ush6>oW*wD8jXj-c0I!)VH?t#4;%V{_2H*v1fFP|*F*>J2igK_aVx7y@GP
z2t83G86?E=#^pd!r@)!y4f8KRY&RpC(m0;9oDdNavB24$F4s-%;<BF;S^68g-jfR)
z@z^cLV@dte`Au2n^;J&6jk0snAS<&c0)f*5KoJ1Me7)AMM$=_;?7#TDcVf&IBqCm(
zT%NbY$AS`)G!adpno;`j@X*Ll5<QUbHvVE_dR~SN_+n>(>Ra*&eoD&O&d&HNS8BFE
z*R`wj>%zWQp!i#5VrLzM@rB~@)M<P`OVD)S=iJ;vSC?LawD$P#@Gy&SS5}fCXPN))
z>_|D+0cgl2BLN$CrO`3BT(6;IxMYM{F_VEwwZ>!@Q|3F;zm)2Z>HBH2119izTx9<I
zDM3zb8^fZc6tgl;ZUnnLxk%^bh(lUBq&ps4IBl>M<HQhnaIm!<g8SUh@tZ^`q;sF%
zoURAGcmbv;kWSBikg=cGz|KF+Qv&o{r`_><_HqTC^CIP3!JGdci;8wl)DBi)S#k{H
z&x_-R(i%)+KDt~T<VFifBpxr-CYAH^QUw=4i_acfTaO~mr?!_`+)LN&aO~!4f&!3i
zRm_G{#f>9L{rLIqkN7323khc`Cpd(IO%4CkBFG^U@-542{9Y5QE=RQqNF6v#`d_TA
z<KyF<?<Ordvx(58w??um*{z!vL9YV^es_th|7b|fNpZ0^_O>+i^%Z_Gr)-|%GGy<E
zw0ZC3gaCW%L{7Gl6c%GM&>yw6Z1V9jk$QSlP0t1N2y=4cd&OXGfWIB0q^%uWNZ?^=
zZVtWMYiw^9*6_bNyQ0eX`upRpiSY#Y{$1pLnK`>@w(R`U612FO_QQu18%xfmfdP76
zs#FP-N#7E>qnh!I9}>@nJg&5P83`nnNC0<TlEj0ZLf~;Qh3%l2&vA_#ZLxQ6`Sh@X
zvz`+$&hv#3R5}5v9tfW-@GOoxN2uL?3wli}q<swN-R25e0O|Y!R#ho~6`?Bu8q}?}
z$ZtntfB+hTPHbYIiYBwiW#?@;Su|Fr$+|?`(a`~vqjn{Pb01sW6Qd39Z*I!8Yp(`V
zCMF8Rn;ILbsHhfOJ&ebGbs2X*AD7>|*o}9Q&9^DlDE~RI$qtVW3)7(40D3P?-nVfY
zCIGGdIf0f+AiO{!8JYT)4d`hH{-tO}tO=+0yuT^atG()trI;j*uT$33lW*|)9e6dH
zoqbZ}KuT(0bu|UlGLILHCIY{8EBj*RNvXrW?taPX?}c<CG^cMk;UglY4f3U!{0~uY
z0TtEvwhe<INGnKp3lf5KcXxMp3JlEvih>A8OLw=l3?L%iF!UfucSyIso8R;O*XMFA
zS;!1?&e?JA>%PM0Y2iydTiZq+{(7UllxE_2f_-}8ot?p?j{}LoMOI-3`+ho>n!3$q
zM{C2i^t;;23<ZV;kihNX?{aT5GA_>%q3kmph9{=bI|%GN9WtK^db66-jKf7Egem0M
zh$dOA4zqfJ5P+v5S99`Y<E76LqNh}67TDBG&GN5rY{WksApX-zOpN)sLDacP%f!vm
zF>h7*3)@1gJs!02%|t%eTkHPv;?~2vYb+O6SH-Pqr;k8?ubYyVT&9*s^|sNf!k>2S
zf4l%vTNOEuWV*>jCPqh<xtSTItVgQsajKbFS*kO4ZT_dW+=8StE^5f;<A!mZxv`L<
zGF*-I<>gm_7nyZ%EoOWBU95hxk1?Y1<`eM=-Wi#h4EUd<m{gWQBE?wFr0=M~c^V%e
z;5%e+;T0k}?nmu`4b8v5TREkzg-JhZ*UbFSn>+q3a^8G30%s{C3smUTJ9Hn)pWp56
zVB*^l{w=p?*6_#k*gWOQ4Gq5rwkbq}gaoTiTfd+^V^B}LSA0jN8k2~ssE0G)12oJr
zI5<hJcUQ+eGcPze=-zsQ#oT5W6th}?4U=+)+JWB>kXuSetxIVYC8OAX&@!Z7h_ssr
z$D(;?e60)}H;$jPQ@Q+SijC#%A5LBjuG(DzZv?ET0j1&6lywa!_34ZPlWJHnOYNW$
z(}eU3{DfcPcEhP)+ku{~L?p$ys4+7$*Rd*EzVY$}cBln8SIck1Yy>AOkzzF5et%a@
zk+fOY2@Je-@3;>C6!(~%kWe<@Wn{<M%f$Eh8!6`F@;)85wzk0Ba@S?w`duQEDxKxc
z>6lo-o{f?X=v8|upfcA6?oO52h+YJ+fzv4kZUm0-;rc#slVpPFB_<>|%-9^Z`9oYM
zr#@6v?De8k(U@+WYz*1J6OVtfI>yAtGCTTBZjL}$mRb^5HaFGM>tbTqBX`a&Wwt=m
zZSiqLS5Yh-Ir(`RkhhRd>zSAgubuL_%qbKH>gm}zJCjpJMMP{hx#lFos*Xq;kpwJ%
zq9!COsOD?S<6ME15f~mL(pQzzqg;+qQV}$@(4_{)`V-pAm(aAk^*1dLy!_kTO)`zC
zq2P=8l6^j$zxvfC$r%}eKwn#H-3NAkyRjwF9$8t)SiUj#`EQVUw6ekly@4bI>|~P=
z`=%Wd>#QfLi`nU5K3hy${Phdi1@EjJs$G(iS!h#@@M%!#@#bdk%~mn5tX)M~XH#YK
zbS{j~#ib|w)INw3@`fo++<%;U18?lO-gIvA2fTuOy4tPL&s4kt8=rJtt6X`y<S4HP
zlV48i#3g_A=#m>$ALK;|N1h_4n@MJr@J#@IyQ7)BUS*$vimgJw#@5#EOG<KIwy3h+
zV^#Tykfhhl!Wo4sH=hpi7#WKSnb4z2Bqz_etgNZ$8Y1f^Dg*I^^KVhod?6tg_3?96
z?VtKz1@^vUdbHT|t^OH`;-Gl&o!_MhWTB9Ya6VpL{60D*h1hVI68`z?*H^n(pvst>
znv)?rEQl2^b|==kn;FT_3EG=so?oSV8>ezQI5-Hsy?|3MZ*y6HVK<&>r#UA+Gc%qP
z3=?2sOTyOk(MzynGYGMPZB3?@>*hn`(?tV0(z1E7Bm$bN=DzHo_xCHz)EA(a-j>XN
z1lnGXi28sLvUK&v#+JdsZJRyjZe|TCm_?}?l$U{t!6Dct+2Qor(^sCOzht+pMi{*S
z<bYIcxjakDQ`W~*X1z6*6_rlKYYx&PuEAz|xcP#*8WS&;#@2P~v%BN4!XRZDMd8`v
zHxE$|>4WM(_N4Fk_k*2{4NyC<W}7gTlm*ni{C<72x0_Dpv<4PS9#=#I$dM}ZZHOq|
zYP~UyuL``s@g{qg7;kJ+7|ofI{Y7m}FP*Ie$gNVE`E}J$yrB6RU+TRybG|^i86k`>
z!k1H{phSs<TYXd^zj~(6qg)qW#5b{g7`FCFlI(SI**B~+9oP)Ii)8MN#UqMRpGX4g
ze5%9k?H4a~5iw?FONG0b?;j0Hiwlhi?av*vlMe9cfMO7MthFV^drX53RVcljmF>mz
z`HwFavV?tcsRVwM2LHw(=TGoZn;iy8T>Ub?TfER!b;e~+hSh`fYmNcIrS{o;+=z(f
zPZ_x#^eok*!m;s2C3G!aUD;VaO00vVb^5xMorS5Xq`led3C&mv-UR3{L}~r`U`NQm
zV3-xlKTy6XZSp$`v=4R;C@K<jm{=r<y|dn#1Aa+GNmY(I2BrsVd(Q6mzd2lIeWMGR
zCb+T%y~4v84ATrLIOMBeS=;y^sbJkZCSvzsQ*9FFCObd7LI29d?~v%te~41e!NK!(
zCXAb0R1{WTelxxzjoFgfu-Qi)5)?3X2EFu|ZQ&t^kZ$K*EL3Q+(4qeajy#iDwUWHb
zD!vla?OH9WUSW{S=*fcQM22H<z*HU@T<0cT+;>15{ymn1>Tt2p+R`#xV`{6z;rZ;D
zwhY~~#nt&uN)bq0x_si8*VeG@2W(hTf|%z?p(i79`nSN{GW%kcND*&L>p(#GOqWtu
zQ^du^#lWT@AQAAn2R4rS1A`&y<L&S4HtmNqcXoGI_xAcqGYxQ-FeZOZsQ}#py}TGm
zohf83E-7M}g;Mp7s~TLR#yR=D$i*?W4#VfGY<ia$`L@<N%%Pjnl3{dow5Z6|MdK$R
zp6rqtbTtSURSwD7AA9Kh8tF;CFo??;Q~US)`T9%9fqs5MvMe7T&xQm!k6*!cSfDDa
zV}&N>xD7@9?(393Q2tbvmRclRDMl66)&1=2yZr9#qd$dWh2U)^dS{ZC>)fR)>!FB|
z_Ls-cpu<wy(UB#FFIoDD8s0QEMTr`fVT+Tr)Lje=#!<m3Bc}#f&g~Ty#+H_UN8Ou~
zQ&Qj;fSuA2hVD~i+T8N}`{9r)HHS$<&~8KOrxW;?7__-qZa!lyqr+x%*dOeZ&2DDG
zU;hP;VAz3Kn=2nK)4xT9M<*yKC`z9NxZnkHpQ%LcHU^U!{uMElT$SZ}$*AUx+F7g8
zpa(`|X6}Ff{J0WH^(d)djB$T!Oa4L*qSBxjd{MyN9f7>c<`|Df%nl+)>5v0{ee;NB
z6?uY!mJI9-0&2>1#XjnpE|NaZFE7{H!C`-1N4--rra5BVzj4y)dlXPkbN@DaE^ayQ
z&!0E?#QItmitRu#en>TlF2o}4%s@=^d^<=W<GF#{hE<187Wb1pjZzAnmX_AU#l2O)
z(t(pQr}wH(NjXK2_TE-lG`o)n_3IV|<L4@+2|5>Vex{(LINDrtb$8F<b>_RL9Vg64
zO6^B%EiH*bLif9|UE@BfZZ^j@t8032<`djjib$rBPH&6^GeFZ8X=04GxZuJA$6T-N
z?#@cawl+86Ep#~O9JWX#pZy<ir*4xJp&ryc&#!s0W4+IOK~xYNErkWMhG+56(n{t9
za2Rl;#D628pr{<x(67<*fBvbsnCbjR$0dJxX)!H)vhqe{ePe6lpm$(GaqF=3?@f3(
zs7if(eetmz-f3#TXXQMCNYF!VPHc+C=odM7Gvr4ssEdp35+x<bLFs23B_J@T{Q;YV
z>cw-<bZ*&L-t8x{Qa9Ev&aTReOoT%7V8Pod$tfniI()>VYAD;+JvBA;oQP<=G}KhD
zNT284-REeD5V(@!bH6Pf2j?`E<`3G;5l8Q}eSBupCheb#?v}bVpij$fnPcYkmHbwo
zY|KOFNB8zPpZio0u&Ge}w{q(!c4|F0*Mo|Rs*zWzJ{!vB0RpVvzJ0svh~mA$P>`59
z8t!hlvmK{NUsh%`?IdW;qT?{rD`xMt+U-HM79X#AG?lX0;w5i>L`wBcQ%|qhCkUKn
zir*GpTS;tf+JW7)@%XKL6ZG$Qp^1qB|H&_Xu~hRp$;q_==e_KBV#kO7{;Dx|cXo0K
z_`w0f(O|U!+cFP2xTtc@3AtGc!*e%n3OX32G?!6}F{`y&{7h-ypkzc9eC8NgxY5@Y
z_y8ayIT)0X?i5Ou2)BL{Iq9cgS$W1FajI*HV`RKwKp)Pg)%3B!RLPSh#<Iu9id!F8
zH7hG8#q-R)dV;UGl~2EW$A;M=IhtVuyb*05N4%f=<f<52T~)>2N?cqZ%rNFy{iNvm
zBLz$e?Cnm8$tfEgyE-Gq?|xQ$1a$E@ilrZ9WktktVgxy!zWDG=HB67$g>Q37R`!S|
zzpS$K)u2o)aOhW7&H^+eQ?;0wEIRCp;nJGv_km;A6VyLTa)P+M5j?Q3)>c*kAPC-{
zo0v+{fzNNS&binGzrN(~Q-z6R<#GHx)SNkpJEx>~HE;8){Z{CAvd%J<8cD#cr#o`B
zJH)x+DIkfmC&40tQ$F?`3~cJ)xpv1%yO3l8o`JDlh*C?y^hY%Xx_AxdK{0}=aJ1bi
ztOOMeZPSsB6BzE_<h;gtUX<i!6H)xIO-Rj5d%}0CFfZR6d;lW+{<iWKNTU*3CgGDn
z%breHelGKP(!Y6&b;Y|QS(`OOvK@0CWEUEiQDUQ)7UW||GxZ6*4;vmNd>Pgov(R+l
z<zpMUxmoN6U`;z^13v=*1rVFN6o{WbqnCd*jGZ-ap!}gw!nT_SckOV=e{J>HKResZ
zW;eb;b<#0b?1Ch60+^`?7j|8eX^<TCDDw~Z_R8(zI=IX%&8VG*0K6ic7|hJ5XbM58
zmdZA%P9Z2{OwXtslJ)u1r~GG0GTz2Mo<7CHJgfO=Pu`oV7(1bzYfNG9@^0&?LkW0e
zH-%a3GdzRlcDN+JeS@S~t(WI3CzoZ@*|du|IXU|&g*Y{X+_2~~Y;y99<O;nQ9J0Xs
zUhlN*;~xo(%5$&AAp`7YZ2~MTkzC}EAw;wN7I}xi^J*cmL>VoLBir2zKJ6Xbw)y1Z
z0{9^Iqv<uHA&0*P?%G<3_Z>4&wY5si++#YRP!)@(P+sUwWfbvPaq)`?qFQ_P;jGpt
zj{qw<G?<H_E#Huc-Gqnf)f=F{-<R=IR<1_~F%tCj^laRmJCCRi%6DdFW-+ki^SwXJ
zipEZF&K9uDuc&yrr=<jfSn97c(v!v<1%-thc^ZL31XVT_8qfOon56VCMBJ8-B9{T2
z39P4gTjn-_tp3$_p_u!89V71UDUD<?Q{<5B2c=jGpT+Y}gP(rXzO|}d1Q?czs;X`Y
z!G7T*Xj?hlb(=LEpA`7_=X1^HwowfZCQ%a*5U6Ksi1n(@aGK&P$-8`j@1?OBH%3+$
zEjehJn(AtsN)zpGPZU^N*)cFOP4JokoL)F4s&!awb9;aF7yOshjtyR*UqC`GWaZAE
zle31o$*pKF4s{z2*FsRHjk`>F&b)<HRz~;g*?0x``zOS!hX{b9!%cc86`5&KPq{sZ
zqr&#u0d((zy}eI?UYOrk%jM#5UK;Hm@Vo}4A}-0ZxSW(RBnzBz2e&s{$^e=)ZwauS
zM9G+@Rt&RKk@WDG04!ym^X}b8(VpjFide)Ph-P>9qDrs{DxF^AA~-l}#;+|JrN*S?
zrns<V^L>&-03Rz>WkymdF}AA4PO@qHeH;eQpT9SIHS>h)R{7ScRCx<IdZ$dPnC#$+
zDl2pKy}i$YRna_T7o)$;;>RBeMxA3@%BQ*LX=l;cb$nDofAR{uW$N?*o|she%#Kw*
zr{J3XrXCM$($35xO8>(G{J9tfLDMwS?YXsFY@Yb8px0KpvxYr=MO0la-#9>nC@Cow
z6xS<)j0Vg+JRt$=@$%bl60f&x6y|}P?eFbwy)J5KQ#2nyM^v*#Y^Teo8=moSd^{&R
z{5;w!y7SZD-@iaE#;C&*rECCVKQoW6ud6p<0f=OzJnul<TyD$iGkUovsP90bzxPWY
z_^Lx7XRC}+!1c2i^>ZEu8lSzlD(|$o=XyT~%$Rf^5lV&pohrXfdu^|2h+i`hP+eYL
z*qN7Dum%osWv<7^$5MH5<@tPjt(srCauvhWRFtr>u;|a{gAT{o7`Sr8eLW{P<vSLR
z88f7Oh7sNwbR}}y#CqoX71v%03`z&z3#6468HI-yfSgaaYK)ZI62BefclKbnE^mR&
zBD$|(wN7w`l841`ex5-Bxc!Q;^CnkLdaU)b=+o<bAj`dWgtzHc83D5<cJg?K%}PTX
z=7*yLZ!#NELT|oxQrKj)FsX}flDL3?&H3&$zdP&cSh{FyZJtNpXZHX%3E37;9}y9e
z%!{FFVR<L+gBMIp;rlOr<`2|hS&TFDX>6r0^{eApWYMOVTgCAvUX6!;b(uf8x&jFw
zW;TNfad3^_<Av!k8f)O=ZwE}^cQr_ovJ(>tNJzf<4dBDy733EuB8L9X?05Nqvq<qC
zEvG(4S{ASt<=Mr+!zziNdW(Y2eKd}(Ag7}<)f<CnQ&@st5w0WJTvgPP#$nB!S0XEG
z`W+I<W2@x{V1hRw{t%`IOx@M3i#R*(tN;)LqVR@>+Y(db`Uf{$9A=V|))f<(;xU8n
z5#GMOm$j0T{{AgIP9Pb(At&cI@Ztbb8U48SXV_NT5)Q=s+Ew5W032yY(%0D>TXnX$
z?Cfntzd90-ZUL-1|E@CQnckmAdZ-v0lwqtAX+tRKLd>cu_Ek08?c@D^<F&Q5*=9@5
zv(-guLVRL&GBT)(R+yMcqE<>yC-1JY952|InKJ?$#Kr#+FvpVXibr&res{T!A?N=k
z`m5__*A7~_yIrW;2wi+kbF8m4R8;kQ8A{kiD9k@CEsbZ0A0S}BWIEwS<@Kl2tuanc
z&Y^)8<;%;Bp%iVrD)nU~X>4Gv`h&QkxslsKgBB}tXk*;mHhS>N!Og8$ylaSc3>N`n
zKUo)@^ePQJF5O0fei@(&^Its*bXa3rgA6Hs4YFeXzGpEGHd_LI+r=_+@cXx$!@GOC
zbR}xGIu(>u!ak6twrd;x_ye`eT5I`O?ir*$wx3?V_X-o;onM0gX4`3DDPsYBLWntU
zAx-O0BD0!|YHYsS&xwiSvz<xjnaYW@v?P-RRTLCQacjcphu*{R<-5B_S%l2YjPW9r
z6ci%9)g6VpQXRr+{b!FOM?s7xW9ye)77h+Yg^xMHzS%I6bM8VC?HmO(Ayd4m5lt(o
z^jeWJF?c>r7M+h^YW=0{kQQcfdU!62v7gL0&qkEj6=Q7ju~alI{sCuf7i$eK(j&6&
zSJ3|fA$yh(yWQ!RKAbWJX5rWD?APm&T@Nw}3l5bEo($Qz8ArS_B3*0Xl2ojg(Oddc
z(~P;AMIV=qgF_5})G;pyglv-tx{6BFbF3C*eIDcR(I>66DD623(}x4|VGw}k(i@$|
z(?0ToGGAFON2o_Eta!X;U^5Ppl_<^hbSJ>v{r9LH@WE!jl_`^{pwMZhd?N30boces
zYeNB|JTW|Lhns(h#)>FnPFn56>i1#j$;zO-NYBm|v!sh`PXty{ioCcO7?!8n;lNxS
z&R@tosVh%U>_a%XpXoyP;zfTKh%4L5p`Pmqx&A~5@NJ9_QgvONnd0iJ7`6pCa5)7|
zCe4g}I1u9SQTXGH>#E+S^SK(`9V|?x0^{(B+-M$ZIqx!Ul<jmSHANq9uMBS6!EYXG
zJ0BIcAADlDr8ST9q$3n~nf%k!B{9#zX?M;EI6c<6Ee7DvySlgl6Bg+9N`&{JDP8<N
zqA}`k5=gHZ+3*Ao$Db*M<#t~~i;hU}s6-U##V%@UYHN>wyuBCtM*%=Rg-|-uPoyHl
ztG+T>s*tnj3jH;h^FyONgKDnww8G5e&6`wS=O!mwNm~os^b?pT<7epd$5hbS@&adw
z3m$bsYU+^FO&mEw4(rom_Q1<SOYdED>Y$Is<=cFnrP*H%8a>Zvf4kIFmj^7rRW;#=
z`8UL*o}I7Je|mEAnL-p!o9skXQYMnlG1q<@SZmN0aBegcA5)B)m6f$~7_>buSp|*3
z!!@f7+PF9{pDE4GOcxVP-;68s2f>AVGdSmA3Q1H%L~icxoch)3sZyBw=q6U^<PW^Y
zT_x+N|5Jwp@{|3MhQ4#8b}{A#K4b94Mo;wd*T?KL1)9}yUgvCgN}G>!#*V1aB8H#A
ziG;iQypo2RG_nsRM_@MEJ^FO(+?1yVHfbQ~%29sls|Dxy?ITDIqI4^>LQX85kZddM
z=gP4^WHiRGrTX;wDXK_qRjMgPCM;Q=3d+ODe+jx-iy3`V`X4ei`vZ+MZiDT}jg7rs
zFjc>aRGZ9fAk9`AgLCc)Fn^i2L(l1R?+BsEQWFBrJ~-}12wIgy>0Zh8az{?v*{WXe
z^YO;}3*j8--}&1}41Ut-@-X9^fNZ|tf34=g=FYs$X4-t|h8;&W=YD6XK<@G1lg1oa
zYvA4QoWJKY86DLxII(at?$)(A?^X#nl(s>-NQMB*-S2;QlL<u?09rZy+xoAvtjw%q
zMe-(0=xYcufd4G!PM6Tl+pl)LguZK##1&G?sCL*?Zdb7u)Sc7T%Mqo)wcxJS@!m>s
z+E%_gy(+#YI>U%z4e5`-<WO_tXnXkuOs|l-uJJ_*V!P=27VPTr14-45k5=xJdD-TM
z=E_BKZ9Pe2hpcb<2#lNIcby@B@7?R96uq_Zv<y(CxDQd;M}$^G;4i}EUXG}a7->Hr
z+-M}c43l|TA9;|Tp3x9|p+?Z&eiWs=Fo%G2G&x$xrYnLVF<*Yky0o2bSc$f>4W%f_
zpUY>Z+hW*LzR`5?A3xU)Q8OXUgw{tHdudxcS9rV)p`<X4p6-JHr?Qb%WYyKWju0fr
z@%<*DEW+ZbPnfs4Vz0|tm^K&yjq<~{+r<^cbj2C|!h9po?^r8M6CJ?B{VRWee0$WP
z?LOIk67u?AfnnG6>DH<amZ;)UBqF^>(a?_HVYbx=D&H&!>vLS{YXps0`Y^N04BrFR
z_U&TD9$xp)E<zZS_=;Hhvv`1Y!oX2Y^`#xxlA1!a^2+eWhj4MS^{(h8iQcz;#tctQ
z;tygk+ge(T3n{y4UQuzsu#Fy`d-*wf7KfZK;V?7q>F*^DN`5zrqF*EJ3)1npY0nbh
zRoO)DIwd%<O8FXZc*?e#M8qt)7tBNxPgfbw+6`y&yS2g1nP~soL54Fs{+-@mTr?GS
zFEB`uYju?+io?Faz8_~aEBprOT62G=nIBg0@ksA*FFxrC@AP7}D*QF70-Y*j2MVX-
zQ9yHm7b<pkcH-dRfG7|WXB!gv6`Gd~s>Szvi4v9S^u?OdYBgr;N2In*OqBCNs%OEu
zrwArqlix2?az<QoZ-!q`tA5$d9GdWrHgXa}(nD5Mm&#LBHGcfsFV!P-aB!rdvzlKa
zfv5Gt;`fw&{m%f2qosRMlphlQ5(Eqq$_oo~ugboJC)OJW23FKc4)j<F!^);-4c!<j
zsYG(o35JMr*(Xtq_ROU}ef7^W$+WVv1H=|kqaxDNy9>KPKQLg=9((?ANrd{%cY_AM
z_=1A9@6cO_&7=rn=28VbG3K;0M4T@f9a00>NKFbx(Kt@(qMRd}eEe$@vf$2Sm5Sts
zAOLeLyO6^XWgoffz8ym(_ndG7u}c|qgL4_GN5CaW$L;9^80MftXyk3YNw=Ax8jt1`
zl+5Tx3FzvL0Vt)p%R(<W;hh*F15S5&6&E699xj?|I3-oD6t4H2knsMid<zMOwf}e<
zQHryF`g4+91*7x>%1k!xP&YTHH{RMDq?G}PAGzQBtZL^vJ6nnaUX@HCZ71KrZr1uf
zbA@3=2tsdotXbJC{^r-#zU887F+l@XDi5sWL812&vQj~h+DR;Q_ZM1IkdZ<I=jIT+
zyfd%EK9N3l*vv+&itc~*)FKW3dgyp9j9o6&QqkEN3u7EmA|G?ezBq7TW|<#dis!LK
ziE3zU)OyC+UyCX_{7K?2=54OI+AowR9DrVj^y9rj6FjKHTcdkq?A7O=$VeocaogRc
zs4wg^xN4B9dK0GYk<j8di_!4?*)>9$o~0G8!(gnvKn@ya8Dn|OACP~U_w4V3a22W8
zcj607N4n(tT<5VN5L|_xTib6*zzJT@(Hx>8g+<Ebn+)i)HQBS_eTLg@m7;DenUkfx
z<uZuBeI0DPXt3$uSpziFKguO9okR^L3_HCd0B;fffhrh()(z|ta*;`F$abB9rNh-D
zWa~1Ld_ezG!Ta0r@Vg5nW--7&zrx-#C1fZ-tk{sAj01HSB_$jNbCQ=Q#wBKYO;VjI
z&XB_uVw(A#keuSp0{Hn?Dqri==Epa2yDe!i0RJ0XT)~PiFLIp;KZ^tl2^{akVhfAP
zbm6P(>w`!ZmIe?5!k5!#x75rJx(TH4pIof-@LGpf>@Q$88a!p-iXWHpB(Nrx2u1rr
z=ipMAsI-t}`fC|oG@4||WBWN&{3b7OX*m}##F0|t@_yA`Oi*ZHpXQ<c1XmJ{%<wY)
zn+!eyhH7*V5;7T*a$er|ruM3lo}R9RHAxf;OpBXK($A46;KfKpxG<6WciKQvC{2K$
zq@YLV5y`*==%Rq@7xlKdM97A+x;h*1c-e_g!EcjBoy2Pt5Dns9$C^A0u>dBF5U)$m
zHxQyomj_*3S1eG;_J+fD%TJ1n(d<I=K98A*jRcg>sPTDY4g1M}9|@<ls%>u%(|)iY
zm08k20UvMZof`rCf=`}VpO}1MbF=rNNe>NM@ek7S56i3)1f8*{l}=n@qO!NQt(lpR
zamIVV9(#57G|~k)&&s2t&Cbpet=n>a0RdvLxO{X>?w`-ju#sM^KmFvgzfZC5>2E6=
z`Jqy%^f9Uf5*seea7rg-0fCsG7lu<7>cW2^m^Aw>nURsu5_6C9D775r<nSN1N)l;;
zxa8zB*7HkpSySnmESrZBjueI*F$6k7h&jZBkC%3s41Cyt6%3}Y8r!{+oaE#{UNzb|
z0b(q55lb8gaf3FLo-Nn`JV+Kaq+F~Yr?&D}MIPQpLoy3QgiT2r<WoOr(O*5M?MWNj
zIQ9zy`7lrM`2ZdX?)TZK!NWNH>afiu#rZ$J`$0pw_y4c}K%*AR83X3R6qPgxV&G<d
zaF9i!EaCnHx1fY*_~t3CJSB#dyUa&3A9HQfoz>ku)0fsRA2B}oc+ihNmp|{2+M;UB
z68+3|y8<bbm%qo1L32p{roS7kiz({u>m0XgwsCWsN)#9<&&*7G1q7i;<L`L30k2?}
zNreOtRxv+bMXbkEDx{}2=Fijed%$VI9CKv<GSIb3#8mm*j^xFe-HhWsFF)_61B$>3
zLucy6m;Aj*8j$O)V8Zs<&YfDRo7reR$DE(DJI-HaTTj4aX@&WNiIa=<K}rn*gnC5>
zQ(;pLx-TjjDxZR9SBV76`>Mo)a-(W3O=*o`por~&g1WuL!ufKlI(bL^144DTszVn?
zn-J|#GfT0PL>PO|<C)ZFWd8uQSFEv)oSgi=HK3GycmUgI-cP4gfek}-8SCWsd>~=U
zZMr<Yp`}DNmDt|k7#B}HtFrah{2og^M|*qCr!XpH*b(+eVCleSR>{IX03;n24#>;^
zl|hoG_?#Ra&PIeTzlDaC)&fSRg{20%<RU7{4Kg<2!w*n_)dLABpiAgiV+1M6Rl!FY
zK37-#|Nm3GLP2xE$3hhc+}+TnS3;=hv3>Q8Af^emp%clX6WE`Y>9EEtID~<>e)$MR
z5WH9J*c%dOjK|;`NZ16?1i1(M`wCDd!5YA2D<}v<{_$?*^qNO?b#+yW4C3YW8a%n;
zZi#q5nns)L8St8L5|lDV@^75|535$_1PLt&4--nrlsBR(w6`FHlsY&&6GX~D&iQy!
zT^yf-rPnf(&-w00!sHg`!>@dm`X<2i@0dfYgr&?Do+LR~W?%gnCmHwg@i|+9!ylcK
z8c+gH|6dq^IAA3rX~&tbl)BwWeGz+X`0(<fuKv%%-HY4H6Wa87n&7j2b;8Eao&Ppg
zxXOiO!2EC$#-V>Bh(v@We?Rlj3A_S)VzA=oTPTB<lL&wxR&1fa|BU>@X=i&oZome@
z2v(|B2B~jyBe>|n1zBR<XoJ`MK)g~2C3=F&ums-rHBY3JJ~s-|SGQpyt@Z6+sQ2CA
zptscKUmzcQNE@4&IH?|dLI6CXs?Gp5<hs<BwnG3a9?-d5oP<K5|ISLp+b@>_IXF0=
zr8&3}qC`+v@Bm*`u5901%!oc*)|co!T7joGqz1y^<D;S@{lMH_djrRp&jY--);B9s
za&o;*t_yC9utxXaV&dZBS%O_%UB3hNssJSnVODRa3W4xsd=I|A0p!HQAzsJ;rYbJA
zm<V8(9`2yyQAI~avaqt21Imc>y}HP8cgVk6^C~`Y_g;}hcb9WV9wd!lWX$Ct;NQ^3
zAD!i*Vch^e035);)$YjUWeY7wX0=QMLqo;Y8U=>k>@>)3XlUrvlnx^JY(gGzqJ9+r
zTciH>1P2G`CZZ!jT1<X#+ZkM0r(P;=Tm3%$;c}5~P=@~-(d2**5KE{@Pn`;A-QZ5w
z)l#I?=$k{&f4oHrxgIiC@GXulDk>8HcRe;VI7mlNzq2NM)OLz+u7QF;J-{~rP!@nb
zT(q<j+S^4jW}=AL1Mbgf0i_O5MyP_XR!m!c%JvG$Mze(VH8lQo;fa@;#sZ*2L4LHq
zAJB%1AyBoM?wo&j_T^vrs!duvH-||P<CWqZ9G`vKT^E}6_xAzpqni3k(loA4Ggv9)
z_MmxsB6G^s4le?6k@5SENl@?_#CnqRyXmB433;<Nvhwr${`-5+P^pa~K(SG?zPH!v
zwKWPFo=gl3<1JPM;0b?S&IamQBy2`706%1pHi@}CRLw|9Bmx|K(|_h!BUTt**3;Fb
zgTtO~g<kxq@&YLOK<<PUuvm9&W!OKt4gvraM~X5x2gXd{KR{Y6`u^RFjVKX&gec@1
zaEn0ty1Ll4%}6@${}J)5);RwixQAp2`yQT-iFX8Dd#0&e{JlNebB2TVzDjFB3<wC{
zw->)9b#<6IT3I=+Fu&hjA4nV%yLFM5?*rqgs~BYeu6O*qKU!)JoUa4#&X7^<_Bv1i
zPwXn!gyY|Udax&G$piAV!+L*w64leE60BZ|iWtzq{kdA--_Vp#Uwb;PR<Yy=-PfBt
z?%65N0c!iug@f9J3Y+w=fv-Y6{*b<=xwsrxa%3sDdAK3DBjXg^3ByVOZbn8%c>W;K
z@;XBNPV(h3c$$%{2?+^2lZsnV@VFIu#r*!zKp7Zs0EwI!^8)}9JFZ9E6(a5KD;2L9
zJ5#v#qRTaPbh<gpRn8}UF0mPc>TxGVMn(#W0|NqpcUN4){q<H($Q9sq1+VqSeEj$%
zYiTg)l=|Nlx@&h|UyX4y2XN397teug0SY4+pUDWX0|YNMHFd(o{GFtvWXIq08f_gJ
zSy^3>QUgBv@RLQ@v#p1zL_(p$Cef;%vrI(@7i};4R=yiRX7ivvA&QNZFDWKYt&*&(
z29t4n8+3rj1_$9OB@s2S*FO6O!om+Dr<S@%YX{8txr5^3;;&!7Rv9;cCVe1KBW7mw
zXr6)^nya@9ZJWm6I>QE%kSr}NEq;Hd&1agY5%;;0G^-%c5aDfS$F#Sjf)f=LrCqTC
zcvzZP<L1HF8?8s*TS4r>WQjVpz?)DfyN6Hvv8>1D^~Xs}0VS{^AUUbDJ)tcd)195f
zx-cIP()=_x2JOBPTof&MSg7i)50PomQWt5S@c~{>p>fq2poHAs-oEaY-hDmr4LpU#
z4m$6vy_$}T^K(@N1wSx((t>mKK23YRiU2r3?L<;Nh-nYxs4&dzTXSR`N?!>1dzzzP
zW3~u~pMXcb(i=k#*3O67F@zfaP@j&AtFTDa-*_r}*eYwL=ubEDB;@T>{B;-yeEMwD
zyxJE<vDD&bCG=W&-~guK+F<GIEbKhP=5tL0UM!8POg5I*%>G5dGX}^LHq-2ZLSu?$
z%A8unZyaRiab-6&@T92_J$sg?M#~NoqXdP7+~&TntVB>hxbTW!uP1^=Qg30LO=fz!
zkpGE|w~~QD>Pn9yL5`po6FGBwDwlQm%}b%z{O(IZ8_D{mCt!?%36=?NRxY`hkJp#!
z4^p3i`AG0jE^bQfr%V^2-_1F5wx|g6&0ujh+rdub8GNn*<u5DEbs><3%{QY@6(As0
z9i4Rg(OJVHzdqZ;MSPLuQM+k&j;bqP3OXIx+}u3+e(Tori7+@g7$C~U2LL;Ce(Zaw
zrl&VksF>JoRclwe0ag;xz>B+wWf>C__ydlK|GNXcN?<r(%EQC+6?n3ViMh8Oqgguv
z=GpDZ5NBeoWWXhXy2t|~uWLw)eqi`&yCC)po1qlGpyP%M4Cr>{<j^8VA#BL3Pf@_J
zqhZ^<#ICU&)D)q?xvw6sZW9EP(Y^asqW&hs=bu0Puk$$Q2vIvfrKVPo6!zJl`wkVJ
zWcKv*{CnB)Z{kTDxJR!n47N*M9B_!(mmR>2cYyH&v>q(|>Ykn_06l!O{NwFbc3}1F
zJFq_h8jL<L=?1aeypxJQMuvx@0lATdg%<f{LY}&+vNCDFrl$P@VeH<nYhpq{OzeBM
zt=T*El~znaw1mlZzHVdD_cyPI*=x$bV2qW;hg@}0_kO0l1q<IN)tc(+V6dvp+nKj`
zZtPB1<OH2yfY}gA8n9a>ONGba2_6GVl%%No)gIntU~gbx;HX?3cjQnZcjAo8-rA-Z
zdm&fJHxAzBKq`bqJr|m^^av2dv<EgWe05tCqKcK@0VH^GJ{JMV_Bf!5$;FU?RYSI5
z9C+IBElibZgY6vDVfX|DJJ8`&uA`2BV#e#sonaq7e0X5Kztaf<)drx!Gx%tGl<5qX
zQYDyv1=U?V{od}bT8@}%pos6G2~cl9Ws6FU1|_VQfn)$ao`g&k4Wv1=9CmJQRMXSF
z?5T>fWaLhyNZ1k9l;PqL2TUq6bAM-hC+?d02{qCpt+(kUc2zJ@PP_uH3Kx-3PPT7t
z-ekK8ue_rEemei3!dr5^VO~*@KQ(w6D2JNO3ufjEgng{7tuG;OB_tLhj*ew^!?ty(
zclY;-sdmC{UJ|$7K0d{V*<ARbJo4Ul!XHtL1R@HG+xVf4o2#qww4H^7NKp0CzW<=w
z>b*v1jk$EYTtRGh9SIAY-R6Ux(|iIRROwr0bw5KzM1y9MbF3Zgbcr69Tn;bRopt4@
zPi*A;h5O@Hb$33+`u7ObZvp}^l8V?J8Jef*LnuaCMy7t-314o8Q-9(aVHp!fJN*IK
zZsLGXzPr0ySjYg{tAL|j@6V)``ORU1E+LlF6efc*1?Z}EJ3N01=yc+mK1k8-^aJDB
z!GQtVb3q1%_vKbPD5L09el#>R%QxqHXVVYe$S1bNHSfa007EYoFkY|ztN?dEpj(NQ
zd2odSHgnRQijffG5Ak85S-Y<#@x44eYKw1F`fcj&?t)Is#`c2&uqZDh15`{8ajEY&
zd!mT{-EE1Bd+#RQ7z<$v5j~ieSzs<tVuAGlU)oBDycGuxS?u-lS27-q@k31l%ul1_
zW^oN`VBs>jKL+dko>)3#i~y)=G$V&VL1Vl4*`WaNK7W6QCgt?Ly~+MpM5ps5{9Uxu
zNEhhJj-#~)`uXiIw(`Gx8Ko(zp@O2o*HKc!j6=z3{#~Ut*Mk#dl0+KZU_mZ~!*Xg*
zXU`A2H!4Xb9gII{65`_iY=KFe(s8!|<QV<W1^rLfk3#+hf=ie9w{q6$KO4u5HZx?Y
za&R!za)jzCLo37k7zx|^tQRul2iLW<5h6iV*+Etv1dDt!ZS_bc8vBJ8{~!jeprAk#
zCCgt45V&I!67U0>>+9(a)1I%lwTS?IfKt)Ez7WgHm)86W;l*_gD+dRvkG;HvO<T&S
zyf=ZD4}NYA^kN>!SRSLImUcnGa{z^y%kS@^fXX=>2{>q4`O_-`|9u-&CB08)9i-u%
zKP;^9w#)Y%86+y`B`@Q&_e+wpV=z%vcmJ$(MFfscE;6TAyz6%M{<P^+(<5lQ*5G7U
zT3UK_wH6CnVnQG-`QyirK#x_^@z;nc@xQtN(<Opq`JuEXIr%ZIkCOSYx6On{T1$|V
ztj<GkP%lg4%J+7nuW4IafP83dEcU*i<I394L#tgejEdLk`K@MqXX#IAg00c4hjlvS
z?pPkwf+Oz0KLfEMG5@eff<q4S<TE4-<R8cgDXx3E_w7#OPUkJVMr5yP3QI~7dB9P?
z1?busmA`;ZlEkbjH#bc8ciR83fZVz|Pq3Z*x5|K_q8ri(YJ`&P04J~(fl~{J7ERJJ
zHwOa{>8q6r<ybtafQ1%Vyh*GK{P{6CZNXQ5&*h54kbkm8JuOcm-KUDOUY@q617lBS
z3)~!l^aI8KBQrDl<Hw{1P3`T_*=kcTqsaK(OiWD|K^F^@qFfghfH|Sjn8EK}>>4TK
z37X60<*W~rXPdm3?Dk<3MY5PqW$i|l(ha43ACnao6ZSHN*@6wfMFoK{m_(Qif%TdL
zo2)Rr<L|3>`?ls3F0|SXbd2$ayqR2dS*Tvu+A-=QNot~hpbViUH3F_-4`LDOfbBf6
zQQFws*Z<baqKhvrD~m)X!c!$7;Z|JU+|)F6m4SFRDOjW27+GLbyc~aWBrfk**Xudu
z4&@x(Hk&rE5B~g2nbPY}e}Idj<WSwn{0(-0!BJwTKkPuJ@q9%%r~SWvjS6PQmz0#n
z8750`NukvrWtsq0LRAsgnfmTh>}vOeesKOT*leHk+4&+2D$ALJGvdYh|3L~j36p_p
zF?5(}oN0n&X|3+05&1(P<LqxsJ=%b|CG-^EidmgQeagUmmNuE22*aG_%^S}zLkOeY
zmn29(G&(ycdJLc{%#YrVvr&z+r3a6@eA|-L$-zj&>{S5zk%u_~DqNtnjOtk}Eq#Gs
zfQ5-UMOw%TUi?(5n*ee0K`J|RY{es5{}UmmY=qPdN1~DtV!`GB8%a;iS~{zsz{{2q
zAS_5oi2uVbz_BtYuj)td_wt7KwH6AbHC5%1%i|4YGGT-z&m)5TBTJ$Yh;?%(jfEU?
zdP|99t2_&3&dwT5`507=E}lZ*jm2oDAUIy_19CPeCs?qA9mlbeq{-5=J>R?`nx7*B
zf@od%oB?yP(S1(%N9H%r5g50Z4&;tAk8sU@Y%E~7D2BT^xVt49p7JF72Q>oyQL##z
zh||;ys#ssngY1`T#9a~-6SPBMuEnaq;EWLOS=KPs6%%^(t*$N!3~VIW>gHyAMq+2E
zCGLAlFS@6Z3k)-~J6ghJjZbsmDo&738s^;&7=YD+#=;Ca-I8}Z{}hD$rg!F6J;4|I
ze!WSK7792pV~12?3@>J<XUXi8J-e;A2+PXZ8l7+uk}sIf)3{g)ZCe+F644gtmVSl?
zMg#fJ#^6S@rMkq)b=!|0TxVb{k#Te5c-{8(33(YX4F3Lo=C`|!rU%tSmHsOXhPF#n
znqk5A=wq(M$Db<z=5l$`m}rd?kJdRJYMl?kVqmaY1v*>DH4_(?fB@Fl49naoj}*uB
z%EeG#VS{!q6Hsgy&0El$Nv4%OA+)I^O2}5N7Q<87&_hq@%c$8^jj>&7YcZ+5Ze^bv
zhP~(?TE#+T;Cb~hdNFsOmpbR-zC&JoD+q2^ZcW_Hur^nXI*R>JcW!)8plnuQLppFb
z#*^V|VrQ3Y-P3y3CGBHCX7x5EOk+5epgiZ|CsH^mImrv6%MBesqeMYL!5MX%>c{Kq
zUK)TUvLz0^3+oaQ36i06zPAS0^0;~_R_^Ce7|O#hwvagb!34Sx$ktB;B=A(RF*`N=
z&jPHi=~0kK<jz)TIh~=K@k1*@SO;l;SL|Op#Sb_y1b#YK33NPgNO`#)&HIDP81G<x
zz3}CH?w-8*yxOnDU%X;03+Cqf3zl~$^-SGMost}h%?jzH+7|Rp8>iQ*VYBqa>$dX?
z!myUW7&2ZxhM(^N;D#-aKp26nc~38HH1U((INX+JOukukr*EuaY%1`61@{xy#1`Hg
zB@Y1;PIpd3X?f-D_PFzdqSy$*!Op<}R{|m;FbJI;UfrZL)&kgW9@u%uA(u(eBz1;%
zt$b@~0XE{G>Q!K<ijEf$nv<7ReYSwe7V`QY=s`{%-<)Ev4A|!72%~pzLoK6!_Cu7{
zO<XDg2>4p(RUozl(hrN3tu6JMz1bS>T>1USO*c}>>?fY5gi$0hqfYj~Br9WD_QO^H
zOs}aihqc0NckR%T{*JG?Fz}yTU>=mWAww>z!Hh@U$I#!_&_B63MYw$qCxE$iW?_h)
zR*;^KCv}O1+!exE@i?W+|0-VIhI?ML-XQHf!t}SkF5V`A$YhCpGY`Lc3t3<4I}gdV
zHfWoAwm>H~6$8J4N~Jm&Nfr*=%A2CHhfAW1@y|Hot_4}%r+l+T{Py^UwK;}|i?LEl
z6SaL(q^zhIDYTbEM9ApqMvIIX9R-o+kwA(|<E&5fbTkK?Y(AVuVqiqazekOT^SeL4
zs3Cbpf{J=2_SK^?3|gYBDrGeoUr=JhP2Xll72@I*RmjWCtgZ~*JoW=VeVN>XN%wQV
ze$@qzb^iPbuvH5+_@s7(%C<c(8pilk;PLexuv<ezs`yZCIiD*eg^Q^<Su!civz=YL
z$IdM$<yxS#<oIL2d*oUh9-lDC=YJ$eb%6D#Asx=Wfk0vq>SMN7v3s|cIGGYSQhfPQ
zv6De%Qor(M|DcQ_lm+{=9|Rxe-MxD>UCb@sm!BfUr#STI1;9x{E#E0pWLN!gMo3#$
zXhZb~ST6fld6K;5KKhr_ufEZ*Hdxu&0C?aMh>nrVBYDmA<~V_oyG4XoRz5XJRQxVC
z?&Vlmdsx@LpcjBq6i+X;9B)Benll9tq`x<U=@PIXKjPVPw_fITjuWG)%`E?3y&Rw@
zegorNx$W&)6%|9(u^r`=@Qa01eqXe*F$R@BW(Hwl;gKBvz4!>ezgr#DibWa`z>C5%
z4v9Tk2^7je!ahB|&Tcv|{3id~x9yuo=keS?xqiYog6%S0V=fME(@#?t-@kKoQ>&Ij
zW*OZ%A92J{P5L&~*Irj8+SFFORqkNk(C2gg2lo7YW$i$c3}Wa{I54slWyduT4aY!C
z($g}AEs++T?fcxF6@C0_fnU~2%pY`h)n5>6_8r0{AkZyNlM9k?_S0TZU;fHx{tzDi
z;R9k`5Trk5iu+bqSI^AP+b-UmgVShSQ!`gNGsfm<7QkF^5lbh_(jdzyQ-B3z+8;!@
z=4cPD4`@FE)+GxI#KeR^2JPlHBij0uRM7j^)iDI?Q*7+mz@bT{<7%NIEiFMQ*h$&%
z%f5VJg(?Cm@#5Uv_WHU2(5!>@s-CVc`ez(WTwEX~>K__%cHKKuB;^g@;l2Bl7uGPc
zh6M!RDe>9aU(%(hfi^V;m%{6$+vB11`5GJ!NyS-=PTDhVG3tCVN8^a>+3LA;&uH8x
zBHD}g7<%2q=Y1BPndy=d)db2k1_{7ye*n$8kJnC#hihsoes_fY{wW)ko{?T&UanVT
zrkWOVb9Xv0pqRp8_8^7=VM~mOVfX+#wFkwX)p|cTw_Jf*V5zNhh5`sz=f!Q(;&{C|
z_?mKQa*)F?9eMlIG963Zhg&k_sU0~i*A+tCIq|XtiP<v=czhZf3g}<I-g4PzOsGm>
z%O(~TP52J|TVkxNG$j7}qRK8le-+*(uLjhKi*UNUSj#*D5z$4($m+^&I!lWm<Fj}U
z#s8ga!iZ>-6c`wmj;}w?B3F{^y6q_0g_9Nv*ONhXba+r8w9Cf<V_h3xImIHnHeQ{!
zn;cxVT_M8d%Glr|6AN;r1=8L0w)45d<+OnmOx?`3ajO*1i1PX3!6byX{ZfQ-RFp<P
zVO*TI-lN|mu`T?}+UqB9iH%)rAmVEDJf>JJOGMJ=0vzk+&%n`WI9v4g=A8WY;?UL2
z%?Rc~%IMi*GFWr*a`V*Rs&&*O7vzLNR8)YHqP9SO$GUr+g_eNn*LUwdfK*7uI}E^W
zDNGYdfnGU3JX18VI6ptL!37;%UXGDKUQP}`#1tZ5J4#DIoLbM+2zR;gG=OkG0*HE!
zn5p^i<t^%0fFSwn*Dv6;G1<J<7i+&)`J(2HhldBm(=N$cP2K5DXovW1a!yBxD(`=I
zS?GCZI)?}f+K!RGNPC-;lT(8gf8trt>J^t9Ve#<jD2H8d^tU08|I?Dy^U>v%(sV4J
z?P#CHW7G2OqZvLInJxvPoi4u=xHo_lp98ShF2>eblwv$ryA^HHOd_LhH}?*Fk2c3M
zMRPbUe&oW($4RJjRCep5qFyVGy|$Opw9@i~>G9!4)O&O(xx0_i_o?;unt{O6de0s@
zC7^7dxopK9@2#fBr4lMU=#+rJ*5ybXQ1E5SLUeUiB@IJLfq%_^MV4?Z?ami9h5qg>
z^DEMJhcHrB60&z;Nx}~r23ZFD30@Iw={K(~gK`wZz&U02JN(J^^nIEE^>WXJuD@zR
zRB|KwCsu_>y%+5zEoMzp`tiAyjWJv#(iZ|Me=Z<V>Z2A3Nf%s-!->+;pR-`w?fqFc
z4l^i5q_nX7Pr5nnkZTW!{Z8G+<zKiUj<+{xr&vy&o}9ksPC^z%EEIw0$<T0Jc6Rnr
z4i2D9o;Ng161;G!q&=-<0hXC8O7hm+tBR6h0cTJ4T7qD(-P*pKKNrU=>?|{^@VPm^
z+Zk24MvC$632PA%Q2>v4de#8}-P{K1ntNZwhYzi=7Ck+^@jf8@1YQL7wx9!(8a&q6
zQkM^3?8=I1nSjGhjE(p9)+RN~)rE^h*51AI3wmq9bb4_j6vF(_@Iyj+Z6dNHA}Uf*
z5s+3D8zX9LHpA!%F*dH?HbYl+(bstat4>gr@-jAF0KOCRkh=6a+lB#F7B*If)3BzR
zZqqa|QSd~<8bAEVJ)NV+6A%_2*f_aI|GYFXJaaPx4lBdk@kj0d{G|&{jz`iFu&v;e
ztCmv_u${O>ch<o@5i^FTSI5?~RfcNhA7mMSA0Ysbo)o|aZf}P(#B)kKO$uUY39u0w
zB>>a36Y|qKE~N&}0#pi``7H$ag=eB<;z55-Pa}{P`L*`a3t8(ct4&FT=(`8R<|anN
z`;yD7wrEk^bB>QMETB2`NjXW(rvvh{lecvr>gTcdo0qZ&88LAvM3|Tu#%Yuq2X@9k
z!n92n1z9V~wd7Ko>a{V)1?T6%ffsreA5mYY@N~4gtZb+8FYHFhr)ywdmgZ?RB{|Si
z#Hp@$wt#-j;$sKzMs7oSQ`0P9Qn<jww|sn+$n-%-P`DKaOUP99W#u!5nr6Y+pvl=^
ze2x<H^V>3Iye_0QHREGzILmec;tF8mvy(IMHx4es6=8{<2p&=>VVHbTj3iyWK&!xI
zX2}eauzXBPv#+IPo>4Lfn+@@t2HC41s*v3&$7(k>00P?lh?Dt&G_(xgaIUWA03V>z
zy!q$iBJag7+YxtYP+NJq6A<OU;H+_RbIj}R4P+73Fft0}yGW?1@%?jED-J!3<orHY
zrd|$q7%0ig$Jz13pTY(I!ve-7ShK^zP|mrY^dYlR!<2do&*l(K&CSlDv3!*uKYjX~
zE_M(0^(QD*1TFcO$tc=;840^&JG$fWU0QsZZvsh*2;Api%quHxqx<4SafK)vtKHO~
zS^EA}&1{$n+4p|F*VnfKBR$c`Ny*8Zn;UhU2@Xg4h2u*WI$jmOgYLbJoX8x%fwadr
zfKLxApMqk(m)bxnIdFB|ojouH88r}7d{e4Nd%vitDcUT%(D2mNVZy*dTzL#djsh0z
zSpAq`@}sPp{MN<>BmTUAkdU6PUecE@aD$1Vq1J{<>>>1rnbC!r9(eKR&y-R_v+t89
zB%Nm%8<S(OFJl;3c)xGf6L}u1dF_H7a=)&76uS28kTk68;A(x+o@4)4OG=ad=tnrd
z>o)(i5xyepfrhZenTo9~Z`nd?h(Ky~{Dy_QxUCWiO6UeRDn)LZS8XjfVM8Z2Vf19Y
zW91S8q4bGrv1B_7G}`kzba$=hBMI!jJvwjEFO)N*68T*B+bMDAnqt%sUAWh;u<PpG
zl+-3ymVQ|qx9wqob&{9SrwuFdbT-|&>qTWNmB;s~6u8WiimL#~(5p6r?ro0nO-qG<
zu}Vm&ByN@9>;0vwthzW*Sxrq%*PAip=N6Wb(3BmNvkDs{?al4QLHBz<1kscCB8%~z
zguqqD?U1UcCu_AeBctM`6-YW;OvK#o{K&kt0B>LEXIGaay|{Sn!~K)^O=@%GOgh<G
z|1Nrx5l{687V5jNU;h*q%6P8=Q;BaP*$Dsn7lT8CLH9w^)TSmTww{L4P^e7zI!M|!
zZw>gMiJAUKx&BG93a%-z;dgWUn++A`9$ZdTQZ?kze<NTzJdprDnXk`({77tP^lU<n
z&Bw<R1l;fC*_E$+*vfgnfCz5&Qg<wazalC_b$0$#h!swcNk7RRe|9!SOW-dZGeL=l
z<Cc*g5F&?y^lDoI%J<%<MW;HBoGPUyzpDLPk#}2xX<V48k99qs^)Ky+22KP$%Aq9u
zb<J)$%|S>*)ze#+{iK&W@s2+n4<Tku@#*k1qOe~%7{Y<*#P)m&AK=>$ray5zrtKEJ
z!-mMn$Pu_y4(>;P&dzq@SRGyWa_49I`}@Cr6R2Abd-o1Tw9B&rh!S=6^;^SPfxBk|
zz2UvU$76HM{A=KBb#E`)K_$$=&B@clW93Z?nC*xLM<aSv@5e2^M{1GLY@D1G<&_i!
z0yDt32eLKFNeKE(tINyF>+3dhV7K};Fc8_d(c5Ec_pqK=Ds?ni(_>{QmvF2$ov}(1
zYg6I$Lj*w@D%^HRhL6wJt4@(RQ^fxSSPArV@3ds!zyi|8K;c(>?J~k#3S?&=fi;iS
z$$HZI^V&HOoaznQI9pa@K>ZAkq#gsID_EdvuILLzMo}7Fyem?^B4COR>76h8{@rpo
zH9q=;co=@-3pQj&7Z;=2poyJHV!xoJ!Hp<P%&3Zrz<^xsJdO3GkrJ$xV|o4wv&^il
zAZVKnw|_tY6Tmj)-jOOJg|qea$lhLBu5>OrerXbV(j(L%WLn+cU2oEv$zJo!Q;_>H
zz4nW0-P!t`-|Ifr-#zmi%D12(8>CROLL`?k^NZCXbkT5!06fN}Ap%<qSHKd0H4o5M
z`2SvN?_mt+*#kxHuf@gepk2on6R?$n;szs4g;e?)^uTq-x?)A7!fLy_-}|3#?y&{0
z+_eDHEq6o%(0IgCL628uRnJ@OL7m;=HvnhOo>N-Dz`(ef(N|DcuWxP!He}Co#%d}{
z6;xG^&)WWlx`M9N_QYF8)_)FUq9D&Ws>cdAMm|iV&}pq+$Ci<*bUNSJlog`px}?d<
zqTocE;k9F?58=JQLQ6u058F_ZCt~DG!MWo9G4|GBQMT>g=wP6viXsi7fP|Ek($Wpm
z-JQ}MDxp#$CEX<@Ee(Po-CZKx0z)dW&+&QQwbr-yajgAae>jIa1NYqb6=(cn5jcDh
zbfl)H`eiSUtU(J2{5%u6e9?M}l|Xke4|c3nr&5>EV!ew!hT_3PV3lZU8BE~vQ*rz5
zF7@Iw+>PMg+}M~I9wtqB?{M0Ewa{A8qCITq&{n-_FFH2m0Rs<n<BPHF%k`>0o2?p>
zR$3y*tr(OG5*|!UbUZ$PWI!kSKToLK-f=&-h_gsO>wYMXH^w#VxZ~rnN6cKq^UAlG
znHvW`c(qObaQHH7IEMD?hXU;#6Go0C)>OtRgH~(S)aVh};P|^_Gjz08yv;c!S!~Z$
z4o@pcxa?+z&*l0Wo?ssEdkWFs**m#}m&$RN;m@w8lNMKzzwn~ku*AmEQF`pIeU0(R
z40>2nlDC$pmRX1>nfsF?m*(3T0fjbrNzqOx;zk=SuKb>B-wILXc749Oqh>Ycy1mHW
z8{mpYG?Ubr9@|%M)?dOb?9z%f3~|yZm_+DVpgK#A3^Lo?qRaEG*V)V1Sq8Q0I*n~*
z$LMR7nQmUk$E;3XqAquBKhMCv+BV<G?ZlfU?l?7w8&_W6B~$(SwXl^|LV3N8d=j$Q
zL}1<4hLXyfY-S15N6A~KZ^HbOAQhezRed++8<G3f+HL4RS<-PT0nfGN;LhB8awylU
zEf<uT_71Jdc-3=Sgl%TrM*893DxMT`E}SE;NrGGcE#?k$HA4$FHIjcisnA&{_|AOI
zAq_#qWg}B_X4R5QY1MhfJ5D4!uXl@?tZ31-qqn5SZ>hziAMiUEsdHJm11P@F9XT*<
ztsub=pglTC-yDVNROmBdmw5e7*P#vh{JwTHrL|DfFksoX+Cz-q#w<jn!Z>VORBF4Y
z-!-kIBmynwT3$>2r#}CNYdaoo@8i)}Zg?1RTTL6_i)CwZXY!ZjUm0k7kAZGuKCT2h
z-!C(nO4O~b>FCpkzZXQ_wXia(b-zrYaK`wiG41}t6<cX(J-L8PQ6Uo)K;-XeAqjg6
z-53=9G*#BfC<*jN)ve8bF~$r3Q?85&JT&!SU2ZOj)*^$L%-Z^q5ifK|#<a<=HN628
z21~bKJ5&z!R~?x+RkMF;r=a)7U<kc{w)NWkN;TD(52>3=OV;`kqpBGAYb@t)1%lH{
z>a%ocoS~TPeyL4FA%Kdnsv{G-ALT9&Sf04YCVSA_8aE5}NX-zANlBrgNKx0-?fvI!
zS-^MXNld*@2(bxIA!92ip#vcv+vK36ygb?C2(Dp(;UZT3G8g05F*Dw&zkNQ8m3c=^
zYF&gkjZshHF?&kO#_Nh41zPSqk3S?+lWo~N-nhHeb1km}NW5IxR}z!|{*tE8!jq$h
zD?f+T&8`N|23y-CSQQ?psk2Zi5XRx6Uq=B2XRvXeRolI{#0FhiqSZC{SW~LLtlSI4
zO|mUK3#-WBT5%(9ouFYMih@P3Fq7*Yma}Ap6+PpJK<TypGxXESht<Z%tG~FpImi;w
z_m_V+860hkA2nroF@%o5#spX?e5C0U5%KIWCub#4@UEUz2O8sEC)7|;p^GR-m52km
zf2pJU-LoOsV<L<p#2cCzw_&-Cx(f&vzk7TB_`t3Jmku_U+S1bd4}bT@4MCbCMHq?4
z;k_JRk>GQ1x(_+FSzxL?WocL#falGB2c(?sb+2XQ$df_82`a+Z?tMcb3NF{PCgC4l
zi-n`V`5tPnKrf2^<4`8Io4%`*!>ih$mGWF70pF#uo%5X?ldSCFRA${Lj{9x+-s^0v
zX1zkN596oK{aGm1)VgJG6Rw+GK>{}B)gY*#v#|WVV1(dKRBUWabaX!h2lZ}NN@K~3
zfp=tcUUF;A&9`G2^)^;00A5_N@q4R+V+5>~mOkM;A2QoJ`ExwQ1w>-X$PPCzKpfl%
z3Y1-b@g$QY<%!Su$jH`#-q~CP#Sx=k3Ama6&Kx|XmR7siVr~phB(B$Q9^4pXR;qAz
zt`NuFf$HaY`N_bW4kZg$&`3KwDV+QBXNk+uNM5(mB~Ed<SBu?f*{h`R$<wDkJF`ip
zVYr`O;w>=gsaJa8sMK!MZcR+MqR`cU$7?hI@Wa#lVW={+iy3gAkI%jJ&GYiDwY4*(
zyzc#%$FGkrdX`>P*`Co+%VCCoY}8+?n)5neYrnw4h!er&pthYv(%Sf5%&29GGwYUG
zY7S!$<^j4cN4#&c?DrIptK!v5F9DaA5pqn4JisF4^7%<H#oyi4HE}w;zr9Uv)|Ut!
zHi!-WtapXehL86qmkyv?^lXd@5PBZA9?kiR9t`P@6MK09gg|_A_P`nREI|>e1+JN}
zvS|foY2d9Few7M8{%V=)3&sjK<rWsgS(F<3`4?SQ7KjzeKmJ5W)_A^^AO{;NQ@Ds_
zoQ&AsZp!&F!|A)0d6}fUWeZb%N=kTZM$XPEvd+<=p*ULf4|$aGefU!@X2O^Oli^sp
z;~ywTPQkmjmo@(Ck2Y8e=H?2rnJEv4FxV3m=~g%8I<1IPc$$tKO-&FV?p)}O4m^vU
zk=Hv$0ntQWy(fd~1^lSfC1{e;hR9sI>|cFlb!{l4Sf_T9kB^0=e`qK_J)QUA!ywet
zc!c?8G4Pp=yM+a-4X{r_$@vbqT%$^!Jo!{6{?$p!;ZKECtk2;fGuS*WFr|QC-{<<I
z*Ai5Q!8fU>hj<tSxi~qUiW{q|-wvBizVBKxW^;3Q->`aH6|VPAYM7=|D%gU#sA#(!
zAXYN#Y&KxiF;FW=`wF$>^#xy+1EK&i-SX&Cd82O=aKHgF20SN@At(^tAt&#(eMmzC
znnKXdfp4Tjc?YxQ>w}$TT7t_!4+ARY*^hc(i=~OPv$3EX+ZecUU);NH<4H<yPTYPR
z*FDh@pi|Y~+#E3ydjQr#7*~Yy%9AQ}5_LY{*{yYHC@C#%Zhp1pd0N}AyS`!dUt9m(
zmZoohxFBYG5GS%yHFtiaeuy)RMeOVR3m{8FDU7geesNI-`Tk|slE-ulptxFCC-vkW
z-Br@~TQep1@;*EJBPJ6ZzdOBO{7!_kJ)A7FH3S*e)MQUdnKn!!Cfeh+wqp0otxltC
zrExEKj{eTO5ajUkG7SmI6i6I&^Q=k76jH8Dz%o^{`(v?P_l<8e*ix(B^Z|Y%pII9C
z28UT<G(*r%FTGb~+FL%HNyN5ta(t@PBOP0qR_~Ncnu5ArFh;{ES(8F%&|f#fS2{!@
z4VA<CHh+H&2&VluE=UR{KjU9^(I&?$ZAgAAFlIPqI$X!a1(>S2wQ`Np$>}NBk${BO
z>$TfJNzHEFFVdOY=+d{dyBIeL&lix&QsjOIU|1x}&k;)lb@g%RAxge6L;czr^~8X3
z%Y(M)d`@UOPxo}3+P25y;2cDKjEt;y?F)m3J9JSRpm5oDW3JP<bTRYT;yK&JdEX7f
zchAy+zj6~HDe_ENEFv<={d}6Pv-&JQJjG|(%<lZeX5H9srp{&Ur$)t!gKMq>Q|wWn
zuP<#xxxyJJ|3!h0+j&Qh?s0n~zt>qs$|uKUe&^wlp0kQE-@cXoJl1joct%a1(Ic2)
z^3kSoWtaUte=qqL0Rn<@MY*&&M<`%M%7h@P^}FX+t_9s8Ab_5O{KuOPOP%<f105X}
zhnr7LOiT*uct9uM<3}RzyQw&f0NJ9W>tLTgI6O=i@NEXg4WPxQGnc7ip&kUot87g@
z5BvNEJ7zs@ab{1?Ab8dRgGEY#I_EpS=hjwM43QlGOB}aGZq;7=uKnH?xY<-$sVW6Z
zm%{~z>(RkTMPDk$-ykEC_eGn@Oz9ow{@m#h2{6YCG8Qg;E{GE(Jf{z44*6;um-eq(
zSA6=!9ZRhoLr=e&wu^cmFsxet#h0+Wxa1@!hr4ks!z{LR#irmlTV6fDNui<(yCQTF
z)Y0M<p-?YO0>Hoq&m&tK8yjO|DsQjtoIcP{^FBM}NK;^UT$bq+6CN!sg+gK(<N?+J
z&!7L*wX})yng4q7?j2?!pB#iN>%+NF-vW0eOYf0MdJA)fq6B3nrG=Fhlo%aukZ_Cs
zhejy;uWfIGVsQM24<ez%mh&$!|DGVOtE&Sp_}2WqhQfPaknkCO=>hKYfZA|ycDAy#
zge0HFV)}1vz3UXdR^T|$SUIZNrk|TX@?1C}jMy091OJYgc9{D#(9%x=4OkL@qp!AL
z`olqn8Sr&lThZPT@;`4cFTyMmXHkH#*?^oQXo4D>n2e4wP+&GV?F#88D{|<Tn-BP7
z+?MF(bKe7)DdeOi<C8$vd(Wbys3`KGJT$cD@(t^3I}TSaAFp52)%yzzcFt-k6*sS6
z0S^(y6lida70(F@Z$k+k(B*?nfcVNB5pvFhzPm!t$%#9aZeKEAkRqVJQG$ry!pV3*
zqxiFN2cEAl%74}`y4irGdG^NM{th{hhaYNIp_7J<Hln^G%hk&(Xgyy)wX~h`m-+kq
zgZ2_0&>ew{0FM)}OL;;cJRZu%i|hcLFDg{UM{>(VTIb7)bI9fj#@Oh-fxwfqlM{%(
zC-ZxIfP@FcvKgcs%iyR+jrVqVTNAbk^-61ZuRk{4X}rf?XyNS-o_P)DK7aOXLE<>O
z6&@U@_{bK1=vs;r`pQN39duwd8I7ww4ltK8ak#j+RL!$-m|}(RS120xb;wCds`6Mt
z0EcMtAN+9N0~PrH9f4OaGYW!gbFL8=NkC|*tiHa!l+-(QYjFz68XPPv9#<w+GGaxF
zOb)<_UAcA*pvs@QnK60{OFnijebPxth>tfk>iZPz=HbEjtBGbZ_4Gi6NBU|lJRXPB
za)$tFOKgmvAh-mmU1-ArH=>-`n<FaLHLxk$hzOJnGD4Izl=bF5dmIqst%CS0;Q2lH
zxZ%oLF1Z<^ZZ~&x`fGUc`(|_(ZE|cZ)|;80epn{_ZQQdRwW3zmHa6SoCmt!8LP<{m
zgr%F5H&&=6;IJsssj8u&0c0mYwTi7_GG@ARZaTPLxy0Ww3X~H{O3JmhHSYcQtE3dZ
zS~QW-(a{k;Jv6ZGMmWgcckuDi)zl>JnC4>-(aDp%{UM>s?&2{!dkAth0E?ja<5S1J
z8@2iQ`KW{IE}F4EydZL49-|^@LjSd^s5b=!1+mdn7+kw{&ADI&@POB@TtW7n#XWDE
z`zW|0@aNa%srG%hI$-K5rUxQsL<#g`uas9+J&ZWroG8P<*o~5yWcqF6?*6o+(ekbK
zy_+(L>~sul`PCY9)RD`-55}e>rF6f%u(z<#(9y9uIy5$&r7Xt-&&l!0$<u=|y^`dv
zf*(Z_wAtccw2MF&WNi|e9{MoF>m7Za+wLV)5Pxa@Bkc{;b)%CBw;EqZWix^)EF}ms
zLPCjkwzs_iJh}Z)j*7J=EzJOC92Fm%)Z7Y#x1+BMNVgmu)cTxx7#O_dW~HX4rlJy|
z!W$VLe*Z(dmgeMRB?CjWeI&q7v9PeH@g&8Ax~HbJ9^Hk#TwGMN!~}NR($dEuP@=R?
z&%lr^9}cKcFCSf9$Fe;wya>rU=$fo9gbOq{EPdK(m@?3(4S{XJ^2S!!C!8DMpUcXO
zhAK33i;sa)5A{U*^FP%E1qINn`#>&x0QtvI^U~g5LEraGE2Nev3^l?Joqd(0{7Z2E
z5F;M8ItoO28>>G#Sr?i7@#FV~NCaTOtS4z0KbD&nz99_+CAY8hESo~UmfOa&aqJd~
z3jJR|+yp>L@b#tuGWFI0tuZkX@N_1ov)~nGZoN4HEN}UbENRtQ)O4(@pya|Rr^l#M
zV-3p2LTRbh)hFL0S}H1Zc#|X_fttl}jq}DzcifaPi@7Yoe#OE_Pky|<!P;4Ia|m{f
zab!%)-JZMa3_dHpWX#Mv6R4^oPjN=Z14_!5xS?pmcPQo}unAvGPH6_*Cuzg`u{vys
zLwtp{TR`~-vh=!_JY&CQa(TV%y*tjT#^s2@)xlg_Nj{+*^)$!u8o7JzpOaqHD5qyQ
z1aOmx*S6Lx9_1^pe)=LkSpNr;FQ;fq?g{r#9@Lss_0LZrsBM0Ju=t4B8`vLmaoOu$
z2L}r}c-yYclgl54*mlnNbr|Hw6!|8xG3zIWqd^S?V`KxJZk%Z@wJ0&87DtR&>mAd@
zs<pw+@3A6TXHwHZqt%zhmROp&ciF+v82hP|^j_SvudTD@pd|-dE<7NNoYyx$KTjnH
z3TC@)p&KD5X?aHE;SZywCc?e=^@?7db<WN<0EqAR=fnoQ;BQod2`^f0t*oSf+gMp`
zR0o`<TEo(om6g4D3mxl!2tYh;`dM->=u+5QyT<G+F0{$(+e!Nk82$0)TzOSmR6!Xm
zUg3$o^r6I7_8y&WtoOnj<U#%03A5jl-)p5TR(HA+HH}7FJSn^mzA^|@Urby_tI0tX
zkt9?J-{%DN%`_|`6AOc{v13$`X0LE_(6l&P6NUPq)lgL6_#<YRA9<$Y+%QM@E&ceh
zYFNOZefy=LIbcl_6G=yR<8(thF+B8#&BQ8Rr7V|8$75kD)-<T!MMisIJX4~KkRasy
z{djSWzEfE9Db%wsvn->NC+<@Q0%tFwHuiN!+4Y8}a1cGRu(GnT&do2Px3d%~7rf14
zzRTs8b!mYJ!9s<Cg@OxjZ&%j=68R~Yc1)cT5?;hAo2fHlmARc$uwiTNy@wB%NZtMy
znrzd(ZerVsf@swFLDPi1#GbMDIuQ7>2>oA#xbb^}6h{5W{kVDT4<5XQ`NI;DhVdPQ
zA)`-!ho%=%ZuBCUHQ7j8Rj;FNWgxLODqIJ7O0f{k`v=vzPyTimlofIWbuK&KM1>Xz
z!SH`maQX2m9`2{rC}$`{>Q!f);b#h5&8T-ER<EJ7&k*|Gum!1bxm=ke3%pU6v-*te
ziu3J|xMl~`cI>BuA_~K{tY2VFy7gmqx?iCk{)(6Z5L*pKTc=+t>Rs5hP}%_cG=+M+
z_%%}!S@1ahKe?8smxS!O^e@4CK8xKGMBRh`i~_Q-h&6pb6z%!HhyKjp)b9!}>Zf8q
zd%}XMj3D%Fno!{b3)M?h0@mcw^cqDtgg1oThd)QJ{6$jwHM41;{t=!ud?;1m|0toL
z{^RdZCx)6EgVPEt6&dy=b$`_3{Lj$mApA*eBf(8b_)n(%=F;uI*Q<I(2Fz~|!gv1i
zN*|G85rx`&9HTJAeg<ecv3;+vY=Qy0{>#hd0hj*XG6l4RzX)TRE7@1!BH2-u7Q{=!
ze$*#0n$>T^E8(RVsj7(JuWh~G+M1)gZnKPrYtz`+6j<04L9M0*{qL`W_o2q!cjFzA
zUAIS6Re_-!a?nC>ois7=o7XdG@2ddcBmeujZT{B9XcsY#Ny&qZ%7ycRMX2z7(nL{G
z+%usd3GFhD7m7OqaNwp3;^`pfa{TdewdfcY;j148tn%q+yg@3yEzAYuvY`BGErsPj
zkP_5IkX^qbbnTj1L}=m5lPOJVuxe7w8woDFpWO7^{Nd(YhE1jh))OzZSi6UxsflXR
z>Z@fr?`Y%81jojXMbSlyhZ28Vn9&Or9Qa1H`lo+@vahR4UP1yOs(*7XxDRsIMSgO2
z+*Gz$OI_{1C-{1{ACRK<bNdp1^BdHRDW^P`m}v>RvQ%@b*+PTy6r!hh$|^CM73f>{
z?nDAj;m%;`j7^f{Yg=nOgC;&uPAfC~w&$7RQQhX|rTb$XV4*HZH(OmMBSU?E)cw>)
z`0bOeGLVJ|v0h;&=g#HlwZ`-#hSDkH`}gnP?l1S{ghJ(bZ7r|+y&nLi1=YYtO41u7
z<vGWtR259=g{~6i2V|N>=J#Dzsvc=x+Fj1~7$P6A-vXt^*e=m3c;<hH{&%5uHu-OL
zv)6i6FN*>7AN(5rud$s(R)_{t_%VLbujJshAdd0}f{*>#bzFp>-083Pu@(FTZA&kb
z0uE&^ewE=@d|#~C;``<S2G1_#UHA^BZVQWxt;lHIE(gM}va(>nkAuNZW`(rKQ>NGj
zApEaj(bLl#Kh`)Z#l;PCs0J;Rw`*KXOyJoldloJM$<Exsz;j*QHq;l<fATLz(>Mw%
zGFK%MUCbj`Ev~z8Kr5sLlE-vk@ZjO*Mowk{IvWTE(1p@mgV+ZW1c>NEB0%_JauQVZ
zhgtOBe=fTXQB1^JEtQcIh8NY^%<`@;1r;<^p9ydoQK6kT0J@2)u+Yqid97<<X=#3S
z6=XEEbd>Vt7WdtClgYKotLo}X>&dX@{a%V27}rocK%tuK6<}Oo5y0&p#IG;XYwYwR
zFCiFT59Y7@-qoY_$dH{oKgm6-)RuBQ_m{T(SZC#-lF5j)_cWi4|J-tn)6SeZb9ph8
z#!cNa+)KMU8Kk@Nz3Qgx>!-Uq^S?`F-;v4*$LJusmDY^xrF}AQ&^*)S5`<g=uNeTh
zmRD9zPEDW!8qdQJ<;iDyEG9M&|5FQaclQJ)NMhegWHJLDCZtEI3JR$zUTxiRnZ$Yx
zP7!Nd`KrYYFXkbLOMZC*U=@)CzR6nE)6D*UNDTjO0ZpF`W4b-xO&5A{uMO;*G{|Aj
zQ|od~`L!eo*y+BIxZV+F?D*lP`^jJy^pTSe<b&URC@+7HurV{^GWgmGqJfbW3^%WX
z?SSw3*OONND{T@&uY`qKzBZh%GoWLmKOdrD)@BjE_hW2ir1AIpO4MUp?H_^84E{ot
z8JHDb=R(r~!En?hC6T7Mc}aVCnA*S9WpG-&?%OF$vV<R<;&sZAK=_o}dSdV@_@>P4
zRPV=v12oK<5Gp=C=kNYLs&I(-rO6B<*O0h4HD;S0!66X}Q?${pHH=-(j0hn~aVh$#
z#rj&#p@w^c`34oHiYWj%d&owK1S{H2|ELfY_ET&~P3j=7+(@3QWqqMQw|-eptPKnX
zR?WbYb^5dYLV50*eJt~kpfwOO*yC%we{(Kj;b4Kb?L=i?)f)0O`5jP)gCgS=lVA$3
zy`e-A!~-zA-Ds_IzR!5R7!8i{G`1({d`f(4|H*VTLyV_~`_^1zaa}=TXBg3KlrUhN
zc5?iO>H0tbi8c`v9^&FcbXo1bkM12MH8tmZ;axqgSnxpqUhv)CxLa(6ndQ@C?ZLA4
z_AZm97KI{%9(zc-JY{Y(mu_%^&bL}uRAR#}7@C_?8=S0hy}0E~bnG?zNkzIQR<qjB
z-biWaZR83!H}_rUL>}MSg7x*ua-<A8f@Kp<zoz$D|F<Afseu=H;hrX1p4RTnH^>JY
z%)_@Fctf&Vr@CGr_%Si$@98e~QZZ0l*va1*Os(gei6-Km2~TObbBp-r*4BWP4Zz%>
zIR|ih9?5=%xnDEANub+3Hz+90xN{f(F2>3`f1xyy`vaf+Gmx*7Ieh*c10V@mUcR_U
zB?U&g8f7k9t~`xK!j{J;Cw*~jE44eWrK0!m(_9N90~W8ks;ZcwtG9Q(YIM|u>LY&d
z^(dLq`JX=@yYJo66Y!mMHZ(MJQO$-_IvSF_tge{nIPGCBtVj?wrTP%#f9y6%P9fv}
z=G#x;q~)s>Ir;LsjI481+078MnTAw_%L7*T?=xmF&a69%&cD3qvQ+o`Qh97nJD8gQ
zlxNhfkN0~=M`gA7!VZPtC3cO+37mG>8e8uBD<fkg6i+_;&Zmp^^vFVXYo%J8)h*zC
z?q2H7q*Hf%d|N&-m@gs6!@sMi#~V(Y2V!B?c6Q;7-U%X>mCJMy5ysu`mxR$fs>jD)
zz4AiG=JY%~lW5!=lIQ!{tNG;%x7o^~sp;}`Lm|6~jY#@Z*IjU1NUud~&2MwMZij$R
zF5nLrZY%v<h#tb1xAA_HX*_xSjX{8V>-hL>+02nddSybs^mH^yrg#2r9i1qK!Ij0u
ztgM+d905H@deU`tbO;frSH=7M6HRMMru1*J{J!rG<&aF<a9t3%K%n0pOwz#Nrl*fb
ztGW5ht$t<RVVoePW!~ZAiEfdLm#&wMaE9{TwdGZtjF17!pAn_j{bVD6O1h2rVGuS%
znxLzmp0%#ov{`0cpkK&$pM89)%NsDEwDkoArDKztQ<LU(<@)nNz5>2s^y-FCe|Ic%
zu%?M+ka%yx=iO>JwYs_r+!-)-y~S=zYVySAkGiI%Wp@Y>Fv`uM<V3YUc#jMSxbZS!
zbZ)u;Ff`4;0A&23X>Vy|qf_C*5zgFS@LtSzc6OGaHwA=C+uB?JZuntz^!CHBob2r0
zc#dEXu~WCbVaZPSg*KeQ;)=-!cyF&<S}KcdXz+oOAIRs1k?~3WJWi~3tmT>=9gQJY
z($@Am8KgdzMa`L`l22JVZs^#96?<+T?vS0cyCfyb$x1%8|3jGZ?kYTM`M{p&FAN0C
z^unPN<NdAmxt~*iq0pfA0F<yE$9e4L=EYxIVz3})A>RHE98`dh+hZ?ELJXfh1e-Aa
z`o%wJ&;qT-<hhYOw99>KYy|4fYCSWxCv)D77co-aG=I*bEFDBeqg9{r@PJQ%&FXuX
z%~?klx~Dd4Ki%P&q&@o;{;*iLR+NONan5yVy=U7Kxwm(3raCv*AHQJ4*mQ}#s{Bg$
z4NMGNOl(qoa?X;%LcR*CDFh2Ss{dEBPx!%h&EH?f>pUQ3Aei%G+ADXyR0!AV0UvhI
z4z?LfOG}S|FyepUO@mYO<xB2wsRyZQM`niJegso$OB|9+s-xtzpYBm>rXiD;Jti=9
zL|>JTa<=JXPb{!BYY}-p5RS-1ep8?yNTY0*(?ROy?)e=$nBDH8UsWmWw)VS?%!_=O
zBb!j^GE)OEn(5l7piRr6L(nn-ShCIojQsqgt(lCnz{ASQGPB;!rP9F<czC`o5AHu^
zJ0R{M#We${`ATm}Z9=3lMPCvR0V!Vhg2S+U5fBP(7IU9x%9a@(ec4?gAto+rjp*zK
zx$qY+KBqjfP<-~x2O3y1H2HZ&Ma9KKRm@;qmEG1>H_cm`Sk(G$_oSxQPBF#Nac58r
zL>+3DNdER%urL3`gnshqy-ng-Syv#<I|sT;C>jBstm;3QP&U~`=u;-j+F4i_#14R|
zHp3%&YX!a?QHMk1+5l+4XJt`ie^&nbmBv3X5Ioyv!p3l~%U!a!(wb^+K{7C4V!m_d
zolShonkk~DsuCL$17~t<w2D*ld+Z-0`7wiSK*y+9tQ#Gz+|t{bJUxDm@(icQ8Vs{@
zJr}GsMX=l;y`80X58_udqr9QNKms6IEiOZq=DSLG(NG-&c^{ho&E5Y7hkjZc<R0Pf
zrIb5t4s+q;Es`mcDW{Jm?)o~_WmFv-WT{)@7}{JIUXXKSf@M|~IZ}YVwKQ-02K42U
zQnlcmciSIjj6cW5!1VzE&2Z9_=hTxf4vXzA;HJQyJz2NZOyRO)xy9+IpsHJh>#eS>
zhzIES*!(f0nT`&Pdw1^QyPRu0Z!RBJKES_q_wM%AmN#-W0+z5jAt;Xn@^gTdZJf8<
z#%%02Tjiq@cXtB=gUrGeuo<Y7`ZQ|4HZtNIf6P&#9*D9*CS>YYt||*w>T|cW3i*sv
zS62^3w2@Cv1_mpGJ?!Nx`^OOxN;A_le0+RhH-X`au1=p8DKuK7J34s(#CGgF40mgF
zwt-*Q-92Evec54qnNjEQT$|YNWQJW2__HhjTCdQ8h(~jt!^^9#lD{D!WW{RCuFJSI
zFJfMvw-Qt$j+A<^LGaPYMI7LyQq`D~`lmRdBjB90wi!YzgdmhsR(66o2)sRn3C)wf
z<JT9He$<?cQXZ2ieifs7BjVoIZ)q}vE~%gY7@9B|@dj?%e{9NMKZ~crnGAQ0O{oeW
z((Wci4{aVC8amvWiiMUd2cy(}erM;W+NZ9*yk2kmR?6l%$`#D7{Eq1|W_Rvfa^9ik
ziPi&_IZdrhpC%sw8Y`SDlyYPjX0d97PV%^{%`B`QkUgcQUOF#|OTO{R1okhDxHw(i
z<ovOMw~5@c@?rtcMo?*EDv#=hs)DZW_WXQaG(h%l-eh^TcH6kzNy5261Me<*!$HSG
zZ!d3)-rs}Yf)(jTIZCv@wmdA-s!c5DCF40#R$2S#a}zTlzA+VI<egXKMxWke@cGU@
z62l+1{Z<;l5W{S&O!?g+!7_o3C%!1rafLbM36bY%cR)sa?|V9E?pve#p_u@8jcvuy
z$b=q+YX3NJ8S0&^!1dn;8~Pj&^h34%yt&5#Gh?k<q%FG6_PeCAa=Sn6^2o>tHbPK9
zA;nXap3OGPE}0(hMS^zk%8NE0!u5v96h2%7<Lv<{9L?tMyxALFEf#b!!Do_}RmV>b
zv=dTN^cJJOgKUx0cW%+e(^GC=UlTf4*Q#H?-hjk$Nf8BRz++x^d9^!OT&}JMl|eb;
z-rjtn4Nztz8d3De$M0-c2Kh=hXmGqoo$=3ARXekfPfw#`)xH}`?VkZt%Va5QgUdQ3
zEbMKq*IPx99HPD0(&EzC2x?y_dy4ali5K@FBV)9#Qzp3K$w<msC~^EP^ax`RJ>cTJ
z5qF>J4>U<0QqSBdW3ij%jlZhK!%QM7>Rw$;|AGY?(+oXdxQ55XMPwShPWCGD)d;h^
z=mrUHV`FnGW&0OumZ)d(?=X(wOTMP1W4!U}=(#U)|G?JL*0!$7vP#a4H(4<C&%lKF
zfMvE^=o8=hccGnRx-NE~TWrVQ_+uk3ze7>z{s#LXEoW4OYlKoRUj)_h2Djb&JcdU|
zBqm1OXOLL})s5C~-&n;;-FETT4_&q<MK8M%5X3?`7*aNasmi{RUOdF9->LQWEr&d9
zN-ka|M^P<Ld+7}~@!EUWYB$?VDcZi|;9BUFi=$5q=RH%?#m}slp293inJ#kd{V+65
zH1?|8A`3Y^=!yKe{)zs=&kvA@di5UBNE2Uy3p%Cy&>mUK4-9NewO=rHIO!o7GkJW{
zDj5mAw0#HX0!hKME?_T#M3RNkWI64qa5W5Yy6KFf11*?aZ~b2ywYyZxjz&aBb2yF`
zfMa2#G9Mj#RJKmz)Jc*^dQ|jURg44`GypY93{BiMH00zCXA*0n6+kS&4>W)vbZY=q
z!qcrS7|hQ5Qd`So61lOP6Bd#Po*AC&i;{WD>&web8>@bOw_wGwP|^JZM0M0+7x+-<
zu-Ez)qF@ZsbT}#5MZ!Mvx`TMRz~=0XBj17ZfkXB5)KsnZ156_O6*(~~3+QnV`B$l1
z*TU%vT}j6hGZGSFfB`@!Hih{k^reDct2@PfA8#7S<R1#mtgtz+i?cR#mYo?e%Hb%3
zX!7mbutZL02O-1KgoKTsqK>!m6g`UK?reqgpG%z$bWJ(7)Zk}!c>U=(y!)2wDYf_F
zcfYIqW*~W=C-g!@A$c(h8>)`oRDwgRNy96^jRINhIW=AZfeR>3Q{nWh;YnISZ?28d
z%gYO3(&N`Fp}`1T5y}%k4}KR_MtVyRh5jdlSmxVDUjz1G5z+C-e@J@jh_Zf^Fcw||
z*NS{)2DSptiukszt5;8`nEKV|=p-}gK6?@YBMaOTwRL7-hXhWRB=MEYegN=h{{KK@
z&prnH|3PD^Sj))!0U0Yh6Zc$lFrLCQy8_k!7kH#wx|o-fk```LSh%)kp{Bf_WXu4T
znP$yj1LUo}KZr>IGCYXZG$P|awE$f5g2Ito&!{=5zm4@VbJJu)V}gNgf3%0hnwzc>
z>n@YWue2a@x0t9X32&kVpWUw~DERF7mx$8`czN<kyp$16L^oriV-)QkTOEQq^*XdL
zAu#GMSLhCj8xHyT({P=3!W#Nt!x2E>+nz2FZeQdLl9ZLTcXpnrGr<bQ)6%*S@H|2r
zZ*@Pq@kegxL*3Dp*Er*Z*yH+~;|9X$SH90$#81$WU2HeF?^oLWcFB<)Ebq}Z{!F=P
z@OolMpJXQ>=aGCzOvS;4<Tas6YOPClz5*&eGmd>Y9q)FwJ^T1_o<f6sESLD9A57o-
zB~0a-M&inIO3nqRc*T?*cYYLn6-`c$vDs0Sh+s|W%jufmU+&3h!Q(cZXs}7p)*aig
zVUG_3EvLZ<;07!eCGl7<IsL5j9P1q}uN@rRPJexuJDWSgJ+YIGjSV`LN9$Gssq?T7
zhgdN#3x|h?kA<SyF?-mzkmE_lS{}R$?9p;z)=RE&5RF&O&p19dKYg1VE2B}CK0kVL
zYfOcVF^Hkg>FJa{JCinx*>++avckf`qKDUhxqBiQjtk$!&r(@~1iEe!hrTc~OPFt9
zV1$N*K!4?HJcp}%Jo}p7g-2}fh>qT7x@a&M4T9WOY?8N1mg0nbJdY~`a*nH;^$ohL
zMs3(&uLPQ3sTmnY2kRV==VZL7uCKQNP)3w^<Hfme?s*^%_=(j=b*k39lhzU%I4siP
zft}mr@q}X^pWgH5KH!7^`YIq>bCzJ&Q1nU2jcXl@xH&j$#!Q~}q$|$Kxi$$asUNFX
zPmi3tYz6p>43A<rnuYGE>*fyoA~aw0-_lB|Sren^7p`r-ZZ*Y&oG>k|qyS_>Jln%>
z+lTnIltBS5B=+0W?wyWt<nn9*LJ>jg)7h3A4ZD|K`pI?BhHuvxB#kZ1Q>JZ1&78LD
zTex6m*Y=vZcQWbGLj$Wy%dXSFPS$B}ZD4P0^^fY<yUjwzu?=ULBm8O7JJ&@o@u&3S
zlNF@x*O>Fndhgfo)c?6NMDW3k5j4wrA?f-dVfeEkc!e#l;nye+MdR_Lqs~zZF8Pc8
zEy1Qur&h_hNMQ`N7UZeORRRKMtNR;@Jqaq^qw8;J8mWxlb3G_e(d$@c-ou}$qY>|_
zWfcm#ZCbWAdP~|a-{{d9{V&28@gSO+oS}(&UAxab{3R%{J*<mUxogT*F>Uo2rnDrs
zuFs|GF3Xxe)3U-E5-?WG0~wVYc1$3W#!D`p=F&I9>+R)UkS09Qgg~}VaESeOa19Eo
zIX?CuW|vOL2|*&8w}M-`rut^Qx+y2Q4!p5eKYk=Ubw72=(K-hz!%poEKXED|9?#&N
zcb=w8CCOGWASZ-(-*Z%c6dp6Om}O8am7%$<vz)}|=>iP4nhG=9cj1Lw@!#$UQV95j
zFs(QgCa*F70O!-X`ub=oY9sf1uQ$v3_*scVofwZ!R`fzbLedeF9&ERygMnNJ5>LGy
z9m~sC38QTniuYgGyp(+VBDknWe)AiWO%p3w@Vk0#g1&7m!~S|9sSlYBFHspyoo%=6
zW1=aKP3GdMJu)r=heZA<J3n1B!FCXwMAQ>vFs2vp#TV_xlgh21e5{pL-^AR|`4+~5
z<~VL%ApM$!aC>sbf_N1ZdFPsUr$tKdvX<|S9^053&QbjPh2f<+FK-PIIn7<`H!zsT
z!3mX>t=jHNMY_+_IJ1BD{_WDXH=Hf@NpNHuGqpl<tHg+ifGIKj?c1a$_J*Kw1&#AC
zvMIQcZoIk^Jw?29mn7r`I&rG1s)mMvE~2L=u&wdNa5r>TlTKs#bUQV%rlLZWri@pz
z02sU#D(-!JN3gL1p;>`b7LDsN%c;UCO;*>Bb(gB;bdAJsF2X6A#kW3tnUUEeF{0%P
z#V$xx!LHJ>LhSyo{`7F#cB=c|BoMNUnQ?ylpqKOOj#b)V1V4~<ty?tsF54(lBkjvB
zQU$&M;nDMKuY>hyMlH@1a3BY_H|Ws{r7gvM!qv(u)T!NW_&o|(2}j24t%nnHI))^f
zUrxZlliTOd7m@oKrN$j)bM8#{?)jk+dMkgr%gn5or@XwEVje?3^oacdn>C&D7Sixk
zyphRkoRt`7nvY?-^ZS$KO`?C4dJu>Qf?^&u1M~}(a*09N4R&aS1Lgqj+myy7pYB`O
z-P}otk;t^2c?CF|vwq=l*rVbH&5HaJlKNJ<mK>zsx3sk6f1)R{QX|1o%D#htx8#v9
z#=$^_cv&fv(#de%+xnsa&cXKfmAxftWctgT6d%*QMSq!%mb(Zs{MWiU3d4%2q<B9!
zem)|Wz1Cy+;v%e(QZ!3xBgDflLZ+4AvA6$SiGi}wH&gxGbc~EMb?(xNgCVP{=KPJZ
z(rIF^OX}+GgOt+wkA+eWm~)5_CQ~+^@)Qb3&qsEaUk=)FT3#}Ei`@WfP4$E96`X{I
z8>v=SR-jYzbB98IBOpVX;5j=T3(Jo^6RzZdPs;Q>+{2)cv$*U2?$kr`E4bc+3UR?&
z8I(v^s7*LWp3|;Fw8m!tGxOb^12G3-NLpH&Vje&}x!~cCRmjA%TYz0pdzcC27NJCJ
zF?;4kE#`jD-=r^Qw|P{V5)oY!jk?3Yt=Z}oA#yLBP_t>zZoxeKoQbGg>|HVsHg}=D
zThQKF(7E5vRMlKXjYQJl23*vj)yQK33YD(!?yG#_k0Q#sZY=Pa8{|H&)xf=+xpR3H
z)bLEYK2|%fY)|YLwqU}6n3i(&>eUdQO6!R_uakG8SOgeXE@cd;D=C%vUho$^425b<
zk$MT(dz;*k_zbO{zT}yno*03iwKegf!9lQ$m@ZP)t9J<C%v(|ErwQ=)XVU&+zWY=8
zbu$PqM@KG*F^?b~bW7BAZqrMJ-XcX6!2kr$w#to+=WJ}cr(zXsAi_H*fA5aR$?;%9
zdQ}^uX|?|dtz5GZsvJ3sv86vkLW+{20fi<Te@7hOiTmhl5@15X@$>VejisfL(NWV2
zH^I&f5Jv?;p-e@(!r{?IN0-Bq>1k4VdHHB5(E#u#`PoU=RjIcJN`T*S`X5`o28lwN
z$PROS(`js!LL_RumYUJrq1@lc!dyPkQG5CNyYaA<vTXce#Ar4N!UHae9c6hf@)Ka{
z({S!CFX`kL$0`}Tcp>5SXR)ct4+!B(SC=alXg3SAu-}E#act|Z+Hw)IOULpH|MMH5
zK8p3NLc-cW*&$2b%r(g1CQ=$93q>UrEiEqah5>xiBqmscRNBqyLMHd04<QgwmdfSL
z_6viq#?3qmde*Op#-5fMr#otfI2|wtM={Mp)Bk?2Ey0xd5(~>ItKV{N;eTQNV0STb
z`<vPQeP`3JK=giL<;E&Mh@}4=t7fKLT?T%sS5fWze+Lrl3aYXE@91Z~2`$rqN0Y*W
zR7&qQZp%Hv|G`xd4jtl8>IvKUqKNw%af9+7EiCwipFvA>_CQfoOOqfLN}1^2u}W|~
z6*Y1H8L4{r{>SzB`MgA+FarOM)2o;M_Ye9#_itZdWBL3m4t0%BS{CM`NV%Jv*$^QT
zm(UUD!VtlrqbJJc-+IgUG0o3}EIOWu;G@nbXL0qw3Y@3YS60egW_au681B5ad-TRc
z+jP79X_!=!QQ-v_kG4*geE1fx`L=sW)!m=^^QN^Gu5lS%9usm5hGfMX%a2UW@VR@W
z?A#CysJ;B`(Y<@EK2atbQ~X1=0%JC@W^|voUrmtHPiuZUbIW=CxXgP-%kz*ac-@P1
zY@zw}#EF<XLHdxTs9}kBbOO)$tm}q#Y>xwH*0p813#U0=HMLoHR#So-6WfT5buFhg
zm~uoy4<8{|eh!Z+v%J27#@_UUu=Qe7oQ*u(?lDnZTGLX-^0NUg#8zNJN_8!o(@M`8
zr}=gvzm<!<bETANTj6cS%Jzy{h4zV$TKMV@oo|X>2HEG4aoU}lIY$n^ZHu}iOqXw_
z1nWqaS)2P)!m{MyW{=}GHxe{*qMynYb<d6V&bcGJuSt`<L7awRZy`LcCw)dBkYq4h
zSl<26xBW5Cb`5UCi)^J+Y`@oL2*R}f`8)qUNO<{QrWHc4@qf-I#MvdZ|GWA4|N3AH
z*@o#;?3*ZN%)f)B4z+sF1{=|wjE#q<s~t1a)6I`TR(Uif=YOt~tEUWpm7;yHdCht4
z<KXn?+Rz*R_ssLVRSerG(}1Ij3N`+qJZ2JboLr|^%NrX7Aniaai?gt?8Q3`Z@1+(Z
zQxG}Jw%Ij97Wk~c9gUrUbxOSNkk)=1Pq;Su8OYkswznsca3=H|9K3_QmYsv+zYw4Z
zmcb`mLla&b&96{P^Cr?A!FN<HDqm9SjV=4!`6zKR4n!@5gK$e9^|iN~&3_fW!TYNp
z^jn!DJ6iwqwP8DLI(+^VJEQ?S^}z$i8zh-BaXz-w$B3iN=It;3@t-DK+vhRsb&Hkh
zEmA8gmLMgDtqAy&d4+{pA3#kOFmxU5?X@8O_TWK%MMX3wT~5PB5jE6H*^MCHdV4!g
zEF+>*^#1PG04&f4>@juJ&>)I-B=g`sn%>vYhy^_$`4+`I<ZgS)_wMdG7e+2RI<TP2
zgsN9|R@T5C*dOU@UBUtOIXO?vz`(#W$G6{<8{TxDc=1<>*>?0+{?{e~ZuJ|nK{plg
zdJfQJ?QM?ov|G%Ud)+)bS057mh75@rijC9NWx(H)l<e3TvpZgl45vfMPm_hW133M&
z3{8f%dd`sIo-8%Uf7|Kn_b+u3Sh%%?7)u3#0_8IUc19)IJ2Tpsr5!N>V*13X@PKE_
ztXcjA2%ew>=!3zX<O6wCxj%>rzU$nnUeTqX(8Fv8ot<cDst@&^NBwxDwkVm>e}{KV
zG=Ik5O}-~Bq{8!vc=`cm+!QEp0%L?q%HiznEHcszP}LBG9($bw!c;!-d)<rqOCx~t
z^x5mkp^^EhuB^Pevf{cnNG%nb2gR1U!opDW`}gm+0}#dYs3<-CK5-Ux0j|xf`v24d
zG%L8NsLG3qDuYz^-8R#NuhDvE&*$c{9!i^AT4tJHUU>z0e)@}_!6>f*Bb#FHF&$~}
zqRJj{dNK`2qkqThgTIFXoKIvof5;0^xcxvg!>4`LP``3**86B?+D|oqrgVvf7_@BD
zCAj&0z?H}EY%f#{H6wttA}k~X5D*7PM<;GFSxg)p)`U1fmln}*-6WobBM&MJU(jqZ
zq8>PA;H$C=GNh*r<@B*=d2pKj`SXb4lJ}jlVm;R{)c?7d`n~rj?rtah$3mtbSvT0X
z$U4z8bXyQjw4=<ho|vF$@1VmuwSRahCm~^O+mM8e`!Eghfx`5k;{|zzKxra&e1{}c
z^MWsyz@f=4F3x!g&kEdlWs(zFV6H!PTqfsry9Z4A^@JXpsSGR}^w-XmIu~!sX1E`&
z7@F9ImV-Ixlc`God;l&BGZ#hP4AT1gpNm6Etl#cl2u{F1K;KZx4kXCSiIx8~K6;92
z+>gl6XuQ&|tt^dJ-oo^R){k>ewaXPVsoLxms!bjzd-(SDyYB8|>l;hu<$wPC+1$+6
z=EzgdR;^--5x+PAO>E#=C^h`)7ryb3n)>-BL+sdde=<BgsWp}n3@ogi6y@*g9#NxL
z(9s>R<|mnXhD|Wg&|ZRAa}={9pB)IPL)j~?ByjRkmqTb08ERq*M}K7ga9!kngF@4u
z#^_ei(x3|M>xo>pbyPrk%a!-<cWSc1dqX93qYvHcoP{)RN*Ss2lWcrc{Tt#-Pc(lL
zY8zweuKDppp`6c3wG(IuSeSbinl|9N`RXbbos+G(`A48Rz+~pKnH0&87dXRKdE$Lq
z9vg6Uun`mXn4TdYrh5#dR!l@h^Fm2po+}3@r$Z8tQYkOs#Wi8dC<%SNV`f#wI6q#3
zU8q{+wD!0}UFPNEtSx15?^_QEaS9bHbF;TJH(v$ytcMX2u;iK)XzsiNE!A)2cmx|(
z9Axw=!MXyQEvl?~tBfDsZf}lqb`}H_2!6l)-5>8=T6B#|q5Uz3%Bmf}%_Sw-(latn
zypjw1xAztcDPK1$>*_)o_M6Vi--S%b=Wm!d>S1;8OO&WQc3;c~!RIiUQ#L_N@0!0L
z^%VQn{P5MF&<SgP=k-M>-8_^_h;csI1BG@l8LYM(v5b%q0cI~ULp!K92$xK~?g=A5
z|E%$2HC0^*PR$<m<W^`^+3Hj~jGP_K^{JC<s+U3VSM(qZB&26NcQiXoL5L=d^eI4+
z7hY^tQWt2s3WT@k7Z=Z!7?IfE6;5h4?7h53p6P&@(Rk)kHQPBKgTU5^;=hI-@H};T
zaB_1}R7jORdhij>yGetjXP$2}qxjjp-<56(zGXJ)r%#H1na~za(dcpTDZ!}TtNr+r
zkIbf<$JSJBV?kZW-^h%RPkq$O(>3A-<D2u;@Dguj{wv?wA7*A}4L~;Np{vWpb|2}D
zAj8L3(Xd!^&sbr4l1m)wQv9R)8bzI%fTsR89FkD6&Qy(<=ni9`&Qx+&tAb_<85!B3
z4rf(mrPtX(Y?SH{g?+uw4JrEQ^<ZZHh5ZxlrN;9EX6+LqhTj!aF@n)Nn@pmbU5$8v
z7fkDKn4W+yDXXj75XJAPGx4RZTP2$)A$~n>{%yJ$W@_B|Gb}Tr7(;V(!oc>G9F3#w
zZ7EqD?Olt2!rQ+8tXjWYfrDn9B-LnF`f(NFWtKHr`COWtWx2s}X~>mUwo*RDhV<^^
zQSvOZm|F6iJX)`s-`Tr^2m*0QQ0wI31fONaBtvT~QF5kG__=h-({e9ZL~W5=gfyHq
zV)O@JLQP5W@~CKNvU79a{2Se_cK&k|*ki5sBs9i>k0S#I-6xm&6E+0)m#O0+UhRwc
zef8wx?~&DPxA00P%`Ha{hR4_nMUDF7x-;t0io?TiIM#Y3bFuh&zJFx(+ZV$AW|ogf
zNfK0wX%ZlIR>6!sIvO)~UO&`QqrNJX78_e7mv3RWGbu9*s+tX~g^ad(x7UR=3&kGA
zm{+va?mq*l?u}8hD@Dae^&*kJA6UO9l<<CRb(#9|VL)$@q13&Xr`*^*EsYXs_d2~<
z|AmJ(F&Up+@tB&LtM~nBNZ0Z4mu7edH=~0@?(e>5=bCvgpYX!-kC(TI;q%z9qpDeA
z87A5bTT9?BOcgDGOZIehAkAL&;r;ssdDY;R(A*$!vqW7)ullg^Fi`Bzp}`xLS`Gd?
zCYd=?H9z#l-ZkvJS^(GsHUb;%)~yI6x9c|cWxl;TQtG4jz6#R9m%e5hw%M9h<kgLi
z1N5q=?#Z}b+6dVvEA3l%2{$QE>k6`epNEbLZ3u~z9#Xg@X+LMMyN-o{je}7T$>o1#
zNd9W{kh!YMIWo^48Od5Ugtt)BH+41Kgu)&9JY#oxC+OTDu4m3`roaC?b}~?ie*O9d
zam1w5rAwE`is~Byfw&U3Rr&Qt>JNMdHIR0<o~jw~arxwRG;?HL9$(ye`hkd--XyrH
zs#xf67E_Z>c4do(a8(H_Buz5gZ+j_9Jcp>oyF2~%pPHf}bzMNIXnXO7i?@qBBD<Bu
zYyWe7gaJ2JfPp$oxG)<5%EhwDi7(FoJmq%4!xV*5a(fs>?T6@ZU+DOmd@K!r=1}-{
zH~H26-d<WrZ+D`buJ*i$W+<Aiyl7pxk;}slaZ&G}Sxw!qX~*!c%oq}}i{q6ln}I{<
zy?{<!SCS-0RXND5hk1xzzKn1MaTC{8WSzkfGbC_+l=n>ztxw-#*O)y{6Ys+>jaNBM
zIKxdKJs^E1>S=jLli-vl+nLg@a=z45Duvl>rAPng+Da!iR++<Ij{MsUmUtSCL9;*%
z4BQvqadX?VD)uuDo;W<p6b_^$Je17LcAzWl<8yu(zQ{p{ZCD~MVV+yJJxaF(+_EWU
z`j-;lu|J)j#*brQV2YxM@%<Wtf(rHn5<HUR+G(a1ALu>@wRv=8r`}Ii?49KM5x-QZ
zQBVJb%J}!8%^vsD9v&aB?$V{MP#Ps$IhP}V64u38wXTCq<BNfGU<_$dglBq!BZ4dq
zZ>jmmr>^G?&z|k}upSnbUxi|a@YcFFMso6FU*E>!i-VG{?ir!@U4vhc6SLD#*$9~9
z#T|9(J$lB*9zLbp-EHSOKcl!Hny$Tp23S!94vV3RnpzT%=UpPFJ`rBZ@TCLo9EFLZ
z60F$EB40Jo_|NZCQun$SZjD97gxyi~ze-<T<K)g<l{`>m9?Bh=j3&*ta<AyBla7w?
z>YyOa6rN-d`nBiiWW?5MGOvBM1-uMThmZUF?=9o<o{k$mlrwH?|0XUbT2Wa^&gYO>
zvfFm+Fe*<8P7RaCeL!0^YJaS$8Sm|Vwyjm`0$pv7q%3<-H(&huEtt#Z^i?2*+pjcf
z0%jVSIJ}!bF2HO-p#w=I$;!$KTQxMebL5jYXJ3jDJnG6g700Exb^W;HHVx=E9*(k?
zRTq>yfumq0Li65D1-Yb@6fT3Gt=qxzY_7>tS$j8w^W?<E#qI5Z9CzMB6u|c3!^ei9
zG+R4c%Qqo!ias%+pxU<SI<HGBs)a*?H@xWvhkw78OqY55^g<OuhDR#Wj_>p$y=KBw
zOj5E$JX_q@_|DaSC+o7^m)CH~pS+KcnVcM~F=_|4ek_P$(cO9Hxl<iZ-}vii@Wh0g
zys;_&?qVd-ns`@N7g1MMKofLrLy34)bB0hh%0ia59g-a#Y^GH1o}NPk%3>ZMACHfX
zO<#+Qi+jQvIJnZ*whRi1Od|kA9Hb7WX$>19!43$Z79W!TD3iU^rMS{9mz~Gl@Jm^?
z@Xy%|{+)(Dy9@0!G;+PY9l>E?dwX>Qc4-Q<>R<H32Fy>_H^`uJ=6O%5i=LOa74ODd
z%)W+K{LBAVQGT!@SR9^jcboLn(K!;n5Ha_zv}Sg8dvt`S;Pw5n1?Bl;v<rta#VjtG
zYi>av>ZhwW_vtiT)|fvrSdmhf7A=o-keE`n1q7nc(w2zyp+!AYI)TkCjq;^DUrkKs
z#`>LZviDM1bY+UG*6aPvmz{F!Jq|33ctKJe%1#h1+fI!ZIuTbIE=kcZ?z#b4eAF$T
z`G>S^<#Fm#cN|Y_`mDF-5$h-tq~trCq+EXec*dQr*I-CJHT5k7%v#z8Q`L2KRplg|
za!wy<X=-x2SeHvsEn~Kcg)1rTO>G`Gm}(knYbT2Qd{*uL+<-C(CyazES*!O|02YwL
zKk}=nXmswm-TA9$tXi&=sv|7=lpJ@u{g^2+(>3olDc<1laOV27tD~)4@5{582Y0zE
z(}I^AS9*B7*PXyzCE86vkrq!)x0u)K_-5$f%bR0c=w$1^u3obJaelBtmp9#DGqr2f
zZVG782OW4yG*mJg;Mfp1lq2vP36>%sDmF$3OzhADL%sz+l3(ObcAuO+DUyvb8JlaQ
zVP|*iYiL<pdk9u(jiv{R^a7rT_o=_L|2kMss&(1gX%I|Pa65`$(kwjuk%s--K|nz7
z6c2i|zfVqi4;F=)>yMFNR#{I@L?u$vC{P*w=9e&rC1D*eudl((^+L?V`eK;ne&~er
zUn={eo~fy+Ir|P?M^65UD+tD%KU7(=A&YyrOr~-WC6d5cnBz`~7tyG$zOwg#Ut4>D
z_Lk+E*Mm8)kwM$B4<hoRbFQ>(PH!u&I!WA9Q&*E`mbNk>AbF;QY5iEkSI4wWaiYeg
z>uyn9UHW~2xzhVda*aMM=-h>h`6E6J4Njj_wT&$}Klrfg+}rd{`52ibo8uU=q^iaV
z8T(vAeFX;x`{eNWuki(WK$(q>9uCWkZu(<@tvcN^6_segd)LFS7Z=qW=uuxCDpvtQ
z7|6<J3`pL77;`5U*&qI9K>vyJUetuO;_z57Z|iR4!`NtGB3<h@-JC92Xi(XR<5$u2
zVtj1rrLApflp&O7-OPr8h7fyLq7I;8lAAY&Cnvq?*;8Ip-g`p(r6eu3!F6aTeA0FQ
zn>xkgN3pQLZ%Ncw?<<wknP+$JHl3eoKP5|f5kAn{RjaC@(!r+__Y=~Rl`B`TLeZFo
z<%&$=&D(d0r^kmABc~1ox_^Cszq`=ZaB%orDw_HpfK=Sis~<iNOR`k?^aU4v!*Ypz
z+B?o7Z{ORy?r2+JaJHzD`Dk}HJLP`K>dVlh(cxi9US3lg`3%3`3-S$*<HUa79y4hA
zjEa}Dva@yzamLK`Tb<BD5yblCU`Zf?@b+}jnnaF1D7%}KwGrY*(f7nI?plgjIeJoy
zITz=!f8douOpH?9*oNJZ<{WYzaRD_Zjqf@I%Z97(Qw7Ire|+&+lJc(4s%AgaMY`PZ
zwX?3XR~_xw&&A6K{!c9+jy_W35~}7OSEfkrj*Li8|M}tP&+O${3bpY;j|{%j@bF><
z+K|w<WCHwwRz^ZW*TEHq?@GT=8aUrCuMTAVKa`zyR8?!&_CW-cR76rh5mZ1z+D)gl
zlypi<w={@|5~5PlB_JRm-5??$z3B$&?(T2GIp=ww_xZ;A#s1@*F@(WhYwxx0b<a7k
z>vvI75;VBx6H^geQwfHGu=ZW(Jp~lm7JM8msi#lzv9axo1;s>sR~$ad(LvfmbABa?
zmshG{#;QEqNn&PxVV(lzty`276bwXeEHJh|lz)+-SWHMflROuk1g)aF{*LrHM4N2Y
zHlYbK4SOND=bb()sJq0GCt4`{Af~zBfpY~12M^C!UF9JW8w>kG9rj31W8?To&gS!^
zL`1+j{gv7w%A{JD)vNqfai>S`F*UD)lawMX#*_6qPYb41fLXkAkj9vr8qv-bf3_O>
z@w$GPgX*)Xj5{cQP%fEzUuU8<l51WboNJF4<3i#^wN~jScUW2$?4VN65XtRr(OWP5
zexY(0@H*qpX;6%o`qYD3Yi<La<y3o;=0ukOdkdGeN2bN<M77&#fHIyCxnhYqxr;ds
z6R-r2Lo;FFpP%y#LPJ9f?DL<-|6VSZXpAIzO?}<q@zwt5Y}0*^v$Zk4uW0!r`s7J>
zN5yJ+OTHsliLatrm5@mm$cAIX!U#!7*deGVIy(A2rM+S3MjxBb{Ob>Lmt5TA1s|}J
z;K<Y@m7+Rp!p;bX&aRBtR^xf3@YAQv5J{)$v`kdqY=z``X)HNeXeJ%Wl(IDAKvDHQ
z@lSP;IVlMlJk8Pt%Q7+^^W4upQvN9MW$hTdcL|qzsnY@<QieqRBN5q7y;ul$qf)%Y
z{%;zti`y<aA>11GQajiaJ53qr>2IXV;bGy4qTu>MXCTGD97feWh3r<|q;xPR2r`sN
za7*PX-}`LLZ~pFX(Y;V_qx&vRBzt8Q4cCL9{7PJ4@&0LK;;80WBuUnk;)_n)W#Zh)
z9Qr=9;2Y!s6&$WsFzb{i_G(a)tu8HT>ROl4^)?O<PgJ(a28SI)L`2xhW|A(YoZ&=p
z_R9_bYLxpdub~Lxab`JqEmM{Q-ygY-lqM%%(xeD*&dSPsa4nsfc1R}V_}E(eY#o1H
zHA7k4Hz^~}cCm-<694WRY(wfkeSB1=>Cf~-$uRaa_sU|gCgU?DB_$X4(-m~&j-AU(
z(NfEvj*f9tR(efMm?_!9ldvGdm$aF^{u1hYt~XdY2U{CA@S+7mqcskGqT9a~MxAMA
zrw^5a6$6a0t~zP{{xeP`^Yf3k^Kagx`89KskeHCr(ZQ640AH%g+<eBJUx1f4EN>)K
zwF44r3u0zOz$LZ%cEP0%g9pd^I`%>VgTuY5CJVbN-C5V{9F6R#X~vj8v<xam{*P8i
z9VM2MIaqB%X?;~<uj?FP;>M(2zo$;4+Fm?9|9Mip&ZH=-s_{2()v-Hc$9REwC5}-(
zA3J6|mzNN<!&kL=91$KiHdj(hT&r|a9-W)s@83^AI7&Svs&8mO#6}WnDk~Slwiy}|
z8DW_lkEWEAx;eeJaI-r%-ZU9PH`r}&86q6N`}K(V`4ze!p$sXSsxLo>QKGtf)An1%
z&8DkLSXi4L9`0$fF*@>k>T)6mz8a&C7--MQd*1qA1JYMHUggX>mOlx=(}um>ci4)2
zRMS$?5WYISP0BV;%|#KlT^ZXKp;DemNk&E=*&>^!8B8-jPwg@*qah*Z^j?|1%z9-A
z!d`;5Q|MD!VbI+;)#<ng(LDtZ50l9Wo*OhOoDTPle2R;k`!4M07%bIW?AqH^=O40#
ze$0^-p_BU!7?LpLiQ!r+tZ7)E#D3b@5h8FPrIX7-CQI5Vm#yK_pMsyu{NMo|Ha;%S
zdTw@Bt{6<e<X~<^k_Ym;V(U6zOyEcMzkK%v?><F@^9tdBq4E3X7*XCnQ{y1xt-%JB
zoa2Ig@~66w<%f}5<s|b#)W$jJ>{&U*9dV@QG?oI30jbiFV{e@oMgog?d#lRJhty|U
zBAGBQU*<n)EpS*&RmsA?#jVG#(Y5G{iO&R)fD=zBlS1=A0x6%rY_r=s)kwrBH~L-w
zF3cmQ4}p0N?H~1X&4^k+{LH2tqpXya^m$$xEE7jRm%_ut_#?x@1`;q4qK?42FmC-U
zv;({4{DNH8zWX=QsQ82j5$Bz-I(dq$>R;v(tmxcXHXqZ!8dW&`kp1|G;)6^S!V%K2
z2(NWNYTdOQF2D8CA-&TfmdAM)HeL()dly<OFzY$^@pG)?6c$!IFoGwt6ZICi!GbQg
zJ%}`Nt9Q}J`0Wo1#eMG%-_hSlcG+g@mfSLF7@BAx*0rkgT8Zx0@rZx_sfB^Q=G6E}
zZlI-=SrJvQX(1)$q^p>(iunTn>d*Rzlp)%MHmgCTO3;tg@$6i+#^*i{Mb*l?JWqf7
z_SZaxiPeYnMr>?~ul+*8Te3zILattY_cc31?+rO+3wHP+z92Rp;&zr2*XTT&t0@<W
zzNMQ#|FBHou0h{7b^F;b0~B#XxQ`ze4!?!DIZ!2i7G^N$&6i9H0?9i9M5%oQ6IDu_
zGoJdzX+A9&Re63AIU|`$uoPO`R?@d>`d){4Mg_gOx_4!Tm^qgC9UqQsRnrJvcABiq
zUfW*v-X`=q0L-`XFNu=dEYle)9^U2Fs-Qic+MI!9;W)~M3Ry$#OqYUyK@Gmn=}1GI
zP2<<QTMVQpV%5|!{nMr{C6vtioH1G+w_iKn<4<V(&YMzOtL>_o5tc7qrDLKyKQois
z`C<nVSC?vQ{fe~tjiv<s1|EA9x@9(FE5(h#`g@@tm)@r2B0t(Z@lWfYe@sJPo`Fa}
zwTWTyKveMX_CV`z;Lw|Lq?)_3@?@l~@m8|O4GlpwZ;_IXewR`mWU^?fSpV$(-RFm-
z+2~JigWoc{b)`JiC9YH5k=c2pHMo5P`2A6}DFsd%!Pw^`?z>ITbh@8uB1hCaj*gl1
z^B966?uT(#uSsP)t@9e1P`s~2ruV*xs!mgJW<fdm4dNds#`mp%Ykv;ht<E=9D=$jY
zQCM6}*(pF`F<NFy6#bDjzQ;9KD&6?-2BU89Dc3g;g7z*BA3Q+xP_Q$jsX+g+bnQI;
z6!@n1i$j|A_23rv&iTKqVgOGPbi~T~erJerbKdrJWDr>Yf6vgxKLl+%q&#b|jN`_a
zoqvUfQqDT>2yF}W<~w()nc9;(9gq((_SW{v6_pW1?O*qZnnd02bU!imA>=a;cEwl*
zDl#BUY3a<wA$c%$xR#O>w_$TL;M=!{Wm@lB&a-||Sjs=QEh9ZWgUr|6g-J+qwn_PV
zz)SP~b3B&?JafI#2x+-E`YJeDB)A_uCy@%cNx}HMT7vqT0uH0zL5Xdl31<wh@m;YF
z3XHfu?n;q^QxUVxYL6rBtiYZN5t2Avl?vn5mO>HEl>eACUzG#d2tF2C-SYV;6=u7C
z27X@&v&K(txbps@uc?P5b)aySjnUQnkXclpNae|;qIkGGGdHfGTMOfvH~*U7>%CPh
z>2v#ieEjN_i%0*nKZ56DoG^a!4PGbjPTYS@cz+;M&8*Xi(O4EsyV46P>R7J)yJi77
z2`Y$!DFmnpZvVTAfQ0ixH|0b0KS~vB{6XzNSpMhyBfNNdPqbg06I5OQ{1b#G{`D7-
zH<IM{`?<yom=6Gn2m3a?zkkKm_u_n9_j)4}2#K_&-aMl}r?0{bS)+Ep%48t2f(OSJ
z<>G9%<uWW39!wW^PDj~ybw$igYpLfu^ip}AEzL&E;*wLwMRV7gvQr{T=R{`}GVgwr
zp!D31k_^44svLHc_@+!O$=<G}S2Ag2Zt2|K*^zYSH6qG`s<pG}GtWKq)O-#mCjFVr
zBWmgtAOeBgHgq;k-0RGn>TG(4naiWlZl;RA+Ou%LfYjfViC(v6qVwvFNsVyE3MZ@f
zYS#m|+|$CsFQy$O!=^9v^w#mcj<cM{52THZ!0~_ns{4Gd;V7YeXzEmO3j_7={4??%
z+fbuCyVuag?Eiq;PR7)9|31};bcV9k!2bNe{05cR{_2=@NjFPsld^x;+}pR05<HKs
zo8JPC@ou<_9h<AGt6j_V7LY8)9=2d$`tu)+>;YbX%;l(~Fd2f)YV*aHdIs%@+$-FM
zi_8ZJ5lY*w#8=|IHZU(Gt&g91Zv8x9>+qZl_x4Uau8dWu+bT6`mxxa7HT}SUam+z_
z7F6N?XiMftovV-dhS&FWU83^}sad>sp?l=(Lohv9Kzuwm?ge3ONve~DUq~hC{QO*$
z(qzuIL(isXbyA!2@<Ly|5{YGuHHP7LvxI;|9gnm7R)Ov@2!NTn=<c4#+bVdftJ_L7
zAHV&br_&s<zW%%9Y~x9|l)9ppnuf*~<zm49%*MNMi3h*Ssnn6n;`cfw{OeOi5kb2U
zu*{DZXX`3nYsHOWbpHN`g5rf#0;zNY3CQ@?XH-2c7>(5;=ze$1V9hvkj6Ae+vBXDp
zP*eL=YMbZfvE^aqL~!jIybDWTj=+4ncz05_nHcr;UJG-jK|~T0eQQbrY>sJZ(b<e!
z7v-~3k{dj?YX$z17m{75cLdkS$QI*v%z-av!A^E|I=j{)6=>-f#vdbdPgnPBXy^sm
z4iIIUgT;N-mTRXrWbdVjQqN$;M3Zf8*^j#{J>3n&#lcyuK4)aZ9vZuUX@?!M>Qj`9
zyM7$lrz>_xK=Q4Mip99<h0G2L6Q=ERHYAGkFFh8*n={Oso+ZD84<}m$q~zjdQEgq+
zn*zf3<i&6CG2Nqc;Z%*<G|f|sb?Uc+3)*E%sq80w;h#Uh+t^T2kC2s&+Jn0wY{{&=
zqIqfNh2zoap2f9yqM?%no<|j2cT*Y^UHWFQg@o=D%su3FCOWacxS&yR?wI~{2#Ztr
z;~uj-%x7zBXK-%VSaxty8S9}TXFH?BI!7yOr(*;1Ucl00qRYwr_WL)t!yexfF{4ho
z*LZtW!K}Q#q~t^&qb~2^egSJ#`uPm}z&@pO-bRc}wy|d1V=J$*CN#P@=+&Aw50|R?
zu#pmdT#TF1P~o(6WIO9$$HHQ`eIjz(g*U#*@Hs|IK^qBm45r9=SKA=v=cu}JvoXdG
z$K?;67|j1tQkOioo)faS-cc_I%qn=sx~Gz`qW^7aNc-!QMQb+Jw@}3PD!lcD?3wMm
zDD|V0o`u3)KgEooE^O!JsegI_6E_*w;yC#ZLeBOOs=w#9C?H2AUT0;+Qj4maFXgL7
zO0P|vynVdup%^TGV_v7V=ev>Z|F_*p)JiI=xoTN=Y)S3NLIRKDlJ8Oq`tFS_<QOlC
z_nm*V%SrM*k&KB32KQxSx!)0GD$+6Q@b(YAaCspQvEY?1ffkN-_PIpF#Nwi&ZLyDs
zJ;!2WvuJ7MTGS&Tt$hayE*RaXfXJkK{_@WHgooByi1T<A6T{N;XT6SA5w=s$;ZGwM
znBr=6%IqYQzRopg&^&%z-_eoK{*r;d*;Kl9U;`zHRjZ@`2j{l?Y>HIme3Zz7{hqK1
zZtU=oa*(+xvo$#$eu!4tVKtpnTFpVp__-3N4wFnmh?x5&hWGW1j!UKi&Nm3sbgJEf
zxvW1__yvA3j@PA?ljH6b%O00<N?vSq^Gwl`5Xx)seqj@R0rsJI>Wh`KN}i7r?6%K&
z{eEjVgYP~4o?J&qORAV`ED7lTMnwE~?H)U7jTjD9Q1MqLu$l&xnVV;sDUo^$5fJf5
z_@JhDzYu+nZ~VY!<kC=T)^jwQm2V|PNIpxU$hPjKLSgAFHD^u17#_>_DT;HYoWI{|
zvO6Dbm$T<`?o|$GV%vVVDHt89XzetrvPi%A*zAu*F^800Hv0CpnoNxk3Bx@-Ar+$m
zn_a$`)nEnsEPC#DymU!;`H6ajV;Op(BXR4l{6wGPN+S<N*ke=FHYZ)>xv5f0e9BlZ
z#aW{Nu3H<m^0H%1#cbCU+;b|4ud91FTyx?nGr8IJnu!7rk4|L%H9CrT>`=52kM?2#
ziU##ZWXGXvnRvJDLf7M{)^5*Csno)n9CH>DW%_V6izdI`MJKXV`1r~yt&aBx^7B72
ztz;&rH1;d25)sXIuBS>9Lp3SX#NAI6Q~UwrD}R;gU0{Ha0<P!n*<gsV$XB7-uM4lH
zW=-BRagS&yQ#sT=>H&H%GH`*4gX7uua{!R+n_Gm1WHND=7ki5n-$K(f#YCR37IzgB
z(2;<ml`=Bd80uPF1hMy$HW~4K8X7ys0^lM-c)({K@pqi5Tvx9ubtDKF=$>~e)YN{c
zAtDK{_`Ndk&o7(p2%70BdHDFT*uBu+9^^fpl5n&i^FF?1KK>o&{FNW1+cl`#fBul7
zh|^GZJF~LlK}v?Jn;Wy%XCmTAJpoA?0(<6&l^BlvhcPiR6huT5phebgpBpdLAR*_`
zuMenL;IPud;mRm4XXQJQhuoMilA&wm=0Lf7eX&8iSaQ5QyG>9FmFc&3b{LqM`D`Z#
zdb8B?@@}l8!*zVxm1@6jw@;Hie7=G&K3FKO5gzF3nuMG>G~kC;I9qowf$@+KM8f7p
z(G03g6o|rp3r;byVEw<=v-AHZj&G}@tV~Vuc%4pqdqX#TdTL5UA@@W%Lz(`gn$9Jm
z1jj=m@H3lL6^d(08X46O<W0f1=;rF$(D-y><E5-@@W}bCBpZj&2GNz<5%M8f@SFdB
z2DUcZ+HEkNv7cj_-a2?ugkV^Db<#sCtzw4;JU%#78LG}D$1tI%F`RWOiq9NJ>*@@C
zzAiQE{-jLbyU-n_ksT2e7Vh|nj?Snz(@plClA|MSyvl!R%aFNhX}Lhe_0?ZbSbOrg
zv~xaj%M<LaGqXu2Bbp>ysHj50!C1~F3Uo1~DE)aJXLBX^dBs&C36}TFk8ESMoG960
zW#*_TMO0vR7cliXu=F{uF!k7S&Z?mINm97(tyLe4?df<1z-f{2kGalG5$n3;EO~Z}
z%;+}M`goT`Zj3Pu+>Fuw+Fkdu<lQ%E4r`T11y#z%EA-CMTb!SHPVCdIJZwac9LUXJ
zKW6@S{RQJ-kHI?_CJ(-J{L(*cRpadV0bj@u%a0O9wY3vEW7W^|Fku6d5~7l&K&J^*
zU&P_+0zdo;Oa6|>g>d(-qM*F#%YBk^3>_VvZ@o?zo!Ync1lHE$Fm`Q|#eEi@dM;-a
zwElbl(9kHy86$IWpb8rclKS~eUxbBnhkm~`9pVTh(lvnJe1p{|St9(9?Ux%S*}}yR
zUNGd+D`7g1zvq45Ow$D`-u(W$abEGt>!0s3ul%()dM8ScjZfvf4S%^jQQJ4c>oyF{
z;V+`h{q^2YA%^m3daw}=e-nxK%IU`WfqC0sh=>#K!`Vt1VZ+%XaaV4eUhv4avHSeM
zPNRSALRst`|F)h|!}9zC`S)K*_dvu@^xLN1!tn9_uZxc4o|YNe3P^l#{-a9xS5*UN
z%ERtWnT$j~7rXxT!g0P3&i$8=nWUW8(34W<l(+f=X|arWm3Z$LGizfMy=|d?$);IE
zB|TobxZ4&ak0tiA)kO$C*xuX-$9lck=Zb+MPI@lE)_!+D{Z5c(5*z(tg3;(IL$d`Z
zd8>Gw!ni)tEEw@u5%Z_`iYP&nzln$?E?cXD>)1%*6&!40hp#y0co;uu|4W7H4JUBx
z8kQIcXrAN03*0G+#tY9B%ca`Y&-%=~4OOYLlR3FjpRmg9>8pmqSL=~d+7*4=K{52(
zp}?^E@`V&cn(n9BjT6z<6a*t=tRylsGdBV1X;&6|@#&Gsf@G@LVER|lw$41o9dC@t
z$N#Qky(qLFc;Mk+r3jX#77Z2!zW%06pQ=tqSX77b-6fEu^DsUnG#d0F&}~k9hTuTs
z3I?0f&f+t!M%RP)8|cTM2R62cN}RpaT}a`JgiFEo`?o<}I}NKYx3XY28Psxvqp$8)
z0z#fj$V#X9KvTN1Qp;Er=Bp@iE-nX(hu>66D%=ADqW*ThC~S|+Eo}XG=sqy9abVV0
zl~JLnM7;HK!1Aw4;m2FC1-5beopaO6z1Su+K~?zBG*+DKwWI5In0VfhWgzRMX^f!H
zkkI!NrS4b5FNxHWEd_}$pTMQ{cXj#0=Q<L_)liuD7Rn!_<;XOL)*ALy9<T1l`}QW(
zG|!7Vd%i7Y<eF#%HYBn|$+phVPEFN~<mk*9k@ofXcXW3b<RvAEbgyZ*be6w*<r|2F
zeSS}PSBIKzK4rylVT-^F9Z<YMn^N;z)o?31w!L9fSVUxg97D{v_Rn@HJHj<qCpR}I
zXHk*g@x^m7u`<OB!;xuV81mAz$;#s35JVXH`d%`MSA^h|u~jEcYHQ|>urQhoQM>uy
zdGGOLBQrcbtEoSJXbzXUsrqwnOGM<A8YTR_F+G-TEmA!_kX2I!uy%D@YTK~f1(m+{
zbp~qcPdXrs)=zvAFZ`~+>UYGO%de&DgGSq5D7j?kX%btoZ%yiX`KdU6&9N0z)BEl}
zzm*@odc>uHoh_YVZX(WggkK?-^EI67wcq78Z!Y&Wkqf_CNPpFA#?HXwb=bpw*z|eO
z?49lC+zQy4^xC2;z~IPE7Mw1lqNZlEJ%7Dw?8kP@z`($MQ)plyR+}-To;_N`bJVt^
zK*NEH7&$VcrPRG+y8`@BEdUw6yK%qz^w8Yc6!Nr^L)Xg@$CI!z_^PIdBg=~Jz?{yD
zXd_uQAd36rJZza)S=iH4y8n_A#5%F!DI3%8Zm8z!*p?ov)6r49;6O*RMp=Mw3GDlw
zojLLk03OQYbUYCL?O}uLhV6#ZjT-_d`vw>oBCY%LJA30R6Z(9Xk7Az2@q4kKyw)5Q
z7ueWGTf~!<lyr&QR;M9g)GX(IO!x6kLC*B@kcT(Mr_l6lEvp48?>E8X-9Elgn6)Y=
zzp<i>ys4}lx!%1~AX|fpgyv)nxUg|!i@EDjexOK2@x^#j`>sZPD~W#u@*UUiVB?m1
zPoCH*7p99RaqNs0M)moj483WIrt_$djpOotm!7~7`LMOQDS@B%{ZG?qL&*fvdo<iX
zie~cmM(nMHJWoLtzR*8Cwc>GhxKp5LoPcoow7><Xx*CTC0%vyt+paHfFyKO9wFJ1-
z_BJ4#p#?u2X+7|LqK#|(c)R;4IIF<adagW#X|(b8lUc4BAf}woFncw@m5qb?ze#(F
z?2KH1m4t<Nb+FnarczFBtIKi2s3nqIHf<z!c~yEK--XS2d-6irLyd?}QmE3|+a0!!
zkrBsu6Q20P+n-7!y`LQKmW;KzYDYYW!D%I7oLr;}_(G-Ex5EyOjyz6sLvG>*Yv1GB
z7-&Eu^~$ua6A=6gmmjDy?(IrTGqyT_(XVQ*hDNSwsb^KW8-NsJPH_{<wxeE|EUk|~
zC?Ie-z-A)q=-69UVDeFDPv+N+%>f<PI%ef!^W~p2C?9Q9yhCavB;MKUm>+Q%k>AX@
zf~{=oxUi{X#rwsvlg#lRA6kTQyO0+4e0ljBWU7x$G3_TjT)bo)1UolU@ea4m*~E?R
z^alSoyPkwgcZfin4ju(t;;UiV&CFbu1XuP)V2a0XeR>S0w+JJU<t_-|`qusq?}+2F
zhAdIxr0?edt&C9Dxc2`3H5dYdLibC*8R=5n<v=245Ol7i;qyBzOx8DDz3L-`O69p;
z`%BXH#yy#Vt(DcIz8vhUSCeLBq6uppTOvS5^8&%1-Z4_TOm^#*UH>Oqo?`26Qv?V7
zRV=*tM|bHSaDN5u;Qgb;SAK!#JUE0I<RS@aYQ~h5^bh299__7}TUfjeAiF_KwYIhf
zQ)p-hEzRt(AML~PKGi_+*!`{MP#B$3Rb`c20s?xRRStu!#_PQ6KhUT=_a{K8bN^|)
z`^pf9<^g!`z(cUVm2ejOrsnKqEf=KE56&N&DX7|)z9jIS^`7kHdc{RX`q#AjGX00X
zh>%DBr$3cv;(scP^!^8hQKwLS)!xXHaNU<1^&r^3&&rnYa<d5rPH>1pGY$DaTpWVf
zogRusMKWtAe~8w!Q?z5HsCwz<2AL4XU($7JbZUPjMuWJhaZ0=Nv*YdvEm?L}XwC5?
zoBdqtBBfxr?b`o~(x@asEaSzIQ%CK_R0?BM{!a8;@vPCRIXzj&xXQ7iFq(%nMtwMk
z7>X#PRjh)#dU0AG-a3ER{ihdD!0hZyf+1AH`})JK{dRsZaLxmCKujx}R3YOSsZ37}
z{O=XfD4yAcg)*CopEns)y68NhN|$Q3h@e2~G(n+#j@v*vd1Gh7<SQo`Rp)(In7?KZ
z!5iUrRV||NKjlgq)=oG6Kh#Qjw<H-{waF-OyAKFvDnDNT_^qfwG+U*`(dUWRkm@(B
z1z=k2Ba=YXHgCNaTeelY2@^6*bPP%XCyTSwliE9XfZ(2Lhj<$)m0Em)s{12d!Rj-{
zY-^nKeMd-*O;Jb^{4=3%CiGNVKC2h32IDo>33BP#nct#WY^g(>r<`TyUW3nByUSz<
zlTou+Yjn(W9+}j<)IZ0pW~zxDM@d6NBY$$&AHSrS-d9AJ4mB6>SFR8UCf%a#%m}Ed
zB3+&*4+sLpo?9K!eiCw{egLDm&jvswaNAq;m{0OA{fR`%V{yd0Z#EsRR)k<wA1-E{
zovxk5vzg%GD&ff9oS&@KJ>86inVzDaY$!z4b4_I^rLTgYAAn2B%G}&F+TgDT+lDE@
z$sri+jTpQ(>WP`PN(B?t#KkdI<}GKkRI-PvJ$NWSd`VAd)-LbyR3HpAF)>NtbBky(
zEqB`;gyfgUA~lmB{TdR$3H{`tfgRqhSsdQ|gIL#HNcZ=rPXw;I4lZ@OPNr2<?(2|;
z@aSZWE)n#47^3d(yxPQH-VUmxN52-361hC?7rM>lI8Tz6ks;Yzwl+Hw8;f=X2m}W`
z!6y_B^>OVjKvl?i{hn(6bJC{kjQ*0*vZZE;-KZ5Z>5A^{KNzdJHSy1zSB8r_h1ww=
z+n7e3wfXgHI&7kc-1djtCJCOxs;m7un)k0=Ath0EubyeSeQm^43!I$RpO-$?y~%&S
zvzL1n7k8{+&Bpcc-PIcnx$2gWi4bnPld8IFi9WepYa>PGUXgxY1uplUJCbD`9am;r
z1_RzS{180bFTJWnFzJBs@bt{9Yew;?g$a{!qoWob)#BvT4ITG|o35QGY>J?9=W|}I
z#Qf&DUq>|<Ex^{t#GRa+{PjZ&qTh9MEdsIy@5jH~^dr_$14$KI2k+JoH2g7roD-mk
zLs=WVTTQ44_e?js&Tx~LK++8hgh*P#h$)uQSiyB{;j?@rB*>g`9J<Z7O!ArNr<3yZ
zx1-7D%~{!aG8gxh8Kj00(`3?HYF>G6{-ZhHY{L@W%ZjTfHlIlgkVnwCzNk#4bC8hN
zu6lLP)=z!#z;Oq6^H5xs=;iz$At}2x&5B)~4!#n@1%mR@-{JnRUqcA@%4k74^fU^;
zY{M1v{5f@85IQ=9Ad4wDNnSOUb?o&yIg*x^a@CfWbK;Ea?Co<}9EGsKj9TH&fdM_%
zD0twR9$f!;J!r-z0g~TKlYjnXYIzsOqL8Wx4Y6b$9p@DdtH@^zgaO!d9RM36+b)MI
zn27l1jG^wco_;`yC*|Z=JutZpUZ?FXSi;9Wk5(Fj$;(br!SMhWTrGoY&h+#&@`tt8
zktWtFXt$Vt#>1a4a6LQOYYd?}Yi7tjp1v=j4gx%{lYTE->6DhbuqW2T#cdHr!^lSs
z=LUj+GP<O5FcIW=gZVt;7=*2-gB_mYd28CvqmKLQ`dF{ZKF9BFo<C7QxCxFfO018N
zUcY75on{-Dd^^U|9Nhh26`VUg=<ot$o3ocv&C%%E>AJswyq1oV(pKjaD%+V{xPPUY
ztG3s?&W^_1)>6%J;GmKnJ9p5e2F!ex`m)_7-`zK5`x?Enf+XjCx&Ftw=1AMOc74z!
z0g4i|Nv@g$T<wXJQU5xeXz7HEOVI-OO0`0@5Mj*MFZonJLrqN(lfIZBTjg$Kiy5S;
z$G?|cW>7-P%>8ySh4c_@`42VbbM1$&(ruNM=2TwCwpLbn6x;H#vZ`uk{S7}7>2tr2
z7{$l3GnzH@fcj)_r0NyJ-sa+V*v?;?H><(?tkTkl%r&ONyL@bEPg4=uQqQtehl$d1
zRCIDpZERC@;`1YQUb;@bag#Ofev;sx@xt5y@;1O}EF%9RIyJ`eCtrY#;rtX6H}&0=
zQe+u4>L!hk__<8~08(V)joGIPKD!_ao?YM*K;9x1kLS0tjCardKzXY0;bb8_!NE*v
zmKw}-kl_Y)Mk5p5)Xvt{DX1V)s~&bIm<AUPhEdq??1S&_h4-*lovApg!`>5ZUxo_>
zT}vt>Lb{)HgFoJOj1`~1!!)08vSwmfTz!jP8sB#N(O4<*bjFkZ&W><tB0J)&G7<#M
z17tW8H;MFJQ`y;ft=PoO;!i>XLjv9QKR(%AJ^%t=tX%Me8?gpe*o_vPN}>|)(o0I5
z!F3BceZy^cXZ!kyTzASNh=><Sa9o=c4W2)zyOyr3eEXWRau{e;uU!+YK$FG~>RXeK
ztF)pIHI2yxe+Dil1_sg4Og~3&?~QwM&)?8DhdHl}$!;tG0fCmF36$7og1P;=MafU&
zJry~yQWi2%xME{tc>xatoiUpl?4fL>7cymRZDJ{5vR>=8n4_xObyTP8*(GC#9bTs*
zb;Qg%fLxe`kOn!@joCJ+DG>EVpHI6JPPd25b0H2w9-S-^c>uQ)dANy@QRj8PO=Iat
znKEo$DCmQPUfsJk&Q!xPvD_Q5x8iYHP8=s@^sms8U7KkXIDO<dOK8&lfVPv6tD7sB
zNV=0vTlfzi{e!kB%N4A5BAApTXe7{g-CG$ZzI96`{R9v<XDK+**wG93afh2N7YaP?
z;4nMLLNN=1KL>)g(uXwcVeNfwv*aGgXDT{#7^Y`Tf3QD=nqXYU=wb?zGq&Vntko;?
ztU_%4it@vr9jP*YZ1DJV)9%hjgcR*aus5f^{vBLgS*hOODIF+Vb5xX)q#St$ZT-dF
z_J7+7=qA7&%)7U2pzBeUQu+m)Og1^Xhu*WFjF`0IFZekT;?)4(&-1!+r=P-qX%><n
zy1Mf1=kR=M1yiK5c9yt6lQ%b~snJp2AorQmQUjcY+S-h9f{;7M8sX+yw+hr1tlQ9h
zmb>m`U;rj=%m-HB?h2P<&iI*c)bdR>ng27waq*iv-Pu7$&BDkhIl7EXj7US)cy8NQ
za_@j#iciJ=i*aSx+PPbu!Jw>`(`lhA)q!lVtLu2gz5~`rpZ3&@^^_3)M0Xc(%Pw@M
zyScb@E4xmKiHX6UymT(!%?#E{st3Tj$TK*~e3oSf4i$Adt-qYO3oA$rc?;V~(R<F5
zVA$M4{(#<Tp$j-H<l3KUrfe#_&9S-0+tvj%7kfqH4u0p|hvhy_zYSMUntaN#EsOaR
zeSiI2@YDhEv3i@7?nf4mUkSFM=UVf9T$3Q5su6TyQue2|?-@JTG1@p=s7Z*CkJWU>
zijK|u71yMsqr!zz3*~8&?cz9aztrTh+nkO(PU*Z&h*jnxWo<P_FJi0E*)`L$?=A#D
zJ#{m)y_*{Y?V}$aSJ4LDTtC<?AP*8x5=5#F50>!q@o`yvA4&aH<PRpGTewOnqgz^q
zM`=r_HHW>qr3$*bx`(|;or=-{JD&S{1r@-2199@uP??geFzF)$$ur!rOEvqGfuZ+g
zljC?+Ow4>nH24puZwxPoDGk4|q<E%eD5LHrAt4dzxH41}m~T9EW;I?N_k8}<t4j@b
zf38Ck6)P)iDWb5T7=0#;ADG+jK%oO`M4>%%p7~gOWMm_*%>++2Hq8BTKChCpcg=ki
zVv4*kC%vpVzpyYfH)qoFe)Rcc@veVUVtUZ7RAOOcfg2;j=gw`usp*+-v0s0$r_B;c
zMM3;iW<Pn)BHj_g!2v{>JgErkC814A<bp%GoMt(Ct}1&D=+IuF7hD&t`!FGu&?%xV
z?uzK&jl%f+F*yXy6db12@m$u`ANjj&B8mj)m~3a0MVw;<y2GE9SGz)L*Ad%#T3XuP
z*bzRLOnQd%xJL;`37=f;28`J%j9QEX-W|A8#@%94`~E#S`IYd*uU}?ibDq0{>0)Aj
zgiK0bqzjN{Up~ss`cY>#F<Lf#N`-NKK(=zRqAOFVi(T-yveXUh-EsPBS4_hi3u4#Z
zT$>dYjr;rhkmNlt9F@}Vf$Lkl^5w_kJN*2f(7F*gm^K)a1kNz>6RfY;*o<>Iz%w1`
zn&19h{FsGhesd;}o!3Adw95FYD_YWg^yxP{D;=0*sp#VR5Ip2mgQdAQxPowoKwW>K
zH~nH=y_18U-9)1|D5=BR;IW!xdpTu0iq#Z>lV~%jPNAZ0`AK|pUN5O+`!P7FAJe(4
zjqzbj1;4E+Dx&Qgy80%$I{sCCfk}rQzI%Gj@Gnz#g#)lO`w62`cqu*Bo=&N$+S#$o
z?%U)_P?TP^Qlhf9Zt&pX=yfoqB)v(>Vca?q({Z)1ABhy~?}4GCmi-!1{=PIT7bgcg
z21Z|>vi%hMh^ghTFTG}T>qhF7{en$>HQl$%;eMW<gG$s?SAu-7Zz?!S*(dL~+KT-!
z%}3y5;i<!&B!BhNBY%zT(oZGho-w-%?CaB^PrH_3-^574DQ|NOk5RiF5MOI#JC(AB
zjw*?_y?6D8G^CWk=0d}OaIftYD)@rkYK~`^&H827oN90be{O?>u<O(ViY73p!fsGX
zQgWf1Y0GBu4IYX(-Vsi8o=%m>A#V=}X=sJx;^GTB*0h3As7eN~{;$GVlZTASqSSeU
zNM_ujAB;EdH^3SmCEU3`I2RGPB)yu?dqT|&+ZJn%qD@%f2j06GDQ4t`I9pm$Or;g=
z<wUdSALmV_cf^(OZpl9^79ZgL>T~DUvhjgDjPInGjSUx$C>mf<1ZTR>@81uaBk8JA
zw-4q!?~c%rrH*`n?3Aw$G@WndtnclmQ)GI0J=2Eoup}wTwm&D%0r5m=<;GLq$8Ni^
zmczw%O48EO9dQM`s1XFy3*As|*~-e|#ywI*@mSGd>VMz#Mupv|xd(#MjSSUt*p!vE
z(r?H$pks;gi8YMa2nq39GG_ZRB(UfUzkJC((_V<cN?f=<v$nehgY5SZXSTPh4Qn?0
z5IkVO5S+uoWguH3aI}0ws%dL8hwtn-aC`9mPZZesmGzD960;>@N+f6}u`S3Nhc2D4
z_M1EQzG$Pd9=yz~o|nlNWV@ClqCuSf(I@61Y2jqh`jCL>z{6mcCaZ1bbD=NOEC_ua
z*Qy%XHMT~2dJ5T0+T}-XkzS7q3u`UnOx>2xwo32*zV~gw=AT}GQu<T!?Q-bngpl$W
zcN6RWo^b^EIy8j%!K+bg`UMp$j>~I{<EElwRBWs}sHG8^?}LMlw2(txphbCb%_ck3
z%-Im4@<7g!(Z8^Gi(-WMCUO1Kco_ypI>wDXe25&aETHYq@ga~2Xps~(yu6~+6{4{#
z9~>OqSI{Op^wICNA7I=&Iaz!I@KB1aMh^pZk6)3eZgoKqbsSbFUH1(!e0v2&8J=o^
z(~S`Er5V!bz?^zT_wl-i+Z$cXu7EoOK`WCg^+$=))<d`tPR}<+ku}GDdE&!`-CUaB
z)8n9{qdPIad+G25U|of!yYD)8<r9x{db?7kYmPTtpjyZ!97JL$vB>swmc9V86E6@U
zpe!*<7l4N-Qw&t+r`CpTC@fzFSWO#Tv9EN^C8hmKviwELp9vHH7I2bMB_1*{FeZ(*
zgJe0mF?e`nSkl>Cnn9a1HR}(6G!4spC0@0ggqpN}@tZcBlSuspjWtGQ<_-ygOhtOM
zOP5SbBrtg)T~gfZlZcSII{FE9gILJHSWCyE!{LVyw|#40F7_NS^=4+7D`yr1xtWsR
zJ(l@Tu6oh7tC6FD0ozpC&*V?Pel;;fq&GB(vPB&IWE3c{&w)CFZ!y<IU*XrXg<|A#
z?@g^xT11Hhcepu~wt_-?+@DU$!sO(ir>E)xB&9w>LmES3LmCJk!<FU$I))nCvnw;d
zSLDcK9EDK*EkDb}EPQd;T^@uAO`~Mhv%yaPdwLi>JNxV6IP>y)7A_2n><Kb5vQm3H
zL=nU#F1Q>$q0u~)Nh;WJbj|S_?#R1kd7+ga4%jYJU2#o6`ArqU<*A{Pl4nj~#>)0&
zMpjp~$MczjTXEh_L4NdzigdRe8MnN7nS{82*}(E?xj19M=bg}+r_2WHw~mBeNgKwV
zX0US&E!nYatVFcMhzN@$xa{&UR|B;CCIdWY<r4C>GP;&_Dx6m~xAwedqfFwxCd8x?
z@Tm|oUXDAib*rNl9`5c5?u!{~?sGh2Iyy&tD^n5TCbp<PKKKHgzmL(eb2X@LA{nqM
zQWY1vJ9ww4uKfrHhFK@N@=~}M=J;FA@BkHH<iMVCW@^f#!DUa1wq9%y`Zvla^9CWQ
zUt0OyW@UnlIN0MZ>u`H{Dr$|CAFZWhM>!OQlPZIHKI{k7p#A|drX|wqmV0xUtbOk}
zV0-uEex8<u?BHR-*|AA8QjEHj+`7{Cc;6OLw&LPQ_~LB8Q6SBHSecEVKc4AjF0@hd
z3i)y&AB})9qRT{s5WR6^;Zd*GPOqvNcE%|H8k|-~7F@0M3S)tQfq{<h^75s8fNYbU
zrY5=e+(5n&w%@3Oq<7!uWFRy6f&0hC#tKoDEh~2de!}WW<uZLeHUaI2yhsw8HnZp<
zFMDs^qI6|^Ji7C_9(=fhP|?tRA9-i!2t27%Pk9e$;_$4;i`$&2mxDmzu{tt%)Sp{3
z?1~?X8|Sk+R%8#`+BJ`}qj8tjio)0%QH`W6p`omIf7a=GtY9+NY+|ioS+AMNAWP=G
zckA%E6ryDsL&NwP2!j*ccOCZ{uPPQXSC1^N&Fu|kbtoyfO>I@58e>jXo4fdF7JGoI
zMYz-6V!1SJHX^QKPq%WqtCJNa$k=22QuLCJuX&v7Y%A&T;3)8a%4V~)%NK0?I9@)3
zk7Ss*t4T*o%iW`@G9%;Nc&e9-uMbnxQ2U+*V~CcS&o4XNJ1bd;sO*-7FCIttq;3!~
zYA8eCCxAibdKpx{>ABJn2DBQ7t`uvnR$cM?xhhTR7yNa(+azat7hy;0xBgp*xM+cg
z*N>otfI4o$=~U^<S%jH(>({yEwa=;Og}?eb-VA2DJl+X7WUk(iJxz9fTW^`kdBpTF
z9NY@onhR^0f<M;gOC9sS<VOVlqUH}7PbzaP`*`Z=bvl?%_}tFxgY?6_I5ncZjVE!4
z$lq;kNyJ<u5HuX={#rOsCwHo^Rhwtp%F_00Q4z=1{v#`%`!cbHe1Qd(bwS%Xarfq?
z4ZB<FM1=1L^t~cqV-yeoFHr))vrw1y3a7zR+q*Nri)Vk_!s3S8A4G;EIljg*P_Zi*
z$_zFxL3y6*brLw6n!ql_;~>?g>v>>wWcBD)vLNi^)_w8$uYA9EO6YEnk9NFb?Ij&*
ziYauaa0b13ODn5crxeInO*U^`t2wLA&1E)fB)qj&;Zl{PdU1`*L<v)Icu+w&TaKX(
zKFM({zUMm3chb|-yH%x`A_aB_3<xWf{9u2xHjroFz)@aa9xePLAc++8XKzjsk64uB
z{`AwSTb^SMt`9~2t(c$Nw|&*0qrO@?Bge?Ir#-k|Qgd2gJzG-YJox6Rt@aDGj#p;~
z?Zd^JtbzFRlL+)k2aCF!oa_(aT?9ZZ;V_|_+dU|UWYVn`WyZjew3l9LOmL_D{>PkM
z!=(3t^1*y4bN%zYCc|mO<e#s~mS<bTHQV2hmC`%x`S|T~v>6g3B@7SjU}cYIKpT0a
zdg$Qf{PJsH$kXpTsC>^4C+DY7qTR$}v)yp5{D1Mi{%-I6GAjm;I8sJo2y{OA`Ao2>
zwxb196PUY(%N?<u^NER^vO+Qe@Pn0Rz4l%e;gWXH@IE-_>sP&RRbB%cx9o{uE;vN;
z1nzFxAFk*9`XwrL%Sm%@sk+*8G|joKZ2l8#Jtjml6S}ZOh#O7>Y1geN<aA}WsG^@(
zZ`Ta(FY#){>_@ex5oyOHl#U;Dq!#_T`Z`EkwdRC9cPzk>Kf|p|E~~(OqM~hT=q^^p
zw^uwO26aDw5~M#Z;P(++_--tycTGE<*M1g!?G!8KX>xI0OZ*$gha-N2b{)&t_Se>^
zRJ5@c6diuF-J5`}T4r{v=XHF6W0tr+J4vRKINbu{;GTfph2j@b0nh6PdzB=IL>uRw
z7}M3qKQe&rmMHAx+}w_+&i0>Zo^WNG5>PxIDBpj%n3295S>~|NwaSou2>rN}Ez5VJ
z&(B%~HGZGB;-nJjhSH{PFtMlCg`BtD!O%*cjxuy=`s;KBDde|uH2{W^+FCOl+KvS5
zdzBp}e)Ty8I;_s_w8IlqH<amb0wK6Iv;W0NQh(eMB_G;0{<)&W`h<@ikQO}(hpl{%
z-eX)7-1}91hMUuI+3Is(`T|XXKOQ0$x_e{<1a{*dO8~xk5S9AY>2RAACP`XEv2k%#
zhE1QK^$7bF=*oO-XWUyG?-(J9latPpkdsTx@-H+A4hbna@v(aGB3Y^J%NN7)uM#e{
z_$Kv$S@HDrgp31aMh=cP6*=j|g6_|sKkx1qr=@8&-U!R>a@m9)1(dZfc{w?DK*=kf
zgKcIL@%y&#ssN##dO~0CYM&N+V5oxyiTo1BrHD1!Ppl{6sY+R$XK$WKN<xVN;sFva
z$FDr5I>y|IHD?arkjMcWYPN3mxCV@RnD(YUO<0{-ku`CC79I|5JcGkmorYvgCU3Om
z%zIUWVk}hCRunduzIoz@x~AnX>c|Z`?-@aasq(W4&I?YQw`c7Iw2U7wk&dBqP+%=M
zo~!y`mYhj&8lk9X#V52{s2O)(9;?!FxDOqhNG_h&1w1;0mrabc)2@6nS96$=itzWx
zjBDuDfPE5V3`1|^DDny(6~Cy-XMiMQV__kj9@a(N?k;!os&G5VzX{v>^nzw6`@rf`
zQb&6W0-519_t+g=L)IITrHR?jIOuqs9v?ts35aM=E1z0sJ<ZsI)-n*>9nVf8@KWep
z$4ac%EDI~q=5NqHla`k!vA;`hmrB7dy-*MtnJcW&f};sqny5!^frqIfjvCzPNE|iN
z;5RTM@6A$uWCgTUU|Gf{eFF?zi>&UpYmm~1gr~Xu0)#J==$u!E$`*4f{t<Jl{3Ey!
ztI<Mv8&t?{ljaVQG?=D(TgK8Mw*-zSLP~YGEtH~$jVxm_oSZ)`m8KsmK9H%S{y1MT
z?s13bh@Q5y7|WeMVF{-Bu$X}(X4KwLgP*Z>!tzfcBA|>y?iDKZGJ6KT+Bg%1cdgvN
zf^T#w>Fp&W{BzL|M>JkQHty>923OD91L5XGv2!bngE(JmhlWAP*;oHvktVg_v7`>p
z(4vz+08pW!ZF~Fv{p^-CpLu(AqucO@T0MH^+~3X3kdlmNon}|c)Yr@NZ9vo9Q2X10
z-v1zP{+sH2)8haY#oOTBy8@>84#UHrnrrUIlja?cqiazW$1U94*I4#g$K22>o)=&{
zx{|DMess*3ZKF3Xj%@y>JtJp7hGC!Xwc3-7Z)NISh!~;#Mzev%Qb7Hz<;vsn?adv7
zwsO2@chQi{S_^DsS~D{%b5{JbALJh_Mlx|*OtAL%Z$X;%Ex9U7KG9a^c>d6%HC^EC
z!4)VuxB&y}*TNtYf9HX&+GWz<GOh-c(ZPan3vI<qI7|VbV#t<8qm4{4Gjo!^sC9Ny
z&j!+5x?YdG6wy(B)-ccdsn+7ld|6#$H`xYNkwMtKwc)wvx{{^pSg`(}{O!#leS})5
zMr~$orH^tLIM`-Ka{GipaCpFVS`Q)c+U6~f!~7pWhDS1Ki+9>XvUrX*&nhoFCW(`{
zc%r-80}gSUbIBagPTLcgkmf_jmwc788Q)B}mlR&8&QkY;*WRLfE2Md$nWk-tT=5U=
zgD{y2XQ&_kdi@6_6|LiMO6v7qXIhlfuj6R{LM4`3h7D7fqkB&Tf?V%kuWhvR$^73h
zmXSQGh&mJ@&_(_8Vi~!hG`{*D%{>3Xc@zo0aHjpscO#nB3))4{T_uta2_dasfrx9K
zSnkMylPBjK*LCUQ-H|uK^XrF)BhP>M#_3vNj2^r_Mg)UwiZ-3U&tKS4S4CZ2xctvK
ziVh+?SB7L+&JVF2<ZK|lig)-r91}xEeK-01e&i`MPrShUz)$X=;wJiEs1Hz(ftk&U
z5se}k;C|pdM_Qn*+y>#6chb*){8S)Atmv9Fcddf*`O$+1I2|;XQAmnRi3NEs4N)NF
ze4KFq5?)@ukU3&!(o2(*&w#A6vor6%$vOi9?K-#4wPvMPF5E|@0h4b6HmT451ztZm
z&^po2cW38m(tp2xJn-fJi@bW~=lkKGUcki<FDR`42bk(S8kwFAI4F(uek>G{bzXC^
zBWpp>bFeY7R46aK|Bho$ZdZD>-DIWQ#Whal0l~Q1wU*M>5i|Q+;fO|!Gi#^Pa;pT&
zVHf1c)^lsdU$sBmoXpo)pG5BD$Eo~6==8U#x3<$eM2C;9qqv`^w;qBw;_b<Umi%Im
zv{BETVWtj6y;1Z6KIPIP<)aNbOe5o?@{-+UZKB=-?wm$n%z~}p?@XfUy#c?TAJKC;
zA6KpQ4Kl^dSV-Zw#+@!yyX53lZar^hqRbyf?dvU>@0$4Yf%UbV8j9Yp3~+*CTm}7F
z?V}6vI4|Y6AuFqhPs@`w-{caMAzUs2duO!y_Ly!<<cOw6-}2<5MR;qF=6wx|5Oe3G
z_XUqi=)cP?-VVS3J9B29!kA;t+zXV^?w4yfmjl|EdKUC6heeD1qj@Pi3|R;JxeDYM
z>|?c}YO>>Mwonf7A~>(1Zc~sBp>AJ8=%b>{^MI;VkFd6O<VT$e9()jgWYR$wi`jv~
zBAir5_xJY*|NH-8=+>{hT}jH#1-Xsk!w~31adD9cd-RE%{e|<AO3jxpgY68KSavq!
zU(3YB+mu@Dqa&fV!NSH)9f>k>;ic3BJT%~~cXv5w+uw>N*9R)Gv4!ZCed;wLK<`#i
zP|z&4F#fM2{9#nb?0pZ|i`=%<p%~E6r{kzTJ3WFPn9^+fyhAw<OD+GMSc)R3OA>)v
zC<}Uacs9kqoRo}eEvTwmX#zvK{cJ0gY(Q%tgT80xIlfUcbP}>g#l+B!`jivWKu~_V
z*&;haaQPByTX?)@VPW9~d6YXsK|x1u1~$upKLTzCBR#!xR_`uD90!A6!~&#4ow$mL
ziz66AVcQzrF$dI7Zce8QDrwgy-JgFu8Szm4vunb6Y8IR^JFe1|4B=96VqpmhHINM1
z5KRcAM%{7;v$e4*Wy{g>Bfs;ffuyOanvD$$*HNkM6pZ?Imio&E(cMv1ODzUBU%fhx
z<0<JjeLl%Pyl5H)2ba<V26BqR)}vL;mVAr7XF#lR2GaY{?n=@Nz`a9L3^W-3yu_m>
zMlTJGk9$F?IaHy=yY;XenMK&9X}tteDJK3Z^TUT<I>AH^IQ4t??r{nT<Ys2FGBE+?
zBffcRauU8$91P!+=K!fVpKNSQijn1HWWc91p=f;g7`hqI9|e$A=U3spBhWSg=_e8Q
zyDmqGK1k2B4k8$1Djrh(b1W#XqPDSRB^PpQoE8)WEv+BxbMptS@C0!`TCo}igtxKP
zkB*L~Gz7r5v`KNTs)i~p*$^uc`u^uBqR0D>K)?oU+HB1d2X#+y1%a-|A_aQuK0ZPt
ztiV|{f*?M*>3bUo?#<C<iG#&2KE=d9ipAdH{(e|k7?Lbl{I6uji$lt>iy(_>>yt0j
zq)=_vzXpc{QFHq+%{MLp?8V1VM*fbkg|9#RZtW^l7slN!sGu<MiB|e&T^+Q7V3=7t
z+q!%CQgtm8D<_E+j(vf75n1R$L*zbmLV|;3NBea&G!8*fAd|rF0Wm&XbIjZh^Lo$?
z22C;x{Q>4>$j1;7sjACx5OZ;FeVyM$5PG%W{6bTl=zQT;glpUZ+UVNamK}~{WQ2r*
zAk2UyCmUM!*l@?Fyy7=Z^z;G2aet<!>|rvsx<yYIfc$W6)$H}JK7ID^7@4%6KZSFS
z@EQ(rMEpn1*ALu_G~&#PY$lQc8*=`bW0AS)_p_$@fRbyZFO8m&@pLxpsfMPemhR7T
zNBmB)5$Cf5Rez<rpVT@>wallR>EqB@XJLwAc{FCq5*9)9_amR>HSUrBHG}~>+1BRf
zYPtD4ARWhTx5scnHpe-H19qnIEc!p8>ZZUz9-to-7^gxVrud#0w8o;MuPvhv4h~u(
z7}KYt#UX@tze_q7#Bk2KKSl8QDh-<y5eAVGG^nVkgyQFmechm{uIF*X(%G88*=dEp
zf1`7PS8uk9z{&JDRpnW6K?az11df^*tWrA+JCkYcXPFHDy85gH(dO^Gcq#Duy9rD(
zKmgbalT-1>b|NBE5bgkI{!+>C@P0Z`l?Q})<Tggy)yq>W1y-X7A3-(9kUTwh(Zujr
z|KkHnH~!Q88}8LGil=yNCy}A-r2F&ZU4KycZf&;Yet*ai*#e+>2yRBfF#%_gi0><%
zCn3vTr+!o~UrIp2Oi$s=)?B))i<@qxjZ@=pZmDP9y?WYjT8`Gr%G*0jGvn?%lHg+*
za>VcQ45eNU#^)8s^rFstsqwsPXURy{>m(ytXLXHgeJY{yw4~-ZSNP5z{uQlr2X9^|
z8Tn1k5(|1Jrax((WeX|c3~M_ZJ3J0H9eF__g|Q24#$DwNAqnfl<Hx+z&s%-*1+G(4
zib?O!E<FW@=U;ULi6c1Y>rhBNQMdbby%sFGD%MWBJ$npUS4Jx!5$v5PH6VNink+ca
zyD|&<yCAV+Weah8`O?9xQl@33#G1Lj8PH%vCeFH!+S;QquDTsAg^Q6QmkxSZ6mcvm
zHy*@Lk%sJM>tmP_olFMeb5JZkp>!)w5jj~|&91FYf@Ysvx*QOnPTM}EX2rXm_Ku%+
zbUXmaVf5_I2MKWbNnYK=T&t<F+wp+kJv!T~(9L@Y$=)$DdG0=c4v2NKa&p|~;siPX
z1zgclb0}ba9JV{f?zkI^4tPP%yN~@Q7nZXk-%~zjF<QjYn3_w_IK*%{emD2RJd4ZY
zbYjFMaIMUFN?`1m@4`I*+3R%@R;X=Bze}YLmk)#5%i9x=hxk35F!;bd`s3}!HXAb(
zj~oa@Lt~>ee5Gcp+-|$CT3b`f9;>r+oXq>w2SzHQ#Bnobq?VZ-73Y3kZ;_=^pd2-N
zjEfrpKG1GKY3Z%p)1^J3+B*#~_(#D(w{8#-ZJd9*wTZbIIk9Zc`dY_fo2=6Ivq9S;
z^<oELkfNj8x=Y=th~ZI{9CT?OtY_@ujdM|L_rj&hJcc9xem3LK-W9mmj`H*mbwL0Z
zyQKyz?e8aeYbl@ho0R5@EDlE5TgR4_g9)a=)@!AfZM8O5U|)6IVDNfrY3W-CHXh_u
z=C`%vFH@ZzGjU0^;9R*feaSSntIH_jZ*Q?eq><I&@j(M7<=F|<7%U<~TPwTCKY7o$
zmU@>r{>5c}!1_0r`P7N*40ZdhW0%_-kFs+I|KFyeV#_1eqs5uc{7?7ej{y?=Qd?VA
z(slyO-kA8y#kqY011xk*KIF65m!E(9{M_^i3wlx`-XS4W^$?UBTnt%LxUN;FjRNif
z&mF`<L-YMSMo2V$vRYDugBz$;Zn0xOesap}b?TAB^#YE~`?}!d&ELdQ(KmPAB)Pu6
zyR*G{m2y}^*9V8}F#5mQ+e4s~Y=@MM+yOSVMPerGpmiL(Ju&;v%EHSUcxWv7TIDZQ
zm~yo}_7G%g+b(0rVuaTqG<b)cQoUkTh`zO><=uNqfxC2mjZ?X5wtKm{XJ`o>CAvQc
z=1HRIKT51s&v}A7TvOE`#-S=%E321Dv--`aCFJ+@v%T&!ysKC3i)q<&0iG>E15Pf1
zvl(lXwrEXNO>Gqo8bU0Wxc)0}GA!;_MF~FkRFnxlGVC@<wo=N7j-eUz!TBMmfAsYh
z2F5vn1C4P0rOQD89}QDq{|f|gEUI)GaqOS}FV5ZqD(Y}u;{^j12?I$1mF`YyBqXJ~
zq;sTUU;sr*N<_LrKw7#>6r{TwB!-Tm28OvGy7xZ&>~+pv=U$e}rL*)uGynMFeV^y|
zG!5ucKb)N`vS;qb)_MDp?&BRA!7Rf(+i}uC;_`xjxAVwntm?&mh2WCl<opvl(br<k
zmDKCiJbT&WZWt0q>b1U5?Q?l4iaLYbxF#+siK3%KCozJl0(N+mOU5gL1dj?}p?V+e
zH-|}Qp&mFnmjOGt=;4+;F!)h6oKy`Oe^VT?61+t1%u~QFCSwYAvIcvWW$3ru#;zep
z@=TRQ4~Hl(5&e|t^?-*7aD0)Ak+w*YtZ}&2wk~es95@v%x1SQoSCW(We3St=<}}gk
z7z@9|^f5d@vtr(385heq{`T$LHg@VY&qL)Vd%_6*K|;2JeavB+r7i^^lxv$<QrqA9
z(i>l>%B3avh>=vtji2Rx+4|UY*)?^H2dhdb+`dHusy`c}1rADO@+ssu2Ue5H|00nK
zH_hlaUmG;Geb}x_HMA8Z-mG&Y+TbU1F1WV&1+VekecpT5i%s+=LX;wsElPH3x?Ut{
zyt});NYR|v9cdtZ`P=<W=(2;dktwFD&ZXBxnK4==c!s9dO_uq1z=p+<%iwe$f!Ju0
z2F^O^|NkCAFC(EDyhq>`p)F4@sth1GkjTtT%0C3Q*x!HTBHrE-HoByyo)5gBR{&>^
zf3jRY-!XWDA*Mw@qc^<f7Kau~%H!;n;Nol}l<G%)7CAZj9z;%&mS!=VG*#eWRWM$T
z-PRj7C%&4PSQp>X=3x7aBOz>d7+`y(r15p$;KR$!ZM^E4;9QHK6f(tKzs7S7TtSQ$
zSxdKaZ~9C`0wiW?`-kW0l`U!@W<qjkXv59l0VFg%;?%!x^)Fl1yfJV7{wut|knoTw
zIpMnB@1HBh+%cD!hmQq~>m>HZ``=JVRL;Gv`Yh(hj~^gShlAbDfZvx?>;Bc7fl28R
zSPKEyl|IGeVqAQkz@tZ=obI#|&os#td+Sn>(40yu9Kq<xA7NLaum*B{M2y6Nxmwm0
z;l0m9jadDP$2pG#d9}@UJPp0xV$PT<Yfq!~bQ5v0;z);%AKuAc9ou05Sv9a)u_t@S
z$Aj<+P<)k$;^*bf`IbIl#m!D-Fjx5p5Ci>px7N;GHBMxxw-j$lC)|#i4YW=#?Oy?$
zn^L5FR#pf62nqbgtSdk(qpAKG>@eCDDO_rnpISTEyf*$gaP#ux0`S;s>uHs^qjdsQ
zq83Bc=-jQi0hQDx4fMk{mzP;ew7!nEr8C+1-G4$QJUe#t7MCjU-4T}p!3*4VXNCj|
z`kUrcnG)2@ko3Vl)<;}!i^!Y<-66O?z|7pkc=<wH-L%^4!g}>*>m_#4&MSlE58qmh
z@dww;d1eni<S8p9LR81q`mbkUZhn(7Wn9^3@u%I)wMU&gsrMLQHuia4|1XqshaG&_
z^N`PokDHs*pYG{X6J!_($lC?X+NrpX4&~ICPpX=_iK#x^>`$K1n7e__fYKGU$&Z;m
zkT&63U7Q+4iUrOIN2t=?W}T9$r*&SQ<NiLuiy;oWe<LL;-+KBV=Buda|J{7m_9KMj
zq{M*bK?t#Ju31M!nqVrtT_C+A@+4YWC_YY0+hF*}>(RZ1lRf{<3lyqm@ZGzm?dK;O
zE*?#SIMn~>(*Q^o`Al)zIly}OMKS*;B>5jME8!m1!Bo<Ku@SFf3tggX>pOjqcn5SI
zW_NFN31-Aa^7vI%yesCbg9Yzx?-)E9XCmRFkeJw2XVg%z+e#?6#BnQ9p;by8$x(G|
z1O2)*A7tJncRWia*hUx!-{z5zR(LCXgXaIlKaTMCimbAm>k;N@9qzUT0rbGHmHSVd
z)EhC*nNvV3t=Vsi!0T;o3qn9qnE}pfMEwvuo6cU>BNM-<s6}$p-mz`3I%Oy#3Rh&#
z5S+JSE$*IpUh|<Z6Xx=2CtJclFmN7&-p6#x-k+o*;50S<kzZUa2-Jm~>!~3g5){+&
zkre@5Zs7(skDol~!`|B`y2IeuXKUY_Qz7JIFQuI>Q6L|8GW0HHOv-j7VZde~)>$e%
z7BT7criFB>vMyFLqZ)r4J2B$^My0~X_*%(Gk>d#vK?1CGQ7S5cHYF4J*xIgPkQv%F
z!VnS?0y^@5dJH1pSXg?&isA%>q*)KsHueo!gKp9P2mG-e#QlwHMr~~Z<AA5JNo)A9
z-^YPhrP}(Qs5&v@$-AKERH)ksy+Y_N$z-Xhm@d)L-MDqLvZ4xD?DOinoV>PXJg*YM
zK*Anq$ccROH8M3-Gc!}y_xAQ{ZkEUZecHT|IOn_g*my7H<Th$cuA(@I%bqDVipEoS
zQAZy_ZVo(c6$jYmf!2@>i(L{Lnx7O26fPBFnB3&kcHRqb{cqs`D1TK|#m+=2taB(E
zkUd;(JMIdfsH_kfdUHHK-w5gHp-c7Vq(WH%!@Q|Al9V4Lm~xnQY`D|`z?_O~FN*+!
z0MMFJLm&{r#4cIoW}n7)Z^c*EcJ=gCfw2-~fN78(-3!$!(&uD_Dx6>l(z6@yFL@4{
zW&u7Wn^9-2_oS2KQbH~TSj=PjoKD>xKfper<hLo<g)^wplYaOh7fCKEl?4*|N=uj9
zrDQk&6X#D@)gD0gMTPy}yhKp#0~L<6Pv&u#nRR9Dg8}Bfu|)lL@Bm5UkQ4#hb~{cZ
zd-I)Sbw))XLA6v1!lPhMPyl<8)vm1eFrAt=gP@~Ee~~@>4RG55;U8hfnXtY79)OO&
zs7?cTWQv}?eg$M#q&-nYIaMe@sS}Svi2gxHY>9TKU|oD`nH^xSd+R3`nE~W=1;=Vq
z5!^bw!feMcxC}m0Q86_&1tNSjKF7_wj(_sQ=q9hJxOo5mM!2*j+|#yz6L84~mwu{m
z1C?443kx`sh)ArAANGy!K(jhBI<_-k4Hl!Ib{M?-{UtO`(8YM*U(91Xg9?j68B!M(
z@0|uufaC7#sX*LWU0i%hI9R#Y)fU8}r~?-Z-gNWFlRX_PSmu5MoS9I6lk+P3j!5z(
zVavX-FJ|pS)f1mVvn*KvhAdYWWnf{^sdpeJ_hM)NDksm>bYXKYWs6jJM#XIH1cOP&
z*>ENxqJnn$)^X?UCOvu1r#_hHfr&=#3~=>Q1-zoLcwv>>h=jYx<rS5c!=FyJMTe|A
zKeTSm;u(Jqj#T#8&(>O(y51vuMb)Bu4CJYt>tI&fQ6_zBm?RqQs`6A{ReNqMD$i<8
zMML>z#pDn)k?7g|v(NxnQkG>-tug-mWG07<hg3Te^jv8POKttt()}|i)g$tqSq3SF
zZ=Gf-!*-gCU`IUp9pqiB|6bEee7o*~JR;*Au#N#J=EI|GwaTT;*Nn=diLCdIo0NMx
z`*MZ_+MNoRl7IvZGCwz!NJ?sNW9PB8PX`Rs3<NuzcW({=sh;}eyl6V85M};$TyEb5
zJLA{uJKbr5JW-66dR{=UY-a_5jBmKiPzOjj?tc$2e+LBmSI(AIv+~$n90m{%zr4H*
z+*K@x2!N^xkdm_DfkMHRC1!c&{|;m&LyMzRebf!d^MZ`7JRN#F>G>rkeC|GSyf=Hn
z2mebh=5hQdxj4_RlKWmd*mQ0Qh>MGZX#fWYHzXuFS1BCg;85#QYkM+3{NN#wKK0Ea
zp7Q{Qp`uJ!C}D3lweH}6wjLA2+PbKqVArG*j33>xth@;d@Q75^+w7lfhAa`U;u2%q
zt9kXat`ao4!Av#?RtOI;5!;>i*28*a1y$OVHTQRyN!C~n7Y@V5(jW32%!D}8^u`AE
zTgc1V_NIGseHTvpZBe^wac;~-wQDRvUCg?-5yNzJgx!wx8k`osNcpbske<=XsX<$Q
zV}OQ+hRZTr=wO{nO6n)g&!39DjeP4?*7l27Agmb_OYIc4fK_{@YUt^^k`l-XMq)*E
zo{ddD-OryXBCedYv{gll*<VZCiN&tm6odp5(xBl_yxJZY_Iz>~gw_H@)|52EjmQ-K
zw^+J*i43`h<ra!M)(lrW{VYitnV=FQwnj+pQQ`8(fq||rIXy;$Ke*wGf5#2yEc2C~
zMx4v}i*UNiUBFHX)eD|CT|nzw2P)Zifn(<2KyI4cgC=_gXzV;af_YdgzTCmX^S&qz
ze_eXzp!tAR;TQPyFJKO=J*o8Nx{^OnmiMO!hdQK_b0&ECIvG3ICKchYKPi1vm!{>Z
zC!<+Dq(!ZOyKg!3yNgr?Umn?`yQE<o+n@8}R98NMjPldbJ%Rd8f(MH><@<GYx<U9)
zE6DAqMWxCb8&Tj<R+N<`=5n)ha&mH0I_`X!FiQwOec(TUOm+mW$s;0(wm4QpI|pl%
zWO`=iWKrK%P*s0Tr$Eoh?4%kB<n~zpZ{bqoHr&hvGZPt<LLSCF09%}iEbtNuQ73%-
z7&P+#32?TmB#kKp=^Z)O-KTL#{zu?2de1EBhxKqQXh6#F0FszX=fz*%aE_vU&B@Lq
z!IYg)MLkl|$NE>~E-0#qN~3YkiJF1nHje@uri+!;-g2bFXIUY)U4eM7B0o&O%ebi2
zRB)H#{)G!f;lQ0s5Yi{9h~Da)Y~ARWEoIRSW?|<u2Ft(Ps=mZj`h39($(~dS7|UAH
z4f<%weYa>ahljaXEeQz^xjBYN>MbLE?$)zWzuV-ocr8V1m>M_;c1nFj=H~F$>>X^l
z6BIyhl76&J`xLsYb!c_U(b&MyP#n|6PQlLDcwtd8D8(+Swlt4{o&IaiYI{*3s7=e6
z7bul%sutzd3Or#SaO+@VDc`p!r;U2$(U{qgnRyX~tIQ5#c|y-E<gH+umD$jsU9fEo
zmT-vsp)_-IO{EVXBqovOGdi{@&U10nx^E8L^!O0=@L?{{trjc?jEtyLr1^Sbx-{xj
zIBf65Ew8OXxJhD)ia=-<Kfv)%a^;f9r!x@V{z!*&2lSrZOAIX()2hb=;V-jtG$|gD
zSdfL^#<#bHXjN7oHT>S&8|a{zTv&WMSB<`XG9ZCLjPZ}mQ!*DRZ1&erVQv9^U)&2`
zIyGu)6^$tz#1=)|);yY1tz^0q9%B}io67~RII=Yvni2-*f2M`T@T?;?@VY}DjT21$
z_%&_NXd<@?d=HzJo;pX~hQN^i&h=!TEk^FE?wdEkQ3s}tO|y&w0+SsbeEj@iqcpbI
zfaRa@^{W+FlN!dpPb8;&c=#h)8S3fzTraNEDo+$R+JQ7Z0<W^%M%{8_Brn5c@pD+v
z`@kaYT25-}5tB+V{Jy$L5lP8op`c)A_cA2AJR&&wm+MK%$qBykc?KkYzcjkB(fjbQ
zgpr_9HVq)<S*C6dMEJSglE?@KJyt{|V`|;FU`&HjZ$ErsW#R4hJZoz(Oo0JqAgaYc
zK2|!C%>7t_%@VVSrN~8Gn49}^1pQVwaM%NJQ*M8}`1p8ZV<T``@^&KcNyMnW>|WdV
z09FyhhIm_P41XqGi^qVOJ&-Y&lilZgF^G%MZM3nDvl%ab^g=qYKT$xEp5T2T78^i4
zFfrw>(R7;)bx_XA!nvfT9iv~@(hT1vqA)ftW&QjIFX_u~Z2U8j-SK`{Gu<#<;#B;F
zO^$Y-AJyon#&q>!tAC^IxNXA=)u3p+?)qa#i$8MOXB4*FT+-!dcFW-oo}x_kgM>$7
z_LBXZuUk?p(U#qQo$O<hdKsl|RKFe$+_DczEi%v>h-AWTU*U{%(+1+QMn^l7DrOI`
zyaiz(eT+s;E*wvu?7=Nlv(?xtbzuuFm|25PDvJxP{=j(c30!o)oz8%wMOAJ1abK$E
z#YE=MJThK8Fc*H-Pvdu#$W}dmW2UCA4a!f(^X|^>Kcxa5;NuHs0sib~M_^6UA!T*d
zGqZkK3POu(-ed%6E9m*`%+yYic25@;=dm)d8rIsxbdGcgH{Q4rkf@lGzu^Sxku4wG
zu%qq|MyV_h;?+U^NK*r;)%?n_i9E3drg^^P{EEku%~41Zgv<$H2g8Xiz~acs)1ZG7
zRHQ(7pchy%fu>fy+s?NbuvOiftK|9*Tyc!0g+;Mm_0H(Hk64?fQrei+8?)!9-rfxk
zI38Yup=8G&U10Cz8Z%7}V`sbLa*Oq&az;1GoDU+7kNL$vr2c#@pX)qkX%$%+GfWhQ
zNz4ya300fUgI8jJcW+PkK=J>GZ_dO2tx8|Fe}eGaJ13?{eMK(ks$i9)$wB3RBLrG}
zxqX+CDNd_il=9(&2P%4MtvGx_u|$kVlzxPdL32xK)+MX;XuyHpsQ_j7hfl@vC+1Go
z3XP7;;^B+9Qz(9jdMR!p;_F<z(rligv%I`!&rl^jfN1V`$Q;xR6kE*_8(&-hSqlJ}
zgu~rb)XW7Y2Et9o@Q)zs<?HCS!G@a2+D`nW15@c`_rVv{mtOVARq4`d+A?ALjB<`*
zS=wj-HwU4M<=8W#5Ag4#2)gA-THd6f_#}$n>HVA1POYl5_5S_EMFA*ji&;84hWwPO
zg^f}o{*RI#+oKoJMt?P({Uv4yqO%WnhS6Cov&8qYrCdnn7nZ`IV+p6;-P=~u{{Hod
zFRFQlkOB7{+@9`k`K-|mSHU3p<+&SNpA&*6%YXf=UIxF*nWsKGXtI-r|MVXKWWVPR
zDbtKMuS4IQFYO&1JM&RG2Olc}PTckEv>{80(Ch$8=}2{0s4JSGwC%{|8O?W=I$qII
zqTzlk7LRLBt?eth$x3VnbyCGV4wIzOFOY+04-WkW%6i8I^AokpJD~@!oA#UQc%8q}
zb@xtJyJ*gK8wfdPIX4_1H~C^mhjuqaiMU&ECQO|pT3-PL2+U~$EGVh)uQ*qrvHe3V
zt**-!{Bq*YTQhY4wcnafD^H1#<)F`BNAZx?Rr1tvaP+n}=FUAZ{aOLgD6M}DOIpEl
z;C8x+*pEPj7P2QJV3=`$NQN>)R$h*%eHQ1N6=9Ih#JBV@+Z)XDIx>%8692CM3qc&k
z3(s{AVFp!(JHIcP&@@>#>kQC+`>JKmj-og47a0EBuhfAcaW}3S;_1l&R$v3+s*?}M
z$^SIZ?(|I!%}SF!Uzcy=_rt@%$*d^o-6<_{fwj!fgLJJ{p_!dLlCz~}@t4vCVi>bB
z>iMzhPr9i-6)95apOu7UBPP4MwKBe%2eM=r&-TPON^#~;4t!_uvuNqE;s(Tn62nHD
zKJDV?9=GO86HKbzlvk5*VF24ayZ-4KR;>2c+g!YB7=Dr!{^_$fz(-@Jj{kRv(a$%y
z>HhxylwMo=Na)YCG+!Gg#L*G#VxJDE4(wBuHj$YiR3kJr^s^kzbyRLisvv(&0Wl8_
zlw7KlfIjH`X&wJv1Kdm<oGX3Ymsiq-TpJAjg!=&slo>Yxe~M>=<eQqVE->B1{-tTf
zI^6Oy<0kIzW-2Qy`|Tt^K?W`^Sh0pq_TX)=bxersiTR0qjEj5z8anrlq!`l$Bu)eK
z1>gw)OBpXWH@mxW>${t{xY#!at}}}hHaz8D%*<b%4!lNcaG%{IN9z<FOKECsl}=xq
zS2|au6WA-R5=qaX=~5AVMHPF&QQ@~T-#(Z+X~!EMP9W?~?4rB8hqrQ$pWO*m2ku3z
zs(%y*#Mubl%AS6iQO*%cDBBTY$QpUsNsqzK2|DYE2kAAZr?d5LAYZgI`e6j6d$Mj{
zVhpFXYI1coNPc`oLIT&fBnORPEk-?1k)c&et^qI%&~F`(;I*63*3dZW<uf`wy8wyz
z9qmf#Z$TCa0+EH6rf?HRGs$#eXB#6C**NlwoAcVrv}7K~JJYKZghA|rWe{XIyh=p;
z#m1gvJ!m}~;OxE5&X^uO!V#l%{zu9-_<Yc<iBd#)Rh8zmC}x8?X0Ahz6Qwi;SSqjm
zRH<o)px_9Qv(y46P7*Ind=wbKoDK?;lefs9yU`OIO;<y_wn_nWKoqq6C7gTzrN`h%
zP_VXk?@bdGh21!+=Dfjx*f7WBNZKf#lG6?}AYp$hPFTo6a?C^M7LOAdK<iN4Uo=8*
z6q@Lzq~qF<ebM=i#3swf8HNXLz^fnj%sjnKVKW~e@z#c>O~!A^39gC9AV`#oq7Dz%
z53m%gdevQtR|(+k%-7e!S^g0EfnJf7jg9E`4b%3BB6_y!l9sY9U;?kQpVl-mkjldT
zxkF^=!SU=_W_}kZX#Jboau*F+;b2MrH8)6u1X?C0rdk^y*Wo3`!9nC6cIA&^KJ1Xc
zu%~f`Wj+v=bmRHmA$N`U2Hi#00Z!ziR0u50qCAW(EcP_jW+i-oPhd#>3gUkC6Lu}}
z*aFId@#f*5nogh*2B@ztEiE;nj`i}?<$#QXXZS&`>z#De#l?Gxry5B>4RnPQW6)py
zw6bcE>stwAAUl6Tb<@Dpb#Wn-HTX-+x31WlW!uVdl~QfYaXF52`1y=K-R(!7gK1c#
zw+TDDczW-@hGb2uXKM_J#ZQEGe4`;(1ak?_t=D;xBSDwR=OIF7-fx57n*6fkBy}Mz
z(#^BBwS(kksjNnn3N`icjkIxzF&_~I3t4@B8}(JRN$BdUus7f|V+aEM52^w1S+?&o
z#8mATCP>2p@s}gPp`u#Uc~!yGbT`V}+8Pde;OsCY0<1xM(wY|rGW>7eJOgL)x}p@@
zi=IsH1hPkEv4_fBrkbRc9lBkk(!%Dwq25_}-$!{p6O9n+I<oaDbmJM*RzMf1#C&*&
zn<SRuEH5c(`tvB_*v+4!u>fCQh(a0Q+Mu3ir?+msXb1N;%fZmJ(gOzDV_cG5a&FDh
zp^2H1FU4PntOXTlA6}<YnfLL$`Wn!yZV&rya3zGnHUT8ehJ}$Ca1D!Z4=amuIWGN3
zPSz8?#zcTE7|y`VTv$@FCU@i7TPBqCe@aPEMTX-(hC0zp<R;%N1_bO6I#XM9@&$b}
z%*vR9U$1|Pu(0JL_mN4G&l2{2C@hIR5`Nl-i9t0byPn>|W|#Scu4V@+Ri2sp)+7S2
zfP2FY%G0^|;&tT0udl&1Hx)I;N91lU)8@H<^!;sSu4a0feJIER{qXn<xz~MtfioFM
z-NJPLKo$4mO@0m!b1^b*bj2_qDS}Q*ZEbBd9o>W$7il<wDw|%_Oh-qMG()NnJX;G?
zTFF_<LA(t$_2+kXq&@(<6UVH>NPtcA;H8)t220x8%eXoHF_WR`z(;k*yHdSA+}tXb
zoHmMqw2gH?(+874!`bzvOmsY*7@7=&eIwyHYPfeHXI!X>-D(DhimI>Pg93i|OES+<
z<E4uEOBJyZf|3^c>eXx{rfH74uB8l82z$0O?v^yZWj%X&n>e^0#CU-qh~xD1^w`Z6
zbVOk$AQP{`8sD`u4)CkKz5dzNLFxOhpJ@H4j!FiPAx18!8_*vROF#1f>j$|eIxpb#
zdv9aZ*3jqdQLOoj(-}yaC0VDe-9D-{=Tp5C{u15s;o;1;KD&#CoezF1Nj(-1otGVE
znzd3_u~_qL)_;N%$yi(wL?LIN!(d{k<vODInS<SlA&E59xi~CM=%*cLC67iuXK1c(
zjr%~&(iRgb4|0%n)M2^%dRAg><OcW(Eej+Tm<Z1T)&Q^*@I9Y4s#yfq$#%a^vne1B
zS^348P*_ydt9b^n2JQ)szdmg8))g1;wBd__>^UrdmE2*@0j<O-VqfL)0<xZ+6P$^W
zc5qPR!@EgeM~Od*L}GoWiX-~1D4U$I`D#N@U093oWy7@&1%^5(37m`F;m>_-Oz^LP
zy&O<|&3Tiyhu0`3MB840Y8q_E^b9rMKtss_gveMV-OKXc@0ddGk`R-RFq*qsml~b^
zFtk-A&wqJDg26Q2eD%1qf4JgPz8qJ$3Kk$<#N@_#^wTLPCjl;6@kaM1M$1P|WQ60p
z4!UuJ5@Re$#KhP5{Xra@n!qWWK)O%RTSu=tIAiF_Ms9pt?uxr*EcP@RTxpRB5yn4C
zVyv#o%*(EH>(Yuh;AQpKdH6<8NDFiEF5&nk=;dB?_FDiTIw{c`wuQx-^A$F)vH3zx
zcXt$xypjEBsNd%xv8rdm6PXuOP-0{fm>W1nn&4}O|Hz7Q)I?v?&}qNEU$}1uGo@~0
zho?K?l4GPvXt^Vt$HtaUG0Y?|!|=}+#9+Vn#4qq|<`8>Od4k$a*rW~@%LhVPuxP!G
z(USfNd7~OEA^d;u=NitP4!Bz_6juaX$!?DH6PCU&!=Iz)BMn(u8P2=sFDuQbs|^jy
zoGtN$0H+X#y$9dOD`WhD7t04|0_0xz^7CZ574Ay&kHrcI0dG&}ShW$wx+Ga4wD@q-
z2o1K_;A~5hk&5A~fOV(wqwWL<8%G+&ZW0j-HW1siyx~)IIDOQ4F{P`QtO(nCTUo2c
zrAPYVcnkSVi1{<q#U)d}xg~i)N$v62yzkoL(^YIEPxvHL+)&cST@lo}y|OY%%mp~7
zsPX5%OF1GZDIH1_=vXWY=$l#iLoeT>P|5+$j!3fe4)i&&s=<A~eq`(ji!3hcO6BHQ
z{ng5XKAaa_vG|Q0ZK05DqHADc(%BGTJLiQy1dG5Xl+5M+*tvXc5qdh!*VI;e%6uAl
z1P`5*hNi5CDt^4**wp$I{h;>5mF4_}m#wEodvVRn(wV?P!pnoTl1g5}-3g@Q3y<|d
zNxf;^E?(cGCT%;<rTu{NAVbugb4SF^mjK^`MZGFMhjN$Br7)`JiH`#2cP_jY)L)$7
zm!Hd+F%{A`B91|N!Gk*nlMgI2JET#|5VS2B>U`cuo<?|tFG0b^ydbD&d{Lb-H&4A|
zQGH5%YGKnnu7I)3XTMx4MKQZt8uF3J<rMY=U(`hu)nz3RDLke2uIhKO6g;SUIH=kF
zP-dp%xtjttjBkCJvBoXG@br7X&jGABr@48T&!}nqRh*HkN8i}9=@>TUllg@)h{(k{
zs(IK?ow2krZpVniK|a-cNgV09KeHI}upND#=BvpQH{>2j>j=>E3vDNJcAtqJ&zu~+
zpV&8;BS+;_LC%76hL}SM`y7vt;Y^N*fhzDc2>a3s+l6q!&R5=w5KvM!`=Fp7;!`xz
zUq;g@TSzk^iZC(Qb-{W)2=m<^6fe^6m*f~Am%dRI^P9J%Y(`z)N@LUZ#!u__T|A>B
zu@yohOMEYk(5Rpw3YbsthI#YF8Gg-oQPkp5bMw($9j<b3JjW5l_mYwku}_;illkSr
z9hPt`>IaeV;T(mCwA1y6Y@M5rfGb#iZ7<3+4c3&9Gv_>S`e?iWk3#Txoocg|1U$Ji
z**5hq0$yW1aO=FgKFHAdAMG!+VvR(c-Y{jyj(4+;j&zBhu7{2{p&Q!lZLL+B&LVx$
zyXcGW9UbSr&6mdutzn^Y#eo5VuY{0&qN2&d5OY)0VbS@^>(wToU){ZNEzy0o2Y!Cy
zgPOZ#B!nJ{94|6ZoECd@?K<k})*h-$^;!%9^_Poo%K2~TLVEc0!O^+bF@>({NgF~3
zb_uUH5K#!Cy#Gk`26|QW@(?62=rjo(QTm>zFzGGzocQj^bD8F>e=NlcW^PlxGn|Fz
zS}(@z${*5YO`!D{{m)uJemRM?nzg@?2OQma+-8JEpke*T=Np_cb8L;`(4?^F-L^2e
zng|r#+jx#Adik3vQn>7`h+t4bR;2qTAEkaxeC2+|?khyIZHMJ&N41rO^cM6<R-6&4
zwdC?5&i8UPJk4R|4VwnQclq*Lt8RT-+4Myr(Ss*%Hvs3)@s#Xh7kxI|hF_$|F1kV|
z>LW${pz);D60cckCYD*RY<*G2=oO=emm5Tto4e3=fdm@qQWW5|t1P^K54LCx1lfbJ
z5Rrv_2lAd_ugTKw=qlc${CY~k#MD|?H=VdRCf@wzfd>A7Tr~t0Z?U_`1vimThEKEM
zBQoYMR{5?HErTabuzIum)lI-|=1PetX7uonH^e=R?H&n2Fev){HF<yitU&;ZsB`L-
z)L)E_6x}O9dn<%I#ce)2K{p&6a1k5|U#<rNfzwi3B(KUMiY#@<Gn_UWo@d!yG7Pt;
z0c@i+HnZL&zRmAa^1fY0K9$?PzK4guzr4T>WpF~h9@b=3P*AAxfMbtdY%ROf+h26g
z&l!{o+3z}ZlLDG7dYQ86x83yR;hd$i5a=ig8~tn#n?C)Rebd%HMTq*@Ti&+rZmtvE
zR`=$^_x5c*ht0m(Y0uqvA|umelUlWt)YbI+G)@mT?bCdYadAO)5<OnxgE%<xweY%o
zGF#6`$A_kbG|RM!p8tffrHDSJAk<aUvn*KHqso+EJX>F8BeC7NSoDH4AsW-_%4qst
z5y-<ASMJJia`hufpFHq4WFr)G&`>nODKgxB^B_Bopj+g8mhugytCW<vr&M-%9s$Sj
z^u@;JHXc!>&B~{D-#?{YUhr}2>*>XL@kBG_7LbFAVK*UZ7^Lw~1lBOlRDhmWX30QT
zHoU9Le_R(PZiGdOnx9A8qu*w6i*fANoom|9m4%jhWerXM_YAz-9+CO-WTrfGoGr3#
z-q=lv!hqs*ToesZ8C4E#!@5O%lW{>8%iAaYDa{I#`)g?phwYHd%<)ZY)79RTpNcFj
z1*d0hEQ(>aHa2j3rC@SEm#uk;FnmC(tozw5O|zge5f+}gku6W?-0Xs9uV=1-dve@-
zz7$ET6wHy-E9^}x3;{#j>B`$CDH3iX?qOxps+j2^%X0~EL-~ok|6_j|Xx{jJBzijN
zi`pO(waRCkK}^<jENA7tIV&5vS{rN^tss!oMwdZM$wHp04u+U~MA@T=4U<xqqM~EC
zvpYe7c`ASX<z>C~;!Ca^Crs{}ZXgMqo1M#3FpiNzAhFZ+-r&FhG4cAY-86mv`9hW=
zL%Bt=AS@zujXwRNZP(X8$EUW6(+gnV0=|=tA8FXz&s^itW%(JWZ{p?kd~_}FF1B3F
z+lz~(fse)z2-`HTnjgP=pMt~aX9LyF8pjkU`<v7IlSGE~nhS7-W#r3sS9z%UPXF{H
zYpSa;q*kTQBmEV(V3HgIOQWJ?=!YckjP&$)GFC>`EF(g`21K!xttMOcc-JHAu%qSP
zZl>R~gLNB^aI4G-3Fj`d2?&&vt>E{TOMK6@3=Cj~eVy-Yb8F_b^v@3X&vA!h!oXa@
znZPZ)d}H~dTT)jq2BDUfF_T)R)6LgVv^`eRQ<V}Rm0e-upeBGYq_2eJv!!cPSAM>E
z<1{>U2eFc2Uk*#{?JctGH^{`#59<H2#sZHaIjO@Fo}Ct_f`N)NXioiO0vb$z$PZ~h
z?W?DhmR8n-^|x_wEYDqb?B>1CTr@(BqwffPhyNrB8Vtn-H6E((5X8Oh&COm{jlyC0
z#f3M75XruCy420$UZUf(E6k*nR{Kg{RhouTgKQk)<Sc(Tju?6B;fNvzn3U0RKEY|;
zu31B$eG=Wi<Vmht5=xjEYFJsM!DpGv&}Vu6v^ULQK0i2^Y?p(RvoKpKPd(o*nz2}m
zT*RrzXOvDkr8;eVQO3-On1VuDCj*uRpKftYWj9@Y;7~J;yq58?2?LK#r<qtHDB9}p
zRT^AK7mGDdQ3Oq-tm;nwGZFog!VkeUDqPIm6IIE$_#*W#Kc%5XwI?d1EG1uYn$N^R
zSM>S?s>Yl%wtst-jpkWlS=k4yuC9`jrnRW`_}}P;lgZ|}v*F~)&SG!RWE7U~K0qt$
z_inEbfQZ+~T7R}k`{!+K5>}%#IZlj>`BrDIbw1l~H=j2*PxsrRkENbvq@^kMr*&?_
z+rYql>l}v^e&rs(!TICvgW0)MA&0G}XgCwvUUEg}K3YwQAfZ%*15<QVTwM0``Rlia
z(_pJn05g1WcF~Ml@x46tMN0*o<3EP&Om^f_|L8OuQcOc_ZYrWp3KflrSd#0(8cDtB
zxJg4864+pPpLl`t-a^OEcY4(@GBU26JUU9G_i%WGV(5o%T7_>y%nto?lD?=zvH~p@
z*cv5TMtrR-J2cJ1Zg~))U^#v4ua$;>=Z=0Uvi0KKQuAf!&>?5Gt6a<n-bgGf!*=t2
zp`+W4aR3KKiQdazPRQM&BNt5O@SWQNf#VDku&qJdAbdMQ>;Oc_pv5bgC1q3*J2n4$
zoTx90@bVW;uk(;p*mz^f<$_k&U5?Bbj9gZucyuZPieM(^{lt4jB<dBz>$MgC>(CP4
z2OYD^pDYL2uC=6GuKV@o6!weX4eBO0<d0vN{pvD&-1j@bI3=6Lbj_k+SCsF$s3^q7
zrq<<*kq>SudL~k2wUeAs@iELa)~HKn7mX@vMi(m;^Lx;@8M6;ST4Sz;)+Yhu{h}v7
z+>K5LlhCLA&GV>-FcXLK?lybT#@_jc{c@;OTV+ysT<1@Dt*PlzQIv1Vs~RBzpQYO2
zTQ!zsLzcg?=c=lewbXnrhqVr!l?JPh_7Y|Sn@|U0qNU~ovT5WJ!?3F%GYCA2()TGM
z`&(MRTZ%x}r;>zW-sDPk$uZ6cziYuJ0qi8!dR|@*qP<eE(R;boc;td^@QcN&*fOA9
zt4*~*BjVhv?B|^iPODjPr7$rsOHcz&(WgO_zMiXF0VuDgi#=4c@6l02Dxd$S*5sLM
zo~}FZ&KSZf)84|)BVVbW^{%Gq2Rx+fQ%WS3^qlGUJ!>XnGeET#%nQeQBA@r8_kv0q
z#RkdjW7_Pq*pWv@==iFjYfW*@C&RaR=jva3l4egI9pP3KfA}OnUZTatdT!C(*EsK^
zqv@TIC3!eY<ZCAi|Iz6zdb(dC>Wx;cEL#F=R@_GSE<P%%?@i|^bTtw8AN#!Uy*QlK
zH<5x%l}{ojqS-jy(=#)>nl=qT+|T<Gg#3IY-w5O0X2Hu<6;Q17)l3!M%t`E)XC)*`
z?(Gpmfn~}NjIogcYCG+|m3`6&p7zHgPFvyg7iaV63pH48<%dl$4Mb3Sc^r(K#WkbL
z`OwHD3#rBY82O!g^c}s!LvY8+WA~E_SA>gnR?nTa)MY9H;%H`N>FHJ;YS(w~X7(a@
z>g&*0d3*D_muHP9qRnsiyLQog?%2NQO)b&7ZMOb7SP(-F<TDYop%7%*zkljPLUMOy
z&NWi>U=KOg{wZ_~&oY%?l1QHZmhaB<NH(LYiOX&GuZ*d%RTZQMe0sFa(uoXt+<hGt
zB(Vm}WY1s}*vTl*_bPX<?32$*70_P)qhNe%jM-$-l!W+=V39QSv2ozFvBfl_xT%@=
z^Ja5AkjKS8Cy%JOX~3&oGK?*?M0VH7G|hCULLfpe#k2^`_gp_EOS%8DH_^**t0;h9
zyJoV9blR2nT%+7T3piV6|LJTs?{V8a-3GH(V_e#6q{KmCfL2NBZe^nO#>0C&JiDKU
z6JMA98dd|A2zUuifTM_rp#e7VzCCh6F;54-_@3(JT}2oDl7V40kPmiT3`|leGKlcd
z$EELD&FI;+RP<u2BuSNoNE(Ej)N8hC=bisGukG+Dihv?8fbua!d<m$opij{N1cY?u
zmgDEy;T*&`Re5-#&ltbpPwE^``Cdp$psu4Ht;D5h-2RX{I5IFo?LNg692ZB|sAj3B
zWJFe^nY(*IEg3X_Yg`mlRFtxgzZG|QG$8W=47RNFOwCI2-(b%Ch;w@zhf>%ntB+^A
zL$i3$4C=re>~JMA7NR<gD&{YDE>JLye79-3v6XH~iFf`4xZ(P{qrAdw<!K1y%3G7C
z9FAi@4-*uOJT_AzeUFliCZ$<s;WHPIUpvj&4rm=6>_RW!svzuRhwb3!<WULa#lhQ6
z6@49!!W2UBDUkQBPX&uKsR^gqwpI<BPqHYgx-A5fhOPtee;p*XfN8fO9&`O#s_PL;
z9h9Hn1t;SnAqKIdjV<F${_ej#|4v5?&oBn6XHfkV$QzLzd<kJauNDqe4%63J{M_1l
z`)6h`>JC?3$o@wEG}R^LdOD<7l{TuIdgZqt>n?oXczk2PU%tSBhtw66^?N@+J04Zk
z?Vu!Hv5pBZW-k=VS9EDZFI{=Qm@@ZImYW5u<^Dh;<3#n#p*kC%Dv#CB$kk?g*!l0Q
zYWh58dioq1<rGqMTyx`jiLdX_W|gZ}iIwq;OsyF{oXZsU`0=o(>6Q$+&kHD%Ma#{=
zfP#%sudf4h`j3bSrzJ6pR4b3z>)XU87f)J`lv_-O<hr+-CRm$|h?<2Is^`-st4~%;
zlI@xm)zosaei}3hg;nN~w)dJJM}smFJ2nqb*YogtQn3^6o%Nd5!HoCI7<J=1UP6qu
zBoWUG+L!kQLCb4vOef4II-2RQ`cb|he)_Jlwd5tq7s=;-6cTjI7#Ofyz@HxWj6a^t
z<FrR6CUz=w;Oh-bOhh`r`{e-`0#3Sh1Pr=F&%F-;xH~vJB$b~-nx25LK_xjlsUIg8
z+%zR?ec{Q+pp<++>}83=cAohS#Ut#;@;qcVv+K66Tex|7(5H0hZ788ouu-a_k^S<a
zOkdF?7;rG88(2@CVf+o-`m;_L;H%i~CGSFhod}8f8PId@V@k9Po2A+j6lUmizcK#p
z(d8{8cB+7pVW!vKc8aYDhPJ%p1TPd43p5!<?W^aT--ue<Yg}&cqTOs`TagEk`Q!V-
z2#S6Gl-`YN+8*MAB?)q1plPiF%`;B;LHLG=X$J@Ukf*Hqpkp*y@!E#q=SIyj*RNk`
zM{{e5iH~NG2N*b?2Ad>r0aLf+pG>2|H#w6sq$O*=8mLuDACeH)HlVJ*&Q(xj?3zl{
z-`4QAQH3Rju9_PY)Q7X-x4a3EybIow$)y#v4;Mc4Me=atUrM3_nWI%o=<BzLcsWEo
zHD`}LJRPOso)L(epyKE3>JUvYW$c)p^U}bLkxrpyv~Vg&^Mz?-D;1a+bJs?Lqk`<W
zhqu82Td=R#0%0W&dca@)dIZ>i1qQueosy_jy-y(W)TL)4HZZViEcU8#Vc5~a{$qLn
z1;vBBxVXr)<~XBtRTaY&-|yaf$}ck^QZko!=0EN`zART~2`^Gqw26_+g}0d2Nau@O
z9AJde{sIzr;}?G;l28)UbIfcabg@WT*gGJfzVG?#^xFOFZTEf#V5LYGXxdC|lxP_>
zwjn-RK#EyxqT;%|B~cgGC8)A)Jj0Leur#LL0Q+}vVlZ%I{+v~5+F0}6)mDf^wnp_(
zDCT<DyI)l~Hi&Cin|TcOrNyW3ul_A`8~pC)<98jr>}NtOc8){>JlMX6LA5?(jA|{Q
z%Q$yfJq4hhnLS{ipPQTe^WU!y0XPiSe;xBs&@u+C&WUUQA%CPUVy&v*Uk>OoR~@-E
zK}Sc&tMI?;&!VjMmqvip^yHNQ0|Ut&9uSK4e(eMtriJ~TBoT&Ru{KfHEO{Vk`_(U4
z*=s1JBw86Q!Qmv2cyfx08pl0z6%shz?6{XnQ<P5neVbq_a+>(Agv{Cto10h7_P;-3
zX^w8zeV00XSFMykX6SF<o;-W@9Wa?SKYe7+&df|cc<li4?RU@CjDRw4hTa^siBQbA
zLWqGjK+H)3*#wF)vefDi$jItV+S;`Y&nOgueSEj67_=>3+qrP#?wwtLc<)rN9pKXR
zu>ScWrs7RPPjoC5Ai>_j7utLBk3J{(JgA<SoIy}-Z@KdMOAo8)=m@xOsOxnCe#+tD
zp=Se`5gkP&U3912JZo2kIVS_|V?md121Tq)Ow%C#MYABAz-y&z6bMK`=Q65$bF9Q@
z7Y?5^H&D$}Zy_3J0WDC52EgL!2lSI`*RKO_`TSr;&dR_S00N>E@eT$zFmXtQZn!qH
z3HUH|8UKKHfS9pBa}34KgG$?4V1b{>y4?{$zPb36m4RW$wW__n9a<{|gEe-VB?^1>
z1>9XLXEiD=C{R>Z&doc{a3i|By!;H+($E+k8L^uzOOUYCy~fgE%sw*Sos^h(mDm)A
zQ$F3S-bDz3xbWV@z`*;HVAjL#fBp?f(ipFj#BTKLsjI8Ij2p<me*HT112#wyl+KEB
zR0Dy~3bf0}r6*Tn!|WlQm6@4jubtZQj*i?fU#LYzcX>6zpuzrlbbS1WlI$yb8({bK
z>$`UC9Uy~T{qbq*mCER&$<(z(FxwLdDkpG)x>-kiyQ<)fr1{vHD_&6wfKGmni4iQ&
z`Ri*39MFm(%QTq7&=-EN*EJ?se^t%L$MZt^#no2J&1yW|&OYalcmiW#=8Zk3A_#Dy
zgsw-`)Vu`Q8LqCb$I;xR@_eA3?em#v*e|kVne2*23q%tjjpA20_Kj;@l_^CL{c8oI
z8wv%01fTuo3jx9JtAl5WX_&)LCprnZ)ivU-UKm3ptn4$&IVxSn^)(W=V^-+10`0S$
zV&mrT&W8rHmDSbNm6ZSkdVacZ`nr_AuecKMw47hP0@$9B%_9K;0r2H=KGx;rw9ktg
zx3!0Na1I?Fl2b|ugL@l0;F&Orer4p33Eg=`QLz^g&;Uz;Hag_$KFN>^Es>HAj|`Q!
zvs0&!Vfh;$mldhaynlR*3(SW0_DvB86617_Ul&3R7oOfvx$NRW;~vl4UnO$w^Y;|v
z6hx|t(asJ#&O4LGV$mQC2{0)DsDGAjd$QbXG=CI4WeWE8+aSv_j?Jhw#;6e*(A5lb
zZb5EwZf&iAYMu+AB-1=#P^@#JDfsqnV6raau|Na#C^62+C%{~%tLe&-9s`0spkNr$
zDYrl!rtN})B>P4DzAQG8hDIzeF9;oN%gQqS`5GTwN@>a>%`DX_0-}}7HC*>6M}E(r
z?PLGGO9NIX{)YWHl&Z>XX$z%AM~{A`FXHio*4Pg7A2IX4i_}PPyhY|0hp$OJi&Dxh
z4+r_q`J*;kiR@~|_Uy#2g7*D)-<z;JdGfVXWpRg@(VXi#RX{x3r`s={HN9#%&>7oq
zj<zVDH0Iq1L*n@>*}5FWy(J$y7a6N^UoY=9vln%6p6l~(OldDItlcbRE&L8}D^)?I
ztPi#SWwz`S1y;-R5+Qru<uD=;#1{^>8mHOgshjF%I|ppb3-m2B-TxiDa$=K0WMScz
z*Y8%m`{swnsuFr8PcLnDK;(khK}P0U)QeT3u~&L+IFg^mLur<(+8MDh0-v%$MBNWL
zg5FCE?m1x2G6li8;13AFy~a^odeks@cnve~IdXGhWrgYZV~w^^0sK{-E&^$SrhNDR
zlBAcM$cPj6@7CLn#i<m$|2;^r#toL^pyqjY#s%8Y;d@}8>u^20|E;(Q0ey7^Z~fSl
zcQJC=-17dJZrYXuhR+zX`xVkMnV-K}k_X<_T#JPq5N!eUP#de-YzEN(o}af&%GLeN
z>ilZe(Ds4kBuLVo`FYQ-b=x>8)+Z*IG`{Qp{vDu&<^BjH*l}^)VYh+tJDrP-%}6e7
zG}Z^De{tPDr;Gb;?=KuZ0^t)+q!9aEN?He4oQJnhqALU%T@dsoFE7+nXsZgm0|xS5
z@x=8O+1LMN|AhbW^k_>E!f>HE{>Z;+pL2^lbko2Mhes7O>t(wTbh;u%0hoWCpOCez
zkFqp?yWTTkvXgbyNn~IDrgybe;#+@r9piCb`10l=RJM<^u;f>CE!X`ArBhZmV@D(7
zTt!l*0|`BiqPs3;hx_{`4qE+(SXeja9yjb0x5SQFfQT$a!c)X=vy4~VA{O3`Dy5xP
z#^CVA_Ylj2kjzfePU7Fax3?pOK8IaCGm7f9brK}&zKe^S;Y&t<i{(GOJhZ;<2)$yN
zY&tLIC@B_xrPpGN2}=^9eh?D$1>{@+3)SLN3NG3*#nG{ek<3vWgS4prwf=;Z#{|T0
zF2ApAB-XL2nRDjl=Jr@|^K#FeJ}PG>BVO2rujsI8RTK;kKM|wsmQ}8HZEX!B01FuD
z!r)+8D9G&zd`saO^2O!$%A28~kA83R;!B@5PN*B&ZjId}>uunlFv=Ju&$rdTPe{D=
z6xmRib53%n=%*UJ%EnZJN_XP?l<$PAlT=E>Q*P>yhTQiaD2TH3PvGL->FVlB6XA*Q
z;k0nmef?M~&6NUupnV)ALzzuwYD?)k2DJc5Mt|&_lBq8k!^1;*`}%gy)OmsQeY(58
zuyBO)@x719Lgj|65NijEt222+=TDNJ+rKC2h2Lg?D#<H`heodLug3>xQ)NceDd{&t
ze=Z(aW`A+{3iQkxf1>m{!StO=b+4`}B{tS=>$H?fM<*<4X?ZD^mevQk-+_aZA5OMI
zP9z+N)il|_)to+YL;@UY4<0^DiH-&YTOLKF1Rm2)gV6U9;_~vFqH{iJa+%NCK*O%1
zdsF&uYQsgQLH&tsW!t4Af?d6KD7U=6O%f>ncY@)_Ni0n67TH)%FJ9COtXVD{h_I;{
zPXQu_tT$FMf&xQA%FBj8S8Z1@$=V=G&~InUV(hVpz;g)JLuFAdR-O2mXi=ElW4_K$
zB3ufxZ~Qj9FWgRwKWvUeD!_JVJH|^q*O$w(x2v-ges+f|Bf~@`DoP*2Kuha<B}dVs
z{Eo8g)%^2PqE|HtUanZi@HII1bGe)N({8<TsKy)FU&q_iKr3kAPbn&5F?p~e9nHW;
zSAYKC%H&Dz<N@_$(XUtsaoODY<C|Bq#ppbI2)REd4{VBn71o4n+93^~iO1i67Hcub
zvg&X{b_x@9Jw3E<YdyPno5J(dCrY*gEe4g8r209$@Az<Pdg^3H^g9OP?jL{W_W$nh
zgq;4*{!Y8B?~hF0Vi&O*%yowcRj}%2^?k8ynd(Wf#Wc_wzgNfov9s#MP)4ixXYpZW
z`GAEMRFJZQau|5hUhlMIMGCteys!XVUNd!dTieY+Dj8BT2zO{IC&0`ssVDRlG&Nm<
zAR~F(@{*EynC-a3RK?4Z@|kMl`}b=-_Lmfsn$j0<Q9@6b0z&Vo<p5>B_vzbg%wJ(7
zFPBYUH#9T=hXKf$o1E)2Fkqh^+6@RLESORk5t$ntTt418)694kM#AOhBq3pJ{Hjsk
zXJtdf(_njI-O-(;Hq^pveKF|n-Mg%YHBSgW0O?v*M|hT`w_tb$v(BuD^D1*<RKESh
zX$zp$YsjsXtuVRmOqj5*TT21y(kobqx+);hoH=O*k&X+1XXTX3{VWc?du)rR$-nR)
z{?E6-|LJ|Ycq>1t(Goy@yv(34q@`6b6gznFg-#bhVw2i1IGC>c)<lyTd<gJ9v838S
zevv%nIDp8gr>_b6jO#FjF0DsaRM*h3PkW~lJDCqM2h2XMg0m|?=daJ-f8_y9i12M_
zY=m1eQVFAwN7z__7zqk>-a0nU&Y}9n!J$bDg;T&lU9R>?Lh@ZfzO7P<ppj$ahoxl=
zrZ^91mu87>oz>zDzR1+b)KngREX#CLc1dq}zfc!S>uIzc5Lbf7u=X&HSpJJ;jydxD
zoCD)}#CDbwF|o((r!BJ5wOn!HxnFurTJAqhoA)B8=x)5h+-;granCow&$m`5Z-^}V
zdV{1eGt4FU>@#ycf@m~`C*pyQ)*(GCHI<l>6q=O~$pghpN7NP@a=>i#tz;L}B8$zL
zi(rp>$bk$A0Ez}CM>70xDbNlB#zXDFR}ND`R(+41nKKYdHe@~VA%-dMW5;r*8Rzt1
zh*(RUEF}4s9Q7vw=QR*c4>%BU(z*SzAJYD~Lm%@$`RfjKtB)54hJB?`EACtP6kn*0
z2EKi(k7WkwRstS-V$Sm2Afs+Q`CC=h@km~@`q@CMKk&eFvjbD#UhrPeat8|&XA+2)
z`=!0p*2Toe#06IA>1rOmWz3Ci#mb*L@2Jry<#@tJRLmNEW7+O;UQK^E`v&|kcU9^5
zslg=sU%6{19DI@Xt9?oC$Psu?k3##9+P5HW>Lx=+)ZU^bx7;lW{c187t5%}hHE#ir
zdz=hsy4wD^&lWK`x<^(n=itBPuBqzkmbuLeV&Vw|Vqr(YtLxm+_XRawG%Z2@0QY46
z8}Tui*#Fi7)HK~t1trx0&y6o!!%9z|-jL}utTk=5G3gv<l@3H<KCx{w5k~cz#zsT=
z>M^mJr$}T^3KvlGdAGis{48$N*JXi`zWbwtuHkfu36Y6u@kQ(|$dZk)Jy#%cadp)=
zp$iu)=}qgb`+9HZoi8xW<z#xwXb95`TF7r&8wS7l%|<w8J>&5s=qjY9Fa`3PON%9n
ziDr;1r+xSNXOg<#ns=?_m)DV4AUsxwh)ldhyB280o#LuvSU||1!(vxA6XU@l3pw<E
zFp)mXPxIk6c(M*li;qrG%ykZ{l-UL0WR2&?BV!{2R%)hgfOk$pN(wZ#!{)I_B(mJn
zVdmY(c>bbq=?fc=1UpO_UK}4Er*fKi0kgV(s2$R}N+j!GYqH!0nG0V}Uj%`)U4_;#
zf+#*-p21i?9>?Bl2yf);Nq}hn@U28kec;@|%B}(6t+Sp{fejr7G5LR3N!P53G)>_p
zZP3EkI~SkruoD4C0}KeYPJ%W|6j>>8?nPz!s*_W4Z3KYZCrn3A|Mk2TALm=hLsQxg
z<%U=-ZB<nf`wcV8(bazC&aN&I#{*_uEzQvzr{}#dU(SJKNtvLWyxQ!lh^8k;VRxG*
z%MMFr_*nJo;>m<P=&7omWpUZR0$?iitGuH8vL0FSU`sF@hZIboR`>7U55Yhl|E{Wl
z7tQ{zTxT}0{BiEl?%6GLDwNf!8cgQtpl2mJkbh6UP$;E#Kdd#EQcorg(M5B&$kama
zD~YYl<EKxH-C7-Km_n5@Ym7q0eG3Yr+uO-3&2e#K+ebJPX#BtqJwd>Bj4Dz@Rb5?G
zRp0K8o7cH(RYldC>mp4)1lmASPAn=CSUTtPYkA)rby1h*Us+W#5eTO)YDx5W25AIz
ziismI7HFf$lPByROVpH<5W(y(kM?y^2e)dJr6FvP{8xHv-QlFT&;W@=$_43;NpKa~
zCcbq(M5<i*O4A_yu8B!dI76SItd*6yc{WQ-abZIrZoC35rV%@s1O$g}<Kg9O?!PXL
ze=ANy7&=y{n?DQ(iL|@57TVgsK>N!+3wTOjay=m71O3x9Ph?aJ2D+i)J7|!NFzk27
zWy?`hz)9#x{;`?A$Nl3v@uI5g>X)8W*v^)Y%k}M#oipdr*PYR#UhbF^KPJ(b7cXaL
ztr(=R3EbV?;}*k6oZZiMQ|ciKB-6%rEql1`<EmdOWE)3jh0#V{_lC5o+&gK`eCC=~
zoNB$4oMu;=JP+!>f0DoX6A`VixwvaJKRYd))!-yAw>r4xo%7s2)(V&Ufko0Vg5xEL
zOR#-|!4mCDI7?1ISQz5{j~hF5JV!fptYu#3o%6p-Dk@xn)JQ+PX{u1C+-tRWnbCm0
zB(LkH0RM>ZVnu%0r}Mnx{0~CDP3dBXPoI{SSH_?Xsd1+ZHr#~mCcfRLlBuh$TmAi8
zzs~!mX;RPJT<Q|!Ob=^xY{Y6fi40r{W=RW+9KccfF3ZPvGVn?m@^Woq;R#y2NnzY!
zcE_NqQ0EPZYH2Oak|`)~G<rC^IbI!CU$5ur2>&RKqK%*&t#!UdD&V-Zu9WhOAg7|b
zJkGZhglyFCRS3ezDj#O|6Bt4!YEXMo(FNmn=~4c-j+~vo%iPCk5OCQuwg*Vm*lR>z
zF=Bx^H9FtcwSKtTUb1(#t4{EF$d|@?rs0%g`3mDoA5<+)-B?Lloi(+2^@hF#wJNPE
zu8DURk=nDU7yl1eZygm?_x^#7BA_Usf*>GZ(j_(YAV_z2C=Jrxh$1B=okJtt-O?RH
z&CuQ5eK+s#e%D>=@{eo5a^{?U_TJ~&&!<LfUlNRcT}Z#HcXRXdlCwZnQc|+f7_l)w
zpJFppH#G%J?W?Ld3MANa3kl416w=O_CF8>5H&=HVFBt^98a?|HC*O2WaC4NIPP=q?
z-m=*(8@|DAV@=<H6%7m&%G3j2!_v}fODS<TH}^uV7Q#38AWdAc?&Ou~%2}JNNB4N#
zUr(2tRf0mGTNpTHPqmLJk2$MR#u5=VziBS<otfb)w=Wm+@tLkY<?y&VTUVe|a~IwA
z!>wy;LL&V~XIY2iJ@nsAYihNqvxWo*N5Yxky`z24LB)4-;{MKrgO@ja-S2Un*{<f$
z$k-Tpz)^4<U)kTm47xWE<EMCd<{u-W`d0rSMXI9kaycaxEy{dE1B0!y!DxO-zzJD_
z`LvcLK{UHwjr)j9PwEHesvkYc+l3xdE%MP%v(0RGa^&P)xKs0wcSRO=9Xu^IQin(T
zrYC#iH!CD>85yX@tSF<t|G@D5^~++iCL<?@;`QsIsDs6vjewfC;o)KJdY42F>wiN-
zDdrlZmCv#afj0)H-9!<{$-pOkQE7p2Y4r=+9M7j^U>GiP0im(vOuGEahK7d94#viZ
z4%?Hv(;A+K<fh*jzIA8X+Sr)pn1NlT-o1|6%fZ?@g_d_LG!juk_~J#4s~z|O<>sGq
zH5HZk(5Et<Tfnr0nwD{MB0Idalx5?t?;I1;Am)@Kr566oE<lRf>?)&xx7IO)1UAz=
z^zjW}Fkj`)Od6(plGLswYo&s!tmrPkx3~9Nz5i8Zc7ayl_Gm4X&1U)F1tH<82_lP<
zf`W|8DY@!z=lJ+|d;2dwM{@RWF`vEF?J^y&&SFKY{}G?|CW6p;_q{>uWfC;)DktZE
zRbkZBCe+y`<}Dh>YeUPs#~Lxg1?`&T%vGMX73PML@R-EJ$!c47*yhrb1`zW<;eU!6
zu^Y30DG9m9>eZI|!1Rz}%BjdCWAw!i4g(Dw6`ei7T`t{?qrbvAA!?eDr%c0}sL>gu
zlW0|Yu)A~gs;}qk;7fx+O<ZF!B=8ljw)Ipd7sH%&o{;Go6AmGp-m`334ppo%L9}aB
zj*RV8J$0TL7;r?opN@};^>lYT?9OO`5RTFvWT`JIwo&(<P!mYe!6xSuSl$xBAtz@4
z+Pa0b{YHXi_KMd<(e^^pLbGvYVT<SMk|-smQH?SWh*ilS!5_0COa@l)L8RR5yu8;<
zH}0$+gLBP5;E`tb5B&b}{M?#1SwTVGc5<aZmizRo+7?KF0;NC%x=mBlCp=22lHzh|
zDk=`EIeup~qPvbaOT-)Mz_PA&wbd*O??ZNE>>p;I*FJCcTm*-!C8EEhVaoGMem}?z
zA^{n>tc<xpF5Vl9C^a0A1}6U@O9qSUc>5q37l-`gA3mL|2u_NX4X}wB^VCnqe$;DM
zkb$)j&v+;*&L!rrM@B>qhitv^`G?PMWV8wlQE4Qd_rI3K=Wgc3hOZ0yq%Qm+<v#6b
z`@l>pcL^A$<7d|IxE+j*CXp3+c{~UImU&(2v&12OA*i_i;o8yX8C=1bcuej6o`)c|
z-DQ&=LzlwM{o2;H)IKqzN)&F>v@k-)LC2zy>r#t#A5Cx=@h7IbIBeoU_1Vi5OkYKs
zKB}HtEj0BhQsMU{rDy}WYO_|rEcN1aw}&_~GL*#h2t&|i6+XFXy>f&E2C&7MusVyi
zd->BEPcShtxw$V(E?SjcjK*9X92|07WF+v(#NM+XQ8bj5<?V}$?MUaCk|rc-0UIX#
zxRT=HjKw0p2Zb>HZ<^Cnf7P<{xQC}-lon>^8ysWGr+pZtI|)8fiUg*MRSP|ExSLz7
zV!!}!k#G9ub~tSr!goD4-68Me85>Xu8Kxl1bwMO=EKw<y@+U@REQpCA6uSG~*1KCo
zJLDg(t8MN!Z!OP?;1_QkRv@Fz4<h2~E}Ld%KGEbO_OOfESw?T+f6OR~vz3&@dfVDE
zYHn)Pln&laPfyblTX?19G*3=8xAsoWkaD`7jf!oHV?BN;L-i|aAn#ZZZp*>R2{OBv
zBEF~4A6m3ALk87-aT0%p{M|*j2T{I=u?4Hsy)ia&1^<4jwR_kQn)Ur_eA{c*u;=sM
zInOOc94VO8v3B@H0WK5UpnrI9hMtq-LQ_yxR%4Uf_%oY!^qREp>%|oRO>W`HH?iUk
zOXi$hR;kj?VWS!Q_2CbB20iJmpHV8{Q22MbFrqpnWZ=M;{M>$-F*cS<<&7efJ&ILC
zqyu|%oaGBRLO;O30QN?)u>wFZTv}R+Ju3muuLKOpC9MVTmG(Hdmi(s#W@+<f1sA>A
znH$_nZEaK)x-(B?;A+<-<6P#$Mvy_!$UG*;W`Ck8`O(<CC+WV|G01Imw6-3yXNdDL
z)L+TYt4XaApZJ45;z6`w$?6Bt16qZN7wYaVa@xw$hs;bqcv;f7$EREu?hMS#Z1m=b
zW9C16pM1G+*;qHaz<t?-eY%cV9Ua#u;V^!R&;pGsxW@_-q;K!cmk#iqE=VwbY^JN-
z^+2KZeh!B791k8W{~wGu@@I{M?DqrS<mRe>XlkDy9$M?wb<%z*uAGpv!(3Few*KDe
z$>LDk^Mid_@<Rk)ZLO<;Q5H+7lA;ogfjlmz3I)VebIoh=H+a*%;&HMXPJbjR0-R|J
zcHiZVa%1A3EdZEB9o%P~>yEXZmEYRnmm6=8TV$c(usaNv`^V{e5G73Rv3HXlPHEx<
zI{fr;zDui{3T=N4a+P=ME-jYM52>k-Gs=LV!A$Rm%ov!<Qz>o)5U-hZu3*A6K}_6k
zaVsW?@0+Yl1df#KHIGRqk}8j4WfewVvq=P@d79?rQi)eoIzD;w1n6&v7ARvVGSy7&
zZrkC1WrY(Iv}Khv`pyLN<>E!*yQUnw9UUFO+fqhTGl4zwm8q%eqD8yqm63vgz<o5l
z?CgRD=f#yi5@>2#8uaFH;L3F+iOc=~csH&j0mzUMoapw$v*Z!O<N34v)lASNzPO8x
zP0OzZS~Al0z`1cVj;(5FFz9+&MLXjjm|)uVu5eDrq|JNR9UE-0t0P36^Px;4CyDEI
zJ8fYDh1u;;2U+b?`;XkvU9fY2K#r`iBiGe}Y1X~j{>0mFQ=idb*H=A-xgLv#`+Iw5
z2f2lXpLOb;)(^7a?mG)Em!%)<17!!RZH?lXsXs(2-+=iMK2Yv@ym7o6OnNk8*?9Zr
zvP9HrvZ8FBx^mbU_v&D?unc6g*2<8h+M5M`UEOq;qR?DHlzdm5Cbo=>49aBaV=?P4
zC74_rnG5OXXLvFRyq<jTST>uQ1+Ono@AR`Z0^R1q>GJ+nyW|M`SLTo!U{7}A(N=k+
z_wg9|(uM!W{*hUacYW;BziOs#aFYNVb((-bhc=~lacy<8_|tM~8i`ukbH<x<-&W^z
z%`7R4M;E7)6lwCq#^jGc7PXR^*-T2E6*CJ92(HWMd9^l_hpu;gRZvhcQ)AGxs^hl4
zx*8oGF8FMl1x$Qo7CbX6OOCz9eDb8h-9<%FvF>u_@-YE}+wyWW(3R?VE(S&BD)%LE
z9(vxMdPdY!P*OJD?$iPiCk_q{upz=Z!5PU5DU?~A>j#*mney##ix0>D>jiuS=N;3N
z?#Ld{S^!x}B_Vt_OYwz`nIo<{Q?69!+lbn6kP%~20&*&@&R65W#2Mb2;hPD@3C_DA
zBRuiEIaXQi*HU&nO-xKA^%)28Xoowo668*QHGW==`TYF(4OIfX>rba0XENubwLN@@
zoiF>hBXpd%k9lhyjEoEhl308zuFqGKGG4kIuFxxuDlzii)`geinX}OwpZ~zMi9Z?B
zuq5Xwf*mVwT%S%iy7a-(E{;cwGRl(K%*HD$MlW(18?CIZ-S;yHO}a0m>BDvEiCBz0
z_U1*(pwbB(H(;M2ftv5U9BTOc7r@D?FZGpC|B_0qMk5UhW|G>_4V@9LgwWF*EHZIv
zG_Ptw2sYp*QYiwNeY?rCzirL5Jr5&}|I;x)eF>K<7Q+f|Z6BHKs{@To{2zR`{{r!8
zL26qx>&j8Kf>D1WoXZ{sVwphzuG{g(Xk_D+0K9upAApnw1_lv?3XuAf0XEj;DY_38
zXqTs1dl!Y}W{c0CV`39a7H`2wZc-fn8pO?ks6((+cE<~E;oy0lufp;93$+ecfxY!I
z2@!|Y;NJW@0(wn;YEE8BzmQw!<!&-w*CcLN<>|LeMmi3&?jR)Q-7oBV`%MDg-p<Zs
ze}e&!qj^lDfrOOremJC6!INcjwyV7ibaavu5^26@7&xzZ&Mdxf0ieR;Ld;#o+Lim#
zm)yA(fe5dS&g>pdCNk;s#U^@1M1&l)SvP`v?qB2<W@gROTYYwo^u7#%T@)oJ&+VnO
zjNpJbMbS66j$A*p=H3y-NEMX`r^|CfLV^*+!*c_v6uFD7oo$7P#8${r*3QY{!J<7W
z1|HKm1l8BqH$GmO?8UHv_0mu0^Fush`ul*y;#GWhemS(8m)9$u$UTWf_GuKoP8IyQ
zg*<t-y?(0WnSXr|Z#j?zyGvE~WdG(D5MWw@jLH3|iHeVpmuUW&k(<}R<SwUVu>6>@
zVWdK95*!|eUNSPuU<b*LNrs)y@VZv{);f-#mS+)FL)4ew5)aI5n%c2O^M#W)+-lz-
z105^8zpizGSnrlDYHCEL^yXN-Yy93`ilDD@kJc+~W4}L}SuocXfVp5ld9rZdI5Kyr
zUIh2z8ce&g8`h^}+Bzj^?w1eGAuflRQZjtUM?QhkR7Er347;rX5MBsDejZa#*XZOV
ztf_r0DHhvANyy}jvON7xD-MR7212cXFj%o;U-$kBh#KMI0u!2=F3&(rtQfq;931*j
zwl%8FIG-|-ZSuui0UK2-5fCTS-P5C|r*}7{Z~;Z*U}s8n4@8R8IPJg1&bv4s?>t;3
z_gD%8i-h<1hy`}D*K#<(n_I1RUNSe#ZAoM@<2dWOdseImA_Z<14jCJ6=P~<&s;aBy
zxl8b?KwSJNVY<U;k)LpBZOw3IapqWPkDosrK0BY*p{b?ixIJaPG?>yIfVGqKW+PMO
zC1WFT*~(G8!w2Zf6Q3!gfu)s|&H<<8?ns72F20Kiy>}u(+F-`wZ-%_$%R}W|2m&O<
ztAIxQaNYM_6Y2A$_8-<UKo#wF_R#<H!S(6v(D8epp~ViF7*>-5RJkWJ6K$d<njxkg
zmrlZoWj~t>M}MWc<>}n%b6h}27>w%TYs)%12TzCB<;Yk{N=k7AJwSQ9P~&tmM`@}Q
zgfzs)9_xthgXr1sB4i#D?d>bMg^ks_H$bYl>8V-&Ffk|hF4z=!*Qu3R-NUYYgsbAD
zT%Fz7Day@Vd$;O1-Q&nk))jOd)W-0t#aJ)@2?c6uYW0Y3N)QB-K!e$>1`=;Zx`l&?
zr$N?_hr0{l3`CL@Yz-x@Zvw>Um_G07!_JBnv6a1TIMXBd1qK*){>$sDSrW^^0q`pI
z)ULK!>I|!O+y&@d6z*&im@-TfU@m~ujZULS&}QG~#@lPh+Ra3b$<m9!UcT)~5hrJ7
zV2ee{<Mg^Q1sVlB9R^cc;-Hq&grRqmsC~fqVD(rZb_Jp4Q`rhx1oZ!~uns`g5+1HF
z+toQX7L|#MYbk;D=+Qo_yV8rCW~|g`*S+<BBU`3Z5kNsT^6C{SrBqU#ZnFT?v69dI
z65J&p8{2X7<!)LQC}u0or!U4Pcl8Yn<nGsk9Jf^+C+pU|FRKHIleLzfYR>0rxQtl{
z3s7LKrEAK|3zUNNc3fiCDn~e<rqpkWAx>Tp6c&}Qj+{h#?hT2Q?2mudqrL|R`Z5<6
zu6k%_5X|Ao*iCb4eAex<TY?dZM0y-`Q39|TOjkpcTI0^{B?uY@Jg19=!+|(-%-b`>
z08mQ}KION~fMa5lfwVT>udSWH1Yl#DJa&xd4WGwyw~mg>dfQdq)hX<%$Z>ZD*xyi@
zPgo|%@SW=eD?j{>j<ycmmmHz(?|~;CShHYa<ruQYcww_ZKYmmJ<`{@#JxcD{i=#SV
zTj8*q2u@CSnXAmqHZ8!!_{9s5gpy$b%m_i$+NYsI*zHv*$U=*v*RbJDQN6CT*1~x5
z@+nYH>aBX(+Yf_hV!e2IN<Ij3;uE=VCo9YY!Rku>rSatZ(~{ht_OpsG@^@eUJZjiZ
zvix|qzj8gvaruDTrS2trRb**pVr!Hz&atT&g3f$QPnzEd12Xu2dPZ+;CSJ80!J4|d
zqpY*C)&ckQIITa8_hr>N?-@{_l<Dv3Sxj=DySY5sojmR7j*Kq+3@f{uCrt7T{$s#(
z$hX&Y9UP1!5(4M&IEV--9Jq2mwIYXjo;6>lq@-Ztl3I+`l(S2KLS%fsRNwRpL^ETa
z?1l$rHAOQopg$(GxIEQ4UtbSu26-@`VqrH&mRPjFVu@l|vSfg(g&wNfYX0Bwhd^$-
zEvvJ&;>H_o$Fso{Be;if%MqpYt6THY92wXp58uai|EwhSMhj8|Va7SgU&#omcicg_
z-~98bn4gy*p#LKS@0zr%w_jN53W~4Ptg~|l2F5ZxH>%&hJpt!?!H4z&<IDNz-e997
z6SaSZEBy6$;SR{Ei?^&lCRlug-mO*Zknww>x%mw>_4-0vpuhj4ym^wU5Z;s4B;MKr
zoyLBtu?&fE5YPwmw?U(}W@{;c9*3BfgNexskr~8#)%h+&8+1EB^fEE1y^^4oHy{#G
zR#}<Lpj)xK@N_4CcXMfNO;thRozCB9N5%So|2-^t&=EYfiRV6<-(NK`))r0M{Bf|f
z?P+0=IcM>Fe*>x3b)z)rvErH+o==zm3-q42W6{5zI`P))kx_!Dt8EC;wu~$5pZm?@
z<1i>xV_YpDP&V|j-J56j=rsOYTTO?i;`)t83DMaNX+OKyKMV^a%tkrNX@+dX%irni
zeNdNdVU<ejD|sI<Fh!)kzdRtr*C3g)Qv?`e=Ic-5ladOGWXZ|NyAvN{;ad`Kt*>Vz
z=wE@&Bq=^VS2Ga_sFck^a&I!0!RujMY_m$7*af6`Gcp#+{`E=;4$RHX^7Xx%zK=aW
z>~;Ays^*a~=0Q0J1QK?(QVVS5FPbND)3I*Z$rM=x0!<VXi84%YM(x!CWW>wj<Sm|O
zr~CVV2+C4<IsCnB2zFIfd)Z2QB-&Q*0)eE?@66|$@nt^ODvs58gj3@e6cA8jvn(D+
zK#wXngMl89?P@=;gc$+hFwM<LZ%vT;gp4x{G9dE~XbkR5j7$UsHI`OayVS$AP@pm!
zvQ$wa#7a&}E0o2M8n*|0&*I{bqHv#ZO}UpkNwD@TDS`9tql!wAqVOQC&>!6O<*DBx
znB%PhS5HMk)J?QZ4W41M+S*lq`BQapm$>j%AWNd)rO$me5fk*98Ga5BhO&INfk6Ww
zX69C=<ks+oYT(;$Cfem1=YM~L_urNR@%womIX4GlWm-Erc2VU(X-*1Sn#F~yAh^S%
z?q38BPB6GXA|59{5NabJ@NYDC=wKk{YAam*=6F0ZHkJsKZy>A*bFwl-_jSy)GxR>G
zrUr+z4es`bioAK2!&Fpv3%b8S`Dg?iCU=d(kz4lr@ULqO1>ZBum132sNU$LkDT2{N
zKU~L?T|tVKm-G`Z`wb2jX$0V*y&n2nSJ0w+-;m(03h7Vaq<#IGpFK1A^=!Maz`m`t
zG&}krc$t=D0e4nl_8}-3Ut3$7uYKJCO4dTn>O3h&!#L0>-&z|=V+98aIpDo(@H!?h
zXSh_zB!bZvw=hCq{^*rbLYSu9n&BpYi}mt3>mUlrox;PIQkR^op{wccXi_(iR;0YL
zKOS-`42pypYFiHf#UKob>f>^@#8G_XVMCr6uUPa!U=0`XDTJ5}H824G`qk6ZlUQ0t
zW>uW0qqX(-E6(nY4w1KEM_Wj<_TRCrcMlqzT%w~1`(^;z0r<KN&ePz%o2`ab4u0?M
z?!Ny*C55zChN>_(3fo8}lJ6PH@{8<vP7SKNCa!Ly#5*p))I>|#UQN?EDJ_U}!xHjP
zDyR6t+q*}~|87MdP{8PX*tOEiiE!J$c(5e{4_qD)n*>OdNE8Y@Yj9ZGo~aLXHQk-z
z1yzl)Q+Gvry4_|)zNSwrh&HEFFZ=o26e|tXb5y^^>in)RPo)w#){8sHvR-quu-wg&
zCuam&aW4`>+ptwelspscev=gZ87t_jGNvrf4;SB5C50a3MuboC>su3F1FoU0NWiHw
zX#U)UegPi;s!tCeCxgBm^^c0;VrxgoEdJ_(0_hWc?A?ida^B^Q4Rv|>xAlm|8vsZH
zLawcYL+1K&{Kd`Xi;{WZBs~DT{Y}!}*?9&gAPC08w*s76W+qMTM~Bu3j|1ZD9jHgT
z5O`FK4?4hj)Cq=SLv*#?o8BN8o2i@2dXFi7Mz9eQ5Oik^9LUHG(wS>c`y3ef994^f
zB`FGb#&ZpP)b}tD0x5kfl=K*U!U~$D7T|kRj9T-&^smMk)HSp)EGcuNcx9SEa1S!}
zVBGj%&jUm-(mj{9I@ntQl(Sy^`^HRB2<Xr5<ZLz5R}i{{Wv%ZAB|=q9;E%N54>QG`
zD8UCCHeH$W|EQ)Z(7j|R-Qy>Cma4#OEOj8hL2H@3%L0xe9JN&#4<6LII&pGwfw-k2
zzR1WIZ9?d3Y9`AD8Fzgs{>KkN1B!}HSo?`CPWrL^!+jx{u#d+<Snk(9ynkpctr${L
z%;e?K8G*5Pe?^+e%TxDn(xH2xM@-7!h~j5M<HEbPT<}D4fcZZJ5}2-_YPO+2{;CXT
zmnuIuFsL4+8#V<DVTK}+N8vL(=^qk_7c8|61|K9ct39X!pZQ%DjTl@7PQj(({xNRq
z5$Cb;Tky^^=BGsG0^$PmK7OJZX>gsL|1tGntEX0Z*gIHblm8~P`Cl&p$KpGPt%KkX
zW;aiEgh=B_;y=9rSL6qV5L7%5Rcw_RU%%#nLgT^eqe{VhkVx@Tm9tI@Fnxpmi;nT4
z*dfyf>26>+_#Y*{USn+r-v=21Cu(raky>Nmluych_EAJ6tGoNo1v2@k^i#VyT|=oS
zSvE(n?{50noko}c)mhD1s}LQSHf#w`!B^1*l7buYntXqyoi9$J&WfYQ@K~~^f2IrB
zGB7kcIfI;@Y3>4Nr|;)~bMp%da{e+f7SQ!EGIoPzmo6mv*GDw{dr>|JK*VS=zY`Vk
zvr&hOTWvphO%cIed-;p2`W%0Gd1>`URCK0_QpEV!2on=|g@Xf*bbo(=#ZFQ~bMrQ>
z_(6cJ0+qiZm?_c$e5>H%G42M13A(m9`Ov{vsmRgh*kY`IY~};)w(?A5?vq{ucU@U+
zc}bXa?E29lWsw@cmFtD(8`!mry%6v?9u580-P{jG$M(nFJ%h4(%3aV+kUQ%`yTPo$
z(Ki#SUzy~$p@X4*&DGQ@0k)Q4&Viqv|7<jRefqWBH_iO^W+g;>Mh6X<bJyy&))v+m
zi00-tw&#{i%~qT81kI(Cz)@1k#6#_ivVqzg7B5Fx63UR|O~QfbXnd9;S!AU=XlVaK
zRaBNbb`SXJL0&(kmO(JR;d&!+>@4EdFbF0U*?-S92DdaIk5sF^KCV1tu=+J6C6v0l
zuB<GxCO{37+ZEGDMFlFuI7^^K^_xMoQBEyxz)obnv_5w>s7H?K=-d7p8iq@XhU3;2
zX=~^wG*;{(TJSW_i@t#S5&n1BmTIra$39N`ZP#!c41hsaMn?iHJ}E+0Gt`oIoh2nG
zLn;$Ht1l~&zt-E~AtJ2S(l1;@_G*+Cl|In&3x}u3QP13f>w2&$-jZjaX=?DX6eF~L
z?P!<<m>4c&4&Sfa{uBTdCBoihcQ>T@cDp4|<9xrpeQc&uXtg_lxLccuDGHt_1WTFU
zzS21ElxmPy(a7)9JdrMFNJ%Wz;VG25ko0FkA1v`@?d5gbOq3ytdErtWZlP&5p06Tg
za&JfMq3*NKL<eu3!4zH;z%>T7WrqFpM>la`=YLe#eWqR}#z;r)&Opx~Q|+Ai{T1p>
znTGMIF=xGFse_5XHEP7&<1lEI+Jet*skQTC={M5&p@GR=58=hz-Q!iN7(-o)HKD9%
z?GT1T2*JPm(msBUpn-fP*DLgeaPiSw76=(=T%#uD3Lo)*Yqh&Jim-pyf}voltR@$p
z6w$>0Xqy1ViFy#&Pv%i^!T=t6T*9AWBdj<RuVJI^<mxcs%0S&VcqBXag1Gl_{gEAH
z@JkaUFD6XdbO9^ynHCzvOI7y2ukt?^G6a1k(4~}gtFc=LP<L|^4G>UFpi+{ty;L8$
zvl(6F3KeS>ihui-$cr|3s)mN*EDL<4RnI1~vO^LV=@4l0Wn%E&QT*mX-dw)phDgJC
zyX}+Sr=$?OmrRhqMjMEP<;E~DD`Y=^RKfOy3P2knE>pl{#^q>)M{2TSTR`AJqcg~A
zmi_!0(*jiKUnYv?^VQ1@bt7|fXtuYuhyWg@xcaZZM#Vd7j};qH`=mU52<9l7(cX}X
zZ9Gl;j?@3Ua9LnoT=^)|_r&_}@OT+*LoS5(FZBUUU*mdL{>mqh%@H*j47N<TxTk#e
zwJdXJcNaI<3`QjK^K!EGAqiJ3U(dKXS#}ag9D_i93VbB=(fUmprN){JD$Xxo=wq8e
z1ypOl*^Uifh54%c+o0Hak|%F(U;g=Rak&tsF(mi>vI()FF*z0DB-zGpzpUK0bD&=y
z+U%&~dDg4YV=|Xmshvq~h~Id7(T5tHHRH7Q^{ZeplKgr<P3tpvfJ1c6qXgcofCHNt
zYprUhbfXXkR;#7C3b}W_!%dXr_2<XYyXzyJ3qH0d+czC!W6EFLl+-qs#Pnhre&Ld^
z8tal9POmZXzrZOn{FOA~#B-SH3wB0TBCIN^mDHlZ{np=y%$AnB)wa9HI%foE9o)Zv
zA4DHIY@@_J?SaY&m~Cp5n~r8kM8j^*>g(#J#>Xw2yzbGfmr>Eu!dy=PV$M459T?bC
z^reM52Us3XHhRvk4e6b3AwdWsyJ7D{YN`Mu<1YBXe4R!H7M8noQb1F%a&#Q%18y5<
zvf|=ceG|DVjHdeM2fm;&K|)Sm>9qex&=>c^2a4fN-~)NIHpBvQDAc(DCof+kn^-v}
z35ZBY*i7w2MGw2Xy8-%}$Y~q*y*eeWb7&~LF7M|(uj)Uh(>h|8)b_E8p2BLP3Yt7<
zST?L}na`fhPu@-{zy|r;4#!9(-GqZ*9*l(JTA;4r(za5uJi#88w~m$HdRrf*QU8o2
zPxErX-!AAb5r`b%s&QFeeZl;$q_os*nq~`i%rO@FucLj8P)^NlSFdJfMz;+&ckHG<
zELz?gIP2skC-0s4m-fo9StsBV61ZGC5w2!3Lw@un@y2`H9uB~WGo2TMpg>K;Dx>$-
z8?%Xvf&a4WzZIxvlkAmS_j|wNw<|wFC@eSEY<I@JKZ)0NZ|<h4DS5ud7jXuT3K3C}
zAKt&09g%Qm$mnG;?4_fnP4m6Wj<Jdz{$g<gS{}|$PFqvwvt8kozi`RtmzTSak=Ay0
zTcf$SAI5<`s|!fVCW;YF-+ut2Xt`k@v8e;9Y~3!AfXMj<oU2Ah*+%H184=!F#9U1v
zHqvA`0x;|7HP{t&dG*?#0CRS1T1g6-B!NcgH&w^A!Di40`RVJ+!UP39kfX_&=CFHS
z=uPNpJFhhBC9obV@{JalZ=$(Eamd+?+bYS2ntF-CmE8`9%CZ;N%PwcQ3*S>}c8b;?
zY^#t@OpcE;+gKH487VwxY@Ow}+&jpqBylXtdSu)^lKvM&QHn3iukl>&Ofn)K2svAO
z=ASo@jtYJ8rX=^=vl*GsE6W9Wjt$`o*PaE9HwV1LGgkvS@#E41wMH1c-w-thE*r}y
z+bFwD)cVBywof&50FH!Od1V$<MO0cK&q#dyrv!;78VuMFehv{oE|>>T`gfKy+Ale5
zPx7e6_E$k9yK%Y6?b(@A{*Aj(Ptjlq?5c49<{Zzql_A6Da+u3F(^vPx-D-9vxd~#?
zez#Z!Q9_s}7O4|)?Ncm{7b({oRYt1=@nZQyJ;lcJK$Z4a4K-OEJKmo-!)+((Y4IL=
zw(?uE=j2VVbcotHg3wNJ@cH`dl(3=bV46avdU?u_ZKvx|BP<&WS&M=LFFB8M;{pVw
z1Mn`owksOy6vOMVQutMF++fl|qt0snc>GvnnPx~7#j<&O!Abd!edi+9mrOJ7OQ7QL
zB1cM#7Y+tS6X?-#^~SLUzBRPR8&m+tX?<OeIv=p@v2+M&X!f=dmNGV5?|%g>zUS`B
zp6l|8R#vveg0Ys$hV^-Qd4K{1W)Z0FUjgt25HvtP1<<8-k);i*Hozqji2W)oXN5~a
z7xQ|eIPGBCZ5V+7YN>=je>9bpUXYNKx*U_M6bi4dtR!&R|6vFLUZg;gR$9VL;!#4i
z5~Y*T;C>0ZqvwEv0rFWyLda6y$7!V2yf8eDX63^-0zVyX)0*WQ<MB{SW+uUmj1SV%
z3{<W6AdU|Y%e9NOkz5?rQPEL3ZaL}cTkxRU;ilW`-LzSi!mRIvI?mj{xe{!eNgg)m
zC71BHkC!vWdcGlKO60fh$LFq~!Jt}o7Is^I-4zY5XK@)}B0fJR+(kUVg<bqZ3^eQy
zKbE1>WRh^E#%m8zci6qcjD|sNdL>QgtBuIQJfjXeptDX%%DOZEmht%-PP$oGhY>A$
z$l-H2!ZdQHHKh9`ZlQMRcVX$+3My(&`_b;g=Xl|lxN%l{gT;=s9zNNXdaDi82ttJz
z(XhACG-EKu+5E^+%)pGY+7Vu}-8n@ixqjAE^K6DjB@O3VX;$pNS7E#ocnCV0_!?)H
zo3niu*1euW&m`kDYXH8QF*BF)OilChOsTeL$2krhot>pqCV8;&)O~O_Y$E1UoT&0x
zu0E90qwEDR&1Bs^)P-EAxB(8w<(*7(T~%sy6LU4(AMPNekLg3Niomx-9&wXC!J`=9
zw%S`;0j<W<!rPxohRz53m>$~IE7PYiotmX2^g|<${pFA@>PiN!h8nAVK&A$QyODa0
z)nHN-z2<?jp>jnxn(+B@T6K-x4wLDUE*GRf!9P8Os%p<=a|LExZZvBPGk<LU%sjeV
zDK*Tp?&RC$$$VOSzsq7Du89%G*=6?R+sGph={2SzM}BPMxeo5#I@{w7rGOYE!$Hjp
zNj$%j%Tk()1S~l-aKK15!8esFQ|fl~eOW5gZL{Mx8SOncQ?Fzviv@xTv9U=%etmx$
z`U{XlNZK*w6}6NdYGLP~o3yk$3Nob`Niy-{84{>IpMW5Z(^HU?t652H4<<RtYJTq;
z6A>|yA)(SoE7^4hlBLxvEfN8nOpF!nP!YUaH8lY!qOGkguhBD^FK`di>z$t{C}khn
zoi#kn@|F?AT2cel^R~=#{8vdE+@oOk5?Sl$$kjDAq6p`5Z_x6+mzP3#_@~V_Ye3!Q
zLh}8!B%JF@e;zgdb{`zNc;lOt@-So+uBz}nTpn29M=><`n!(8|W=a+tNnHgsPLeUu
z(5~>F|EX~>8Hu!9U#JE!KFRn$;PZBLrgtj$TeKxh8Xi8~yt`HX_dD8U0=H)vn_|Y_
z+;BsKRi4|0TU7;p<Xdb6q!J(7SY&8N{xmNr-#x$mQfi!Xy%5%6_lY|yUg+GxC!!G^
zQfEg?@4l@Q4@lIc;~axt|5%|Gt)9nyAafztNQGfOk=<TE+!Xbgv0kVJm-j#u@Yj|s
zUBt*SG;7IDhiP|<E^v=os)BnXh#fa3Jl6b7j=Fe#dQKT)MWn8e9j{B+&2KDw#uD>V
zX6-_DwARACY*$mUu&_*~jh9+_qPc((RuLOp`K;UNV>2g9huv!#WhJFt9^JLl2a$~M
zw6qow#S4&k$D@htuJDfEWV{i4=qZXWTW8g*%k%Fj+k;3yO&)g{&1P$UFa;LX6?Jt9
zC%Bb?7boi}7GUQ*{@>1t2P*62SPw+ew>moaDDp>O&s6psHZmfF22_}uI^mS}Hei-*
zeHF=BSu_O%sv7a^IzY;Z4+~pWyN-;hSZ1c?(=O3B0ox?F_+U84j6S*rH@EA#3E;VI
zZIiMV?g617kW!1-Vw3S4HC*njiaU650;VDzHMN7ay$C%HWG)2h*s0FsxpL9y323p1
z$y-;GmYPU<0YPo&?1ta%jknw9ddC;j++zkATJE>gD$~>J2>$8+^#Z2<sk3IuI6GdS
zI+}cWdo3By)u5CsODxvBHkw-rOU{Vl;N~9h8?_&99h#DX&rF-Rl_odYn|XHk)Hp0J
zgyE2)kdx4h2=}d+dB(=G_v2fH@cQXYdkG6S<*1FCQ5oJtmw_ZL7Wu+gd`0$WMV}-k
zwLQxlE*(B+eX0oVE4xbZH(;T0I$q8)US*7d25KknHeSbQ=Q*GD%EnN<TRf@%fEZ>5
z6c-aOZxtl%AGnU_e4!hJbf{q)&|(|=?H3L2pDK0)Z&Nd768dR-|M7mHqqD0_FKAf_
zcdm68&(%sud=bUxvLw6XLk6>W0L@G;3LQ2YljRpY_xfV0-7q!fCJt8<Wcy75eU7Sp
zoTZei=Ra&@aUb;-#bBR%bWR8x^zf^;xk8QN;qn!U9unO13%7w8ONhaTY(WpDNfuvU
zE<q@TKuF`aWt0x>YZjL9`)hcV!M3>Ipi+eod-u+EFu57@%rq(2LPMYW$9=BRsI;Jz
zN#by?xoP*pH$r6Hi<_O(H!?y;M+Z?%*0?4dEG&YHua1?n5F~>Jy$PJBvP<r3gP$-~
z{BL9*KRyH@&ueLZIo()xJ{U~Y*E{``A7>@h@MeOGDl)tKwe2a_lAF9j=Ux-<?Vl{%
z=L2w6+>^*ir4Zip1GC%Hn>D$XhRX|(lCr?qcoW7KOv-6E<{$33%eT6=#{cfek9e)1
z>_$#)uSOjQX$za~{Gr8_PDUU3k<d`XY1g3iERUP{QZESX+$e;MyWVx68JF)Oz+`nU
zMNg{+H?7=#zPf|m{EV$iXgmO`e78ma#S7yYlEJC!NKj5Q*bj`2Do>)2CTkD+USQW+
zvm}`W#j7q$p~tg5*2i|Ht><D5jg9Op3yq0jHeGspclMhZ9rgKYj4bV<&VKg`w_(~t
z)+>FUS6N=()Y;i5%d)D#kvhSB;CdrTTw*|$Pd6qfI%ISf2ZaFa=dtg<KuJ(xKiS{f
zdQotM|HYP(fm9C@hfJw5?`P|hzXHKecHAUxBNXneyUn@H?*fhVO=|()d!$dEc&Qv*
zC#zkrQoWUe_wmS$?JE9$NeY2T{z#R^?6|OeC7;mdI%^b+JoQqhhQVfMXW_NcL&uxr
zcbR3w<>lq}4h~72wqt8U$CZg<GBQ2Ay>aa3F0~HZfG#5NrA$$Za${lPtBww=#xU*3
zxid6{oxL)Aqpr@4k&)3<Vcup35OqN9k>NA^yrrcDz^gXLre(j%GYH5$&Yr0Y*6<t}
zzovb1-!R}t6R6y1XlWA?wAL2iU9e=r4E<Y~Z>J#1WCcW<o1;-&wK)Z5SLe~NtIOFW
z=f~hMH$rQ6bF~T#f818<2TZOGe51h9EH99*vAmt1s&m7|g$AVKl5>L6CdAdn1%S*z
zx^|LOjWAhi7VOY*KhFjlh$4c%fuxzkrA1sSMxU>(BO|QhaFe+GMG+bviS@(lQ+nfR
zn&18XI&LQ?9ppD~o5vCL7v~pe7cL43#P&B$|IkZQ3$?keH|P?xtD!GIFd&aK0Y&%t
zxxvOzaO!l%4ss(03zO2wkWPl@*i=q#KgQa2ZB$H5iiFqUWOkDs$~g|~s4kATIgL&f
zFN|*^qmu&aZ3H|BNx9tqBxQ^TYqwU;xP_58^BsIOF(In2!dG?N8r<pantrxDI%Cht
z!op3L$2mT!juwgeB%>Fk=lq&fY*?6|zv*l_tuRF{tQ9MS5i%?<zZeAC1r=1(&9%$0
zL$=0Pj!whHO71BOb16vH{7mWM=m<@$5Di)UiG#-V@+D+e|2kRDS&){a4YX4}q=p9c
zBvMzT?ghN1!zy_IqKz|7yc+D*7k)m%gF7vBjpp8V_V?eM&ThB-!Y1dm!8hm-6BDD9
zPSC|3MXR)!o@%`H0<|wVO#=e8YqPfyjRv>J)yw6P5#o9-kjkF(_wU@y&-d?JK?n|m
z4(Qys_%dqxMM#m8l1im4wu*%(CMHOTi=XVy!ee6oelZ8_|I_VB=-1YV>Vn-Bh2T&=
zOB_=efMGYZIX5>E`f2j*k6*R#GdD82N8Bee|NPwi*RtBZF`isDv{j?^WCl52!=Py4
z!geW{Iv;kW>i^9>GSkFZEw%bfhMYWh&)3Y&ds<3yyDRHTnxTaUNIyS-G(fAqN9Nuv
z30urI7!7$Nk?Sh!MLZ5yN6^`V^svVSu#%fXIO5M8xW5CliYPH5t~OpzBe}Wx@NtJH
zNVC$T2N!l-Q0K?kaADn(IeS=AAQ$C+b0s9U*a!%0=b1vrqDx5k;NW2EegD8{zMQFl
zp4=ze{tZ#iv@T0Av9Oz~j?-C>E5s=r#1ZnGEcLXt#qIoiGaDI+kvUKkUAvvcRhDM#
znC)6oQ#XMe&96(3Arca`l9iG&S9ZYhDZ=0HXrnY?8Q;e<GO2VsKj$`6@q{OZ2{DGc
zU4L{L1!>R-auqj$M+ddLo^tZ?@Ct=qUi<ciNSNn&yV>#RUzMvOnv*zGEd%1y!8jbY
zqTlLr?qfU3J|f4byY@lh{J=opaEP@!w%Es~ZGh+06U;e8rwL2+)kTjAaL0YUeJ}0+
zv=TN5jy5gLRBjs<ZVVoqoJB`^4*R}6!qB>;|5`&%`G0+@2mC3AK)c3mxAywqQ7pp`
zwKTl?9NVG=q(YAA{Wdw88Mm&ScQY1J(<Q9DhFF%HcG!6tL7pa`Zb$<HtkoGK2CS}6
zFxCzz5O$WoVj~){F(FJE@+Mm5=JfR`8M0+HH35%$U)~P=k9Tfp2XJpCCCAfbAdlEq
zKF@up#)-4Ayj=bbdF^?%uVG<P&^<OaJxwjC$N-Vrf6JE2JecybCQs7*mIB@GzJskT
z-~)g}-|QxC9i7`L&HM(hC&@6phSf12<NL;f>Vwo?QGZ{3bNQOd>1E+U-1n|bCu$20
zZ@fJA@7OVLTN?!?gc3&a3B5yY2xysvq&`A{X7A|8*l8BAHVG>zU^vqFl3rU&l4w=U
zs_=m;76Tna-_QWj(Mv;_tk9U1<!VuY+Kbj;t<)qTA@PLibbrWj)5&&NLsCMQZ4A^>
zx{apY<0rY!DYQbApssg~=L-98?RF`%no_B~T-=l@%Q#u5qJS&WT^Jn_qGD}r5)K`G
z9pP{0RJ}}1&V<D{TjILfczM$EhQ7wxsS2TwWm#EQ&$}$)XZ&<-H#)j-0{Z!qeppPk
z)(;ghwJ@cK@!CSG_Jq^(gle$`I(vOGr+4}>|Gu$Qh!V!2<TXb&0m9f+WcyG(fzJ*%
z+1W2d=qZ2v^E+r_v82+mXo-06V4cNm&6w^slp$cJ-VwRn6J4mCzgsi~*7?H1TYK<V
zs@4>nx?h3V+X$nvK}xx4fL-#3J(3{Z%=8dC*HM$R;A_h+FISqmxp$6K<LXmYRZZuS
zf8(-Zyz{G<SUPi^D3+Kac}mvyg09gROR1dBFAonTRF*c9F_2zIMafac%YsMjAZL%Z
zyzlIcF3GK)IUqTDFKuU;mPUTxL89j<wsS|7N(S7uzi)_+`W71o1nUe3mn~!9?awWI
zfZ&BL&;FDpt$B;8w(Us%BzSSOE*PD*zP`RWcHIXqRdsms1$FN`K6acQBq{nj)LVdi
zotR%EK6$WcN>K{x`!~DbFICs!qi<2svHf0@Mg!VTm(v3==gDYZ|F=8uL9+8-&D4T`
zdI)Qq3!3pC5Rz^&t#gNBZP`7{mWnY_iCT#!H1PRVDRI}przx{FCInV3Lyv1YpdVgW
z@!mHk)AA3_AUEW@?=6VMJa|o%7ZKb=<*f+H{^Az;A@GkE^n87sG;u4=r~GU3Plw0b
zuTVl#(rVff3L07~<j->s)C%ToCili9&8Av6#Pxnm3`)pgLP#<0kVVk!f8zzPg~wSE
z1Ai$jT;5xJRa=}|qAl3z2bjgn&J<FCS|5ktD1?GE=~PKjX?*R0!fwMY`ZY)|*4BtE
zSjLs2i+}bxSliBJz5G1+eiK&AWS8nV_tOnlP`h{`1@7><Wb*7^BB<UkYx-Z6R5TJ3
zt(v2h9M(oVCShJ`yr@T{E+_x{8e1imh?PvuM`n{VW75UCD3JekaZ(FkA4!Y_v~*)(
zj0NHULtqg1njrizo+R@OmtHWokbt}z3}8!UjDGqA|IJV%6&R78fRgJUlNjX>X*&VC
zl8%azK0mwQ>sWLDOfzzHv=7nKGhSFxK?7y0>8cs%1~3>B$z8rP!FjV02@+w?v#7*{
z<Gwjlxo1Y#rc(XTcENzqytzm4rj82WmH7WT$9b3bKY_m;?~ONlrNyJggErNo&cRWQ
zLUA%}0+pzelAO9y96a8px+E`jofh`4pWCl|dzg2<z5L+MSB$70WFK#yxvMyQUC0Qc
zOV=q4;K<)VGzEq&x$F_#8RxH%J*U)u?wdz+vai;)wT22b3d>rnwlt`p(1m%58e8?S
z1Nd(6l!)I;;bn+W2^a-_^8bv@dc7Zce|!1}>jSO$<GT3rL+rK0NC#R*mc;KFdyl>m
zJbfjvq2)k(@^XU@jrG?Yu%v1d_zxI{Jmn6cD1FYr;R-^)eSejiDnvvpXsW7etII3N
z708kif9@aa?{DrxB7vk1foSO{OnqPYdQsh3?*Fojie&G;zNsWdfk_o7fO@^7f5!ih
zu_gJgSE#NlCMAi6E5=G%K}AhXPHIhERS7GU{zP5M9vuzBuVMjUZ{xfFE%}MY;CXs#
zdxpr<=_5Mtj7h(~PrLzifwl^OvkCFKfA5E8_V<B9md7te0}^o{y7$?^G;aF)#BG*Q
z=`7k3qs(mSYh;xdfR=N=F4_M56o|L-o?hvrzOEn`A7QUMKvc5%g2C-<;wxe*IJ=|-
zX#HZr$p62X^X+fz?$UOAf-XSCi@ATd*Woo2LV`L+E>Wz_A9Vr(v3Pjuz=(N0=lV2g
z;_V+jA=B){ZLH{Y3D^g3|3iT3sTl&jiu3YVb#y$z%KCqiXx-zz%x7Q|;QtS>mKmgd
z8?J3ZWH1j9{&Q!}K0$Q=lt4J`OsQykvk(th?&EdDM_p=z+u(QlZ%|ER#<$no?AYSs
zo--B~f5HIEirG#+SwT>K0h@ws#ePh93k-xZ+8wWXJw}d{YqLi9xsw_CY^*ok>zkEP
zkh$#VS8#LFXC)&5#zrU$!u4!$J-MPFN*Y`8DaW&TTo#lvKG+JFNV&mPL)=m%Nc=ry
z4vHb)GcsFOR}29|q4FEi&f3}?S>QrZSsCadr|O=Wr+1T>5)o5~W4qj8&31Pq+?1X!
zPw`PL$+%+YXHm`1;>;%&<pvm=qSimE8qC3k;|E2q|F0L295tb!KRqUs^Yvkw&&~h@
zLSf+Xfdgn>0pB;W!*P9hw53Jxu&$w@0lfU<vWh`=Dd>RtQQ#gN9UblO%e@pcn^^h<
z9!ShX2jq`UkP=knbU$g!iVQfbJxw@AA6#sg0>q%Kf1=`gzStx)IZ9@Ihy97JGRDS_
zm-m5!;n_3NsxMeogpAr>Eg1uxfH2Z<{$JbaOl>a`spj!M|4ZqdE(S!mK+>_8vh&X~
z2C&=2#5wznWb(8vZi6p*8SgXovnVIWv@O7rQTz8-mq*yx+hh48cyQ%>b%0F()TAuL
zPZy$_op(a}U3l68jleLf5VwFHtQ5)EdFtL|CH93A_3c`;ky!xxv-M=(tN;HHDXWg)
z#2Uxlo#kbFV7|Atl?N!bAl9o}%FxmhW-_c#tRNfO2w0^crR+<~uhWguz$EpCt1rX~
zs;W&JW}0W%FPWHtl%0*uV7wp^-^#WW=%BIyWn4vNJUu;KuOm1rB4V%;^wNbs+f7vM
zlUu}jTwfqk!6yo}ym|9R&==?M_?VW4h6ga51q7}V9WLa#$;imMy2L;Oe+eZwmLk|e
z0xcLS1t^<ejn#LsM8h6x1|ySK`ce|uz+>@hy{cv|xg&=N5e%cnRaI3@AjekML2r|c
z#c-?KtQbH;1^M~g<DOpO;o;v(z~Q4EP}C;Qb+i)gP-P~p6wC)#<!0lcImK={W4EbH
z16BL~0aPMZ@2J_paYaR6e<_%h`xPmvQE!ZxHM`kEK(o@)545tfnu`)e16ZJ#w6u1u
zgOr`!5pWo+-WVN`21g!gIA6K>B!Q_BfTL(6q!9|{sIqG3LtrwK(Ad~$^8xGu??TlF
z?ISq9Jt|NKTZPjXHOJTZPzjgXhY*NBQ3BZ@bHp<dAuSHi8y@Vej0_OQ*9~(8mMJkY
zxva7ZTJ8h9hg8o%JEp(8+s@V&h*VSeS@|0W61iPB$LNXo_Vz$3-8*bqVNf^S^13?6
zJw9T3_s$(za)~N?6cQ99S4jbe9CQSMkTo(QVrhAKC<2hMN2G6WuA$~Nq(JIo>3KFU
zA|N0jub}Y4&~m)M{nMu}78VTH3IWr_dRgExGee3*<*D)d>Saa+8a3!mrsTZ0gzCV%
zMz{I5&UYe{oT%QfA}Kc*5U+=-(zwR4US3TR5&B3$29c<)uC5gfpeI^~j(<>7la|JT
z@*`QHLBMP8#}9V^&p?6YRh+uAXk{cx$^*Ckg%9t9e;W_I{XJ|{K<esx>F4M7?49uN
z0091|(v^|5)u0uXolVVvZ5#+D_M2y(eCQBe{S`Z@l<}H{RM5>#7IR5r=v$==JOxWl
zx1X*Elhvo}0B$W#;yIVS+yO7?(nmW1vLi*1o%M~F*ulzbaH_w?-m}tdyuf_Y0hq7!
zfD`U2{CJ8E@TlzVE93cqsicKP(!bwe81G>(?FPRjM!n_a1ipS=ZxTI*bijTNk?hp8
zPzTSm3GeZf<kFH7^)ll(wbMGHqM}+_q%5lcBOwAbXzC?#a6nGuM_nNypR6q3pdjqZ
z*Pw-h)WnDCn9Xf%x!qplR+x^`ym|ATqSoV@OJ)DZ1QOY`ib?>G7r~1c`C6A*-+I%<
z!nqx`{J?I>uj6evCM;e4EEOE!N11Kz)3WV3&l`eGn2FF(&ASDRzXlF^)xm(UaMJEj
zT8Gy?G^%X?m?il78iix8EH5jVN)mna>D<W7&d(3>_b1}Ci3kb7ZR<wE#IXTUsv(6T
z)hx`+07V4E@41Bq6j)+jUJ#3@v3v~}Fg}b>ka++6!ranQMOj&RyS2SNn22QzQR>kK
zP}$S9v=CP(Cn~z&k`-DNhUl(pr;j=2lND3uxc8dwr|>1NJ-iA~oqfEswe_5UpdE4~
zu$zg2O~!1v#bG#P%raSSR*0bExiJ8IL<aS;rPat>_HR=q)`$vAl`AI0-^g97zDtqu
zdXZW`hI=to>(=j87d@lUVdo3m37vD;><}-G7y}3}BN#X6*$KY}Lenl72_fO>ZsR1{
z{rf<KqN%AVS#2JUP4T~mgcVrOY?2j@yGh^`0*H{j7i)T8uR)d=*ouig3Sy+{ggNc$
zp6>9HInCW8_B=K{N;Jfy`kVywoDY}b1NnF(z#G)IJ_|4kq_*j_>z1;!l8AU+dT*{>
z0|Nq<2=VdpKQ~{13tAG9pO7+==}ra>*|nZm1p=)aG#9?)p8mgUQunG0Pe8)(NuMKZ
zjkTxMKOEpXvD!Sm^#z*s{XdQ7ytO?S`<8KG-MxqkPsfurWFS$S1Y_e#H!#kzB%fbd
z5yr$Ql?CjRnKFag!otFn($1R_bug#0EMb|9sNzlbZ>G}}SCP>=2`pw8d9ezxi@9qc
zxv9VIcb$3wrba+LnT!bc_0~lBX?7NTdHLl1#q}e=kB>fyWLGeqfuU|4yGBQkOBoxu
zoG+%r^s*{$YjY){3nU9cdO&6L$%((hY7B$^Wa{;-A6aRPmk)uXFdd*iDz{yUTjgn-
zMtASedNvBMC&a`!9j-`OI9;7R0<6kz1R$Nd-JBauS%F29(FLq-SmkLVyW63xk$c;f
zvz-)^#fva-_{GHZ4G6$G&(NuQDh2}^8|Yq^gpG_e|G)%(6Q3<rsdJ)~(lQ+!cBVdA
zBCGc$#e{`_U2%0PpG{geuKbFGqXV6avYOaGNhqqPhdWiU1IP@XkTD+(Hls;8ZjN7<
zJ0oCReFs4B*+$nOPEN^E<njX(*ZDFZI*`EkVyt8t=x{*ZXJfD5ntA*P)%4oJ;-ZV)
zrlOWs{xw}mV_t*%#W4xf+*T|?k`bs@54!L=V3$XWdllxOi7sH7wVt?bJHU6n?Km4k
z3iTM+(aO8g_~8sRcZS$diWJt0qN2G<rAB6jDx(>1@Y?A#-7!gazBRs`%`i%GZ^$XJ
z(Y@ufdk^4mU%pThE`10d9<t)>;@spMn%Y4Z)hynkqdx=oJ}yHfntCZ2uM2}_71jIn
zY9Px3oLoS`9$cxXPC30mX{yV*<%RO~bOMem0ufni)59ukaPb79OG<aaEShtOS5s-Y
zMatpvuQg2s7og*=-6JO517M67(q#BtkISL`3AIIr+gv*&LS#uvt|z4GbxYdBNHERf
zR>EZ(tsERUoz_$VQdC6*jByUGabcyuc04?<uVqFua&Nb%T8`zX>N0LFCAl4UYj3~%
zu6?<^LHoOG8y4MgzJu8<j<4+Xrv!Sl>nReP$m4eOo?gzQ95gXSb3fXQ7$cuMZX-SS
zZF<Rb$1g51t!QuOJK*v)c2`SCY?4aZ5(n4iQ?iIYzOPGE77pr%V8^gJ(ZrYPvj48=
zuR*RJ+oy4x_|cXfdVpNjR(08RpLM@|w;fv8aMM3DB*$L=&mxw?`XFG}^N(fd{lN=1
z9%~Bbjc)E;cm8c#Y`(IqFdgL^VeDax6x>H6^#mJZn$DH9b*4ua8;6XIeD3UjPFnsB
z=|xnQfmh1rm}R=wDG>8o>j4yb#_2FWtwUy;+sX-bL^RboYIdVuW&AN{o+54D({YQ>
z`Qj>&vHqWVAdk;D703IZs4T?@GLPHEf!fnodxwWvA9+c*bZDVMwadjF@bvNv_ha}$
zU(Qri!}Ues`JrXpbx&c#@&5k&2_%0tRY;;=r%F;HJ>#}!16Ms3?r|QeO<}<hx!I^Y
zpXzx#DOLC`Xep;Ao2M+M{YPw6!|mL&%$0|l4Od~~+P5%dYdpK<?sP5gX*8S3!ARw-
zJKTYkUSe9@)QN3fDUAStd+|W~=y}~25Eq96J`(PS+o#&vNq~KIz0{@fLOTtV8=hl@
zo3ozD2Z6bD60rY=thbJ;D%#>kF#tgkl#&osloUZyX`~bcq&uZkx<inV6loARAl=f9
zf^>I-ba(fghkNh$jrX4a=op^bd#^Ruj9;9uiEX@vgbJ~(s)Ws<x{NJYA~ujy_-2;$
zWHyFNcSXg#R?JO2`=aJKzqLu9?fF4dLaT<pY^mE^!oZexOZNl6Dr1A8{=r<0%fsyG
zz=N-?wI4>LEDp|ulq>2c+Ro3;OHEFLd3rw*FFQW%zBe{E<y*Hv*Y(6qn!agy1h4Q2
zLGT)~mMC{rv~G~e6@B|Q>XpTe%OQ7nn&ecy$Xy{35vbg{Bl|6L<$(U-aX`H>Qft1M
z=!x!)MKTRV&{lS}XMLFk?vm#K#;ow>k@+e6l*{Jy^kc2>FeC+8n9eA+dF_7G7;oW-
z$jF}Pm^wT&VZTC}q14a%@lF@DZl(L1L&goIQ&pFLL|F9xoH>b#i2?cbplLH}$!Z=t
z#Aj*bHRSAig08NUfC<RUzs^v7W@O+`u)7&;b?G7&F=59Wx%?rOfNawC;_Nla;N^Kw
zQ-ai+x#i{kVO+@?pue7<98|fUkM?zOHRYTEN)9w=UK%%s_4kKGYPbXr97;!aXSV5G
zmTB3xn$?_dG~Esf`6wJbobNhOO6Mx8fEA&V;I+G0b3Pag6z?-gybPX-bLnqz^JX8J
zO?x;&R++%=mT2PWHNj*vYHe29{2^T=WB$ycP~;BDc&?h0<Lfds8uyFSyy8&G06N;|
z$>T~B#))Pf;dYgEStV;V=xgh1B7qN1Mza{Ww|-mB=iBc^y_DqLKk{ebsyv$(;j~?8
zU*YVnnOR@wHf}5;OmK^^{DjG3n4A_lG;A?Tu72@5Q^O68)wMHJe}mleLj4bo)%GpY
z$7taiKlh4?UjFpf)zh1-)R``n<b7?`C_AdgvM|#?9WLIJ+7WNn1y0;2bF;xMrP)>V
z)~Y>J*Rm8Yd2DvRtgSuAR4?boAtg2WXv}GO^bL0F)a6m={ox)8AF0-slyq7`Q3`VV
zPseQx+-{rI{?t=xH&rJRQ;s!LQ%;YLGC8kfla5O^p(&vG*qZQZ{`R^ZGOjV08+Yll
zH|^wu{V<vPr`a>ss+gkeq9PUi`FX2_@!bafgj}U_PI0JSI*2)RK_bYT#*l#YM|fPy
z)=cJj%ARPCE8;V-IY&lD?-FxGc`y4)NQfp!?ri)@Hj0}ki4;HX@!2Hj%D<cq=CR+1
zPBWle>WeulD+B99vyq~ZCx)1|^FuQ87gF}}6aLSFFFq}8#_(YOG}Xb<Pz>92Oxj_P
zwUrGZ=VYR$UfQOLj}Vt6N9z_5xinF9TU)x98j>q={k)n5j+Xpm%tA(-7}<tzN`(k^
zKNOTlc#!LYa~U9`&Hy9mvOhprdwHSK?{ynm3D2V}avlG=nLe8%W-}hlb~*LMZ3@Q6
zo0Fl=*s0O+^75K;KG!uf+Zg2?8W*h|$Z^6R?55jlW8kT@p(_Ro8{7O~PApJq1#jRv
ze=sVXt-Uk=N?&A-(yoY&oZK7jH&B2BXd$GT0w_xV(GC<9fW1WR2`FH)m)dia+?DXd
z1lQg6{y5cp2Y)D|+YHO-n{rrnD?-Gwo3%%Cd&-BCTsD!{&M(Y;ux>~R^zuT5-}u^T
zp{OYL#mkq!)K16joS@tquQ8>2CR%%0k}2R5H2#)^B(}0}Yy=hE=ffTSP0iY!$OHr4
zY>h(&30vEt+zHu@mu4>1jTJZ!P(--?uui){lk)(zgFRPcs>W0dS@!CWl-T(1n1#G{
zS()Ru(tk!pC6;1C)6!CK+AoCw;2D|d$)v-g8=jTb`MYq9+cw6zRb%+-#T6ACqXV|K
z2Y^XU{3L$droMW4!3p5CqhCMuB@+C6eKoO`j{!;%YHO%7cPvhFNyNHhD><g&b{wt#
z(2?KJBd_M{hqsLMcj)o2_5@;6%@4h$4UY();CTS7?DA_Hjh!noNpo=r4_Kc~73`GU
zA%E#{H*=!Ww)gJYmgnK<m(qETM6suAMUe&vIausxh*SfsgN>1gWMrMDh@CgfKk<lb
zEaxqywP&0*YsCA~Ig4VrqIAQ8`8X^=84HcYIsT=^%-s4|X^Z+jV#Gs%%URK`4Apm7
zc_6rk@(`Z|r?={LM_ph$FvPL0rJFDTw@-N^`JGI>!@)5~JeZy7d)E19Sw{9gz|>a~
z7~0fuJ^p&voS2MJ^HKH3$SHN3ywq%qkuYnW2)6X}bOWG$mIkvw{8jX`#AE~y-$n~C
z4XvCqT9@g`JGD2M_IyfAmS=!+zX@4xUhU;Hk6DP+F(EA{?NYJp#Ymb$cA45>7l`Vn
zB`8RFOYrmdc}O64g268P6G<%sO4>n}9o7SBDE)4J1nv}cV|4z?RS(}X{@M4$T7$gU
z$`{;gtB!9&?w;T_{cNz?=a+Hm2Hqa^dx2%|>`7T|ZRgcN(-&%0Z<V|)#|5I7oi^R@
zNbmRNO}Rrh`r&CSF;mznXjM2ESZ%zx8}>asaw^VCJNx)HLFW%vAE&p5mLEPaE4^P>
zU0q#Sp>=xu5{sQL;T<79!6X?qt)-=H66qo`Kd>GiXz<deRH+=}=G(Qj+PpLOii0B~
zexikjtBQVJG(<|F3<Ij57*wCXfB#aOAnH!Ws~kS|&e4<(t#^7@?pjiCu!)vI%6Bx0
zP7c}5w++z7$D9T?jzhY<YKePRa-LOHW9vXZw!8rm4KD$vY0~q?P=usbEzsI=8vCy3
z<c*H<D%660icfGns34pjtmaXd$qo;Xa~i*iU07RtKen;H?((l&YQ%%ubHUqxqko5t
z(~Rr<lRpB(pm?4{_K-LuIhV$3j5BL2Vr$EG+irvSjY?e9H@-YZyK&3?K_eq$orE~(
zDUJ>gXQ~*0;!2i$&RlAMf8|J(1NB43_XEfn9g*gIv)}}qmJO^kmX|{6XQ|#h&-@aJ
zdf_BopA~JpDi57HVniID+dtq}TDN!W-!Cb#y>{($skDr)j5Ok%2%+ihd0T{Ph4uEq
z-P&Dba4ssrGwn^l7V65YKIw&w2l9{8ee$h-++f!7&Yi%l{u0y5FGu#RgXKOJ?B=~5
zQR=c6c6^h-jtu76!C8;?@{c&HSP2fP-=v(Ny?iqtjCuTV2Lu7qrg$&PJPdsfDgIz?
zDXIvhIRt#e^{4R@ets7PMfr-fG$?duI=6Eb;fOYC+WO^dDD)0n4R6_ADpz_x5o--D
zyZFu&Cf(wF<A&#5(&4;Z*47WU8%O4A!xngaR{SM-2~$vPR+ua&H8<~uHK_&Fq<-4`
zvbR?>C4YW0jlP*_!pO^8TT<eE{n3lI)SEI9!Ze6SdUb!_6(LkgrD<p#r&AQ7Uck22
z&K2&8;t_I9PD_hi*iYmRjj;7+O{u7G9O`^nqypsey)N&4%r2heer9OE;x-0?#-_tb
z^rB9<m2PER36cjnnD1bazGEB`9-e|+GL^~OFT-JZ?f7>=pt>|@I<K-E099g^sXs{w
z1fr_SWcb@PVzY-1YfB+eNRtlNO3oK@R13$%N+YW1_bP6pqP9@px^)LZTGC=G`ywm`
zAd>&Q&u?5eP+Bn~N;=jw>#ZFtHJ`Y63&Fazt(68_w<0^)TOoANFNmBY>hkEkbinOm
zBE@)!&9pA`K5l};h6Bf!!E-R#sjF`z@6LBzv0V<SM+d(C%;Ks@$lh1nrlvp=$)+s;
z)5NGQQc9ifpmSAY7AXD@x&KuMN~Y7pb?~xCi949ZrXzTv{JxU<_3;4}`hOqz<qOk^
z3WvkoIC9s$<p9G_fEq`u-+6t%od_Eh(eN$iNjY?hjX!>V_6p{W;dnz71Yf33afmBE
zcz*FI-QV3+DKNN@<aL$gO>jP&o)$odN-K#`3D~%0y`&QrHk+e4rz!q1OpjVM8iQiH
zGprUt)2Um)iL<iR&ks6`c<vIhJOaJ$tWV1)C->P0IW5i}G<;WexM_3=_5FAAK<zka
zY0$gPN%`4BYjh}EjjB=~ab47xiQ3TE*E5anx$p9fvPnR29{IdM_G7z??L`gz%nsVT
zVBlF)w{38ami4=HjFp%rPW195)h7y|hYg)6n>^Q5fphw&NN{-0D^v$nq0yAX7h><<
z|2q+<t0kZvQk^i11X-=T_i=1-5l%<lk42|pGS6!M28R0${%spsUDP!FuB+>I=yx8Z
zGj{a+6d_<JkIdryWzh5ebi?g~mKbZTFlbDMZCDf<n`O3`f+pwi-*+-)51a8jx)(YJ
zXbBznnnQHk$Ua$GCgr$7`x9T(zOB!hk)4LK@}lrdTD+_6SP4C*B<orAk%1zdQj`yi
zpf#{RJSz!aDP7U5=TP3~)t>AWI1wiB+8y{nQwj2fzMu*<$D^%8&?e=zI$*&f=e4!&
znMn}|B9)F(NK;_u<qbX!7BDdhh%6<vlWZ8w84Dm~Jpp+hBfauUH)|m`ilWY7u9H`G
ze7#c$AD_iQk|AB(^t0RH5Am~I7i&*u;v{82wVwLkWPw8;p@wU{+)O-Fu|qf1oQQ*N
za$g9~>1$z4Sxc4iCL7*5EotW1<TKFS8iY0>OE;2)nf-k!Q<WO0=R`c7Y5(7!b08!a
zyyUbyD>Z28opL*sb7d0E2G!@omDNjqbMwO!V+KI#P}^Zee67G4sdftPh-I_v(9_W|
z8LP3`yr@rk_6%=gu)qIPXwHevyuOBWwM|<pfGXEOr%Ca2$lI?Kv(;|$Vk#CBtLCIt
zY|6QEraNR7;_B()CO2f*v9W&Xd$73=+g0-Qr}!~litc#L%gM@e?QD6HyX{1KdQy1V
zx#g&ZhQ{SsGS3g`w=Dz~FyX}rK`(QpaHyhoNM1pKj;r`2c*^x?JF+D-4X~XJt@!7|
z#ZHT@a<wu@9pAH~pV(FukVz3|R4uSb&znV-x=l@X)t)VEHzn*GY$pbjgQ)N^D0VpS
zcldew7>=2~(5OjvmMr9T)fjm4eC>DQ&w1VXJrADUe%zfdwqs%d9#@9xxy|k?u(A)#
zm3)I{&QhKY$;wJ{gOE@gd6kCR)G_5yf;s|(G}d|Ti*j=#n9kD@oK+{*6mnGuVU>O5
zsXaal?OG0(dmtI|qQM{ZD`J=oJzB&2&x~@9Hb_pk7UB+h5Z6wge`)MqS)VEm=5#H>
zbD8&RRTFJ`no_UfwvUP>b7vw`ZncZ|Tu@6rPF?&Y_GBi@{A8azAL6=CB=6R;zDCVO
z<0bXO)N>+o@-$0=<MVnKPJSwenyobu8M8Ps(E-?ylG1WL_Jrgm|2Mgn4_6sbCM{iG
zZ(qD)fmBO~B=7N7SM4D0;hBGe>rRhVSMAm^6?xz14(r5?x81Ymg02J{f|rWbCFYxC
z?W$intpuMSJAEw=2usaDzCy*kx&fvAOJ1IvnHk#+MvSj-nR_bP6KAYYvCL&^2{zVr
za~8fE*e7rP{VptN^yB^REv&w?orz2;vdT!Jwy0mT3tbxaQw7h|)h8i6m##h`l^WGG
z)^7^u2v5Z8ZEO@KXa=2Z=wfFWPjz$z_P)SkCkkb)o2Us`_J6b3+j~F!YfjxsSY)KJ
zn+(Hf@59Q2nzP>9c-?foV$(6TZhU5DLD_$XrtFzHIb**IDw8WAQjd#2s9S|ss(ntV
zb#qmZm$0L<vdGxv$(SxiC=5<a2&mm1o-+oijJG1Fgl0x&qMvt4x`S*Ex4Ns)i&WiC
z(ZtC<lXjpNPL`3_Gwsu5Ob;Y4M?SB%n``b-mGW=RYz5t|BAYh7REl%k3~w9xrk0WN
z8Hr+hjuL#@w5+GKZhL&_CDqlQt*A7YUY1MW5RxusoE(_~Djla2mwQJf(|XGjX`8db
zyyZIE*Yz*~FFtl7n7;CyuYugBsO6rxt!ac2J5e83G#PH2_>%$4nMNy`JIjq*1pTEn
z_@>!GNUrG&pLxPnIN-aH==fx}KUbPLb>nr8NbMUUOww?XLAGz)VH1BPpLNWCEjAG(
z8J$yozq&uY2UE6#wQ{BCXj*{de7MOskM-A}s&yjQGI=K^YkVCOZ^gy<XA4e*x;&PM
zSZH2|bEI>JIL(Jig3-^8f+@6w$`kH}O<S`co*i4u%_Eygh9`2hxyj^u58zgqJS=i!
zrJLK3%beFpdA!VA>7tos#y_D!{qTMad|m!PfVtyY;HSbOvxx;LdD`cSBqOj)!r7ZS
zV5Zi81r$lG(~!^nDCXf+q|EmGV29kX4B8-5c4jhYCqN|&@beola0oppT$`vA;c=h+
zR}8W%CQ~ITEqQiPy!7?j{7kxWB=c7E-@d~n#qa@zyYM+oo2{sHrN2I4ma(8J_ipS-
zTAj$|m)3rA&dBIa#+o6Sz>&dqKMxh<!JAlfAz!bJeRgZ}53+yDTxW7>;dg0k*F%NC
zCpJ^H2h*thPcxh&(|e#6fM7);KoGaZ%EpamE(C-r`gbheLDj4$9)%mdEE)V}9HU!y
zOAp>-{TYcl;A4)<{dII6kyorS`R?g=eovnOBF-TA0+v5t(lr16f-i}=!eAKdB-05^
zGFYZ?1kCsRXLMlryRUDxbzrq!QQh&lSV7&T8V0zjgcN!7C@8lCGUs2dFAlmf)jvvy
zk<qG7Kr9ZR25w1=A5yTe)i8Y0aNRGCYES@rQ?vyD`sdb5C%LRn@ZguxeGZT(JAgMS
z-rRGCzhsz~W?GjN^r~KTKhLFOHy<Ix!6~yktbr=VmxLLb$lOlY8zXiGbLl<fQF<LQ
zE|oJrg^Nir(E&+01>)K1<#&C}siZG0!`>i8HS0dY5;r?<oKm=ahYh1AXf#*+w==B4
zTl??Zw^^z#?^4s#rj_CZw_{fEd`F?9x~Ko^1$1cKCZwOV`?m#(`a;--M^g_gCF6N6
zA*C1|9qoMp0y!}|dn0d^XP`@~b6Z+n1)dHYSHdUpPZw;OA#Z;{J=c#Un7d;rt+=2#
zsFui99^V}Qj=H-^Lr)*aZ8b_>o0sGRlCsm&ra&Dl)H<IccR7m|e3E!}2n6XW9HQ5H
zd%hrX3RfvYNJxkg%7Tp*E`DrLAGXuc%Tl;Fz6;WMJjX{LA3yHkJ(=50a6NJzkGgk!
z?66t2>*}aH8YNW^Q`1egf~|o_jpSwS>Z-;dlFO|fbjZ-#fV2uW4|{tu!Ci6OKP9JJ
z{Ue{JU_?wDx>v`Yr{5FMaN18nCsXW9>1{P`gQ?^X10^?sJ$410K5nFJLBJg(PRKyW
zNNR|_!pwim?#cb_NqPnbI(quVJ3x+$A=&+JUj*m<V+P%(oUx)`cKIO4B#DZ83|UZk
zXdFz{*kjs3lWZf*))rKWFzJ!aP!RJ5aJO*4gL1pBTndr9^9u{E|LMOV{*`5~9asVu
zplsRge0~vHFx^oZeW`By^NTD%tUH@1)d(h&af_^jK8F+d!gHR&=%YP>y%Kb*=0^eE
zl27Isua3&SsnSV8+vaEm!`AC>uwc55@|acb$LN}$!cc!d-v6n8F|p0Za@9_o)9J=<
z!tA`mLjc&Tcxl#_(guFQmN!i6#yU0fKP_ax9v2Yx^Yn<3D$9O#9`~gGV^d%nxoCQM
z0}P~kfB*jrS8w_964<EO0bxD>7D3^2yMot<MoaEw6{Th>Oz4n=MMMx-u{t*H(d<xg
zb5|FcKj!9Mhk1_c(Vt3X323VQuWWJEfm01SUY8qVmn6JeGhK8FSY*S&FjjV$Exqvm
z`gk68RhHL%Qiv23J?gwfrVaKg-(>44q<{>2cyJ(pxK=#;fLx;%!a=_G_%TRl?e8Ay
zSG=+~11tt^46CtlJyZafYyNpGl5TrTAq`?1;Bl8WE#x0DZg=U)vh|+~yE-{}4nzaP
z8bB8(E7qm4eWb&~6XueNY=*eO4o32f_DxWNL|o^FE(Zz%Bg<9oc!W^He4^khT3A9(
zdb<7GG&=9a95Xt)h@T4-pp+mYlt$JKna;(+D#PGKabi+I9n1^YFRL>gPX1px6-yhl
zBsV|B;pW)sapV-&#gWV;4-fD8k&B~aMXOEzuU`(}0?BheH%lMOjzl=YADjmpsMrY5
zAO}sU*lST=1p6<QBAPpiopV#CO+{tz8ZrMAEG@TI{w7#YF;5kvjQcK>0x$kZx8W+M
z*aq5pM3Tyg%PqO2-=#%G$*HN{%WXqL?4Y|yJCJFPpYy%4QiPws=Ikx6+vQmm*T}<L
z10CrO5EB`{n%A7Je-??Ha7bQIMYv$x&8V|dW*hE*{Wi1hub**}*rFCUL2|~uixYY=
z-Alhph9cSVEOZo2R-i>)own_9BNL61@ey=+x<m%o2H3i}#I>}pF~0}o@d0k%33YPU
zQ>w~kNt_U#8z@n9=ePM{Z3w<T!iTz##0VLS45N2qL@#x37Y&yE24$0fUd^5TsXX<w
z4`H1|eRt=E+T08m2j_#7)ID-?5Mu?X6$&5L1qVy4joT;q_g&u4G};RAkC!;K?(wfI
zqy+_UvU7omAE+}m{#7-d<g(rvFQ;0K(}dUP38$HqZvW-_TbG(w2M=CT^kitNyGA^Y
zSg;0;MFc+o^(Cb2_(>I@eSp;t{Otf@R>!(87^P+@si~<S4!AUbyMw<Fv7RGH8EtQG
zceJ;6JCi>p+uxY*k&lXKzEiKjiGq^)1kTrH3dsqk5l)%dS1t40nQ%GzW@rtq&V8F~
z?n&6C4X)?_I>W)`H{v^7>e+1#rwilh`y?gRb8&vEC?ItA#ARm=15=B}Q?KGShGC6P
zORo>Ps}5XBFwe;mNGGYOsz(2Y;uR+TAS+0fTKVtaKOUEp2a|VE+?Q@yG-!Q@O)a}Q
z;}k8;O&PK>b{}v@_V0>Gs0OO>>!TKK8vm9SI`oEX&JKITji521r=bbqp2OtheEr%2
z8#t2tw-72tw_<@Uqdb}eLnJ~1JW#d1OTxAm@3de#oG;<3R0RT4XVX6Tptbtm4uoiL
zpxxneI>`RK4!ev)#`a{uVgxOlwt@|gRbRhfJZFs$!7KN7E5?1kw6wHRqk)sZUuVbb
zU#L}BQk46I@g#6Ld|&ompnd*)xWYzETpWuVT%CcKp<J;y*%?;}q+}-Q^pPUNJ|I#|
zrAd;5j=P4Nn&HQf%qGKt7b*eC2bct}j+a|$X-(I-I4KFBuWwAi_ICpBO!)Ab#y}F5
z0;Kps#s2WG*{R0@-Y{Z)`X4<gmBH`N4uyq;q=UxOBsF5*yXJs}7$Kou-=9Ag-3Wew
zci324w>G~8qy!(pedwzd^3+*6KmoiQhsa@}-B5{>rMIiA*6s2F24(<g0Z7&Q*|C+X
zCpJ&n+1_$!e0=;v4(sgnbc72M9iTU1z;JKAVwxp>z%4#epB`))rwz$p-<D#8yy!P+
zbbdB-XFRM|51iziO@K}VUMu)8aeexSfDwHl5i=zl8yh^Z`}N>L8pMh>)1ATpRq#Fz
z&bO$j=4W+3&d$!p$Hx(fN5lXlu&}Xt$Z7<Q#KCf_eT>a?sh>2uH5RicFv!8%M?*sc
zfu#a(7U#dd_h315+MbEfzmH)V85@gj<b3tY-qG<6z~un9BVP;}VglZGrU?Y;$Hq9j
z`9P#wXU<{6r&o)LipnqF@C+b@0N(+#sB$D=>x|pw<UR2_|J3GKw4jIF-=m@)O$Eiq
zj<rV@8kFP3K?M$r>AieLeMbj$yf$9E$d!_kDiSSnWFahcys?61!lm~Qo+V9`9tsMk
zb)|jS3TxztqpYi4%m4R-n*c9?@>Lc|<+10UYH!yT(Q$qvwKY}?imBRzxKt~+`hK@%
zq@~$R6uYbim2#><q~0v3&K?s{ZkGQeJ^eN?cT%s#lvyplz~d(8u>M9y`Rp0^uZG1g
zj20^z`6THOcXoCffgI$gPmIrc_PQGzy_2kR(@OI4%-{NImpK6J?mXXnlo(JH;A4f7
zgTf6_XA2}2!Q!G!NM>PUdYa$A%#k(55?l}sylg9M*TJQw%yykP*Zx+@;`u2y;!K$~
z$L*(-x_XJz;S1vCwzfD98|4ol3d>$)ZQP`<w0l;$+k?6;mrGuqo1lZ@K1|fVJA{Y-
z!di_o6B+t^zvMn<z=R-*vLyBmC5Ba}TTm-`(n8C@;q^IWaq<tqh)Gpmp3*5QB;*ek
zY~Qy}pC=|xz0B&$uoB&T4^&(^6_v3(4PJ9|^4vp~A?BFS=;#)#4|gUgxm4#{L1R!n
zijf8q4O&`15*cOXmCa3ZknfnE2gNokFSc+1^+_w!)2TfqPvElvMSO<He0Z$QgP&RV
zV)f)VB{rNZtzUsaG46M!jK4EXvX9&NNK!D-ElnX5YI2}v2xr!638NxV9}87MAgaK5
z>b~H2KpPMieB1DPoamu6ikhP0+$K4Kagz5pFV72!gKw++?JHuo!=Hkq$F0U|L4t#b
z!`c8O*Bu>4M+)_!V@WlIkRAQ&&<}{!-sBcm)&W&2-Ojyb=DNB%>hJJ8JG;8ltW~Ti
zpl`cVELf%mN!f;$T3pdKtpNA&9pYtXcj_%t$0q{S;{FdmyFi8@-}!#U-1mAO=M5(U
z6qLO>HxzFDpq19D0`;sg9)K$<4BZL2z6yXoSWyMBL<buaV*?FBy5Hi$!-bYj6&2f{
zvF5lmJ4>-DG7jsUgx$<!swU98x~eKV2n|9vL~@(eK{<JO%a5>Sm5YsR{{6nD%x=3F
z<i7(hnQwCALPB~VzKj0I%F0^S0+@lCnwqUG!HvMO8?aze*~xCYQ!YhxPev=(sz!FP
zL>;Q!gL7RG_q>vKb+jPYDiH;;Vnx>Y8%x)2puxfBdhR&y`z>p%EyYLm-4x9CjWw`O
zx)VJ?O|UPu!#AkrJ1C)xEf4<!XJza6?*n%J%E^VZD1l2VOpg8hK{IseQJX*T*{Z6m
zxw*MbO-w-A<d1bvh0W?@^(o9uAl3fDj<?j@(Lqm3o0*Y;g^3A}yX~Ewm9f%1lasZz
zlkdb~v3>Gwm}cLGhoj6UDgsH^FUHFYd3b8VlKbRAU5Uv6lY{4mJJJ0o^72NghJcw>
zd^%yyo32oJ%LPvDn}3~9)TTO=bkXJf?xM2{=RZzKB)7H-f0#0mc+&xdK_N`7gT@8u
zwwRes9`7y&k@KdSok0AO-W$)9qjPh+toOlgDOjKo33?yLv43$&j`$tvZFoJk*w^>&
zeGKCfcM>bWpEB!9kaO8<LS!t`PSMqke4!o|P8$>)Oab6gP|+CejN{Z<*U{6vINhu*
zqQ6b>JUcV90<gl9)lLAPWDK3~`OwVN%^?s4xix})x=`mQzWaX;!8cnDUTp(|A4blj
zne{tWPdfG;%`COC;5gUijv4p`e+mopGBXp}|NNOw^dYNpKED5~XS{G@13=I7J6=&(
zg8pFQ{Igl5+^-1mylOY*%Ry%s>X2mWgXc`(_gG#&a_9Hcr+PSClhqiHFX`w)&Y99t
zQ;jL^mtU?j`d5f}OFlPr)c(3)QJa0Vj^uJdJXx5H-E?*O*W<LwBkvNIys+{vb3r3#
z^q=`mBd$>~lc*I9_VWADCGyGf2{NlP?*=a<7;$)v^Ohy<8!Uj?M*oR<pU?sU9&qZx
z<h&9zAkh@JzP>&?XQuG>-OE}0`8FXTA<*Q+v68vf32EG|#^*P3=ssTsGew@qE9SRu
zpd$0}jepGU65`@L<3E*ZI7C8mNen=(5pdTe+>UpIx*QzJAu9igTLswhW5}}*7C8=2
zvp8~6I%AU;dHARymJkT!QOh4iw<j$!;C^wiL2?dWPM4z>Eqqg$R^rE<hHwBg+m{fB
zUI^3OpeJ27SN5%f>LA-sc2!?6<XcQOa@V*w4>Q7T`NcS9Os}S(+S&${ILfC;`80`Z
z5+mAPrI1rSBDgA*-YnaWq%^5{2p$KjshV6zaYtpGTz(%_`1&e3|3?CF=Hoh{rZiS?
z)L<7}q9P7+R;?D3y)k^`%#|jcHRV8BZGO*Etpu8Bpnc}2f2{xlXpi}1cb`T397~K2
zC9wBK*V+Gi0i4j$aKCm{&8PeR%M?zRWBeypvvd<KUS1rr(N*_Dfd1cIU-<N@t2R=E
zSS?d`U8i;!>c33n=Z1ZnNWglwb$athB_w5*SA-`irXJlWDZ(}tDtgsI<VEz=oEFA+
zY<22T=~Yp{M@jwXqeP09ixnBd;3}S9%Ue`RZifHjx{^86{-~~tK&@@Td4ZG_XTg~}
z@O117z7B066j9`F_5Ip!^5Q|VrJVpF>z_8h+nA+KAm^u}>Rv|={Oy6sH|5f&&$G$i
zz9`O$;?8=-3(?kP(?z7vqQ}N7jwuzXK2tS-TGDGeqbywZ@Hn~ReYTeT$2t=DHXJ%+
z`{~geZ;dz06CT5kw#HK!$ZX2UxA3$O03MU#QMnM%QR0!;ibG^|R)-Lho9;Hh8>c4>
zGGQq0lwXri3(fYT2WBQkqRBv66vg+>l@ep<%N3LuDRC1qRXljv1EPId1Ik6Uk5x4F
zDmVbF!bQF)UsgM}E)h&d)fWCVJcj3s5?8^yY9&9PK#lw)6yJNuSAlFW+Uj-%Zh(}R
zz|?K696f#{l-?bUL(YwDFW~vvI=TZ-+ARI`$+vK?LXa|yjHJ~Ak&OJeh6=t$=Jpp6
zwDp?V+*CDmLPu9nz!ss>=j1eYzWq2SD+?sq7#Qg3X|z!^8@MRylo`kf8Pl_j6>$og
zQr;0MH8C{gO{zVJ{rg3`Vx`NG*>r(syf<VXjtcUtMRbw;p7y0K*Z9-wpNgK$suu$P
z8tG%6MA}(E6L>3Wjg>tuKeZx8i5!Vk6`>*|WC!^$507!b9VRrC!L&9y|1lnxKqb1?
zah0Afk6-MrqmIX(1MSV$D;Mnor;R3W`jxIS75B$i%iz0g>r?H!wt=2Q-{cM(za$8B
zOLTMXZeyi~4(cYSG19>RL?n^<{MGA9`_m)Bg~f>Qa7L7T%5!-xLMAPg8;#Unb{JT%
z&X@E9^k<eY0!~QuZtb(9pa^0hK@09w5eNH{p5{W$mqxMK_lx|qI8(Y%9bVrd{(u%2
z8#lea3VLh5VPRN1=)UaLcPL^vNMQVV&-75A%#7Cn1xYzU>A9Lmquo1KV8T-7o;Fvf
zHnsdhuzRa*^3R|8`rFHe9+{b~bsk)Hk_>SDf0&=N$IzLl3!HvAxWoLUZTX_z{KlI%
z$WALG4)VGGs#Cai_1vc-m6nFOshfPWvd}lm)1=>7B>wzam?JkCeD61Au{u}KXIkM=
z<|OVEzj^WNlk77cpoMCGwK*>oN5@>xOGMyK^`=ry$NmhpazNcENmJGpD*x$;djo|I
zhcTV*hFn0oeljikfMoyPUuE{k!>Za|&!M_Fx(YGv*EGCXzT{;*=K84MQBqi#m65B5
z5EU0^b>zFDh%uD^2rcu$$F5sy=Oc`0Q?A|a9sKX%=vqJ$@Z5c)TL>}eE0_=#W<myv
z&kR(ZV<hUQ(!ap{{$$O84-K@D_vX9?czU~R*jLZusvWoGcgcR4TKfY>qtsAU8(uqb
zf9Rb&X_`*W&~<ZUh*h|XpYNk`F@2=;1d;m?<=H~d`N%gSDK}XD&&iRu&w{y$mNdei
z?v1qvL~@*K7Pf9B!(-S<z|BC}LfTfK_$C;<pzXfe?*`8cPMI&a091hT_b&4PwgmR#
z5LimwaPxx8tz%FLe?Z|c_k~A{c;328;T-F8)JLQX4GuRlekA!Y;I~FuOTHyJ|9N<J
z)}@;ohq!U$h6wlxP;&hs0`rwP!=5`Jn%c^|+k01tpkYEA@w<DY%cH|aUl=#RX8Yg+
zntAv&6hUm{S4W|$zo75NP{u>UCbB$PE05jAPyv1U3VXw$4erK(#Nhw=D*f*7#nu?+
zm<z#DBiyW945Yt7KKgpQ{47eaG4v=9{b%i1^K;A!UUno|*!|Vjf|yj?%el2mR3Q!`
z9>dKcKiNztzej`d*=WDS!zX$Y2@BK9<sTPcn46meRf|>HHg2?b%Z>HfeD!3N+g!}$
z{z>gArg`#O^tR=4j!C1BG2JEi<w0J%^VjlIW^5~ed}P>iXGCt-s2k43A7rhaSOfYo
zMpf^IL~1xZd;C~ya=iTXU|mc?ViN2Us>LGu2L=Mkn7!lo!B=Rnuq$t(EIK-F7i@>1
zs+n0h`M4iL?s{T4S#_M&`6IB}bv9f<Bb4=Rq4V*;kU~-(WlHkJUK<0D+Q#iACA$E#
zOvyocAgp=@L%oHSg+|!j6e~Yj*=$RG4pmPq_e6Iz?Je&OXV;K(Nz17cTy|Y^wA~yZ
zD#dntZg~1DkbARw>td6I@^Gf39@{zph4$pa1-7u;X>d_VkTKQzhq)k(u3S@YCxM}c
z#f#0wiWOqwa;sjek;RXO?!t{11#xJ!yZ(~gmmQ7jZEV&`);lA4S(u_xue%RFnttx8
zvX`NxwGRbU`Q5b#l4s{gN0$nhQ_2eOWFMf9f3mURbl9QB0!_YhwaQx~VLsTKK(hdm
zDw(uS4u>5@d3o<O8ndUyuhIw!@d2*|N*JE7Iiiy;W5gb~5yvnWiI*SSm}R=6kwr4}
zt8#7H@&H`~K-cS$;k9Am;Vr`IwXQh=r?%saLXFT7IQ@5i2p9_u`|T7g5_X#a1Ibwz
zXBQ51JCI&iE<6c_EVKG#)EK&#lQpKX)z#+-Zs%a@8HqpTq5!jG@cJsfWBl5--2hBB
zSpUB+KN()&^79b|<;e#bb)`@AEwy&&UAFW(6e?Y0{Ji6zbk(J#-i$^M0n%f9^r!gl
z_qq1-+ml5$`Pdq-Uhr~UoN;CuWf@oSFf&{lT@SRwzP++D_hVd)J@2BdVX!5!DN8Ii
zcs<f3m&e_V)v8QE(0?>@#ZzpmrP`jt`68+!GbYw;lm1-`Y2h?CrLr)!aD(Kbe&4_p
z&P<>F&2l*KA5301=m6>j6k`ookr5F_@vmrCoLybj?d>ahT+r6W%X3OfB9M3Y8&ig0
z(Kc1E^=*fJ-!J=Le{6PA3>r5Bcd)#yLOrl1)68Q?-DSQ{k_V(LQnfIH6r3+z{PXkY
zpoDvXhsTodcIoHmS38&+DE5|=#efmD8|XyDJkEcUyl$76jlAhot+jRehxiO-CNSO7
zw(Gs`1O)^nZ-eD+g3Cq2YF>?KIdsDqi_hq`dq+9)4(M6l%cw}P9tG>iVy*Jm>rWkJ
zJW11B3BgxiuTQq=eTW-hzSF_0mQd5g`c!j{{Bm*PSGZWdhMG-B0=<4J`PU?riZ&T5
z8M}l|9`dnMx5GkjOLC>OpQkQcZ%<Dt`vjcqBC~i+Is+@F$ExXZALCEIr~s<TRX$Q1
zfX64}3n;nl`M*$8Abo&^0qI?S)hz?K_&3q$znC6srctT5I};8<BN)mwo&+g?CO%oW
zOB3}jXm4+a&Ru&nXQ_DX7QZKY-vb88t~u{C?cBx>C+}~RmzQH~Z-<HWeF~1}PLW=Q
zlBj&-aC1t8m!-Q}#6@Qp?0R~=%@@3VhJ2obhYE7e_wv)up*GgU57ze|KbjAj7}%Lb
z&3rs@+3qVI7ibMywlh=?GWM-?TK#t9c9%d^va>ekQBFn<?F$(*zu1cta!zIm_0-Ql
zc88YOJD&8SRD3R3E+n#XlOOS>Sty}ShsmWTrTtw5#Hxnye_PwzbPTnp8%^LsXtij@
z!q)}6P$@Q*i)&>nLQXae?f|348`)``cTO`aH%-Z?IVB`SS9)`@&fbCv+iR=Ma_g5X
zFydQfJ7b1k^F#220gD}wIpP9?s)Cle+I!DdqhU}aIt!T@9)aNOvYom*5Bq#{q5cvT
zJ3G*}echef^n%nk9292eMIw@QC`~x##)?h1eB-kdUnQ=2F2)o90ED!fyUb@jLShch
z?BOdn&7MmG=dFCQ9R1*`u(Qb42D!*V4e8e>_Mhm#1Z)V@s>K{L-F`Z=(RD_Zg1lf9
zJ<mmym>u2ab?nC^aetoP2bNKjH%3fu+DpyfKzn<_&VKm!uYGPFR0L7?#PaGsOLU{X
zwmln$u7um!G<xfo@|Q4jL>khiibvlkB?T${vc&|ai1?K4LnEnz*Gx>kAlfa`6%SzD
zR3Bhjtqta!LQet6Iegd(x&Oy%=jX?QWWh0pkJnIc(Iec_!qn1oop&V{sr0NqCh@2~
zyzKh(hb~^>rNxwl7rS&N4|A|spg(S3+*#Gy#E-7p{j8!Avz^I2RgZHcx~#G>e74@L
zeVW`ft1+Qj<qlGb8}mxXER(OheZGdL*trpKUS)8T+oXIN71sP0lwS(AL5wmaM8C*n
zZZN06y?w8)&I3eoA$ed*ulqwHU?!AaK{S~*XdF>VRAf+nbhgXwbf8*0oxqxPi8v~g
zOsHuiceUS~tOlU7HSj#J<DK?5);Bk&D7ntc7vs$fia&}3H#Rl6oOhH09@$dL;vVXV
zdVKuqP~OjN*amb87bm@93=50%0Lk@%uGL2WF9E}M7&lOGK3_}Vmik2hdZ&6y`tV1p
z`>Ruv_nltg?#EI5gG10^X3$EwF=xtcY0{39n=LCd{fnjk(84vDyUw%sWyzmVojZ-^
ziBv{ulne}vudmMb(Q}<TuQf;xl|;Q_w6~WW(!6BOJ6DuZUtU`0f5$E~%q(&Fq*J1M
zG_@;6A77hbvVxalavlR25TdY2^zfjo+}ZhJ92={x5nLxMDL^_+mm)M27x2~JV0@!^
zD?aaTa)CxFg|2s=2hEA;SAJ-<2V8aJ+1>us@yh2Z*-jNCxSm<GBnj<ZV@v5`;JO@#
z_S+0@=!NR(5cr3g78EBXB|%FYpAg@4yz2O0V!d>R^+9$t@ZE~S4Es`{E4e;ie0t_}
z+qAyk@ZQ^mYkXWk&Z>m-oYDsN5`{1fU-FvLS49(BT!w{YO%?r8=n<g)#J8BpTLTi2
z7DtKLl026=3WCGk3F@g`$(&qV6KTe=h302PR;{-?uT7HW#I)!cx@`(xs^25zJza&k
z5$DX^WMV(WTy?x0DNm|=U?#5AkRP5G1H-Va^^51Gd)RrVP$%8;Dvh_kxVQ!}f1<`E
z)ERpzlq$IQ6PS>W75je^ci3C{0}TDIf=o6m&qtbvhqJ)_X<j&<%K>D8J+DRi{ueHU
zL$$knZ6X~Ly~~(B<a{RaVXB7AeacwL(vfGxWQMF_eO3d!)jK{@3HEF1jXvMH<x8dS
zN1>dZpBEP5Upg5BJ%E%HP}U0z+)#V|ha*6LoYW-_g3NZ7mhCN4**j~!d=6Y1<J?ut
zb{6-{qV8xO>rtN7e~}7Nc}w(*O-7yoZ;WGjto#*g40qb^!IqxM4kd?^%p_?iLaMKE
z^oRK+Nq)WhBIMYOrQ$hy%%IaeVSdP4RRlI1GbGA7>CzMWhFm!p*NUL1j=y;q(UEb1
z1_cC46o!)%`lRS5(9koTa6IH5Nf9H|sek!WVM#>GF+-M?x7s@d`X_{$pPIK6R}>Rc
zkJ4|_<NeBwyg$De4J=6*#V|h%55voPzO6dw4iPdcVwu@u&r;!KWkO`d@<ZrJlaF$|
z?#5=mp?!zo82l<!F!+$nKJ@@u52zK~d7o6yb(`8GBk$ww`h6;>!e8RrxDnu1VM8&%
zd{qM7)VixN9hOPjZ)p3`G&z@u<%Kx(Ki*?}aIV+ng4dpojQqIDe3g(54NbH5Z91Rp
zIR*9yU;f2GZ3)ce2&hhGro;`es+@K#WPQRY;;d%>U^pm>lOKMEB0=HmMRoy^!1Nw`
z?*clq5V+OQUej#YzbYEf!9V*14?0aZ%@;)}Y~9!j5BcpC;Dg^>eV_MML%pN)2t#OZ
zB`yoO9mP$V(6<lNp@74^cQol4sK>bPwvrNf@yp1b1TNhBs&tp~J=Fg5TjgG+**iu`
z>c3JlG9UHLyZG<{Z2+PzXejas78=jbw2i~elr%Me7Avp+s=;~_0e~IhD;Unrr}&rq
zk0p&Yvn9I4+3Nv9YpG8~h?e<^<F$gk9F*PHp?UD~gU}ZD$L}*FfqFRa4)ysX-Kn9s
za`OvP*@A0&)o1@^Swiq@TMq(7L&K1)So9muz{w#zd>)*5HJ{BWZ0aHWXbu8wY~322
zc&n~~qQ+I-hjK@MPNG|w{;!mpoSeG)%KU5-Uy!Hg&$LKM3$1H6P*y)Yh_#+g%eg}=
zrda87a0fSNvVr}1>M5Mg?#EXZdfj(SC)B2)oLfSD7|LN@uP|@#m^@``M(F<dq2_$<
zxnorbZSw~xih*t9*)_$xPdzye%vJ5zsVGTh;&6oq&Xvl>uqRzSy}yAn&lfM`)tF3+
z`OehIP#Fj;+~4tSZtM6yIDpD}+s5v&Xw>OGfbl=<t<94Bo1c$Oh*Xo8uY-x^57#~B
zJ<o-w*%Jazo){vT^@``Cz1nD1L-%p3_JNnHVhdF?%8}5J$o(67-L|%IgdY*mJMe=x
zDYx^v2Pjx<)87=@lEXrMM;!#ZH#sld@;MxKLk9huQ17g)5EJ~(es3r(Jh&~kon?1h
z#X*4eC*BlaGw1^RW=Gbnnt~pJsaSzK-36++jwSNEu@*8~DJd9LM=P0`9+{+2{!LIj
z;g{^)Tv9uU?(!nJsHSATN)I$|QvZRpsIz@8%Xd&w<-;b!X{MvjTQT^xdfr{3kD%cE
zV=|e1rGfDJ>V8MO!7F{zUwNOUkKI#V?M_8OL2pk_2rS<y3=Y$tmNrCh7f8AVF5H78
z9X_Sd2RWj9?w<al=T3z+tHD=Gm>_`iF|=CUqY-@saaFS1AG2{YA(GsB<O2ut)f;}d
zN2}rA{gszD9fz3LV^x2Ax8a?YWdR6M|KIn82^+h-nEQF;&2KJ!1W`J@(!BKpvSSc%
z4Y}VG(drpU2TC%hOd9F`CN9aJ<mmnB_`mOta{Vjk?1_Ei8U`(zM{llr5KHapxJAvx
zeXj2?zHV#Lk1--+27ekohXX5_{@DzPwn>nFa}flKrL`!=7<OzqvgnwYI=B!!X`0Zt
zQA_WlW$SLLNme9%|5STqC~Ej&h`_8X)9QAhez(>^WhfME>+vJEkvcii21B{^6>b+1
zBwDbeo|GLvVwOJCzsg#E-h1jE&#Z4|V36LLCNaqQ2cB{3HZHFJkH;j22GG6&wcJqr
zdp$I4Y%y@xeM#c-mx_d_@;E61!g+St@}l{W8$0zkjHxt#^NA)5<!LbRes6>sE@FD*
zWU3iLSa#@E9KxJIm=t+)2hvaln3tFrJNMQm$dNbBmmK+tHj5$m`WA&J684|S9_njF
zizA<A{;jhiceBYV2T@T`Bcq?>ZzQE?#c#l<R)=Hf@DLjtJ8g=Ghv&Z4QEK`0j~_n_
zB+JXn0N>Ibp{XF_Jr&r!CD)heb@EO!o`X&EH;$bhHazb~+SZv#xCC(}#AM5HJgY&A
zGbCqk_+Yz42&5Btub2RVv-3xJSeE7E;sfRv>Q#blAXW}ajJ6By%l-YbdXyfXo&s;)
zfHr@YL&3p11+^N8gQQFY5>HAxAvP8iM{Lkg5Yf?LpY?X)5U4qIf1Icc`dGBPs~Vm)
zoMLZ0d}%pel0$-gDvCWBeiDk-qfBbou+)3id+gk5VvA!XD*}=2YXbf)l+nh<)ZE;l
z)tlUQ8>+c<EXL^#zqCB>Ub6<ZNL}555>pj0aRUb{$bwmn2iGnyP7fg!ZYTZX<s}s}
zu7lKUQ1~iXhuV#Sfk7wltRN-zCp*41bH-ZL<#?VDdP?_d|CAgP%%mqc9>&Lkj{fo2
zSsz&U$RBrfbc_n<$mIrw_yKz7;^rBWH^p%KG_^|t%%Q!K1TyNv!DQTeCwoLNSbqEd
zeezLMW4BPDkH|UUXBg9gPy=zJL6*~De0lk6q-IKZIIA^g%^(;|z{o2kBxL+1jK@g8
z5(UBU2@Vv79y>dhW>pCZm(W=PGtE9A%R}L#Qo6z^j*iNzQuawoSlH3xrAvD!P-oLV
zalLpE)C+7XRf&&|drPlf&%OYy<>=@LreWgIOgVs-D7GmkA|g^Pytvr!=w$;LgYZf6
zPqXEE%*@Q*cZfLj+M|Fskeo7+#0HW?5?La+*6V{4gN+BE$T2xN2|_>QU^g*U;{s6t
zCX~j;#)}=Xk|aWv>EH{jq!bNP>ceqn$&&AYT@(p;@QxR+L0(pt0B_D%@k!xx>vT}|
z5uTD#QNexiK=9o;7&1hoK=BJwoDbYzGlfcY2e$IvE@-{)<#uc+K0pyi95Vi}U*Fay
zm<4ee^Dd<q8VQ1Gui79a{MFy6O409(^Q*wisOREJ>q?@j(F)t>TDUopa1G_TM@|m?
zB`ZRgdWC!B5jS@niPg^BS1gjjzTj-~qREw&6{w*2m2yC>(YS2)u~3(xVFnV2U|`=E
zpcFRQYtPPJ3e6g+QKy-|+rVT2|1t7cpK!9KEJ+j;6h>WhSvfg59SuHG7)CXO7c3+t
z)xnI-+p9Qv>Gjj(V_@x2qmsSWP6n-$q35N(Fy(wk*(h^=0<fq`g#c7&X=|&rocF7B
z`whe{gEJsv0J72WA8>)eda>x0S<YQDu20~93O7BN^!4|6Sm~stJfQX8(bkqW5SpW-
zs5m^=5{l%<KID9ZohA`SeE)uu*4GFTc}Y-_K)7G@rug4MX^+^_IK$Iocv`OAea4cS
zvwmp`*pi1V_OBp7;}CIh_q_9ykmG2t?;Ghy>?x^zJi|FKy>G^Q3k9W-N)sa}D(V4c
zGDw!6JOoG!u<$`U5!jFL`+K8~j><syWVJtI7Y6>+8P=ATs-Rv3Iwst5(#pyzGGjVz
zAa}xHn|*QjL43SAfNoTO&5X6SwnD=K^)>+-D(lbm$e8fqx1gK^+7_Syv%a!2SZS94
zXfKOGuyRiTBNNu-deCk{&cDUPDgnVEZ5b04s|N^^e#%mLyl3p@lRwZP5c2m_2|k%V
z@pf`>XqC@!yS(=LHF7c;E}DYJ!k|=8q)~eT04mv1L8Bi^Pe!|7fSJ<ILqXxGj*5mt
z@cRxe|L#QUwAZUBv%u`*)kAi57tVEgqc<K7{W(x>7=s__QPuHb&F;nJGGnl8mQ)41
z_8vh%U#bN$I^bOW+^>Nx%SS+!WHK_bvDr2ST|OXJRb4sdfgafL>FL<;@YAPHKh44e
zrlGitiJ3J0`}gl3KS*CJK9eGRVbI4kq!K+q82=(SBV)Qw)hyZ5^F|hf^S!y187A$&
zZ_Nt2y9qiwC5rBj*SEKi>2g4K(P>W;=uNE_08*2J%LKKV>gs9%0RdxU)`l6pcQTz4
z7?nlSbZ^1%79!%kd-n=3ij<O2zom3R(;RSkVb|Q5tg7%6KZ)U_LjqB`ellWDht^?j
z@bo3kbfg^b3$=r-QVq8NZHTvz&|F=wS!*Zt;l?Ew#rf3kMMLeebn*NS@|4VfbRDfb
zBO?O@pD-!PTN|pj4zUr|uNWBEpC;FwGGevGCn13ygWm|-f)zv_=Z3J^WX=*thARgJ
z)zlGV#!$EC<`MyX476~hC}3fNnoyB980u)QNEL|((wQLQ;;QF59ofqTZ$C=lVMfVk
zT<F0VtzupZO$#coEaxpd%SdoL!z6;^GKwIj%UX2QP7^yWz9_D#pikc#Ic)Z))I@nm
zLZ^vw7qA8(Rszuny5m6Lm);^KCH)bjtf4&m=TA>l6Fbum7nZ(`j`d3a*CYrJM)H@>
z^5j``wY9HDKD4sC{CN$qIdKsZVtZR#pf`3a@=O|`s-*PJxOXl9kErjtmKHrX7nkeh
z`Qi9Dsr;0<)Au?SOsj#xL4X>u7!y1v5g>^T52q=P>G}cyOvR_OHXa1jo@`j>Lt0%m
zaeJrRR2pY41K8;ekW8fZ!iwwF#g;i~kBi!S<}LPk^1qkUro;B^)!Lc~Xkf$Pw)F2G
zpVV`qmWGA~F#1KL!Q|0=ylk@6ycQ~Z4-XHB`8~}bJjMF_MJj+dA#{UHQ9x|$>CyHq
z{Go9N_gffOu7En3kWdPEYr<l(QHng-83a365>P+`#0Kok#^40Lws1Kec_6Rx7zg?K
zBD#OjVf4a@wX;(Il5Yl;I?rBF8>AY7##h<0F0h-pjQZ07<np(n0gyI9l*7fwgoVU#
ztjS3vVAX~{bJt}`pd}T43`DOOiSG7qHN(~!8miJ~YrA=u=R@XA!4I_|zBjTOY;8I0
zZl3E71as`U=yC0HF4Uef*M7U(#*ZB6wLQ^9aakoufE%*D>dzq4uOcH88WLi$J=2h$
zPOWtBj%X5%ZfY~q29;?XKn9j^{&2*>14050p)ckup#||{xYmu_I9=)2`PBNyrT`L7
zTN5Lr73hjkipON1w*sc*>~!-0-tZg%X)$1<JyL3(x1cmLOT!TaFFpfSCek44^G<UJ
z1&vH`<CN$BdI6p7?Mbg<nRLyVMzbLcny~7sf@T)dc~viMTS7u&qSB6>QB%{xq9ugF
zr<?>|`71tMjm!gqQ|Ed#s3r6^&8Q3#PYG0H9|uv&i!xXIla#D2Hn`|5S?9Q@Tqh5k
zg<CYcwR<~?%cdkac$0JUGU2XG0+HmOY#V|p&7HA;w@|FU_r7d9e{HqUy9p;B$*Vvz
z@M0z<CDq9&;sV-$Xf8Z`yvDK7QKOn`2t7Q^zBN@BY*P>f8(`JM@=AV4N-8EM7Dn}R
zTTU)>^T}HhX?giZzPJBFwKzx1VJ}t6y}GGt{1sdduxPPXdVJ?L5Ilv(WQikT@A}dt
z<BILN+|aStASpmT(z;J}hYujpi~1E>Vlq~CUQ5r>K^M{6<+r;{xFAY$UeC*nh3Ek$
z;ct%**Nxha2Eh`#yZgfi$8deU%si;H-2n7cYq-fmh%Bv~T^oO^uN+zjT7*<;gQ3ic
zk~d`peTX-dnX(e8k8y{1*3haU@r{V2m`7*!xudLw5qLSD!!H+XZS>b2C59-9U!(S(
z)7jr&CF@VfoVP5@$)})9`$6iAWSuzs`7W{8p7lFLa{q|>u~#oSC8XvDtqRv(ef3*K
ziq>xO7|Spb)&<GO`Ag+mhu!XSt3{)D0D^fPf>5M0Kej>s&0C0Y!rmi|Nn+Xkw`s!f
zqxh|u%PPyUmw3y}H)|lQ4&^mHeb$(gmLmNCK*WklN-c1Yie{IVmNqt)7Z<0VmpLf5
zv8|8VG`F;HSb<u*Op~9OpN)jdv1mdE;s_0@LZorz?*b(B$0kSeWs$eO!{+Io-xN2y
zH8I**-1YSOF=CWHpt(4aX^_{#LM=5K;Ye1x)quXSL5BAXSy-)iH$^lw2<_cl$k|hY
zdJF25wvO42>|Fhx07?<Vk)Q{C`jpNn^x@=!NO4d~3QZI&%^Dm&PcJ?ygLyBOi^wjv
zXbgXTW-?}jbrIuu*`x!aiP4@-2Uoq>=~q1f{ir0h`of+yTDa8Q=pM*iHJ0-mYwNq;
z3bR**AuD%p#XZyb?i3o_l&<$ny<K-E67V0pprPcy!s8nQR1nJcH%vnIcV6NJd*(H+
zonuz3Bfh;RCq+N?$R5Vb<UV*7=xuE#*f3tf)752Cu&Qw$OnfY6fMFhL6dz60`|Z`^
zulY<>Lu@$OmXo76{Cn+qCoP!{Zz6?@oZm#I3V!Fg&A){-{^YxJ)xTMW%2B(hD4^?6
zg@uYVuCVKq76gen{Q$4$pf;MPwt?RG(-@j(*Y2-V>3TaCCEj(!_cYvo7`Xl2g4lHA
zx=-TUgyW9^GbA3&g-ESX%|zsfDpF_kS7m-0*Zm^VU8mcP#-goAWsu6@smIk&Q^7hw
z?WvbZZZL8em(qLCSi<$Yfmcb9QPAa!&e6a3Ze{TEzVTM`F78;3SssZ}66^{HE+A?D
zwr^;e9g#ycdahJ1r2gR7k@xXcJiLwUnxF{&QH(=)`IgR)vgkg(%WAdKw;#2w805L#
zjUQu(FTl)w5UXyr6D`Ob#{o}ECV_I#Anx+n=VL~B7M&Ol((7zA1{>{rhEsPqc$jh1
zx}=M-?X?4Vsjd#wkSiR}3<W;V@O`s;5#RWk|Fl^!UV|G`@igY;#a*g!t<OB1Vh?$+
zo!3LL1P8SB{JymA3B3yFDd{d}?$f^~okPCd8^k8LG#q9R8;NMT3o9C0NWR#}-d&rn
zncS;@2@K^{bAx6v6=&V<_ru@21JXEgnYh2pt?PBCSscH%Nl?06Q%M_~C$e@nXuK3&
zBJ_P!G8q2KgX;6po3n|0EJc9{J=XL_FO(kUSsE8MYxMu8r>l;O>I?P@2udSe5(d(>
zq;x8cl(2L!C8=}>(x8CUf^><bq!@rAAsqrzqBJ5Xp#l<bmfw5tALRqP=iYnHxpQW|
z^PTT7X318#rmm(BADhse`7CBwkU>7RINU);v4MZNh~oSrSA>x$@-c%5@)?f^)vL?V
z?;HBtucEpSX!!FYWfBY*T2w`;?h0us(z45{25BXn>@YRRcT5<qwvhJvmoVmzm0Zfn
z9Sb14SUlul9)x!~1yrj47+RNY0L$~uxZbMBoXA9>LNKt;*IlrHLnR#LaLA|VAM!R!
z(1NAvZn7euMPDjjPUb*ltPRhTQhRCM*{>W4OftxVQOCD`BEr_|aUM!tO$@9pI>gQw
z5q7@f9bmo~lZoa64ZbQe6O0ch34RksI~;m3YuevIms*lk{dOhz(DO#rI$Rpnu`n*A
zpj}0_<FXmc>qcq6-#Md>QQGQHpprp$AUy|c8{KvFue+O1kNh$Y?SepR0)xb&uf`&0
zTrU2^8wyO<BWP{26&;5AmzE{yYlK9QPLyuCJf(w0<0BmSf}^i4CsAD6^*7l!)0dqV
z*52y(OU%WL7Y}jIEMt;K|8vJ)oRQOvbb13H>wJk*s0g&v)&Jh@G(xsm#C+bR@IrL1
zP{Wq@PLlHOgnCiBpR>-b=`yCZ53c;YmtQP|UeQdELLO(#DDU;}YvlQ_rB?Y@T9EFH
zQ`g+29JK;>GyuD_yg3X;-vkw|qrauwczE!p{p52!B+1$~cob2dkaG>idvhZlvz~%x
znbsR&2_<F9_%cGA;&N<!bK=@pBcj{)6h8ZZ8sMvbG^E+SXR>XHm$i^L67QaA{~s<?
z>vINC^%5q_?9Tch+|_eI>nA*(p%gyp^%Sh)_7c>;I@14ZG5n`A%Dm$}ukyL1o5nI%
zF5%j&ZS*>BRgPbnoB6aOY3{IKT~R{xm=vwvVJrI;xK0SG@iP-d&+vjugvx>Ih;BG(
zCrP0q%hHg)%3La;ta`XImOg8{Zd`MfgCwzST(sM<NQ+mwM+N8C$7kzL5yWF{Y7uv$
z<}HT$B}S0->3dTW=bKu5u|6=*nd~u9rZo+j%6o@lT$+WiFC-rz(Hv3L!<t{efK7Vm
z*o;m~+?n+mi?``Al?W@x6M9GMuG=BKI*3Xft}x-t8}sBCfu+n|X%k{UCE#WAIICVg
z8yTVe{PuP96<)0*do}-8?Cey&u+2A!2C`xbFkc3^#S5T>e(9^07~dycALEzmVAU}6
z5mz2eer#w#BJ<WT7^OpA!+&9NUH`5qV9_lKzOyZ7v0@n$G2i7sl+U2EEMZJ#UVxFX
zMR(~?R=MLrgUI%4P8w}?crO}T1lyK+ja~XXy!=pxRA3_~#SYg0@@XFSi!U<ga<+m$
z?SN$_h25(S<7V!^Oyv11m2rL`A0z1#xl*pxC?v8d6g$z(7r`{_qSlYr7|(l<d;wk)
z6W2q#I8rK|waU_KA%#Gvzm#Wq<l+(Won`ma%cPq%_D3I!u#&X*&WvKALzW_Q;b6YI
zID6WVeP@aS66cj7GEGQ?iaU0ti0_@$O_zEDTLBBs7>>#qHA~kow0D<gF@*5;wPvdv
z^78&?U(b+T8^>8iW}|Ecqy-q)*4K&^XrtdYdzNnZH0+|9&{@)`xdod12qF3>nZm-d
zlaW6+DQ^Tgtc-1A*n{tSDL|SI(N2QR;@2{!-;V4^AWTz0hNvqdZG9shqKaqwV=fia
zphRBYUe0e%4b4Dx(eCS<M{|HI;3*BY)f26!QZ7=F{JYy!v>G%lOtbk>-Bt!?DSOeg
z{mD=pqdlzHz-jn~kDaQN`8-uVj|kEu($F`?A^iGC!jK@UMdk#xoEE}>W8>m&chNsd
zmx*2T^$ojz2WoiMzPo}rf7(3ECr6Iq*v-F)U1=*8-a`6@?~(MgL{x8>qZJ0kM6Z*B
zb-7JBuuoo;W=fOqZ!08CtMIUjXCuDw+`P>@TC1nCCNnLapSLmPngs`FBMMcGJSILW
z@W>FE=doi>e6V@$aVwERlQ30b*CJ-|u2L6g_q&JdL<1yFW+5Ti^NR4x6BF}6tB>q_
zbu=$KZgq$MiWfp{Rl4CFsSar-*ozy8cWk)0_3usDoV<=XWP&lzVPV-!(nZ<@tCdUz
z@x$oYS~xBwq8t`(6{cmpJ7<<DN-$>ClEA3O;A!2}pVR0T@i(01jc<^{t-NsoVk|1v
z{uH}12yYu$;(ih&y30k9tjqTfdedQr9gYOB9TIuYf>-!-yhR@PF=}?E7GOLx_?B%&
zbcn}oFJE$`ahW1@P+0da>bwkI62cqX6}!FHSd)gVE0EK5sS_R-X$_Xh;<Y03k`0=p
z=di+U=9#q!QjgAwFQbx#U35*|43o(<q1wBF4C1}hw(f(;ZvMU6wunTc4qd6!Qzg$f
zb=sMocIdJLU*az2CkbkuHDua=x%=Fs0?ap!WcSE*-RO?b)(ty)iEmw1UajC=sN{Pr
zX|G&rdZ#=@hq1m7X&bIQ)c<_U@k(Q*m-Q`oc=Y~E69ixKEhvcs@C}lr%iW-A2ldi*
zQ963WL^}XwE#(zP1227N407H9etsSuP!|JQZkogmF}X5<pu{lu(o+WTO&mlfmrwXa
zpwN-PU<`u@b{`^x8WS0m>N%dEISK_){!<*LgjK&NW7#@a;;&sdxcpg6M#+)G?v?YJ
z&nxlvK$t}B_4?#^_k3&yD-&6OyS6f*1mFlrA|FDX?^F*&uVnOs^47)LptUUIGU3W-
z+~Q?#ZT-OYD1o6~TE_i+FSQOBg{{xqtaLnM`XI-S1)SW=fP@1b>iSp!^E7+ow+(t$
zSsAj<pVk1T<G6ku#3ccU7raz7pO}PkBN#ZxNjPwBji~A#)tk;?O>@ct<x8p+W`zDL
ztn-&M!d@%i7okt($u8cBh$(U`eJV@*DxUXxuqxI{3f>Gq2dx|{rDY-Hz(p@xp#niH
z9%?v%Lo^N@JD*(F>6HUP?grnVEU_QD`et1AYrg?R`ENNRub5HJ3@V58p)$0n$hI%N
zih!I2Lc9Cl6pN$QJKm!pLy}YIM$jedI5-R8S7h>@T1SRu$UA6iu`*9My#`2`zr%2I
z_M&KnL-@T&2S!C}nbOhVg8qELtXTFF(Y&ouL}HAv{u833H`NL0QsN^dqmDF6UDgmY
zy@GBd#@9~p&?bkKPld;n7$ut@urOe2Ct&_`o=SY%+?*>=x*3VU7K&HY-!?Y(m|oxe
z5K9Fp7gVf^iWuwZy&p))$(bwHUj-3+PaF}x64T}_5X<-X_XmI!Ajnc7s3-BdcP|m3
zimN`bte^;ga&iJxF!zx{6@UNENaEF^!b0?y{CtP8QZ4Ay9GWK^40Ri!$M>$`&qC3P
z+f-c%;K$38P{>$fSi;2`<Z-Y*b{+70CsS^2ZtbTMAy{eQPT0(#HN(m{U07Or2$iFN
z!!D)xq-it|Fs(4H-}yf*K&-NCQT>nL<-%Z4g@O<q5(zh*8y*f|H}9?+AtuSZ;GR>=
z>ZQ&G@*<4?(g?F#^`DD+5gz^5-51zz(>mDlaRs!FB^Z1Y3gr`*j4M;2-)L90g8b6T
z<JAi~N{9X6_%Y^xT)Lv-1_BmcP%zKV4jCXUykk=D@V&GF>ayo|((*-%IG?;<fP{k4
z{D7n@)MZg?vP#tEb%EF~wn~|YCq4yTt%a?ByXWnlEo7SxDofBri;`-QD|c(Ogr}m0
z%1ue~H&ia7(_t^^_34*tk`lY9bwK|{se9i=9Quv#7Qn6o_{i7OvxFJb6i=&;6ie{U
zmh`5L{6VeO{lTo{YQWcag;_tCBubwp54pW}h?1cUesep772EF52Q~{K@<#$@(@PgR
znB0%Z1qRd&AJaAjr|A>!#G##0(@QBO)0$T)^)^EgOPEvZqRuSm7uUkwD#@yLntilR
z-z`=J@9N}fA<nFA(Dp1I%KNZC`RDm#5JV8Fy0<pWE+CMndjpbJ<Io*oZ_j6{zR7q0
z-}$|b$+qHR5h&F5jsUO-3gA8O-*=v@hGywwfX+MFfp{<_6%|%`y94+nuYb0l5BT$=
z5wyIagrz_!`pZkt#qZ<jfH+0#*hD+n9OL8TBO@c#)pvnr)B<HglU@d&A^{Sqk18Br
z8j_pz2!7#YL-dH8Rn`oJQY422$bIN*fR~Ea$+^MD`OL&@R!jX(&QoT%7!*&+X{k9m
zxoHJ|bYiTrjx`Dw!&pSZCbzS*8z!@cnVU@<Zofu2N1nC)`a(IP`I_sex&;Z@8Ap_8
z+3$x0l@Z_ZMYbDyV>2c1ORexo$w#}4)lHDxdc8TZr7ys~J}h11a(VoK@OZj8W^c+k
zR5^XGI}QTl_Bg_OREl42%g>f-W%Jyre);l~FIDMU3t)=Cz^bgMSmZ#DKOfiEkr}`e
zKJU)%KW->Tn$5Q!+jT(Q?JNJ?Qsv8#WGje<LaoIvC;>j$-{%}+f;!;;(Csa25ZWZF
zvsYo~WLYMF;@WjzkUxK!R`4b}<lo_;2ab=!%I3$HS93OSwCbVdw#Pa$_LYaiE~R~7
z`@+Z3RoH~zr-NA#ylGrps+@Z%4+rxxh-Hb)={J}mdQ`^BIn6>E+V%#n&Ud_$DHG&2
z7bsZVJ?kG)eb;KfmT9=x|M16te?p2ZQ;p|%-@CWx;gqTbwwjCnf=R39`7snc!<z3Z
zL0vNS4d5qwc0jTYh}I=f#hV|9xmBC~^))hr8l)W1-}*Sdk#wyGI%>?e0}upRj?~rV
z=RrLj@mQccz}lPKeyaKHTRd?FaSj=o#E_RL*2)vHfKjQjdAF%|?-cB}Deh@Bq##hT
z!48P_E3=8ZKRbyGNwUggO#Ch4JmEBFpU88XDg3G?GFJ1qUb(L;E0YnyxJEe;%jr4c
zEg63Q$M|<xK5?T%-hSfi&{9U^%=2A&w2FB3afU?9<SHr$6#nZDvq#*%Y9CO)8GI@k
zuiA^dmYSLht0`n|0B7x;JHXR>0V%==0#aBzRW~;`I29}`wy+4L6E;iNtDd$Bh4%l4
zf%8HROdq%UDZY1_IOK$lb(4k|742e`75m0(jUdU0O^9-}1k&jBXlp<!bl5AF77Lr9
zHJtmOX%Ca2%FShMZAvp0ko6ER_&iEaOjhRMRU6y!**HuvV3b$wrq)P8XVGyC<zTh}
zkJ#mVUGVw&MRLk>P2e^v__Y$UkNIUQyd85SCx86)YZ6rOL6K*f2wduo*RndKe4vgG
zW6jwi<GJv#x!Jc&`*(0fjakcVYq0WAE*SH-&_&?%YXtf4^|3qt)sXCp3+qmRE|D8R
z?UD{X311&`<kV5kHqq4;^juKRg5DpFJ4;-D=T8xn874WOKhpzC+jFt&JOM$I6P2vz
zLNQD+x=lI$Q?t7zP^rl92oP^-YhPbvyys$IW=uTVdU!EPl>hBNog(%xjFVm>tbL;;
z`b7r$qE24^S+td#K3R_PRyeduf3KKjeAL?OE*ctrX!4fhME}F;<>Ex`^jmrN%sG|L
zC;*7?Phsi5BaG--8BuvRH?m}(oK;LN-lgR9-aKrCipXZSnMapx9q4<5xE7cNt=d5s
z^7d^y&QDN^KlJO{70&F^%zy7AZ!Md^v3hds`!9)IDV^V3eN}(D5TJT)9U~Ky7I--D
zW`=SCA(>AaIU+(g*=Ujj3A|9C*+P>}Vmki9bP#}k5qc`SnSo9=s@&JMCUHB7B84b<
z-_|-(qBwm9Y*H)Rw^xc4?i$YqdtNp3e9A(%S(W;e8d%h6__$>=gyP}&6a<QuEHamp
zwe6X-4x2oe)!BH#R=&e&F*7M0H;K<4JV6KL%ZT>n7y_`U%ggp!6E8tq?|D_#_){(_
z*oBZ~GWqT3_7W`Ar%#-d8?e>##j%a_W?c!aBKxHy?ivtIf6l&qd;iX}KjV+Tx?H5}
zyci@_-TefYKVuSeE`KI~esdXjI4=L#%s)@*LO^w-6_2|RMACbE7!xBzA{HiO+)9e(
zAwj5I$bT1r@kb2sN=FzuPxk}p@``@CcB1pQqxCBT6t4!ZzMxUKU9}0aJOAEAFQo)p
z8RV1VA=Q{4$+ApmJ+uH+2~YhB@Mir(KyLWWKBJh`wY(>Nj^-zHyqc|Z=?Y#*T31;2
zSRyuFA|hQJsZL{`y-t}d2tPkoPRPd~X)XW7O*WY<bopUt_i!4eUs18NW<mD?Z^0rG
zoB^t0Kp#EMV=<y6+Y^QcPI|rw2Swh#VhDAEJ-^fD{}d*Psf+xe^v&_u3wP`Xo*iQ;
z+n2k;T^~B83ELi|)5#$9ONOiv*kRbtNOK|%D=-W|K>l3eyhg*>RCT5LRvmgamnI)<
zQ>Y?2N~N>LmOACgUHSvt!*tsBFHijFo)zW_nV94>bz7Qk@qCj0L^j)si#t7P6b7}j
zK8qzwUhF9{YpPtgF1aYpuTon*oS0ttclS*-0TON9n=xZU4%!zN5)ReF)=XymI#&r8
zJXhHQXzgOLAuhu2j6|54Pv7u>I0K-<HTr1@fCydy7&%Hd(o1X`#h(`ap5CUzmN&e0
zur%DY0%z#;JL<sktAIKf?e!<*%4&?uQZTE7KN?nY7I;60!4#HKtjh82hBfbz@GXUB
z`Q<X4D&cp{gb&mdHOMFFhFv7|dWl)1pKyNhe&Qyrbb!M|s;ntJcBb;rKsjB!&U{j{
z)@@-lN020$$ykc&si1-_nxho}Qg$LaQ>&X!h_Q=;C&Es34%4$3le^uH4&V0}O0cmZ
z(OGO5Z!Zc!q~{$p$Lz#<iZb%a!zSFN5pJfH*Zv3%HowpI-$k@$mYKNn8rvTYkzhmK
zFd_J&?!)JJ2;TzwhHrf}jt>El8fOrxPoU3on)x>M!CHh$TFfXz`)fab`T%{)Q*@o&
zB_rkidt#n25t*{t3kdmjc)e=LsJYMXA(6L|zTuNWj$LB90@4;d{8GSjn$#Njsfcv;
z2m9X(;I!YW<aSBF{(Kh0ARgdQy0+i13=@HSHW6n9mbD%L8D@L%B|t>Fct6r1E)qgn
z8+54-#5idmvpCa?&O3=-=uUl?`cg?~Zeq}Q=CYf!Zf&Qiq*3N_)(M-!He?%W&)SRS
zb8&unH;L+j_iWFLx&I|Bv(Vpqe)F7rm<j4s<OSQRXYA|e-@CY2u^eP#iv1S)bC?7M
zd@ki-E&|^0<P!4iC^RBCqod(_+7I{pfQt}mxTI@=<8V=}A>r4h64K};9L;tTaw(zJ
z!TuYCj#1e6y<OyNpF%k~rAU1WoW`3(1H2ILzoMDbefdZHamOsPo)h9rrki5fZd|qm
zxv0}#f2Ck>6UEvI5T{UQz|e%^3;G5cxaLb5$;=>Yv_l;|s)<80+I}O&Jf1|)sTM)2
z8y~hl=wn)SIlv)(Y8w+P^k0Nm%W?)(OVL8g8-+wWypLn%j>?n-j6hTBCeN_!oV)?)
z`xk4eTBnJ~;I013s{w#B;74Fn5BZnQfE9CUB>IU^2*H4+adHF~@6FGV&ZX|x9fMbq
zR0L5MdTRKXgiE{ng?x-qt>s0I4(99Lwrl_3&L{qxs!N?rl)_^i1t~KTU48i&E<iT{
zEkjxde7s3Nkkl%CF4gKA$&GfEUz6<Phso{n6VgUsX(&`Oyw4`D@~j!>a2EbtoUTZt
z#8SH3C(hY@>?C}t%#_ZSjddW1?CrJ2z3hb8wMR>HX8DagY(Y|iQ<fx4jEgN?ly^D9
zTGeBPA{<mLNEh!c>6%4-zlx$>ud=2Qr%=PoBn}Z4NxtUktl=g&rh<JL4uKpWHhxwd
z{i-%!dstI4LhKq9K-OUUsO+7{@PiCybs41C(g*}OWXI%gbHtWz?(~1SD1!uaGtmTf
zm~b|I#AnktuB=a<1)XCZI1&pmYZ~61i&q{SO;NIH;f4t+<i#wCJy{*p6d6G(&BMEc
z5IVc+jXD7QHGLW-GP%?hdHBq&8*cOHBX`vbC2><{<b9nGe1tR`7$q~#s9BS-(Mr((
z2csm}A}k8Ab^*IT!=Aw|AFYNh8d+c{pz}ecP?Um0PSw|`)&Y0L+=0FX)AXU<NCP0#
zz=xHfgK>78ti4;fp@6g-j?-`~j4i;#U7fCFI+qn=^)~CGX2i9NVwK2M&e~X(!BWzo
z#sEe6TX~6u*zic+_iTd+^yK3^PD9o}L`Y;TRT+sSEwX<|^7vlj1q$N`3Qa0Q6Loox
z@!*FS*#eBtpV=Em?Dr5`ddUh%mo1`!57bKarLPruqQ+MGsNZHqYSU17#6R&bQ=`p_
z6djquU|c&?Xk?Jv_k$eLvtWS`YsA<`UF)NiQmB`rOI+aVen+8%T>dpx_e#aZD$XiP
z;Fhg?sFBBBOntrg7%`n1^`kl_)dy!wBVc=OxS*h5PYPfUC?$)0F-(#b+X4X4w_bEY
z0mf-EPIQhh%f#cl8EFCH21`UsZL6zBMS{swF#F4K1wW$H*s#bM-UWJj{VmXtY6sxQ
z-d0baD^gq1f9D*Q7A12#ebI`eiiod`QB(6$;WFKj9glUDbp!6(D|lBY^I3}x7-Qvp
z9J1~xNI!V_5}@I!vstk|N0@Ivg1k1!Bv!eoI;wP6n)FHpz_85eGq;0v{vQh<%!+*h
zxamz5vc!0C&uDaHn$?A(-}djX;@3ofqj(q_+wyQwv(h{l)8l+s(B=Dn{~0JQn85b)
zXI}6h|3j^jdao%`5YHh&E!S%S%CWn<3wjeE(UcVTn|Ez#iJFoUz#I#Zj?&XJv#=N>
z0gAMWfWCr)ES~N5?k=d#J0S9@`UdhPDVLF@>&?c{y?R7#&##Lb8gWdB&?4le^zgbc
zM1_ugCf41KSd(r=fByXWlR$ZJ1j&z2j&^lgqRnuykXehx(4G|Z?;Cs?$Qh-rW>OYh
z4>fmG*R{!ri5FS)*j|IA3h-eZZU70%Cz6qgsYtL@D_acO9=_bYm6ef^mqZcz<MYV$
zG^+G9ba(+$H$+u*un1$fdAmmh)z5*gzd)qaM>}-UF&fRFB~ygy9UMsnMJC<L%eD>W
zF=D<By%lUtzrU%nJq1kxG~*DC$Q^&B*7pSV19fFDEruQvpr!4{rhUUpnJ2otfri=!
zsz7hv26q7<XWP}E#uF-LEw=^%z1mf7T=Zb*soPL*FQAjeBqYUd<QFbrC9n()Y4GMo
z${2S#KS%<n3R(k5;vtf2*A$tV$KfQ&v_W4SZ%uj@92I-L-|(Vrg;wrGH9W-4RWp-R
zoRUxZW%$>dAT1MD^j{84_Or0X?NZHy4sgU@MpM5TrH{+5u}IwdR9;_J=IG-ik|@B<
zP2|=t^Qo)W`U(_wK|N*Pcw<cbYoIy9%BpfLDUtIvzj&dg@ml2xFdSxm=Z|S<mZzqs
zfMAj(?XMmXaM+JQo+o40yy)TV%srs}WQ2F`wQaXH6^AA;o`c=oNVSIedPYV(Kg1*h
zitzo*+w<4vM2PvqyY%&ewiz501URM<3Uwo3FEc4=1v=9KqEnLJ^6Z&z)AI(ltet+$
z7!(#Zlt9P1hLr}Mo!#B~`g$~O=xNyPBGuc(=C6DTr~(`uIK*v%rwHBTqRCkmc#KR<
zv(pUaTA>LZWvrIZ9t~qDUl!;rK~JAX!=?PihZc8l#Jz-a>jw`MQcs8tG-o?I)5!P;
z5COG&Bq-I()jM>;m(6%$zvyITZFNe*0btC+RWp?Nw8z_#qjwD>R8g_d8-YEz_pN}I
z+Tk~@YrJ^3%z=nh?(|5%dJ;+6=WA24rrV-ZK>#BBZqpCRnI&R`Edu~jysYuW+<XqG
zF)u%IrWS+r=AX)f_c1_~`s}%gg|oJ83^pdJ$}};~wzeGuqrly9{thfE2%2Fpqo?Yw
zC6=*empaWfZ9<=ETN|4jK5O!^g5vRDz(9Hk3R`pJLUTu*<KDMiW0ATqA}6P_+Y4%4
z85tS)`1m8W+1X6^3)HEsvO%1n@RhO!NVG?Vi1$k6&dv_V=RrXZXpI?JpDHUWld#H4
z3kwUgv*()RrAnd2fz`2j#`RS0appHDR;MdkU~_BWE;QyTUqCq>7niH0g?xH!_?NkQ
z7N<X^OU^nt_u^v?BP|h^>IJ#-%VB4Zj#W_l*RQ=Y`op|TSBQ(!G`xEpM(T*Lf@hp&
zTVrMJ0DgIS)j{Y?Nke0JXHwbFK5Kce{0Ye8hyZ#e?EHy7G&Hoj+fzjaM8{15-!Ckx
znGO6|w>1}dm4idfon^F8<ueGm0q1t`JC7EfW~QK!pr9boa>u*J#Gs$Gp}DzMN2<bD
zy52w3{e{7Sf#1L+d;oCvm>Goe#rM%hy+!}_*1ZpQu31`I#(sc~JMr7w(DvX9MEYLZ
z+SRW2Q5D;Z*Ues1`2YFA;LwS-BxMl(u{P2HFa)&{5<$Vv^Q`mT?MfoI!<1p+QB`n9
zpT!Ai?D^@57^MEtl`@*sbS}d~*pBcUBKyb&dq2!CW3CMTuZNA0+ixQ*5Qc8Z(F-Ug
zA`Z}SW04J7164G5TL43l3)+vVt*zxV6%#kXyTQd3%ak945lwCTii;*{ZJA~i6%_@R
zWI+KRT0&4TM!N|(zO%e$mWv<^#~)TofzinO{q@H}N?yifZHzn}-6Xt}o{L=JP(}u_
zaV7USxw)ST+dG@h4lFGdSKO)TUHIMJ9yV3KI@}J(V<yd$k|9vjTbA8KAd>4!NwPj>
zEK=Md7*O^ORrF`vkar2v3u@>sqRBH7Z=PO<!l@{NfmfQB#a2?Jyo;S#GmVQLZB0=3
zoMn_+8Lottu3=su=O5jwZhiPioP7xtN6lP^K~WF%82=p{cpIiIb6PZeav`Ck<B&I0
zCQ^5alT3Oog1*p3@#r)v(&R@=bin+tBt`&HA0@^*87l`jCP7{J7FRW%DE=_KGi}FB
z&w(uty-cAW<R0{Z0&O^*WbtO)hHntwLmtD%rdqh-Dwgs|Ay@G+AES5&eNp8t9E$~#
zw8QME2Rqs4VpqyYv&j&QztV*_M5``fAe2dxjmO2p1QduoI0e>P3P|>DL~i#|K{<6V
z-NtZ#M~Cgn5k3HR#cLQQeO=?wF}Yqhli*C#t<}};#J}6yMw#M(yn;0#1<ED}oH^Rf
zF|d9hy>*o`D~c%(gK@g@f{=&^xX3P<B@E&z3=Vs1LaAEtc8WKoe_LPoT<Wpr9|Xa-
z>dMN(bF*DtU1MWBz$-ll@jiaj`=M}UCt;)c-5aZq<wEk1j$0tqhZG*&-L2XndkEfZ
z7)FtRkEjr$j2Fca!|rd9Ko8N%^oa+VH24EV{XD)aF-_PAA6)cyWUjm7EtC44DtxYx
z91;JxBl_yA4S(kHpuPamM@Z;Q7u_66N=ky-a57f0!s6nG@67_lu3Ray?=u2;hnSrF
z=Xgc)`!^j?q(zQ14TP*>u6`g)%BuxJ1&qRW7gUCzQz~?X1J)R$%UY$@*f3FaWaNk$
z)F71p5|@$DT1G7|*+B*m=-ac<)9zpj4%Fm#5z)Fn+8yV~ek@MMCMFgP`}b$Qpw1d=
z;x(@Ifd2I&(B3nqMB``4@3K8iy0*X1?c3~=1}ZAoO2&aqc}HJg3fczq-*4s)KHSsS
z&TBkH;2|`-viNO_6KjlARM+pD6kc&F{QCUX9aA~I-*N$3-3@tU^0N(6Dfjlr_Cx<{
z{cb7W)&9DFW&XuOA^Mrm#!ZBD5jeKf2oBQhq~cA7Y|}BVwRo|)J9EA{ZcU+G+8k0j
zQ|tZrXEw#$vx+kskWMIOuWRQbaJ*dvt(fq-{{B;Gbq@VQ_<VTa=4i4H|NM|2{W^%V
zPe|hA)Z|LXxtQ~yj+=#+1vbiLvnhWwAd-X$$~1q*CAH+141wgpt!mQB-2r!5zTdwD
zLj86AMvX%*0h&HBGXD9f1Mq5S=)Ba=qY#h?y!(B<#njyVt;;0;de3#8kXKM4GB`-)
zG&cJ3?U(Q5a)-ax%TCK%TSHu3k90y07op!8itDSJ+bWE9jRJW2-)37T>K!u{R~8m*
zfKr{#M}A4d&trAa99mR+WneH2Eo#nneQEcWdzahwQ+WA*A3*aqTic@J<Ip@p<=j;`
zqri<^9s<TLY=Nh;#|PsTmLYcve7ya+>|A!3|NNM`(kv#<nqjHT!Xqd5^Xoefr{VE&
zQ96O9#)gJlzGTu{pquyWSM4l!h10HyR5u36H=VhM@ZY`{a%_uBL_D|iAR5<-x;r7_
zek6&K=;F`KIKPn~Gs1bazUR?kY@0Mmkt+99RKvoXyxsR0nrLa4{-?QVROBTBw;@>J
zdXkgl_N%<BqUJ>TyLW;BQ|i^DQH|~;#r?|R06Tkoe`yw{m+z1gE?!<<w6wJ086u*W
zLY9(i-kuz~IA05Qxn#1t$a)&6(dSe?&V#h-k8%e^YMq6e+#2RoJ`F}~s{ph=+W$Q}
zIeT0F%x1be%SmdI*p8a&*Ii0PmxpGA5j(^55-AGPCaG6=FYaHX;Cg(wtZ4eds`;(;
z9M_Mp=1f$M=A|{GUVyt?9A;p2Wi>4QWo0Y#xwlU<E1su2`cDAE&uG};OHu`NE?`Qd
z_*e%N?2GP1<wNX$iK>U*74l`2R_=|cT3=^dQ0mjq$;{M6SRwn*yIr=fSL8w7Y0DfE
z*bkao|0cY3P_URt>J;!m>##wyLsmhu)3lDkT!3U<(&-aeKfSJf0rpQTVd=zW+QA%L
zs6uZme3Q)2?W-U5gIY&Mdgdpu_Z5}E2UF}0392sJq4lHRw70x)`E5uobmO6rmUw;e
z<?sC0vMU8Q`r5bD!oScB5ed|NT%8@3XoBc1iMA`RP|b%-t$(@)-Kh7B#wtMb9Zqqa
z?ezs+2kpX%tmG^5f2ppinvzKM8~cc8#M=6r*bSj<zSa{3TaW-BsofY7wQu^)D_+ch
zK<%X$VPv=F6SLd0)772(wAM0K`9Aeui^f4~`GBT#-;oG5K9XD@1cw<)I0>U^gz2J%
zcQxrIvgmIZKh<}C_|#>r$SphyH~!X=ZsYVfx3s;=XG2E=gos<LxFQI)x9DM`gDyE9
zd$iWkJq!yeTgg-1r+B=nxir5qU`227U_Z2p9;V&zlG|`t3)^qYNP<tP5jx1kPs+QL
zII0Af!Xu9+0`*nCR|P%X8_s|-Y5o|M=ZchN47<oI+9mnWa`LkGcC<i#7cL^n>l_*(
z&mrMT(eNrX&ZWFym|Kyn`B&H)MgJrY8@o3DAdZpdQ13Qgo+x%E>~L`y5lQTWF2lV6
zW1i?jJG6b-1&zl96!@Kz?X2B;V+FE2*eS5RFpLQ6FHqniPUL!IkmF`tD5~}sJ@*&S
z>T>L)q^YlrhOc911JhsZdxB94gMm};-}vCeJV8%X<!KN*arMTu$>~Sga>iRZsdnP$
z8>B0I9ZB)>Xx71A`NJKD5eibHOgsaYGq0hhB%YUA{UMd{47)}8P{Y#LTlM{JcW{Ki
z&@U4u2%Iw!aLZO?+HS+#L7WYBX3hzEIc~DNH`tD5WkuTr7t6mfV+0(?T<-s&|G_LD
zK$Z{F*Z%;fPmuJc7@9^FuH&Nmh~m*D+Dn?NgrU6_@qQ6_?-<J+3NNTWem$fekrQz{
z5APYgL}P67@YN6RNKsSPoIZll<na?7A~_O^iQy6K<3FAj+;a7-o3dK9DqgjMT_1*_
z08D~ov8U$Rr_Vx4F3kIHBg-l7Xw`n|%aXtDxnpg6TB$6dfy3nMs1guD0Z(ovi+yq~
z$$Oj)abj1Z>u!1$DVHVAm3?EYH6{$?@%}NFW4L4)3EL!W3OlyL@(+S4#VAD{4IPq8
z`~k5XN{*_ft5s3gl3!`|*SI7%3jLBi2Pc4)5q8{I$(IT|+2oOA7yhNuQ@A-Zlru3C
z1yJPHzAvPlo%laqz#pYtQIa6Co7jn^$4>0sNAAPDD@p~Tngb8$pK-T4Gmqx{|0hh-
zaS`oH%%P~|$39JNV`FY@Uc&;!2({gt*=`+=LfsF`hmv(+3zT+WfIFa(2xM-E6QV{<
zd4&n$72>dQ+$8lk>TkJt344?H*qc<5XjQ0)0qbHq*mIGhUYW;61aW;ER$EIquc!c4
zjyD`uu9l3kVKGYayfVWnv)6a6#{^c_Pm1q0;f;EeU?=__c5>1cBP_msBB?UM#9leF
zdm4csX1F#GJJ|E6c=a=OF*Vp>F|7>A28Y$%T^(XX5M!fh6giU&YVfzuWY{McB?%8n
zsz>?=UV4FHA4Ld9;tW<?mf8653obE^y#%dt1esD4SqFs^f}s=PczkQ<5WC-Lm0`ad
zQ<2`F6!y{dBuieQ!J`mp!*P)yUYF#@-k&G~YyRIYw_kqJ4=R+DBEU=avIbViwQEdx
zePyMk{1&eI2*lL{f=l=esJ!t25h2Df7I?n<{G;A)u(#ePEFmv0@+0tjc}+BL&|>20
z?!V(9>0PrPFB8A@Q5AfI{Co89NN4YGTp=UB!()e1G6W9ws@;AO-^#uCSlB+b!V!24
zaHPmt25!nVR9MvfEy;Mayt?XgXFgy<yxDzzg1_zXyH5Cd^_u69zU1KvTrLcSk~a`e
zDv@_`THo8-gTp>9Pg=$w>Mg0DhUG!zPB=B~E5KxqM&^Z<R#s@~YCsP#Cp#M+MJ8tO
zmCE379L`8ZoMfa=0$IBT(PzAQ2DHSew{ZCU0YwoG!pIgQncsH2Nf#eC;gpeaq!Ik~
z?a$VK)yk&!&wd8~gtFc-a6z6gtZu(-J3YQ53mqE0S5bJxOiX`SZ+zMt%R6yQu(7bP
zIN9l&5B|5={OYwk7b1*>B<PX;*S%bv5w#e<_diD)C!Bq8lZ*&gq@G(Ut_^k-Vs})J
zx}~BYgwiW3ZLiF#7Zw(}Spttfzp#}%JqX3BCVrml6JV`)z7xfpYJPgSQNx9Jq!OXs
z!;M!+<0fK3I5414OrY1@bK~Z^Mz~xT-<#T4?68$U%b(u(&EYZjoR)T_yQ^#IJycO-
ziI(Ms9GXIP8WaP|9esnAbGgt_U=|c|1ws!Xe%uD8$IqEbW9XDHGZT1n)B<u-08h!B
z9uW@=3_x(1#22(Gb^62P^`ASZ|1?^l;OpQ={m>=3kT*q(4!=5Jq9C;Me>*Na-w$bj
z=p(;>d;-c;tI&-1L+oFG7mRgvf5lrKJs#b}IOYxv4u-7e$f55%zVvSkh*jRZo}15S
z%sGeDn?ga<1}Iy9{(RAY`Ex)#lqzWH)A*(<`f~;}u0u#Llis*}`@Aww>B_AXPbUnR
z<}3WBxJtSD53w7JHv(^OcsT#)030F~Gl?Y>;W_KR^M-}s3XOZESQzxJPk8_O%D&zN
z0OAx>kGZ*RHs|^`Rn+f7Tlr+lV|b*~Kh5sH_x5_smpBNA4-O7QMH`*%Eu8%Cf`<nb
zJQ*3^h~}T$eilL7DqM4{!F$#wCR0>8(tti;UjnY49S^VHAnOhSeaX4T+E#-uo6cW%
zphv`(j_q4b77@R?by(*&Z;w%qj*hmri^KwNeswXm<vx9C@KQi9a34a;Vp+>KpE*Lg
z5%~(&qZta3?DrL7R#hw;Rcg;$^AW6yI-5@?=juoQ?+fJ<82GOy^tb}5+}fei7=kaS
zmS6RG#~J75+r9GK?_1?tb}B8@?9EnI@^Zb0x-F;;14npT>-ZQibid<gV_!6xC@Cq~
z$@b%)ynKA-AncoVCxp%a(6{a1W|gVAg?nSAuAyP$j!J~SmmzM$<i_TD%j)hyIIGKi
zt7`0uR}D-O&z<zZ1|J>5;pr+melv;S!`&F2ospZ5dmhK-QEvhY`fM4a`YPmCL}+=%
z%+z#%(Km%Ux<}0ZKVaIwZ*E?b$J<Z2udW)Ujl1iW8SCkfDyeAm^pkj?HbbX2$eihR
zrQ{YEpbd>qYG(4Mk^4VS1J{YP@H|hYP^Pb!Z^|8tZ`M&SHP44g)o!=8erYcPJ-X(`
zoXM3a3l!?d*4FcinQIx48^8bKnfL3t(VW150H7e2C~N3Ld@6nKyFrgFv_hn#eU<08
zptkv3`FnV{s9t+xg`QlI%txL({C#-%)u18o0-%<9bh|i(I#pg~W>Qb}uYCDnS??81
zVeb}1?e!?d>xur7mGY}IWqVuP`m$VWDkiGJ^gB<TvDTMw?FP-~moE%(ngk^zYQNv`
zYTqy+4PzL|Ph5=K=6I07z<lnJ>P2tqDCx5E*mH>(e8X3&@>EdWHqq|G+!cF6AlgP=
zgxWF%ZFx@MgK~g2`6v?6ZlNcHe;xq`0er+H*n&*OL0RM+bvyss;JPv#rvDu&H$~7z
zw+nIFJ>j?5Blhz}>_MZi*`3U&Ie>%sb2C6&4m(&YxK{|%D@tVqa7?yGtqn3L1i+^+
z!Kc3>`g@XvQ_+Z8=~vza*z<-=9?lyHJf#Bt1WHnnH})Om#f~9_9pgH?Qdw>_WmU`w
zB8l+ivv`W~Soj_Z!h;^%%y$2tVW*1~XJ>42eCYVhdcnFPTt<Qtdl>^wk{teuRJ2M0
z0ix*OccmhUmH>Eu?d8~E&)ahP1mJg*!Rbt&u;z*?hIy^O2uI?hZrwFaHdVYZoS4BC
z>=R0`z+i|dMMrueM#O@=PZJT`8-fQr$ZWSRnkq(0b>5N&@k7nG<LZrUVwmu-f7m~s
zv*v8Tti_G|y^|O=ccC4%Ads%?h`cO=hxo+?_l~fpCvubZ{IHh)Pr3aOz7>JmRrSL9
za_n?mz`C1klu?S=#(qJb>py!9oDfdwW=U7YO$ors3gg5MuMF3YkD*7WRE@?7lCrU=
zt=>e{M`FJo^9bu%Ym!7ZRie4N!vw3)V`2IX$qa-8P1wn?5;gIxf@7^B<*QeVbZ#T`
ze(U?TH>!Hn_Zs<L$BfCuLS~vAQGr~O^RPW>dVtyf0~xVPb@!_87&WZ}$EC3mi$!Ln
z)815#GCYclp9B^0mqm+F>L``YmB`2guxv5Scc<#0rG)ak*_~Ztpx~KWSg^~fsBA<<
zN841I>DPCz?(*@U1V0XZD>~CWS!Ghs@n^(Xug-II@Q{>AT~$>zJv}{@EHZKnOb|Ze
zq7e0TvKaxH-^vBt{`Qxyw{-7wV%Ojhw3s#+aW=hLS`Wt~Kxn}AZphCF@<%_X8@o6E
zJlj{JPUqviBE2^(R{n70?p(cNUidnw*7Z74=H!SkuY#EUi%HPOxEm6}Ut9dVmq+ce
zEAf6!Gjx%>G_tjJ|1}d6YisapDIOjT*&|&<lC-wOrH?&A2_#trqx~;W*XRcm1hyR@
zz38`=g?B?rs{7~Pq5l3J`#krR{cT@5TH0kVC#M4dx`~O1R8^w{%+NV`dG4-9-yx)5
z888G6V%78KPVT2OU%!S`wgmb@DY}oP<<FC2^3cQeXy+C-_nNA?%ciZqKey6&=<NS}
zGbNUO(C8As^hl50ei4|oUfrXkb)%!#ftNHkH)m+s=D6!n<FoVSOKxAr3^V|~Y=68q
zQqz|;DlU`T2n@88#7~nybDlm;`VF8&Nx^F~6Uq-md2&VG2D~Y^&CRp(EIp17>74DC
z>V7PPy4%NPSjyN~PZ{4f?=mSro$*i7S6|<=v3b9mJ)!RNK?=0Y=3D1PB|cl4w3s|P
z=TBB&FN=>*TgWDSae2yJHps)Yyc35QiL~!6;=RHRZyv&PR1`PB+WKT=;7>Pes5;|T
z6zMg+2e6e&mceN_{V_H4nDulQ_@jW?RAQby(KlX$;_o&e-}#ifAHOG_FXMbN8D$O(
z*m`Bg??$`6vqMzVd<cE@(04<0(km_7*cT>n@BjGB_03p}2Y+mF+w5(Czg0f8S=Z@#
z4|ce2it75w^z4zN|J{uVn$SN}-OwWqSja&^L7-x$Vbjo*yuAIzq_53gspAd`rTzBw
zBv9|wWF?out+x*z$j0_e+e^~h{dLN?MkFpO!=1;_a}$4Li|1c+)1Ly<<{L|ocHTua
z>5|o#mvbF(7QQ`>r<ZzBJA9>rhNdbzH#a5kz2bdwM1;pqET`rT`4onVWKRy+3k;J9
z62BmM8n(aAh{IQH*>?ZmeNa{bNl7NyLb9hvc4}&|28+GD+>N6-;&*vp2eoMN|J|D%
zQGNcUWsL8VNu4|FvbD9CA#tjGg7-T+TA=$d+PJ)Pu<N)CX}5uk&7};?%#d=6c7>c2
z%g2~^I+|iLQ&a5lA3wX^tEK1lavI03Xmo0s@4x$Zeo43#Lz#8L53U10D+h-ga&ne4
zH|uzGa*v=Dh2Hnw2Y6aLQ%WEH^^Slp!}r~T*}IQ}b_)1Xb*Rkv4I8SlmcS)aZZuHA
zMC(x(pJ|gti`R=vSN*SJ7Z8Go#r%ToWZM!_x~dWnpDRKu)!wQ0SFz!syrK{OT4m+(
ziw;T(_b;v)d8MT{VUsSsu?q>&uFFSNx3`|0Shy|ApHFR)5*%)J(l7b240FypYn49V
zM!iD;PnrB0RC+$%hmG$A+jwry{6V(5x>(3E&v~gE)fz@*=eDe>|J{>kI^iA6apB_Q
z;}NL&+~VDwy0^V86#41Nf&i=Ft-EBJe|epZtDmQReCO@GyA%-}Gta&Ld!i?r>fc{E
zuv{u+&w=<}b<=&mb@#sS9Se(A-o2at0-P0Yv&P)xrcGwLy7`x^Ai2vZl4A9pyGl6Y
z;(<;t=Oc3a1_$~C?2{JyXubQk?Ux(yJsaE|=Yx%}JAmUs1k%wFp`ihkdRfAF%Kc)t
z==t04Urd^so4skR`DyWM=iR%L=g%4WNGB(MCdV)bx`5$Svwm}b(_Q?o8IQpHRSjA?
zy1M#|jTYCVFK=IqyIZg_FmQ9D%BlqH^=HEO1`?V2>N1vlik_v#N&xOCE+XP{;57p-
zZWD#m@R+yb@>tAsDc@F-;gqySE|ZCBzLZOh&xW$a16lo-SRrNBP?5pk2pP8~*w|mb
z1nz7{OjIt{lS)$Bk@x0#eLlxx|99(c;y+e0v$XN1yK`Tr{Kq!`^spDq(IFB(taFmk
zcyc3bLsLH<90;v-&q{o<7CQ1KN61t9B!;oDvc3*^i#1k5gM;c(Ti?Iav#_LGKI){)
z0HGGxg4YdSHU9S5zXZ`4Ebr))|COcqldB4}bnbpTA45}@A%xRQhvIu%SGNE=T3-`r
zG&ifJtY8rE-NiDne>FQfdocIdEZyhcJuwlHUSx8m|NbvIX307QrlP7U0hz<KkurWW
zbecTZ%xRZ+tEiY5_mBx+#)gXjKQ@`*kProyjjcJc$cD_kyu7R|VDgh|7U~%o7+B5=
zim!UVo@{DrIyYg~T<y2mrDx)O_pWwTe;q)NLA-LPvUEJyjVZ95;S>Oyg1=>|r^l^<
zd#6MTIvUCxdFX@4WQoS=@f*)`Nkj<|Q6-g(E1DuiOzA48kyRd)z$o!rka*|OV#cH8
zAy&NLL~M9u)XFY+le;#zsw(J#wZ$*3>Hap<^x%-d1%I15x3*9<)63-4;ByLGwZlat
z;cmwiy~BP?fI5my;Ps={I@9GX9#-U$In)%`xg7sC*=Y{CUx;Ai7eTYJ?``enU%(^8
zhJQ)SAAR2}Vi850t1$$m#W~)GqWBCw2&^GjdxEHPAp#Nd+8di9X(Xh@7fop8)su2@
z5Q2}Y1=yifH^8%(2snV-I+EZ!*_;D^N7a@S{xwnt7laL;9tT_$XAeqZV4M6R2VPS7
zJHS^EdQk=7+GMg~y&QwHZ*g@w@qu_pr`#Ao!1PzZLAxarr3ko(7<g=mQ7o1s|0<~f
zE{unD37oLV1>4&m7{!hVJ4(Y907;SvA5dAT!_~`Gec{jESpUh68XQx^txMQ%VN~H;
z?dP!HqK^mXGE5Q+jtG*jEF%zXYCdow%_z7~*nuv5C5Ctovf=fYvEYjhc(DkZd@1-b
z0KgwaWf=Ic@(An)Hn32e6&HLU%yuLP2P^9WH!xA0^Y97Wt+qT&Lwg<eMvP5<5lVt<
zX?0y0F64^E^}@^rrOqST3D%&E$Y)}#`#Dpf3~_$+7TlZGu^c#Lr>E~9n#jNp1lWC!
Zhw$#1Clug(p9H@_sHtcxS1VeD{}0?pd{Y1b

diff --git a/docs/images/prowler-app/alerts/edit-alert-test.png b/docs/images/prowler-app/alerts/edit-alert-test.png
index ecbf038dd1cc517312c3020d56eb33471a9638fa..e36b86113ea657118a841c4f56027a92907f5715 100644
GIT binary patch
literal 191456
zcmX_Hby$?!*Bz8@L^=d1Nu^6lx)r3mbLehqq+7bXyFprVhK8ZLL+SorfA`++edgg0
z;F)vwdC%T^owe2p`>Y^|fl7=D0)a53rNop#AS6E!2%ZP|1@IfQ8r9bz5H?6!OysLu
z`cVdgKI!1hpsS**p=nY?t;x_Rg{U=M)JvCN78{@AIpn84r*TOyUNGh_6=JaSZSk1%
z?+_YmnZ`-$Yv8j_p`3cUGG-`*v^9AaKffn%cX8PnJ6hWCUG0eVym4cHtVUOKBY5q{
zY)vfQKaY~=r_G8$l=v=<0k_5LkmP;w23RRU9v7kCdyqjzU0qB^2ZM^aeA&f*vFCui
z>}rKp^;A!5fjfh8g{Lfw(i_)*cE0+{zNJ*iS|hj`4TuHwb13EnWr9K0#Zx#j-z4o)
z)nuEG6<mT|m(Ok^C_5Q^)P{yZ#5s7}F`4U-i~;vEEEbD8IOMJzJc3z7Fl)}pwA$!S
z@Rc!*VF>*Fu)QXZmLdE&KGuPWQ6|8JpkN-qIw}Eby<DGG3UR?b1b-GKb(u@G-}yVT
z_Umv0`xOX&IcGyfDK$ztUWJCTq@O`ziE|tmx4z<FrIY-b@9QM=Sq1)x*kFz8iEKC!
zS1@jNNaUS${g=gz4>=;|rAJ=G^;^va#o#$`ZNp;2@w6Ftd}fA*>&{|aqJV!VIxr5p
zRv-OzIeen^gZbu1nR;m=Sh^r{AthPcB&Wd}43AK0eoH83d>a_WR~!MP&-`b-SdhK&
zp5m4liI}5m*rq~+>L&OmDUt?knDy;~DM;M&h`b!0Ccoq*@ZEj}(J5NUiEA<px+dWB
ze50|v8jJ*U?wFj&ANGnEFz@v29Fdp$Mq3hp#00;Em)cAf`I4LAQo6!<8T9M$FMkOz
zjhH4_q@&vA7_M?``P9Y~h1LmoxsdLix$vs#?HBuRQl&hi=7@hs^2UDh8-m=X=+Uzx
z<0m1gt(ias+3F+TI#i#OiD2!&cwr9$F&R+^w^iJYhVqfsHA1tAI$f3(0!;g&iv3`i
zE<qA!7)3VI!3T9?`DO!G2X)w@TuVgiU&;`YUmE^=_Y(Be4)h{EpRmJC^Yp=5RzR~_
zt3F?*{+Fc1Q^kkiN@!)V$RgUH`7#%x0u(eKm-C{YzYGFX%@)xzm=Ywe&!%)C!+>4d
zd!1n<f63A?dX@^6FE9%^952_AX=aS^g9Cx)i3fG9f(OUi?P?ZQo+f(gO~Mk)$y9#q
zqQ+wEH;b`P25weoA&$XL^$nI;v5`POP4|$YQD3uk;I%BEN@}iT7@DLm?ai7YTFpZI
zf;Yir#@hSv+G)IkiwYhty36i_zs5dC0^@)(rQ9Z*=u<}HsF^?4x|q<wGTG|4Dxne_
z<`N!~&i7VOQJ5<l2JzoGBH-X)-3N67Z+edL@4xvvYqh`F_FQ?rMrMuHkn+5!U!;~6
zf^fyJlq0BBYXYgOBy%=%#mUHF`up}3&>$oAb%LJie|)*xRxT6G?|(tdGq0@CFj8Zm
zaOR$fImjpBK<yLA&|WF;*+ygx&8BQ+Ad&<p#3jfh(LtR?n&@*Z{Ootm+|lohRt@5+
zb{J+q$uRAJ?*{!CcxYJRC6~RpD`sn23EZu}_|0hj1ttZK|IJKf!Daa~E(&o>3R||X
zg43Kw<Rxg7;*HNiU89aUv=sr^bl#+|y?S*I>YSn=5dt%2_vsEa<X-FJ<Kwv}pG@$P
z5rNED!dmhq864$=*o&HK+M3GAjGG>Y?!VLvF(1;&=}+M_wFvEF&<!wkdq$o=pgk%V
z!LlIj29j_fmfdjezIf<9cDfQ$S-y`;70pg-<vr7Vz@Xcbi=8XN&LGk6xR@i7Hpsk`
z6{25+;UI9CLRL$iqVcp~IEKpfwo{z4#ih3cQ@!{n5Gi%vw`4pul^QX@cQSz%yXI4`
zYCin_VT<(DYnazwED8=IwFWF@t~Q&kvw@<6ZRd~p6EPG!o90Uv*?sybY%Q@QyY$LF
z2%n9Pvdj>OT;hLAi;||qFUT+DK`zl+XY`&o$?jz3@6NcAC}qs6`^dxd^#>O%Qd&~z
z?e{@dZg6f)-7xf}sk%8dDJ=k(1N4(;78SZNV@Bsb8H@;q*5+}V`xG2I5Ro<Vyt|R`
zU2JT4_sx5DUTAXub-hG_hR<Pt6AiVRX8I=aCbb$LFpfSC)t<wVpCo$TW1WT&X{FfW
z*I=$&bBGiT(V;ms7YtJjXyk?hiy5p=BOLCP>(Yqipp~AS@tGViSEMc2wQkB1YJ>0F
zJAMM;;ylzms5>Uj0+;jGy%?4W4T$2G8U@Di<2QI3w&^Oun%%)jQ^_S-l-D$0h~rWF
zFn~yIDhjTi3=V88K?G~nVVd{(P@p2k5Wjz46-y;aOHC~%A%TF1=<ezHrBG>MVQJ~B
zj*g0wlEdwv?eTF13Cm`e&CQbKU)kCE;5K>r$eEd$f`UfNIqccqImyomlvs;QkdH;e
zG!$y-^7a+s`#7h##f21IJsUEmZpj=5@z-|6@Y(`BpL!1uED6i(?creH09&5CJ8Red
zlvvA{3^CWn%^JiUA|M7(VRe~;N!`F#C1cr%w~(1xVuEGI#H;A>TJr!20%~CsY7^1m
zi12W<X6)<`tn}c#dqmkuTcM91y$+^JEG+gB5D*Gz`l;`^xHw%H66=RY7WsMJ{m5Ux
z3GDllCy~MLda^Zy+tAPu@%nR{a-p2Oq9OzWdC$U9Sz2msZT-~}c3J2W5RjLfi;Igp
z7(wKCb+n*dq#!d>Ne_<-70vn?|LPU+al_-x82s{8N&Bmkp%Wgb2nOqmp;5kH$l{#&
z;x<#wUDMnLIW|4$M2@>eV`_8ETuN%o+J?Ck@s2y)F9(L{N=LN(VUxBtdz1;RzJgTb
zGcmq$_64EuxR@*y;ZmC>448%MCfm@@%^ml;Cbdkdal;oVWeqD(bf|`zs1_*H$7`!U
z-3c}af?bh}kU*dlj6g!Gn&V#!1Fac}=8Hp62FAJHP36y3<^jQIuk;l$Gz*%xhKn$P
zvICc75+P1;JQtlmkHp4?9|!Msur*X?R>#kuXe#63?p{=+n9k<RFw~ura!*JP6YzPs
zNntPIomhBHEuomo;eL0qA6IXMNcp0^rf8&X_Tg7OA~Ruwn3iU45m|g@8mk$L5nf72
zEg_|$(?GgAkt1`HIO5p+!?JQ0m&ReXPep|L`6%-2q2RsT>1&09a~+{OoZgqERuX=+
zDEF28C;CU>nz-*7V96;ZV>NZ4v8l>;aKtAN)%u}%b#K%BiEwbGU|YzAb^P)GqC`lB
zF6uWzVB52^j|P&bSyy62px%gAG7dw>^F_|@ORCN9?fmhPIn1wvO~wwn8SIIj+}v(B
z=gNyKDtO)2{M`372;y>f$Fkm#lh=S3RS&h}N|wv2biXJo%Ujm|^H=G*sL;@*PVcfv
z?HmDP)F2;ns|}-aZDq%){CW<FxBdbC(+-WM1m>1DJ8WZj8d}1eBjsG?!yTGvB|lx4
zUHBov#j?aRKR6FCz~e7r*(B8PX@5=&aefK9D%f7o6%?J@`_dNMC@aU8G;mBCf3JCe
zaLP>|hG`#{Lxj}*C&s|b+l!wMMs#RLa&6{W3W?Yn;|1Dz>VtD=d?`eN1vF5FQhrnM
z!Q@N&mrgZ~qM*dRzkP^@z4yq&EdFFspEP2DeIj_TP~%G(^H-CgiZ!d*y{?V&6wM^$
zHc~3lOnRN&V)$MR*@L=5WTVS3xC8{Q=VMKog3f<_t&4Va2s|(<t@redu%$$ZZT<OE
zo0Nnvfvnv|r$7oB=9{0Q%GP1f{`^_^xKiD|0`K@wx3J$1f8*n}6gABkl}{L{6U77Z
zwE1|6Np{5bgm9WxF=7T4BBD|rh4@6@F4CAO>qMP&pI+1xU7MMH_S@NeW0!dXiBLv`
zlIDxNAN^HLExLI1$z-LK5bo~8^8^JGb9T9YYio<drg?pU#CG)8uk892SP&Y4QsGNH
zcV?T{UZOCJiI$zvjw~|-lk>(Q%_gN{lTAgu@*4wION9&e;65^3EURN6V?dw>``>7l
z#u;%QQ}B!vZ#8RN8ca4{sGZdgT|JNNJy|ty){VR(YPw#*#31IOuN8S*pkt%<Ss3lJ
z+LaiSz79h@F1J0gAh9Dgt+?G5c5~w?`FVeJ+~W58g%RG&j0$rFbG}GC;quD3TIL4q
zaXmz57m{UEo?BX4+tT9R|2@$kwjE~uD^B<_MU;%*@NqX{+Wa9FA;gC(fW9QTYqRe6
zffe;hk;Qz3yOJ2#1(OY*iGn88p0u$UokhDoblUjX<;$H7M#37cNWKcSsL=J2V?Mv5
zNi*pnW)M!c;NkR}uUX;?2DfHttc>L%K3tKqkR+Kfk#t@<4<DzyLCwD_KsZSMeq++9
zPeG=B+rdBeLlaC>PBTdu2K2XFW`e=~m)3s<83p5rRI5d&cUi5fP)LaenU(zU>Fc^E
zjK*y2#yA<HNXLgEBPL?PGegKJ8+t+ThXF`fTRS@+-ew;d2g<Q3<!!<->q}jRmp*38
z%9h)`<-#Hw{g^<r@-mf*=fgXCR#vTD0Z@wfMRy30Nrd)tGO|;b0XzF};FZUeiEBUA
z-qptxdqXU9=6G6#r6ymYO)vFhIB$r+HFTBTZ2UDIUTmM&W+XQv5|UnvgGpZS=&0Oq
z(R&){m&rEP*6AD;uki9TBQ~o&&oC@bpmM34jm8<AVbf-C3+>=km8^p5q14#S0+EaO
zu!M}7O7Lurjy;RI*I75x8?U7c_9gq&9Gu14{AI3c<DS+A=GsrNq=8!XwDJ>w9%a)c
z8aA8zj^r8njgK4CZUZ5=ilhYC_*1Hy1M`{U;rOwdhTL$})_>;DhKy3*Cmyg2F#UMV
z<&N%cevO{NGt5Z+xhkn=wTQJSwB~z6M9}iGjwI$ALosC?9XvcTG7^%(UCHxl8#OgE
z{8Qeu(a$O>L_k9#Ab5WqeQ6S*ub$^_DYW-K|2lx{{RAovy`YHNNatbWB2n1dq9P8R
z?yGX5Sf16xHqY6W{!ssG`~{yy-l83EVkZKjyFIGO>=w2IUc&3+k!iW!UwH2(e@ahA
z1XSN+eB-z_r5z*IsvRfh|MA*nP%3katD?zz%itTQ$01|mqSAa^Er~zO=y<geYydt3
z@Y7o5TB*USL2z2}Z2n;>tL%WB)=X{?@!LDw$y%N?C4t>){J#q|w~0+$&pxH1xx2k<
z1<~=Jk~<Q;Nnq_{HPGf;PhF^&3X2-PYn@8ovz_0X&|Eds2{uM0`f+x4c5!hLfQ0$s
zl}O<)iWC#K`m_}Kg`aWsg2$+zia}$kLv=xj89>vaqSq`?H?-iVT(9JOSc=zp%sdl&
z0jIg#>X>mIANML=9<}OY+puT2b;mK^)n%W#z&m9%r&+vmvgooE!fMl`^11;`TJeST
zc)C6cE1LoytAQ+Z^;qvleO+Mzl9P0nOS@5--+$pEX*j>$_|c-y7iOtB?%8JaF-@ky
zLAGaAnrfz5in2C}acAZu+W)wKgcOsxpPZf*(czNo$UoQx?G!B6((AK%_q!cwgGW<d
zvw1q~9hDf=6$L>u$pt+T)yfTfqYipQh)AlX0&K=tIy@U#JPL=U#OJqaE}E{s3MSLi
zq)yT-ViMR2X}i)^1wLhV_DKy-mrN;Sd|X&4F{bvHi|sB^E=qmRWimXyIT+2DC;^jK
zQ0O!R$*@0AC>zI&vQ1J-`86^X#vo?6zYC9jExloju1R9&pQH_=t@8>HscWAxuFw=v
z<ZD?PQplzj4nK)eHixFCjy`@8;Re4h6E_R`goB5NM?^$~jh&tLhLBJyrL(g$LU`%z
z4WgCl5TDhN{-h<<t0mj>3Z{8BtFInhN@D(1Lkyyg9_o&J=ZuUK|Es^GEH2;%@AFx$
z#A5b=Q7JpEQJ7pXm##{>NC~-{I@*YmdgJ4Y(3ZxO4-yGQ`(~ckhSA4Osuw$Q$f@#K
z7i$Z+0cMJ*DeN=}f|eMX%)&*2zs<LfG$NQMGHAjBO%+gd@>7ImtNgZZBtj-vTc_L)
zevv2-#N5eQTz>!NjvyVZI!lbAv*@KkM~reRjoi`RJ~=r#o;hYp9fV$3P!MlF;MBIi
zzi&34&ZXUt!DEC6EM2OF+B*lIesz(BLJF`ZH*zh0oXyy;Zfc@5&4!ckONk0r{0o!W
z+-v(U7Se^Z4&NJl(>two8)@qfXOlmC#9n(EEp>IJM=)=YcU;xp`Sw!0zrS#nmWI}J
zlv|L%aL1=qJzoJsKoHok?D$L{z@NP<*ZGX?wCmcVomXgDz-lO2gVV2;7UDe<i_*Bh
z=O~Pwr}JA(=37;^1i#we-ahTP&g9BcV8o?U007H<jnN?CN?>qc6bW}_P0jC({_qHa
zm>tv6r0R%9*IC!N?G(D<>;le@jMYiu>LDts`Ae*%P4Vlq#K11MW0uotEATa3TW#NK
z)Hr0)&=_kbN=!i?*rKAaO+zfJIIjC$I!in~O;S7x19QI`(C<2eiB4v#jPp{QNR3vg
zaldJWs%UP;V;5vPR{2J6!Q&*Q1xBlsJWGscE~{$Js%j3;`*nC;JD{*!)Ny5T;A$>4
z*}lQMIqStDT3jQ+oz?wPq;sT}6{1vo4E@nCw`Zbil3^0a?y&XC-~Wa32_&9YvGWR+
zn4tcAyPN!;z%He!qQ!f<_)COlo)U06(P_6^_v7;#jOh(TkJDhYk!i|NxxKxWSk5Af
z{9v+-952FVRj8A5hLc_JB`f7g<K{a?89^fcRB4-yRxffOL+UVx5!6tWI>C&%?|4>$
z(p-U&E|zbiwySY%jpUq0C5v~|5_<Q-=~<<xr@()Dmr=YwLS%?B^`UKUWk~%f!5bhJ
z>TV}3p-hal5jX^RsaUwQa@k$S$Hz4_H90vsmzS3j$Zy}iO=8mcv`ck~(r;6m(uYw4
z6rv9_L7PZb9}g>jYgu%@urlbF;Zb#Mthzw^-|5KCmXuzuF0Nr$m<ASz4vwMAN11I$
z91Hyt>Ar)?L7&6MQlidO!dhhh%SEb^e4Y?;Q=QF=+Xmz7F;leV@oN1YPE}FR|D}oL
zGAx>$iNh%%*A&w6uuTv#235{#uuIX5h2ht$m2%>a<9T4mc`o>TDbH)oX~`a?V-v&4
zeiCulb5-20G)h>|i@{mz`VkZJS<`Sb&GF&pw~meuYS3FwP8CLB#~Ae0BBe+oc2f}v
z30K$aSgO1A&%c<6xM|=A2kBm?oxSDU+;;<-IMBaS-gvRe4jj`8%N7czRaMRcFkzI3
zAFaQbYYZvx;Cu~M9+01tmeTRTD9WTpy&5DihxnqNLaeKV8k{P2oG(U2DH9j>Duiph
zl(_ygoF)lkYFbK+Vxpg)Utgb?2eZr5!z}_DehguU@3T)H&D7*1t$eE3TW2Gq&F%oC
z_u9?EDI>}6i<DO~1w75cU%yT_RxH|d-kM6BpZxw!N3Pdoqa!NX+wOk8XHEF}wHRLX
z8zG;AX?h7ZYs$F=Iq$~F*H)~e37q6sH(%G*5txTN<rx=#eP`#`kkD@js8j*Jyj&FP
z&Dzl_feD8XMy@ol+Jhs~O6b6trir|sr;92EESO8a5kzOszm|f1l7YRjJgty-{3eUS
zXshD!j<AfWBDaf8V!%?+$NqOJ^xc8sg$48WWq?nP-S~Ln>|`k;F(Jw4+RM*fAc1K-
z%}C3$qv^7vgX4qFn;x@-D*&Yym%dSo;Es*`Lcj?NrxX+vl$IXK9}Nr)jF6Z9J>Oc;
z)TGvy6qp<pb>(PQ_s09^cWj;nF)9>Dp-pAFA2!^R-<#j$i)nbl0SH9;4-OU1M^QU;
zaZ3QUe!5(+94&*8YNuN%`#|xjRAqUt^>?}h(5alAFy&(~L<`i9agTqE1cEut7xh`6
zf@fkl<lY~kqM@OoqK+a%zgo|fs(``ZuW|5)Gi7SmmzUdHTW;>|xA*r`^aBt`RY{5T
zH4?EC-{Jm#3a1r*1<n5LQj24rWVCLLp}3?Zl8Q04-^{(5OxggDHQRCrb%9Y3uEfls
zIakvOcej#4XeiLI)%yww(3+I9M<bFF78!yF!37uq#h5rjGeArPQ>cUjRB2rlN*|oH
z{9%svU4+M<PMGMR71kTHbau-1p+%Djq>6)gCDuG23F&$ElT@C5KW;>4F(a6VBUn=l
zJ08>-Xku6}qFWIX3#)mnwlSgFYoVi~TUuLkv|1j`zfO^pNVPRG64lmT3XP?DzrA~y
zh=LXU`MR!RxtcG9W-|iC-``()zyQ8ye|(429LNNsFhcC?NWJ$3kIXGC2VSHh2nHD<
z;Q)>I!-Y*Who|eFy#(UAY#*X)3N(;=IiAHo2J8L^KwXR6l(DP}&Y@!tXUEpWAn*+^
z-ma~!1?W8hL=_homzFYg7>46B=Q{3(yzx=j(^IVKAqSA|?fI^iv+=9KRj>20lS&&I
z+xhDCSuNWRC8zB=$n@#m-bX3CXmSCMqxl*r6dD?eY#ADhT@0B`*{B&XL_m^-j2H5^
zwcj25ApzQk{yf!_<_@1nO2x-QamF517&hf8o0qXUom~)l6mfl|y)&J;T6mAhJK3^&
zT%p=WNc$bT$lbu;b(I<6kXcy!Zl>qe@uK8#ZU1d$^NW0=4~-~;Id6PL!zBU=pQX~S
z!Z2qpy;bd>(H<r{Iy(5|;SI^TeLg-iw>r>JQ0PBBAe5Apw7$6T7J6dcj{megH)l4T
z3~;`GdwJmt;X^jp6YW=_7i?CRmOOO*r(Mr0)!!$r+dctw?3Gd$=lKl{A*5;eaiMs4
zl+z%ndsI~80j=z1Ffu_ljgzk_2RSsZO(>j_o;57(%jeU#g_!IHn%-Q3>p3G9P`)3x
z&S5N0ES>i!Z6#-tZ@l}8yzK1ktgV@74h|0X{?cg~F)=YoNriO6o}QlZE^=XIRh_Bp
z<HhK>`1pn14X*1wL6wy(d1}e+?d=H(2__>+u?ul=aRB$!(AdcKilRk*r}CgqhcrtZ
zEBW~QVqf5vXBG#KMN{8ea2h-aBpgupo#k!S$EX!1dKC-l<=k6hZ0&9-Fc}f7MLQ=X
z5fRK7@UuGsJa71e2!NgQM<v6Pma6@C7<glv6&OZV-*a={id2q$jVnre`#NjSZlDi6
z&@xOz{Dl*kke$!#&-})5$bIxn=~Zqw&-(~c-ndtFW)M>oHi={HAC24hr=A`j%`cXh
zm)Yc>0N}x**Eu>*rXW_!>CjdJiCEabPw%7fovx!twbl7_ZN~BxtQ=dTFGxiipV?Dc
zB4P#kf#1tVU_oJ@nRcI81Hbzu_wfQM+L|Kta28<0s;H>QGBG<lPy$(4I3O@5Cnwhy
z%-9SrhVTK*6(nxsqtO6*T%(bpq3L*fi^UY}u(4S8!6PH<tKkxbGC}^J&AOP>sF{om
zDI{lIX?#OgV5dIKZ<MaXbDx@Wjo5cg9VT#+;S`~18U56ZO`bUaK2z6&I+aaSqLWiF
zn=Q{A{(%OkyyJy^b1QB=8vEYbsJPcvWV8VhmTEs4pS7oj#mssySZQz-ddKD{Q=bx-
z{?0g03ThBP7_3O7?8&eymvZ%;@9t(G@Kz#tPx1iUUuj`~`xv|jFTh0;B%2>WQZz=&
zY3XER^L#ojq}w#UxOh*8B_PIknYmm(Ec`@UXPnNuT-ns>hd{Si&g5OR2plivQ#rye
z-YG}zu9z<3eIKO=X^6eE=JY3x@BjQ&X|n4w_zgXFsbJc5waX_s7~hqNX{z?1?-p5c
z;a=aWdhxe)0ZK|WCMv4l4O=Bbd1Esc`%f>6(2x)jY0;MzQ`6F<#R_p}D|OnW1XtSK
z*-@YXZ93hlMFMlTLA&Fo<l{?4_c<Tqe&2r9^X(<lJ30Y@j97U3E{YQCnt`X9$<P#Z
zABlXWERFaBc1BZ@+nLv%J+JM@6YreB;Kg#X)}H^)QjU7#={v6&N=+t~@l_XL!NIde
zW96Gh-_6)(N$Ool#;gl2rJ6)x;JL<oR%)7Z*=t=SJOWtrGlp=Qrng|e6f*E0OsoUM
zH5Me`vU#PvP32mI4u9fFsk4UQh&VbbSJ#9NZF2tR7JOI>NY;IL<K3y=rJKQ<eP+kO
zF`dQl%Juf`r}tR_e@g^BKx=n*`%`ho-;KJ9rlNR$GEGZ`mrUjgTA>c4je0joX6~Y#
z#r%_R?)1x&g!gzop<1f5fY6>d@l8TLfp<zu3K8*ag_c>NvAVkY*RQW>biID}19Tb7
z)YKF^4NVYQa*o!`bcr$=K2!5%6#saZ&>I2*NfQSLht9hLMw^Ptdq;6`1nC(7AI@nz
zjy*lz?~bKO2JLUT?N8F2;F*}1&`_ZcLCDHeXb#6Tszx<`RSzIXbK)~r)6S_I$-`>n
zR2r{?r0=elw#iikw7`Fb&X?(vDif{Y(arJ(U_%x25q~YCib`JfG&L0~62pucywt==
zEKPqT)miTs_CHZzHq`-dL5p@b^@?5*dR`xU5rj<VQ+p-bcW4p%BQH|7SKWBp{#0LR
z;_i>+$NWI8>h2FSwU+DQtYc2vclD3LY=EJ(wze{`vDKDZhJN2TK9)a_(bCd#cjrxZ
z+?Fv=Q=8kH$iqWbT#iG+B$bktg{a5GI{r4))5|(x09v1XlNK2s9`n}@X&D)|DnVT1
zqzLv`IgG;m8F$)WHRIg(vIEa?<I?51PFtNLCmN(tP{d7hSI`CU=xEL|l^}@CAt0Tv
z+ScQb8sUJVl1|0Gi&PQEVTuj(!VANSJGq#0IS+eF%LAarIHOHTi_yjx6cxSKs0~!m
zB4E*mGD5LNVj9ZJ%jp4GAcK!nNGR+3mwrGqhy<#gLMXNIDFN&G)>?~btz&550sBaE
z;@#*Ut?GePYJ`Gv>uA|H4lvKjh6VAjK49g`dtKD9+lrI>C;#IDRy(woUgHo~yiS5|
zFjb_{R9At^ZI~b~?*ueE0z4QIhdB;bCD&xO1`_-R=t|s?v}C#_$9tNRN1dgpqrRM9
zcAs;ws(@NjL$iM#QDK{7I-40ad!s}k@r|GfI{nB;v~ZN}FG@;mF4o^ynEYi5{=D&h
zPP0+4wLSHHdVJ6F*nbCUxRsBL^q^_zqody0-e#kH$IMJ5;4upD`$UvpH|rtzBh<9C
zx~&NislcTkkC0NxVdqVHET+OZ7Zquls4gj+RS)lYV(;6VU~&aOVSXeU2O3>|WKZ`S
zk7YA}u=_Qgo$RjqGI^y~q|GuK(bxC+>dNJ~jNMr*N<Qr}0=l26aCf0pnU@!U&uu*~
zOk7`8RV6ls1v?_$7&xf=8U=af0yrovEMaFd)ZZ)ywdu%Qo&PG``F%JxqdT$VLkm}>
z^_Mmixq!wo0_AcHauLGNe0#*=+MJ2YA@EeDUD_K^T|RDPCutFM(potQ3l?1%R*LQN
z;Tq2s4=0Q~5{|iuO-~=aJqGv-ivU5Zkq=ziCr+9DHzZ2-fYOD>Sb6#9&&knOwn-60
z$w=Y`Koc0SZj<O0j)yr$BObr?^>t+9F&+Iu#@`6+OuXz!9kK$SP8t**dckjI(t-!)
ztr&;$E$nG*#hD+W@Y7BCH+^r<m3=YO6Uca;bMoNLlT5}uFDvi2;v*2y;$AV|2Rn8`
zF4S7XTR7))DW86GANld(XzcD4RwXKD@k&)EeezDyCO3+tt*F~Hztr#;G@IQb?k>z{
zcqhUc=K8i~hkCULYzkOUKz6R>oqpe&?~|o|G^Q|s3-YZ^IMYU;15^%D+o;T?vZl3e
zuvpE2q=%N-0mUsB&ov~z;^xPdzF&)g4&5s;g^nstVk|0GkCEr(;*tpzMgi}Q-<y&|
z`xF7Y;~7+&5&JHXOaXvx*rJleJgnH*$olZIYmNY(h`P=chKEWgyeR5z%7ODis;Qw^
zM7d^Ew4Fm$DgM?R>VY`6w+6^ymG?d6ps`{}iQ!@j4I~741*vT!l6dzu;X>0Fe4^^I
zZT*s2UJln8uA0-?LU%Wtl&Z_J0WO;ATBI|Dsl<0x#)t*gR0`f)mP)y(am5g>xXj~1
ze%bR5p2%5r@4vdC9RrhYD%s{PQxHbp0Q`KlOc?%W>1LPFA7Q^Jbp!CtCEe`LU8tei
z7?Cm-0}5Efq3~etdRFeEh#Wn~TEt~9Ey;Cgkl1b@o};DWwsH?QZMpFwr3L3+Je^{t
zhU5K0-GUOYh^M=|VhW%0qX!y!Ymq|9qJZO0eGYEDbMN8tv4HoTQ#e3NnsQ&J7%dZI
z#Xng&CDMvX%$~o02rs%@(ksiK-w+Erm?!4@L9f_TFK(ZL`orEApU*1yvxvs=)9CY}
zec+V{as5EU0x22+6Je@BexA#mOhxff*+EYbT9)TY3pIx8s&^CKX-58_V1N}BhGHMV
zfE1KIHp4*P6zxO*LFwMxX)~V+P4~RF)x=iLqJ|aK1A?<nOtaX)3V}$!i_JMngF}Db
zrBRg;$5k%r+i!9P&9kbht|istCsnYSR^UkUQ?(EknfK#YSI#@{9@Ig96ij|{sN-U&
z{}l?6D5<Cr@Vq)|zda`k`-e^Z2pjtqV{JY3I?DyYfC;hwM@GD)&SW;mOI9qzPW_<y
zY0`(3kh)^I0qgkO4@1L%BzE75(VpPh5bg5mlc{Qw0aFx^B@r$7ADd^$$J+B8kyW!A
zwr{(ljfw8NK94SSJy-Idawt<6b^9}li;Fs2&KAGnFiJjItj}Rot28z?j=30Ro@^6@
zISrif{Cr$U0c%-EzPRLN;_y0}Prw<X+BDqk>3#d+#S4Jq1GK`wk00~?(UG-<MP)@9
zJ>z@Eb_d?~@0%(+RnK0sGxn4El{?-F@b|SUu-o}JGRudIPlnhN-;8>jDO;1_@v%Fu
z!Wvu)iWH~QBB7|iq}<&42H#X|D*u3WoR7Bw<N}iu*C)|mQet9TbXjMX$wB~K5jkUq
z=}ckT8RVY0`4Giy4sE)!g61>Dn}VgQb(OzrDt%ST-3OycPaa@JuTe%|OYPvR>T=)J
z6^w`|8Rn*ZCX^0CF=a6Q;iF^3)h_Xz>|9XnwoI4xV=nttx9ut~T8I`WwFdrhW1UCJ
zW_)y%8lzPz;9M-UkvXmeT0W8Q?1H!)T+yJ<3HS8P(G-%!>uu`hW~{r?pUa5AyQ?ra
zJ6m7RAx)@^^3Uq%zXnVJetr~6j)sPtMRMu2J4yVOR%OxTLLPf(-;!oc2RzE>vNd+m
z5s#7SxIjx`;Kjxjm&N1Z@$rXt?E%e!2>BFF&l3VYWMuyu@3umn0yb{$keZ}~1pD)y
zF@k9p#b8vZ%a^R6*ZBHh|FY0~*(q_bKabzfNrP?Q1iEox6+^t5CPMA&RM>Ykh>BtD
z4r91w9OkO6Vc#pnghfC3cx;}fplA#kYm>|K=5dk~L)wo6gM#%s9$;no@A;j~pOeP)
zcDK^a{)q>4RiG@-88!|h`D4FHE0-bYIp(YTXaE^M=5I77&2|6Dw-6W@EJ4$ogtbv_
z6JeX|;7?00j1WZrBd@XXs_nG1<@dnMimvYLtq35FQ(vY;Afx)T&Q~@yIr~84Y2|4z
zHO$*S#$wQd8D&{r%%ubt)(jj4`&%h9$CB$Soej1tLZ7TdmpeJvfnZyn{chRN*x3lz
zeC7?C>Q@S>W_AzND(`kzpBCqqFVoD(?=Lo8a|Hj2xPZ7q4ISfM&Yg<nTdtgv=U;9;
zuNe9>ykQ}Epbu4A>*IR~ViD2MSRl~z5)^dqi7QJ21pM<Vsh|>6m3%;d!$F?2(bT;A
zv#l17KGyXXuaM#EM61i~8s+)d3pyGHUj-Sd>9h+)*{h&)d1m<t;XG4AJ;Lw54u~){
z2IR`oFBy_lLgqdv8#7DHtc7XblVc~a?`XORs1E*Mp~q2r%5H3Dv9#TWuUP?_toN0*
zQT)z5+5DUD-^2G!OqJq>$PtkcXz1uNhGsi)*a*(jY6v<7JITn7@lji*w_cX-wGnq7
zqd%$<TSds0LZqds$h~h+6oWR7x%ECeAE>JlY*_#E0@s|NksdZDK}M2wK<{<DthEZ4
z`JS3e%&g|9ivi>HjkmO21o5O_U0od=9nH`4ymB!qFR!cwUeKVNdt7FbT#Coocf9;(
z8(4j8DZ8o&9wc)tDm=VvCl!y4s6lIS%BWHY_&519pJnH{#N=e#6>IM{{Mb)^<eC%y
zpyg3zKT~IPRP1b`NJM!R|Ca%TxO<k+X)Sgd_gvL1ER0sVbDV^^if3*0TS#Pxp1l&B
zCek`_{bmi5a9i=+=)AaJlD4-g={sSq5<y6c!1K_cPlNa3fcz@h+}76UpAbO`=*#t4
zg3b|rsggcd#`0i!i<0f3@6=P-1(M%w=3SN5=alkvWUxU|1pt>*edeI#@aH?;TyT)&
zjhkm3)8drubBVaYd)w2q>NCL4qmU+Ov|noyDIeM9a@_9r`z;l5<?_~+u~JfRiO!oh
zFt8`b2jU4{z%w&lJOSva?K`Pfsi~>?mUHM164YG0Cw;^^O$LuTO_i*h%cBT>v@>qY
z!4USH(K<pb7<#|~`{|8TBj#*(NN$|rVS?4GgdmB~6+oSR98=e~G3;$S)x4i*jV97p
z&K3+0%!=KXRb$ereF*Xu(o=T}`>Ub>Pct$S))Di2#*W?2EW{h6qxpsz2L#pc6hm?F
z0kc(f;*dLV^;H-=hF_bKmR6h5;Fb6NRU9-uCgy{n^Cx}%n5HIz3MB^qw6wI+va&ya
z9Gbw3um$?<_eCYkfXT<$^dt|kEa3v84#2QA9CLAUs;a5!wI(Qf$2aOI18%W`JApRv
zT7`(2MtTPn-J=uo5t3;sqVdap*6qR!Cq`s4_Vg}RA1>9>gq+82j?DGLiwSdRDS+GL
z@F*}m3<mtYQ|^f<=vl647qE9xI=i*J$A2`PB_=;<Xlaf86Cz0adryz76Z>;~2zgPx
z3NgoFH42K3_Na4B2{Ifua#%Y7=ZCBQFUQ1hjmmrR#F)dU(Bt+->8JClgq~M@(NdE>
z>ud-4VtmQsWr`flzGv@ZO;~zNnKpYBOSB$y*M2gkc$>sE&o`OPew{XzES*V<k&0tH
zO}VzqB~hJnUx!SkR0?_c!S4AqNi(wQaV}mA`Db3u@0{2bn=YJ;6q~LiIC)qI>vO~{
ztk-bnLBC#rkoy?mVB(ndxp8sMdX?OI5_7Vt`RmRkvuVjWEx#rXJJoH)Jaz`LMN$T(
zWDcLKwJsMXcVZCbT}EF+&7nl-)d-bt-cIUS6)2DC2^<^W?#b`Y9=Wsst7wx@W`X7T
zsbhiVEiIPgkKNh7p-3P*Rdp<()o;|#G7qw?2Q7ih1r0Ecu<;05n_3X=gD-!sQW&eD
z*RUimp7W)iV@^6otFa7^D#~8_cS)l7mY2t8ggAJoIozsowf|Vm<YpZ*I$*lM(PH3n
zVTP9cVVT{R$HDEn`=#gqEM@=%IAphd%GIbN`1pJ+bjDDzk=Q>ND&yLX`jwWTkEmY5
z3q8?h(mB_zSi7hU!~^&8MLqMh*}$c5BE?SNTVX#gozx<nr)0iP#M`SCK+y|c7rJAh
z>foRgZkuKqlex!bVL$#5$6+8pYLX{$R3)g_<)HFOy9epCW8mMdu@vO#`%o8G8z;Z&
zJ5p93Zw~d!?5kikm+f%23(%372|~mG*>X_wSmz72!CfhnXoxJR;@7cr?I%uCZFI(_
z9dSNp2cAIgRK-;qjOIB!jA{;o)3|LP;{Ho79H)52raPxzNLjrTgd&$|;b4E19P7uG
zM+5?Bo&+l;+22-!ar~uC_6e_cK%*?!wa)_sHaFOmmzQB?P}D!OVaua;hOvULy6Pq?
z;xk^NJoq1aBAHlODg69yAcD;GYKce}4-ji#)HL#0IRHbGz5v8jGPhyFAYbYeKjsKx
z+o1zwP>&1@Ly}Jfjeh8y(Pe^wfhAi|)<6G%-S)-9%Sz35Ysks*U%CQ#ejaCQdAF_?
zE&2?|1PYm>yN^0V4Km|kX?{9tBR;tgw**lSitY^czJwhZ$vjM$XTYUBZ1ve!LSHdd
z+BkUB2O$cm&*vj?EM;LV8l?9<F0kfgg^3f%YNe7Wk_!FxNdA46qADxLW1!VPf5!Na
z+_p1Rx7Xef;uMIqmE&^c+JV-R&d&T?%1`S=4^lby@QLd)YE*o!%S76+dix(W(BEQm
z2WRkl?@0fDKD~G9Rcv~E@rIe%tc4J;qk=+z#(^T0{aB*NFy>~m!9kH6<{IH7fQ$E^
zI|9mO+Eb4U2zJf)bvdk^;=P}GdwZ!I9md)JnI4Ec$mV9hQI8!j=XG?_CnkWJSrB=R
z3A*X#N36#S{fK$YK)nD$$_h%~r~akcfEqeDdje7Tmfy`CSPZ#%p0A;IcPIF7qicya
zJvyCNNo!V!@V~_lk@o}4tim6-aI?uO1!b)UY3ySo2RR3v?Z59qUNzXL^aGGNyz=#j
ze`nGZY;(WA<Et-y<QVuEGmAoubqWGm)kK1hsSoOy%UcMc*)%VHb6*hK<M%ZSg`+$!
zDQa75i@VeR17JXQ#5V2rc-}X==imN*Q5Mek8+~Z+7>Y+VoY*?(XGIMA<i^*@x=al`
zb|zpZW*KGC1_n5yNo3yQUrKJGFs-7~;wiaBUVPbKWc`IVjbSxomNyWr@9_&MTq00%
zc6Ro^iJEPUH(2eT0>`7WG0OcEHlf=aqXCA!#w?qsfB;eFKM_J72;E&?KNpuxJ{gpM
z7$k<VwMs~tS>J$!nlsw7{K;70%B;DFLCu5`Q3xkDF<<>$6fQO9Ix`?BF18cB5Lq0u
zPZ+Lh)7Op8Y@%&F!^Uj3ikhFDudke)wHkLekMYP(h;R<pkC#>Epej168p=g#612%9
z?HpVHGtS?JxM-w-_2!MUkDgwYQptGiP;>gzi`3Zt<NcGv1H<&_*4CWTTt*M!#nO>i
zFajc9QNC-lZ#h{FH}^;YIRDF7|9y(SO=UQ9npfPFGfJcR|6S0oni?N-u2UqR#2^#F
znF{>ukXdYIrQ(SEe6eQGu^WZ(OMR4mcyl_ntcHr_eT!~(K_>It*R#sqw}qwL^=dQr
zmBqY=J;FF#`gc6fB}UTON0s2xmFmTG-Xx3^0eZVXZb>Rg76$i;f{jHj6%HdOm3I>0
zZs>lzXrV&x%(DDgP?j}x2dN+`T=$2FiU)s!`>C&RVh7b*i4_M%vy4uJOGcT*!YprZ
z=iORH%p=DYTcqFI5e?J@D1)Vtw+sMYb#`%K`(JRtHJVRq0Xwe@r_KHs+A783L5TV{
zJkEZk17uq#DU1oMl`9Vivl$;NmfW@COAK=;=!fV5HtA2C8wH|$A*&<5oB8MDOZ`XM
z$gg7XGq!@c2gjSUXAdSa(-^W|8@YrTpV89o-LrikQb}Y4pDWu8pohwNZ|m;rNUGUz
z4d0DmBEy)j=X$9OC#U^x@<&#|dlskqe$?}@#|4yX&poqbcdUP_D|9AXycA-(PB%zQ
zPa_fF^2&OOtjJmZC6M?>)PXKjT1WIpq1Ge#<JIMU+M*vH+8@oL3^<C+U!^7{Gr;Pq
zE;t(OtptpEUhd{&CaG!&Cf*lCoJECiO$t;TJ0mGh9|=y!DgT_I`OUKfD+~UL?F9Z@
z(o4jx*SVym4%O6zP0bFZTw-F#w%&O-l8pJT<>11IckO(W5LuI|i~gD8hjP25L8SFY
z^?0-^i#MPTqpZhp$4P*YD9(C11^?LSZ>BX6{=1a4+R3nsX=PFE+TGMP92VBRy%q#L
zG<ByDi^Eu*-YR^#>m*mZ^O7@=<;MWtUZoYoVs+xavZrFx&g*&|marBV)&jh5-$Zbg
zQpa}>E~d<PTe^;7<cQlVPc|yj8Z^GJ?~0B65G6TylSXlUsVqBLxc1yHeKY*}H@B0P
z9V+RYy9M)LHvpowcXVK!1E~V2Wf7{sFD}qgP;$gnRPY|jxNROb6+b>*s_7jswZ!B2
z&nl>?sfmgPtiX!jU7k|D>l&e_YW%0%=!c$^2LwC5(u^k5Gkx^G!ss)=wO+*dTWP=_
zD23Z<fLls)HpCoyX{wgc@4xg}CVURqiUb`wPK8K3Hb0J=Y3$IS9v*zz)jVhz9Sm2w
zIK`W3tL3?DS$#^38&5^7vb(JB68z1|_ku%FJ&&xI&*PopAEy*;k^So5`znK2TGa-=
z7_jZ?eS>YcYqPRL8T`8i395%X5?fv0UX0*dzyq2k;21o?;J7oo+-`zK)APw+n#|{-
zMsjY&`MQ3eod=GOg@uKJq8c!X)Yitajwt%xo#{PYam#RUaYYfwmNRnP-`r@oYD<M#
zRqFbj{e&CPym9@@kpfRF;W*zO6EO#t)+>B&ow*h&5v<)ochJ&nqZjqwVg@1n$_`}J
zPfKG%C9?>guf9%dOKK?c9#U?4O!?%fyQ(NEdtOTNU&_}oSv9h+)WoJ!Rg{($wN-wp
zQmjZu?ReYsZbW&LX=uUt{+ZY(ul(C{9iO7fXC)1-O#(7Wl&UrCfw$0XvVh)bbxg8r
zGZZFi4Fv|+BFxg#(#dgnc-U>$`@W(Hc+=e0H~v}=b6wA(->;AW5q1yqhE?x((xT1g
ztM2aZk*ZFQ^FsNE>9f;+A%WqCuUXEUBK&$E%*(Wh@qsHkpzEI^@z{J}N&WL9c$)sW
zwf4Aws)fO=RUPp)p#?T>!I!c>`Oe`mxt5pbN6mdeRM*#2oI~e#MJyK9-in@WG6K<*
zWoOrBH~QQdFuYCM=C=E~<p5jtYHHraMsVBiNgH7qkN4dLjQ><0p3P(Q2cQTzIXhR}
z@8#XUanm15T?A7K|GVS3(ap#b)LoNCaZ_*zLPh1KD%as7-;sivkr3mtVIp>pT=I&>
zzHXKYAGHjEDvY*kpYYm6751N4^Q+>OYc!G)_vi9_joBj0*egt&XZQIEY7xO0%ocKj
z3HP`5j2;Ox^oYZ-xS!MtTTe%8-=oOGrl+U5SG?G})*P-D93da?Nm8tT@jeiAc^y3T
zr(X-*e0cXR^p&=7wC8DC^rVpQ#TR8R+YXiEC$FQuiO5xN$uKL`a%5y=j@3v&V($1o
ztJQLw{D%dv{Mqp3rA!spv*+)E0@>t~v87e$G$}4_Z`Z$|Bs8$zG|!=~#Ea3u-9!UC
zGJscrptuYIq4E5B>EUJ=Fc%=;%=~gdBPBVvsxA#jQceE(!HB%mBR;3ZvkDn=iz}zC
zph3uU?U9`SU0{jq@N3jf3_=pPs%)R8!^$MnV4=`{12gS;Kz+ws-zN3e5|=sQUIj-)
zMiw|pN)FokUbg{uu|0fb6chzHIVOhIPgS80&OVC57C}8z2@6`bZHZ4Ou!h66?w7}4
zaHo$Ccctd#@78F!#IBROL!sLX_Q_5wD=WY@P^r`6u<&P_Ti5sT=`jT+D3{J-e<{x$
z6kIAgFg5he_g~t`j;I_Hk@>2qwYL|A7_=sVe(BfvR6(-h%8Teck8!!LEAS*p|GTy9
zb!>NyP>0B)`yQey*ING4vwVt^|4Au$4K>#PhzvKUiHpL7!z`z)F>_@9__G7zc4ucR
zO~<rI?hMU+Yl!7Wxlg^hQr7m0pmu9VZMr=<wr_8eL=aW1vfq?%*;J9D@8%e{vrygc
z=(=jh+3Iub-4Ya9ZEhgpWZXB5$7nj13Z9lSGBQ&7^iUW{LjTx(f2w@f_5NYdd`LQ;
z7Vuytz2bMZK0P{G>hR<)m|N-`_<H>+K5pfCO;joC&C|Z3BrP4yz+l(y010Z)#<rSn
z><H4T`S=fB$HA!MsUih3&bKYO?dfL!t_mRw;ODL2+M=+AMs^Qs&wWX!h=S99K}1DP
zs*hPv)VOLj?>nH5)dkmNl7y0)HD2J63j6B)@;wc6NBYs>0XZ}wCA8q&I5Qw>^jiu2
z_iP`mz1f~86s)$id!1?xEUYSMcM6L4rr|wWeIur(8tW)@Po6Dkw^-$|F6;90ibH4I
z%+GP76u1#m2Elanr470sZ*blBk%%H3sz~M3V&;C{z7@*i@oBHBdJj;wvhSawaRw`_
zrZpWkG&EdXxM-U9AVfrHfL9<QN$-R2x2C4+Z;$svy4SHX1qUZ5Psg^I1zmX((d3+#
z^^NK}I?JM1f<MyI09SU!CsL08mD#n*P?SDOi2&0eRcMu!lSn-$2=pOp51aIJ7Mc9{
z$x$^Y(Lt36W%SL2p^1oiR_%zVarwueYToppSu5zyokpfcL?PALKi*V8Tl7o1`U{l_
zwBG9$1|5L!jnv+&Eux(%w%_l}w)d<wx?}~aug;s>^mLD>-p%@d8rRg4F1c$GBHlgN
z(z3N29-?~WvzwMult<UFEW4d7_~ycS0$~^s%^`H20@n}s4i56a6Z7mS6?9L4QwWLg
zP-s$iB`p-hm5e5JznoEXa*TSzKVZILD<)R#n_%~FV}D!<s2yx?v#I__3MnaSx&fxq
ziM+wjZ@J$mKMfn#0=A&zf@EEeayIat(;dHWxBrw`Z9@vG{I84zd-{AHM_z*W+7w~w
z{{WDm$2EM|A;!nG<2cB@(yeeHJBdDIXypYvGIwE7PJ=)j)HZiOQt2cIvoFVxv#zR?
zJwc6O@mvOR*iz+V%Ew>6`hR}<U})k@3LUGPnaEq6m^>$ZF&5b=K~DeB*cCxL8&cX-
zWjMkDKCD;wreL(}{wT2tPsT>6a$O)MDKFm}gcjgU*35S&F?i5XRl)CDcrZ^n;4b_S
znFE%x_*BiAgtN;Ib_%m)Zc_$GQUG2M?Ref_NS5xO988*CIfbL%3!0rQ{rV*(!=%%C
zv9&+dT4vMs=#uxM-dEU{V^<ad0Vc<?Jh4(awy!MW{Z9|>B|7vML7TNhVn8n6V~EX0
z;*M5n`QBQgYDCfZGCO+a1;?}*T`tX`p{u+1S#1e5oTDDb^>#fe#DX`LUtOWV@UoZC
zTp(LRXSu@kn$kpE{>DGWIED<JWQ>8al(F&n<aiGX?pQwx(ls#~-3Vf9`D7IXvt(vq
zS!h+^%oZ)VyHj_`X2x?>GQIQg;Ip(Me!o3!nq}xWwQh{mlHm`uxUF}Uukjn}IgsGt
z0h_bqI$P-P5?n%@B@ZiKQ2NXJYb(H%77-Ld%jG09%u^v*mxMbQ{k$jnmr!flE}Z$d
zC;Q<P{ro<WoiV;Uzt0B`vU}wOZ!R+NB}b5-XqZtY(bo17`RsQDX1u$n%Nz&rDe>@d
z9^oJpP<->4N?VD^Oz^%zo9PT4<xd3i<=LNuQmei4lEW$cj_Cs4E<ZtsH@2(u>Z&Yi
zv(rwqbBBrh#U;G=2eL^dh&G{w0Ip)x2%!qF{UKSP1RTRnpZpOZPdnVJzFjRPCG@nk
zJ7IKL9LfbXHQ$~bzVV~Sj%=6NwuZg3?fgBU-1QK|wF+77I+KZwj)tTz&OPi$`%afR
zU;M(k<M+HGoh*?KF1#q7$Xj*a)tT(ex?i>h2*!%Tf5Wbf%zI(4z8q2i7li2Jm(fxN
z-W`=+G&(tLB{ybtEUA2{DiYKRkeN|golo^_p}#kj)F`08)R0vSscl(vP`1g;xkI-O
z6hH|VoA{3lSV7>uacg4v8R~QbaS0JyzZ;-khJ-0Uc44{Q&2?GYTFH{LZcJ|X2zXv+
zwAt0<=JrICRCRt0`P1yOJ^YANcjCJS*U=!G#Ds!|me<#`>XVnYItyzxx_6OTa#<vv
zrNAEpE(AP1HFbG-c=$XXH>GtxKlMh>lJU6N-9-=qb`#TSv+#_6a#sK5tq0eq?gr{X
za;(CbT#%hX`77W`>Ui+QoS|7uD}T*>oqVfAYSkw!XFC$kg@pyz)rPCBp?F<gUF9PA
z#a5G%Iz=Jyz;vcSo1XV}B49uqil=+8+b(8%%-mG6Y5Ntp&qDUGxaj~ezvXvH4-M6s
zLby2YlXtV8yH=kCg@k<9d&Ieyz1WwLJ0B)xua~?DjPTF@o!n16eS}J<X{G~Av4c)w
z7sQ{;`T`H$NO2F0Vf=7B>-(Zxw(>VfKh(k)sTwKqPU9rhO5CnP6-5h4xJ<wHw^941
z(V~|Ak07)nvJVWAghwdZb+)#&tgNUounu50qnJ*kQ%WZbpnh(B`HWU(VhPj+U1uP~
zo3jbY6O$taH@9ZsZY&JeQ}lrzHZd{5$;l}oAP|ucxM|_x;Q`ZLvD+KH#{V`8*Y>uW
zQ1f%qwYppB?z5kDO9FO=p<S@xw}ar}Eq~79;0G$AfW@7+_MbkWP=XNE1%RJFc>up(
z+DCT>ef?~%qL!B1i~T7&#Y}xaVba^yVVo1l$C3)XGylM8gY#Iv@<Ne-Y=-|I&!yYC
z*?88VCV^}YI8du2zTg1Gt?%!<1EK~UEo~-`{YP%@rq<R}HYzHr!NPn%I;Eze@qT{X
zVX4chfBZk5&N86M_J8|R6fhBy7El4{PH9BCOB$rR867Gh(hZWMJEXfyx*6TwT?6)<
z-ar4(Uim@>+jU*v{2a%5bJN!Pk&uwE-*0s7cM<~Z{uBUq2hg1=PDcv~cXxM?Kdr1}
z%(i_ZB9>!tv>U6&SbRSUs=EWQaYzRA@mT%R(m{;0b^M~j!odV=wPj_Ijak*zoYNzD
zd1fa@4v)~$H~07DsiOr21^+!xUnbuwd9PDE--#`iQNU5{eXocqLH7e=GF|jbtSy+L
zJ$=ZOaxd(u0!%#V=5$o{{9s`az=ZER_d&|0igcKarYUAo=3r-c+?%f3Z$f?p{6@n;
zBgumE3bmJ)*GWGB{-qPxgTsG<N=R{|=Cs^&ltL!4-T!w6AGjy0>+13=DxzPVyPT|3
zkdvQq5E2u6?i5xrwE`&SbR@HPoGO0}s*i1|RNUZ5Zi!BDH2OI^D~svlFBW4f35mz#
zB0+d9|5XHFoNRc>J1%y;y8?Mpj1T#8-&p|V%`<Q*C8eauQq^d9ML&HST8JlrLQHyQ
zYoWbFPP5`2PxWoV5Z`Qk8~i_yv+-CWA|f(nV*}dyt91>&t5toLR6B7=@(-8b@rtN_
zkj!E%qoqZ+F@3XFwUCp3U3%+51B&1XE|uLmr-l8UofTsR_fzB48N-@5up$E7FDRF7
z0#7sX9u0OdTz1BdX8)TAHvbmvDueTV<MhENaCqfd59Wc8r!7M3xtp@jH^kBJ4Yk1G
z#b64I`3G#6l6jrZfpTOz5g><MU0rJ%8}@;K*?#P+*Xr|#jCE&Rt8_IlARwTx&m(bG
z>anS=?$S?8QV=saMdv`B+7TElS28yCh?jSc%q$e2*XV3J!9@AG-G6?5o}8TA6;((`
z2n#DRhCwG8ps`BS<ARK=a(Au1fjQQsq9JMN;Znor^HBI4h%YOh!J&bHgWcV!mG4MN
z2?+?{MGZ9c^dWf}nbIkDa5#Ly6A>DpqZ0oI5B#X+?>F9j-QA?yJA~8I>NW4v($a7l
zw56_;s&aEpflQ=J_BDKO{uh&eQLWjQ?~@HGY5k9dziBnp)WidUYzm-(+E!Nd&^PaR
z(#j-V#+6mV%??&p6hD9NRL=g}y(jT|-L?BiQo^Y1A{Xb}PYTIWWMO>z^YstANh8Eh
zv!B5&FKTy+vX5eW*UB@=7Gh&!6uJS4-P040lJbT?_8Ny7hdz<boV|f3r6O@m#v_5<
z@*2?X6jEXUC3*Jzc@|w^Q62%f5pQaqR9Ric{4YL3s=47sniaMuRqxh0Nr+{JZpG#j
zS`H(NQYcHp8X!Ymc`sf&lb|-swYHJoM?pEUvxl-&SzIL#^}p4M4v^Pv*p`=<@8}S&
z{Qyv19gj0|3L3=q^}O>+9@w59G$PLX;uOi~BabDIH}~i2O!qp27m|1r3XQ`QBezuN
z8a)X8^Lk_GHr@-9DZ+KUP;zs|s%B?jkJu<GbW%kVfzOapfrdf6s_C6un;lEBW<6h@
zo0U~rROARY{~aA2<pB?LYW%Kav6z^cRJ1Az4kea4g9-EV^NX79T>1I=v-mqZDhdk=
z|K{?XoS*Suo>DR}U_5z3N*+4`;_VoXr7DJmoPE$bs<%}556{KsZ-D>J%9ef2?MRy*
z?k!&bzQK8+(L+rQO)Lw>r2iv}TGAtd3rc-vKR7?<;gJU#+pP+>#pXNvjRAQ*(BJ^J
z$&gjI?$H3PvaF<Jb_<W)>WkbFun}D~3%`*@0aA}{AZQI6ld<E8mHo*6Z>WuzH7RQF
zY9e68S5~YT0@2?@r=-3!evF-N7YvtazE6Kk|IKT|vMEkb(9A`J(A`^qx_s;O!YAZ}
z0b4FtNvXQBQY2w(V?%Z%dqQXm4rk!u36hKq(f}M}JXdONZg}Jm8X6ju`}aZQS8%TR
zoh35&`c@g=|6NPi7mw9Hm=a349?-5&!onOJ96*oKn4fPBFG^DKRr&(t2Fx^6|MHSS
zUTUhmc`9J+L;(I!ruha_D@zt86TdsPYtiqh9DWNX3Hn_j;c0UtBOkXJ*;2PGo7=@B
zPq!;8Du&NHDagRcsk5WQ*w|Q63q<-JXV7+MV`AC)zGJZ`fqL(@cXdTd!D3@Yk9o=Y
zZcnjBHglz9We>(xbUaQs<rNZ5OENMpM>5^HxX(@<be!hS`1l%Y2X@C^;~E)!DL)(3
z`%r^xT8$Tc&TF@7A~Ezr`d3)3@gQ-3FQhUxbty)}s;wL2zwr81H}I#x>xq656XC&G
zTk4OHuQd7<Xe6vAPF<EouR><RHa98xI-+`>kEnw7zM>+AwkBZMnFjX3K0ay|C>A1g
z0N&Y-ol@>tDZtY8W<yjeEN^B=?qFl1*Mz4+Qc|+wJJi<p=;jI^gqftIq#%KpFJFq&
zz#X|+S%U&`UJ?__j8s<o2L#v&-BTZRkayR-sVOrC%jMG2=OUuuLWo|Nu&xCJJhmzW
zR6_YtmUt<~V+A)U(N8{LplPQ)IED_@ey=YcWj*rg;oAn!lzP__5BGX$QAH+Z#|#Gh
zM+!L<QgX5~Kwv}`>0+}ah<6s7X<=o>Z22#{EH;Xz<f`ko)`|^Tp*^sKXyP;RzlHa?
z{}^I#HZ57{0799<1`!dF?GJ)Gf)C4mE5Zb%N=-i*kZo0#JFB6P?>8cnJ4Grca^)z+
z{Kn1Nfkj48&v7L_-N%u=6wf?IlKoWDNg*NyeW0j4Cg9#yP*K5+eP39gE564|7u)OR
zhGtB)ySKxpUX_zW$p*c@1s4?jrmP%oXqZ{TR02!_0G!PFrl94$$tWv9d=_FR^LZkV
zi`gHg;CJ7%Of`nz^YHLc77n){_Ri1F{|)=U>IU^2la@D)&;fofI9l)XZT({^0tl{<
z!&Ai(qZC0DiuOi$`t)@C`uciQ)T@*Gr;|}p0H>b2Bz&DwE0fInVPjdiu;(=a0nW>p
zA4_RRNvhKi4wr;xsViD%^fOT<veMGiD*{2d+cTR+Wq$Cw7cied&Swl8J`Yg*27E|J
z-@U8oXl-i?{#=}wr;w`z1bT0{GdN?TqNHGaNiP#Gt+E(^Pe=wIjK}4>eQ8X$fs)b=
zWk2DB9;&F25DMEX9GuTug?AG?2Bj$}DI+5<tNH&I9~fWb%c)%D6?{fp{#_JcU-PKV
z6dy7asvP-ZJGJ%ELr(mVNpg@ZcrB+L2D;)_asXIb7|#wRz-B3MJ6!x$RJ2cMt;uFK
zMmfUK6+%?!dL|7D8O@yKo16N}OP}&`2Mi3bN+O}|?AUzMo!|q{$uS8=?|o7V1mY~V
z%VZ;g;FGQQCxBA=p_Q_bkiLPzD=$Tm{Suk<xzzO4Vpfm2;qz=peRv`(DL`m0+QZBy
zsORMBT06X*v5kX^J1P<#m9xPPNa!~$NnCPDN`22`m=waJ%p>}8H{urwOXFCK3$;C1
zdY{V#SP%;(aAB4QmuF*k1p@g6){7U5TU#H@CoFJ^XaC*4-jnP11bviwN+6KL;8fxv
zYI9koLvKf6rO$<SFB6MTK$sJgk<l($o-Wj=vhf_M#kvT;mdY2i%hdY;t*fg83jiyi
zLIC2Wql*ht!?;fyC}`*Q)0Evq8kO!%Uj#b=+$(lVOGW>|{gQFbiIO`6i1dIdKuk=G
zC-T;a*u!9Zr+X|0$N>9bO)1&gG#nhVJE|Txm-0P{T+nUqgU0?YC7A(Xg|=9Rrs<g(
zKb*lN?);EvY4h9Dyl#KFSL3^zp!1OPHos6>?fS_a-{s|Z5z}muh%;H|&5ex(uny;o
z{>7IBwCWZ!m4-*l<WBQ7F(T<DB_CMqVG@((jE(z)uL1L}S#2}CJ)Un0@9FK$&&g@V
zX#C$-gx82?`@OQ?!e>I+_D3$d<?1yL=kd?hdtU=vTrUyN`+v)|aI-S9T4s1@`WUB>
zpnT=U+%#X9nw(bG)QU|iE-+p8IvZ`*_?eTRuj{k&|7(6?ep?;}j@ZalaaS2}@i=x%
zS9y8N?)K@F?ySS}^Uu`LA}ZmFlE>z<7XtPA{lnCwjAZD{7=K<>Fe_CV)<|z|@4qzY
z0Ybd=bRi0K5u|uKC=46YgE2ds18Ip5%2o-YB$77A-50(;!b+(bf9(5xyq<c9?q*<z
zgzx%K!@nZGdCui(9D~^TGP%X@KN}w^rTS7@<<;9y1q9cA{1a@(Em0W~C63d?6u2pv
z)R3>Kc<o==cODS&x_!LNV0sEE`l|Aq-=p<?NWq6>jS?iQzMGil-Stj!mP``6%Q2YC
zWSO6Uf|G@XCHR_;P*1|+z1W5!D}x)91;NUAe@O~IZKCVp-LKTb{^}kJ-|K>lVwW-X
zdbX0^h4QfR{_xX(e<y^iy5essEcWB8I67%|sQ2|#&G4UFRLS2wg%?N+cJDvxKLy%7
z^v91gI<m5i+SJgJa7$7hUgHM%sr07R8Tal5%8F&+qCmOa0yXJniJ9`MHzib5D7?6B
zj~)^2?VX)LgGL$M2I`+1cEu@D2*;FQ_7<ys@c1am`t|>20qX^kU7?mUrT+K0oDrAp
zT@>0qgKV17e747IaP5WJ+0%7%2DPKPU}Bca^72np!{I!720hhddm1heF_}YKNA3GV
zCq~|$oc$OK3@p}cSg!3~@R*yL!Y9I-86DNq(4RT^z5kUl4WG%*0jg}Mp^>lMc-huI
zI!ePtb!8{mh;2>(x6EXG@Tgp!`2Fi#bZ$dH9eg#{vuI_~-}t#Xh4n5wSRY~|{k^lZ
zi}qLFB<9PcC#+)md}a6Ne6*f?n<49XacJ*VIrs&6j!bSkJLh(=|0vYPcXKMK5Qz8o
z=9;6aX(>yi?-lx!(CU+Y#O{ZL<!LvP>a|Ml_E@Hl<@^}wM4sr907JMY;?x>h46=Dv
zR=_<W`~>E^TiHg&zEFREkG1}b8<hJJY>_|JkLDVXN4Qigor=qOhH#$aONJ|1FS8#y
zH``MQRy7Tkm9?pjAwm4t?Zv>ei4wUHiaZXf+h6G^s9B*ONypC}CVW97mJ}vam*yB=
zAf3e5_WRebHXm<oxnZ>qI9x@JjxhMIs&SF{w@9Q>ulQ)ZkFeIy7Bsz!Sw6@tHWu-a
z5Q^;|9-c+SQ_UoBr#!<grZgwS|MDQ0VgCD`Kh{K{z1KP%2z2UCu&}Xj%S647rn*S-
zcCml$miQf1P2#|qvs7K$wr2xzOJy}yaJUS&PYY1ukcf)~{N{vm|44Q9c;rD<(>hLv
zyVF7A*|gt51GzuP{%Y<h+~abeL#HU)L0I@|Bq;7j%Mn<l>OZ`4iN;<F%GiAN6I&{d
z-Q(`NFn5(Dla5rMTwsgH%HI)XHIIl9>8kR)J5H$j_h~!lSI;j$qCoIQ`9!%k{5EU0
zz~d%6nKAs7(OYQ68t~L=a#$gsVZ{ymonAK^nfWT3RZBB;I@a@7tHsI6&aQU(2Fz1~
z#2yMsO{QJaRkKAJJC!7bTFA2tw^EsUaB&o~2Qw0dC1V<HTe71j%Pj|Gz3w>ElSM|5
zDuX<t(59JVlqs<7Wwy9oIa{FBYFw_U;-4(JcoAz4Z@BO}?EYa{hjDjhjSTr2G!~Nx
zE7|OT&(BA@tTsS*j0ckj4ez$6HujO-gMHS%l~0-M#!Q&&&iqhd9yQ^4HgW#q-Go*9
z#0ktHyNY#Q2zcO_eUH~k1Jr(<zWU<M&%{#B27PVljr(zj6ZZv?=hd0h2NKnEAJI>8
z(S#}swFX<`Q7O+}m1mBXIPu+B^cLMVxt?EeES#rrAn!;lDLgz76kAE``s*7y7^ty~
zX4_i}cMC~Q3m46@B&qkV9NIb!Rf>mVKqv?x^kd+#LJUv4;Z;Z;bC#0e<7d*H#Cp{W
zET`mJX1q-koUgVV#6X1JZDhhp)6?kK<74>zB@`%-7d;xRpMJ2LHX{#j_=P^U=1|D;
zozb$KB5n~)I+~>pSAH;0adT6rk%`C8o*|m}k$VUt1mE>8jg}KM@Av@O(E01m6ThEW
z2C<F1kaH2IVcm36g}m6{o|w;{A)n6AwbIi&R+L4Cyc}jKF$i`v-NS8p>JIwtd4|UG
zfqd(RK|>>2_2ZG9gCVEe&bl3wwhFDZhNuuC0*<0oamB30vpb4%6~&E>fx+LLZ^r1)
zR`Y{rOf5)Uc5&@$G`V*#ZZ0XBZksl`$EuI8%5jK2mZ@ARKDB+sS*KHNH@v>QyxS^9
zrV$0j6Z0C;#^$>HQk@;7iexuHB-2j&ZsNfmg>chJQ)Xnj0-kj}1NSe)8|<I<hB8=%
zEp;J$J&>>W`tCNN0^aALp<f_29yeI&coz^{JFVT7yIm77wHkRZ)3`OkhP>+1(RN*e
zm96(7){4D)3$M3GLmBGUr>nHRu8M&`3dEjZ{23B@(+(&H&*2a$N&Ut8tyAHLMCjKH
z(1R9(xO}&B;FVP&%X{<(PB;-+e$mx*L(0c=#Nc&3_XK&p6Je-=JjEn6GZHhw^Y^c-
zv__0ah7N)F=2^d;HN)qAP-qNu<$3ew@Br!Q|0I>srHA#UR457W@gJd!y(?X`HG5s0
zoS<SD?5c1m=Fy{P<ie$?sdu>)p64AKurM5vH1;(&=Ra+&r2Ex7jk0{M$R_0VO!e59
zDC`D%4Y@byl~Y{I?Z6n>Q&q`2_=|1hNayalp-Kn2b?c<8qGDV7Tb_WBAV<P#z*q9B
zCW_N>^#ziS96N%m(!6UT+v|vuE<zm_?^VWLhSWsU3gxS0Fv-!Jj-rw%R(0{tlRfiW
z;Pu$w-P*Xjg#Vi46iJ`F+vtFEadYST!?o`Y<}P@hd*iu}?d+o@$UUSJrKyGP>rH%<
zQk=PLSCo~7F(Iz_Z_by{_V;)8NVh(7Pm2%+2ZUU8Jz-E$QNFwGhDA<McpjCfN)sFo
z@?Xi7J-OXwk^XprAmXNn4%9yc9v?bQmp3aj2lWZs?2Pdy>t0tIUgCFmZT5rihw~au
zm*W6}_Cg3Me;4}L=ib!b#_zQpZ(i($2#!TwcP$JL2%Oifmk()6C#61Mlkl&dCTL*z
zh=3|CkH>0X!WYI?1WLifa$42bPzSrblC`5xMjp^u+x754O^?Swg)w-u14~Be!W|VN
zkr&%DU7^IDi^(LGx1OX_cLq~^Urj=Cy+VjM_7{-O$ss)-PFRv%*FWt29u4&A?EI1K
zb!8%M8$NM=Z-ak#HcQDd%$Fq_k)59j$3DfrIjS*sb#p_WAK+HtR9jY6!)RUwc->t@
zH}Z{Rh2E@kG`Z@nC)SjsZAUY)-LJi^cfL!Uul}2+n<?E%UaRKkE#H&F4MK&`qZf;#
z^P=41K{QE<zj$><m#9V2;D$EoVkP$8#*uPz`jGt&IA)fJT)n=YA!$5r@`5@z%wDHg
z4Dz1zqQtpTH7zR4!xJ2B>Uu&77hrrY-)WHZ+|~sR7kBddo!XpE><k<4*1`^_;qch_
zm}EZFp6%#fP%TqNuF8P5$v$h4*5UY%!N$8|dy$n8*MnOO-m}X=8JGf%VJ!Wc<!q(#
z$ZBr33~}~*cIz9XIkbbEJ)L?vWi>EQ?=hxv2rR7kR8}+XeuBKA$sC0Bhxq$z*>}y&
zPGIVI)g(Wuz$C(Q>#s1gJ(1A8XDMklApFwUl!?j(OhK;pwPuv5#}|;tXe8DoiYwwX
zV#+402E@!o^hi4J9$GpcM^hUx_fJ<F1IceI#%`8OJ6~};KWNN6zdul8<JmouPmv*=
zag=(2#!8#<&2EV*o`A5nZd|9Qk}e@e%YzQiN;M2xUE?y@1hWe-<Q-ZAbkQh76FJ3o
zZI?@tD7X?_RNq)yn&==x9qF;Iq~yT*tT9=-|Emry1H(8GE8W|-Z;{~ssjaKqGLPr8
zKX30=tg@a<jAswm7M`_hW7Cx7icUhhFBztj8eQJHIy=wWA(EQhu4B<I4l+A#>Sv2N
z4u<l_XJ<dbMk1E$zs)tj*xvyv#q~AKY6a&wJF!uU5=8IWHpzn_+i<S8x3z@U@5Ezq
z)M9S;Mw=ExzRRa~IaBjA-EKb_amif{vDDc9A#x5Ud{N5cF|o^*UzB-VF4k~;ILff#
zu`?dOZ6;DyRezn<sH&-~CWx^4^eMw?!|7nUr9VKti<9VmhU-qHxh;Qo@z;!vAJ?u{
zk4KYcDu=?0R66_6H_yv*bLE}>Yy46|J$)W!`*SYs%X4meD)=rE1LVK{feGZtleVkn
zwSglJpIZJI=)T|`SPI$I(%I4@98{d(ze-lboJgU&WBx0ed|T2T!neuMpbkt<P9}?f
zABrbVZdgFe_(pEfsHa-V3kk7&>i4x-phgpu5LZXjLAW@Boq~yKs;euOb*MvyZo@7I
z#lM?WOp=I$54yskW0t==dCuErO~XkPqrY1Xe6x)0QlH{UTg>Kc;_Xeh_QqC!(%$dj
z-mirZ-ObN&AJidJL*ZVCwgF4BrEtza=strn3NQ}$yGOC&j~Ay{vPFZLITXL+D@HYH
z4mHVVU`KS~65xnzMIB+uBy;9H3vpkbl&2R=TMZ>~=j3}E9@P&jg30q+5th9XH{TMf
z6|3s47$2Vu|Hy3MsxWlXOBEqPNCc|gzHY2(5pi$!S1J8MbtK|2O)h>8zbDTGJt%7x
z{^Sl4l)X=f5_&d~iiCXrgPkq&dgWOBX|x1t60fl*kaqokZ}B7@Groc;q_<b1;^50;
z`nAY*<Q)Z}qt(JkhL0g6ycY8oJ(pw4G`@+~Qkp%3mL@srD8X1M&q8SxHR=Csyv(>6
zSvWkj(YhBu=qY3DU30>+xrgq77&Yo+wwUfiKRlrLn~Tdge-;>>ecpK|sG*@<eo8a&
zbu{M)0_l3!Qhx%eepF4*g+nOAPx;(!YbZ$~)9R1<cSIrYntdQIN-c3ZCa;^DYyFtB
zVr{mujk1#yZfv#f8Ql&a()HtYM(IdI)q-<odivaNc^w^{>zR@1K98PW$px>AXKMn1
zB1>FTvm*tC!pZ@U8OmrSud}XdvnoFpOM+RH`br$au^8zv_a*wC<=B{#MFkrh$AWWz
zr*#uq!&&-Zqr1hMAaCqnQwj>_bx`(<y8Papht#I?uc|&fJ?7hUyt>9Cks1*hO#T2J
zFE!WG(^DLMZ#7dI$JCF!y*lu^g(KgQrvFV4o3~C5D)^RTqrLh0ZZ;aVQWmlJO4OuA
zTQvI<O!?dn*W=F`buci_f&+@I1Ifw`ZFQv0cNRI0rzl8>xvCdTmSDWjgCN|QtEyfu
zAa9p<4%{=IX<EH<9ZgYk+*}{J*i8R0^kCT7Q3WIg1Om|n%4rPVW4s1C&M4@Y-t~ji
z$LIwAtp!w@O<@u*3hzS}UpJ!=KvW`=$s7G_;x7puX$}hZ2SMOsXf%ss|9C$=xz*~k
zzL1BhDN_|55#a{Oi=pX})~C*6>l+&tm8_AgvCQ;rh(4;Gi_=pH31V9tB%efa?Nz1I
zg6nPD#k?NteM<kYKipjRJD$+d^&d2xalv!Yay^*i@IAuh-5l1#1?r9Aj+WIBYiny6
z>i*saPCmB1%_UlTem1&>jOv`s8nvq0;liPvm$@Sc^+(iIVsrbuy9Ulew-;e9VMfxh
zDf<oNPE)b_<sG+l@UtMBJ`2;9%zE1uiq{_;!g@&}M@XFNYHIxDW$$9#k6J%Sw0BUb
zvKj^?CO(-KU&8BG9lmJ&5Ndt<clxt1Jv{Gu-ELdhoA;JXkY20td%L35!s5CQE0X4K
zP(8}^j$8?r#vc^B7uT@S#XoFyJo$}r&7HD3Y5_PlKmpwGKvYi7=J;p0U)giU<u}S4
zh|})A2Jd2yK6g^jyE~A}MPQ3zVGK<(?8f`<c_uw}Rs&aV2PCtTVM9Zko2t|K_~Iqi
zFxg}-US{g;+O;P&ZK5o1SHp_6htU5%K3^#YwjNkYyHJF--s>`hXa?&(dGki#|7HQJ
z_vX|Uq)B!r?mLMb)OK)faqCTF1?13lEQDobkx7fq@^ot~VTOBM_VSBQ1qB5(?sp~-
zgR*<Uvq5kNDaJfI+H}P~QkIsc4{DK`NQ#j0@rkh7a<7GCie%UKd~ccFFdpJIxyF1l
zC~}8FvBja~V%scn?^*(OY~#4<1)R2h9BMQ@_ca~0EcX-#Z|E5r#Zu+|_SpQFtCCiB
zJc@vb+@Gvm15MA{_v|5tQ{<Ad*0)OnU`tRqeKW^lesFa(w#Cxj8fD6&?YfsF9+|zZ
z%u$P7`_S=VS_a2T70TkjCD`(oq5h_`*z3ftleR-xMI==E==>=4?q;_{r~drhFEv#+
zLo<><W~I%y>OGZX&)8Pbi$063fjtdVNebCGk)(PMGa|F3R`P}_$0n2(PFB#ic2W+)
z2`Wr_Ue!5SQQW&;pYi-e_>u?<0S8sp1e=qIpGo^qdH7tlYwyLaRpIH}oGT(py&)kT
zWSNQz!&MWgMcB_je@FmHslO#vYJE}Et(aBZX!wkc%XZ|ISyK3S`zd3wc&}rXrngtW
zL>8AsVY{QYQS2CdjD!>U8)@}NS-?(0`#RR^F19kT1ZP^gQ&uc}DeZJUcwyEJDTGBK
zn>hzv%^4<aoT=R1#{QuUTA|Cmi#mnQY=sir6@`ZS2Ey%~epcH%3rA__83XK&Xm8cw
z4L@QQHjw-wlY1>CH)I$t%3Xhc$rhS>t0^fB#V$;{4I9B4p(v{Nj9#J&+(2g(>Iy#Z
z{M)Av{2jP6-h3%k)%WYPRFr*(Qt1%}{Y+wQjEw`adDYg6Qp>z!p**2R&uiANfb<b-
zxKGB5Td>fPnZBMSIw)=2%y`dQdhWGKz@2;M;qf3z?SaZ5-v#Ie#Wr(uC=rWuRiGKM
zwEULV+AA#Vo8cS&J<enO^dR}_VJz~7#PedK35kegXv{oyT5xyS-P9fEJu8H3Un9J<
zrz?<@b1@#5^BNftJA|8}ep?qw;{_~Mo8RSTvaHGVCN`A+2El)OR%cnqYfu`oyxerN
z<y6~(A9Nhrbo0%i0)ziHVigX&%e-#)2C)hFXXz4}o;<-ouISw1<Kaz?kDtxYSesB_
zlviV`gCxj*(Z>MRwu()cXV$!{#G)9+4TyE~b;QXWoX``Q-E<q~a+=I-b#<D4AsUKb
zXFHQTKcD>L$Mr_CM?hfc(W>HL{rRyM)LZ(bWh}<C=1wsp6nV9v0@_S5t=sLu!OrKL
zf=B?`T;Gx)&!<!p=o5Rjky~7OR`XF*^thVWb1Y5nyWKkc=c~nHBxJYO!74h-pMkp*
z@obYds6sFH_nYiGIw<&#dW}y-5*oX_K*lllyzmo+Ip@{YAtFQPVPWjU^=J+Q9VcG5
zqxKm5*AE)Hftj_-$v7^|Wj{2?M2s*~8vMg+re2@nZ1rFe`K^)kj-|8yeB?>+von=q
z)$USef~y@X)qd3{M2f5gPP5R33Q1h|rY((;pU6|V7b=?HNS<}0dXpRcc^kFg^L>ic
z^CS#DU|g8a!C~EW*8^5xeXOZU)LXx<!MNczp})?AP&SG4{FH&D43FJMy}P^Sx9tu_
zF>s*6g?aU<wvKrgkuz}kb#8mhvJZu;YAM&~BVrzzUSF{Dh<?TAvKk&{BI_B=%_`6M
z^*5V+z31ov*bhkTx3fbI!dN-dwhZ3#09(U>8-(J^r1W)}jPlg$zLpw(6+=Tsy%9wx
z#^y)i@Ai$)z2G}|tO^1h%(|&dP$*lFz;|zNaaB`ubA5}p#e6LdpT)30DAT<&fv44-
zog#wRYCpWtR9PfrdI@{+KG-QqNl6I{cdYe3)bGlQij9q|?Gp0)T<o@ShC%GHsx4yn
zDmnSy-Mwl28BVLlv-2I5IroF4Dp$nipEWyrA76S;&pR@^Ef>L;;qt>EHxi-Bq-WSh
z7UTw72^xXOLP+?)Cog52i~~L~h8JKyW+LQ~q)UkrsF5mZBZdww_O7a<2^IhoS$63J
zMHQ7^I#g6t%iE>qyl53$td>U|V=*J|A3Q*1AA>KrA!V~<U{{lE7$z#=J$?OWU87O>
zV9Y8uI)*Uvy6|ga+;+lfTEhWBNFwiOk3-A2yd!7xSNt~hUV*DSdMMZu6h@Oxm(r6t
zRkCtC*?yFcZw#$IoYxj9`#{(@C!u!@*YO-s4csqkHJNSOl4M<=;nM!t)@q7J*O)xK
zd~hJk{_tT%%1T;(S)>=1E20L|dww1Sax#GgB=uDgB%Q?yICRaz|6a_eG}@kL-e|;)
zDv_)ny2@LH>;OVujy81UZK|ti;XvL$*jEx!m`EWw4rP666;YOVPHnu02MKA8Kr8PN
zEc!aqLe-nWmk^Qs;Tk@WG+FD3tIVWWU7TH2mMXlzmy7;_Cp%1R^E9)-^7K%_8TDF?
zc6Mewy};_r8u2`43o}L^yQzH)U0rQ`{qCY*Nx1l4AldfG8~x58d=C1vUWTSG8E@$5
zZhN9XMtBDoSEkK$j&0P~1B>E~%Bm`wSIMK<gFLp&)$9_*>6?HGRfIw19Ubuc;n-si
zZ}+;LX@tggnaz7jsl?v1WNyTpDOG*weEEIM1{_i%r|$H(J6&3noB+tu79DxZfD$We
z`ZkNc<B(Kp6$>a_f@GyNYTY}8_!|`y#0hhrHCRr*!~LNCf-Ibcz1jWnvEt2^H8N{w
zf!n%K0;O@emJkdELx{WeKBYMQKD-jybk5By_~P^Bc-D|0wJT-b)2jVVOZp7Yg}9}L
z9PICxfASN!-+!5o-aKH}tiOlXc!=Ke?W9ePE02)gqn6ZSdGm6O1s^d2pG&$}ifNX&
zCH>66swg#{O}*e&dTu~p^~cq@ogs-ho-e@Gbob;q40=tI#?ttrv{n{J6K34^Yj{Y`
z+V^L=`2r8vvSwzIi-x>j>hZd}%FdWLa`38TVSWDbjDezEUSoJ{?6M~iscRu3X<s(J
zT`9M(>UNNkJ9>9A*tEK?IcB8I=~X#jPFRqCatsRMD=gWDn@%^djE{Xn&wE~mhI#W}
znftusR6l(ZO+te=?D=HHbmIvx6?ap-^zr?~lzVv1xB3DIicbW=2-?QqqY56U_j3nz
zBSp|cWdSo=z-O0gfWRyc6KJ|bN9Fv!HEJA0l<*P{Pfk-aF|H<5Q3-H-8+~!yU@0mq
zTMT^eNjxXV(;kWbcHGkv4JA(EwAK6csePxoDJDLi%WgHNes&hPn}YG>>gqZkml_%x
z8t_k~114#z^_SEb7*nZ2e$+HHG4xtEn3!r>S{2Y89Lq0ZfWr*IXPJP*t1>cHhf)hF
z*@4#AcBNAu3yc>41;*`h4IH8fM3${VN&%t=z)srP1vx)Z#26i=xJDr0a1H}QB3c@n
z(Y#VXZe&V>owTp7uO9}<$aRl&GLH*T^N+cLGcbnJMXM(i6%<55@o#T07VHhPq~Zwh
z@SK5(BXHX6T{|`})>4y~FL60}-`^uR#X<Ff3as@lzbGn>`eSv8e_B5VUgK2!w6q1a
zwOrf?i|9^_Skw=1-yYfNwq%G$f_MfjJi(TAePzY1?HR{Vn8LRiD-9t!1?%FbJ5+UL
z?JRK8(^2*@CgxH_1r(^B61bh_V|A=j+@Wz;6x2Pv_=r-E9iwYT`jGU>wCc^r9(V~y
zV0g6EHtFkidpr0e4oujLW@7^aju-fDpZv#GH$#8NVzD+|Taj@SwlWu-h%ABd!bto6
z?JF|MKzW!(k&+T|-{%STZXWEnD-n7)GQga$hj!kT)9l>mkV-#Ss?C>X4I$G(7e|m7
zq4ZnV$=X<DHexFpA?q~8{xBp+y4n>-d8t5|hz}m6Gp)9;i-rF(l4**;N{+9HUqjBG
zC%dYS!u|NypSWDtITIRX?q%VD_-5hlL;vULuj8t|Ys~!8(2VuSZAkmPbU^q)pJxMK
zx_AwE2~8vo9GID%JUtHl#Yb<kY$C$qr9T%ZN&4AXiKK2)U1<voGvc=%I}Gwh;E8xi
z#<-D@k)uQTVB&|s)!spVq*SH?on|#9HMJ|?mB@}GUN%@v9fPkqpeK@#+j{;6iy|aE
zuh--|3;-aG)Z7>QbKu%>8}BF9)~fRg|H{zLW3!rd9*Iv+PsgQIl~Yl1T5k6rkRh)q
z1)K9qOAY*rYo1`T#exD_g<2}x+cOSNz#;-V44C->y6*7}aAXFn%ZzSqK=7y(y^7eC
ze76gTKyGes@x*aUCUV2qmc78N4tQz;)kK+IM*s%jWlFXR5r34!`6H~6^MgUMvNEIo
z&y=ff7yE`|+b2<AO%4dXusa!l0Bqjw*B#_Qrv<F7NeT_~fQxmelA|2Vx^~NmT1Qhe
zgCnCnn5+WE1wEcD0sC}YvI^_zQzA>|V2U*upGU-}llJ!2wcc3k>2d%vhsUF1U>t1k
zzhmQJW)4ug{PDweI!&w2aUhOG_PsvF>&d~~rSd&uW(*Om`e>=>s8@dxp;Zg&PVsR~
z{2D*B|HHc)CuQQH2b|bo1K-Rj{6k-dn#+uU!K<Q5WlFfGSjWP--#@X(+nB1UxT-k2
zFuge6%L>+*OnjzSHBC`om0p%#QsF-Ms0N0S^n-8!*G?JzWiAbdK^bxBkbipAS${0Y
z?!Lt)tWZ)7u4MlXPD2~Et7MRDML&k*bsL&|aIH~(Bruve(zs7N2w4a_>gHQ&iJDT9
z`&@qYMMYoIWSUZ;R<e@BwA$JCct>U<`hZU`!eMNdHLf+?p-X<Gf4pIDH|ulHMPkP7
zr~Mt!L<*1N$9CLtbN7}4ux+-|awb#q3J^O0o{%*&0uH5x(^b|70OwQF)RZFF2SF+=
zU0=0wp^bwZ0nET0ufB%TQ6<+oAq4^nR2CE>G=nRJ1MHztWykZltgQ9v>FM6sCpjJ9
zy~8wn&wMft0So%!18#4Rg!m<(3W=HY47^^M#E`edW@sz;b%n}WT3Mw<C@U)i_zpz8
zK7di4P6NyUu^f0-Q}Y2hV~^2*fgS-tXW_f6OFt6F=%^^oM)$Z+_7NSxJg`*u_ySlr
z1ILfv-d+>?oU@D!1I2LK>+5SVxh#F(F~>HlXB5)$QjTH-S^XJ%<Rx|a`5KY@;*nli
z;ECA#qp2;Uz^URJPbvtj+ypEf;I<-CYu=05z;7%!VS(0*xC*4A!4~G`<Sp@yL=gyJ
zSM0$3bwU2W6a;|;=^Gq7XQO9O)?zI`t-jpV1G-BSo)j&wEWzYgo(-W7)T9+u1Qe|6
zjl*<+Ga^1Fs7iuW8-^&}sbVhXZ}0TpEnH8eNf@<|om7bZ4$)%nXLz4@x|Zm~5#E|V
zu)ACI!Eu;^+Tb)4ueu5VyD$DbQ!pmn4wscH_4?1%evD%cj6=n6SGMTvFbZy{^DeWx
zu$<cFQ&3TV*cc|60z9eFVQofAAr3{P{nH@q6H&UdGFq9TUFdKXL%NItjqk!fsd*F$
zCs*?6S_;#nf}pd&U`o}d{LE_VH#G|u&3`6y)UYURmx8UQX|{ogq#J$3^Y;h|Di~se
zh(Jzm*!PP`GsMqN)Wn2RybYLsV`5^OnwqwN`cItZm0g@vr*OWB3EsOJc2?Ff^}MaO
zLart@Hou1}tI>&rTqklvLP8wrrN1+80R@kgUv~C)2VMH6x;l;YHj&k}e0^UIHnua4
z7RIHeC0kqDCpZQ+fl=od7jW~y$D=>O7^Q1j1l@9DV>bi>E&KcXHEV%LwvrO?lU$z&
z#kOlI&w6^Or*FPXUInQsd8;2RR$&oiCP#AP-BzY7MpSOpaGjt<3?xS|he&d;VOYJP
z8UQeQkeW$)&dKydeqJ7h)X>5IgglThc%<Ph#U5!kjGtqj^j@G6K;XJ>9&{ZJrK~k-
zYf1BpsGOBMF)ts2veWkgt7i4bWouDsl+o<%ac9GLzXy5>Fe*Xl8lN_AAyJf7ab9}U
zH_{c(SXIzp(=(zQ4^c2jjTuYW2!5z#Q+9X@<+M5~|AU_!TqE2cE0OS|N4-cXq{hBR
zMfHoQWx9?9XYQb;pJ=gKkMhye!@c9PqQ0K@MD-1typhT}#<3GAUhZD1FBhtRX3Z`q
zJ7zYd+f?sT&5SD2^*TbK=Vxcut)L*-+1{qI1xL03PvPT}6TsYxhicb4<ciZ!KYA_`
zkt!~;w}n58r0O>v{o(PxuyTR)mo9MeEl@byiWZkn3Ih(}a&mGS8lu;K3D0!iZ>MKx
z&m9xZ&d<8n?24e4jGNyk*mQM$tP}nGG@XQk*2?1FyXLNaOJ>B;^~*S|Wm6@&_#e&*
zf!O~{IvzxArEUcx+Sfh5f8Hw;&Im1YiGM=#xM^PUot=P!gV^@ZJfV%C*wM&h2g9Oo
zn}eG5&nJ9hnP~LUUNWaYbdA<3@RM3Pz+$p|?Xf+G6J^1#5bHr@)M60Pp{BoNPIC^+
z<+GcoVGS!^A1V*OPJ&mOppfWN2rUPGmX>}-_1ne8C2G-5ESNleY;@EdIK@39oKR89
z5lRA@2p0BF4f0TE1=&4O5fMAOky!Dq-7@2+l96v@JosEse_HvS^+^3<Tml&h$O#Ns
zzq3&_O@BMNxX4Z{qCa~Qw7B?1Ar5@qV!)vtpm?AVtkH|&^O7O5`SJPTg9m>Mm<NPD
zP*M&}zJEG(w7s*F;~Hm_ClH+bCo4<DEc_UFfmB>Y0Z|H5jwK^kXQTbLy}LWl-eDq^
zgOXBICE=LdmoIPrFIDXysu*V`2Mpz1r*#<EqF$SmK4pcpVdA5Zr7g`GMwE8WL#3B{
zYL*nc@?5Wzc-Q95C`QloT&+sdvxd{C7EGX=T2^2|QPx<q>$kEO4Sk9sMqhWip9SJk
zF6#Z~l&JO5A4v8>wo&PyKcX_v<PK$9$6<+AduFQK<3Y0$J9sJ^r1#@(!2=aRU^M!I
zNURnN3c!P@RqKF{d!h?s1qSaaV>hTL$n+h5_~m;{ikBqu&ip7A;jB(JFrdu{2^Zi2
zupkKu47mB>#n4h#zrw|hjpu4<YxAz$1O&ZKwN1Eo95DI-M-3<hcaQB(*&CF$s9<?`
zG$<tpjXKh)h6&o)xVdpxB*S3**7NQ%5y^ZW@3ATAKOeY_kFyyVY>$}&@)+2-0_S;n
z<;djZr{z+q1K}sVt7~gAiJVmLMTpqAxwwov0<bj`cfQ@IZo4QbC`d^3kW0Shb0~N&
zuGOfycyJ&}1U$n4BrYpMoT{axp~3BXil@+gd&5Zh-!25~WAQ}5B1Cy%`m8elsn61#
zl{@56Pt{qVDn`lvEiD=C>}Pq6#)~LNCNrz})&;+p!7k+B_?rp}`-<ygSp)Q)x8{vX
z>ZP|orIv=(H4TS3;~u}phr8DlIKY{jF8{=*<BG98Cys4D{3>JBqK~yRu)5(@OKKwZ
zQODRxtCH)Z)zGH%H6gnxE41!#rVrfo{jog+_JOayHEISX1sBr!Vvmgncx2-_eImEx
z#Ta2T!EL%+4g{?ZD3ItiDsMu#_s1Um+?+1kK%@V34Cwz@dM$~UbX1k#tgj6+CHtR^
z7JE}dbo6z5m24S<6XR^|Ksr=e$=;?1g+gbltV#FSNJ+h4&5w*k0E_<Z=nt-^e+49b
zht1w&g+NwH$sIktlwb5&me3il<-`(?H^l8|v2o18azUqEznYa`l{K-mLkL{F@~n~!
zfde(rj%7(F@Yyc6x3;$4-0&2l0!6;~%N~&1FNZ~U95e=ddr!{K)#?rWW3yGPtp`Ej
z!bz9FYBf@UORv7Ww>Ca8;khXnGfg->S)EJUG5p5Y15_Ltt+Gj6(WpL^PDji6)ym)j
zRxLLf1{Qf$<>mh$O%9Ia6b!Unc#pjYna#atgZZC3RYvzmQ+}<EYFaW%Fdk(C!&1Id
zW>~A`T1711Txx9G^`V(EY`dol!Iei~!sM<l(Yt2%(!1;Sl1ts9hk*{Uq$=xXEMO;f
zc$u+$Q1-GYPWq+Iyr@PrR2mCbpTuH!cV=xsTzbS`6F%a>+d!^?!G;@i0X_TUQ4gA#
z)Z+%Nxee`U0TGe;(qBC`CpbT(@WQM0LadB)D6kQ-9Eo+aqp8nVcJN=nsIy`AAD*4=
zDJVOeimlb)R*j>zIQ})+p(t)(L6=KC?eIHWi%Rhi81F`+N-IEbO5@htWF`{-;CpP?
z(aS-H*S&*32#*QXb$*SZT&Fi)+Xa&~W82(s@Q5f}90F|>l{T@*&q`r1lJ0odxNqOS
z(b3UOUmXR(*PhGx&nKA8#xz7pWC|w$i4SNL=jPrE#UT)Appwjcf;TBo`KlbM`Q~}U
z1SsY5*j|hq+F(B#trbjzO1V7W@|M9S7zqh^?meszbeQgK$DMct2UDNCKxe@M&NF&O
z*f=y7#;3f%UF>nVNqX_`dO@5vfYQ!+(fEQOl3SX;Bv0zbyppjk`#1I)TEO9UP)Wdd
z^QnQ5Z_?Qz_kvw~AYUPLS-<7Q+6>q1tRe(>uU*{?iHU<=jFoj(P_23LP28GzV?}N0
zR|h;WsVR=tezo;q(N&c@H1fP{{eHQ`g(wsI%ap<&*tauuE1&U?P}S1Kld;wAVLxPR
zSMOugG^P~r^Yzt&j*oyQ{j;*NuaA#Z0y{91WT)9l(Y8bf+R?wSr&t*;Qe3c&E?=>i
z&hy<bZw`1bElw-I0?q)nv6|(7fJQ+MMw~466lS>3-fq=2{n}!74@0;nsFN!Jt6kz!
zO#_T>ZvC->cg?Z*j*HBToVzcc1Y#?E%C-Trb?`8Zj8gO`5e^Lxe^yubTyD3;8voz#
zg|wlPGLcC6eZy02qmlDr5e1Dj#P(?*-jKZgXnyHHWzmALY5IJB;!0U1Bg*Xa=oE`L
z=t~L(VFcd`B-J?i`9t}5p8U%{5R3<=&FoYb!H=J<5kTHNC%UJ;R!JavI_q$4!#5z(
zkU$mbV=9t(!1DW%<7H}qq?81W%gr;tw`tH+W%9`MhrVb3{-$cS&mROe%+*GYN0f1b
z9SZAwIAuyv(rmsi^~+(HT#TpSOD;2K7&mh+7zS3%-J{Zln4sZ@Ww=mw|9b=O6w*j8
zC8p>UTif>*m1n1yyJNawEHsZN#o?EZ&53dDA@tK@fxv>$t4;gI(%nDkcM+qPrgxcO
zNBw0eo5<1Y2ap%v`oxGGI2qlC+85+>i>t8SeK(nWbBDU0^6&RJdc#qE=Ae-f^03{@
zweeqsK_;KZ*{(e^du_uxQp2DBsQ~(>(!Z(24Ed97Sq^2Hw$vyF?_|ej@ZZmW`NSm{
z=<JCZ`ry1h?zfu2Cmak52q#S<TKU6gwfQx{_nObP%q+%xZG%<ltQ?+IjAk|8{uAyk
zx=*%0nx>xJ{)R5=1mWbJe(`#pb#r2b02KnyuBcXU!VJ07!*q<R(!Y6@Z1k^RX=W0;
z_@Y-u`Pw<=K14OJuhlj9lZw|JGs@SUQJa#V_w;OAFA3iX-24aEf$2MR(wh2Xt}OsV
zA<c|JDqq=`F!J=Gp#2ruC-@M}xapM-dutU>ZG;{yTrX<>bBtYlQQ(T#g7p;ATrqs|
zl|5Hbg_v)_p(f~FGn?rEP41-E5Bz;GW|Y)F>qIj_Kj|l{FaEQd;J-X$@rvrcmhA<G
z3z><Fi*o;J@5RKQu2MF?>&i)$Efe~M&>=Q5Plar9q&mFmr)-~k4mD%v@+K>udf==m
zRL|`;$h?G18<2jVm<j<XMUb!L|2d!KFQcnXS?Q)E5m&iIp*Bm0<&PVY`em1B29r4G
zdx~%Rgx}d>CJTB#g~&)5>zkX~Duc01&$I}tSO_#0N>Pn(vyKQ);%?M&nUl_zB{H|L
z80v?yTTTQ-=YunWBqRd(ZZGHZ@*Yd@pY0$K`!ftynotcz#TCRsqvQAp_NZ}RZc&~y
zqA>PvjW?0j(Yw*F@#+Ph^YUf5b<<USU0uSzYs5(~u{t=I)QBZB3<b`FZ&i?(X@WF6
z@x3gvET31(r$hhP=ST<?K{I_S-Zf_h7~4~iVya&n95LkTWmG*PYkh?A<xVSt=kCX8
zy1c40)mtW@Al-MrNKz?}`zF{@RaE2Fd$F*(v7za8+iz~ww2_I6q>t<dmdIVfl5WTb
zc(GQ^_L8Wl%W-?S)4c1|Irn~pQAaS$^LV~|s|<)=$0=a-*}Eo9`g^y)zBPfvqvPMr
zT+sFFj#?seO=s#+rcMr!v^PHWS^Vu=+C7u8Vw-ZkyZuvna8G#zY8$(N@j(z`az{?Y
zzR4Wd1r`kPe74&@<>J$Q>sg(~usfIaMy<263T$k{65B`9%3xIVXRz*9&4C~A`&7tb
z(B^U5ULD^2rK-+mK5=u4aDwqW)uz0$2F8J-S^b~~|L=7!5J36biUd_%{e?3MWJ6>?
z^_#?ONugb-qPM=V6xx&OqO`@2kvO3!p<ER4*MnEql45%ERZd-nRfV^^kry?u6*8?g
zp*!G1dwARe2n@)U%6-A<t6SExvQ9cW41!zWEM#g~|D#;fQ?<$)E{U>g!v6)r=D4tV
zmr0qB$p{n<GsusJz#s}K@H&XlbZA-DA>?VJu7$7VnDN^cGPC?oomje;E6mGv8Jy?U
zD>Jo`XCvB29OYoBN7vmC<nS9f#(jw_ZUf)p+PAW{@=K@q_EyB~Xy8`)-z-4Go`Zz+
zA+YSx<gC+2y#M#eyus&5x8eM(vIeiEImHCX`kx=Pk46;c-r%4CL-63~y}Iw$yR(2}
zf9}gxW?(7aHJYpBc`|OyVl=RZgZ<c7A-8~%A+i^n#khaP)CX)qPMCp&6u{m6RkI~#
zXCTD<_gb_8W{(q5<rD?o55ZR1R}lTVOsu}kTD;PYbMkjhb(B}6ye!Lx$_dguCWYeR
zKRtU}yjHcoRO!#{Q}2__kZN&QGzx-(GLGANcrxlJiqB*Fa`ywi7jlCJ=*XvxW!_VS
zF6--Vg!I2nO_k+G7}scOYiQgqp;`Z5u74EP=>!+&`8qd<8AqI>Y*U2V-2H{u-9xGX
zGmIuHMUwgTm@zg#(kxk?wJ%2LsMpAukWouJQ)foiX7=~cVQnozr|oa{BQ~Q7uTN@>
zV#m3E9_M#7z11ZiDp-qXUAC@2nMQ>2*)izjg6Cs~dm2DW55^<9dB8*-2#NnMw4ndD
z*79^*XpUf&?V>*Ez>Ada<#~MKaY%CPNAa1}U?Aj^-ccCLmOB#?4Ab-04cZb%f9UIj
zBR_QZ^`I=H`C@8L_w24BEziJ%v2v9fc>J-nZtd*&UjHvKeYH<LfYOHJmSP*B=2ycg
z!1?3;VR0I!9GT-wInEc3zrYDhUQVr*FSg4XUKH0%(?M9hcJ|-U{7cJU#S1V{EPK(&
z{M!Up)Sg2wL<c5cY4MwA-5bi4VW9T*DI~NL6TkcUYD##blUqeAgID3T!)%QV#6<Uq
z<9}Bg(uS>n*D7*MTaArz!8kO+{*=TDl87e>>K{<Pb+#WBE2v>T`+VQomn|j*b3*k!
za+^m5eVgZCXz<4V>PPxZY>H{t^N99;A@097ooH!8QLjg}q_%m$fI_{+YT^cVW9Yr~
z8GI*})2QV52<YRVLhUU(8TV5De}?|j&Na&=i)Z3bjRN_Kf9bopC?hE3iyIdd?e>S4
zhsPjFZ;l)<|2AuWv}x>@CNufMNsoSeCtoGstBQb7Y2X6E)0Ds$omZ>^4*He_3fqT~
zGLLp*US^**IfvaOwz1s(yR#v`1VGMPV!t9>RT&{NG<GfcEGUK69QWcSifc1&+$&>Q
z-)v3#gPondt^F;-U)uT-Fw8{Fp^~cWJ~QMmtE8q8i>$ZFzRx0K^74a}*%OR4l`19b
z*=uQ6wEh1WczSw*kvf=`)iRe074bg?o>ilPA-LOdzNY+azuDvVtv3fcpRCBwJPdi8
zf6^r2kcT%De)VKX6G6>F&URji4hbgwdoCk*{lF9yY>9!P2l=KL1oLS=<#R5}GTV-3
zt>_DImy$oix#vJQ&Z27;oS6khV)njJ^DdT-sfhiY8DYY5FYNxnx3cVPzYLa<K|DfI
zo0lJ>)um64kGHqB_BS`b_@vqCJ)6GQIGBhij>EJKy0&;9=w&#wxfK&QG%Q3S0Zz|E
zP<IbWWJZhx5jE-3feIgV*3{7fA+bd=<l;*X&Kd=VDEH#W5pdThLXqy;S!JD`{4MEk
z19g{O9uF0icsb*-YEPOD>iqAcKoUmhC-lO)DAcna8mbwVka@uh@1kjoBZT%$+aEny
zQ}b3A!F}*$zOdibJcz|rK<F##z=PhrIS$@cyNChRi6-Du@PM_`2pubhcf2SuSt}{Y
zT`T#Stqk}O+hy7_H%4?|_G6(XX{4>h1<twfb})906QX8p7z9S)2D?8sJs=3hk5j`k
z2a$Nj0^2Jg3$is9MjCo4wEvzX3!htWP1VAB)y=%qfag0uH~1j}O=zqhuC-jz#Kd+C
z4A$4>6&2^Flb<?Xz7e2VeXIa0v~`~l`X!nXT(S{2(3owDS>3a>V8;(s_JEc4@bI8&
zxe}bY=PC(=k~vD1PEP)c4Ra!|uyMWGj?E;`3-QH1r!j*C5(yp-G4=~QDPymH_h)nH
zfQ+G}y}p*Evbi~n{*%j`%vNmWUbY9m-zq<jKnbz&?ARfn1(_X0-DtWS1qI&%2tiA0
zgxmHQJH?P0Uwlam)hfdd0|StGz8}GKwFSbGbB#P0r%de$2_crwKyP>%6gMgB$Q68i
zl7ush->sGO@KhjIX+(Qk(%P}$e0Jkm?%>_sy**31f#pkDy2|l(%Yy1aHtTHM`~Kbf
zn?X7%D)wtVnFBJz3^)I~ym;)+E>{mwQA6?AigI&PFD3Z&G1|qG*>R;Tryyh6kXe8j
z3^dMbzpPN#!0%==X}n*a-CCAir@?Ui16Eud8j7*y3LY6$yFBGdr6t?NIQeYTeocqc
z#l^*t=Y|??34-ESsn(X$F40yem6px-P?e>0iq%gqj*lany%uQgYJl2eXm89IGc}#a
zoqO4pZ&hDmWJ@X`GP3{Q{r6yGYD!*F2o`WzZBSb=Fv#0mjTbWJuyrI&ZZ`i06g1U5
zi8QR@8m9!Z)2gqTwS86byR+tm2%n>)AD$|Su9|Qx_nFgCYk0oy7|H@#Z|=HU4fPo@
zzbqzJ1qDO7Ir=1(BbEP0(^UpU)vRF<1qDH+8>CB+?vgI)E~UFcIurq=yIH!s8$r6e
zyBld(>W)`F{_qR-%-NZF>j}uSvo6f0Elar^Thvquf|wrXgFh;3TU#YcKM|q*k|psZ
z^<^Sg()=cM5zeTQU13ly4X5vq*JgmXRsPOof>kL_Pua<5*dasAaGqM0PJ9@1V)?+#
zcUF4LFT#)IPsKe{`WCsMnUE3&f?fs5p~Ig$E95vDhi@-W&zZrK)YVt!KFzBSX@`1(
zc5pa6FIiyp$=CIRB9y7Q1;eQslw@q<c%NZqE3Vr+xNl!S{HNAU{KCOphJD&0aiI1I
zo3lk3v=y<wXy6lL^)J@t%y%C*BM^gya<fiHKe-zR!@s-y^XK?@XMb1E+l3C<LRB?3
zG?YC!Cp?0N9Vnyi-dMnFJsp^SNkp^+E(>O!*MBCsT;V_bD0N}}yaL*-tdAv`0LeCd
zqE!V>qJFF~>SP<!Lo`VN$227}%qJ}IWs>;7@DQJXr$!&&(wx8aZPJi6j{ZsZhdy@*
zbH!HWa7S4-i1L8;Sz4|V8#szWh7&Z+&n&UN3Z=;ni*s3T8#fv|Lf<@p{?f|I%HVMi
zpbGwffgGI9YQLYuEW3yO5@Evnp&cZ=y=^OM$nBW@({P3_c?TiyT1R;C{VVITs7&`4
zErULjmZ{VQ&RajLOleJW3@tCdVFBboN{W@}honEa7IXBRG*?v>PrWbx8VXe&kj4M|
zxR<p5R@YNziER>_fN3(#Tl3_75OI89JH050AD8b5+EV~^OCfwdoc$)f;NtAUxtj<3
z#hY}#z(hy6LTF)mbNPFvpn)u_I<3XIHGu9#`Pv~{@wk>>j=zNPVFZwRv`|IMSp&pV
z`7u&<#zNo8O24qR4GLVHrs`419a=1tcO?&=stL;}FLvxHlT`$8o%$A38&a*C^D^P4
zE^dc^|IQnS%-O)^E(e8&9d=nIte=&GI@M%7$d+G8C2{m_N=-sPfcv07p3{CXC_akA
zVShU<Lkwq2xG<lZO72+;>_!n^B6V&6GIBComV{$*QF>*I?V9##G-amaj-eiR{`||n
zUL~5cCoFq>SQZ8B?W?MrVK~npH~z1YQrB0~g;@wx(N&?+boyO6rgN?N+Vv~r$llRm
z{UUl;q;Imd@|4pv3Eos$YgTdb(OdnlSsK=jNJG<GYreX`3#=k(`<<AO&`^(%BYFnD
zhQC9P5@QP=?FnPQDen^%$VOROp`@h@=@&b}@EwLZc^!$o!xJd{rnHzy$EUT<`phs|
zAR7Y+O~Iua&J$5*lf%=~RE>$nMSO6P({?9@iPH{pFeZ=hinjH{K4s-v$qcD!3Ng`&
zgc}Yf=?!xkPkXYnuleu`+>UtEOupEt=#iYt!XP`(<L;q4d_@ey!u?{_8m}hPwdhqn
z%gx+3q?m(=53>zN?<4fB&*NnUo5{arXEE9~>y*7I>=o)f^QzqGTr=MNn6yvDp2K$o
zy`pO{Gu6^^mz538$w@EEGaXt4Y785dR{L>`zzh>oqC3=*s7N78Peo;7WoktBY_~$j
z_Is=2_$}e%p815Bf?85R+e*VD2@CU-B%ZeFjc?L>36EyS2{TFev<z0oub7}2r)+OD
zXt4jiPW*XsA>WOx)Nx3#8NX9rL1W5<Gp~8My3?n(7SQqbJ?r-iU|Q8&pjvdOn8$Z_
zTT!#<aWhb})NFISdQMvcrm17JJr#+-hXw@^QIAXnY-zh)THeQp`TL9B*PsFi*Z<Ou
zF(OVz#2uI#1R`qZ+XfmH>UBotQR{bI-9Ry-qwqQ0bF-?VnJ9zs_>IPMS4UCH0Ykdn
z{7466c_OD+SJ%)@EOd*dJ2>{Dq}ZITublQ`WR!hs7ayz+!A1pQXgF^AdQ>h2S+MNV
zmw`WwXXD>YEh*IR+^|vbulfafChi8{-w{Ekv0LJ5t52Bp2|jgZW#%g7zniPRxX2ev
zZOFL+(o8<EurH2}K?_`~4h-1_;@B3ty4We%Dfi?sW8>rEINUbrM)T&lxpE~hW-34$
zShG|uN*`OIQ<Y!Xcw11?qStTTbhEmLwY;{LBj=3LeEt5*cpN^G{>>AjZ<~pqkSm-8
ztXY(}s*rJq*}G6=5=?^$^jZV%S}_V4PiamC$JC_WDY!K5A^dxR+oV2o<pVsBXV@xY
zGMH!Gq=q@<<=@pvU^s}{o|&ZiGrmGjIMYRq9q4BlFF@6sfaQ|xrR(~}X3#kfd^2Tc
zy{G~mw(=q=N;F&+pd~H4yN4=N=p*v-$icz7o;M4bXO&rjn2wic77KM_LqlIWMh!8P
zm2-xSD(Kt}P6|LiUVSvXv9lp@Qt2;UeF@Zwah+vRO`O}<xq@yz9F>DkoPD-fAl}oN
z5y6RWaf9AFYg7#zSJ#6l8lr1w1YDN+x)%84Z8<|Gb86YTx<Wvs3@DK0@R`pvSVPzd
zmWjfWq8izmnb|0eE(&J=Qh-bdK(BPa9P|QI^?j+^7d7W;<-n5sqJpBr!ueX4wb03V
z&p*qpZM3TWUvvWaIo3WnJ9mE*YIAdQ1JWW54fR(qhQDIJmUTo%v_GycmZGCA#58B2
zPA40xL!5b=(fX5d;}dY{rjU*UG8jr~Y9{&8a&p6#H4D{N3tU+Wd5Qc^`_llX<#pVF
z6=Vanj8s)rCPzopV~OzaZia<kefRUbzrSqBX?{^9t9*NRXR0ZE{#ZjIkb(&C0uPkY
zTfaLAhw)=rOi*JTv8>11SBWKi2l7T;!wL&WM<T>I4tIA~Q7dv}mzr<<8>JfE7>oYv
z1;m<^rI+tESDA|iW4kai#9|sUsc*J^BfC1}w)qo|Ks4WIsp*o%_2eWjJVP%%{UgLM
zoit-rPj3;r3^%A@EqfG9t7>FqXgfIa;dLq>o{{N&er37N1BrE@@E3KVz+F9S3wvOB
zwjFE_w92W+XxYklu3U<h#H63S7#96zY@+yPWhG}QiE%7Si+-u;i>$7-wTOtzhYug5
zrC+`nCOh_mUK=AL@AkYf-`gD>8`V$O7w-nC;LgrY9{6RQ%Rc9FsRVhU00C$suGu+k
z%8r?Fl>+E*M4c54Fgsl1f4F{?HxwKk4A2LlCFF57BGwmlr)DskDdBa03aJ48#t?p>
ztj!K6WJG-KaVM%JIvz_Nmmb#}v2C*E{a}DZ=yiMiPP2M@!|QV43o<e?aFm5R-=*Zg
z{vmgBId4C7dwr@}q>(je{FrCQcKP~RWR+W#CG<AG;(Of<3)9I+A%GW6th_o%M$>G#
z*`I_%gr%A<FT2?vCoy}5wRCdgx(JC@mRHWw#t)BTp?(*Pn$`-y66v|MzI{iBJM<;F
z0Y8Ik<3Q=0pOy7JvIs2pMk)Uy1f>|S$kMV^P%tVa=s95AB=NhksV?;O1+wfdr~Yyc
zPBL@HyGmtB$QjkProZs%P4MIDGw1X&7F|1$CPGb(^mO$H3Df|OZ`6X0{0RSxw9g)>
zdE8N;CNt6i4%GX2e?lodILSDC3rhC)lfn{k2{AG8QBesnWKLLq7o1i{rKlt9g*JP_
z{$)*_$BP&s^epp66cZh}O%|%-u~|3+hgWOhh0e9Q9X&*J{|5op>#rs07E4nba63KI
z$ORqDQ6N19jPHQ)$-^4agY(LFtU@`6%o_|0pkI^AX}`IiFI$nmzjyI((|do0i_$Xv
z#L6gwz2#%bc!Z9f(rv*=n}UtXvdjEqaQ^JuE$t-hc&w_534f-q-E}5kWcxf3>xZm+
zhs!gnb;J}SUW}9=QT`1+nSlZSPy$k<&fcGLQWG?_KUF0}8|ey|B1eExSBFy^jk>lX
z!5hNjSe)X|sped`PysF`lGT)|FQIts#T5m6s~t!i8@J6WiTOhxy+cDG3NwS#gwajW
zmT!E7lRo->xu|&}3q<&8mOO7_foSNsu|{ETuJe9b7ntS)rzp|DhnuAb&+9&2VBT7g
zm6Zi7LxE}_7;;s&v^)TVQ7}A(jw{M)H##%Y(d~oTs#=R@(<FuZbi)^GTU$nnxlB^~
zcvx82Owz6O^{D7*c~5{u&7<dixIHz9LG?!=fUfuxQKgyl)6xbec!I6Vpj}@HRLcON
z%~FI$bb}f)ZpLM859F)u6NNn7E@q5@OpO~52OFKQa?AlTUrjW0bhn#{)-iPI9|%6N
zTF2?>>+|28jRCj&$k~tj9bC{VwExEp8}p=nE5&iNc#oQAmpedUj_I6;a{MTBPeI1=
z9d(-gn>Tln>17rU1_sfhg)2hJGLFW^TPwheD+E976?q6gKe+FD)fV&@xhjGuj8#r|
zW$s3<o)qwBC9-`fmEkLse=}x`TcoR^6B8AOE%=SoTZ_KMYNOW~j#aY8u6H^rKfkx6
z`5yWw{I|>Xb%N@Xpsc}$I%t2cZm_eH`D#7PCss0Ady*1NE?w;}3yztm3S1l<SK(rW
zc?AWema)FtTpAha=>|+VJ+)+Nk@pQi5IZ}Y0&oTasB1Tr|Nd&o^P++spmY83tV}E{
z=4)*;YHHX4VcyzHv({$i_bdKJy$(cI$Yn2WN!;!zo^_+(fc$E4!y)u~$m`<^?Hh-S
ztMd}CCNRo_+^z$oW8S^VqP3G)2HpFmhx<#QW4gM#2wX?BnyZKAH|ITX4nUC)Adt%-
z8_@N-1L!oeURiN*;^?}@#-vHBh5B=#pqx&lb$+?%7J5HgeY?rtl2)WsXGi|8=irUD
zMk7g=<O~b*75jN>TJY7U6*|4H$RIMAJnT_PyOR@4V*`tsvW%i4OTf<O<Kv4hK|f)U
zlUJXaT=bl16S;Y1==kLeLmW2)C*$#NS$<_?dGV}(#xz{lJoz1C6DD#62!gv_VhCi9
zuH^Vfuu6=oyg9)J1~BdB)&IR0qRpbwvV5|UG(W#rtnISC9X>kB#LwTtSz$ExT(`f@
zB>Q->T4nSHaBHZquLtoC>kW>&hDvXdnTbiz&!2$syf<;@a{nF_e16RL(_Jw&YPXgZ
zsL^GlWEBx9Za|TW*%07{@4?~GVPIxwzYOvNPK*ogqb?BFU228kmYYLv4Ki{l0EJ$h
zohi{o5Aog5QI8}+0K|suO5t;cJgcOXRGn^8n1>`DCh<z5eLyxE(@sZtc=*J`1es;a
z=^%GW(*^DZ5dasQtoMjEMdz*a-ygq{1WHe46Zy(x*)p^=G$adk0D;{@3CX<2=d=T+
zw|)i=#kW8WGR0*x-X0g|SOF8SzJDndF~;bikjY#wUce5JuqNYTOjT~&z(7c@lI(R6
zTbD!LSs&zeD{kJ+=bkD&{__V&Fx>#P!%3Cqv1Z3Fm+norYd;P92<wl!3Z*Bfr)%&0
zwQ2U0cp5~w%hu(1iT86K-tMSp@Li6%@|4sRx|m>Zzuh00XV0my?_H->eW&xmZfK*e
zEt!9xC5Ww{?>iD!WMl+UEui%*HUp%^>Z;zs6#=)W!~N|u#T;q3o8%fB#{I4rx-Llj
z5xms`7I=q$&=|M~&d<(#{r$JLwi0RdjiTQIfJSzWB#5XRm^;yPz~Znk3-~kxEQIq>
z(`5*FB^UcMpy!b$7svlcruEr2F~@bHfkQ+zu(Doq-Frt5`B<7sx+l8zzEDbLYh%MU
zWpKQVF8RmjR|H&{7^zEM4|lOTuBJ2PhQNLfdNF6M98mo)yyAy)yqms|Eax&SPeq`h
zM6XG!fm=3sne00(*tG?+a%=4-X!S$^^}sWG><FC+2t73|^XzXh@kfGhLEwi(3K7vS
z%*{0zcA>;eZ*J_&q$!#8B@OaP5gn{P=y)h64)Qq5C0bdTsz01hA%0J~R~%Bvebpjw
zUkNQ7W%!+tZzbw6iLGErz$Z*(&2ThW{4qKN$>3tf0&0Twim-PTl?=n<^q_{1Z;`IA
zy5`jnSNFVBZ$7|17s}Q}_mOn)SS}QQhttrEDIuov@gs^v4O!jpCWBgOYH8_k?q!*a
zxCaG}YMy<>_=nv;5#&;A0C){OGgWZYbw3vA)Top!Q$fjQ{#H{{Q=GJ5NWv9dJXBT9
z)uhgX>ya|@G;<L^b7!l}z5a%li<%bg3L}}pUyhFjaSe<DEzGZHVT>vy8!tkl3`bL?
zSQJrWVxmpA2*+ituQu^$eg}9*1)}J;A<EV_xXlX#kN{e%ojl}Rm>1)>SD<*7!uc^3
zk6b2D^OE(LWTIjNqUCzwayd@045p)BiJX^xfHJA&M_`Z*t}`rL+}`I~z;*Vl-U^(f
zS^Uv*;GYU4MFBE9oBObK4ICbKkRO1<ge~#5=L)1zAOwzV0yBkhFUQe#kSKI@{Giwz
zOfJwCA+^7~I;Ko<{u&e;8w=92g~wJ8Tl))$*q>A+7#kit{do9R4ke-ck-m-Kx(Z54
zdLq3fG`zk9nniM#S)2%CvYK<XkF=3}+b@Qz0~#$DHWntbj3@6X?l4$a$`@=~VTSR&
zpkokl{h!YmLz+%{X^jVyfK~7A=@5SlsBM~-2mQbZG$$+T8VYsVZdBdd-@iTSV|X|Y
z_2Rh#?(pD3?~(O90V$zO0!v<Vb8}r?e5NIR+sT+L|A6=aP_;a7Sh_nLP7?y>r1tJ&
z&NL&0fV;Ee5PH4`Tukl(fI2w{zyf_L?dSn>VjqaPj?aM{f=uu?z&SrA{ba(k?}sPR
zV`pRLT$Cyj;z+>EJT30TTjjVP?Q0<6ANq6)(3to!crrV9f(xbUD?s@9!NZAPm?nEt
z`3pDsLY=9#HDz6OZtgZnjfZ9`jKNb)Shw6=r1=w;s~vxP#TW4NC(XNe<Q*#P58x~6
z@9UeZFa|Qt*M9>Y&`C~6NB~`X-TM<jPd$b7_4WdoRkg)ToA>|__dg#IBMOiBsI39;
z`ce!{?fg2-miGhfOVY`=cSm0Qu4mi256~$sPk=8`l;!PkOw2s^?f<IfdNc9y3-!iA
zaUp9*BZoPBvA1$y8J6d<f5d-scXvD9O3T6NZ3rp@5H?(0-Eayt476S((k6n|lTJ#?
zIWn^7)CmFI+ue$?bm0GlrhY4VQe&E5OneUXQENbc<>iz3b3|<qc!T|=_Px%Pl(Glf
z*CUKSSSL2_JVx&FWxVzZgMvdskWmoBY1eyE3_Uz7fnKtHJ;&ux*beE_r+k|e<QY|J
zu*z38Z3*hACSf<b$}y4}7U3S}E!I3huPz8(I<btHJF#S_L>|<9X6EM41}d;#zkcs5
zyqzjX1w@CzW_Qr1AM2sv<4f_~IXtxLWRq(Eo;74H%ukLlE++koH%a(H3Akf4qk0U0
z#4QWcq)hz(sopSJ2|v(`lQ^m&;a_8Q@0M4(h*(Zu=9QOPkPOYkl>-|?=012@bsciY
z{Fgi;3A95fMS5mF3<@$Y4f})aT?F*a9G1DBKJ|M((Ix$sy`h>P6M-6+Dds@&9P%7g
zu^=mP3wkQN`K{Lx4ArhCBC_?(>fbRU&q#Sx>r1RvJsZCa>w(XaX368@W&i|5YHBoe
zL>G{#SX+Ow5jXju$7DK;#gMXx{$_rj{EZi)ZI@ItMtza|dAz)T;}JbxKubv$xV3;J
zZyEV`F@`21(A`7EW8*pPX9lw10RA1ydl6@qi#$4vTmuT)zdu-=oaqL&VYO>oVfe7f
zv-I5?W<&Wvl^P1=5>kB^6AgGvIFkxA(M3h?f}R8RV)xgS$s9Q<;1A?z4^{FwcXSM@
zl8y^g(bAe99qq4uZYT9@JO^Eyk|SLx@9g3t#?4u6@9DwebIwR-8uVa_>`i997}glm
zMk@YxnvTI7iA2%Om9!d4Zc+;R<xD<c+)GbOJ22ETJvZhx|Lhq;C_y5ZVQ;^FSGlX3
zYmkc4k6O|{Cl?o|=X-Ka4pej3UhgJZ#Vtq9Qws{l5DQXtbd+i|J?w~dm|s5$0j4bc
zAWv_BPLxDMMgrJ4=m8vqdxP=c$~oX)Y<y11&cw=8kIprgC`gEMB~22_MhGEcb^OrT
z)&U?CDJeQ<mkrh}BV%UZR<)`-XQMw@d8?WS<>;ZJ+*)1aZ3vzP_-Z_$d<mKh{YRR>
z!NBnHQ2To<k^^%_hQ5_nRlS&4{aanWi?9Fn0=`3=zAUln8;@@@0s|Zjj19j6bi|=+
zB&Ko{LJqgdwp-c3Zz8Y>a_1Kpy%;}>eU=y^$0tTcR(3WPKMs?4F}ERs0V!?|A=+q~
zkD+3u&@R@-T%cznkJQN^2AYCU_j8To-morOG~-5rGA1^1L%^@&#2VV!WM^dq%rl40
zeiwbwoOR&3ocS%}a(w*9*<^?g#^_x3WOa<a@z5}JVi^u#{eba6qgGhgbK~}ak?|qg
z@3B{^$FG1_#06+pZfe5XRob7X!9SMbH*jfaFqGfMgG2&LpqqOP5>1BcGvynqK)c;w
zt<&1Ek1CqLy78VS7RcM)e1vetCwp`@&Ukx!*PU)Ab2%y)7QMQevu+ycn~Mdkf~xxZ
z*<2Vfg%!!x`qiU=!1siu$BCCLdiP#BwWvsjBGQGLhr6K&iD+dVw-T8rz<+gRMNmjm
z!4r?@(l|qsaopI43LSCQdV)FzV+qy`6%9=+d1$D`r1qy1a3ZG<CW54RQP;!{CBF0w
z!eI_EoCYGL7Y<({v3Wh+HFkZ^(7Hn39|GfA8xwK078uKoyypo(ZSwEW@7D!qMn2J*
zla<<SNH!ckRQPPbngiU}i@>nRaQsAG*TrQ9uw<U9V>9Zl1BvE;pmNz1j*pn4!MIJU
zv(c5iU6=eeE4SA|{wNWJ>~4eee|=lh3k!j@CQ)I)!W(@2a%eX22c6~kvUuCw-CbTj
zs?GfcNH{Fm^;wQEGD=AF<mI99-JGF;0U=Gb`PASuB&LK!@E6d-i@75n8{&#uH3CXz
z7CMW~Aob%HFMwJ-z;O)KIr}iDr0_9%tde;>c<=7!H@P{nvmqwdOKYsVM-6~1^)Q97
zZa$;IO>V`^%Jlg36#36-j_un!&j4%c66VA`e2a*SsK^vv1E$$`&~rHy#r)h}=OAN!
z7pK6R!c|KJ*YlbB3YHhOnOO;*-0S0R`f{IagoKjWPW%WR2;ahTQBl<{&ined{W(1?
z$t&I+>1Ul98}qoo#bIDzIGAnEd=nlHS^|r~!ROc4ob%SC>vk?D0V8kT$lJYgQB>5|
zS#+@)tN}_q(FBr2x=R58-D5eSHPw~A-~GEf$bqXvRZWd<on2j;4%(@B#SJBSaL~_?
zv@r?WV~kzz&s}=@Yx;U?K(PS~cM%zM)BVm6hmWI^c$mn@qIB#g$CWU!urBhHK$!;A
zh3g%t**RUJ6lU`FO+tSJXS4xbv1WHpNGIF-_W^9ZKwPy#QC&%CdRp#3u%I_`S?pS+
z$E*(?hYdwNtBonDF@QfOB_{rEaRs&P#FUoX{x<M?MhV5|JgMKazOws`1%jp9<-U5Q
z^Ko|YQkA*81eO6ED9sk@?ET9#^e6W@Ro`h}EY#>SKMC*oi%U?<{>bfe;#(3rgg=_L
zWxT)GWPW)_q*BzJS6>h9UJ=SHzKZy?vc+z`SqRDomhl2|qzHAMb+ZyZFv$aq*s{`6
zo3ZTR%s2*hJLMb&bv0)|6b*N+wePxsLS4(f27a3JKkTD*+IG7%zaWi{hyNP2twZpl
zq^L;y6v=}~LCJ%MCvGL!Y#YBIn;1C?zCt8#9m@r7ml@(mCt&xGdQ%ZFN$@>s+<wdr
zY3pkL?GCJ(vNGti<yRC`)Yq5G3UvuICbzd6M1)H8XH~c;j0T*YQB%s|%jYR&h~)sz
z{Kk6H(as?Wx$FGZ3*(Ov0~Yy*H8c`h+CHH2D@19C+6(0V)s!5r?OL<KhHXZ_%R;z1
zo5)@wA>}yrd{9!7mXxGvDpNv1K0(95kYQq!=v3n4Au)3|gNBnLD0y({5=ps!$@dQ$
z7#fPE75_mv(2LD=Q2tVCD;J;<BO=lP-^um!=FSEVDr!umeaPS^hh7RrKy!Td%%!z8
z4YU<<=)v@W`QKFl^U2tvVEv>5g%zjv+1s~iH4ob#U%gTv><H`%C0Nt7oju#ZVo2h*
z{h*yyp3cL;;XJxd?dEi}>M5eFsF<OUmo;)1e<LotJsdCsmI|8q=X8Aup@X)UyqBh9
znLmK{%CD>;Bgo1JOR%-GgYd+DfOu>ca${1kzXVZNR?aiFcQ-RrR8-t-=8Y=OFMR&;
zIZ*OOq<&j@4OksOhT4HgaZ4iUGyYGCrwFf*H72H}W+pcNUx@8)f)-|Vb@lE<%&PPT
zzA<+(79CNjl@wy>WWb2WhzXh;#D&!Whr!x9OTo15Zsynx*L>#>DFGV?+4#7I>z;@g
z=!@b6{vm7~jYtRLce(P^AWhlDGm}UH?feyJLKM%g#f8M7KOWiBq2$Cj==k%~!vYbN
z{l7B`DgxQE3oA`N%o-eM13mY#jj!&5b|3WY3=P#Kjxl7;CjoXs*1Dzo<C46sd>U6v
z7AFbG=n}txtaou<v6-30{=Nd_tK?6l9ZNtW@iOmQX3)x&{Pbz~Sl@q~F<Q-aCIgq<
zsx6u}wysJQ5lLfQvIbi7aU7r(3W}8P-0*clZoDBr`$g55Qk!$vte}A`Whe}b1zksn
zZ~WO~Fe84JfM-Fz79&84`J^CTIUM%)%Lv_;dov+%@$NGmW&pvo10c;)9t#qZ^g#$-
z($|98TIV)jmfw0H+b(+(Zi+T4f$<|aIJ$3xDPGLFgwuG;!|f7G^B?M)M8pPiOO750
z*m?%QX=YY#N=s{1vnE|zTVrOzv<<X9KF$o5OHW+}O0mpGwe|;Dx3^NUCwq0e5bh8k
z?BROc${%RzvR~LuulW`icjNGcs(7N$%!2LPDOYEZ0_#&;&S!jOCWoJc5a`@(0GhHK
z1$W0Caz#t5#R34d`9p#fq;1HgAKxeBqC1GQ;b|JOp7j<NR@SDcv#^lykkBykdf0&*
z6Ez&*DgmgHBqN=aB%?NhY(atI#c(Dm!Zku?dpj6r4)??^GWM#eLpF;(HGE99cTH54
z*U8o{oOJmDWM92bvQ(b|^O1T%{>rBGO}#Z#0LqhaHDa;lcR;$jc_w!m5h0q3rFO2t
zW$5B|V`Gj?A;14{F*i30gmgjC27Khl<aBdz3=opMG!pRO;J%rg0fXHCpFCn@hi@`9
zGeK}RcrMsnH3I_JCUZg>Hp<Fbn~IKGvkicQvg<5DZ-{~DQZqO->{joFj!1g=8@N?c
zFfx`ck7j|;2e>rkQpI|7@=8i34ggveklZ?^I5L$p>PoIdPqkbK#N<7%T5mwQECDp>
zz7Fx(Lx1^5ciL`uv-2pe9~RTkzGRS<MNM>A6Wn8L{3u^74+%EJW$67=)l);P&mc21
z>GtEpH-$WWC5Sc}mq-LWFB|#!dJm~<c&b<kZekP*6aNv3J{;8b#>~9Hd@mnl55P`@
zfu^4BQVznny<Wh}iK$I(G1bl{K>#5{#r?>zw@t32uc$BC>r9HNj#|jep*;I~tV`_S
z4LSiDvz>vYwug+SxxKdbK&`E-HL-d;1<DULtrzDNm6^3AHB-NTpIH>(&H+*l3R2*6
zBqUj!SjpMT4x}x=tG+prkm7<OTt+i38JTB~XsWO$^*s!9uU}tHxLySit00o|6bMqo
ze+nDX@AP}>4?H}4HGu<6icTYGY(8)eO()5aWI4Tg1H>gjZ_o8R4{sCD?YKEt#j730
z0r`rScITnol6Vs*@a(9eitXc6_BB+G4+7H&bdOxODQ&Oc$7@}+X*SP=9B~M7SzZk7
zKF<fK3g03xE^@sp8i`8Dt_|n4L^|JI$I|ORi{HM;WBk5ElK;_Pl>@bC_w^6@NJTT6
zED@OL5#25viT0{~9L05|Z6;3<v<EqlBtHu}%8>UA^EEe@l^tjDF`I2DcZ&OKrHLoL
zKUNTIW~=|MaKPOk5i~bD`(c#XQJ~@H;IhMqR5UGN17PaZm57UHYK?;Yirq@1qq3R}
z;R=E6<?R_M@%vIhnu(R=aX?MYSd;pRBqcd91ry)dp-}?VVUUuIrGA#=wrJ9q|Db@0
zED4=&G@PvjYNpWP6lTL+z&v~{#s4u}Co((S)XXd(REqvxL)&9yX&0=S{I|!?1P-44
z$^%L!{f$su1w4A~-ph-N1a50VDXBoK_lBoHrJj#eUtWa#PBkTpg~YMV_o!t_`dUUt
zhK$klY&-w(@DSLigRqa93T&eQS~)AvOpx|DA__%WoKyieh6I%nB0CF<pTAi52I8rG
zw|4IkgvGSi_k}4ZCugRqmfJzEpPwJEn`a!iwdaQqtDxN^L;&(C64G(QPFw74rlc^7
z3y1s=gd!!U9)nD-a754vEk*5SMB(z#94QRRwxHgxU_75u5H_6@7ozCJLHg19M>s5z
z`C%Hbb5HUuTS3q?t3qL@)6k+7S7{Ku2OEFp$Cm`QVxfk?1kCh~A6#i72ZQ00xlc~%
zBcMF44v6pUV51O9@53_fBmC!?$qhez9J~&>VAJ(#0hytuMnXLc|8{PEeyZ};P_n#}
zld!NbNcWx2x?4d(ySPZGtLw!D&|faL<+bu)J_OiGbMy1l)8ntv(IaBmc2+y=&l^3T
z{dRDq_He&b8_;ZAUzaazO&cGbm)2*p8=qcH@8k7o0&YbTl6;Q4wQ1B5<4t<2;$}Hk
z2nhZmINXP~*UXldMGiAzJv{guOuFvmUec0WERWC=;ScN+4mG-Q=2(};Qvw~+zk)lT
zl01Wc&Nw1P^dF#l_ihFVE+y5SVlt?Y&dq7c%O6j~;$8XIb=Nt!4ow{aE4Jg~V^d4Z
zg_<w2wj&s#YZ4x-?Z<o8YRW1q<r_Bxf3r!u3FT8Px>O3FYWaqMz|wZAX)UCxKCq<m
zHa)%#ycF%~+g%9XZN(7(&3LAD)~47gFw%|Zw-yBTE)$L>0H~~Yf9~aXIeEG>1={i7
zXq0u`+`6iZG=oGRO7RN)1yhyN0(eR|5EJn?vM-F_vVu11mNXLt#-Q{#)IEUj?%rDO
zR~P{MPEX)$%><7f0~1po@X((7<X5t=KhH-ch*VQ7y3gudzQH5x`sS}ih>pGw%D03P
zwnKZp(dVP74BEXDBdIr*$S=qT-HiVLc|)97Odz#F$q;e2x3_0+H|SW9v#IE&3Fd=7
z)v-v$x^iKv>S-Z6_#o+PtAt{tNGdD18Up3G8|E)#)J%?T?I5RU&EhFK_HAFUt$pgs
zAZ8x;vp6aSUEa7WCtH#6K<j%Xg)B&OX=vY#EMV&Lw~UWFpw^ml=c-6sxa%xlcl!B7
z*`k@S06)g}yQZRzogoBAM?}ARrvXJ?D%NhBH>V`@Xq|dYg6b%ZJvc!ywQ5{5BBumh
zySR`}>LVcm21b$km>3oaJELzK{KDT*S0wz`3pmQ+-<x=7KK{#*i-?Hh@ym3Xg_Fqc
zO7i`88T{$$>!W=CJ}yNC7}oqOS!a$oIVm9GxxM-ZCj~#G;;xnL3=PYZzU_N%ZQCt5
zX;+rk$r2j5*;@gx97O*|BqGNXjV&33xaY%coqc`4qC=DW2qNe1aR<tvGbV|bZ}SX@
z`@ho>6Q@>Hbp#2}p~}h*71Qga^pVAy&nGpU=l5+O{w`XU5cm`z=h2Uj`g}MD$!u5-
zf-HG5z-k*@QU5mWNo99Q$i`SbGtzLj_;`O~4yC}JtO50>FQdLCVP%Ute7%Dxzwg2f
z)lt7rFiXC&J&bj6bNS*#eZ61ffCHQ>RBX3Q7F!UBd77HGgYxf2evatvUf~mp62$vA
zex@LRtUD^VkiE+|EjJ2Ot2lVoQ~n)B=IRE)@4MKur|@G`kG&ii&*3}w|D$fB-;r29
zM^7z!ml0`+2Ro}Ev4En6n(7!VNi4wJh5_FU4;-OCA)_J=+leCjHj0gPrL@3}0MdCz
zXCbcSP*B)3#$X9w;t(JJP@EsM6wHLD9kXZpRL+3%Amf`Tw{ebwY1|CaP)Zkvxv>cb
ze4oQ{?zGeqyGx^|(!;GVUX%!$dVnp;w$lt-+3w?we)xn$9u7tefqIL+LSw#Si*xMb
zF0;fC$%L^e@S-IzLdN%hr;A&P8vQszcxjLSVB;f(1>=26k_9vHatJMD@#(kDOyg`_
z4<lz%E8+u+^PhKB0SoQs$aKYBRzbWiT29^k|31xo1=gI!bjZjj5jOtGOT5e%t!aUd
zD;)c11g#W0r7?q8aFMNyPgV&6ck;sguDH4IXsI$IZ+Y{BF_dQ7?{GejRKsG)JwCV%
zm+v-xz!5A=82ZjL6O^~D2MAKLN_FL@J!7BP)Eb^Hc|$GwpFC(SPYU2Z0-HE6Uc17=
z{C=YOVp!uT^$5M!qH<olxYiRk-OOAXro#&4C(?-~2%{AaYV2`OoJ<67n!kBA7`ePA
zR(MQ4$OH>(>9RO@+hd4-HzEm1A;83mQmCx0A#<OtvAwiHA2&9~V;Tv`++{Y`w!lvO
z{oyzYKZxqz1OLiu6$&2bILcse6Zp2`GYgjx#W#8A*4RMsd378BD&Y@mTaN6%e2Hxv
ztH>!x3@2o7@|I{&R~b|Y{twWI-Mn3Ujq7}SVhbBHDKl-E9I_&V?A`Eo?Y=CLsM77p
z`OK`JbmiLpE;H~s+dMdU96tX4^Ou{u;UmLRi+(G24p6LCO>g=$0~9vEpA&%s!f@(K
zUR5jRuOaNmm+P!|3@bVPjdKrv=-4^?=`T)f^i<`92VYoV{1$-!j2mzi+cywrr56b&
z8VdruBreB0{WKUDAl|<|eb1pJWzGNWkk-Nb*v0)7jKdbn<6I5*OD24eKJ3XrzOS$m
zd(xDpS~8t*-cVs_H-Q|aNNl50@D4z#cFkx#?w;J<J{d3@rs(Qu=W926crM7A2_2>*
z9HuJpn<RX%*N(`|Vwz9j1Y80&Ge_SUVW+4Y8l@YL9Va80<-G>#wg3Miesbgg-3j$|
zyZZB8f76#(HumeTeMYybG9Q(u8H5UIp=~y7hQn4PNtUl`)eRiGIz0$gLWW!`YpRCD
z6hy|jU|mfdzh!2P7^p{kVn|&m#~@Z1#hj^>V*V_{WPTd$1M^6CEM-;LtrfBmB!-8X
z#=v<<-_2W5l78rV9T8C^7n!_59_o~_pTif(f_OgjS=9fXyVzK=gL>|N?HRZr?)|uK
zo6lF4NQ8~BFz#VUG({mJt;xR9-xr3>hM!bQi3y7@7qtSU6%Tk#2v~xT-_hS+_@OYb
zOi)PQa0Nky?NLT}7Sa!P5Q@q}p>!Gw{!j~EImp7B6#uBoj>o?d(D-8loH{(81BRu4
z@7a%`DEOiRyOUr-T9k0Jyti<t#S*5GWe_M`CYP7+q`&(<%d*O2?Fj=T`&u0r*ixE5
z-EI}Yho|+WR=EgmY_)e{y2pl;j~If93*m^~EGp-l3=?B#X@WiMROQEW<E{Bb8wZ9M
zv-K?phf?++-|yYbr|0ovF{!(95T7+{Ox*gK8d(rxQ@*32Mu2+kanR*`{!1MkU18tl
z*ZG2YUlN>_^QLQ^Ef}7SrTK6ty+5p&4);IX_j_3qXAHQY-yfO=vdqo$k?1$>OF_@m
zkdu@eFwq)TIyJrS#(#rBg(y-G4tH}+&eq9>yX3?ERtxm=RE#!v&HKl<gYbI{8E3H<
z2F6&Jp2Nzo3j5W3nwwr_PRP@9b$+Z}=Jzj3=J0dwQME)f?*UVDFqxNt@C~Q_=6qL*
z^CsX!>ZrfXf^XtK^<M*{Wd+EOpr8USu31i4sI1pjmBLKx<HuM8p5}KJiuN*w_FB$^
z);pWf8tj1@vWD?FG26kbapOC!+@TPks-6(~QHn!+mQsoeHG9K$1!ZM<b@h*s)2%@s
z==7NCyQYgs$0ND>T3fVYbz6Nc_YZ=C_s}7Ji`<gP9s}Bv2Gh+#7rVOK@g99$k825Q
z>k@x0&(nb~nX*Z3<#eV4b2XO0?Za(%>f!QkvqV*^!R$1<1VrH&U5~q^`;$4-F=Nn-
zJ0HnF=&{h(|9zR*%=hK+46q!Nc?`K&+3nWjwjOTx^+WlajE6!p#84Cl+eD<c1~vEh
z*4!@kfx9rYvL?r$PR?kuwclK2UchL|>tZEKs_t>hXVvd5S4fJDXVPUOcqq0mAkH6B
zDEiSD1}5YaF?{9SxT@#7Jc~*4+#zTk*dsz=Ck^)e6Ixjc01U;($QVBgI<lAiS5z<B
zOPWutacCPZ7a<Bp8qoC)sp5O*1#au6<JGHU(@Z(V&7zv(tg|hMhk)x@`Nq^h9A~V<
zuDACu^@=U8>yECvx-Gz5Y-!=o2)SCp!Ha#*X4vKixVIaUtxf!%96UUFm#^kPa@X4{
z$>;pwNVB%LCEGzIsBxM<QFAoYbO$EG#5d!J#&0PoK!f%;@SF%VdrO*bVE=2`uqyEH
zFTcfwS%z`Y6R<aa>-L<pQ8S`iil&v8tTS!5;>RvY4M8mZ^4Hn`t%YGZB1}xdA3q|q
zRg|I*7b?Duv~N3avU?#SBF6Oah-V%i9FSjMg?e4F7U`)wL4!CU?ze;2_Qob<#l_Xl
z#glV$i3Q3w)Urd(TJ#TqjjExk2_$QQxupb7tka)gDXZyiK<IXKRBs^yNNw>(MY~+d
zQDlrHPc5GR0()nj4vgcsns|9x()sUZ7{E#7;(A^Fc!;HbN#Vl0?|&cXJAA=(Ch+T(
z4^w4PY3!?_j0t0X!jTUeTL<#*+B4s=5pkdhAB9DAcjx~6$t2m{-X4t22>t$$r*B)D
zAV~2UIzOWbR35LcGg`ptP95RWYN@$riQyN(EEaqSi<0)@gssoYni=-g)TGTDirU`W
zD=01o?yzhVk=t>#_PFwixrJ02Dq!44y|B0_y30%s^3R=;wlO4NR{Z~;LpWbM7;oY3
zVB@`HJ&Qk)ubkeS_QlXSKHaUTvJ~`ivT7%ikc%YvnUk~CE-^-rl}ia%SW?p0!}+k=
z_b^I(+Ob7s2|ersisAFsn<?Oh@ix?e>J}d1JCMwPfBMu8T22k}R4^GkJfxTOf9h`l
z;rt9pm>!lkHqT>G5K+?pro{in(qW-SBjgD@m@mR?udURNn9-wmLaX9RbIOmz%z~_=
zYs=7#E4;Xam9R$Z!?pHS;2~wW(cKq5`ej+A2hemE3k!EGt<|7-dm`5>2?mBEOU;&y
z{-nSyFtp+Jbm#iN9-GHmSq{KW0~E<^JA)@^;R0!SYjbljr2{D0p1!8q+XOsuR}^6G
zb3W#!RcjI-U)?=>&OR@Vfn}hDfk`Nz8vmg*D=U6C;<iZhr0sei6nY))osk;_C3QX;
zJ0l!?k9)u(z>>&j+5Ra^DG>!vsy~&x(U4^RXRk?x9~zd?w#{tHtNDQz3&Mt)F9Y_N
zd0vrF&YBtT^g2#0HJ;Qb7UcIbV6A&y^xO;#$V92jg<Vd>Lgrnj?tttqaLm-Tx~i?I
zxwN>*!(raKyMvUB%FEkOTQ4mpE1iHb7Jw^39(Jy=#MAg}Z@Yc&8mdzI{K9PG`_~{3
zo<)Gfw;vmYE^nkV*?i-9Tj6!PSC!*=t!UW;?ss3m?++(=TkCe5j(!@SA8%oITU^NE
z%8u5{STmR;7?o_f=QIpdbCxSbFwA;3%;)NcNayhoL6vC~-2az}q?M9V70anl3op9E
zPoC>lc@>rnzAXD>8Z{xJ-h7lkEm%M|6d@XOrnx2GIUaFLH)g1o95i)*d65x1-#3i}
z=33R&D$#>w2Wx9%b8}M@6M35beRGMTH5H1co#TMMJhfzVY7Oz22iAf4m*?lmWy>2N
zK@zsC)B3zf_qeZn`$|0jR8SI*^AYUu0IKVox(>SN4X#-Wj8G<{7-W_5MoAQO`LY<K
z3ZVk*Y~M7Xi2L+qNNR=T$X`WV?8X0v|5$1%++=E`GrxtuVcLB3h8C*MV8T7I2vL05
zm@Lac7s?vKv4+#>z{a(so1@?@TBw9u@k!e7aN^g$=XjrlW0S+WrDARzt4aCi4*_4o
zYnWeLzKFy4G|adT!p>LS>u(CBjfy>Wbw7_p@8X&YJKTIG>M|Csyf=rtR;x@wxtk`p
zsdIw|G{p<XRbg}t?Zx^H&HrvpOo^wT_(ZknV|@D@v0*;Z7NVu%DB?OeJ5MLqJOqe2
z8V&BxK-}-u0km|D<`0*pq^%W35nn;OlCiLG{d-fn%3BLG2?BBWz>>C!Tq=gFSC5+)
z#^^Ibh7FLXh*o<iz%0tTEl(;sy7bU=Qr^)kdwV+)-a}gWI`z)oL+HZ?Fp#fztH+r`
zdqbF#6y<)~{sQd{StjOUDqtBCMNmHOp})TdL*{Ekx-Ji5JPl(K4}u}<x%70xB0+({
z+Kndi&T7~hA)>RY8Y<QLTOrjKPNI@$+)+$U`{O-|^jeL>larm|0o|{M((Mlv7uake
zZ+YR~EKfWVS$?e$b3KFk#PPWeP9q)Wgtl1cZLHh&=J@0!A(!3s&lprR)M8y1Z4tu`
zc7#_ftZX8pqV#d>50i=3*C&Z30E>rX`rZ!89~bSoe{~E*2SfoSPtzPN*5uQ3GQ)o>
z@Wz8H1EFa*4yE<&cld>g3F_Dz4VsREEOln%eUDN7|9Syz?Ch3MPf(q_ddJ4bIx#*z
z@3@t0nwRGvO4#JNAqix=kaayeFg^x^wisQX5b*EQ(9ncDe+A*x7yaP=RUwbZank`H
z<f4E62nngbpN)3AI7s9>f0$`Ny5bn*wq9lq)H5>biJ+^TW@4`RJxwMvCg9ezSk<(5
z-c&tBn^nhV8sRsVIujDFZW0(DkK^>Lz~iAozeIJkxY9h(;-MK5%zV?&T$;KNzjV6K
z91iaXZ#<ZyU1Ky*7l;LHGV53^W-8;m)(AKp-qW!}?Yf`sPyz#cx<1i&YRh{E=0-*;
zs;X`~z0t*o#ihfgx!v6i&G(Wd;Q_+wIfP#2`SmCLb@r7J0e}7k{0U%afhv$hhq%@z
zK%OQOd-%oMV0qmr;=_?D|J%T|NQw!nOC7yov2edQ&_ZB6hH%d6khUBPIC^57c_s%Z
z>ABhcr68OH$;m+H%*pA3MO$03!r@qtR;mx+`9(Rc`~-*#i;9>T85he<(Xu80(Wk7U
zDvOILo{pU%bZ89^4{vOt{NyBNa?-C8-p>&3_O=dY7R1?wfjf;+#{|q5B1(~SdeROr
z4F^njcA7jq-h5t}tG2k_iq&Of8OOt8u(NfdrhaGZWS9NU)zx`KC<mHCm~wY_Ck{Ek
zu*n>vW16gc!tnI}TSS`Hx7_|oL1QKf91OEndEo0sA$S5TG;@9Z44n_uHma&v8IDpx
z)xqj&YR|ua1*1F04a<WA`oTdKc`b!T4#tt8DRxfQ=&m&vH#e-<D7i@<erG=NKK~H>
z>~*e|RPXflXK%vM1?&TjHw<#JvuwviIyz3jef9mYGCUks68h>u_OpB%wEC&L;Mvz_
zQ^mS1;kJ>7Ko*kc`fBYbG6vT9`DH^r)e{qFO@4jnz{Esv?@z+KjBli>F5^Pux4(`i
zD-EhD8aU>4H>F*<mATtK$`ky5UCzWis1&lw%RK&H%?-9;Y%VE~QsdovQ#<s^pxZrQ
zb40#N<MfLWCp#+vM$&P1V9;~#`J?=6WqEn8Dvp36qJ_yPIW;ALjSDBIPEk=Q%y%oh
z4OGU**F1+-ii(kD%HO{~d-M4-;o%{9R+cAUGiy~<hF?q!Gg~zqy5$hk^HdvkW$CfX
zE+AoAX=HWh^6Z+TQ<Q#?zOv>CY)g5$-8kvkt+OM^R9?Wy5v|}>^ltN2lPBrtKf!ed
zvniK1d(RBT?yRAJ9Hu@uotU5=&;kE1vEDZNBrrR+Ff%zjJ~uZY&0i&aagS)cF=lH=
zDkeq%GyL)Wp`yYVWv8}BSWxqHs!r!2>PFwf0&jK3jUpNzUgBQ|YOa>jPrvIORa9b{
z`S`%(5FqQ6sL+3I>+bw25`2Gxgr3I&=~`oZtBNF*sHp+8Tird}@o@17@bP6Kyv#<L
zAJXLN@?m!l#P5Kdu#^<DjFOVd)4@dJ&z}X|)Bs+>)M{ma-QW{(jCfYCOfW8C*rtD8
z7jt@6fFSgC_&58#$I!s<DL}(3D#|J^cladmZ~EYE)vhPR%#0*^<Xv1GvfGOa4+IbF
zk^d}XFTrW_L2A;~6suX)7crKPWC4c5%G|u*zO_<suFA3M-qTZkX6EN{LNv*5(xBiV
zv%TF~#Hc5)UcPj7aRvuqeSO1r#m?S7vMzpS!d$hk!4KXK?%Ov~(sIo`f;%-NL?plt
zXx!cP^Y@qR1DBoV;GI-KI`q4UNS#aF{7X{OjQe{}(Gj?MR|5kw9u|;GwlozL<>#C2
zL}Y<WgknAN3zYDV<EY4C7i-GJH0b7~&5`@v)~i>@7??)?hW4pBKClu}NDH`HNxa*`
z^_f)uurS`7-Z`>{19fZ3a}M<YS^y{$oyd5Y6m&^jM5T7uKYg!!Z@)g75FcQQFRabv
z;GydW(D2efDsMMB;NksfW8T$Nmpj=xxEo9r%iyt@%snlVBt!2M7Kx6DeT9r1952<w
znl%b|hdL=bMn;>*w#N*fM{X!6C@khcYqdG;v*(}N{Cr8#_-Jt9xYWAIQ4DUs+^Go3
zf`QgT>U|qrt`wkJnyUY_vwrcWelz2$%!aer^!&P1@#Ghrls{vtSiH@9lsZ2Rbl9=r
zI%BwRa0sFJI@pl+48*^tyK|eG){Klg&olRS9T5?cHW3iOyvM=G(T-eZK&DGJC3XC&
zr;8}I4`bxdbs$!yWqM6XNp|(*z(iGPsrSg)_Qw=Hk=Dxu<pN=nHya~Z^x9??7VAa|
zll!atTFTloW9T|l6H{ZZ`T6<S3&b9iW#|F}aE|UqdU{4yRzI5mwO<s!GHrW%zvk*s
zi9b#?MikA0@xF;@hGk*4h36$9s#6S%CnK&`RA&d{G_VF=A2mAVhUzp)524?hUN?Jj
zZ6`nN>Tz(fU-lW~dk&z#4lR*D!RK<`3ORY3nVmfnOdE#W_c4X5<3vsJ7j==!&2;RN
zTzy5#Hw5hDx8RA+e7-wbeZn@!yQ!|m{1-g3pA&o<`+V^YL*Tczpw+AQbB83}Mikwt
z)O*39!ES3+Q`iLHFfn}*(TDOd{!q$adNRwOxK4TkL^P7~7pqKv80M_4VG^w{gE3}!
zw*VC?(svRcfnRI#u(D&UMCud#T#=#LS}jx2%J-C0?$-)+e!Uq-J(Ow(MXV-jr@8RO
zBM%Kt<H_gUtVPcAp54|Z>Qdk31Ish$KXZ{w575!jJ_=*Skt{4E6B6?EkC&BK8v{r5
z{K%J86<=*BpVyRRc9f$j$$i;c|8Cf&f>-m_>2?-4Pk5$~6V=2)ErPcq>?TYjiYWzm
zDUA~XDanb>Teu58InEVMVl3J-)W0Z;<Y|8)iY`!ZM}&uivvPcfyLxqqjI#KX9RVRg
z$??l!Ljz30NQ_`jb+sp$LIH(;9;fsiPhma<9eKg%_&N#T_u_UJ6t<_-zFqS+S=BXk
zFDd1fxchzx2__ycE)E_xHrV7Zkx?YcJeX!mlM)0)S@`68=^XnZ*@O(}+?x+v^liKK
z&$(N9i&$se)bY4?SIi4C?owReaLXsVkz?Y$d@25~xQiok@RsqP=^x+OuO-mi#ubot
z@Up<^`=}!}=h}%WJDg<|af6E$zNh12A(D)Rle|!_@npM!ofP(LK?nx9{xh}p#__eg
zj~p=zD>K%QeK)uIZRGKct1llL_P`QT1ZzetN5AKgw#MU%LmV|JN4Iv2K7BH<&=W;d
zkN`Bv*qHX~W>#bV$JRWd65YoJ*h77E<Q`E!L!f;Mr;sfhE`|r#^Dl!jWH?SZ351Z=
zH5%l16`Wo{G|}F1F#}TtukA&9C*G}2#h4*2TKs0Xqt{fp<#aAQfB`);oVo}%_%Blg
z(xl&lPfUJfLaa#2e9FqGpXKxNCif?`j~!4F&h}>aytF{vsX!?ZhVtO$ZuE9ehTClo
zhNxr?)qn6ZdyKd%1_&?|%pAlACe~>$#3;XvM4|AqDA&H_SjR;uohq_OklxD<<J&8h
z%p9s{ZEv6dH4N?ubvB;<{~iHmJGG_di;c;z`FTm29f-MhnsO|nyE9af)MN5<v^d20
zTVDKkak|5O3z0_+B=DE6U~s>?ZIWj5gM`9}ekD(4$ZoOUWbqdL(8ryPDD<{j0`eKY
zbdBpOF)j}2dwTKU1;T;eH+urlp?^n`877C&{z)L#6G8`cT1ThKAHu-RjWbH{RCH;A
z`diAevoxPb&CV=mveScAY>L4ESL|-tB+lMFkNsWY78jh5KAcd-;UNk<x{biUb=XYV
zNIv^hy0>eVliD-f?HiBhye7G61kWpGD&y_g+Z4|C?W+KBWohZ*&W`Ys@qdf26+>qP
ztSq^C;WRX6gy$?6W__tMJv1@_6J-``3--C($gr!@$n$TFU-J&3C^GjgrWCKFy?rdI
zfB|)i{IIZXWPF{nn<g6boHJCZxn_mVVON7UF^q5MY35J{4mR$wGtZCAP@lZ6)w_Rx
zc!|)_gXA{|<DECYv?P@lnU==LJa>keI<cUP&Fjx>k~zc-Yr4$QNnzyS!TWOCGCQ<i
z4O#L3kNihYuj|%}ts2?2bqxL$En+g2tDe!EHp1}k*^jg>1Nh)G7Ybqz!meMx0`3WL
z@jv~yPMGZRW$&mu0)c^a>KCb;mr;U4?_9}tPi`nY{OY=X4U7M5{ZC#B=98=3nSlvQ
zUxtnJXPAL`DR|z%nSA&D<eA`<cvC6J$el~bXZ0A|RCxHTm(rgQy(l{twUci)V>Q67
z0orx?h~K_`?e9OkDhh@`mWs6-l)eCmgNNHK{)aBFTLfmxce>3yz`!7$P_K-GgCnjh
zan@QwJ3cY7<xd+DFxTOV*&`t){sm^T?wq`%fV=@14i9d?<RgyVo8H3G5<u#YY?mBX
zc6WD|mw!n=oBcd%`S-nkqA82S+%6wRw<3b^CM5`ygArjwXLifJ9f$JurEb_Q_*YD3
z?DFo15oTT1YJk%qMaPDZAJr>H;bLcDVM#@`a(tbS>LVaPPC-HO(#9q;>uiww2!tGv
zZ{=g@)Y^O=Nf$w5s5KqSo}N~-as_O|hr6YRfvjSnSpv8-1X({ZFfjU)&N=~A5eWFQ
ze73fJm^CkvIjEsFi~=l{lp_Ah;o;%GObx*F=-<W?Z_?5|GXtL%!tn5Sk+-Kq>}+fx
z-Oq1<bvQd4lYQ7=@T%+b7<*Q93#7dbv)d8@>$jhI=>NTSXhmt|dsb#cBkYeZ*$D!<
zE0qa4S|aSvJW?#JcsnT+mujLWEsTxX3C#WcUyI113&_9h=qFs9R&zvbQ?4s!zn-4!
zAJezadAR<xuGnNMdWu+^lNhgIS2u}gLh|~jA3OqO(Zw|AMIWz6?k?~g5bP6qt^SCc
z^BM1-tGE0gQ(qYtWwf=8q97qC9Ri9<N_PuLcQ;6vba#n#58VwzNjF$@cb7;EFd#61
z^taJ-&il;|FE4b0XP&+HTKBqxeu*f>3zPvj7c-sc!6NNRo<GB=lNfZm<x~iG{BEw|
z;-02OhllR~Ezj~<$Js`*0jtwE`1dTYeV#OXSJ#`VDqjwr_QYaj)0N7~O5pna_kwss
zU%h(Ob~3F4;nUF2DC@kpZ<>9#6O*f2PnXMuDvVaMZlnu;{o3H_nlP=~YRdpV1}%g{
z=zLP8I^R#B+4uTWah7jd)%3NsvTK8@g3vK$Ca;`g$VN4o-T_r_q~IQWk6N#`<x9?&
z?Gz$CE5VD|d}rg;7oztdim%MfuoZN+G*d`C`4iaKlMr>z-s1h`LN6YUei!9c*Z=%J
zpkgWG&sT1-5f_&eXHgUZRG;gU8Jw_R5<(Yo-OV>QH`(4tQg@7PmEtV$x60TejdIPy
zgzT$=oSZN7^B2`U<d;Bo*L(zYsQyb#AY1T1-ho&HC0Bm8XMVJw1f4b`t<;RF|7;GW
zmuXay*P>BV7X#oQ+SbO;#+KkJI`!J)`r-r#k@LK-fX&5Dh~gq+BG4&cYv_9f(--(~
z+pqdVvEU1Q2W_IbU_I8c$s{w%$;;mW&2h=E5uh&Wyk6+ES!_Doo2zwB-UN!H&Vnle
z4i1;&%^@hq)henGx8twS3*VOJW+hYG)kihvBjjqm<U~X%+1XVj*)M2lwpYIfAwq9}
z4i_3@a0u>q-4^Gte#=`xJ#YTDJ5x20a1I1ZiAhQ06JljX>{_j^3>CE?kpigJRI}*|
z9{n-6*)Z6S1K#1F`kx3I8XhiUOJZS)g=XmN)X(U*x*t+L>;WQ3H5Y-R>w;&^pFe*F
z-AO-frg>dXakRP&#tlrtFAps|M$OJYi~>sy#QQu;yi+?tQLs;Z@<T)~PiwQU-%wLi
zgII*iQ#jNVHW7IW&C3hSdVoG{*}8c7ZXsRbrFN`70;E%bfE7<CsH^`p0S*r9&FlPb
zG^@NEE(Z7-7(@K6Xa^s$vDJo#KBA`X2`j76YAwpmjk5*vdc)NK(Vn~r0ww?gn-;0K
zyZ-?3E7TR@V<3a$@lvd?&<7g-JfiSa0bM^9lhFxe7@Gz4lSks>CM}a6Ko$@Trqyip
znj-@!emD0!F5{Mj+&2;l^}QX&ev0Xmxw)MY>bnQj)Vl0Ww_gQOl<PG{YdaXP8yR@R
z3b#7X+RtAct3_O1oZBokz%Q9PuX^)i0Mkjnjav62BQ0KpD{Z#M1q0a$ZR6XWB8|2!
z|GnGb8);QqvqJZa(&DVVkB5z&*KlAbPHY+|Wyc&&2(tywP+;8_X6T-;+}^mQ<v2=<
z(V`TJnoqIdijAm7;moq=0E8fhcq8^{9cdj(e<sWpsDQi<+TE`HICvJDnwadZbY|y?
zpXlYWCw%)#ar>ud(VYb9v#OW_xRrf0w<ddV_}!+NdH?YC=HRvn2e{5i6IJQAOOG)$
zmO+xhg;e_4C%`+5tH3WzTXEs5Y_zbl(rMC%V|xws@qq7Nn49}^OA^n%vA%xH>D$!R
z8n)k`na-O;PU+m=w^t*#_Q4>5=c0B*Q09<p<Im>iCQx`joRJA6A5#D-L?95FKqe+9
zFG7M4Qv<D7Rv~y*l|Np8ej92hd8xyy6(1<17nuhI>g|6W&)rEOlvEprqnO^w2n7Y!
z0G^Il<Fw9nyYJSSFFKNJ;F}t6n<{$>Ry3RTs7jB365{^YI{;K%BvirI%C+lvnEcK$
z+N0~roRhQAD|LNVw%7QNdI1jd5+VE!e(#{;lF^5TrQacg*0g9fWiyN0Auvlv+a!=H
zMjVo&5_IqNDkSC>$k5M$&VA^y(l_`QplXMD_HFwNGl($Y^11Hiw6Z62viRM2-<^PO
z{ahQd^}2H!oNoR7qtZDAE@q9>Iqd)y*%V@KHIUf;7|8q@4`y?1G9iNCq%k!!8HMK#
z=WHo|evT8i{mkPeZ7L3fpbc?-Aar)+G{!OpZB|!T*J-rzI;o#=g)iGcUAxFUN#DH_
z=RdnT7P>f$fvv>GJ`wk5IXoH=%0biM;^MV&vscxf{IUEsV3}IT`$Uab8?dI-Ghq|C
ze;VKm242@EOELULMo^CeLYa+eOD$-F#{fa)K-ang|JO{DF)B*&nEsMznd~aPc4;n?
zQEbxG4=KYbDRcSr4Z7b;L>wd8ov~vDzkj4D8e{P<`an+$yV#ks2C_iAg5t7~nuhAR
z78iO`1xw3PfC5f#^6<ZDb-gCZ9%19;1j*%=A3hW`18oIDPtw2)z(inw97tlQ0?sFU
z+lZr6ps$p3a#C?sPbyBH`Sh6d>|jO1K%>fmD??AW36a_=gR3+)hB^2ep`QCWCSDkQ
zmBw3@LUIjkcJTfEB19BUA8-}m&AXWKyVj7-iwF;|fz;I2PHA){PLPVL`NHSx;R}r_
zFXSeE<cfwAj8`X*7KqxQ-#8|2zlGM<C!*78-7Ku!oW}TF1r^yXHdVj>dcWW1PIg>&
zfHPzTl9(n971Oe>_sqHMmQ|Tx+uN(B;jW1~Q@}<+RN=m94q_AFF9m0vP>m||4Jh7Q
zzoR~CG&D5CN5$XLeoPP*6(qS@)hU|x!sf`D3HIcvaRWvH7a#?1@xA6<8X6d&r=iI~
zf@D#&$Vjm?R&;a-qHDtU_JG=Gs__zR^NQPpkJB<zQ?)cSBoyv*(Sv5iah&C{6#g)8
z=?~E8ikx#7&PLV%Q5VDLfHV`jfEeVR6EW}WPP{*KLN@G?(6L-qef_Ko_Kv{r5Ye&I
z5DMSkdW8buy%HR3xmO{}0aGhNvvQfOF_i(JPkSbfTM;&e)yv%LT-W;&5)$EK%@-sq
z{3PJC1HoIdH-)gPtE;UnuW0?&U%yOj897AkC-7XIn25>D+7aV2s!`<k8y^YG&b9xw
z5?w4ds>5_x-QALqXpV|{>}(<i-)E_=cK!n}J<*VSXGLjzI=X%i#_iSZ-olYZJzhbR
z6d0TugV&IlHy3ywIJ&sx&rE**{*uMvX=a6qnMwHLACTMe0c~yVewxaN4%vD|3r(U-
z>j_~yef`Sp>|5wm8BDP=H#cCI@Z0zA#9aXv`hI?$&B5nDoxD95j3o_2@;Z!v%`Yf)
ze&M3cRyYE7tHm@>FbMi~J`lN=88$j5n2C$_0I0$q;@N|_I#3Y3)<u#_A9Z~$hsK>O
z=;Vfvi$TZ=l5dc#TqP=0u{-00N5Y9Q?Bno87~Tx1=msc;bTUcfV_=}u>Vk}n`~&<G
zEdhZg5KCueV+nBbLiGvY9>dYEtLg-%@j$lrmGHNL`<fWK+p^!SK<T^rR{IxZq&%~H
zib!Onq!Jj)s$Bf+8L5ePHRu?jrq9yTs8%Hn9T~2Z__|5euJ!ltZO^N2FPOqlOBn9r
z?KJR}rQJ9B@fovUgQ&SXXAc=vE?^wVTbUFn*^g?u;T&3PHAQE2PGk^rq}$)2QK{>3
zx~C;wlDNJ%!7}FvETrh^=_|2be*--8bvM}2#z4y+iW@s8OZX>XAjkP(_N@{V@KnR^
z_vo3-g`~zycU7$sFy!r}L^D|i5)^dS07`2N)XMpDubkq8D^QGs&6b>|qG-x?zAh~N
zH9-XIAOa&t?WCC>l;pm$NMs}=7eJ(5x(|*;4GukJ<!{@Ou0f|-Q?*_e7NO)=TylPs
z!0~8={}>47316=RwzNpD{rmU+W7*vyY+xI%<Oxt>7w(4*6*+u<I#p8#13nOy#cXgQ
zfj%gE#y1}|q>96#{KxHfrNluEG9&zA3s6KV9svRLG_}>@Mg7}RYv+^GTu!m$mbQqy
z-mN>|-#xczFj^i`plm58SMP1|@uv`PLA9HGZ<EKdxaY+YK0VlBYFKO8D-~Jx#eKe~
z$T2%%Un-)YJ7Y>w;{n=1QBl!|z^%8YCilZpFp+==nwywp2)RY?jP4Eu4-~YO?@9Xk
zSxTXi?N3k9`W|m>?(1u5c^v+H2vt$h^Evz`25oSjW97~L^J_f@R`IQ74_84@3KiZb
zHPg(o0usP89Ea%DD^)ABf>}QT(G(UoHWw#5YxueoDj^|Zu4GDl#?SS28DjQEv?wcx
zs9i~N$u|pkqS5paBO0^Q$T`mLpDC0rf|e7<zpONO5zeaOXIsR=#Kfj7h!d(OkCK=S
za<c|7u`reMJ>R}X;;0n7*fv&8=y<8-v;bkqt}!I8Z<T(9Bb`kwCN#k*ex5*yUS#v(
z!*-eTM!%Z%OodLHJKF0dDCEh$0T8I%DT8m;g>Jr&jVUD}lr*Id?x~Tb6&aJ+jso2z
z@TpoR2YmwGp7O#c&tJty=_^-e>)lb4(Axon8&(E}sO3~$p$SF~pzG)4%0Q&(jc+n~
zLdRDgb!{v*eFwzqb(Bc*AS1;K`W$|U{0m0CmUmK&a*7bCR!HS3AMzA#$wljWH+NAd
z-_*;zFKPGHZBBal33#UqwnCcC5qo0|-EJb(5G;_?x#f(IGG_wa9+eYzx6m`sN1!p@
zaRA`l?v78TTEs+1<ON&4puo-0cMD-TLU0=V>V9<&OcR<JcX0RE;LLI=;zF>$1OwUf
zjt+Ta4+8@VvXrrE)1P@_XlUUwc;mTL$mnMdA%#gv1a}v&r;0qSsP+Z#>n+CNf}K&t
z$}27Mkl|L4ZvPV(htp>H$77meU(d>)J3mEkyQzPu)Pwp0`29Qz7GYCi<MZn3qLZ<!
z`YdZRM8}#MX=E*d+M`ycq4Y%##zvMM@zK5ZtIzwZ-xS-ZJ|nS$L0G?zo+kD5yZDj-
z6x_+tadRZwKt<*I;=cRd{#u9WfO_~KXf4ChF@}a1h%!sXZ<{j>tDBpfCn3-ZK{qkI
zsVC1~(eb9uyO8ee5TzK?Bzj#P_T1Sflm&A3Q|3>7k_`(DwXn4<;!51#1tq6|>mE_z
z2yir5m#AA!Nl!1PAA2zg)R|ep+GZX#9BTO$C>@f^L`%7n`C{f?Q&3QZKZ0d00uA=&
zrnvPgj_CZee4+X8T+8l3tfp3`=fDJ~TO;RDqR18q?F95Ll|?B(EYLmav^c}gkGIq^
zYdFAwG+zied|l00y@Y(MVEZ65DUbRVG(fs&V$04ZQVyK?#aCC}^9tccDz>*$00aQ*
zbex6JbpOu9s9%kcCxZ_0WSbb|CKgkN)30?mOgwGhMr4$IdJq;9qcJr8XLGD6J`<#O
zHaUn+q24BH=%@Y(f@IOp>w^5ZvkZHIX%MILm!h~WB}h5rzA7wX3L0nNbq$Cj&d$Y`
z52?R>`wqj?=XikH2o-;gQiSW4XJTQIqc4ei>KrK-6216Ze{uxFA}vp!JezuzemGyk
zb|k(us!R&?7dSV;@ljvT;p|98NLcJJA!54z@ttECeHe7)GKItXS@p!^B%-u98z<s1
zm|9y|S)bp($943H5eJfaHsvLtB6ZSaJN7$A8Ab8s;NIBmrFP{S)r_mLbNdpZvmdu3
ze54N{^isQ_yudP~Xckd^Vko*|#ZPWfC0425F2X}d7FQw-lx^EOzss09`CX1o#LcMA
zI7;*H!QKL?U$74$Ehe8|mhGID)=Z`4^<ylt5iqJBYm^YkM{CiEL3qgLDFohiC!m5}
zZP|?n+H5f~v37tzIV*~Vt=%=^cfNs(<?-?HATtciqNFZK{D7&-WPGRlp;44ictu48
zXkBQz3eIxNaJVjr3fF|r`xJna7p-eSY%<p8rj9<S9xF3*PJg!F4UgMX5$Id3R}4nx
z<`OUR8AA^6bX2tEzA~C7>!OhXgCXCuOFfPs|HT4YSCo{?D|%SOVnN906}ZDJwJO(-
zK}*AD$tcx#(&2M?*Rm@*%8kqdi~wXU(z2L4i;i>y$*+7*5#ocQpnPjF{EMpCI>rxp
z_Z@iFuM9);1I~N2PQaoOob<c<`<vZA?46yj8vQQ0%%E`4wUOU9?ScFf1V&`@;v$ow
zuH#)@!P+m?E3{AYDXv3n94mD}%bX8VXFV;Fl9CXPDxw&#2XH%GN~7R^4%crlJ8yS4
zHcSl-4?~2mgr}~=NiP6^Rhn@J-i!uBRYY|oW7|<2WM%E=OLWRe$&W$EtOe9_x97fo
z72G?O#Bi?M+TQj@Xbm}^1b?uzF3x|ap}~bap<^x!lswKP${IRlM06^BARqjd`o}Kk
zMIfPD03l-B%(LUrrpfRDcrKG3WGR*BSaj3PxenC5J;e%{09Ybv?OQl_7G6x;_1<}A
zBtuZHv94}XhLCBT#oH;uXiso!fxh6HxN`v^&&JAHG;te*ilqoC&)tnYrH<TbZEmJo
zBp3Zewaqxb6@vOuk)#Tf-HGqZB7J61Z*#Wh@V+Us%Syv$)W{^`3(qV{5D<5PGKxnG
z`qVCf5vl=I&j1ah$C`}8AXKgF1U*N}R-ZhWyG*_66me952TbcI6l8VTg|ET8Iuf%d
z3sUg9hXyo5b8_DLU|O^Q_Qi<zf!9htl`Xmet=ToGp9Y5VkbtnMqoE;bo{dU>t57Bx
z$Tn%PE2f=O#;2#nOAo93uC4n~6TqFDkkCw)(+gV1>s<*7A5{Ybg(xyS1IL*m6*x{;
z4>&Uh`}^}WGnCAF{sIIko1Oz!yEX!56X5p0ZFD<W1}1HqYLc`(0+dl&JRpRb%~`fD
z>a+N8mVgXP3Do%D!Ls}MV^16qMz}aS`WwJYHv^qlGWEkfHo*J_pWz4?<&D>{%b~Hl
znYN)>cm>dWVPIq|Du!ffqUU70{|p014=+mL^_qS#z>HLW_seqFhQ@&QJ<Zh;gykZB
z?%c>=c~+F32e^X!{i-k~W(4%`Dt~Xpm!1-1wGuIzS*KB?T;npFFswFUECjKbNCQn*
z)9}F}CEnW!FWIxxJDQSvFIe5y{J*ykl8K0jczJloJhV(q3ZQNI`9V7qFG3n)Vj5hs
z_#NU0a$w@H<1k!m;uK#*%P8zqK)~1a7@=yTjsE)GX`7YmAoS*ebSJ>0n66kTQF}iy
zT>%lEh<k+(x@09sP$H8OQYbWrhVn7F0n6#?>agOF;?~wnU^u0=QDfNEL<~Y(>*!t@
z=U?%6*%3F|F70d`P~hMk0YActRPKj8&Ly(eMYvA3Lve8!-3Oe>NTV09Oaf9uz?b2o
zU10dRj%y)0Pku6E;4@@8s(T^pM(l3!`#ccM_ec;~)77dnpv0+cGJ~ui8Fno2!MAe4
z2~!I!6EFw$A%wy9N81GlK2sGD)ahKuFNaxooL=k#dJ2W_?*OYl5H-ig!?UrunIYhm
zq;1V*GcOxe%?|iHz*sDygH`DAij9d$fv%WfxUP;pO>D&+99XxCD7?q_x0F;Xwhzjm
zz4h<l1`g#Gm9m`5x~lI|(~O*F(6T>QEZ}u|7c-|Vyf{6Lh9R0b<d)SqmUc=yjpzEN
z^P7j8dWzMz;9M(SCyC}MrB8?xQ!+EVWraK&>lzzl?C5|!2wVxvp7S1gj2o!Lgsx!<
z5F~lU5UfwzNY+<s2ThJAx$bJMui_+|jA`+^G|edE^pl74FX~*TKKI_440hh^b^?%b
zpm-}NV%}?ewi0MU_ool`_GCS(_k*5Vdj)KNPH_#ouXQs0VV;YZsPMh#Rjq)UMJoXT
z0pbafz?f3U4oBW-M!bcPkkJ1A1G}ull6wE0-Fjriv+)Ry%}lB%gGUZ`lS|pM*w_+M
zOO2G$-;Hj9*T)N;2A`ipi(Bu!h@rLi7oF`v*WZG}P*99`2Zx9I!$TwA(9%jt$rpLx
z(NBzFk==*S9apHXH`(-`0IV<RMy+T>JDOob`(Rr`;>;?)tk<Qyydkuk4_ArL$$YAk
z^qXuVAJbd~trf!~w8!;zbp`qFct6WZx9F=wi9EDk5wu_ISc6U(9QemuA)p<n9-vmp
z{KYHL+R|L1T|YiP9v(eXWzgE-Ih2M#)I|_7wzM?cE;jY`_J(48EA<AQDV}*Yk53vw
zZn+1TeAMN>48c~3h3{^qr!<9PSrBiGT*_zhk1a!+)DzNMTdjtic{|PE^L2HqC%foJ
z53lO2XB=kcfqP8u%LR|)&Fkw-HvqPN`0&9(frcI!op6`6ZAWv)2%gg9W9AdPrx1~*
zk1uFc{R&S>)7nXov1C)b$L{23J}Q}gV0e5Mz(f2N44H|E)16)F+0F(>d+psV+$|*I
za(jFD)tB@+jB$;_-tkhBD#5ddpS%_NE*ngYk#j)8F${2&IGpbQz9kFc&td>8wXPA=
z)tjgk-Z>;*B%6T%TyFO|y8#E-<;m_$P*9NH<-&^c%Q^b0w!a)1*_hJDIevfE4_2C)
zD6ajISXkL1SeTI|ZYPSv`RYzq$Lgp2qt32H`bFHWB1k@$S-K-#)Etcdo1s69Jf|l4
zUYFe8zP>y~6Z;0R)w$oZ<ox0EUnO4~pGBL>%E^KPn?qlt`^)HCx;W@c;neaDYo6;4
z)MLoXB3aTe`%@fBmk~>ay{m+_e{<ir@s_Ga2|D<Ubtx@o&ci`S+-{mSOxIyQH3)6b
zhZJ21fr9diAc-^Fa8+XeL=1v(vRqxd1@TR%OPzj6%xufPmo}xU7rzn|h7S>`cK~HE
zSW#fV6TJE@in19$I5@ZhY%gyws&04I*1#Ow`2qpELskD;@{=PuiZ2vO&^(^JcC%wX
zMxnksUmDHXT)~sBLzri;x)tugj{meKlzSi;Ef?t9eMQi*vBR_8Q3jm`n3<jaoh4Qg
z*Hyw+-bl2kdDaZCG8%4gl~N@Sl)|Lmu*OPnX=b<)`la_)QrwRqU@+RpU7=xNruHcU
zg%KE(Uk6SJdA&b47<P1SSe_djTUhvx#Qy~I$0xkEedZi<>GMcw&9|&zcIwvZ(d4Eq
z)mdFSmw}N(LHTI-?<oI$_u^Lbo~W^f{dRtgpb-)|9?GZgb^*P?^0XuH)CHvga@MpE
z-?S-n6Iav}Um7K3yoaMAaqbpRgcAO~0QeC8rLS;EnfsB#Q`Pt%MAjm~*cPW}W<a|M
z<SqYs$kL)`UU;^q&ULF?1*JGpz3@TdP?ov{i|TI5OUCSq{_j67658L#V4jMMl%;Ww
zm%K=s>ux>qyGk9wEEr*yS8xjnE9Eg@CR<;V<!bL%?DqeU>dXm!7=}cyc|SMyXVHG8
zs~OfR3leh~*xz{h76u33XpwgeZ}GRi`}-DORwt2=Hrc~dXe{!Y!bGUeuoN+Jic3c5
zV|r%tIR|z$ZaY5hkK_caj#DQhCM1ymOXx+i#~vK2ps|QYoUuB6-!`}&I4FHO(z7r!
zGowI*2mC4*2PHv<Zh;6XY3rY+U?{K0d9$f$S0tr}nW*SDGP2APUmY(UadB<G&Yyvi
zoDHsr)fh44Lj05oV@o9utH0N*MMgSLy-5RW8F)?&4z_`>Qq&Fke&7cic%^Rh+le}P
zH#dcocEHZ!hlgbwAi<YYov1@lP%S40k}3fRI@H_tb&v>Lr`+XbMwP7K=3q59w-E0K
zRrmk<C2WIvA4CxFu}%@rtWKZae?Wl>{4t__!^z5tj)_^Mm@;l69T0SX%Rr$e5BiRl
znUF>X6{QJBItqOHS|?VpCPhRkzlprGo7!?+9iBb5;w#B$a)&+39>GRON5hC{^E~;P
z(oXw^j)sY;zSiy0Z|pYjbKuNzLN7iK+{_LUz_ILz_RXN1t1AmTdqG-cv@@2~LHgtq
z(aRAjfu&3;s!aj{PKfZprx4;4w%@zFe?RzWs2CR`QVQDxk=)eOLe+7h;&F5FDwdoL
zTtKlQ8t)up81iXv=dvrp$Bzkj^YU!*^7PskzsIlfb8R0G|G~U;Vr(oc(I-KgM%~PL
z6kOE^RW-Gg^wgMaKIZ3z6_SNGUE+y4&xnb0EmLLHRaI9vU@vjPynT@A=muWL`|5Fq
zAc)PB?d(8iYhz+!=G_gO|D^gS&)-kyPaCX)`H&w2iS0*k@5lSE!xJ~PF9svY0*zU<
zKW!`GHP$z}oH;XTwUx`~7FE=%wOc8!UOhG4*V5OgjFXIvjQl8K2z(N_lJA?I?2jkx
zRlogG!|%oCRcT$j4~5dVw_oSw{iLC1qNSa*BnDsZdO>{0bgr-pn@n|p;T>&e6$!Z(
zB}Dq~hsk;A{0YT>?gb7hI5napBkR~_M&in_qH_(9hGb)f2j*mwhnt%{nz&m%JsH8{
z&6`0DHT<x5j;4sdnsCaFqi>**Uor8i&}t7zZ}No43l1nD=th`&qqLu>XhMXzxl6v^
zZ%Lx``BW-KK|lr{LO~G+bd1PqTCs8DAZ1L<|ELs!STL!F1aN^Mow*0Q@FYpZE|f0;
zft6Fw!pcby@lGuf-}xAUzydd2h6V@M%j51)?Zw53g_j9^Z{EDQOl(h)i<IMU_dYsy
zDv2F{iBYm}MSgP3lkpKHWXjBsT=@RIthhL2OvT!|_GpCw<^6Di^d*eyFXIaEQ!)QC
zu7Fj=m_gXjDoa~->YR{&vb!(H*zK+NHt$Pkc<>8mGd)57DDspgXSJlUIO4{1v!N9&
zhr>0HlZ`DVGE`c=V}5DE*w$7MbgMUOCMFg?PTa^zNS>+d>s2&VQgPFK+?OsKk3Ba;
zT=hXTX!pR<M-Mm-43EHIs0elO5KF!I<mu%_Gw<r)aB_IcKr?7ugw`VTeUX{@c`oTd
z4WgP7Pl?2){8{j)NQy6+YS;N}=Ov~mzCyKc8b5Yti$&@Y^6h6eR8+f7=NJw-s*$Nr
zgikf_T@Zy$wdF3HY|PU|YC}wa{ZaY5y4`8CH0Mi-<`$?$2TN+B9jGz-vjgdO6%^No
zwbjnF)J5yZNKJaGq-|*7<~m0X5v3#3?&2QSyBCF{<)7rXojT|MGfv6c3^3z1@#%cO
zjmToV#`kc2?O0<!7UX1Q{k9Hsh-&wGkvuUiPQzXJw!W&d*eB=Qw~uDO1{Lu~w*-_k
zMMZR+t}ixzgW@?=i)(TVWHg7T=kzue6ogXM)UttngWz4aqRGngwCAz-P6fxn2E-^N
zm?1}Od+rS*t(8RyX|0QArHpjM*24#hiOJjSDcySf{7cetg5L*oIx!d(LP($e7YhiR
z)(<8-_7kww)D7W!JYdChlxl&SmaiYhL9JOk4ft#g%wA{svtc`bm&F&+-1Z8~NgqAr
z?XZ0Xec=ktO3_TIX(w~4G8MU#irNGXvmOQxGimIzrlwPTc>^S$vnTUkg7)`AR*8;#
zgr9n=yNbKY7rlK>MAE{x=mPwj)?Qw6ykSgU8I;s;UT<4E(<-cJhcBM1)R9+K)pe^S
zCMS<ar8Cm>GSCp!AI;B`v_!4Y6i$)2ZQcvO{*S;0e6kdoq7RrBSY7=)uv*5Go`MlN
z<8kwp2jl;vVIid$7jgT4nhQYuN2Lm$w3$Ur@`|+RDfnNHnYI5hdKca70c9Th`Ge8F
zzwh5am>HNK^!Q*c{pE@L{mJ`EP=^VL{vTTn$%*LxcJsSR3EKZX?aQ+s(Ka59=RPPY
zf=%(Le}6tG%&m6MKg9ot^5Y{Ob29M80;@#-Ryw&h_lx`fmzW3Bw@+P$DGNrB+*URJ
z9p$U!Yd_GDHlL6qBiU1=ovhQ=J^foR@T;0#<00j;A}tnA-nS^At-ZgLy|xy3#`*WX
zzLbA2B}N*|7!$}jJZJkJD~LQug7}yG;!pf(;t7&F5n6Y5re{cYd9>*n%a6ZB(7#WA
z(Rv0B1>U5kD)1~M)J*)pKYsg=8W@_kq{c@)5o{u6|G#VNkNSj9Y=Suq@V-(}*@DC`
zFqzNRkSYE?iQJw0@Lmdmqs@flb-y8w3O+DhlC4kW@BVfOZb9&n<;j>tTFllI7%((a
zA$lvMnVB;NQg0!@;r|X>+%L4qNMC*wHJ~Db;sIk2TupA?f0aav7&k3)lME5^1tVGt
z?dht1>=UGYa>3+(#nk3=g3`zS!*x-_j}uakkUYzqn*KC3ai>WtH~o(s397#DhAsCk
z2sJdU-bF-30a`^N$QpY!hR&|1qa#WL$lQ<H8~(oDTc&L}Or)Hzlc=K(4u_145TVv_
z_J_bBWq<9bS$}4!<{YW^*b8m7N+x4tV;!9ZfDC~&YqK=8U=a+Af#J&G+^@nE1_t*G
z6g4%!{Qb@E{`hh&*FLtbUu1|gF^-%zz9rywHW@vfYz>KzuXI9l`S2kF(3&@9zy!Ir
zx_WIN@L95WoIJISE%>}Hms(v978<KsTIhJ`(vB?tzdQC!$i|p=V8hLqphAX6)@TRW
z0zH{lt8$8*Q3a*lX^T-@VSk?-_&ZjXm9+vkv6okCVxo(Y5oN^|AfzNn7Y-sWT}K+<
zL}dT^U&+Sb`}Z4~@O}EN6o-^_VQ$XjSMOSG?u(X%iqU$XOE8pCsMM&bs<M-m1oTf)
zV`EV>GjWjMg3rs#3ua;Gi_Nu4N@Gb$>RMW<FqkF1dN~5bW5HlNUZ>7BHVkSDpAFZ0
zdnIjb0CZfgE2ylh>I|P(YxY)E>7M7X_TVRnBgwUTx&P?tT9}<xKFtJ1h<dtXU&kDd
zi-vll$uJ&21}saUp5*hnfIx#9Vyf&cBun!1apA6x(vA*FPc`;;cO_1M*nvi^)A2-F
z&V>UxCoC?`@ptNer98a-<}oJbH%iKy+M0{Y%kIH&-6vv0B64z3ky#(_=Qan6X=qTN
z6&FV@Hy&Rhml$pyB@O_ch3!5$mtDbti|u`O78Y>$!{IjUWI&f`paFCc|5;CiHg5)M
z>uL&~LE9^WSU<AVe%Ss|QR`%H|9(&z@cjYO2?RwrVJ3rbczG!CUPc<A7m;%Pp)-|5
zMpjv9jjOM%B_n!Pz!d}y4WwmbW8-C+siuCtfdp_Kkn-o_V?1&wCpRQ38wohlJ&5mx
zzxtP#v#5a8GYw2R`}LDYG|lnS1;9Yak;n7kTVz@@lIPa29^}+ftD-}bJm%&X@PM9t
z$t?Xr=+7#}BKvE=t+FdADQWUN2?t<UcU1Z*d__Y;XJGvpB(bdj{ORQ6MB5e-7M9yv
zURJhyabgW{B#XGS6~7pzZr5o}PH=<5xW;X4KIG-+!>S-VB?rh;Yscs8!W@mZbJ}3)
zcQlE{r_<Wh)U=<q-?pgR;i!W_$XE`A<~gU2+xOQ49??ki(!yt7WCq8zpB@U>BPY9@
zn3AYaDBaSMW#h~i{rTmk-AY5|&V&XQa!z+wm&<uLz8gw*X(^A(1*DrOO`97G17WQN
z1x>SKeSLF%soJ_Fy037kU%mRZ`D;-ONzTuc&vl>Qef6!&P|5UD3?~e$dpo=E!X#2)
zE5Ex%0ZgeiV^@G7=Xx5Dk1Q@O2?1l&d4Y?3z+8CyAMXgKXTiM#NmZ-9FBmA|Kpb%;
z(6Od(z}H*f3%|;w2<!R@n4|O>mCXI_X>>h5x`B7%7#bw3R0`OcNju^sBORRw7Rn?6
zGz8pqqsp{>edp)Rn1eZ^pFf)pBo!AIW(xU5r&2;#t8_ZSI0e`Qdmm)k5t|mhGarTA
zo}Qj+Yia^M9IeMU@5p5~dW{M!42<3V9ac83k-<TJrwhEZtlYCczyW|k{Os*xmp}AG
zlY>yC)ug;_kC}Z5+jgFfBY_oPQ5JTtfr$xgKwtab&t)zng8|2Xt%14y*!b;AA?$Gu
z{tTtF!$$XFj#Opqq2A}3x&o?FwD`H%l-cR&hL<a3aWRpK(^mjl?0VPptf`$xy0W&m
zc6($7xJCB%THN0FMAj(Lu&~4l;+3RE?1LH><fROdZ`4V?3J(o!s@$l}$!|A4SQY>Q
zQ!iPGySxJe0)UbVh{~J>=;@SI;)%N&A2Gdo6L|9(rt@*3{ksI##Qw&{27`WG%H?Ee
zR8*lVzz$T{^;A{=EIO@3gog4vZL$Lszk1~lOAQs3m9DoP7>huoNWipQZ+&K-?aSNY
z(U6ySmD#wm*>5RqMJA=7P>lV~O3d$I$t~m)N^0pk0PUg}0eN9(Z@WNYX?Lb_Nm8NM
zjSr0G+7*P(O|0Co|L)xHdEaQa6@328%)}K^w1pZniZ;I{ifTFEJ)Jas2rP;fHFS(E
zEb7eQ+UNwf%Q<YUz$qzRKIas^G_kUxko)7}F{yT1`ar+5r8-DU5_@9ccT%WI=i=(1
zRc{4qBDOoqDM)(7(*YS$W7b?n1HYG^Mm)~)*+0K(<L{4-l9O!$I9~(};mz*tHAUw6
z{M?+t@t)Jvl-iwl_GvqCv-UkZI8c=RU}bgsOGQCxLwBRqcD-A!CN8e?`s5Y`H3Y0r
zF1xv-LkWr#1kKNKK=D&~6kD*TkQ)2heqh?>p!19||Iv>jx4lIV#I{@T!-ojpg*Fe2
zjrA4ZV-94`2~IP1StC#6?WS37u?O(HM|lZ&`$d;*xg!=AGoz!5>$(@DMV<OqSn>2i
zw1AHYh){qV3q{Y=>tEsP-IyFLK<{l5$(3~8wKYdg7EI`eO8fcwIk7oKrRSfxxqz?Z
z<2;yefU_bkO}W23t!&3|esq+Ge3*!oR3!m&u|H-DRzTc>%>_yx+C|_R0SgC5E<P)g
z6<GXyyu4Us{3V=!060&^$KTEmOAqRBFS(a6Z$|JYw8j3$+e?Da=S=akI3`BnSK!0R
z;luH>&TNNcGb^ip6$PQp)VQxMp+$|hva)aLt0#C%L4sqNEQA7tOYA$K9fB<mVJ`BR
zr>{?H{xlrN9#BZqz^H-R+RBRN6BY(`{$_%L;7tnW#bE7-@-9pL{-5*9324dV&bBLc
zuMd)v7Vqt!Tr+??j?$Qny305TM@L6iHrr1hKcPGXzI1M!RGicO^DUJPr-17D{d;(i
zyoa0Yhm7LlVp-1kq%>*20)(9R$&P6nKEKe%{WK!d2`4e^;$}2~(!XWO`<=sw-#|7<
ze7w;<W9H-FPr+!x-@fL)U{a{s*|Cz&F4d)kbvnEh09-YUoYy!~;LVdiAkNO}8ydzf
z2_KFE7C?uuFX}0L3&kX7BHOOxMw^P%=zWo<&Vr`4<}1BUz|#G-2Gi14?@pZH0lJpe
zEW6INeXtShXls!Rxkf5sMO1${XH`&O@)QPky7gx8G{D&?mFRO;ZgV>zr_<^%Dm;XP
znf^q}1#jhwnv)Y7gSC|r@7HLM={DBiEZ>jE2oz<r3k!fs_LvBGEK*#pQ|PuN#>YS7
z_v@(2J{Th9`Y59G>6@JG<F2l*um}Q&CEzNWk3lQkJ5ub};<ftao;EfzbCCO>bDj{-
z1vh!N;O+uxnqYZrOABCVOkvPQp`&9p)Yq;by0ZiSh4M79iTeS+hdGd4ED~b-OpJ>j
z-XDVT*GmcBE*?*Ei|h0;^&Suj-~@WV^Yuz^r0PD%f@Y-0E{nreO&f*wkcc*Z8@isJ
z0wg>iHQVxXmEvH+4ONbmh(z)E?$(xsT~^XGfoCz$e2#W@z3y7%RskfWHQz|l4P7U2
zlES8K78okZfkalEJ~x9)kTFZi`#@X8UCz%M@mfNze$rV%_;UkU{y{^xxR?%xkAk_W
zDQkajUTJf1x(qI&QEJ5;LOYQ=3%FoWQTQu1b=erWxTR0I85pL%ejWS%U8P<```s%X
zy6KmAscET7S^9cva@jb`f`TBVKsWPaaG0>LFxXWQg{0(9g()6UZoE7~9OVHaWNB`R
zC&0f?z;I&WvCO}URYj7MACjG2%q#5V-~tEPbo=9Bk)DF1b7NBHteLB$&H}-4{qNJ1
zuwu7YSKmH;C6}(F34j?OF~+CYu$gO#x^Lajh>Ci+Fq(?{?3wIV3S?GMm-HFGff^&;
zqsf=rahfI;Ior5W_eQ`~0a$S-pX0BcDf$78a)6=Z{g&vG2ns@8Z{-BRGfLg?U%zCj
zH$hQ}r&-!PG+L6Em$CbDgeK&`-pQ#<r7~f7gSPf(W#JD?OWTGzRfK7QGZ;WgO~K>m
zIZH}|T4mN;tYxfqy}vn)_}PJD(c8xd5G{!OiP=vCauVVbT;Yp_Er3<ThQB>Azp^3(
z7}~kHS@dY===#-0T{qX4IwnI1iH+^;0_fhaUz3ZA1v9Zbh%Gvt2-HNs)M%{e@84^H
z!<&R?@gWED)<b2@tMjews7M;eou=78VKcH6kBwbp1SdhMroAni*BmU!0mhs^5>?pd
z|5*2Y{SHQ_;rDetZ)FujIvPvjGOX9^l}}5lAD^6foS!>5IN-gGu?$ER@)P6;@V%bW
zXm1ZMQngawNV2gzm~FJPQ&D+Ih6MQWgBY03t`5TkBNI(y<2A|`tVK^!(-bc+U$0l)
zmk|cJlnKxvtp8#G=9Yms(bJWB5-gr#9%2@nnlds2VYodoyV{b^+hCMD)8uHCF4gIf
z-&`7}ZVd?LtJ{*n_j8$_KYvcmr!xoX8lSnN9;%Jtz@5y@P<(0uc0CbI8#8Nfs{Qu{
zN)ZP&qO+$9?B~P%%G6Rzv93(XIKEcE8L%dG5$U0N^-9r9PfM$hhVSQS^B`cJMMQ){
z%gQ!~Fm!8O;UHG)6F6%<sYd76Gtc$ga@-#R;vu=u9!vG?`=2sTl^5R`?gJN~f%c9d
z<RH);O&h9&8)^Vjb++e)r8qGz&{Amd#=P$v=Wzi(3x<X-@`>`Mp^c3i0tX-ly}HAv
zj|N|Yy6a&c7L7!XDV|Uh7f20+@9ay<NmbX@F4TFjWshv3Al$btNhh>cEK`0spZEjT
zW462c5PVvQOs~nlqqf%Rc#|P4ECLWm37Pb3oMEgNy+tDyY3T{+>uYQB)<r@EAjxUm
zz$H4%Pm-U!)fUcc6^V|fMng+G&56LiE>-c}THStcWE3C!S#fID={|I+wxL1m^Ygn1
zt3?heSk=;s&~r-4Z;Ok8<dYaoZIbZ!m|tubgKdFckg5cvs&_{z=DzeoMdd~MIc_e}
z%y3rmGC2m}d^U)Urq$rxHJsUsXFL%4V{pmJvV+4+E1@QzJ@^}9N?yvr#^&*voRm$i
z+&pT(g|*EZRa$yllbQKGNo0Ma5En3bY+k8)8r}e_a_Je?!yu$m)|Nwc`X^xj;>^m)
zsa0cQX)7=9b6p|t7$hnxvX&|Ddq3bOb(V1pn}oRd{QR7r;;XFi2}<$-+^}~rOG|LR
zLxi)reKQ<U0F@8L>|=U5U*`EV*CddTy1BWHHSe^2@xW#J`IdUp#s=CERPWMq)0E9x
z{v{^|q|f-A&K1+r_QeQZ5SjkqWoR-9OQ=204MJ@`i*$a=yGh;Y>?Ug=|8xS}k_nXt
zAQWIr`Var|XW7%CnUzu4E#OgA>a~-Q68889Hn3z)UDoX=V<n_qkdM}LZ~%>sLx1DZ
zAK`30T|G+zwH&KRK}gW#Ua>zdGcz+CUAW*6TJHQ4Cqs30v!Z|iVNDC7inik7Ge98i
zkIwc4adUgy+p}Qo*BhEa!Z4B{kY7RN!_w5+DpYg%G;MffMB}74%irki2a2I#_!22O
zxxBpmCZ&+)BZ#TWE4dY&m;D3OP?X(!@A1CZO47*J*EXs!{W^XKil}~aM0l)5Rn|?U
zQ6$FNXwyAIA~Dg*V?cdx^=g4ap+NVJd0_Ll<mq|EDe2VmA;hGH56;Uf*Xm$>$R|3t
z_^pQD3_;y4?d7!qj&3ycECmLIn|t>F-)M!5hxPSL^uMj1NZ}O$lTJrlb@dDCE%}+o
ztbJQtW85h{fNnG&NvlHR{rx@efv^pJ2U$nHjy)w;Oywv=z}Fj{pEt5L*3nY>`UQc3
zhL-DR;0e2gKGg-Oh)Jn&EFDx{m(&e!Vy4cXWhh}ClHlX}{9X+hkH-PTN>dq(fs~Y4
zQB-W%w)ZB#0z-Ryt2(Ykrb5c|+rNXNk_OM=yA&>)lam_#qx?4S`F#mjkh!Yc>MEx;
zJ2y2oIZM;&lO<oO0T_tk_DDYPdgGHf*&@fA4;i&uBB>blxq-3k2>+9!4a$!Y43&hX
zKbX9Xj9KW`cxWd}x>29+e5JzHBWt({p~v~s(vGZ4k&#iCm-~@MfPs9uneL~)bS)0Y
z$$s6{wNu+$C_`99@AhHa6}Rx>CupHIs4OPx$S)F#KFVAZ;u<%ofymf`E1w?~OEOYL
zq#S1BKX=B6G~{iHaioMO*@$9p^Z~UBh+)PQt4O@5EH<EOm#6zvrVbY*WXBt`laueP
zbEe%ZSLz&}n|YX;;&Z?y3&;I@Zxr_VXgOWO(?vnttGRh`P|!7;Y<+HS4%WdvLp?v&
z6}<bv#?Y{oBsPK^V`*GjWt^zHr^l_j#z%97it*n!s|N@jp#21*4gF46y>^UOrrv<K
z$Ys0y9#X7oyKf6}QlPyfLrXrws*~qVTl4e#k;@B9h1)LHhK6I~->yGGIM@JJqo**}
z?0#1j5E`0~WYE&l{X8<)(P`CdbpvO<vx}=VY5`!I^OI+jdQW{DkJo_$tO)Sh>ly7k
zHC!F0OIvw2y7<Yf6c{RYb`Khfxoo?MK;bEq%&^dDN8$F6N?t;u=lAc=+1UpA`i%LZ
z=~23RdX6=<&CSkMZN@#r0A4eeh$-#l0UNo^Bx9MGsf`>O>G&2;#JIU&_K4hb|EwR&
z?Oshysk;ZVukoZ}I!V@+h_eM(Qm5P$jA^i8{Ii|!C=C(C%YRCvJ6ed4<hGHzzJ4_X
zB%J1E9z@0ZuWdX6a`~Y|&_Uu_*eJbfnCzB++5oMFC`Eq|8)_??DVI`^;oxM^YWI`_
zFxSJ;#_l8s`|W*L5qe7`Lq3z$Nf=OrM28i2Yg&!wSM2g{C;m*f7847uGsfctwq)mj
zE}*^x;@RvVp=4_~tMEG?*s|$haG2r0Z>i|n0M#47v^0Tu9^TI!Q~V(@X4+Yh&H6R)
z%G<zT1<)G;ulU1RVUVryu82huAVmQq?IK95vXBa!llZyU=*^8FI)SvbGyxTreuuLZ
zW#Y%+U==!GE!Xn}aeR7MsKG`}Ex}P_YGCm2Vf|O(uQQc;g*mD6v45ijSap|lfi9z|
zx{Y*a7ZBkaY*ymZ(kKbSU<lo0tT7xZKVUF2UMK??{ea;Nlw_-`tMtiCZ2cHY7k~bk
zn3`b5+=MZUSpbkxs>Qdxwl<-)`?=aS43^aQ$?~gM1mOg&w}#uyc;SGyjyA2RIYd<3
zZoX~q$0Xv*jSnQtX*ZYMKX4NQ`IW4H;rl_?+f|*aohO+=2Y_W=UzWZQjk;L^*jBva
zfNcgpP5Co`O$Uc;!w_yVQA(I!7TLJDKl`mL{}77+6i$HRBnFL`=(l>hj59SKp<8h?
z=`>rZ0T5SeLjjc=a8&_(C?_lHjbQ2GK!Vwau-b~VG{`2Ur<1x}Kd>^)uhKDt78Vyz
zywKLP*baP%L36@L_XhDBG3n!QkyI$8#-+g}L%;iLVf~6mJw3_x!-pEs_<PFJjCFW!
zNSm9ZGKv7$96VHp$G?qFO(jxISFGd^H41xZyWU)#gJ>cU*#J_6LPA39R;p{O8k2`V
z@7Q8L0o@L`k+EY!b4ZglL4JUb+b?E0#b{ze(nf~~Ds58yEMAWq3bIMFcZ!ONpcYG^
zr&FT;b`={7bb~Ig&ZDW0-XbE-vY1_fW7r(szbwz13M`j=CLcW|BvjZcrjDlYyGS*6
zo_m%#Q>D{*Gq;tM&xxYV%)@iu9py}Sc61aT9o-z4#98Dk`=R{p^Bfv~TV1rw0>4uj
zb>xwNv6<POtSY=0$R}dR1^Qj;ie0e)fho=Xw0TQycdpf30i=Uzm~VkX8AJ-pyx`{W
z0sx$Svi^f>OHwvZI=wdgJ7Vy0PD*ZMch?ktXK0Al_nk9A;16MAZ9V1|m$i?zv|EM}
zJHD#`G|izT^7WODh+7^+6bCEimM=TIugzqjr`KYMP6RQ@60weWNQ`n)qV??dyVjoG
z^ZSDE#M6$E@@^?{o^W=ClD$8JAeEUq%RTRN&U2pEVd*lp?<lKxw4WFgno%!~e#F;g
zaM{l7yqrb_#*~<B_<^E%z%&CDWq-5y-|&MuOY_6_+FC+7;En}%wjaX=?An-5+k^!-
zZ^NYm6xsRNxjUj8E>(eN$J?P!AJ?J{RoP0@Anh4}HQG$0yXn|e(OjQ(&3Y0ETVaTo
zuI?rJhG%(f;fxp+=@ge1N6zc&x;oFp!sI)mjO}P|pGMCSCMM?O$gW1Yt{8PKbqs|u
z;vECQ{anSfl|v^;Y2brvS7C`Fv!shn<9S(QYzr63?0fr}rwFYwLpb5ZL{md6sg5`k
z>uYhp-RY`grU67<-I`%4u*|F{)lgd^4l&UTYqmRac1ugus;hhM|JOJmh2)<zMkHyX
z;I5g;yQ1oaCxe{lDF`hZJb~NxgAEh&t<6mmV&bl@9yb>kSc)LMIyD8c6O}E1m=9}0
zc*~_L?Jfov)u2esugz${i#AClGwDT#Md_uaNIo70@?Aih1p`XI_u})Q!aPD?Sy-lC
z#3}q;Ams7@Sj0CC#{4o#OhUr%irCKUih%tB7IICMmHU8)ZL%-ytFLcr`VhHRd?97{
zLjL=!CvTCzT<5m7?he9K`lXUQR=eGS+a`!jw|6)#sVFn~`@*Zsqq!V+4lSI>%!O7~
z(9Wx$*@Jj}eSK!{Iqyn&hb0E}n4?m5JN+Ch%<aHH@67;zdf-t#h&Gk@8c<=dApeGj
zO{mU_av{^s{zFJei}>mzN3`!?YzAQwxfGa>a_%8*hR5eUn+pZr=Rc;WmELgvd-J#E
z&X43!$DO(5P^X+Nz%#!r`oG`?)5lm~hJ=d?Iv+1=Y>Mhx|9@kvC16wH)xt;LkIr(0
zf+QQ03dUPMgO8yvxKmIc-nT&VZw|&vcKGqH>PBMjvAA1I_;|mBm_>!k-ai7p+<zY_
z1a}|mzmNCY|NlR_&syBIFtGpr&ZuT@un_(z?(b96b$+{h+X8o}?u7*j8a&q8{@&g{
zH|?LZ0s?X+Uzz=Txz&4JgtFr*D$hslwdIPJ-$Z<b`xe;9nm6lq9+m#@nrz>D%v>yR
zc7*|UFYvXm?x&@s2%i4Iy>-9Uv$-3^0Q?EeRpjhun+|uT$^eyNpF9hU1E8gqppG>$
zQ~MQI5+H18C0&!6+MFAwq+*QhWJmcj|CO?ouRbH&^=8ONEKJGTT2`3a6H=nOhK7IC
zgx{l~(ejcq?M3=Hc+bSmQB4cG7%Jo%!!=!nP0HWW3=Rx|X76YJ;v#>h-XgS&9;Eg(
z<6y|_e))3#W}tuLsAG8<R2MrtM^95D15!m4I+7c+8yoEav)(HFr>Tph<H<2LUPKo-
z18wEayu5Z(#GXCN1ni<8MnPY{1_TB!c7Nif!$TJX8g6ya(kX+f$kv7#;E>GD&NFE~
z8DId(Nnk#ts0&fR2Zq`0Z9c&C%E^gUwd^rQjN@lFK-$dViigIQ0TE<Ef{%(C5&2V_
zsuC?tb?qOCnhUdHVqM^Z78L4lNz<Sk)O#XxEv>A~jE(6l=>t0WcmJ%vlRAs+dnvns
z@U*zN=u-X+fOgxze#rTqOld#_Cq72h$_V=|ZwwHELnl?s<)nY3ZW2%YsT|fExG|p~
zNxc(Rh4B43KW95j1Z4KTy*Fu}0jm{(F#7xTujW!G^nHNuskt!>GSJRHQwdQPk>;`a
zu-6SSH(lx-lq{<%18z@`u&~w-&oKuf9sw^J8cxBuYEkc{al-kFwe#~iQ1X;iltza}
zuK6l}xCXK(Ps&T)n}`TI8454Y)%M7QV_2qLx*YIZNv<9;>H$-hc`+FodTa%XDJsyk
zxu1_W=jHL6Q)^IUBUQ!@_XAqh`IXMKFl}c;trHOm2}x&&>crQtQtedm-zjPG(ZdxL
zfSAc?>{}t@aW+N2g@NIC?(HkPCt^iqxO(Go_{}2~M~)dA9jt+riIOPx*RL%Nf98Q9
z2^&BEPI`B5ue+g9UQiGi?CMxaqx(2?Q@=r+9_FT(l`W)BP|s8uWM@DiO%^N<i|WX4
z{gJf$hV@zjc-2%@l{~$=u>qtkPMd?Y_4PGtPoLi0+?yoP)zq{<-h52Q%E=lX5mWqF
zsn&b^#Ja*J-1YrS(fp=A4<t|}tcF4EN@Z1*n@iz=>Iz2xhy*Tf0szv;c-`N=BCwnN
zTn$otLDc)zxzn)xaQwY6Rl2CC2y@7FJvRAlqsKr}0=2w->#wynsm2Jx1Mgm{H?jqZ
z8j$2M!mXqVJ}_Ycw%f3DUyw_Vcv}+a&m^f^_hWdtvb6fpbNu9KDy2zdquV3&EIUif
zvDsNjRu(Vwb8z>&I=CcCzJicV2u`qlw^8c)@+Fp>uj^Wsnr+<-%#eJ(g03;IyzZmX
zHQ?MUSum2t0&>zviFd5wpYHv~ER@_9%sjzf@BB%Gn#?)*n+2WHNE(=GbQw7a3(LQI
zSC<=CU2r>W8CuY3Kt;NLu$wPNNttg`4o^!zIFZQ9$=}@U4!nBick3bIgwZmPud*7r
zxJlJ@Y_OuZyG!`q#N<wJyT&@h%*@Sg51;Q^&a$<gdrk#mHSh#fz=f7pUR1o|a7?-M
z)U-0r7jcLQEpI<RyUfD+s0uwPseAa!rpCCq(n-5JcuQ-vkwwQU;)1Nc*c>yeq^AL=
zL&M7~e7m1OJ2O-PrPCPNf$tV(7V7{}x2$YnadMTXf>jeL8w-jvF!n}fL)4;szC|8%
zv8kv)WIk<vAK>|7;7GknYhiAz*?fent4oaC#=-&;p8<$;iSZfUH;Y<O5Nn5!^Z4~U
z7f383)49&}&p%<=f`O4hyY0zxVOvvCgSbz9baZq_hc9T^-^nN$0V~XI);D5(;C=yJ
zBrPMIc85`-;`3GXR^Harg9Wd3@r!X&`t8v0hSxY@O((zI-)uB5*3q)C6n<{1FVuRA
zf$<;_A0Le6!NwATwV!{mK0U4OhK*gx3fJ)wZNFd~)1Ajn%VGMU%>aKPw=lN=^4@wO
zT5JsI$>~m~dzPRlH!v^|pK~R{B{hi6c0;rtY;!-Sqf1lr<pSdvrBCt!d_FcIpMqmN
zleEZRF9|FOfSA6Kp`qLlnd9bkoK)i7U_*de*yRfpKgn?Aqo!^JbO%If!oOpVf3ZM0
zOqH^_TFp6d^Y~#>(liKC-NC1c1pI*{<==}7K&w;i@LE(f2&hrFi+B^Xb<%!WRWq5^
zLy?lfm#&p)$)uvBAD><P=f#`M7Uc_B^Ep>ntYgt{AQY$hg}RkBU27}8@q6?KBAz}A
z^X!;Y7CF!AgVN2k8cIvY`sNZ_cYp1TPpXd8kaWA`h=kwI(6gNauxjop+DTdir>k?g
zv=^Ye@BP{vw4k!HwBgkFw8xD9mw5t4#>`vQvS4ik90Cl$%lZK=uOyC*fgw2BMLIlU
z+q$o7N=-cM4OuhhW5>QXAw|t1wpUT(<2X!Ac4;}E!4SK&tz6be#c{*^!g+RbX2uJ#
z9S8D<F=Q~T4hwtLc%L)SF&0qiUdR_#0Q$Nj;!UEoHM9)u09*j5`ueiBw@DaPhjp$O
zUJ*IU=s?uP<=NcYirOdx+|=+C%9wNv3?zah^Hgeme0|BqMj{;_#C%%daRK?s^=xh~
zuH%7#p`iM6Z%<c8M-HFHXLztTr|7-<`8sXbJ7qmJTG&Ccd1P6skr{M5F*ZF}H00sq
z6Bj(j38(I%{(%wr!2v08vyX+N^;SrTX)S*i+TR0YkT=OtXF<EkWNv;wX}Hs~rFC*k
z1!-w)SzHBA4$S?mNkv@W+rRx_->LukTG+_Ya$}b?Haq*}%p`s4CdvqQv6B<8jVe>I
zF83?;KzSZ(JM82C$Jkp&Rr!5iyeMJ-f`QVYBHb;Gba#hzcZY<ifV4=LbPGr~h?I19
z2}pOh+=cr6{qL(g?s?%D92txg&$IX1Yt8wYl7I=((BOLewh=EOer?rMK@k^s^-G=w
z>fNBgKuId9FF3esszF=Gkrr76rA1YW1Cx``k&vp*NDV`&%_h5LZ2Bd$(#NMIkOTv#
zcNg{Bm+$xR5RR^yy4JePx1<OL^pIDxJQSzQ1()B+##(`+y?vmlLTPq>Hl%IRGv~o%
zVQ6?bCsv0IbP~`Y0w_lM4`x!1+={fOw{_ZiU%&{8o&T2i2^|Z4GGc0eJ`EeuQr#(N
zO-M(dZ9H!-eW;K$^&u#Lm4!ZCrLwM0r;`RsbNNZ}yJd%mXfSFdAozUKM~KONqun6?
zy7$j=lACFfZj`ZfjEq2?mcKjDIbSH`<G(qISZ*dq*A=vs4!p$afq}fL&(zFLcCFqe
zdqraeFL3{S{EJ1yktCSPPI`LsX1Ei>!;$w-5<EifEuR6R!=9h&vAn;rwzjsZAq#tQ
zoj0FQ&;nhUghc1FXS(fT0T7<Ytdx`$WeGPSO3EAv!*Ow~ntQ#xo&tTRO*Cpq&y3Zn
zV0Jbcs;JIDCb1Yr*!(Oo6ggh74^&blY}+=v8mB3Rv1X7Y_Bh$wXSgRx+BF7qa8!d;
zD_F~~u+S#tP!gdN71T^ezLS&Yu$e+^<ff&SbVz7us40ykD=X_-5y8oaFEurj;D&1(
zOV6@Cj|$@?nin!O^nrlnxfEgyH)ybwm6qbO+w<0b$_vUn9bV}OMk@r))(yU=%HM;u
zl2b$PL*`|AbzEHSJ3SN8m1ATWod-)v`S{$l=N<0t{RzHYHfJLv-?B$?u2Seh1V0j<
zMXKeHA}^nvohs=0OnQj?Yka5OyqU(urKvPLoRI;*k5msmu~4Q|EFHb*R!me>G7o(d
zJv|<7<Ba{Wrlyj*x=61vJ#Ax*$|sSZ=5}`<DC%g-WEF<msEs?cN8LreTd7@@ni|v{
z(M3%Kbl_IjZw-Cq#3vN2Xcg@TW|*xSZ7VD;nwq6SLDV4&P)ABs$lK;<o0+xhjnOk(
zY+&$UWW0~1t%z8cCE((IlMz2Y-Qc(O4n6iywQmxA!{;YL1&>V4>xK4(k00qQe~==3
zXYWi-HHOKew(3BvIdmh9Wg<j~eO6!Qkfak6e||L$^KK9p=o!koNSNc5jt#Rii9Ejm
zEWy5@VB44CVwA2&0Zkxw$<RwZJajbu=45AQ6h4AGS$ZaWO0v1S{uQ>ABDwvSi$W*S
zZxq<IlMc^{{C90xozNkMwTk_&uZF{c1MFmylK$^&3zMfISJ`8~C!xjI)ZE_2VctVu
z-@xJ_Zqzr4jN)Q>HWEMGQ7Sd-sj9n^kAj#}5QSZj|9%Z`<izbjelqd%8*lw-dbjH5
z(ozctMFUlnr%nI`hw4>lOkFlG6dZGYF{!C2>G25(_M1cP->B{*3!*&JyOs87HOH1n
z?_rfqgQb&`vT&xZj1~K>zz-iBt*syXHSN<fW67XOE?8QA28@F@k_(Y78@1q4N0oVg
za$V#!Zluz1SQ-1^$dHQan2Jhp-bxylXX?RX(69LQIQ!J&xM_)ua#}ADi>FK*zt+V<
z*%N6YoK2UP5p;UF7aw0{+D6}iGGUUH>^1b^At_leoQNZl)5UG9=+Vv&3VCRq;{nA8
zQAJjkakGB}T&Ard?wJ-`u-$_i2np$AzO}^E-1s)y=SyHT$up7@kHa*&kzs6%G4nC?
zD?Z}=2o05w(hW>QAdwlIYwpn1!_YDWX>s}k|GJp?`1J!^7WhMp3ky=`DrClJsL11m
zc1KRaX!4XcFrW7xfieZKx;qhZad9w}Eh=Jo#4$4|F#t^OhhO4xyzK0XqY6~W!`g0K
zZwSI&>C`u_hHj#tpWj^+lvH6D7z@8n&m(k#nA(EGneo!Ke-hk<<L=L|xT&cnSG^Y(
zAM+)D&8roxjjgWst!&Pt{O<i;;K#!5^ykmR!;7n{VnOfF8aux_S*IXGkvw=zvmjPf
zY(*j6Kv`K0rG2v?68HoI1X7@t_UY62#f+O2M~AZU$+vpY;gfuMbabRyXYbhG1rh^C
z2M5q92CXpV<&h90tTH2APYw#w)M-fA+k|Ot4sSNo2G$gS{FBtJtk98=D%oPfERkAZ
zlHlt%>+;SQA$R61e*7u(s|v?CLDwn{`vT9Us%uB*q#}6*?JvWG^FBUPh&dGh)fe@Q
zxIT*JRg!j;tk(MBrAdOnIA*($L4$5+be+MFFJtPs&&`|f5EY!4Uih`@2@AEbBIXce
zYFs=WC?`1zcs`!qrCuf%INjf$qVrVJOwS>U=rJx?K`_~fLeP+NNNg#@1BMHG%$L!*
z-XYN1K1`f(2Y=(0OAy?sy%!q^(pnz#-i4%(cj+&UnC$(-rENW-_t|WVzbaAmnS)U^
z!8C`ZOX^h^e)(WDIoIU;+_*AXeK~}xJR2fj%M8SGH_@SCU@jhHB^<cPm2_>>N{?o&
zHRg#s?0maN=*wGc^5TgOYD;f2__77Yf^!_hlgZtO{lydESnuxU28$$QCuWu@uG7T2
zM0k}-kvM<)+l%<=#dH9!CTY5x`<i?RcekwpiU>MOV&dk`_?OiJeRirY*#D_c>4c$G
zh(qFqfb(+}{MquYozw>o6~lj(+R#XO=hyn@4gdW|0ufGc2+{6*$=hA!+%mK$i)+%r
zc>3}0SH6|>vSbw3flk@vPLigEMr-)s@Gx`?=#oL?@}+_-F%GK9fBg*v?W(I4lScVw
zCwo-mb5M@Mm^UOK09Wf3z_-G~-(y`xDgjFuF5aB#P!wI5Zo$n_>ef6ybGgaG!49^6
zXEzU#3JDSpyVFrPaApSsk32Pm2kf|zVJ)jB_iG7r`*7yB2ui+M?T%CZ1(Kq*y{*eZ
zX(CX|&W&IR;^pm)Esaai)Bv4W-Nj-tgi=yct|gxD*Vp}C4P!QAiBVVSH>K6&<QJDc
zIm8b+JH2V|;6%Vy!%E6AKQwZgSM%l9XdfceNK4CRE6+)Y)69vTq~xQ2pY67`&ebI?
zxr5ak&Mn_tW5h&Z1BvipsXYGNhk%guU6ElPgz0~K0eUXy6Ijg^c+ZS5f##dp!|ei*
zL$6!ATc@~cxG#>U=7rJwnbO-7eEW@zjLLg>+!Gn*B65duvE!^!pyy+~_G`}>Hb<(C
z@i8{e%kR0Bl`&g27o_98;6B$X6kM2$9`zQk=YSHAKbcXm$Ia_!dX(q$d&o1MmwEdo
zzko%@4=&^HZzr>soh=h)@5>^}k^fJA9zCdV_-1i;0fZFvTnQ^QW9b4e`%?$+%8H8S
z9$-h*)zty!n~+e;>y4I*%8%thTkJxW$>Cv;F5QEo3hb*hGjJ7kmTlD@=a`<B5^{Ht
zc}x>sF7fbuyo)aX7Vly4HsRK#mVp8G6dxbaccPSl0F<}y8o4jm30+*q6vkRxXNJ39
zO|+YY`uL0oU`h?_&+@<ieX(?DVQJaWRpmS@VIry{C}?7D|F$@w+Qca{EUaU~^MYSm
z+DX;K#>GVxzH3+4-4;m>%_&aP97>Y`6O)mDE94vB+bwVE#0MPi^Lg=p)qbhq;GhV^
z*3`}<a@V>jR3L<IEG`<Z5`&^hR9rkLIQTKLw=2?>K>hRQS3sY54W~pVNl|+n8+t?p
zx(T%P%h<QtmTLJ}YW|@jr{wO27(v!7`>IFn=$<K5hANTd6rJ<PaX4$0g0ZnUB)5~G
zt-{6SKJB)~Z)u}zVKFf^)kfy~JIOO$uI=Z~HzLndVry%;a$aUZyJmSN_z*twl<jRY
zQP29^+%r<bi-dpeN9PaFrNkkj*SuyA`KfMhoWwP^&<TEuZF0SXP9OX0!@$*ifoJKS
z^%sY@k+mJyRDkI5`}dJknjC2V>25(rt{Lt~N^UMcN!Z1VdVMY#t>PoOQ%(j3T^*gF
zUKwF0YAUKq+Zb~dDwdx+$3#R7{QN}u5T={=m2NAc{zBHh6riW`<xruU>g!8T65`;b
zR0BI5jLS@+k*@A-{fgm|$_n8*A&P&!7;yb}VT4@EgVbnsRaI3vIfg2k(3b;EQ$e>R
zWksT58yc=rz}R`J%3;mqdqV?s?d!JY=86CfN_hS=Vyc=Ddie^}xQ_{bgE|)AYP6)!
zsT3B5;KU`(a}iiv%$O?Cndp89*$QX)9FBG8yObplynZUNTftC8r%_0436KD@zkUg*
z-$6zFWhf{h(2wJB+&DtuzE2+uz!iy*+1Xjx<|1-guqd!<&)e$-gj#wtbqxf^R+(|h
zi4M2-uNrF<@&we61EOfu4GawM6TiNvq@wx(*+MXq<7OTg6mG3Q9j_0<9uY~;s4A+j
zw`y#`e-`?K=gBhb<z8e!E=PosVHyM&w>AMcM*IA~52m-x9;p|$(OYQiaD2y>_Xxq>
zcLvcQMoaIFKM1^66?BDgQLwU(3=ap(>E%oDeycGMk8*HyBq1i2om^j7XpE3Q<_oaC
zkGenw7cX3^0JVkY2e3_{VhFUQ3hjz3m&s3nEBMu`I>RnCH32e=ekvZGdSdZNnQo8W
zUpoyA4SDM2Ky<zdC}FqLooWoq%R?v6i>a-djB0Ohm;EiH#5!TZxAiB9m#<G(qAaIH
zW=)5O6(EJou(4&M;BtAXx%osxM^$y_x4Rbi?_YaXbq5V)_#vdknvre#IIPbj#HKxu
z@{*E1^87xj#nf`W_%T~s+U_wHF1EB_z{bWlQxo(3zpZCkyUOQh^cz#EV34)fzCOVE
z@UCbcl$?JUUq){D?H}ajAGO_H=+n`;k1-5G9k>UWn3+9~rtVj2K<NC@dU21L22V(<
zxTvV5v9UG=f2tY>2j#8}_$|Rm0z#Ll2y%}@noyA|`t4A8VIe*?wy2a;ill<FvOHav
zL;FpHUJ%{(<`!@=X3(*%Fia^pot?T~9(vX<;Z!LkvcL)K@{H%w1TOxS?N#Quiu`u{
z%V}D4{9~Vh=&<}5wYJh+%oSkli{;L>M8hmcc4kxBbC-b?qU#Rhv@Ri`K!E+p!p-DG
zRP?(>MpNrsjo#}2?rmOD`7y-UPX;OCBZf5ZGR&0=q<TU5_KF#24c?^f!*HTvD*j};
zj-qf3ct18KDCwMc?;eb^fcHC1ZF00Jnq+-_-J}5`3-aTKQ*$&lG&mWaWxjX~b?!bd
zct^m4V<ObIcU(pzme@KnINVTKUhaFw8IQ3rn6p3D*0xZ&Rr}xpj?L<z)4!Pr!W+vB
znAFJ0J!o#P(lGp(L*M>9wh!C8gH#GHu_Bm4Q8t~D6G@5dL*L`}EZTfNl#o{&3CK`I
z61oF4Q{a7dwXleYh`jtBkfGVYum_uiPs;b2!$T#*aRtT5L~e%?r4EA!|K2}BOWYiN
zk^|lx8x0LNK&Sgn4Nqk!ugFfz%Ri<JREMXhUmi8X2;KO;(~)|;DV&ewyB<(zR@yEE
z(Eb)}tEjC_$iYGQ)|m^@zTye_9f%;B`^@qB`pSQ0&a%NOE#C{1n|Wf1VV^Q6$*@zu
ze*Ks-dwhHYYQTjK<>=Vh<vMdoNe45twH!q=<8n+I2{^bYbg2O>3be=zv$HxnI<xER
ze8eE_`0qo4tCvi&L-4j@6gD2u<JQj1p6A5GV}pa?Mf0PhqtML)8Zh7>@uPrPH(u|_
zvr!CcX=UY+wlLDGb;xpfD0f6cLIMyY-9>={&$#RsCDhe%5tDFl2^(0sI=-b)6J8l&
z@}LDUe^qFRsz#=l*APp)t$5(Xas`)utEA}!#%rUyI0OM2ioW>ebA7l5!WM6bYMu`L
zWdCc(w8vxry9*L<4i6u$I*m;%fg{r{#3mEf|M~*pmtJ~vm?_rx6zSy#P5(S*q(2ZO
z;avI@@=C(}@Hi}0J<jle-9Ujyc|eARywWFI-Ao58nURm$54d)QusPc1<Fse2Gwv`Z
zCwmNg41Cd2Ne2a5vvx02a(j{yvAfdjj`JVz9`6hi@DZAOCx2dPPJjc<Zoe$!;)2bp
z{Nx_Qx4664qIRl&@z}EaKMu<9JVp4r=3?{1tAX{FyA6IFf~r!7PRQ_qS+FbfaJ+VD
zETVDVnojhc-33v~uWGBk{IJ-dzj9x|{xgL|Ah7p*y)+Ot<E*pp@-F|{zQ7S_L6Q>H
zNOJe{wMxdYq3jIPf%RX^V>aSJG5w8PH2Ln{1DL!sTsL~@NMru7EvUJY*j6u+DrY|%
z(Yup`Kba9cHP_bOhP4JrhX#g*FvNx6DJ(p^FWK2jidag#|1UEm-7wS5-p&nFb}7Hj
zZrxM2ku<rLzSJ4w=Tws=CdCpYW|o$xtGTqkK0bdB9Di2A=-&OCy@3qxrmM?+s&SG}
zwR?|1G7<|UjM)Ef75F`OiPs2SmC~t32ybGHAk@P`&&t&B>0{i#qr0RyuWKgKPDbix
z@>W)?P^#Lspdx`2GYN$iUCYj{neH+oA{`O&!QYR`9*#sXy>@oJW$)mipd5Ks%(HI8
zONz#YoR&S8^Y7o+BO`BumGbK0n#^y^{xPG`ggq;R-wgi3;>|0|oZZ_v->vOl84FF~
zzoqff8?>C2-dMD+aP>ta!h9K_lN-jgc6Q?b{*e4zw7eCBIJDxcU$D5Eu^J|p2Dz)N
zqx}5?^6$~UuF%C@L+JHSNP(Wq)zEg#$keb8s;57%<QqmZqB(mfoHa^5nZ-q}DWiqm
zyL#;tO}dC04)?BpM;p2C8Vmka%FOAXqi6E1e<6ui|0#j;|ML1FJZuCt%pHE~tN;1?
zkdT;&?xVYNbsGBb@x}xWQUCpbfB*`2<Ny8SJo;6h>2BD6=BBIX(Q*G62u~v#pIhJO
z``>TAQU5bq{4>{ux(KQRa;q{>Bt!{<$lKi9oVmNGu#g@oS9jFZ73@(#&e3LKuK#Os
z)lf%={x{J`=VT{be2@^;S0nCIVq!>f`vxDS87_X}U!Ut6>~EO2H#YDkx;k5W9^4jW
z3TT}VAvbd2#3hc!;s`KUk?8I2{@f~D&|pG}fxHr^PQ{{~fn^3~j{Fzy1RZT{suOHy
zSbWJpy1J(N+fC1@LPfw!-ZHX}mV8=*LCxXlt1?df+Q<l#ds>-pe)}_G^g!9xsE(y&
zH<`!cQ$lQP6H{|e$8{BD<)s?|pq7;s5jpONv+94KXUMhlOCF@Aq9X-ow{F1xy|}ah
z`Z;=bIwm@mVn=+z&dI6#?(VH%0t+iEqi~m_s=I4fsB%@1-eA&deC!auz#yh0djVL6
zt*siyjB^^81p^9a<+xDqz@fBiu)Mguyu7%ltqU%St4D@cW~Q>aTaCaodOEsgV=E2-
z-v9iGz)H!&(mgR@1g<W*?k``y)J)>#$L}rx2(efr>Is|O>R{Vp8H;5k*a~7x%|O(o
z&w!o4o4{q4QCR5ZW%3Z`ahdtpE+|3vmU`&rn>stqr%vx~ZeH1{ULU#TatFw*T*2+9
zsV|R)wMbrx%E)Y29jv{6{dy&>x-#2jYr0l0`+Z!g>p|?v)2Ag53RUbkR+-tmmfFF{
z=CnB}YSaLh_5H`}Hs_$iD37nKY$gif7UK}wqHKQ*b0}qb`K~w9Dy5;UDuLgVIp8X`
z(=;$xSdq_EAuu!1DbxqCboX)V*;WX8)Pe0m`_N#x!jNoVS|qiWj)_U7=Ve{lFbj%!
zz#~c}u#~P8OY@{kPrwf_@V(N&CnVs5uN9D-V8!X|=`dQnX{sLl;lmGEx0ShoziUuN
zbYY>W8{hYpflTOS9lJHm5eE=q3Xo{lcayQt-KearCggSlh=DIdgJQ1IfT+Bt#oaEo
zIyV;&4-e3wN&0#V${<u(Z4n5K2}itLiCtaY-?tY_B*)b(v|V7;@&r3c)3^PkcvkWi
zS7YPR<^W8x7=z6i74z+NyPl<`1qUYw?6~Nxo|F-%jd2J5cc79Et4RvSyplkGz$GnO
z<;gwEsWOX|qI3+hfiDmsz~gy|&U2nroZ8qtbPy^`01g&%N=iKpqs<OjmDN2@0wh@0
z7Z-mo>xC#PD}x7iz|m=AT2oEVcBP-#HE?HVXToXSd1<2@9B$aXA!YQbIuBsYTC4)|
zF65vJjcvUkW{ZjCwb%d(GY+8N&#(ailAhjA1&1h8fm+)WTaWP}=Ewi_0$vi7ho^=S
z;Wt6qA?M*fd+wqrPEN}C%&p;V)>Y<!?9DNhloW_<CfBtzH?6Qe5fc~Ri*~oRwl+34
z&dSYAU1@1)xnkg<b}jAcHx>a`*-xQ=V1U0EfR->$sHB;gXL|t#yOPn-ri!Yn)71#d
zNt!&hTA!ZzgcmmPxy3FW!*Hzah@$B)DJ^vn5J(FvW^`x8eDr9lCX_n^k-2m;U$s0^
z&Alg{jqw>S9EPCeE-5TrSzi|umoziZ3JDIr^O+~nRL-;qe>x^Q7G95R++J@l9Ty{O
z|A4TN{=de)CKy+<v&lg(!IbU+(*dv|O;TxT)pvFVzFMf1vy+z>wJ9tJp+)KqCw=@W
zg)d)C(ZB%eN0H|^czCcQJ-mGb*i;%(MC|jFG&BUEL`$(W!^13*j~@?e-^0QZFbZF2
z$BMeqgPvU60ZN0$si1&>@{%G>k9Dln<NIIf7i!=L1osn2XVi)vyXc!~?bj66()NZy
zRW8#8=7=C+D;nE|>yfP-c892W)^qr&<qg^Lq+p>MJeQGu#m)2lecYo54_pscABiQJ
zRF!3rP%_&6KEFrvCd2OVw93_$u%Ah=2N4nR5JrK#XUE6L-rr$iu-nRoSO`NSBWclb
zv?QXyYj>@AW?Q%;?^4!DLB%I9r~Zyz_BE_1g)$cUzu-3M3q{7?barvEoGb~2e7iyv
zB)*&;$<}^lEjLbgj#o9-Ua_X-7Bk!)WJ_~%&meUYOoQ?d<*Oz}W`woO8yN)cCnhH)
zRv1HCfsmM@*!MX+BGP2?1jvIhdjt_NguQ)vRqQiCjEGq1)sWCo78r;MHCgJq@K?)=
zn|3GxK#ViZOh;r8>lEgCbbS_<zPn9x9fR*Falt07T4k>)Ep63*@Z5AaUG?$f$Oy#<
z4TjI~*(&E^73l%Q*U-=q6dXMr9d~cvmT~u<2?5n;e0+RM)YfF>o)y5lfYlts)(Fzg
zak@VR&zoBS5W*zx$f>5u&$stai`G?@mmla3=4d2!w0Ddq=U9{Z932+M#pIm3mtE}(
zVDZ+Z-F&!ML9rcIJptHvR?BfboX5j6BdjT%4|Uj~l8=gtLPtj*Sh2I-c2lgBd6LAa
zF{H_Uz``UGPqOEHo;Ohz6BFa<^y_x|H?Tt`J(O-(ei{MZ!@)h{M|O65O-+I@QI86d
zm`;Is(%6{L<SOwzoYHoAHTL<kk`i+hOW7_{6AOs_TFf91R5~C{Z9(<Fjf0CZUk+9~
z5M7?0o^YRlSCs1lRS>~GgR1ci+3+6BBoOWJLV7Y=r2Wk{);H$n=76vUMi3HBf7{V#
z1_A6tT6J#Td3jxVjY;&BOFJ-s0}DM3IS0P-kb)rfhX;O558AQ_2C~Vs_a!m!V`D$U
zpMrs7RFrT)R(WHAMrD7`Orn}h2tG%S4gYg$=Df7DXq`vZCC)nl8CZjvpv9SVURSsP
z;b?t5XlXX(CW<5+Gjkc3aSBu_KLszL5wblG-Iu>ZJQ(h$Rq5uJ(b3)kD=R(*p4-N1
z!~+9o$@?s&{Cg*Ea04t+Qns7mJCr)OUtDxvkTWsu11uNL@&TB%O0+YDdadeKwFltQ
z0{3ArBIsYo%dH3*Cp<3Jv<7nb0<_NG{@FsDt&uw8gzxMQQ7U6K6Hf+RMQ&Xt1Z?gf
z9Dtl8ShcBTm<7D%fIGNSJL#d=*=^!UK7Zi--X}ID=2fLzjF$<o&SuTGZ@|Orwbyys
zkQ%}Tyd6;ek*YMcwfTLYJeqbd*E(qj^v-5~<yue9kQoCbBak00EH<#*sXqAIT3aXm
zh|2)m|8i4VW~MrGd1iI1?PNL{Y{DaXT8XirzB{y~*cq8o=7OCZ5=#2~9L+W2)6<bg
zlFyPeL8j-P`F9UsZ@)Kl+!s>WM@r^9Rc#bP6SWJ&vN;k8O3D>2b&l6Tm0$A`sPP{u
zDk)hzow>dSYcpNl__v?mA}FJ*rbUjxXMAv=Sz;U-7dPP~Tqo~7K3(IIno<NX`Y@c;
zo&*l%j|DoY%g{@-OsP`aVSEPT<~!Go+0o3b%;o_-Wn<BZcTg!FNd?5a8i-PLiqf@y
zz-|dso}^4-oBL5M?LjLQ7L!hNf}_wQ8f=mra{}^=!9e5D#s_5x6*z^ckaDXTDN*;j
z@#2IeJdaHyo-=I8`onQE2=j?Sx%Q`Me#3GVW8q24ZF<oIs5!W~**x^u)}c9E`6fl*
z^6Sfd;bIx<CFLBxWNmHh!8;$Idh&ln3Dd;N88Zfd0=_TFq4&A^>s|?3j`ol98L4Dv
zn;@pPD!eD3U0jrEGY5f8Xs8V=2nn*?DDj!oTh5%wZ=p6mwJN6^93EP&$oux~31oDF
zuZ6*N_izUmB<ux*$uat<5c&D{Id4U%KA{Cx)jUk39W8T*@{}~8*$$ZfJs^g^IGUdK
zIZE?AZ+a;G>V>D*TK9qV08BBSIqDpc`HF&~^G&5CcyKw|UF$h^S4b0U&W`HK%S>-u
zs5+Ya<<xI~u;u%<WTwI9#0iwJ0ck5x8~_a)4eteSUIv&xhRZz{`5|5aY<A$)h57*(
zA3x8=X6QD^P2S5S6<%8(Cc2O8-N=xa%4qlQJ=Darl%8u%yOvy4Ug|eZcq*e`2f{`S
zyaG#WYcl8G=NlZ3un{mGJvH6QXxxX5ih#%C9IBRC<Q0(*Xzhs}rz>4?tOHFDC$X2S
zbwR<x5}85nV;CMZeFfKES&qDJ7TbK+fe-Akb>K<Aat`BA59Vpr|L#rZXIcZ$rL3%z
z&`TFU4Ffk6m=`p!YNDf~vnaISa%gyWE4y$OZfbyw$Y?!kp4+cVOG~p}!kXuT<SUT-
z?tjPUb{m~I>lWu1Ww-EdUwN9_ZZg*ab=P483^iRfa(0ZCXL}uaPM1@m1Hx$3EyMfg
z@c0dn#cI0dDp{lHOWyUa*t1&>U}OZtg_NYIiFwwN7{~_F<+4qG@e8qaCb_nPDo3l<
z(1D-7)^%=dVnDp|DR|sld|IFrqmGMvGvnn4Tagy9HvC2hj%@^Co!Alv#)0XVwrOrz
z1D7uvmrpBKN?+CK3fjoRtrf>g+|JDnTOm_2H(t6BOn=qO%(?7NOL7LV5;hNyj^bjb
zDz_g<0+l#-YuzUZ7ZfjK>q-glK)wUEZrc^c?CkvHqlna0BE<1R*GTDPm%Zy+zZ=k3
zgdTRjyMB%7n})Kyrlx|5$c!S$xL2voVbyLq9rpT=o<0<vu8@kzK~}GzrpA24yqF&`
z>s(#L`vmpw-Bd)P19roVjG41(l)a@HZ1i05v8`y@p94qBi`44ZuU}Uv_POb+qO^Cb
z=&B#AlNoQU$cZOJf&cYu$*&!ZM8R;9xXC&pYjN=a7*_vu^t@&on^6ERN1*?{J|Cq&
z?G6r5)~M1EV3Ek{#SqBIcy3o7zrG&7PNnERL;zmq;gO+49wz|R%s4tZ^;Gi=v_XTo
zw;pnUghL3XD(y(M#;SOGzQN{Q49UE9b|!O>b8{D|VV@*<1wvF@eRx1>PfJ?>0TsSi
z*w=D68Ucm>lX@KV0vGxQ^OM?(6k*4ke!a!zUrC<a{o}_dG{TPRT=)Bg|6~m5&cFiO
zXZG?XozpK2Lc+_PRzlbgK`<1A@$3rkot&IJnM3v?BQ+6%mYy;*9{?(wgIPP!Q|5Ay
z=W_3C=JNC0E^MgM+$ZlTJt64JbNd}(&E@a2I2MZ(y&WRq;NG&VhQtSsYJdY)PrPEu
z-_6NzeX)-qoydJL7eL$pa){^hMEcJ;fAOmp<h}uG1cTnJGpTYvhN5#}vj@g*01txN
zMjn+dD<d~|pleFgAxg@G-4f2XOCaC>0`&S?w-f(URRa7S$YI&BJR(flBZ8DVBN|i*
zX8*X_+S;DaY<t}kR`q*_Gs{AxehS9<=j3_zyryt+uAUn5lTxengBt+0D8=fx0mT6{
z6AYj%48vr<fc!N4sq+Y<UM3wA1Lg)f``CKBrTkyNesy-rCKSPR#qHu;!3nb4)z#D#
zoua6<HX+RoSiM;x#C$8o5fQ|fhiCo-IJE`r;ZgMO*^Jxz4cyX+VIr_8jP(}rr^nFf
z=<>?KBYgY;&}@5@-slFy0Iinc3Fq`&vp72kdn`^IQ@%dr;-*!+U}vw&td3)t$%;1i
z^t`0!(y4y!O4ceNqVi*DCr&*!k1CJsFr7brF~d-ZhV@>6iTY%D6vxi?kM8#VioE0Z
z@6*<(nukkr^1G!ri|%wuO77=Ln~~8LB++&^Oz?<OQj_07MpLUYS2Yy!2`#+OEHLmY
zo1GaQ4HZNoh6aW{KE6Xk!%7O_a83bO!T^6(em*oy(uLjUTkf_eRc<MO-j7`->7L`+
zA%3{Lk)fg752;(wDL?3R|G=;SK~BNJ+TDpfR>sB^0Emx;BX7G>im&LU95Zriwq)ED
zqcG6V?+zMT24=AAuitWFLF7&u>B}?*1JKs)JHC5y+{*KR(LXCE8eg>=pgAmxy#qG6
z0<HS)TIt{LD|HaI21Eb_FA_5Q-*7kZE$lxZ85+tCj>u-97I}!FFMlq1)_4~!bq>%5
z1zQj@^vjkl&$oK+7FT5A`7ct8SowHKCvv}xikN;QHEO}0eOq)gPctDSqWxusTy{`F
zm(O@~klo_tv6*`h&g?RqwyUyAn<fc07A1B?D^@8Yx8LaCyXvnkLK!Wsk%@uSS7eWI
zskG{9KpB%#1DIqQNhP!z%KA_by{_@nt{_R6M%h=0KV3vxux_O4pm|l)^keiG>MsoX
z;`Z}Om~1&aN27frdPcNtPeRQcAyxDMliJk8QprKXoBY?tym*0tlvMZj_C4kP5#^UJ
zEv#j>OU;y5&Sj|{x3;zpoCM^?Q6|Wjlv41$V)q81%6OT(u&JrP%5z|SjHL71tE*EY
zP3BZTeVS}9b@BW47DIbtdB0e@m^g=UYlA(Xz><3j?um;_4w_N>fci-@3MPac-q{p*
z!Nk<rGJN=RBa|yePj^{itrrsS7H1<riLIEw0{WEz=@gt2Qk<T6uR~r#>Me$<8K&ji
zfaW2-lEzV*=1kQXbbN0TI1T1>+Ki7H|A+)Z^Tcddi_iWLU*E)zUMopO-3GMlmGae!
z-I|eeCP!wR)<^rgy9@6o-$Gx{JaiHJxMCKlBsKHaNGdUs(e|{0%k38(b78+_?;M;v
zv9Vdh@=1eckf|MrxDwE=5`#AAsB^e;H~#Adbh~#g{n7_H@Y%@;xXd!s({nsT2mAZo
z7CTqK$ZIiCKEUcKD2U`lj_$x}nFg{5^58Z#wPkhH=NMgyJUp=be;S*cdqANRe$l!j
zR4r^)0j(OyBOtfP{1J!t00(DPUQRCh>@I%t=4j!3<<jTk($e&5I8`%AUfXXH_om2y
zrF#hLF5#pmgeADvX4NK@l!R~EUIq&b_rthVsXT6BWjWCdF^Nb|%uCDT#K1H^X(?V;
z*RsiCyxl0#Jwq+t)^w=EG|ALIFd!g6acWjE7>|ul)efdd_?)t+lENYi%k%U68#lnr
z|7%r7BOkeaMNq5MRMFY_MQtn$EMc2aQ+)aI8f%01Rtfdr#;o1sF{*2RdXIj?TO?of
z5d6In$WUk+9E66O%bJpb7qsla*!(s)239~hc{%X0SQ}Y@PioF*GF`t{bBxgy7y_Le
zv-na_l&PzOeLtS-wId+1s|j5MY!(%@3fQrHvL9h!2rRvXbRYSTiP8llAl)EC<M!Od
zOSmqdCcZ>+<@!TI3*2o24wCyF6wH=pa#w?d7ar#;MxS*yuhn8J<!dOa$uU?Sz0Gd^
z&POlTn!tF$bGZ^?FC~!oB>ZMmb8FtrSFi3a@G+zv9Y#}wGbc^pb@h0(Z#b$(h4trY
z<&p`7%UcCCd|RD4?d?SE;y7=AgXozn0<6|O2ksen7GJ{1pQ%|0I;Zm;E3~arHuNPV
z2VbG@eFBsev$&ywfs1Ayo+bHboD#DPXN!rKX=DZ~C?tNCOsaBf;5JR`=cuoCS);YG
zeK@El&T1K3_YxeZ-9?;Yr><wOu_5^M;z3*JR&cM^eSFov^7S8i?Edr5vjxPiv35|<
z6pK^m;y5vLQ3qKv$-a7(QNj0ioThIWD&4jvl<;>-9Vojf3dPIfp_V>ALi<Q;_GhME
zL3a-(?Y>joir}_A{+Qzd6bo>H2bx^u6y^iQ2$sK9E{2rRrT$O4r>2=L`u;Bs##^I5
zcVuaL{l0+H2*70`7OPmy8iOpp2PJ%$Jl_fN96WTjsYq6+3a|JCYhRqLTdecxN~Xz9
zs&I&*fkB^F$5Nta_fRHjB+gT&e8~fUI{#c2W9JZN78W0G@4i@arQcDWCsEK_`-xe9
zj8sc%^74Qc)%W}URn%be5ZvI<=#p3GF#WZ|ks8#|hj%rqx1N#dNy0YR@@0$QW^DK9
za-R>bLRrSkc%rpYVK?~H*v3W{YD*b19J%V>AVZiSCG<=)xRa4vJYP-ZEBLJMs|1U!
z=jY-{Oz7Hj)X|ZzuuoO20K^@-o$M=E0|^1$(me@Wjgs<i5|2(x;%{W<1cfFfM7Y0h
z5}~Bb4L&@CZaBR|f4|&Hi!mII!Yp+QowfHDZq1zUC6-b{j>PGSQDXnIlFOr&%I(H?
zX9_w5R09uq0SpHWkinrL*}VkUlidYMg?TSIbDPac)td;LK@9H068Yqn18S<=DaOnR
z)-T-Ih_(nW>=;X%WBdjrx<5o}#wNWhtBYEwb?2Is4bgWVEPk#$9OFfKOCkXB2Oxw5
zWIdN`PB6NINH~k>niHt~<F(08e}LEdypiztH+<7xIZgsA>wV^m)}(zFFvE@(>RqKM
zD(f0M=LXF}bl1gIkgm}}!(G7%`+G#n?cLqbWB%!({DZ9ZBB`vU+on|xrw@)R6V+l+
zT^*mU6~I|Xl6@fwKSNt>NSO<`JIu@xb-K`D0!Bzh`9Oik0i}M|Ro5RKLGfl6nI|9X
z6_=UqH?5uW;D8anq}vxXMnUdHjfn9FpD(A6zy)t-X9q?8+}u1MjmAqfY(+6arMm#x
zz?#@$+|mQj5ae|iY50~mHXt3zyBkJuMyF93L!QD(M3Dy2KwjAji(vuD<)l?xX>xee
zA&Y5FzhiCbonBvzqX`!Tgjy(;<gTAVIa@v{bgLnJD7fC^Nh+R7BSbZD(^Y<i+}0Ba
z$_PtOPZxQ9>Up_!safY1Q++spgKY3Or1U}WMx1#G@CM-9b3b#WC@3fZ31;RH7%y^D
zeny`?PdkMW4)%?wLs}Kqv$Ku9Ko-QB>U9k!<dI4Y0yRmvu6)tt#Duu7Fpw2ezfO#d
zM3wDA_>||_MmcorN)Q#gIywSmf8X1MyxZ!4kUze(=yzoH)AgR0coK;K@1RFSXEhan
z;kcjWn@QT-%i**khgQD3Q2XVh)H3k480gGK$zy#)J14Pv9UcAe^Av|Glcst?0_aQP
zQ?w>H*_XLj>r%x5TqG-ZO{st#8hmfwy!rl}Z-MSIFf1$#KrgYoN57qP7TO~)?A*>a
zSjQ=3e(nPKK6?{FM*C7<xStMwJq*s$JEVieVQy}(x6U^acnM*GoQCJp**j$a#$z2$
zInD~2X`xUSVfzQJj9y%YNnD*b)FOYUSMT3fe)Z~iJ7qx@dO-4hq;?h-mVK8F<}=yt
zE=|<!tHVrJ4$y+<^WZdHoSOP>?aft)Gr%C+k7s=c1BJ)vky=Tm;<fGfAitCug0Q(s
zBi=2Pavx3FY0RI8c<iTMtw+^LLh#<M;!q1Y6pw$tLx)f?rWY?@3MTxNxw-dGGo16@
z@^WxY7<)DQ{TDAKB@d#s&ckA!MMOA_U0`Q?0C>uy%!)4r3-Tt@HM~Puz381Pc#N35
zAl0XD7gvxy?Y!I65V1`BM4Q0iE{4U8o897KRSwB8QoU+hf?-0V2J(UkFflzxu9XBs
zstjD-H?DiVd)Ekj0LTY&KR>3oh-h7ZitugfB)31B@AQS-1<fx=DN&A)-x~$ke*0bL
zF0$Y-)8PUwtF*zKnzxLtBO^|4sedPaf>SRwALTD(@@A0zW@gku*bhhoc_7v`=hTY4
zkILUqkq6h!aNmJV>5B@z2fqT?rSk?gj9^&d(Z#FQ7C>7kvcf1h0VE&|V=0#-T8|x+
z_J$R&fvC5q$GEHL!W0oX`AL5r{s>7#|4hNa2_m`2y9U(7z_nuuR-v&wYBQTX;fHcX
z))%LM_!Bq1`}4Xn#aM;S!_;N0irktSh>9U%VED9Iw|^1EXgMt*DS6+o36eDxB&k?{
zCIk0L4TXzeaPZE-L29Y&$wEieAQ3uv<(l3i^%-@?=U}lu3sIl|3BMtRGP*Hv;dhRX
zj8r4}?)lfx&p(9WEcr3aMKcocihUv3`PZ<v)z-)8Xk#-oWlc?o)j`pG#L~F9GiaW`
zYleXzOk~LCVHmmD5S@GdkdofD|HU{yasBwJG@Y3)m)Lv<`58gI6nKEt)&C_2AV8DE
zPLDUtZmD~5iSpAK=$59MAKeCerQkDJL8SBw0|-2U!A)Qau7jPWC5_}SNOLkUhz!R7
zCwbpgt}=}skG@KwuAsK|6Yt7Q=|m<brpY1$-14%D3TNbuwKX&HPb_qFupVP}DbB>#
zdwzp69wURLf&>dejSLwcL8R;{gttSQF-yAu<c5TT>^$x^GBQE2Z%#U30ZqC<WQOsI
zl!PYbfu7zxbe9I^KoL}spZ}`VGy+7O|CF(?4i}q~fb7zFwnoB_B>Gl!=fRsr>y@u{
z?ul#=!DeQ)^#pV@5aR)kE*9t&Ba^S*g=3c|OdYYBtr{P-(Wci<%E3w^CMh}V$|WyX
zV>)CC^f0*WpjFk`*$IV|3|sm)AeZSDMt|3`BxhwUXEqx))Snz=3HRlF@@ww|<HKub
z=i}2;*=<R0@VZ@5hCQB3fw4vYZG2P|havhEeo!Nm4~%a##u;}ALef8~-7k!afN4qA
zrNm##^VN=G=m!J8Ou0W+#9g0ui7R-qO-^Clfi83nH#UHxYo@Q?N#==8@Zf>%&YZU>
zZHl03abBJUFYg;~Z{nyuxn6U9{igXH1<g3PDrmDxDMrV}wnhuXNQ^JWm8xa@;=rKF
z^ZF1~vbS622>}j{ApnBlYc(|$o9Hj|$;eRW*B;P=DP*!Ac*?=XAB4*)%d4fRD7aN7
zN{D~;8vi`L#WPc1D+vpGcw}W^5#;IuGO&xdaQlS5#Kc6x3*0Yh6#M)8@g<B0pn-!=
zKU)p%A(*QGJ~MS0nL5R@QYWhQAu<vMwAXNZ;#dnH;7Si4IRUPZcKssA^lC4t<O89A
zSU$M`NKQL@dNQM5zr~lYH+}3ox7fpdrVn$m_Eh-N2ogVjwc7ezR>tyw>WQD+Ob6HY
zp&a4k=f^f6)RC8$A5!Uol^haVYpXYV0(H-WcuyhEs#XKji9500V#1L^0VPQ|sP?<&
zgWjg5_k61`SA#RX%u|Ev$;pfi5`Ry{`;{_esK{tE<TNX5@&aw)Cmz2~j4+64wd#tJ
zlL0rTcm5j#6El?F8|YGU+513dUT~$c^Qu0TqJKEI;|$+)xY<Au$!GUNHnmx3$b%Z?
z-y>S=%eV;65d&8Q*@i}uJ$5P{>ZuoYfSy01v6Yn-Osnm?J33I1kyGfZs;eOZ;9ZK5
zP~Q>T%4QW$Tucm1L^3lnh6fdLkzpN%U7YlB0GMXUx6`kxy#Z=!f15DG>(@<9O`kt#
z+y2@KVoZS1eE<H8ojq0^+%idNX;41+I2NR*vyqStgP$j-sHi}iK8jBtxgdm)=SmX`
z4c%D?lN+=l3!I*QHBLB=mj`ze$PA+?35$KlA49bO4c#eVEQyPWfrFhqB;$Y%!Jobr
ziHK-7^gcGC-5W?+_Vi3dCHnREO>>5;L@w+cGmOz89<hRWg;I!G`+zJ_ESwvLKbF_8
zl^6mcXWvRm>G2T^Y~kF-B&kYg(4!~xt5=iv8)u|J1<FM>#v@FmTer?mPa&oX3PjnT
z;sb<k+jVo-Jq!$TmGa1GXxMG$j=fQqK<<x&g*7@dlb8_k2otlFTB=y7;8n41vskFe
zDC|7zqfYqvsjlquDsCXjpjI!VQ7dtN+mJK_cLsdsJi9+q1LxE}oIrm^!v!LHPYF!b
zYqGL_Oiu$NsSnmQ7=#1tc_o>C+nSNJT&2n!PIGMTr@b7j-%s}BvOy6m_fSw(m3;5(
zc#XkCI?7UY6}uuaH2ZG)_)vFAR#5=~V|a8FmeA$(xz&vY_mf>gAwpnf_9Ys*yW{^|
z>d=Fdl4Kq}9M~=TG(0@9ginQweV^za^4@L{M1NE;C@V{|_hn`0f61*L^6sAePC;kQ
zeZ;>}SNC~y6YvQB_pv!CKRo!a7r>6yMdHd<Q*%*M>(0Re?(+Ppy0ww9F)61ZGeEB-
z{giqAx)mh({h#>Mn6zJg%+2Kx?6sGQjd0+nSXnaNMS2@SIntqDWM?Fu#s0Cmg}UhL
z*Us)LRV}U5@%{evTtQtMvE89yn6c)co*=opoPk4mX;D85xsfQvWPq61+aSH%!`sS2
z4;pMBJ^mEwnj1hWIGd|v^)mzFR@m9cDci*%Mgpti)|bx<bcN(-NpTS?(hy|{QOvw}
ze--owo06uc$WtvCN{UL5;FMUo0x%sCV$G%TTi_i;Bjiq7r_WhVgxPLFRFs*n?v-vK
z@gRq0bl=Y!iWGtnNWK-gR$?l!=zeyX!vcrS{PFi<fJZv!LqqC<b3iHB#w}d6wRznm
zPYFmUvkeotUJE(g<rk}h`(EGN9Ex5JkB`RAx32^b(~aIpC)d5KXZcKfRqcTvz)zHV
z{N5Yg4uR`)LM<2bn-wfxUvFVJi+f!+Ud)f@wBe%>J~FzxA>R0+5#NDioE(Jl?~|Vv
zg1S=8%`M0W(oAy@V#5;L!}yF~Hfdy}++GCV_Q#h!DZpp|MLaMX_>w<v-n{7z%DvJO
zCL5<_-FGK@jR66B*`-fdXhPpEa&MCEp+ddBxV#)6Z||VZi-Up3!t;WPdPAuf=rFv6
zv<Wp6<72GM!?|V5oSf_Ha~a4<z=lvEke+`fE2-x4(gSUzJhsS6UHuF`j05(+a0U=Y
zJPUQU-j>=|&<LNIoHW+g2Rk(mei$!3JHztXU^B{+BEK~qx<7nx9qsKE!9DhR;R#7w
zT<*htA3m+-pCaAN)|gOv%p~q`ry(2iV6dns`VGj?bNE%+5R;5C7i1?yH7%%9oyE~*
z=ijSPWsn>R6SxG5eRf+N8_1LbsWKcpkdVA@zkj<6Nc0kY(<;D-9swuoF@)75hVY!e
zsf!`|T2@$?Tn^G#Wt<52y{=B`2XhaXN3*J`)F|+m*Ntf@DAK4~np#|3U4Q5kLB|UO
z41r_Bq{5loAFj^DkZoxyA9^Sb4M-q_!^tt_FaoT1FxmhstodjK0N#lhY#SgD)Y4MQ
zL^OMM_N#0kJy7Q5veS~D)Js&_CX3)<VlMssDZ&inFH<uNtu}ks=S-db?XYLSfI&6q
zJkHj}A&!UVy;|U|tzGN-qdZ1fj0r$x+?f3CY+1Hfs;Z&_(pKi?Qri7NVg>Z@WTh17
z9rbbBdH!zL<L9icS$2L#Oq?yPs%va4@bt=Rs`#U`LR32V6esH`fIh4F2bQ=0th(C>
zYwPBq9eCt-_vWp%z-MM<sb6Bm6dnZzNv?d!d&0xY`K-P7hf4oUW-Kun#T5$c>&tVC
z-!1mbQFjHQc0On~C0{x?N+e|}*T#rKHv7@jad?D|5gTXs==eJK$V6$@$G1~H701mQ
zYzaM!3)8FHQsj2uYMu<SC*WzqsN%-;Yu-OruQ6GG^v_$0k+{9CALE{Uza;VeQBHO4
zz-UubLxZ1LZPEeRyDg5Xhvb!I#ZIuKyfi9hD$iN%9<!uP=sG;?4LW>ELNYzj!Ag2Y
zf+&Ag`el6k<%R9S@7*d<3e_wDw;RAY{eCNIdO^O#TgWC*k+~9{Xle17PNeb1)a5Tz
zE&#S{@W$zZvKA97E0k_NKHgdt&c8<sw}6vE=A4e?;#QZLX#{mAh{Ob)$PcM$DKE~8
zrLCqb3XMbO)WhmZ;Gi=#I#}V<Q;wl?>&A_3B>%-M(0>8cpwSl%oC{9@+00;ea6wPc
zBC1jHoP*MCW}0hoH11ygM`SoKpaRJ8rHhCN8Pa5ltf1t>hpfuwdcyUoAK4*ueptzd
z_wl1g7KVn7V4nc2+J_G!!lXtNsK}@(HOD`_E<o6bgoHEzGAU5UJ!>BJMaNIeYic3$
z=}OL6f#8hz^)E1sRZ~#|*>KL5iloB<jB!`j)<Qg-K5Y8<3X|o(aXmyeST0cx7t2+K
zF627ob%OgeAmCBzsfwz)JmRCN^sR&5k90yO>rKt10P6vKSxQmLGa4GN*R~1*&+bc~
zT#0hw;hZG`)($f>;Q_b0Z|&`B?zfSIutf(>ycNcQ%WtNq_ZRgL{t&EX40Nx7^)To;
z%DzaG;GgkaYhzO>@Kj`FFAGUMPLUYnT6t-y?Erwr$2jU@lnjiPp4_{w7_d({jaJ)D
z<DZ)<TUlF6gw%_3<ZqzL&Y$@{wt8)y&(9I@Q4YoE_~_2b`QhPkWTYXfk&zIii?|s|
zf&e4k!QV)cQ-oOA!*>~je!mS6eoj9p)=aHnarXED0P$+`6ERR#od)9KLC6tS3atpC
z7LUKGx_WGNbro4-dRDADn3HO=z9wmnO?&J%6@rx=%<cL4QvPoqwTeb6aT3tZFWzN$
zrJ(we+5V--WMpFE=(N<VM8Qs8&&DRSI?ngByP~pEQCV?#a9AYm(_lCTrZTJA9i+Lj
zv6wq3z_~pSvqHDw*ZK%l$0U*R?7~7QE{3{-khyAWpm*{5b(MN-oUNTLCs!?&;18Om
zJ&a}b!@;)s{SO)%nm~_OT{AVAu}sV4V5<fi)TtrRptJMxLd8z4(lW`ps|P)ng~Z7}
zqqRpw@VHwaZHq{Yr&=AC4L=s!o|+WqLXMG8b#hk8#|sN^{6v63d<N!D3=2m8uM^>i
znQ0ZqP$Q<KK<fQxn!jH-fvf%W;PCW!;ttpaigZ+avS!qa0S}|`T(UBaA#<2hd;MFI
zf{X2~BYJ6RLUwN|nyMlB2wemAp><;`GYgC4Jq?c1V43~0Y^y8>Te+t8aMghmGR1)!
zxkwB1tkm*IATfm&`oRar&ySybNMmbnYhq>=+NLiVbif408I^g{teE$aMhJ_6<OFXK
z5i&Fk1lgtnB_(wA=E>i2d#rODRKoauOf_cGURc;SJNubd#>&f5*&lGW<>zaJqk1K!
z#qJ3wl*<P;CKa+;AUK3}fg@!>N*fuDArf(OYW}&XR{phXdu|sP*sSi!yUt%gC`~PX
zAKbJOz=SkC$F7W*#rFkyXmwTPKpy~hlJ;ZHR@c{80W_$OF)~f{LE~Pjdn=7;eOG(C
zxuq!sYx(xx9&j9!W83rSpg1wiFwDWvNOI}KT3ZDjd9n=e3ZqjLgA=QhlTh`w?ET@U
zH{q{Wvy!9Dr;9d*_r5I+DD(U+1Cy31Cf4WX09<Hlp*Jx;{Dr%pBth(hz%xchl)@k1
zdVhTE1|_lNYv!QaVmrDak)eFEbw8Jv=jL&(iMUj4&ye5Od0gWI3N$bMvs;NhM|*L~
zTFR+8GcsChYq+qJ0VP^MXa5FbNm+S$Urgz{RK^6Gfj9x12ky9eN}*cl=(leA(6w8_
zU@AX7-Fsd+rKSXHTAR)nm~_$A%So_^C-bqrx6!h)Qd4UW#;<M}Og@jQQ>!pRHcgi!
zcPhO8NGu|XO4D(D*$E8sR3Yx0m6&As8FW#*#)|mz55poC4OhOsvDFWut<2pEx}+D?
zveJ5GX(^Vo`XH7n_X`Fdo}8A}72a!NuEi{)fRBi%v5vc$l^);u;OIcMh6C(KM0BRB
z%Ii7F_nq$E8lN>&E=bErt9b1UQ%T*K=~{)#q$gT^U8;En2#PE<T<bSOS}_9z10Msc
zyyWRnlDSVgYg#qf+o1Ji*Dn5!fziQF-PNN>x6$j`oqv{rmo9Ip4Ki@@iZe4i`rF3`
z2fySL@wrEq+M+hj&OWVs!}B8RMQ%}PDIp>6fT%y5ec(z)w2KH06*bq;H55_<4B2tz
zFpFcuULz3w73@|NlwCx>y|g@UnN5C*h{%5sa07%Q4)!HuV;m}KYM75CIco}P^7F@A
zS|VF_6-KCkjgFJMD$4Wa;Shh?UEYDvp+U#PU_Bax8*2a95ltni4cDNttU{s=aG|)k
z6hzvNqL*F`)YR00DFd4biL^<0kr`%YrZCRx9|@Uje?5D@v~);M>HE@7mX`t>O~mBL
zNJxrKRVjJv<cAL`+UB|pv~)k($JJyNx#b{>+tcHNZtMb>Ozds#<+KzvHS?-{GYfZp
zIm=keKqF=luKD%d+jj*TbqaEFc!Y^bIe1u1iN7EDH3Lu!Zntn(z^e7-_ai17&H^9$
zl)bt65#*{vXN`P!F~5`y!w<%ZQ<Iz(i70(hmfyb%2G0543jzzUP<s}a_B7`K{nr=!
z@mN?Nunk7mTUva0n|u3#d%2B%`zKA+i=5qWZ@g4Gjr)eio<0t!B$T-0odUJEJzaxD
z@#jq`xK;kHWf`~ewU5YJw-aokmWC_Z9<AT=EGi0_s;9lZ42+gvN<LJB&Pq*vLWYf1
zi$3kGU(CDIy_#<y^J$u8?xJ=o0!zrHuqAOiR$WC%KtNV#a%xJDmV9bie{#A(lmr*L
zQVNz*H>W@fKpfV#T&kq?QOXOV4WD0JOlgMIP~)zeLH8y*G_|fysdiG7{<qLt7j7Hd
z80$*pC%1@cxr~hR7T1i&_hTJx9fLIPiTk}YF}aTzb|os)$k$?%xDH<b#r)(3FDQzi
z)2Mx40%%VX#M`Vzic4-16AOlL{cc(i$AqP>v#Se~1$Qdl-q-nqWQWU;7)0MN5r7$`
zo3ZuRvdv*y_g_RsVWc5~G#_3S8$$OGM0~aj!b=eym>~5Kjd0=2sEnE0G(1o&Eh{xN
zoK&gTA##t9`w(w`!M^bA4obG_u_2^_I4UhJQcrMlasi6ggtDYkvzl;r&jq3%083JG
zd^Pqgo-VXwb?1tThzO62l+lrtWaj$zv6l|nWzW`b1tHjSOcfh=y%9mEC^x<X=&m_K
zU43`gb|i0tS8Ekix&HM0LY{*otb_7&k{s4^O*^ok`scA)O!HZoM?@_6)BH-^Tb)Zu
zi5@-9Y4;EA4&IUG;Hp|1$rloA-F4=4jecZcFwkeE8(20>BE9tnEJy#Yh3kUOfV1pm
zN?IQs7%=Kw`BWK$l)zn*-P~@G*JWu*u((*x9t)znsE&o&+9?Z*F3=Ktv~fh6k-h1z
zh{>^u^sQzM0np|_60WlC${e=8&&ov-j*6bX!0_ati1(1<LJkrx&g%7dd@c5-!&wCd
z<+-_b&dwqi3gO+saOOfrv4tAwz6{d1n5f^J`{o)hZ~64}XP8(`#&=@B2y*`la<Imx
z?V1MuH$z+QQoiJn#C1y3KQNX2`hsKRUa!RnY-Qof_;}1^H<?ZP%VRah&V_cEr27V3
zL?)0|s{JXlJbpKl#m!WT>sU09{nrb?_#_!uzVJ&QSaUW3DB(Oy*f_Op4n8-19xU{>
zP2R)PW1)B);KZ}Lyp-rpfzeM845uYi=3jh;kT>Dn*#P^s?)E){*#rmjoBJ~63sU_O
zZOj`J;BZZ_2%cu*A}tqwBD-HqKoB`K-dmCBZE)g$Um$$s>7dHX%A28cY|0y}%j_lU
zTj1#hOKhXWeK3!4hiIuQ|Fd7!+SnX^4Em8nDIQI}3rX7UCqbAkpILvjo+tM8lFM<o
zU9?eVJ?e1CVr+BW?9_M2$sT9oaFKMJl+(-Dw+;y~(@J(jbJU1PrKRo^{6}C-y2bR(
zotI*$*FKwjn6bHrD2Gb%p&(11&!@>DvthY;H>l&^y-N)Zz0Z2RWuv{Z^Zj!<%d9!k
zxxM74ch|7x(7ah3y~_(GlB6i`Ii4`2x3%wNms%=cu+7?<T3|Hn>uc>ys*ExYO9<a;
zt^2*V!i$alN8I|YHtC(ImyC)m6E)-${(R~~pS1O$1xTJ)vgfXVkOMgrggBH95A)wT
z%5@5^6AsscC>i>s`u|_3QVDtsJ)y?uy@)tJpAv`N#eAHTU&|3O<p%I^k5>eUPU%%e
zO-)Um?Jd)djYc<VJpPP9w!dLveFRCKQurev0)d5%&gcp+8?C-<jV;{yr^H7<*w+3A
zfUW-?+h27ujsJi?{(A<2fMvYJKC<J0@{i2*e^39P1?_)NAq;?q@qa&kYq}zfT+zG!
z_jvdxt>|iH``=UAYX6A0f1dgOa>xBYl)YtCmTTL#iz1*PAfh6zB3(*KtCVzuG)T8}
zhf>lKf^>Ixhf>ll4bt6xQ{Um7&-1SJet*_jbIc!ej-kU_?&~_wBldmUk^XOt>i>`5
zcoP*#AHMY1dH2m*3X3WRhTofm&l=4absj}AJ83JM`&kkaSNd*NiI~NH*vWg-tP`5M
zUbLXd?UcHiB~cW^ZsUwoU4fqZC|#I#^Z@_n-_PoS=3QQ1k5C7I_&w(JDV-^5&y?4W
z=*^OU^GQc`N;k)hQ`ui#iHp02-s!7eOvRH+<hfd0{hgs)FNr_WH^LGjAzGll{#)h!
zG+VBox0S1ui*1|a{wc*6dz{fval@>_5Bea{_81=+lg>X)baULhwaws>VEF%SV*P{k
z&yV*{GHmx*fQ&qf<dkwAt|Uzxxgl*3b~F{;u`VxHZe+I~vssniCcZXDf;Zama}6TY
zNp2cC^lSfbbnVa#@<dOMtFEpWg#)*S?NQ#*Au5tX5tt5l-)lfvZCf>67YqRvBcg%=
zfBn~m>JiOUf1}LTccsE?Qr;e$=#{jx@((1WCc}S`Fn=;&h0)n1cH(jXXw}SZld+m3
zoX~fN+q1L7uK=KW7DRe^(dT|)3#^Y+X3a*&lDRoRbp3mnBO(1M5Vt^*usmpRJ%<+p
z={4T0%cYTwc0zXanNQFpIH!*IuI8@S8a7uF>-&rwmjzv2w;HbxeZe9e$oq(1g(38i
z4Bmr(pSW7KE&h+t1;2m)eo(;Knb5i~FenIezH4e~V0sFscQi3jl)LH=Ze3J|GrC?2
zqoVrAX6pi~;?5m0Fi1jkM#OpA)8Bt@<PiHd_=Cc8bA@efml7;^O-%D<OKjPp9=q+l
zQb76G2TG*mr#K@c4`<!Z9mTA}zkNHBazkjkpB-2Lq$e-WtYXJuYP7vEKVR><p-@yT
zpsE@Y$vR?KW4r0;`r>%);ObG4dVhLz0*o6w7H*f!KzW%C;ayr>6g3$;*jjnGl>T2^
zd6RC&-ZL*S*MQst5FVOt0)7;$3=f&?ffK3)(niMmLs!HJD7l=E$5%knhYx>Kob>wp
zBC|~%ELLweYiw16NqBZUgx#?dNGqIrC}K<uR(9+0H1Z2_9L@{fS2wmC=h8=&Bh$-b
z%vna8`l;9$iZg3BQn6>3F>cK|&#@|gGB7r7+ka2vxOQ&QA2aK?A|)tz#@KLJ<L5^m
zlKGtww{~~c9t{GKsS+~YAug)rhCjlx`(TZ7XV5s&W!)PNOTNpw>xXy`O{dEKCz-wf
z$KSA*kdTm|AZR&jt(HWst#MP|iEpm-U`*B6npjy49&L=`^W>{lcMcA&gIX3a=H+E&
zYURd9zw;+~5v%;wYQ0F1C=WSqXlG~RBqTE+!SKa$6HBys`4Xd0jUzECR>Ybyj<4Kd
z&p&l`3;RwG%oO<?{t(h!AabRsLP$!1g%wHWdon0sV9@S<v2R~tcU&^3I!Xe77i$~P
zYbLsLadXRSD)GzMHr4&<L>IJQ4#4Y;h<pITQz2o>SG83uy0dA4s?XL6^Yb&Rxp}1+
zNY~cZcpd)yXZC`G^qL)XIKIBZ(g+t=c7iu13mrTmpyY|7Qx+|Ke&0x_O+tti_P8Ls
zw6!f~neOi|vY6!s`5j3JWjM9$x7F3hFd2gsOF}{jG=f|taqnlLubw{rF*>S5$Ck8@
zf!7NoL)kNML4koB(tT1=Qj8SM&Fw&PSNV{g{RHB10F(&?zcfhXSYCdCgv6Yl3;Kps
z9u}6c`-`w3knX5!(yGZ<EB}<CK*lZid8%K!T>^GSL5&4k)^g4He#=6l#b6}f_(qyA
zRYKQwH7B)WWp5M@;{`RO>FNBc<z#spd?KQIegZnbt1Wi$xa@h(YG(nNR0qf;Px4lj
z|JUQp>%qpv1Ska~8JT1!g!twbF)%8!`e9d<+dn&7cy0`Tb+TvA<`;0StYC5Cgg`hc
zC=K}oFDfXgr@K2z6&AVBwSu{d%uk@?Lo2$JloWbYw!XOdW+eS2@5L@@pcM-?A))F-
z(A1O~)VnHmP(_1`Q4~%w4Fv_q`4%vjoPf^`7%G6QVuGK?eAA~w>k?)f+Rg+ggdiZ9
z+S(8$gYy>`aYLC6a)rNt|6V7(*CKI%a<llI_{%aU6!S&b59a0~me#%#_b#@!@`rDp
zgp)S5sFOtUllpb*`Ujw2t*|$K{Ai<5Y&DI+*l-+>Sl<>T^dIWWNB0l-Lc9+Fos~_B
z4DPSkD+y6iMMkh+PS!bE>*}UiDTd|5Y|F}q{Wb8Vq-Z$IwPq$badLBiZkOBSPV5Wu
z^XusDu7gd6hQ@X>KN<%5J{b6VYFy3+L4pE_NkJ(o&k&>C-NRt6RE_oX+XGQh*4Oor
zz+XV>%7#ptn0B4g5+*=l^(FG1wBlXo6&AvxL;rUVA+>}A<_4Q-x{+w&0`4Q3*W!r|
zllI&ddK>06e}Ol<yXYZbmiJC`l`KyCt`R)0_j3w=OgG0a10>pPtSUb<vo?9JS6JCr
zVX3L9sZ(Kty4voe4Pw+CveWBRD|nLiKoBAL4775HaYi>>ST2o8E6Hd)dw}kkTKON@
z$H&Id|M>X-rUwNFOF|2_WlX$H<vLTN5Sm8B?eJCRu+bzHU7ns&IOGNc)yry|wGU2C
zF_o1eiHWn2qXE8QD&C56g+(Ulk<`j(W@g|uu^xhsiiQ2jlct|P2U}acMXMlM?e5o!
z&Y<b1q3>Xs0MZ$-byig5<~l>TBkUFx6cirl=APWUh4dZYs`}z|z_ZVF$CsgC+dz`E
zysQLKnRu!4<R0*pAjRQaKDn+=x34mBXYA~>w69(~Q7h3EL2~jbBP=SmT6ZmHCE@yp
z>x|pskI9lb?Gd_c`TeU}cgKs4mC?Luar;6wUSaLZ3X*=XPC6Y|lU`hfxL<cPx?Hb+
z!>A>7T^?vpBqSh8%g28A-@Bp7^UFvn5e3^(-(-eFEcMECt$j$2?)fpimWmO)m1Qi}
z<gijtd42XPw7Gj4h8%zW_kiI7j_p*n^-2Pdv$2Uu+wgdeZES5VS9%8w9@K=5a-@d9
z-j!AhcN?bCR<uDvDj=0MsU+lDm|>s*=Qa4a1Zbu!?WO+WNlv&F8&9f%4XLUc&=7EF
zW524AsBpO^F`oE`r$D-Sp0jMJIL~EMHasu!cjx+h>(3)4_WF|Vg(rFHY5o_eLm#o{
z05v`TNEJT~tX;w3qEpa{SR7*9cf63|a~uU?cy~Y1dSGA>wE#)Dn#uFO7C)+a{YX8S
zrL|k&{H+51d^-8Rx{r^~$P*W@79S4#FL4e>>+;y^mvD~Ao5jS}QE-`Ozm#*TYHuws
zl;%a_Dww~EvHV<)S<Lm|rCCM;TA4hJ0w!N4?1-O-v~R4h%YFlgK=y2WM0E5xSqOJz
zTwDZ1r+oVuAQwCZ;X>}2l9G~YNc0cTVWcAFFGghr@(OPED;E&Fev`}NUQ;xr?CI$N
z`NZHq5`*fdrX<KHfnvVYSXY3J*Hu4)Ust?n_|{tK2lH70>k-Q}=G4s?p1nu^sj*4a
z{>E}kxFSvWOOp~2nd<4~6L_a)W(wEe>;d0H@2{#Kt9iAxa1%+1i!bgu()aX~`FMGG
zfgC^&LB~i<4L3|OC(KY@zAScgyHfb}%?3uw%di^L)zt-%5-~B)n&QRfC2%I~*9Kd|
z!tS%P+jpiKk>5pXawX@X_al7vZvZ*46oUUTy~~llh5<poT1QK3tEHz(AmCoau3;(i
z5&?O6J2?uuc;pQCZ{K2y&I4lHVh8S2Uz1eas|H{l0Aavi;3vp;blMv>R;BOye4P9F
z*PRR-!{eh90|UJQ28p^mfR=Ff1w9*FnfN3my`b~y8PSO_hQNlTC#0lm|JHp-FO<Z)
z#>VI7a3U_iD|s;AilL)VuUx_c7YJytKyr_NSxg5?A~<EauJ%2+N&0^M`f}6o=!Zx)
z2uad1g+p+}jBr3>GjR)*!}X)q-PKwZBAwSE@yyOTfGUB1nl^tv?thHzMDWz(Gl!96
z$PEc9H4s-oU@i=87^!|)n471(<>ERA6PTH49&7`)8Q|L_`)W-1$n%+zXiz)eI#(bn
zJ(GU-z5je>SjiOq&k*od|03dO0~0d{!i+&ik@FK|J)UUTP+<I*SA>Mbi7F=Y-&p|C
zKT#e2l53z3eBrl-o^%JL$3{*Axj$?h%-N7U`v3ekB<qK{1{~sn?c&Vn@f#Z(t3HSL
ze;CFlCeBVz2OAX?f79h|keV)jrgC;hi%EI}o=QmO8J`%Vdw;Lh81V-)<V#UyrNN<a
zt+AO|s%2zl$POqe-o9-%oERGFnr!zS@U5=)E-t<!@uhXXX!kbo4gRgh{}k+^z)!>(
zSFUug^j4=bH;KDAN7sV#BvpUQSoz+W-7yx}#_0moOzduZzvWzb6oC1ix(z~ifxwuB
zr>vq3;tUM$XT(ZxShIQQS=}PvJqOC@!a@5n?b4n@uxOp71)EdI!1>VlxZZ^<(h%kj
zhX=<N$nfVV7Ol?Uk%nVl)XECxKeqz<Px|3Gu(q-S)9i|`7ld~;9z`|&S|aNn-a9zK
z#txzS)wi>=adL2w8kskr@<Awi7x)FTj&gFishN(S-oUp4*}Yfa)sGGiG)ruZfKniw
zInNXV1Sp#(B}J8-^BAQ9m65>-m?xod=G?}{-r3yDg6xHVzw5)rwY7)1gtXs8*QPQ{
zQx|@oVZao7D)0OE_ZFmypKfHodk(>ry?tFvop3EG=Bc&P3>ZyA1Oh08s+A>s8M>nA
z!#jiop2>jcJ(@WaIG~TeD<^Afg9%MaN(?Y2M9hNlYCr_ipY83xfH&B8%7YlK%6dhT
z%lRBojgWD$&>p-r?dEHU``|&H`6U9*1Tr!*PO_O=`$Bn|IsJT%dVRNdu%N&R5F9Pg
z0BqWFCnPM`Z@GDa^Nsy)tep%f+hSF@_g7QPbeNo)g90~aD+@C+Vs6xfAGy{Gi9kzo
zV{I)NIR;F*GR;-xL9DLGTVvG+s{=ctVxndAZ;xg#&u0Od5p86>HE{&O_fJ3GAgVAE
zNX0cR)R1^yyx4{4<m}+446o7vG05YBqNci5xPj~E%$5{8Rn_%=0Aq&TNrorjhRcKM
zv!h#CSbqNVdU6+0U2Lswo0^!dZ*4(zpkJ|wn#)BrvjG79fky%cHgGD1g@-*BbdPzh
z#9m1zjCFEs1B!}5mGT@Yg9{3R_371X@*w(wk}DvCpT9YhLAAksRwD-F!OD<K3Q{oI
zE?Td*b7ACSKmy}-U4M?u9MD@59#$|UX1zC$BB~$lEVN?T$9v-9rlDc46jkhZN2v-j
zdyOj{HW=MQJA9_6rbr=Gv(vq{w!A@xnsKJcazRPcO=RTO&AH!Zlkf*R&7WGvJS4_l
zSlPLr^CgwW{SuJ70rw0X2C|BZLZwi;0%0M+=8`}H*oRXkwv*>O^<7lwygL*1u^+s|
zq8J8r0z*P(;Yj7OXynPS{(&s|547kn6NbQ*-KI=VwJOCsu0dYZUu@O+GnPaZ(!}7P
zKbBKme7tfb=%VemH^<*BowN`2afd^6GZa(CJiWaP!*-$%vj~(*9J>_J%dt0S+4Ted
z#gWj{(-FiHfXW7pz2e?|eAhfG$@QL|&|>iMUB?j|!xP4LwYm^rYsdNOm2~N>bswKQ
zVmNzZLIpu`dA&J}qJ?Wfin=RCn4P&TTA$tu@YlH)x`dNj+opkM?0PS>JhgSIYQ-=F
zRSl_u!g6waPKl;$7|updUABAC;I_FxGwmF+xLw`ljC~Us+*L-vSMl7Qc9#CErl3Gf
z@@RQwh1R$ran1$=WA!@1HS4O<(yzUXU%q6DQs?KlUN18ONsi5u-OL4wc5?E`_B1h*
z!xw-5bx@-P1xW}65{Zmvtx1RcMshuZ-a9|(NurRvjKbDPF1ET^L3Y9M!MO$bV*-3k
zLbj>NE?P3O_}|*L61K+1F}}WN#9M-b!YDJ?T4<^KUgpy^paL8kKvG8~Wih-*&s964
zrZ!DPM8v|%vVU-}b2h7^@~J#ORXQswJp3Uksk)3z+dqeg$A?=tZHbB1xtyauf39me
zr4kxnz10cQ{Xv8EjK?oo$y;Zxv=2P6u!14!y;V?fSOQr<P)PO;O8*05p)bXr<j*PW
z)+W5$SCkYKYpQF(eAn9AChM=Dtn7HUugA(d<*{Fe|M>A>$4-7MJ3OLhTbs`*Gl_Y)
z;lHsqXWJV#hcXKj8fK!0GV%BPXwp0E?1%wAvqtA|_<aEM#F7s+O|=H@Y=TWZOLuG+
zCnf}aO_zh7HOP)|9l$18Sy=$*H+$}}Y*oF|m#AYQ3%s|K%a-P$@U5k_@il}kDJRM!
zh1iG(4%ZF7zLY5a+$4OjTM~)sn3$}Znm*n9<dGrhOcsBvQElaY`C|{J0i@gxNfBkl
zuixa)pt2xQ$(Wf*z(7ly3b>7#{P>*)M~8=X1!~oHTgJXv$2Row#DOL14S$Li(`Du4
z)?z?B5ul6YABKDX{`$ylF1z}`j@WDjv<5cgb`xbr1ncX8tMhgGmD|&6w7b3WT;IMu
zbRh{5&5FZ}x#Oz6;@5bc6&KGU@!@BS2(VsQ&|ME~cLq|G3TNcEm$!cxx?g*po{Hfy
z4k|5w!66%8iC`1ZuGxv_GG({zk7BXCJv=<t{I?r{tDc0%S@w~5yEOt8mEV^~?V`aI
z0duNBb{m*pMHQ%zv<5uE_cpsDmPGM_iD?_0`ttJfMj|3Bz47^ZW{>wqFZz?4#l^+n
zzJ0su5UQ_Gmm@g3o@ZuCWtaKQ8tkv=g}!(3JE>w*L8<L;>~QLtm&fuS)>_Y7-+r4X
z623$K1aAeFJbds-Kv+;zLq$ay+8w`|S43cEVY{chw6wBz+dJ?T=UptUuqgv503=oz
zBY2rpR)?POG0v9Ct%!tY20rHScls9bfO*%(7OWS*gsrKGkyPQbyRb-{v#hq+r*agb
ztX?-xIS_sLaD-YebA9zT*v;Nh?-tE9uen5?JA`-IbkfBOmy+B<EwQ)9p`|tP_hcR%
zdVB`0{|?%%cN(0pIAy(hzU=5_+<QXHEH+3>%M~E$o9$^=I$3EUGu0i*#mS*(U{K1q
zb~mbqIG$*wPqXOHlDEx-ro4Ph#vGCq+O`L(p@CJ2^{S?hPPmuXDWqINZH0$7q>bMG
z^XJdbPSKh7Hu22dbls(Ll%29`T_YVG(FL7CUcMsO{F>=J&c|sxt+`6|Yvip%5d;Tk
zp9h&_?u%+FQA#CbDVd4e*ocZUxuVDps}@E<7o~2(<M0QG%lW~+;^?rnqrAM0xw*NM
z3W2HtnlscxLl+lyJ_l;*3W7#ltq@m%7=CJ9eINJ!cEFCBqJoU2wS8uFetxd4oh2BL
zwPSyXN{GdCJNkE9va$?I5%DR?$?=Q5v_7VTEqq$bEnHkV1ZShwl9g51>SVm4MIQ;z
z_*{0JA^|b4qM~9(W~ST=p0u5hLXLT6#73dva`XR6njLQ1NShgHi=mC>TavN_NODrW
zX_&K)$C<qkgDHSl(5$Jd$mU#TZK2%ZCnJODN+E63SX6|CtiZcWF;FKXoSZySu`@(d
zQdLcSlAm&h+uB+m9Pg)?b805=7zDpg5?b*H3WV{9r1o}O;}s44!}8zi$}$`}%i<Xv
z!^6Yv!GtT$E0Uq7ZjOTee${}45}X-^(Ix-6h|GX{r6k_NM{7J+S^R$!H!3YOI~Wtz
zZu)&{01H^N`D_ijlZ{*=uai^FCgwCFx1$*+dnI9v2NFS2{6PN$bsxRPtyT28@YHY!
zCP+x&P48o!_fkqID(W|%uALmWg%jS!$_`Ga2g1$QFPYe6q38~AKlNys5Bp$Y!6-5t
z7-*BhVOU^gW%WGVVfW9CNf`xY89DW#d}nNR^{1_?fvdh&{=7G<l6~!oUWn@}W)LnE
zz<T$$Q1L6(gxGMh>YHj(8XCN{ZL7EcVnyp^Vi<_!I^!Y{yDDXAo;Z~I1qJ4~loA;V
z!bg;pnJ+q1)6>Zwtb6<N{aY~p@smLXDv*fpc>VxMS+zIRW7BY?X_KNWk-K%@4LQ+l
z`nj}6lbe$!JTN#&!e;8w?}<hovK<5r^z591hL2Y+>Sktvs~T&@*iurr`lZ6l%Q4AI
zvyHNC?j#o#dGy{=pH@rX;WGd7S&Oqzudf|{z&x^>#W#n>9&SW{9q{swJ|JqH`Jw&m
zE0~&zv@E_F99Z&RH-;NFcxYaoauiBuak(PID$QqLzOE-GFRxHmR?coV^)8^}%g#^?
zyG6t3!@`mh*=0e>LJ0#I<dit*Y;l45SjOBY)MjJ&cGmI1_uhE+#0G~CkjZ@?_wO*O
zCKQJ{_u=Jg+dycFF5)-0{jq8N4F@$6GQ@cBX5!rN2<uMixAuhrI##-!sdU=OP6)pi
z@@TyNnk+T^RZ!iN;doRk!cq+Jt7}P*Ar#%0Og;Ya9(cstLx^oHEm>KaQ%By#ddQF<
z^LK8P{=3|ezR%f|(QKNI){j8-K}NlMcyJ`)KJ4`tCO(di)fpL&Py$T-GBPp_d2()k
z(rWpIV`P*K*KF9&l==CoIHC#(4IvwB2~jw$TN~f!fB2KV`=BzX&Sq^R&NuT@3Z+oz
z-6W2XXTrhgnbnzXgCl{7FW&I;>#Q_h(~Mn}L|30JcE~YkR6VJd$%FYG(5;1qsjBe<
zYQ{5#im9l+bC^(Iy2D8>qW#A0M*0m?gm~Ef@Kw|4?r!n@Kq|v8L)}*7;FTbxGd~!b
z+z@^Lp6WpDHDN!}mS1S-OX7&<6cmG_-}3Y0rKz|fxb@81U}xqiJo@-IE&+it@Et97
zV39MvJLr^gs!ec++1`-GU1OcuYx7`4xBRYf8|6p+zZu*&TKhM}2ytY10cc1<h-(dA
zchySs4AzNNg|4FNBB*lD!<IE`)(SF&`+AZ+vE@pAX@7JN%MXfu>q>3(K)Nn9kesap
z)tqLc42c=>^v|Cz|MrIw{{lT_Xz0!2pYr?k`zh2PWJ5|MZT9&m)4cqHeHi8E=2-b+
z5^AWaZIT%mE;Me24H~Q0Uz7Nzl0A?u%KBwQOobAk3r)Rdje}(~;)w8fVQM4t`H5Vz
z^i-Unqaa7Td2Uu#39?uPfL3Ba%X|Lr`3EEI?A=?@$<02>@8AFJU-lGvpTn3&)5)j}
zP&DKEl;kC)r4V=YoH3q=7#Jtx<_uBn@UVlD6PR(4GvidQz!H{IaIJb(W@wX5#>g1*
ziOp}&K%w|Y{_bkF0m==Q*Rev0udsrHx3`I5_Qs^YS%uGR07DTOB+>e@N2zpl^dlpz
zFz*JKWo#ZjH(g+ZwDa-$!-x3eyT5#7jc9hpQ+-QI0~#8Bz!iyxMbP3N@uVv}KAvAD
zue#c?K9c2G)lgpHe`f(?&sJ%JX#QTj8(Qoi7XOi;!l);i(W2&EZf@>q<24f0jJ4e4
z<msThg+h@cL%-~H52ufqlvHNn94y}KQdnoob8};3)0BYm(jG);pl|*LEncXtEl}2P
zlAu`*?VtHmgwH<+Rv8l3Pg-OB$zW*#+mnrK(^WCM0AluF=k+Ern2dRNxCX{0?@iu*
z>dT+`e4T*cWP4_0a2RIn1HW-fusN`?uz<XEu)CQC6Fz<YnNov3aLl15JaR@8p5O#Z
zMtVAV-s$NpbYrd>d)<~drI3<~%P%28kEf)xAWZ3Dl%0)_k1v-gVGmJZm^@m4UZYri
z*&Zl00BACUTGeaS#4tUC4&kRXxhpvB#Wel3j0_FC<2b_g$ylCy5hq-Y#rI5hP4c(M
ziHYR`0?9{62+lFx76}!pI2I8x)yc`OfM@!44~`RxzI^$Tk}`h>mjd0p2F&c?6cQ;Y
zp$!%U586V9FeP5&5+Rwzyq+o>`d+L9m*#3M<%?Z65BJxO)vHd_t$Ela+>b?-WPCAU
z*p&8B89|dJ4w6lviNH6NY~|Ksd38~ZLnbT}#Lb(?Fp$V$&B@s47m#x34T54$GsGbv
zpuByql;HoCtE~;zFwWEQnOCjB{j)qVk}EH%8I;-{7!CR^nAF>{&zQdJa!{{kvKjk$
zEZuZH!^3GV?J~8VLsNsgJ)RBANn1;qfgr-s_CS*6;~LVBi6vLb^KASO39vm?J=EC#
z<lmQ4<1Uo<RMV+^uznGWJ9%l_4IC3==#WcG!B)-9&3U{r8g+ktgO}HIqXyxG*re|B
z@(U*^KadtSAOiE8O^xN*emXo-N2@cQl6xOgQg;w%FL%qT0RJs4JZiH0oQ`F<dFY@m
z=r6rPi9vIF5*UFR^;Gp>_S1JK7RxLKk@Wg#qkAH+>srLwW;A4?t7ZLKM4aqMDIXlJ
zfhWb@eD-+1<}Lmn6xgY$DFodb!lLPGeK60EJ)JCUlxF%G6Z5uKI<djEEr?W#`bP&Y
zrGJ2+eI`C(>?=R!Pl5qa?;wQg50d&AfHTv_Gv;R1D)M0N|CIO2>onA--(`OyP?5r-
zkT#6s)%O*YK_`bBA7d&LAqI}Ml2wBsJ*x=6Q6rS)$<d<48-^(18?@^A3Po=@w*j{{
z1s(cA;<u0<Y~R$B<ZNYGHMP-}6>49(laF+elp!NSZT+OCKvhmoRk`ChUx)Gyn%R=x
zQi%%t!mmx!S9deBwNG7mB`PyARC=|D919(|d0oj%M~fxIdxU}?zwt$(?&#Qjk)y_t
z*q)gxvVJ)l(_=xe`iqLck_4HAyJ?Q%Z^!7t<mhx<wX)Jo)m(#lUAMQLdn84-zJ956
zNcA(Pos@6vPg>5E$qh}3i$8~)j>zxuMyX$j;~rg%hNt#_4HL1BAqgAO%5zfh+4V~8
zDl96%e`rO;>gFJOc01lvtXG$s*UfBg5X@JLx|O?rya0LO_qjV>w#S%pMunc`aIxp<
zANbawc0VEfmUKu(a6(CfqBmF4jR|(dGOqg>YrL-N`}bj35Vq;;%zE`uQb}0MKOp9a
zoRQI$0(uWjgTnU^0+#Faz>yt0k?}i|t+9}klY>B7OiWWxPkckd&=B);<Y9TGsAP4v
zfBNIE>28QTBox(KJ_gAJ8i?+Ny{Ni<QK*NYMulaRE8>`*iptOu(fwsxpBb{?bX3x+
z*Q~pQZb+lURD{t#n3yXjIu=kXytiGNJcyv(Q>w3rQ=40N_fO2k1n>lyGo?oVa18(R
zry()c<>YjNiVu^BB}-{%2EfbI)YQ&)JNgN)p=cJdd4Sw^S9txZj&jY10yHfSGI4zF
z!8cG~=^D=!_1lK*KjZV=&mv&Kt2d!ceZIFxUw4TgA)pc4n<B))(L<#~0kTaI!hUV5
zgg+zOe}yrIC$|XRVkW=TlnW`$$nIQX?#CLDS5l0Ol8;>c_DEMT;?avv58{Q^0fKYv
zzaO&+Bj9gska7rNY~Qy2K~VQ4)C7kH7Zd9RoQ;oj-0{;RCm&IuH@YB5;9v+TEXd9#
zA7(8&PI^)Ng1I2CXvwTYyWL@c%KrM_#e?*-zX+DCZ=cd*UyJeaynM<?8~({I_~v|y
z3!+O*?8^`{6I;36@BWv)B3Rln*j#NG@BIG#C`iBdSSCD<k87S8efD(J_~&oqE-&vW
zWT)OK+WBDz4u`4aKi{wNh~mVFob+2!hJRBb9*b{2ZsPuN^{<RKC~Q=}jLF;Eo0py5
z;$0SOuKQ=Cf4z^;{QiKrqv;@^g3(NG;<tauXJX{%Dn-}-eotlpV92)uKc%ZGizuty
zB#FAXNX-|YoM;+U5B*fE^O~n;!u{W0sshR!B#&bO_4ap3=^?6WnnY#!C@M~6(}bjV
zxln(l{rUHE?7p3+%2th5Q=gu3u;#dwK|84X`;+Z_`T$))LC-x6K)kna-CV|(QCKoI
zGGgw-Al9ipY`L|pTvT3MvZK}2BqyvISK++S%-u|kJn>5K`0u0Of%ho>1zW=NoUE))
zB9E@6m;KuvCPUQ)1&&LdEDpb<6<!|8c=e%id)-SSe$1l}*MBSDWF>5(*_ggdXXO@T
zhbBaJa$~TB1F%u_ONhl-u5(Dj!=)v_M(aly4=!fU%qXFw@9Q0p3=b2$v^p$K^@a3e
zqBx?yM6PCTd}Mwy6@Q?|E|23F-d3o-fK1F~<<q511rYTvQ1sf`S^{yG)9TP>q1pOX
zoRM7n$=Y<h4{*=0(XnRB&$X;X2@V43R9>CeTJV+^ZMT%Mm$gddn;C8>MLhaNl!U@1
z<kDSF>ZW#ZvK%iirVvRX<!ZE-J%smNvH!PS0+t<{%v|L(H$qsT?ZuWv_&-k!m83fV
zP&5DG7nE79QF3qd?f5cVuODwtz)C)T-^7FqL(F77iMcA}=jXbqsj@O%)QQIvG4Y(X
zxagqV94Rgy00_$wYSNeS=F)&qpJX7wLDWiCcd>cpCouf0YU~ydP~aWc*8Z_(L@hs7
z+xJ>soo78OJG-N=FTnq9S6^THuG3=Hp1i}z`3JCqa@9muNM2v@gR`tRk?ScBM}<!k
z+6^!+ncg9Oh>g$W&v<XD+Lecqab-XY*~a$BVs<|nF@E2`z`hm>Ycma2@=VNw3k#F8
zGA63cM*18qSoY8b+1~sF<*1CPRY`if!U8`qOslJTN=XfgxQjIP5#lZd>PJTkR*1YR
zfH1<!nprB(Qyq;z)!>5J4l~)(&5rFLuv@cgGhMk*y1oA?vfIU6KpR>`*^Am`+ly4}
zNWu1&%j5Gleql*)WFTgE8?~<PE_<`vb$>*d)TNP3Y?mD^9l2I;`3!2W7{v{qz?0}<
zU{dpbp*c^jx}-xp0Smg6&S&Xjr#D$)5`<2)mM2jYhl;U#f`QeL7#?qCq}ROc*&q24
zqIy6{V6!#x?a$ZO!jyOuRr0V+-kBc^B~D2dHsB;}v^|)(^r%&YRATi{IG0UI0UtJs
z`u~VU^$H03$gyKKV<pDLIc%+yqX&qI`q!SUHZSar@2{^LTL)ZAuJk|_FhrL3%GEzL
zihM;Af?{vHPVhEaLsBxbx>~Ou$F)Fxuil!Bhkj({$9T^)97$c!2L(O0ebM(9=5H2X
zU(XNyrJ7otXKHxb$Db`7LPFR>UT&ADuQ+PQxL#oqv3y5OV0V8?RwJ7;SgCo<VZ9<1
z%{e{Lp{(Cy^TV#Kdt82Nlj9&m(pg0Iddw16ZF<U}`};__7`xNj`aGv?=OL^ZPBsSu
znm<<MsI8}GCwE{?C3{}(;*e$Q46nX~K*!;y!z098<`+|r2kk+LukpgO)5M|*<ezfY
z1q5uQi9j8jI8g5_RTC#h4ltd}22bC+u^cA7O>g*H_&n|d)P|75n5E|_eN;>hr>dcm
z9*_Q}13~<HXtgx-V`WxtQr~q=Km3gR9;<q|HZ45J^Py!GhH|gCYO#pf)P#juoY&V0
z$_lbRt`^~diU!-atSBv8PJzeyNM>oD({}rVo|z!VV6Bwq^7x#|`opg3h1l-6mmG_q
zq}=R=*Klildc?<nRz@`v*jyXy8?V-s^JQi8nBLYqixs<hS#QNmb~W9gAtqKvef|F6
zvJJDb$W_x-ZzjkjGfU@pH+5w};@O8*XL$oOuGmEP3#%i>S?Q;krn5iT=sA9kcU<jz
z^Ut~*-QjwsI#wQlW;?X_j7$fC^%zpN3%a}WN>>=Ji_N==aE9Ejk5mc7mh0Bm*S%0?
zld|OsB@?!({XR|CIF)ogB(SMZdot604gu`QTskbiiSEbdZzK<ko3G!0kJYGlsCvb>
z{ilKc=BL#sJKOOAJ9S6vBed<=`^1yKMINbrI4ycJ6BV+gCz!z5&^6JSGS_KZ<^SCK
zPVv>o=v7GH3N;huejIm&T-ak-w0d0v!O8fFhPsBJoyRP>EX{tFH#+W|D7hel>l(@o
z%REezyDvX=C$N5F!yjR`FxN5gX!gN6tg(quybAT493L^!F%vmQ%`f=UA8R>a&v$uh
zX7|q3bsE{3-5}GqT>#N=yzWvV9U7lG_lVm?Yx0=h1b=|~Q;n`N!8Z41TwR?O#ieuK
zNm#g!uY~)RN(7$R`Q4)rQStg(lgq3e_&9jI+xC#8VzFjwmKRJiA?a!q@d??fOVwq9
zyg-e6etmxIl+#F8k|25N5)Gsh<1jvmXEP%Z?A}LB(&*dejcvE2(#yzGuKCr}R0KFr
zTIS}arZ00B_SU-9?~Ft&WrT!`1q9%@^nRY<RRJ!h@4;jI{3L)D*G<cusoGYMe_rz`
z{-)+b1%-9#B`XOCxFvfFZ#EbM?%)3~Zde6g^)}3%!@~%G{C9WT2)XF@{8m<1P*72k
zegB;l2j}OK)i`0w9Zbl!xLlo44)*reQ&jZnu1<Ms6p|t*f1K`}Zfkd}!)MLHTuMbp
z_fAq2OvWqkwk%lGV*o<TjgEcu<^>gPl>AN6BPcwuFfcAR`i>5TiMtO#&-_|-<<IJ4
zQoPu&_bhaDnq6&B6rS9B$KbVp=7KN}2=c48-JlR0fw1qCpELF6t6;|Fw!CNy+W0&F
zwRjc%ZK&Ld&?FYOJ!C+O#UFOwsxYUW1{1aCXA&?rI@zte^sKCpmu5mdGN=8Tth$`U
z=<XIL_gy`}fy#x2j}?#YtU+@`PEN5sTS>{l5E<m>$eoZ=6;)my<SZPr!S2GK_R2uZ
z@Et32N+PQz1jT(Oxs|}@4gg<aN*OFD(?%+1J^my;iK+DW_t)SNq=phZ=A?P=zq5cM
zsl*1BMaW^WIXWCBO&`3^GRdOD3+vpY;}p6C`m~3wxCY)66P)!<Cs=pxa01tk{*_)2
z5sr*(Vtl;oad&jp*ch+t`Ot;*?U__zscYwx-UJSHIXP%Tg>WUr#8S`p4(gk^xm;L#
zO2Y0(*WbN+Xm?fW*7aNc5=|nh{1P!3g>T7SW4z?6>2@@fS1r~aM7(!quv6^acu{7&
zRnsGv!MHitx^SY|nEdwX76Ye>sRFEA<O#|Amq$45*H@R<S?qtr;zuiUmZ92~F{n4x
zSdYG0=h7am^J-bdz$@&HXAUB^M3mhT6l}e^@rI|yo`k9Dnv%A`wy09VAG^wB?nQc}
zpXF7y5x#2Wj@!vrI@1b0U*pFf(%6P;eQ)WkQvD-)JO+o^19vTb<F|XOK75r&>s*|a
zlqY>he8tQ{cUaA+2`b_5z0$imTW5PR$j%qX<Ve?pOjaZJ`a0m@&QO^Kpw6|MQ7?`U
zMh7?i!y5R{E8}>rExS+0%L?o+&z0)GQCmNhc`CSTa&>whq(>S;#Bmxj>n^P;smp17
zJm}SNFn%{w0(*`8A=CbVU1mOGp#>QiYO-=VzT0I_$c(G|5+!Lp`MAarVsL-(=HLe=
zt7Bh=crNqV5}#%3tFEq<p6K3&Y{HZg=hLR&wI|z+EE^B~ucU}3Mex}%O-*%A2hh4^
z9CrdV-Ompu3;7(45CQ}aODj7dfxb(~VYZY*YUG}z{b1Zt*ZfCe!<pW39`)t<(Zy-=
z(qVR$<A!837d96qnGa?h&&koxpD9C>C%SqDQnAI~BSQ<yi@F*<{-B$fGrDr*zDh<`
zRY=?BOxEMD(-pR~T>HLPTHtU-#8cM%>(}e$`4A#zPYS2QT|O2kvW>J*j!@yXzcpS{
z>Csl@EZmK<Ep*JD`a=c;e_*@ST`FWitHw~cyN7WNk>O{K)n_P<Y9vxwskGJt1nCtO
ziU%A{Og+}G#l&KtsX9AnYB#svef&yXNvbg=C9ZSfL+V@poA`Si)R(kIp2byJU+A+7
z3TPN;(z@=nwPlbbs9RZ=2KcYD+hkBQj7cjibTp(@DTCHbQ`2VZ-RO(eC(P`^$2)j}
z99EXa-lwB|Wu*hp#{yM9-(20y6BkVftNCh-FP*$2#Ht2MAJ5#D64Hnr==b_<h72q8
z96$#vDyG=?LV{k)^^7jkYwbf!;aOQ=G#*}p3whv2F9Q?P+vTqy?giBqv}GeBDVkmo
z$wAEJ^qpaDQ1j1a6V@@7{2kXInVc3ZQe5JmFXj>Y7Z)yTw82-a6EWpM68agdqI667
zj`JAjEFWHbxZBx1vYoAVHCZj1J7l8a>>MhU`}pyN`b#!e=7Vattv!zHR4w?qF|a&O
zn-QO|EyBKAmq=C+6gKt7)A!a4cG7m)@G#LH-V4Dd#JuxY5dMYV$CZ^6G&7p6bv{YQ
zFI{CS13rr2WXF8n`HVUrsGFRWi1PFD`9FKMR6hR**dC`Nr_E)7&QQ=hjdL1NZ*q<e
z?3-*D!Z1ug$SWX&1dso$JfY!@xum3e{Hi}Yv1-59*g$Tsz;!C-4{oj;HMgTw&+kqS
z^ORb!5dz;=FbR7Ay^G^jV37NDGliVV@2h&3@elrI%YE?;wv*dtlPA)1!)pNqiO-0s
z7}fUKwv@xdHaFE8Yfpe^XL*vaT4cJ@KsM`su3TA=@Zgc$VvTd3HZYEC8dpf)@o!%k
zAg2d4US5r6h4S~tJ&@R2rf<Zab(fo|yR3Iy`RvHt8$Yw6WpOe{H$a?cw1!XdXq$x)
zv<gp?aSH28UNh;;x;4gJ@wi>Y<>un{pprGD$IM&VdDNeWT+|*Qk=1;gIqhQPeSdtM
z87BCh#Zvs^yHnB)cDa*G+J=LZT3vJfn3&_)Px0Lf0^af^mx=X(uk2?k9D8CdTvL9<
z{d(SUFT1wm@GH)i+qb_3x|uG(62m`?lNZ*vOFn!0l$!Uch=!*BccYglTYNO7IWJRv
z1qIq%_QxxS<0B(U_M3d^GjoYy(MksSOfj~E75(cH;-Y7(xH7Ax1dl=!h{U5_8X6=;
z&0g=ESg#23Jxl%W(3$oU4Ld$*Ghs#!rZ3LNB*}aO6W?Ftbi@lUKLU<YY8Nu$^~K2G
zPt(pr!G{mO?c0&;w<GAmnjAsAGf_OZVc`y6c1rZxWG31qI~&7XX<uVz@bEB;3RtRY
zb8>te%hL5M?X5{(>E2g=?0oNmsLau>w&z$-Z;GRssH7g=bvZllN2{{TkQSleA`8~f
zLahGnMuM3P*$gw>vsGmoL=w|65}%Thg@d7=ARFxfst*%G!?qTI-||WiA1%v0R+s)t
zYcgB|OI+5e8`F_lcWzBgM7+T}pQ#p61=xLW#D%De0>#Ze*B*rstWs(T{T+o5lUm75
zH9GB*Hm`^u5zyhcwhRZ}H0g|@r_YDUCprfDSZsvRh8&ftxwfDY>!nz9N!@`cR<nqh
z6dQY`f3Sa2UUf|l4I{hoVATE%VoQ?+79~eVj^*XZqwNs4wBVmMm{T_}%|uL4`omT^
zsHxYQJ|PdkVI+6O;YX(W)iWLcc1ELKz=Bi`eK1gB5v6}{^~IO=g%Z9e&uqR9|Ij$B
zwMDpnV-b(MM=B-5+M4%3rj#7z428|E!qk2#^-(sgD?WRYaOY5l6x<(DGPjbQ_qc&v
z&QeY_n7&z6SEuH*-e7NjvOb-eD%=k0&+{8M1O=~o${}cw{cvE^+Rd#Yi>+W)E-SAt
zke-f_acBq+rT?uu52XR6T?M|3cv~`U+gsw~G&X;ub%`kHItJyq`4of{28{5j8EEut
z*OERF$2T;tS?ovno_G!7ph!^BGB3>VH1@{Veyrx1U-$sZ{Z)@Jqsc*LrrGm9T?({(
z7qcgcq<ofkOF4-jJ}d|aKNfdSbUA!P=H`aNl@=R&kj;!YZZ4WjSjg6x^qSMv{L2T{
z#0~ol3F5>=P3R5UH>*<!<*ADT{QNS5x2HK7-ImnXt6W-rUA+K71u4*mxLtAV{_7Ry
zv!#v;7MYToS_>Q#{Dyw|J#l%NxnlS)x5hTV3bwYIdIQk&fo6#}IXU?ziQuzmB)oQH
z+}snxE$@X_8qX!DUT+T7I*Yui(;c+4Qyjce)~)bd9Ynv$>FFI6;r)wo+^Q_$e+&Oj
zu^NZ|cbcL`?IDEJg*12u?O(naR&dd97Hkh3B*G9oE0?yWL@*k-SY=MlKc9_jC@XVB
zE03407pUW^dj-23-hv>B)jJEqGVSZL>=X7ym>3N>#JDFL>wN4M<LSS8$t*AizXgWy
zz86Avb_^gve{Qkz6a^(Eq<w!MT{LnW_0&J$dQvy+EHKbN9p;ooZ{PkLzpwI$v*%Zj
zOI4fUx?M#`d9Ty~g>s^!BZ|Gt<@j62jkG-unCLlJvUDd+s=!QCGWhO?6tc9*MLns)
zRhImMUIA6rtY`9mK|y)Bx!0=>Si*u&?nOj?d(p4oKY&Nv?{f<chEES3K75Q%2tm~E
z(E2y;q`pp4WZ+d#r+-&mn1-?&cqorZRZnpa;kD6^PhhC&6H!-ho@gt`sNp1Irsrkw
zIlhIpGFONyCmW_V&HeMOr?_}G$*mbV8JTbFI@#16SXc~ilfnMwsNy7=Ka7H1F>N45
zYm(8cqNJoLs7d~w`})W@=`v_JEvxFw4MXM#cON-MCwQgP+^KE0hcYb!bPPfHc|6)+
z^HWv&D`R23oySU`r>BmP5Nf(gN@3eqEq{TvfV8~4vWkqzK6eK$!p1jpr8ec^KA9Gx
z$Ls<&5)D=FAJqBydi#j6K5bdSpsE=dmS&{J;R#Zb6Dv)ts?tzkd4^K*SJ7ktvHVmP
z{AGC{T!@Z#w6VFQL;-V60*`eJ>hbO-i`Jhem>!Ec4J<7o$`zEl)OH8M!ixH(ML(ru
zP!G$EI*e_ix@xnVjzv8Z;8%~Ye?3+72}|YCmN2`=(28HoX+jTJg#3Rps^?rs{ES$9
zjz~4F5yKncFW~3@9L<)LQ4`h`?p(Ox(^z3PQxpEVI?-LN{3_%+2%j%DW$pm4?&@Sn
zW$nlOLO5MFX~jK>YHekFluR3uhQYD1U76&sM#0n0*!A@n3jQPJ(+y%TpM8UGwlsfg
zd1*!N!}rL9rw@!vw;uPC2X%`NP=s+<MAXtd>%1Hps#UTl2xVHWw$7k;ay%ZpQ%cPN
zO6heUJ~#P~1$1;I44`Mg_g?V!z9x19{h4Nsi|z23@_yU5YX3A05WugRyyGl2XAtSS
z6IjJFOJVULeM?eRQ)5=h?rw}oj6%$uv?Y?UsqXi0@njvr8%O0Y*i&0|TTTpFrbzFH
zhxy*!?z4-HCJ<vF6i=)caPr@~BLYpfR_&UEaZ+LX?~X6OV~vVlb(ELA5EH%6bDNie
z*K*T~LosrhStF**vYGMC8*Tqh?){2C{(UodT<*<lS+E;w&E}4pS2(P^j50N3#*Ja&
z%FXlg(w!jnLdDuQR|(Z{;Z4lU&VKXK1`1idh}yqX<}#c?d=|2r?a2z@3SSIW)?IK{
zJVlB8bXsg{V=mkN5$3K`!D)?CQ+ZBgz_lAFmTNAhckmGv6C6c;j@AYi`OUrjSZ7L1
z+n`!|i*J$s6;TzzUon%YarA|gX)%r0*OliZUqa`+`dle1w;i?r0jIBT7q7K=-#go#
zv5o>yo-M&>W&8|^<)H4z3MQr>M9*afT683kVq^S*!^hhxz$=cAAN`mxwj?|fHmz^E
zWT~#7zI@_MHWJnrZo`ioF@?$^*v+i}g+x|r;NXWR_K?9H(Kw~Tt1ZaIa3wKrE3L~A
zk7jefx``m`ifUxF-*$mF3-wPmh>E1B*E?|Ak#BBKH}1Hv9Orv^-9i%{Aj^l33tcOf
z;6rp<a(33JD5b1yKUpQj{d9ZH6$bS+Rp0wO*iwCqX#$RNYpVl(yzJD0c9xdVS>}#L
zt*@=lbtot-y@->H=N!^gt>C8M>}>np3qe2Bd&MzE{;5JC132i^WAMxMR)n9CbF}u<
zll9zJ4+B3E@M0p_l~@YOgYtb&WqeV6gf0=-X^`IlQ370;5;DmFxw(gAc<-a}@p~Bx
zXmU~z@p0+|zm4?tjI@meM+Q5!8K2`VuK20!FySmoaFaA@Uf;OMYD-VQb#;j*yDR_x
z{nx0dzAMFol#;hicrW_o^&I_bGB$nGYV9{3;M;XIc+#g=&dte8Or$J#P|c~AI7p&#
z5l$$$U2pvzeTAX-#W(J+hn*2mt5Xq7mRc`d@whY3t7@WQtumXgzNSg!HWFVb4GoRf
zGfcA3N@{QW>>Co7^2=hbtJH4GaqNYryiHtc>gx8<kO4!%)sYE0=zdd^tXp>9U@X_$
zv~~&4)YYH#)}RTu|92K3i;LSVqhsJBEKqnQIK0o4ZtE>5$l^TwW`PM^weBMpJqCF!
zX~Xq0YhrtWy++;QbfHCIC>iPy1B=D>q1XyGKp0eXSO{6_>J*++v%F+OT$I|^*I7u@
z^pt(EsjVN}I%8u(H?yBW>?7Dpbo#{y^9oK6iDS$NO~e|x@Mbiw{JUW!R>%<D&KCOA
z+I_ddDOahlfZ0GiL;7k%fwU_YU!|U9Ol*h})+KHyJqCckzPf?!F1WYWZZYJwN^nPE
z-c_MYrouwG)_e<l4PP0L!D(oTY62ZzUZzT|9gXS8hMGU+qkQiV+Gk_05Z-p*AMJ2&
zUJQM3J3q>Vt2Q~rT!Z4|0(tH2C?zR<=Ew1#k&ct!j>qFZWmwclks2<Dr1Q;i`=6c`
zgLSMWk}9wN=}uoyJ~hIw!OZ9jTvd!U6<Xicx5bp;oCRobV2~gD`{gz^HPtV6m%}`V
z3R^5t=8B1_q6x3Gc#Y-Is9~G)L*x-qJmcfkR@KI)ru=&wz$w+E+|Qxq_9=^_6ATEP
z*S0n`=`G{^{bQY-6i?sSR0h3%vN}-?=L<^EyX(OYvZYoD$pRspD4QHlPcao0Q4n)2
zAZKPgpPU3aYNV*|FBZa>7?nzk^IJT-nT^i&76F8Z4yR?5>*@LVsf8Br!dF)ZIGCQ5
zm6Uw`l=0tvQvWUT*&7nc`}Co0=HP7#t4$6M3tRUd4oX_x0>exM?H%u*H;_?#zrWnr
zX=MM+cGQ4k*a!k;qspj@Hs6*u0XZU~!zcZ-*E6dxbygT1IDof4BWyaGmL|~G8^7GE
z`f>Hor`(wtGNIrYW_uEK1DH^K9sP)=zMP+v7sq43;OzlHO`CW*WnaJEOAh`B!}SNo
z5Om?JUfmsOpsz<jNGL2U=x2@`(fP@!2sD~|3zUNjAN<wL)lNbS=;`R>g|nD#Cjx=Z
zJ~b6*qEwI1VW<MCZ=oO(b#-<AqoR<juHIgBEGz;pJEDh!N>*UbsK<86(ag%_G8)uH
zNG7#H>TATdnDG6>y~WK%x{pc${(&sX{nZ7*%hzp3COpn38Fb%nuENg6f4>CXM@~bA
z*Ze|2w1tM2h6-WO5)^s3IWpP*Yqf2`OoLD28@Z#(+v$|{#M&P8DpHpPAB&_$y!^Pd
z#RwFPD7iVQ#=O#slHHS90W^`9#d`;ukIECzyDSJ{Fl(;Hl@2kXr1w~?k8|a#wi4@c
z+d{bQoft<-Ev}0NF$`Fl2qW&I`U>c#dEF&`c@)#PRaf^Jrr~npj(`4G+Ieh@?wF33
z#q3x0@m^o$GV(d?#E%9Oaapf-x1P+p@=#F)E{iVL$vm!yIUGh*oy3jVl1koc=arw^
z^}f{88i)I)F^Wb;<9oOU&PSVVRLf1t3kH%~tnAEtM;H!ULD=ce>Wy>fGrqKyX39EA
zg_>$=`@QFhat&)*7UvVR7`^c)qN0*;nY&%t@~BeX+qIZFjHlFyrl)Z2qKSRV#>@Rb
zr^3CM5zq6AmiDOyD}@u%R~36Z#F*z4Ei<Vvocd<S$~FVzF6Rc9a$!=nk-_JlJhDHH
z-8hsJ&QVRsei>PRxfU}ryFGrUq$|IfmJMxLz^XsWQO&Y7EyZ9IubCm+Z?iF)g#Lth
zt}C??Lk3%m@tWAdk2++{6!r-|s$bFBFON2s>1(%VFw$BadpEN+-S&R0vl6OS9P~d*
z{_ZxrEpf-MgRw{L*)%#PeOC+hL8ZAy>HY!s>QW+M<xuPW&L6PM;8icEa@xu`oX<=*
z7+g=U&keO5Wa^y$yF8wFfF2JLc%Z^g{DvBUNLjRzh2=$txN^-JA7?;udAW{-bh=K0
zWPI(=nvjgPHmu5ooM@2EL~LzGF3;_GxH-Xrq9iZx<&Emc@ZyEIm292v_oAXFQhnz2
z=XaBEo4vfoSoVnJZ2%C6v%I|hW+kKy)cxKD`f1cmt;55*5TDKIX<_vaJ$rhJX9H7Y
z0YuF!D@!7nk?@g1Y266!ZCSuIn0!V@^$P<VLsC3Y=TFDS7-g&=xn-x)va*<$I;fMI
zZDNc)T8TVk_hO~Ru=Cz6iAC1MeES9t>1LZ|Fjq}gSpq3r+hS~UBsVHGwNyGQJT49f
z+6vN7oNiJt4fFeAF*D;{N^>$X?Sq{E7_HPM)VRsx23Tk#A^<2P!!eoEo?FOJ?>;-*
zCv_O^4%+v#1H9AIQ!gJM*d3O`J`6yy_)NODN8IOrI*MQp<KW>rALX!5Zd0~WMFh%m
z)E|sfm#}ul;yQ@F>Y41ryc-D8@E9&p8Exj?Esn6tneciP1$lYW@{>bN@372gFH%&U
z93Kd?nR*5aa_!cgVN{q+i_g9<{}3YBF^D^#m6ektKVre)*_`ccIxoxf>L%+O$LO>m
z{a*KSD}hq_90@yq&N!!dW8?Mtipupg8l@$xYHU@)ujMzhEzF2B6=|xX?zXXMy(Q*u
znDDxT3&TI<A8gNiaHg;5%pa(h6uc^<p#FAMsElk$9yTJzeE7eGI=d!TFFyJ7H+7PA
zYi@sy2!i`>d6Bz<eGnZ7y?o>0V8a`4Q?9Q2F1&?%j}p^mrrOwM-co_;TP_wc=pMq7
zR<#>nsp)LHb`BS!7`jpO==otdhXtk#)wr(7@F11x<y<@K17X>vvor5~RPc@`u|7E)
zk2h=#o9NIhct(@<jgHaTjHf`|dGR@l0xaq`Cl`Z%eA)iqpF;kPeWh$t8cBUeo!Z)6
z+68lU?atc#tw{+byp*37wT_1&0a9rM&z-RXDlE)38g!Rvs}5dZRwRk{Ogq|{s<tm!
zu5`QeJ6#bDj*imP(1hj{J8@yZe8~ppwru<8x;;)+sfB+gz}DSErR_X?q(b<=%}!T>
z>^1Y<uVj>V8Uq7kpKZiAOdlf2w%VfK9TMQVK3b$=Nz)yS%kW)fd7P`E#LPXnx=)+u
zT=$lfxWN1{lyClEd%~ym2Wo$y)iUPE;9J$S{M6AY7x4r|$4*S|E>pt(2cvA8T{EZM
z-1wXd8Sdj_m9Qm&mCoT&J^xBGY+WH34iQXz-EXuGf?O(YFwlnqO?>Gm2n8Zs<T_gX
zaN&`?d2?IFK8j(QikR2!;&FU~Z2aNgo*_CBL4d0kPGTR>k?~)Bl!g>@W8)kfOq;ip
z;Em7GzP@smmvoGj&T>8}AdOd-tA_05Xy%mP7J9vRkat@Mc+EU;_%x&j^R-OY_6a^*
zS-iCcyj#y{`HlMIw80hB@{!-a;;f@PNqG{bbM{pbF&58j@EC&wuLuZY;HC}s^P{1s
zFE1%cHc@#f8}icBVfD4i{@!FQ=_95-tR-Q%qn(7>9F?O>(6X{j#~5zqfAzV;xJ7uB
zq98Q9Z^0ZhYQQWI5?nyb=k7i=hU4ig5xHIK)FUK1YiFt{oY;+nGawJq1{)TQ*X5Q&
z!4xa`$=!LT8E1xkrq5mVTS7c_ND}eaqL`FqzCAv$8F-YrHS^AC?C;}5xU9bzj!)G!
zMfyM!nJHW`r&PQAsG{&Q7xs`AM(1!zyl*J;_5JGVkn-%&T{#vq=G<!AiZF`5(?3wf
zDBH?m$3@xyAI{!7s;ahY`v$p0MG+MgX;EnbX=x;-OF=+DKuSubbE6W{(%s$Nr6SU>
z*>rbzH+&Plyr1WOzi*6pjBov+ZrQ9j*IH-HIgj75>&gB?<Cy_Qg{$fY(^61AdsSt)
zqcC~b{p;7S%g7|8c7UGMda0L}g@ulvAMp3Z%DEa~CO=$lAA0j7fqZ5r6rYQWOGHFu
zabe-$=t%Kx>z5en+Z}u^ZJ_-h96SU;vb=l(RjNF;&M$8^CMIcFvt@i-TG}Wt{0_xK
zsS!}eqS&TqXXT<_G4#Q#qZw%Q!T#ijFRn+&;*fAHFZN{O#WqFZI_vx13gosnWnuJ2
zp#q>{W1zp^z|gS1p@D+(;o}uKExoApVDkr@Q(bdQ`0KT?y_mzfXGK2ImDg8?5Ut-w
zdz+eK7+OReNZR<ES84WF-Fs?k&|9~DbT?Bn(kE<a4UYSg(^GM*)%n#b@LY9r<L-!Y
z6zg{<<>$Z~I3I`rFoF(Mi*A%f5@;s(OnbjN62?mf-GfjBa~p@#u}w)L)UhJtF}&yJ
zN=5O+D=R9*`M-oL=BB56czZ98R#$p>h=Y#k*|T@L$@7Cj>FMI?B)Ir{d2GZbb=^fC
zXc17qR!Cxu9rU1(5%*`>XG-BStJPuG6Z*WE7y}Aq#xp6YAWkZ@4r292>?_x`H6H3F
zQ@~u$+-1n9PFmMhg^=r)(sdc}PJbz)8+gQ`h|NP(a#`Lw^`TBo4!xQ+6iW^E-lniU
zFS*LfUb(x2hlh7sW2IOqYOBQEad1_m)m-@ddBPgDxE;90Hn$dXa`FT*7hV}q#Ey*c
zGUie&uuzmY_>m=+*`6L>44P2DZ2K}atR>8kVq`>YD;`!_uj%P|nxb=?&su<7EHcvG
zkCfMLZ`B-B=j-c_32Sn4lu(opjv`e^{glmAv5BxlSecr7k$DsnO;LG5=icpPL(jgn
za%!QWsXnCQ{P{CJHQYyC^+L>}ji|)zteo_in=6@(-};&2V)Rz{f1fK_cG8Or2J9Kh
zXsUX+#CQUwS(cVq(F0agW@9yMAEv4C@%uoN(%O10gPsRa74zuaVQy}EhUsbalJRmJ
zaD@Q>-<(k?)C2S7VC{2Nif0~x4roYHv_S2<ph^2im|h|j{8|fw^Y$29p66l$loC|z
z&7lJ!92YP!wzfo8!coGU#MkW$3;&!sEgi$R#+<96eWGU87nAcoyi3^rT2efj___hj
z<IeJ*(`LN;ub>9m9x?t}zGx&-tOK&vBEl{(R}mHy+gamx7MxpNUiKy71sn8Y{SH#Q
za)VB7!f}Wj4BqGR@JMiD4hRU?+S(HHzB>V6l!PAyJT?Y0GS`R7SSVURq5j+)Anuj+
zVz!E*-S2iXtVKj-)+ZhSdir8>P>JHXJrtmP!MgquHX)b;R_M0qSz20#n_oafY8SJ;
zAn2^Y3|Y+?u}h+&EE)(w#OrQ*drM~<(@Jbc*ssxAU3(q#`cLJe&G$y5E)|QVN2vre
zNSEF2f82%D)klD`3<bz*1L<8S&dx0QGJb??cCBIg5aZdLr_)gG$Bbsw;Ndqw-cVNV
z16>NNa2OfoGksw=aK|Bor>3<#U6G(u=&E8z3~wF#&-Z{z@W7=~42cd51WN#2;9-Ts
zbv@Q?ehw)UxKjXmMn39Hs-H=O>LKwNJkeM#%K{0h*(d-P#Yauwuq1i#z?@srDDoJ<
z?w^he0s`Lhc$GU&ZtgF_I!{nt9iuKHqPeQ*%bn68FOsQ?Nk9L68J@H~a{ooc?_5$)
zAR%$9xT@0zmzec#web^Y9<@@YH(~vMV*#ciP6Xt?topjU<uKbO-a*X-$RH`|T)u#>
zEBM5Ua}2za`wA{k8WNc_Y<ff6uR)@?GFq(&iAn&rE{^qY4r!y{nglQkvw0+g*QP#{
z^N`9`yc#{f1oGyvdD%Gf?i++gLoc^_SYMPoU=GGdEH*c91~dm$MJ2^~qAtufz5eft
zQe8}B5M>~rwp60@yS!@9$JSHhBsZZJ3SC+SMTZlLT0hidXxp+q_hQ28xPtZ#H=*i^
zKQ61wzb*>`wn$8it277K=K+%dW#P*H<TM#d$GiG}UOf2ISzqitLHo}P$M^S3z0!Z`
z+kgL5!-n=Ri3mOm(ETou{rh{_{~LRUR&-t@jMkwcB2q382b?L`oCA>P>?C>sSXj>@
zhvHnDT~DknSkeEH)%~j|f}_Q-{rOcHE4PmyZ~iG|l@PqtZxIHrWZw$i&<LUahK_*&
zrsjo3dAh&%J?_yN&qngPON$-8-$8g@m&#7g#OK*EMgIBs1=tAwmTX!$!#)IvK=6hZ
zm;J@_az;A%OK-3;GuN?P`CYLa;d(uOK_KFK>Ox$^b-;n484#7hH5U<hY{;vsavi!+
zmXut-@R9J(X?donQ8PYj_4B$S)<T4aW`cEo;1bvCq3?hGZK#e*tiY-L&-VY-N`HTd
zqy?eZ-w$X4ng7@3{rlbj>n}Rr0)5GcCpH{^&qSb7j0xXW-8<kOGltwJh^^edT^0Fv
zcX1<$VO~ENM8$7}qf<YH#5-;1UsEM$33EJi`Tlz9^V(mEw5+W054L|V6-|Kq?_QlT
z<vwL(&|Y^>%<zo-59lzCB+=PRn*poxF2z$c>^Ndw-DHQqO$i4_n#z9@VZu-3xg3Wc
z1f<-k)0vI`ps!%(KSkAyTazE1|1>2j>E%5+F(G0kGx&y2QAx!iqNCNHzj#3~)7jT|
zW?Vl<NlDp?8~MZ#CCQ@qIQtjyv3k+Aye*dd<!Owr{JGLN-UK;GY3a`w7(~;d<*B8i
zs|22Tg&QTafx*Yf(zWH0(%94LrM1|o2)pflk5dfH$Miexm1{ezUG6KZorw*e9sFxU
zxnx}qz~f%4*{gw$?r8I5kAHtZP&Q1d&|u@1Dn={IhpFC`z7U2#PbwOk1`nP-Bx0eX
zQ216)eH+?QHzO;Hnt>sulx}d+c@}({e7;;>LzOG8#qfqOs=)%re0ksF3N95h{pQHt
z7!DD;_X;24w5m9{zVm@t*lb~O;n8j-fHS!A7{&YuIp?ovzyJ4M8hoa1L?OEw7#I=^
zyyV&8#gY&;>jo(q=r5R9O<ghTf!Z!2CISH@R~HvzJ`020RstxAKHNx+9jGC`K9}gn
zU;ci{>ciW?Q;bVA_<AjDtgOAK`3#TlGc$4OuGO6AY0ER^cQ18yD9M3W)O>Gs<=Tk-
zG70i*b+~wAtyaG+!f~jNk%xJ)@OG@^BEo#2!1?H-3TL_X@v2M&PdL`XSm9i|V#7kA
zJ`Ty9nLdQsXo1NQ|1vd9KcR}@Ch;x8{d@C$V@gH_ZwqENDdlAwd`S!&U6S5J9NdmY
z<Rom4?a70HNhX?8sQPqZgOUE8+Wh$Zv#T*d0TM>9TS`n=EoqlW6ED&0oS|b_9ajeS
zeslE-HOQmX7ox^PNnE{hHT6B>V24ARKHIIZ^f<fpcy&awqp@moW+c<v?BC9B-1g__
zzSL8tr%yGEk~*#dkg`_}VrOz+L79@1lJhjw4+?(mSj?Z;R6b>ar;vo-sukE1NaR-y
z1>vKn)L3vA*!1d9?&t20eezxbZt%^Kh2y%Ya&yGdPN*N>zVrQ&?4eS8JUoY;nb2-J
zCMJI_12Zt*0tux9X)M+b_O|`*GN<|OvO4#fw6u8q+kwa|d<NC+u8!JsFV?0>5qW?A
zpksvq5ZgTaEI$S?E0a@uT+8`|rG=#>#Y=t-L)F%d6y3n00=&>zt4g8O@_wjEh3e?T
zB#`qFb6O2|HZ4?|)eh8}tx?4~?bbI3w?2q<Jgs*%p997<56G&_YEFD_&MkwRx%oSb
z{rx%|Wv7jUFeV+u!3qbhKK=?gD8Zx{s3n@R;Ko^LRT$hDiOmpNY19z|__SR0ts}Rc
zrMdRVqlOC0)~OV!=)+nvM1{@7Bwg+!8U`9ZhiU3a>wo({o=en832B}e=sdHjs}e4I
zeR`B!T1EbGhy`6$vi$Chg+q-q;|)M0NH7~*KUtFx4JgX`QDK+Z$JF*?f``52(*tqo
znw-wjs9zc5c`S5Bci$Hi+ZH#|W*EIe^G%XTHhCoC>h9WA8xs?4I$E_cAx5ScQDwD4
zNLy}xR07X0E|m<|yVv}#?O>U%R%)D{nVI;VmW~cgzJNZmzc&WDl>}e69tG{8Qfsq8
z&b`$ETwMIIT+OpUuyEtD`LY-vVd#7bhg7a$I8%9Tq|#~?)L?+hu(w*Nv0BNnpa4G}
zA|9K@s&aE`iqz2e`T3EhrYor8C3Sv&+rY1+j$pb3NCP2EY$<W^_)uUXqHy|878=eD
z4h|LEy)x<Sr`YMcy+czJOJX7-Bp8pjSB7fO5cD7AOiz~>6V&Q$UyUxARe{37@R@Dl
z(+8+1973Q2j%mI!Z!*h7oN3p478S9IyA~-e*ze87I)MRM?V@AwBF&>mZ_ay;@%ohb
zc=g(})d_L=XbbtzT8pucjd#cM`-sC+NiA`xs4H&~yyziw>zaSXnzFiqz<c00OO+^<
z@6o$tci%GLjP^OX`xagY+EP%FHyRdbDZ#KIo@Fc`U=jv}lwg>6Dap%&g@bMkn{8pI
zs2+|6@eA!8tRX416PH9fQUSVKbaZ?V-P7@LI5cp&-k`Oy5(u;qq*xLVdaODE%j(@)
zzkkb2djv~EeUAvLZ=gQ>6rT7FvZdZ5_#03xz|jHk&Dy57b%J&MMI2OA?w@odl+!EI
z(((!tCZSV%Z}DNdH=8JUei4f(-K9X!vx-rp>{|^m$A}-8a(%{*)0LUr=&W>gbIDs^
z8QAaBL^)!R(O;}b!dUaV5;rh_QaY+T-CW=PlKV%DOA@u&7k<hY7})TSaf~{2{rnjO
zJ7^b$#NGTD^!(YlWYe5azC<j)v$FEP9_L5Oxw*@|hWQU)+_%H!0hS`u-%}u)2`I|x
zW6a3h(-if0C?CLhcKeUQjMe&CiYxkdAZ23*m$OsG4S~8XnQ-)?&!2%p$>P^QM@zf8
zw?|KX!;zJUfM9QhTaH=kS>xw<=mf830@6j?kBIpA9;K)$r@D2-llOz!YJDs$UFms<
zv+q#Q8p;r@i}7V+Ds{LP!N|$!Pg39B{(W>*UQw|Sj8?v5oMmN6mAn!XDpV_tfjW4+
zbpWBbxncH9kX%PI2?H{xii(PjjZLl7$%3v1_!wxA4lVid_X3Pep<&l#=osFn6CVzE
z+jn8$G#M=0sKXgGt5Q9@7GxpmTWv7BR&#dxYiFsZ#@b2q<Vcf<gI&WTB!sf(f%r!{
zTH$Qr&IaQLfi}h#($cD|De0U+4id0z)7UAOAzPknk13yBQJ2@?vuXS)>Xxg_z)QqB
zx6PO>QSviX(3F2HD$01_CUCBKhet+Vl^8?0pVuA6l$VJ4@u#vA5uk@U-@a{$8G^sS
zbx;MMqgyYq)+nattggmzm}vxV@9fq*SEIwa(A*+IE+Q&A7)&>J;D9dD<m6Q9<%vbe
zX!fOJj+?U_a=1No9PI2n>+^V|qyhf^tMl`yM6p;1hUBGxEG#5)PyDce;%ttinU#^1
z%?^D6(<qW4zS@o1NIpJ3kizY)U6L!Zdwq6_C^6GNiU<n>s@&rQF9*@?jbBT-AjQr)
z(HWVfkgPd4q${cZqIdGfcw@32^!bq-*4HhExSw<{4du}Stdk*hDA`DPjN5u%7gp&6
z>D>O2!igQx9I`@+g+)m&8oq>Vo_E%NBp#&`5waVXK`K3$bOdTS7iM}HqQgV5E?>UU
zlV>R@Wx;A`@YeACT^X1UZ9it!+1>+R*=-J^-sLv6((5E#+s6l6f2Vz{fv6bIl$@OQ
zF9=!<1%>6cHKLn00dWZL+Ow>TjDVZ`2|g9DY9e@l6bY$jVfo_d=)`GL?kj3)mEGOb
zjg9LdUYDrrLMc$xA&KumVOlW_jd)+KedrfO9GJ&{V!Yu^#P8G|Rh~<)F5xk^P&fys
zteWZtVRpCi@S?y%e95eagxfSKJ9;D|x5m@gX9>ppnIHI!>U<xTZ2<cMquxAJ_JxKv
zIJp4TZ+odP)=mE1A{e)W*8F*SVq%vp|Ji*SzsoqOvU(9Y;HJC1-sk9`t)qSVveXGs
z4i7}V_Z?Rv^70;Qj&Wnjtb)A~q$(rXPezK3lvNkAht6ybXIp>i`<<@z)$(6lWzlPm
zdaQN7OM!I``gV~0FZEP%(0BVHtTEl)6t2<pwldZpe^}}@QO&u&y9-jw<Ny~J;lC@b
z2w6jP3mF+J&{~auuY+WV;;h=*thTka?5<y1I>j{Gr_Q`84RJ`*Sy`n-MqV0HRA9hc
z1dfY5fG9#6rrcaFimw_;KKoK!QnD~)9Ty$V+xFJBd{`5KfyU!FIC;&YYqo97@$7T5
z>r5|wB$Y2&Y-D81uA^?#BuJ-C1}fO7pG+4g=OVTzE?J)(&wt(sRt~xRk3%dGhuLsN
zwpkp%eXmqW_z~IJ-e*_?hwi-q%?w`nVRNwN{KA6#OerX%KO6)k@zBvN?e)~Qg>&!y
zOjktJb-AxkHwAiPUG*d8E;$>I_ulqS52OkX31RlUa{022?RN)dj=oI3zCDQT^$Z=I
zSdSUK*^lHfJ1%rQ%B{`z^^vt%ina!}Qb!S9@&Sm-v$C>y>{pMgozcWDxnJCx4gR8N
z?_pMRdN`Y{=I%#&)!_!KZF5j*2;)^89GyRJJ6ha9(19HNb$1;T6C*=Ilh?2B5)j-W
zWvI9^*w|Pm8w(0GapO-?uF1(bX1sSUcdv<>z5E*s5cMHEk0*hgd%=z{M6nH*QmWeV
z$PTKDspd|Oa8fh?6#E$yyYl@MZ4cSq`Hm8FURX9Dk*^m4O}#id`Rj`*#x($mzFF$*
z?Oi~A|K8mlrRTONhIx`;Fk5K!Cpi<=>*9WcZ{VxR47p2WpP9YUfZ!~R!iyIWWEF>E
z4{K=|07872J3c<d5xI%wx;(Xy_r}mLJTR~;&r**RtX?iJCKo+|>WjgOK~%_T%Fo6|
zSfy2IT)n$#VDJ{p(jqDL&i+HzpTKG$B5+oUE1>)x9)z!h=DEV*{fPpPOI~{Zq9t#2
z=Zx|f_Zt^@9Gi_XfYbW$;m=MGJ5<9HM<h^amf-AMxh!of0R<j6$jFwKmw%Now9!&G
z_H}ioqJhg74;PnqciIL81r9E*kkAyYIXodNj{$DK;!ioTzd;vB#>U2Gtb@1n%rqz`
zRb_!i9OP*#8Wfa;p`Qlwc~n%|%KC+vtkXADWod8Q2mD>S#)(T9eG(EA>n~jsfT$g*
zA0yr(WbY*RdXPvtW&D%(<q}?11RE#atn?8HNe`KrV3h0aE%^*fw9L#(PfrOAjq5|1
zI$|9lVBR=z0F(sb#nOMhht8joBHHBo?*s$@jJi^7zo-1-1=M#}BhGRx0IDaJPokwo
zE-ycUs>U<Jtk6J+0y|RI#^y_^KEAl2ghT*9(O_717n_@$oE$36g|J^<HSpCcEf$#U
zw*T3ncWE*-r1{%%o*#@*w*<Xy@`Ejyhd>=a=aY+V*e&I+7=ruaZKLtA2Axf_J3BGA
zyG()be!j(ADMI&Qk5juTNNY1nQ~30nlG?Lag7=c?%q=j>`V&d{{Y3*u38R01=l5rU
z^O(qgHiO%+i2l!~xEJT@;=h}-Qv5O8b+m7RNEC|cF>7aU=k3eg|6*Uj9m-Z-%Spyc
z^!<Bsn5&y$o<}^`e-8G_Q+KyCHF^5^<)l&ndDjG(E_|%;_05T{mV|YawgcYz_c0>I
zA*Mn{9L@Xu#q+v4vNyWP<c_}&Zg7XoB?ZHfD=OvlTdpEK2w0n(2SAXNFNe64lwVM!
z{``aHT>oeOJT$X_7Ksi=jvJ7E2T4ibc5m76EWSn?%!6A1p9=~KA_i44<4n3xsGC?j
zKkCT-4EO6lsXtr2-$<%6F1mz`w%*Fd=-k`gowObPp}M)b8T6Bwao7-}vj`Uka8p)Q
zRZ@}*x<TEwYtoQ6{kIMNpl^Q1s9v!|j3YZcC$<it2pllk&tl_O603`VNt2fLMcZJ|
zp1_%1N=>XZ?{Vy(=B9|pFy?B7iyK!_Wc__)#7$lydtoM4UF0&~H6;6$f8N?G-aEe+
z&bK=M6E35{6DVBaQ}k>=E0TpCw+JV3;=}oO&Nt^&@p!a|0Pg0syUteN=~$7H;<o$d
zf9_|@9oGv6q<&%(BpAq;P7%Dp!2fwnY*foUuO($<c&5b0S0_5&1&OWmeO4FBw}Y6#
z&WjNca`n2Z%vdqF2wy>Y7W~*uh(dk3_V2zUgyJELhBjWFn$V0(IP{k2WpD`I?b%tq
zlwZ$-LgjZGzj^tzOkL^jW-GF^*v`hz9`^bWfW<szWR&-BXG|>|k2YvvEPE0W;UY8&
zuSF5>1?+e?WLR!`gL2pNnayx~A!)Ebuoc%8*D!plCt`@c^`_|BqwTh+tpb(@WdA%5
z3T8(0LyBBJOw7EclHPQ|68nMqRmnc|a>JYToPS?5RuO0*vn+^V2@ECX=p^YFi^ZEe
zSy{;lYO9EgTlRQuw!Zu?Eq}$imjAJr;Y~+Lj+%<c?5tk|MKJ~VDxUZg;|7O@YZ<Ny
z97&mepoRzfeDe_mpvnIs^0(cP>(&U8Mc5i%c@K%il-_no<#0BUOR*3P+Vpm32oHlZ
zDxMHNt$};K<@@AlD((sNe|NW8Y=>sj-_n+sN@w}z$W3?byN@6mnnYYeGfTmef|9}=
z`wl;JxA@C3|D*k<9_7oeNhV6}*qG3|#v}6Uj#7o_uf+(}Yjs*NF%<;?lgC-Dtw9e(
z2@Fc(uSHmq55u#6z9GN#V#f_^hbQRETg&#Lg0fK4cTV}>raq*0WN2oTlKi40AfaH9
z6z)Tk9p!DHDdN`0oHw3%_5Ipb*H2}|Qp@+5)b!FGJ`6MtsF2D?NkuUjV^+J%)f{XL
zbZrT?&R@3G;b5zW=P%p&cFzy13ybxU&%Ep=^N|eoNpQ*=qFoE4{?hWIq9RC)Z13!Z
zQ>A2Q^8!5V{nRhuD}qNkM5*2DY$HmwnZU9PfN<B)1kCTgtN?o@a>o!4rK{P*7?OLG
z?$70C79u&R8iZNa@#GJqLW9F^5bSPu=?mf}i+5c^8b6j0th}-EtcaWG_o<-W^V$S=
zq@wcg+GdD5)-I~D1oNA{tm3xjYSVcoC8V4mlFq?L%pgKo9w-E+u9TM?u(eiSv9T3T
zPfvS#0y!U$ad!V)ya=AlEZL&q#dm8CT!DTFcADovf~;+7W1a#7E$%L4DL#hqsg4>5
zLsJ@+k`^TpA}HgL{p^g~xUwV;5#ID!v=WkqLERTby*jT!3wE|rC(~aabTtsWwIX9E
z|L=Ig8aIumT8H{#VxGuKAzAn1Sw$Q6;xit*m5JAPMB7aK>!5J}#E5rCv-|@E6;%T`
zT&$0OH=k_<M7fcQilmcBCLP?3@}s@AE=e=9HJFwLhla9bd!#%o1RcyTOeCcGoSOGu
zVF=i#>KKQ{gnbi8G`LL=KEy^UU_|s%gzxfeJUt_w<cthLT%z242+<9;%j`N?ud&=q
zF?thqYlza6vqMI<cz!%C>sMT%f?^a;<=>IzYx;{pXT3mO_E+r7GkVB6SFR7oKgeol
z27(QJolXvC=H|%w9Lh2zwhhuR<U`_4{&CyrQ+ObT!E_r6I6SQ(ih@r<&sERH!2wC2
zMMxV}0I1T)C=%qCv#sIa%B@xBwlm-P8S^f$oyFPd35UsGH*nfDs_jk==3<MBi}9GQ
zk#Kc4HKnJd%nlYC0S}hd&=Y{ozGVC{K@YifAr(Q)_O=_q?rA@CTS5*F4^>~jeDdVU
z@yXs8WWq-(EE7Ez=jV}Sux7h?^CqjiVv1D!P5q7-5?ow!Xz7iqhOQ!m_%ykDH{{qy
zfWRB^vA_Q%*3SV7fDnRS*wVp)rwzh2s^E1GG|q7RU^uDZ;2yA`zw3-2ARv_1JTs@O
z+f4Mjj*MRvNCY)jU8R}`2}b3dLw`d@?vm`OjWYAu+W5wAISjsF&ne~`qo<0SeP7Xt
zNLBrIa>0--@<s%>YrF^wZq6isvOf69wdEM&Q;u!){^5`&qh|STi)<z<Yj=ZmR13B7
z>2RpizNu?XK8s`Ivry&#ASUo~->%0wLH>%vv}BEYtcR^w6}gEia<)JaJ~MOMdlPB=
zh3sP*anXa$)rW)WSj>M$MKqhJfFb8QGwptZc6y|24gO?!k_b@lkcI47B!0)MJy8MO
zDOk^ItFQ;^!gScUKkuV-ER7r7gIgERs}GVxgSHf;#7XehpsEL(ko60u6Yv9H{1E+y
zcWJD~F_J4yhR`(uoiA2asDKTGp#cRtgl?afA-$@QCf$^q#C{k`;th~H$p{Y7VP;F9
zAeFshNUnn@J1{N?`5c}kw*qrANxZ8H0;1rH4X<tIH$dH-o+jvPq<iJFDHcgzVVgNm
zkFTz-vSO*RU<-Wb2u2<&=19Niq?l^G>cJo=XC-Uo%yoXZ+>lTBxhwtAU%es*@4iy4
ziYJO<54(1+kuZ-pkk!17FkB9s*zU6t=PgPwuxwh&Ofiw8uDwWg_;~HLKJHC|x-Ym}
z?=~W$YTpe=7HVikOm+ASnUGZUNXDw^4G?+VVF;@)vS)VM?n*Xqi0~{bNcj0<IIIQ#
zdU#}bFVX9ku}s5KExdIQ4b!(u6NogOTvWKa%P|;jkg5%RTiij47aLz|b1+>bF^tuN
zk7oE?9uILmulw=Uu{G`~PH5F7CIaQPE;5k*3MyWc#z4OI>=R$0Pp(!``G8?0@erU@
z(89NF+;}&Sj0Yv9=VuB>n#;Qz8|5Enu<9#;9%x+I5p+Q@_g+4T{F=T62`f5Cb#4KJ
z9#~iKI<=>CNH@2(0;C~F8Xc&t{W<EDV7?+nQxY1AFVb}9&K*`|V>IbA)FW{}ScDns
z=$M}#AHYga!9_aI3jA2dBUdCBb|GqPsF!vMgefB<quF|)$gqUDCGEzz3D^3*ZaRj>
z(1Dhw{JLN-_e(g7dvk}eX*!ER?-4mihNz#N7LH3tX8e-gSD(pV*Qnh^Y^%^_xOXJh
zh;N|h%R2=P@McAIB%&KMPP-h@@i~gkKA-Pe1{O;)IyK#JrBPx^ifA=DRARqHo@9on
z$1nAs#-&ik1@QMe$c~8NnE3gYu^7$b*%|%?GSmd79_?gOUHy=-cA&8cn!c{Izy>Rc
zTLO!5p*}dWbe>9~RW%nZqZK%_`DJ6-$;o$P1iqz;BMau2mR5&1QnP(}I{2N+4@1rR
zDGmW6V}v+kctG)U2_>%>=+3m47mu+(LEj$iB}QG65)jTpX|KumYd4zLh_**G({yzB
ztUWqSRh0!e2G(n@h@Zr9s689;!f)er)V5Yq?eDEcq|!fAOv09MCC70fY=4~Hqt@5q
zkUv>{yiDEPrfWLvmKpJ@!hCCZlOq)A`_y&nm+x!$qWlt`5AV38BSKt5o{c_YO32mw
zFWSPfXh@p)z(6^aaNc2$R!~40nx*$y@27>fM^z_1<Au}^)IwfNyw)}{W?-EV?FkcL
z=UMarjZFa4Q+sEamcs%QCr*X%j_9Uca0<2E)D|K!$kT};8;0LPM)x`<CMFLrFCFt~
znAz{|+pw^(G@-#mV=VUeE$vBWdip?Pk++YCyr8l1qoV+YHSk^#MGr{7(HsXWB2c$-
zJ00(bYS?*55X$Bclm|-%`J_^K32X@zGfnP*GNEt(m_PL4!WK5u8|3<r$xOqLrUPMG
z1_oY>eLPEtgC1FKE7CY$KmMcH(>7gJ7>aM8i3>k{elor>C0cc~ixQC>4QF<oX!QT=
zj)N=WX{3x8OB4$&-x}LrjMVHs-dzFJX4<;n7$Oc`1F@B8J*IikBxcqY&5}Lw{FgUr
ziNVCOa;Vc|i=WRkCO+?x8d-g2ZUfn05<wW7HO<8cKyr|RB*fxQHP4aL>qffVYQ(~3
z57a*?Ot^?|-MR(*B6T9N*#63~yNqi~V~$${56EWxa49?VS)Q_ECx!aB2mI-QT5t`X
z2emjk30PPx`w-Q1=j#rwMov;PmKYBO$M~lwLIHeYJws<!c%Y6B?x>x$>*vq(Ge_S0
z7rsqksI84w@_%Ucj*1#ibU%yFi@9$jB;+XS5V!`I4Fk8i+A4?9s0CwZN%4*R2iyjA
zAfsCH4DIL?;`a6yE=8iK%@`57TfORICwYf67g^?7V-AlZq&>uGa6SpnwIix0uEDLc
zT<z{`>oHvY#KFQ`_~y?uxj8@2Wo&>Ld<h;H7MvfkbN$FpLiOwqTPcbj6$ux;V%GP-
zQg%88r9fStf0q)BlO>h;{_#~53Uc!D8@(%)l@=RutA(k%r~7sILDpTaSc{}g4#>4y
zM<K;G?nwavW>N#v36HgNj_dv?mn=)|LWd>^3D<C$)!Xf~c-GcjeuPLLCjeXQcISVv
zD*jg|TXV7tCXjNTVY+%qK#XD#b6I?WCF!pCfr&t2n^9gH@7%sC(XK;(Z(&TTV~N?_
z2R%|^+M6#fE+vf@$Hh7OxKY3m<%pyE<_*jzkxf+=OT>76ARcMjIst0ZUDteU&1ZfI
z<MXJ`z+EwF{7Nn^E)LK%KvWTMTNzJHp@w@snfzvB>5X4*U46#os3+Nfoi>RrDlDuK
zt?Kdf^5ew}iSTNLF4PGI=|6mz2a1nw=voCSpH{0_bm;A^MlTd5S5z$SM%&BeB*eNQ
zQ-?ntuu#g{ANc0-pGe0%nN2ptrDllYHEIs%8`V)PadAo7cX<fRmC(74H%qCZVt&z_
zj<X5DCiod(Oab}p?_E>*YVsN}{5n%(XL)Q{Do1;px?TgKX=Y>PM?0mp1$Fx))nlb*
zewBN`8)&dGF;Ul3+I1&G)U%2NTv4zNG`tsoTO?CbL-RI6uIi$i5TWkO-Z5EHQp(DJ
zy|ARDVxE^Q$&Q<cr>A<QDT}4W(qa>3RUoCWxP;8fd|+<+(H}{4=;?gQINyEd*}#q(
zU14Rqt^uNO8aAtcwbX@4?`$VNsXXr)bxbfM;j}yK-zfCnuUTM-=A|yKwcm4cazbw-
zdSGfGsO}(NSW%%j;zr;7RPD_~Kq(zv<{Q&j%_q7!Z$CPpEiRG0(VshfRSUBAFF+eb
z-M%W33{$eFLK@Xp=G~3tMXzd)OP<a?f(%-HX;zkZFHWT=^<r?TFjhhYu&3{CY!T5Y
zr2dTBeRFPeDhQFx=0(lggWaQ^qP3m1KBL*FK7bcG)Gz(&zhaI!9BalILu_SR^AoY?
z^~20A_h8sgw`o`=#*~B`JL$3AoG*5}sbjd_+tX7e5$@aPi%EJx0+1nf)ppa<geG;M
zTw%etO3mrqo5zaEdo0Cc=i}J)3u)X!6vQV<Dj2px^p;om9(I-u3lfhF;s}RO_nFiZ
z0?8e3LbkUsqYiqiudA!_@^~*(Z4vSqW-6wV(20sBPfbqV?KIJJ3n+<SV2wOwV`hdh
zkp55X&yAT$08WLuGUSX+93EeZP?Nw0x!FK63kQe(Re~F4hY(@wy&ADWEa+@E3%$Y=
z4joKrY7Z6zn*x8mR8w)-ZQ?#VGF$=j+3ASw_;L7&hzLbw>FV*AEaEQVd}jI;01q@c
zJwp{&v?%8cyi`-@2XrCeq?wpbB!j()j`D6_(5ywniffaSJ_XJajH3{@r=z7?^)P>P
z1?!)MwLrg7?abgHeZ6MW(!=PznwO=!?%UJjaEzS8L;bZ(lS#+w$u8@flS4&MT|*zo
z(}BvM{Fut|VzV>(1uaw;8Q&#lHa4(C=nmq)m>W<G!aaeB-0gLSc3&s~Hnx6lL0maI
zG90xK$j`Ag@v`XGvT-(PZ|p{%lSC%lPd}`$><;rlQj<5rfr>X{v}nz9qx1)+0*Mp9
zbf>cxqoR0Jr9_Wg;?vTe=u=(Fct}U*j?%XhJn#HA^$d5`h*r4!-7b!O@%1>e+=-1W
zU4Hw<gHYcfZOw8aO)gFPwr}kAI+Nef=>QQf5hKB@XP@Pu<-%n1w~vnP(X|RMUs}ws
zH#s@lR~;PwFjeQiedi9UwQFV(#E70#`fXuSV<TI0o=zX9Uz_Q_)qWIyUNUPCNvMZ>
z2Jx&IqUKtR2-~U?Y^-RC^1>%E?6lHNZ<9V=w`EYT5I$HgGVJ>F=@a-{P;0NkdJBf<
z$cvXSF@1?S3lL|g;0yy*DG-ze9f+Q4QbNKf%FaYF9EMOeD3#Q-dH!R!87O91SxFie
zPLgx|u=3xerGXlmVera?psXd#OanGSyv@Y~ru9kaX=(~G3vV?vM&~;d!Bs<w4Tp@6
zhnrjNR&nk4^vIO=H9`#mww~ZuG0Ty0G}=03wJEu&EpBeFa?+wNHB*OzVrEYB^sz&K
z95&+krJP*Rte-TntcAp+Ds5Y2nJZwjCTMP6h<x0MvFGh`t+2rSR-l5LpPjfJEx$u4
zfbg@-OXItZwtkIy`(P&@L9bwb`UyXI)LXl%D%akERM`9o*fPGv!+NGGDjFK(X0OF1
zFMF3cj#8RQB>(R7#s(K@8Dw{*k$QTR-cQVu*~Cc*!m-q;ePo{{yoy<w-Li!$Ej%H~
zLrO{t9D?C9t&@~r#$2&qzrIpZVqkq|u&Ria+VSdsuJT(|Fqmm+RPA}5mP!TI4vDs}
zh5hb7=60GicBq;!vG&Xxz<zpEcbk#Sw#(B?mY7@1H#qsgJCxF7cwJIX?xk1gm*f2{
zGCZ=eYW&7_9IXeI9uO9lh@z6Y%WLqOtT`opIy6=Zo3z^uh#{qG!<Ocb%Ntej+Ogso
zW1XG4Ybw1^W@_s`KJif=I!=cN#+h~DTEtEDY_Y>@XzNjOABd32O)3L5T5i1R*{Rpw
zob{*PWS-Q=K}nY2pGbbDaXMm&Z`}j#12B?FxUHgK?VKtT4c=OQB;3DZG!#nx{A3}g
zhfl96jA3JIo9}mI6b>ll(JI?6s2Cj`J%x1-o>1XT5J?vv&6B$<de<EBQI9v@#u3OV
zD<e*J`tTVwT1Um(XlZE59go=CCbCotliX9iBSU;oqnUJmLA1&6v7O2bS49;x8>w@#
zYLwEra_)f5;<l@bc_;&7u28)ar#k<5%B)sXdPY)H?cGlE22{IBhUU&r&o0ax$Uk)4
z8Eli~Q-!P?<Q=0p%k^iyo1V|lIO^1=u7%wtf{yBNq<npMQ<+f4HKA#G`ng1`VOVFP
zd+(Cu!d5`NIamJxvbYp*EVFZDwZ<<oX3E_#!R^8huXD84T6Z<d5Wp%NW=Ea+DM=&o
zZb?HE!KSgH{(ee$*$lRhnY0oY-!3xSSMRiY0)^;iqDBH+cu*9V!}PXYDSwN_Mu2s0
zjJjq7pFe|!6Lhc>-#L=;8;%y~7bTa%mG&V6r+0Pj;8I9X5Xvp?Tg0Z~nA)6r6v=c?
ztiQjmj!x64$;jn!qEH3B@J!X?XH6Xz7DZz=j`7ji#T`3CAVmFOzLhQ~DH#}&Y@M3}
z-Be1kV~c91de3hisv;Li{(G`00z#srCAo3bzkN;WU|!*VXK`HSuU-L;y6<Xhcx#Ur
zsRp+O8q}E+$Y_HLWnaaiYwO_l<_uLCb&y9esZytKs^-;pt_uGd=43@tq^u}?H0L=F
zi0HM~;5PH=ecjYuO8@-OgtsuBWk>hHf?je*7QCi`RI<#Ish8Ou9^X5%sj#btVr!@4
z4Y8&cxqSDn@M!uGFB0`l(BOpLG7+_SK%_~HCm}f9-`@{DHF7oI*t;M-{VU{byGs_u
z5*QIt;dEjLqHRD85N@uHR0e2({afOdeA&1`u!c(FVPrIe|6t|x>`qS9U(jkCL!7mt
zee=pFcql8GrWO=SRhSFw8XFtDp?u3D(-KIIUfr6N>X5ja+!3<Gv6`h;8;k|Aps8=8
zZRs93Wv_Z#lpUxeQ-0Vo*4n-s3)v5|e_nR>E#C*RX7I#gtk0ASSW>2X|L6|vtzMKU
zEqv;9s2g1z>{>fU@loIgE)oCP3<pu~yTjJ{@vmRJgCMJ&Vmf%drn!VTJ<1)U=6D78
z9SG8RJD^JA3c~MoQLD-qRZQ<>Q`2=LdueEBjr&`E3>Q^YP_ocP3cmE5($U7fdvUmI
zLCh;pZ>QAW>NGecMx0LZFfgijy>INa0;bZ`Pfu6f$Gp5m#uV|)Wuur8OS5cr{AbP@
zr{(YM_Y?KF2ota?toKrux8JD?x!aXu_I16RLM;ZDX8;)2Ff7U&N&^!1`1Vo!0u~ci
zsP2nHC0UMh*~*64$gdoxhfR^l62$KE@Wxz#NWvYK65|nR{KxZ0G8+_c(IW_&e**63
z*JxZdtaRuRxiT^`Aam6sOUSb%YC|2Cj-4F$^&nQqwya;SW7E@P56-C}A1a&g{U?k9
zW)kx}j)xX7-kjUNbYT15$FMwncm0H@X7zEGR1lk*EI}imz1%GU7L!p35z{oLphdJN
zgLftn>UWn1KD&<;>-aG<0|>NY9XUOYiFr;bt`R_0aRyZF;MrZJRhpSPbEHk=S1pwG
ztM?xmK#_Bv?HF6!watxSLlZlF{BQnOl%Qhg?)vyg&A`uBSY0rcNVQI-aa8=|(uBwi
zC@B0!;-Qe?`xmG1jhFEyC3li7jRk3OUE5PAe*q0HU@oOsD0JRMa3zYke1ehN(5ix#
zmR8gaGsu$m#4z)JY1uN#Sv!%XzE_;SQ4{I*s`zap?QD1;N?}%J3f8(_o)UNmJy&%n
zeT)eWu{lhuUsS`&b*<*0`$t8fuP-~cQf}upUfy^M-1|O{*_m70TJ#y4nWgFFQ=L9v
zFrz*^))GlezcT+RXIp#ofTzOgTMokW2na|s*)M0>y&c6mP{Tj}O)U-Hg1GwLvBO>6
zm!%W2%At%onyR31^RsSdFgX2>yseF7GhduzF0NWew6BXu-O1ImIYZ84ad7kzI`xap
zB6NCkL;ugV$K)<1!vlr-kagyI+f5D8L)#e$EBW(b2&f6Xe=9AW9OM69Luo4}O-b(F
z)M%?+CrjqW&{u-aczJbII~^J#U4Ng{4pd-DoZNTOkVsdho7vR13oP+*`;*qze`5hi
zWV3o)j=X%zv>q;@N)&Cr+l(j2jriAxt&M|an@W~iTJm**7rXTD+iJ(N+DblGQpiew
z@QCJl(IzFEG3%?t-E|a-+4cd-7}*Lr3hn^66e}xY=+Ay{1gad)dZdWUTK4|2v54u$
zo0w>ED>SX%EX5y8P0>ygn2HOUB)tqA!V;n$J}~#14x^rRou0#AZ?mptl2vw6N{LS|
zzlAY>Cvl)rc{K8i)x*K)e<QYEMVfHP|3PzBdZ85dLOwu$X8fl!anT2Z+nt_o9r8Z4
z+VBeLNSlz%y5bSvs##b=gs0N6P>9FHYrWB`=TT(EfTabCH#3q!m>aSb|K=zf6F>tQ
z9<CV@Qg>cw|22>}At&8bPp1Lcy{ZN?NZPj_8V4gXhKnvs+F!zqN!VYP<9(n*M5QcE
zLcZ1ADQt*3->-MT|7)+f#47p@UY?$C?gm5!lNY>~E8f|j3!|>_XwQrbFR)}2Uvy_|
z7oW(yYNGyXs;=&?4J~a;%l)-6mXf>z$VlX*C;z0%r;W?WN_xUi$3m`P7#V35(_C<2
z(Eo3HB=!uQ=fRVqTCw@dE?b_3^-AvpUM6&D!6gEMNY#PoLDQXY4ST<oH^sZL$27*p
z7C=r-x7c~(TBm7ZhC*aCvYpi8Po8%@2vW8n8hKYf{5z*SlHeEyN!fAE`)|F38X6mi
z+q(xTA%I+VuQn?wsUjo5mg$|XgC&?X#OLIE)RLCg)ld}<T;Xd8ie48OL$#Hg_f3b*
z2P6n$#?eF!a)s<(57xbSJ_$eHB9frdU%aTF+qx+rRGE^IAz{yqvF;Gx7<~F0f1Y3B
z!=@>%7~G<-aSi6c!7~&f!RHizdOP`ID{iCo^&aND`SDr*(CF~s2nBhiX0*opa($1P
zOOY(B?b2QX=gNlj%~OurnSqWDvN3hiNMuf@NKjQ359YY7@Wv7@WuAbRwxLrBvcI>f
zP|{FbUdz-J%;-gIRoEC_Rj-#pM<T5*q$Vb&sVSsbNlit=*?LKq<e%UBmHV0?{Z0<k
zCo(Sn1RPHxxqan2n!!IJp0<Ya+o{kiq1YckE}6T+`n-$>Q^UB};x<^mBxL2Waxif-
zeE!n}&a-mc<Su}wg4BP|Bq*96qpe&DZJD|H4<2t9Un?3KbzITC&!_+1X*3&cPfTP|
zUY;CW3{;^NK!%iO7#rIpirQ{=YvG5uiY@2g_wPKxo=bqv`k)4<0tjL1>d_x~4@03Q
zV4hk0#f#hOPtwz~|5o-xGCbW#1Fh|gQ1#@bHf9{j#Jj&o1a{QobNFD>OH12)@xpP|
z?`sz@oJWhiUI+<!o8EKn2ammo>j4*6#h<r{`pSPRTJ#yIxX-Dwe=hldl@iz!qHlx4
zJ4joc9l)6R;ziq#J0*Yi!NbH=l=7dN1Nb8AB|m2jGy@5!#|UkJ0^{>ru<r7|ODfQ$
z-$5q+w*1YfY{hI03^AgjdN!2g=id`3M3S?TJnNcZC3)Tz&juj|6O2$p$1*515qSFl
zUm$Z{O7V9?(jvi|?mt@*7U1Ci^9k+$RL}gkv?k$X1U)<P!Ssf3p*jrOa&mBc>!>|4
zGu1wP0H-SX>hmNVh!kJGY&_p(5gy6S^bh5<v}MO*#*m6*>*=vrZuosL0sF4g3-j?p
z?%`o~6<1p)kOah3yu2rq^<Lny(i#~5rChVt2~-DISFYsrwE&pu$B#)6JD)eXfERM&
zhF^z%oXC8btZPSZMwalOMn<j{)uKhvUcFX@INCK?gsPL}q0%vcb>I;9ckqP6gKIKW
z0*tWcsFZzReWJy=J};M@id#AmUCOJ-I1iu0?X^ngjk$V)e<?I5Xc*W>y;&+CXNGes
z)N8A;UNZ#_BoyANl^Ca>S6D18j*kQK&p#;0;%JwiFy@epn;Vj>U$URV@)^_wkjA`n
zWdlkTtKM&kDrnyit}H7<eg)kH1l*yV1$EO7+_QjV0>0{ism#^fi|0zu8%;`AmH4%?
z%q4fJXL-sz8*5Gy&WrJJQPswD-u2%nIhdIGo;Y`#J1+UkKM9(JN-tiZYVm~j7P>fS
zX%}0=yS$$`LKfOwPHw#33;*JU@B16LHar>*4pAN+>HhvVxhsGPR#9R1;lnL%F69@&
zT*k)6V8};EBE1t89||kNAmP#HsUU%DjsO**kR_CH`Knjg1%e*O9W3r4Uu^K$GYP;8
z@H!OnSz2Nru4|#Gy3}+Y?vOp!o~E8H7xh}0o*vGUS6zq}F;B?MY$;;q%CMaq*;_Dc
z?SC(|bOXyZn<@J`$ui`2Td0Mm)bh$JUEuye*>e|V@oP;Jd`)7#+1aUIvPC5&dgu2g
zj^r%@y~x7R&d%=Sa7Pxp?={Ah&GGSjhl#fczbL#Wi#3{<m;k0JK0{P$+(3JKPFdL#
zHn#fCPLJ%5?Ht<L2?JCFp5Wo7Nvw8hq!z)?%e%7pVl5#-+bUp^%U+|#fr*mRjS`G+
zIHBYXOn~eH?{tJYNl0K>Dq@4=pw@Pa5-JUxeIiTt$8cs#wo?yrDP>ekwR8$aAy!;f
zQo`PKUohVEox#Jd!<cu1npv-kw|6+gcNc!97phlS>BM--@|_$P-qw7=T?zW@PT%i5
zsh}qUT}S`}4jrH8bhNIKeqW+K<E+QR64CK~7h|eS?AZ36(po0R9Y$MMdNO{e$?PE~
z_v>UsRk}x&YmNf$xUINQ5eA-WufRbkPpghV*M7=Jw+Ih$QhYFcAX(?`C%0PU?d_f3
zE{YkK$UGR~eSvW7ljqtk$n(^m)a>>~SN7$M@!2j$fxTr{0uJ>>{vb&6n~m1Au)4ny
zzm33$6WboNkBH3#nM{LkEFtq7>g=~EB6zVwoMXhRoEw%fnxmlwWt^M@_$Q2lQnGgA
zSEN}@x$*8Yn64K?6d`!KwWUSB63iM79Gnu$c(E0rgAWPOGd30+0qBk~8WeHB^G6dO
z;@y4<<MtP3qb58W;gF0#vG5&%d?+q>U!H;YsV|cC%GIkN9t-EOm4IjkO^F_cDVp;y
zz^<2<RgBbF7M?kOl=33(ueBZw@@ONR>AD>YW$a97*Sc!YoXu)9ik(JOF@)-FYi7NP
zVbImg387<WPm!eBg8)~(n159vq#xLfc8O;_s<+zh$;rP%hAxUzXE3M<SFb&aWxTWU
zba!Q_D^*(KaPSt^2;b?n;;ct!vNhKuf4)5V5b?m2Ys9QJgWcj#4HCw0#!fH4BrTZ|
zUO2nGoQ(8q{nPAg)n{6|A|hj>piQ1H*cwC32gGOWH<+9Jr?Crm&t@09%O&3k|8ys-
zBEs8tw$0%!_InDA?3|j#JBltncO_p80(=(p$l10?_{S>^jZ*``GdAS+sg0$@y9?8y
z%mxxs=?^F=MWv<N097w^=?I0owHu?m(D~v;IqHD|N9ARQ&blSe+qZ!?8N3_|7)y{9
zREq}!_C&qX3UF*?6%{qdn}SW)eNcLJ7rZ_EI(mQ{ARG21U2E+7XZPdn7Bf0N%>{do
z*L^W37LHz6mM%Yl<}=6m@|i2I-EM-G)4`54bPSL%+ooyoePTN7Qp@fcQEzQ-K32Jg
zJh>E~+M)4!O`F?p`Js9^xBV$9Kv^R(6k^r!5o?G1FH5x^P~6<nbN&z#tm$OAa+saT
zS8CviDs-Gkz;FA76x-uL;dQ8&5#PnzU2EqR75%l`dbYon8#FRpHe<cM&ID!A?ktE-
zN#?_^@pb*3hV6Z4<(+G*j)Vc#-{mN+oDB4QN%`4y7cENGPjL9`Y$qnM5he+@3wHgm
zFMJeWcBt-Q2K5&I*`Zp6;9(km+k~{{+0pkgr!#(b<peBEwZmT_*=KUDMXK}nKUSHL
zo3#_=?AobGtEt)VMDVZfA9UH>rCf57J-ju57=N5yF=JL;7XlO2;LMuc^7lum;LJcu
zS*@$qtApIuqYkuMml9VM_1niP%-5!5`HaH+dxk`3@7#G_`#JGJ^|4Xc>=u3wQuhk&
z0&UGfh1QEA)ew3_<m}sq_7PN1^Q$|am#tSu#S(K>Dm9>RSsjBlc59Zt4F86(Vp6)<
z&?#eE>zG<er=E600Oy(cY&*B*A&-d|?VCu9ka8m?pVd~@ofeJ0yPWppsAMyT)B4bW
zkAB3w1J(98yU}c>$3M+#jy@`pNK1}Nv6r){WGXr4Z;g={bC5hUJ~pcBHe?jX5$Nml
zBj)Q)mQ-E@8+7jXo2{9-)qHl_VP2tCr2n{zTY1-Vm{mH=4Eph(BtTUSg{I>UeOq?Y
zEv~_V>eT#H){ZdFqy7y=NbTI^{J^Sq-%ORc`fw3tR(s&->y^e$N9UEZ&B44L*)j@{
z@*f{Ri@EvTZ3;nV<*4pp5Aj-$UJx&U6)59iaeGYV6H^Br>nYR_;@HJQ6R|~7J+_eS
z;XzY<WYBiDwPxC+rXV<a=Z(1472C?de}eZ94p8J2B*dgo^2`Ri8yNPRj<0Evu9Q0M
zT`*jn{M>W~4$36l?<<<TeA`Bp7kGQ7E6YZk4WCHxV)v1*ST4J-kS(1CIrKLlmwnyK
zZ)M%*G2WjLC5rf!pusu<41)gh<hJd5FD)*4w91ZvqgphlwLca@vr-1cKmO$}z9Jhx
z>?&VUCT@FGahl?4Ze4<Gjo+d(%FW?XU+?X`R1%XwpO%xnx9XcWsu+T>V*M-;W#<!q
zxKT3UReLb~n%O5!Ur#xAu)bD(k!`^TXYW^aHE;iL{!-bDQO%QZv0?&MUY_@PORNSP
zi!HIF64B)!{8HpB(!&;`P8Y6c?6$Coc+clYfnR<0i2>q=J@*4HY-JgHw)0LsJD!)X
z#WgS%!k+#z8>XMBj!r_+0gA>V6`h}-pY-$RPe_#n-ekM0ew&C$$87DjnHd@B&Cz!j
zgrU{S5fteUxw$KIa@e`J4%?%LmdC2?t;uHk{9KnUzNxFK+HK9YfkF@S(k08a(P(ru
z11wjXP)7Cb-3n%48#Hki{^Qp{#`abUq~l@obsZ>-9w;gNQx_1$S8iIT36m&`jTT6K
zG&jF(PP+1O55wRt?ISumY%Dtg`HS55>j#326dUZx9BdA|Jw~f5PRgA|aL$fABp?Z<
zqM*R+xR`{nHZIM}J6;IwL6{vIb$=lb`r>%Bg0rJH9w@8)QbnyJ<^UB?fAtQ%#t%wL
zygN{*)*f?$`i^nrba=qgtmz^+qH9)Nz3Fwk+Rn<y+uLTZ8mB*;?8&=#78cz_G`OIk
z;Zxt>d~i5Cjm(l1JyYS~a&*cW%cJ==hWNQoehFt;^K6dN)+D=Ni^Y1^8-}Qz(@SJ9
z$oSnXZp__4d50674L`PSmpY7!rRZ@shCb;%>Wx+LGdUTF^qFOqF86DTYtz$Gk)N}_
zUYK{Z-}5G7$;gXy{-AF=Bsdzy@oHtKWH6yVcfG7iO9<1cW-?G&LuK&sBT_!?pOtHm
z&h``cLTgS_BJIU!59X&j0Nk7+9lpKczNUD6mBCI4{Q;Q6aK7DMlGGfiF=+t=hJHu5
zm`+<5pX;Yc;GTr!<V~<kNJ^718OuQj{Ntke7-DZFU6B&Cm=N&o+YxhSf=J{ks<kH*
z;b?!rybwXeaCJo)k91|YTxW8hX`5cE6Q>fhwXN;N^B3;dNd>;ofOf}haJz3k{xh}E
zn+H_kxXC}1HPjCmsK~&1!Y_bQ;@ixMs?S<0tEHnOhOPbh?cA0kv%I!(q$e9Y)Ah^i
z`eQ1fS36y3Sj)Au?~L&02$VLJ_5lCRlM=f&d^+XM;nB)DDyQ+EI@Dn;&t&y~@@FPQ
zS<fT2U?O*VnE8T<sndHudk=s@npN+dnx{8lEkow8&r}%*@-MknhlW1H{`$>3At88g
zS|UGcR3CzK<I+m$=<znBIPK3cBCu_{0z7unJs%||;Jvle{^8;QQ&q%HaDDCRW|!w}
zx&cFZY|50BWi&g;{Z97YPFqLtpGqwpyKLxqdU+D1Z>5qU)+;_hE#>Lncl$M@UCNSp
zJ`<BpgEx=W^y3+CH&MTnJfYb;L0^||F<Vm^Zuh3hl2&LpFbIO%@HYKbW`3cEM=SIG
z;7BPQTDz0;#-`%cQ+yDU@w^+EBkW3>UCrF~HQiKyWj51Ilsv)1`pRCXLHaenF?auv
zVq<%wts?8@|MX#YGx)J1)k|Vs*x1<d<;ge|_SPr!xI(k3IT00y9gui`J2NNbevO)u
zj)><?SQT_;o}P=#xi}QAqZ(TUOVx!#)E={$Mjm&pHcFo=@18yBX|?aOR^-FeY@dF&
z-D*s2aJsY;)1+lx#`969Lq7b97NUB9j*-`?b*Z*HQ$<~E3{~9crd)X#eQe*(;f_@h
zfC$%(BwppV_)fc+X{60!J~PVQ00zU^M)ER;tuKz!zAjo2J*FU^KU~`qA>V0KK1)s4
zDcfipbw|8n-EAAAuK&G~7)-J{yCG;>J@0Vu{{2sa#9W>;TL%_`0`5tW4l^EGUw<bN
z3+tl?r$&gW+Rg`w_i2~`tR6R|YQ5)cOxIx?4W0=WN}}!y+W|5d8ulhML+WNZDYCIl
zHtRP)1VHuCLPAkV=@%LrD-`Ip4h+o9`Yc)a_{jVa^ZvSVuM85lmWZsTrlx^Hdu53a
z5~=O#cQ^ExBgPPt;^H}3SwYuqkM}z}b%b%y6FaDzh1;X<@RIHHP<UCb9F}GjFf;JA
zH#e)QtA8$V3kc9|j$3FR{z@*ysPV*lC4!^ptm~|X?BVH+z!<KJ3S&+ux237MXcv<g
z6b+OHHW6nhR8-uNg0k!;K=vTxwsVPHi>??Pgpx0+Id{L^giJRoS>n_xy$1dvK+*II
z!u0S=bne5#=g<Un(%4eVma!sI5QjxZ2hS`Fh|d!0%()9Dpq<%Ao{h4a9@nYeH2g(v
z;OptlV>=lJ^+wy&Abc|_Q+>EPT*GGmtLW!X;fmg{pfGA%YJ!Ulp$zJA>*qn0gs{kJ
zk<y8huN-sO%Kr~-Zyi<T+J$>Bw<1caC@Ek7f^;KD2ny0I($XE$9V#HLba$t;w1Bj9
zw{(Ma!#9_{?(?2A&NyF;@vT4B*jre^^V~7-Ij{M<9IJB$Z{E)}qzhkMTomn*Z+I1r
zwKf(W7G^VB5x5yU1{G~T4(^MEZ24l5v$IX&Cr<jqU%YHbO~(o&OR-F(2;Zzn4fMx`
zgnZRFBW)m^iX}9CD8jH@K~>4zZHqhhjGTpeJ1c1}b`W2lT-CBchv2F9wRO40uGrK&
zhqD(oWwz$pX8eoha{9DAOVIt9N*SM()R@RIP*>-!`ppw3Rg|h<Jlq;*X14ZXgNRUY
zGH+n6lcvWUJB8bej`rZDdKW&p%eMwUB2)grso&Urq2JLG-AYkL;kyw0VD{|fpa<c6
zyqkIyQv4w~Iaj=y<Thz7oHyV=6GGzAJLcx*I96(+@f~|9SsL=`Qm<dzy}77)_Wr7@
zhLu=xst5Uc1-Ov|B)DHZlICIaQjeDYvc6Zk?+q}r1zKTtl|ieviIxB!HsLthy|HeM
zhn;cU;#^hvo5Vi0j(b640i~6Px7sshA3--yzS^E?iiE>v$Vbqqk6AAzq~{B5QjLZH
z{h{2I*KK>lGr5249aHORN>D=JyBG9bn}fM0k(PJ|8(iPjZUlWgB6u)jW<c$FcwXsx
zULHUkfpzm@vMQEoSCz|_0Zo6fMr2d}#bjgeihn)jm;I`0I^NSS+%A6m?1G)q?+kXe
zBJEFizD#>X>kIfUh_Yy{q1+kOqB2d>&~{moNm5l-7GkuLmhRDucM%)9nCr-Whmora
zf~!?j7Z9+NJ35HIRr5?OTC%;$r6Bgz^0X@|%V%wllAGD6X0)NbDZDJdt?Ok*URJ_J
zQcN*w_yMkN>Nw}NS7x=}X5lwc$2Omxjkw7iEq#ZB{)O$CQ@5Q9!jX@<UF8SEl(jqe
zhXQWTr^S!$78I0ZcfYh6dH9en!ooZ&vVsdU+R|`htUngtqVM7qE4&5=nSOL*%k=0f
zcSz&dGi483Yzu9NZq^u9BQ~7}R^5`#^H#sw_LIKx0}R6(hx{6*kkbu(%Kn~6j<*kD
z`G8m5bMs62Q3J;DwoVVT4G8VCv)aI0Zg+b-38&VR)y`3!fYorfH#NWSzBTym9_=jR
zBisZ#qPP{5l}{Q1c@j71R4eUmR>T-Zsx_8E;+Xy^<>KK9yG40il_Zs*5y2n1e879E
zZK~0etq?y}X4>2O<e>y*Sk-n^YN(D?@lu|kNNY-dfHV__W2cHR7h<>7z|c@oR$Cpw
z;QEG!B5E?%>TRT6%2A%*yJLMDH!Cw+TBOkUXe<QF$WUMEV{)6b9jg9D^1i&KWg*Hx
ztRu<UnLQ=kA||Jss705%O9YrLeZPD;UPtstlll}l`McW9&>FO`K4NcfTrW6XT9MD+
zyf}E68#Y;e0yNKRH9HuZ2P2E>Qr}gm!lF;U#C`YxjJT>CzX#aL%F2;r{LrE~9n-F|
z?#I#g*|>ze($?j4*(aNaeRJwS{i0b3jc%3JxHI`l;tN>?g>;>CqilsLXEL0m2+wso
zn#Y=4f&ql$u4`oah$xd~w0V<<k#q9oJFEHAg%IC03i4L@hJ|tR&;^t-R8AGr>dOzw
ziRQ)1$;kl;qb)k)ee&%7y7I_<ElPuu;v{0v&m~5zHO!($Us0Ko(C-K}`w=W!uCD-u
zcuHyiYF`X%-`t>f&sHn=n=kqN;~4sm-!)3ORQhJr(R}-q1aK#=z2<aJy}}GC9ZpJ;
zRM+JP4pwqxl{mfUW}2EJ;bU4!$tQd3n=>;G8*2pYwg*+?<HN7ZFR^%(0y#B;N$2rH
zmo^WphK{{7a#=$Wv~{22YD1%Fmu{4f^_ptO;f;tT%J!?`$}b_96?*=hp<`}o={6n_
zb@@c};AQ6^2HFQZ!6Hif`Yq9BRf3xb<vX~>W9OUQbr<9l5K5#RC@<S~5Sh`XyRw@c
z2TS|)9t=Esbf(d+yR}Wx-_p$VaL<0Y#VfivNhn)-;h+&5%3nF{Z-r;qq)CdlWtJIF
zekZwLk5NV;82cJET<-MtLAZ0Pf&vbqvb0ch9sOSXmU~>LiSD~4A`uVjiZ*#=Sp~)Y
zsn`?pqsSnvIKFC)`B0q~GX+`8>TE@Mc{F;wSN)C03vZE5QVLwwPJd1?Rv~L^-`ZeC
zC$6f6nYeLMnMB6C;OfGTl;w3(aQh>a%5C{bIj#8A@;jnQjXHum1t^bF`<`%;2N&aX
zB;l0up1&SzS%MrbyXp9iYghJ6)zUcWRX8L?pErLE;;5WX0Y2&ZnJp@&tg5Q4qGBEF
z=sG`!x7^(iiW=)SCb=sq3t3p0+B(~UNCYda@3loQF-2F6QYLaZF6_2^PNsCzeQyjI
zCsNmQ>z?+Vr6j@^s?YA<3_1lzy0GJ}eG}gEO|Hm03-j{>{c^HZ^|~XwJ&!lj&q8?o
z2)F_$p4;Q1Fp@fN6ZGAM;<HBLeOU@#8=`Qj)3H;*1+PIdLqoK_5MX_vE$EkkpayQ+
zG1wK<?vOaE`w_5K0a;?=faep7AdTXBaX&bOvv`HQdWBhrqH1c)vB(7btXU(Z`XqVJ
ze^r{*B;6^qU)?`<cI?4mDZG7j1kIMI@2~DsIoxJvx0+ZSjpMG&Q>h^<GAk;To|PZy
zGgs8FjNmcUb;pm!mo*>J=4N^%A}>tX$i&2!W-xGK5w7o~XW9#`=YjD~?~|qrdznOt
zA{Tz7yi*RIoUq+IAHrZHR**XEtVst;yeY?nT-a+Wha%{biWE5TrGp>h?g}P+52mwt
z{aUHwYenw{x6}8RD`~5ees_V9&oUgzjO~gFS|e&m6i8nc@s5j)HSs%*&PiQ-WkDOC
zhnNWBRR9m~C<~<tgDdNDdxVmXzwUjKW*ZfQP`|=y`2q2zUfqe}t*-K&g|RWNmn8PI
zJIv1=YD3TGp1Pba!E|*!T^^zeZepEuvUwP%t!{!T$#MS$&v;7fY0bT2&E+l#>wH7A
z^<yt;jujTJ-`1u`eSvzhCn&khPs<&gNoqE>wYBv9Q}pAkar&;?-O3-O7YMLrKYh;7
z(!Ot>sr4o-{_`8{^#@c`)ITz5@(-;`Rqcg;Hz#(NmNc^^M0;WF&c`OOJxQucWBy(%
zLt{|r2@)94NF-cCMHLbdXh7M~y{KNMKR%gXB!$zCKas*k3gD2UOrnxy(>vp0IeD)c
z(`Y1GY0YIYZV+=hII1RwKcy>6s(MO86T(wRAs$zMQ|r5MUR>N#oddg>O8V;{6B758
zi}i!%yxtz68L(pyui2uA{n6K0uIjii8b|ONd!Bwd<idOQr}xZt#*UjeNz%;T4Ch}U
z1Y@|&Myqnwl=Cnbz4G>HRf>lfN9A9v@V-68&&AclQ!v}4#$0^*;Au?IL&!)@HwcO7
zI`wDt7(3?E)2rMjC2gK$pD<Sjl&pQW>S%Mk6B`_Jqc-Ht%-X&}VT4Hi17xeAbA?9f
z6zyS6*}-(rORc}T0KihLg0D)ohLclXhx(UKCbpWBRVa{lQZf@Jni7OMT}W&}GP|05
zaJ$9M!d}5F#TV*NCM@r(OG@7|JzB9`A5D6Z4;7pqncDN?=)I_4VS|UA<0&~bJtZG(
zC!H_8du#1Ecu&zE`y<D05lG6raJc;f_HT@O86=8`M)Tx-!o|VK1p^+oZH6~Le>&Q3
z%7EG2&G2?;bxW!V5t5x69`-VduGi$=ddNcV<h<!e%pQkj2wio4{{AbfpJl#x#$M!{
zZX4~}oAM`icXX&u7XPz}y1P0R&lUrBr_!<c<kGoZL}X~IT1<ld#`aRCEvS71BqTg%
z76nDh&>qODsnMNm-60`K%T90S*(-o_Z(@Tdc&{mUQeK$UEhNdan4PzqRh7p$w|A$1
z2ndj>xMLg{e?RCf?B+TNHIIu`^&>V4&v&C*LV>3>y2N9z4ns2gI!GFK(F|eW*HylD
zxGi|9e7Dt_<5jRxz9K0eCe`*dg*co8V^zIql`n3Z_<sBaDt#!M*e5G1Dz-b#nQ<={
zV6#~J->vZ8r?WOWv!5az>SdRow#cS#>(%_n0Q`KM^7NIdPZC!d&%?Q|c6GBBByLDF
zya-(SA>okIYVEMtbgaI?rP`nM6%LgjY}u`rm_m@HFa6+AEo3WjSM(MRg@e6nUdG{O
z(7*_D`Xa5JJsew7P<M8!nY9LU?x;Jp&c3ZZJni%I+x0BFDk}B8uiP>`SqQ6W0Aj9q
z4*S!Y`E2sW#@iFG6cmcyn@pANl}%l6xU99nQB3)uc@rGRX!0r3cjuz>UkzlNH|oXb
zC|{%>ln`ZQjkkx>t5vS#rjkEY*{QIwU&wiaM`thXl<<a<#-EO$X6rbc_hOqUo<8B1
z>1Lejh@v7Bo~(ll<O6AT!bdTWPNr5zOU7WiC7hgvJ{DIt(@`du)8}-7M05j7&E-3K
zWu{Zlo?)aqwof_5(i(rI&G<4MBb)eRfNp&|)i--6N4e&dnA_R8;xwV9`cu5~cF(A_
ztAlE)j>2^`hwfkA8W$VGrY2gJjbrIK#eQr{j+;+ygiM0RK59}ZrLr8i(Z6CrP6>Xb
z8AbI8Hk3r~+`*-DwibRE*l6T*Zg6>IbX0YJJ8{^92@oM_bY{Che<n29E>QIBfnkWE
zxN@o5QHjxHNaoS_S8k1Q{7B}^pMzD-Cxehd20uo7I~z1?^pfIYa3c$1XAXIof9OQ6
zQv$rYofT@|VOy5enE3od<A!)5keg5%snx7a$3=!l8fY7fHGFSs!XRQ(*=~1(`l5_X
z>Fm^m)!VbZ)Fih}fCSU!<)LDcB(BbfWYior8OeqIFla3@TCBazLdxZm^)=&lM)t{2
z{OU-wIgx}>dsr=%Zt8uMe@bF6Hm>3Ey1$>)85tSjvRzLdh61d6E;Bi~{n#Ka*ZD+n
zbo9fs1gyv<)r*r+Yj7Y{+}(Z})eT6LBh7gQ=!9vUFX4VrjWRMN$<p3TT7A);Upuw6
zlb@HDXmmBdw)6u}AsMZ8%PGd^wX)DVcQOq!H>=KuExBCJ=9|IC$m!Q~GcpH+O6sz^
zO3&M;9B6=Le`1IZr=#TV=#TsEaTAp<vF}yyYY%qk1foYqotg(z?3_IC+RutvTV>x2
z0ih^`%fZ$iI+JhT+(p&wb2Ye_XT$PIDvepkoZq(Nv18>;p3V0!$Dby*&1M^*IZK*8
z?!4pt6IE^GWU_YpPO3-G0o{-s`^m9*uuSqPz46)UK#9WYiebACx{V8u@Ub3R&coU&
zrqy<5(lzfy1Sk27sl`|NKcN)Wky5o7wL;$M{+Jnon_g<<K?*)TJ~;R==6XN0U!_{7
zJ^XN|)Oc6OsC2o2gNaL-lWegz&L8XHrhL)WpDm=iJI5www8||{X_5XL+>RSFFVMk`
z96X4W%_|=yGDw8B(>hfhIhJlI3g0t&^X5}@G<CiUFhS665ZQkSPr0=}{YFewdPzk_
zhK9Kym!0>vMXO`KvOsZ)UZ*ND`8Mpxu$s8k*3!c9=#jF_G^F~VxGo*^a_6CUHsKU5
z=Az1iVSaOW3ne|f!WN3gcg#4Z8TGLiBDd0<($avckla=ivK!a*^WW^uG-YR{PZxIk
z3=H-dIAKz9Ts$qHIN*CV%Vp_Xfc;B*t}Eq7ZY$mt6%C_y3qvKA4VbB&S_}-av6Ze4
zUDTbwPAsRil?5P4Qg*t6lFWm%Z!$`e&}qb^y!+~giHgI+x%qjvC$tU^yU$;ll`M4!
z^t@RyPEnS=ueF$C{K-2zGdrC3xRtQ_WTj-CE_fH$_>#lwmYq{1j^QCeebSzovd?~#
zU{<PgreZw8N58Hzf;iPNFb)ims^6T)cwS~H-;dgRdtWw~)O3&Kv_G{P?0{IxnOTft
zvyE02!tM;nUD$5PBqRd#n3me~D2UB_pORI4qUlkc!jR_k4q-fIM0XpKdOtAlyBa<?
zaI!fYTZkUT>n8U$_MZk8X-P{jC*$6ZCplTcJ$t)?;p!T(g^%TuDoWW!5h5O306ZCu
zeDowce8fr0KVmL*PFS3Yb@FM!yHHC0&$qp$?Oa}ixpy3ov!Je^=a1dUn-|~J7G}#c
z;P!+o4x4x0F(}DYbDZ+gXNpbi7;TyCons5CIVsu7S~2)aQ~XbKG*5f9ekgu&#G@%}
zogj%R?aq`3%6;vth2h~Dv+ob4zzIQI&FHhx7QA)Y7nS@J#Z_5~(XW_&dXarWM}nUs
zo!kB5=BdIB8N}<l{2vL&M|zoYkFd6!U?hf)+kxfW0lDCa(l0t)AwUP6H(8TL{=K5X
zGoV_Wwn?u}QjrjK=#47rZ1-6)tMlpAtvXTi+|Qu6Z2BAotcdP?Bz9My^ufc2kjQWN
zh6Cq{gUu62wLRaGrc<lxW@!9YikLTidyLU7A`!>oIdKbKg$O~p#Dd^E`2?Pdt{6|<
zaf^kW!MDoOV;HylAE=@~e%y7@5U(8i0Q2K}8OrU-KXM%uZhxHn0fq5s$p7uG>Hq1{
z`^eM!8uI<RNv0)WlLX-*h;$U>6}=tplsyNDa;rI?#{Xs!B@q7xY9J7jm*>+5B=^7n
zp=-O@paP!+`3}Dy|0^GN#(<^H9SN@a`>1jo)g<b^n}^mQKcDe)!&vHF#i&wRT4^33
zw)4NgWj8wd8UbMELzRHXNqSO*J)s!#@`5F$d4*A#*$~P7=ke3PKv|mpMHc{GSU=j(
zx+qsok^cL$Cxc<VYFq1F7<{WYbh=ekCjb5fVdpR^Mbdopp0nqxCi(wTi5VD(USf&k
zyq1e`@~=SbTi=K1fa%PvBGxQR1`R7#qTM%24{AT)1lM_YA-lT&JQCJ{oGU3D8<vpg
zORV)kJLIK8QJ%6Fr|9L*GY*NjDF5U7m|RyPb4!1I1YBtEFL_1(!9OG4#RLGRc7!X&
z{z}x&y3$w0ga7m1a7#*4s@dx5rp^8Q{U8b~DlAHE&-?;tj;|>n+)JPLZ&(^h)=ysX
zf7W0r2>jCwy^Q4C?7Y0z`K>>HhMkJFyu6~Ku!gkDGc_AUMFRLbCX$Yr3G2qj3pFgh
zoP%bQ5#jOlRIcmujYDQr+chrYTUj);G&!_6rpJ@I341I~D{mZQu6*m`?<vYG_b)9q
zeTH<w)m5~=PW<{m03Z&!!1TPd%v4${s|`81kodSLH+&?|*&tsWs#}(lViJ$(sP@e_
zTb@Q@mD)61#nk1%cq+aT)s(&F>BnxRs~*5&{#t|U(<Ou_BMX!D>Tq>o;e)3%_h?z&
zv64X=jJzBz&%N5LzKMBtSp5?7>bANk?$rnCu43}_Z7hAd@YR*2HRpzAKJ}@-j<Zq!
zRVGwsMmCb}^!VHoOx24j%Py$qyQT#cFfhk6>a2{2;vMg=<tFBl+$0{Tbd)4KJY%2Q
zuC_fmUWW?)bj0*S+8?x_FRFh~Pp`fMUga7I)>eINwX&aL<UJ^45hP5kWlRhV0Rd=K
z)D0)Uhi(EvA(O1HFB(nm+SjLQ4u-do7h0gQ>hfr7oqN}!P-D|`L7~;<6~%~X_Pc^m
z`QI-lh$1A!tELlbZj?$JZ!E$I1@*O|fniTOAmF22Z0jF9+(t*sINg@tT>AQYC4zgM
z+?l(&2(N3ZW_7GubjYRpgrVE8FiS)Te^@l!9KTclax-?$32o7uPJW&qUH5rQT6}B;
zU3fCT$7O31{RkA@*mR;wW<(dUz(ZM)_}Q5UpZ;9gV#I$GgtI(ISa!1N<fZlLmAGJP
z84&DAD=sfjGLo~FOfpPxS_5cn?TJ+a<PjJ+UMh=Lngvc?a(6d|j=qc4GSk8d_xsP@
zAMayhT-RKAe(-8_b@^nnlIRwRV72CqCc3W=zCNpqN2?ZQ3}?owsL1g(TJ91t30<$T
zY$7pc8})E2We@3sTi1+MR#@ci*+QP<ktt<g&!1~zLUiFlag9j1c`4%t%h%tUwr));
zj@X#ni$9mtWK`Vtk$cIzeLOxWBRqM+F^TPvkV@sSq++OKsL<63yxgqZ%utda<B&NK
zu>A4s=9;Lok&!hk%nkW{a)0uoZP;|XKmG!tO;lu5Q&aN<HWm<|wG#%&!tlO_&HHzk
z1=4oth*m5|WM`U-ACBJjOvKWv(RH$qE9Xm3%VR4~>gG?-qUe65!NI6gj`3}$v45O`
zo15U^&lP@ppEDy(z=-o(fbVrsk^fXQ0&!Y)5&GHKNJH>BnFp55{^uU)-uFO16Wq;}
z?X1DTK+}A_ZuZpJA_W8xYG*={@z;E>9jpx(NOnzLKHlfDhSgL5+U48@C)55_T<$C*
zQnuob*^hL$`WdY~Snnw8%!(RiX|`LSE{)0{h~;7!Uw4%zrwI#->j>&lUH)}f8vFnT
z2QjhH-~3)`etPTZq*Z*iNo+74zk;N2mDD0e8|3>BH#;vo61@GGlhqc>?ChED*z9o0
z%FrQ7O2}?G3on}0C?h*u;Z=X7s1l*qwA7L?u>=1^#NpRp881l!%j`DZ#Z6Q^bTgHY
z3?+B*$mA~W$X<P}{OBu3gLpf~7fRLm^o=Zo=Zscjij(-#%)}0A_62N)6>&-wH&dTr
z$TlOM3Vm?!L_ztQ|9fTsk2JTv?H3C_An|izxj#r{Bx{)%SkHE@AA-x;_vgpH-oBU^
zE<d$50S@trgo%Sj4%*^RGZ+Ou1z+KY`Nr1~gOKx&E?}|xsZpC%B;?3-dTWVQC#;G~
zJou*z6~Y3Do+znH?ivd`)*zL>mfJ>6pO>?*kz6)u|5h=Sygk>UgK;k>CpXdeYPr15
z(ZIaCb;*dlPJvGOKX*)NMyK2s0|H7--`?ag`F&+WJh8qkGa$)mdO*XxG|?k&bz=E?
zPAiwg<Aay=%F^=6+^t{tq+}wZ!fXz|7bIRrt*z0&UY(M0yxX|LwCV?RLO<^~1_xvP
z=Z6J-08HUxwrF9%W<P+M@Zt9l=n8a<-DvzGOae1ZBOBYJS?ae;zf6Q$msIwVnm>75
z0<8EzQ_J&*%WPxQ>LG%z7~d>~R8@;|?&kgh>``L=t7ul@LQgOouX*9Rho&_%Q*$;i
zRC-dW?iv&#Bq-Du5Bg7-g7O0mM8-J5!DN?<plx@b^vU<xw?;-U-s-(EmwNN^Q)w7-
zi}7!9lbH)=sOUJH(Tkqd-zP(i($WPgoGodg{k|k|cmL}%jou}rPzvSA+#Afy%1R?U
zp7!NT%gDI4Ty*Pg5_80>CU1j1;oq-9KJgV5*LvOHcl_?%l~u&_M(l$abt`3pFav@f
z@#xVbo_KoIpt#SUV?$Y8>aSdihw{4yxE(=Z?0aKlXvj~!-wOx4%`ZRh3tK(`qPpuJ
zlOrMwFhh8z0<{oo7$?|ws~kFnj?Fe=%H_^Gxi;Y-Ce+^p^{>ZkgVkKt%CBEno$Yf$
zi|ijMHv-HL+_(~^sito$m^;<48vC!@6^j}mvC`TW<zOWEdO)DYGC8TXS$hyS2Pj^W
zGcK2Ljys{pL${#=Nx^w9)YZ+^!h-2<gz&5XzME&dPrc?`BSJDGr<msc{Y15C0Pt?x
zpW5#%h=@>#MH~VovH$Jqp*K1n-H$ldU|N+zZDF7qCnYBXWz#6$Xeh&cY=2!|egMRh
zAgo;5=~4iZqic6UoqEn`{m2M8E30+G@gA4$IndYsJXq9;4BsW^m4;o?7awl^`6Mkp
zJ3T$0UiH@P-8Wqu6a58do0BHWWm3&Q>ja>qD=H*pxAhU};@lhw0JA~e-nO^53wmIt
zw=*e_7Goyk82<i!?q{L^%QvV(sa85zcZ`;RvO(+b=SAhyPFw;f<zGD%ti=?g&4|(3
zxM~MtUKjpti|sjZl(WV}^$iRJF2QC@xh1ei9VeQ-M0k!5XW>*?wKr(7!eg_$G~swI
zs_uGLZ9A13u0m%!KFkQXzkY7>?tAdZuaA|+@w%R`MKV{~tYe^~|JP?@qI6pil=vCa
z3f&=KDfWQ~w1?+v_c?SZq@<=ZcR=5BFX*^eUYD72D{GpXZp_X7uz_j_K&Q*CcXTy1
zXZBrfVz_Mgvkt)c?f^EB|G>)-h>oGsQMbJ89Nj||?d}9CYu1vaYV@DwH|#FXK^3DF
z<=s46Kx}_xZ`|yOxmv_TTH2~cJ-~<A*x~GO0Gh)30<EU=-JP!Z+(YBu@7^I&e}XHx
zY90MeB>b--G?#8Pm&eb0EQG?yLg}6{u^3gs$x?HPo&n3N;p1jB78+X8-J|wU>JbYq
ztyvHgcs5v;t0*gvi4(E+#)A@@SiN?{a>1#@@HdM9c{{qrOlaJ2aY}-vRF#_%l-?Z9
zm+daScrFMBfj|Oo3T|4kJ~JH3i{(8(l;v}~II>&>(%0!wlRp$AT#bhEGT8^gK;~lf
ztHC^;dJLzv#jl_DpOVm1F@F9#*Ys;j@!^c%CZnyVb5>xp4$Nc<v6!Wv9_RLj4*o>*
zqwO-_O?yGG1=M`A(c*&X*PvHj9xrbX2kqd=gzfzNJOJNEN{sOS&XaB@$=S|sdH6B(
z4r6>P>ixl$@E6tk{d3h`$Ud%9J(@DxaWd=J?(4hIL`odAquwRx_4y!6@v`|Gc9H#A
zX;~Ppc1WUf;H78SPLYEkhCOt05f=7N`QG2p^5{|emJqr{xe5+WFzB432#eqR{_OQ2
zFTE~D7al*RoUvbB+3k2k^tsswQ_WmDcr31n%o$D;PlKem1+1gtl;|C;Jx&5uNi(aX
zJA+i&{Nz~z)X;0)Kn$G~UFDA%mv8xmM&AWEBquq!$KPvZ_m5rozlRuzZGStq{GB!b
zx0WJ*fARm_3zN=Jx?w8;g4E;3dy9Y-f8RFH-yiWvFciqa1rsDBaUh-hyWGJ?u*jaE
zCkXiyGJ}^gTqlS5he82K7J7Q&O+vO-R)t@_=sV%#;f24QrI136?;>T<{{m@W!K=U<
zAi8Dv?^ks59M!?Oi-O_-@83(Vq@)D)WQ~pF;sIj?T0%rb%7Tml)dZOU55q5)hYh=%
zQ|bx|;eRg^oQj%D+7V#V2>rwS3JQ`kGaHkP_wUDTYwoAU#ZAJhvvcIMPp;GFi%Xjr
z0PMQ4k&(TPiRfdf70Y_Rf8VgXOi!zRj=RUi%xuPy3l5IM!=o}V23J5DqwZ|I48{ph
z4Ey!7RAgm+SEen><r@45nEwZ)6Y;5+?()+1c40~i88$YyurPFaKsUkT$9MNr!73IE
z_Zpr$36B({rCqgFsj^E<DQ2Og+gR#(2<)>EO~8P&aZ((2CkhY{Ecc~}0}nNeofcG6
zd5^<6fl??iy*E;nE*Zn2tFJ$tuU=bND3j&o07~oi-c;ZJx)U!A!Y{Fqw*!+2@Mvqv
z*TB5JzyAuT(!>M8pgkn=eo$njBFuj9JE*ih+d#bn&S&=a_R{LhQk5j&el1cBzXk19
z;Qsb9k$He`56}d9y1L*I$Mo-gLfrFcFP4N(9dO1hDzp9Q<D+fniaZZRwGIw~4N9<y
z?|XbgLZDQ%5pj@_*@1?QKal~PUY<V9K?(jlVWF8Sv3Ljp!z_w_5xPSt$jG32zBW~x
z|JnV?-SX<k--kCKeY>!@*h<92#%42Cnj6byo94X_Niy*By?JvQ1M!VHDKRlMT`wb*
zd=C8z2I46#Bu*O}QS9wUQd1knM5oWte~JA(L+^H>nm<E_NhSh^Tw!zb?i@u+6_pq;
z@apU9OLYY83iFK6O<nDeZ5|aBOhzwZ&IbhSAJjJ2%vqF&7_~>oAP->%nSsM@mo9_F
zhc^&a<L;oNE7O`x#Kio_In40!VY-Tl!*%CV6%rb18%_L5$xBWiXTVeCdMWM>JdNf*
za=idrFLS>H@b_9<T3XuMiNQ0>+}ylc4I1KLoL4*S^$rXGK>F=lo6oyo4hE&;nJqg%
z%6cs5S}*hPKmo`W1B1$TTQ&%owkeR9cYrDOeS~8Qv=iMHESfJbx2K>;GdAjnq>OuR
zEOW#32QO4zoz&?yyq{Fb?8Mc3OPDXs1bU(iB7dEu*m=T}er?>Z-<RgqNr3qKckiHo
z9X#7St0m%j42+Gd^m}GN{3x>VmI9mP3S5Hfy}_~D0$v}koE#ki5%GMzY$}%B%;mYA
zowjyLm4RxFQ)_Rp#Yo|Ne(kxZr)SfAd-%vUI0ss<^n0TbAlwG^G&Gdu<s)P6cEQDX
zVJ6_f+^a0JC5`+h4}X6hC3uFoIG~}p=0B_Xk0RvRa>u~ki3d6Ew}T!mgJu^hm1!$l
zln!}$d6_vm`c?e;%KyVVHDd7p)0!WBS4=>ly>0ZF)ha5Y7?X}JHt1IJ9fQDIo9b?*
zSK(=2bn77h|M_}PC}We`K_IG_+@AkMLh;UHY1Of4azv^_CsDwsNS<H^4NwafJb*^!
zm<o;K@h@<K8B9pmiwF*GMes#GGZS{uddx&NS&J~igs1iJnN4-5UZHneFe3OW6I01)
zXnyD+5;_vf$f_Cd5d2SHk{%X(6cuQ!8NFV^=ax=#shDavEQLMofxrw*hrvH{;v9LU
zOA-I4blv~PE$r_)@W1XoKmV=}fjIitSU)s5iF4OPr9BSsD%SY7oi!CD653gj>s2xN
zU$*s6-W5(k&L*4NoQryTi)3VBp&@b#@=PZ9;mr!rn|o`8@U?w^zZ|Y^Q|KLCWL(wF
z_7_*`=7m8sfuiKF?0p?PK*hM89ob3qoXw|_e_uwn0zWZY!e1ow0(Kpu8-UUOA#1;p
zle4G5;?6ddtKT>(N!~3diP~Xs<yAsc!c}^JY(@IxYzF^<_=Z1XO$C5mp8)OA|Lrf(
za{|-0FsQKj1IL2>vvz*b=k1Ni*D-q_nal9_>5-PFMb_Qx$g|-bCMZhQ-JhI_j5~jh
z)CpVzIFBAI)3E-6IwR<oJKxWxC0IC>l$BR!W`KDiBPU134Le6#Y%K9uEcDpGT0_|i
zJz657qGn(y*AmqQ4QeaxEb)<%k?!u#8n!=v{0LL!YQluWO&Bp<<j0y808oDU@?&6N
zes;E&Qr|li^s1^Vc<+cu$-m*T-G>a&`V5Ho(9ptKWoxVA*x0qRjY+e@UsR%!BG6t;
zP5lFz*ZfIP_d86<m5Aj$Iy_vPs8p!<RG$gq9zg!24?wMmih(a>mIF&wA7Zg9o)-|j
ze0+RBmF!IwCD5@un6OoMTxX4}uBxs!Fpb1jtZ_O*DG&{(>xogf``&V`jO!WK{yXGy
z$qZWpD%M><3)caU=<M`#X+lFwtD%_inC0;NWD^2G;R)DG%xcfryc#s3z?lya)I|0x
zKLHz6O-J0(;YZUM$Ytvg|GrwaL1UrIdAavU076Lzhk6hCuHJ5`a60YVNT6THcRoRT
z{c<_^qhdegkbL^^+R>TFqrbTT$R5QhL*M0asYx^>(4(V?`oxGit-jn&E*iN*{mPGs
zJ-}WQNF{1jc8tl!@er7l4?AvFhet;noqybQPX6^Snr`rr0gfle77^*oDE1fsuw*({
zyHa6+tIk`%XJ#|)@9%?%7YM&PO5$(dGFDHG2)};)+G%e<fyFxQh~-1m(a6a5G1lGg
zlf%!%mk!<^?~?YVUkpPy;k$?pXYGEXwf_)F`}<!<M4N!=wllZtGQXgGQviX4tABWZ
zaD1?Md&@W3A(C3xO9*gEhQnlg-3NlHP(_9>=ToP+Xa1{?vu+@?rRC*QlaIh`Fz$(^
zE;Ou)`F@mOqF3A9-zVWwu~IA3?TEtWIegRLiD@M`k?Oltunm^7PaJmj#l(I9-Sv2X
zU6lMON!QSjZEuQjkVqK4y35S>>nn$_LGT>S;goi_wCF=z1G?v-e087%m+d~Mq5;Q`
z*ZlnT!2fmFU8=+FjAYh3*qAV@+7h(0<B-qzR>dsGi*hL_Tu$EH{0qc1^Z$UG2FnGw
zX(v7b+HB?Sx&c$VL>P^t1rQ{mnPj#(P&VxwU**io3a7~^3uj{}J7Ul9S?8ET+{u9%
zz-IL)Vd!UE-Cqz#*pCjKgfDz=ZcYb9M#b_}qh?UeX3fdQK(+!{j4o$4|M=l&@JoIG
zphcfP-8jzD{Eja1zK1JhGIW<h6ZK7Py(b0%zq;^lXX>piB!CrcCcauN->OcjQFl2?
zO;3Mh-CgopxC8#g!x>-txehjU+5E5f)YYbte7Lpp_D$Er`Ll1I9M7>A=<Jvo8B>k$
zu!)S?i{}y))FZ=hlYW5_`UfE@=;3~@#`20kr#9tNu2;2x#l1(zZH*6sE-c6Y_Q-b1
zDJsUimVsS&GtVDWz{FmHWQ<BUCiA@-7}e7f(>}Z`sako0T<KrELlDN{ny~7AMeQ4k
z>>1Jw@yJ@4{eiJ_Lmmqe2u4>7XRC{gwk!Ra0OHJ4taZs15)w-P^5xUbi$c4RLY*g1
zo>)=bB_<a49w;>#16V8@ghH_5K*wFh*RSBGHc@V=2inu19)mZW+`2-LOVs^-f2j82
z+(<)XYt$(J?06NJg}cFX0kl4;Y^LKc6UX47c=?}yut<4+#PJ&G>x1V@K2XO()TFCY
zTa0CE#9E2PeVv7=-M0(Z){N=GjWjh2f#ws{UGIU^2H32Rrsm~Mw)7k5od0UTW{FQ0
z3X}j^$a6P$n|V-$L;Rd7s}i~RZEb`e6K>M|G!wg;soLE%E{nNq<g+lClb2=a1kHr6
z@&)YgopYQ2{HAPH{lbizm9?jbN)<JUI@~zlcG6z2C+US1t={?R5r5*R8i%D^)y-_5
zyr%`~@>Y?0fZPLfrCpblvVqOo3kd~3eZ)TX8hF*5Z8ekD9xV_FIz9WC_F~9l2@R(@
zWg7a?kAK#^hX@AN%%Xu_25?WUHlKc1HL?Iy)6kHX)v;XVbl>oN5j9-Aa127u*2QDu
zC|9kA4FGg>TCAoAL@yjB7+CrxMY~>ak2<mp7ZdnO#@2kp?G=60jOB%GT<y4d-onUi
zVPO$Sa_+^$2>?^U`+M1<y!f1&hJhriJa(Iyf|v9<)uI^ed7_^cEi+fA)C&qGrY7rX
z0~*10sung(kzY6X?UWpzFfHU-PF<28>-$`O_dCMvHYW<V{Wg+?7&|Ug!KvSUZ{<yt
z_jVeUY?_osvBREW=^ShUFa^lR&NeDHdykl7@5q+r=bHiBWzudIld~@ExpyzQPxkiC
z&T<vxo+3MwQnS|u7YjA548`f&+uIM;MjF_Zk6@|KS1#LtOPYo}2OwL#B>JhQlfqdL
z^Nl{d3ZHP}J9i+%#GgKH74+1gmuxw@md$vWkMWZAI9_tqCZK+{(;!jv{Q5sAdXPRU
z?hi?0?4Im?!r+)BdLdJmqGGX6t$O%_dumfX>(#v*-5z%<VgwY4=CKF}2r%57)|bvI
z?RRuXyK0YDsE?r-Ph%D7Rm~V#KN!e!tl#8Ez-~5~5)K?{Sdw4{q}g(+wtPO%(zN8P
z*vG-cJAj+dJY$;&z=CRlWk;XbHobV~h0RTR?g`j{zwt>|w%+D0T37A19R~v6`RR`2
zN?PDM=%R2)Z;v*Sr>m{VlF_Bd#I%;hnf-93T$1H%ZD*6xFRTjObSkJ_=I)(EhlW0+
zif4H%CS$Q86z?QHkzc*#9-PeWoEpbt+0#~v?mQTYPXq@GI|oXKM>%Bg(>5povo9(H
z`$186O$~BC2u1D(^>ryFy?VIv62TvvmZ`r9z{$HWUGjq0(e~0*|A6PE)0B-3pE4;*
zB}$ob&q@qpOT6JS|Lb2Er-nUEF@~GWZK<V1-csIC(nq(pwQW6Mv(;8)9i>>_xv-w-
zXdMU%9^V-cwhX6LZkqTQI2yx3EA18vcy%yHPEHPvjXkSFCB1UxiursXDKBoP!1aE}
z-;p~lEiRVXZD~e*g_e0*9=N+cWx78i-a>yuO3DR`3O6@5mGw+7HJCHePRk|>`h!nS
z(U&hjNo3le58L_?cFm-BrKF_H0qvpqa(@;mcqvouph4mmk0@8G_-$NV8OvB3Z^C_l
zli0x`%|<k(IRFyg77!8?WRiNeH}<V<<XHaXSd^ZFIHb0g_eB@<pwBwIzRV&nzhVZN
zL|FbZj=Qas4f@i0<|E-8<Z^zr2mtdW-|&!Yl95av(ZO^LRvY6-$9t>b*}ce<<>cg~
zPvVmjnc&&mU{-VF8Ep@sSYTb%=RURHP8s1&6cq|l?<+}-h`=8;jinZzp{AljG6ky+
zPf=>G>cM&OmKN)e<mj;muL~!Kg@uKw8d;)*v9Xc7i=%ewht65qMs3t>moLxTZ$6VE
z$&!Ja%lB4})h(?wGBp*_%q}jo$)WDI-r8#WEG&FP5c277&$aG4LZ3#G$8M)01eyzk
zlrBjKYI=HlAe+<?*gYjF38tF66BZH{Mo2j5QXAT}C@T;iRjJ~(2c-QW#aH0Gk~A|F
z_p06?4@aj4p}@bs4<LOC+EIU4@uLZkikbWC)46kMrA?!3GQD%tQ&W+A+}0p+Sn%MS
zcmy;1963p(o+X*Qp?LW+^vm8D?#kwe>o{o=u_D5EP2havXTdqDakZN)G@~{Kykd4F
zdxV+-dCy<UN3><WlHu>@5D4|nn`fvK8h}M-)k&`BlqLNOTP%+=(q2XQUEc9{jkDwN
z?lPD>0>)z#oxZC3`;P(nJ4&PeHt*6@px1sYx^(U5eqGb(%Jh4qE;@(#R-EfR39~ae
zRQd~P5Dvo@Lg{&KxGo|jbfV@gL_tOYiQ7OnwpW^Y;vCyoar{sxj34PkI!y3tu8_wH
zoVzIBt)O&US+Hr;KUWyCdGW%dsi_H)E{`Nh@Zw_JgMwzicIAG(ju>Fn>x^me!p>JI
z4|2>%O|?GQQ1x-l@TOiM1Z(r?&i9n5XqcGmed&SmQ@pB4`cWt6^f)Z(Q_cqy(91J2
zJZx^ufV20r?y}F@y}iA1T^mRteORrsUd3fCg4Aez=(WYq5)gqudsdero!k^i+O@ZF
zdwX|R49fKH@X}#Pg&<pBa}|(~QBhIKR|Eq|s%<wXtyc%Zq6}_IJsSg#Rik|UpqX+;
zEyUYGD6sNC<5`AM&pV8SCn9RD&>;vWr7-g2WzS|rmIyJNox1npp!W?egi0Nkhdk#V
z614Xw>LkNqqkQqJ9$5TQQ&U4Vz-Z&X>S3Z(w6Hz|ac~5nrK78XU0qXC6UXvZ$emRp
zLfi$`yFD&j^PCs$&826h8$-FSJzTwDvk(>cdD(T(Gx@#q`yI$j$;wS+%6b*=ifJTn
zHd0gbIyvs=PyzAyXz6{Ky5szlbernkU8~?A8A@jx>$ilwE^}umiDDSmP0kBVGy0tG
z(~^_5w7auHE_Uz`h}%MYru-aEhu5G?snecjGUhT>WiJc%Zr{Cw@iPdq1)}BGg~SRi
zW=R4{)`|-!q^=^ip<#J*cD4wH^pA8ISy?J($cB&vQ~NYbx}2Dd;;ItHuo(10uwp<x
zF55p>1F;SJl#?aQy%~oC)+82McJ_nH%^Fy`%&o0es~t+dXyN5rHu~I|oSY0fg779(
z=_j*Zr*?1BfK1`(v==Er`O%uke@ayhK><pn4gz(7j^%8He6|AXsKp<V%;WxXl<CR0
z`A%yx5<X<~h+faPD0La*KO<&0z3cH7QcOuB4*P4uj4|eX*lxO1mS-JZUFjId&7`io
zzkVe|y$IKHIh;nVxcB^`emM%VkzOv)JDbJYAC@R80(wVCJgqGcVJ#(Rf#Xt;rl~wE
zAjvDj;SvViPyib*6gT7M;fZ51I{tKPviH-gnT-vJlIWnNwD4TYPF5yXqqUK4RP6LF
zhdco<8-=p~^>VA?gaq^65S00Oe;dj)yQrj<zDG8$yLHO-^}trFIUn@m%|A&hW;j36
zLC2-D_Xqf)x(gALHlKvxTqC*{8KJ8Hi|Insds7FOKXXt#auqoTLss^XuJHjrK6A%=
z-J7!M5*AbV^8g|RhnVQd$kddS!z0zStGDh%MMp!f^G9o|x5OqWt}<hcsAv@n`=_Sj
zC2pvysO)T8I6Kp8>kMFNq-ACb??7}MNujBwrSH;{ANB6;9;?mQ*!U1d@AGSjZ59ZJ
z0hBUUX6B3AyL`UfmtJ0)R|RoMb5oNpwB&^dNDJ;mSfgHHC45NZp~!o2YWbd>JAK!t
z?i~tD3+n1evM0eZ3=Y(3W%?A?zQBAdHJg%HH=)4y_z46ev8(+nE{m~1Io?+`J>w^0
zGyZA1DR>i6@~iwbyC4^`!Zk3fLD>!Ur(NL!;}Iqdyo43X4h@k^+J1F)^(jaf_iVyx
zU#USs-T6f#+vOY4y@TpZuIHz)g~^!o_Vgr5q8S=hogc4`%kFACkEgJz4rbD+C@yk3
zvY5WNyes_zn<^LAMNXRkVBE4x`lS$_<I>|yNKAZTx6*<w*!5^W9FCAzuUw%~k|S!t
z1>Z+r*SPwPV|AU3WHR1{-f|&Br(^*`m91JHr+(|pmz|IA=42e|Jw1pRwiBOl<$88;
zG{kc}oi^p<IDbN#gRK4@d3e;CjlJM4WgCoC98s}c>zueJ6dq?&$`+!CPOo#ewWxNi
z;h#O#S3VMbBT7+8=g~~SyvVaZ!vHIgYBEbc8>UIaT#96T&E>0hCnxHO_(~j}gw5^Q
zysA6tvUzK3IdFoNo~hDmw&4s-Oo)_d$)HWobsKrN{Wlko%W67)_~px&u`(mGh@F+}
zd?-MnpaS11%nlo0UtgbZNA?H`q0kHiZRV2g0r-qe<m8HnDDt0rXDX_rxiL(1N9?p;
zh0V!_ZV00j8}($y7c?lmRj~JC?<~aO2J>)hI<BnZG(-2;#YDef-wWTB#iCBqzO0DC
zs~xUU5Vj`2GdR&Ur9cGq`$E^nu&}|A5ubIRMx0mN<?_!66euTVB-KY2!e>}HsMceu
zT;q)`;+jZ=SuW>q*}F`Ao$VM3XR=>fo!_~)D^XOm_iK%mFw2h-v+?!qNXAyE2lSno
zzc0frE-OpVP)Mr8V#|P`;_mJabOnE3-&v9Ii3zjuug~ToQElZ>SeF-$X*vN`?f)1p
z2i)$DNKeOGF(aPoSNB=e?*sCEP=GP|Jt4HLT1e4iVPQdr!&-@2th>+Sd>(>;fpVHr
z{E7@&h%zrKulXlNrNY7fZoU@49ClAihSZE~o{dSIG0VzWG7tP>?i?R&8m;3w6W(#v
zm!h2+n)+6GNsNTe_;{z0J#2t>e(31J^$`)>C#S2QHEZy9Sc*u57f-v=8XY#X%3cYF
z1r5#k=YOKlzteV8{mAAzU!Gh(s+GC9l(_gFEN;L%CnhB&y>;sro`Pd;T=T3ngY$I#
zlMPc6i1*fe8e|0of+bEsD)5p@z}lKM6e_+Poac@LRq(gNYkQyTylAYl-@(Md5Eb#E
zrJ=cngH!HU(^t4BdH0zbrBvLTk<|A!9$&N*GK14UueauW3^)#BHhIcMHre}zu(Kj<
zz^NuNtu(tP@|DXw-?-)Z82qaU5rGx4Qt!=)^t3dlk?zI%glF$39aeK83xU?BC%wBr
zIgG{fb&vnj)dV%A?DJQ0a^{Olh!wBA8Y!;Sy7Ua;2R*2F4^YInuGfAYfl)nK?brq8
z-_R8~L-YF6O{2xNw6IIXu|-CvhGbBQaT`nq?G9|@P=|Q^I>Of%c4JdW(}2a)WQoxw
zh%>=Gs$P~mik6HlB06oi97;Z=r8X>qMMa{frUB+A^|G9Kdpa-yE?L>x4bQd80ysW7
zIr-rOlDDm_l>GdPE@B27_`U&*<QJ#X$59+h2Kpl__&fN?*NKQ5z80#Wss<anh|Ac!
zC+B%r=M`L?eG$IEfN-Pe;kpQ;Rpu8Em~!0Y?y+b?f#9Hf8HBF=!$f9P&lEI(((62Z
z_9FU~(kFvAnzQ4XqBFsiX@W~1+k7pTmykNgVv+&$geS;ayrg&p!xr>hf{!wk5M0c3
zh>0hTcH#%Re@aK)g~H<N*ZO7`n^HQMF757v<yy`A0E~k3rZd#7YijUdSHP!iI*Mt|
z=Wvi8I1S!5+F^<ONyLaUFn@0UmV6+TG4%<L?mDHLi&O~Dc$KQHz}U=+&#up{tB7tg
zhp~g*UE?oR0HT8wBcC&^dQFTlB^T9rsjREx(7rgv)m){e*SnZ|jE9hV=F9GT^Z12=
zf^CyuBpVxBeGs4w(ZV75SX9VF<yKl!a))OgR;$d+<+U|!W8>X}DK6;1#zuF%Ct<6r
z1bZ^sy?bt9fV<n6s^z`x(V9V7qx@+m!>FDcgIXkg=}8I$Z2`^HOIfe9WKm0lr1v%U
z#s(6`265@1X+s&v?-pH$%ZA_!)oHp)5FN>3yHYPlN{m8`PJHwCP)XCgWMyyvM5i0h
zTd=pLMGQl;SQ-=y%kRgLayzhC%u%AFqmu*<rAtmN_vv;2@bK_}Sq>~HF>}$o*nt}z
zraF^VN5x8LB@nTKHs4?#<8~`Oduj1P{K;+AR{xG1N|y%vZ$&n7cUTAJSqGkkrrOKv
zgq}v_wDm^x-c`lS#rLcIUGTkU1|@}M$qjv@L96vu9aEDAIh=L-As#iW+g3DI&ym?&
zrRWvRy0>e?Jz!8r{~F1VOwP*Uyni2(IF{qGa9^7OT?K!I=z;^u7EZJ16$ou{=~Tq7
zvwHO0yczi1>!*G<K<XZWy5@M*OzKl?T%60o4}z=PxN0#sNlv=NCE5%h*9O*hiYxpw
zvPt(a++s02JdH}9h#7h`IYY65m)48@r_|ZlB7ru<UQlYIZ?-rS6&@-d60e}7q9U(Y
z7ZMRx8c>s%_&F0I5_xOu7ceQCkT#oeg2UqjUV+S2aM#f=HWqU)TvAQZKL#w{ZV3E~
zwDir3WklEcxk8>gAoBAicYN~<+rv8Qmm$w>z3MWT2K8f`wPDjYZ}=|RzIgHE^2q#c
zM)ZeUdigV=E|v_Ve~_Lne!a@aJ**6@3?+;<);&GU{r$ZfA~_XVNl7_hlQ`J9ww~Dw
z{}wCiBxSMRPsw@0%UfHJzH+5Q>=XSEy)mE*KBa%uW^3`MlGFZ=V(CdD8J-3mT>ln{
z#wNF`@_S^lsdG$?iJ^TI@Q;5Ue36iL2(vgTNMh1gT90i;-mX875Wg&}x=UH<U;I>^
zzHyE)*$R0>Y$qZiz1~8!bn@@-C4}7I6KGHRf^Yw?&W3Ny?LNofw}C-?9|`Kr@B@nk
zRaLm8BJZ=v<i*}DJU>H`V#}ySWQm?0LqWI=0it=gHp<6s?7&DtB(P+N$TZ&8ljv7R
z=)6BhPpJ5w54o@ej6ZKyHBKWcO7wsGW&q))`C(~c*o@%2E~S(5Son@?Or*5yr4Y0g
zdbgFJjPrjGZcIqi)C3WkpxNRQ>+Y*p^{wSFGnr&UZ@b=v&n9<Aes&6cPek|1@6V1H
z9)8Iazqv8lH#$mk@cbWr4Y}ov6={?d!<V6-g|F@5CEQ6o|0jcv02%!j)6v2pdhGFN
z$t%_Djkc-jK%S}|2*Ix+Xj38iltIaRe_Gf;_-3Fm#{c?4B;@n4w?xgdSJxslLSOM|
zTn?>zzq;GtJLEUgMqZ6>rQhF(A?D-d3_AF-10KjLiMYq(_umXqH242hz<%G8+y7G?
zk@CuayWC1$`){&n!i~RmLF5bn+{WK;0Z(rH8EOa<SWlqcJVY{(Bo2<H|BeX+;))!-
z8wvYHBv1fYxWRlt6>`;)@1R?&ywY|a&hl2Cm_(B`&Zuy0{yzR$d2&SvN)D>3V~i-4
zHZ~h0MUU83rKJn(cbYzZdh_4EsU)To86Djf$$S8s4W#m+pg>$i1e_*mQ0gFdu{AeG
zo@U_?ZnJTkU0mGX+iUpqn>!qs$jMV-H^sunUL1V$<_&}Ku(?l`sHiBoZ*Vy54g(So
z4kMr>DNVRH_2WksY`~~kYm$<Zn~;OcSF85-_lMNh*;zgr1x4>W2*^@Ht4_D6Yieph
z)B#eKni*GeKn<Wlong4rmXwHyNNH@M(iT)4QNtPz(9fg~ZL$FY5)iOrlYE#gw*=KG
zOY669E#u?xLpdQ((C~?7Qqt2uZtLnmx-Dq-@}HsT-}ya9==R`PtmKP^+6`F(DCeIY
z+fP(GdL_+)CIE8wr*N=^g;cjAF8Fht%h@q&o8@vQto%}ZVy*P#^|$H5LqlH(3H8lD
zl}yJE5by>-gn{1Oh{#ANUiC&TYfROsX=q@B`XekldMr1(8KNDeEr@V&W#vhKW}nNM
zb^F<gdk7&AmOj6Vj*suU^0qWgcYRg($u=Cyp$2L{+q4HS7l+!;<|KEB3VUfoaZ8GD
zFcl@Qoq4Ud_cENDEG-J-pW4?W5QNi9!<{X|G+bN{nK$0r+f!Y33j?qya1s{QdNVT^
z=$||Z5XOQjQIde1OC!JM(t|r#2~U9K2w^OXhNfn3Nj9puRKMslGl)16yhunUKt%#6
z`R9F5!wvbhzuXu8kG`X$qq1@|BoOGSs5IU&vOwyRO2x#`ux%jweBA2!_vE=bGCG~K
z*X5880Fe_YOF;D#^2}2C<_l&iyN*3g;5sm}v!~O_&_KM01G_5PS7wy+LoL)YQ3L|h
zaA-0YdLbS>_;88OH@St1IoL%eHfB^>$IsV4ME@;J*H<5YPuCpebghtc!C1=4p)q~;
z?hPopj+wzIfrE=H5T7yV#9*q1JM>zc2~`%ZVD)XZoudo7Q0SbC0X0t#_$}YC{}E9D
z-axZkb`B2W&eNTPgJ6oMcF4fP6Ce^bIsNI=C)iyfx+;J=F!ak|AQEl{1gvN5MTgvO
zMkL5fv!=AYl$SYuAqA`7mEWsh60ClF*|J9nr3gabrsgCoD=W%pbgnB<3^~|DEgZf1
z)K2Uvw}TxtI(?s<<e{hEJoaA&-IsV*erhT$r=*TfXlbcLAD7eFami)W{XQ81PYl)4
zHG7y*R}oTy?(UyI7Z51bB1GOjekd=T6*2R}4=#lqd;z)e=g8q4;@*Z`*OLQjAv91n
zf9>RknF_mRl6P_OE?_C4E73eQ0qn-@{mFW{9rq!=Z(1KK5ipdB$<54cG_&xHj3ltJ
zvDw<XuzHuayt`XW5uQP8%_+|(AfN@n(%bgx<ulC)#CiMp_+u`v_m|vy6MpXiL=Rwr
zrX)fxnB*>JC<ug3!ZvpTQ3#ZaO-z6lCEh13{TcjoZZE^!SXo_#u-$TZiBXK9&C<c4
z2_^%ef_nj|h?achZ<RzxLj(OjN%|4JdZh7*goGDl15cim!_rtR;UHpl{^bj*n%bE`
za&aS+>%neycDmsg#eUe}uQuxZUXpFQr#P38t2HJQ6B8|E%l~2H>n}pJg4LF}OU!Pk
zqwM_L5t42Tkb3gMB;tX1uPtD9b{4K;-Ia%2z?SVFb9{4ge%Z&@7Z?~9YencpDr4ZG
zN|~Nk!q`;leDVr};COP74gu9!Ev#ba=jYF!9eC_`d3h1x<4Z(v2&+rhW@IdZWB`;g
z;%g=b2FpMn7V^V?=J;~N2D*rrMiGb)R#w*S?V<z-O3bVvImX6FoIO0gk>68x>v!_!
zG6enyn^W!L+Io8V$_L3`p3>3T^riWaTS-WCLZTSP9Jni7k^IaHaVYfHJQvbS^Q!+$
z2kKZB7M8Dh&9`6sngajR2nf)SyahIS!iZ(g-(0{9RPg57sOoua)-p;<+1S&X!)T*D
ze8*v7bfNU5qoTsaWh-a^r8PFGClLWb4;D!1{#ETF5CiF*T6~tvMN$UKt`)RW=2ce9
zme?du6XwE$W-eX63bhF-!SUfyG<0+#8nc<W4@t|GMIb}fivGK2L3sFL#TBQ%Ny^-5
ze=V}^y)*3TFoGfd2!AvTy}u7WiBVI8I261;Tz2^TZ?K6v86X8Qe;+8wK;+-Y|3AAn
zQm!MVM?yjZ*?=T+kaxfaHPoHqd|_*A%g)A@SM)J4ar*1qSr7p{D^gTaV%qwchl`lw
zuQ(n%qtesUqlkt<&|Y)PtyI|Om^vmGwo`b>#YUbca6*jDN6jw-L0Ty!HVJOr_+q=M
z)>99ilj_wD1AqcflZ<=1JUc6^mkB#m&jT=y!=qCH&0+;)x>p9Wk;;zAuqDHj-DPH@
zL7J-wrcV{;y%>KKEaM>N&P1yP2SKsN#i8`Irxws`gMlC;Q#~UGTVZ?1<JP@Lg@Ppx
z5z)y)v>B5<9};HlHi(q}@R@Xgo&gf15CecKvDPgM7<cC8OE8sDNu3zL?-G(M%gf8&
z<!hiYh0|^mBBY7NJ#Fy_jB7$y>b+_9${@~=_=mpc@BvCUgadj()Q=x0?HNzi#9k`S
zf)gafbOuz%h*az;*aJIbxekIQc?jSn7EF-ET#PG^T>cZTA>*n3U?>^Kc91@``vpm2
z2v@XZT01)aFUsBnoa(>-A3sux&>)JI$_i2T3Q5CW@ySSo?2#E+B}$7jGP8F`Mn=-M
zIkwEmmh8QLkE45huiyXszy8<%T=#Wf*WK-K&inm(KVQ$+V?Af*=dm%`qHRIw(3d@c
zn`c3;Jbd=-18RPD?P*<OWD~VyTq$mAZ(qjPuRuKw%G_97{R51Q=O3>u{PL@IOr-D^
zUpg;tH=t<ND<niN$tqWqCSsdXf__8O1O1DbZQq3qL&UD*LO{O{Sy05wmoIH<5J6?|
z{`PaTAzam|&)a!_cN7G0C4KX*JUv~-4{#;H8Mjav^m2y(^;4<C7y~_{38@K={XF|G
zd1hQ4`;q;C3XB5y5dDLGrG)r;#}VEGrclu|iH8kLFXBFH7T{Sgm2AJdnxJxR>Ao9e
zHAjyeA(7CjCFq|%@2L;^g(=&95b_9WM$*yInbO6QIo+_{RSRS`UH2VuAxz0tjvA(x
zwm7a$V$@_dI^QIWCTW0tcKnr?gBd2sG#<QJPnx64V1cA_Q-EGBkOXL+!T?B6nX^ez
z?y-)qhpIF$RJS32C9DUL%YdrswV|k1MB6gi`>k;)$VHk!NO7C|#)yGv@oZLJmRB=o
z75GWBDmk}`HXEEjUz(F65Vlvu=I|vI`LF0FcG1(@!^&disY8{NeB_X*?fvUR&;`wR
zdvt&Pd`~xcM0~z!t9*ph?^c=1Le+Hp_7&i{!1H#zrM~`cZm!#OwJ?M@>!1|o{&X%^
z@|N@kCoG0umAD(krTt;HS(o18Bq1dya_P?Elu@Bo4jvXXtTwDzuaK*~o?L>*o(~c&
zG=i#2ia$<nDMch*&*{wa)~p*i*%zEGa(75ftEA@`Z_9lgUXrCm>><gTy4{y~^fgJT
zRb0gXUez4HHOWUSJn*DmEaw$8K~={7a*j?>2Vl0O%goh#HCl*^U0?2AH(3Irg$FA0
z!_o-idcEz~AeFy=zqP&nfsc<ZE4`$~Ri&q9VTlyqq14@r?nsEQg_zJSz{Aa$=PtKh
zH}c6WddV1i*6^?}^{Z#kzXP&;+;zNoo+KUk!Jvf6cMup`L+?R<Ty0Mmh+f>T(8H(b
z&S}SXIS(F?Pr+t3EbjCN+1Yo4cVAI#1IUK8VnR|f%tdfv8S~54U)zMjQCm@QoltLf
zboOQH7&_9^%fI<kRqN{N=sB!^yv5}A2ZC2ThFSbdbqnoHjf_~|y}+YZ9U&TU`k`qU
z8^?9b@Sy8_Wa5CD37+@_2ZzaZx<DWHW5<X!6N|1o!AGnq4pTOzk{<EH8;`jE^XGLK
zl7>QZ)6%kf^W9xamAj>Nfxj3U@_l+51P1y8#3&iAe~D)$Ud%AV%>rZ433<IvFjEtC
zv|yt(IhXOM_S{mD-Jo(|-;L|nKX2|%8O)$~$|P7(Q={Bk6iOR$hBa(rW+vYMF;~2&
z?~BaSZcB}qSuU-B!BAKr*4A2MMSp%^fA>*%G!5l==p4AE*MPsOLQZ0&TVE^}#bGZY
zb&t5%Simh84!wkK>YroMhoUtvF{hOrJ8?oe<a7XzIq7-@woR#*aOlY4HX=F*sU?Y_
zdijT&SkSR6NBom@{abaoFiu<Y4x*<{y&$`A;nD{8N=rIf3JO4>GB?9Dai;P3iQ~tw
zs}FY-iwkper^iDaDJ2!fC53rW06popt8aGf`Md>*LMV8cB#*^3JKh~dmb1GK?B_9V
z`PQYN;<Y^UmS>xWK)QnAf0P!}v9oG%Q-=hzuodEW5^O;b*V*U0t1C{UbwtR<HU+3N
zIoo%irvE_s@B{?<I;pet32t*gj1PINOm-C5d5a2q+P7U;WwlQT9(|&CC_2y}^K!P2
zpr!}2Uhq^eXz^F4&4%3$^YA>qccTt>!}yx>jqvE8nZN8gy)jNmD|pV6n5qfK;&+pJ
zTKcUd7=tMcR3T~;<Z<PsuC@^O7WyjG>*`~|9&4^nPV@NCe4knz{!PPjN=g=sb&sXr
zfYuW0Oux{+=caD4i=fz<Go!on?waa|>XuBUmS~dxq~hW@)D#67)%M>mwEnn^lyF<a
zux*r-`=G7p*Hc6q>YY1}=MoL?{Ua(MkfRcH8WmWNQpwI>!ulQnOGz@=+vLA8@Lu7T
zI6_ECaatu+J5E7{??v|eI7LN6KaaAFSi61u_6>GMkftvlKd!{1HR3wZoLNIU_P!VA
z<;_GL5j<Y_=)K(4nV~v-J^go9`i_o5<o^CsEe2?e_IKRhNs#VDIar29wKePLbPA-y
zW+!XHg;iF9?CC@Ju6>56G$m!RS=Sns<zWTJ6`tct;=Ty$YkmC`NP!NK7qPD-oa-SR
za0zDW0-r&zj*@Y=VtICS{&#k*ZRcx(&MrY0P8Ri==1jejOyWxecTp(EFqDue&~Lz{
z^*Y)$v^O65xcYC${uC{en7waT4!KT{Rp)`_hQ@hmG{y*((6a4h>H@t5k6yk%1QKKF
zvwjaBMhjC_q(^MwqYx;2%+%5y5)y*nzUa+(C3;jC+%IqOOg-3qZ1tr~nI$x_9ib=0
zX>bt79LCwGJzB;(O=u-Zo7VVlC5!9TVS>;Y^!&MYp<Ga3Ie4jElTe{Y+Q(vuq**YX
zRj(w)j~+!DVSB8%eWAzFj42}{<4JAXu{Ob_1I)~KAg(c^Zg{IFn!E4Soj;;xLatEp
z2J%AsPkBdnJDwNyFF^x(xn@n!;?6CPmn<(YYePxG&W<8{Qh?mVaz^DjCu>2YK}>XX
zG%x^g$w{aI@%H5i+=gN^ke2_`PBMCly00kZ5YRdoip*5;*Qz$k^#|%UUB+&D2U8tT
zgU`k6-C{=4i(qzrSgRH8IO}EPzwaqlBMP#&ZFS+gO0bR1K%s4dNk{omq~@(57B`dn
zCWF-XivG01|9CLd@7zhm9RY<$@nCqTmN7qn_SDoAK6h|YfDN9mQFZjBNec3y3+!1<
zA$IK0_a=*v%h`CkQdtXQ>Mqj@+lJ~9Q`B+J#o;7!>Y$_q4nO(fBEmk(NodzOH=ABR
zh^k_ySN9|6h3mzR#>PNL-=g(g|J+;$JPZw6H?6;TQv^ezgQFvx#<5p#M#|HvD)P?^
zGk7dj2$j%he!6Hn2!VoOz_h^Jh1h+!pVm$<e?MUT;X`1#tO0M-))=R-$n*!s>qKIa
zqNplA1dusvMOprL?~>)J!Q&qKGyMGwt)itVK=P5&h6aV)kxWFnM-D!Gmdzp-T!Woq
zh(+Jn%;s`Mdj9hBN3uWz+8KI}tLju-_88VIfzbTZwG$&P1}UOqVmL}RTdNA>Q$h^8
z#KBmyM4m&K9JT)0NnqQ-EVR1V%Un4UJT<zqUJ^jVc;U3yg_8zPoWm~r#oMhJH@t|b
znr03$EBMB2z+!NPEAVK}3+c|3uATdTeV1$~a_S7v9vvD&L=)nkXq9-yjcfFb2Ps?*
zwf+mL<NSFg$0RE+k5*$-qpj|nt9A7WwRMzHCM;ty#a`qXizL}7W_iR7)tXgrscQ2(
zZUuSyGfULb)Hnjk#U+rQn5q6sFAADi0W;FT(Il1m*;z}A%f7wr^2DLHbQl_SQSC%W
z>)}d=kxcGn7opb3gij<@*bx%=j^b3lbHDvmj`Q@n9;H@RFfJW2vZW6no>wf-vF`p5
z9er3Zx2(ETQiNk;##31n9>>Ut2>0bNVRQ3Qpewbfmr1SQUuaTVxzU(<NbWI%!DPwq
zLyYGe09v7xS5{U1p8Qn`FyX|B40h!ee)+Jxyg7hc$;WtkTUuI#xw!0F-}IpJ8RbfP
zUWs|JvLd0i{7pFRF8Nl7fAHO3i92bvihqP+vbwsHNCYOc)|N~7!>}I*tv`SCcN|(X
z7Dyu_e{b3_SliOY_qDF>7IMmigSED7StKJP%gQ>b($Wysj6ME^|4xtoM+P_EO${MZ
z>{sdY84GmoyGSW6o*f99bU*&_?+KA!de-Ns$rCWc!8a{mbwM72qId4xx&7jfm^kU;
zIWG-iUXKNuA3tATQM);NB^nRNi8XE4-LD!N8X6fj;S_;P`}`kEv(wm~o<()D>gpB&
z614FSWWwyB`L)$$l&rd@CTO@QzWq?#X*N2_yiGVJF7Auvb2f<3BmMo~7}sV@OiYvq
zB&pg~rzc_j4`fJUw|e)c8;>-azW1TvOiU7k?7FW!U}(t1+}s@a*?*DTXtBnmtvNf5
zzJB^7gD)Zwi3DtObFL)|P0dD3Ha3k-eQW!t!#Qx<_HzOX!mwa{7mTA^0=n4Q*Jl{U
zck-my)0un!#sbEg)0xwX+nKCC62^h#)-erT)6p5RtK}JO&C;MFcS8L}{H@RZ&5Rh7
zg6Z)Q*xzyvLNj#q{2FBuKflTcxVfG^dxnwm4h-Y<-*|X=qnHWL)PGxbN@VB<)K=5|
zz3`;}*701L@nm=l*jZ6==jlFM!<g5v6|Ig)N=CZd>Ax7Qtf=T^;|L!Z0C3n+SNF`%
zZ?FRUylJ&V{n!#$%x2fR*l&mwwz+ky|4*~rXkBx&qm$F2lh==}QZosJoEf3GBaDMA
zKPP9MwCA&A?aVG3$H4zyHC1J^R`RejI;YpWAGp?SeX=^Q7I#0Jk{#@Y32Nr0&(0<~
z5Q`7bk_>#nuwm5;J!NDDuqZ}$YrY)ZY-VO_muJx_zs<HA;Wh!CdsO;l&Kn}k=P+sh
z*TtE<Nsu}k&NmF_y#H?5&fXqu=e1M#a`A*VppWSGxnhQY{%m6=4-N_n4GV+#!iE`^
zO}Z0ux9s9QKYUo5u7za6Z5dj`Fc_5|F;9A7RFdyNTLkL=9(sD{adiJ7+0v~#3rRss
z|9)MHc_C{9du!<9XoB|4kL7uC^cPTsOUsi~lE&AsxBaHFv$f?EOnee@rtkYeN=Ak|
znh=Dva&vQYXdQ&96&4&tMawEoCdx=l8y%A*e*B0u#_I3ieRSh-lE>yv)!!&_(9a!f
zGAJ;R=mH2ALSl0>ouV7)y`0B#g%uSQM=YMb9RPsGdgRQRdpK!Sb<XYl_lG1%FQypo
zFi|1v`GSYcPI%_m+4JY4#2o6s#Nks$nuOWvqLE3|-pkA!@aomtRAuJE^0IK<x7L>V
z&kK{a+#5V7KNr_>YgU|`oSf#XmoFjt7q<Bs4RAyfkVMZH8xZ23%x-X=g;$;|sy1mu
z#Hu$wjOC4!vO880#JfR3dtRPcgudsYRas5VvwO2;Wf$tsP!%DnWS>BP%YR83>EV<s
zgkq2NE{aNs61gLuJ$`&=s*h4w>G>_J`Bi7&R!9VY9uB}cMgT&Ta4Jr2hT!d5dx~!T
zqUf<eEodeZi4fzHPD3uLM7O1wt6}$UUSmnGs2zV>vc3nK*rQbMIJE{B#FT&eHJNX#
zrJ|z~HgtNM(`|4A9rmmLNq7ME`&6FxQ(X=SB3udl*7DZYe7J95=>I$!9S(G|oblH|
zZ~8+m7o)t-HW=3}qH>I8hRQQ3Mv+O2K6EMt&V-kzNAxZ-0+As2p0dYlYYe@lN(kSl
zk01F^xYtL5Ab|Yusv__x(2x(|Tc&BR4nH9CeEXCC`;EisJwQvYPEDy(5GrI;Su6i9
z4D%sbaUPj;PovE?T7s&XNbz$SHMI}EzQ}1xkh%2Yc%q0MVD$fB$=*IOYM}PElk&eb
z0!KQyd4)05#OFWAvnYvsq#>d2yGz#csJ|8v2uiX*{VGyfYkz6>MP$XtC%@sVEl)xC
z6svU5^9`o-<~cB>$2VA@*roO*VlvuByeBn%Eb>Oeu~Jj>QP}H=BgstaU^qF~j^HQd
zHvxxrxTxmQwE43ULDh(KD%Di9us9Y~>*O?UYH0}z8q#OCs3pXup5No2%5v!(8_WMq
zR*<lOhhDXN{W!^AMIQ?OaQAsZ!KEU{NGSOC5pn|2w8h4*+`rGBz$&Nyo)w^P&XEmB
z{l@Ag`Wbl&!p<F}6JXF;_U@T4gTHbZqZ1}?zs+;SCD7TvK|mCf2ncgiUxEwTV`_qQ
z0f&;u%^yF{?w5AhU{LYf{25LdkV)&_KZ!5!@7D$s=_!Av_U}KLXb`t;BJ3gIe1TLo
zr1|N18Q%BVL*Up2Iy2hV<^&*qyet`*&Jv=p12~dq_T>LNGg0-7Nh-#!dg9IhdHw%n
zNTqptt{mKWbF?iH5m|!q@EuBT*|&FZXt?gaeW93Weu`kixu?HhPHwTF;4&+#oT3iy
zQToO`Do@zB2*@ZSM7!)i&<?XCM8AgLB~S438WD)<NLEx*tcuVV+p}kYmA&+2Ij&3&
z!^U;K1L^|w5{YZqR4kgadQ$rM;kNQBMY&PNXzzdD*=v?YfjdWd0nB0%>7Q!G(ac02
z%c0Rr{wclBwQ9qkL#-KLusAuNkx8e;k~r+t_=U%~n;g*pgCLPx^)A$WE$Y*J)KiSK
z?2b(IWOPtdLtR--T-u_#TXSE^22p<#Kb^2aO&?1wA(|0$HWPMH?I$mkeeewW8FcC(
zNw;i);k1!9QgdQ&&VD<)wBNs}|3l$hJtPrj78~r)!YpIo7UxrhvNLLu(a?Q}ShnTh
z(EoJ5=oHRhzmZk2M@&?-WWH+(Ef{nM{t?fgo65)>{NEqS4T8u2ATdz92wdjU(&^hf
z&8}ZRW!5-k{K}b4R21jRNkB{FTWL}9<4xK2kdu>d-(CqmsiH!@`3U->*aL|?r+$=~
zOX7wEW;}TJEaSu<m(9_d|BFO{XM6E|G6GW~{vNC-m~j_36WVkolpBV$BXm#7WJ;{N
z-pjB6M^Ur|75tcy*SSAP8*<_4HgjtXpsD=$(VsIUBjXPwj1m$OA$=Gp2~NS#V25XK
zk0xd2-z8tRCv0!-#BqY>br)%kRvpcm@vDj*1R{nhc6@>Ih;x$(BO_GFNeS`CmJMcW
zYb(K!9{{Y@Q7}z=u!FadrvT=H_1Ttc1Rf~b!nTd?jvg@M$tW2B^O%f{zY;C;P@9Yp
zmf%ki6BNwF@j%#0Z}8yUP*3?D+Z~*4A7BRw*vS(V73H+DkOefyB?M@4XlRyUdHtWx
zI~|1%4K+3HBnR6GeUu7}i0{t2Q3M}4Otaz+BZzKrgM|dJFb0DdydSFEd?4q}?1+(t
z#fz6O?@SLog;_)68bDc432p;boS@dwb71@?=zw2&xwj|lfBsw!JbK4@HtEON`4J2n
zt*cW3st<bsfE`FIigR)_rAjK{2g{j74^l6|TQX%vge~(=2SdgKs`S^di;IhKR@hE8
zb@b>_a`N$8T&|PfUgA`Nc?kd}-o1T$%7uo+R<{Yc1Z`VQ7<rl9Ho8y!S^uX0REkH5
z{wyL^-5-pQ{CD+JES4xR3@gBE081w)Z*?eb3%z=n)>o@+V<uv6Z*TtD5M<MaBj4QE
z_<TcH7>UV;gbVb4zEh@9&jCR*frKi*L+7__=}bz7X-`?3?<{>n51Pe?q%M9yApKhJ
z*Ne~sYQnK|!_4dy+68o1ZI^_Fg(07`lFb3&cpwa^37GlezZ_%#kBW-l5sTx{gxP~D
z!_{_zs`61ul2W*gcaG_!_olr%ADi;?|EZhZyKi50$jN{_g*s;!mnGb!`$rw{Z!Ru#
zNYbOGrA^e2?TkzKC;Ys}C$agA_y>?dCSDEuPgVAOtA1gJ$s;FR0I{otZ$4dM9q6;W
z^3}pcH1yDW1E3~jW2rDBDd@7ZM*=kn)ec_$o40Q5{NNVOW-@>!qdMc-|LBn96F-%I
z-WpO0s~8$?PJa+<7*<nNHPlg%?d3(zS~sJLlX9$GMp7OQ?{POeZTLk+eceN@T0CWu
zbzNCG(LhW5g8hBGqaZRU=$mEODJPH#ZC}4U=m`w)dGMg+vR{(1ilk&G!fbANJy3N~
zUOe94;_5!;<OHa&CQ9l&ov7#!@JaZPe$T8LBBKLd?1r{MZauiQL4k25wO;mkAoe!T
z*L-`oZY%>n>S8j&VKVQ{L`8p@05Na%QtyO>T&Kw9mX=J7jHDz3b@d~zA;H1lm2euJ
zxXrCa91m$4XuSMQ#W)Q^C^9k*@?G^TDA>|+M@PGFpa7tL$L4Ru1L6*5HpZy2ubgjQ
z-{7kFwAJ<WEG#X@{`|4Jc@t(jP2<Q}<T|VC@a!)XV`B^MwcWm5;lwq_Rp|bZ)6In6
zv^+S^`=BzqfHJ<eLMB#(;Rnyg2liBd&T;<y5G_Gn{Q{wyrcF0VRp3PYzGF;<FE<UX
ztZXtj4;Sli7HU3OSNHjW-j3^9;)V|>=0kiXN>@t^q%v{P#DO;<F%cxI6SS<cTz%8w
z&QeW8Vu;8s^-GsnTP}w3TejIF4e3!lKR>^nogHVVl?y9)me?D<HqcD9b$kh9TJvz)
zXXbm8`0t6__-LB<R>+5bWDg36oZ@vFm#LuPbbG~bOe<Xd_1xXuqM|!CHvSVgp?jI-
z7vMAD!+fi<=$YoGTzywp3CWx{Z+6Zdotv3)U0Ilfe!--zsw(252}lw6x<M?#N;N2t
z%h~qM+5;>~oABJsv&XR*q8q6v&cjpv<%`$uK@@wJp`SmYP7DYQ{S<w%Ln;Iljyi7t
zr{kAqEfe)TC}OiSp%#9f<U_maH6RojW-+Q27=wyr?KV+6V*$4WJinxb1cui=&Z|!k
zKY#o70=%#zwR&o5%GtAH?b?`l0`LnI!{_(;$;nXv0G>h)-VID6Q``+(`%p_Q*Xh$W
zL}GNnRnKR?fB%La5}_yJ;^NqtfR^E4zJ0K^>h%G2FIzh?vmQ_8V@G<`fO3>RW%d~F
z(#JZGuOH?>n9e?dtp}q1^N4Cb>>wX%v#OzSR81JNiT?P>%lDo;Q5lCzD{9s<nEB@>
z_qC<#3S%C@@81z0Ki&Z=Wp1(dn9+^X1x2nHk1o3WYt61OkHKRqvA(jMexY8V`s3Gu
zKV3nkH^w&SlZX>okK1d<rylM)YEt@0LH>;FnW4P}#y76Vf{^+Z7kdOB^r)T+Y7920
zp?_YvIm(cZKbnD=<6F==(|l3i&}vFQ{v;AkAf7Ad_e{JHN_p;ri3LSn5*QzXPVA>>
z1dZqK#S+tQjSCHkh<I<+=@-RZG52pQz+qqqHFcj@)d)fyn8T4Sm(|w8tNzYvwHl`k
zKy}!yIEGFOPxFxVyoJ|qhw$oj?P$I)zp-+I%IX0Omk^MUr~+Yq#2T4(zY}ydH0)Lu
zPJ&De+o`{U&ah!7E;G|WON&iRx)k1Gag~b~Z>@T5QWfD;zq}bOJ?Uk3@lor3jNe&#
zdB*BY>wWCXY}sPNc3$8MO-)R0uP!;rhl01vNKZe&V_S4a{!yr&+E+bQRpL*L*m>sH
zUT6Nt$t60mZ=W<fE31&mQnvrl(EjQg?xP0X+i{L%mUN+(t3}DeNaHV&qtQyz#)b>L
zJ9hYCQ3VFlU-Qk#u!4XdL#!`o*T6aeEgEwXTT)8O4`ir?MTY{d+e^sd<{aVGcVndG
z4UUTH{yJZ;c@NMOw%#F~HLP5l9|tuR!qZDYxzsl_q-m5r6)PhUzCJkJNEnf;k&F(f
zbsm*SBc2UWZc~0G@d-I6Z-5prEiOvlp19ij=Gx~oW*ty*=YnEK{|8FJb$RSvZG@<X
zvCN}aFlC1Wan@LpZ3tX`jUT}QU&*2phzKTL!&bBNfYvrbJe&UNSW9L%5UZ3Lb*1>6
z$5WX~;X<oZmAr~g#PC`$Fj6<ZQ-l5q10M+kZ!I?Ya)PFeZbk{tlnJ*Z*)Vxx*a_6$
zD!>@VE;dr_ZaYka!=ag3O@wG5Q&E1t{b;k&N&?3%64MA^9{`u!m?79+l1r?=A_#$g
z7S}n$EV20M_naj3^D9ITJD*;iX}CFPdJ*`xGF;UWo3FS|%25?yd|ZttRq=L9@cAT)
zQ@WvO=Yg{IwRx#R>O8~p-4vEPMtC(i5zS@46XAbStiL-1>Ia1s_H1ZoHoe$H$h~Wo
zG;t{KC-KJ$WDO~ca5zg$G9v7ZWMTu8gxCgcU_Drvuv7|~HzVHfet1ulwm|~P`vxOp
z@2_97tN{8y+@3t5Bmp@GL<GNX-hpRnWpx!m<J!Wn9ni*Q`0q9gW8veQz+WNJ|KFc7
zcY~Gx!+G>*+#&Y`mSe~Iz)9qYW(?9700!_@&Dk+IIjMPju;xIUa8K8Vxi)il<)6zZ
zh))3N;7SIB<v*>KR=N0`j`LaLthOdZ>P??uic>%MHApc+WD+!|W)MKy!T$bldytj{
zr1l+L+eokq7qW~ED+?0VV)cNJafj53YW|*zkl+*g@^k=kf1`C7US+|AzqA&B1e&XG
zHb8O!R^OrL$jso+iWIR1_1XFNKp??lMu#bn?`hhEl6E=QENDXi!i?ozF6YtocS8q!
zg^G<T8RU!d&*+HqaOjO;j^hv^^y))`OZG@-(L6$uOodI1_4M`kad0&nWSoV|_y*}i
z;^L?;_|x8XY_F(z)Gi=52Z2wL9l6+kF^(P!nuCJLJA=|nqFsq)TU6;bIN*kfo-f1m
zXt-1&#RTunS(xp3TyPawE(k4k<DqgeD9b_GS7LmjzR+l&1v4AZcGA11(WJ4V0Ze5Z
zQ1js*NaH}^jbwv^acuC_oo6?7b4;Ft!NaxAKM=jmcVH3zr(`#AphZA`ZPJaX65oNM
z`60}D7KIp--?@1zElDZ}EZV>$YWyGGzJ1YFpF`2}jKp-Qvr`b`p=jv^QQ7#_@(oQ@
zuDhuZs>;d!!w#$IwRLqUc~99WX!kFG%TYgauFewm2|rvAJqO=0=DE`A?~H9bd+`%K
zeO1`&7a%IWfB*h@7ECvWjS)AmB7l<5=&NQCCtqyX9Y}B?x{!aFOofBn9UySK=^9Nc
z-UBd9IRe)`ls2^z(~6O9i6$Xk-Xk3aVW%<~4P2jxGq~wqy(hfCkU?&e!SY_04c4PE
zbZ}$4$6ndc%vjy9vZ~qq>kbSM^;`Jb$mF||Bf8>dW@q<tur?Ybs?WYVX<z){_-j6@
zByFEF(-2>_*+UaTqPWC@A+V_b@eSppwz{EJ&5KH{fTW+MIx+~jLE5Ni&U?g%=>aMh
zfX^7VLtD5=DHW8r7~<KuayK*GnL~C2W=;KcIiOBA8R^tDIWe(~nwpxDGUf$<GMM|!
zmel!e@lXh`??LY=<uX&&-X8w;hS?`|KDR#|qQ^ZBe@qWnw{H7_^NH=e`J<;#;R*%m
z;}IDaCch(vrMkcEek`lmJ#{)UUS2;Y9srXu-}%T*Xmjrt_?%cxG`&{vW|m8*btFEc
zBm#{YEJ&*K3NM|9hVn;c=~*mMd`Fwp1(Y1}K>FLe4IzdD<65U3$c`rkJ}7E2Xt?zD
zBrwn^J*%>ocU>-N(a}Gvg}dYDH@hJBO19|h<^w#Ymj8>?L$0L(@O+(93`BA^`}R?8
z+m@V~di{v?_8A{pPUeK0B%gir#ZTSvj}KKp5`;Bhi9W0D>>Gl&kAow5;MS2$s;2Jm
zMDsJE3+NI~=;cette~bzA)Mw9XT>K-j;bSdR11}S`6cDViLGk<s+_5pJY>j--unn<
zB%nC-@H;JKkR91Kt99}$LJ{mB`QC1jR_XB%0;Xx2q3YhKRi8nLkfl+^$%x9AV=0C^
zzea+T3y@=iToiQpJ@S}gpYl8+DoUmDN|EDJu6PQ|vu8I8E2a12^V=yI?Pg#&r=)tk
zPp1-Mm|YnWXU0%|F9xvT)cROR##ED(47*cyRp<?Dy+$b|5y07lU%m_v0RYL^I$W_+
z>B)vrqXrrv41khgVY$l&h0^q3lm}#Y^+7CDmZmbzdO;S7dV2d`Ub$r+JyM>aeSeDA
zDi%cyW6Zi;r)lPG{z^m~nq}KbIiC|fh^}acNCf1LSS;*t#Bc0uQ+d+XA~;BXwmt*V
z12OkRn@cv?3^W-9zQ|v6@f~Vo-eh9rvy^rm4}+#Kk_%-xMYj;?-)abe65{;B*><VN
zM$Def_t`yVK8{P)zmsM9ljT>v*$&H55cZL-x2i05lEiKZ+jsKBYu!S%&aT9)XAScL
z<ro~x5+oWo>%TQD$AhHu6k`3IW*61P3)YzO)dV??^@<%oC1Wt0oXqjZyv)^|-1tr4
zp<AnY_lH>KS(n62CIOyn%qWrx<lgYEzDl_DFz;^Y;TqM?&6(V@FJ*^$SVc(WVXBUX
z#+S`*%)?F}2*S14q(Ft5_O2{WU%7IHBoV{rwoHn6fjkgJe^-gTt$9Y~8q@u)XU3^N
zcZ#?z3A}p{J2WOYqyO-f$dXd-tC1obnL3&}rizM+`>cU>zS(Jde#$)pTRNx%nMX3^
z8@t(vrT9AQN-gmzVvy77<x|#GT;PiT89s7@?mSKE1=jzmaruA52fzxS^rx%1=!X$D
z>hnA*@*Zc~Yq41grr+N*gi8Jgk7ED1fOsDc!K0&FD-cfED4meU+G729XmnIVTmwwp
z+qd<lr4N|zeL;vOn2VN{my}b92)nY$KKY3wfTT|L7S4arc+U-6I`WUM8yPtuoEJi*
zYs?{uLD{oh3afh@etmz6*+w2vywLwtmn=piL4urao<+~AJzB!4-w;)1zF8~tic-+y
zO|RKf;Z8ZB|7^EaLRR~HT@~&N<LP+0<fYQmQVmfhqAr!T^2q=b$0|x{>UbxXipKjl
z#`$D2&OcCHr+KjUkX{>m%qVKJ;?Cq*$k=f41|6G_K742J+C4oLdl?)||18tZP(cF|
z$^48waQ_JJ{OeOK-E2r4p{J+E!(xWB8vrqeU=2xxp!MIo`A0z$y@Aqx!DJ4E7(!ho
zl26G(@GQ)NIoAJW@2?G?KSWcNo#|<a!5>Ci6@?&gH)0vEL8_lqyhTz~dB8-^w(yEO
zNcC}8y|LLJNV;v^0+aRSpVmVzrP_>vTkh!5qTH8!b@FDo1>d7NN_M`;Z_!yei)Zyp
zp*^S3MTiGqzB#`)x7L*1l&(?P(cWIK#9h+pA~a+)e^`Pvm_z3LPyKoEVmHNM7PA@k
zGw~7W2Kz>>4}kvehad!+PV~1PYHa;uW3Z9QTnay42k~dh3K%fW+5F{MwK3GK>q=VX
zIIDuwx2Oo@oN0V;$em;5h5G@t#M4t#E+makZ0v+N`uPr}s^kb-|F`T^H71Wc?#M+N
znKoD>4-#JTT&U>K|8F2(^g7rAV%B`}h4)+W>EV%SV=WYLSX*&s+g8WX6dRY9l@$tr
z4brW%jPVcsV^07papC%P;>}6bEy*Q_l?caSSXSG`qzLxG&nIoRMIIy;kd1*gri--I
zL(No{3llL@)&G~0WkZok>gJ6N4Q(RHyoc-&Yb_JF>2WrNnfeFp`SfCtrF7@tiqp=#
z(m^vcoB~O!dYr(?lcXbi<7o^J?-x6E)7W?&jXiL@z9l6L(-lV;O``OJwvX7#;^=*u
z-`#>14fEp?C0)mITTE)e@mM_u7^K;X9gu|n6*>8-|K75lK|ti6t;X02=oRXq&)c(f
zJ_9%9$7m);Y96+9Qok{*zEe&#P!?T!<cXu0l2|8JP&B9ZL6$`uS{FmZV_R||bUAJQ
zR$e{Kv9IhobV6fDk--n*ikaCoXez%9yK=i{OQD!tsP=^mWmqjWn~S^fbQfq}arUk-
zeVoH`&01b9P`z%M!n-CX4XHP=HqLOs<9K3fqidhb4N`O<{-Grn{`6q&;P=9W2Z5(F
z9-b>`f&_b{<4s`iZ#=#Y5;%n=N<V#jhT{09S?%&sYq}w?B2c0;x-&;l%O6HIOP<_T
zuKjnDvf?O$68{QisDyWT33;;rD6vye82xSWE$@u;=T!E=<7ISfFWhgj)iK>ZvhFKr
zw|X(<=JL3Zb9MUpCFk1?QM*D1=bwsqxw>%%Jos?s^o}#*0^+(mYS&_7oGx#NMIjYn
z@%mG39E*TT1JD%f2e1Q2(r4a2JXq>?M0j|VT5IBO@+sNfkZp))EF5SH{wxUmPg6@v
zX!(GynSusC$<eHIzmdT61;QB7QR^GO$HubXzP<0n{OccGU4Y1p^z@CP1zE>021Oo!
zEApkJKFoA-iTtO|<;!Z$tM8tR;iPA}_3VR(mej??pjVM}-pH9G@pvw{NR+v>vorF<
z_BD>oe`5jZB;9m;{MU|-{dIP_K1=Nacre{G$C2y;-4in-V`-3TRk2B3ECO7?*{Jel
zNY#j&_a&3TZ+O><JVe5xb!PCf^}`MhZ-c@0*LUyCPKG;k4@<1D4W#IHEL?mWlI>gd
znbBjQkYD~zM$LNddf%_^FRC9HHZuuE|ABgpz;W`!$|;vyT1_7%Y&*z<8e5eD^6zSl
zrqS(IgTY9aKK6C!kzb@FqOj*!1#quTOi$BA#<(vR(1P?-QK`kDWF5o0fR)9oCTZC+
zZNJ8x_M-RLXQj+gX0GVVz3h538R}AQH}8qRe3V!l%i$%vM4c)J$q`2(y?_ZZ8ok{p
zD$VDa%bIjI%mi;Y5-O5@%v^r$-Iwo1AoSlQF-Xz<u2bdgGs_SbLbM1a;Si>fq7)v}
z`GO+alCFEcy2Y|R4`fTZnx@jYM6dn&W`grDG3E=jOv!V_c)Vl#17858Ao)O5&4=J=
zNli_6Qr1$Uq@+{`=Dv2SmHi`u5WfeG?@R+JKs^sfB9oGgSEtA~Q4_v;o~R*27eWjd
zeW~Zz8F`-7&*i5d{*81_ru5w^r}Z&U=E&_I1f4w~6;-uGz_F2Dd+xz@n9TnFVO#Wk
z`)R)B?;GNM*gy<2;tlDZesr6R?n?bN;N}nnBm*}w{Q@lq^7cQk|HU5}y)?mkeB%dH
z6-<5;JV!_b?tfkzwhbMxh!elw<#rJOf)^GpQ4<0w{u-cs{|CjTZCRGy<F(dEATp6C
z$?%vZc3m)pY-~6GUw%G?WjlqZ5ILEEXPa8r^xl*?>LjBhQ?}XMJeGU^R|Af<E{jpz
z#mntFCghuv50Jhx&7q9Lc`shXe*P@Mp5%zXL%4MAuW@G|2;-Cu<Bl)bLLPxaG97e{
z1XVT5nPW#-MU{1Rw_0BH)H>hfPcm~&GRlBX+`Yj`KUzw=;vc^Wge<OunW9lmZR&BZ
z+??ER5u!puFKP#iisp0j@=7J26Lj`o5=(W_BufEPZMd7{ZIs*i4TVbz?5*};)tVF}
zvRYRMngtzQQ`4*uudZD)dL_a?y?OP`49%0O>h!kU(bs8dm4xVoK$M9+{p`miIC(gG
zPx_Kr(ZB4o{%Qi9g;@1X*zMYIU6biPMBmz+niS1fTh^NMM)frzOm>5ij*HtYt?+Bo
z&@D+0AB5*$Uj-jz%ZrGsUN1h0^LQ?i_)cPu$8|UF#O1|;%aNTfiHTqNDa*V3DgI@{
zCDE18)PDO_wlk4$g@PSHZU;$ruD7aT{5;NM+YFSaFC+tT1gYQl{q6=7>sd9_7^eJY
zSRlMyUqNVJAjgk$WweBPtRkY=!orFcL&emC3ktsPvhC_ygbg<q)?sq7lthhDf$|cA
zWImHs&Mg98$aEfe`22j6m$y&AWT-sgJgV<dOp>v+tZZDkFu6&gdCMRD!u;)nGxH_5
zRF%Ib6BR=-q$2mp6M-HLJr=t6!i)@kQmzY!B_*GdNpBCh{)ST2Po<7wYxW5o`u*<w
z?&~-$B&443r+H&>N1x5f$sLXlQ%>Jgzj}E~nc$6}>qcd_$)aB|Fp(EVA71Y&*6pyr
zb&KCAhK80FJNa;9%Hx+UAG3{BHau6J=aMzFB7;KDB~^~K7qPN_@Ac{2_-ZfkCF5sA
zVb4=e4=t3A-A+i&@b>u`y|Z9~Gvl#6-OzE?EzL+64-3QGA3W>QR|3~Mcz9S(O7awF
z81Hzpb>rh5-X-RpNM|Y*nHXS}*thdIxwP()K`^i`v;9*>+qb9H*YCbo08J2NM5gy%
zxh+iG6-hgF@?>1Mk&)#z7sli{V!qBE#{PEE{6eQO<ojx9h8XB*J&_UJ_>dzF_07#K
z`~s(hz=U#eSKZm`n3?|UJ#O~<zWve~AF2lJ7^l|kMEyz|AZ6K8MO?Yf1WJ{Yo15>{
zDd=n<nSrsdqpjDon(7>TbynT3rKP3B0j=O*p`|4s`|H&kf8}Qh9vlUQ$J?o<51#iq
z?4q@Krip^^qg>RJmWF0`F=fmfjDa3nTNS^aaSW`rq@<vfRA%&H=wT|=3XWZlI1pSZ
zlUu{3p~H3ZDd+0^){WKHcB0@|j;m;OoTk4%`9~?8A-4P2u9uc5IuIZcYO~h_#-)t+
z2y{ywiQ)}mKlatgFu8UNx(qFz{p&&>3Ou4@GObA;&r|3j_CKZShBG^-H+j~Z#}L{Y
z8!djfQg+x&dm1P!3ki27`7sKE_~bh^#X?SK^5SOL_*&9WS^98fFXQn9ktgE5;y-cC
z#KhlbsV<IhDTQAus+KXb#P<wgwngZu9;=v{;n2prq7Talbmdj=-Pa@Pxtn;EK;Sw5
z{Lq?6*2e!y$c<^Gpbb+Y5N%11_|YG=tTsabqGfl>XwVawkgrPU+syuVpbf!{TuFl9
zPlpOf{Qi^s??3A73Ok1XNixI*J(w2W_`QD%IujmyqS*qK=u7`wks`&rehTY+wKn@J
z@lZ8b5nDH=$)O@DE<C8uRa{(XN4g1q@!_o%s~4Y5|CL)o#@l{XMuUpbN7_s{*iWiB
z*qr;j&zS8PJ4#T!MuG_UDkB^oFKIF&tp220W9u34cV{8w-XAzfD5Ju=1vVx9-3AGV
z*#ua~qIcn~(tFCBzVb)x-MGUT>(@X*Xgf#>8j!z;Y^lbMim$DT2HmO(x^S4|_0i+f
zC9E|DM*4yN!JAN#p27}&n)G|zho;2+QhX_%^+&}rh{!*BHMU<5gGi>P?cQed%U3=c
z{`!~U{peu|nbGJzrhVa#j-!|V33(a3J9B7nSocrEqg#$syQSe*kv6gIbmi9ljQyz^
zGnPh{gKZghIy&lK;|}AK;q^2v^)>hFs<<IhLDsIe?=iab?vuCtvQIUH==d9NtFoTK
z5T;m+*b(xqHI~SwWY_f+Gb%XKyFXBUe}1G_c0xjRKxq$#3H-grUxP!Rt80dg_jO!R
z&=u!leV%*zL&SiZ=(c>;Po<SxMs^6ZY*y8<96GA#M%z@;_N;yoxeXY(O?s(E|EpGr
z<=z~LtIql3|8-L`C+=c}%&e5j9-GaUqrYWwC3E!$<G=nxJ-_i64-0OT7qQ$#I*aDK
zvI4RM+Od<z+6Wb7xJ#buZ|rQ86co;M8*luDeRUTFBXt@mg+OMpLR}=inmjCbW$|Ee
zU|iNDv)eg5_e+Q(3*E>0_uCkrOKP^i$1|@?#3sVbY2xB6s@ndic<3E<v=zMr-5GZF
z!6omD7b|S&Ff%!D_Vj(%?}I5l2iA3h%(`Uj8av>nd9ZP>JtK&eLXkIL2B%)#d6%Ho
zwIIJ7)=PVzD8zBh6ST~;>})$PmCn}=a6`-cAFc}GnBNn6+1)uyqPfv*IM+ApvZEu#
z1_4J9<vd>XE+^;Wjr2Xzl}y|f{2_h9OVY8d{ilu+a%84<M1ur9J3I{q&e`oLhCp}k
z8Jl|?^`h`(NNUuNo1LXmsN`GPaNBxzY<wpE1fNC*LfhuWtwh+Ue0_aq&$mYpg{lwV
z-K0204VW4QMF6oT7`h@X{IZ+kLws~nQVUKC{{F-lyT7VOi)q?zexj9>kgk8}a{0z(
zmR26x9Il+b?*iE;5kgr|>~~MADli#0YhTIkv-e_gpkv_C;f}~iP9`ZL>;@gx)pu*`
zg1rVhUmQX#U4(>%oeuiRojps;DK1|9c-ITbX|O}>EmOYy;4X!;NqOsXlx0ug#yyHw
zG9974&y#&wm47dRsg2ruBZ>h?MWA2+q!~o(jEGZ1URx2S4|cMml1n*41UYqxWdDIQ
zg{shOjB%LlE2m4O0=dAcWF_PYy1H-jwjKfg4#e9gLT}PM03lq_T5|8q_z0x)H=_sW
zL%APkTd|H3Ev>ASU%nlAX}pb(_2$*9aK~(Q(d9bvU0aNFA*9D9`UU*1&!dlb;NbH-
z2wL!4ia-{8k&TUwh=EhxG}_nqHC|m`AMz9YN1*|_7#yr$oxCwH(R1`Z88C5jF{eM*
zEi3~4{cT2@t0N-zXLM9lz;24+ED5Qpr*O)A)jPfD=s1T2KS_rXL*Sp)4Ousmz{-sy
z<A|4c{u`qKE%kf2gj=$1lrAhRKq5j)k=D*UEhyOZZoGq*ma10^7JJF7p6`%vWomj^
zRrRWk4c{Kyw1j^^-CPM2!J7^8ZC=ee{}tRP?7QOL-xLj0q@zHIvmU37{Rbj%OJGR5
z-Eci-xlEy@5f>3@teKnQ0tlD!`Zb0eh1sw}VAO%u127umKj3&lN*G&SSz{%xT4cl;
zO>}2R;cb_>cyngzwlE>752gHcY!<C=vfLL{fHLSWZwdGsZv8=ST<(7EHkV~FhoveU
zhBB7$F}l0k@BCbvE&1!)_NU!sOi(>Q^<)B=h!vIUQdLmLduOlfCQG~Kyn=O<lxU2I
z2u8uPu4ps(1q(AN{+L?GnYsx$oDo%)+yRc+)=d5mZ2N0Nb+YoYTWOdS`~S*<(C~D$
zp>rIH@u5(8^N_{+8_WU#yBr)Wg`KA~ANk@<TL1hbV*B+1PKj2z9c(MBnV`C#>=#Wv
zzeA<R>;d&;%tH8QD+oG(T5Bx+Dpdn?A#jW5r<tA}x8<{TF36*R#EjvpmOVc@`~!%>
zt!28MJN*L!6pGk8E>gW@R|-RxxWic6B^ME+3i=F2!yCGqQW(k7u|uCZdIs*Y`!d;q
zOHa-|7iVuM3|hJ*?*99qsIKB6V_5lSCIbAV1`b+v<lnt$G8-lc5tCv1H6Z?JTA2ga
zE|3P=qS-$sz}04P-t_DUVMO6B*$j{lj$6SqH@$i*Yibg^p&X>IqutAQSVW|?ww9M;
zXbspma#$oJ3bWgG@wki(4`Zz#J9caViY<5T6)GyKFnvhFPgN_{iEb$kTzMrS{r#o;
zzp()4Bj7Wq`V|z3ze03*RJ_io(d^if^z@vZ-0bKetDXcKo6obQkxT0n6I+o50+=4s
zKtu;L04P6qj-tOTCjcaGydo%BBJ2zqHx>fe{kF*7V6UtC_DwFfsBcV?4}$KmzQ1B(
zVsf~@{XoW{aF$$R;*i7K<YbKJ=~L<lO228X`ss4|NxN^Yc{%Bvpbhk&_oIF*Wc7Uq
z2m1TfUM+V`^=q$We*gM?tgAQ)lz7Jx`=CFi4x?ud-Iw%zwzxd5@3?8lp{8fk(`)N%
z=jj}}PCBkkmRjq2c+3~iAC&Ta#qV??$bP(Q)lX_Y{@Zw0@%+km-fdpL0B|f{c^~2*
zVm~@}poecYX8|y&x4F2(61Ani{i?xh{bd9|*ME(BxUG$9V-GNiTTnmEUOQIi#KP)z
zmRZ^~=j+b>v5?Ax)T-|L^f5Yb-0s#bUkF2de9l=|aBC~~SSTygvT_SpV$}r&UDBLU
z3E|o=9cQX%ZKNeWVUJaeBk|`m2=&lnmTlk1w0E2M4l(f}px%_{?_W?+`NhV;GSV5o
zkBQ0F9N-*y=19y<0{$Ht83|uic<Z4@cQ}lb?nm<OjY9Ui&lDSs)IHR_7HTxx8V0d~
zA3ZB$xhrIU=*+&-RFi30{p7>)4&5%xV<7xEc?8FrTCRxOFO>b1As<e^T0Lk`6}A4G
z{ZJ-+11l48LAvkOPQw*nD`k*v+HkY5ceYyCprI&Y$c4L#r_lK}Qa_9k?bUPb8c9{O
zV}E>_9tk!!-cgHb1s~qV+78x~40X<8wBAe1TtEQlIqE}`)4U~+5rKe<WN2Y{uVVW;
zJ-xo6`fQ5_Vsm`y*z0nOLEjSvMgR6lW^&&<-c^77o=?t_!%9UB`Pqw+Zj0l*Dpp_U
zFe^&c3Wa8D=%04Ce*|P>pyRe=D|<X@$VHPHaB(X94&zU)6YnLj-oCvz?EsBzc1`co
z^m7IV9-r=c=j^Vqhl$=~2ZB`p`Nh$e7}O#v&BJ4PP3r5-cgYk`*i#TI0#8J@G&Q+l
z6@6G(v9scShG{_tCAUZ!xmfp86BD;*CVF6<m9eIW9^o}89Uh*}cTT)ph%@2tBbjJ_
z%zN(}%gf7~xb#=}VP_nu302xL|5nm*&Jp+)+ZLkLpFcAnW=fxpkwP8r3{++4dw>?b
z5TRcT*Dq|IoF|f$rf*ej=(SU~vZLF7p>~yUU>A$lUX}xJbir}X&c@b^Je;H?jfXuy
zfBFY%is$4!dzRtt-H&)80T@2c^=y|bMoi7j8#uNEj8W@e9?%7JxTZiiFu<_eGBOXA
z7p9#yK?*7ys!&-cNt!y!JbGff3lY&M)`0r89UU3c#u6p7Y9t(jfp`L&fBVj9XE5>8
zO~d$ik-sU1?b_LHwsBqJ;I287N<7f<B~CoyyWK#IgPk26gX6HexEr!p9Hdt5e+{Gq
z(mNn(drTmHak2qI(}J1M87%OOIk)98r;aaBEn@8rwRKf93lFVM<B7#C{Ca)QI_Q^M
z*4d;QNwB0Pp$H{=Pu+q8;W+>12f@KN0VN|f<J_mMa#{4Oj0_BD?R;LPCUbbKh@^U~
zlR;>MYyff!>Z|t%a&HRGBRyxou+<9G2oS-6-aJG{CrgG17G+4UAoM};5fl)>U*<0V
z&`4`NHvGd5X+yANp%wd8Dka-4Y1?N*_t@}e^UZ2Z$)OLklf5S*DvFatetv%aEy@Q!
zqoYFyZrR)S4KTXEzzq2eR0Df~^dYw|tOtVJ*VPkKQ>js>6`Z*$g#@V1S89ac71tb>
zrhZC2>~saLj|S^di?*DTGcp`XE3++8$f7ZDolF3A426(xyZid8*N(N8nYOdMN&A?Z
zGcM=1L0!%F>76tJZnnDY_~)(t@O@)8SIi?kl)hpz63E%XoXOE)x}n``JDBV1_1v6`
z`U5qU<&#b1Lw$zMw4Y+q^~IAp<cgu9L63&v0iQm7`Ygl8;hPv3dc^v`0m}*-@V+$;
zCzMrGq#Q;9{c4FI71YPvr}`%GtwOI>Jqk!tes+N03g%`QXkdH`6S?(bK^$%$$C1X1
zhYm%tDg+bFARxu;7E71sA$uP^ivyQ)XwM$!KOL8;0>M;X47GJ}fw?Y_(=NO2+K=}3
z+DP$nM0phyh<^T-qK8~}Y|uawj&pMtx->-<rCnprGO8R9W1R^*BzEi)A>DQ1N$nTU
z%HA&%jWm=rlriseq2CzmSY*^jGIGH4=Q4C!&CN5)3rIvEe#<-5k{(yKP|4e3`|idb
z_5<k0Y;WDVTx_=Ir93nn^>6XiASDt6_wrba!Ek9))9hSi(R7qs@XgBd>X>(WF2P-C
zaDPBGJv^52Nzkr)+qI1qdYCifyuv-dmhI8GoP3@Pb`q*5Ej#i*_!^^RL+Pb7`3Ma+
zU(kT+l!6rIqXqhCYHDt){Pn9B_f;4^-HiFHH@~`6q|)hX?36sifk5fM`%@~GmY^EK
z!00|HAu4*={#9AoHpCHg7KysA?Dak+AQSpHbKILtdj;~?$B)hL$TrAY<wZn9K-sI|
zEGIXnzge#39H;0i@$R+~rtTRAGM%US`?8K?_X!1SKyu!2DN99anfoaJ(cZc^@9m7m
z%UySFls<uMdg6CzHfurxz4WxXSx0A4{Uzx?3VV?SvR}kRwfn>BCh~E?teaH1QM!4*
z2MyeRymij@^({}V)`gF503%;9i-)IVZEl!7is<-Y$Dx??^hl1qbwlnySHTIZ)w_-K
zm1D>!1ASkM0lQ_Gdu^ED<F2b3>gszpuA~ipc;KUVj`6vK!`4)k(b)BH%4+<&jZ)wX
z2>sCaYI(ZsZVbC=EafOmKlm%(2seK+^mH@V7N&@&3Q^3Bt#=6=@|DL5cwRE5S)N**
zQsA|0%^!xMgkMMqxfKhT%#v@o2;I?-9Ovw)?mc0o)f|iU_5pD&^PMAt<|h`G=0@Au
zg@p35nkcq(8q9Unt4QfOj4ja=-gaDV%iUAi9XAEx8ho?M*_YBj{8JR%MfuLU9mxzQ
zj&~Q%zB}!<3~JK}d0E}AtGQ`u=Bo}@L_F3|14>?Z+u&KzHgFEzII8A|@&rxgRXO@!
zCYKKAJM<M51(|+H!_FMxr*BUX$W3^Zo=IFaHN{0J*CCe3+LUFVo4Q{TZ}7g$Fk4~r
znC{uC^og+Bn(Mv;b9Y-T?%vkzvuw}#p8?CX0ikeGKYgl%RUKJ}SYU1rr<%&jH2xAC
z%-r2S?B&YPC*M--ka3rEOoM`GU_`H~p{Xf7IoZVJJ`IL2>d4PL=G?e5Q%zs8J^tgl
z{ybXA^h{^5TEfaC=A3fSqQfh5Goj|+77kI*qqhnetSlz9%g1p&HwdX_Tr()&WJ@i#
z&C+k>4oStCp*w%{8&RqD3nb6pBlh8m7leT-x;vv9drdzMJuRH)1Cv@`U*8g1rKj#s
zWq}_DZd|ZrF+*QWn^kMvOMDnY7SA#to&7C9<C}$QRc^(tUzQfsrW>Ese}^bV{q+p_
zwOzNl?vL1ZA3H%!;Gm<SAX4;f=RHp2A-VBWCfUTp>ZT8mMk|qU`}7OX4;8!mM)|k=
z?L(vwaOQKyv@%e%@e+t;B#@13p9*ih?*74lkt1f&m%{FwsBPNdUeZ;D|CDoybJAW|
zn->cn-6XPW1B~+&qbCOX8&}3%YB!QULlfRkIKB;7Npe7N$*;fadBWDQT?9{x4G_+=
z0eP8td5RHL;pZZOCgmJGi?UqqMv7|fA20uPXys7-U^@E9x`M;-!WRY~ibI|+NY<%z
zh382Wy_w8kNJeS=inD#~4^=Jf$e->bm?)8eE}EX1zp$SsEz>DNbTH`~6$PL6?rB*p
zp?`dwCSvU`dJ+=&dhxKv<JU%hTWEL*4i9k9KmNhi?d#;^b1vcAtQ$Whoe-mT^pJcD
zQS0sDP0`=*;XS`|w4aaDT>kQMfs*w1350Jy6*Rf~+jMA{E)$4+K$fDz`rNI&mUsTW
zFd;e#i=K1a2+3?D(CNID@t!Gh$>%mok0OiZv>$0mZ2S(B;QdUrROWXsyt(c>FY`+L
zsnCAUHqy<CmWL%5ePno~()shoKc;zI7yE@f@7zA+ot2Yg@93CfV1;Olfq@e%yCO?J
ze)N>b!e`d&fumh&y|)r(ZIGt5Q6<tCBJ8V#^pNH%rP>I=_D`Sga=xNp<~)1H#PY_`
zx+634_2$ZS5TrwMN)?bcHzq!F=x1kZlutve<JKLM2-W8eh{(t|vDzdcpfhc8b{8+(
z#^)w%BWZ?aj}EX}2faVF_N^^5O8?En@Pqu0dgJHROE9y?@K1*^|0#akx7neet0DxA
zn^Fa5E2Y*9o4VY#I;|BySYDin^DD5e;PBfod251Lm(q~fVqo_9>%}xJk1LoK`s#UI
zZg}aVc`1x)FuHCx-e$Re_lp2vWlW_zv_yU2JH5)IReBu+a@O*=U5S-Dt(%KMYN7%s
ztycKQc{~iR6!4@^-^)C-YU;k`yqZwChNd<YVcK4HkF1>PdRadQt}hN6xH^71!zRjZ
zY`ip&w9qmgzabexwItG4G)$}+qenEh3AoNJF?8$)1D?=7F1r=kTb1%qGO!t^`$Ikt
zwsh`zy{;+6n>p6*A@#<C*PJF$!F_u6B{D_ncz#QLTuzE=M(k5Vgy=MrUMj2=kjc6(
zS8I2CAzNL>vHN7X+I>mG3Bqu2P-A5KyZA1Z%N9T0PtK>8p#S9y<@x8$P^44$@=Sx@
zYUTo3F%TC^_|zGTu45H`r%hanpa@acG}M%rr&21JSg~{cu-`H9(!+zAbPl9P;itjW
z0i>tg&88nc`-g@=<#iA%@m}WXLko|@ce>O0wS|>9jU71kbr2yA#rBJ-p#=qRTxUYE
zG<!$d{vg~ejxxh<WMbD*kM6niA9Hn?g;!y&kg}?QcC~@p$7kLCbb{wXV~SnJOx+E3
z42N3koFC1g=;$am_COx&{ZUw@mtGZbO<rlJ)e>%2Y5w%-q$q2F@-;`t=Bj-fbK~v0
zQbM_TSuv8Kg61`F4wznF;iog{t})238f#Cz6eacUw|7hT?a_Og-IH`lQK5Wl`B!US
z73W#}a9RBx*_~(gE^Ez6<gwR-XS7Tb_uJbInyurTMUN`}8w+Ssr%Ye$bkg27nDyq(
z%2N3FO6HX$uY}*rU(5Ny8{NEDr*K+l(RW-<%EfG~Ez>(w#p~>RwlCw;JFC{6v>hHl
z`KmQMSf8%4Ag9nIsy3onS~pbO`h(3bu?(efk6(%5t$zYj8s>hBN_)&VrImyTum6a0
z?@~2x$XOHaa=lYMa%r&URm@DN{E>r_I<r66kv#!LV@Jhs?c|_AkyTeASI3F@d5oc5
zc58nowYCyof%8ODT4wR5^Z?qv02QrBDUV^Zk56m0(lLtmXT@-L-x5u@RmXeT<>~Sy
z#NLJ#ZU*-A?%J0D^A_tUagRw@CwnK?3Vt`FXbc{5U-500_TX*Xr`0}P%r!<`&8ruj
zVfTJ^uBZbu&P!m|Qq$SNV|3#Nm+QBYL-c9dNkdVkP_RF@$(`|gx^^ifT$hA_d1`&K
z9?0s=i;rzg_N9rQB9Q=en#<(6#pBnqT$<Ps`AbHo4dq+^=X;y3Eq02(OS#YHINo-V
z4&t*w5s&rN!uEGo9~Qr-ovc$4vTCc((qIph(NKU-D6DjO&`bKfZfSkRqwu_(9M}G)
zmQ5K~7AL;UBPh~+&FHB1Y5So!m(rw?-b|$n8^k@Z8>mVzxq&kry$mh0kZbpvY?0%*
z?i-tvFAtuRa(;nP4L`H`2KtB@r(I@1%-v(N>U_^qXw8<$20ds(>yp<Ft^4;kd(1Yy
zgEdpr%G$c*+OL~BgUp#FwzH}0>!%llx#Cw_n(7iL-N;un^d((=Xjezla)D6my*K0(
zZsSdel3IO_Jj9;39qaFmrrC6w%gaM!ja^32aWPA@KB(w+AAPDEDXww4l8L=A>S?jb
z=N6A2c8_@@q|V>H4eJb(?!`!{uMh_c!{<lC?0$LnM=82eI$B$$Qlm)$N=u8P8TRPk
z=%)B*oHAd(M&WNkROZNUDeuoSrG@URVJ0lAEDR??5dQNuJ!1C+K+ux4Hm=WOwjR7L
z`Bt4f3|v2iEh7uFnW8z+#ACVBkDe-1zv$-TopB&WzYsnbV_T>tvp!*Fw!mAwuu?Ss
zUi9{azfo;T8Pojgj?tm{>B?YKsTTXiYkg&EiZ<1rFM9X4Et&I<x6KN#YQ!5x?Vbjk
zh%DOe22Xb#J-<b7Hfb1d=QFN(pI)-QRMTz^OAe7MGbZLot4x-Q!^rnp^MEA9Jrw<P
z>`KqjN>^83Bh^?3&glc&bgApF5KQQOei8`Ys)^5!H)`113vBWBJLsc9VApxYi_}}`
z+FL4;>z@@c<NHURC706Hty>H7^K^4;%14@_go@oCO~92RLzlqH>M_<~iOkxdpj?wl
z#J4()cPz38X)yfmsnc&2yo9-4A`%i$rn*a<)|w!nbL!T&GQF1NzWRU2dh4(#*Y1yZ
zPy{JaK|)F;1Q8Gc=@#h_5T!+>rMnRnr6eRIXJ~1W5)jyu(%s#SbTgba`2Nmyo$K(|
zyZ6f;X6|{O`?=Rz-|y$!q4+lNmD+HhG%=l-iJA5BeTA3&Lz<e}j|S$mh-+&bKGRIp
z_J9r1bSuIX`i1)L1+hPtP^jYwX%4NTRCF^mub`h4aD5PU{BC^Q*L8o%Zn+mvxg!xs
zlvKQqP=&8i4AnE%gD!J!9_**Jl@(6wW7%s|$K8P~%%g8!nQusuc%0IS5N6cHw>ZY7
zWoDMWoJzjII$k;L6hjNm%Y<s{Of<pxpyN{C)zjAwKte(LM3Ab@4%>e#x0*;iJw|gy
z5$x~Z<KRdU)l^U@T2vboDtB`uj^{Jbadlm*_k%<Il%=n1zG&sw2pSMz_0)1@DDRT(
z@LCa`-l#e}k}tm{E~>^PDoLO^RkYOe<vK~#(H220jHPYtty5p8k}u5qzwS`@`iExe
zr%eX~BV$)JZa@u-o!44lG}KFYdX;}#Jh3oXLiCSa;()$vHFAz4&#k3paLo415y|B(
z(T(p<c)*Dmf#@Z_^9G@E70yL+vUoGv_3PoI1MKtoD{bj!wEz*+<_(d=-6x<M|7qjV
zpEK0P4l|Y4mOgj*kJ=1lp^s4Ebk-IL@$vzO<(~)-{)56iQS|S`uG;ufSF<vJz6hd)
z<Q6u25|ScSrcD_?WmJ?qrM-R1hr*p}ffF*Ab|XA(d#;7hmY0|}V)GKG7KO<p%M6#S
ze=b3=)XC3v^1FBMR<n9$C?lc&^%C>lWN#n!2-NFnLyHW+=FCJ3wB6&~1)r*Q_w&Zk
z=wpt&Uwa`AqM<E5QgidOaPm^?hLL;Q&1>XTEp<<Dff8Pu*1;e?xrAOgAf$Oh&ZeWQ
zb4<Kpx%z?+mv~is`%nv+B$<B+8{&JSj#up0mZ$o>yf+e~04ltcbx~2}0KIH(1#Otl
zk_J((sotg;g$LjLtExmU^}KHQJTsp`UbwgHbIY4-0R;|Mjw3zP4OPV2+FEXQw%bxT
z2j;jOYKvIxFTa>{N6nB?A?I51MP^3A-&mbElUzTEsxJu9f^t{6h{{S+GxJ@QxTGC=
z!9cN1G=I3~Wr^dnh~NG=KO$efFNA!tK5%W>IvPEk9QbsChg4c#Uh-d8cr9D7_@m}^
zS8wN4rgn#eWBnK*Q}-9ngOIe?kx(IXNKc~e%b}GpP_0=bicNEC?Tz7FwG-dlRSK%n
zJQ#fJP*4ete<ZGDiAqb=E(&#Y{u7!MG5)X#lzQCG-=92bfHo}1GMxaxwTOhqdt<C#
z$I-4RhnuC1sqE6o-(POaz5JG)6u>6IZze#NyB~H>2%3}Z&CaF*R;Do+DdtiH*dmg<
zW*1E^{{A`)jkB7=rF$|7=;5~HXTcPl0q7yMP)rn!Kl(G~@_Z%!nkfH&#0XMZG_Ss8
z<nh(44gPEOpCPM4sC@rw)Xw6%YyrI@>Fh$`@aN>UpSH%v(MHd~YQF?K&5P;r;&)GJ
z1RR!sx$cr<hCGtExQ&>C4;+G4#f^QV?c7X4LOC#G!^C*ij(Z&8e=I>2al!<60qGep
zY<`6Ha6?+zew#Mp**J1@js5!dQ+v-K-L#E5DcktkQYU56>$MT5m(xj?=!D$|y}Wt%
zL!tXpfPNd%A>v8BJ1w98i410u+u8Zmk>6HIub%cKlSkcoyPgC!vD5E@{p~G)lE(4a
z9fgRxJI(%?0*QPBJHi?Wi?E3OIftt;o3FdOdyLw0*3`}(2;IN+pH~miT{=o8N-c+e
z_{SlyuRTq9qV_^T);?eo=W9sH9hThm-WPmldluSdQ+#z!`|E4T$u;7>et;cI9_qvl
zf`+rmOz+Fs<4PQs*1+)^)EmP9(RzJDT2oJZ7fsbz-%wswwz9Iq%f}9|82XRVY;H-=
z=ET5TyA_d~+Xw!`%xr}k4S^h$tJBjGvUz;E9vzANirLE}rF0*Xz$daaR`JfjodxY?
zR8!|Pu4`#zsZ_BK=cK#?U5&>BUGn4}rpoiJ3BW~xi8JzWoBUJt{SR@__R*;}02%p=
zaqHK^1}ZDOk6Q=k3+s_|UUK>O*1SG`rYY<Ch*v2BIDXD1Jbf?lAadlRM@mkIGOR?q
zC~qE1g8J%Ew`ylfnof=1u%FIj$3H46{b1zOZJ^y4se1qhuHyqjUAWD0aX;c1yLr{S
z!MyhHB#;9z$nwt#$nNX>a<4xtc{@H>hoX-EIrtNtZ~!d|B=hsb&dA8{+G@H7hF|dP
z0xx(K&eCcwu39(Ky6taqW7@dGJ4=cuDQVBg|27xL6dFOUufXLu1ZaHdzi)5d6r0=W
z2$?_JEu9e6F80%|8`yV;UCg*O-a)nV6im0~{B}pZaMl(S5a=pdB&M-mBcr)xK953!
zb639}*yH+cr@_<HcLGYvT)?TfR};u_KJY($nr=i8+l23X`NA-!_?3H~uXWKg6VJ2o
z()9h_d%&QuGPLkGZa-z$9gY3EcCeWO9p1H(zn;JBco)6sa!!_8I`Z`iCKHo4y2f%>
z{J$8p%#H5uEA?Z#do&{M)-&mBMO{$H!rbfg(di4Yu_k(XE`{C}L8Av)T7v@uP8L&$
zzg~F%@uSDyQX_cWy4M8XO?aHm96=U#poiRZP0hppxcsMDNAQ+|X}K(Svy?x$tPB?;
z_t#b&pnia;aG+nq3}->-P@2wTb(Wz`>`u+VncmCGQseNXp0>QloK+xNcNgg%@g>1y
z^<aq=J-~X86;6~aXwGhpas5rpQcGH^s$C^5tzmF%-;8I2L2&SZJ|}PK;4j0KvTgF{
z`!4I*`Bjh=;Z(SCX0Z|lDgxa-f~&#dOLDd5`Bk%UDZ6!r=t<&AH#$wY1mcxv_lPD!
zLDMZ-Q>^c)*kw(E8y+23u@}h0s&Vpnz4Dg89*oNOFF&D$F@RZpfD_=g-Dl=?k5(cg
zqb$dZ-f5?P`}V2EHS01tdpt>=@$RxRm;$cQh{)v&%}o|5<=NSjEDx~A6|sbi*i8Sl
z{#c27CHW7A2qrd?I*5fDdB|V=*!|Z$qWN)}W$L9{PDBpB3yX@ti}EJ-{oR~M+w26P
zDUO)_{}^=flxIb47V<@hTI1VV@BcWRH!?3r{dOs_IQswg=K{jQuBBN`w>H5@#Ip><
z<&T{%11}Y{c{j#?=W~Lckn{=fNSKCW|D#8mF){9Vf~1Sf%aPG%JsczT^>eeCc3kPo
zpFg9GgI)$CwzRMY1mKr_gq|PPfMqZ(j}Se5f-DS@*#!l)ou%vi95bgxu}}S%7GY`-
z^Zs$jW=nomUtgbQ!O2*IQMzb0<oQ&+6uP>}v)9q_=g$kEsI`k;2dfo84CHF-4_||G
z8z>IYn(L(_d_Qd~z<xAPUx!Lcl0Dl3)Ir@D`5jjk`@X52m~E1~L2yx$u2YcMe>Q>*
z4z=Uzyhr?t>c3fo+H_HU=TrWI8bkjJCRK|)ZLR%vGYv@6zoefy8br8@)K6LbH_x_3
zHBa3rn#sjdaJh>NFly>oYO9TDKB7T}x|Lgrte;{;zTos2Gg0Jt%O=C)V`wJ^sEH+F
zM+y(Q9x^B*0o<&dC~yoR1N?k^dmB4Cn`m6q%*>jd7!}p~3P{=GJ(}bc<ezX65`4Wl
z8KmZn*X1J;`7ja4XEK>U`@-lfWzuacA``|xB-XoTB-=g6XWct7Jm`)Py~?9A8F(sy
z(YXHP_0t;p{1?8GPodug?}?yaP0@?bAN|1^w|-_5&^bpYb9X^dPL|#=`uR47>FAyD
z#+-@yS6I>?qFaiW5Cx{32o)uFhr<9LQrzy=J7*r{WxMj*5&?yT?WO9PkUG#Dg5ICk
z{woCa{?^tHIPt^u<q@Zsp58b-pgPo>r)qK6R@bW0^KSC;E$`pIr}H{khaH8mZhm_D
zXzuyMlgC0Q)7yO*4UadA*>{nuI=jg$?}Lw1-^Bc1FF=fnNK7;H1)^<c6OtZ5O8cYm
ztS7%2+;eJ$d;JRTBK6p1Fege@?yB|ixzKe8GY}yE{ak{pjq}*OiwQi~uT4#N4{Rb#
zr1=pyI`M5v@EI3#tFxcMKxKINnWAIJrNeTkzw6=k)8nNN*x92zzsi9qG^I1flR}13
zM8tA*Fbwks)uX!OUuLV^AD*rV_(OrRP*Fz!T0#h<EieT7<Z13O`JXuauN*bzYvkn7
zz_jnG1Irb}p1hyy$>`wbIlZfr?kpfId<yYYIynl;hDJv5d^S4v!r%pl$kksPw~M<a
zB_trKs(+_nI{4-oPyk`cvd9iq`Mu+djLL_HoATaxq%ms8=|o16f#Q!$V;-7Z@Dqv)
zdEq^8)5W%Eyi#}y2m9OKg-Krg#t-BZog<xUAx_S)3yVj;iw<CB!gTj8Bzpp=d>6P%
z$;$POjmJlNlbhVFt!;k9R3cCcf|cNr@cayDhd^-!%Q;ePF8byZfD~j^I!~GAog6Fx
z(<s&T$Tte6<8PsxDe%EQZ3?4_>b(Bg=XoDB#pA>M^8bmtuR>E9e!Sf~@f_cEBVT5l
zZQZN)xPpZu`r?IPQ$Vg{wC;rBFI<)h6E`<Cb$~Eva1a7S2ecL0Bx27sG;C+y&MqvB
z^;ZZR)L>Il#qI2*TT(oO5}GYMCI(Jzm2f-gAQZKih6<w-5_F+c4{5%yUR{U;u}w30
zeZg}Q-U(_aCWbm~ZEa$T$+hWeRV^)m@=;JzE3^y`4S@-K7os%4t_WfvLC3cl-Xo31
zCSdgD=HX$fu5x7auE6UH<fw8#-cy7aH-RXqp{aQDL|wMtk6_|2tgNiy6q%LP4CD|%
z8raIZ`f9%=z~mvG<-I5VCui#IRO!$**`h>dFufKHyvmCp6J?IF8kqOf==zc5;AyF0
zT$-54vUx6ML(Kl}?VYxHbJ<+hy&&L?cE$lKsg;t0LdfBtI;@DGc=}&V-Nsj<#e1;Z
zm~OHJqyWVW4qE^!1&SBgyg~mE+?EMRDb-TaK9)D7VDEv9v>yN$$pa>M^2;L-*{DB+
zBm%f4gMtX<lFJ;rA1f)902lqA^y!~gNkwQZ<>TFKn!8%Qw##s6?79O2r!*dzyVmy=
z(<n|<(=AR-aT>M0uuOUK#4j<i671D1(&;nF!QDPSwkeccMyh|5!ay`c%;FE!#|O{H
zC&@-GA4S)mc7DK;LrO|&?{Qy9WvI=l8dah=P!tMxu-KCP`{=_5m;Ogr{;k75;bj}o
z_6<pv#)(i<p34?kVozsBFP1Ou#Ly2DyN;F9#SE4^uEl~XikSwagaBsMHZ#lG&}_@d
z$+f^C+yJh5dsCCC>jwZ6fWqMD$Q6|LU`G`8q?Y<HK7Mg#dKwc&+7lKQ))H0OnV}5I
zQUZ`-!KBs$oL|5u+9CZ=BSbU~cf&na*4o-yBBEf}I$bwzMQGbuTX(LFl*YX5H2dMU
z&z{Hes7>K_L3Op4jm@>};CQ)nW>JI*B%SxQw~GiI;iYA}x|T!y?Y(<h2^rsh{w&XO
z{9}60>Q$fxHqDQa5MtenGV<~%<nOV*g%w2{SdJY7SdP^hbuJ@B@MPp$nHVqZJXi&m
z8iEn^E$(VF&80fnJqQU1xE_34V^ZiU%*a@XWc37j$0#AZGcTyVelCF(3<9)ygc00J
z6JFldM=<V#Z*gkV8A^{GnEKi1lob?&efS`CYPbf}HzL9(K@?5GFsn$qrOn5TU7s@g
zJ~x-`biFT|x0EZwsmDrQo`Bt3N%_q95xeYyt60w+5G?8(DfsyM#EvI#+)#0=**OG*
zZMY-y`LivWOUaQq5*p!~(e;BwoYGS&y;#r?Z)g;Dw6%mBu1spDmGiNdiZJZP_Ns~*
z{cK~Wnp>N^5veUU*=v68yg^q+5poLcSVer2LV;I$e%JNGQ|4$)SL}sM5|B^1d3C`i
zx|z%|_iO0FbdKE_+Jlmkl9qN1X829P1Gg1IK|=A<AM{566YbTHqMDQB(*_w1$xh8Y
zEq<XDK)Ea*<uUN^eDHja^x@$-$=E)tFruMJz`-RpeH&=O;7z88q?A$EYb~l@mmCbJ
z6)UaEY2_BswVW7dW8ow_1-Ur<Fr?*M$t*!Q8cu>17Y}L?3zbH{Ab9l-KaPr*?G;p9
zW!uX_-^aY^<^z^H$3Q0-btAcy&t=q_Dq(;~fINFj$|eRdZ$H)41c6mIC>B7H2wTig
zka^J4bKSjry!_0|lJ?@o+VF6kS18D3A|dJV_RiM%kpsboc+RKyzf!r-gW8URBN|WQ
z4Q+_@h{db??(S|N)tM-*>wO^o(L**p{i=R6Sxe$5r#TU)Ru#L>wk6^jOO}$nY))3r
zYVQy|8ygE3{fG0<<L#VdK@F^-=^0v9x1$`Pi(<g4zJLf7<ezvS%Ht9zp4npzo>VB1
z0lo^UYYg}xa0D-^!|LGE=g*^?{2q=1M*nMEoSSp+UhWkFx5@eW@eE};HMK&hEP%zr
z2*ucLG|*43N&N?ddFT?@T3de=JsSdH$pA9=3Ks{5Rn2=m?vM{3>LC~cL}HinIP6~E
zxkC#BVMt;g@9!^p-KYde5r7V6A84y%cJSRE<0Iq$5VJuOZ^a2vJ#!xo_CbR%R<T#&
zWX<#FQIFY{;`tO3)t0PgC}5D@V<g~`u4W<-W|^>qx#*zWz49Rli)|HGH)C|D>`_P*
zw+GYux~_{*!x)1K^TT^^qpt%^AnDIn_=FQsJP=d!0Zn9Ma`F~_@$v5VO%Zo&!yZyQ
z+)HEm)iSQG!%&HNxVuN)*Q{9>pxvqutlBjOz#q7KHXw5i;DT_l6*u5!dp0z?m<JmZ
zh=;Z|Da&8}meAS;1tW)UIWwB9uN$(HRw6p5=mb(ru(*+%E@ltn-(T*d#3`>I==}uW
z^5Ej-^7%JrmWHOLDfw2P2+s$ysH&{y=I-ukpPFBdVYdUQcQhm1!{<sw5Jfc`*G?}o
z(-q^F&9-!Q!Vo)kh?5-<3c#gejjMS5HHxfWdic5rHK0OZ+SNywFWJiG^TL@(9Sh@F
zT~+AM0-^4lhO|qK{*S!W@l-x};ZtSm>lPmd>QeliQeyaB+Q=@;ms+6DD+<i*flzV6
z@X%|_JMfqcD=yxy4m;zm_L;YR#^Pr*A6P)OOJ=(IuI}LM5SfD(zHUf_I+SThTElSb
zc2#tA7~0>~R9twJD+dSa-*I#S)l%L#MV8Os*p%kIaU0rLXWp0TKL0DIt3T2@*dCAW
zl=0jSx@00hD~d6BrfHlwM;r8Pjhn~Mp8uLy_7|_($LTy-M&{QL>bPL0n@eY>Yh<&h
zp0@Jin6o?oC4}O2FLff*{@c>aJzL^bSH#LNv(rtMsSMY^_}`n1%;!=#1P|l<0o9LO
zm41G0LV%dwVuzyo){P~lM-h{xmyBi4U#c@8B3U;12ay1TQo+bOB5Z5C^toI(?Um}^
zvi!Bo=XzVjE#oZ;FUfR^=FS6E53_*?oO4>u@Rh2K=PMRf4!kLkOC|pqRU$J`o4mcA
z2otmy8W&+kj2YYu_;+Yo$DUu@h+K)RhRa$H5Gahx&inBjk=>_Rc6a^D<!5q;&)?7c
zgI70rjulu#Yuix{*of<3a8V%-X%xF3o?y$|^q`YZ`QI#D<8HN|Y#<RLxP%lT1LR!q
zZncyU7e)#ktrN|EYcwmHWAtg57{TUbGKR%0jA<yyaXS5tZ1K1pX-#^?zyFWb^fmJ%
z{`jGPzyHPNgotvO<A?d~CNHTYu7t?Vw}@u&(iB;^yNeX3l2L!SnDB2y6^mg`J+=!B
zuEu&Oae%PEI37da%_5WVk9#8x>KC!k&1Hyb^Rf}*d#Q)F+vK{gTtHC5#9u|vJx#%U
z?uWZMvWj_C9;m9ApWQzjYf5FRQJcK8#4}b1W-jc`&iTwba)a5jkX*N4_{$mhw@?1x
zS5?v3Um&BAkTj(7!`J?D!Qh0*WE-=VZ%GC5KTfv~{2u{~EoYaCkHYIBLW>sOp9v$I
z^>zBL+{;~f{}d6iOwaa>Ka6^+;G5J#02jz1P`&yepDq}nZv0TR_c?#?A?6qc`sG%N
zj2<A0W*?w&5Eo3mA7$=JAFB>BQ+Hp@C$T39Jl~PUsBS%TOOhHU3jbW)bp+B76E%!f
z;<6z+D9Uw0>rC5d`Y)DJ`1z+rUE$|pj&M04Dt;SqL97Lo3AemC>Wi2u^(^>9YMxqA
zo=Bem9)hxIxaUREj1{V_$LA^!;xeqCN!-EtZOurgu_*TX|CU5mC49XD{&La=5l<Pn
z)-!~~HTcAa8NH=yS5@==+9i?vQ=b%FmvZv5Y<iaU<Ta@xAHoo18j~z@XJ$cK9$9j(
z55Pi`_Co6sU*Y*jLNJx4zst#`qP(e*rF2Mq3BDL1fCZy0)MB3Uk!FoY|F%y2_dZok
zP{)O;MeGr;PlymEDe%FIG?zW_Q9n~^Gf6PNB1ZLb-p{`C>xJ|G^BaQjqOOz3VMxt8
z!B^+6;O+it#NIRpuDWqmb4758h%v%vz531om3F&lDd-NdjLpQgT9zy4uN7AxJx!@O
za38sw^^`Oi3x%aFCy(9P4rb_xEBXiWyQu$tSY~9@GCD_~v-^U{cG1@wl|>=z$y;|b
zyiyiYQy<%I&jZEG%)g!4S(WY9y3chhF(yTeT*Li;H*ti|bh#+d05^FVMn&uD5w}D^
zRQ92Zi?JP-czpqX>GpG_o<ArolvHn^e_T`WnF~-`4QX_RFJ7eA74~3byQD|2t_79v
zoFUB5q;AYXtR$?0*0Q}4<30&POO+)%m){WK9=Cn*YqL~75w;mulbUO1tN+RL%e`4d
z2i1`ydZQ#n`~heqU(MpGq@X}bhJPf&g^wyj3UmZCb$0$~Zq7p80`o{ne$LDiFyA5X
zA}S)HTT|lcQv*{|mM`xhmO;wE#ifi;%kKxeVwy`t*(T{*&bw@d7Wryxg4wz@d!Hy#
zE<08zdZ&|pR&!3W0NT4}a&A|9@!|#Kp3cu1otLmpnM3@M?#iLAUWcm3#*Ggh9=o`@
z9l1EZT^)Xf|Kb070f_|SbXJC216gCpw6XWC73n|YR{qGj{1y8IUlCd!jkOccU%a$k
z?jUMST-JpIEo7Nq$BrNiOW1X@W)um@eqgnhhsP-%2~$~lIe>CQf#vS(=xA<4f>F*Y
zN<9|JQX2<<jLl4<%h4w!0Qsn>?AElzAl3fMDCEO~5EpDFEeJkaCEYoiX*pqh>A<%9
zx&%~i&Kj`GyHy#h_%f8f`M-D(qyOTom63rIhm3~NP0Xeo`u-?Et!We6^iR9;TX$DZ
z2WiTpq{6o1dUMSdv)}6-_=)=H%}kwvPxj<ueZaDue=>fR#=v)ls7<(j*OiG|d@e#U
zZ~`yZ_5}gKHY9oiv>6cAL2&v%+MygNJsS@=MF|VLZ8;NRcg91M2gF&ykrJbuD;OCZ
zq!#teNlx~8H@ldHb6SzLT?!z1(7+=pz7Z{5pU_yxW>Yqr*XUJkZV^XLcy-E)E8ch2
z>?Fo)Vs#ng3+fLOZ|$PD(n>-_>=tE~oNx3Hm(!-Lp@UFlhzQ?v>D;MXoVaD3u_c8`
zmtIGNV9(p@4n8G?h02PGvT}0Crm=kP2caM<NKZF{^MpJ{B{c-I?XT0gHvjkEOMvAM
z<XwV>FhpBKgGtB?D7|1>fPtT<XLK1Br%4z9FCilVYB(s(Kz<C&#6K1?fbjoUr!!9k
z1qKpa{;9=s(9jP@#Y_f4!MJ`G$m#&m$?6)-x0AVOeQ4k+ym}>(K-2CKa3v~yQL}K~
zetnb?#>$C5N=i2O_8_ek+CBi`_mq)&K%NT@lPk1Bbr1vh{re}!zhEm7SV^S^T5`Gd
zl*HS&gy!;Bs0TY7(iZHOrk^ZT`}yHq<X265%Gdjyr08=V1o3%N{XN#9<0)8OO<1b`
z?c51#dFykDwG!hlUbvw?uLF%s3a9-qHh$V7TSqUA88~~2efYy)L-MBi%yUq!8Mv9m
zI{C)2j<!d<lBuCuI|hYt^o7&4X(#G8=qPr+WBSD=a>$sMFHOL+VfhHo{KRmIHjTv(
z1|j)pDsoCn+1pkyG+<IrtVxUFR<8EcE6T!{zSPx&sP+jN+tu@+Ke`Rea0tZ)fK!&i
z!w*WdpHjeRgRJMLpQtG)Acfckz@?Ufq>j)=<gVNXWJFpTqoZSSsS^k_VmV*qT$+Q3
zb<i|J!PN)RtCrCK(v&?s0NTv;>(jv3(O%fKfe;N5cfL#g7Hl5#3?fn-^l2SQNw;&>
zo(>*pZ0Y6Jt;~Sh@A@R~rpz?}m<I&nQ}jx55LEJ=Z)$`Vv+;7}Bn;7%wJ%0`u1mLB
z&D&&8@jhUj^4Urb9eC`5>y6{>Iy-bRb|pnlyzu*DiYEhfv64SOeNC|*t?~%0F@#zJ
zs{O(r4*}Wa<Lhf~7EAdohOEqE#R#}!ije07$!!h8!_b~fpoPQ?8n|E5(_z;4cBy*-
zxNnf;2qcrm>1o%kS^vh6lox9<JuV$WT)%;P&BGJf*U)nl3}|x#kJWG#rR7$LiHVJ0
zLE=M6NlB7F$p5=kVQJELJCh@%-CSIRfpKnX+B9Pd-950MK#|9Ae^p#Vqr}=~ID2yj
ziHBd_;jm*_xLADi;hV)`^XHIK&+KPpp^+V=oKsZi%EPdR&DN!3i^|SGCPa3i61#s~
zmuD?5=NE)aj9H0_KO=k{yUFPLU2`|B)o=B|5@{=Nr#>UqBSPF@IJ?ca4A^te#~<fI
zC1C5WK8u8k#$ma)K%Tr55@w*@q=lH8Ax;#eHkIKuN5{N8fNDQ|GOpV=7Ep5FAhCtc
zfT_0j5$Qr>eZ6g<wMQ_t4SphGC1&MJtx!2uFGJ(L&=0=PefMq(Vn2S`22Aem>_AJx
zlnx(%3-CVIX-*k#-$nzhu*P|;zaP|pL)<oV%{Th}@Ol<Numd(BEZda!6l<BO>Nu4R
z9Jr=?C()|`V*kJEL2{tP`KkVt^cemak`qo&-x8xJq@t4-AZ(P5Zv#1%ShmSnSB-Z&
z<L6IiaF<Q~z6hLj^NA|o$Vi7u&E+SLb($5jvdy=3rWT66>pakHi-hUjz{X);p95Lf
zJguBZt)x~N=>5sv;a`6yQ{7W{c6NR_DU6RYr2~{{2-M%uG6co7=hO#sK+q!D^AvI0
z&7`Lmn}_dp?Zmu0$vj}De#KTFZN{=x{qx^(Z&{)HiGn=b^81)uzW5K9H`%z>cTbm7
z6bQ03?Z1CckNNr)6J9Rth8CQa(DPi|&tfh$EH<#rgglYwmIelT#+rhHZk9e3#xISG
z8hW<8*xy4|aqLIdjG!0383xA2$M)BN9@=CCLT{l4c^R3jIcy-C-hd8**BR>$*m>5x
zy}hA94iix*$6?scqIWhEvIg8=Xq%MP0|dOp@-$d451L+Tp>4yoa!3z%zuO*0$tgOS
zGasE<<0&`mU2hsI!1V?wk6V=M!ptN6vwYe3ho#~{8aKV~h1n6C;K!~^XoXG>_<vyv
zjIx%L2%I=A1G{Hx>Ko7rfI|c<DXU$zb_d_DfzgF@zPk|0dayVAo$wNaBKT-;?YZ#~
z*y6ehG5zsJZ=Ln@@*XIb6c=xUU2oB)?$b4}0fvPY^ERY~M$aeFI663_r9BD0sW@e2
zW+vzB23jIh1A`?H6J%#=pAA7$5a9YmwiiU@d%yuU+fQ<BQwIE3;H4pr?I{pCUiE>#
z!_%_3xZ`j}dDAm+KA5gVNRyMEa5+PJiyzq`YBz8H?Ab16e;lk-+}yf(_3ETP2>#D5
z;K+#e6L0nl;)Ujs6iJkvmrjUfr7MaT8R<?b;Y{m2T2%L6Y*UkLGW}~lK|y&=h8?*2
zL7lWP!=(<$Y3T7VG9I2B+Kqmt03?6>L&IeVsDtjiDJG&JnP9xk&3J2;Wq4Q%GAm%<
z05hfOW`M1;c%;86{PpXkJz)e=>mUA>>4ANQRumnx#AVby!e}uENkzfI$JE!aOPGJ<
zGEU6@dk7S+UY8POWL3^1fevLb1Y&mE00?Sk2O|x`r5=F1rIo&sn=(aa3O#&S)7~C+
zCDg}uxM^|{1<$|#60W!m7cD_|ba#9EwMEl>8`Vk#_h2q<L|~mSlc=tk&!xj~;@101
zW0%idVmq`JE#IGCBdB|D<h(B>#=3V$jvH=NF*bhO&WQU1A(3=o5sgpZae+*5?%PX5
zcrclRklrkq_Pu%Y_-W4K<#v#LR5+gMx>ewb|HM2LlL?+kJ?RbsdNKsUn}D5U4jx|c
zz+$l{)76H_Q<aAsM(Z<17My50FHrH=Wj|54!W0vykUTeaA;+fcLXqjP!4#7T9ka&X
z{yr}^_kDJDvi0yqN8n(uP}6vyFiX`9hwpQ$FXx`WdGBts7?g%zF0*2IkPH>V41>M4
zjyYai)uG}P<nQ~u)k;Lz*7jfUFLC0P(NGn4(iYXx(Mh$Myfz~CXK;a-<@{1gAH{CY
zk5Rul%DrZ0U~v1Q2{klvuJ4mZy}kG&SL2O~!y0z*|C%;!W|LJy%LAvH(DVKe;&blF
zCt`6&^VmTgHvL=c6pPEos2bSdN(cYo!66W~a3T?@xnQXdh_H|NK~j|U1oPMdT<)j9
zkU-C^_r)j>B|sc`vnTFz_&DDE$tfu_^Ya?jzkY(MMIaVyYMbDdS|CY};+PK6>iriZ
zX<r|x)0B%|M4U*rOIlO&eMd?d8`QaP8?9O88FP~`^yXZ;gp1py?5ljb*?0v9#DHq8
zSvm=*mA14U|DCIJNV<X3UO<(vPwkoy=y{zMlLaQ_PyE`g1r^!m;llX?oo7gpZ}g`_
zh3Da#cIlIln@tRy=6i2xL!37L!%Bbh!<X*3dc)!Av?$G$x4(q_PSIgi!Tf4&MD|`}
z=IHdm)E9w4TqTzorVty%L`+t@YV&m&6o@~*HPzM(E6eq#>{?tc&A)8Q*#D55v(G)S
zo&82H9g>!jp@<ZyPsu(GGF4Ml09C!PvE?{U?0GS^6&fGWJC;JV4`v_RgU;KQu3a^k
z6eL;_?{YlgQPtJ3G3alOU0zPo7NzhysTgM^Hy*_&cHVXCH~RD7z^{(VB<UIR*#XsA
z9&Onp@8vKrFaoeiD~h@>ir$xUyrVLRPr6VWA_5TE1YYBINa-fIe%;-}Bbr?gqBgi(
zTPa-o>*{7d(hW$7c!np&I2^5N!V$tUGr{Zc5lrg9NIy|-$9rdaQ<_zjEH9Mo@GyGU
zV2XH#<V%U=h!LD6A|a<2{lio8AmvkI7w5#;MoLoHHB8x|LI4%wrj5-g@ys>`%)SIT
zdsoNhBGZiacv)Hb3R@n)fKSz=jYDpI#k+T=OO(;4d4wB#>EZIxr|ux4rG5CmJ=*UI
zO+&AQ(hCJc1OH0p4o9_*!_ICy&Ti{}bh8CHDC9Xvg|)9Htd<^ZpRRB3ImFl*4n;Gv
zXsSCK%r{F`Myt=>urZg}s&wnLd%CE6Y*H>%y3rp%^zm54>3d^M+}~XC_LLwk5%MVa
zYsHGj*90$qdx+_w$>|}Nw-&K;H_#W{@yOMKl{!I^1#Zb-&RwNYUcaEYabu`2mtenM
zIUs03^mx^8xBA!KGAr=Waf#`s<_o?TElyOQjUH}0omO%&^1IA6(kUlC{Ll=RXs5qp
z^0_$>Il2;;UwxCyXm#A9m^ZwyyL-6UxMQ&^#q01eLy?M?{l(9hr+!4|m+TlM+$?ug
zgAJ7-$JxpSSPNY<jW8sXo9i)dJvfT9^58hA+Njx<s+am0LY<a<0K{&t(%$6`5w{b*
zfXqwT<GO^@Ij=$vaJ{yj&@&A8Y;Ml<c{W%#%sh*XI&ME?SZnZQ4@53;TPaMJX`?wj
z6}bk9*JNewr$2Z-;qe!}rV^Vt!`+-+p4@HKMBatV(Q`AtVaMx7M|7Ni49m&5udNAg
zvEIJ%VLmRR_g#D=v?_VJhF??5SDi);&GdWf)^(QIkzbUAkrpvk+|*1Y-RZ`u6VOe$
zEndF->C!?*{(Rv5fwQZLu`%zTk&2w0w|^6by9#VT@x<>kU566)1;<>0_3y&Q5SkR1
z<U1)iM6{{-`Jykqc_WFpDQ#iwa*u<B1#L41@=Kj22LjAvP~|zD=T28zAi2KB+>KZf
z_XCwbzTaU}m}%qH1M|BZ)PhbEo?oJ)7rg3`?Kyx5P@)#4y=wi;H=_V1YU%9Gu{R|j
zu~#22^>-rox^8-7fe+~_LiVw^dPqUGZZsoFc@_6FNo{#a`5xmQd_`fJ7QF=1_Ep?2
z%F>#w0C~Yy>T5f@6L=YUPVrn>=|2L(O(6M(ERlvKsr@I7$mGiNu_(pl!{T5fTC^*-
z-~ngpPh0aC?`M7GqV$e9-hR*_`t~vZ0x|}WE;h2?PDq~KsJxM6PtfenD=`OA6ynvn
ziJ!xt>O;B@lut$-F&OB^ZwUMLkI6Lknal)T^3x*)5;)kwbhg(lc?l$g5KFDEuWz{t
z@qgXKiWtMOXZ6lji@SIvaJfptU`+D)Jn^dcD+KcVC+=(Vss%*uj4-T&`j^{g=TBJa
zxaVDFh6wg4q_Erk=un}8#}Lt8yt}F7R+^h^mD7x}F7b)GwBw&IuwS7FhkM5u*9ZF=
zE81^7zN_}LHGk?kSu~}<&>-Prlr7_@n#G`skb7GJLV9sc*t}e+6Hf&@(#PDzNHpJt
z?Fe$*6F0qRl3D$B$Y%^0`R>>L{Df6gmPAc1e%J*ug4(Op2-K|~pKH4A(2L6#+%%;7
z<ojdh{lNjPu&@*XNC(K-wN{rjwSS&XCRH92tLQ=KCVBwr^{HJ$SC=iGED<8LC{<ky
zK_*S~l>ZbawQWtgr)75g?SS!kV{Clh8rn_E&23Y(&Jf#?%n$=@Z+bY)+2Ndu9zT4J
ztnwhH7P8+Rc9?24OV28bzy3xpibmRv=wPpSskAi4(Z*lUv-m!1J_F;*LFn^!kCI$&
z`hkXuif8%kHE9Cvw3@nlVeb47HdomiW*olq$K$gG$}g4Xeeln7StHK<-V%<7vlpen
z(geGFD^<ixOG8YrcTyA+416<*q0(Kuilk^6jwizak?}m<1%2YWH6sBT`-$PHU*?y)
zz&{CsDOmm1z9-4fkmk{-U0dE742`t3v?`Bx%Iqo}TdN>oad&lSWwDE1TwHv|`gqTx
zOF6OgJ#641n{Y;_#5}Z*Kp##Fljl#)JDbvUHjMCuhglJ~!AlbvQKZKa%V}#I@7ewu
z2C(b`3|ZHJMzw5`cKFICPG@-o633#HQa=tqITA?svk$d5N|<%axX)$vC;bMEQ7|f_
z`_gGFf8H05b@v_COPx!+w1cj06aqskw+DL4wrgyPC1tpt6!6S!?^>{ZEjOhaLtfLr
zC`J!UAogrCt+Ix#zkIHWHd8>nrAR7$qvG1V+_T&l*PwAWIhn-KpO+x=x&cfk+o!~$
zP%G(`O-FzEq6SCzQhiY<w*J1m2&eI`)#1EL*maMk^C!OBfOX;Y*DueBs+lj~I?l;S
z-5UJ*6;!kER9f$@U&~MM`Y7x!1Hs9d{l#4H?8pv`Jo(j|PmZt97`4V9KDe_rwjZT-
z2$W;5?fG1Q@7pg9hEb){i&Qzr7jAsF=5^W^_r=A)z>6n^JiXKN+Q*bj#?dD72kEus
z3m&m9`(X~EPQvC~9u>pwEtzO>P4TBmqH8TbxBmvqGN(FH&)l%vur<&z`#3~jCh>8~
zgODcYulvc!%-8}+`{+)>?&h`p1$ouN7*+EaH{#|LafYE)d=s2z2ahaFk;;t?;~M7t
zexYiWIYI$ZQLm%(9Ip7YRUdfXyIKy}X?q=8Y}S0h;EP16t6v?09{ct5wA0@qD2@}2
z1~gPu9#{<b*7*3;N{1ZjZZ2#e78<ofTv2+iLV`eAa`N<Q+4ehe@dQDKWJOYP2*iM&
z;=Pgl>b%qGK+NW`BR*KNCJ0ua-Ib^|b@X8@53l98ko(RHnMGgIo{Z|lh7}M@e{&!C
zTMhEw#Og^wizC8xvY>biB>%3jOQ~bXnF#s8;pbMjYk6vZLBo}PiMAA78K*l2oFCbd
zlxLR9eJ=-^Bp;KnJ}`fyXm~@}cR^qYX)7$>!-+cp9j)@y-}9^;xw-dPs7gH2y084c
z-TBbhN`|oOKFnntj;Hy(S3&DlsQ!jpJMlYyOZB}Lo3>v#ck6Yc?zZ{-Vxsl0P~Rrl
zDmgnEh|A|N+?re*72)TMV)2FqX%N69NI)qLid_hz?Gi`E8NPXwlaUb@`K;8D;&LxX
zG<kg`FjWyKBdvp?-{a$nO7B3}Aw{tC>rZcQ5!xaK)MNMr1c$cef-$7h0`z-VzwpX^
zY5B1QhvPx7MvBaP?78>Y1_~dNcs=Vgyb&R?qV=cx%R$&);XfShcK-dR4eK2zXXtS2
z-#BzKz7zjNxPQ|jHi69bbN(a>*p8n$^{-`?kZM_rE?Z>9SY$V7N}cY+z^Ijxf#Crj
zlq!$->g@axm`mK`^>RjQ&Zb%lsN2#Vxr>T#uIA<#ep41zxE|{&uu~h6@T%K5hDELA
z@zW(P#5ZoR2cT-Srtz&=y~ej!PV|4I-E{poa6mnNvyQ&MscJiLok*={1))v>0~{4@
zO-m`}U5W0no&VKph<k&lnzu{oun{JhUoZ&@Pxw%zan~e1=-(8IWOisYH1D`DTx<jn
zanlc`HMg_udJt6+zUne1L@s#})5V)HI<88A75MR7=l_X!5UJPS-)Hwx45f4typa{B
zx75-eV4)acoa)WQ++>_FExCuoJK+3pBqWyGf74x3_K6poTuTwr$&5J)`e9nsKU4^a
z>fZgUk`S@<@<;c#C#mE(kGO8iA#UNouLb|dOdX(;Ih#68l*zS71}ERNwA?lnt*ho@
zy#eMXcx6Jrpx&Ku>qcWnL5Z|Wh}QgX-Zy$GRixjkU|$ythQ~c(^PAb-#fJVnU{eu_
zX69h+8{m4WLR@)&XBy+FLvR*_+1*=G3VoRO@kfbtfi#=LzOhS@N#`jgLj5vkxuRSh
ze4-4+KU7|asf^zfCc@>U=ns0-nBLDVzel!8jAMAJHP^iQ_n0@n&GGMWL8av#ivf)C
z1;Jd7YfDEe(9tJqLX0}V<pXOoNLS?A?&nZ^LXp4MBXhOEkO;gfhHLmEd+*8&y$dUF
zWB*?A{&V!_SQZ~4D$?tD*}?W+4F^<+<x8;3e3JBM&uuY&o=W>k(g0|*Mcl=q;sjmt
z;vAPN@1LJ)-!6M7G0xzrb~b8rUGUKy5tEi{Y|&B*B&^y*I-ri>f+B>4HIp6_6qm2a
z!6&Q>15PMwX`vI)pDYUZ8B#B1)Mk*s(+e0T$6RD$63b3XjEy9z=79qxA3QtlgX~ik
z#I<ZTh{||S>M5AlBLWtp;^a1ENTWIy)W8Z!6>`Q{%^Rw{>kXn6cQ$EHov`r8@_Dms
z^n!kk-v2l6l4liU%Plz|(}k~8PXp9m{$Us>q?nnRqY~o;Nh&I&l!<!NDTcGv=zB&|
zHjNs6{iZ49faKC5DbE(p7dDTmg-I%l<YTUe34{t2#&a%V`$tbo<96HdY&5$02h)dy
zmnsz(hFCGH8)U82huv&^gQ6>|fb0|}LuVjOVhli@GzJhe>yY}5<N~8WS7^uB<(P+8
zaQ+RU?@25tAq|(%ISizQf+o&b-{@h{+MXulcNdM4M`(F5n1oeaYfgkEd<peB*s?J<
zHtfkyGEVKc^z&a>vJu!AMSE@#^{t|VpexwxfAVp1v8%QR@`4W@2nw<Si=3(4e(9Cz
z;opQ$fq{YG_Mkv~qhO@O(|WQ+Nm%~<`+tLjMZbi6|J`p#$vvI|hi6ur@<gXOsaMM`
zcw++#)y;K}TG&+~p$4>-TZbpIU(x~1U4u(3L5X1YN%nm;M}em`TygDDF~@XAY-EC|
zp<zNKCb<=U#1i@v_l%7LNM#a4<nt6Ayq@F`LGl%~7!_!h{yMC9PSOep3PO6=^Mf0^
z(3}7ekZsT3%2J7<6nkJGv%%o((w7s!lEdYkj_B|2hfI3N_*Sqjax3~GCG{aKEe+Bz
z#6dy`E&9V?FM3G;Dz&x>0Ynuuwz5qYrBmi9KgH-LH)xxid+@ZP2+PMWgwtu*%KfPH
zReSuH@86Q{N@121Y;Frl$jG}1&khn_!n~M=9@^fdZ(vf!#FRd2PgKn$%(ez34AS9;
zWm-S2HxmR)^YyD67yyp{)1+$}z$NPw#H3_<%YAN;SPouK(>t7{#l;C+#t`O?OLBdh
z(i`9ORH<`oq+Fe#p`m_fZ?z4xObD^uvXT`F(wjRwPhsir3-(dNzR(-ejNQoqx%1QY
z1VXeOt*wBwn}R0nSjpNx@Z@loE!*SEl$6>X@RyX&Anc5STl`&Eo~yl&5nNz2H*WAd
z^%r7pR`B0xL3ePUZusukx4)B+BU<~$*rUK^yNy)@En8A$9`N2i6ct4>!IWxe*GhD|
z^)YanK-Lqj=gR+JBeAkl5*RmU2d|~!qzUvcP$EJ)W*pE*N$o|Mm>SyKEg>16oI@|@
zvnMnR`R$^@3O4n<(BeISWrUQG&E4H#e}A&E_~PQ=($dnxLU~QiC4eDGO86YQR{^9k
zf<=u(ziM`_PhVNt3P@54Z@(}pf+JoCurT}95El=H5V#9%;V4UFl5cXFnVAVWcFOYd
zh8w-_E*?vr&HXGZgUhtHv-2ezUWzqyz-j`@uoXo$mSAMu*4_ldc5A17*yYbxV>v+S
zV5tbHgf^5xGTwDNx<9er!FCzit>5UNyErto^SKpZlgAS^Zxe5oWj{}>Pld~@&5VA@
zOoM9d=I&onZ`%<#oP!Cd6hwK`sZBNo1z1>E5syI~xw|pt3x?66%feDvMPPl%HWy@~
zcpkggR$t%u-+#B}s%!b7bb(M#-*8Llsl#pvQvkqGd4ewV`kP^DVRs1pfU}6CU^*l9
zcB~t7JcLeq2?RN?4S!pF*#lukAprqk+gj_(9)RPW<JwULjPri0)pXTX{`$r20rt(L
z3BuU4MWxQ>9uh6rAA~q<)pmcCke=hPeVtzmHxf2_Osn566)poy@9ad`U<DVk%dmhD
zxOZ<EvJoH;jwA}~5SZ8*z~x(}|M&cbo`yyu<R>zSPjSqZ0ctqnGQ^C*@M~`Njh!-_
zlVI`_5l8#rKiF|#4mbk`P{{azj&PFm(Vwtdn8$)$gWDH^>L#D~*6)N~fL_4@Xexn@
z*<}GWOrV6FRu=q&(62`!>7!pRn5+*?PEL-LTJik+BI$R~N&JPHaTt#KM#c2Ob!?hH
zdfVEBA8gS2o+VfNgmirOMw}HDabtHXirqC?azcgqG>rbb@nFBP?QRGiP%>Vgf9WW_
zpkPIuD?3BU4au+nuNP2#!ec`oDt{ET4#C-aq@37|UazRoJ%8ypmapjF+H{kHKFx&d
z3XNs#^;zg$<2{G*EYm2o<1An{!u!ZxQPDv{B0f(0dF<!l;HB>Rw$9E_Tli!V$;o%*
zl3COot*w8$Y#Sw5z&sr!ai6LA1Keb87bhl)Fiwt2%862qG;M4=7!KV?s&E^Ch)FKa
z%YVgWVw|DV`(c$3E&o+yqSEboRDn)vhCqt-iL~|-HrrpqqqEfnU2F9P7w?J4E@GJr
zK~Z$Kv7@eCzeR}tP4V`wO>9x-2onet)fSRXnR=KKjnZTG?r>E$&t`FzE$L>ECzMcj
zFnlrPh%IWP8|3ExjOR=8>XR4t<@eYW41sib@30qVZv;m7Ekm%;wuf;C|FKYt_^@63
ze$~W!;;!fM>dOAXYg@CeKHp<ev>@^by^oeWU*cQZi>mtMC*`Zrp}jRCR3EpDpD$Kp
zO;YLCFe3HYAdt=7J!hHIwdT3dec=nP;+Kl*H5UTTzTy=xcA&&<!|u!qSw2gC{R|y<
zwh=OMa5T`+=zFS9bN<qyZ?+D3^v@c2tM~T3-14!Ch?Di5Rpc(&zo<6-b;ADyOYx$K
zw?g>QdM=`&$<I4V71zS4Kb_j1;&A0AgO6|fv$4tM40zd!it@8l{j-1Kx?8O7Q-NN>
zww|-qXZzLeGzoR{RImQKIa1Q0>iSVF&Hh>^q6%nZ8_IGMFS|L-=?m={x-T?kmjAw?
z8=j}tw>i4aaryk+y}6(}zH&#@aBqm`RZY?vju?%%H_o5?HXd%&OI}y(Fdy)$__R}J
zzWahUhsQdBuyEzSSr3ae`Cj?20ja9|lrOK5Y6I@C#qUM1iy67dAYR^Xi7Ez6+4Iqa
zZg%SM8l_Iv>?hRMlgS%lu-n+ssOP%0efKk6Tw>Mje=DSfSs~ZM><RQb>s`-njop;s
zL1X&Vu8HY*tmTW?++zICu#2o&YVb1|G@sLx7G4>a4(;l)E7PepKAY_rcUi!`a{kD^
z72G<qz~KeN!vRm%MIJoKIs#%jpIEE97ieJNR%2bgig_)~>z(0M^49{A?wDly`-%wL
zo5{YOk>~L6JXr1Q%O?5v@s^S@GWO*;Iz|?d)CWoVSWof}jH?cx9HC%|O2ox3Mtsr4
zV&hwUP+Q4+{|U`bZ!neqVe^D;wWq`EsOG;D3HJu9@=0Ix+5E_aN4?crVVRs^&mKSH
zTnC@Aclm8aTB2LDTZer!Gq0arNxnSH(@`^Flq?$_fU38OSB!H-pV)ap6wU85_cPJP
zMh*yqgCB-Sch5FDk9p<ixy#OTf)h7sMP|%{GW$FHtM*WJ^e8nAw89yY_oNCIk&4nT
zzDd&Ma@%{HU+>gkIRe4(N6$Sk0LpqD&gH}It@rZ*9AN1GeFY4|BhhE*K;+@HzUSPZ
zuG+ILtFxRIXZ_kA7Dx-JK#oTU2BLc?tmY=$OGT+Am$g(iadYi+n!T3y(UT-}XJfqM
z2WR@U!YAt$)z{8n@f(kJ=@p?ex4%^$bS}G-Xu7jmTsnoIW11M9<NK!fy~yCzmJyim
zqYArd62+Pko_a%E-h!s6d%VPbVtiqLb^J?5J|(rg@xkg+Ao-JB?zs40kGLca|9NY4
zW8>mRMxHMkSGMm`Jre#=mTxt3a4-i$k6$(i#$VJ1E@I0?c#sLsb!<9%HHcj7y?EKg
z+xBYbQ#G~|3#iIk#c{7Z6h*y$R+XP$y$~i{(eE@Ts8L$VF_8BC{QY|?!lR7oZhnZ@
z14netA(!z-9NdZH@3Z_UWo}iQ_zTDPFPk`B?L;JrVJ-$)EVfPE0G0b>;(<v|s8!{0
z*SzfdZj}YN`PBP+s`nZ^axEF8dd-Rf-7wrJ)FqmxBxiZzoN2c4v%b-F4F7s##}%)S
z(yplRL3hblEM8H)dY&rq;<q*LAg*5Vn30Y1tqLIlH*1uk0cyiwLHbFedR>z`h02TC
z1ESr@#VwoP^D`Xg-^)JGXz0{Sxw_Uow$T;!`&EH+0j@<cMNab#RZ4o!WzFV*H>|6d
zuQPOt(7~Vk9BzSR`=a+D&;#c(!G)VBz0SW;cASUbiG{y0;?l5vR<kc{khppC>I=FB
zorX($_2S$`?|&9zeT>XotPvG|n)`#2l})6-pTZ1E2)=^J&*9UtDL94835?e6D<3+p
z4~cxNSKkh<7gzN2mn}@sKcPg__&|4Ao_b`y#n~s^Tj?<mWtTX|O|k}Y`Fhnwm32NX
zmLlwp{&$z0mcDz_OKSbinv(N3OJkf~mEb7j9DwFmM{kWLC9k`me~%z86}ixduo`2|
z0moX8$IgaU|A`3Ru=@Jn76IV`p-S{E6xN;45_W1%GI3EEQ$~Yjnj#9b#@mKzoztGR
zUd#oVNsL+kWHT9R>a1*0b@q!n<EUIL#4S?>WvQ6Bu+w8Q5nq;F)78#;dg>4l@oDVg
z1-HkxtA+fpyg0j0DN%Xwz4x*z5&E?n(SIfsG{MuyXL~AWi%m%)$0SWd&0^X~o%TNe
zDDN@R+wYY;TxL{=TO)7&ln<7%Zi<M>?zdlO3d>BSQnlI}ayAv2>p;Bx@bW@=LBS^Y
z=dMTTun!CmgUW^lai^_~?eug6-)rI*zsJ_B8!fKYaPKzynB3UN@<yq>la*GX(OM)c
ziKJwP5RRk$EU%^e8@O<-H^u~=YLJyNx5w|8%!H4ieA)3rU*NJa$t5xF)TQ26h<shE
zPu=ZwXTawAF8Ad`<)GPi^=n*6MyS{wRYyP4ueWxkTNKZ_bn%(PH)-Umv1*5Xf5<ox
zOZZ`dJN7q@o9?uwMs4NFo?G=H9;+l^X^xSmTZ>f5c~M~dcYL7^8+>Wdl8W5h+j&bS
zBXs1^&>TsO<hRrEYDdy-iu@=oJ=<FwnvNo(Dt{)66yO;gJC(7r(ocJro10tVD9rQF
z7Iaz$9f=;VeAUma_zK#_-rP|upf1(F?d$w@gS>8YnDSACnvL?o*FNGP^>C6$?@5H+
zOyZlt<-2_bb&-m8_^D&m*V0az7<y&F!Nu?X)WpZs57K7@6%V`({-!im5{8tKJS<TY
z+#3j$#XK8`^e+fRw+Qd{ChDI|?_R|9wBMLSTZ}kDSd6T7o?d10wL0v3zoXgAbBmlB
zKkHtQeKpe{4R|N50|*1}iDEnbPz_XYE`AqXuk?(J%8wzR6XW9ISS^Q&mbywOL`3-c
zT~_*wVi)Bu^1dD96A%y*@zlIjlvo5`@CCz(N7`Og4$Yq0_*O5iokg_`CI9fH!RBFq
z?+VeG^`)5i?>bDbN%Zd6B`>IlKV;+FDG=3k0=8RDSeH}q<M#Id9^aV={159+s+~|W
zw!fw!zCm<^$fHXkBx{)k?`F25=N?NOa*5Gwg(7{U?whJl3GyA}-4x^TtF4uUGV1e8
zj$WnX{<`teacQnrALk=S*?kf8fm*i4-0lQGcZmsC%U$fsZ;|2RIF^)_u6#32blDp%
zD|~1bS}L?zw?00O1`u&@ux>wFV9JfVo#R#Ra1FS+9rxaaeB;b2b^6TVr@s0Xjt*e+
zjkVdHuj=pDpgCAAr0dgx>x6`aE=PA{sIO1=Q?<wOYZwys%m@k&{2eM(zKil_*DYV%
zkc#qvAU4NU=abf$Lp{o)-TyW=V!(I^$Mu!M^p1*qOPMUsno4yVm-p#hvq1W(fb0QB
z<<b&Wxy?%dJGBfPNJh0spL`ODbhR!2Jod9dx_YnkGALdkZvAK<M)zqqkH-8;uj&g)
z$x;!NTi0=(>TJ?|!D1c7zjm*5Qsd99ajKe+TLl@*-a7TdQ<wS1Th*-Au|Y2NN&wT^
zNIj8^Z(54`bc63nQR?Tv+E|i@6XXw!7>;$&f)d~4O6h%XU?D0Fvb;6o+>dr92{_zU
zY4YT>cmLSgImN|kJFdA-L-XT!|4hX~*XztN=6RpI`grBha!5x46=Wv6JMGgyv|6~?
z`#|rfwVv?H*RNA7pK^?jRc>}B`QlzVktr2A*|;}gB6W0Bl2y|G9fFoe`uq3xM(*~q
z&<X6sTD~>a%rek-Te}Ottg=w@s=gU{cG3v|UP!3(Iz0klw%<qEa*m;0;>t{~)zQP*
zFnX(B@aOY%VpJH}ULqmkF6*$*SX%14+?yM}%bz~mTFE~H{4%m~yWKwnIj(IAj--_x
z^NW2wxw#eszrH_3Dil|>JkRO9%jrZsP~iI2^GjDx;o<5~QW<}S^Fs=z4-*D;+SnHK
zPg4z-r&YqL51g_rFVkh&D}Vp4RG;+uv1g}GblPKKtk%bxSDQE~d7i}o5rxNRaa!Vd
z%Ui{X$2ku;lNlYF?-|hFU!hsGd-KYTk<GbVZTE;xZ0L^In-jhF8?#OOPoA{HOipxf
za0Wu|_}ve7KYzYb+^{lW73wz5kJPuDuFK#3OF;gFpuQy~WuccodrQ00)go!DC^xtA
zs$yg^{_mO_Q=YroDMx>gc6IZ*@Pk4^EXGGOlGycrsW5x9B^z|aQ+E5CS{FBERTJ3u
zT#OtLbP~zyp`zrcnu`s%dfDT@-NQ<o*I9$>njIvSEc>p7+>ahDZRch5Pro}_`;bVb
zEL7mulTPaa`0#Xm5!aTeT>6Fftj_-6$mYS_@9v(vZE-y}HS3+y?wEfMv8y)f;e1iC
z^tIyF)XB??o$H=F6-)*;sm{9b4+bOg>Q|=UznZ=0S|u4#rP`)b*`dSsy)o;d@1;hK
zflgABi-<QD-^*Wp<yu7OK|(k4T@H)-?-*7JT&Y5Dg$IrGRuM00^e>bHb-?k(v%gC{
zzDI>lf46~mdW5$PyR}bOj~9T%tF5h{Udke)rm85i9CM9qsjW38!+C2RU-p9()@O0U
z-=CNp;MsKiE?Z*~Bq0}QXb$fpN4dD|Rf}z(T1Ttq1hYkmvR0qWg+U_#Zu~Nb74KL~
zFazG8bajj~`Y<G$z;h*6|3=9-jl{T$>;+l3<1H8ik**bbCZPVG0HX?A^{)Bo(ZjQ|
z^H&`_e*D*k%4I!%Vq(1Dto79D?Cd&z{Fv(L%a<<|vkVM8*4Wg1?B2H;g~Rl8{lO2u
z*V@{q=U8DZ6wq&;A2i}{Vo*jla-_jQOB4-V*+EMr4V_!OQ{pwzVkEEFlF=SX>}N|q
ze1-u4fJ_tj8=awi$?(o@+YG8_2|r;cz*e835^bOD#;llu?#}>qi!TA)*4FmyvmZHl
zaR1EAOk-oyvSqC|=b4_HbJYFK&d#U>ZfRM%c%X{o-rhddi*LSpq;&iE_~nfodqzgi
zsjc3=eaEFs@2gn!h_+=*|HX?J-h1yIb<=Ctu2TW6zVe}m<|n^$<-->*o<Dv1<c9BM
zQ2+o5ZAnByRFWl2cI|qyaQxidoZ3c}n<^Y1eRRt`eVNm+*REaFzqf7MQE1}P+}x}i
z5zz6VqWQ*+$)={}Vh#K9<;%Bk-#I&btF^Vg^bA?CVr4$RT8}IU=wjDqeKz%{;HgiZ
z9DMlU4wcI-EiFfmyipw6(Xm>$6mRMoH8L{1d-vX@OP8KFam-@BZ;hP7PS6W*;u30x
z6IpZ6M&?s_o9}31s1$m^0C)ErNtb&CwlT;vki>B|SNhKhVj2JdARE+Dl-a0qjboU1
zjOs2rcub%BLWPa=ASB&B$98&WKseKX1Hc4+KPYeB+_z;*p9*M|wr9@{sS8$@w_!tf
zfB(Sk+p}t=-+c2ISFc{#z5AK-=SS5D7YBa&)1N(a=G2K3Z^^vKZh!jey(+Th-j(Rq
zty{0Acxq}=$KJhrcX700kgl!`J9a#-B2sr9J$hJo>DYmR$8;taE{yKm_fZ|y(9obk
zhK5e*maSU{bjYz|Z(g}Fq4Keyp4EHmKpnDU$IkWZH{8B`M@Ol<ROKyDJDQrB3Zl74
zE|=4<6Z~{XSv*!x10AksLg~iF#zxiF{_V5s@A2_52}(KzbZxFiD2crwp)9y2q1g)w
zM!r&FxSf6m<f<PMnoxmkor*Pmks_u6005FnjpdS^^fmO(62E$u1leb&_>V+=JhRb!
zBLn5n2xtHk1o%L#UhiH}>P(r)D{PeD+`B@cdd68l(e7Qqu&H!c;nH)3e$&m(EoBqa
z*p4$-*rJIFhZQMYkdOw@;7VNyXu&~Oh!)vFOBOV=)Y?Rg!3oqjhcOV@00005QYM9B
zHGQ#-tQw|{)U#lpJ#wYiJ_`aGzzlql1t=$^fR;=YK}!t(Rj?tTrEVOw=lC#@b741y
zCPJ*ZUt!sOi{#B8003%BmVHjV_svL`i0Jq#d6qC4E%n@xdbQ6Iqkt}N^-cLRKwaaj
z2Q&a=m<3lOj3;3sos-yR(6XQ(bmYF$F5AR(%;KKFkzE=vyM%E$Dl`#dnVd$Te5GW<
z-P%}4BeeklvI_d8BDH&HlIooUYzr0K|L#yjvCp>P+JgXqfChkt4%&%9B-Ooxmgq6X
z+{FpqW4g=UsP=quEQw^I#nfcN<u0SX6)Ybs001DHB<3A1>O?Gg%t{+PHwTaJb6<qW
z*k_|;qxl8^m;(U~U=GJgZzt#l;Gj#!8*<Q+_)_T7krHD;bmVYl3))(~1aZ><001c^
zk%G+3r0ja<0NWy@@V`6MPy@;s`&=Pc%Ax-TfH@G*05DJNjW{Hg4qDPy3N4|72Puda
z<0d*n#02^1QbI3YG1mY90RBn2EiyKJ(~m;{$DBy@EEWr&1^ZkjGY%I3=0QLMz<pwG
z#9=RuH3uCvTI{9JVr0S+yNMPvGFmFHu~Xx9O)c3G*#H2LWa>;&S-HCwg2v;WeFaEp
z;j^T|K3fl4F$wk=0E!@>0gRHFE*uh@gSM2*Y(#?&TD(f3#aO|z|DB=ZyGJ!|qQ#hu
zt`yRA>_lRF^^f2N0LV62q_Eh1<m^OuOl*#v&gbs1Lz85mD@9Lgyrkr^4gEI&jDmm$
zfCpr#5y!%a27=#r&|;t^w0J3D8x__*b_R(r)eEA<l8F{8GTJqE8Ti#Ius{a@fI24D
zw?S*kV)o8rQ$35d!sibIIAymZ2Xwt*0Ge+AKr%o;1Hb}m*@(kxIztY6(XWUB#ZE^K
z@zT%+9^@pLXt67!JyJ=0X#oHLAVJj3r`b##zjv-4DXHpNY};qk#B85wz5xK0K|lkT
zCQDs7Bz6aFHEa?cwAks$AzqU+X@tE@v{>&G?Hb);j_PTpHnRW#001*2MVi^4hvRcw
zwLK>C20bFw&{WuGOV4}U_BjjCe*?fY2xtH(rxuMk9^|&$4BA}TvS|k`ad+hKu|Ie&
z@#UQDn&`3|rNn+#2U@sds{sH2Y>;%16z}|M<(<W{dKSxt&r)Wejp=NU+ot2k2j$NI
zuowh10JxB?MjXZ+^!+Fg9JJWf&<0AOrMiZeteR-od}Sm<{hC^+BeDSiARA;&Vb%2h
zB-%Sm)QqvHXGyDlj=TIB`wRfCAfN#(kg+Ztf`hIY^MTxT%nIDtHMAtdM7!*Zfn<y6
zpww{9kNXAy$R4Pqz$D`#bByjWI)QM<1srX-XNXgF+eA!{+veiOZJ#p&{WkzCfPe-7
zcWTs#BSr@;$!rO|AhOG5vC|m3>?nzt$Tgh!x@cj=5%J@(^hC9~!CD;v0P2NAzUMh1
zcG^>)=8yJ0G{N@S@wLfNiW;1yls^MNB@oa6cF05#bS)ZjNPG@jjHI})gdM}}I6PxH
z5goMn9dGjPltvU+6D?I`v?NFTdatd~(*OVfX(tUH%?Z8V!o7=4JxhFr&n~}B#Pr@|
zC`DW+aQ2#SQ2q>H2Lv<#_yz~<8TLUW!==z-ts{rjq9EEUXcZal>xd-abJ>cg1^@tv
zpOo9B@X}c%?cP~pQO|;X4v`T6pb7|R0BdBg2s-A>79F&trzLbTxLDB8l2{WhZVTGr
zM<g7BYj#{V003m0dKF!fbaTL?0ui%!mblcjSZKT962s~<QkxeG<<9`%4FVbfs!*dw
z9AeW!FA8eRL5rPs91G(6+#D*nB)~*h3>~aK+UvONQQNgL`WpbC9>B}k$CysG_GHEH
zoh5Gd?DE@C*h;sJrik%%n!V;50ALdYG=NPqQ3PF%Qw!ac8V4;drO;wr)EaLLT^6W7
z5ECuNpP(u}+OKMMT@2$(4Z}wc004l1_<r*=CZ$6YIJT8;82)!e$>J>DWGHf_+ZIy9
zLMB&#ls^O51OW{I)v0|W4oRPbmeP2s>BzA-obQMM4-ZHcAMNXiN{9Ly0{{R35S-vf
ztM<k@WCmOH$o_XkOq726TpNE%`7;3c0RatQnXD8+*S-;l#O0vHa61l3Wk-(15hbvR
z7JKJO^#bTHlG$VNjGG1k0Dww_@^3)~#U=Q{<cYJSH@)gvGG(7L*?fcYX8_9}paJYd
zBMyVfVsOx6wiH^jqM;?Qi4HX)EPe~1!-#3|v82aP0{{SIm1tthx}A<rLcFtNLOn|z
z+2`zleFm@(0vZ7PQoBYRVqbXMbI@YHBZqi3h89c8UV?>=&qSByD<yFCbAZWWr~v=~
zQi@gaXlalUlH;AL1jarGP8kn0-v9vr{1yNJ|NrpF2>$>800v1!K~w_(U^WCLg31&O
P00000NkvXXu0mjfHg}&e

literal 189884
zcmXtAWmuKL);)l<fPf$&AT1I~m!wFSbT=HjyQRBBy1ToiyAKVA25Al<-QVkX@12J~
z;PbpQvuDqawbmFaFDr(DMuY|efiNV*MHE0FWM2^I6&DIT@E356%3BcV4M;*nNXa$*
zI0I4d{ovf73sycZYu=AW%M?PR5Lll?dfz6EUA9bGp;__f--W`2MzdbX7v3m@#_eB1
zCXLkoM(U0IV~#x!Ypaq)Gn*$c(!-b0@0l4HZmhgbx9cu8Z|w!}W{^kE0$haPxOxiJ
z*&^a0C_{LPF;gM6B{ealO&xcBL~AtPm+Ix^S6s@cL_|d9=2cjydw8tgxiFM()*K#N
z8ALuiC3uYzZbjA&5KeQFn?@oKCsqbIqF67(wE;T;fmU80WWIsb{;5Y+lF)Egvtf6x
z#GOeRV3Xq6p0A^_8fs~SWdCqjU883tvRQfqTEQ!r7Msc<B|5C@V5CjgQLC${_FUf8
zmM^n3r)r|Byx5i0C}wDsGa0EV|A+zAOfV4ZYE=++aGcR8<>!?tcM-&}<I=VmNI?MR
zK9jf9>2nj%tiGOYEQ_P6cCI&(BY_KIPnws2YIX7<v`w>jzx+^RQKN-@F(EQ(7xPB~
zaS_P+lCm7uEs2u2^aLP{m(@O)LE^R(a~l<#hNr9-q7<{*rQMyut0^{8&etgSEWkWp
zjIfL3>u{9p&+;N4K2G5qn_Ar0{|b72EV&Tiz_u?$lTj?xCVk>e^@xWD@@@YZlzTs>
zcH;kM@4YGH_a~1Aq{t28ElrMO#}F^1>AJW088sf&I0-R@nEwnI^i{>0oXwBk%r((z
zEIx`adH_>Cw_PxZ!*GC?-SpJXF9-?4*Z;?_Vcfe{Or@>gvYy@2Wdc?Z&jRsWV3(p8
zsmzMHmRVy7GjyFNJ7}<)W~N)DS+K>mn~Bs)m`Fb&MakCd9KwGyO$gm0&<N~-y$kw2
zsHx#={Y>WD8-iel4RyO$A@LQXqx8Xnsv|=|u!cic%0tI79$|lzTj&)JMk+RMF1&f$
zA|6pU=Su4j<kCsZ_)NmVvPt3B+_qr7?-lr3m?3a^uR)-1a46Do2G?6=ofmbKSEk+8
zQ*ocBD98%#ntFb<3VY-t!5FmioOlVigb+5wk<cM)<@`sQKas40W%f)VenE>4Y^IZg
zSKXXnMZHYMpD4*O6En3ddFy29HY)_-kwBmgQ!S4QLL$zKo_-VXgBbcu6174uhLV0J
zy$FZV2F|!RZd9)u5!=yk|G=vO!S^6gu>J?ZHU+QiH}4CCq_kIo@7r;mZ<&+nY(5{~
zZxGAI*cIT~lI-3da~&*sIqi{u;QYo8%mZ?z*!(_|XT+izS1&jWjZZWMk3izugwv+7
z2@go-GOC2I%-8AJO#kiU%RQp$yRyj%PZSr8W8~*Kl5@0#Q#VClmukvclV=<MRUIo*
z9IjLGz<bNlB-Y7R+1ZTt?~XyWfVn`;j9)*`oZKJlkG?D&x=*U+W>9{s6NT1MvYCqB
zi)rmyKwQO<L1&`0f>`8N>gyD2roDdFz)pTllbrG2fQu(ptT3O&aMXC`Ls;l5%UAK$
zyV+OZY`D7MfRF1D9xb@vxH2#w<_$pI(KBbJ2divF%vc*32bzrXmx{fmkcikQg&44_
z=Ce0nVSuXr4E9SV@11jmi17oEFe2=JoMC`VCa1aiStpdTG8{${UC#n}dE3HU(G%4_
z5PShHAiwRY6)F9~*9D9e<Mx!AkKCFSl!aKHB)QZsf%xG0^a3HAGFOb$%_mB|wlv#X
zz{~7j0hjQXSa-<J(>$6}F@+-jw%R1Qh_4gB%Ab^xOD$Y?!h}PR#!U$@Car>ztVpVC
zeMkf1IfgD~!OoC4Ba=IDI6HlH$Sr>0A0CWT9=#lRAQHs9d8ecDRk<JMF8d>PQbr!5
zR9{b@VFwB1jBalLoBN*KbfAVjhfm%AI)v6ys0)<{g#1C+H%Y|H8Ro!p<f~ffSIRSp
zr!kZsP#zSBgh4?0&$RfKlCaxjiUT*4gNe%aKZ`x>9>{=Ixrj?DBToKqY$)hM)8AXF
zQ|!`{F0a-H3ZH!Xc9W)`BeZOdDGLFCE*9wp!&S3Z|40xM)k}<4&S&2xI*%AT4sGRb
z5PMni&gZ_mR(E(2H&lcW{V=(!c(<Muqh)3nZ4r^CbpXucn-h^eT7yo?Ja#>)|76>O
z1Cu9&ZsqY&CK_303xzixe8qq+3H~#tK{AN(Zzyz?bcn=G$N8I^QV0@^aBbYWOvpq1
z5rei(fOobWIL9alPv`2BF|?2L<V-v#ADI6|(6xXo`nHQqezjmuOXX0L_nc-qR#ID9
z-2}+4zc3oRC5dsMIYjk_<E`1)dp|$E7c}?u@(RWx%S=dkOG1MC{(Y{(okF3;>eTG4
znzFLGmX_!FR)16!rl@(dGcIn)>V8a&yjNRfB!;rGGBtIS`NCV3lT+GaznEaFBygr?
zHg*jCL}BxM|7FMxs*-AquD%^L`)?_Y>R}HqHuy?X?9JGQhPjAU*JdCl0ioxImvigo
zm^k~8buKUOxtc%Z-xUH$aVZzss~Hl})fSk>?wNZ;hM%;Ez6|QA*9+C5<76|(+kfyM
z=<h|;LV*ZUP*749NvE)Qdx{DP2}#&t4|iZhVvv}#SNv5j5&kADK_n|JNy=={cQ8{F
zO(vkCsMsqG*TC!cHz6V-;_>k@H#c`=BrGThsi9IEuYs6|2p2akJ^icsY;k&eIxcOL
z)Lf-{f+X2b`1+>O$@e-{Lg={JcMVjP`K*YhYofvRpmE7lma)9??iWd$lvrs76J*BF
z1{%l6k9847{(8Kl184^i8`zEQBoQP)4B~uaaNJ)*xkqp$tCCAX`_1B5YjC~xyfYUg
zl}X%}mEAOQDvmab=Yt>u-O!kpAkJCn_Mn4(Eicckisb!$DGLjYbS6vSpN;bJ)rhw+
zQa<;~*^>D5eM?lFJX+awHY+Hb1hgSQ5Dxn1fW=`#>;8*^yqcDlnu2s_`P0K#J&Ok>
z<*W9Fo-GPV^x~2!j^wxm5wh^4@Nj8fvmu)-PpBpT+z1q0xMh>&4pq=3^LcJL_`cO7
zC(wK5dx(#ZhcUv!^|O$QwyJd-b3ok)w)D;C^E;gHjh}rnakJf^c+`TuPfJl8gve!+
z5p3=?y>sBxm`sw|Wv;IMm>DVZH-LlMf`fiRwqwSfe1E{L$!C82))tR6ep=L%3+qMI
z_yEcNi2@vGRjaw1jLcO>yGMo8WKhg&K9{xMLqo+fY2MY7)G5&Rzau+ybISQNn#q|M
z<b<hgN5#ea<7qy&0rYIB5c?Dbv-EL|+g}MYW^Luv6)JCX$jQBGKT9FSV<;PHyoCm=
zLHq2shd;<+q~`A_H?7Jx6t^mm4)ZLn=Bi8O{+9jCQ5nabe0gG2w?mwkS}T{uLG(1%
zav{!Z;wtDwOiavJQGk*1E4G^}{4EJCt+ZMUcUFN-eszo;HUk#n!1`oodwXOJR+XKP
zbK(7%_*(jM>127oZg6wSz2z>v-g9bK*gBdNem~)k$9D%!wNQS*<9&Hq`zl>94>}MA
zy3_g4twO9*@fx6_$|{R!9VX+?^b@HC#-X+&%q;sU(+*LRAS!Bd^3B3DYi_r#+Z=yn
zclXvi)%>1hChde_BPxpI#6%8GPFCR!D4+B3{`1pAYa3#{R3JJUTJh@6XjNmLcG}R6
zeY^z9T_)N6h+RilibH_gM@^yAW6RZ1wHTp$Ba%g%{%jK2`TF6@VW^zR4GYBvOnAcH
z21laW<ZJra-NnJ_NjXDVfm(1!rc?S=+i6GIpR3h2mm>!SMMYLt)`Ke1Ji1x^X6J4{
z#LI;*gUZcYyMn20?BOQkj7#8167ewhegVw{8B+Q{4HLISoY1$sE0;{~IM@H#0=N3X
z?}*epN_4fUQ?Z;%Wo&UqZE^;@JXai9O2NRYk_l4(!9mz-hT6|(TpN`hW83x1kgR^Z
zVa)wE8QYojqd||so-_(+tl&YR-*nj15-jm5;{Uy>(|hM+mG@$DkJ&jkKEC2){{yA2
z_Z^~-k5T0+Y`JM?XNSePyZ`77lt~WBLl9jli<|1wf4;Xx*x|Xy*;P=J(=>qO@Zv+A
zhUz{ArN0S!n!BK;osS99*X*n6$JH!C&I?}-3TkR&ArqQ+$-T;IOG~h8U!7{(&3uV?
z0+^6T*p$TNg0>5Z#8^&F&I(mX0>t{k57C{|R#GmVD|T9?gJEyO@n(;_fM3(LN{^(F
zf7xa!;s(t^B@%zx?O;sefQJfa{_nq(1v-h))affY2+1ez(YOq4)RvXUomW{#x9Ber
zPFF9<v{EA;#UXTg)Pb>cc9N3n#S3(VPVvc9jKu`Z?oE{?Jp>^;geQdj;wml4&TmV!
zIYU#l{(W8;PaBoR>ym^mq-|xTs=9Z)<WO5z=cc0G^0&}%Fe;PVAr)K5%1Q<d-b?3p
zkaz{o|0eqy1p*(%u$`-+o#>Q+#25-1SA%5t7f&LXJSg45rI|>jqCv{6U$6}cap6+c
zuP7~cB5lENss5Ksic1P75C#1vkk=&N%@>}llvl<INmZTC?h5Ijbvu5`im9mJ)3Q0h
zNi;it`-XrDQHq!;*G8NLOU+X$WFZ<|G@2=UCH2r)e0NVmnv$bYa31JrR9|rJZ`V8T
zMkez-JD;AEAG8V*wH%FeUha!SJi2ZiLNn7O8a1%04MN|NR##6NYTmxlng0@c5u&*r
zPk_y(FD);kWg$Vg?TXK&C2k%%^D3t6&#$gOi`S*@z5Ov$!<WhY3An5d={jEXd9N>R
zh8T^GDOergPzQrCN%ce&m6Zu`iHXUwx@aR98<v-rYIMW&a1s;o?Ck7NQA2TpCg%<(
zBlOhj+@OTln8#qMz<hmr%${qa_mJBDvPlGISJCM&1YdKy*{D!DHchHd72@I*6%`16
zoUKs|+O+ZiLV73nt@CzDj4T#uJaKc&#^|6Y+7_`n`+Yjqcr!}T`WtZv8<VN>7V3xc
z8U%?S&SQThtY^GOO-S+8>Y6$X+86^F>DtJP`R4Dec=6}q$N)!LL#rghw_9xtHJ53v
zOszATsMltM7L(_`;4_BT(akwvS{SNRY|HXt<_NX1W>7bDz&%f_P^T06Cn%X@#RxKy
zWHS5VX7CbgYJ`2-|IBC~%Ng+{Z8&&nXb8x!ULM~A57`5xV})2o&rCV#rD}gtD|$ll
z0)+M4<|TD>zwR%^_4}JR<|Mhvk`FC!tVFB&bc+}9AC0qo-BzjdVor7y^Et5*j@zHi
z?`@qCsdQO)S`f?fv|oCZ!b{S1{FG$#hF;93?dO0Ml_;@L3f+@!+~umvx{R`Tsfkup
z(HcRuO44!N04CM<rOkNSkq@1To}a|M$(SO^!N>8W4eQ${KvwpB_hEQvOlEsT1IjVz
zn2a|AZ{Z?yk@Oy$Jk`lw$y6m@X#Qzih!<n>xPjT4CI^Mu^ja<B{<C3&X71A$qWk40
z@ibM3GZZ{}-MT=#*XXnwbh7`$0^Tv@ceXjhruPU6853i}y8aN{OKGqs(@>{QGk#Be
zI-;jzHJRrU<tda-ao@T<kHUQDbs-Qc9NI{rQ*5-Xxh9dx{JOJ0m1o|N;;g8s$Q>9q
z75c;dMf@m+jz!$0$vV+;{mmaZD@|!~L=}y8E^20pts&A-ulanu5yFh@u?5|<oeG*8
ztf~YDtX5qD$|;g9tFGAPiIy)8o$_C#)A}J&8gC>ESZHWyczAd|ejNHDz{T~8<>~2(
z@TcqdGYn3pEJhD+anqP}Nq#)FI`jHs%y8B}A3syf_YBfi<9PjxL|vQu3o3)0Hl50$
zJcbhyubTQf!ov4k?n<{_OI~&LLe-LbYPWBmg(g!cco#uAk`d=p5f>5>XsLWmM)+PV
z!eAMc40dMA>p!;lW2rdI78-xb4-TUF-t$?|Y>QuZUeiz~)bDyY%KPC*qKRYfJxGVK
zzH>9Iz8|wK(-<9-Zdg##lViit)m=Z|9+V>HNtu!n=koSMA_OxurNzeD9nMP3D6jak
zItw8UmnS+0_RJup?qq4JDOgId6e^osT;*0n8k~v#yi-bzILhUCXQxa+n%XeYo|^p3
z)b*4y*TIpX;5!ekcRu{g@X4Uuz>Gpf3a>&gy;;wDS1gdsfrQ1aX6Uascm(atf4-6G
ziC6mMc(`4L1u(8s(XQJ>2AAEIva0s?(AwJCn>7!)EV-gYR9qU%wcmF`v6QcEdU|^X
zBM4_85ZjX#?g2t^2i9G2HPLn62j1boW4OkUd7?}_wdL=}y-f59Cj^zt!?qR}fYn{`
zlPXtb|GFEIOmkRdQS+9iaOTy->66Qa$i&Z`Y@&@z?jggtknVS8N#l?z&XI~tCqJAd
z(Whai!x&1grNYPw17ORP+(H3KPI4VYu=RcQIt?jFO({tN<m?-ZU15Qv3+|>BAfqe(
z#1eRnv3pG==)%#s|1NSC95oFS6Rpy)PEfB|C&hNVJ=;V?L`+)AqLoc`yqa5(H@JGI
ztMyy0%XrOw8Ad4@p;u3oSlHNjy|Ps2(Xh#jL_%W}GZtqj)rwIuGC9e4^gOm7K=&Z}
z>vfzuJq#@{8pJ5*)hIjv{FI()p~2_S$Op&F|NIwSs!V0oy^WfX$6@0A5gNP1q-f=e
zRw_#c@(E<zVQ5jr_AJsZ4k*!+*iENn>muOiFSV)beH0WGR95YR@4^DVx7{4;-%AnI
z>ODUK1q@+YhJ6&$_?PLIs37D10OqY+;S2p0F4*KZC=|N2z1`c}dvth6fGzU<JEP9;
zUlU?b+^`uX)=*-D3Wg<pNwh&M9k*-E?WSpW#Q6dDHoJ<GW37XC!mPmAY^*jb{4$}o
zm<*JxM<j$&O=3{ki<b#ul``b8FqNn=lrT4$4%xYCyv5Aw3yE36<<VTG1k02OxYllt
zeq*Hm&fLTR+!2zGY_9$WCgUx)bIB3CUlg*gY*V68I&y+>v#<2CWz4F|tG?RuxElHC
zDiJU`v#}+^zKW(q*v7@hNro}<I7X51HrCZCmM9e#6&)d(V#aNHu&4gW6CIx%J3c(*
zaoo@Tq0J&Sz=+x%8Y=NU=~0N$gJ;cQk}ohYa2`1eIG-X^NL<O}d>NQzk=9E3HBOuA
zs(ad!^8DOhIl@ClfPEw3UTSnRgPL#VHV97RP42o<+?NUrSIY^!RC{F3of4vYc{mM$
zn-A}hQsok}v$OyFF>+^g-W^N1yV#2-XfKjG=QMe|J;$Y$rHXCM$<bf$@B&X}7K|B>
zCQZ@V>`i3UbI{P3%wVNiw;s@l-kh9I4U#_HZbu&-9RdF+1@4WBc~k0oxjzMb;Y-{m
zO3Q@)VO>U{S{h+)`MFwe5j@ss(;wF)8pA>=D>>Mo;kOZiWC!;ik8y(_+1MKvn&eMd
zL_gK248E}q<gl4%vKWBYwV6XO>&<EqxrBJ(vhu~16&zI!i6fo$4B{ew#DFR^drPH0
z9aKpZBWOIJii`iD5K?5muTKyslvj<`e{G;>I%iB0flxf!0$Exd`PD2;Jhe0nRg!mp
z?j>`iMri)z{Dy?YLAI#<*Vf)%GH^~K(rRjp`}J&hSi~Og?w1x4u4XniyczLNXOz*H
zWXvl{zLlk=L}~mJ_H9$neNP{#M|RPDM@G=%q6tFZyhUgwE13g}$*U>!p$xX(uc!`~
zr(5vr^AM1$VRghdL=V;n$9=fhtiySuKE12`*>f?XQ=gLx!-6eUDwzrIt*LIZ-5SIs
zeATuW!x1w#E?>P$tHplo7jp#D7kNFs4;cpH{VGQg)tni17nhr{6jn3F_E=u8`+CU&
zjSf$4)gNeTc|Ha8X4b=)iYNK}b<-u2<x@#D_^MDi`o&ika@5G`H71EpN|e?JM?+Y^
zwKxU6Lnr4l(=4dAD8dMZvUm0^I;alUQ43Z7uDxAmepU^jlNwb}yB_#vk1}Kbq3X7O
z4z4?v9XVR((OiaDGwbpeRw@E>^n~@}8C!UNRKM^#PrdqX(P2SP7~=Ro=Ht$>MbN$>
z-?Da>_3Hv7dieT+Pr|5}m}aJyU)szs_t{dUMQaxeq~1xS5OR1no23j5eY{_uhnlp8
z0p30UPfnhLfq@YrDDJY>?!hS`xIz_ULSAQ-9vk9~WqLvT9)LGM3`&#fj5YC9UPx9z
zq#^UU>$k~r4XZ&%UCkoN=Lb)uiIHtLUZ1R5buT4Vsgsg(-RqHTogWJ#4YJm7Bjl{w
zhOrKh6ciMYkdVa2#xgTACngT)N9<n;@mvLyd8?_aim_bE`P|RAUF`1c?%G>uYHF^#
zA5~ONFiBRa*X<^0TDNGq-d#)z6!ixLyef4CVlSmwR6uaB*!S;0zC{FxyBYRssMq!;
z?6-ZMHwk(wbS<w@7dj+X{drYzcSvH_1k2eV2Y^K1BFbltU2fR~lO|=qlRBKm+Ce1x
zdcQ;{O`}?qZ6GO+H$>JW+k|fg6*`k^`{poC@~JP{a-Fs6Tsr1CG}P;eQ1q`l#c9hP
z=`<%$t6MsB&{u+J{dp+f2g`~3Ucu+fJOsQ7JNMd^FY)AMcx6D!>df%O_}i2F<402<
z@f{o-y!(4`WpVm&9!;0^_Hb=Yr><knC@F$9X}RGo2pYrfup1+2l%TGyEkooeDA;wg
z?qj3z-Ks%5XaAKc0DL7CKGzW@Eai6h8KGjBkStDi+UnaeXQjN3j9Gb7-x@~kkBy5<
z*DyMZG)4Mbk#098r@e1SR1c@(t!;pk5q{e7VEyS4D5KBm$cTuD$jIbEp->GT&i}`>
zs3XY)*2H~PN|f?R6t_m`tBf3Dj}L4_L|!dd#bxn%08w@3cy8zM?!wH>47f?ub^ZPQ
z0Qh2Rws{o?!H)|!UMuCVbFQk_f&TTAPp{$)=ODjZqs6d>GBUev(g4<nY*yxm579@L
zaY{)lr{dWNH{&oi`=vmUSn7*I-p>O-afGuaUw9|UJc5B;^ST538?l4b$ifu;I-2ie
zskuxg2JGdrqYmNPKVFr~tEv4;O&xhD+Ej`wN}_nn1gc*mMB(Pz+XuRq)^zv*xMC&m
zUMHr>I+Jk&W2oTU?SaVk+ozk=)m5#Zm6c2>OfNtg^6s;aQ933q1vgRP%q%zvU5+^|
z_Knn!%nZT#pI&8g*5FrL&nJ@x;u5ktPJ0;<f(-6x9)(C10*27nM_R@H`EJ%Hsss4<
zzQkBx&wTZFuVKp=;di&UwxRR$DzaV^6Z0K{@uNFh{2AM7d1Ree@$vEB!Y(ckW+b3d
z;o)h_h6DFkM|APnfv*I3w+(gtMy$*D+XA=iVp1#TGFHWropdGe4VZxt^31hWx{1Vj
zs=_hq)XsXCz(;~zguZOpr4yUX{5Oofwg+t{o3KPXr(iytkum%WH8z3?$)gtRKo&we
z=IhV;?tDprIm-CYCCNS}Nn=HR{@;yml@bKOBd-*0YN(`y>|1+zD!_0A3Q3w_pUM*s
zEG-lJP&Fz}&Xh}}GqS~s3hYAJ{0WMHqGoLL=po~tmdvMIp~U;T3n5?ebfw!|dIdJj
z@UQYLo5ru+eAVvLSu+Fc2}B3nL)<-qde9+p&N<M42qD!e=H8Oi?|poKcI5FG%dUXJ
z2PLn@6Ma|^e7)E4#7J#()XPwtybN<lXN@3ouZOU3rJ9LJ;rM#~m)4;Pt*u{}vhOf4
zF=dH<XR)!f$A(DLmRl`1#(MtN??uANZn9o2^=aa0zF5J(v=X+oWFUOpO|#MQJnwJ!
zxKWT56-A;%Rqz&4STY!YGAzQTCwz<$FW|4kp98Cmar`Z#yAGh+N~ga%fUY&F(>eww
zZvDfRoAGZt(p$!<m6S$v+Zf9m+c7XI2Q}0O2j5Pb9CMnUa%e0`KEzrFJ3=dAmxkh!
zYSAa{a75Z{vCo{K3XQ8fUlzJq0p?7**Br*i$m4=TLWit|b5AM$ip9OGqAV1q=H{>2
z-!Z$DGd&Lk1I_zish5Ju<T6zY)(1S&sQdfYnIZ=Os*U)|J@n7Okj2F}M4z}6SW70;
zIr9^%X^k3de%LyiNqt26tihG5<&w=U<JAaf@yG-j`5GYGWih+QkY-n)K6&B4R^cxv
z;XVamWQir)+tC7z3M>>96f~l|W?fRB+h<o+#*FW8Z}STZ>^50mqi1p189YDUxvba?
zrm%u>aBzyHt*uX>4Hhj8K_`;{Vnn4pI5?>5G^gxweVoGU!h}~Cza5DFu30q!4-YTm
zBb9*5zZR4e+{t1=*-J|Kb$+qDOGC>rn%!(vQe|oB9nHb=MUsaaiB7{m2bZ>$QvLqG
z#J|N6=oF%y!-#Gj+0eEtXr-eJvkGxiRW((S6fi|4RZ~Aj?SrE=E$YS$0a-qE$9sp`
z!G(slk|?wl-fxhvbJLNd_IiPlINpy{a(!%{7rAHQT*_E#&`LKQ=neo!RI7{r#&uLy
zHg<G$G~W4u_q{+NwsjhafhsBkJ6au{C3STUe}-Zu3!?Rh0iTH?%ZlX|V7*ys0U~v;
zG7zXWt(!j4(5Mu<$H&DPXnWE8I~1xOd0%JVtCXqltueOV!f|!zQempA2K=^Sk_rkr
ziN&1$a{a=qDFw#j%>qZ~?=eyxjCLQh+2baDboH-)XjiM^$EBi=*GbRJ>~Om<>FsgE
zi5)f~BqR)f_qlLpeyI)|iFVn|Vr2F5{1i_sm&sx*>Fv#rmlp=yMgo3Mu8cPlLu-`g
zyAt#Jx>MrC{B;qkC6f%Dh#ut<3i2Z(6U|f-GeNwPwK1VU2wn`{uKXa|>Cx0eN5Q5+
z$AD@+o+4RaT?#K^QOB-kh>;r0^r@cL6hc9&MUpR6#{>|m>ES0_)24>s9?ZVkR%^*>
zN|-HpH=G{(?rv#0Nl<SSa3#(t`8U$}h7}bQQ+(l0LPr=csvbg8bNL?@@axTcAXDUt
z6%me86swfIoZoa3?p|JAK0fHa{F&CRd=}1HUxer>DaaWp{Jpzyi$Ii=3=@lb?*z24
zq9|nEw>jf1!^6YxnEtTh<W$$J6=0Q-RjH4QqYW?7Nem~=n}5@JU#+q#Gm-dh=t(_#
z*&O2U6LbM&xr030vtXSYbr&C+T1Nuo-TjT}BgcJJ*eo^y!Q%XUp^sBx<WP;be=Ii7
z>WoB|&PYR3)67;XyM?&__03JP>Ag^J#<$;UUP&Y8>OD-MA3w^-AnSxueSxJO<x5pf
z0B-AR)Z7!f#52v!&8w5xxX!3ij{|chgz8s9){2Cr0%mqFCms9>2Yn*NoLoUk?5?k^
zKhtq)EvPFf`h3vTrue%sxvSo6OP&``f)d9MAjsUE?L9rhUJ$Ss;Q(CyTV-fOCpjLF
zq_jF7&2@E^#e!2~F<H0_`a%FkK(D;fg5xz?3E#~=<n!MfPFnvw(MV{mF)JmuI~;Un
zZffq(LBA$aovRM>ctO^3$iFAfAZ_Za0!}>egI*!`wB)0(yHrVOn+O`OEqAI~D{uEu
zjEg@2D395_RSh_e((o2Ou3YlxbIx>McI>5%{lcn5#Vl^|>Lg*Wq{qwdR2e9EaPF|~
zG75nC+5KcBl;!=*aZW`H#<~B*p^*F|>Z=jjK4(*$JX7Nok`ziV)6p%fk8iTn--Wza
zXb}!Sj7wz5bk3j8ruM0HI>T+5A-(+xM`YdE^yM$6LRO?Lgw0=g3VG=b_f9q)P&pRK
z?HL(KbGcuBp(HUn1G1=5dd-Tptn5TzXgnqfk7<2axKGdJi;nIapwHGYQ~j6@f>B+i
zuo+KVN$fS~MBs)4#cRYwUdm<;Vmy0g{=BOl_EOVq@EErP|MRp;8v~`WQq0rCtM3=t
ze<S?KNm{Ch9zRq!I-|!Ws;;^fU9lK>x~L=x;jR@50f~Sz%3MkY<5`u(Uttluh(C>;
z?gyg8EErj0Qg$Yz;7(^n)FP<k|A}!tj?d$j=MG6dLF$I^mWu@<=*3i8ye8!$f8GGB
zT0Q0OW+z@8Q%Ip`0o!&yvayJtGtvDoV%dS&DsJUq{f@jmTLR%+2iJk2q+B%Z=Dn`g
zbo6O+$Y3;CC#-Q9Ajt~s{jRT+Wq`oYAe4_;m(G=Abpx<tg|d)qj4H{3R1T}uac4ww
zht&JA^Ydigm}d(!#tMp94b7n7`!S)BTC0WK{QPcZh9p{jXkoK7V!8Ml08YLA^wDB9
z>&}Pw+B-TQGtK)}>9>~B<#|z-#%IHc?@(#6jLJmlk9gHNM0EVe6PHe@DZ86hm*w*{
z3HNl?X3Xg`5l{VyR~a}<g!2ZCAjR^WFeYKI-G$N&&QI`VHO`z=^Jo?)hCZVP82<?V
zt^#pKndI3Zl;ckB+A{Kk5sbH-x{4tr7RHFybQXq7OorD)vGuHRX?Ec%@8OO@wOy+C
z(IeGAF;a0J<q3yJ+*&53rltbSWy{4bGY$YGen>HPtxrp#TUv~x<A<U3XuURN=B15p
z&HsE8`n$C!uwR4EU48>SsYzzFJIl#dAaOX|_{Uosb+@^SCZFFy$@Y_>qwdjWltWQY
zSk@I{tf%|${pP@4ZqKKb>I1`{-*RI>Tgd>(b@ghBHtRKhgL<7eBto(E6cWUw+mW7<
zA~DU{Bz}62hK^2Hv<-g)c4@RKB0-(q3ppE_%9{x)z?2J-3W<n7Lqog1x-teV@NY!r
z=jG+Kw3HMUw$}f?oZboFo7|h5pF{E1Gb#9m5aaZ@6P&EZX^JEZi7Gf3#PlL)`Z>Ac
zg4sXyBd4y`8GwjOBO*{m>#(74gyd5j@pAmTioc-k7Zb_=RDi=noI__s_36|7jGSA;
zC>bsswEK`XSY>TT^Oq|3#OY!yl1wQlEq(l=6*U@i-c0sE@6w-3JJEL;y(VXGHcuwu
zM~Ov!8lAYSNu#)_xrZhDrAMnQZUbC9w1zbOnd)I`<L<6pm~m-!wYB2@OtYK(*tsO(
zMxWR$ILxv#;F|P37#C&a_0EpfFHEG<un7sho*!F!MiE<z<fdUZ4i0$%%!&W80?6e2
z>Iwr5jhvm9iQn#Tz;M&5r<jb)+-6=d*87#^mFd34=qErKli8h}angt6n_OcygVnU=
z-qxB&`Qk}x_&HCsXgr;LZ}c<btM0|$>I;<`8Oh0`i&7fUUo8%MsOHJE{)nbU#goEl
z=wHkg{dZODh}iISoJOr8l<(iCfLY=1KlJ6b=z8t8MVdrtR-|$-ObE_B(&E&^n?ck)
zu1zMIuG{<(Q&Pyh9z%tY=vPJhohh=($pzZ&?#2SjjaZnX3s<I65oW<_&J;bARa(wh
zc;QK;T-D(1pehH4NkDD#|6^}DryxuO{Dg7$i+Q_HI?ZXhQ+K(;;b@nU*a>s$tKO=m
zu&`oY+~yFn-Taq<CNXZI__x_Vg|W(iC@Nk6V852nlVoC5m6tb!kPuhgi-ywAPw#bo
znZnW@GN0WRz!e2Hj^ehAi7h3+rMtRRm6MR<2x}>)eK<}TC=?~fsNwOKNYaW1)CjL3
zqRA$N^xh*-Wd^B!$5lNmcQ$lkPP^QB?bN+|Ke8L-i(SoUbk<X{dIP&SwHmcg5yIaU
zQ<<pf=<wU#5#hw8rrLkfJg&l_8vK6}cwCe`I_&9>B^<PUB}==6zp8mRD45Ls_XmNS
z)t7en<NfZ`RP%q*Bw%bHLB`!=uS45CobwA`KinZ;0XWUY-Qx<9x{mr+m^jI64YaQZ
z`tLw4`7JGX(*@ym;K|U?NJe`4ql1H8^{EBb2EEOmgoIh3w{5Iduq}R5xe9dA1O5Gp
zNlDHw7got^NB!Yd1RR#PtxnhV7P#ExksvGig&@%C$`A_Mh_0`RBN1C776zt1L-s<p
zlX-&?5nIWmJC-rOpFM!ZB6aiKCaf2Iwh2i?gB%M+31UDsx@-p2UF$%w_cvfOjdRN@
zZffJjUM&9IJf-K;ie%YzuIZ&vF5>^}ubIR#FEiQYdT8@$rf9Om{$MV!KM;_SG?ukg
zA;B^`C7c?qKtNTcsp;(O?CIH4Ypgn=rfy|b;Y0|K^uzH*S`D7usDnofRe6UI+VcJB
z>Bj*9ePxvzOz}V3*yoK+<1&k6Gn`=!3vu!t`u<Na4KWHhciZpFq!9Q>G@R@fm0JtQ
ztR_9RTdr~z1`XpM%8y4tSWkNC@w~-zx%Qn0yQh=YTfq^XOeUooywB!mWqO+pQ_2EQ
zrrz9A%2}<|TR*v2K%rEbs_*`@qYsRZGv0suuyHI%@B6ps*ypIJ8)@m|r2Ugf=~_2e
zWc2x@BCkIRftr(gdU^nypfJCXN!Qy+#3&(4vcJ~S1?#B@FVIW5bSPwKvo}~SgTrfh
zx&V-_EH_&5xtzSGB&uAUomEmuqAbxC5P({>Iep=o;$~s7?+b}#H5qF@EG;7<CN3~v
zz{wY&Cy3?x(~N6zxy@dtx@w=+V21RtE#&iiH+*c#p+Y38aoG2MjF&&|tOX4*AZb@Z
z-!9f`gdKH6m{R0)tuFXkBNSN%>7CKUdPYMq946vno%k)GdZW=@T>q%f<H7|XE71GT
zo<XEN9qnx+l2Ruvr+Y#_g)|$V^xEL*zsDF!_z4j&#OH#&IMnt;{E)gdOG-+XYK<>W
zR@=l)WhEs66qAXIOQhg$fwH-in4+Sgvhog4<EC*uL8i!eJ{Og&R%kXE8N&(zl~Mda
zG#MEVPN_{(O-)W|>0wWx=V4ksOhY&T#5i}lM1o+0;odpEgkGWd=V9#PxCAdDFdbZX
zEx{ldFEkyi`XpWrl4+>DKGAj>B#97oB&w%zc=nV+Y*vP3QxEp8QKfD1cXPUyO<wFV
zxnAwOGdC|K_|Nuy#q18I5nEGU4iKUhpiCI4PD=p+q)fZ+i%J0?lmL-62OfgGtx{*1
zSmx_Z)ZC;c5J^zX{uteCKBd4*md_G{zz~<R+j*A%EErRhl6B*G%;q&UP<3CWh!}}-
z<@5VIE`dFz(kw~-#n1AC(R`uLL+O(!EQdH}4#ccnV^8V<*mQGX@3BmFo8c|v7mp+A
z;>rIk&Gn-rt6bBiqoG{WO$1*v6G45+cQeZk?8R3@@F0{vCOGIf%=(_Kt>{h-tM-VT
zWHyOjpgFM84%(#<^LgAcXPsshKtdh)DypDy1EwvR#Q%T+WfQL_=fU8Khl}dMt%_zk
zs^iPaQd9_9^;t(C>v*A=1^;L2uSBf{MZ_Mh?L}#x%LS{n1Z<@DfB*rF9_#E>?r&9J
zXFhV4l=!cCiy0~&*4E}>_`{1AScoX)K*${(8KV;0tWQOtJ;y;D^`;tS_5~5CF~jb4
zQ?H>2+wb5tEs2pZl<4w`ibl0jhih}NjKDs@4OlMC^{i>~`5e;C_i%k;@L%7{oLq53
z2T!EFJg&bCmDLBS;*(Jl^&;{@)U@7!A^PXcY(Wx}p*=b0>6P#s<_VHn-f&RtL)PuP
zPRTb8!q^`KHJQd|P+p`+bp1U&PLtr-de6wbB2#oUaI^W$lT8YqP?Hm#2_#ahX?JVY
zDJN93RJ9zwDF{y^pSJ(&asG|pfgV1O;ak&NSL;5bW%X&M5YNm$81ue(yOW+jpX3~%
zGz1BV`_2b$*v8x+BXY@E86g@ktB(zH<*O=0hunx-+s|M6<FpD8YvL)-h3e1jNA_bZ
ztk&zVs{X(54JZJ^v(r3V=Zc8EbqWeRkg$!1f5?F+T)Q0S4H-aPOGCyTk{!k{E-crd
zt$X$uP`ZY8><4yJAAy(aYmUsoReZVd&P{K?yEWC^p2iXHT4-h8>;Gr%ARQ4+%`%0O
z_w4S{69<aFKUH%iAsW~?&2Iq$b}q6OtqBht;dhy}YMW%Cyc;NayPCDU@V?b?vb~A2
z5Mjx`k70b5fnmtSlW`wP?#I%yyRzx=8CP2jS^uF!z&PXCSIM%zJ!s6T!QI3n@+YlZ
z*|wAF^G|y7kQsFIoJ#~6jve)MbroFpk`5Ihg0XJIWTiJx;Asf=&q>KfM?tcY(KIi8
zgC6S4cq7u91=?sXS!=#HNH{3=*5o1ozuXyUG#93pmay?jvERQ}v1QIuMNInV1-Wdd
z(N2D%Z!tl?vAjtkl~-QQ658QN?ZW=fEK!HihJff=zqnZ-T&QnzpqjOCoD1{nzu!9z
z{I_D=jl2RF0~W$Rktg;dPPQG|m%fI)%@(5iJlhx~E3-s!tAGcH$;F3*eW1xy#MQ{i
z$kF<Q@PDbh0D>W~dVN$#k+3zT5CV`#ZM-2pa3BHKLElD%*ufmdKq};ot-8vQ_5A-~
z0WrK8uhiRA;Lf?APfLt3Y_~ygu2P=K_;_HCcMkt^g|eJw@7B8oYS?_XHg-ra`9GEG
z2ZCT!2$O17LBn>e>(Ib9(RNGo_e*f7MpM~V_3UO~GW!2wnd-NuC&!ERPO59}9yjr$
zSCPRkfRdd{)YlpJY6*M(>uXa8&d*z7(a2_WgO#lQ0Phn@a;BW$<pKZt5MVT8Ea>_m
zc-`(@{Iq^J*v-NYyVZky8%K4|h7;KYb(P6~nch;Fu8UR2V5K^bi3G2fMPp<C@K4hA
z`aWfP8-;lkkrpq+DFi=7u*^J+H;dsh2d*1H(svs|4io*}52Ut#RO!FrvNh3mlH0lN
zbyL9~oDUv(yo{G4Xv_Y$cPtDH&LP&9F1_8QACGyJqA$TUz3(l|M~{ifGwe1H9=n|X
zdZRhFyehX_GzD$w{}RA=_wb;`%U)IV;;29U<KRaxqMQ<a%?pF=o8<4KmC4_V1P&{g
zPNd$S?BbgY$!qeeDPM|UnTk273qMe7+lcQyGkm$M%k1jv+T9iX-}!Rbw$|k!Rj6iR
zP@4%stOQmcIoW10CU&0^Dr#!Ridt9UFE@yCzoSK_BqX4`%htwvWeO_KRk|0a6>Mv{
zFSqHJl0#?lS&u1*PnaSv*Q#8dI9baam`}>PI}FEr`o7qO+UswUA1}D{Lq+l7$@>WD
zNnwk!>X*zkYu*AIyYx|D&tb*``zqhPfqpy-g^6^Ih?ug~c@y#Foe*Wvpl(e_sWUsf
z?xO)ap?shiX4{<!%XC%D;q$e5Yib%j7MW?Q(niNR=9bMb3kgZwO69EYN|#qxu>F0#
z|2IDn$^&wc#;N;?Cts~z&y06UG_GRRz|$Xw-7H|Q?Pn9^lKsxO`Xd|NM4BfQZwkU7
z0+orA_#rgIug~ts7{{v<zMImdP5$&JEF`9yzNq1SC&cq(GChsr-ADq|M(d=i*7}R(
zNkUAhA%VX<dihCb*N<L!g?Kapo#nC<+|@sy$SPzo%23WY>$A@;;^`8!{6_V6SW<*@
zj!1bSawFGQGVS-R_YUB27wc|1O_ukt=VK%;zRSA7-@*S~KY=-fVh&t(7H>G7fRiWG
zh8lGcb;E-R|0SV@2Q_Er5+97lOR;Ppz{)`XVL_U^;H&F_i0FWQ(SGKA(!^h$jQCm(
zO54B1T@sW?k`|U(Bg*Gf-MBN&jy5iGfb9#9SE5qgE18BzYE&6nz6|}19_@4T71^B_
z5WRP7Xk>0Dny_5_b@_){Rdd<&838K;GSwXXP{$Th6TtURsR0Bn^1!yQ{3uQR8d|op
z55TWc##p9RN?BKoVQyJ8`%QRXmsxZpRClrwx1IDk>pNvj)@_^X>XW8gh{e{v>SE)U
zJ85Pn&D+;@bx~RH$$y)zZPEIf$>Fqg7|91SXA*Ff6zwY?PB;q>#~?^raW5&J%*I&y
zMN%*Bzp&)?9FO(DYDA~1P0Zp+Wo5cwTpzcp>A}lWLAcF*hSS0F{Sl)Ve+7Oa*qbBm
zzc=5O>@}E#Eh8S{-FM4E{Laz(17`5XqV)$fWRQ+OA{;av007!#XR`00^@{%2B>3Zr
zmI9i6C6fV#ZB6=v!$XM|4fIAVDbcx2ikyr&6*{Ay2`mCkwRoECR-HOtG(=H*uZp5o
zkPsDkY(>noK#YzA5hE7v=$uwVw|A5b^m$TJeTxx?@q^{cE}=*;JFd%W`}T*rRVQln
zr{ipFOjOh#C1U}D2PY?$6&387{ey$F3=9!~%r5cLW$af?H2?Mfg2jUMYHK34-<m8K
z4EFMBpMw7S1xT;%>XZJn$1WIih7&}a&6Ko}iov?2(nHLTbR_x$<Vv^u%5*QJhv|mw
z50BnUOB(t|ecftWA?gaJ1mz+1mUIU%D?Ya=TV+*c!#hplh|xL@3X@`-TyBfhN^2*H
zf*)C_lRLqa>B3bXyn1>s+qZ?e(;PaDWgfE{+=%kxQgxi15`7%g8?Vm92WTMK+Ww=_
zYM8`KH}H%S>at&Le&5Z99aXZ93pnhKl@rd4tEBLGOaw&|(_v%dOCFx}Mt}8OC~Yf}
zO`AZ4prWD*33X#&T>ax2l)axXkYD~bb^gc&q!fMCO5bvpCMQpO`lS+@4@ZoFD$4jc
z(C5De-5Y;EiA;b6eex4pUY(Ay^+N)=A~U51KxFC}2GlDdIO#FtY4Rekm|OAcTZ>v&
z3-KZc1{NPg0v$p#8=Yqgd5Ke-^I5ox*9~-!M5)J{D#LLNBvmcwljV^RnLTY&kzk?c
zoWEC}mJYf(E!E=E8|UW_56yeir>7M%onCIPmjSBXV%~F@@%cjch35N%KS1x^CSx(H
zwA{^WwuqRT?$^>+tyFvSQL;bs{-?U|6_*B+B&fM0jp3$XzYF;$J(IclD)QrdVBs|I
z^|-G%U1ly<B>fvz##T-}J@Ho1ywkc4O3D+1*tA!@tWw%3uCHsg-kPOI+r+V7+t0tY
z4rf;zBpM1v!1#FIi+SnnEXgc?o%9Od4tOW>PSx>I+!9)UklCin>}>b<&v4txZ-4Be
zp&xlPa+xbjOLymDWKVydA8guS&SEG)&G2t<Axml0ZL^z#5w~KpbL%%sh(US?gb3+D
z2>E51&?N8e^0DAffwuliN2LWj)RxYX`Y;x@fVOhSrpr49EG=WC^uPwxlpbL)TZGwB
zM~;{ELdLkvYoFWbqPF&nGx@KJPfO)^n>#CdVv=%lJ{J{Df6<vt_R_ttTXaW_{3kX$
z-M5BW_w3hSHvS1?ByHjNPTEiTC13t-1~V@G-odYUxQOiyUhujhp{~^E`1<kVqC002
zllJ}Yvd!L(E|*V^-c_<iv8t%o?Wxq~&+4^Cs`Hum1BK1aT+bQ*y)%Y-ZpP<jADgv#
zt*Y_giD&{x6aHES73PB5r#{GjSzp>9#OSzPMTEWJT&dP6Nl5zEO_3&Vs<QNU16jre
z>z&_{APdJuTy0%x<!9%*=x7^9S25*`O=$L1FE_e-MyuHPxWdpU1o+od_vW;0GaQS{
zbH*`N8weGrV7=;|$t<ZR<wVvKge@Dc>0(=|zXsQT9PsE`);*h;`1v!ZVK7+d9n8iB
z1~pUrz`(%9&D~Oc#xh#_^XJcdPf7Yj{-m)r`y<9n7ofp@xQ1C-SY2VEG(QIs^WWW4
zO6^o>*KEy9^3%fF3IPQAZ~J|!MG}*y^HUg}$F<SH!x#OYfJDwU0@6yaroIuQ|M_JX
zAXE5&iTX)09HA9>O#^bpR&W*k=H*Pc>f|L0`B^tO;+c5=xN(PDe}VhyPrH@5LKfl4
ztkse9;_}j5*~!NA52@WBPEVykPHb?%I%KHFzouK&mKoRbgZ@P&JWIWd2J}ukn#;aU
zk>|?(2_@K^E7MK2O+}kMZb;3vnTOAoP4~wvH+yC?h3&xQ3CdEh13Q%IJWl#ZcvV(a
z={A30<={C?-5CW>q#MtRfBW`LQeo@f>FDEA_rs~;y};+^Wy|4E;F${%dn%4*ljX_&
z{$h<Ga)C|T6Nl8Ql&pl?i$9ixm-pG809j^gT>7uu`81nPi6g2yUdsAsZNUeuCYDRJ
zZqNie%AkUz<izvi{}!*LL94P56ErlpKfbtZpsu_(e5mBJVAYv=R^G>5w@b;Gs~@5j
z8o3jUC(16RqEsJy{hH+`7-|2u#96NEst}Umc#N|6qbFT!TJj_=#JPmxmo^?pwpoYH
zBlECv?PR8<O=|C3TV2RSV2Ml2-YeEggS8DW?$Fc6=eKZRuTXgQ4)vSXR&1}eTs%C^
zLa_PCbF?&N-ZAaBjU4_iQZKMybfPy)?3vWX!!Ed4tKfHgU4^!a#p&SVtl*+W=;{A<
zjaLz=-**C<;dIsoCpng0keK%J_c1G)gs*gb68Z$t(_Xtvdj!}k_Gu~>OpJ`<6BC7f
zL03nB8v%lFAuTN}x0V!Ls<A9i-2w&JYF)5H?8)Kb{diT@!?~O{i@~2EY)aAHogMpr
za|;Wy+XFcd50C%$B)^I2{DqbmDsOm%5J0~Xnc>;OIkis&Rb><(4uoIMOA<`*>|f4%
z9m8yOizB0QN9G*@MU~Z3qzSQmynLS4Das;HcIHc^=r#X-Mvj_>#@^irNK2p6_i9VJ
zvm3A5Or=db-YA_4yybIAnh2oq+<N7oj8op)*!Vn_@-yfGK@gdy(DrYWH(4ofvZA*w
z);9l#=Yb85d^Yk$qS26x6ppsOrlc8e&wYqRRlE5whsz;s(RV(SpFT;p6$7+b6q&$8
zh_CEhf%{nJ=^lr@iOBcdVK{Dk7yDJxG;KRcn!t+->X}c9MKXDv7rT=JZl5%>N|elf
zJYqR$WIhXK@p|AN{--k_=s8m~{EoaufTBoVyp_F`8)!I4HwkoBzD;^fAdIV}NK>ds
zVO=@LW!P}J);s1r-LF>MnG2p&lhstb**jMc-)@u%E}c|tmKT2LkTAQXM!Y_x5O(OF
z-BI32bGarEo%;a0Rg#qx6SLg)T<!C>%(BCnQBYF*ZI>rH^I6#Jp0B{kqG38Y=m2(L
zT~%V<9HZ(WnGl8a-an1xk1Se;es5eJ9Ua}BJ4|E7Gck)SdH?Vjc+!X!R>Smb$zfMS
zOia;WIF5QyE|X2m=?K=8hL?@tf1k^(`|%?LY=7YF&-$$j>3@4=3HhPdZwj&Ab2xS;
zfd@6CBEi>Z?-$Ewt-ikM4+{$y81jGgH0U+%;MZo4)Sipf+6VJR22Vl;n+pTWzRjdu
z$bkPQ=5%-bz_!=TnrID*I)v&V>{!I?tXy3FxV^ih?W<!+X)P?wtDGp7_Hc5Vu=u=W
zP2frnw0^KkBeKfZ9r_ug$xQ5=oPd}&nk=h3aP-4KVYH!$?I>fDJpfBz?^AD&jUh%b
zaX4x~3EIW#G7ZI|pZCRF0MM@EZXof$_ujWx`6t)0wWtQIDL{LMX~(}2_HtHrPhDQV
zkkXXXJ!Gh2Rmg$~<sFpTSaSQ+Fw-`**Z0KTmjhX@{Xke~`_5DGijWHh{2Sf={M=gC
z7yDo(YZWO{)Zy?Co#fY>Bi-PDfG@4t@1yyin-f0))z4)z`ig#-aE_YWc4UI<(Ku(a
zuG0?tXtG1r;;;SdYv+L;rGQ{8lH5)}0JZCAZqPRr%j*L3KG;$9^Y@3H{CC;k-c8kE
zqg7IKPq=;we2eIdY?utf0NHZpcjC8=&aFlQ`o3v)oWLU@A`F2++4Kz+zKcsmtBQ(}
z-XQH}*HE_g8SrFE2Ce)gw5mSmYh}l7Du7(Q05wA7Jd@6EE(!`ioOSPqNPTY$snMkI
zG&)apjp6@c0d_|fO*J&#5a10EAPIPy8yws_vgy=*dAcF<zC2&^dMK31A|)eRpPe;w
z`ELbx_Dbz1y*4}WY&W*`b4&)@85;0naN`XHWuEAM_A3Aq=)Uw1dO<5QwhpynTo6jF
znnnqX(@f0B@VY5&18(Ta(Gjol;Vc=4wdY9+xcnEi#bMB*szXCVgU4(-|9dz-aYg%`
ziq&IeX=&-x!!==rM%y+0eOg>9kHb8JVx5oM^PRxs^UdAe9XdV(@NOtgEy!zUC;7C+
z1J4le=zsNs)aFh0CJwFX{FWb|ARQ7&EhrKB{)YBW6~{%#uD333NKfn$%rzH6PuWP0
zaT;f$YUX+qBKIwcm;<cT+eYP+hL2_r5JwhA<^&!oEXJQCEQ2;t0D4n4^Q+tAEwiY(
z8ZWhmcO&5fI;5Nrj~XZ2ty!S+VK*2{!1438Bk+uH?l3AT$%H>pVk#;!vZAu`<mAMJ
zikg9e;p4~R=4Q3thg*BC|60`cW7Y5LZaHu7XeP6(ljNK2@(KlEN3`(`0eJdU?P}!l
zY#*v`c`pm!;FT@D=4XMp(1HK;pc@3D>H&@mYN1L+OH0P<%=Y<nRcUD$3qW52VliVt
zvX!6j`SKJbTb5Ig01r<|(E~g%Ef-_muuZ=QNLt~0J#}@$CN6hJ4FdxMKu)NmW9@$5
zytS3PYoaqvdnH|>6o;>?sYzcS-_h|Yx1=T(JILya8<0f<BmkfUxMZiMqJku;sHmuO
z8lp&4YHP2WH>9HX9pjjrzxw@w+-cE0AG57wfxI|uo9DlUbX_%%an@=bHc_$xOu-&;
z-hN0apuF$@cslE_sJid%g8`z1(jg!%AR(=^NJ&XIh;(;J3`j|Lr_wFm43g3v(%s$6
zz|6b-J$~QwAD5RGoOAYBd+oLE`?E-$pn_i>ToQxBJv*`gGKvTXXrwuxRt*a+RGH%B
z3vo6+MfbSc|1LXbP~NbqCF8udwszELIjP|7fIQt$UvgcF1kSC%wl<Ny!G{kX$fm!I
zkNyVo3dOAk;7}c>mreQ|{4+<0O{=<~xVS1eHvs<<v><bV0*{xBgv1@h7>;(5HxBDD
zbp6$gO&iXR1m-H`tuWHrr}C@$rSb}t!;cIu_uqg=6bD*Z#Q)t33QBDS+tZ-VO>*oX
zb|@&XP;kspat!+73V}+7mTNC}tKg;e`4%{ONHB;Yk2|{g59?z?lDk)5T-*ebsbv6V
z*THQ0?A)Am(a?a7-MAbt1h&JVMokcv@WJ62xJl^TF$93BYj&1&sODzQ7CMTi`UwtG
z({M|sbuOD}Izp7!)g@+1SBz$A{+csxN=`~jiin8NZE|r4J<m<LamJ5aChIJWW%#$R
zw?+MGt5Pq(tKLR?80UiiH$W2m>uiqmwoFDvpkn!;A`qwt2i9RC32e}}TTVmZ0iC~j
zLd5z(R`&Ps@D?HHjm3Z1sJCB}GUF*~ayuaa>N8EvrZ)}A_+y~Ighj^FTv!<GIDv%|
zsZnkAnm|T@a(ZDw{KsWMbhcVqbF`YVY*Lm|VMu6bIA&l_5CcR0EA3h<Ai=k&(IR^w
zhQ7h3@iPj><9Yq)Eom>l^-+<kD;x%kAmQYpqI%8Cn>ZU15m9DqR=-!K3eKJ?#<$n@
z6UfHK#yMN0BF)7IA`(L&M?Tv!9b@2j*3i}Uvb20M{a#jf|A%<!%gkLK9-au|*Q?tV
z*?|jW+!hlA>aX5-Tw-R2Kgh{Z(?}>SD9GxnFzgvh=Hz8#i+uZ(fMjyCuyr+rS*qsh
z?2MU(Wur(r{!i7`Kq{|oyMJ(;0zm_DC+~vO6O8R~5Fq(oy?1}A;NF>cV9m8$&Ju7T
z9tV7_ja!Gu#NaXk5t*i<A_Xq)yEW;hcbi`ya+(hPNJOtrh@CC8RR+gt@H2R>K!g8I
zOw3%Sn28z4uHM)VeWm2_?*H$2htiy0T;5=?5NIntU@yd#mIaS$<h{SbASkN%naTr|
z{ZWICjrt?(W}N$<*rTHrfBpKkb#{u$$!l|)!9GBx8y})*ki828-{Rr{fp2tmbuFj8
zyL$T&2m~myifL=lxh{Em>`q|dCQ9GXxjXelkXO4bG#)uPREA?ZSa6URgS)0yblw>=
zp3nJaWYHC}CncWS3Kl?2U}^%7M5&EF)SJ9?q0W|ai&S>f%hT&6q$BWRa+15IhMSDX
z>LnA?4^`T0ruA8U`OdB`UHdMuV%R{(4fqQjx<Uw0QBh^}!$OO-wX|B1-eLv@RNTLk
zJ_7&cvuC0oSaS^x4GYy_KPlp}Hi;Lo(2}XKyp9%I-n@AO8txL26ocFApK!~i*??~T
z3UTKlotG)()mX+P<CV%`{P@CgtBky*C528VfwZQ{^(bRJUqSgZ*aU%$iM{dX!UNNU
zB9L#0`nhk9pep5>4kZ1Wq`pZ-yX_2K1IIMF!t`}F)=Yn^f5lk#_x2ILUz)sgQAgP!
zK>37yA62{qDf``kE8}DqW2P;8iSGEQd5xEo_C52_uAi+Ph(zHC3Qjvj?mg1*z{k@Q
zDtnwD5=+A-JYK@#=<g*Y?95~AfzxMfyoZ~I$8O9{TwMI)$7A5wWz%g|(Ji%(Kv)b6
zR>*w4_%0UoQnB!2lAHh!Z*F3O%VmFNXlMxNZj}g>e2qCsdP{QNtE;QKy1K>|!eD4E
z0gH=^7A&f?Lk_<0F_U?$NzE(Y{Q1*(P(%v{0(h{(sKlEZ8j>drEZ$AeWnthkkWN}#
zTjw6g$$qdfGn0~%8USaC#t*qMaVPclZt^tr_#cebrfhc6{z%Kp(k25{>KW~l@+yeY
zbm19&POeuv?i=v{<v`z+Oc)v(%Bu4_ze?HFb-HG{?D*`A*U2P*v!0#iF5B9Zuz!$W
zvZHIe`e>y?Qt4};*?j$ZI=}0#9@@`~iwoW*PiA@V|CT+b=KBY$KW%y5@qgJ2SAKR6
zMS!G9@H$J>gI~`v*KQ%Ov%CA4F;A^7w!28F@VthQt@Z1uJ9Fk+=a{(pf`XSZ`b4iZ
zeiLL>d)JCE_q^DWl#MFV*4HO`x;(rsP$To<!}(WdMa9u(_vF^rR<NOki2(bOH1o78
zzktBkP(oZ166vwp*5K1q4rNrWX(xlv?^bux(mFeH?%-El-Q8WC-7b4v8>goZHdUl#
zdlx5p(v>(EqhDl!9Rg^0?evBx9y#mL8%oF7PKZCGYH5WwyPVzKsw89=CXw)uB{n=@
zoLK8NXJEj@z=-Z$*KvC)0XHs8O(A9Zr&>U9W5YEoa!LBhhFd+2DoTc;ATglu+nF<y
zsv65qJI&4B!fL{zd~|eFLViTzBdV8yAnnswD^db-xkeTiy$R7^V2scIE?Vr&6#rq&
z;DXd%R1`J4qQ%-IG|GuTE7M{jsA=a>f~A-RCSjJQo}r}f?*9JzSWY}Ik3~y9!DDfS
z;kH)+f-Qn3dxV69dHInvcW-HF>nkgNR9Djqv9{*tH&s{1q4{(FdEk{IAvW!#-!$R7
z)}w%#Ql$8Pgv*N==C8w=UoDS*R5dp@-tjMz1+rsjhL7BQsPmT}!Bz{=JUC;@F+&l+
z9DOY-o$8B*HUD%=FA_AxQ&UpL#>PsXjAW0GrKF}}t=ZZ|?Y=c%&6x)q6O*Hx+j|WS
z;@(PG{pE;7KXe?s;_An?b?KxplS9J8C)v6?JFCsj4~C!Gy-G|>jQyCA?)71bS^goY
z*#?J%Oc8~Kg>h-OR8}fwkA{))M(jtef-|!K09bsmTWyMOotT)2f_Z{0Z>U#`K2}k&
zC7a6@Si7Es^*QkoaIIA1FSTR)ji{)o=;*raApb>&PcO&H%T84_53oB8^a-vU@B+s<
zP_l5E=&88g`Qbgb<J75;0lA~Y?u2<-BxjESIZRxO+qqAL$wbR_skJ3NT^B^-j&ILs
zq?Voov_@Y%@8;H)<M)uWvtb5$`f$ojs>J@g+uH(SqHI4}TU<TE&!3&CU$Ol*(b1Xr
z$H0?jiwFrx;dfmGTIB{+pxqiBeSIqjJ}ev9xw%oev1UyFQM2V_fnqjsx*rg^++*yY
zco4h*b|;hK*dlEemG@+-Iwk3IKY#p4d*He&Vqox$|6{kTxKf!kM}EfMSKHqv14#`I
z8*;Ds*%>RHWvxlykMN9V$UkRGdu{0Q@nckE<nTapl}59}zx)VuISKv2Gqsb>d*CPo
zhz6GXf{MRzX7NU6YWn2tphJ|x-mkd1oo`NyA=d^pTj<t&_LPOg)giR%;EB`~7h8fY
zXmcpN$!=w}tqnyfLE34t$rUF*JO;DHe(efu^{hJeQ4_<fKUTr}SMqLZyaQHc@Cd!6
zrF*ZIY?ntR^U5M*t<!`dh-UY*rY8Qg)1f``;z$ZX*<|HBS@*34<jL#!RF8;>W8?lZ
zmBL%Ilk=VD)>cms)Ta068w{sP{+w+Z*VfdL3%Hq${t!1|!6zVynJ7!0F9*I^AD_0`
zTD611&eNTorY4W^yzo#$me#YOCNnNl(v-?d7fb&Zv^8Kat#CbR1?tQ)orV~f(zC5$
zupZaY_5TGp-2q_sGvRp$FRJfQ@yB-Xq9Atv+u!W?wBd{J<Fr!w7=RuWNlB6PbOY~s
z8_Kfm1K6x9S2YkNPnv8M7n9xS-#MKS{;;qtCRw?@zSi+L2w7iW&jz%F;r=xvAWIq_
z8_SbVSJTjt;;0ZZtE5w5iq|UTX$pCuAEV#Y1Y0BDi%?6B5EYGb7s)G#|JBISZ~e|x
zJ^zI=*pxv{6HSyICQl7gL+gXmFm{-}(TQ7T?#OpFviIeia6;K6l)+LprudRWRbPV@
z*F}(l1s(oRM!7h|T<&Fu^t-}*WqA(4OknxG5^r2geZ=q?9BXbX%HNRX(W-`Aj9=C_
zpoD)!MIp{ofhBeN)b2hY=eN{Z?^MJ@$?&l?d*MY*k6A91qTaeiyXGdPgMjVTfVY><
zWj<D2IDUR3Cnu+=scGVsDOZsrgqL&1(U{m0nB4M~*w-#kc64{`9%Nu-)<Vy?R?LeB
zHvLwMWidlz=CWXTc2nxhzg->We)BA7ZllnOwbA;Ij(3ZAp=C%-RC8r6`?Mcjy_Wa&
zH-UkzI>7(I_-8}I*qsu;!_b+JZ_A!^brc(qE;z1V($Uk6hx%&ywTOTJn1fBGsN&X8
zRpkdw_wUTPtgUTq)atfQ;`XosOLQW5jk=%jo3Xksr*-$hnq;KaY<&hQTEXotE?z9#
z`c`sTUlRLHQL#F3*0f&0`dvI-X(Yp085z~;>hiJ4GI;2{&TyK)KGKxjS#z9=Jp3WH
zxyP-KPoUfCa8pCp3UAELrr}|2ZE7mco2}R~=s-1i&uMl2yQnW@YKk!1^CT!3RK6WP
z>~?+i<X_YQ+6(7gboc+&0#H6Z#WkxDkgZpG=F$)9$tc5}^ZtgLL(eLzy2Ta9J5ZLB
z{lnzLQiX%<scGL5ZAYnjnLKR7@F2WbCmlkyyoK0L`-K>!%z$oO@?$!-chCsk?lUWe
z5>pA>?JeoMt_`X^e*a!#!Tri>C{6C9%;N}pGsWMTSkd`|IYB;&E1)7YS6%mRz!otA
zoLjoOy*|If<jLTOeEpQoo~|w^Y|6t|RFtk!`u)N6;UaRqzxuTyBS<ETDZZRzAjUJb
zR@4;)!EdPpdDi6gWXwqrr3Vw^n}Acu%{HEENn<3l;~aUhRHR8xx0%TP3ojkCgAkZ_
zC6Do})A;Al*m&4qM8!=BAP|UX&2ugr@P+!gwx!5vu`tM4;u2oGK%@B9;s{4MR(s_p
zf`i>j72Cf8#}r5}FgL&0VlB2LCH{m~$hP?PAQ*4zz!9=JP00MS8IFgC2M-N`T--2F
zTBH#q?MI_SK3A~_8Nae0bY?yqN*@$5kJR2?XB@vg8iXA|5kn}8VVUd|4GlXuQ1=vV
z{Ii7?_~jmD>s2l7Vts6$Ed08|6?$XAo!j5vpI|h^junAyW20dFEv&Do*DVz?>NE3e
zy>NVUP`}=JTw<@Q6SIc+-@Wu0f;gkMQEGZpKv%$$D7oUp#)aZjvF~VP=lv}`_7}?X
z&3oDBy(rA}T!_FY^O+C1S1c}Wb}h@1Jy89>tIM)=;rb%5G*b8?ZLB9qn=ZE3`{a0S
z_Vz;CruoLDL#qz4T{fu?fjS~9u7qzK`l?Cds_ah2kY2|mbW^soH)r}neP;R5n4Y_T
zmJ}C`cx)K>g@ju3N+Ff7RJ#5IC<2O8yZ^RrqonbQfzq?lWIVzPf|!H;_>p}<w`I)g
zxpRTE?tgo}*i&penA~G5bTNPAeOjfjvGmxB<n#5nXrs%Z0}o-O1-a@9N362a^xaQG
zr&;1kg#*MvCY$0gBeL{LC_~T`(IV{bGZp9`sECc#p0Dp+=X~``ebFuP%$HlnNCjWD
z!Fz)xG*L$yV^%~|`vbYhR>v@}&D`09BNVzbMJb59g6#3{94+xmA5H9VwqAdEQSYy*
zJbb%}<GSdzbSDh?hPGbCy_cZZprbG3JoCurd8=04j-=~Chna3nPt@J^HnCSS^ma`g
z7oEkL2J0EtX`>u}-O-!dqr|0e5y3Towy(p2Rbt-WEU7Q$QE}8r-$(Rp=|6fBnw24d
zSa%#)KDs(Welb6ZF{bpsBq+^Ykk)4w5Lm?lkLpU>1#*6)CFbf}bXtyV9nwH}lPplk
z!*>&x%&wBPZJ=kokn1yY*9FTNy4m7F8wZEo*x}m*+zR^>qi`4VJEC9bkcHOPqC`E&
zR!!Z~76&I0tM^T~>vog(*+Qgw$A#{XmbeIVQr@!f!Lj+xcZmFIb>*$Cf&S_@FD6(o
zj1C$HxoU9)PniSWeW$$i@V>2Dx?OSS;5OOkYY70~V$34O=+CHthBG3EWN&W-1hyw^
zj-H(-89_Q|OiDq|bLH5VgY~D`QTX7UQ`laU!M8up*!LO8yYkll25KKvKoycVQ%d;}
z!Hz;{j3Oee205QC7e%L+c#YyF<lFl?%+=>f1Jw{9UvYbTd#^FbHl8HRA?_lf&9|#h
zI8BGWR(F={ioFpd*)rvgumfJbo4rg3bUP$BTjDA}M$7xa`AYbB1PJafVpZ$N=b?!?
zF9FzNO%exrb_B_*Q4qQunYL7mt-gXlZX`cDoa!Ua=ZKIu(_J#<w>M%Y69YewAK~KF
zSudVXtl^BV>R#Pm2a?&|9k<kFdYq1CWi3OId&aE(?K!>5((Hm?u1Cah=Ib2cgne7>
zuRf9>eNgtazq8>HQpkrGd3i0wM&7OVvkB3$guS=!OYA3j7Oe<k*wJ|8B63(5$wM!A
zx6+gO;}&{%6Y1<+gMMkOc$2W1x5H^F4C@>}x;qNbL>m3I6z4xl&Hdh*QMA61(Gry@
z8B7y|eY~WkL{(@wS9^OrP)?C2uC(`6?A>{KTrbS!dF~hkHFb=PHi!7m#<WiU&gAV$
z-Ei8_o0}#i+)~H$UbeCo@@{Mo9G50K_sVa#4&mNk&a7S2hWk~EC(pU<c?vNxzQM0d
zG-tbeGCWOY&ozgUC%ia|5La6THt9OpD9@aktkt}*o@Z`R<?2okMB0QBKFOKKW8Mb6
zJ{MbHJr5mr#^^Y5Jx@CS<G6){2SB}Vx)|z~+<9B9J~@pJAWz#NQV7J_QO4bJOC985
z!tvFdD_m6dT}OL~C$!TK>bVcL&)cIxbp#9o%}w{+cO2aL-jecG48tN0w}yLCLf;>;
zm)B{@2E87Jn)mn`Z7d;oY&Dx)1TOnCH!}FoGS!z><Ggmqau~<+<Wo<kh3{<OwSzhI
z$g3J8xuEAU!o&N#<7!XpgrQ#z?Y*mP3;UOWB*@*G`&%Z{;eOB4KTA77>3XzWTob})
zogH1`0bia}XWA|`N|)L&Jjs{8lv9@}XWnMMhAs)tjgOzzL0WR^+N_%f?{o@PT8}f;
zJv_K0fy78(_+lpPkE0n57n7m+15CL4;edIz{omx;NAp^U@287u*ZnLiVk{Jar+TqZ
zVGq#R!DrC=-8YP3?dMB%3JORERed6yQ_{?gSo+h3ac&%a??pJ$>v|W0{Ij^|-5+@f
zTc}dlADk7xc}O$_Y4LtiS8R2&0*~#9wBK0r*cxm)yzBj@m_3{^^d{3I!a>RnB!qIn
zjQQIBw9hi3wx&jjzBfHbId<NhwCU49$}kkM`$S?Z;>(c&h1=<<ewx5{)jn1oKB&$3
zP;hKs8lQJu%FNHh)JS1BNlWDXpT3Zggakq%Z3B({6awD31bpaqyFQ~AJp(^0E25VF
zaI-ez8df~1QxHB=e_dQQ6_T3BMlezf)-jEJ0->@}P<&$I!Az}Y_UP>$8{}O1Mw3)w
zR-))#HrSc#8*l5*Yx&hm?@rIygzmnbDr}`u*G#}x%)9V;v5#6yFYXNqdYGKVF!zLK
zimZtp;h1Si-QQ?e=Hi)fbvB2_$&pR7wVYa%nJfK}k&$tzRM4`xf+At)EzZj(IXZVY
zJ?9%r3VeQ>WGyD3WJ9tOra}*&2u_;OAoZk4ZA2ATS5y1UXZ8h%@Aa<tGC`ek+cJg6
zaLQj=nFslk%Io&Q7Xte;XLWnQosX`~$E(aHk^|@P`2G#vCGRcUO!v=A8M@U;5TT<z
zEbTB0Zf@?e{G9r2Po&MK$5+m-P6fkT87-bW)EiNG3ZJjki)(}*Wvx+r>2%jjFG<C)
zvQ)l;r<!_qkw2u7h&WY*c{W|jjJX%CCdiRlqDx-#l0L2EwB9V4v#C$%8>hb5?HF$T
za&<6WR9r;7uy{Hv)BV}rSp3aF2PlpNrY}`kKjCGjCtq_)irTfFDI2^?YrPkfvA4Hd
z&nR1GGb<(8s7S(0^J!+dyBn?JzxDaL`x*T_{i=VR<VqG?8tbbE$}-h4ZWbyr6Xr%}
zB5%*q(_O^=L<9N_V3z&bsqNg^k4@K2&z6X!S_q%0!0U-{xXIxqAh>i_yF5P!=b9*$
zl($xV@o^QE%UPdjQq2v=?%(%2fBpRHS3iQs#-8s!E3O!4$H3Co<5Yx&A!8y$x)ovl
z-?3@)v1wSG2WHNlmppUJD~-pmFrlT(P8t!ThGY4%slNg^J~>s`8-89pw*=+3HoBp$
z^d`f}mb^>XgPAW&3KZ8y7j<)WHq;oAouU#iJZs}%z|^47AghGpD4+iPb^EL=hMKG*
z?6c^SM6{X|slMC$2f5?j5&Yi!KZW>CD`<im9t6h-BX<0PrF(O%SX&%!@{Xo8%@Y@y
zL0;>)5YEd$mn)mZrI~x0eUzw7JIM3)t@VE4TF-fS44O5Qh<1>RaEwrcleZo#5$RXh
zN4FbX04E#J3Y)Tq-C>gnDHVRq;B)csXLzl`MB+5H?;agJ`n~ZdOPIXbR1Y63Gs`H{
zkFh>V0T&6+Ec?^wPSf(}&6n#e=PGl<@laO%)d|zpciwtlUM%EhX(-lTj5Jq2iwY&a
z*hoZ3NJx-A9`U?%d`mWvoG5K8xjmQp)+^6^Tus6UBK%j7lhq?)R8v$pON24Ic={t(
z-yUsVA{-s~^f5Nm(c5I&oJVW;>|mnyd@@0YAB(ZXrf}zN4;VAG_YbEph|{<Kj4vD%
zi;Dvlov*5{Zo1AYES?u~+cmw$L7$L-j|9PcZf;JN?BePwA3De)H=kcpvVP~fq;gef
zMpzarHz)_wQpr6Y6HhRfUaHoc9#bQBF3iu@wiU3vikQsw68M;_PgcW4pe^ToAvdjG
zb2wKnWqY@MR!*^lv-SyHtu`+1j@1uqXLp~=()WWFZ&xXI+E)drF2Z{gJ+^u@O_`xg
z<BKZ5&%&-TQh97Xy*djLM&6YpZ*85NWDgrSDO->cD@;}4uxpr$3zn5ke!xNHR|&)J
zS6*GZXeL-eL-mclSImi)wknuj+O)|5k#GwwEwt9?Vd1;uwpKxtC&<<Ot7Z`HXsD@?
zi1Nfmw=Ej4WrwPfRJ5AL1@@p;N#O-w`fqy0O^t(h0_^O^cM7eZ%ikrp<2!usJa}!c
zhYEbMo`KhZ;)6ARS@>X-3Fv511+q|&xpp*HJs#BsLszO#4|fr1v0e_N1Tq)TaETA_
zT{y{h_kgRrzH8>%zbz{(VbdgUDVs+a=_%ugC+!Wssw#!_EKktvjhirlU+(9fWAQG)
z4(Dt=uNUXS<WcCJjW{U`^Sjo9(@9I+(lTj$>?}j9<|sNzspOVB?l)JPxe^>A(B$DO
zJoj8|sMuM<p`0Jy$d4R;$;xD9W5H2k<H8))_`c|z-?p`zMX8Se?OWo-kH`&<H|A64
z$=s%k!pO7Tpd;w`%*WwJJ$(s;I()(=`}Jbzm-aW=W3W{lUT$uV+1@3k;dDW{VE<0q
z)Vx>GsUB*=jL);lm|=Q+TPKvQ`mT3!b=7q>=>je)N0k<jrK4mLSQt*?=6LJhP?aJ-
zyheI1&Yb)9o=D_}8|U~8ES{}p?(n)hL6RJV@O6G49Uf+IIHM7LrJ<$ea-KQ%gI{s1
zzEI_bub-6Y-Y@4Z@uWfZ^#xJkhk}{LjQWywil8ZlYPHcDwyS{_VUn4dpU1~DGj6lR
zB+?ZPnF=W!EN|&IXN{lKcS!P5t!I_%jXe6l_r`Fz^T1lcoj0-_wZ{TQAe?F)bwNo-
zoDx2D&$fHJv8!>1|MS%MkOGFTrKp@dS~;nCfnM!s#Zky@|C1amiJne9kGpV?Y!}-?
z^|G%Zv?Pbg`bgjNlBAh>hRnN#6GKT0%OYvr*(#4MLj|GKq`2q!&u@$KGiaVAGwZ9W
zN-L4G#K2_pq<*e`(J8`W8;KWU6>E$MkNRIN;QPlkp>$ns<+JrFC>A!hB2zq$AgmKT
z)4NM9!ZdhjD1s%GN9Zh7xVwwt=c^{S-b%{aqwvtsd{t0{*evt#7BHU0tYmlJJx|n!
zn6Bn9N=y#g1Q_^|&+)_t?Ag=@cb-R${3OzMKiknqW>kDoT-k`u9#`@9p2*Y}I4zz=
zUKzN#Jz$*92^_z+TPc+eNf$6CrFp=t-ROLVQ=J=2uaGOR2R+>c2N4HVGi{5a;=`L0
zg`K^uqiE6^^FCbuS{r&)Se`cIJsB<;5ptRc;n;8Ox*cRT^YhuX9@Js&%FCwod||->
zp8lmJHM_L5G&k4%TFTlgs$hGY5_vA#J(X;96=4m2k+%Dp^~AP+aBQKo#AA8WOlot)
zNxrw->Fe+|KOEsj%jK8W<g*4-B~wG<?swsJuQaOH+1PG_YC|iCW>vc*$P_xncd+(a
z8?G2|K(G&RnO>ohD7&#4A7f5TRZHfF{Hj~Bl_5)&@9GYdzEUmR-P<kUvZrTgYAo6f
zHuaX_e?$Iz`0h~QO};#_{2Q}E!}E(#>~dl6QbTj$X=Pni>0&eCob&oHjOh{}yol>^
ze30~OO~PaC41(k}{oDK{{_@kM#Qxn{L?J^oYLC$G#^T7jrpHfE>O-hjP<1PW^Bo}A
zi4^v8F>N_!+4pD#iAol`a}76*I){2cwLL|(m1}vf5Q6Z$8SBy)vRhIHf6Jh&F#Y%Z
z=H_!h*CoXE9dhRhzFwn-hFfqoyAnHyA-4xr(ACpS<eDw=_6p(!+o+2}9Hy2>JQw=y
z-q3mn>xUq(`sXg6=gn2(EP15ji`YPHtqPFq9iV}CO4bue;eJ>sndx@^3nb>{OV+bg
ziM=7AA&ArbB~mm~_I_c+sbtLL-`Y})KG-G@H+8~^d$)EVEV5E_oFWmY@9gaC043G~
z>7gv_o;6rHqHITnbR8Bt>F>$7og9ZoGp`5X973*2r%SK4n#!kd5eksG4Cm_%ejCJo
z_7ymgwt$>9BjXT|UzP-~Xo)D-P8c%1?&6WeXsMfixh!`U7pAn7P>`#Gg1nTjE_`Dv
z8=js8L8j(=BOwsD=K-uLze*i)`C7HkrVp3s3G40U9|j8d+Z{;?NXWV9SoxCYfw7IM
zj7)#4U=tBrgTr)0E3^8$&!>h80+w8}=Yoj6qhVqAoUqXCOe|>FW_q6^>QC@WJVds@
z0R@~$4u1tvX7iG8b5Gi~T#i*i;ldJJIpJe@w}(hXtwBHQZtqeilEw>2T*BP%Hi$sr
zFVpeH>hCjKFK@A-Gh}m;9W|S;*ljIN96);C)#W?`Pnyj?FmSxccB*W#!aCGE{yzLN
z>LYvzJ@exHd@MB;*>bYGlcube^09c*N%n4K7=kqE;F;|P*_yyvCk;<W;78_$22)UW
zxvNRkyFCq6AlBBH9lii3!`uqk@;J8>t(vNu)t_ejdABtWvJ9FwOp3ah89v;N9TjCI
zozA~evF!oFU)iBgPg~#p(r&tmUiLN0dfyWx`MW(%+;qcD*{o{d{`%D*tbRD0*V)N%
z^vQ>eT6}(ZA6de~ZkFd0X#7{P1B&6k;8tRO0;WtKU!bpgQ^ccRRMF_w<$a0g^#Ham
zN}w4CLDyiGsqIhg2lSTre+857H(j9*fp7*W`J)?q#Db>EJhsAdD7?4zBrM{Dgn-`^
zMl#1|)3|X-z&r1BlwJpFw)l@961BHS`S^(7HiR|52;NSb+1vys(tO3Sdg-YN$+{O+
zOz}nE^+XCD7s)#~$~o5*)=Pv>O;4r-p8jkg07a+(#j9EOrlzq+)wQ+T<JE6K$9(>?
zo!xJoxvNFHL4x`BcJC^xbE`2#fBm{}cD_Qan=0oGx~>0$UldCjZ*IcY%=;d%tUSvx
zC-tg=-mU2qA2bCm*@ZqKWTBe8z9cK>p8G6orQ@uc>#Zgz^j<=Ia%w^f*ZR-X82;4M
zlm{37qv2INI&KO$*>h>!O9+wAuxWj-Uo)XAW$oMZ9Xm4Bi_CBJ+G(iGiLF~RM)8P=
zrFb4btjSvYQI+in!IOYDkoYmFN|_O3j7&j42+_0=gJA=#TdmmOU4D`}>9eGqM=rNC
z=4?DE?l!BLY+}SJe^tD9vrvlFd_&~sn*Tbs@~^fj$KX@!ylTyKy=4!I-CMx@VZkvA
z57j}<^;1re_Nt{7bUZIj=lpJb!Bg}(*A5tCB)zKMZDeEO3gkygZJ+0snMc8yyuRMI
zB0SvLS5u#?dfdRoq(a|g6^m`UGsfKC_u=XQk1TnjLF$JP4m*JBzcw6$!gggO9(P9$
z*L&XJ_Ws&bpBuGy+&u$i>9eyl0O8#B=d+#-1KjD|?DNKuvLShzi$71DJ(~V_iir+B
z9m^P~<Io_duS$5O{ndy==1W<w1Xik{6_pg0DOw~-E*23upXxTc{SvxJu4vAsozV>G
z{sgM!CD<u+VJ?B7F95Qm#8=vgw#cIi(=oJNG27JI-{KL352V+_?*F7{ZpVed=AhfK
zt0C?3Q6DzwC2Tt>sUzr;lbZdl#<eGnQ?rU%9Ot{AZikg&BZebp!n}r2%cIsA@SIkb
z|8wp7IKSr;eZqbqeeO)gx`=|Q>*l}Qc4NSPpn5?hG>7}zz-YCSB+PN=VD~L@rF;1q
zMu!^fPbJy$V#Yb==1n(>y5D^p!7_OPreU81NVl2=j1~|f+YxO3`-ibu(_3Ji!SwX>
zAF5U2**bYySy^f66ChBiKh^g<At`hgSjbGr4EOtZ*N<gCsm8^_(+nGfk_3&;PZ-rT
zvc&NpHoC6H6(YS?*xVbo&XY}t*C#Yx{4SjI+)o1Zg)Y~bZCkhY_B<+<+i9TJj9-QS
zFEr$8cw6DaMRp3%$Gn?d=3Jo+##ic9(t3Xt-gj;g%x$oJRoQ2D5xHm=VQ11^y!pKP
zd!(XJ@PJ%3Xo%2OXq}Akc@%LMiaNXX>^Y!+00Cx5NC;@uIffL0)+L~gON5hdtgUIQ
zsWp1RYfW_dzBV0dIfI@S0OkS?Ys*PDfF0~~1V!>?Ch~g0FolJo^UXTS40|IZBLEZX
zzBk1ZN~jB(wAj!2J}N4<8ugBW!2m@?eU#oa1vr=-#(i;sfC`7hiHL|O`F=ucRLSN)
z0pjJvdvo(%KwMVH5D@hbl8m}eO-h;p1)AIIig_JQieD2QfF}Zc1kTPE@T()BMVc(G
z%$AJIlS}9|0_OO)ZpS{0>NaCJ(f~!3GX-P~*pxz@H5myBJPs4TkD$m5W==3~VtIKP
zz#2<*8kD|&)bYCD2I?I$o|5U(=TTnDO3FZgGKvO7QWX3yaqo>-h2OkMJ_TnJAi%7w
za%6J$uIKs<x~fEM1hQ#-(z!|m`1qhj-8nprY}_l$rpmnsz#n8aQZ2y6@K#Gzt;m@u
z_ay&RQ8AjEy9Q|gGdN8T)%8oids-(O_Vo4l5pPxA1Yw;U2s~G}76(Un7(2G%K?>V;
z2VVdLaW|ZoEQv#D)SP&FTDc@}#{7R>x;96<1UxP%Oplg7wVk5`F0q1wa?VLhPlZqW
zGE^}$l`T<yzh7;dtIspez))$GQ1-JiN8c;h%BO)6`{-Cn<z!e@V!unKl!gEu7fbG^
z!HA5AA^)y%rpq*|a&t@yicF^s*`jvMVga|t*U+5ovR<~guUH+GMB05kbrO|7dU4g|
z7xO!e6>O92NGzDKjJ{nJAAa5=zIz-Rp7lKWLvN||Z|0)G))6&5KxU835K1@;%bRxK
zW;nG_*aYZenE!+Ka%6a~4QR7dp%s@C0S3&R#Sv+ij3vjRk7cxkLKRS+W(DPFj9CD1
z3lIf@R=f1+29dsJ*{B)eD-B{iye8v*6I^%cV7*4CKhyf<xu-e9L+SiSGZi#ByBv+n
z`9KCjzWZ1H2cR3n8JtbEwcS$B=nE4q!bvz2syAn5W&rtidTI*1;gW1Iz~ax$YyiZT
zFg34?54gu*N`v%HUS|lwbh$2ERb4$%sZdr*D(l`{oo#t>F`e8c5SaopTd<Knt^pB?
z*2L(j=xT{UsJXeJnfB%WA7x!#L5KB%js8T)@h|iR!P)EYIaQHlyxzkZuQ>P}H(%u{
zRaj25N)!tz4E_Gi=d}HF=O|92^>!EVLL#*Cu|V_vJfSe5yu4g%LEfwNq&v01Q&I8z
zXw(=_%!K!9=LwA@HZa;nO|*L7xmNdbWyC>F*X?l!V`G&QS+r}t?;63bZb8k#QCU?S
zJ8=wpEJ`bY)N2-6Yd!bY<5DL%46vke@&m_f`;8qWh??VN35bZ&flg@Mim6+AQimi!
z=YJ;qK-P#@lNNsYhd|WH{yutTCNbo4H!#%F^`d}Z`UdM;WQkCMb_H9|sfWjxCha*7
ze)#6)&cWdntBbkUJC9lZw`5v<E)>cSu1C%55d(B(k434SyB4j~Sf6CFztf#|vLB3y
zfVKW<oTv$(>^b$M`PwV*KGmBi(+xGnAxVD^c`|)q-TZNEZt?(cosx%Vl8qydgY3zN
zC%pT6R%Y0g!e8SKR|kW3hjsIAXJfbeU7piOzcm?hOIFgW++g3?oLzKrQe-yfj~w^@
zajag0udd|WZD@}e8min616oS!S*MkE-sa{zfWsM^LIT*M#V$vS7Z=m|z{eLI=&{-v
z3{tX$gR|qoA)#a-Ntrq_lnL32AfGc=+}hQC7gPMFR>~ge_6CN8CTC_;l$9M%KBLyS
z?M^VpST<xt;b+9x@bg~jn44o@EHTAf%=}#OQq0m!0CIyb(&QBUJS{*Z`T<CWGlaZg
z>%Gc&^s-zQ%)-dqME$a%{{GV9;%q%e{J!JkM>Yh#Jz(`Qv$D3jolpmF(uM*Pl~LyU
zkr(_jLpT%ES3jhRmFDN<XoVP!&dteu<sfIysZEtP2gGyQO0h9^YkF(8;016Cjkm##
zx1i9dswKHu$r01uz%=n316D2m=FJ}v1Zl+_<)W6$;Mz;PMEXd!oWMxp#o5_+U%9>b
zX|MDfRX)w2-bVZ#y9cgM6r8a=P2w-aN7J90wsn{i-ADQMehc;Bh7;>_eQdf(I%<**
z>mltyH{j3G0)hN9Uj@6ipYcy_f4qwqMWie)?jy@=7)w5FDpc!*KG?hNQog@REv-M~
z<toV7JUb9kwo9`G=7&fi%orJ6sc2%0u+w)eY?L1q)H7v6Tx#Ye6;r)@<5s6)`j!ps
z19>{ef}*8#Jx<#<Y^$V<u}KMu_-(13!_-s{`x6+~X>9dBr01xydNrk%D0(0Nem|Bd
zCP7!h!Sh0>=+i~*=8wLt385;{jx|G*i0sZkyijxI@`HmzDw?pXUmqaE_*~Io9Lj$)
z1^oj87~}h@tE<8OW&g&ZK|nwtEoTMD4+{zkfKoXqFff|7RE5cigM_H`N2_<#x|Y7a
zf<<9j5atdTHS*nLZk5`NeO5Cc1h%<)E{wh$Bu67VxscF@v4DnKfPqcNCUX|jCu44|
zsHiB%2n-Gj1HmUrSU6TY$LZ6jEJbaVBp!c%^RaY{Ss5=cFPOHKwS~p%7+A8^;?dF1
zCa7jbl!h-#)m2o+Hi>k8o0j|_8To?Vn*O`s_k6SOcHP5=MCXFToJqn_PM6iyuXP$L
z%s<_iwg+BbgOYb-;_1_MdYYQtHfi>}|Gj4vG2-Af_jJ4fzlx@2GC%ea6gTWUDn1Zn
zN{_D&toC`DikeFOo(0XT?~oCyKrT6gp$C%}vgLV_Tk+=PxZk9`@*Yg8Uf;OXRVz1^
zRwf|Oa1@qxKHrc1(a`oHO%%Fqr<BR~>*2=snCff)i4}iw<?Q@?-gN>V-IwM}FRfd3
zUhfVWw?6xIz>S4^5}hODNKWBChg%k+5CzGH7JY{B>?~Uw&nB0A;eUI9b{`Mk9&^p`
zo_mwPxvnssJfOo+;g67zmL@<2XV=x);(>HPM_XGm7~qOBfWR>`6O@0%znsU=$-L4U
zm9n#o!IX2baJ_0nD45Hq@*HrQ*LYF<!gM@Y6%WswE|3M5fPsO5uV25Wq-c#n%9~G_
z?l5xd>P)lNRI2LKzkjqV-SZQ@sw;c)gvN7i-63ElFsa|vS?>H}|DB+LRXg?v5@*XS
zp~Jt^KK@=)Px&`8@B6Fz`=X)L$5B1IuN5gpX}ZUy%LF~YV8xC0Q~C_nwJHUlb!%F*
zr}0b23rWc4s`F36<}gi?xy-0!mXYj3qYVz@Ed7az*XM=(j4u~G3wYq~=5M8GL#sC1
zrxT9es5)<l*}Act53Z~Qk-6$E{kZSxzknIcrZqV^nbVdb49URN!7i+zjR88%2#WMt
zlfm6n2kU~^xHy$=Uo+mK+S)+c<?U^=GI1COV>*~rSIvd7I<eIeghS#oQ!oJ3+CZW0
zxj$ns!JrX)T1;6FtOtEN`xC8gkFc=l;u~sf6V|OP1eutMe*E~#EV09xUxR9DrV2!I
zvh-^LaboYj4qCTok(Za1B@`v@<~^QB4zaPa$|7VG=HO7uRM-JzuGm@nY{NtTd?BFy
z8^a!cBihs1x!oj+^$;EXAG*TlJ2u2wZMX2zK@pplETL&uIZwODeRlll*CN!r3i`B+
zmghyqG3Cj4Z;Y$+nuh-<e;<3BT&p@|A9^r}#UppqW6`nW;D~`s?ktx(7g?)1!6ERX
zVSm19&v8k&d<TawYyV1Z)3bW6c(;L%Hm4-sN^mSny>r`yJ4e<0N;kINO5&3PCg%eK
zy86dODn;z~r5X=*c6$5!wJVJniOvir3KRj4`9*J{t}d;i%X<k6uNmozbnbrNatXfr
z3?mcPtcYk40gxMjJi0%TEj8iQ%lasAWeCZ$CXN&80x27i&5_0f*9FFtCk&HGvV$qy
z+Vo^@+#uYGZS?Y4Pv71o)1uea)F|!&FAy;Mt<mn7kDGk-{Xu=us;;UkCjkbV>~3ud
z161d?Z&F^&SXkk-to>nn)jz=q26wRcgoTbv3<7tKHbBY~Z8ZuDXMFkli2!EVFSTzt
z_ly0Mh}Z}pprL&X!o$Vwi5!-aBhS;<2Q#J|)?X^M-M`09#_->&ZhLM*Ejp*Vw0IFw
zjOo8}XXA--{8`FPqz+%*p6V6tt9dOw<=Q=e@7G|fHqN4?BOM}w_lQqCA0FR>dXE~E
z=uA0%&v84WN>*A_QZXOrOMXm|G2&EFZ8R6{)49FdVJgjyO&;5R>?3dUJv-J?VPgwY
zOJ}5_WGks|UCZ;%=J)USFtXS7w9fFcI!&<Xd39fcgj59$?g)l6RCDPw<(DNK3H@@T
zA&uU1kNOVA_-rKVC&b6w%+>yt^#j0gKC8%kFxg<P;b||w%f3dX5r%Yi&dlHQK<vj-
zDp+NWBSTI7`INRTjaMyjYr>CsLB%44u(-5zq1heJygWHMIp;Vb4xduU6MP|nDF%Eb
zFa#X(Vd1U!ZBnCHDP?OB(?PW_n4>Yc{aM8JPi1odaNlf;+2|^nZF8_zd9me8^$xoA
z-mCG6iFybUQ3y<$N$e|QxiU95TNk9~y|F#gF98s_U6RtvY6b?fSyd*ecqkDZc71v7
z1peXcc%}3jy{^Zvc5x>CrKzdf`{<XJE#C*jQ@hokV=2wl*(`iux&;R<GZ8ZnB9_Ll
z+Rpnk6@ZoujMm1Ej!*u{R*A>zgYl|oF3FWfG1}5eQE+_Y(XX!<SO`gxXJo{Y0S`95
zPR>cp*ZN164CLEcY7Pbr*Ag4&3D+x)7dPA<9A5T)(F#jTnewa%>s)><+?qg0b|&+o
zj&jFl@6m_wC*-M0=XZ#lVw30xo``HpkOtyWK+`!LHp6X=9RAE?>MHCk9%igkVuOgd
zcd)N^ebdd7B)j49wn-k^92kZPb$=GWvdMx;#{0_s#;RlJqe9<RT8Xe%MUyUB_cR07
zOYdK_xY-Rg1aQaQN;apO>M9P+&K$*)(7dSMGfFy|_1^lfsakm|oddluzy!M8&RkBA
zua*lX@ShGD>tyY=W5G!so)iYjhoiD64(JYj7=oygnc5d3reorWo>6FOYXjylmV<~0
zN^gopGH{v<4i3U@P6nnou;qgnQ+MYRye2Jb<WfQ1D?dNKxc~FZv$nP@FvHOr6^|d-
z32GyrbQ(-FD(#5Xz_J@LOQ;QI*`=y|88bz_*bCl?%`Pt5aC~{yI}&HBwfNj`O;CG#
z_;>VQ^g*S`U}7NISn-b6*2Vvo<^HKRmk*jxXVI^at9p(O`5O#s;Q^3RLX&I!+H6nA
zGrjcJ>WX$OJ%3(T>`cARdL8+c_%!P0ebiY*y9pImqUy_f>3iYZ2RqTd8(~kYtGa87
z2vEH*@67!0;&u!hLmrp~K+6^Jcgi+-#C`gd%*+#4>`=7~ud|8KF-BZELJ$WD?!{ql
zekFfsheJwyLcWrIwl+yB<0Qxehv%~T&%Mz!LCnm|9qsKvgsZ0vyo*So?AfPT{~-;C
zsimky&X@*{8LdoO93PnZ60oGiX!w|9fg!NnQ78u><=|s%aDeb|ntt^j#gEB=hiI~P
zpa($v#+bhEa%P`JZBTniEs|83fb4Q0>V6{X^oqZRMoAPkT7adcC2(|tDG&BTX<3(-
zQ!z1>pq8ao@b94!b0h`de0qcV9!aX_OFjPvz*SJb8A^5fL?p*5HVEf~Qrm~r3!Ba7
znHK>h%g$yGjPHv+O8gu!@zhASuN{1lI~`T*|Aju3W05Gd{iycKf{~A9s3@!KPqVo7
ziYq|(APZ+}&1$MCnL|3sr1M7Te$cW%WszHFPIXMrk{t=P7Lk@J#~ZDW8h^)gfXheS
zFcGi1C4r8GP1kr-YPwPK+ZruD;Jy&gVqW@O>S3i+(6NerK?{TH)@t;SN8zIRxJ08$
zrv%0Pv(eh!L*povAyCF3B{FR{&{l{XwjoC&_4yv&>*UC%<qKb)=k=etI`~xqSjxu4
zhyU1iC<rhC#Hy^KobF`C5Pw({K)8MntcwQS7em**#lpJ$!azm+Ef8=Yma+dG1D3hm
z1bx1JIks<8#*2C!`3QmG(-D=dzL?dGnn;rluafB0B3ezlCM!WiYS6H9zZjynG!Cw4
z#lHIYccMt-;8lOyB07=!q>zRY^zgmWNgJ9^Q@gv!+(;IGsul@~K;}>&VfOQ3x5-uU
z>5mN7kLNT0TQVqzL1JlH2kpfa-;SNoede-pei_L5*)SHGpd5RG8EBY9E8A>@28r$r
z-Al{ng#SHQ6dgY&9D4cCc3)FQ0O9&=RWdE@<ZQ~y0rWx_TaQUz5b^@T^}SAz@BiO5
z6Lbb>Vx&MKih_dq8uOvq6GRrNgzlV*BS$7`TWsN*lsPrE4ivWc$E7%j|HH+y{wfQ4
zCh!XdMSzS3$1If8sp}VKIFSsvm)N|st_=_Q*J9+-CNJ>+G+U-V8-0j=r3b`L;KNlA
zhC?_sm(1Nee~-rDk&^!J96pby7>U8^lIW6Kbnw&t5h}`Iu=ykG@Lac%F71dm98x!G
zZb`={(4}EFd_7)|^3(@DwKLzcoFix$8R;B<;r=f;6xP2}bI~F;tLxdL$VENI#n-C&
zGq7ULs=kH35T*ZI$j0r{yEp|Yl>0tp<D(;EN-CNjyI&jgd{JWzmy8#%Y|!R!yp8q}
zj>;P@yTN=ypy?vpR7ij8c*D)y(Loau`a~GMzR=g_@Im<IoU#>u*}rF7UsF-Ba_6cK
z{oH$MK5nY6nt(hyNZi}CD4c2+@82BKCB}d5xxfA07JBoexH$CRi>)V}S{)u<XvMP`
zbw=^o`aXhq_CvJTGPSQ#p2KCWb~f_2V}XQ7nOClV4Ru>yps6Ei|1+&?qZ775gPb}H
z+IB3QPYB%@0Yu<=Ho!;*<g8Dm+Oz^dt=^<5T9E&u!`uQH6iF{E?AjHQYSVO=k*E)A
zlBEYjIVm_zZsA8Q_7~i|0@ovWJ(1*Jwhq*7plgf83Hr!C`A2f;JbSyvw%6z5R}%-;
zuJaeMmzT9zd((d>ng6}uuk)cHV@5aXE@C@G7C=+X1_Iaf?^dTgJ707PggoAUo^&*g
zKi6sAxDvB@ijo46PQ+@IrANYwhrvKu5?=2gLREzoD-EXJ$u%C@VCagwySeAP81Kn4
zUG3B1%>LOH!B?-o;_o_cImka3eojWDP;4@kR%bdK!I`f>h@ZC9V0boB$obFb>cbgD
z{Wxek$TxxT!6Hgqiz2&A)-zWt%lZ9@Wvyr9UH8iJU)GQ0bgi{#4~6F;9FcRlF-fjR
zvkv{Gu3m^8I5-!KO)uH?PncKT-rXl9+ud+zXtne3AiFy_Jls7vpnACgieDRyuX(%#
zyb@TO62@K~cK`Pv>=<%fDO_S`YS-JsNqwk%eNhI5pQ5jclU85jr8E24CTXt_Uugd3
z3!Y_)K6y`!a0|O;Wh@gsyskYoX>n4!#S#P+GZ}}o0nM}eF2FV!P7y?2Oe1tv+{|as
z|I{tI@KVwMrCz3BYL)TX|I7<7NCdL&>ebXYrW+Z~pP?+1|3+iM7*lF_L5MzK>K*>}
zpy?}YfAObDENehbrID@l^!Rr*NY&-p4(Fy_=!aaTQnkdycqaTl63(qtu6LjT(vS=s
zq#Vind8tSB1{>CYW7e~-`t$$Q0>F=L8vx#Tz_=r;5&8raMKEHYK2KxqIqj<{xIPhh
z=w6NXQsRqAXMYiPs@sTOEcLUy1V7|&k2ag0FAJ*ka<!6;Hhi9bU_uy|>0$e*xgn$1
zY3HbB6(<tWUYwpz{wF^oKQCh0&|ohC%V1??Sm4Su;2nT1U#y_p{vA^B_ri$kcAb_J
z@M#%-mP}E=ZC8fYHuz}+;Y~R8=r@7#2o1^O-KxM$2>0+yQZ*TiYh%u4EDhH3*JakM
zd^P}}Xl>2C_Esb4nzRZg{Nq&;?Tw02z~t&u6g!UDl#8^%3Gbr&-CYo6W1{_I0J*Y0
zuohfc_-fH><N%H;z((;ew!HYNt_NR6=+93>X$QwEy1%^cULEI%Z1<$RMZa4KCdbmO
zqKVcJ*fyQFVH8=*pZQb(sC*h3{vSU|nLT?bh;uC@^Vl=9g&a(b;4k_xh3+Vm@y^i^
zk0xz#k>Y>g)q0|Cy&hb5syPFbtdJ}BclS}|A0^ks%PVW?Mg+Rr27QBBAzc})o_rVL
ze{zyiJbq8)tnLu2@_(PEMkj)OB*If9h7Xe~V*};b8$V3!^|>DpKFY%G`H$Dqe2r9z
zaqE#%(Yi*~&5qpfXKA{`d(yWa_z)68{-wk0DzCTLtmuaWwNF0c+-I@wI9@?(3$LIP
zvFv=f`svkkBx$(d=qEZKbqzxdQiDO`)AAw5fUKc2?7IQsL|Z;4Mf)EtYp<k%ndJXp
zpC|<cvbros67ESJb7V!!`?(~*2EP5=7v1Gt$|L_6W3QL*!}tDqvkfT<03!eUZxSUP
zrEq`WgaUAH8ov6Eun+OMG~A+lH3D=%%f&eEa|<1D@mby?XX}K9P9^QqS)XBNw@|Gx
zeobJc9N;?$KvVU?^XepJfJ4^Swj3+g24gQCH~$>!7ImA}!HM|yQc*NS-0-nicy7qn
z)yK$;O}~^(iO8b2r9Z{J-?&7SjBiSr8~N`0_QAo<;qIY95{2W3Op<w>5&K%$z%Ek5
zCLKCvl}nWoAQxL(WI3Q(n_{Y`QY+KU)AVXhFZj0+FjawOetLR(AV;-Kned0)v7Vm9
z2%_EOaC2ejpV-NVw#P%=PtFwQ9!5}E9z#Vii<0J|Z=Q_kz)6|uoG%X^p@fqGqtf3i
z@G0P!)n+~#2*@%T6w<*IaH~qNAdRoC9tiQ29X%#Q#U$hAFfb1<&BH=I>wlr?S1y;}
zoS>E)ZN`Zjb#KVGs;Mb8hjVP07@fur_g%P}+!>%U9v)iQ+M4?Rus6h-eb_pj1}~3)
zW*-i-q6>u>_iXRfhK`JiQGSSm$-<d>M*!?$EDR57AP9&|!^8U7qa!C{f4<W*reWKr
z);xb9QYC?$wKcGd8SZzQnm=N2<1*ru6;MD;;l9Gb@!NdTbZ`Tr$KPw&ZdNN*?)3V7
zfA#lQmR1StM^%$`F&nB5KLykI46+3*mHPL;qLeh%{ILzUm&7r9G}4y-NwXB5r}O>A
zPMGn1P*s!?F?=4#jyfy3*S9nNXY|+f#vlBvi7eeLA+nl5+o^Zxg~OLMMjPU}p%bPw
zQm%Q4Z*uO9!w0~zq&xU!HM-pkI<U2!3kBPw=Lj8M-^KMC)Y75#{rimCMEQh&2Q2i3
zhL?RP-~L(VhPaP%?k+N(-&7^WlF01orFw2|ZM}2o@-2i;#7B)OE=Oo??b^zpJyHsN
zZGbb~QDKexIBpzz;C%^p&YGGVI9&PbnV-wO^91^rFEvVS_IB~}zj%bdWMV}G9!%Em
z&v8bTyf@ybW@qQ4=AeJc7dM3Xmpb}Tl9TUl<^|5C^d%(FcRxE;lnG!is<nLd_`Y>e
z&K@@t`??j%{#T>z%UZ%1FR^#+z&iVuKi742omr&c2o%5h<>sXb92!92XNq@dNJCW{
z$#}rsXoe|BelF)yz}+q17uep+XKJ8$e3ni)PtvQK{_tF+RBc>uR?OCA|8jl{t8m!Y
zSJb+6@No6|6-&fqCwWPIDECng(Y@Zn?CmhX3-P)+4T!)VWxM_F?Gkfb!(b25gRse7
z=T%g+ZaWCAVRlMqU=zub|3R71Lun2z8;V%Wpunxs(jxBVHfz0C9XXcYRNVjaRKf=e
z&CI0S`2xO}g~qm~&-MlFYwetdknzUgZ6l!%0h#({mNJ(4=25oc0V8$T2hH6--FtYJ
z@A;8}FMSWOzqiNii)>ZJe+*3ZKc@?asozO9UAuIidH$BnH6BR@W6J+WoqPm_KD0EZ
z2yFyo6gpX^XC`*I5tmIk?VQNbSS-FM7)5atNMq)b);<RsbB*U5dI1_FjQP5LWY~`%
zpPr0LteaWdCQ5jjIBhZac<BU)j=#OyVuhVMxuT<^-@vX@7|nNy58{R_uZxH8!PdSl
zp7EHC@L`PPVD}p}ySO!BJbI*3EdJ2TBzIc&*}@FHXC7s>?*Aj|EaRen-mecLprjy;
zfC|!`QcFrB-6<W?-6+!C-6h@KBGTR6UDB}BJ^u9jzxRPY@a66&XRf*Coc9su0asMa
zgPy8o;O~`$5$5NZv^SULm<idKxhePFW=<9()+EqJ^X85C{$UJ<qayKJ&-Hhg9EiE0
z6`Tii`*J#(AyuxiRo9Q-Q3#7mrQl!{d$5fp%swl|zY2Y=G#xv$JPbmW#xf8ME9A8!
z6saxhmr6h84>|7qs_#enmS#H+LV8|dVj}!UEEdnuFmLS0oB#alrFFZ0@FKeMhy@Ws
za0PrCEQN&)bG+itD?y9Yc!V|XeO41+&7<vYfK2X%*;gf+vDDhZ<n!V?d&j1o0co1J
znteL-Jjn(R7=coW%#2K4uM|04pnStz{cZI2t^OZF>)(_179K%mUo>Jt1N1Gj;!wi}
znh(l06*2@c?Nkx%ADD4TiS99;7pDla&f!0EJ5L)TKows}l})$!v0l6|I=i{QPO48t
zi2H+!AQW)XZ%1Zof~*9(eOF|uV_Bn)2%-4LYKxvvzkU@0zWe{!#s7ZM5{-C@5x}rW
z$gCp=KIq|+Vj#GtsLg&%F8HKYJFN>9Fl$AO<S6dcpap%;*d@AYjHF6Gr&87Au&<8l
zQ=j;pPfkw2h^j~S6Sb@(>@ce6t4@<7jLH8Jg!CzTpZ@Rsbj1WXX6%y(#lrME`Q0X}
z`Gt-eu)W_r?bU>c*i8rOmJ3nx3CPk%J2(k>*M_ve$7W8<p%5FEOJ}=O!SVZbBG1wC
zVQ1G-1%M+v*7DW<Jt!-jD{s(XGW-qbpKBROzs1Cp@io3VU+;OTATRi2J@c7jx?7`L
zPD-*8(#0$XBuZ2~d9Ui1>;A{4QqFuTz!JHpfo1qnr9&b);npk!S_6MRssdj{5r)0?
z+U;J#Xv6nv!bLv`66r{|5;DA?>hv0nW%UmjM-v~eTPTl`BzbRp-M-ox;`UZ~5^KYA
zz=}UtHa+&_Q{*(A$@P)0xl6%jRF-=>+nq&FXCO64XC-r}NHNTy>oENM5o*OvY=Z%U
z;NM?`v1ThCg?nkf4=bU6O!~6_{fX(EO}To!<$DJ>T?#V0im^d;<K9?xQi-{Wy2}H6
z79*MTj@=;;&3j`qA{QAM8Y-Qt1*bq-=<Wf)8)o}^c%mzc7m3CKt?$J3raXBGYITkd
zBuADnD}zcap-B#ITzy5f9HoOw)G>gU0;V_-Rhs5Ki9&l;R@P_7dB#P<?Qg?U+-Kjg
zYhl6sn~GP&%kNT*oguMYg2y$TdGS494eRt%f)?F|f_RmnIukl@zCYy7YJyLr;V^%w
zQ>Nq8@LepOQ*Wjm-fp|);fOnAqaK6~vn4f88mHG&hUQV6L)D5!$n~+9{T}*uJIyvU
zvmSN|=JdM}*dX=qy!hI3RcOV<#14**E>GmxS=o;kYO1QML#9HB*{FGW?}I0cZk+5+
zbHo8m4M^ofa`-(QDbpD1OOuxW6?HJQ9SUm>PVZEGL_tS@pA4DY0^!Xz8R<o$Pa6Uq
z-IQnEYH#bX0rOrXd<_V$CmKXgVfQ->uF1ML8NCq}l}heou1v}n9hkbhI@59KL<J`7
zbdM7kA$=eD%z>UBRhz*Y^C`euC?T4_Y_l9nV=Dq!OAuyN3@x_Vr{Vo~YybR3{EZae
z#IFotuwdA{^**n@dcp*Icj#SiE_jZZsUWNUR&AdS451rTrrDzKP(&;o++$wnjD}oa
z=I&5@ZnK{OSy6g>{2+>@R;%gm{vKy2nPlZST}Kwo1CEyJoH``wH&xpxlG3pi2eZx1
zaQ^5HPFIXWzkbM`DobLYeEKpz);KqDLQ`r6ajiWKy}+0rJPQrSXIz%qs5S*KUW-5`
zQ&WOaqxC!zSJ!INk;z2|fGk?c$jJFA+yVnM4*|Oh`C#*5du#KEuROh9>f^^WHhm+2
zhyavhrQV@lFtXR*Pt60NAk|#1p`m%3cE9Sf>v0#~>z-i-{(^J-0AQ{EUhy7h>k=M<
zP{PrXWOU-KZDfLCmdvXAIgBW!dW?X(=PUj#9F3~o7Tc6hUPY~X&Z*^1DIYbp*+RVy
zNK6JIph`t@GO`WOo&S?j4EnF19smo0LOSUjwD|$sip59@Y@^uORmpj}yWhc~^SmG?
zez;wJOoNh7K$M=NpyXIo{1>>efbx7Hj%e$Kw!M6cNM?jIJSH`+2S+auX2lcW#eIo?
z@vxc<UCk<bY-PBQ<<$__3x3UIo=SuOqFdn0t5-8Jjb|}|(U$dFbCWt{hX;G0(5PTy
zx<EzM@wi?53G&x*=nwXe9zN|)dBZ$zO2);hD5nkd8mV3GfzXxB)4}=Ln`>wU4_$n(
z<Kbfe4BT=Bi`@?n?hrxu^d`yurnUXAYw}!u)EfPgou%pPFL6Hv8DBJ}YT}u+UDpQ`
zD5z<1y@q7g6x+*s5CKh$p`l?4wAgt1Xc1~Jt1D|Ju~%ALd|h9!#$pWi0wYm~2nbvc
zC#PR=d%E9-5n)7PsL(cM<<;h8W$7*YIq)?eUIM*=R-^l@>$dN;4-4@(&C+M6!3Vp$
zmKGL!dj}g7{K#24JZ!9#16}j2^cBVB>cz7;0Z}~L)CP#52sFQ9`V)ZCq3!YBN<JOX
z*MJ|)@o?_qcPDy$61NfvsW}<;dN>2>n_(b4Ty&TQDg{8Bh&WX#)pP+!dXI}ql?56O
zfnuGu2N0#VSZ|Xp_W)o`DmprC9=DErlf#~uESZ-e3O5ae_WsFI_VY0M`*vBA<e<XQ
zeaZ&qwdea8xTMZP1nElVd%E3tNt4Ln1_7-2*wgT4fy&BX{E}~1>#M4wB?mxA*;&}(
zHiKqH*J)7S?NOuo&+^snq3zKuDf0fgy6~sVi*9$s`r7~X0<L(^$I~rmstby<Qcgut
zNic9<+A;eFhK7j;1iRh(puacgUF4nCv6BW7K0jg!VE3v_;~H$gvdvDBZo{o%CWoi(
z8*%xpy}j6<G>r8qDDdecoSv4xbUvM+`o)aotJhtc+QQ4bxoIdaE^cFEL&hKd^Klk8
zeR|rQf}*&fWDqYM1D8-#(9yxc0j%nj92~SfQYVMp@}W`@(1p>_rKPF9da9$m+PO&*
z<=;r?dLaJWe5%+55D)*PdUIv$1l+EZJc_LyFErQzFG>iKv7zCp-0bA!hux;5#{G@n
z=oFayaId@dE?k{zA&*+X6B_`07Ng-b5M@O%*81sRSN69%tyqsEbw7KNY0B*i+?Q8C
zDUz7T6WS}v5H#mOKB{_;hgHAn7Ymih5w<&JCAmCUZUf}wi*(ZNaJ!q;%uf=zmF3?P
zG{Ad7O~Vi#7`6t2i5k>sG|cfZ&0X1&YA+p23F%5o6oWBG<su;v$eGcgdP<^rI#af2
zv=I>jCapU+9oDOu{L!Leg3c(9=RRXUCXK@i9k}QE`y7ZXXt%8hJr=PG_}c8QhmXZo
zD^i;1YhvT^>-o?NmzPSFZ*J5~3o<J*>z4VFHp*chVM<#Yv-LGyp<i##%G!<^XA)Fn
z`{Gw8T~L=j!kju_RdM&jA7BM|c^6$T5-*T=CwNzQqtZw~pmI0K<0T-noyNC~tcnB!
zc}+Oasn`b)xKJ=xC;oVU?3M1k7C5c#2GVa00NNTT5&>ok4FzQZ5L$pBA<g}?7wqGH
z5EcfBr$j}lTWIf)n;Z|Rsj1(ZCfgg(vrtk7*l#Q>EC85ypG>*Ck>|tBb}#Kaptvjt
z?}G&1+;W>2AKU#=)3J8FH5g(_fMOFGq!`kt04bQ98!toiNN*U-Y~{ULumb=we>9@E
zgIYRHbJeC3MF3*waW=^DC+`!jyb+EE0(k&%D?qw?TX4v#TwE0H`uD}U{z9l?YTblr
z!4u`388m=VwKj`N!9nug{Tj?woYulK#XdC`4u;s9P;{zHO~`Y6GN!8!p(DL9T8oPk
zzESyVB)RC><1!60`U>M6q@q1v8!8=xel)%cy(u^&JM|z=F~(d~>4ZO+91@w)R#vw8
zT$T$}np6U{j7VZ67qrPJBjqYTJ3H&BVgCqZ7u(xArU6S<afr?<Y@6iWhwB^o?~@iG
z>!a^)pHRGw2$<IjUcBG(HZc6SF)4IBR@!o@KITFNhCL{-pHEIrMb%3FC>6{M2n@_r
zF(F%z(v^lDThuL1&CKi^AImVas@#Kt=e~=<^90N;T26}&Af_B#SA_z_n8&)ddy9^*
z@aT~1mDA1sU3=(WQJMPQSh7{C_@JELWT8^q-6jLoClfGL?d|5LFI5`$g8{1wfH1@P
z9uoR>YCq3{(J#HmeA?FGxak-|ud{4yX=mAXe+l4a=?~}mfG6g;9?BsvFHgxwMHQ&H
zRawcbe%p!8*L-){ujpI!u;g|;sxt@r)X?eb$!SeH)V~FeceXW0Ni;^tY@mG#jG`J$
zGm#e9JGdn}91{<kWMj+u_DlFfY@E5ic{wd1A(6*h?quVOzCCJ8do*Ish54exXekkd
znY1+RTekrXW5*mQ&x_2u?BYHKNSKC-+kvyfY*&OS{udj%8qx4XWd=GLty%*raj}%9
zciGYYr7c@YAR%^YLQ%tv$HHFS(6EbR*`wPKfOuywMVy<U11375*Y>+>jWD_-WL0Aw
z&X)&jG=^csyihPBFHy2EFdWB(9dsBAj=7|}pNh+ewv7{)piqs1albA+JY2oR^Qd84
zEN~0WUEWjtckU0PY_ph{7;A>R9!Rb<a>VaJPT{)R+9>T;L_}IZ=`(i8ecXHo-7iyk
zh$IyymrgR6(nyqe00UpfPr%5utY7s5TkU}G6?Ft`5O<({Q1Ajlo>;iJqRd<>o<PPi
z47oipB?7Tu-wO&p{hM9%dEWW?684FKN;i-1X*Yig;{GPv5I4TWSeV}%DzdA)n-7VJ
ztDio#LLgPf1AqY61l+4KaGTiJB^DMcw5s3bZ~8VX2O7?l7avGp8VV!Hsp>c7<g^ZZ
zuo4fNzE9F>wY1xXh8`Lk23<48MP7)Hkz;8#CnU!^f!R7IoQM$E*>DM+7Heosz721t
zRgF1InoIKQzD9jbr3~JAxzSPRNl}><c&y|44KOXq%l)_!Qmr>UkiF(XYbE6miyTZD
zIlbYSD80kO#?C;|(c|sy4fL}%!JtL=C!<|K;bksB5(32F{e*%{BoqWcJ;V=XK`HSC
zSD)CwNVywyp)ocvI5<pSh}FiA3j5qb--65I^}wUz^yAy}Thz5vlK0m9IuG|CVBlsm
z9uRmBHLO~|=8)X_jeyGkuA?{Mn?s>*`Xn5$fs{})u!HQ|osKT&8OBm;EyDhWhSO2=
zX%Nj(^C5eKrnZL0?V%qk9i4l=2LJ{>xGpwsO2z|2R=8SX2v+*weBEq;-m?%#y+^_i
z#AuU^{9<$Ajm1F_IGR2@X?IBn(|7t`wA7l6o$RI3SZ{(p1dE?EIPZ>49coDDbF*v!
z`FjCX!4-f8FQqL-MXhCJy}iFC;&gRhYQ9k*m$_f&wi3eM>qNCedFt4UukpGT)vEqJ
zYn>jDIde3GdSep+Wh+-Qe!!JP!+*k<>pQ4Hcd5s$L27O@$ie{cL)6^um?Q(!WtK|N
z1%<q8ZoYg0iVSHgj^``g9lMgUj}(qo9bR}^{Cm>L?4S_R0wvS2*IDxNg5$getKPr%
zSE+DHeAT)~j#_9tf0*S??IBg#1`G;5mQS3fjXO?!TwF}tP#U0-d4<ig#!}HUk#N_m
zjNfL7^N+CrYZBDgFD)%CRHL@XfEg?d9N{cB4II%t&VwI44%s}o%$ET;vY^2Qh+%1B
zk)Sf%l9^1+#=Yx_bf+5S8IWY7DxAV1x}sq&p`?36^byg`qP?Ai5xgCNS<cz>QHCS#
z@^s0F((}Q(W#~<Tn30(|A=bsUpa86gySw{<RHF$l!RW=8rnfZ)2iQa9Iq=I~kM~6?
zWkC0}VLLWH-gbM`1hgn~Z}`)B-QtGgqRFMlxL-%dd0hYg1SljxBXa^q*R9idTD2cy
zNU2IgDV#vozd^+9Xw3<fOe;F6tS2;O&GICe2H>BdN`Or#>OdJQAwLYB<)c3X<iBgU
z1ec=><Bj-Q|3J9!<wE?jyAU&LJUtbWY~qEfy4y;5Ip=ffHx^loDaIr+fLriRCH+Gz
zmh58j*sr}j9Yg8Dv&FYH>Lt6Ia`kOuZf;GHpt^3K2T5lyg1>RqAUcab?#g(XSy<fP
zoehf<eH0T@t<Zzdoi5W!x1bsD0NtMJllA-idsH~2(WWc_+1(>~yzT~2x((YKA9RS=
zn4`5dBirc2gzy-9Y+!J(+g746UIBn}9A<|@B<7d`7s1pGICCsF)43nX$;p9MoUlKR
z&h74`TbyS5k7vQw&Q9Du&q93c3*N~8Ub6O%`qi^%#P+Z-rJ|qc$H^{zj7IoG8k#E{
zFUdS^VAgBjt4?hYdMDSV3b+{Aa`&5=O&j7PkAwv@AJA?tj^`Rr-9E7mOtPNcb=HM3
zL31szyFILXJOOnfAVLtmd<hV1r$7(&cxdHSrFH^N!Woniz=pxh!h(7x-u|bCcRE@q
zP^1P*kmJUEddsyAiZtgnurm8oz3e(*yaVEpKCwQ)_)Seok=o-lT?2T|Omd^aq^>H<
zPoGw$ITp`@b?(-{&)tKeI?WSmS}Al>Qv--JHyeNMEUvcm7kkIC&1Khpx_|o^&sW#I
zXh%fVB;t*x=r?~gk(n#wDu8gUdMxEq`9uR-(Jk)<OuQEv7ewS=<l}MiF=iL$e#}h1
zT6cM`JbQj}0<7`X8%cD!%^;}|r*OUmqJj4IM>e2hD^s5?OO4fnzVa>3d00AmiKwvf
z<diatU<UP|^u^c0pTFLzsKj1ebp0-hJD}WUVWo79_pX0==@7_vt;3J~%Mp93FN(Jd
z#s6!~_=NeR%l;o^T#oME`OWOCC>{nd+DuMNJPVQ~!NOv-7RKY>vjZvdE-nq91`HcC
z(-IO?m6fL^C%fJwm~pVO#zZ&6X9DzRW>G`HF!01|;TSTjX==U-4Y`oL_<Qqd5*a^1
zD@fh&sGK)z(23p8Jy~e3d4^Bjw<cAury=HWG-~r*2r9c?LDkB>M4DY=PaZ|26|zR~
z$QQ-Ee@*PP+dV@<ds!Hs_@UrjPF1^zDZ75>)Ya7u%htt72AvcyG~aXt?Fv{VL@i#Q
zh|NSOOc-y+vFgmPE=S(B_W|3*^+*JxuY9JZ%Jk&q#FVS67_4a83+JE-G?VssGnw;A
zO6m9(KQl|m<ku5!d3kxkdOn0S)A4X7NIaUnM6GIT);N8!&Fc}oHY6?^k${@JHy!0?
z*+}<yBA)S8JnFzXct3SJv+oX?*=asM_U0fhs@bDGs<kTP+m>^av%u6eZbAN<nS@8o
z$I-8nD!#X|sR^Hn-(w3A^`bo{Fy*#NRLebEUvGTu7gcN!c<Iy9N=M3n=WHmBWelfs
zFTQzO-+=9|R0#9v?FcMzjf125A1p>)@~WcK!}nGc0>aA}CJ)C%F}LBCINdNPWYXNh
zgPrcWR{%JgeSLkvq46i1TL146|5jcQ62E+pDCG3T@PvQw6&BK=3`m6H0;FtdFPeeM
z%7B1p<LYKLjk&pr7y`fquD0{4SdKEbFCs#=Geuk4O3Q*ypJDx1C<ADKSX%1wJoPPk
zGN&MMtc$zoSfidRKfC{w_vwlU`5U72%O34C;t`|aBLc|}H*b`w9QmZ@n3)@zRhp|B
zvMa1%DK0ok_2o@X#XTPy(vDi!>B(5_&v$^-(D)T+Wn1?TbCggmr>97{%)A~?QdxJU
zq!HaD&Ch@f_VCcceQ(YQnc4mNd)QD|F#PsmIoIbIvAyk0N!)7=Vmz#k{L`Y+(n`&z
zb@FLH{ki`2mNmn_oifTOj3JK|{~9tD$B>q2!LYt2p3BJ(@7F93uty;w(ShDB)-B_i
z)&M9i$FeO=d|W>^fiwdJ{^nNNe2tyIS~9>f>i-Ji1+vNu5A)4X4qyU09P4`0IWRL*
zzi*{#y7NWCb;a%YVK^uigH*JprZz4<KCx7u+GA^Qc%jY8>f=ZD^*1wE8PBC<WYC|>
zr{2S|itmAqzpIlAOA3=nf#A<VdsX4`vm-Nqf-Wm~ICE^|T3dFidaKBeHBpzN?kr9%
zdk}cE6Gh^by8r71)UU$_#a5V_u8VmL@jA^hwpC=VUY~S=s*#9|nU3QMg_I~;B=i$L
zu$yQtYH8UYgcET?0I{Yb+aJ#g2;EqDXnz#K@Z$B1{(Vefs`z)Fwhul7IPv<OAgk7g
zpb3q*SUN4oO+fUXF1ej54^dxy*di>m*=;&*INk_cpPkJwP6mn9Ni0rBfiJt+E}`W>
zc*Ei5e0!RgpAYoFiP#xUja<Dki0{=1+C{y|XG@cR%6Fze2SV09P!Z(Hh{i{xx1g_V
z5mdwR1R!=63=h)LHG||jrJzg*vT%Xom}il6Me#M-`{?@mr+e<651ivl=j=PDo5=dz
zMjJXk`xyBBU7(6=-z)61T-3BXzZytXIJcB-W9KwfwYM)WD=W;*r03&{cVo+yrIhy%
z4G9X8>%j&=#M{H^t6T1bsqD&&rI%+{;Xy$Vms1l-J3C<m13^J~AQ=FZ?#+JO{e1*a
z+o&jJ9&+|lz~BA8!|c#rt$%V7Xmb+SO1)fLJ0*$BAS)ySzhUcQw)eZd+`93XqKXO*
zw$|RH$=%)Euh3-YRY7gDy=QErOT@V8{Jwxc?r@^#>EU5vZ7pWoXYJ+n7>4HXX*Jgm
z%JqwVB<HU@3GeGnE(dZkSxw#{hPJoRbKzBM#=${p63^e-0JNSR8}15BwiHqcls!Mn
zKXp<_r2tf_lAN5)-Hco%BS^j2RM8PC^1O?_9Zuu4TWN=2UK$Oi{ZUa%#KgrNEmSOq
z%@Bd;FdD07(@v;^-PTZWSQyB)nXPq@G&bHI<X9#k#Ep-NN=kzqoee{j3KSJT&({K)
zsxdnon}zD*;$hu#gOioAT%==G-tT|_{BdJ)@^>|Lb$?P3t`^jWoJD?p3wiz$P=g8!
zshtiNMn`0a>%o4z6zjEq)ad;9{N!SZY!7Nxa#FH*0vggYGJN$n(ddOgkV6T*oUasL
z+Y*uaQ*GGJ=~rjE?dEiP(1u0((kJ4}KJ2j^FP$l;(|vyW$b>oKbUR^;DNol%RJp%z
zkMpJ@lPqeF)Cx~7_oZ2=-t)km%1Rz87uC<2%~JH)gxCaimk;UOWEA;P?wUZ#plFJj
z%EC-u#U<di(Zd?$0Yb`CcwD||BZT2|htZVDQof9i+C5wV)?2ZgTu-2%$!u+XnCR7K
zV^hjO9xss92s3>9HfyKp9kRViPHt||-Cc+)HqlGTIVYQwO`u%^(`Kmju&$xcahB>>
z)A;T+*tI7$<b2Ca{mvnQJ~?+^Kwe(L#^#Oq*d}&vP0eJrTth?tZY7xtWsjo1zQ@O*
z=L7?z+1+N#b^j!5-f%W?Zx2!&Gpyj8{wUcL((zN@bK9)toNb?7tAvNk)Sng>Nd^Uj
z7&aXh6`<$e2S`u}2?@u;1#$D~vfD6ZcP2hN0X@C3sS=GT&l*322%0!r!*8U~y-%Jz
zA(u&X1s2%i#ip!m{jI_NoI4`!+WnME`e=5b!0NzG=G5N;GIO+pWl{LMyL<7$5%Rk`
zmE!u=k`|A9r~}C3)@;5;k{_l5or6SI=Z)W)H98)%V`H|Hr$zYjSt~c>Arnqse0=g*
zZYX5UQ&a3(0jhjs=64&mMkXvKf;`B2<cE=qi;HvOixYbS#J6$owrpFmMua6Aq6fu3
zTa(5Q7hN&c$3&T$<b>8<IHQe4vJtM9vrUP1?s1Z?FmYJ8mzQQDA!3q}geodJ3d+jz
z8VV&^9n4e(q_&mecE^J|n@cI2iElD9Q7<lV={I^ePKUxi&c#YfA_FE_j+goJ!h&<f
z>-4IWm=tw6Idx5YHI)|MkFU>(gEexM>u|BP$F?{)0DLT(v4r^5Mt);qWkqHtuy)1)
z`ub=u>+9F$xh^a4q)N}x&^TQ;ye}!}irKRsXDZeibXt2#THFgV)Na}3ZwnKXF6E%L
zwI&Q=4_{#IsVN3qs=!`22u045;820F%=kARf9$S+<-JxDmBm=W28OWZhivXmTeYJG
zJJIl0t2#D&)u!7+X`GHy8o61`w5+W5YdO8#PM_C*I4i5Dn6s*z+RIE?MtO^iWSoOg
ziqZy0`2NbNY`X=IVGpRiw)WA3hg*aF$4e^u2@zRY>$wD`nAfYxN$U_OHAp~HQdY*B
zeU+THG&7S>qd^m<q8x*W2rrYw`X`IN`VRy6<_17rzn>xbM%hp`zIX-pD5R~dM2+*y
z!qLU^{caW)dC4~MCgawmHi?b7OL1vQsQTib6m$I05Hie!oSF5ow^CzMJ>V>)YqjN9
z)S~f?eG=;YL06Jnr+r?R%_rQ%_O!moTtYIauV3;<=i6+(EbyjcV{4IP%r5hJ#~cCh
z!}lG$QZn(n81W~pyFG8d2-w&Jp63OTnR0dYtE!b9<t$9GGrGM=mFn-8xCmB4$RDb$
zg-|87Qn_mA;++dE)0ojim;#rMBhLqR);#fWo}oO;I?By4X-PAcZKyf-3(+t)#q0uM
zh5#@D4Cw%IJN*YEabb-{Rt$nNA`$)*&gSqt`IHznW19RF)ODz$X4VZ5INb-4l;EC8
zCqvfv%u8pl@2_~!lfQpYV97_!TLIlw0uIY&(~6;?((CU#C+o~&aDWm_@m!ER`s!R2
zIjqrbx^!u&Ri}=Fuzq}U@&f+Jy9VGWFNiAy41nZ)3wsbBW3(k`$@GRP@;1{&pu-o4
z7Z+@{wQvD^PqU|t<(bzWCUlcf2zBm9U~yAXaJ4&MY++SZm2r7oe&mwY2=4;A%jJ)}
zQVLBEb_IDtvK~!=@56C#uw%ezYTRVM8d8Jen!19olF`_hv=Q?O2%n5<Mz61hxyX`V
zy-vQoJO|CT$q8k!a0nrcms53?do!KJ)Y#N`aeR)%pkp@P5SJf5_zXEb$L?LK5Fr8K
z*x0Y6ik>K4x@|>Mh0mT{6*e}V{`r$rN_DlYU@a4lukQ{UvAfWIv9vZZ40<6zozk%I
zx%~Fa<;QdgJ_ZIh21X(~d202sov{ozU!0enf{?Yfi31x*-u>Sv=Zj_eE_<>KtTrjS
z(6%GqGq^)%F=VjuG~z)G80<=5d(grHHQcpWzF>#>8lTG)St1wzYSmChJ2oXn(|T1<
zNy$)6ZFj9pg|U{Bw%NcD2($uHJGw<@=Zi+&-f7cPt`yhQ*1BJJ+^%<r%ZL++V7gxx
zM7v!XF_m`m$FF9-b#ibVGrERe+h0YzvXGk~QO~D5*{dq>XR}&1h9#v_ei^5&;CQZ`
zHIb=Y1azXq-#$j>2!wx><nz3XkR#gxgrfW$lwm%vut+ptc}~xTZ^-aB&>bAJl4C|m
zW=ly)mQ>inLYniU4O`c?X(0w^R+c`%7tGC!@VnVL8|1i*6XfOQQc*Ih@}20)T3c&q
zB$w>IyhV$cnfbYvCE4|E?!_&0YH*EQ#nhCMd^#Ag%o9AjZ5NMq?(VUsEXMODrxeHi
z9TR#L@_@M%)s<r>X8KbNTWqIDNI@yR@xKvC{sjhxL&58Kn<wtVFSva%(<U>p;27I`
z<gz;jJApy(CtcyBx(vfoq$C^I>th;a>T0~X4*)qipa#em1ngl@kUqE`642X=NJvnt
z#M^L9)Pe4okUyGraL%x`r3-C;)Mwk%jptC=t5PkS#nEih`b_KRl>(AH2tnVr*)4RH
zr-o&66)9uX(d`mVCo?hmCOKP&*MiOPdX0$;Xno;U1D}fK;=i;_Wh^+o05Ch_8U}ZD
zy24>%2M357yXYGgfPdhirxz$4Nn^dgyB7_4m6}wDN;lkR5Mn>VM6W^#R%Gx`5rDNH
z_;I-`KHJ&p8;gosSy>qxa+Zw!s?kmSzLU^!h6DU}#B_@f4|C;skk;0mKn-SXIk~i$
z6hR~gCG_X0$&8<n9(P}Ib5D9cz|Pry*Gx;|`pV{FH@+}2F*zxo#giIuVzF0_5lx=>
zxQisd*GkP7HCLdjs`?Y?s^Ol%6-dIueql~b=_W+p9kwPL<Y1qoAkX<vWI8%h!nUY8
zZoy8<o4|+wQzx>x1kv9buvupY$~e%5LdMk^U0C>xCpF7uJe-!u?4T~FhiN(mKpIjc
z9P}J2`<K%*Gh&6$c1Ou#BP>Ti!a7E#LmTP4PtcIW#zOXwXm2uw@vbtfFMeEHpaN}j
z<ILdHfOgMterXsXhc>-RgfiGU<)Bs1x#&t`aas!HSQMPY5FZ<5V#<+Fh{vD)w1(Gn
zBcS2ok{60tqU_XXP>q^%c|#df{B&CfxA%)9t9b_1Jksswj~=zya!G9C5x%xtf_jWR
z7#mvye3yPVjq(A51T2n&So^t)Rr!+Kli3X!!&Ckfp_!ydza#InMMK3&;v<I)tg{8S
z!|u+u#XN{PnL}|J@b91)4q{sd>0*Q|o^#b|=ZzsE)xhn{QOEEgr@b@_HgCXyoE&Un
z|KMJ#j*AN-RqV*5!e4PFwSHZT>Ic>;BRVkA-CSRX;By1F#2Buks&hfuw2W>wKrt}!
z^6FovNX^|vtqG2ke2VB`F|HgJ3C}&MV6JUxx&Hxw_JDSQ>M&YDSN$a(nL$}GMp;P-
zgs%mT0<rmr5An%Fw$WzES^WU4$GjubkaN!bPa9H>+gPAX85@6^vi5L*Z-TeIyY+Ul
z!aszABg^`I2xtwLXs`pogwyC+7id?2Ek5%$^-jKl4@V7Eun({*+AgucVGO`lM_Sy$
zNDM4oGJC*yR9b)JH#W8wx@<L5W4FCVQ<}ix1z`irgNm6M)#RolBBuqz`s+O!1~n@8
zE&HJ{LzRcS4giz6F;@QZZE9)?1mfB(E!-p`<3#!?C@R|Tj0p6Bu?lZ@n(yI6MtsM_
z+<f`GQ>1E?F9m^yBXL)f^6fB9>5n&}oNccOX*)IAYS_Ny-D@!`L|K*oy8G&ZItz@)
zKfUp~N7=2Y0p|o*88MzHnOYX&D!yZ<Z)lXbl??rI#laJX*dU03i78>V%EiTXZj&CZ
z;1`MDu_~DM1!2)xl7(`E?J;xQw=AN9T8Ga;v}yOF7=wztyGPASR}|N}w+c6fTwIgx
zj=&DTJXC6l>V&p=FYotT?q<xbX(>&crfcJzOa9YTq{|3=nqTCGLup;kdNlJ=+lS)K
zOGLw#%XAKsKlmy6C<Rg9Z{J3VXC@}RIiLTnzE{FQz^b)1C2uMl`xLI$kTKb2>@>vr
z_h|YhLn6=VZ=1xmU7@^+-wdS9T>}5>aS@L5epII!PEurQYR45%gVN2|kBdKh!_SSU
zqk~Na2X%S;wsuSc(EDaFRMDoSUoZU|B7lOZrka)8l9)=Knv2`Tg+5xd)XwgRxv*50
zQo8Odg+RwA!3(A;%2>!mixOx_{pAH9iLmNvf8;zPN|9?qW8^xYFixI*i^P@Fx}84n
z*4QMi<%f6+K?k-B`$+crr6r@w7rDGuLM7~j2gnpZvlqkAxV@mGvm|QENW4i)Y4r2P
zUWfC1Ei%nV{zQ#A!Co?=9DQHDbYMg>6%>%}>VYW3|9!4UM>8!g&FU2+=GU@F*a%(=
zQrQ$Emd8xJi?jC&*=MmPP^VzQNSL$`ADSu}B#^dJP#|3wb1obf25s!wy*s-1SkIrD
zh|IXL>Zg<maLahG2iCp;x-6pAPDhWWcQ;$E&Cmlq)6p-gV;L=|$M*=Rne&Dm_4@xh
zuJue2=70KcF?R8@bf}zXDZ6ABi8;oRdn}}A--n~75K22EqgZI<{^=UqUvyuf<2r+`
zbUlMS(#XIF&nmt&qltiPEjCwgwO;}~)7nZIRq*Ft)3q8joN0ZAUx_;O+&lkl^z9?w
zY{~XURqg%WQm}p~W8YR7f3{k`8VU?sdBLDsw2ka2JI^z3{NY14?nnfTsIeWquYFXT
zXidXc0{?oxPO3Skl_&q)Y%rGoFBaiXfG8{KZ41m`CSTDBpCPBZkK<|YxB<KBLkC9&
z1fBZX1-{tR9Gkya+FJuQ6BmY&%sK|9L^J~P@MK#nR3zl*JKeJnL4|MEA>6Oqt9>0`
z^Gf=A_)zKk<5V9v?bMmqBEr69`}+m_m_LL1<%7n3K0jw3Xkx6khw(Nv&|`xvmHY5%
zceaZNc+}RtK|T~Kgj8L2`Psau#gggm2momne?B|}JQHG}w-8rS6jnR}6W$E*UH#P7
zZnt?1@{e@B(9dIGSGN!+2M1~o_eSm}yxo&A<b>*E!)@BhgfB1t_YK~e!C#Wg0=pSV
zaCJ==zqL&5;w??UI1@4-k>uY9xKYTaA6oPXaxaxZULGEnP{;E98yf%oXYZ@GgkpkU
zYtd!!Is5~r^^!^Ys%zN$H<9=ry;}{3oeCV<aoUIfwfkV4_0C`=W_&pJ;fGJ0^PaZz
zf|fg5<Ks72Il0b&SMU@KeC9tlk>;e9h$owig1e=!Cj6iTK-`nDBAXkIPRf?_#y+!)
z7yf@o4bvWs&m7L<TnpDODThZN@nq2Ko3If_>a>MeDy?wAaB+DL5jb+u^;&^@H`hjU
zbLu;|uTP$QEioIx>F)Xg`MLM_On~J(bcL39gwh;g`iMjC7ZUe-(*h#L2n-gD941;L
zf;2UK!z|<elhj*t(-(06^o_5dZ2S8<zI^dh?b)2aDGKgyTP%@&<+}{JkBT!CLgw|*
zAJ!a(Bc`J%L@(;q3>>C^c@WEo4U2%wGA=6rVH^VMYV8o6Q!;9x7HWg7amiMTRHYmj
zqFl}%RKd>jH1-R~I{n|rnpJ+U-siKxYXq40*!YiGa|NrcQp?>~QBjAo(Tl6^!acK7
z@*%;jK(uNo;!o=?I-YE=_McM*=H&qQfojih-D?YE;$~PFciCsuC847oso!XQ7e~xT
zo>WV!2#c+hbj(@F@PNyNh%4~-SO52?W;lp%L}S6=8h{Ghp^fq^W~J^Tme_<rY1QTZ
zp`ZC=(_1jo{9~%S{{0_*_1`9NfUNoK%)8d_*J<D|05*TOJq;zML5nmipt?UR6*rBx
zNrTenaCr$&`MV#muPFcLFoBVIp+*3s3+wiD=L`QUa++^c%0uDJ9d?e)4+-g&qxuuZ
z$i$<1bC{eM*(S!$QbhX%8A|^iKyQ^NTKF)paXS7qOyh<iLVGz+FA_!LGWKNCzwF~-
z5;RI|#-}ic7_a8!U;z^Lzn|3Qvz`L82F9EB-^@m~QuDN&so5Ebxg|U7O;^x3LT+gt
zH{S5Ny%D0>N|Y~fKWTehADf(1g2z3rwYtsB$_j~$0q!tur+YdXz8hU&o|%0DP~E@*
z)9TEWJ_b+%3iEXq3$+fU|Blj{iDxllwFCvmS`_Q+y3tJVO*@evg^2N<m~48eT_yxB
z_;=%=%|1hizAykl-JjYI_4a(<0fsc5)0rxUw)3kXTPn64UbXpfVoqIg4{~OfG7~GS
z^`|?0_a~+`jsF5(Vcz3hDTS(~#^@7;PS?Z3!o2buf}5)$sP5Q<eKkk&efU>{Y`PZQ
zegu(Lj`RZOjxL>1#Z+HFZe?XNI3<Yj$8^{0NaIpf+lzdXHlZ8PQExK4xp*E3RI@il
zZP(?krOM>dT6Tw_EJj00lvosDBx<*l`Jm*n^<B$LKI%zeOf*y*OX9FnCm|+2*%<e_
z_UxSQF9X5M&@#|wj@N2fv+}wb1U^ELOLzKv)x)4RGxOp0LMI*KaT=#_oW$xvz{Uag
z54Iog7D&S(Rd(BP0PrU_^wn2#Yd~w`cso7X4rGK5yEZoUJ~2F6j(3<m-S0Wr8|G`a
zeiQz;3TO}B#SKDzs{is3kG{tv;MKF;?#RjBT@;vh?DKAK$24eP*}Krr#-|sv?{W87
zte?w!IxXcVnX@JVGi6k?0u_jHxQ$MSNIf|*FME*u)pyi#wH?C=(I3m|Qt>=J;RYVn
zG0-s*&&(Upuxtn(({X=*-5r&T*W&j0^=hoZ=j&JFp`@$H`1Fm<RDcKul)4c1HGdg*
z!Lglco8y*S=w?6s)x&j1PtSLvc@D4x28jP&zaIz{fAPJJ2$K6+y+x?J)N0qg#n5`~
zeV{;-;#*(;^XJbE1{JS~sVT?l#jAg?6PSWX=qE&UusMLM`vNYB8<|t6XLT{ET5If?
z_8TU8rF1$)+=jz?dsy_JLK}O4+Zqr+DIt~cKDW8qV0wrygkGe(s_j8ROzgW9IYne+
ze!l<4`s3~Tcy*BBEHLSML3_Eu6Oq+5H<#2nM-VH~HA!7>z0}hxn0b9Sex<ISgiOC-
zXdv|wl=90<sULjf0m}%Wv{5975}3BzABuetEAdi~+@}j~RlH8#7_R~i)Xwfv9>)C*
zgXbo2K`ezu5d9rHW}aw|!Fa#%>m~aZ7N2<w=lLuqlgPKq-9)Pdl6)3`Gsa~VZuW+p
zsN$yG;kB!Oj<9HVOnkijTYCCWGv$#C4=RMgK9i`-&&TuaKEC3rzKTcZ%T+GAI-aj_
zIfJ%)zt+*w0njmd=KIa3J6l`i3b!RCbU6@(th&0o!a`<p@+o;4y>-lw`@$AkS<Nx(
z&(Xtk>_NzH!ElTTK+v>Fkmx-7yKfHTjQ*kz76vnuG2OyG$fjKeGV>*eRHJed<NNSs
zE&Ro73x*e&fV3kO5G1}N|Jb6Mk&04YTFTCGHDF$LH~xJfUdO%qp{eXw2$9pi#Z`4(
z-Qhw-Lw-I5D_KZ#9U~=W!gxI0>M;q({jzs(kmsUhrM;bCl6(i8(t<*r_4WWOS~E7I
z`kw*N8)J>l{QDA&Gil|6b-ze@hY79MLDyH_P&+<(eb1twp{ehaJ?2gG8Y89#H|Eee
zu0s}0glo|?gGqfYhH(ei*I&NGjLIKQIBWL_zl9dE-~T2u+)Cr-)%&?qq0gckm&&9+
z)EUl08sEP?sB=D3=2<doVmq7)oLzDScVNSGcso_YangZ|*WX{1=YHUkPPKkQLc_qK
z%Yj3#>n2eJBwJzc<h}T8X_?hX=0zCC<3{c_wBQRiW(;onib}JU8y&*_I~T;Y8N^rD
zuV7(P{Nd4e1d!4vtD=m0(rZ|=l;;go%A`Z<_ugvM$$~}7+6~H}Pfuv=oK~alVNh~u
z!)0DyUu7`-O}ZD<6BMw9zyPfS#wDjxs5n2ruBd3Yia7)bpn7{DOdh`$+S+~-5Mcw;
z@bOYjtc2%vM>1c-W4xE^!w32A;Y7UEPQz#|+m%!Xn&i=Kzssh9ldi`TYyp7LrtP+s
z<Z+GU(fz)c!n2g2!D9c{?|>ePw7XQn%#0yfn*R)G43_KT+^ng=tMaJcgzbGX5(1m>
zhHiAt*t#Mp+IbN3SD?Mh(t|WFK>GGiOr5W?sU_yC81G3EPI+PhKuEZsOccQR99mgR
z*?*;l#jP8=sWvtMGEsT@RMnZ&4I5C*BTk@z7yVo4ig^e);=b3^e9*W4e0y^Pu*8mz
zj(9j{N(CnN+*}jN01%Ygu-2IDdA5*E9ZRBge0WG?(4k_eo+@nND`>h%`}YN0>I1=a
zzk|Cy3%$6Qoh6vBNNtnV2<9EmX9<W6i)oXK4P0Um7_vTD;2I&SFiAfbV%Z^ij)y1U
z6r06%G{?kP{rvw60-hEBAi^w8Jb05Ofc&0<--EsIAOIE?t(y*EsW%@tuA4w5<wQ!K
zD>?PNOo)!3RJmwSjWM73YDf3)q2TqMH;t>?6**M)mk>H%qY+6z1EN4dcoVcxY*a34
zW?SbyMrHCU<+i#j`PI!rv**J0`D?GbjYX;-_F-;RtJBc#XGnk7yCEoNF%L1ViD2Pq
z-+fxI`*&~nX``OCyN5Vy(moI0XM|~&o1x%miDTXA=?UPrdc+9d8#qv_g50m2?IjWX
zQdn`Ai&<NsR`-|+C>RO|u>UlgVRAG3CW<Qp1xLp>Urt+DkmSD-ruYXMNGXJY;jYl|
zHX1M+A@xJeZ+rB(z)p@Ox!vsSRPdjD!;g4<>+kCeKz)u5PE27G)XdCm?=HZ*hVxcT
zjILS0V{0BlCiC|?{O`{NB3~Dx@Z)*9^*&mTc|yKkISti-poAABZ6>QfdIFw_5QbLQ
z<y71EPtgGlVMq*~6A0Mep^7F?=XC<E%Gk&kk#EvIY;)x|>aRfnC**B=k=x&|_wE<4
zM}ldW{qYsCS{QaCUZ+7bGlFmns1shjw;u_Mi;9j?*0i&5`EbK=d&$nuDk3U6oX&k5
zmu&g4ms|!kfOw{icF^TIugA!2(LbRD&%Z!Fmq}}8eW8ko`8yHAXrufzgYnMS=X~mq
zMPP4i>@T=#RfJU*XEc-m)J*jcx2PZ=y?SP3282_$><w{u=jW5~xI1^TO@CJ`WCIFV
z-)PL2W$Lw``!6kgeLn!XFH4?`jD(bY(Imyk)PbSiDU$@S`+=>ZQ)PE`WU7!?c&DgQ
zXVC;LEUG=8a{;urp&zKzS`5*>tq+&U;x8%W6P@^++v@7#4QF>jIwb)U_51hr)zt=9
zX}qD*q0!_YlOPUz6zN`5OG`)V>vmVEMM%N)R*S8vAySDvE`1wR>7JLSP3pWRc7y0o
z7&0Jm#=6}V3>7FSO8-`{FbDkdEpur4BmJ;2<f;G{r0xTza>TZ;?Ac9f1ON2`)T4T5
zcE0Z%jB}<y2jrGVWK~pfiHL-Dv)0x=Ame=V_nn-aW@)U)NAj)A$zf$=T=Cm4C9UBy
zKTg~EPDwpJK5hpcz;BQue)0S9U=iM3W4ndpx82XU#6+fAeTt6*HVKIeMyk^#hmKB8
z$F*)wS4$R7P7{}whjXO^773g-GYJWROl1&p@sJx$SxGl5ugCrI^wx9Ye20^=+&*pj
zY=`rgJ$S0B3mO_qTf;uh!ti;~d$Th!**Mv?C0U2&eGtT;>pf&*ej8P}6*Dn$l$KV`
zX;){tbhkOJ1L_$9LI!&qM=EN1TSwbGURPJ=QK9@zUS1wIH@8R#;lZj{x|%^T3%vIK
zLLXof<ewQDKUH=R|9}9Kw<wJJra2gei;KDM*DsN(Z}Ka^jx4gBhNs0{RbKuA37(FQ
zF1t@dT|+A+)ikU8yS1EVN_v@<o-K2D_u1toJuP)sv5VvH&k}Ly#1P?L2TN_@54~rd
zTXG<jGc7VUF(vAUG%gm-5E>FDlCO`C50K*8^W4DSB;8{EhQ~PD)@gA(be%(O)KF2m
z+E@>#aZ*$r8K2+Z%R<T6T@LD_=1@@qiZ$1qFto6RAEd-tmx!MEd1OT`bw!=`hQD&^
zq8(lzkkS3E`O(Qder)t2r5MXvhoTU{94!dLvf8QOSF6%az2bFoc6QEUtL`2F?8fsl
z5K{BqHc)tMem-BFUs+pwwFoJL3Z6Ym>=gO*`@+)DkSeuSvo%v)bFdjs`tbS@J1gsV
z4$xD?Wj7A<Z*r5fsYnmEQgXNm$jrqK2`xeWFkkiL38kho?l>!v&4&;07K!toAGJ#Z
zD<-;TeZ!Pruf)g4hdUe0k(6m;xneW<dA!?ck-JxEo3|oEX=RF*nmzOMYRNbVc$DUS
z`I5z)&`p5_xkB~F|3(gPPw1_oR_Y<$AnM{`>cGUfn89(GwK5ZSEFnDC9*no;SElr+
zISA9yj*r1c7Xm6XG=dWN2@fiXX48{^_A4ef)@Hon#$|uHw5GE1{NiMHXQ#NNC|fX7
zR`{_GYK8VSGC5x=_lAeK4%t^kbq+N6K$moXT|-6ZcxA;IdXOl03vOPa^hLkrhrMZ#
zgq%cRnpNCPYduAajEv0n1MFl-+94ZLPy`AuP()91Oqjdy&ynQ84hMw2Mc6$PLSMeV
z;^jcsv9s%si_1GbU3++d{2j#4NpT1h6V;qu5$)}(mEv%jti6QN&Ak!3XNX6*9-3pj
z<|<19PfKCEyd)eZosvNUGkRX^ZE0!2<<(h#&wygsbTPA)WkQ9bx|TvG9Y2+|*Q0m5
zKd7rkl|Q24(sQu0CnP6oH@NyXnUgW?k>KGG$1N`$^>io2r-Sv<k&*%nE32xeyu0}_
z(vi*_79H^HMWjX#4n|1iwzRZ_R3h4M{{H=YVT6;Hx21%R4zNBYaTqWHg;_Hb>c_8o
zx?P-dquUyn%=H(Hy_>f8`P@vb838f$?`RAM_FCB3MoWgeW_>=E1S3^~eoO+avmb3S
zuT!%}vIH)J7SKB_mwVoSoq?~qgHxu}ASQg7oE)D|T%blDkBfsnl*-Z#NVt5DMsGH|
zFat+VbNh=+ic?<^k<2#OtwS#w9R-pxpZi9xu6E_-f|o0MOWszx!2YvTNPK>LVxo(b
z{eUDxGk|XMS0NxE0N<$*;&ADAN@GQ}hKh=b&P5+)8xbq9^b1;e#-H~S?-m9-<Hxr5
zl5GFpoTDeHisJ=rsk$szFYnT@VTe^-LtuG-)ce>_R?~jKU|dXSn&KPrTKSy`&r|^(
z|B&1<z`G;dHJ!#RHKmV^Pv_u%Utd~U+LE10V`}pGz31uE++Q+~hkC)x5Wiuafa#iG
zFpw4QnQ^F0-`(+u%x81EK(XMLi&RRn0)=BlyLFmXb##UYbBbrXW*f39qw=VlOAAVJ
z4;2*^8KD9|@=N9Ihq!k)@bl-u!UCqpUmp}Xyx|Be>>K+eUfy*98Qc&FSeUDKLU1NV
zcPOr^Ozv(}Mqj;mE`LBl>Qmmc1adOH3aRxuKeHMK2P@!@%SMvym)JETi$v+&-18j7
zdJ(P_b-?Gma!E8PB=+%RCZWn}lBjeZhoH@h7;gpjl9P(E`chjrZp2F#S0QjjyKu;d
z3+;?k?3Z+O(tj%;DNL@8yzv7>8gD=DuM5O0+D$$%N%#~#dBq&$)X>mrZT)juW$mE_
zjFR26Yp4Npr}D`CY!03>NVDIm*&#}fQgx(;Se{@&q*ddv1IYv<RVhJ>_z7`1lJi{Y
zO;6$DXtLh<o?lC8@gAS=Wq&+%H7(C+nqJD_(!$p`x^R;ff}1uC^Tnkw!Fj*#SN>~L
zaSpVMdP<Hz-$_yU79@Ufabfy9d`9O~RV{XQ`X}-zPhEx-I_8xcm`ou3QhZ^lB_3?p
zt;Roo*oWL7ru}&!Y^FkETvgJESCYwyZE#k7KMKi#O?+7*!e~><?c^I4>4THo%VN)_
z$%c-mqYoVPj$i%X4+T6CQ#sOK)FL9!+Zw2j==WFTfEt&#wR!2bw^yGnHB`YQjm8Ra
zaBz5C3{GonYx6iZkLLPgcLKv|H6sfP{%?P;x^xVrmLR-N$DAvXW7}kfGuXiJMU0<%
zq@)EE!g{QXBYf`}N2aHRNLY}}5b&p<!UdHRa$ZRY&9VpIANL!OijJud-e1|%_bv@i
z&0wJGOfxqgo8nZg)7jPi)D!peBKdbAzI`m;Wlc`xIkcz~MDc*zIXMca*PjiHAFW9p
z?OL}lNM323Qo@2V@VE-JsNg3qR&qVr;pU)&Jx>*a@!-q$&a10SPDCiKgbnFlN4|dY
zMb^a3Xh@$9(I3I|819~hH?VaboNTH<-H64H*!;I0iLby*I8Q#dT|gcw7AiepA~-cY
zzPOl4YSU^pIP<SO^+v=FHsfgbkj%Vet95r4gRoANNu;>Ax2lpcu~aEi`ZaNJ8`=7s
zd=WI}knrd`TC+26R?4SHO1eW|Y#J&xUU2RU+BNs>bXu{Ph%z)Y>Rmr^b!|jIL?O2R
zucC$_{@iKnqN5WoHARCNI5<Fu-Px(7#lq@`V{+V6Y&DCO=%@9@V@f|-Ed3ZhFtWne
z*TG2z(IbE{gW^2@e_!H_hzX^IYp<tl-9L^8iA`c;@&y&oJ&ewWn^BSozpj7k&xnNV
zSBU2fUwsV>Z1^b#LM|vt2=xB10w-tYDSj2CPKGHNDt+^$gB4Y>gyRBl1YHIp^js}m
z`mIMRuGApyH$gc!w=*C1h5s5eFj5s?zC3*DDzB)(e>bY7MPz#;wY%6eo-nm-TQn}k
zR3MsBA0IAivz#-`h&sa*N<&V*6$5dqu6yf|rj6J9_rB-B780{O3C4XwY%k>F)55F8
z16iJ#`PRM8!UAWtq1D2?V;bI#6>Xnf=rg|m``G^Qd2O*%0jx%9?a}b~^ssAQG#<WW
zNKR_11q$Wrx4);f5|$|e|67*u)hhsa+&Y1eVPgVcCe=GIkYP-j`n+7bfn&^A7W3IR
z9GodFt;3z$f6FFdX$oZCdGJh>rNopBNx<jND3Mh`82ng0Qm@L}f0WyV=8*rIKc(~w
zHx^3Pwp-`KKxI>rzKM0jzm)(COuacA95bxWYaBvgmh1IDvf25`VzAmoI3!qBI(daT
zw!Q0p?m`wA8PmOfadE-Oc%$0<m%X?0kWt*MyMqFgz=LFnFj!fvO8e=E&F6`Uv=f%d
z@CpjS?wLJ5!F#`oKs6Z|TsVZ}BNi6reysnUFHg*j++!Q=ErQRAsgM6y#8?LZ>la8L
z26!F1VXMi7^mgzQ1xP*8(8SWaBgA5SI?&P1|L+#UM4MS#dmGLml6r3~C?W7x;YEC>
zIZ8gqHzE#<RP^ikkBbeXi`3)qx6x_a%HOknmgr`T31_lp$-Lv1P(m%T*ibjh!eY3~
z(#SW=NZT(#HueCE54WE1b6LE?sdm8QOp=a)fq{f1UCviPK)}ezC}asJQXPRcqLmN>
z<7B$+;ezjBoi733bhgqEShoizUIcf6U2vYI4Nu9v{)L4*V8e|OBXf=0Cw=|8ePY7?
zGbiuZw2s$3u#kwVs?L1p@P>T0umCOE<I|b*)xEvFm6diW1TI~!&wt(!UFM3HI6GBi
zWPnBOErieNA^7a6;MP*&dEtdeoB$0L6y4aOJ<G|4A0cLG(<l<Mtf5yi+U_mI#M2S2
zuWv3S@LVQ4RpRvv*}%ZS=Wwr5ObeQUXQ#Kf_iSr$oHispT&Lc8^_s?Vp`MAFIw<*%
z+Y$6FyzB~!l9T6w^^Q`BmWD>(D2HRoc|A8?JL|cd+byudh7vd=^a|l`0{7I>B#F9-
z$&QuRtp?C|7;PZus993FvaPSJ{fhfzIQb*12eAgA7-L(8adn06<^#t^NfQsd$H*_>
zQYK-EUIkKF_dk}IKaWJ`=uM_??&e0C%SRNYv|jQTW(CR`s_K+YRCw2)6;e}|Fb52>
zNvo@>SlF42V2+YBAwSD$ABho1kVN_qODWG=s6>|Y(qTopFNP7b6ArXk<~Z7U7Y8=v
zDeaf|3BSm)zGq}y)eGmnynZPIDVQA`U+Q=`p-2m8#uk&V3h3!k@j54k#(zo7&&mR=
z@Y`frlbQIwmohvR_Pg?yNtHdbRmSM(=;QWac>pd2GDGukV7+2t8QU8Ce@wl1Jk|gE
zKdwY&q(oLUWzS>p6|%SNmAxHXs1(`Rd+%dqJ9dQZO*mFKj=c_Ygx^EG-k<NUTetq8
z&N)3jpO5Rh?$>>!WccjxCp)>jUko_<LCd|FlyQ1nfGiK{;*uD}_Qm4#O>lU)FOcCd
zcmP(__*-nmz~4$LR0y()CQEcW$WTY}?!CML9|G*Rw_fPG3?kq|LT6h*WKW*>fP_o*
zbX;BanZGjJVGaZIG&92{c<J67Af;_8vI?uu45)|z0hL_x=j^oTc|SyhVGMfOmMJE@
zxgIHUOg~5NnfPPXC1m?|laJ7ipyR;`c76iS7X{YL>kR9^!(ykMB=9nWaF6so0i&bV
z{p8~2GTK+#D3yVM0nPH6z#A6>B+`Jg=XVg3VU@PIyL$<=u@6W|K_10M4_(Fzp0)Ss
z!K&!l^w7b<K}l)pBcH8`zcDVCz&2pLI;<DmRF?^+D2U}?AusKNP)9_4h0O#^wb9AN
z1%pg+l#`bSWAi%uIJG3;)q3nLiuZN{a#oQSUMIEMt5>&KE`gBD<&!G`NR!cKlk7eQ
zYU$CBk&#5y{Xl|EeE&X>q6spdZW>);950U@sd()8e2$st^5EbBEobmoR#KX;wvO?}
z7yYwDMD$3c#4FXo!J(R+*XhP|vrnDC8zKUN{(%9_$f3I=B(962iTE}D!vfl_c}p4j
zo#r8blL9$gS7#_$QEJ4($Ve1ZllwNMaMC0HKS1WsA#701AWa3U80IO4!G0|-TYHs#
zdAjI-n&6)$qYIKoJa+WGzk;b=!;IqSdQl&|#?WWG2G}^OI5k-UYSomPfKqQ1NO7{Y
zu_;U)^^(5ny<t^V{mba$fGj!l_v>?9^2?=RQ($(Ta{!(e^|{3?FFUjo>Zjj+sL>m9
zb6Q$j``KE>W>(+i5!JZ3xRDsKZvxv1J{c(QL#vleqoF{GnGzKx?x=KhZFo{bLZYkX
z%{ZU9A_+P_@7dKOdWDa?vo^7?0HRvt$_n3wX{?AkTES8rs(GJ4=ru~;bt(HL$VKSa
zNEYO^8_9lopH+GUYHm(C_eEUPjy`}!3-L-hr>FghOcGa^`-@0`!}a&Zp0CS>q5;tr
zJOxbg<(YwF70@}voQH7bW)M)({gP*6(XalZ*EKhH4o=D3ExYZRn({w;LBNJ3PYY3q
zDoil+J3S>cOr+-2Yi=mdSOB+%|6VUsq!6aCAYqL!=v&@U?ACKS+L6|!-n#-H-Y0!@
zSpruqfn;9wtDwyTS{O-{n$VRHR<-^2*}|pYRGC2-<F{O1^3G7#x||$I#yGX!p18{^
zS@CVg0*zQx6#+M`42UXPAyoCcpbZ<4GT+Xj<os|apjHeHnG27I@Vh)eiF_ogv<reI
zs)5Uf>Ug1-Y^;SE-|w-Ei&!dUNne78cw8)+tyVdr6ySikI!p`1{<L16wHAGEZ~s8t
z#iU)P;@U^e_;&(}^>m4hIQ)KJSw*hcD>e2f@LFRvY)YKH0Ozn)$!n80Z=^gJ79Fgu
zv(`T99mt4cMiwrPd1n|jaWB^VFM^ofo*zwR_#W$ov@&#qR`}{6sW&7>fA#|kb+EEa
zrui{Ed>1FPpB(rCp_vUDT!Y&e09A0L0Z}Cv`RS?W47V^9$(9RIyppC&v)G2q4m-Wx
z<zfI4>NYsb3%;aL`JWQ`|He-9ZaL^>iUri0E}+ZqK#3_+pGb}1OWg;pLb7s8Sx}YB
zYA=XW3N@4w&}fiX#?dajx;trr_G@X$1oJri_}$68PozjJ`2^o!ET_7Y0u&fMix07s
zat@}*Fv;~7eS1gj)Z6WU(ztMbT-Ul9NWXMvv0L<_0z;c~!e571qhPntlD0FdKhwE2
zUG*2s>o^VPA3&<i!u`eC0>h~u`EFH&r|_I&Fr2XD8BR^dfG=N$?Pu#YXI><TWC(e2
z3bTYOeL=$5iLxjjFb~TgZ$XFP4RDdettxQK#c3967YP~;e}_#J`~Th`vc5*9tvyhK
z5Ei2G|Fu80;28j0l8<Ly+V|3!^IVO4G|H^a3lbLu`54)3Om`Q>c4Ho$|L%6JRj9FZ
zQ_N86taF$>p4lwl^<KGm-#)?dNxYVpUado(n{|a^3NO@v6};;0vgntMx2X6Tb6&9e
zws^1N{e6%~PB6*}PPP(R<{D3Mq$wNlWiw3lNybnVV(PVVU!3eGU=t=Lhh+u%HiMP5
z6`<$9H&<q0=y7*H9!K(XJ#Y2iX3Q9Z@bE;0g#qPG0o>2e&s9#!$O1qSVB-bsBEacn
z<7j(waID+x?Pg{sX(1h0kT8WgqB`E5)zeci-jt>HC@U(<51vV;Otvr%%&Not<Qq$%
zh9$F<gA~Jy6v0?oTGHh?#>xWop3hR*{^wKvdCwa%GapORLLll;b$$M3lkrvUa>Kb=
zdn(dVF2#pJo+>Y>d~YiXOyn=J>3vel1v<>4FVU+&8M=G<XHC=^gE`tfTpKDt90Pr7
z4)V!J31H7%6UNOu1r`p@%Uy&6(Y3WaJB26}xT5dLoCo^33a*^v1<0@PzAW}Rf~l6t
zT|*aS_)$_($t&N&DMz13@N?q~bICW8=hbl~sJbO1D|In_c?AyO`~+t}P9yNq@bdB^
zc{h3}>A}E&Jf0XElRUa9DA))<&4KePeJ+UrG~fj=gP$57AC74okW*C5OLZN0-tc~p
zVh45*8LA>m3_Lj-tBQ*F=*rPh3FUjVBl>|#J#08FFl8zh`#F2?gy$tOnvo4-oakpR
zP&twH$HB3&BrrDX?NSB#(PD-B;~QUr0}l8-G8^n-iP_8IAr_#qp>uL|%_UFMGu%v(
zDF(p~AW&ksl`9QsSAmFl#5N%@@y9@(^eu<vc849>9Aga7<mPvxo;Vc`2c+#dQ-Owl
z@%`fNZn;~NppmGkKwoKjc@Bih#v?K;Bzvr2XNOgQIxj{|H?yR~HFZD@qi>`wb6>-E
zdGPgOI)syxlb5%^#?wucbfPgJz;dkTII2U&YBIUTwkSkZTYGjCAu+*v6r2}cIsk5%
z^_R+Wa@BPniM);?nnN)$(S<E-+>9$oB>MO`Sub(SR0En7qbBgpu-cO&a!9$!U6J{o
zIz~Z|g_Sk`Qv#b2&vD@miE9&5D7%aesq5D=+{Le*fGkH4V*MRwxEkMpZZ!5CbRFWM
z&0k@B4V#GYQ{~xV^TQgoOpb5@OnPE17TK%){`N|tRnl8Wzt6HYI7Hbp+E+ma3dV3G
z70{=>P{ZGl`N*9e2OIA5kw`=6gw;D>@Fnc^>xNOA|9)ozJ>qmR;Kbawat8+=h4}Gp
z{{3}SVWE|7RCYtww=8rR+A`fMqNUBo_KvME0p{0ulRO1_p!-`}|AEovkrBzZsvhR%
zqqmu?xv_h|OhjKqelSDy5>%RWC5J2SC4w0zDwb%pYn{Y$wKs13fWw`l7s_yESYg@;
z`bdT>Wb$he1%_N)GzNwnERw-a=H{zEB^zAVqeX(grG<w_W-kQ>1|DrrsgKL+@NefK
zk+Z<#K8c}7<ATy*NuoER=v&|mtCtw2v%`$b62ma12k_e=?~Hu5xuv-WvGXRXr^Bgu
zU8=sDa-91*U#s@^Vja5DmywDAg8G$?d!y0kcuQ58jFgnaJEtSlOzUKe=HbKKpbo{c
zM{csRKOjRw%d4v|d-&1>)VYg*uO&z7WDvyX*shHKy=qPNSc>AN@v{v#>nR`r)>pO^
zVE2xmu;%-8wt=M!ZeB9)1vLonc0#&WNbSTr1XxyRKLQk72^h_=t?TM!5zos*OjGDp
z)88ck#OB`iIp>oa+I?>-VKBMQJ@!t2S74vF_{Dv>>u7x3yf4Ah!s1P?C2GdPTQ?bL
z(3_c*6y!^fjROldYVyn~{QB93P+90SHzT7}!#m=ag#b?8Mi*$6B)Pps{r%mVGmDFD
zFE4yGgbQxdWSn$Si8@1}jc<YLIQ~9~n6{>t;pbMdP!^qrSVoczzk}P&npU>e<^tBr
z3iZhKrB?%_yk$lObrdYMZ#zROe3!svA3+TaX<+5*Ez0yrcW38&As=4_zXAmPSaE3M
zFiegc9cU3O5EdBJ-h9VX=F<Xss97}XELU+Lrr5k#eN2^NE~5a)cUJWQ^a8>EUhJ#g
zw9A0LMW+9|8Es(tr&XqV1dfc6=-8^lwc0{mkyXh9kX_Z%A_Ba7%|*u^U=k=D84_zN
zDmb{g4Ju4&xtCaVs}oy{CK#R|T6J}G{eTU{pKkv@K{+`&0_!<nqvx?V%&n3K-Ri~Z
z(142k#M=ibI)?dqYwWG0{cKv#=5~4Peu|Z1t{P@_H8oUPkK0Yu@ZO-{u2aXWNP*`D
zJDCNH=iw^)gW-ZrZkt*TZ75ZG+`QK7y^>_iubrX>nSce??GVoOFKXO=mYIInC;UAS
z<lShG0zWB|*XnIB+f&uZPlMd+rzSg;!amjI6=}n_^Ev=u8Yj&cXkA-RktzKK<Y!K(
zC$i6p2l(`~TipgkrZy(lC8ZCOMp9|ckS4B~`Jq(24o+s#SB;N8*^zTZ(w)S7hMbJO
z#48}9Yif2(a_zlYpO3dU>U-EA%kl%(u<&qm4N_Lz*q!A&@~(GubYWW!N|uR;k1VPN
zsYN9v3ey>3CSd#+?>p(kz%z`?4C;1*>Czu+3Ts2%oU{DROwD*4X6j9rae*yrmWq{y
zjfG`-(`$3*o&m!6*w`=wZPo;JyKU5By~{+e42{>vQA+_)vfKL>0cY=w6>ek17r1kW
zGH-q|O<b+OM7B$^Ea~XzR9OyzJUUYcHzD^Er-ddj{Fhf18t3#BiF^<?Pd|u!;b8vS
z&fT4dJ8wf*<SA!mU}50mW2Hekh8_ljexcZ2;fvqPS4Kq>;#B5Q_bAQW!Pc6ahlg^!
zIlHm(>}Q2ptcZ`NXBhR!2QvqUbeKee%9SnAMo|HZoF0}>y5O@b>_8#c3`cm4KLKQY
z6)D->6;NYA4>@x^fqZm_ykq3vRT%`yGfaH|2k2rIyT|xxuvn|q#lxeZKIY;faC)eD
z(-RHqcCnzjZCp%@r2h+&?&9te718Y5BMXA1FO`9BpOCgh6mOc2O=(vc8?ar8h{^t$
zt0$`XIW$yWNhu$y--`hCxG%1l&4o_~^<)^rel;g$*Av66)>{RdQRvj-pc??XP#qe@
zAV(UafOCj`tDnK#&C3aGBkIe5*mR~D11l@~lT;_+Nf2@Hm+DBawE4rrRqFxCL&Ws-
z$j_f*mL9kUPNra-cGVpu{3cEx0o)lBsHRycUr=kSa&ksnJs1scK9I1dq^2BSOVX!)
zZ$pUi9N1vQ?i}7Q7ZMT%fsBKiLx(O<_=t8FF^rN9gK==D&4RpfkZ9AM91e1{*V+7>
zmY<)mEPNjOnmOx66RaVb?XJ@^N7OSd?!`cha!badhhr?1G_OwtrX~db1WEKMW^Hz%
zd>YwMmrf)N88Jov(ym)cXRhNeVlj3$wV1D2j@&enj>C+=R4<<mGSK(*CJv5jz#6ZS
zzwgFMPc_<gN6yMS8#x_u?2dQFszUC5AvDJc;Vd(x-sR<s{moabYs=s}DR3RT|1SE~
z9vDts&yKhCJq%p-7QcZV6-eofQi9QQ{Mo&{*afp#NQ$P02Fb&R%yDvbTeg4ZJQjdy
zg98}zbk9ii^z_!&*3=zjcO|t+9nc(d9sZyJ0wPY;E!ih*X~xdJF%v=0qhzg?03q%}
z<E<wwVmi-DO)V{D93j3+3+n`tqc(W%6OsobUZVDESMvmIXM^`c^&6+aZp8@h@@aBa
zKt%LxtLi>7I#z#ouJNR_Za#Y@IUO|1JaO^yYNmszp!9G6nx(aydh^gfD(C=8YZ`yj
zQntGu<X0FHgM1#{pEzy9tp2(F{u0o&0cSv}`vEXk00mrjDb#{NZA3D2D=``Yx<mmG
zS9a;P{@6fYzmVG$)Me4r9%Xu_wO+Souj=eTc5kcr_;|F7x+Fer-*T(l+zVoW&HmE}
z6oqdCOA9c|U2cN1IPp&Od|i11$vZP*nc*wFdIiP4qd}o1ZDFYG<vGxPpixn|-=Ev3
z3BBMOFl_eb&KnG4^fj!qAjGay)U=qK8I`jPE-Q0*k<V+Z08V!e!lI%wWCITbw(wLC
zW=JOOHZOb0!^7?JYztn`2VIR&ir9dv3RoAcv$g*I^>ZYLchn)QEPX+@q(OH&kNL^c
zOww4vdVF;B+x>PNfuMqLCL&4AWn_fqmdTi)A|rSH#^w9-GX}ZIQ8($6`_g@laCp}|
z<w?>D6zk|(&`tSpx)ax16OE7jb$1`TAnD>yjw|0|cJ<B%3pT&p6;_VU%6bAeV<BNc
zi)&|RSHcQ*VivIpO?!E}opDUs6eMCXTd5E6oI&kcU0;30@Y5_(l!mNMWvaag<nZ?N
zkld1%k{)ekc+Q{nK8cZyO&LmH)o|7i8EV>V#~=T$m_^rFay1jcbx7K#XJ@swwbgyP
ze$O^}?q>%D-CWIzn*k95y1Mk-7r?bf{?r(t7^bFAJ+MgNS6?^-CSV{ysHh^~m;6qH
z*M?;F@84bFR1_2xB%u)4*6)PYKeRYw`i?pV&80Hi7;xKPf)Ln40A3a1Gtd^u<Z?5u
z0jRC3t1FPoBs>-P8JViMb<aBk%!dm7T))A!sH|)UAeDa-0H`C^JT%*KilowA1r9&i
zZq~`fE4RxbIh#1ySan~&eo0sJHf4C{_bV8zQ<6~+V<UomNXrZwrN1#jrt6=Gw45L7
z3FHFXu948<OE!K~O+NCbzz+ajO@SFr^zw8F?qc9bQ;MQ~IYcAu?mfc`3NzdE$D4a#
zyjROs)MKTmUleGC7OTAcFmHybyOLM5Njd<0hD0uc1rW$$WW!SF!(3fcc^%Umno3K<
z2L({E9kbmsQ#@m1qo}3?P82_MO%0Qp-`+-&GxaImJy`1C_p&mxQHANiOwDYqV}ZoZ
z0n$dJ?@kI?t<8~*_dS5%HV8D*GdNfkdU%{<dUFkA<BYFm1K1i}p3#~S6El{~Z96dm
zJ^kW>AOLd|KNKk&o(JdeUEowpn;BXV1x~L;1?l<8d^p{%Foh&O&3@qBg5q(U|5Fh(
zK#K+J_0US8ArbEIIIS35%|00g1?FwpsT@EHa)c8k%V(^!ViSe?_))mawb89oe)bj(
zqY#X}Il9*P^IXAlF(av_#$H}NCac)ht#-XtsPF5G{0FYDn|<e&*-pVAesX;5hh7TW
z;0Ar>%LU8nX&uX<)V#?V&>m0EFv?_QA3ji4R>mBh{RtgvZW1a=)#YQL&DTNuT9}$1
zC~Iayn4BK?$}pY@7USOi91?;@fR_z-Idw7-zh-XJJ7VA_Y7#3F6cohNv6dqGr}b!M
z<LF_PF5Rvb$9eq7+wRKy_A+OjW;7XHoV!h@7m-H3fk_01?aQ2y0yCle-gUssBf_4M
zmz#TgV}sJ)KwuUm24k*}KRK*!oj|2P)D7D$&E0yJfh^C7pz*1x?lk!#hHlRL!2}Ji
zG%U(K+C-sO7I>GNtrwfX6_ix{@Y_qeSXT$&xaw~?>*4O6-}L(O+h@0CF^Q}%cLJ{K
z3>XEBR*dw}<BXYQZ1=RgU1kNfk$)aMm?*#Z2^lK|c#6&*-Cl=bFH3Q%o5XL54Lt$o
zJoDB7(M!z=0(aY@9~m*RpYSRtgyQ022ONH96&j3r_u;}m?nHzLp--7mai5!KIQYMw
z6LX|lSX#XKIFJH@PGe&eWe@4K@~fx?aAum%e3B-eXEoNMtI6|X*5w37Ek6wk2D0Q_
znm!{_MZv#zG3xGy$>bmhZS;9RCNbk3T{<eM+KS6s73Ss9rqPZDn@hCUME^>8#wNPI
z5(9F;flyPY){Z~TV65l}WSIFh#NC5vX7Jh}WNTc!;lQj`5x=^o)(_a)<y+*Z@H#HB
zwkRIG0PCHZEjpO|C-uoDpkkgGS&|IG!^3-f{&xA-gVEb8IT){no)|jal(;Dy7pTWo
zy~@iYO*>V0^E*oB);OGODtm0yR$!IVIH{zmNt!l2n9RNTXtzavnwOddXVq0>{GGFw
z+X%G*jqjGKG^sR%{Z$}ohmgBk`vk)qJ5w0g+`Ccm{K+Xw%F8-U)RM@us=RK6ych(F
z&xOvNU2F*FyLj1LHM5wA2rXn8#jEf@+#uYWadcuKs*#$l+5<no*Ox2vFhA0Ilreu-
zOteEG&>BB;mz;ah@#oj~#2sJ1vI_?ZwP=@=l%T8@-X0DRiT+U$KIZDbp;0;m+R!Ux
z(x}m$g^%wyu<8=7v1kT{m{*moZ9EZyg^>|G|F(S=5_M@wQ4|$b((3=ZsyN7orY2cE
zr4F|CzIG<bBB|2djcn-vn?wv!2SG6qWb!|)NHnZbO(U+y!fe;g|JwJGc<*FKbi3lU
zLe1W697->@OAVH8yKVK9Bl-vCO|l1=ZBh)RxnO0zw*5aaU0w)@s4wVaD++5BFO7fz
zT^YupBFG`Om5o#sIRz0&H#>HvsQ&dFclf%+C_P%S6m95)OnQHN%a;mI6pcAMV`jFG
zoqF=HWtOa>JV73N_s_1}#225|3!Qef=USS_8_ww%WfA_4F-z%FNqF4Vc?-bEec%|%
z!5))aP;d!spU$TI&$Wq&BEj@MR-k+duvWUOo$nr&3VQ>qu!MEyMXOK1IxqXq&@R2{
zPJ*qD*i__kHM0HT0NQKIpyoD{egJlW>zF`aX2zHHj({ODm1jY3tzdqSiz8nVWG0<)
z2TbywH+HL**QS?@dCHPwyeb(;@RCZjnWKNafiMp?2DB=^nId`*%=I`=f_F8@6Qe}5
zO~5ArkKQ-Rbm6ZjzLszRYe<$?++a7`$GQILK<y2Y64n61pMq<2O>j;aA*^FmUQsk1
zhM)Q9>8-)PYhL3S#3g)7a(VGRHbEQq`%z1gNKrmM_G4X@G3!yV6jhSJ@%~};2(z9p
z^6bR@-Fi^8LOwy}r>FaiSbi`5?YzM!h<Qa%qB<`NxN^$-ciHE$WiyuI)6<pA%+&vn
z7hrsFEA}IBtAsp$XK@#z#0CZ+@yRJcAtAdrZ~7H*!qWaz#hu`27+-rq*7sS8_>;uQ
z0-M<m_x!-+^3YrF$G(9a4Fa<Y3InGfipYs9VH8|}oVfb`-XT#{r2yO0SQXR1e0X+t
zwsL|#2zW??jde0UJZ$Xa6PlDn+t)F58WxoBkHJW;L5O86eIM_oX~i2Sr%a>C?tU!F
zYv|`kUaR}RahV4y16llyBu^}d!H0adxtT|h{P%KQUG94ISP?)i2wauC+QfJKFgj=2
zf!!PGo*kN+illj?tvwZ99UBqh&RAVh5gKfmY50PU7g&ORQGGFFXZ1s0MutweC9j5-
zg(a^}`!x6G&zVjs7C!Gk!(a84JUZ57z@i<v0#8&~nR<HGH|GE!d~XjAvN^(Aw<>FD
z8sGA#=Ub=j?4&2lxb2U62@s36VhJ=s)|BqtAs8-8VAYwPnMsZJOH1OpLW$?*sPl#J
zq4>pvgFKz=hX3jBu&~&}#OO8hh7Qu_)0a&6A&^_rmYEF!Z0-otq6)xWO_VT^i($aI
zgO}>dvQ+8)MD9IYOlNXoC{D#@3x!HeikqLEy-!KZL+3g_unNbn7d~$4x(0i}sxQ>N
zb{OzM0{ByVtoD9Vm5DL>qOGfIXSsWK@ewfT^kU2^NV#BPU^qbU9ULD3^vBKJor9Az
zo0dX&oqBwpx9CaWaYhvQAuB5MvoM1dQalkM2fNwgl-t#X$I2uPb<oFRH~TDQ`mAUl
zKxB@}1^OcDqn2Hn9GRrc52#*+p%%LGyV7@dsCd=z@MOL>f|Md))8z`t6N_>}2;sv6
z7aJSc%#1FC(^2JiXKxq{P()b8g@kZIA%_*vvorH*vLu_g_Z=cTIy$%%mA%Eq(-R6J
zWuG4$5z;fUZI4xvfufWs4K6GoQUXf2v~*X0wZ!+3wZ9(_>jf!{T+Z_WRz7xQcZ{4O
zy>I-{k(-BGe<3=FLik3vlq<nV7PEu3{rc91ev_4TxSFOsv<jIm{=O<m6K-j3t!iYH
zp}|Os_X%*n5c+tr+>P?ePT#Lz>pR%m-h!76V2TTwLF0l?6q#SrR7h`B?)F8bqdMm3
zh>Pe>VzN#Mt+cSPK>+qS0RqCO`R|Dm&Vq1ZA+VYILZnPrzfxV%ai}2>8BXSR7F|7=
zq+6Y#YY2ppeyV}6Fd69sBpB;pWTe4Tc$(-}%6R8}+6JB~Wg97Wg%ib-(EHkDhFoui
zLkvmbUeim5&kpfjZsOviUyCoO0agqg1dGq=QqdA)(ClVmiVV>^kG_}~|K}wFj;X!h
zZ!2WM0k5_)l|y+~BC9^8#Ep{tq1fhAZk`9BQlzWqu7_weaM8|B)fVPuImdjJMj$5U
zXcPKan3;Vvn-dko6os1Kx<IQ6zhv`DbHBOG8y0AjEeVw&V@=Nqo9*Z*2JTH9Do|+7
z#=;9+<F1$<@AVfCs6c^K9AL)9#oPoRHVAjUT<Ua+3zB?)Sn{8|b@6@B{2bN^P2X4M
zzU6(Kx9`PdrQWs}gJYq%*euhC$1KNkFzv>$uAq2IQqmAUzOq8o==6lSgTws7Liy>^
zbM9!D^R#s@3N-_R(uRCSKKhS4y>BYNOhZwp%hGh~D60aT>y|j++Un`v+Z?SV9-sy`
z@2b_?zkY2jZ>J<=bST_&^$$$SYHf{lfGw!YetasI6Rw#vOfL%UV($CP&imeg+nS*h
zuP3=V^i<k0lp3l$HUD!~Z@AL@lQ)IdY#{fs;K9S-iIyC_J|<Tdz|D(ST~xk(bx$s4
zy)m)QNw;v+3{1RN6TuOOGok!VvoEr$ZMzh<TU8R@DZTTBx{)Eg#&xQe#7t`}wX{as
z3%VPaH(U~LK(1z_8TNbOGfNd_Tk8xrPISpKA6M|(GS%8om4T*6aBC+fCPT(Ps9C^M
z9Rf%S)x-q&hDC*hKnly`>Kz}k$bnCklpBEEo1Oh&@AS|7{5(2rGZ_k!9(oj2-so#+
zh}}<0vW7}@AcsP8`&(-APP>j)QuMUw>467^rAVp7kcEk=xPieyVKbmukdcxN;@x6o
zU>UV#4;S?G#Kb-I4O|!ZC(|b`^||Lheo2^X?j}6X#az7HZ`ovE73p2W%0C$IhC3Wq
z7B?+u^p4u`ALrkbzPgqxtiIe4OL+b~m~5C{3sup7V-_wPGhzD*_(t7l>yOZ}9gn@X
z<Ki|)mD+%X8GKR=A98c6fv}eeKKfub{wT=QlkXXX1;W5FH}O9#fXM)`YVMS?I@;Lq
zxq4>APmqRCSr@^|mYY<yE$poA`8_U3?1MI$O5N1+@;Y6Y^A8Uy4-cg6ni?8H9LzlA
ztZOC%yu=o<|H~5tKRt`+S5(-^k`<K}n3AD`oKedf)pdvh*82ZrJoU53JQV9_evkg2
zngRSH8XD{q!Q3G%UE^wtzvoi@Zst>LETYFZ{!_$VeUY7({YJO%ow@%dvI1gJz69VN
zN@D(xKZXS%zm7_hG7)3=`zlv|v=MYmHu0-J_Qg#UsE@w+_v`&)g)lH}in-mB_?UX~
zaMThDd-35vEi{d8;oWO(zJVTxm!Ac8pMcL)x1|41u)oNfWr~9ZxdjxU^+a=rhYZ#C
z{+3uFjU6vitSn9}L;=@zt6YYY8x5iz9XPx8f8Xn!&mBz&R-(u=AF<^_%j74%xb>F9
z|H)(WDPT{q_SlKTA_NKVi0S~2o7v~!|0~;A1Rf`5VoYe}MkDaAu<i&j{d+-5M$i#p
zl43*eiqwNf>3^m?z*_jO;HxqA_pfeeCf$StNMi`t50|k2`4-T47XHRkxc#Zj`jg2j
z`}-a|kc9kV)-~O1>Fu4rulj<TksIrTZnDjVd;xT&L|SxKu0X|1`nK`!x7+ws%(1Y@
z7gmnn`KfSPfy<(P)AGM}KDo<ij^%O7Ol;xFHAoK)0-yMLTUy83KbM*|g6~gjt_`P@
zapag>kD(EZd_YZopPE|n{%yIbe}~!M*Z1U8(8SvQwILU7rK&mt2-GA(klyFI!TI2T
zyoHU$o|84j^Y<^3-)II`s5<cv7T8U7b$&Xq)K1RN^cqT^(?=-4A*99Ll1ze9#eIb4
z0Nt^*odtBZ$;mDS4gh+am`u-)i14v5E^jg|;vXCy{=fIHZ?)#3oEzX$FqZQcQ^z#<
z4DD=0ow~%yNwjmbW<`XA@Nm7$|Kq(rng>QS#2g^FK`fP&tqJTc9b0YJ%9?#nw6wIO
zKFX-jg#Ry_2pnV=1-1&7pMD(=WgjsF-B$3!Qe5Js?VD)mFz?Ou*!tN+{$p;=Y%E`q
zo0}V)FMvP?qzVzCp*h=c_dC}(lfsg`7j`ew&G%#8{{63mKi=J>ur=lnbL?f4;M2*@
z&IVdoKm_9A<CFCej1vG5@6OUv&yn0Q@awsKyQa>gu)JJeS(yoRZW2JC2!Mh#K@T1w
zq4v>H#%Irjxw*|x4@eCS=K-|^%$?w>=XXw)FR%*<=^GdTtF1g00x}X3{bui%S>z+J
z6&6R7G?6kl#m07MXn>~^4^M5Zucf7>GnuxllPjXyd91>$TS8J2IQIeJ7VzuJ+sWKs
z-lU==-aw(Gg3=OWU%ysqiv#?tk%K#T?!>~3T3q0;%IIsu(u|sfA|O1ltZ}MU>S@yb
z2k}W!BeSy*o5`lrrE%tQU>Qj+OMf?64_J9tL;byzQNDtGqVFgzSPfbLZD<|2<Gkz*
zlh}PBcK^P5l<fG-jKmle88|UH&c(yS{_omBsQM0=OPLvhZ0xOb2u#NH@g5Z(kI&6<
z!}OnWR908pIXZ4{Zc=fFGRk~3{rLX9A8tMw?{7wPh4b^6*~X}vs;ccr<R~jgZL$%c
zj{g2IMx^&~ZtlZ2VBJ<!R8e5*O1&^X4p{ks{O_kBsxMczwY_bfot5=Insq?u`ulg$
zOgb4Qd3icnV!H;3T4Q8lz&kc()R489o1|}fBtu_XI?&>Vbntf2ql=i7d@0Ylh9h%x
za{!zl@9$54HCdkb^|6H&1Lku@g);#D!B*vyM^sc4Ns^nZtA3-q8*q!S?!Eb_X{gXt
z(3XnI)^>Azv#6Gb=ia@0Xl=PZD;jK;j<rMU5AldfFL^Jo(;js?Kvl}l$q{T6fL2zW
z!hBg?f6dI!{xE7U*TFD#anQ$B58QhkgiDG2mzoNK)*5Oy&&<zBNmqAvTz_u5XoAeA
zI{P{4zA^1P*qPrtJKd%aR_ktN6u|`CFtL;5$+~>NoDS8PTljT&q^D=PCrMYoQ2#k`
zcUPB%rTLsVmZHD+tj8ALSAT!=iO-YwK+kV;Z376m<Eh~KJDY2w0Ob19gaA<x!gUXU
zYz4V<acY?{x-|00z|fH9`oA76afx2au)&W11mC*z>#sj>sJ(qD0&qPyUxtzeOFiwq
zN$<tyzr&osJ=PwjIs#}U8t*wdxEbi_W#tqWiN!>WzP{Nf*5<9dxbUlZof?~%n36Kk
z#)X##v0NWDFJfQ-=CEcjZs+yePL+bp0yY+wxvDcC={N>e!sLSmFuCI6hl13S7ZE9u
zBR&?Ly_!&D|N0h+9l{H6I8i8u<Rm@oq~~~Bu&`H@on0($-%KVFI08G{s-l~qQ_px8
zQt<#d(wak_oU*#UUIVyqPvEIqpcZH6WUqu=3os!-33An3t3J^E$XbR-q~hvv<88s#
zijN<E&aK2rMM^P&K)C$=VFLEd<^#&YM;dRWRxb1!b5;Z(kbsM~a|lGP+Iowx4~1rq
z3h?IkrB{KF&BcAD1qg~;f=zM@3kXFjTmQ{$WotiMW$9tydk!W#4kKgZ%+M-)oM905
zQdzl@D<yr((w+jL3%mHbuJ=)}Niv9NWNCF}g;}@$^Vv865<$2wdR?8%K;_FN0?PLB
z(|{lp$%XBNU!!I>-B6RC@4YbZ>9CjdDfGcM0=@}cWT|F_^t7}vJ76ojTK%*pA~!#O
z^ybr=?AFV9pMU`D{uO6{_Qk*e$E&uk2CzM9fLnh-{%B(w$3yCQOR)Ta2mPz#?4%D^
zbyG7kGGfwRj#ULn7JhI?Enbt3d(LcFnOjo*u~GuY)Y;X=s@t>zB86hre7wBWacp+e
z=bD?FN#siOT3d=LDspoZCqu%*a!Fgyk+w++$gN+ME~_vQo7TX=Zt&s52ZmZa!ZhfT
z#GgXe4i9POc%d`IA)KE-mYOOh(diTZuLo+Zf9fvJL}8~h)6>F-ThO>T(i(2=u$`O(
z0NCz6+Er7qv#~i|QCA*mpN4tN1rkyLp|1bs>?I)qfwYvA-AvPIOr+?}hFX^nSXbrT
zeJnna!O7$P4auS>>Uk+FP4PL!aiL-vHS+A#%M0x{TWt+lU0(1%VZp{7<F)`b%LW^T
zDzq}cv7JqjeLr?5_Y9IXWQCdf@k4e~A48SjYKZx)T`0m37z9E<NI??r2F{G2MyrPk
zePPxs>MzcpB%)Brxnmwy-xsT-s}~m+NDHK{hs^9QYKwsIHi*rr0O2p(+<CD&!rF5k
zz(~z+N52awVv}>Zh$8PS|LVj?n2hn>RU9TGs0%47x^4gE+VEZA&JS!P_S&w6f3p;*
zvtQT&%anzO=uSz(#Bm;ozn|xy)5B8xQuLhUb_Q4&93qDb+#?eF_X4V^c%x%t(gDXB
zUCmV{$<^%k>{(7>cv|f%d%EE9H`$n<u25)XM0iDQZNBJzn;)+f6o%b2V&4h!@eKnG
zqL2<qUg1Ee!l8wyD`UzcS!q}7xN&cVQbE6qi)sd&4mOtNX&NeGVlc=_`S-!${K?Pg
zw!K%P0Jw;*rUI_8;_t-)#R^zNS60>n7FmnaQv2|igNiYJ{WlubU@xaHk{X?=;Gc_D
ze7o99n@lPs_;DwhoN5gElBfVUwHEz@sSfsW+Oyl+v$G|3SSJD{*81<^eZme1xD%nI
zF`zwpPTC<U*#VZq8Uq}>yt`JmU^kJ|s9y=n-WUR*Fu{tKNlP3I*rFHBXZ6=83NeSk
zn!I;4fIxxF)|N^hKlG#R)OG9tu-BEBm#cSynE|ca&c%h`j)SXfSYF)fzF9Z<#8-0p
z1QsCH&n82oi`0v!N<`eZ5-nmC;(h^)TfL`pl_|`TG&w1Ga(vS1ybKV}tPRxfk2&7~
z%f}#|K{vI0CwN)e;QW00bt{{;z5S!}y^PD1QIH_@eQ~<V_x!D+ek&_U$Y`vClO8=Y
zbC_QJm(2$hH20#EZ%a6^#*NLLpPh`klfSe6ZkA7c-ZRp@{}VkuJU@&!0XD+cwzkDO
zvep_ZPG3vYs3W^`*1=-#h&lPet&er(6ooP=AN5%uakJdDQeG=kJUCrTFX-Z!k#{h3
znEerTm!u;^@2rWR<9Kg;74dQFflUD;{K({HTcPxWs;asxtpopWg}$K6Kkr%ut#nPF
zXNgS?4MoliflNlU5`=>z%O5`!5AK}LYShwyP9D??M?L`eD~n#8j;;>aXvOhJ@H;BF
z66E}uugTv_zL-SGM<m<iWM|XgnshTp&uJNz+u3IAu7`!WN^@&)ao0IPtv_7wte=H(
znhTKX!ENFyDh?XMBcS5?54o=w<UR-Yrnjdjj90e!vy{ZD`^Ts15J>MB6BFaQdi!iQ
z9oXLMy>J)TS5Z;1wr22MA0))jA-WN@anH-!Yh*-ATT@j-n2)R8X2NEqG?4ahKlAR@
z^GB3`?5(OjtgmkXl=1bAvFxMO-m*YGL!nvTKhSU05a0e|gRu<MT=4cPH(re)A3OjU
zkwlj9X-Hg3on3fHNdA_KF;**Kng|ekXmsa(5BxQ=xH!Gxk|mZ&F%t6q>9gQU<>xp;
zfc41@frz^N-iu>ONMJDn(HIPik)I<0K+)}PKiJcg6*k+`lf;NzTDnK_x~O|#7*<je
zyZLOWFmTri3N2Q(kJ&hg)p4Fu`^Cl0qpQn!#;MkjmYA5i<NnH?YJB|LT;5&-yog`m
z#W8%%=qG&h-j!|N;2m6JN<}{+)W`21(*)gNyK1-t3b>f+<CBwu+V2ewx@FJl={*5q
zA8-O}qj^Uk#pUG0c$?7C6?Aps1_Wvph-!ln_)JWntE<yP%ILb98UafFa05;!t;e4_
zuN)5dzH$~sM1)ZI_n}AFH}+7HrGOe9Eb^Q(1*N_W?2YyLxpTss-5(0|gQJ1IE$?KA
zuW$I|0e3W%<)IQx<S4hSmWPg)S3n>+dqtIn9qb|UUkn4^p1{TzxZK4qo3*vI+jETt
zSy|~y??OUDEpTuJ8u`{%kXCcn&aXIpDbznJC>Az1`<j(sm$%df4S3#djG%6n1xqK&
zJkLA}6j5&OG(P9l3m*Ifd>WrW&ZSfZwMpZfQ&dzN)>UA?e<vbBgZ?faU|LmjLNpb1
zn0?b67g{9GnMXLlF*U+#Yj4j&owyN3sGa{8NPWlf#@<YFqBxZ77rYUykMtiYvgiVH
zoPWFkOKx*E?J?D6{b}F~*;~}t*GHi#^AOg@tk;tLH8Zoa(sZ(<ZNe7F%Dp|U?xtlH
zU{B;1A$^`0p5h_bR)sM?%>Xj}NB*7~Lds<4Y`3{Pj~DwKThL>B)J(hAL>nYYXLw_*
zrAhAt`3SFfq;Zd08c3R;6&1};y`yS7F*jG51ia(ibQT)k#3tv&99&mD(|k6}+4~5Q
z0yY@#uI_*%KRrEdkEjkFT7zPH3!z=Z*X>ZC{=vM(z;qKPTD+mPnUVf$c?dY}IL=h_
zvpQsDWL$#O0ubFJ_h=eTp$M(2tP&DJSofiWs*S&0#}p58?hyrdn@yGJ$cL*w$&!2d
z@>4_LMV6>r@9x8g)Cvj;re<V?KE4r>zMjCS{BSL(Tpu3Y_=4fQ=IrbyFm_H#(Hjo%
z1|-Zv>ac6|pBjftqog<oIe~5(af{Tu(!<Hh+Cj@GD#=A}M=ywSqfwyIBIqNtLG9b_
zh_v1cb174#5;yn!!>SVT3Dsl?6O2tkZau(O&hm3>r*Y@7&8xY1o$rSe66#k$JP5ls
z^fIUb^>YI%7*e}l?sgWDhX3HZs;(j(^dAD!roqX>qtoR1%3Vv#etSU41uSsdqeOEb
z+`57NjLi+=I4`6p*yw5gtEl9`{_Awv=W>d#dVa_j5MaLVFULaa>+9LsSwP5N5mHZ2
zn<<VGY+Y3h+_V-;_O+ce@!aG?8+MJ|!dpal3J93k=~2U30U7=mI%;aa0D(Z7qQa1g
z)o^QN>n*7IJHpR46T&e)Y;)A4$?D&M${+$%EWl8M6N^OhK2PvJ+4j&l2hmlC2`26A
z>>LV}QSSUIiwrH_UH}s;U^g_t7=eSW?vWOaAgU^~m<g=vtvI^w!o+QkRoh6&fvTNG
z1oYJ3DC{%vt2jr;Xo-7Lhxx1b0lxtd#ES&{C^JEfM`@`&pk{S+fKpxwu^d9_Mz@e7
z=H?zvAKg-1Ln2{5Zz3hVJWYF2`FlG+NT{5G!pc)o?_06v>dzGy^g3XDbg-M7*NkI3
zs?e&bHkOVBIzQI%fkH_`7!~)VTwM5^VwIe%{Tl~%J9}@S{#xm5t(&_WkZL1W*C^)Z
z-l=rd`FZ4v2&9MT`!yQKlx?#+l==D4r=+}&?+*Kus|_B|>GN|B@o!Z{t39HRGvV;l
zA4?rEF5CZBKJS3QcYoBpZ)0<_veLoBcXMl_THTFX9Z=(Uwon=igtrn&*=;9#?ssDx
zIui_F5#k&7<Zj|(fK1KK-mb5&mpsuMTtxJ4AKRsv@P|zxG6K|zE+7TQ1he#+5tar(
zVELc-_C90ZJSHO}<$z@{>*>ChmX@X#`s)9ObZsEz5#TlewpQMb<mBXx#hW+JNkVWP
zYwQz~Qi}D&$tPCF+=VNPo0_&ZCW<%Ok0T-iG2TbN*<-ysS@a7DZVpcw@=mrLyyCLe
zTKq*TZ~aT+&uLSWKJq;~E!mS?{lw(0E{oxj5e|*lc?yNQD>fei4ne2%&{CtBLFWAH
zr{}aUMip)B5VKGplF;Oh4M1Bd#_V`dCj4e*WFAj_2}CANif+aMb<+By`o6pK!iXE&
z$+eRHqp?ob7pA7;EqDiq_!_N|^<JK@f?adE6m$(Bl*_$E+tuaeWKk4hFa6o7EC#?m
zSzN41ByztR(5RYyj!{(tzTpuV7dtDfOctP1EL*6yd29g`<2c;gKi*UV(o*!9Qb<Vh
z3Q`5G58&aQMPvWXHcw!Pgef093U+sQUJ?-3d;J=Ab0xc5qAqqNmn0D6ksIXNJmRSi
z{s)wbJpyQb&o5eG;kl_Y!?CUF(<AdHASc+)baZTPfWBMI33+%*T_-)`2KC5zMB{gX
zfXBzr=A5`Qc86&JcW5qdXVE9-1O5H-^3K+U>tg%Gb#*7x5KFM~um3YWIq9%gW&o-^
z_4an9UlQnWBfHmdjcUGDuS~+gz9CdkRuLbu8)uMuv{9zy#Sz)PIU-vOl9lYc!csUw
zK+_qWCw~GWfDPUUgC-u>fUK;oCB(!G&@WpQ6&K5ES-jv)fOXB*?V?a9K6i8?GNlR*
zpO#*(w9%TJjQ#q=H@$-1H(!~^;rcc74Zu$t=p4}Zw`9zc_1>DewcGy_eR^Dy-bg9w
zrLz0&0^mX99d5-fL0#G9thi!S0^-h2PCqNnZQb1;_-^v?3k)O)CL}Y#zgc#TAaWJ#
zio(;L+PRrA<WNqBBztL>8m1*jE38QaQYVNl$-}}Re{$ZrGwz^_kAl>OWfe})J>}$l
z${9jwRwN#ITy~PF-47%e;^HFI<evsWI010&-jIh5(}gD_oWQFr1qB7SsUH^R0<Zjk
zIBcRTGgYJU`zVd%w@=b-xJdR@U8iTK<dcjgC4E62673Vf2{WyrfBN((FP%(&$epdN
zEizVpDTXI`e)$&2u#J<<=4N3MW{}Fl@;S88b>B3j#Bnec9vh;iJ;ly`)a3hieWJg&
zS1r<ddQ4qf+}=rLZ=zV6-YOr@1ymnke^;DRoR($~y75Z^O$>s!?B;5P`T1Wl6RRKT
zXWSX_^=$^|p?o|uzt^wl%{Rf>1}rhyj2gZdvP!KlFULg1^Kc!|wUcDogL=3$Q*(Um
zzC#&MEvBsv#uzCkR{iSFu)Xo7iZ?x@$b5_5VTy?_lT^I+0414gb!5w1L%7ouW@hp;
zFzl};_}?X^j!BAA;y)YBlZQYc<n{N-u`zcPHL(V)(7wn933a?$0GuXGvqW7u6mf)H
zOY{OABDj(6*EyMhXbDfxk2ZTrXkc}r@S9d!SDJ8*mPxCOnVDIr2(yk=P*Jh;vmyt`
z5F<tMn{Xee?WlBtM<Kokbdbws8DcDUXtzFv+VOD>ftM-wDFys5-pVxt6jxYC_{b=&
z#e7|PVqjumv{zt%l25dEAU~IqDy77*Dlq-NTy?pA3u1mgF!b)<1!G%oRrOb3e3uto
zvpLDsZLgx)2NVxRIh6Q`reA&(77|kNsA$Qq%Xni3zCHY4IRu_XXh%D$i&hKx0?FKY
zlzqFG1H`~yadPx>+STclkFx`2s&C=pF|xAKxV_A4LLjD}JOSb%dq>-xWETZHJE=F%
zI~zgo5&@f6a)G~Hm~S4xCC);qAu8<r=l9r<P|na!p<%20c7tVxPs9wlRVQ#_+?-M`
zLiF`9J$-uME!SJPx*q=g?k#$}Oe$@OIP{R{S*&WaWq*G^kNv#DJs<-*1s?hE1rBw=
zpp1-1idPuL#`e~9Gg#x-=QR5+v@`<@CF^c#vT$WpWxYJxhb7l=3gINy?-|-eK<G^m
z=;zMPZk=qumeNfKeKJ7iQEfFBMT4BSWy(cg@y#!sDCOZFvT}q40=)bOmk%*rlr&mS
zqLh@4+yYDu+z#Ud6Jfb^-SH#KIkD!Xy6yt=OB{GD@04Zo8h0VZZqcgYPfMFV2URXZ
zm`FlE1Yhu<rl#+?Hyl_8h=adx*ouc4CQ*CHEVH(4ybh$n_&ECiUe?Yqc_HZ}>*?j?
z?0=c|r~2P+xQjS6TuA6`B}6^3XYa&A)MquEOlFFTB<G?$HMb#HU!;V_(L-UtMnO?t
zJdPT#@U+gxQUGR(M=dxG-*zr`?M*5%l!ti?C^bD7v?x_o$F1+1aC1~KX~Wg=Hdr~h
z2Ux(^y2PL)T&XreSMv)uJk=A*to$^}YH~B7{Piox#F*|#4&3Yq`0rH;FL!_Q!!)vp
z&fUe8^DW{7k!HH8fsjwancP=v9-oFW%d|jOBb4&y<c^&kMZgbD@{Ur2x`-BLb#=AC
zz!d<sj63M7I{Q3~enN_DnV6V%u&@{z|M+i(VC*t{n<vczGPZMv@kK|6OX*zTqM>@2
zTn2-T&&4M)(DH*Ik32PNR|N$bnV|IbDi>(Tk}9_|;E$Fj2#=eo<4KNLA|upr-o4^b
zyvBvq29%TgYHu{gKh*QtI62tb3i@tn0Q&`O$f&fLS!txBiu%|}<lDd3dC#e`ww8sp
z*97au5Rmd$<bZ{>u2h`5jWtN3Jw<MoCpCUaiBUH+>}nIv0ZR_a0+Z{vGOsOOfDi#^
zB${F3d7qGznb676G4LX8<nz&(iv70$bn-xrCo6qDbBG+d$<7bftgROt@)pqm#piTl
zTc;e;@tR|qe0R_TT82z-0@UAb;T_ZNHLU(y6PkI<kur3>|5{xHjzCeqx~;%BurJ)X
zWovx;JR6-<-rhM(gnP9!guJwN-T@v!Vq%|5OLJb^eg8K#&!b3^m2%fzla*lW<A5OZ
zF6o-26BbtgWANfEEQIdvN}#PYtpIV2SHI5DCw+k05gO{ket?Um5WWtMJBdGDM|U6g
z2VB3pqWuyDeWa@||F?eZf85X&maYIY6N&nVhiu3{{2$#23oHM|f0*^(S574U|9_K)
zr=iQ0$JLv2Aepp~1{?F9A{1LV^BT=-AfynY$w&c%<o@w7z>oTcY2zptTFE8>IaccF
ze-<`aMD#7jAJUVrzmK=!?yGz&(%?BC2}Yw56>=?+Bzj+Du@eV6;F>=T7GwrG)Cyei
zd@<v<cgli;*8#VAe~4&)tfna-zzo=z%E$;RmM?r=>WyOp+=d;Rbo>X*C9sl0V4t*8
z<aO9_cJocot6&QYq_mo~q%Sqp137@d8*{XZd;?K;beFaAZ)Ju&OEbi&kQzlG{$27m
zNucTHp*@9Jyi(bF2&0ZAA>-lZMKGIApB`r4kT6klm)6$4sf|P;*SCIY>F8*w8}!7z
zeyw{GcQAikElUOM>fzz)s-YEsr*9R2U)~4JP3KL`zQ8XtIwqE_I3}hz!$0#i^Umhx
zz@VI?y**7$NI(u$Ozg{RW(soDP+wnJdGS&$2|Lq|iHS6GFOB;{Kk8XGH)|?tGDJl~
z^oqftTv1W>^>Kost!S$lo8!X9M(<V$*OA3qKcUB04`#;R9Ny@LFSFOFdphwgC&UXH
z8>dRzrd^E@*Y4X=HSX=9fW24jimm?b$ZjLJjWF*VK=39fb+vTCa;fv(``6fgCT~&K
z2-(K~&j}8PZ^E67jlbl?+~++9JZu$=!hP03Rxda|SOAh!Qkw1*F(t6&J*VU7%|v_~
z8p?o|=jJ{Knz7-J;o;#01t6^W>KBnPT;IXgvb@FC#NpKlve2BKHaB*xtII)y|5Mz$
zHA4;e1W>?#`v&!VD}p^{u4N1!0$<=+>Y;68$0_&*xCS8MRdldo#t!65msYyty}diP
zZuP2vc=<mpK#TP;_ie(ogp35}@z#EJ``cus-`wV}Ur0cvN_1M4__GcSho`?m#~bUt
zSKISK*YNOMQq%N(-(IhmfW?g+Z0w9mWc?T%G;wlL*%TkuXJWEFGN7}ZQk56r7XbPk
z9i8bgObzSmoHlF5&`=+!uu-b`g-IXZpLKuwedt1(Y)nIPb<uKEsjSu1+CPBFy7kh*
z%IZ6BxQ0#BW7ffM-zorhz|Roe!e?em=6Uvecwk~;yMH|fB&5qL$bQzV|9oA2Cc<9~
z%l=LGpaH1b8|&-&ETEbIJv(5?%b68#A-=NvUt-x14h{`9Ixh>5Qpkq`I=7X~ICF;6
zwhc72lKQpH^YDmZH&>@zBw}UdJ78gHYh#p-!nJ)xk`ogF)BIrZ{rS@h&vOhRD8XR+
zBkX^XS``B|^3PCs0f^ux8s{}cTMLcWhsYQ@C8wa3rKMMO_+$?LKe|{y=Y%K3#SfFM
zAz5Z)Vu*`jjO!_W+cR!xF{^9WjPBMsRe-in()YaPqiu(a`40!j-Mb`0v!kQgEiF&D
zx#6uwz~Er(*T&4$l*}{-HAEPKpqY41{LFic<YbI<-J17`wBP5qUb#x!`I2N4uw&yS
zpgOH3z<bK!r;zkCyK&#&TdA$1w7Gd=W+vW-USmD8kwjWO*kaPo&Xn;%DByauw?7Tb
z?eYcAgHL>$n_W&-9F>VmiFw%CyJpHN_8t76<9XZIl??R_9Gqm(a@A!v3c;?gne+0{
zXI#!S*ci296=}?X$Kb$IzXNpLmlMTg4UGbDw}3>I-nZ*76M8T%l@R#+4&hPFwW<#j
zjVQod)P3vd=n<Y*6JBbds!BuZ?p_V{EPQ-?6XW!a9qQzYN9xiXB}b1_QYcdm5cMrT
zySnnhF?r-x^R(h~ihQ?)<!)k<^BizmtyNc5g&9^f7Np!scK}I`QBf7?hAlctyyS^D
z#yD`VqR+4)=qgHYG3<U<mVp6u8i(V>+X0FA)l%K&{N_^Mlbu~We0-~!AF|1@i7Kk9
zQL%}h7YH5Qz`^&Zl!Lvj0H7YS=5^SbKBrDY0ASPGdv2>)-pg6jEe>fxO-=3Vdmiyn
zMAlZ-)YihHi<9|f4{#drIoV=mrhi@gHc#d8BA(!k;PLhx^xS(RI<Id%EaaG$c<#^B
zmHpSfP`I_asi~ZaGgLk2oz{a}y?woE>gr&8Bck~!ztBA}FaWmjh;~=I8n>F{ASvj&
zEcvSPmo2L**N<F)m9Q`|L91;(Q0<`PJ~>@gFwj5X>+4IQIqUXDL&4BtaO9Z`>f>V}
zp%1FQyZ}5_4ODtB==&{bFiG&2j)hmOD@d_Q6LJ<36b!9&16s{hk0y@QU63+oZEK(P
ztl)0y9YH3hs+N`=kSO=B_z5BC{bP@grhhUDiXWa{mzM|Vr`7-teb~;%My%={V$R;y
zw!rNf*zV047@+b6(&%S3t-iO!PQbAB<$~7DHIeNE>RP(7DLH?hFl!nx_~z@@rloak
zeSwqUL9?nVTl|Wr->EIeKVXsMmea^_cN$~v<KY??<ZpEGNJ}-Kq_ok|I;+1!7=Gl+
zuJ2)ONj7zS9RDrr+L68<l^`s8Gzws;0{nuI8HVI!ssYU>f(p0>X3`xu?t&k_Cv%L`
z_C|@$`()APimzWYr3YhUp9@SeFfwO;oavm<R0?KJgA?3w>R}Gbhf6s83IFx$DI1$(
za^}~cBRxgcxl&MVya`VX`e<@&%omMX8XQ!@m&do+&-<Y{$;L$AU+_X-z%sj8{yA|-
zdQnXstn#4kqWS#%d|Bv2b@ireC2a!H!b~4KHF1!tUrs_pqYpSJK<lz!jcll?;nw&;
zFUUO$z$z7Vf8qbf)?bEIoxWe(Fb1HYVi3|Q(j_I*0s_+AB_Q41r4o`NUD93B-6fmu
z2I&T+L*O}aW`6(sxsRI{Gsn!qjIj6qUe_6GeU{*_%<6F2(IL6=vND^J@<BhC0?W;B
zZh~Gz7+vZ#?puT)`L*2jc3F70!?Bj&ncWYt6wQu~rgA2Izw*A{kXPOGu2<)NoMo|<
zRk5?Pv$v0Ve9RQ*anjQhE~4I>e~*N1wg|0Q)tHL+aAQTRYpTZ+#_Umgn8905=|^U2
zvT1ww=_F4deZ*7&j*0shxT{Z2Q5Ki=C`%4R(kmN_S7fH+vIA4}9Gy=4rkXxX5-O^z
zO{uAIefY5Qik)qAXlnhewdlZ>1ttrEf<Q|9?Bylz>Pnllpx!@}NuWB_*chS!xS_0^
zykVEiSL~I2v3^z_-lr<o*3={<I(hg>eIAD`NK>*<LH*=@EnWbgX5c^dv&oO@X&dSe
z&&=dk*q#qV%_RLfn=V{l9vz1^Io%f40+4fT%S4j_W5LYt77OXLn3a0EdYIT)%6*EN
z;lr|$T+Osk?%xU!7h7$~1g=UWMMXg!40tRL-=YdzZoNY9(|RM&{x~*DCRa^Wm393~
z6*~vzb{dMRv$Ic2%S{XnN#Kg57iiSA(7t|p-2K@tnsnBW3|cfe2ZoxN_Z)JE-i{Mi
zUygjm6tiA%%!-bVg?V>&fxc+>^wbeMVa*>6jJSV9XiUo1vLF3(stXIVN&`);tp~r)
z+tt6#j`e->EZfYtRT}}4)z4Yc<3B!~lKGL8Ml{<nGBAJ`frgUKz$kaL3Q3^Wrnsc!
z8!-_VGqaqgI}?o0ZGQj0Tk$PsY}CHmZgY8?g_(J5a60~51RrH_RZVGWT0uc?V}JB|
zw%pv3_d%ZsE*<NTbe~wbS)r1QqT+(FQCs)?-bqkUkIfxV&!<!07eM&Z+IphHs%>I2
zmFA3tG<f40bHn*l4vs;dCk>sGvDK5)!=&LN!`6mXg@w`yTNK_)z>**$B9iE#Lq5@|
zkHa)H90gnw0U;q6oYQ|+!&h3`($B{881(UpF{ADHy3JKgV+RMNCzw{GQ^#0NctjD3
za$(igmE#<*uyL@0)f3Co+dy0L<1HWgd)OR6SrhgVM*nLQPtsQQ`&K=t=(MxaoN7Gk
z$}@zx^nT>|{8N%5iDlMnLME%0uBoY!k%BbCJZn0pFcadzOK%4kUibQ4p@^3+4|P83
zi6n@NiNT%{x5ECp;DF;^3I!$1m}GEJP`vO&17&6Mqhn%30|F}ERpsS*ts|DPBh-*g
zO?7ZMoh1|$@K}|KCrWd01l2p%umym;5g14tyaXYKf$nlF!wBkU6XP7rtgJ?dBSodM
z7gAA0CUrmcii8~Z$B<&IjGR%)^D(#${_Cx-KI<2+e{U~!M)L73TYTh~rVtBUfdW0i
z>eW3_dwY!GV9O|O<%AHuFWKUj(jgg<u<o)29z&+G91$*7p46Sukzwi1ypWIwuF}$s
z8=ISa)~(Ne`(fp*P65|F9Pby1MR11?Q0%vz!s<SAOiY3rEiX6B^-HBRciYp@15su-
zO$7y&_2q3XU0r3_l%=qo^s=_m(Sju2=<lPW!>1=Fqd_N?q3JLI#!+P577|n#c`4mr
z*!2b^YVtZ?DSWz<v0xP6tKP3f&2E|M^DmG;6YfoRj_SMnM@L2)>v2oUs*?%|VUd_C
z*5x2^$H&KysKsr48yE=kdICaqiX{{Cj4DN@8%MrU6fr#X*_tDY%F<LUFO%?bHemu=
zQc8__kk0;2N$JzakHv4Fr@I4_N85lZ<1sr8P26=|m9MJO=chp_`DHOP_z?;tkIL9f
zN<fHy50Gv{LAf*>l<l(yb(UNV)O#q?Umq6q#eSBtGNUW?>MIE?rWROtsY|S=@VK^h
z)m{DON2!Hf1yrdPvx%FfRaFq`8!R2T>9V`{8;El4Ei{R5PS?Y!)q;P5h-9f#5e`2>
z9=kWAc6fMrAPxgze|wOjyrv=!0q0qW5OIc{j7SMA-Fy~zi}fXdDHSEMO3lVYA9*I+
zAI+43O{;>3mGy^Fw725vM#^ez2Lhp1?#2(YBngSb<6y53%MFQ%TO4+TY%W)yZpihU
zv(?gS{Po>svk8hHfd1j)t|2~}o20Jo@0VD<ln87XACK;gDEQL3blvmk>4BWyvl772
z(hCU+c1JV$5J{Vv-6IUocbmF<_n^+r&3GhN=kM)+B)7of>~sS6sR4FOtm-YVric-;
z?$)Vkt}a?LjR$nkpNl0)K>@+S%Br9cVN7WAINhiA<0Iq><_Fd9ZYzF`cI1~wreE0x
zn?4ryVmDeG?ZeMNCGhjx#m5gDCEB+*TK;{UpHF17Q01@g%fmId4a80k_6Z+vl&pES
z{vtH?JN6g_-rnrCA+Mi+VWqRTT73tm8EN9uRN|<D_O8G#9hsgM;N`Vbs3LOq?El+=
zIn4Zg+JJY+oniMj4=10{Jv_hX<#}YitCwf>#iP^_#o=BHL6a}f<SMsC7yBchk=EnT
zw*X1`MNH20DUYeF;~L+IFO3q-!@=_0WedHM64>(fNqUv{hB|QCIXIXwC7xPRF%vVo
z8e7%BP3E5{aYS!j1!kCv!ax~|La=U&_UH9=Uo=zyLX{oq;=_i9#Pu%oE+WDF#s&15
zlMQDcw*%aNY(Yde?(Rp$iZc$DHm!UN>z4r$5+Q!Kw<T*l1Pl3sb;-thw*J3ISeEwq
zm}mm)q9c-c$fpBMV(*Rg3=O!`vCfARQQ=@V9U?t@wUF8y6eMwRajlk%3vaDhV{&s;
zfnr0pG{q=R*FZGEc78w~6;+6scy{L7OnQ1-hbdO|M?DSscX^SP-`@Z8?mIjYcRRgv
z^eEt(s}B@UoN5j(ZZHa$mVU~l)Av+*Urk1(>7Va}v5FMTL%eT4@j!8?7?M*Qe!(Pa
zdN=>zzj4X0cQMBUasPcY{M{Z2rXEP!TuD;L%ag=L5iUnt`icc=@BaOkcOt8JgX4XM
zQ4L`?`{?NMQ$(N~1`Y4yQTtgp4W%!g;&7k-myP*C{_hAR^SWMbCu|f6t~SJPgoJ`=
z3joaW_U-FCcadHM_4FL3r=uK9!_gi=qZ}O{Uubd?!*emmGdThNVRsk1A8M6qZp-_H
z)RDb|jIbCB=Dvsnc&~tfvZb_Vf@TAU`z2EzFf+V){#+=Qc%+1O25X+3Twe6L!)bK$
z=FL2f;*Rmw($v(|vmI`8V^dI4U5xi$ZcLhUtJgZERC<w`9?p9)m0*XPPhNn!|Fw|*
z*&M%f5#ylSpVRvA2uwnbs)Xf<v9a@g{mb7o)$V!O+5f#9L^QdcOE2n#iEhLU=%dBh
z2frZ&1uuvFHo+tl<cAG8&;+}qrw~N)Lz@V6p8b=I9oXlZ&Hk>a_8HYrsImXEdMzfM
zIXWU~A4bz#{=M9Z0S>JQTN#~4X7<VZZvV{!1RgzlWESf})C(cMy2>0JJ}a7kK%jS8
zz4OP*Zoi9(M`~M|g_Y5$v7hA3+Pav+CVe%U{(j9Lgyc=WIZ&j+e&+ZOIu8sKyL&tD
z1^dpGv9Z$BXp;S(Z2wVA7g3*DotnHnOLhj+G%1HXMQ~lQTOVku)t;q5RXsR4xv{W7
zeg7A*1#xSo=}55sL1O&;VFwt60rv!T>|-Pk=Pj>Dx7=@TTSC2zh=e1Gx<9-8Cw=!x
ze}sgfUz{{vhDS#B(LQH3F;jY@rKMr<D~_J~QeQ%XjCONj!5oGu#tS7P>goqx$AiqS
zt3S8hFPGe7V^uARVMb0#hoGmX4)XQ2wX<a1GO@R^a$GTY2NgIJTr{+_>zkWz#l@$-
zTl(b03d!rTZLyOs;r%=N`*pwZai6_GHXR?u{aeeu7zMexnR$7-a=6R_z4oEJ=Ho@(
zp!X_X1o9Ff&_J!rm(-W|SKB@~xRG$_as_Ejr~FJuLjw=scIo+9UD}hVSOp572<_8T
zCrVenut1BK`^rb_!EWhPdP)(LKYHiT@Yjti<-x|%b~}-fFrJIcb;jk4#LQOP)O2!u
zyeHH9BGFy9s18KVA#dM^LViOQY7!k)SBm?jimHeR+H%j`osBIhs4n*x-2atNBVj!F
z+b^Y4dEA3S^YiDVPe%=&=V~3(`h6fO1o4XW?AAtTfBmfcC1K~x91;zvmoJaot3k$o
z4G8ctvG}%u#vsNgi|oAI+2RQc$Id~gbcJ%T?E80kjFYOdp?a!R<9?1U>cDyN>-*G?
zw+JjK;$ihzb9TgIY&O!?X17@f3$ZjAor&Y0Kc7s4CTVALGx0M_-~1zUQ%$OJbCs-f
zjs86?kkrW>?--QAn*=aVkjjU6A@0PGZJTf!`0=qb-?_6dI|pumC`p7K-Mbe=U;pO@
z4o;-)#>nL_pMvd)179dsou+{>z<n?@$aCCCU08@d<XHOgWAmUS&%)+rSLVY#@Qg!$
z;C6OMSWvS|W%}kxMRX4suJSbNJ<Co2MevG^tzYB%jT@E9fV(q52k@aWpywWUYr{CW
zt*;M83KxFi8-Zb|1vRJid&>d?8QPA@9ofV96eNeg_5oYaK`Z76Ne&uCHfiDEwql#w
z`7e0rVf1M}k~=<Rfb-zN-oogG=}?8Bk$m_P>=`#$O+fd2agDeBETLRoZ90pSi*|Tq
zgqx9yj_vk>`M<A>hX%Zh`FVNM_3oN>b|aa))m@40U*A5*Z0o!Em%FF&{YgG_o*W#L
zBO^gFI%d%x9?GJTG^Xa}l5gK8R*XZDLY?u;OJVNWV}vq@(2`Sh5C{Yn72>L?ou7X^
ztn@7QrD?hv2MbGSNr}zDI!lS46h*2s2(UpeogR0-*s*Zq#tqdn6RgiIkeD`fycv2#
zp>T0dd~xW*Q^#+=w`aXN+sosez<tyGi0ATXe~^B*;#&)?vbwzGTvPM`ep&5Bs3tHz
zt-MG{z0MBZ&W}TT>rW1SRLgn3eX$Uxi!`1N5gR#bbT&st_WE;Duv5RkyWxYem8Edd
znJ&jpPTt(nancs}{GU4)3F$S4EX&RIS3^3Ma7XNn>omM32qOfAzO1V~I7@UQlLB6`
zDMtrL5pn5DJoaLN-&0FV>+an^p&$YU3QX9r_i~@rjBM>W)POj$s)}8ZjX4`E1B}FQ
zBbAnxa@nj(34h+z-+{Iq)G135<%NZW&<Tl&C92CQD9F6%wnd;Iy%>Vj0^lm>$!Tdf
zkyd5x9PZm(o?l-4V6n;KF;!7jy*P5ekOcyYjl=MIpqip?k$LYZ>XCc9K-cY2Gqc6@
zaC93GH>QbO>WION)o}Z0g~!<|mV%!CWZK+a%f#f_Mx^CODQocFGcuX&AO390`}Y%(
z7}>FTO}vA#Kf{<Ql2^9OSc-f#>8WEmN?s>3^N{tUFp^>#{-hV3MPZnV3JMm6=xLnr
zdsW%>_w^-eOpmohk-^&Au+`7cDnG6)MWf>TcMAt4UdzMXCF)hrlG0KJBqZ5@<ds5G
z^)T*Wbs0s}6(IO+?^*DL$>t0~hDPLyh6BrU=FOojlK+YW4>z((R2x3N>#c}WHN7v`
zI&#9yDXeIb;Bx1_U|g3Ih|m8OrqumJP>~{~vI;Mc)2g@}$H2_&^mqZIxv2@tQ6Q^8
zrCoo1xB>W16r`UT6hC?)Q%o;iOu%t%O;#w!R*mezzc0YMT)0M6dY^tvNznmM1ZAFH
zI#Fx4si|pDP|%cmgf8S+?Q7P8n?u3UzWyY~4qn~^nj{3YWA&%&q9ScuTU$dQ7!a%9
z-TfN2m{rC3&eZe(M(kg>|Gfr0c*!oGeR`zVx4zHzR4e<#S84DcQQ`%C{%mVup;Ts4
znU(eVVgrJrp)3Z8S<F4>#t-l^I<70jZr^dYBZHHZ6E@{>@#>k7SnzMy#@`=4oU-y(
z(kbIdo%Z>ti~Z>5q@*zUm9Znh!U6(eTxjUR)>g_&6{rG0CYhoGZW2gBdF8m<0?W;|
z?kZ5a!yYJtc2X%~Z6h?E%^K3<y{`2Ie@w|{<>Kgh#xArr{L+n{WBu|}IzUCez|)h(
z4q;^+FuoQ=^1fYceFDqb8C`|QpRe`~hh8&@JtAlfImcCKz0vj`Q)j>R>OX~}!!IS(
zN#hw^^I@N;2e!cs@+i8V*=Wr{SFTQ@8U68o|G=rav6!f3s)dnCOcKSxIIc1)8|%?r
zUU|Xps+fqP+mt0@(^F_Uvu3s?Qd$PBisqX)gU#b~_{I0QU-r>I`b^q&o|u35?L2+_
z`**|>IyyvSq9I>A?`-J4a$x(yZLcP9dGIS@`nO{8TYu!JuBzG|E8P3p_!0I9Q)-^C
zpJ0nZqk$V$sMI{O0+}A*XZFq?7&dH>rx@qx@^7DB{Bb#ZzV765ttdBWkSKm~l<2@n
z-72oz2qV$f%tx!OBa&RrW4Q1R*Z$GW#jo}P?&iPmPs7LUogKGB1U`LGKI<y}>tK8L
zd1PikEGHVKMmw|K_XjF6wZ?Yyq~i?6fia8?>iPN3A7yb~&$8X@dqEN%ql_05Y)Fdf
zm!68sEL2R)%sRElC6;iT^oRWyZqeso;R?!6PbcHzQm0~pM9eFksJwidljl=Xu;~5o
zD@9xjs0xV06#3O{_^)@O#K<_D_TQRpegI2Y$I>p~g3RkqoGktyBz+_gOL0@A?o7s2
zF6ZouoCiktP+W<#va?UOtN*p6{{6qdXbD5@i#ua>LP3gh6O_^6;2?(-pWm)lgnvKy
z9?^+cqn7cRF{R1TNq9jT0{-rzkye{0MjAUh^3u|>YHBLLNBr-`)wfj;=*`@9yry~G
zu#<(;pz97SmXY+(=o4PI{<3iUkKur_zO!R&l&l)>UyK^B5{Z3fH+*s97qkOW*K$n>
zDO~gODgW^&{-o;@W{FpUO%)tNFK$3Lf>dz?TMY>bv$y}nr^KtMsz7J)5`O3-JXq9v
zIQRDSWTmD3W5)Cl<|7}oiRnf{T5XXSU=~BV+Wpq*8|n2!HTBP%{5<KA341r}qHSbW
zV-y}M+<Vj@aO<j<DO4Jmoo)Yrebb$GJf(XJ{22dpn!`{1@aot6@2ky+A#vxv_s{?S
z8Je7gzYa<mH~inflf7C(|L;re_W#2y`|G<Fxgj2z$N#wzk^XL(6)5gd``rHd?9>1L
zGbGkRl!)fzz8iS&1dGA(P+BTGZGy~~#GUgtO$HxdHLn<qlz?uDNzC&Sdc&Bjl@Qk^
zlNFm2>*dut7Oci(%>;}q5)u-@v!}TI`OzIPLe0xH-FKn-=TAt7GzNgHzF=X(=Ma5@
z*-t|h%wrdk6<zu9BgwF(V0bZ&C<`wKhcgjzElNflR0(+H5WPT#YYfi9{9Nu}*mC9O
z^l(G{U}bGxUQ&d|0dsVCcz>7H@*6m+_>T~}zNR7kT3cL<PP{`MW#`a)t;+zKH#nj7
z!+7?j?qFcB4vi9X*yX0AxW>tY`WE0=bqC9_C2g6?fZCLkk<o4{HNLoZ4Qezi>mp|-
zr^j56g`b04BF#6tda{4UZE+PWqzZ!J_66$oJy4FvhR4UdKIPU(di+~9tReB|j~_qW
zA&?+*m*bs|akW-++d_NL@QB<-aZP+}ZEd`(g5AH|kr&9ET(!yCP`IBye<-YK+<CIM
z0&>ktWw5-?%y2_V6lMh?%f<KlmP=to`AUUNhzS+4P~pH-@Bva%(#`8dM@8jp6t}gs
zya8S#^7>{p6VMv&h(-6YSx3;RN5p)!y7<GU_Z5=YKxZ;DJzWdsSMT-?i@r3~`Ou)`
zVD-}FjGOVFz?;a(1?uJb)zz_7)1WQ}fNDs`X@xR~=)Ms?<img9F93aani01mUC86D
zvBHl=jqsc7W3yZSaX8E?kE^U~B?;yhK^5GgMqtANOI2RJ!=q6tFoabppecz5K8H-|
zAW2%2%}^pTHq<I~=#V+>IbJ~}4!9e6*J^1ud@=R?fpY(+2s%~3f>)Z)&O|I@ql@~(
zl+0wR;x|~tG9)MAas}|2>sdGJ)|Tn^HW2{TO${=8yE}CCP>fWe3+a?`Tbut^rbiZC
zSST!Jvbi>x0Yk%Mm&W8)|K;w4NQ*7Jluh49i_6<?fYIH~r$gL?*HR!nJ!YLM2I~PX
zZ`MArdRaJWVAr2&B<HHGE-A^{SwyV}jdrdWOl|k0i~5(S6<`!m&d(3_o4W|dM-TJ8
zyn8Awo__nPyqy2J6%Ju%ZdUS);*{pGmN(YewRJEoBP4kIm>}*aa$1eUx%b^!mvffZ
zmg}Atov@ycpi6okEnVmM?EKF;&*^IOVcAO@#ZjPcmQ+?|rKWz89+`@i32mD+uZ7JJ
zNCtR7S`VHw5YU&*##h^6;b5uPID`=Ch>3NTZB5R)uEaMsUPHN)V%%jAg>>D(BihWs
z;(KxNN9h9&2@$bWGAYn}w|SpNYFzLFD-60!=1!1u1!hLlt0THQ=SHk-tWp)!WMyR$
z1q;0iisfNe%ii7bJUoAzF?im~@k&@bC;vAKIQ;YL7U)F$qBii?=`^dRhK63PKPDg`
zfG*3($jG3ouI{4Y;vAEI?}YQ@3nv3Zq2vfe^$8S%$QCsG6?Bt2Y_Hg9)GB@e@TsV1
z7YeAUr+I3nF}({{Mh8{B!DU(~x+3W`62Tv|0rihWPtX1|7-K9JoYph%4GmRQJ8j_^
z9dN;}{kzML=0T<xFZy5uTw6;*%9aKZxX+$3Ivkp)e3dx^8GBcN%_G^t%uE9#YajwA
z>n}SQQN{m)Tj1);{!{M?IXSuXsn}rHDOiP%k58?NU0lxx1_!I;ZPVJky_1{xG>J9o
zJV19~VrDc?MFP(nrl9Jik}MK1&dBcH0-stXosirDH4P1c!jqL4Dp+YnU}F!xyZ`v{
z8y19&e1PZ&eIKbUtD~b?OM56S!GIi0%+W^Se$zyZtso;q(cF9o9ukEDWmmBi^l7|<
zmsvAa`n_gU%4IHIzkf`3$MPgB{qBk5;>RbrY*;n5SRWG34`pP5_Bo>G-t9R(uTP&e
zDy^ai^kee#vk`A46Sz1&p(kebXsF7H?(oN?uU6LA&(1V@UN;~n)=ZLuTnxu;S6jeE
z!dgmLc=FmlXw81QH3hoT5X-oMBPYtYg%#B{`A|$pM<=Q6#}DBALw}bN@QQ|}tL1(3
z43{$thd4SipUSt`Aip3Oh$Pd~R(bWr7u!yj!8j#AM!owSlqX%$Oswow>>M1`In_BC
z<vwNsMt9bLO75-e!1?XXv)l2HM1*8y)RGT=f-^%#O6mvBFEEZ9?)YF3Ci8!N+u{<~
z-<K*wa*C}lcYbRmUscj4<m*>$Z4<HJ5A8*26K;E1_irf{D3d(!myG8WUIQImCurOK
z;S0^5v$n<nJ8co1jIbaNYsyGZFUvx?qYQLm!nso8QE<f8IPR@+(vxrnR`MVNk5oxh
zRh1(f3>k!wWRWWCw^M)lEgBa#s##c`F?4?!0UoHL`ueD&TD}YO>)E-_7!VT=hhec{
zhLJEfG9zgCgjHQmDUq(c+&;0Su(C2*`k=`WL=4vUv4otlU!gTdbOi)d|2d})Ao-gF
zYGYvF`{ClsX@#UhabGH4y7sYrZQyeRHPLT}Kj1=>X>nQnrB(Q*#^l5b9bL5X$J21Q
zCRp|iSgfu0Dk{8Y-S$fJ@(7tiA|mvlO_a$Iv@Ny56v^%du;fdYms$EOEUXX<U^yt4
zr5GuzgCcPAz!vda6_yTbcb7L-@Npjq@8rNpq~+7inu2%iPd!jj^j;AqNM?}GbQTwv
z1DAArZ4FwbXp6j0#<wArotd|jUbSp$WMp~SurD)k@A$!k5E}_=>EX4C<m_iIZWV8z
z6JfoEhiSLdyE_(#=t2L$06ZN0IR<6T1#pe^&L*fx1ru^)+X_90=QK0(%YYGks(?TC
z<d_l=1J~Hyj7+ipThETRHbA9Q9VXJbR9;OrsJOg~MZM~>-8c8q)fLeY^U%m>v({zp
znRsMa#P(DrHN~sr_3+O9ZjoX?f4@w^nBEnbzVtUnMurc(G|D!1lG8dm_vQO@e0&TB
zF8I?7BfuVYzEwVZG4D?gN7kw*7=po~6<Imzb~ZUXkh7PgdG7bO3UjbP?urq(y&K*c
ziMvEP73j$MEqkFy93m0*($iBEk`RhhO<ru{<F(nHd$69O?dq;%k9qqX?e<-mO2N<g
z@P@2M)0DEOC(itWAv+KKPJcVmBY)EK^CC+HODn777f0tuGaK@?MgLf&wD*gxhS&G^
z_hF{z3ZYYb&CP@a1QfgJhO)9u*<*IFCtk6$wNnnN97=klU1B#~wV3*RyB#5CUshJ6
zQe}g?)FamqPh?q1$xn70p8uRtP^dPD3E|G;^PEt!p59#g?rgU+vLfRK6T7K5j*e{S
z#xVC}!6_>(PAg8{-DTW1le9kqmbebi2JvdW%gI3CMwZ6R3~bEd(E!^mht;v~>EK~o
z;D+v!E)mhUjZyPgz&h5*k6=iIOoocvMr|4Hd8Q`qw-ZfGOjT7?D)ytLH6~w(T5r#{
z`lksB;?S$DZb}`pB<`U&qoO*g%wt;_<~Bw3Ot!h8%6?K;P!JTK3UeJD8Ipd<WiuP(
zP-?x>BguX8ezMFoY-q)ZbFwgdZsjU1rf=W4ptj8EU_Ba^5Ld_fYLV-i-KqVb;*rZg
zy_a2`ow0NJWj%Cs5D^6^0UFk^pA8;G`A;#YF2b{=C{~FdOJAG&ecTyApW*xKG;pI_
zM2RFTjL1;3oRQVU$SfI8!OBYH@&^N!mP|!ur7YwB`Jn=>zz?-w^4pC>l-EL3RCFiL
z&TBo!=-jULCJG8z=Lk40JQ%)|2lv8>M2Y&-s9lX)BJj~V@*C}tT=$lxc&JTAOkuw;
znT6dO{_B_%ZYYcy_k@i+NsJRfb_ehf_u8&FRa|LdajU<hgf-uExP#PX0wX6OiVZHS
z<6=o3*B#<Z1GABb6GfY=4{hD&w1z)<^o~|pZo3#*SorqyOPZT2D2!a3pJfdXH8+2p
zI2<m9nE*OEnq&gIysRwYg9k~rwg<Ol(S|=sC6->>TqXf+DZf>G3KKpqrTaNE$Ma7G
zr+JT@jqe9v#G<Ues*G|D6UCwb#^Y}G?%fNA!%c`JfhULQ=&8}~^uc{D=R*P>w?835
zM003sV!jfH1h>;QpdR<P*w4Bi0l}RNQn}J8z4hb*XWY*>AZUt-@_V}S&~|s81BB%O
zqnU`qPHfsB$#A;L78QdiRheA!8`SNJk@XPRl9iPOqiFC{0B&10vOu|bxxw?s(Aa%q
zV)%esb&E^WNEC?5$UIbRf4p(Bk{~H2mWs38m&89aQ?7|8GGItACxM}?F7XJ`%2-MZ
z!otG(7G#2X_%VDA&wjTP<KW;VuvvRwhyE45^u8+>>j8!#@R^=EdS7m|yNtf6PO-&Y
z@?vW0X;m!$;@x}qe!OQq_~8>^6vf*elp`0cTwxIM=GkW+cMZ#&{GsV#@ye%>+@Ysc
zr(kDR#m7fUf9-1|2k90Ujlphz79f~QCtFr(D92X#P(dJksSvH%XE7atQ_75qjR_w#
zN7>}f1sy{};Ya)H!S%^0p@Ylasy%VsdE3l_!_zY}8cfBLI2y@oSK_LV>h)S5fmr%o
zRULK5U<YPj3c*;i^2!1`)Ivf+C^kBGX%gNP>mk?eHWT*;l0~5+U)6^B*+oT9coOPz
z<VapmUu1*rytoibQEfv*79(1yhs>II57GvPa%&41?DOultD>XdZ0hS{v(Zki42aHJ
zgRHPus<tdV5<c0p3_uLs>4z*B)SEXm_3z%hQ<Qs%@g9~jW=#?-{keF3B4iuoU^@C8
zmLL#D7CTiXXdx>b3b{@{72K~G#n@G|<YKWw>j7T%RSphzLB}<3t&{tue6shW<HCMS
zUkTh9nT9%Zf`1Hkm6W9){;4bm6=+>?vGvG#w8T}!(1p0LFq_l<Y7imEarOwZ6N=r|
zL^x1U;^W03OKW<E;#NBAZE^DF&-<AE02&iCn&+#KKXlUTUI&3CSFGZx5fD012B+I0
z+eYL8n&|xEY)7_B{I;!%%0!*(S;f&X%*jr#_~Mvnbm~=M8t7;rDw#5%Qi5Y?5qvNZ
z(v^7sB&VPb?e5*Bmjb*m<Iii3=l#JI1ltdu%xgNEA5Rl5PZD@8eg|Vlj*g7Lvyq{8
zvQbcf(M){t>mvsDScN4?ygxCwOVpvj-HWjAgDB-D<GYae)UVa2z3#)0@oRr=kiK^R
zVZ59xU|;_ZNW0$EpKqC4TU%3VkHqjox(Mxy&}yF8m>631DjITfA-2UtZvZ;7+S?zf
zXAhJZ-nmUk^gv5r-yX2*o}QD_ifaL*Q&R!<IhXf`gKu8HHmvqI$^?@Y-n#@St*7m0
z9FOAb2Lq`-%NgXKQs(7q>Y17KR1Xh-rplXo1B5~lBUh<6wvG!VxI#-Rv*eYXaFurz
zTc3?0{wP90VIfyw_z!UI$;imkgKI3Lt*t`~5)w}HAw^quaH~H#l1_DbbMw!+{j6aS
zDc@RgcsS|h$eAAzUTwjITqMIMT!Y_V(_F$^*;U?b3tfp{+~hSich;5wN(7=bJOWPV
zAvGh>dYjKndk+5Cv}WeU#+l}QRUx2C2IhjVuWx>j1j416gajxxLI<C=HrJC0m|ogl
zOK3MYF)Ar4NggW)xlv(Kh&07>ZH6uXvqLL#BBE$qT$LlNNBFT8foWqgFNgbQdemPg
z6()Js9l*#tO?SVQ&0>SxuvI{Sw~-gxIB`kQP(0DBr!hey(^-y*_4Q@xG1W%e;$UJ{
zHss}Xv$46u^$CGMgDHyB&}e~X#+{fmiG$tU^hd~OTIHsb5^T0kPV8QrHUm<u%V=&#
z$cV6D0yaMV7r>oiWn@$-F?b+;=iWWN?7rqycS8oWlq~Vs*l(=n8t>l&0`x_#MF8Vb
zq_h!Wukr-!DPti`A-H{eH3NX|vzJ%9g1rQ0@!k~xZ9oK=Fv9m}bKH7sf@RxvcLjK{
zfvhuNSprw>2fmf7)GNfAFp!L-6Q~E9N}h>JeG&i7N{GSwDj){@M74ErEXz?~mJn|H
z5$`MgjSe!9uzWe4_B>`DWKxF3m|TOM({O3v4hydKXR+EYcj0bd58&eBBA19u9CT7&
z_<D6qH;BE)WyWD1tY^-nQ_Sd%@jCia@BZ4<RNP)MQZGq~2FS<CaHT36QbG<<!qee~
zYQK%FQK<9>m1d<>RYfzZF}2&;X9<42pm^l~X@gK)om{^*8Y_PwD}fvT+@~8oWnE0f
zic!939-Gd@$YiMI$5SzEb7D<zT^MZv?6LCew{MJSMjt<ZDA1_oI}j>VB6#$O{{R$A
zirKOynfVWe<$pk<3O-&q3O@_X!~So5@G02TqpzDCOn><zl`ZT3>%uu;eI>6X<m>$W
zVTk1mdEd+#A)k=g(3EY9^z0cbx)x1`KcC4f{45Ms3Gh`XZ<Grj`uYZ>W{))9Kwa%_
z&La(#Hmxg2O!T0dhSMX}{)yKn>><-o8H;9_S8rco)L?*eL~WEkUE;V0W}VX@PW$b+
z$hI%YR+XHT43^E_clU?+`X}MsT(pY+XcEWisNISfzN%%soSmHEFr1j-u6nxPaN*h+
zS&(=$x~|P&VV~AvdEXE@B{6ss06x->s0mT>0E!wLVMj8j(ll1vr!p!lyS6X-L{4Ki
zT4AMbxwwdNYjf-T&mT~R$;x~ku73_4K8^BYqW@+AoYu=W@81tWF|&$ao0}U@9p;k`
zrZvL&_^_4t;^O;xG!OmsdcP53VF`4YXlXqNf02E$V3X3ELaSEgaAh$GE0bLmC%+Aw
zBw=CUu5*}by@wq|FV|6AULNhVI7Dk0q9wL#Qp-6WJS@IE4!-=kt)isVw;`~F+}he|
z6M1G&!yam9Ve!3cm_}0nQVqWWa^lh&U>A$VqS$9G!N9;e|8i?-ua`%$K!UB*Nrg*_
zC0+ps8#}wYIfoF=+oI)9pKh`{CO?kp`I6b!-tIGTn@+8wftKI0lAR(0#})cys6W#b
znLuo^II@&24CE=+Mz5U``hO;^OjBcboYK>J-$UG_&%HpRy;0C_wG0ilbagp)V#|Ae
z&>c6gyYTCY21EAO(62Civ?wiuLMq#5Ds4|mgeWqrEqB4&KJhs-DVuQ8V{W($o4nBN
zxpsYvmgQA*xN*HZurM*-96Yf-?ds_4P8;0-pEV|G0*`%Ab_3>`%=B|u(e^ibO3Ryo
z%Mxs=yf!68iX)#F+7sNCahK_&#A@J!F`t~w;DaMZi;ay4VK*DyzdViPk&X9N;ib6i
z8}wPD+>L9vJD7lb%GJ0l;wq-=%qX@k$|vkjOM61b5f<S~+RJ7|%`|(kK%Zz0liqE#
z_-k^)neVlBO)&i6C<Wj?@j_{U0E}6kb{5KN+{xo*qCrAZ=l-*TTBQfIo7=$>&d@tL
z;$(|x*S!LF>4>6z<j~iwF*H<k5B=XTj&IFQ*PM^UPTedW83>F`H}4B24=Sb!{#v&^
zV<xD2W@@fEJ4fQP*5ccfyQ*q;yv&H$d#;=iaNR6IUPCWZMWK|)$Vdcj+90{4<c*`(
z%|QO-+5~Rfue~^#D0vEtOUqgMpy-+g!qYx7o5O~Y=YehMlyy@!N;tR6YNFH0{yuY+
za9Uf5>w%IY*zC}XC=ZB;6o{-XrJuT%%IYw-CR$DFi1of7%71<7w%b7-;}s@itsZMT
z*Y<L*O=6Dh0@B|$oN8Z9Nl_6}sdYfMAU_+oIOqBPV96<%GC`lR+Op(NU-vU2gFFK7
zX^ENmx!(&!&PxNw;Nj8HUeMZ=i52eF|LLrEIiB;WKOHVu<r1bgs?&OfnSK?2D3K@e
zjnfeb#p~-2NP=gHOw~M>uNDU$XWn`!-I-22SFB#?1LJL6>ydaN+o&3~z`dRa8HrwA
z$X>`W$TzT9Jm{?-AfPl`6gC!eo(yUBdGoCQiyF6!`-t*3`q|+&u4>d5i$Jp}8+aX!
zjHu+<1#MT7PuIW>U18`KZ0Jcu82;oyJLNq@SIyut3?LBMd8MV`Dji~kVWN$W&0EoG
zUe-dTDW2WkkLHlPRHXo3_KW$wUIQ%li?b5CKfiu*%SWMh{v+E0o)lP?hlk~3mO3M7
z6@yVl3R^3!^>L9ZII{PZIlRgiC03gJv~+XUDw@}*9}BGfNQgDe?FmTGv+}kj7<ffk
za<`UdCvW3Hu)}kHl5eD5M$v{9Rt;femDVdzvbmjfYFgPNU*{DOL8Obv)?J)#SdJtI
zPeCf>Rno~+7D`_0!fzBojgQWlBIclNg1N-ujPs5qsh}Y1<l}FyhvQeZn!9}blvIg0
zIRo0&tPBA32Rmp0L=Z9!+|ubuD@k5Rk}W@yi=fxMfO!I>XvE4bCEiGXr!uX`MMp=+
z#ui<t9Tyh|G0PR@gXV5~`0rtR1ja2STX@Ud_*emqD#&s{Z!IL4)_eN+QjIX(Ut3N+
zeB$9Z_c^cJuCC2ZlPozr!bgK3nMq#wDth|8tc;G9T4(!5=Dwq!!nG*OLHh@MkZ%cg
zP#d?s?)m|^Q%^Xqa~0Bn|5MaGp(~7mwfv`>Xg+${^RjX&+3@_0yugp#sTH$5H;^8;
zz#8M>7?iN7YuN0!({t@M4{qQNH{gBy_HEy@!)plYJ9l^;LE9wotp5@MKzE?johl`6
z=S@27h3g+2fhtyT0k5sCL2I6}3(hEaclQaJwB8a*w4h2!K9vhd6wV+?UAl_Z0#FFV
z*$MKL#4of559+79d6tA3`xQWfX6#%O)%NsW(=cHuiB!~ZTsqsSXJukaxsljfQ&aPJ
z7~|<x1~11k#Z`Oef$Ph+0x3A%4g1lUSlEoeEK<ro0aDM&!Aa&$t<H+Xum!c|Y&S|4
zU*tEtkDkun@u{E{+z-5Fs-Hpdn~5L9fv5K4MN4wptFH+_EIwIA*<J)XonQ`jv%_pA
z78W3u|A2hAyL-K$++pM3$jEftaYuy+Q(lJlqgnS1<7;SY-&}Sn52hO%d7UsbBopuk
zrXSc2J@EeY2^`xp_hIGwSQ`e3VI;wLRWTBM@X-<^4qo?Xw(5yv;}2nouf7B(|0w*D
zk{bi{Hj&)(Fc{Z#J&^C#Vkk*|Jq~+VZu3e#9<;hj|7#b3@J|7nnY_)_y2>0DbC!f(
zAYcq1#;VYh_{RLE;7I>@-17NRfZGM+jUuC>4z8pceXm(w`Q{vC9Cz6v>9%{7d^U<O
zFfahmH93V{1~T`bU(F!G0cQ2k(2&$yaR%nU;}eXV?A4HveHdhSQ$k8!{^USWlQA^4
z=Fh!qp62KMfMzN3>%^1dj@Ii&lMB9f-Vo5r;CjtQN9RUL)f=p|-l^9FYM*(pU)Pf!
zdEGDg?q}|&Pq8@cOsuTI{;Eovn!T;nkc|SQ4|`x|Q$ma@2kZjxgQ<%~xyWV-A>STM
zJXrcGljJ5+1(UlhuKZhKq4im>8hCWqt&E7A_xpt^uNB}fIm!%I*>0p#b!St*vUYKG
zZ69B_%zDMnK0sB%oBu^-6Al0wSxsnSBqe(jF80X}cFlA8X#748^WeMaE!wh0<m8t!
zqS4mtc48al!?`?AqxZyg@hTB~KRS5}WIJ@s88v5$^`}@%KldBfM0u_M-0k)u3GEnC
zl)8EK_#z?oJ^I&b3<#n}w-WCvfIHFFB^^Iy{idnGk-msCrE-PcRt#tgN>MDXF^8Ls
zeGiegy92H<l?m7m0D!0JY!^dAxZ08gC=P#dm;>6{g{gIQblev;?2ey(efJLzQu3rv
z(nN7sNH8QIUH#9=1O1*jDtxAA!D1t$<Kx1QfC1FgLw9j;LDMO7i|@C+m{=~%Ad!hd
z(QWf3B?!{7ZcJfsZV}GU&zqQTQBhM%#ItwUCfZqBYkq&{2~sk9aDp09=}v+8O8v2|
ze1is7+iMjeAV(^W?k;rUX+|Q(tPpkWX2k^s1yxo5B?)-onw++IkO3SIQl`m{eC`p}
ze5Ahb<ml-CCb@`F#8MO#Dq!cp)n#38g99w)2Xw(d-qKT10fRrWT9Hn3-tEVCmy=x(
zDWF+PCU6_Re-9O|f*I%n88F30M-*hA(}uh)GoKZ<X0cz{A^vXA{}mikx{m@;=`qoK
zycff`RaGZV#*4xkLqf?VA)>R74z%?`gh@_$QBjX4tONwuyhbf8(X(2{#vC?AOiNBb
zKWe9@hAoEL+Wh?gbje5!TrUZAUTgaD&?_e0Ugl+R<w|5zV>dCF)$hqwE>=;Ue5<d&
z($LTVo-n9iN_hR8KtHoK3wCwElSvERT~R~&@)3B0LPJ9<G<w4@L9v7Qo7n{@H%4fB
zxVgU}AdLVc_&%sjF071UiI=BQOGdlpou9;c^ZL_--i+5%z+!{=g%9RbfGM6X)@MB;
zv7}1+8T)WCE^bp==!$FjlN}3GU)H=#;=dedyoM0IwW+V*$=TE2{pZ67f3*l+#ba_}
zTv}S<enDcMDQ=Gh#=|_K>hUK4R+yaR;NVcDV$qYUN5!~(8#b11P5uVbBk%{}-@pG(
zORHn429sGdO@=5qV|xPFA%q3}+3)oA>s`<8#UyTROl)4qGOH>p1B43`GcPK?r^8i8
zgO3ldC~ONSBJ*jPnWqS@#}fHNhPk+$q9Qo8&ENxn{S?xLoXW+ISO52OBI)H)-cF2<
zi>q)4qBC<REW=i3KYcO|n1d^Fb@m;WZBj<Y%BT1&R`Z$p?QIEvC=oz7Cm<-uh{*4I
zb{dIq=SY(z^|}ynl)vFU0!?QL9e<Lw%EaADH4RNo$rBdE)y++@4i>K;z^H{69Md}3
z`dy4-_q^29AD9dFd?Vy@+=oPJZEc;S?eXb>f&cqBAWiv@@px#InK(iUU&=ZO;5xI3
zHXH%b1%hgO7&b`<)jxQ9xjkO&voYVZvR7_4E$9W=8@`2#6{6R{2`u&26<Po&B&kwO
zB4a1}`d<GoV1I^#=Ed9CDBvZ)#f6}VW}Jm!xwzy-$iyBR9tN9IAlJ91rt6H^FJ8QO
zOBU+-yH#JUSC`IWl#@bFjgzQ%YAVjkw5q?QxR+Z9zsBX{;oo!m?+Y6GdHAvLf>}EG
zqqKNno9W7Z<mGvxV<~2Z1UfYFH72hfxW0IKc`*e+@D1QWa1K(Oag$FeAL+yFm7IKK
zad8n;@U~izxD2mli#9MLsFCYRjG@@8$`WQXvjT1cTs%PG>-z$JJYK4BXuKe4(_-V^
zoqY&e1#0QQ9K1uIh(9?wQ4EVb+NW5N@fDjp_zk^>(|Q)@Xx-1YMxE|?^-oWWxARx0
zbbEXEFuZ)ZjDV*#e;B6Oqq)k?zvsP@lb^A&+9Og7IqrB^by<R8McYBCr{T^!ZEcv5
zleFJr`{y%+K^md!$XTbx-O_L_J{r}7kVaR!fq++_*M&PF_BB!-tjD>|AsxQ)T=bd^
z&~C+LvBk#sG9R$*<J^DYuZz3Q=WYZAabsg+U7g$bxH2UrCFb$Kz7MfmVvUEUa0enh
z2OS+<BJLFtvAbKxS5g=yan;tsNC+yhsdZ*!2(5;0`u^un@O;A+Z)l9)KN#IKFPkA@
zHdCWJ*CeoT2PKb^gaq){=P(M_4IAa_%FD@FLco2*5-c^k4!g#~!+UT#;n1pZGBbxk
z+zdvbr%x=1DZu;-Yu2?vpBd@jE4`iXT_NHshC)QdFWP4~y<3&OEn#QXKru2ZCPp|Q
zAO;VAUm1e=^6KiqUf(d@Iy~74L>}~jr!e$L<>`g_*gvvXB0RHvq96%6aq&RiwDQ5*
zn)S*G3NPh{u~>##Il3yVoMZ%2vWsfcm-RkZdda{0X|nAz0Yb9)c*5{--DWGB7gdp~
zOTTsx_YMz1`YS3?<+PCxw=4DZu$l}7CbCe<v;VOJk$om6IU>R^v2m6Lv%$)(ran#i
zA)Vb&u+3IklfL}9<`bnt?RYgh9{a;jRX3F7_W3}*(G`GSS}MP;POn@f@*JC-RKw7?
znrkyVK{GM3+}zey*G?g(%EC<P=2lfEMSbe=a>1`W)6J&l6jhZNnXl${zf&n(ma-3~
zY(SQ*s%orkC=IDIH|#xGz7w>uc3iVbp*p{P_bv!H@O>BlQP+1(3rk2OPi8jx?d}3h
zjGEQ;U_BfTA+@sxNRv$BN0sLi3_pJalMidFBC!5dRaLDPYfK}@az6+n=4o5_ohn0#
z+_(N9`e=JPWk$fzFv|(Y2tIc@=xmtG?nl$*@H~`kfXuL4IYuZdGx?kC;U?|@%N@$K
zI-9j*0Cz*`+!$~2+|v@PVIwDum6av5n@z~*nY{XQ;P47a9f%r3#;``>iioe}V)0nR
zecc<4k4;Q02`NQF65n1WNhO~BrKmLU`+U7=Y#i&i`;bm!5&cs{#7Ih2<HXp6OuC_t
zamKwww&-Y93Y!Q#d?*!BkiC`{-#__S=c9-04Z<K<>kpu^s`lhfN>A4l7r#5DUZ}+A
zd^pwAq-I3x>lc)gSm|@t!PyKjKsI)Eax%5Gok(Ql-e^Kja?&NezW4eouM6qrXH2&?
z!DTRf1`=B<J4;#AzLziUXo52iG7W?$95l?ZkJ6JjK|byV00?Vbav|_9lQ|Lly_tvU
zbHA(>ubGZct(+0S0`VT;iZZY>uAU76_+kC&t0>gg=cs+8q@-%?`c(|s5`Fdw+#7~U
z0<MaC*FVbT8`Gf2q}6@;`F?F<L&s)QG$D!802hJ4MbfRN2%eBI%Fe-EQg!-*N8X}c
z2*Os9U`|0&N$!KqHCb}-L)^IW@xuqcn|!>6!opS}&sfx9<>GvHJU|&zUfxSi?EZFE
z3{z=xY^+ap0}<YNkX?78w~SrLP-tT&r>smFdQe_oijBEANJNry6&kp>I|uVF5FH2-
zehp0-ocitvh7~v!hti*IZ27BJd{0Rs0TB0u;z-`?m$<Mo5S6+$w}JZ(b`KbL?!4F6
z2Psbu(LH>k2Y|2#lO^2Z5t%RPFh4`wF|2<LJBEhB)~S{h8K>{wj@L2NRaR7tjEkd?
zJr}R6sOp9bjaCp=&?!NFWw;L>2xCmm%*_4ttlg(ry^00ZWdzp&ucLC-auZOt(iM_f
zj7J6-tlcjfi}^t#vFh@Sk}^q1Ui<y?v@a8FZ4uaSC98QQgO;%~pFW{xDi)ty{q^_c
z{e`r#wHEOh7myvytkh?9Qu4-f*Wa0#h?JJqOl?+b%?ZjZ)Xfkb<krn-h=3Zn8qA{x
zU>`7*)#18vbW681Z141}_hF3c3xufGFrZ>i&rs32yDO28uXB%1mOe@NFkQ78C7{MO
ztZ!Y!R9(d$W;{HK(uF2tKG@NpR#?aj2_?R{xUUE6;^NdYW5zSqsl~4`kWR}n9%iz0
zOn@_#fFQ171brfi>bP#2E99#&hjV*Zz=m8-S|t`%xpDQhT<q3%GCm>y`}YAEk>(1^
zcTvd3Z33=|dv@Gl+V#c@jy8dc79{$R#d-Zar|$Ywq^WCO+OK%%&9|x!;IbGh6ZT|u
zRqt0sT(~-C-QJ%xuQM_++5h$HPCOIqMbn8+d(ha#xb!a(>fK`(XgxsQw^MiSy)Cn;
zsv`5JbtPfC!p(J#Z>gNj)i6)3GP^Fx4K#U_O~73Fi5}K1{U9VnQ1B~1DuzbIePS#u
z@#xa!-%*caTWHndqC@KJd(DhC0|S*`djV_WCUS3jBIonxVb{$jvaEz3Jz`ZXhYnck
zEw~B51DV4a@aq;6Q*kJHFgYoyw^z5dja7P6V#5=JKVV2e3}+-I^+FsUKenZ%P1*!p
zPS++x<x;K22#jJt=-z?odS$nn>6MlyXO!yrPCh)G)l97blIEQjpG?Pdu!=b%4;AZE
z@MokX%c)q;?XC1cj6*z^b=7yNlWI0<V`HPl<m&xeB0NSPX)ca_hC+Z;WJr9Ypr-~!
z$<j9hmXNnCvgiLc6GT)rozT+4p=D`rYPvNs5u+S9yEsUbt@-19EpQRxI8k9`eD&%z
zThiyxlsAqfz!ATUp(-?;mTe$2AKoLelo<?W0;R%AX?4B_u!v`3rN#7H9nPpMq2%B|
z^?aSFk*0WJw`yl6tw9)w00BRx$B2{MK1vE6JL%Arx;~Cb$%ay(eN<i`VL~r}gUpPK
zY^?0`N@ST?Sfxp0JUcS3^mGl2sC@z1#LQ_D`}8-E?8%?bQMH!B69jzn@w83_2>Ct@
zz<*5eSOzbZ{w=X4kDoGtNnn{t(VUhUqgn_h>=T{>#o-yZ-IhYA>*wa?U@hn8apK|`
zo`x0NE?R9Fk7vHOXJx3RFkG^+wdK6EF0YbPm{j-ud&6`$|K2;0u~AVYa<X$y-@A4Q
z3)AJBl{`ReVPYE8!D%@;Jt3dLoA<7JQZQQ~5n{&g>dMROnG=hT<>cf@PDW;DZwqpu
z_xieyPEHJnFY1jel>OzKS)uJ~58wb%kXINQksB;jmlU_PvI8;1ez%Icyu7+P>BdIw
zx0vKVn**;pQcA-lQI`<e3EUOV4yoy>eXK5`){jV!&9+I1ywvhl><r!}o%RzDKIftk
zIrR5KqnywS(<-MVl$6$LY<TUitbCggg-iWkQ%9!^ZS&L=-}4AxQb95@y)d4la%%G2
z(o$O1Z2Is?Dr=*y8*PUeKjgwWDuRI?A%#`+{imL!ykB@$_BiAWPffi!P~!*;lG?wQ
zm6u~@CDVooQ<ilN!yc@Yj>s#>0U|sD<5!VD@viPX&?7R>ybDMPg>_P>8l8D&L0Tmw
zpQ*4yG+xR9t_QBpSD&9q9>R(m3L>mJk3usuA0rY$o0rTsIxxTp5UW^toS0bTmphrc
z5*g4cBO~qKt`b1kvn>+q!VSf_nzb69*$~d>7NG1GiP~a`15$^Yf{MU$N%GVRz^qFf
z8C?}?=;7@;FiSI3_xlbQtWE@CsGeJvA}U{Xa%XeZ#@0Hcm^$R`>ouk$kjVFM&#iS(
z6x2qun!6pBZE<9sza$~4h3%unGW19QiZl=&)_9yHXQXG8&ixK8Mkuf_UzjH1me+NW
zgv#o$%IeB$rmBO^_pIcnx>K@3cU#{NF6Xf(pmHbFo&FoOq`Q?Bx=w=mpopdbkO<aa
z?q-VsQi6#Iz3{E}bC%?)&!4jl%gY|{Qfh1tFvw6$;ehAf#pOnR2HD|s)%BzTO%ExG
zJGZ2Qel)J^o&V7Tk#kmLK~CP`!QB_E<q!gs{K6^j8nmpcnR;74SH)P&oI)w6`^)?E
z!cPwRq~5)|m9mb#wYjOH7RO^pk}c{#cNc}})|D#3UqS>_qzF0w$455y08BTXt+O6t
z47(gqL}wM}%@ZTTw?)1q5{^T!?6kQW0*kzecJ8Ao|FC<qQKF6|PPnp<Letv>mEG%&
z-Uk;{=IjNYGYCuCOG?<;$rPPFjG@U<p?LKwwXAHUrzhyJHE>i+(@Q2xS~7SyHcFyq
zwIpDEdQJ;D-cwq(epf0mb&7>x)uTY8GA=G`aeJ;1w(-D)?P~(A8^Wvy&lTA~D@C>0
z?3aT}p;F5#2v8+C9)2dhan88SCZ|cmCkaw%=)+dzB2jeHHy)Pn{{d6O`MK*q4}loU
z@a?jIXcxcbWfYNzjx?QtH}mxJ@R}_Q48G9+#JEFYEDsI0&JBa?R1g^erQ*d4S>ZG?
z>3&P#dgbMH>#V3ujv@Dc106;BH&J=@VbW`;6~FNzO_lT^Nw@z^7;}T+YHXZCNks(*
zGk~Y2AQ{p%;C^r49U7%w9GjqYmY3zrBO?8}yIOdSd1=V*Fersi_a^)Qyw!IauOWqM
zzopXzMp0~R(GB{}B3{o%FtY~~4Vv*J&?gc^Kq^x<Y_kSNgLe_m*3H>D)Iz48dKaW`
zWErVZc@-283pCppO9xgyz<xP9*79EA-IwsvQY-0J3vu!8&GDxQ!w4Mw>V}SfVQX2~
z1OUdOEt`0EY+?*F9iOCa8}Fgrt8-b?mX_9n!IslpL*n>;!CRWcBaF<PoRp#JvNG>`
z;Y7Ds&{0v4hes&r^Iw^3R76Iy3d~HEVtYN4hETiMSkxoyr>6sf>fgUeYdlDvX>OLy
z_M5n&*F8XR!=Jww!eR8})Qds=ay^`1wD`Jb1J4tW>eYE)ud_2!ZH5$nA?H{nnq{{a
z;Jne+#_8+0$<zuY!0s-Zzj{!lsOL5xrql46?FU#`S%88N6%!4HgK0WlC;`jBi%Hsw
zJe5~eG&M2dji@|9JjDWh1wp(%vbT*5g^$s@cj?JgR7<TY?oP&LTDaKQ61bM2FRe|r
zNkLT9ehgLPwt0FXXQzNS4O~(P6I?4DQ47g#0IR7h_z4If)zEGj<pA26HZK?Me3s7m
zumy8wFi1v)JAO11{;ar4t83(BovRPp!5BL$yLeU}zlR^^=dYuXrC$Y7HGQ{=Lb{?}
zLB8vGhGaaz(xQ6x9XWYbRjEg5BV&HUIS#n_&#<Y48Won8AX0yX*80K~E1t{QX-Lq?
z$;r>(AJ&w|KO0`#c6V!@0^5aLk|>syNBdyCH0)1AcsQjTaXjeDm8wjTX}cB}0s}Ga
zS&huHE7RDxwoa=K@K<xf_!fZ(PJtSv{<^z~)ydhJiD`h<bY^{SO<7S@)H!K-YwF-u
zLN92mLA;qb4EuVK=z~K-V1!ksre;=D_@Z4Q)2?}c>Ph;-O3qPTo)K#njcb^rP!NKF
zar<Ud*y8i0{McA4t0M6DN@}hT53?W`_yygDfP^CRLLAj%zU4QFDE;zS%_hW5O_r9@
z5Oj+qd+SXfKK#gx^4l#cJ1i@d<lw3@RxJ1=^yaq%r&E+JDXHwBxi(lxRETF2)6?1i
zX|&012spF~uytX6={T*bu7;eIsbC?tWj$;;SA%}vaMc+6=_yW%?B(sAd(k;k6jjw6
zsw#L{eyNTf98rd=;o{XHxwa8L)vUqo_O=HAc(wZ7gzM*>b(%}0^l=71@a}<}lJXVG
zEI*&@1;u;0486SnAu(8TlI1wct|%Ct3XxK8UZeME`1ys!Ctgu71b4a)56d=l_YE`K
zxX1qgF&Kkk5fNnkifij8gYGAjqxbuE`kp`hyq^7$q-`XTO#D<qHZx|H;@dK%Gdsrm
z#1mJ={_E=rmoKuHk7iU;!hylh0st^b*iltaJZ0<siAx@3^Peu@$Fw2i*T)B0-V)2+
zKOdLM7An<jgb39i|6xk{5@ex7M?9j$_Y~6~T&RNaCb+nis2I{%GcyrZuQ8T1%*eaL
z)CLPdW;Zjl@<V;l+RFImLtUN?z*BV-20E%JMHCS5zOg0b%R|pBdm_WVvd&Lfd57@-
zN7-9IRo%AVpDHQ}A_kHIq9P?AQqmwG-6bHP(k*c4QW21r?rxCoR=VNP-F4{h_+R?G
z&o5?Xt(jrDT*@L2eCxjVwfAQa{1-9S!z&YSEw4N!>aUCUbH(h;Dj&f|O9d)Mkv}Eh
zIh9*8OLi_F`z{D*qaQ!GKNf3q+2^AxNt<|X^eCfpRfzmXL^R;@+f@=%ZhZ>PT$zab
zc-`uqLL5D9yTHGM*MTo2;Lo@mE-u!ayzsUQXXkcifxL0haN%`PbKp_)`|N;d44HD-
z^dO?kvjesK?WM<BW6}-x>ldL2x|s3Ri#TnUlI+nqk!M6)k6tFXWYAq_Kgc|a`ova5
z*ZSTrA;%`0qppy-7uk{*D)lIu@`=me^Q@EzA=|NS6Bq`e(zN%`4fTxyAfaz?YDl;d
zxq0#6xz0~6JDU397!jSgac_PwJ)P<nes<xjP}z;opYN!u3gr!b|0iNrg`{GN7Vbqc
zMa%c5Gef;z3($bE?(<^neRdCe#~l=#!%Y#{ZUX&moUFQ{ZYuWp@=C$Qg-k=kY_>Ls
z;&lz!f4>e1KKPllJNIW2qN-J0u&#i==TG45y-s}Zyyy1ge=d$cJ$UY9ul`Z-;P0sq
zb^m7Q{(T>((SLBIkea*m@Za}d`tM}gf4}R0VN^eF{b|Vh_CLP(rN+Oj_CI&G|N5L?
zLA;m#zlG+YVe&t2;=iB#|LYU4-nuk~dE3{d^&)Tfc|tcEf7?T-_uNawFDn1aaHH-2
zJu+LOD6^#UzCL4D@4<C${=Y9^GY+P{gOzO)8Q2U@mPs@-Zna)fc;H5?`(;$Mzp^Vo
z5s#>>E{~a^L!mLtg6d6n3Y)#r{L(_UvP*_{ge5br_I+8s@ba<;iZ$cQLvgj;o;edk
zH%TU6HMvDBI2y%iJi8|rb^=7WYZiWxiY#SaUZD=YV0=zb(iDBIdp0Y(3GY$c@~bsu
znd6#F&H#DS@X!5ADvMV5I#CX`wb$Mfw@qFBdmc>1_w@9<D4&S?e{3h+%O3U!)oS|5
zY|whix~zO1OH%EU<Ki9OI+xpj*t`F}{R#@(Ch0aYS^v{x{Cjqbnr1^;$`l$8BZG^u
z{N@2CWDwn!{}ZG^W&M`T+<z``_~bA;IU-(r8yl1Has@~0i}SPjd2Lu~c|XO$m~=Sd
zH-Q^+W?`Ytfpx4kqHv|gl~$GHu7|+J*{npC1;8;T4_oLjju$7Pm+gh!&R!%rDIqm2
z?Z<y#)p~Q^^==&2jqwV+KWv)at?`oB2Xl+?ya!J1T5_ny#ZK&b?D>k*))D&8bwl;O
z0mX}xF6X}9-VXea)3w^bXaBEU=ajF+(Vd4K9TI@LU_y?J)Q&Mj%m#MjKvmn{XMu?N
z@1EgdzSwXChx7Ve8_%JKz{jV7d$j8L&<2(VxVOE&Bp38*XogNAKSTSfm@~Yzyey-v
zTzyi}wX$N!YC7Doh)G#Hk+*Zx?StS)Gd<zA+S<b~xJLF3z1P-0D~P=qRCPWB5UfjZ
zQAhEb-^uY|Ng>nP=!t}x*=5#)|ANxYhxazoslVbM4QI6GUIS0lfpyK9YeB(iwot6O
zxp^|}>iM}>e$U5$FYxz|<!tW0mXgYWcFD6T^c>EF*Y^>j7~vd`VVY+=3SELcan7;!
z>t%m{8L-p8e97jH%*g2AVDBV7EE){fMmmK2*8k8(u6D%~80@`?Fw|Y#to7o_{z+;7
z2eg7(x7(T@R1Qflj4)wR`uNnx(|2Wg_3$v!`tZtcO#13Z>Me1Jj<+OY<n$L)SR>mN
z8|TS!j}GAQure^rZv|OANyL4~mCwV<>NTV9nbZ}_A&BM9%&ZXWcuZov-;%0sq;GQG
z7JIJofp5aihvT0$9-IPP;tJSHunbR2TUuBMX$z(QgM@0WuXlnb99q@lr_Y{2^`Z|$
zx90<>*vzWFI6r|zj+j_mFpZM&aQ@z`9}fuSFk?lV9$s{UazWJew6Tea+2*f<-6LFr
zvZ?L)9kyW<6YKeDx}aAGDOW!IQ>LF)S$n_EH_|rYa3piu^;tzkM&2eJ;lB?l$cwEN
z9*~;a+)dQ&yBiuhkjSH~nsX;Tz1-py&xGaA%D?BeTi4scn}vfn9~%5XNT8m*qEuIV
zBF?)aC#R&mJYZq_kkj>JX=dimuk-)Tai58cT;j4e!B6gDH5n`YM5eCxRz?OQSCuwf
z_agcSDa6Doe&g37k+8!qPDzPKSy^7*UmrIFzS!*6oVj+!y}Nfoj}`ijaC97pu_%lP
z)208;wm}N>Y`915=f^V%l$&|Ti$Gcs)^j(o{o<5iT7C28%`tV5IKU+WXDEzLf+467
z9o=y0l6a`^K76-<?rz(lN3k6CUqzumsn@unb&n~FWIFubTzNU6NqI?$?yBWA=tDA*
zWEzn3G&bFMn|ZuBH=wP&FXe3OS0Of9SX?}PWeMaWX6%2FH%tbR_6H6{nu~#enV%FB
z^YSI;l9mtqC!`HWU0iD$O)p)(T&pGE>sN=4-SDAN4p76T<MZ+uN_b68bIv0>y1KCc
zVsJWITUQ}TghDB5NYJpeL(+koi_6CZY=h&~j*F?WPGf_EC6H5qLP(5I{g&qDw2sIU
zr(GluLBAdeG^ir*hlht@kY8vA+Jc!GL$J|!c~(NgX}!lRI3{3l4ZWn9+1WZkjA=MO
zo7B-x2@VbB+}jnqeOq#GuZX<CwX94zRf-t-4$4J`c^-X_T)@2g(Ld~?UdOdk{{xS*
zGIHQp5b|%96tl=-j&(U5zqGb}d)x8p%llN%n@?gV&su*YZI3*Q=&N@}a-6mZSqYi{
zx%d4#^U%g`&=Rk^`po&39ypDTS;@#`3c8_P1S)GGRwLITDovkK1HhBQ!a|sz;AuFZ
z(o<t%I9R=#<VZMUyZpSp#igYD{QSCFTDWaCdDYdk-#$-K2GaE@xa{FXQ<s+Jy@&`8
zhd*YjKrZ1%EIoSAvt3t*frqC=4M%QaYslMsHy~hUXR*t1uRj#zG`N~}%gwmb<Ks=%
zj%k@BP!{5=uQ9%(?wgM8H?f!w3%VZJ4wI0mThu)Uj!=fe%EeC2xp3^a2-Qyqn<=0H
z^#DBv@>B!;ljoF~KPfjhHZ=0giOC0{nD64)v?i~_y3g`yVRmqE5r}&jf;ETz8!&TP
zSuto8_4@Xj%yf?ApEcB_byf_uUW__m0775U2ojlIR+g-gSVx@PrCLlG7=(s?`$g-y
zHErP~+K^!FUzhNL!roQd0J^zhbhN3f%M?b8KtIAE9UY;z2#112lRP-!hle|32q`J-
z4zMES=H?>I%;N9SL1iCW5{reVH8?{o5ruGd^+J1vrI65~8y1n6s3@Fsl+6RHWH&Co
z;KIRZ*h)l?v7Z*A%U;)&BrPh;KQ7TYReW>@Sd&iY!{~*)`ua#H9UZEk-Gbb*EB9~i
zi&e*UGznS?4#%y4;4ZEU{^QEC!#e9Ze*R_Um&%jq8&!LN*U3>Y@K{%`M)=m6sBy*R
zs8t-UTJW6C#$Id{I3N8EZriFLaa=$)#S%TlkE=Rp)B2C*_siw`-+|mw*Jz_pB;_JF
z9ZJd}&qWN8`XFuy|Cy6>Sgj`U9&JwZw?{({r>Bq48I;dHy_X32fz^pB$od=fy#!Ve
zm{wAm{%}%OC?(o@ccE5wX&oMJO|<*%j9tht@X<jjR5RgR9Q932O~b=wQqM*!bgjk2
zFriv}AorjQMiQU}#%Cfdi%~V4ndiNcg*?A2#^OTy_w?E{l^d3do(*vu2lrdFn6b1?
z#IUWuEMF%myp*X)V7IhUbv6xT9=C8iPLfGb{J7SCM5L!HTU!sN8Rl^x?TR^&Tog!6
z28#L!VRgid7#N9@ZKutt(EOo4<akFahcGiR5LXEOxw1Z^PfSjptp>BIKU6c7_CDrG
zOn#gkHg#T)sfR<e`&Q@c+E`4>a#51q;A*{CzUBZSv-anTcWMXMA28<5QX9PepHPrz
zHRy%n&*ZRqTG<?rpF)q%(voy2K7k1HhGa8%2w@B@CN2*Dni4JTrxJo3b6kxa7~APS
z<Nj++z+r>kJOsPA;jYz6r5N*x9`OTM{QCN=OK<K2)ac#&_uUZ0|ASXEuzAbP0&pUJ
zE$@PXS5P-$(q&`8Y=&Y?T#n#6|M#jOdH1&y#_5upk`k;`jI_10NL&*$GsP?}M`&wm
zMu%8MBUORzprK(3Lwdh1Lj$8E+InDnSzBlJ=n8`7BOvgUwzsbjpMYR~aZy7?UD6ty
zKQL*KP45F7`QyhQYpV`VP9O-j56z>1;D#k*kWlX%c!?*X2BKG31-SpYfn5?O`HL(A
zYX=<_m2%!!4`1Jf>qYo*oAx}XrKEg+E6;i(1|HS4-m1W6n=`kCIYdh!MQQAp*jHu_
z|F?O++-<iz{}*cjLU?xL>+P0_2{Jm9Y3P}AcXNaIctHUcell!>o;9~MpyU1L#kAuD
zlJXwx?>9Cz$!&`%Z$ip4aRKzM`bnP8xKL;I{uXj@(0ZwxFGL%pHVCIM(_;(U?t-5J
zBGZuaiq1f%fQL<cOA8AF18P~;_iY4tc4<<dt6H?hI_}?O<r_^x`)AC|uy(~I>dJq<
z@1;v)J}uaBB4Ctx@<c>lzA!S<UR@o=uV@cOhKIW%9_YbA2@B)Jd}00V^#`@OkJ1j}
z>03ju`Q4Fm3U7P}{`>1-<Em-06R~664-2>y0qdTu>}+nJ64B8~s{QGdnELf4KVKG>
zgzr;dcK@pd{O3hX#r&}ln#*4u_-r2bOa5B-x33Uf&c3WCVhuDi(0=}-Ps4|Q4)^?X
zzi84-!FTNh2pIw}fuGR9#pdAPfYN{-fsp<KY^#aWPxkic5plSWAX}r854_;^Skg{|
zlc{JTTpd%>E_~nHz_fp}^4yek5`w?(AQI_INzt2<k~ZD}T6|;UGbS=zFQ|B6d>QZ`
zVx;vq`aAF&i42SIi6)osnAti^Y*i-d8hPXK>`m84<%|`5HOv(E{|zWH`4F$HrLR4|
zumC-%yJJ^rMcR5*G<9L!uB61utszz;t7ae1N>tSg+@`|pYcG;FW6;8oF<{O&c^xl(
z3p|(u1JB5xDJm)X6ks@FLj(6C8k)@bcqi!65EpL;0t8gBGX^$wO**fS<yMZ3O~k14
z@bDP4P(KG9=%%T>JWeolLcO>i@c<u(gyj7938^=`JP*%BgIEX?3sYfH2@()?3*9$0
zM9lKeRn_y%wdE{&8!)#JiVV=N4eHQ#{>y(>@xORuV$}VC4IJ*h%)Mr8ytO#{7fs^t
zFEhc-eRlTJUpUO)KRhz9BUn{gnN}k&Kq1~>JiM0z)c!JMh<SnV#u7q^jg8&=6Phqt
z`UV+ZR6*;laydfTK(rM|Ct)HVb##iY#_hlb0sBR+ikejLsOf>1#%g~bG;_#`HTe;@
zmF?X|l0&iQTDc{x2SGzIsQ=%1lAggq3S6&j^|FYdpypt|kv7OX00E#>84j!;=P@O5
z*gLw^gVE|Ldk_c-Uf?%=uI7h5m<|*d)3L|1*-Sl(?J6nGOELX}%Y`z_q|!9uLF&R&
zdkE}JO<iKt&Q`AilFA6r3trNa-vurx0Z+`hlamvkqeIO-f}x~OR%T#(X0zG6WPPyd
zU$+{4j&S*Ul2dbRV2*7{jW6P}wi+eg@jNB&E<|NO@Ax7(ZK|Yeuc>LQVT#RoP25`|
zLGvT{fqVOgel21`fi(^b{c{GgFEab7H(?~i;czHzt(2M-eFhO3n5F;WY79V@cxM}q
z6{8+I6QUFBLI7Q<ODj*zep{9gJbAliOV8NFZ*I_MdwQ}_O+*+`oAJ<FuxJ&`ExSGM
zO7BRuJhvE3BRN>L=vrKuLs%gIWB$n%+JTd;yh<kR#OO$YuH(F$*F<>%^O?S)yRBY>
zrbC+@gBrab|0lIXM^NC+@zII%F4Dd4>degYaq|;DAeIFO1?i28X=`6wbDc1P#?J)&
zX~=u;;%k2VSZq9b4n^PM`X-y7d;YXl|H-6#znR1`&H~a$E3WymEP(bCHar@<LO)$D
zOiq3fy$dGCg6BDfg>z%W1!x%?eyOpx&(<1!`ucG8to{(t)`D>38cG8sB1@#xs+=b$
zWbC6zNv2^7tp7n~Qra2SGY{?E)DGuIczQ1Tw{OS9#ArBeU1MJDie%k@rtRT83wJ0Y
zU_RkGINbsLJ0m+g#k3R<4MeOa-6||B15ooR_m%V2tDxA>(13uS53^%G@B{qit4lgp
zabltihM1UWA-7d}pUq0KG0=oCT)|r%+uGJq<-}zPt$v&&7rPg_8+4Z<U!A=8tTFP`
z(%Lj#?l+vx<HdPc3!RPLs1k<8&sc6g(<XIU(v{t^%j*+;<J)I}E_Zs8B*es2ZJacC
ztZX;9T13nb#^$Sb7GZb0^vNe%rZ=91_VV#^mDQSxlM@M6T0+K1q7Z%g$U8NK`Nab*
zGB~Wa2wwIrwgy8tv5K2Qze0MtzPh?PCkZ_@JM|{tB~_o>cgqndgAX4>CVLSC4!=HM
z-klhR8`#7|ON)q@93wsbM)ieb3ITq2n5xPM##QC5EhK2;|E%UHg(M{Sm6Rr1hM$1s
z&PElYZ-BUBd9bb~8k-(@rMfQ&N2p1t1C5=H4gLCc+y}U_tP0;fy_4=?#8I((-_gt@
zfBMX7dCa3}QAtrAd^YA~@7O=w_2lpR{P{CLlnBWlXDzliH-||&nT}TuS62Zy+GTF8
zueYrNT>t3%8=4yX%l)Ijx~HJc+WSx-*jydm-3qKi2wYC{zGiUZC417d<St#^2miDD
zORc3BSxv5p{HTzKH<4JDa+L4jxo4oGE_6v^v=IU)!;wL7gP8rOSyfpz43q=nY>k6t
zx%WuDz<?{HoSWO*I%s+$bFy->$*He(x0oJ`5TXhXz(}@=?VF=fbG|uU_Y4RsL4B*n
zylA}lGt$$2y}i4ERSQf+eu7qAD0k0(SM9Ji(r>l)5T(Md>XWZlJtDWpl??MZW+@mK
ziCpsxxPR}SR^wzMg&J~0Vls%En;S7~)fz+<K}aYsN%bi-TMb3C*%{3NmR1K6Khd-(
ztcaVA9~M1pF4Cf+nIt}r9o{^?ex2zCv9RUZK$ehSjQqqzqGN2e<NcXgdi7FXjc^DH
z>c+~c5V@kPH^x3xq`Oper}ImwePf4~Qeb#jSZ+uvzaZ`+ASA#d*<M;ZSnnSlACIn%
z2ZkcM<@!%DC(Hmo`T7oshGs(2x7cuyj+#0nsk9VKFD%7Y-iL-xn^R;!7yr{UIxkT`
zt=^YlXjyD!g;UX6TV^(U-F49AI+jj^3P<XGIs5VSG<HFL&wr?h@Uma`eqkb(+_7<B
zFNBYAg2=3V(j0WZNB}xK&8rTqmmkph6iw8#vtvk}_}&H=_S1v#k&%&}Bh2KkK4UFC
z;c=GYV$DWxVh)o^YxmnYdIR4R`E5)%xwt@D10=;#Qh#r+m~7{)IciR3J3!K$xleF0
z7=DDnXHqa+<*=Q(n*593?RN5x@_MfXbuU!`f~3O^AHR8GToAZtRJXG$${u`qbi&8`
zc`iAyfKhPB`>@d#<8uDXf~Qsa`2|aeu(gyIDmv6C{e<*x0uw8%;sUQ7Aj~Y%zZFhB
zb9Hs?9~zost0nHfWbFM&6}Gz(5#&$nNjdBaD=VQ`>wC2u$RY5ZaIgdi+3KKXFw8Aq
z{@C2o%q%%G|L*jM9?PZ7Li>aD-71^C4D6~Tn+RD=ZjG!Y`5+j-_QP^j>kZL;;^=??
zag8rHd#$_Mo14;davU~OmpJTkwiOkW<ZR{T5t5R(PiTc_jTV=LL$!cBZ`fs_piQ2<
zhV#e2C+j|T5FGYnlh<J}Kf_bh9veGil<<R3CcuwB-59;4XrQuO?-4k6J2O4qZ00Zz
ztQB^6j5-}mtc+r!;x8B(Q*(Ae8Y8Fhs2<nf0>DUgmehP<_tIt_cze0HqQ9c}s@z{n
zG&R@1dn*?hb?+Z8;V;HG7Xw2Yd&5Yp4l`0FFG+T9Z*P-Bb=~@s`izVWS%>E+RUicI
zl&)R7sd@iCfRdmXE1#Zfvah!vPIcAIx<?ooC@l#krN#0bdbBRg=$7&l(+!Jx49ni5
z?VrO1{e69?hq=CdkYS=~A3q$_AfM4ur*5T5=?eSJ^sT(Safv~5eWFZ`vRXr(0Pzv>
zK$8Bfmav2BX;gfBI5&W*{rcJ^mDKXBJvHLXH#(bJB%E{mS*i&_tb5Da@8h~Ay3cy#
z`cf?TE8<CDc`<@7L5tLWyFcoi{j1_t1qj3h`1rEN?`S1$9^AylT<a;ybm6Z^OA`jv
z7vS5>m`=ZWq<eUJiaMMoqVGO<fOmBG&VRR~Sy-3w>w@T`JHpSlU`Je>n4eHto>49~
zXaZyyoJ7V1(pIXI8&e}B<7U5Jge!-y5ny9UNLU%+coodEUE#AWJAD%ikf0&*H$wPe
zI9~PXL7>897Yh4?1{27My<hoTTbuGY)e5K}n9k?sa8giudIriWBW~_I|6n?&!ey?n
zEiBO9(P9#^?+#H^1WC8d{OIM0bgAf;rjAV|#bwOUrp&aTK_mjIs=CcT;`y*iQ#h+x
z6$KRp<-}INMcXhFnDTRVl|i%daD1;$iY%50_)4NWa=o&sd#|B*HTq_GiFIi8Mkx!%
zR}^Q-+}4}m)5Cf>k&KM77P*wU`T3(`bvg4pLKLZdF4svpKgE^4EsV}RdKG&y_cS7>
zk>36|s$^eYPqTLbIb3M=q)OtAL+rp<*$&)oWmQyaD_3!fP|ppp+<QNpr=f$ngr%{s
zzAz)hvwDZ}MKq%|iQ^VzwV+#AHXcUk#AvdLG{;CExUySzvuyX<3BoZr>HN;2`{IJ}
z;RiILCy9oKOkzcC99GNi#oNG^xI4AMqqoV(tVQ;-zv2AY<E4oRsbE><m~~R^w6LFK
z`5SeU^({>yNKJRpKG$RDp?)9Xo1UJ``vXKxc;mevk7mT)F8ST>V?<EAzgdmb+1dJp
zg!9<9*FelxRt^sdVG(pP@_=HWU9JpR{MET(gNF&8CP6sxM3r%5QFuy#LLnADe*72^
z71jL9Vw%=O!4}ms$mS=BCMe|{M8s=B0$kz;zPVd#2#ZEvqSW;CvYkoiU?b<@+8*<n
zdJ(+N*w8UbMOYWe$|huHQj`&Rl@F)B>1PN&t#lAY8~Q_$eTEz^hr8Dtfs8a!>X&(m
z=JBdCUbDzpKmxkEy1t~pT6h_&I|Q_Gc%ZW}F!)ysL*57gMz>cdt=Ct>?GH}pQmS48
z)eGu$9}-7{MwO7L?N|4*0lPQO^wmE3Jd&6Lk(8KbC)D<7&fyAF+z}EG$lU6vF1&wt
zeioFmJO&2X8dO=X=%_^ds59S=#Egsx&!g8rPmWyAaNc})nb;vrl~d&g?!rQVdd54F
zvujrmW7!;+7kr2y!7mQM$$omuX3f99^f-_1%Phn?j1r=%Le|}Je29<a7Tm$H^adTu
z+dZ8FEUX8}>8cEBYdD=jP^eDWXOGbe4dMowJ1s4Zo3Nm`I3vS=SSr~iMQ||#oRWYs
z8p?G#bK6^4+5q02d>VyGXTr})Z^;sJL!rqjq>C49aJ+qdhJ_yAHKZ|2rf9xJ^0L0Q
z)!?Gq(XwQl?8E!_uZ%}_M@vi#IwVEGWWiQZDy&}qibGdhdywmaXe<<k>7i+A^r+67
zLzJcLR-tGRccv$nk(-cI5e|gUvj`n$Ua@h&*vo2lNWX81p;xz^^7-?mOF?#d#%#*U
zs)l-c<z;0M{~6>c-pqY*{CaI7QAl1(YwcHrtUmR|L{?;GW@LOk@<%-X2{!&O=cq?C
z0nxN^lmk6IvMJ;~&EIbvizfPqMMSU{THv!dlooi=1OqFlH<VQ^seh1lX|#m2w{J<6
zg`7MYRsxceonVyS#SQXUAO`^iWmsyxF+r^7VI3$h00P3DOCkb%^6RS;=Pik1kl<t2
zX~)MDqhViSVqn&e2rA8DIPJUr=Rn1^{O33csYw_&PyN2~1vtLGk{Clg`)<M)C+BP5
z69eJkmRO^+kKX)9L^k(nDM)}{Zs)wpendruoxPmB+-{Y>6BbpXqM|1U8(?1Lrw{@q
zw!O18U@Q@A$H<oO0ZD0TX%P_y8g6diuPRd5Qg0qI!J`f75g!s#99dC;n!W$45V{V$
zz2SCLUS5XuTpz5d31AhlUYV!@dN;s1Qj4ToUY_Oo@b*wS!y1kJa>=)plm%}BMm?6-
z{I7?OcbiO%xRo3#1u9Vqf{@_`ld{QpWy@_riW8<_%%T*Sm&ibix5=0du=zDL18?4c
z)=gx4T&*vCPl%7T4^86Jr9uOPnUv@^J|t?&$|93oU%p^pIYn!26;OIfrQ>+GIsLx8
znoUdZ&6{VgZ9PhS^VD>7P+kwzM{I@7C%!O#xJ|_UwXu122X*fZn3(1}%Vm_J8bg3g
zmrIeXf*NYQr9dPs+hVxv-Kuj_C1NFG+aQ+-ZRE-3#|97C4En}wcYw>EUa_vjPq+x6
zMi=*6+Su1lHzreOug|+@W&BJsoSGnJ9~v5h+tNg-nPXqGj8P8yWo*h7(&r|ONtKnS
zuyA#(z<U4p5}cZ!n(CHR6>>j^^$z~llU01O0+8R9Gcs0JpM$1BPv6DuXeamDaeOe;
zSZ%QT*AK3F0#>KmSu2unh(`aYsHZps-E8ucPG|4{mr+m%jtN<K!masr5yr(&;K*kz
zr>B(Hz2=9-yy;k}e`uurQBU%O<FRy-7|Ix6DJLs$*?qVimZV{EY`?cGk=m{+8LOWA
zDgI^P%4i9_b_Z-9f`i7&98bXcA9NR+h=r4#I%8nfR+d`A87}#N+WwmJ*DbsT1{lV#
ztLzR48LgftU!{<WqNJt{ifIi}k&E~7(TQBHDKjE4HoCdBMN#j^^vzAKPX{5lU1qM_
za}|9jfma2a{<36UvBi@ofo{c(VlFtiOjCn20oRja9PvPa#L4aHS0NV?ZsK~@*a*RD
z`{RP`^rPud0#bF9bkz3-c5GXxZ;)aor!>;j=loFh$S#Ezae4V%N7vP-OL1903&j`O
z&RZV#E&o(=m(w8Tj+N>Kl}=XLCvgeP#;G}4`|QQxWeuAj>XtA$$l1cP5?klDZ5`Mn
zk^szAeUzn*8J^OetXkuaefG}`RF8dPVtoDN=%vJmaX04)n*)X6`<U_V&VqiAe>xm*
zxfDreXld*SQatJhAD<_+Fdk-bnp~Gn%<deeg4|1e$unlQBDVmP!Drov@3wBZV&Rjy
zZ;uI41p6V`O6SBwW@ZON=*IK4y&hHgOYK7SH!+i5cZ!cQ1D22s?@_NGsl3h|_ECl1
zsHc|**vqd=Y!^~{Dt|&};vIc6=`cfIa~x;{ieOK+8V6}Cjis||Z$EM-q4v6C3yo;3
z2rvlNhH0puYefvtHdlN&bSM%Dq|i-Dbr%wV6T8TCgRGo@jEi43zC0tNkj&Wb?`it0
zji1F)@%3!yyQ#7}tw~)$iL|!!!Ex@`u=RjwhyC7qbZqS8(r)<O@eUmvBD^LhQU2b=
zMyxB{Pr*7;`5ZPLw9jeJPS?3_IW&L10{b>4M+bJR)mM5`zm_8izwmxK?n__JxK8@#
zz6fu>FjMmLXZoBk_DEmE33bIl>JEZwfa%kT;RBkZ83G55*6oR<^F#rHpX={;fQzc_
z^F6rBcE(6#*7#%p{W6zqS^)gMK2a2?|9ET5r}B&-;(G#1w4jf<Iid7K(AfB>*vRMG
za+_CkSkQqP%^R7TlAfBb+dBAiD$_9C{ODF8Uv0#4hG+hEz}Ni8d}iw9xhXeCv}e=O
z3{a7ohD7Q5%jQSRy8&PDWGsw0|9(q)MoF}`$UDhhuv#~Qb=IXzdbS2C*N<^Kao88N
zbusVV6Z7)Qq(**w7nzihP^&c9-G@XnGBM{{(Km}Ww|zH81PCh^R4a3+-LI(S<TH_!
z6nSkfsH_i>BsBVjlyRGXey|AKKRE8<)?c-P{9R033}mb{fnQjBd#3XPJ|4HV2rp))
zN2-jzE!*o5xlK!@xA{bZ$x`B0)+pZGjoPy_>ee=V8zl2|<3DyFPcA=}ILGXFAxyu2
zS5p4*`V?|eXK+4I?b^=I$USkoRr!gMS<=^oy166Ia$CORJ6*e^tkYX!O(I8&)cUj=
z7;ywPN1Sc{`D&K3e=csQ2zC6RGVw$D13bU7;&;nRbD5~v;Wvdx-VAJ(@@Kb4+!RG`
zCm8FA>?OKf@#n6YBh1_S=Z9mu{|6*v?ES@6%vM=J<qApY=?o1Gm9O6o#^Svx!=*me
z@MZi_J6T6U&o80sE-Zfq#Y>+TT)<@&M>`EiXDNJUVlh-m<O83mQQ?<lu`1^D+x<z$
zw?2n$6a76keu;VX3XDs%!19gAlrEKL`Mo+0Y**s+mr$tmjMfWbWM7}WoSdf0_Y7(!
z)su#@%iV=)p}X~0Q^<!#hhG&J=uVZjNs4`tKa41U2B?EQg=sH?E5b55vwy~*HsQ#d
zn&Tn~o}L+F81Lx(zOYEiM0URZP}dsS^NY_#p<zhqZZ-bqo!6gP-p{2WLqZfUj3!lJ
z)GfpePd+T#j@?4}6!LEIiE2k0GVW@tob2&(z;}+9Sw!l~-hU>!zf~3$8%t4=6B4qY
zJN?9um`lraV`^^3VSQD9VHlqvvbzHAzgjB35h*d$p|O#{Ers7SoX$nz2WmfLTQ}*1
zo(Un}n2ZW;_qy<xwnjNIYUxfUChF3k4ztJ61Lb<caP#%1e?nZRueBJh_quj!G9jUA
zD2^6YMx3@@^!N`)9`1#6Y@W08gN0~uO@*MRQZdDcHFAsLI^82IF;=&&WTs0-?e~1X
zdw&>-uw(smfTUyGQbIzND3(j@7t51!tAx;r)vBiA&;<qkoV;`lSKezIixDHPE4}>@
z8yOfF64K5~!*5u??@kAkIE7$^yga0tnas-vlppuE*8%h;tELtl5QRf<v{d$K0atN-
zJ;tG0MNrW8?b}b~hjc$;s*YDyh@^#JAPn-Byw+QF_1mt4bwb|BwVB*_fR`BhU1W)X
ziW=}kbwzWLaj{w5;=@J*VB+vSc4`tPy{j4$Yn^K=Wo2KR`j1g7L=)BXVzatp@6@;+
zj<DqgLOF6ryRe_1sl8BE78dLTq*=#c<v#*gMsO}AJq7)Lv`?+Kwl=}>1oz}i<8QQ+
z`IN5ugOUCU>&RD*it6IxeSgG%-GR>d=sXe3Nx`&q-H6cWj=~?dn4uDpM;Mm3NcuKX
zNvqQ;@{58SifEd6j^8UI#K)GIiLi-}q=bZ4*4Hd{7A15)f0%GS*s~K$n%CBb+tMci
zR*h!9`99Vh*KBbnHX}|;!x0~JxCk309%NQ@f_lD^wc~(K6e){KrB<sXH;6>W|MKq~
zNoq@1`COy%X%mgls<_C9I1>A{VJ)gBSyx5|0KuUy{8ysY#`NZ8!D3*x*vVC2BFGq{
zPK<Im9q2H`zOp_%G}3E%?aeNlhOuW>-D?+mbxz_31d`+O?!=nr<}=XvNc9{DFv}xZ
zcz#W~ZJ<Ft&x(oa1ThtwURt9m!Xuc(9tNj=<*>v8oGjXxM{PYlDmuKAhM^l1W&SZC
z%S&@36LpbaSlVFKWx(*C>s5tANGKKdt)-=}C>AN!Y<!7$koEOJYwNwKv0j;xiGdau
zm(kL<$80ePkioLSu<+@OVKnWTOYfx1Hg6KgGfM3W6HJU|wqKv4>U}y(%B2%!Z|{fd
z)wNphb5$>|D3gj|vTXEL9<SJ&dhsxuI@C^I-ykn|w8-KiyU{C4Z+y1ap`kGL-Q7JQ
zKLQTj^-2cKCS-#aHL5S2(dS3j#=-*khuS$Rxm4@5k!ZR_S&_v~we*c&eEd4?QRB|P
z9_>fQghi^}B4r3z_%RV$?si>O&sdYgVD~LyRO6Ea30oT*WGw-Q$=CF70##s9_GjwS
ziyY*BctRl_HMhLXZPP5RriNVA*VF6CPpJLP?*`%ucZR;Ugj}kO<pxqLxNW67FVH6o
ztI9v7%8rrNJx5zQY0B61rRH({5BF-@VVP9P)#Abzx|oyd=LX#_nc?a2D+A|o+2?6w
zLGz|`H+O3S0tvP@_V-3c5)_V_HYQESHZeyJ`jr+YO7}@E+oKpz1ADz1KW+RPhdY0-
zJM%amjnYrbk||gj>BfdUoLio;L7m2%)|`JM{z1Ds*5XyJZ|?8UP<7%nT&b<3qcad*
z5PJT$M7uec%FszokiR9G6}(cpQ$$Rb%l*GcpO7=;is_o}JGx$1qwn-P*khYsSg!BH
z@0ebUt%{`o&TVx_N+Y(@hIbopzJYkG1o}h~Kdd)8U9Bg8fjd9Tv`suZATm)}-%W<*
zKu6rx;d#1oNT*7aIf7ZR|2P2WS^aU2#>tb|E;$`ZoV=2PBh8M3fKbCh2O)CHz8o+L
zQ#C6M_Jodxwx;JKXb5-z?72nJc<m_#=i4n5hv#vRY9ebhZtFNn^Uv@={a~ccLTCEQ
ztxwHU=Sp-W$*#_GQ&v`6Bf~1a#e7~gk9T$6?N&+gI7MdZ>!mrr-&k1P-3)84$f;uY
zqm|d0O|QC+O*&NU*rxIZAsR<!OJBrFVkL>&9?N$zQDcv6C>u}Vai(qeNj7$~%iD<7
zc|W=^d5z%iV%Ms*l>x=hx}F3vS7G#V&!e-GJ^9^z{lHR(>F*Vh7UOM6zHBl{`hRZ1
zpK+mKh+DfA$207KLYz9SO>9T+tDu*11JBjqmii8gae~7?Xld1ciWz&T{0va!@-W;a
zynENc#Dv^~DxUcT3q$gg{q7&`$>a?LsC1|pro!P7ckPr_D0>$#Eexh5Wq~)}aPjaK
z7BKGJ`#7vu3ZAV-tk~V%AlT8gw<F#-=ydoN0BbcVsWk2p{o}{q+UE0F1@33)XltJw
zPAK~Vghf%&ZLBOIqEHY?MSarKI>N$nl3pPWc?S%PZD@q==%8hj9VL<oU0~$l39WVc
ze2J&EmHf$<XM3Emmczt6Tj|={6(Vl;f))^7!^OGPhopFsKkk_7>NYt#TvGrSfjL=F
z*J7`=s*!kmmMSY%#zcuV-UEPnh$$%@%z4a0x^rWqio>z4g_un(v!tMi!|W7aA(0P;
zO+)^`4te*=nT~QPzAC!P+TC~1At#2-qIIY~Ni$Uv=1K^x$@uX^=|(`ekh6IZiwY_r
z+|@QF90Ts%KiC+(kB8URSkFl!r7+euFwj}oyK;;*q~sg?uNE)~hAu(^qTVn9WLHEf
zux#Lw)D_La|D~wFixM3oc<bY-8lR-^bf^Ne)o(o^NJvO2M=57Qey1<}Vi)Tc6G>{%
zJ*H76&1%@O?v=e(=2R8N^rYy-utXs2cUKAS-9xOeD%;HlF<S@-h&Tf0BD^;hMm?~8
z7u(?{vjKv~*~TP~#j(7lWiWu!B$#MveHNNF)`?T*H~Wi3y}ai40p&7u)OAd&YQ0DN
z!Z&1pMGWu7jLmLlFsakgUKiuyb7DrjA-Fu7aL>1Qlne)r;STyCRZ`v1=_~|ePtO9`
zuOpP49?z$#DS)iBYq}k?Hm<hN?#%dvQ7kkBnu;34l&sg;g&mtD!Xkf!Ih@z_vlXP~
zqDe--%+Aei=6RH+I_T?ieg90Wfto_-B<b+8*dn%^K{)<mY(z+&<;lABq&l_r#P&9Z
z(}ia5!DKefp3crnHacSu$~G>#Ysb82kXX(pD@gk!-XA-Q$Fai%iQggyaIi*;44Vp4
z4@@V@?NO1Wk`b>W7QWmar+R<b;CZ00l2d(t{)6mH@nVArr7b8j8GoiK8D0ItVD-6*
zV#WEHn9he*H350yyQdq@r)Q1%e(u<$hfNWrLE-lWC!97c$etuE{kV(%9ii_o8pe+F
zXHb$j=X)9~ry+>e12>hL^97-e>YD99zlngK^x@UJPAIINQ7s%J>}Ym7lgaH96eHdu
z?OSf^eR-?YY#-c>X*AW1apxDt3p6-qv9F2)Uz%hX8GJlNqPI=hZg^=ZU6d_HN~K5;
zO9d-AomXdO_WqcbQ*_$9Z;UN36z(ImPI!7es-e>n)mI{Q;K%b$GS)M)WId>2E7#(s
zk?@7Gg*rVYC8wpil%mys5XuY1)l-DKUqv6q6Ubr{;Y{M^y!1=)L3)McQq@C_{KT|0
zt-hh~(40dOuEM(ddg1j^Qf>ow38;K`*4tzc5h1on5bibkvpu3U>CaGzkB`S;XzPIV
zS~&GXcEopmeME8X{5D2R^%LL|G10S9(DQ`0&7x4PH8Wx^-Q*v#@RnMb=r0)?6MGsF
z6RWx1BJR(*xZ{Xc2WWO`yc_wa>l10|=_wYnc2xQ<d1<*nXwzYJ0X6k)H$i?<pNNLA
z6DH=4_M2?F>LF<v<=@pwrOI-0z1`A?G2y`%OOF_Z9$mO+B|I!kYZg6S(H$AmyJyr$
z%Xb-JrT8qlhm%_a(ZNqbXbVKnY?5^zz1yB6-fnhGrbJ-+WT~>-%g?*J#s-(py$gG2
zAWKHFK6DgIPI}sV0G+{aIMCgjn{SjcyVgdudV03DdS*}~>1(5+)WBUU9{LGIzsdKW
zLx_U#rlXHcM*V=Fhp&!+k~INOO~vj5A!mef$3Q0?qa1=fWP9M<ma8M-i$}kBI8^&=
zmZC>Xu45C3(kCV)R#tIb1<Kh2O$$uS$(6yFnEPbcXqcI6yMNpX4@c-N;^QCkJ|ZC^
zFGIV28^hra@3?+?`jsub7lOasX6%0eH7oGmeOWm{WBu_OYts=pEYumGv*Q?3c<rp8
z9GpS~RXh6?MAF@^qI;N%Onq~6+g;k~>+lGA0<O7&*(B@f?#?e0HNM%tfX~qqDAijw
zV+hh9!Y7=+arHGBzfvV?=<Bok+v*Bb$D~;|Qs&dlj}-i{KWc5(OZ`gA&i3&1C1%rk
zrds-bV%Nv{g5QJ8@}hcwW4;YnuASAivoCAZ%5=2a9fLwjP5uA}#cMkqP@>-!5CqJP
z!*ToW3hNU412ok9griWk#-4I$=L8O}++4YR*9Yp|{r%DnQekH6^MWrujs1q_gbWVd
zsK5lOiOTtd=@V1xh>{xCjVK=L<6*gzsE5QU9XR8^BSK<6=*;sK!~<>O9^uvq%?>$Z
z@$$*!(&TJY7sMvIjb6;CW>C@T(yWd<&rL?7<0G?nQ@~2`JHLb{xYG6Jtk5<0Zx?w^
zjF!&jGaSw}ULm*(>H1Q)SLf&+Qzr$iU94)?m+cgH)YKdeP_(vtJjQ8|wZs3k5s<U7
zW``#5#(~F`Q0iQ*zwkp4&EZ|r<XD_GI@>iaD;XemH&8sKS{A#@Sk>Wp;@3*tpXSg1
z_^~GUk<kOo)Z}D$&Ry*`l!3cj`O=Mwj10SRH`+p*`+>6D#{xLV?rwrf6zIL$w?^=n
z<_~zX+3Y2EpS<++ppd|~-0Z&Dx~?A!5s&eLgBxcuIcBqO`YN`X)m->~e?Zv2pN*|i
zQB@X?C{L@be2r}6KYv>@pRI98yQ#v;=uoGBxwTa^B7CB%JkL>c_8!<H5ng5n282}-
zx)koMtwJ@0$p<sYiK2_Rn}`pqAEYS-`}y5(y;oxQTA-z33wAuosoMJDRq({|=|G<N
za?E|fh);jE(Rx^vE;=qc$D!rq^8vfc<+;~j)DE5ud9kxqaWyr5IXRkV&+^MN^5Y))
z)h?Z$KD2egprNMjGebuhCP4jLB0m8FInKeV-(hEGl{BZ+lkrmK{^a1hqr+3L9<6<K
z@?tDpjGtUw9Np81w|co+cNi@&F@92MfWMxWvYEcQOV?C3rAR71H#rz9xqp{lyVbLk
zhV2#wE!S{Q&og%FulYLco^2g>g^y*q<7iBbqZX)HmEP;?(}HD4^EE~<vl%*5;j@kh
zykZH9Nl8hdw@af}1?>vn!ir1U2aogi{u0@UV>^{FBeNV1uUKN;BND&1^UvSA`D8hS
zkQ)Q26NR1^%C8+b1^aOdWCc1x<`(Bi*@g<nANbWh2WHDuoV#CBpqP>eiiVYqDi6#T
zBPt`nzqNX&sQ8R)ufp2oU}?Cmw~djEY?_ak_rr8x>OSNV+_}%~I@{Xr`}oit<51Jm
zXk)guielXoyj&Pl{lzO2lVjAI^4V<n15GY9u9hLn6#sC#cpJ5CD^CpVSlqP4L{<5>
z^;W%nXdJH`oqH$iMf}!pCO^T5kXF=bJUej$zwwNDMMF~qz_7Y6llPV<>uOaW{0`N~
zI^AsA;NfwaX>ZMO^7Zf`<u-bB=D3Yi^*&71GV0i0Q@h}B{IZr(SiX*2m|ql2?JAP_
zxnO_R8PuY=vyH)Sy&b_Ugm9t0X2rm;)rTw+Yih`;6eA9$JITiq(9*^9_7Ti{yIv_H
zUt)O@(?O(kVZF>r)P=--y`i_@?Q#A1IOuM#TgSlj=hPpC-YTj~Zjr0LefO^2MCR$^
z8KfpFnAtlz#4Rmj$4p;e{s@AI*Ul_CV3c$HZ^zBkJw^fT|Aw(KZE^HByTv5++J#DU
zNk)+ZQO5S_BrkN!-Q*yv)v#&LH}eb25AWXXuo4n%x=G4&VY@VSeteujqZ)K1dr88J
z_4)IFHGsM|x3{JUTCYVcJx0vUQXE2ooF5U#S9T}W0%Tsa<J(Q2rLa;B=M#&a5Vck#
zPS1fyYAuILF52=(o_<U5yq+v10kQPQHqU7i$ErPzKj)+^wNMAP>uSkA_vvV8pnCc=
ziZ=e>bt(Z{xL*jq#Q5*?^aXmoiKlG<p1kN(b1s%fzD&25TqdtK1{>~XLRvImNij&b
z(GLk41cZc3TH0dNk@^wRdMSyCsR^m~h={0gT3NgsL0C&q4-Ud*>^A5|;t_Yl<6xjq
z9uIc`%%Krs5hCc_t2YxPBJ9Es5y1nG8ma?ue=+vRq5N1pvd8U^;g)vgOWYJ#SQ4rn
z?ywv1ZZAA6#UHu%DoUt^P#nNRrW+4%2?3_N^<uNyb7s*ZDdi~#TNw&P5T^PzB{@~N
zq@bzz#K>5)?S}E*9+tu_g|7`e^o-X>CiEmRyf6qpD<-1Q^um|ItCalDle^1cS?uE*
z4->;-jgy|6rcO>V3Hu|L)nC9+j(~t5$iSnTkpC;yy=3|TDCLP*Cgi?At{I)GNObh{
zOJ+z-2CbTYUy5*$@u#%G!p6i3HF*8KODS>bjhI|w>Dyf<bz0-BnS{sTGRV(3&H3Yf
ze3QQwX2gmB;tQk!2(lrO`BE62EiG&o$2bb0Sas((U-YI*ir69NwTJVd7tV2(yrJPk
ze0<OqF+AC{)cB*cVXWiY?D1Uss=E?cSo>GZ)~>TJRV{H=UykCI>T5VK3JD65#&Oz8
zSe3(&3kY2D%STB@3t*Ss#=5Da@?|*#gHCE%qMPV^q}X;v5@X@~pjT<-;?S&bNErt!
zmcx0zDRxj)$;(eFKi{G6HPgIXaxzX-5BU*>oZM`atDQLi>V*B$+I)`ePpg%EF3-E^
zNx8Y-jptcd>HY5274F{R;vz04Mk`P952sQQG+*>FFVQxAp0c&OiVVJ<bjz-DmC6gZ
zosi1}mprvVS7KtbNlLUcIJiIYK+o8iZ`y|McVJ!4xB5A+&}?6PE;(ebIi5cvJ~{cC
zBbJEnfX^?MnC|qIJIir3))SeFWxnr7a>_FVOz5}V;>k+zI-Yh=cYI2Fb%~jop|cfN
zIA1foS}_E7mxW-9i?FD~y*_D<5A7s>9CsllpzXSx?sNZ`j}EVUe*8WgG8qx^xrH@k
z_A+5!hvd1Wc~;i*fB*sPuYO)q54lW=eTwFH_3yKo9D=o092Uk%!gpK49AB{cVKH!h
zcf)aSq~nb#XGp*U;}35Fb##M+fBX<1b&2s0Oo&uWn&gh{>h0-C!Y}vL?s+9q`bWJk
zB<UewdQ!eVS`H-R)83M?%6G+N*FyXc^DGf2kF{PM9hKn-^=L>+hO~c%DJ5c6{=^7V
zMcSkECP&K`GYOv`T-8OnxmFfCn|oF7WFM<&!06WKl7z<#jvH$F(u3X2_e#9|BWdCS
z-*Gvjv3ySHX5)N!9<FKkCc|A9Tz|fW543f(!y=Uj7&Mtw<QOeRLLNVkF}N}`_8Jk@
z&dnn7sQD!W12BDcDQG)tYdt5#zRaYef5GvU7bEQI!P?WCVTq&q7{jf$`@_yN2Ajko
zh+9m0=5*9F({#MNf5rbgXPaS95*5UpQhD+nj#Qy<j**E;>yo<O_3Lgy2{D{zoR6l?
zUC__1O(sQ!g+H0&a`jNNvO?~}RaPFP?G}j+ZSDEx<%Bz))dKn(D?{mwjw{j$i}P#I
zQ9)^X)SxIXSp?SVv9cZ%7BYobGm(HhJv)Qim6(_vk<<n#N^wL`bd?L(uVrWCG*hU2
z@!3R`r2M{)7Z%D}IX#sPkQ=eL>3NPMR|dysU!Rtsg<##t$grU&simHlQBNwQCLyO%
zQexfRcke-YS%nyn`Iq2u|LNt0>;!7U8m~;%HM5bSx2npc-Fo`dxp)BpArj284)@r8
zM&dV_YRbcGiDhgYUF~=xw<#|TQgvk0xng!@!aJXw#=<nu{Et|)v}IN0R;W7!R&9CF
zT*)QV(=zPr2@5Th(`xxPRvhRYBk}`3&-Xzp6LHn;QggCw;grH=^=#Z<9V@+6{$=W4
zEx@^J()(~=@chgUi(o9al|m9<;lM~sONW36Oo;@!c~jF*E@b9PKK*W2vnOG0$9q7$
zxca=@{;Us$S#x&Wu_VJ!b&?ooG1Pr|XHl}kp+N~*S#{7U%g8u;H&GYJ4Hx@fY4h5m
zD;OA<`uk}vZrVY`Hq%CS^g%{Whv$)l4zcAEw$lkxu@hWw*hIpS-D7NW^f4UGvs-!|
zNF!-SK`&uhJspGXBi#-4tunrJrrx(b5(oJxve6_{VkV}djMjPG@ABF4RL*sA;YrGB
zAeb?YS``mCS$Eb{ojxdYL}gW#YtfAgxQ(s-UR=&18RzH<<Mw}jWLkY3Ci5AWULlgj
zvJ#Sx){{;lfq{#pn@dVKu}-Hf65q4^yM-OHJr!H`X$=Rn&d9i)tejpWEq^Fz$oF?|
zyE>c*!~eya{bTf+i>-r{8mD-y6eJNg$Hgv-lH-oPj-u7lY-DJQ;{|Vd_g;%o8`V3L
zjdk;b0k-{Nx58Ugdm&CIyL<=36dT{rCzEV5HN%-+|FeJ1@=W4dQVio}Oi(q>CrGb|
zL=lB_S_2<VQ}Z$Wd0fj6_0`^_JTx)J(SHoVBO?<n!^{k1#rgSLLVn$I`S~w1G7aCo
z8(Vre)YIeE38g&(9m+vLxQlZb8HO1*qc7MwD&%Is_h_K08T#W<`RE%7$YU?AFDxiB
zJvtMk@C(8l<R~*hs`aEpPp`f{)$426*rCD_B31|l6)lzjZGU|hh#i_v?qk_4NjV>E
zjN`H{Z7u0b^@#}y4R&{jJ)1`LGrW9Un2-?l<(SH#SDDi2En8n=3)+%;5dENUOtMJR
zpIxnY52f8`zV;3{3b9FXix}9|`kp-}Nw`7(l7d2aWR<*Ti!6@;8N?yyUULD#>0a9%
zyxpZ?Mk*9?9UfD{{!LM3J5(}N%d?tBMx6GYV+4$g-REg()3?jpRh4BJ4ELi@j5>|=
z0tFgrJy1w)e)TK-zaxrSRZMkdpo7TBR!8w!2QQF5+l@a5IZ`~W2V}U@c2GLPAGIDm
z+T&PP`&!>9FjYL3-MBm@Bt=|9{|euJ-LKDgp9sMS!0gxOFCI6yyqC}ql>yV5DC8IZ
zO5YQvY=8l4N9XpbDJ`|B{pJCKwAR*E9PaVZ9<Ad!Gjqi9Xbw-u8-4wo9dsQRJ}ZMT
zpk^}f!#{2V&5@pl7R*{S^hAtSr)fw{z+gVErxl>6ZyFsL&XchbOQ-DYSKOrZ_>BG=
z!opY}oQD!as4o<o``8o1`CNP46;tW#j1G6c0gH(JhjIFTXg`tfLoUnN5oeI$-@I|#
zsHQLftu@MHZ#r3Kz27%stU9nh>ilzkI8N)utEZ2jkSCeOu6vh8e__<6myxxdnldY{
z-CMDKr}mJ_?__mnW8;L!VIz7l`*^}m8wDu!6LvvUCM9@M*DmEKItlOaU!Ke_;ST3E
zKK(xJLOI^q-kzdQUVljOEainL$ET%3)Wv?I;3NdL?bm#;lkL@N%nqusl}tvr?L}Y+
zuAzjqPj%=WX`LxjS^z_7hTh$?jln&m53g4p<8yV^zp{qw{`m3Z`8a~U;k&%7kmGT6
zZ(lzRO^7od+8>!~(ql&XL1WXHpKs~xioN0NB!|I4GOM8J+EQNc?gYWL(K^umYLxd@
zK;&)_$C3~hr=t$IAnGAvJqxKiLv7S#wRU(uWHxX9*0Muh605OO_29nk!M5v@!l#4A
zL)0<dF=m=VbC?MmW1JP*D<-0K!NWENIegS(yMsBAC9CDuJe#lp>Y<np)o|!u@>$#s
z_rmGLeEInLttBqw#(OA5y`?JeSSHi`pHxR*!%nQ}kJW1=@Wd$5o%e!m>)f$^IGrTB
z-W0>_if<58RU&Rnx*K8jcaLgJiAa$<|8q~6X_h@s&hw|zZtan{Kq`AzS6{Yw0T+OQ
zyRX{#7?&l&a&{(xykwh~27Ee4Q@^<wE!y~8+$&1U-CeJH(7pI>Dudzh$*<#kUG3MU
z!aUs^Cy=i0-}~5GZ!L|~*VhtwYmc47=OWZy0~0ww`m~DsS6!xIE;^^>!;!^weaQ@2
zdw>#bn_DDjB+I_+e87YCy|{$i5#4gVr|wtx3(n`SSXey2=+^1KXY0$N3MEQz=}nc=
zjT{eSF=jtm{XJshF&32lv%NX=xoz-F(tQe&WTNbB6L66aS6E})*Xj6?a6!yuZx;c4
zZ%2phxkaxS-i*{#R-4T`n3zcHWN5q2(Kyf!d|58spQFJ8fZvhW*_oNNDC6$gex*=u
zo2iXOisP0V5aqxL?&#<U=@E9wTcyh_f>9cqkm-A)GxRjK;HN#IquXCrAT1u3D!)CD
zqv1@Q$`u>^m_tX<;!4-e)DNR&{{9}kKl;1*Ffh%7bGrOj?YfFFGr*H*vVm&3K`tfu
zUZ7-m8-DkOC47wuST^gGN2A3iDW*RO8Bj<5w@npZQ3JF*IKM;t)2rIlXLS88i7DBN
ziq!gv;X7JCA0mys8lTmW5&Md#mY2JguF=N#H7ii5+4bFWt-L1eX!tFPFnvm0*2nnQ
zH+CC`J+s-ySa!?&C}ZJ>C*^0#W0b{O%4T{ZvY&R6sxY^NpL&JrEagnH))X0$_2QHx
zRt`4fHLCjinD)GlDr-+449LsPLOI3Ft5U{3g}l4F2rUf#(YV*e(b_k;W0kDEx_V$K
zG~B4#924!Fo|!2Xvp?tWhJ#nVvu~I~=Xe2+J`u7kn{X+fvK__9bPuztEE%!H+&%YL
zr_@&gZ(>4~;?g2KJnqt7Zs}SV7!B@wLuY+ghKyEAaM*B%fr*ioiKX2WTU!2ieYKpV
zm87Iwts)-+QHYABj<6UpYHg#@+7~Swb=ejJJiQ;CWbQb^l8pM)%08#sY|De`dP_)M
z!d_%xB!%*!s0pWd7Bi(1KWhw(-L`DThIb}@#9WNr!rB8U0J)gB&McWu$}{ERuMw%H
zrs?)k9Z3^^Ceu^b7S_hss$=PUaR!VJ7k#WXg1Ij4w4R3gTgWBl#tiN${h-FBmPw7-
z;zYH`WTa^IL>(KN8(@+5_Fw9HRXTI`|FHJn@l?nE->?#uLc<6drDTNcy%I7`va^eD
z?6Nl{6d`+Wj+MQ#L&)A_mwoKL$Mw?qey`ts-`Dlm{rSVgI_G@m`~7-9U(eCZFXsNl
zD|6my%73?_9JOuIN%t~nw2$dqWnm{NdXAKxoifPBCRE@4!Yz*$6S7W%0T@~{RhXM_
zqkP3vn>U%s4nRRu4srtEXC`d?YL6+GiD0#E^mCnKw+3P`0flCnl^i%CSp4$#wvehy
ze|fmO24cxGXLi!d6;hdk@hF8{K0eVljIOxX@qV`R=_01ju2YqtpV`SVCP;JT6%<k$
zh3^##IBX`fERI+EH`8?hQ>ogv!@oT{T|-oKa??<5p~PbL-5ERmqBzd4?<sTcp_TKC
zti*6xgd(nJo@8arsyysQdId_w8T)3T)Rv=Ll(u*G-pNzvB;@SzCOWPS2lQwwC>Z}(
z4ParB1Mv?Sg<2spHRf47i}1<eW*n<eSNdKUy&iZtKaYcXy=UaJ%pPGggHg#PkxR)o
zwbH|$GKJ0W)s9VtH}*|D=cdtB>l-_bA1OFreSd_msy?a;=q@229_YFUog;SN!Il>1
zt;lLlvmv>aioVc@kT&+4re4;`9UpgJziRDaqdt;fzMVm!8_TDAsin4cj+dTbmWE87
zyYH$nF;RctO#Fzj>hgB{;k8duh27l7{>u7C^rdSLiu&U<e249BU~Mo51a0)<))xth
zv9T7A^0w>Cul%MLt+Hljti0LqZrAEUHA`PK73PvJIM;c<`I+(fXscl2Cqn{&q=|{U
zdS+qeUv7m44~3Ahu+)rGL74x-fHOGOG`@Ff`IP^>=AnT>7zhtAF)<;dMaq|?>w3z>
zpjWP{s_O92P%OXwZF;Fq$8)50X>v(zt*t%KtE+$KjWb*8VHqr_P~z*GwRywB;vD-E
zrZ8hjrkpOfU1|P)<%r&^y#rF=EVkyAygR1aFADo4eVg)|5PzV>fA?-ZkYtMr3VQnc
z{rvr<Wgb5timxc7wIstAJ7eYZWr28gvcnjY;=7=!?rgUE!8WC(MWOBM*U2pwSH~X}
z;Kw`SRUP~)DYw;*J`nI_{2U(H9C%ok%@34DUA~Nnn0~innpiTCC(B-xu31h*BX7w%
zVx1*^cu`c}2p;^y8x!XF)4PzyFnxK)fuHJt{b4Ds2;dYiNX-_1<e5l7JUtkG-{|Tv
zN6-e^*qSpRQK^x-0*eOv!(bQ(C*s<*YY!j3WuSjFfC6*&cMoZpmgPiCOuS0%1<tTb
z%DP&qlkj0T2MmT?)aezup6Cj01>cT|etZ=!yn>ViYnbMk>uy96#1^7&-NVBq4JBXO
z-8i`Ut9a;@g8geVLlKm3khHwjogSQXSYBOmiB(o~O!xV{kHcq;Tlz;^eI6>PH)g~r
z7(F@~@U~E({;c5`LO>Kuz)|J=OFuA9J6C@Rg^k-SPu5Yop%PB)@t5s|A-rK2iV=w$
zCi?K<BmWDI5DT8|<t1TerrT{GW#LaLB>wtToJ3cbayjxU7j^A>mt<|_?cLN(a5Qge
zB^V{M+uuz8{{8*-k^u0u`wI+mpi%4L<s}ETk9ao?^+A*>h5tRatRY`)>B#VxjZe$(
zN;O62a`be|qy0_qJX(%^fPvu~7)4|_(b-hnek-eAl=>G|Qg*uDO1~f<OLAgi{8%$#
ziicv*e4{5eIGL;{XCxFEcK&75bvi}fb<<B$!-=2ftbw-Fq?$@<XN0Nk`u37~otOVB
zOG|KFflCvg2m5p$OW<Xup^;I@d)bPu%}pSECnhD)X+xJ<8T_2-wn0midSSS=HM;vn
zhA!wGPxRlDwSgLljgwPfqIRtMepu@bAbCTdoK9O`eeA;J%dIWfiwvZ$Pru?`Y->Lq
zq%e^8MRallvJ4hV@kt}yvl9Zcf{eAqt>pajvy7f1{Jgz`47|S0y?-0MKP=%%tVI2X
zq30In59CX-A%Gcl5wCJ-hnD-Z9HBQ3>n5mMz}$O(dr2a}60~9v0T0CnwB$vZAr(M|
z&}_6Ug*q`RoYshznvRZ#nc4hD?h8-_($h!3!90KI+}YyS22!D*s6e)smhwOXvp0%~
zq^>VhaC(|h)C&)YbxFbz-8S@;0uF`#9U=Mo`DZY(!9d7-FkcmlkmYC$40bhywVtwu
z+Zzub$1pSWhl^Pml1MunCk|@`V=@6zY7vW9qUtM*txqztX$xMP#F;-2kBC;3(`xwI
zGNt<O_&%PJOH0~;T#C1alt#RIe8HnOipv}r@creYUgyu8In735(V2oFWzR`)x+^S4
zL!Zp5>ea6iw=?b#G-7P@P7;hNv)`*(fA-{f_wXMUkVY%yw7dE}Ac;mcw)H)QTDZeZ
zt6}jiKS(Ts)n-7x2}toEi3<4G7O8OH$&x`zii)gkY_Mv2Snw!_D9k@v&>1^K;l|Op
z>pg~g7?v=;vNa=o?$do|&9mYxDQanHXKL<XU}Va!EeIc`*`EOZD{_8rj^xJtjT^)-
z>r>xp6VuyG*o-1GX>qHw&HLN4EK7i%>H_rC7cazA)06k;>}uHm5lTN!G>RAXHA)s0
zqVOT|+5{jsM)Tg$bLW+k!ipGZ^Fh6W4!f#jVry;9q1Sm6PeNKc6NX~>dyiz))yo0O
zDQg0A--@Gy9eFiGI?FKXd}eO$tDWT-DCtb5$6eIhLdS`MV#{7$R*W#6R?Tpt3~QNQ
zv+JJro;io{lO%+AR{znsQcrJBFI!(;!Sp{aF9ET#QgBEZK`@~n4T|5XVe=Dq2g0Yh
z<$Yf_7uN%J){^31>wP@*8J8>G|EcZ)&_k*rNQ4z4WgI@RSaa6YY{T<U)MG`92z?TF
zcZ!I0f+%G=l!5XJ1F2}pjigPuk@%C=1D*DDF=E9<UdlbeQ9JX;NC1h0#4HPl+{K%7
zKaamT-=`iCNub2w`X{*nJ_jUFEpom3?7d0osGnb~7ij)abASJZS%C1*oBaMMo&;R!
zet&oR#ZCVWuwMVOMM9b}hFhqLmKF+ys`>rvztSpwpa7;orakbHJ+SP{%J%<gm)WoK
zenr)pz#FQO{(fm#M1&Dgfc_6J1>#RB&tSju_Mcbtv+)+9PK8_leRsmZARQih`tM*1
z2V3k_a>bqm4)W)a(9nr<y5mSjog`6+${87{K*-!*m4TZajsiPD6v_JuRcFYXh7vVC
z-JA1Fa0ar(E#yB7e|lkLWN5yUj6$`a{xgP~MRQ9F&ZYIlq=%jB*cif@Z%>K8)(Lgf
z@BT!ho&Hn&lIZoDr{Db9I`5zIn*VLW1^>hRuno9E|NaC+!KFVrmj8deko`<Tu4i4%
z*x#HiU^P?JYY^D5AkGDl2w#Whx3b*-@sA+)oVNIn1&AA`pAHjFc{mLmZ2Uz<#bC=)
zemGBmws_y9aGzQx)CV}j$g_|o4bPMkA(zO%BNiqTKSTWYgMk*+L(9ncD>MCfYR2z3
zFeSp$Ah2XX01F=e$iR@~YVXAH-*?B=Nn+%jF`@^CbfnDd*8!1{*rXF~4QuP`q<m&K
zk3bNH%E)MDCl?j1>ri$w)7Nj{FIc-yBNHVUW5@|NV&S=Pq6sv5@Q(Dwzx&IW_*7a`
zGw3W6N)ql#Br6d7#l$>FBh|jgCtNift11B4Z+|DY+SS5nzH9Q{{`Nv6dq3Yw)j)v?
zb8)$Pi5Y|7Nd;tJ$keH-t5+Y49dL4TF1GB9pZuJZ6?_rdmRK*1y!e1|sv&DQhf%Zn
z?`f)VqHXW)>}9%tKi<v9Q2z9A<bg9RCwFxz8|i~dN)K9w+qWwe8u0|mZPlwxR3Q&O
zZ}MJ)FJ%XNv+cO6(97>viVsFgEsOh=CH!x`AZ;J3dC_M(&cj`(tL=A_#px^Cw~4=>
z)rlkbDJ4BcK~eE>7g0|y+<ojULvojJ*1u>_)OUU%Bn?(kQY9fLB!?u}Yu7AxI}=pd
zP~%n33#oA@joUEUQaT?t`Kp%$DfDbpaz8G8pbld5(rth17gqy5G|@TkER|gG@&1sa
z73Wg?mKRd%%B+?gcE+5y@#b7@mxp$D#@P(o%bW+8`B~=+2;-z1PG<7;&fuRdILBjq
zxQqzr4!}XfzjVkorn4E~krPc1xSEgUn;r-)QbE8=b<Pnr_Z{}t7o9nou06foIxU2V
zhn}ga_xfZWOQ9mP*Y;-V>1C_@!8Bog9Np8q5J!H}P4@CqOmqy|_g+eJ_q8ASreug1
zoN}85@s&LDY8SraQAz2ahaNtPS!07h%1ZJex<>S*?s$E{h!KJg3Q7*MN)DIDWjnrC
zIMt_u=Hs7Jme2djwTQQ$4-ZFX9><ZuquG`Ki+3TRoQet=P0=7G%C){;LxY)Dx#c35
zz$K;-vT5z_?+040mi(iGrqsA&+x02pxSUs37W}U#k|EBHx~yl<YtVA$^YK=gzu>Oh
z?a{2^lG)i=*Q4pMUIq|t@*<6=Huk{p$%!Hk2iNy9l=gzU{hu}YP7nymgsyxpRc4LC
zx!IE=3y2@R>q9IiCN94&Eot`rIh9gU75w+m;SSCGg9q#n*x8fuDEvztSG1(kY@xt5
zAFm=|Gg$ty#yo6QlqmTa;+J_X7C}bXVw+htT5Y~^FV1DVzB!~-H_rLEey?DbNxO_)
zZ@$-D#kujl<u<HgczF1n4}W<vRPQ?Vrgc?+)<R4#svkfQBA_oe%ZCHQ!;Z7rql=FT
z+OWe~MvDwOIuk?(j;r+R_O~o&+V^xvd1nkk<bS-D8pj-6z1qwm?d|P@N6FJXGy3<&
zWyZisr_D(G>aD|olS5mZNR`>7KKAMBQUpd@ip)m~UO{c&926=sk-jOOXS2Fd6OsIy
znxOeI(@WBKb@oQcyXONVD{|Y%qRYf<UKl8Ak*^_nyc_6q9zT=7@_QMLD9#Tiq#$~7
z;^1ie#eSo~i_%%faDAw#TA>LTO)F#NLN15zFwbu*%-tj<EwgSR0$yn!Ag`cYq-7q1
zyBb75iGD*#Dc_21J7No8FOL@7qhYF&jjICD8MoEy6<@Cg8A1v{r^iheP(#ACD1~)>
z>Bh{;V9~))QD!$adbGUb>l^o(_6P(WPvu7+-_Z(d<J9(;mAyT>$akAReTbO*2L>qF
z<6Whsa4Ny7FU;lZa);2-ob3*i^_SA}0xq+js7OImdc6f;`)}r}KnZ&wXn66R#fG-)
z)lvHP$#pH)Nn8N|fsAw{CsH_a<IK_i{=tDyqejJk35WLQX8~X`O>&D-X@Bf!yh8}$
zZ8Wz^r6%dXd+YQP{G3Lmr&Funak7%X6U>yMB(c3H`otqu%W^8#;Q}S%>G9*Kk5a{W
zsqLj{KC5WgU~1=?d#N&|ADXQMt|v@YOZk4Pv-dM_tEF-9$B?>?V+^V;bZg0%FKPMt
zfrk1BN?|CqV7Pd|i0CpY3><V1lSm1dd69WBKJN9aX-uS^j^4Df#f=ENFUxBWwy-;8
zD$f+Y<!x*E@yKe$QeWTGEA?JjOAL=AXhNfsb26hCj^Kum73$C0DR(_tgxFp@3a8bd
zB9%$FmvD7^wB85{*RZ5y_G&(R_Eb*m7@Y99%eigQ-5ye4+c$sXqFx(;y*9UNth4>{
zh^qLA6*if0OU$<(ciW4&7hm)k<gevaCm&!7x)2kH`jd0{Ej^KuihSVm(8~`@YNPje
zR+uZ*vEC=Wlyj~wH?P=3MMUtNzJae_3~yI8jQsQjlv6xBA0iiDSz8C;#rsq6tZ(zJ
zV4o9A{<_~9(Nk#hdw#V;6B0}{5na?fZlMig=KAthG4JUI-mQ<R2^<mP*qt4bR3%mz
zM;f=>Jc%_GusfeT$!>4Y=BLQX&FvgNF>|S!OB($4t<ZMmIFR?&Equr~%KB_lX0vol
zz~t3xUHA=;X{%Ag!(F-(GtG`xnbg`U=krioYgO2J;!-vE#cckpIhvY!WOL>G`Fj!)
z1_0wGCMJT`5CXRbEujCyq*+D=rU_puDJjWFN$-54z{AK24+~QPC7+$09q4G$df?LV
z#EfZp!C$B!8yj1`aocnlB&n`PzFahj*!A}E71N<FYjyZzIgW*!B(&(zn~q(%<IX2X
z(BuHFbHPjrhpXwxvz^C~k$~h6B=}OH(JMvZ+}h9bAr*U|JF%ppm&+?q)=*b>GP7y`
z?S8Zv(KF!W)ZEgHjYp~|;T&Os9*pNnbv2aBziUf3wO!6|<)t(}c$zLwcOAFswE$7E
z47sM`y>%Y{=IYJti+{_K3cJYrZm5x(x;h4`pA<0-;PW<ES9dVeW*k^0C`fE<^hiWl
zHG(!7I=1CbdpF~9#O3ni#+Pbq56fDNCpY$(n9Oe75@7{fqZutN^4dC4$S#eE8HEzv
z`d6(XC&w#m(~e(hU@sZUiu5k+=~2+Tb{@m6-@SX5Ys{$!97r=V=4;$Byp<sZ=%izN
z$wV7Mf<At{EN&Ih@s4-Q?#P;uFr>)!vwFqLrjl`|wqoM0__&XZS{1vydAgRfttc~z
zd-o!$iX^62Ryw9F_^g+mcG}4u2D8*{#pj<)IduJmA-Au$o1Tsd6-F)oF`morc<rdS
z2p7DFAoWV3BpbM}n-<2YelogP=gz%v$hDT1v0}GI8X8;Pcp@j4U_~CuvVUMPEwvxT
zW7$8Gr4GoF)A9(<zsig>tqGR82?;gtUFo$nG^SQuxo+Q9EHj6Ms{}AP#-et4L}m@a
zge()=TnmgjzKKTX&l@z2+FXOgz4Y{^fPi0nd-lPez#NpC@4N{aUR_AYv<Jf<I-*pN
z3uJ)^%Cz-I9vGL|o1*2V_+?{wq9DC_KCr%*0qoSitxb+Ql^bn_vw)qHw)2s-m5IiH
z*(fb>)vLAc0NqA_en3u#25nYUREx_yhy&h4_k_*U@@#>)?w)}GX=y=0OUKE9m^{T*
ziYIZc?3!S3iryb^2JyEJ$U<B?<7>dEN4;QsCpR}2h8bF(Qp|%L0KtK!Y71xvTGM>=
zxTBDSZ9Z0DzeIMtir@?6r|OP;S(DN2if*iL0N@}CN{LOB&0#qkH+!%S63ttExZaYb
zUV?Tmvb0+4E9VNibLY-qvpbB=R|q2EOXmi$u=aqix3xb1I3lODt)7BnY>_fbL7LX+
zT#`+xj3k6e+SuqHY-^dwN|wgP!Vg5&X&Dyw{ASOdeVVE&e)sMftYgP25BRvbyFZ79
z&>e1ZVSL?4rEV97EQiC<9U)*Cn2+Y$AO6ULOiGh+mC*ZDR%;WXS?ca@MYYuT_a!J@
zUUhW%3*OMS*ZUAjEphVb9~MA5zSGb~R$@j*O41(5<8C^0oJ#4Mo0nHQVcD0U$)|^^
zvX~}@L4bW--F8`{%1TZ?7ED`bO8N?BTY1*TUAwo?qIMJCE_z^LN%)ZuyRJSJcW9XU
za2+Pt8`I~`ox2|{)KOV^pftV!C1&;f<i>INN}t@xOdA<!6pt6?$8{#Jk2%c7z=dG*
z6*D}3cX1L(m+jF4wn9{22b&C!M@s7_dbK7X4y@FEq5oG><5@~<L^L}(Yr3VjuI`V3
z8rIccP)=z?UUiTKRZ?8c!OH6Q@$w~n;?Z-akZ_r)QXL$8hf@Sq8yF~2LXnxC?tg=2
zW~itIvSzv`(>0&yQgE5AFAWc{v55)stPI;yZAr;|q<rxFyDyoF;o+M%$AI!fD;O|f
zlok`yvYFWuNtdac2-J3qc2-tapx<KUDoKt=Sfh4#QDt8pECMdhSrMY1=+!H=2AP9u
z6c4}H9~GB`GQNzZhNTG%3#W7xV+(Lu2<DreZW1IA0}Eg0n{k1kv$7ymeW^dfo}WS+
zfuKpzGc;c4y<jXwdJuK(`t=})O^P6TK+x6O-QCj{;-dDmpp&2lW{;$^j9*cazZa;5
zh6|jB8}sY+`6+f6UO0<3SqW6v5c*%izje;8omLLn%oz`^J=d;H%yrb%<T*PsbGqr<
zCc3#fE+Xs^Y4KD-f`a{hMFPWR?C?-_eEs_A>|9#f>fGG>tJDod#6oapd=aqjpv?fc
z(3|{r+*s3!ZveyNgTi32f%fHNv*6IKcrZ7)cdvyphahNJx@qxQz~|4{8jA_x<;iF@
zS^BGvp*Vl5!>2hk#&3b!kOQ-wxOhXb(E=JB78WMC1H0JUdFAMJDT2tJZQ>x^P>o$o
zQc_3fZB|xgr86J6+S%IT!+1KPab~!sr)RjQ05h&*psz1Q<kkNUf)p6#b8}NuGeQcV
zK}QwfJ<!X*rx*!Z=CfP9P)vRQ{vCRHjk2)yHsO{{gGXG`O7Fb9>>O<agHg$MU|;~o
zpo6{jeR}#b=L1M!<{4&q&{?gJY6dsM_3?+{(V?M#kd5C*BV1qz=T=pNDJLT%(9kg0
zU7=H>Ji29CzVu4lLWN={wv{EWA7^}=Eg8s>Ve7oziOoLbW+r|i{ijENu&J<gp(pSr
zOM>Z3D!@tSH{kL6AKhjKUV{DE@9%$qc`W+BXD$5S;fBcLTkn9Dc^^nLG6+U%t1URQ
ze^7v@PweegUx;Yw>l+zLvcTJCVV^=a%HO_!8|m&=ruy#f@6W`{toQpPg?WI14KUA>
zb_zgjnk4gJJynPYOI{2$ADbsj9vmFtI`-#%k@4&6-JkF8OBWR9r;0B8n0tB(z?=aq
z8;nkRaJ*C4kNzM2RJ`CpZP*Bi6+`DwzIb>(IM~_k_$jO(U}QamRsk6HKxtwPg7wZa
z!{0ti6JrLa`{YI=LIOssCBmQHY@hCjM%`H?BO{|!9Nhraq-hx$Iv8p!OkvVtlHdU<
z)za+k^Sbp+7B~w3f7t{9!Xw5Je-TepQ&TWb8%zP@<=<|Ss0j^80hkPtwRE1Stgti4
zdMm3fxcUDKJILEsZV0cz(=)-Yhk5$h`@~&rg<=Gv3fOICbr@MeKwq`Dr~7l|5byAE
z(GQ}|0G@_Y#Aqu%kfEc%?BoP!wUhIsXUl&sckI2CAve^N-#Q<5d>h=cr^bnlrC?%q
z1|tnWEHyj9_%llHYftB|wLT?9`^$yo9DN}ngnA(<9@F)uDOiI_A*aa<r(5Bbl(R?*
ze=iKuA>JWRfQT_Mp5AMYvHoZRMZ+bFd`ru9X`deYW~t1sL&c~>aH;6yU@t7R-u!r<
zQM1L{0tZVn_|acfXLW>*P#9#kiD(1l0+I|I<DX+-5d2IxCVBQHZJnJ>LBZm!C<(G)
z?yZQS+^wVOm&skyqHLEGq*cnYKSdF#sw%hs-Y1N&mdT2zckilB4@*94{+f)hf0LBR
z=3!#OjmTq}&nBNo_HhE=Uc#dLdl3B0QdpfdN#$h9D)(-#zkutsCHEVOoi-)`5t(8s
zGx#a?DG?It)f3j2-rb9szPs1T_TYi7;sA&L<qB;z#qVD)(KFmlrxogG9}H<x=s@_x
zyPR%6OP|ua%|y+gf{FWSh9q<9+zNBiVKI!4AKwS;I>Sjda&dNjmlRUv9rneGwFty#
zQ^WubX2q32v&pt_)6bnDb#VFBg@vuwwKU{N8qW3?ro@QFKZRI_XfQ7kQ<M3B?kxn{
z1H+52J?u-FW%p&~+Pc+ITu;p7h|V(Ns8PvaqHn0CFGNDGh9O80e{TF>-J`B=+7M)i
zKy&}}rr1-NJ<CiDT{!<2y+gXRjbRtQ_TO$89Zjb`FnhL5&i?r#M&~(2MSJn$*l9hb
z;7Zo74@y-dHVr1HbS63_Ki$w!&`fWA%5Tj`P1f=K>%pn%2DbtRqrK$lVvD)*QL}K=
z!%V(g^tCCXVfhpM{6SZKpP~3tjurAwll}YNu`8Z(UZ|qeTD#+8_v}P%ck<k0?Bvd~
z3H1*zNi^+a6EUT)u{0MR9QHNi)0tH{EY19Up`h4ze{N-XMOk4Fh%&-8?3kvwSypOW
zzF+kIm@HtBW~iP;;zXtt%q;RHY^nqXnvPUDFIC~DWMwV={P`S-{Laq?OEYN8_>r(R
zfPEzdz^mkF-Nf^<_tVhS1aBuWx??|=q7MfRC-`#jLmv+!Kh~N=&+I&USvI)rW0BBb
z?UW&huh?xwE(P-{-U;ZGDP<&59og4|EgW^`@4(uY4p8~0!qS@NDzfb_)V((Ht|cX?
z$IWCzx4mF*z=_h=mokQd=I-4X9!r{g_q+@Vnj>dhBa*;25kgb7w3e5aMxhdnkB?7G
zyp1}I4UwM!)IkmW_nE<5w`p>1?k*-q{7paa49{3PwXrl&d8=gT4&B94wH69`+W4J@
zjl)B(*6p}*PJ27lfMoo$n)BYn6`)%^u=|0)9wHsW_$Xr{bt(VfZNQ1RDQv73m1}Ai
zocz*IEuypfZj-7B^Za9ehb1`<200FN)t1GpSK+LBI3D$3%-Td3&VhssD$!^G$8F%^
zf#X?(XAdzS>>P9v=29R-0QMh9Y~eGH6p{y@NK5Nt&W)Da3e7rZpNY?6Gaa}q!1Cq|
zZ`W;T^R&OO%1k>8<59M0`1Q}dTh+Wn4*KTr%{Iw9w{19K*kZ|BYsLrTv&s31Iop*p
zm>u`;QMWbM1aNw0G|wDu15*Pwy9kaJ(F=nwBXGlf9SgbUXT-_RR<EX-+uInB0$WrN
zgsGr?%>GOuphmB40{9q#Oo8ncaI3eO?`;|xiJlk*11bp#2?Zd3Pfs-k0cg_&uA`2Q
z2aAh~z(;}*cCczq2837f#nkrza5x<;G*ke~Ge^*z&BnR*_x3)$`M_@VIWckA{QSJ}
zK(@W3V^1<&hJK?BuriYGbjcP&_O!&u8+isD6r{f(+J1Sg(im9BQ&XGZi%(2MWCQ2}
z4HQ4pb^H7Kr!tkBPa@erU`KNpD}%dqjr)1{H0hp1E-?@AnF~gg7!UaAQ*m;Jo_)O?
z13~C{fIbQe#_G#zY6?7fu)4ps(Av@rh+{*;OoK1k<*(9`2nE@YmX5Y&Ma36&ltN;S
z-?CK84g0v_x?4iDkG`>2|A!s(6qR2dRZw2u5|ES%m(b_?NWUMEioImj2o7mk0~Sxm
zLDj&|uf`k1OdI$Y%50|3)enX-X&+3_=72|O!^gO!!^bmi5!-dP43`m_Xfmm?io`qi
z>xK0vF}yj4Y1nvk3aYBFCugLcxdcqH3t0$o0{`8K6o?V*LRwpwk$$#~FFbw~@z3^?
z@ErEiDjXd%P=`w$fVhDT7C}pX#C>V1D<(g3-yq`XJYyfcIEz&Tk8?^`@P@pMBssx~
zk+CuUjR$V@(4hPzUMv2U;5=a1QM|}#_6so$8+%R}O@8*^%N0znK#r3SNE{-8^KNxu
zURSjV2Zg@`v*Fl{*DbvuqMWcO4aS2)5-@-lbDasnta1GIfi#E>eIybz=vN5{9)*C{
z(9zLRx~S+!ayGHy;HL^zH=!v0^-IJ(R~Lmt;G}S|O=x<EAWVU^y&`z-_Bp+s!gFcv
zXYA+<=ObqH1_-0dN_jjyBtGzJq$hC*CcavYcM&>T#p)5BZ19U0LI-vwc{T@skH-@8
zk(SfuV05oNbeiEwWPT5JCRYPkK5~2D6X(SIap#b7Z`hb^SlWJ~`LcVqL3O(!(PP7a
zmHCsn$-P37&W5k>pa{1_&@0=<fRTQ`Iy^dRSt!>FFSbXYA{cbHS=_}(M=U5CUTQcC
zyY|+M;UHMpmEw(>{e!yIr5p?L39$QvAL|<!Q1V#Zp`!W;5H37c1m~sq<*zI*EI971
z>v`J(1NDbZ932))OGF3S7J<#dj})9_x;E;4h>s2rA(*`#)v?vw+L|n>kc~KF_3YV?
zY|V0jk{;1*!#>eU0Vg@JR0k8eAEqzq@C*oO5Q=`9&r)F@blW7dFevCc*0_nbR0%$%
zpbVSnBr%Q$=;B&iyp&nQItJ=LiPTB^fSW`xxX^_8SeAnY1OCm<*^VtCg~lmK-D8cN
zjdyF*=>7hkOhM_7mmbUFX;p7a?B6H!_3B8fl3Y8JC+CvGthtJua-vX*k8HY#uk5t%
zH<I3&ItZN~DMB0zo$ckJw3HM&g<qgb!4~)u89`cRwuBEhtBUJjM4_<LB|4l$y$lu<
zAGCOj3uLA7z#Vq+=hEw=`6efk&7*Q+$DR2GT5<b@yt<R8;oqy0{el{8SgjMW>Q!#u
zUuU<H@`=i;cO_9s{V4suG6&U=I*6LqMW$6-HpantcyfSl8F$$Wy~>;d&N)U)kt?k7
z53@D+jm)-bc_~@H2vsJFS?$$c_0CFv*|7ORFw8H{*`O_2MmMRC#kM_YgN2ll(NskI
zTO}Xy{?0-Zk^IhtSb=QJkC+gm;;j{qLZwauL+XTDaN#I22=DLBT1c&awx*?JLohvK
z!4*D~>F-%)xv{v;71r4x?x8D=uWJlO5|lh&ViarjE&gEvG>8?Cv4BKXok!X``{%dK
z+MnS2f2cSZ%G{W@ld#~>;Y(<9<HSBii`4we%MXI-6lisn72h}%nUBXpS<9ITim6ak
z$cIF&yL8QCyN5471zzjo=HQq<?LWcu57uKQeloLhYinynL_~o&P}ZAB7#YzYWu~Mk
zH5SSs#8Qty^0X)|RS9|TBzGU99@4sJ1FAM!zVjnbHx&^je%Ctn$Kr?-O>;v}V2SXC
zu&(a6mRnq0CChuRw<Nn~$#lNQ|4OM>8K75M{Q%y}7IUkvy%1_8wDQB=jaTq^ariv`
z+eSZ<?d4%<Vn%y|?p}{NFZ`Rlj|fh(j+PG0MtR#Jb{Yo8kJk_8l|WP)Un|sqC`_p3
zx{+i%uD#bJVcr%Ykg}~P?tAmp(MToibZUM{T6ca$pl=a-+W)j((|<k_okAc8F))sb
zX{njz$ePdR-`vWn*gpR2Mc^?>(+Z5_u_|j*Cnuc_!KCb6jg#f!jvMt);!3&ACiro#
z)5*V75bJ6=Y42mXz(}j6;l01UJ5Q*$#V_PGCaq^EWxbcwVKe{f;2v5!#PCXKlDD5<
z<!jMis;yAda&zyf3h0)pIEbUN{rs}C=Nh>RgZ10P!J}ujznlT`vC)xdsH@Um?SAcd
z+@ZWo$)QR0oyTF9vJ68wuPQI^*49#Qm*qj|xM5SPdM<cCrJJ}(ORnWn^C5L_aM;XD
zGgL|7FFjykNwgrHf``dutZbp2(nbA&Yr~>y(7<689Shy`i>GtZ_BjKwFK}_U{K)x-
z%gb9MPV~j~Lq~8?+w(~Y75t-KmzSl<zK)h3TYY$oo8wP;6sGSu|MBjo)*N})K_H*B
z;uoL{YHG%KUXIIO&x}L9h>X0!;PC&r58E@8GQs|oPA4=<qyWvP#BDWq1?o9dg`Sc#
zZJaqZoICedFL5m&r)3#nnl~<%zxb%gM*g8mCFJHktem~QJrnl(HPaSoM_OuXQK~DQ
zA4;qiZW0Wv+wnJT96=6I5_|ElOK6ecn;K<m(Eh>3B@KoxFwg?f!mcEV0fGB%roJ~e
z?2ZR(hjd*oN~U(0TpSkhD13MQ`gIbwFi-k0Z6(!PB`QX0Wv*ZAzIxp%x1oe_CD~+c
zr7h7>sN81haU3JqES9W{*uEw{Vt*$%J<|~-_`3NmWW1rxCwAp}P#=?!=KZab(prxG
zxA`-IK7AsH`}7h9mgi%aZ4NgfUl@dd+PQfvkEq$%I6nADuWmccD+gn3pv(^sC~Yo7
z>(y~Dzuttp7d|A2zouhl%pLN6M$0L`zZYr%ico~=Af?M8hXSQ!@#E3nnkOlEh4IMO
zbn}^s&6z~5-SoGmx~q5H3@@nVE>aaysyyC1a6a*(OE+}frs(SLmmjWA#f#vTlgk5d
z4wN5LOy%G^+uB_@$)<El=XG4`>g|T}OznQ%+UKoUsBW{)1a&C0Br?RK7kyiUNgWGq
zmxPdKHP5HKvj24$!Jbih@TiB^VzW1I(%{CLa}U^6bcMJ%?ofbVaZiQZFE9r|zGn_r
zR#M6t&h_9$GBRtd+lYy!jNp1^-~F!XY-Dt(qJ2We$Je;Czm%uzg-bpZm;LrBy@1n{
zRfavN@2=LJ?>gAm+rlm_cr=-u`8_2irO@ezSZ}5JJ+YO?*`8+qoo{^-FGu1=qP6Ek
zgQdF-(7-D}S_0n&i7>v7p5dVNM0Ki;XObVuc}?AV*WG4C`yo*r+~$FaBKaXKj2NpN
zEXWB4z=uY1Cvh1ZdmE;UgOO|#;wgh+5M~fqoPZ7vKjvVuXCDR-&|ADaPq*>?`}a_6
zAMEblxi@fvq>fbQtqUtGePL+WM8ry^wFT8qi2W*+BPBZ~hJRZu$KKZ}M)C@Qs-yiN
z_k)t5p=Zw9AJRyCPoBh_*v`JOOx-a+c^<Eh;*gV@@~Inx+eAU?HsNez&p6Da<Tp*y
zKE3S%5i*!sUpLUZSXflp@R6eV*m_|opqa6?ZF^;p?;hK2?$yZh@=N|Zy-KaW>abn*
z*M=971D}ukL5ijx8$kz&m$qXEiIxT{n^QkC!~9{+E_3Nwt;gwF8aAVFhSgv2VN!G8
z8NJWDo8)S{1qM$NiZ%xJPr8~Td2|D1Vm3D=IznX-h=E=L0SdRbDovzKZEdNmD*KLY
zZGAkqZ$~cqdHd-)f{UcoI8EVOBq70cJ*aKDe+=`Jx;7-ODX3-9xg5F`Cb%CIFgQ%T
z7cr64auH1F`1s|F?-1GLq~}`~&y@y)mO`6aOsu}NjJxZ8SMeh>oBErvtCh@R1)IZ>
zzJ)hy-<m&qH|DezQfggI4U?N)KyMX3DVhyzBa_f8Zu+riuA;#rLhUj2YlV`MQp)7G
zR<sst6JpH<sWK7Q2nZnLSNtl}Ix%2|KRG#>ZvOoFPgpG;Y%h@!5{mIaoZ42pLTb1;
z9W!&Pq}4*dZ_6}Hf8E3sA-R<h^a!<anu@9_Nen(LYv@TOfj&~-14{{5LcyvmH2BiF
zw~>*g5ayI2JQ}zT?qnk)BLUPBT4h!r8u+c|I$@y`987@y?UIC9smvYRRo1lZjGyaM
z<L6Ax^o{iB%HHcC<2$gOG_unWp6l!0dgiYCdtpMC$yuMnYGQhp`1rUH1#7;VI@CzT
z^gR*{gs-eeXed#_i$t%<h{ziTdY7&R$$R>R(|~2NT-N9Nyf!2<m7L}prbb5hM+bKH
zV=QNL4tF=y#CcSlvK_5&3R@n4ag5*15q-l2O=acmwESc-ta*LD`Kr<oA_7JxF=yip
z2Bp#wUbDCQuDI6;$y;cBvs&?JAq(N-)!D2<n>1=_g>+Qf#PvYW%gc>68+-hWj0o?9
zyUy2x0?*?v9v}~AP>cR9*RBOZ2;}C+Xwv=Q+H|&1+WC;kP%TII7gJe+^z08h!H^}@
z{`n(+u3T=H2^pt~Ib{d$+`$m(;U6%Ad7}u4<G3A0OvsE|&^<IJBdgL+pFR^E2k!Cp
zq030!=Wrjy6Mm|~kG!hsB@X1a)wjqAzIf@tg8UUv5?kAnnBKUfpphAqktBi2myTW4
zioWy=Li){4_&2$)5EIWrbj|CDZ+PUq5TZrNXY;Xg)~5_4D$v6Eg6z7T@oKu6aQn5Z
zF9=>EfYGV;>=`#NuU3^)gbuPeI$t;PcFdGNDTjB}rF6eUmd?vaB(maoe*yTJDErW0
zaELx#6wSPX7k6*bO`>ciPM$#DcD^@V(N{}~iyk6^-w$On_CM{!IW(^}KV0eEi?9r3
za-A*EEXS|RJDgM+KM|jn){b)BT3?GK{RMRi7Efte*${!GcBRcmkbfwk@be1`v4W)r
zP>d?t)z3C~%Z`K4H?N>*yWH{^X8qn+oci}oP3Zuu!~{^EZ`n-Qv~QXiT)Me9H#8gx
zv41P6%*Ot2@>O)HMX9MVy%i`&s`(AJgFkh?k19EuV^io}ergIUrBClZbT1vUdUw4|
ztWQZZ*ApYr)^xYm8gnoZ6A}59d$k9-bmwj=9=V|P_;Jz}o;7Gl{g-1>!HbCak<h_Z
z%<9jmZlCY7^NjP-3x3KIT-wg9L}NSnU=ElNBK^kN(Kf8Sq`kD1myXm`Ts$-ey!lG3
z$*0U71hckiI!`nzx}YGXvti*9`J$<F&iFRIU3gHCgvZd3+NPGn_MFU$bXQ@qxoSBq
z70@KAv&_4SN=oQCB-b4I|0svgH#v7cjyr>)bqC>k-fBDMDXhtYnTMZHP#G>n;Krmg
zlSy*XI_nb>5JbZ|^s10p?za1x!N#7ZP3V*Dqf_JVFpJhxv>DhGTQS?bYHESzq<muA
zdo$iixDt{Nr@;RimyGi%(O1r%n?ytnp(lqM9o=jIFPFI-IcRE*1_oZsuwNMykjw!D
zqwC#|RI#Peaus=Kl$Jx5NaRhi`R=X)EAn+fEZ8ts^D{tQ*x$q4+7dE6(ALJo&+onT
zqs*C0-EMtque2alKgFZlpk<59wm)lJ%A;Vm@-^7Y^?vix$evGWsR~9Y{2IYBrx+=@
zD>x%axGeO_<WzqrtJ5}wX!KkB-t;m4{=xB)u%yDl=QvkY17qFk6<aw3f{}*PW$Z1N
zvHvg76xZCkN<w$b-3u{RxHn$if3mVttsE8_%IJ6iCYQIxS<vdL>ADla9*gJGZ~rMr
z)K%5e5>hk)&gCao4xLd_>Vv|CpjQ4H<@Koe)~8%%`&~MFM<q&*Hpd~Mv62jr_lMu~
z4{>F>jBd^{2UEH3)I}!V?y{w<ADO(@He9y16B6g6mUL`6xxL!hX4NZB)-*O6mETjh
z<s0*(pOYZHvZj+hsC>VhjWykmike@jdbJY2Y7_s8=H=K2_Q%DH#^d%2U?!`$(SQ&V
zyFRqt5gWsItdWnzvo;?ri(>Nbv`t%Id2hID^Dyd+>E%-}yO5NCS2l*XZ*-LW_vGT9
zB$I+i*^Y9p8z9#weV?yCEO|6&fG>3xiRz2uFebtpBoOYg&jA!8Dry)k#8-36ITv4x
zgN=qLF~xkA*~^!=udwf)m8_e2oWDR<bcvp;IrZc~1KYLY<pQNQbxA=U2al{nzp6x6
zCbrT~+U$bAJ;=z1VP;1Zf}5EokznW=;Hwhudc>gzt@ZBnYOh~^umXp68tQ$$1_cjZ
z-XQ{|0z;Gr0dG`Pg#Jr?$=E1*ccw1r!e2OtQ>Sgyy=Vpf3+M>ahMBCVW|i44(>%tZ
zXKo4`R%!gMrZh@>i&dlR=P8z*lM#v4bH$e|Ln~Mnrj#kBR}}uKsD_-%sy}+JkiEOO
zdK1>4%?yjUZbbBz{KqfWJv$puDaeq$?yInD*~I|f@W>mpQ!`2eqr%?nD`_H&8Y3Ak
z=RDr-$MwT0#xM;iu`M}psghB6R`M%OC5$<gk+Au22mNFZ3pa;K>Aqs(6M;!XWLqlD
z=qGoZgy`&9E>L{oL>aw9JpQq-e=#1tYImq_h^h9l`}TQiht=o9KoWd?{U*%B6f8RD
z;yO|*)?sdkXFZ-Hp1Y{5toG|Sb}ohj5zLuc;$EiU53#D&<DRYW@qFJIqDib3<41Cr
zH&q?F2{PyhsVv+(Zzp1<&^psVn<g|gTZT-o5oAr7nz2DajkFR?n-KveHMDBZSXdUz
zbjqyGG=cYsq!f<HIo@X{yf(5s_YbH>*<&JS&|X)H2?57}5DI8#sKxzO{`h-hcQTV%
zlJSXHJSHd1pogZH#pSm97OdSjkhfi2&WyX1L>lrTG2{O&<l&S>BCZR)1Gqm@Dg0Wk
z>OU;tpL*sJCQfH<f|#O~Mu+APkGFReq#3XypS*g!i>f}+8^RmHK(akQJ@GJI@<4}3
z<>gEW>LRqqkXRNyxBGfaiEQxxfbw{Zi4Ml0L@!lTLc^a8eqU<g`~n$hesZLs;O_a+
zIn<evitEOS`In0l86=N*^)jYP{n>kiZ(txz^!D3xYIRw%dtu3Q`$7F-=NYd^#Tovh
zRgJSSVkoH++p|v*%O8I|ev~`Y!Yp_JzqE$^3hsB|%+!P|UBi{|Yc4T=`fG0bo;2Lh
znTd^@Z~puRLkTrfDb0m>U126g;!;heC6^ji;WOkfS{_9`)jTS?AMMahV{qizj#8?2
zIT)SC9&ML_^)~6JH~qfKT&JCk!ZQ#49DQeNa2X~rT_anjVR^!WVM=6LS9q5VgZa})
z;rGC|_peJESgMy-EShx1RMgiig%Gy3ylI&<Mj9F}fE_T2ii*mGK+$>AozmimA~<2G
zW7(AkCdgM{hH6Q0mm1-+_H<t+v-~qvjIzMLyFfM_qYOBB9kbMKo}36+L>9lq{#pMp
zz*u}!lLH}u5KtiJQ?Duur4Q?<xS5ejPv7j#;BAQ|DFO{L8Qp1A<Bf2(b}jPjiMNeP
z>d!D=!!;%6Gf;uEn)0vZr$I|741+RY+mkd%WY64fDKj(o6~A-H>$EP;q34Kb{d&{y
zTcSJfatP8e-2L!|IN(EwZ%Snn72S;;=rx{h{IboUF(P3%d+S*&jX?MozhJL9gW>&@
zR#iFL;Q23|mqQ$E9Cz<g`@SLeNQm%APf@bgla$)EE<E_t{#%WPn<{8xLI>KyQft7|
zCvhuwZ-GW-FRcU0H2e(4(~pTwtzR&3HFc@4lQEocd>g%3dwAGAk?5V@ZKUC9s-TDt
z($*9el~$LKl^y8(@|pG?vp`}Y74%_GH@Dd*gBXzn1O#v)&~tMD89j~mDo;oVxh~e>
zB&f+v$H)NDm>5!t;ep3r_^qW9aWCV_WZk!SvL;lbz%-Qrm5-j7s-EEs`#dTR{=|&@
zkAL5nsM`%A^6L0`sDOb{B~nUp)Phl{V-=AMmy9V|aiACO8(fh9y#%U=<9{R;J8axb
z@g%R)R1_7zVHDoFiTC$X!+v(e;J^=zSwK=o;0iJP{tzVVf7{Qe5(CDZTq;==6(~ba
z4~*vF`5#u{ZGaq0pRxry*IC&Vd_T(kzdF~2vsZ<ykG6;5eA6nc$wx;8nVRbTOOHwt
zHU5vDV`$?-JdfSEn;62*{})XLw9tVQcbk*9Fh9Sxt!?<*x3e90e#;e*S9sr{Fb#R5
zQSL?%L<R$f^-tC|d|Mzk(9-eH0pH*OM^RykEy!DcxA!rGd8ViJKwQ!#cME9`jWZ>Y
z)8i=X{AKabiQwO<>D)dQq5RuGzQXxODf0U_@v1-Zz%u{eh9o-WEBxEyRZsWzKO2(B
zbOjFyO&AJU_Th&K4}^rO;b}I!y}Y~x0(J18*K7XGOVAP#`PVT#eXW$S;~8LFing}O
z(Amzsf*Xh%W=CQs4O%)n{a9SFR_FcAQtJif$B%Pma<-R-A=Wd7`}N!Z?gmCmQ6)yC
zIMI#WpYZ42tdtb+^o|2KfPy<W&Yly*7Z6dAm7X5JhghTh&)#CNe}&5tH59}Rnd!U7
zM+d;p2gVFN9UUn1`a$W$FHi}xyJC|;8A4v``NgRzNG^{E4hD~M#td0!U^xH~|IJTC
zNy)nZ^I%m~)y0czJ*gdEUT=uY>)Z}0FD;crKwSyRLl9MizEEj7%k<>Q6JB24rlzKW
zoP%!e^r!mW>}paC<Tr=p&if7y?2uxO{O#DoPJ)Wfp8s8L(+Y4MPz?r;c9>N<s|iGR
z=KJ{Q>E}1m3Lm+hmjTj!`t+yAC1Tj|20!w~$+d~e$=24^(^f>y($W%~?!cg+A2p>J
z8NDwI41|!KKj)C79fl5Yg6Td~7)FCKFPI~a$1<{k$6@ov_Gpt#88rHAY;1^`V^fU?
zBzG1E!9f%0LP{FB`Ku0t9mhFo3q1^pn^#*e`HrD{e2m?(4QmB_vSq*(*L9<R={!Cq
zpVQR0eIYJ9vi=!jyU~`^1ZjVw02GR*hn_=68hM?vg(x&sx52NZsOS$bCQ@YhQhZ9I
z0VFu5%8mmOar;<@9v=@cQHVZ4D){WdzSbptd|63JLD%D(SZzR=g6Jb~f(A3*#T#=3
z>@+ly&VdPbg^4FVx(o48WF)7iYF5rGJbU)-i9CP%GQ_yQ|L`F}GMdk}|NHkJwYBp4
z-4i5iU~raTMq2mbdZYPRMH4)^FD6lp$M|ncN5qf$^&qcsfz!mKlL`p_eGu+P3hXi=
zZuUS!mk#a(W@VS6%`L8oV)Qpx0|+0i<tL7F+TSx^r~*ziNQqIn?)D;}K;g4kyrW5>
z>~f_kR&V8JXO<&ADi2w+EM%7)lhk7n=fZE={EaTC@#Jt49|Qn<HhnuL9w2C~rPehx
zPOa`SV6FhSPlUylzAu_?e)dRJI)#Ge>7>Kiz|heCc@AUq(Nf!`{iUFjm@UYFBrQ5%
z*mE&79ItTpH@wi~DCa^c=W+#|vcoS_1hQa%@)L6)Zx*ISh}*|fDx5wAokRlu7-fcC
zAD+P}8n>Hl;~LlCH13ZE*bVrlj~zg6k*5hLij$y_+(;}oSh#{qKR8t-Ew8RV;B=c=
zv$Fv++NaXk1}Bi8`Y@vCr8mKCY2P4;2y53o3IT^#r5OZoTVx{Nd3Zp?6C#>BUDV6Z
zYW_R+2nL3A&j8meOLNzQ{x(40*nBOXpN!E3HE<z6$*MS+nV8gKJdhc$I;uLF$=q7#
z2M6YyU7fodP8?g)Mjkr4y1dq_S1z1u#=kvSP-eTpV%cwk$`jn*?NR44cRFYbvwD>G
zs%zqnJ2qH(xU3$RD=YUy(7?-usi`TuV%vo3lpH2>Ps#XO51()%R^6G!Wr5)Riz=fn
z5_=sfJ7Xugi4_&L9cG{`9@<+GvJ!csbl6kaFS@Q3JT4JTIYm;EEe<a33NIgh^P;RE
zBiQ`(XD-1uUBg52T7ML<nEIX|>cwe3W;ONw7f4$huRC-LpZ9Mh#vwsZg|Q-~qSL8q
zXvAS~fHVS4zQ({no$XjXbd8cyX*Z@k*8vf27fKBVZqUju#>K^Ho0<7R)6mK35b|T#
z*w{dpN__trZRszN*x^x2_-=1iIvgKDhULB9WxiKG<6*^EIk6F9yMnbiR1lYKE|-uU
zJGSQ|xG}?=Tx&M!_%ue_MKdWO!M=W$*SR?l6KEmJz(m$x8!p-TQNGgY?v;?*9&NBv
zz~=z>Zv>y^@<gDDR#F%+9uir`H(bA%)rmJtz0`LLj1SRvabDWb%B(6udUqE%AJ-B_
z`hw}b6v}S<Fy(7}F6f>htVz${IQ8U63f=9i?gHaOL0+CS`v!6LV{A%xy9<2WZF?|U
z?2kGMa}26eP3z2h>Ceoqod8X~nW*ZdMgo$D$5sbu)ToS4e#FBtlFnT4Ox&O1U{>2z
z+W(W_yqKlkM)ryOPe5e8(`d8T4un?a=`9GcKUBMK6(HPI_LP0Lh`78}4T9G8mUe`e
zclUZMZm?QCTe6kXzI}jy6D0;hC)*#_n8M1}GtHgMN2=`h=HGn?`cWHGzTF<d=P&ic
zsP||bZCSEBa<UuLVU%jey70Zb*}Gw7YEg#yWT<d&WUs|a^{o`I&x+A!0eZFjEuqy2
z%Oc%bGjvz8Gc$qC@=&Ee_KEY714x@~E_OOWG|q{O@D)S=s><}Bnw`znd{8_Syvdgj
zJ7U>(AhiQ2AfMpv?VX75Nw?HRrE8a2_{!yCF=_5M%xXK)r8`Z{H9_w<&#^x|Z?gJm
z`8=c~GK#UOHV!2hiR*$AJH{(@mU7|vb4CUQr^&anEmv?Eg&enmA9?v#P37e$5-<;d
zv7+fX-LI8goqZfLdTs8RNAsY*0Masr{89d6!nT6e@2Z8CzT{lTQRdZ2l^?Xgx1pyP
zv9b{7YAelYcTucGqRgC}LHe!K;o)-k88UJQa_(I7=Bd=s4<iDK`AWN^_{r%$_<gb9
zP|ssCp;#HVNm_QdlSq9<@HY6Q;NMQ#?uG=~=R(a$;{d1Nrcn|?=Q)-lK~p1Ft4?6h
zrx7CtdU||f)YTC9?qWLz-;ZR-IGw(s3y9NRwGCMVyU^stl0V(=+5AJX?RoYXH|TKa
zzf4xBP+w?rk!5}UhAQgCJCHgCUIVi5=g%_Yz0a-mOiVr|B?ToV>DoQATdFa9wyk9t
z`tr`;;NZg-2rH}27`~FhYM{diwCBX(45EYMlar@r+M)o5#>K;%A1Y!1`X8mYBa>#u
zPs{0bkci(g*t*6q==$xw985|{;+F-S=cmeWUD5ON-Sy1S!Y3n(lDyu4C3qp8SMiye
z+BFy~Y6)zFy$k3DP<}gtyQ{sf_W&eYpWU|>I^1OoX^rJb0xzujsf#DeKg{&>jy9O9
zk1E%4uGV39r4%V;x_pXwBP*!+Lf4qjxS{Z_&n&ZA#XD%7w7;^jh~+RIf>aZi<8dRY
z_s}m1tK8adW>(&u8{=VRofzE_d~Q(Xdh({LOHP5tSNh45eXIJ}k6`X6TEIkd=sHn@
z-mpCKM4UN3uJgp>wR?U7PbHlZZfHy#PXWsHpiO1Pb@c@(t8U2o97gt_I)3cVdh!$)
zbj}{Os#@OJ(j#iwy?A}F{<cU0MM`La{u6Tc_#7V}hAcdrcLc&K!{r98X;-oK_Ja8s
z)QG)jDz<gPRE>Rzs%t0LJulCn?0L&-+3OiD<=V~VzF4U$IGpq!)85~YS`y$V>GCa%
zgB%T+2=-r-_~WTJM?^P2pB0zYcHMm+ki+b(cTmg-o&s?kj!d{5&hvM?LucBwsRU|=
z7HAnctbcqu1O1LmvmN#)qb2ubNo9R}q|RbeekUiaEK2XuKinS9F=y7M5ttcT@hE2S
zF0ol2VR2cc-6ulP`f8p9*KPXKCc<`0bMw&JikZ}NP*Vxh-6QjEilHT}TA%Nh7213C
ztF|=QL+)%gvM0k49#_x=(G8tt=F*5c{D%c-mp&TC9=?pn_)LMV#|^{Pri0gUrnf`L
z*|l#LhmqvZvug;6%fTU`Pog+=+vc@xmqtXa^9u@YtRVmsCXZ0Nf1i=9-ixW5L1p=N
z3Wr$B8{X5}LrH0=r-a$MhbSieifrb3Q}G@1*c1t-^t}yPA&pWew5!m`ZjIwgXL)=k
zM;;4Hk_4`h&C~<Em<AfzBa?^A>jCIYq@H9Fx!1OF8HM;tz}2I3jGFtN7^RMBFEelO
zIOUd>?yZ-Mh4iNSoUuaBb=F`GIOnif8_k6ZA4pdoyl)*2BT3%o@6~chYW%1RkMnT+
zC(W+;%t=xI^esb$gCuw5&1Po7a<JAx!HIcjDNR;)<mgf;)O;kPFwnU>&YW4Twzv0F
z<Or!t!9CaIQ8)CbJi)kT3cPD?hb|K7M~}{Va9c&U&2FHBJ@6vI!s<uWuV24{1;H0a
zoZrxOvgv1lTmS)yx|&*7K#7;vz2RmyzILEG*0_7+&dOOOt`8YY51K`kM)F$kgVNBB
zKNeJ{G1G8$L1$u}4^{@&*5&q-yqda6;lj(7O<)>0aI{t~O!cF{QANr^%F8e2#+t$6
zim`HP@*P-PJ~pBda<Q69W9b!%lM5b-7QE{qIG-s^v^2B@_`8^fQ#82IczV*L+^Vk^
z3l`}KDTRnw5Y=rDaZr+;bO^Z!2_N19M`)O{v-f9=BcEC+_7<iGA(aQ$T~CfAKE)uq
z2%|V>W@mjVcv>Os;ROQW<W%9akd#{4rBoMm&rcz-a58QQ7FL4~fx&;z-LiDEMq2KY
zf5&jyw7D7{WRSPDH?MCmQ`vsV+Yn_@b~`z0b2TU3*u|EQWWk9{x=k$`%RK|3Qv%;V
zOg0)Z6Mf(-F>ebOybFSiYz~^cG*Yn&5&@m{KC^Ua^`d!W@6y2oN#mSLVwPHtc`cud
zpq-}HtHIRKvBKnGT%>Nwn`;h??;+oXDoF3Pv9#3vhTbdDb`|sK9X~k^sPpo?Y;Tpi
zRLmG<xYUW0f@AD@;#(FJc#Z4xiSAral){oVq&}g`=*n3-ZHb0O?y|Fai;Fe!F|v?`
zY=#?Ghe0XVC2qaENTTK@bhKNU6vXCuo!2Yrq4WoAA$VBD_Soqi_#iFT(!xS#{Q1&{
z?i7M~R7)A88;-l~F!sq68upd5NcWDNHEc<cZmIk>zy=kB<NDOaCej2vwFjF*YOLP+
z`F=%)IyzG7Sk})})qAK+UOe&JwN;c4%LCDhVHvotIj$Vx&$g?-+U*pH2w|`dkiY0r
z0FIz5jOxewQSEbmnL9<svYL8wg`9V(!+Mh$3!XuQWGhI3FhwzkbPPqv`D~_Y+}#A7
z_xrWNSz9ESO5-rE6(%vNJ;;#`%TDdkg6iv&j31pXeuxQSVYZOd$*9nYMx!zcGq;+{
zJoR$S+yBMdTgFw@wco-U5d#E81*BD^1qA6v1f;u5x<k6b00cyo?(XhRC8QgqMY<aV
z1kSa+Z=dIX-f!<YXMf;l?7f+5tvRn8*BBnc*D=R$8+*zcl76OmdM%}SV6Vz%rC(%h
zM=#$pIfzN<PBxr7=aa$oLlIwNp@2nkX1&q_IrnNRp;u3bKc7YkPnZIwt?u%dFJF3j
z&m!~li{!J;7}1b!^nU-hC5<wwk6jzB{-6hM^1W~tGU8;3cT(cZT>>_SLa)8!<F%BO
zaLKQgU3I&64}dvb9>1M9U&BCdik_W#rwIOjnmC>>7BQ>qA(5gYc&`?~wV|V<n+7$t
zE$zbaO9Z`p9M%bhu#hZvA`n9+i@6+-5R-cBUni^g?XM9OL3hz#m09MezA`~fN;;7r
zN9L|2Yc9*Rnbfs^O6pNwTD;nyGP(g8F}yFE@jD<aEh#Sok`=?}k~pu@3O>qyU;!pe
zkV7qESP2=NoP2gW1dKm`q(rskB)&R8=LzRM-wPpPG_+NM)zG=e>gTL!U)2C+@HESY
zbP6SUud;oLNT3{=Lcg1ahgZf)7Q`SW97DI;==(B2^Z2pEB4$UIw4L1$#9bua6LZ(E
z+g!HXND!;c*Q(n+3*zh7P5QLi8o0(Zn^j-mWR&13fNkroBGr?!^XO4?39&(1+TD)t
z6BC`9c%ThmwxqGCYt*b0qMx@hR<}1Nt*miScl_fuINlLCYwA5iw4kMT)6qUYSLz(A
z%U#CWl$jo&2Y=su^W|B&9=N{!HmNr>edgjpGX0#v;{BQP9%sWI3{q0`ML*ek>eqf%
zva5YvcjzpKc@RzVDhD|&t^DNVY~y69o*n>w8<+vxCupMeUHSTLqI7jSGHrPJ5`Mq8
ze@cpQ;7*-`J;>l$(Yd}g`4*g|XOW(ss`CCOrSXG4ERZ}Fp17eIl1K(j)g__xls6L+
zLqC<%y99~jc6<JMvfY2lv({#TUM^Z)?3T$<((>^hP6FuOPlF_nNUzpbZCUQLb2v$r
z1|;yWii*rRsnve<_cK38m!0>(dVzt7>AV*>YTVux#pOA1=y~;~Td-Z{lweu~`ijMF
zAX~&>Lk#O#J5@$|#XBR)Guc+d9e)aiHeV7la5ilszNKH<0%SKcb~Yv|l-v$?BDCEF
z6NEzLt;TBoc&fvXBX$2ojH%qn%y-L+*KXM>Su2K(Z#bGVj#_qCJY&p_S9?H;IiP3l
z{Fj~u@!Qjr6VQwm1oEZDMFWB*P>2I;m2BmH;4`KW@Gvm`POJcAX4OF73d1G6Ktzg)
zN~$05cB;<RK~`V%7~8cW^_|@szoFrxU6f@1cPc?3ARpSEC8P2(d}~goH<xgJw3du!
zyOK<>@JiqTcJObA0K!jt4=upZ#Z6*E60W4IEQ@G19NX`w5lzvT;bk)2zZWedCdMQr
z1o$BQ!CNr&u9Ng2gyLfe{m|fGfvbmcJ2106ImpV*<#t_UrVH1qJ0aqvI<-JfTK6Bd
zWMT^j`1?=0Z=s5IRt2|6ZH<5b{%)~vyfyu>I<YhG&%TT}R_bbRKi;3a*>HMjre+;e
zVF@wZ)oy;`t%soLT3V{l-=O8~FZgw>eiUe-?2iY8s@w@nKdzF5eSk=6BmmT)Q$Zz-
zdZF;(qsZoS6NO;mA_)me6E!C7&D-`?T?Z#y^X+q#GuwxoGHP;S&Qyb+qH^^t1~mE)
z1qt^WxX#C_ToWQHDpFG9pSk^ZC3OSF<8yb{M|w`~E421q@yS9i8>?Zw?x#S%EdR)T
zZxOTlmeho`zW(#NJq-qe28luaV3peI{Y}G_J9i*p=WkOk?PIn0ZQC>HT>Ade&Cu`~
zUok73fduikAW|O3!!BvQ3r>?SkuX-6E*ozkZj9B-{=k5jGqwGUnWFUNO7HOSMnIT$
zKa=*}M8Tgj9e>=oE@2<0V8%m#DVa558QDSnpEI(!qg+1FOHS=YB;EjOUcj>)+ZvtK
ztuUONE_m_*uK<(bhjo*Nyga%IW)U!!bzF9C_f(XxJU{N-#!lhp<^kEy^ayVHirU=A
zj~|EfHc?2#He>5Gi{`(6z1-x&W~Gs#5^O>8y0yWjTV8o(nQRB_jrfdH$j>X)>=kCc
z9_>$24P>5$N{Pm>W05e#-x|DyJ*(pbgMlfGKPR0B7cH3bx<}$ktH&#>`*mkBVhCjB
zn|Jg|RWzn1-QDO%<M-ZgTX&QLXR!|!F@4l4^xf~cCU}oE?vj$WO|xmbYJQ8e6$;QC
zZ%c4v_4x8UdQ*{<RBRSTI9EL|hKGmmGSI6%?x3O`I$xaF0?9Wz`L@xc@!DgIF$c=U
zp1205_8g|I(oK7XPYKd1BwS8YDcMJLleNz7`;o8KFX<C@zYhp7SS52z2Ei;kwS9kx
z)9ThnwLRt2uUnZQw@pXKZB22frKuyBQ=k|WuWh(D!Wd$oD>-fqGvhVp$Lhe>HJC23
zU*ozIfRjM4#=dpV(-7!s!S4K%J%vapV1HFH0T@4~4r&Ca*z!+%;wpYXP!^>_SjuW^
zYy17CFBG@jQQZ%t{5Qrqut=Epdp0J}uQ(UG5%?csN5h=DMvvvEQb0YgLdGXX^KD9y
zTpf)}?H4VthZ_qyD}~RSaXpcs++%m*iQ7l1?ecUa7m1Rh_U6|Ezl)?^)oE_9`|QlC
zUngE5kW;|=&;F9IwKlGRl0~vTHZ}<X0gyfA8e0<*s#o0{LV9Me2pM(rH>ijoLQfqg
zf6*$_hehyJ>Dw>vXI1Utt^YELv11X-P4A7Z`We9B%)N=1;2Hh-v)1XzOTViq=MZyn
zy39Y}8i$1N4rP#brCnKN=KJIc7?~&^KeSL+E;ye1RYcZMpjx*X!~%fC$FvM7Zc7sd
z4Z--c{=K}a73b0kW^4+IRZt|XbQl&<SC>+7S=dd3dzjGR<b4T?Tu{fvu6;XjRQn8K
z`C~U0^sU3qv9P!>@*@ke-rk}V--Yw=T2{}C(>N~2u?8#YyteO5To-3XP;UiE_NCp*
zS-C(Dm{vAiJ0!k~121~dJ^S)Puti_SZKb?z@M=oM@fdy|o>nh(&M-b<PVKzeF`0Kf
zMoF5dd9)Okvp=o)<_*b+NBUR;S2>VBYaZ^<(NU-2oJ@0Bi5}%S63gBa4hX%Xeca+-
zEuy&P`XI;i%z5h^WRkypdGiKpfwFd6ZgqRowBM$uX9sX*qN7ba_GjE(tCE{wzyUnt
zn$W1#`BA4;si8p!^+4KC?@{Z<D?Q=%xc2JN#RS5U{+1XhKD{8eqkAW2d<eGYn<bwZ
z`gN@EninQ9sdm4D%FHrjbdAx`Jx>qt{_Hf91ho<e&7k-?T)N29lL2K9&9hTH+J<zy
z$Z#VlQA`S?M%+AIdw1pdSIUv+v3)l&-vwZ}gM)vLYO6mZy%rqKIlq|{46GEj+$?kl
zaTN)sHuIy}9^-XKjaLDQy2ilgxjie=aK6hoUKr&gQ%cUPOZu7Q9cw=n<W@j@*$!<b
zjneT3rkcCW@M-@8$<2%+fPAWdaz9&)`}y;>TFVx1U1Qq8+KgvAZ2`5X!Jhz8>!suv
zyU#;f<$R4YQykPjIRYot^gq16EzB8|y)mZ6n%npy-z%F)8OBb0e}3CAH<#=QiMJn-
z-Om=lVfSA%*J{{6N_Q_AK>wh`uv@j(7}_QRAOs?TN+6b83hJ12PSwY*Vh;cj@#u9f
zXbMP4eN5hgI*R<bVw+&=BQhOQ?N(-7?;c32Z0@K>9aGcMg`LVUR4vEF^SaIsO7kXr
z)jMdTk4i{LpuI6~zt*5~tcVO*{h0ZJ`SUjIWnFs~=pFD|DJZHqI64}zg(n};lAV_Y
zCZm@cf+Qc#g4aPl84PcX(|ors*_3V1Jkv66T3ucpsk<B+>lv?7r+z<YGq9@v`&B0<
ze<R2kL=To2RM?%iWy)m(cKvtr)X#Y#AsOTkR8O_<DtWj{KwuE$c}rL#>0bTcTEIlP
zMCXc)C_{p9B4$k6TxXoj22ZF^%w_V_^*h8kNsd#AXX5x^Exrp>JFL~a9Z&2nb?0j)
zO{a|}4pS=EkrFeRdZza)CABK&IO-XHG{8diy+P9S4le{4h<h_#xL3=22z;e|f%A{X
zIf2?<mMGhNp%_)h+A(In)4MO}1Uh$am)FDCAg7&E5EnG`#v_f|iRW2K73e6Osh#7)
zH0;@=bLU@#CQ0<PQ1S5PZt}QD#c}dHB@?tf>3UCy^63=8NE1=>eF1kQ-qt|PBG_b0
z9sgiaq*QI~yV|Oz$Uw#XC=U&O*$f6<qww=I8%j0mR;s133c;$>J%Oq}h02qO3X3$p
z#W7~f&ti)L$7QM%!$eWRt_vlpy<I7o>gV_FZX}h84#ffV)UlhnOn9Aa{XSUa>B>#o
zif4b!r!@USijmUBft0#X)EkG@)CcZ=x|sjya6e#T(gk_2P=Ps+$l-DN;kmwyy>PY4
zde&_t7H#bkBEF^lPTT64^Pd^IMhsM>*!aY!TcpySH@M#lmx{VC9p;UDtKh-dcj&R=
zpYCfT#+>uzzSt|}jTnD|$Ui?A5dZ&}0RQtzV_c_e5B~Ev1akm1k=gG0=6tbM<e;hK
zB8>JbO!vvk$5tBt7ajrc-F7Q0Mnr#|-L4{1eBRrq|6G|#K@oqLKt~9N?CxL240u~@
zX?|uzvQcVpAJOv|+y<8Et$)?m;r}j~NtzV=IyAbH==`3^n4aG1KWpIT%cBaK%Y5MO
zW7w+rPiqeOe?Oc}BvF{-Ij?o!nE2af2kMM>F&}5EZjZ-Yi|e}Qo~OnW+4_xkv02~x
zXUTuwgfMo$#sAgz;gHfD2b-5&`;io>1?1}kQpOg|&bQjAY5wU^BY#ICi$K8T?O0~_
zlgB#gl<Uil$bbCv;->`-@%XDrb)vRuy^lK*O>Y1FA4Fet=`aO5JJH81KT(L!l>qt2
zfdgU(cX9BZ_C>!RcemUWWsgo`G<IqN^d~T9uB|Sc85_TH{+FdMUP)0^RZUGpCK3d>
zHPzIBla7CFPzlxeDpw81prKsbNjIVG-tMD?0y-79vqQRswb4-0u(GhQys+->nhJbl
z-m(PF@3@pG+qE+L=9VTIDJjscA-km?9*#5kn&qGNy7b(x6Tzz5IHyZbJ~2AR-hlj_
zTY`YbVYMi`j@5fe;@2)J)FPxs65mx~Vzl){zmebPYvbO0lEF#X*TkaM{PoURVJX^m
zAY^EK(n_(o!BeB85bEoTmYPP<r^7t(&n>K4mWjfOTq%sgieI@Ejg`7$9Sy@oBdL<p
zDBTM-Q*oN^mcIz_30x|UDjnvkCru60)6ZNEiYm%d))E{yPp4de^j^cK#pqlKp-8B5
zs&_n!k0v0%?w94MameV{0#Q5|5zU{ePb<h^GhMc(70&^%bK(1K@liJbw%{9+XxcsA
znx`~UOm4sHCDKJ_@!^9+O3E`a@gnU%4~v;!$<S0*r@kx@HKI*iS`u=wM0?{9NB$ai
zj-BJ*ncpM7EgPe{qtc3Zj)M`lGn9<VPs?(i?MPd$yw?%R<?NVf1K<@4It!Pm_|LBf
zx1?0`p94xgOuKsZ4l$lMaY?$wQ|2e^wzHEPu8uVhtCJZ<3|FEhl?>XSkcq6^#`=nH
zGXMLvMS{Ty4-w0a$HR8K#cOkkNxci1GCH2_T-i@&lIIlUZ(jM~t!J()wPLHGarvJ+
z>m{7{FWh4CDgY;3O53>->n3?Fb3BB>mjxW0X_9#AtSlz`YP;ps<S%2k%ltsK@Y4Fz
z$8xDHOCHoqsAKgWDCeVAQ~EWif^V+uZxY_S-F!{xNQsc(-gKQO!z1nwE-lS1xOZ`x
z`pkc$2a6C^l@2}$4c#9oIUHf-iXz_3)M0KJ($gHUz!7c{mMl=C8j@QWlf506V4Rch
z$Uzy7;#35i`}-KkZhI#-0Vx2)i^3^iSLRdMDUE`DCcBj)7fw)Ghfos~oN8%57U&bS
zpz9Z0k{guca&_c(Jl2)8542+ux3#5{%##)LEn?WPuwWTtfm+E}1as)*XJti2Z{c@G
z>myTNCb?O8HwCO^goMygyD5qu^OZ9@MkeW*i(;t{2#v~VdYiS5&OW(eAGurhv(tud
z*e=JLrF{WS$+Q~Rl#}KLWjeDjtT$49JS~HA?q3E9qvuzL?TjU_et*R{3u#qpX*nK$
zO-*%w194sLinQGF{EvJ1#N?WRy-QD%t>Tyt4PMIJA~W@zlMNwzmL${vD=3~58y9<X
zV`VJIwb!HW^ta=ogpBbu)b2$Msi8HcsccgcmeTII_w=`~;p+(49}n053SRB_J`n41
za(I{jDvrSo=E9>PCffY`Z<$m&2(9}B1O%L%C$l;z|6nn=OLDsu*p8&^A_HT<Q>tkI
zSfOrGDDYyFyD$RV_gi-M<d}ShtE*GT<-V*H6PIciyaFwq5<^MMz+!)!sG8KYSNE{I
z<A-z-Gf3}{;*sFM5Ib&f)J&bY^5wp6nv&%21^3HhJ{p9{lsdc#U>Y}zxq_QcxXV0Q
zCPC%%k-D3h+%)~`4>8N!xa#_fa@FU4UOMk?G-5pOZDi*oJv#VfWtj1i5To@0Iqtw)
zh(zzQBHvr9E34yb6O)y;T)Yn+@G^cr*ZrxB`j)hsof9}&L`QF6VE~EAJucl)zaqcD
zu!Emf7=}{OG>)-Rz<5vqm!nBc%)?V>Pyph=ZmCJHm&be*zVIgBiXIM|tQ?3I37kHe
zZ#7W7%TTexI5An1oE}Y2Fs}fZ;xI*Yvtn9tJ#pJ1g~}phPgE`TYR(fO?_Z_=G|B%9
zxGH6JxLRuD+P~4O^I5v==iS>RBTa)7Q!R8qbP`jau+VL6`{}(sz3JxOf7?Y=_8<#m
zY5wC=8VU*~3YW=m{YlufZBlXE&WHQk0)n;UuE6X3tNGnt1Orpwjc5K(1%EP)Z5Bs&
zXy3LhoWl7MJ+*SPiYSaAsc><}qQ~>mlp)t|jKSp~6sK7@Jz?QV2Y(Ey7lq(|5MO3`
zDEomE70c4;PblauhZ*>are@AgN>aI*IHS**nVDg>goc)M>Sau1?4ztMU>KS9oWB*+
zmY0Ry68E}E;PnFm&T&o{j$*!#D*3P=vfru^k8grV<SivipW!R#+U&M}yByo=%ZM1P
z5*PzFHnGUP{!uuQs7lUHC8N05KX_S$;hltz&Vzv^ie|r_m(lo?>0^}t#XVsT9Fjb{
zW`Rw~D{idU9J#{S{fI1qq6txZ8HB?@?!ZpeMOfHDY2^E>xuIXbVM^1?)U+JH?DX{c
zmG}7m1~Fc^hd*afF!L@`-v6kpo6aF~^85Zr6eo^#KI`pO7VVV=j*=yrW3H{*y(V8$
zS!Br~vrv3Af5^hX;NWm#3wX8u1v>(K4#g4t{TFJQrC&Z68<Ov&3^7e_R?|DT#75qj
zJiWm{NSZ*q)o>I)5A=BSXIu_l_i%7P2@C}KfUB&`)63JwhUqUVZF>^P{g(W{=+3tw
zdNWH?nSod?eY+r#@R%D2t!y8W&$R|#7`0)ovU~h)hO!)t`ZnRxs}`q%>^HPHXWaGz
zx5~^EDlJYAJ36wrw+jK?a(KK%i?u$(_p-4OFg&xXtKm@T)j2zXcKm<h9fEuumZk@}
zSvrX5JLQZ{ukn|G>W@Gy;xZb~WQi-A{rW_W<HQKv5F;Qh=+rBK%ffxPz3q}f5A>Q~
ztSED`uhF_MQDCl3`qx?kA8_ge4LlYJ=X0EJdiRa-;hcs7&4~<Y(!YSa#96gL;y%UU
z8>AL;g0{&PHxf72rc>H><|rRAP)fz#zl&}L8i7GGpzyQKVGBdIu2Z8CVt{p-1BI4`
zgAtomUWfhVy3=!UZO^kh$C<PU4SL6}Wu)N5(3EE*0zm#76Xo$-j+<R8gD@<40|P_v
zZv+LGiq`ifn?ShCC&m8;L9};ax^QVAN~t>#V4AF~NT6nAX6^$3j1!11dc&c8U0qpO
zJcW&oZGIwQIaLeVua##B#74dGRjao47w7H(wEK%+<NsQg&zk6sqj)1B0KPf4uv)m(
z9;NoyB~osv-<e6E?l^Imld&;GYyeupU1>3eb<8Z4ATz15O1YN=5FbQ5ru)D{H)BN0
z8}r12n|$a$UyNE-?0XB{`^&DF&p)y9`=q4n5bWjSqWAy0QrpZ<ghf_w#Ysi=-e#Ub
zIbXjMLPO{{n2j#kRKZ4zVYN)<gTZ<j4mIqKKRZy?X8e0QFo!xW88gaqT~}mzb|um8
z{U94uUY_gg!!6AGoH8&t03?tO8{@}=(tKAh|4QI;EeAXkur&S}4C2ezJgw=H389oe
zH=9cj({_Wt6XjJbqUO1s;M;fprFcMi`IrSFX|0+4)^l_DM)Ea*#jtW`u8y0h+<ZDW
zBclTJ`({9H8K^Phd1}}!##LN1fhNmt{rgI1LA~0+lp{nJ>J{c=WoCGPk4c|(?_5t`
zLH)^Uj8(l3LQM>H%ZrtX3Hw@c<YF_(@JN<p@XlQ$WcxKou6`jyR23JP*X}$}(!=Sm
z#gchR<W*evT1DMo9UQ#<ZTdlOAdX7tWuT`I4~>k8fzi2YQo3&oHn5FBAtfiL|IMEu
zqf}IDdTQ(Rm`PG+%EwbnvtFfKfog9igKGhgx%PjsbtXjH33}wxhYlY6zM{<iOh-Pj
z@cQ+BbVThps*pxvfZQ@viZQO-_77VlMp{&Ia__(P&FP9$-~U8w{y*dZ|NF!d|6kVe
z<PEewK)g{<P|(m6+XB6_C`co&c0En`eDB`9!YM7SX~3ud-HPxn%rX!S0J8~;)wCPT
zltt~%eif0a%E?imdJB6@MOAfJv#q<^qAT*%P}9=h)f@MgfAr<A<uAZ>-9m^y7f|@v
z0Yx!^XMb+#pH<1I$C$q%<7;T_>{PEt_GemK%QG`8r*(k6c4K`Ve*xgJzmJzr8XK?L
z53Nj86x7%MixdCzacQ#<6gz$WcW@Nz>tClffBgzt!|}VihiR{0Hw~l}0RP7!xxrun
zE?v^csHa98?Ci(`eqw5DEaMjvGB}hq7|!4s;G(LcG7>)m0vsFb8(D&Ya0TdKL4Ec9
z!RQPTqwb?X4RP_9)~^dTCN}`_`tr|j{_}%hEapZch!=+h2iMltJ|c&PA@u2KXowEe
z0L}y>kzcu8M8}F?I>uh3(z?Df^$~CZF87mx!3ot3B7$Zh#R+h0;N!2zr%S+Sba)hi
zUn!Ks#EFsMvuz-Vm8X;<0%43zAf^FXxIkYQO)zRdTQL5|LwR8mg2GJRnUwSZT2<>Q
z*Wk7d4G-(;Ca)1o+`px7_#Px}fwX3Sxqok(rvWq|R#r@)rj=AbkW_vH5L#k&fK~>D
zikrloFOr@HzHXI=$$+S+&mkdS|9hogcj*UNp#qFa!rk28PfbG;Tz3ZZf6*rQU0q#)
z#;lwUOV`|7PDUm%)8@sC?aEhkApN1Ms|$pS1dJU2`5vzbF?GyDAO)kcJKW!wKnir)
zj5l~{6NhmSdDnHcd<VJrEx0>0+4zKnH5L;iABnjJo}ccoxXyk#e*fP33WR&crl#Pc
z%*@t+cKaT}NsFeVGr)h>*0w}k%s;aA%Q;5h!@`S8rJ9n(7ncCaZjyt-d>sobn!~m{
zCdN!lOUuQj+O7bE5QTqJefe-hwkp29ev%R7v7d{GoPq_`wyDzSD8rGIQdBHUO>I`r
z1zBqtvK9d(IbBOfhnBjC_Wf^N{y{WIp1U8;vhss{!^0It_B1qI;-Y>=1X!mG{Nhcp
z3J0Fka|k-<G6Ty|=z>3g{u~qY)cOa!UPfuPKtWHa1>~6eMn~D6KDD*A583bN?q*?R
zoZWHyK=lP{bF3r-INE%_GBPn~?RMl?T3Y&3umNTG13{kwFNoQJmg%l=$pQyQ6|~yS
z&4vK*|GMri?bq3NzE=$m(q`B3esHA3eRSX%M=@c$yYT_@-5FjYn$889aZUWI3pAjV
z8!p!yOia8_ugvoJaj8Rre1;StVd>RMonZ3^yT-PE^?eOpTdTSQ)|S2p51KqYJOC5m
ze!79=J;lQ&A;HJbGFF2sIdJi5m75>06*MGeWjU`5keC1NiBku;)Wm1-xQ<m-$CQ<n
z9#OVEMf4>bv!%v;b`V{-io8K$FOjPuC_+A_fVn5#TRC9Yfk-?uJP}Oek;!W}-iGAl
zXS=}<SAv6sVR0v|Z8G~B(B74m)jGPCWIxMn&c*hBVf-!YhM8H)EX?DcS9m}z<j3O3
z18PRKs6#4PQYq_qPn2=`g(Gc-t<9q|x2W_&%ddO|^xBWrX+n>;2IF=y2($#URWhH)
zxwH=UMN3Oo*GKQRjekmtHnnacyURL!E#_0<LHBL`!P%W(3{GFMZ3c}V-oXVjT<Q?s
zI~`eOpf4_R4bew*<HiTHHxgG6YMA5XCT$Ao6o=YgBUfM-O{D!sZlF9AHF{93cv@O^
zfR5x5G-ff5NF|n!iiQQM5w15NEFyMK86cIsq5)CX__g|If_Rt9ec65VqFm`rEdSfJ
zK-7(Cef9s1)C5u<1Nqu!{%3ZmJ{(0`6KdK<YP33%_KHHP&Y}XUpA*>`;<S*py1r<T
zhWPUVFG^-RNjphmD!ZP}9^6Nd!g2AG6_uXkh57rV!{Cj)h)8ea(6?%L0VOvr;m5i#
zj^Q<eELi?|aqH@DB&Az?ijVvh6V_ge2E}Uw@|OLGkk38J@@!@0MK)_OAw+6&pIYGU
z{Ip(wwMp*bD8~B<W(@os_<rgkF#*Ck;Y4>7KgH;+&1b>Hc4S;L^8Mmp1+V?%kiC-j
ztDY3xr{)YcnM1d^+~4%NngVOwM+s?oOPT-bb1-m`nFYajmcC<O^p;VQBO)a+HJ@u5
z?bCs`B?|o=G;zu@S&q&$A*@9l@ru(@(@6LQuohY)WAK08<Mi3t$q52Zu?VQ%I=i@J
zXTImXn3|llv(vZ27#JAXb?X`*k2c{H^trJzoP(G0k{2#JO1P-7a68nuZ4PF~#yY{~
z)qYwIF!|B=8cDN?<!fRH8c`KRMLO|O`B{Q4y3eNUnVE-<-MnY=pvyQ_?Vymp?c5<H
zuA|@_?LzVAx`>e1#gK~}LO(g#gn8iVPd&Z`nl<Tpd6H9<((&t~1qod;;DXZ7!3Y2g
zoH;)~KM*^C^iNd!_GZmi{o%NojqCBRUwxBIfuPU4yQhoCpq0wOcM<7#y@xdk(^V99
zHy%h+o&!N2kmOf7Y^d?^@r`o<Cqbm4V8Rs$2+v?#G7AKv);B6<EH&oy(z7x;7M2VR
zXtJN^TVK%P1ug0egN$h$Pg!q!f09F-vu(O2x8n<lTO0YUX5T~sSZl!h!vHQ_Y*_HU
zZ_IJ)r3!R!(`)Y|Yu}jOupxeUv%rjv#YFko_;@)m5t$@HoU0npKeq0VL)-cR|0{Qi
z-yKSNt=dQv(*)1+s<iK}TXhj3A$rFuz&(U|pH(q;lN0(vxfMNo`@wJm4@}ih8Csfv
zmjOmz>=ax3`x!YnfO|Mkq6A!J@>yIQL@2}1*6lujmYl?VAhB0mf^)DjQ?Rr{#&wD0
z^1&)sw(?9rI6k}{;-P`yv#GBMgcTE9_F4J)<;A7nPmTx#QQcRbrLVXhw_H64f6>|5
zF*Lw7o5_6tvTynTZi6QZ3{&2R1hTXJ1O7x*)Qt9_l~&4ms~s*>NajKAGcDy922$gB
z-9fl1N+RXG6cdBS_RbDIryW(@@3W&BzF$Ay!n}ANzI}#NT&Dg|rmRR1NuZzKScR1~
z5VU8#YnuazhvS!b*MmPl)~^5E?009V2>RX9yvOh8m>C(zfFn;|fBs-?6oA&$JhJGW
z;JL#;eX<6y1aM#%dBcdsbe-!Fp;axo4k<DP-D!LRJ~Wiz2<B|?h`@u<fd(Kg<8ub>
zdI{Tl_fv<JiNSfPxW}r+^DyM(=jR8og$#+;uUT8BrrbM1sqOrMOYp$-dC!EK)~~Y)
zpoC+#5)~C?zH+!Ii4YneITyG6xwaOQkRUy^zopA4I^#Iw4#Pw_z!tSX46<WQLnqm*
zu%Z_)uDL5R{$!IHHolow7wqt`{L(27t8w4`6R~8T2r=V#$T?mR)CE?v74n0#-A;zO
zy1FdEYRm*^HM{M!;Q1TI{GlPs$lUVXYH(g$PdnoKy({qY8*tv(E;c~cI8YT55tnDL
zX498b&?V`AQ>D~;<ipAxcY5NKFZ>s@%nHwP8&W?J-*hFkufKl+lCqnYJqpiW9Rm+p
zbnJHGeM-Zv{J=6niz<!SiH-3hf!*NhtkjPuU;@a|j#t%AZg4wVY@Xu5Jnr>N#!gyx
zLs3au5?0EsGBGAJ%-LG`UAGwezoGmv0UF0tPoQQy2XS7L!E~18(E=trdwUFY^m{uD
z0TFcS6t}J|O8~7z^z9rt9B|AnMsigl|8+guw70d*$<3_=&JxfPd-PV`fRo4Ys!>dC
z+9zn5UX&FVyKIz=dYm1M!g*1(X~S)iBV@Bo?X%dOZ%08v0YXN@-UL`ML~?_$qr?iR
zrsWLFskPJRr3P*@(_QZ91mtg(Mt)S(7|<D-Jj1}F2ZH+PGP4LDA7Nto4DaKwH~IS9
zJ`!;-v9N^QM!7N`s+gnX?c*~*oj+;&@^C$ZhKSSdy$P|_`dNfSHDr-8OuV3#6HULM
zTPn_kKrhWZJ8FE53egPih7!oXr^r`hJy)h51ANwAPqI+JvRV&>{{R|T&hd4yh$^6|
z-fi|!>^F#q!8juWgZ}duHN(*?X3PHAiZ2_!@Sg1tCU~5{WLSeiGu}I6H9I=r{3re5
z*$p7h2Nw%n8Hrf-&%|`Y_z>ekwFak~Ra-Nsv{FTOhF+6XqtZ@sw>UG?sqx44`q8bv
z-!akm7$Vu`;*RPoK`|1-YOvaBF0H|%(<!F%=?v#vL(b)&urpeHZ<^ORUNmjX4x+t@
zP4T@*3i>EZ<}35!Y<1w~m76h>dFmNAr(NI5ewjq;y!UGJ@o@xQmLM=SD`QFyS9q}=
zok2L!eHn$Bn}H`5UmP`^qtCd83+Nq~Inj8Wcl9MDG2<rXsySaaBGPB6tfKimdC5iA
z-4*BIoM?L-lY1+9dwXxypVG(i4XW-yP~32`N=xH5huNP+MlJ>iCB4!gdj?~1bydu$
ze;{S!*-|kvXP+}WxlE|=*{``EBF5DN*n9=*6`NZP7XZ#bH%f39uDTbOSt2Nl))8PL
z1=D+BQO+)>z<c@j3Z`!JQHWIJ6M<@uDI}ML#E-SL8mArIj&I*<rTd38H8iLM5>?Y|
zAGwSU9Qi&|Pg*8Yu{jjSiBy_vnf3&}Z<Co+434{{{qZn2*aor+SNMxqOD`;^Yon59
z3mVQjL87!bo@agQ=DnS~dQ$g&><t5`K|$_v#r>c!7C8%eXb05Jr#b%lXU#1w?!R~1
zN+$-&k{ixX0;U92OFfIUMT3K(3f9OkTho4*CnGiW$xkXbuukSPq9GJ5ZEb@+`Nrjn
zRll=4(5vczGPA2&;?C{69(x{#$BrT&<HaPzbhMQe6sBvAys+JWaDVH#{UTfP9v=-g
z$3cp8eU<I#MHw5fO5rkHl8n>pJ{sYvlu?fs5P$?CNxS3@rBqm7eGIJar25PolHDQZ
z5_F^VUHQSEr~IxH!F^TAuse*m#CV?B&p5XJ5_fW59*_O10%wB(X|u>u?2x2r_^#dy
zadBFp87k3z&A;7FnII$687?9uB)TedtxT^CtGyHaoXofoafRhnaubr5bY}!eQwy{k
z=<nb|>L<S)8Wz@4U+aEao;v#Jfgp_D0epBY!p`tvmE#Agcwo1}PYVkT?Q`bsZam)O
zU}6R@{7)@l2~s_2>S^%zz)APC-9hHINX8noxKU56EVDg9uP>>`i?>8PE}=cg)Jl4Z
zn91@QhjtO?2GWk|OJiFY4HpBKGT7`7R)=90B96y3yzVPOqNRlaDAi_<7aL$~@Y+oo
z|7`XP6@ay#!$GyTu^AW|N`3AGB(3I>)i>tW*CllJcjns03bH-UPGpJwQ}K65#2BbM
z4QY>n*?;_`U2h+hE7#)gRNFm2wuii%3O!?`Lqk+fOH|b4nQn1F$sCA$&MN`Ku#ztG
z2N74$w-=d-hXDeh^Y-<w8Y680!7l5D)zxT#N}L|W?2f&Ko?6%$(o{=B9=tNy_3axK
z0|TG-D>H*W|4LOxAhAM6VfJc<J-9prHdqvIfYL}-_H(da;xE5Txlm+?jJ#Kc14X|$
zO8IZJ)PM&W9vDc*0*xZdYP;&rD=Hu^5zti#RU8}~>CMt$yAn3p#egDmyJ-?Uyf$Xs
z?pBD~Rvsl7`t)p@V3|pWZltSb>#eS=tbjYyD16xju@^EH=#F9YJU?E#Q7SO7)cAq@
zfrYnG1H;#IE|>k~>vt&NQOQG2ogVwqFcKwGKIXfpDwOJ$NKy(u4Cg2h(n~CqD$70V
z9!ZJ|$X|H!vmhI6MW>shta~=~SPUR56y@c=GG7L8Aovr|io_z}{+=ctp{(Vc_OSzq
zxi#Xy#3WMV#k1?o`!tjn?Y%VBB_gnMKdc>1Ng>=uBTo4AT;S;hj7I=?k=o~cwgv|<
zFT^!BK$>T)_ElL{R#C8?p8B-$(m)*Na=~;=VimWRz2bFLx(v*X2FOH+#<dWVSB+rS
zwWy?ofre(NzrVesgV%Yta{k8+wJZwrqbfA$TR2E0@FHVTTBY2V$f^Luss66Zca_^2
zCmTE)Ho4!+WrMAU0h;5EFp-MqvTUcP+QM#}XVb1*2b)t9LqnnNZ=y;e#rA&%gUR0q
z%^4UN+Sx&YOEP23^Xvdm{bAN1J0OD4(9j^T#|NraSI3NZ6%}l!WCm*N@$vCcQO(p_
zg{Trrg`R$xkWxb^29x(O{P$lbVg|>eKK-fwN_}>03xa=m;v_gwDZ;vTEpf{Kiaug>
zu;WM@dRoBG>~XqL0mh2l4%4TeciBZ6Vji@PPzG@qQHM`!qXqI$x;+%>)JorPoc?Hf
z3%zbq&)=WjMe#hSh71XefjA1hF|Z@mznT-4lanK6q3!TzDJ@0co4?wZQ-86sx}c}d
zdRD%(MZE8~zZXRNl&K_NtH#8@<UxgpQn**LDP@KOFd+qh!N79|j@6#hthpc(uCp=9
zt=i+0hi0cAfl>7jE!4!A8q~zT&s;o6xxC_#u%d0iWQ-}9_a&G4ikiaO#W@r$76%W<
zy-3)tZ~1<Of&->{x%v5CFQ&IQ8k8ms67zQYn9e$M`c(9kfj^Wi1LyDzA7P9R)M;lY
z2QU+_KB5QM_|T}HSdI`Axx2n~dp%stbk)r44(s1xD~b`QrpsG;dR`!1I~ci^vUs!S
zCTf<Jn-}Ltd{8Na8Yj37H5)y=z&(gZ*2hXH4eB>HH|?&_n|vw8HZBc)><QFN;3R`t
z*;GO|L0Lr>{SfAi`&RbL%tluuIfpsiPnb^=DLYoE&}7cF6pX!>QzLFqk2oKmGOaft
z6?&fJ14vLI4~*K~uc8F|h)iX(Y0tgAJ?ghwbuML~uDhXX=e!81L>k7kQtv?)n7qZx
zQ!Vj1B;brl5*LH;7Ri!3mq6U7tSBmaoxEi|6C!cp8cI#hw4HnS_(fkwcn;pZyWEkx
zA}+T3LXf~OCWdfhD)jj%kGasR{POtv<ocU$pHWI`4&}$4mC?3Am`X=QMa1O++7I5z
zCwHag72H>wH+y-V)#aS#(r1b*_|AYtDb4%3IP`gIen>`7u$ZwOY)p_*KK=RgSg@m_
z0UL*yl9)~2Q6cU~cTglSJzq<e(Sv<rS8Wej-{{WXm_o5IH@}UK-!wfc2={tM^bjv4
z7t#i(Fv28fMtZtdl}(h?r_8>_#zfBx6yUnHbHc;M7Fbx18hC?-QJ_^PcJ+OExdW)P
z;L*qS_TaMUfF7jSL0oKX*4)MV6q=j7@<rQ@`cb$GH61-<5coIl@fvJe_U<Lr@Y(9L
zh88{0`)=)c^iv^`e`;#?qRg?g*mQuxBG_ZPAisvADm*kKcCWj=3V5K4>o=7pb)NI^
zyg5p5d30Bw8u7shQbr)Cg(!KLE_Cr6BH*k;`#^*9-^UR8&Ul>W&C3LT=7EqALgJxm
zTAdLQQg?+}p<eR3x|Q^p`ro_a&XVEh8L2OK<sLKii<x*WEG@Btbk2$uZCc5#$Li%0
zS!gTve23rlAXxoa?U^UdccxHR8}l47@Kt%QpyT5?_-(t@p%n<OVejoqy=o(Ne4^=<
z7Q!sTD2|zQp0C~DF<tAtTLTiehuctL6U)p)xICRWp|z}>_37n3l`w@F(Ue;G7us`8
zS1<g<7P?<dOU~~}wTCXG#8D==$#IER*DAJ4isqDADF*jVfkC-F(C*8#OT7Z)qGc&b
zv>^cE*l8nWP%AZt>Cx2#zQMskkn5(^aXc<y3jG|1yG1yDY-*RrxEY?u<r_E&6Qd8e
z-X0%&b}x}&<6A84_ugLyB&Vdu&;khZ9j;u|%c-b5S~J6FIChBtefi2S%10DgQ$_Bl
zH`z?aS*V`yGns9OsLot$=lrG$b6qIAP*hLO`RvKBWcnt(^2KZXCrc+7h$qB^EkMe)
zk_Mhdh%p#u^dXhBS{tFeEoinRBM(Megm*83LRn5uw>Q4-(W~>#nyP`&&xxu8`U4TR
z)`dXBHwlG+!%e!Xmpx}ke4nDDU4RmPJ$Bv0{S*i<I!@$xp)Cr<12D2m<;1*h&0(|=
zW!f@AnBDYT)m16#jr(37ucM7+d2{UP1qJSyOm&j|>dv%a_3u`h8L_dld^H=LTEfxd
z&4y;LN<`{G&34w`cYZpkSDq%^YdJ|*lgW?XNwTnHfkQggTIjh1WfM`+bYg#llsp&V
zoHu2YI^Dn%9hK)n8-tE#R-N9>=crUAWl(WLttoxizW#W<1}63;8GYjGu9EVV7mN>c
zI<DBRM{=|>-_{e=PruhQGo!8LOIus|61vOet1QdeZ*fegYmb3~9@2Px9GtXpU^Cbl
zFB9)5DJfaF(}C`*rQ~FH^XAR#xn_qibXq`tQ}T>XFyVxDCzj}>BaGIk#~kC{XTQ~g
zw{Hclt+y9CBRcn$LI*z6?=tYQvX*zXC5L^!389!xhbLYVlU#|pg+<w(Ju;8pJ$-$Z
zB-7z*<B0q1d<{v_!Y@aa<x?*D%?Z6yb1}Fh!WSp5))x*f_ju2K`__<Fr<iA@cU@f6
zsl0kUOS^p6Y+ofK`s`lyVgpv*sF`wA9YJwe5o>{)FM-}h-+SgoM=`G*c6N5P>1)em
zB3RJ80u3}|nWMkIA6e<}r#a4@ZfzBQvjQ1hrt+RjiJ|>ckEXfBM(S9F)6PRte1Cs2
z-hG&5vkRfP(743_BgR8nA;mJE62O(SRaRFU7#Ts`OQYIOv~ID+T)lqwn%-xA=US_Y
zaC+YH;B&19nv<x?kK!#Cesa+z&SgX#ey1r<lF||)2#kpnd>SEqXo45R>1rYNQ3eqi
zNMKZ~=(csfIy~MpOtpo9dgX@G{AUrR0<ApB1pD?*R|86!+5V?u)L!;k1t(DCC@3#O
ztdS+uzu-&zQj;pK+ea9Cf+l%p(oi`D$t_g!fJM$8<Udc$BS}c{?~eDJTrzHGl?+Y3
zgam%AMl7K9K}!ON!GMGE`Cz&vI7`PV`%z+c>z8dGH>RhjKYqj-Pmj-q-aEFv>cCPs
zojNFdwR0vVNrGNmnd>0y%Fr~B&gES0o1LYkkcx%jbdbRFhPG8!JB!4uuBF;@sSe`=
zC2WX%WL;dYa7~O~<#hQ@<^T9Hd$rI)`eiO>ToZr2-GLZ(XI6*ZLPc}>`A4(}8FJ@^
z1Q^SM{4L(;=k+O@cC?2NAKtUOjwsZ<$+Q2-4gGX~P};13L9Hxy|FUwgSKo*QLmXd@
z3Wl;{5Cxr@Hb;#*)N>Cyb}tz#>geb+&$I?56gqB^T)iq1C@k+$TAY$Hh{-l-Y-UDg
zVxzCG4{epX)(Z(mrP&H1{e&5JwhG{ffqO^5Zrul!35Xo>8kt8Z5^4%Wx4tw`8rT*V
z$%{2$hiHXXu&~h7WZr*B>1>^{c$=TJ_XFYLRBed*OC?zk4Uh6m2*u!tGoZg$P?^qA
zW<WzA)(+-Fq-m~*`Cq?jK9%vR1XoewiiJR|=2Wz={fpYW@d;lmA`pm7qjG<tS2i{<
z%B#lD?^XVYg+=I#!PTq2&CQpuC!(UFmN`NhWPEH4emXf-0?nf|JUpIPKP!2^Mj7Nl
zSrtaZIzcR$WMwcT=u(JZZ|``5N19(qhRfb_!`SD&B2RT07SgLGI68K{WACaOulyvA
z3L%OL8E@f{5xe^|wgjn|T&REjvo8;UvroBYjtaXp>C8x6bvos9LkevrsG7T%6e2ho
z7^In&fn^qug5nbETU!jBP?J;4aN@OJ9fDa%cQ-e4b8|=^I1D-zR5{4VzD`fq%ccm6
zt&qRsbXZr|kj-y6zcQBhZXEDB5EK{NqNSH|kTYfcDp<Q~A?hdbt=EOBbSqFmb2k8x
z=K;YOHgXuY7|bnxXdKua?Na53*j)|C()~U4SF!?=$L?4TEgP<YfVe61_)|)V?TZ}N
zq`dJ*nw+0MJBh;k3>$aTf2dUN2f@~wvK#Dna47fo7Q$l?hH|%Xo!Qxm{amZ2yi0^8
zG*62cI*Y}@y8l{?F%o}9rvrXA!!F}TW*^9Hz<%2P@%E<ZCt^Ij3e#a4v{u}B98!|w
zQ6VXt0F3E?=`8vsGk;G%9z!cV_1ylu7d&0ZA>yt>-h%kb3nIt`za$W4oTZOHKX0OY
z6U{0vDbXb%-re3o^Z1)`S6E(NUP?(oj<0V-MUZcWw#&1jg+VUn7L9L^M%(H*qu9a3
zfPUY=x9#oiPyDJ!G;+nYro#y~a1_-I4bvC5uE#^-UTnLBw0Nr8j>@)+Zb_OTKmGg1
z+oRzHAPL>7j{)^;8WcwuOL#Lb-lO0)d7xb<qxY+&Y5o?h4q-}1$s^zqt5K&>cZoZi
z#oo@Lq{LC7D@?!J`?$(^Y^5q{2akc2%;gHAaZ+Vf=o+~hsKDf`=Q9bE$VD?mFys<E
zwYoRB(%IqV;4d1d<G}{s*=W35Jb2##gXM26U><oVGKn!_Pzl0U-C}LXg&2v)s)#Nj
z7Xa-ajt5@Cnq#g#3ize#4l^8Zc>erzRM8MM`%7mgn=s6_u#wkdDtF#4zRef2F>LQ5
z{O}Jt9)ak(jl#Sd{;maZRexUmUmNfKN0vPV*^>(RoDc!3FUg1}gmUC*x~nA=2Y64|
zhO`@PR<xn8zKHB0Jr))=jLtA3L-QK@L_>`upTLsU;8m4$ekol10vTysh0e)KMmhQ0
z?(V2}5r%@<sR|PABdO<?7JW`IROrvv7!Zv_Ai?d`@~x+*>)Q*=>n8b#C#Z7xX<}k6
zLq-Ox3@?>38@v{nGS4p|x=^6or4mdVkwQd7w1SFyAeEh@Ae<F^V)g6{t?TjuUZDm{
zW&^^@1=*CwrC{3qAe?d?V{LV7CerL7ioFC)oB~glmmFpq6U~+6^GgTsVF~$aBiac5
zvtnfg0=FgIjwn1Jr>3GpdvDPqHa7My!k!$G)2B}XTCm447RBn{l-a<~1D_4g2|vI?
z$TR>ATH`~}Idu<ag1}3OmSf+C%9q5?&{i>!izzFB#hg4tF6M&|`^zfig}`SKh~*#-
zz>xm)qCj%7{quSPb?Sfr=p_m_<=;O`fUx|(e|&lSZ-)(m`16eZ`S-|o;HUx#SZr)<
z<-4T8KXdc&;Qad$e(Fw)#I}!h=|KLjSb+3l6q3<Y6u7|DhdZLB>0oCE6=D@Yg8cUb
zYq4)qpzYlq&7v#;YImi;gu80v;c<?q?S^!8|86scOovvH3iv?qLnm`V<dCalUc2_e
zud39r+w}Sy$OwI)sgFyiW(Spkj06vuBi%WGS)v9{SVT#Q?cvr8Aqh$TCQMk{gSO0V
z#ie<DtI0~8p-e{T5LMYMbS(Gl0oI6sW!G||eB+BZ#?PNW!BF;titEjrL4Ztv=n@%M
zutLI_u|5yw1@#6G_vg*t>XuP;25aHVnN-x~!`X^Qn>?2;UDCILx>|!9N4o!=@EYJw
z0;fKlD*8f8YZ_`@5dY>N_`@_br|Rm?Ca3C%;{H5)KIF5fBPVC%;*!szUS*JB__G(q
z&d?A;co<lTP)mhwB(!_#JTG|tfKr=)2^4uCQp(eAusrz?we#u~AnrbKD{n?K8Dw8>
z4*o6n@bRn-WX{0VroRU<G_Akk!73l*V?LOK)0v+m;^N}gRV|@8blU7UCmumBDJr_s
zmo(>vf(kgWN1{lznECcm_v3|F$Zy3=CyNbe$1K#;qU8vTCMLqT6N1U4BcHtLjh}+D
z99;VWD2sTU+1EcB4T~!@x7jGWLr$e#YWzAQV-!khP*v_p;447zlSea~Y;N`g(H`%E
zRnXu1cquWToukUhg%#amobxH!!R`W8i}jFpV!ezfN~hu}oa{^yTq6FQk0d-cAbO*^
zy}xfhQ=jtq#SraE$@`$7h!`lF0ZkZ4M5R2|u5(emJq=lg7-9;3Yh$CARl^wt%$ZTg
z3F@s5nT$_C3U4q`p0~OS4uoF&qpZB4Ul_DR=9ZR730+xud8L?)52&j3(XJN^%XR@q
zXXo%RoJ{Po*4T9n&|bb?c}EN+lO0#7QTV;1D~y$8K6#$(%cAkeg?yuaAmEYj^Nu;9
z;~tK4YhriS|9*TQdtfa$H$S%*c=M8tZFH9wWLDq#_+XLpK07n%PxcNC4ZkX;kQeAe
zes{$9d<<Y|LN$P?H8(P%e6S0<)3Cc5g5%b)s%(Zyv@2J%YVYOM;S&>+lPe}{gQx|R
zg@GF39c-?p#YGx~j31ml@hvtA3NaL!f>Z)AgHW2R3koo(5`S*%TjXtZ#3ki7lh>R2
zr4j+D=c8}Vo?M>izmo*7h6Uquo8LWy!(?!{t_~?P5VTd>j`qBH^Co+=qQbFHGb1sv
z4|GUZ?@U+Ow!v}H&k=a*Gx@454#Ea>MCjb=Dm>%&(+n>uQklfULjALPJK%TcB7e7m
z3~cF0)PRIHDL`EO>Nfw@c$s{iiItVMiV77*QPC^tk=fYWD_#{~GZ|=34}M+^HUX%$
z$7?F|#W4L!09(bPNWusZb1Et-&XWRxzG5OgJoN=!@)9X+Is?!!(rbO}R|}ZMTts7o
zv+F52c?&I~%SS;pEAm9+mfs0RBq5mks(rAS2-}xCWQnw(4f1nqYwO34`<(zSy^e_)
z_F}ZB2PXauV9NkEfs&Y!^T&XI1n%SNa*GKNF;o3wEJ^-0^C=UPoBP=#g7AIk?H>=y
z%RR}5+uNzZI0n0SXjZQ!u)nHx+~T#7;n0O+3a8U;SKkT8h}N|d8aN9#px(kQ&UlsC
z3%#nwH7z59=I<hNMZv{jBCYz#s5W@s!XE5Cc)oRu(K|Q!et+xby9oXCsnBM@9|})_
z_Za1h=a!e3p;bto_LPf3{ZORA;|z9m3@H9uPK`six9UsX#$=VCjp<lS^7r+r8cH@c
zWz1|cGBPl7n{`L^VA}u&@S?^8g4dj!iC@=8tJ!M+v1U10$q0o{|B~+Z_OU{puTY0w
zxIsR_>w1{GIStxY{p}!*AcFFeHT91Jm4v%$i8NXR4M+$28vFzX?(b~+M}Sw}ZaN*`
z&CEouT|yHY^ydo^&Oo98fohtgA1Ul}pz5?YG766wkD@1FG1WIS%faFaZ&W)19z{Rf
zC6Be)*$4e4=JiIsmSq|b*VDu=tgWqOmi8l`E@5m?fVB-F^-F^MxYS!Q*4pWpUkK&b
zsi~=j%K!nq`>%5<bQ|HmS{lu3wlM$O?E9O`Z52}vr(loCkHb<cp&|?jz+i0U@`?{1
zKA?BzR8k~ao@mfPf-?5t-!Evqt$HDJjh3uw2YT37u!tsMQ$oKyN4bDrWjp5II0^A2
z*oTlm09pha@BURwL?Gsh761JX#1oYNQ@;y6!@mo8^j}8QKQ4VF7Yde5O-<G0aBCq`
zDlVgQKD&v5vA4ZVRRYDu3245-_IsRjd~!l_(mzFqNXb+^+t{z@>yt@yFzk)jJdHzO
z%44n;IFv!6dbBnwon4~KtpItcOwbE-M5C$w#<)Ecm7wdEW2plU9F75!%BK_R^7pu%
ztfTV4F_FiZLxl^J*WnCJ0oI_Cp<(^U51E4^JI4vA^Mk#mMVKbF9w;lRfX9GNE?`_9
zDgNpgAyqVe{&BaJ&<gt6!YD5jqldK_O$Jf{I)kibK@AUpd$92fb#MGx(Vsxbv^$n#
z55O*F<E17rA8;3y#bn?SJ9{NK#EY{n&$d89HmhlF(BI&xAZ9l1BX*ojLKy0~WMz*!
z&wAr^t-cKzADV#_+9$O7bhC!sE1t=~U$+wYV8?m^>W`DC#S(imk*oT2Ol+Eep}PV)
z-7r1u0__-)K!UU(f?@oFmfOgH@-8we;{-N0Q8SPJWT70TylT*V2qOR-#29GM14aX?
zI6!o2TviA&hDc-$xMQ%=j&p%*;bZd$P(?moh&Vl1b6g#w7R^t4?$QtKBXI?VQ1e~r
z(<*aC5<KBN7U8lOXI}ZKRQ_gC@ons=-3K|(z1`i^a|l)}n%`raw!gc6C!AiBfS9<>
zusa%B#b%?mvp$5Z=HKtL?9T=9)vx8(KtY|dOoMgQ(zTmq6xyhy#XaB~S)tKfCZo%g
zwW3*V_qhf#dyn&DqmA54yVpm4AMd4YfBQ@p#CKj97#MhI=*8EphTRt>#l@-9?Zv_=
zW3|pD3i)8JGmn&1JQp-orgfmFd=3Q%zWqKyInU7o?SiQ!Hybz5@`DtQ21juT!i@F@
zcBq>jS`Rm&>kklHjasKyW5ou$@%adsl1gM8j}0fJPzp5PLuTM$YeRGf`y!PucSzyc
zvp4%MVeim%o}Zs%;6DBotXg6S0ZIg^$FHP)J$vQwXDcI%^Yh=(;b=m%8CsbQ%y!TV
zhTRxGZ52p)8DY9!Hmb$tyqjwGigq0}r%qc{XXj^&zw;B_GmC*#QFHU$$NO6|+SwV8
zbRjI|ar?Cmmy|ChLpvL)Fi$QX{^CYlLc#?UJV5a$b3)8rx#8r#-yQ&4C{@dIk-{J_
z69HgOi4LH`g~|XdY!>i2^B3n^7uBGa4Vyf3qT@tt#qAQ*eAmf>xF0r!|8rwwSS^Bk
z1M6Y;z~Ra!2iFKBD`E==AdhVifHLUC2k)yE>s|i{BA7|_+5wDut$+~A_H#I1eVjlq
zp2!XR-Ttft>%q+>Xm_|R#W~IkE<oq_8)YAQB3nQXc)L4Aka~=~*qy<lReG^YORNU^
znczb@-pI*kNGEJgR+Y$cey3q#+U2`A4th+=Zk-4i6;PkJ0E1Ts<UP&M3od;%*9y)^
zUi^^@*k{h+;>W}v04qcT5fE?Tcz@VTaW38Hp@%)jnkL=a7PO-ui5>3l1~<MSnF^8S
zrS_KQ-f4yion|cjF$`uDLV==U(k9@Yn4C9~&zhnB*E8zCuG0Rn{5BF-2|1efECXj~
zf6=Lzhvt=%Qgj1$9q<Chw+IMmjPh~IO$LP@uG~pG*<T5XjLbx^4D+uRC`_0Y)E&0q
zX@{ai{R{1SD9F8r#Kz_-Xn8KA2L^UqR7@!WNP1HrE(6ko5H?-aa5TS2pyIF(N>-19
z{ujiV3xGqR!Fpiw3qVH;`jBy%(|)eFbni>?DjfRf$U_fay9TsQ&pvW(ZXX>fi=mRK
z=1U?r*479~Nee=?R7|#iG{FHYSK~GAOZ@cdQ+7qzzH?V3BlKadhO@)WY2!@MGH))N
zHZG2x=DDApfu6`b8L70iblN`G!D@y80BCNYqYr$v48KaB6#Uq3WkBc|eVNQ93ekGV
zOk@px<#s%O?}%)4L!TIKiMp#iZ=xLDJpZ^^Iz*^P32wXX%l#>A=HC;AmC<D|FjLP#
zjp7hG58)M^;Pz(Zz_O)fD=B#jfw5tA$CXSH$@^OiKt75R*q{UA3_z;WULGtE!SOt5
zwH8!x?30QGk?6CmjQDW?lR=;If&Fn;)Km1A_r<edj}0OLm$b}K!(7-ZXfzWoV1N2l
zKI=2MrL4g(9a7-u2L}d*V2AxK0TOI~O!7;}>Rw#j6gY&D0&UVecffv-qGeK6yT43h
z)?xfQZMCsxwYS(!?nUzCWh2zLhY7N!nqrm2G?!qB0Uthu+Ni6mPuW$v$vs|!A}~m1
znu$Yo`_aU}^ich^Wy{l(wF2?H2&xU(5^kGSOJE_>y0cybZvH^|8)ez*OMPe5u-_+P
z%388C*$p_Bw9Y$#HKepE+vU7PNJ!gMv{|>1Q&L`AEci_dOuEBbUWHif859mZ_PW{R
zQg9miab=-Kk&Yy6S26|@05<RxmX<SJT2TQh=mqpK!N}vaShG!93;v_Q89Gp~25E8a
z!HD{*CWM*>^%Lr?0FDCo4>0LD`G){<dwT2kf%wGLaD%<|GlHCRu{g+ZLgpLpP)Nx5
zvUXAmk2m!|oi3QH^9#iPzBlk6a{MpK-a0PIz3UqtL|`i-TNDr!5$Q$+kq(vaZjkN{
zX-q^=V5D0K>FyR#q#L9K$&qsCKI`(n_j8_e&i%aSef{iz_D39MuDP!DTkBgZT7^;^
z<bR4D-03QmtU#UQ0_GUc>!2ZPs(t*-pA@tU7b9S|aM(jz82iQ~&kn}8jZDKSs;gpR
zSIbIGt6%S<-SmqE<KU^Stqo^;C1^>ZE**e&Bhs^n-7pbR7J7PsG{`J4tS56$b&fAx
z;w|Mi2+#dCJ`=#92e-i{(pV47+<JjBvZLg+7ksku0}(9EIKZ<WdE+M>c?G8mI+2tj
zkQ!3Zz@gtIdBbyVFiTaX-gQ}Jw8~T(niv=(U~iJfV)&pNoc}P`f2-^NT@Nkqi$SCm
zU}1`zeDd=xhKn`jhV&;*l3U0%N<Xo#`~CGA$i=9kPO-_JY!9j`O4qYFsX*&8-%Ph%
zvkwxg^cDl8Loh3Yx=aU%!;zoqIKl=h$g$L))rHDglAuD`8i|3q&dT#c*aS=I6&KNF
zt=!5JSQ9(}cLt#H(LR2#Gt8w&Xg36^1%MY&rz^zK0v)Z$xusj__;}yDY)IRk2OfR1
zj;OYrhopf|<|8#V@^sP-nw8Kt`}eE9PG_9ytb$Hi?#(3tuI$V^V=hrsH+ZZYOp05r
zo$fCt%g5gva$$t+Q(@E40l}pY?=G~>iIPp8*%^0;wr_?nj&&dVFZQnto*hmqP3_I}
zXoCX`sQC96;-RmHJV!(LPS4l`eIQM#Zxea+g^dC(69B1CzPusjtlek=Fn~@U!YAVe
zJo3|;WtOktkO;OlLBR*2Q(@n6Db6N8JX5xvzJjGB8B}xxXV3b8l!4@pbjl8#f&iiv
zz4-}_L}~Okl$LhFmp%)0i#Iv(&KuDU>-eYZ2!W6VJIqWfY2O~7;d8(msmUxK$eP<g
zI#%!N4No;hDk;x!Q;lIJGL=)|{`8pgl&nKLBDYsMMBvj=Gn0~$wKGb4OgII4sXtCJ
z?<_|ySvJS357MkMiB+9UX<2GYN@0<a>KP!7<NzNg=1~GGZC4hE&CY>2ptZYOfnT$~
z`p$dKAa764Hs-96hGFdPt|B0$2Ty-c<6o@U+TK=_kx`OslhEA`(ZI8*YL2rz*}bcK
ztZ|Q&W7t(b-hVCEIkDZIqV$>k{4bx)Q4eB~C-KG?guID`{cH`(a@^MX7rz%Bzwr#S
zw}zW{U(<vgR)Z|3l7Z16eR?iZ(+Jd6r}(*w(HwQ`IVbn*C$z@+syA(yy3+yBx?aVc
zd{@0PZ%zZVEw%j^MxPtOmFLYn1b-E9Z^KGe)`W$RKF4`QFwxV|(M7B)sXh4%=s!=^
zk%j|YH_`uXPR>rs#6b14%A}pa{zaazV;?T{$v#teada%LWxoIQ4`^3RZsGA?7+ubk
z`$DJohYzG7!hb=cBB4zIhis#72YbnUmU3sn)`Wfaa@4qejXtGM^-JehZ=XLWMP-Wg
z3*_DMC4+X@`XD#LpqPz;;nfxe7Xdu^LvN#C)|`TSn&>K*Xn!VBGN3a9?Ms2J?(<nj
z>E1aL#(s-NB{ZSty*B6A1Kn#XLaf)jRc0Vp<qoo@OZ2UF+m-A6PYz~-drHY4^QwW5
zx+5wNmZ+u2#6pRH5PrkDxKR$am2Wf6=K-=-2EJdBhK9z_cRRA7!5_5I!JPH?{ZD-U
zpo$?aUJC*B^HHO^<@Q1E-k|4U9C3#^9S9K+*2_x0b{H!i#m@V8p%;Gq;CkFtrUL$#
zVvwn|w7h_(X?tZ<m6-y^H8~<JJ)MQ#&}S1=xFE$hlIu)|CE_-c1Y0ml>DO?<o?95t
zsRYV%qJJ#GAf}~t2pyHpy&UM8+CD(!Se22~dj@$>AHnjr=%l1_m=nHzd)=@*Ai48%
zdD-)~@m3UjJZnva<lzn#D931b;aw&oFzr>Cq`L{z{|vZXI34lNQt#yF=kK`FdwO+5
zu|w&Hesmc|WhU6(0O?vV9=n$Td;0L<!(5$X3#TG;PzI|wL%uHDgaFZ={BA{eM4Jo_
z{R?EQhrR*`Mo@j~u}2J6N`@xEoTXD{9SNpAfcogWHDn&xk&|n#(p;ya8lr7)+FHH~
zdVRRQwZMb`-YD&yxAqCJ8xUn^*ZX9xSYYRV*|Nl?X{}igWe-6u;nb`A0kF%@pQ-;I
zYy;*ClP>k@pfADB>pjpx75mJ$M>aN!PI^Ow<Bb`V)@EX3isAX?CH+Fyf;-s7!$WhC
z=RMxO?~le4@FsUW`}9c@-ed$iCvS8MWCoMfJjDc66xX~F*SO_Swj1eXk0)MUz|>I*
zdC`GImyb_-xU;<-eZ2K+#Gwt{(6sjA1?ldjhd+EF;GAo>ohrAh864zxJ9A&UNWgWe
z(j?G{Bk7-6-mTF~LevKD>{;0AsO+uU6<$Vi`SRe)%F6ruc^9QQIB(xp)(^AQ(Qh3e
zAMfj<;pf+3=VW3E6N;9u=vaS9vH{pJGGJuL$7gB&LLUP)4op800D^w_7p^kVxV=n`
zhhc~EvP)Z8gy2We;%MGi`Ujowd{6o=ASz5Fb$>BKV)xa@qeG4K(i|&tU@OctL4h*n
zW;)u}SA;oc)7sF5mSVirO2Ddr?!}82(9mYb12;@Yep>bmIzoVFqDOlN2JWUrwDgWO
z_4Z}}1IPOB&uDZmmn-01Xec}jSv$`D@^ReE92^?f?6+@=ompyZY=rqDlfKwzPO9xC
z4m8kpwSs_C58?7y4@%WUwscv@R8>|^crH#N(l+SShPso4a=Q0uR#sQtT<p~0h6d1m
zvFG%W?j3l*KwS5aKM7^T%;tRlBFyg&R3twzQ{HfwBFF@cX8ltz`FMGGsn;~m&0Udx
zOHUj1cU7?)AU)7y@));B0Zbbdi5Ooo7|Kh^BrdIAzk&)3`l9Kfp*(=eKoNvtfG(nT
zG3k)*Q+ZKQ`1Hk#J5aNVlcDv5g~4Ata^_mb%Iyvtaf!hR6vdZd+65lao?)l0rSN-p
zW0}!Hf6|%Y8f{vH)27r!^iP3q^Qo7Z$Pi5T8u@yCu=g6y`i|nca%c{6yaGYB1Owgf
zl=n0k+jFiO*ZLh-JN?YB0`U>xnIxCrM{yj}LZjRcCQ#VoFwt-t04)v-J8N@o8vy~0
z{gV<huYH<{c&)f8+Y&w2CbHfo8C2M>elPlIUu9OFnCL4eb^@u4Ao+14hG&`X^8t8m
zT?y$|hApqOrO-D3NBrkc<BGNcs?O+h0cliE?B+{%KBx^a=VOW=euXPAKf?SEFA3Y5
zq~B9rzn-SlWNhcToPSH?a7A_1I!EK!3VfeSOJLN_@!o=jhqlnO10>uwgl3x1X^vI9
z1;@w7KO7nx%`_7MXso!XNVy}@85U@`^@w>lCBwSgYP}PKf4>_pUNSyB$sw4God)E2
zd96rhXJ-1KxVo=4m2Qe@=B1>Frnd5&rx)gUFKn}%(Nq1)!qhZkx+Fp^Mi`fi_&~qt
zPw_huXFP*qF?vZ(Bj|S&^RVY<Yp92t8*Hu`t+tZ|Q1c&bE>l<Iswg=b8Nep$epgTn
z;;Bsc&ResKaQ3vd0r>_{=8gX^lqpUeGKO#DtZ^TY097KfnL&2v&VZoMHRk__)~bal
zPy|#zf=NLAc22prwamu?hk!GUwo-pE@HoK0ClCxg-Tyf6T1yp5i3hNbg=~&-C$fI?
z&i_AFa#)0)2PKLkYAoidy*C`$p?vY;yRD~By%>j-SW?xbk9mO$HGhT>jg*6itYVcH
z8qt@4?tB>(BAD7|+0;~haLDWK?5vC$q{(ts*-kqn!xPb-c@?P1L0SY6x7LO+X1l`x
z2etG7uFM<0LT0MK`B}``>gq_X=QTz~Mm$mdwvLXDPC4)Z_$auW6B&^FH<EHh?JA@(
z93TT=Fx^{+{XR>}oilD-Uo*;u41v%xM6ls(Uxd(#uKp{<&~u&?57ikw8e)-8MLGM2
zu8aykAWX^F+dD7%pyfLF;QsXoVIPgcul}(xr-*&He6~>>J{K2jX%_PLDN##WI9#+q
zR<d2R`?H;ah>YqMitH7NQWRH|5FtDRC_d(#Nx}KA;)06#Ux2B|Yobtp_)(1@8&Bka
z3h%p`qO@qd@lZxj|BrY(1j!PFqUo_~2_a$0f4gxYcbSrALV_OLLND*xCB}w(?K?*p
z-~WGJAKHu`C=}s9?IVFNUl+EPQ_r2#Ts}VYf3wQ6EU8cb+lBu(JN(N?`R>cxdD`sU
zR{gapH%0zu@+Y{MEmuHd{Zb)5TsGH@1^X%ZSd&7OeTR6RFM#Iue4>f|2Ma)}+}_rX
z1=fTVxkoN!H)Qg<vg0gq&0Oz=B6|L>zrJ;Ky?tF7mIMf1A%A~np|X-kZQU_YDy09A
z@Eorn{x?SBDxv3{fHAJ2zm_0!L=UDZkXBv2ZQP>oF*#Z9OTc{L+&SObAV!$tQc$Q1
zi)(9<NlDrNlQ5u>jy8qf<02s;@Uh1LYXBP!Y^xhUoO<=wFJE@C+FhH3fv~}K8O_GZ
zGYb;!pFghwT?7EoU=Wnpj&mKCBFAnI`=JI&ORmkVF3q*5hoVYusjIML2-~Rm<G4IH
z#$$^<*{-m^EprvcVvfGl3+K>%r`Z>2Ju+>K@0WodQ<AZm3!4Va5&gHu9m_9{@^LRZ
zlYD>q?oNt83r29`iRD=7a(=%3n;<xdh_2ty1i1dq%(Lgup*7M!JVs?mss=40H(G#l
z-xsFOC8$Pj_*AxCoktdT7~IZS!ZEmQ4*8NqXO^H@kWccN1dU^b{dind9Od7C--mV5
z+9ml2*Sb~|0(aOtAn)ILdNePL<Z73k922ZeH#9^Y;wUx5V377f^yO<!oD>~~b15L&
z9sBsG1J1;3UN~w#l4bMK`vQ7gVSICxg`M4Pv^X7F31?Wq#6v@KGOX+HYcOjQazdUz
zqf|^1^aQ~oAVBU;PWvF*1j#ed#5R-F@=i{DKt{sw1}nD9A2)lYy9T&}0!C0!5Dqu@
z^(nWt2|nf(z$`}cCpGhQ_?~S1?SC2&Or8p2)zlj{J1gU$furMdhQ%MIJd-73z&yPq
zT%@8(1kUAqhCI}v#qZy9;INUAlZ!|Ni;(JY)o%SEF*Sdw!?eMwUs`WZPXowpX=pw`
z%mR2>;5P(RBh#|S`V<6e7y$YX_iW_i1{{1c%?v&0um-h#=k&SF5X$cPf1eeNgK~H9
zTH#up!No-;9UNSISXu;<gg!t@fw@xQ6wi!MXnEXw5okQ1{2{1i@S#>DnB?I>hx4}s
z#7qzv03cpSXsC!|3f&A9pL0Z7CyW-*^MyUEd-_yNAzk&MG$m-7HeiXodd^9NkX(#o
zUPVPkgaALkm#62>y2#BtcT^P0;0pq0mj*GNx4WZb#7k(pKu4i;9PavkbX5D6Ei*Nb
zwHoxj7q8zhw4bC5YAC3&&%V<BfgT(6l4`sHA|o(stzg*%GSgWvs2g@!K+bY@Vir(j
zd9u;=aAU$F6RwILc%K)6uXyszEMK3Q*P=6q=5y&kS3@t>^lWKMjcoKuUqwO7t79w{
zOJ_b=mP6+hRk;DyW1xi8F3@S`f#ejFys^&bQidKEW`oLe9URPLrt{F6$!^t}b(mLC
zQ2G9bJ4t<n&t;)>Me?JmwgQY=fWtaE7Si=O!!9$8k1lR$<pl)}?-|URyI>-jlVncR
zHGxP3_|DOn!{VWxovd(hfOrir%eDzfDVhJ9QSp_m0_BYx2IeBbW4O7ygK;j2-}80a
zBDz4vFRw4c#{-Tp@6|D$;;@7SsE>0gDPPGsxR=CwZ{LmvFpTyzDxyK8I?O`dUgpDx
zWK&ex7t=oyr7IazC=_lCU4VwnT}$PR!mmz`6%^XkKY{fPasmZvOaX3m0AfCy5c<k{
z_hd|$D^1erJ}Gn_c$Xa=9l?D8bDo#?VP@*5L|2X^s6C%Jq%KTmyZt(^_;qsfIL?Lv
za!F=@X0evm(1?OLRZB}NRbmR}R<j*#10$o9w4t%A9NJsA=s9+O|5m@eQ(39C%Ey!r
zp+ESF$I+?gy_hr0C7xVN@91m(47Mf4O79ewE~dPaBN5GczZ1ng_?FNN?|H^rB#NJ%
zeR5hPMXm~huUcLbj>TjCGEO&bzo@%i{?R4*;1miXF~uD^28IR95G#-`2!yzHktfdD
zKoR<SM!CxJ!a`B1wA|{oYG!C`-%Ihs+XSUT|7y0!?9x)EK=kWs;QUgi*f@rd4kMJs
zd7m@<BLZW4_8WJJ;;y;I{ksKTt72_L^uDn5FrzwmN&d{Q!oothS!_7Xzk@K7S99e2
z^Oe25C(;hEQTYZH6+16T7fXM>u5n#<29|=9HLAlIF43E(P!R?}=7C2@1_MnNJ@`Oi
z(D)88X+k`9mz3OX^!xXSwlZ)w1Bk{H<RT{abmGFri-4NKJ*TNezfIi<o~O!<n@H^i
z72u_i>!Q2sBBK3^(8foF{x#3hmNK-ZRBWMr5fX&_g_qcM?-AhRD<lch3m!d$`|o=C
zgTQwXHv@)kmIjb5CFKs6SSWgX9|DOCB%jUZEHH`=4h|sff?S=)&97KrSpwMwbr%E|
z6BBy6(F(oc5fKqdNd{V4P&Vc;m@&Y?U`V$dQIukeRe9j-;yE~Wj<*Ha(`xrsP-#};
z66^r?B!lJ%{RmzHF}JIG{|=(j`a6}Nm%cfH^?C|R-{Vu2U^0CcDgr8%8PVl-sb>)U
zv<^iC6h6;En5d$H1%WyErj$nyuHDOxUaEQ&Oa`PHVDWwCUGRX#!!wfTF-8BhfUV>F
zo2jOzvGMOrU9ws9a3#M(G8mwauZXER7^5N+eOH#0Jwq^cmoAaF#N7S~BVLKuHp{9X
zs0&~eVh)`L(yP6vM+5*&kne)d?X6W7qDUL0SQtIqD@t)UAWBM`Ig#c=F{$f1Izi`*
z<#UGT-JP9kCVKG9uD&)O0tq`9;*Rh90>(&*iVLQXrI{H-8XqC&?}UKQ*o}>EpuAvX
z6NK7YjZIP+v!ic_qITO)4HZ@**T_3i^=nW54(&lxvtngUjqF@rpJi#PD}ZZYxweMy
zhp_rkS*FBlABMCxFaRc|{A?yZ)n*hB$T@m`MlK&ei%pCJxka?nDO(okR#7KibmTO-
z;&O5!DmG^Qi|6GN`MV%>3938#4lucGpFht$>z+SP&#Vz5b87*(r1R_jbyG$ZB+ve9
zvQ7`75N&PI%XZwcV4oc2%hs=o0t}be^jj|=P_kPf2`u&5SIO54#DDtv+g=46sTpZ$
zdR5MkbZ6)02B8mt=&yE03s6)?a~kHa+~tE}1S4|Cv)qKl#5`1{F6a}n%Qfy^MG&md
zQXg%838rq~4r!9-llk4=gswi;rnEh_o2)Jafn2P(+priOYOD3Cbz}8a&$F&WG!C)e
z@^OF3rrLdZGk+e%Z3KtVB>1!8BEnIV%^uOc3aCOHuLGFm>W#m=0SMg{1aM~eB9`_c
zG$QG?$*VMxVz#Ot_<BwzJ*L&2ase+u_*$@MRS%rU$t;Q+nudaN3{<p=MLL7b82$dp
zA~<*8|5>9X417RjSC^&w2?B81onf6Kl1ww8D8d{-Z~1L|7hW~$i9Q*?9djP=SRcWW
zJZ!)Kid=5dau6)YfIL7|<tJPv_oZI3(>ySi0A`Me>%l#+%m~V&xfyV`?u=SE08-9U
zjvg}b+cyh(bEWY}j#GV`ACPhJvR{MgAVp9IEbW2JBs6m*&hoK$9u+ZRS-4>WhZG<w
z*xoCS6+PKZKK<5eR59h1^XygNL5^0$C0dEI(K-ML(5+zZEW1263jzhF(Rn(&fFYyr
z%qNdXu3L41wn3`eANc>elWXqF{qtis1&M;5Sjgl6jtuThkdgO*X~qna{V?Z&gl(8W
zoVL(%U$`NtB?J2Y%E!(4+V?@)4X9>jK3J1N;mhQ?b!!%~1rS_bhv{5dt|PFJFb+?{
zwS?Jw^Z~I@+SL5o+DQX&AV3d70~*<!Mf<4*cKgx2K)bwt_b#dl0LZo~tDYS&gJ{(!
ztk<Maf_^>uo?RSp=DK2Q*<uQ&{5<&$)zAc_U4&U$9(%LQ6k;iW+>gu#MJ6IZ$ax7s
zI8X@P00crsI0QOFR$i@xH3tnQ@4nOH=~JuFTNDGp#WE1`PCfa_*>H5LfEao!jbDh(
zH|@aiUxy;G@Lr1h<$agTd6h)79IV9@nE2opl$DPjdGk?4Hj2%2IX$|xK)jlh(7Fww
z(+i}Wm!P$f8cQc@?>2j|YM<<dVfG9_hz+dq5cI2nK(|?aYvZ;VmU~+D@g$o*O2wab
zb4b$=;f}`Qv478%LO{dd16fo5rCu7VYu}o~3DWiRnk0z`jh(j17XlSHjOhQUJ^&h(
z^IHdo4^Yax=AB_Dg-O={n_Y#r(kvqhBGZ!BYu1Ie!QXW)ZT$e$9J0|`;ug!?`~m{&
z0Nj9MEW+CYj#2QLX+PQOlLWTdU3)c3*Zwyai#%9fXGmz;_~8c4*m6JwEr^Pwg6;EG
z#k3#mXa(Ivc(4v)Zkw3uZudgzhAUW{Ce{BIff(ycSH!%H5iToD;k;7%h=KPikdXaf
z@(PJ_cl^v=0tU#s08*TaS|Al#zJ6^NKRr1{bSKg+bk+Ze9`MV+<hBKk$viGimOT23
z;O>NrOr&}-lqX0z8#{(QH4shL{_F_Mped#;DmC<6=(rl#OqY;wT{=4LyvXmC%kWP^
zRdiD6H)W)x!rrhgZo*S%;L^oo)~)^Vu_q~u%e-}4?OOezy_@!~nHaP0=kT77bW`XD
z-v|+L3T&duNJ1whxf5fpf3B|PMRc!Ux_Xs~I-u>G)B(dhmU4b}_G2TPvOj5Xc0*)%
zk9S&=b*iJMIUTnmj0O*Omj@QR1=b^4u`4A#GQVbleo!6BT2XF(rlp5y5MPHc0<ch2
z>GPp1yn6<6XWj${r*|-ZZihTLGqGf%^bQuGr|oO{rIvm0cnm5B_CNAjDQbm77%0up
zAZe0m16d0Ik7>VHC%*yS)*h#F^~Mc9%wQJK1k&zoLR#lCU<RX|Z<Woei5%4JE(B>5
zW;^Z{Ep3I}_ztwe`k+^}myy)zDtq}*wjVE&!`0e4+f@g^N7ls0c$on2486-giZZjS
zD&Nh~)mn$;=;|PTZtLlZX3`K|2$%fiCro##9|RQ#z^ir?4~{}bZCiYRkas}bx<{d%
zr9B62j$s`WE3`qhp85Rqzu+-JCncS1G!u8&Je!bHP>51hks;7&pZZhCkO~xc&&~@p
z1kk7GcxZD*pZtRbhyWrv>`RJ)5Wu+bAgBrerm^sI5@MgxGRLQxL#0&RW&S+9_xtDk
z7n!VnsOB7(;@Pe<(|>pzI}os+a-ySjoEIX<h<*->tbIT#M$!(0<UTwpn(OH6KHvqj
z9uV)hlTMiD;CtGBqwGwuvGz7OL*w7(DCChFJYQAj>FnW=3=I+}x@N%P!V5V8j2&L?
z0hcdd)-APE9<3uehWHejz!EsGNJyl&Xtf<<-E=DK*{%9Ytp?zBPm8+G$0yCm$IdQa
zK3QZEsKZ1x2DoodN58JH$6CUeIvE5|gmGkE$*!9R37U-u#|L*ky$M7%1PU9z7ir3H
z-fEzPBGz%^E!HdUZEJ4Bu>`q602Q;O8yZC`zA}9b7DX{JF=1h03_rG!)1a1#5MJsO
zZhlZXFeG1)wq(7=GNj(t{t)&`FGp4rWF=X9(bJu(kRweV++Fa9>(=r8OE_}pFx&*v
z9`(F8LBIe)>qsDS1V4gytvyijO?St$+8>owRaOn>!V?qO!I{>VLzDu8ZXO3%slKVw
zCD&aNjlYX2NFSVTmzsnvYgK7;B%-q4IQotdEk(_oTG_zzHv%avQ`%FSEHATAO0rfJ
z3}?3Jn+qvXe{?ReMp@a<A6Sv<m;J2Jm*u*T!&ocjP$l;mX0|lJe!M!6F~A8Uw9F04
zYc(%)zamEiftv==xuC(PZ)BFWmO+1&ZTMi=lEw0~j9=Qj@qTnXCVHtOtP8dZ-|Q<n
z+uI*H<o+DTcWLKoWdHr<3*HT7Sq&`G4)mWXxQqhSh5(FCcePDDQeaKb-yF3_ek38$
z-ZWNb1IL#y2%X^kcne(o1ay1Vrfnq0Ice34*!Fd?L(#cNF>gvpQTXKbs(Nnz(XP7G
zo%{RjWd@iU_Xm@>Z8yNhP)3h-S$4_ByjEB(K09%~^V;^vEsO){-0C6RzEM4C>HM5v
z|MmWBvYkmF;)gEAgfx^g>f0?u2ju$a`XEX~IG_EYnHY)(w-d}w$#9TEJyuyQC%AY$
zEa_94NcHg|^arx;w{W(gJ34`~lvyGzBdJy$K94)UvEjI!A~UT*RY4C@*tFzjkWDHn
zaXr~Eayx&KnmQSAw;DDWFn7f#!C~gclkOVT2GY%-CRV`*%b$he=m&KeaQM1K#xKuY
z75}$pWH{pl_Q%?cKoex(^ZU^`$MhtKG?eWB2*+dQu60iQ;4IKVnlg1q*bbE{y2k8}
zGSFduYgHagRde4L)~*6|(^!0QklN|ek|lFAo~N{O2fcZJ*E@BHV~WtEX&WqcS!YVG
zN)mj5<-CuT1hpNE5Ac<!%itn1Qh$)gV6uQOQS+TwmT?i9B!c<vqo2Qc(##(<kW*u)
zvj32GSJjEeV-RRS{sr7t*CFQ#JQij1DvEWrwSy_z$0S40LS#P~EL2)RtUwvfkN(1G
z9ODKKUEClj^zw;2bVVS#Q?Jv}EQ68bhSw6!vVri)-cKk`(IHy13qThgt^1#XN05<~
zzCSf;OS`%T*3DzC(l1BLd@2Q=6uk}OBfCNE9wZ7xB;`%8Qmwy!{nxTV`+0cbZKSgu
zx2uqjLX?!&k}srB^%PVt(j3o0F#(YkBbr{n((yyn-3aGp+ztwvuOMd1L*b(p3g{jp
z(k`=OcF=lGEloF^Lc?XIjpb}hgE`2;#)eg0mjx+GX+H1~RJI3yZA-5z$jPZ?=c1v-
zrsRi&f9dyg`KN~srvrY{4IwbA?yOCMTy;I_wM<h1)O_i>*Rc^DxDhMT&+hVlJkU`#
z*X7%S@{R>92B;3-gEIm#tmM*u7=j~0=R_1k_>P|<KQJ&b0qw(G2ElLX+z;QY$=+}i
z6>S7km)~P8x8}pc7bI>_%-UsR4{+ko$ci5GY#!*oglBL+P4ZoQc=(4zTuG@-(J_2y
z85sZj=YZ4><bH&FMS2T*@D(v2{Kv5QzbyF}BT;s%HDciWRg8RhZtAx)COr`sUj%K+
z+E`f*+%OotrTKhlgCQINk}UawKHef$RZ$tl2?9A0$jg3%dv?%iAXI1v35cNU4Hw=Z
zp!T`RjOKUvDa%>61x4{2h44lrZm~H~Jzg!)eK6aO7SBVMNPPYNP39eW-bu9?Q>tu;
z0gyLl-p@nv+&cZ%RkEvlc#tETy$a{P!IK%heI}`o*V{h8!Z6T5*-h1I?_?R2DPpP4
zRl#Z9lfXwSwhCoFPfeSiUS7A@v`y2{w+y0FV73CCsQMFlKtkizs(*3pyUN@tfZhP&
zk#l60Gb=zkbzFbA_THKA<8>*4IF;x$HEcD_hmr&glwW#1h=V&o<dcF?K059@E85zs
zx5`0bIqBF;gwd;TR#h=S*GE@DDd27!OBf}SPzOhtwgsG%B$?70nT_H~{#~^v8e&tG
z0-%*?aGRd(iQ)%n`nv3mTzCAW_8UBGaid^53y^mD&Bcwn_v%<+7ZJPMvEv*>#4dVx
zcBKv0^;O2bH*8%`25jcB!8|&v)2*dh_98rntr;sq{QnERiwqT<#gN^?a{6`zIao6?
z%+1UqnL$EQT2?mXM*|)Tg@a~@!x;0+aD8s3op?=WIAW@7tYUEO^T0q!N=nMu`ga*a
zo$680L>Ami!^cQ~K&GqYL?Z((0SN!ca^7Yg9Up_#8EE2;Ts`f`h;|NAZ6ubYr`U7<
zoFg>qX|+ckQWOBSI-jXlZPAc0FaV$#+(sP{vPtw7IR**xARuC(&Vv(FP(WaOd^~=s
ziYE0$BQI*ZLNLn%N*O#M79fGtxpjM&y<*~y>yi?Pce1|BFM4XScn$`fZ14U!S$%Wc
z=U|`MLnO`R!xj11Q&v*F97WYGy9XnEYDEg8v+dW~yz(<j-bkEAcI0aflvghpp5A@u
zf8*8u_RXci#%xGEz5|(`cQbAqNEGzsvuL%xwlE53sj)=!J6U_0iQfXdk<)7(G>@z)
ztcP}x<;A|bX8+g4iy){kSvx;}*kiW0w+9l?c^DdwK;9*l{FIVOl~q0RWnrYcv@gj_
z_HJ%BsS^9~We!hu=44^kbWM&S@Tp7VOCDV4fF?>a+UE+lQDXpT?M$KCjBROalDb%{
z?`7g_s@fgojz~xd3Zr6(5#DJq5e_~BKS%-eK}O$K7h><2$vk}cLd^RrOgYH2H#q_~
zwFVBVSz3*~K=9zg=~*K-7)%rHTD%*qN1pErJryiiAOMck;*k)=EmR}&bu2cke)4-Z
zuVN~Du*m^LE16l4X|shHlEqO9Oq+6B?oapGZ&Epr65?v12$(lM%dJ#k`EXE4U&N^_
zxdnl^0wTGdsF+^9ehq)d3Kv5Pb_knCml5M)0Nw{e+(v%j1mS;>KmTtRV<*wHz@Hza
zOqIoJtOdK{w&;WBjd~k_$WJQ~EP2J?@&6R9`=1FyE#dly2)NqF(l?4@v=8S#@-N{J
z;=f1{zPfC3^y(hv%|A@?qyOlL(IHB8^SP=BKMcR#l8ddOC^9^DVR=;QKmK$aPq7h-
z2p@;r$gQ)2N;UOvs&)n~4}ISVujqgL`FmG*R=8tr41<Ml8oB+I^7P<qJnL3eBG8NB
zlqCInI7ayY(T63|yNr*y23L}BNc7qzO%6%8Px}e*F^OsqvO-kox2InK?|1GGH>~8J
zM<~sL3VsOu^BZls!`#A@#;MO@J&{lyExF?g3-eD--c~V?D7B{bOAoz2&xDZD#y5f2
z4E@9VY9B}9mvfhp1|z(*^(ZU2Rioa&pPyZcQVz@RX}_2LvrtbDu|&e;`*UtC4VB62
z>FF68YemkP)YH~os(e8Lysnr27;keL`WvIn!Ox%RaJDyqr!T_&osnn%U6o0p+B<i)
z&ZnsN??q9+ef5+?RKKJsYn7FKn>>>fF%u7^oXFq`Oorj#>%34<8n6vtctG|s>92V1
zNkv&{+kyOFL#%yoo?1_b<Nu4U1`93O=Z=oWiP+RPZI&#0XHgN&KulXV+v@0i<-hbc
zeE7B!038w%+5V!12w9RcoMy#NWNT&4Dxn#zkAGLD{M;zc;B_2sB@ymg|9C=|{Rb@u
zK^M=T2c%IIxq$|sac8GnQQ7S663V}tO4d%fc5#qARsQqLIyK0h!vO2PLQdY%1*rv)
zb^_T``cdN*>x1QXG45S?y1W?~8DJoni{rN2U8DN_yJ)OtP&|FBjE`0b2L7K;PDSSf
z_%)ulF@y+;JbIAO$q#@kKSoc=GWgrKyJT)<_V5N8L%s{#mrB)%8)l$5vBe3AD;hSk
zFs((kXQlF`fSv?Mw^R-bGj$izF@WeZ(&&K8D+enB0QFG&RZuA;!x8F?3@tJ)fFZlz
zj=oi8g!s#in8?X_rIX*IXVb0nv<OM`QBnEtGJb^p&G*v*^Y=2#w@(oyTFJsx_7)b4
zGc#GJfT9@RarT||^vdrYdE>68!iYV&@n-*vs8^-jpVF1{V)(?(P((rDlA<2JhE=<w
zeSMCcor}xnLGlKcr%1f2UHHTYEA0a%;YZzFb}@#rIK7Va3@zqn8F+ZSgf`Pc?CgAZ
zY1tWhgQXEEK>&7z>bhRS<b)8&PJMu9gZ1RSN*2KOY?{rXbg*V`C5~^d8&WR<i2xg;
zBlDGxeJGC)iQB(Pd3fx;e)9%6M0He5#jE>|OM;|R`LIn^VDRU35HXxa!AG~!`h)bI
z<P}1CC?l&7?Ka#)4|_5iwd_!37IUbB??uhk<TQg(5N&ybzf`d&5h1L}J$TsJd4z=I
zag;pRIHZRcU%bVpU>0NBn4Oq4ZXd1_Blj3lv@(efa_h00j-XCdB*|&uymfPOQjgxm
zI+qQI3h?n|%|oKu%a{JXpO0q0WbQrrRi%dt7|Z^-SAlIlb|Fr!hx!$OFQvM0s-CAR
z`PvgFrjGx7N?k4GTZ+2|`cw73u+|)1J&`Ku;5Gx^3LsI{P+B*NEApo0{=ovY;GIAO
z$cqV-^%qMVS8?&9Vzb~f-cTxmTzz3T%!{K4ZNt>QrF_FjG)Bji<}Yj{LgOw_As0R<
zM&4_j%fz(FrSZad@Tz*q?Jp=cBcCi_h|7*3aP4wHHHhi8QpYOjE#D%)26aJP^NQ#r
zD7#nB5&a>#3MpNGqpqHVpg#Op8i)ue!0Tc3Sy5d0ca5`sen_=9id<Sj6`lc#p{_3`
zja|9Jx4)J-J*!kob%-B%&D>}RuZcYGh39(t#MoU(mB{~E$_W%_t}~l{jGq#b3g2iO
z>k#-d{|YJ<Duq$fmMy0D7V<ugwwI`J3XMQKk<zR5=XafP<wikBLBOTnOymbpIS)OE
zMeX27$~@ckho1>ZS`t5#iReybjV361EUzN3pGod&hvF980mPaOlyXlz4?VrOot>OY
zJRFsfS2@ysEGDL)py4H9ts`R$ITL44Tq5vWLnMX$DwJ~{;)Tu^eB^%;K_Wze$Gf><
z35<IJ=uF<n(-YbJIj$N;1@2eguc`8WQf4*6LrcrEBU74XVk!SJIP!`X*H;Z(t{b3H
zag$?g;4z4>k?*TW_E#!dumic4LNb3Y@)k1n;4MgqWk2lEEO>ZGaMojKkQGXZv3RaA
zX$Zv`8<skl$s|y3@kLXWZF3nCa&d<v=B<}EQ#xm#65s_M9N;I2kSD!=pN_m(udet}
zWM@ceSTEVm#fwFn9L(E_CTVVL7jY_RxCQkK{q$b^U8q8|#NO$3BRknYEUhOz+yc@5
zq5>$x{#6Iq<!!!ramP$iNwXQH!ws=%wC_;L@Z>B}&i2ggY=5q2e2i?k+%9s>2V;=J
z0sp|th?OWfTtI2KmzuT@zY_^Ek9nE$!@Q{I_P;VJtfeW3`b(qm;Yi`ag(GFVsGr#L
z?O~zy{cG_V{odBCkj&GZsw{p4iX{+G<Vg?cP=1%7KAV^2ScHC-UBP=Mhia;$(yVbT
z26O8L2oL57O^iEdZlNs0I=A^>P(Cs-d8v7nqZ#E%^oY};0ajTfuM-e1g{vDk%Ew1`
z_2J)*l<{9}lU4IYU%&cHhqDEiH%Pl<t+nw8(m#(1HWH1oQCiC>DgKQ$Hd)D<>bFr0
zm5`SH4KimGings&YIB?DwK|41Am6UgveQUKb(!dSId}UT6y?pI1ietT!nQmi3#j^~
zN<SD<`n_fS-izU8x|j=bkA3;V&KNz4Tw_#f_@5)XM8cXdMU2Z2MMXm541F24#7=69
zEz9*(<;@I5X+uLpbhM_9j*hajvW(1|3>+Wn&!ez8dv^^c>5guOsAuzqofKS{#JcAX
z9*aFio`y!Lw5RM{ws<_ETo)TN<#-5O%|Nex-{h-YTMFxitQ<#Bm6vsZ85sQbkaq0=
zw3;yu$YX$nEcQP=$<~AoQk`EVfV(MW1AL$o^5<YS1T0lu$$NpHh&$v1hsk=wyGQSl
zZ{1QUyZX%I$?Iequg<0P8N~<&l$VvU!)}>e?M@(t{Bq{eVw^grqNv2!*x2ak1|Zo4
z1OyBXr$PS>nCWqkh-Q+Azd_Migy80`8behBuW|3*J!=#d1;zds@?^wdPc#K;=k^{J
zj?;XA8fft}x+B_(g%9tQ;7m?UO<|Qa_OW{^Zzx>c-0VO^Q=4mM_B-+-yg4l@q;9WL
zKnw`iW0a8fpk<J%+02OHA_Nz>K?(r6@zskLOgt)TY6)mG{CBGZ#vou7<N4hX9ZVVM
z&4qnI%L{&JKkzLIdAq}jo-+@D84#~XNMxs@rR6x=a;{1?weKt*4`_6-FlBNW*0cR8
zwI1?<xe;8GQu6Xuhil%%Hw6E_a%C`EJqPGihzy0P0LJkfuoc65cU8!FudrIz-~SY5
zQy%c1GBWON%sfYABI0fpB*7l5WAY@65Q_nJ+jc(KT9ON2MsZW!?xg=-?+4(IWZrNC
zk;x!0ZfhF>;uat;z=@*oe@p}}W%`^+@9AuHfABxaCHW-o&;bZA05}x{3xci(;ymAl
zgk;XXe&eQH`$Spln+T38q+kPd#FA{sWNArxbaZ1Rg!&Zha*>>;8_$Uiz;OBHZ}11d
zt|dE{uJEm6q+LW)KGu1%JWm&F@B;;gr{MI_Lhf&+yJx#mY=P%!Ye7}w9u0m<_R%`;
z=$2k=Diwjg2|VOzF>lySQd!BAt|@%|zT=Nb*4rc*Qrv=O?c6XFGJAM<L?`I<PXV@^
z#P6npUIJN=Ocmfgpm_z@r<xbyc&k7kt6Cit|Kba%j|eWVI1K0Rw*<YXX8`I-QbOYE
z>ls=fAD_X=?7;8UZea8U|1K>ezM5Q35qnO55>+@pE%IZ`hEZm}%Ebb_a;A@4ckCd4
z*7^Q+E=Yq*A(9rb-*;DUi?0be{s{0A9<OjvR8R;X7)VNc(E(JC-Q&kI@2JM-763gO
zR1S-z>I2Jyo{Ilm3669!9M9P)I_8tNZqK(3Sx=iE=d$ZomrCy1V_g8QYwKD}_ExCd
z2Z)sg-)lco6FB}4gMp8m0~@xm9rxsdkh3mFJ=p%yb1EkJw2NAtm+^Z+{D5v5?F}Zv
za56JX`+-A9>LI+RX+ZP95Wc@L^8jQ+Ad;9WGGR<Nl?cuUSit|NXbzU}AYy`AGZ#>E
zmwCh5;o@AjzN)jW=%akCq9XvyfWc6ck-VN$Q&v<KKKUvzutN-t0OL8D4yy~0iH^+#
z7KQSL-$YN(bX(gp-02_#>d-It^YN*j`{s-W2N_xpqJ~Y#IrNkWUL}k8=et_3T-D}d
zWmVmc01PfUCI&e6Vo>9?m6KQilTh%6mPJD*X%Vy$vZDSAAw1o|cKZ$$JU(Z?djE*i
znR3`EE-wBkn?=1s&%lt$3wk#C9^ctE#tPd>vP%@(9h{pWQOdW!mE2!<`kA2hUGjZ@
zn%TwVMZ8FU&ur7A<WHxY)Y?p&Z+=e#V7$G}8wwm5Y*aVzj-#iCCidVYklJ(;s`Z5D
zi2m4*ClFQhi`TaD3A1_6l<%0;f!U_#reEKh-F$M++*0+S|LXP#EG#>H{}SxG9m+@-
zl=8HHa6{PSMr-A@SPBxmM%%$JSFTrsMWzlSsovbKtd0ut?QU=1+1;%uD|;IfqSis5
zAP)r4i$_u5Rt65`?%mV#E@hW3)#R!2awFsf6KNhh85ks$_kyvCIq1Xl2|fL?=L8QP
z#8+3|x3PHfIyhLJoQ?)FrSAlJK)Wfj&Km&uLbQpOw|C&HS73lrcM>MqmFng=SCirD
zcK{$_TRem&l(H_lJY-FgPbR+py+D9A5QnnY?JpZX%}39ZF->Qrvk$+ehWc&w1r}+V
zto#3X`lW%B;(kg)?Uh<A#s*xJKR0`X0EqnU-y?Vk3!*yXcn|`2|7eqQ?s5TeC$a|f
zuDd^ft`2-KX$6%+ckJe)y`albg$xQE!+qMfn+SV6mM7*xmcaUrb8q<*_56@q-|QE-
z->N~Q|BCq9Nnb0q<U>6`96#BvDIM@<fnzK<*e0#!l(ZvS5mb6U<-6^y1>Y>3|D3=%
zDjgFQpIg4_J^h;~=p61+OiT=xJYGhgXKbtG<OByDPshl}W2JJ(M~nACI3&jrq;qp}
zyw6k1lw-)sT2mLDtlGf_Kx$tEdX#IW-PT~#9(Vwd9h#2@nexN-j)=RqV8Bq}3o18T
zG`o>fSNGigx^bCg>6z-~k~4#MO9+=B*5`)*Y|w~-uX<vz$#i|4fX8YQs8naa1j9r2
z1T)tLK6V2GCeUAkfj#;C`%Q2J$)MO9=06=xfiQ$IqydS^i2{)T2ua4Z?^=B8GK}08
zd;9!`-`?YMDdR6+w*Bhgo$i9tw~A5ES?D_42hZj~0tQY9$RgDY>X`4PjMIaAuuzcO
z7^jho;X;aH@-S;iCIuWLKnECByJmqk2DDe=ArRIS6NAo52T>=~LO4H|Ishglsh1iA
zVeU;{Ao6HzBpyA=9xa0RI@eJAV|CS}w{QM6=%k>ss195{7XhH)oLu&#(k+wGH0_cF
zP@#yN?3t*jd{nt3=Pe%V)@}<M-6LXRzE?UGmOs2<>*J%>+-5J8eC?jlz!c@nrUP5k
zbIqUO+R$bF?$j;;qU001?RdGV=gc!aYM;HC{7G+EmseuihBlGRNftQ<i?j6sTeaId
zNAeDY7S~|9#Gd1W5bK+Tca6s?dZcIFf6u8aZU~m;=@<Us-8LhGOJV8AEur&iAwE0^
zm&=CiE?!_=ojwu;<GOV7bKt`w5_+&R<U(@p8t9|o46ud69VTulE5L{3MBp=}2MP?q
z$p|d->U2ZT<fO?&r4tlB5>Yty7Z(?Im-_DV^7af5mxHL`Rf25W)-b3a!Q0dc1uQY)
zdh6R7iFY+1{8G0?hbf_X0$;wAw#-*JM?yjZ2r1Z!?|SNuG2f@NjB<lirjPjrZcr^D
zKM>-wP9f9>PMSzkSU-`<eHC;Q9Ld5X8!AymmSpd$EqE?_Xiecdxp=&v&SGX}_V@3Y
z+w2h$a6gJ+JKFn642L+xYIx_@*tY|vf?egEKH6<K&GK@nrv6k_6}h5aGj8agSP<by
zNXN>W<KIwUG37qKXY;jTbFBs*>CQPgxyTLl^{kNiJEG8`md|rz49(GEeT^|(0rftk
zF{+OD??=e7uqZo#{>j!BQ4@o2|6}6W2WU&_Sb8jkKZITI`0~aK^J5ll=8>$L5O6-1
z5pN$g=6iBf1(kp)-9;l;tID`@sR)9rq01Vr@#uMRZUp0h2VfJB*g~$!2B4KJHE$ti
z>~Zr!HgC}Du%*4Ge@onu;IRnU!$%YAtfyDoGKyx-$!Tl0o~Zntt33ki6*%bWwQH(C
zAu0fHMILml6cn+bt5Ywq{w~@H^(dCavzweVUm0cR$NlE(t8>xYty_bneC}JBwYdlt
z1$>Q~EC`EdfBrQ4+yfc0=O9ahX1{Rtm{>UM+umDV15M7>Y(;*bxs4fM`09`PWvy8t
zeSmcw`l|2a;}Cyxl*8E&kqmmA)yay}SJxaOhR~|$d3w#Y$PsHs#!q2kN}g3Yjy)J&
z@jot_S0AbD{vzrjSDKc)D*B6$Ix`6pD&DiKv9qw~lwlNuG{NUrmQ^Z)Hr#h|bBoLs
z*5CgJ3*e>`5i!)gK}EXV#cK#YqO8==GTdF^qYd0uegT=R4v@W5`)v5dPRcN`#oIJI
z@q-|*NjFetvx{JgO?d%kj#QE$qjS-2@S6m)Bb0^WVi}1C9rA8vb8~b1oBrY0qa$?A
zUzjy{73ckMf{(}6K0}gcF>mWBikM60@S{{erKh)jGUlw^GxiZbT2}pJU%wyKn*0R5
z-ag>c^y;kL+!fxP?TwqAEiBx@GN&BShk$-=hng$JqQ?M8fK1~a66<NdRw`;(F_FMo
z4=H0uN5OpXu-&zg1HBw3fwRGDW`A+M5)9rRj*gXT{Hc8(o(D20)+?abB3U&$WB6Ew
zgz}Dr=X<f<kVk<%<2~R0XIu<uFO|;n^JdJ$GqMHIJ&bi=ZBY7h;aqVOltogL_qG*s
z2f69j#xVWezRGtasq*hslasJ9sn1wjALxB(zwwt5i`)CTVSNMJvbL?d-HFX*i)08C
z&;%6@kfx`*{-^5i=Mh?Ple7MNt!FSBbUJHM@eUfTcN%urYB(FP?bX}Ayth{_QBY`)
z+Jp4MwRN?kZevzfz<mu(+~dCX{rBK|MX7x>y(|PAoXi5PwsY_cD|3H$++ndRo^c-G
zS3{G8%)1l7*|$_N?Ue&UzWLoMdk|FH4Er3leS#UO?zG+;3HD3*oRt$%VgK%dIZ=wt
zS7KvvadE(pw72=u@}PNB!okQ!-X(_U5=MG@Cby+z=KCSqw0~$Q&#Euh6~(u0FAIel
ztA5GDdZ>9^yf;L)<nb`xLF9C8hQL8J<b%cf=ho0wRqL+qZjPHbZz6%lD`X(FKnp-d
zd6f2aM+Yk?J3^_VSHzwz+(~{qIzA4P-S(MwpBM<3j7Uy4+`e!P6u`xiYvg|b*q@k*
z^q$Yh<D@2gTbtBtUK{V;q-x0XRIrX^qBDv!I(^miGSq5xM!hdw#mVdQKaQhH?@zqS
z**R=^>R^t;r+Vq*Qzu79?vuaZ)R%?3yuPJZy&x48kY1SZcz|RX^f+Zco{&fJ^4G6e
zVa@VD=zhSf8qL|$k+WrUT?ZZwq=hhA{zih6!k-a`8~2(b^IR%HqFYiz+(LlY+R$qP
z2O}3Lr1R#wNQ>X^wbs6O>50$_jD!ds^##;Iiv|wm&H4@FzP(?_jAL22^tU$m>|fkc
zfD>WDnWw#Y@TVW=BL5s!D8aBM6H^{2c8Vuj2R5x-b@q62p7Dfxe^Mc}o_Z~l^rxQ9
zy$opeY3Ev8ZJFkC0@EWKs%vhzl;X$>v~!7RHpK{qdaXvso?~6H$0d6Wm={mhA*&zq
z*8y)%{z9oCFxaD%eFWh^ne{54F~R|u=B~-B)j+SK_L!`9Vywuo6RpeCw`keYr+6=C
zrPaE$fn$yswvO+Z4Tzrl-X-Ej{`K>#6_+26t>Gt9ptghHRY^a3BCpyw+Z&E!6bY|t
zqd6jf73jDTBh?bIO=9@FfTYgcL#3P>+LOX${00GKv;h(i(r*`3+$VCVl4!n*1nD+@
z?8~}+vE-L!y!PKXgA{;&Mc%Hc_)3`=`t^qZ{5`mDxbaCx938e_DUb!c0SvEDPQqc_
zk?PMS@XC%}!#%!)ih?)9B_d&?ezm~U_(zgljaTAY1j7yFEm%{0_-RyJABZDxZ|{1D
zXaCj=DhHv&qtYNw2b6k4`3p-+Pg)Z_Kyf&p$nT*n_Z3!9a+g}|V}TPzypJN)NRo+6
z5EyS?3M6nnp3Nz!yX`bf2U(QY>?_;a+O+%PK_a@Mt)FzyR{~Tx#$G)471{Y7oCctt
z-wU@;NpjH!q4`kRh=NK;_M_k^--Df;6~)wSL_SWm)|dLp_&&4{`#Gay!xlCzR}>kL
z&n+4Z*Lb^clhz^l$n>aeWV-ryhVI~epUGGE0=jMQg;>~lU42`aMwpLT`gW|<fJOaQ
zKkIx)viC{4p}+3dK+on-@~QU%Uzy&Wc6xs{!_vLbwh?*eh9O9ltKY)rK&FV(@87Ee
zu0ELM(|e%5?9<gcyhuoP!a)f9Er<>Mp9fx0mn*<u%-Wt)J*_$}7a$s&`x0#sE9{%W
z7DDCGby-o^E_Xs>r^^1=e1E`atB>&-ubuB&6*(AHS@cwQD=Rwd)#I_#;5g=;axF2g
z4C__e-~EBXWDHVI5~x2)1T-p>$7bylN|bbk6r!fA?vFCP%KFS8G4V;*CT{kEjdgp3
z6=SpFbz#@SBM|59CJF4uza;ci$2^}yJ2Y&6ZF<?TOt!N;z7Bm22rP&#x@+s3ko2=U
zyYVQGDL>V^(F(=TrY7+(jwFwXDZf{kk5gJtPYLk|_l(7CezBPLIW~j-LdAx6(zU|`
z=06xk>?Vu(;M>UcJp@s~&qz%}|DD)V4c`giYFAcbO8^uLpRZY~)la?M)HX=?&*#_+
zbYcv+_vnY-b6>PKE*AyxtPA2MLJoTw-Z$e|?0L9FdJd5#y1NtJr(fmADLuVyIwarT
zprr>~3lvf0W@1#S{I+|q9qNz$4&MnS`<|FV0{<WnOt3Vpl~u<)dunH9BUwi>JN()7
zZ(H_;c}yP~jqgl0bQ<<%$m_12z%s%+rz0;_PMU%_HSa0hyI<Kh&l=rv1=2ti;`yy0
z{3t3^{uuYnoLq)tGM{<peeJ6rT~GKb%6{F;THNWEEtv9a)h8C-`c}OiAI*Nc8Tb2g
z={1l#*>xurc&v@>4vo0r9-YQ^8~4qM;9t0&mbBWM?88tKNiw<#LY#E{*4EbDyo%|`
zYP(N@T5a{w1zJN8*P8CSgSJTW^*esm<vao^@pNB5mNf4qbwMl4W&<1^c!d7ZZtd%7
z#Ud{t*g0V{d+663Q%Qb<SWS>%eow=mjDG%X<$DH0*u5jZUjv$0n~`b9pMliAIt#tU
zr-3*8wj!eqbxOP<(|S~#4+gWM4SedY2F$^Fg6W>``Q044>ApT%Ae4Ww3pM{_VSK&*
zbjE_&f97TMn*R?Pw`8nnlK)A1nGLV~c>OQ9x1p6%@0g#SV@&p|x7iiuOI|d5(l%9}
z9omSC`y7^>1yc#^=4;o?<kzef7482rNgmD{KUzN~HY3LFqTegaNYq!r;?3={@%F{*
zp@IjM)kyLer_NU3iX>vr927R0r;bp`S7;LnJv~~aShb(0jz7xT*x6BrCm!=MBW^rH
z0R6J~BgZ|X-%wH2J{M0H<{eU!aW-uEsHpUVi{*yT##G3btKI&IuXp-GGQZf}_iPYE
zA~kz7<xRaZS#mfNxE5OJcv8}{SZY0~qfuB=u?hGByxF&neV_YAdKC3{wzuonPYB8#
z#<BjVyRHCGNmBb~M1j|6D?QpUvJe{{NF5drF%&HR#xTi|hyfP6Qh^t|c#IvF=k3uL
zXeM0j0Uy7{o|X#w{k$4P>3c48T4{eT@s3`r^7Qglh~w5ahW#|VSuhCH?k@;{1yc$!
zD2g1f5RNWBAf5uKX!!JKH#t|Sd%CSpnoLhmf2?Bt{*!NEAd^0hHuQ`0{bh%-Z9x0^
z?e#Ify+$Ci>3<r#`DL-#PD(2CVUP2O@2(J+;}0Wd|E=&qoeC@3{ah8k$<5pq=>g$W
zj|pM#$uS<1*MNI{C{B#ne;|0UbonQv+}_qesG-;Is@tip){IqAt@E26Bs!x`^NKe|
zk0BXgZrwmh$#K1onA>_VvvXgTiOoM3G`34*?bNdi@%cUAg7M%uw}%<>7v5|19s8N>
z&snt(`$4={hoXlX!fSM;jo5>B1lH?0KWxCwj-9(43Wk7v(3?d$@8^o2%#f1XtW_O$
zw^DmQ`OzrmG2vOEQnh=s`}C-O^PTRr=OO$4-s6_n;WEn>_~<K)9evc59#gg85cx=V
zh>iiI8*C>Ehqf1}Z#y5B=N0?Fq1Bb(c|0=hv;RGn7&fN1-*vFD(HwoQ(ms@>FW@1U
zz^#2PLb1}_7*a-LWQw8QDn;=bJ}vAH+c}eYMb#0E)h=;aP5dC46MNRA%GgXFFu<<J
z>h^o~QI%rdukM;P?SodRw8uJ8FwjkuYH#Y=*Kf~98)kZ)lFa0373q;V7nk@SEt89g
zG_<s|=$cROzz09t8X#8T&~|Knmst8hwQOQi2%J7rCx@GgBITBSv%g!Dx3+&ny$;R3
zAJvlKoc&25skE#_y+=E~F&j;CdC^B1os)Dy<hFTdWw(AcFtK-?`rV-Ldajm5)5n8F
zGi<I8a_VgM69M6EIB1teH{O6F!mt5n(tAs*%Gnd7YcSPwxp!vH&7t{<ONvVtI`?(-
z8{q6E*jX0<fxPXCkjFI5OvcBG^U2(ki;xQDDBU?^TcHD5MBYiC4pl{=db3T2Do=1D
zLWzv>Z(<e57ra*OpSwfFA2F?jHV)Fuxv1`cXm|2#`h+Js_+Yoaqa#v8`(X>-WDURT
z${--!=YF<+{SxW(ePi%_Xjb&+h(*IBxwdx*R<e*SqUp{_<zPUu&suvtd=2~b#gSax
zlee}^FGu8KNnDm^;~i=lIv^9zj%4EDjZ{HC)+o+8^P{ud;qR!t<$;np@(yFtyR%EM
z*0A{FGj4j%RIGe_1warFjyt0Km1L^;%V0`|>gCxO@D%&|72ODy7{aoqk>rV7@=JG6
zm!aeAL{ogN$Pl7WUDxlSiqh@s&v-g42?H8Ar%p;;mCZ=^@_>a}4H6DBh!-?BR}p7b
zZbQD)!6}k6Px)5DxW1hKvT$a;UX@St_UVctb{H!CNlw8+W}8V@!r`H*DI@yHLFCtg
z)#fqT^325E2iW=ZxIk|(NsA244}4O%XEUY8T=yg;?JeXJ*|QQ$>O*u(+aa~jbrO<d
z&yEF=Q@wE5<gt|3#F*E)$$2>F;sClPXGoId)~jQ-U=4kA`tw!U`UYSf+4J=Nxeo}2
z*t9fdoQpwGNjC{bTN(O~w`fW0+MWZpsx$x@JA>1U$%0S5Ded=u)E)ru6SQGPnPluo
zt8mOy3z~j=2W#%~_47{Lpcs9xQ8ZlTVFxCSHktq1vlr{TA{$EJjGfo|nNQK+{N+x%
ztMO&f7@W(H45i4)=TtOr`$U+IQz}f%!pLaReBf66;9LqsiNc%%DUDvxDyO`<EIKkm
z`j>nxOZ;PF`PUa?=revmbkNlEYa4fA<0~xS%M}RW<>hT1`cn3h=hUsFa<9N*b=|1k
zR1^Jq8NV3M>qQA@4<RM$uX9A|)?%u;n~X=^eQl%KyQVC%Z`>+|gvkVSb?X$-um8aU
z>}K`8LdXe&fxz0sy`W$D@x|s{_-)jrb?SR*k)9_x>BkSg;YPe?W7=Ch9~de0^?ay}
zjZNy|RaT!`#Kp_TDqUg!Az>p$>;YY!`h`UdMrY=^o5!wJ;l?f~aVMsx3{Irk49iO~
z#~{9ygu*MpD6rVqdIN$&-|}09026a|p28nEvY$O7k#sB3oULG%c3i3ajh6IS?swbA
zqETaIt_rJLTdu1ISZ1l%-(y2)eTdyrIT@7=s{;e|^OJXQ&w70*`Fa<{je;>su5FLp
zFhBa&-#U)*QpT;|7I0e`)Yk2<QY8<fGNTb<muIG68q;GZ1_Ew1AM8#8Ky}zjYaO09
zce9+V?gBqPq!NCbx^U4RRw_N=W01IAj&4<-Y*S+ZA1S~?zP`Rg@lZ(y73^rNOq`vu
zlGODgCI=CC4aZ&<k*cJcInNdwWXT~Ma?*|E@Iiurx5mBojom>CXJatDs%_C;1G96n
z;<O(|-qRI(wWEMxe+Ag1_4-BO$tGsijJo|{0eqt4VYI&vwngSe-qaQri%~oH?!CQ6
zb@eK@?^wj{>FyeuzJdJ86}26lfcEC*pWlm83u>{mJU=C%q$nh7+{rjG-9tPdekY@h
zn4XGhA0dnGMa%)(5(>3Uld<$iNWDaDPK@3~YsgyX>ie%%80HK(EjgV2UsSzyKviqh
z^}8`Zkx&d$FaS|XT0%;tOFAT^8|e;3MCoqWAl==mh;(;@ba%t%&VAnZyZ5{2&%<`d
zTF-i7&M|%iRT~{m43Gy<G&__gf%e8QV>P8%tLOd=|LI#-JyaoC;%eIL>mi$th04;+
zdP{j--D<m!a7Mr1bt~tfIb?dPVlEGKvY^5d6XDQXEzxTi|5@^tV8?#i8tojXY8^Dl
z*jiO^Z_9H!T&McD482(plxmS^{<zE|=9?{SMw-rV(5D}r-(oZyt!cgYMwr7~nbCmR
zdI%Q?T7Yu^i&pIZwBqkhs0q34t`I^+5Z!SFx7^S8wz+1co8w_6;k-)tp2cWZIM-Q0
z&{Dcm{*=#bNq2p2t{H#|>Mjnw$zMCK<jIUuJYi(C-%InqJnFEPWr#jt>E;0kaQdaC
zd%{saEX*#K7x?I6BuoJKczAiAO4E@}+ORg~*BuH0d}yKnORRaq1)P6i^I@PM(U#=n
z;|GqSP(VYP&lV;NgT@_pkW>^Dnm`s?N^susBGio7tr$@jO<nlhVg(CPek^mUk9)~(
zhs9Kp&e%RNq_X`=4H3J<1{l}MWOaU6J0G9QQhR=#<4&s5fF!t1$BXo`GyBu>X&$0-
z!n%fvR=dMNS#2Cj{n(1`<c-C2p)h%(Y^Ud`QhbQ}eW;B(%>42$Dq^M@Qyi|`DC6F&
zI@5sJroo{jb6k*PRQLO%9uGJ+>%Y}ex$CBKQ?m5>si{08wESn5w(9Mtlb|J|PzVX3
z?k;DYN?SE&sJaX9%e`qh9L){J11Qa2^q6QU?_&3UHq}Dh(Vn!J?P53b=xocE_YCrf
zZT|fc1%jITiDeFy8UYwM4vkX~r9J-$_6CCl$HjV|n_s<=4m(~;;4Dk1J;SRzn>s_f
zoF@rwQL76G{CbMd_sD2P-F}+Icz+~P(@7w<9I(6Dz`~lUGyy0yw~MRmw8NZ2>3Ot4
z!mXQ`t#6-<EnPPJN+xgwW>Tfodja+Ei^p&iqUTdmQrl4zMYaZR0w@SVIB@r~3WNJu
z1GaFedn-d_`pfltg$h+jitr|{=^h_n^5xXbhwVIgzrY`Xj%$uIKDvaXj(%5-TmRxl
z)%zlszU_vKqp#45a%<Fg!~+$C<9VTQSl{gGZlD32h2|+{*DPwNdOzLAr(~l7K(L16
zYUbrS-zR1Av)MP^i;-PCZkrRM=?PBf5SFtwR;!8Ps^sL<bU|fSi9#aH*8|x*FhM6z
zq6yu%A&&6)h;KeRlI+7_CSE|E;0YJikFvLYP^0Qk_*9R&N{P-Z;cwI(yO~JJ{FLt<
zNrH7lobrHI2_iY$@J2#@zPqgK7g=f3lF~lI(te?{Y(-}ooXH>lUGArOnr?-#$yHHV
zIv&hbv=#7Lb2&RX`oH0cNZF@watf(iDNb`TtJ+-vEhVP<;~vmZ^!JN9U$1X-aBvVI
zQs3Yo8{5ObAtE8tL-Z=Kp|zEhaVy_)6uKVjg;t#d&+jsRI5r8;`jG%T9l*K`!~*4G
z+<u*y%}UwDB~DfjyjUO@8KZroXd`z2^6|VhT_6K3tvFNArjE;8r#)B(kWRZhZHf_m
z*<g-WU2%DIn!S!hR#$r`C+kGJQv#tCzEa4ywY}z|(o%>X5s{K&;3NM2X94m`H6wpw
zsi|?FL?VN3=U>*}p2VU;a-CNiZ+zX+(a~lwl9qV>kSrHgl;Yt^air&2Iql!=l_kE3
zgP9E{uXfDqJtULW*($j{<Kfepns-H#n>po66i%o-jZg>mW2Z|WqcjnnHw;<jf%fF*
zftkqBU#A{(+*wgp%`si}C1IsF<E5*j*fUxgocBPEFgv9KT;l2@*9SLucD|)`!z@ax
zm{+$|hxNrX)@HMBAv66Fcz9U={0+Hh(r*CF^7dPVUBlF_4+v@$gL!Gg(U<3g=l%&a
zOHRyw{RHry==N*NzInivjn<i|-Ct`*4)*M;WS%3DJkAT3!SjoYP~%kS=8K@L+4WO+
zb>9~D{Ru19D{emX_y#@ow+{qBK?y?dvuFe4bdg>tyQ`wK-##&@+j8wDuZ7w(OE@C>
z<bnRJgot|PU+VHM2@^jhMiS*}Z+n*CdN;G1y`-E@1t#j^?(?NtVe;yWfa={{E0`;t
z#?3gC3f+v2SI;h;r3+~w(3&R0a;|*Jt$TR*2wI<8ms^v1?I@YVa%hp%?ksYH!Po_k
zPUtdqlYHob5sro@?QO*`yd+wAbaWoTg4@~KqlFfw*y(V^3joP+SBHqR7_k!EO}Y2r
z!Rizh2O6+8Y!55+{=R%9WP%=$?NNDyRKYtxe;QU?TdX#W2Z`kWOmB(xtX<0Ax`hoQ
zQ|xRq@>_FUpR_J>iw|neKg!FeoYOp@f)oZpgOm3%PocFA+1McX^Jrp@#Vott^wZWY
z>+N6uMy)Ia7bT?)AcfIk>=#4Em#C|!M_Za{J&$1M$HNRk*AdUnK~Jxs#tRA+#{Bv#
zdOy;E?}8>C_=hj#ef@e2?1YugbcO68I1Kksg=w5Zs|?)h?+<!G%`*tBHBd=B7;24d
z!+4t6ZBtqos^0iljI@j+xvjO;%F?c#M&!Tj0wPb=g4F2Ts36Ow>5Oi=vN~%mE5nAi
zXyBssFYPYCsuO~!a(S6s5A7B3N1B7w$Qy41?L%}{va#6*u?0krkvejau-lAuL=U^4
zZ44`PpBy(+hyyYQSO=i`h8oihWTgR8PNC2ZX!{`bpzSUDQpM(a>etiL!|b&y+Sp9t
zo|4G0d@VnMlj-{j($+~RtJ+&h2!!%*N43cM8l*VRFw0V@^Vur8(8rBqj1qQN1|)O4
z<nuU{EKK5(+FDoW@<WwrVPgYmQ{K!NHh>S{>K0N}UDa5s1*<&%jT_&6vsb^o2YJ{k
z_05|%!9-;Y(kv4G_V?h<gzj2cTpWaLA41DRtQEvN5X%EKeaf3qE<9-R?S%p_{1Kf?
zASJaq+lU3bqbK8-|0BkNurk=)Z~XhWJ85rCHABwhAOZ|rAOKR<gF2?#=}y-FM=9D>
zwz9Scp_L=*-0|QKpk!cYPe?LWQcy7SKdAzWq5If@Be&@^YD7@#Miylz!)4-;d1Ylo
zjyEO!e-;*oR3dGcNfB!l_ekvxt>0B=jQ4QSQx!^9=Yf**KXJ0(|4Q4%)cckd<f~m*
z>)%`qmHgdTenX8HMf_CQK_R941)FEYbrnet*#TjItwIYBazmaxVL;a_z@!tN3tq)X
z^|l6I@?zdb6Fh*U2Mr)dVkJQ$ajhS&bXW+~ydietZ*#LaLGGs9186)$B2v0UG(^-x
zvne7Y<HnD4=zaeT>$q!1%Xt8PbG=YtoU|u^4R;_%#ae~eW*HI?AA-6tnS9{?MHT_~
zdM?DX?OW=?CK#|ngVdiu*H21};I&o*e`(F{r|h?P8HF!`@i8e~dF^t{WA9`nsn)EK
z=Ke~|{HJJkq|dW!92y+FN^$#tRIY4Bs^VAGHWp*QsdUx9&z`(JcID;$r-2@MT&{{M
z0iGzxYP(-sYB9~r$@xx%D-MYSD7`oE4UM--&tmJ{`KRkHm|2S9$7N4_1cgLRt?P#m
zanSEwT3>hBoKShbKAi6^FF#OaYodpyr321b2_`T|NQjJxVApL40xMZO4>5ziD2=I(
z$sRlwfZYAv*a&0G`C!%c{FuqM8=luG*w)H&8I>MGe9Ee_sfx;%IWW?J>*@tnu-qYN
z7<2^)HX!yM>pENAr`ej6Y>--k@wmN%PURU3ZFWY1Zky5b{D0qZzw*q3M4;UO0kVtT
zuQVR_f7B98CduV@__5xVmIsUmLYWi7^b!+;LZ9K$AP_8CS-!VP;;;S5RV_su%(6{d
zUw-_N0IIwqz4k>=_1JpB_6}-ZI;&__$5uUKp3@aWU}b4;?1JSPqMs~ubox_7?^Z$~
zSh;ipepz#K`gs{F%)p;&^bVA<`1XxG{E-^>^RIuBR|NrkbiO&1TkXUgV&86|sY$`+
z5#W1f!p0`5B+TDV4efdmV+4@#emJ;O+U+sepVkdZI}V%UnpEaZy4we=cZ#Ar>T{Zn
zmN{>EXOg2W8a4x!pgIOQamSqTB>X;)g+lvJK|-ahxob|x#j|@BQLRC9PTaV2<WU$C
z9>gqGh}`ab-BtZIG)^Xv7j?cVFQ!J5v<G0Ifdw!O;F1oBcg4z!AzdN-MGZtOP<aya
zBTDKTPLd1)66&DWRV+MULq$$2#xK07R&_YOnQC*d%t<cRmHXAJtn5rGU?K-oY*cGm
z7A|fbT#gpQPQxqITi)&uCISCiS~oV1;#o&YSKb@tz<&PW`afTljTp)edl?pGDd+xk
zAH4y=xacX!y%|9fjUDB5WjTgv_x=sh0E{(*c|_G%JB}i^sEr=f6&}?S0v)-IU344z
z*sRY7FniEOOY22H?e8$HK&TT4;GpPa4Ji{#-ALLOFMI-}VS@t@g6yh*>})kVyX#Cc
zFq|RD3(CO*x}%^GCD`6oDd5`s3#$ppRl@pik3w>5fLfDEQyZ5Ibdzo)MBfU?|NRRB
zzxPA(`3f|TtH~aNU8MV|Dpj9>_@VvF51t+)hS5b-?*>5!e*eL}67zm0c6RE=C?6;q
zBKY}G7{3Gr9{0Xq>UizSj=Y)3cApNzqnG&P$yc%PNa7sJ)Af}VVzLQcco5;|)X0Mm
zaTO*;7@$yimo*k<o&c$mqqDR9x-xUwDMXxYjCma__cpd?zlVr7^vPhV_AG1~j#hF6
z7-;J2@G#@6SI6MHs{y*zf>Nk=bW9AF+qr`ZG#ZvbkU8bJq`s=W*cQj@+BP-iwmxF{
z`SWM^IC4HWLD1_Q@cmR+ovgM$*;hdk(|80MWzlC`?fby%_|GFbSx)(E)88}J(Sfxn
zfA<}_8EaUOl1YcFZ^SM>rxMfC7nFzGAKgCTKqSt-Y$fX%v+U7pd-Fzo*YHih!JP*~
zQ-6itGZJLjF0My|ce>Q5U-5}fsvYIt2Gk+|-60LNORM>UuVb(Tk+Yjt==Kv>17IQJ
zocjN#Wy$Id<C%w%8>vYTlt7RmQh=JeBO09mOyw7mi=7oW$;QB74mcAaMWNZWdfhM}
z#w#p6QNkr+kX!ja?JYU#Uy~v!zsWs+|N9cpk{YejKIiSdR(JvpEO5Y_bhNgQcMo$k
zG&T9-pkaeF`Tw{7B`t1WCDJlv;TtbTNvq*^6vm#8!sAFw$e4gYJ|*sEFF+B2tX#lW
z38%O`^0?(!V)+{-rD0fJclT_U9p5fDrG0rZv$lo|3rifxcE4hnJouh;BY$i&W#T8V
z+QkKu7l+G7@_zXXUVr1ElFTxGwbKp4X}<Frv;SmzCP)A6yBjuAeM_saB&CI1D%E?g
zS`Cs&bmsKVv9_7Xj^h5GZFg{#2_p9~vGCP}nHfWXJ`Ozw)hKeXMCp2t>c{6zx9@A5
z%UnLaazA4_spXV>vZJf$Uq91UbPBo$AN6*lZ;9)t#pws+4V};5{v2ELUwtWlaD1rY
z`-b!^$7mj2gUGP|yA?HH90&mNYg(MpdfC&bw`jKAf3?r&m-g)l{XYER`$&ak>a&+m
z)>ck>ysvhkt$G*Hv(RfUnPJ5YLq8}5vQDsIRX-fE>*RXleZ!*;-f2LjlY~^i=WS9r
znp2!e9{n!zk2bdrg6<9&3IjThs%qJEmm7QKD-3lzexpCAp~a8sQYbe-#kVVRp|~oK
z6-~JL{OwKhg@U_x{&Zth@4{{L>y&x!cGiD9xXW*XI^aVn2136$m8D`(kOjSBKu7<*
z!B=t|M7t1}a2}PKpGGN+w<gZ^m7Ky~5r#(lFR~63oV31%CfQ$WfVvvL3OhUYzP55`
zqeR;0wD|wN>lAUmj;z65{{F}-GEYN_(N%<QpQ*)8EfT{ECG=N7==5ciYQt9`eOSxg
zu#SEKXtTH2+H7xhetLlCd6<#;FGBXfwZs(tVw%!8_v8l`kz?6MCma%X*9CDOvNwFV
z!=L=Ie;XwqxeEURQ{X>o#WQffeK6Rw0O$opPXWAb#`VVOH<E{WYQ7IyZlH&<2WoY5
z*OPk1Z9q4D-xD!#1ukYCtA6wliQd_%d0o`HxF-4|Wu)lqCXM75nJ>TXFkND5b=^qp
zol*Hi_|eZX;NZ+bl2xj5XzhRBkynD_yizK?r(h%?sr67-u%rGnCR|khjVQYZc>Sfr
zhX4KI44s4NUmsDp2wU{uUT1m=`3Xcm(Y=k{^Lk_r8XgymGVm#1-PcA8+`VGhkW-JR
z)7j4-J0FGf1ruJPmEbp~mWiCgfom23Gt3pkM1ic!(K-qCTf&md95<?bI?>;o6~VU3
zI3Qa8tLKDcwO;&2q5y25>ArH-3lASptX`_=pCU2*DbcUgBg%a9v1`vlSr1HElTSP_
z#dcDoxD<R1##@R%g^ho6zkz<0ac0?5e@U)OOxFaiw*!bUcpV9~|DlqZy(}SVtj$lR
z|GDrP7%X5rTs|kI=939m>(9PI@&tavMD)SJy^@Z#vk(9C8)T#<UY}Po*c%bYzpwh_
zQTfyZ6Qz&R^e@b^S9n9=m-f4f#8jR8fA6`_8p%MJy_|1Acq+@K_wRGkhH3O@?$p+w
zeVJ*ciJ2Ua{(gy=FNjd44{C4iMY&()zX}2kR^_3|YcD60lUL9~k@b@ehw-<rdp-Ox
z7#?^SCAQ}ooU6R5c!IvBh`FBfHCYbWHPoalBBKx_1vkJpga>os4^=h;i4zZrqlZi}
zui%CJo~fC?UYAZ5TOOLcd(V0o-Yb>i%5o1lor{xuQAIredz0K&jgN~L64S4<Ivo16
ziY%iM;6Xv|KbJsNqz#x@Y(zFCJ$5XKS>o0=Oo~LsEH2f_1hkw5QLI%p+x?B%28DaI
zJFtStV<(EzV@Rkw<Q1r``02x9jVtNUW}mwY+W(BL=IS@|rfo){f<HJo**e-ZHT4yF
zCx#xNt!{2^;51XzuR{0iZkcZ;z)ApAHTJTI*C)E5veYn_va{27)5z1tse3)n7SF}1
zrA1h-FW_^()hEDz+Hw6~NUkVWH_buHgGQvN3x+a%XbLG9#zUqFUW4{mR85)dP$d|l
zdhy&kKVf2G0=)a+>X((1V_W1x2EfD*%>ANb>y+@I=;+|k(BuI@NM5AG28#E48IF#F
z>2RUmktl|Hxn?t}*&8NxmJjFu4B~uYuM?Vb11VTYEj3jd>>_Az1EH-?^2^!5AvKL!
zR7o73pqD|#z9z{+btfliKQY1B142UDh>odWznVq|o16JKIG(Xlz0Zu_w3z7s_m|0s
zErh4m>wMxBwH2zWvD-D5NV68tJ#Xc)v8!=fb%m5!^w#|w(Fl@b4scen7(}FWgXoLz
zAdTzH8XCo1t150l^$Yo`%DgNd`Cz$T4KlWN=JL&ka-yB&u8cw&3>DSjVQx7)`pg)^
z<$5X~y$h&#|A)?<)8(uHF$7dRbX?HZS{xvL5vi$FUkCjOB0N}5Nyoc_Ex{|fYlve`
zpvMg*;PuX{Pze|HsVhe0QU+=X!EVXrf$pkevUYZ9a2FFfPAJFQ$2q7te;M<(GSJbq
z(1^6Rh?vaJJ){2%8_Lu)%!_@Oh8c68(omc+dRDFG_2KX;1@A_rWKG@9oLur|unl1W
zs}Nq|U^It~!HA6Tn{4~c<ODA|kxJeEQ~WOxWJAr(&a=O#A@=|d)&Trq(Q6y1w64!=
zw(J2Va%o}aBM-%klO-R3d4g#cq8uF80h0=P&(7{{C9PK{@^4V;;U{Y1Vh2F|dr?5b
zChoH4c)Ns&ZTB#ApOdYUmrsd>wogYw?E3*e4g*a~Bn8x&`JrweFja@TX{iLzn|s+$
z&EB;prcNpsTlP#&SEN6NL#t!Tu7e~CUKLsKLzINftp*+<_iHv19ek0*@&+!7>7R!l
z9?(@5=jiu5S_Tj-Y{lV35v-?jd~wtS@tsA*#k6#EkPqMtTFDy7+fAJ>HXlYu{pvIy
zLbwG~o_s)342iU3ot>|_xQzD}C0D-^6}7^d3LPN~9X(amvDrp%Acba<1DO)Cz#c=K
zMx+bNix<Xchi2DPr@z!6j{T4YS}^4qB<orO3z>uiFJc!seUJ{O06SVb>)+4aL$PQ@
z_o1Bu?JQDqH^I%_Bm8AJG#VQAPfVa=c|q&_)?X1QsqCL-9)X9=&rgCAUBn0<P3QRu
z7(TQRnVDJ8NaO*-heW(orBbtTsXlkLTgc|lb>%)fGR0Rn#$YZO9Zmfl=*l2{3TVz&
zat;5GyL0Fg*=vz@fiZl=Xx?l}PdsC?7rDZ3mOKwPM!QrErZW6^rmEub$9TN?)OOBE
z5p>^!pVstAoFEbJWEX+jhlD2~;*B7x^)^+?P_0TXY*b6Zf(E@|5O`QYkyh@vp(rxE
z??=)@hz}Wr>d<@|_!{WMld7wmqY8D<$d$(yFjAllkdhWrBn2=sJtZg<baZ!9a37M0
z#)XGe3UBB_6>N+QqNHFO54|bm%UM-h=#fT(>RJ4|3t-v+aRk+bY~ip1ZYrwE)zEr}
z9Wc_`$;h-WJVX~FfZQr@0_AX^ynvc}G*iytAS_KPp85nt7ugINesHfPqL-f0(Lvhs
zM*?Mzl6@816^mU~u~Qc~+N91hjh-w1oyz@n)*p6KPuwGK*?tdL>XnNcUd$|gz<FOM
znLhxpuSZf!=OcP7BR(2M$ua*vCwZI!n^l?A*-T&I+{{J0+Ftnr-I;HHwL_NvxIFW~
zlnG#}-d`nBxEWJQHTJUVe1L3BazD;XXKU&;0Rte-(>3c+KYrYVYxBx#Uc}Opt@uSd
zwe!(BbjeES4D|E>bU8LX%?FiCbAaeEsFjs~^@8X85AYVJa@CG9GBSdKsG)`k#3;1Q
zEIcGSO)kGu-$hGn2CRVLed0Rw%G=pok5rir9aD-f0Z{c0A1dhJWhv?b?b4`mYsj=7
zUs2|KFE|5uA#@=>Ki}Vf15SfapD@Jnxuf8`_2Y-=Sm#2{U;pYw@PMuIZ()ijpksp9
zM+)iL*%h@7Q-5Vep8V*H(CGe_<e7-8+I}N0PCbMmw<cX)$FY)ADxhoBtK%AoMYA58
zVH$DL3^6?87$0VAY48v8_^clGExn7pwC=rO=QqB)C9D5N5p*)@e$PYqRoraS7c)M?
zAsuQXVB$-(T~h=r1EgU(KvfZfHj>9U6M?@wc)c|;yl;hZ0HOND;y|_qQ0GicOi4+S
zdYmt1rkdEmbGJ&psyvsN_=wFT;<kz;(xjnjkd2D7a{u;cfM!1xLffal*xT6^78i$F
zi%3hyzOw8CR5_!DA1@?KvTNYu;6(Adexm~%(L1Atl9fHw#hI<ayhpF{9vvCm_ST!I
zV-Em^d9k@V7CL!(U5D~M0&yC|?pZ>1&*a&LkaMG&uz4p=S5B@+D~0WA9Cv-#1V*GY
z==X*%JNEv(ev1%gQe|N4cJl&g<ZW$jJP-`{^W7~d8bVoLoR9C)Dm%>o`#_k=z5C(w
zm19Rn5aeMMthxz!v7BD`f1`f{YE|ZLk+*f#*47TrjQ>i~Eeo2c_wx1z&@TTKLry@X
z9=pMO1ziOAwN;QJ3Z3f9sR;q{3R&h`!p^BleUixgL`bjh-$}!YF(hURdyIL%l*Kfi
zh|y}?eP^k7_Wx50_?Vp3`Hf4*@L3uIOc`hBDZ`iPs^LcJ_4dd}{1}kM+df;%h)GXh
z0#4&_=^CFLLrPk>i;}vPS}J8nClu!8+Ff00+D%FC4JfP2<P%2)-M+Lx(WLk~HZsz}
zWn8KIr;Hs6N}t^=`jqMAje(NX%kI+&s7vvq2eHx7g&+Wf0nyT3=jse9tpp?zluK(1
zgAh*YNs#Y;dGP_NH6VA&j0Isj^yQRxZD1)7`(m0p8;s6(PD<(a*`!k%I;PgZr+@0N
zVc)NfK7Yw1seW)SuoGtam-S#CiN{pS+7JQ&-I8ma3ykzMJ8NG}o~=e?$O*3TopS=J
zoSWOZC-E_~oDCsubg4`I8}7q|=;-Gk^Cn11NykCF4^MCzME!s(L9Yw~aWW>xvlP~#
zOrM&TX4pRu9$8pp#P@-7{0Z(ai-8z}AMNA(oTtww&|$U4^DXZQP|%J^{ap-n{Oz3`
z+?zKot*l<STfkb;1btGAidi9*sS+d4Ds<Qll#pP86B4v`qyq>mbT-tVEkK!M(rL}i
z3I#nhE1TBj{{G9D+w2@1(#gF!st3Ru?gf`jR-v<JU$y--Ot}%F$b(D7Rm_ZySceO?
zE5__M#wdl+=N7FEzaF-id!xu`_p2Vg15G(Gpv72rbLN83Jxn<uj-LGkG#j+S|4dEQ
zWn?V3g||b4`u)-$uxvGgcNHS;0gX-B4ho#U$xqWL*SpW8tUeV421+ZJ8tZ-hn4}6d
zm^-3Ks?m=2cCdwQ0r4xWFFGxf?!<MX!X!;1o|-YzDh%c`1@^5yn40wPSqwBFCSnX0
z$jHiaNVF0YwMno$*<FBg2lTmw=p!p2aq2#SM0bK~Yz?J2HsccA0(chy*Aj+BBTyMP
zAN<t2eO>N~y<^L;I)`3M&|^@`Dw2diY-x^!s8{3aM-7|=){`w<oDmtF;|`o}8vfh)
z)odLY=<6{vZOn9DiHVUr6&uwH!(Zli3q}cL`-08_6t0aT0f)|{6G2DhB=8%$AQ0PC
z08kI`8`CJ-V=e(f8mylTm0y*ND$YUw*FU+v9?h}~pq#MKz5MLQOG|`wswF*8m=iRZ
ztc9@xxZ`}-y@!~u33V4)MazZMIHS%rb-Tf2U$ros8rG&xL**TDcZgiDOF(-8o{Or=
zN<BS2BWcm23IKVx@o+&m|A}^P`x;Tq0a_}Gh{~<HX>4M7uUItXM+rvQOML|WY|$w<
zYYC+`-p%LH3o7wMs_Fvqj&IB(Djy}GC?movDt}j(yosfq$O3<hf{J6bL?w2JCM}!n
zY|?@}WT)Rtv_g{+wnaWR;>lD`u9{lpdM37_i<=&p*<aRnm8Z82isRfpZzf{+>UAJg
z!Cl9hI7rMsFv?y+D>4f+-Ky#0S2#)x41{5Ch3vNdG=TUTIxGP-<9RY7qLECwrHtha
zP>#~tX22zeR!(U>n!nBOYH4F*3Y)Z(-JJFH@3#o=-SDS=y=y#_`YPY9^Mj{L*td4p
zj~Q$@?wB6+M2^@2Q1lg9&hd}3-(on)4e(PGyK9_^2YC+4ZZB%qfVM1$2-A~d%67#4
z!cZPD`mE0r6W{I96CVVDiBl7mI?bN=yfOw%`(2aHsH3Us{Myqjm^rkfNwBcC#)`{b
zPNrb&`I99PX`lKL18Knb0fT&wNMEqE+LjaTUZ3Vwyep@+WT%}h3>Z^BgV|cg#Tsi$
z>hhko16EC30t9$7jAcHB;nLBJ7m^rSIMkQF-<#RzZ`t=|jg}2zajbqLsU2d*hxz-%
zZgXEn#mMu}XSSvk><3k?2^t#NiupT-<_LB4RHjowcDFxM2kQX1=VwPvzJm*(y%c4F
z@NA#zd$h7)vGwMs#ZB+ty{SWORp@Qmx!c*DCv0yV)u*!(l}5QV&RiYnW$186`McXm
z=iw@o!}$oY8W3K$M}jJl;QZd8%l$GQ`~lG|EiG#XT@%1FfXNwlv+m>TP*QG677C1T
zhAHy$2!&<P6(1-ra&CRF3Nvz++Qt4}4I|KwPuDC)iY+czikA``4>>pR^g;u9QS)z)
zTbIR|G~Lf~VHcvhxv+4s^9=b7$>q8!_{aIudAf5_9mZ4vHZ1VH@87Qm{_KTt`>b}@
z^@lq@)3l##Q^?Ny^VfW|%oPmRW4Yu`$Fmn$_<#R4S&Y@BTGYGA7FqT${sM0T8LP;c
zH~`TUas+pOeE;IN{@1gb9mzwPsM*{V*hRv$wZP8dAN)*gQ?mY(<KDUw;aBxbwee`R
zO^2svVn6TY#U8Hz+bmy9*UxhPu2S#*K2j~f^*EMpDOGpfakYQi8K%L#&T8cG+v)($
ztg{az+mbo#@l<x0bi`2iQ~&Fv#PRo$VQ3&>4^c&u9?qAt;^MWj(zS26Ye0l8^#TNg
z(R5z!X_NF1KZ}Z;ztVgs$Dhx(_6`oz_Rk1xA5v(dxw#!xv)>%~E^QWe7YvZj=KoSe
zWnn+C-41SG#x-cKx}4>5K&x$U&4P+Bq_n&o2|{>uBmru<u^S@5(qb)6=liA6rvnoX
z?LRFPZs#j~O}^5vcXUB5PSG9#Ju;29bcy)Wq4BL8&2kjz);l`d&Rtt6cAulr?OXGM
zU0=ooZhOT-Y`4krD$KKY45Lo-8_52yCK1t=<th3!JULTSZ0p^jZWms=;hnPLd?VM3
zWpR^3)7mq7m86}ZypXq=sz<{))V=NHOMj@m{npjPGz(6Kh8gI_D4lN*PcEHXtPLJ?
zMz`j_HvH-)bAjv5j&egNUwzt*f!iQ9a75PpjiTPXtD+7`_!{_|LxY_gy2q_;iVmBj
z2IwagU<F0%tE-1iah#H|Y}G^%K;il23+Db>WNhr&+W86LlVnJqDA7LI1^xpbDLd$F
z%s-UbWad~Oc8p?N#RA7E#1BfhdE=2oHqYbd-CbQyFdrb@4^?cH!P4qcdRlLgFbV+o
zi=)YB?I2q?Uf#Kj&vV?<i2oX<t#qgj*iSohv#~*gG`FuvOj=sA&U6%-FQ#Uu?k9Q)
z+VrODrdY0r^C-eP-osgo-ML=6jE&s6@oARPp<h!&Q|8-C(xaT*r*<Y!O{gE%->zSJ
z`%zJ<-KY`2{$Q^uoLjAvOyz?NjcAEdtPGMNmoh0}nsn+Y_iTL9GB;;yX4Yx9oi8LH
zPL6}a!uD=~>e#k{wgKWk6a?FPl^dMXpcIoKnz3{D{jJ)2A3ND|4hC;@N(&0soFAS!
zNBHf6L=8xyJUWXVP}#tTr$&s#(NUeQc5R?lE`+yTP*zq}_wCpH7~M+eKyng)ePEZY
zE<%n{5QWO}P;K>j-O`jZTdG2u?OKSGAV>j0f{AGG866t~zb5~KMVFIQRoFd+LKnaF
zH-&fv&+f90cOZFa;5IzcrTPcPO-|Qw*O@Kn(jz&@;X&hbTIll3cZ;;yKM%^kq$Ms<
zQtr=49q;N?3w4_<`r00&Eh(UwrzXPBKaHnUMi%js%k47re4rx$UqVidQJ<#18&$$(
zcVwv|!s8(1mYz^+ScYNaUvH`cm6FcSh24uti&j;^-)1+1ugEk<eYxuKW5Dh~09W+Q
zD$Hu8qaUv*x$B4?PF9)_P6~qUHr66~GF4o3_RBk8cl839-G5L}pm0CdurK}j^T|dL
zw2U`5sTZ!Foao_EF6;u!i;6RK-T<~gkmzj*{&w`zQ46^T1J_G$Qu6g(I|VUv>O6G5
z;<@dPPtqxz_tz^w_5L#h)q+wPvlpjh$RqKh30?WEx-FiUdRyfhX0bx_;}Nk@F|JgW
zqlssDHOFRBE@J%kQf`xD#^uIrI&a@=pcW*t7;~qRM@CBG*d?%U6<N)fhX$sH+P4O-
z7r;PMCp~+ipZOrvV&D{Pgl2eq7Kn!Wmsd#msXBDSEGF^4l(~SnGzy}ll{DQd-KTj=
z!F+9jIu4b7CLKpaM#cku!Sn=|f7yLZ+~t#Q&ZW+<SO!52>4^OG;RbzlaXu6`pnrEZ
z7f1zW@`zaLB{%2Ub4Qg=*7oJ^O_^C(?!gSS79JUC564N^$-X}7U@;ce($a!HC0#{T
zWox%DW6dKz;L0{~ST6xBMSEkc)GE^7UxDpacc)tQ<w-uJlezu)waS&5&40@a)cCTh
zLriN&3)Crir{|dw{od{BmZ@_w3Z2w=Q%4<<1pLh#T;wD9$!a1V_p+YGk5BNF>0%qb
z3m#GJHT-bJ6|__@;T)<7ysxK;7~-j!E6*mJHpZ9FGJ78_t3G_sbOMjakb8pD3ub2R
z*`H1MwW!muOu1>7wGFUipg<o}ZaNA&n7G*3@nR)LKqk0doPonkZgA7A`EcV7A%n~A
ziUBO*>x0!t9M<*DC@(^g2&C{ZKhfTt*g8F28-}P-3is2KKdqqzZ_x4%#f@|dcgP1=
z^u&KX@KdiH1fKCcu8TX*62f+Ya$#|_`5MeJ=4eH$q_B-mE04kKv){mZz$JPGaiDUA
z*hzDzW1O6u?x?le?v9&ap1~ci4=T6}bI*Tia4EzfK;;>kZ~i*Y;ds3e-`#imsM|}F
zGR2&^%Kpz!N#gfPYF$K04>0l9W*@BAZ&l`ZT@)Su%bHwE=POS+iXT-9y;rQrF-*=X
z<lRy*DA|L{x{9LHf%7eTmeHzPEq49bN^ApVw6NAt=u&=a^yfhD0>-y0F4pqvVqEt+
z(YPL7zKelS*osp<d2t$f0y~7YbK|3kgao%q+fbIie)r3{z)rO?W7e3J{xpD*w7#d7
zP5=*Zy;J9yr#F7N(WEL~aCkI2M^L#mzwUe&#FWnSy`VPX+u4}da*O8JYUk7xImyni
zDKa_QoW4|c+8^0jOOtRsPQn5_Hr2wk+n%Jn?);eT8mMj+3b8knJ`d-dBkjExm)tb0
zw+FWf@Z!wbje1%%HG-?Zcpn)u=^6g{Cz<{CwVUmDu>M`F74s3R)9?Sj2$HJB>JOt7
zHrLnKoO;(Za^D=Hj(q9M>oua{xotL!^|`MLXI4eKG-|yqMs!4%y6%u=yoMv-+gs7i
zLqcj^{+i+b6$Y``ga;EtY1E`+@|NP$xmnXa`kRq_ywCvkVPd^$W_co;qJ0GvO0XB!
z!`|4~08ue;UURrttkIqs2#z7R+dhOhEW6O|-_+Qz=4OzR4(bntLe`xA8xWAC-h`~}
zL^YZX&^YJsM(Q2z?{~Dc^boDA>arQWmh%6QLlm3RTKU5$Pk^_reu?OLN89s`R_jBP
zl*>FTf^(+-Qw#91+M{x{+hsyM+M%LP`(Hhz<8<!gt8<mTElo^w<yrrj9w>>CJ>a+!
z<9qwcB{*hV$a*{!UZQyZlE|fuvB`KZz2B4>BpYW|y}!_J0NO{O%f4&k2dVjeshv1=
zG1&4MYPF?zh%HDagVw)kb%bj~>6Pl}ROdUldv8WKx!VG@Hzh)OhhsPoBqYLluND|e
z{K8N!s5-t@kubf*riZc^QM^Bi-WVfTWY=c9F)j3LY<rnfHL;Xmf@wHSF;@J}kVA3|
z)4uUn^oz7UL*d-&L;#UN1X#khC>7e2I!u9nB6NFE=DLm@hcWy4s6>zb6&WUI!99tv
z?nOxAKFfT$PV{%e>z8vsjSw+s?iPa~3;M8_LDjG6ysb$Z)w+P?-}#S$FGE>23Nb(h
zAFS{)^hm1Td;LCn-tK?jj^@2)D9BgVyDt-muO-UDYPm1d?U`uHo|XLLRZC*$cYpui
z6!4zQ!g6C)h*dGOz9m)Zx{nWv`TC`>60zXR5On<h*cMNc_c#6h98Q%K5R=EaU(sZI
zudRLa{$mn+h|EJH7AOW6+Vz>!vDVmz-G7+P%CmTuVe<M!D3^nk;cgrzECGsNp&{%>
zXM5X5&zZ^PwOkq1u9fwNIQ9GTe_BVW82Qi*+>C${;*^C%Wo{!5v9<S1GUr`7VvRau
z!s>Ig-G7&RU!D_tT!$GzhJKCYntCj*<e>zpXsRlmU(hs9HqtUOdf$P~06#^aeo%yG
z3B|o^>J1^I*Do-uDs;2^wxhP+59{yxpHBBwv?O83dm>0O$e<<3?Z;&QKHW3XpW}|V
zQNrwb4V)R{gm~SsZ6GSbk!`nCL>w)0+<%HL(2CFs7RvT%huI~Ukl(*b^^oT-r+a)~
zP|IAnaBkEWChmKfo7tcLE5$Wb0WGq}o7lC)JWeii=Pem^XiSKqg@H6??!x-N)isK+
zkT8g*&;ReztK#*!1u1?lq57|1VZ<a>{XR1o+Di}XFTVG^Y<U{qoIMcF740&od8T#D
zg75{du<}C_ifiiqX7pN50-#+p>L@cOgO8t&=`1Ozrlz*SaC(f%YCIns5+~!CA9)21
z%~E6deLg{DUrT6G)F0>GYWgkOE;HucCl*$wE$UnNz^=os_OYL5L^DmGJX5e!oJ*tO
zLz;FX6!3UQXc1Y7y)^9XK2$w4B&1C#=`V5-)($Vkq~`MFn2!BWwVyF!Bh?0VrG+5V
zHaWC7JG(kxGpN?}jmwXrdxXHE0RacqvnKSq!xj=7`Y<+hV{vn3b8}&N&O&FF7%ZRY
z2BMXfAg=xt&DOTHrsjvD(v^WEjH}fZY`0`{L=<gIVJPe_OR(*Ildaw#jS973{XW~>
zQIDaF3xgh$S@1Bc*f(aq(_zKJ>`=D|^V>eHUtcMFp5aUpbN_;{0B1;d%*&sp+P0^-
zQpua`U%v5OEf7LK(of~sZggZMeT>V#^J4K8F}iJzxb=Q66KTQ%4`kG$&9Vc=5P%Fa
z0v24t(>Ci8<u6$T);{<b91`0|azJs(+Nx;m)_({E8PQ@*lFJ1j|Doa@gM%1&ilQ6Q
z^{oQxzsN7i)=LbaW*>_c75xE+v2ZW&Ih>xJ8nqV}6`_x@h=P~;%y(_*i4B;S{rqg;
zR@U&Oy+F5<bD~+#Qg<%5imGBxM<wo5UU}&ee03R^zX2p{RT8r`j(kR}F^~@>pY{Pe
zkb*A_@$$MHR?{NWT^q@KA?3l!<$7an?Jr2AyY`d+QNnhL#a`Uxy3Qtr#2rqAeTm6c
z#WtumfjR0Nq>PuD98hkBgvZnipHnEKzz3x;0E$em>S}8C!rB@bvXrVaL?tEZX=r35
z8laH?7#p-+J}xdH4$jU(Kq4)ZNw}?~#Nn9SCy(;S!NT$u@~`RdlLbli{itUrd!x#K
z3p7E6%5-u=Z;u$BWSpuA%x`=-?GW#WhsWv4^#MK0Y1O8TGWxqW$p|H!j=J=zgd%UE
zr;)$Ma-X7FAdlen>)L?@ZAr@yrt82dq%2YJTSZ$M#>?%Ox*qz>LjMNRuMdG30|==M
z`t_k)XV77SX?pGj!5*ZIMYH5<);RQnC>L8xVAcJ0$xeVqGVaslCsp<<dFWA4VB8r~
z&gHVcJzc(Pyt*`2+yNj=WeVS$iSIzP3<qmyOOdb{v)U{dpp(naHaK9@ft@o6nkk@~
zwBKt(qR<I*GS}}4RShxSP|aM>?SVTV&2}M#232?{fOPQUOH+L~!_e$NH?G++3kHW)
zE#xu+8*OMN&lo1!6ad!<Lg<fg`;<vu^vu>41tFn5gqeUgIMH%$1`bfJmlyWHc`<_w
z*|AbJ*y4h#1bT~4o;(5R9`I+(fk;Eh5EuDcB9?t}vT?4NqAn6dOEVCg0jVLpPyT(`
zoISs|3R_H&53_P`EJ3^xobY=MSpkETz-qJ$nW~^l1~1?_sFLs3sylDIg)BMfRA+Gj
z@PYUFbEC#@2dj|Jt;9(?dI|MZ(2o<7IxGB|Mt2p@7}M3O3t$LAP}>XJA1bdTQV%^7
zO`-*qoVW(_V#4A81W)l`C|CuphCrB5;kp?eiqF+QSSg-0M)H!{A6q}vM&UM`5^;J+
ziG?WX>izXoxnz(idM>%y7XIu7o1Vp1V%XchcTlTcn*u>;s~Pk+VB-&w)O$CFrTl#S
zChA<PDSM$hjJh~_ho&V+&NJLh1R@$JPxHdMXz7=R0CfdAGFl}RTYPAB^%*n^saB={
zzsS$u019qjAD;jUKI)rAWK!n9{^SLK>(9Hz!(EQKQv(du6&2^N{cUe@W^C&A!>NSZ
z8I~knT`(L$X`>3NvgoM7ZH|rgS!jht?4N*dZdXm9RO0oGF&81h;SXlio<r;01^L4H
zZs>C?9R5Qv>silCB6-!^Br;EiFD1&{5ksvl82jK}0x*Lxr2U$Sf`$<iWa(T^76=KB
zjoYoQ_Xr67-G3u;OzW5j0td?9aAt0AYlHA6*)5Q3Dp&2}+g4gkyNUkz0nQz;Fz{Ob
z`?Ee;F2+*}{4a1Ap!-^0K|w)%w{Z1aCI7<^<$tJ*L8rLqK)RKvA%oied-uM2N6z<#
zIEx{2r<@_f2!4^gLkNV+L{Kz+f~9S&MD%&I5#=hlmjKDS4mMzHlq3op%IBb^H!(G(
z!?3webWMHlZbnKXbM=ua@&E-=3wl6igNF$A*o64_-4IC3=&+07%JEX{v}4-<G1LUM
z@N?R--t!CBYq3TBghb~teb5L2`h|pg#5G62oQ}l<fY&&X;P!2Y{pF9g=F1TK1$n`s
zcV=t{xdb%#Kye#7aRLNL5bcM&6;FfnaSe=V=4Nah92;9(QYP&bCpkf50|P?QhQZhn
zH$}S;!0pZRkHvocxB>jp<YfWp>w>L+pejwNtF&z~w(khC%F^ie)I~aj2LbLzG_ZS!
z7g&4tltpK5@t{%IPrc4G7`^*ys1lLWBsuR}S2E7v?K4Q$Ikxr!K~Ybv#%EtRXk1bD
z`t#?j@o=#Fc6gpXC&qrg5P$4;4)BirinFbJzis|WQ*<r>NxGhk>-m)HTBDN2skHXb
zkJGE@3#Qd|ett#6X<_n`XU}2fT8~r4g%{TSNkmoJNm{Qr-|$C7Cz@6a<?NE<Q8kR@
z;sAtdZ)c*U^U&Y6L=ys(VnwK`ZVxb&<PHCQT@#G`irSte{2wW#<@iJV4^=KkO-S(r
z)p4?C(=vWRB(b1&x1lI__pS=w){WAmOaZanEjX=3H<#mY6+x1!h)W4(zWX86nSp^@
z4FZkmLpVZFAm*sArMzIj^7rc)&c$i)7lVS!cyKVix%AXZ`Fiz>a%Io>0awh6y?j0m
z_eL|YtfEcf2<2BsBjS4+BqvU}X1puKO_Fsx`ETy5Tv2S7!q~Qe4lC#q!l%rVia*gj
zcy+f#R`aeU4O^7&Qy`>2W|}=+GeEv_qvYmBOMIZ34p(Zka;x{`mK*OKx17^b{}5hM
zFRI0I-7fyCTF>qwE)^vaxu2f@7Q;)88XmlHe@?&0X`PaK@h9}H!=4ud?^*y84JJ~4
zB8uFqJL;t$XE&QH6V3dgs^K8Rl-$a(`sujX3uJf=w?VpiJ?FWHBHfnkSD#=^0osEQ
z0nP8Pwq|BNT^xXr`-!YvD7r$5h)90tJ9IRm6vCT7UZ9$f>u1%(HwT*rM;IXm+W)-`
zyN6;+qDhhC;PnMj%=qZ=gBefhl=O6sDxy^MI}}_4U{Cegl<*?svC4E|_g~UX)AjvP
z!Ebz_oL6x@=er}qk}+%>Azl?)*D>Mn@XcDHF5KtVC7IF%dVK26jD~WW=s6~0AWqck
z<lmn^4*xAomAiYlD(w1fC@7|p?iWm4T(bFQeryNDDw@tRnX!nm-{1IHK)d)zSXdai
zGI|PpS5!aVwps9&^>es!t1A%}`tpqtf_wK|rd<QMUcLHINf3%erlY^`%V*@|33GYT
zHo$h-<Stkm->MJOuhEEAu|GA<svVrH!-%>MZ+X99@lKCV6W$j^IxDi0?SmasZvFF?
z*<^4Gxh*#&^rtuecL5LR>2h=eH7-t%C~7SCPD|Gmsi>Z<R;Qk%b^B1^xhoQ3;3{*&
zmxMD6UF{V^FPy5~H_sQ@VI`i%QFW+rKHTESkk03IbHjjT*(adt(}9@ZISYuO+S_$>
z(HlW6RqzHtZgk(U2^ksC!?R(}_Kf=P7I%TgQNlyw=oQTMmYhC=Ce}ven%$v6pFzVa
z$N?|Arz#!ZS?W1EaJ0SQcR@V4^6x3{m#sgoA<?hwYg#)dN;fZ^pV_mv`k92Zz9L~G
zNKW+lZgDL<y~db5%&01Mb=6vG!+N#1-l8&P&GImBGb^HB)65<Vf$@+{VMn^qBkUzs
z?n7NO{<Y0AsL?#+`IM1e?3-V*F|OwDLIQo6;lEf=Cb>DCK6LMK-d%5PS>B$RxzH3(
zU~~N`(qxIf&LY5%brl2GgZFk1;#!a>hU8|QPY~S$fl!&Jcs~6C+4*@yluCBK8ga|c
z?;h$W8~D~TmHkA&@1x8XJGM_O46-=ZnJ+4)7hM}8Z2o1K%8bA6yA}Rtk#s)gJX-eb
z!1Efs`AxdSasosH4yq}X9qR(4`v>FQc3H9(p7pVo7OeX_T5UMnOE0sM*bf;VrrYxv
zs~iM$+9<m{uqveoCF%co1PE95qu$<(<0Ii!|ICm6{O|WwJR{qPe!TCNm!(wG_msMw
zYldAd%q84f)*T_5|J%zIv*F$iLqyi~y7D;d`9`;c#0WB*l2;m2lRjSeND^}ctuf|G
zTnhufQF}hi=FIsdWZ?GYr>Y(?tt7U!36U{;L<7}>iTAP}tOv9dYgvq%%QcQAf;Wnv
z%XV_GV};|)i4>>hpA$o1>orz{!ViOSmmkk)ZY;l(554nnKkXwmUQAnrAZg{CVQNpx
zY;Ngw``MSB!QY0ewJQXFsv7w?*!-0<2lY4tF(^USB{s2rbFPnj&A(szvFx#gl^Mqu
z;V4>XjI;G{^`M4bQk*VgkF0A~NIY(&<lgdbe6s8xrbv)B1-FSC@5OVkw3+J%GP-ha
z<mB&4{)?28r<IKOQ(`&vDKQsjJxc%iOq$B4MVAvDEFziGh3XuE+k#~)e|pE#c%E<`
zs^BeI2-&z}CT4kfU?!^WkP$J*`oCgcPi(EZ7xU9@zK2+cGBg=4AWWV^`0=8`^uqUF
znB%c5Z_KVD_{&;@Yzz0~C+he`kGgb2M6#AJ6=Gc<Fm?)`upk<+VNA&rn)@a;QI#ip
zGTaDK#*!pR?a_77k|#*}UAL%-ml;R%iR@i1&i-Do$fm@7rnzFYrgkZ%0^fVBqZe=7
zxOFehatIsQI=`JWvUEeasQbayZ@Rzt?|7^VO7jm74KdKu2S2a;ke8Y1sIMP`Xu&aB
z`~CjwQk%Xgb%>7w9a6`xC#*%*uroM~+Ogk3tj3QavicgW_Y-CX;aX<cWjTnJIf`}k
zHqpeFUcHgAge@MEG*G^RLr~Z)OBglbwYnZ6U1}|KiHrDI_|CE(yx)gMnmnIoW(sv&
zv$JXC<U&)ryW*>P&vM)yjxpY)6&IU0IvP1Ta(-HaPT+J+^phad)iqMkUk&#5wz{jT
z+DS;&;f+?7AI(7XrmgKS@z%=9YpeMYm`{G^{{=+rT=SXTmU(<kjH<di)pZimSP*83
z#NWeS{`tgk%^OL3^8CR|!`4Ugd4{boMUJr>U$v1o9x>D>`YvjHW+CT%D>xlb%-Rq%
zhCl=<FuzbII4PkEYZ=3T)Gzr&#jBgr6!|9N=~sd$0gI$GaLdO=AdN%zx(!3*8GzYP
zJAw6*()A{WBZp0d?m&(|SzpI7`Yn6h7M?Hi<&8J*=>p+{kXxVCAdQoSc{hl^C^I*A
z!I^-=LSw1fOP}*ocOWm<;qgxLdCcY}xndt20JxkFT_hztJ+VALUyY54>54nqPe+<>
zPL8*7@YP+SUVJ7Jv3iPUkxX3TNE6IuDCY8<)rgSOWRslaH>=ppJiD6`iDg&(+fm=Z
zJ1{UNLUyNlLcAI8w5Qsq=@RmW*0?fU5I>f$TxijHfrTjW4e`*I-f)~cKj-1oP>!m1
zIk}98R64eFc5ZH_KpGkvM#aR`*slHU>+2gWMuJ?)&ej%!dCRM-?LTct{`jF(v-IO`
zI#el?)sWow3Gdi*iRYg}HsgE?xJ=Rcqpwhlh9_4?>T12PioE7$ILtrHeTKN~vGL2Z
zW{S(#?CfL1_C?v*-h4qIZnM#vv2(wC$G#THa1nf@TR%EcbFn$eO_q|sHPF$)x-~so
zxiuFky=cWo_XjYn<=P5#-+#lt7Y59?Z=1bN3(Uxcq@=TR2S>-~E#nLvFdEbH$ko<*
zAD2i;OEc1S6#ig%mRMbV6d1@C6Xj58p{XP%$3oF~c65tU3cLE#J=-sbA6Dp`{a+Q$
zCB6|huAcju{!W`j)xE~!#{*y4dznG3wLg;G1^NHyNywxg*ITRn`!D{v@f3Cu=jLyN
zEatQIb^oZtU4#8;#3N?57u;Y7dhPP+*qhI#70>=?Q?aZ8o`UsVK(yLloZ?3^Uh0{f
zZ;ll5PFVx4#NS^Mh@h7`I)Ni}NBd-nrB_x->;j-3-nw8#7wjl0ENmd%4FN&*wN?wX
z8pS5Vn+=AJpqB0W7u8tw%hcSw&e<MxhLKA7ZjH30BxRN(5OTa0PU}9aGhV2(bTqB0
zuA*{sINlC<N4c4qABi`xX0d8o@THKb`LR-Wv^dMOs@%+kQVR(kzk;`i6njk#>D}%f
z<yZ_Kj^nn7w{yQ(>71NHFfmxOKa#g_ke`RUL<2H(H~0ImU(S!8f$cHc-o$8>iGzci
zk8gbBd;deiD|>lGOr8-qg6~k>2EmKnu|iHCNhRNe|2_CwZyxiQCsZKf=ht@!rc|Oh
z37vc}Xp1o1RF-F!E5-h>`8^KfaQGpiAMO)fvK^+F+5G&!(X02PMa4z@3WDI<YUFJ^
z+)4Lyhn(!}rGd=i_V#wZ^KEqqfmEAwJ*zUB<SsAWASSBl3`FuiJfc+q&)LY+;zKiw
zEr&gQ<BuN`%#tZ`lXbS1mtQ)Yxvkr4jg;rpzKrSq^CuhJlU5n9y(to<<9Uh4&CJ|^
z_4k*`+oH&vk&Eb!B_JxDY?Jem`|rm4@W+D&o>$JrS<B5WudZ&2PuS%}{n_SLaWRW2
z(tR)Xmdn=TPjs5}7SnYq%F2eu#*5q(D6zWOp!WCe0r8EE_*QEU0!NgN9CaiR9{~a7
zd>f<19PS)fddBD)E$@{0lWAbDCO&_h+9QA1x-iXk#h=+m@Wy=Vzm=j=-&dcc0!aQ9
z&9Fd9hlj-6DPg<}Z{y40V(0tAMrqqm%!bG!)z3^h^ha@)Q8@gAKPeMUjE9W9RUYxW
zylQcW8(RZ1OFkDydiqoKsFSToM&udy((6anlQ0I>C#wS&c0qmGgki#CQA+tvi<N?$
zm-8fMZvRM=jHHT#ojqoH02;`UpNET&U#Qr1Yg5pw{!nPU9T`pGUNbaRm!6!wcf51g
zv~RlBS-gSQ^!x<#>e}KnY4S4@W!$s)Kcm91D((1tH&}#&^Kc>dE;x3#HeR<74t8|-
zZ6$-v8|7eHl9!jD<fMlZ#@QMg8tNK~eOi3XFwFYF<DT6tO_Md%z}LGf);&*}<=o<}
zSP53K)ma~nTnP0oeEe*NgN^%^A#c$t)Zn`j46a9{f1bCQ%2!qqJs?jm@*N7ytmvdM
zO(A@|ayUA=5RWnIhayFYBo2H@uB<$1XT0n{1q{{U<>eI?8iA9;%1YaI(D`Kdy6?LO
zE~Y^o__~%8{l)GeIAqk|q5Z(ev{O`FJ*?E|>iSIOiMKGf)jSdD-?Jlk&^fvZH*2U~
zc5z*j-s3zjHjpOgC5wr1n(QlToJMx0QGCA8R~t{DH!)qHE1CK}H{S|1wt8}+3aCeX
zttWUjv(mqFP<>}|ZjRy_tBGDcRXenET?F?ID`DK1*I&4*tH;+nEOl+fa^&OVO@Szl
zc-n0{o^5)3hW2y!qsz`nN#1sts=E@nk(%?9coe+M%)14dnbC|lJuSLA*t@p)Zb>xK
z&Amr0ci_uv8Rv41Y+p)!!`yyCZuarsh4ek<(adAMNU^_c9eyh4YIKmYHfqxBS@}oG
zq^sLkeBx?-xQ+f!l#Jd}Ia^=2{5da$QR^Wr)u%0m!+-Eo9s}m_@uZ|*kXUhyx^N!q
zNltDI4b30DF<s5^Y3E;RYU;bPJ`VG9lf4F5R4y(Eg@wq&TzV;JTY%c<zSDHMeF_#6
z_I6rY+Q+?%i~8<I)t9QuQA?7;`IikQLc+oj#n3MNTeZ0U@`#Xe^U$Q^;$l=-vuYnC
zcpS<yR_A;dEAHTEZETh>S#<KcoYX<qm6UWq#%`r#!%cB<@#5lsTib&Z>KF9%^scVy
zKm&`3DVwgaq_1Cs67%@jm}57H09Ch&{^c9EcDTDpcM{G6UkuvEQ$0POHpck&bkx+w
z9VOj@C-+B2mQVHwNk~btFwGq+Y%70^kXVW=63~4~`^jZE+P08r8+;|pOrH4m?MIgy
zce2IUvwl#AR7-vTN3R-jx`cIq2rjRObX(ftA-+<Xn;?zfDpzO0YV3ix5H5`lvKG6Y
zAUIwlw4fUy&q+d|Yh5`}b=O5xd*>X`nWr4r%=K>N5SU%u!db)SIEi<6EmhZ?ma)<z
z8{bpBV2jK6<8h`b@*T5BG%+u)i?Gx2xCB(O3JdF|<n8I<;7QaUNh~XiC@rmW)xYRG
zl4|j=v72oPKj+rE5S<ru!}i8iW%i92cOZHm&{mbfL~GXTlUCLib))b@ePhv@)5k*C
zKK~JqkPI7N(qE|`eHSqQd^4Rw#WL1tK4;v(iY8G!d#3-SO!y8df}o(T(Le?vmdTDG
zNrgAo6q@0LC26Pq!c?9jLT-!}`#E#3XluOT_HXD*DSmc)F7Co8DO+3omn(T@HP-*z
zZ(iRJ|6Kz(uuy7Y<PLnfiU=}e?)~mbFzTCpK9j*Dy4ilyQwQ^?>qe((ST9XnF8RZ%
zO7RTy>%Oi3PYKr^&*U1%-?{b~RvWs^NX&3lCoC-0*_bg*xt>TxChIgZb2uHBv{ER-
z=9)3f{nkQ4IiGSVD%m>7sK_NF^+_Eebvn=6`S1Pb`M%HZ_kDi9=l%YE@AH7GvXa=@
z`QwqE>$|fbZoh35eJe4(Cme0m1u(VNG@(poB`ic*dC&UovgmTs`JJ18o)(!0#rqVz
zO(wC@#HD?{msqKhCfcKR<Gjef0bOKQdYK`gWOnD3f5?#wI`I6EW+5Z9R&8FWM<s|K
zcoLc?y1A*SnkyBwc(E{Rqg@gn3u7xo8xeY)Hyz)5Cb<pnSq#$Kc3|w|=blr#EKR-k
z@q0SMcnJ-eTTq)Ii5d`26UtBZI3sQ${S@c)H$ZSuQTavJSlL-JpTrCy_J+mo&`Z4l
zCzDy@?&*J~eIu`Z@u@2U6R_f5Eg2Z@%4H}41AAcwYgRDVNqLHEE)Q%(tLhVza~$}G
z?l*p+O|9JboM8}C`xH^z%0o;sV@+q*ML<xmjl`v5Bw=QOx{UX8_NZ)?N3*gQxNQo0
zdY&M#g#y0$sppc^Aa-Uc4cCKK<(-X`;-#3vPJtvHc`7-5&ti2Hh3Ic3V>;2)AM8XV
z-crgJfhKO%@uGjR&ACr*#uBd07u4zQ|Bk(9;h%xq6-j}J<3Nom1CGgPj?JW`(4&`f
z`U~39P(Ig73C0FYIC=0=33sga;C0*FG~lpNL0>!2R4~#J+ki8#o-bgJg`LEWg~2ca
zb-?M##=+$CMfR-PV7@}s=i!V(+S}2MaVNxmf0iijDK>I_Jlqy>a4833x}*`C&f<zE
z+g%UiKhD1oCK7c&%b%Tz4KHbezMO^(wE!6+fgP5^o^Bb_3}|5ck5c$=GjPbUC2m$W
zx8;=BElOwdYt3+BYo{OFthRA!caDmS=bQ;^tSjz|dTpIE5@spXZ``gwt`D>Y#8v|{
z+(2%@a#HLS>pg97MERgp3GDg)j^2KZ=%Bwa*`<l)g!v6}0M<wu*72(wFqOS35TA$^
z7n|3AmjAwLy<iO)ZUFw;p2-q0fFxI@!}kT;+=)|BKVtLd;)^AwY6Dk`(YH&67{g_<
zE$iK`a1&ck19lA#(ns-ACZDLcQw);iiG|mb<1YST@)%?3m^(9hr)6LZ;+ribfq>D5
z`T1CmU9?p2Bv<N`rR>KSK9HKkd3ICJy>^*%(|DW_d7yVty9P7|hd?&)(MbI&oZZ51
zuG~Mf>}OCIw6<Vgk8wqJ`KEmggUBR95klffNE1!5x+(8*#MH7C(S?1lV{oN6@1~#%
zeIB~)7j~xTu*B8kD;3iz;~&~~{{t78GGm@i$o5XX+gL2LUUGkrEKyE$?bbYIBIq1a
zE$a9o*6yKzoQ6UtM2=k%RLss~!YO@{Sq4ub5$Q6UpBd1}oKfTfxHQ>nIup|uxJSGE
zr9EGJ$z3v_wgmx+l)&gi#&J&44C}+d*y3F2>I9SG=zW|)RAsQ1mR;<4+?ZDQIJCSX
z!0A`~%euC_jTs%*ZC(S+(swknW^EY0*j59CKlGYRR)&7s;BAa*oD<oq>T;#bN_}U~
z_?{u!eRBk%oz3d_qL6%RbiT_CRRA)o)Fwg~j4Sx{!tKki3Ic0qlS&+dAMdza5xKIz
z|L7+zD2V~PjSk%Awm2zeRCA;{2a$|PvEN<GXu9E6eNfaet>Rtv^X)&!4_@&K{*VPP
zKq+-KuQFd?L$hzmiP$`^CuT0%+`yy-M#vqIrp&0%mjEGbC4?4K<^DC@&MW~{h@2{~
zFn;(Z@)3G>?DH}JIC}j>gKG%D0&RVnZNQ>lSeItYeAbXH)m@OdhP(QU6R2a5RpAxL
z&oNT0=y5VF)ES-c?96iXNjA>-aBXn(oBv2vO2{TLKWf^-?oW!^ylN|?G^mu&4f0Gn
z=6nYP=4(ZL|8r;sSQt@Hw^QMhKsq^$WcbUZW#Qs<TD~{{3OA~t2fMC!gi)9|tmBW`
zg&7_WcdbJm_Ic~dXBVI~&7=h2DX6CVdCK_(jni?c!iCsrk>r7tNtg4FvSJDC_+#5f
zhX%0f8b46VbZRGM&kWJoQ$h=siwVOXb82w%sQR=OyyE-!wRQDRz=IkbRLW3)_|_P;
SnDHOK@zb3=s0|K5y#D~VP;X}d

diff --git a/docs/images/prowler-app/slack/channel-picker.png b/docs/images/prowler-app/slack/channel-picker.png
index 5b02a986aeba3d940cc5e058ba4a80b81194f754..bb1bf33bc04a5916646f7a8187becf8f8bb7b95b 100644
GIT binary patch
literal 122935
zcmZ5|cRXBc*R~WSN}Pxi1PRewqDBv*_uffFuhF}aXhHN|N1I{P=-nJdFQbiKqIZJP
zhT+@ieNOT`zi<9xX4|vw`(A5Z*Sgl)!qrq{3GpcLu&}TQ<>lUKU}50~Vqx8X^WZM<
zj#Z@&2^Q90Sn}^Aw7fF+7O?%E^wHq{l3!?T5GFa#3u|t^x`X@dz@=fAnv=-Wvwr0u
z#EfGxxyg4CRP7*_pxk6LHr8=?)wk=wSk2R%P;h=wKdw)&iR;^)AeSmfJQ|`@&p-Y}
ztG;-}lf0CLv>C3&+T^*MZswU1v1r`DIPTyHy8(WtF?VkzXVIAN?993YSoMFeKt}@N
z+sljsgrBKdbHZ2lC-C|U=VZBe=bT2G*9T^EBw{Z|qZCqAn(ap8-qj-#UW$rG|NdJn
zIJZ6)=BfY@k)`k>c(gZ1`k6+$`G`_s^j~!MeqUscg#-VH9@L7K(0m$2VDRI`iy)le
zpJ9>8+_hNIEgE^PNU{Vq`KnK;XN<!^s-Iv=tY2)T`Q9_UrLO-#fwXZELN}MF5P~O7
z6F<#wF;l*yFknWN)Y@|wm(}O9!zgthj(#LV?w>`ytsqFm4?v>Q`l=>K7=`VobxYET
zN1G!{SRPYSa%@QO98rfmXnKWKmPbKrbXkQuw5)%d6bNSY#=_tiB92W+1ZsC4Q`FeP
zvU#i*mWa$peqVz{@l_J5%=mBCa<vw4(q9U0V$Mf=<7S@w+}8f}ePelQEj89p{#=Y=
zWC@(4qavktjBrr<;X{Bfm^&)$d%MklViZYWfEq%-lWj&1Lm2Yxin;Fp{;R-m5@c@+
zLFi0-jtvyi<2VVnB#R;f1Cyf8^cTOc!HT`}w7?Xd$?m4ob%PEeFo3atv>Xv4`N!k_
z@AWsrvOt4wlrN0b_oL7#A(ZrC0$yTYQA<u8;}i9SLpj#(&062pk&IfxDZM+e8kYHH
zEv4Ld9+@k%B+Q9&T10Y@3rJd#k90)g;S_?uZ;B-+j?)K*`l8w8Z{)0qN4d5>=#5#h
z);ONzSa9ro{}u8Mbp<A~bN&uKdi=){tW%PETPS5P0|h<jI~<OY6~s^uLms}g0RErb
ziU)NNKSQg6YiBS_@n21vBzn^0Q3mvq^|f!@OaxX7$^P8T{3$;_|LLwkkxrRGUp&NR
zbNHj3onlCPdplUn-|yynW++2|%jgX)F>wbf>Tn8~gyu+NQZ@00(~1Xp-CSRm8QLH#
zSi@lnL3`jPj&b$?N~h4Q99B|eRxuO_5Izggt#pmokvb&~YQ<2c@5<^SW4uN3+DPi6
zUP->g?{A&sI=Vze<|%%g{??Y1%cR8=ev>8aDe8H!w{IwrE$(}^yc+g1=ebYc<S?gG
zb_;`IQt^&K>xWJm-?P2N8k^366s|NeHMsxP+2I&ucYD0B+!TJc*7t;q3-MeZ?&0Ba
zdA!c02~~=s<jdf-Y4SZUzr{G^x1qIV0mtC?FV`;fDceCxYipZ!yEc0V(R|@@Zq+Io
zuHp4Pl7w>DRMFUJmvlR^(U`1+b`$vYPdgVoFdq0yc|`X~sZw?tAnhL13HrACAtj4T
z1ExU@KA5Jt)7`#^_;X?Rj{ELcjM^k|wUH&>$f5n>IX+~12Q}<rPFgxvMmQ%)ngo5|
zpBOe)%0d%K|9v}G^WnTatG!)<(sp)s)_r@n%n5#n1Q(Ic7qp$b#A!EGzEJ0YPb*X+
z^}!91-HJ;{S>t=|xNwDhYqqn;+*JN{rm<62GwxAIr*uudBdbM^X7{%YZXb5Vq!~rB
z*A5+9Ecrdk6bUY-6F>K)ZRfrnA3a&Li|a6v&)rOPUQNKB#A7aVoGyka7#Oe4SAJ9q
z#^Erqevo5_EONg2@i4iq+@yJ9!^2@Cb4KasR}vLXf2^U2`_oEpxv2z{cX<Cj%fBmz
zMkao6dy?(?%?v(ksAb8!`$ej?rBnQ}Tej!b0tuUr-{mnWO@#@k(JNC|ROwf<t;$uV
zkv4i60?;WdpJu$xlEr{di`S9g*<M<DzLhkIlxiCHP#0vaHx9NZAdPd^f|!p8=|kMN
z*A<z1qn50!&%-c0PheV$vHfhPJo!Gt>YaODn?HGi7?aM~Q3kh1%U5*`DY_<)<MdkF
zEsg_KP_5l$rjYkoO`m442?=OPI!lbiR&0Qn<L1$Cf5hVEc_Lg=s%@OfM#AG-v+DX{
zHm6Waj_WnGR=Lso&-Tu+M+aaLn=corH0Kf?T;(+0&mIK}u*Xn_wk1(tk0=Tr1wXV>
z5%<2NFtptCwbothqt`j5(77Qh!nrz2AL+QG#(T2yj5@n7$O>@s+XBc_VObMrjX|;+
zulv%+c9@;S*DY%sDe^<N5ej_k`(vE!3Hby<{B&lsYkib<kXO+{0qhg(2H83kDAe{i
zguCVi*Y#?QIHzgbAo&>oZ{P^5v9h*Z(Sm;W=EohF*H^fnDMm*;M&%ItD1@Mhwco=u
zO7)J0GU|sjUpq_<Q?qMZ%g$y|=0blQcAX2`j0Kk&)_>Q^rMB^OxFTio#wxQw4=P3y
zr1x@fQ7VCg=`A0oi0xKI^fpSNje_5C=;Mf5_(4^{>rj<!qh_75HH+DGcp5_xH1QG)
zx>>Hb3CivtxSUVpdWS>!?>=u2PS%oKVS2w<$^!NcL~q-gR$+<XOXuHWA?-Km@6fOS
zT!k%}OVE4e&G?;tl_)jM6;J&-`>u|VlNcJ&4!5_>n)DMS;{qXA1{ttsg$9BqV*~S%
zu(X>AmogQ7*Q$71WQdiFoxD9xS<P0@v~wO*oNez0UkRk+wme92R<fF~&Zb*F0n?PF
ziyOfaKS~4RiGJ)RU@ZVEkxB9VYh@tHY~5g@(Xcw6KD63R;=@-z0}~-;(PG6QjB8@H
z$E{l;O<8&Q@Ir&aB4c?!&tnGS^4Qma_otpgRWO^#k`!3>Rq0pCBd^nVN)pYq;#RLC
z5u_`aRGoezu{WTL=lv{kCLODM34su@o|fbtMU9z;-$9^C3O0%JfKp^`=e2=o0fNFQ
zZ8g#g!N@i8DVR7557gawVrTbjn+H=s91w)Z;s~8ji^;tNr{4Lqw=8?fVajAy@~kWE
z6Dv&1keD%gVXHEO_$BC8TJ~5dVt-RLW&dHoIfG{>>-@YG=^5wcHWSEDvWx^s#fmBA
zkz|8bK2@LE{cK~?Em+RyEP!}aQY~V!ebp6EYgVA`;J(chgUCs;q}cs>cWXuw<qejy
z{k}XzRYmAvNn04~vhNxe&2K-)x?ap{q%jls4S9eC{Wg9a7*ehOFhM~-RJ~beNZc0L
zw6ej7G8>b#VI76OT0mq~S>mNvn6wt_$x-k!4C|U-5MSC`|IU>;M1nH)Jh7B=skwLZ
z!8kaBYII4MwYtXRlmQ*}+AwO_>YCg)yDF9MT&ew8M2qn;1*K_A(3k0TV9tdhIOWZZ
zfM-Ince>6;^mxTm;H|@K4$>HxFCSXe9)Ll|P~>lm?#$KS&eqyt9}4v%0@vzUJmZ<v
z)73R6p7RNNlrD-<%^IzYq>7y|2TeMe44Thyj?-Sgw8jjVSyru*_!be5Zo7{Cg1Vrq
zn+SyHa|sMG?)593<ZMSOn>wM36(Jg34~PA*IF`t&FG6#3KTuF4t0RlG?KX$Au<^;v
zZ3h4T`~A<qKk)P4O`(g5iW*4fP?U0Ta^m7DaG<Pj@jl_+PfJZ5Y2)PNB>0bWK2P}W
z%CV|f`^6o(A}H(LD_W(Q9cO$JwUrHehqz0BMM61K@$2gyX&C}m{_Bb}lZtVlqbOi`
zCsZi#&NZ6qy13vt_MM5uVO5ihE11O@ifTml4o7VBgyTK9aobQSa0=Xs{>&wEiKj#b
zPzC^=XIkx;#@TGYyKa_GywO~8O5rrFcbLmV$8+Lms|8Jzh6dC!IO5baO{)y>##GtV
z8wzL-065BTkvRLNA-QCB;4$G`{bT#609)(W<_uE>Hp_+u1*NeC^KnQT?`zY^XNH>9
zbca1fT_~#=Ba^a1ai%3>h}yWYfbY$9$y7Paw^k>LQj<xA#Ls4O-rMmyx{rx+s#x1~
zr$FA8s#HI+Qt<i?OvPZ*roXz$dxTZC$Q0DeZ1UquR_0Xl30Ukzuy$iWEiq3l;5xN0
zek(ZmzB^J$Svib|R)v&|%Vcm&FIO^Tw$9;dxihTQ_k3)e6O{q8n<~+*X!AXfhCuu-
z@e-NUg?M@2!2rGzaC>uA5fXxZ>vn#yfVn!4`TErwS&ZBm${?Z<nQrs<g+iVQx{Q3k
zy1Eh;6ny=kGYcHd>1cz1Qx1rlPsbK(zXi)R(#{*76%cchE!SJb#M8_8!TqN;&p48C
z)=tusHWpbpl?)11sFV4tbU3zMuNtpmW@shJ)|R1X`yzGOoWga6RSN}UM1@XAq^bNn
zQ%;`_=Jnmj!M>*ltu9F0S?jqb<mJicWk*n046prkEI)I%H)eMA=jR~&4MYMXQE8Ec
zZ8D{}+g46ffGSvw;SDCO&r$~J7z~rJ)sceF5<h-xmn3HQt$@W}WzaQYs-R|Se`82%
z-X+#UOSdSuokTcq%lj-oq%Xoe(x{oCd?8nituVI9r#~U5*2M2)i(`qn9ay5-7@ob?
znCSF8WF&cPvqbU^FR6)pv&ZtFO>#QDau7i}WZC7}wK49cgEx*cTn{_NYh!Bbr$DM$
zYFZkH-uLJJcdg0E$#-_gAc}riqLzbC`@Lz!{CdYyBNc5t&kGgcaa011EzYamPD^dd
z8T=eVLQRJCjwD~hf`bVtdB6T!*j&?;8bxkUBRM9Ra;CpZ9Huy6MgqF(=cWesG7f(l
z9LNgMX<zi|!5-)P3)zW&P!w?oT@H~$yH==N#OfQc(!qFTFRv3Sv{kGqLq>>}2DA3Q
zu@7Dx*ZU&EK*!;zM>#;800G_1k*IMzTjM}QMrP~iI9l%S>y0&(|5Qv&tj%T|noy_|
z{($KAe2G-yN~3zBq3QWFvUc`#x1(B)Z;-R_*Uk>IBpnx=4(UE6eOp*_KkR1AYKX6q
zz`)wYt+){en&L}<AR_NSQrCF}Fx8=R1Cr{huxVkk{@oa)ccU$}Zg%X}?B6l=2GaWm
ze40B7^%epX)V`GLJ?({vYxFQGL(7@C<|i@2PkC0l1Rma-C44?rVajFH@K$*25TBM7
zTx&N)NkOsR8y7^Z$7opag%uzfVRhB!eN_P%A5~RVC#S>xx%zR<w#UA{SH{gAmzS5K
zKBywgp>!?qj+%E*G__5}@$ULSN?2%UGKb-0cemwwe-g^p%j*J&DT5ko2_%q%Jl7u7
z&-yMjxx)fR^Q1Qi)1(+geb3hBD)cH>+WfD!rn5!7t3EADYHDf{$_^inL6tLvJrC3h
z4|A!F8Gma5i>-!DZZJR2YGS+`(-tqN)^v`<J+$}5uVn_s<dM-jhdGb20{Mwr4L-^=
zAf&}XHzIU&D}eQ@q@4S2goP^%>!b1R-Mt%4BdTCkP*YJ^d6dRuwRKUbl-BVt{&Ulm
z*mmt1DR%w1FQ58hvKU#VUDlrDa_6hW$bRAHdRpAY0FqCeakp8x#56p;-P+@uEA<g1
zQ_poEj!oGnnTK!Ez^A3Wr0L|e)T`%fgxEtz>Xo5TMuAYS!k&}cv#WVOiT|Txv&{Nc
z6DL-P`=&0RJ{1{X#XMnB5orLyy(5zu85tug9B-DO7K$mTtzqRK<xAf`?;K39^9@g&
z8EWuh<Q`jaA5SY#1A%Pileez?z#FXs_NGjpl@pNPuBNP-sks)K+WE3UlJa@-W--XN
zP#j^>5E~8`%zfEKF&J)(ERrCCNII&Z5G~#xW(R{N*#ZdZZz`xRwBKAL30&wRhn%7P
ze)giqq2ceXty6(>N=;1#!c09+A?^6@&-cXr(eEyS3QV;`3nuBFE$X{*c&JLjiTMKj
zPJF7u*X((y0vBecRFRXLhJ!$@KBvt4kbU4bYC)r;qc!yVl5-?doBc_<Ku!0}@Z8F<
zM5pXvvDFuYc4q}L(_ef=7d_Myx>{O^Wn~=uy@lOf5v2L0lcS?YH<&9Dp%`jmey7D2
z0G@O_*GNos%Z<_upsTq-EV||My>ay00>>k{Qc1%L6BDIsxpcdem_jX;LP6V!A^`P6
zf`gxlc>MyL<78t<le!6hd*eG(WpQ2g0;n6)#X$jjdeg<)CF~p=s@Wp)o2NGz-~JrK
zI(z+GNo)uN45Qq4Ia-mPjr=#mn2RhbMvvt$%L>F;*qLw|X8CFr?tr5yxj*7b-*prX
zfZIp5SeA(zvUqM(6Gs%cIu*Lm6k4)u4EV)%jA4mm^xX|P8JPz+&myNsJ{^SbAxixZ
zS{|GpKe}BjaX=3?uy}fl`CUK1APyOpk&$uKU1$*zWz&UeR0Lqg3sqQ<EG8}YF{rD9
z!X{xp#V8)W<F&rs_4U4*m!_|hVc=kuA&pff)p*Odk#Ixf*#d+QoZ<ZrrBb$7i6~|!
zlKe(b@tvah2Xu8Zv%eVVxL{0bp$XBUCF8iWCJ&TN=5&yuZ<{sUAg9Y(_X~@xOMQgj
z%d+Kj7E|THvInH<1#|hbG1r$TC-QbcTw|`UnO|5`bp=_kPFH?(n61fGOCmNG3It-G
zR?wxuex_<DosUhc=r0Ijd3hP4kd#+&x&*q_ww>?phI$>XBvOx`mM5|4J_4{5iA-vm
ztF<G?j1~B^ggGpvUugy^rf{m8l5Ddci20zb6~HN6rYfzPPxn_>rTX~X%MN<CnZOyQ
z4WB;z9eBsB2yi)rW{<KReR4LPj;Sf8S0kpd%+Qpk{HTXd80P{1JlO=mP??*bU#Cna
z&a>7QiAHVnsGr3-&NsZq6u9O}`TzPU5l1J@j3@r-=iB%1bIh<r&3pe6desjV20WCU
zyythmD9)KvWsnayU2#ENyIElmmup{i<yahnvlB=zj|*59KgL!(4^YXjyFaxQo1b$z
z(1km8-)5Q#?0Ll*(D+GwZGTg%0P$mTl3#B~a?oM6&SJh`l`Ro6BGbI)S>)2}A^Pgg
z+I0AnME<?mMk#mCe`0>;O1mDbCa>~ikE1+L1^OKv9FWMA=~v5qN_ifIu~p>1C)7H&
zX@D#~@_eAh=~<TDw2k<}!c*I=!3Q?5KB%6R4qtFwP;#!SW))QdS<Vw|VN<fojfs9O
z)2_BG`;jO(lY_ib=X~pB6Rq@WRX_E5Hfse<6;W{vdfyQ?d|d)-o+KwGb~$0Jw;c+9
z!o;jN6h|LsOO2<!ZH34d&C1HM3HtJp@oJZVhsV(&AK2~V_J1Nb$@0_$9<b2a8RVRT
z1rczZ&w1%{x`QM!oQhSBQa$1<@`IDCa?fzFM<g}7@5+P#JXzCotw#AFH^T<WvBsgW
z$DY@X(NA=NJtnHKc-<|NUN+jO#p^Z0Kq8Cg4-u>3XF~Q7!=xqZ*(wX_VkQlrmTjw+
zq^}!);VRwn_wy5RQ0pI@Dm3juC3K)}Z&o*qZZ9{%Buf8Qet`sgj<V};CTMKI-(MF)
zWKl#-m_aq$R7i1&nSI{*HbS?;1ZitqeNCqClY&e#Y?0i46dd8_DEg6JIE4ne?ibd_
zPB=X`2Y@S>U*_9W8*6Jhsw^RQ8uXN@y1Kew$gi&t0vyJWCA#VX9b?ArU$FIOc@*G{
z2$I6+v2$K43_r8FE^DlWD^E@>*u1P~8$fTWbafmK<(}srJ1-q9<(ZsaT@@1=1Q&R$
z`x7tu1ST+{+D5zj0f!PD<anIKWfJ!GrDLJ2Y;0_3`P`lJ!zG)Kz;S%LqQc_}uzf{a
z$LiSI2O>&OO;y7(E;kbF&u8I-Is|l7StchZqY_NVrP|ubi-lbP$R{UH0k{<(kTO#S
z0U$=7A687bgcCy^J)4Hiegx26Sy}mT2`+9J%Dn}^06>R*r@w!QKr+kHaGQUvsNljh
z$I?0NNFN2RTa`t?)s!gebxPd-RVuEv;%RwuwhOgZv}(WH;eis)fHoD{mYOj3moDHr
zbPF4mW@=Oq(<r5_26i$@%q#zVy?@FSpne@y>)D)i1<xU>bvV+HwFN&FsOhkAapz`d
zU@Bi67xNh4qs6B&hW&i@6I;`x`PUu^GK4lgxJ0zTrh|&x*8u(xA#1P<3Q9u<?C<Sq
zWZrMJjyo<e^oe06&3&b?Fz+h-PxzcN1`{ugSz!=OS*>o570De1oceE$-=4lu_f(ZE
zv(6BkDlWGPJ>3hzPkj*2d!dMjNf)$wbRJWq=ONWGb~3R|RdN~q<@(SF?Ktk_eOX0y
zd_}f%9-~Y^&`@y(P@*jW`q(bzJQsl)Zxd1Y6g`?RtHi%A00^Bmqs7{6?)!<H#_3~L
zcpi$0%%k;ArUBhGTCCbTau1idKy7Z+F<^lq^5O)5-Edp<vjc3|YB=*+k`Bnh2}|Hu
zD=RB7hvAuS#k{s>;b=Y^g<J5oCJ5vh^~n3~aQ=rviLa57Y&xZS0B_?mZh9$BelvZs
zu9><gD&+O+eFz@u+Lgu|n!o-U$&<$Sw)|ILh_#Vx4AVM$e{Ceqa?<L)Idg2Wfjk!0
zF6$kWiKuj;<N)|CD$OSIW^k2_cUmB9`{#IJjCY8R(#F(M(TVK-m&=pUeE&IqRE=@7
zdC8|1(77Yxz&KHaxoo&S-xB5w?e2-8JzgI`)VyQClh&Xdv+BmEd)>s?>eQ-WLo$Gl
zLF6^JGdlCGqtHIWa8e>9bsG^e=FM8;RlULN*E(+9?<&;hbS#XAcLNDuSviOpXg!I1
z$K#)4rwND)d4cZ0Vu7Mg%z5QUz0*=CA(hPQ%KG|qfGkiyd&aC5aC0r#RSSTC51@L4
zg~=YwHzN7ud|%IiKce<#67rVIjhm|qw*MxX9dmC4&Q4QSVZ0v5U;os6tOeAO<Xk2N
za&fpsG;020hh!7Lv4U<fDUSkx69H(kRh2IlYgygiipI`Dvw*sKTye8z@nV5|!awCC
zz^8L_bFaN<!~={fvHR13Jhc^zLqxN;yE{N62IACmovpC}s25~DZHM6LtLKc28;9`Q
zjlu}c%>9D{6;&H8-BLa0qm?cMSp0V)`=(3>PGyd3F|F&Ww8h>m)^6BFR0)o9C0Bf>
z))e+kLi2Z4dvnYkc{LWLMH?(T#X%gs34K_U?^&A!VOW?3npD34JEGsG0m&Bg&(pKE
zvXZ^?c%6XgU};m4nGX*i-(kKWTzU)~ezJi8FTq?>`VtDCiMh$K5aa@9d5RGOWcb0=
zo|sgA+o|$0L4U@H(w{3uu>3c^uR9?K$9l&dfk5aarH6I?fp+^T3>5pS%XLjR{YL+t
z3P>mM&ZdNE>p!~l8XSAfjD}Yc?mco0XM22o?@3o}?j<3*ZYu5rS_(c16yysKMe+zY
zxZma2_Ya+O^-e_3-h3L)6pV|D)4D-zYvM&4*4oxu4pBxFvXt*nSLQcOGTUScx<Vn4
zb)ahh2V}NiDW>yXpYH0SF;5>qmhk2bnT_x@ZgLCH`zL{F!b#b5M7)n*LOK;r;*!(`
z@X0v~nEe342#`-`tZv(1)kZ*CG;R6oCac+Dj$fz+aIdk$5ugkjOVfC|P+=+#v89*!
z_JDw(AXo4E`#b9!$F8}~IiH&XFhYcsS<!`sOi@Hp*(+^8ts?>yRRG`Z+WoEexW+<8
zs=^VTLXR4e&Of76Fy-z${t!)~rMddnlxO%&rxPD%3~2qi?s4=K(iX3?;N&!|k}v&?
zw|GocTslDfOu%Wew3wI_2OC>(dWMWO*7T-u?e*)|Gu4(uJ9{LLX%@?sfj$uajZ=fT
zm$&**m4yNu1QDFReptY;HCdLyXIs>Im@bs~4)W&WpV|ZU&Mdv_wT)(vJNSuW;Wrv#
ziyE3_OF%>Vfa~a;$dcc^V^L<+CV>}?*cUIYlf0T_sfkC0r*ZpanyB!QT5=gN6Xg_s
zqY}5s{MAoGXjtdg9AI4e&Uro9fX_BlJRmdt(Cy|r&2^J|h8i0I7U@If2CR1LF3f8U
zkj7|MYNezb?3)yPdQC+1*`0=W^)}!$?3S9<G>e`(pif9hNMnrERIqn`K2y?MTwL56
zn~Ew!G6YZ5?;_S2u4!x3?6KdMz+^FyOlm*$<3}(h>g-I1`n8mlRKGb;58n5zsjnx(
z#~=T$P)po|l>wA00KDNJRQX*tC9$Qn_+J@F;ggZMJsyoWJu#3XZ)<BShL5M&=aiO~
z^6vfHNQl*6qd+n&_0q@;P6tu|0e0iDeXF%Q-JDF=a+(Uc(<Odq^H#6LV}Dku?x5Ol
z)T&D;jk1gV;DAP(HHqlaBQrG6mh;?P>?CH02n`N?b&5%5*Ee#fuoerAN4%c0ZEMWR
zS~%I{;zN~`6;O=$D1iA~pHOEGj9U%yDp~1F<;-!^rnuQQ>L_}fRIkYn4+q3+DS<ZR
z-7+4q%iG-IC}%VoH+R2l@Y$zK5pzw#-W-b*Rin1zSFB+rlYMOjt!P>~R6}Q<l!$Ap
zlz9^dER16FcDe7;)6<iVTj3=F%|Jf@=z%r?r+$_B)!DvQgVU0jd)X*<6ClDo+&Dct
zI@%etl6=ts^hx?SANpa?+Mmc>T_b@`RtxA>#TEbY<HzZ%AKUQTfzNU9w*O66*9sS;
zU?hiXy3BSp@y(*{wdv=R^AR&~DV?c!1uC?p#D2DDbCcVCH!6ZM|Dcraw-zv8ZB-vi
zl4>&B>Z=R%$FxmXro@+>PKr1H1skc09wffE<t7hKv&SZQO;KZ?`z>+YicvA4%X~zE
z(Dn_EdS%r+Zi^a^`X>|b&&>99T(eu{n$ZeB%txv>5dyW<t2A|W$33OqC#hep8`>HO
zgaA2Agc*sq!t=AHFGo|#Iov8Bh?DoIo<gg%+w?$j7t4SLFA-=wx?Eoz$wX0NPNz&0
zpA%8>+n3vi`i7EHP&ohkc@P}z^;_Fs`DOQ3@gn5S*pwSZ7cnH<=ZpK;qmW_3vmrpq
z{-@bsEp<qNf+|y8ol(8Fv+F?xr|01a01|fN?Cnjx^GJ?_hsRyaap%D1je#-<iUZS!
zisNi216uV1os`>SHnEKL{ybz8B2l7H&(y}GIuu=NR02trurv8+enz}cRyN76wgDC2
zO&+#=O(dkP2?cg$oKaP0N4{1CI*^le;}s0gVkYg^UHmC<arNW|1?N2a^~-u3s$6G3
zGdMH^RC3>4))js)2Tl^+-;F3Za17q=+?+fq95_p)nbAKd1!K4RUAmkf7_WA#zW3qw
zxW50N21B!Nf1=HQ8w@YipaaIZ(ne~_<YqdyKYRM07B|~{m9XF%GO0_=ND^`R)?`4!
z2A%^IeCV09ZB~0_F`*|U(jTWyzMJC`kqzS`Y(|*0s9o<ogMn|@)vpSl^atB2)ab2A
z(zO&+$y9F)3xf>C@wPOXl$&-oJoxlgI6mcEOGIp&_zl%eXURJAgbdvF{$lX!9}F8l
zK4oL}pFA|i{XHL{<!{s!NyFZGvF+VE4r$(Q9~&&y=K+9bs@Cw_SlIK`f*L&_Q8>*v
z<fisd9Bz+q0(DKR`z{%j%JxSW#5{p94^67d5IFhTpDb*^<FsjzOB^N`Lf~U+hBKs`
zZc=C6-&>i^O8aKdW0w&SPZwJBODO9_YBsjgj>f^YjRm~EmC54}QeBV=OHjFXzK|#}
zSPt7n8~!m0_Jq;eD+!k5b)3j9U_FMq-qzf)tHQS$?sb&(Quf!>ST9SIbHk5wpU+ZF
zz9dLDwF=|fOc5CK14;f{z+(080o6*tub<05fBsBhimslpoowm)^*Dd7_KEMVFt^Lg
zDJM0x5rCuW+5SV3<{KUwoU+CL;4Mk$;Av;gi&(Rm$0N-Tu3iYGo_(ppHp%D@ot$78
zuxzYm6+@~e^ejZYvY~OCU^0a|Sqf%0Cc`6|!YLq#Yl1CiC+Aag4y{(q&&0~r!f)eq
zUnYcXM{3gSHL4R4&URC!Fu@?pYqOC)Zfn?em<A=g7p_SA%*={i@k|yei_ygY&gEF=
zyR5Tj2sjy6`pNHXNO<l~W{qu%`TH!i`pTA2Uj~qKW`cnh0U!)OQG%qHh!4L$YDT()
z-4iSah6hcWz8XeLi8_XF7JTwM<K724TJz0yCE~m5XF(KZgtQFe8xn|gVO3WotUprX
zcgGdWT!-Xmo!u1Fq4`nu=J3=`cCeQB@cbnpaAil3q#o7-T@!#ClD07A3TdTz<Wg%+
zRXoK}vJ>KH%T<1#o^H?A1q>SW{&+ZBmF_c;!{VRa`Y!UV{%)5*O^fcbYBFkaC|y|B
z700;QatPlF@n8>@tN#1Y0>1&WaY_`G0P39R4d|#pr(H_pTQ2Obc7A`r%^kpkVU0Pb
z1V+N3pddgh!<;YC|NgiJe?N66K(oLBD=T;0iiTkTAY`^hIY4G8XK9lScx=nzF*<<S
z9DI94VDKpXcUu(8TmhgB)>Gx~b$fyb^S&2{{d~sF?mz|c%|U}%i3*j7x6M!-%i-%$
ztknD}s}Jpv08pAugsJ27cbIO)B7nRJVWTw?s<2p-JUp!^)?J7x;kO!CsUf=bqwK8p
zbmdT^e;D69Pb~c23rIJia9wiQGtp!SS&G<6q?6ps4t&CrgQ~SnRgg!sbF0oN<?Lb4
ze7WhA7p>%-M2T?(EP=7O<Zr8yQz|~o-+P1w4+d1CXbK+Njlu1I=U?VLsQ;aR;Q}g0
z5E^xKd1A$+@{IQN%3*BmUr_OhLx3l;=s*LEjZ54Q<{4D8TaE+71FnAoLKjf#M$w3B
zz%j-2+<}uHQS9=kkp@VoY58OcU1X+&qIp6J`FQ9?GkNg|JpdOp51%}ia2*FTd<(}b
zu{b@Yev2^q9(Z@lwWsFMKc~&-w0N1ol$LBxQR4<Qw02n4a6}!B*V0@!UUE%Zrv6z5
z_ftG?B5ENyqU5#!9eD8%_V!$5bm_png}*9P1pp#EK$#m$q|aC%F7`gMUhlR^$<)8U
z!CmM^Chqarv&|+>Y@D97Q+eAp$a3h%q>fF%WM<>FmbE+3y65Ex@g+7>|1$~^IQX&)
zOQ;%(__04Z6q+?_U7p{d5oRwP&7c0!+BU(i&Y#L5Wi(c?4qg4VdeR9iD^bi&Sqq&x
zwylP<@3EgAidRM86X6l{XZGl=48!Z8ox~cJi>56sgX@D1+>WvE22$z<Erb5G8D3C@
zB+xUg(fdpClc+W9Yr4kiX~=A;cA3zVnK*XYo63B97Ax2<X9a8zl42H8F)vt0-7J6F
z^dbb$LPN9`_Q6x9;FCHLk>_t1!oq5j$IC%l_7mqyG8V^%Kgt>Rj<+)i?rqv*)Ap7q
zZfl#igzQ{t*sAt4=+sIxK6{H#9lx~*vAt`}I1;6n`(D}G0TLmN_u{|vIwSXHh@Tk@
zT9X+wo1nQWpSQ^#J^9<6;jv-qY9<PmsB#Z7$E1Bc9`^9}dHqbW_%#PX%${A1^H_h5
zNMj08Vd~BKjU`yzbo8IAQ1al~uYqZkKT6|YJT}#&`yLo{u~7SbqUc=_xqH}4HO)g@
zSQPKJ@wImZC&@F_-?zpZiTdo)&J`<GD1AlDr#)`PS`*FYW~co^dAsbKH?_XvfaA|j
z1WqW>yuGE|cBMRx&!(t(S3%(>)Kg3xrFuHfEcIt711t83<^ITaf|!*p#V7Qu<bX-1
z7spnAz7O+y<f7QoCNsMJa9k8mslF|Eb%@}p?(Iur4pT|Ie+v~XtY3;Ff4#LjMhRy5
zCR(efn{b;)UybWN__O9fR32yG4a3-`+W|R+Tk-!)G+vNWz!D22Q0#3;UOc)>ONdVy
z%+V9}9>y89v$c7~`R-HVON!m6kz^e0e~fy2AEs4YuEr900}#`$GijMjG@evKZ34~1
z5@#~Q$SUlY#PSzGo|Q{MNspw>?9I)sq-Ep&qIg0}7H4M1_^6KGBGQnY%iPR~eB($A
z)s+!TUXir(G(C+%-*8MuQp?TWdOGHYfKZA0S;O&kLu$@*{qPs2@p=;dtxJ`0%atEK
z-1WcR6Pf*A^a*qX=Jia4{FBe)Cn;*6)Z?$TYh5_febs5D*zg~ot9&A|vHx;QQ_mH7
zKH!UZU8H?>!?6YF)ujb{W)|o2g@2Z~Sr&CUceHx{zBit-Kz4$BsYePL+<F>6#m@U(
zxBZUjHsmW2m`h-nnF}#jt~_I-StP>vYRh~`d~0G~F|nxLigt-IWSKbpj>QO|n4V^c
z3eyaN<3<_(i&lZr1bXQmvu)cQFjI`59WIr=p`3YxbK!%TX=cS3bcjGy@>3>b%UHPp
zt&t*Bx4t*JR^ZjESme#oD@5AR>4?n0U2l+9()S-ieHCw?KBZ)Ehw2U2fBYMQkeB^v
zZKly;bxS78l`i;(`_D;TguKKa`SRJksjFu@O>@_$P~!2GVvV1C{A{%Ox9V97>RByT
zi+OrR&aFWyICV<C_{DLBfi`oxom&{Kac{BBfv90glSh(*Gap4H`V2FaM|hx_>?i7z
zJ*TeFW1$v+oTsgY5Vu(#TQZClv=#LEt|$-_w;74tu8(<xh3o0ypp^YVdwfz@t9@&B
zsEXT*Kb93R(AQR6$8T4+$Qmd6<XG#m`hbvaH4WI{qI*Mv70o~X4#fZRamA!Q?a4_O
z7!S@Vr1ok56O}G`_`8+)wzI;^=F5!+3P2*!@9W1?rtDQ!eFVZRoAfM?HN0WH_CQ^q
zp9u7qWlB5ft@WoBYL>+K#xPPtUOIn>G7salqxUxT`{4KP$0;25gn>8KA~cFs)azxI
z^<+f(#;`uUzkg~|HMzK3+Ok;KAB*84e2Sm0JGQG$&`Dc$a57Cd&4b=NEiuOC+@<p&
za-irs_Z}|STgrI~{(Cy`m6T%jkFi8zy^pwtQm#C08<9tmm%t^M{<7GV!wa%!#ferd
z@pxI0{dYtzo#c(oU*6g-*BPf;rsDpdDZ+~NelQfMQh#+Pq6~()6P}hkSf9SbQhBW&
zz9(16(v<#a;_opfGqWGmQHhs_@bU`{RN*0l>YJvc0zaF6=hmDyJ4+lgoG6k2v<h)k
z5-a4IBjb`R(<2|e&6m!l82M)EY+#L3V>|S>?ty;4P99-~A9iB2?yY9FyWi5E)bW;g
zhF}X^^&oUQ9VYbV$QOdp+L{>ZPAV{(E45Y$AhaOfB=698shmq+l6QH@mz9sXt8Mz|
z9Q~tW&pw&Mu8Q%=luz;l6oZ8%UxGXB`gs;tU2nQ^XXSQT><8B0V~kjDebn^7&{KbD
ztWg2iE(maNTZexoK0;2wE#KR|jFb0Ps0hA&AunRaN8N=JcASt-NI;n62|f5`vEb}U
z#~Vw2j4#79WS3l@@rK7>GQ)Prd?7>FYS}a9(IX|yh>dn{?0>_sK=2;UHlzDV4qt>1
zhR+#?m!Z2ZS;^`H*U||UWAs^{>GGoqIwwc5?da>3A##OFX}N;IzkB5>p>d6kI|qKs
z+Wg-5jAu8eJWmp3DE=$}s{pcgrzSO1<;~A4(kE?$pH!T0a!Iz2$0Mi>wAB6jIv7kt
zWU1IhX0?u%8N(k7Wa)d~tr~e4+UnQCHEwVI;e+m?^fofHjPisd*r#P((d_P*i=?cf
z%uEuySrYc%sc%FvvE+E=cN`J~;4oveX$<Db{}0q)!SU|xn@uh;`EOW+@<jSv>ht64
zr|(ygb?fgDD>B53JZV1q>^dP!Yhxs0T6zWzm$#xMCwsg~`@`IhuX&Kl%G}~bMSQaq
zex!)tC7B<m$tpg*7-(77ga6g*N=~h}i_Myl2*05Rv|!rSUPe1MnxME4i|GAy0H^-*
zj6f#`?#2Ga)>aI;${)gtb)o&#M*ZAV5$sKze0<z5j@*O^M?6cX%Y882QTpRZUt*Ky
z2X-jXuX&%|nU-P4p5!;@C25jox-?VuY4Ny6_g4jD86L+a3NE$uD63EiAv;|1-TiS=
z>SnLONeAcQlaxGv47D+vkPdq%GDS|(r0vq<fP3lZIhE(jhZ^CZ?;tCxJvV#unau9q
zb>%N|N~335n%W#MOlaCb$H_5tlL#HYk>g666`tMTcz*j{bg4nZ|Lq?lhLsl6fMt*e
zMG5E|q=*lFql}Viz1pZ>jd!j0so{9d=V86f8W~P_aqm&naqsPqp@JrPfqT5XyaQQL
zJ8}W{M{vlnU5+Yn#C?|i_ax7f31QguijhXthQHLg`4st{n3>TMq&+_reZhY=)4~8@
zipqDm_axz(dX`Bi`5`c}i)p_n9<A*mH&LNEgBOA9-SwXXmzw;Zk-)<GNlv%I7!3DD
zv!{GUobToZnb1$ke_XlH5^&D7V!3KM+nS5J#T2DHSB~&c*m<eFnaz@!dzA>Ouq=(`
zn2$ph?>$CcTqfaA=lQ|e&JG%VZ!yjZtNHn$8Yyvz#$kygxv+a)uu$bm!<+DDilr2^
zq^Fo8jPD6_G5dA)pWN_wg|u0^==P%Xmq?qfR58VO<ameWhFfd_qPR!Z8IU|-1$Sjw
zXi7o)9B<#UwRZXUxH9eFtFW&rw8VL48uP}*T1CH<=w5#x1ot$(`|y!!_q#xL?m@*z
zsZQQKM_Z>ut;#RCY5K8O1F`i^+P-G2q6|s$e3M!Sa;AJpK#NrS|Cy&Y7Ka$Q3|3Y|
zy3qX*TTd-hO(`r6s3-N9$^HL63ju%gSn<=Jtd50cP4s7)8hE$h;s0EU70dY7+k0DS
z`S}TUwL6Wjn;(EcyBFkliLV88ynp^==BlZ#9?0MlAJ2xtY~u2|ij<Q%HT*Lvj1EM+
zZJutcH^`||Y9!+XAafNpZBR$U+4P03$?SVp%z8!NAxWeInQkEA(lQ4j&;1X!mfim`
z>Ur%y->IBdwSGn|6mYath8?M!`Nq{|Ka>N|y{*Iz0np3fw`<oZQCp^yRn1=V{WV?M
zh|g)-%mW(b=HYQ=b($}@%wu3nJ#$$fuD%_4h_9&lAG7B78u2|3g<Bjp+p>HgEwo&D
zjVEXM5HW+0xvPBE(+x(K5yk5&!}@5{m1f=$$0t&_8DKSysE6cX+r4STTiUYzq>`#Z
zsiQ0;W}n%l!(y-@-1}th<9`f~HF%J72bFK%h-WwH<k9TX=vY=<TdZxbR`2sR@HTWv
zc+A?P*ei)ucYnH(N|7{T`NpvJW^X$I$(m%NRwy$r14?8u3>b<1K)@a7V92jsrq|@+
zox(_X`|JF~u-4<ry-|bueYG+lW#ln1%n<dIPbF_CQ{TAFEXQ+aab}{?cazM20BCS`
z{qH`?!tVqPX9?CGFF_K8$2Co9!P}Zl0q3VI`o+Aa%P~TylTNc69w#@T5&^9uy>Kpj
zWYfa&?Igebg!xkLDtY<*v)4YEE$vdWs#8V!zRN45x=!<Rl~-?<>7>`WkY!WvJ8$cj
z8cw`+hy5-3lM_--jOUxq%@H^GHC##GXawTMYFyUYG*)YGi%Q%ENyhi)U4IRCZWba;
z_vazaJM#L5bLK<Yn4P3ZK)pqw1~w7Yb9K{|4v`wQEtkg?dW~n@S+Z^(n$RI$Zti&a
zMBx(Hm*`om_xaI|`>m!iqP@G@<Ek9f85*O*y3~3rcamIoxqkzCBnG+^0<Tg%efmt)
zyIf@fUE^S5Bj~+DAaqR6G#vd*)MSw*%5W7rB;YisyqZ5@|1c%KaM*aGr~Std^Nuyp
zuyK>eIyy_=mE53zLvCZhG!Uo13qnGTl{JtDx!o8{id>o+>yOwmZSmP14zhCNjBuUP
z4$HFf%UHV~Bhd+iNzv93?&^|r7-WL)mkHgyZhng^Znc<Ks$Z=xAD!8_rL>OUrRJr4
z_#CbbuE9@nV&<&x*qsCYYzyisU+{U`8P8y+)Anih8-Ud}(zu|j8%;_9h%p`s`@1BY
zm#X0Av1(6oZ}0Q$));V`*I}G6wKk++rk1h|-$g4dx>`R{hY4XK<a<OJMH7{Kt=(Sn
zbbA6ax4de#CDq`3^5{mY!C^|wr|{+(Z?I5Rb$!ZI=~B+<uxOa|>KHPkQ#M*%z$fB9
z+)O%xB%eOF(%|fnvg?%XevevsQ_Pb~yXgl)c4#f;8|9#%@5inr!#FCI3T*IS2W74-
z!=elF8u63AWxdkBNfbLl&D42*dT+Z(d9%xSJFQ#3;&VNLja0z~wHD3k{>sum_ju4&
ztw3wDvo(k<(3THj(^0QJ#*N~D<JZdL${@EQrKHf~Ttfe;=FNFwcsUS)=Rs(1T9uS|
zh~r`dRFC+{lks}pDctkJQGN?f{FH0o&9k8oAk5{>!W>A~0Z25jk}@(f$hnp^@+WCe
zED_U<{)z|_e-@)vPtQ+o&)#?yWz4OIuga+3H191T{k$*nk~RiS{kB&wCGPn&ii7Gb
zF_vONah{_Up7pL)svNgYgtaYpSCiF+sxs2jkErKwmxHb%!k8l6Cl?x=%X~LI*mT(`
z_&oA<BJRI<(LPmf0(}>HOdUXt92xlwe%Kb_{w*r%*05IWg#_9PZjv8*t6e6e98r0Z
z!o0M-SdAFoH@rIER#A4CZ!vae(H1(_wi5`rJ!rOFcYy?mnlu5^$6>%wJ*#4}y~Tib
z&c0cf;#yzA;b=at+p80Dj>1A$D@?UZ*I0V(Z4Q>4m?O!9Y(amsY16)B_Fga?3%jS;
z)4thfomiCmjhEgjWi4YAt*GDDPsxx-0*o&SDJ3PPkg!#npjCUcLxyb3Q(GGwX&Y+z
zTJJ@;W{H-27PpOk#X;8AevXh|^_R}_We1IyUIdgX%J<mVc7ub1zyA7!d>jkMM@dxG
zRbDy`;o##(R+x&77v|a4QYs~Tj(?aaJ;en<%aOMCaj=i4)YppQ9%VH->ec(KEd^~?
z-6xFvocm&x^To7Ul~V034fn`yP~i$^bhJvMovf_vxZ*%EX9500<EGPs<K(j0M>O1K
zowM4;LUnBcLs3=IH=4Q2%{dooEShy9T{*5+%BH*^kJBAKCgrqplnk?fmr;o}t-y!=
zS>){~)#fTDDo>j=Q_MXc4qxJ{XG66<Abc2C4>~;9pW!JS?FLBm*})>r5k*2I|BG$1
zL=`@CYbXvnP)dnsfO!smERtL337;sNdz&8n>cd_yQw;4;c0DsN1W1XKu$V%|G1t3`
zNP~ZcC+2;K)f5qFkJEYw$AW2Ip2kCm4BJ5G(PC6P{}&oydzC5TXIYtvvs&l7(hF^0
z4ojQrrGWTA%dvUXc#r!umCD6Xj5A8h%6hlBSXFWDeUTnGSsM~?IKF6fwdA#(aGQRx
z&Sv|c#19t?33pGNhjIF_=*dAe9*&!Z3{DUq7^B*J&UYCOHKJ5`-oU;R53QqD*D^y^
z>I5o8C$zWbKqGOTR{{<{8PmkPuVcp|4n%zssog_lHT9mUeEtgd_IvqZ=Os-#g(Mei
zNBP$#Q}gB7Z#;te>FDU{4yJe4*7i2fv%a)&+|GUX-Q;HlouTAmV-~YDyKiB!X5<H4
z*_x6hWR&RrxhX&tHSbG5MJjqiq|iUtXWEo`(DHL`Yt+J?Y=-3`)Il123fgF*>&W;Y
zzkZFdrEogVp~WL&N!Ui>i1wBuj};;)x3^(WdM>}Gx}=HY5?)&M2LquwKF;!_r*3y7
zeC1^T*OQM4-UB+JVPP?}JaiKLtp;%!b4fPiR*El)71>HUq$3U%s)L9>;eEIE1LjAc
zkv!F_(z2NaQc8JDi~#cX;;8dRib<!!V0m{{3YafiY%dIRnQ>h+s<+u~6BVv^nj1`6
z<5K&1(>iy4xB%JzjPX$qWUgp&7+}2N_~Z!+K+h)?mm|xK+8W+3vh!&2^w$+-#tSQ;
zx9+o?kUsNZ%xK`a;Af#p`uRHX6ANs4LTi*67}Wqxq#hB`%oC<yk3`Vtpg2W*(HGOO
z6Zf4-aqpGs+7ex6jd{4IZiqq>tyqJV;|KL}ze_^_C$$&G?rM8qD0A&zNa38WRzO?M
zel>WV>HyC(UC@KjYe!>UC)z}%7Q1yHKID!=m3}Un`b=%*OHwhZK7&YMjxTu}Dh#E-
zbDx2P4|!om2?t=L&~UTv`rzi~#<1>Czr~s+s<Ej;uk9Ke9&qV$FvtSa5?TfKCH}2}
zjV6G*fq;45L+MYSekq=B)<`T-3fU9pGc8GPvvsRJTWs=vLdfE<Hkel89XZJootya&
zh#aq<q-)>y_k)31sRFI-DzG?c>{TjCU%MEg`{bGV>oBG_@e!Qa;)>*oMkP}P2%?ZF
zLMlGvmiLdwFXp(UcLG|A=r4xx+NdcP_1$T00^U=kSf3a6W&{Xu&p>(r&cR!17<7Bq
z^-gx2D{Nhnth=l0-v=UMUn?{!SPtgIiS2TZXB{FG!SdE}pZxqXTZ8foH+|dj5?N{H
z;j%YC_rq>~)^nv^-0#;~kf3C4_zG<u@c5^JiHbONRwi>`xk-L9z-ANaj=0pt6k)Np
z<Pj8ULO{-UnDb;eYOrp*zGQjfUlcFKqyMtre7WV;!AQ46CyT6X_SqXhvy1QT3U?T~
zr1<PG5)uT`iispAx%`kkGO}b6>tlE3=w*8K0J>jQAYIK^t$bVW%SN^)|C6SqB<)eN
zu4*fU#OwJeJIBOL4Z(E_l8j@f-R;Zh7;B1@l-9hD%<6eB!DBuQAadp>^R0)mAtA_}
zBymTW=i0B&3<EmA_*__rg~E}Unb{iGkv{1|BK-W9C3;81T1<2zz@w1F`$BHRKqspa
zk925okVUCbO=;nKiEjqULz<usP0e?WCg<7ygaj{%?*%c%&_q*QesplWe8Aj_4~)IU
z(1@`gXv9a45A7d!bg?mqmuS?^Vy-+{R140d@Ae#%vX&WED^$|k{+OT7lOHD|q~u>#
zWcJU06R*nD+7c{&(xsT#;t6=(PRD|9{YBKpg;&${NWK;L8XJGqPzm?_$BzT>g5~Dt
zo2w^LL>j<IMU3@G1Sy+}Y~BHz$MSXB=b*4>LLO*<Rwwea8jFo8b#B=#9_?rRaN_h2
zxX8e@rI8XOTr#^n<v>rgf^LWVX3}h)DP6vPIjNd%#Qvt&>=9R2T)|P}ryKiK#-Xiq
zDIkoYP$)T9rWGaVD*VO8t~A>hr?5~@odwx+U8sHIi%ywGH`mmY3BR>~YELz_zY-Q8
zBmMmbZPBr{QBiSm&gJvoEh0<*Y6G#4>+gqYz3KuUvNWy|h4EA5@e<yZ-9C&Hv)XY@
zEM`%vNXYxTxj!dBg2j@gTWpj>rxpIr%+it!_Ns@Ul{;dED8Mj1_BmGyqqy0n;<1Zu
zgtND&oSgN_$K7P*sd8iWeLCqxyett{7!Yu|xi4fN(P|mwNXfr{`}Zh4F2F7VKHV-#
z1ckA-nOiutZvH(Am;IJIy^gLe>4~OU85rVVe?m-bW|oIdRgh2k=n<vJnp3+jJssUY
zVevt;t6$r3sY&9<I?k-i!NFl5k?oLipv?xA7Z0}AGA|gLec*C-7M;jRK|zHqTT(OG
z@>q8nfSv*YK3lBZJib}Z>o{w46K}?-GIyPhb3(>x++^lHX+LAq;??Gip}f&{?<_xX
z&?si~B3Mz~KZfA@`?_z>lxaq>uA@<V#3WCP3}jD@bGk1Pi$T7gEK-GDtr`$kPsfD@
z*Imml1#N{SPAXE;Q<P2BdNqeR{?D;>yvyxU!{)IQe>{0kYS+XO+$#UDVceK(R&D5f
zVGOMfrkS0aTk<A8^zcjOO0(4Ic1H{hmKItu?P<EiNO<$62ISOuOuBvCmwJ?tYE3Dl
zT7BPUOh90JDc-DG?WA6Bk#ULhR+TV_MGp+4_$PH)zKo$2H7a!UkH}^j5Cfg@5~ge{
z1t=6&7!(~$MW*_%Yb`}<!K+b**6k~#w{s22VAkOVQu_vJ$olHp`hXRs5PJAu5nGPV
z45udZ7bUd@qkLHS$O=^Q;|fnN<cjM2*G=oNaWfcz;A5k<f=_XIR04-v6K(6jyryZZ
z8<&0+s*GytGDRVobD#4{5#*pAc)YcY86Zatq{P4C;o1Bs2H^zu>ZE-jl9<6=na^SI
zcxIgG-qraE_-qfUdm6715|QL{j&U9A&AncN^UOs2MS{mR3Dc`|nJk^znJA{DCY4r|
z{YKMMDB@%S&-4236&??)`=_18v)i>JselYLhf%?Fld|Eq+b~!--^Xieo>R9}E9vf1
zWAzP?bX-9<rLI#nFWM!5=d-zIcJAN9c@zh34hs5s_DpbL!SvOO!^Jj=%k!TA#AoqY
zwNu6D0{<_dK(fF0?%iu$cH?(MLK|%u+-yPjFBPh3rS<0mjD}Wq)|F-e5rdGFIwx$j
z`nqi(Lg0LvS~7n!*o9`kpIRGZppe4h-F3Hl4l+*%t17;Jr==$S5|6CRMi+7K>#uj)
zq!l9@bV{60y7?f|>WeLBIhp74Gvmh=g!fftANqF;Bwjl2b^$`jkM3^2%j-s|LQXrt
zk3LY>LmMFwNH`3pm0_1A=(1K-SGNqexNb2fiqS203chBud`m#M9hHOI>U>*nqB=!%
zztcw>a4AE;l{$OmjjM$oL3RG|pu>e$YBDl|GM}MY&;&K#HCKB=Je;q+ecpS0DC4&4
zq_8HAZ96&j|8aHJaZzsF+t-7llpN^}QMyxFx~03M8>AaV1f;vWyK_kC9J*6Mx@)Kb
z-hH0uob&uXuYce_Gca@C``&x4YhCNRLZ<IMUe{Lkoy$RaWoAsFy4RcMg_rwk!zjBb
zGIrx2&^=uvxXl;ZczYd0{C9lFfN<!*^UJ+p7yDAm*^Pt210D}IoXYg=+bz>*pk{q@
z)-kicKVANpi`N5<;J(H3KH%K!`os1>HiGx<y%bVeaIn<ME!tAuq1(Yg_O!Fp^|;?t
z|G+pp{b<7okVvHQxI)0*9-^z@4xUF&xSi(>^0M6XHoi4w9wRe5yCismp}^{@W{qim
zeLV*&tK~|Aw|!zv32y9atB)?EWIvB)s+jV*5;z(sT8_WaB{ET3_4hB0jL?H(c%5#u
z?82<g;%V(`nl(P>v+JJ0sk3dS4-nPJ3~#lH70C(m4s{(bJ`>f_M{NNkm{(^!&T@rb
zu}1K4h8~}9pYavf{$zP!s`Wh@Xf~UfoAW%Y!;c%AG#^XikNo=9**BFGw?9CLaIVtl
z_V+~0CLIkdzfjxdApe||i>ol2Mx#pM%VVVH5!#LC+x&dc3`E4XIzGNLdYB6AWmu&X
z*v~1o$BoAImkn{@7A1r(&UUeHI*rEnrj_!p88x&t(MWifJ0~U%_ww_E+C|mnj#k<*
zad9OqD4gZ|3YOxBrNhTJUsxK0)SugNGpE*ez9@JJddKasHMx8VVJjSpV~|KhlZB2@
zi|99dVf$hV-~Pa&*7z<Ej+F#-jn(lV3OP_!S)OSNHd9B47mO(OG1>ii)#jlhX|LUI
zx;Np_lZZHdhgnBDA%`foLp3*X&a=7sgMa1p-S$}K4uW!tip8y-ISD_vvwpQoSax${
zEYE+IWTEX_?00Y9jz1?PC^|V|z9CgD^0e9szdPDz`}9*Ea{fCXu6|niCziaz$y{il
z_e@)Dh$zVIJuddNd+TpgROuWh#Zvj)cZDeAJ5=HDcKHk*f1gAGLc&M_UIQRCA+pA)
z&6Vi}{a0Lt!(zt1;BXJWM;P@NzfD7)RB4M7GH&&c3=1Q=o%<4<+xIbpb83MbWs~Xd
z>PWAR)_&qwuEZ-I9&QGW)-)wrpmRZLA0hTD;rT-o-7koUh;SG+M=P0H?ZzrVszBo+
z#Qm~Y%1ZsQpQ;xmGObR&KBq&_{7~G3<#w^vSNXzN)cWl{T#TF%th1?emBo6p$Vf;>
zQ@Q6O+$f{EtsgC3@$)-e|L~<tpq<VB<~=uR<B3iZ8XkNKdvMw7IaSIZK4F5w%~%gx
zJRe^VnY8;p3OLMv^7R!YczV;G%2}5GJwf=FZTiwF8_}kK&j~Ubn)kzj)K}}?Cj=GQ
zzL7DN{Bjn%`UrPW{iciMd@HAEkY$hvIAv`?GN(s-PIIq_`8fT$RxDz-N76X$e%0(Z
zk`mzIHMa<6zPF8Q-AZ`0nXkW!N``O~cNhH<`Qwi!9XHqrNPk9&*=!9#Dz_!KFB8u=
z>{@6$Khq``@+^`ZyRaY`uA6mze3&}d{Xjsb|1m{?@Np!G?vZ*@Ty<`b%kHHYtC?&n
zyZ3CX_Y3)?loSObd5MS1VKeBxlD?7nD?&D($@$aRw}^;^@<exbHyE^qV`CxlR(5N?
z;*XQ_RkqHbKS!yVZQneU7jEC3CqmGF=LVtog-Pq&XsxJ+twP_3h3d9?&<O}ctPa`d
z2Ax~kkj}Swj(&aTgh#x{>3eu8z3QXz>F48)VQ=%}N}Ho6Pz*T2GSb%74`Ahldl5P#
zcqMo5i*q+VSvtGzi7O4B<_6utNb6iKJI*L3PL}MJlU_S+F$uVw!E4PTU9DGSUt~?E
z1nM*G!BoA>HdJjt(^74vt4@|n*s&?s%4xd{$`H&|ULG!~-*%0rcU*VHYX=4*k_x!V
zrSfI?ENN(HOqb|xFU>JY({26Nk_8WZTd<H8^F}uq9)#!;;E27a!eq6Hp$4gC{entA
zy`Oq@Sy<Va@yhE)=zRi?v?Vn=jZ#rjP!R8wA2{_sefshV<M)5_=v|S7GED^d{l@xw
z+)%B_@JH^-$+a&)$dc&qd0W)Of`x=HiFzHTih!(aZEbxMK=Uj)IeBSmN%{FqEhj5$
zPA%;6Qc6L?OHIG5teoaUWQg=;NGVWJCRip6fZc!UYXCASk4Lk|j6?M6*DfwF_OOt6
zP*Vhn#nHxLInS0Xw2JN0F1FbyYU*@4ZoK7_iAnDoC&P^Sv$V9d_Pbllc!x=(NzHFm
znG7=BVsmWNJI0GU%lV#5Fk;>YE2&H~3JRke2d=+F!~`|9Ez_;9o4*VUO2WtAVe)9+
zh`naXEj*$t5dHn1J64(&(kZ+0tC&y<q62Zrd=KK*jb;!pDtSn)*a?D$+?zLoU)kXv
zij9@cu4=)0?YMlmPsUYCe|&l39t^k!UecK_{&Tc_S@Sb|0#zEx8V=jhC{tHPj4E!b
z<Ujii!`W1#!EA3V5ctD<AP>|jEs0R^{rJ9^Mx9E&#qgPNYhGqGoG1Ico=9f&<Ni9j
z%OWL8)j`23Z!8Kw9&fsNcCmUe<g=aBpBRLMcc&XKEC@!X5rJTYat}MC^GBtTU-hcp
zW+=FDhlLgYW1tVVMr2n`zAUTBV%riBG2L#5opdi~$4ZR-51jENDiHNsXe?8$xw&E3
z1wLyFhX3L`?(pz`k81FftPQWoTa4VFk*k3YVE`U-Vfnu*7+Kq2_6C`CN|SNT(zs7g
zlJy%>Oz{4FYaT8IOMIDwnaPvnOy~B4f88=qCPRy!5d3r{H~IIaSxlgI5kvOBlIl1e
zr~`ffU#V-d#}4ZQXdV_9tW~3n4^jW69(eIDP>IY2j`Q>)wznmNesR!_i-%92!=&Ki
z#yS-V?vh-+G8DEu^pnf)|GXXwCwY32lfF<ApJSX{oV+0$fF*m*vFrEb*7g6si~%1$
zkA=Fy>MPt|SuV88mOnzEHvdz9Q^e8-*LnR-E`q+BxYwo8?#C3e{EBXYoA1R$ggCpN
zcL9$ZT&FD6|NFvZEAKL&%GuY77JrSCdWVXo@XV`uVdo7$fx0eVSbk;G$-stl(3Y)A
z{%C^*L5bAH`my}lg~J95<t8H;UP_8evS5?KTp(&pC;VS)(wDmYnrA_u5Yv-ShpoQ1
zwq&Wrvz2Yrp|>u7u9F<2yjgm9P5kE>eC?h~qN0i>icLlp7cn?W;9u`%9(OiJ)^paK
z5xLS2nu!-T`|&}MxCbxKuFb7YGCG{g&y?@*@CX%ug?A*z6RcKibl|9L-}?=tn?6)d
zmOZ`En&DZqmzMpkvAKXi3SA+%-V>=njMqto%e8#Ak;<1(Jid3jRXbT?di4$^E_0bq
zCZ6>4bV+x6d5$C)Es}n=FnM?!CLQ$4ai9C1{>Jr1>9VFpceRcIElWfFZ~gnv2e<o&
zh4&;L8pf^;H>C`MY+5N~-u1iJ`{h*K0=HUQqwB0qa=(tkldTmG=9b2$7kDmv_xx9F
z<qvev)E`~*Oe*N<F-0!^y#-MpQGI6eGpF>kTDE&D9($ezB;2<6JN6nL?MEnh$ZVcY
zR7VRuwg08)Ro^sV?m<9`FS0c8l-xjX^{T*zd2Ej?T5|QUZQxj#I?spCmp5P{poIg~
z=X_VVu$cU~<BUo1$GyY7;!+nR#|wdUWD&kOiI7h*IMvE?@3b%YIF-C)|5`DDI}N3-
z)JUI?6x)Z#v)^X?t3st+Kr=f#GixiiL+_n`Vln(OA@-`Etae~a#ls1g0%b}&_wml-
zhCIGMP<(u1HM7A_0K;_DWtA(V8BOQMzmLxo(VtXH$a3xvn_EH;rmGtNXaTV@D`pC0
zbW18>^N{npq4fI2kk_&=61Z!pS2&^VqCTNSACao<dC%+bw_r`nd3q^VA+M0jdGF-6
zk$Z(#y}6YR<)z(<nJM4HdsDh!<)d&4G)Ni(l1cFXIriNf5TLj=Z0MmOTlt&{8quAD
z`>;%Mo;g--#=WnmU|sv+j;FIyuzl6z)}c}p%V4V1gz6#-!Kelw3V;CNk&Jo%d3uaj
z8Q6qGA2%Tcsw|E*!&B3$hQ>QO#n%u{%ywPhnB0%<?VV|tbO{8j!BY7zhF}+-7b&bx
z6pqUOGhbvWPGS&sNFds5nG+`9eV_|HLpN<^sjjbMj5-G^R;W@CvDs64W8FxYLTNel
z55w&<F^lekPak<&B{M%P!hCN7Cs%bY>6C9}<!e>x;^i8cCCkc$f|Q=qco&41sY;KJ
zNoGFD=cFO7VBeQd>{xUsZh_s59LjGW`LvxC4Hmy^2ylGfe&JA|5jJV|@P&{#W9-;4
zd5ZhM|7t^wS7g=qwB@+-5*vfjj@fD^W?Aqp#`e%V0iqU?LsIKFi2ASbms5}bmh>-r
zzTbazO4}$~NR&Zmbj}22_}E+*$RCIM0{2bYO?tv#*V%$ag&$>>Iaz;mU0?E`Lc^XD
zM&aSVwZ$VqZl#a!dlp29N2q1&O3zZo!M}RM<LdZ3go}4HE_GgpAoG*CWlr-{E@UaA
zd|n2L!vy-Ach0xj$@Po`lb7|+gVV&X*Z=OSAM8+-+=%Vd%#UF@S#FItH`p9%ku<ZF
z?p`XW`nHy4y-iY3yPHD4BRv|<O^t?^_ZMyVUwsMAVCO4RR`(<wrf($k532URP|Uob
z?CCpwm%yEVgNCUslL}uz$Y={iiTrKZN3~4SxYu31Uw3ahr<wYdTU$?8+4;1}nnSvF
z4NKtY-vxgA))3KY3w_heR$!P`yGuASzC-Y&NzgkMZjn5pOJBo1-WP<)l{SR!4ms5j
z1_rnok-<L#Df==<m)p4=0-^(U8~5e$a51e2)GTS${f9Eg*4o$%oD*mnnbe3;-5vz=
z_qAl71^d0V3nc&%63>d4Y(~M1p-8vBonZIdnC0-&$x<;7&g|~?WwVc+A1?(m+xDHO
z!y^kBYPbVEyzd-#{j!56{54Y-j$i)M*z@GcmyCRN1fKKU4}Tp+7s?&+2rK+6b3`$M
z>u+*G&@B%Ynt!$x@5?vhS!MLDQu?~I7ewc~L!CFEL^i9(9ayl=!i%C&*>75el)tT1
zV_hJe<_10L9hSp^X2m*RgOyE=$iQ+8^gZ)tcilgae<62h^Dxg&(@(lg{9FdrR@+o|
z?o%ZC+@lu!bQ-#jpcPNFm@z~*x?^W<=}>&<G*ocjc<+Dj@_!D6olMZypgdWyD4m{R
zZIX<WN%PlXIsy<5v?w8GD6H&kn|2sQZv}Y7Ki`|6<((o$xBG2r62C<(h7cQ1Uy)Iu
zC`<oP)ekv&l_k6UL&E^MRfXUbx;C=FsQHV@Okz|`Fher-p5in(?*DIJ_+smGpZe#S
z;#sU1?{L^5rEf_{=B4Zm`}FJXk-?8EGK&RcVJ*-sKQR}H1g$vAQqN$0=C|%<7+?oG
zX!M7S{ku{uHs{c@ki^E~=sg>gKP-K%O}z;oI~zjv!Bv_F`1e&=90Bj%CoQVJXT8KA
za)1+=LD{mLlkZTIh0or-e^z5!tfB>4?dUuIeJ-<FezRrer>K1$Jzx(S{+{8t>v>ii
z99#?(gn)qf;^JbUbN+j_4&beC05eZ6#hWf+5fLN99L*F(&957YqghYc$Bk}fCu(D3
zYXbsIj78my-OMGUNWJs__tf<P<cPVowWX=4t=%!`$voP=;tw}82d8zkP`90U2WF;?
z%^?WMNic|Z?k_3+_eb5<xnC<PzU~xynB{c2Imf+#J>U=#4O~FKYa^=X#Bfpg2d)MB
zOqoeYP!SUH>StC~Tihi6kEeNyL4bjUjV%R9h>p(g=pdb<LpTZ=FQ3OUf>g;1ppu=V
zT;3L_<Xl0<8X8=l`m9Q3{&R82FtgteKelj*X=8n6X=9ay7xtkpZa47CyqFw0`7$zc
zw}{zW=+UwH33N^&AXF{?Yf&=>C_=?Lv8TAbI<mf~KGw(u_BCCNcZ{s%@U8_$!~Ky1
zuz%A--*a;ZJ$qqz^uPBhVc97D5M#leA`N(w@>Pig-)VebzOo_B(69)qo!>Df0<ZdT
zYp?HkeRr=;Z!_*pj)F2g9`#Rv{p3lM#b0kvB%u-_B+%4)%M|@`)n|MghO#8gZG*A}
zSInbP6k9A2jR{fz5Gjz+Wbe658y!zfoDRS5V6&NDSYRt==b?@H=lee~HVq6E4-5>9
zj(#mms)AsSAN+y-b{EbMj;X?$00`9}hG`G9nC$iPx4NJ0TUEfSnos-1#bF2o8=nLh
z_kXcAD;rX*hK5$q&aT}(S~xxZHw1-ja3x`(Oo=2QQNXl9!PKS`9pj0mzQ??vp59;T
z-{7*1d>A_)S1osu6?>BYPG)vI>O(Qs+RJ}d`oMDD<TFC;yDv|C3(&=DC<Fdb2$@u2
zGhgr+zcRBkF#JAR&-Sc%N2z#cMXWE{k}$5I9hWAyz{AyjZZa;_I0q$Pu-;UQjh#I#
zGV<Tp^GPyMuMU<A3%^t|Qa0ycfkv}&&F%qJ!I<T4o#!5fMsWg@NrLb{AK{6lD<Vy6
zh0%{hnlm9{c`61E`Hn7ByxBLg|DNI3VtDuSSUTVRQ>E!%gHpjoP46EZGj%u0l42cX
zGbI5RnqDHMDJ21WFl?O}VZPH)LrF0rOqtRP{Cy4tIBg!Kxc$Px2C>b0IYVAS-$5cp
za0CZxIP(QM%h{{Ao}PbEWZl#YwQCGO(J9MrU=Kj-!E7UWIcfG}TuU~ah~=i{ezDOZ
zUxj~knsaoJvsuy>lgTc&QUC8p^8=+pp3aYLhd<m|FhNHXv!X?Ppa!e=*Jl$Jg*$Ea
z^ZH)YWma;hE&K0JHLDz}(Io4+J<^e1^MlWaK@ZK5-jb=R{?vhv6grs6Fgnq907(>b
z!}|N_9XOdTds@DdrWxJBHZe*5M)Wq#A$xSUHi9Es0O5;PoPdNHH5^!frFP07j*aX_
ze_vYsjN8;dABOPRC%5BJE~5oPEk)$y^2P+igM))>YuWtuzvsutgO=($sSqq0p3mcC
zR#t=s>Wc5q?_-AfLq)egQvCS)H?i^|$T1aY1D3Lv<V@WD^`DlULQX$#0p>YJUb4!_
z-qWh6ct%1(haCJR$+t0rFJAFE9LyIo>92WuU+*2ZxeY2&QBfr*nt)DJ(O?W13?}Od
zTKiGZBIlcJTJ~g~qhRNl0%(S&WjGN>3PE9iSTftfnE3H-cYkDu&-nxVa_JoR2$M=K
zL2}Zw`gcGm?t~d=tRJnjF#>MHR62FWg485oZm0A+>x5n0@PgM__MiT_2&qqHo}Vga
zu-`NoE|y-8SJ)Ag3d@C9^9nh2TSR5;5wM3AiVZN%<mXfbWT{&LJV}j{CTN4h#8?Li
zEdyIyme1o^v4vwA8ph-AUQx<rIBc)pe@y3PYXd-tKRL9E6vz{_4i_8cm(Axg?p3DD
zMzXHh_1oc%wyR#(Ck7d<?o@IatqwD^3GFycT6Gp1eMS<IlP(*5a^`Nh^g2CGWE?E(
zM?6V9ff%y`DQM2dxoPvCsniD3@;h4l=o5D!OEU}_`t|CX=0xV~e<#l$5EGQ1lrx56
z;lHE}Y#1C83+&}FnX!CDeIs%ZZC;Vwdiack9|c$XQde0HPVWG#!#QrU%)Zt}+Vh&~
zya-$HMS!Mo9WT}s+JxafxVH1Tm#9^!6dMMh>*>9dj>F@%B|?}$#-UXykWDU>&s^<r
zWwLAc0?t6wMdg&dv}W$%I`uKVHj7;4AXqpdN11M|_<4ccu0>Ep`UrH2!@14pkifgb
z%gZY%qsOFHezV-tqLP!dEDMPjw{P}Ym5f1I!@JU?BYdalj%r%+!(1}Pxqt7KQGUTm
zPs_#LB&!IzGt*(Mgvj4sB)tql`P_S0a`M&kV>xH8n#Flx!B`hDQoMApYCJN(6t^;t
zzH&AmF#gxu%tiQAfSWhf7ycJW>mCM8oyZlR6i?-}*_>&1KDPfk{!3oJU9ZW_Vm)sV
zaKz5e)GOEE_g9}Sx0i2FGDrn%m)g5WM<aYM*B;d-OI3AssbteGPEI$rnU>8)Q}Xdj
zW{Wh>eN!7-&o3N&H-+M{)n}MFIMUhO&w6DNy}dftAg&#cU!Hp16tkImT<wYwhT<?~
z_W|AN<C3YVDPY|}yf*jL?T+cxS5i2wDDC<O2EOxnpX^L5U1gkaF)_2^B>C?B{w*qp
z9S8Mp_r4-Yr_j#;or3RV5?6e$PcD~S2_LTn=PYNE0;8>m!+(eG&#f$1Op4#Zh_Uol
zU3mgfaI-5c#x3U_Hcn#;kJ|)flX>EYz%MvExIwX7JAUzsM2RSY&;6WHw*fw}L8V73
zIKivb>SjMfk$t_iu)xj8cyxQY?}bFHv?kEjA4y1;Ia85M>>MO*y8@AsNae6nd$90F
zMBCX7luP|hB`mR&XQ52MvY3vn4!<MCZZKbP=o?8+<+Lk^NhsG+lq#Jq-z_ghYbO{R
zACE%JMBZJ0p-i!=IOQ-I819JAR4R<VsNlm;`kKzL3-+RRZi1dUgFn<zy-O38hmP=W
z0)eP$a3Z`65<Hprjb`6uY$&O^gJ>c16@6q`K{+{>b8{8VzR}o&3!Eh=#l^xJ8pvHk
z9#PgRY(Sw&K2yd>2n$pzOQNB(>O<ryS{YX9T3r0>SjW4>Qj7J#QSSavcYqHM1xK;=
z*@B6ZA1eig2pgudbXHhcI4Ww)BW}%4FaBU@|Kd1tmTb|MhMQ+9BlLV6Qq|IHXZ8u^
zMa9{2#XIjZ0;B>s^9hs<iUT92^-UFuXs|12@T6n{ZWWKn1jxx5ITPMY7Zp*5tR`7*
z%brBd+f^6_gj_goM;KeZ0ZL-~=gvRQ3K3qQX|)>Dgzx#^UFk|Us}yV1OGdxJGM{`g
zHZ;TvAU5C$%uw*nX>8<r2LU9k`r1aTg;wsvou5BHR4RR4XtIwTA0G!2rG4q!pg;z#
zrZ4-=O8NdlucnTp2)QcEh7;Q4*V<=FfXk!aQdSlf+x9I<AJ;!xz<g713efo>p2xQN
zA@K<e`a+QHw1rxLzL)_ZQNb!MJH7tCKBXMFc<n}ujhlyiz)CJruWWE#dl0<4T5I#f
zoyn#+p6l@S@`3}n2>>A6?VeN32xTef7VIck+}&LrXXs_XJ4yL{(i~<0j^*y=#(8fV
zB6f}=m&y+MtNngTp6%P|G&`}-(*r;eOWc5b8nXbo-(BrXv_d0mYtj3J&orkU4BB4a
z-YD;RA~Km--o7_pyx1inAp!Lri|MA*TQox6I=e(SNr^~Bg@=<)1cJlA2wD~1-Sw8(
z&8AsyZ}mI8vLk?{Tdh))*KrG#0Ec$D!!EP+YoH4|5$$0Tg~Y4H#2CYNVm3!d9ybXI
zTVS*h-JuYYkP&R-Yx_<51jP}hS8AMnI-5MZ(QYNjH&~@YDc^W727I5wGXf6F=BB1r
zpTl2AN2Al<8`WCqQ3FO1!yV6-;NtM)F+sh8GH!Z5Z}n^FXTg|iNn8J#t!A|YYibnv
zPiSS3q-!T?wghG~5ypmsv%Q2e2%7fc*nN9L+-K#a%D~$7g0gmOPvY*c8xY+Z!s=Xd
z9pRPf6qF`@qoyt|%3wK;TGLLX1KYQ_dJ-}Vr+-%HceWLo;%H{4lb0Ix{;{6qK_LEj
zI6+3iyq?45hoxG?UOX}|Ffi0LIkFrkoLMw5uw#xxSbCP(Ph&ccAJwqyxW}s`dGU_G
zQ-1$K)84k;@(JM8d~BdmrAY|krr_Xs-fcyL`Tou3c3;o;SiqPZ7?2F%#Wpg}8~b{2
zc!+{UFNpxIKV7dwh#XDg??$i>wtt>5yd8Q}EZqX#!sTUUc59HSc99^kVu*R%qAI5V
zuu^@l1j}i*QvdN}!l>Tr(ZIq4n*^t?1CTOVLTY!re$@Fs;Ip~tfPU-iCm#2KXu$u1
zwY%DC@1J42S`(j=U*!hfn~7UhLfqTj-PNkM)X*@`?g{{ZXsJzNObiA06$v{vBV)U3
zrhrj@m|lx1+M%SU;;n49`(1<0&H&AL>$;20>euIB1v4mQk#R`A&@Xf;r;^W5AOUV_
z-5L9r$jFuxWeXcr@-(qF6J@)ghrQ?|bC-?UyTI{arIgBh_!`S+B@hjJI8oguTQWKa
zD?`cYXln}xlNjKX(ipTkrB!Yg#tA-32#B(`V%aE%v;pfI_xTow&GPjkM<ZCWq}(oL
z03aH7qZIftNc3(rNx=K`jctGX{cZX6RR>^lIv>VZb6fL-`T0KF9Q)E)81D#GpA}CP
zHrTETFEHv0iSQD<iU*|XY%A1@cHk~i+r66HQ!RzJ-`Om--T?U5O0&x^6dKG&tARiF
zBG9vLp858}hzS-GQ%ZC{EMzHu%r6}L17M^4F~42WoAhOf+M^p{^`&UnvSrs$zCAE}
zADWmhNu_OT%X+N$><(|Zy~lx9NthU8%;o^yRDZomLQ$D96&7N^Sa4uW?MX*im*rM*
z_5B&Z_=-s-%M)GQ>3^;iE;!J5=}EOj*T~|?Y+Ow6cVpd`un(M$nqKr&COD>BA0r~_
zuz!;NNq`|eQTyR`g#BINWY|qqNF_~E-gk3Baq*O-Hfdj_+cL-k7HD=AE*=Om9Q&RR
z`$laX7Ik`lo@<ber`5jrWYWy}8ryHfczUK-qd3OTuM<*h2K2i^Ea?i};of$@Rg9j4
zxShTcgu=Q4PyjP9`&JAYH=(21vEQZn?FYLd*x@qYzF}_&izZC&lyS49PrMIHV`>9%
zyj1kE4aM9yre8bv8<&2KbD&Yo(NOF}t&@%~xj4UXapka@&2a%mZR$A}C#R8ACjA8m
z6G$$PZ^oqA;>(vW=bKH~Fbf^9kMI)c^?H1VXDhV<JWyDuw!FOD(nNsoFFuH<+k3RF
zVr44)#w~~bo&qJF^h*7XGtAPlG;R^WT_f3DwpeIk!Ox6Iul6ax^>=9L@a~SpL#y}d
zi6atp8Oawt^(~O|yxe;iFyQ;h4~MO^ob|G^*X7O(lp>>|s>o%|EY!yir|hmjjn!QN
zEfyRB2cE{~vzKFn5!@w6j_F}Z`jgw4oU(71<BT!lqml%I24k!?@}BVMz}U5h4D**W
zF%(U17kU%I9oI?3WScNN6nNJ*FkNqO`t!#^o?X?%V&767V*mM%48zKn+v6)O2K8^K
zsj91KKt@A){VF~FDuFdvG(|WT-~Sp*iI%f3?)yr*yxqGY-aHYIkc9yEC9O)4fhz-Y
zuiA9j8ShXoVAN3~p`oE+FHG2dcNhbhoxk#nPo2VNyVcUt3G`xuYr|(IBptdnDpKx9
zy%8Zx+>Tr9%<$K+=ZJ6H34R{S3*IE^NK+p9tWVSQ9wGl`BD2$}R_6Iw5GW&sOQ}uu
zjbt!&NIy^V_2LO=Wyke7x&0xUWt^sub8~;!<Gs5tehA2lfe~q$HRVO=*1=%_Y*W5e
z<;O|DWh*S`d9}-C`TON9b%7g?VstcIT$nGByRW~0katt&S|n#6gR|jyzPQOQf{1%$
zWQ4j<jpuDhS0baPY$PCRp<bVlbp%CffOtTc_WJslf1pbpfxD{T)2B)kYZ}e8C+oc^
zfB;Qkc{}p{{rfaQUp+_Hm>mu0DId&HpJ=AePC+>stJn`yjD)!)@9%Q-#Z=l)jU@hT
z3=CAA)KXFl4C~`nf$CTY0q({Eevd%^12ucx=YUzn5qa43BpFM?Y-?ilx0YCj!^?ER
zB&^vl1rz_~Q%Mt%P+%EHVRMwu1Z*e`Y0y9RTYr>{rB3a&v1K8aj7n(Sz9K4vlmT}H
zJGoEF`Pe(36sH=qxLZI*=H}+^?eAA6fwDF@Z2kozEP|0bn*)GHimc4})@b&W4zsVo
z)GCO8QX9=D>NMGUpEMihO9#Co&8DuB&JQ7NZ7q5Wc(Z5fH+K)Gq3{BN-mD8YR@Ryn
zE7jgJbIqtBri&5Ro?I&=xW`bJ+>Ehup)9xkdXph{@BV`0=is+urGl^Y473pl#>O%Q
zHlc}3+AwRowYPfRl05eE`9mQ6q1LLy>sYC`;_6M@n=N&Pjo_Dml$av-en<n;5qNy3
zUm+tac?EZP=IH>J@NVtzqlfh}Yk|xDNK%W>C2G#)dwW{dhGJt^#~gLJHwrgsGBR`z
z#j2CyC5NjJN7ynXJeB>gfilXPp*ryf=AvoE<v(TMUkTyDL~#OC+P?l?kw)^l8dlma
z<YDgpHGfbpGdz<YT3v8uDGPb-7`a7BGgtK!W6#aT2UBS?vU+6Zt2S_|#5UIaI{GYG
zuE;yXkYq=MOLtXe<oag5O%jK3Q*DMh;d5=_^Q&8e{=-eoerO=0L5VvCdpP2M;(==$
zywoHOt;M92WI}v=mVv1C_4S<GH{IPLhQ0T%%XOqEQlD<!>?OV5=ISZ8RT^UxSa%q?
zLW|ZL+Yr_WjE3*iM&VN7;Nuf4%rAZmq$X`H4h~LlYYPYn2(E56q2{233bF)#lp87$
zVWpFU>xWr~f6w~y!~B*+I(F`7p)l19j-`-w@%4tHw@``C3+J(zjvS*R1{ZF04wFAN
zJB2#I=o&y}BS=UZpSEsJ0-08iRBZCA>y<*;baAPRWp2m1Mc2m%Z>$fGY~Ht}>P$41
zankvkwWhkw){wTg`-=2s)CJG0qlvLwGy(-kWF&fTGyvGe$FG_2WT{Ng%_Vvm)HstQ
zStGr4xS2F*pE~0AP?FFF8O-=pU*A?|ZhxkLkM&|+HJmcGpup5i8F258XWJxBF?zw`
z8A|*sdz5FAM=r?Z-&9-8!g>z^b#Q)wk8H7)?cXdC5)0+!WRtN@i17Pk$9AO|nk0};
z=y!Vw0ODt=;uaD<_u;_V)M!4dqSxed9|*P(MOXF`f{#HK8%OE9Sm0KwdG*6=WL-i#
z1ibH7+P!6V0e=(0Ke^U);?iG>qvYJmeQFmszTE3<Z&L<(Xijo-b-X$umTn47ol=l_
z8^dX{<gg+ode6BXG{<h?<_@k!GK-a3db2Y!4m}nTk=I!d5;Pp|HmHYtp~N#@*lcrI
zbD~&b_KN^o!ZMZ-^4GB-`(!2vc4vND+d-4XaHbK2@QLNV<V!27?m%998EyAIX8DDl
z-?=qi*%3PA?}pJ$y!j)HZLH@dsTz9Z5A}$x7uF)^sr`6c)A~{*{Qr~c!%3_UiAJCd
z-QB|Q`>z{@r;T6m<D#ppA;|%`MzaG0CqJ{|3aigdwd3(@6{Gw{soTfwG8!x0SFv9o
z7kq=%h6!zYM5mxGPEN9df1K_<+Xn{+pX^96F#%;Bhq(N-CU78&TkhOkH%E-vNGjmd
zbR4Uv(FSPUeg5nj7*wE}U!dal=S8Xj-65Uofk6Jy8*PjZPh=;#%;GS8JTP!b%Rc<&
zgm?anl_@hZFJ&#0@t{{EBZ*9pK$yBBeJ^=)_JXNWDPIOyUI1PZI8KvQenC^`;>2J_
zQ`=p=G9X+m1DRO<5a@*Pa{Kw?X+bJDg0<UBp@YhWS4RtS$qpS42-HY6GdaEcb0l}L
zqg=_ll2STnkHZx0*a83>1RShAY@h64$L&!VDf6fCpPd&rDGy_H-kw*m!?_NtIa`+o
z7l2a)Hh;u-9UvLu@i~|W0X8Gxd{ye*hbC60@p?8m#M4GB3&Vgxh+n<Vyc);|ig)aR
zp*W0L^WMLUCO|_4+RK;bOBKZV=gL$lt(u36_D?VR(DnhX`gg$oTt#-b`D!aSTEW)T
zYrE5&04K>|^|B&BF@JYW%<D|6nDY#KwFzJf7rS4e@1W5F*{kgZy4`A%&{LLhB(Xsi
zNrW5-F*L|ybI63CTeH>-0NSRzCY63(C3&bb>KDie0b-UG#PV{sT>EHclkt;+fDd4G
z0s!eG?2*$(+WtdWD?)DQ?~j`uOc;2)ghQjOwhR$Pzx8jXvX^DVF>qp47&{oqPlJsd
zV@I7Tx@efBJX$C)n|j%=#d3`D2a)BB1I|o~i|e227_`QTNk4}nN0<>JJd03>k0V6;
zkGy<BSk+LSh==Fqd)Gr|lxu~MUEP_T-Rbh`<EseGKj7ZV%O)*0y|V=i_&eCoZ{5)t
zJf5wY;eQ!lk5SqTiuTKfBwH9y-sZJ}$rc)#TF;*$-oAL27bU<pF$my6q|HQM81n{G
zvZ|5MP#(7qMOd6(<vTyQPEjiUL5@UP#2A#fn9~g4hkuyl?6IT=$$Q<FZM}~jqW)6w
zOyORCXXk;lFawliNI2eG)VSC%>ejgRoOCehw~OMx>kY;Fqe2T(<Fmp8tV>?cJ)AE~
zRQo6?MFL+jXqC+eZ}czKTQK-?%(z&ual(%cgoK1B#3KlJZTapqc9#mT02(y;KrP5d
zyOGCzU9@`LE6LyMA1$C)Je))s2%FMWK@XR>9UC`}+b&1TLUY*EfsD!p){>Hv`w0vm
z)A=-WO`%{Pnkm=5I>{DUX|bQG+t}Ffyxg(Bou(N|zq>fR1H%Q9*-VRgGtdZUGkIMj
z&aPOD`jb;qnp;{L?dD)$i<3*?Je+B{0-IpaEBqR}HNE^cX)s5nN+BEYh=*FRhr#!i
zEi^STSt+tNf)-Mc^!6VvHe`E2JR?bf+By(Rb=CF!d>fixsuKS7tPhRQ`eE&n`ow0j
z44+uAtx&ts+G4WEAmq?oK&7M>g!3NzG6}T1M-N|FttbfsuGtFZACLBB{0FH<TUS~z
z5_49gCvOQwF)+>6H=#~%lMX4VdwPm7>F%Q`h80s;gad#HLi$GXUp4ke<>>5a=lB3K
z^^ZuQEumxeuk3!SywDl2b$z%^6F2{4;iid5#^UTGX-|?IAMnn54Dy6$H?j<1z-a{Y
z$>Q^Cv=jXDEKZ6}Kk7uhdSzf>5Pbe3-ttU@!En7+r8I#3nSKmw@d+}a<(o|`*97Dl
zoYC-n*&TD0t7uD}ytv3%0#IYjAN!nS_^G4-`X(UM-Oc<;0$D6H;reVaHecG@O^e}|
zR;l=<L?j6dgW{gF(dK?B4C9^dd(hGx45~IBn?HX7`wHBoky^zNj5DBfJ+jm9=qsWp
zGqJXo#jjgmyg)=m^xD*j7aYh5{nN=sT80Frrfz+fLoIBMfu7#nwX=IFA#iE}nHXJc
z4;+0`rxCsvgsFXME1o6U#Ard%iH_z)%HGIMlI%%m&iVT@rM|!CtLG~DY2)aqY68B~
z_F`E3>^pa&3csO0YBl_iZr{OkJC<Cw;9zj%NEy%IY3u7t>bx(M$X)~4R7e%lazJZJ
zX}-*I+#0R45h#eTMs$(}w(nx8^#uA1W)2qnsz!P5+mQ<{$a{a%57Nbd24u6xuxAKo
zSE<O}mL-Zz8qSzjo6xkq2~iOZF1kp@1!&t}xkV+r=J0Pw^iX!|>F*XyJUm(=w<E@l
zms6hLKS!gP-j?Z=7fei@WwA=8`MkMG1vjVNK^obcKX#D6B>`q<j#>WT%Eiru3`kQm
zBGh)A1biRTz;K!!+Qh&smA^7_4o1e0iON|b>)?zC2zA<D1;t+5{KWXjd#d*5wcC0z
zJ8P~JTs*D>PygAQ>K#$hyW8Yh={%0<8EmH8cz*Da`m-mzM&!0YdWD7*7?-*Wqku+B
zA08ZbJ3X{`_QIw(5M&#VMDv6v;?{cl78e$f4jJc#3G&920JFRJyR=r6<yFkiMY360
z>$86OkAMIgXc6L!*zvN`fz55B(EMR{u`zKtEkj&TdAS+{=Xf9bI6(!Zet$L|818@i
zAuKi6Vt3>Uxy9Z1b0LyjT)udQkDt!rdh~0toa8@zjwq?*lw=9<`-sP}$GH#3#BKh2
zdgVszBV^$w--Of#Hu8k&j6Oe2pZ@WKjByv{uky*j_BBpL$CFzL35yPPiRR7l9Nrx2
zwV_F+ls#qKj)%aVG|g0DVqWPvcp_sC-gimQDa{Z-VLgH~C*8qpuCY{CXPL>5&QrK_
zE=C@SR9?PjGq&BID{uMy3x4N%48|aS(#m-@yFOY9N<@ZdCc_$Zy!pg5jYqYEOO^j|
zfc<PVFgC`*y}Nt3F*21nPQT@KsD=l2Tn>foQc$2eoXLNX=BCcXO~E4+ljzMG^gS%J
zKuxdMt(_mu$;~A;X3Glb&v>I1ELyFbAMvb^oh>>j@9{#jWCq~e@>bGJ74z^v6*!jg
zzr3*zst)QrwV%j1E4+fYA!1L~*@3AK_#gVjA&#^;W@2%D1ilyH!=|Li=9qRi<QyEP
z9Yj)2Wd`QovVFftyOJI8{HJo8r3og2pn*ZF>m6V+1c2D{`oQu0_4PJr58(VbnLo%j
z6d}*Dll+I2W&A!xvGPkTzUu|EBi5QdxlW7qJO-n7Yn1{^S^PhCTr5-=?q=P|E0rW0
zexx@caFw_4v&t@48Jyl_!;e~W`pkSr`9zL7mgC_%o#el6IUi46mqR7m>V_WnC4I#i
zjIt7x#%eFYyV~ce^XX`ML!-+EQKxvt!IUOKMSO4LhR%e8rTN|E-ZhK$<p#bY<}jwV
zq1UZ<*d2<;XBV8dzj=B2v`iEt3TMS_E{~z7t1D6|`kCo1Aa!*u(3CDtEG2gQkSa0O
zdd4a4TCyM@oASbYF7fYj(H9;$LM{R4EmTsTpg@W7DJ)kIcGGCp6<NBwiS~edKW}Gr
z{XKfF62k9x^2Nl9f~V@&;ew4TW1y{a?B?Lm)}cbGz>-!?NUz3+m!TmBt54~f*%wOR
zomC4C)znL9c2!1En8=Fn6|6X5rl}5nvto_r5L@VQPPN(`BKEk<%fu3CQCn|NUM>}_
zHY64FMn*wTOq^ewH-^S+UM@A#GvvwL(krmopF!4ziJAkuaIjIN@(?j9#1IzVx*#<&
zaJ-CzdPFo`%_=uD{OlBg5+|poCerBgFf;E!ml{uzPQ9|z!x9q{12;r(>HGTRCqn4#
zqL4Y4N$D=eY)S||tf8N1oo_k3>-W+?C-`r@lMK6Nd%*s@;e(6&Htg{Ba*x%f?s#12
zP4vN9W26b9D#%cs%Nx8FltBHUJ{>kD2+qgBXHVHP1uEbFfO;1^@wgH^$VJ!o)v>w1
z#a>wNz-XlL_jrug_36PmG+?Qz@6}c_yHBk~P*1ia8y2O-`lWQ~oNVNd4=8}bQ?@e|
zy{V@7?3wSU5Z{e99<6SYs+`?y(zT1OL;wfG_AAm|&aB6o{khEmwEfw1P9I^Kxf0pq
z$@ks~kvdu<-lJ?)D5by6l_z=?EUkNFQS&L!GA~YaTJE9E;ZLtfEp`SbIt_lc-l)>5
z2Zx2!)YQRGPP?afAD7!)BlWCT^DKg3#9H-Mxwft|7ZCZ%RWKss?(8zuL9QTnBtyXN
z8Y^FAU@fSswfu)1*4@et>4u^CnCF9DYRQGc-{s=0aHdSbL?@a~yR|mg$BSa+M>tz}
zgHcXya>6Za-;9i9fc~k|O7kTs1h*RAuu5Bh_4h~lJxoYIFvQxv#MJbJ$9^f@Il0qh
zJWh0~0Z}B8&6O!(CL^BqhuAz=S5HGVM6tB1LdylZgu67ilycc!aj;rs*o0mtG*R<n
zX86(aJekQUV3y9jvRmnknKWyU;=C@rm@LW`(e#LxoHpCuWxdiYA;^}-_6Y%yJLaVy
zYA`T4tDKwA=P}&+w$@MdjTC&)Mlu9-Pv5&65sjFeo5yyohJjI_U2{JnUZ*s!Qfc=`
zw#dGEC4*9)WJnvzs5c3Rp)nY?5NEZAL%N?L@OW@sZh2c)lq2GE;{w*!6+-K8c^ZGy
zf38q|Q&SVD6vO=u{i>>%eeM8Q{=yOz`sCAiE@zhRLYC?m>mQ?zIh^LJK-Y=e-L+n`
zSH85WE#hxbBej|>Q*9Fu=Q>^mqzLU|fGUsyHP?;q!Z9X(J>>(s4&^ucM>oGH>cK>?
z?#)a6HXjjt*obB=-)d`{<FU^<4#V{sxk!+J&siNv=A2Zf7Zb{t=;<+VAq7rm2TiA3
zwkv<R1y;T9&Nm;U$?L3V_P}%)r@F@DRV$F@#E+zNWxn#~Ty4K1Vsjy~QDE{#Cyj2-
zl~%`M2M++aYd_B9A@%Qdl;(%e39qtJ2tR(FaIB9hE4E&>%%nVkW0+EV@;aCqJf{92
zu`%RQuchHnmYUQ(3f(j)6|V^*ggER?lhJV3HGHbQV{3ezkH@waCp9%l(eSb2*w@Mo
zKOV9zH!#Dk4UESazT-4WOmsxL9xc|fdPFnZl4?<4<*H-gg?!<^Azfll&{h$xus3Ni
zLiVhVPuJ{8fjGR2^?aLgx8iIqNto~pxX<HCtcxfFvM_aH-)!ZVsv%c2{53tRkw{{5
zh`#<|Z|-p<TO_hVSHJp`5X^evx+}tF(OR>%L4Pdc$n`jb->XSymlZsSZSD_U`$3UK
zDbb4S#02H#Wn1@b_oMm4=oQU!1Z=a@({cF`A2%rF4xvvlH<#I|@3J@%Z))ds8+pAh
z!yE5$hb*Nrd>sgv<@=Gb)96$TEeSwgYa%S%RrR`C(ChkxJb<KgS}(d?TvuDF`i`*M
zO%_d5cT3pnv~jvz;JF(>31-lbmL3mIW9e|2T#pySrE81_9i|SOlam)_q1vv8^T}Nk
zrTTTZb8KXd$<2vFOL(eI1BFL3odMO)`p2T*S#jP}{%uvej-M{qj>K4%Cl!pq=U7}@
z17)P#-ca1aGa!VFrgr><L(ai)LKGBqUbmg9@Nj4d_V7(xfqW`#3u@Kt;;=R14t5zp
zU>M2Za6Haf*#HgzR_7AK8@Rh8K#{yRTWx(!A#vJb45ViL$ER_bW%`YyLqj32C{pPs
zYHDgmW4Vs=29*KS$a8nS*X3|YK9ePOE#QyMQ%uUV_dZ@jzomfNh0o>S{c|Q2J&>uF
zFEvO=h(+SFZPf?8;1Jt(zSxOIuQ5?6luP&c1?OJOf`LkalB>#Yp*{A|*mdIZW3<qe
zf9eBVI8@wLU_0R(qi)nv1GACl0p>7QxY<ojb#dx^A7+_^2xk+vdJ;6+Cb<Xs_orc4
zb@$wSm5a5p1Q-JrRgMql(;3_`Is$h_&7=5R#05<vjYh<g!2}yY;HhiMN<QwIOxqml
zB0h<iIJjk-Z6zR_dsn^x`f#DD;b57c(~fF5G2JG0MAqcg6*_6X`4WeC7!a(F+a2U)
zsG;R9_fid#`(Jer_KXsKy+fDtDN7|+WiXVkq>e>qY9=>ih)@&>T5a}BY+1`9xQMZO
zXX_X7%2inpU28`F{srpJjMY(0uTy=A@0gzUT$#;Oxs{vfw*ZLPf>Qpfr@PD1RG~y7
z<GGnE=(xM}T%M;N9i_ve_qzDKo1n|P>oHyOPDWN%R$MMkQoqZWQkI>QHHF2OWGbOq
zRqmT5a@h}t_hFV(W`2Y+h!xy++~eeC0gH`y=pixROi8D;y58!~9->38V)W6QPk#7l
z(yB#EqJ^LnoV7jb&WI-;oXxe}T>(4+R?DN=7OHz2(L(K9g{o&?nI`s7A}P05PimuG
zBoTiMlm03P-JF67zs1n+9I?>RbdK%#{?dMV5}+Xc+{vau!DVQ5+N@EMFdUUk!lCg+
zM60^n=47z5x@LZ_R~;oiwDi_TJCi+mP~NM6Ife6j83MLsv<0US90pAzYgu)*9ag&?
z(EbNIToG5tO|l(|E7!<1O;>$nFx;gE03OZ;7rV7q>1xv(WL3Rp!SJv!*=o~lVKEV5
ze{b(r3(xi63!W}^r(T)X_BS0t^79>b{jvR5np&0*eX0fjXaQ^4o|2L$klKDtO7iz=
z|2+eehrb15GU+ujyN#1A3b>v8h&3B~Bw%%#A19BC>gnxe&|wy&rrz0$FU9HtqZ){K
zJuVhGxDbLnN7H%Z7I&u_E7Q|;(--U8y?!N-UxIf0kPsyXE*6%I_x9_)j}_k|w+){P
zb{zX7zRC*+d7{hVs&ckrZ!Fcvab+W;jpry^Yq1RE3T1AmdmNVIh$c{@zKGm|)UnRv
zWnh_k@CV~Xfb8J9e0>Tgf2H#}=b5@5%?r4$!hxVr0%o;-94d1?T+Y5Q+b`xVsS|tc
zsEUh&52bW6@=vI$b%mg&oLJc_;FY`Iqp8{nIF^2<&iTRR>(X$;&TAj*xd;2^jq;PT
zd3M9rXx@YM9JZZti|Am_T&$C($~5?(HS}>9=g-HV-3e%$rd)yv_d(3hmyPB=6UGr#
z5<`cujJHi7PkU$S(5ofvnhv`lP2$%TL3IWwF12Vik9)p5ouiDua$vc0kk+LQ%sa=|
zq4Ga*N-~!Hr7-9H=MH|VG7c1ECL18Vir4h~YDJZ&BJwML+ISp`kxpQ9Zk??0$U-_l
z-deLQu$}L$5LiyL4Gijpkj_pz{Q-*3X?+CW<925dvvJCd0F*Ya-(N+5(UwrHrl@vP
zHeCA89geQ!1Fx@0?diz4Y{si}k|(h~Bmxwh667rY;o6_kOwrxR>0)cfYKvY^w8JFH
zjiz915XVOivw?OkM4_dObA7eNZnC=?Ti}krN&nLnUMX^K(Rjhv;X;n!VT|W0ZohT1
zL&k^b1Tzw;)x3sb<$EpLJ_~Z`0t}p#u+HumGo`Af3Kj6^+#vq8)|5uuU%R_v*nD~&
zM~e`v8;8wf!KUMf$#kEk_RqejjHd}Tl9`zCpM8~2U^0u$<yy;SmZ#K<1^U;jp~G}>
z(YL)fYmpa5jA5s~28M6zP3cLeI^pihtsUO^`$bT#y2A;_AGgkQ8k8zUpC{gkNq<Mm
zT58xoJKjb&{9|X2W3SbFzw^cT*N0?IO1)D3za6tt_zDHTwaN)>$~0RNm<B;59!%@B
z*Z}Gmh$BvS2B$XqBhm%D_eOT7Qc`Kv+rQq0;(BGs%vNYpX!yVm7BbpAlyT#5r=}#(
z!9XXk*|PU@*Ml4VXNf5sb{`2D-^nPA%s{N>40}TdOR*W$;zn}-OK*R!a$~~?xs&oE
z-dG*C)~Q6i+I7pTv#sObU<j5O6Tjq0mR-j<k2mEj&gB&_c(Bat42N($4JEo#(B!VN
z>a(V~LJ8UVbyAW*Y`GZ*R}sOcjCu?unSS(&a=BA>&y(BTyB-Gts|5KP$}#>}Jr5|s
zz$`g+LSl~WYy%Fi)G+qYVEN^*n9NjhVy0of;+BOa4a&C{W*a3FMCl}%J_TuuQuVYS
z6J&??!U%>K>N}YbpbRaF#Wg>hiAuH@HP3c-F>j`t>n*Q#mXkS=x5n%&41T$6Q0kMs
z#&<vd)ji3`7!*mI%h=&{PaEGmn@vuBiiGs=@YIWa_i#U!$(3Z0Q8lNjzW(w$I+*S!
zNUtUnx$TaYkNNm}Gt5GUCEk`Fm*MfF$coE1w5T}!iiD2eG3|ERom+iaQlr=0KSdHT
zwSL=zp8ZV<PRjSv?L@)N7r7V#;qZ_+Z%=-3-(TI@n*I?U(BkO_e|}xkNls3@<eFv9
z?ECPC$#9(e$w_+w0=Bm}4Hojy$y~tKL{elem#DSTX4jDQsaDdadTDrM;_Ky!oSjeS
zZ~T*NySjv#botn9`M63~@{N;`u}dd$^SlCRDT1yVYip0kt0g*x#X7tm+~D(1nJWJp
ztvH-PF}KRU%n{rX7<L0YJpU!)Y3_MF5M20?MA5oIa$;RBwP7%st}!U+ZgoW)%;bq9
zNSw2tsPR@&G5*!nd%iXNxCJd;;pGY%uDCCPjT*<6Y1f&X85!N3&7AA<KC0J%$=tek
zCo6I(C$0_F+&dNk@kgz(R_&b|ImYGAv_UmeRbQXVWAhN*?a8F~UbpFUbpdqAcsSu4
zx}SIlv&|KXnmZV;_5`$qUB#~a3q(!oObUsL2Ah`mJly(@El#&st|=mc5&RBrWBuqE
z1Rm3TYSVU5txL<<5-Uqf*v_w&TnX63Be?>Xs8jp&A2aSZXUUT<MJ2?F34b7CmyB~S
zF7bM}w=dP0*hqf<6Z<TEae-T*@b1cHyRvj<9eH0<b7>jkeK<dXfP^$ixltMs9}uva
zWdBGc*w7(1{0hTX{71$1m=F9$zFQnxZexvpB(Gy?c5uBL^y<Ll>WJgNzNdkcuyD-8
zCk1@p)~><0;dX&#;H=9OWZG0(uOt@%wcfQtyERb8ox9I%-~)yR6APO6&!vm`q#JAu
zECvNPDU84o!7!6pMh}@``vU<1D-s3(KTbG6bT_2@wCkf{kz<L(=&fh}C7!9PT*AP1
z2(dvW<3%|G8>Si=FIR`g;6VJclPU7oN9#^G{*0;wV#sKD_G@g4@t5(+MR=*~6ycdT
z4El&#0&;53aXzhi<5)<@8zil0RP!kErp7(xTyN$*3k=CFG!=2*$kY$sh$`7e$!F3y
zskIVj<5jM;wLR`c!++g$hB7r)RRNLydqnWZ1G%9$xjFPu22oC{cXuw&gT9?bMuIP`
z-^RmAD?I`!qQeZk&euAqP*zKY6U%EMXf-@x=Z7Dyp~OBbT6(+*-R=#=R;Hy_t4nHC
zu*Ya_&5dDXOdQoSUnx<QG~ekId2zJT(ceQ1ss)(Z)YNQn)vtWEYS_+qCS@Iq&LnU6
zW|_S|SGl4hA(<|(y}(Ok&^}#Rnwu&N&)&}mK$R=l1CQBk53g$lI^H!`KnBRV8C9E!
zV(;m=)sOhFCRlwKO89PQHsKRlxyq3lzQ7A>xOH**SH(lTY`)3x7$Clk-S2PnxofE;
zL`5%lE~#R59n}t3dV2CC#-4)k=EiJsCn*U}I+K*YRigMPbX(pO-o3(??U=X<gtHWO
zgKPg6uGEUE2PO-X5HN@`6lbK#VUv$oZ|y;(QV+sxcNF(CD$55UX5~1JzzcT3vN^5&
zkodkeUncQ!tw43Dp`vhOB%PNjUPDWZU@|~DoZph9bkbyK&TibPzagCNQ9Fss&W}<~
zyOi*aqa*N4*sU~6@7C_UEF%1H>x(qKb)>6J8Af<^xxc-|(6l5sz?;rt#J71Tms<Y|
zWp`lrSt5OkV$tVnfLW1;E&NIJ|JeHKu&B51YfJ=0R7yZVQIH{}8>G9trMo*vL`1qf
zhVGPZDM7lsyK`t5-s8R3`@PTadFNl5@e}8qz4zK{uSJPsXKR}!;yM{V$zrLoJ9#YK
zepNlRp_r!-L=2m8Ig;Jm-}Dn?`zuj<g?_j#`vo9l-pqN5#eH&=?Ch7oml!bHk~nQh
zZqJ>70$X<s-6Yg#P;Y7^mnpC2$;Nmwh&T@0W2<L!*H$Dozze=Mk_ysqO#tjJOLX{0
zkGd4|K#Io&Jq<M3KU@~ZYTubo*f9<v1eVc&_b5f(Z3gst>J)P2j<WNR3p&z=yz^*g
z?i-=TyY-1`oW%_pc@o*@_2T__`*22VK<r3gXFR#YD<E$B<6f|jN4%|%^n7WWi|5;J
zhc1A^b#=|#4M$)2WQf+Z%=8=Wt59&Bt<Y1Vwyj%AyPLE2_01U2mCjreMAmmZ<aPV6
z-yAY#I)pGhveYrBE>g}Ab$`chBoP%;%t?+-tqDkg5seB4V$trGd^;^G3Jk1o^}&pH
zz^x{4$ZEb)kxJR+c9oSx&$9q2@nJTPXzI&?gV48#`jhn^NZui**xivY7!|B<>(2H^
z^Hhg31yEf4K!I92nh(C4Hgpj(3s?geE1MBTT(!mLR_(urvp2#&bP?CgGkK61qKaEs
zZ(Ge=9xA^btkO1}_#H5!)xcoTYPT{(J5{XVQnJ=@->G+(L|aM+Xy_;dYntzdy;3Hd
ze#^+<(BGS@;f*sX)ujOx*0ic{Eee^G12c@XFZXkU3N^#hNaq?)z6IUbI0Szl1Oh|V
zP0nIhMC|2tU&QhFC#kPif+z_elXgnOI3J@tVK1?A8%!ew1=0hzYz+F7KJE6|8joe~
zt12+`ke;@2B%@%@=;TMvOOg4FnK#~g^{D3FRRnbtHYWcqBGWbO(8h*Tv#Yv}$K!f~
z=*0Pafe2L&MAH?fO`ypV*4e-DGl<fj>teKf9eC?>#ZiXnmi-kIuqkVjxgFrk!u|V=
z+&~hwK%pjn==@k3QcnaQH}0y2+>OR25BXGkC-4yljLU3knx!}g0muw&w${+WH~W!7
z4&7@NMpDF?e5e7^iLCJ5X<Sex7)cRQ%V&LFQq3Wtyxg@p>2fh$Kgwiy`1R}Qli(xG
zMvogHpZLM3OMlz4doJt#U!4`CP{VVF*RGEHQW#U!(0!ue=E_2KcKZ!h{f&X^2dL#1
z<9#<#9i6i2x$YpptFoN61cqW>pC4QpuyebgcUIq$xXG5Q(1|rzn44owPgXf$;HDO+
zgWlH#U|m>E)o1c&OZl&2Qz-3>6<*D^3h&I8afmrD0WyWRH^efT&Q59Au=i-S|F$2#
zX*KVrRM1v<Py+4_P(P&;837S-sTGjFDqJ0Ej%J{H4bIJ^C4?M~U2zQA3xivp3a-{y
zKIV6fRbL3w!7H+7eq!#fGgsvIa{aV7L^iUqOU$+q(|E~G6T?tfo!FgqY+z)7R<;wo
zbL>=<Xsg43S$R%t*&Fl_d-6!90NW|dd)CH?xPEfxPJt@~P?i%$LmCi0M2$MRPoMX-
z_b%6#Tw<#x7tHX^X?AqsENM--g(aLxmb!&$n14WHhJMst*=_ciQ|ZQ^;d;(c-$u$x
z9wkyg6UHa>&R`Q~X*2T;gjABwS2{74$)Ib1PS4%l1Nn4!dt<?Ru|soT?%?21Z+?G%
z9dX=WPb%K>hJ-8xPrXhk$dx+&UB3)Gj9WZHyCReVw-fb*@l2H>tn2iu+|jD@1{Z9{
zhx6I_D&e25Fv^rnbrefCwwaJ0gdETK91DjKs@K_`_($E&Hrl-tkETjT5Iw`hbld2B
zof+>h-QZCVsRZyh3I>MNY+glx_^)ZF=MnV4*td4gaUap356wIx$nK{ynMChOvJkG6
z_ZXchB_U?)xFo$|$tjg5)f}6DPfwqxkvUaWto`}(Jq*Gb>Lyt7wbGZ#@9V%aiR|`~
ziyJia`BaKZ+;>3&0(CLH%^PZs9OG1y_8DzXS#wVH)0co3TDYYa0W~!?{%B=XJW(CK
zKkotjJCEc}<4MJp)~O~H+(K&Hz>t6>A;(EZ&)Hf~K5*&smqP5f@FP1`?hiCrHjsfG
z&FXOUo;2_CtU-6!a0iFY=sW)s508di8~@lie5|q~0-e;?WIxH4+(zCjO_r_KyC0e_
zO<uS=*xNHlR}?S`1SOPbz}EYdMet$9&Cg^Af6!`kGnq`)%8@F|%a{G&RI?`dg9W4@
z@!#Xmlv*W>qE-$g!s=(Rq_4;wTD{X;dU>!2tXbU!1Xv?(2$l2&z6_NB8}Tyti!Rz(
z*kHedS<K(lnV-r9ZXp6Z7{uHe=ZvFcg_>q&X2K{tKt2&tH&N<wHN}*l>%JC<2Lz?q
zozEYwn%uc_r}gU-mlOX4#!8#kuVPUYNnB2zo!U@YXKJf;;JVh}dK$~*b~<V{zR6=1
zLd?Nz+9uL|1m<ftnpieVe9;NJ<np0SjrrpRv(+XM6%~>qBApX-=@-`?t(O3LcybSM
zZ8x;?3y4Fat@SU5?1IWITRKUt!mu}$9~l|Go$Xrg%0{6%>u5ymF|h|#iNTvWZ5`Km
z)h!(`CZ;`Uzb4(d<ApqJAD&cOsNuD=hO#{onOxu?Y1wOl+Gu3C*ad4a;*YT#E(+;g
zKFTaRn;4PQa528W%@jjT)KV$6@|?odaYby8*)Nyjh^Nx}y%PaHrCrhLW&-AT_?&0(
zq*^HvdW}y>y6yxNd2&u%<D%VnXX#$0_0uZL6Oq!Yfh$!&&y3Duv{29c9@c0%i^)~N
zeWCk$IZH~D*=jD=8yS*y=zLRqw!k~b%}t{2|1EHbF6GwWCxA$+&hn%2#^x%M=}=pw
z(ZObXG%606)S{GyFppRbO8-ovpe4d>;3gX$+O$%(=G-$Y?R7?+JMDH^5ch^(2);dQ
zwAV9fV`GC$tBucN;%+VSNPhmx%NzMNNAaq!m&2yCv<fIOI^L-1hLaoQj}^qT>MVWo
zyhou}m~qp^8%HKT7QOqe68_X3GIrY-rYATx;89~FI5;S4HcoYnI91g2`GEvgpC;a3
zot~KTI9O5|cFI;L<ufodn@*Z$8ETsL$F_qg<ZNW38AYBpxNlOePWk%)RWikK+?)KQ
z`ILV0_KG`R2qB@LpBs2Q?L&ybqRN^W|M6qty!4*`t~=t|=Hhz|P!|F!pZkMm3*Sl0
z9@L>7oK;m-DeojbiOuw1BVr0vL}ID;GqNz#1H`g4Rv(SMz1al&##y&h?e|vr#9?T`
zpSF<XvLqJwp|{kJ56&pndNLgnq{NcsBoS!mLpK){X1Fjek2W}q641zse{bRlL~0>x
zh|5*XzpD}vx5)A%g7KmnlQQD&_;%G?{l(80@J?Xr34_7h5s4uo(g{k`fM;QDVbKJ+
zPObOt$mcN~|6W=OsLzU~zG+&ntQ;J|LPC%^_iwaL_V$laQNwAACCm#8SEfgjDh!rv
zzhe;(^CN~1ntTVn=K<EXHJx1rbcx0aR5x?5B5)8?0Q3foW+xYNX#zry^6avOeH48o
zy`-&lF@9*}0@;IOJVu{BMR9918{-Q2adZ9*e^QihHS+!s>>@)YH=Gyo)maQ7zb|CU
z_L+5ci|G`xyNa(#&rqT$rpgySxJJow$nHKb6*Rle!aw9zJ{HdAa_?+G)~WT@;OoPl
z$>59oWC^0bh;^8S*NCt6ewj>dG=-`^<Di)=OrXyqzEd8VfJ14!_|&A!q=GrR=-TSG
za`&prrpm^?P$SNhY<e!fx|bS-8jB66=&sAD#ya1Iy@4-OZC15{coP^HSWrlH&)ZXC
zWBR+@JFXS!<C<#~Rb9aIKicirZmQg#>upI~CQf0em5bN)n&NAQtg02%H@BS@mG_}G
zJ@JiS#*%=oIxJ%@;nJ$}VQ{E(TpHjL6Td62&^zlRtn&<9Zy^mhNAH?)J>9ghvJ$=%
z*VNS1LRSJT4~JU2y2L!))8vgEAaxs)!)oR6UTqiiF~uk5@)i-LRDn{+AZI8qFQ-zh
zy)Mhf03$70c?vaX>r!$x9r?HxQ;uof*$BjZYip}orMdL}(b@hlngi#0+x^@1_gyIv
zhTfRs1!4z$%gF+hnyv2!l*w#%foVhR4g?pMuEJk@p?=RcxWvcIcc-1Sn=IK3;$b`<
zDfxBfR?aFfJQ812nU^nW^9%1!*Y%EfT#e@A0`{}qmJh<f%D`l|yPk_v>zYZwr#-+Z
zN7!>0tvvzRmZ_Ehf|*IYR2W_FWavgU$u$Vf$cky_d<{|?kZ-1OuWyoNbU*70;=Vzs
zHQFaflz}?u(UVuC=U%*b+*JS}lF4spysBOvwGOB=N{o*Nznt6NLzJHqqmxsHgaqU(
z)-{%v9=4<LSgumBDy`u_uA71YJL&S8(QNK?ZniC<83&@q$xTC4MRNalh4ZQWgWqv|
zjUAcP(p}@JkFH0OAK8>}UZ<-OrLoG=vUNcpbVKixv8UIcZ!0h28G?r`OO3_(pn+JC
zf~ly5%+cuBvE-zq2J%C{-Lr6=+sr2%V#Nf--X*5eAS!A{Cz5{(OR03SN<AYP#Vi_*
z30uO1G%<ST=*Q*f7e9^<U(KYfsaf)al=0QL*YQj5?uq75(9kH+d5kFu=<9#^fzE#d
zY*$8oTU;e!24#e+;yeK+@)RR(p<5qKInRD%xRvCMJw`(lXO|)Cvx?`Y^n<JDX;@&2
z<Jw~z%}%X0xMFM#lyZ2OpYG58%q|Dk=l~moaYGlX^mO&++{lX^;fLw#xe>m?f$<VS
zv2k&-0{Jz?!XbO;c<evh+9L61N)Xx(4a4g!jEv5G_1Iu0HgX+dwM_A|m)=vY$}?ip
zE~Y<$VfEKCvffVwCO*EdrD3C8hft;#jW*|W-Tp^ZJL#7^&N~~8vgz3(m>JK)o`IuT
z@v>#6#v$nLJm`@XUpu9KZIu%FHa?U7wY1iC)jgVO(y&KO0&)=3PkdViX5fQ^i6(`;
zC%-GYP00}6X};r**pWTKhe{+ghLTv}lVnPnIN!T>b1|DcFv+$Z7#FZf&-!3EA%gf<
zc8FGdhgg!ElcnSSB($TlZMznfph3ZYLP&p43YqBdC9=VDRLi0(hheW<Yv7;$VxKHl
zR>Yq?#`9}yo1;<nqWY}RMGE#6{*O#wKVJUQG{Ghltrk82+8U<F7eFLU1ebSI%Nmak
z7Ah6?*eP@<Qq7m-W~Yj;3Vzh;(nUKX^WB@=>i1Lham3wvmC2X85r6a!3?Ijc`ov4v
ze5igWB_-7|jubIYC6`g{>+6U+44N~Cs}b*p=fDIoXm;nO@*N!U^L9VKWq-3h2l?vL
z%5O<l)TJ+LZ|#p}vvFgkLq$dXrlnOiPepzDi;s_KFx9lv2GR59?uZ!_uryE=<#zy>
z(bhSkk~zRg_O<Sz@yCzGCMFQ=3RRQ_3cAp?ZbaX=C38DFG|$(1ydz<;KCO&rIdQ2V
zp-FuPMHW1a6#CGLG;~fmCn-AzX<zk+Ubn-1YJgeR`LWzfN<~nVDHX|ioOHDx;k?kB
zDz5!IEH$Mk)*NT=HC4a%9yoaN)zGB*)voFlk<nB-i`2Bc1mT<JcE&H+EaHMjoh?k6
zaSYzksFwb-s@FI0ksaFFP`}+IQGTFNGn^IQaH5?f`IwZI;7U39yodIoBwqP!r=y`_
z0E6n@%f-^46Q#QTn`K0|BO)}Tn+)>R9@_pJ>6Edad8b5g(&b{$ami6o4)NJDl~r3p
zh?w5xkyxpx)(H2KqplBI7d{I9w19+4^x`BZlAB>tHAfs4_pMY;K-F%Uj9N2)bgtCH
zTNmwb-qMG}>T1?Eddt-lDi7nHp3UXnN^AC?f4lx_(&P`{4|*7PWB#3#wY(<<Y%WPj
zi8Q7Tx+al_)T5+HSP|UAB0ux42;-SI%Q~6ExU)m@m1)e9@AN9{iHg*eb#gqVm?M2v
z=6tlmTVUx#j_5Tgzr#q!l&Ni_j;LC@xnlX}3fu-|!`2LO0LAz*{cG3#4MK&pt<~85
zi{4{;5pl-O9U}%Hj$-{SMkPKp^rN{kIc?A*3|u>Lnu=|>A<ht^G%RkXf4%iVcBFs5
z0k{f{FfbOIn1a>06|K454kp@E<5j`<Ot(4Esoh*X3Fb8g*AW=(Uu%uP0x}lAKOz+e
z2T#Q*2_D8_HaI<dW_sJ^$e)4h%~;8?#c(wVG*<HZ1ELTVobSme+9oDO+P-9xA7}J-
z*|XW^;-C~nWg2`e=@R5TL~}9@JK7%0I^Ucyd9J`PD~m*!e{=cJWEUjlCZ#eD#S>1z
zVDVp{Aysn;34Q(QByUXbp09IEuKT(p^V=IP8lC=+dicco8SAU`fO(Ojv9V!R&DSq-
zrg;XIM3_m{1r)1;51-$oG}{J4rDR_P6l5Qg7~}?WGR<I0=Wv-(=9iR|gobALs47~%
zCzoY^n^}jICklJ8&d9Jx@3oA@@kR}BuPU8(hm1;*Gao8Pp{3~QF%_?L!x|#e%bJ=T
zp~(v?D=+b%x5=$eRhYqlf@~;Y6C<<VZvEA#zcGSO+PwA(8NcOwYFrdn`n7v;1k&Jf
zN3AIzczQ=^+TCe&^yPax<GmUQ{SeGla1?QB0(CcwV>$=9Cn=(U1)Mh2nL|8I32IuZ
zo?aksp({{y2j)j_TsUMDBpzd&V`!?YYh*@%OR&AWe4HMs+qsgPC$Jfcbq|cs>XIq}
zS}#yHml6??(WWgmWJey5m<LK8|A?%dw+je;O^A=5oaPXH`@Acc@p_!=T0`jP&*<ne
zKwQ_=)02~cx%j3xsfh*V;d8tnfPujYd*Ju3b<Y@OHKogdZ;;5x3C<^=AGy@6nwSJ8
zQ(IeF$iGTCO1Jblq&H)kJQL2YcfT*#ucV|z_Vec*1fp>sdrr_VK2(d&G-_P5$pO~B
zpDed8mr9-563H$%-1sw?ii&DOTh`0V>oZf-Ty>hDzngP4g9R3~+EVvB>8vt9fOvtA
zFO|p`XW~a<PF9z>2$n1{muuUr<C3y63{+J8Tmu~)yzb^Cg1`8E3*$!Sy1FJNdZvb!
z`uc6J`27O{0)qV?V_^6N4es$Mh~rN_e&4U$(Z<%4`oMeSC@`e@<*^5U#`tmd)2sw=
ze3>PL<i4Rx)mMdFNF>_D7mN&acK&L9%}AwSf~^U3JKZ?k#KpzM6e3u9JfG!?!$$W7
zd1akdR6fec*bjx1`Q5)~oOz$wCg_QmA%pAX^>Um-PN@QM_E)6K4)LEqf7(B2A0KCt
zGC?<n-166i!Crj0tpvKofKv@UIbstpbR?`L<gR}A`n6Vm!`7(P(fOc9FD@K-!>6aE
zDe$Zq8Y(24<B{CEcMo_3k*7{ysi~+5J({%~>Fd+!ETIE3z-!Yi?^EV0zKWr>4=|zF
z*#!V$<7Qg5>^>k>-BjatMke3?J2G^#l8_|+!-z!smePTw=GY)Y5sUkdGAJYf4F$cT
zwDO4vw|t14f)%lqUwxK>PWu-u24fQnZE>D!SrIv@;Y_|VSi~-wD6;^CqEGEp56Tva
zP;N7Ias;anX};K|os5i3;sD{J%wEfiv_Dt?-b%!2nPRS-H_5`Sg<88@z~}LY=m`K<
z{+1~Qx>BGG=75p{0-ziGK+EFxVZOqqEph!^K3dB0%CGqf_4$d37sBt><=<gwH#x@9
z_G_oeoDtn4@6Xf@1ntfg{kXJs$K5&{3XPe8AFoL0-EXF_?b+Q|LAQv}cqB3T;e&@e
z6OFRD0U+0{(QN31`k9UvNr#-DR|C9oXSyzkHlr#_v`h(s@B{^3!fn;saW;m3ox1uo
z7WJC#$J-}}+=vLfDx#as93@1Rh*ma#$DUw7RK|AyARQgSSmC!ef0KU>u+U&Yw9Soe
zA#FNN($Lq}S8=ZPPHHIag0X#5b>;gcu$a180Xqv75y<?DV$Bpp;nY+3wD*e}E(J~j
zMbXZ<C@d%_C@C?KkB<+S(R|r@?ID$R45NyTj|XBRzBg)#No6||r8d8oRJ&vPb_Yt4
zeRkYksw{8FUuk_e&Pq?W^Zwc!w*v=w@LGQoz1x@ol&7io1pk-`@(K*R-#{sG3a*_N
z`v?;vr&w63$ThRBchzT(Ab|Y=dI(yL_I)iEw*w;4<g)(1$ON2##aa7zmywpt03)F0
zkv?+w!5B-Cc5ul0nnw(kqGM-?4UF3rf*1q%vi0HfOr!q9663|d(1lmyrkC~Or2jmW
z5B^wb`X*hk6`Y-&`S?BuRXFI|W33L}Wzw%2j36)k{EBQ^PWj#PyDxmda`raMWKyja
zOMTSzTTH?r0fjljIP_o~<?|*(#<%a?pf#zYI_=yDwOfOi0)hUEBiECJkpjhWAX~m2
zBMrKMXUA7sO}xWfqqpG9Po%ftR#bU!Wm@oaI${iw?pd+rKt)Zh%?bVeS{uJdMV)-|
zYPDPKItFb=&~!awLc^sIx>J;tbOTzXE5rF<1|RhK)lxp{bh(GToJxnEy^6|Lpj9s#
zT9eGrQ3aE1mY}zDc6>Hl<#bh53<&b6fx$_xavE0`$HMG}=p7de&4iw<<KqdJwzjqi
zFv({ZU9g6O16%?IbiRD`iKI~6+gNOXUmeU$V!9i!Cx?@EA51Iejk%vMNI5&dz^ql{
zZxvZ@r=6Fm1Em}W8d{;suaoW=X)v7ScDMwlCq*?hsG9i7=beb}@$<LOLY@{YOgbQD
zOs<E)U<Q>YC#6vlC%`hI$5Z)F4iQ~e&}^K?kN+sdePE{-Io%QFB$1_FlI>f<efk0W
z<<4$zZ_h?^@fAXkK9|ZWikvB7D~B%W9haFnsa$vliHB0Weqp<YcJoEY){%BDkP5;Z
zOv~RI;~3sbCy^PQ=#14qoc!fiM^{u_Ts#HGD}%}N>1_M29+OGFSldGss2;b~RAIHq
z&D0w=2b#zWX|h87o1Quxwrs9;uL%i!>5pRyBZ?nhr#GMgFBUr9C&_@oyV@E>b1}e;
zp+`Qo$esnWwU%aP9s0w*Zl^?`H}2JrW`sqh^1E{`!3?RM|D-eD=n=<lv2$uc&=OH>
zrcv*lYuG#8#lH($Yw|^0R(n`g`M6gn1TEti=~AucleRJmz8HIzm6h0Z&u47=+vZ_)
zZpGf-m`(b^yFB<WIcj0L#+hAxeX8#6jfc}f>>mvUWoxWqK2%4qJGwAOCCJmRRw;ki
z@#OApWc<nTab}P|cD`1vb$s%Wqk_WQ%%NE~cz+a!RZ?vbO(I9`1YgBg1!yt8)3%Kd
zreIXKcyiBb9w0MDfJcL;DV0K3?{xO}ye-&4BEl4BkE6&8a^y18h^tRhyuDjngL---
zBm;v$o<J)4EKk7Z=1DJa-rL+=;)d(Txf@Ea<)gD?WXU}cbV_^{6w$X6Nsub4D_Aht
zTavrO>nmqiSTpK+msF?dPhGB>znq^>RI7*yg5dH1*JG@Ng?uqWlK)M*lNHxg#eNqq
zs19EcBw$gl9i9L32FfmnK5#{m(85M4Y@3S=+o&zzD0RJXl3WRHh?2I+Zr%0cE6o|*
zxjF4J{a&J%FBQsTyJKi!b6u{f$^qE47YEHrJCk-pdYj>s@POZ&)}I<MuZzX2xXqMl
z(L+hwztC?Ns*lOhOA%IB4*!~)^Qt9R&6}C6V>vfz=jPUqd*raq)abTuXm5`d(OVGW
z@1G_zH8>a-+^Zr)lrBFfdFL{`z3e<&N=g;XtO7f@y^@lF#+$D)ZP#E=Ua*30SC@2f
zG?N(~7M4toHJx-nz_(J5awox6Y)o$VBkp~D@bD5U%c_mKWHy#}wtwUjAHvB_vDFoI
ztf*-Q+$67on-Z`_`a4ets@8;fD3QPRU!T7b54RAB)Y~{HskUCdA71=RAlz87Kv}Ke
zHorGef6+F|CxetEn@#+!9AV6|NPq(jn<IQ{qVD6<LYHDJWP#-g5?35BHuJJ@+Wxoh
z`G_1~XPco+%~d1jzXk#8s)^<JX`kWjV6n`pAPAFqSk4;zH4B;9*beB-#?nW1s{~0(
zT;DVv*8%Y-Zmo?izFsv4NW%?<x{>!U5;dcBDlRwl6&|kWXr*8&RWLT#Li;PitQQrV
zLM_X@-9X&%SbFp5tDm2rS%n(t7Spj*rEI@Ef=~YVkpjBoMtv{S$>V5KKO(Mc<Y|+6
zQg_$;iDVmlkO%A?@}!c4K(QZj_8bq7_m^i7zQgJMwA3#SX#NK?vjlFBTeW&?cEPzI
z{Hklag#)n7k50OkbFLAyX8xN@#O}Z33^X;w0GXt9q^Cf+*b77=(UTyOKUs=g^S1!Q
zw@Y`mnV2GaqoWJ&6s|>o<&y+H;*#5s*;nCg*mSE_vD}n6+any9lGmTU%@T~5%v7%q
zcVJk~)tj1|Yc#rJyIg>2?~TQU4aW0gS#It*jJ<ioDIm^LK2m-3UAH$|nrLsb!3Wv}
zCH(Atmzt{J{x&gdiQPnr&F{r#fB2Y7Qsf&3I=bq~JfDkLxAgE63^WD?CcPyf=Tm4m
z&JD7F&|>>%ST8<W?W>d<`%%X918b^x<nKRd)mYROd3w%UX*5yMqC7$I_w!q;f;`Rs
z5<d^f3p3+Zu!~Gi=g2_dCUerg9<sQo19A}eGExmOC<5-Ky}mLtxeVOGs=j}Jf`*ov
z4GaM1Y8^EFJG3j!+i_{D&pE)#Y`Kt6s)hf7I*^byMWerNINNb%`h-L&Gb%YhV$M}8
z<rZOr=N`&1F;kRdpbH)ihJKTV;qhNm6}`#oo=fopsY8l6nN{Tu8?eK2cQ&=K;2&hL
zxPN{nTViGy9lIhVAOuhyL&G%)^VQl(K82#$0ourcWbW}^k}&8fgLEFk$_$pw%S2Qj
zD8g7zFM$@yJH^b*oVpw~9^x0QRpls{#2y4(dSD~t-TqM;nEK}qnZG)uwXk-M*2CM`
z629ImDYFCKeVt%?t(dVhOrpL9q(ovK*FlzYxz#Oc823^)0gH)Xx($fk?Kq$}21buY
z0dz&=6M%IFckhk?G>XWjkL~gOFfJOElFq^e%W}y&PLIn_X5g~3DS>WqM$`jxM|1PX
z;9xIZB84QKA)=2iUytwsqU(hPz65lVe)ylH1!?o=z`zKjjl6?nS#8{)X;*~70KTE3
zxIlDic`P#ZC|w(trGi74q1Us}_tf7#57`)o))n>(gF(T#G@>9|$I9mW^?s=Y2vwX|
zeq*`QIlQfg@D%Ig?eTtKu0pL=>0|?uECz&E0bya;CkZUtUUMD~6?0TFJ-rQ|JzE5w
z>s8#81stzvGW(5*2Ho~N;60GMKcBa~eREX>)RRo+(i-y3dY{u65OLKL5ED!L0hz9z
zt23*dyY0gunw(!<0aXRLteIT#;v?)l5K8;IkGTj{G&E+irIR&lPYX3NT^n43Zth(-
z{u-M}xdxs<nD!#Trf6?^pB4k-44?{^lO;B2Q&o<;mmuUp$<P9TeVqAJfx{}r=<nJk
z*bk^zNkIx1QY%fSYd$u&*oRi!8h^mJR5-tMwWD@!u$m}w$?O{4*(E&Pn-r@l0cq8b
z<~QV|#fo*@qg0A{JK#{qtNICN*~&E74z4gAuX8&4*-%%N6Z(1WvyXqGw5M=$4iK8^
z{ANf!HJIw^($EAtH`os!p395PfwBNt<AI_=@2V2rbH3(&jotVhXidtn?|^y9LArt1
zf$UQA8h?8QZEol_eDj{*fn<C|k=8QCyKJgDM?{GB%-`r064Hlz{}khI$(Wf@`|ppp
z$}m(ZqvyuX#@SXTYTYTHxH`@JE_%{R0wAM}zPEB=Rlv5!<5rGp)Oox)vTGzMYePbP
zR%eTqSVJ<O&mRXO)l51p1ZWeD?nnAfFF|Al6{IK1BmOsUF1otG0UXKEjT;l1&Tg1x
zcto&m@)48@=H@+B1#to-rC_I{qsvlc^KFUrppJkY7ilwmNP+Xa;``!THj<Y9y`%)o
zE~{;1gev(bjS2h`;{{NNjEdRoS1=nY8F(QiEC|6Fs{7z^2nN8wsJX-DnA5McI0;5Q
zJxst2xu78Vv&7?9dy=#PK$o;~hY{0XMv&Gb(fpkkN%JdpYk5g@%}m})s?RIJ!t4@I
zseX8zUtM5|8yHbzxfwD#ftlYQ2(7g5X^h*s`>AsWbbbH&yuyaR_&@-`&6zU^Z7NQo
z$Yu0FX>zA-cf>kV^i*|R=k+?xaP3MN=J1FncZzfwGKy*`7lXB9WvO2FAbCC~95(v=
zueAa_+8ZzWq<ztx4dLh1&nOgoO&(13bE>8)P%u;BN{Er_n)z$XsOBy2rNuap>CPIF
zAr^o_>Ysbl*A<F96n%TyG!CQi)7^WggDRiGG*k3`_lbnNR@`S|-yA_}T7|E0RTrm>
zKT<<TNO1%#_t<CYH;6O*?NTyLtjn4sYjKscBqKy%@<reNy)>kSD%~Hq{1i7XlZgrm
za3!7_KZ@Zj(TskGvcTn^ya4H-j_$nl!tP!zEb5cEgEY(`2O`UGq2BRGu?jrRerUyu
zTE@<sKVc5(mEP5}58|T|ZleNCcXVC#2Zr<$YMsapbk(0pz(yr_aOSl2DX2$vh00~(
z6nbBa#(irTwa=vS7^90CBfS#7{6`WCC=#y)V!>qWAz@<WDxs?3)d{wud9u!Nj`_0N
zTnkbTmsE?l@3092NIb?eDgIzYpgjU>71^x$>M~$zr4ajqU;N^xB7G_go^9w|dy;%K
z)p2w@N`hrbVrE*pSEkSb5FMov2R{t5TFF7C|2*~#f;Tjwm@Mlm6pFEgg|%qJg{A}x
zS)RV%CjVdon~_GP9j{8F;td(!mWZwA2r5xlk_{Qr{g$Ww^YSv@O+Ge0#A6iiN*SfD
z3u}3--7EwZdRVw`EthBLXXF(ocuAF(hW|g=Xe9cG3{qCPFkVV5n@C6Ho=Ew}>B9`(
zIIw7cE4h#Gx9o;pBH;Pwsb5~(;d=f1$j^Pq3+_;}d*fv3I5{kS*ByEntGk^vH*Cbt
zw1_F44c-!fQ8)Mw-L@ylFz3nsTpp4>_b)3xavE=(*!zXOdpsGpT?Egm#RS9rrPPPX
zJaBm4sF^E5FgL`(TN0FFil!el%Ci)zV5Y47wkf>3_wNEhg13v*yh>s)Hh3Oppf-Fp
zV+7WtGgQ`s{y$5yiTe$cmtI$@m2M71hp!GT^c!l7gGK`{K^ng%;j}~qX|jWQF#kGu
zA;tBtxzlhP>Rt)_Z$aaQcooTeSLEc71w`@;VGbER1J5~|0a(k6UKWcV=QGgJIXL!p
zy;8J)$)&E&K}l)$H=c=v)I@i0ucN;=1zSrh`#t_<*|&HR*sy$1yaSm;Jd@F!f4lg2
z#r8mN=QnkNY>7#K{;xp>xtYs*cmiO61mIS2PqO86znk6i_?C|3ZK;)6-M)q>iB}Dd
z&B%f(2%%X+s=QZ!6u!rG$znPqr|D6<#`~rq)qqgASaP}#&`fkqBoMEk>HRDq1w0h}
zf1Z4(7Jygcc<GIOTvc57^?^Py$)#)+NB1Msk%H+Io#WX$<`6t4>z{C&;NU($gwcOB
zT&am`MxdVM4NTCeG~OrOFn{*G_gf>?mZG5|NV4u!lSyH~23~0~YklxTD*C7WZRkJ$
z*M})OMn*bOrB{h+-_&tF)TyP#;17()-<K=Y9<WO=36&23J6ghj^rX#GP)e!~bY3fF
zNg3aM%j^O%j=A9WY#CX4DmXaU_4v|YlO8*n(<PS4>=dY}0&UH7Cm8Q)m$K*XAw7WO
zwy+>-^}_u;(+(T)AP-<E)^2YTkk<jgm@6EAAXP7fM9{y<WBVB%o+!uA9w@gM-@o6P
zwgQzq8<@lt^Z~4t1p1Dl%<d-W85t+1#Gwd?xUTS*9}W%TY_UN$_TuGBM(cq`wFd`)
z1-GY&+~F5tIA3oQRSCLBzvHM{#kL@50AC#Wi6MyS21nY;rJI_7;0_uVxk9CTCWtKO
zh8@AMz2zIG_XFB<vOcJam$z&MfVv<UP+RYQlGrx|*y}jdQ#`KrAzBXB_V`SOT})L0
zfGpk_PO82;b+Y*qcy8Vo26DN{Lf#}-OYPzpm(Iu!9#9Yl=H{A|8CvA7ibdt46Eat7
z-H=_k4h$U3){VpEPc#7U5NPp^XR5>GGP`~!G-6j9i(Ktqax7C~zQPde0AK=lMl_P4
zYF1mcfLOvqCyQF?49n+DUrS;?%g{{baZ3yh{g6FhZPQ)vg7$WIPimd=T&sItskvVc
zaqY9Tq#GvyI++OGQ$GsLEKb5-byY;=nq^82U}1uEGVoz<YwK)tv(06oAP{t7G8;W{
zzl~;AkoI~KNX+FRtdeJ61M)T&tHIz(^{TxU&`1%I@Z?lT<`Sl%7&&Mz0~i#ei<G{=
z`NHdT&|^xoyFR*ja~nQ%N8Ycdh7Db0ou(mQ@%GKDAM@ku2}{0T`uGl}W%KMWxIG>Y
zHV??GcWVQ0Om%-`lz&!bp1JvMMQ_Iloea&>WLGLnzV92qz<kQDaN6F~Zhpz_+#Z=s
zlUVKm7!Q>Kxu;M$PDgILg5Ka8ic#H^SShB8(7CYM!osAuxC_uSJqiyE{SC-Qg+7&@
z21R7bfz#skCfvtrx(F@8r!2BK>0bslNEjE<fCHK9NtaJ<gs`(~<M!|wZ95IQNaoo-
zJU6{u^4BbIA_Eu?0w7*uXIS}oFJ8cJkN1HBR!=PV-dJxw7Oou0Z?9yK`(L20b}3#0
z(BOH4QXz+`sw%D8dynbp6N_o5?xc6b4Zx{gwDhEwshd`l{di|`8OS5bR*J8}DUyJ#
zvAT;ePIR<neC1q&S@#zk{zlK69-|n*+yS_npD+ns$@lN6K?dUMz|x*t?fo(++drrC
zc5r@Nu(sMSwlkEhw_Csb<OQAXG;E<D3anqvmL{fAWegxnU@6Sv6Z6cKInW>vXJ%pm
zoSi8@OkdO6!4I3%@+?z%zRCbD5X*_7iQ}@^%6Z9Vr(DoU?Z}(1)^JH|)c;bw(VVFL
z`>5H-qIA<2ag&QZizx@iGp+1z@$9zFR>Nx+7UsKH-4MT``IOCI3j$?C)qCl=yKtQQ
z4<Aw`-b#aEsX*vYSs^NC)T2R6&K4@wvXc$E1$ge8<29+(;+TQaC+$+3`jQe7Owfak
z=jrJY3<hoDIK4A<M(PQbn&d*boF6F))I;iQ-+N5OYH~0S=ELvET!%gie$hV6<qGE^
z<q&bjHIKmfW7CkqbZ=32aYIQUC13L)bx|+lZvlc+5g`5k86LO366s_6fvG#;Jphoe
z&MY51c%V^ZPXoY21vxMx@;7T3A0OX#V_*-|AdiCr#cCsMoS>KIgAJeuhZ;X#tp3_6
zRdE}ffPLy!May*}p<>|LpJ$*b)4(`NpuW1=s%5Ky8CmPRXz%Pi5wxvLj@+L>d)o>a
z_I#_j6V%$NU7$XAQAJ~2;o(;G02x_U&13zv0-STl)EWR=yW6#qlVhdLgZ$tjI6yzo
zZ#UmeqoAN11(US28uiDYpY~F+XY9{6*sXMC8k)cGnH?O_u-A9jNL(<M*$@SKHo*9d
z5iq3}S1*cG=x{T=!>WX)BNK;=tBgkxD}MZu9{C(GfG0DwAkz!ZWVy2N6{t_DWw|0o
zh@<v*=V%zLn2~quY?j5XZ^pe>xi}emy&#${aANn%G<+fD)x}=TNYgkK>2tp?YFVvH
zYU<uJZwCfFuQx7c$JZASN%l*O2-!i|!SBeo4|9`0lZ?Kxw}Bi3h|Nfv*ylbn;Y3qJ
znvP$5lgi*h^K!@qprJ8>#ZYZ?V+&Z6_c3B^nm#^%Yyg<tDwX=ogq2Ia0@iKhEYNWK
z(2*y&VarOee@=|eP7%qC=<B9_rj_jHi%VG3BUm4^rCDEbV@U-tJD|ZTjOD9VS<6-Z
z@dxcpo!y{->zVd}nwwkeWOSe;v@K}hsVA8UfCWs)3e-m{$h0m0qM*X4g{6r1i`_-}
z_&5~-pb?bWabgy8ffVzSy`;>;cMrfOE|)9KfNyeh?RiZq2u6v>(X{IA32#ThXKwDW
zqN97fSUZ|RGx>-c_4{rAoaPU~(i0CP;*TaO>~FEK9_;*V+uIv6)8Z(p+s>Pqot>3b
z`SvO8m58X56A$#oKDV0=t|LScI`5>-4f+mjc7~2ISLf5Mam9PEsHhq-F)_38{RJks
zv$16A?2N1fS37(6;c6Q@Q)xgbooa{5MKYgmOf~^R$oKEIr8abOw@D1@_j#51c{n*E
z&&aX^a<BGpR?m@Ji<S59Kp+su%KjXx1C1OxH6b$QwT{oP!@?G~w(zgH9@S0x_-5zi
zFj^mo$PZ7cUWCuMpg(t^c44Ev-5VMj3Je{Oe}>*rO{rwTT&x+QET8F*06@>AtqN<y
zc6mmo0qTz8Io1~o1L2&)LIP~OJ|(%Q6549-`LGUu>K#E{WF-2d0q0|j#hk?a2e=C4
z$1fW_m!)`k_I=N+T-Ir+TizV_4_0A4d!}P9sitN+)MWH0zs2_EzdgEz&RyL;hY~64
z6D3l*YEenS(wMN+EpwS;RAC}8v{C=9GclN`t?l!6#|jCvV<m~Pp`kcdldKYsCfWCw
zNA1f5<FrT0KLv#Ib8mR!Grq)lY^IaEdGd0C4%$pnMGI?m|D|q2LQeh>AoY29rXWxd
zG3@OpaWG#utxs&Ee7G%CSHfjYTfSn!!l8sfI5^m3#H8*?NlR<jxLcZ<QoNZ#?x+%v
zws=op6c!)<JiMud9!zFQLZasC&S0?{<nm?gV8%PWYiEawjm@R<4#%PzmOYb#0s^|E
zfvtGE-zZp~O*N4wm{6FYTskhiP$MEHHl)-QJn7(%Ry^@)#}s!g|LnsP-!h$9xh^iZ
zGdu;>A?ni|)TXh^hob_MF~QEqKQnoOkH>0pVHnF!z1hjKhC($(WGm3%f1k;pOJ^`(
z9yg@ZwdYeowG`B`qRIcYTQMjg;1@wc9)1D>?d5x}zGOBK7i)xq5+oDopcg}I_F46w
z_qFI;_3{w}GvYR^@UDL>u#sfEj-nTy*8hAcFR=@)3@EJTe!xt1lOFpf>f#`b8+Sq#
zKCCY`D))GGC|AXDww}>&M?WIo5X&PkH#Y>IVX%AJTk~G+dufcbuR-y$3}jaAbNJ98
zShVuy=2*2TnghBd*{!G9F>aAAfv_Opd47TMIJv_oL`}Ew!^7nmjA)0(2EnzT99S<S
zSZE$UK~<1ji;o*OIEpa=Mpgcr(ih!EF?pkb1dPT@8?jEyb%}{DrKQh6OY8lG>Tb!i
zWr^dMDe_m`+%&ALpPo;&RCO;~XXq{KPK1`a94qalp#%Q7Vm|)nwsIzC74S{2|0yc!
zC+6Q3_|*Q9pkTY}#kS$bhC;4#aoBiOaSOiuS8l_ZNVIk7gEcBNPTV~B>Cw(m1#Zw6
zN0Y%c3op+vn!7DPDf=MlxtuCn4bbEas5|ifF&+=@?B{n)qu>KUwnXmw0O@b}%Ehm*
zA{!Ss268#t+w8M6>rQl<4n!nHQ&lt~qqy$dI@wu_<fwXomE1IaOhoSwO~v*UY&ui{
z!i3pqQdafAgt?41?Z=(raqQmssx<MfwKcKb$$biEtLI+IJ=+P$4e29C*`-b!13|8O
zAtKs>IX6z09RHlKk-o$=-k)50%xT`K6{g$>zRT!GCACF`2x<7iYku^Jz#iDyI4a1<
zyrj1;&&p!v@;IJa8|&?E!AHJ-&Q%SyD;hll{Tw#78h{$h7<~M3#!*$Q(yJYooJ>PX
z>aaGVgV5xzV{dYLPspP)wU?B@<6*B>V$DQaa%6k7-cPt}6&)96vocUrx{Sz@keAY0
zjJiQ{6nwxw01nuACbN^-{SJ*OJELH!L{7Wehh|+z*EctfXmR#C8wX!MTbXL4BtN%6
z#ZxZ4@O5-@ax$PyPa^?&Gb?nlD>ilmx1Z<;AB>=$7o!Z%anwI~45xK}gg?E=U-$Ed
zDXNI*!K5-R3=BsYd@(kglob?o07F<4*~BmBlR4ZZ7HSeXoObqe?O4pGqN1V%OY5?t
z!&CEw{$K&jP#!^T3r}Wd>0Dwlo?N`utH9X%jbof@YPC0)7&n(E3?3b?3Vicp`f1cl
z!>FgHI7i3EH0wOUJ8tH^^Ddb9<5Bwb*^}b2qG`{~7Ko5LP-A>2O_Z^tq8cZDlMp|O
zb556SCGYRNOy_buUp71>H)b^>sx38ebvyj-oz6YP&KBRkFA>+(u+u$hqWOTJUZA(@
z7BN%j)^LD*e0-c09S~E{+tYcybV_H%7CfVYT6}d%V7or1i0rHUr;Lw$hZ6jGDI|P=
zjAVRmJT4*5X>Wj6E-we-z&5E$Yi=<+GwZ)!MiS|ANj0WmGq`{7&K9`eQo5c~muQX9
zp-gJ7ypFn*zzd^IUTAnw#l%#&ySdr-&D#;>30zN1SWAnWnwna<TmnYIBZhH7AfF`^
z6?up~>z$DinU+Rkg=4LQ>hHg4VsdvpW9=O!r7+L%@bDKV<Ea7zyMQs!E;afR2$QP(
zLGcu8L~csu<2B<)6j78p`mvUuiQ$Pok&!>_Qn}^j<-TZ2JS%2qTDDcpi7T0GP9wio
zD<fybtx|_vy7KzVFGv6@c!+6#FZObJD}S7)yZg%sXbrRZOa<U^>R3_hSaD9-46ktk
zCQ63#YYq;p(j8soo?i8^H(|FkX!W9~+H|I`C@JMX7Df%#lmD}Enpiye^=yvmbP&Xt
zXi05U&iq9`Tm}pcvoI`Ybp$>#8EN$+JepkHsZT{#3(SYtHR!5ddEnfrkc>uidm#M$
zwG?YUweS*Yu958B?P!J0b9xC#*amz{hB)lbrCW6??E)oJih`gYbdMw&j+Nd(Xx>pt
zUiLg<i%Gk}Iy9AMV1`kn>l7=a9Lf6|qX}OC+hGa6oP0AXjr!A*{Fu^Gx*!6Uv&+*8
z;LcEL#pzZ2`NtjH#-j&wZ+$QX&{5qR|8=`l2)yl)r}20=o2mEi(!^XT0ul`KRbGEW
zh#>gDkfuMN79Y=)H*S5i6Hg+g_D<mNnZAYH@u|f$A-n6_cP!cZT#u}PFBM$RPeDC*
zczxb4uz<=SK3nP~{NzM;;S3uS^QM1nR5HGNU}VVA+WDmUknl}oPhcR)*dHp-r><c6
zSAJKA8P<;yyG0)5uD*jnqO_^yYGcM#60u5Mh7GrsikS-yx>lqo-Odm<*Mewo(n;dJ
zD;#WixSb@kdbU&$jK3jy<8Mx05DYQMQJXSI7u0%OTfWU5K-VYN$1V)N&KH*!cRPjO
zxd;6;5xZd|z0Z*Op{d70i(BXK*ZBhJoC`%YSM}g7LCtgBIZx}56H7K#JVbnPax%x+
z&T|JSw}n~-x9vhoM8I(twDR%_d8AO@=wgXfnMUI!ouj>q$_shs`vMW_RaP9<8z1>}
zb#2hmMppe@UWT#XR6W@Q-X0J3gZ>A?rYwn|f|$O+psnjQqXd70P4BkW^CRU4WH@_r
za{3DSd>(rKaYS1W9e(1AP9&iovcn^y!&q#Sk3&tU)lg|Z9sR2bvgF0(ra1?7zF3)@
zkWD9jdvvt-6=*+uTWZ$M)!X*2ZI-P`CJYVtC9xm7vbw;}CnK_R-+S&<XJZhHi>~(W
zWO*1#C3xPB%}Ptr2xAb@GZu(NL4yd_4=#ghYuS^&eGgyaxEjATpK5cYH)#>@Rkj)(
z9T8yF%;;}F^ZU=e*e+sKl#U#y#1v~af6It<8Hl_cqbs&U3_U>9iClQx?(HsX7F&8y
zG`SwT?&gg$<td*Xo@8bNh2Q9i2<ZAk3TWVMZItfcK@e1#=gHSGSN!Vi`K=feSYBQk
zeF_FoVVq#{X*oY4pzKSAe$$*sG8a^+ZhLF1(#-6lKX_L`NkJhadgmE%Vdt{wnn%VU
zMnwyWW%azSiO8-!-CA7P5kOZ{QIR2=t5>ztBuok>WS3P)N=TS4_3+Kf$%&nqxJ}Gi
z7{)FA|GcO)8~@2<%B@{wG$XHL!+s_frq$xf5(m2vACTU_MFLA+Oigr(@bV%O#;fk0
z%-7eeF;=CtG$5ZT)2PqY8THRzo!YP_7J)YcJ$MD&xJM4cp38*;PYnrC(FVumufdgl
z^ATk7NWFWWr`I(e$QUK798UYeFW4otw36xfl4on>-QBnMED(CXx;pz}fwt4>u5d7M
zdUhlSkIO-c`naXj{;XeMu<2+T>4O1kYPE?b&)F<R$_RWi#2thrK(h#L*RdYJoDUr&
z*fRS0zOnQ-FiQT(vXK^8lr)ffABiL!Q`!ou)~UvIOG=0=aP{`|P+4L$)7b<2oErsY
zd0Ls`ygVFi!ldz6%ws>tDwRX(k!lqKa7^>^SghtVE`k1@sflrsYH7U1d<%(HM0q*m
z6+9xJvY678=dk#2mwKAZ{rcOb%l5$@kGS|cJ?I_1g!Fwv+<>y$d6bOFbY*1?h*8V+
z!^;f<qLnQ*h6l$?b#zjTifAY)uZG6fc#O!--2;j-UsA-dd*D<IYY45RuK9buZGM0A
zhY*Cc;M5F>Tt@MaYVS=suA8ZGQ+}q2le-W~t_`H@i!3a)Qj%(FCXd%?Cyq|kSuply
zh5f8UEV=I9yT`-IA)opAGs#V0K#1P7Mx9NPXP3w=>o&+BwUjOQ_U7vwW#K#5gPF3e
zLTEU&mvsKnj<lSV(0N5pu8H{ccfoZvb+U^-z1_|Ckn!;F5)$GXT#mC`D@=P6nB^5^
z{el9n&NtIPVLo?{mv}}EP>PX~NMYoEA_>wb`gTa<$|?`-OT2ZQf?fmYqrUvx`OQy_
zH?H>k&2C$Zn<fozMqXO}5#ycBgQ-C7FS|e4;bNm@Oe&65RGfc!vEg3A`$p#rlGk*l
z@>fp?r>mNrS8Xjls{w1oh~MLe`qtc_%+P_U;!9gbK>;ylsR<9l`sin&IzyJ^_EDpq
zsp(dFc8DGHZ849hr{h&(6-`GHM@*51E^=mOE;b&vsG!@Gvg)KN=Fi}OZ-MZmOG7iG
zD$8DWQc_ZNj_Jf5^Tl<A5eLdz14ztrCpK48d+q-~d>Og$&-v}BTrL=gtN!)3wdmVT
zS5O|;je~H(05Emf<S@J@h=!w8XLB=_L`=zKq_00y2eoQBKLpDGEG=D1pp=lFl~w7|
z`csX`jLBl?d~I~Q;|Z}LD$z~{5-{t^%t>K2yA15;PbPc!4)+C8=5$Chr&j$(otWSx
zbo4x$a<zr?Q%#@{Xd<sGmlhE*ob&9>?vDB9X5HD7DK#~)G#koYAUowg8mM7vBpx`0
z(*J2-@ZbsmxWq5e2(#kpY@)0Bn4jQeIbUy=pyNL!x^yd;{8>2l+G(Z@CGz&k&b+p`
zeD`$6`ou5H=|ZQ2sv4K8wa&#iiJFNwH#d{`<NZYpYdzq?nwPIIZ0+nI_*$i|ibbEE
zt)rk}K#%t<5|j$9=4zWCu~*a_7a}I>4c1Qy0Th76UJQhRI#3BN@~u@Et4iDqq*o&&
zu{tn<3)L$sd;8NL*psF_*|a;X_)klT0v9DX@ntcUaos}0i`Ry|v2@U)DA`{8b|(Es
z=<#G}x9h&wjUY3YMq$h9&*Rx?87#1qH}UYW&;ufVpcX}khYt;nJP!HRc?0cI&Ep0u
zR!%)^vn<!dLR#9%#_4x@_h<DYQSkhe39-5x@RlXCCnDbf4>r`4Cbx_CB+fc|@*0@U
z$j@0k$VzQ&ZXL<-7tzbg%351m1x+dBV5_0rXumS>p7}jn&`tZtpA!7?qxOsa;UU8T
zZLY@Cjp2N|Y$>_$#Lv^`@kT~QTyBS-@o|SW2i4oiY)dHm%%_K#dazxJidi@9ij0w;
zy9n?FM^Rp~`K3n=!~Q)Skj@3M{QbILd7q{r%TqnWkb~pUfrRYN|C)$M<Qy-XU*~-J
z!OmN8*Y7zlZd9(ndx{*ydzBTH={m04X2pLnd&AG(g=*%tGc+u(ZQ@Vo7zxRfUUZOO
z`fx~bF8wXVD@lP%4bK0pA{qSf3!d)R-fR2WZ*}Zz4E;r50lxo>pGab&M}V4RIB-pf
zxYmCLUgf{Z8R+kCiXKI^`}2z9@&^o-KYsIb=12r4Xc4bYvuT&Be)r$E5Q*Cdg{`4h
z-}#tY3#FV8kdGvILf?L>s<G`)Ds`#hJ`EC3zX(VGw~Z#eEU$XAzh;&029Nho9f<U!
z__KVDP{HGPNaUGcBISDY`#Kt@Olg>)l&fF?(1-puh4nu}=O46R-Z-Ocq1<tJa98iO
zEbQRE3}43bBNH_ufhQlt2?P9RN+QKMWAZXtDOGQ0Ht-<-TGoD8{qfAE>$s_cbIGVJ
zjW|0JnZod?t|etFoK1PB7u?w-;lH=!DY^6frLKOfdxDEt#f}hNM{bTFb{C}wO}p*O
z|MQos;kP&fAxsY{DMyDedAO9QV&H7J;6c{C@%YmdL^=;Toc~ht_BcX(h_NaS$AzZU
zKjFM5l3D(%nAH40?7tzAoVeM`vq$>(3WP=T-nPlGD{o-ZonqPqh)CMC$B_kZ_D9V~
z-(vrJoid)RKBkC*$Lv)S&y5b%Q7ru7s^zo){@%iP$Fo>;F)XRiK8Bx2Sg=zUY4I7O
zY2^E;9o|x#iqq9n`EIDLM1M>E_Zx_(FTEH-AZHQh_hLNPl!X}50ldOq+xeemp<oN1
zO=rq+)XDE>fkvpQ|KHuu^9zc$TH+|MiLaESF^C);0I$&pVdvi-^|i^{i>|bel)H*k
zk83&mO5LAmi$3{l(D1LD3Kc$Tl14L(tm)ZL=8ciQ)R;19HsHBotKt+2+5FGZe*YIA
z6IAYD5WI%b;y=IsA&m9zao61{R4RJ!=%*!hKOEDTuXEc}zGm2`(`t4ls!xU1Mtb9(
zXF&-6)9q~{{DrE1S@ZmUpa@L7mgB$sGEnpLz2D}p;rqe=*){i<3h&$)84dj3KYuC|
z4q=GeI`t-nGYlJ*vOoCuMV)V+-`kLr`ixWIKyw_BnFV48<*aO5g1%PQMMo^+Pf?77
zgq{E6@dghq0M;~~`Qlbc|L+%)tWih5B{YhCn=<;YxcLVQP)n0Z?+X7A-7$psnbvNy
zqit!2#*{kkpBWbL?WaEao5OANR_A7bmm<bb_vFj}Ze&3^tm!^7y|GRxcfgQL;Jw%X
zS+d^Obq^WoH(LHb|5PSIZ?JaekK6s9C606+aqwWk;AzpC!)s7^^W_u2efyR*acN4q
z-c}3-_WQp#f_R&F%b6Z3^BGdQH|u(~Gbqf<OZS#><^0eaac4evXr_MeZa!%}vvQG^
z`}GPpp@^KA?au#W>no$GTDx#j1QZDc0cjO!0cmMaLb^d(y1N@hKw7%HTROLNcX#Ke
zg-yr4?>R@$`R*N;KRO1rSZl8N&Uj+`5pY4xKGR%W3Qc|Y9EbQc^R|&(-Y|HmzdtK?
zEO$^;TAI(}_=zPpjuE!K$MJahk0Tiu&a|cPvsJqm^Nk6;<Az*)p*NYTHQGq52MdLs
z=OqwahQ!#Uq}SBcb=nJTmX<@<xuFl=p@Zc(+p{(P|B2~4!K5$vc}ICN8Qmsybj2@y
zL}aM;Ha0j6U|-We2wTjRg-@;3pY{QCK;Dzo@6D4kCi7X=Cly=L08$i+&uo2DOU*Z1
zp-q0f&T!O=R$;I&hmRkh{y`)RZrZy^XL=!=QgeEiybGj~0E|->?%^|K`ALd3TsFKC
z3LQfMN@+lw?|MK@Ig#Boy(C9~P6%C?_Dvp+TawMT;yQ1~J2qUpf8Sp(`0BSsg>Kk3
z>4Zta4s2{-U);<LR<?!$_7fL`zF(0mm=m05Yj*8!J2$|NQRZ@QMi=o4Gdetcp!=g?
zAT}<En8wU3<T<m6+e-1TU)Hd<Z;N6Q6A7^hS_^@AN0aS&=du7<3a{&Up&>k$O*-?0
zQXLNyYTJ|e>fhMOlgQH7dxle2ZgWf&`n>Gr%`2eUIyxp78Hvrr%oL~P=X99$iphxK
z&{CkqyHMHO%FZtB)6CeIPZRWe3mG_}^N(ONZE<l%bdq#PNWfKaex{iB=i*#3J7Y$8
zbhNyT4A6rW5Y&4|hQZ~USfb$y{C=b*75DFa=3edl!0Of||H}vp6sUo{>Ln&Na_{XF
z+$KG@BHm{=hsVUk$^#!yQAx?rupn&@bREy=mv4M>KHDzTZ<x<kR{Suks%<N9JqKPw
z?jchOqO#PKl>Vr45zaL{dI07VAK&rK@_g`vnRef#{pw!V`nsN0leP2J_zcUBtgQA`
zNB%4I<DCB@hz8ppeLrbF>BlfXG7a6;><dO_UPeYuMU6<!;kfOGn|Lw?w$Q4|%IN4Q
zb91fXOx>=M56EG)?pvIe-q6V0up@?+rv$hO;o;hP>SRnbhcw$e+YUS9w>woq`1nxc
zd}@Wvtad<v8Dya9>gf7KYBVsL9c2x?KR8~q#66Al?~1)iwfHZ^tjo(N<iI%Sg)4DP
zS7JpN$n}S53U-=Wxs61H-R>LK5Ik1^`gB6Y2|0m*Vv6X6z)fsRGVrb@->)7ZODTBP
zH#XvLE=La+oA7z<6p}elVW()Fp~(tW1y36g?D*3>K~bM}?*nzT#Y91IKtTRhP3a8^
z&~1m<U%P-!OHBz+{IL&oh}<&pzl<L3R~d{JTNnttWdFdB*Vy<9QrkbI)QUgsi??cJ
zZ|`wC3qZ-_z=sIPhviC<UV6&=&D3h6T<>)b(C%IJ0TB9y>0Va8yg^@2pR4=HI~P0B
zxffhqu2Toap0}s$`w>Y=f`A~ji1*G#Noli9#1RGK`Pn-3LpbgjRSPsgDF~+0uKFiM
zU9eKq*hEHRJ-^r=?h|9MQ16t!GZA?IUJfQYjMXtI3gk_CdU7`zGGETFkY{CQGe1~}
zkyTQn=iv#-SNE`>P$QwPczzA%9r^!Otu%zmG=3wp+O@mOhyG-A#p(Hkni=+xQ}mFI
zfv&GlO&^8M>+FImT}V20=Is7o&_0#^%>T)>W!CSAvWA+-T~weQ`W|f7Q(pAEK6fAf
zCwC)Ulwt`k*WI67?Z#>3?Ml7>U-@){4@Bv+QpIB#JoPO_kX*T3uW#<F4aMAZYEQn0
zj-X$p32}j3!_rd$Y(q{?PGUw@Sy>CXe1(Q$$eXwW?gx_{mApk|RTUKVEuZK@y?x(0
z&F|!Ma~4CVb+<f1<|0!ksU|K)k|z-@;qe;6()8lV2FdC12wxk{GaUR8pffP<vQ?td
zaNZ3(ce8cXA)GvMSOQkE1mus?%ATN*N_hH>I-d-#tY-JYPJAkCWj=Nf%sI|hn)gMG
z1InRlrCCo5;8h93?->CfMKWGQM4!5oA~baLnOr5M6FfT2{-{JigdD~B>=7|#xg>dc
zZTY7X3xq9?=!zw=Th8Vc<qcQ3vb)H5r^xB+*oe)&LIh(=%h9G==&#8YccV|Wx4Z1m
zMDg5ffdDSI%T1PeEdA(c5)5XSV|R8i=eXP~kR$j+JxVyhke|$F5Y*ISbgy5xkBw!@
zwjt9cuqSfp3Ij-b@toroY`-t6+b@KW%YLUlhLq1keS#mp8A2F*5gZ&cWjX!X>}D;f
z<zS({npWt|-|ikD4x<;!H~Oe`0J{D<Cxq~FcYl8`e{^y2=QN3CqmyQCweziu{q@!s
z31~Q}uW+3~(gG<Qy41833?0MIs}!qvAX4HbViC_BSMISMGxg!<SMPBkD)#~AD=jZM
zw0t5d>^oXo=CQfHxw*c+fr0(2DpN8)bocXv{g`6-4>j`FuW{*BC6?@ve7|b`w28LS
zuGSO~&^`xx+&oQ450JDP?drsM8A!EeEA^mEG~hw98PCFQQ79ddVeu7Ug3H0=cJa;e
zkeKJE^9Xxn<6Z7h+{*DUc|E&epEZAv+iQ99TepjCMw|maH>Z6UO%M0=?J{gi>9Pi^
zx_J;8Zq~N&^(*IV4AVuefrngz_kdbncFdi(0E^R=bZpi--19N3@#y-Z4@xBz*l5^&
zG0PSmNU&S=Zh2{k6q@`_KqR*}XCPsO13;|Lz!ljcrEt3o4+IkX1qPyOu+)^2R329E
zb3KcWLdCS)EK&)TlG0vz%Ah$5SO_h@(*QrO!-4Gzc}naiLvM?er-$PD{o#D-d_dFn
z`1unUCQU<3bHQ7Z*%^ZW68_oqZgt}h5hZVV@A%i|K9|HD-(^@TcirceSAiJ9!Owfv
zOHEzQ=AFfmc|B~BkI$E)Y<{5Z45w#?6cgX>F7|Zj&ue-93iFPA{zffyIpfR6y9fcD
znb7<Q!R%K<OeM7^Jwm-V*m?#Ai$CoPO(qIpYH>Yq2kT!E<N(;FQRb$C9!cPMFdrQm
zse5d|X-U9gG9J1=hdY=m-GmQ4w*-dK35tbA@?dg^0}kVD@%I`U8u-Te1qxF#KtS&D
z$5S#e^vA{`l2|B@EP@m8dF=Adk?^{`vu<@NwOrc9qq=<$z~I=dnZ>|FipypFEzbD(
z#Q4NS{tG%f_q$agu{=ODaEFd&Yq$A>|M+Rtt4_bXfbQ-t)!H{06sr<WmNvLSS69i!
zm5bDS=IZS(11ZBunw;+3fa}`sq~+&h+p|P=%lL5?mCDa8y*PcYu<bhYE{p<0Y4iPA
z`=y`GDLk$@9=BJpCBkZK?Y6W-g&~dF;W}HxD~9<y_iNy$Rb_a%c)yMCt<~}-omwid
zGpF%rd)9i^F1tlJ9KdM*{<vr>vo`mx8+zmL665UU4{v^;>6o4hL_1pVT7J5omtcm5
zDtv;NOr-lbi?ZBCHp%A>f-U-VjpO0gP>G9+%ar9Jz$U2H>j70#X@^gTdKCs@Xcmh<
ziE)T|tXCf-#<Bsh*D{@hDnuAvQ-{BYfeSN?^h?n3cfP)49pOitc=AfR@2}M5KBjt-
zgq4!ODm-qH!TrxEJ*AS&S*lZ5J33gn#*}iuK5MYqVDcRV;@Vwd#NY+ZHUPstfTxJU
z8*?<m8%)i7zhVK!(*iSja6R;zwaaVg5c^#=$HVzLhf{*n4?OaS%F4=D1E$&|t2cEO
z;GvQ780`7lZh`sJC71C;fjzLZ7Y-v3rRLztW}pir;gix*E{BUgae8>S&?Oz0R!}gT
zo~&<W^_B<y@#D<S#$sS%;@}2PK{eRi+-o=I%uoM-EME;oG~P?ARhvxY48WD|r_Z}x
zS2yObjuJuh$8tu_zmCgIzcmseaBiqJPfAWcah1w}GZlZTe#62NHT6<M5%mB*Q%_D$
zKRDSLa|KS-&%d9Nmv*3rUZ%NP-;Ke0N`dp81=r;?0V3+q{CFs^si6LLbowjZv-t51
z%60Nw4dC!6vY84C0BO<(bBNiM8Vz<*qEb0PL$fd|D+?Keh+mqzH%-v>VBR@bDusoa
zIrmCeB#hhT0w4rk4FRlU+h-xUPmzStjEaFVEy`zr-3g?1f6rKzOCDw*6F}|@yUZOO
z?@hcWdiqo|*Fxi}gVSyOBl8Kov{$+*6AHvz@y_-Zwzk&=n<Pp#AXmTEx^x<DckZHZ
zvqhKa<*X!{vhtGR;=YHc0Audegens@<I%4s3W|z>+h5BK0vkc7w(`2)ygSUPsU#!h
zf6U$P>1ernu-SQsMd^=mXSffShNmFivK=nuVya<0L<8zRT0Va0rg6YgR285tj%ORz
z;lhKahZi2eshyLve(%uQyUl1i@9Aw4NHmv)Q*S9KoINjfOiViAt~cQ1so3hbzg!n<
zItRvy{8KT%&u_0A-xR2<U1D}$Y*VkLvS8wv;b1wEnAA0Fr{~)lrUM9Atr_6Kg^5p<
zz8KE87Wb*zG#5<C$;eKwP74t{;kH{0+_j$Y4ZzW$*If5~bYOAtke)`<c+v~m%SN_T
z6EZ%ofQgAo-qBd)0n`(8w&5qFu4j99Ag?H<a9d|c7RJD?Et;DJ&Ptcemb5j@YG!6;
z8f^}mv<&;>xrPoVcBPUzeSQ57Di>AED8<AA$1x9Msa+qdA|Z9W!uXZCfP(`ak6RUv
zyFOHYk&uvZNX%z8TP`HzYig+5_V}l76@$zW9~uG2ZI*bCX3u%(Ayh|LMC8}u#YSJO
zi@ixIk8QnmBn4<YGik}_=mvfV<IS(VAn};^M*Ly(AdAnsCvwUnb3iWQ#fukIRKVjr
z^yxn79yjpZZ7i3&)5v#<?*Tc<Si~3~)B_1@#*HQ$sOXX*#FJc2wVtfZ%!ZBvR=?zr
z7L1M^6CZ?tBG?x?#D|kT1WS&CK-`s-CcDDuVT3!q8+{;H^=fvux4-)P%L|B$2ceGT
zNJU3Q%|i?ifiu8Vu}0h743cGs_x9ZGpILyrtVG<~m9t{COp%S^dFiEboN3isS}?c7
z@E^;wUOUIYfK{qgY@#jUxpZVKh=h<7r{#5fXv`F=v2(Ui!f*HcOF_a@EL5s8nvA;D
zjb95PU?SgGU5%J(`=!gfxTqkbAQ$oZbwmW#<=k-dcA3eBm<t*y@9OriH6Weoc5}h_
zd(3lWs8;R9ap>S2r3%|yEVe=v?tV4G-6Pu5BPyyeUG97WB<%dr34swMlI&dz{S#j_
z#X?23Iya6)F;gQWnYZtu%t&~`!onzLhq)rGWMr{nsls9SkoVnmD38wrmNWWq9g$&&
zwjbXA{d(55_H_52fh@7!Eh~R_m*`<V?|Jd<Ct?z}^?e|Q7S?2YeKu>q>w31MuV>Z>
zq}Kt(8x#k!^f$1X6T%t`cC+appwrvj+$<|A6TNI|S(u+!t+DuEF39Zy6rMq0G44E&
zP*r_b5u$tuT@iTnj<`mNPX6w!bZ_6?9q1J=0G4<cy+-}sJY*LrD;zFyeRHa%jb-TR
z=^^HI%d%eUw43abP9b12`!v#)nOZzoncnQaJ*@411=AM`6h7G6b-lTG6ogB+oh6mZ
zaow>1X};B~0qeH2eJ;*YP=5l8oj{YDTg2!8#H1IWW+Le>mpp9V-8Ma{&Rk7AFqhpD
z>lEWFI2lgPj#bNSvVkTW75p<EFo@`T#(6l`)a0-~3+Quh#=5STJFEqy+)mx#ps6qz
z%5h3KRxvg<_Vn}=W_d{8>!asU-E-cJbKdgMDXL8U7b%X_&HO00$CJjo`z3itWdgqP
zgK$Ngi|r9~LU#OZLg0R0X?eH^T*3AxMX@QlJ<s;0f32l9)k<Ev?f}<FzIU9Xu7;yo
z0p;aP;KgqAxR%oR;NE_uy*K3!#C(}pShAMtIwuN)Y+%45J}*CCcFU5ONR!*Mvk(}M
z%o{^=*Yji@4;I!erI*Oh4wo1hU#@`t5zLf_`;FUYxCb~CgN?T58m)D^;-=VYsyyv~
zjq0lr5*F5-1R4R=_FZ{OX^SQ8{p$tK$s`V7iE1DgIC=vr2?ISnZUFM?>B!Cr=$RhL
zoH^8R25OntoBMOS?3V5}xAUIOUMkFnPEKz6zjMJ0t+{G*Qf`;=$zwio^EYZglW3?D
z>0Pdvn}9VgaNm^Y=hj{o{41otgKZCxzyv4L!ScmQ5AZ<|@V4FR&$%+4Dj}I}^4zaK
zwK&kKxvSXkUTFiTkb$7jat8OuZ|7TAt(;GbOXRSeBW#Qtir#*V57ISJof{j|m<OZC
z+c+CCa`NoVOrRvD`g!1my}f;J@(g+8#V?CO8lZFHv%S6D8bmY_`<1D@{Jtj?AP2YB
zH;-`d@bKIjff@!yFX{N(OV7_4tsAI~m;8^Y)`J2AX)^9<G?#M{{qsjQGk}pa5O7*+
z$!xSI0s6h2YC%3&hMP<Fsi1A5a=CgVQ3e9bZ#BFU2D^`s<li<jF_G=LaKcdgrhbW{
z_Q^&EPIYGOW!zimdo1$E*1s$h1jyX)$Zo&fWBGj>`8l4FXPRB>KEmLt?w9&vF*X^Y
z5t=!DjomtQO#5J%&*J^39l|H5J1=S?{+hA=JKVY>WR$;L%FRwbMf1Eb`lqJ@KQxW#
zhR=)sbbVU==`Ib5gy)}6dGYZpDdCE!CU`GlK#E|iOnh^m2B2NLyZ65xF&Is4Y&`qj
z?9-oASfg??M53v_=hq-tGWH9L`ge5M9+i}omYyCN_k5`NP)Ig_keGPz#%!Y;nZ*->
z({k~qx%mm`C-cAlH!N?qe8Wse#>%P!W<B0Z4<TvB#`%9;M&dKFmn~6$xv1cS2dQ>Q
z#Az2-bsAb@xumKxkc(mt7zTi4tw)2HHRMSlDOtR|{n6S{RN~vet1p^#Sfv6I61j@=
zW##xYWEwuPRC4myy1MO;YcH%7$J@aqVdbs<fXU)bjI*lj<^CM|2Y-y5R0WUo19OmQ
zW`F_9P6xmyX*5(j^Yf>rrZUK<P>m_d$N*^h**QEVDQP}aL|R2<My<wzsfpmfjgkx}
z<H%DmE~-~V0}~RtF}ZRkX8b&}ccY`nHmHGO^Ocq3ad8hfr)19Vu|)FSI)C)|+0R!8
z6diQ828mCOv3HzLirUfBsGAmlXlLf<<6n=rtSq$pKJI1pD^V_8JT+za4|{&L6MY*D
zWq$Sy$Fl?Bx9c8w%HykRI&yLmV6;e(P){UP*X}1%^3P~7GqcUpH=5n4_byp*g(;Dh
z`7-j`V}>IEe7nAwsppI;s@1^0F)MQo3@|1yom>;+#?|ZXW}<1Q>g}M<@s!WRNuQ-C
za2p-*i}u*4Ff}Or&uYK-AyTY0zAPI54E4ESRnhSXhwbL&wP)%(>&D^`Ng0{%Ap?E*
z%sCtD>y?&E-sZ!ZB11q8#r^X5biVF!GN-)(Es%BJTVEdq4!(dvHIn1|7>|~g_HfDb
zXpWtfkkIw<<HyxAEk6F|`&@5L#<v|0iIy6jYxH_XTUAaDG+cr6&```=m8s+TAWx|!
zZ|GsNQ&8Y=SyHmPYNe6$QFA&&>H=WND?(iC7Y|q(gYf8`U7UDauNtLOe>Pr$u1Vvk
zUB_DC)~zchIMmv{A^jKn2sf=XI%1X<cYy6-da^k%v=NkLE9CJ}OcdA+Pjz-ukh4ZB
zLpSyp<};uJYV7%DGbIb&KK`KNV6&VN<RRs-DXQ~Dnh@{%XllCKpW3v%32ebgc#?Qr
z2f=t78w;!294-QotTu+#w5+UEO5n4^TnEG9AI{Fsm<{?9EUVI*Rq_f707_TBWqf=O
zmR|vm5!<bSI+xSHiN?z|KlEIe_#0h1jq>rix$EN%ar>Qd4!7-x4Gc(=D3~N-01aK`
zLT=9U1D>Wo=V15w${CDhddHNDJ_!(~@HwU{4X8Som4Czhop%6RQ|r0N5fi?CmVTcS
zomyq(V%^$Kw5fu}^%<S~D<FLcRG5x#HmQqRl4fjqc(^GgQ{s}7|7vRurBjCzIObZk
zpEaDq;>W<eG5Y&=qlNmAoSe>XS!ZWP|2CCsyE<?0dmBwK1x2AM;QiLp(xQ-K=Caxz
zFz0B7?evC}G&Q{qxuLf9uQtBP)ADHfCEXiUnbm#^_p_VJMMwi^rU&r(JYL22Wj7`g
zFSd(f8#yVLsB2c)*h@)aRK;^SrWA(^+*~Rt{IuPg+?_h4kW6Sa8oB=`-GNu+xK9hQ
zexAvw&{@eD-!4UIa*~TGz(DLZ4UHufADkB6Y5+O0J6Q~-Qlf#5@r@nT%=`Q1;I(Kr
zT|PV<S}#@(CnO=kB_$ow%FoMd=LM=P`eTMVriODhmV6)D3hrZy+@c^OgSEzB|M+-&
zR!&L^Np^o@aY+g3%$JIwzORq40D3}HRP?5;Z=gq`!2z9XZ*w3~Ub_p!)FGBeu|UTE
zzd>}f<;oKIyIw;M|Cb+7n%u8*tghZ1nEhoX(d)K5UecyTO-9CSHhsitzhm`|h$c5D
z`xhI?Sv`GyCzIBLINDW#z-~*Eg9pwQ4rGGvs{x!<qsOVk{IoR`YCL7BesX%cv6PUU
zEWexv$0u3hcRI%kxt>~S^H1S*@BcR@5N>eaNvKpT8Uukw)<yZ=wD|Jn<)aeIB@asJ
zWIG239aBFH;%fbq$?#0!+PXStCnpx;`KYN{(a4-sK2L+#x+k(B1guffbpZj7oEz9p
zl2TF*c6Z0JL?c`2P%sII@bKpHZM%w!8vAEKI?iw%?Cz#|3k>drJ+5Fq3(3d_n;WOV
z2(-!!5)<Q~r}yCBRVl)e+H%7q?Rcp#^si#{*&*(fi!Q^3N~Jdk@Z0qO`My}X!-a;S
zg6P7j(mBwW98b`?&bs^>^#zrlipoGKAl5~6h$jGX34*e#*ocVP21CoSoPo|@d@h5%
zX%x%@Lw)^6X7~iSof`!#AoP`$9e-tzgQwTwaHs2ZvN=_t4{m&=`CK)-(XiJJgGT*y
zsTN!mbV!8;<GIpH=ZAa}sl1W@p3VptbT^L3b}Da>Z_oA#O?Qc-keHn-(jU`b%>z2n
ztRQ+GK3VA3uU~<FA#hnY1JMtz2CxpmFImUf-QQ!`0;=Ho1qGpmT%qq5!FmRra7qgT
zAOLrKfc~?!<+ye=0LrXb2F*9BjWVD5m<^@Ws?8lwI?ZXcnmj_-$r>Iyx5>*Avs(})
zyQ-?rmS}J>X!iGk!kc?=gGM@;(|sVpKFSdY)I!?>bkT0|qoQgF5;%L+6;)I?{(Xh`
zi9qZGJhC2<T@e+1)X$LVX2DDK5?CHowTkn}b4omVBQ%t)9{WLFJ`zHwt*xr63RFOY
z<LI^OU(wMqTgi9|2?@C*BqiOX4t$CEJ~=#`)*a_4{^2Q5T<{f6iH}!F(-aY5=j2S#
z7(?{n1k4u@EvpAuMB80a?^!bw)N!ifw!eM-S_^|I{LeL&mmjN_6x91Uymu>tJ2K=v
zgZ;BDpiV{LEY*F)W|8x%V_0Hwek;b8465~j!3*~XU5(qp(8H!5ftYEg36p)j{b(5U
zieLX_yYs_NLpVl9HB(aKBWT(X>h~<)Uwp8jXD~9*HF8+3sHL@32>$WoEr!T&Hvbjc
zMrnd9pbh_dXJnM9j55#?-sj2<`p{!<upwTFobz2-&XiA-;`87kK~GW(UK#S!Qd@_Z
z#yPvV>HPUVgx=766+}MLu!v$54L{~I@_1C)%TYrw)b#XxY;58`lUD?UC~DMXDi<A(
zY8#9++QZj6U?qT>-meJMWd5yy5PF~aN<HIY<WsvG@+t`yr5`oSqXMKPC^Y}y48tFv
zF&vOVxoJpSllbKLL&_fx9|FSBR(=|5+JCXTEba4Op@D$Vi*(=U--|||!h85XUz(<_
z&@K7!9s&&_5)LtkK03ZLj<E`oXebM!XLV9he?KfLc>JQWeLL#H>dzBw_Xj`x&Mrc3
zRNb6RKcpbPC*T)wQGUq_mUmG+Oh<-mAI1B6duXX_6~_yWpHE5#V|@H}krElg{`)6*
zJ%7TFsGw7hT5wFGS{}GFY7;0&guglTJvll&J|-!JD3X9QKIINAnE%f#0IMr1G{VnY
z6=!TZ@0(=_Jv5&ht+{Di{2_o&QwaJ!=;@_3f<ku_)jIuLD1=b{;GbR)JQzlZj^I`f
zDl~u76CMKEgEP#Jl2U`c{h#m9h>Y=_g@nj)6i*9IZOWOjUb)F*zlz6_WzVCdE8W?>
zi+?YS%>VAn=2dqWE!(U4G{1mgZgz_9<UjZMDbW4Qa~ntB>88o|N4n?|7JlnV5;%*!
zw*8cF=Md!gVzmj0ltN<c_0Dgi6{<c(M504sgJ@nx+d-%<ZO`N5#}X-f;lEYg5fC~A
z5YT1fLAhdz&n_k^bz*O$=cP^cCD%V)l#UoX=p&!u$kdi1d!8ip#4)TCP2q*P`v*lj
zb7vuPzwpmAQWjt<tga_0X!SxKcia2}J`2S6?H`Zlv`^rX(_o9GVy|L-xV?S8jJ<tZ
zEXJx!x7N9`h>=mLJo@%~jB>~PR^V$gN=rQ@E*^67=_xLbmnr$50@ZOOH6W_!iEigs
zLm$QU#X^{j#{5E{Azx4bgi#<x4+1}Vx`hlSIR`qlg5OR>E<zrPg)=87C#G5)X#72l
z9TDf-=+<=iL%5|DEw4L;oeU=nx|d%|)KizoBZL8qQh$Q{A&9Lso9|mDJv8|!E}pvl
z59{CA1#G{^SqLsPe@2Mo-GHI=+T6Vj78TXaq<Sy2-3WmNjQ|b&$#jC2uU)wQeey*2
zjl6oj3(bjemxuVnx3NZiY3f7Dg(tede-_pgo<K8IVApAH*`Q%Jo&E0ZnQvk&;_Lgi
z34s6^-H)0KCY(|8=efw_C>5!57#)4ybo2(-hV@-h2C&OJg@qrQ{_q@%akjn7X}ziv
z-)>R(Hb!}-`Oa0Qy>rum6$N9vBZ|3R&@O%3=8<VyT1I3-Qd~;HtD=@zX@?NPiOeqx
zeO$?$s&d+MlM}8E=6dan2IJoi!%9K5fs;4%@zKsgAuU<x**++9CxY|W*Kwl7ejFnU
z!EJ2HCE_!**O%^>nGOGS>tH#5GE(ou?4c^tDH0Z=Cpd9S_rV<y<JT0TrKc(QhHPL!
zp~cg9jGCixffEbeo=)G7k)(ajc)B+dPa-t+j2|zMKK4hkO)mj>m0PQA-X-mHPH;C}
zzP${n6S<2fI++T7*+$8@`p#-QD_k^kZ_g}e+(3d5J~h1}kxeOETOiw3KLbtA54iV;
zk#{IneXKA;Ev==DY!X(jE%^5I(E7@yJ~;37S97YC>yZEJn(rs_Hf&|K9)=5$f!FDQ
z9?nGM>e>T~0>z4}pxmjs8dLYrOG-3oM8mtyi^aEB4u75fwI0S^sp6l8W8E9r0SbD7
zMp9Tfp&Hr4@z<$MR)6TeH%<P%DzsyGtyvF|w@5gcGybr6#F|!gv|9H8tjv%I`cpW7
z4&2<gC+Cm`_Oc44^S#-R8;Mg=F0Pztq-<U(lX(`;2w*dnN+HOnyN%@#Lel+x*qusY
zOozlF#C7)#!@aEgJaqLu8dUY_t<}BVg;@_(Zk><Pc<+8nfyt2FLry$<`w1Y>|6Gyz
z#;}iO*L-)HdA8dA^dOnA)n`GIw;{jqM3>wjI1xdqlLv!x*{P~?60|>D&v7?(SP(P1
zy*L$)wSeWp;rnRz;>r}9^Cv!S@_p5G(_%Ez&-sq;l25|ZwZceeL`z=~hil3d*x6Pw
zaDT2Zu+-xDRA#2B9)-8Dd0%V3H8$bQ#_7ap6BYpLOzYL;Y4|}`sK{DtefpX>VbC}E
ziq7hzf~fLlZ%3xAHVN<2qI5iW&NpTnKm!PFv{Ae@LI2{@w!I+t*>ua|0|~bqg%}?o
z_b{@I8}@#wJ!E&`8c7WNoers3HLn`AZ(Uq&*zj5Y4n0*VMph1$<s3j#0yJD%?TLiq
z+#${M){N|3UXPp62Ibhg3OEU$^`KXar~UryPutwakJdG(oj`j%gn-$6px(T}q3Ccv
zpIGr=rY?X$BKfCP$wV)Zc?==o$UBk+m~NK4(x;K|l%=vh{vGYRM&lbb>M?bQ%{}zb
z7kN$8!|FfnNE8dK>ejkKE-re^N1qiM4w(<7G>ApJUxl1uKIC+EJ3l|XN2hx3WPD=M
zR-YYg6~%W3<?|bOFvIda1(#TC)HkD#+^n#&=)H?-L9--SS(j=x<+he#Zvp9yeukvS
zkHeN}Xl?7n_VCe3CzqzCJSXS%DJX=a4w)~t5Y(G&ZhXeNN_hN)MY`r2Jpx-@0+(4?
zPu?F1qwl70R|g?;8_f5QkfBuEqbKjEu}I3nD-k(d0gKzEMh8`KT1!;AeL!c)%Iq34
zpVs5C*!vMqhI}w@|L(=x>C=kqJVyD)n4dH?OSFCJs|HL%2)KB-U&$>8sa?p8X`b#R
zIPOgQX%?LyCPQ~0ur>a4KS4uxJ^B$~M{g%=r+MFBFq$@2Ej}T^ZimxoV}}k_Z)$3c
z%0>2+oPvUw&-th9T`wi(p~if<G1A5YOb98u!Oo(_wu_VV)m(%LGWuR|Y3?;_1m}u=
z{dTU4<)RIxdWt3gZuUU)+=4iN;LLM!_?##;NsG;L^4nASM~jv)hYWU{-`#)==M9uu
z?PN}Gm<Soc!&#0fzNjC~JMsPdwj>R8zPkEkF3%7qu3p+OqJhMUnM&ifq@<*xqJBpV
zsj7Z8rpt=Bu2B40&*69e=Yz2ArJAnq0`64wM2v3D?bIjJQ3FeSM-857_4PZojBV3*
zP|)pT9`HGt7>$4993PoHJ~=7XDrJK|2di$E?QZI7e~pH){v<~43{jdU+lwC#w+_`I
zYyM%ys;t+`uz(&d=qpM}_E$_MEg7s5)=u#+qJtz6AN}*@i`isVFfk)pWE9Q!%&@+D
z4QuTn1go6#ExkOMw2;`?!vly&{&1GHJKM_sRE@}IneNsO(|m6I*&BetU*Ft3o|U%(
zYVL-=MjPQaU;X^bu;Zy&OXTOq%Re*$a0Y5DoPaB-zTS!Y@DsbmVw3&#%Sb-Udf7IY
zs9B)z$VgA0(%HGr!19uTGS)Fv1+cnEGw(xQc}gZFhlf)ib!5+LEoa9>N5^y9dw@6k
zw$Ksc>Ij{miTGKTrciHso<2T0c_3L+LcHBry+6%h^>N(L!NCFWu{B7~uw=(+_ksll
zc~Bm#FW^V?Ddv1k#<Fz*>_S>madAF3SgXr*{V8EF6f%`l)$t=-zTUwYzPhoS;x25y
z&}id50aLM!J=-2J-qT{<-&>MOcvm2BJ8Mt)N$$D(8O&pBw)i<?0NkT5>%XW#^&K<B
z<<Vy!8M>cH^YpLMZLa$%VvU(<eraxl#lY&_t&0NdxK_Q>;AU~d;ew~l=3aCcCOstu
z1u2h*!^tF10>KVA9>Wf_bg<<fJqp-j*eg(EP5Uviun@T)qN8&qnhe{y)W!L79!md=
zUwLF=rovP=H`KhM!giE-H2K(8j|BArw9IMcO|_b)yWrPl`@*e$wKB)^oF8cnmWv*r
zAZMh6b5s2cpJyUCcBkmmKgE<xA7|TA>$=0%H?sTKFM%P$Z7rtW$B%JezHsAEIc;b_
zrl*}yJul}H<0oM-m_eWBqQ_ozsm5H?@oL;RQr8h2W;Ujq5zmXTJL+Pk@39PTTL+2h
z6cy_fK1vULM%=Ewa1u+6zd>R_ZK@6aE>28LES@Wh#3{nSz&EB!F)pg7$C5p?=e-@g
z-S`!~$7L&>U?SwFhx7jaTFt^$^N8+N;JeHWW0Qg=HwSqkp?J={1<Pk@&a2}>q)Ug5
zYz&$|GivDF>vW7~jz`w;z%839Su$TJn1SVcvKr67c=^&BIW;08A|^)I`sOJ87HsS~
zg9+YqC5*qFoEX^*A^oSTSe{}5^^rG}d6&IA?I|ej@6V{<6B)NercvwYS~lgB<n;Ra
z5lJm_Vn)dh#zFKh3nY`ds^*#u#ogRiOL+VN)|ATuAGTRcX6dM+f?qH`R=9e{dg$jm
ztC|olJ95vvCAk58g|9aUy$^O;$YM4c&PL2r`9V!B(zEcE)*r}6%Iyq%+sqy)bU~jR
z`3q2By|(iRQgAvpI_k^1S^Twmy>v)zFH50b#;)$G`9M$a`p3s94>Ym^F(OlIMx(Rd
zI|;rf`*L{a9o1K%kB@IGB!m>0?yQD*--ol(@+8w!!<;So{2WtEQc`~8?bCC5Umt(T
zXVuiNS&EK=`X1JgE9B?oykcMw(M>D&7Kom6B=LZ!u<s|oGCT84J8uh$J!=i!IOj<-
zObz!#cKP5B<Er$W+ZxgmcN5m@<8!6ry#slM7*m_fKBcJWjabt48FX>5oLqlQp~8H3
z2b6#SptP3U=0CexbwNl=MK%0<`q`pMOF@5;gs{YF(^8ggJ0I%r29Hl0${fTd`*A=)
z^%Ei}SGy&|W0apYmXw{Ad^kVg!{^;OjJJ(R;qo+}?HAf*SCzkAlJA`TS(_XgdA(O>
zZYS|3woov<vUnj89JB>_Rv;8H4>X^%Rq`qRtaOHef{NI@*hCSXh&TllQTa!*R0+U8
zDjgO-Yj?O<)~qC!N-6bRWuZ19Dr$U?c=v9myub=GYRkkV&(tVSR`7ZR+L0ITGe6G*
z*gsLRv4)o4sh+?&8*g?`m|92vK5b16Tmp-d8k;36Hs6SU{J1x2{!pW*IqmzP1`1x>
z-J9VtLpIz2LQMSm*tQj*ZQZrjM|d|@R^~3Q2IU+>(rR#dss>%Zq2}Q5)qIFrM9t?8
zKP!vR5BPD{)<#yS$o$z*4NqV>NSwN&Sv=WOyeC_|<hU~56Q5AA%JXz^rh}D&B9taN
z>KRmB^%G0Z36?`qWS7I%KmkUW+wr*HsJ6a7dD-AMEd>QMi1YSiG|j6w!`Za#uID?m
zd9plgk1ZAoE(=)Ipvgmv2NA;uHkUz>GKgAQ@CDbflm@F1WMRsVZ<!DNpVBFRcd7)3
zt15nW*e5@!m)y$&xZilAAR=UcPa(?8%AheTj8~Dw#ALX;U*~!rkd-B<m*)zq-|ydt
zA=jbu8{Ld!RN82dtk5wB)#T&KjjuRd=I#7?ZV%Sh_o1IH;b+6)W4@SWw&yEs=5KUf
zai{XsDSf_0FSnmt%#}7zCQc>qxU`4PYc8(>5C!+`>ZWLy`DpFkN~R&k!8Ikv-F41s
zpJBgdL|k0^!!ACg=z$0EuYNx(VUxx$Ov=j??mP=cMSI`6sp<uvbzNUvF~4%U?F^UF
zjy=5^7la333y*a4uP16sDm(38?fYYz1wFJr$9yOz)+^pgy?Ma(xxf3V&uXT7(js5x
z&D7eGJ|`-d$FbW)0Wv5{qxNy{opOUF=Lv$Spnw8TL@NV*NBMmQ`%g{}{K;^L56V0S
zBAic@IU3w@UY-)Zs}?zzDhprQR?pkmWe;t|uv;DX<%KkKh`4e!I@|4CIA7iWP{d4g
zj{r@7btq+~47)Nc`JLz9H&)_>EI-D%<%@vFfY?kp+_dGeiwM)`n_?)Xb{^{PUe^j!
z6I}hdw7oBAN%LnI^7Z@Y-l*t_`?Q6ZzPmtiT-O}p<H3Z`#Qnd+uy3WJ71gO4OL%h<
zN&<=tKNgh@MT8}2Xy%KGiq_ZR{lf|h3TdfGG(aAKs#q6W&Ks}|?CdMs$X)^K-Un>U
zR_|zNdPhdeg01X~&T2tIR!ty?I*WPn>P>?4ngOFX(Byj{?XD;@A}dq6dD{_9Z5pK_
zA}sW{5iGJsK|kVKT3lZb%tLGp41PU+CsVH8F5Xsp6r{E+2T=R%e)i(9Lbhd_=zJA#
zA!Yz;xrlv2{iQm_K*Ed&((wH0V4lFPL#pN+lfH<QloBX!;4IW>xrdn3yQOI_Qsd*v
z_gZ82KTGUPN(cOs4#50F*6`pt-C=jMsl@Z-6J8qrH18%6$E1mvFuK($VEdO~`rXci
z(g#1Z_sHln_n+l%>KW!48+Qo@I*L?XTzqYfM#?Z$8X5cks3SIATPWKsN(eWZ_k=Xz
z%loHzD!7j|Ue(LAjvBrfNcYp$P;vH!jWcPorGFdi=~u4Rgdx2Wlt{%FU?}+^p8Wm$
zr&_soSp3n!r*7$K{A>zJY8%A}>|V1Rs}-TPOXW~0&~R6iq5B}WfoTL;4=s(z<-h3T
zCk1a1jU4jP1LGcN^_vY$6iz{9SJCPX1`<X`nQmBtMlV2c16{4C=xB(2A+W`EE>OtN
zC@Q)ED@w2<`n5(0)<<k|{W6$otK@<gI|K<Gs}R-K8f_-l=_EomqQMx$qhpxIzjW?C
zhKADbvh97QQBv3Ynp2{Qk338+-1d#O0rM#&e0#tBcY61-+OWrd4`f2>Y>N}v%sY9r
zhvPF0X=IQ!%E{A#0up?^hxx8+IK3_3qca#_SNm}aX+db>F=(d0&lC<RF2eov>C;<;
zrpEEF-LUoNA0k!J9tz<3(?8Y7%Sa>_bW<K1S9(^C1+zR1O6*!8GmHzwc}hf8n3k4p
z*?ptH^3QzaF$_0@9Sf5D8^D3^q$D_Yc{!fN`1lLb<3tu?CWC&eYQKRrac0cf!9k0j
z2;ausvNC7ST^^%h1koO>&TR%w?ozcWZhEQlrY|TLbvj?>!NF6Yz>IOq(Bm@J#9sdf
zHSidWraG$odj^BiPg(M`S1(86y#tRI+7`Nts=s8&DSZ0aA?>TQUSPDdBYP#$_PO^V
z#CJPH(30}sSCh6B;cB75k&TUkl)H9FOQjc$la-bHMcOhc*Wn^WSydHmvwneX2k1uI
zVbHP8kn2JK)3aRqN%!gP(9~3{Ih#joyDXWAv5ARBqm#h<)vjVZLN+tI)%G6au{#GV
ztF(5v`PyH9kM7Nc0I+j!e}8i*H8vrk=6jyEcS~<{Ay_zLKUr=9%0R%M*J8Hv*KAc`
zrSb7PHJNbe=+xLb4ECwU0whG8B{B^DH{l+Gs-0kvU3DMQ#CXI2o=z0+SjW>ccR9Q7
z!Q4~b{WlF=%E&Z=!m2wpVN$bKepeHcU@+8sgIg=qD=8@z7!-U2S2AE=hd49IuWg6?
zi5mX!URtjlDhJqhxbLnwA7(v*qM{-`z6uRcX#>m7HyZW*gM;+1U+clP8Ka&#LPrDG
z(4W7xx~)eKBjw|CJp-E&ci_wd(o@HruZF6ssAvz^X!M%21mO(<Z<?#qT~ZvJI+F=8
zXXi@*B{elR23Wk0!omhygA0{GU%uSmA8l|<1#b^<)Vu(`k<T<!Icx`8GgNeR?jy=r
z*pxH3L5RU1HICgF7k4>~Jbj|F(jL7qo3iU0(|Np>#P<e+D&+1o+E0R3pH+&zeqoQy
z`H{tAZ)h1r=Kmf)c<656@Z)*M3aF_JkTMAdBh&+I7+5#1@es3_eYCK!@MZ&)q`3x1
zcATtij<qi7b(=aM6c<S$c?Zbd>pj>Y)0SvLbSxPz(ugn&&kr;P2c;BB6boZ~g~Tb~
zgMpiyRg_Xh(wD3}AprrJO&(-(DLWPA6%L1s_@t!pt5Z{RbMver8AcGx(_ac+o%r`j
zK6-fiW<_H;<A#s1*6+p7T7JAgp(!XI!~QZ$FP<c0-r)N{T7LW|_SX{9(wJLhKSBz3
zMXHy9(ACSA0_i`ZqN0FIW1+G`6tBFym>4P{<73!m1+Ar{Ik7p-c%gEb17I&`13>-0
zQwZ3fB_>Ck8=kxDPMXuHR<6^X{~1+->>&|9<W*h0XnkrzD;qQQIn%H#X4%UAmc?{3
zIAc!FaO(%s;<^!PTJ}3RC=|bu?U~-=xn%Twcm<b#8$4>t%k6e&u{^s2>;d1<&4m%L
zUY%?W0mN5tZ!3EK@7x6bIgZ*uGum9rA5frjA*uZ5Sd3C)-e4djYn$rI1?#pw`M^vd
zEJby7kgA~pwzqTDReGt_#$z!xqA!<nBncZF51Cxg`hl;timK`#!7T8Tzn2Ch8VP?z
zONixFQ?oRrY2Tl#p%T#i@maRbFNDovUOih3XXM=dWV6b@YYO1^22-1?priWW`L39Q
z5$bIu<<M-+A<)>KZ>&R_cz~pMm1z3k-HD1W$4rZV#k?ITo!SGORELtexSWrpfT}2P
z&eH&EJD7W9WTZ$4!R674&jGm4apOSLh|O|rvRI9ncqx^~^=_h&9pZATS!uKaa4&x{
zBe?Kx%9bd?z!Yk)ocoqM+o=(}Cm+SdK@s2H)y1r{YEuUgUqJg(0kDfs0fM75jPx8J
zNF53r8@Xc(u}DZdn-5#ZE30#J8)_RKpj<Jo7OFMH!yQZiccYfJ2Pg~5%mtSn6X8!&
zf2NoHg;&yd!+!6v$8FS`25q4~zrh|ei~##OK)+E`oESVfy*|gtl};TU9*$$uH<6PY
zO=K^1MwdHbL?Dldd(yR0AS}E}_b-uEKj1xOU`kx7WFWP)fPgp1kgO~$0Oj)uoZ}uk
zSL(oX%NV4Hozd*M_JBy>jz;?A$y?{+uSZ8#$R1h=392I_;j0I7<wLd(N--%ORohgJ
znSX*N?G3(C@l&k5)bQ}ZZ()TQ6c)S`5*+j`Enymu5;VRcF5@YOi(7p+5oQHYu`fR2
zwf{1$`R`p_b#idb+$}-ku&CR>?tO#etFJ697>3XP;z|e*<8ri6|11^|`156l1+C=+
z#<t281ps*KSxesuvpc!I$t1scVPH`a_rII!7ZicfRO%Vu0=`fLCdO%f;8^_n1VK<l
zOO%@0dV<xy0Dl4;_y29~+JQz_%=af-TWes@+<e0Xc3U?z+sbVWr*r=XSX$JN2mi`c
zfQ8^=Fx>d}1E{$2|NF}k`0JVph7p=jg~&_%axegiEb+<x8{_FYK|v8;O5K-E|9sm8
z1T3E}$Q4)%@>>;yLIZ%01{V)c^gS=W0Pv@{Un)TARovd2H9Io=PC3heZ7-I$3iVYP
z$e734#{T+JEcg9q_@ZGlh={uKCs!UnQ_$A?0LpW)w|8LRH%KterWITbpNe8;LKH6w
zil-sMav0vT_1N(6{8Gz)eqOMx0N`MdNPqtt8cOh&@kM4}Df<@s0cx%jm5-8~lB|r3
z&a##q(M=2P-<Qv??+Y%*aCCSa_y_1AAY1_dgS-M`aO44~#n3;5aIaoecn0D{e69M#
z*RSu85xg*ORb`Zv48(F(Su;6oi?>HI4H<IWfa*+CS6P8_DWgt1RnD94K3auBCCO<e
zFw0P_0)krL0;#E}-Zo`r3{@66<U1+CU@oTzYE>qR|6DN*-QO2nRHW|WLW79V?C(Jb
zyapJvv5ARK*M9*fVmp9oGwTCN5<Y03d7X~7!8DfB@j$M+3)I#*yg^38MJl$sYdgUY
z0X3?|5&n|qIX)q~sfFxkT6>$dNey)L5S?pT1%-Lgf2sLnI+QLhK+f|tAy*QbcO_RH
zw}fP&IJC-e9($Lv0h6hclg$MbVWLK6MLD^hnF`05gI3Q|L2h5B^uj{d-7^RVG3RKu
zftVm{BvjoI;=J^GI~;}hcR)3z1Cl_g)&g+;iYuQiT|(${*hfL%W4Bo!X3P|+t#hYt
z(tX5YcG10wODAaTym8zifOsXB?#vvtLMDtmy#s(Ac>>7*b*Xb5Z&>w$j0d6^WPm$B
zkj!JdGrXb;D0Ka$UmbG@5)%59ir&m=JkW%o4yS2nTBf7`FZA1+ndr;n6}H5`p7D|E
zhre7`k7${gnZew0F{{VZad+~zXACb@ePQMbNYW8=xU612ZlF`E0T3AZfdtmwL{QMq
z$x2Bb-1znh!MN?FAMRXs4sZe7jiG7(fay}*_2=WL{Dp>dr>ni}-K|ogJznSIrQNAw
zz?aUn0rm+-Mn+FV06FV)c_oro+0yP{G`cuF9USYSbYTQMF|lTBmKN5Ry{G<RDQ7zx
z<7V^Gg_E#@F~|LS^lMC#oLoRRxW*u|v9jZ}-*odqMt{s=vGlVIP^(-|4;n1ma==q-
z^w{lgiZ0AJzR4z@Gwb7<qt?$sRxVv)VtG@$j5zU*^XE`+FK~(aX|pk!=Iwr2Bj*xV
zbC`HONZM4iR2v^F8Ail<wRqbVDwVpu4H%#|4Mrx$3-z{5fMl5Sk)@SVTFc>ZB+`S|
z*<dVPm$KmI`p~#fxoEYj&iaI2L+(rh@KZ_ooYV93g(ydBt+6Q%QN!xamw&0D<O&7F
z;yxVk-IwEEDHJ*6tiL$qtKFM%1)$NG;x}$D3NIgb-LiU{*SQXPX!gNVXPFZjb>SJs
z0|{zY?~(xSX12-We9zas=?*dO1~1_(L(*=(-hQ_%Gds5DGzi7KSS}kCau7<&JG$E;
z^^sDe-of=~n_BT;9-=HOTlQ@v@S{-Q=k|ocJ`3R+$YID&WBKaxK+!hQ26N@buvGi`
zi9C-*TB_14wsY7NE}{WF1RqFIzi~lRx63&BY9CaJJQ8Z682s3dOS_9X$YTsw9hT^R
z9HcqW2{AZOwPufT8DlBxV0&xPXe|f0t^dpdhAqCFo{&$y_bYBp%ZsQX;y&eY>M`DN
znD7y#IIK<@g&6E>I?Z@4sth3~_ZdL`248v|{|$~<R$gEEW#4vH1&W28u^M=Nm8qLs
zV}689z4=@*V6kwgc^=Ns&tE>qmDM*f5ktqu?oB3M1enKpp{3>*l$0W$YH)Gs0PdgH
zbrMD%gg01`P+DrqAFb6?FQ3y-V!EF&u~+s$PDUoJd$dnHE1U8P2A!+7Pwa`LFk7m&
zpDB;tE6YP6*3hW-P5_drcRQ#Gb<TZ!K*si9tU*LhNA9V+#X>oBBWMe5w!rPVNQBCX
zNyNRnyEaxKGNr~|B0u=Ch2B#aWMBGNAcuZitj0Dw+qgHHPYhRjBn%jFKIR6-GmCR`
zro&#m;LsM2p<}Qb1~#+|n&oDzS=4*fUwwULu?FU5=QD%=h*kuRbUs}p5hP7&(%jy`
z<c85$6meVzpbei{QgYC*V(YvQ>i;leKKuQhXyr2piEyK@$bdji!738`+~%}5+w*P)
za4Lghhpx|dr4JvN$N+W`s8aFp49_G!e0YzHu`Pax!Z`+*b)(OPgNb+?2m8}~P-G$i
zeyg?>FSnWAw@c<?=X7skYuNiXQy8OAGZWc&Z?6ZJ_X#BDgCB;j+GL(K(@oQ^%T{v2
zz2u}7FAsNKcRQ6@qx^(~*|dANxO6`NC4f8`4>C-v{O0zkB|LQZ;6ONYf3~<`45e$3
zcy46(rzKn)&v1)AnQK_Q;;>npGbX9=hHuWHNVBd{*T330KYyRg4vS6osi>G($R}62
z;oF50>rE+4X&Ed!veGEWa_mV@4{PVXW*W9FHndMxui<*H#|soP(=M0CHwCna-;I{D
zCOQTk!CkECh0LbUN#tvAwpBD$7MkaE;Om{Cj$y&-j&!_CMsrq~FT&1=yGnA33pgi0
z{BB#B!tba<uru5Iihl}5j~nh+Bi`^e&2msMWF2riSG-a_8HV9b)dU}MxT9oG|6SKK
zGobwiLvJqa>+g5#I`dRlPm%)ou=S-hX?gkG*(zFaFawSNI97NRU9O!7w+Urn_*htG
zCI(Xay?Va((-7A%P;ftZ@WAbQ6AD}Tu+|9=D*>riUQVKm(|R@T$3me}AubSjh>!32
zmZqCak4d_SiGkq)U-Vwp08n3Ty4~@7aX!#_L`FyJo0`fCrUGVP&m}k-gA0|F<(22E
zY(?x8#sMdX*TXKovEhjR87?K|#;q0@BmJ--d)0clSSQ(Y43(#Zaz2~B+M9{|wbsdE
zJPK>c%*A8SC`{&4CGmH(^hYNajAdbGr+oXu3sR<?`tuf;i=AxrZGp22Ny!$IXu6Lr
z=kQS|5sxVTRb53c{!;+O1K#$5Qb+3nx^hIJDJegvYAj#Ad`YKPl~c^)dX}Rc8S6LZ
zh}C14(bHp>qaez0dZ016sHq7+uPkwc8ud5_P0jSd50!^DH%^99HH@D-S}tXr6HYwj
z8cv)l^{8yL?VF!(<R5yLGiEAciRmJl?{9CaG*$>&H@mf~Dyii9b;z*uS})=AYhP4|
zF11At+cR<iE+*x3cuh}#*1HiT8y<eT%bq64MM)W}vki<{v&C^2njA%@jfApPCL{vM
zPIh`jqrPrqo`;cl_z}i!-X^!q=(`hHkaiDBgrOeG70M|JA9N|~Zc!?C`Cc39=g4y~
za*m%~c6{w#u3<mho-~rFJ&_)w&!Xt?sP&90%)ee)9I4ED7u#i6S+IdVR4F9Q(A8z(
zz>cNcN<yrer7@u{M0;o&X4S+H<s(0&U@>gG4uMqU6D^;0Uj8z!P;&pfuK}=Q|9f6y
zzOCQD@vsAh_Vo6S@>Mi>!U0gU524vI5KDrusd4CCM<%QSkb4(3m#A2>n1t%V=?V@!
zz`O!_Tj_aMBW);EyW;^N0l!Xh2>9iV=ISNq?ja(}fd(bob7k{>7Z%m)cb|Y+k(?Y2
zC1oNtM#$M{$78dZuDQOn;Za;}KgB}8VP(=O0P@|br3{w!>>4Q8kqHt3?Kcfrb`o|`
zMMYj*{PhhDlBsM$piCX#E~Au6fllASMQZ>bbaaDOwaO$poPmO(lr}Pfb><N5p}ShM
zDYyBR#Fg{K(LG_7sBX&kE;!Ze*D@ZG8(cM(V4K;uI9LrP`4t8d*wvO(77Nf8<StZH
z)MpD!`rb7r4t5eOU~j_p#8bRt7D?AVuzE&gn>afs=d86er8t*_%7@-<zTK074AL8Q
z%;kC0YN{n94PR)e>5HLPt#T;_P2a|NS13u&k?JxC0*wLnu4%K5<mYGk!Hr3Q)h}^&
zs!2x;w%u4YG9SVlqfK6OjKY{Hx!B20;mqfeYp<M;j8!gMlMS;dHV>nP_-6V!X~{x(
zl@x{xl(?9heawZ?GrmA7Lw001=r}@)6%;0vWMr#2w>k*pPS#HT%P9Q%ItB)l+2VMC
zDZsS~EYW}(0gx!z+}b+d9wEE)%KQXM92n+Zt(yeLnoZp^Owh+if7ZHm19*1{U)q5m
z_j+Z#>pB6HG^(mh-`)MT7FbJiLm)sE0<FJ)0MJTD>%^65nq04iKlwjhSsCAJ@wwg`
zo1Z7r?!x-!F(H#-XlAxf<`%&UH-gSFRTt%!!j&%aR&{i7aGpJ9lqD!BE^c!zC@$XL
zxeA~*#lpgJzdCch+oMKGfN`xHr6Xnvhvmz*y?*h+%lxhDAomqPnn=xHrTszU<?*pI
zC1CmLju{XR<M}s6-JI<w0t?ysa{Fs94@e*Y<~#%xbcnm7>g^S}oV*-0KHlVBG-Sc|
z@z!4?uBZw*l5cn7Q3(m7CFbH+N{UfuAg5?8EFi-e-tEWIzu}RP8~}JR$tkzoQ-_>q
zt7P{-K$?h>CX<@vL?sQEGq7{<>@lre$*4P2PG6+(zL$t!6nM+a?NyjP<k~xthlO`g
zsyGp>9GUPWIXvd4`&VmKn|~Tp8T`+WFg~Z1r@`s~J{T+-z$ohwP(48}4#qH0+pR%a
zK`yiDw@(j?Ujw*;UiWw7v7FQG5#8P>>b0&gP@-w~%6Ekl2VFE=XT&Eaj!`r7eK7Vz
zmjNoijsJ(Yw~nfEjow93#6T1SM3C5u(jg@!AqYq}NJ~kBgmfwhf`GsRq`SL21nKTB
z>F!$8oosdQ{kwOZ^UodUF!tDEsId6fx4!p%=X~Z9Fzy=SBOHc2I^>26I%pj5ZzjEk
zM3KNP-Qnh=+N<bZeKLIqcGhR(F*;e}i0AV&S_TFNIRPnkW_v3sP(<fenJ?hH0tD2R
zV7W&i7@V|U2@0m9ru3yq@5gyD$U<=7!d%t`QBC8Wb(Qt!92^j;nUInqsC_E?;*zJg
zx1@9n`&ah{d0D1Dv52y#Ff_AR=^dIHV}Dro1N0OOPk4fLcfOhSBzD9<4sB9f|JEWq
zrG^&Pts{<!DHMf`jjd<kNLfGLZhU+oxZ*ksl`yqpIl^dVd7AgdYDO5d<=Sw|c)Ce-
z^>^7*??pZ=h^V}_5?&$))f`1OFjph*ywh7O*DKlEv(&6VtqT(HC1h9sspV3!xz4k|
zr_NvzsgV`wapevPJNr>v*uXTYNG!cdK*92}e8ZtskG)7jwLT_Br6RqSnF>@{Od^h$
zlmu-<<&(ipX`3v!B=@qivQM89v&U}SNb6=s7cs4|SHYGo5DA^BD4PlF6EG>yh|i>K
zn$k*0`h>KPwc`8O9=D}x@R{B_YLQ{>xLoxp25N-l(P;B=YPPtGXL&Ph4rUG!QAK#+
zMXAN{@iI{*M`_GUjeqyn$2I5V+M6&WQUPCrgUxC9^uZ0<W)}n;!89tduj4^G6}!`u
zB2B7aZnwYo@d{>l2N2n#0yi#lcZrDT)2QZx7-FY)(Y)N`8`-RKj{Q*O$(5{$;;|Iz
zdG7}UIlF$hZ^NFq)AD^_APKr-h(R^12<W*Y)C_u0r-cn)?T9RuG9INY<qFd|XedUk
zD8TgjiFSWWP*%K2NpkL>Ngnt!Oz(W(>|eD5nN+#$YEVi_NVX=F;xEO-A{A9j%%)dD
zdI$+^u3xvdKf%Mse!n-$=Xu@cy0gU8k4?>_4&`X%qgdX4@8tnVzO&xiVP%_0aS{hd
z^iAQB0aCFDm7=!=*#!c?Q=FNdSyii&J~4So6U%o!gGw>q;+=)#_FApKHmH(Az6Ax<
zkJ#?Drl{BQkCvSsAlul-$5qRlp^J{H%6HP+PE|cYq6PJhR~mV_#?Kt1c|G2Cq{+|L
zZSq)zy#rA_PL0Ja{n~zcZWrenC|oU`n<F2q+@j#JL7FXW+%9}Zi)L9@b^S@n4k1}*
z^k5q4PZ!T@i%lN%%EkBgdPko1e{EQLJh#|P5{)Rg81f|TFeK!#S=*a6m(iNpUw4FX
zkgRbQ3DP!dDjz~tGQ<7CpdgSG(JD_EB<_Ybkgvq;-b!oT>D^Ady!WlpVQn$XT+H#>
z;aoV@-Jn~z$BT7!HagGeA}t5f`W~|judJJRV*i{yo;lcRDl@`S-Z5e@oEn-vIXDw>
zd9OJVpZZ?0y=sydQ=2IQiqqc*Li!gSBb4LIBBBO%wxwQW!tbJqh$~6jhQZm`vpd)E
z1PT2)Oj&51kgZh(uyD#OSML-DPN+GZ@ZolrIgws7W5Ea8|APY}r}`222+YmRp<_8Y
z+J~W3w$lw!Jw!snlY}==8o0Q)Ae{4B9Dqp>VJRaopCpPyqkQ%Hb;u{v8_w4Yq>v?R
z&(6!!oPPt#*(hXFV`DPRS0Ee_yf#M1(3Dk0McV+7eSnMGMb5&`UgZ?E-?3N^MmV~i
zlK>Y}D;37SYlE-)`cFnChK8esMoQp-1|FbSu3Q;*qgd`slh1oAx>Ut&hd1MKn;1-e
z_~|OZD=4B4uGVHiXi_1s*75Y1HSh)o1{gs+jL6E!$RMM{L_tWMAlsC=SYKU@QWpH4
z<FSl=OO~ksF{6dNzoieBO0%=Gb&91)D0mO*{J>GXj?l}oNkZfG<YlX!&y@BSmYcIX
zJNY&4Eo3__qGI6n&J;+UmYiJQfKwIywY;21UmsmsYDbArQIUVrWkDYxX#oKNY!=bd
z_8lSY3ZJhqB&aSs3%q<Xo;XpoQcBcYl}pb|LnDV!34Lb3X+F1-qsf2ISYoB`?j|>%
zM5EfL1P?pDd)!%eW@b{LD9!pbj-5-NTUUwuqjYYoc?mb=^N_-sS~S1h3m|d_gvx9&
zP~WSFo57Ox;&lB|ekY(PoH5ArBJ4KKW-%tZQ~=n1!9qnjgAE;<fPj3B=JT~D3L*;P
zRf^Wu9%R%Y7<}onm?Zuom>E(h;;@+h`YU>nDT4e)Ob~#LSROMo(;e!IWLWrRrKM8k
z!s;~G$(8W2f;kt0UAplcsq+l0vTrKey^Gciin(j(=&>TK6ciwrGwH-f*9SQG7Zwox
z0t8HsyGz)07xHn?3M~F&U^p*7`Ch)1NEDg6n9z!KYg?R9Yim2jk61v;@MLSY<?Gk4
zd#fYTn2`O9&>l#YrDSFfrq^Ba)X)}6Po_ji0N~G88|}<OPoE2hNeJ>D5+P4LYuH-L
z_porKQJ13HeJ)zy;Na*B63a_VZ}08V{7lyyL_{AR9(JkTB^8UO<FecP!a>U>aQf~>
z^mAxd+}*F>+~)S$C4sc3EvG$U2%?uoXiBClSjS+x2z0c!19YTui5wqitHI|Y!*We-
zuBX~e=~atIeE1%Y^H`klnWv<ri1-O*qYLFMm~ECO@VKaz@U3+B=c>H4E)M8%uesq_
zVf%<M`D)1FOA~S0D<-B!_bMn~+Aw&$Z_A^XGC#9Jth9bf{~{HUqT4_{cMGUmJ8%9z
zIhwD?^NGTk{{E=zE#Tk>22%ed+A~D(N|H<Clai7O;j&pQa6{P9`ULq`?Rj$P_P$iv
zGzi_0;%u2YG2LGcVbGC^6c#6+nSIBC$dEX3$0P#7l2_hCP8HIxMf~VS7@m|MT64|Q
zYHMo9ZqA{JATCN%w1LcAMDo2$bod>0{o~2+sD(<+2G;6#2|{yCY=s1ipopxj<eY6s
zM1n^3Lxjw$L;5F;j57MwGvd+H1xb@(OJk#sqcL7$K}NN+W{VztQA{R=6ciMIRpy&$
zXlPhiFh1!jW_XBloCz^cbx|w7kah&&-}-=Vap*79mHPVnhMtL-g6s~AUBF9-Je-M{
znTS!h^Jsq^#(F7NV7`$W<NVD?FeUBNr^|dfST~^lITw-*ORxyH>D~>K*f>)u0i2}4
z_e`xIz$xNJv&YcIRX*Iz*jNo0$*#)N)6;TtJ()QpD0XJux)5qTUkB;yHW?p-yCfd=
zlVQVL<!A?MYZg20*T5(+eE8_m2Lj&PI&EABlarI+!P0|kV`nF=-+{tiNAa`;yBYIH
zh4}9ejT@IDIP8|tt5>Zd4DypiH?3BO+nV(+oM@qN<0I^(gwnFIXx|yYWQvUG>b2W?
zOqe8GSNAqIORUz%Vbi9jqSD%;J7h?)fe=AnbvoI-#U7o>Y8R;QVNF17iQP}?UVHnQ
zN#-CIl(VnX9TugIPxdEZ9md>09|4x{gphB&K6d)re$SJ|z!98zoRB-@+Wn}PG43<z
zW4ZNWpvXiUwl@9p4o%K)*1l{3U=!@?$ET2CY%;MiU^1Mqy)tNOc-R`!(-K6jj>64Y
zSy_pA0kzp-cY-ilzZjSa8g|8^*_D;YLa(_8>B;^5&z?UI&-m=^ov`jncIN%%OKVfp
z=ElaPQEW5Bs0=57Y7kMK`_N=}sSo$zLlbb*nXPej<T9>LPD;YLdzbj9ZM21ieurIZ
zW@cnWL|Yk?hC1V8p%E~`YUMQQPsf#hRMTF{%}{z(Z5zf15*wm8-&<O|E;w%qL`eum
zwP*&y)Z+Xr`Ti_Ds$w)86~IA=$#Z#ujTD@{)A}(8fk;;=6U$Ic6e&rOYlD$OvBzb6
zA4YE%hu(CByi4W};Z5nPUFH_SB;rK)`Qbv?Iz*k2-_hRsI1CqGU^wL8q{bdQNJv(a
zNB~EwkO_}I95<rcLg3{Wke8b~ItHKLIy_%BGZP<7_Ev^uK#Cb%k<1|r)mD-5SZLE3
zrF%`p`KEeP6*kdfAud>u#&6zKdwhEI2AVQB7|mJmX@c3`R6B$87OM+f9Q`g61F~6l
zcR^obqYdGaoi}G94YZNPo}`|K3*`%>PkLcoiNSr?(t37qGUZG4g8AvMA)&KS{Lg;p
zOr;{i0ItoDlM=n2d#N^CGdZs#^7VT5YTSfnKwg|sb!Js4B`%)jbanwgdi0w&6O%;2
zR01r!Tu_ff?i|iX83C^b^~&Deer|dB`KAD!@+2%i4hN*x_ls$djLp^FxWd)I(Dydl
zCWbQ$G=A;jtUWQj?u3VfLd`y~|BLCF9qp|yrhNR!+ZCZ)<yfK95sA>qTV^>rI+}oj
zU~C6E*d@#3gH6Omowsjce&8DM5&oo^nlwE(GXn*&&v?hh?dXmuE=mdtI2`05J-`-<
zoPwevX5vuz9N}nszcQF3og{|XmLfCM(UE^?hh9dGlb8)9N0^vPg|9}_RdxfyrEoDL
z_&ys3y1YCX&kte#Gt9;k{y=^Oijh*=UF6q?9}j{j7lsQ)KHp6O0|lPN?ZKRBGUv#r
zQ?#b23y{4i-x3vTzc#7>5>!KNSUONz(^)J`GMlLONCUG+PVPF!ja{K<I!jx#X?#~Y
zFJHdAKF+!}T(G@0>jicKHy%7wta3zs;tVVmoI+uj+wBqTm=|`kTK~sT*`PZ;BQ1@X
zn8bEk5}k^eIN;m2My36snwk&vx(^<NX)x%LocUgZv8UdCP0?QLu{?Bl)h8G!{w=fU
zhHCc<;$Mebk#grqxQdd$<LCcG=1sns=n~juujQiC=DTH!_kgKdOC<R|z+L8M`Tr2a
zF8}sBr!c;DvpIC=bH|GpF*^axKNCA(Ck9rP{Q;!jHTYh+iT^_m9&oQ*6$<4Nv(=r&
zyfnECpqxgsmD$4}>1IHYE{fF&(wm60*xKe$>H!4Xs=71iv^ySbd`?PYc54T}J!<<O
zz&>DSbvXa*rbJCmbD-KBA0HpcRH?99HwFnjc~=|~R^C{JU6jx4!h(pT_0;VxTiwp+
zhXniEI{T<sZc6&p%M}_K*sPDE;`w`fpLpDkyN~jsyQk;m_!xTH!*#Y-B@782kM_7(
z&7iBUW(>L5U&Bfzi*BIynumv{sauD{iKob8kpZk)snhzNUW#PmVk2gw{a1>rky4Bj
zN~Kgd1AG!0a6ihrGwPBp9GnUE_3%X6A$LCe`GEnCjqndgNYUJyE$3r}>6RICCj}JH
zpk(jtfuMxp!Sd)Dc$UCZ;QS6AZqKKrrENc&Jlw{iQOqCg>Qe7Z#ipQ04W?D=>Fk{3
zf@N|dpQQ?}JzY4oo+U+LP;%PZUe-1TKS1CJczymH0$c}g_t*{f+D|z5ADU#rD@k-%
zS{8z{n^K`6TA!}LGSDGhEP)3xmnOdlwlXG=dye`Sy}SKC^Y`kk7}z1+9v&Sr9OlK~
zZUVumv!S73V1OB%r(m+)8T}m?Hy19PVy#HE3v&&j(G1Q6JLZ~WLx2@*bcC3`Su%1G
z5`&dv!=0T^pFg+nPand%lBHPSzXV70+tzOh>8;*AK5u>d5=BQ;%J#xpOhpD2yUonD
zU=?_JdagpwEpRl@CS(L_AFx?`_3{#i&H)Ph%b0{b*XR>E(D)mHxj^b2g<hcF2l47}
zu0su>(;n`)x3UONAvhvUPE9ra+V;=?FC&IczzuAp`HV5DdqApyGXOenNnzozNU274
z{T=vi^4i+k_bN1DG6~QKa(~^#P<gB-7A>HPI|C*s?zK~*MmMitS1K`MH3<gB3;ehn
zI`FLS^{@Ir5nlWr6cNrzrI71^&iJjmx|&Y29$@&8Z@s->%c*&7d1_ln{+uW@nxSMx
zalUa`a+%HCN814m18y1R-b%Dot^Q3E3D;4xQpw-^0&X;l;3q8S#KEH`UzLcVVOw_M
z%JGV$&W@>Cf#PEOSb>qkAbfJMbD(H!bEc_>R4hDIwc-<SYP@i0vjgEi?l4eOi%!yP
zZEXSjQRFn-Kz$6>nL0dz0VLig{pqGvjt+x;nowB)Ns8HcRPEfoAWLm`cURkWnmVaP
zNjB)`+)V;1_^0U1%u3VgxuW%PsJ*@ZAxoenhc`Q3-boZys`nufaI5nQmI1kWQU5j&
z$l!64&0XwptyrGSR_7fomgDE217{ML)y`$iJ$$$s^;u&Fp}4fPWVte^H`_c*Djpf#
z4E27V5|nj%20#Y_ysUPHwvEp4z~jpPy1To3SC7fWbC~N{A8z%vg%y<+7ats6YxIMe
z27qd-7Xtwx`RwJj+M9yPZXR-D^w9kW*5}$OnGD6%gUz^|WW|Eih_U5|yq}Cli~n_=
zM@e>VW^smX_(4Jk7Mog$nGHB(Vevzw2?t+ftPY9E+P06ssME8jPj&m#4^L0*0M)BY
zE4M%FcD{gGqMTV&Brj(v2fGtFC-{q;BAHA|=1)(qNEGAWy&Di234SxgqN1Xjn$u8q
z=N^%ekc@%{2P}#2-(LXPEl;Nd&g`s+3{mUxavc&H8ctGDow-(A7`}16o0OQSte|J$
zQ$#0br25h#tJj;X{^reOvFS9p4-O$O5@QwGO~8a@W$3(&fTCeWbaU<<u=xJ54nlEm
zP65g%bl-$0&&}s76czDK;<q4_6>|EhtQ)_+cp@AXQqE`-?dp1oul_jDYHd6S3|;%u
z#ARf9T~3Z*XR_VY7_VsqN*<t>O+Ezd08NQ4ZZ`)~!a6wFoSr8Z@Kq~w^e#FIXU$8V
z4Wd3Pw^r|geglY?P`*yBN7ZOhrj<Z>r<9|Spj)fe9?rQ7aA+9wy8XdqY*JFgxaL=^
z`!P?UiUfM+0(drzS2|Q#t|H;!-s;Er&%<WXd~nJS7zVrP&)!^ZVKN6ocFR$C_@0@J
z=R2LLCLWu@P%oDrdes$a;5ULo!*Y)PZ=a|eH*T~6Z!#Z802p0Rj}|>LU)0mp?Tne8
zp7tVqNWAls1q>({<7?vFJk|eWdv%{~mR_Xit&xff0WOO3S*lvq&=mnY=(>JwE{^EG
z&&6izYd(-<C%q$5!oczEIHeOifRo|SYC}_A^(_n)wv3tqhP#t1e-EukB*YW;zHdJT
z$S`h@KYr}`pZ7P@d`jX9g*7m66^e{2Xw^8k*KS??cOP>KJ?Fk1+jK&3!b_PdM}|Kn
z#Ys%!tmtTf+GowQXJ_t{U0>AGgMlI}`xJ6=@RCplSAkmu=YEJa8+}-Rzu@sWBU8bb
zRC%3f5lKWAAEwc2Hh4x<qs$FB|HqJkLhMFBsQ%It2I9dOg{+pgwnKTvH#O(S|B|32
z9>VK<<&;M$ZM^(RHbf2OKL!TLSGUm7U)#jhEXbws;DjFz{bo-MqnBCz!2-@NhMTXm
zzh6E2;t4tqzQMl)D{j6?vl0xMXtk*iAUOVW8=O7=q9kqLMnhuLumny1`P*}Z187tK
z{_%e}DI8#%mQcV!iH`2s+QHo*E8X+eAIa)<Us$-MvkM%QLWFMq=l51;@$vGeIUE^-
z=wYR2V?#n|gfu0ETm&suI!PVU(SebSclU0c42z0Ng%5!p3wzbk@sL|e>r>Q!f4}2H
zDXDPdF(kBm!^4~oI}1U1c^`em0t=1U86>W$UuNWfQtRgzAS)3RB>NRyJyA9cTAG?$
zMZ^Wg1zVe6Y5sa6+>A?0=lpfB{++0@V>s-I($tJg`83u%oBGUXSV~DL_|6i1YWwSI
zN%4<Cm>aybK3Wp)=O<=_fsqQ0$#~DUS6W&CP^PBq@7daZf@2b5yNEc;wMVd6G%9Sp
z-@o5AH_JUaE>~6_2fxO=u$ftGNG?!J@O)ut*t<MH8{mH@MT(z4QIhyNFE8=Za}tu~
zp+kZj{!3*Ri^Rml%L@mdg<z!AGc{gW0P8L$4mP6AT6bn}7Xu$Ba2*p9Tj$}qIK+D&
zH>5XJR!Lf#^5Mg&>4yD$d6y|rCo&uKhqA?Z-NMG6S~y^%q4|{Z7;a-Uy`)UvPkr1*
ziqyXxE+=Cx#0e3-Mh<qn2mf9zT`&3E0O){PC{HqO4k{!W-VmzU8X3@EsFd#X_w^m^
zwT+F8#OcdU@2!?eaXjgQ^AK@0kK;aWA9yWYy?HabvxL`u4bG`p!Uc5=4Sqc{ms)a4
z^AvGUE7Xg}WQ&>7NilAGO5^<`qKdCxy#i=Z;<=IDkXwdfU+Tvcy|J%fq4Q8FRt^-4
zu$8<cx(ju1uToE9hLm&wF3G@;ANlIFZ$-w#jmh!E;gKPC_VM+VmhOp{JRiZ5;N>M~
z>v(>HYVOgKCqp@!;sg;CX#9|hTNcXHwrDXr$|)%~USduw*d!FNtN{;8LQHxLDRojc
zm^UEyEBp`^8WvZ7ufe*ewl;^|C7Zmr8OsAEJib4EToM;A%2HD?-|9*P)e2a+kvPrK
z*A+ldTi4@_rvR+Gv4)0#8U<9;xPyb&`kK1BA~*2yS2&(mN*sZGBinmC3G~*rc6x?1
zxW#8%v&87pi+Ur45x@n_aC97x;$oLpZ~U4AR1So5PZyU1a&mSz@Q!+FFaiNJIJuEV
zlvMf(e46z1;VrTRPv2as>o3owr|*v9tPnsG3itLl(AU*<cfBOV6XEX<9i7oqP`l~I
zBpvt&Ys^b;cRGX0FhxoK?)?P;7Z#OAiT>PRx4}x5st;n1<lY5h5u%xy;#a>n1c;8f
zXTQIO?Qo+1=~Ew>95DBvxMf>fij(8{czLN0q({33*JulAf`1b{%fyd(c6Ttyzx4O_
zCtwY>trG9XrG)HXNr5^N%$Vao1O?qZ0f*dq%;*%IW^<eCYJ($O^F-HZulsmhWuQ-e
zA<0DG)op~0E$i7>qKs`>ll!IB7n?`d6*%88U8DhsP*pYNo&404Iu>^i33TAiohga$
zmwi@9Qe&pDi}6lRIkA3V;xUF^T(0JJvh{==t66Hiw8N7E&=<3v7xlKCzgB+T&vz^k
z0UQ#7`~Car&O0;Pk-Yi8G&KWYsY^PnkAEazO&|-}QuZ_$5(zm#I>u4GR;$tvq(EYI
zoR(<`j8i0n9nIpR&DlLo={W>K>$FzVQ8Xnd`xP@Ya}u|U1#A^Qe5lcXu@e&m;G}53
zdNzT%t7suFCB^kq!O|M+<h_fI8GXH4jyycxG32o!8hdhn{tO*0F%NWlUPTWS#z5!v
z5A>)gRcJ_-Kbtd|Vp}M9ZWY<=xBGOzwha}OwBTo(ExmK+ON=^`jg5`n(L5G&4~dEj
z2M`UajyhG5$WNuE$lJGLR>m$4g|tJxr@gIf$!P{C`q>nurS|nPF)`-H#csW&8Au!O
z@Y$X9^2(k{NuFsd-`heW=e%!lXv^Es;Id`8x>`4<6X355%_z#say)#P$<2@|A}nlk
zdh8M(uLaMp_ZR)n&+eZt(*<7m<#=$<%LL_^WW)5=V?-wRW^x}^x>TshcgopD+0^^c
zDDl5^O^`AR=dw`{?{Jn<<lx{<onPfsH<tM7<c*hz=*~@h7V!0J^~}uUCC}Qa_@pE-
za#L1Nn63BTJ`RX>uz#-Ko7`7uB*0uG4hIi()KG;`J#tP|mw25X69W%qT6!xJLs|pk
zBHEB>XufVw;$6NOMMXCF&drSj9vj9i7gtxUBry(c?OE_`3yh2u8*uesf;IbVNnCq1
zcUEu}20s71i+gVEK>INq%2mlwEFc$cZ*4s|9h+ZOQX=7!NQ^FoPa2ES-OWv+A}8mX
ziGbRK3E;v>7K0NL!5Od@J8aDuFZUBD=4Z!eChI&1Yd{N{jMg1#U(<`@zi08%77rhP
zW2w*U(I)}HeRoWg2h4>FL*^*&7iMQwi;RgA<H;5i-<7`=-CpW50D$J;z`C@UWrMk~
ztu3d(VK`ORj_tawkd5t>^g*EDQ<M$0#KZy)j<LG2CoG-5x20)n8IAg3<IWijT0)Xw
zpd8a^e5mj;lCE;h!}QrZ@crfCdHgo?S<$UD4!(Nm7Ts#)ZVH6*D4_?RlZQ<Q1v~lj
zA*Th1(eTE#UJ``CIL1t23{wKALZ1Y1^Rq9*<m%2Hf4(Rlb)s?hr$2j`8SgO@-M!54
z#~ud-Wm5j7UV3#(rGi4p&YK^85fOa8u_GRVt8>28pUK(L<PvEBbNQI!`uN`p8!C_g
zmQ3K`bY7MmT+_mqNr=a0p*O=WzUO2t$FFGlR>)Qe|M#}N!4RL6(A3;SCn34;fr0A*
zlugd)PwM>qWP3%#L_BwPUx|6>P<(wP&nMi$Ey+jA!AilNCYAZ%ceGQWA`j1pdlwhb
zU!K=h%^c3gBmMN0lqNPNH{CT&Od3#7j)%w`e6C*mjB!(o0v~)KI=h*B`+I~xW2*ly
zk|^X}zAO$Ze1?kcM#Hk57ifYq26n>Gk8DSR&E68&X=9*NM+wQjV1f>)<5iT+!U9Cv
zu%gMP*Zn?)v8jORPsJ!xB!qprnMg&ybP}>tDlahBwGs1U)MDs5NAXBW<;u0;5k{)Y
z^h?Okzl*OSew6auegox*dHn+~4=!DZ4DcgIR`x2~-I!&W7=erM+0#co`ju2Sx?d$>
zYsWp@J6c-$^-up8VMWKHp<M<IMQTbKgG8hTn0ZSvRG|nahTB-%w>1l(CHCeQya(M2
z?gRPYugTdXmKS8?_+@YSuH?OKVK|NK%(B9yAS0)sQDP~o&^F+==P0vMrFVKZJM6}6
zq+Ee8GfI4EYq8p!Z^}E@QSIkP`MtCQEQn@jv_f)uH5;qW9{##{)#8)WtJwD__I|M3
zB2ZB+ZEVeo!AD(y5xZKMWo=#E?p)i*PV_~N1fj&2y}i9O%Ec=y$D07I?(Jo*uBd{=
zT{DXFI})Z;JG-OY*-)l06%Jd?f=x}LidJk+i+IG999Mi4Ef)blu0^DLM@8lvjeR(j
zzIw2g{=ahXAz;tf{>Q%O)dmycuM0h9eBpAzSdCMF|0O(cbQ1gv8r@G4t{-`|I=l@W
zxPyQF9#uH|Kyy!z`SzSBpt7-{w!3&3_$&(m-IZA?z+A!mb`RH?VU}cEee?@dz|Mfc
zpW|@k1E5`jzP99?!u@I!ZqSdNG(Y)>+)v!<-%VT45%zkEe^Wp~aB=TMz$!CxB;O(U
zWZCM$0M$0;RVj(DM7>#7Li$UUybWud)-`()dHlOWJ)}LVP(bR?DzjR$nb27+Wt()Y
zO((W$Z4K<dX0hVmry)pS39oGs-zKVnCn_&dEY?9&LsPG3S7|>vw^Xvgob;wxq<VqY
zY5MToTOXou92&K-ZwQOs(M|pvO9ci!`i;(&6_>rgcvBaXT`HT7#Ws+qDn!RXPb6HR
zy4Myq)Sg>_h@Xi#^0i#$@`tUKI&EPoU7<2rZ~7A`6M{3xo?EO~7#q_>XiB{ENKIXG
z9_M%z8=I+I<uF%+U8wVfk8dfdLVLM4KR>uI%W{SDYe<!<#O+}1-i_~?{1`E)4wgry
zW@B%w*0~(R#3Od(v(_SZQ)O(n*G}r4EI+vkJk@{_wW}*DE<HUT+^WFs=ms8}i_^KC
z&&w5^wH0zmaJhE#+V9Q)#nA{_yVHr2`v+rzEf@=*?~+O*!3n)fEMj<lqH2JK2pbsR
z-6Z<e9x3qA5pk8Wu#|gwd6`>U;?ZdwK&uWF?NG))(Chwei#*tKw#b1;&Op}0!PG}D
z@I(QbQ)_GM5R%v3XJxb`tb0SJLzRV%?Ho!YNB{vQsIDZqo;}+m=KrFBLP5%^01r(0
z#AM~fNy;r;Y*Fn8N6e6nBGcI`5ggd2)bYZtg`hKu)WM6vWV6{fs?u<zxWAJ-%IMwk
zWM+PTew9w!na+G=N&rMpup*XbXJ`8QWQTYqkfTXD%*z#5f-{FZ;|xg6dlU^TK9wSK
zP|IR9HAqCG?2yN^H`0RNue}l6mBJ@CqHYs(^5(Sv*;?8*vfNLnR;WwUN2^ppN5NKK
zf6DZv<@4vyZXIr8rtLfAc9?`Cl}9LO6YOUSCNgdBnmpedFdMB8Wo#c0^$Z4;6&b}x
z#gU3ARrT3!9nh(;73y@DwtB=^@b}D9S6c7RX{0HvNIf>>Drggx&zLARUyrdgQUcPX
z>#D$@wq8&32c8WFcOOgw268GY`*oi-!=oxvp9icKlP<)hNgXPUvT~foc45G4kbd;}
zvmjVTn)D_U1`>^z6>Il+Hg;wu7U)Zq2+v!xTcs<NjCvXgGJU+f*FVtXfLsvb`O<Mz
z<eT<Dp56Y9ooK*P*6P~(^?pfF(b@i8X}a5yU<MI={TI^+_JU&!Z7x(rVPONnHvwr;
ztgyv)asV(+DPLDG5L_z_KZ3%vs|><C=0G`!L-pEX^XDN<G&eS$+GdB%b*QoEw2uNJ
z)2VrU@EP#vynI8jIH}NX=?6#%oTRT}Vgjbz4ns+5s!;mFG@EZ>15jmG+8;`R-VD^t
z#bsq&wmT9^O7nmM78X8(gC_p5?TAh3%<3O3pm5dEu@bs#Z4`<y*B?LPNIUixhu-gg
za#H4WFz!xv(GI(ZHb<TptD&)n&m!d3VXQ_jU@Va(_C{i(+OdNCno6!duchU)^T};X
zW9!U>SFIl&v;N=;T1#X_Ygt~hds6UNz{pDT%Ev1^*REnH=FzQZ;d7Qc(sicsEHaIJ
z39qtW{kSbaAz?OLB`!{3eRxpnu>0<4NswzXB{ue=z*56{LTh>}0wGgauAa7=)L|^6
zD^W!gAvV(P;O`%>sAp@7jHwtYS{)4z36vch)IFJ7h1{a9ID@E%U357smA%&z`g)yj
zW;D-ADcc{7*V?{sRVvaQPZ@~r%zmdoO?1m*f4F4q$TvG67)>>3iNEi|N8WWV+t9GE
zGQ&0!w8L^H1bJiR;r<WM##Nq8iimSm*;LtVM(a&qzUk90@|jWpH3UR_Ls!l;Gul=J
zx2&sIG34arV%H&4$5y?<VGQZr&o-=Rq^N}PfHlD&cn@r4)`oO?``ajSUW-OCS?T!_
zM!*{BX+K>J39uWha(uw<*bkl(&ob56Y?kc*fH2WDfet8R3BvNo67zYn(`K+zjbt&U
zXAWisNUuGjAEpg)Z*geCaVkbQ>?|ca861#b;5*@ruCU(x33w-<blO^4AkG(^h1drv
z22Wp|zsCXzD7G-b1FoC8iDPnfbhblTK}-xlo_}#be+C%sT|Rk0sLf4H6STrFE&wYS
zw&n;{bL3E766l}7RQrRwJ1MFJYu9|jryRemD6W92$WOt(lU#a-bF;Pg7N#dxmy;4w
zUd)0G*LdYwbz;Yi_eV{a3Vj*oL|;N$O>dvihigQQLCfF53U&Ln`nu6pq$%W6VrxhI
zRNO-)p0U{+f2)~hb$o-f{>hbgRaG={Q?rKFB<DI_SgyZ+UsYbDY;kipzE6xx<+|0G
zm%Oo|YEf*2wt><SGbRyN+_!H=+l$*cmPR+W+Pn1Xdq3w3kFm|=Uk~HF+nl~gm2CdZ
z`JS}`A(x$?!gj4vFyV9Cy^SXGtYh;S8AWgp6Zg#=E3?qDilO9{R~<!Bl$Ji3%?ks=
z38vHsyKDQ?9kgQMr3=$X5d(8|E%IQo1lz}J5L)aU@bU2cELgTuD$;-Eu%sr6#|)4L
z%%B@Np8%@?0OubYE+ZM3A_oSpU%prb)2#lfZk?lIR!|q}y~C`5z-{9&-6w&xpKDd1
z`0^k)n7NBYpS$e`dNjEbpp|VgyjRL#dI#!pFgAq$*0QSV`!iKwbW(1;8E$m%-n~Mz
zS+hcXTwFmVAZz?RV0pBDPe++1c<d$W8ys)%&!0E<_hHjW+=3|*StO^~%wPbiFHB^~
z!V;asE+o4a8Yy!`o6u4WKCk5CBG1v@%A4$uu*KGGs`6x`&5@P(DlRNc8|wtekbbN1
zdqG?N%SsY5GEgmw9azzMlhPWR<(ePd3|5+ajn?|D=%t+8C+ehx>-Rs#ez+LGRTt(U
z<mTY+n@4T6!n!e9Z`@d2d40b98<*Yik45u}t@ZDXT+mmD_#m(ZLgW6TjS59ZmEm`i
zOFtn#&UF=dS-1|~P?Hx{M+!qZwQEAI2QwRu@XZT{{k(f8FV_j*t$w;K7|+Z29~U9!
zr|5{o2LP!`{v0h5-?t2+CJ##tHByp?{6yr>ga_;RoW0Mo>I|CN`IEA4>24UWMG}Q`
z{c+7i;o=>-(y6bnPe<2v%tR?SlTk-!xpJSmh}Q51Q}o*}2ag`r0A$bW3$F1{eGay^
zDoaZGH3|D%8l?dZeNRx(Dw*ghvTtl)zzSv&<)TAF7rUQ$hOt{@<1^`FXpcT%Hdf7k
z*OeXf5e%~HQDmN-t&Gki>l}{1-PR<XAA7pdJ5_;`sqAzxQ{qwPWV)|A8cn#a_dZS^
zF?IPe+P41l3VX8H3{B&u8UJ8IAgO>)<4*S;c9{wA)iWL3hk^hw)B8Ev_Kc0>6S=V=
zVsDMZ`b$J~+te#Tp;x(-uF3C8h*YXNc|&Vit$t2szc^twEJ(B+NA|`W6PTYl|0QHS
zHp=n#nB#@2s*k80Q*YmH>VnifAHE`BoI+AdKSHkW=nf?I`8lxPBxIl6Yzw<+Ra&@m
z=aK6`(raM)5JFdPm?tc6Y^+>0`s2sK_w3I*`R~)_()tY@4i*l<{BiKIg>LEGj=^d|
z8zqt2*)(Z;QMRszp|bby<_F~f_Z+T==$54=ykjO{*buN}bJ04G^g4&qJz{wJ^qm=!
z<!$S0Rc|Nm@rmgc;FSQuqqjR=Q2OsoyJOeSAhU?qY!HKJj!1g#ZrC?hnji2@zhi+d
z5n=-tI%7UkQ!AyVq~5@#|8n8h1-F<dmFvnj9$!3zf`f~4obF=b^I&?uG+I&J4hkdd
z|Jcxh$CS+V_Qx$x`rX~sm5CCto47$H?P#o7rN8(AoS<Z6i_?OsCy(ur`6j|%iM3ZS
zqh%CDMR#Xn#vaJgQX=0~I-b5Q(5E14%-go~+Uwdi*OKWS#`an)rtj|d%6L0bV(AmB
z&elH?jJZ&}!?Uos*qyC;dh$d%@6#sYn&#r8-Yg}%_MIjxqUVW1I0GFJZD$Zn`!;UA
zZCOs@+uA&l#E%%9jwpx4o!g=}-j`DK%G%oUo0$p0u{n0d_gT8CzHYSm^m+Al<tXVg
z(pKaUtch~m_@;F_RtCwJ8pOi6EPo77wGjv4)f;}CCZ!4Is4(F^i*yoKVlhWvlE(@2
zn#UC2<NGIiJ2u9`t%%WJG4KRKS4SraCZ|B@@hU<Wc=hV46Y8)Qs0CSRiF2c)qZbyE
z6NH1!;}gaz?Vr)56zF#S1Q%-g0dYuJ0va7?D!@eKYgpLG%8)sb_ziRnc*`W7_WpOa
zch3${>2S0<lxH$l$^={?-I0F(t%d05pPB|JBu)u$^z?>SR<P!R)uqM`rsvB|9EzKp
z^;0PzTrhV1sI5gOvCm)IYmP>VQCy1W!<`WVyPNlP^K=h~IYyW{N*&yqgR{o$clS7s
z8ZJdnl<Tyqm0FyJ%O0leq%q$t+b5zyz6;JAAFZ^>Nc(6M^*yf2_TD!06>{>FyGd<h
zm3nPqIGB&0Bvf9xM5S61>4^EGzCL3(`+c1TB^wRecc{f#98T%WT6RbFsY96}x$G2S
zT07<rvNz8584yl6rWd8>IavlbwY`655y@uflI`~5wSagyU6%IN-fV69%F4HIgG1MY
zv}b6a=i0ZCG-s`=vJ0qv?%L43kA=Lx&R_jdnbQ%v8|moW0&Nr3645eFF3a||Kv~9_
zz9<%(shYaw9W^x1nxRmKD?UW5mL!yvVVQz)i4n!hvp;@3emF1N+jP!jg|BKNFOAIe
zJj^dxToV$?;Dk;?lL;j)nCqujUj_=w%1BXFh(cR@{9}GCJUqOSA|+`WDj-Y6bhu;s
zK-|Q&o9#+>L2KJTY%4$Cu7ZV)4eB<?ZaAI%?vM)M5<4K4N^#JVnHkE{NuO(5@6TXx
z>xGgxFenI@C7Wm@FJqMwHd;nSp>VJ*VKN@IrhsM&C;@&o3tyb%3*ETfQ}m3)#jSEI
zyE;1&0fAn=cTFP6XPrdD3LpxBsxYCn^4d0ou6}Y-LIUX%((4A%>G3b8600vSE$Q#1
zdE$Jz=T$0%HE;C+tO*@T$*<030dKgsugk~NXUf5BU%}+sjq4K!9b!yOvUnm>;*4lJ
zAqpX}w4pDi5di_-RE$aAq~1`AdT)3%#!4HaVOOk25;k4iY!y#vl%=C*I){KJbv&-^
z(G-dT8Jd%2IQYaV{`aot85f)C7X*f?1a$~Ev%{iQaEXA?wiR@iK$5^7e7Tz+xKtN<
zp^f*pIIz5HYHD&1)+p*@d%xwbgNMXvnY&~{W~Q;OZt_Avy&ewmJ(iL%=0kXAr9Pm*
zGgYWB8<+hRC1(%0i@Gp@LhJn2@dlWS>*=vhaEyM7YHm#T2@lsgN6ENQ{|pij0vDHL
zZ(Kcy^pkuR5ZwYzFwazOXz0>tiJZ~!>+xdKlkNHP5d@5K-kgV{CME)I5lrRqc1wQv
z2Kt?He-yrMEJmD6tbWz|!wJ=)4^ir3F|~w*a_Qxn=q`L7&wBERp5oaWj;$owwyaE7
zPdD=yj8i?z<IXPZz`%d=SkU8~;jzmFi$^o`=q8|>DJv@{iiTBMES{}%?X8WC0NLlc
z)9IHB2dgjn`0ySKfOkk6RaplqVjS8~aK^DULlj0v#?mv>KTiHI@KXZpkQQ+zkRqCI
z&L8UYuTx<~{-Cs25O38YBDT<@uc5U8YS#^*WnvQG<$V17;8sSCR3)RLlHuiLV57%a
zF5<qO3sm8syfaub-Xd)PHqPc_`Ttd-fU7qYLjLXO52wcs>g1FZ1F7mj$;2MY7CPs*
zd~=#8rzo47Iru(^PeI0pB3N@Tc)PX+)apM_|GFHM4dJgrev;Ay5M>5$o?LpC5d1PE
zW8>n0rUQe+J3lpZ2>(PYp&TO-C8>}ike%I0FCK*p69R1?PDs@v2TzewTUlvo|DGNx
z28Ny-vVYt)j@iHiAwB`nZJ0V@NlW>k9NW`3&toFNm=eK(EdJzr34{Z{k)$M}NNd*b
z76@GeMZ#eiwlz9RHDrQ^y8dtqx=Oq8YoLu1{UbLo5A-weLXYAeF*KV~E5KFEx^b3v
zb?tai#Ck`nf|CUIEm~U4-+fH9e}ERsWN>gmU=xTTFA)8vyB)-x+r?j^?~%R_*%Fh}
zzi*-w*7?|j+g9k&`Pjog{MU+^^!;$|HQw0#N?6=S2PN7+4wK#?{CEBA%ys#ky!?=r
zhMwVuQwgTT=PrS7oQ=O<usZ6}1sLu5-6!~91FwwbV7*A(`upA=tFypFh_K1jZ;||S
zE_!o!F1kOy9$4@iu_}awERyf!)HOf&^}QQ9JTM<?lKA5G_@A5s3N)(kf9e$YuGx$K
zWMILc{`a0HFl_sM4gc4FF!cR5^FLU?`8E8%F57GCMl`UB-tR8$Mn_B7zE+@)2Is|p
zzML-Kl;$L}EzAuS=YmlZgI42Td*mi*1-q7i+E(~hM+0plZXA!uMN-*rarB67(ig!`
zKV>T9CFbX2U_<!z$w^gGeEidYUKC~HI^{G<sQ0(SI2}g>3ywz&Uq>{!x0&ebHU@za
z75EOk?TDNL)yTg;QcaukWxzR63piWu)jJ{XJUXZ!DSE#|khOV$c~_=(3&a%_L6v=p
zqr!5P#9dld*yG<H<|Yr+MrliIGTdn`+kZ24#g4M((H(ttDQW48sHkvtBO@aOY!=+S
zym1iWDntA5A)Vb`c!O_LNtqqA;Hmn3`i4h9z5zw`T1)VGBw&VW1yHX(Wys6TL6rIK
zs**eCxYE_CB*AGQ!^*+}j?K$T{k^>wmZvOQjS>{%p^PDTR!hByyURszbZ+l&9OfOZ
zjoF<u?<<Ox*Ukw(cJr@}GS#YHfSbgE9}0pJT*d$b$kv8tQblDfcBF^Bgx?$Q3ri@o
zNu_23xTeTGt%`td{RROW;?HC0EJYTK`vdVZ&wv{`jKU2$OYfVB7Vx#8BO)T==zblD
zf+fJf%Ff<s3P@5ew@%S)*jrp&OcINlePs%y$=HmH3d12!n0Eu=7T;&5E3N_b@PLvc
zYNtfPS%x}0-+^fyM0xfm#m3$lsd9CVFD&!{;V#78Bf#MoPW<;kCdDMeKeRj7pfl)X
z#;ErJy;;&kzz07~uFa#y6up4_F6c$T1C4F>uXm3zxLMP{Sp<?-A#PE87WkU(uC6Np
zK6vZ_=@g&gtqAbHJ#`ttg9b2+F8LQCr_7XA+pO&D3{?@JnEpb<bqdTys3`#<@%Her
z-d`j5=L!Bv*6@UiOp_X)alXSpvIFr7s1!##i<EU!y^JZW+RYQd7K38|2n6k+9Cj^p
zqV6{d;-6vNssg%IoKBWI=9)ZnrsMHJ4!f1HbOjL5b#=+Gsi>$xkHxOt91pb9o*saP
z*N5`5;L)L>;d`PBy^`0xHh2i)&A^E4z;0u6Q-8eNEj(NqB65-|0iy=&E*1&Z2auC9
z)T(Gesx<iur8x}PjY&zQO3#>>AaLx7v_7SLriGQ24(b9xI(2n*qM?kR$*%+HyQHL~
zl~xmgWq<-<Ms5R~Zuo#+{<FpWm3eM7DGORI{zeLX8No16HPSyZ+nAhku-oqlVPK}D
zG(XsQD5Ght8b(})3+BauHZE@NPe^ZHej~-e!EpldRXYeD7K8q9@S=p0Z@3r66zC<Y
zmG<8)4}R7GG?cAgtAV-tbIXr9n`3bBxN*zS$Ou9%LqSg1&H$-B&)NOqeq;yp48l9Z
zbfC+Fp$FjN7E8T)YL!4U2EQAF#;@h#ZJ=EP%G>+XV;e56Dj=6%3*Q>e(QE+Tx|^$O
zCk}<-kMy*(quphBWacc)!S`X&0J{NVhd@A(YzDk8k<$ru!->j>VRjZ4&>YAqDu%9l
z-ei6^Sq*>)(B6A`fd2?N>!wS+DHayU18`S}2bmt+^%pN*026O!^~pv&8P+N2p@5qR
z$~tj(&1JCquv!_MT3QlnI)E!p##QQg;2Rt~0POLhC#JBJbgRo9U||l?23_(2s(Fh{
zG{fp>$u<~3>I#76Q7w#eM~nTKDTJo<UWJB+{wWzyu%u`%<O7#J0Eb&Gr*K?y@<pJ?
zc)Gd?zkQbKP*`YaZ;B@W3+!2q&CN}jrcXkq_BV+*cV=63Qp1@H>f;3=hV2d%NT+)l
zwZM~10pbxIJ1IK@gV$<6w>pxXHcMjiHGB)2KJ2=K7e{zuhU9Wtri1H_jt(i_wX#<p
z)v&V=p{oy-bnK{u@3S>aAUurC{Amb0laa!<rY1dTkYP!{?az=+yLYw*)Awj=B&<oS
za^t~lb<k*lvz~{K58*Sz`$pglR}dK32Wu4*pM_gI#sB9U*tB48>Kb^8)!R)2til9|
zZ>!!n1xhwRhWH7SsC~vk3JZ_f*znDpr*EoJgxo<vINutw&FsL(@LnGdm<I0$q$~0F
zXp~>suod8Q*yfj%0MolA<oJE&VlfoUuxZSJUki|ltMvOQR5{oqK^?@b-|Im@4V=WT
zu9ytND5&jLY&kDB2%0irFNgr4YH_J6q&q7D1eX%1suE%$oM=BmW%S?AMEG5{lYrA~
zv$l)yI}BX<d@U#4sBmBOzlU|kqI7G!%LANFmI>pq*+W~!S{U*x-7BDo+lYyseFUB-
zsjn7Cdt<<{hrGYqzTLY5o;|Q;NRu#o6HTW{b^<6CLDZiP)RPgx+eI3b;B=g#Fjo2=
zXtu({F-dU0HzAyDE5KAJXQ-+DqCgD_;sLTy6L5PNC&YI4pQoDFe25(Z(aSa-&}9An
z)kxOI!+Zb}OdJeuGgsi`<b(|}CQ8QA$|~xq`o&!cA7_`BAIQ&VL<;&*8pR%byJKYA
zJmY}CD*|i;E_7%176&B4<>lp#l-n?rO=4(&Z}26W-xVj{03PaMK$%7zy1w9rO;|=L
zmB5_sMP*97TyAH52Z^t(qcf1Mu>GEs#HnNn9CIloaz!-bI{rFRh?|nM5Mwn1{>woF
zZxS~#)m|y~eNwMG$Kr>B3>9|!G}_B>(pqoLd<MWDs9KIKc29q|peTsXX4j%^gx_5?
zc%vcJGcw{uo&xeZFyA!){(%pA(ZuN0soE=`M1&lposEtAbQ&|DC4$|YPaMX-W0ejD
z^I`@S&ym0Y&tHd#yDF#sk<#6B<W#~sAE>Xua~>i)>`C&4D+s644D$6I0I0#0AY!1l
z^u58|yLXEW58Yd4$4lP_bXz)|t;1=fl=t?%vNG7{8{j=N1bVFbdFmeV1u}UMK?1!=
zBS1r1T6$cglj`(=Yo+aO>IMZqtX$3dFENIpob6cC_sWh<A^5POynHY}*dBIudU}6~
zA(YUQw5yTP(SPkJks*(za`6cW+WLV)0^TunHk27fi6(*8tK=M3rluwDrfO28lc4qh
z^Nl#T8@W!E+-hiDSH9w0NJ~u>5*C&YyEwhs)_|2%&4MN*C<p_An@=XOxRn$Yn_F5Y
z%B+0<lm;j-z*&2a`uq3slrK>+F;ib3@(LGTx`O#cZlvhUe6l*GOS2w=yFpig%Wk<c
znx~WH?{B7|QPV6-ImnJqqs-#8yHo%Na_k;t+^bfwtz&Mdd{34n2F0EE-lz=;^LnBi
zjGwfUq(CZgFqjh{97L7y%62ICyotxQwot{?X^)(KWlE+CC@2QOhuD1Bmtg>U1SE0%
zo9;YI@IJHi3ekKnMIYm{ymM9&_)zhLgfD+54?^p($ntK`Gn`d@65;2+oREB6CT%N>
zo0gVFsoevbJ6a8uw}cSYwrBo>SNu?i&dY6U4GxvfNU5N<nXI}|cuHWD>x0i~278J5
zTx*Hx^yRWphO)mfl?Drq9@s5hoW7mBp}`(o3?C8T6Chi-asv<6vytS@U-~X^a?_zW
zLMer$$#Xc7_WKJo5)-_+2YzKn?Pojf5hFWqTA+*qkx{U}Ke+#(V`9!{tiM2wzNIW6
zK>F-iPy|)e*8Umi8*a7c3;=1NMzB72B;c^MNRaq!WcWtHEn@=I7aRw^?aMBB+axBr
zyPyM$qdNDStWrHcM4R9oI&Y7G4)KP2yzMC@u{i$xam`c6=El-MR>!!yZ<BA>q8--h
zm^%jU&zYGYYr;_MNv`CwA}nZMXFHD{8{!EQ@gob*)f^(9I~!a%ebFcur}+hUhV3mr
z0NFnQCDi8u4$giD*I8!~yU6KJLU_utQgH73!U^W*cU$Ey5`+HGU_~MXy}rKw%K_N^
zE?z%(KzP4Cey%I}XG6Uzd2a8@7(yr~w>?zHyr3f?q3d$R<StWQ;rMq1foBvT9Oyr^
zb`TV3Z!4jRhBOr4g$s1M)lu}@5|gsUl^$?Pm3VkuZB~WT3Gb_K<?R@H6ApBG;C_Jv
zphP^o^~NNp19BtF>idint~7X`q8kDAD@7YNOKS!<SZ;Vs`j3f;r6=L2@&PF)>;_2-
z3TkRj0N>xdd2@xLTYDCwBYU~*Ot@hM?^QZkD6=V~CUtculZ6%L<;7uyIz8V}=_)iD
z8Dz>@WT!wrZja&uALAv9N2pgkEd(UkmI2V}ju~3!o={OKG1G4He*z=$W3P}uT?h9C
z?dPbrAO--5+DpBr#6AoZ1g57hmwltsXn4zPDpWOxhnps2L7?G*fdd`vYYCk}PRnrC
z0u6Wz1p7d>S5g{*Q){DgIOdfV>?3(^+vw@&rY77ft#IkJ8esu(I-QDm!;>J|^uEcM
znW7a6kYp#e+W=9*jx8EO@7AQ|7vf{L(D~5H$|`k#cQ=Ag^D^3x<LRk)EbZ;>)Ain(
zM<Fbxj|!a5PAeeh+6A7vwK1iY7>HQpE4ze-1~#<0d3BH%$p||zv{*r_tbg|F<F`V&
zr{vY^ZGUU&*rgu=$r+?4jWSfUv{`UYKeyfh8Dp?hU+6_fM#jfL%H0jV4jz_bA|hDD
zIJ09=@6Hxc<pu@G!5j<(VlK9B_AB|Y7}W>X$Rs+H3<WHXb&RyMULL*&;Yy{`Svv~i
zBXT!vXqZ#|_g$ta0UP6oC^G2k>gs%k*u^y%!mp7c=mNFc!f*a+pAmPvSDfsVy@`0k
zfxnmj<nd#;)l7DKD<JB4<nX6~B~w($yl?|0@IzIVlbIPk>JuqAy+HNy_U&6m1%-cR
zLlTc$!E$ukVr?|U#eZvaGexb6^Pe{3Q8k9{pAR18{}V9?$j3kb_`hS+{~!Osw<(=j
z|HT6S2cQ4{&u@nuBMNMC9}EFGA7X0Chvao&%0|sh%1+6^LCHbQPWkcoDRi)Xjsl5j
zVV3~*0$9wQ9lqNRZx{VSBK;%7tAF35WA$?j7d)_Hkm{y~Z{k6`5Ee3%x~uuyR@j;A
z8mKOk@!?e<Pn?1Yd9~+C$e&*j@Hfm9&qDv&26d8|n@9`E@@I14gmI2Fp};j>aGtox
z+5YR-Z3vtP4_<p0uZ{aZfvIyFfIDBmA~aAYi=2IbzsRxVe+3Eut7yqdr<Jky%Gg6^
z4Vy92x8jwRB(YG-lm?9J*4EbK?!8wTDFCrt8Mfi~mptTkFZnK@e*84iHMD-RiKZ=y
zTdC~8LA3p?Ap{T+hJgxX!%-y1`GZCVnAq<-6n*s%j*H^_sGG|f%0oYT7g~-_(2Ij{
z#Gf-u;#(oY5ek?7WJw0VHbBe>4bsX~?NO|*iJJY+f?z6VnWYhj<FSMrdLYCGhwcnV
zuor=H@Id%I<dhc}6v43%B1LH|Qju?d9CkjN)9wxj8>;x3$|ZW!^-ODPI5Wb~(Me>f
z5(^8b&3EuVGf`b$wiC|u5{lydxIJG4<7ZZ@_V@d18K9iG^ZV+#aTo7#dsz>3<xC@Y
z(=MW(z<vjm-g&OmcTy3sKk*nEe$g$r+2&uVs4xLTKMLV{0jAT58Lx8|ngSY92Bhhq
zJu~i(ck{>#=mS~aP>g2L$&uyf80ahL-c2@|PJb$QI-^T6?oam)3fgnMM!Ypk*;#ca
zA>Ofk;ezA;xC-dGy}&whJWJILgvG7H!z7DCN#Y+hH8o}3{fIc|m`=W3cmGsr4FStb
zyNH*S%1L6i3_8j@yiraRkDGV#n3j~Q=0N|)*#&G}?fG_&JncLLs;;^DHk8sHry6!A
zNNs@aFCBL>GBK^9WAAKZ-ZJts90J#Jp2(`N^x>6}&{W%?UR>We!~b=Ajt#qwZY;1{
zUHtHoNHmJGOgf1WcE~0Y9CkKKa5D57Y;DVXk^!Mlj+Xg|U9CV;@ed~_CIxyu4~Lqb
z+iXFad3gcY{ek~J_`L)9kR*!D3Rs1Gc$)PhpwU!)x1o6(AzY0~tv3FAS)Mj{g!jt6
z$xwO9PSsaZ@wL0|`%r~C_Q^WfTDJH>Cep8qTA~`esOxv3;~SkinA5=Cj>qMw=ylIW
zP#pJxPLqG#OGB6#br%VRzVI>yOL)0d8CInc9>F+00)mL*VqfWu<vs&Or&F_>zVyR1
z`=uq>{S@g24kyCyd_4owB(B!hT)}G0jA$d5>N2Y{Jsh%k^TuD}IU#H*l3CpNzt<ov
zybNzLf_)x&w9Wun&g&}2yTAZn<Vx8@?oz@~g`}{v)8h37ZbAl@gRT;Dnzk_Z<}~3J
zLXJ{6zcY04S#zt@sxkqxaoT+Jl2bPRRgQ-TbJ(*C0xm~gdwcsjPua(lR}zxa*qzqW
z`&xo~(^W+of5;`6)j2xYHU~uK=@cmx*_L#8w;0ch-N5UVKTV_PJu7JUX<K&S$XXjK
zC=glnPwhg-&R5B?h}nN{)m3GZwU#nk#9xqlWq$>u+@a?rT)2pafNMnO%^7C{<|?)o
zj^^8<oFK0%_Ky4X*%Kd1@=)!Kds8J(LPuB~I4V}d`d7y*1y5NRlEg}FH(T4%aQKLz
zsr_?T{u;Zu5YB4ui_4H85mUp@Uw_UC+MavgeXV6ESD`WN+*QaCU=7gHtC|YP&UPnU
z?@R3i*T76~(LK40VSNLGD`;bW;?O1~@VaN#*DILKG?LTUoFD@)9Y<U2TC9&Avh1@i
zj5~B$Z|W`1_vmzRIpR~{wcP8#IVy}OZ96b(cjl~kxkh!95<yvJeY#F6R${p{J~H3G
zO1(Vb5w6%vO-=PIQw0|rdn|1tTA`|g=y|l7Z)OCSUC;61R;J4Ce93j3up)hCtM5Mr
zryCHoN+b$V7fx)g7CVibaswSMW6(AEYqxnOY@K1N>+25}$@^{u)7tG2SogG)*{z?(
zvMlf0+)Zk|<*m+pxi?+XXrVF30g0JIsl{&D`}E)Yq{_3fx@x-EeR!LgWMOIPlbahr
z8Wc@UFLmY*%?#GZRRnxi&d%;e#p6?JbMO`Uy2Dcfg(HkJIb`}M<!Q9rLJL5E6v4K8
z^_oqgZdW)wIa?{BVf{NxOz*m4Wr4K-JSvd%dcutZxn+@ATj`wW1M$c;i`v>e<&f@2
z)hapq8TS3poKE$`@{W&Df6STYnZ7<~*zLS>V}Y1Pp-Rt7cVcIUMj`g4T|@u%U@C*2
z)WZ?0b$;I{EFvOWu?qWL3YuqP$Q}I`x6NBnJ*y&r`hYEW@<g%QpqHl__nTm`)fNQ#
z`(5OXK52;UxCwV!DeE*iOZBLibh7lwX47yh#yu%%JDh7K5*i4YeeRX4Qqn$nL^ycT
zEL)<~U|bRVDDLsEMW6i9;(9b6OM!Nano?0_&j7Q>m*eQvqr<VKzUA#R(o^uvhZgx;
z5Y%q=-Ob=cA-kHVBmS9M@Bbn1y~DZQ<G*q3p>Ze)Nr}on3S}#VgfhxjMo7rsqiGe{
zsZb&-$=)<<*?Y^#-Xq)Z;T)gN`F-#Ed)?#uUcc+U?q7eM>!gp*=lyw&=ku|i{b;sa
zrEc6nwj_`KI+zG+G{>KRq867H7k}<d^HSW7_+asxjI)8tv55+``e>F`tM9?1^0Ajv
zlKR=8s=Kmk5qW#|4p&3N&!4wVLunrqZxghkr7Z9uv&ga+l@8r@?w6Be1_j@z&Z-M5
zeVDTzt~TlA8{C=gHc*u+_2cW~ss1vRM3G5@Mk6|h@XZU;Zh6k-FEJPWQ;2GHZ9U7?
zW1+8^%SvW-M_ZDN3qn1ndP^-zXTRreae?^t-=AKGw&e0lfwlcG^eTwRp4=pu`Pk{Z
zetTk&UV5k**%Gso0IQr_hHQbUzkzFE+k%Ihbf_T&GV|3Z3ZEWs$*Cmb4skp{a-3A#
z=8=LyBc=w5b0AFegrNOT<MNo4;ndMKmbAW|DkAk+sYdC2!&VEWDQZsRwe{6fmWVp|
zQIwT!bKqC#dArF_rUwtkB-bwS89vM0n`J@z!?KM1go|hJd1QUR+qlxs<e2Y!vq^h<
zQh&v-sma0m90M0t{(>J3&kWM;wwla0?OOQYCUMB?mAYnab#+IEg_et@;d|clT+44g
zy$p?<!(62fd-m+<)iAI(YG;)jTGJ3$Jm!=O4MNeEFMw|ksMNelz1uPKKGF)yr1zTu
zf7U4#?xIe?KUrC&`3em+^0ciaf^$PU$|eGn))bGW?$Q$5JJh*8Eqncs5KDNg<jzgn
zN7*h4@12>ge9cR<-0RjPQen3^vY=aeF`vQgY!X!<o4H<pR78Y-PoReB>Xf8nljOC|
z41>z&_gBgSS>6FOYx-DKaQ4*8bB4@AVxGaL<ubK@eGJZb<~ChUywlu$v|V70^ef;r
zB^4E&@;i*Cqn3usWNf$N-@f%u7M3@kxi2i{WEJAgq$_O_WAbfLy|LZ&XYpinHKtmO
zUkywD_|a2uyg8#lzwjWUktQb|?{2|4A^G=)xVmF&)n~70c!IM(T?$|>ynS1VhR>d^
zQ6txuQ@`{n!-2xB^VaD{1?{o_778BHG%Bf2H->uj@94<1vF;ob7W1TD;LvIjJoag=
zi$smrBHdzosG#<gQTtplukjDv@$~8O95(ew9oeRnsr@P2XPx-1e#n;Ic<T9zgMOf6
z1$T2t#wd5I{$g+R**^dGa>~p7rL5E~YF4~#VM7wNx38bR(a>M0<HbbIoEU^-hwks9
zScqCroM`n`aIk}rbG+YiG|~N|4x<`b6t7yv2QR}wSy;%!$IRD9ypq_e=<?X5sIZVe
zRz+FS-u0>d+N#6QiC3?J+`bg-jGn1pAE%YP(`J=c=VI{FgoH_G3g!3zK}PL=w|&15
zb&egyRJ_Awztd<HCH_8lIg2Q(K3ATGJryG6Q2trw-UZ#^x3_M|0>qph(pbV65T`-b
zlBk;gWWm25GSQj+|2UBUvzj;8cCQ{kKR-N;xCs$$u&X#9VOQ{Ttqs-34h-mR9Qr~}
zmNJQ2N=q5RaMCu~EzPmKJ$i<FQp;^Vh|Xzs`Nt0oo6UZ{@q4vD#P56qbclhJ-@A{5
zUzkP2iPn)BeZ9y0-1Z$iHr4>qnXAf;&Z&usq)X5;VN5->_XUqm>E7`TdeeE2?|UNU
zM^?>=ItLg+wnm+r93|_#H7ON9_$_`M+p5r7Vpfg;KwUKc-LIIVBl90w@A|y|e%@bA
ziF4@Xmz(wQ$w)dRoOuoihPfIihKF=(DlKlGzcA7G7Y{xmCm~0K(3-NE%Bxo0yv(^J
zKDO>2o<2m&f6Nd6g~ZH9htJYKB3gCn?$OkICn!!-_j=xgd6nny53<ZrgQ?d_JW(xk
z`lQZl!2`cYCKGzEJ5wHTdR(BP{nrC@4t29s=Aj_3Jhf?F!^3__wz616tn%vSH%559
z=YMy<ju-WJ<Io|c{fysU(@@*kP+eP9=R>4z<hE<lB%!)Ho`uQyug~r%?Y^Vxu}g9)
zRgE&o=76zDjZCr46AmIz>A5;~|2@Ca`MXRrk+O8?79^g9kyzHVjkw1Xnwj}sr%8oW
z<Uf(yDKs$4*jHTtvZ}S+q2OF|bG(kBp<1$DHM;uk+qOw`o<fHYq5>gN%E@||PSO#d
zx5`L~21ND}aulP}$2*<YST_2_&-+iUY|*QKNtNil#+-GWQh`gx=xDl>#e52rDPlKt
zfcJ~KAN1be-q!YH55-hDd-9Vfh2W<WZ<h~^jU6Q+VMlz_g@@aLQL@m{iO607$_Q={
zKxjx;*G-f2_Vf4fJ^t?21jBJevj|9;9r|I~q#)=qCF=7r<2Yqt=JK3O+LUOnrKl$$
z3PZ$Cfb_s9seOC)Bqt@k0@ekz3Vh)5P(9P&aNmkHxER2w2VFFiw-Fy&@0DbI(tDm#
zoaN)=>m|yBY=(A6;KqvU5({Tw5Rwj95#8fZkTy}(P`;ezD#bB9mDowZ0`h+dwkik?
zGJ&KSLoONc@p~2)4q!cz5(C5xtP{wy6IOaH$%FW78b0e!_<R_9RaTIwQ?|IYbOTQc
zPrQ2y&|+&#i+g5L(lnSoQLV}Dg0P1Wo3E{|#H(h6A?eaRGcz-9Z8a-CK0Y#17bNB{
zAYJ!<T&&lF^2uihtQy|unXkTa*7K+U*nH3mUt3Ag*+^Ia0%sIg<Syu-!5toO$X^Bg
z6=nju3WcqEAsCCb#bGuZ4#4={&UQ97Zq~MAZ5iF(y^BxwQeFR`Sp89r7d~B+K=4J9
zf(by>S9_f{kSu3PiGCvGeSr#+_gt%*jqVNaXjRQWN!fk%qtob&t~YVu>1!87DiOsO
zqj~e@&FV1GzF8);Vk}=fF@A;O>}}U?i18|6PXN~V>{&SyzeM_hlpSJIR}C4rpXmC6
z`2uc*fVcDMvE2ckhDGvC;X8xm@x<Z>eBa++ut!|>FMY`wdxwKWrmP*eaQ@rWxgw?B
zFm}^k@oUI9krojVLAxW;lkavw6JbMRA5_w$w{{}IshdKiACIssBMEpKsA0Y-(4?Xl
zS?0i+-)T*aOBa#;Cc1;f-lG)seh8lpZFeK$&cp@jC!3+C<Xb&3C`Lj?79FX3Y?Baa
zcj&fBuZMqaIp;;mHO@DEDIqM3O&<0cRi6WXrM;dB$+#duzi%aQgn=(SMRb8Srtf@B
z*v&5wfI8&nYV7$SdS#@)zY(7mPF0dR^-Oc5t6T#y<z4B1%o?M{!j6CKMx0pC%a;hb
z?E|d_rj%T1q9e!7cOT3Pb<m6YGu@DW@#lpjA^dg??d@upx6sgpLK;>!ir9MBeiAG1
zVOk|tjojr_nS5dQmB+;7KI%-}QviHnz*Y$F=$^n5rCmDo<riK(LT1nsy{|}iE-V$^
z;aI1ly`O4iE>#4Jeqc*0P&bOrLfpa27utLG((7-YSj!hA?xxxC_w6woSxkDQCQ>0J
z&wPlgp>yZny<|&p0XxinfE@1O!*6h0h%Pek16BZ_=0uH(!Va61y%%~jppFDFAKexU
zS4Nl@>|yq&O?!djit8gl>FpipGPrnnY(d)77I&l=1V*{m@%kGS)FQ(sgva8t0NUH|
zCd9!g&+eghIP?tqKX0kX)n!3Cg~bn3-@ZTGx64M;$cW*;{j!MQX87hbc(i(-YA%~b
zzb*ZHOY&EGuEGojXQ=g$KWGF=>85vH{~7}5U^xnlnwF@k=N3^lfTH1n{=(IL@3)am
ztq$k((sTOET@e?bzgww2zW+*#A+{KHdmPAI*c-YFJR+Qs=tOt)4644_WzBfy?L33U
z`U^V+UxW`Psb15mg3#K(PE{m-IFRidT1lo&pHFquY@MupFkf`xuMH=(5@AMUc<oC^
zn7y~N%wSSip0>>AP`fG14@_Luf4G>cng7u)(x2=#^7Cf{wuxz9X*46EkyTUg20eZ(
zYHpq!8ma*zM<G(AwXAGd@{7q(c216HF;k+}LKQN!Qn+S7l;wAHtcDf^bn4D4fio4f
zp16tVy!SGp>%n2#y1w*{HIdvcwDZ@?TLJ{%-|3!{8N)||#6lvq>rxG$a{IRJ9St=#
zv=6r*bGRH@Ah;7d<L^6>=Hg=fCYF_7i&V7c*ZV3=`KWPE`ETRN)ox2Sp_dG3gI*aa
zyrO5AXpvE}n4X@F?TVJI;S0L*XV9vE$ODHSB_F*Wbrfz)N<xx=+XKKm<_`(lOyyTs
zLs*Z-5}Q2RVd?tob@NWK2gK5I5f`v0PIeFCp$rWSAa5^r2;IGji3#nCeF&y8R9Hb^
zBoq>`pH<_WC@97?H23QlXp5LfGMi>}hXt<?u~^%vvB^h81*^euCVYZcT}&*Aj$^{C
zy7ug!>?L=Mj25PJ4iEl?c6N#RRBSSDBI|UHup4=joVp~_CmYx)a*boRM|Y&oxn8-j
zSE@26yf@=qvc;W;Lx_g!ZWBsEI8=BI8klWfCg}lSLr9UNb`|J|;4?bzt}zkD^o5wA
zfviL$oTLb-VjiPyL}C#BUGB^Q9ML2;@hWL!Nhe(U+p=wva7o}B*K3TuA@kAY$rE?K
z_2^F8?Ca&>0Rj;n-L*gkyT|j^);Wc0GYANLSs5SDgt)#IS=QF_Js}gad2w+&sdK1=
zynJu$4K@dd9N@z17vsdkYH`WPkCk4oEB7x_M<jbUHvF+*>dzu4(j%*TD!~{<z@v&)
z$zM?wmpe;qYGfT*Ze51!OW$7iCL_>0U{0c^nOks}Z`!m8Lor`)==;PxL~v*J6|*6%
zdXl3@LlPr#As`eL1iG9$t<fpkSsb|HS3k4mEqC|-8Xy0Rt9}2@`ML2^8#i?jt>nF^
zuR7l6Z#45|OgQBkPuPX&HV4+|{#dHj1@M+bTa5Yihnh`5x``ZKr`*D+YkUNVWkUEC
z?()z1R)*OA8Ve>AOoCfQH|vqryW<S|vt><??bP?)C;O;}dV7;`-J&RQa$1A#$5Ed`
zbK}>44m?dIM7%oW%Nq;o<_!ob0#@3^t9N<hhloxelREpRbD_=4&CQ$e|HP9})H(_W
zAk9jizz!WNSA0O=N8Y&N?{W8m=OKMlk#F^akRR&&)bBmfB2ws-61BaFEZ&3B%`MsZ
zt<Fz<@ORLB&}M6qa@4(?ClR&xrQi6K6!cP?)^%-Au=u`to133@!``LfoYKZGe}1iI
zk@PFhT-OQDJ(PFEWMnG8e!aLjL;br7KNgp41+7?BV`Exs>LEi&c5q>#ix8Q)d;9iD
zM^3<Bv)DZ~j&C17*0HvZ+IXm4OL|TU<9Olql55{As-Kgaf)uY@`Ht@xQ^%D4URww%
z2%XO)QeI3xYA!DBO87#AVrnwC|JL?uU<TaAhxvcO`DbXI_wC;8LwK};LGg~eew@R+
zQ9_?WBuMeQo^+<gk2ln5N9b?-{QTfQ{KT7`w}0n89sKf}pmL^t0lMq&KUcT@6Vu@S
z4^4IY;z~eQu|HE9ju$<;lPCG?=l?u;^3vr~NWjRjZyv?fS2BbS2Zo$I`y81!YH6aH
zD=W8!*5+D2;3!2Csdwkju8@#(kn~VdE?!&|xOC|fv_UHA_f{dJ@(I4vo+*XH7!VTu
z?-yV`p}zk`?%6k@uXFTkpX??>S$8Az!b6R3-@ZXv$l#C$+sKVLWp15C=1y+~k&RE$
zWuPNM6r4L~SaW_JGD4jGjH>Cb01?jfA?*$4{yD=I+#;MA!tv@zyX>$VYkS<B<h1_H
z`-4x$kTW^Xm*^895-_NXVrW7C5GR`wqly&AK1_mQQ!@?aGJN9cX;kA?m1WhLx7N`=
z=BNWv3JwHQ_U1T<LJ$-<GGsgVb=x`J{$_ko!p>RNt~=u_ZL6p0BRV2zZ_PG$=up53
zF;4-@kpakq!o3E~LXFxpVQ#S*X<|nSz;yk?84eCU%$#*2-G}76sXkg;E{u?~Z&u4y
z)sT^4t$4lg>agxa*M;s+4omyGQ%#-NZ==#f6~nDve3ShrmL!yMvK_XN?PKrIoHP0k
z%M&pfBgfsQdw&-;5bT~A`bB!Neve*4WguJU3-%tPw)9nm@MR=w6{X@FFFA*Vp)O2?
zh5z&9K1?pbL7|jo8H{2LWk3qZ7@Txr9pMtS=ut$(#3a{5T4}@%CCnmH{@h(fwibNt
z9%M|cPFoYmOH7f7_)%l+e7Q|;u`@Aw+vPyk6Wg!Y8XR|8-5hq>3bFHI^74L!O(IB<
z@_JKynz57dc&mUwF65Zcyu2_@H)^O3$3$Oh@%v}bo`H@&O@pW0kv(`kOnb1$lwt|>
zA2SaX1x0<-H8XS@B_XvPx$6;>y_TAq$is87zx<Sel_Y4kw?r<V%Y5KZe*PQ`zCD$d
z^2usE<Y&1Gpx|iuD?wx6och<d$L<`Uss;tiVBK5cEYrTr5b^%N%f?VekAc~tOY8|R
zF~-}^J~WNhgRW2+6R<Naoc0nE=a}@^)|71{VJgaBU3<*Vo-p+Z=zJIn$>d4e?zn6g
zja=r_r^PQ%hJD3B0}<wMoQeS22Gk69dkUrK2phUYJD>E(AeE5E<XC53e_vnF;<L@0
zmqm%xJ}4%j1uTvP-jZN5eR8npK{bu4sx&Mc#}M1Ow10%W-AA2uA4b@?lQTI^e%+RV
z>8#fl{0^TLIKGO=->E6;2lww^0C?)xeb#*^FET|tvIX<GEJxB&p~JGHxN({S258B9
zG$9!Yhy~l_yv5Md&D(Y#rlQ(U#l@$><$>;`Om}@_Vt1jhIyzsuNF~80Xy1De$-CIW
zY^J?Xd<HVeUH^#Sei{Mu;$|C5P>3S^XwB5Jejb+{@sml>DjEYsbeNLzWl&Ia%ONOn
zBK}zuv#&M<-%apX6PVR-!IDEo1$=#n#jN?3Et?T|yt2Gtw&0hQr83rLv%G9i!*Bay
zY6?-XKTCtm0NQWg{^Xo-hiaCkRCD5*b``_~FV5<Yy%iRNU>TcI(6Gf1rhLD&L$l~6
zY^<$;oa5yU@?C%Yvk+>mOrBOkcvgeK*sEg5LwWk_84^BO9Oz9jj8MYb+PYK@iwBNe
zTn<-RIwzIFWX#RKx2BPh*17);y={D)t|jgKJp*fT>FG_z;-P)Sg0BRKAsUM*sf)(2
z2VcUOrW@hOcAW48q7bmO@fXgt9E3}d=-@xHga7nYzxn&h5h8(tVdGU!KcJ}E_)j9y
zKQ#PL93x->|GF|rHz-LWBGG@}D*t*bgajEPqJQ5W|0b#pC2Y_T5uRh$DPNLJ920Al
z=fzn{B~!U%Gt;SPNAnn|fB9^@8*Kp!_H*2b;+Cj-?#S-@gv+n=(DR!1*<<=8?1O_$
z48cv!%{#Wv6Uvd?{RToO-ktUnAl6i5KmYe@IA3`}L`e~L|Do()(v>}|MjN-wv9s5D
zh%&`VmY`QX6$hVXb1Qj$9i2j@y|Q1RU%;lcjdw7?S;ra6qMkh;E%y<XowV|I-&5ly
zzO2~1HH`zck;Vw!ra#S?)4?;Jm$Q)^<Q)I@<0kXi>xM`Wd;y&1>the`PTjWjU8wne
zpC_~^kxPC!Yo_qy_SBEB7xxO*y`<fEQ}g$ubco_2BI?6*${=3{_ns|9Rm5h28PUaV
z2UydLmw=nJ6#fhyOn^cQ!M#m*=`C9xVzR^Nj~~(T@p)QBAJG`QB>`8Fmab_0Xk%^D
zPU`UVS)S1u&fM#rM|3<Wl_WMknxn`a3ZWaZ*VRU#PBs~7s=gkl?8e8V6N>HwW6v#0
zd_<vr`IDVpEzRg*TX|hwvPRw}prnwgP0wUErx@s7Ge_2mpyLO<r-#{N@UMlR>><6;
z+)Reh(AQh(7jpLpt9(+gaex1$P&TWuGWHp96vqcguGYkp++Sn7;<Z9Lh2+EzM)t-s
zEWT!F*Saxjxv?^wze}me3LCbZKgw&%0kn9e`7ENm6=D^5t>*65?1KOe1LOy4B5M7a
z0t?=ThK`rN>gX%=U%wZR*jl&EkER8gR^kAH3UFb59+7HdN02>=>1QSFJmz}17Z@%`
zls$-NPBM^f%yy1B!)WDS!L=`EdG6ewZ0YY5RaDYMc_@|rrOb-x@>K>Y>p9AniiAfQ
zmCR&zoB9)$rqK|&5ET_wnqIZ(XJ<!j_3jCPU}{<Bl81!IPhb69Rdv<epeEc+wYt8Z
z>__5j<{jI%Ip|LSp!%Sm!(}zbhi<1W%~<Bjm8V<j)$CWQ`gE#PTWupX+I^W;O#RAZ
z;xtOnXT5*&MDO6)RG#S}M;qTG)w@i_jE@GMExA_MOHLvYx+jlmW9byP)fw;d#1ZPY
z;!YOJ$M2ATJ@)$O;w%-N%7^CSfu0}W=fH?PPXqi^YW7;LzuPoMIi(bV?#S0Sv&w79
zwjtiNo64kLahKNc9i{1FmnScIG-=rAw~FNjnXFyW`@ZDMHXguPa;<}|zu}MZ7mwyW
z8|XudvZoz?sS*n9jOfli0}XMlBb|B1g-`XT-Ub9TEKCQ!<j~L5Dza3d5fto9pHD~K
z0Ijp+$HRvYhwJd~#ohbq(<h~**9BbqHN8MjY0iJrc;I7{W0%lflJbR{N#ta{`#0)J
zha+(whW0=84Q_T6#tirlq(!Q4cTj$RVy)MXl~bc{R9mk5s-jSs-|2sz$ldM9&z?#3
zl`0^<_V6MN@&nOV-l;8Q*H6RvkrgCZ2J^Ckp1_$z8<J~L#s;%#DD~OXr;ES54fm`l
za!Xs9qc*n;G1Sx3GlE(F=G#x7?(HglMQP5%H}_3&)GpFE&yGY<zscJtxU--r+sz|$
z`uOsNy5ZtS=huGSI;GLUS>K?$vQb|Pu|zfR8NfF2s9JzUMZ#mpzLC}>U8h8Q8%Q&!
z``P$xYD8sZ)==3TIQewl*q~bkQ_hdN=-M574l8D-ujIS+tSy@b#Tz>Vbn^20)%E2e
z-D$1<X%$W1*7$B(mWoR6R$6nTu8a~Pxl^p{$GO<mS$}3F3mJW|F%`Z`ICd@G9A{u-
zXTK(V;)Ic(Pe4FGL_{CF^#y0cJI+F;3v$oDwc95uY9P({1YLNbzXP2LmBckG;qX<1
z@R^&sx-@@u5mw#207}QN@uV~~G^C_c@q<ZkE{8tG!msH!PhE=%Pu`RM`$(L8xTC6=
z+0#y<@gZHG>z4w81ycLu)~e#ulAa9y7d&nibZzXeGeI==d-b$=_8tj8)K_cBKah2t
z=0=D3ct+(1Lc0=9Y`CjfoR;}^+=kS&tN-)A?x=sph#!QcYvX0F!Vb9cpF$+ie{K8`
z{XgV~qcn(u&lwBYErqqT@RSVUObNq8r;`rn*u{aC_E{Er2Cq|68w;E$*Jp8C6)`!h
zfK5#VB>W{qSVISA;SY**v_a8W8psxE8;WWcwV^TxDiq9@P>+;um*@F4SR43=&~M7h
zmeHR-D(DEKO=LJ31{{?7$HHd2tPv09LHHSEN_eu(uQ4^iGh9Y(&o76<z|dR%N@iov
z6D^-h+4BZahGOo;$0*Zc8F8Kn0+BBE==+Ak5Ty_$6;+vwLX3RQy)RN6`;MGPI_l`H
zZ%;gue*XL!R`ce<LmY`qOFPCoouaM;B{Ga#O!Y=navHcl`S|gpukUn<!BKVfG?+k`
zx1&cR=@}Rv9&bu8s0?u+Ea+pq@D?<3Z2QK3HY8|?EnJ1X4f$!<UX3-2{XG~FrJ|%{
zpto#xI#EkfQnLE++1v7ZiUWhSP(WFFy1GU|D$`xybX3qJTi9i;qay@p6o?MHL^~x#
z#i8Lrk3tMLz#Yq}UHnEp$F}LO3r^MAI{mQNYtz4PKtgFIevxI1o;NqpnX>AH;AO_I
z_-8Qk0BOHSR~@Z!=<s3dvi^5?eOS1VIdK=M?8A*K7Sr#G>Z0Yw+IEc~FFWufqQ@<)
ztg`Hzfjbyb^CYi~o{PlTNOo!T7KbO$FaPt&4JG)g`EB!?ZLZ^Iy^e4*%l1IDi^^J3
zBO3h&u;(e|BNu;s6~#Ba98m!nQ8CBX5S1~cbnD)~7cUMI`oIaDJ3L#I5s}uC=j4Pg
zGD({qvex_JE^>p*%|X?s?6kDq<*%Gl0qKSaj4no8K!1V%ZZ0cJ!gCxOy8-vs@!xCn
zikhwvF|Xy_R%q>z2tdP^K0au3b}$;ejfVqPv#2^VrOnh&DH|J2&2IEiXf9K4m*2?%
zsqzN}#X>|Y6!ecDKQ4dS$DE4AjYQY^&-YgdAH0jW&SHCVS07x>=2nG!BK>MZHL|T)
z_fYdN8+X`4)Ls5+W$kVsTorb9cHr&-=|Ieg79|X86!n9p<>U6Ycp#%wlCWToze$?D
zYw|WD!{*C_$B?5dY~eZYR|gp-;ee2cG9hAtuS^Ydw#Ga78D#bzX^PjY*6gp;c+EYX
zmSS)tb_lF;VrnWlI!4)ib-Ko~KsJ?Jdxfi24||Gaj`Dq4oA@EDk=ckN99{juFjd#!
zpcYK|`ZZfKa;+!7!X|<KbtOJtXk#gX_PwP29xC#+*n8LWYeOBlZv`+bp%aPaNk+CP
zF)_%5m9$AZ5`M&S<T+4zFFIc}u(X`pv?+JvAvuq~D>M*_EYPjhJ+7p9gp`yv0)|CB
z<?V#U8ujb<dFgz`<G&9;{f}$<|D^`tzxIbOs%$<ZyJbhTs7*=3rOV{FqE>E1^r#a)
z|93HAS#>o0PcB_*+ZoitcDttPiEQ&`+03k?bS&H_`5ovZ4)F3WITLAYY=O_eZtdEq
zeeiLO?u9)}+c#YF&rALgIw8z)?<%810E7?!+*?DGLaj|r@{qgAgk&?1y*>KhbPnV6
zk8n{tt!Ai(SK>ff>I>9ZUS0;%w}8PryMmN#b1WvD?1(p3nT9X`Ga%!zAS79vEV+}F
z!PVPa;@gGbz{^+9jehW;ZwShWxp#Kq-mSM!XzoZ6mglli9h);Eh>F3N(bCe2sEq8`
zGjNKlz8Qr)l#HdFYZU=3tyBG#Y~-R^?U{QW9XF*JEtH3>WI-XUigf9_K=MQ#M|*l;
z4Ip7pRBf!Uw=gx$wJiTuHr#*~10W0i>37DSiK5Rw&~3b1LE2g3H^0VK>^?i+_w+Qx
zNQ;77=H@fteEa0U)sEFhj%zr@A=DbgTRdz*Cl*n1-EI1WZVus=mT-T;i1QPtfA8u#
z3U=wKxrGG<pY}~v)n)uU-(mb8zy}SO2?U?TE!`W|7>h;f_hU)G+~|v~1k+1OO36`5
z!FVp#H#MIYo9~vr?A;kFkn3sVxJ8Qk+H0Tq_XB3{&ArqLS_$pWnRBx$TR@*!K$(Z8
zKZt+n7cqGS25wDa)>hcZ=xFY{O%vDNT{<FQFMb3@%Maki5Fd2y8VOEdAUFrEr9{C<
zh7N4aNu?c^huz#V3nfiQUMJ3vhzJF}0b&&u6)UT>vcPsxHPyem42u7PF5}!5gti-f
zdooML6flg!T0|s&aW54#*r$iK?LPSDnKL|2t8Gr11wie7jJA3)S-8$*VBmIGD?)-1
z7iM(lP7GyvXQzfy8;b6cxDU()j{OzXaVorE#KCt8Y=B&TCX=(mfq@sy42KI&oh<fu
z<SxBk-|)$sUzvafu<5*3lM@!^aHmiSwz0^|mhim%KBKLZk5$*_-O~~_S|0%l#~c5&
z0vbdtKuAnYxH<1O;al7>J1%%tr1Hs=OCa&5IQqjAwb{8Hm+R&y58$>#7mXG1F<cjn
zy)WlhcGHwQ{yEuvttkcoS5s`J50M@`+g*`BTG&vZ_|tp;UQWS}Rn-5h&506`p{8b{
z#qgYFfqOLL{-bS;i2mT<n3<j?+hp!WN-rPDc;jPOY^+MOYy@BduuMfI`h{SdHMO*S
zZkLBfU|iavLtF*{W;wPNK#~8{tGc<%J!5vP!2MLCNG>zYnDy9!Bh(3#LH!YpUWvoE
zZAe$<>dKB$sr6+3Tu{^4w*J_BrFLDD@FOLlHbJjmZmS|8A)$SU^Whh*=!j^#Dy}7L
zjkfGT5;P_U4!|v~ekxKaH8qviXMI~?9LE(YDMUfW7{3WcxoBcDSfkUDYPhayTU5i?
z)qxQ{l}9b8uAm0lO-vm4COrB=<TowB<=R}U#knl<`~FX;8JZW=?7zQCkK(2IN+Xiv
zdBt_wiN<oOPfgCyp#f5mzy8!cSj>6!3EvAcY(Y||L$Zl24p9Bl)59l2DS0hta5#7!
z<v*S{2;<$ap?2Y|wea2yH^yOph@W^A{92h#YaOx?mm?iL+zu42E%cw!=p@3d78;uI
zFAsM}h#T{Uc9Onob0j0zH*xfAJM`9UOQqEImpmqJyAs?cP1!pmwwY>``%-BVkg%vN
zdnIhvZ$+NLc>{fe;pHhwOOn$?1qBg&FzQi|lKNn503+q$!!KUF@>pHVTz%pm5uqb5
zpS(;dY#;wW=w(0?0fz%M9&shKPmWek`lSFdgdSkjB<vQMA3b^EBM|v&<pzC(&S%0k
zV87R5@0+)`|EK#J3JbL@ltVH1AJ&E0XU6StIM>@#N;Sy;D~NL=A=}yfEz2efiAMz=
z{5NW;<s<*%&i?K7_}{&os{+o@NI6jN-J-VFkY(4rk(<e+n>YKeYYBvl^QnKvX1%>E
z7^&m1xBdHJ4`C@cjWZmHhxG;q>9Rd8Kb0Y{PuhOpQ?|OehDe0I-8z{=nrA4!v2xB_
zJ-Pc$-(V%_o2OnB$+?~zCC9OM+F?Y>wfRDu{lag(A#{<&r-Srzh&y<8Mobd28qUc6
zRQ^5dW8&Mt$f$qAiT|o5{<;B+S!F)9$^P^$|88IUVv_561EE|LqTVv_t#wVki|^E|
zfPbmNVSelM@N7#Kl{Dk}OGbfga+X6cb}2Aj_t|*+M1n)4M=UTngWm#LmM7t#1k~*2
zMjPaeXw10v4Ff^%EfF@bv+|CrKFL6b-UC;2OzRB|xcK&4-<zwNe6a1V=!zFbg<R2<
zKb{q(Z7$kRLr<wBB^9`qFz~U6rP`_bLq_4HOH(@m)pbwgMrw3%#^VjqwB~4-%ROsL
zG^v#=Qd@~{J4nVp)gjfYu~lGC&a__76zBVsC&R3N3`A2Z#9WV+7d8K=l%kwbqr+FJ
z@liP;kuN=cdA@T;KE0UbnBk1UN?oYZpB#VwVU=f9d!ufxBYl?q)d=CKM4jc__eRwI
zb$d&p%~Y~8?|rH?W0TX@HTyMQi8ze^c)0&4|G{T&(zP<LEvp+EIx>vRa#}2Yu4P!4
z#E_}ASf~mZC-8l(;hx?;Gm<nuabK|U<4X?HyA&?6N=dgBo@HBCWWVZApAKXrsh;qr
zw%bkiiJDu#ZEIxovtdrf^9COWQg1es+Pp5wE8m%IhY5#03Yk1SVN(X>Ewq}RPoKW-
z<x@K{rktm=?|t6P_pjr%PQx|1-^M-qy<TvnK5|HqVrn4ZzHcg$={c=>dndU)etLkK
zt9a9~g8ZsXjjTld{?ur#lXp8ZSWtIZrci3eD#riZTj^yM)ahiMr(KafdG@_X_OpTN
z=;4}rrb|)_=ha$f+mtG&$0Wqm6O7779#8jLdQ^;die%eNjYR9+h`t(a+ZPj-FkbxD
zERYrPkglz6-|TIsVm=0+H~nttl*iT1TToPF+?3k)Qz>oon;575_*{gp<H}Ddlclh<
zmF4Tks;5F0x^>cCyig>xUUfk&JE}}SFso*m7~TtAZMfb*`(3K#ZL%;!0!>qr*G|g_
z84rC|haV3fLy`{rr1Wb`@2vK@Uk*nXX$K!S@)<?7cs-y=x!d+Ze%FrH<!yJa#|7B(
ze1JeYMx=yn_`1i8(h;Z=GGFu7jtP!4F4vqjZqCsv$S&w0|9FJk!oEM3|6EQEp|rcI
zduNUGB6lxYuRS-tO+kNPyn0Ei|8V0WRt?IzGpZ^oOw9_o#3k6|sg-XhO=REG8M~q@
zcfj{7c_odNg|}?PySR6;?+#E<M8t?(5~ZX(?0%ESUspX#UpRxOUWBgwy-jQ^Yd?AA
zsxSdWuy{Xr_Kh5@xyMP>_p`}VtEZT>x7%H)iR4qR>&&$~RikY(*Z49;CYYaP=rM7#
zPFm{1$oag6nBY^oAARbX@Fd7wBCemO%aTl7t!A%ITUlWYV2Y2CXI5E#pQfAW%uB&U
zT-MK~K68{yytl4wO|dT0z$-c_xI;vQaALg)ar{oS7%*;_FkV$U`MUM-^ceX#e|nz&
z!pm!NC$sHWhOn9YE(bCwzE3Z<JU80J^I`26u=gUF2fWFaS5hrq+_PuQQZD-of4ewb
z7u6hQa-g2{NZPVdnnC^hI|ZczxoJM?Q;h-7B%MM9b-vFF7kQ=XH^`a~aB2%N?q`-A
zF>{fD#(ISR?wjK1QDX8#UW~G)zt=}V3)`1TB{AvX^Y-0ML!wTrTsE1m{#2=k6bGn!
zGS`aZBpb26Mys+~vwn?>rmenvQm#B9hOM}FxPgk-a4PA!ZYcF=x6ZFTE@M@`C9hMt
zR$_Y&C$5aE#mF(8TeevH^6=~quarA2w1f0ajq$-;{b@MzRLyd#N)lGm2jzOn$s8rX
z_@&)<m^HVE&wQQdxTwi>cABf5Cqh7r041H_#^p?_CY2#AdbuUwq-^FHjz3*JydVy_
zMomdU`S^*;${KY_%CkLt`*c_n4^s(F?NZIsUwNVLE5Q45K>v>B;tXcNM!QMmx2A=v
zJ!)yGVQkLYD|afa|55&<8}S;FS1+j!<i+37{0|_c;1p#Q4ebeE>XWfY+A}I!N=+A!
z^cP1(8Bz0ixGqeTXlYQ6Vgj?~(nz%Y^*gIEGfF$1W@R@PpEJ!@uZ*o?l(SUabX{ZZ
zI@5<nRnxdN#`xm0EcmPj!wB87_<q4D(j!8bf5(1lzX-Mchfd@E7o3Poj)$F9eY0P_
z)dn_MEFOdbMNhqn=>K)a;fg#Erg=cCn@)%VcW^iFNdk0zI>=z}z$2?`+ErH{%&XIj
zh!9S?GtX1~g6IlQ<>xKDiH?7F>rL$2IQmVUEbOcT?2KIZ3(oz0fjRF9#0}nDWI?LP
zNI+!jRDUY}*5LflT&e%N<;8z;S)*M94um*`;KYsut$w)F-a8t;y=V!sk3^1FNJvPI
z!!@b$?^CCId99AZ>aHz1`3Pqg;j+@!1mD7@nw}0`r^KE1SumHOEy4!m^5(|#eqH~l
zO0ScnT_Ve(oa)nxS-bo;H3h||<?^!tqyjZPZ#VY<=#EcVs`b}1I%R~X`P^;gnB+Z-
zi~OipO$++`d9DO#q%6z9lR5%$zyU@QaA--f@dzNii70;>-Ms_goa>{M<cxTEQu*!Y
z2jWy5otD|*emaUM6*-Hu92}~-_7PrQ<KUFt4<?ZNLjWuD`g{hEC+NWPR+VMOZX0W8
z7kR3I&|8~rTnvx3T%QLqKPiX!BXErzkerx8258xuIx0U)!F6{YWp<zC<K1NWVEe~1
z(_c&TT(H9|)>G2yu9M&_47IeTBlg#4TD&?TwvSrCzBu98JHoQP(^s_X4F*uo&d!Lw
zGiujB9+%Zb*L^r#3iI>#Q3-rS;Bvj;MAz|;A6Xx|?0M?pp@G48QOmQ9l-1mr^={Bu
zf!`32g^@Wo3*2?&-d|z7_7xK@gG^1jK7YZ$Lb4U)CTXLwGU>SuA=#i@R4|JQS3L^=
zXCxFbo=Y|Ew15fgq!i^?M~(qvL#Br6HD3eoVpU3vx)Fc$<jMC)#zG3?<psBV7LjA?
z`C53wP2?=fpKf0GeFD0q&U_=GfUk4-db~P)3r0kPTDPuAg3iAsso%KTb$J4!xGl6K
zj#IrQ5KnM%HA6^4KNNO+4g+%2P5a#SdVy?P40|PcadL9H?4=U8Q@4}-!TD^P+MeYF
zNeB}=(~QRhL+ErXR8f-w%(TbUM_|)v0DmFoioIgu#|cP3=v>;7p^tAWkm<(il+G{h
zz;pUF@KL)!9u?+*2_#&GM<9_U$e5g8&YRp8iap45y{&xIrw!7?Y}?s8HA#++j;7y=
zio`|`dL+Q>nwOUs^UA-zNZ@x*|5_E0;Wt2wl79D|=YH?(9LHzJH~#(gAm(jacng&E
zKpz3;VNJ>4xrAp&`7b@HLyyS7Hr|r*Dl6+%!Kv;8$l{QD)cAY#y3rVJhh^c(`}a?Z
zgBAS4N5fr8hDzw@=*DmB>G?f>{s%R6+z{?<2DUHWQw;KP*W+H|vn6A?1y=Snk?e{W
z0SlO&HEjI&%-cI5D$iyb_=Ngcl3w*!pv!brv{)_$0wnCoF^UnF>jAM4yfSb0IVKY+
z_ZA?Wh&Bo;DQ|(kYD}pFj_I5GDl`;+8%e*@CZjE!HrhLOxXca<=5|Z~JfdX-h>fA6
zWG<l371aEpszn}yD`rODH8Q#Z<-Nnt??HdliX}{rJ3$oFmPuP?foI#XV+Xo)aRsH+
zyP~hSJbxe1b&r)<2cL7sDy`DZ%+C6T0KJx~49U6Vc|-xSCV&mS--CuVcI?@`yY$sL
zFR18K=g1E%ym;{foIDSAd16WmS;AD*HLXOQq<bdZ^wJo-74+i89vXqKH8rr({shJ9
z&launs}a-U+`l73KFNBLlvWSZZM{4_JMxS>kqu_rU%?_f0_}ZAX5Xo)VeK@7_7;;O
zPs6tocUzJZZhgC?@xqM2S_OG3Z?D2xhj<U4J7)Jz2hEI>_?|-Q71QQUxK9A!nb*GG
zyT<bd88~TaX)Z1|(v0|J2cg{=0N;t+tgrn6<MDY7!`OdNAV$IN4A?6gL#55F@@Oyi
zL&C=LOVFXkqR4X;605ztZ9m<qe<`^7!mg*#;u_7_+jS64%Y>LiZ2JSp_Ngm}f6Y(!
zgr8$nO7z>=u%DXeMe^ydWBK_a-WUG)t~u!X+?wRqImYm?_;?yJGWs+qC1a3jM?2`0
zQ;M<0JUl#D3bRHyqLmU4Lzm2`q-K8!9&tQrZHsHkiHWvzBT9$@smc6JQp#yOqok;;
zs1P{znE*9SIMkVLH;3GA1T!Efcat%$PL;7iJHTbousoyRn5;UFz3C(s`WUUf-(b=V
zgRV@F05L$o^|n4hfVf*7yzuX-(~k0jEs{GQL-zKw*jo$03V!u3nzqnE4z0$I!GxW3
zOl#$Z<UOL!hx7!MiTUIf*57%c#e4n>?#_!UvLV>3gmZkp<bPXr^RG7fzu<lSCk^<&
zUb!mZ;Pi0(totFBxu4}!<bl56b_iNqBEbVJ5)^>M?U(0wLC+bD&4<9CqXPB={rv#m
za3I8A_IZNyYpeEk0K+gzY&>+(8L(iy6Z6uC5HsCG%k<}W^#sif=*@5ua6sfnYXycL
zMxb{hq%00hAo@%)&{6nZ+rH=UK-X2-MWaE^eH;CK)Hc!010gxKnB|G+M3yk>BS-jd
zeLX+e<9=ke!12oi8`>v_D3WJp8Req}x=j~<N+Fr;S6l9Ao?)vr#@kBVf;bcERixwv
z&&<L~gMh&|<1~cW-8ygDP0136FuCrJ`nSbz3OW#qCV=q9wI>u+7zfvxsG|ZNCbEJW
zni)Rxftx6H0Dj`mP?MDv5qb1bIDtX#q=ZI1fbRpRq#LTL<||A#-nbAo1F4Xmbz78L
zmgmqXxyTAlr|I`D_UBD|qqY(Ml+@7Acl8D!2lR3&BS{yeo6|tmm$^}Dv%b=LXyi;%
zVKhJyf~-j%^MT?54;u0phzl_>UBt1w|6E!bW(y(&YrQxVRm=YZ`46|#s_fOOEjJp^
zKBMFeD8h57d`xVF$_QsYW)G{O(!srFUs^wVcWrfxh!(1nZdQpj2v1yX1DH>)i;$o@
zG3)R6sOCh@sw#32YITgA81QnUJeLC#U4Z$Kw@_hWCD_@t^O*J`!eK>$Mvm_uV#7~L
zzoxr%z^f73*ultCjvt?|(aAOB>9UY-JdDe7bj~mpp>i(pqUPnk{XHGC*jHDVXrRBw
z+xy^3{P1C@MChUJ`It?R!Mc+%VSITrhVUp%!eV4KwzV{t5gA2_N=m%El?d@s$}oK#
z_5CGh7DhP(1XNEOi@)_v%vD<{<Uu>gad^8>dQtLO-@JOYYKn{rnhCZcRH(EShc5Jk
z4*&#;dF2a_b{*)WQc_Yva)w7C?l1TsP8j1El)S7TfvPr4K(}HX9w?=hI|T?#`(9p-
z;or>e_<c6Z^WJ*jL;6s542Jh;gWxU;Fhn_^n5=gnX_I~owen0B5GO&KRsQv>DHwq;
zgiXfg_xm{7c8hsvQzV~n%dy)}P&hmf(wE!~d8WMAQ8k2s!HhBCnnpr<JNVrA{=r&5
z1uLs_Vnq!#H%KWG;K>tmc1pAr5)!J}Df=iDDv(2aPn>uMEO~Xdu>}He_ixY{q-TbB
zFCF2t7E+}T)2@cI#S&_2gl?WnylWDLs95Vs+WlTsVQS#haSYREwXe&wPC|=YcUaJ|
zyDr)n>eGU^zO_%mQ_U|exusfH;IegPR%z3Oz#!DLMh(EOMA2Yfw1@b&R~-8DBh5wU
z)x-NC_EN<pG<*B(^LzI1hZZ$m4<8hEeG3@ncucy}XAa2aWXUd8%8+-<D1?ZurQ~UE
zERkYy_pMbmk$aTIuP^^hzp9<6X>4Q^@&T%fqlXT?=YizYj|$gyeO1-@Y5k6b8TQDz
z{d<Z1TOoo$TFp@&bH)3cQ>RAsK}*!{6cFezh4%cN`pROc0~D{XP>KYD+3#&PrRU(N
z>&VsfIK%?0rpDWg1=?Egd%L=h)!gBB2oPW`|H0U8s?z$v^y}E@XteG2!P;#7!N^~s
zZ404RH+%@mQFktQ6D=lrOrLy4+!tLX`!WX|0}P6If0EbJ*zPzD^-9#=!cfAts+z@_
z44?13(#w_6$h?()$$_?|3?;Eff@bsb0<rJDD9Yo_uXV@_4M#y9BG%lKlJla1YM!Ik
z>=362-DrQm9V7~v(|$P``Iw;mWvNRIL6a~1DX^*$@}u96<Kam{Bv#$U#T``|%0V|c
z4HRCJIplH)XWKXD;EMyV=Nnl3$Ko%VoBFpHh8TD|K`@1<L2}GzHTL>Ev*M>Wcj)_&
z2nPjjxN&DkSTLK0<6pMYT=SqBjPSCD1xghcG46m0KL+3YBng_v7h|tSNWs=?UrP)O
z41A}h;(gv}e&WKB00ucOR)LDfU#XAeOEeBo))w4YvE68GyPW8Qw+tZv%)`F9I>DmU
z^{RT>4e9-T^bSl4F@AHiZy<b;4HI!g3xfeiwWy?P)mq%=a0bX)IxcZtd_9Em@VU9G
zwUII?Dk(@vj)(4s(G+nx&`H2=gnxeA;Td$?qn%D&8D_eOdZpyhJI08E4>g3FrzbiY
zKbX-liEI1*qaTLG`+u1z3>;!ncK7<Ad{4LuB0pI8aQbCy7MPNFdeAwHhwy9uv1{##
zTjk&D)S0r{ug0IRd?D$8{F>da$2MV=x~DEXxrsl=Id=MMCxoQT>e<PV$H308&btII
zdQqLbJ=raalh|UY&cyU3$rPW+M_%5w0M6K;SFL>@FUzLi)glV}I!Gi=g9ha+%baXX
zQjp(TgdPrLp<85R<q)USN>0DAf)jZl{z33-L8l*&cKP~v_Kc45-xSKb_;>_F=uq!W
zD@v$BPwEpJ5B#&2sPJXMsTRu6;8o@Wx&`VXv&-?pa)@JzQQp)ex$cPCvj?{2^OMa@
zP4k6&E1_in{+e4&V5y8P4|%0$1}}c^lxV9cEc}UpMaZ2?q$v&`&W9$Zu<(6$X<M7B
z{d2#-E~m2pQ0N`B*>#Jtt-U>Bd=6T(PZq<L7%z@Gl}Yv|H04y3lp#E`Yw=9>i!;%F
zA4T$y967SwEC&KdBlGg3E<)|L{HDfid-9CFx*6lym%hPLIn!39!Mv4z400$vj)nCj
zYzeI=LP>Y+65sOMGc!mVyhX2T$M5L&a1V1wWX)~-IrIN@iS?ggEdPIc8_5yong}lY
z{-OjI5v<l^F2TINl2a=LoN|-&((csf>emLugdi{+@sJ_!-#2JD8LE7`nd;>gIpn8$
z@ENAxMamq-DOldR^qx>;Ulm3eS>)Jcj~Ehud|KbWWs@DxzV&SgwxovmPVK5U-oj62
z-2dfu8#?(gpv(2yGn>U3x9k$RaJk7To%x=k{V+g8Ak(pojr%uGM0vTNqN+V}*3HX{
ze6NZMulI>qxTchnjXM=My1TnqSM5}kpTHpD)r1o0G65NndW(zz(Z$!#pC6-Kza57$
zNKh&9g*eTYfhH$v?cU;DGNIdBo0d@xGyMMcugVP`5i)L0WF3^;sW3~<b`fRC*=G+`
zbB4zH`X&deAD)sqO6b&xX8kU(9j|L>s0b*(XoPP566gMw{CxS3IChVpnR*BX>f{GJ
zwBL_Nm*SvMf8OJ*{RAukfKo@cj%jPNO=)}9eN(iY_f56dR@-;%TP6f65IG*CM6Sf`
z|A5=RB<x9|-T!wk=wx~wd8D7|RJXTF5x&voBL{cAf$wY@;TDQ$SRQPfrrS71K6|mQ
z{C$zltY2g`VNp+ya1Yfsd)b{K7(V8IL^u(tMa$AdXi^!M%6>V#hSqsCbx#Yb4+uJr
z^4lJvqB6s>o}afK6w}2huy<mWa1bN6jzHQ9wQJ8v?iAh5lBn-}!Abv_CmXj-jm~Jx
ztfte??+dMIE3ojQv!a)9@MBRif^%%GB@Wj;Y|4JED7cPto0<cPB)sRV!U*zcX`wl#
zRAv^2k9C48gSGOZbk_6d>vtE_Q4vP%E$Edzy}UXxsT-NB^qkkwSghOY^z_0z;>`Mi
z1)BS}M#^Lzg5C)-xf&T6d&370L+M+O@>vu7gvI#>_q;(mI8)>!l#kv5<qqifa%bY8
z%@}Vd&V+9(FRv4t0^k6^km}(cis9LFly3&v!yzF8WdU)YQc@J^Jq{*lWSFJ^oUM;N
zhpH$pdSUWJAfrOdw{LQs8L&ES@BR~M0$~oLFU6o<fZE#T=FKWZnLd5`ROC7<Yo1MQ
ztXQRb%&pN;kB`bJKO0!`U}D2>KYprg>J#)@$_bkO=Too+mKOv)xh;lf*2|J7MN;u7
zw%ndX!OZ+)&d^B%E^5g@of1u2cMLUvNz4>awBQ)JAO@wxI=pv<{Rq{6H`;1dnv^$O
z7tKVTXI@0}bbgAiJ@sxg-AaGjZ)_;w!KN9=Cq=rMQ(v9q?=8i0>Lr>qV-j&f)?O3Z
zWq?^{QPy<dtBYdC_W)sMDN<}anp%<ETn;aD9Smo=I%TO4>wbTA4&Pv&%YG_$+Zn}c
zkbxy6CZa#|7prY-BzI|PQ4Yhnq4r3bysoYyoRAn<{Bx+@$xUS5OVH5?G2XS`JA3t7
z3kz>g|BQor8NIonS>bG2=WUCDDhbXJv_@E&S!Vs7VWNUh>cUu$&f=&IW48;K#)Jpd
z4Eb_>l^QpP>Pq0;$D~6G(?zM*$kTni%!fC*d-v|ki_g(bC?=RH$jjG_G*@)rD}R~S
zdvj6JYI(BQcc9>UqIL;9nxzyQDsSiSSH5tE<Mj6SJ9zl;={c0rP}MpVKYt6f{{@eQ
zdlU@$&`*WE)5_{ATN^>=5go1XdvY(-H7BL{kqXGexTqn983jX_=PP;wt__qj4A(yt
z10F`s0Cdl=`010(S`OAo$w?+j21>)7*py-rnUYctLqCQf&}xizcPE+;YF1ZazGn5i
zKsUD%bcFytI8A%?5@7#07>V_B2u46e#w4%TAo03zb6+F*1ajHksQXXYL}J7c+$rMh
zBn0s(-0|zv2)a!XCwvP-A(m^XPteka(|FIDg>dM*i;p4-Npuh4<RxsI)(o>i?E*-H
zA*2<$ynm{#A2R*Fgyt>Sc%`%GKT!`yYM1zgjl%vmK7J~)^6R37Q-n@05cbk%&!6ie
zC7;$Iz=g~XAs04^lEjjjYMG$|cLfF*!+hN<Y-}u(0e?_+lCCimQ>>rKgzu>@KpGf<
z)1x#l=u1dokLL4o4fh~pLN1=Iw}52mZ6}TNdmnA417h~+XY}kB@)w9#OjtJ1(A>cN
zkM%Gd7Q&8Qfas{i9g?lU8n@zLQ6Bq#>6`0Y=B-|=v|B1*9=*d96!dXU5{Xt@N`3w0
zZo!Q?hfKSG{g56qIH>OJ3Ejru-E%;eMogq1vq#8ffa?s^M0g-|2^wbq+$;IRniIuq
ztIoiWr)(S6-^?-nMZ)28b;s`QRj?NNA3Rah4`p~pRu+m?8#_CXt`rpIQ#CcXlMga0
z>W#K|NghYw3^z|I*|l*zx%^vbQ$;GV698~tJ^~p#MrII)dFKh;kI%^H9UaA<XC--Z
zlFt5$V|jV`3EGarf`ZlI$Fzfo_Fv7heFh|^AzF^<*k_G{NH_KVAd?si8g_YQrOb~t
zHpX@Ta8J*P&J|su#SNk{>clpUi|d1gySj8sQc?YjcZ$f!q~Tx#B#K3+RpKLPHM+Po
zm=r1OvhPr2NA5F#M-#|@S4qALk^UfhTK8_8qv2l1=Z`u#tVgO~mWFHD`ca5eRD}QZ
z>4EmFGyqm)ljcB+sW|V>a8^#StB}8)2Ch9avKzd}Sk>DTaLZj;Ar%x9On`G*2f#~T
zL@1=sdbe&JM{dl+Cox8=tB$Fu+nD5|j%m(>2cqRp!AKkUp&74#Xo4&d<M@s-*2t_w
zN({CA<4*pBQc9HJ{FcS_?4$IpF5cBe1%as7Ny*6i25r_ytW$A)2t0L0lBTozoHkt9
zd6hv1+S&*I=<1A=VY4w!NK5<WylDl{l6`OSWPW~rPmvdbJ}xY#-xjscTXpDPN$B#j
znT}V@&DJjIM)UlB<rW6otRqUdzKQ?_(^T|+ghU$FSxLy>0m_@ME<eU&IKr+8;7ld>
z_3PkZ-KF_?SHElt-}k0z$O3ZT<4_s0f-wNQcW1_C+V>Rhg+6AqA#Mp!CC-_-R^zjM
z<YcRKz^8mZ(5`-`rrt%+f?bgkzHE$wio_03O=ojIm7akC5>`e1FQ3xEbMzU;aZMjP
zJUA!{!GC8ds618H_;K$;Si}edNl2g}AO4er<GW8m@51zRzjl!od~=~{Rn33t9_1hS
zjEszI*=$dEuAO4u6jcabTEF2Lndn^i5g+;<So5mba@~{)U0-ONlguKs{h*}=DFsFJ
z9SkN-YRCGSui5z<KCcs9taLu~Ba!b5H(6+djClWGrI76{0!#j!74gIYZijjNld=W&
z1yTHls#yJOcO56$NL40U?){gk^>@cb^nbW{=l>87k)GroQ7}&Te$ZkC+`qp`Vi+n=
zcp1o^VX<REk=Uh6C;7?9$Y$3moE1nh%@FXK)|q3s1Wh`_UZ}8fUCKp0Z^u*}ctrkX
z=!pJnaqQdYcydm{1KU(uX_*mcC$CLS-^^eVNOvja&Sd@AD38%Ph8u!wpTW|BY!<V)
z1G2cJF#1M(ZkxtBWoOhrh1(Y)QJ03SLLqtug{7jXC{iRsXi1#q0djk|!ga*YFg!M9
zq{$}jV79$IQ70DY2ilQrlm;cz!Gcb?vJq1_vxXYtJP<z!0WC({%hJSwvhMZ)c#d4C
zyCAl)#iVmEuYwa;MqP$kk(qAg<zk_3-V=_Q;;H=B69i}bb2pUMahF4>sa49{lHAW9
z6dhDKtA`^Hu1X{h%^*Z4PMLoHn-eDl`9M-*`UovG;AaUOZNU9rE;?6+y0}W(I~cQR
ztoGx4Tn`0nq~g2-^xMd3?K7U3LbR;HM>wL~*%8XaKnX5@ToiXO_~{IbvhlCm(lF1c
z_&}7TKO+l|Yd@%gb%b6p7Zn4p0XB`?lS9(ddBBxRtTHUi-=S~@J&@_R@;-JrX!~Bu
zsG}eLM$&Qoz^0_t8&&=C<=V3D;s~|V_HF}T^VUQi-_v&tVw*Rg`McrxTzL|}nS70I
z^Dpfx2ooxsnwskC`+(GfYGqQ({2pivC9S)Iyu31bX;ni5`?+&YaN^JCznljCjffLi
zSm_wyW@3{s9z)C#inK+J+kWflED}HdyG7t)x^%Lqzkf>7G&7RCaQV4DH-{zwRh=qs
zdDtS4P`9o__)}8g#SsO5`_`?DTi<L?oan(>>_!Y$q7B6?)73Yhvu(`Q?FaLpNKoXG
z&9b#mo;se(J@wy~fXu=D&)=g3=-s0{b5Nz?b#nxVL35%4Kzw{jB0S5OED6u5wRPLo
zU`$}E$9%);Y6j(Ggz9|*1jwq{UAF_AtkUZ8HWWJWvc3eG2AzdRH}n9N!Th|C5mXCU
zPkcs2kF9eStSgGCbxgJ?;T_Iy(#XQ66p_&p%@LB3s24|oK(@5phHIiV)zDk)P|y^r
zamf3wd&FT7iMqOa_f_*lUlM$4zav3C|CY7&e6ja8QDMFzG$EJ$87(ky4eI_EFJHnf
zI|1~pyKb7CEliMpkTy=b&r@*Mq<4YSHVk-@k&z)0ChVv)>?un5LR<6KMGgsCS?gga
z$gH^?SrH6ulaidA$tp@A))G8V1~uhk7))@G_eFbgTTfh7u*-M7h4}K?x;kc!-0bs!
z2;Zv0%aRpm_{Fc0=lpp^<@}IwPXZR8$ivND=7O)4<U*=zUY{_DSLriS`pd2kV5CV8
z91s=mZP(O*tb^NmZf-U5m5Yl@lZuj3$q9_+DgmPB*sc-X$<D=feUTd>pfEf*RmKu(
zFzu&6LKNg)$pvi<HV@jzfCyiGMrbpv{&*Fmh^_{jk>XKURtuj|F<tEc{P{D0yuQ!p
zEaH?ok+Qa~r4fmt0u4>CbbTHLxT#isjQ_1$ZyDk_IXEu2K+X_c6RFfR^_Fqzx`l6O
z(YKx_O}!}skLKr{GU*+Zp=?>WRbyQgO6Lq!IN`b0UEtYKB@x&-e|P&zyoZRB+j7Gf
z%h4l!AFgkW$1*i&&wR${Y-whO5hczuoE=Vy*jI@3@T539hQ)zw5n7)^3n{*}dosNK
za*%lVHQL(Q0nC@|eQVl)!}2J}<aJJJ6$naIMvz)zzP8FgD3|`>?b}HRc;rJc)dxPq
zI1KPXsfmisj(XA?`E$XAysOVK4dL%yZsAwKcHB?ap}gx{WF^wtnUNfss3VEkl!2d?
z5_iEnHse%;KHw~Z7IM9c?}5k)6m(j}xD$_W)V!&j#vN$v1#rNFwrU2vkCyfIR1Cxr
z?mMl4ki$z?=Fem`Q00wc|NY2GfuC@A2e7Ur-EB67AO$s_saY1S=74;NZf7q4;^HEx
zB#e5F(#ZP~>ck3|N}*+ZUKohFc<IbSZ0<z@rm7C!LDpvv4+Xc^YRin0UUis1`0!;P
zA^(Ri`w-a;JF5Jm5pC<<>;ouaPs2x!uN6>7n$z0-K-LU=zPtER5h^KV;}#gGi||^>
zK-SSA+uM){0k;qO^OkC<5v&(D+g;t<R+h$dbSu^WU{6aQT3PxP&G+>0N^v(?BCl!h
zJa(VRPXYa!N6DR&F7h7~z5NEKZ?OE>0CkS_=!?&9HZXWKF)`t!)&oryGY^llI_n8C
zRAPA3nnDcam=hQl7AE_#(Yuhh`&ILQ2(H+~@%+d?<<LQ;-%35A->9B5?Y}to|2y%r
z|AG$)*@QY!s)CMxLv9?vjzq`!uu4G3x$S9bZ+8I6Pe32L#3IFs;@m?-yGI6^lodY6
zNBcy1a1k&BqU8w=x@}u`2p+H_;g3|c)aos+Hr>9`oU~S2TAGQGTu?VSPINiKXz0g)
zD9ZpgjpGPjWn^Te>urV$G-4d16x0zBH)%t!eegf{4JFoykkZDFqPrsKY?l3LwlBx$
zVw5VwSQhDmj|3k=G%$KD<V9rKTO-E^xBAxY+r`&-LDT<Hy&i4pQ%_CZ3hSSuk%u22
zIx`4fxXo@C<mZcP824AS!@q{(FYx&_!h?mogdrjpn3PlL%l=qKT7yHa=t6+CMR!~}
z9o8>{oLlLoVuXv}h82P`0<C(@2PNO8rWaDLQuXe<pPqK|2f$)JSTifB3zy-I99w^!
z6R^gnK#TxTgcCE(CZzIjh}%2)816sHN6>v}YYx(Mx!WsoHY@d3*F@HH^_EmjbyL*{
z8lNziqkb<6%N0LArk0yxC~D);qvw#*A$Ye5f;4KA|EIbukEXKiyULTE(j-bxQpr>)
znpH%ZB6E@{LP^M&c{)upoXS+B!eclx&x%ZC3?U~o5h8P@a&S1`KFPDb?_1wm-#_nq
z*LwYBSr+G<`@XMhUwiN0-h-`2eKE;c@flALK3KeAAG&1(nL$8bA!;u#p%?^{MJPGE
zne#k5S~<L+rY6J9)fGMnw6}3IJjA3Kru`forUlrA-k=#2LQ&-p>`_D(7!ddbS>{n#
z$g_M3nzc`xI-I1vjGejcwxC+Z4<cR+d+hXH^?0l{QesAymu)czj_FC=>@STF+t)rM
z^hF>;WqzzHYS}UexX3<6NWOf0#Yfq;=RRGbjt+l7-E`g@o54nDbMqCKBYqPbU*<@2
zYx-3YU>h&VQV0i|?xW|WLAI4BjhrkrWtzgZ9c;2Z;5^lgqB5^yU;(Ku_%Qaj!VD)P
zQ)VN)cCDg-fEg6^x?{(V)d2hE%`hX6DI0|+=%Vsz)_?(~;3{ASR(xuYZzs|abFI3%
zp~lPZIII{740Fu1-Vv>4z$_*W@jp<D(kl;u6R(lNCGqvB*~OXJS$xD21wAm6peFr1
zfr91pzNe?i@yBfD5WjH``uy$M_hG=eCVSy$+rATKn|<@aBcjF~uY=BV&|R^HrRU^U
znsnrqW||ycm^G`0Pl8-~_Q!sB$F9QS(Yxlicl`9Vps<^=>H;@n_r}{-l1^L*jviOP
z2O|Qxz8(c|AAz+%dcaF6c&Hb=W_`-W;C*_TV;BjKobN6LeMo@wZF+p1#S^U0C{n~O
zU24amd<`y0zDq4`Xmz*}P~D4NOU!x7tA7&N8NBif`&5g%`V{GYh&GrV=}L1ZDzZxh
ziR1K>HR)Zb$Zc?jtPep^o0yt_<&%4mVb-K%X2!wd0rw9|HY9cpbYz-D5v$_RbAVui
z>P{L>BYU%Q*7dpooKtWHQJD4i7Eb^hfQ(KjXJ?-++P`-VKX0Rwt(Cjn7LFXAr3Lp<
zn6MdvD55i9_g3{36&D+$pV#8^Y-Zvzx2__m9P80`t+Ze@{dd*XiqW-^ES#KfD5=aD
z{qn`{=~KtP4<<RjqD|SL@FooO_5Xe$Mqr%0(SoSMUL8$sIxwpZFI2gK`@RCf5Ezny
z)e0*Y+^DVi8NH4ekRsj@E{<+g{%v$aJSyLO$%TPQ3?eTv1R;7de|((KS=np!xB7Xd
zU?oseVW5%YbVbU=7byAmBPT%@$u*wI3QIqCV_5v41;TBbhlYmu69}f|@9mJwK)FY0
zZa$tPC^T-MKURC_BY-AZnB^`YM`u-)e1XT5$wC%=+s2uw9=SQzH<Pp*LPH6Mg@qmL
z!$#a^Od}*bzE;tx;+5<VgZAsli3^a87ZJnhk!WLvd6EWm<&UeSfXbv(Zdg>mJ>&?}
zeM6-MFt6WnYNLyPo6kH>k*nDS_cbxI?e-gP#dKoTLo%t#D?jDC`AjNI<TjF58zc8O
zA?YqND-+hR0KHv4mz`4|J53u`haA>Wlbi%`IB^{)nDtCNz*`!;sJ5^wq9LRSIvT{}
z#mQ&IAA{;2(w~6~3=~?wX3cJ$SDBQaXE^b~*C8*y<Db{fNt#@99m~_>l+A48Llc`4
z0xo{#jR-7AK46Ddz^*O>Rz8Knx(p5EBjU=4y0t!lv+TsypA!>_sDk|a3>`atM8oCP
zCZ&)=Sx9{V%nv_lM^Dnkd+2>58$zEJj{FvKI23+#ajP%4s8mp?wE5{A`VmwE5!z?(
z6~aD38&;c{n?v4OBJOLrxAxTfP@3z~MzXD0k=s!p^RNe{v!bFFUb6*mE?_Hhyf-%1
z$i~SH3>aOoh!v)rE(bEYXJ9zv9TlADhfpw~f=5zLR(6Z1qYB1HvC!C|4mtb*#rOFk
zw}sY$$tA$2>0E$dIV?IaY-3Wr!U_%K`qy!`Vx7?^ms9{Z0xu&yg5#j!(>%U1JRxva
zA=Kgzmd$Y2cQsue;?1{enJ~iDJ$m3kHXigZ?-+r&zRtpgNIy~sRC{@OiPJ8nBS%-&
zb?#WC+RH~cxVPjPB|P5kor~;<<A)ASWcVVoyPO4wdhu%?V&Mbj6=}<L*pWt{QtB`h
z(3q%&(kreU!R`qx(LTd%4L=mH^HXkafEf%%_zfYH67N816~XOvgH}bE>w+jm+Affx
z&qSRnGfmV;;c{t)6;0YRnaRxm0KPbq$qMgG=5_9`^xsi01Q_{?K_@vod;CoH58)5`
z4P<g9NM~4gsS9tT;aU31`&=FUxe#fZMV)MXC?Z%V5w~|f6hYDzNc~-)^f+KQWI6qE
zTXl1@W^|j0Q?EX*C;sRr)%2++SmsL@`Exyh&e7Nl9~(3UUaIf^3R6>duDKP&-id7D
zfNci}+E<IK=c5RB`T!m(O0Np>D2T9Bp$UQT^FsR6i9P;8{EFd$&bUR5hwyI#$$cYj
ze-1o%{pnv4g%i&|L9jo9!<J=I)6bl^zmQo}=E@>NaOUsYt?p_0oI*86gx>s@ck{Jj
zm>OO{K=0DBbIXwIv})aeIBR&I`d22)hj+F0SN*nf?$nJYFszLgSwhJ>b^lv9?XCa7
zOpE{DUi+_r{^on~?S`8x%J^~z5A1wP1H}+oho@X5w<vy=$X@&UM$6K%o55WLW&(s{
z8P&YVsqg_hQ&doZ9ZxYGO+Q7Tyq7N0Ti@NGj87M=Y#A8V`N>J0xo{o$B&{}NGW-{B
z2z3c_U~#Vf{mp>iiWVzZip!r=oxQwipQg&$vl>UFg6NkX=1jR|(mu`Tzx9A(T@d!_
zl@eBb35hV6;m)gr-%HQToSL3yHJJ+*#2_RT%TAm&(e)wpk2gueyzv&c<RPT=8H(6d
zHq?qEb-x%zSpMWTZ&te4#^uJ!!C^M;h}a7y?cutpm%EX+{nEw&MpEf;><3H7`!Pn<
zm%$st{%@j@hx!L#DC;)rz80)BSAOHV(|j?qbba2)X)a!kw)fCPF$4x^f>xu$Ab^75
z>dePMHqw1jUq+1WCbp@a5Tqi>i+XPdOvXqkIB7TN;{$@t)6*DQd2hrki_g}xA5P@x
z#wci6$775q@N*3!O;JS*HZ|AkT@t2`;PZ;qgc@0=^#HD4e<J(m=#(^@-a!z1DJR==
z9SGzf>9DSqewv+G;pJ8lK;q%)>Tf<d0F?-Nq0jgSXsZ=}FU149L%H*AF%Skmxi&<X
zzJ1H!6mOIMrhTRjnQe4BFtZs^7eM#*#XV&RPTjSu1FeErN-NckmBLXpr^Qo>eV`#i
zvJFHpvTl(2KZ*QUXk=bu-9-`}t5+~FA)XFnLPVGdc{w{5$wKT&X!LeYGc0wVGry>y
zFpRqkd~{-BA~Y2QnY1@e+gGk+b-+HL$~ibN5Z8+H(Zr#~L)NIR`4(Rs_bFzFnC%$i
zJYciYEHt=M%=81}13Xku(;s8-N!pLLt6%+SxOAtyFCm|}1uya#sE?Xw4GQY3R=?rc
zzFpAm#obGZDqJG!^B@z#*IKDXAc%V65(X2{H4cgcZ}=O~p}+EHK<cx;7B();sVvJD
zmVr%t0Fy)76;EQ-0OWqV(f0B7oD2}un>Zn9ZP~hcwtI$%86+<T?O|zA<TVXNPeX%z
z9usseSTIz~m6Ey$E&W}57_`N54T@)Z<u?<4a+Ujr?>sgz6nfm<weoRABv;tv)Buu9
zk0SEw$vqn1f`G!aBc&}Z6`wu@E-iTPzmf?ojB6j#v>PR(-`a4uI9GdnuOe$8QssZr
ze6%&)y}f&cQAqe(m7OVoaKtY7!mJ~YbUj>b1X=EfVR`pIe!0*dr6$n;^dK(xtHlf#
zc`yfjt^z_K7m+I}w8YqgU7r;ua_{h&nv`F^his~$!QNni4HkPJ59yr;^S9nIOjCu4
zx$Tv(Uqw?~lzQ7PTK|4<{rr!R$q@eamb?Fn5F=XaS=X*l<ljDr(}UzAjL!}%`S-`N
z{=*fbh<WvVfY@E!+$2j9EC)tLoEs+;mh)7UlmLEQw3+Lz8oN@yE{2=~c#iyJJYlhW
z0n>%FGfQAy*VXmKa`o<xJ<9u>F;(f$Jr@;OFyF?!`22n`BiS+8rWvjS*@qg5pWUTq
zgN^1p-2x%duH!hSbZ$MCBH^Rev!o0_nn1sSzqW4et$t4X5E5vZ>)f#aNmzHVFVos*
zXxUX#k5h?A_j&@7;{xg2Llo}14oINhbNi{;+#Fq48vYV>jQ;Hn+sR1UgZ%OO;ZMe6
z0lf4%A+*ppBYFsKc=^i+{BSY+W6!DjB%RKpqCt6M<ZkWdI?Qs=I!dOx*B-NC@Hp_j
zj*5)LEwby?*jVZXL9`(^;+WFi)1&?bJ#*Cg=~tjD3!FEB2^kU6)l4&NkPohznd`)<
z_*L2rc#kEZ;isBOCd(-+7g~H~@?1B9;tf{sE;K*_o5;(`roI;HNa_5DBo%<&JhwKT
z7b6|{DM?94I(6H{-3i;q3@*Ufn99LB*Ntlzs&XAHVWGb{-mNuo<xYF*S>FY$1Jyy*
z$p7WXYSeo@e&zeHQ{|}!R}j^DK0;!XcwrmnC0K9AcyUUbBJJre6b9m4V?xt=GI_Rf
ze@a~xzjth!ZODYf@_9_XsTa5!i5Kb^`ZXqrT&=psH496UJ=}(c3$3ZAZ%gRuZSTG-
ztMZhh+!-M$tkJ|8`8ioP_~y4uoq0~?H(rq3=gYbaUGND?N`w`-&ktranO?s>HQYjI
zd$kr<8ochRwQgKK`?cvgf3Y^brWz@4h_uI^>%Y$pXCY*XP29zc1r8^uf!{mVLpdW&
zS%Pfo{l0(ke!BJDKjyEGs;d6{O51R89=*3RH)qZ#(8L4<8*#(R2kQx3+y`5-msbcJ
zM32R!8+PSAKW<$@lK*x}G}-4VrRUU<EGZSo`PohQ7mSjUsw_FFvByP}{}Ol4#_+)c
z^;I~hA~Fnv*o8u2{I9QzTA2=4l5y=i|2>G1XY)5Qt~TYn53@b;f{IHrdMg4gJ4C-h
zt};<82Q#gya~84w%G;%mWM+vcJAKZ%nPODcNA%2d_@12ObZk{6YufjrCLtV3xbNt*
zs(r#cCmL!t6FUjvIoIpHg96!d;0sZ$r}VWn^~O#RxkJO<HaW3TQQU^TmvSb3XkJ^x
zU4LqGa+;6J%fKlIzJ+&d_ui#FUq)_7{!fgc^pCnnxXx6fF^Tx-5$dKa@Px+1XjMH)
z*j)pJ0SCBk`6I<hH}t?d#oYrp=)Fx#L!+sqfO2=`G{CRXl|bF?Nsi+I#<g$WTi%1P
zMruY<_CiKf#q#B@XiZH_h;o_i%Suh9J$ttIKD}VUW3{@}Nt0_qiY1-hdU1r!EP6P}
z_e}H>v7^j~IqdCD$j-eC#-B`N=h8@_X0&I>-jkFJC*FS_1($tE3VV0LlZhg1O2kfn
zoF2gEnU8m(c6`GLUyJ(K84}SLW4ux_?y?FB)L}*3Z)(}8ZjO$cu*Jv4g&cqU8!%jb
ze5Cpo9>TgNVT$<A(W9A_hZw$4tl8~G4T&vzSG;eosw{D0_V|;nNl`VJyLk2Tto2%Z
zSO3K{dvIes@5vQw*;w|R3-NkgQnI>~L-57xJpH&TTj3~OO<xh4r`iXrn#88&4wkuu
zO}lm6EUS4*b8=LY&2M`h430k*_fP*v1B29pf>D_Sh(OTl#N4e7&l3Gs2<&~dnT_qy
z_EP|ApB*|5kaBVcl3!9j<(7I3;L~R|Kr56(`2(jnBXN0oR8SW$Np`EWX0QyVHHQiq
z=x7H7SkN9;RJ@+%(8{0vl%yk!<V?$o0Qw`s+7ofyacu6+9Rm*!?qYt{aeu!jpUC8*
zGeCG8TiuoGzp-%3)P~da4AUm>uMJPq%1F<nCO|iQ5=?OFt*kXjjqFA)mZWlM{F*}g
zfShAccX#k*7q@HO2H7{-vm;^Ea2N_gc;wdbU(34awh`@Rq0ie8o+u681p_w&WZqN!
z-_nMf2w+}<k@p0s+1SvqZi`=d=zM=ZE96n<qI=&Y_4WzOMUPOtSvOrN7t0{fgn<Ip
zVjgc3vHv<XP+6FxqgqFVe$<@aOB@{JxVw^lxa~E6eI=!1>-_8~lxp3E2xLE4?^O0c
z*f34UIs-l~wvm{aviNv`p0ZPIZ*&o}*AWORXnlDge{hNL`1=nZR^P?Q!vmK5vD;Gp
zkgP+zN1o8dQ5YgyTL;_Qx5IPAmpt4yJx-;b>8czHkxI1lcX36dSydN5b?D0Lps$t#
zorJe9PB3R=WXQ{lD}3NQZl%(c?8~$LzQYB_*BH~{hyQGT_9!7s<rjzOCE;nWC+tqW
zDJ?BjU*CAu=-Nn21`I*9l2sfhCgQwViIyFS>(x*4^nndTaYEy5#?Je@UOd&j_{yRw
z*_=Z-nYkQOeoyE7M7|5@ZFnSq?iw508Z%SVH?A`;p9qMrtDtn`@>(2nrNjmVXe1=0
zc&Z6pbY)ZW$SE!TR4f3oG#4&e53P!diY`782McEIK)!som_%J2`=7&cEg79PRaJ#n
zU6<4waN;JcQHxP@A*EW?TXK1IBns@;-5lWXfTrZ^EF*e^-xe)Pc#$J5oV-xA(5^5d
zd+yx1^XJcFM5pZ?4nclNZ8Y=12t$pF3mbmbsw{;5Wa`&6+e{~Llag}G{xXq~=@U20
zj@V>B+`K2V=V$x=3#BUIZDFgqyLd~dpVw3lIyW)P%gLErSorwfJH}bKj|)@rmo{v)
zT{Ft{EA{;?qxFtuTNn8M_+>qI+}TR+52Sxt6)ygWVb|g>GHh72?AH~zCHv=Mq^^|2
zVzm6ujmsB}nEo3U9Zg>M7NdAi^ZZ-?1Ocy_M$-?jUx9C!=x0+#1_v(7;*hl>3-os+
NC#@uvETMnrzW|0m_l5uf

literal 123059
zcmZU)byyo~v^`7>C|W^^wWTfYUYtUK;u2hoyITu{&;k{_SO^w^1PJa9g;FT)Zp8^M
z!Gitf+;iG{pYO{*<RO#EJMZkh*4lfo`KqoePfS2ffP;fWtnlWwCJqi>AP&y$m-sh<
z|Jao3km2Cm!%=wsO6y(9*6bZ4n$E{~dkXlf`*rpIyiAOX8}sYyr$@I(XJ;d*y>ha5
zBI|d~T_}d49a}%$CfMFRKX6Z;oP<rP{FXTB=FTti^ftc<3s-m%YxFDJfse<vT{}LY
z##TjjW1p6()@MISlXUIH6Hb#@Dxa4&*dM~3l=`~6?+=zwFqpT%g8qHIy=`bH`o3rN
zNsI&`SYcb0u~Zp5I8<D&%=ph4hDf1P$kXT-LaY{Ybk0)pyh{>lWmy+5|GA+5d0q6y
z-N3+OCGve(V;{&p4@%(9dfk~0)1ae&jr-@AH@M3Xb8JsVdpcLR94?31n_uZS{(L4C
zCY_~>B_Nlx{yH?xf0sq+)@E0_@K=ElhHt{XNzXoaYgJZ~jOYG3=~HlwU1}p>AW^VS
z?sC-i%eKmkV4b)4_Ce9)t)aVoSD54Xn1MfM#d)jg-urQ00BqgGE|AvQ=Nl=Ii&Q>X
z7_#qb<BYg*m=424W>v9B{Fs=KTM}ixL1)Iw|L42kxgH7yUPTPsXmf2O;~sq>GN>PE
zqpH~7#pAX8b4;M+YmPuc_P6mm%(KOc_*Qc88cfnxw;D65io9vduNut8<`sAU9E`*G
zkVc9oIzo{|C|i)(OdJ=)>wNLm9TA@V-dPHl<IEZylW7cE8{+L0@S^;?u~G-=MCq{-
z;K*_ckD<?Bex(a^#c1Oevhthv-uruIU}qJe5*>F_AG$W!(Fct&E2U9Y+z<Kt`CdLt
zg`#EqYKf+cGE;3!+cS%lH?Wv7l2id$aFVoq%CChK+sr8yTOUr)*swjQ!ADgQp)9Ow
z=M+lTWjS?=_qXe8kd5+UbYdJE-rtid$Ui=@ipl9OtBHES7~AmUHk3gDDNQ3pYA~5`
zpV0Kzi{|UEr4)GQ<WK1TerG^MJWzECqn{wQC~Z0LjN@vG$bhj{-M#$p5qoU894%&8
z%w+Tr2t8~$n<l(~MF}PFEZi{c$GR6^fZgAdNtKzoxR~baY!i^PlCf&N^jKvlAtBLP
zUt2r5x~!LvdTi3@d(;CPzPh^V83_*PhUNqiT6M-~kM7p{xI7W}_1rcvKgw6JMsE~c
z<hXV7E5X~79hq|7W0bN#r)3BTcRDE+bt>pr7}x}*MDh*_GLXA}RgXn&Q0KNu)9seL
zaZ8&y6B8GI^k?Z8NK1EEPmeMqv|~9Vj!stILqo%;qLWc<wIALrAC<N}<@M5QBkR19
zE$Xp^|M^ZKyqIg--PN-viNOKU8qytKte2xYOD9@YY*@Y88Ozi|mOH;Q>sRG6zi_&5
z0p&8SgIr%F3l)RoFGWN|th*B$Z3i>rS+$Eyn_G^zr>{<$E0G(zafOAcyn%99_R~~e
z+lRLY3<}?HE-R~pUIbc;+;jx?+8j3mhx)%Y{}y5t5{hLb^Jiv_{khuTbqyk*qoSg_
z|1(@L;No>?;B~cg@3E8N<%R#zh^MQo<2=IR<Z&Z2Nt%ckFW;-?ZQUZHTDxIfde5<t
z*7d&BdSDqo=f~UaC;4H#fvVfjD(iIo#hg#Sxc!jh2D#Sz{@k9@o=OySiL~bWAs0>~
zl0qdtO5N;s6naD6-QP!>RV!B$k<ph>Y_fotCmKX@iIu7FpPCWIeA!-K+egedww>3x
zXR8h~PVL*~LWN?}y_edZp<Ep-nhq$%Y{i@?S~CT!jc_W@pPVM{_3PdW;&?hV-=^#~
zNYY`EILQi}aWSu+2mZmMQ{&EFa?I}_o9)iB6n92`tAT}Y?1+Pv?q=IT^Zp#Q)t<C$
zNnag#9?agi%=L*^LAVm&q-d5-&#l&wuqToM{7zG3mxJXZp@@!%Wc8A_h?by-6U6~!
zQf#k78Rl_ZrW$H7V$O+X=n`fE|53hqyTdi^=NFDn>wCbv4Mz^=M=T6z3Ik-4=T29F
z(bN>>)ag&?+0>F;c$^-eb@cP4d^mf=6TVLn>x;t?G#^qKj?|Xj2<>a_04-W2_@4F`
z*Zm2--_<|+!DI0fd=kPL*ZZ-VET2>d#MXJOx`5bl+s`<gu5#vCmkLF7L{N<)EOHwC
zPJA}UR@x&rap^cQqBea65i~-N+-Wm&eJ4ujjq5yB^qMt)2@t->>6ca^FpKA@=v2R5
z;2(ZE`E8K+QvkMTEInzWibb8|@?tjq{TNyO=YTT_=ZQDQPVG^}EHpy?!EH%AmyvJ2
z-KePBx9CuQB+A)jz?<pKRNw_GeIjVgsFKviGWZEqVo+(n)(@v7uuJ|!1XAWPooBB4
z@e-osT_#?=xyM}I!$E@U*<}x!+3`$OoLx2JxJ&~SKjbK<y|u*_NaGDHjNl6}Trwl(
zc`W3pk|gp6K6ut3E)~gy0tLCj6p3O%);v5I{D+*>bV4IK&y{{Xcp{lhCusB{C?Vh!
zzmqT#-_ENm<*Fcpcm2!nw}s|E=5~N60d<MFExtBO27Vc3^eZ(40IUD@I=YRvi_#kM
z00yH1DZw}C5@Qi^EM^S0Q|V9?Q4%R4uj~T_he5-;!HZ0J629jH|1K{&gpjfy#<%&q
z<yH^A=Su-;6&?_XFr7HLjs_3@s$VUfXzF&DUz?L_u+9Shb3YC1fgyLxQrQZaXW6_N
zw!DsyNv&)?HJaVD#uedvw1Ei=6Ab>^->S6^-~@<XoX?7=_fIUugc_eU<cSKh^V>dE
zdO-Fm7rDalA!XY>K5fcy$tqQR*kL<S(_?yhizA<sYC^|@F+;hXvfa6R+1>if{t}Y}
z82h5d13s$pJWUO*9;C?%s_ck*!tidVT*N*&DQ2SB^OLcB+B%trzPZ&voina&3~q!P
z++vDK@YxNj3Nv)M0>%8B3I@gpNc)wpQIytKL!?bGZzcicXDy+F13sEh9Q3v1RS207
zXotORpq0;B>ejz2m(nC?Sha&QR<hsNe=B`Ab}vS*sH!rBaOGYVi!Tydv9P_rIyy%v
z@z}+^q96ewr?8#Ls};o(*GZ%ld$86&-vs_#TW-Vi5XR?6A@HWR?DX78639^NXCq_+
zk6fB@H6H00%VXKq=i;JZ{!?Ysqij8%xh*1HxGM1y9sK!3=^<?Qq9&5JsUAzw=$Oh2
zvMK3QPl<XQye_Oe;;gCtx;@gwfl%Js35p?%y_jKfK&GE9{tVj)iF*ZF^nazmtkL_)
z`p-Q;Mw{6x2{S=?_=GcUYExjHFIV`Qd!ds0HQ}gPJH9vuk|TYe4F>FHqGF%7|ICH?
z8kJdcjO|oF?NT@_KHG>M(yMozFghH^@k=>JKFZ|Uu)4j!9}2@4kR?7|AM}{u2JdQ|
z?1%&Si{4}#D(1eWIf0x}h<}ZiSJ4O>+1guRJa>HbKx$J3ekbm`4vT3^@Nhz&fVHM}
zS4Vhn#VcWu^*~&_QfRkTPaxH>v_WbKx_@!f@t_O9Ni%9qA(-_5CP+nc?qR%EY&vX=
z%akR|B@qTAXVv;5xHI3}ACt|hjl!UZZCZoxa+x++epTRvo@|Ul&W}~Dt^%m*dwP2b
zDcIN7*Wc)Nc67)yd%C-K#V`<F9{ZmkbMQrngxmoyQBqNz0lfAf8b?2PnZRY=&Y~IL
zy{p&sh04acy$8)8-VLk$m=-^+W#an#drnw_xPc}14n!NJQ^@M51$tm&((q10fFnwg
ze{~xc>hUUIhmWBzPGZg8Q0Wc)jE;8U5Har8zqUR0odx0@aZ56_nZt4KM$GcP&bhfJ
z<N9MOCFonmO7Qg9rqHf3jCXQ=9*$nG2A`9J5Pa>?p?JXb6;b|4C0S6+7h}1hm3m37
zXn<4b&|0fkI$fDxchh!?!JtUeYOGx71F=r7R<`s-ZPm1ZVr=mcUsy!pQf~o^PSJ1%
zRqXdbbblA^=x=nt8|gUf$O+|bfVB7;QCg@M0l%}A7LV9;t?MG5h#qGoCv!jD{yvdg
zqpyqGtC!I}(CVUn#I+wxWN>a{a#a6xt{A~A+vv0V7{oXTyy{T;1_mUwFQZv|l7*re
z%8Y8=D{TiqYR;yL`V4g+V+f07@UY`@=6C~>Wh>0;>2IV0S6#k87Wch4nTH4p3buA{
zPgkF8P4c~bSz|Yh+#D~S2c%KHPGRB)Udvxn(An<p?$Ocs|FAjhHiHkxX~|ok-<3?N
zD`8#u9g_P#lS{#(n=IAwQPM%UV4vpw(MxKj+bFaTwa4xVC1asUqlgl1Ux@oVN#AT=
zs#pooQ!+Y^rDbUmPw>crFWyoSQ;!=d#jci<N8Q6m#Fh4=5`aP~LiZcjc^lU`3OiNU
zj$wc}lU|s+#M>Cjlc6D767yTF_359REVp)dyTxW7os`{vvOS%jKflxw^;H#O-39x0
zx4w1csX%^?sf+@CI<W%$Xui{R>Y`SX3BRMTbDrMyOA9DwvtkH#oHpelrAyRXe7jHx
zfi&`)x)9#*fSox-!smOrP6|Xnt;YJ?4g2w^;k5nDk`6?WI|zy6yU_!43w?>Wag_%E
zTu#(ua`C;z>~4@vkGjstmdnKi&r(OY*<C8TXO;u(_j9BPedx%lw5j+n&B=`y_4P7k
zCf*|7T3HGB9dBjbO$V~%4H&pvs`%-jiD~47cY*hM&)D=zzI^Vu6*2$oXk*l{-g_G$
zNhamQdlVF7r55r8ZD@zOCh$4$zi1OE83X{n{%233(~VRY^?6-Fp(dxw)AI9`jCyNf
zDAyGq-NHy36`Ppt`nWf)+C+@%xM=`k$k)=-PoXCk5`h#*>3mlW4P~=-<}fG^T)udo
zwl1#j-Q#IxJ6qiv)8B;(4teVOYE)7nD?31-{SHuB%fRn7tiUHCDygcnn?%L422!XK
zJs~F_O@9?sy3~FL@6P23d^On9K7o3i{5Bw57Y?lU&(cxowJGL?x_A2-S7B<snoCH6
z^d&>98BcWiRT5+K2Sgg~QBJ?-+th^KnIik%LY+wAIX@0XeM6ZIEDZ|#<Dtl<zAV--
zbIJ8NO`-_6U6$@JGhZi<)>OBBHb8xR;^9J7ur!wag8uF$qc;3DM_pUFdMpXgI%5fp
z&*lmUBH+)u6c)UHv^gHnrprneN<_u0ezQ9+OiMk)dA4rQJBi;;r`Y5Yd$b8)n&Vsp
z%!DA~rLeHmbk#OMfj+x)g+{f!qd6j4b4V4MDddIkV213C8#jK2l9yLko7Q=<Y!ed@
z)V)8nUTTlXGw4p>Af<gNMI&H8l8$|UxSA>f7K!)VnbEgx*2>caZfZv9?0HeJ+MixP
zGX&C?BAk$r;48;TJJj(05J*Q*4zLoVlD8l1Im>Yg(gD$#tD#r#?c_Vx47t8IJG86d
zFsOLMXB~d*&fsZ<OG10PKA8FY_isurlW?tbdnT`q5g?m0q+MKggYZa)sO)GRoSg#}
z+wM|d*SIbHSGh<XSm@HjEzVjO7Mggi6RM0tJXhi%t$lb;-AzyMBz8{xXLfx}n>W2K
ztCYVlqfhM_4Hb2Ru+(i+o+{&fUz3+~3Cq(2kkTH5MxK^0BnwrjT0Xx&!vkYW#dRHg
zQ#Sd}w#}@*^sv}Sf+}tEVkrs9SufTXWCo4<`ueo<bwu5le{CC9Qwunoo0%b+d@irY
zIE=Wji&g3D>UC15raptpM_vw3x*%?|k14{!S*wOZlE^871is#$T^$-hdzib{Cqx@k
zYSt8RnMU@eAF*R-uX*Wk=l#^@F>7`nFJ_L_-+JOYy%4HaVqbW`6eP%kttB5?+ZfF!
zbmP0^9_C`d^hgP*L})8{zcI76P5=ZDfTM+m)tpKR>~Sn7=;6<0BYS&$c%+Z<y@0}P
zePu<Kiu3a0=4k$SvXBc<0g8HUcpfY(h@@PRm;0UU07cNSOCvyjbfVr_x*507_omVx
zVdo*&<X0aphLI|l=O@>|F+c`~lCenl$0_DtyWt&?Q&VsJ{w;+^kmuIqf5x2eG+TF6
z@3T9ER1x(*b+r!`85M9B$pTnv#Qo~x%#K?^LISv@Y0r-*t12qG;@P6Saa3|T<MLg5
zQiNm6TtchtEP%kI9$n93)~hZrpRV;_BK8_9(D$_0a&~a=!>kX^HTn%dWeIW~%Icgf
zw?T)GL>X5(>d)4BiHnJ?Gymb`3x617PZ7Cl$GdW5RI#XBKPI_c%+@5iu3p5=fSMcM
znRPsj@=FfToyOG7AkR-6gv_t!QZ=-CAILYHxi8)s*g%wXlN&IIJYyAEw81T0JX|Ke
zj+(&0P&}QyHhl-jvxbAlWFl;21l3{AYkm6~GQ9?s6`RZbrh#b?|7%2J7y$4v68$nu
z@ZqWe-#sh!R+Vl{u*L|xK%epp!9WVN?ZxKJ^d@O*DV5>*2i&iS+g0FRX#uGTF%-TO
zR;}oM+^l}wqnGwtiEwzk#l`v{E<e5ZN_$iU<SvQ$XQuKB{os52gbthd-6DiM755Z2
z^(|%Mb@*f~dy|feo3Fak#Ltyid|7}rKHXo!W5`mjeRt1^R>U(G$mwh)C~^;qs}2y?
zEj$u+@0k)anb1Iou>vYGGOZfdg%}2<D}ZXLBc`XPK@=&%9@f|<2lP-jfH7>QO=4cv
zPSb+eY=sU@iRl8WYmn>CjPQoi(p7-WXA&<rH$*PfH-|fE@vUM-o`do8oV7Bm?x8~f
z#+W&C5Z>q^tCg<!DVtO-(+@85P1w_Sc5%Zi**mrtBe@zvE^`-q3qKNhEC4B1nXj>I
zjFA2Z<RWwevVg#q@Au^7ADOOpS?i4boUteFcdU+YQu4b$c|lWE<yNL+lIGE`UvK_|
zfYDi<Wb{wQ0G@7f!r|1>EKXA$Jt70DYuHN#4GuMw4LSY?b+ecUO1A-`|B?X0p`*Ls
zA}fFXZVz1ux^h&mO=qX<Ek0MS&-g)n?gCLvxb$Rin`w|GY*!O$lF}z|stEV{%v!Ak
z1z%i{(g{o3{irH5tRT&?7O?(hhsk%iVe9qdGwJ+2-73dPF)=ab@S(IuroGYWVniI|
zB25cjUSxRvv!1!U54T&F-z>=71MbDCxaEBmTI9#EVYY$pFF(?XW_W+ku+p8OI`Nzs
zl@PwFou^rg+Bv@$%GFD+6c-PV4dlL?l*fTnSgLz^>mj`-#WADf4O<B0I=?H#Jd##e
zTHpQ?5mm*edah#sKXjccBH*O%+7ky!HM6pkr4e$Tx%Y8tw%*5~XQR>otSl#o2~_0c
zxza_hm;vygYN;2)$|Vy^+L)vu!Zg$kc0ft-v+EytXa(h{qN#<QKp&OA3Wqd|oF{M?
z0{Sd#w#@x90&i-Czpo_-uOAS1F;-o1EaqtdhY%-ccpTZs<$!$RqSk<(%g2N9Z?2rJ
zfh_4!nngRWS<2Pn0d&KBA!q=;5D`F<gSh|HhB2iyPPn!dZtNZDMYVWG7%zxzJ1m<;
z*F;?KY%wib`!=QqU}x6H-=w|5*ke63aR*SM_fTPxUlubm8lN=$8Z0xYq8M#pyjH8(
zd`d~q0A7hW#rwUir6j!aejvTY+S<Beu*#|a2IQKKnwnJ$pMZp7jM2EspK67Py>q1p
z7Rw+ZJJbtCzV!O#Di{nK$P+(@-R<;@549YK(}62W;iOg!!&!n>W4ON*YStd0m*R=V
zyLx*$G!|E1^rweNnmnxw_<<@uDlmWs;fG{|z23Zk|30D=(c9M-nZ}}Zd37o3v^7y0
zv=5QlmrJCkC9jVQh#O17qUM7rC@9FJ09s5ruvLt(GfXTgfEN~Wh<^?Vxyuzoj8Gr{
zW!fBIT=KT%{&Tqz0Q|#->by36kGJv$-9Ow60W>ml)&j<B#m>RuGFvC0@|AZTkefc+
zQ%7*fl}53ga9K$T{$+jiGnWln@OM=C7^A<2GFA1fe6Rni+Y8MyIA1y%7F(OZ#$vNt
zfw<T;nmlpXA*JNNZUn@`;_L;}qF-<3DUj<qinS_p*wh=;PL27Nf^1MquK<AUZ+zU~
z$r<;9URUl&Ta;*JZEfxMdan50I*ld9R=HtoNnKDbsCowxgcq`n_1YZxP`x`-s9!$z
z?rdUx-8O>a)cW!waVLO|j&3RSwzyBxYL=mI6f-%3TXB5GL%tCxZTyIBVQ%Phw9Txl
z;oHUYha0W)@6_Ad9`k-X<h^)JtOC#18liMmOXf>fc&ZfKoW)(pGMsaG{U+Q>$da8!
zEj7UWXkJ78G*wA*8e?cux%FwIDFk_G@vt`Kda&vJA)`2#ah=u|Pa8nwIE=A}B6jB*
zyW@rfLcHL~f=;OX)Mv7x>R9C#=MOjU)cNdk_9U)C6+)-K;UY{I{Ly}5W^)zlxk|@d
zlVKDbB7k@fr{W_Z{OY+ip^@n(FQ4Oy9+CuaAiyt;#j%V*a?A~wgT?W6b%x(J>$W`a
zKYRZCaHV@3sgmrm)|b~O`zX1@p8(V(53n_dep%Lr9zjQAV<V8p1ziRIRXdtQs(Mq2
zkT&+qo>G_bB1xl)fjVjLarbP!#V<lSs^K&GAwxDu3!pax?Fz2LjLh}m@6I=OvsRgx
zm0Zak*=u`P_sd1;a3l=_LU5^|b$?@}n{K*V;~>3M<a6Nva2l`!y$KwmeD|`M$rR8E
zaH?zhg~@re-l)h8GB?w%@URO_S1c`QfQVBHOQr9QOyX@K<4fVMInqi(+Hc@@zVfdK
z-_4N*ePp@al>xDP*5j*Vnj|AYYCsOA{@Rr6i^Z_qDKG>m9ncfsp36%>t}gl|uhnDD
zSGu79s)&k;g3<vxd>-nMua$SOw;-dY*53p4sO+O7&ATK!)@N$@WPi|!c)l$i{=ia^
zy}JS+kPMxj^1KP4Kml2q8%@#!mxQE=y?35(QaK7~Fx1MFi?}-9m88BvY3D1(F}K8>
z2#%c26~Aq1<ua8ZB_<w}NYOm{M_&V*Zq=Oti09TLG5^yNtZ#3e0OS%I|7oPyv>9Nt
zyOgFcDN({^t--j&)apCRUO>}}{PE+f-R5fo&`*}W<GsCfsHZlN(EdP3kUo*%{;wEX
zRzW5uGRHO=)U;$9b&jlb9Sp<cJu;qf8EkPE*sqpVZs8&Q%3Zq~Wn-*Gs9)E}CKRm*
z*y?8B4%}qvEIY~61vqTrc}r|MFd)#&bzQ(C-N~l}+U=TBuZ4dAGBx;tV#Li`w>CzL
zT^^p>EPm84x2|*=57?S;J3rYTt~nwTP>R^xIne-0gWcKsZX%6Jd+kd!AHrIeQeNfJ
z(cMp-oM3AtNqSzTNMZ8kRKCO4jYqu5fXJm!)Pkv#6)#jFI#98-S85uh>H3R3LDmYu
zIOWKPAp`O@qe+lItZ~KGi@{n1<8TQ`HlTRVd2<5b5Fqp2e0+9?bNYcYM@CvY_X4=T
zWLttxQ=WhZBvS(!O#>B+aiPYLh*cMvq2V-80{LuBd>b;O5Op{m&QZgh^SpeScwj_O
zIT|J6vqLL8T5Qso5ug;$>V;X?Q2Z>g`rIKsVXX%yqjB0ALO5ONAWvUxPj4N6^G>K(
z0Q;4w51?!L8-Uv}usZ;BcL!jak7hIFNh9ooaETB0_Yq1we#eeoz1nNi;~zLjfB-~i
z45AwXE|ZE#jm3{Fs-0(j_kO>^!@~<5r~3C!N_C|xBjO*zi>uL)LKQfhlb@0O^pW&*
zb5m_S1P1waGIgszgsr)bX-rIs{&IjbN(e_Ft>pAmG<(N+dRIGpiyKfoyBqkR4v&t!
zygh%#Kd;|V>-_QK$8ZkN(W!KBRafs`?bV!|!iW60Jnp4I=@;1EkHEmx%Ue?`UK`hY
zS86f@L4RbwV4eG)YPILJWrCfNxln}Bi7?W0W?%vH7Aa*0G=kWcJ`t@^MhV`@SGGgN
z6~D8uKJ6NG9xocR8)Z*pG?(NdlS<y;Cl+w(qt(U{cW(RT_Pi}~PediD#<;1#B%{e)
zI$kke^@&7JmXC<TSR57KBS=omKaB+|B)3<4ILk274w@eYY8**S!lg@N@{v$e`{wl+
z^YAL*1Nw>%Wsv&(Za`;UO^x~xD(RJ@lamVlLDUmTE%L4HZI6{MueCn9_G{HV03Wl@
zPj)HUbd)Ou2nh-8_qw56Q@TApJ>k6iE-o&Ew^CD5fWST~&@BAW6sQ81xIEdNmnGG&
zupJ%BJ~VB3hs?P{LxX)VsH1miphgL_TZgYw`{F3O`ubG+7yi9xI4rUW^xNgcS4u5C
zE6V%U3#*ibS2@NVdHy_bhZDVL>emll7ovUw*wGcYDUnYB)+vt7(CArQSkSNXyelbb
zYAr%S5;^WN$D;nUxVc$!c-93WeO3wmKw-{2O6w7{nk*_JBH@d9t=5cNT3H#Edc!FL
zGZ`F=(TC8X4>N(e!O4uxtM~(QR9w_<)5kKnu;{t$1MW-xr+hocF+Y7SMqqrioW|xu
zduTq%OMOqy#*q)yXQi=JTI><NHOi738_hE4H6y)Cn7jR@!yZjklN89b`PqvXuf@Sg
zsWU)J0YYyAsGNb)8&KHFAwU&BG)fJAb#iuSGuR-(%BrY~Rc5{oO_ShT(Y*<m06!3K
zo0?i3$|eNzX=Gm7)wSg6RBv6H9~ejzhG6~+^#G>U(Ehq(U3c9-y?_KJl`M>Ykn1kn
zLh<(yKig8%mRfa^2x1T--Mb^wX<O9Ol2Mj;XQI?tjX=2`m=KQDdgyK&w_=%EogNd*
z5^I(-D!}h_38cref|2;|W}+A34mXPB%y<~O_mTbVf`O4f0sPt^+0ha9%3=p1GPZF$
za?@sBSe~`zp+&M#M|$!@)ntc>jehF&!qr8?d+(<T^eIE~h7GirB0jMMNf-;K!LBK}
zjFUvb*q?BX%3sfVhsK=*-9v01a^5R!YU2YX-&2|2&EqPg_n&2|d*c~{kg5&1#Fkt4
zq718xf`WoRf5!VcpakW#>ePGlW^b->`oF!vdBa$6gX1B^;v0jh!=#Y+0~;#}!Y454
zwIPsS^Thl1+NaH{?Y;Z?5&9l7({)}BKoh(KJgoy#`RMKHx;2-n+numqFt*oxt<iig
z<TRBoepkc{IzBj93Xlqip`Z=&x!PiFzn6iK$8cld7j89ueff<czKw-4PU^#?qmi7q
zB6E4Y*zrd&!TA!|d}89bGj#tDSM9nV+k$I#H}tF{o{fj53oka%d}WH5dc7E={Q@Cq
zud?3;!*k+}kbHdKnMpAO6)zM_Oz(TO0x@1hqbGr04v>EOhK5jfeO_2j|9{Ey_9bkr
zy*O*rIancR(OMDiQCVnp5!#;t5Na9tyz2gQd7g(<67FRG4l`yYoM&$T?=a&_9F@oT
ztGlMT>P@tKL3;Y2UztlU`lvb96_n%aksK)<{fdvplyx~m<JGn$)N@q$_K%kyv?JN%
zB`Vhfuc&4&!mT^=J=CqNzrgJ(-S~p7aM|7I&AL2|{Bez&ThL1#m=R%*#n*+tN1W~Y
z#WMbn`D48^h8!5%7jA|ovlyl2zKFwTDZeL@KUSQMnXK@kyZzr)4IDeS2>O;-E<xAm
zxqMO(cuM?0jU(Z<sP#EAwaRI>HC!fQxf|LHbcTW1QgcTXd}Ankvps?)(JlAe$2)|h
z#awx&=!%=R&xdX7PKAFl8m|gjbC5JrVQT1~BRPKGGP=xn<+j3AAw{TEPtd4n7SQf4
z()&9){nAw&UZr|zYydu5JLO$xjb|NtzIunLO!wqNe0vmiwhdQU6fmJmE)vLuq?st{
zN6NfO2q7}ivyo?}Ob{A^K&1b>0-QH!Ky=jj>;_0mHUmSv@?iUk-2LybWQYxJTkO4U
zGBq`w2U;&B!S+)XlV9#<D%YQWdg_dm`T|`}A5Uz{KSyLR!C*NsOwlK<9UwW(W}S3=
z&-(kLRT}P0VMcI*zm3$lpCTBwmB&0W4EVA=nwr*h=9)$Uh&3v{jwq_aoQ=~`3$D7+
zVF?|Z%%OTU<|RJc!4&~U7M?%rI|Yk_u~|TaYIEELn99GI5L+jq6V<>fN2r5_qBM^-
z*VhwE-VXqC+-%I`KmbF`^$h>pS(~L7Q)PS?z5|47=sYQ^ihFGJ#`V%v{CrNkpNg(h
zejf>qFoX&C^S6cD0VDLdSDSgdmF_FR;PF3cg@Y3~-x@(P4k*gG4698$K5OBZFBK)D
zS=Hb?VI)~U^6pzdMa+9|i}WN{2b$ZW@ieVOf=QJBnIywn!jrEYrQRk*JI3?ciVF!_
z`s0d=S;yN*6bkC&s-Qijk&;TqF25TIAf*%4eS1U(6p+k6SBuj*3MdqyUAMHd0>*BI
zG+kmlXk<WlP;&8*ckhQk+)WEo#v3a(?db2{-OxS(YELp3A{FvnYHg&<`uDcPb9Qe2
zK-DpHdAe%y>JXppr2xZX`PQ9gbF7Er+cq)V7kz(zDf*d8sz|L>w>5gmrY7L952B>&
zxjvEi=353yDT3Q+K#4WWSc~2mi_wCSn8|^Tr^P&0d!inT0~*j6%4r-%&Q?T_X%}Ro
zNxz*zpcTQIoMkFb_DM_77j0u9!h73lAjf-q+$XuEh3AH6s$lP_AqlG~BN1GpKgzfl
z7F!Wm(h}zNLK?f}z2Y7pdRKpaa{ItaM)wPnC@Jlz08fPq6I^PMqYVGMUYr0zwKOp*
zLC0TlEV1^ZsDFAq6dZ;?h4r(g<%9Rx*;ymxdS@{6vwS4&WBzqh2n1p+GO`OOeHI-g
z;D;$5C^9~0*Dph1!6!T0netJQPb39B*WV5w=ZCf7Oa%{?v$u#6qfB!Od4o7}B!d!I
zn7H~giN$@mMwV=_w0w_Yaefo~!*Jr->D10!>vrWfARO>UbjuC??0%3<pBNa!%ooiY
zwAvm;m6_jqT6)1*NHp~;`Q~45(}g10!OnCw^f9~LB`Tm&LI2~AXv}0{Z8tJanQr$%
zKbZ(&c@~R&Rac76H8GI@O^ysN@;<Dac3%HN?Df<cqa0Q_>b8-yBHTg9k-4%;=Ma?B
ze-A0WDg8fN1$!0o_m`x2DO_+;HHU2$y|?XCt9p;dHB9qlYM;q_T=MW&b_z|SY7yPG
zxo!HF`mOrO06(h0iLLdp1-GmQoS~fPy!4**j-MPd>qLKJMYEHAxUStfbO%Z+r6g(O
z|CIgf8<RnVVl4s6(V#{b0SH4}c6|D}$NWqP#+>>ly=1`NV);N+bM==bsTSu-&)2Bf
zhr;Rwj7$>mRGkcMl9lauQw*qVG6auk`wo`-Hqq#oKR<@^9lxr|yYxmypRzuq&aW5b
zyqz~ZAE>#jgx{M?v=A<&OWDC{Ca-v&WDll&b1U=?Qx*%Ppov+Y6Q;Yt{}3%#pk9GQ
zRmuGntG)MU+Kz+sDD0-~$^%;59@_*XX5%5Q(x;8`=!f4U7-9_^ms2oVajz-6YSd6$
zP*cV~>j<1rxQJ4M6K|hDZ3do^gH&--Uq`?Cufu_Z^Fp5BTUnL@ocK#1tR<@;hCbE=
z#8?&>g!w`IbSzi7fYMmzL7v^gE9z$&zR-ZQ7(&@%raz~~c_d$?zekhR|8=lQS$;GN
zM&PteFpI1GMvHM%{Qm0prf=APg*gt+Q^X?fK(jnH<xS%YD_jmfJKWT^Qk3$p(lCG5
z|6LBm{)XpJRzHgYZ;C{CHeAK<%f%m+f%DyS+4qDR+D`TUTw*En`-@E_u{q^WZbw|t
z_*^M9-~L%v;QYrl9FdTmeubILp1`537<P{t(<W*BKcC~gAUD2&arq{}<ktKv{UH(6
z|Jnz4-ypPO@CVB=IuBXCkR`1s8-T_En_V7H1T}j6m{ShJ+8Hzc=x~+e``?pE-Hdz~
zbqq8s1a7X+^MG|+OwHTuP~7~gq6%>(N!ew{HRkJkNIz!W3TrDnsANt^rcB^k{y>yz
zVqTkQifO96pRey<w8r872w1^<aV`yW`cWniM1#hB-abR32z1YTJnE*%x>&1AqIsw&
zsj04Z&Y|%g7kzWuM`=}{?eOc0jK&*6aEVPxQ%F!>ywVDsCpg1q#jsmakN@0zsMq46
zA$NdVyK>8TdW~)%){XbNBTcvd7!+@lYgoUGVe!=3`>bY@RGFSh=e|~03jQ1p68veN
zrf;b=kfTNl<@ARfTe>ITCjNWbaxvwvLn^_suTdKz2Wcsmy1dYtA!){?a^u?gY_GH)
zVG2y|o{NXJKnRGH&q2voFUxyq{%zlV@z8=q+XY*$3P!PI_xE+!(frzNKA#HR(F)ge
z!9wz}F&#UjQNt2XcTM~iPEP5sGc!hJR)y>p_aCp02~y;3r5>yn*I7D+pb0Ilt^Z~=
zPQY^@(`+?UEce|sS4Z0C?9^NLd2ji2KA8FzGc(3}xW(C{+{abXT3VuOdTY1g3kfkL
z@?p-liKNqbon-y*#8qE*gUgo*oN?%4q`yjghV+l-R8PO=6{)~A2Lw1YIgBIepj?pY
zA(ErRNe8(R_K=Op|2pz9{d}{B#-Q?~W2AK<Td#q6h7wcly}x_(AXa)UZJrmbb7b42
zNlHfS5fe4O(;aBIr$BA{>8{gC0)>`Fd+9hh;r84+xe#~4!v@iIy_H|gv7JLFb_ZTR
z6s$bD?)LJ8y<OLOyMu4m<#9?npUi<5>~~JEGU-><FJ6KdFA8N(sFGVLUgNxLp=GEk
z173dyX4&k@`1mn$EdM^}g;0K(tyMzOQLc3rR%M1MDjXmGZC#%UHe2cLiSQr&hjY4(
z*88|5qzYFVD(<OSB2LVpfyn2fD0Nm*yt}i|5De_~XW0h2>JPGV9^VGtJwjlG<PV3&
zPao)oq(;=12Mttq<i1B?U=1ea;>%0Ah!9V&{GV|fw(2&fZiKbD%+;^Jna`h}U0EK?
zaENkWa+CfsGvYj5xtDw+)$-(4oWbzk4Fwp2y&~y1OKEHF3vbI2GGp+qc*CS*{iH*_
zFyYCQ2%Ax#JCXr@)t06apMv!}eT$kbV67J;R;m<q4>mk5o7xj4c0|+8;g2iEIc<(7
z<g7%jrPzGF_68>WyqpRO3&rfeTQ;b<J?~f4pqxn_tM*>-0Q|q^*v>eO-(32)W$b%z
z6RTo16!^$R%*x%Y_Q$JwVn2i#j|pGI3WY_zds{T-jrv#{JPQBObZ)y#;(KZG#o3A1
z>Wh;GxXfebmAidEN+r_GfX(4H<eJfO650RVGpg4zgb0NA3x_cu#~#os-0NZR#yYN-
ze*N~U`$gQFVx%7&)>x^`SWwmTlaJ0YF_!jlU{XU%Jy-p+tjCnG$2SdsQ)R&YsoU!w
zslOwPj6}^Q!UoyBq3qsf>xu3HIwY#Ca<A3ZTe(tSh5R2}lgfzYd&7G-8Lv=x;;{e1
z-#oHExOc07;Ym*UI8GF0>!*<X*kk&tNj}11sEi~ej3qpEl|8n5)FDY<-|op{L(_7f
z^DW_!i0@ImFw8zR{D0{~$~=@tN~sgwcB^TgXF=)i8rgoYTKi9B8Ser^X)x5QkBFhD
zn0cY8tgSNMosAG_aLd5U+??sr-f2ilL3wRzD!65a+K-RFfCIB~y<DsQU}ux9V9PO;
zF~V2noK`qEN#j)us&zsjeaX`?St2vOJilc7Xr1#feFe^k%#<V^^#heN%R-N|ssDW>
zea@2^>4mrXto>qDu{}c{GuFO52^d5ygy(UM6)+qtKfm?yng7k;?T_X1FnxU#D$7N0
znA3;EEH%o-SvREhHz^!ere7Np;<T!a>MF`sBoL5+T%1l4<``Y;JLTQ0mDaGibT$(e
zd3Mp;`TYMNP~W>W@jtx)N`hM(S9a)fDWqtH%43P}`4qo3TPh~d#3b2E;o-I4m2cou
zIU?DG9+t~%)E;GA*P^T=WE7@Io8%Pz(CxH*UluXQ#Jjz2gooDleu@6i@xCnS=>ixl
zeD=!jy0fHM(x@w58I&znDR<Mf;qu*S*1&2t+qfP-Q*3u$2(_P2!(<~@&omP#Rm5Ar
zjKD#mS<>y9ca~>v3MaC)y{bK_x1zg?p%S!n;g5*vXdgAwBKyBPT7hGL%*2rD8|c35
zU8a`#EOz<3aw)@M+P;FLy3Ezd(763>HN)}=);M4f+??D_58#2yPJuszD!Ej*)1l?V
zW9&@L_0dF#C$YUc;p(xszG!tu<As2_;4fLZS*%|TDsR1HujBBFjo+VJz}(s?HUH3*
z=Y)H?^CC?gQt3C|9~n<573;ae)-gxI!w3#2bvaKB;rr{^#<`GtF%!H;ss`7N**^<N
zsom@?5iojZseH=Dj_E1wcOYp#_1W+Dr45S!TeaToMXBh|z_y~~d-qeC;=;nUwkhnf
zbAJ9!-ucmLrXy_4GZouAHJyWIW|H}=OS@c9&Q#}7URHK?<l#EAwkhhy>yXdjX2|*K
z)>qvQQmen{zUTK%AL$b@OQxh3p$xZ*A^b@y#EDsXp=OXEQ4foq(fH`#?(6M_ov!%x
z+gz6&+S<Z-+FAdb$t5Hke)Oczjttcp)441-$va8;%fcDXy7w~~C(7pjjSs#g)t=s}
z#>fgI#2)xy<oYM!c3Ps2TB%jaTv8Gp423NEak$*||JRy#3DUFITJh5#st<p`F<ARh
z=df`%JsacvdMfO%c^v1rkKB!lV1}1}F9QdM==1-6jDz#w&dtA%O5otUA;V9<q1^NH
zXQh8gC@{q~YbLBUO5^a0bYEc;5v|W90EScL*4=$XHg<L}CKn0&Scb2+qxfLmDGY4J
za=y!bu~1GHrQ6M$*-BbpG5e};dW#KyyNTjxK3!)+QPBims%!5oMXULuAEpU9I{#(U
z1A-g;ft_R=I{xELKWw;6lEq#2zdc;jDVmJtH1<8tCucRvdiA579pS#x=drhrPW2;I
zN#!}e$lfep<*X<xLmv1Z(e$P^CsJ{OR@v)M=t@f~trVWMEGe%ddlSpS<5wz%K2Ecx
zyBiUHn}Uu4@1@S_O+;R8iyVbQnX`>|l0;OhA2(Wknz^ZaDbM~*Vov6B)W%dJ<vIC!
zrZ!SpIKe%)xxBrZ?u?L(R?ysYjD7OI*nB|-?A<W4PQ!BO=;kbEO0h<^Q9MDm{dn&B
z_I9Q9Wy0&ER90g&@5)rg=C23A<~0o6I&iUo3TbpkWxlSxdbPozIRp0i`tvK^61yLO
zZ9X)PMWZAj)!sxhfZeb*@`GisK}C^zX_@!?I!~bCK}FAJ*;l|LY5vx|Zf-KT*6ot|
zG7c~X#Qn=NQquH+xZDws8?k93ZjNXOA+rw>I^PtK${&C^aWN$%=X|D>tJAo;;gvj7
zG-pueuhOZR9ny;IHQ+QTD^s1t)*sVJcr0wBBc5v!?})x@&|E=zta3EHTUkxm_H$qB
z%%9TEwB8oDp7vkCHbxlwkaOr5X>)qIZLeO^)sqgDYVmru*(weLyDA%@Tc{&r(L*-u
zI9qyxO_lFZGj$wqial1yR<wc(g0W$geR8t0gWXY2Br5C%-*qF2sYlDKyPMvjyV%Be
zhbAMExn&XRx!zuzgMMpiLAow8hD{rgsZHUDX;H_ys&n`U8G)|qU5SBQ1wONSo85q%
zep3o}|5~Gfz4g2e0sFzK!oux|{aCwYyvP(<G0!X%sLuI_n%|(=PSp5Ggf$@<yXV%(
z`vnm_J-u*h(fyHHB}z_HxQIn$p?jod)t2zOG&#FoBCgaLuTKkviqGmnWMyS}CKd?K
z`hau#)G+Lf_jY$5rb&f0!(zb0zHZ>NQ}4zK;5VUUeC1$zW5GDRMGY<tv^PDqV(2Xx
zML?s{JY*)rqRfuNOxrzYY#ZH$_;n{+<qo?DrE%wBD}`9WLiLws2N)CZ6|$v%-dAc|
zWht6g*h9mrE~Z1xczvewGpYf!R`fXv-uQkzNKRYC+q*Cgeuo?-v*b8YgC2}sQ%!4p
zts7N@urFSZdSo}<v~=}@X<eqq`;uZorp9iX(>KTWWLu3+SVTC_ehg*ovl$7laNAiN
z{SfpSUFW;;8q#*K+$sMY;ZV8POun(H`^7|txK2WKc^85^s6U(|ed$8|nv1cKi{DZE
z5=%_2RQqe6MD1J=mCWOJwWndB&4uPugF7+V*dUh*?+46iJvryK>V6{OEmsd3H07#`
zBnR7gHPU757PQMJiHNwhtE}6$ELx2eY`hxRc^N#F^+7`b+k#NSb~k(eD^=e(KOmFx
zAbJYJdOhj;7(!s$=&sQCLQJf|4@y$)GMnYpWwhFJy<2xa3c1?3+*k>_PAKezu?fW+
z8XB%~sh4QR+w<k9%+<Y@S>v2#F?vYi<L!nXb_q<LJ{x@gN&TvRuX#oK{nwc6oc<)A
zoh@`zW8FJ3-x~8HUwRP@ufa@*4iHlmhe6p#gSo2rOPx#dGBPr_n9cWV#~eosEEcKS
zfVq2Pq-bU6=iz6fCxwmAJ~TJaXNRq^d_(xl>&Xi|{eInX;<Did7<{1YhIDkjM>~U7
zzrHuKX`z&P5=z1jQdLvyon{+KZK_pAMy8IEN1>Y89;Q|9+rVHafx|d!uz2lZ6yW0~
zoF+5QR){Uq+mES8<$`<wIzqFJe#y9e4m;0$g)KJPvco8~iVPxdJ{|SSl-g_Ce|~*I
zXVdv{YtlpAwE^6X1oCaLTjKI6PcN@4@tX`D$vTwHC+)^H2|}8WuY4qLSQ#ea*Nr@q
z!6PoItjw%X)pNI8Uf;Lsj(;L#{SK<?gx*dUkuJ}G8uw3Usd^Ims;ZER)@uO<=ayHm
zrgWu_I0x`p;u|kx$Q>LV9VNgQQt(iBa#kLzIh7x|M%hWO$Q3rNgZ-oXP4XHDIfLr$
z66?`}mh0opVutmyU%fq#uE{@&Gjwa6&tHM(8o-4CU&6xJR;J9%%qkofJ_=)GrOzW%
z^BNR}DK4?32IcPh=YqYQrtX=J8mC(8XZq^bJpg}vG#{V>G4-Yj6q^6+vS?QsdiR_^
zpsh<c_oewrO?)?Wfac_=+a^>e&vodO$HYXEv(`8r9)<&fXrBwY)Tkx%eh|c-Y*%`m
z>lo{*f!}0Enj6<0>0LLEmRl>c=;hu!D!Qgd4IjBZ1B_;?8JY6LPyDavfM*5Pth?g$
z`+sJgWV^+#qOij@z2r@bgC5_O=+f5Xwd9*|@<5{}48+s|?~e``z=EEQ0<BTW_GQ9g
z=<mf1)F86x|C1aBjhRQAI>Y0km_#u%Wj(#zH4rKC;zO#qk48elBx5+8umyIx&Wq-P
z@692N!2eKtpk&Han~3601!W@{N0z2)JCPneAEM0<>R-@#8PF-3b7IBYp};(7>MT-}
zH>^H$d;!ZTBAE3%7B7LE)CpX?7(PGQQ8yUO^BC`Zcslt}RkaVq6cP62OO4-}PVE6X
z%N+^d({$GnhUzeR61wyVz`z<|=v`NbyxLz9z4M;ts@nQ|OhxNzujR5;HdN4MGD(yE
zh*RvbWJWME_tW2pYid9nR5ey`dzk4lwT$ois#pFhF&b87x9l|K#jewEJK|L)bvCQ`
z`Gtytxw`uI5Dyz6r;8`DZ#Kwnm%+Z?h=!O9Ip6nNzs%^_kw!?L`KyN=5h7j(FB@rv
zeBX7CIkBidh%Do-PONpcQ&%7OWfqhXKb${WTWg%iZI`6XSYBD)oyxS^M`y@<BL^p}
zsQ<_36MwKj0Xe7ibi~H!DfWnP6asWucfj%qT!t6ho4UTW9_JMF;#vxD`X!VXjnDQ(
z-TPr*#0$Sj+G^*z`MUQ(Rp*#>=^GiS10?ZgaP{{eON09$%C7ig*M*D8NxmEdeFKdu
z*_F5%jUjoaH?ZP$E1Ryb(-|(Y*xc70>gjLk#dDAmMVf$P?lTe1`}5<7r&c(H0eAT4
zLOzr3(2020`9>JXN72@K?%$LRt@m+e)357Eofax|as&w0ZF_^9HOqx=q&{74y*~O1
z?1w*(6g$L-`RyBgeZUa%O|k~!($b(mb<1I>K=$q1@4;@F!6(o;0c`F-``~jtyWA&|
z{^{G=Z0jD=OloNjo?jE^{^640Qe(meS1zt%;$)wmWYO57+M*|=j*}h%*wg)yuNJf&
zDrqkh9_XQ@;0sKTqtJ+bj|Jda&bFodP6KMh#D@K&Ai9kG=Zwm<b2R~U#+p;V5_v$G
z?Y)bQpIHB4lBEt(wuH+Zc8Fe%^FM(CKHW0`5~m*}2Sy~V%O>!O4YK6{Kpcy)QaB5Z
zM<2>8c%{}6ulA<(VXltDp#Nmbm!|Rzm(OWFI^*&NH6`I{6@Hq_D$O*ogZz#~2F0;F
z4TV!QAt_;|DM{FB|JU$v%YU_Rde)a_Ma7=<ZxS?IKT~&$mEa12&8AvfS+V8afQ|b#
zn>wn-=Y(Xm+d-GB(s5L0BH;YE@?Ot<0+o^LlFOfAHmHB(y;n9)oq0BE-f$LzOkqOy
zj6GX=$~f1?vhMW!ywY}*(PyV&vdktY7!#?3?TPy~b0N%kUG1$M&pJvY<kVzy{q4gw
zW*DED<uS@AoB9q98Ha`@d+=0T=+wl7W;)9V;-%b|*CAiO6J8stzS7KgXV6+J>bu;q
z5*4j)I6KHugMTouVS~;v_h-9zbu$Z+s~#V1LZx4KpEhi<L?EO-NJ}f8Gw#$&!G0eb
zpF28kC2(E7S8BX<e$r!F!wy2SlW~GVDIY&Bnqsije!<Kg9aG?cMyQ_pJ3am4jIhFS
zmJ{&B{!~gR14K1<sx*%=)Oh@V;2x`{Lbu|ZD&hm}w&Jb5xSAFHfqQL~Z0Pk*xJE}u
z*Zb@&bLo9)N3VJZ^fmm9Ym4X5T^K8*iDMe_lmB1=FsyE&9&+x!fVq<ssQJ~>l-C9!
zLtK*vElXCc%iI^p>LDew=V4v_#&ihHc=25t4Gj&<(GSzqdaHg|*qk|aU}IxYiBf<6
z$FA{Wc*xWEnPv!-(*Q6{*}bR>XzNRn7|b!f27itO)OFmDTtu-NX4vBh^W=2#eUBO^
zI3PF~Z=?AWt8YN4_Ponr&dz8)v?ve6*GLHx_>_n(jSZ9KDvMkA>BoS^rU-+}OfElR
z&Jm8a2Y}Pxra#5n7jmvZkKO$F^l#j$SLp3uT@&q$*XI`(bAjk#T}yv@0dv^{eVp<3
zbO^2EV}g+P$R7Q<hJc^{#-NnK)C1ZS+faEb&lpR;6nd&>Q2Y<iPi%k&IF?qJE=0jg
zlWf1?-G0i=rx6E3R$Uswtg)R11qIS0s}r9-1#4c=J9-QbqTD%mzG&BLt&ET@9Xdm<
z0~0&ii8nco>(Xas8<@#Od>4&?l)HKJf^=&>zf|fo?vsBWEjT{j8nfHoNd=!1tIu0O
zSw|zq@viCk!_A@HP|n99HEPV&RizP;ktC#~51pdrHrLjsi?5qA`~V|>%Y2=J87Pm}
zYPQ%I@s3}u=>m9&TQ&^p3bLN}Jd$2YbF_W)rF{yYRaKQUj+3Q_T)=)*gS^i8<$Ttw
zLf|29ey6#E(>y{zers-P_P5y?>J7hLO}Rrz!KIeWISZJh#)?enw?@4ty&6@hM_+e5
zy&UO-iw-v`o%hjA>#!O&7_J>RNk~k2Rm|V9H#*&#ZF(QX>lr!@coY0Cr{XuqixOCk
zt6aaCBM=DE$8Gu&({i;qoM2;wNUAm)v?+jGEk?<Lg#28p%6`^)x5XkPi~<<CZI@kB
zd<wpu?~MlZg9gMWR|33mVP}`UCckxF?Q-OxJ6-K(v;QD_eKXeVc?WkV#z_1!qjmy5
zGXYUjto?+AglanxY!h6Mc<{(>^3hT1ckN{vb^gFR(Jj^p%dqJxQ-h1CLY1yvBqN5$
zIY*8*WxGmQr(EPe&g)}2`2FS<uM3S?l*w%_2m~)OhESWwfOWmj6T{d2Z>&5`2&Nif
zU3BntRZh755Rt7C(%xpHu5ci<(^r_hE#fKSzK*j}E3L32_I|u*eyB=2wjVAj4qnvA
zRsZIo%Sl*IK+dv=xKM(~Xau^S^c5c3sO2Zbl$4cGm`g-(5>T>W0Y{Z$oTtEOx<)L(
zI49^y*>{t*N<Q1gaf%77vz30kW<hxPkn6rUHfeR{0+SrAJYL`lw0x6nBRyN@Mp}N)
z;OGM}$Z_0a%f%gn*?K?2Tm`p_OFy4rrwt*WH2?fDr>tRN@J8_Q9%pSTmv$ZPohCk{
zDiHw@<{hTQ_;d5crN1~_!mMlbuI~}LSj5N128yBL^?fI1ZEn)^PU3Vvpz)jpc#P=S
zqdy1mZDvY${c31zq~J<aBBk~?Ndv3Wias03Q9ka5_AA%+InMc?MLw2z!=l%Sji|dC
zReedhFy@*PQ`B9w>7>adf{V_PJ4?4$!7=8ayVHd}HDq_5?um1Vt2eDT$hJQUhw;ug
z`#^6t)e;`W6|18+;+3ewGQ=RO3c|a2u^rmo)L+sfak0UG7x-{2Y_e?a%NP9X(*>E$
zs%>5NbC+J$02L3Q>L657>Wkjx<+J=1#~R<b2V(4*KEn8;F6D9q+LqgT!sqaP0Tnub
zFp9bSV5?WG(m%=<7w3?>wv?5x|C|f?>PM_QgUg&NDG^bwda3)Uy}&1;3qwqnmP-Wu
z3B=_8F?H5qQLWwIw*V<oL{L&xx|C*U5Kv<1F6r)W3`DxSTRMhL1pyg4hHe<T8M@y4
zywB0|`^U>m2WDpPd$0Vi&jMX+pUbt|R)&F1RJjoC7M*O;!V}NO2Ym`v`D`nmmwVnv
z1;_%C^N%@PrpN=TR$1Juq4dpH=l*2>J5xT4b$UE0r+mZNf#=*WkEzAOTB7DG&kswv
zQ`)gtzuxm_RB!$#>;OWvQuT%%A5gB~@e;Z3_+V>lxLCqQ@&gkiqxnd|aHCj~D8?~W
zQP$PPF=}I~#Wg^Iz+oAlvO1oBctpakvik`x6~o-H;*%s5y=+5&x^l!IX+oNk+_N~V
zu(cV-Vm6fPWNRx&O91K{aNV--<GA<zY5WX|C71DbQQxW26k-aMHYc0L{0>c)Di4o>
zVq%nI8P&}i-VN&aCe{!bzf@>;+ge)~G@vo;PyK9P*aC6UthZ+p^KX@pke82EX40)N
zJ*ZUAWMHb*Zj>uvPvhtJMupSu+Ke_Em~bJ_Nu=xEZPwW6c0l8$&lt70yM~Pw!m~GR
z4nfo6wdwW-5^rZNrNxx4y%}ZS7MtRzGdeozXk@?AgWNtkO!c_BA(J+v^XvQUAHvS2
zsO8c^OiC(UPVANSBO2Qsb(N&MCBiN9*LR|)Xf%$@p=t6qc;7{bG}P8=^AUMO^bgih
zbJ=Kx1qWwWM%3pD4R5!)g@~_hVwfAYF0X@vLnf?5v8H(nq4|u}cxdh@|8Zv^Ap=yG
zL`_3o{%iAxLDmK8FQ|`Q5o|<W#B{I8K#3z^TH5$`O+5PuW>nsOo##1@0S&ayZCJaO
zA-9C$&4zy43K=tV341U|q!mNyrVI9alT=aLceFi2W(7T6WhvqTGhv|L@47HAb5nxx
z_L$sQ=X;|6e<+8Ys1RZj62nBCjv1dm-BI>Y%GfN<;M%#UDQ!BxOyQAIf%_nCu!OJf
ziTO0G@u-aP7D5+!3l~b6XS!ocYxO4<gHbs$u|=qK2H6&6@5@sG=S#zLZF6gD0mIYp
z+7}PHV`z&@w5lNgD@&g)wWr)>vWvB2O~wd8@!YPxw=GE>IX4evv*?#I7JK0f1~k&|
zQy{oV77!QfHZvLzE&vBtUt8aoTJuezz(%*FFP?KBZp0P)9OGoy&e=JY%_pL)d9Q?Q
z3Yx-~JBx;VPC!$v)%^BdAWNOL>*D^}mR}+EN-wAsd@dl9^rMv%@HrDVeEZ6%NR>r*
z=$f@_Zmx7ncN_2>yf(IsBpud}AFn)O8FkWi{P6*NgKK-*gZ2gAC9p)Dp`^@O+26}7
z;J?Zpw~l8pXyeYVuP)|&&fVOu(izer&NGQI1cM5+)8*PydSA2P4K+4*?%W~gZ=@*J
zdgIGH=Ii7CeKa+<616M9Z``YHyD?2gd{msYa~A_OD0mVz`HbIwt)$6cT)vi9Zwp2D
z*tk#Kb>b>i%X(#D-xT$YvLNxFWNfO>OJ#JF{VV0&3lEROy1h!e$J8<jZ!CYUef#ze
zB$q_Y3es!PF{7~~&iuz@qIaM&f`|s8{kfpk{_C@bICCDeb4%%DKG7rj>=01<)oFTh
z(3Q-m*OQ&k=CaMNZ)PTJ#}{%r+=+L7k<<JY_u6Fq_nS6}(1<Q%XBeqQg{eTy@T$rF
zP|QvZ`A`e{XpzRw>Z--SM3eW?;?bsRUjHG*Z*c4INbq3?Rp4;Ca~&@Cx*RW7egFQ>
zok0SJjJBw%$z=6-9kx3BTBF7k)pM9%;H68Eb~70Fr108hsUBR>i}gBp`VB$-ow1TN
z;yPeOH<z-5B8Z057uM?|i62l*&o!CM#dO~&hP>^!X?fI!E|bQwJ1{tmM=?89VaJav
zl*Pf{qT@(bc-<#%HZ!jz2InozSkl!lW-K1H8qcNAS1p8tsopgV=Z+#b6J{+owx|}b
z3**-D2-H+ZM@OzCVk1q^Yeel0#s9ai^LVdd(yPQI>u@DmckY$G=t8UBN+YasBWU-n
z$Z}t<v=&gDv|O@Fqp@i>Fe}ggDiXz4ci;}>057?D8%|GMgQ$f|O7cPTsZW|xX0mct
zM<*g8f*1*mabB|OlFg6e;^MZ}wydhfr-5IVS?j{fH-z;9{|Ss=`_VEmSkTbW6r_8N
zV)=dQJD;j49W)Q>PYl#9P$Ee8|4MD!u1rKUR<>96!}r#LQJ+@b2^pVGxz>L8{09jM
zn)=|47^JcB`f%ROIWp*&!vw<2JAB2tPW(AAA}{yjEE*U@Sg1C`6j%L$KpcVS2t6m+
z@slH=u$@Ww5HfR@jdsoOtLa#?Vvvf}WTmA@nu%YlR@HO}WRT(wDEnJ5SPUMd{}9?1
zUt@R-QAfnRP$)?ScO4hMG@~RessxT%8;?nnTEdVYNvF8-lBSQNKy?Wu=)?_<SI4l*
zN+qU)my-RZMB1Gj?j{`Z%c~+n6t~Vt;hj^O%KFB}giq#H|5pK@uQ9Q($Rihmxw5Tg
zex6+39P+)LO-s&zH=R%|42w2cJQ-ydyM;>^P47Dz`k9hP4s8G@k|F_gV2NdQYjDo<
zSpMyc$)OL}U#AHwa(g|lz&f(}ih8DydB-bBS)GRu`e=s<Q~$+_7eH#<P1P!G^*X@!
zhcAe|-n@&gFzn^DTH%vS%abAhBO%qNGZA7dR`1uqh8XOyWjm5HoXjOuzp+LIKO6X;
zR|bCuP&uPlR@ZhjCaTB3^!gfIA~d%GJ*)V4d>p*s9ld>u#|Z1%VjJ&k-)I)uxby#7
zk&%*?x0vc*SzDr~R9oIg4?oB$)cUt20De+PLH=F7VH^+B-FIgSMpA!17Le%Vzr#wu
zeN906w-<OzQTP__L+o|7KcCC@J?JP1q5i&AIPG=%t@BNUKPtIeWZ~YH-`ukylfN(i
zwJ&jR;AGXRLC~eJOxxv#aXUI;Xf>)=0&_~t--QuUboaC1z5nz2w}&S81{`W~3+3V?
zjdBe_*`6r8W*W)HxU(jR_J3aX>(xyi9dSp_<rk=$=I0?3$%Lb#GRmzdBIXMZwO@#~
zdXl$1xJG@Z;$cqAD!Du76QjWM;`MUUg+ZxDe^%?u|N4kRkwLt76BmsW#L+_SSkcXC
z?+DD=nx?jF#3Y^INohm~Q~F!r{MM?mJd$~gQd)YEWi6v|Vz^D&v9J3)UR@(P1;L`~
z55Zadaru9~b57Mge^d07NX%}Fca06{!ZA_B5>h98>JG1ESI;Ljm9P(weNb~dg`bJ0
zR)5FmY6+vi2^aW##a}_nInu>g*P?sVg(l)rXTyHHC&o7WN1i6uCMiwoG5AXj0Dz?A
zik$QF!>H~W%X))wt6II>rn_O_uTrhfRfg6)BibQSGuB9JVB<XJ^GeEhUOzaz$q_xR
z=HB_4nX((Ed+4!0SSJ^XZ_toUcfls$UA`UN3BUVDnDVTigONKursH+9j>lWz_pPkJ
zDY2?0=$D~dc~IRtTjS3xIOTcSNhX_wDnYxkrtAq`$*jxUd>}aG%Dy+lHPvH=b!?H^
zpva%AMQ|~(@)*Gt>eJ}COH^|KMT4nc+LT%4vNNKI{-5*ncDZG9sQ-O`=hD%{gU4-N
zcd>4!AWr$7<b@C9+@+B6dXFe|n_hkv@iUL0)I+h-ze=udYrMKU=UK<27viL0k|2F-
zzpB3QP=xZRNj-@!xNoLBbnfuPWHR)`=LpneZl6RUFv#ppu&!1dJT}h5R;?|9UrA*J
zqP9jIMlT-kMEuOCex|T$sy;*K!%6Syb5O52H*wnr;7D{ON?tcWT=xr`R`V|>zGiWC
z7FWDq)i5;m@C!j!Wk?C6w1^@f-Tuiwsrh(xK%$ktYAFubmGd6sKj$CxQtwAuwXe?e
zJ^oV*$mP3nK1}bbgGSMXD_a*xY+brd8bLMn_MaQyn+i5Fw@jQ@dfp&|KDPGlckzUV
zr*ng<r!>)(gx?wZNc<?TQ<vv8iy-;;fh2q#dYlt%_eT8|hlu2(2fZ-~U2J14H>Ud~
z^Rjcrio6FNUUx}SwDqk`t}G8RPxPd~EsZZ1e}Ba3P+72ZvNZz>>Fjq&kbK0s&BVFE
zLi|**&y*8Z`Q63#0dAx_&zzI_7u|<3CIy<KaKsy_&j+l2>Kj96vK$mgX9rg}2&wzH
z#zo2ndq1j!myQWGFPC=M-~&%aWB(e4TSBGdRNU79kpyq2d`;~;O0a?K3^rK!kVG%h
zq3Y3hA>gsPw4WFhjD>eU^n@1cn_}E=DUxFzwxK<d=JSE-vCpf~$HoQ9Ux!TG6G}uD
z9N~V#FQRcFM1Akq*{rgeG<{P=o82uc->=)Q=Qm+r&m8n-NKrs*TLhh!hW#3j!g^hP
zr*y4$C5_}9$e%Of)b3oXw^CL=Q^aV#vbWh$xlyI?nLb#)IKWfjh_BY7yry7P-(W?X
zC9fx4LFT=iD70PkTfg~xC#f?(_~5@><=#BmpWb#zp;m`Xn0(jZlPDy{o3$b;B_b=n
zmZXjvyfLVLV%++*OvgVVrq1*(s~?|nTaUCMSEt_vT32tc<xm5`+Hf#AOLa;;I9Z2G
zG=X6|tzu$H>KdjLjxHU!{y{DZA~Na@ea=<njN{}ro$;Z|nf%u(4+Z}ki1=W>)T?hx
zuRQ9OaM~L}pe!Yoo@&kHAwaR_XD=ne+aYW2P1y)^PLFLAncEKr4!KS`TcvJ@D6E6k
z&z5G{sBd?cUm-onzK_#DUMSF(_r`0Cm)Vw8^{38WEOh@)f7ooSRC)2u$Ocb4cYAdT
zI=R|2zPuP{e|Y^~HUIvF=)%&2KUd|0B)+jw-lg0Qu>WQ;Qfl#K2PadhHPpq5O^lGr
zCK-syq^rkrpv69)>?nC)XfVDr4-s6?SnvA!%LU?R&=bzsG?qCNPwArF3I)Xk^SCqH
z^Nu6=ZU9g^b)C@Jl_;&?C~SQd-esgtqUv6~KfW*CR>A)L;iHEraHOfDj7n5Pk5|^U
z(!P2%Poa{nEWEkhmU@M`C{wH7uj22m9CkX?^fD6E<dvBCyvY8~%~2E1;jBf6-9Z9J
zGzc?exNvPeRx6hUu*e6!b2SOzdE)9U6_|Ccbt0y@*jo2X#M0b^7m91tjkipCG4E}U
zy%3#zgIQ4YET-7Z2(qj&$MZAITS<-kwM@bt>BI`QbHd98v4IO47ZXd*O2^WiD6c9f
z16HM_U0Stt-Jr}i$f;X%)8$E{OJ~W-E~0Y4S4Bz3++LPVDhM1bdCrt3F^=O-;s4zE
z2Y1%)%98RV2t!p<OGJ*ENUj!erF4ghxCM;#DF0Hxp0bS+!j;!s$lPSv{3#~p?|E1b
z-DHfSS#}Q3nDYYHIoj7^7wdXaCZTp(%L<FH6V2ziLUQ|Q-d+ui%3wH+rI!2Vo7>NF
zzPiJIqR&6~_y3DgXLfxai%?273%XbgE|4j+RAItW^Al4c3TkzbjY%WZ^PbZw9Jtj`
zL)n*1cJ(o4y`SN=DP5MVwH1O7R{oD)i=7knr6%B4thmfMqn#v7nPHUnR8cnG%bS1o
zA2-wY=Sb}Q2Z-vzyFn@2@An;&kNSN%jX{uf-!5+cVOJtgXm=DZMeO{4pD+^0=#rab
z(iI_B3#^$YA97PKE%o#g=#}Y7NO+~Bq}bTl{v{&Zx)sj%R!qzfaI7#e(C^**;_qMn
zHmmAhr%j6R-8H>dR6?eS>evV;XEo(dVM^iK*8rCxk@#1z_X-b8%CD>dk;*72YX1Bw
zEa>eioBdS764%slV9)=}_Ae6*jDIGYFD}kJ&rqTN{h*+H<NUzD2SMFZrQ^^E*y`m0
z5|);R$Hsxyf>R>RU?Yx>>w`0#+YeIl<Ks{u&j@_i)1vj?SB$ykGdD2s5MD)q#l})f
z(UZM=88u!!K4MV!<3#tF5S(al1tuQQwJN~N&Fy}3`svSv+O1m(4+CM1%|02XL3fyq
z6%OKkHhR-r>OIO{{mA)(k!`5UJfrGkcA)tnS1N9{lcbyfkC73Ai)IjtX%g7V_q0n(
zTstVThbR&@k2}RaTjuI>ex#gdSbCgn63~I*sA@^W`|mCbVTlbAqG=I0ycw3qPN!o>
zL<j>rf8*HphT5-hE9T-ZxqJUpZ;r4h7cFz{aC{6e7DEFAlKI_#3!LC9D==c!(yp*B
zyfSs0j)SnRU0}O33wnuW$+@7D=yG3p3?)fQNflE@H1Y!JPbDtnV76oo{VVQof3J47
zErEmlc)Rp3X+4XV3XD-^aZQ3=ih5S-8jM^wFQE2;PdRQIW+sI{<x|;mp(vMj_aY)v
zWhve5d00|nCL;O?=(zvJheDFn2CO7gO4qrknm%CslFct9#Pt?^tgw%h&*lEKRf4o}
z1iYj5=Yv7mpds<iy~kLthi5Yj3_GH6jk7L;>31JL6v_iKjvsUWOM8$1endKwPO&Lo
zZZ{8)H(Bzxisd-z2z?czb5n#F#y&Sw+0otYs&lUR@tzqOzbs;Am)(cXW5&^r(M5G?
zt30N4DZ|?3H_cL<Fb<|bGcz;)`><FNZ;1S~d*14g`EtIRh=#{Ya|T?sqSR@!9>}`h
z>wZ?tkVEj_XhmdHCv5JwFN@gnXYo|1J}TAGuj_S@81-L)_g<15cDhsV9ZoOwUaBm<
z@TkVmY~TH|)jiwN6DR%tk#6*7M_tD{;CKAOXYlH9|AVUlsSD!{&YB?8XYuo*JWe9n
zyF>52VG;jXf=d;GL^Kg*nqhim{2D)Id%*ONoJ5jBm@H1@Ftkg8#I_M7H$D#F#a#A_
zFw<29l6ib8(^&V!zYj$CQ-a0zWYcdw0fqzUq|E$kEBJ!o%}9MR2G?N`95=P7I@kS0
zr;X8Kjbexu5M(4gGhGQ@2OT7sNw5CjU(@wDp><Sz6*~A(jhcrz_B}KEyla%uKfi`<
z$mG4%+V?YtVUzz3NB-SQuY^Y(!DJULM<fMG#fi!R&r0l(^p4zBqJmjql1LxZNKbEJ
zYm1bWv}fK$&%(sSz>18Ju*2Jr&+P#88O{?{VS9VJe^aT~(M_MDGS1>@u@aZhkELW^
z<8o_BWc>a-EN{ImS~OwW^>GtmouvdQ2Sannit}=XDag$Hx;%E+ayqg)gN>*~05q^i
zh&7?eB~1Y10h#;F{%|3ejiA>VtIhQtRaMnktsL33W}%OFpipR!EkFX`+{c=&HG>_O
zB-h!?!$2pCF#{d%nPkYY!9g_LmTJ}ss;|i-4b-{zz*uf4Ie__g;a}`ZvG*o$#R*7l
zPu65vd3bo#Hv*!@pR2fM5)Qi;PL8y*t3eFw9Qo^ck(@oWP|%+mj3j}6xrZ1}SBKmc
zaqf!`>>#{mmQE7D#t#=R)oOCT{^ZADF&Y>e>VA0&hJt0%n!Uov1@#OJ+9Gq_7<6j4
zxD{G8IQL{9@61T_uE1l0sFb=@iuE})s`Xn&vb&<z`2mFC0%+!Tr|Y7qEL6^w7`3Z|
zsfyhkR!cM+jt72zuGB8o@v3ixt@iv;Z0?zSWAPo05tGEZhY+3OM&h^WXH}S!-3`15
zhu~jvELD>gXPNAa^o?*h{p!azktNv+wIGsgiAf*iB9n&4^G77`d8u${HoDpc#E@{B
zk7S5SOg?4bo3m7}h-Of%cg&BpnQNqzOaHO==;hOQv23a(nPNc#u6y&Ny-DgYBL?kU
z9Jb_+SI95D>bY4Emvu=JE6th$)fy-Q9z)DwD#W5$V`gDx)f+j0l!{w(I09v{Kd#G%
zT<lVrdk_&%Clnn}I>Z=hW-mS+70x!JKQMGh%glenN|8DrshcVg<nl@d{=N_%(DY4E
zF;+*h_|)ZnnnWmZJHAXxy%S(pFyt5q#WJnCwI3iiM@yba>hSppIR2jJzc>c7(fSA3
z??v=Fp*|cogPE2S6#yoh%J1QP-B`D<upn}FiupK}Mf-eV$sb^_kbP0Bkx5f6H#mDo
z$g%con=S?7_hZZ{h02AqxmG0D4nbZQ$I#^0!bfJsN_F;N<hMYj5CC1AS5WH#k2@|-
zPwzJXFpK{K5*3(nv4|g5liP)J?}oC)SW(6Ss8cJIX!&uj^d$+J?uBnC7kXY_PQc-T
z^kW6eyf)2^{d{S?32YbRgIOZHSbqAgzXGCR!2RvaR&4^f>Lk%mP?b7BSUh7h&bB%s
z;VNxt7%Nc!T+L?EC#|hitb&-G{n@+yLOat!wREE~lIfJe4S9eJ51&`ak*YCAoUeqC
z6g1UCX<T;r{KLqb?5-dj&8IClq@-kH#oBCE8zau!lVN0B%%CXe$nSBql~E7$SH@)Q
zrnZ1zkdmD84{pYL>*+RI<|*Kejex2h016RGn(oasI90)5u<~+DOw7T#(2|Tui!mF3
ztCP=UGK5!IjOkQZp5;hcH@Tx8LYD{I{5MC7Qy^A}X{EZo#0a9Bnr!f2ZT`4S$^|3g
z8EtFf)G|o|UdNux-xhRqbS%cMc9;C|lw?e&dwRCu94-<PorJxK?yj!?hIGEaI@M`k
z4D*Q9jZ5TIEHL(}OTNSodX0Ub^YB2`b3ejQqQX!-<E2wj(wY4WBP_p!7{444FSTk>
z#&xE=XM*U;<|01ap;C~hWh=6x<c*39*?bpRb*`dql8~C{KDqpgWuGzh@zgRZw>3F6
zl)D#8pMz&VF*AalW;DzgLw;~D;?bjMgRft|Dxf+lc}+4!^;@vot@cOPPq^1Ybqz~<
zRQTBru^*Ru+IhDh9$wk2?j{x1U*9cMDHQM+Wuz9)kIY$f+l=M5cmbyLAufHS1#w>I
z$0=Msx3v*dHP%lUmC7vZ>;WV{LnunX)!Df^dMcJ#(O9W?P`BAL<5ir!xdcrobqMj`
zM?kTwtT8Fo0k;e9{(Uft`M5>WUTA)r2X<Bhf}sW*!K(*#_DFl6vTbnM)ydHJ!$QL4
zD`osFMoY4CK_}g2x>3GfX&p3<0hz-2ywVIj`;YFJ9$cQmKp!wcT0AC+!{!=HHx;Uu
zDi^8gt(E|J-tjbZTDs<+T0pZG2_hrnWNm_to_+(=4grbE=VqblSS(#JEBDK-b3lG5
zooggS_u1RigDVSqp6-Fhc(v6OhxJIU@RfUw%^YD<Wa~Kz;7Q@);AEG@L|zSMiHl1d
z`VeNUI`;HF8L|2J3GKQ@uMND^zP2`)lw)$P-={VEeQIiI0?aVumdjCMRk3DO@Ux+x
zqC5`BdWQ>6?d?Pk3zcH`9M8H6RLaNmcR;!KjtppYTRhw0bc)o&Mj0YlbIMOpm02d=
z9X|lR)|whZVhlc+h`zhn%0k4PeBbMpX(j4%<%k4<@uOo>+zX#wd*jy4trLr}HQg6R
z@YtOAi@_`jC7pZ)Bp4kR@K_1>6R}2$yO!WAObjJhqHmQ7Ww>SMh-Mdxs-^Z2+BB;*
zp8kq_?AM3cH<?oo&Sq<0$0&R<P$X?2JiP2R;iHTgRC|&zjp*0he$3r>OoMUj+x+Fj
zCP#IM$=j9JD4ss*JmsGEJTJ*O#M&%E1A^ZjR`JO14Q0Q7jE^s3m*<X?GCgEMt#=ht
zwcAGPl^epbD=NhuFDBugjsi%@{(a*C1@N3Ae<wsSkATr;L^mC0j+VkW6fifE>kii>
znl)nJc;tL#Fe#+>m3!f6G2q)&+JK`2-JYxh*bWI{lVXjkV+uZ{Dsv9d`UBN(J)7Ca
zGupmf7IbRqWNypTZ(ngqux_I^I4po+q#J5-M`AT;wdlR%kkZ=^M0V3P<=~)tH^-3O
zG1xdbzhii7E{;f2t~dBx`jWl9F2u#fowi4<PRlYFREyH@uG31U(XrbgGI>Ih@AP6@
z#~JsfHd&1Ik@DCpd}codCKX6#(hdfI{V~<W0MqduxFoX;H@>VB;4ggMm+@FM&_wBV
zwiE+k)YtQ*-z}&Xt1A|~#oQ(Ynqa8~I<Zx2YwHC)J#TMs(2&S_ivR{y5z02^1Sybu
z8yA;pC0Wj8InD01(u01qp<TcHkD0&g|3DeUW30OH0ke0GTg&gGR(g?mfB@0CcoPdS
ziB+N(+}(P^ug_6CS96g$jz(+3<p<?Uot!0eLK7u&!m_;XU+H_?#=@En(oc;3@tZAi
zK%IBIbP?vXIYt3-Ei>>x7NIm+^f}p;ox!|a89r|_(dhSY=>4j~RI_kEWFm7rYJIyD
zU!<cImKWq$UgM4uCntbMVjz2r*2_sdEsKh@wY5yUr@DE62>NE4M4%GZrJ!}oXY<)(
z1nRhxw**UZh@zV8TWGyT=PVo7VeXVP<(VUF`k4HbSkFGkfNrL6oS(iaf*%#Bch1;u
zb(1Ej>vEZC?bf2w)VO{mep61M&Wicv$;X#5jtDyC`bsTkL8pUPIsK?ek**kqv+)|~
zgo*-)Nq_2-+=)~khZXSLD+$W(Ocyk1)>!72-dmHIXiP}^2O=nt+tW-po1=x$(u02F
z;0J_J2_%(Ni~<LgOx{Jhj{e=kCp4_(Zid8<fKeBks@vqLUT6QrytBPM#@>pED6VLt
z;t7LJFa=_LI9g!%Yfa4w5Dq1<8^I3@;stF=_7tn#5%gdL9V?NHl(doodtv?TaP{-&
zPiy+*yd5mJhU#UK;&T^yQ)JTwFdrAnCUXn-qu%7A66jVH6>VkBng`5~^p{iTi|q~z
zfrB|J+HY|E@yO`ap5Oe!d<?jFB9sR$HxC?J?6QC@Zq?!6e(H#<Iy*fz&FinXoPwM5
zqL8;0y&EPf)!DEnTxeH||IJWekxQnDO0HZN53Q;>DqQAIXp}EgI^&u`hxkl+Ni-Xj
zoNr%WFJ{1221%p3YF!hh$+PpqlSiH^QXkn;HX$_Rcrk}e_?5G>`;*l&QrmE8qc!9O
z;k&e9&W?`Ruh^eI7t)vLk}2(py}HDA*(Qhc3;J9q1I8$TLFVUnn$s$Mf6d>bu+n`;
zuR(4>qyQg*)!ypd5&R5kjvajJ+PQUfe2{6Pr}|UmjXwpCvvgAf>4d{~V%6Q~jxI-9
zweQarOCF1a)yf$4N73L}0iqIH0~jx2it>%z2ap<u&W8?+SGDrIVnKvC5!i~=h$<!K
z2zh{8QidZV0SHpIU%SDHgw^$-7r_#LiX5`O=M{uLFf}Xlg>niORcknHMP5j+W_1BY
z5~V0Q0|Ns*pX2LW`O{Blhieg3Qn5Ns9yh$U1C3|cYlWX&Z00u1I@1|SdpoC+qAnjx
z&0&FuzxKn=PmcNPY)e~Pp64jD&-MRa_jkVF@ljZ`@5dj^AH<y0@_|R*u1b2?L4-R6
zXeQ@?UevqTwr-<1o+7Pp`uWB0dopyfW<&uaK^}^o+1TPavJTf(*|Jfghk*($fQwsO
zUk_$J<jH##((#W2H=mI1{ObGMydOgK6?k(F^XXdQwyztv9rK5BPPPSw<UdRd<;*s_
ziBbW3qqv>(BQe!a%=>Y$zMT65Ow4?_=45xbc-D7M06`RjKj4Dd>JDF&Q8r%c3<0#-
zGIyT#&2_fDZir&#xx=3Ml>0#EO54Q=2+XD81ZIL(-^}U#N<Fm*fums&{7&LZE1LoF
z{gF0@`6!>;;uqn(ESq-}0*3JDeD|t?R(^8j*4EY$-B?=rO!KM@a`G@)`c=gikCRYl
zC<q(6V_0+xl=8<)b=J)!Zsh!M!Iqwd9PKUfPgZmFPLsjUjyAY{Cvq?hYXp)0FCYD}
z-0EQT&1VOe6YQ7sWg-YNfH`DF?SGX1#7-w*x&4h87MowwXD{EDmJVwvY-|Y{8WIu^
zV{6YnU6V=l(Zfjz?+<&F#&azf`YCB(pv?D&5CAiU4y)CPoGDO0Hs3H6HqZaH|7~a9
zks^Ild75AR>!d>5;eb4~!p`dE>e|{<AOSTA!1U^+t^@vWM0NH#)%F<$A~k`j>h7B6
ztc?nvpzb79(wj|TkV6FBSqq4w1~`*12a@NufY0arvsDaanN!sVY=*$6z3;CwAIm)e
zP&ftBiDoYhqcdFNdy-<HRW9E28VSLZuDf@S$7iQ;z$~u?q9{Q!TAG(e=HYQM<+9u4
zb5a6gn}Q^14ULXVo-P1&ggBow_<Xz!B4mCjd41(FzsXff7w>)QtLyezVIBYlfw>)Q
zZOv5P9IgLKke}>gY4l{6G34W&wNNr%XexU^%bhB7Fe$MT71{9-L`wkuVLn~<vA`C&
z!Qr$ynzOT3u)#xS{0*o~6>XDQbg!9`xZWU{u0gi6u;VSWME!-e&J#Y8kGc|$k$mD;
z)wqs2q*oPiJ6{gCc1G!*{UZm7gW!^IWJ)nbbtTrA{&b;<LQQGaHpZ&hUEenaD6gnI
zXt7R~dtY+h<>h54IZx}qH3)oMlZ^RY$oHV+@<eCGQYu(1tjyGzE`A1A?|s0h-DJX^
zm(u1}*UXl26c@~q?t^BDEf>_-vePZaVR0fbAqjLV3kwo_eEdgTEmA3vDp-`FtLxhj
zA3mtX&sGUjq4x$PN{~EeB7P>-fu0phFrJh&HK{i2ba8xS@j))!xYrbV`68avYm{5X
z3SJM$RgzLecwzqK>ufQY*rIuoF_K;(_q)8PI3&}?8ppKW3D@H3VPddtpYxa8gzdjU
zZ6@j1jK*wt;2X}(HceC*rSTcTclbT%biFTDWENhC6%`k!@wu@&Z4eafU7oSQUo<#x
zI<IWi0c1%mono$I0;|i;Gyvk^vGoCG5L>EdhZ^5c;jLE8oz600krYYdw7%R*SS?9u
zpv7lW1>9Zt^+?Stbll+_DVP04G`)-ffG9fNLKNDxc!Rf3Vz+B8N#Sh(@icgFB`_ph
zTuuUG=;aSKy|*V9MEwB-+VyxV0YtYc{5}gKT~Qzsby^^*AadDQ&IhokUZ6UgOnc*X
z4srlGX9_+;Q-E{=d`Znp%lGS`Nb#a3)N&#cFMX^;{R)WIl@~T*7)+mr5OZV(<=;4F
zCvmwvz%?6OZ2yNYe6K}jsv6jl^j3yAmO|AA5LY(|Q%OeGx?S`k7*uJW=URx!vpyL@
z11aEjhEA<*YRSTg*)TD?=?4Rgi>nKl_0KJ~*L+@2lyW3va=K$}rfU~gaIdj(;GO-c
z{F-@CvdL>;NWSX)K@EI<o9i${B*Iy~`f{GBxrZw-N4bpfnDLWASma)dvK6u@Hs$v1
zN^;g~!```Pd%8OT!psUCW&#BEY!(dN;o;nRJ|K|avfOU;@@#BuT6&+BuxuD6)#Lx>
z?rZcD7-qfP?T^B!``Ea>@o%!c3Y1=O@RU;q;Elvnn$>)_;5UY5ODpgjqmWUl0-H}w
zET5qbMBkz(z{-Wad^u+vH3&^Z#Mt+hOfqjrZpWUGAf%2i9#j7S?g$<C^5pW&AzEIc
z@g3!SMUIpO;yXFPQ(C3;rtUZ<wwkgv!4E?Js5nUlrYqdo5VQBDD%^&D_}uIt9g(rS
z{sx7X^%Ln6Yi)q{?T)U2SPmAg55AN*K=yMPu9X2GxIBbsez(Q%u522l%4w7ET<4?y
z8Ys$~U0iTk44s1NK@7cWDyx$@xQ)lVQ)Brr1!Z{Y=?l7beaHlzgY8$XXBq&2(+$4d
zRo?+HXdB?f$zKatp56zY1w1?e3e}vh^=|V1j1E>GTmf{mFECKsllgW^5ii8-SKv>`
z$Yk7V+|NMFv_7)6rGO|_mAzSiC$VqWP1sAPyMr3jjiQ$Ai=;YC2AdK3;xpt!J{`C_
znU~(o-O%n?4U|!aq|FY8kZ_KaYSPR)qwr!jEN3bbX3s_Zu-#nwa(fcri&I`lzmID6
zxezB(e3y(iRnyKW)`Yfc^FI?K^diW<e5|g&J=h5L;o|ZPmEaj-*m*a>VJrAY<Y-YG
zo8VIIS8eGpDczqqs!f!wCWKT+5dl2(78+e@f+n$Zkv==Ct@fI~NUd2+ib=;G8ug;e
zDU}PxTT}Zy#~v6Lm9oL24sneYn7M`he0VA{N{VvsrpaI*s8#GhEyEcY45Id;WawF?
zh*n)!$)+a86X|+RZ$Xa3iok`m(zAvN(@TA*VSM&}WM2LxrIwM2F*zj}411Bl>@AWL
z%QuCk;!k^?Rfd0EV}>#uuPk1QTE@+O<|&_Ctb5b>OFYX9C(q{HepnPS(2l0}+orpJ
zD9GvsO)NLi#1dWZ)tq0t__Ew`TR4$HF{sa%P^)xas9!8h_My&kw|2^bsUCXeo`T1d
zP^D`0x$YPR)q0h==5;Nr#AeU)^CJtTEvtR$_K68~>L@ol8~N`)dwLiZR{%WKE0a;#
zAg->C$7o=~Vz?V=pJD&@?H6&QbNo+zP=hW5`D*9O`i_nL`j8M@GG+*$=sFMC=K)t*
zg&VLrrP1XwYi``p%Bd+YuK#(}pIU(X<RF{UImDmY>67fouWyMIt4bVu6RRGOLQq=?
zCS8l|e*l~MSOp4dtJ@gZ8s#FfmU(Hvnc<!mQ{`UXm#qW13gs@3dYHcH=4W}+J43>o
zuvhb#lDfvp1--XJg_*bPUpG8%4OA;X;I#aSC$O0{efIuo0|op*y+V@HGKNdACJ{^5
zAGS%!81*U5vuQes=eIfy&G8(bcWKkJ&8^>|Xk{!Bo;_ACSEurXl0zY+KLjMo%&RZs
zZ&qK{-@}OT6C1DRH~iWi&(rWvSsTPWMx%Z0QTH{~G=6=NA&~uTC}Mwp)~y=*!45X6
z``pa9VME5RwY7~7CuiDUS2}h$@wkWRY1vc%H=?W`5XSjN``Zy;qU2uCc@f^jz|d4z
zM>FpmmtlUKrtEH9&A9NvxswIjC`CoJWzhVrLDwhn^?qG6o8a9<dlRIyvwN5H$L2?a
zQGn@ab*1)Vz~Qsv`PIv5G<lMo9%2lIT)OEgIn8hQQ9>TZE@k*^X#9Bw4<T_NXMdNU
z?-PT=zrFUX;L8&P6)qj90RmUCJyl9!#iCvD<xeijnzGJj7tIC~7up2Ux)1czVs3am
z>BG~)wsMn`NFMf*GvwjV-q-8Z&m&PRaAAx0v)^)mU1-|YZ&4k-zhBwFs##0Y8mL~5
zv%*N5*dNV;zJD8WXe$u;Ai#K(m5{u*H6}sX8hhnghYo$7PYUKTjbsuXz>2l5!s&{m
zy@;yyF?lDl@p&gSWzl>0*=D?%;azs2Q0PbTo0%r}i^f+$8BvTj%Zs~o&uMABCM&Vn
z*dk~pF3H}1K_##;d#$`uV!dTD&fK*Q`=RB48EP0OfQ{wK*T3F3N8MMU<y~lhCTe!^
z(g1l-NKb(De(OGib@mgB^;(!fi@u}cjc;_W>|8S{Jp|OWEGKIt{=F!dB7&KxR4i}n
z=uh3?cS>mm3RGy@8s^7;Bytjz+vyN24V&N>Pp3Z|M+Ac^f18#8y&Sm}%PP#+T=Iz=
zns|_-Mr&Z2I8!)7+?K8U>)r8$AU#rSXzuN}Kn-%5MAw6*)n)rSddi$TBo;|Oo)4o9
z2=Yo^K7|1CTmF-_moLCv%$+-T+lP#yRVx8{Wbea_LYUYqvR+;71Bq*RQbM_5zs;b)
zoS%o^b|r6TeoN1JtS-&irmg(oU8{p*Sl@6Q&;}N&7DF6XP=#@&sr-lkPKw<MkR>F{
zaM0O{dlw7+$x=m1kc385sXx&(F?ef*sNKKi4lfVIg*Y+3)tSU$$W1>DR1f_y4G>}2
z3kF{~xxf69c0rm)R}~T8bxNSg1yMgPY;VHU^CXfPx6v!PkIiAeuHZ%XN{2cjdmXmi
z#|_Pp7IP{(?lG$@9DGF7PbobYE}bUe0M@<<Ja1cJmujUNOX$l~vV&F2ozOhesd3!K
zJ=XepOMw`kB1<Y5`nQ@EtnRzR!AZC0MF3|hUC2ysj~`4%R2s2F3$GR0UWfW%AycO4
z$M;xp4>%(Gt6&Uys+!&EBuFx}7O{hUJ94S!fuF&+whP#zb@4}#-$}OKKTSQ1zDSu>
zmHq0Rx-URjqZ(QkTqWLY@uQ3SiJ$Sub3RjLb2@w+g<Kk`BFt`52Ho7ADiSVzoy6?8
z<wOC0f4?sMJOHRHw7!3s9>wehRfg#P=%v|51ar}>#Lu=l-P>`m!GC3x)Bno2H)PyO
zu!;}Ta}^-7!&v{IvTG{rPY2ak$5`h&qT~U@B@JuYhGu*=A}pXS^UN=mKc<jr4o9yK
zYjn;ptesY7cDEk~zpH%4`_c-XPQ5yM|AdBsT7CDxKxX@lyw_+;K~8$%v)t%hLd(f>
zqd9ipmgLhmx)_1{WUQ+<pR{p}`IAo@2%2$j>PY=Vql{X>(oOb!91&$o%Df(IBaI^^
z4vwdfo++XlJ(j5TJbqT>V8=4c<ep_jbW5x~_+XSsH56C(+B(M2D8p%;^lTLBI_$M@
zGR1|T{}Otz;G=<Jd>A`(ziDORb#2bEjzgS+$N=g7l5w*A*pQmfpH}>Hoj?`=JvY|P
zItp?h6G3;iF8xtE6`p55O26uL=<hsyN1H^rXtwyco$zL!OC)n*YgaH#W8(>IpDMEW
zIJB!uxsYFRf!^j?<%=F^P@q+;$ex4n8y33YT>tZe=gaP|eWFC+MQx}KT~eQlEmg&}
zMCWc<+fn*qJ59a-jwLR`AHI}V829U7Wio!A=wxYk&JIBJK;Sj)JLSa>HffwPiGY7l
z_A8uw9rjKPvFxCptdMUN_+&B~PG?~6?z67W6QEs};koXxsq?#6HI+a2V$M6e<)wwi
zW~Nx+>FKF}&puc&B1!A0<bJpkl4|$DE4Ecn4%_|PPT*dBjxC)S$+y2-2JwXm$<6jx
zq+E|3_eZdwV8_uCgzAf91`yKWjM9&&eSo|x6k!jd@iGpEMnPk*%;8krzj9|bw1T(>
zSxt{n3GFL=3aqAn2^0BO7?9%)xBUYnWxW()4(ec1<yuc3WBY()fx?nxjV}ex93fI^
ziZP52+x<+mxdwvSR9{OWVQBn4+}L_c2zW@pO7Y-uL=fySIROTbr6a*7HaD@jIG&l>
zkD{Kf?dtEaQfd+2R4GoXwk+AS-A2`E#+BqjQ_fG<vy5eoqX|+3Hi_1qq^d??UVct1
z@YlrN#f<7Ouj@;?7kqXq9e;pSiZIuGx}kP~$=R=0&CAz69TOR!ebdg?@I)_IMv&lq
zr-Q!qA{^k1k>lAmdjGD97WVB`!bK0&B%B0o6k2KMET}>r*LAwyFWLI_Aff93wVqNc
zE2vFYS6^#6TSmu9U!Vu0&H;h8d^IZ7>q3P^HvtU(x_S_$T<{qV%onM{OmT<52U%L4
z_vFOyL4G;9knuS!Bqm+V1dZ*G@;N&%j;K55E4;~4F4nOa96~Uf8TCb0xnjQ0@a&yD
z+S=O69szUQuf%#<k8`&@u!-n$<@LG(ou1IE=ml8rl?|pe9O={fuT}jkN&pOD@+J^O
zl+6*O5T`tsA|Kg_{B35n_JTh>N=5Nqnx@No5&v+4<oD#`0>ZD*_!bWo9{>c;NW~HL
zr=|#K_uK;nfFv8W@(PL7K5{PW<mr|c*N99f^O0Kj^Bx$lOMarrBM1KuC1+<g8fd-u
z&gFKHwZT{1n#xK;OoJY$rP?pEIIq7t<&#c~;$odID4HMXkA2_53p~bZJc`ye6;u1I
z>8jEPTe)jW7Q$&Y{R#p(2OuoK)Rtlq75Ow)r0KD@mw|=!?qe_21xp>SFiNx<**(`@
zE9)U8pPcMWUhU0ZVVm^3Yz#z5g1&<TV!I+H2GMauQe!ni+`s0;qLDHL@UQQE&<YRG
zl%`^l2Mi;*d`S(l#<|0FUWElnDaV}wdTwsl%j|VVqfAttdN-$n`8BU=Ei9-oI#EWm
zl37P#F2@>CIop0{@<$kwO?r?nw>j01y#BdWBTCbrrXfcwMZRpOV>hXpSwl<E{!FO|
z8h_!r-GMvUqy&BDc*bh9_7i`3H?_&#X}jKfIQMp&|3qHJT&;diF|Odx*^bFvwT0Ga
z!+ADi#Z#X<!%SpS-*ViLz44s?{RnqsWP2o+2@%na>|W{bPi5K+AI$26rVQ13U&(*=
zFS|ETRS=*i16?#4OArVmCAU9R-YX_LE-|~b7CiO7Fz$0|Q;dPLM0Js$B=4oKu6Z<l
zZPBQb@6ZP~T)UviIV)Q(Lxjs_1}9A2{CVz0fFiZcIKknO&{xzt*eV8b+ZYK+;&R%Z
zELI;jR*GlR9DO3Cs#Wh<r<^p3O~~|=L*Fnzk_sgC?#Byx4t)u{CYNBV78&RY*`a4&
z(!KoQ{B)#M-i=Gdy_!Bw*Xgmy<TsaRYYA*PeGyllUe1;iYMBH#FqI62m;gnS&?NS&
zOT-k4)hUskZIxNT`}n|zVU&<oDPB^e+M3IA#C72Znv}|erv!&FZ54=3KSCwRSZ0`K
z?^i{llHT}+-xCvJ4R$dCR~XlbDvT=U#px#nTl4d@(H19t(NRS;+X8Pn@_Ld@3=A|I
ztgj*rXb=U8H^1|-E4eg}Nf}11Goh-bbCDdH&PO_<HWSE1NbfPfKkp?XL`R`n+Cad4
z(rTl}4Mc<+92j^M+Ic!{kFscb5^L0G|Ctcuc&F{S`{Yo$w>75_Oj>8Rbh?%*2dQjV
zZ%w!C?&V+K^&cuF<B$8@-tM$i&2QALI?{Z{o%y*o!2aN+wb)y9!Efqna|yBhpt7kg
z5c{pS4%pZTxtcAAkm_e~FoDsrIMl3?zqReM!>f^{LgqeOb)(h}M~rOVAgWf=^|F*$
z#;j)Lv(+&FRXBv>$i202xXN$eWNGQwFConu&WMr}SZ5o?Nl!S{Al35ZSe(c?VIt5s
zQa+bvaj}_x#fPKeX3%!<gk^U|m45}ALLIFb%~qz{vOk=+Enqtz*x+%KAqvvTjgca{
zEoE8)#nqk+lpB0&0_|W$6K2;|+~5+H0(cQU35#Mua(<b9SaHlcnI<>4Ri{f+xV_wa
zmfz1noD^h2V>iHb(kB~+(9=1TYq`BwSx;w)p$>w1P7}||dgi3gi7S^nZ^`xAIP5Hq
z-zT@h!x$_I^d9;$<zii`(*U^VBve6)L%*854|C;V9YNQcTW4Dn8EyU){N7rbt^r_W
zQy2|7m{ShpCvWjQQ>a{W?SE%p_pW#OzyrDHcep>Afdko`DlVA9SJ>GaI&B6nW1sx#
zlbCSj{o!1xRb=}d3^6^OsSz@HvO8loQ%QbB+M9SY2X;<Fs;%8Ge`ly4US~axc2+J>
z2r<`CQ(NguD)sb(SIT4<HeaGq2sW0QzxF!ES)%D5uk^N>BE+Se&n;5SvOAhxx1bDU
z#M_!dl*_<wfuc*)8IE?P%XJ&4+j;V{C{2!h5<+5ya{Cwu6DX59`^kn;&1f(2fc(o2
z>Dn#lX1f`46KG0$wsKRPcN54DF^<-ztxrOk*c;7YE4veQ#SRy-j*G)4EOMoFj{9Iz
zj+s%D&u4M`k;r?bIY&nbF{e>$eBX>avNtYG5_A^)<}lseM|_G4lnMvS9cs*?I&d!=
zh>RvgDw*5^fVZL567aO015?_SrM@NDrZ&4mR(%Nqb>6*_r8<1OGrJV@N=}m{Mp+|f
zL&s|~vb2`7^)sjPZNSLMHNMSPvEu!n=C@XrSz5#js{BkIect@M6p%81cO~8SHFyrT
z(<T>wiR|npnnFXa8)}~XPe+84QOC2w$>YQNna+M2iyt#wxGneRFx^1Ft0<>5L;za;
z;-;YO<<|JABCjZ$=|um4Vx4duj6Rrr$mf>TX5zDAy^hN>mwhkdzq$a5%brGarTlYM
zUV&Ti1pbENkdUdELJ>FHcfWgiT>=RhYi|Z9Hx8EaWVP6R9>13~&&<qfYHai~J?O3}
zonSS|*ltBT0QFn*<$2-Og$KtEqO%Qqlh2TwW73Om8@d9YF5Gssrs>vLdlTU`LRCyd
z#+OZk8yumjR+31SKF3%^sFLf9<HFZ3SbfQ9w|l!9cc#z1H|y8-X9WZR1txh%(f#mP
z=Iz@aybS}qFwoh$uY7fRHC1Vz!X=vu_(B8>8mQwGP3apUs<en^5&165#l!q4n$D24
zANZYH>abU%>|9)>%6YS!sw`jwiA2IuXz?4xN!?~w@6#VTlfP46#$|mTPJAMjnUxhr
z!LO8~(K}?+oyP4PFMtEuHL@v?-eQt5hZXqtVq!huAD!&XKETFS<j~2mM+B|*)$1a6
zAJrQ!G(KKsR&?12u}Hr+vE9lusmATn5#XR&TvQBJu6&=l0Heg*p;-?(U%$3JUyko;
z2iT%$M*n+<J_3))WIT%3!?mYsOdTH)<G&cm4zuu+R5rC-?N3#CV6&6)cy%~i=45-5
zD8u-zD>niM>w!YbV8)e)DGUG3Y;yvGiw@XCuGG7+z7HI+dx>(2JMLJi_8F?nprFol
zwkW}Ys6@L;`T`#;g6-36T&$Qv3-mo3Lmd`4p}l2EZ)wr>AC-w`z4pGjwrWBLi?5o7
z-!F-a)BD)dG3vnd*THo&O*&Q(X>yoaNwdirugVOfi|caPotA77TaOy9l1KwGWS?u&
zLz@QBofxR1SFSI*sA2$38D6IYHOI>F8Sj5nDQ_}$*X*-~UDSv0`vf4ynQ@R+{g(W+
zOFNm<Z(;zXGfmEi=z>q`gKuvN2zs0?j?Od`#DP-f6HdT%qTRiZji-1-2%=vLrX%t=
z=juz{s*5v>`z&S#g9pfwJ3+fzsOSLk%VcTuC`@RYSUo<c0oGdgt%R{{O*|E*0jJBX
z&ai{k?mYQ;78`-{d;Ibpwi|<y8zrCpun4Cs^kAKj!#26Bw`OWOr?n{U()InM%`?6)
z*KBnFsf<ZqynuU;nz1>0aZAQ)uF|RWM`#0cEnb?9A41K=mVWrg%X%Lt^UO7QWx4yz
zHF_uTOF$=WTkPu$^DCH3N}@Xy;OgMHU!;=KZNN9t+XM%f(*{wk7iHWEMB`!rQivcK
z10`Kvy_f9lsLn7O06*+a<|uUDCGhEwXZ2qDT^_448a-q^Q<-|l=*XE6%&WVeem_pB
zmm`*P+sO-~c-xR=dDXkA+Ul&NG;-l$<FNcYA1l4;%+;gQ^3+xFl%Yw2e=M*g9qVeY
z*)2vulv=OYEkx?=1T(+QY#Hau`Ij%>bZ&2BpB}WscAC!R7cH#}4!5U>{1Qa66qO|q
z<|DZn$iqr2E33n$iyGI`n9e1Mh=@ng0*ZQuhK54EEk@Jb_6Oq;#8sOLx3sfVW+Fsy
z^#1KU?a?e4+%Lz`@J~Cmmw9L37yn!~)m_0_Ia}ywlFQC(Z+Lo<X@<yVjb()EDG2ev
z<4we@Nnd1~{+cbS3t8~Kc|TaqUW4AdJ|Ief;f5{>6EC6XX4GIclIlxcf4^#}m(PXt
zs5e=bq_=moeaP_wm-S3Cmk0Fc9W-(e*ZWiiKZ*gWrL7}Gc4XyaMJ=o@iQU}(=I0gj
zOarFD#%wV!k<G(Pz(D!*Z1^mDyz&`9(~H3H{qBK4hTZp*w)T@|&+FwxNYw_FmEzVr
zlCct<67{@P7_1xBwFH0=l5tGBMXp`jnw;M$E{--=Q>HktYHUl~^>+Bq9FLG2iQ?no
z-2g6KqTAxhS@W7``|5IH7zG41{U9>QKPW)n<kuX6e`@h?l1ZWN)z$WZ#<Rj~!dl)o
zTpS>y9)2q%zBxd$Nj<#c->6ezM;{w`V*+f^<k*;|7gimX(GIW^#JqMIW1+=<-?UIz
zrn*1OIn3oxdG~fx!R{@3<=kmsKr4jgB#Jcq%v`~nXLy+#v_IrFsN_M(XKJl%Ksyy|
z_0j!RwD6}4;1d|nk?w>3Y2VOMYbeK+dfnduNHQ<NNE0B|S|y}B3KJ8!SF036CaY}t
zgtJek>s)rHPIlR-p^lEWuerD=xb&Cv?_&6AerX3_d5ZwQ<T7*&8l-JhcE4RglXm%b
zFPy2y<3aPFg)a!|M*&NSn=LMqsy%TTn!@9?H;@q{6<1?E$g0>OO%)iY)?n}C>iVns
z?ghJfLCfXAk<?_R85!xRlf7n@rE=K^N(2!(X#O&5)s~e#7roQB#swCi5fIYMfBjhh
zG*Lime{q5h1EUkJTsZ7JYB|B6obSC#*uvRYOtJ%rnw2ov#pU`^iYAv-H2q7iC?D4w
z=+$`A*i0d!D2mz&GRZ9WeQ$Z)0d*o~W_FHxW|}2)0o|Q#J~}yhyv;8)YKa|N#9mXD
zE`6A=`j`gUgnM=ANk)1$wUdyLz@*dsb;A=Za$PyHXidRGoSmOTAO|M{4Q_2sDk<k8
zKt;rrxe7E9-^a2!{SwdHr?OHloUS%voXL1KH8h5HV?jVtuiNxuvV97)p@{|TPy-_g
z4*9%;4A0$fgQbVGWrVGZ?zqI*g1!Y%v!oa6*Knmtz#$ynhF}RsGEG(P4&)b}-&$-^
z$@KQTxn8U@DHXU2CFf;~j%L(GuX*u5%Hge3(eF%OAMS1$LoHrnzA9p2?)&(%BTSdu
zVWqsu10Xl}()c$gOLyZ+b*ZWeNbwI;OH+eZdzu{9E2ew4j*_@UJAy-fa1{-PhvM_N
zZN8lo57=2q(g$nOFHOY`!{&<pQKxlFghBL2XI;Ji^`WWkPVf&m!u<8lNpFla3=Nkj
z4p+rPpRMOzZhB}p?M^h*Xv7o%HA7hNx7ro&?IEPp8+q=|*kUzK_mMRne)kw=)kHS#
zm(bCKiVRxT+|J+fS+r`>KP=az;!a~onRU2*HkP{@%q<4vC0$*|_bBgD%cO9)o<2Q)
z+Ly+k(ke%fhlPdOKXyMx<(C1;{P|w<3e!refLo(Aq9VqEYfy)TWa`Xe5wnvenZN17
zIz1>KrT<7DY{S^tNKsI-VJU5+>BGRl0FyVNB<-ttV<lSFbNQPYORLxBV~dM*Fbhu0
z!~Om0sw(jH8pT<7tF4mRy&m}06{<3-mpcx^oszQZ)_(Z<>fODtxb&sqcl-eFsiTsN
zAwP9t;cp8K3>=yR=b*}Cb+ktvw!`nq3ZXxrfaNVo;0+HC9#CP&l}?Pi{76UMFby={
z$t2nX;UeIefSl($fG~J(2a4w{=q&(aL-=5>$-n{tppMBQ&w%XkW%6s|TKBQk|3}qZ
zMpe0e@832`sR$w<AShkZ4GPlT-LdKJR1r9IcXxNUbZ$1?-JP4>z<-_R9MAXn_`)$9
z!@b4(UTdzo=A75(lH!7EQE32r4VT3V+&DsyX9|4$1sa;O)gk)75#ak`(m-49@n%5m
zZ#l+Eu>_W)nvjt4*n7|BMrU5nTf??0HV4aV=ZJz6gTCAYj@)JmRmX#Yz*K2+5E`y8
zugjm5m2Eh8(%$F$1k`+iq}c>*FD-qzJMq`>sOpT@6B}nV3KrStKG=gaj5wbb;}>YZ
zHB9Ur*M(N0V;e_|n#>Hh(tr5yfs#^o*Q#iHu1`r)GT5eWuD@TbN&3<^DM<s&9qfIH
ztHfD<KguW@R*$&X(9qy@A8{p<Hh=;F#NQ?d|F+~N_g-pS9xfdoc4Kt(PESvE3*ED#
z0dmUu$#t1?yXsC4492>!P*hk*O-;>=QdGpx&lhW>SnlPOQBxCRq*bXz(2$PaISoor
zPjfw^FtF`0DVr}F3=_cZ0QR?AfCcT`R~e2Vs?^O#BWEwskw=v0yf^@>^>p3yX(u}h
zfK<**YP~wF8c_t7;%l@7)VrLJqi|ZzoQ{7_#}6uf|MjpM*lN5ojwHK8)Ys!mO!HCe
z?KfL|P%njQAE&vj6wYL$ot^vwNI79E0C$s1^NI>nR2R&GS&z!DXR&IpqeYj(RZ`tf
z_2Vtmn&B!HLrOQgJKT<hXTPW{ptai-nDrY@Vj{(8=2$C#f5Vu?A~xN1kAHT`Op`CA
z@!PJuTreNC-TN~mQl5K9N<J$Sc6^?z^$UYBbPMZM)A#hr6qhmKl(-XWyDXS^Ta~Pk
zifzmRu*5WFcRztS-(qY^{JVU9TYgD9R*m~&LtK|B%+$M$x~Kmv68SB)Mq4;thOPwd
z0#*=vQ&F7TJOtUzlILuXUL#xmC%<PxBAjc!mXAN1&wpe2uVl|R*mQ|#XlOd2(!KkS
zR8>@beSIZxIagZUM@vxu996w3e6fxNU)@|P#(IbAO+<NlRF=Q7W)V;mQEb2o=;}g6
z_BB+PmnI^dX1`sdib&Pg5Ped%Y4{E#b!x0de}wc$IpL>LE5}KL(sW$JZ6j?zx4Utq
z;{&bfM<ePwL{mTvBqsi7kN?lt**pmR)ARtZFz{2zRn7t`@PC|{8xU8(eUGURfpo7#
z0UM!UM#Iv?%FL;@IWDG8-x?kBxasqn?x(ja>gt^B_I|cp`}|o04<7txTH|H4-|UpJ
z&e;MRNX88J{*zI3csrM#;Gl?vw%qje(<e{9nZUkBb3vy=BNuB~vZT5tBU9sXLLM0<
zML_>_D;|7!-Lu*_;(rzSR9)GrHYzA6|1&l4aqd?e`DB!>w_w6RX45Uui-a5_-kl{c
zv|W)@wExo5vM4@rjA&aph23vb9mt~~-*$ylvd%4(uc_^&IXdLgP*4I&2uT0u3<Gq*
z3%Hm)-ag*(RG8xDr*D5QHhaEAc_Cq7+Mg+`f>Zf*n-TlswHzt4`yG58CF{!Cl-PZO
zmQmu`Oi%AkzI7GzE|L2my~%^mB;Jwwj10sKpFVZW^f9n~lCQdH&j~S>&5=wYH3xg$
z>DxDDr%Tvled-042>WM6t>4*Hm44y!E7$yLgVgg8^0=jnUDy(?-}D|AdjTyMtr3e&
z;);i27CerpJ&YrI>Hk6`-eJ0(WG7*pMm>A>w2p&Q=vCG8ztb0wyF1BX$;e!egoJM6
zFPYFt3Z3nW;0$mr1k_#k#wK@n_tj6;4EU2M+qMXUdPE_>2T4AJgK2lWG5-JQXG6&`
z5fQ&oIVc%Mct8B+QJ}QcB0LiXAX%+ukFY!w8xtzhj)bqaFXm$Ge#!K#NR6_Wy<;5I
zDQAljM#dT0yzIC0lN$%#Oc<WS+c4pj|K2M`2=PYBj&X%J)?#OGDnJo|=43^N+!yUH
z-{z=8WVzxT76v+FzV@#uPShPvhOr<IKbh!(t7MY42qHyHagIQKfEj`;*xlV-Yiq0S
z*?$m-)yP~Rv3~VH<l9$y;Lk(c36r3`Yh)%TCkHE<M<GA7RJt!iz=Rx|Avi*t(U`ut
zn4_1Mh>6F2B3XyV`Jm#5<7tF)?7O(~F@IA1jJ4fes`&q@@4o2DbvU0fdMO(8#FsIx
z4=%rcU0q#0C@IPJ4F7fS4f_k#k6wm89YZtWPNbD-VYw4ew4ulG`Ue&8gD7wDM)5U^
zh!My)v0@YT!-3SAFPZsuZHavpjx4OKIk3&YpZvVjtBU{gj1s`0+Ve!_(^a-I$`*pk
z6fNn{w!XfRwz;{H5m{2X^$A{6n`<w56|-4zzr?~ADpJiJ=#-P8cE58j>X?zIyLV<A
zHB-6r1jce@@jf{)b+@3d2p%!_$CW;$3rcqK^568I2*7xFcsMd30Lt=j1b^^>g8W;b
z{KYFo+!Y0@emuRMw6=bz;UkJMeT-gIN*0R86Zg#eg5^%mb7EwA;W_O6`iWuv)}OlS
zVLSNNg6Fij-*$N^7f{kKW{6$>+Y|t~vKr&_Dz3Lbj~mWvEM2y3B`Zj}k2!{Zbvgn$
z)6H;!gp0I%kPZ3o6W_lPZ>ETceGQ;~|JqiVOT=OXGL)FigNBymNkHX*s^R|x3_2@b
zez~Sj6Tcq*^TR&~by}mpAB##c8BI#*>P_toVJ7Djk8BJbWqzdRGTKb4tMt1RKHVdm
z342le;=fOk65rPu&!EQRyyqu-vC1cYOgbKnEvZ87qL>X62fIW<H}9bg9Ymf8vUV1^
z@cK`@e()WW>_Fl<g;b<S!^6~rc)o4eZ)pXIkA-VvCRAG6J?aup{Cvm8O<g0do%+@s
z;Zt$q`o(2nC-y9_C}e5A?v;zTPt0BuD>027kuzR3`L~?|oaeU5nNTVt3|#WS#-5)p
zF!2?}fR3FASNX6XQ%}m{*sWy3>U)_u!<#Rkjcl?R{GY8QOYSWkH+=C){({jj+Aqpv
zvyyl}C$TVeHPdH3T_jK3L}D9-(pHeb;&&fjxGQ7?DP-$^ul}i=bQf7foW8#`m;O#&
zN?@MEkBNC#VsvpAO`Mli0xX$G7rNjdV}2?0e_}-WF=J{3wbz}WT*_l;oLw5kcwUT(
zF;fJbxJuxd`ty*Fgu+nnmuj_Qpw>Q_HQC!zvT;NbxM4i~p**I9|8?FU0GEXi_jOmM
zkL$IfzT0-?zy!x4MT+wp<V^&6w;3an?{TfRF^DeyH2NNVU)$f5c+TF{%NC~-pcCtG
zjM~Tj#+~Gqq}^!kc_wq_NB51)F-%dC?2*KWjOm?yZ20^uvA;6x?XsxcSs0>NNN<F$
z|5fgWw#BL`PtDAzsj5(6B0uZJz{bZXARxfNz{K3L9Qt8Hx@(YB<Y!Qiu@UUR(Ae?<
z&Ov$Uc6q@}WJw@^>u~!<A+ct333&P0#u|$JBr$nrej+jfiZ=#r_w2o8<RcKheBwXH
zgz)kE_en)X<`fg~>t$@5*R3B^!u!|XMk}(gfaHw*^4i7Q=ZP45ezU>Mm4i29f(qkj
zNe9M+y$O{DHHgN0gpGPC5@<!?may}9Vdhkz#f9eDv<>@kSK`e4q<6=eZcq%&%h289
zjq2w<eQ7X)H~J;fS2*lMI_!u41+9zVN>1K<Nb!0iNfwNwxGXpyC{852vy`wJM1@l#
zaIRS+qN1W4>aw!3jMBi>&!H|TsK`O*)<;6VMk!14TMI$X<0{Km)oM2ZAo9&Nt(>@=
zB>Mke^A}k$gTqe|{Vi@Dgs;BC*;N99gR_UGXLs?kV3LD*6n?=Mp$>|14(yR%ugz2+
zo7-48kavb7)jdQ(DaeVQA@30Ry=Fj*^XrH8iPp#XVP+APT815LAtec8gMsfVgNYq{
z{0AK5Rm6<N68Ii9ez3Q1qm?Xp3gxqK#X@K7cOe6jDxy$#AxT!_iExs!%U(uOsg!oq
zN~f!MPcZ#j6%)P)uz~nI)*gpx5#X*XZeU3l2|y>7XV)}HAt^VD8%cn~`U=_He1C&l
zy&iOP_{j$EIrX1BZRK+Y;O>|2Ir&5IZ-UqQwWP<LHmFr*9e0S`3PwDah8_#ShOpl8
zxcuDtZ8mLdHdpP~z0fWsscAG>R&o7XFeK$Y4vq+O!}-?!hKJ+P(Qup54dV82IRe{(
zkPVnIB!GUzznF~=B5Z6N2^0fvO`e~H*~xv*ukSj0Nvi7Vypv75G0#o+0vLs#K&eNi
zDyV*kKQwszk=sjAK_P{!K$6oesAX6y4B0<$acsNdGrjta><9N~X&K)|8h4h3rDZ)p
z=<buvrW`kkq*N<bsJKSkm3O~5msq^>${p&Pap@ZXI?}^JrHqw&pwT+3u5nB~(Y$@;
zc7I(ZGjBqZFh(O^D;%V1pZ6K`?cU@-37GA)=XbDJZY`mKbpi5MHo%?3a^5Nj&3|4j
zl6pSR{Pdg#4>A~@rMGFp_f$0Q<=*Ugrbp1=zM8{jfm-pLv-b&jR@Y9hH&<8a`1CB6
z%|C_E_d|?J&8|$CO>4}DOF<)qb*=;rm&5;`)ZxoYM6dqDM73~=T>8<`XI`yCdGuhH
zoxo~n`-frF%3hJzyf@>zF-yW<o)sy6vZ<x?i^dQnGk6A#<4Iier5knXu{)<N!`!xQ
zE5N;YM&_k*6`6j1b+gFd4NJ0a;4$b@*MTDS>EuA;Jy+(UxP2v=%!lJe|LzekEwSnJ
z4alsL77zmM7LVQ9)Z^|!X%vn63&p6M@|u(yr>o<Nm~P3$d}Nc^%H2u>?C~Zh{f>7i
z0kH~ns#W`?&fU!sn<cWV6D%w{K>%&wFnhosIW^({$}omdHF5s*Fia{<+1yZ0sb+(M
zNx9`z9o~;K;aUA-xf)8VOfBxW_1c4hq1qnIxuBj?VE~iFdy0aEj*QG@z4zH%3$%gG
z`eU;CBD3~Eb;WX~G<vlbsQY{`4h{N~y^sMf+u7>=AV-Qo?yBq~lB?rxs!3vSz5OYN
z`Iza{rKhPPKyJ%a6vWWw&8C(~x3&&%AGhCBF0Y@h_HRlB2M6OK5pa}3;730II=Ji%
zf3e9K|J|!Evv#TZJpaV^Pn1YP*!-3dq+TKI?<rYXRdK-yf`-f$#=3qjpC#3s3M<OA
zB+Su_KI*Y@`xf{P*Z(x86*0^el@cQfr#Ll?6Q}yYLMg{mogFMbQ_B*!J*z)5i>Qb!
zQLfX8*Z{s0?}u_+f%2WhZb#I6-sKD$Ps14{?LU)ou_!q>I7$|haWc<YW3f=Gcze{^
zE)+wfWIY&20hs021*ReOXLv8xgA%H^+_Vp`tEhHa%~We1YAJ)(@Ili}5h!D{ZRuc9
zDeTW=)JU^wFO??E)&$~STPC|*A)({snM_Yi1QYLJ!?<fKr@zo&>^&9Z<NN807>&W0
zRXM%4wX*?)?{wjKhIRUn&!`441^l}ZuO$jt@EgvyGOXjJxCppCF276_Po@r|U6@ve
zQP?W>IV;#NG`UC6%e|ec1r5AOx)dN3%2mub588Dz@K0;!YmY9O{vvXVxK|uP;^p9o
zr+9-P?(|=5uvIfUGB@*b1M=(_0X&Cu)mJI4A1USYN1Bv)ugB(FJe6|g^6jQ)`|?JC
z0zEfm0u<0Hw?}Grr|N)z2lq96vB?zgpY-K>2gKL_AA@pR&>@t|+uKK3RoU-=((+*7
zLzqI1Fw~=}c9Hivqw{L}G3!W#-$AI&rPK>$#u;IT$D$<5pK^*o{aP&LHBA*|ckI?D
z$1)a@Mf*?@9ytxh{4A+qR-0=^G4x{f`l-UN5`D6u$N|K#p;WB*ljMK}BaiX+t;<e_
zjEl5iscc6?cL<M%Qwc|O`6R~~?jY#i>=>|u$#2kWO5sIrki_S8IYy|=q#`??Z18%l
zN#6=efOf6@8M0QyqiN85EYxg;y#@`;!!WO#Tr2p{kNju~>uf7_CMLU`%rf}G=3oS!
z>!A9ri^GeM=bqrJ+Pk2j&V7G&x@ot~Xm>a_2%FqoNK%U`P{a;S;;;_PipnZJHJ?dm
zW+qwN2DNS=)6Cbf`$=1DeSpMfGPlNAW64wN=v$qnp)M9p$-nA+a8;=WYi4TH)VLBE
zsyp4dIl6PVvU;U~Cc2aNdU@*m15fX|IzW#E%DNIwp2H)h$(DQka8ikxTUQ4`0YPM?
z62RMz=n9}N0X?&m%i(s~dDok3Cm|tQ!o?Q7e>Pa?B_{II1CH2q0YSm7_=icI13q7g
z`;$>=%O_@2I&dmU<2o3;;@l1x`LC%x8Z%h{Owe6jUG60gPrZDcO(dJpFJE5glUQW1
zh=Gm32EJ>Eo726;?8X^@y1wRSF|UVDOt6$_He+h?96M#stgmBLXitP3E*2JE9uo9N
z7YK*6)Wfy=1gd^DvD>WGyYxy-fhJqg&Qboj>G0`shOd!uWf*7_)rotYAQW`y@RN!7
zNyWsdw6q9CL7AnwhLEQtvoiAOD8JorOtlLDI@SuI#WZL1&<LiRwpl|sQ>d$tubvS!
z0Y)}^|6)@;GM(3>$Dpvc=W)hhP8ZJ`@QnX#n@KE&f{glsgx=-dJ|33ria1?TVq!ZV
zzwzwEgvB|6B*Pc2(RDMrDhL{mwM+ga=N*UEkDowSm0qagnwV4%7fvDKk8m0PNK9-p
zR?G=$9eEqH3&=+QT1^W}#<Q4bt2!_M<pK~paoBBr@X`{BoA@io71^-9HxEZ$<s81(
z$N#K1gimPc-Tf@#8<W1+sbymQ@HT^wN|v90tw~Szu)HzwgRDlces-CM;M3R8n~U<Q
zj~!xgqg<a8#&Sr^fb-Ae_QZLtwpVfxL73@w2e;m8xgE)rP%3a}daXy=>~t(%<>6gV
z$lE-s6ad^2oKNFnsoTn0goOB(I1QeM)i>i*2@@qUbO^-NM|@hd*(_14w{J;54W{rk
zYn7QDM{e7~5;-K}4rAz2+S>R`6)30*U5HYdrWaa&jF=NiNG5UY%bmw=1J1^Qh#Vvc
zpZ!~uom}I>a)|{d1VwK!iVS9dLDg1#9TX2vhg!>vmbUixU*SNgD)_C-4NbB=m2Il+
zXG@hu-pD#jp&Ch~r`tWP(m|u8W{Yffw9;P{6x=V7Q8VFj)%-ub=#qKmGL5W}Q@4Ms
zu@(oQM^Ps7I8*ao72RAh=5$HLOa5qZ`SS9gHQw7AZ5}U1nqA(>G`lEY_oz_)Yqb%p
z*zUjv+(7g0d1?e%U74I0T5j&g0D10kj1kBS<}e<zI40u}18B5{leCMevGEn?EsLg%
zX2JMF>bU;Y0;HSyNYVzU{6>8O->vSSc|Dp2Y+Nv9PYFLi?~7y);M=EDA*XJ3-xUNk
zKoG39j_%DDrt39?G;U>qA)iVBDh}gtO#5Ts;5}Ze-0~xvh>aqfwE+VIb8axu0ZeON
zL~#@FayVYE{b*|Fl86@!;ypWh{^G?|fvJ?O?J3A|if0?Wo*iCwd}R8Rd9ipuaui=>
z2I9Zr@)X!VBVs`d8ge<w4OY`X>lhE`n~Esi;72@9x8&n|<O?L-A=pYfb(^wT{dc#p
zP@Tv3iqKV3vJm{d#ncxX50MLJ?f3W^cs%d)Ep);F;iEf5cjU_J=E81&IN_(0tE(?T
z(+&PyH|)LV*@<^WL4nokH_#LSEhJZ-GwnXkR}0M)1YbarS-wQ2TOG$rsX!*c<|>46
z@n77Iup#bPL3d<YMJOi<-C0FxDLFN%&|u=86ob{!QaFiNd8F>mw>z2Y2d+&KG}pd#
zab*IH*<LgSD&bf#=n2F?GLPxvZBN&oMc0~0v-DBQw>UMwl7v<f4Mf{_e~z~Y(p4GZ
zxt1LNzRaw&kKOsz_uG?t-4hZO*wpOKclj+Thv0<w9v=yLKf`Lhv)2Vx9XSUx1Kx>t
zv)N~nxN@PQLV2pOToz-M(<tZo?B>~@Ic-la@0uFy&Ke9>>%jqNIal31H@C9tdlAun
zdVx1rZ|q(V#{pAdCdLM5z#_%^qi-%@x&H8+E{RxB5>rt5(z4f0NYdvb5ZC3KEiW9F
zH9g;S2ft%C)SW%|tkY_6Yv(rn5e!mk*>~<A4um-zcLkcHVi~*$;Nisc9OHdLf`XD+
zq+Q}$tlC4Mp`9&(OGW(`z0njo8QG@9>;-any;cK*O%Jb~b+y^`;x$bJ08){o6Y%8n
z?o-Owl4te4E<^d1#BR?8h(rn1hZzN14$E_QO`LHyBB8_l_xPOF`B_oSofn(1#F++D
z&h<M0p^zb&#0C42+h*VwNN9(jKStc<(VgWj{(FGfWWhq0^Ba21GItLSs!S%deT>HI
zfn(}ylPR{?i@s<orDiv80Tk?^YA>($Uw&^`EvBq)&ds9{GH~(on)MXcAcLrY(iZIU
zl7*Eh(<t53yWr{U_uJ!S4tKN(4PM?<8D6AVDli{2n7}#IH|qn*X{qehR6aj7NoX9^
zrVJ%(C)MXX8j%vCYZkQca1}l%FQ@y)$p+05aQ;U9>g(oqA0LN)yW2P2Io>@h_Ho_L
z#^L<pR8Gr9nKp(Bb0c4YLLQ7xY@hf%>GsUg26Q^mj>zXcdqEyumBqJs>3KCX%PF0V
zm)Gc*B1-A%sxxgczWvGzLv5Uc;5eO1+rXemRj=N$#q-hQN7d%jfHpoDmM>s5U)?r1
zNXy2i{7yNKVV#^cM_$84>)$6f#b7vSG303tKv?Tjes9{~o8MEH{zfwRHw}l;!c%_#
z?PXUDcqaCUsWQJeWJ3;4%2S)LlsKYX(>ig@5)1rjj6ecLhk>cGbBAia4SpQEFJHd*
z=BQ<rJEm_w@C^H<6KK9LT<xs<==nptn_hZ4q^gY^z5-1XBbBI^sYuki1eVIGWQuG^
zTK5Ym6Q;B%=<7MRS>-x+6#Ff3r0NwIu@EN(y=uOtZ`|@0xPiKfM*<IQ#3t3T{b#nk
zAIUmpDQheeY+s`oKT${qvP2Xb5`XHfchL=H+fr(o3^|->frDZ&vxS?GedQ=5J8_MQ
z#GQ03RS=K~UB?7PMN<4)T2lW0lV{0gK}+T+JzPs01N_CtM>~E;>tfi!grkT@p@Z~%
zd)d7|e*DP)0Se^S)1D}?MDG7w*nV4nzbiQ3Phf5Hx<iS+larZxJF=M#jmKwq*c*+Z
z!=9s6C{mTMAN%fkR|jmHVoDYVlUk&!)!8Z8T@ScA7eQL?a(4nOe-xNqDCBd8vY~1V
z&G$zgr#PL>`J5!k>m`fL8Rz%6j;Z-~qYxO7u+kgs$ip`2iWeKlbFKB#8t=b9yg1+m
zV)G|K{;IR3))7Gx1H_XIaex^Trc_+#c?ow0fEnO3q*OJLX*|j=6g*@!Z#ic+9DcvM
zgTn|J{%o|`Suok|6OxLyv%dJl3xg#;lT;tdhe|`P^dXsF({qFHfWQp;n#ZMB`Y-0C
zMdpbj9!~C*IEuyK0pqEA!Lo+ksqu9)b%>!3fvs6Hwb`_`1B6CPvaH0U30<@}=S<&1
zY|6XS%!bua4@b_!oPAe1AZYJ*agjFJW*JA8US9*N_9pi6i_3{)H&d}^47*eO<Vb`=
zKk<{G2lpXGID_Sxx9le_22;`2d&hzfy0oUs$#gh3*u1DVdRV)Qi6pKz&_{Z@M(yDy
zkM)dJ2{}}yw0-hxB>cd&7&%%wo60?!qhGa~4K3D$`pVztnL4?lyu{-VvQo$3=8_qk
zjB@~@W?K^8zs36}z^^Uy*TrpvW4jOP*~!U_=aKdu;tJ@11Kxr$A0GD|J0P@u<n`#{
zVAj&ovc>6`csW<(4JnuBop@6c5S<@zT77m*<{HhGoUYTm0sZdoAVQE8n{EUG<0J7D
zcH5z)*r?Bd6SD}&7T{<v)U4_o91Qjeqt)Q(x~H+sr&g&5#^F2|^NZLVOg5j+AJ6QS
z`^8T#O~7t47S`_D9fTjjs5Hp$iw<;eGR{B>$YL?`{w*$x*;FYcIe82-X|mM|>GF3{
z*^AX~V9DXnl6xzkxA*sJjcAQhpdPTyg$x;>ly<tJ8m;Yo+}MZtlTTh&m+2ZO>h?_r
z=}(W89q&%feB3MHDAbZ`{+xs|``Kr`=l9zK-5a_xPu23)zFBpOfhqsALJyVdT`sMK
zN(MCsa?&2j)d7wP!(w!^QxQYcP9!KFcJ&0c94-%MvsH|SM-Q%o_Q#oSJMLVpo1CYd
z_7TvzzVfWiNvtyYu0;@cv%Hj*pCnW!Hz7J$74n{QS|>H#cO51*1!**PhjV*7l?ft~
zjVk3kr~a~M95WFyVtkDQ5O^U9Sp)%~aUxIoAH_AaM=*%M{d^$K!~Lp(aDTpG^R8XU
z^MddQ_WjNq8OuK~Fp<$Ux}@Z=6X*_pfzc3NyQ3ul*0PCn+f{@%EZgrc%nuKj0k{dk
zP-MmcJk;yEBc+VFwl+8T*09)}8a3kV6r>L~=iB^vuw-Y8+2#!WJXzqrmKL+Iu~7km
z)jO{~GvDk_Y0=FR6|ak2FJ1mfe)HDm2pmgb+R0)hbGulBQz-EL_VV&@u{oZJ!)`Q`
z(QptT@3N8AYAmt_TxKU|aEGPZ1f#adYv!$^q1*k9i0LR_w-*LOm|t2JdSRxTm9wc`
zQ>QNx`$*$5O9|ZEYMzPsG7H0f`#d*=iHj3yq@H-~hI-T3ba(5lggoe^1}7E%-cySx
zQ`YN`RxDe}y&qprLoYOs=qQ#5ntv{)jybJMD>9LBx(9fQl%0*Z?;Y5Ba5|DUzfRk|
zgHG@5n+4ev1#%|ut+^?dP;)xP!5X+1D;8{3<e6He&!$@5VM8r=^<3#ruzw}jVZMS;
z*!{Aw_R{9Q$`fy7TVSzYk5R>X69kuLqn}}-bz@1D`1=B(Phs-y4}ACN1`J*S-^bJ-
zEGi{r5`bqLNMNNi-&?FX1VQOw!PDw;C=JkVlGr@dJ>@#ZBH>O5<sRGKJ}jzl{lG5}
zxDhGs{5;WhalRPDPgC!SAK%0UCOuMB1v(jml`^H$MBaSE#r(c*SHK+t3=YQ(rYo1}
z0t6Svik_&yU<ht6DoznxhJ+Y7z8_1w3HNw-e}D$TWrQ3+;ggLTZ==jV3Ry9OEe1*B
zclHUD9BWAb<#zRO*8Rs*@1u2ZTLzdT{WjyY6S1LJz6`Ddk;9`C?*@czm^%GKxR(<B
zI^RTLyuJiMQ}Fy*;J9M(U>F@0BcmQo{!v(^XmKDymGEiB>1b|7WWTSh<0wlRrtqL2
zoh*?iWm_plNBC@{;;{B{Wn$_b#t`WUq)0aJzmDLS@XxFvDvzdSyM>$(7mF(Zp&;7}
zenZBlE_EL5!XOblm}%<XKfzKkka4K4CL$s_j`pRjF*h^!j>&KMVob(0)39fD1!g>A
zcQTqh?|IM$=Gyow9sM$*c=9`l3mp?19^Y)>RT!NlHWx~q#WuYVPAQ^R4u<b7Q$bH!
z#Z(rr5NI!4SvQm%EV`s<HYbOkqhTBW>dVMb`L<_X_RDxU-yl_?rfsBIl-DtjS-|bF
zC(p!toe(WX@1H8<9j;O`mn3X#!^|umlKgM!40dkNk}KY8C8T4$i6P<^2~o?6CUTFq
zb0hxpr_pkB^J*gF`E%sAnu@u~$0H=bwgvQS0ba}L8r}<J``+P|#-kp$*HILs$}ZyX
zc#{bLWJ{~ULIVi-C6l>&BOM=&S?mlZapH5@r-S?3CFks9ky?yR0??fsN5)X7u`n>4
z47d9ZSX~^<XR$c$&(-PNx&#foI5|o8=f@{C*fqIsp0`hF8vVv43V$JFfcseOSd2?Z
zux#h?^q|PzUR$j5&<mC(?1<j0s8nWs5m4-akXatFpDY*`sy%jCVsJeQuPW?|dE$F)
zpN}09cZpcS;x(@mmUIxRTW~y{L!7ohnOEN#Hf@G_#auB9KFPzMcGU7{Kjo$h+k`-?
znJ<sIobgU&qZz`BViR8ZmmE{ojn&Gnhqq>hb3H)cuE@;SMf&)s5%ax+q!4AePL9lF
zsH-S}HSRT#Ck@rxC)_=LrVk6t5a^F4km5!Htj~4Z&A}!IXcNE}vfFH6MsGXaoa1xz
zdcfH%o82N^W@l#$YAQ@O(W$5a#!)c_BphI0?M_&N1hdG+8JI(JIPAd>e}Cn4G{cVe
zWr<8lSxoanB9n@nN!4jLo34;bWZDLKMwaL)6_?puX|o|z6|hR7DZKZ;e|SaHXlXWn
z6Y;1Fxq4D9kx&hGKPG<BaRvjLV@S#@eoohb*WC&fm5+#l+owv;HRmKiLtGiVg3U)X
z8^9BYc@hSrld<}tfHeJb@ye#pyNG(KvE_=H)g(qY;7&&(iZP?awX{ZSDo_(4@w(ux
zo}6nbgm5ZpllmdTYswD~tYDDutBjm@HJ15f^>-f5I7hd<Boa7sW+>APnl9v_zmSBl
z@mdy&klYdY^(GT1->y_7bc*WrgArw|0vG$bxaR1L3}To@<K@(<bt5;)3x3cJ+rf#U
zz>^;R4v!Nt)OQQa#r`Mlet@Cj#MYwO3Y>n%v`DA&qo@Eti{eKTv#aE{ZynLVXsK9P
za$OG4A42Iz7jBXC8R7tZi}&$0FTm>b0mujdif%{bNM79ESR$7w?9Vm1E=|1O`%??3
z5!-CZmP~Ls9x(`BMJME7(jU@3J3+yo2WUc&uc5yCjgb!tIp|j^RBx~VMZ0q_WdOL5
zSSJ_E1xlRk>=!%pt{|ZYkpeJrF}oaAE{|8cgK5;tbQha}JPJNUP$VK~@F+pDeBJBn
zOZBd}2SH`pa7C)?<GZU{R)^V$BF?_xI#b2eTIVrJmSRRz#W*e7>0A1Q@*i}bm;PwV
z9fJ1yzJ@0cCwmjj5FE{1A7bs}S~t!hctWSIahN%sC{SMLy<l{DkuVz45|oz2ym*p%
zMsF%&$<z6MZ%WJl(q5RaeLB3!Y?Hkiv4`()&eDR}J8bIK(wiWzqjz)aJ*X-xcDmm0
zibx&9(_%52So1saWn4(ch%g?74F2YRPga-R!GIr;Vjm@vcxU!|Iovmr+^><yuYR!J
z`Sk4(9Iow?%Fom6`3GD4JM;g4O=5(I=j;#bb!C@V>12lj^cTnzq@NXO8tLh+E-f8h
zokD{8&d<*uK75#NExa?92gW}hKYq;Ar=hOy=I*Z0PleYGcoD$+hKX|jq5eSZF`zl(
zrg0?+=<8=1$y$cXWR-6owqP$EW;B`pbA4K2=P6=LxMywoB#=CSkl(U-dbxQXp+X$i
z3vN#vZ(dboS8!k>@jOBwQI(jTh_@c5N3na?D?XUAtwb0$MVW+hdU8{@R{47-TxyLO
zxhnJ8Ar>dt1C9#q{x&@`(;1gjXp2$4<~&qoI+nS)cV$y?+30cIsCc%c`p^z>nkv^&
zzcCPY+S-oP>Qk6p%#W}(_<^`8P$;gqf$kX5a_G=(6??-~T(rVPCBpyAlYHs3-wp?D
zQB3a9>R0>;za09+e@0dI-`?KFp-0~PN4q*Z)4xe;yab7GdIOIKB3Fal1(}pkp)F`R
zMph>YQd+WrpkC^1SS{?)vBAXIj@Oa6D#`t@`ms-0W|+hEp7>nzS1j?Fq#JV3C)y2f
zhvx$_aZY(0b#vk>)D-ipRCwXU(G&_UeI0(zr)yc}*Im80T|sFdeSlagDK6abPy&}_
zXSnDl+1<6p{XV-Uy_msJKi6chd^kL2^|Qk~<Z+krTA}TK=}GEn;P&XYOr1^ClSPkL
z;b9t^)BPcC*Wz#Y4MQJoE9a@Wg+U~<UAG}J_cY382F7WcCmo}<%bo$51SQ$B-u?g@
zQ0sm%7|31$RG~__+O1_Dh4yEvo7^`gL58W5O@tvan9S;U)rWQW@Zqt-82Kvdo{(%t
z8JI>Ok;ml4{o}LqoABYbEdx=+HsbVBm?CX3$`@6Zt!|K8P%uRltT<|qaE4Y-BvhyS
zW%t9Dn>vkpIM5ygErtEw47*%cpt)LAdQ(A6QR-(^g*v{vlSw+QJlQ%1xdlw?D^Ib5
zg<AW&vA98e&R%`D1&u-@nSALQhoswvb9FZNZ1Fr<c)21}HUI5IiAs(0t>DboL|y;(
zDj9U(GH%{(@4JU5A-5GMTsN3177iq`qhLAg&#hla6#$~D9dX{C**u*_9HXAkkTC3k
zyI8AvV{h%#vRxQY_aew?{t1oWc_qLmXq!v?>YpVYD<t4gCySt^jQvXNngkjFe2bD9
zn_oc&7%YMT<1*^=MA@LLwePNeRb`)|)#7}*vL4Xp?LTzBUZ6xO6&uSa6dY5cIouDZ
zt|}@j4O%V9Eao$4rW4K17Y^5jI8RY9Q#rtl6Q{#|<!4r@2o7kZ-y5kU_S3cP2!I>w
zSv$!N!cAd!^+A^c2=DPe1ps*IzO*kl&&wWK{r&L%e0LtwnI8ov#de2_W~0yWc9;r1
zZwAftrHjo}`a1d}X(MROXK=?&W#uIn_s4P-Z@WVXflkU=QXT;(`8%zVmO&W(cWt4N
zQa1XlDoWzZFG8=#-jTi;n3S8ws_E+mRE+5>t5I65#8>`K=eDwzytzqF(eE6k?;4%Q
z#j>HvR|oT)*%f5jR6c{rGzmdLXBC?;raquI)GQWPnPIcp+q$IJ!(%oob=sEo=99^B
zNXqCA_V)F4G@JZtNP0L?AY^6L14P~<*&?$!5IW>k?{*-gEw}5m(YYB~Zr`7+tg5cg
z4s7^3?}AB4$mS;9L??y<Dz(?pBv#9_`YL$1&8A#;@MMwP#ZeglVv~nFxl;0@trLTO
zje46bS#RVzn+=zn1M}V$l3#t+k}`;nRXRPtP@Y}wDK1C7{68~6Tdy(K4p+iiK0J76
z=dT~rM?_8iZ4z~>MyA!bjfb^N9QI+j@P%``N7dycBhqjdDik&fQ&!NKekt8>2>JHy
zo14&I-9rlthzp`Y$wA!p;9yDK$eLC7`Ei}qv2Odd+XIa>b#^kL?pve_Ip?r8Z`p=g
zNnBQ$T&-g2mVU1Dm#hc8PN^pTI~Q9sMPQ`8TPiu#p;*H)q@t3k`(z!O^I49`a)KIE
z%JNs#*=+@F=Q;zh^9)>6n$@o~Zq73$BI?zr%fU(q@bpbO&A)67S2poH<D7EM?5?S+
zWP(KqD9M`0tYh!~nHRc;9MUeO&rGm<x76N}d?EAoRl{qP2Jq`~Lqo9t{Jh4L1o?;O
z<m8~(I`6J!=(;iZ<00e~Cj83t6sl2iK4UsLkeC9ao_O})QprJ4(Zwa-KVFbe9rbaP
ze`I83xxcFXH=`Hk)mhgczSHvFj39W|Khd|~<p>9pkt@Ds_S$f$gDfs!)KkkWYoxoe
zfBIBuk;LIWGoB}Rv)->{b~Q22DTMw$^II+CA{k5|9%^Xh$x2ElC%?gXGsVJcxtI>2
z=sgrliizpo-KogQ2`PCg04pY(i)XSZcbXnKbUi+7?&<HfZV=5xQnOuw=fRRw@{anh
z&qBX?nT~zVm20R5N^7079h&%rd~&L8vQKW8mtTKBe8D50{VQ5H#oOdELhauPsPFz{
z^hA;p8Ynn+>%<?aa`Llr2=S7Vk`(wD{e^N!>yo5R+P<hXB;Yi2bVlSoU=s-EI@nDQ
zv-Vh?aXS~W(!9NwL^|JHtPqk~5TmoS?00uXK0EpNG-!dnWp}m#R)>N;$5UHYHA*Tq
zEI;YA2@jTdr`6;U6`43!$KNf9&!JxDL6d?<>+0mRwYzP84?#*`F38I#CCOP^b0hpq
zV)xiLqULZRiQCptDTj7@ds`}*7kZ!E=;3*OxhM0P&Npg&d{=2YX=H3DFqk4%pmXp*
zLegR|(|Q#QtAZ(2Gc$A6;>Fz5RDgGjh)GaG&_~%Vh+14lj9Rauq%7(#{F!>boL|w+
zh*TJ>w1>;dg^w_f*mxj>&W~LG3J4Gr>F?>K5Ec>X?iPS#-e00SDKYY4oK`qeF%89p
z8l(p9iJg{w*k+X5!+f8WaILZyHn>NF=B?_vx*>tKGsz3+deGS#ppH_Dk3%D1`>W5f
zs2Mhv7!`E}x&$I`$V`k)=Ib0|iW(gkP2fFYvn-bE_8WoW;cW-_4UZnRNW^kcv<zul
z%~#bo*bM_sg(0u|F&8s))eyRL{q5THs6jwXM^}f_)n(v2j=+(fhy2exFE5GMNv1nH
z4d6X8HMJiL@sk#ejZJp8cW9L>Ln$^&pC%&{sS&%sEtdK(Kzasu{Hm?2#B_Ehu}3pU
z7y3)YVA-(;*5AJ}7|+*&^SotZb)Y9FPDaka6do~QL7A8S!Dm-Z^kJQGNkzI;rf0!(
zM$02Bf0P7)p42Ps4Qvbh?wtkv0#{VI5mDWHx)aO=<n@+SGO2Wg<Iwkq@wo9|#+VG2
zxL{D1&;m_zbrcMGx4pB0`|e%OM6GKrEScAGdZkl}kf#p@%Q12Sf$-|ldF_{P`k74`
z{Ie702Xjr(=Ny$!1E}w&tKDJ6^T^1^m>eaumB%-zcylUj1FEsp&1D%js;cp)uA3}H
zvr|(upC7$c{(?WUNjUl6Al+qx0mOhrU*~NwuN*;yCpGtX0#t-`2O9%JV|nWO&q-Z>
zddKrU0TgPJcasPi{*8o?`-7%vBy>W`va}@=1Cp$cPs6fq3RqDCh1C8&0wUT^mBfUF
zjZBQb2@0&=^R6TEc*1y4<ZghW#hZxwg@yFnut!B0xPc|Y|6W!eT)x@b#``Ni<i#ht
zlHa_kO|dvE-*Av_SJtVJQ(LaC8Tp(H%x^PDf3kiuxfWk}gK@Vn&DO~}0EGtq6^NOi
zC+!~1f2}S~3Vkl}>jC!TpnuD(4<4i{dmGAMO`~21OvZpL%yD~8g|D$koyHAnYiq07
z=pqp0Ii%4m_Kno8l(NrgHpMiS4z8>vGqUNn%<>6NfK^fCwj3gY$;*z2`|mryBd2dg
zF7T#&bshG)A|hgyJ;8YW!Ts%{KlugtKaq33Zzal&{mt>U>d}ig*fEiL$W3V}vd>1X
zF^w-db5?t>)1;Q)Y@fu|@*iFEDfpGL{CN-$5QZylzRBrX1&u<+h@VWaw@*X<%*B7V
zA*Q9Jr6TM8qB1%(Ca)-CuoUu<lyoB9VD}uqLAp-$3^!a>78Rkgg)zy*U??gks92rv
z!JN&9vB?v|{|ve)W!$!91H}yExqtWPhb4a*ud1qcKYhC8J)f~zy-B-hHkXN`=6Tmw
z^b8G;G3zX%K<UZ#cs{G~Od<`PdZX@KM_%C8#()-=aUW`SrNyGBp|%mc-LPfPET%CH
zGJ)=J$TP)JUlx+wbVJXV@yYS9bya+w-m!JX`K?$`psCE&?=ZQd*-E`W)x+k;ES8H<
zgoVN7LH-A!j?p^PmrtKQr6i}Im}RSdt18+;mDp@0p&$`N5p}@rGO9!+M|8aL{jI|e
zL{zm?l=~xN0v2+EgU9r|N2zp;!NRL;+q^%I>N0?ws$h@Xscm9oJeUSAJR)Moaj((9
zcYPpl)$36Uy(hP5N<v(GU0pN8qb=K>>h$zJ-IFE+pZ-$qJMSsB(Qx_M0lwOtdSV_|
zrf10Bo|(=B#+x@c1q&~+<{G`lHm;qrGBcm6<6hFFig7X$m6*v~9L%`^S-u>R-)WS9
z|5wkICMwltWgo(D#0fZS%;U9aw@;;N{^;xMIqVK_3EtZ54K;Uk{Az4$1k+0?ysqK+
zV<M=gxcI!b$E}RJV65Oo5r@mJqjT4hkf#Q4L&JXkdZNZ|)bkf0;BdK{x0sFB^Vz<Z
z4s>1K*{7W0Ky{4VUB^?D(rlWqHIGS5bW2O37_(g^g-Ry1^r_Wb_4?DVlF586@IS9k
zy2*`**eo8)Q%f<yjEXE?bY`;aFv@2#9p5;=g^c-V6xdD@a5@}rE+UhBAB8|0?#HgZ
z_Z!v=CMtYCyPpsK(f~7S|7Zjdz>K~Wt^RDQ$?eRic;1y(t*Tk9CfV-NtSK;X;9TSB
zY*wJAsA&BCZ{vVU*viV&JW1eDK4Csn?Q$DEc}@$r=?i4%_X$aFtLtaYqgwEqw_qH7
z>noM$Zn$4+zp2U0Y+o&PdX5iMZ@fE-gC5D~;e36Pyq}IOrXmnE$Y^hIwsy9p^KrV*
zt9x+hYZ(pM9Ve5THi>V0nR5Ne&T#?W1;NGEcnn36Drr?na{bXx&}r80h117A=Bmo6
z04K20H?j>IyX=gO2)Fun6vj6XJ8Bj8ZDTCU)`wR~N3L}G88-$9d5u-A)hMoRNspM2
z8&mC=ojJ1$loZs2V)~x>2qJ|fgIf(*)wJyqTNBpRqHpEP%9U#<=Y++a;2{XlF$rVE
z{G6wAUDg|kPe~GWToQ&ULo}!G*_|~jM5EF-Be?BDw3??q*YxMF(WXRyD1|QQ!Sm`a
zw$|r`=!{B4r^rKoU!cA;_vXp0B)%b_x>opLW&cA64!p+U)B62z<0gYMd9d5JT1Rs1
z`{2`+_hUp@mmvX^FwOem0;zkx0?Z~&GxrF?Y~SFNw5It=^B8}V)<QNo?a0trJ@D4c
zEqgP~l2mWk;BZ5v(NVq6@p+CeI^iO@^lAPkjk(^!4|A;|m!Kx3kkR$*5Cm61*6lM?
z+DbCJrB3|LLz2727`~@5SNHdeBR=uOQr$A7FJ)NB?M4Y}XpC2R6DUx4o&Ar5&USrx
zQJNoT9~A^hqx=)^u)gkd*z?xb9Zjk?xGj$dK+L8a`E$nmu`SgbY(S*JOp%djKu>yx
zj$dYYwUYNnP^P0xus~iUZfWDJKnV39BTvELr1CyzT(FBYvekUCoQHup(I%G}uNqNd
z-yZ5Q&&W738+#Aw`<c$&;Axkk?>|qQWjOD8?yP6ZAGcJk;mSS7i%K|kb2qOh9~~9(
zMz6yT4ktH`XLHFd2sp)tNnv7@%{v^9cMmVq-20IGrcXI`t(AFQ+c7dRfSNb9LSJuR
zZ;u<SB{MS%3rx6wdOy`LdKa`m^ss5l1^IF?iHF{F=W^$nkCzYnChyTzMYil+Pqs~X
zxGX-0{q1F|z0o}Zf}2i-4YKoV7;fc$xQ7^|XJu6q5^{w46oI*f_dL0dx_n%nsi=+%
zAqu-JDI6Y7bGbxtvG4Uhf@xxkbJMggW#s7neFN|3N^TnC<gy22+wY#GW@dhCUA%~n
z$d)ZtQ(rH1ehaX&fLO9v>9CFv=ojA^Gx(KSkR#;#n`i1lOxx|I6ye#9uE)mOFwna)
z%)RIa>E`|ZtWy17-ROi<ColpM5`+94Hs+;*`%L=w_BOsv8uhltBH+IEv}BB|9eQSG
zcQ!VTGAOQgiVo*_T^mK%yy&0YwL)uDFkyb>7`QM1Fa9eyIFZ%#BpR(?`i-!q%-zLu
zj?_V=ZvTWi;X(_e%hZF>w?!MY>L&D-&zd}aLU5Iue1M&^Q|k(rjg8G4!I#|D@TH;U
z43s3zg*-g&%KKF$#aYLF2+Zp@6&s{gx9@nnsM%^T@O4Jluq7jJW8tGkMy^UM7fU(~
zwu_yt(?>1HPl{=e{#syf+@GjmRXdogy4i#g;B0RTEJ{iwBmgLj<IJyNxvmg1LzC<h
ztt3Zv#+*PPnC%aoK24}G>TMAn-W7;~tIRgKUqDS`x`W=o$HU`qA(Hv~P#GPOB@4l`
zUfmJMUJ?^5_xTEqlj~BMZxSIC7Y*9}SuVqjWmllMu2%2;b_6TuR4N4?#(!P!iTJEN
zByEfn$LE@!n=3yjgV0PQX6A!-wkpYxAHH!J2}GR4X|HbHx?NM-jZo?1k3a;cvi}HG
zD4CG^)f1Ea)lBR+4dwNpaD(%TLiGInnvdeh?<3OV=Idcu(QERejNkQYAq(>7*C%n5
zKt&yWdZ<+>w^^~NVm4p9QQ_;_YI?Bt7!xHsGt+FkG<&G}$+>u#ZVv6daYMFYQ5zqB
z^V3Vb38wHhVa;YMpXEDm*OssRI}-(myZaI^hL1lYjf{@u-fgcU>2*nE2a11{DKlmq
zh3+aITlSnajaK?S^-3}}HWIe7X2r?)&PKx=bwW`sb#fkrCNTT-me=JA#A`V?Y6Jgr
z0RT_-=WI`=h_XM>oMl-xO8eU3;#fGT=4iSjlcV%)?3-&g*;RV-uRnHm;C4O}l$9-4
zz_V4`jj=Q<s&hZsnr>*B@?4Ey8FUy9uwUL2ad@3{dU?slVIP?|(%=2^u#AScwvn~i
zU}bleq%^#^Czt3J9O}C18DRaHE;MIcU`uTXDHhE~MntqnQ}E|#yAL=1d>0cwx|C{J
z?{dvhUe3YcLfMy37W}@azu(mq!tJ7b4>p>~8-lmjd%gUW>Md?R@Kpx*X(-AwkAlxb
zbtURM;QWs?M6dnYyzstY&m*^^Dfqj#yx<Dz)EJ75HChOk$(EQOX&^3Inh%SPi|bva
zxxWd0^7L703LS@daHjq@r+3_2n{WIX9=AMw&eaZr1`e;ub61*VuF8>#;q}877c~Bb
zJXgd}zJ~80eAww^tNAyTurL3%m6Ovunk+s(KCbrL)F>;J09V+Ndb3mXZ74G0H?q3M
z((5L-JAH5(!Np!`;QJ5eAqj>yHvZK2D>jr~Vnz0Jo-AIfZR6XvKAtnaM%!+R_;|1C
zU5wp+J2#B9f7ZV#-U>0#8IPER52oGf@UBizPwyS=;!V<$kdX{4b^q!eHRhGO%HDW|
z{pKDfYmP5)P=dafyjbU41UdBRlnAFjBKM#RUSfCZd@_cG92nqt?JxD9^Vf_dy+ps)
z(8DdM?sPs@L@!0MXMPqrqssll77oQfqjX;k&h~dFO~y?zYnXUw4_t|OBz-t*OZan&
z;lfgMJ(Kzd>)?&%YHJ&POGBMyAYqTI;ken{)N1iadCm3_sQtGD`W3-lR+h(g8-e5R
z;S}`r904D`g>q7dyq^=JXEF$umuoLIl*mw}Gg~Y(mFcHcup|FI2!$?Zd7xYFD;7=*
zU&&N#&?GLfmoAfrl$ZB`<1m{>)zDz{-hkakj$P*{1<m0v`uiV99yj?JY6_~V^+O^{
zIca%yAU{$N!!EZS#C<pRo=xBB(Btt`76!(9i6YAJ0=y?kPs^F}@+e-su=eJlI55L*
zQm%|(G^G2SC&$V{s`~Y7*vNi5jk6vLib8&VUS4kQLj8SYQRXS)=nh}-c}0#CB@+@;
zXFx`m#L#%rb<mAu>cC*Cp@irPIiCTZG=^$h@bQpARwdIX@}r2G?w7@fAgBpMMRJup
zI}R5O^-?VVo!h*1{CeM@HzIy~x#;@~W5;vX)|nr*qMU)`Q^(U}9gvD~SZQtm=)XGo
zcUrrhEqT0m6PQltxt{FK&ezjEMS%eUS(}8K6DtdhT#dFQM~~I)&Q^lSiFg*E>%d@5
zl5kGF(%x<=MaMrK<#y|?=?#QVNJvPd&gy*F%at-eAJL8VYH2ac6~<?Z)ud@>(DKx6
zT?6I%FC5$nea|;5y}iBJZgFZoB9fBfVPWepQ&DKLyhchCy*yf1n3wj$KMNhtZa&<6
z&c1fFs7f%*sJmQq8i9A+D*0D!A?oO+TNpMVRvOy>lYHb-H#TwIyu`IRAEVdItg<@x
zFS%<5X*}lCUDE38ENgN3s;x6IaT^m;)l_+HEn7)}dBOzl1k+5V`DS6>8*+GBJjmKd
z+k0v!es)sju9vmnh#df#mYAZUVp9E?T8+6Qd`UAu?NfjEO@9Y{`(;Ae8@3~$1#fXV
zE_Cl6gi5IKl-6r(y~-YlrJ*2Uwh`v_cg%q%_M=B-*@<Z0-MnuF*ZDxJ%a`gJ{1I&{
ze5*QF!^g$5wYLXFy95V>Q}I1LN2W2b!^Miz7I&Z1>r6!O$_WNbpJ#P|YK8TzmupQ7
zb)rPrbXdfuKwl%q8w_%__d^A?))$aB80#SgtY&e%rup4MtiTJ-)Ky6ogSc(`6_c~M
zC=YV7WAM4{23`8Q;j1LCfQr!$3dWPullQf)S-*=ulQb_rNfr#F-IBs^@-dd$O5I8)
zBPAUYLqmgtx5i;Fe~v)p)!y0K+Bj*HbzipkQzBdimyoKrc3!+V?!<q6n>kkHDy5)M
z1-O}|i!TLaUgk)>XZPIr2GUcIE%^KU+gW>bd#c+#BfjGlRQph04&OyT%nCJ)3LJsp
zb8|0<;cIBXqzD47guWi?Y}Dv(et*j|w5B!S`n(8pmSWuw*2yh8BTnIP&@JK3EhU^H
zR>$$r8<!`hOW_R*U7}Vm|4Gc{pL-3*n`%-bBon$>nc<vi!Qs$l;-s}XDh<o%5>IX8
zys7yp7^2thFZ+$n^^UmOda34nJJR`Ietxi}1^Xg!+m1#Gmc88F+~p@K-)Xs+qe_FE
ztPQ*S`%#dG1O=tVc<?Obo0!n3RvXsVofbFwPO)2|q?r|fP$gJpGTl-}Qz<Mf+qXFB
zI|5;6zjDCm@Uw>0K7W2WQ>`I{rJ&H40iAW!SCehaDok&~3~^kt+v$=>Trs+@{?)Zg
zDzPpsDmwuyu=d!TO0#7>_wWPk80}4DD_iTo6H`v-18`C5>?HA@B|lxP(1?u8#3a$h
ze2V)Hcf43mNnHFFy*H*}v!l&>dPA;uC~Zuka=&N67a!M~4xgZeyHY}Q--x)d<=s^Q
z9Q6=Q_qx#?|EsG@>F+(s5Oe(b*_X+~%(ps9elLzOaUBk3+T%F$xj%kvs#6gYa&1_t
zmOZ(VSTe@k{(1N52PBpfWcYz`pX1QKst8mmEw(vMt@7HBo4y-Lm^f>av%Ve03k?3r
z5fdKHV}~%qJ4FY%TU!g{iHCMTv1Z%r>FLINxstC9!AU7xjj)NKLxr7t=-jpqOsg`G
zBXcgU`QetS|9!3g`kG)M?nQCz@F*fN>3xIUZeBaS+k6v*Fk9Op(h{B+8k(A(-WTZ)
za@HmosZ@eM%0w%_Q0b`!iaeY=b}@(*sq*=11kS_#cRIe5_X7@n5_Op{-Wo7dt)uu)
znfQAj2_vKJb{l(uQemCjsJ{&>vO%=!fB{($)>hZJn8I1Xe7Q^f-{y94Wex_dXw4St
z4VhX^*F`r{6$}-`AKR4Z?ma(=#-UWP+a6ydO<qJk?e6Sa@I2w50e)-rKU!3*{~uRh
z9aq&BZH*$JARtmwA_7v<4bsw`(g@PsNP`GSOLup7w@BBaySwYq^{xA!^*;Z&zkBaF
z?z8vWYt0yQ%rUvb4WwTV#BjN{#jQ0EXzJ5D^mmwH*mYBp&(_)nJxt^$PVws$uJ#Fv
zn{9L@zFwdRb2QhihlZ@Rg2Y?Qk`2S4Jd!qvdwa5WXYYCt6yvqH+*Py9U9&z8__7jr
zN|ZR=81H`L`!d+kjF1!^zp=7Xso$=X^#UVGGKnKxZfL?{p`4l67kYAad^uVwAS|7f
zy^_h~a?Ycca~Iy(iDV!>jFT>Q&1%obw}5ziUH`RQqf1UWs`WP((EZ8RUisy>AU`Q7
zvE$ow5$|fpwry(8w-!8~X^3d<+D}F{2Jdm^*grz({5|G)0LruTW9(kqt<hoP40JXO
zV>Vcw%NmPO!gaE<!$lKQQQ7#lC!EGt4VEiYQc*c?U!ct=JRwbolp7?w$;yU4Wo^n9
zq36i^xQ>uVQ5U(G(h@dr@kJ{A5W7MGgiC5H1(ybcp3Wg!0N><tzL6=;<G!bCkgvAv
z7DM!PIGE(;Il-8?AD1+#+Ml%Xz1k3&oNCZ-y9%StKRm$kBvkgy$98xRRmln%%N1v}
zAKv>C#rc-n!90D;Q7!cV`3h%!plxG#m;pKy7<Agp-+6lBIo5XV5KDM;x9qsOIG>(P
zv%0pCNkRttH{uCS+)j^cPu1=mk0Ji7r~ZeV_3b+Ifm`JpYWqCf(1AM;RkiCmJq%es
ze;)olY}uV6=LxZkMW(rO>BCJ1oQoSquE*|PeDDu!rx@vTclK^q@CYzeNtxI@ej$@f
zA|fI(Y(IEJ&AWp@E;_~Ixe*GE{d+c|I|O;kULf=-DvBK!UAvkDmj;PFi*jhL=O;gG
zv|X8xI?bmTq^?ttkdV+2@EY#sXXJqpVIUXi>FO~KkHjtysp5-@-o?5LX69uHZ3Ma3
z!E&HR^hMF#dVe>FZ(AbI&p9S@N(+k&Pv1xr{y?YlD4H%&ra?-Dh|`;f2UBruG$JBx
zqrvu(dFJYQe9Oqi3AO^s!$G>nMtQj~@tD}JxEKyH-d(*^GTW*-_scX?#LLcEn+R1k
zV{k8rjum%++Qy_B_OL&INVeuGxx9A;Co%);A-3eU>QHnMD;tN$?+IPt1l#!!o^d>K
zVvOFG%*oAczk9?ll~iwixvX+^nOD>CFod7P=?Xq={nNvt+?AW^b+S&fjc6x)s0IF`
zM6F#Uv~hH6KN(4YQ&<1?7Mc+&k7K#Zg97w_Ml9aYp_1aLzdn5{^JGg6cq-RxRDZu<
ztQc;_Sqc?L)}|FQy04V%uKE*K-H$6bFSIyNNu`_Ku1;ln+!+iTWW@xAEe#yDJT9!M
zj-vBD4F3fs-QB=p`n53Lv{|ZjL1UNZd*r%;%HBH-V%)Z1RXe2;j1LVFfI!jY<m{6#
zs;&t%Z`<AaUYW^N-=AICvs01bY7zSulO#F-ji7zJ{_N%1>CxTdRTE$O8)*FawL>sz
z1@>Lo?Zah3;~qDbCq#I6QQzpbCfU<)w6nv7uHMdW|4t<r2VYT>3W|=)1+YJbQ4kqs
zU^qImVtf;_wl<-iN@Sw+R)-Sx3R(YZwG>MA0l6)%iCYuB^J%^enoT#`!*V__Bo90O
z0pgs(Hy=zU!?)2>3EmnSUn5k$()1EJVbzhQ{VFhBgtKu(tTe8`EN-|WU5KIH#c91e
zY>?2+$X;l)OU(Vs_Ryd?WmdZ2CVLJvQyW59hc{lUVdMS=tAVD2Sa2dNE)LTN9Pfd9
zi?7hy!*TC_WH(ZdSNb1lpx6lCsJCfRYF!ZY3SX($fnwhu@cxeFhLs3|8y+)fSRb-x
z6}VP@DON`G2Yn~U`(LbEy{n_~8fCJ<l~q3U+x@xTQXoU}<p|^Ev1qcpy|U#Ls`~(K
zNMq;W@4^|3hqd6=iAQT&j97qtM%LlGez@Wj@8tSgxqgHo=%vB*pIQqH%ta_T^VykM
zOh)>u)tay$ur~<eCqM)x!!;%m%boATCpmF0RewJf_KZ+Ea*xwKmfIvLuC8u`(|0d^
zyprCc+H}k*&q9AXO}ZKdAH^W4eHewHURPf)iNpS)JN>#sL`X<~tH+L7ts40T>u}(R
zTE6w0d-BKyPe@wvNkAutBgRP4X4J9!xj>D^^DR0!!rVpVCmbj3MR$akulJ0GdNqgH
z(Y~Zak>Z=>UjG8DVPJB0S9RAqq++bk$4`ga;7Q0x3#UrFDeY`+L8;dDWO~ht7@@PH
z!*oi!+cI5O^=fb&S>VcUuumi#dI^9%gtPq$_fMR*ytKx2CQ07@{@WQ=ZLEbF?CwJh
z;T(3k*8e}u6N~6W{F&U^Z3@*f%T{)`8r6|TrRlp}poo`~x2D?HoHGNZ`>BKvA5;2o
z@c$5KU=BCZ9!-s3VPc-`&R(rXHU<`$0<0N-4+wBxCQzd8P8pr9Rw`lcWn}!kxpDDN
zm6wyNGF5IXijRtmi;9X%iV|Ae=eiEW9j2wHCwjwiwRBs*zQ^h0ezXh8?Y)o{NPA7Z
zd9<1uSrtqpA6g=B`3ekvSHBwjXS{sGD-x1#)Ib6A=g;>*DV3Fu=?d#GvJjN2kWmns
zm<qNw5AAn4m;<5;!=ggLxViDn69aOmb-T2@tgN&&r=2_bv&@2mS>Q%SM@KXDbV1l~
zKPO|^4uq(ix&HgL>HqU<5&{AN)Sx_@pKl_giI0Ysm8-aRkIckOTtjrc6Fs=4t*dSV
zmUi@Fa_P2##qY_Jtt}&1Cp#%o(IrK>_?w1zdU}}lnnuXTl38ES40-|&>B;4dZU+F{
zUFy%7N%^t~$qhhp_;_3r`svF<*zmCDiT@K}bt~B)O!+2(f{J3kX4`R#tSAKq59qKw
zpv^PhR*>#4EAvOhJU%|2=VT9l!I-qPJ|M1CU}kPC6bbUc4vCnzZ{B1Tq)q2rxZ4NR
zIVpl(?|uas{H9}RlrLCSc6`J`b<_rzJhJCDYG}EG$pr3!OTUTSFfh$tz+Xlogmm}x
zWMyR(DKjJ+H#C2K$zF55nTzCj=}6Jt9k4N&Mb6GfPDjIXb{9TjWMm}j_XM=(r$wPy
zECk{+wu0h7DKWg+e2G&pN-v0M#lHoB)@JBsIRf)!nRY*qGs>*<4J9Yl&eV#plj3P^
znO=SsNUuMitrDHo`}x_hc^f~f)Oo)xKPiMs1m4XJ6$`CtGUiu5Q4I?VY1t1?kWoJV
zF)eo{OUsz0rS#YXNeXgu`eZ$eXz1wjG71t>V#~!5U_^IVn3R~<jdW&#sgM(g8bG7d
z4bG~*z8iHE6JyAnY{0d$vbu|YJv74ljF}K!L{rmKK0|I4swgozt|N%67<E*<MsMe{
zIHG<=UrL^jq!!@$cd=e~4-V2saF<7V4;%P6r}N9z94~+&sn5B}5#h$4I`p7qJzV_8
z)-5E<U#yjyHTUc#2zqh-ONjo|#bFMyOH18iLqi8{3Tuc{Liw-}fH(%S;N-Kvw)vvI
zrpZC)PG@=H{yaOpox$Sbn#dI^EA=rR|8HJ349uYe*kygmn6y#<sNcXGvMwQ|^uAK3
z-sG2)ll!K$;OFOO#l~ZNzY{5c_3v8;U%c5E8|)vNO?OV#<ht(Z?)LTeP2{j6q1(h$
z9M6?^FKxHhjNf4`dgprforQ#kh}*m`BTF()-dT$$Sw1`D=g$roi)PEqz$tVv2YqX;
z0OtfW!2w2AkJ@`U)%S^ji}mg`LxLvCE>DH|+?85YVLHR<RFekTUE_3(BQx{<h%;}9
zd1G{;dQ4m#D91KAu1N9l9E=!*AhA8o802Tc&=&aD-3TT8z%e|MO;z?Ai;IgB@D0q6
znVgt#-i;A$^9i1=bw(=g42oCMGcb@PqNngHOdYLJ8NtG)N%RZy1Le2lpGPB2)dp>1
zPV2OXJx|Ns+7Kxya<$t!BogS%X3kDsoHa|JNn?fBv@cl=A-cTxMDZ-eX>pq|hN{q;
z%XBG%I@_J$m4P`tY6-Qx+&p=4ZLc9MtWm^yDRwBOZSreVyzr<$8??pUj}F1s&2KD^
z(ir^hlkBdpZ{gX&%5%-_3*>L#F}-~k_!7WVrjovAV8DFS`l{~1{n+^r@9@jZOF6mW
zz-O;tx7{{hO-(lCWob2T4*&f5Xj;sLAK$LaJd{8*F*er7?%sYwY7WGv&gZy?(^rmf
z9a`*+Q1QS{0&&+LJ*b;8w%3(3`u@RRjKMqm4q3D_Vddm(PFJ3qnF(m#f)J%!+t}nD
z-n6gO)F?|LOR}@G6B0_>Q^57qzpZBY5gHX08Xj(;+$^hLOG1pO#<^oY=QNm9DWfQO
zx|HtBU+4v`h5n!4+k20c61&W3h{(cfu0B>}=FC_=-pf(sdbqeh=gjITiMjfp5zBc+
zq)E3P*C?xPZ;wJ;=jt3>=Do+s;$QYMJUZHW=d4nNaeXK_GlS&*GhD`CriK4sH87a>
zs3`&Ixw)A+DTbd;{9l6oipQb5%9XFy@FZ(6fpb90yA?6y@nBC+p0*4l#~Xi5;}1jo
zv$bGrd?+hp05N!u5FZ}}H+PhpjD(29;sWFfnTmX6AJQbQ{F$8iHEpr<?8e|9kti6L
z2u8GZk99P*x=Q0QWAUhhB0W>^B^k+PCmkJ~)|5^6_`LjF;4&ZrN=i{n!O`}%WrXym
zwvA56P}}@qJl0IrN?b6HIW1+e1qy|>!urZm&ec`chKBl84`SaT3%>VRXmp?g3BPl-
zro?6I;l?m)``=gyhFqox4I)UkZ0X?OdOdEx^kWU2YI=HlgF%9OcX^+wGDp_y?X$$4
z-J4!)+N2~p^PWJX6J1?BSJwuq1hy`guKxbHdW+7lPezO)M@KP?cbAtH40qVsr$Ulv
z37IS}$~Qv1<0R5Ce96?QhYg5K{&=cIT9P+!Xl`B^mJ*Hw6Vlz)m1UDX^vwK3CoC)s
z@G}LmMa6q{_4Vl@dk^|`dx`b1v~PLHoLK(Lr}ikeDN|b?{8>fbwd`z*SH|3L{=>yZ
z<Ske4OK8AQ+Y4x{87-ab8<AweS%3}vIXyYb?-OCKI&q*{h`(vH;IkI@$mKU*yHW!F
zw3dMXDf6D<q2Zsu2;)IWr2!Mf2XUdh`6D6*!~0z>#6t+a-}|3kl=1>U3)(~Lh4raN
znbc3rd%)3s?r4=*@2}jO-1Fk^Q>Ih<=))Vs{}^2u9#2lV&g29>VpkgKzcwA_(B=-@
z^I%^}D0ej0KhJVul-cy;Z%_=wD|+#8lgI2ClMhccmJiRLlgg{Ic(Z{C7osBpCtv5v
zf2FQk<RZ@W8w(IgcBkfYh5d7PDK1~(5$KvRvn{JAtZ&HQ=*~%B%!TGa=#K{NFMD6<
z716m}fB3U3yq9SATO<rxU3ESGE+}s<M&E;=r*+Ez7+DyxoomU*p?pXl|18!b*|%T4
z_y2RrwZ;1fOz?d72>;wZ%uT|5AXwyEP*(f%yB^6M6wo>e21EJ>c9F`NQ?40(e?F55
zjp)UP+^}!{@DBLm)wan8m-YPLWtQQ<&vL0S9aAlM<yvJpmRFg%W}a7CqWm6}l9Pjj
zjct-K^1;79B}a7)Gp)0frUa)dANyrpyUnM>ig9g#TCFPWX`ER{K6YeQmeO3E-Ip(4
zU>`Oytobo$u(Q|VGCzF?+nkw|b+$VtuBv(ksJRk?UjIBgWrlU^7q8)s)HWZ5v57V5
z*xV9>L33AE4e{PN1<e}B7c{iB30lntYr9*^qh(CB8CF({c`%1Sw@2O!9yy82bv{E>
zo^mjW*?GR<^3QpIfq9(03%jXQs4Cmkw?6RDcU|sj|F<HI`ZH`AbpYDpGTJNTD^Yg@
z6BOp;e7?Ps#KgqR!pE39X%&D!-Jc83HT-vfQ|4LYJm@bjI3Bt@!G?!-i+|^s7F1~`
zBJ!>BbO%i3U0++X+k}Lg0i>t6H@evE3c9x3-kZqjpiLFeWVF4!Jl^PxN|ldLVb~p}
zhoMHuVf(YQb76XVpsz2`%zm}2)C&O>sE>3E4Nc9@TU{PwE-!lz_BAzLqrPPO88uUF
z;l8l#Ssc<_9*$%ohc+FRAE4G7RR{*XUUj#foE6sl_}mkwNY*>79V=SUE?^I8o$bwp
zd|1f;aA5MG*xB{S?P5_jp2Z9&^wsYsD3F{Y7R<sL`o!~%tX!SOBVp6@Yy@PSc)NWQ
z7a1+q0yoD&&6W6JYiDEPN5N%cy+h7yk?VDvaIn6vuIWruq!VaR&_!Zo%!`f)8y(Io
zGaOpxbU5I4JpK$`gK$Wah?v-P?G7QJNcAL66)7kxs#O~?n$KPU;{Ej0RDTkeLumUl
zzi=uLLCDJ!f<q6V-WbpXsexLF<y{co1T_{7F1O30F>$NvN}WqY9-d~CiK21vK$Al&
zyLA}KgzVN#0N&iIW3GT6rV{V<&5ZbLT^=qGM`RakHpX!@*dAF^uc*S6mVN)FGy=|r
z2V$W7_hx_kwG74l@j}(Avf1+Mj?;JrdrQlYVww8=aiDZR&pqGH9K&PbSsi^IksA((
zci?(g%a^^iHtUVftZ^Dn`!}@#*t7sxuQVD_0@A9Zn_n7Y+Lj8`OY@A!@*?hs#WD3F
zxm|&rpO0K@*;aQr*}-(9{9@J3?X52|;qv-=RAM3+f9pjg;8Vq9BI?Ij4{h&_MnKt3
z|B^vsu>7-IOiV1op}d~ev4>>3ac82qP@|lNmNsPit#S#ZW7=sb?aNk4VZlDoE@9K_
z8O;>O{>OAg5@s*v&N3JVcw@og*m{mfMb%S_GhZ_T|B`CJ%*^a5-rnB6Ght!5Ka1n<
zu%#y@Rh5`1d4C7%hzvyZW4~Nd9upH2gF^Eq70?5kjDGMyYYG|*h?vlw2`#PWxR!p|
zdq98w)EQiCrlX^)TaceGPQhrATYrsEwYa^`ViXn=6{RF5hIqffwy|b0S&}rjhefR_
zqkV2JZVx8>5^R6}<NshTh;KOIgfAsF=xisS0Y&n(t@51o)RpCB@{__3)i2#MBO*q@
zE8QN;?_9FXNk|H9RRgI95fxQ$d?&lsw<$^>!{xXJXq-+_V3xz=a9`i<9-i;fN{4~I
z{%oD=30S)uaUjNmXa?n}@2n<P7{q#hXSX{!1Oyux{@6(v_eUu5<8RNE=WE=;&%+oD
zv)%$hp~+&cdq#u7n!36Y<~ASXg(kDkoFQT!_q*M-wXp&t8_gB4UjPNVWJLXOF8Eh}
zf3favQMi0oqqx}E%hP;!Fag=W3ZLP#2tU8e22G;1H6nvafOmk{K0D|agzN|5vu}gm
z-K3<7m1IDA27MSU<0i(&g2KYTl!^YkKlevX@z0{RUTr?tQLzv8N;f>=E7qu9S6i%R
z%pNRKt<958ZZerDn5nQT2Zo5%V%KmhGCvyF3k&Vi9MJIz#?@I2{RlLEzpcg3zua;M
z+aDhf2ECi_)>r{^)7RaNHp%erHNU86t!Q}1^z?LZ6wSo&@Rjz)f`i3UnrfwleqT(j
z%|?+>5U%X)SpJ8rb3!_><+jI6pnEfe-CMT>DmK4Ir-9?e^TS=3H@aOHf`W1eHXa3%
zKBABSb`rD}9Jh*ZxH61F7^0%0pE?3nOI_B!6A2g$BqWA~S%X32b5Zq^+5;N{iHfqa
zI6UU>yc@v4hWKjJI;)jBkz4nRL!wu&7S9SfYinzZwHj6HOhv7zfmGPUK*Md~%z2K>
z&bZ|Kx83I$yGdm|pgC`Al97SoY=6#XO^lD*ZM~0zl(Zc*P!?)6haT?(Lz2Yp8usrt
zj2P@kX#Z)h-mGE^=$gJ1o|&7MWE*P`2;`%MxN<~RmcFem6LA_ars85^$hhx#H8qno
zv$C@83`$cdGRDTnC>Yk~hGj%JI5;Xc0K33@J6~ZaI4DSO1M0Cb@H3;Rx;i^2|G$9Z
z&#sG1PHOVZxs2gGK1S5zL9q1%08h+RO)SAdA4Z_7xgt{-P2%#fft)`yR%>Z97A=7r
zy(a)?2z03+6@&x^e*AMGn7g-Y=)8<@wbZnR`q?WV5x4_5PCAOw(9l|!9&=z`>T%Hj
z<?FUAWVmE4UbvqxTw9Fg*|i5IiGP7!T6j~i{kq=b0SQ<v+F}xFVye$2Zxl>Hz7mVG
zm76O%rJ~X|n0qL1i6MLWH!SdI_Dg6;3kwr77LzlT(2-)<S5&&RBq7z)TOA$C&&bYx
z^X4Z#rT{wv<npqC4-)zGZ$#6gB_OFmMax6``dy5tSb!Ug$bgiDl$3((ND2}zHeR~|
z%(8@IexNAL-(R~h>FTDEyGnS5-PS_rNkgh3qld|y_3(leU|WN5zn3KEJ4t3nM1%s}
z*(Is~PDNF)o2n|Hq$Avh_qaa-0pG7b3JS-^V!0HefIPlgHr%e~#`*~I`!g7KS|gk(
zXdn~(9h<Gn)-pr$3~lU}KcOTHB?+iFh9~y75c<+kX{fI|v_1YOMkdF8@!*%hEV$qg
z238B<K`Ny}r%wjraGYwKoaUZ|2E8!vz?Tl=nGGQ+|4j!r)sa&JB7+p1#>U1}N=12c
znTRJNSEmO&wv%*OvxY`SLpUGZ!mmzuqPtaoH3(g-6slKl4~3IKQ>@ia>?7XE#8Tpz
zlQe!&d-lyb1YR9FXbFf8LTrHUp}ap;@37zoK&ADK7cX#!y(lmrVe`N~U}~|@Ke*WM
z0SEeKevFyq?d||qe%1QAgi*g%Nr_&*lIhgwXv7^Xq)rk~$QE=tYm`9vwX~95jkHS*
zx61S+YGc`q7!n_>vpVi9vYB1k{*Ir;pqt(DVhPn|b7|zX6ZygpPBNaFa(dRragKhT
z9ebP(n+tbP%g-AaFVT$7$CF-fg|Qkam#>Edg=hOcN&tuT_363|c!Icyko!jj;+KGA
zPZ-=qRwN{(le079;TqXqtSlS-K|pkAbRNvJXm*pxHJvZZ1RdL^ms=y*V|m+iwXX4K
z8pyC-lJTr~FI?`mON7tO_uOA&A^h)4_UJKR%TvUlKi?kuv=c>rb825@uV7?gaNhP(
zv(ZVV*gVk(c^h?c{iSpg7u6+}quETHxTq-d3yAw!fyz?_)yF9h+{zPnO?k9Hp0xms
z(L$Z0&FZ0ca4^b@!%Z6vCOW!WnJv!kFy?bCx4kRm9`7k95D$Y&jLXs46T~Nt)~9hO
z(Z%;4R4ZKC#VAF@#aT_}XSW)WI3Hf!cn1iF5E9bsWTc0eM~BefGIZ~_kMB;I6LJf6
zb~M_!Ex5P9<YjDtmMpoYrIk)r3(VDtPU(bquIq2>{lmhB=UuOPT+ePc_e)KxNe_zk
z{b$}2o$gFzM|rjqRh&SRX{?U!-I170#&=uOg)269Yfo%FOfy4E=?Okt8oo&M49}Jx
z8P6@N&7~mtq-Jwsvq1~N`FwT*$9%nHPEJKNB6@w(9xy&vYf|0tg@0%+p3$MGJV5-t
z?r8qRxIVSoZ|B<59_&iP(SCxspMk%7xWP&)1(TQ*^%CR7i^J0$;GNI*=F(GBhcb-h
zvtry!nq5w>Kzp5nrQNmVMiOS*E!ll8qX8DJir7$VS7`c+{e~=TFm+IOu}%2gXe3*{
zr`0^?Q>WB8OBJ-(8Jo5G2>s3B0W2-OaxG$OJM9-3+!USefq^E6b8`SJY^ud9-GN!I
zm&ZW;uvoLQEK63BD*u{+fkC2GWTP-$C}h6TWFt&4U^70n$sHXX9n2sT4*<DL&iC+e
z0iNf^CMM#dVzQZWb*cea)IK5jjz>Q(OCU1aQ3SeN+RHx)?sr{oE{;}3(Oq3#HjyHl
zp7FTdi1Zt7f%pu}nHGXmWL5<67bS>`HS4UspKpV$ssV<EUVK9XZqFdQh{hcK2EZ5Q
z3ylWq`Qz)7c*PoxWu}+@V<zK=QANs?S5x62v~9wFr`y#b8INN=;07*0{3$&%0J~VF
zG0$L76U5(HPG=CHdb7E*;=1(X(gzuD*xh1M%6|s=O7e7h4YVKHrr!S`;P`9_jTyQ|
z#V4<DhDAW0u5#@>F&NC2h)oEKvj*K6XFPbn452$aOA$5GS!}!1&sOe7EYC!Qg?*Dg
zefkt|jd0!M>b$_oDX%>@T`3%bK{5oDz8grafBJ&$aM2U?<;(rLy1MH9*|E`4^-`Bh
zpaEmAwy#~TFZOhQwjLWDkJIs(WM^U=0hM4~(%x9P{0%LA%4#%$ZzpQ2pyMJPj7;li
z*Q2xz@CZ{g&6&xk<dRtj>UoYEo14)2Os(d-iDIpE$kfQl$!Pa~klyH9Dk>^!>Y!tt
zE9AZ7%m4-QX=>M_O7kfOV&avawcfi23t;S$^Fq(|dQki*>Zt_s?A+W|{6t^D8dyLY
zjk?;S@2`Gi0ZjV4H2~`Yjo^n4!$27Vg@7X%hs$5i+DVj0HHpp6->pdZKKzv>`b|F2
za1a#~%=~n14~9}g8D78sf_oCRKiSkj)$NB^xihMbU_Qc!jK}e{?6jnW&S@&oZl}uZ
zo(KK$+Iqb`)>F*rRgr-h_HZ|{jHvcK_(Boq`T2&z{CukF4TUS(k?lyTwzf7$f?<`+
z#k*vJ8T9ARO$*F&k~1<$ejC~s>%QTpG4a(aEL8T-Y!A3y;gMhVg)YX7vcxhvyo5v3
zy1m`f+Ie{2YHoLs1VVEgd3i(*kaSJHB+uL%uM}4`ri`2@(4ZnBqBn%_I*H1{lTIUH
zy?y7rF0nUlmvgu3w<7(L2PBZKmo^3zS06uokdwn_cX<I`SA<tT>*r_c5eUF<Vg~!@
zw@z;4<a9Zm?u=mXe3MN#p18a(xPcN#4uTfZdH2PX@&F{)*!c#ll{Q~gp53#64eT@V
za5s&N#h9jyoP>mgh{)Jl-7SU{)sFr+=5$<4%(dqnsRgmG55R=5Qrcv0>Y6R;!Y+8o
zL)N2(v3N(fyFNF+@O0rj#`F75_mD45{nyaF-YBmxKnQVXA;)SZPDls{o%9Y2tXDd$
zxDjJlIM~Orn<zz6PVb)Aw9FaKW<24Nj^|E1OGXqDf^)yr(UFV4cfJ|en>kshwY=Vx
zTDT4&<VmyX{dE{%9MTM&B4+j5^As&=_QVWr_HW>-c)N`j<{Muu-L(#^oUS3og9`h1
z&*$57vuK?epbHjwbATpVEHphqeA@7N>p0yP6_7jaPJ1vlV-_!`&|BM!eL?U=nE;QB
z3!)_;0YK4(-FJ#kNQf<bKj^x<(0l;01O>-+=vGys+R*u23!m5C{Pe-J*=3tKNKPHs
zT;3#8_i2?t&iZG7gbUDoJt&<$X_LahSj{DzkEU=&QU!Fa=PXCbV{2<$kQl-}qH9HQ
zCMKqYgav?$YpAGnk59*8yI@Z=$#C79Ly|@q6UELXIM_Ldx&woPmbAc#SZU<#u|~@~
z^%4F4qJ<h!1Hfhe9X?;|Ox=>JfH<EwK6<ug`l`|%liHPQE+r-9`}gml|3|3Cz2szd
zZSANBakgIWh#?%L&Jh1FIk^Z`&^&Cr7dN(zyIoIx?s9x1S8q>X55kgWI3ZqGg|`6F
zwa~G*xBm|?=dKxI9X&Of7)WAoqbZcj6w}ou!DM1)&ZV>Icxq*J1e~fw+&jk=pVQrB
zjYIue?2Zi4@cp?)PJP?fzFVlcMrx)Y7{g|_X2~WQ$71Jn9;_J`SM~A24RTGS>I#ja
zw?01J9gLi-cgTiyIa{zWa0A#)u2NxKtdY%Gh@KR)QC~z<e7qVTYPQtX^`$JICLdoQ
z8VCp0Ed)4)LMlzhA)kJJ3ni0E1mYGWV8MPtqaMxwiEe(b?oA&}`w+4(h)35h@w`7g
zE-WrCjNf~2riy^uTKD1*4IB`xb;8|;vRyKTPN&TIN~O6Kb#)wY#9%(5rEI!TP@6Bx
zP`XnPE(idC5SqRneKr2uX|gW?48CX(nC94sivLbN$kMn#2zIsn`QqZqEj*juF^Osf
z;BDI-%mbF3)9JoOTg%6}t5Y{E*tqyOIhvcB_FmA|&ul&m22NkuZIAkegh(&Bc>yWh
zTA(;HD%4fz>+Ow$gD1by(NSrCQy%`|U~f(E37c895;gkWnZ@pI)7A9>k7Wt)!W#AV
zbLAEX(X?6#3G+{CYj-A!db+ysIqe&aMzU;2vj-9gI9xt=*9#AVR;tVv*U6G4*Xy%S
zVgYCG7I!9q(olS*sVIWo{*AYEQj+&RS-s7M6as=U2TfZXvs$IOB(tX{-!F8pMXPx4
z{4$ZkX}`2kq{q~JK6rV{OwGFyb_wVcg3;3-idBe7NlE*7CgJL=ZgIT_fRo7sDq_7#
zg_>$J>h)IP+rCe6wxRQS`wfm5((>F?6cjk1iS;o8a6P;*ASkD>ZU)p1wo=F5@jNF*
z>BM(K#nQ=uRBOK#(H*YY^x5iolp;hrIa@NhRQD+Dd|&{&G7~`&4yGsU&QCYnSt`hX
zz+=~8yS7<4GgCV~J>BA*Xo1MY6c($Lt12o+ayWcG-v@m|4Og3+n_N-#!a*<1P8T1z
zJ6};-wRqfhi;9AVmdxVQu5Vp@uvgicne;zWwN5%h@YJ%+3GnJ!KNM+}msV9Nmy~=3
zswx(PN$lk&)oT+Lo;DkU&2D?R@~RQ*=LZY4R8%`h;n_6i<{d&pD;<H_?hb2HHQHW{
zUTuY(4m@?vz*k%DCroK-YW+^)7a3St-Jz>~j`jBvm8I5WlzADZb*oE*H=u|GVAuB#
zjxxH#y)O~!c|mXIN=LAf`Sfz)$+f|t)+66Xv@tv(+dz5Q3doWn<FSJHvuq_fu``5#
z(|sSG82=IW8sAr*F@y{8n3&Pivoj34NXQ~g)+```DdftLzI)dIN#FzaGJ>;Q{>{<K
zoRXplNH~Imf~YyV(QZY^NvWw1#kKhO=xKRESdW@>Hho*6(5KpWDWJ>4)2}QntR)^b
z;tM`ti%L8}-h31_w*Jd*Q?hZndJ%Tuh9qJ1oj^b?GOvyw!Nzz$aNS_GgS9lWv3zq#
zxZ9rknS_|JTt=vM$+Duda!c#{2Au}!Amj<n*V>x)Lh}Eutvq~a=<$Q{Bh2sgPDbi$
zH+g@vbgOo6)D$1Ytbe9-#0qfSzaG{re1*YfCHg~2@d!H<?o+rsUmFZ|@@ams?(y4$
z1K`9OBsagE%;G^L=;#QI&|M4>h>oP8IjJZ5`_&6)J^hT{o-X>s&eUEp?C8t69zB%*
zP;TrzE6b9<b%B&GqLPwwABw{g61rNF1vU97SXjcqm)Sh3N|a3jIAq8L2LTWbn!ul&
zR)HL3_*+}Kl*YJEtmvQKP;7n~*2@g&1s$(1d1)zenW~M);<hbj4Y_PLKkEL?lrhD0
z_!HvluoyOZ;5Edo=#Of?B3d!`GI;14%%^;-mFejlpRKV9c$qnn0^TJlY37AVTH5PR
zIyz2gyWo|&p6?R~83N!0fbw84QC?miI+;|R<r2TGEykaFJFNB(2$EBh9T^{zmJ}5m
z6zT0A&`&8_5)td^0f+#3W_GsHcR&%yW={d*<@y3~%I6zOo$u#km-HbRT=x?2u6H-2
z0A;(2D^#n-2g31ZyX?T^zlMWgVFhs5Z4Vcy0FH8;s`A?`lB-s)>px|L7Ol7RL^RaY
zf|{D58Upcc6vdOzdZeYKr1XWHOigtKV;sG*8|Fpjvm`VcK8pg#4-^#o$8TKV%}h+{
zT`r%`_g-8)aso<hDZqNjQvxWtK&x4bpa0?CN1I4rWFSH+x8zl!)U&-70FxKS$BPNM
zoVv8S^&tu=Pva7c1xNr7hR+4`1?N~VG{GXEzRcnee<KM-23D9(ZFhx!O6GP2iDgo1
zDv`yUU-%oKz`5Oq5Te(s1W@YI$RIpc$J3r^P-|Fvvu<yH24vqrlI`Q`yRp<Jtf!|p
zr4P;-m;LUe)62~vba{FC=^g;iO$h>{?0h=iF*7sRv(0z1p7m!{U|??Y8y;?+A0&1L
z;@GYAtnr`n#PVTh{=)JpC`73XDXEkSpeHBw_It*SPN(F|`ZG`Q*$hWI`hjSy^Vx3J
zqgs=ReN(P_M9#_zkYzPBHF>u$e<;=jC?tTIlk3u){8I-L*bVf@k0(phX|<YW%MAz%
zUz3pu2V6n7>doiiLH-DE-0-+Kr@I?LK|#{L=Lx39txcDvp_c9KTP$P(${+9Xv$Ckc
z{Mv43c9#pt&CLzJnP$UhtHl;>kd9fukxD4Y0C-UZlU|PkDr!isJb?bz=4!0w2BZ#!
z*zpHIqNAaqk)sakMU3T2PtOPZfv-$_=eP_U{idF}`fiq_+T@u+a(H~X#X{20pFgWD
zfXK8_saM%wjM0N)1`QJNc0?d1wciw8vj08qBfv4h0i!eU9L`ZqTgS!}B_sm*wVyok
zo37kxaQq~`#W)5me<@lyFUX}D#wzm+WmEaQ;49LCf|%7T3=DcrZWdc_XA{)bW~w>u
zcTK0t#z0Q=w<Zf@P;f##sw!q(SA<No%^ACd24BzlL*{N*W^2pE&BMW%IIPcJ=@cGO
ziz2%EclQG!7`oWi9C&i~26p=dJdU)E$X(I2NrkGhlCcb#8uchZLh<PEaC4^GK}w3{
z&;Esh(c?y__%8oWP5CXbE$@w(<?jG24*~;Llkq@TQ7c;zzIbcRwao#sui4oKg6lFf
zHJka@>_y-x0`*Y4`381mTqeVbB7%Resjlaa{)12-(g2+rw#GgYpRIR@e!kis5Y1vf
ztJ@o82JFR;ViSw|@!p+YKzjfchBBS@9t!!aBP_GonysmFYyuA30@=0{K_tdJ&@rO_
z+qwc{o3C!p-&NoLaj2Hf&Gky+>|h}~J)P5Ty8;dg3rLr(b_DH!Dkiq|9H6ufr3+K5
z8-jm^fQS|jX<bEy>m&BwWT{tOqvcXqOpLON%gu16xQmO+3y)zyDF*1dqJkVCb!h+j
z!S|uDv7reO&oD8glA?MPUg${F8ja<BWH6*WWY}B?<30h103ZgDzIns&8l(zh;^MvC
z-Ko|)<7QyTvRf@*fK6U14vuMLL<A_!ytt76*L|*&85$bzY$^o=1c9<qSD(aRAMl=t
zT9Pl*Kdw&6MO{MV@WVRUU)2hk;0H`?(R}42T=yN&+EE1s1yi#H4)#V)hy8-Ox~mE!
z#;3^0@ysR(ajKqfLLOzOJFtcV>2;Tmj;X0UnA(5d)H5zFSbD3YVz*4`@4a*$Q6GEc
zMMO%xyu6y4?n<=VC<2SXybVBXxVSj_G*L81CY?0g<mwC75*#ux)q(+VF(43-W?<Px
zu4X*SQUKjcK&s#`y@oedL`q6VK|xkVMoi4#Kul0nMRC+c;uYW(9TPn0Z<`PL?#^K7
zfw=P_*aL9TSQ&~o_D)0p96NH(H<fsomu@t3E)YGohjrl1D`Nn9uV+Pt?TSwN@2CgH
zgF!GAT~OL{!6kM<Ea8Fi#uV0XEWl$ySXPuYx5CEZ&l|<?<tOt`idoph4g#LpGb2-v
zfpO%|!TWWsz5^c+n*aGDL-XwK^hp@rS`cRb`3z?5;e)@hG)x52KR7gu3=JEwyEg&E
z6vXKnMAXG^Nb|cw!_cC?>!uuc_4W^R_jHL#4@d;{iuiYT4}AP}(Zy<h@B=cuN}>XM
zjd6irROQqqT-0@(j6W+0IhjkLz()E$@^xeW9vS&TMqwN>RG1k0Jo-6aL=r~ZuPd}z
z000f<&OVIcIFIAaa+tNOcB)nKJDi+~O$0A!gs#(1L7x%vN=gpZx=PH^k>@`e%NgZ<
zFT%wdc-j^%NxsIsI=9;ri@TxJZ%Ow|7y=^#^3qz>RgR{I*%6b^ep_reYVgF7F%=2^
z1!Y+k4RINP4UdHVFF9A&b@dD~^s_oL$%G8DNa=X^1ZPBqYW)X=qrn}(-^mQ6wo>>#
z84HqR3uAbK=Jwk`-S7i&mXg%SQ4y2ilU1-Szl4P8M;Rw$V<~&A6Ng0+vF@H;D$oa@
zX!1QeJo4Focr5PVx8Pv|QAcF0^N^U$%Mf86x(g>4x&k#V!FWFSU$5$r%8wC7W-4cM
zRBoi05EJXDy`B9X-79vYy93eWCj@T^7zo%1+!U1A5)nCw0>5F5=J$|)xZJ)Jje*v>
z){hq_E%fw1%|^f+FI4H{)f2#uqp1!IW6}6CGSLk)&;ve4;wLG|SpL{xS6Ak4<O3hS
zkl-}mCRu7pudGtOmyWelKMF`Gh>MG~7B<oY=(ZS12QYX~H05GlYqdvc;3+ZdW<8tc
zD{+~7C4xG+p8PrqZpi<0WpY<3(SgTjC)ysUiQgkuZBLDnznT{3eR_V@uNC8%JW;43
zVO1Vf=$c*RMVeu^S!#7+o~Kpsga$YARDs2IXlposGv;>%>rng^xLGCzTVp-lRUZU+
zI+;g_QGtQ@+Uv{T6^EZiM+BfC-)W1BB~ut?J<J@8;46>BW7$i45vO_V!!NMLAFatR
z7d#LD>y`0(S2*>@wF>yqxg-9!7rbI>z7|+x2D;KbNW|w596rt?WtEpH#=^wvd7SE6
zuLSKwair00%lgt|XM#m9^JECm<L|ZF1-5K}1qWf01l)Rv2f%@?Aq=KiXc%3*ew!G%
zn=hgv9{(Mu6fA6<fyb#|Ym=rP3}wE2ppjnZCfSCYR?rGWUE)|Q`gm1RSYaBGH~U+D
z9SQ{!Q_wms=*>gyB?N;k^F*XK_nS?|N_x7#iKXHFnfFPyy!MFC8uX)^pG`KZdXwe*
zt`0k6JXGAtcnSks|IPP9Ta-nffnh>&>Q7HhT(1mgDnwgvMyrYoIUJ0Iy%Rad_ZI2}
zGo(6#UtTS5NrGU2|5U|@$koZ=)BB-RS1`v~GPW775m}cG=~op)fusTIc#<Uvz4*jn
z_z2R%+fJ5W5c^DC&Q!I&Y6zQl;memNn3T&*1c@AR77KN8XtE33b6c%iBl!l={LJ1E
zzqAp>Sve!e%GICm*Rhu^*?i!~8eMO2%n=XT8#z9a^}XcK@fW$p=XT2Sku3)Uqt~<h
zli00()S&edW?+D(e>_OM=dWFs^WtK}plUs&I|U5@I1eKtGD+S%R#)hqJRCbwBbcsc
zcd<mkgh$?Wy=V!(yLAG2pXpS^Yw{NA*Q+C~t}`U0q`9RL5hT>eck5?k6OJ9wBU4lb
zQREywkwxFg-VLN#|C*YM^`PEdKDmVZ$N=HBwKYWM7*>P4PK5Xzx<T0Ms-7+p`Tn~`
zwH%j?bsU}p2Vx)8jA&+Lldry?V@C6)a<m&+S<cZv-Kr;OR+uXe%c%FL9n5oxYrnn@
zLp(pw{3!OGEbr?_SurJgE@tmbMW3hpco$=Ws;d6>@dF`oaXsEPz9tG2_XgLhy@_}@
z`zq75pXQpl;)w-#n%%5~>;19nbvC5-Hc1oHJ`7sOn@TbR71<Iu$7l@>>z}W-gJ?Qq
zhVGk*AJ~Z-aIy?v-_~#J^{JIbDkL#kjSA$84=rg)5iAHCAWpw-6wNs<uh$qN$f8<1
zTp!wwL_*hbp<u<n@S$+JG%R#DlV0zOldxdP+nvj&nkjRt%&WFYNR=EZEfHvj+kdV&
z99!$Q_Fm#^baTi^MeZkYw%49wN8G8^4;pcPIXw@=6vL~&E5`qJ4NRm*Mxcw6abAlc
z1%(l-1y{<C=~K=DjT$NMOez+)i^E*$gCeAL$z(RiyA~q!I=dZ6rVZas^`Lb?u2J~V
zCj)>A+8pdlYH(C%_uM*H$$8<FN4+gkE;sF-9ZHACo)a5<nMfw}g5B;aO-chn7Bv8C
zU{y=(a;1(rzz9JoFiC1@B@YuRS58ILX!#<PklQVZp?|qu9I%osWb_v9K0Wl}A4r%!
z-&2$6W#Q6NYo2Pbf|G9$4$*=V&_(@t?~gI1P`bG0l}%azJhRjXD{*!?1{Itw3BOI{
zvJn9r#^ynENjOi`c{yW={KvaJg9ke^)lv#<j#pugjf~Zn^sgDjL}g_~MLn02GSS))
zTyAmM99qSQ({Z8k587^Jm&Q-!4>Y)Kci7*uu<Q>MmP27-+OKeN;aZ)-J5C1^X2lKk
zcQ4pK2_b94s*Cv_%ySD{_$0XsH8`0$Y^<|OO4{XRE3Ws)S}%{b_p4ENhTw4<ucmN0
zhrq%4);WI;e#x1>2}DtPn9LQL%@ctLbiaR~Ki02z4S%|0yFVH=4<jX21Vx9#(*z^o
zlI)$k4!dpN+P=3{f9T*xIZ;qXM^C>!YjzlCH?yS+)afuB-am|7cICH#bz=N&vYTfX
zi3A>H4Hodc@>&NKmL*Zk4C}J;M>L2?A(nPF_nUW@%bD?SDvjl;KHt1=og7^6#{-$r
z+Nv&RlTEH-Hf9?^`#ba9k_TR$%{JDVogQvnz9{?RL-So|uw>F|B4{rwpFDkfhxMW$
zD~rKx*Rsmp$#G*p-8Up@XTp%5Kxt_B>Ep+ylPNU!+<}CgyPHSlrl`*61j&rf&)dH#
z*t?u3IUw+CoD-^6v$!4{hb|3>g+@mcViJ^p-f~(O{yg<MGPlJ%^O0@ZrY&Z*f;v9~
zD_Qo}F{Ci)SilQeh@ajE3a5Jho&^o{If1qxv|6==DX(Z<W&IJor!TJD<{TCuVa73=
zb-ii0y*_=4@<gr76gD!uAK0fFeK$AmVy@d4i+d~0rh={R;Xm4lCq4Tja3}IjhKoMk
z_w`92Mw12N@o8w(s+JVaIJ}&1JdarljyE5!d2svu@b1?4>(}?wta%Cat_=ked?@kZ
z;m(T?QA&tn5}l)_l2TO*>(kq)SBJ-<;^LBtrQ~nk4D1JitX-qt)=0SdiwxylVJDrj
z(I=CIMm1rMqQrXCC$ps6jI6AzTwI9*sLuYXF)S4O-yS_b{l9M%lh<mCF#t<er2l{F
z(UjG)#0X{!bwbh~oL8>&V6V;#vWly9rf$qQ&$vEc?B00qNE2#^OG$BAZU3kuxMm(5
z1KP5nQMo587ErBewWgGcl_I~$N=sW*vHJUM#d2)T?OdC}OAVM~@a`CXm}+(q-;i1d
z<KJUdVrgdaW3$yJP@u|Hx->J?#oUx)hYe#V*hSnW7AEhz$eex8cUW#dnVm%C(t-I1
zFPb#!HSx5Xi}{OmOm#O;FR2TanLIRWUGB1wdnuwa^Gl4|AND9GzjJmyohG<rK|@<O
zpvJ+%A|fLbheOnK{6NCZ9r{D-?yOQWu(9!WvaDDO#+i9%oH@0Djb{5=)fV%q@uvF$
z&$07;gi>#J57u-WP2zNJ4!JB5BVzz^3ef4KaMiCtH^gvlqia`hnw<R1A>qS`=TmIq
zAxcfWO~SzuHEdun@ZXVY-wRtyN(X+!<q|qR$n!CJZ3&%>Hp=q-uQ0$pOpVndN;Do3
z=>Zcj>G$~X_E3y>k5z&F&m2^ckyq4)<wnW=C<WhxZZN3UWV|;{lQ=^--ONQ#?|5+c
z3Gjmw>rkp3EY}PFLzW@|(4VA*XdaxMnTtk%j)#Fiop~*DS7<udASW%IZB;H+vH5do
zPE{56MtpC+!TD;JIdeYHQd6zj2vWnfw-+V|PzSa`wL)znA$_YLM@CASSn7y(HIY&n
ziABp%>udVrmTaU?zhpteDIVK<OC~!8O<^Jp4dwo@JW;CSQ1}+;umAOsnl7fyt?Df)
zDFrR9Fg=rnk&LBCCyH6~d2wO;n>$ZWqOC2Qo^7GD`Akb-dD^Lg$soV-(SD@Cod>v`
zQIV0Ut|``Ic^u~jFWs+|=pvF{o1QHXJMWH}fChWaL+YFl3$j;=cD~4a?ofynY6xxG
z%g~(v8$NhgE792S%D)1m_#WPQet!o-xatyR3D7C<n3|JVQAzW#p(DyUg!}V_>CeqA
zoAu(F&s*z#?Bc9ur5RUSBOOx>b<xq$_sf}*rs@r0VGjj|S*p%@qxxi(l;mV(oow%q
z54B-)jw?@RKrr!P2uztN%sZ(!I9ZpVsKfL}6X5?r?wZBI<z!1)5iz{c9WI1}s}TMD
z`((NE3eU_0)}CkC2V^^DJ3B>xd7#XL%Vm6MAZ_6+Y@ni|at81B@N{n^5&O;Y;7Kn=
z$gic>)f4INVrcG}y`%~c3#+#$6#GENMp7VNP2>&4#h^Fdl_~*Q0>01{OE#*g{_`u{
zL3jTGGkik|4bHl6c;nQ1fLg=@Xl6t0nJsm|F-W0Eo5a7soN(9GwLRTdoEjP@eRkoK
z8lkedwlbe(?Hv}j+=qky)K~%B^5*vXOYCUgNJPYA+qcyHal=-a)rE{?=a_+c!GUgP
zvm5|Pla=MmAf{};{yGm2)&KZwbEhOkio?u-<}p(7s3DuwD*)2~cyauP4jPv{kd<80
z&FY{a&&Q~)us8ceORIJFu-5%P7WB5*))>6+$}TB6ghh~+UCSwDq(FX(WF7L9I_5sQ
z%*g2_qZ?M+s{4t<(TSUZ!G<ODqBbplviv}Krb^#RcAhqA?k&?j{8Z^l%gF{y(EzR7
z^M`fzTdyqB=7IlkzuJ|YF&nQ~Dn;K2!M`D6KAIVq%-0`OOG-!pViWG<RG9EjlUnBO
zi`o9yJ1|jksVHfBUMfOuD{ZW;)6+g}R>=Q6xM!A$shpqY95I?Qsiojzw>-`mvh^%0
zzvoekE}Hg{tPdub$H833d4T~m&%Rg5_sv<DJvW&6jRh=D0{cqVaaGUOm~u0*vtY#G
z&tbPNS81&H>2(A747H=Qf0Op`2;(Eorf*&3D8jE<hD}DU){w9Z?d(ocG`4vR)j=S%
zlJ2^xoU^9pys^w;d$p^F7z!fN`6(WD$L;60<gbU(=+l~|H_do0;D6`GJ+Uw3QB*69
zT~|5^Qw0z>*(OgY>+N==YEOD1dja!^)qM6dVhWjL+~Mw&yb#9n@^Yog1W=zjIy%zt
z5kB2!2AE`%D-wCp17BhlfMQl9BqpAo?tGBFU)L!2h|1nDfTtw+AFb1*w4&#@_$}Xx
zVsmSK>qk)IMSF8|wpcHgxBI?{sHpgH)8^(H-9#QATSL`zz^NkQ;YpTcgi9Orw#O{&
z%Gqpac;|`Ch96v3rekXQPX66AQ@zI3TNC3Pd4^th=SBwE>|7)D5@CJSFD;pf+lr*R
zOb=Zf{MEQv855E~%K1Vz!n}|$t&fA_jnd+iXn@H^MNv96j*cpXh09;U?kvlcssC78
z{{Tgn-#nH~ptC;dSaTY~rJ$gYE9ckp%ggJzk^dIKD=tq=!%ei&jGpn>{r&4)&3t=v
zAqg?l$G>2!!wq9diFZJG;^q$huO|EMUaE-R$A+HU6BfLK5!@$9Q@EiOW+r#LQvn}}
z3n<>KD{gOZ4}eOfv~-B;R6{LAqpsKvXs%XO-KS3Vtg^?PMmRgVs@#jF<@QA(2#uuP
z3YkLMTiP7@WT*kpYlx8z%y6!;G5u>X2?<IJCdOHkQbRp!Yq4%C62YJ)w9xj<!LQbB
zVIu}Uv_CW4$a`r{ps`YDi8+7)8WxI?o{`n6@SODLEk+k&gQk_$6Mp?l{;a{k6jlkV
zXj%%2+D%kz@ZVpb?<Kq*u|WdQ{BNWWLvGMa<8cS=_Dbpu!W(qfH+j!sx%i4K+W}}&
z0D|4RqEfz+>srrPgGe2y;zH#XpN{Go9?WwUs#b17T3rCX4_d&cYi%5!1R?Da@lud{
zy*AwWV36|O);}ywtj_(Tl)aFUSb}OK!^^yzXd8R`nHon{c}K{9Ir+bK<+cvyYN|XN
z;F&XZcFrOqY+UjxqnE6p`xumhPA`tqv!#<!aG_it`(yd%{qb<<1DeflC$qIkfU*0Z
zC!p1s;|3ImWQrJNUQkq~K3J%~ymHHA0h@ivj?G}8p)(}e(fJxYLprEu3swVmyaIMK
zD!6%?I&vZ+ZqU*)ICubpTGW@b2g8{GHJ@9%O&6MOZ?92})CLBMKrP6BpQzXu)X_)m
zx!%14)WaS;UNiIg{Z=pG3i0uAdt%W30CN`^i<_K;k!zt4;Hd-YPL&6!nTB<F#N;b#
z4KDbef$Txe&fsJNN>nFU$jooK3y<UTori{H)@#S05G|)Yobg0K|NUsC2`e0&H>jDv
zbH6JPLiWm%jHicd%i#f!5Qzxd`*<AochiMYy}Xcgyv@|AmDQTlew^)b`aH$4-kl5;
z48Q`)T1T%J1p}hqYSi^jT>>greq^K~XmiOeDjI06y}LyyP^(@V%|!>5r?-xsKyHkI
zu^hAqN=O(db2`w|(3rP=ajf9M@CMJC26=fru3BM8e`;!CG6LxDkyIb#gQAoo0cB%k
z`((Y}@ub5XaLxoRRv){Uf3+mU!3mbKgN64`8Q~}Ml^Q}-%OY!E)z3EC-a=CEk#f{F
z)$Mv5WTyUOl|&{Ll9|oQ%d!4zFeMC_aMV|f32N?^!UBwGcx;y6o15=J`2q|E0o)RR
z+$?WzKgYljX{A|ffSOv|M=h;4MBEHBa`J3tN#dd4PadqDdiQ{Kje2{P?VTMkdJ}An
zkmW_N6=WKL;Q#KF4JKx!&ZkdPW|d|pO%4ZlpjPve+eKt?psTCvKa9P%*I^S<3OZIW
zT;xgj=1a7_=4NNh%F7A4UFdYXWW>HxxYAVk7Bo7aL+<2LL4_3zu{PxcEc%;E8(PhG
z?qIaiSblV4L(h(8fQ+ahLd|fw|2tUkj7}F(Y!2DCOH9VbF84%Y7vcB>`?*C~J&Sb;
z&!?U=4L$h-QsOpq{8x?DHByPo<yTZt0BN<`={Bb1zUw6UDgl>%U!9$ajkTMlO&(wg
zfDe&h(6zL*K>7+u#{fQ+n{Q&thCdHk|Mu-0vx(A?k`W}Obu51(x5VwXZn;jQ$pwyU
zvMit%sMkj`z_DugqM)FF9$go}hzbe}w6n7_Qfmid=1T)u>KYpL4hMX2K-x_8_TnfU
z12Qu;H4i4m`wIU8nLuP9qaE3cfe+dTj*~7+%Nf;F_jTS+WJ_x~y#yrH_!(iR|0rl8
zmY|jjZNmh0JBKT%ia=W&pcWLV*Y+v(^kN4p^mRRRL7-Go`EL@h59fMajrl^eI}fN5
zQOLiEi(}baXtuDnW>5tE6OEv?#qH)Rs91v2;&Q7x+z<KeUNRUws$X+y*BQK5WjY0N
z%qqQJ76jpJ)k?Z0+F!v742*)39?wIko$<Yuj-c!xWqQ3p^Wn1%*FudI7}7MJiFYS4
zS&xE3$Q==60xAtOnhozhA3mEmeF^fPo4qa4%F*%h{n6Z$IOhC;1a`?tP`uKPuB)#f
z83sKb!0|H9=Cb>Qytv$4YU}EH?6kGAGM6cyZ8BkQI#bow-%tIDmpAxk(K9k~tdT!b
zz~`x?$hU*pT4GM?SmfDD2R{ll-!{N2x&q~oP1!<KW>C8WQwtZ$^w9s5RA6MDL|Vbj
z6{<M^?9{f&?RNTq3MnYa$a|1fSiwOFK(m_z&!G;&4tbzFj6wj$QXv-~gQE|NfC4H=
z$0sNK-ThnRg?R0qV2-&~6Nbe3yN@lrh|!?4hJle0kJUUaHC6lLM>>N6eEYf8)eK)$
z!oEaKS|+B|lZ`=e&<|#+lM93FbX#i--T+=8Ev>~s!qi}L^E;Od!)CX}@^bGuMB+bv
zBcL5<rBixzcvxo#X;0fK|9oe{{r=7ikG07C=0djhnFR_N$^YZ-t-`8YyRcCVL{UH#
zP>@g&2?eA(Bt*JJTDrR%L|Q;4q?<{Dbe9M!Au;Lh?r!#Asq0(+zYq5L_GDel%Q@#8
zPmE{W^(f+BOa>)Arr91n=y2y=$JW8t91w8lBbxy%hVbZuaj0%S)41rOcTGQs7lMPo
zrJyuYOHM}C1MKyPhzOuTVc^p*H;29Ti&n3)hY-rbk;=X7*ZKZkb1(@Yo@@?q?<sPL
zkt&;z(nFZ488f>pXH||maF|$%WJo(YI@;Qk)X4X0d<%rTY_;kaWh2_Z;yI3hGtOa`
zJz8sr?CH^2qkD-CcaojG3VVkp?2MS068D&m*`0Q8nEkr>?@)6W5rUx$-wY{Ka7`_g
zF2pRR$Gtg2r6xm;^Boru#}=%gy1HaCGBTD$Vc5sS5ZX@D`!sa+_F`gTwZmvBz!Q>{
z1*ys>7SgSDSp|hOad1`%uksPgNBi2@)s>`5RZ+Tb^k2O1h4s$8s4K2pZU063nuCgp
zjCTl{;)i4LI~V@7rk830kdFn8v4IG^E&38cLcxC61xA<a9av<YofChTAr#($&hG9B
z^GBCz59pJgG@w*0oAJH$JJ%DzD{?-ZuCL_3k8%|U7gtwX1?zt}RVX!+4K>eLd+XY(
z-3yF~!}y&H?$5fAGE-BUz{=s{7iDn&m(r3z;U7%_g}EOvQ1&0cL%E;%VLVTBa&kMh
z?%#)b%!nREVVcz8mw^J<(Xp%g2`5+{h#9hUb$0`vs`KwZ6cEV2<t2(kC*2`naa)!y
z6qY5F`&5U*RLsmWqN1ga7+MAf_<t*B6keQjlwJ6mYfb!<udVku&w(NILqm!Y6XAbH
zB-LZF`hWii<^KbXdxplyEBGKUAthH@P*@lh2tNBmpwWir^|vMg1me+O^_JUB=&R!L
z6%#Zyi)7|obdJ>==;$ICz&rx(CY2=q28I#&<3_Xz-IU*VwvJX0H&Uxk9dc!I@|N1@
zD!e054WIID*QW*ZxLoT{xZv{OZzt~`kfc@-zFcu&ATe?5F3SE==lMVA==;koSr<BI
zvT*=8hVn_qxt|a5Azwls>Y?SEKTnd12QIKSq~b+bf0_Oj6n88a>W<Hs{wzaM2S7U7
zj|CCUr%$(_W6Zr>%&U$m=0*PGi2~3$x~Qo|z^zq6A}Hg709SZd&gRm>{NnB^G7nBE
zzeg5t`SbJN2L=0ht|yAr)qlQy3;8Nfk;SFy=?i#N)HiP2@G=-ERX>A}b(utO4-bRu
zg_Gf@pkO}+TN}dB>Qa{}`?LBGn5i<U;9N>BN%8`RkJxOaVrQ9Xj3H^92>AJYd1@}r
zwz#K-3KgQS*nvG_x5hQ!pMN{n5FwXM%xT(Hg#Y`Vq#nZkf~ALBgV1|Jjb53EaA5f3
zbABPgRf>oTyvvqZmdaDqp=t3-S9d8Kp^FfwiQ#eD?iU930OH{UQ9y-v6Ub!Xr#$r5
z?&x=y`30BmO$uJ;<Q)Eudb(SBo|Cu|-m<$*Y^HZ=#Z}vL>8(0D3YV{Y1t`D;uZ`GA
ziHips+OCWaxz+Jffx#JDmDR#vF-I8e{wB+W+B#<pv5oU|S|pr~A|~N9%Jof^-MI2K
z_Bsu=zmy7XUE*s_n2m>>=YP;SDyI7H);9=^u~o)#xn)QvH+k9S@%sdE*sUy#q>VMT
zDLd`09`)9j&&!m2If+*drI+=*SGu~mbSG}z!w`;tP&xsnFHgOe-M+(3(}<2P|E<kR
ztO}3wV3E!}+GqsB*7$_1-sj*V8+PYYc}7O2H6<=%qtPJBkDm%Q3+M8jwwDFl+tps%
zEq6y!LET<%xTB;NJ!H4aVrJS*9FQ9~ii9X%M#cr+C`+MJJgzJ+%-VS>FB~o>Act6Q
z#*S95@R+|=Qi{rXTJa!2P_#)h;#<jZ>DkS^nKP^vubqC2+xi&>*BLN<3Ux=WRF(!=
zmk+SqP}K+VMW-$3SL;@(RUhw3sujtBA|bbO>j=xby8psLic#rma2#h^GuII&xE>dV
z0dX}~wN@~8y*A+YxZnSWO_!bkF#;7fYjj4lMGR?@iwp9p!v~X%TPH`mz(Y&1{zL#`
zjzl26$mzoX65>k|A1aY!{(<2GV&dO90!9P$6zj^4js$t}pdJV$WYVoaW`lg>lva!7
zvJJV6>?FR}_6Tk-_POHWe3zvqa8n$}H|hL(fMZR}ZF!tk>y{TcvN~ELs7Q`ld0a_O
zNe1P}_Vh*r(NJms>)O@9a+l6jV-MS|_IA7Vx|#<M>RS|YsjMSda@CbfoM)yfk@I&K
zbOZ!0lXX_5;#8Iz4;W7SK7bGB$hW-PwAl4Uh{e`84@?q|up1Z|wMSNtpOK48Z%k(t
zvY4s3Y3a3uzI>0Jm6>Ozt<7mU-Eprk?{ur(6ulCXeg^W+P(+L~o>w340P6@Omj&N%
z5#urIzu{rew@$I1MUCs>^HJ9iOFEL;Ufx+8*_)r>PZq*p$yN;E+nuC|kBJ%X&}bM4
zXEGvyc~!BVD4*(yB<ZhR`;KKQ8lEd9FHgkz<*cg_?}<WA;#AW0YTX@w;F1|s#>K@O
zm@Tx8Z;qCWrtMmfU=g#=&MpoXiwadRf)Fg(<mZp((?YAg3Z^V}8^-pRl4~9L43&vA
zs+C<q)T)|vE=}1LJBxqR(1PdqbSQ;JXGaGG<1_}!DQB8w-1^pzxVZRAM}Bfn&JL11
zI5|0)f-BoVJ3Bd<p9$xe41*&m*jYJjUSz$>F)=aO=SUQ=8B-HoBxhxXqwtAp*`?G2
zj=AF2=4O!@pf^8z#waH*J5s4<XDrq_Qd!F5Y;J@^m~?Wbd|_ou9Y5>p>hkA67inEn
z9!b_d7#?5%;uv+&c4L6v?eD=Rz1auJ<n4JX)ru6~o#*DCIronPGv@fXYCPe7a{~VA
zjTY<s@!SsInwn@zUYqZ)Unt23a^uErJqrF>`w2qQ%fNhxg01U<3_5N7#Qfso!QuWp
zFRx<55%2Kb#h$rSmnUijaq;o-B4|-jB0?fzjj{5sUavIXu{!nUsXN-2Ax(#C?fOz|
zi4glOdS|<Bd*QF_mbx=!)Ai7i3xl9v?_f$LX3kX?QUHG1%x+FJu;Qu9I#7?~zi2r)
zICPJG{~kT5Ysg<;ni4vl5%T@^t;sy~%3HUIM!sl}iWF^aZc=&!S5htCd7%OA)$*%c
z^=blQ;?v#0SR}{y!D6GoZ_4~GO1fNYYiksvK~i>hYfXw&6Ew-&+k-E-^GM5B(krJc
zB3bLk;;Cf~52)|g{U{5M&A}k^eet3RhbvF1JX<o}l^`k#bZ2ex9MQEQrXx-ro`I}0
z)6*2%PrJ)`VGX!g<En!co?M#~x~C~Z1`b<eeDCXyo;W(X#xYq%y?y(2o^DDao^33n
z;Vi@y7q<sD>s6`g$m4(~G`R^+NVTRI^dww({8JvOO+^;Yc5LNq`QT4XPftH0d+bX4
zh)mj5Tqn!P4!RiPb0tFUYF2vfPfbTAe=SP-pX{kLHZ>L~I$PYEG*hfJop>ET`e>O7
zx=Fxv&C6ctcU<(KpHCVRKiy;Ol1GG&?KF_9IT5LH!Lk<iBs^EO^f{Q`ST2T;2j$l)
ze`{*owDrdOQ)B!y!Wp5r=Z#6E1X40)3pm_L$;xIam#&W2d#)@mFR!e4t%*RJ=b_(a
z8bl2A$)w%GAf?JzBK!#rP0+!Nt8VFqW|4FFix3YlGbg9b34DL>@d!jvm81Ji2BVD9
zjier#n4Oh4?GYCgSaNfZ9-ma@7gjqTOoBDpU1_N^B_(-#+Tx<3;SnBsoxqxb!`-E`
z%|<J9#)aE<%kvWu3fh}(AW)l|k1^Y(P63sCq0=3uiZ>GvZB32X?-lVFUjnBvH4#?`
z41*K88F-k#IU5D>w^#;encLauNhHQSW)VrzH0`P~-BgaO)b)^iNoxn&+eN#xIiEz2
zt3Ak{K3xu&oAbDIh?kjmTNDeNB(nOlldWpLTi*G-^WVP=^_`T#_F|7HKmQbXMfLXf
zLY6C7`~czDZf(?MW6}#St&xWfW0%3GI}yiewl$K=X*UK$`QQ9*J9uWa2&YNJ!T^ns
z$pBL9+388-*o2<#y#!8H)~c0(EG!OD%i7aR^KAFWpKuNJzs4e=>-u>>6gF0qe~-bo
zDksM#(Pm}Y_<K+^5Z8of=(L)|qd1G-VKjdKo{^a;Q{S=_;GZcnN28iytpB=Dc8+F^
zkSIWrOif-skP;Vtz#v}lR}{Z6V?*rPYhmGmzCNEm_bxp%T3V5KKxYjoOL4XIj5sVN
zact{0yL6s>hQfjQba74c`N{}K>E1F|-DtMic)|nrii-CXNwDB~#Mah*ZC*4@6cqOJ
z3w1Blllf8DT#Mcin^W0w^1#i0SD?aKaAtP4i}v<ya`8m^*brdz1N*z;-R`KGdUrR|
zyaERJ+h!4RSSaz!BJ1kbVOK%z`#RKuM9QkFCYSZ>>|}M)qW>-g>uRB%m&0^)1YuZT
zS~eSf!MeIbWmy?)u=zGiy<fMH<yLwk4&Yc~H~j<KQ9?xIQ1u!uitqGRnq+w88Q9Pt
z8by}^!#bYM1f65KZ(xBawE+jP2u*!-^c7=c^c<(t;mADo6LrNQE~it+e&3JGy?LVj
z9V^N#Xg3J0XNMc%&EX@{o~jkRFR?#d_6l6;lP15YkoZIS)r;QMoMeB0D$<Hn(Wk9S
zC605;hHLw-2hH*f2yvKA<J6#gS_Tga5>98wrJ%6*c-p+pmOJgA^H%-=;J!>4)ErTK
zQspQO@C%?-s*<Z3ckqi;eDXp7&Z3EzcU?cCM17sCv@`9DT<*vZ`Jfl(hARSQ&}Ay=
z^;qq3FF#8r;I@QIt&8_<6t~?QMDr-+pH2+nv1;mu$afwm4akav20tfc1k}1*_w@^O
z&^ilZH_*_92;z^EuUO3bOzXc2{(a8h;21#r|7zn`Ru(>^9x67{Gd6Z!?56Y(EiNvG
z*iAPW<LT+?pN=A*X}ks8Y^t{5E*oJ`Rh9EYJ9Ih3IJYh}Yz4_sldKGt0xvt?Ef0L3
z#g$p;=)n6A9TO8wZYVjX48cc2Ul4??O4bLPGrqo8NlBAu+oG4|=cUFqjf{?VjOy20
zFI>7J#RD)IPJ*7E9>iulIij;x6A%zU;4hS}S9H{Jb8}&zkQ;!Ua%jG?v9cB!_J~MG
ztitXFbJf@h!h%8TCNADqR8#~Lwv$S3AmRBXcF}IP#NDD0=*m_(Z0UXvBFd7>;1k+d
zpWq*qx+c`Ny4&)ZHsiccqV#e1Lr`B+Q`6X3`~?a<jC)ZPtV6gtX(S(@4E%I@(&{e&
z#~Ep9$_EeBBAOsN19Dc3;eyHNHohZwel$0Oz<@4QFkVqun9}23QgUy1w|`(Dr8Nl;
z_*n=FHh$7uNKD4F->Z#(KIXq|(sYV)e_ByT0n{;?zhWFfCqp$j?xQD}(n5YSR>P5I
zLhYkhhmEATIAAmrJsp*NN+O3oX5O2ubN|$+>jD2e!@C2CG|bcAAAQYLR#1Asr9{K^
z9sR($qY9o_CqqN^8lKzXaEkD4bYIXIQj?N0=y%-Tr3EXVRTbC~M2u-wE6#JrvlM7c
zxQY{VDO$>Gmhi}a9UdN@9POpu*lP}Z5^8~5#MvpJro=(uu8q}_;NkT`KQQS?_yOp6
z_zm>ZpZLG0<TmZi#;^3X)ZpiDfCfIy--xKFt~iEaUWfJZdWhMDzf2Q|=+bER#Wy7o
zyf<T}o~Op;%^{fm_U*+LYQY|Ga7w7Efz^|YgbAy0mGs5?t2b_>n7ABn`@J<-^uMq#
zKA$XC0j|OljrX0Me~QNY0lD!Y68_>!a-)fF5IYrBfj&a`<0{siFKzInP}iEtHg@Xs
zr#ulTPrLa0=}HlNUSC<TTu*Div8Vc=HTuFIbF=jZ@v9f8&<^)F$r2l>b&%Q`r)`q?
zPnnXx!N#_VgI8Hzo<9{zX=4IMOHfO^_4JH<3zkDH&>$1BS%3~IZN?dZP?^xz;=0#a
zu=gUF_h4sf&FzMSaITLJ8b?Xg#SPHpj^5O2E*q<IXy}cOh=6(wuj1fAV{`XD@W+iy
zAqcZdD^VPJMWJfm@7{H%OY;MmB=g2UMk1cO?TTb)XJ_brWUkC5Z;o%leQ}mnnQ5)D
zEB=__Cj5!a_q0EocUQT{LM;H!@HQbKAqy-hl9H0ckvCC9=4yII_&(D7Gj{4o^1#)}
zYRh)HwwOW?`q?@t333lfNkt=O20A)E#JRDaUHRG4Vg(IgJ3H_;lZa&p2*}pbvLHWS
zT2?j$EVv2KeFwrrD>AdPWN}10zkp^KnxN?zUWMK7@$%!1PV;@>lug2Y?4~At>cC7v
zs(ZZ%Pp1q(1+QKIUW^+zw2^vzI-^PZ`}S&g#SfTPZYje;nxG1OoRsP$foSpY>&4*b
zEb5@z`0d*lRCeiQ?ojjYV-6Am0(Of@0rrPHJUk*R_$cl&8g4&-Z{Yh`p=Kx}`C4h<
zQnjH51~y=Wp>PAm_g70x7RcyLhDvmNZr$lh61=Xiu5P=jsUdZ9xn0oDu-5g2kdUx{
zqUYF6!PLyGUE;8_)Jz?{%mD3cLjz^xN@p@8N-YQ>CSUAse43e*LVwx?)>6TQY@aq~
z5)$rXVPS~`ikhnHW9LbImENkfUXX$AxlvChlleF=dLBS3{yfkAw#aY3IJnY*!vY^B
zBn4*(h>&ZBVMFPOz`|L>dn;D&lBIpVKqV#dWz1u7Ko4kjthP1~VuebL#hsn2A|me2
z)WQ(J`6|=gsw@x&^>2{~v=%8nbbRg>^5>v>SB199&=B5SKhb>;%6cf8@bU5A-_%d;
zj@y%gw!*E^Z<FK|sjBGLuY=}>;0PXfC}r4WPz6{tUQ;iFVih47FG21x>H2SP%r#}$
zjBkEshs-Acy;Ty~mD!c63QKJRpWU@f`}eA#`WhUp0Fh=0x#TK{9EM6vjsSeJniT_H
zDoA^q5#X67x(f7~kb-X0kqQGt!!9NGBZqjz!o(EDodVecT#nmPuU;X-0hftmF(VEu
zEGW>YHk1tOb^|-IyQ|$l1v%{O?92uVbikrPpOP#1F5TN|x`byG7kiONqroD|6B#%b
zGs5#86~BrKTLK~$yl1iR+yQ5)2dHCW88~*`$0mlo*=$C=PX{j(-QkkuqwZ3z`hC_%
zK{?f(0ouRS91VlsFT;TX+&r*YoA~ju0rW&~1ky4yp-tOqyE2$hd+FlE$C7d2o6v@G
zEItaT4-_jf%4AhUr7Z!G0_9pj!1dI8{xZ|iD#c9!!cuKq5y`*30Mik$sOkgXp#g^&
z*s1_R`a$EkIW62C$3-p?^ODjWL|0&d&`<Y6GM+p25C$+9#<8)p!zlor@WRT(!~<H|
zu{`zjEpqVywp-}hzc+_UZEduA2#^B*PRhAdss7%Q6rPBLFVU77=mD@BF5K)tq6n9;
z5NhL(MJB?k6@(ej4EyUH0)pnhx9@(l*@$ohn3Q-=zpU@>*0>yn`+OJ51gNMp;kl={
znAq-W@o=#bIcXAz?wE}G^+Aj?I;!UF&1APSNKH;YR#A*^Hv7uG0HpDKLqoFN@_e3`
z?shUUFu_~XZN3=&T=tPT_7>K?fPes5C;!X<*S8dB@={V1p_;O(U}9OfD=6IpGMcWo
zPh!~2sdaFJUl|c8(YD!QO{CX34P8U~kTuetB){}9q#hG6Gul{`X#Kf%S2S>Al-{EA
zn4ZCH*15br{Zp3Gh1+KF8=ztiVI?Ic0DSbrF_YRqSTZ5?Jq4T{7biDQM=IZDn1NdB
zMGztArZI$t!AM3dGm=414eET*w7>~{sK}rJI#v;HIVB7hx*%y`SLW3#TPrI7T`@Q?
zesm^(M<S6>uIsf$<z#1D&NP#O6XEi!*0v$AIvnmVdu4CGpRXlkfPG0ySc)0MXATeU
z$p)zm-)O=4g4d>zQSc5w@_ORU7)ol9TrV>*5^co$tLL|xcGha~x6OPU+w6*|53LB1
zNN{r7Olwbp79JA*Bl0B6soOnP=9N9vISZrJ-{Ix$Y;Q-rRSp-Fy4!|m2lJ7{gn{2s
zFQrtC?Fs_;V?D6>YyJ4}09F{qBK^duC_wA)^q;%#!8BvGU;h9II_UirUq4;#OeSxL
zeRBx*gs_DC57a&0@<EYvE?4;<EYK*mOPT;n$%}T7>rLckE99LnAoVu4@cljamh+eU
z@_3jkofY40G#>4(;oi9u&t$aw7WH~{RgFry<qSy7zyKA%C|I780h%&OkNhtx%VIKU
zK3?Z)+g%8~qFmK*C`SNA+Aa{m%`qKemvwakKQ9&*JM^e{PKR^Z9V|Fd3Rc^194{cr
zp%~rW{7Q)YJIGN`Qss6pSR)Z_kk<?%PkW|N?sy*cXNUH1!q^rINWZ{zo6;T56@z6K
zC$JS)z>`gr9D{RZiP@Oz*LN0h3IPTdEa%$Mf&v2BiiQ5vfQ2HvplrQ+_ij{Vv38j(
zvLHYot-liq4-Ev2u*!+mbKN4MjN^7ao-WjrgyBLNjc|{?K*16rdKX3HgSsn=;hziK
zmv44O$CQ`v0g}{dR8Q9R*~z;srpr(;^%EHKw%zRn@uFIpInb;Vp=_J)&aeXG4X{ke
z;D%aSA6gH;Vu63v@#V4Iw{4wM!SeF6+K&Wl;hH!scFX;yE#YmTnN}__wlcTQl+VKZ
zy<`6K)2TA>SYU67ieh(bgUu28=yjs;*O(G?-*;rb%7N*kvD|M_6;+pT-!U9~*q|V|
zT&`F+Yg`R)<(qH_c$hs7m4cPl6c%Eq-PZ*SW})vJCcroI1Q-Qiif7Q58<^?8*pb-q
zSNH?JOA%HO|F!{8G%!Sf&WnAaIrOA9SP}#uKYkp#MbCE~US?pRV!kG>5I~jWSft5H
zqMvC3e0|OB&LTd4-UDYuu$+VDlQYb$(W(R3fC`KA5%T{Rav4KndTs-Av_}H!;uG-5
zfcYs+Omu5=s{dcy2?gac)e&|FFr<>_yslIG8+`#?v13U=#dlxL=^qnoqio=zceuOa
z6wP7=Tq)R*u~OTM^uhiB5Pl$r!~^#S0BA0&S!*{pH<9?hY(=n$h{qz~42oy9+3Ia0
zF@0<6r?~+{2@Y0Plm0IY%L5Evk5~UUGEpYNT22CCXQ|L=c!6%!m!qt#kKKcm$-HB5
znKAg?yLUlB5&{AOaQI0SB*gp!28yRTgh7b~O%Uk4@|nH`;&fM%>pOMS(`Sz#+f-L`
z396n4sbEWUH!!mNvl7Ebm!-jv-1}u)_SXsb81FySrV|{(cVBhDc>wkL)4>uGyQ5ud
ztl;4DLsT+IN}*U?9x+mc;+wL};f*P{n$`*82+MY;6cv>1HYUoWx8eVB96P_UR4JMZ
zj043+Y0=R`t&xSVvS0tqvbMIq%j3EX1<${dI!KN{hAE(kQ|Kdnz&|gL;L7&qP^tU;
zJYY@d7c2X>3>l{-eL|j=Di3Iyu+j@}kAe?i+#VVVfMaA_c$3`SnY+A&N#%D@D6W8H
z-aTm@iSy6nJstpb!RRgly%d6?xi7^h{FQ*c{Y&$kfCxJMM_X4Xi~R8#LYX}*lXH?u
zsi{}i=32m5?%!n&rH&Sid;GQ!?j(e$$k!6cUVygo-}mRP{`{2$CWF~A{UAHL_1DNT
zjQ`=ED97l~`ntRCMfLUCcfxaI>Gz*?0Ng0)*00OIyB+jDQ9p_+ssTR!71u<6^RINM
ze``kg#Q!b!`;SVHS1=_dB|A%5UP2=7fJnbGGjs9Qty;ZXT5t#*ta$(asq9Y;%>TL0
zrN8d(VdAi!&rL}9QS<)&jnaIF@VL09V?N;j<pK%l<cMW*QZqtbLRq;~HZ3kUH;9<n
zR7~f;Dn%)emoLp>c?1yJRBP+_XGmpk?pmf?CmqY$S6;Gr=SR^SLLx7eB&21OBw|Q^
zqVP6`e-4R_jSP<rj|mB@|NR8q&AYo9ACaYkpJ<KCmR4Cq{M3|IhPP^FN=jFi1DG_K
zh@>|(@PkbVA~n@|sW*5r2Q0sJbY!Ao{em`A{m@ZJWo1B7kr)!83u4q;w{AUn;ITHw
z@x=t)B>%Z5VsOyW!J+)Zg&I>+378?v4;2;5cULMG=H&u|gB^}`Z6Ja`UPM@!$v_j4
zr|!uf91vh(W0Mk_a+s@n1b+|q?1`yVRE9-tXlP5oSR8bWW{w@LEmctHV|?}uG(>h5
z7B{Y6*JY7T_6CxM4HF|H(09Q#AgLIAB@SLnhQYnXcM_l~3@zLmdiRbM@u}{rzI(HP
znxL$3VP;VkeV3lQhzED(wnu6(wTu0q#qp+un3%SqVP;~YMaX07&@lOQZ+gXMuZ+40
zbCBZ$Ah9$xwJ<j)pA+@m2XiDn?vp<B*hStA5F2)<Q<9TIT_=!e^*x9SkYj1A?Pv6v
z;s%z9ZIo10((yQJS5Q%<x>WPjw7?X16u2r%{(gQs+9}eUBe|*yB?UH1L60BrKoTy%
zmB6ZmeMVfEu?JF?q|Dl)OC=;Fbt0TeNkf_f#UtO+jod2Yu~}kHL1Cw(doC~Uxhn!V
z9bPAQsZpQT!&zE&ZsC`{c8lFvBDk@9PW=TsPFhp!)~xY7ZYkMSqMt`6C&M21HNpcC
z;g?obka-bw!CfSM+>Z3x&*}bWf996!BOac!w&>3Ygb4w&@rz(+rJJp_tJjpxS#&0W
z6;yw}zBh1YCY3OSK20t>7H`c|VA<Z=LztHs_7M2_ZFIj-A9E+Da?+cd+3_3H)6s$Y
z+gIj|t<9^IK@1=ig2xiy1;%PdmNhZu32Kb1>s#yQsb4!1rx+QFC@!Ss05fH@Z|^$U
zS2<c5n%;D2E2VEWDX*cdGO@N!`Shu|&V!V)WY#7uEbQR;;1ZS8r16_K*}1v6cz9yh
zY?PE1k!gGB%Ir-K_?vq3#@-Q0w()ZSs46}p6FokTg8pp*hc4_gIE6GnR};Lwz`&dO
zf<)u+e%fP!KZwUVDK>WE-kN$JGAlPvJyvsOwoO_3DzwXDk|tn0+5SQov8Pl)FuszJ
zp(i6_qoPt#P>BDke?E0Qz=D?dL|-50__-mZ`oZi>eT&e=b$lf)J%yE!q1SBXa9h29
zpn7`jwi+HGE-qBT;{KTi%Auyvv6T|YO-X6Rd>#JjkemPN$^(!qfchM=wmyf2JsFhO
z*1n9|Q3QsyZ|SWwfnj;O($`Rb4?Q-pj@J!+5?Fcs9yaFY_p1e9fz`=)GpgqRZthfU
zhxfI(f3HLCB%mM!`oh3~Vq&7lwz-AHe2>u=508%_$a|R(J8?C&8mCbvPSk=rnldC$
z-G$<MFER^}oGi4lTq|pf)2a#FueeCXbu&6<9SKp<nK8ndzEFZYcNS*n=5VP#K*U97
zi9Q;|k6)mbV$5#rJ3Tv*$|JKQd$7S3r(+jv@8mWs&eJwEI}5vqVx=vY$h3j-wQFtJ
z*{17jl7il#1ikekTvi)pJeZe6?;kn<ELmg>%(=)UL1iH!Wf83f9cIB!#mLYle?Pjz
z!yZ_cR+iOdhQ$JkiftT>T#jZXji8ZZWV9qG=v8QUU0aC#Xx~|5OW&5$60qR2SxwEP
zo^HnOo?=Z+^cOS`bMdZZXCXw{qB1R8<=N(7-(Em<HB+^=o&yaLJG={l=IpWRLah)Z
zT-@T6ly`h>>EKtlGSeai9PZg!Rhaq0XvD<CU*)cx6IU(>8;I3hSof*>{(DIo_j&7C
z3nq^KUE1hsltR6o8JVf6M7X#gC4SP`trz5)%8MA-*z9D)mEw7o!y3wD6eT6n@@r7+
z>({qn^O64KJT@`1Ge!8ipy13<DeVT<+ugmrOvS?Ra)&gin!uKT#kil7le6p{N|deV
zS4|rmII@_4-`!yGy=OcgZ<k@ADKQy}d}t}&Mg;}+*5;vr17n^?M1=j^uWAs+!y*sl
zm@c-&6j)2*G9H~n0T(BSYw-ZtL*f4Qd&A%nNZgwGZU@v6bubte2?5>@Y#esxUo^@*
z=uwNky^AUIgM6<hJ6^g(I_j@pdnlJ@`f|bi&A39zV^Y$Sfx;t`L2K~8AhHqUQdZ`n
zW<*6394aYkk7lGxrtWI#=ty8OQw#gz6lz`Tw$@RUp_r$3DT7~Ky&ZhdpQQ>4vv^H4
zHQC(22n4|L_@sJdcyxp1M|*o=z5}oz(b&-)g&iC_`O|;=zx(SH@fzTyRY~hDK=QX2
zP|0!jB{eDz`x1(qf0<M*Nr^#!$98og(JAR~6}el)EOo1Zq2x!va*aE`gf)Cj=?MR-
z^Fkkzb-}>znh88Lpx47Qz}MIlr{Ur%&R#_W%T1w5A$)5K4A^}D@Dt^Jmo&;zttIfk
z(1(j)n)dr~qM+~!3K(S9CDy<ZZ2OJC$LMJO;7>!op(~bq)LxVvUb+YxfNuga-hKN|
z+3s!$Lg~L>fP&JDiWr9y4kKko?$M(eRvG$QOPbT;s+jEeMZ?*lF~-=BfBvZnDV{{)
z<3j}7jbp06B~l$NS^dXP;e9W~CHzho!=gfe9P<%UQsUZ(uNd~QDN^ERZ2T#}>hi$V
zBE=8o@J`b0U&p2qV6i*?Icb}X>gjTH-<*03cSuZjcEq|AZRy^DW|vHX$iJV1-qX)I
zS~+Y9d+56XQ@zGw>eV@=94uduo)=K|13<X|M#`8Nx~?StiJs0?a3}cr>MTcpi!WhG
z(SWO1dgGscgZ%&b@fju<H|;<IpC72NcLlhAS#(rJv_<s>1e5^MuGGX-UFDLIor`Fi
zcq#Bg@W~U(ou!eJrr0C=r1lHi+WJy?rYlZZ#CKHX#A^-DPl(2Zm&iVS2n{%0Y&<qK
zp!~W0A@ozrFR{N=HrK=t<M+XlSDuOKO0%r9ipqE?3gRLK99Wjq^&F)l!E8|KinyN@
zsH)D*w7qA!1&A?BjEz;`MB)f2y#mm$F1V9qNQ<BCKNl_GbUI8qb#atQR3i$(6~*gL
z&u#b3RS2eOxzm=cQaPVQz4Yq+UHT7{VR0kuEM|id2OQ=p+9GsYS5#^7@eL4SsgKD(
z5BgUftp01P{mxWEi@dcQPOLUUlVS=bN^^#<li{o@iLR)Fh+(c>9q?{ct~egIg_)V7
z{S5~H6nqqlIB9VZL+2R}lp#Fg-JTDe##$xgtqf>%CJnmn3smO1z#NO9XVQM7zQs%(
zS?lGlNE^kN8y}4y7e^S1Gk3N*Ag)TZ!iOP2T)N!d8H4@x{le6ab+MO0q~zaA8zX(h
zIu8fOW?=@wv)d*Vn6YB)sn(iLe)Q|T!k4Uno=-p1Le~D}x#&VY(dBC2TZ?=TY_1ub
zn0%&Ieo8|F1zj<m*Pu(ErdZen=7Kj+jzMVBjbLg)!<y%xA&TzpvU<WGi|Lb`o-n>~
z(9(z$s@Nd{%f1SoljgdFn=q;BPmWSj(}1P5d77+ejMc=1G1nF)Vgw-<YGuwR)8(Ra
z!bH1EJzB>_Y&Yy&gUPPz?#&MhzinW%T_il~HNx+U;m|_Qxp#*|GQf1ig*VKbDHCa%
z_N(M|jXtzLietwrX%veeu#wF)HOh(;FzJt#>~wgXIARgwlEh2RzwXEVoC_&nk%Hzg
zDRy{;@~tOgc2@>p`UWU-IT!48Y(U4$&|on8r)5BS(+ehkz6RS>uI<5H4EZiP$R@xI
z^Kfx|(fCcJ)@JQ^X34l6eRH#0(#O`Mi-BHksA`~k&767fDCHfJ-tpUqd{Uo9eT771
zneJ4HyV-N&llPRj9rxywvXZsd=8I<Hxv)P<zxUPDoXni>k(HBUEpj{Za8X9XivCtx
zB)XT#w_EsTv<S2XUfzO#xr?~Uj!H^i&BBQ>p)*&{t;>)M_b9ejxn6JAV>;t;+sz6~
zN?r%D`i)~<Jw2!Gc@5aXzy(&iIwGPUU_Q{IO)M+`Y%~C23xz9`Y20q7lR!j|iBSRO
zE$>G{<-GLtB9kFZG#@*&(SEbRA}^LipTfc==<5s=czb(iE%_w!`$#)9hh}t_L1)-(
zjD2}f=jWIw_+iz!pmm?d7QPS`HaOaKBP5D77!i+V2Ccy7Dsq$=ffq`HYew}f`{1-E
z=NsggT2LJ8Vy+)?S%^<m)-(16KgieLjHyA@e*JUK!TJXB7xlgEtVQW+?~1_;QYYZ~
zBHC5A+v7YL5E6tend61`pO9uD5MNE-cFomPS11#+7HF=_!u0H;%V_M)%F2l4tYTrN
zF>TI91#ZAlm8s6>pp|rBjfGy*3X0{fwHV4h+*!<4sc>IZ$Q`<M`<|Z3Uic@Vy-X*4
z|C-C{)?0K*NMd!+E@IcYohRB*u1~$jamqWV($QwEKz~%sJNj`vhwFGw@>asf+ooeq
z<{g&zavF)J`ad?z`|47w*v>S?>fl)oWW4NmUF@Y(tTgx@cS&d{x^%S6maVdJQbKg7
zR~P3kOasIIeoAcYk7%}LT0@fYoUYwpp8EvHM;5>F`;;{K(S?Hy_}?<Z5)y16mJ4}|
zk$${iAGV^bAmrmlmmwe0tXf$#28zWfc|2p$OnlCCNsg^>ViMy|lgD}LY!9fZZI;(*
zv`8CDORyZR*HSVwo%ebN$|%-^_Gk;!{x&AY`<{G`zA1C7ZPc}+zCLkY#&(=x%PJG_
z;C5))4P!!jH`g5aW#L>Ck7ZwJ4$A^&_m9?APN&t2LT?K#XDq3yb6{B@Cnr}_TAek2
zBpJi1m?kj-c%?aO%+HWC5Sd8EaniA{d_D~QtnlXO4j4ptWj=iJL{tYA6;)NW8V(>z
zii*{4YprAaA|i{&2iLcEvM>m`;~hC5C<V^o6ohF~(exIOB+h1~D~)w=?;SJ?g@67e
z|D`fNlr>b*c2?%Ht>2p>U0FgsV9|^twORV!FJQ=R|1vHow_74%xwNNa{ewi$!@a~u
z)(3-a+vN#@8ynYv0DNp@!Fp>-2rItSekP!=WV@?nsBd?G>yXlS;#V3r4q<_7iv*RM
z`I(%&f=`!G34Xct%B)i#mRtw2hq$Bk4zBY_t?TLJ&OrbR7gE&0f$i|im%u`+0%TX$
zz~(GbI0+ZGY@&3-p*8EQ>LDTpZ<s3>Kr^i6!ScC;xH!y{BCDCEm37~j&BHmwT!H>U
z8hxn}6gj_s{Y(_kqM(#kabByRy0WuaWH69qwN~F9H+cDq*Kn<a#aQCh^0<yiTH}`&
zI~^VCK9X^Bb8~qrwek|LyeF;<SRvqn8+jm|6dV^;ru5DhrMD1)qimJ*sa+`+o(Tz3
zh;cOP#tIw5Vq+u&1*;s0SwZ`-5uy-Y$qcx=qM&G@$-TmfWCXP$qf<|mNqZc?fs+zv
zu3U38uR9C%<}7Z{_7Aef@L1Jt1+<s>S(Tb9mFpn=GZ_Bzt01;frTlWo)8^L!SK5Z9
zyHZ=9LvsWmM4oGy-}`^q4;C%Jq4#u`npa85aka_;c>jQRT`f*@-|u;{6j$xY<GS6^
zQMcZm5%TKQUixTL6MGCtad~8<;!w#f5+UxeJ^!Hk7>F+*(*k+H^z17crAH4Q<XbO1
z1RRH|)BqV?i{|Dw253KU4H?Z$MRov~0xK<2*$)n>CZkn0NJJo{)L-1YoS-88ObMCL
z)aTCY%@OaNS3AyQu(7eDcRh4k#xyG<QDWxM#)yNpS`QS4946L@#fAg~QiClmueGKo
zYf!Hg&N$kLDMc|WS56+?Sd)W;#8>5yu|82!%<MLk{Yghwi|cBm7}wN?Y9iT>j@;Ep
zweJ*}`J<!b4NHR_MPEly7*nV=lbEbFmt;66S3P0=APm|Hm}~YfuG{;eCu=HPLBD7U
z^~4bJi+x#JJIeQ?xkG42xvg=!+3xXP=cJZYuR>%WY>Z?D$5q)MFQ?M(y`~5QQTf79
zp>l9;Y`^?`Ye(cACimVBspOjgBIP4A0=Z9w3d2Baw{dnD*f-m=#6qxW2;LPXMtzGv
zkqQ9(M3*Yru5@Wk9OKJp>Mttvv^6LF;0B5WDd<_IeV<o8#gdGACL<zJVAO~Cw;x!y
zcHZ4|a^l@JeRmNbAO9$9k^8++5TVv}2zMcUfg|RxlqR7XbXjkG`~ft#Pirr|XtHBq
zAmJ<nT>m|6Q_#0ntF&bzBlE&zGVG>+E(bu>#w~zZbXkESNfa}|FM0^Aq;B_($w`!p
zL4zRb;7u-Ynf_Q^_&HHS+}nu?oGWja!EU2B7jARuXb16j2U)o-=11Mo_IAj6RW+UL
zj0n|%B^4+DZ9jfIO?1OIFffd1W4Yv{`wCC_!{^W79w&ZiM<1w{m%U}Vwa@%nU0>O&
zRjo`#>F|h<2|x1U?(;YfJ<L2eDnd?Me-k#%<07?@O6#?*jUS_K6jH<-I<|OrdHZ_|
z930W459&Wo|M=OANIRROL9_m0In3ku#-EM)qjV>cBj#N??Kfy!y@d#IcDIAU-dLvv
zdjn}r8B2-Py_}BI{f*S7uS2KpuKvMemCn;EcTt;<F@SY$I$AN7XBND>q9n~M&ScxW
z=jq8G&+WFdu+TR4i6~Hl=RwCWx7}^mwZngX-1do@$=r9hwzSYM&MyH_<b}7ew1h>(
z-a0lGj7>yV4gmGEIV)u0yc8D~h9(<&SMFPf@Y`km=bWGu5Wb=V4278f%*<jnn+-01
zG-}2cKpOyG?BS~6<>fVLY^ODPXd?0rX-?g9JvbP<L|Nj)SASEvef8Qsh4PAu4$s&}
z0^@PdP-bT1xzI*<93%)iEQh<_-n$aVWjnsPqZ}MxjbphZ8K)+Gk7>M`F<Uy8et7(Y
zlv-eE9*<zr&SFGa8SbNKpaX-cL{*7HL#}9iUNu_n*{es;b$ie}Vysn868UK_uxk{y
z?1D>0Y=q#!YGLbrlT6SHEjYfDUtGNBaAO2GkMXrd2*=Um?iAN*c8})|Lf2h)x1+dR
zK4oX$h~CZ2%2-&`mz^UsR#H(>;ZvF1K4{rKFCRBND}!S=mu9AfJUC*NZPBq2<3|Dr
zsUqt45fNoDiO#+Z^eowx7%S;$%T0Bz|J>$yKJ{XU-G)e@^Pv0Zm`?~2u@H0TxK;P0
z>C9+61Nm7giizP_`kw<l_|swPINatVX7;FdJ&8)4$>qb!)b=MieqA6((;U0ETFgk7
z!3CP*%<Xmav{A^4EHpq~*|pf7{|HPpI@HqBEK?&R{z#jxS@9azop^d3D*1{^x9OMW
z1WbnCc7YbgQ1Xc~VxAe`&Ou`raEA{V3gqMJh`T||`R*d?;B7~TiLVZ}Ec0*nmIqcA
z4$8~8Jb12oC8pM_sW?EP25r3Jl0vL&7|CdYNxdaz4oLCij^s2rc^I<VPD}aI?^xSl
zt_(caIlU4}SzA=1T&ZcXV<;~l8rGYm(t5DBZZPsnw@v5<{!0>c08to(_Ds}D3#Qv#
zFs^2+wnR*JC-EHP?9`8tvOm^^Y^>*hdjSoLIz_6K!asHJwz5stQuNDYk4ntcIE|(9
zFvFJma$qeYx_89Y!klaH%%qEz{TjwnUo4N&;)#%CMpxSi=|g(MhD;sf?JAQgLv-Y&
zi=HC=+XaGKxp5r1iMcP*yegVoTSdghlS%Sdc^nHIM$k_(9gEJYE9@N1_Np@DXk@v;
z>Y$X-=y1}D+Uu8r!NMKd5o;UQjo#f0v@<+5hnrqjXlR)8OfIvZ*a{z)S1PKPTR-)7
zx+C(p4WJ>_+87<RGbdj_$@&`P$bj+w0z4WJYp~ar9<Bn*O|TcIrOo?DD%2Lsk!LnG
zy4}^g3y~~#01<an1Km%-{2n73nvdDoMcd_ly$0_cYbt0dO;1g&Om4>Exq!$5yu*PT
zv9q^F#O<tYp**+q#bU}EYS@*bGie!_3a7mwPfwRO<E0>O1Vc=k2M=6V2G2=aV4~?2
z6%|!?{;E?yK;}t#xq+CMhPM8C{nTyQXEd*+<ptTEu?p<lxHzB8y?zQeSKpj^y|M8d
zMgB<j*~>&`Q3aF!TBD^9r@jp5mDyMpOo?SI(NS(!t2;Tb^Yu@aOsP(qPDg6^zl)3x
z_uR9yH5nQ|{e@WjK&M{iB4R3*u{0fd-PT0a>}>I4S=qPJgajQUW+3EB54uhT^|Xnm
zS#51v7Fg|qh+((WQ+1}d+6PocciN&O!@^w7Hjtj*CFq7fe(esP*$uR%T?M!MwHQ^s
zR%Mk<Gc9t7_&nK`9}_!MF~h^)dgc(IP$27^tyCMfxpc%r3m``4YR*WNC*Rp*CH9wV
zrC9NB0DB@gfKVk-D>pf+8B_Sx{yDsFu17Mef){)nEZ1Y)((u{r_q#Vj=BzB|8K;>H
zMuE*p$Hpc&ZsB(=WbaS&sBX+hGZzk!i1(p7ryZH{M(D9Xv=Ga0f_O2}h__lmyTS4O
z5*RR=E_ELbja;(59Ts10_1&euv-OE&quyL@tHaQuqHQo`t*~B5O5l|i?c(7$OB69=
zFz#OmQ~_F9vTw}H&TQ-79srX^PQBVO5ULs$gTZ%i6F>zr*A{&n@6`u9=(2*vE&_!7
zIKp`<<&(WR98VNzpxh#~>w2FGS!6S)XH~?kw_<=&BaKyru3W3vUIY4hOIAYkjL$Tx
zd_&Y4k_nphzr#|yfN@Vi-$n0tEh&&8Rq9K5MtNoB7M6160zO@>r+0-Cc;|>18d_lB
z;Nr{|KK<em6-DJDFU{P1)u%!PPsh=kjZG2C0ra;APf{O|F)?*FkS5!Qu#yxF6BA>X
z!#OxJld6b8@$8p;8~+6tTZxkO5Zw+}fRcpn;LD2f=yxJWlaoXx@@GPAY8{-Q)k0qz
zE$#VYQcTxYm+DfjipqTOT%zIcPND0g-}BF1T~bkyi<E(snc4fm;5;Ubgco$z2(j`q
z^T<0gvh`mzrJ*+@hEMs@4I<P@Ne_@D{$GItdy9lbov~0sN-DvZiaN)f{e?xzhYLJA
zyn$L;*XN`_e+9d+*P>|u?R0$+Y+gt)P{?{k`ta$?lwvAZloPaZ)DE%6`_ySbh2Lvi
zV%SptNl77t5=(gJTc{!5qkUoMME`Sv2@jFIIe0kR)K9W*Xo{gHv{<5J`bRH7|D~ZL
zIfat7Ul2#0L5CbntR5z<f6+uw4tP}{<BxAd>C7ARRlbNjHUQgEavY17<VR7FoFLh`
z0qhm3PwDd!`|r@LrRkBkro(KQcD9rGJtN27k&?;hyjp23vi~;_R_ZFM3XWBn@L?;}
z6k7reQm{3D9T9G<1Pm@pXv1UNFx1sf(bLoT;DlOWF+_uS`%^5iv#TdeLCzoZ`az?W
zh17O-Qf`K7j-%--5nabyf7_>ZLNX#s!ir4y>*6Unz=xPmv<3an9?J2>?Mf*D0SE+q
zVQejcKT3{s%302)XyB(oZ%M@@W@we7-E2#9`UzqWwRKW-5Z|V?)BeCcC@9X49zBxl
zVWb#urb14H!Hc|fTzu>H6m0X*6WuSn``*+0lMXnX-gs>M`{6=X<#VV_<;5B3=sYgc
zAjCknMj;A;><}RZtUO`AjR>rN+qG2Of@HX4Iz7I=>-3WG_yBC^1aYT>XE*^t)L=yq
zsB#$?x(W*!=qUd-KT+fe0ak@YvkS=1mYW6!85b^`D$Z=7oxs~|CU#K)s1RDs&}5yN
z#+6TDnkN<Cfs~!&HuUPtDC22a3aVnuJhJcZI9~fbR;3I9h>e8MYy-+px=zIzw$D!i
z{@Uat8R>uR_${>Kg+eL8C6xQVd3k>{87NXe&&^aPW@fZO6D#x=(Lgz+ItMyDmRlKt
zCUAA1_4iAuQ%C*BX)7|k6{U{k0*T)5U)|3-*LYpFETE^Cy^W8OK0WU#MxyrzVjRx{
zQ~d<Xm*T#^e$}b3UXs(?#ztV#|9Q*nEFe#nGI;deTZ0fhyaY+q4zK=wTW<K6mr%ll
z4Ed~el?sYtl2VFdScN`aaQCOCCFkH^2;?q_aQO2zrxNFvi|?QRLHo~pL*Y$z|2It!
zE;B*pKZJt+)9L@b%l_YJWr{n0r`GxH{r~BM?mXdTW%eK(?k@m4tCAAipDU0H1+>kd
zzDeL>0(5hTTw~h$o&gpO;CApYiDds8OcjV+qz9wB%KC|y0BX~rxLp7a`V)oRFEjAb
zlV=h{jQSlQ-xoDy0BS1mze-e~#S5e~2!ukreEFGMjK?K3h&cJk=S&6G1bI3w;eSti
zD89Z8p|NpXM>~r>VCv8P^eNB``8_;PBjrXaFz{&A8jY+@4pV{t8XZ{-nUTb26@9s?
z&WGF2Ep`CqB$rehEYz#?`Hq&UlCS9*6g0XyvxV%ES(xceo@<Zgm>7TaJ-4geDi|W&
zfgB5d*D7V^UC6E5%92d7X}{<g8JnA%3-TR6Adm_)ge&9i@|CtGW@ct3#+sU&hdV~I
zX*tlNMj{zlStFX^!GRPRbTAst7f<Mc)ZZ?57kuBp6cuULk~O`@-<oJZ1KQfZ<P`yF
zUD5=~QSd>>nQ3{VpafatH|{ZeyDfNQJb9I;CV<6J`Sxn-$Vgx_hplnK=0{SejN{or
zn`=9QloS-(3k(VRE}mBcg@Onql@)7U9i%!+6$_sNEp0&X<PhWIhjDOS0K2Iv@LynN
zX4XJCm4ed^K*Zo=;|zgjSeC^=u7gS+>@Aq+=?^z&L?N*N-tx@a+PU-u2(x!q5}~~Y
zx`3<KuLFKSdXLTsd}sW@5W;SC_*_*0mMzeRON8vnFo-nOD~pFtp{?{0(D#69<*}!5
z6~a#-0@`tZ9n385R};d48(Me}S&Du0<{K?7By@b^xST4=%e~&cBV@BodB>BO;F%<~
z58n&IFW51X+VXcm?hC`u7PxQP&L@XE-S2beR)X{L*5H%<c^7xr9hRV@@M~b8yzHb3
zc-6S`FM$VMV85ZMB(17?(x0yd)Vqll+|>0VQP@`h9a%Wix)+KvGYPod4yTFn@m)8k
zA3Vv5J{E;__3Kx@g^y8De6&C_%^<|amYA8JPbcZUBPeY%_lt{(DeG8y!)09iXg3z(
z)i~|VeY)n5X~7lc)xb~Dz5`|wsAz5hK|$7*1!FZXE^=}>m)3ofZiW*bEzivfc>$PD
z1yxc^l02r5Y^n&Ze+npc*fqXh_Sb|*4b@jmEjTSRfi7el-U+%Iq`I6Z^n_C@gFFU&
zQDVY@EcEN^SIyBX2k-?!e3lco_yQFu#27=5>g99loUR;Y7Id$HQHm6V%06_jK+2Ku
zIkX4Fa-iDDgfczFy1%Q-63jW^L8rZ}04@g5^JrHS!k;SgIj|QKGU$py_w`i{)jks4
z7P70ot!7&lp;~mmaH%&}wIxe$4^oi*aLNjuT8Ozh@~?p2DCu+K3VCCjTmoreP!OU}
zNGK{I;$=M-(>Ur(=z{Eh2sUf_y(IwniLJwo>XVme_wr@O;m#14Zct3@?4EwDwFa&?
z>{4RSFYi*&(1a_f533K~$)T0IO+fJQ@ndG~A3sQib~kCW)kelA8l1$Qqmc7Q4(2E;
zbRlce_?ek$)5N2bGcsl-C#UE4!((eMjRymh#(KQYquvuuR)1-E*;rTiMdu2TtRbn8
za9ix-25`tT);+Rd3P6WvHfMEhZLGvZ*%48YmNo|gRq5yR)y{4Y$XbqwA7OaX&SHMd
z)hYBk&A<US>&;et{rYY-Sf+j{E*^o;+1uBz35TM_v)lOh@ub!n^=2owufROYAVd9j
zuAUkLZNs7mf$XKxF`5rRpgX)s$IR^7(rBKRg&509=lw~)q6{NE1EV@+BzZo@avJ!c
z>uXp<7gr{*+LaSew58vkeGK60f~8ZoWHevvyIy;o@XMFmYh!1@RcNGto-c1CMIlO5
zK?=sbSAeo4f(1`3drqa>*{_jG7W)7k9Grm+Im$c@kpLb~gexq&Flm^9;(6Rzl#-$i
z!4bG%#KQEZPRg5OX&ae_1(#(Hq_fX7T!*_v!<BpPZP9&@jZTl^Msbe078~XZ=ll6x
zGo#lJ_w>A^3~2xem12mVKfb^SogRpnGCmhc?55t`b6XxkmBSkv{l1YXi<81xl0<RE
zwv_mYu(Go93x{+t(f8f{oPO$(w|?(r{QdkdUb%v?7S6WkP@dr1Z0|6Aq*$oCasVK~
zmN~J?(rLe4yTWH48tJ5OK=_;~QaIdp^DZMIBz)>`iQ)pZ{BN<q^Pf@I!wwD5W@FqQ
z8~X;zZBB<x-xo8@VS6h>X^XU7Tgq7s?puF*0i~uOQ!xS3ERb7)G`zn$QVAt{Bc+p*
z6NF95UydOY#oGvWpAVUKSS9~Z^Z2KgYcDiMU_qt0Wsc1YCA#==;?nv=!>!*hf}0$p
z&%LBMmSgQ;EA8yiXb}8<mU@h`Ap_=woC%E6W+3|R8y;cImFwz1w60v?=5`x}l;>BS
zozj`IFdTn;ZhyfTL^v>(COHQHU6nKbqj)NnGX2;6L*miBLHG=>wbdR{e0Epw-kfOx
zTdwV$9k4_L3#~H!&LlwX9Gsl8*aaYV#WWz!kM_<&PIPp1)#SI{9A$X}8}#?@-%nHi
zq?&xT@pRVg;pVEQ-*CB=kjU$Ra^Pt^^fMi+sfPFB>z?|~D=zh2nab{bXEHpP=2D4G
z&UmsjhMgSS)!~6J8vI;b)zJPXWHrCf#PS>K`4Q1&e8oD5u-tKvxXgSaJ5BPE)lBor
z?n?Bx+u?<}Ou<2?jC2Q6-?0qt_CkCfXnDOrD4q!!kavK{ezw2C@8%XyC2y#2WQ2Bk
zI7|{!+!q#*-(kiT6cyoo28dDVqN_CQv)Io~V1b1YjK`R<F)?ss<ViB}K9h|B(CU>F
zd5w__4`S1jkm_Mh4LGnn=RA8;=T4gwp8W9BDmLj0V2=N&9mm7NW3!sYq08S^1rgTF
zcTus+HPFD6z3q#|3hNOZeEpB$)4Jd_wfT@|a!TLO(ElaZ&n*zw&HfA#Iu=u_J>3of
zl)<$VFAy$GWNZ~KKtn?V1U1kNfe6r8vftyu`FT{E`|h@NrSrkpFB)2(pDN0hnRf=>
zQy^!@Uz=xj`xQf`2@Y6llUb9uACXWya4D8b`oMdKRYPG?7W&hpg?h@KSKL4lmi9XT
zQvhBY=5?nh@erCR9>;lbhgylra{3WVsnI!=1_lLCeFb+NA?@z_HBeOuDi;%bJu@9<
zy?5^(jArav|Bl_SUe{q<Oh7R+AfTU>oQwo-Cm8HKViU06!d4)opuqBz2pmXYqu6rT
zn)RD!gZCpE{<Pe2C$q}mT8YheIpQwx=o4~sOn{T@tiGWksLGjRPqkt3O%EI2dU6id
zw>Y3Og6u%x><+EkWmHrQ5^hfQ8s|yRAIS7t5obeeWPoxDk55?{EA~JzKEo``=8Q;U
z%zqx)2aVK$8}t4B{nW~*0~I#0H8mcK)oyQt+gFIW2Hkc)L5k1z@&Gr}PFY$1w=gg+
zOdo{DeM@=r7r6u>c64s8nw*^W<hhQrDcJ62h6-3ISKVh?zkVBg1=>>r{3)$q83*(C
zrL*lqS1M$kW7lFrDjV2=S(%%gPZk2R{N!YB?BwJG!mxhD^UykGp0<)c9D$(n8w89m
zr~CY9uVG<9Om`0~^3_#U0(0=t1EvqNwh*;HeX&Wu?N53_F0_NaJ#<@?MP7eY9JYhi
zXLNKliH7?ZY^L96?I-83uT?^DAv8p$EgS)FI#jQGe2Q*k1!CPvp^YA8VD~>)xpnvM
zYp9uF3IsHRI0@_o4*S&IQdjhThnMX)I=3ID)#bJI_Wo*bS3ac7RLEOea8Nz;L&v3>
zo}BzdE=i0%0=>A$esQ;3z&Q<pnAPLZZVp{IXUkWMOpk!Dt(iK&SVQB%sW%QDUU-UW
z1aBN(?6kvlF~_HFL21`OjYYE4?nyL?%_UHp@i^~GUBr>9vLD!*ll<L{OlN=`SH|cI
z7`)ZMe@gkleI01q>g+qI+lnuVG178qxwgJvmdT8tQ%347@Wd<e^Cv@0BuE>%ZI|!<
zQGxO{cNt^oqZmG5XFohWIm+hS8iBQ~RI?F%L(AIS{KM~w^x>f{?<IUuUS8fvdYwnk
zv>TV6s#TT!eiH6-Z?61JYT?EHOCUr+5&R!*8wbvnzrP4Y>hiyIabE1fE|xB+<UuJ-
zPv6zk6XtIHl!|H*l2Bm=1igPB`sXvp)?;|k<xv8+Ir(Wv*l9?+`Ps=&Uq3t*`vjsj
zNTmNvtNyn^>zZqJHNk57$Aep3A7`++_^AaR-*kKW6Ost`cduNz^6x)O>dw7j0!Q;*
za6L$Am*RNniRZ@gv9{sQZ@Nawp>{m1I)8I7Hy-hF`I+VIV+NQN{Jv+DaXn#q6ca;3
zk;5Csc+dpH#U-ox`DYh$k0+DAPy~{^t80&VWBquNeE-jnL6mJvSG$zmB*)YLex{iA
z-(0-$=oBh<nksAFo|TY4OBo7^j5r5V?E8S3us>IbvXA%lUyCj&flOWAGhaSWrG8Aq
z2L!I7vCf~_g;8AJhnM7*#MP7p#d#ybFW+|w2o4DJ3wrPO-Z#+i(?4JI!#)%vVP<=P
z_JJK<;0Gh_2MX0>C}X1SKLmu@r7k8s{zl^eZ7sV$iInGs>(!9oA9;gwEupPt$gi5p
zD4d*IkJ@aH(z9kUc6zxK8fjEADL)_^>f*(VDI_7F4ukk8@HC=PDtaj?xwbdvb|(;4
zo&~*wsbHROE`UvtUdVX!;is6Wkix|TZ-Fa085u;Ut6~2<XWkc|b}tkewqZn$xrLA1
z3~Y`jXWSS=upjs0vQa7IazdF7D{6}m<SxRQ=WzA^Ved_#vEJWzVeRHLQBfihl}rg`
zrVv7k5JI8MWS)oJWD1d?BC|{(ndb(|RAw^EJkRrZE=9lnJOAHV=RNN_?^@?w>$LV>
zyKOz5=lguWpU>yM@9Vy<>pqMn-ih)<;k^dP?Ry9bQQEd)(}Rvla_}Gx-ANp#xFS<y
z<6XOVA9VU%hEY3S*6BO)@)_S|9m%C#ZmJqR7k>d6=X}`qhI~8lhSTjnXV)uFtISU>
z_09X;OJCnxYKp)0(@@zf919ZXLq6nik9HndT3&`b4hBXW&yD@O;(G>NAH@Z8E8^Wp
z&S{{_*>UY@+U<`IaDZO9LTnMpWfqI%fL!2$PK{_+JMkF1Vq@0ZoJ~uA6)>M0T)%*W
zl46^T-w)BN^~JS5-j+UBZQ=GqNRWIbTY1teuM*h-C68qVd`(eO@LNq3pdN#88_W*G
zK|k)L@voG~S{<OEdj4DnFhiFb_O7j+9Z-TC`(<mR`SH%LV9p8QAR0#?4@*M*R{61_
z;vIBz2z|9x3sZ6zl$BfZR~Aa)Ptekm3upmiSEY>mp*kt9hv-WlqHA%Dyr(=^HAT1=
zhlg7>qD^;^mtaAO+6Oo)It!vY<6m8pnIc+*AA$21aEy?`(2?O1mU@F7x+*c2Qs}P{
zXgxdnkrFtIcn_kUx|yUV42d3^bp^_(;ZNMXEgO5I_yzwaeO|krADI7E{e^T1Jn{ar
zDTSOV&aZucX!7s}l6~o%Zjx*Tp|@7+`pc;?6g?-yIS7-YWrZCaR;h(uiw5OuVr9i2
z<r5JRp~gPsgwOC+SEHby0CO3YoZEK<A4a*iFL>JK;S>W+A+bAN=OT^?ewfB3EM?V&
zhzwLjd`bbr+#;_Nh|4dLq1I|q2l-_mIegezP=8n|xk&i)$B!3p+$#^FfNMacIB6w^
zQOBdhy-02c>*5c5Opl6+vfNe)O~$bCh#qum_wJqaT=Q!1y5_cwr>TgmVDhTIUwLs$
zTNu1L{h-Tqol7<9{388?hHvrbXQ!_;&(0mzr{Mj!n=zv+P^!xt;GceA-uUCnw_|#o
z{hay_ZLg3oFd3a;i++st8w<{AxWM0kp}K5sRo(qoSYoKN6Df$(j~_RQYE<%Ut*~;j
zKYYqvkFWVihEaX$!0y%f9ypI^i_La~%QU*^0bD!+EKfs+hqNdj!p5N=NgZPd;4rL^
zK4WQRm8#z)XTZ(L>C#JN;WbFDz$Bm0oVKNds&EBqnoHs#BP-lQq$mv1hDI2nz1hpo
zt$p!}`%&pjS<3LGAWB3wAVbp+*n))ft<T4z%w*^3?zA7J!*EcP5&vsUyuJPxNB3E1
zgdG9nVhX_&=}8WUSJaGl5E|T0Du2a3s9BEt+St^D*|L`-$~(>?xD7QV$4)6clW*ED
z6ogHy3g-X8I%_68Z`=+ri)~LEcddnynD(BYH#+$?vrOmC85cMc0mzBG;!AwU%R1_Q
ze9^1U&Q7V<T(p!yJXX>}g^!I17=tcGl!p<Kk)3(3J-#HpE&NKbY^ce$vh{`lLF)6h
zCsV3B$7DvVzuLVxVg6RhR$4yE<q3z6H)FLI8MP%keo4+x4v<3A%4OPj+?8u5apHHX
z4jg8JL=vS=#%CFwpUuY2di&RiHnTD@jU@9v&*497l#Uu3hQ$deJT6|m2t#7Oye~jH
zcr-9HabUhsC3UxHhnLJGkv&UswPq%xD|V6BdhCdh*Cxks>U36S`5(+wb|kj`9P`V=
zK2dfQzpiUA>|x(Yt|)sAQc{160QF&1l9Sbj_7AJE?Ate#Xm+-?Fv*DGqHP2bUv-y<
zOizD5-6a(-ic%-2kYiIrk%lwQn47Qir7iJ&E{9#&ATAbr8}`#a*!?t|0W_I@#64PW
z?b#Z|-V>oqEV2jESu-Gd#N=g;VvXJctM#11aZ1dKmP07xt&UrTf-iUJxM>l4Z~=w1
zHs&PKUh(+>XaT2}@Hu+wMj&aN+}tP(RIXSKwqr}-^f1B8&;f%YFA3LFWwDcx5GAJ)
z?20gg7`(~GSXug7YYO0J7`pnJV;WA_UZkt@y}_zvU2tNh4*LH5lqcqo!W1nQSOw*Q
z11BEz!v~>Kt`@0>E#3#GB2wF{PkErWS5<984I(DGBZOb+)P`oRDieW3Fu{6}(d<1%
z&85_m$?mJHU4<cpE^43NADy7992R#Ia_|%VTM0hXRuf%_R(p?}>p~8V_j=7~@`mS|
zLJBkn;C)h^>jMBG8OU*6sJ3dBxO4lqZFO*867`}!a8hDFc3V<X67WFfS04%sg@syi
z-YgF7=->pNH8e5;$c?TMx?bNkx(M~%5oGT>5@lIqA|KT#*=8N0m%|o0#mA>2RE`qt
zYEJZy^~DlR;a+1pu+-uFgYxtbl`9lh`g^>X<y+5PXJfJmWSWs&N_VMfu!wm+@OCPf
zfq|i`p7^Auw)V>si*0WNl$4q(Dy}{H6oyCxC@vi+1;S1oSKr`ZX(?M?_O-eVEFg*j
z!5R5$vCROiod*UW{iT|x?J%d7MtK^(W$V&RlOYgF)!}=(y1l)#%WdU`(z({kQssmA
zk={MVO>?q24u_^{`7jWZ*I^~%R|4V41%j!Z#?HO684Sd|NFNR^jLz;^5uIXKlwM$1
zvRq&oYRQ)0(trm{%{@{P`fx`$CNukG2<lX6{sev=94~TeZYTy7iun4?7!$un<0yAM
zzKDwUQDxq$73UqU3zlQ;crEj-j0*T@*Vm^*ovW(&WCO4tqb=E1@gQ-b>-!mC3PT{i
zZHdPCBgv)*TWxKZg_?MD<@ELALrAs99Ej%R7ObriWyUA-=@WnaF3B993d;O7=7x)(
zU8pVXo@xIZ_4mBsf@;xg?s}Kci$Kcq`(r^@(kNdESWi#Q{9*|fa_b+;Us$Fg(1~=E
zv|qKEUD59?cbHXijNrSxm-5vq3#Rox)c^z1)$)+Lq)n2(1kpQrm0RXb?j@+?MO;pe
z4Wmjc@jWxuU#lFnMLAFJ<z^f6IqOyqt0@6Ysh5?nUCf>F_%@i^k~rLwnra$D9BcjY
zuk-YNOj9{O2aH#4j2=^#$uOLbmEFrVJe6-!I-O(Ue|4C@DaxTu<?FuT=`1VZr!T)X
zUSV44<}kaq%178!HZhr{kZheg$kaPMJ(Xstm~OLpa=ud{fNiBQGC4g#nb;0E3eE4Q
z5xv>3oxuKLmNh7d_OBMn@2~!?l_PO;VZJPrP%3DP>y&xvmsI~-w^p@U?|D||9dclP
z|32jzv2=go<SLiZfT>dgZ>~XG!+U$lG`+eogF6O!M#Ck}&PB)Uwv{dEu6(e!%Q738
zYY6Bm4bU8p%`aEYsfn-(;3OpRq-1@6>t&VL!qi}OvP|}QaliPXTEk~zZzOc(7;3Ak
zh^Nb5vd)fFGEUXT8RRauO^gjSCMTZ$zNFil;S#(u#jbHJpR6`+uleEHxY6TH56*`_
z*|&Z+hwPP}CjJy1eHthaPV=4Dlz!C-(qG0#S{8kE>)7YRD<9ES8)jwtGb&%%l0h#Q
ze<*5K6G=^VZOePR-pSsJ7Nc9qIZV3>OK)GNtVs0F&{%%M7-m=6k}Nddp|6yBGebk6
zv<H434*Y6ma|r!L1GR(oER`(MpW?O(moc_6;S6XVUwP;>O~!u6=KA>f<Y-N(et#8h
zVoOGh^%*!$g>GIn>#v+GNgdp2w`7o^vcLQ!WmaZ3_xB+BSzGXxgft@RDGaR|_6OL`
z-%3<@o}D^cb%L7b(r>WJkxNvTU>SLg#LII;0)p}V0|Tyx?|tq#r(8gvWOZA{`T6D1
zmF&YQ&QA<8TDZ(B#DvPDt_J6tHpnK_N6XbVmVo1PgOA}>^zHWQsIcpAwTS%b<-4a8
z?i=Nvxv*_!l+{u|HIo8LUZtUGjox&_&yA@D3end-+FDKeoK_iv!pVh_&LJ-c<)FiP
z0~Gtpndrs?aVaT&A9%~5F5%Hjct!La+?O-@A+%`sq|?T(^2e?MevPh^#Dgb_2ONYj
z<|WUEg&~kTTR53t`1ACVHtZlSkSty~MDG(nrCr$Tr_ar<b1m`Ca+a<<!}QFwZhex{
z4bzn9{5^yRcE0EN6q`Co$!pI*h8*N4<>%*ZYPF4KP39whO_1J8U%HX2JNTrjl@GJ+
z+fp@y6FdyO#j)M_Te^pvUaS^0xUH%X?H?0ZAnRrAjjh+Nh<vysJ;2@cFpo}i#6u^~
z^;%bSR{D^DTQescn~zw<HPwzL`n=CadI@=SzuWF(PCN#mw!s=@a)Xu(^U^d5C(qZ<
z%3XODD!kOyN_Fm;&o>uip$2i7Ei6c;KaaYasE~erME&;d{l`}5EM~IoqD+fd9jNZC
z*jj~$g#~ZfmS;1oqUT}=r3GbrGjEecKNaQ7K&$NDH?p>NYnV=fdh_^<n6bZ4|6qUa
zE<1MJk-w7MDcEfV+Eg~6105=q!nX4hkvm3(Tu*J%5tfoF$B@M<b9=>)d?{_ez1eO#
zxtDnhpWT`BUXwwb7C+}Fj~m5ajVG&T4yKn&amM5MF*rEr^dygX`gL~Tw&_u&1PSfy
z%o<8#RSgFuSF~sbL_A)fR*n^_|4vch*pR%Mrqj@2pv<>Q{0RmWN(u`1ioF#?M6xAI
zdkS3}wY9WpM)ngOv1+fV%qNfPDf1Ex)Ts#x`nt!Tydl}aJOy?OKS-J1#KoOxyvm&}
z5zGa5)rzv3l-rvEo;|y^amXH*WevFtn+!iczx?HyCg6RjD_-nzH@zxU-XV1o_C*MO
zN6y&!9eS5!WP-`gJ=_7W?pe+CCEX$woAOY;y8X2|Tu%!NgvymNrh4L~TFg0zOLc;#
zM++x~i|F^J>$Mrt-1(A{80^sY_ve!yN7;>rV5Z^@AL+7}>0`+j&6%2p@np4z%DD$A
z4wy7_m(08QKQD76x$GItVNv(=fYU6jcaVx2eTvYYxKdrrxMI^CVHCbFGi0EeRy9{#
z?Z@z9&}`Dx&+kqBF!w`>%VNI|;cMH;+J3CU9~CLLh6ar>?@rOL1;Ju`wsT|HEQZVK
zF7ffNgM-tjWNsv?)K^a~$Y&o3P!QL?A}{~7xtZs5pD-#tZ<&U-@s}<MhKH+r*D#iS
z<A37hFfHssoex*JgC`;?L@=GA>Jv|2VQJS+Gh%e*V9F-XD<GsH<ZZ@JU^cZPTOq%A
zkXdDBY5w_d7-pah6PAzO6DSq(BRx1Zz1qF|IIo+ltNqN-yrvZIKI`!Y>-(b4KD!cu
zChG(P@nmkH-6^{exUfzK5m@kQWZy{Q3Fc02tj>Q2w#Hfi>T`4?SbxX_&pz5tithk<
z>dBM!GlQV$_P+=Wu5(8=rMx*wFS*W?5P0%=_l8-4BengPW(~k>{HOVt<o;RZEIrkF
zairqIK35kHAA%*~IkR8wY>m@pj@xPkBs3mvY4`t-_=~4;T=32|wvcUV>S2Iut`O7&
z&Iyy`fB$_yj%?e+7IKW5|54%P=SrJ&Bz{31zpmTysnD`td(lf)`Hv6M)ab8;IHHpC
zF@JTzaK6bfpEePmKkOnNfy86^Br79_CPOx{)7o1VCcgXi4F$G^Gtx2ZYYLRVU`a;h
zj#kR6SBej^7vte7vvqsEkNs0Gugd7_;iOD~`6j&{G*OtQqJa4q=p~DOSXJzDdiSDe
z2P%8ivwI{NcM2?!P?8=!KtX4(ukf2t@{DEqDFGKg!HvVF`pq8H<p=e#8bGg1yqScG
zq^HVr9`1&|XM90$;<pizBf7XirN)pXyng%%SV!6G3Y_wIh;)4oM!)oUm(tCfuAkAA
zU2}KB%p9N{{@kb&OlC)NA>j*TA7lnk;yRpM&_Usr4PT?(aTvX~o+b+$?n+5F_B~^q
zt6hB$C2XE;gV{t^3>R0H3;(6^pj^ONy#v-}A0G%)Z}N8&GXT`bZP5G(CPvCReI0!q
zFc%PASLZnHzRb9}ufXZ#$(IEy=**}Y8W{X+KilymDSY#`spou=<+*78qA}P5wK_Vx
zC}2vU2mwvF(5(r>NQ(WT$*idvDmf%SZ*0fQo5`WyxSQqshrc%$+-XW1F3|5@Q7c3L
zIYA}YxFY0lwK5<Hy4u>b`DUvtn_(((-g>GCH5m!R&HF{qLf4^70*$jenOmF!FS^;G
z)eVln-DHnDveqJB3hp#?ekAj>As9I&aoA#Mj>V|2zu#!+M==_baQEs1H^ZH5`RDL3
z<AD3oRilY67kt_NHm$|#BI>l(H2uLRdj^G@T9)N1!wS1RkIzsmj8sR}yB`gH!^zDt
zhx;QPdqbP$c83xnaClPTOeN1_E!5Q1H0z0X(d`=JZKf#GczH(wGEj1vvYkI~4n=CL
z4EhPrny3R%spr|wd)pp9cFcazFTmM5QmXXsknWFnUVVBR8aKeHL`ikZ>MD0OH5e<t
zYaw=I#9)Gs<xPf=MjZ;MgH7!p1*fLK0VwtFs{7QMdsXrkThqHcG8pg!H{Y-@%h}&P
zD+G?aMJP6F^-pQ{0s~3Wt$(A}AWgxQVza!EI&eAG<_H;?%Mgdr#8Dz5s>DKDH0~J`
z-uvL+tFPMxFFgQ~;x%V{v7qF7<*LJ-8#hvT-g<c@X+3(JyNA%`lp#7AggbUT^UjT4
zd)m{3tM-d&@>urhht)@4SKl~m&b<gu+9J}ptwJql`@Rty%Zw=76a4(DL;~nbO~Gz-
zA_i~^K1ysM<@S__X0HrNzjCh=UspCS3a1zNyP@TmuO{rKoMm}Efs{^Kh!2DrcQ;=9
zr58E2PPf-0{4pll#i!JtFlFWS1;d0Na3O7hN7M<Cz2XArh=_h#TW|C7`bkW%<TR&w
zajEn8FS1w2O3e!GBULW2<jnAJ#GbzaKG=rAl2~L4$*+QWZ7%bnGoFWqEf*u*{lTHG
zP1JV&=Lx69sebu1Jx;F^kocsT_MbE6J$G(mEL70LBiXp8jE)Po0b>hh7rfL?ImA+M
zn@hbsSBo$UAGI%UKE%l<(zKhPzk65BTlg<Wp#pxw4$AGnZ`5>@J!{Bw2J`W@sFlI{
zaJB-mqA7heBq1mvKiB~iy)ZL{D%jY}tk{=6-P3axv<z?6Jge$2ft<!5%hbWi7x)4y
zaXOivw%yi%YQW6qH0^T^3R*!g8a77gYQ9*i3(LFzllsDieMpbFEe!S@J%8gbzEh|B
zVqQZIIcBnxVC8dJ*{7x^!C%{7U^#NQ<8Ux394`_RnU_7abO#R~J(_DZd3oV-$EUKF
zl9vPpp9h0Hbne0h2V_Dz^B(2IcGM@rTXPAYhsf#a55o~XGC1<~M`|PvVEg(I2zbBO
zEI$Bl;;4hj@6Y&#zQpQNT8@=;9E|xV?EILQ^cEP9L*!YGQzKp8v2!Pt-4}V67h+3d
zf<jk`9d}DD$sAv~cpQT<@Mq~<jo}`x_WI7BMkmgkDXB}#cr1LLmv{3{fo&)3#|snl
z=R^d4z5aKPXihe|jjZAWb8*|Mhl?1A?%)u5*Y)+M9&S752M#9YSfM-q=&@b->fK)v
z*3oou&22(jaEp`%Oalp0;eoJ$1>k?@e9vy);BtmItFF>MTDvCvaa`SrAo=_61P4F<
zBYwWv^sgop>z~N&`Y)>C=?AnN>%U0g`v1OZ<vjtHrHx}rVA~|?Us~;}wdww^{GRK*
zjbt-o7HxEp<Qkz`CqIfh><Af8Ub=T?kHK-@V&+IHA`Q<unb_+>ipCPwGm7is;91bS
zZEW^_Y*N9p1@F}EuU}^W?oDj=t_w3)BFoRQWMpjp{bR=|A@|LFpB@jdp~D$rQBjZ-
z2+2IZ!Mm)jcvZSl>d)&8LlYGAlhg`vNaf!7+*454oH-fD(~r}T!Ojh6Sue2q2VqqM
z@efy<l-56Tj%0vL0DzG(bacSv8E!<sn^M2*c`N|TzMcH?N8`fAQ={U~Ohwsdyu1C-
zll|16jvAHD5dlOPcKtfNHom9>r#vu!VL-fP+wQ}r9gikobLRp0OG{g^upSEJoZPnW
z*!%lG)f`qGU$N_gfrNy8^hZ)@v34*=9D=4@R_FAf!LeiM!j$Trh5-`phPB)_FR3s4
ztp_ScRWHSD6|!-12NvN|h8bQdKuxGUueL@xto{ummCAdK>xdr`66X??(l3tq;hO--
zhJl*-U|k_%Q15pN;mS&*g%>R0Lg4TJgkcCdo0ek+mU#t|724Cqi-Kc;f0-SSXJcpc
zYdmj#-7H15kZSsUqYq2*F=>4X{bbv1ueicESPb`6_UgqLWV@#R0apzhy~$v#S(_9t
zg6UEi!lrxs_O(cz+R5JUv?C!gF*rTm;gP_MSeSfa&ay45TOmy^lV1K-VQ4_pw<D}?
zig|%mQs9W~?lzkpQ8v<2SMMAcptis%WM*lZv4xhAFej@l&4?m-DYj(nmM^zr)9hG-
zYTMfn9%1qNw@CW6v}8*H>CZ6LN!Ld|(GJS=Orh5-X6I{9`IWN~5FEFY$tP(1@goCi
z4Cqgg@RB-VU}j%)jJP)em&3{u64)>$bgjBwkqhqd@7CZve!N}$A&`0X>4DTt<8F+E
z=*qLZdj0x!Vjt7~Zzp=?H<{=S1X<asCQKEpoODaG7wgn}MMf5Oz2?Wn(BSrNiT5I3
z3N!NTr0ZyGw4b*L(b%1v3i`+8&~lKmX`P<I&?{q$Sz@JcuTs%-2-ZltcOqO0Qkguf
z#q$!apuL<fH@f;Vc`^pLt(9d4g2k8GX+_W|X;16@Xi+b8kB_}q%t%S5GvI9Z_8{ru
zdGmpX$sey%Ud_vr|3YKK`J7zoAy0URT9eWt2cqfL$z{Uzcq*{)27v+)>{?9^gV9na
zMMXtYrdtNhbASZX;uhfD`?cT;IWisa`-}@ed^pZNsErf|M9Q+j{?lpWou_smK0Ef|
z?`7PP#pTjNQi=P@uJiFQDUy#^{;VyD?fcR@a(>%AMn*RtcUy}AS%FXIDCSQ#TO^Eg
zNo^nOaJsbA5o!6atGUMtl1DtfZ0s74-M+eG*RIA~8~IYdcw!5;r%#*n4coAd(0Ysn
zyQ!nUDcufXa=w8DrmaK6;(dL#uPn0-+b)WHRlu_Z>0;}ygS&U`^bN@o+oX9ZoPVV$
z&!Ol0qW{VvCvv*VaXY=5rWelHl!BC(b9Q>VjW6#vo~X?&Yg~AnzkZBGZ)FeI)RJRG
zNW_K3$!j$J;cvUER~Mgml_DVk=Kizz`FCsU1!RI?;7&mR!^hpzQAmgZtW_ABs8%?H
z4$tIlTWL=2G8;QwLwL6DB|m=g2)Al8NkFqb#Q_8RJ88`%p(b{-lGs=*<3^R^NyaRr
z-CK>-zf}jQ{q8&y5JYd@BW8unjf{-H^KvnqLO=-2u^hj|BUr-Adbb3u5AIAxCKqRC
z+gT=wONt5&;_s9E4w^BG4rE`xLI{?%y?yJ(8A5qmL*uPIGu6^bz~*S7s7eNJm0e)i
zvVHq=zNn<-dYZ`PNB=q&^DPP7r#dp6Oiu_%dmO&iynb*CSYIM=558N>5_wLG<?Uhe
z-^Zu`SNJ_<sz+otGm2!%lCg%&?2P{R1~0Y|E~HFsGYS5EPaREN2*~*TceoY1t^eTZ
z-~WhE{|sDzY-mDu{9(sCQvai}{6FNy*YXLtq=ItH&4u9&<z4gb+c)7Bn1nCfQF{hN
zr+66kR1bpA`n@BtJuyuff=y;S5wWHOeqMv}>-2!bN&`)I=}~r_Tc{I#7TL6`ObcCW
z!|q^uuGNGOdPxx#nevIPG&SoX>sg>8)5r0y;^%mGnuME5O7gKc<_q0ORddlwF^36(
zk903me__{ytr<pwyX-ci+4`@Kwbh(+1YB`D6IAt{Z&9&u+y{<eLe1>A4-TuNJv|0`
zdJL3u3AegCgwf5t-+m3J6XuPc`3`F?mn%3xLCzi?9L#rE4XuhSrOB^{IYMlGG!+?=
zGtAIa$sg(YX=L;BQ=!^@dU{<JkG#AU4~p!-z!|aiOK=pzCD@~Sh;tK1U$|Rv&mMPN
zJ0-_ERq??#&+y1dP*oyB$45hpJQx`mgw)~G`H|`)_)}n$tKYnNbFE}zURj)T>4Y2i
z^pt5EhRK3t=G|P{+<Zw@N|g;VY?b7D-{5SCLigM6D2M)HAxDQ#c;^(0`UaXq@as}Y
zUQVK2jl%9kzUw=kS{--=<G_C;8YYtmeer5q{VDJmJX~CkuxS-x$X|WpVs9N|y4drR
zt+|73Fcf4~*8LT-jJsV2-H+B|(gLsgmnrBXS>WvX=rEw{?2U@^IFY^>F9ol4L8Z|>
zuoOJVIT@roH*cT8_|hwF(U;v{$;ru0D3V_az4REyw-b@yQFh<VwbsYdfEPlhVK6LK
zeAeR#!Q46a*P9q&SPPP4zGOh!%X2Sl;^b8$KGT`543%kR9ws4~nHkP+Lh!&m&gIC9
zfv=@x;}wfPf6j%cNkT$B9FxziA9w_L63UtagkaM)<*!~tgaOa9eZ-!AJO<g3vmHuJ
zAr%I)%*ie>dn;SpC6F#WDEZUwebdQQ`&B%xL^c69_z%%x{h7BD)|hQe!L(7L{r3$A
zYWj<#`15V&FCFHw6h(7+cz8HqX?``?ckMhM8UmjXj*B2q@M#pi!=Vr9L}Md~u~9C#
zh{?<?;EqCSkzDZj&p|J{N6S$461dbGTa6|RbcuI%i{|Jn<l4OU4jyRBm-3<(M%#)_
zzwv3Ru6*18X!{`WOw8^(ee1_nntBwXN_n=j0v|qOmgO;wrvl8PnpK}+q<-c`bo=md
z@5spAJ9k*@mu_aFr1*rC2C2+^t^Dzgqw&cE>$&Q=xw%zY4*HJ%^1Q&appb&UB}1X8
zq~!GI(U$@t2YnvE`!GrwZG9ZcbG+u&Z?JIvfwpfyeB?;nI9Wx^cmqgn#3b9dZWW6;
zKu#X`YSYGJ8pz$U4%rbLZ=v33x)Pjz@c)-Hv%=3YI3_Q*CM8fqoiWnI=3>=~Zk5r#
zKbe3a;!F1h8SVR<V<hb9_P89kDF~K!r>^o=uS%}ph-FicXgS7`BdiwQQa?HLaJ@bf
z)kNtbQ<E+aSlQ)cA>;bWi#UZ8UkS%#oE)#k2oHvi5Le~D>Hha{H;}%~6q=OP6`M@a
zV8r(oV1e^<a~K%3j1DewRdR~;VEgI}$@+WdJzn_c7<BILEBM+bshJ--<HM+!GFBb+
zcd37(Pl!R|%|q^qy!x`C{N0})Z#`=Jmh<}hA{isRo==c<E%Xz}7kdc_59lY2)+c)Y
zxS<JH{r=J%ooZV)mL-;A@U4UH(8^*twd4)6>ei_?HgXv+m%TJW?oK?P3YX+iL6L$Y
zV`X`Hiv`oKgY_*uJO)_ZfOc;_IA^WNEK^V<z44*+()k2n67u5g2AMQ9FE5V+ZADvv
zR<;;u@iz{lmEK_Xc%^hpM1%z8t6|^(e1Ebh0Q3*g2da}bXQ9GJx+gFK*p5Z-#pnL&
z@0+(zd%CzR_Xe98+x;mi1W<+O=@Yt>u`50}m&3oMobK8MBVidq^%(tdQdyBjS#oLS
zILRZ=hp1}5)SNHX42e16dSJ3{zukAgfwZ`rNB^vXHvlm~i)7;B0tVrdd~ewd6Pj>n
z0Y|-D0|uqj?ju~bbMHW&bomTQ4~WzkMMN%8Q@>TtUK{L09ZNEezO*mn;;LaB<`two
zuRc~eH}~^1?41x%9zIlED+jW&pejBy(9t+Hc7JEdO%hA9m-?Mt_vU4Ne`cPsNJ$(0
znVg@e@Hd69Qd0&)Rb@r252yT%TW=#1uJ5VlF`?9!|L(18`$7937tI=irVlt>s-c$}
z^6YG!9zTw6dk56eC=4cP_8<`vl73%}Qkp_`*qXbTBJCs^tXt1CUPrWn1tgrvidV@^
z6ZcO*5R!B6862d)fa8vF#?OyLZ4FUIO)%V?nJwa}f`t87J!15y9{KX+Yq2k1L#ak(
z9kX_zq>P{-n=6@8klk`fpxBJ-OOvesaXmtyNP+@v$X2K58G`2CzNYki=OBb-m{4|U
ze|NcCqG7x=7lW}?+PZ^*yf*hxr@54W`TF&g_71hK|5}{f`?uo6UNMwg&Xw?~E%)@t
zhW6-vr&L?$)xC2A#XRCK23<Ew8jg3(ceWm#UwQnm3MrYOv7kT$L!3c4k(EU-3W<!o
ztEGkU42*yE0qTpp3WAS<ygazOu9zKxfoC&Q{W6HtBoq|B9J(tEIQXAEd-jr*0<;i#
zO+0~>`;}{D!?VotJh@C0cjxbaB~1KK^v=D!g*o3UQ1U``b&*As%GR5MWc4hi77Jz{
z8tV6P-6SRTwWL#7-$&2#ViX8Kb31viPa%2b45G%PQlwcgIZbBbl?*^L!Sg^q1F!Zs
zm=@t2VKY4d<lGO<aU3WTZ36tr6+0$CO2%M0IYGe_-PuD;78R97emhdXm6h!}c=|9g
z@tKQa&;R=V=(597y4`Bo>sjVy`n{aeVV#RVqSIN3Ecl=BJ+(Y=jI?u+s;eu`=4I-%
zg2Vdpca3mhmiSYGGB@+hcYS@8om^a8VC91LO@3a_*%m&cM3|kzXFc_(=nX)?%5cpK
zL=uQfZ&lMr3S4BUL(wa0SXs6K&Chp&@jsO>RPn>MMoN0di)IoT^N$;hl^%VcZn<zo
zYoMUutMJ#aC51Wuq($!RQiiUQ>o+W9FB?raMw~gARgI@t)z!@pr|VH)Lnb9=Us6>?
zefl(1SXX7?xO|qC^}up|*2)vt$B&WEL@bdBE=Bw1(j3(lyFU9MB2PCW<@Op8rk8O&
z4$f_YqGMoz_!Fk=0GB)^72GXDt#vh!j}V^eKnNx6HY%H!|9xeHXdw8FeD;~a7SR%-
zhi)4skEqldaK*s+=EgS0f5w!WQQAk><jYmW)zieLha=x~SLyNg*<1{kYrQ@4s|`g!
z@QjH_ptG0w4vQ7b@A&YH<=vks{l7>O|IdxLP{v69R|{NZ+p@?S6^X|_cc`m%eh%-T
z4%^^M^UE*n3Sm!SV|SlsH?3A@*vn44;vMQ$EFdU#YQ#>+RxfZP$Iuj06~FJ?_j2mU
zmHln><LP_WkFO6>J|2H*SuG@QIo&C<Ek5zY#+_EEx=s+Ut#*9Vm8!E98+7a?hJLMF
z!d9*wk>eEW>(BnpRO%mUe7pbufCT@K?-#8~pd1~dKN6T3F?A{~rlG(~{ViiW&3cG+
z<l0u@ls>A^&cWTyhY4wvEcc@$a?XEKOwn(ZHt?rczE@S0Bzxw@25p`oe}I_WOs6K0
zT{{*SK*T$h*V(fpRmujGCVbj=12oG&E^j2^0`Z&sj3Y~UW+vj~VoK83kE+b^@>uj)
z{=IZQjL#yrGr~(<xU*P)l||6W?J~Bnf4Q=0`EXiazE%&p`iT=(TQFV3XzoMH*VQbM
zfP0J{!>!C&F_#VM`aDa&N-e77(w<T4$_+@%pK>^8J3IcRTlZYR3+Il)@Tge%1nE?@
zyOo)jePi#6`<mz9kG%5u%0zp|M5oPOXK|0A=BBY(YdZeq+gi7ekJzvJrALo8WK3Te
z)Z4i9Xjb;UA;PwS-%1*dK567<uN+M`Ok!5F?d1;;vK#&Ra33W<vAa=qR3Jy^+xYlg
zla`*WRGsown{jVhdahLMeA`wvt4EQ^z0-rOx@|u<J0vQzx8Av-z32@R`E~ak%b6Ud
zpktH%%tV!AUKCfiPBw8orQ|hVh`4Mv$Q;NiVyg5`&xPmvqa!lQqb=37^QOKD9v;z4
zD&c<4FF-#2%6*l{DZ9?l?_obPZ}M2Z&ym-SX^Xn!OLsa&4yDs)X%{N4uQr03muV3_
z9)Uc3HkG!O6_u4oDw3setCbT~TT)D#@B}W5Hj}``B2LFFNj6%k^UY#ZW*H@){mpYW
ztuHWoqV=)aV1-rxz@g8l>|Zh2Ei7@)5+=Bas3aMDd;55@%e>k{zwJpbe*RKRo=G)H
zG4f1U(r8gAz8Z=N=O&lWIhm8u2^76&Cp;3RN)ss5)YUKOH5m^Emc9u6d^Fu`zKS*9
zYBBAFvKKcWU)+U+1Ld~;uHxukt?wg(0g2(wTAXqu39UJN@8nhK#p#K9PL5nF$&2_g
zJK8F~C0qKF8kw4Ew7|!r=+lU#2Q&k_4J>SPRk!3z*#0z24~U)V{P6V~*|Ng>j9kgQ
zCHB}GlAIJE05B-z6u6qj2`@101r76cd9eOuu*D(!{+H=Ptx0OFYUOV7o`GC>Cc)K=
zQX6SAZf9fuqicJuwsNXs+Uoc`I8GDh(_f|^m-;`+*;QLtcg0v1#Dfk(Stk;OZ!OF!
zuUWsbB)b$hh?9B*oBK&eU^YTr_<>``LSr9^JUU8t*!4EoV@;K8ZNY{{Sz(%%_hOT}
z-$_ZzU(v503yxeei$^Nx(3IN0Gcmv^TPv|KW2AMNfR4(OWZGi1&5cbVa5?vKJi3X_
z)}as58s5I;=l(v*uG{_HD_JPj6?dZWPVu1`u@UbG2aOwD6sp0y?v}=!IaK14-Q6EV
z(|+|+RWnA^`13mL-p@Hbk?Ce_HgaCOZYurGoj;o)N|n_yZ`e*`sEOUsthKviYrXg^
zCEt$}+izno>Z-X`ycV(Q4bqW>K1?Uyw@7lQ?d|9O@Zm#yarFmtMnzhMY(Zg_g-o5o
zD*zW#<Lb2<qmy)YdNlD_G_n~gL|&q09&K`Ap4Tk>66x?Qn8Ua%v{M8+F$vQ?mT1*o
z`xvB$CY_{gckdhJjL0vF8Qyh>*z=6E@t+0m*U0>FTtVdOYYy9v9|OV;<uA?(7nJN#
zyx`{Q!IisOG+bIw*pseZpIo}Qk5VW-@3T|ct+VMVcE#Jw20UKz{Isf=EcY<)cOB#p
zxWE*|J{vQeduMr@ep|A*nNIf;hhsdpmNV^1Jq~P=w#6mWx~Iy6D&tJj2cwwHwQ9|$
zd|W2ncIDIX@#TrHwpwRp)dw;+bC}S@#VC|AQAh`|Y&4Jh1D{0jcqN=vjiTn%Cp<tW
zd4%k6LBW^H!oo3o-FLe`5ENWl^=NFo{N%~RIntL;-6?J66I)X3ySm1MDI}-L^t|UA
zdM^!>ojiF5&1!QZ9eTo2n$hzTFP(!rJ33YJtxjA#!tzm7wYK25a%`g_*^K(bp_@Gf
z%$HM~64IPmCc(aug+2`)KZ%Hx8_f<9P5ylTHIJ>)$&<2hra^}8ZOxKofAao?h2K&c
z#EASyswO)<ZVYsuEkccbcamiIRywC)LNjAl3ctg=_r^9ACCr~7CKoXNBOY2JN9J(E
z`cI@1;QU8OiU=p*;yWq#mrsGkx{iPDWt9v8#WC7VS30=YjTM$8`cFH0xH)@xx_S}Z
zE%;jCI{M-t(N$OAYp&<<hfjzLX3sD&+}ilY2eife#ccI%4K;cG_mTWWSm#aK^(Z>m
zUnRdr^S}C+_(p7Zd?k*My&e_`?AOd)*8luJ5S{&RcyXxxCR1QEut)W-M=$vW#4SFF
zj5jOJ1KyyUt*ow2PNolwd8uN54xN&;q$DxvgHl?+5Z6x%0j@Xpo2EWJb_1i^E8=w3
z55R>r3CgFsb-^D|LRY+Nnwa*=dHuRu1`t>Fc8O`82sb4f)zKY<w!5P_(+wz(i)&-Y
zPH}&_jif|?YsQV?<2Y0})WW+An=>vhF!`R59cYem^I3uHh5qc>v9g!dlCREh0O<np
zOI*4FfYf5G-N}rzVKM?|gIv2NP54ZJLavl;{yH`wH1y|0H$8NgFcy@~c=tM5;uYK7
z=8T<?RASoN>hf%s@dfVePq5s`GWj|i>`-?~B{ke(b<<bR;4HIJ_3@5KR3gvaP)9eU
z=|{zuKcf-^+RKoRa-P|stJk8uVP2wRXXEB=ySa=$DLjReN(W*bX1iz<b;mf3`v5q_
zE2ep`KisuT-jo9CioBpat(ut0MKnP69^<J<)$NUr?xPZPdim;AY}Oufjy@1G{(iXd
zwV(jL4JtQQ<~7~>$d4Us%{2K6sz6c8!c;%1r1vfdzLGK<@ZT+A%lwhQ`T-45w-vC0
z&a$vHWEdr*RPfoa1M-us86m(-us4d_F^^X{$1=&Na~t@37%v^4W1V_93ce+%5e6#5
z16;&<08v1IO1mo5K|;Ns-+l=X_tcQ<K|0W?Hg@2EpwdFO^Ha;^1v6X@@i01=2kGS)
z#v4$)b8-$7xsQ2L&W`XNC;kcPPix-rUH#Vp&YQxR$kg(6YF+U=u9rauQA(L(Tf8YF
zV*+Xge)GTy=g&&%%}lp4V1}NHTHn53%($y4CN3@;4I~g7+h9Ql@it@&`#X12aJ`j@
z+H3q{xU<u4&`-1BeRskwBS~Y}t~j6~Dr##}O<`8f!61`3m;h|FctcLwzdllN1_h{z
zQ6@t=z>q}cY`?j;o}Qk~V-pj^HgM7?-`g=b7&mZFdp<@A8Y1_nPnm9UFxTTw;QOX_
z6b?r+Pfkx~LeAuJ;5!Uo6BScmi3WEY0pWxo>%85<?j-laEYgo^K<6oD9&Oe*!FzWD
z3&?bfi*vL3Yup91VVFMY{s}AviRU-3sbyqj1iQY+Ug<FJ_)IfR0}-w{D;t|D=I}jz
zdSe>8VSoR2(UpU-a-b-aU04an_$hQ$Cue31s^3I{ffJo?w}^pUawExFm7nl{PadHL
z!Y+Kk`LLqw+gq6>XerRFFU4!y^A!mgC)AjknTcwG_=Xv1yDG6M++19|>|c0#rtb)W
z9tVKFnU#i(&EoVRe{Sp8w}1=O%oyG4;^IQ$g!bumWnVg(H<05xGs3rmiAf$)G|f<Q
zzWDJ1kF%KGeg_E3)TLLAvoQ%}%eHMR<068xcQLRL60JWtX9!b`v6vHsg2W_kSYl%E
z+z{r<fejBPS&m$M<75vbbZWiw+u@i|^!!vh+^EuKNDs_o$T1ek)nLBrFJCSflzevb
zEPGYk+%WIM(f#x19W}LcrhR7#2}}7`^`s+2iRQhz%<S`xI{k{?0%&qOM9=h~=h?G0
zvBUD>%(s^i5hdKBE?jGrq6;Zx|GEpgL`oxEVD5vIrLR{J@{_dZ*7|8KkQMH?$rL^_
zK<3^yqEku3X9Ls?(2&~)i<)Q_xJ|6hB9!0GW4Dk3rCdOOh(A+{bl-WM8fT~*kMUZ6
z8cdrV&96tF!{pkvXVLtY_Z=`+5{?%ZX1QlB_43-7mo5X`&sG0ABk1I@Z3_>E9e;y7
z4MQra2GFa_ht>zZ%Gpu=SG+dgLAS#h=skBCTB3s=7of*KKq~x$f|8Q?oYtT9^*1sC
zq5vJOrKd+@pj;6V5-J*o%w(Xy-$isGP9Aix%Lt)gzPxFcR8l%6bFvd`ms2rr<<a5c
zVC48lFo87dhuI+*x+H$9zN+f|yLXo39l|AX*E@TYQ&T4=C;isf)e^yp6Y8mfn_j<%
zSs=b_j_v#|(1n%I_FY*@E`G@xC1dgv<$eAuK0+3jN(j5?s5GU5_z0mUUn}yx`3O5y
z(8~Pd2xl*w-zdK0G0amSNVLOfN4PKSJI43oyxjnRk&S@*p?q4G>EouQ9e(ZW7h>O>
znE9t-KhFEVqrIpvX0--2uYbVthv2HN|NVapBJe*ium9(Q^#7b2gfi0g%(e}Z&`Gb&
z{r>*_6jluNdMqb6N6aX8#9=kpw(La`B5ndWDIkL4(ZSDCIY})Nq!%&oCpfpZM9BB_
zkc5VQT)zX3lp$cc6cLldD@d;~rJ=9#1Z3-Sz)3+cgS?&%^h;_Bm3O!E9)7;>B_!Tf
z3X`N;23lIDml*(Cr>8ShEx$`4+vt7NJfPlWI(rO&elteMlT_~Ay&Ks=%9OUShqYS%
z?T<V}f^NGZNbW9`zi-ZGGUx|E>Q#%8IfJIO>QA4frC+$X6oXv|_2~(_Y}oD0jPkdC
z{krij%_2kz^u3E|PM;PvJAF<o2^%cg7Ama;3f7P~x%jlZrD^T$?RzPjWMibY$J+nK
z;f>u|?#CDq5%KQbS(`-+Q}yuAgTAx&i+eywXz2LE&h>}y$R$nVXl|0N5GSW!dj}^&
z;YuCjh53q)cjg{!os2YO1G)}U9u76@mF7$&Ddb$H?;tS+rAMzR?KOwedkwk^7iMAH
zbBxQht1428Py&<IC4%`nK^G+Trw4}<PC>mx4JJa$1s`EXo^}7HF?w1c<(}93A$klR
znJT2rSwEVZz;0<OEw!1S@WsJ95rY>@4>w7%fxtvF;%$krn-{HFqHzw~B=@7~Bdxjl
z7~l&wv0F!km<&1jW!nYq=83~>TB03Bk3h~szj*kk(PEL8ItDYy+DVLm0Bw=%f<ew<
zNgfqEz(~;TGB2%&olIOUQe;}c89r}B335&QJAmQh)d=5}lfBGKgNd1ta&yDM%9(KU
z=3w!ighsa2j)1!niO~+d1x`?`C8UVi7R%kTz8GW8z!*<Xp^1rb(C1#d0VkE(Nb&S=
zk$s6uv*kz@gx)hqeFTX9xhAF>9nd}GKlqOyzdi5ji#GBBGj(-!B2BlDN#u(lZLdz2
zpH%<q@!U`YWD5|-@C|OMW}Ca`<bshSPErl-sT;(#4yk$##<j7B5V=@cS(}hQonG4m
z#m~QnvFN_(%rwy?_FQuVz(3vP!48#STcI4qfL*!xnmd?O79&GyV&b;vXr0@4G>nLY
z#Y@HtC>gyqDmw1Z8l2joJRIk(_B(hV1}m5dvX6{S1BuU_(N98UT!yW;=<bwYI=46m
zqed9goKr(Kz|Y@CV}^<41w;`$^x^%&uy#traA>tRI2DOHu@mf35M|yrV+O+Jjx$8G
zZZogBEiiiR#v2I*ue)x7`uaHKNi#EB4i3Xk#gAE)rFa;0YU=Zq(JHy1j&(vC+dewV
zyccO2xZ1?3s+5%^<(!7Cf8n>4hFWv!sZO;VqNEJA4BSh><-(SOyb<5swNu!d&oufo
zvU1$&!aG`8(GNdgtIV(%9RauDiXVejM}ZODW|`b<>4oxOrUEJ1Ad%I0hvM}mGR8_r
zEFiw~NXoN_xfY|)B8|e<vN8rS&@32eXoSrAMn;$}Am0qbNWJrST9c;eqGtB&-Raka
znh^R2a<rFMmd;NMX~UDIc87{ekn!hl-{K8&t%L0jBlo5i_k+dkrLGoZS`LmM-xEZU
zqM-#QpJ)4+M*XCwp&@gX4yT<TALBP8#e(kh=eKq}YN@VPp586}DMy>`^P<$q(r7ll
z*gC_7AT>mkV7Z~t>cH2>6F0QzYLR14V^Khke=?@&P!hM<M8v>ZK;8yg+O)O_LX#ey
zt0u9qzd^$}$9lR1DHD{t=N(o)6>N^ZEP75;L0Cx%8&npUHddO<A^1DMrNxX$Y!N)V
zd<Tb$kdM-?sH8z0zu{!Orak3*>b_jUsv+URs#T@=`xXi?LO8x0>1!pMELW&d*{j4_
z0P<Y`n|7A{GMAOh?ohb&k@S#+1?5cQycf1sidS?85yb8DUt4!Y%Sl5g+6i%k_3Q{;
zBUp#e*Q^-SulO?6hFK+}-BNN0w-M9{*z~FJ1WakW_j`yjK@ucNOlxCl2|GANn(vhS
z_6MCJ#r<7e+{b6~PEZL?kX~Nu?+942UO#Z#9cbM*Yi)NTqE<DijTN47zNV5ce|29s
ztsMw*FBYalPDur=@t)v7j73uop6ySjcww7Sm8h=QZMlR8qO7L};u8~BA?bxl#pB11
zi=!Sqc(6unr<XUNpcqEQd8I83baZrQK=<P$B%Fj;$IUfAe-&;LP<V^`oYpolz<lyn
zI7P-TV4$1gp)9ZkJ5I!rH1D4oHo-2OL<uYZ_9oLOBd>^2Gh^b1qH|;?`PLIX9U+-3
zG81gQ<yWsQkJ29Oap4PoeR`Re`r^osq}&}2=;>x!j#q&$^HwEytrep>z>m5E`>mm=
z3G{rMg{hc}%n!P<!aJWLyH&oG0LzTaL6oo8jQZ*;)<~K?*e%`h*TeaR?(@K50rd3j
zY@2wM$?{`Sys<0azej<Pz=@>;*S1r~FuyukHJ@)QVIw+crVCR?5J=F%{Vfy5vdAad
zLpNNct7~h%kSq~+$i}K}Ql2~NILP9$htB2+LB|XtcuTg_fnYSU3|rR-Hl-=rGF{1Q
zVy?9+j=5mzVZksUX7tLB9X%S*<@5L77vXP#F|ZSHWo2ar+r{j6uB88_Zg1pW{2z*n
zZhHCefAgWXR(9bI2xyN{D?^@A_L^HHq73eVV14kI4Xmol&tZ%%ourF1Co1{ms863i
z=bQTO__*;#bHb6`yS3=<sF>_xef2z0GIMet1p2cDF3<5F=CEEw2FL;|C%Sg-6y5rV
zKh6KWsE7mWtesR~!=Pu0gGeB1Tztny;D1K+FS7OjcNy0Iedm7ySLkgKac8TY5V_jd
zlC5rPn!*8#jci}pwE0O2VHERe4oj61wb+44`zTxMYibsHgY^kX$}k~M{<XJT7!fJu
z>QMjlmh5yZ>(&kIgh1!?x4-&)c&#QZyGw+Pp}4tQ^7?|_O}o_<9LZ$+4!57xy5<Sl
z@kY@TVqjlIOb$60Dl*>-R<5SIRG`<K=&D4TVQOaPu*kR}izT=wsLiuEOWa=tG|I3$
z>gx2y8nV2)a+7KL+-{d8B+5|INwePg9++9U0w=?b0zhC-q!9sQRWICtDxEz&rPd0g
z?>@ys3kL;69L)A_cS<S`+N!9uYCbbWx1In{GK~suU;zXK*JNN~Vc77V3CmS>+MoGh
z-P?I?--oxddj@{~oS7S68)z@O9yAH2r=F`^iUzreJub7^esLyV=U9r1*uBgZkXgpY
zJdMYzB283OM*dvf>t&33g~bpm=;uuy9tTESCjFauZD#zBA`|1gf7^2d%$bwb5+zs(
z_^-4j-3`=);Pk(y2>u^V-~3-H^D6v&uA{)|5|)=I-B>lxSWXiQjJ6I>H4rG?e0O^V
z8T<xh@*$B4{h_sxX15m7I>MqkICe{MENV+_+koElb5iz&Ai$xpn8>U>|HSQv;+Bdw
z|BFoxhoH{sMN$wJ9*&9Rlt+)!FAqpaN@kl4!YQz)z1@G~!9@oIFB4z#y6C2-s8OM+
z7~Uy<HOLgxXL5f)di3)<MH|jn`RHrcr77V=GTi3yK|Y&Zy9$iYd&Y1gk>0!aL<z9T
z_0!LhOq$2Bu5N{`STX28u1)&$A6;2I`?#hNN|F8}E$HSl(*d=I8cMXLGztXcXEj29
zN*piabQs5(4b&(Y1aq2X0aHTE@jk~hp1O0lZIFh|+?dPyB05eXbJh_=9*8Xc&d4fW
zd9j#t`=f2Yjj)IazU=+g6+2bcU;ssszYRlXhvZep>@dguu_X0Vuw{ZxEjC?vEGd&-
zIsjB==26{x1Fqeap)vFQCy@7+eEX)%o|%D^wd1T|t8JLwa+Xq}O70r7E8pP*f++GO
zAvq?de6!MUrP*V#cZP>t-zui|%;*QZktzdfJ9(;f;@zP$H(==O%aLj^`nT;opF5{^
z)j>SWu%G6o>J=eWVN?Tyb@~}5U+bHi3;{EMdFkBo_hzRva&K?s*=}VKg^3Pw3ag$n
z&RW6qS{3(U<vTGnicc>pWNsNJJ(0)blFq1fUTk%~X}zo9Xe$1ZV4*QJj@pQ%33L+U
zyB{A|89UBp9tz8sl#rN04u%5Bi(OaFh{JZS2r@|!)6I&#3m*>;oi}W~2WPzjz|T$Z
z?<xU^#0-UGi_xG^!6$$huhjf5k`SD`E8*f<7@C&mrv>FVoQY1I9V-T>6)`=@dYYe_
zD2RJD5huyj;PZkWX<+0dCDJi4;L~sPN!FBFQ@tu@?~T2Kp*p~oa#27Wq?@3NATb+{
z20fL;U4fMXuGbLE9}haCnzsZR>3!2c6{IFG3UE#aIPff3v+nK7O`A5kP(ookKrffz
z>g@c2z4SVHg2JRHxr9T%NB%J@;@lrsd`?#;scUjRT)#cfg6KG$Oh;8tiHWVOtf;9*
zh*lzt-M)tmWyTXwaa~=Zk^sR4>+#<FL_VgV`=De7jRkJhw*sxlC+=zpb;*n5*)KOD
zOB6Z*mnOh=3}EfS9*LKi7qU-9l-5Mk<^wgtGUCaAi;=cAW5~U)uNhRJ>H1C7sv|=~
zIi~$;YyIkxx_BpG2%!7oMs&BIy##Zq&cYZtTCE8ickLn`25+@=P=S)${Kl5Ia7GLZ
z;6R$=Ki~x_bx-eLJxF!n>Y?oA;0|6R7T3lN=bL^7deARVWB(nS|6t57gVfNCq^JMI
zgH3RwG~qHI@`<o)|FE)Y^MaW6#h^uUa&kRLqLh>tQNtR8uP6e~D#q(!kF;Q9wz#lR
z)Svv$zJ)*L$o$$GI&r$s3an&+(02-3K^8n#_o-QJ!Biwu32PQcEoP>sU4l|l7MVYL
zdg^j*q#!=-GFqcH?jd7iKzY)dGhfh+KuO2r=^O!_W|~o_wHKfG&g6X5mu(SZtg=ou
z&EupYSAvl&uf#Jat?&A=NxH)V81>POtX#|$xBFR@bJ1&IF5B4zX#NfrglffIbxDIO
zfEGxwv<VJk-WHonp8Lq$h9SYsnuc_r#c(5?o#LL(wynHs>YdWZM1*<)8j(u%4cQLB
z$Qm7tHP5F!iGo43v9Z+^$2C~Px-KTOlli#O!bUgh+V)-BDo_Ua9z0P6OvnZ#K)6X-
zT3frer$UE0QB{S#eDL(O`@@Y=;#BJ;j8N{c5(aCFgm=v#7^jla&FE{PFmQ6coVPTe
z-`(RK6(xc$h45iA(pkEBc2-tGLK{p7T&^V)u3|hEqL@0sY1|d9oc$&^IPo+Iy&R8N
zFpa#hu<-oCf*+IYWmzK1y3$hdJe$h`3+tW7=o4F2FLBt+1b+C?D+b6(PP7f)5a~GB
zfGWUas>z$y0Vhgt!=xq-%Y#u6OL7}`jfGr%7;s(}im(_Ix2_!!Jx54UWjqH7AN31(
z)`i`G?{XB9d%}+G-#>=*1}CwbWtMXG%$}ocOMaU3KJji9R^J1y($XH6_%Yh_Rd`{n
z^BY?iv^{=Y&~IcwEi+M7jsx;6bX4WH^6fXvUH}$wG~h2hSyC43j#89`in-Qi+ns&_
zv7unSr-#0vuyDy)KubP6b}QrZ3hPbLYd#NHL(o)t^+f#s;Ujj6wpNv4v@on28A->H
zmU8E_wH0;pR6m8?LkPF0>W4T1Y1rH6A%%N(iqyv18Z&1!(VxRAz{Ra~pXSEZBc*iZ
z3TFD7Y+9SQn)H6lx9%?Srga0|_T_@p_}Kl?ru5k#Nu6j0&_6jO)(1dbCa<7j9>a7`
zL5*Pv5id-efV7!mOF&JeqM|}gYuG%uFSF^5<Wb=#BV8#DP$O*GG<(AzeMc&E!j!X2
z&F&u_hoQ=vmW}yL*>P7A#=r<_`<{5kKjlRKt0z8n=A-7si|{X7x*a?UwbN@lnUk_-
zUcZ1IP&5JMd~ifUR1_&}tL&IDn%gKdCr?BNYFjK%ArS|~x1TF2&dQv8PRjhi+v319
zOq%S>FKQAJy1@l*=au*W6;~I&Cx9JT{PB*^E_xd0y-1n;t6mkE^9S$|f*~6mzbd-G
zVB2r5N_^~Cf{ug4Sc3sb>2}&%HgE%i0qSAc5ZqS?Y7czyX!<~v<pS$7xj(YgB@TQ5
z%pyfR^r)X)&HPt}7)duxe2MzrdMaAf&bD!Y5ghzecm2CD>VL+e|8JEftR=1^EF+T)
zx;P69%gTzq%OG@Z2tJ40!3#%v^~lNT6yG5tqBS*8!7?k_cf2-xGncWc(KHc{0pi}2
zteN;=t3Cz*7_U{s>knn@?v-zj2{)6ZZ?~HyN!>ENf7mN$P7<S1ttTQTU$XWZ_kMq#
zk*8fPcb&8ehHIFf1=E2*U@5gR=;6^GiNZJwV~3>7j9Y6h^r^libUNtT?CRd;1C~%X
zFgSMP5Zy*ejg}e#BQ<Q7UwhYsH&>t%xG=ICrdK_HJ?!Qua6&M82LhzNROs3bm(w4S
z;-`QUo{F*q;7jLO2hVV$wRRWq$n*ExLvUihY0k%Kif=#gBWZcwq?cw%sDt~&imBJX
z=a}M)1d6_V={mKSt_I2$gr2_A7H|==+cjZ5HvOrqfm*FR+F*99jH6|Z`*W~=48FtA
z7|TV7diiX(9j6w()iG?RiDUxqD;P`9nA!U7PB>B?gj7nX<&C?~7#AYhe7ZKAt}+^p
z-P4T?hhUcZZMcaK5WDGcqhyePGLnkQi#)wx>oX}YOpPOzLu(3l<!0C6$M*z5%hn&{
zeFSwjv=m_@3ifasTB)(y>2Lio=q{;MQE9DDXfZv^cS&ZlZB-&TSN-zwyz{@ZN0+d)
zv{#JB*C8kkHWY|a&-hC1X&$bCtAGw&loU5+1)Kxz7_ogtT59uV!6Z*-(cw!+pe6vV
z0(r4F@f%KN)ueN0&%!NWJnX&M;0)Fa6sWwqb!CrOP6&0j=4PXfi>^KUg$u#w^-Ex+
zr&;!*AwhY2e>GPn29wKqc(8&rferxGr7GypFj_>tyQCY<W(;VXR(1I1YpC;2(EI3-
zBk0OsxpjJgx~KI&rmIMVc3-kJ>53O}Ax4Je$GTw~)2~2QP9+IMw)jX&A6*(b=X<dj
zOi7q@baX_a>Sj8(yl8>6&eSA3h70YcIJ8v5!)1^wQVBkRXy;Nv0o}g2uapiwrT%R-
zH7Q1&{O>i2kyhWiPR>>Hb1Bngjae{^aC$4xHWHnZ@XPL&OLLWT;|HLM#UMH+BONp;
zUMaqU=z4B$yc12u__uG-@y>_mu9b!t9kaswn^$h8DC)VB)y|HM?RN@G-r<3KdZt78
z83&sFh!khYI<8~w%j1*LC9>$Npabj%Pepi;W^zn-be9%AqEU{hrE6w+xSvvCNgf&W
z$VkUKkERVQV1!9+qge}X&3U)O&W;(_kdSVrzk7Gk3FPvDilj~)2{1zF-V43Rt{s-A
z)1i657?blb5AJ4x81=0VOdGloFOiy}m4Cnqofn@$6cEWtbkCL)ZES1^P2BpcDY`$y
z+}G{6QbF59sIy4-<?)Wf!aQ+*1Bg<?s3r`On8EZQ7qGEjX@dGua)^<UvD*t1c)F$(
zZsv~!`-~o@pkTbaJ9f$n+nayl%!aWbzX;j(irAQMbP^A)=14gC=)gpUY6k6!0|Bu&
z(PD$5wrJR5^b^F3w3jqtX}i|!`EcPbAaWQjTt)FE6uag(LaQh@ho2d%*T(u%QGF~<
z1cG>_SszZ4(w`Xg=CAqM#bp(jclMae=uIe6UeX)NZz1N7$F5sC8<V5HZD+`VsPc_s
z+U(hvO{N{)?0f+i9n8G?n7!J#e!P*S=Zrh_anO&k2~IvSyF!$2-P(JM2iDU2b|OV-
zj*}mSH4l<}wlin02vt$%V@6PH^Vd(G&H-|o&_!XfX6G?+jZ^phuaq$Al}CI>cQ@S(
z_LKEkd!EmJCS5J99EVlD$59hwV_Hz>fQ5w9J5q|uMt|H3+2->S?iFv*jTVEM&lhGY
zA8Fff?G{nxNGVS%r8U35D~=7-)nTll2L@FOct2nau(Pmu**`714=N0jpFB)Pcl``y
z_geXng^ioIW=W0Qs}fwGE_opT@<Jc55R+3GZ$L^3E`i>UcPv&H##tzNtusvf+W;V>
zCM7ALD0VBAB@&Dp<5`^H#1Pgs%~5M>9@5hFyfP-glUe(N<Hh3YUc-f5>tSGSzKYM$
zkN9qdSdrCK`kV4g)o;GxQFZxmi6!ST6@ZQd$aVzf$@j{u*(-bZeug=0U7{+A&p<ey
zs^$%$;q)FnEfAc}&(j_|HUd5elWc4a%1Tg&#-{qKlhj2{jiTFMmuHs^dK9oL%muh!
z(A*J=QX^vQY*0`Tx{!1?D`twkI&n1pxAv|yn(F=U>fQz=X_88=Qj~;BC9^`D6mm#}
z6OvNMlzFIb5v7Y#W+@6GWQ=o=lMES?a3aGY^E@2mvsLb}?u-9g&x>b0&sxt~z34^j
z(C>VI-_Pf>_x|j?E)ao3Mntzll6qz2E&u1`O|O4v`B5I-!&T+-InHQnd)&V5YI~1`
zNUVmpk3;6&_2|YnZr<#*C`v;_RP?^5rxICTad*FG|96wlf9@tMu8>t<=xcKCuUqt*
z=PwE0|F=PZ$AABGpLbEYI1YgnpWkF<Eg+okE9LT-blS>rRN(ExxBsG+R_zj&cEZmF
z$DI_)v*`71#|?L^QMfgz@bC7@y6FGIX`G2ES6Ed}U3R|t;i$A8G8P4${eIJkNxAF8
zs3=XW-a_p-G|+q#9tiw;#UWzWm|wuKZs*~-aU+c4IC^|?5#Aq=T&u&i^2-hXy_j-|
zdma_k09=R)RpbEys$pW#=$`sW)s~{l7z0z&tSfcJNJ=X5KwkxC^I!@ke1uXBVtoxO
znhjw>4g`t-GXffTc-fel4_mim@E3vQ;4_PK>kcqlU*LG8G@-q)5%10o()c9*NwLFs
zmEH$+#O>y}ydn7J+W}0DvFU5PzKIzq_#BVno}cRA@@r8Usf{x~H=SZ>WAick<k<rU
zt0x!~LZJ_;TGw<`3SN|$)A3f_SaP;#s(&I^h$QdLn>G<9gjxi4kYxyI9&CR?%~eUS
z*{&*(Uk3H;83H4d%Ic7ul09*Iq`!e#Ps1bT6xtuV@w4z818{i{ejkYMh25_bR&_(N
zT))IaJ!vHhaU~=T7>vBHK}-V9`Bbb%C(Ov592*%^{d6=cR-%>!G%H+OCJr#ef>21o
zJ0O-5TWR~T8JUovC9G!^DE$TBh*|=YLUr!$y;!l@^3FH6uesaSMBw^6LQ7DODlX!l
zn4S6FDBRC9ttrM@HhPw*Q%~Ow@xvtxRVUM>p`%6N5kQ<v7pEoIa<B`IK67;V4P++N
zYrWz-xQWh@!J=OvT@y6kJEWzQYF3v_Sf858?tF{y=jFlus9hw&14lJ>mBMt;cEv+t
z<{Qqo@Rwu$nv334fi?wL+pOoBr!X)QT1CocUTa{3+>m)V4h}{oU*NU_rR~a<E9DzL
ze?E+1d$?T~K`~zeWr2j;Zb(9jW%!{(gq@91AC1xor1ola3+zLb!}p&IMY)I0<Konq
znbWxVL5oI1=sSjZVG>yrtI4r#2mue-IXO_UZELdp0mSjkOk-|`15<CWvS(UqDm<aj
zDyaPh_z}y3s7Bx&dJ(va#t8TqG`YiAiGFPV2NVG+VUnXz!r~>-DYn;WiiDKcrsuPE
z*@7d{Gm}eV9vZ3nw__tscannSYzezb3K{2%c;Fm`(0eE|OKWRQ0LbtVu@|Po*lk(V
zqQJto<+E@-s@7we(@983KzC?4fg}H$R2H?Mpof;(3Ry790oLl^vp`4SY5g0!a>Our
zO5?WIO>XOl^3vjqmH*mk8me>~1T~S6ehP-^-krBP=V$M092Hi7_Tr+=pJ1P12tH3o
zTibh=b3>XS62jLL#xe1ShN{90&$-aYj7*-R<fq!l;^e(Nn|_TkWURiF&-FBbI-B_h
z?H^6qn8+u!4V~8crQhaAL9G(M-<n@tjXHYE3eu8!e=%{}dN_g+Q<jc^0d9MTcd|fV
z<@yp14h~;w?_=lBx8Yg0W##0+czhcAs5a>#-Bvu<_a1;gttO|rN|P_JE?*vCVPIgs
z5Bi*G1`BoGUJTYLaFd2dJsl$rPMKb&l`RxT{a@ZZ_o{`EG0mt@sM4hPL6Q2>=<o2H
z(9i0uH12wgNswZzroU8&mtoWS(Vj6x#q-9x{Xx4v5^ygejTcw_R>h7!(2RUKch3@6
zQGq^*BtwvT!o^#Q?H0pULzr2%Wn~w5T+gGF$QDwmgeHZRVZtP7Ha0fK2KD^u%NQ9X
zwBmIj(G_TE$3YYmFT>uSwM_`!k*<?>V+p;4b>+%}WgPdw;VW-q{~6iB6mhL;zx!-e
z+!DH@AA~~e#BgaG{nqxA<0_%EZbi2g?{j<Syf>rH!mIYy3U<G4JWf?Bvm(E!wqr5s
zQPjqUDIe!Ek@AGhZTl}*26Tso{Z_A2kKn*N!fU9)QfG#;r&2JIJ&k$dz!>6nc#Ve1
zd#f!7c|*K>oiDXTkVP|()(B|zxy@=<g9$gS*&TdgpIJ@pJ?Bgcg%r3ys^C5}t(2km
z4?B$|7sQC};>TMzRlrcFh$OhHrIs#mnm6IS^3k2HdWdhtBqk^K&IbgI(|rKNNJ_LU
zZi|7G(ds}?b2Gdv;<2w<gAHiAerZAij-Wb-7i_YMUaES4h(+L)#kRitF_geh6`B=c
z-OqjSLL3^#@A@^7(ykG&b5i#pBx7r4;cVENqDt@XHZmec;B5iCxkE;vr4`pLrrxpK
z>vDh-H_N!b3~o4iswv$fF)*+WN^@*+KNLJWR`FyzeC*ecLK}-lR%~z@p!#|{4hNfa
zU)MRjK!5g*N`(Y{E7AjS(O~6Ned+euRzB5mitVK2LOZobkaTo{7d3z&NjxK8-juY%
z1}T@gXZE_%7Q492K%dJgnt*vkUVoiY&*w_CXWSweUNU<Z-s7B_>bG4-%DBQv#$>s9
z<3>nZO}^&30wlC@K}7+^xwh!SnKPf8+=Q`l9k+|@#PR8g+!Wr@D~-vTUXKd&;JpQp
z#MwH<`q!P+%rNl*T!^MJZHEag*m=jmTYwap#CgQkv7=T&w=vzq!q)}E`5`z%Pj4w0
z_MQZYD$gfvPFswyHxJq?0~bF8fHPZN-I!(YHhTFwK3sx?VkNH)C$l~s&(9KC==)@|
z0%F;Bs0;5MV1OAUDg`J^W`kB6xpd>IcmLzO*r+Hx;xyRnGiI*efqO=g@}W3fh*t_c
zPock9J!ltwA`muz@#3QsgVoT_l!i_{f~J`{!vFpS>{nFve$2L-hXjEI-r1!+c?`FF
z%XNR+QOGx{s)lg2fT3PHtN3pb#$iDd*%EIHjhAOm`8-~?q3){XOj}b#U7kUP?untJ
z`5)IMT{(B|tBEQvA$%PIHd;o+lJM=hq|IVKnBR8Zm5*Fv!cCCuf_8I(@KkfVv`Mx^
znDc?rx8K<hwR`UsZw~$attJ=QqGfm-#s33FYiXx0JW8Buzn^^?lNX_t_wcj16V58?
zzMR<ySDF543FOXga{heC7;Ieo{@La%fLKgR{<{j-|J-r@um0rEJo|%~nAlbl<d10l
zJzr|!*!|P97xIc!I0c<KYeM9jWH7L2a^?V}KvyoGRni3ULWO8`0iewl-VLWcu(%(>
zq;?XL^mD{9<)bYks6)yPBZ#=4R1VVwJH!m|=;0j`vznIpHOr8C{EeMN;N$ZFY-dwV
zn_=FT4&mm`uw65nKLJZtUt?TNTO}oR)n%LWuK|G0%M*^Wcpe{5e044_BBBG`ojN<L
z8Sn?GJ@WOlQ7o*itix?ZQ{O7z;>}!W{0HLHf)7T3hX7QW@)??^-qvonfv?S|ddio2
zvB-`x?oakkO?_yejT>f%5G?TY)+7CbnDGjRy^*S@3kyef;?|35Wo8VpYDtEfP!1ua
ztq7bPT=^hi|9$1Tar5WjxtG7UyZaP=`G#qts6jMzG8R$_Tptc2-<lcL9RWgmet4ZB
z_Va|e3=+dp{UpPAI~nke-p7&Hgl5{I!>1pUI4-#DyHSD6&HG?e>hFPWpfE6{gN|Ro
zxF81W2dY*Q|L#aHdK%)Fmp9or`yEWQ@+DJ?AI8lwOme!e_BYPlsVzx+^=h?hcWdj;
zG3fgr{Go)|XRQUQn4fgKgWp(U#n12WkK0v;^C823xVAlxPiS&#s)+c||0BJusW3NJ
ztp{TcwXwL^^lNUOxw$B+A;*TXgdbe3IHD9^YWwi;>!-AbU+dLr%61@<nj)a6fk5v)
z)GQ-wIKb3YG&Ny!Cl&^%O&OL_gA+gCLzjtxJZQ*3j))t*E5(csv<K1$q-CKIkaV5S
zNFNVvW8>>H1Z*Y#vAUX=3O15%{L;83I#7h7#-$P@NgsG}6Nw<m(rcJx<>dUB$cdb*
zW*Ln*kMZtWicw)1V$Ga>-Vd_k0q+)#_-^+AEO9zuPju{Y+1wlq2%Xhi+9Dy0i|qo)
zIdjE5_!pqkz8z?s*7K{|Kx2!HT!>Q>oV#FU2;kYbLGJd-;o;Hlx)dj*df@E{2`xuD
z-!p7n;NisSW_o>7!_4^gkFSq}^-sf;VsV9`a7!m@;|{Xca}~V<sRtm77=ZHTXNO56
zF0L4=gZdX>;Y13X*oD$FNra}pg27fOgjcf;h5*N(*CC^W^BZU?aJvPsJ#ldrJ3G6-
zg{-_L70Al9QUXR-^S`1gCF@%|JBN(iL!LJK>H#(LWy>g6Y7@+KX_T8#OP8>s*+$B?
z87)JfYym9+)w=`wPriEmpjn_mc;^&aoLix@jEF#<A2jmwR4C?8B`e{-fIvA*LjJTd
z7enn?ILT4T_jI^)?@Mt=`L%Jhqck$?2XD|apn^w9kbf`KOo^%LU>68*Yudda_IBk%
zunKr8e|OT2@bGc1DNkW%)2xLK^t!LFB|_cSy<6Z7$Pc3zt{eAX7AgP}(?1MO|F3u+
zO{6i^=jO^zE&|y4=~Lap{Uf_H;$g9?f_J^d;k$AAIb-2&X`XlPklp6OMtVWPNSw<B
z?|xrd=A}lA6$oh0yLTar1ot6rzk2I77m<BMK>ns$sLEb~iaxsIeT=AzOr2C6lviki
zH8gi?#-66ka>JpB?YCzmW_#3f)4=F}YF|yd^Z4;be)iH2f=A_UE?oXH0O3U8+K-(l
zr_s%r&_a@oJkZ$SH9iE4zbYLH9`eQ`$5|lp5fM$FuELI^gtF53O4fTrZAErtJp^R&
zwEG<e$?&W1K?JesYx0xG>NT+k5jCrkX*G&l!maZt_N>gmOlD>1e#FlI;ff=Ft;ar(
z_D7&5CLWx7`6)=}o*rX`R%fjl#DM@HibBLnfbK)Yhpdan)XV+odL9X$ZT^}k1uk03
z**+Yu``_wtlWHX%m6Wou?QgVzmagjg;>;s3@dThqqa}bZ=LG`JxEQ<aJ-F@hJ{J@j
z>eo1}IlZUHdO?t@JXRYCcRQ_{Ws{)boklO#tg5KEYDdX*nR?g!w(!nt%dXdAaaw}x
zjOf%+3l)_H>Q>MVPJ=C(-$=>l1KU3|m|nVcN7ngE7JEzxyEpeXL&HH5l5KyD#Bxjx
zl)dQKch#eL1+F{OMF)bJZAG`ba^+>Ldc01rlvA3N+icHhcLjh4^!yVk9H(EX(c#la
zCfgN1;1?z@hkyFp{Kf^XovW9|2X`M&W{yQo5BO6QZeKPc4xr7#suWL2H-cHc*u6o>
zt>3)4{ux1_lBlZMM57tfG7Nx-T(y3~XIQ8@UhxsMA1utZ@V&FHWL1c=AM}face`cj
z<0m|)%N~`tr#y`THPur^ABJx`$MOq6heJZHO-#_j_8CPg`71o&za6^QVB+yUxq=jW
zS*Ts3WFaDriu{jBxlGERRa87r8`>KABz}hfDlBgclZ}U|a*Y(X^3pwVi|H^)#tMy`
zIV=oMZYl1)Qs>GkZZm@LT59+TvQ7L%^^FPtw~XO3p3Jlqf!!QGtee0ub-(wWL3wfO
z)L~%}sGL9khTLn1)SbotJk83uOjsaOva!uM1CZxhZ<hSAV|#QCJeOV6P#Tzmkgp>l
zHMO<E8ZX}aa0SaFkxgLeM2&!!koOk23e}b+e17XOj`|kw_^UyZA#Yiz^@hx}i?G*K
z?}6%Lysq**tTnOyT2)h-W83Yh^xjRdOyIVZb-M=Up!k=`fk7A8m$%L(*`+_x{9?yc
zXyNBnb3k=nmGN<#EEUc#FD>f>9yGHcTE<Y|wO(QVx$8%jm!-rB-r&4Bd2Gx3E!Iy{
zmb|%V=#pe><|&?%q0w?T#WU@KNUCu>Rgmz(-vPciGo=q#bDM6bKNFs0tj^DwbDHf4
zYirbMvYrUHPYj+DT$30VcR46Hcommvh;!({qRzfPtndYi_Lu1Cg;IHWxt#~XH{RvR
zHZF<2FKv3ida0^3!=IJY)%k6vWmZdR;5e@SmhC<w+;w>;_|_RXHcl^LWp(?oNfh$G
z8QKXxIF=`0_>g|Bf3_8@snO{b^F94zA>xXPP8+^Z6~(SE6pD~*n4{@i^h?B;kn7iH
z0m6Tzub>T&H58_BlCo_0r=ae66-AdfrpJ1gV6M$@^ysXt^u65Ja@(oItFxcnkYz>B
zQI*NDEDx&<3fjC=Une`GC8^L=gG3Qc9s=sr`XWJmBq@nT6VP(#pzCF}ws;HABGDvK
zm^6ED8TWJ_;?K&$X7(x!t>QM%n(B-7@kw+0Ei;*B{jB*#`QTQ^5wmpm(h#xk+jbAL
z`^hy_D(}IA_tA~=scd|mo^I?k@++HjhZ@nyz~Gc~wfUKFISUI51!`4UnKgF1cku^u
zsS@Y^<GD705D*(1lj^e>j}#QBF@v0i4+C72-n<d;8u<P`?8JA$Ghn=5Bq1CTT1|1W
z<jiw<S}Gxj4>?SKj0uR1tq~J@WHczp<^q7$E4bgRx86drHX(jynCy~T5}^4`X{4a1
zesj_=K%`H#{SN&()pYuBN(0QC_IX{C^dxJa8caRWWB#rb%bL&LC5E_+RC0$%f0-;6
zaI^0SCDt8@&I`8qEe5;2rZqVqK6oT=_kD;iur-gCNq_s6gRg5?YFtBVxU_u5iWMoU
zcD<7`WucU~IHz6^C6GX0vX~>SOnaSeTdOC~Vtu!1rz-j2pwNBEp&9N^lG1|*4!xP1
zO<lIC2P*=}6W>y-=L@-e=e{U`i1M%*G^q6_gIz7j{mz!BER9;5c&4#gkTcoU2j-J?
z)hhXijY+MwwW?RlW@;x#IXO3vog};H9=2-ZX5nzP9d0+nl7^YtoXgCpjKY3$QDa$X
zxBXaM`1shhLgjLqxwwrEt@mzsbp;*vd#V^*n>csrL}^J$cV}mrIf+CW&+JIc9;x#A
z^vSJo7Lm)nfg=5itt$7@J2g!AI8MUD<m<V)1U(Pp3GWFv#W~zET|L>!p2r;+*&f^p
zecj!H0>Q)iEDbx;LS)<w@a2EDIu{{xkX(HHTK3bYg04Io&xI0~6P*gVywTk61*`x%
zO{FwvxGaj7m-N_v^Ya5ZyW#eRdY3MBmI(JxXRt(le>ywbX!+4%VmK}?E**(6_G?y5
zO--q%3x%pcX({40tT7f49LzcDFr>V1t;d6t4LF>&Th54wZsOu9@{tcFN4uNs5B$8<
z@1j>ZLJ<uP9Z>bWZwo%0s2%nuA_60PY`>~=OpEtENl8hEy)rT~$)g1=d&76_z7`@u
z_}*xRAALqS%Um%aw(a}kL+*2qMUKZWfB!pEZv5IGD6Z1)KlUYLc^3a5;@AH8*Gzvf
zFZ%9U?=H{$!;@mi(I1YKTi5*ZW83x4>i>a{@SKALVs1|2NDdp$+|v2E_*bSCw)|x&
TZl`+ZUrvI8ihRP+b2t7A>*;aM

diff --git a/docs/images/prowler-app/slack/connected-workspace.png b/docs/images/prowler-app/slack/connected-workspace.png
index ec99ccb880fa0a5c3652b9dc46588a701b99fa3c..ae3437d84ef4f2e5cd3cbd2d3cc446719e11ff07 100644
GIT binary patch
literal 113939
zcmY(qbzD^I_dSksMI}V(5KxgWX=!PsyGuHxOKL_%KtPa&p$C{D2b69^MPR6*B}YJV
zfPrD?`kni^*Zcnd<}Y5uIcJ{O&)RFRy-tj-wkjDh12F*s0oijkC4B;do39B7{(5@r
zI`ED2XJaY?g1ZFImE;Xy<!sI02&3#{zPbB+p4!!iPk(NnTxxD!;#WfS?2G7DX3&>K
z@21wqCU>Z*MiOzrQ5(31t+>y##dUP_EB34p<H24l+*<n_J1;P1#%gdg^hc6frW(aa
zq-LX-@LR*i@};0P1Q&H{ry+Ms&}EigP)6)RZYTSgM^M=%@Hevqbiv9}Jvb!f2{5pK
zKB#zkq#QUI55Z`>45CPKTsoqW8={C=UpR4(MO(ehK97FfqIY}DHHc3#dHoQS?65j}
z@6WxzRN2W3z<GGHW`mf_Ck*s;?-h}Wq*)u|_Y@rdT=Sau%P(ime8`NT3vp4BeB9H=
z4yZr>BPjUszC`n!m|D^)W@&buL{Ni}#1W;RB-+fD1S=N}4$R<mtJtp6*PCoLbja4{
zvVrz0Qq01oXN_!J&0ZGa+z0#$3Tc1R%qN8<)|*l={P$cu@>%^aRjqu8w1$>_O>I<o
zeL2^?_SU8>iVo<A9kU1}I_am_i8CE$#>G4oR>Z0qN%ZI5V^95?C^_%b%5~*ng9_#(
z`HGB9iHOOIkOvX}UDK<OdfjFFy0K5>Qh4<{-NOBtxN69~R`(2fOsiJ<y~rg;rR+b?
zBPbBJA#~xZ(HmKW|0Ghb>?zP`VFE{yrg{nw*Y_4Eqbqg%>ngC8=8sz7-Vgt~%Yh6>
zAh|!bX6P>H40`{b)EvgE;fRV=V45Vo_U9sCX&>y5t{Fo8BoC(q98lbjX2KDZ(7S*B
zPtYOGT2B#EB~kg4aV*C3Ns(G+YKf-y_KmJAO(m@=R<7Y4{RNeYY+bD7qw11Lb}&|7
zFp}cLC)PcsME8-N+ylNqTG>}Wl$a?fg?;~fXksv_zT6-lZ<c(T)c3g12KDWe1JclC
zepSBTV*JG-Nz6JX|DL<gC+r^0-{Jqy=LPbb|0;Yqx$++Eqli`4y)!2i5VeKbH~w7k
z8Y}O5`_4tl@XXdF({m+(`2u^b=T3-w&{^~QlGWLJRwVyTyM~mJF`HcrRAy9R3=wkN
zUlXu(ch`t~@!|!G?6Gv{A^t}^BQ1XpIXSuW>5l`8TJ{4A__H@}V?p6z3v!`{TdRW~
zHcfKBi$q79=eO{U@q!q<(sK*AsjawW@xOu7GY?<S(ie;~CK2PL=3MqLFocQ_y6GE1
z38~FEy(5ETtzt9qc)abOkrQkfl^d45A-oxYnOvT0u5I+R1|Q-#Li3MaK%w|#M6OlW
z^&9=Ed=^Dc+i<Pyiz9U2V77S2tG%}yga=Z#UkY~SLvv)qH)lkTdOos*hK5EW&+2Py
zc??UvPjD-k@v_-M<$jsaz^gMXd-ws567#bX@$f2>ioo`ndSxSO{^h3mCT;SC42Smd
z^1(V0=e|d9KG$+)%tU#&2M>!iGU^9u$ma3wO%M21s1+!oOi_p7TSz@-w?V>r@%n*6
zIj{5<+Oj=xaC@fSP`T_ZSIjjT)nUUE+dI=e(YCo7I5B9|&JI?+eoch()+fliLK3~m
zb(cSrM|Ib^g7yA7$F9bQ24aaxNG5d0CMT;xKjsk<-GM)Sb+`r5B)<r>=>%OIZd){?
z%x*=FgrDLWCH>d)WJ3M1CWJAr+NvV~!N?&d*{lSA)AziE?ZJv{QhAb|U&lW$o3#v>
zwPd<ds^~CDz1VE3J1Znw<E42iJSmq5uI^S34JVT+(ay}|{$#A+8Zg%2F+RE}xt73W
z|LA<Qr9O(F#X47VO((||f+=rp&CWinZ1$rYzQ>gd_a+$p>-tOf7F|uEc!K|MW3<Gf
zPoKxQ5+8PAH}dsHR*|zKmEy<zr!j|2qHe$YGd3W}nrHkr9k`QyXTQ~f(fcwyMRXyX
z;~P~~jw&CuojYBHesQJTk{-uAf9#je>vXDUCgwPp`n2EanE0^bhM7B#XiS>5oDy@U
zta+NFKP~6Ic^vad<@swR|Lt*6%*2SrT>i=C6hg`a`Fq0vj%(+<?1+<W=lW}*pMvl5
z&Ywjmc&$_KHbKrT9k%}Kk}HKHMkgQgGGG-|mclWTP$wn&weI`D85-Q$6VJ#h8_sSB
z34}6@O;yvmU8_5$)3qMk{&4_jnh|U->^+`)!)n7}jCn{?Ok^(yUWAlg)NlLU{8((C
zEDD?W40=;O=;kM^LN=Cf<i<S%voaM^rT16x$K$ySL?+ek?+1ig+~PIQ)1$|KpcgLo
zt%GvDL=|+c^k+0H%sBlSZeq-RB(+DKeF#e@CBA?x1nF;3<50$D(J+`L5q?ya%WLJL
zI+M!)g@4C(A4mn`iall<YW$&0u0bAW)La1s2*=ZbzW1bAy~68~n&4wrrx@PwNk{4=
zzi52(t(XVFL^1((4LbSMa4m>_r*-?d<IGCuG+P8b^`yG<a;d>JB99x{JO|-XA|m^D
zNRWXBC$q!a!lvel=CqS6<F!knJhAn%1bTcdHIGS^X$bDS51jDdG1Y{fAeG~2?#qO{
z+jt#VqEgBQ_fo%BCuR_2)GM@}K%XSf;&f_I?c{;XGDriCpq#L|hMllWnzGyvox7qJ
zX0Aspwx_i<B+f&hSeP<+ZJK>yFTO=l#Jm%0iW#0WT!#od>p#43z|m#>K{yARiYzwY
z!}I!q(j;C3UAn@|^o-j%7-P<b3J7v6Hs#EhJjDD(n9c;`Jw;6AlXke)8D^!Qb|des
z@&m(O*vVT4Dg#Kl4EU0F-Y-8*k99n?7t}3mJF}Ggh`X<pRC2zN<+n0@ov(h_&TDNO
z63!GpVZNw4`|bycvd-;}2?BXC*)7k$-Bb7HK4)GVLLj<e!}t{SCNl2gCWx;yf7B|-
zj!5L+rF4MzX6K1D`>K!LBZt$9-xlzDI>F~<^d)8%z7EM7RVn_MpMPe5`dnxKLSHLf
zU_n7pJ&k*!J@jKY3GEXZvpVl<qH2RRb!XeM&O^L#j&Ul{Os7tB!O`*t-P3_ZA(u3>
zACiRxAw&A%3u}oCFGH4F!W6Todt9NGXLHaZEvY)KR&KHkL(t>pda2iCly%a!moJUK
z7VD=wj#ryB%D0D@%*`EJpG)dzsn>B0;QdM}A#YbJOsctQ^@+4%_NgVRlmr?7Tlsax
zyw6Nz#Y7ZNE??G5-dqz-Ra=pBoUOsp_D|{7-?aKs^8qT2(Qa1qV+!}FvUmg1pB(To
zpwOD_*!ie$9hgC#&NKqq82<7m;%dH4ucGyin~IiR1mVp)4C2~jq6|-LQKtu(V60^C
z;OpNFTtWJe^|JH~#vh1Ef!Y=p7-zz|p@QM7x<m+cTV`La6<jX%IqEdmV(@nl*P$+3
z;n-UBx9p*fVFh}BV+Hy;v74#6tMX$vvt<|XdKv04BxO!Bf%#`Xr#&)7#cw!Y-imUQ
z>V+z+)>xW}fci@jdOA8%dYl|1qs2kShxm9P!8}v+@baqWEcRe%e0zgLXd9B5iR!4T
zsv`Yob01`XsxVvltm24afZ-B0a=`vm*NZ}_7$z!qOJ$W+js(O)Z1?mctW?POBydOC
z3)Mm)d-1>o{TT82n{%g(bLGXciAs9%*h=D6cz)_r1JssbV^}%fEFq6*0bJIx+_N8)
zdHC|>%a#C4hw~9X++^Ig(Nm_>hkefLXh){O3tfJh%ukZ18!=uP1*&KBB&ySWS>l+b
zI$bwA$hf(3;5LyZsq*Abl}T+nN<&Mke$68u<mRFqDBf9TJmB35NiJ^fE71^kRqv>j
zXn;E@FMQOC+Ze_*x0&mJwcA_Gp>Q5?=dQOEJ39*1lNAQeGx=a#he+r`n7C)pIAuI$
zqC(08=g>ujnY4e&AM|W9B|RVu$16f^zJ2SU;!O@N;}y8C3_S83Hf*VlIC1Ax*JF`M
zz9=kyEGZ#jR+?2-w$Yo!TJ|-WO~aH3NGqn%cbFDB!JR=^>yVjTknq8}&%x$IqZhj7
zgJG#|(kQH7S?OIxD*64VyV%aFhEJb<<?T$@I-?5YM@B{fP@J!E?C*-WDHX8!y)KnQ
zhneB9prGKsgzvv({`FP?uEUWfWBX&<$=432;M++^Q14C+M_RAlJx_~EPGPt442z(1
zuXzXhXM)vcjyt)yuf=4HVh;4*%3m7*2X(1T{dA!DV6DY?%^0rUS3Ig3H%9qL+!fc~
z?B^T_mpj^?@;b<>uN#3{&F-%a`$gU)XK|gW<MPn`u)mqM)<t-emOoQKi^)_kVw_hL
zw2qR8f^_m_yQMB5ea<RyuXkngZpMn8GZgopxu?mxe<<b(*Y5K(m@2ND+WrymKj)hm
zNX0#lvdv=B!%I7F6dEeyl&j|TCwJ}+A-RgHat|N7AZXE<rL&vEGtMZ_sVZ0q{|bW|
zYaI-K!fivK6=^a*Cy*mCIO<nSpD15TYMBtxih0n8=q=cw<-t-6&oMB~5slpx7OssX
zp>@(G*xuY!54URZk0B`lQl+W{HsU6^DUn|Q-`e7y(u%n6{_3E($INdGMhc)TO-)Sz
zW6^)W%*-t7zpndlEwJnNsobpaS7zS5%Puxmvhc>R*)wgPa4##KPOmqLgR$t*du5|K
zKadFw7_=7Vw#CxzixqK`%zJTOoJt)>&Nd|q`@|sJVPEVOPQ1d?ru>Oa{O)19R5&ZO
z(Dp>R5r)P_z0Va5RdjH8*W9e!qn%52O(fdxxVX4DozFrWA}K1#y@~BKDc{l<)L&MR
z_a4luud-UsS1x}MC=qF5Qf)mUeGKeHRW*Smg6%0jL)N{DtH0ocU9}`Td)H`6Gf!4v
zRYEDaD~Byk1nsUjfMmAAnwFNzS+A{>2UrFx6uJ|lYg|PSFcVr8JoD-EcO?%=O%ozC
z@|zEGH^j?uk6jkn@|v^i;*7zRNpj%J;e0upChs?a#c0~g%S+5uwYZQFGKGVj?UQDQ
z+6|+1bf=uh8Zr%&55C;P;c)x=v!Cs6%B(PaZfr!ihX&c&{`wY8j+sPg9F*Nj3)&cs
zY~bp&{%ohLq@)x{ObtMVakaHpwTiOxe0yjkK)4MN_B{!z3BAUlUgM?rCIs{fzt1)M
zl@$YFXL$zj^65q|7N*(do{zMA<_>Od<%_+|Rx^!W;Il)IP5kz3V}ClI!GNQ&{5Aak
znvM}M_+*9lH28RT5vGwbIuf{!dV%}hH(swU$^c1XRh11r<du{>1=u@fTE|QuM0hQV
zjIs2|)2GMlBSroy+-D4ojQJ9NQ3>G9@v=V{iuqh_G+N~}eSEBYTUgYO94LPO(E<jn
ziqZ|@C2RD}2<+~LV4n9PR3A1n6QMzL{%0NUzLDlQOyHZ35kf1X?<a0+O^wBgOAY(h
z<{7~iD&C(SuPmR0&gPnrEGuNVvJAtVFUa)an$ylY`M8eXzkca<f+8q6wC6g5s*NyW
z?Ck8wYR{9PeVn64=+Wl$S*@(g!VW1>jd<ZMP=9F&i)*2#$~}wQP^U5<IEVSdyTl?a
z9#Zt8EM9Y8G@Rx^zE(fNkB>^Eq?xqt@Q9fz=Th2v<PrPj>bqnS=O-nlCM9=d42d26
z3Om;ZNrau4>#Tj;>3qQRUl3or5N%!U+#)>?Zokh5q!R3Jp-^aTtzTH!`RZUcmmW+r
zxHs`3i)>iIIleE2W1_;OL=xCKGGgLF(hN|S5yCtzq$I07<e(7EL`BBI!GT40cKR&;
zNIe`q1YcdKlKtrJ1}HCyhXHA>fK3N*tKf8t-0W<FN9fv6uKQG#-U(DOx>SBeZl|Eb
z&fea`!^2gTUzFdh=CNaaLPEmP&U_In`22Y91_{m9BqAG?Wbn!gVJ_+hNr=7!x9g5A
zQvC==_X06#A`xU@P;1w1DfZG7rmtNh;WUs5)O=CV(Ja!hb^%ld0MUe{<sPdFuT4je
zg;=p!trH0i@B0rQENh+OVXzfodK+yE?V$jH&KC3FHmRzt!3!G|S@B!9sf7yulW<>G
z_IPdRg@_#Z>|1v1bmQtzdi)U=i=_{R;ku8HSBrxB8@b&k&%78{hAfR0^y<+F|Dok^
z-oY>kiM}b(dtKt(<}#G|b|K>Ygrw~#c=(JWa!5r*#nWWIt-Y<>sCuF4dCFLccG)<W
zQMt$k={ZH|KT&Y)1~C=>@X*d&pO>!x9S78)cKqpBO0{r7HyXijKkD3$rg#!g2G`EN
zp#vUDRz^=!jEn|lURJWH=MU#gm*MW3A3^eGdbP5JnnCj|n#CU=dpRRb!+ebmcN!~&
z#W9e$V$pNimGYQoYN$}Gf9TPURg?D%epiq2QaxMS2W-Wf9k1?s+?NWh3_m-hD%XFj
zc@v1>3s%(xATKUX*?{?sE9qdvdU|?}{pqmc10XvZyUzXi0XHnuPh}cAvH}PlGq5p(
zS)ygF^Q}Q+0$MW}zCQ!E9l*ri8>4KSagVH4=6e#DG&c4DhF=;)Ty$}9!PN|}icH7>
z`8J;b`GAO=Su+}d2J``Dsv<w2FBwL7{ajJuts&C&RhiUGrikk(@MJmA`O{#WgT1}|
zfg4ruRJl<F`05gjM2`ZXP?GP@?_YX^MF;u#KsnF9ydiw}@FDUVo&|g^e^X`JABadw
zN=o{Fw)&YdbqFTrxBF5?&783KyxH@itcm9Cf|b4eycDW#T(RqdePYD}kak`}CCO9Q
zsxOXXuErWE2!u!G7lnasDSz9V=RGEz8qoNJGOX^(Dv0kf@A=Od%2ctfg?fYVAh&b|
z=dTyUd<2M>Ky+Ie0Aw#QI{Id$9)PXO^K6FpoioY9uZJq}&DIF>Ii~AI{qB?6XuR`6
zD#YA=BTHvc{K(8(&#p0Bd^BgPQv2f=P+=0`709R`Lzur$R#-Gzt0QyVP@7<$wXRMP
zRk6&y0iC`1T-+%mvf3AH`!#ZCu43b?N<dor{0G@|xhRKrP64l|PM-8;0H+}=AIPTw
zd~$f`dJp^t=e}@qQeh0*nOl6jd~tSEF|gSlxSdr}!jXbl<!c9BNV1IpCmHs$B_Yf$
zEGtNU<rGGj(FcB^S2<VftivrGw3CBM8WUsdP0cju)o91gHSYtgX_K#i3jM0kTDwOg
z1i#Lvk*-^#2@z5r@LL;#eS@!CHZ!bjj5Dn)cgN9Ivt3zz&m{@^LWSaBV;doY4OoVs
z258E0Y1-7Qi>;kDqCrKre`*AW7eOthmokEpkCjypcx2sl*AXRA`rj-?-MD+$L-H@f
z4mOPta4{awBv_E~4aYtqEYmHCB<zLhJWl%nsk)_kg?A>~+TP9<aaCX}Qi&H65h;!b
zNIKco#nI27rd0}t{vwTH8#DFpoN_N9RW2iiyvy{C3v<q~20iPcS+yX>)LUsd2UHC`
zYDTAKavAUJc|kVF8IkT}cUQ`zMy$5D)7Q_hKe0(-OxOjP+AJ#m4)l$?`k=Du=)od!
zFm24_gNG009Tjua(x@+rbr1S81nTzC;48stwC*cEgNWu&M!|~md!eZB-``zd2TqGV
zvsRg)haY9SXl-3xasFHub1Yev?s{)~Tbreo6^CXfs?w~s!#7*pi&?}aQN15Xoig6G
zjUgWa{vs?Y+8%^mxG#Y$0I+$!+NSgB0t-e?aH?J|f0Vm^{rWmOk}B9h0C}_Wse8a2
zZFj1Vd%d~%KS$(C5Zj3uVHQZ8O~TDk%=Sm!!z-+1Uq*IgUX|%0SR+5k(O$iFuj#S5
zqE`8rjvuU=XrM;+F1J`1wi=`8yC(}uk_8#x$N|pJM$KQUrly&Q+}zX0>&A##Z$^*V
z@K%`RnA2balMK?M(Pc6<u<h#Ci{&3$aC*(>+S<mh@{=!3=_q%mhKBeDpQGYvE3{i+
z?n-61BJ~vfhPOoyEBFqw@2dN2<R8dk0*7k4c?|#^?%`EG;X$<0dfq$p5ivldvlt`A
zNW{?y-Fr;Gn?ZFd>b_$+Ehl6*O?JC~z@S8@a#f1hx6^N<R;zP`y5Ey?$D$N1CnoqL
zF}x1D(5@i|@V7zb79g|Oe6qdPjUs1}b-=lH4h;>}jWl>zKm(C!JgOVQH(G%uXMSQ!
zAZ~BYomTE&{1%fTWpm2>F<X3)nwZP7>2Dp8mftc{+{@bYVG_V%xp#DWKiAd<`TBxR
zMis+@7-UY_BN7rr8K@px6e%XX_H+5^dY6KdQX`#r8hExw20zzOq?DNF2^D*%%1v_S
zO3UUNI~(Gjh=>S_Mo&a<<-f{B4O!XN!!$WMaT7h{b<YJ*i(PXt;w!LwFX&kZO(h~|
zUataGy@)n=^|-l@V$-fYOOPq-_?JPVSGR-bMSK+5CM}=kd*)opx{?wmDY$v$^89S$
z)%LVjUj%aV{{6o}?Rr?)0xh>;rfZBoRcx_H@v!Eh>SAR0U&i&?H`D&!kht?2pVJ(o
zY5y5)V`T(`;8=c|BhJue&&h8?m?Hu%?YtCVFsGMzB%qZ_8)Ra=lWXxfYlARc`~bJ2
zL2L@3P;=n+48Wa^Pfstg;H#p{pTomm`1O%HckWPe0`l>PrJ0a}O_}i1@v$*s@a4Gz
z*{HSV<r*CTX;7CY)sM_u7=K%0kB!h~w~2B+RqnAypoSPPGvMGZX3|LGURhf5y}Ar9
zA6}VnGp~0$I6{NRy1agVg6hN6H9=mAX%p#IR{b5}XOd!KD&axu6BczYpMfVOFiEK>
zDS0mgWW{HNhSUA<=%_@I0mymJo)L&2&o%1~Zj6;QzMM|>buJfvwfpP%_!!_K-Ui)V
zLx;P&1tlWofUwo}YHtb9nE#}pNp?L=%~Z7oKJ=z(k?#=0gyUHLieF)VwW+IA73gwP
z>!pfhumJkRC9)KfV7};?#8%fv)Se2xCQ{P$-ofnXIchjhhR>j3D}|%X$zpbTTJM>X
z#J7vkqb3UV_(!a)S&c3)_6~->O8`V@eFkxs%4I;#B3VokrCU4R<lQ-p%n-O*A5nz=
ztr@s$=ie6XZ++@^$~kO3;JZ-^RQRW41!eW{+*y)#WUK6fI0ZZ`VNQJv9oM@tjI8-3
zy$;mvwW)+I>4N(OW~+k{#^+YIu`HRK)ntPnsFHT*{V|r)`peCUik<mZgW@w_eE|7=
zp(Vf_pqxM!h>wYZ;y85jbiL;qJZ6DfLQh)D$0LK^>YaH}almAyS$cZ9MZ?RD=~@oh
zw=GQNB2e3mVSCosU66iU<Hie^QJ4mmQD^8;!YM)@h6MN>7n3pMW93_O>pGWv%8LN7
zVkZ%dk!`V&nbhhT{72^!SJ*kA<``RS58jUgMK`#PMGd8XT?c4nxgn#do1vQ8Ewb*f
zktAH=COIVWgk<CO?o%$Pb^o@uHkU9LeCp9W@Wn`xD!^j7teyV>NrLGJ>Bw}Qu#Wka
zkJ(mHmRLztyL%^(Rp`yRmX$`l>G~i?UjNh?CY0Xg2LFYwfQ~T11XJTN5nI0<v!PiA
z+f&cECOt(yZc;L`fKRo2#>JnObo!Q;mvey?$`w}iH#F=y+^*!~YwBDCVYjtJc~S*R
zl4U8~(pyt#ssYR&FJpa$7JZni1e5r?&>X@m*=6<bVc-cE*^*RkCMnRSsSNL+=7!(c
zP|b=SJb}JCqdu>hi0i3r<JBkINbT)WmlceZ)8^0HArgcBnYAuSk6!0VzE~Q+ea;gq
z;xYDPdq#AHVkM1obE3@e^4N#HW9$Zr(_nVb?;t8^Fz)eKH2Yw-O@N<)fQhX3ioTVb
zTYam>UUFWZG)CIx$Hm2U%1fql(_B_cP@klvr2c5RsYLJGT#mx;FJGQ1-vAm(0Lhnm
zwfnjcR5I=p6a)s27f@)vvJe&&gc4nxpO32!piqfI)4zV%E--CxZ?m$pidO0)-gdkW
z2n@W$t&m{(d5mA0wufwFi&u-(*}jmsd1UVEZtcGQ=)r?$7eSIK<f&<CX;JfkATsW{
zeG4ta{Oo&r#wV=U6{!W@Gn4j&@Im5-;w+y@3(h%y&9THyRomqEO@$lto>p3NSQKS;
zfBRM&GNJzB1ymFK(qr2b9j*(=7Q4INfKmn#f{kaqS+(QrzVC-v%?6I4Oz5EkAhVoG
z5}NC5)H-<<M))b8RzjjS1{BCz=BdurORNXYU5DM%!}_PEgOU?AhVRFCQodnx-M-T3
zPxsu}(R>FSts1<UF(in;{U_msk5jEug`H38H^<Xbo~t{sVTs05;g#{Msb5n};cwt=
zp5dCBAAC<W-{63H2|&<VK&%4t#?H^r5yVH^vmE0L;qq%3On>$iz^`t@hTkc8?`;UD
zfZ29|M#_TKz#!k;e05vsk+B~Mpmb#|+gFh+;30iCi8qA*iSl!`ChGjibdJFSyxEN)
zEYD8$m*!BH&)BY(*D1)T4qe^9+a0Y(>wWlGhI4GE41>OHi0g3PJOIiD;24Xmcddg(
z4W)qkWV0cxal1g6E!+u5{p7m?3KuCfstvS>wP;f0D?~~c>6E&W6n*2LXXdqaBP2BH
zECz#z?6x;6?xx5On|=B+KBRs4soqH1X*hpaN$H!`cSn@X*jj3Ye)R)c!l6u3Ntx7)
zSF2*{aqK%{5y*+A>N6q9*OMQvuh8(B-<Jcm0Yzcw)uj|$@6{Q)wsAo8j}~yX+UMNl
zY$hl;a+7=qpdWVs9_|Ns8j0%OS-fZU8%#9d*MpSySa2-su3J``2(PtJ#~!(<Fop~l
zh<h!F*#5G$u#oyc0lg`BUuAIO@*-#q1y$VMdUd)ImC=7upLMB8reCWGCKciXH0Ha!
zsaL){ve_&Bu!)x8RQVD!8%OKfsM7<tNp+x!-1eh42R6fJj_@ep&AzO(kgVvIUia66
z0L!G4FQg3PIFOv?k1#%2zPA%tXjp0*95MTAN9TC{s^$CGSS?V+X=`h*uCAu>m{_-m
zh!XxYo!2a}N*>Fh6fKM|R^RXL?fZcNJ-BU$M|MACZ>c*^rj<i8=R4lv{QGl267L_~
z2^t<R8-wKO8jRa!UAT1vR)LJxJF&+KkrwaGU~jy5>`Sp#4~fz`MVwD4rYnDsEWdNp
zs|@qJN`hO>+zx~~Y-aBHze;7T5SWx-p^`ChX9&!%bx1m%kQkM_Fne@dLRo(7re0_I
zTj6VGag9pt+MpcRe2jQ~j9sS#=zEG9X%G4p%*n@YSceUM_?fHdBOKWe?(<=@L=Hp_
z#UAi*hEHOxZvJW7jGyq%YLTZqh8;<NpSrjwV;TjK30(y=q7eL6edv@noYAcq=q>_v
zBDDeJ6yOh*=#C2@@gV&b<C|L2T}KoQJD19Cpd{hLOT9H#?fm=wT5j5`5epf~^8M^u
z0yfeC_*YtK<o5$xgCqJ2<~`?1O*9&$>sHqxK4bayC+e<46nrHbJk^&u#za=t+8!ar
z(n+{B?l${e*A#ZwS82D^C4$w{!LB2?^9_TqqSKMW&cDSU`qO%<m$#(R#CSfeNoe)!
z6UvbH!)$r4%;8kBusXN?jYERz`BFVrpyPO-h9(ebj-^|7Hn_?7j{i(x>Rvca_`uAE
z5f>2wSQ0C5`%Hs}_=~TP5vSD8?XskzM}-%-3uCDqYpA(@>^iq<Nj2&~j4QQHH4(Sj
z`khYvc;qH@Q&?N67pH<zpINSFc0gA8xZF=_OS3ceP6q~GCmc|kfcG99%#v#}$@y&l
z)y}7eD6%oX<jx=GUGbee4Zye!70@@*`InQLmmfouiS`$+eGCe0IL^A>Dx9&zCM_dF
z_h%Nb#ejmn!?C|1jVB%M#q9qvubne|2i=Lym1?Y?Nx}q;6yDg#zB%9MC8wT0Hd0MT
zgchqeJu(xgZ`c~hag1~9_qmnAw|6djKfl(p73e}8Rc&t$hcsW<rkj3K?QRT40YNln
z8IZMU_dk!zH1&-pCaDH2>hpe1FiBkt$3vq$DX(kWYON)#H&#!#ClNi#Z2hmW&pF?5
zkMY;ppPo{Gd+n-K(k)(hTXQT00f)%zFy#u#TUZ--(Tl)_{nFj;ak{r3N2MQepAU6d
zw@mM^x(*d!rVycvTl9G{q9T9$kpAzJXw)8dQW(4smzVEa6R@V2-1;bD?^6D3qSV(`
z_X#k9TKpm4E*Sgt=@X;4XFQ!C_aI#sx2|ZpW-BUTV@F(Th6rUQ37|#IR^WbA6fu&%
zZZ&Hu^fwK3(vG%W6FhXMZn%It@#(+ko8Vc4Na*1}0@JL7#9DLsQ5U*m>R^4k!m=6H
zV59hArl7=7O+fDkhqE*A15a}M&OGt~$=G?=`sG|xvlkjf&24D-Zlq3Lr!3LBkk~Mu
z8w0Z;`%qU_X>nR<uR7y01G{Jrj~1O1PHZK72>YScT9;CNUnUQh!5h9xgHBXCre!cj
zJ8m51Uv33nn77Xa)S*8%TeZUXWZy}1M!@sO*sr(@-}Dz`i?|Q{St0_^EdlE`I&sf|
zN;BaskrS9P!kkGma45g?H3GrcPDMj=xEL`E=nOhJPi5W4-vc=pE;o)n-m~X2hJ)NE
zD<=>ZN7ru<bDtjU1z&AV*N&Cw#4|~mcU}<Rqko1G3`s9OQ$}oxZ*vb9xVsD$u;Kdp
zHCz<;=Sd>NH1Z7+RKF@Ip=vgUDSjwLPT)>Y?-Z=@TB=>cH`|-vM5W3O=gD22_oZlR
z;7H9SfnF4pIQ4G;cAT7RE{m(DXa6&e*St{*3yRTqMk5@nuoKmif*Rf~DY6)$ATxAI
z*_h=LM8VlJU1X&fIB@RP(&qI(Gi+Y`dCdc^x!sL`_Ti;cJd9WC@isU;@2~ERMIa{6
zx0?5x%1{bGQ(amnK9s^v??3y&>#fIw1d^@r;qTk4@o=kI_o|{c{pc{|gu^U*7dL~+
zmnDZY{6)}2w*%*U&ImNYsrzZAsNRO3d5I!@U3P106fur8q&zVGKX=eGV>ZFT++_?q
z7E?&*ve&xLa;yLGlCggxY*ZiK3vUjkZkcbZ>VA8-4I{6iJf2ECwdP)HjhNANP{rLp
znN7gKa$x5@Tr1N_)$r7-UoiFAw;n>D+cnaV#UXA6-*yIIuWsw;kpE}jB4{~bct+xc
zr07s!FHelQQy?6i?5^^zw`GgRC{&)?(&lBY{$hvW%$Q)6kyp~*O;i}*feR{oMlkrQ
zWs&DMqO265KLVrsp9_XSCQ+aZ+Wo<41h9TxQjjc#QpsJjG@<z1EjjdjSQ8?m+tO~p
zh7QmCvt0xrQzAL5(@Kv{v`oZmS!TG<y5?Kb|9mJ9c!ZX?`g8DRaknyEwFbE9DfUF!
zq)DE>M_ZAE#j78O+>?BqmlYzX=HZ}*T^cs<e~5kc-)g@0BsC-fy~azh&Scy&9Ly<0
zNmii{Mv<hj#sy*9g$@+ke+%&%ug>)Bif+S?=pY$FU#C<}@6X;-P7$wjFvh9)pId?;
z@qp_F3X&r0>~7|L`Xn7R>Gcrzr~DuwxDZ4gmwUSABs5~jWQYgqI*ykIdFf2R929&u
z3dH}mK?n$T6;XGeIq%~oQbJQ*^s>xq91_mvO>X^3p9HT59#K8Jy1U`WeiR2-6cXkC
zfC|C+`w!#lLJvY{&~8LGk}PZW+b5}JtdJJv8by+)9qs#zOl;35C4W$`ssGCsfmOaM
z&z(k0UH%tJ&hE5wuA}$8fz1n-@<1Wh7otOs?t0MoN{?b%uEZ8KGLcZV5Ah$iD%Uxa
z?Uzy>6^*?d{N6PQSKz|vcWZ8KKaxQ!OM{s%&(qYI6orLZ-8E*^65=)9zdxVMhrTI`
zh^Ul)C@3ppXl>V<R&1DvtO`=lG*obStb;~NeLVbsZDIwCD+H&}+WFM&4*o<4*B(+$
zBZOOeZ)Z~{G%Zpokj;VIRlyep_RLS;GQsCLyI8ErBQ{`}8M4DInq#P}?_Uabdlyd5
z0z{rXaj;=5R^2LjtqRtR4_ii*n!Qv*7e<_+G)Ay;)|d5hg>AMyhtzN#816U`l@h>+
zDx1yVpFi#lw{)k9(s)diDi6q|<JDKQ!QifeO0nDj1s;LF!xtf{$-_Y^2_iABI#6a(
zeWa4M*bdc0M#h!R`Qqc%&lJnmHo|I;(cCVEo?~0r38esAL9aVFG;=MWJlG}0G3hP3
zT-{VXcO3nUj*cOGTeCUGz2{lFELes?kupU;oTy$lWMrT#>A#KtLjK#GV31MG$vi9v
zB2ixz#6b1AQ>j1W@y52=(9=e%okc#FK6~hQj;OrgyG{GPb7urQMiodlT>SPqf+SdU
zuwAO&!@;D!vXb5YbBB$!z{0v<z{Xn9nxmBZMiVJF0&;|CF#I~9IbW%CS})+bndiXP
z*O$+qcjdp)cD0=?Xw%Uf<kZk@xhZg^s-wu!@<0EiP;$~Q9ytfV3#yj^W9DQ?k6o~7
z7vS^k;@Et)KZIoil)4*Tdok5B!|_*CN|E`rESxQ%Vl6F`7^UP|g9~z!L+`;pr^gyb
zPHYw2V!^k>Wh6Ey&RVTh)F~;;P)F-00&CSKmNMBhpL#PIpG`H$hJFOes6R)3WhlF2
zwV<-u(e$-=echck%7;xPapg)JKKE(Fzp%MtTx1v`#r`G#c5eGIwExbL#9x1a<#_Qn
zZ`U4S$#BSqN#X3Jx#oygD{EX$WafDk$fm*a*QoPQPjf5fb%o^%MT)nqWPF4A>SOA*
z@k}qt1_zt6hB^2bflD%Y#J}0Jt(be4TF1biBZK(eZtlLC82z3}w==QC)FM3ig#5pd
zd2seC`&zE+5h0a@!5JZiup-1=bl$+OxrkyqN!!3*l&SO$4D$WETA+wNP2E)%PQ!<#
zL;B3|t(yVPtdBtjU8PPR)26NOpgHdDm1d8V3!iRCC8@Wws@rX(IdOU>?Ah(wL66!L
zRkRNIU9OuZ_L7)dPr~{_CwOwN<v)mc?Si96p&jp$eij`I@LoDX0;so<9nbT;wZSZ=
zZH@u?Snx>>?0J@osxcd}pSxtwji}Pj`zsf3ET*RixPr>r4JJd<ckyhFVWI{BER4sI
zJPp0um5V>|#=TFd|2I|PQogRF+g+9_fK7EL`yPOpN-@W7U#sae8J_<h%^T%e1gYsK
zm=+Yh`*h1wzxE9jx;ZqS`?*bOI`<YCRpi{;5t}tpo*69&Js(!9-Kl(M&~J4q@FNMy
z^DC6AQSbkQc@9qri6HFZ`vs!0;Rh0qL?UcI8qzhLlLQug7}*mJ%WRUEN|n3LEk~L5
z`#$od`o<-yLEa=K`D(HH`5nwRXKlVDrqSBC*jN3*6Cw1UTa%zyt&Gq`P=X2k<%pF%
zY<e+=BH|I}=n9-#s;;W)JUP-GiX;~|0yQ-wBL*p0r~REKZuf?9(48#tHEPx-MMhe&
znWUNQH+T%y-(5V3;)x-@vtk@5)}N%<4A&Ydv>Yrhby0qZWk8ADAjzJAy_>gTp11!K
zngqK=Pf+|$7r~>>+JR4Nf6}t7)F#5TI~&D@95eK}lc<hsIcT5uoE~dXrZm}gWwV21
z#=iHi9~bDd+f+;kT>iz%L!z8^o@-%2)!SeH3p|p`^WpM12H3$b-@mt*-c!a(lp8O)
zshpjGG0L)L7AJHcczLruWxjZDba$UvJ{|mTAiq>!6f4i?17)z9=}bQl*o38I+h0P&
zNa5b6NVARQTE*dc9nzQ@Fa2o|9qnmL`?BvrW4DzZJ;R;*mu~Pd+4Qxa1{k^YMT5yt
zm?d=r^5XMsf@kfx1&32wcOvIO9Q@rk{*suiTr!2VRdy&*TrSmPoBJ&zY^u=dk2Tnc
zhzvUy7p!Deb-v$>{(S+9am;Ij2EDKUqXk&nu;}Dp&eT`3#2DIXLidLv@X2NEMIK#`
zV#OzGwJIVB|L4W-1%1DPqIff!@8D{+BU0-o!f-Yz?!5-fkzpKb_&)v<8lV-d`SJ^s
z_j+2iJcnl(;_SfbbySqoNp5MvZwmqsTfN6DM{YmAt$}*@pEkOx^U;}^|Hh1F#U+=S
zl|%05dtZHg9=ni2Ns%{XWA2IjYewveAlF>8fx2UJBCWszll1Pk=}NTH#cHXpSu;a$
zy;sk2y~e-tGO*m|&y?og?Q#I#%$nU3kaZX;6i?(D_9$Z$&Wq=D%%5Tj7Y><d4Cx!K
z{*0ZHw5jON<I08hj5`WASEUNf?Hw4Mu;NE*c{=?Q$c_u=TBq_Zj@UJy$Htva-nmFs
zzo=@l+L}qD*i0Rwq+}!Jg*oZJ+{#cr+8N3ZbYE5akL3`^(ZrPPPlfjE@x!6^r@Z&9
zdOKS^q1DF+_rDK&rpNAZ&Wpkrtdre5#~yzyGU{GZX)qpP#unMM=_JJK_yv`zLq~;U
zzJIClzJ?j?j`yf!wFy;z)u#Ub{rIQWvi9%<?liK&0R<WBcb&mS3zP<!4R?s4z1Bnm
z-pIfuD8ugmSAr6(vs(c+TuZuZ{*rE+cb}2$a9SED67a!;m`1Jt`d`&3_w=5I_kR&f
zK;S}t?T_UW_}1ap|8prp;={Yo2-hJ+_6b?_Za}l>^#vy>DJd~EzkZRE$IY9n%FtZE
zgsu<?In>nBvQkei7BhpZ9r-x<oRClzzbIDq$)FG^<|RBYRm^}2t#5DVaCi+_Hvc@*
ztuyt};NeM^*#JpYB0O3S);-*ue*8122kn3Vrq&5D^%0XKXm4{cQo}g!sh{h`4}`Y%
z&{imqL4#$#jYTb<+jwqey>CC1oH<*@Ytiv&mV`z?Tv)gSx5{VEXWf$QDqwSY{fs>K
z)2BKI$fNllNcSM5(Pg;f+icMG>;W3e7{u(c(4v98w(?QZKgT9ZtlG3JHY7M9r}>op
zT&r-9&pS=djvjx=ECtf<ycRKi^vnz4HsSVZOYsD`36fAx3uF>s9DaL)_+O8OngFnL
zr+QGkm4K_4KCQmZdhHAcZbm0Cz3pGW3gRsSodB2OUb%6_2+Tq!ouBF(!hC;tdW^%}
zi0?|{n<QVhD5ni{6eV}r^MK@MM}S{E_e!~uuLn@J>e~LwI>@GfKUt-?W?qje&ybRk
zh-VO%FC5G<vy!zd2vRT+3*VXRc%EMaH1>r4S;v2dBj~-0@^jWkT!zxG4B<t-pus=t
z<U0R4&fv00s6Z9GSO$xE1-1HkP0YlnRT!=i&o*G1>?Tg(gXUXO{^wuQ7>j;r>x#Tu
zU*C`nzzCSv;5H9hrH<}%?&vG*=@<Rze0d(!b1?g{VSC1;LqS<tVyb(v_2bnnIQ0;g
z{F(BySOj4Q;~sx?K@@M80I|!mx?*a(_%*$;Z_*log#jklNwMbK+-mFQ%+ypR9l7xH
zpD;yC?rdYZA&+V4E^-1>jRvVXiwB(Y0`hpb#>LIchNCYdz|JA&cdJiB?udysNCjfA
z(7m6zS3(b2Tqod6jWX+vFV+NXmVLtr2_uR)hDBeFziZ&*<15k3ey$4o{e61Go`YKw
z=HtFlGm*X>>Jny{#kXy~I^Ntr_cSvzQ!@)U)vU2&QZ=6^<CO#pOK^aGRdy+`wCW$d
zhHB=uJ`7q2J825%LsXVtc2|gdp~32Fh0={y;Xffi`isAWk}_y(-D;l}yR2<ciqW5Y
z>~e7LSJic<^SP5azqP=^Wa;4j5ePR;EOa-k>OrFxwvHsDnn$4VEBzCf-j0Z#Ij@D1
z7kz0`;wDeSSLeDEK_wBL0odE|*+_onSehcFNOH-r)y9}tL1CLoKBz~>rtJ(Bkx;%l
zHC@jjOG0cIov=SO>7kR??tfS)70(<GT{2quNVhT5zP7mRysp*c+ONH%)f9dt+oIn|
zb`c?2Q`=}V{t~BA3v5kcyoQO_hx;<xKuc&3^xe`@eKZMW%6AnC*e|Ht>`N8ax0OIw
zXiiD@5EITTEkdmAXaMw^@wnGWO?{@k_Wtg;s{V9aq(+ZUR^cmkY;cIztklydZ#2Gz
z&rx}uxlOn;%LT}{8!XreD4gM}&7l2Vp^ioiqvInG5>HFje&Z^r6E!)5g(t0B%AF78
zBR8X?@U7sDf26|1iDI7D=|Zo0H_zH7tol>iedev2AIr*uo}rnKu=6kvq$LgC#n~Z(
z@#^fNF~|#j-tJ^SV%J?ZH#gU2=sG2Nz%Y<6>^GHw2nVDP@A%pIt`VQ!Pm7+O8CN+^
zqHyRHaP<n3$EZp&s4H26c9@)LZfbdY3^>Y*g_O#)gl7lRL5Jh9Mwrr-d8vk6nQ$R7
zF{k5C^5i>c16k?d%G$-#fFtX9$tvq+|AAw<36saS$jSXWLm(9N$e^YGL)J%M2|NGd
zoDvihv#wvw|Lw5hMR=A#e-et24B+~)WL+3mVv>K^8u*fNypvY6-nIYE3e0e0ZmJTE
zU(xuIHNj(edJwj#S8c86nOz77Upd@{m723`8fpBx1*mV)M;o>@yw>tMYlD~W2S~>N
zjCcWonxH4utvreFC2(hnc};=$;v=g2*y-kr%`^?XfA6QOi7Epx-1pC{(d0bFbB@RF
z1r1$XTr!27tIYgp0W@*kDqT!ZH%^`O(MZrd_cK3W5G~PWMmL(6wA?q0c25ubDQd~?
z*w$09I4<(3rUuaE6B1(eS*~>(6^JL-#}AeVF!J&8%7RbTu(1sFn@@rlw4(JItqFHD
z-6zW_DHy(ne=K|!@4qu+zZ_Lxq)J*;&E{fCN=gRV;`xhFJ-zJky<F6*&LjPW?h(P8
zD>FVmKKN0bW88Y&yB(P`-Qes7rl<=+x8+mO`PRDD)g6`TM@LntT{B(KaB8(~j2$Yt
z)|uD(NlD;#OG?R*Zu4Dkmd`*I)5#PGxR^2WUp&7E<1&YRr5|IzdE-V)s}*!uS?N_%
z;YDkZ=O9EhSL~8b@)b7EN};GEOs$RObH~L^&y%D48~aYp>0FBK?#zmg3SJzer6U5P
zzkfepR+R(cy@$@b0Yk*plT3dr^G4U|Qn{cmyPXOuvWT43#l3`Lq0<{`x!fHBuG8g%
zt&LtA?GOE3n?7dS)kuVA{K{mFR?k-Gw0?KE(q5yG5pjepZ-b>t&D5N*oSG*w3zz65
z#Kj$iZFK!+`575!Ld9w7a+(^mzdH1CvU250r3_T`4=veEF~~Ai?aMta%xH@=<W76S
zXWXkPaJit2tq78{#_>-ai^QeGa*kM5$w~OG7B+1k@aRB^35m#Ld|zFy#@9TDe`Jv<
zs4E1(MYyEjiDYJ0Y9LQg^x?zB#fVT*w@EnF@$bE&IqMxy6P^1~3XDKoZ8mUcFp1UK
z_7^QNuHmxPXSizH@Dks*T(g2~#QucnKV0FL&XX&8$0_va>(tSH9PO~*%FqQaG8*}?
z{pfIW{L<v~`K<qMtCoXG-Om(E5$dAqMnq&Mxyj#4OW*Tk@Oz>U1(em0)a$*`q?;PS
zY|8O?{CLc=rKx7~fS2OcvHNDRpR>-`SQ$70`?Hy+`}v$T`w#a0jOv8g*sQ0XhBaX!
z^+Mu}JY&uSNotSNjg7ml)VD6YIM{ws*^V4bho5qaJTBIp_N|*Q4`u~}<;t<k`=Bc*
zrTbJR>F!ZUN$Anm?@`4YYtq5uFBclHomNr}UW@9)v|PT}9Ykml7Im2TCY<Y;q2WSD
zfN;=lY3aON*&vw8pt%XZjpb8t1Eh@J(ZW!>kBKeZ|843C?v7N7&fIFdCQ`LKloV#w
z@A6bMKtvsA4l@gTE?t}j75=_fhr3m38Cjyk%p?`i@uG;GL+3t#C6SN1FG7P%s?4{$
zE?QS<XsCINT7s7)sYe^{Agy#+@m9SoiZ^}H@HQO2?bU%3Og*ic6^uI`sbM1-C$H3M
zy_1x54{&KNRS8&$hE$+_^iisA=mJSsZI*Fz<Sg)goW^a2NASJcf@c9CftWAb%v4l$
z0X<+1n&A>b+SB*c+?M$L5}mc7oMd&F@Ku(=ZC;~-qg|4ZYk1ug%Xg8H?Ypm381ZG$
zZ<9|#Vyz5i?dHBOdRT~!C61~rw4IpOduFWCao=js?Jdz^nL?acSYOt;*3vlk8yz3-
zMMQNKAC;?zS2188#7RgmBpC+ootvH36gzFV;4h)OEv~ic8Z<+W4B#`^^Yy8?y9+%1
zp%NmNX3$0v@lTrRF64#1*&uPD6O)g?vUtvv-Z|Qc`xsYbbB8CLUtLr4-`9p8IHv}t
zZDq={hEG~GNTIPAvMKL(KNS}%h2B&Zs19nQ<}{LSx{~W2%NC!L3fx3`bb_(nH~iiy
zP_D?m1n;k=73P2>S9|5J`EN@e_^u+AxhRe(R%%m;%YvXeNw;s4lVeb28hcA@07=%o
zy+K$Hbemb5VR5Tht*(mgA!HVf9^hZQF-cd9a0*?0X+r=HiS0Pe3yU*J>ba=vKYc2G
zmQtbULrNRtOZg__sy+Q}v7{(B*O1jTf^n*{vQj;jcV#Ol+O7$+<C(gqFR|iCmF>%c
zSvg3LbAj**gg);9`uFtwumkOIYEH_zT5Muu<iyMb+OsU^_wE~5|J3h(lh<Dz)%TW`
zm#GDO%&22xKNLT%a3~u!<dEbBUN;?Ok_zH6{bbvXG#VHf;L<G7)pYq8$)6&$V2=uO
zLvl`GCY)ctd81@!yL-GC;ZxL!7(~!rORKm`Nx2WWmG!F}*PqVM@dH#bIk{<5)D5t<
zM&p!P0;!%Fms<vWYY{~<>9MY^0&VMtOPDK3)w@ygSk`9$(b?=P8Jlu{2mp*+9ac?#
zXY7qh04KDO!|#lBdXL!o$7~P)F8$^VkuVyn^NaB22Wirv^F$&9(E9X$tibY_WNny~
z{;&sXUoxC0``on%ImMCXN+&ZY)e)SF>w_JU2kk!_v@b1KG^jiV#VrH?KDfaoVUDq<
znX&e2Wmf^df`12In}}-ikF~ESwSyMt>YXg*Q>CtMZXtVLgW-FP`E+fa)^%V1L|sW(
zWGwjH3;zjy8W|NObYew}sH~*M+%lW}Nk>n=)^GD=7Q^(fkR;)w;jI>IAdLhZ0<$S@
zDG$|!A9$x;-rw+RkX0>v_QENbN?F=#p$$%;25WPxXP|<rKc)a)C!vE$G<+8POa=Cy
z9sTW~+$?f%kH=a+)xbbAJt#U_wOG2rV}5G~q}(1SqQ~uz8vvS2v%sr9ED~Y5j&JTz
zKkVvK{doWWc;{5tMQC(sPt4ChTEHDfK$S_WKLFoMNT3r<u*-1YG5N?O^F1xw!jzqZ
zqo=25PfSgfk%k87?A>dtR#8<&cLrsAg>z4oqg#S=m-I4{VJ|&A`b{c-vk!N;;_VFb
zU%u4*fSkESe0Z3U%1=)Z_>M*m_0|Jde6!QF0BhiALwL{FT9t^`wEAAMFT3{aTo%zj
zE%36YuZJf`$=Yzf$Eh>ZQ90@pi4}XATU*bA%W;02mL~;XN3t@llV#SQ!TCGThYvRc
z#;dQ34z(ZcpxYJcCA%@eyV{-M`={I4;^l@2>julnpFe+c=;-t1dpxuu$mpoj%^8Y1
zsAyk+CH)>1?7_7^lnU4h++8oLS>XZg26wJvR{(QF?Ei&TYW1Co5&@8=)}Tn(_m02*
zsyl{tK`%mijLQ{l@;_uhg~Y&L;6*gjK^MP47mdZ4g5&30#&v!5{TBw`Y;lv$*CTjW
zcfWrC@?$ikn47|gu;cXFa2|Yd^n6xl1wTO&32J{oZ6bf+TYQEb^@0M0?PaU0jJQ!w
zpYf+8K5hhEBj9BnMU6P8|D$1lF?r<ljAyrc<e_7-X67wEPi_%**$4%=P1DVzoj}Y8
z1|V;#YrbqiK6^P+Q|n$L*3pq~)3M8G0G}JgOf_X7Q+d`NUTJ_m^j_n3yW0C{hk4SI
zp9l-D*~zByBhz`V7G|?4*r0Ip2Dg16VLyyG_0>7UGZkE>>924bosk`T%&jlZp*w|7
zV((HB^GucL!_0T)w8=0N@8jZOB|vTXOFwU_+FD=Q6gax7<XAsZt_1M;`n5)_3z{IV
z<`?^7lDYe9L!~Tvt+T)r-F1ISc^%s5B_%Nr=K&LtlI9)XUm;<)$+g{0l%rbP`Soi(
zhod^W$M475cJ>rN3eP;&cc=YmI}XE679+^1^;Kx@->>tXwhKWClGBO&9w?)<3`aU#
zoQFZea;GWSH1ecDsrsJ)1>gWPA1_6_GwH1_0ewN+qKSO<QU1J4Pqx&Q^4WW&Q9+J&
zU|jdSRAyK_&H^x-RiK}Eb({m#r}(wko=`?s{pMWLPE`#j5@V8=x}PT%YW}(M8g`?!
zAn4Tz4(-`)TI!wj?%lBti(KH&O!$0Or?_V#!qwB&)z!|8dt$Y9Ksp#_W-;rXFXXvU
zRkEgWKmt8}Pk&cYvE?qlfaK_C2E2YoxbVq3H)>=o9SEe|KngeGp04rDzvE|Ksu3_b
zx=mDBbjlYAvVzxSxVmAtNm6o6y52_S%Y`a1o^&iw7(h_fw1Q`D(rCP;S-Du~LLo4k
z^V%1P!bI6m{%<C$t-8bA)-#CWDX}bp|7Zf|b)<Fu8^>!9C*yIBiN%Qz>wBuW2rcj>
zb4ji5$x`Nerjh%V>(A1dloY>Zo2-lW)qDU}z26KaDc%G`k$4JIO3D-!tt`NEu<|oW
zaRaly3nh$*zSR5wm^#b2sMfBH+bDTJLQ0fwq@@M~>Fx%lyBh{n1f;vWhVB??rMr7z
zP+({nVyL0sea`b7pZAL&Wac+Bd*A!M*SglV{;NifC`=%X$Wy@mz$HAXBC#dsm|3&T
z@!C_maIiKV)5o_h->r8P4u5mX)^mMx?SdG!x3#r3Gn=lIC<2a*=?(>-n;p#tGF}Gd
z%y+y@F{S!d?*PrE%Ah@^lrlgR*a?A3_@qbEG0|cJvVTOX!0%*wU@br?)#$qu{$PdA
z`F4lT4Sg7HQyW2i9AlYYi%rk40G5}wo>PlYp`51f8R~jLoxY<(_dE-{w7%>3=90SN
z{(XOS$XJ12l9ca8#w8)`vm1MVlRQ@JMby|LLo^k;VNIHeu}`!6rja0rtE($nYMx~H
zV+?T1CY*{!N?lJb_hifYISx*w!%8zgC8c5w894vPI+hRijbY>bW6w14E_S!ngrk>%
zT183ph_VmX=Dc<nG8od*(6Z!q++#ZQ?D|0_EHpGUflqCY(5l(6seJM&_(m*JAzOgo
zvE9#YRx!Q7sl}N?8Sa<X0`lC@03@+(+lT7h+=JuE6*^tZUt{2J{?-IMX&yuJ`;>Ti
z-XvI^u+dZQpi*7Unp$16m;y$ceb0$KwH0!sU%1x*p<Gmyz}6dsp@c$;_!iB4=(!Nu
z<MR{a!t-b<(Q$H!-GU3MX<XO`6F5%YB67!JvfrWtOJ;sQi!7*JUpGT{20vkDW>!0r
zCK68$W?xFacL(SbW5zkJ5FLX7K{<Y3fb)@OkHyVAF|@Uo+2@>6rOjgB-BxR(ki#C6
zumB@c_(tm)_BEIJq5|5`#?DUI;<^AF5=Gvxs%HrGm-uf2GbJzbP;Z@ejrA=a*|w{o
z%+#qGaqKBBh@Rf!0vRYBO)6@RF3%8fRlThZKxQ@Asu5FyeAaVJqbRVF%X1Q#0gVfu
z(NSsaYP#)$I=qj85h5wC?X-)9ymCBmsw+xp$)WhVT5xKs?JQf<0!t)$ImT|(RAV>L
z3B>ixi@6%#9w3J14ru9V)p~u_(pu2TvcG?S1mf;=UeDi6;d6{5xkb{rR5}eVsV<aq
z^Pb4X_VZsgUoX5wMOV}rqLSIPvwW>*jn%DIM6RM$*iQgv!NeUoF(IK0P0qaMN$)A)
zgc{>goxZd~aQ>GuU*xxM-z=4>7>2a5bAFS7Od?G7t>xqcsJNVd=9zD@H%+OowD{Vt
zAHGi8^j8xKP@-r-{;H8BJW$H!@|;Coh9?=foc{RnW4vo^A^UkRqm9Fj=h{JA$nfyU
z_KV(#Ynrz@Nmyg4yx`t)?=|}C)R>rR^Ak}Z<o?zCoXjJ4s379}#iX-M8dK$io&ZOq
z4)h8#kZ4GD%6F|Q^@Pw-a<N#o?ksXw7&)9e#W0p460q{~IRrva*f$j$aEnrP?U<hX
z4*WcR=i`gec%TANq)egTV8WC*b!CazIfWjG6b4w^EmiZevTBsoo%o#h4(%>q4%PCn
zcVV3OMat@4>TS_TX-^ft9|+fWq^F~sEX;W0K?|Kd``qTc!EPWIGSMVark%w>v>y`u
z^;+Io%kJWQbYCAh8K&O&U=C8%=<`=$Q8uM;68Z=|n{a;9ASj$0tKodT_4|HcaHa7T
zbXA7u`Yip8!}QW)`KV0cJJfc5CaiJ%esMkI_gwgR`=B<T?EaG?Oq0s;u&lPL)YLRU
z6xLUrY?T!;UKvAu&V+s#2x8&K!NGxdoM(Z|sc#x<s;i5&J93em%FHYq{|WG}ztTdK
z1lpyV33~8w_QEz<W*eLjYzixmH!bez>U@P(tu!!HHD=;^A7zOqZOGd&@;EbTbxutM
zZvXiClarP<h5y;$e^O`&UX#lvE-ogJvS=^?eH4%kZG_{Gk&%(L)wTGU)fZu3v1y+e
z^p@TaVgkg^rB1?DAWR4B!zEwPy5yv!6S^3WE*MzYKxG_Sv$KRbeZ3IZ9!=>!3g;u|
zSbY4Ysl1*rDnXxSkH|32i3tynGoFaSL>z3K%*@Q2o9pSmjAz(F&)XHm`*L#DN=kCd
zKA4;LEc3A~TRn1F??0k@C03RYuM{&%&3tO7OU8}{1%6S2L^>?{x^GPv%J=c1{Q0=J
zv{*g!BhG0otj*0GEJpQT5|Ng`pMuTB8Okoy-Vbj*19xkDqmamj#;YLQur1KI%2u>Q
z$B3bTRUmvFAqQVyyhG6CuJ}VBkT6MqFYAj_>iVkjM9tjfvBx3sd#DOc8K>&J?(y+A
zOcm$<x%@xI!~{NBSX+!Eq}`bopmY!WwS;G>yx&-s*_0$4t>~*$-RCh=54)!)f*V{e
zhA+n5??X%Q3~D0`Ugp{fkoa$1=~Kq%y*?<R($v>-E(zFcaPVF+YTV;=Hd<NptFQcn
z?5|%RQDvV`VyBeg_~7G{{@%SxeV3$>^C4H@Bv}P5Y`MYn-^$QoqTdr9_4L#7#vJYq
zkc7u(&Fx{J08CAKEam>cq>y_tpRq5()j8^{tV|+Mq_r)R5-?aYYyW=^YT(~jbuXT_
z=Ow(;rdSEQZx+A~)_?QoZ~d$Q`3X+v++i`^RF-UUZy{TK`S_0^<{npgY>J%Lr7QQR
zy|LyP?*HZ>_x^UmFn@Y-p)2#hLfRJA1FKI}F`z%M*&+hmNAJh}d=%*_17^;Rqi|t%
zlWn46U)dpz1p3b>#c=wE-9sP6Ek~0eR~yqQjdHTM)X{#8H?$5d*B4oczS9qf@nZk)
z^&kDC?)e<C7wMTZ=~_H+%_xcaVqHlu@|V~h>;L->X0(Bh>8&3P&Xl*lH}EooAql!&
znB+@k1~Mc2)U=%R?CVY1s7<k??ScWd9l_(kj+DV?v7GmzSr{TdnS|Lt{(Sj+T!uTO
z<AnV38q6}O8l7U#B!3hIQ0`8)ct_IRnWnOEGH-b0|GrGubo>r(4z`)>F7V~%>zH?o
zkTo}c^&%}z!}v|PPBa8t?dSC$Thgb9!p27!j!!Z(ori3{wYKDFCDxT&mf^L|drcQA
zhj&tvbw3Ufz4E<_oM5pJTOZNvN_>Y|@c%Aolp~H+7Pg@86tl`K9r)G{@iRY2NJ0c0
zQ8A1KEz`Ev3wUTs!`uoo@m`2El*6@Cbca)Z_Y0Wq(6q#3pKgR-va7FkQJ0O79y`Gs
zW0H{o|D<7K62CsYoUH^k5Y|Sew1Vw>GLWkfE2oa$D7|F^`PW@#^r2~<sdCa?-R%gr
z#t(kHSn-n*9g5hpOBCg|f2+l+^tTOQsSFuy=-aU7_UoZC)+R+|hvzQ~Df#$94t}bD
zhJCXF<xl3f29;flB*>YJ0g@j7hBbvQ`>Cudk*&?Md3b}<euuRF#!yc!=l@$jsolS%
z4bcK8L0(>ldq>)SR__<^GhMZqwrhSrEre=h5hnk&MwRh`Xh>5&A~e59mh-5dl7!;r
z_P(blTIys8mmqX~A0EEM{#ATO8p}iFg<-4ZRP`JcyIUsl?E&{W!Q&;4TLBw=VPiY7
z{+k7TkYRI`3+-dQ8A!H6AhF+DR~AmeSuW*KYD)6OWajrlRHJYY^5!?4FsRNs<cU-;
zzf_f<=OI^O$D+^i!88uBlE7f(zJu9EAJ@Iov1BS0Z}Im$l>2Sl<lAf?lcq+I=;zSa
zSpR!`K0RGB({E=Q6I~Lvaw(Zpz%)ao58}7%2?INSWrGXh)Ms<JL1d#cl*4eIS~+U{
zYqw#L;6<}Y>D#8NjkZ;B8nTf~HcLd@Z%0wel2dZJR*e@_#HW7CA46Ou)2Z}XIeGe5
z@;2%cuku6#ILE9Re0h0lXL>YywKl3eGMacD67NQeyva4S9O`6>f<IRI8QBYgn~-*4
z)!Q?e@jg?ZIWHqDB-G<Kq)8^;sc|G<jVL`0&pY-TDc!w#Z}+bjkdCNk8Lx$O_rI~6
zQQKTpK5jdEtK21L5a^w*!6a165-*3RvGx4okjQ*XY6J4;;lC%AUnTE!O+i|pns09=
zcdvq(k1=Aqw|jQ7SqAQj!5-3n{Oss3j-I|p`h8Io$>VMTmc$&K^gQqFLz8O>E1|6c
zTRGno-V&*8ZV~rV%~{#@H!@#Z--XmlGJzqHOEdCQV=wMLB=Rv)RtjG6&#eggP`TcD
zZOn$adV-9-=U1oIV5^tnMqZocYH^d62cLlL=f}QDD!=8rZ-;caXHdr#q1TxDthQG|
z-p?i8!T#IVvFqhp=$jf_=XW2a7JP|tBj4Om{kvC)DM!qYz3&qkO#?T(-KkZPLeBWS
zceGh2OD3LYi(H?^#V2OV(h{JJ2ODEwLw{DxeYCO|hJEVpe`Ve^9<ym)!UJL*{4qb?
zxln_O@j!XiT`d6{fH6{7{b;OxvcOD2{rPF;%Td^^8^TDgn8}uXv0@<J+*j>9Wis}@
zW3(t?_y4vCAJdrL-EV8}eXmv?hk5E}8tYo_e~){pPuJ7yihy`%De#qC;+*qzcL|L^
zC|JIakA2b~YbyHf2!f}!f(|EG=z-pH+&K!rg0q<QukS0nxg3=ox`6uvsdhb_f`+Pc
z)~3l0K<Uf91NO-5JK*41h!vbqdu~SOShPqGF|Um2==twuxd$fTd?<Jo;&RKMwUNZ}
zF}H8f_`nyQUZZ<de?5Odtb|*CblZJOL1buTCzzCx(%rVM0{NC3dKAJ9b%-#sHv72a
zyU!Wl)14Nam^OGW-w?ftT*|8F({=}}wzyA3eYJ}XMd-hDi>Xz+XKKTgG97p;#fJ2r
z;j01*{3C(v?FR3bW-^FvtD56HTfg3RE!q<4MdiM>YK_Iv_tbGkIr)G*?Zt9-ThL9!
z|2sjpboID%>O?UU#u~HVi=OHWbaxGzF2C-f;S_9~9{0dS0QAbUvF+Kl5!VG6p~r>|
znQq$L@|%g_iH+r3d7!C!C~~{^eKFKoEw|C#n&dn;JWmv3Ru9Cb-7u+;v2zmKd<%cQ
zBk`ll8<tf8va)fU`f#!?jAQ0W$SP7Uap^45DZFBQ1r8l6AuoIaW#evro~WHF&_6!C
z4y>#MMUsQ@Pd9G=|NCZl^LR#8rGH6m2Elu4+1S+`JiI=qc#r65ZV-{bu(7fjT&7i#
zR5K7pqKC+2;^Ryoh!498$zV^q3iZ!(<Vq1k5<Zo65bl#Gq<;TgGfC)G!n4TV&st<y
z+DSD!+G^h+5(_~~4?bsdWit9Z?)+nt{N&(&o&J}L>hW4n%V0FJ#H%za{ZwIwXBxkY
zH6(Lfei1UJ;F13BA(o|dl2HOZR$DjQi@0X)P{}Ncy`sRT|1DZlL?2$xGs&?8)~kl>
z_psKw^rq0Uut98pVzr5&Kg%hHw~+2_$}eV$1)pcQj~$}wHb}>thrz*iuTKdmgmvpQ
znBAF-2>zczWsCh3+o}YTm{TV-@|!Eq@&h{S+Rntp2543M_|e?P#>UF(e=$>SFu<<?
zcsg5K{XklEaq%|k<8;!mi(GE2dpM{RkUA=ZMp_9AYba%_IHma8;kX!D=8v=YQ~A&F
z@$vcj>EYoeIGj^ZkonD_{F9z>KU*=Hz~Jl%e+Ce2aS?D{goFfLfX_bu`ANFUaSCpB
zc5XUWF%6N1zdI!XHL9yqJf)p<An9jfF=C`Y=XX)=3Tk13GbA$7@YCJq*NE$(KYYr2
z;LxXdk&%(P21EV*Zx|V4wi7?^VXRclCzv+%<K1Gvx(Yu$(`1^sTC&vFZ}}xA`oCBr
zCQ>DX2-Opv$A<Ym#fY@vTHW-?e!x(m`2%YYFENje&0C$z61bzl*7`aHK?EY}-<$sG
zDpw`^?>8}Sn4nD$?c@0)<4M{VJY%g97^5Ee`j(bRTmuVIdg-W)-ydJ6T>aVd7YHTw
z37u4jdr;C$pCCCJuL5zwr@s-i>I&FDTQ$+#BHegcW-p`NLpqjx2e_VqIm|wOB*lL@
z_~%;H{_~-eYqVApH1grobOdl19(u*cL7%nCexh|HjEAmNMqg8A@(6P)b}V!k*rV`u
zf$Ju%GEM@)5fbvHPwegK{Sya&+5=iB`+-D&o<40m(B~c-!|zZ@(TomTGl#T%ap#42
zjc44e8*VX&4&qXWI-WXy=;28svCaNi7Cw4rPR`H&UXOcbmIU-Q)%Cb@Q!8k4GF_cR
zj2u7G`n!tFZ1&}38Cv>TV){m{Z&~j2s+SB~sz5q7cC-uatvnWV(=4N$!WRR;LqgQT
z@0oiT{+Q)!`Ac{fdS^jz-+tQ;jBS-|zn755bBe9k{u0$Dpr868&vl>m9dok=vyW%2
zbHRteNz^&D`J@}Na!W7GBVNHR7u7O5Y!w_FEGsMf=lZ`&&rb>OWQQ;qJBk-8)-olr
zr`pk9MQzu;%JfhUc*HVuT)3z9AHT%kmppa!RpgvI_C>8EsCaGL>^(A7JLPegp4sG|
z`yu)?ABeQEocke@au>u~f3?|hDl2~G>%c16A}P>oh!F^Pw9-^>Q?W9JYqE7e?_dnp
z=;o}6kjt(y;{FlcIX*wV$XOL+@1TxFPV=1mNgiEqU$10{bjYRjBe0y@H`D)q5ZWSP
zXJIVq@2Z=Mewx(7)leh6M?edv)d*(*Q;0D8>-+7-*AMb&R_ME5OU`_$DJcm`Y^ack
zqD~xq6yQ&Z`u+I7`N=p7&CCP#<h6ltQl!YU%TT#8-tM^6c!h8!AxUIK&+V$jN5jAA
z!hNA*t(oEWVx=P!yBgoNNC9J}i9=?K6(XhBD%zJnR;UOsQvZd>mj_^QYbF-qpfTk0
z9qj6e6aT-LT1@%T?5A0W(enP~RIAj#@TtK{Eh?KR-M%!L?E7MW6^?n!&te|q9eVGF
zqI5lZf_dV2vUo~)8vndK;*oLev65NR@o?a*iRV##dLgO6-*VPs5LzZ%vf;JL34ksJ
z$ZhlWx^-wAvPqBSX7|*jjj{CfgoJvhpAR790MSKX9|o|8-dw2a=;@M@k_86^0gb6W
zh3~thZ~)nf5+8pQ#o#$HcuOVv2<>l@Bf8`@Iq&b~5%kZxHWTTkr=R8Xu&~%52)!T3
zD$A@G6&VTaHHzP&=WP18r1%0yuy}a}bmzyvyz>F7>c&xbwVb_Ix_O{Gasz3Csf;Kx
z<4ra~N*wuaB8we8iq89$De&&1vF6}T!I^|G+_cN7O;pI7S|L}-A`7)`n5fdSQamR-
zjlD<S2jD>4Corm_r!Y7mfdlH0YXNV}DGa&1&5_KZdfHf-CwFK1L&gCWx^+oGL66OY
z5?-*Uh;qDn6Jst5Kq$`6&f44C0mhAjyoe8KsoHrhHxT3MY`fxE4RG`*C@R3)!Q{zs
z*@pbSh)iBzK6_UE=Jl%WsRhqdSj=mQ5F8f0`jpR~fBHHi4O=`WcoQuSk~yWLC~cR%
z52Q@w^WC0AM@A~P`(1W+bphO+ez#vK9SPn2i<=D$f!HcJUeBye9?kv(W&Tv&3x8cy
zSeTgDkeHep3e?X7S(!LF0TU01i<*m>nTu9uZ@tmT;&N_5<3o-pOa6*d<TU%TS}cFS
zNBa}b*W2iJMsR#kp)u8f98Ar=Xi?7H|B#odcHe9QM?Mu2#nq|;b(8h$uk;q?Za&1w
z>qDgiO{uS@CeZ=6y3KY1kAnsVWC1(?KR@&Zm)q9BlqF+?h3@1!le*(d+gyV_KSUd#
zX5?9f6S4G8mYEhQF_BXW)gWzphg01Yv51)cPI@DO7XWUN82F2_x$=*xwgam@>HPMB
z9w<h8puP7?u;=f*9tDixUI?yt*cIA~n~m3Y@eR|c=jEhsSX@cGbcc_#dKde0b0ddd
z!C%jRUhUt!d+1w>T0BFRE(^_avSo_aIS%BJvKo?2R~fcwX~L7O>?n`FkH7urWc|cS
zqkSNZ8x^HA+EiW+B>9%+Zth!T6N!1dlG=*H>_T>BufVe{vBZ+rA9QD9wC=GbNQPlQ
zN|b<UAgH@cGHY!<Ka{)q%a=CI7UCeJn`3z^Uea!h**!*Wsch@qGlSK$BB!#Mj%#5t
zob?lx4sxv@$qBHZDV4_4_29Ev|0ezzbGlfo!6tDK+13W&MnwEOA3ez<0<cehm&X7#
zsLAu(0Wh!vuFT$g2H6{JdIDLWTjH;0J5x|9d$;|i67M?5>F%ucOf8+r{!(FCQ<K2Z
z`?;m%Z7>3f97A<4ayrU<GH#v&zZ|cUE(|l5)VlS(Tq5ITuA`cu>O!CIcHQ0JMB2-I
z;)wi@4%1JzN9m#mo1cflxcWg`J_D6$5=tX8KB)*t%bnp@566Fu)-aFM-oxk4X^^4q
zm{q16K9+>8#)E(;dG&#Ta|?4@PL?{B#k7sR{~Ri{gQi`r<a?=FJA<|5;HoV%(H$eu
z{~prA`cS2gh((J~w@IQe3gx=I*Z|!0)ub%16ZGjkXTEhl_zE}7M#T3N<g|4dqMXfP
z(E5HqJtc*4(74@4#H3rsW^?Hh%LoZ>M9y1VTK2V}&r4@eHj!z(3^xLoKl7!>vV4cr
zMDztTD%7C|9r}&!r^jbr+p>v(6iLL9nwF*(=YKS5e)ow3iiDH%c)ii~-x*Hzzqy*~
zU8R#RakjKv=qLk}ONc_I&*k9En7_YvWpl&zskWpL>M^Uk&)x4Xeq`$ghmMt*T{-Bf
zfXjLgBy4aKw9@RFJQ~XaJQ8=4=0ivTu&^@%Q@p#?uhU|Ke54iXmpVo_*g809Tj#46
zjSf~}W-1-6vQP8k=-r@kUW)i1k6ztOTTd0Y>O&8dvqjFaE?j>7dX4zVq*DD0s0hCV
z`RwhVe6ExMDxK5OUssVpodJN{8MSysvgAsTjd!ecKU*WJTjZ^$aVuWm0B~9LO|F|8
zS+~bS94NQ7jgheDx%u{h;U@CMzETj&osncv1*|?*z;<?nO~1H65!R?N*=Q)#jH>^s
zx%PsLZ1R`-Yw+dIM>_KxxLCLZJ`EP9F8RUdIT-ebS~}2=yUo1eIM^C@r*q#`f$A+T
zhTqxS`T+UQ*R^}6@comhs52O}9RA(EL=N%01JCdJmy6RUhBg~>^8uno*g~do<8C-I
zJb=G4=lO3;X>6)%)P$yu$IPI&g$0DnV{?6I_xd{Y>bs10!_2>00B6UPNA8zPJgRwu
zb)>AcT9pG%rFhVBrCY{le-3Td^a>XZTwD*T6;T^_IsSRQ_Lx%EOMZaSuwCOZ(}@Si
zTWM<-a+5Lk*+vq%3f14ai`~7PCRvl9QCJ)PCl;u^hYqL*T!k{(bu`U3Zu=1(5R9F{
z7YiQ_T!YE1RTG}1f*qwEl<4m~^Hj^?qM?!Cey%Q;6A=-qaVMYU*`D>j;-}kSPKrvN
zA<W=G+JSk#Iz}-8B8@pe8Gjda5_fDb#|!CH!=Zc@Fp{I8K4=`zAD47|n!or?&Bet;
z{DEX~O-&798|UdLDe`p<(tNc*mbHt=es=G7SBQy?Rtf7>euSZrCnHIgXh6Hy1a(-E
zL@=&lts80N4nUtV82YYNrP|fg6ZAmQXHE4>60m`m&Xg+J92aG0Q_(d6%b~gsYCBa*
z6dz=Qi(;lr8A*o%iAaAk$I2F`DGfC>35OozZnMoyU<mFMG6tYn3J3_CQ@zR2+6Rz5
z)8C?_i#j9I`P9|%@qc?Bz)SQBcaDizn9ehVEJuOE44~OMW1OK+%K#->uD-;j<!rwV
z-qzy0W&t49&kkUBu$*@Qh8`m5w*C+UM@~)-;FC>!y8jU5cbx-z>Si-dNXcv;aCzJ_
z1Pd3s$nT3*uS6fM^#SE0029{WFw<-vz5!6?HYsHRW)iSj0))RPQlTh<OHl?z1*N1L
z-LJt@z|oiIFW-`M>$yAo>C-3bsHo=*H>59#LEv6&W#zH!$Cx~}@ayczbV1LZ6c-uk
zXjPTlU$<Z~fWt~YR~67^5xIlP{CphicZ&)YtZi)6ZE?5(8l<g(g8E%MI1H0)al)y%
z-ZV?t+sat-hmD1U5(aWBC9tvSc`o!3CEE?^>{zSyKI<@B0>is073r_iOU>T#w{&V1
zKBrvfg8-yIVh|wP@9ylNcM^+2LVgLVLx}k%VjaDW^TwN`8WI*pmU>5E${IW6x>t^O
z?aLuJ+fa+;jxh1$RY}|fSgZ5NC}|zBGKJ{%d@SXR4IlX%tMx8l677nGdYe-V1aY&w
zeTUa?<A8`1)LF&cP6r9AF_-P(c#Q_gNi146eltTTz<hf(ReQ<7ZlxyL=9brfDd%;5
zS0^>!O&u!_kKdv()>jV(KE7FosC}Q~^~*`bE+a3<#R@i6#GzNeGh1T1+lA4X$g0l5
z%#0rYT=DW{R%SEq-cpTwMcT|u(Mvv+pFeXoI&3!^Ek_62LE8&$`7Ku!7Z+dM%Sbd!
z)N(D69|0%fh2?S_zhi51)%<v~X5ILB_3cCH!zeR1v#%wRXp+2t0>p6|TXG>5Tb3sa
z&kb9)UbOuBaSyJIkxpU~^V2FuT1xoiN@6Ul&zh|2rCdkS0I_RLH4is`{x}0b{bY}#
zqb;Tb0|gh|n8s~aw2+z{ijK^8Yzw99?a<(JuR;K<)WD?4k`yLD^Es{ccSFJvMeL5N
zsR?a70E<dVc@ZX*Xu4IN1meE*8{^r<_I-K!iq+Z4zwX_o`4q!kM^o#;DdJ-fIWF6*
z%1P8IIgi2j5AV|UVK5j8lU~A;9iXN<h#*W?V;`^=5)$IjYyAp3#@U$xAFqcdCZ1Nn
zpn%86@A{%f0t3&*-TxAioW^UbGQLnC8{Z`zJyW&vV{#CP-Qs*3-iO8!T27HXoVr8X
zE?qq9xJ9#&h~3pW=a-Z)NjCFW8W$DmH#+27FtHjzJ=hAN37>s@y=Tf*X}GxZbdFY`
z4lCO;En};a;lVhRX(=hwRRMQLYrU1m4Eh4eXL+bp@e?J=#i>~J9PgeH@NH+%)!9Cq
zS^*=k48}^ee;Yu|Qh(`laz=UT{1gYr{${r-`lV>DLgQ%_8^AA63JMrWk=^FbH0@{y
zZ>jed9+LApl&h7*`CzfL(=iGcZY_<Buz}dwSy_h%20{rm9r)^lr&O`=aX2Jl2_}xq
zjo^dpOSW`=PfyRkBi~rlz8!#nizFT#-;S|bN#(X+)n$b_|M>A4IH!1RXZKz%tFsk}
zg>bGzS8k0O(xif460&3qf^A?)6$$$;L_GERzg5;GmwHm#O>=f@Ki>ExuE+x(*=N@T
z-@S*DOr@jG_JG#80)^{y(c7GZ@AuN=4?Pd&OLD<LYM6V<U#iWPf2<+$DJm=~3q5x&
zc~V3La*<P=Z&bv}#>?(i&X9$@<Pg3Afyz|chcjF70>6kKz<p6?nNSz3HeZj$Yh+~r
zw7(s;HD1z@=XahZAsv+k!6EAmBN|k>w+!`6KE1OOaYsKOs?@n0I~0AQa*wTE$owb-
z&n`47YMbBb5e_BgC);g;Q?kZF$LTEL)2+E8{rKKfupfw!H72_A=*N!_{O9TRi#+NA
zEx_lO8}KFj<Ll|`^V#SWS%+7m+{LruhKufdzE`6Ued=wezQpam?uc&jMB+al2X36D
zpVe3EjDKnaV#FV$o+YF{3)~B>q%?e&t4*F(P$P!1#m<6V>$g#Rp`$d&Iy~(9R&Y|w
zNyX{C*CWX>;cf1zgbca54GHFUdSo1R9+;feTJDVbMrpfl!(vJyI}xjpnk7txCJFvL
zFNRZ(9Y~gfgG{V?Y#!>q0b5YduFRueM@?ET&R@Jfd*`*<_Q6pudz<N|;BN>Wl-emT
zLnRZi<fuisAMEM={g<G)-MJx?6@UQ8vSZNd6`OA1`@1s;FrcY|lUI9)sty*L0^134
z!fQ=K?6LrADP5}Y6~rsqMbnhV6tjH$2(V)%YFDaBPP}!0zsz}A`pVo8I5Kp<@IS0D
zGHew42^cv6B&hWMTfvPS1K7kw&4*lZBId!{48UD^k^tgfV4e77uMd6WT&kH&*)>TQ
z-lV)BO3wE+Bt(7O&UWae&)C4r2e8v`6*H0nNJAyAg|s0<0JgvD1`4<xRxAg(ZeZUO
zKsgJ?6hPT&Uwq|Gnv`~D%UEDHBeo9RR>ed#kkyMC)5=2m8(uIPV5Tv?f5~aGULoX3
z7;bH4C0!P)O+rABmj%LFXp>Lkol3?~xZSsadF(Tq-6?|{Mb_+YJ)xUr&~OqZZ3<e+
zHUQ?a+SuXu4D*6Or`hdU?(%lwCWo5K^_(MoA`o_VqI@a0GB-EYX>gWaw9SD-ulNF=
zXhSg?A#dq?&P}-325w2h*_rb{-LW??5Y~<az5jVXtKQM9I5|Hb{9F7|K7mnbf?Fiz
znk5g|xHY5pw`#ZnqXiE6G(_g6u1Yj$nouV_H8o4%lFIXiJ&cFL;H~ICqDVi8mf+!%
z`<tsgTWM{Tt(neXVr(uQtrzQ6R3A!;y~nkPleA{F@PGfl&aK;ltD)&$E9MWBzw^Un
zA|f}H>pmDQgc8h9a=iwm8DMq@D}n{+JtPh?VX=|Aq(lG?0T04efRX)ekFl(Y>UO{G
z>=lpzkIEmR9AeH@A_J(6p$>-h4-i>E!VYBaz&Hzag=kGxNQ514peGW}B=>!v%e+JJ
zZQ;DCw-8`(eIj?#BJoAt2nRQ=0zTBXu19Zv{v1eKJ+%v*@Fmv<Gbf$7?pK-{0Cv8=
zd<q;&tHZ;w?7h6f<jv=BWa`s|2-hL%4&UTj4)9WOCSV$vigi_QOmt7+h@Ajnp*ZCH
zlTs%eY+IHcw>NzeFC`s&c$9$yD;OrDB$t;hD;pZ7)I@L)!&qAcpj14Wkm&&Io*OV!
zm1yFI<{g^LCy(cgeSQ!aaAn`!uPUF!o?nIO2k)30kJ6&4VyAtp!;F3|zk(?oaJw`!
zlNg)^=LX=7fOU0l$<V~FyrzT+NxKE}%w|gZ^(*VRQEX!W5I^4Gd-hTbl2Lp0=2l`&
ziYc2U%$AaJudPk=&3%*_Tv%zTF*8$9L4lQow9K``<7%&I=!B$_u<lBz>Ky1>fz`R*
z1YAXB2>5Q_Ttx#ze@tr%s<g9ttPNIv{v7S>6c*Gwa~MdU+rAC#8;q2elA;vxXm&4y
zJU-rBZrgli_-(A+A9ZGnlJ6tuM{-U4Z-?U3sQ!R2$!u!5`4<7f`r1j<PrNE`caLpQ
zI7zIII7A(dNnP>%N9S<H<mRtmzj&rB5!O9lI4tq?C?k^8!wQ*4Y%$%{m8nNtkMQw%
zET63w$rkxY)yRMNkOOGhCNJF@x!-m$4S4~rS^3$6p8KZ9x?><J(dBj)-|aRi|BaiA
zi(2d8@_DrWI{z}`lfrC3R3TzX(Dp~|Pw7uE&EZSm^g1&uDy9o+7M76nJEAZ8<KBm9
zbx^iWHa;P|24BB|%?;?@bhl|R17O8w;2dA_h<+)uo%`MXLw;{$g9xQ!2<nK&p2tqb
z7@@GHhEbcytVt$fVOO^?(o_Tjfq33}I;=pRwg5vz(qI#Q#Y=IsNl8rd)w;Sn&BU-Q
z!`i=Ey#Xhq9`vJ)ZERV1I4-ohb_2Y<vCjZK5KbJN2u7pHG0zV~;n&Cm;NU!{@xJX$
z+?io^KbY<v9CR5i7Yz)Qpb}2l-=#V%)S2k)EkWwZZXf>o+&1(*slL8`zRmOozI^xe
zRDAp7$9<77LUx(1cE9a%Ni2x%{LR5~$Q2$1>~QRiEnRzKG%-F7QCz$gx)ze2@*<fX
z;j+205Jv~#1sPciXzFWfULNaHImk7H0jE}@75w|Vn?)f{$`~ANgKJGF`E*o81rB1l
zC<=M7SeUsteceIGni5@W2d62*hd5jOla?*01U?xd<FOhPVb&;~tp3RTM6`gcaG`j#
z7UQylSD!zaw{-ZGyxa`~w(wNEdRPQ@q@A5Tb*JW?>-2PY_b5DTQY3!*4qW+u?dvA;
zExDiwQyK0+IS(S>=$MyUTta+xbxj?5?#_&wTl8c5#zqt%yu%?A<oTCR5}Jro!oFt6
z`)R^aLP${X!oosNU!SdxiMV>*iY6U-KCHox$}bZG%<#$lE5LAWuvtb|k#ZZg`#GNt
zlVT!WHb>j+E-}MYJcqh|ws@MmGNfN0V<lc)U8z$nwE5zBUs6II%1J(a@Zft+QcH*t
zf|)Cs!*D}zf2IY`z21F@7*k|B{Oc7S75MPTdLgfAl|CK<VH%o-w|G`rR>2G9lJ#o*
zNVT~DMTEnV0~3-BidDofBzy~OW!WGw7boZTbW`2<Yr4Tr%JkGi9{E0%YL#5T?LL~p
zDZ%$ZF>M_fNl=$D7zGS10g$G)H@5PUztI7Fe73U@&H1V`PJ#;Lgw&fu$yGobgOI14
z<+1+tDb<@pfEdrr|2pBt3qWIm&CNlLG8dQh;BIKTb(ZW_zaw#1p)~1R0AUO0A{Pys
zEMzvJ?<d;>S-TQt-rw+T2G32i&a8I&p5OAjp6vxkk^$WotgNhi>!Hun$U|{Ypzi(n
z#Dx7<%t51ME|%ti3wC!Lgpg0(<v(bAHpud?7I4dHG8txG=ZVxg2fBV6DbZg;hHmXl
z25K9^H<W=HI8tknOhO@cqh^T8&+9pWYv^<J>-SXUG6t4=jnh%-gUb`pci*4W)2MwR
zBpe)|?0W9}+;X~1JDzLH7>2T&YCqqIWPvEgF6TMzquDq_R>q~G;az;?`ohNnflSMw
zfZwG)MI`LaMC=+r)_TfFIMm?;^+W9<<f2!?oLpS3UIRCsk_$%Z(7nYvTZx<%`4)<v
z)wSmuWHs(i1^+JW@r63+bY9yQ`*geI{&sN4#1xNb?p=RFLxVO)(cNLhx2L9}INEcV
zx3}33A9B<CjB^ZTN_&_<h0QqKuA0lm9QXnlgj~}*YAfi<)Z!k8)XjTskPM5f-6i^M
zi<iH9+<40<Kl+86E8s61+pVW&<4H+Lz*hFG<fH|Vjs)jnQvu(BG#c~fz6)mTJJ;Zi
ziRRXDH$M#K$N7+i1#)tLIL!F=EieI$!-lu;IxuGirE6|n;&N`SNxTquu{@Pyi&ijS
z>Kvb)ogK7&|LtH`2nh3(yb(BR3sPsQlnE<9K)s<ARJo(WIO0oS<Fxe)P%|;dGI(w8
zJ_janbex~D>sMwpHC=|2a9E6GNfH@#_)F@V0mmbt__+ZyD1i7+vqEbhm@|NZOYx!k
z(iV+s*qzN3cK1OB_-+~R1406Xw%&esw#vx+0M-&sJwe86t5$Sy;J~JLyR*LTcDh64
zkQ)j>U2(~Ty|$`9qO8-7=1^eYbKDnii>0HpJQ_Wq4$Gy6MYwbwPzSiM|K2=6G6SNi
z@$b&@;mK7QLcWc9r#n%#L3@{(LcW#2RxY2+R&)lG3R=7-#KV>W$M5c{8ui<^-vKEz
zVN^N2v(Ck{FRJ#F%T#Z`gNGfD^Y6-yr9&o4f#*PBq=*I{*Au=Kqg8I8+hC(9ci7^#
zuh;Bm&D`q0pXSnlagLmN{CAtv@)e$gL5I?P&d6ty0~#_9^O`6}LVOT|=44$9t{e4s
z3zMCbahvBU)hx*zQ`+xNcV_efGcy3kM#5vkpWj_x0C;y`+=3kJ&H<jW@#*~|Ftb`o
zc~vxYyy9t)iixci+FsAo$;s-VwKA-ToPWO{q^-?frXPA2&}4rF&uqbcL0*LRqzgLk
z3RZr>=>w3_c%c;BOd2Q{|NedlTrZ~VvO_h##6m^oTk!G~?gbSTA1DYlih~`l&N4B~
z2j^U!s>8p1%Udxu_+2tZa!gWM?2^F@@;@$gRTVC*WD<kcC)~W2(a_-0zBrtyi>qv?
zC}*9SvNTm!zcNrls&O3rBLW;gtgEiJnSzA-c#C~n*`5kX<-;UlmpV#Hp0iD&TpvUv
zuq2<<S>mPcwQoUyBQ)T2kcRxxxB<HL_?~`^F|io(GW_zQE+7hP)=@2p?NY=%J+I0$
zdjSz*cN7qDRh7%vu#jWC@VSij)mL+xL_@O@bg(I_(66h9P9-~C{XfQ+hIux2(FGYm
zzl4si-s6z3j~-(b#e%pe2C{f)sG2E0u@{u2<<x|Ii#R?#DS9CoJt%n3K(QoYGv)$M
zBUwVtQPoPsf=M~G*hgXW_w#HJ7RBZq7iJFAeZqFz&j-o6j*Q@>Wyd$Hs+aHRmK2}P
z?BccFAlp804CY|K;hk>PcH42PG|~p`exY1)VI)kC4C;K`<E3!&scD)pQNZX#+XzL4
z+ZUkL_XBYZQB=tJ_RQ58H&~PDRX_e677h+2ug~zsv*+9A!=G+%fIy^w9V)mtUb#Q;
zoIx&$S-@iNJAeUJ6%@EWPYAHg5cLFR3uU6(9`uYOhO~hOamP8xDKK1bce+Bz_H0io
zl8h4MR;;bOz_Sk+8QR-?vqA1*E}ORxp8(MC(KG?|EiXQY>rG$~O+rUBxhSx=PIq<X
ztM}mov5dn+t@(=o4G5ScaUCsswht?-)oyY@gb}ky{iH@L4<eE|j3MfEwY3hjtxX$K
z_|dCtQIw17?Mr2zNK$S~V#b&NU^3y!=7@TU)H{Ie*kN~hZj9-t4@e@EqJ~pIs@7;V
z%QND^L&ZF^(BO(;h~_dM^70Zc8cqw9dVO0?$_;c(jel?n<+dC<NGL4!gf!efk(K*~
zb$dP7B=$P#{<ONG&s}%#G41j(k^h&}r>K!Ipsd<=K$yTXX^GP}u)S0=vY>u9(c7V~
z>9{U4QAZ8d0;Zg(IezWsyEw5Wv;4<hd+7QtEKJzTiR3)z?jaI!8VqaqIi;A23lFyq
zC8%Ugck&noem0JS5D4UegjaYT7?|p=RBXz@UY1`eEMQy7<?)iYf8izT@fkMp<*0e7
zIG-dtEPlJ$gymT$7g(o@R@g}}jrZXi@H8+G$0AUd4&m9P)YsJ^BO@JruvKN5$Ze@K
zs7!Nl+ofp$WyKm8|E0Q?`JIB20_fOL-@q%KUJusm?zSw^!m>VWr!`l*CE|NTjo|T2
zI-c1Wi!6*lT1}tF+6WfZN5_)^hfv|UQ-R9|=5feBXz7;<<aBZgx2T`t)*Rw&c%}Xl
zPFictTuB3=R7}nrS-33l>M)6qJ?h8bdsq_<%h?)?uG7@C$;v+6`^h1^9sWEZAOJz0
zza0eN^WRfHi(AQ43Chj=*nWKp77c)~Y9i=>@gjpcOtTt5Wbwi&afVw6P4Hzjir`}s
zu{_H{bMN3$Gf<A*ANBQGoOBY@%U#QrxdAq7Yxq&Lzv<LGrlC5{zSUa|v|vcE;4&Z;
zy$>8<V^AdHcW_ysuhFg&X3;KZtPQ$0Cwp{>@lQ#*z&xB@GMrG*>F_OhWMGmm#MP*8
zsR<<9()piiKyd3NmXOdUf$_=!Q}iGKg};Ax4-#It`GKQqj^DvRHGz;-r{H}k7ZB%Q
zV_|_0e<dO3?y#8*oBfVf3t8DJ#3cfe%PshS{hF&a4*?Eb?n@x9KgaU-FS!lufx~MI
zng&Nly_wehPc{&1edpirFxLjRs{xisYuk!&K-O{Jw@krP@8k8Xh6cr0YIcAz5dCub
z=;$c!Tt6zRZ)D#OG000vK>@%-z1Diod-C!D3B5WoF|y-s69^Ec-xria^mFcI2C-1S
zJQW}D@$CSB?MY>}-t-;ZQ{g1aSs<{O2vBEENdK#1U)B28F8Qm3)c5N)Ba_nJ1Uw5T
zBrW@~wH1}7;05e0V+JlfWI~*t`Fy3d-L;^{FHG|BI2`LPo14+NINe(VyN!EVHE+X1
zO^Y0ABz@H^WRqEc+|I?$xFxc!)*!jAuEYj?C})Z7Oz^a-g!AuO+t4ye=F&q&$4dr7
zT9k1Ovz6>v(I)cewXVmoPIcq9^jiFYq1rXI#|x)LcAY-D#tK=FZYQ!DibszTW}ZgX
z3o!GkW`U8i8Y4w>>C@L@vwH*Sc5;q<#ff``Ki)K+@&MYIFnIUVnu0HCVv3LIId%5^
zOsxmDCN^=kbax+8(o){e!-_<~7U*<?j2^sK6&l|<Rmfz?l-pHwnCZc@L$9rCZ0hD~
z>y3akH1E9zdN_CGmJk$HiZ;X<b)-kB0l_~rZqQewLSaC`y19~&Kq~;sPx(2}QN7uV
z+0!z;?Ca<VFOOHVKmh+W$A9R3XCwmPw*!j8WC8HDk5=lEB9f{N804_FZ55=n3C!xU
zhKzk}M@%{?^8T%5Zr?3!xnR1<7@!SWzsrvqwOJ0wfjw(|W|)uIE;`z>g^c~><VhI?
z+|iw-yy<ST+147?cK`AI_5)Lws*Ktos;c-<N8|ADaQn%E#LUcxi9kG8Z!@Ep4Z1XF
z@rb>}s&`&92C{n~Bk10j6ma+QD!sd|2Tt6{b#1`S6@rIs_dO4*T?UAf%*mquexi(9
zSV5iUgBsV(;g2PIEi8yRj6vLde3jZr5?9v+T5cMe=PWF?i@;NPo&W+yZ<MPQCg=`p
z$grtX``z6tl9R)X{jKe-tQbYZuTOXR6_u2lT{rb~be?A7XC_CFwS4>b^uP*O&Oc83
zmjgv8r4zl=v@PkSYRgk6EeCU&uKt>3%(T&SOLGv8XM1K?S!@UEj6k59A6#sNmd89#
zZ%nlpd@Uaq(vV0bC{SAwuNy0DcM0;CH%xjToy0M3V%9$!nJC#yD68%bYqpzVv|t?5
za}}u0>Zqn@wCmHgu<q50RM_sE%s>p$3H@ThTWBaM*JR_%^_82;7p%E+k3meIc-DxI
z+FcP^Fn6pNExXvAG7=~Mu(12+C_0o@s;<<yc#3fuu%W&VKE)q8Zm*PiMU<7unmFQi
z)yP<+VPok?RdTYj%mU?zw|33rW^*Kr#q3e_kB|9aX}O84A|{qW+^J^*CZ6p&4Jb;N
zIWLa5V6lxBKoP$vWB(b8n6#uf-fD`g_#IfS@r)x;qgGbnqL0mD8S4y!gPCs~IFwoT
zmT)#k@u8V6P#G-5u%{4q`f$}~zv>wg9eRN}mO98wWGgS9ta-^({DzO$on57WY4VFy
zV())idOsO7xoCm{&YJvhxa@s>JFHjQElbo84)9hJM`TI{D^S7k_w&oBLNZ`}WCC{I
zxiMtjdus2iS@l9nlH^HxdI%s`g+(Pv+Dvdx3>=pjG9#Wmc>=@|-nZBIBy%bho;PT^
z#hmHyAG<byJ@fWeww%ID@h*q4nRQ%dCcucQZCO^CHE6Ummy5Udq&NQ2Y!9mhW^^4L
z`zV&USy_!2$`_R^0OMQ$SaEt<5vJoxd%<v;91m4RfBv8jA?KV^q9SqDbUcpX;3!-+
z6)CLd-{*yy?`SQceSRvvu#b_b`b&R4)m~skX(>j;-FMgz!43D}Nm}l$UMAdN$WA8y
zi#j||wn44jgY@i*%R|rqr0e|F?$SxC@u@Fu%jZ_sUoSb*gE{0Q=c3IK;k75{X39*B
zM&NHE2~`9}!rA5cmAj&gbwR%KQkNPCjI6yqHQi}{R2nPt?D~hlK5Kdo_*bdjK^;%(
zazGERQR3qTlzJM`6dRG8H-+O9w&-`;U`Wb<@?+u+;#gHQR!)a|!V#z2M&XzVi&}!C
zxiypGc}ci&fP~v<xngb<rTGrS*Y+5mm;hw*Y2uleA!-(D@lA#5V7XL@&f@L+4jXwU
z=7i)Y^iP(<pP5xgIJ3x;%2sS&X+Mcs1{!g@g0MDM+Q8>PA+qsGO$q&bfvE4gP)@r9
zpWqh>F$Ezd>1SF!mINVv9bK5<+r>>6+}rD&t~#Orn8@1m7*mHlZ0D3N(@o{&<pBmi
zJy!lobF-G!N_$Im^ju#wQq=Eoc1a_OLO?<yut_)>5C#&U*K5+*t3C1yi;L>7<Cj&1
z5z)F$<qMswFoU(69FDN$<4um?^>B+9FJ!`q-E(F1R3jU=St%%8fm2F@6XWP$c~>Dl
zpC~|sG)TXD6Ri5L7T^?E_W__`L!8bgZxXQ4v#u3Wma89VTF8O1Yl+Hmvq1d;@pW6}
z`CArNIe*dCTFKNRWjVA$W2Wpvjtx(NcDs^TJGFlESAdUBASUXatTt*s($sE9c(!M2
zbazN}CCP^mJjOD{uc~oR&0_1tYg&iJIt{RfAgT-l+SLUI8+MipDm%||tr0m(SJU0|
zjO=_MiOyB*$Xsq<kRVLgz#t<qlkz#4??00x8`3X5@V#ZOTe#^PRZfmatdZ=9ilXHV
z3)KQ$7f4-9HBpFoGSzycD>Ae6y8f5%LgeC?sN~J%iM;MNuF1LBuk>@51Slu!YIE>7
z#BbobLK`F739#wBl-N+xhZ6*ArfYd!`CZp5B3=<Kxc^u_i{HF?^NVk_ebfzj5}g$y
z_AHcuVOYS-1y;jmgDl}oLjySgGn6IhuHu|c?k*+O8#a(hHW(jA&?J6P5-dqV#KBbR
zRA$*dz!a5)J1nMD*1$6b)*#K3+D<@Zu{8D1=D*=jWLpp}VIXf*Xe0<4ZyrlaO|7OL
zt-b7Fma0lpw1m96fX>#I^u^EC(af3IT6G_@y^}?_^*nFKCFEyYT;1KN3gZt%JAr*=
zOPC1An0%f1vObKpS&f_TMt1Ks2XA^>7U<<<1Tw41XMKp_5|Qnt>)|caZ1LXQ6=rQi
z#nDY!CPH(1u?0^iEnAoo;z$uKCc@>|#pgBKb#mtI6>bAY+uW+%BReLJZEslFzn}Tk
zZwfvdKXlDoPvElh`HyM$VjD4<88YA~TI^LiqxdvY)ry>g0`S4OAmKQb-AhYfuyU9p
z3;S-apj)a1-{hB@BQrBk0?;U<;u2u>N`@!JV6@bxZ~?xx1i;O^p0Ae0U8L?(%R@^W
zV;x;<A*bKkYSiI_$OQ(5=l)z;#uw-bPsYT?&cV*~Wsa56a3K?UnfP)V*u<PRzF72V
zY&~u<+jeapp&X`tQk$5gN!Z`BL^WigqaNkwguA<<Mhq-fmX^rZiB9}4>~uKIS5M+S
zYpsV6VYL`lW(cD2A%75fX!3Vza=9XA_gzbhTHI6=IF^Iv;PPEkD~p>wtxy(;@rpG;
z5}ON0;Pm-gyy$n>ifrm}@Q=3Lf*s#o|3%Yayp<07t3DDA>%d)UJiNAexl1Z)A^DPW
ztzq@!ie*PUwn@t@i8#!nF=EYdBFafoZ3Nk1P@d4Lqk0APo!+$H>n5dSC1yW{zVcxO
z>k^y=G&z6A4UueypCRsRV!Gge2S8?%L)p6%SvI$RuFJpXrfl`Usdf6j3d~ZeYiwlF
zD7Gq6YHNZW0Wggg#dLP>6XNQ|#*sw%Mg?gNjkob*5seLrY=eOBK5uCh2z-H=KD*P_
z>su+noT|>#9bP82g6}TgQ4~##C+_ZS%5-`oT3Uda<>bg)yF~32m>D@S0SqYy{CDjF
zF8wZ>0HknzAil%zlG(!px3ZE5pel+j4@7G<7Cgz!2?`=YPVD$=_&Du0`Q6`|thEoz
zUC!?3d)e`EG4HR`mut;6fpzAt8AXmtx)c(xjg>r{gILqq*N2%2Ek~pF^8GTO4+f1W
z%*U;m+d5pU1yx*7+3HJc`NIO+&P`9A)GeCp-eB6DiJk4x_#UPeN_Y_pxk`ITbkb|;
zd|s*zY_0pO$w=>Ojg(wybqrfJJg)g!vGC<J)437~6?<c+F6|NB%{nGywOC>IrB07D
zK#{%{!bm7GSFTmzx&lJE4pVj6Y9-niHED0h(SbpJ-y+a_0@Jg-^q!RlRdB024?>B)
z4&J}oeC7O^6~X-C%i<qTn0si|9)^}n9u!@_=6xDF<`dO^)hpjDa&h}`gfcZfJ()wB
zot74Ln$9mfAZw7DnE{1DgVz$mK%?3At91{cdruIfjrl^Q9X5M9L0D<eA0Q#jW2!_`
z+5a`T$HkiqY+s!-Jy$K9G=l^tb7ZR}DC7bz$%gp&_?1@gOYwHUldcd?#(Mju3vD^g
z)m0Nf-zFm?6Gvoajk#_NFSmNPkn>jpi^iTz7x3cqLr)S}=B#E)pBKJLAY5riR2tmw
zR#84DSlzA$-q|@hw0tAJzlgItYY#Ac2&kw6u0|Vvhy`4#iU5QA*i`crf-p4!gEN(A
z`xqsxFB(n-@|t3Y!yT8FIZCN2jH2YUp~5NAqOcQ^U66X?&96k(7z9Mp)?7?}VGQs7
zUONNKFD|pWQ1A2VhAjE~G^pIr5GW55`i(6zvjm`{aExE;qt@pAbicZvv8OlcYQ4lC
zL64fs-+qAICKRen?`_T0!e}95TbgzgZx-yaD~8S4#^&Q{lTcBv!?R(h4$SE{l;mSt
zlxDu>o}bJ}sH(%y7xHpz-OEZ=$`ws^UKs<;SR6{3%L0f|N<xBTcRa1ho}Rfe<3h^b
zDZVMp<hN73wY+6br~GPMR^Bgf>?Lt|rGkUuV_D}E!dp8Hj`C19hdBpyx2(DC><6DB
zBx*sx^B}p(h$*>WN-0fHT=UU*bK%(IU^h!mO8e69WO9*_DWSR3?~meN8tr<v!mF7I
z$v;N{ssr(eu}YiXY0A6~i~P_z2w608u{&z0`(m-oH+nQv5V}8aRP1?*Y6@8K2gYt)
zp)TWX6tlL+^%Po&<+5FYmhQ`wO&$+RV32{Vvhu!vcp_lhR&RE=B*Q1FX!;T`Cs1Py
z^u0tLSWUFtgDT4MJpZ}KwdVM5^GeLe;|-3zy$pFjFhh|rFd`ag-hOEh2u<d&Mt21&
zpymJw4jNkCKvOtSDv6BJGGvSAvK<WYhH-LpE6d3#$jGQL@$>SAM@LT$9S;(O0!M)O
zO>xQ|Yq^PO{>&J)u2NgOQPkiZzZfHTX#Y%F;Wl)3Z_KC`yIIUZcgrBZ-cDo-#dgE`
zMAE5gUsvY+VA|*)g}pic8&6Ad^Q4W4_RVjzefI9yIA-CF7a@mcT1ru@jC-)SDGFEh
zq?7`^;$FdDZ>L^@QS~EzUkg|v?A6qP^O8jMB?HlF8#gdBsI$gsnsuPB97iE*Un~<X
z!S6j`^$n2x%yXTRNo7v^V<JHuYg_FmgI~>cs^>;SMWW;~v~da9wK$<e<L~~Ds<#Y_
z>U-OU?I4vBq!gqDly0QE%OOR&yGuntx;uvMkZw?<YY6F*?jB->n0I-rzyI^{MUO*g
zvuEwKu6@NB)tuHphm^1+x=6KZX{f2Lrc33<fRdwHnftGy44?5*VCO1T=`z2dZXh1Y
z^!DoqbGbQc=53xc2zl!^tNi<+<^$r}n~xovJcWn&|5D3uNMBwGs32tlRG^MflbIH#
z7H$d-lAD8W27rzSm81b+#lUTY6DJ2j^MJG8D@ox76W%xtbmuE{G}qOM6M!xBY=uXx
z4%YG;9;dT1fr44Pn>m5Ti#i5Xm<RiemUZH&a+Ylf*>5t~d(w`}*43VqC}46I7}n&N
z6AQPu9*Rz6e{q{i8fz-DQheUrF6U>wd2;bh$OMbjeZ$*o6*#oY%WLb$pYGO{Y6*T-
zAP?tt86*?XF4sonhCZF+@>vAvN7c|4)M6n-3o?MR=-icw-`8_W=Cf`Bs4E%r)K0lV
zIb^>|oXfG|dd4m$Ixpw+R~q}>lL=n}Kp9o`?&UBPBxTSTgw)gHnu5^;2b^KkCriA=
zhgoZfkDA(jc}-3toV-YFc}Dh_U?7Q<*K-A_c6MmcMTfRMUf^ZBaGe)UrdRJ;uMwW6
z8U+Ap#MTo4id<tgRpS8!s>0Gxvr`I8ohpJ0OP|8*SDlqF8~*TEKJ4!eXEn~$l<<0-
z(ptUh9%q^}`4Ly{vx4hN=aSpSc-7zI*KZiHm8j|!yx(binXQS>K+NiSKEUe|S3;m&
z_8FMZ%-$m1Jh({z?t5`E)8ut=aJXz)Y*kaDWn=bSEB;&CY^Ly3g<EQB<H<g11#x_r
z)kJaNF>Ysg3Ri~FsBv?HV-61}_$=a>7`5|%B?zKYSUl9X2^gtE$$pFo^@=V)Bc#Nz
z8s8!ND?Pd!j=`3k;^tYnv@)%F!3G<u!J$S}>7z!4RLHT@&fgtOMtFqRJsi&Qzy3Z$
zOQ(|CKj-1n>Kz_Ga-|2%-R4?Siz2$F>b;whprt!sV{q}o`)a1zO2Q8S47F?BQ!lD5
zQX3p~Yu-;~Kg2CkEhQl#VKeQ1=k7GTBsO}TR5}uwz`B$t)(fS&WeG571Ni;saq5=I
z<FrQERY(4IVTG~^1k5_MOZz?=m(6a2P553HnCzSrKiWuF8B`I=KFg4`-q^l^w}(*x
znp>znH#@5>JMg|kTCu&~3dL<Czev%cN*_YV-BT@lH|{%+)81HB;uk@=UKZD`KSo8*
zM$Zvm#u0NJG!?A1M1~ILm8Y%~@{&dVBQiLL9cb)Dxk=OgB^^T6^J6j6MUxHAsYeUw
zAR84I6=!k##AiSGwOoZ7%H`mn1`xE9yYR%^P-1ccri-KY?rzi5OflsG$MH5lvf6zN
zQvR*^9|5ZKNAbD%eep959vTQ1qayWU)oLN%Zd!;1Xe?@tmnJtF+P%-@IGzD;E_{*f
z=U(c~_!-U+EBIV3G$#O;-Up+}r)*=*PCeG>d8(Yz1orl+UG*mh!G1_R&q6Q5LK?tV
znQw<#wao#{N~IZVE=@bltdDK0GjKC!Q0K9Se~qtoDRM3W2D$~G){8Xw8&2|7%SW0o
z&iHg)+dDf2&RnlgceP@}+EXIm7}-^v@(}l0N;suMGy1TnL5x?=!n4wfAtczXADk?g
zPI4hl5wu~#wfcTp;N1cR;&wh(a~Uqs?<mW+Jrx=6J7ntWV!V%$MoH|vjyu<9U1wnM
zX*OQ0led`6nRfH~)0y101+p%?-SXf*^PdAW6{(se`yAu?fGs)GB5zS3LRV_o57X|r
zFhtC^zlF0!q0F64!i+TDJ2!ROj2BxoQ`w~7c1oFemSw2Ih_g_AStnj(t|>=`T)?f^
zbvj=cASfD!#fRJc7#UyAmM;A2%`$kuC*Z0$ICgSSZt!z84+hOSn&hG2<D=u|rlmDX
z#BaTU5=Nj8IZut`6ql6HgpqaZT3Z;%v>u_Y!BFFU!GU}*w)pV#hL%dU6FkSj+_{`g
z^j0hJSq~v>>twCl(>2nG?&0!;EC!SauLo4JIF2aqgRA?O7b=pZIG}~|3}1k1|7<=e
zHYCl%6^~B)bJ0@*viTeplc0O(PneW5JP{YzduBX}!zMA}&&ysC@ar|(*IUmuByB6+
z8|WA!=}jFCN#h2TKUo>THHv3SOMGQVZPge@r&lkHiTt2isO<&s76P&@sf}<Z&EodF
zaDlFH(t}fPtukGMbw0%DHO+<m(wSf<0_n}?xgj`B#*Kuj(1g=+ZYyW1_QmZUul4P3
zZkD^iYQB82jqSu|*Q(vbBPLd9axM7ehX$<C?O~;iN=N(NKRry2q{d6MTmZbp>+tAO
zV{`9cFJNj<2Ng%BlHn14t?d#`6KZSUE240`G9d9CIY^oev>EZ6WmDKj$H%Rw;ddpl
z_M2T79f2aIR*m`oO3c|w(UXf)>pUTlh0W$@#1^t|C{0(-io4N5X%t$pNE>+9x;OWn
zH{o<sX4kJhFC%}T5KU(zLs@I(ncmyu7TUGClqxEf0oZ#a{1xFX__$9gc=XIaZUF~c
zRiisg?+yI!eYIcRats49g!8&K0G&ooMj-8{od-&dpPScSymk9yTRmvRT9BF9mR0Ya
zjhlPd!)RLuM*8~P)@^!S;k!0-xvW>?Jg&B9m3iTKC&?TZMpgzMwm!WqyvsC$T#oO~
zW@^j+IKO@1f-i8DmmjLDKS-~nYH)VE>!;gHg39^oCUlP|@Hdy?o~KM8x?lGQ##?8N
zY9S`C+#v|U`t$oH_lq?UFoFUmJZws5+uA4q4}eL4DTk9TYe6e6Q-knpMU`R2CEF*D
zbI;4V_q&?r9|O6bWU$PC(JSoO<1w!8&C#3q5XXE&F8rH^3nkTe;R`{J>ta=@u@g+`
zINAbQ)wIv0t`@O&PCy4-xUt6S2PFj-8ISGRypGa+ByKirWp=9a<&T%zUq6_^zR$nr
z;|uAz7Wh^t>_>02(3JGrD+SQ!em$qWx)gw=UajxWOx(jJ63SRlt}W}0E0Saf7_Z}1
z<~NTSt+XJJC$x$Q%7ZqTJZl?s>$MK+^8HD#Ujuk`-<McojlEQyw?QufGmOn;FlJ+8
z0{}q`j#>>A_vhN%vwsJZ-6`Y*yd2D2Vgv*|ZR3^a)?s9@ON(2(V<jG~Kqyu|jqT|A
zY9=P1{;a}tstKq&cA%T+*4w9H*?dc1)F{(V5VSFW>$>sndqEsB;~qfeh;pBd`>3eT
zGHH~Kv?fnjE}UYMnp|I2_{eE$YJ#f9d{624Z7hRcK@T${7@StQk7eGv8(d{NC2#tr
ze_(*ltHte@J_oi%`HbxYL0sI=wX``c8oBf3<Mr?oO_!L|?g@DlSc)XVyH9V%!OwBU
z@e|Msf2rPNcy&)sxtY_oOS%n+B}qlX!7RR1uXQ>PX489Smor?XSxvwx0IU%*XBYam
zG5=6nA2Cw!v9VA@37v{ggq5Zb6%iXW5gC3he$`#Uo?cy-YUJPUlIhUt=yo^~tvqa>
zqf^g8M?|NW+aJ9S6Wfz#|Izj%z6{d5vL6e7TW);P>trE#fn<3t@sfveU<D4LNFFGK
zM`T|%A!Z`p-6p@FUzNco9c)CUdbn(lm27JwXA0Ymjg5)NOG}hW8Z_4zoNY!62bO8V
zJ>YxQ_G7)#c?!cCx6E2sy~E&%e4giuMSd*pqlFL=ku2%hLXAT0X1iztes@eqm&Wc`
zmA7uoonv3W4$ao5(lPSeUA_|)Jx`sPpkrl(jDYDqwj<qU4ux1y>k(X1K5lw)x;}>X
zYAw`6xUH7>TKN_7eAp{|UBPrgB;Yj0nbC$8)ki0`On+bG;ZbxKcH0kO?422<Oi?pj
zT$TCx%~089;^c((_V%6W^3CgJEkKk!V(v6pUNY2sOeK?pH%u)PU8XJI@(v}x$^_JI
z^W`nIWtHE*Cz?1SBU2#bZ<66B6F4WoTX1@c6_f;Y_*5fl2RD!>49}l`2cDQ7S4g9I
z&$}_nW4}XBA&}VFRFUxVY-+i4PCnaOWL~XFzYOEgIdI?DH=tY2eehN{o#&SDZ9-Cf
zc9T;mP*TfA>b0DMF;RFS9Z!zZT!Yb7;;2MHMB5TB4Hk&bXc(9FYd?pNRv8$eenW4E
zZNiH*232_DnNwfCVykkoRoz*-Kp2=xzDlKwE^B0LmHp)7@u%!cXL>Fm@SA%2B1Fhp
zL?g6RN7%DT(a$7s5ztRrx?iz1v32iw$RIB6N>eGX73V|_OF?q|T-`S%rKMCZ7jbEf
z6;gRTXSq-xK0LpDkBf&(yUreBcpICHAMO0eXkO1}K(B#~p2xkn?(hV3d1f2bwlKuV
zH^B>0dP;fhmRm*|D1fMx5tZ26XZ{Nw)_OU@lg)WQwGNu^*B8~)6e=%`HTZhUNyBuw
zeBhJiCq)yb+Ra<zyE6cd@Raqvs;6gL24#S%IlbV?@mbd7^!PY6J$<3hjB{zJk@cLs
zR4;I)?u}#g0I{m0jkF+))hX*edSa&o%zbSjma4-?KCKNNFalKSBSS($3f0P1FAyrG
zZ@V*mJ;(&5A(T|q)JCb#Xx5vquUmp_uzr_I53Ll7Wv4PjLm6|*9le5|FevrsWOp3{
zz$`EKdVyB0QfLw#Lnui6CTFG?I7^rM;%`{{3N*zugZz`%go);4etCa(vf9BRzSN8M
zxY_P%%MU$oNf~9<mT|lBcix$A7fchr59M)7z)_puOF3FOLAe{C1%17J>oVUiC?WAi
z5TqUxi8awaDe4*iw6k}Ldw(^U&SCNDQjnKtjV-RWm_>9zt11Hu<YLcx1nin9(*-_&
zNM<@*p)*#<E+;o2EbNPkiJ``$=BS$S9^YM&4`vu$Ag9(s_KUO#P`0S3sKg{B01BTO
zsJhYrus_=i1;-QUaZ3ww7VCZglYLd;;aql1P9|{d>{<~S;>HL_d=40`9@Vxo&z2Ap
z33kpM#DMQgrZ8hN_uYyi7>dlbEBa=mzu*#dWId1HOd+w=AxtfsT;q9tsd67%S#}w*
zrPiu1a&>tnR)a^1JL++e9ve&`XxnQ1&U9mSm*4mZY6kl?%FejTD4W=pIv>^&+e^*Y
zxAwAktu<iYLm0b5=6XA<YXR}dem`Sqp4Auz&@bliTCb0d2c%?Wn_Lki?LD|4zOlo-
zfBpJ??__JC#g6y&^ToB2<h_Yml_*g<txD?wX!JFh!P$;IRm;&dX@_vCjK_Jinp%yT
zP&YOj?;xG}t~~GBJR-p%F|@EKb2T@xIGev9wQ^M~d|RJXUA<dMnhaRrGI5T865O7H
zZlZeH?78`Jb-LHj?HC_#t8aWfY$pATwxjy{b0N^SZ)z5Fca0}=J6g+|ocQ+b*LnHv
z-d)ejjmq~3K3?7ny`-A0IhSq__+1;(vCt}NYrzW;D*@<#ld*@WeYJE|8Jr&P1nm%Q
zH?;b;R9?;vPmdF#D%)#ECW>{^n<qE3!BQ=#6%pLMe>aYHbGp<^BUZkE`s}9X;$i>X
z)zT;pcH(vC*8E&@G&PJ)wT`x97AolV?$7g`Mn6EML_|D#LTqAWWn^sp$pgn2f=AHN
z*(o6|+PhYAKUmYN&SkQhTRlfY6VK@X=<3Fi@I<=%L&{TCZv*R^v(56xrr*}Mk6rKb
zp4u!7u2{Sog{jWWDAyRt2p@}u1qMnXeiBg6`>Z_Rud_m8vV$;!oHMjCBEmsh2``KT
z9$AK~X7|ZVFOCBNqq3#X<z>A=SsK9_i_rJ2V~QLzf(Hag@^lmLS23w;Tw<^4ow)9V
zMRR(o|CE!K*R1fQ<KMB|rJ$gQio(IKcHRRpqqEvW?JCFDwL%ar==Igk?k?>!bTl+&
zo_o%xvk>>U5D49f$uM1&VlR{XX%#_<@x7ps&DVA#FGNIsIKCL(1CHa~G9pih1F*?i
zye{B9T_YnEmi5vKP`>WenR?5qpeKW=+4it_*o@1@Q_x4jgZo{NjpWMFGyooSHu6)~
zaZXqI!nFhun^7*PdaZ`OZjLi<v%%FegaHsJOi6Y6t5W5M8?77p`3i@8&Fj6pKMPdK
zd^n2JWsjEw&Vap5m5r+5i{{h>%PG?z3jyJPr{wXWb)hdF2FNl+BQl1DpJQ{JZX6%O
zJ+Cjwmzi|=MELD3^k^6O6xCVjKUt_$vU&V`rOwQk#$h>oi8!W#e>9&iX6IksZCilF
zXD;&AmYtEGUj!K)I{-0cfm=<tB_DcAn!b8Mpi!hQLxDOe*@$V|J0)!xJ~IcY_{o8*
za_e{Im{=Mr>hYq5_Q}cfCBM-H`Hwcm{fr}Tl?7kEjF}f~t=Y0YlkXjP2P~aHldi4g
zkD2Bhh8SaUaeuL{$;8A&hv=<m=uy(qputDcCc<9alo6IWf_g8A#lie@=!J>CNV$vk
zZ6{FQ#V@y7h8zx}G1$;%BU>bU83&%xL*mB9H15gu994`JB~lov(`#6|>}AdIKO6(m
zn-+NB1%(A>1Zb9%jhYnL(iTs^Ap$c><?zY`jvUYCfI{rtP6zCV4<8p25fSzHq<`|R
zf<rzwTBX+<$Ftt_3a-?@3TnCXcitNbp69qYvtC!$M6{~533__Mth#90TaP_UD$2kF
zwIDh`A~aDrG$AojNwlcG44^SU#gP&iNXK4x2yOLq&pWdb6`h<#Ff1=E(ZYc3`BUm-
zqswfiXaa||k_17Qtz`)yVv1s*pqQQQ_na7%qi@!3ajjYSppUnf#^rr5IqYT7DIZHM
zlVy-OQKps4LWDY%b3yYAZj8~qI-|f0NKHw}u9v_xa60Kl081C+L0w_G15neUtaXbr
zva%#jhu_th%>;7%l=$Fs1Iq99wo%@9la)YeMNTApgbve2Qu0wPFaBD8qQ_b>6-c4+
zWNoCpUXXh>v4_V-00I_#i`8`fG<0^9$LVQDN7wTYf4YcPO1VTNgx`Kih<@Dc{z8M{
zEsBHd(WrX&=z%g-e19sh%h#9uvJanvLSnJV?IC&~LC(}i`SM)068z9qhjs7GO}d$=
ze5}aN1%4HDGETw#*)j7}1@vz<=z5g*-k3hqyGndmT_9kmiGT|GDG#&bE1dH#F-IS<
zC$4?yPFv}Y1er9<Y~0a~ZgsO@j-2kVP{=7RaOw&P3wpo#-pUG>h$w@*V&`YQhO6r&
z!hr^~lIc|CDqX-Cr8F?879Kr!ouco&ch4W-t%KB()rN|2Zc8a=S`r9$OaXU+S>ev6
z{4CeUdh;OJXB7c}FA>T;te~ZWkPrShvkx^|k~1?^g8DWazWy}Px3(@7xK3f~lGXv$
zXpvf3v-1g#7<$O-U5&ZF1C$T4QGW$J#G8W64is$Sf(9cH7Sfd__ZU~_@ER-6FE$_U
zFgHX5?xspn?lnIe&HXlyWd2F*zmyu9x=SNqLb)jqO&r<17!kG6nTM-1pSf~Zw{clh
za&t?G<iY7>uE(?1MA>y`p;%_%hJ)Jb*|Zs&D8KQ3Xu2=XUkETv-UPy%thle$duc7K
z=QHI7G*1AxGJp2gUtydNP+!l7Sd6S2=b!JW;6`%|*!5#a3CTD~(R5_P*rFajd?<Vo
z%w%W=XOhb*tYgWBMJ$pDwv>(0E2UEuVWtNb&|L-1Aom+w_I3X$Vx1#Ab#7}K+yk4`
z($X~Ho7_NjFZFXx2qZgc=i|R#K*!;1n1T~(Csk;hLqcI?)&vNI)6Uc7EO|^A?^Sk(
zd3VF7CMUVL>F5TMB(qz~fLQ#iAt80*Z*`NC=<5o9r;|6%A#`)Bsv9lVN3Fx^OlS`=
zSpm<S{k6VXZ;O5!lLXTk#mDN3DvXEdDn)cWMEEV{nP}Bt!aLTxh#sr5&MDnUO}|3^
z>yY2L5n+9=Ag!Ro^XQhDwr5kKpI_!HCJqiR+R5JDpup$&YBAN45FYF!3;0WXLTUVQ
zb@lJxzq6$kSV(t}MZH13#OGeSWfheAm@z^icvq(p4%rcUC|U6I$&+|>e%ZfA2)uEJ
zh<({C6rVjIeqv#1*#2T6Zt%hR5fu~l`1D9rU}Q6kX~~F**_MPfWLm1cATTh?*O!eu
zQJlp|E*rLGgp`5;bENlb72ad+0FCtL1%BfOyhl>DA~7L?5Es|L+W09cZjmcud0nC2
ze$8<(mKRJ>1fD-117Y%s+n_E{6&mA`X~u&S;-ECpoRbX+_4WOvoCAy5-##q$HB-aa
z$Q47r9Qd-zm5mHcOXTy)J+saHhC}k@KOL|eET1B~weE_Gi>=z)N<Nc*OtzY*zqokn
zd>WI_1MunQ&yr_NUs-L+K>f}#pN9m6T;e@VTC;z2<QyT82ccfkQUlQ+Egg_+?rc5x
z`fvTaABk6xQ?P7gx3?dBc|dHj{cGsas&q^y5^*7g$DSk2K%Jc^Br}T8Tw4qij&e?7
zS`B`!vP&(+E(+Z88r~pNoD(Bd)qud8h=_<=o*?D_b7d}ZI+Ut>GF8wyliEE}ut@LT
z{d#9Y{+K8-f~PMFPa!jnQ)aX`ovMHVz2)@k3oqLI9ra*1Bwc9?m@_-RifpC?Krhhl
zLXwb?k&%)PXkY^ss=q&P?y(?i=;U~9LW6>&<>hP2Yr+D90r)V_-}Cvh>O&6PC(CGK
zJ;;apo!Kx?ze}|a0`tg+CZf47Yck0o-M|9mDEEJAcoD-P%KR5`LJTa1V{en}*TJy_
zAfEdk9!$RSk}(L5hniHr#?$RXTP$wWRW*_M(|6vbnf2*euso;VwlRG@5$|$cu6W(&
zP%CxFnkl9+R^pO7M)j+}+|p2XHHMd%n0WMp_1UvG8=bxhSARvPz`h?2QAMx&24NSJ
zkB#UZ_r*dF4q{<pWo7?;nAl?_@#;@%lavR93Rf&<7TghJBf}-ixi96iDD;q*R>kMj
zs!XUFUKK0IwIJ!JNlOxFT#Qsbm80|`@VNOCE3~z2B|H0b`<<XP5n<swStkDQ|8!8F
zu@WA}(Cs}xXFQI!kyJI<$nS2a9lH}%)FT>Ys#dI_S&S+g2r<02ulB%@7L|91lg#E}
z>WT!C9Skln#>!phpJ^WJnqhtEEEj|S@7q8y9CZ>BT&T-bH#6#`N`g)#=-0a2Q$LL`
z3F;w>wTo5uW!VmIQ#jlFdxAH*p8>aCJT&QcIUa)iM00LTsjceg+2$vzNk0qUl4lb|
zdK}*?+8SmxSi<$mhAr{DZ`k=ykNE~s*RxgV(viydByFcvQmR`86$Fpp`>*&ZXHX8=
zAp1FQP3ORP;s9jbMee^}IE3qKlZ+flPaJ>km^;MSzG9<n=Cc>$M;&M}9Qmy-@Z}iA
zR_vB4?U)^3hfDjLa4<~*hZsn80VE%{!<zA?AHyvSo4+yqT!<*!J@?psNR}-12yBf+
z%Pm446>6blh3&D}r8{@yUPpS$KsywC;tHP}YOF9v2bn76tHRmL3O44e3EeY(;6bIg
z)sHWTSR8*w84&}J2D?Vzp8?A3DO6<*k4ZVi%%;6ts?>=76+f83mZ{b^NN4!vtOm7m
zvZgBat*x!SRDtiY*6B8PE^RYFUB}GX?_Zq?=3=hO6f7_Z_iE%Hb)h;dL-OV$)#C-`
z_VtZ=DHAhXCDbkv1Ptn*D2%O>&)P??IED`GO{N?FPKmwc?-kx{Dv~-FNl=$zdokRL
zNk6x(kW^0h`yjO`hkkJ0tW2QrheJHk-&=SK0&y6`5x(c@rc$9QWPm*wpIIqSUL-fU
zH8<Sja)WFX*Mc}XEY<yM$Z&>%iv_V(92Fh(9H{vdFs6L3%J8H+@euRoa7QQ_ewucA
zO2DiuEpoT%??e6-(0(@2f=swylKvn$2d8D^CsB1w>s4_qzBxr~P_qMtjWYdXEtShp
zy~?C6zl)UNX4b>|sAUOQN>FT}yDOjD*{KuA5ugCgiyuaKvi_$zow>`Tb8&v|O7o)K
zWq%l&)(}I>?l$sZx;vUiF92(f)L{j5#~hJAA6s`doIIT<ndtucb7#?)S0a2TOW$%X
zSLOYC;mwiNCEO*A67BP@gG24U=<5_KgA2y_R35kAOj-V^z0i_kE9(V&L1*}lSXy%P
z)!s4CPq(qz-`G8I-X1>z=z>v{rsV1|!DaI%R1KILsSEOYcm&9&df+qbviu50wKUJv
zvnrd>@V!)}hy=~fQsWYLFiMPBPvdcOUCK_Zsc|07W#+PX-S0rpi=A2F@A~rPV2LRw
z2;bol4*EE|zxB_pi#2O3p`3c&^s|j7#A8a<G#b`<OgiqM1$@3)DdB%_p(R3v{Emae
zvGv?VJniOFQc|b$As?tfi-v%m1A6e**!E?k8|J?LPyt|amKzVaQ|IOaj_~xwf^)-C
zZ@jXd7%-Rx##_3jo~zy6!2Jz2*Wwhq^&mCrRwyH;@%5!&Q}g`J{E3aN?IR6&-VxW4
z(GpZCItGTKAO;Wfd?#>*EK@De1frl5a})ROc}qFGiUpviBDqE;VDs~25V|zj2INpg
zy2!wcF}HT905@QNwmw5!@2dTHm0_p|_UrC(?r@Qux0#epf*<;I<}Qa7Z&yc08ovYI
zDkdby|48x(E1l&;<q;3$q?R@sMI7AXl&{`g1Ka@MHSkmKz7h8#2OgJAwH$LychJSG
zwfiC6dA6w5gqf0ZG$gg!lMI8M9sik=#CnuhR_@Q{aGv1cJoVi8X3g_>zK_wd`SU#E
ztlEa)yM(g+E-<|Lr+3N!IzpP2E<9Q?mTV!2{j`+NOcRFPc`Ui$Mn?uj1yx0n{YBET
zNuapR-k7SE<pxe6r9&el%H<RRpkNCuKm2jug%0U?y>r;#N^QHk+N+j1<Zw~rlf+>W
zE9fHxkwQqvjPK62n4J`g-9;nFkc>y8%P)ZxU6&i&=djT%nLYA9=>sz<xp0uhxwpX6
zxuTr&e#K5}H@F&?FHvoCnr3>Y{BD^4`d`C5#@PS!9cIk~4Q*`_(kN-dt_(J}Asb5C
zgfwo0wgF;|`zVf2SmMp3g^<~t7pv}$uVe@YUMgie0-NA?=Hw^D#Eq_t{b1J5P)p|+
zR&Bw_<*_yyw0ca}TEqy&+5VM~<pNz8OyzxT(b=BgEy+}%nl5y{TN?>*%SrqeQLqaa
z@R*gV$^;&SKCMkhvgU@*G&``KkP#3RdM<%>PK*#b={@$PC1vxe5$@5v(4J^cpIG`a
zHKv@UpsM{Lc8M@;hPZ*O^Qa@y-bTM^)pQ4vSElD<3{P_9h*nomYET~*>W_r|g3giN
znpN+_6^G)nNE?sI{1ulSd19jJooyD%C6as-k(tDCj2dQ}OOP15+WnzsTm30bT&o$U
z>WT{8Cfm-_5|rb{Pgb9g!o7|8&~q^Kpf&pqzB9gS)D9e5tX3Qr`(jGo=#9}js}f1g
z-&7@II8ph<51Fr}rPD0F(@eA8k30r55?}8NXnnokT5ZFU8qaT&JtbqgP21iX+1(#S
zuEdVp^ZS6{2L^W8x?8!r1pe+se1_T31(U5+(8aoa9~F)jduD%}Ry@?`H`;9CgY57?
z{#5##)ujto5cwp=3He0Rhr}J_ekVfw+Ez*$9B)aBJU3hRG?Ij>xu60^Ogud9OW)RO
z@g%^<mx@$G9L4&XE59KjCKf?}9q>}a{tAg7^g*x16{uMCH6hRxr9e2P6FfRRMB@DN
zu|<^@j+xuB)Aay1ATdYP7<=C;<_<OaK{qr4`X-xw4*CMk>hVC_0NS2E?Q^AA-;BBS
z{_Ep`?RdwJEuM#c(KO^%?VUYg0c1TrJzHHVGj!pRk;5ROZSIunHR6zwiF*~)im>PO
zRG=HaHy4(u_MFn@xjuJAbKSHwh{C~*ox$Ugcq#%t(`|tY&Nq6nLOt1fV+s!bj3y{3
z+OPp<Zo0ZDV?=H~CG~h@lr=AWxCpOj7~+6_=Md|YYLX=_pf#_94q#MN)Mt6^E1(}0
z&y+|?Ncd)*@SN%!w~hCS4C3Uc`R+okFH_J&BPR$-h1xm(ipgk3+I=42B?CXOmX*c8
z>=Qhis(wNHDuO=1|DImGBU9NoeN$7umu#x#jS1gX#j_-*XmunS+9%3%0LM4eQnhF-
zQ!(L_N06z_f_>h(+HoLoaq;V7jmOCe36<N~B?T`9r6yM?3kzao6Rkp(29Z?8O<5v_
zk1C3Szqe9gNC=nH(W~9PJ?Gc7v|kk$GlM$a7Pf*kK+V0`EQ^D)RF89ly<Zz0B@GxY
zQ8_&tOi<phK6ytn^$xr$VLnUeLR+g-qY@4#s2;EUF=o#F9<*kygdO5fOfg3`Gc}96
zmwJEYanCby+V8{3Q-Ijw`i<=`T3lSm?oXf^K{hx*Ar(JT0KGt^HWElJ<_K2lWJ?}`
z12$jprL)o!#QunavP~{TE`d+A+4JzF#>P4-5r@ja%}v&k%?2I3!uZ{>Cadi5?<&Kq
zggfZr>9g@YYn@5{J@KT9ztns3HLG(A3LuiEUo$@HCrNCq#00c8QuT4zDip|};kwOa
zygNHBu~_az;S)TyKU^}KCO~WZJouV|LiqJd?Ryea?f{T%{<F9*miYf>1rF#hUje-B
zAf7%0P^#&G&io?1Q(N=|^b$Ed_UxI<IDvs@MixGg(aDdmRaIL<1rmWcIk>A7{O1~_
z>5gOl{jzqh09k>DC~!|+5a&|R^=XC8a^#c;)ryK5*1dlM23?o|-)HKM_BuN|g?)QG
zDA+P*aUQ++wos<+*XwAmuCC5%!n}%RrfM_isBqj4M5AQ6*>xyw$~epPJmP2}Nof3f
z?utlQ70I`lavZL^C(-!sMfdM|D>dogx^+p5<&C=5kzV$+aiW&J`cY)N@vRi(3+(2z
zOFhdMF)j>)lHO=;S74ssm45!YP|tcEe7rX1<)(DF#a_Hx%MK`8U*g}!|JMunofQwI
zj$E>vA>%WKZkrh!5A|NL=mgpbHRp;t$}K9F<BR3NWIeBoIyQ{n?4h#qRSS}8&l(R7
zUQIi@wEoPNLMJBHa+jt9Iyc-JU9y|ZSM2CmSedekGd0!ap&=L={dKAmbXrhv5n87s
z_cMP6xBt50Zrds^Wh5HS$1;DVf5V~DnW^6I9l^oDfgk?xus+fC1NmEFEhTCOMY%pm
z2FT}zuz6o$kxw8}4Lb66Mf^(diytK8sgu}H)5>|EHcY+$OjKNaXR^f()spIX@Z*}0
zcNG>XTcxMv^ooTgiFF$W<|yhVy!ME6o~=(zJRR*yN|8s)<=9wQvXzIw(w});*q8`S
zsM6LwaU&FVz0YdX@@b2G)1@8=fSa0r-FdmQV<y2vi3ZP;BkJ&iWe9JygP<tBk15!y
z0GD??>CF=Bt8p|ZgF#>2G{Z_iS9#=K#4!ItwuRsrfD&5R2hY?MpyA|R>Mx-ZyQq;W
zwfz>6IOfzJG4daQHjnC$)ir)dhKtOv_z%?<@nNK#SBT24Aft`HeFpf_j9hK@tx;X}
zVVe&LL_Vhsa@7S;I7FM_7NAAR%9W}b(ld^|7iZH;RQ(l^E!#eSOXnddesV_|3{eoO
zD`)#b1CXAc1tHd9so7n_KRoDefMmUfs|>oI2O_xA`vit~m5*iUYvN+!pkZWYdf?YJ
z>K~d+Oq>jer$BEpDa|~8w%CoBQY5R=B#cfPc;^1JIY6&v5^6>QKB-xT_Cj|z*9$f-
zQSXTg01xkZq7pw)l1r;%%I*(b?f_vX=B1i{&%_uh@`5mE0-W4Rpfq;>?iWDHOTV1c
zZ28437Nj0Gz9}F9izmaUSFf&hc~>E3AAGtk_;Re=3;E8%LMzwuE;ZC+kWuX=+XFnI
zk=68#Q_x_?n*oSx3xUI*%f@iT=>6%5pZ&$!2<cfDtF8Db0napM=qQoWMQ*M!CNcY{
zCqj8}_}DF{mz{*f0icTPV>`p3rDOVE^4wmjv6;`N41Owg-Q~dqq=d+nl%37Z;rw#T
z7n_AnyYsc8fg?e^!Zh+4f-hdwDd%i~p>sHJEDjH5P-=@U4U^Ujij;M@(E+`+uNAY>
zofxbY<>$<-n&0h_;{*e7xz`HxZA`BZ>_NgD5S|dhP^)5U`haSmW1OS6%p194U}gqU
zZ}|}D>$_ac-B+xlG2~exydU>1omubJrOWQ@Y!U34$Ni~xEAV~*R3QDoH7$<}eyXA)
zU8HnX!hJ@mDY@zwb1aTzRr9y^9P?l}dp^p;<+LLvI)%n_fOKgic)qil1?mE^9^d;e
zTN5_+t4H<VjfhFaVLpG^s@LkhdB`r21uyxpWlnG7t5KGc_sxB6hYAnjh1@vaU#k|@
z>3c$CDkB(QGT9y5pU58Q3`=A^>xamIu|2?)*JjUOO^pV`(8xo}zp#jkVM)?00#t!%
zJj&Td4azGOdRgf$25k|cy<%gnty}XBY%`j7o^SG&3S8Xb?hBO*(Q9=_fEPGDAV^uZ
z-uwZ)&Ape-zdNR6{ci|BX=!X+W3%tPs<FJh43gc^M%XV<)qVE!=L4V=kNd}1ZD97c
zDXCdyX<}sLwYT#SO}s$SZb>!^B&XO!JcahLPk~rFo{GI+Q+yQ8w~xL7u(ZY$@wL<4
z?cQzG2Z&$GUOO8tuMP4#J35puW@@d6wqCW5@+I`H1hYttLKH(hmXWbt;YRWHpkeQ5
zj+Zb}(Co9nx_c$>_9O!r0Qa)pL#JmA&7}=Cf6>LMZOXg7V8;f5;g?r%?}fW&k-TqM
zs>cZ7-uwwODTWL78|njf4eR4mxwGrrKFoW{<|hlm313%MUbr8J6QeXlMeFJl5v8fg
zF?u<aK#EXo!CM4WUGfV)DLihX<strP^U-6M)^5m^@2N9XNNmCyd&K3RAwsj)MbO_k
zvLXK7(u%RBaLts<>u~Q((^d0}^>e3b3vz}*4a4+eIXT90uehzcJysYl_?vu@oY~Xm
zh;jCjw<`U2nHH6Mfe(dQ7B~h_0oQVjcczBfE%Xd`74Xu`=li;cBv<dbED;eBCM733
zY!l`Knu=0O{L?PbOn&`Z>Bnv#ZC-G2sG4qbd@X5V+?#?j<>#a!?Qb##9%!ago`?z6
z4=pO?%9a)49btV6wd@Fgu-b@~>$XIKypp<5R?oNZ5}ua<Zz%aG&byJaZ069x$mt2s
z7s3G<_yfKL@665PVqR!jYUV_Eqv=#Trqq2plFXe7>;ApmEC}=I;bA4=#-i3S74p1?
zq{K4l%~vlO83A#Z+Gn)0z4HsC0&->8(WF)9v%Kv8`OnD`ECF11i{$W!k%U^1U}(*y
zm2=gvrH*M-*Om(`y@Mt>DS0^JTVcv_c(gzs--H41DtM4CrcJq+M8RwuhnD_#&2QXb
zNhG^%iohXJE|)Rs9^X*ZYk2FnV8iMu7Er&idg{B0O>=h|_w7=miJ?zE9P*W7v_$Tv
zV0Q)a-vfT*hG1Zs#hW}zUv>H@r70b56?xW>!F~))Pfhw3skGtfjRZQN)1Ogjy~%pL
zLh|oZZxmvzg=u+w*YfmTGHfA9=5u;(a&hJGG=b5AL#Qh?kl_RN3ZhSf7PPuJ63;pQ
zyWM9Oucc39weJnEKGaN}Ywfv=<$R$T6GVZZT4N0K=DfwLCJU82N8`UemlBg_k7F4&
zp=Zm|Ovcw~hf~(^{%wtcyYPCg%-Fqxp&2V`m^cm>I7@u)wYH$AnvC(k4(_*bnB+5C
zSzfr@Lw2eV8y7MhrNxS{B2H5g$NVCLWTJ}pO6xwmji$ZI^H|Py33#T<y5GkCnwZ<K
zhn&p665!vhknEsjeeOk|g!{j1-`Hq-bGm$CJS5F*qD&YHhlqkc{=db!kxuCw<6|6&
zp;<ttKK}@UyIJ|g`?K?Zo?$m4?7-@E``KLvvjjIVXKXayH6NuO9hG~K=wGE2K&V{A
z!TKzZ04lJZfQNq4{@-P9+#xI=*uW8ysg^FR4#{8*VoM#6srHmhmW5ni>bD4k-f%US
zJY(+DU^1lwg4-RAg#~v-xBmOMyFt5Naa5ZWTWsN8{+y-RV=LolRwE{d<%N@8kpjmt
zL4N;F3%8FI=fRxv{qIkYR37@+C0U`Z#+&1#VDmaRR3mroNXRvnBfe_2gNgc{Gbj<%
zCUhDdz@MFaOkW!x-4?qOcotx{--!OC>4C=ZmG`{YSt_@K@!D*nzUSqhZRfkp*F&Fg
zjuTZLa6jD+nX)ArCJIXWxAfmy6QnKAQB7wks$D*&UOuiD4I+ZuwenX_#kC|ujJu|J
zq@a{Pw}SuO?77=#tnZIA9YQd#er!b8d<kr&3*ji<u%xRASO#M94sN%f{TmrzbiBPH
zpEJ1J(jl&V#QXy5^9OgAXP@DavfKs&>VN;~T1&Q-Mel5Gpurqf(3kMsATf$6R4!A~
z!B+9tN0ES1oz~MaMz1HsQc!~tCgVhVHcfF#FLgM<kMo55Cw~_E9ER|bB{91}l8V72
za<7&&xrWw#W2!_V=joWW>+Jbf9L7uM(e((^!G{lr8*|c}B4;m2AgO7!f)WOH&5ec;
zq5?dDJc(R?F81y%szHH!jmU9IIcJsM>7K@_#h%+Ny-LMO>upmpD8}?u51my~ReYKD
z^~QQ$`_Bo=ZdoGMI9g55)7e&Ekx#8wn31&<UgJJm?qgB^oc-*A%<5k3^@+AW;u76*
zoG=HX0uPJE8RpQfNK)}$>!meO`eQoC>{G7-X>}-{SA)iafNoh+%p{)o_87f}*;wXk
z1Ln4#dvi#IzM+#ehR9d~7IDd$Ey-)rGw!EXA&WZe|4iS$!JbD&COKh$ef%B|F$Ck0
zOXZ?U^Q(6rz*K-qsnBdUHpNl+p`rL4#_Q47Q6#);-+cohEGA?>%TP&xFTr7Pbct}F
za^Cnt-4#L(1k7GS&-Po#Uuo+|vejlyNTUisbjr%u%aQs!Hv6#O#WlkHIz-?{6L$Q}
zR%_0K2IsxYjl--OQeF}P`<3rM?$5aFnO<sD8cIcvm#IjsUGp2neI8Eg^h3kra{{o*
zOtILn0ThENJiBe1mG{qfEXL~sBb7|&Qz<>1%@kWK>q9NZ>-Xp4nH9(qU#c{O7-OQZ
z59&48mg8x%S+uyUTjNF#@irPw4U+NzIO)kqJ-UO*fP5OCpX&8^F`~er3-^WOGxGNF
zPUK3YfdT4LMMr8ou0)=cKl0mmq401S<mHLee-BFV$!NZD=efX!(2skdtnBp~ib5F=
zCb%IA@x3*d1r{28P^YOgkV?boqv7Q)e{9k?4!I;=m;GMDYI?P$j!HhaE!DQq51$OA
zx}X+)m9kL%DRj|Q56>^%0QYFk*qCXM2|VhVN}C1DaN>2Q6iyb7Qr(=bma7ZHL(xDS
zd}d9{ozI8LH8nMHaa#n9PJ7cCR*et`V?m$83bkN@J_06sjryhf<MnKzkCzB4Tv$A(
zUgqbAGO;fim7F9cB@1w<^qSpIkORp+UW#+%dN7_56aJ@Lx=H^X-+6G{1VtCRu*Lgt
zc{uK-4G+jQu7$t$;Ro>2Kt~yApuD!FS^(T4Y~~w?O0U;SwC*0Q#<$gw&IDkPsOBi=
z(2eFLCnd!(Xjxx`k>0#{GnAMO@XM@+bH}>Ey|+0mB{!nJ>TGl1yeSH1)@iXs7AKm!
z^^KPR+w$6~s+f>QWds@yxy^I~#6t@R0i^Oc5^{Q9E*!7-WUmZ*IPbjFE4>`I0#sr>
ze0oL2TN|Gc=p@|E#gZAIOP}j;a3HjoQvb6Ph5XVWcs{X>cRL#v`DNZ~@3q+<*2#@u
zPfn|EXbwkm1gL%9V0Er6NuBc`Cm&b=LZPiSpZ5rnC)*Q8Y2Tg;)wzQXy~g}}2IhQ|
zouFgBeaFy^2E~uJuue~b<Yf%f5>m;<%X1~*nlRn+=6VPMfVx{NIeqc$MNy|E-WEzg
zf;zR)rN>=9g$GfVks}g=VNC?wQ7p#uBbjt~<eVC+%zQ<Ju}FDdSj6>wx{Fpi^_3|j
z*a18?up!^+>)RbfT(k-#?!hijc;+(fLq<)!G@fQ|%#A$)?)JpBfAnQ<+-OA`eZZYo
z`j)$a$Z?XMMlO-0gFXwdMJ9?Fn5Vo@=?qz%HtJ8%M_~;xhWzUVT;Dc#yUGo%%$185
zt$U9M0@|EB9@kB(pc?GEm~pWg<JjgXj(2gWWQOu^alNf9w3sMcXmV1?Tt9xoywV?8
z>C)Pw=YFW5S6ouurhX!?Yd$c0_qa@_mD=z2-u>;Lg+R=BD};!JM9`a0t~Um8v{D^T
zjvAP$eZs8s^YEjik1SPCTsF*|J!EnGZz|GGKl(sQcha#P6qcS=Uy!-HW!ETa3-u!1
za$&K7?0~%WcDm@cl2r>~;#3}oLi1Jn;CQBH+rv+qGc{@!CK7onc?ty&mp}U62a>SN
zI+=!Gr>mDjNO1_5^y=-Y+(xpqy26wy*Y03p3G55rx#wN~SSxN6i-yy3`e%ViKt*2P
zIRdde-N?HlbA(*I>aAwTShlyEsxTj*uT~k99|Ykx+jXUT_*?q7xPhcr_z{r%U(5Ir
zAaN<s*4eo>v?%gjNGQ@LH~&=YC!+xuiNu#{1mm&*@!OG=0?>o`{qyZr8ec=+rD7z;
z_d_cYL5T}_laok)cSgab@JJ9b5_vraK@{ib=SN?G=`|WN(%DQO8D*~l9e=Bt+G@+;
zwvH(yz@9T-1!wLlr{(zsdDa@UwyB8;tA78v2lgInywFIpPWSUvm66JVZgZpKPL;=k
zuAbh4Eop?K$3)uPmHXMD_en1>!no(OEv2cGCBF+6u?2N-4K&L_i8(aModZsKM)R~&
zQlqJ*Mw&ISsiMM595gnjqTrBLr)v^U0n~xapD%Oc9anCo-@tHpdbNrFXPaufzO_&-
z4hCsebfT-){Kwu5Q78_ZG3BELO?GoGUhah!2b1}>yUR54L)Mjc$DQJsPt#g$uYs_k
z`M@eeJg?LCbeYTk+>FcT&z~jP_*^H49+C26om_SVFViUC(W$yF=VAtxhL1OEz{-6>
z)7ZQ}0g}V#!5`vb=PYgFle8p=<5fXV_?H;4>0Q@$65IUH$ay>^hY=s0entxTG@nk$
z{CgqkB}bYyxh7SVA{yeADTZ@Y@^t4sa_!|Vs{MPfl3l1})3~hGLTHJ%O2ceS&g8eJ
z{E@a_YtOJBM3{2%JS^Tb2OU=vn!G2>dj6M!t0BW6|2ZkRO53bV)}mH`Z4c{w_DKA*
zsShk9llYt*kITDFvA;j=c|bf|kL|v2eH-V^LaUR+@Q<4=XJzce%^4fHuqALfP{oRZ
zk(?N4Xztfbe!6lent3-z)+JfY#1w`f*wzpKA+_9ilie12lXMgV>E9I^q{a|Wr!(Eo
z)wVIBIpF*0))^_+v(VOxhWvHW<oWOBj(atskROkl_fJCQktCT5{_s7e7c*$XC{{5E
z3>zQyzmKy0@ndpf!efkS5#3&m&H702>D!x?U~2X6Y?7(WJ<pFE<k6|-*~EP!5nHg;
zoIx1qx5!1o1}H#wpG6H)ku)RzgmofkNA7B324;URESOM!onZnWQ5)FS@(f^$gd?{9
zchS#wlZ`i7Om|N_WeBZ?WdHyF7;z|gSHyT|n&I-Whhp=1BJy9R^o84?#J=kNP(sJh
zu<6s_#|B@XkC=ER`xCzK3bXsSH(%k6`Y8BsxZZg8xxt72r>F|_J{G;6&iaI=j~+-A
zTjx1mBpqi)({1}KH(W!vF6ORD-hY{aKAisZg+J7_u?fpnv6xZ`&*!<6k{pFjRe$f`
z^BU*f9IFh2LxyYV{*@k&0ur{!d?zF&bn3owMddRe-5HWB+Z7%8`3R2n#(*SvYwnf5
z2wzvek)wFUb@?zW-Csb<fy1k@<G6JnbM{Q=<L%Z|LhB8N)GupIZ)Kq(nf%Fc2(;th
z;>&G4A{p-XuQs-5H=PVEvt0MUEPR&_=f3yDE<#|t@^4!DfvfKv`sunnchLFuQ}?BS
zuAqBTP!UOJYYW%Edp$sB9jEVlMI5GdkF@r4JC|p;n`?;+<G)QH*NIBI)F*;t_p6Jv
z$+cg$>=Wj}hPg0ium6HRo|UqMDjqW~v-!x3KEM=tfAP`R{e)tC*=fY&ih$-{zV7Xo
z%Tp<o^+n1yn<#x=?!=T(!nZTQsQ3Bnu<R2nqENM`&)mlwsfPb81i60U@t{G^RS1Sp
zpF;|PjEi`*fW&0O{J)Lz0h+>d=RT2R!X#OkFPys#Ow<2aR$pGSVLxa4Hu?Cq#ko#L
zZ{__T)s$XXtxnDV?UvR%y8(}`zjk3?zw_^&!mLC<4MqNZ-*dXe#AIOM25GNkV`o=8
zsC<Zl0Y|N@Z*L!SKYJ6%+LkJ{Sh+Z~smJTfA&Vp#o%v*dI$eJx0#BRydn~+()W>T8
z*{=m4I`x{-FE1hAVV%IAk|ixR%RpFAaKXh!kHJo)y^Q5rhKOy`L3a9I7I{gJ!_{yn
z;EtfrspNMBnHCOL6k_h;Y<~xrtLLWI?v--jZCR(a*u~7nM^r(Nh9$d}cxE<d4gyAe
z*wzS71&rw&BxOam2%UA;rEppQCH8_}fGJ-#%to(O`9LN@gpSD3^Wu)(qJZhLsZpsk
zM$+}2o0OZ!wM_DVSMMO2g_X0mvXaK@x}*DMbyZcIZ_%Y`r~ba-P&RDgzg_bU);B#p
zc;*}aNiU2<ox83#-1t&qu{BjFTEJ&}>0gm8$R6w(=M5F0KVR+EkNv+3Nf!t9s2q6{
z2(oyEjZ6RC%w7peN%y?3i+{ya2B=|`9%Y%`A9~&NP;+7YxipE4oXC5{CzU0l`_#vT
z^FIB%|0?*FGTX;>cRq<PCT|o5r|6c55R2JV-xEPz@^h5!^ZdE=qb__#P1*VT7*8GH
z-THJS+@33vZ-q)U`aX!adwk7GZh5*nGfgX;1*Q7P);>hk;Nq~;)jkZ-UeL^3pNs_t
z8!-jS{B=Hp&wd^6&eVST1SD*to(X+&-sOFnAh-|YWTpF6i*)DO+TQObu?Oh`8`BrE
z2?xEg487qIR5Aq2%w-AtRR6cNyxo8*@6%Vd5jaoT$mx`;-VSGq-N#V9Mmqe2W{FF^
zAl1|pa=Ed)7WaL2R`#KsKk(6LJR6?SfDWt<#Fy#+5C`L=E9B|n*_p=sXHH3MN8bB;
zI#kF9Oz+#c*38})bB1V1LQl*HLop)-0$eUv3Sx`Y`!1%A*U1IF8tjhaD8z#47Yen`
z$N)+}wa@K%E!GDg4WFr4RIkFYr{QcPk<ZQEslo)N>veIWf{`oMr(SVChJ0l*FxqOS
zTIK(~!kZZ9ooU9+%JzYparIarq7{#4s7$|b;r;TdQF^)lvN&Q+PnSkM)%*0a0~nW3
zMTNOLn2qGlReLB*RTvHQ%NisI1e=ZK!BV(o5Y%^`ynf7akB!LD@W1=sK7enkC@6%d
za92F(j<0pdlNS;aO6IUB&@4$hlDj5kFLc}-F?T!Lo1=@Onyb_I#qlao&Lcx~kr$}s
zDbX;*Fl+GLEB_Pv&ZjU**d!^|r19x5xy@souOfd)WFK`$QtIja_;~w*)ucCp(IW1t
zetlOdzelFGsBR>M*ucPm#n1ft0t1P=f+ap=!jkt$A8%F)U}lwrx5?ZsU@zsh4Y=5~
zz<H_0d#=I%WIL75?L9o9d`p{>GE2bgqK8u_94Y`rhf7x4%$s9l$6^XbtzG9m&(C{$
z)rxQf>YZrdWs;yZOM4d`J$TmbC`G_SzWKI$&xlba>bg<L*PliKdRXTsb7er}bVbVR
z)L?rU6@Rv^VloI!tVHNnz1B<TlqXvp)*DVT5GM-`>x^&fBz4*c2d$4{3N%2f?TF|F
z(zYeVC1c2Lj>qzGFCp2hz7pX%$43hB<%cM8KTvk=S@Ak|7mEeQci&fK7_D#Uz3&5G
zDcJewhEC8up2MOr-*iM2jK|pE+M_&m+v9XE+E{N_{PO(JC{L$x@p)eu5V4)^q<((}
z5Ht2`v-RuDx@24%X{~Q={sE7DR@(Op<7z+tAmj`7OV0c?n8x2szY;+5dmj9npKAo(
zh6yZgQPI&V05B3G>8-!u^XpegB5RKAbz4VhaxJZX>k&+^?yC#51&5T)a#Hdk@r2`M
z#cC7=P`|FXYIKgW&nKpbRK#3l{5YDqsz-m4ggQ-jCT9!${!Qr4lZC)?91HIf*WpK-
ztmy%uGh#DeMJE=7XOFMm)}pgB(TW1f4fnC1CUEFXGiudz0?E&Z&7%mIcqp*~p<t;(
znXbK2%=SL8i18-pQ8oTu;G%u}`0<EJKT|ZYf1p2y<)gtTU_>}(Gif_DLIsdJkz<9N
z5Y%{PM?(3s^WN-Kp;53Fr%mr&Ri-b%=OD_M#RYL><bX<}yc=)_>mkmIh);=$Q%A83
zR2jN}0bQt8w8d%q)%6hPHw>F2gVAgxo0!AOSq^#~9!aTQra4uH`tV)E-*gR&kj)ha
zq}osS%XIPvzeM`b>T_Roh9-~H=Wfq5o<)53rB^Rzvu?XnpdmPYut;e=57%yRl&Z0u
zT3H}=qKb49X;IOsc`ug8Vzi=HM>LwpX+7e)Rb{r=pi!w_(kdQ4)oAkD|3%>3`)#X!
z783RcM}o35*CyVZH;LtW6o4F=dXv{4h}+j#TkB%j`c)y31+kOJs!Yh?xUmDtkgB@u
z)oXA}1ajl@P>x-o1R)jm0@7+1U0Hbyw3g3yrdaitUa(ulwZ8-9Mp;v{R<-%2_mCGd
zBr)l`{AjjZkrc)Ygxda(QE^-S2bwPR0UPe=@8F+Hg^%c@hFZqAWWYS()$7-o7?;KE
zboZp8^;bm5!@9-i`yjx896!OcgvP8w+aYJ|XHRq<EUier1ewHMMCI7xeTBSqI~Eoe
z&W5~s^9`6dQ8CBu52?S@qxSn!6pOBxaqF&t7qZH}BZ&8G4`_56ZpSfhkC#TDbSLF}
z2i8@qy~%<;A6NV0nDknjq(+Sy;ur-z&m&Hy(eUZDGevu-Ly4uNOFxIs3c6f-A{vyh
zXoS|OtDe{lSL8G|djbDWV2(x+4R&LEXHva^ILc`aZboO=ouJfgrzN1;+~D*=3rMCF
z$P&C%&6kWsh2Np5N1WSb)CMIdCROhb3ANC~#DND$5R(S%=vDx!NZ;Z#)+g~EHpw|y
z)B!Z3GHF{u=l+dan*}m^!57<rSORna!OxpXmHS!NidClNUyUQ@@95M^$7)tvBqt>_
z7};(EbId!BUG`@q7sj2g+x|b=-ZCuewF@8BZ6X2+N=QkI2q+x_DiT8~-H3EINDSDB
z2uL?biF7x^h%`vU&>-F2Fbrq8b-&mDoG<5mIbQpExBI=AVdnQd&wAFn*S+qW)D&O!
zKP;fyc*_LH^Y`7hWI8uCXJnlTg1Z5{kwm_n_?##XToTZrXAL1XmQET)c?3$}lbJMq
ze!4i<cI?sL9yeTStzGaU=rQf$q>D=l!BT$@<9Rr=2k+0<yraW<M21BgcV2H%Pglv$
z0PC+FQ$;{oc79DD(|<<ZlU<8H=CuYzigJ$*m%-2ZzV?O8?2a=(8DPf0TF|>DOMNW2
zx@fHnjZ7o8_&A!6<oEVIIlwoyG+{L;{m{}v#&LLb;MWOOn(m`=Q3an4Eh9sX<Ldpw
zx>x%?h@F?6x*cYza!b8@{5wr`HSH&V{}b|itGm`6=lpP(jeBqvS^ay3N(F{E&Z9cO
z%C{+&$xlavlE)&HZt6s8Cc?6)Dp#lc`C`$6X?t9V-$F&PC2$k=`})Spyu?vvEv0_M
zRIL&+Eo<XPXZMfx7KS@`QI@MC<*5y0qF&e7g0eK}*H9k2-$Ee5DE+|wBSG-R*=BOw
zZ>}1|?%l7F6`CGfE}zJrcwQ=xR!`Sbg?+aD&AoVW&~aKihC?_1d3_OjyyA+B1fjL}
ztdmawH3_p^ie96$3xia9?B-aBZsq4Z5-#0}PPC`JW9t_r^>~?qc)!gkr%uJ4{$m&v
zYO01+{&#0Q=-B*N(FSok;C-=QQX80j_Pu6IQ)N?E+CF-xTRYW2z>8G-@#s9_8_U~K
z`#T@6bH?9%_zw_84I2YQJ=dQNZeABIu@!r<{yig%jo0AEj%7a{N4410=T4_5OV<S@
z_GF*x14!b$#G_N_Qvam}g&ad=tCt2PMX|81H$4=8zZ=xwWw>gQn$l42IHO(id_zCk
zM_Ws)*lcX~WJ%>3Q$ZVR%UbP)Pn5Loeja|~Lpb!Yn4i^HfnEvy=*5c{pOo%zFBqne
zSGr0)c<Eivbv-4P)ArR_!hmkBVEM-{%#m{05dp^FwYM$wIB4~NJf$KC*?m#>QkNJK
zgQ||)*+Sp8#AJDSdBI=-A12Z8xXNwouo%m~%<H@u3bTHQnIGryKVG|itG_b3*n(Ej
z#S{D1S6|oq$&=4tvjmSToY(C4=kvQ$Wg%s^>aIiR>-zfp7iUR1-czN0$fnOAk?-rx
zZez_(D}SIxB#slbj*X2~NDw@loA26~8m4w}?LRvnR7|9vJ4&!nUe%hTvNyfJon~z6
z?t@%QwFmoxtSD}F-2wsi)e%dGMIwga0s8OKttYrnTQ(OEyI*kX`bJq+Nh=rH31Ai@
z5iN+`>~9R0+Fn2QGU&fZNQeow{t+*e+AJ5&u6-LnIx0riB8bH`CsF*ou#liaq`<=B
z4kZPbkqQ}I**=}zj_r-+l`j1Z>SggpAC$|=VhsP-)@+AN<lRJ<WQeD4DI<~}Z*(v5
zXF;$m3yt82Q!kVhadgCQ{t%YyhMSDaTI`%SBTrfSL11sRvUF1>{C+A`KfKUlk%@V@
zz*#(Qh+uDZShZZq|IMlggK(g;r|7W-L2%&>dK7`LWJ=baQ1Vm1Z-~P?<G$2_4vcs2
zu20tEJ1~P-f;%Y2Eb1IIyKhXsyA~T4m)e<#^e{A>VpUEnw(7H}TOaQetL*$#mKzA)
z)Ml(G9Wm7zbTkuFVduz@vj_q6>sMg!&j=wGL*-`MVida$AFX8?Z8XS7YiMd`>Z^xy
z>g$RAiucx!D-Pq(Wrl>|U~Bg2iH3<+J5@_*h26xX`5UtxmB78dmSt`A=~^-o?U-e0
zP(ZWg{AapNi_R|-BL`cuVYiDt_H6#mgI=DLyn1uqoF;-LT_W|;3<KX2dJ0CZ+Pycq
zYd%Cu<j4K`+@@_A`sf;{7Pb%G>9XKaD5b~=8g<^}4RdjF3VrtYxi}t&QmPEEW5Z>)
zRJpLlAN8{G(R>tC%?uY9azcL5V<gt--qHoBk5?eKHbSIo-{ZQ<x@_UV#mCbOu`goG
zRnU4QZcNg@ZiRGzZ)sVaZR4!X9Vz$lz}AWFAQIlalc?I?SSd7a#&s{fBc}EVEIX>&
zTj<UAd4sCmrH<LrdcS=z91|?M)H?Db$sz2v{|#Q7;hZ=ffs(Zmrt#Ay=6y<d$B$-4
z!`otf0?9Sg9cEP0m5Gjy_l8~9fHSS`Fo8PSwH+uDlnS8IgeoKQ-c$^~t>|0bn%}0=
zWp-E1ljkrnF(2LDr>eHP8140Qz&_etk%$QK-MDh0r_#Js%ze6PRM_>aLX2L4QF?)K
zt3ou_L4!YKnqoq?qobu-?ng4tu~<Rxxt1_l(H-nNzeP+gt@GYA$}WhWxU4@@9SuCB
zmeSz(@k$R@9QGXOczh-*e$m{W*`Mp<5x-n!Kcx^Wz?#4&KU8!M|9WsV<fga(Jz?0n
z>jzxbg^xR~<34`oB7-7wasiF&-NSp!7S36TT*CaK69?Uq9ay-uVoNpI`TNL*PjXRQ
z*KcX8e>qC*v+PG8<Aj{SuDCzdQr$O=DS?-p+XJkml4xJ!i+|8NmHjyWq2E=8^VTCp
zeC7p4;B=h*6cym2ObO!=l-h1l<UTe}QG(d5xd%*#U*)1fnB!BG8~z>blDk^?=Pz8y
z9?ug(We%^34DTF}z601t9+8k-!?&!&Wx6^dCV3on$GiYGuv(_l40J9QM=;r1tK+4%
zW7q@r96ih79Av^6sy$wiLChvwyR;zhu9(B}em)5ci2$?Nz?bSn=ka+oP7bWLbsUw`
z5Xl`FpUV`>zkc0h6SH6JeRX`qv!kb{7s9My)?2m_ZarKy-0JGfYoX%3HdScQ!(5()
zet}C;^IxPD^HSMn7@y^}#qbz@{p1rsrCV;XL+82|KkD(g3%9>v=ts&yC1x-Q&Mp;B
zOC=^d7Bkw2Xy`>11HK(s>5@=sSHr7YVIm*>ZM@Rr6S*jM-<M>G-=@OpKn8rRE1g!S
zC+x-l)cOV=N!cq5`*V`&alE|^-ygn7Q7TyYX6ub1y>@N8k(Pn!rp;hRm?%1L$qBAw
z6Zx3w=9snKs6wc4Jhu0r?%C+3LQz-DZTgd3^!ar05`V)d>b*UvRY^J3w#6YIm6T*=
zmf=~zZh4u`y$$9ZN4ZM1q{@V4YNr`ADzJ-(e$Ml`LTEO=!M{Q$05TUQ3i^4^y2ef0
zV?Q@P#v_5KVz5#XcKS3fT{)HFzM0WlweEP;Mz|)@gUAaz-Ssgn(bTshW88<RDFOY&
zchdNfV19Lp(*3dp<{R1Jl^<e07MKK1{hIOU;)Q{7<1z(sxm1k9?#<t;h0G}3^ZMy+
z@MtSPW5!=97a!lBT-g*NwRi0e=zAd|?@kn&cKq<C2!-prIj)Z`q{y5mGb7EYIoQp^
zLyBrzx|)rvG_TXGt295KfDjLJ8B43XS^p(roCQ^V>C(}ekbM^yAzIOOf~+4^?mM?X
zo-a6KXzBRxL8-Gxgrwmtvhoep=LLuW73lv|Pv={>*-_TveJm(*vMtD^fBa5_i#X78
zbB`$EDL_5UGEntZ_S4vDdZXp+5<6=At!n0H4TF3e$UAQcU3ddktHdy09JBn5<LQNv
zYt70s`>AoEg3NYUDsp%9R%2i_u|soKNLnEOxBmU9Mj}u@G9TIJ2j;Ew#Q>i`8tFGf
zyi3-@)%WDJnh!^JX|erx**f&^4;Q&1Ut!<1Mr0NlOx>t|04OMmwN$K8v|KI2yXR`a
ztmJ}SQkbY86bDOLCsdMicSJaAf;KicyV3brlFc?mX+ZHiU&J4F3(k_K)<(M1b9(*i
z4)Z*KE2<e!9^!dCP9!!Q#~zinzks{zZb6wi?OC$?dF_A9B-GC%4>k`B8wvO3yT(Bk
zkN8l+?*!+qEJ3l;c-C2l-q0C4W86xL#bh}jmFP}sYK>Ja+;d%ZDt>j=IwbAW!Ahx1
z!H3+n3+A4yBMWxgM3=Euj{O)d-les{O78cp8Y#4jXf5d4TK+i<>s#Fck*U}YBe^yA
z2JcrvLHW4a2b9R-_NJy=diQ0;#E{%C%x%G|;L4RN_Tld&?t7mowsg!iniRa3j!MqQ
z=8}js*3kV$kuOijNSQwvAtQVL>jOsoqIk8|Zx>GQ!>p42C{g_GIWwEM{~E<zq~zpg
z7A9YRLwUS+tyHFI*|bg<B`Kairj_^$F}_Ure8M8u`a<oJm!N~j%&*&GT25!o-d)zZ
z(EXQugN^k>BD1WQuVEdg^IB?Dy^3rv{>P=l(u-a=3r)Ep7CWVN{Gc<peRdoflWDyb
z$4MVJk`$5Jc>k$dzjrK;4)-@mHW+oHFAIh`JebM5ZU3Er{IvXe>i<nailO_*IK^MT
zAz@Omv7}5eCB~&pe{Y@$d2`E0iSQdSf8_1)b~}oqAmUc9;BP8xv3p0z_$x{#|8D%3
zCvO4D^~Ubk021288kBA>_goxH4p0Fu0b7OAuX`87&m$*Z_*0|9!|=At(c?pG_J8O#
zPL{FElX6|=^mE05D^&LPOg?3cLO%*Tb^d+pQ>X52b&z+WP0q{zA1^vpH^49U_R8O%
zc=^rjTqk-+zH<bJ%`Q9s%ZPelwZBK*iB|Z3ypXtOebA(6N{T^b>G>}ysU-Ktx_i1a
zuHr3!G5qiApA2Ikzn|CK0|TEw&+pVr+vgc?XA<vK8f*4ndi4BQbe{IrHpO_5zkgh^
z@*{0w4}8BDf1Br5sKJSC?5JwTYiF|d0xeVfUDXqxf7jDfidCt+A#m;2%8K&|&f42s
z?C*f#2SR*&SrA|8HRrDK*qfa=)|MH0mUU{sOJ}qonmp#k3!U9f_x~XMm$o<agWt*$
z-$QgV+J_MHW5r&Y+@1HH*fsU!g!c#N7`xw${O_Ib;YBmr1a~5Q&)}Rd@K9`%rF87;
zSy?SlHoE@DF?w((xD4@##Wy~bwvA`RDa)u+QfSfZxtRPOBFg(wfC3&0g}V0VLEltE
z%rkcN5P9EBeAw_3)Bez7dwyrWOW6(a@BlAJwDybD$}-Y(>`&Hk>OmI#;v|+CDQ?xv
z$q#BCNhU5hcDz1^FCQ!L(87IpnTeA%;lA5so$pjj$IESs_a+8c1JnMf(Vx1B`Td(h
zHk0eUPK_2y<-Sh5gwT9F>%O!2&AxED9ULD*FKbzUO%LQSHI0B&L)3GB9-QPq(jmTD
z8XJSp*CI&Q9~~ZoYIidL(mh}OWpu><Yl_@d;A*-;6)f7Ht<Ivk$vDJXc#T;;`tyCa
zU|$jz>2mOVli@*lp=`%rZOw6VXqQZxP1ya11#GTQB!eonbexd?b7{>&lhHyC+xFP<
zl#z79G=M@`|L(|B$8}z(bn~7)Y>wy~(VWXJCl+VxQqR)Z0Ksz54KG0SNS?!=wHzwS
z&&~$4d}(=wfGYq|7vG<woC%&+GCH;YgZ3wHzZp55&0ezEWi#py#!+Zc*YOz{g>+(h
z)hkaqjSz<a!E{N5QYA~ny#AxAdhVD;iIv1cw{dR^I0`|L3#yHmv`ef)G?9nfAp`CW
zpEUVx$Lw9jg2lYOiU+ea9lt6j41$?m2ulah5emFdPB%16?EMUF2Ess0VmLVORXewq
zX!Ebdf-O4tw+~iJ*m8VWf>>V1-9EN{{;cs(=C%{t&hXW2o&1)bDNHr$2+*dl=`hK-
zxu|M+-{ytQcuBI|1iehr=l^vnYcJD0U^Ad7s={Px_9si_Udfggdb}2q?~4GSc4Tx^
z?C`++Hr(cMoZj*NF?=%R;8zY+0&aVuM?d)_l=tL#ugVk33{+Hkl%MPmJ(RocNRc_%
zlj&Bv#E5w01O|4LZ5V=nH>0bX`pmCiPrlhrn6yQA;5>GN7^H-p7rQe}*X$C0jE#-e
z(7n1gGQxF7uV@<*#8D3??MfH<4jL2?!f)=(8Vuj)^!^Sl5A|HVFc^9kEId(*2>b4i
z$r{AraN<4$LFJGq-Bv3qv(gxY42Q|>@K?<nW4K(irPrcGdDJjle~;rS`$%&$oJ9(`
zbPb4AlHL-q?|xfsi9s9yirB)Bh~di)3k#c*?`XQ=v@|r@Q(Nd9qXwuyJj<a{SMP{+
zUBx(ytajZhqm2S%S^rO;!0B#sdV1iSy_uesg@usa_b-seAaHCUyBjN+D(TzP%_OX{
ze4~J>ZjdxAj9_3dEcWF(f=%{sD0sX&TOqFE+$P!QI?cFB+Y_95&sXW1pFfKv{M5iU
zIoLIG)UvN4)ycLkx=-BaGEB0B^Nm*S2~4k!Wvb8H4ZxNXa#=Ql({Q-ElKpq%fA8qv
z*=~DA;nYDRBF;Vk<Q=m@?A?tRNpDh^YzW>vi$^>kYiVT_%Os2W-7%_S3wiY_A&^Q?
z1?4U;{{~8qTZvPuZvhI%j#j!3g<&v!i_<6%*S>8{Dj`o8e_8}Av$I@K^CVd+Fq+Rg
zzNU>`SE!#65iH%373FcTDNzi_`MYp-e;pki2nt_DQJ;T(o~ZR!uZ#mHB38M`yH9l)
z?I-IB9{sl_UU(;$YYZYMs1`Aqj+1p89~K;)*4_g~T5MDu#chnq;o*mAB=kd2sgakL
zPhH+y2r<Dx(FKHQ-YEf}`FmOt55Akq4~pG<Fg8{1msV(u!yW`ui*!|KIzl1=_&}w{
zUe4~wmoLBUD38_miiGHQEGAaO;QdgpYk%rvcz9lTUuCRf1k5KPU*ic0e#n+T(VHFu
z=9c<pW)mQC-Wv_UFA!%bm)t-ACFAVGM3AsLjr`O|`4)KcNKnr{QiSybM>da>F&3wd
z*mCUgF$~OwK#Su8`%-Vt*6vD7x3SE*^Y2YCA|Bfx-P?e8Hc`=^XOIl&jxL&m8Vz&U
zZ9xn^nLF+69C~`3e>pj)_L<B?-riNSeH}m_u4)=5K!Mu$;zLO3a8h&p4xg0ZhQK$F
zYJ&|zDL6^wx(5vwnxJwv_3T>!=y$}Upw{h1>z_cAKvup8WBdF$m-S*1m?iRA4`rDb
znh3jC5naCAJGcqmITx1=(CQDm^)$%~c~n_e=IK16U(uheez<M3GVDsuZ{xYUJeca$
zml4*N*>5&l0lca747F^R!|lNUYGJT_{rAth?C)zo{~r0aFG(YdLhMb=JYsi#r~QWs
z_@s9j3sYY4C@0l6Hl`s$B+ncYWhtlG_z=dyR>?E#`hiE%m{}?a5N6ZZShZW>Eb*qO
z$L@0AQ-=N=U6Sk_eb|>{C=W`EEl^N|Ui^A6?uDecEH`SNd@kW<JCdi_vecj3GZIAo
zu5+~>3e2i<&t1g?QTh1$<})pwo}Lpw4gdp&?}9zvyBh2YC&HrUwcFps;S`qm^49u8
zhGd8c5>$tp-3EwfOzr^_WmF0Z3X6t#3=Ysq-`rG6g7Icv6O-9ui~c;|I3j?(<lTnh
zeOr{Aocy>UTI$9kE9~#?EjZ#nnTnBjgTQP-=<5Y9f&a4>3Y~9_E1jQdHT~~qFEMTn
z-y4ZyklALEj~A*q&@g)LeR=)~9Ubw#O#4E2bRn_(nq$p}pzTuMJ4n*;&!U$2v?6R3
zJ*ISS`NT-D2JX>3nXGp_*BR*98Vo@aPVz|Q-bs@%nA2_6H*C$>Z#*u@%d>NKMtL2(
z7ri$=8RY+~YEb{=bP;j%u*GW=X92>UhPnBGstu&Hm8nIBrTW{t#qR?TeonW=xB@3M
zSQL#s!oYnuItpGK9E$PxgESeW0z!X$dH5!@jKz7e7j)7T!fuBJ1_o{-kH5?RsZSmp
z^ow6K)YUl84lczZ(%V#~J*HjR9{mb&!tZmLkdiuZ5#k{5!*LN7e}5T{Q5gA9Ypdnf
zY#S*l>EGq?QgHt9codL*I(=&rQwpw^7-G|8(_f}t5QyYs_y7-*p*EczEHs7d2Z_VF
zL0Qdfef~1J-AqfEa+-p<e(=c12q}loizN&@UM@JVW}p-_-&9ss`uH@0^LsEOB1ugq
zNyOx5WG39;Rc?+ApD6hF_$*M6AiTvRfmVy>@!`(6_ld6QI=esAW!?+jOoJmSh>+fg
zeX7Bcwj*U=epCsMB}_FvEI0+wdMxhv$aQrjC=BKi(|6z{oFI`7=pRIWh&*GEHl^=`
zuqcL$T8f&i3>EV(bwu7v_LS4?Sm;Tk<h8h#Z@YOKauz!3vKJdk%W@11wVz%R{d>l)
zPzRe!*U?>dG$JqxXQn)$pb&V8bF-zN-8HSd2dh7V_C~w-qtP&nuF9CH$^shoAg(_0
zRh|;@3~tD%+p4#jtiI0!rvR!K_+Kl)cZ2o&bM^JD#{q+Z)7&1#on}2;vN6@DUu+Q;
zO|}Q02^!w;F)h1Oe05Iu8Hhl?Vy-PF0#Y{^px=Z08SF>JeFzEq#f#;k&*u)U@gxcS
zg*+#5ZgtXFA!myd+;J+dL+m8<h9h{<ecLXFbf6mrs3Ibwx1rm5umxQ1Qf#4U3D(Tq
z+1=eGxWUuuDc9Vl{8cW!Btns;tID$i7Fc%ocjLisR6Fn4t13{bv;Ot{Rq*rHRi!`i
z$Eyg^3vemcr8kMAD2f)9edD}@VHIO}<9|Av4za4}nnt(4JsAmWD${VgKl;|t{TJ)c
zpxL8TW;gNrY+bqIT($R!SM7TOq^D<v(*p6eYfh7Oc+H+n`r%n>Kc4&gGF^l1QFzAz
zf+4qQyGn+NIXsn|oSeoV(#UMBV#X@9ACqga%%;u3GqpZMTnF&zplf%6J6eMQTa439
zfFR-SjaUKPT7?;I@hCQRj<yl_DcK7tpXnto@t!5Rc=7YRrjj9|+gOPsxd2c82<5RS
zBNmn?^#=BJPksFiydf9s+Jxv=&vkh0a91mGS?&}zF$+1(-;_09qdm|e_SPo|fn9hj
z-uTZES{Ff_&pzL_$zd#y0{_Gu>;k#yOSLA)SCQ^VyVlR1eF+KafyJk{Oa_Rs0|geY
zMi?25Tb|QRR}l$)nqcot4zL<P`o=kM&B4jhI)Uv0XA5D7_XYN8zFAjND68`7P_Zm?
zpOXLtZpdOFrBEA&KX3#PG0+RJ6uRjryVtv|IYN*e<pEutV!MUzRLI;jj1dW~VQef5
zE<;7;ex&T~U^nt%1wMb)TZwgxQ`zbLxX5l1P0#K5uEi|S0A`d8zcYf<ghd0z#MW^3
zN;p*z2j1D~{+SWCm#n*d*e{(Bwg$wGmyw_I`f6(#pu;k;$mHC|m<>TJ+FiclHfy0f
zexXbYSZsq3oD%1X81gVBiix5~=xigLW{5x@kgdTJ)~$Mx51w{11HalgajUdMH22{?
zjNOf9uwkQ;-{V1sJU;476o>5}cE<za7#z4y705F870qrDym{Wy;cDa&M42DXzXHW@
zkVa*A$_-9Nahq}(HGTQBZR;q84DGR83x%6;t1r)AF@$hoJ6ZwfGLz|<s^v6S5zu6a
znPl#RJ#RrO<HL3^;W6P-&(VP=1cIsu0A>Rt2xOxH6J<@0P!WP-4xZYoKWHA!&&=@N
z|G9=ffva<mfRYdT@C$HSp>L*Y`xSJZc=`AUFJ9~%3olxLK1s^3#pRV>zdl2Vz$;)_
z(uS`e0_mM7(w+B0gf((Yw|Vm(gllZSzIS@a#$<g@J4O|@ff%La<|<Gacp#X-dHl2E
z9>gY=6KUZc8Sd%dM5>jYxv{VLiTvJ={(e^o$`G1lqIt|A!%D4kUQ%;@`?1MtsE8GA
zZR??;ARPfX7zM#_D?%$(C0D!D2978kG8ij3KH772a2P^)l>Quo)4IPg1?pu~)YRbb
z(3>9&gdT?G;$GP-D;pb*!R?7!AEq}L_-<~y%TY!4aQ)}!Q}El2K*pauKMdZqOsona
z%>JQU)6G5Ko-!ocQgiBwngAb)NjV%C3+%LD%!wExNa?Pv6~7S~8OcagOWyhKirpj(
z?sS7I0WEi!b>+bsF~2}sF+Q_SC_OGf7qrY_rsWd_H>0yPq%OU(qk!(0j(b_cib6<$
z^6$>ot#410do@Mex65E<;YA=Lqn!BY-FpH`8P7XAuvFma@(ccTUqnP#N9S;RA=w56
zO8*chB3j46ixh5}(R5{&m9D#?c^e`r{%2c$8#Sz@Ne3mt8$R8ZPuhZ~LjwV!IfMlQ
zRcP;i%-YLvy<#|~$fMl?@08(glD5&#+qSm02RaTD;nr~i_LJbN1v%iKcKxYI8a#wo
z6bLI#9l!t1`Lm5ZByDbIo?~;mON8mrVU8U{3n-YPp#cUU`St8FHBxvU#k1ybZ@{1d
zEEE^pa}RJ7rln1=+fg$}szwg9w<}OLig&$9O-+StY5GV0rpf~r78XPT5{Yzfhm8mw
zkbEaSWC8uZkNA5o?5L`_cB-dIoaURoU2To@=lcap{=))bCBAn^by%q<NPw{`)jecD
z(sAQmnNa!$%+t?R0w3>XC9^FW-G}jj;Q!M6aeQ%r68`+T{QA_5zkhvp<?NqDh5vqY
z^M4Y3<Y!Ow{QZgVH~)wFojU*U)Zf(U)ZL5!nEm~Umk(hV{Qdj?x3^wrI5_f#q)g?{
zt6pj_C5Aj!YzdS+MSzuFLyip%4*pH5{|DtTygcv4xTelYMIHCIJotkN0a9}n_F%UU
zktjqTL^w~_U!{yXV&51>r{H<SL6_Y1Gq*JIo|HwCumrH3a&mid5}v88R(|WgmxKOa
z^5b*K*UZY?g&y%VGE`SuPdh>V0Ac)kzTQ9c0L@$xKO;1{SrtqlX8Hc|U=<4G={a_I
zbo3W<dElg>p#dLRSV#!%vBw+$+Fa7Us&FX$$a%=_Xh_Sa0-Z<xynk88|7{<c02)Rt
zz!cj07J%RXU^7A}+(bozDC&N7D~LasS&@3w^A1<O+l3;b&G(OgPAHiaL&mhTc{qD{
zsIL!%Fmx(sXIjZ1q0i9B4}SNq9x|QlC?<v20SsmrI;@0*gzQ>H5ctv~`eo1UcTIO+
zA#0fV?@Rk7(mW!EqGNT`W41X&Jub9UGs%<{2zT~x&5(CA3p_jGkwdxeJ2#|}X$sH?
zTB6BT-B}*A1aD`hrYLT8cuF8hn)`R{Pd$%$Nb~5HR;f)-rE3C=E$~|pX=Fd;o{t>4
zfZSi7fTYlj8BEjI)`~6rdH8S*<j3D%9Yasj^Jq8w@2Z{pVEw-0%pn}c)zu5G%L6&O
z6tzcRz)V53cN2%4e|8R1q8L%+S7I08t%EHx{A;%aEHSZ}>b6z`d4lrMJkiG5MOMWC
zp!t#IZZGkFZ<=py>IXm9`*z=TQD?M>w;*dbg>SX9SPWN4f}mpwoX8>gszz}5!<<(K
z^4TB`7lZ*ylTirwvB$4pbc!9r5R!XFR{z`kPcD-^ND%S(3WXe8cNf)ZxAFyk<O3HA
zq#(~ZI&zamyghUNGI$j2!X?IK+I}ZJf9R`8n-+r<b_1d$B7|A`H8{z-73=9frq&v2
zXkdm~MZ{xQ)b7~{gl#}gI5LCXeG`EJ6$^YP7zbS&M|*dtuoip(nC52&NFL-F)Q%F-
zEMu|@b92{%nOd!^SN;}Mryh`t6VzNi*QP-QZ<(RZf8&fjR55_1I7c_b0M&b#;;@7n
zw(9>o=prgA3Mmi>&C387^!m*k2;Pp<A6EUNqoWmoUIv4ON(#^=hW2e(9t#^33+aFc
z0(mC5xjz>Ld0lEr#39Vzuqrb{<c7y+$icy}C_nh$)?jiuV}=NyN$t4O5q()}Qup}6
zo87%V?~O@`UTdf@zLB;kh>aH*TjITgfXHpsRQ9aqJ|ZC%2jQOh9yFG<=O$sjFn2)R
zY~H^c;LosgMAQ!IO90?xnO9j4V|G_yWYN<KP`IPrm9U6^PCYmasSRkPjbrOxpKu+p
z2;91RcXF@o_Xm2JAaQ5>w21vAU|{$QArCXBY#%Q@eGBeui`}Wpz1EOV^u3;qP$e<2
zm|Ua%V$Sf;#mFy{ZU;@u&)XN@%X0+`);Trqdc(2yyUx}H048h$m254+yX%Gjocb=t
zh~(quS6`QBEavCqKcTwv;QYTkM=V{Vno_odE*>JwXrU=5BJ+AJ{>6)B9&-w-Bl<RO
z;Q~S)yHtmqUNf7<2Q#H+UC$SdfDg-CnDqmDF!$}!^%j?vAwkIG>OWowE^ud(SCDVy
zGuq!L=X(d+?g`a?CPfi5GG4&GYE##0tO`LqJ%&1(Z3=Si{e~uHQOG(efZS?pz3iUB
zj}$%B;bro>dCp5E(V7gBpGFEz^?iw%lv8B@t@28D!|n(DbLu6j<k$znUAo`T3|n=1
zlT!B@#rB?JLOmp&!0#CPDnD#J>>?m646u;oi7~7kCBIFP<6HpH@ls^xAW>0o%erUS
z0AR2?$n*g|1Dq|H@oFTvHm9Ewd!3r9+7ilo{Z|Y*1;up^r6Q~H%@$61Q4@e&y0q#Z
zh-r3{czAf!e^>e{2bLy^ZmL--n)g0I+C%wV8~B;l;4(!_nI!reE@e46xvZ?LP=N)?
z_P&Hk+JHJluu6^+I}k{ICuA=Z!V_&+yQ3a9G9o!N?&@c%vD0Jt&7S0{WiKiTI4`Oc
z82Q4ST@nV)K7#o-KKa)F7nG9YcQm<7+G8K8aXov09w`@>nh*ebqDc_s6$o%elGfE3
zn)?|f&wg}(q`Lp&*<eAc@!*S%NkkhodZ$NQmy99JhfFI5eB81$xwAF$<xW@kEeme7
z>sMJEW_z3H6>II7bDKz61_6*YFf?>~oYBkkD6=2k*w21%r1KYD?NIUBH*9Q))o>Jd
zaARsih1c-~0&;<YHug6#V--u@!g<?ykq3yX&Q4Cf-dEcc)iQe1x85J8%3cP>iGcgh
zGV5X2jsuVCqeMe??P9eh0B2n$r=y&g_}k)2^E?9e2nq2*$+vdBicR-&h}OmdkdySa
zrWSGvR=j748PToW3u9I0b19u!UZ!9Al=N_{>R{UJw)=;}i;Lbe8qoWW<e8~UFZ2nF
zAE~fb$7Cg*5KT~WJaN|x<uY#Z#7=863GpPToFqIyChHpW7~iUh29QlYrZnu1ri@GR
zru_Drb@J7vEmg~ZFOj>a&fw%TUCvXJik!UkNGOJIa{v{d4A0>3Fs+FD^W9}M6i8~x
zl5H^g>;+c}a2H@^!OM$N@4os=^1M>lrqB0!nn@b{t{pcR)b(fSX;zvPo3VF$|GLS-
zVtVc(<)~NPx<OBxyuFjd4S^RQHjxw*6s+U*@Jk#_IzS{p`-DC^A<NTki{ETO+BY8>
zAK*q`?2ziPv(%TPnQU=<=+DzZF5tFl6gR{>RBX+Zs6Fm=97Z1EoozExhMR6SWGYe3
z)hpE4ATG94we9_;*TYOOLqcJrE!1b*c}pMn&tcK0e;?lV{GjmnarBc{RlpF@sW1xi
zG&Td5*gB?Y#f%fhe4Jk$=73fg_=Z&r3xk#Fdr&H~p^MgBD9*x$_PSV0nDNb|bCaWM
zD^NZGJqQIR{KF;)exvx30aQ#Osu?QVJ3Fc`2b2?^r!q(pt_&7dS`;r{oeRJ9)Zu3t
z9?U@qB6oijT+i%FGaIT8M4Kjf^q8O#VBK<%+E%s^a)&*eu!6SllLI&g^=TH)-8SIw
z$<`@eot#;Mq41|`&xgy*Gok$vSGiYwi4s%w;MMDb*}^$a#h82A!5?6(G1j=LbDW4)
z#D2aBZ!pQFbZ=SY*66LB4w1ludR>oQ{R#)e=I-l&_*%?K1yXYkw&jzUVsgeq@4J2E
zj2riOQV7iV)V})ExgOJYQODh+A{E=ay@-`SCzGjJYhKH~r)(a(i#^!VaBh>fAZjk-
z#mo5k`0__~l`!Xgo7?m_8};a*O{~bLQ85Ai!g=}|x>pCGHc+DL<F-ZCe95@9DdKDp
zwO^AvjeV()umxo8BrJ*|&a+j^KHU|odrr>sX!kbvLFc$iCuK`Hd3k`Dy`~46krxP6
zbDt__>r_}7Pch4<N?J3|0FysKz&XbjeflbQfnDP*M0ZL7&M7B{OVF}?WYmMOX-2`q
z;oYbwwY_SAHn^VLMri?ue%Hd;i`4gG1iL<ypJF_h$ivrX7im6w@tJookGx|mkQh9C
z{Z2N8+q*;irVm0_#`J`e*QUVw$VM<gDV^{_)>f}l()}por6VF5HG07_!^KN?&DNjD
zPZ3a-{?6r&n?V|H=z|z8RF`G=V^)a1NOXol?Rie!0u6Sw+m`!o76stAeKuF9sHzN(
zD<DK81PvSHv`bdadP<Ps*s!-M{NkX6pv`w<Z{*w&5fzPyNi5__y;$6l^g^}?6I8(3
z)z6EG%iVV<ZHB6>Ya7@>7xRfF{cyMf)UklcyFxB2Gf#WQE#3S2wWxr&isgZF)3zZ3
z<Cbt`%aqL8_x?{>{bP7~7-J4#N?qA<E(aBs`Pi912fGiHTkHJ~V$*ZF%urG?iXjW;
z$k;V$Ht1@Ds2_&ShJILf>i!(fZK`kqgjmm=%hoK+aLM*YPNZ$!NWwaf#S6M3N^C%#
z9`zxlaO*4kF#0gn(5XZ9AnI^Y(Y`E>#6HN5epN(psn>4>df&Wc+HnznO&qN<Z<h?}
z{9>rgG-XVhT?&nwGj`PoduB3eWEj;)3uao@28z{xk8zt=TT@He?pzxe)T|xvCmh)?
z7~P&ijBb7l^X-{26PfA!ys}pD6CHb7d;V%sk^Ox2zT~UuxC>UEbi4~&>RElR52L~v
z4zrPW@P!x^sBMbbS(aP%QQ~W1dlej2(RIA)GwmT4Y>^C>jxzCj)}MtuHo{5v_Vo9P
zaG$SZHpJ1l!<{h;Xbm-Cr$!H^?fh7iuu8dw!o!DwsqurYb?q;Bf8Ti%<k)mki}Tsl
zUKQJ#&e;9@8@w46<*BXFyvoUvI{;(8)L=Ad!67{$k%X2>%B-si0k`88_$onUO?-a9
z1+3yYKEv?1xVWI_p^zd&QVtPyr@J1%Tk<xf<PaD%lP)<w^etrS4}TP>hk_WSbkln^
zsweIEpr1V5yf?4fGf*i_ZHLK^48T&WpJl$@9r3EwRtQ9$WB`_1=fdF*ZRCB4k1)ei
zVlkKn<4zXO=?xxMIOPyff+dPcUt~TBqqi^Zc(rmwj`(?^p9!4(Z81Pw+g1|R&(iRP
zkOxtDXJbn0_yS>YOJ_TaVveS#)xab%%xd17`*E;k+#0G=X|l5&<w#Fysk)*#^?pb4
zGA*W1eeKb^OR}jvIoi267@fGmpOL_4U2$IPOw;>e_P&h%C$4_)r&EHp_^h6!8Ew!5
z53+gUiTbV6+rY8Dt$t^1Yc+1V{r?Cb>{=y!+`MeM1p{AR9YX~~cJB^{a*5TR4Wy$B
zgE`1Xxu`;E`Go2-fJR&NXN{G*DmK?}o8o1EvbELE@qD+tqQ$9mH&-so0mRXQQWyKu
zS!?8bOxlXo$v4PFJPwPj7AAia+_N>O;zuic4_P<<!vZiFn({6Yy-?ykoy(X`?n~F!
z=a|(McJ0=4tm~kk3wtXCcu9_0Y7!KHzFxf|pBWLvh9n_MOdn<J%3m~ZLUj?ws;a~F
znAf4Z{AoI<D(jwjp}dc>eHrD0UrM=HNFcddF(iz3pO!C!TM#;ya`CP}fuSyOg-)5B
z-f{C#vExx>S2AHaZKw!|CJWk~hgT;2j)=kJG>pq2Y&+sYjM!z%&J+Jcy`VYt;f2&W
zBDPc|y<0W2j~sWDC+zy@WG9FwAmOh0TKp)lr3x4>Ec8|8x(BDpM<_VVDW`QrKn4Qj
zOkyJ`3<xmbV{*s8fHdFn(au6wVT2Pyf%O98+{?$|r8Wz^+mHJ)`k*=8{nfd3W2)gY
zmB8cC@GLqQ8nQS867olRUDs1KbGr<g;&Qc8Cw=y4lQiZcyS!=c=XozjqTP4qnU6H9
z6)PYkPyIN<XRX00n0&T!$lsafAwe5!;+9i4v)GWsOpxtzZ{RwVL~W6}GK~FK+T64g
zb<#ls#Cf$_w@0r!=QC$1CR^7Lh8>w?x<u4xSPnDA>L*+j$|UG_=_bcARmwBm^W{VM
zvfnPtFp6D!suLb|vA^~M8NXmB>~a8*KUwV^?pStfmv_bqdr0Px3*}a9++lAFh`DRk
z^hJru&uepw?P-CN5vngFKOa#$u|%UQCRpy);3!NcO>AvrPI73V9Z==)Y-e7}cQoSo
zX`$;tf0U#op|7$`=lx7%btAt*RJ3N<EZfOujlU-K7TV1V{rt#&0%K(!b5pYc%RMwL
zRJgMy$$&v^x!=!un9)d+Cd*67?6^YmHA~EBCS9J}q^NCY?8xodATvb?6P0e(c0oNr
z!Q#dZr3lNdh~l`O<$!aTK%1xOQ)dzRzY&|8ghvX2VG-n7dY4{aglc4YHhf|~KN*tk
zApIY$;e8u7%b+zRA0q_0o=5$ru_BFFb38*Du}jD3G=c;Mcc`vh`C?w~w$*Uyx;X7W
z%=xd4=pjNyIK-&2Lou=`c=OlTu?IBiK`=BptEPYNjZr6b9XK=#ddEa6329v-b^;G9
zRW^v3+JI?L%JHhVX#(B)-e$Z)wNycVAwvso)J(sop3Atc($fH+L@ndV?#~5fx|$kr
z2~%9#o$1m8#Cf2?xNw@+kBl8a*$^#rD=X|ty}Uf&#J9U%MwJg@-Mm}9Gz#5k*f?`R
zpkisn(88OMvBC~FGJ>8{$=RGyd%O^Nwyo4=Y^1^%^gk$y$-uN&xo$McesS9OaK{41
zneH+&?swJtMEe9IeigtV5uTz{09N<8%?|14herB>c&U+<iGb+GZwoTP-K;%Uki9F+
zB|cTF(4r5jjsR*Ahr{0H%M@I<3>FSPjQccmh<M{hAi&B*;2hFcUb{KY%r~75JFm>F
z7`mA(MPw?Mpfx+5rd(&ph&S69sIPEdOiZl!CU19ClNwWV<?=nvFu?k~!ikw=TM)(2
zx*U9!d~zd<FD}!aqyh+y%S@V{TVMT&XIe9+r=(+}K|W>YjO55S&oKHK=qKJU^Y-qg
zWk``XO2eotn)rV({Sqq(ooRORU8H2HjB1I^Xp$hk(r0Rhlc2xhL$zDc_Y*K)m<TRG
z+x)oq(_2GR%NRjNQs2Nz=cRn>VYL+rMik0!V&wI?t<by++s*V)h{LFrW}&+(xTU6S
zg33>GFms49wC-4JD7a)axip!GuisV)Rb*kQ^2D=WT^{_+Tqt3W1Fk=-K21}qc$av3
zw=uLVIasiOGc%60C5Uy~7jgR_>kF)h!@qz3F77jutdWLY-hY1p<FSi8=2XN2O&y_B
zEzo+=se18nbM=GYTjAG23sp+yO{rfbw!Q)eJ(zE~)}p%9%lVeaNl%<-E}Low_96iF
z^4538Nw6ZWiAM7<%%-+|CEHQeD{1F|6+>!sRU!~I=Vf;i;kPm??@-Megne@Bsa|-P
zw>}Yr-pC^&Co}XT;jdna^rl&LZQYV{s_Mkhwz%S(2pEyr7jOLo9B0AUVl%76c@pKV
zWJ_kx?G4dN<d_dXXK?vDTwG1}D^*47c#7@8lfEf!hzOC5N1MePxOcT<)i18>59+t9
zp%Qe*(A|wo&AtT6B&mHHwu7liHmqosU?nmqPC2P?c-HH1efP&IQ#-48<(%4=?riSL
zT<WoP+|HJ+<6%Wg6ZyE{wq+pMUXBbQhh@0KZnuAl{L<|ipZ<V^ag=~~V#e>H{E829
zilpOIUHEwd%Hg4*-PIn&7MKlb4;S&NyEQS?l)D{#_1g>p`!fGHA9OR}ouhxx8XOgH
z=qMMQf&hNpi_JRwgBcw>*;`u0HZgbHxOQ+zL^BqPLw{g=1GgyV)0vy*4lpii?6;T#
zpgXkgOq3p7DZWV;q&V<pG4UL2!i(??My7?{^30T4@UkJEjEwXuKeN3fHkDbu>t$?k
zRdH`}V=`5C?sj_HfuDNcd5{hE4PivtGhhWyO&l@=sm<Kh_u9Z*o?bj25*GjJJtO5q
zNKLiVZ#KvdEVcVC%VuTky<=kr-@nul-@EV@ngp%xH22GLNktD15Ys`>X^LwEg&OAP
z9nPyROm|wksEWY^dv`@_y)$Tvj59t#)cNDthzZfGJu#7>KofIw)`ZcTnu(W3SKHn*
zetp_1x;CEq&S8eFNp|!t&u1IU+`9#aDauBf!Bf}s?dv*%Idl&zPq3&Do{L9&tIb!{
zI<%V!Qn~Klda^a@i$<g2>M){|pId~v8qeYxYJ^q@lX}7h%8lNShejCEjms*J(BB3$
z@}JKz_z<an(@2+1Bb0I4{iz=KHN$Gqq0)8bv+cEBTUN&H2!)I{AEoDj@dL;$iSNr|
z5)H)Nwb4qpbG}kDA^^ga+K#FyJ`y~EWZuZe#%peO<;S~^MopjX``f9bxJ<zdduOyV
z=zJ&f5Gmk50F}xNI1(0JupumEkBb*|qfbks%7wv)8OxN?OtqXRtzbSYLuz1#??26|
z^upc!cGvV`G!CYkqlZz(VohO>5155=Rfcl((U^R3?E^R4k(5CwrewnQy}PraL_m&N
zob)=)4``0f{ftVVXTfyzMfOw=WN3OCQGT2($THI<N-iri_c-aW={;Dh2e{`v;k>ZZ
zfL*zkjDm>mDwXs1q7QKQ%C>yMQ#K{9nkg1Cx1r#ymUUn?VtraFjnX6ZRYG}QIphq@
zH=i%nsd-3u+Uo@EIKH<cD_`^T2iIiF8SI!3`}JFE7ADl>>j>0kp|qdVJDuXz%mjKO
z<uk#z3q!>YybdB-hsNq}S0g)&OL?e;(H`Z$!M-|!vz_0G)bf?WAhWB!gzuuBqrn`M
z3Y88UC+7+u2L~RnadQkI)d20_5M$y%xuFNZx=b(C-dIVoq;(lKmYR*h?5ZQNvu^op
zdb6S`aA<Uk>}p`vq_g}7bm-2WJ10|>WHJ~WDzTe(94x8=up1wvTlm>~$U}lBNmCFY
z`E&F$HK+7T?dyq-hOxH}89Zho*0%IRLss*(Anbm8QoT|a`Lc4|%AL;_bD@}knYj6}
z<Oq|y&)aMw6j!FF!6+^KzFVCk%(b?D5a}-;t`#v}1TM_+(Js!gZmnQywq0K%<%!qA
zgKG(s(6#mQqJ?XBAD2)jn3OC<n5&V${2hlBnv+~2mq2CM(R+~!a`@sXOdggoItBgO
z%v|a!f2tYg=jW&8;$k0UoqpBj@zaE#`o-43HPaTB=2_nBQtXyw5{m2HGHX%X8!SAb
zeLv9DB>ls6$8_<>yDgClSKl(}G7o=LRaLL8KxikORB#K?YsUCZCaG?tW-g<jx6)jr
z3T9F~xi-;4?gx|ac!u+*TE|a=sIL@UEsSTv9&-Y;=t_@n)~YOp5$va}n*>j;dE@Ww
zwoxugOOE=!j#U{F3wDUtsrE$pT02B$sAX1rkL%&_%;dF4i4@w0d<Bf&V}HHXl~O2|
zZfGuhH_UNs)*lWYm57OF+hSNUji~UYdxGi&bnhv<=O(|(&!Nd4xnxxVrSvilm)!0_
zN~Aw_cXcM&v^2MU@v~xOcLSY4b~QffUiSL>ki8*EPonTxbKqy<OvNjndy|QAj!JDQ
zafXwnoHPPyO<&SCwl)a&r^Tub78R?zyh`|B^R0_}rolwQd?-g;CWr?VG83G{bIa;Y
zH3W!Gdx3xWI$8x9v5%;u834;3ESM|vWX*Uh(d`dW%A`HG{`lAFC?0O!os;c_2LC1E
zmmsLnbL$gv__UC~TTzWQNC=5#Gin){4q4=)lTdtk^1#R$$`O}3FdhRo_29?8Xw&oW
z84g+<n@@gB{<1KjR7$GtnUefRD(#2F$J++wTe0Q%Km2EI<cmS9Mi-m8O|R1-F=*p0
z=0SEy1u80OKMXkj9&QT&6Z_Us*0hBe;F;6Ap%-(4nZzA?EFycZ2EJ>Lmns=9-dW-Q
zqP26QU{ri{HQ0V|Xh`z-DzpXyXvHu|#+FRWV`CExxPKdqe9!=~8CvFd9`S`b7bYQ@
zM_Bw1$q%YLSO%jiUi4-jE}9B@Va-xoRQssE5k@DDX;JdVQHnV1+xd}Z19y`pp#pgn
zF!6pJL%P$9Rn^l=9A^U83CGrO`3aME$5o6Ul0w{R+8`~Big_pcNum9UpwEmr5=)Ls
z8yYKj9BydPqMlAP%O{>|j}Q9+c8ow6)z$53)oD&P1~!NOZpqtvLW980Ucj$a;8QTV
zL1WOt-kxyJKU6fFLzl;B-fqXu2IveOp{$NZ!xc^&k0$6ProRsg3mCP>&P=}BQab2f
zN<Ex;yDc~;rij|w-gc5t7-L;74;o5-J-<EMX1TLDGhtslR-=bpGz5BsY#4{*;&ih#
z>A}g>PaK01Ff_T=nO}Iwz@UyNT)97#{A{V}y;-|9)Aly`z+S?d$Ld%)!^4%Y{*=t}
z@m~Y3>lLcS)t%IByMLV2Iewq;d_^KO4_)8oNtAZDIOd0$p{GZ3*bF)8IRg)e+ZLD9
zX*jW9e|+dHC6(4h3Ix4(?NYe+Ti8`&OOH9Ha`6rh+2OPDlGY`N&rJipJe}ifgK@GB
zYDSzr0^1st^%mGWVpDT_rtD8UL=9wEO*u&pKeVd{;&`Vku+w8AX!Mh~&ZqVM{_+_v
z2|>)JtiSuUA8LOSJAyJ)vR&4Hc|pG)(sAnH7!bC6(e=-YiK#+DM*o+Z?=|8ex^jVN
z5m<^_A4<<#O4o(Jkhni3CNuLlz8#(&v$rZXeKhgraVapsEDGP@&jPCMy!DkJghf7*
z&$;_!n5Ec(cks4R-CFIBY`b4Cy?VZOIEi`wtgCZ6!4+iN#Qui`pnQnRhX>{__7l<!
z0C6~3<cLtl^NZ=NtQF`&P!E+-2-~~{o0GS$Z0dJBW@b{i3@!Fddm46xPLza`ppy&a
z6px*Z>sQw{0Fds2Mn#57x`~C!Vj}N+W6r4X9H-8mho4eB;)F}o*%)Z>(?1P3ruUW)
z7lR{*>*TaKu)H0mKR>AU>YUSSI(>X77sa>ri|$~#0a|wf`*nE$1AUc_+Jy849q8ro
zz{BaNpSoCIM3R`hnIo*;=Q0iXPDb^iX5HHjL$w?|N-C<&vBosr7`3PONjVpBt*2$e
zZtvjUNHMwu$)Q2vAc);-XEE%X;%sj4nr%Zs%q=NCo#Tnx)!=k$L6-uHnU6xk>2qDc
z_<daILS3cjX51D&I@PcPO!e_<XSRZN>45uoomZMIBJSvReRam)VbM}*e|YA?&q%=|
zVA=%px~^`|{M>dw=pL+>7#cx&01c2U8hu&7bv298*e~MF-qx1oI0w%!py<fI|3uNB
zHM$N+6hcMV#f&YpyF9z;j&{Z4*R#;=K)yJkt41AXMfLQ>*fH2xj#Z(VOv1uRNjJhd
zG?yo?3gx}ThJy5`#X><Cu`p1AAL!17umqC*OelTP{1F<gA|m%gZ#63(r?B>HlHD3e
zaw8e++{X*KKy;uh>PNNF)IifE`g(C(@v-c<s7RxKg45#9gYVyO9<+Z!4y!pdcYo?l
zgtSM{_6+toLDXX?dkGysEa){dKf~6)4YteJvU@1^Jqj_KEbKgM*VV!DLjtk-A-^V~
zpx849o725EUr>8aIdobP_;J<l_B~&>#_??hGpqEeMZ8-2_mZh5S5L+!hCY(AVKSVD
zKTQ2pS-qdHl;&&UwpLZsh*8iHEmDi~@{{}db4s&O4CUPJ)1OF&mA#<0t1&ro(lxhR
ze*ExN7Y;X@89ye3HpPA6Qzm@(_UsYzMXA#h=M^#KC)VWs6*ZlzD7BHGQ-{8Dg8)bT
z!4&*vD*0aOzx+?$Z@M|z<D)?+yLz<&;L+MVg{7`9_EuN;M{;g4e&W8zt9pUB@5zOP
zzOw}Z0Rh0R53o80sw?qL$&HJgZ8E(+Z&=4=9+~Qo6A6(F+Z_jeW-E|FNiZfjHRhlI
zZ+f~`b6F~h&D504c1=C{Iw1|$&(>Di;KvJr%sC$qH6AaQw~x{UKpqy;pSyE%Q)b|0
z+9pkX{$~bDOG`4%mfb!>BLf3E(|6HiQhzd*!Tb^zm#1r|MUHGqXERN|++GYhh)E|}
zSD{}^X-_t%aY@UQYz_t$L<GufbSSa*eVSa91qhTZ(y~2{n6_~bP`|lMO(lAGXd#xT
z;_?;X`Sz=*9mWglURQvrdE95+O!PX|cEZIkE|&aiNseR%4kx70{_<kfi~F*ziYK2;
zImM6@4KDqNql;c=4!XFxx%<l#KlEP-TQ(I`a^RE9*Ak3Kaz5AD$dA32=?9a#xsG!=
zZP9!m2YzLGaQ@v6_$-sE>g|{C9sP3SFLw>ig_q#{gB`nY4tLTji_fNQXsC=P8pk2f
zGVR}9V0NF{{ut?&#G_U?eDgb(C4T@KoXIhP67Pk-yh@Oi^U73DsK2K0guE?f79lSr
zA#y)Io~_GAlr=cX)m!CYlkA&v+E^<Yr_<LCnSq3XCC~d2y-Oo2LTn7XI&(HeEF&+*
z5BDvEVC?Z@;Y?<u^wDbnH}&fZfP@O)typk0qCBRO>{9&MAs$!M!ygydJ7)&<*vYS&
z&PTcNqi|`W4|QdYwiOe?@~(#0_C2=rUSzz$|NJn^QCrCSij&E>Q1V=pXSaKFMtr}2
zWJ*U%1g*%Z<%i`P^umIR+nRX75upRSaCR2yp+7C+vi+g`y#A<1SB1`eiuZQb#}^|r
zS)HQy=t;7Xt9zo@tJ^2!{t4B#45q#6XKa#wj~!y~T>SE?Y;{(?1H9L6eK-vQReoe0
zwnJqPPb79%M@jD0|I)bWf^>xDeG`T~Mu7b{m8Xv5{jXC${49atwVxgp9YsO8)ih3y
z2Uq;3!Q&zLfm1KdeCz21_QOD@^30`4uWoX~zqA3r-%PMGm+<fosIGhwB_!-(I+EYj
z%Mw#0{{6D`(Yxn?2lk%nfR#b|_y2JU7Xx?RzkfS*>i=i%*pt7%=KGcZcLG}E?Y}>~
zj{I$!D<n8PIH+0Ymv)nH-}`VHj46&=mVkaJ6Z<~`+pkKQsN2Pbetxetn4VS_R_W+e
z=~a8$ox~IKlN((m1SK(`9JYGYX~LbjHdt6%_1}~S&ZE21_$HF?)*z}NB&@9Frt1Un
z@XJ$7@Pg4CQTxd<m*WKQ02@qJxfaMJYyiXQFJJA{2?eWiYKb4M{;OBb3gNocWUFs*
zUPN?v)N`s*I*5f>WWzPaQn3Vk55c6=v?Wv!>CRvO47d-!hYD}qfRSwkZEr+oW~Q&N
zFR^@kdwW6FU(ysdVqjpvZf(nzp;F7GY%>{&J|!d@o+UHj-x2Lv%&hhC8f%4VNA;Nt
zBj8=G!i)$`F>F)-7LqCpkU!Z%T1sySy8tgVB-!lqt*4I`-W&?OSYP+2<Tw2pX>4vz
zQBObNK2T;)qN(<mH-?j?ii^GODP?cq<BdLbxY)<GnL}8USe?n+rBrB=4Y>x&^B@Vx
zD$y<1Sd|E=1T;txWNd13%+3K1sQs7~<5lvWRTDFPgc234lCCt>AparBzKrJYw>fzT
z?CDF@$z^%9X#G<t(~ecp@H;t}n{NzEXs!%RW!AF%K*p(8|1k_?zVd-=q*Yvfwi6zb
zUa8HSYcSJS`eLIyQQZ6Ys>y+nZMtlPjZ$85F{PkG?_ePrEGwHeu#dlK8qBrp0^~Qf
z;N}5zFra|>mepgjhhv3Z^PxX+)fD_XW?{$z#GK%rS4yn4p<XbwqN?EjcP??sWe^j^
zJ@+q5&?lPLs3Tsy#ABvq2e{3aHeWcjiUvxog;Qi#SEX+7S!Mm*p6E+{FE+0I_vExL
zQw?}S%Bo~GxLIoZ;va*-f*C6-tKBt7r`F=($^0fh;i3Ew7lB8XlIOA#4ea@qf&AmH
zWFM}B{)FU_Q6g!B?fH8!e*(W&Emu#3m{IzR?@RbTJ*Bp2=#LUm3kd+F1jd#Gg@i0@
zbAZbS1b@KAS3!O+c{MUMH4N?jz|Jl&M*DreUj&TERKUzwH?8lFrGDEhIX=;;F#N@C
z2`R~wVv9at!r$Qqd?A8eo6gU5W$0kOi(#t4pYzF=FMk*Blo*Th%#k}tY!JKf7ZD?2
z#G(S&*ubxVu~F<q?a@&25^&m9Cu%PcFUz#EtpOuR`G<oZ!fQr^k?}Dz6jGwrLn=gp
zlu9K91vkXJo^MV!!}L>Es;s*28$j3ScYFxTT^D=nF_`w@VeQfXi@Udus&b9jMRB<l
z6BS!P3=k<XK%^B6LP0@6kdT%Tkd$VrfC$ndNQi()OE)MWNOwzjch`L;!rFU}d+)gC
z+<nftV_g4PE}6{v&F_2P_g7Dd10h8t;-B{PM+R;||M1<6m&mJ*)Ya92ni?sc`tI*G
zQQ8)CqGzpl9|c$zsJtYA`vhMx4Ctkt498-mTJhoq$d~|RJOUUIIG`EYZRjN#fzptZ
zn=7`l=&b^(=SV)`akBt7*3T5$(A?}rFG1jhm6ZkVD{^;Ee&Kcw_ZF&X<TI}z%mIP7
z=m$Z!2W!+O`<Onx*=yd}->;;u9-f-G09GC7K2;2^xIK>|>i9e6+H7wnHLb1?{}N&h
z;4n(ET+0%5F5@(r{;F2p3uPdFuQC=w2VqY<(ACOd8ZKjGPS4+gk!;+2n`OD1)#@*o
zTyVga21B<hSTE}%>%9h-V>@mbxJ%SevuaN&3k>VL5SU-k`wqnXAFSZ&)bMa;b3+3l
z`n_Fu<a*NM<KmLOz3uCox^Vvd{e{tzl9HZyV4Iew3q=;Zk1OqP#M`R3CWZxF5%Iky
zYnMg$D7?t@_4d6?(kWCipKsZF`+V@kVHL6af^^EuAFpm92+oYB#On6!N~~&Xl4>Pz
z4D=2N2^9lscV2!@`c6_4W)_BU3o{rx0_=9UY$iIDV<DFTvoCP;(`;R4B@h{r0Ao>-
zrna{~P5jgv7WJm59!CNh%b*ijoen2v>h0V@ap=UfOBk(o)&fwaan9}BJ;RnRPttpZ
zuGCOVkxn>L_>ncByG-49qN?Yokh?=!l_16sn$Mqmd>c2({Swu2`<q=LW3yrJ9x}y(
z3I!uR<b`ohYIGZQdyX<dTTU)}bt{L#Xt-GfI%tsWd$@3}DU<-kfh&w>P>|k8(>?V%
z&4)>vwP^+)AAP-_TU8~vkOlDPgD9y?2>f_Zo__F|D$YQneov9eh1sqBJZt1FF>?L$
zWdvHv3bsY|!mMf_x4}1TL69F@BmmA=iZdKx_t_30W79}&AqI>%<xJ+s<-t$#XIAS3
z0jvgQpK_iJtVW}pgTWpikL*38NTEa~+?p}qjbS(d&ucUFAAWUyz^`B+Weiv+fim~7
zE=)`!%b8Xtt=swZYrMsm{NFA!7te@^RpZ147E^-zX{>@Z#W2NST@>ysP2Vl-3nBOA
z#bnyp2#eRZ7jjn5U3b4Asj1COoIk*$<Lu@Ze`pk}&nu=XrQ<AX%8tUqTZ#8QQ23%9
z;BV=8B5ZlbzqiZT&Q1-=jSy#nC1kor{g<ge5$d}iQl3>_-etiXOMV^uDoZlHcPsI%
zh}VV0453u9&<mtoI6oqv{@``xwrn0L$73!2$lB&`yc!K6ljZqK#;NI)(wQcYaD)yI
z4{Nn$9X@vGakO+Qs9OSEWURclrr3-s;QRxC+%+~9aQ2Qc4NWMd#t=j#WjdDTxB(^@
zstVC4^+~J>H6r6MTpr7{X>Kqpv<G1EC^%%PdNh)Ty(Nu+_?yg5{mU9X{lh5RVk=0$
zHH$i24tH@%?jzTMX`>7dE<Wvvt1RZgQofRtxqp8=Z>OT|o)s?t5akrf$&g>u-ti)S
zY}wBWCx;vLZb~Pa+X@r6IE^;;`DcG$)8k{CQVxSjAxu<gK`l{N#!56AZld>a`*PPU
z=C+dFqi}ID?oOxU@x8x(Z`<v~FO)w2hAR>2+I}K|n>QX#0B`j;P=VUm%fOT2k(A6;
zQ1C#GO@FztIO}IR*}Iz}#;og06i#!a(boEKgC~;eYd><;h3uGsNHXZGNi7unLW62v
z{mhflq}%U5YBpyrm81%tU7fFna7xr4eAJ>MO_}~^)xD?}Iy%l}0bG^~{S#t<VT;jw
zU3emys{1H0q&HvQ&tq~ci&De**#hBF4xO(i?|nKJodLHv98p(Pq#VYqR%P>%UZXit
zbuEOR)ssOc(DAQ_pKl5*I1Cb4hK2qDuFM0YT*OrFUhjJs`=SR=a+wwflfT7Ey_sk~
zo67opws|1_sM4I_P^(yxD9`YmOI&1c$f&U&u|yWllW)($9y%Up{ZYcaJflAAYwWWW
zr#!KB^iDTf*IU!GziHRc_wW1MPyOTO?Y$7M>IAU$3hY2&PlmsB)kTpFN<$+9pfZqL
zKFjBdBd{dL#XaCvEK~>h5<<=Qo59J7(`xB$jI&;~(ULz9^Ylk2EO(&=YaGZ+&HOy)
zdF;yxKnRn+K1r7J=iCP6M&|hLxo6(BpKb^h=0Pf;R#4y~!h}?)aCQFsW(X>XO}<FX
z(u7nJef^6U0uQsy3?#uwf*&d0)&{VWge*lv4NKiZoi#tJ*QSXEHQo$=I1s${{zM|s
z;nCBa3UgEe?*7HS-Diu>4UZf=&*Su%<P!i*bYozTLCL@^L&*5M)jy<M0YD3DwKTPP
za?=N@=`tc**f}K9Cu_Da+>v?}h%s!b@1-DNKNETh8<O9Iz=)$5Tz0kZRySNv?K^%M
zbRRloV+*FE%LYUBYDdO^iB2HrGKo~m0*Gv|BCrKrp@e!u^UI$rT@@(wZ>`D97bG+K
zk<$P!%w{^v3kqtD>YjJlJ|&)vA0b1@q0`=ekVY6ndb*XLt$i->jccT%w-+LGG=14E
zA-r3VRj;lMikZ-^{QYI`5cLs#UBf!9`%xzEr4ok>pS69F`RF+_$Wp<;VxI52yRY1f
zQA~HlrxrlM*tj^?XQsm`J9BOJ&^?Olr{T%QWZUWZO5cyIO9hS#5fV-n@AH$BSs@fA
z>flN(;(x(UBiF{DK3bB+aQN?;q?MD9duU4vxxV`QN~p-vRLmvO>aX(V;6k$}hBHZK
z-1ii8KBd3Bw@^Oxu3xPFK&Sd6IuqkeU-su;9^Ot8eh*k|qE>aZWp?Y~A`e$>Ey(w-
zhTuVuwy@8QRL9FKIbt5>a$><@@*pE+N3zO2s*roWRCY~M?>y)=q=37pjVt0dC+2?x
zc+^Z*rYQ+IGnJkvLsQE!Ze4;V*t<hTAh;Rs%u7`L>7?BjCRBg=HF0mb*APm|Q7#jK
z5bxAfl{ZEQ4=OfpE%)b+dKB*y&{hx^VqaVd+muGVUtS_mQuEMug+4NQ?FGSe9JI!z
zgO8YGGWMHfbpCW(R1>4Ajd>y@3n|^1j+LbdiRgaL6jJKqRE*WVcl8L#rJ6}*sqHW_
z1QH<yh*R}c-k(KPtOH7UnFmJQ*8^rdF_KDas(orzDbOMiq1e(j(M3ErYV9aVmkm7R
z6KX_CR&CjA^X9X+-qm2cxtRz=L`6k`G8__p`cZho<dZ2knteUV1FqEcI3Z-~PQ{=%
z$L~X~r3WY5IAMV|l-wCG6E^BCVWX0+D=GC$w+cQE`odlJ^J=jQ%C$wj)`DrN%EpV+
z6CU(Okp%(wEUBOs<|Q|%{M_~O(!v6rAb*;^7Mt!H5;2Ar=T)U5_tMHrfRU3)NQA5C
zciUH-mtK^Pe0<!Fz<;JY%@-!>!TciW_CJ69l##hoRFG;o;;Pi6T=Y;}ZzO=1f#=OQ
zp-O6n<cUB)k4%x}%1j?(m-`2AZu9VroJS{hjYK?$i+>#BFq{TKkAZ=A%x@VpI{PD~
zjEsz1xANT~mWx$rgo-Xz0|aa&@87S;+bPGZBM^sN_EczOeEbxO66Uj)!DN<*-zo5w
z<zvOm<@pzRf*yaDg1ZWMxcfbjlY~t@4fi2kreZ3M1RZB}YESNW`CJ=Ea<-hGKX0W`
zWj-2jd#a?#Y&ae8BzdGM&bS)9_L`y^wW@1WIv+UIUitchKz?2<TDl|W)>ZAMuae<r
z*6*+pX2y4{%xZ&aX!-smjWx4cHAF5;1Ll(52^j2bi(KR$kR+zPcI~D@KkzjBc5pPl
z(f*)wHn8}oMxpC1aJLu%f8#4CLzZhk+5G~b9`|p%d%){+r4c#Zwj}UsU})*a5id&C
z(l}}eTADSO&qe!*o?NN_8dM+xv4#1rJ3M|vH4M~^{SE_SwL*7*Cfm9y+2Qjj!rz+B
zd{D_|&vE!zgB{9X;Hk_hG*;g_AX6>WOYim(7{4d}Z02-)`FDX%tCyrTHV6KwHOm}W
zNPFn!LNji*sW!q#>&@T9#o7BO`I28&zS6mKXZ6w7ho`6IjxI<Ls7(jP{8!^_oc9|9
zK>YJTl*@19A<t6L#~IH$f(68a8g5ONe;|KW`YOC$zPpKf3#yPP<$&}rB9s&DMIpCW
z?R?l2ee|C;R{cZ*;d1kdDHrr9hH67&u<XfKAa7T)Bi(cGHyOLg&h;&n#j`*S4YL*F
zsUu~cjL8|T*>e-q8HQc?J?$4S3n?&bYco*~mnqw603$@@4^F#fk-OUH?+JH?Gm>!+
z!IX2k3aFIl_E2GpiSZq!TmJg%FXXBhXuqYU(DB(sPIOA5FDCTYGj9f|goJZ+hd^o1
z((TDOG+6h%x4Zkyi_e-XRUz@oS}o2uAMboG<^aw5v+*?oJNE;S)Y~(YQ&yIxQffo`
zL__@W{`PDm?S952*K47|BZK|@lhXrd1-|lFOhdCcK2n@p(U1KeBGW?W&nqJoXDB@P
z-xjBTev&JVM&MO%nC=TX2I2}-U7r05<ve#Hf_Q}3dI#eD|Juq^EOcd{uP>B^{=R4z
zzvr%+lX-07H?JPkN;!G^cG@&EgLtlG5sEs5oJ(eTl$oY8_cf$ts-ZzCp_d5-QA40i
zo9u&y{ce-WCoYfw*qR83zfdC%%L$<by0$24VON5R%~s-R3U<vDvrF-YrGv(Lef(u#
z<H>Xv7v7i~kxGqEJkb6b^)O5@qVBmHwTL0e<kZtn+;>;>xy+!KIBk@B0-`eS{%*-O
z5?Ry*hQ)7ac}+ArdiT*XiQ>x=VoV37yj~?ID>t-L;m{wbjS%T&kj#|LN=S@F_;G5u
zEX%nYxl^L^>({wk=Fa-G#N8MgJDmro0+JJ#Bb6hrF3pa5Uo{}WxLD%5DIuzpE*>SG
z+f*b-;$|0S_c@?`O?sECX|`yAgq`M50XFGH2xD0;=g~s%@%~m5KVsG!e-#kVjcKgb
z8jp`#%xh&>m@n4Q+I>KYaCTtLCD%49jdgvw&3E|oSjHI)`Cu)hWENHE;WXYQxC66k
zSvx`O6nILdO%GfV$f56u3ywvGjPuuWVN%kSs*u{j@Pz;s?RcU_pyj7X?i@Pv#gd%|
zZB`i*<Mnurlaob0QCu(f>0uozaLNv*zvDPuKWcYwx5dJwG4utf!#$r1q*3r>W!~(D
zNJ}l5Crj=-!F|-`;=HdNlLNRH)Oa`^#D@baBSgd)-)&@BSP}9?r-R9f*v;qdSxtym
z-FY?Nl=zYV=}Ld)R`2Dp?G*~`-&escB;-PNh5paD>-NkuK_^>2O3HvvJUmjE+k7(b
zCv~7ow7q>Xv<4EIc}y3X<#XQnq{?}kEKcXoXaJ<TH+ixp-LR;*lra}19jXU@!E-OK
zq2z&&m3C!DA?o|?T`zllRF#gVpeslv=-$6ZA>4n4vLj;1D}>q4%Tdkp$FZ`87YFNN
zo>WIar{5VT5h+FX`DPb8*lSOCvYmd~A2C~7%`DrF6G^-3t3}QmyQZYEi)ho?>|I^6
zswRMbZn$ubcNca6$UHZ|dVS~a>Zs?MHQTQy8NRdloNmu<ICzFk>Z0W+kNwcK6gJ)7
zD$eUH`hHS<4*8IZrIQHr`Cj>=U^a@>(9%GA{UMJldi(gCAp2;xN{;v4YK+9~vuH?D
zm{=%>`Qq0ai7?SSRkC&p)a4%EcuU>EnPH{gE$qX5t20l4I&)t2mt#dJ^}^E9!jkQ3
zVT{jZi1Nj7Oi^Wf-aHeRcb1Ckn)HpGWV%vG)D+IAI8J@%x#u%2HL{j{Qc|NP;_{^h
z((>?@gOJQT<7ltbku!jr6!;)XQsc(D=H%35P05IsfRvI`iq`z2oG&_GR;iwnqEZLr
zuV0%{s?g)%IWA7E295@=3kTWf`Tm_g3yjQyx9XlhY3(nq{*gsHP~61iH-CHo!xaAh
z>$fIv{RUdV*VpgQ1o=!Vv#E)RbhbrH<)vx+L?j>_*RGi*N~nDKvKqiGz)devKFFee
z!g}YE<$EbVLGP6c)2&7JK`Vcj^L(J?XWhAoA)Y@I{o3ZwOS5DRtPHKSg};AyR{gY(
z^QuZs1C@;W_w|Dh+;-1l(hfu9s5j;=*KjxiE>l(F;bU#@RVeEkL+M1xLFc`covg9C
z>>a!kDDWcj8`q~dt<DzoApfBo<X%YkD2plwL9<Z8>j7sHvsC(d?W|>B-UjMJz0SGU
z8|z?T=qn>#6UxzB<iP<&gaZ<ZmTRq=jqymYWGQl}<1z!y1#2Q7-Jwukx3{$#E3aiy
z%(Y>JF-Wkmh39$p?{c~_3n6IuxI-VJz$u;b+P5i)9yBG#wPah~vFJmUXN>I)5r)|g
zzJ7CwLBBF!hro>bmH`YXeT-`PD$C=X2npHA-El!(UL4(VDy81kLS^UEXtF(o7R`q0
z-piz4h1couiYaB!lfu49m+KuZ&0?XBU%95oQ|SINO;MSh-ARzRwp?>$(Ku3A;EooE
zg^ygb;u^^_qPAh6b4jhjogAj-=Cs?QXEx@cqGboN_d)nduDsBfXH1(l86MyM&Jp9E
zt#|8omr#2k3mmM-D#hNTBB*)Dq$)H5HU;3XtTA9b%kD8_1?c$dk2MKMX+6%?s&ZF@
zUa@9nhQJ{ilm9%f&y7{QQyW<OGiTcruqtWB)!S*mveZY*`dzdrDXP`zDbAeZ<{oKE
zc-LvD@;*f92sCO<)_$DbvbqX6;*leDtbSka`7vvhNym7}j+wQFot3*&Y-M2%db9C(
z#ifG>yFmDgDBt<8kVn{bZdfW_t4l*$8#eI&Y+Y1mg4p}&;@%S@jYjuZY1wt>ouwAW
zJ90rJi<XL){j63>QAE0G7>^0cpI$%_21u(`OD-q{28a0)3?KAekfA1NwH*J(&ZhtC
zI-AmgebFVZepgLO<^ywY!|dCvuZ-fr*j}%AUPl@0T^==ooM)QJe8fIKvRBy{6q}K+
zQ`W7<Mk|AsQuU6Oc*VS>igG=RRIKDDb!D+v`O5Ng%||alqkFri#9yg|)iY4bk3uLG
z*nC*1ir;xI&b#J6?*cVdNsq9wu<W%^U$&{nru?>V@~N};DvU;72H*Rb^{i49J*&95
zIHWn{D9)p0Gxtl*1(TgVecI6xLl8SKpV7?^&$Ifw5tngZG<X{N7`}c7Rf;{ITz*y<
z#IhHSCLynACHVtmkdkmcTFC9fu!_U0NaW0k<o$oG9njM9=H!aGW8^~PG)il8x-GnL
z?x{;@A}Yn@htb>zyj+VT&M_SU{+_XfF(*opj%R?pa-j|Qp?i1lnXj%qySG!R=T-Cy
zIWP6J&od<r)uYip65ddK`Me0a_1BMuJcmKD%*c?XYZEl|B3-n-nno<0WTfN#O}6h9
z#?S{SD`-|+{3u76^cff!lmc$LFjzKUs5&yyzDpp2dW(~$i%Za|$?|w$?+r&fKT|#~
zY9;M)@`r>Y`+8)t8&kGFBXuj|<8LXiUn@SI-;bj^=pYS=KpsPOEL5K^KML2MT$&-Y
z*j$AD*js#9>_bioh48ziDHZOTj93hRv^yj=jgEuER5Guy@Rm6BizKCVpALT(r5|`4
z&CRx}%HycDoKA9$54g#-W>{ZQE=p1?*luuFb*Av2p?W4a57b6n64A?5AW~*qatL|)
z0)GUVC&SusgRTOj$4SH528jkkSND;SxZXlG4`$*|T#jrisgDMNqX4&`W=|P~h<Az0
z*_a58+l5)wBF@L8Ucp<DXylf!FX<7whrFT()EK<K4^$VN<X&EE^NT3+=MK3kw>df{
zI<bQ(dRxWyyHxjlBISefS=8&oMZ<EMlX*&$g9!J@O3rn4OM>8;u9p)GxqBNU-@G4&
zY$4t8*v|yLVn_#{Z+iSV&n@HH?^44Dv!zAl<*Z5m#Lv{!s9Wqi{jWl_>Fn9AuROdr
zc{r_9c90OwdteY#-rSrH=G-5fEvo>>;MfDzs?^g0QUN_7H}BlP|0(0M*1;%E)<|ti
z_lBU>JPK=kqaK=@kkH7E<1o@H7Wy+;m_OjKIUyw4W3{Qw@qMm+jn<^==vkZ291@yM
zVUBUG`T6<t^N#=Z-(F@<ijGtKw5AZ=l;>ziX4dh#zSwJ5*6zmIxLgm)_y4}J(PaB7
zSAfyjp<^G0l^SaW$*=$WTT7_}13%0wwo|7|7{(EVcL_HSf5s_bzg52E;T7Z-4?5Vb
zjF-C<Uay5hse(IBu`A~n*@=HuM6#0i$sbxCJoai+5#)b<N}TuV)2CA~a@^3wm@gD4
zp_ca|6~bivar@X9^pXSrTow@zn_Vi^u&Bb$EzJ9Ob6YGwJy0&XF|M)DCDjvX2+1S;
z>)ELz8HjyVMN<D)Kl=OcdCTQ~4Gq;z6$>85ohekkuHS_0sQ<3GKKycKFhs_T_=?``
zR~wSXA_AZB64}g2QH6c@Tn>~@NRE4*zZd4^-Q4^LI#P9k1nMmk46UmSkRPF!N_hPA
z>C=ACyY~o+1w`4=fbwCYdySpOWNNXt@A1lwjc>cBpyW4iRUdvV_&p?#E_ZtcwUDP&
zntrNEoLY50#O>}|$$2HuMSTDM>873Qe1_>%Yu~1LM&9!z!&$=#3S7>Sp@H~|qI(=T
zK221^fTVlCSjKJ()-esuQF?lfY^N;9BXe8M?%TC%Lp;nX<wss#UP(#L8Gp<Kq1l#&
zfVk~g@4m&o+<!wU?mfnlLLEp>1szgTs7jnq=VJOW+LlewpeA}D3Ok?bP^Z#TMod(q
zBA<^i9y_)H6L`T7qmJzCH4OSP_8j4g*mLYUnk`@WY#jlSuc`5ccUN7cH>N&fpUZ#z
zkk5B$B*+`k06ktG{>c6#E7##u(XNy-+S<mMo0qyqrTFtARMz5OPKXlQ{*7jeDj1DD
z)Z4t>1-(OVwl&0dRe!k$Db-T&_r)W`d#3uVa2Jo0k%g~qtQ@Ojm-(%l!ykQw^a;it
z$&fp{qH>pm{PwQPv>um*PMoiFzoHtAo(kmKCV@UiQ&OYh+l^!`84Sg0Qjr?Br0O|^
z_Kje&s)7baRKkBAFsG}Orh$SJJ`=CH#-&!}E|sW0)@;;X;yndPjw;O%NINtqjX2N1
zGeiv{2Ai|fdGT1D3sLChgg?^2w5BFhM0;crvw@ng5A@K?8K_E4(r%N7`W|MfHI|8J
z-4E49XsfHww*Oc`Q)Ow<;^ky_?Bdg8h&xOV)|wVLK1afM;r=J*;ATufr>CYqGOJ;L
z=z(K5O+I%Ks#+k^=>UxuVqX2F6xA^>2%4y3(S(7#M;XxApl30DY)I5_!U{mbLw5Z5
z%t-SXBp8tYijPxvb$5d_AF^>%-+DJtZcPI<V3J#{ifW{&#5<nh@wbaqH!+#53l=yS
z0b!F;2qQ=LKOd|qgq0ozhv8srrma#Q^fN%BdGNGd6}~nXWYPqU`zuaY4Og6=gHSAl
z5sXbuv2V<p62ht;4?^@R-zne&Qd1~O6e{Jsxqz<(H4!<a?$*1#pb3+rQC|kN-j5$X
zfVTP)qJt1B!85S7C04w<aV~vleYZlyE)o6P-`^i?jG7w$#SEoFQCep0)`zXip3KfF
zmAgJc2=BJTyg3?fs03pmy8=J2cSo64o3%^P$3+M+Y5xu(V{{qd%n<Aeq_~n6^cY1$
zh23~8w}i#U$BU^75L20ZVwxU9$@#Lqv-9&C?z0oYdDWI{T-xRSEtq$EYD)dJsnSF=
zeh=!G&xna_G4o8+*bXC%u~Huvn81Wfo!uMkO==Df+GE&>0X0zYo=gl)f2=d9Cr^Y{
z@J!EKl}&-`@-}-Ycaa$uOz#?zym8})k1jv|TPf!hsD&y7-Cl8lbK--bRrVK?`j~oe
zMxO7ib}K}19%tQ2dQBaez}igls1rWZlKflMzVtH!8v(2YM9RFs^!~`TodmTS1-i0;
zGe-MCbx$NE6Q4EG$>-eUB^`u*P2%%r6G$Zv{vvyDg@xsw%b6Z@GO<#{A|J~Wo7%#h
zc@s-xrA@lTrvp4dG)(uRqX$@mbT|P}PXDJwS5ME)SE8~R`Y)N8a(j<m{8dvj+*C^s
z$-J@VWH^o!OrZ{eyN*U0)(f}sB+7gZC}2iNB{p^NjmEvr&bCBb)6drzPXl|kFGec_
zBEBf~C@*!+VgDY2o5&<ECD|vRY=$cRcPkv9(CIom25~Zn$Qwv{y3LC{O9l0rH6O1*
z6!-OZlGbnXQ<Rnt$oJ#n!QjeW90@?laC5TJbbl-{Ny<^WhhO<@4GH3x)5gD?e|XSK
zq`sUef=6J?lkCxmkIoka7`Xq-bfaVY=*IRT>M!TNWCh9PJ(S$MIls}DwfRUrb6H|A
z$bdM(#?DRv(@P*XP98gUOv@7)^Pi?~%|j_MZ-{C@)o9zcZ3C%0CG*hAtqWQ^GygLs
zRe5qcBYJat9)JCJ#b={2?w0hq>FMd;-{e<3=)Ho^Y19p)>1e2@_YtD#*xH9qMW5MB
zI25b{|9bWSW^(XCKXU&5eKEbsZac{D;N%zC(s^-H1MHOev5QvXY#bb+FgDwTvuFx>
zu~yfdHj|FGhrhi0$Jly9U5$un?NUC00=E8V`@i|ee@|3w<L&-;=#~9{_|`}O&>fIU
zH(UWWzZ(=!ZR1U;cdNDSVm~iZnT(>U&)Asb4F;=>Lf8J^ZOz08sDVype1=d+hEPAb
z;lXLv{0gWELdI8g$IhL`<L#>m%$qO2POcK1N5`T-V*iomYo(sjbN31&lUJ+9A!r<m
z;Y+mV>({TL^;4Iq5em>V?R8DPKdHq=*0cW#hW8lL-z|SE`96>(ncvdm?+WZE9DcAg
z5daKrI|;cjrk9wd|Gj-X-Sx=-SZB91x!-)lcweyL8QEmC@$Az)uf_AcTzaa{LHvRC
z%QRvfWK0O)h04lHPm+d3wUv}=5;c;sm}Rm@Q=k6$jCpYQ2z4k>ca60XtWc|B)ojo~
z&Xd?$S2r4yo$q_?#bAGB7ZkuyPKpkJhS?UYNRv3+-L1d6{1eBLKq|_VsuYZp06sa!
zWAS<R1P}z=%0&slnS2#$Y;1ggl54iR@Jih9FBeOw-`r_AxUn?mt&ew~e&c#GLh(AD
z#F<WM0|ydn6+ki0j{#;(@<e_N#TW2_GY~C<I))5J<6)xIP|7~aD66inz^?Pu5=MXj
zY$eXN9J}(O^KUV+c$`_vB_GsQms4Sy1uT*PIM5I-0s}?KkDyMz2px7AX;LXEDZxf?
z2!ZN@<Y)`*nV=M#P>=Lq8*vR!?LmZi-J;y<&0c_kWHSImLf)4>-gJ?w3!NKncmAZ;
z=NPx$k85*#wtJ~K6G?^W9qa#=9&Ae677Q7Gz)^vpHn`W<l=K{!jc7E1%5!o)3)M#l
ztu5*yLRQ`Ws}l%AdhzfKy@FZhu<8;hz2oo{wd{9Z0?H@Y8RD6cFHJ&pC~zFPYz$Fc
zv=&v1Jy*cCdZ5{qmlq7A9ePzRx)?4c)a&$>Md5?<kc5f&XNbzB>RN;ECa{9_x;Ecc
z4y{`p{<l>{Hl9FxJuVuWc#n3HS)YyDj%2AdYlX3VpD&Asqtwf_*3cWT(?oxPwH;;$
z*;)f6J8Rin2c%gSmH^gBlu4h3c_oM0Jmz!}K)aoa$3){KDXH#w`<BEWVC8za5UL*#
zS9IoB+pFJ@d7Zv=!(j6MG1^}?-4KjDa#>;*z)p{H41WSKs6YD$7zCZ3=i7IFLJk%6
zW_yLkNiLH^TH=6(fUa!RSN5EGk*e@{ZMbz<*uZGZl9@RVJUE2uYF~J^**y4I>V0Ji
zBSX>tst`A-?6_2%zlLM2LBIuKX#OoOj${|f;_^aq(C(F$m7bQWD!SiE4h}gy{+Fnz
z9y5N`*s)`tJo=xS2(AZP`w=V)g(#?Qs*3!9eGw7Oha9J}5<l3$q9Hy+{)$icapDdA
z1sj(f3_Jj`d<+aHQa`Lw$-1N$UHOOUJ;O?U{bUF&j6kPVA!EpcAks=nN<MGRAXN6G
zOMuQ6*5ol`P6P2;kE`GtdK!hf&!HiRChiRx0VwI69lD*uf`IhPmD;|$xay!c6e|iL
zu<!9rNm^8MMn(0%tiQ-(D6}1MG1jJGUAhnx3(xzG01t#wbGnfnfa=iJL=Y!Pm`SHj
zx=zgwv9{+}3qb)|(4TXmBliwc!;kC+C%o?>l{Mj*g@_|U7OP5017K<%=O0XBnADar
z5O%u|#R!tbhoQnU2;CJ}+`p2dCHbJUtXzs@!OI^9m0;5<P9Jdb`U>4xWzzKHRZ79;
za?h)9nfZ?g%~QRf`~*A`kg=etY3TN)^vHz|Z6QLTI}e__=f_@}pFg`|8gQDAIASY1
zi0P;%IuLa|XR(~gu4;ZIz4}rgP)ZC}()1g3si~#|t#OZMr>5K_w{D*XWKVu=bt{$Y
z$!j{-0ddmTl8LvW7V-k%4)zm?P%MtyX_o`(>}#kt@I+8r3i7vPnLn9{e(uM$aXeee
zeRLr;1*ty4aAXlT1m~gjE=WYzvHfk!F0>1!34}XhNreD{Bq*C^ybR>ZvUPEJ0R3}-
zrh*)2BJm~8UAqRiC#Q}<Mh1p6SL+1oPQ8asOKvR;Be5W?Bb+|dyww2z(AY#)Vq<6K
z-PPP)A=vPZ%#~rN@$u(DsN>ULC+FMjI^?|rH02hgBxlqN2`&h8cecLRvME2hpI(6n
z%Abat{e|n17sWT;mgpkUX8J+&KQBSL@h1O2%NG9k-H^8p`#wQ9!~NQ+I4!I$f^6F6
zbJ%+2k%Gw2ceOx+swgY309<4|rGn9$2pxKbP3d!|?tO&W@ECO7EmwJQ^w!E6&I~H2
z8)@4|wl*{<wPy4H>WJy`=Z7T6E@HS74DtA-`AUg%@IjAzIq@4H#;^A77i0n<9tgQG
zXuSbS&^j|DQEL*0O{wR@Jb)ey2}M)3;m9N~q8ptQqNm4Vk6ahZK&BF8y}R#s#z19)
zT7=1rj{_O2=oO>+@ht&7#QYrq`c9&lvHtPe6co>yAy&=0$U^W3-=%S%LA#yqkvhLG
zMKrfY9XaMJZ3!>lM~3V6oS@*C9j=eDkI{Z6EE6R~aqwXEmaQfjCMTIMMPnK{Go2B*
zd3*Mpt^4a4+7y#utM#yIXFxjM<)ZwVkyNAu7%0T6R58`K%}?;@$uq@x;ot1=!G&Jv
zSic-^=VppIDu4L2x;bPB%Kh0OesP-?%9H5=Zl36Vs}uR5m_r*z$kZ5MbvOrXv=qUs
zxf{8yB3a8AO|kL0wl#M1#XNLRb6cdPleN0gUZWjuN$;A`(7tDm;;=07R^&bjZ~+uS
zd%&St=EEXsssfJ-3_=*T!C?v$Amnh<Q%hgV*!7=THYcG8C<E<#AT=%-%#&<<Q>%aS
zn)r55Z#~Iv_T6T0gd4R`Yxdf=6D))3<#DmGn6<chfx0jmm2l;mWO-8}y>4#_taMFA
zo;8(}FkHMiEj|P+*}V@J#bg2bd88_EnHy3UxS0}BQl^miCLwX$tQo#PRbaF-G!*^-
z)i*xdS*PPy6c#3b_7qE8x_nu5Rp9;63%*?1t$U1(jWZuA+?DCW)B#XaiA)n21AVpH
zT-!Mm$TZd?&8!fjEvc`c>nZLVjC432KR=)GBu+_oZB^#=t5>@Yo!^A*6YV)y_g6pK
z1DJ7BnJ?}^`b8@mY&JI<HM_Ui(NTD?xT;Fjjtk1EsCGRxABgD<H@JMhB?PU#a}Pe}
z;haYyoT=C6$sS>`@&!ud@v*U(pLsJ(&W@1%yIe2EUfn*8OL3y$_#IS0gieS=OvVvL
zpCFbiN;O}1s;lMNumGgGxaM&2K>d+eZr=C`0Z`S*Sfi18Sbv$V2~&i3z+rlEjo&Hg
zu$P|`IXTibCG3}|RQOvwie1>Bvk(7@I+4?8)P1w(bn)0(YH{r5pZ2O@#-nZfAkT1M
ze>-JtYgJWMTN@7~q_>>u==ChDo=V&Jl~XDTBP7or@$>Ub^9NX$O-sT_;oq|$*FN#m
zrb!%81@xRZ*2aHJE_&lVzMs15@r+>Q0lGp`(p6Sg39D-ir%rvx14QEjjz}BJ!)ok;
z$(95#{|QRlCctpg)bNqh$a(&%r^1bzn4QIT583!K?Mv@&6ZxS{C@@V`eAXmi<Oh#~
znWTb-2EFPS!rW$I)aH_<cpb(tzkqj(;SZRocG)A9#qpqAe&f>G-pg)Dcw>ZVj%z3F
z_i}+US@5&(Zbm9ICX;OyU}M1oEer#4;=lj?<-NJI=4GdMeFDgbIz!AVz}w93jB4EG
zrI}XJTj5)(_Ny)rcawWwk=%&m<C*<S`*}A$ndtMa7$Wwr1mRl}BoKxD^QYot825Y4
zxG$R*K=hWxrhW5=$KL$d+P_CeT_QV`S5|bBWd(MU$=)9mrBwQcL!!-kO(wKL9kl~w
zF~TyNVVr1f3zAvCNmW;)dv(JHj$G&HEkERQBOvXhmX<#7+ZUmr40nJO6ceOZkX~rj
zNBaRo0g3`rg(6QzdTX4`J*Ht&iQ$??Eolaun|WCmAzpmUr0#BbGEancju0{7%B~Dd
zlrwN0hHVLa7mi<1c}RnfV=GL|v>gLc_yD!7rmbxWe+ndm$c^<uvq0Y%)-w`&&fzJ8
z5d+v6YGx<pI8cN@2ieRZh%5wdFEXpoDx_y<3%B)0FcQ9zyJSv}M5y+)p5kL#C3|OD
z`zm;|97sheH5P4G=Wcj0ND{iHz|Hx>JP2zIg8LS0D@J$j6aajI^#8V979?@yQgi|l
zY*4R==S)81;6T%{mDYypI83UV;iLr@-2>hZIL|ce%gaT67`dPjMlNrb=uKd+isZlB
zc)SWlr}mwGsHeKmE>J|Kydu$%#YuV6_0?SqW52Axn_~D@VD!U1DHkMV9+T;3fTu$&
zeh&!=`d|r7*F{^PNQCMP#G)B=EhXr2u6K2GoQ@sKvEHpbfus^QQF!pq`xDdy@rS<L
z^**x~%DGL++LrK7z|<uSu2Ym(R7y|*KydDHy5R_zV1RiD#3#W*FPt9MYOZ&`-1{hA
zRFwiJg*Xqi#?dyutDr2|fyz^P68J?}8@OGayny$IzEc`_&9o(OI6<%*Y@%9)J~1?P
zywG*$F&ut8;3}03U4FEbYGdTq(0z*Y0GN(`O`hQW>@>D<Pugini?<}4xS(Ov?p)Cr
zr8lxfKU*lY>vCA#ow<MBxb8+3dGE98$VY1k_<BRp&S3c+!Chs330fuSNEUayQVZ35
zXh58K@cAZ4I&S%(pp*kn2`5vChau}`um-TX=nSl>K>Vl@m6^h&G^1*H4umSWB>@n~
zY-(=Ss5>{2&{Trc{@lHLe72Wdc+rpuQGqoFMqyYOUO9L+%3LVCrQp%>cN<VFp4|Lh
z=mLhP#=m~e_v-JRH7rarX%9)&jpgE1?t$~Ibbw{A*LG4fp;DCYDDlrsXn^J6zDBh$
z+?@1$i1PNvE!f}pbM;uo;Nx=Pg)0JCzFCT;rp2?;Cu8~jsNGJA)vNZ4Hq*-GE8bhH
zu=GQN2l5y7F?UWp7P@POvLgRI8S%Dl0{2aa8-xzO3*YPo#G-hp4HLWLM}K1+wlKk`
z<X_-<cNREdEf9h~Do&ZWcEqb^F-1*HX-KwE$e+CU)aq_pdOG?Xyp_55YA2YVeewkG
zlxf8!>g$XvLtn9%_N`+B!5I;JI?wo};l?!qzZ-!;MmO|=+=idL8pFHL$qyJ3%qC<B
zHp5f{AZK}!i!V4m&{MUWsg28sP~JGMUWgA9SA<t=`E)k*2ix=!HENTLjEwG<%E||Q
z(l8z$Zj3MY<B+IQ^#)va3T6^41M&CoH1Buq!>EKCu&oCUGw1+_Be5}GnhkSvJqr^=
z(Mmui`dE4hGn1tyToeb2I@GMLCj>Hs9*f8IIy*aKHH5pNo^>&jyubHT$UawYp&#Iz
z#i<QsPf`X61h52NIS#G`;m`iL^(Qla;$(H5&_Zv?`>>Dh#aE|UVNQ9@V@IxjKi{i*
zz-R@TBW2X&<slcY7{<Iih>P7eFA-0P^lpTk`b9>n?v=r$n$s)^Pv9#(q)E$`I2&vj
z4|^EgX)kc9aKVtie~^_A9u@oXW5>P@WM^pD{8J|z&rR8J^x!3P@nTWQVEzLe*~E3}
z!`Lult9OMLE}Phdl;<c8nv@R=iLua~WupBREX9Oj0&|^ZDXLF+2bh2@&ccGph0i5L
z8#gyMjO(!JA<Pr%P2Gd0%dI2icSi8Pq?3Y%k-}-IscQK)7Eq$eP%WAcX&#)~W3V`q
z+=h{rXqadSoT656=y&wm2t|8*GfkkL2mCaYJ<Q^6>HFrj7bwi5us2ga`Xx?nI!L^5
zyMc|ZBPr%tA?d~uF)<xc&6+^gABKqzwEG|9(cr_Wy*=J0;cNp!jzhoSnRK@12T)Xa
zhL#166fEjBP-1xsf}p#0XIEFe!q0ag2Iboy9fNoiYTR0f`WI-s;MK*ESlEKH(&(uD
z5(o3<id`sF&y`hFuHr53tzZ*x-MW?f1Kdng-C1Vv*1!^t;`@O6cwS?5C?=belM}tg
zs8bA9b&?{R2~OS%v_7-h4O$R6lP@H)1aT5#2m3Mo?O}V!4Eg-1OV5x|Nzn-WgVq@r
zyb8AOh0|i)2sp`b+F6<^=c#S>4S~0JMffB7!cV{`u`B)BZx`;NO+5r0-3xFD0na7)
zH8sAIqJ)!nvv&5q-Grf_T?Q;BKI!ePD#w|MtybCACRc=DB{qa<6qPcL-^4fdJ{(~l
z-)f$4x4?;~F6s$pwr48!aJnQCAKo}!fM0Ooe(#gnaAE9YHLK`!kYm*81>Fv1zF?im
zLVn{I3q9*MWmw-Dy>x9w;8vS6$lrv*zX|u1i@VUCB&_3ILTE$gS6Ay{TZ0o=#SE6N
zKl@$18rO6821iCHVnYCmNli_SiP6rxrKCq1hA;NupDl=j-8i1)p7*Y2na$;!4L!Qo
zdwvA&^rC)oAwyrs#*#<-;<?Iry0~e{JWlf?Xqh;lGR0ujl>(kNk8}Fb3{q#UpfM*%
zzf?-Du{o4ULUL*|yJ`1&ijF4Vl{2=aM{b)gPwC`bi^h{cE7+G=%@w7It?iwl+waei
z*?=Lx{%8Mjbl!8i`U?G6&^T&KP!rqC)Aw)vPqT|p^%ND9(Z3<%zxh!_6(41{OuxTy
z#UIfAjW;9u#A?&N`S)XQWVh&Fziwr1ZT;7BNjJF))rM_wyJ;1@)$Gg+F6R+)!G*Pk
z^eLUFFWHvuOTJ}lC*AX7?s|Mab6oJWQW5#i2Rn`nz4>+5^|WiC06)I~-Qm((%x`;*
zNpHpX4lw(+g)c4nwi){zYT=@gjTy?CO`KJYNu13ZS{*X4O9YFp!;5_V$rBfIZ>yje
zkKEDWcdJ6_S%=g4|MC-n{iU+ZQt>0{j(ReS-2eDtR@NIGknm1txZQB;fTRjFD4Ugz
zZ93}>G4h+<vzbHaq@q(M_4R&Wg)l#VLz;oc-?rcObD{oaU9MHa8r^;L!tc3%&=G%}
zWu~_Ni_2UBOSPtWH{?t2tW9hwEnebx+}+XBssqI7d)Yczaokd2?XUi41r`-hgMYVv
zU!TUz8tnUXoHQ_PbU`|K|Lo4|(&P?ACIF@%Sbyo-<)szUoa|FTkgaFh?Q$Ds%KGcr
zFI5Ux|9Ks|_#a!F{YU>t{<8U@XS$yMc+u^02L?`z%%Wn+E0e`cw6wI9TXaiV>K#w8
zbk4O|wuM>Dci19nG5_&u;m=hqF?2;)S#($*72%x7EBz=&dhp6NWUr>vmH9Y;?N<HC
z*>st;mY)@S#u$t=DMO7_UHS=JlQ>3GxYobM(*O#G`mHA$4p*Em8$~Jj^Id3w#UgEO
zxJ-)K0>Sk1wq-MB9A)eglhFfu!;Xdr))zp79PwEz?r#In7q7j<eFxNmV|D%@YTskR
zV3C^-gm@VYPEYh#Dk@NDWv@7DwPelre(Wgym@SRxdOz&ZP`(Jyh|kq0pocEbQR<Yj
z_1PHCjmr5N*Ga~L<s$)>_{h@O9qy?Ty~0B8YD>ZePfeAZI*_w1&eXRN4(-U4>ZmKK
zWy|wjA|xj{HRs0<VB}5c@2@Y3aVEFZTl=R&F%H>PfTYw~5gsHbSWM<|6sL`4nSLG_
z(93+Hl{(`l!ma*$-UYLzWVPxG2;Io@xCVlCaV|RU-B+pCny~;ov*Tp`ED&0lSm=}6
zF;x>|DR(Wi!$ztjDRx!94DT3-dGg*9HT(3kri6#!Q#fKWWIC1^1LYwn?!{j#bM;J^
zh3DGryScHHj*n5lQKSEqJJF!%WR9n9xj0aOwfd6|8O7>!by@7kR=x5}5$=VT*%orP
z)hLV1R%WciAC-?)ht7St#3OCkco=Qwy)(s3*$UsSR<YsUt&%<04q(fJX|82eY!`7L
zm&I~QoU(|6xwX!o!busU+NFttkz!vmL~FD8w_?I<EO$Sw*4;qMn(tEG$ZYcvoCq$h
zuZelDLTCC<V;NJU7~tLYVNNs}i$O-d_<ieKsLbL*Ux4C>^F2r)PA!dP+xuxXe3Sp3
z5_?+E5wg0KT~$I%yZ!Xgc)>G;<DXt=AA?L<$vz$j$3!tPF+$rq{ZQ{7K3<iTZZ{F@
z@|8K(5@gx93d1ym@t;RqV$uc&5rbRIrlJtO1O)`_*6-P>@?`}gioGW}zY6<(1a}d4
zNhEdPixdta{`3b;nV7pAi0hgz979l0G`)m~z4k4agkCOddD~Ix6wSsetm;cE<EQe9
zXg{v4eRp>+ja9={9zTJ~Tnb*k!_{ds94JNY42>Uje3R#kc$BU)*)4zs;n-!R24ydq
zlk4k#xtQF6@fwLH5k>FPLSO2^a}I4w??JCS`By*kaKc5!3eouKSKXmBc$cJoEYqUm
z(?3UL9!8;7;WC}s(^9o>Unmyswb)_1w!M@mBOp?J&XBew)u6e~VkOJ*dD{V{V$bJT
zf|VEAF5PTExuIRzSv#)wd%iM#G!348-0S=Pd$xd$<<1WO3n9V5)1xar)gn9+$d^%V
zT-BWa-eKEE$*#{otd1(<LR$alc<kQ#wc%_Ri<bde=A&st{?#He`*pjqa64+mMC@zf
zxKtBrG=_AW(zx3taEjVXnjJF_XN9rFhggxOvyFYYzy6rZkWxD?bvf~zAv_Z+OK*qd
zzf3|)FRadmtQjnJyE$b~3fiCK$|~`to+>$h1uMuAh{u8p@5$LZzXmz_Uwu9plf4=@
zH15Q1{!*#(^H^5%Y0P9%X$)0#v{VZ(X>VW2J9tmlWWWO!Gyq5$0I*WdIaPxa(lFED
zYqI7-enad*(t}u*-plQ;|J_f-hI$Sy%}9}<;}NuWRzRQ-BON4w$_W8E-#LwSf%-73
z$M90QD1c`T%dIMDtRbpGwfc)YlKeYL=Yg{Jzoe+X5ln~`w@t4_F+RDvW<AYzRVR5s
z4~92&2|sI0V?jvULHO?NZFFa|-t1q$4SP0_2-l^lZWI22Xg~4)$jSeIe$8eq$T>p3
z{yuruhbuPz@&^%Nm9k-(w*TnnYyS;aRJSI)oSpZtuhMZQJzy;6*TOyQ!zJDd9&#jk
z+i3sUpXcVvx%Ct1dtl$w$a})~?j`Q<>E|&HT4J&jrawuc!&7G0y3D?4eoNoV9g+e0
z4q@x7ZG5g_tIum{;Q_t<P?uYWz1SYx!c2TCQFlTxKryGg;|Sq0zXwunC9a_Hy`RSK
za%O-YCmw_X?kaqKxKbgO$$Lnfc;jWO5K$Siqw&86K#L;<kDwgqV!tAsXWgN1_sp^;
z!blaV;MvZ>>zM}QYqNje8o#q;nx$U4Ijq|D&Pn6$iGqOrD_l<8P2C?99p7I|iDr6u
zb!NG*nZi<eI6=8ks4igc;h(4ZTIm-NJ8GcXn5;DPywUwgpKbCn9W-n+-;2=0tXwpW
z+49i~%WXZeF&R~zt4n04NYp_A?emi`7;b<*w8}_TPdpHRZz6z5(`rg+{BTK;=I#gb
z#qN?+OZ%`!Iir&=q`b+uoh96b_JH$z+bdK9WT?q;s)u5|5Bg|C?=+r{HXqGQw(w(T
z&0gpwOKy`Th%by~w_U1ZMDA(SVo;7^WvDJw8QD2&n>5EEOg|PI6yNi8{UD}f$5uMQ
zoWkUQl5Rf#J>~nip<zRwS-QV(4ba=|+^Ox6ra95*RQ9!IyfatG*K_Hu@}rX+JaVy`
zc7=iSHL-m*+<YQoOO1B*cm6ymM%p5)=**<vdO35zu9AQm0`7ezGQNCOrQzE&1vVJv
z%l04a23jY$OdekI!@h-(j|fj@4lEyY2M%7FL5K4XN1!2=Cv!Y!3UXWGkx={T0<#6j
z$YEh2_w$!@yWc)emP(9n#(8>^Gc*3_G)KsV>{D_R2}OK&{3O$LQkz3(B0a}aE-1&)
zU+R3{{pPO66uC#-bB!M*Y-OdUB@x+Fe#Q+CL`shTNjq(m9FAT`-~omzVl1^U8nwG^
zHKpb9L@#^t@S*D<lyf402R8S3$(@XV043X-;#ehP{MXbcL!<rzjI6H>ehnhtbF3oh
z&K%Oiw=Wm9dYE3XewY%pv$u)-Ko;@aAWzMfTA48*o?n5N_nCXCq)z|40Qzojh3X{6
zvl68|TyqCPdsju?1`{&`P^@n@TvYP50vwqq90>*{JQkw!zDBaO_Ds=9)tLC|YVyb=
zs`tR1O)-GA_1W<!T^UBGb2yiVix54sR~Lt%)7}vt5q>AH@pXI_H?3-5{5}qLLm#e7
zY~;zen~!Kp&HOIs^ZF7=HeN7XtxNgfv{9wVk$ZO=lV<XHX&8kiIbMu(t{+O*5|lFz
zS0KY{2IHa6-}IcJ53Sf2?d+A+$>Ny)s-EfuZU9_c;tYfWxHHj~B#$5j8@btP4A+Yh
zzGTf}CFhYxy3MsnWJ|>OADCb^9&x>z{XR@Cq0{F1$6Ph9pKj_$=$1NiCaB|j(vzNg
zw_S}oK40KV(X4;SRCn}~o&>p`ScjVl(?^#RA?t_X_dv$iQC1Lkfv>cx#dM{u&{_dz
z>1hT_!%Z3*U&fNq9rEWg$w1%;a%87NcAZxZ^a;o0ud_xReF$hEBC)X<FXc2Nu3*Ln
zThhj<o?@flFQ~yuI(fiSr2KfC+0^1%QXh$ToMB;!;NB&FY15H9_eW2zmPuuswdQ+}
zB|Z1f(rUEgQRx#XQeRsiF8tbmxnWnoMs(N#-adGZ1v9~PFUWMxpQESPiF2|-BPNmj
z;?w&`PwS(e)CU&^VFc1P;*09vY;iypYp?a72*b*Jms94-EQeTV89#>K%xVfNi*vW~
z?$rNu%cZH4jaBAb)s}mg$k#9Z+$<DZ@rh{ibK#Z~^e2~AhGO&6vsVuNiRR7+sBTVp
z!7|TT=b~0Z1oFqj=kGs-Q%=Y6+14w-xB`xAmze8}<_aup*gLPQJz=7IaP3_L4)yf5
z_atx77=aZw%X;#*>hCZ|nzI7dW!)|NBP(i)<iR23KdM56LduCBms5Uz$+07ua0n31
z7J!z}d%sefce=~>yv2W<;x~y(e@yn)PZWL1O_0|mytIA))V{W@K77K7x({Y{5o_}F
zH`*tSWxV)Q&)xh-*Nx<D@D7qM`;Ro!uZM?K3e6wuo8!9lh6>x;-5ay{7pMP#1W#Sq
zXszd2|33$}|0QptltHwJXu*h}Bq};7JVQ7=2raCjY{t8yuw#C_luxE{lu?TLPhrHP
zoI#YPTr3Vx#<b<hVx#cvS*hat*^@;Pv)s#Z#TR1k2j;XcNgF(xL6u~C8>dWwac|>P
zdG=E#zoFW6G2Zoc_AO#h>b3%Wly=6%muU|)(<P$KdOLsGujvo(WvyZF^PT!^9uLv8
z%gVy@<GGHe15^D$_Z-=J8`ih9)fywBiTR?LWT3)NMJGm2@zm8tvaAJ_$G_|qLy=rj
zau}N7qZLC{{f+B@Gv*C~8#^LbqI@oKPAy6}YeCEr(+o$hf<TLIdVtBGT6(JnL_GR@
zO|_okkW5vpR#D7%@Vh9lTkIK?(+&L%k}0K9pF|<A@-(BdKlProu+5%N@T|V1oA;JX
zJL8g}kF&E*?p{{xnk!;o)-3$)db<K5;_f`&R_#myWxG?%h|+-}#hxU`FQfF+K)Wyv
z-8HBhwZvFvLwf(iwHM1Y0cKLc{4Rc@9`LJ-l#H{<f4z@ezty;p<(W>~NOC>npJ*qO
zWoG<=Mq0ftazN3E#gVWgiTG)7Ury_d){Vsbu*5iJz8fEok3hdo71hvbyVj*|2-U*=
z2`%`iWMu!JZsbCV&2oGd7TWL45tk99BqQqHo1S<AsecrW4kuV93n&X}!VOw>Gcf}X
zr}se>FO|<h_`kLOiNS7%l<&%!*CtEGA7#p#?}Yr-o0=3HlZ4`HwmP-XUjnslgDm+E
zBqtZq*WfZ3g|+w6EQKTcVE-1tar)snNKO4`b(LT4-_`#Np8)(!1|BIUMdlMfYkAo-
zyvovLj#JQsv1U>mzGeaV5{J^ScCLGupH+O1FOTMw&mq*X7Tv!nqtn7o){~s?{>n9n
zD{gpQ@I&}BuYDv@`f-jhiKvp3LJoZG2)#H%_s_r=)0YZ{**RHQX3!w%uOAySYI{z(
z9s*Ern5N0#u)|Pew$r{erw{2_##q)O1`Q7DU%uhBL)u^LA1=!0__D<Zm_`po7YAUz
zMgH5;GFQ=&EeXaL5;6;G67=P0+Cn@DBOMWb{{E(!YMZ^3k@o|66%-W0L<^jbv0<(g
zF{hutahf0dfYiLpkv>(kaWY|NG2yIdV_UyNr~LMiUnfS@riSavn*Y2M?KPS?7mXC&
zVrj&voM(;KmSm)QkkayZ7~UQ=6<f!fs?(_`Q~jXE2OJy#lw0Ix2OC30#<*IBCJHDy
zx*V>25%#-eu^jx@wq2YPH{Bj*K8o-(82rr%e`_A|ZD$By^?P>Fk6(9Ds;<T4H0~!j
zxV%9lSqf8^CN+3_Bj{u)7x(gfWZG3ZmH+-D3XaUVorM)B^|=)DYt}dIyy@lflNCz}
zgu+1#QVx}$pS7U~)|WfC{<KahYX3PLzn>P`Y&HEaIpF>~Z*qqA)$1^+)UPJiUvGBw
zTYbnpKe)hGqs_a1#pEWWpXY_3bIO117;C5VY(Pfkir3B1!%ieAlzlg~Ehtv9&ahwq
zueU%Gj`5_S(`-AcZ3+pYz>3d-$mjKEsnnMt<(K3qb#@bOcKdx-APotJVwi4O<sC{z
zJtv1i6YKM>Bsq+PpIfcCOvv(nK(3P9rbSWJhk4IxAJ3XM`iq$+$t#OPF$Zkpw$9Z3
zSZjVlcs<e5SwcSy^(sb^BAl_)$5nl0lZJO@uOxkfXX%0Cr8Cw=U;Nk1(z{|D{E`@q
z3m2#S*IR*Bmd?m6kxT9*3?k5j<l`VGq?qFZ=_X^Da{&10EKW;ewWY$@B39v9#+pR|
z4$iy&oKeP8UT&_giZiGAZ2XY;Im?Nxw@k9+dmnS5qk!21*%g)HH#^;62ke1``gT5L
z>TPvV_xWS%A#&~JaVD$PPWy5~R)Mn&PHP(1S`yT%5i}IB=94WlO^mYUTGQ)gBoxv9
z3^1?bnidci9&MNis;Q|V(@I%&<j~@n`>i*YK9==(4PIBA^G|~?)T-6i8N-flGaXxb
zyz(Da#29)#o^%En@HySiE2uFLl4BeFJnfP9=1sDoOw#=D9o2{GFDE*vg^SJe;^>_G
z0%9H~<#pdT8*I?y3kVFYSsBh7`cvvucuve(t+u}=AU2ot4vMg7uTGA4v>6UgcT@!O
z@p4_d6pJu)(xm?fx4DUJHSx)3FRSmdQq!omro1qSlB&l5n&D<`U@JIb)go(a+7V=z
zm2~Dt18nmb4Temn=i}fGi8dxJz%ajD&Jx;igYv^Ld_U9K<+m-Ujn-gc+rqohM<>|_
zOPZ{UTezcC6U_<?Xia784ro)+D24m>eRY5SWVcG$3$0c~*%j)6l3Yg<g|hbllr7_#
z3^Yu<zEXB=Wi)*ZQgAcG6g-+$-4pjQ#(oJZNY={i$F+f^h1`7{(US4zp^nbn0hX)V
z0-xYu*GlcF1D`0k6v1`+u_7?K9cWDcqce<iA7e2LMGcomW^iP=ySkDdplpj;R<5Ab
zlcjx8Sy%Hswn*lVui<0Sx=A*Bs&iCtZa4aFvyGll<sCgs*Ms?0_(EtOcW2G-wVf{0
zRz30m-toWsKOhk#Il+us{`S3tZANn~b2j}D#3ILN#-346m<jZxmBqbg!?6WemzZr;
zMK!Aq#9-bsTC*dk1f{8Q&YOvPIm?w_E<A+%<!y?wPF+1s4}<=!{G9^fcp9y?KvRu`
z=RdwYDqrE$S1U@}Vp+n?ICtQ%?$H&c$~@dtZ3g|SPWQxv^%vH|u@&Ew?Yn^oFIy?3
z3BZ!O8g*H_wVcpz@#k8?5QLA&yh?y3L?&E%p`-*3;1GyMkKm|`K0%Y-d{GU}eX%Ol
z(sU2-?a%?woL7jqzmWC`tbUXtJZH4d#mH3kCSN)&=jdlB$*K0^OD*LE^0k#BIeVqD
zndUDnTh~5_UDGSuJ$aZcL!qqVFi+dV`QZBk??pH7+K<2bYa=9V_oQL7id+lS-{A#S
z)~QZ=CfrIxu!GQQ=Q1&?Oc<~Sh-`<8KDHcI@e2&rk6c*h(nyLdAlK78W>G{NDr?lT
z7iM#&*+Nby<*sVfalUDSs3zLeuISu5y$ucR+asA}ykgm`XM0yNT}dUx##|&i(@>)*
zoRLg5N{(B*t7va?(p|Y^&F_@)Q&h@{YwHA2r5%KxaB{236oUIit;C9}n;Y74(=A51
zlxE-Lhaq>n4~fiRM9iYCrU`0;<hBQ_e^=u(m)ck6mgXprkq+YIg6=I-kr$8hSn|u|
ziGo&(CBHB+RjPC6fW(NkSXnwlk`QfAV=EGwsZeaQ+?I7n!?q%|X<oRI)Gaw!tJyb=
zMVxbXsb2BDk>wJt*?K%Yb(a5aClitek)sr2F~PyzYs;bhJKS+CaYG@mwmlWv=Cj!g
z*bUX6XIO-4Kk-9=NSLPAs#jR64xyNVSZ{3ou}P!EsG}a|$$!=k->PgGyG_iC!7t>3
zPplt=mLj*!cXmL^4b04Xnd-iVkp0YnP{5Sw>hf%}_L4t0F%AO{Zpw>XmTx;pPW@ib
z6B;Owvsj&bJ-~W;@rCdqp8tp}XRLak8cz+qRIZS3y2wTd4mxiOznWfmd+><<=%W~&
z@3XJ{GoLM$krA7W#B;5q&)Ti{-?cy8B_Er4neh7dwjcj?;{IRMC@zO6Oi1I;(I^%B
zI=j=p%4ReuuB+Kg+k92)&z^ZbRI%&R!OPU=dP{tq7w$X!Ec}!scbQaIS?HH*#`BT<
znyBXWC(!<sEg`9WM`ir9_sbpG5#!14|D0cMNdk%3la|?D%{TbpP`$VDrak-drh2OO
zr~FCdl>hy=rm>tS#CELNmk8hM+6R)TKVO(=zTp49qe!Ti=3PS^xhKE&SLnTLH51{Q
zeBANMdi|n^(2j5Et1g$*o~>$KddQyHnL9)IwsUMTLgTkiX=1FQwU~(MB0Mkr9?-5o
zr}lufZ3Wx<{Ogwo`bfe4y%u3K_1vgc_etc+%%?5Zf)rB=UR>+jmFTiQkxYkswS^yZ
zkYG<ddv^1S2?yg`lR1v)mv;9pXHr!}c&ezFdqw;g8n*7U&X+fyOt6@F->67qyQ-Zr
zFIe_}bobq1O{VLcI?jv*1*|AVhOwZcq7><%U}prZpa@Y=0jbhkhy?*rii)DrRGNr@
zD7{6gDgr{JOGkPLy(A>r`vcE!_guUC&tBWlU+0_|k$m~y=Y5{LJ;Dk`(ggYw%2D=c
z__}*#A~mbHw#n7Y%1oL>u3z0UDWpsu%g|XYO{wgqZIY&(RqU_j)2D`rI}PdxbE-es
zl`HoT95wMO?+$mE=#33k<TM_~=TO+=vbLEqYIyN*OCssKYg>^UrRy)ZG>f)DyOLwe
z#w*ljI@NC9-A_E>dF#&p$@^Tx{d|;8+ZAn9Y2z9&Anc6u^$)Z1YPWu;_Kg0_AyF3l
zm4v7^Qa(M8ii%2PQ0$LakCNQ7t3&7w-!nPIH9O7~U2*P@UNiaQOwyqULu)6~$^DVV
zv5zGvbr-#(%YO7luj$yV<(x1cA|^Q48144CeUqTdu<64XZIa{h)W?!}E3$Gq<sr!~
z;qGmjPv4uEXf>;Dv$M5*b>7*knt!)7tOR$iRCv)URHwGA`G?W_^j2^L`9=A%R70!r
zhFjV)s&V%9T9%6c`amawK8}lgV?@gtVt-a=Cu=aH|E;piLH~74apv8zqGlt<Ys+CT
zJYAtG?p~hJ^CP0znpB!&#m<r=T^+{uoCL%7S%b&qsMUF88rqhmohnly7dxmTPd&Q!
zFsO|=m+$IjyV8ZuBp8l2=C^3DzWP3TeM(hA#&wL&E}LxGw0W~<<87L8fa+$;feyd*
zPo>BWsp-urfI0lb)Yi*c6dLm>+fOgsFfm5tl`1CNKix`;N#zc)hrYJ>3EqG3Zf>mj
z^hwHnp2*!tw<^^DYcU4Z|KPd3OOEV)^2;N>5;yC3ftyXHC07L7oM*0Wl8cVoxN+l{
zsMMAk%P(VbcVQz^v-w&VQPn`*IW^u_nz)^EB6CHNZ-iS-y_>c-TF%l4d)tu7M(;6&
zP%Nu=`6j24#Eo!TJ=ptHZLlW#*xfTLy#of7-jZt9H<cU<odfGHU0TQ4<e3~O=kv2P
z+m}8yQ{uZixuQq3B*lVV^G@xt_@>JZX5WEPSMmL$w8O@kGhA?pI^zCbIn$1hJ=o}R
zYvBR6N1;KXK*_Kh+3e9WA-PKxk5zuBxw&-lhAD=7aO%Y#<W0Ob_gFh-8Q+yO$5E_1
z>qVNMD}b9!tW8AeqPuB2YlvNM*S%k9q(_JJ-qG^#!-8s_iUdWQx<DPZyi0L^-(JFS
z4CkqcceStFpq+Ta3{Rvj#XZDUsp)boC*;JQV^3A-_h=GPr_1FN@-yyqI4#L=I<bp#
zqe%1dkIJFEz?11Xq^@$cWSC%2$Lr1_(eu{P)TFP6D?1#OugQw(lH1@#Q5wn49Q7Fd
z&TR4yzdBO#Wp$Ej?ZDVcEtSFVD>c#@<4VPsG4dqQwvAHsb>a_}g-r||UfIZ;9yt04
z;jyk9h3+%dfsvFQ@|(3oY}vB4;SL9X9yuu<D~hc!qIu&Z=0p`^c#sU-epbIIpf4M&
zFJ0ihiWQ>DuC=bSIaJ`Lp=H3F>L`fx3R0deT%X=b&8!j5u6DY>Rb^AHxW$c<%F`A;
zk0dh(`+~~0-g27=n_)kBP^9@itK)HMf6Z+xC$;ZGMYSZA)brDtJ2PGlOKa~upJJ2#
zo-B8@(@m6I_j)>>dMu3Hs<KR#J@Y<A(^4sKax}+9gF3@}Ch<B}v})oOZ$-|SdTvO+
z|2pNFm}hdz%z=~10;>m)T)o=2W3u__Cc7@tKgq0)Kn8C`2%|yYs)6NeM%10_8t2tl
zQN#?I93p%THm&|7BBE3O{&M3x2lJyxk2aY34=6m|Nt)m?o&*J9(^lOcflS-38HcK`
zykV-&olnIbmGpa_iaUk3I0>A9hQ)3CnQV5GXO_;5n@YKjHVpN#oE;90h!ow>Zd_WW
z)>0jX#CrrF_|5*+)b5C!g=5TRLXL_}aU-W|*WX^U#(5(8iqIaboai%j{@s)7hQ`CM
z=%;&-rv@gf3>~jFCygoS<+TUQ-e;|%Z4rRVRI}ob-&*(Hgi34oBZ}g{@k6y4KZ~vN
zxI5?Wk-bymn4h!X{jrevTZLt~eg9&~e))#4XUKd0*7JRb{stfM|G4m?=ecSe{e8Go
zZnoQ6NE2JN*Sax7LH4rd@5A@AE}KvJ&7wRXKH8en=jU3|53Z9L=J(KTJY(%M`{8bF
z*{T>6W!04CP|YlS^LcT-l=#NWzOB}pP48qKuvvaj%iO;<h&$aljq&h8{Osg>ed*x0
zhPhCa>y)McYamc5!+GSdyGzz=*E6kU`pMN`i9k<t2~d-5fR5c5FjPFQiZ0!_dHpu7
z)FBZE`#UQ(Id1b3M;~r7`#ah!Ds`T359|+0jfpT{F+XzGQxgCzH**8nGozB*bXDzY
znV-djlRU;{lP55xOJDf#Tv&nkj<ej>t<(KUEIy$<${<*KeUG#))>fgX%zd5w6MXeI
zjp+@km%oG#wRwv~QlkKJ$<=0VQXD&l*u0N7|3I33-fL#{EXlanYowxnf$J||@{Pg!
zE(gG#vbfuINtW086C9N6oz)Wb0sliRtz=g99Sm`}je4(+3jle{?Vp#d-gZw!iIdMG
z>FXe2!1UZ{pc*1|nd!zL2YS@{6LJg^^#=M-)9Sti7)lF$YYm*p$S0sNWh|!l;^Q09
zeOF6(36(wB?e^`tSg(L-ixcS<!u4-Yqo;*RyG?~0Cn%c;t&0=*6LUj->ACu#!%>(I
zEASuhu6!006gY3wCXtjfHBxGbX5Q}Tmo6_p<tLbrQ>=g?tW|c_VgEU4RsU|BJ*l?n
z(PXomoISDu3d-ba*Mn+%(`ew-giH-3ZI$uDBjS$;=H0l+jgde~Y7Tn=ZT95P@-S8b
zpV}8dmMI&)tIiA+(5&tQR4Cw8+Fmm?Myv4R6ZM$>8EoG_aTXJ*QMRtPOW*g*=`y*N
z4E978<S;H=Ho}50H;fD2*7w|-L!u@vT-rm*`sZnfztY?h`y~J1B_%X)Ic4Z03!j#U
z4is(}<NZIBRPBi7rfkZ3L7|!?Zu?zBvE>{nIH7|+m0@!ql1Xn@Q%~b;N6Ui&>qP{?
z(_ZouY}6GM-@KWSC1~)eti7@*7MLe{qLCq))zc0Tu#Wa{)ehH7kV~sEdkTQ>z(o`f
zu_yATc}JCpKHLI4w~8k_78{-c(m}Vd>+1JUVO}JU=|@zc@_30gSlMj_Nx5lPM!O_`
z-ED<xCV$vJgZM>wcRNc@X%6u`OmTppG`ScIWqz{Gi<{YDmyl#(*0f~JkLFnC;dYGN
zQy4Rh#-SDpST|aL$A5Rif;ncU#+fqaa&CoF@_Oq{bQky9S%gDBtefQFK#P&|tiZRi
zLcI^6C<BT!T_M)%6m0i%MDpdb#%mhYo#!aROZ?oF)!%T}-np|_%t<Rg$~so9DK77!
zWuxQZV-+`lP_Up5w<c5o+c46%8DOq5OE6E&>;r9=F;-QoXzxrYt1+=#0+7%kV|fJb
zKfiI84!_5c$~BnzZU|6*H^3|Ar6m#W(sj1Ln<6wjQC<3-n=((avj}Sqmh7Xqe!TTk
z#Kj)?J_zm=Y)f!~%jS<A5f77rfTiv$pe0u8Eqan1u-wa^?gBc%j3=xWpwRUs<v1Wv
zCSK__I|$GM*6z-_TK!tXoA(!$XsqP%J8aNAXD77Mv%8)N@~qjO(eA5B+s4SDb%Etu
zGCN#dzxTI>Rj*CmMVGtL53#{wOcy75GOf|d`g_j{NSh#Z8Gm^oV1~9B46ohS-G?9u
zm)vR=aK{~27iMi4OQsP@m-?HTZyEu@9?qP7xBm3f#A?`2VM>z=_>}dY@BJu|l=B+&
zS+W>$3<K2sd7e5L8MOn<UUjnzxPmp3U`ztm6Er{MC`-0ZfGFOL3KK|T*k=pMUIh~1
zVx|}damwdS!GjmeWQm&oL5!dp<eE;gpq|xc1xYyBGUI{fQ(1#b8m)~P!^TuD#|??N
zT>E^0Zdh?~ZJ=&(`i~P%l1+kg9?meigEgQabxgp}xiTTWnE-@!u$d+k$`<>ktaPYj
z6g|r$D9t-+D9HXW$a07KQ5VRedF^16E{XgTioB)cI8CM~eqf`XDNP0k8@fgxd3XpW
ziU`g@@rd)PzxU_5QJ&_l%^w6N7`X3OceRgb2KLOtwnvF)4z#1V0UQj0v+y6`_P)Z4
zjE7<djk6o$aZpew((B;_8#u++vKv7BrcIY)UAN$3LA2&=yrY^V?0GzS<F`N7034fa
zdZjS+Z<y~pu|vq0o6`ljNp&vi$<3yxDdjO=lZt#zW`NsfLV2NU=u(a45tEl&5p&0t
zA@ky8%rR#Q(?8Wa9gDaHl_wXcP${}%Uq&s6;<=o(4{FtF^i7^0@g!^ummkU*uTeq_
z)RapzBG<@+?<=zA4!-bt?$;git&F$7dINs$haK|7cQ{Xe)&B@Me&qPfCajm4{RuOr
zdh=%)z5j!h=8@w+&O5gq0G<d*0hRzP=&FbiojvJ8)(^J&1^^^y*BKwfjg7VLubqAz
zX9SZx0G3~czUh!3Q_Oe8L4V=pA75;vaDKz#`qj3H@6@+Zo*CLu9ZzESL<S(?rt_Y(
z7NH=EKV!Wbd}wDmR4nHr5AxmKsK|_m$dlg-YA_W=y+I(>wm-G}IcW=I`G}{q*NZ=R
z9y6_x(bJGx3U*Jp0ky!is<YCR<u5GY-O-<vzG%1or{|Gu-Q@OlkU^}IvoeD11#+(D
zOuJgpG6%0c#y)6BTp)Mrk7PSFn8gCWCQ~TuiJyP{-j<#7?FY|if~E~}6qM?*`3kYX
zfPE)|H7@=!hVnc;)lm+VC^ybA;eGjQcP@JzN|fOu0hPO}wyr3m0oX5nB*B8}Z9i*P
zo~g#Uq^_Rd5<1&V{<XnZbDoOhfHu;<BOG06$5IQfLE4y1JLtFG6`<5h_E_sJKM(eJ
zaHCcBc*w;9i10I=7?Rc*FS_pIfEFxE&95H$sl5(sKp+Td$aZRh#4Ycmy{)Y+?uvWs
zq#X-=j_VqnhN&}AGI#9gD{pz+IsIf7eG=zgNZGk3I@oYc2-jb!Z<(m-OH^VQuR>(Z
zuJ+ehzQ0_$CR@gN=q*rwahbvFq<tBh%!(obU7m6Ld%y|@z+XZFJNdps6<5|u_2J&w
z2+Qw1ZFH_+$7UJRZ@bva9~X-USv97yK}N79*v!Q2K`qv^Ho{#n3K^|ueSQZ5J9aQ@
zc_@iKY|X)QTqU<m;<?WoUW4y7A^lvKbNd|<MWq#=mP`l6K%F5(h6Eq&!vjabT6&$2
zF?I7-REhd`;=GXCgIY8zLf3(7T{<lu-rdj0rMX%&P=rNdkREM51<}d$j`Z*BzIasz
zm1_vPVCiRDi^UUua?N8u>?-(xb9=Dea3#>Pjx~ZozD-E7H9|#hmWyfpNnz3DP*6@k
z+#FD1h4o+`A$RsFM&a*;p0LgYsvB>S$CKR=-Cj&h$y|4OYHgZ%ZPyF$^<RS}Tfl;@
z@<nNO;>?gVBB$?`;r4yt5su!_edby>D0=E}aX;=C=e{_TD#yMpr(WrVDW-Q;ke(Zt
z@Tqr$WxUN;&F;Ugc5WbOpEnJj37$C=QRnfhqK_YLEP$FT6A4wzgjC<Umi6(!Pct39
znqvI94_pSg?B(>>z~wkc<l=k1O4UF?@2lQi`hp%}owfuwg6$8R0zXD>ZCkxb1aB-1
zAIJeSeNz!knphI49wgiVMO!9X11%-`Sm0%E8W5y23C(MjCSt$sgz%2oa+cN9QyG~r
zE(0BIXvuoF8N3aU(_E1UsGLc(rs!;5h=jjCaJN?Dv4~YAI07Zxs)`fX<x^otJLaG+
zNVJjL&u6Ik^Yu<I;FGypn@EQXq@Wi%H6dBozhtgdgkyqc0qBKUmNX{$cw+EN4~1jD
zoO9Z^zh`n%a@L^m;p3{{d5R79_bpUf&9yzhR;u2Hc=%f5SfWGlKXiLIHIombBLynx
zHK^w#Y*`T(D`}7>1C!E~V@JQluo%{QInH<L`g$SKjxF0|R#m8HJW!V`VBkJ%C5qhc
zeCxdF^6T^28qFf{;8|0U!~?KjZKBR-wM2L_Ei{`Lgbv3W_u8e9&HX=$?UX#;o}rhI
zt$R}`CO(dDLi{=79C0TOBU>W6f_U2l#R@lFZ>D$U^mgReo#-)*V1qt}0!Z>?%z)N-
z)#amn!n^*W+v7$|J{a?lQl4&>LrEOht~cCmklcPJ7TxbS6uD_;qvg;M{iAlVVX0EW
zS*?dbLEp0+vH@o+kA1skR>Y?|_4eo^JN1n!kl*5n>@l^Wr0Ajzg^td+!R$>Kqycrk
zH3^iFrChCEY13Y5;&;2WXrb!$W?FfUS^SxT>Tf0#=|ZdvGX#ypr|PVhcHp25_@Gsv
zNPm5IqJx|23~W9VXFDj@;=WQV04zmHSdevA+=MP^Ja@EQNu5<^eD?sW7ek%W&+jL%
zp0^u^P|avorjp>wIjOC(JbXt(UWq+D%nMN1z^YB!Pj<byQr55Dp5wu0+PL<`#ah;9
zU4{pAx!Y>iM^80_fm)Iz@q1q9N-UJWZiV_2C|UdFtZ}W+t~6`w?JD;yd-Z|(lUw+h
zPffxVd!rtzPPG<PsP-dlAVtI}b7u;bAp67cXGC^ZLktRr9gOT`d{Q2a0oBQxFmG&w
z*6{ct5u~(@eU+{_!0NckvonV^=te~yy7AjI0t44<!%Q@T*#z1g`;pIxa;%_$535Nc
zsU>hz%o?3;CmOQ*h91%O{8;2V)?*l3UWS+PDlNugQHjO_&Vk9niw}I%jN9fO`CoS`
z=daf9%4z)LHP?;j_L>(JRsu&EM-B&?*XHf^q}Cd`S>mb;gR}<YlKGFRHkEP8SmmK}
zsjiVI&D{|cg67(BE@#Ub>zaYv1-zw7Muo3#EbuO@ImF1u2iq(r)`nUK5%jIP?suh$
zi#`tH(Yw@N4u*R<j-AaQH?v1mIJhr`<!wITodQ95XKeJJQ2AlJa@&wY6QN3ywPdPe
zE)|mV*f=|vPMI9>;SH^87R)x_2(L`^GPbB5jc{zfOAway>&fCrjvPVL4m&9;pU~Ms
zyFLZO!4%~Eeg^Cc3TL!LloHkAGi|*jUE+Mk5J-Al)LFD>a66XxgD{|F`+tE`b?WbI
z-Zt);e`j*e8>(jrz$bN&lct8Q4nH_$?~UJ*@|Z^tKSeX)g}#$dc#2EXoq~tp(85zb
zPjGv@ZPdh#QAc~le{-&X<?1Z7{lh-R*kIJ~j10rxff2@yfl81W7aN|a^TNm{99tTu
zi-mSzfEE3y`u4Zk>`-2x1;Tp^)P6<c;(yJoP$yo<c|ObkWz6}n#MA#H&EfxNKjcW|
z{1aJYcOZW340Eahcx@-2V8BXKzwMhdaqj)Mysl?Li5cyEDd80=wFqCyymRMivs)6_
zO1TIbGxvsQz1=ct(J>rO<BV04B8H$jDB-UKiWlaOHJ3$j%^TCK3medy)w^~3i!{Q1
z%L4sMW#k=PCio*9{P=7i8(1kEwL^Z7wbnFyvc)K(Zbfe{M3y+d+^YB8CP1t>6%<4-
z5dXQfccJqiV`v@VPck<R+H!nb=O?rA0=^0gbZOqjV4+pHIiq?1IKW@y-SOp-#NV@j
zOzJsa5AQJ-6z>=Jp}EWp-+J-{^4cQl^T)c>!lI5xZl-ecp4+r>mx?Ir%;|Fi_ldO5
zV|E0zXmeNOr!Wyk)l8nGlS4bbMGtB{*)>s1>IS4SGmCp&zt{U$uIH|;TYHBJMoSvt
zNIR;(5H`bbJu<BILVMl>tfsQ8>Y|Qx{35&F-CDI*)ZzPX)Q6Ska^@4?VJ<bMqg2b)
z^whuCPcn>{I}9@?H}3zyJ%jAdb<#1jkKjYg!#N4bUg7^2Uf>5Wr(T_k8%ZnzcJ*tf
zQo=nuSd+lATF}!vUQ2RgkFS{p1Ltw=am&qK9;&zqHjsCpf_KZbq?&$c&OZG?t@#Gu
zbBWWhWgs$dqNfe(9FEqQ$F7w^@L8#_!}t4Cjv{5WD+t#rik2)h7Hj{kF>8}imhleG
zd5WZ--GZeraG$q@;-znH4Uxv$a3OquQLwO0-o7Ut9TpcBr3(4T6G7KP9UFQ9*0n@9
zX7|0u5J3_#50<1H#Y{wqBIj_x>+S3Jif^(cT@uk>*_5C^IdrGmxc~WN6Q)?G4NpgZ
zc`9&TC-qu~H|l6Zrd{yW>YaC_d=P)6%$a&fND3HdvK_-9y7x~-F6?>8mY^y@Ym#4a
z<>SrUO60Dxkhx*c`>p(+--z*H`zGa|K_??c%p)M?NbN~#Ku?7psf)<iVWvn@2OJtL
z9ZK#^6HTOczYdkdM(=)MX6gulnHcPaG#g*3wWTS|l6B-^3}>i78&i(_?rSXFog_|B
zvT;f5j-AjsUTqsglW=<irU%GcN9pPMh(L_h@ScQyYWcg7UG6_J7CTsHqlv+zPcbK4
z&onQ-9)*}K|H1-93Ha6+U44TzEDABlvTb_rO1iF=NF$eHpies<>8)Xm-D=AOWtRHs
z;I8+_qmNK@DAu>meJG(js55{z028dl8RZTCoX8w`3cSPPQ{Y82J{Q0=5D3=R^)aBk
z{p-vRnh5t|et<Z;yCXp90CzNfc3^J}TwOAciKFUWsNfEJm{5EU$Mvq>^^9zhmy;FH
z8&H|AtzkLgQ=1vGVFFx&VY27R?#LGR_tlG|H7R4qyD^x0x?*LlDksAZ+6(;@=bv{a
zRVmNgZt<!8kpB*;=}x`3I<~f5br#TzE{i>K<f(c#WQpT_O{o_?&Omw^VOO3>Z$$2O
z8xWo8^cD|u<_u4=X*Rl7QS#Ukgj_&XRR2O_A$2JKZtB&hpgootYA{<NHE}0GgZbh#
zRFwN>rm0>BM+HLALv92F*cJ!GnlPO~hcbp9$h2YXwhgALJ;~i>%`-*tKt)kL*_A8A
z9&2<&W{5>|&RKaf+C!s{W8s5S6)W}ki>hKux1~48l}MQq<*`*~O^Iw2$-Pp=Hx|{_
z%NTt*GC%5{e`Je#)DaWql1ISZ2nnXFxnWDzcq4!@$n%r|G<-&jP!J8e&!QotSKDO0
zbeDIq;nnqm1n1x<So?T~TRxi0&03*#u@$;MOCwgiY{tue<ZF;#Z22(+MR5n-Cjy+z
zgL6U2i6g(q{oC_>*16T&WFUp<tI1VCI<6W=K1M&i0<}P17!u8bXuKkq$NNsBCtN}Y
z0Z=^g9)^k}^$*XUJXxD{n-&?Mx{ZEcaF4r9@z^?e1{yKIWMe!q{T2u-z5jZ0NBCd{
z+RC1YEi+1L!-XfsQW28v?(<?!H^jdNFAgU1ID_nRts)3=o1I!zDsS-XvvQzuB}kP`
zo0hGUl0SoOsU(a;4kMq%y&Zv-#%M>Z(Tupo*G#b{UEu&_H1dNOpD<WPRV14g>_%K=
zvKddO<hK;F_j>7H9#worc>+i<V2>!fWO&?+t+VO=aJ>x*E(9EQQ*&qL7yx)>j5HUg
zy2`e?xrFl{3Ett>jv1D}s@t@rkI_~@&Fp&}Pg5Ky72(dWs_KSDlEKj2PF$<kZ%O*k
zhx|Aaq|m#Q*P3%8A{T7zEEf|Amo>ivY|fMRO)Gm<14O%g#ON87#Q3bm`19V56U}$w
z;PfOePvcnV4rLqigo-J0V=!emHg_+sbZN<B=dXkmZ3tZ)VozviO~O{w&-&CBbP91M
z1+bP;-$JdQoY|qampL}azf0Xj?Sj;5dC{@M5%`c3xD3!yUPef<n6t|GcbbvDCiYje
zGCGbr_PixabRq}w`x_SnA6G<$h-$^3QBfNcR<!?w7eBujQyCWmDUC?I;dYkYs3~%N
z2-0DZM!IEV_)Hf9MX=5h=Y&JMA=b;wrxX1}0bhd(cV?8ZZ2F3aJ6CCu9R(jfcp!yR
zds16rN5YD{0T2X6PF%S_)dhHTdk?NE3Fglm!}7j0+kf<8X0m)q#oo@Z0;KbFVB5{E
z=1mx`SO8tP<Tl1+3rX!f#KI1U*MVV+%B-#plB9eIvCdoVOY*3fXjp&K2>~+Zpqube
z1-z(i$9`e}_)fT*u&Eo@zH}iC=ij*(2z14Ji;5bJo|!KaJB~h5Bn~>GDciclUv!ZC
z2~Rs8R_S;G*8=^0PrCdQQl6c=aH|~YhaNEnR?T>5RedUHd|doV0tNt#wGDnti0Gl2
zHhQ(6D>&Iyd!cr0nnC@tf;j#@@$!k+Ic?sR3vGBnHKbuZP_d9T-rH+%rHPW^4=>>}
z;&~cLXY`m4G5f7^W~wAGu;OZPg&wzLjQ|=yVkB{$85T$220SedNiDV7%9R@%@=S_q
zvIq0t7sV%08`@JVBM;_IUx^2ZGRP`G3KR$GOG0+}@s_ujnZ}9+SZ>@z3CTOcZP9?1
zHs?~^hdz1{=4PB3+@}!PZjI_h**Wk=AL-m)OA);iPFQy!P^WoOrY@F%5*v7|Z$&_0
z;Fa<Smzuz8j%E<*kk+FiYs2?3bD}O@v&EG+P#7j{kaJPoGB7HDV+}S$V#gybN$B{+
zG7X{R)EdXxL6-SeX8cH3nUGh>#AKZSUff0)r@G1-<@!ItU4cFlCbSgubR81b2w2J4
zBSrrMyf+)#<Nl2)7vCvCG%r71RTj9_i;3Ag6X4>49hb7RF)V?opr>)1s=6;|r#C)C
zsgFvnWxQ>)f(xjbwzSHG_@e%blpm6Ku8|?E-<l(!G@&j3p){gxZ}NXkK%#p~JlDEP
z>gKBYYdrn+F@2nKJ#`9~5`TP1GWh?c&hdYWQ|Q6VrJHu|9tO@?hp!C8VO1>wh;(*-
zCFTG{=v6U%9;TRqp9ET<-J*tD?U3+sz)<)qF|!KNZ{ZKMTsxEt12K90bj$n&%(>2d
z;B3yBz0kC}piOIgl2?asHG9ouDT<*Am~zO%MaW~jd;7sFA?RKju2(afiO2Ni2#m6d
z^eR*iDoq($*lTYnQ}@>Hb{*+7gRym^nAk;z6Li%-0fv{twj2|5Y_2zUTMa;M|5s$8
zwWO+|{k2&d%(4BGJYHQ3Hn;~X&TC&CH;&b8@nBg-A6;Fp{Jsi9(r4V}lY=Ty<fcs4
zTjgasuC=W^Adq6k)`C>n3YSgpWYUSBq0nj9CXzek3cL;o?{AY^$+1tSnIHmT_HVXX
zq%<_&{v7lC`zwBW?V+1Py^O|mrF(E{3~fJ0qXj*UaOR}UE8X*43%sy9sDk@5*hNgl
zqd!3oRq6yn!*aDVoQGfTx&*u^L7z(8=;#QF`@m+MMK&~U&H8jkEu2he-bgtPOzkp3
z5`=d#LAn<Gm%Zg&Kgsi|G+1qu{i2HcIhdU@PUw%TG?QTE+5A0Z4_OS+%gNaQ-P5oR
zJwT092wWHtyD6xXs`Ue&E05xq@TiK4L)&*U(tEwuKQjyp&5AK)&F`_NR}E7Ct*ahB
zkgEH0Rtq|0ZFhY^Pi|DjZi@IV)RMb^vK5?%o})Yo+kH)r4YlnHcZG>oMHs;{wSH0$
z9z1|eaS|BHex=6>=~gsH=p6uq?0@Ax@;Mgt+cVhG!B`JIu`@P>F)RMR*9fk%Y!O#P
zPPuy7vs}dVMnMSX8JI$5@pgyW0m@GRiJA^T&d_7Jy6zay>TRcD%Xc6fr3a#RT;+&u
z*tvA+IKLfb4$@9H9sVLfa_8(VSSad|aqShO*PpwhEqEm>6u(xgd5duA99OGRKi^Oz
zYjR9s^W%Nq;cX{VOz)dU7?8(hK~p@%7NW!6wTT8NBa2gwOE^J}#QzJ_8K#7tCu0El
z^KCcGkuNNCix~2iNZfwrjWgf`PzAoI$Zrr~@M7x20>8X<dj<f+FQsElffyokFeB0s
z8fPxEUlLg+-$8a)1Cnm50=50@$<}0~J^;Mq)|(jMGrCu(OgawET(js3+zQMu-n1m9
zy3MZsa`onap73jFbn^?#Su$sU;OGAbSe+l~*fWF#$Dddk;{<pcT7A1Ye0$gVb6DXK
zBXY#`aQvig3FXevqXMovpl4)Nh#K|G4)yY$m!BM4s=n79XU3^_#0(T@K`-3SR<8|M
zKrx$P7kg9S(tSEi+Qjfpu07J}QmyLnO*MDFA#ph=6Sw&G48U-ORXJ!<J!!Ru=Ii1G
zkOjK`PKTq2K5mWQrg>y68@4;1!+0b1iFep(K&CJ<xfta9Dt}PPa<a0rGV0AD{v{$#
z=eJ)Emmj7!75j?_`GZWkSBB*mDSAv{cevZ!s2vy+BPre~W0}W7YAD^O9~1Td!^dlQ
zdsCvz+|K?U<`LqL@6uy>b(=FmScxa-;Y6UAl{Danfkn4i%sw2W!<)0x#y61UW><Ea
zAR9o(X}r!xt~Un8d@NqMCktm<Hmr39CFp!NkkbL-3exp%izpo{&7)-%g_{i2MdXX8
z)gD540wp_|(ty{oaQzig#+2mZ=hzoGTT%j-3%AZwWKRfYmp$j&KkQMt1JggV-@N!;
z1AmSO-dPB4j`2J{bZ_nO&*0pb>|`r%B&xhJ%vC~CMJ1~8HaP0`SBX)rz-s74U`|7v
z;icMStO1vYg;-;~VCgfQ!*t~Lru?ik+kEWVT7UF0y`Y2+D&_z5^z=lQ>)_8gyf`{g
z9H9e7co;cF<&v73`_C5|-UA&X-1~DJbl`H4)?ogFZsf97l2!yJ4p(OHYIqeBKwDWA
z`Y;Mi>fRCo=b1!tz#=@hidX?SvNgz;1eYn4Zw7l_Qr2sxh|_l^1RelP`y%QwHQemh
z&rp1QC_qyE_y0zp*RaFA3>5BUjlOjRAPATfOldJqKFcFDmgWX`_f|%_0Uk$(dm8T$
z9On}gjR^o*pOL8@YE|S(**aNrb5g`?Ooh#m$kaT=qrv+a8y_EHSTluBC3zfES63g{
zbi*ufph*HpIM~4Pz*zci3#YC(PyGZ{f>5QvDNqmG)g8=ZH8ZH9(>3}G_ldK$lP!$5
z{eg>D7PpWm!%+IZw0_h8YF`Vhc?}x3Y)5_gXrM$pdZc~^i8;O<yWai_3s?&FqwvQ?
z5Fz~&BfIc5<#dN<BS5@5-I~fP(#-diwNhKAeo~3E;Su_@#NJU4%eGl~Mc94uayOk<
zI&I*axV`HITt>TKk~(RTeJ}SD<_t(93Op-SiHi~=zEe|@u_)sc>EF?^4cEQG7SB<1
z*L_NVN&El$KV?V$-woLv_HD;5qAzXoXc^{^N{Sz5F)=5=Y%fqgR!a3?7Rv)P^6Q^w
zW&HlltkUjqD9Xb9GjFiT>y>xf(pikXRa8>U_ZEtem$6T{Q<GyPFdXA`V^&F=I1H^K
zNMyk6A0fx+h8U$MFbDtv>fTOh1kqgK<jf#K<|VZaVgrPbEozZ#zp(Z6>#=+5PR@<p
z3<b0q0LjoHpU1^hXJ*0UZ}X4-xNyS@ZDvs=>u<z$0>Mgy_#~MI*kl?MI!NISOsZY=
z>1qv`ABaB)>jOSf`|fhQo>EjN-fiqZ9RdaX1VA&LihM+v&;V)2|INE*PLwIk500lA
zotx6TuG*??V&=RNn3fR7d9k5!k;Yh#@ge^&EY(p+`?kOr<|n9&={x_Cu3?^w-BFAm
z;+xmEcDG2Pn8cmz?ou(x#asRQl)`9Me<B;hmlY_tL!#sdU_^YV8)rQ8878q60PB9i
z434b}egsO!?r`LF0o#%8S7+2+*CkX*X*nqWH{G5@OptK%f>un0f->2d^7?eY7ii^;
z;^N+#ux{s0HnWVHM!GB1&@{n8$OH8Fm7MEX0MV6vxN!^1HAhewPzMG2*LV>DD;S`}
zk3D0;W_0y?#vb}XKo(Z$H1YjYCYyW^(|Q@m(-~~IAU}Bl2K(aSo|brB20t9&&IdCL
zkmNAP{D5wY=me&oLE@Q9Pt%8*=}qa*Y-Ptd04(%|TqOvruu<U$24qi9ZlZ=7YhW9p
z=rk@KK;B60YX@4QotHHpP6sj6GlTE2J*!lIbzSXKOO6ruRx3lPRpPm*pn~nC1~VTL
zUY!+pLkh&%54s649QDlJ$$|Qg_Pg;aGd3L?{N?`+-D#M!#j_HQ>?L$$?Ed_8U%F<8
zm{>B}CyZ)5bnskjaP1bECru(X$y?Mhr}ZX}`alR`GU@`|1~bzk%|iVg!GwM;&B6gQ
z^ZrKZvQDQKx(y=D2&0;0UXMqatn9gTD<Po=kacc5UA|asB%6_jwGmgrDHu6f%pq?B
z>^A7avQe#qp%^n2*m-^mXw>3;(@1SZ5M?XGV7nj7dY5n@SiyNIK}Z;PFuN@&uc7^(
z^tR}TPDFyJA^r^J(?RH^A}J9mq)NE!&Sy`QCC{Bg`5=)`vQcJA7E!0G8nUg*?(exI
zN;&|yy)_(P%}~woDG#+`p_wXP!N9H7_3vC5k@<mVtWyA}nwTPzECX&hpyAjx7iE)$
zSF6!FDI3!#jt9#04DK8jeiq19=bE!7EiT<65KG97J;kR6o&iH2CKDkcx}L3DnXGOC
ziK?0cm8M|0^4AtLZk4J}fGq(%)QHpy(_bOIsV2_u<dbelwXm2|et#PV`Sb5CeGasD
zf>{(wCbVU>(VE@8G%lC7wk@vNxdWyT#y5m=RZ{h)(p^ET<4aNWn3>|&n4P*lhz(pA
zcp+TXEg})g<<<yOJ_42}FjQd7-*5>*-$a2v37)uHWax^ghOCYKtn=2b@lReQzjn9L
z{=*R(#!x`Qdg@yZNf4k4MZ|;ZMbw?^KqQ=kqauoi9&<*ZQ)y-h&!pJu_+OM8I2pMB
zBZlJOV>Av>*#pl7!X#1au&hM`yZH!e9n>bReVlL~BS1kt!X$#cnJJ*D83BCkS71!e
zt>t@5nibbJ{;61&SQ<T91VTxT`HD7PTkAev9gO3EO*PteaT*OCU(EJcbFA-$pltaA
zS%zpdGHgXWR3payX$im#K{4pNUn-qwv3!ncW(|AO#Sv&^kcKbjc-ORq+5ZGxSwo^h
zBPLhxjOm=w*D~f4>Ur+dc$TWR-}!LE-&<CJ>vO98#Wf6&`?+W4@P$t{yqD(X#_IAE
z_bIJL9Zq5N5&@kQrkQ(~B9~Hno8-Zk71pp4@<;BEJl<jBakSeEnKbw5lSY0-xSTLn
zXs=LGneH4(KKSX4hSC`#`1eE%p#hH;UE%BI`qp4{u*tPIT6e|D6~sxYvp}%p(tY6I
zD{faPF><PNrtd<RsCo3LB0_s00&D6|%tp<Z9$o*Kn0Sl}fTCW5KFpJn*i}YS1vXkq
z4H%mhok+c0kn<aov+rl;o!eEIl+c)>NxEaXIE>?P+b#XV$D25nvSuUun;NZ%6c2PN
z9urTy*X%gA>aLggKWiz?E~gpLSD`H)%o$A#D^>+A2~@iIfPldaB-Wgn(F$}f_o_9%
z{D}J8A?E7AnT{cHudod|xtqB5089Nu9);&|1Vx-!L?Pn+npCTC6pseUC*li2y=@-9
z>JwmIlQUR(C<Kf1Sillh5lMjRzGNJ_=ugnd5SI-SFd!wtUfetpC6BdzbLz>0{81vP
zt!+>&!0_z_4~y4`Q-+2(0S-^-9nf1f!l2bd+C0-e_)L|-7;%}crGF^}N{an>h)qM$
zq^-g)yQyzC*~5g5k&wAEK<z2yp@>8hr3jC<-dbktW+Y=aV(QH+syw0hkbjLD$N3?T
zWX=}$2d8sXS{~UOnC-ErQqhoR?Xmi?HXd>ZZvxVPPzL1<Yy=^Yj33zo!!$D{#LB(H
zPfm?F^>B;q5~oZq!Y)Aa(>FNurI5Xls--&eNh89e!6h~xf<;MTpau?KpX?@da}b*+
zyZV$e@>u18WMst4U<#U1^6cgt$IQ4|3g|CI>i3^*Vo=*%h*bda_Wf1m0xXAg#e@wV
zbZ<{fltq2m<hlCfq`Uuu`dBHq3iI^eUTA~OHZAy)LR1BClz=oz{={K{GjECQ6)+~_
zp7G69+m#E%uQ1I*YxKhcK2_W>kpVje+Zj-FB<LmoO|QcAF@YMH$LuS`T*)(kEb;wM
zoU^D#*2tHS__wg~Z1eull^$PkPMurBtnLQ|5fU|owt$J0ZRZ~TH_1fBjq~$G8r>t2
z<&*5=QnFcS!$GUbmgkx1tc;4n3=d~8)VF8j)on6t*h<!t>@4l2b&uiT1vJ%Q6c?f+
zF6_)9%4aLlt;&6vNao@SFS#$2y6&HAv1^S6qwZoyD*r)-vv`|^nFyyLzngjmAm?Zo
zJEu`o4Uo9+YRVidTUa)~`Q`>@1Ww^;qh;298#MkyPYY7k>)x+*!3*~r&DuxiUHkvF
zg?{jI0Uhx7w(}W>8+z}pqXE%gDTpD-1xY5c)rddAwJkaq4l|<xg#c1^6hX^=(JHzt
znfI5hEY^cLIlV>~m0;JcJ*Ph4+~KvEXYlsI3!Cld#;9{3Fp%dTnWKeTXtQS{)7$_f
z_6i*3#u0`L1qC}(&+TrYY_OJ&zlacU8bUD*O!*}{I4Fp?LqTb9@QaugVfw|g#S0Mj
ziCMPLKHwq}1vEvSk;41tFgtF4P&?pNzaZ;mEWvcIQeCi+H+&Dd3!*{=l-S4x2^8*)
z^yYJNOwA<%J6Ek|JTt!<B?)P`{uTi44w4IqklAmsDDkr&hKS4<Tak~UFYQG15|i+=
zy^r<#I>BSOO~Rge*>_5y2h=|10VgKtEw$Mxj`!lV#RT##%o?bTRzpY;6A9(qk<uJ%
zM9}<aoKOd=1T5geM>?2Qd8o@F;cNR}od?E<I^pmos5ioWq!)7~|2Dk9LOA`X%fcaj
z54Ev9mwD_B8KSh?nuG&DD_sI%PuY$PEHSY}KrHdukTAAt7C7V`MTGlgHsj!aR-|R)
z1p2If4ZQ-Sv45x}N8mg8G_8<58-%r0Gu`(qqBb7pLRzd<IiaG>J0l@8%c?EtnRmz;
z_O}4XH@e42=q(Rg#35Houba9VEK3{kp%|O(P>sU26ClE(LARxs>skgLh8AO){X)YF
zOJlchEJArRL>VT=1l;h*JhOwGDFVFrH}Rz?KzN|i6{@TO2wS)v0mfAogcAuE2sAhm
zM7skln}8#?ZVe$wQ@gHCJaAd_2_q_2#%P7T>%Vn7yAyf<x(pmOW^~LP#c9d@i{;85
znp|t>rBx_5#!d#q%8~i=ah9n4%+Q0YkXEN`X{SWd*LwhFt4So=eR^InCvo7t2ua^y
zV|vAHfio%tZ*$BZK~O45%2RI0`!mzx^MmNBKImN<EU#w^0B+`Wu>z%uH$iBRJCSCF
z_<mml_Jb+CdGmNYkL=%f>KXD~p~)z0SSF+@Z_K<0G~N<7K9X|Q$(SC7+70r$;Sg)D
zFnC&C6d=ka*}lGN)7{`xiSAbx;dd&e0f+jBlJwtVk$E#s7CkrC#mmuJCZ|uI5EFHK
zb7TslZwl1|=Bi7kp54Myogsu_gv@eW&efkHLE8MQ$8`QR6SnitZ2oicVy?M<K;UmB
zf=cw-&}UgY8nlUINW7NG6F7zl*Sgr4#?_KSE|cB{B%WB*uLPoetBwr&jI#TboUVa`
zgDD?Uum~(v=lO-hp%h{1D`=)nLXXFxFlecar##+4YUwp3IHy4BUiiO^VlRI3A20o!
zObhfF>=n~Ervj)s1?u&ryv_%jk>p+OQ|ZaY0N$}rWRm~gp&4tlUOVg&;x_EuN!;}x
zJ_fy&48wdZ@=+}xb2T?bd+H-YQ;zs&7Z?*}f28c<CI0($_M`v%c%Y4RT?QdCta~fQ
zj7JnDh}RU;%KSwyw;(Z7_x!bEZ`dWGrASUJ&9zU&cIByIwFJZ5Z3!nbZ66^;?U|Aj
zvDtb;Y6u*17<mHQFBAG2)4PlPDD2wV)S-bSvcY_VG>c5g6UN7AW%{YElQ(%@AE11O
zsFe1$Ewb{4&6lmKM>-WOv~}ap<ZfvX42Da~*njID`=0AV({0|%-Fnw?Mvf;mtj7C#
zEdJCRJ%z$AkarPz)zHk0s4OGC>830vc%_sT6f!;72j>_Re)`FIVNaguB^k288pFb~
zFx({uaUUcS?gUdV+%Ixp`9&6?cwK{|aMFI<OUTM!KFIUQ6o?JqREg7ytOuHj_fkPJ
z5X#BhL}=)Q)Xbar<wCN3tOWh^nA3nAxT6(HlIN#bzN<^)PsL@$-Y^NhR)YX>X)-ei
zO7Z;L+=mdP%^}-*QgqE&)EPsYeW}g4Zg}vUHhQ(VOPgY>$2==xz$^rO$;HdN6{_j2
zCpUY=Lp^SCXGOGCW^}XHGBo9h6QY#u0C&uuh^5?JHH{@*=7KWLo!Jbp1C1*?HKE-g
zerfrcq2G{Mee~F|CWo|?g<DQ^`T)bwjdyf`0s*!5CqCiQ8&`ZpG_Jx_ItpMy?8oHG
zyE}L2JpYCblj}XE?(oZo+g`nWRysDq{=_s8CGC(s3jdslJeYvuD9XgZ*8t2jYbak6
z+qM-h=GP4!_`7}kOf9g6QoIowEM|Yd`)FA!JPu$n`XN8$;WDr_<!nmNBs%B;M+;a%
zEYq8?_qhZk3_(v}I$m7VS8YDgUz=_F^F3(gOH)Y$wAd1>l5mHb%(ja47rlUMcYS`?
z4M_Qo-teI@laX#oepb`$bw?>tO}LJ*BMmNx98R8y4s642FI(KkfNW8ewc#g7Hyb_J
zQM^q3t9$in*+`M&4vQG;DKj6@!Z{AqiK_pT!(M;qsk#mty+{NMyuVzrew&y8@1rYa
z;jRP83lYm~_(tzeQ~BdAm<2h5EbDOR_7_QceW#JDhov%}|4iQ&2w!q`;-dG@Wi-|4
zPK^MSnqA6`5PUbjJn$axo7$*-M~g>DL{Mlbrop<6FYX7WkSqEdQmrZ7VYT@h_%)SC
zc?BEVB@6Q;bU8#uz4u@8PT|V1U)pWish`&QGdP0M;TH@5xKw3w;F_8HRH~<%kmrXi
zofm&!bbj+BG*sB==Y{~q%`@Vg2i`U&fBt-=O>*7octaVBx)0wLMb0)8trzNRgZT+-
z4c7HyD6>sCmkzdl*iX(-VKC!_%ZRWee7>IXxFS_JQ&PAime4V)tZv+P@%t-=hCgoK
zuBvG5P&w;CR8h1qD?;c{%&gyIp)=rTgPh$x!rCgS`Bo-(pYAs9L&NY`L17d+d*tVk
zG*1?!z>17-?`xn|SDBl$549k7f@7fWOa@Z~<J2IF;mr<n+V+lg(0^udj3$BA<~`n(
z+@?W=jrn**c>MwoVJ6=&GyeBXilc}g3enKyoh%2&>l4ver?}^^qkek;G$iqPTq`{!
zF7C0=i+J`dt1%=IyTzwEG;xJm0E>WHe_8BYop?JyThfED9hCUnube(y&pQ^PdjG+L
z6L~XnFESt>e5CX>R3TSCUE3&(=9sc5xix6(N-c=2k3K5rOf-sd-SVSQ3<m7)HkGeg
z>6LE9c3l($(*{u}j#1(+eeQthtQTk9TMzNLPmhmLb@O9lHgD!kDqZ<9*1|pr%V{@s
zDas?CjKe9MYG7+p?a!x%ODZ83>obczy_E9Q=d}8pP>ANgO+k_y6J>E!GeY9jt1-w3
zV|F+~tHP%?_1vH(FSj^A6zk_IF!p%0<G0jSjGF<qlz$By!OfiF&W;xA_cuRs6wESk
zZrg-!VT;al2<dDswiEZ0jScY}faKvuU8$|s<XrZwy8eClrwD2*#ud~Y3)EjYz_4$s
z>{^LPgq(Gr!9s}BzCi`UH*Cb3u#Qf`ZbV`h_eUj0OMcK#XtS2En%l&^+^>$GH|hEd
z$;CJ^B+n$AbAeA3=;zzOGsP1%@?B4iu%>FA{7^h<W3&6H$ng}FA3vaqKAeJk9rCYs
zjKlUNj?3<B(hNu1qvQ*6nXFvlp5afAB%HS3JDBmA;-LgCnzqLGU6rQ0^W4}c^Q2re
z2tlE7bD3;Pr@5|o_?}!MN>UtKN_ptxxZO5@m?>7Nwoz3Z@-|YPhTBVIEv8Jtor20w
zO-Y6XvixE9+Z5W+-6hn=*$k^EY7`DA<qO(8(X;)i^WnM@4+shB;XO-+<LF1GEv)%H
zrIOj++mnonzQA~9hd_0)N4(1sH(|%f>gVh>KIpYy-tq!#LX>a)k0kTj01ZeI|DOE8
zYL(WO<E0~AZW<!kCUluE4^Y$1C$IS2a|+vG`2e6q2kxe`saFqVAe<!LX6wC#v!gLX
z8zIr_d*L0vC=ybGRh!qzydu2<(`2x=D%qHoX=l=8SFvD|=6WtF{NtSlSaPA}Emlh+
zu~KN|b^O0oj+^7Nj`O=5nrZobe}l<(Q>};Cs)Y8NTraW-d_KNzP0|q<g0XED1_lx#
zG4n~7WLrKIEBY@I+*yKq4=EYV4&i6tyT)FQLUmx8ue18J1h$YB?>fj&cSQM$k+mpW
zPvvhYng~IWtI*<u0XD~>|FPbtOSEJwGpG(Vy!rPXdiyK6R+yi)d~X5O^IvKjvg=|o
z;vJngAo;&0*WrJP>gB)xL%48ka=FeM!V2*j{v`VG1@q*2mZmV4TcAUqH}A*+t^JAW
H7jFJ11AA?C

literal 112258
zcmZU4cQ~AD_q8+<f<%bu2O+vJO7z})?<VT#qD9n6A_#)$-Ke7zy_+D2IvBksdat96
zGQa2j&dGV->-y%;@yz3Hd#|<EUU!(Lx&k3SB|Z)g4xy5wtTqk~-g_LJyRYuw2EKt*
z>XYK&Ji<|umC}8ezB7OC-4i7`+ykYpz4)cQy}iH&8uw5SJny+%p|pGDp|hdQ%_b&x
zZrr4t>I7bs*EhX&^lAc|a3vLj{rz5Yf$C~db6m}tzbm}D+ct{m%Zr$oG0$@dQUaZA
z@2Vq;mx#$rd&9&smu1hmOm%jCr*CuyJMvx=tv`gmdg1$(|HQo1PzemC!vzNR_s92J
zRaGLh>&;)Apv9!Az2^-5Kj=6E)0s#{S_vjep$$_4!5T`Qxg_w(-@=~HNA{1O_YOoe
z{`vLyGgVqi?5oXc_W}|g3qD@E#|8296nv->#!o;0JcDEO9<87XOPLX}Bgl=Big?9j
zJ^b(AvbqhkRIl*Kd~L&)X8G>(sN8Yv%Myy=zhH_H8c)3)szO>jPGnHTvYqi{nz`oz
zS-2=urE_1k*-1iTmjD|y`kuNj`u1#&NGx#`k&5)4Kkt1nrKCsDHi=H@tsdiJ7I75P
zFGwXB35_UWeN0J7vnB;PqzQA@c^6XI776##6&CK$wfpy{uFPII*E9vlaPxRUudT-v
zHNHh3Kz7%Q#Q!sFqtDtnWhUR*$~9YD6CNp}+uj`VgO=XR^V-SO_wwdwwtTUB^5=y(
z51E<XPta45(YS;=YyR+k7?QVm0r@GpDR^ue`p_6Xh>=xj4jIa4%5ikyy8Gu>?@Og<
zB_V;BbO+A00piCoQYG;=MGuX&3VTxN|2%{9^`0V#J3yUGxM2BRr!;Pvb|OE>P7MFn
zp9g-Kfb`j8Hqtu7TX`}za6#dp+-}>rJBaX2STi^r(YW0X_4pWBESSB}C~K}!ruKV5
zh$ooj!YABOCrgt-OM;$;Xwv`aOPDAVv+c^CcjEkYtf+$+K%<RfF)_W*bG)CuHsrNo
zs|h^LTIJlTJP4LWU&0<cx_xs!eEgsD|MzDw{?5jL8jQ(^kxLerb9kwKFpDXNKu(b0
z&jUD%A4f^3Lo{GsLRVC=pUs=3kg2f)#*EU4+E-|E!R554|GvzcqOPt^EtRiKuS7qE
z*XDR_5CVZH1ZQVwyDql*oFBB0mlz;3M5vxV?S2@!UvI0nRj=CSe?fNL=5vhs-5F|b
zPBC5~9F|g@dj-Buw0|lQDcG;Bxhk6!PAqoM(LHCD)GY2vwOwsDt`MQkN9S<172Ygn
zy>ZVR1_J(;&f8sG;fV()Cl>#Xd{eK=y7%T9&vScXc_0O~U~WJw{_X%XxIO&!(Tokm
z6(#|`;kD_XC^Tv|s$Oe;yF2&IVt%<NI)z>nag8C|SZM9(je8*~Cbl=<yuN<MCc9A4
z+8XfT_PzcjZg7G6d?KgG?p)(C6l>yI7<kXf$f*C0T^_P!pEXE85~pk;d_#H&hyUJf
zJ2?G!TVPFXhwo?oIRR~cBt^0e3A{z3RjNx3dC$3eUqf9a+?K4v-(%}7=7(rzWn^S(
z#%ijo_ZM;@h?_gCM493NY#>R*yg`L|t4%+%xaY*Djt%ox%tJ~(yY-<A%vnj8==-;B
zBqnB@;+ZcU(4S&*Q|KGOtxJ1e2?Dkp$pth0KS!R(f3a-RtYMyQ@RbW?6f*KYaTqT)
zD5>jCtT2zs$XnB}`hq2IKcYBZA7RYTt?23TCnDY3?n|)Uohk0g<@q3``U&nl)8OX|
zXVZ2lHqQ`-MAKNM*kDSH_$-se=D3^vSk}KQL-IURQt$jT?=I{AowsYZ{?iE`55rYA
zp4w`7l3VuUn0;}D7DC0(Uu-d~S~)AROez5|(M&<_sM8H2imu_@?l1XPp@dYJ6(wKz
zb5vynId=eh<M$T|RE+|%k0m7YrG@t9s7(m51_Uvqh2zYj$$`Or2YNbCu>OG2OC|K4
z)~}NEiy^~T(VM>=9U0{Z4PSw+9E&;?d6WbfdB^h{lOU^06K$F=O#F@X{W>;y7#x{l
zE6Fum5Tz$Qk#S<6>0@+CHGD8VTVHM`eCVnNG`}eSfNlu;7zgrgzv0he`>UVVyUv5n
z;K#s-zLuq}s|<08>ClHWSdae$n@znk<C91#L2k3EH$A7$!ZeCnC!gG`{Loi6*qfk$
z%hR^N>s0m7<LjX`LCEo%S`&2-OEIm`5p1FLGOq&6^W{q!hYs0ib=XDf(M1=D+Ho+7
zo=GIJ!S4{1#Kbo3DNLFE(y~T7NLiaJ@%Ad{l6Z5BfKH}ARWHSY(<0S2xJ11t@q|mr
zW8)?2*U4<XiTAGV*a`uXTBz^Gbd$&WwxBED?jVdCTtO=~Rj-LKH^ZP!Pv1-$vquu=
zWR^7A8455rPWAQ*y*vPc(ph!jrY-McGMPwv^Hq}0J8%gpo#q<cP;fO8A4Fha;KM&F
z!kb)~5UjGg6fbVF+OJjPSG^Pv*f&|6=+&04bxTUg?E$<_f8-Xu(%}PDZzkpVxk{_a
znxZ(OoyDHf)%KuEI*CBTmU9FF`4IHtNNz>TAF<pWIp69>u9D<;w$}#5x=dG*37@cs
z6crWm>3xXW1i5y9^f@XT4&k%-!6MFYiyJ$dMXBVQcz!;!^Hb}IJRGWg^l2oA{ACPe
zc-j+F-4wRm)1@F+M7DkU7Gj6%EJ-S+ktv$82q*L{VkrPJ`cKzCuw_lzoN6;oEYFZ&
zxIWlkfFx7EZW-2n;~<Jvv<ouVrr*uMC$abC&0$hW<T9%|IOnN6R=79vd+a_x)6Lhe
zh$LWN*AITns1kd=;+IzAk<r1=>WVHlRx`qFeaXmccZXvyrm20zAvpJBM=nz;qCY11
z>4@!;mcBSf<Uy9tx;o5uQAFIR&2v+`GlcMB6N!$65vutWsAnh#qX$-a`2LLZC&vVT
zL^JxTXy98mht2`?uOZ$DlU95=sD1WP)#&*`LiZV~L{4)+*wux}xPC?$OUzGvit4^)
zhGwDcC}#EatCe0WGlPXkvXSTFKB|P_MXKYpV!nmjeN-O{A3G>pBbGKr<2!U@nJ5yZ
zsNT2{pWvQoz~W{pgoJ4*YFsu!AX!ZMEtKDh7Q$s7_hc)d3*{a{(u$Ahszq_@%V7p8
zTH0MT>AMEwMUHv+uwN+t(2cJt3@!f79u114kBQ;r5)ZgN8pb(Y;}#PZ;TtLDqw?pD
zSPg@{o?wMpa^$*U-B*lOl#O+8)hx-@t2<5By|MGnXUP)YM4+!e9_yMxV;m~Yi+dnj
zRV!R+HLW1~(~>7v^Tm#eFrTBeBc31)6MZvlqkY`8UMfCaO!{1@==(K=zX(|cXHjDB
zC(7DFob+S!U247e&_&FHCZ_J>ro_hAb)P;8vXPo4Z%(Qkf$j|g`Cp$a?_ny*x{AAh
zn5DqKJMi+8DWkBGP@iUGUe$9wHXC^o^&5`a!~_ZRmXF2rd%_=W9<CaB_c6_EKMMzT
z27NWMOp8!c;&X<2B2>8Z;oWc|0U{=X6?^?i3U%zw9RLi>?CkD?9yx?l?kqyT|BRVg
z$PK*4Ej4cyelD8@4#a(qP-~212pf$`&A~02*2;Z&Iz0@~npE*)mJekH)rs``N`}=>
zL505jamc}MQbKW%;o^FVG1=ot{BcL-g7M9?8;<lr+p>qL_OH~;wrocprUri7?D4Bg
zw<O`yxm;zpJtSmg%;mM|dpR9@aAugO3*gTp6dN#_r^IdE@|r@4ErE#o96%tGjt<>@
zMMq0Z?IurqKR-Xp{9nIbw+*+q(}Uam(X+=V+mosaa5x+t36_@b$W@4b_IIj~eES+)
z-SQaXq?4N$Fz7Cy9`+cNorLDFVeUqAEW(dQWkSV`s+N9}baJ1UXd(gw0&_o5V~>tj
z`@`*hbaQxJk(#B)t9cORbk=~kB_`%E;{DIv0AQilFb_pw>~vlx^?i^c29JXDvK&<T
zOiX57=9>&EjKe6#0GO?qZxC~y8T<C_B|Lj^Z{9DSmGPxXiblF@$Pind(=__v_wpu+
z|FneN?N$wZmEcqOd~3M_ewKaG>&DY~qy7a?0mBmYR%841nLYD(W^g_vk;J4R#Ym@g
zuGGqp`6CeuwklLSgo5eNmFpMoM&F+k6HC!Q*&2H+KHMqO5IEnYS`FkO@LTV74Mnk+
z6YMS%@lyT1eczv@V#|uJm}p^ACD;M>K=Ql`e$xCx@BO|&Ep3vF`1rh{)RdIz;cS_r
zj*s^U3~|}D^AvlcXjsRA6e-xcqmDT6MQ351tUYnevLv&$^ZSBBOKxy?77<t|_8MYu
z-;0=Q^jLp?>rPHi&P=Uiz1wp4_2rrO-dxHii$S?5-_C~*ABKj8{>kQli4?X#Mw;dP
z7+YvX#yGg?(|45KCW)ytM97^xU*ryavw*c$T>AM{KFmrEEZ{v;_pulaA*8DMViC8<
ze^rZES_LRSZ+2eZPjA@Zj&tU|kb&DkMbVL3lwW{!;$7`~>K<1)<w|jI$WZzO-*uxm
zOuXNqG%qr0cQ!-JFOho=dZ1ZtJ7^bVnO>j~aJD}y;XUNU<@H*QP`i5U{KK6~{u95W
zl?UycNL6tVZvdkz@Vzl+JmE8raT40-GUFkHBOUAY@y%9hmB`(j+~fEa+YEkqE98`B
zlvJi)|KmiercSw-)o;<&#(^qlbpeD)-CXtBGvmaT2tzvg^)A8gje1OV6b0YCVH5<Z
zuJ_}R@Mq@MWSQUTxm)`kZohZxFn$$tty%=Imul34QTgktpud7_DPEDKBDViRl>N-w
zBro|zg1n-nxxxkA_3$_b7T;DK#|(&+t?iCr0)HGa_Z7uHAAl$i@)~ZAuKN4$m0ZcY
zjO27-PPQciuU^@Y=1omaWs3P}|D_H_5mNGf{)bCmJu7v5io|Ll-(a&yI&oV~TQ0oT
z^XXc}`u9_o4Xc+XJwNIA+LrEodwetRnfZ+=6OOoABLG<*5(a-3gc<hf+S!<rkRJ+s
zXG?M_o}SfNP`8ON?5nqG`_v-(hV@8I(n<4~-Y?ITTV^HtoUYuF5e%LiQ#=d|a~&O3
zI_pE>IH?Le{+5=OCHiIE8p)5yC@vPE#ZN|yj2ujL9+_6#a%yP&zQ_vST;F18Y4X3Q
zI&CkoEpn5&H*8<V>(YQW@>2_1{I01IG=qW&e={mL-7^?p)9*(L4f=708=1)LV5q_|
zxuYW2MpE@QsCz_{)gLxN5VMJw5>0`vP4-^-i@SLI8Gg8PiC;Bf7ZT627xVh!vhF3l
zTXP(x7oNW>;JVO4C+`2sdykq%5y5?ReGL$3XD6q0b^|Wu*D3xn_{GEZG(|q!f3yHs
z@XSyQV-FA%;8x$0O;kadN&Tow+haVuP#Tf9{uf89Lm47o+Y|X1-OxUuXi%Pw2Xh-$
zJr@;ikq*WODj=XbC}@p|i4k;}vqQlN^|r@~P}wq}cDY))^16t3hf5&HP+qKgtMB2i
zL6No%GE>ac<!o<0P0%$nB_$;hv`)M^oZVULI9Z4y=Qigsu2JMkGP-wfIGR>WlhtXa
zhE<GC^xd1^9l@S;z<{U)UD7e`OnkgDp+o`a2Nt@zW5?^r9+rUG<)x)6+d)dUhxquy
z{^u{vV)`nXnVA9BkaG-sX>t1>((u!_)G^^(g^>Ukmu$xuQ^&DBBbl2QJ5@NcluH2;
zQ<pB^&N8wby>C~{#~vi}6_lp7Cywf6x8PO^tD#OFE=|{=u1X;ZMZ+zher|lfM6%jN
z5#kg3qDMV`O8bhMwn=Q<5U}N$>3-PEQBA2LrW1WMx4N-mhzJa_>WP|f@~QSps{=5h
z&rk5iwR1_10D7JO!dcLMLihTOLn0-F@{%(ys>_%)PV0w$s%G_-<u}}z@>x?#;eet0
zd*+*sUi88JGe@iO4~_e!k@noE?BiCvS~X}UkH!yYVjo|~u&=xK+3U?D9*P>N5hN!}
zT+nIiYjoOXXv*@dU61sO+H5kFx1TMntyk98^z#&B2&n{C`jeu0R{?~}s2Xc%Xt+Gv
zKlY*(efQ|uGerun>yK2g-ekdGu!@R(Zp4*425m2#e)FW-dw&5a5>c+Ld3kwe&2Jlf
zM?QGoch-D(eYOZahPGGQ^e0MSuRwqO_3QhGJF9&Oxe(?21Z+bPCOj;xvbs9=&c#@R
zY#2%W_*)?M2h#-0%gb}+BXi^nb<`m0p}Hmdk;YuW8Ou<8^XA~-cjx+pfV#nffe2Do
zIISeghWCPvx*CFn@1*58&luJ^Bq;MYvEWaXm6ZYGQY#RK3{f}nvDH^q2?t)CyCSaT
zUno&{&el02VG<e!dHy@$WbCPeu6xVNG73C@WAgjbbyP>E!I9_Bn1Y7=SiSWouM36%
zy~|yTW=b21o{uei3mcdu@5y$9W+L>?%zpLcNj$<ELaJB&CC0Wb-R+j=`L;&5b0Awy
zcrthP&7?oWB2?*1*z$@r3_<979*b{Jj?!9axiClga5h9pL#(W<&iePrxqjw^bgQKn
zPO=(Rk%~btuH*v9`Bfr8gaFv@ub+i)e&%Jlf!i2&u>9w6;Kq_j5){0(U-Z&6p+{xI
zf4e?NF2~g=KvHrej9zFFh!ODqLPKaqAsN2ZA_4+@x~n{gi%>5+X}cBXC=I^{M4X|J
z${HgaI=*Aa?Sp<{fRxfHIT~5Z#OQ;}R**34BpAwR`0ba|g)eI)B|qk9m4GQvwe8&_
zXKEq$JRsfxog@DsNj)p@8WT!Hle2SP01M2y-vD4K5dOfHmzg#m0dQL|+E7-;Y18g=
zyq3S;oX8CZRES@x{Eph*B5!xHz^R@btJS-+{ek#grVWw-MRSX;KR!QJS63%J(cUMO
z*P&Jo6YwhA9N291J=sG0@68E?_iyR~MG%ml98OBOv~qMM-$UQL$x;>~<n~ga0s^ZQ
z7(%o6es?4l#L_ayJd$DGxYprhclHc?q0l53@f58(DP7>ZJyB-a6|P0v=DH}3->#Cx
zRrczuyMr)KADmTBLs9YdKb4%3-siIbCFP~0mN}5byiu6S;MSGp@X<N)yHdENk2YtC
z<iR<<&Wa)Kw_cb|{{oN)kb?dU3+H(Aem9uH^&S;(X;|Bc*B&T3c2$#*fX91dDyEm2
z2AsnYEFhfUCX>({3VCBU6=T)I;yhIukcRm^R@(PaC?Sxa6Q|5+tWYaWn_V;OeRMQ&
zu+~=f**kjU%khM(=tU5Fz=Y>Ef{)y0V(Rta46c)=-ClLKT-bbt`G{wQ9Opx^YoGE&
z{8&|D%k9as<xGEsR9EZ>@5$D9S;d9;rw$blMPBRGb=B`0A8nNhBujQyvEM%tXI!*y
zn&1d?aO@QOXD0(|sg;-tK*fnLY4NBBKz&V3P3?j{S}|j{A9{Fr%rpdE3)4~W&o>*`
z=vNdJ6jW4j$Ca%Onl-uy$8IFB8)!S3DFkAb!V79)REykQ4XQT;5tgg}f$`rdAP8TE
zkh9K5)i9ypma)q^=UG~D|H6eT|Le%htyRy=&QN0Tx7W9r`r}!3eu#RksR}!X4<(dn
zWvb6>iJRBhjTj$+6|QOzUZ~y*u(V`w*6bUYECBbQRV^@8HvM+X^^1YIuT%e_3Dy>q
z%|u$9ONQAN0pUbckCv{#e+Knw<-*;aj(SDJO77daT^!lSi86#NJvG9Ga1v)F>`N9h
z%<WqZ39q`3u{^<C(e&dG5fQ1a=wt$VjEl9kER_Uy&iN-D^v91M2V@MnIp?)X0C$wS
zc+l?|Oh9f+fqZqmCa#l?L9(0@gR(%EM7(!m?byhEX0euu$3@`?dlX3M;11eYJ~F9r
znXi7az2zI<-0T<fV=yIC>KNK0$#)&1XTEJz$%Xfu;2wF{1cSJ^xs6OlZ7si;P9f&v
z7&0?e>qs7VO&Clk!JkZQk|0P*iojD-Q)7K!Zdl2%IucKb5|FSk5@Ba&_l=5-Tm>Id
z`DepH(335_&Cz^?XxjM}pW_90DgmcwFJHe`?$1|Fn6GyY^^G1c)&qe+%|OIH6za<Y
zbb;vt4H)7EqtZyZ`t!=20lg?4-cm%q`b6KfR`@2uvai9*xQy!Wfccdc>z{E;4VnI<
zQQn3XludYnMJD*49tD204nv&j*=mMQzw;+4%V*Ym&3bqr#8>Z2Hn)|C-N<$hTRE77
zb$~BtSG;S1Sn?SsG7Am~nVFs~(fH^x59dUTlwVJdlcw^!2Cf`f1UB0o+j{;goAss?
zbm7$!7H4Hu%D-n+ot<rrsjaWq@E}27T@=T;Y>MURe(GRR^FZ#_0)@;8e-;xa9~lDk
z60wT;u&+@Vw$mL%!i@fU-!y5Dyx0+AT2WW`-mkl*QT478?iEw8g<6`B&Z&kxM>D-e
ziq9tcNy&B8$E$r)%rt!QDBMPn^o)~lhb~Pqzlv^`O3-Ea7)aI^ir%L?(;jOB+0QTl
zT~Za_O#+`a0?3#;!)j1YosT5lNo3P21|tHmzSu`C>k4bPpY?;e1EPD7X=?=htcKrS
z14IibD$_)~T>|N2fPg9Hb8+4O3M!b5dm+9RirN?vr0@*6>i;e|O-U1eH(jAqJ?QJ#
zubMfsVdZAc<_&M8+&Hfq5Bm#VUij5Ou{V7Q?CeqbZ$w#G3f0mC!Urh--mJf7e_0c&
z-zb`6Qmk&7PttN2Icb$-c|@{tSmjZ$LuB_#B{xAR;p>#MUK#!D4er4d+J&}&IIvxp
zb>MYm2;mkvm*IQb43W24Ng2ZV#=*<05#-Hp_p(-`Y`lnQ{~vZOwD<rum=v5*S&Joh
zG*%omO&3h=pKGDF?fFvuS~~~4k`#$r=lcmq!Be$MR>eQ1NKTH!Kt60W?@$-$lq4yg
zOpqHJA5*e_7RPxKGeEai^My!{v&cpYGB=uwUT9=$es6M~tpl<REdVHhfDOGqA!llY
zi3d=M`#0p~GT!SWrW4O=r~^1BF|8<|kpm2)0*<@M!i@F!0(_~(H<znGoXAU)ENy}@
zF9)z<ET#{=3l!}CDG2d5zXPJ|Q+EBGi82#i7_#|Zt;;+HfxXF%16SLs0Wp(&wGhI#
zc$vUucG?vI;o-R*!J}2Y0OTM51HHD!SVcwC>5xFd&sH(1YE+FtNMwxuY7e?|`}TSJ
zdPT5<dMaNL0HyIFIvF4C;B|L(T?4e~O4lvCI>6t5gDG-rG+zavD%d@<kShzKzxVC^
zEhW+?PncqpA_RrT3wN}0o18G!{_5ylCY4?J38YDD*zRz8U_|}A8G{2nSN+_?+TPea
z=&g+%&LBHRC4z5zL*fC@bHKCdOKgQoj5|33f(8C(7D$8FF*8`YNK01sT|^=$r_POP
zx*$-L!kWDRL9(O$4xX-ynB1WDa_VJ(A<(-3K=!5CSOpmDhfyswYVXoQDfoP}NK}EP
zWZ$uKC^JeTN<DQj&Jj-e#0p;i^tee4BES)Yf+g4t`V6Du@7N{s9A_D=4F>67nT7qL
zOJ=Dc9MpCZn$e7+Ai6e&0_+kf3|L14ur~of`P<Uk3b2VY05{|n6m%|tdYyI3d9r-I
zSg(X76W&ngI9Z-*oSWx0Q)92MuMdRc&UE#Q{7w#=iGxsLx{Wg{U0u@EMp6fMI<May
z_ri+-Sw`tvzes!a{BSv*sANDvUy2i%CK#P_&=o=My*&{rZQdn4fDdf2A6oI;dk^S$
zY@jnGpy~)2fIO-gC|h`9Z?5%<0n*Iz>Q!=x<=$Lld>VUsaQ6q?J`^erH<D`|X!-Do
z^ZEAmxGc6^1I+d9+qa|@pnvvoM=Ddg|Ajbs8&hB~xma;Ex4676o)mb)|9$on)xk(_
zeilGpae6jX=#%J=$u`fl#VM8uJS6m~N<R%^+pfOb1H9d_aK4D^`STwm3+0O0AHyY>
zq9Y<aJiNTT+@iw2?2Ki%MkX*}1?MWRuL^C0k5+X@A<~0K-lHTdt6sJ0G#N>q`Onz^
zO&2IhZT}*vrdDT7^DVzjHx&j%WZ#!ES>LASxBEUp<$Iq-3*0>x71|mv4X~{^=o{HH
zH%RkxfyqB%g+0U1BJ@gWO676QWO$$X(s$s~NQc(D>N@9nF|h=dcmwr9gMy*yT!oZ#
z_4R=i0mr9t^Y-8Nrk8tC=v86-jx%2<wpRPri%g3()G~;;^=m#=RD2gEo;idfzVl&;
z^h$?f9w4kU($iV&^#=Z``}QsC(FIUrhX1G5lnW<q47e1CyH+n+{{7o+f1wqhjO~7%
zt%HLyVIT&r6!7EAmoF@Fg!uR*qW@9i7#O7c*~Zy62n+=U>w%aepaoiFsjL0u;?Nsi
z6@tV>G*b>4Vy!lj>-O#2W6%Q7g`|;*iK7tpKiRVR=b6UY?M^7aEwi@mPW`*>V>zr&
z#j<9#^tVZ~#9Q&$yXjb~LqM_sT{I!X<zNZh){dmr=jZ486~?T5e4i+yGBU1fsp?e{
z*l2+^Am5n@Tvh4BChOvvGEa|b!NuC?=_!z_CPpjNOG`_2Y$d5!0tEgN5124lxVo}4
zYAE&D167z08lO18y}(kvlj#`&jGM_f192N?TuP(Dfta1?Jz82-Y9kB>pliNLGT#Z?
zx~PoX(B+77Z%~!k>O;tEuBU^qQ`{YP9S^pn+az_&5e&k@#zFyb$qS%_o2(#?xRCy%
z1%MX;egMcb^)B<u!G5PZBV&{SQfG(D3hgc8JUm)D7*&?L<S=p2g~4q=V|XO`qoZTA
zb9oflotpYbWMuhb;%m*1fEK%d)>rYr>+SDnpTLJksG~fJc=3{7`vF~8vR6=I&Qs2*
z6=YGB1q<oe-b`(-Uv%a`R$)7UmkvrF>?Z*P1*m^+TLc*U2{D*kUMS@-0r&zm+HgH>
z0VuttaSkC}ZJ8<2GF0t#Pu&EmJjg<&)2WS<YVq@{>^chLg(swWsh5DmerSTKY}V^u
zXQ~UnNaq39kHhqaO$PI8|2q02<iT~UQ!ri(ry$h94XAUW1YrSPOBE(`d^A~T{5r<=
za9d!zv7`DH`DcCer4&}R&+z@Tc=G9Ah`lGK&xKK%S#v<b7xGx+b6uDNl*68$P|J<g
z{-kOS4q;&j>`lg>#*pmt<om<}0yk@}6Q98=QM=Wnf%Hq&Y>yFeDiqxS$>1(f3!H?^
zs&7}Xg)|XTP3$j1?bf4qLsIWLLm-P4*zf8YqlRU_q1fC&VxR}46hPvM37K422prCm
z$`JN?9l|)c(uf>vs_~v|d4FF*!^m7=XB5=;yNa3ZIJI`H;I;5z(csMFvy@8BdbtuW
z!gw1Ltc$qummmAm8*dGb>E*tJ6~c?4Fv&`Hlzv&wWD)mQ&FxzFyY7LYiIhIN=!5zv
z`O;l|R9CokV$fp**Wt;@E}+8>r3-O#aIhJar+1+se@6?>aE7e&vdO5YV8?)z8z>*?
z;?=*6SgOwIiKg41YqUZqR}M(ZM^dN&Y9+^RptpMR%P@-j{Bnfw=?e8P_xjL{+gYEv
zby>jbnNl1Tz3U@IB#?xsHP7KkW}v6sUk8<G#kF-f!xNA@Vq>L_e!ow3mXT^YQU11z
z^t+%28&IlT#gJ4&3RfF^95eVRapT+1;Loh6qF&yO#Im7G(d_)8MxBDx8ap?kabKE_
z<E)eh0x~d&k!W3OPWAVZwNTq9jg*UFqsqX009|a|{_CGvy>AkXcsm?qL$N4Ie6bOj
zM9a~s3KKsWD*}o6-c(s#3c%?c@?^teIgR<A=%ir8e2!H27Xkns?gv^XGM>u}Zlj`g
z9bWKMayvylf-x<~Y1k$(ZgOcjRSG!A=r3|rI0lz&)T)_Ms32FA*s6RSDSJWVyU!eT
z6RYg`6a=2>TxBg74`T|?R^i&sn5&OZrb;fp3qR?J8m~&qmkWJ3V}?o{0dsRVbM&;o
z==aARtf=lxI_{^kM@Z2BGX)%LZ=jPlkHEgRv)eedQZVwp9%~vLwqW!$zH4><#t1=A
zPY*z*<>q*~+2u%X59QlKLh~&gVVzNk8Qb=-T`C11A_AEO;mCx-*QDTjM|```WTN$N
znxPbfy_?k=B6sjPCb9$A&Ng^B%vda+#_>9SO<(GJ>YK^$x6}Zw)y;Sncx7|;bgRd~
zN!R~uGarh}+0fEWD)g`aXR+di2JPAItlx6?Ab^>hX?XLw>)i3;I*eoS=eeZUGqbY=
zuC$)O!m<QR)PiI3z=B?eXGRhfbvs|2#5TGJYIL(6rbZ_K?FvoY!H2WW<s}jYe%FLH
zMwWzhWWDQr0TUd3S+!#&;QGBrRKY*37#y7M-oG&?jzAo3OcnKiG4j~i+3BKFOn?lf
z%HWLx9Zl5ZMb~;4v8Nn{vOG2CcZzsvr19WDk2+5kf>DD`(7#mEs8gn>Nlc^WHNq8R
z^GSdh89RS_m^!+SR)szVgM0kQ0<BnGGxjKIp6|;4u|wcg6$8_)w;SPj`Eq0DLL~?n
zn_~M=jjWJT?}p@=EFRpCh?i!n%BFgFc(}x%6?@}nn99Qk^mBAmh_dg1EcZYflQ_aE
z1;`d#Gm+28tlCLZr9>NU%u^Js`i|I|6r<apg?;a2k3kn@2-hMv6Srp~XR(~%abRHq
zNv>YyL9qQl-CUvhxk6r=4m9(Ay$nF#f!yBWG9Lo8<8=!)wI0i(a9i`FXXO4fJOM?7
z@w07hqy2o?$)+NCycBHOLvz*{H}nPG@L*G2(!9Io4R3(;=5a^-c)E}l!Ts$PLj~MC
z<eq`(_P9Dy8o8I5*;M{Wje<|i(TF&ecSC8pM<Y!r?%$R1C#RJN6m?&b06OeI55T_6
zxK{Y>R;-|_xQK|z3>hUQ=5#j=IIGkmZ#}2JAv!xcl7DL=0P!%(Fa=X)RILwS*YRq9
z#m3oS+9Uw2qCQ7}y3|QHTfxk5$L@|iGS+i{tSGP=wo2hixJywZEAHcS%h|5cFZ(GN
zwZ3v3^SLoJ1K`$N-p!zQIAT_NrubP%>Jg#$aI_DAwvcE#h;S@qc<zVWGM`@ZEAu)P
z&Y+27`1?PRhO<Z#+=556Q-IfRx>yYMvP}Fn%oH#I*{jNap;OTK0~9=T#bMtUGkDzO
zfcTK@u<WV0M}6BP1=SQ@5&F4#;fo?{GbZXc9NoC7ArV$qHgN^mG0uyIQ#EnL?62Oz
zb#njxPhW%cDI_64r>Viu%=y#<Z`Ui{VC!qe&k-rVhicA!sk?JhlQw*$+GRH!O8{w=
zEXYF&qc{U5-t*dd6BBcitx%vpjoIAK_;>BA*uzpvJo@0j0!MDuoOcFme6k@KVHX}N
z(Nc*~J3eFcJZsA7{P^hOwv-2hgL~>WL9J1RzB6+bqfgY;iR6X$Q2K$7`)xe@@s&>+
znL0BQQ_N3hMGADgDGJp%L#r+2A}%qQm;VlbI4B{(OBtt(M<?+<8Lw8bswYlHZ=5NJ
zL3U!@P~91?ps{VrR%kGwsHOm7TC%|KgeWUmUCDDlJp?E9fhVIbi=mE|Nxo$z!+&i?
zIB2<BHU1BXXl(f+xJbE=lMEj%=AJ+Jg^B&lIpLx1YulIiVRS!^?P9I-UxVAheC*Ae
z&Fb>&z~hI;S(c~0S)d2J|8?P&{xr<u@EC>AFuaC?cuK4le@w>T=lJ#4%^RBg{A`c6
z<WQ^+#`w;awisl5$)OoJ1owLW>$pQR>T#YEjjn&O1LtHrtf>Z1cm%s-uvxPNon+oR
zKIL!i`gb+Hnit*K*k=qF$};B#1tmV?3mRH6)XO=^x1hB7`LB-(r%F5@(2+*hoj3{9
z>AFXeA)K-|f0zc&>sQ)kekUr+=#~K3jn-@U2@|!eZF>WTDrTdBfc4*%|L!fNf|D_b
zT36lE%8{|R?Tr=M69m)$yCOKe5pWz#vmy-C2(}*H40-sEc7TKP%g?%0Klav0^|?NX
z<?~9~>O*54)bI4yMdFcLo3p1}vTx#_8*Nhqo~8dzO!98jlc-Y?5)$3p8~Z!~`YvGW
zANGYW`Se6m;=fT&8xDI|8uFq1*@SCsU2M&&z7@5aHSG5%pTUx|^L&ICg`-dZ*W;Fj
z$IkA!3XD!2M%HTWiCeb&{h_K}WQOzc(6*HkGh%E^x8u2~s`OkM5~dHkF9uZ@Y2M~m
z^T3X$oQ5pEJ3=FaXQ(_&P4ZVtp)9_Mh}tSV70X)%^8w6UieJL?blIm0{0`~wJbUrL
zZ^f?``C87Wd`*oVnJ%v&*LwM;JU~HsrrhpOUc_7Jm5&a`MGDh%`M~po*B49m>l%<+
zr9Tc29Gt8dto@pXvw}KPd>lGgXwvOIxjb7qNf^g$LTZ{3X}^ixNR}zoTT>VG_8U*t
z%iPeSh@ewkg6KW4%eb|UpGh144Sj;LN1fBu_v`mztz|jzBAQxz3nvSU%ub`mdmubK
ztG2n`Fz%St<Y#FnKM6Q5Lc@adiz3Tp4r5P}$}0FhVt)Mm(=+`K&OK*(|5P;`#3?>B
zkZ!yvLKyzaJZG6p$yX#c&NyW?V>XRK$%dfp4aaFd^vCYH5|7)Jr{!cIr`aVRcIIA>
z?xdC0c2Ao_iYTHkZrqxKhneeF&E>3fXh#6}a93x})S|bhqE_gEgtL%WHHjQJUDM*n
ztRVXH%~gtus^yU_LG8XaWQg|;Va5hfZT$23sn|_<=AX1#oud$t=$mDi{3M{o7c4yY
zQDZD@EfrloHW1II{OWY;%;xbVOgnpQEbqMBZ7tYc<vB_H;w;8hnA25VJX^@;@xw^v
zLApT=pQuX`_gvK1hO9?zEx+FH$%UR4xcBstnNp3PAbz#Oaz|q+`wF;*lUmB3^Y9+M
zi;(Y?)6Vr((O-9*`{?l0ZhFFREBXB34SaK}i`eXK1M*+~^xa#dlZ1NF4de7RkO@Om
z(MdXABT{8=sGnJ){PEQHXcMFq9tjn*c%q`XL=v0F+%2!a_C*7XQhps-#;HcVdtM&U
z&83-#Tp4f57}>wRc<L_T`qi{JTPiXjpKFEW$$TiGva;gWlNT{hcgKS4Lw){xkfuY2
zA8x2N(`8MiHo?9oQ}p?lY-W=5!xDZ*p;L28c4hNzndNPnt5UksSB}??`<ioTTibMe
zzADRHm0EM=x`N9}owj&iD1}EoXnU)%n!Z5y$_QO?Q#0B0rafMsiPBcG-}}Mf`^3DP
znIIL_`=>q|rggEUXAE5_%IvtXqtf-ue<Ubi({g%qzq?l551C5c6c##Euo=?bKo52&
z<eANu8gg;j7_B!DOL1^^d}!33708b`D3Rz1B+_4`x!B^Qn>SwTO&HBNvR)s1(aS2v
zE+EuhR95=<MCkoum3w~|A1tjMp9210=d?9$Ez>Jr`sDr%w9%v$h#@HPGs|PJ+OasJ
z2|?H=uycxvm9T)s3!#hb%G@76pS2OGER8j<k&xH~@Pv*1kmczY@@ZUO5e|PF2a&Ii
zH;auA&W`I(NS+lspgN3+*`yQBz^C}1H2?60%~$(TL1N>QDF~g-ahQ-1vy-(mJ?2$p
zYsjVOx}a(X%@}bdTXGVtjry49uf~@)snxP<dgb=kF6Dvmlmo^WoC%(;2{J4oY?hD)
z*#D+X9A51$9Aj1W7t{v<(GS3H8{p^fH6J925>B`IFs+(B4ffD$sw<8?+fp_!$zOx3
zR^rwyb$sG_c{Sn@XasrU=r}tnr+2!BDPmnTm|BMTE14?ZM^shIMN#+hI}?yCIWo)3
zv*PPayjLHuOfYfrP=ExA9Q>yF!~bw_772=6c($YC#E+{w6S_pPKQv_CQZ0;34Jm77
zdS7vqfONt$ml2<syMFM%`K1IY{%8R$hSjO@>}vO;zYr6x*Q+3D9Iaj8g-fS8R@*tj
z=U(Es=PHhZwf4n%eX6x}bV^!$NE0$jbk`ia0n0!wxq918^{6(zw$-vN)!EUk(xF>m
zLG(Y(R^T9=n?KvuJX27C`H&1|J5L<AEKTGzV-wzxSUL7<7eMgnPL=ORy|L3D&(U<5
zHnmbe+JyF8q+Tucqn(UifrDF*$+$1pz0-)H!tNi6#VCaemN3)0b_o(1^T#3*)S@)o
z*sdb^Rq7K5ZO7+J7u#nF8pqDKriYeF>9TD3Pbqg7SL@FJqsN;}+d;rfwLTde=(nZY
zmol2IO{r?7QX;=yH_GMlf;=>b$tKucJZ;iFEbL#D#c3m7x@{L0GD>G{Z+635?eLK1
zdd2KldH;}vV3u=HW6?2^kck><B0asJiM)gnH<eH`@blDhq=NOsbnXsomss9AZ*8C4
zzkoHwSL-o4wEvh8hE@#K7zp4V;WmEykp}&u&6hw*b!OKNwUH+*kpIHL5st?2U(kl|
z#ts)C&G+VyYppJB4?l+tHnG;rsH($YbW=WlhaCU2>5m@^(qFZsAi*5|t^1JuL#oE8
z2o*&l=tXd*(5c(}$U2n!+Bn*ZwX)(9ILoM#RY@%FdSuF{4V2{Z;6eDj|KQi=XfA<W
z>g(Te?yKY`Z|728^0Nw@I_mjcUH5h_JFTmSRaW+9ykKI(Xs1hBn(nOo)w>L2_<Jqg
z|DREihoz(ed{VQc7=qz=Y{uf>5SY#V!gsXle0nf_BWlzv4pkL_T7cVgz1YT=`?6b_
zON$8ey-EdRj4pqtD`$_ghsin^{T1z8WXW77@ECdB5s=v(s$eHHH!w1iZ>(2T>GpH^
zg#{8;a`t1)SDAIWW<q!OrzSr?jd`h}+y8gJMBM;~Q=D8LCnGA=_wFzy@tCQO3JxdS
zTWr+)?tc^RA_zZAj-&lwRt#Xd$p8Eq=PUgq$v+NM9306INgTr0uhrFu_#MXq<15{z
zxnln4?Rx~{g+{X@BT8C!uC6cy&<+s+fvPRLR5a5#bn-4ms~cJ_j!-X0bL}dZ`0_aJ
z_*cjzW%F(<?<TU>t3*-nn6Q}U6(-d3_h+J^B2G?D%_ryM19Rzr4@%OP{ypx?<Rdb+
zJ)t*%tGc3*AdyzY%i^R-O~|9E(zQ%=+Py5$p>woEal|q-8aCgG{fRd6;Py3513@br
z8}B95+fDo4bmXgg`y8#!`u$4IPax|j-4sW1xOA8Lh@4T+RRthV&G5?25zQ8;w?TOE
zi`&D8sRE8#mD*${?vNzvfJ-d%$m-LEJ_$<-^dT*egA*+9&UC#bU75qU!?zuoi;QvX
zE{jny`sWCC4QcTHe+T{rpNzf2xOwDyv`hZPVXQ<i-#&LnO6tS5fJ=YYbkUMtnSQQg
zeI}qJgqYM>?rz5QIO=gO)>vfd4^qWfXxb0Mpgccs*E!8-<|;P==8t-(iN6l|lgLU0
zUp^`e=;5k$nAGD&rhwMJLFH9EQ$Qui=x5K;;obrP<>2ESSQXIP{D%uGaswM1G6MaT
z1u9VIz`8zO9YXVdUxfDkfJ)$<C$XADRSaiYEZ0)i0T&AzomQLr^ooyycW1nftDL;5
z*Er9pU-|Bhj$1Iwvr~$`Ik(PeI$7s5^u6edbQU=y<J32;EYVtqZ{O6P^wl<})$g-{
zvvYFN_dB+`Th084QI)#9mS{vgT(49&n6hFqE2d9KN3}X&^2V{AE>qO6(c}y~#@*N5
zJuyDGdz61178Zs+x^DJ16RDf7vx!r#y}F0bW!8r2s}=F|dcv#*5)jbe*_y@H&tDRO
zTLZmUQ?W%A>#rRh>%Dpw5Ft^Ttc#6jn%i}|7rVC*gyMc9amd4b?aklI5J~|D=~<wM
zviw3lA0*+qgFbj{MVc|%P-{2tyPTN8C(bsQ$Y!?oBPHVMRdQ--6ph5iz`bad%t<&h
z6~Y8#G|GBSPgyvc-#_|bxOM=H2JeaboLiNZmKEJx^qWt*h-EoyWzLq1@2GCi=Kb}K
z$e2s*3FcdwNpsb^!`Q3mb|;U2E#4EpNU2_LZd%KWHElc|PGEZ)o_&zIAQhM<ZokfD
zu4V2LJn8y<-|v*}@SsVqGq!U)fjgbgYwi0YHY@I|%?H-4w)#~%I6~8gvNsOGb+Uy5
zYu%_+h%0DhBHVgHhl(Bgc8obC2=H}7hmH#bcB5czZ!j%*k+hN7mKDFEpItQiA%he&
zMnd0QcROE&zUhw=L#tm4Y-nu#Txgfls#Zd+&3e;hMG_=c5YdQhqc&KdTs>yjFTI=b
zAaZ;OtIt{irhgT}#utzdI0OiDOW+#8M~i&-iI`itJ!ir(oF=u8K|k#?Gck&6Y5d;5
z3oDn&xB*QY=8UJH0RIgLymO><mk#5Ov|?`Rtvc;s?$jtUe+Yjo&By)HK7~|aVXvW#
zeY=rSva!-7DXV@uY3I=}Eq+XUHvRP)SorTtN!I+E_*p`@U*!Uti6NW3HWlWFnp|NK
z5!;i^J!NTvc4@pxJ_Ok2wSbcfi9o-Lr3)zg1R0lhd><g?Dg!%QU>-CLg1am>6&dUY
zl9nHaiU<o`i@*EaeAxw6z{*_g1M@suO<*&~5Q4M^A4Bj6cXp2t+KX$cE;eLG<gnsm
z$aL{a>uELzpPq@q0u9>eurONQci(qS1QRqgXtzrn-Mf~PTrv{5&CZd9&~bz3_X!A2
z8vJ8ODEhq5y>vS}JKOw;G|R0lEvuZmX7Zlz)!(#YDKH9U!d|T1OWs;-$0`+Vv-K{t
z!)N3U4%gjfeJVwxwH1b~H^=Mm$@-HD(c70(1?H_GR|0YdLhdW2nw7lHNi0Te;I`X9
zZ#O3{1q6N2n$90^bd(>lHQ_3G>#OA)%Og>*qbV>n&$ue<b-Oev_5NJl>QO!c`sl13
zI$o~hI+y%dCiEefcFojR1U6fmk&%%+i5g`)G+$@4{MkYV=-jZDEhkY^9Pj_w;&)Jg
zCRlvNErFVq@;bM@7i!i&o2Pm}U1OU1bYen4Nl8g7CT5E<>mB(<khPU#v(vb+ib_B6
z{^CeMj(nN0YNj{JeynWrJz_MqcI$5F-Q&ev7EMO8z`aVB!M@*6Vt56UonfB5yy_|0
zM^2`G-OGIm=$YTO^2MVUFCcxjfU(Sea!KxZBjVGZn4gx<>{}W<tdP_E7TJ7r-5L5#
zfl~}t*Y3hd^JV}@rD2xCMyP@T7%2DcZqqWes+JF<Zr~4xiDEI|oloQJNh4J2*iA;c
z65UreOAX(@bJOl6ZLBkha;T2nL~bvD;A%OM5_p7jtsc$r5gl=+cDl-ifJ@h_#TlV$
zcmkJBi0`C$NFNXpin;P?jd^*Mxgm?qevs~+3!kHvao%KfTaEp!looU?{o=}i)fiW3
z5cPyw$p%gERanm-JX-8Eo5XEC43R;ZbYdG=nbT0-57dW-*qj|OCpnvj?cVyRS^D##
zV*k7Zk(mYy&VVw-=%TppuI}!0@k5Ivx~azFq?LZ~>(O(bYFl;Zg_dz}r!GS4Z|pvA
zXH_fBT~QAhQE8WETYat?O2&&)Y49HDp`1HQYVj}z+q$KHCfQvLS>A~aTB?I+1n}!^
z2)-W94)PN$jZ@=o^*$5GCqtmOKwhy<by-0{%V^doOUujqb8SYsw$92QqUpp2=vIFR
zUQETv)I265tM!?6fk1$(6yiEx>o=j>Z(SCpSBdu)*-gs*L)Fb#$h7x5)<<NNKQnZ6
z0uJbd^TS-~@^TH@%fj?gM}$F!$dxRzMh&u1Yk~v-bVR67H&@r@`#w}N_8A35;AY1K
zXBt-Fajg42;p0U-G`uA?N8Z<GX-Z3+18%xjF9lW4e0e&s8HaZ7K;#O0U8F2MzhTjN
zf|`y<QjnLAq7dRx5^pt5X}-)?(y>*1PQvcEozoS*zfc=V@&^B#oj<K;0~HCiDcnhD
z#$`Sy27!H1j9nYtZpDi#Gp*$Nz6dklTWE~bASRo0Up23`IL<T!;&l3F5-Er7#v0*1
z;PFJA?qB=qye}+lu|eV9a2_1`ygM4mr{s4uYkC*Bx3jrsyB6=PCB)<%j~=<Fy~h4(
zM^)U-<iJ^5oW0$HMX%{gqKb|}u5OlOJ5)ZZ(QDf`PxQS$?X3jw-|g4U3hL?3Q-!@i
zb3>F1oTKQrzekf$qTd{_9TJ>x)1{oyQf{6tjhT>YByjlDMsVSw3B8$(FKBC9=l0Vp
z)=iN(zC7FGGJdIW{bQzX|Jmcm;`SYeH`n>zk>YGMZdX$l!sBQA3nQngdg#XMRzrZa
z$*OK6Ki(eSoGxR8zI*-p7rd<b=>Sa4s(e$SRI<H;ZUG_Tv30k{P3J{)!QDi*VaRzU
zlF_&D%Jfr6i1?|GA{AOkrl8CQO&VHw_4)8gsG#edq>M5ZV3fC?hX<ru6=rQN%Pt_G
z^$uOoqa(b*)Orq+@{VS2*V>270s4Ad$K!YLj0QFzMCDZ-Lo`rHO#F_M`AFj6N#IH2
zm)^`M%q+KBYGA7!!}$<?8;$XTks6(S;Oi8Q5n9O@!D|=mqY7Gf{o=V&Et;DGZZ3hu
zKp_sJSKRdUAO7ZQ@6+98^s20IBhg0C={;YB8Ai3EQ~Jr1C)Cs#fQN?F@Pl^OwVyYu
zxv$yD#@GcU@bYBa!2hKJ3!m0a=jl2U#@4qv-8-Ffdt=6Ht8wM06e|fL;>bujc&u4-
z=qKL;0)pMCMn}N#Pe96{_+Zny7PutM*cg0li*>zD^*y1iv!AqBY`2oZQkIfvYK!XD
zo8Q5=WHHXkOD3*mC9AEe$&rk!ka2rR7k2dI139)n_G6wfKO1YgS<0E7hNI*55|eUM
z<7&>cz3@<x)ka-)ABrycRacwu$;W8B6b^1b>2=LwT?+C16P0T&P38s<<SiAI?Sy{B
zg7*G!djJ7>#m~4Gbiw`cOI=-EtZxsE$ilvS&U#)V+pDenf{hoj5ol*LdG^C3pj~}>
z1B09_ss);=sBezGY4Hy-gHBa+<Qo^bTQN%cBw@O~`$M}iorv<mvS+|)r56^)4DHS`
zsU&3|dwL^YxwdO7FBMM~dL6HM^*z~a&HY}fy;|(3U#7YDnX>ZRH>c@hHIyyq1&Q(^
zOVkQVNkZZ`(!W>R#>Mnl-@p0Ibt*X`COKIVEO9kc;@aLJx4{X2@~yUZ+1nmS^9N_x
zpLj(p3#}r2cEGK}JkSW5@$KGD(IOt!=hx3()Qf1HnZl!!u(!tY8kZlCFedEE=z1u^
zC+n2q=hV<2Er3UN_(-SpJTOAsiyPeb=B=BBF`kYaQSXTkGdTfKRWeG&<GH>6P=?ri
z&Z-9bGTS#Y)z;Q_9hqTc4807aKi`&n@zFIj5lGkysRnJ*T@qMI@$-6dpzEj_m?Z7!
zNYy1QEl^k2-OUWtBgcLxv44(W1JkQl?WEDX8>+phugrL5x$fLn*y~Y*RiE&?Q{scR
zb6A#qZmuZqNwTf#m5gWI*JFrDPD@i@AFPZFi^@I^T3m~bC0#Y$0_pE)$Lr{*CVGbk
z2fvUIaGm+}+fAu8f=`Rh^J*-3!g(e%G?YfT0c`Vuh^$>oDwKGaZul$-IN!vSqOv|o
zwULA60ijr0fmlm&jp%*_BD!DwoE&Abv9U`_miMUgstE}RDX!KRKl<h7<habYNLlD4
zIE=Rf%}7z>QduPtk>(>Z_Qw8dSIXApF><OWG-Xu+A3p{KJ;_(;X6}wm<<lW;0yj<7
z>BWT-@7He+Z?2@Ma2nSFqaONUp9V&~K5dbUNG$gpOgSFO4c(qBUpjN3e5>Xfr_A5(
z@d#>9&Ycc$Jim%eiOC}KO4o`#`u6rMud&5@4(ZsP`6jmvUeEAJ;KoYe;C3H>MTuUq
zKDSA^w5saB^<_~avM!$cy$aZXg$pvcwOU~gk69TN>bW2Amx%Xf9rhrsYL&e$;Mlhd
z8j+iuOWIs>#lgaY5YdITo%4V|lShoFLVsle86EF*uiUT*KOlhDec%;yYT^irD@^60
zSM8!AFPUfTMyJ#+&NT^Z(El2L0z!!kq^>ZE-rP`P0jIG~Igq|8WTv=MXa03PtZ%i1
z96)%6HN$%+^^EiT9M?}%n_q8YCo0wo!a>vc0#$PPWXq>F*CLd{m=v48wdAkTKOWlM
z`^_)>in;ew*zgiu+G+{JVvV8lzFdoR5epQ0yYgtY(O+rAvTM?H?$l$w4)C|VJDMs`
zO>s9j5WO(7=}S0{!R8~%StJ`hF4ww_A!I5_$!R7BJTPT)oBjmo?z%!)EF5lJ>vH+)
zrWHWgHSp=yyv8+qK2Q{%Zl2Bl{4H~ifI^PQ=vheh%XRXV`3)x13Ae{TM}}o5b;^HP
z)5(Nrz%)e-t8`PEy<HCZS)&jDhd`)ZKjqZ791I!s6oMerwI#%e&m#1SC$heKPoR5a
z03;%&^V~jkG_?D?AJ?PWCfp8GJi4aMxw&yB<#XcV(aB%QkuXB6-+^mT2;g5iOWBXB
zcU{z^x3LClY8CRq0=x_l#4Q9&*zHS&M#@fs23?AO#x#%~sU>`qwZA>(G&#GdrGj!^
zmHmDtq}Ex!>8#ECj%bNH@<^&H6(_Z@g&-c)>r&ZZ#U59owYTe4YknQlc)SAeAEJBy
z$K+%sMkPbz?6hnVIih}BDnk1ys261Yl=sb}@G+l~xUv7o)L948-Twc7ZDY8HF}*Qe
z)6K@P$?0a(-JQcQ-QDfzZjNb3_jJe6&Eep8-QUl>`~K~3>>bzpb-m*Gd|YRfL61>!
z1H-~xfuJ!it+7<?Xt9C4f_<R4s7P|4pG&i)uRn$^EF^^CPQGhs_Uz0(^H!AFqaz!P
zFBYD<3=>`~!m3YiyuPZGO80HS#rt2GAh?W8l!ktd!%sVc*FYlr;>9wk`HL6RM+AlM
z{%WG`RL3TuZ7e||&;(qZ(m0N@=dk1xa<!RsLML3B;m(GTnN!u11*mJI!+^NRo14~A
z!YY?_mfJi(59493XSd%_{%=jSVoDUKOH=U;u~lXYNQX7!kE~v-@h06O85j-WD~J)<
zkv^pokaK(<OtuI~;<&TyoUt{OIr19JczAtveiwqJA}>ECDwPPN1!p}O58*poOJ42|
zQEpU04<(R05Qo8GrN1+_c!t{X!#emNwJ)H>F|>Uav|AV36gjNt7#N}uOPY;4xIBik
zGMIhq>aLy>^TyF@ir(~PgN3A2C~G_SgGM3h0i@xK;1tezINEsvnK`=Cv#>~I()O5P
z1d;X{Bjs}XXS8K1m&fViQ4}gJ{m1%=(&j5h?dH@>;oJNl9Uox@N{s3(_FY83VsPh}
zv<u`EWBK`AF2DC4SWY$@GC3ly2qjxSnZ9q$JBrGc6OhQ_x9>7Tjbytq_Ym@?f35~~
zSO;Memr+%^oT+)P%A8X(&e!*Gh~#pci1!2Ng6+W&)L&jrJmcgrLKlehN}aVs0s}Ku
zLRw_M9zW)Pa`Q%g*BdJN@4DmBR7;Frd<?SBU&4MoJlyr#E#WLZcw6dGgj1yyZ{L2I
z`J^eI4)=g(ij$w7J!EGw-tM1sJ|0%&G+h|I*&YDB1EYhhehBtDokDggdVl`_jj(o=
z-eXT}p{rILT8$q9Avp0Eq|9BPOx}*Ht4s1se3m!tv2m`|Sf!F_v~Ev=(&groGH>gQ
zO=^Oso*h9>Uvv&p6jU)QZBgRN!Rv{3&INE8jiTh5P1~H>X1Jf?u-*L3(S6SDp3F94
z`_7(+Uy2+;PeT*XQkLNr7##csDeIeC>$gxhbpQ6D=N-9a3o`nS_U@(k@nh6mml2zy
zTt}sZ9!I6l(&lT$QdQT9z?^!xM3Nf<{()Qust824d>$(bSDGd|I>$r#<*pb+F)&#*
z%~}uP|20|<+a>rPs;$wl(sN-Fz-@V~;4?8Idd*Q`p`j$l-L1=a!32WFi9r$=Fzs`Y
zq1%WYX9A<eo}-OJYU9^uISTi0Zz~NXTUOwMqw9yi+(Sb{PjDHRr|=dkO}oLT9Nm~s
z^kXF(6oW^f%l)r&x&<(Yv>O_Xe$9cRo@ORP;pc<(pwubs6>MtV=52V!t-hR!iqWEW
zBT&&_^gGLl+itCA_*};_Xl85pW1SPv*6uENz7=5HAIl4)3MFPxFX4ll&a55T?G85k
zQ^z5Yh?7I;6O<<&885yNHGZ2n2{fX?*`F@P7HpSY9x#O-9s+UiK1Hwc^Ymqc;|syS
z>O2~To7Ib3+YJUD+h0C|SD@I)5cZf7xQLoTIQIYKzYYt|v2q-}Oc<jaNUi-nc3q=j
zvbK71xHxi0ZDMh?*g)Kf8LzG~%#CC{9ZG+#%E+fXlT9;b5JGfg>E?#)LO1P;Eo^nn
zGycuqECqWs^oBStH)TaL{qg`&ndf=K{G~jZ&7Ff%CMD;RdQ>zdvAR_2#igEf3Y!J&
zbQ-j)fUzQnD|Hare(gAOozo(Uac8;~Zw)vfQJ-?C!iZIC^xnjbZ5qOlCl)wKhdtRQ
zi&gOn2r|benq3gciNZKTCYV6Dqs1ZtLgpAYmFUs2HBYb9)Bzf60RhiWl|o6FqqR+4
z7xz<GHyN|Xwnod(<QJ&|&xO5x?!>f}iV%xurVH(NBt@Xqi1zGgYA!M2v1QiHhp%P_
zr20U{;Kl@>Uy5Op?t<EOJLZmN@ME7PbcEc0Ah~j>=cp2sWNyC3nLOpYxTzW_CU}$(
zDN+iJzaZZ6j!Gg!+Sl<(36{UBgk?uFKR1Vw3JzoL7IC8uY96z&M7DVBaT+6EU770|
z8>^Ojw1<%{6c)u}{$FrCd>9$OZYLdJM-fQHup6{Nb8M?SWs*~L(!lbao__9Nm1^i(
zhBNKC2U3kI7FXPanvF&&yRNhpbId0zOWw*V{43Vl?k;d%7#cj~*3k5M@DLj)3}Ch!
zc3H{F>z1vcp{29B5;?x|D)2`(7EM~Y$%k)&#l^(XcfPM}ZP8FrPzusLCc3)1>?ZEt
zzx^y8G(-?s9fJONi<ud&VLbup9~_JvWPHh<s&$`69{S5nmdG;m(83lLy!>SAE5>_z
z1_lQ1#;DGi4GH{Gj6IUrQhdBq<8r+h9-Eq)-qskyMah?Tcahw$-{(a~F@~3rv7DKy
z5-?r~_;^d_23gE|!a?yfC2bBr0nPnPm3`5KrLg#z>T2J5->=SkAAh)zpT<1XELxFx
z!JL%`7nAhuVIDuV9#!Bb_DN_N8)J(^1uYbQhi#!9+>nK4*TM>kF-t+P(mKfmy{nKe
zBX)m>72gjYj83Qb(=Cg=eY|lfL`6jdjNM88moT-sDk)9E?z2g-`Y;L>nFcHrzj|M@
zQh7DJho7V%!A<FADJA@9I9!V6fzcV)tBMCA_Xb|?M0|RSEI2x~?<<2o`7_LOzQ+)A
zbItBM#_^`GKmGhu+8bV4_I&r|i7dI7%L|dO-wFua0x6cplm781K2O7*-d!F&^r5HG
zzJ0)Iz?6RK+%^7ZwD#K9?FpNF(pgbWI_rjju)}8M)e^WGd9k7R`{@6>>U;OXW#tUs
z7fLkuXGTDtjT-jsi=%HZeIXP4cOvt>pKPK|jK-&gs{rL;&u!qDMem>Az4y8@`_Zts
z#7eH-aLI%O^Y>jQ!};U?274?)<?-T^&YJk|&kf~UL;hEUfM0%Z@Z#nBhe&F!|3+JW
z-uDPzKOX&~e7$$iN9Z2<_bo6z{olXW!pQgctL`RHPIuJ`&3Mk+E}p~xu>pX;*LC^k
z!ImqU!(0+HWzoXJD%1rg2|s~j=py!xvs_|Hr+t25KKTEB-Vee2U<)y8J4q|i%QE(^
zI{}p@9{9Z<-aifd|9?z0(qkUy`D%ryP<LtZ2RLg^znaqTrHkV??4Ca<pN*9N3eysC
zzieY6j_Z(}dSQ9fsSq0W6XVbW$LT^<M}zO*M|iKt4r2ITevV!i(#kB|_WqejE0rgK
z?CumUJ1(-5MOjGibVOA6n4@&Ts_!ksL>-t}%5(5(dH%4jVEQY#U$SrrUn5(L^$Fzb
z?f-Yra_Zi~?|cRaFW1>WE@*zqgQ-rouV0gt@@f<*_jwZ&c0BRrM_L|CEK8W9tq;m(
zvH9qIO8fU6up|!?3_rlPJI|F*FOs=JE|2at+SdABwlJ61Q2%bx$_a4Kq3lv{T0iL2
z_jh0zfuc`1*B`7D8{ZZ3xPSF>I2&|G`3sLg*1YS$(ZC$T<CsTgtbiTwR?5F;W~J_0
z!U4(;e|d#$)=dxs*qA}t8&fx=TQ`2%g#QY8mc;1|<TQMcHgEahEIhRjIp4`sN@vcc
zNH0!7>7ayMm=fblv*1Up*OcZY*}?^Rj#;zn-|qMNWyx@ohB;w>jo}o7{~`{&9rf<T
z>-1<iQ)nN+CM}-3>%B=8hI?1v5n9Ahq4ahA#sBXs(8GdXG@ROQpq)G0w{)-7g&$UU
zI$A^I+6)KYh+9JVm^lPy1gYP!_?5=~MJ&ODowaJj%Rx=wb}$z5d52zu7~qP6<~I?-
zPkqN7H_dY1H5d&UWDG5&UOVgj?!!bfqSld?@|!8M$w<CGEQS*<YS-o1P$JZ(at$x;
z+b*OYOaBZkhpo%y%M1HQKF(iF5@7q&3pm_^o9_E;_+7ixk2WWa|K8d@%wf9F&OXjd
z3SEpZ>te~Xt$#5e!Z6SzN`Gy2#1Yf&FE%p0kX#iifVIJRo>nsFc<0Xe?~UI3%PY-{
zj%^*$n1mw5h-8U*po++~>0oS>-f1eSj>XV*DTAeCjl_P&$U#-xu#paw`K^_{Dt6KM
zvioe(L&5BmQx-n7UV-t&`N~a(8dSDT!q++@B20<cj$XO0GXjA{ZoCl7PRclseYRZb
z8`NxO`RU`%NuOj9L#hS;I=@W<bjoKggqE&WHQ%;<IL|WGLcqEF!Y;7P*wVKgIvT)?
z2sR*R9mDnC9QiEAgm*0&h8dE5%r{V&#5=obswl5xwkB7-mVluv=(5l^QHHhnb)QlZ
zhH;Z%J=cQT+%o4Zj^9x3i~ryK4%6yC3neA@;c%=7`h=0L*!jqh<tBbcbs7hDW3$*9
zo@eRpu4Vl!z<OEMm_+1$xkS!N)i-r6&J?XG&v)i13!b9JmZ_8z)b6=)+@>)DG}^D;
zYAvMePPau1jQN?K$(<7Ik!Ful=Cmv3-6>s#NqdO#Eu<WKxNcneOE{{fsu+QneyA%L
zM@vENz9CbG_{EKUqg1a+rsdhd>*@Nt??T(+3U-AWq`<bNmKD598qkrW1_29P_n~k|
z<pnK~+P5pgKT+<x*Q-j>fK=P$YFE$YNnh>Uc<$dD1={6bHbpNMcX3MMqO+0WWD&!6
zk+mTqm*^hN805Ctzn;A98eIdB9j|#JJUjv#cIFB@TiP>MR~NoT>kY7)hH6p@E-ft?
znR|Qs6>idbD{J^v8j`R~V2NmsrZ%1<gX8>^j&EP?9yNMj{u^*xzh)cniV;!G1Zi$k
zFPOVK7^lRLOPpG!yu$8|OPW?^ozC9aMD~3pg|a2t6nqIzeb_{L#MGV&Z4|ILi))lg
zcuLfbF-hc<e|`WEU2Xx27I+@*<Abo8boF5$yk`+36^Q|#7qXO_1Xe!J4ml*(FeEqb
ztt*0n7*i?DeeToNP5kGnw1$7||2}w|kqp9r$uR}}a}~r1!y*Wg)LOBmBl9eI<mOER
z4xRNn<=s1BZz<j$Hxl*Xu&}T@yTY!)?RUi*kn$fet4bD`t3V)pQiaXDt~WEkW4H_A
zJgRg&huh;G&rIo(eaenRns4*XyRGQ$L?F~A0x`qf8qRQ{J{{NOe{c;tGx?n7UVhNu
zCdldGc-64@%~2q=rXP;8e{po<t1g<`Rhw(6CrFk(^yjMYJ&B!szO@_nV110ZYqatk
z9m;jnv8w(1qfb8rX}I&7b?e(WDNFdL4WdObP-eX?+@y5rf*MS_;(4cA=3L*bRD0HY
zHZZ@~E+$k@*VN?c&>e2d$J91qAW6(pqoI^OQ}q$Q8(}^+Z%t86B4u2(-1s{CwY^RQ
zUC$ARp1n>N5y3CyuI+kTzBCX}NP$vA$C}L=qnyCg+S7m9#w1Uj#Q3}X{`K-}_kZ``
zcYOa-D|d+tF3$E>FbK&1y_3c}5AZ1B;+#-)^vnfAKc@$F{O0;~7FWH56_xqWn*l_|
z(bG8$mJQpV<vI8iOWTc^0*_@W8QEnM9}HQ`l0F>J+?9Xn;aIb7adGxIZaZxakBCmG
z>hH|+zfYK7MOD@Fj`Pi0)|%@{Z5-)@{E-~7;7&q;F@)T&zOp%2vmtj#(jn;sBqs@5
zf=N7zeQyQt`RDnB4wg99>*cTe|LuyRh}(xoLL;mceQ7+wIp)8n2ap|xBKl7RQKjwP
z{QGLQB#ob8<XXQBHEVw4|3I)?_4>JyJ4lgg!d;$WcoikA*6D~ye0}zxP>&zN@avbc
z`ZJ!!F%m{{mnQ~Wy+gUV1{@q5v9Xh&H49R~f771Vrk^AwgF`|<S^g9g6W9s$@kPy_
zg&y$uJQ;5L4rdh^8XRPdja3?vjTnho{`N+DOYD!y{@y)3bnvGrDGfF@a4|5XWo09P
z$#O9Lm6{Q{k>2p35A$w^Auq3gGWUF&kdL6dQ~STSRFV2IAwNDoe>nU-q53soIsx}5
zGaFkxeqy;9zD9uBLhy3}k5_(DX}}0*Zoc;rDcE7Srp@^8@4pgvQUTY^wyxIICF<p+
z9sl98zKl?<j(q4k*}@eoNbTkhvcv;^Z3@gzPouaaew_XrDk@$CRz48)%rpvmz-aJg
zbj`EcVEA@HfF9dwdinnJG*y@@j0xSN?-#ggZ=bTce_xiKAdZP_mB@X(PK|ymU_g01
z#^t<x!oQgy-Lh(iCu{F;ZnG#7`z<*|6WlEG#ee@FO<)c6Qf7P*eyH3%sSJqUbDlN$
zELD>9J7zY6(mBk-VVBOsVnh+oC1L|RmU+wdjf6zuVcB2*uJmwo*;WzexcgKeB;=vv
z@gEk|o38h!cW8YRS$|ixO&>%}DyV6gpyRI%l+)E3n(5$!x`vX6_Ma{~cw~CEIJUCC
zJD+#-{D#S;tB}buxw@YFmHQ^x`es((K_cZl^5L&v%>4*ns@zV$*m}9L!^_PLYH))F
zD~G`s*u)9pfBhFHDp;RIsi;l=z+bVv0qlX0U<L-?hhH+D&n#Y#T%*;##R`Cg<Umr`
zGYy+RE8ISQh<b5-xv}-~;6<Mnab3}v7yN0u?V1%jCfWuU^5dWP`To4i`g4r~254DI
zTH?GX>`THyeNQ7UKa{?{^I;LEKH6(bgI8kdW1NkoT}B<3oUTuDU1A$mZ_c%q$dty6
z6w8S39A|OD2<R|jVPpUM=-+dQG2{7a_P>{#{60xBjU$mJ$r0t=eyU2|j3MLss1II8
z*NF2!?F6`z_qkEI<=R8vnbg;OT(qP`Pg9+JRo@kfQ2twe9Hx9hO=ll?zyWMl`WbxT
z*v&p;5Z``PH{ra*ZQs8Y8$%t~cd@o)g8}*qSHWlheJCs{+xWwRYJZQ@B+MB@o^)W}
z7?A%L%q~k_72+P&Cx0xC*7d%4i$iH8A&hPw$S*+tQ<_(Vw7C6fMfjV$X`rCSP{5FP
zN|5>YzVLL_UH$*AUGyC;<HjRlJ?Ymzlgm~|zgXgq@YzN;tI*D*)6R+z?Kwj)>6FYS
zo1AZ+pc^*=CY+>LrQv|2q+~L$A;!P4t%u-m`X>86&T}t{%&cz#TSCO4oKLfdjPVG_
z+;J!T{1O*g+#PIeFrFj(?Ur|Uu}E;+PTyG|FYnCf6iPjAkT#Nz02Y<i4k5n6KRZ19
z3fDI=+1}cE_3~xslIu5pb93WwF9-?yT6_VD#c_Xh9da;MS7&Ma=RVTu)Ok@fPnbX8
zuzjxH!%O?RZB^$d<b{%#p)utDrSfy;!zt3Y?zrwByorN&)g+`+1b9|ZE6?W)#Y66h
zIaB}7PRK(1`EBH)$KB0v1i9s+rxX0*sy$Bz4VTfz!NEW^CMiiBB9}u%L=?a8a=L|2
zf?w_2r*x+28-$Z#03bsuF6eiLkJzQdAY-}ZmLUscvyKNImzVH)|1eBa1W+T8^=?6#
zWZ5l$xn0rQ?<|DWn1h>gI$7)e6Wo@%U+cqP3&2+8Ea~!^VVLt*lP7P+vwLcyK5{1C
ze^$`)q0))x$8NH~%QFU~)+-M8jT~|xt!9V4HjyCUVvmfDzT6riM?>pdL_z2AIF8QA
zq3Db33Q4ot>ly&YeBCG2o_F_6YCc7f(Kqwh?<Y5nKv=JHb0t&64~zk=x4A^C+5Os~
z1&M&mm%DYM#@2(mH1yle6}dm=m_raQgR#@*VA7xOd8s>G>0U8S5DxxRTK^gdOvJC#
zMSp@on)*z5H^Hbhp<(YWIzJkojb91mjR!8btD3)~M)MbB@uRaA_*a9jUHtwfpx>Vc
zNTt9cr2Nh#zsqTM$T#6T#&9O>5EFnofFNgvN);e-S)ySEuho{xL|}1DfKPFg#A&g{
z^d;S-+C<WkHY$3I(=Z`)d!iB3966U`8?-S1aC2h~igYg1IXgqRxVZG#&Mr>Fo3O>j
zKQ&=%SU1-mZSs;yKhA6MAIiqKJ#5_k`=5L8Etrk0@0ZjGSJ%+Im^kK?N%Q5!qFwJ$
zT>qh!ok9~-3Q<5dXAkLih3ezys-A2BUC;~pO5Hr^(<YO382ZlC3B^zvKjG2Pp*sqO
z!`86%b~KIKw;^qhz2S0QK+^%ZUT)7@WZUBtKpeX~4v3;G)@VV_Upx9dL1$DeiuZ54
zUi3tN_AH_}=w`8E-Hy`T<-!EW2&d8-6BFY}xXL__vp)yQn5Hz?gORy5^n(uo-Pr=n
zUMd?izzQtt8yIltto3w-BmoXi*TLD2z3Ehuc5Nt3CYeVOcoApfp<kEFmhae#v=0FM
zVq;@Np&p<FJ0);Dx3BFMn(C=SNjGPiIXF_;oLSa)9URVGFLs@gm*rQlxp;Y9wa#EE
zyqxB)+ED9(*~ZVSqE#uJmRj4H9zIt!H4gjxamGJ^R$_uHl31VIxpRz_ho?Y%q9BFW
zvEKToL8mmgk4CNP_sD8@sdl4i2-D4hAg}8+cxVIh0?q2R`>RxvJ<HqTtK3%aJv+<R
z`qDgqmn{Qef}NEeu$FIh9IcL*{#>!d!;Aaz<B^PvOv?}H7VSlW$;rvs*w~Sgk(t>M
zyMm6L8GF#76R$!@)*FxI_9+#e9$Jz9h6;MV0YtUmW#4X2@mYn0g$OxK>Q15h1L{?;
z*lj+>&??^IGe=?=&z8(b<qdTOle~QOs?MYR4orH)CN8@|f`dz(oM&fe9nBX1wrl^>
zTIj(~h@a+Kuc@+SudHI{U^h&E`-YK{gO;9lT#)b3UB@l9@nKZC-#CN)M&Gk&d_uy6
zq{M{8M1rJO5;+h<Ikds4sC@Q#X?z@PaXZtbp}`KlRf0&J>Xw(Q^doZe5=qHh6sf+}
zLP^P!3h`s3FY?qr<Wo{<$iIu+_;Dq>_nMi8=8ZtAO@Dm+tH6bLmrcpT=-;(M*6NA&
zPXq&-h!fwvD@A;7s_+d^7KGMqPj~(jA;h2^{c`PfM#%Pe<i^erU#A6zFZBZU2!Pg8
zud;g6`FG$@E3<kLvJFIk5^*$|&7vWHldsZ0lk%CG(!tCNl?pj(dZB=rlKD2y#>5rn
zx~5ot%nS7Xs~lTfy%^N0o?~JTMNx&B#jG9vM4W8E8cNjc@4S3YdDq6Nr)2*00$?wP
zK$3KIzN1{|P^`vo@})}3cW2TvJ-4mBy=1XYt6F@bQzEvZp<ytYd9^x?l=OX+;ZSN<
zcQ<hG6wI{<`ztePYc+2xHaZl~yPn^2d~F5R|9p%T=ezq4!8Q)?4zs1&(AtBA0?Y@R
z1niwC!$5E0v3?OKh-eoJlPkFb1Op&QKq75xIf`eiOr}==vc;Rcw-jo<+=lr1^C_x2
z&Gen)ZhZFJ=`<0edLnFW-R)WhxZK@r70v6{>ETgh@#S}ZzJ5}PES*zRoR%$aI7=m(
zwJj2x(!F_hm!Ckm0%}N+ta$)AyE-c!FOp4ZVf`Wy1@wCIVjLVbbjro49Oks>XfNe1
zOY+lmh#B(4Q8r*PL7|Fnb^{FbTWcxFdVRhpctWJlc+_3aUDxw2@2RM%(8_q{W?*2V
zU7R0h-u+Z4)JoCW2c}jzXW&EzV6vN22-Bb5;ukBJ`Y5w<`O^2WG{MIoMVivL{JpTS
zSy?4a33<gfg<@cj+?{YQ&zbwggW096l$fMwfDpK*ri!KZUEVMiB~RkQ(WO&$Hq*d!
z9<)(*cWF;C@qm_(rU&>b0(3*gN|@=@c|#Bm?rI(B{+Gu2G_SO5C6|H~w3GhQO#s}t
zj{v<g2O$zR1p1r+6;IupSrzd#W8L}LcyR~O&(9A2?n5AL6Y;BF0alhTDqgOa%kf%(
z4R>d5w8ZhOg@wh*22(mI0^pH>mT7Tjrt5m9dQh{0h~H(c_4dXsC08nGvPjj(dyrBp
zk%-SN8^C^*CMUtz8@aFo)bhzv+Rr5u`JC7CM+9$9u}R;TYSs?+_Xm^B7b=$w_kp>q
zd?gNUsak#Hs5<QZjaGAkYL+N~*+gWDG?!}Ltxsv4Yz`3e8GR8F(n)J^7YiXOcbTB&
z2@lOYO%OU6B<3AXkWY8+o!32|s|UafMuq%$?4PI>%RHI^a88zF+kUU%itERZA5{o=
zUgO2SJmu_0o)REaX14Xp=gM74PW{evWV)hRmA_=)nN)-*d~W_bv5|KYAE^guFAXy@
zBO@b#N}!RocZBw@jrFr@hU)w@a-x~Z#c>_mU|=;IvY5#9_4fz9cPR{FZn;_uO_&>v
zaGrc7*pLz`zP9YPdfZ$y-B?an8IQTz$y5_@q;wrXZ_dHa!p3r%u7c?3#RgkxrdeF+
z|1Ce*kn>b%i*EXb{=oJGEi_K4MCEAxBo3XBlZ4x?&M<7>?T!A5ClWzr-;FZt<_$I9
z;rOS{XpM*XhL|qHMj~VdIGe+HO@+v@#lu>eNEa{b*XhD*B_H15)vjc=t4_X7tEU%;
zU5(GF_pOY=Hh=v1iLbw}{3(670IPW~O&mLE@@3+K!Vf!3J3Ust({vXhqlS9}xd{Sv
zcs68ofz4#G3uu|)%;Nii8^T79BTToS5%+k^klDi5{RYuMoan^56|=G)@?LPSTTZX{
z<C5|t>F_ayJg^JNK~DSOW1!I`fl8rV8r#_dxMj-YU^nIy8~`uS_Fxg3chwn)tGGMg
zVov8y@!k?PSzO^f36xJ?k9U(+G+~NT!BW&^x!tq1mibLKF|>hQ5c2KNUggI$>J17I
ztj@=*!`l<4!zX=sOxu&iVtZWN-0~%RYirTa_g+AC*)zDks|waXIW@J>Np6T_vdM)0
zW|`G5x7$3ky+rnJ-@f6nfqE07ywN@eT(F`dqN86^x!$PX%a)ib>6OZ{=LX*TB`T#f
z9{a#lxUM9eHEJj?cPVw$t!1p?OwV!$uuLysWMwD?#|LJKg+?<f+JIyM@Yr(yLL5N-
zU9_PBUzgr{l*T&P5jflb0wN!HB_(f7UxmTd@%LWnyxCL>zwd72+R5bqcDE%IF}UqM
zR`r9MhYNfsB3JZJLa;(!hP(<P3?b<w07cQp#{nM@D=KQrK{Ud~NKp*ii2vA@Gom;7
zTEKU$qbnY(-2Vh#JmWo+5H4T}A)|EP_<>qYR3e=5J8(wUL(I9VxtX6LV|jU*j2C9|
zWP_cMh<2r03NzXjpf^Vb28ykg$pYc!w6JIzi6N$S1WVW=qkK(p=Erg&W++H1EFhx~
z$bWt4bp;bVc*3G$gXHmYw{-HC{gN-ggaW%_cymtl2%;I~6MLtgWr%I(q5>{gFb6mW
zB5@vi?mF->U9SlM(T{CE3B-EL<)?sw;8?<md`*mfBvZr)$T--K*CW-dj6M&!U!C6=
zUcS4c&UNNyKDJNzET==pPen;d&9g3XDWBPs%28u6TjFL`qEX*JFhG;1#7z;{hR2}s
zJ`DKT(2;w!P=5?{u&25!9&VhOGVE=!9dCoF8rO(m`Dt-0fPIO_F-i$brQwT-bype=
zZIA!c4s<KkKvO>Vyg2XczIbl;E9_Os!mNLs3U0a`c3V~EHwjxb@iZTAZxuDJJ@ezn
z%1_UW<sT)K&~##*k$Jg5EVtvGf8}2q4=%=D8jnJ>WVbH>yvWdSvjYe>vQ#+~dM7W{
z7#e43PSQ(J%7U$SHU@x}t?CL+wSKPwd@v{&B$?D@AmaVagL(_VUV+UxDr2nB9?J&V
z=i);k;i@*7{K6O(g91Sc4Y`T&T`_uT%c#~t8q8LHJOhAjMaDd*d4@PMRl`6fXlm1F
z4en{V^ToOO?SscQ4eM^V^a$SIXf)3pxq6V|1N8q=t?TI)qzTwwy7FXFM&UM9DWi?R
zWwd7eJ6*stOw9N9xb|b^0tJYNj~~!3N%w8aL!D3jp5%eSIlIYZ5g>OL#xYe_W!)$s
z(1F$aHpd<&+ORj*;@(xH%Ai&QOA{27R}cD!&*UK~?JOZGCi=!*nv{T3!qk+Yy{L?&
z%DO=LfwQ$uM0rGcaf-Q<N<7ShRbJi|1w}$aLLM8NQqpu3iLSeKnqB1bwz5K)8`T2v
zoZHFCgoK5;r1jTP5fTAEN+B7K%X7$v#H>*A5ci}?<qk$z$8j5z{ry<Hj)%j)xVm1~
z)p0RMNE(@Pj1_wl7B(F}ftb-<%MyoAN%DVh!C$Kd*;;}0<5N{kmxBd<ocA)REbF~d
z-O<XU{$mpp_9H74V8;aCu0hX2owZMD5}UdB`t9v4j+n#2g0PlH3fxO><oow~+rGV1
z&R>ryUiWmO;UT0w5!HD1RmQ8LSJUOy)y?*s`?H*uYSm^Lb-mdMs>kk@fd4#w5~nQ@
zOIxpZMAotf!bZ!ntH`fYpX-VkPU^=X!@2;FU(mS$^1e)XG}hWl=)gc!QjTr<y#|n-
z$>&K%guIWU1n!B;*LgOtp|@Q?FEWc97niMb*=yJsNRoGCD^O$fhp${!o8l0~QOnxQ
zPBKV(1VLMFt^igJGWX*PS&Vd&KuU`sAc1i}V>vZFtPwCkJQ18+2tAMRM65h^hn#?7
zk!>6+AX~UQv||5lrbp6AyQx9ywnZm^%q8-;yR?g<qv0`P5fHc_e>4BHM+tI}W3zT^
zh`3w0pzY6>Ieeb3pde(kAblBw?C#Jap}Hjzxa}I?^*%#;*`G%4UwKijPR}4u6$WG_
zeaA6`Dh=5OR!l=t&DR(J=J9w;Gih>wNwWouge0S7XO$2tr)c8m=92L0E<~A$S&3md
z{DZoxstEX^^9Bz92$hJKXk}%EoQzCIx4HzKmc?jrm`^RuNOnkth2j-^R_j7X2W-^4
zi=lN<kc>sH+5n4+?<weDDuya1Rxr}K<BmmMwvVM-UP<aB+lE0e7H0bK=RRGf>{Zi#
z@wN~u()}sjG(KeNz;n-25?2`7@M5br!$mum5#{^<RLV=^#$)IEvoeTdQ$c9OI!skX
zh0g=&1fY2e%hQ#4(IV&Y*^4;@8lWweDiy0um`nf$T{B?a=BD-jU87cSUj{@qI__ml
z*57^iivCe!I<^6qU*vDR`0`dQ3!F|g-rnA<UzldI(eI2nrtruJU^SG+e8puoy!7ia
zDo#9$^JwaP<MkQoaF&>iE3d1i<pEH3e>vXSTem;$i9o?5Nfz`hv0kOzWYXfXy|Sy`
zo=DL{n?~ccy^=gyp}=KSliV9h<hH$Ss>f->yfge*uG0x3AE3K@gd;nS9@K{Jj(^5|
zU#eYu4ibaFw(3IV5#uV0`NSvSScadqUvK$%a)4+W+*%A4vPAGsqd<X%wrK?p(bzjL
zRzH0LWc={1;#uWVjg0T{T|YAQXtVE+fb}NdYzHR`Sq3E|06pp(>z@IT>JgPEd`0An
zHXkV20eOF}$$2bfr-JDnHL0NIt=r$|{cBG`jxC<o|Lad4-jrLzh=~qAUpEZhJtyST
zog||a3fYb^ohYKD{66SF8A7_ex=Q!z{n*xH6u0aMa8!o7yqp({^w~Fh_KJ6$LDH&e
z(QyE)Yf871zO>Yup3XLENXaw3%5t1B^lZ!Ldgc+jg44&h{5rZiHk*Uyrn=-`qOf@=
zma!)`qsP_9t4LU>zEBpBjJaNR0NnE+YfkV3Bk_BnXP?j&dg_*hF3Rt&q|{lSuG3f`
z@0IkyBQOqjK_%%gf`<2;@ah8K4XLxTog#!<fklebc>Em;8AAEho@Tv{ZvX_IChUj9
zB)jr^BrAodN_khR)?B^z`OS4Hpo@NMzr$yDd47`$pQ;`5McYh3D)|Ei7q7>zN<bt9
zsJ1IW6DnF71F?#E+gfQjXtvlA(xROHs=*C`3UZ;n*&1$Zq!Va#<VmG1<jZFHpkN?J
z<vFBynVHKkN};KI*4{RoAZoZHFRf?BA&G;A^9|Ktm&!o8gM=T<DFg%r0DQj5V^6J5
zso3QLegX=<H=eikAZ?Dx0*F)Px=#_=*>7QuF@4~0j!$t0=H_EfB4~SY<RqQlDLfA8
zZiqN-&lDDWlNLAU&4CnF*Gc*q6P)N;qe;8fyIV0Y%R+##KFPbVJIR$|0L5}8@m`*|
zeU0U;xTSkSg}$2`iLAlE$E?3RXQFA+9zHO7hv-PCwG}&-8=oz^{U<2BGcevHAi&Ab
zX-l+MpQ$xhEzo0*vC$>ZGM4YsxZrW${$0YDGAsAFu?8HWmiW6y>V%hbuu!2yH4C<&
zNk}5tRH3`GJy#!vmswTzP8(`)<ii^WR`FK@0~p?9iK_YH{vBfOLZi_oqp~t8w%wVL
zQ93X5phUYgHdi-^-Q4PUYmk?d>G{@0&~~-Dnv-*C|9Wf_h6#vmoJE>KgbEcFXPN$v
z^I;@2N-fE|N-E>tg@t{cwkRk!lS$7qn6o4F785)AdzlA-X)jhuv`e(&9?yDMk*0=*
zq?9D}Cw=&Cto|E(0zQ)#?6?F7B+JKVac8QRt~R$|hS(c4J^y#6U_u2+)z5&TWN9?x
zr~518I+lzRf<lc|B>m4Oa0f%UDeXA6yRBxVY4%RCMfY}hw^)fXh~iC*Dpf|XT3Q4o
z@j&w6a>v1suyo4ahK+l(raMoWOpn+iqM|P2e1bT#`4ZFa4?q>PecQWWk?@~#$^?bq
z?}Zdfjm61;T{D2Dwv!b{OiV1`Bi1YGLv1{8h6|tb39wOlRVc)0f`b5}KhTv*F~x`@
zU`Izsv@vjrrwu$Y6k*^Tv%X1orO+t`_!QLFcL@#`?_1ycG3ZZrc5$$n=iDuL6(Xfu
z2<M*|4ULu0DYZ4qA9H_ZC(afhXrBYRwKiJ-8872br(E>UL4!;F%4IrWMI9I=-k0*)
z)xRkGtRWXCZO&`AFMM|(SN^CwIv@)b7bf^^beD)bd8$a|oms~t%Y!8M>(hMA!tFHA
zkPw9iVU<+A`cUEp0gE<COqqj4l=A}lM$v2O=3Hr#vHWi-Z#=_70s=Ja-S$i7{U^<T
zi?d_y&U0-n8Ux@h3Hyo+YQ*&&hve8Y=$A}4*@ID4;|0-7opat&xi9L5ppDheVFdQU
zyeFH%nl|xFt;vx*=Q;%!^>vH=4vD?gEa4PWv(<=gcgc+yh6S(7?&*HBzgmqE%kIG<
z0muG(=c!`TO^<!%!=os}ZRV%U%&c@uB`bxzc?tVAn+*A;0+c;4n3}+wXbJKc9PF%8
z7)jKr;h!$oPFJZsV=W++la{Y-4H`|Pe1Sxd`gzWrSWP@VaOA2grMK%4T_s0i6mkSH
zNSKCE0|TBcoRx`|7B)A>CuHAcp_Fi0^zL=3Dg|%WYzAaSlNO?v#OHpk)n|<C*rW}u
zz#oq0?W;u_l`wdE8uBw1Sc)unx>>%*5+;uxklr%>+}@fhgn6B66W=cQZD+2>Kiy_+
z%vy_o16o5V!_`f$7t)eadxd&N#$tVtKowcdahjJ5YDH>i+dfY)bNAN!V*jY#x`L$!
zs!O2&(Nk+aJC&v0ojT8JKHs7&3uwuOHN+m^lrw&QrIP92CFW>DbW>#H@VhNBk=)xm
za4^~=*pOfWQJY4ty`$_&90x0XLurnA8u1($M0|roWfr6P3%&Aqj9Lvsvtx#gE>;&6
z!1<lq4itwqW*Q#*NPY1%cH-HxZz=MIjLH0t38+*uNmKRmgfZ%L#C&$hun+Du-)pL?
zA+lMp!-%Lr9LA5p$lsW7zW=*Et)xK+!J^z$BKC2(Q{)+#Qn#R@guK0;lv8>;9Qnbv
zBEdo%Z+(r+6~+H)^WDByy?cUWPzEc5<=W^z4Ij(sz{JGwo=>k~FFeFpUb}CcN~CeW
zh_P#h*GSl1^|Q)qdXx9%3^mCK457OASzsF~Wo0{uL^4<1q?Qv<ynG3>)y8^YDeCzx
zCt>$PFgIZr>bvi|8y6pZwmuME1NdKsGwVNtsK2OaXpHB6sH$@ob2(o<&|cYHGcwml
zY)Bo`7a9&}fz(B4Y`HV=rN=p+v-R4Kjt(ZT-ji7zLNBim`h7j4@tGoMH#3zIQ;g;a
z8(`Pv<W!dOzvI_?&CjHrfJE8x?#5+QSXwV!>$Q!3jq(_>P_^48GK8?D+#K9fYBXR6
zUtD<jFi&-19JSWkQ9GU6V>*dGje6S(Ga;HVY)L--`@~|}G}Ksfv}ILg!9UqF?%h;p
z1&3vTLojjGnHdEZz;fjy6QVZXh<{uB;sx~9Z!1|fPKciuHja#IL5n27FQ;d+>-7rn
zyhfN$&0|MvZ+J4OQ*j;|Isbad5QJGn&GGZT9v$fWb35+uf?fpRP5xtaxo7jtnwiqT
zV20{LRO1B+iJ-N^_)kIXwII$%kNt=Je0(&mtf-sq?CqTausT<FvH5N*meqfSVm&R;
zmrSwg?$G+?u0|@U{7e5bC=LZZj(0O3kEz{`@3nW!cz2JguG>ioOaj3D!h%+gn0WbC
zgBpjWMxH~prYi>X^kSB$+v(QlK92bWMx*D(Z>MWxuPA>QuX`aq<gr(OziN(UoS6L3
zr5~A)C=j$Cyc)a?$@iN`<&JSs<XIWz`eDpV(Vhpk2!FJ+a0}Z+k>!eQNy86;b*h@d
z7ps@8Nr~s8h!UN9)9CAidD5vLul~^}z;v?O=!?xe#*<k+RmZx{h=}#@8AV!2NEU=|
zw`8o#Vsh5Mdq6cB++uotjK#zz!l%Z@8qJe%LD{Kutp0#RpiD#_FEw=vlu59~mt{J>
z6@77oBQ}>Oc%_4>jZJs0BQbp&a$8hRMHkgcdowltDH2Lt>32+`qH<@_m_$4y1^TOz
z6hSG_r4LN*B!c!f4n@kfl;&WRV1Bj8f`><SJ4!^f%bvm=^5*YvX`E4p{ScY>%%o)`
zIm5chV8W#LTUCZjZvos^!>mXr0<Rd~ZX;)iLs8;qeu9B?KXb9aX`M>3Iy|y@)KI6S
zYTVE42EDYjuelpGwLaWYaryO+5+M9W#P@2Jn<oH*kA=nKxr|CkXnMQe!z?czM{B(Y
zqZ#TGo9Ayj-{qC`#ba_-Q;A<Z71&w&n#XnctG(NHgOR_^acmvUKTnc~-Tvx<l;)i0
zQl-&R!Hp}Y7N4WlUV*PzSeo?7p{i}Hcy=Un)*UY2`Q+X;ostEYwb@j4Vczk2@7eK$
z=~@2nMscGet#X~!FCXniZc56U#nx|8RH3JJcBi8VVXz0?BDuq1Q|7-LkWlU{Q6!Di
z2AdyS<gR*DJU92#*uGS`6281b)2~)#I_|+(oq;s-USBfdTc;4!;+chk-o;n+YUOSt
z$LsW_qqc~j(e36%Md08rZy_NZSA|g{RgZ#}zx**WtO!0c$MMkA<g4ZPU*UV);Ci;$
zYv$yBO-k+xWs@<)wNEvH)bA_jk?;fmOkRUmsvl=LNH-c5)+?Qk<PH{FbQ;jYaOz4m
zw;~@#^Uk6ld<2r+AyyqZ8^i16lwCjjV2_5xnpNoB7lDqB`huk^LJp<aKf0OM>dY+6
zbP5pPA*oU}<>kNh%*|h76StT4WqdU@26pdaIeD@OFmQYF<cX=8r*J}Ll<wCrWj0k5
zw^nDmAt3<j!_e05i^mfyo`W|?@`~96D`x_>etz!o;zb1PA}Y(_tsLaa{i#%czqlgg
z==dDoad{g2ZNKTU{Xq94aQG^rY11?@6^;w)BCd?yK-CSaUXP$B#<H!UM-nPHgEU7x
z+Uexn{G(oWX2;;<B)eE>-cVX)@YnQH?!CakSIUtE3T8<{zOjm^67kUs+Ags@GclGu
z+D{gn2;En6EbkJ&)smPT^t82Qy4BkNlJ-!lpp2yW8rt4E5{axzrlPvy^Q;O0Cz9&t
z`Y)A$Z?{WY(dc2{9|ddcMIg&qI;PD0@k^%@dVW(5xsQcf`Kbb|&I+9}6u83HdB5z4
zN<8S-R{<(Dk-flfXJ%pXu2TG}e~q<eV)h#(%Yh_BYuMiqE|G>V;ejo5)}&%J@+7t#
zzslySAG{!De6~)cAqL4dw^ggYjEu;)O3@I?5PbC-19Sr`{A2+-QE3_>MFOdtQNtuy
z4pw~~lF*O9nzE~3^43folYB6G(W&0$WQ={M%5H6Ki_7vnd3&Njth+-+UA5Wc#APMA
zcgnKIV710#x<F!+agWD-*sjjyYOdBX4IF0$!l+g?<(Nc`bXv8<(<X?@&UDS>6Kv;K
z=!;4%$j1U6$iGPAnCVvk+0BsQ4;BRm)pNZn)%QU=y^=IIA%R9@=o*tq7cR1D@J%0a
zzHA@+IJ@XR1K&gTkO{(3>IsU63ZK)QtE4Ctq+L}hBR{bjZYHo?B#hx?Y{v<VE$2+i
zaOh5IE2Tw$(i=-#zeGo{M&VrF)M7y~C&wcyqsAts)VEw?(q?Ll)hb<bwiPdkxyl^Y
zx502CXS#7|Zqw5b9q`c8W{kJld#-YaG-{reW}$-vj#$C5H_Znc=MC<c9f;nsO_kZ7
zY8%>(SLjLfsx7hlB>-EbT=bSU+H$VSx4ODIKJg{3Qtr=$#f1u6&uN>N3bgd<)fq~A
zF7!U=qzKE>mWQh6Z@85Hk@>73pmpnsR80DiT@+hjcwv}5|0pU_ZkO>Q%Q|aBSJh`!
z>M3_Mx>N^>-HORE+%|5ZdEAgk{#neJR%hEV{6y^TejWx<-Rg3^-M&U`GB={FgqX)n
zt-8UpR7+s0G)=&%OsD>MfPlTh<$MkZH}Vt9%bB$Yx@KI?*J!2~HJa?F-RF8_L19Vn
zeu~c-DseDyFG^K`M&WCFSr5}M#YskcX?iCpvh`<@j2>EX4{aV_-==Ec10(bhkaBR)
z(7;Q-34=pCq?mvccG6tM^KvUfjlE@%&2qX45#i%sqH+F;T_-!U%pzsx`eN7J>S7`1
z1kV#b5+!c4)?+;}KQ=e#b^;nyHRdv_yS}9<?kIeGd{xTtN>#<n%|W(QJ{oO^y;;z2
z<zj!J0X4|c;^z?)5s^w}iPD#e7N|WKSCkxp`iI%r+2G1oYIZZeq%$Sl9^6yYXmJYt
zXP*82L#K#8)YE37mtCwSvr}p`rRV08QM6H!QHRl-(W%PhYpFBwr3D+4H)&ntVPg;#
ze8G$9orc3?E84v04F=UFr(fa6-QU3>gQwGF`hDTD<mTpPoTX~!`ZSHKNjbjyz7_hm
zjR3zedvTj3W}7RWk?0vl!fw~Ur8JOuH+p7BseS0$+2;EgZS8Jz(X(47Z8BHCue|;4
z8$8`u5j!I>x#!zdyZ{;ziTkSl_`qh(Ah(d^{GHp5=rVeiSwVF4r?+8GBpU>m78@Um
zHEUF=wngIkIY8tzn`Py4B@+laEjuWf*u&>;){Nyj%|G9|ypBs!zi~OslTK@K-ih^a
zzpAmEN<~G(>4BOcXfb7m1~nV$)hdj3x0u0>g@KAnbl7Odv)P0=p_ER|9*u~n!^#zg
zrSU&7Yy3vM=kKU<%==g36t(e+LT5$YF5!cjPqz45)0K9E5yHaWj^?u(kicETVx<%p
zpfN~&r@zrzSYg?(VY3#`?+NccNxdsp(=L!yrG<~@%;uM4BOc;0sPpTo94lkcO<Js}
zf63RVo`KmX4Qd=GvU>((At`HUL+FsVo5R}Ir+Jgonsq`kpgKm_oGm1{MV^H=i{)=r
zO{38>6en_6avLC{DF@U@cx?mDaj8{|CaxI9;Q;D<j7Ob6*Vkq4nyhKFJLg!{UFr^}
zSnsnN>>g^6No#Ihcr)Ry>K}Ghs~VIhddF)#=$+&CIipP^|HF3XV(VI|2`-bidW8c1
z9)B*k5;3piY|ZtOSC-)|5s$aWo)JD771ibd?>R6hs=Gg`dj1-{Z}3KpNvpoz?CdT%
zS@Ti|7?SWxXY&T7|MUVv@dc+l#ucm!X3vQ-N77lDSy*%+kg%AL;=TQc-GuDMqC>72
zsrj0<UN$${*Uw*Z*c7d-`xQ6B6!Sa&2^Ad~IA?q95*k8I5L$L>wQ5@%QLN(7t{<X)
zU3m&IiEK)2I;vFe2EC^5>993;-xL#wH@;m7a&{{!0sv(S=ze9<VV6C#<LfnZwR&-c
zLsWFq53!!uqg-mkt)*Y&U17Wq+c?clwg;)#z48MDoB~d#)Xi)_Gb3P0(rrDqF?d$*
z;68l#jq_kG<5)>5Ns(ULVk{I?fYHTj<#H2G(8<X3ivelILZjYf!y5s+NR*tdl}>ZM
zUl_Wcudv#_{jfapr$$T=orCY3TdSUB#E+ZUf|l*0iX{HnxhlX8+fS&kM|99ct*owC
z&bKHwDiy<C(h>8x9mb?-@0^=!H6Lf8w#cNNZ%t;&b&7LZ&YwE(0{F&B&*lgiEI#6u
zJ_+oIMH}y@g`ccT;DMvf3Y$Y={Lg3{ah*}xK4!e!8e2<bHT=4SH}j5}*?c%3o{6Yb
zE>#f{6tl&>b)26yz1=m&aUWDY)Lu;0+@EirFFa^P*ybiBCcdQ8YMYoaM_{Q^t7huK
z#W43L@?+dIEiCFOrBm1qyKok%1fb}*K^23{<hM%T0XSZ%{d_Qt58T_yJQ1`&rDVHS
zCivJjEI2rPkNB$l#IQwJEEu9$yWneUNUc_^k#m)Ol$8$|S*3Jt&?Y+HY;_=R{4(0$
z^vg_y$p__Jz-4<y+vf`EbQ>*g*_G^zwjl}iJYW>51^&jXliHTR#J)Jjet<Jy*i#44
zmNkiO4kNa2yPsf*n+$3movV?+CJ&AZL6S-u!DX*iz%)1Cu(V~h8;Onog4v)AC$MI!
zRP_zlN1!>vVI<{uTS}aIIUT0H{esK&DtqbP%*>2z(uskz`|gR=VfeCwfa}#;k-Xbm
z(r%g5k-OSoU_6!6hN0OYMa0X(!C^2{gh=t+FL&)$5;^eJ6@l{DtoO>Ne_j6d(52dB
zEY!tpx-L|wmzW^)r77n~=jcKI3WY>H*QS%x-5(Fku*lME_nS1W8LoAQUbu;YYRB*K
zWUt5{b@9LR%ksb6#nm3@`!-?}yu+o&*1GeG8VHr*tsb){u@g_Cp_4wCZxVSSDvu>K
zn`j_f7+-C*oN|4E!$deycxPH`Q6*dV^#h%R#08x);y8b6i?G%*j!yGxDS~`_{Th>$
z%h`;W1UEK58t2uk4zZ}T2S~KF0kK(qiI}SLa(q^|SDtk##l#d+Kmp`_wEYs>Ib|j;
zY^g<yH_ipM;bV0!lHrRPT2+F>0Vaxcx?vx!$U18Z0G?#;`XwOIpM`K^Pd_)3#&Wve
z*i4#w6o!e4;b3L8#-<&)XbQc&bh<qwCruN2jCQ0b+}_sUurJr7QVxXRiqzV-lY2>$
z*8zboWahr!6~8++S@UFM;<*C!gX?WKeij+)=!|Bo1_AL<9l*u)TTg-AeUB+skk`dX
z&>ZlFIu-`M%@^pOvJdsHifywSX;ixm$Ww)m`oHn?@@8b@w$Oqq)qRqMdD1Bqxm^r0
zTos6pI2AXXF==xhxGOq@4eJNtB{wX6o~Pj~St-Z^NF=nXa;MuOdAyQDb(OmMb)^Hq
zF0_rdk$Xz`;>Cw=be?7kdU^^9dR1;Apc_47`oVv9x?U<LD1OVRh0<NabOIu_>2QQp
zMZgCHZMJnVrjqa9rd=i;Sz9Zxve3#|i-=+DXEmSJ+3tu&WOmYgS7Iy7>E0YlHNh`5
zVDJEk?wv(-hvjcXKDIR&(w4kmb@dlGIh8@B0XB9s+A`0pR|?-$G=KC6<sChJl~`Pj
zg3!^$Y;CD}m5J~yEJZru9p#7HsM#j{9s9yqs0$*w#+Zp>9Cp8INoC}#IK^mlW9^uw
z?A6*S{LU4y3;-Bo3DX&|!X2U*Q}8##gw1$nr5}zBTl}Mx{`s+<R)6^PYxw*td5;W-
zA%3YhHllAGAv0@+!c1x{b30x3GYjfc{`P5UElz_nS{q;(m$q0|Rh8XD&cUcOqHZS{
z9OIkQV^CbI=Q%+_5X)zp!Vz1f@tL8lszgL0;cLgx=MIj9{ZrL+IuF+R?=8>6A1yRE
zdk&CEbql(kf^+4tXniRH<I-h@b)BE*5i!u@zK^BRbeYX976@}M(S)|#wF&^KR|FNU
zLQe-SD$J$N0;od_&x;c7LJ5bSOXZz$21`jM)|yD&Ki&NPJqP%YmDoa`%G|Eu(Q8}|
zm<o1Y?_6w){1WmtZodvRT&JB#Nlu{&$%(Gi$)SBor+n5BY4U9ctX0P?<cW;=><JSP
z7i!wn(Sr3d-^hs+1!R>tru#tfIFuv^bveNC97^P{?ub7!*uae*wOFi(c%Z-T5X+d%
z>o)#-A9|Y07JEDgG-b~m#HJe-3)k*kC@3ibbEV-+MqA)LHBGB8Uyens{_=&cxQ??Z
z*<l0@-&HS4)M_|iR&OZ!{jAV*S!ghJKfe4Zh8Ft$>RyY}ZPjAyuV^lH6}2ai+*mkR
zl;8>@vOc0x@DB(+b9EIJ4+K&8h6;kuB|iKw893`p%C~QS`1>d1ki?Erg|eH>BtO^!
z<ccu-BfNh~nD3+k^nQQA(%FX_;zeBo2Jy$%kFd32#jqG!_tkTA$|M$Q8tvTvF7w%s
zBp!DoS;J*zopiA$h4`-s@jqwFb-rC>8&t7Vqjjstj}qv+i}`fv{}IdKBtmyx967gX
zXgURLwr9LsN)3n+6i{!LzB%0Cw4{&cEwzKlg}J$1VxcZg7HQNQpKNrCpS)Myo}L3k
zs%FPKtpg8tgzffJEoq#=Ur62Tp(a&U{m<p!SdGNf5C$TFp@9VKW=|hCCepfHUH+Qx
z6gi5lp>fDYFD*<BNvgK8vrFW*7y9z$>%=xYhy_iyvy|()H#dU&3+3z3&XX9lAY8f(
z2$SI^5z<eA*51bE{O)w5WBg;;MbPHZXcnNWwu|0M#7q?-W$IG^lLN_I76$08&~yBE
z#xuJgZaiP^0?q-Z+v^e|B;Xy;YgS$4>lbYiC2K~O&h$<LoW&<+)cObd`+(qrFX$|q
zma2LAQ^V@fI7-=vEJ~bPj2qonFwQMdC}h^#dKx1Qp-el_K54P}dcY`iA<=K8Yrk=N
z1X8m&Ms-FqvK7E1_|u*6c-spAzywcoBSx$f;#TmpNkak0ikQ#A?CQre5!9Cz<uxQn
zQ`*v@p_`1FIMc0rjgAimJX6`7E1FYM0s?w}jOY#$@$@f}(JOKaX$H}+U9xj=G5Zs~
zb(dD$J1ZdeD6E|)c=!L9y6Ui~wyuu_27+{hlG5EJCEeZ94bsvo($Wk_j&y@`57ONY
z(%sT9)VF=_#ryG>56^h!aP~fHt-aPSuHZjked4qOCn&nbuSqoO*p^Yej(a<cWa4U!
z`cpMV*?cueDtQ_f*IO0#_6JBPL<+gNSBKHJRO){uO{REiz;KU2xAyDOvvA;24WZYL
z)sJ{Zq<&14F~IjUWW>JZjjWR_wC%$UurNvXnuR~N-~|!fd5gW?OSzJxzi)evLK*^c
z{muE}^==|3jcP6>dlby$^6kYW!9+a(2E?|oQ`yAPD7$R+x=mlEm5=t(<JdUu-t;6+
z6t^@BKk^ueYy6pJk}oSGOFiPbbvY^IZPzk5_=4AC%H|AkNn(q1#GM6@9{#FcYn#7N
z(3Fq}Y-rdacIPbe0H)1R`z3BY<HuKP6;KCR%jn`<-2{FRvaQsMowlcX07}uj>UfLy
z=j9ew6NBDmLz?;d=mFV?*+BN*L-9B75oBd#sDG@rEMXT;{}%ihEN78Ox+%DtTYjcG
zz%c86C>WJo>#~0!O|pt1;aKp{3t$*7Sm!@AqH=pJz1CN%v1I=h{NkT#c>yW499KA@
zERnk+R3-ujt5!h@OX0FV*qNd_-RERyKk<T>4=e~ludc-^F|mlQw}0M~Uhiw%U8H7b
zabI0O8>sdf(Q8qeFK4@;9wSJrM|9dsNPDUr*KN!FS{qRd-Tg=?=Zf-6mu+b)4GGEo
zhwqyk)Fau?Q3=Ky<>xg=Ov%Z~lNvu5^j0&c9yY=zMlWI4mjt8vKD%2LU(P=;+A*Ta
zhp)U&GNM&0Ja^q`d~k_cpp{OO?f5n+lhs65(O4#&*{DP5$G5PlL1N-k2qA-h?T5AF
zO<pOhAzUdPot+#Xf0=jzv-2GLV`d#LS4zKB6=FO*G(ybt<1P$u;B~y##6PCp%kOq&
z-jaZoKVg^J00?W()-%z<^m%+-h7Q>QgCG(u@-_@VFV|H{5rECYQ)&Sx1q&OW#h`#r
z@T7KW>N-w9Tu$%2Lc5~}r@wfnoQ#VLjIrFu%Y$edcBV_*x_jL)*NSv2tj7*1@;R+#
zm!g1Bqd3a7@+#8Rd8EjQDWExIZVd_|T5|6Kc-HQptpHN%dLPv1c4$O0NKzgu5P!Ze
zK~GeuQ~6=Fw$IleS^Hw1^aSk%;ZIuPxM|m&()9)V+|kaN?O>^F`x5&bsK8;s{%i%m
z{G8`ycoKkTXR#)+*~U0bz{0)C!y&-joG_WmZS8Ar7s<{kQC)kh=zOC`;=hf6pJ#H0
zTkmd9#2glK6Siw=YY`tI^@Nz*(kj-Ui{BzVC~7Nl?U_i_87okewVx1LwHeM-XUswZ
z3Zev7`3n&*Vi{twSw2zsG}0^%(+z68);Hpzp;6+f7j7vo*Km}|bwKQ6E@{Y4xwh7=
z_;7Ht92%dCX69ZYj8xI`XnJKdp|YwB6%|!pMn-{G$A+is3gYYAphEK;8Civ4<+h}<
zGAuAqf?JW&_APfuc~b5h-KpE8<YYn5^PlAr6Le|?8Gpn+#157+=Ni4*yb%C5!N4Gu
zPM4672q>FW_>3@lt~3JPU!|><JP~k>&6ujIsj11$jkiqo6O(abiyn}wEGt8O`V?~~
z<Wx#oZ8Vi@X1bkH=ORC5G$$Q*v29*;W^_2+1x$w9DJidrFx!;z?$JMxSSG>3%Pp-&
za<(+FAtJrRirJzmD6|>vfX1z9<XVj{WycCu5Zz4dUrFP;$ldi^-o(c6+6n!kEdf!D
zTw5gZ#pEv-HQi+eML^S=p~3swtW*Dr=rIJttc}CwbzHW*u&`(Ch#4jHDG^0@xzY%&
zmt1mecYt01gi`}PY?gA>7o7w1n;teBYkqOkH0r+F)cr(#D<KzvWZC)-u%mUhr)e^x
z_KxGJXJL%8$B|evf@2=xk;?Qk7m6UNj7B}8>ZW!dP00zCgpTYe)_vg4B5MNM>`l`_
zHnA#zo-{s{-DJgJR_lIkwKuz8#j(rVmjrj#YwUCz`S<+&n}|uxjb8pG_a_~tmkBFu
zh%V?vQf?u!j7FMqdL@)`Yr*YF<KxJ%J=RAs&Xn_0D0L)bQ)+{(oM%drzQMBk{9P{~
zl|lK{qoent1M@*(>eA6F$|_M@!0{0fM(yoOl-t8$J_EmLTmJplH{)i#19hse_!>09
z#7~yJjRczc{&S)sDt08MqgFVMZfEN$LovShk$r*<sh59m$NbETVfy^%?^IM)PU#8m
zcz;(p8KqQ<=W<3lI5;GBrk361%TBNRnyXhfyL8@W0w!$M!ILKmVgFo?2jT7Apb6ZC
zdlcnuKD)1+loSgyi&6|g@M>vmm$8|gAtx*!b8E`!C|O$?qGJ%z|Eilz`8GM{vvWMv
z+DcAs(xh*beb>AIek)9XAj-bp7L=R4ff(>b$vWYb+&nh9h0m)$2_y06w1zei9Hhz_
z_=wHlrx_Qc-^kG>-_alOJz+EazIkYL-@orL0>aA&63PuqAr~u;bgXrfYBDp^m^c7x
zl}Tch+&s%*&JvsIeTUc((xFI}!E1;j+}g(EgyOYCAtlvm3|q!PQYZ7oVAdqw5dN@P
zNyB!mKnOqe^Qe5l56x0V#rV%w2>ES->GP*6hK5Ff2^_z&P5%&717V?IB_*YXhQ`In
zTG_|(($^9U7>NQt=f^?ASEKBa0{L-xlwOtP<zE%?Y{uOGpH>HQmxfGf{0ry{A|e|D
zTWl<%^vUbJmP<kg23u|&0H0f0S~gl<f)T$ou&9jBWHra)X&p)+9W}nHrN9&zc?_WU
zVg7sD0^Mh2OS(vHBt`mz1?z54FSQ`UW^iOGbB)grhW?Ur-@IjtrLfy_E77t5vyQTK
zBR<98-}eQ4P@X??{NegtbZn@VT=l_y8&i2ONnj_0#KZs}T?|4@Omy@pni7aPE+Zf}
z##tOz<N-CMM}zn7-NWB{^&c;@^F@0p6&jwCp|G&Vhw8#mSp|t74w-<kC4U1Y4^BuL
z4t`=`I;g{QW<q>JM{be5nWXSFev3&m?-jbpXE17EkyTQyC@V{E)qf9Xy`yv>Abk94
zlyp_>Fioe}>YB^4v9V#EtFmRj|AH8e7|PR=jwzp(!s%#XG8i=qVc)xSX-)QfcRwF^
zC@3gbzD2^A;sr4R+-~Lo09h$2Dhi+6*=>RiZ2WS$I8kTX&C1x=SV<`g+_IB3^6Joi
z_LXON*-}5^t8vwplMA3Pwx9y}13$3&&on#gE`sQK17$R=#U7N#JbUs4P3Dec2lih&
zUbg!QyRVvYXI=^0YQO!#0T7B0LqYLGB!a#?az-zgLhN%2N*yyflrh&OQ>=LMGjH80
zqGn*JE)Iufk>yjJY%mm!zBbRhfi-#V{--<;ZdK%J%E0Y=2>?rEw%HFa%KrO0mV^?^
zdn8=>YaO|Us#ETRsi~2X?Q3hMS%711YKk62T6LopJwluzr8Ipr-BT42W(#34VF(Qt
z-aMKpLAO+{x!PWosW7>?J(hv`S#G5WI9jkLyoJ-9K3CvnUxY=WV=QAVQM&`=?Kmz!
z>;F?fh;P#PE@O|{R2&cW6iLGu5r0cAnnxMoDN7k8nr-MiY;diwYfAnsE}NL=2?ls)
zNf(cG!pO+Rz0~#sN6K8AUTR$`TA&1umxvwT)!+ybni+7$=dYNe<CNXa?Ub?&TNYcB
z;;W?<cvd>3p^%W1t>hp|?>DW)fBD4-c%n2OETV|?Ki-QTzOo>%iH8a~YQaa@oo?I<
z2ASC~H|3!0g}*-?Yl_C7r~elumL;NZ$6}y)BT3M#?(cr#W7NXE5%m!xPKfa1ECEVk
zvhUjP0yFC2b*G7k|Atxwga?t{vuxI2^}<qF{k&ggy^ogaIEtgg<nIBgDZ$?!Lo-ig
zv}aSbbCWw|iP!M&|BKkofIWG&8ia1oi7=`Y&3KKEOOu!T1(Kv>b3yw&KL4Jb#B07n
zb$u;ynW#Ln$YjZfYxp4aJR@Y#QQZj)Oc^d%WD!Gc$Qr?fN^PrS{Jk!6hepL4e$A}7
z1T~Anqy`$7$K*pY)Zr?Y-!S?eo<oGpWZ(tyq7`HZA$BjpF~t8rM*qu17VOs}mnmPm
zVU$DYsY)kFYTvJSqOly3CV%KKQ9}X?slA0v<OW)tHQYp;_GPZRfF{D-_ja~_rCyGf
zKxS#<dXB#OOTIZK>y6bO{{wj$PrZ1=OfimDq%&a?38*Tn_<wmKqM^(5jhPnWHC8qs
zQUdFS@W4_nj(V1Kv;=gdDDb~KTL>Usy<M!fi|ezm&8YI<lvjyokll(Dkd6?@Ckgw1
zpYwQmU3+2kpw<rZ(Gi|K;654?Sd?3%Vl6fV5;gR8i^&Nu;_~0aIAE%epPo>DAzUU;
z60K@uLazIOxSE0oLw`(FovZJ$gg+c1;Am)hm`SQ^As2u*By5u8ue|gvFrD2gliF*X
z6*5kBDGvX4(?#@s`<5_0ISpvh668vVnyR2S5&fWHEc#7OTr%GHyV$2nQ*PS$Np0z`
zco{wUtvMm~&<U|iewjg=D^``fD&=)#ttiiLmXft5=7=`GCC9-QrMSA~8Y+1`Z040m
zdKXJOPYDTifmD8>O+jCuY-lK&f~lgUq>iU&eP*UfL4%RPyEigUG2ha)5^5OA84@Qt
zKY#Lmim!=X-Z?)&dOMthgF))4G5#IC+-=dz6W>mNMcFY(=u>YyI<o?^;K<S6w<z!`
z@GRl^(kx>vOEeC^NjhgBqIt!gze}6J)Wx_<8E-0=S9UD--|XNT+bHF>_V&gQmz3DY
zP#_|ChXn@@dP{H~@oihvvM}YO#`+x*Xx`wvN1NPJBErUAt6ss1euSFp#7-0)S3?(p
zM8iPiJ8b4{tdu!`Zy8K00#DjY_?rexiIBu`G6tqlOa|rTfHnpLC1sXY9)!7444x!3
zomkWNgQ2Yy;UbuOiPc<8HS9^i(3XMKbf|ZTio(Lx^JD?(^8h%e-6EoBEMPad%Ki;i
zQ(>Z{C8ecr;Ymb*hB`T|HN(qek$Y6E%8ZC-nqy)Rd=5}KrN$mSEasV{sk}RqPLI=B
zS$)@#N#wfa^wSO_%y)E+K_oa<AKQQ4|FrDz-zf5?zp1Njx;;VY)Y!zt!qU<<!=P{P
z>TRq|-!EL_j8E8)CabcX1{C;>IOzju1BMblTQDe_<^;=2i$!%FnFfi{e;TJ%9<Rze
zf0X5H9*qZ+rG&};`-+{T#V2Y5U1pZfN*P(%UYWi}u48QW#t}{U3AI1$=ugg2b-IZj
zRV?9Bp%qZ={VpCZF)dFa=ZOh!4wBPmrS!rUB-6514P$PS+!MBOAkD^ilsSf2CMeQ-
z2g6cEpm$ZDF%f#us7A|`W+yiI8uq@A{bt5pFMY9k@B0><o|-uz7D|zp%9tTSFMA^d
zo{=!-$^I8YkQse$goEk2=H{5m$$y`0$05U*7o7&a;n_M^GMK3ihU&Wge7Vg${(>v(
z`jjdl0iDvR8X+j>z2?9efzvCV(Xp~VWX&bb##OFky)(_LZh|E;_o0Ai!he&&S9bG3
zolN7SHC1GoG`my@e&$qEL+@B*A3^K=mKSf#WZUuA=t5Gu3Pi+GB}clO^i3H$|AhJf
z7CxdONx-Yx?a0M*<5%6;JNNjtS4z2~{ry4>d_YK>k1yt$Nh+>rVgGiqCk`Q&ekY0U
z+4lyo$^6;U^;S_1tHk%RytHbW51&0XVz%E=e(?-NzM@Ly-uU<X+Fsu%UcKsmeMrFt
zvq3EU6(;QOKO_Ma8~qEwLJ+(U#L+8l>hj`{9(wY)9ljh9Yx*qqdJNcf<Mp6`*>*fx
zz)VYk>o@C6(=sVYo}kxOG(Ui-LnWJ_CIi~-Wwoo5Bq8xW5${(iRVP0SMpaRZyI*|L
zt#4V|H?%(}jjF7e`Ustb_0YZiW<mxD=~6mj7uRr!C`EL_?)nZPFvi0WA@jmk#P}<U
zclDB#jO=uOzTd9O>g;Hy%Dc)=KYceNLo_ShuuV#ue2Vg;i(`*+s<5iS$FPu)*#-|~
zPfx-g7xzBnmf9bBeN&QlHe>#D1_Iu_W1k@O<oWt}2n1YEv9=#Iyp!D`baYWBjLzL%
zMTWbIM26*d;+vFTn&XQ%$iHDgakhskS#^;6HtSn{+L*qPqX&NNtkmP97<b{hv!9EB
znv_)LfaTRIy$h3@E5BeI#$_OufsgNSS$WnGzJGBDh)y{4TEpGlJmlmXYkm3m?m@LG
zwl<cQr0Qy&Hg^~8LF4eOyMc>~3!vPm`siJSg`1Do<pKV^Oa5fJ$8oI}3k_{={p@Ne
z-NW;`KiOlp(PyN+y;337u%x8KbzjftXbn<7@8Be`w`WGHUbMNfalF`4m#@yKlz62$
zikS=~;tLyZ0|+>az64O|OTavxurfD~b8sxj2lmAvG!=l)CSO<UvU_xXaE*j&TV->3
z6itPC&Zjj|)@?nT-AxJnsyRNeOJ&-3=7)Eo+L4@ghTA|pwZ`6EGL*pRr}k|$3k5X{
z(R&hoWp_JhuuX<acD`^XR<XLpIt6*|0K<Dziz!lK4~Ej)Q;OmV1Ea3?<98?BBXL+e
zhq{`vL|C-6XIfpcL=hF^up+u?z3Rl|npd>@6T#QhU$3u82xg)oy^Pu=?#Gsz`l6%;
zJ}&R*^UL@ccHl-FUe7$1p`L5>c_sP@UHw}&9}A|I^{lUot>0Kp6>VEhW<^{3*&ZFU
zLRBh0Vx)xA(pX}~y>;NJ$j!;Q6%pCq>{X~imVvenkYLkbg3uFiG-{AnvVpehg!?*6
zU6$yj(mw*x2p^4W99DDHi#3gn&nv7_0M<k{p}exnHRJI9qo?YHTHDu`oGB^m%gf6I
zoHt#gqkk6QN-;(mXwbi|0-~t18C~)~o&g9@e7HEIHmSp+QBh@Rblq2bw_x@ZSP$fW
za|omm1LbclV1TkQGlQ?n_4A{E5D+A4Y0nHU0=g^k34Yf^3ZWTWKus04j7MM8uBx}T
z*-hZEF)}tLZw#(K+2)j%lB)NfWd-6&MS(@zeTi{^t$8&CY)fPJBYC9eHBC}<`U_k%
zr+~rxk(Ip)V_WRrNNQw0s)@9494*~UC7T(yk{ZH1lRs8x7p3jH?eMOsrKVkDKknqo
zEc*flhRP49yc@5i(*k;MteH6s^WS!o8U<(M*6Zq4TH~_HTM=d5^#Y>I3b_e22eNvn
z!fg2a3VNqXQ@eCEG=K1M8?(kS&KjhkYHVv+JDsf*1vs1fILEAxmQ|JAw=H!R>owl@
zvv!VLZPBpiODv6SIDcuCC&%rwl|c8E64Ol|)>F!7v}g#yluIjAIe9Z{Djj0Z`d~9k
zAS7J1jW`4hl2qvaX3&VHZb<&&VoM?*<P29r=Z{c`++*o9`+K&de0`Ob&|PnD3ahIp
z!%60q9~0o<h)3=L&2(}gsE7lj*~O$)>mD850V1Y~ifG3yG(0ra%!&;<G>}+E{nerL
zI!|nHymVacel-1kwA!EryT8B4ZXULjuQ&k}1XRE28Q$vJ+95=fK9e4`EVg(Qv%^OP
zGZmNI`Y_>QJ^pkR5DtDf`$doLfR{Z_tx&d489+Hx6ij6)rU%qkG)=g=ZCsPhju1<J
zGEMz5h-E=dXne95)xg8vp3)Fq*qr+H{`_ZK>t#uooxGjQOa4<uSdLS8d+7{rCCPxm
zqi#LKhdoR0lnTl7b^WhP0+VCtC!6&y%i2VYw>^G&F?dMcJ9|Bq%w&>#u!UCOY2b32
zwL{T1-h=vs_fSkLcrB8>+4b5CiNlpj+g0WCu#%CtA)+FuAH}2l(00CRr|P2g$@C>d
z&zgXv<j%Nq<!!0;n+@(nx~5kjVsm}p(O=|>R&(`nu&>5hVzGWbSKuO>9%b|#PnErn
zT^=-{wiLZnrTKmR{dN3+i`9f}XB-e)o0^(p)x^C{bJ~1L#Nz}a+gP1z@jUEgWG<$x
zOj<(X1#~@%DxBnTY@^3nmibVWiwla11mlAT(fdf9W__`-`s?^W%}Q;jJF)6zG-Col
z?LWm~cpF)shHo>X%Ees+Ov2wpq5+WyzfFhAr2(1;ii0}om;{qr*t7j}lt7r$fVpij
zMo1YY-wG~6Xk+3^rt-Gr(4J8f2b0ue&dh_cq|;o}ZK}EVOx6J|!vU3=`)<jW5vN4?
zQa_4bx49cj66O1TqYT4(*&3n#Jmx7AMRDU%3_C>jiy6h?2+rdIBYsWtLIrZpXeo`&
z&!rZlF#sre&SCVd$3G+KHz`(g=6$C`VY*sbdo1VJw>_I%j6|UQrACYO>~B6aewxeX
zwmChC8BRRAT($;CX4jWh{606WQ{3X|Z|Q+FOIi+H=j5bliA-7SVQcF{ScFfPy;f|@
zsuD+(^!XU8A!Kk05z#xcn}Txdy-1rARP}9YU_9n-(|zG@e(}~Gb1%o)FSI`$XAG=m
z6+{qt{8p;)Ja^zQPqiLfo1bPnGb!*Q(oBWaSZ|s+tE9xVE-51hL$PfvVy{@Jsog}p
zs$qLdmcd^{J-rHe+ld>}gv_$qn;Xn%OaEAWuyerVM6el5x-Xqm%97L)KVz}RGVlk5
zYqx>w7u(qr@y*@Q>-Y70=RUE41`kxV`m5v32huoCZG1n&fSSyFy&HrP_@#Ue3o|@q
zizTkIbsI?s>Ckzb15^T+H`i9OvX2nG8FZ?v`6eN4F~DgjTXYG8Xqr`k35brWURYq1
zagAYD7Czb<D+8P!m3|I#^1w!3(qgcs^kEMb{QDaLI*sO4)V+ajCV!V$`h%p1PJ9%T
zy6hiEA<^qX*)zSLWJn=}4+}~4QP%9klVJ=!k!J(%ytGS1Qg&{hjpxD&zBD$yYYFbc
zfbKWO$Z9jFf1CBDp)J->IlWqVBpnb?Y-~e(8dJ#J>{wz3UF`|Hgqc8sy$UZJ$)+y&
z<SsHKOT|keSF2xt<2R;BpVX-^JVS<TU@SxkgyhjUG5u{Yb!uGIzKCN;P7PQxspa=L
z&3M<8mMH}(D=DE@`2K#qzwxkY8Q6ii%v9<+uJ@Z68O4zWSjUHTb}~^y@odbfv}2}#
zlXgvV93vDT4{t1Yq_eAw!fx*K$rd}cN=}YLO_?J~w<l04k*DD4Q&S5J3Gq5wGs%=1
zJ6fZEW2RkVcv7V6!OPp@unt1!dN-uX^MdB|G%QnEJx4YFo->u8_EZ$U(<dNC_}MJ~
zRuj*^YG7hFWduA!pQnaAsW0M*$?8h3M@&L=Wu_zQx%`ERaa_EE=n@$g+G#LNY~^;6
zJ(DrI{rY65J_{OK*|HTj$6mEfcbUD_KQbs5EYW;m!YNju|4DX#AO&Vr1ub!U9AcbZ
z)MG0#nent|orbq-+e*Wav{bilpl44+0?o68&-xt!$NJfd2NfI^$zN4SRwr&4YnIgR
zy*Sk;oJnm$Asu5q{3CT#Lc2#Y=m`#kzW2(}>%J5gKZeaRfs^B&80VZ^5qPiY2&=%`
z(P#gjd+->jC1ayu-q*qxU=`dBKc*Q!1=>4>$uTj<R~OM8hpUPEziQ-CZI;^wCCTYH
zINE!*9V8@}AeV3f2YY*)p|oqD|DM9{QD9ER^t-I?a;h6*1sJjMEa+0fKzAXg#|NJK
zr>sq`jGLf{)gvZex16xmsIoP}zyPXh)m9Vyjh+W_&@mC<J-XD^qmrY*{_54@T!Z#i
zO@qh!*=ZpO(bD?aua@O{_!Rz10rI;Zi%N%Tx`<s?Z4OkeiH-P)V#v;g4MN>&4+o(c
zRlO>$!Y@9T=ZS+M6~(mLj#HOtiItLSHwzR5rC&mKyTW>7AL(S<{Rkp3UR_iyIHRjv
zkgvSZ*A#u*hoaw~W~2#6)^A^X9y{AUI4wMW7!%rMC27asvQscs+-JNU(b`&Kayex?
zMf7s&VrJ)xeoBeFqrv#v)CL_`@)k3)jiYO8rHLLy2ZS@*YgO1?o_85B^P7;jWDO*R
zd2q=&$wr#sQwmzqU~pe+2DFGlmHf#MYst6px3L-Zx+f+AHb0}dLAk3uAN{jD=aDP@
z+Jk-c0q1aT$2H5jdT>VIw5S6+HIcK}&>x`qu`n=_Gc+31`$4~Vbd(NEzcN`&#$#@u
zRvOvb0?(xvBqYU3wx*`UI5<`js}KtGAV0rMxF++Iss@;I<m!t>CAoX~CaHe-uo7^#
z-_r7V%r&%(=B8M+ge}a~+4$LQ1ihppU9mNdQ>aqu`kt~TVrns_4w1(D4~Gf;-AOyf
zXiPq4!X|3iU!|q=zKh7eRhojpk)E}xaVKlM+nAupcEdI;6%`N=^2q17Cmz4IAud1R
zDH8#KIOn-_<5Rr~NkN(|S2S{G&`5hN-IGr>kicf0gZ(C(A9cEIs^)!a^BKvn@Zd00
zxYXr(wn|sj^R03H23s5SxEL5V+k`Nj4#udMi70v3oqc%;2LU&80F!@&gG7Yj%e$1s
zm)Uwn)LxV^hR<R<+S{2Pq>{h=Z5_WuLpu8G5o6PW8N_?pJCgq_q3z1oxa?!xo@@na
zK$D_zhJ`=-YU5|plknHd<dhaW*UI1D7?i(K+W%@+5Y<Z2sDS#3n+AhHl@fyA6(W}D
zQQBRb5jd8olFZ@eaA4SGkqDzcgn4_lZYV+<Jx%>Hrafk$T4(z+cJrUE??E4wtBtC(
zA0w-t=yGTsI}pN)E(==Rwz#(m?|MK8=1ymO&)rvg<8NkAg|SQ5Nj(nqVg;fpJn)P~
z@YO7_^;Y7e&Gq1#gFYd#35l6nj@Ko{!2B{ckY7(SS*v2ANXL1*e^>Kp4ZPf0GMmH8
z9bae5jLgpT8a?61L3sXe*tlJrt|0m9etrSjs*0IkM@mQ(L$hK)GE-DMH~(9T3O>vj
z&<uM2GWsRuXwBhAAr2~_T|cm)%%DS2g*6|Y&=`R1cDc7}=Y#BW_WQ&2+Q~sQmHX)?
zgvxaf%IlidV5MG=#-ycKqZXPl!B;$*uN~KA7hHYVXyRHlU;klEr#Piig1of8PWa+b
zCDm=j6zOcI&goRAf<|@2B)VM|lipgV%3!;_uY9OVeZP!Ko&c}Q)McbZ1o77XYH-M-
zYOg@Mg2!&oQ)Mz+ecwvGh=+$~*l$up+s#8Kp3@3@zVoB^b+MZ}HxE}}wGJ4hR0Z9&
zG#A8M>?O6v13wlpGB7YGw(y=)G6xGGdO#i_PHD`@HLMGTL-{@hMYZ#pcl$`k(KUEY
zgqdeLL-j8%_<auQt>Ycacim39M<t`5;m{l}txCI3RXSS%>xO-+2_0Qs&O+_|v$d06
z?lM4q5_1L<CD+|48%x8e7K)DYuIPaz-m~+rWo=hm>5O5Q!kHvqpRlgj`~l5I+XlC1
zI80MKQ)(*F`}P|VjYzkrmwD{@f)_}~`!lXH?XrE|mTudp^mz*D?#|t<`KpDnBV!ec
zE$x`9j)W6ALM=dW?BOG%>{^Az9vn@7(4rArOpg@!_v~*h$jm&%%xphC-i}<FU0r=X
z$+cLK(Xix;Yy2a`-d`8S#Xk(+Ty356R^Wd|cysn6sx5>zuJ;@7WnUtvjFG&IGP3TE
zH^7Q61fa|FVg$WT3*J_2mD}&M9t177SJ{qPZXT|J@m*g62e0?iL$9XcGHukL$nyQ4
zH;Rfwmnekq`xfDsA3tHfISK%{Vw;OR$kl0Nx_F)I^;C27XO=y+K5Ye0&y5X(RTyZ*
z-4OD9xcU6ZinAa)E`}G%ZC~nEwk94<bU}EY3HB7`n~4IwmgQ~;PlY8Gwa&^(;sk_N
zZHYF!R&?>1eBD=*H}HZ_wnx8Ca-aU2^1h3G&<M=*15OqczSgf<SZEj+-i{z|Oav*4
z8wyskI~qk8jEh~C*vYm|h+A5e)qlh&b14fg{3Ft`1labTTH=p828D!5_eFr%hHCfj
zE)ncux9vSVOhQlaheNfx?{5H|Ij+eW5<bs}?j8vJ^3n>QNwYD`J9Mk`56%0k$K!0D
zHX#jueR*u7P<+!hlAS|TY&Dk~8@r|vv_$bW^eb<<oqmP{nwWhgIB0S00nMOMmWBe&
z^tF@+mpYEsqd9uBKp3aDcL(gc+#;EC_YnpR6bO(}ZR6->9?I?x+Ly%5x-*=36MSA>
z-Pswq@QxJ;i5GDSz*RgoG(;s7zQ^*EkwHm6_H#+6>+#7vHkwZ;(F&u&q}@&s>Pgh8
zcM6K7tWe^o=#HCj@X*gQmV~%dNXK&d+}v+$xE*X#?TJ+;{Z;DL1H8QE>b(-5($g1i
zaFerrDK6Xp>Fv(JE(zNLSW_`&0FO%%@Q@lh0uU}5wHz*o-i?(q32q#K`gK!IJzkI=
zzqV^3gNm2iFAlc>!85Ga3V#5U0B=PfBj^Jn!S3$PXA$AOxjNeSLd|hq<)H0HmzS2(
z@b8X(Gmb%c91oQZMCKs~3Jrbs^yw3nD?$>I>`eT&^am|_1!aYuKL=6Typvumwv-|m
zRglZyXz{bG0TYoMNv`6XY4d=}T|ges{czEW8aAza*9(|%9U5+<Da;U40~7`;8*j@7
zx9xFW*Ztp_jVB}vODmqcaCQNM`u7K5@cLmH@i_sz`47hdTRCC|!4JP*+U@;vT<cpc
zGZjY)`0+dN%a@g)Nv9+SF1LljR6)?La&M4yayrf}%dS~jVZXR&N=GVn<_;sAsxZUx
zQDW$4fHrojDIWa(Eh8ZVDB-R@*9U-jV#Cg!fK4|WFpuoni;G6bVAqeXv>(w^9$4k#
zI=G-8zZ+$Iw4?udD*|?_wM;=pXa#_slrYDB=}(J_;&RU>1<ZhZPJf0O)2=^fu#OmF
zLiEjbIf^46J$Rsre?l6PF(9*yPPnNJ*IbY9zoLIGMkHv{eq3tOU7+1y3KAF$24l}t
z-ycmSvmxP$s#kK<(fL)f+yOt?O$5QMsU_eXz>dO?cjmlKzs3`A*p^pR=yAC=<xc?W
z%h|F@zwq8*q)58>*Q@PtL3t=I0Ulni!~GarD37CiZ>QoXeHfn`yj(l3C`PSn|JUYT
zL){|UVwLUe)>K1>_XV=m{`Q1Jb@fU=#A-5dQKrS@8H!&gm}<0D{1@6U(Fl*ZNlDpg
zrUB7em^6~5GY=hoiLAMWl*~!vV$rzZc60J0m>5hatQHs>+R-=RAa5Si08g!7>&`>o
zng*-S9~sFSl%e32AIiy9j5h&cT4L_rZ<W5}`kYuQ9;sJVuD9MXw=UN6b8S<r7a=&?
zoHuq&X@1?#D8vGj>Dp&AuC|Td*9nX@w+lB=ky~O`hn3A`Dz30}^AF7{l1V@DdOQ!$
z8n<>;v(<Ke15lV!r3pBepl)UBbb3Dqr>7Hy*FjjIDE{$E-!I+0VrwsjxSR+J%XxV%
zbh^S)-=(qlA*053<W0xv%)jFtZ)1Sg7Sg|u>lq$}TSW=S;>Y!LB?rB^V4KwIW^v}{
zH}InYw3Zuch4S}WSn=~CIM3qfv??9^#)F&NTq-M54QeybQBF@w?Cmk1Z%6%niUSs=
zhKu(S>EU~QWx0lF@YZFqv5u?*)x!(;)~WbYr_Rf&bF3%-23CZ5-(POewi3dhl$MsN
zr3@As_&wKM6M_Oj<bCr-GsbU^aTs)^@`K-t1MPWoE^_irA$vA;An$y&vd@^8m&3vO
z(rY|Ik~Pxl@q6YW+`FqHuqkOOip?X#528Ehfyh&ay%AaNv=+V87-(bl>sG&kjF`(^
z5+?_ts5!^m<m-#c9qZ`p4x7p8h^Gxmi0CJsTMhgDzZnd`AE0eXyKh5<1XGcuqdVow
z_lNEco1y(bfWpT`+-Cvb(VJLOm4pnJ3~l1`Ho}e#Kdy3((s=iPH;rf-6DncW+Dz2k
z5kfP(X#V$B&)YMWMC50ORolq;SzgJC!jm}u7E+qgWg#KS4G$i)0FNRd<!rL)=lT#=
z01;nebpS6yh_)&^g^5RmRSeW9B6qEX@6iBy4Rcr)Dp{f^SMNz=^l6h)J>Oj<yWJgg
zeK|54kxF*?9JduY+kOOCcaPKfX}jzJ+sykT@_xaPqgBSAEN${O(*xhi6tYDyapb5j
z8Vl=)2#MNA@~_nJuZVy=SKW?tq6uG9SZm|S<_$7!S!rn&=Vuc>*>svi_mQhb*|Ux}
z168~u0`!~d8V|H~h6iHGrG^_wS)o|L{0XeTc9B#Q*gt@K-uyeLf?>!eR`EEP>zBnA
zLgAKm+}MvafX{KG<0a)t%W>B-SAWE9@%jE@`i(oBoRsu4o>pC$F0g$&S*sxFiNeIW
znci28b{_*R>ATy!Naf<;c}~Q<b~U9;XC-|UfJ5>?NGa1M*-(MsU#ZG-=;J<K9NK2t
zWS)+H#(?|8!;iORt~l=%t*=Qs0&E{X!6=^n`=eL)=chy)O_Uiy$Zs9VabLj0py`q3
z(b3Jm4>X?D%(TCC&+A}z`F|t3z<WLva)w4mb;eD<04s)o;5NFd+;Sq<G#S3-)HS^7
zenz5{rV_7rjflgjX*!c4VhP|+s~ZQ(E<{`chP|So7_4BDt|Vl=(W~~_k2FYc=jHOh
z3c0Djc!q+{k$1a*h9sX9H?{Uh6G~N`vi59?F>$zlbT59&VI_&%btpxIN<1u)Zb<JN
z5YL9VpI&7mg(d64Ov|)<7E9Ut8H#8pYzk+-2lc13va|0_m+i+UBaPe6Y1Uf%1y+(h
z#iE88?qYK%rKY!QYtJ}s4vC}Gn?XN0d^M=dJ;Gf@(5~2hjl^Pi(0%>{J&#>?xs`~W
zVFgptAfbG-#adi$;b&^P%MLG()f{>pmp$9+qWtH`NW~+yU5?$!Dw7GJ_{WY5E~ls4
z9Q(l;cn)J~Mf2{z&uc8oaJabZzSP7d(30k<6*pL)v_IEAE8iZKZNMX)&hih*&v*YS
ztyVOULKc@*Z+;L3kgED+_To36{hT?-(n5O{JA)I(j<8-A40MgglA2g@Kdspy;&F{r
z&c+6gk{(kDvJPV_gCK4+7oe~G^xM(0k#FzST-D0KA=UpR3~bp33$Qr#u2cysxw*Ne
zFIi2y(~cfmKJ$5uMpV$Rt<uR~@7Cc>O{Wc0`WCufKc))z{J>uIsjzT&Fml;tPmofU
zMj=PyTSI4Vbhv-H&|W)!#kNIvi@t601Z`TKm};>>w0*ScH^7e;3}uQ_C|+PWzr7`x
zRbcIIv2X39rQsc|+nU&ZTX|&H7jr_wCw7|-_nw713*J+{9ZOgEUlsaM2=ZF@bR*K2
zQIGG;?TFH<lF%}>0#cEg3E{D^HFy<2`pL^9OP1JmX)+QY(v!CuWk#>ZRAm$L)`vn;
ztKuy^br25Y&F>+M@j|_!A9Cz=`|43PlBx0WZi{IY0GX_iu4J)GKXB>sHl+PzrNU|G
z3YA0vD2VB*kuVvrMEM<As?wj0ugeyD`!=(w8Xh#%xyI1zy<4oG0(#<*C=Po3i;D{m
zD-Dm`JQJSqBAbpP6qGPof^mF~A9mTc4N94k`Hs9%9nW!D40k$TjnT$FJ>P&9ziHZ3
zrX&Omr}mg9zVMULxp$%+->B?vkk0nm3-z~wrWsM)afEOeiFhc~^Q1ddOSRi(wp=f(
zu%NJlbF9XL1XMNcCzid*{0(ml-4k{L1fOV@t-sbS67Fd~N#M+jrWa@6tZFPr{UyPy
z<oG_h??+YmSh-kY37LNkb?oiUEHC|x(_=?!cJ+*Ri)m2^C?vlcm1nS{aJ#k8Y?MX9
z?2o_XqLR$T86~kgP6w7m8@ozL;9ACVNtSZ-5!g<Z%b|!XE&T2aG+%b$I>4YD)$;mM
za5EO2TljXj*7x!Zs4QEoSx;?`+7%FMLGUY(j`!x$>~*^w*+13MTzx`%^aylkc*XmF
zm9m)?@v$UQ9H&Rp%EN%Gyp@{g=0Tc;Z^F%uw*zIdZbJdskI?+z0pE|_InSj@Nt|2J
z1icTTJZTRn9#54HKgMIB*01|_V+!rUL&<xJ^h%C%3?6K=TjNu{wVSW;`25ATFp+&@
z7zX5jpRaz|sQ<--$^o_~MWlPpQ&oS|O_EI5mA@%r5xEqoVRVJ(_P2plkC*(DO~+~$
zvHx~rD&)21>EKNRONr0^UX)3<n944Yw)2L;(B0ve7r7K2;Y2XE<!Rub>bgG}%O^%d
zQ7*Ebi_w9yH@|(|Z8e=?A0=7S9z?r(wl^2~Vha)%cZx`{?|pDJ6$h-kSMYxoPl)^6
z)<1emB=AGO5(txSTST|7cd5UW(eJb+nkmpPV_{<Y-L)KWfKjcfrP-xrnNRw(PzpjV
zXwdt3>IBk*Q)M@sak_!rNYvIT@%d3uD#cS0X5*i8v%G?j5W8c&t~~)nubdNih#BU-
zT46TfB0mskrA8+k$zsg5+bS6al+X(`YJcx)L;DCOB(;(`W_{qhK<UqO_<SgZkslD8
z%B(K2+1*Cn&_90`c6eZstrGifzbjfCjp)O<DbQQ0v<(Hb@ucX`&fu=7?8iRTszBl|
zx_ab#%{iCD?P^2mb`E*5D)&HrDFda1aJ@f)vg5<mMyfkIZP(tYn3X!C&-Jti0OW&{
zpZ#(h>iky;4qI#E0!`iKK_J=fbz*E8UGXRVoe#B4jbwL9s@eJ0lw}E4`<wx?jKf#I
zV9d*{Pf#9jHf?j9S?eiB2K`bdtJ5TwWPb5IAZTK#7UR(_FP8y@CP_ZYCFA*&7l`ue
zs%Z-*Cc@i1kismscaJ+XalH7+2*2ifVbSn<%jK=_)2Bf6DmqrD_JiJMQ|=<BbxROw
z4m}`AGLlEY<vRDsVViGKVlUS7(bEd+nN;ZjwZrs~LssT7e#GL)uu>*67V#G+Vo3=2
zn-$Q<dHA2_?rm^(q`9kKwZBSf%r#YcTY6J6#7g}?2<*ao6o;<=7uz7I7#i&Y<IOKm
zFeGbvypIEa{zUK^hkQAP25}ZEXUdUbNJdfmoG-w%UdK-WGGP>@EaeEvT;oK|BO{|_
zK!`5TD-mU>ix`V0&sS<ts|kjTWdgtwLy<i>^XMp}TAI_Wf9P_D{Q2)2ehR1FdlX7x
zB}TklTt)M>+Q}8ArE@Un^!{CmXW}SCgN5pX&!lO)x+&hrl*_Giknz0TEi*8{W62U)
z%IJ!skgwVAwCI~#ZVk$wlG~Y-!;Xz*<k!n71N4Z<NrtrO_nXZ%MB1DKy5-G1J&vox
zVn8h+EQdtz+_Y2Db~-I|#UBWSr=$>PQKF@=akD*nF$Orw`yC<B!RBV+b&lIcsZ!&p
zBTE*kK09O}f94Ksr#D*HftZ`7mX_EkaxwvGS#8qmWU8b7LTw(@mCccktuH#sjp$U0
z!lgIphf#xix@VBMb#+u7?*|bQD&EoWgD}iyVxP0F(K$Fcgsm<t6pcO5f@0)c+#^d9
zdF=B;>S0x_&M}~W<>U)`U;R*6yzSUPo83Zta=SRD(dc4wDL2cxJL$UHy?Ws@5QD4b
z!8p#rkr19i-oGV!-cxw=&WM|9t6p11wy#|-i9!3Bqpmk%R`6Un$(5Z1?#Wk;+iTC|
zFxYV5Yle`fV{WeQ5J~8X=Kth{Ka%8&ZkFD=N21^Gw9AY9HWGoyr%4#;bT?A83)mtR
z8d+K8uaEQbrATY##XGy$AN>CC=S@NzixX8s&xiD2=a+$QRs@s#R)#$ft+e5cPiLT<
zjkZpM=TK|w%3#nl{cG*Z!tik8F!0$CZ&3r$8SZMI;`*p;i7Aj$B&FATlkz-gn5C*c
zFUR{RPpr0ng@q3!E`0y4Q9?KeJ9#oCxACnrGU>}BM>Bd&E>2La0r#1sW6#`8x3C)L
z^1EIDT-7fGn^CJ?CA+duzy3oCzuDeta;=z(GD_c6n`*L)gUi8z8&TF-RhX(?Ck;b_
zCbyjdPw(4wJf2Oy_~{2+=8i5m>#u=A>sa9Jaqcp~coC1wN<=@L2USPz(8_L~WtCR9
z_PySc)`jX@l*QiMWi+DihZPt(x34x}VxhwBZ+g5)pFiU-=VIjNW6R&DA4~68?@L_t
zy_Ci0%#%2X!pQ2+)2PiU-bd=wgL&Q*)L4+!{7DHmaAdSudUl#PJU&mEZI@(IndF=+
znbB8V$Ea)-I97V@A?@C2e1ncF#hoq~q3vD`d9d}MWA23f|MgaW8%ZLl6o_sD{SF3Q
zHhr(YZ!D?Cn-TU8i216ajqlKq#Kom)Y5N*i<3_1teMQI#_&nBB4x&t!{7zTsRkP~r
z1-*}%(z-QEO^cNZ*M10jvA-GxLGCFIZEl$PE6uS8G^2`bK<G#Gy!x<S>GA&k`^{1;
zVZ?&RL}kq#9UV<git7x<J?s5RdAf~}?mzh9$i1Ly?B6Aa(;l>1l=b!Y?a$TFH^m!m
zV63lvXtC40HLCZxj5XSs<aS(F6?SX~@_#@d-KuIAIFFwYa7H7xI=rXTPE{hO5@JvW
zr3`t2pwDS})fw%{rw@^Y)f}v>j`Be?B94<jVVs|(-QcYU(<k^^8XBE7mXjG5An!HS
z9@JIYNfYMIy#mpE{)bICVd+iZp#BOK>sL$m?Qa00>ZF}5wES#+K&lIT-g2}kJ8Xkg
zdfOibxe#sW6O_-p98@=Ea>)@EZpC`}dqK<MEj!!5n+0Ijw_?czKfy_aMXPGjdES)q
ze0RyD8DmTmOxF|xp}V24*!u%J5VWP_to+jNa9+wtP&f}YW_0lBPVHh?K^{2wh+NAJ
zGT7jo4BW%MsM!Yj<H6<WYyDhH*nPhYa_`Syws3|}voFr>D{epwHgd8zW>hb<PmP$s
z0Hx8!8DL@6{s$Xc2<S=RH+!!z2rRYPD1fxD#Zaa1!?%|%`>&M>TKx+>!0Nlc+uvie
z5JAibj5dvAcxcrQ-{5x_)ntNt=cD$5&1ka$eSA#9<HhUCz2s@JVcl|z5DxVEqM3T>
zWFlUNjnl%!wSjnMkGZIiAH&DTIWXG828;GLFB}GncC9#fe_t<noE}R)DI7girNu@i
zW_Fo4r3VaUY;VSvfMXJ7(<Of!581Dwc5~G(*Kk!I!N%V+ZinYX;6*B|LxEphG<a-}
zG`dRM0t;}C=ipRhbxN2#T^ZQUjQH^3@z%7#&q2jC)3vB28=Xe2Qls6cWd6vwycW}I
z$w&f^5cj5P_=SWysht|#_^%|ZofdTpYoBx2&RZE6xPii^CE(PGq}p^6DLIUUU!}$}
zl%1do;GL3qa)Z>Ib-IBhU)}Y|1iY}$7xr)#wkz;m-gVXL{(}eZPBwxcCO5)#J)}^0
zZ}&Cr^cu&f^3}~)kF$@A-;O?jg9-qgrD71KXRq4}ETV-`Y{m{j-W<1^+TGu0q*5!D
z+l8YMRkx0x5U}%lP-c|XJRCg1=iqmwvF<pk60mczo}tqQohFGDDur8-zzwxHg~_v)
z0NI(dcx?@!^04>2>3Z7AuW_s*&ikY#-~RY_Qz}_UcZagK4^W>;xw8J=;I#7N9$AOX
z^lJ}h_Q(W4-m54XI$$Ixt-T<t(dN_RBjI*>(<s!EI9eRfD}Ph_oS;Wi!JCZ?!_je9
zQ&$!9x(a(YSWq2-h>Qr@X!5K{Q6k~VcOxK!Y+*NBi#Dd3!teI|f6bB?Ve#>r=K+_w
z;Wr`1^g#bmo0r#FW^%*+E71&a!$@u+l%}NZQvVhzJ!)=kO*rKE_)o*W-b&C>e%*zR
zp1!Y-o(=Ww2quv5XYNHzclwH60*)-+K+`QPlSH5%6>11h4@%0-$^aV)b6=R&K011S
z`9>@`PKlv5H(vAGI)*po3nVJkyMlrz5se}eD)U@fS@|R~YTD1C7NFBc7s;AK=04@G
zR7QT&Xb9Aw4NC#lI<~5?ovEg}clltA+PSvwjJjYwzMNb?&@&I)=)iiCyo!YD)eq_S
z9b2~zGWHBFmRg7<&%5|0=kU$ozWFL@?{{Caq@ZSZcZQ*Sn$0rrd;*kvz_j+y&y6uN
z?wbG~<8{ukNHoIT5-#t~H-t^hQC#8;YF|`AHr4)DtpDf0fQlJMj?u%T$E<G}^0yQZ
zsGj3LXGti7<@;<SjLp-#kJnM&4H16_FpW(eX*dXywYa+7<hCgcm=CYN_n08K!{q!9
zQ4Uym>5GCj(qbPW5HM3Wch^n)s1H48#6ZO5U7DfsR&RoH(tSJTc4xnvw0;x}Eg3Jr
zVa}0jv_`ZEG-B)B^NA$7!)ZTWzU}w#d+iIE=lA81fnOEQel~(#I{tX2C4YA3M;*z8
zqJBtaGMF(iuM~GTl6#XO<Gcnj0JcaLh&CBU&dDdoh36t-2DnjnR@YUTy-oA@N<K!*
z&U0+@{&!B+=exK*RjE*)Pah+Xxoh*I@8(>O<%vG~A}1Vk!~gr;pd>5eF*I2yT0q<t
z#Jhi<JpvlDnqe>F$$67GJaW@9hU0EhB$(uaa2=Zb{iKkn;L14H;x}iE*Nk4;c-Ixd
zCCSM3zo71)XINQC$Iv)%QJ?VH?YcWic_YTidkRHa{m|n=8_c5N;;1+Hh8xJU+1zVJ
zOF0EacGP#Pgy4ni<B@>7jOD|SF#uQj+8p+G5d_6HUJx1&qP_AO&o;z#`HObG61pLJ
zkbum?2VyqOTLbaCCgV?Nn??|Gqk6she*}*ka;<w#$Y1hbB{H$Hj--zZ0@ApQY@^!k
zC948l=I?s=ppV@4N=le#h-z;t0U6occQ!UhS8Ye&*v{{MrSNnlLvp^s%1$<!-Aa9L
zu1wd(*xK;d5ATrz%~I)WURS#TeWq>5S-#Jf>*j2&ZZs&ByR2u%lkeZZzs8tUs7a1d
zD!~DJKQvFwsNZP~kzyatk`*)@eHkBXgH5BMQl}~sa2D6S+M~*#TdGqG)AjTc#3dj=
zCE?lIo7H}XeO<WBBmqnUas7z?4l;d6M}FX$w<@M8X0(9;E_>cYq{4ZBvi9>W&O*)f
zz3L}qY}$l81@qbRpI8n~XL&0`m6okF9T{|CgO?C>U&OuyHp>fnFZO~M*WD+5<!Q*o
z!yUhV)tmOgW$~*B+1-Dr^@zmU&Xs!4!;<k>jB|Bz;Xf9yGg`MHadgvluHr+@ZPM6`
z4fZ3`N!$({E>2MiaK!X^`kb)_k_XnR`!;V4=8?7jbq!o-Ok+ZHdY{o2hElS64L`AB
z)OYVq6twCYKbeN4G=4a}YIAhEfO{)QKgFS`^lsS#!uG%Fe9Sh7-GGG(V4?;S^Xb8=
zU2pdm$&k=%uCcr~XQ~8B<2VJ1O?<bA$5KWCEl|7C_O)7hOktsJO(_JGczT;?dXc9#
zKo(vg4;Z!oZ1#n4Q~b<nG~^*PCC~M}T`<B$#^<`)nHoW-ov&R5-0`<3wZI@XGN=Lg
z^Lg*?F6|iF*Z`^E=gzqgyO*iLRE~`d3@mJHqM5xY<%{E_R0z4<bBwzjcBftJo!<X~
z8I|d6M+k^F()<lE*&$j8g`!D9(m%MJ%p0#Ro~;6~m3ri-nMz;-;+CA1R~Txepb#PR
z4L9JpMvX+}d~?K%Vk=7~p-}ECF)JI*HnotD{<xjSY^Aff#bf~Lek1JursHvb)ZL37
z=#D^yhJ&Ndt6c|dAUg8_6b|f#sd|$J(~p~eA-8G)%?b^_KcL~_e&dp4DOOKmA>fqz
z1t9pqs0lP57SbD`F_Y8Njc&_CJO=AW<KiCTz5&OPU+dndE)D4O0q2$3Ypsn-=SSz<
z<nN`^{tX)b2RmI4Rs(|N5DLpMoSMG`fdL|?#qfq1XnQzZZtu=iHECUg7B#OIoN#!4
zYG7bueqJ9tna45BrO(~lo5XXj9)P7wf`W2029y>LqQ#X`wIB&Im3A@-bYh1qxu+z*
z(i_Oa;}|(?^q{=zFeQo}+sW#;%r9yM!PA|ErY{8e{0kF8@W<#Q9$aMI0BB)CLGKLd
zxH(|CSFG2dRervItF9V@)<Tuzh>n-P%*d!+`Q5%{tx(&gyu7s5amH)!*QTW(IAO`8
zuw>aUtCa?W6GX1(%~d>;$L-a{NWZQ&@JFmL+m~xV90_b++*FtP!_xcb8GICsh*aG8
z-s`S*V;LVA8422#J{wH<@ZGu2-d;K;CZ;P=U=axlyzb)F4%1S9iTLy%H~Sd;*;0_x
z@j?PcT|ZdwKUX^E2TvA#%u|MnfI$0t#7xY!`Fy@~Vc{M4cLl8fSQBh1`~ABphv3bi
z`1CuL7t4kq=G`_!xKdYnVD5*kg><*m5gt?F-=$Xs1bv(agao-kt&N*I?qjWJ9TFR!
z6QF?oyP|;~bJ4y0d%lOp;GTwvX1cG}&+mWuEE)fARuhdrkdN<cw@#FRria`mte>2Z
zi9Rp8_J5cB|G%uda7EsjXZ5A@3S;<t`FXl&)K_=Z#+NKw_m20+pCs%J42k`X!OV+|
z{NH_`f09=1T@FBKeKGO_SXwWOlkxY!n!>|GPr`y4oulWU|I=OpH{Zf~vqsLMF;J?H
z_4jdzN_YM*bNnT@ecXVXA)B+96aBsL0s$`VzkfOc?$6r?<~%~TNV9iPs)d=WZ18-J
z1^@eeV!VHRcqH<)g!mNWPMn3n-3@$%2IU$eG-=^E#WBnRJ_aQQ29?}5HjB@P`FA|!
zpCrw_zkap1&ovJNZ2HTRSIAqyN9rEQwU^ht*HdH_Z+!pSXovMKE6gYX*S=_~V$lI5
zQs(k{WB6!pG?jdcg7>4l)jt=}n3<fK;XU{MuztO@yDksKyt0((>n)%wOio%lzr2K<
zxD{Rz8VY>eo6giudEsWF^?5CUJwM;RY^5I{Y85?1p2@nY)KpgkW4E<~WhzwSU+Tz`
zEV`im+!_?k=YBjmF;OKGUkU^{5;<&Cy#F`C8xi*qy6Xk}d1&VxCCNIzpM611toXYp
z3i^D`#~lE8wF4&m9fb5fJZJ>(8MPshdle~`xeHgFPg9r4$Rw~e_0iw724NW2O2-vR
zVM=-f?~_l!L55zt@~|_~XnWj7B8oiMPy%F|$ubW+fcQ75)tzx6;&oB_XQ4jMhg5_n
zXAB4w>r<c8cV@;s!|!=jd595sfxrU@7*UM*HD&!pHA4hXYTq>p1MutF@o~ZYciR*`
zZUVL(Gc&U)(>@;HTiJ%tTve}ik_SSuqBn<=&p%AlpPWproK;n>FTHO1Iv;_SS!785
zl{w<(y+Zn|!y&okTJUUsXqHh1pc1(QoL#C2(oBUF1}3IT^?S4m;dmAk^#Tp&-RVEP
z0l-1fq3?~N09}6^X$Vb&Ne_qSXu3FKP@!4xH|NXK29ba;U_vNe$YC{}1OonezWVKG
zZW)!_|B?2cK~bh%l+G9sQB+U?C5%E#&PhO$h$I04$w|pM=g_E#h)T{m#|Bzxf`HHp
zisX!B5F|D<Imf+>`hB}qyH#7e^J{8ku={<V=Z166JvRY2QWace-_Ol$yxKF@ZIaXN
zckb$7rSVYW&{kWL0Gi_Q{Y~fb{jb9nYb|jCdxO0<ZhW_ujaxsWD#>(*6$h15NYk;=
z1DI3kiHK&^w%N$zUF5g59xJ2Oui2N4_(Ssk7y`lM9?~uQM>%b@DqG=dI>p^*YWKL!
z+zT`@g>un0pS41r-jA{yl7_F(b<+qsHMEcEtGLZ9jwDnRgR!hq7SS~(9>?zs!8D>l
z*M*hK_P55?9HyJDQm&p1ibYu_!1iMJG4sAcXm?%WggqClT$kztf#R@auE10>!onV~
zspYlmH`^S;z_Px<LS26w-70^9bMSVgzJ=(`!vbKvk7jf8eP~#MRN{h<E7YxoU2@t@
ztrA<k*{;d(`(TSMlWwJxqsdW0A@lQ%d`%2M;b(}i|08GG7Nh!J?B+nxN7#NTx4M3K
zu-AMhnq51TOR_0ML$jUi*Ku05W??DV7u{vt#y1#89>46Yn>(mbgMYx5yfs{?{fi7K
zZ1<q=h70&O4WU_V1RQg@&Dfiqd)YyWwiRO*qiF-t?D}d2pmkk3B*qIRiRdcoR=PD#
z7&k|ODtoFqdJI<0*;I#o1a)eOZ8DOO^mfF)x(StmKm@z~<^aZ&i*>*Wmf6%Rl4m>W
zZ!M0XG*P=>-;#-f9gz2487#U3nTIxssq-B8^<>M(-y$_J$&!!b!IYOrf7G_t!%WL(
zx?6tFr@r&#5fl+UbHf$Q;}ZUr&O{W%p3PD6--44tHY?elG;;OVSN>5I60xwBt#}S8
z<e)h<!6d3>Msz+(+!f!&OXo`*>N@d-kTjil7vr|UWOP2RzsUJwytS1Tj5WT3PbK@2
z83TB&pvSshrmQN@Rcc|6jF<1!FYm8r9<S>wC4wLA9U!>4h?>LP@tU;z`X+LCm}G7^
z(dwu%9QrgK*+eGQ)k(&QZ^7)07?Zh3=IEXPA~Hzv7Lz#K?sy#me)=@Q>5CLx8rCkb
zlhN1!>Ixjw%EZ_33rxR0|A}SoZT`RcAD+=oH*qdqa*SEmWbO13f*qt$E&RHJPJ@1s
z`eDxy>}tlr@;alzqn}c(X>dxlG&RlZ?TNn|mc04&>FB79^b$G45^S^;w1j(TIrXNu
zD~VQ$xM1vk+rWUP=Ug<q_)`}qEcZUvUF$;U{^5_GKhqUjV!8Kvnc4rSlQlu8^=Nc&
zecp9p_HyhUkIC824#HBM#4|hwH5WJG@F1MNx5%C;`0}zlTTwM%!+bo=kBlurT@JRW
z@p|;cRBqsOut=chg|)vg#5D~R8)H2-@&sG_lEM&jCZ?uGhu#g(<_C(6E}T94!RJV?
z%xa(()P4n(0N@&YeTzJ#4AX=c$GXZ&aOTV_b3NEh3YCo4&sRMAyNN>O{ugefMOA(H
z;NkAhv|VS^5HgPb5&&+R4A>XL)t*v#MjBd!Z$Tq@&he+$W~#k*ly~^9GOHH9f3Hzx
z5@<kPSXgL3@g+34V3jsQF?qDPd48y!<lmQot%ij_8*@X7;Ls90&Hm`U*z>==cbU>3
z1d$6Eyu9Cab1KuBpaU*2A3wj!Jx}XVpXE>Oed@_0Qw^~yVLZTQ=m~pD>t%cS(#eE3
z?E$wKnM3<w`<m9po9{YJ2PH|G^WG{Xy%}`tI7x89ZF_dS_VioOR;kx``8_`gGBd&b
zj#OXRd>5Gs%Uu~jGT&D?GU>6t*ehh(rlU-fiI0zoc^EIq>bXe?XU?kQ{df@75NwUg
z$4nDlyy&^70XI1a7Q>*Es;3V3aP>##deJtFDp?jIm90QYaT_<$O~DL6{^MK+7?wEP
zWwwVH41uJt%-Zv`PYh|c0$Qh3YqVYW!}9vhT3~!RY{?c2C{#$SnrsV~N^A?I_1{;&
z37cwVdk_y}-aAGY!je^7zSjqjO<X4V!|<%u$@2`N4J+Z<T4ffQ|31=Z()j*T?Jm=R
zc)V49a}*nbJvKy>(Q9d5{hux|!@Byw)pG1dg(Q)++MiRMKk4bhg1lU1!VyEIo{9k^
zh?bUzSWZ}8mZg|1;21^1dWvjp0xBs(gMWgcczBp_M|^?_k-_iOZ_l?n*~t7h<Hci@
zG_XN*-I(vgcURfM%*bGg`PO)yzvSC%3Nd%|@Y5gNR&Egx_&>OCL#APG;_KUS+E)d-
zH%bfRqS<skmVbPHwQ&RMwd1h->3LGM$Nk5SjbUF;6I~hn@D%e9?xI3Btq{r0*0)m~
zIZCtwn{fRUlJ1&MHHCP2!PZ}J&@a#~r@HHwGYLCl(OU1HB)t%AfqG~R>!V(!#!BS4
z)??n)ldEkD`&R+qhxGTB#JNuD9l5Z@WNrrma&fd;NU8P|;7&?uZ1!Pvb+0aB?GE?h
zyBd`_<%Y#^TL1e{KhfmaVv!`A(X6_HE&trODPc#+I707aKB;}j?un28CLWBKNRA@i
zW|zmSHWy?<S<LTyi%A~tpN934FpulBw5WR;%ks0MM|1uv<w^F&M1+3Sd)|klX0f_e
zCc4u1s0y+#%PRDx8t$=Zg5`V|r*m9{#4F+`axIKgQ$(XC#<($zS0yN6z@+_frtcjD
z0eYvm=*_Tekxc4V{W;GCVF^5+rqg^>l?hStXC8Bv%=VBnneKX6mUN`AEAsgB=Tg`&
zqE#C9@Z;)go=(L*(6M)C%8lfz_{&Bz@mPMp-=vr<7|HSUZfWsHKHEVCjO)^{l4<tC
z*a%+BX-a|OESYcz*eZUMv>ak$+Ma~aE@Oc>jPFH#lPU<!U-94GpX(kGa-CAEKpyPw
zI?v;J^4xJfjh%+|d2(Qv>9M|mz&Z(g9~x}Lm4*?arXc;PWGPgE_WEabyIP?Z6?;#j
z=gp%x8Lr7STwrt)3RjMMrVS;W63wE^x3`3~>??G{wP=DGu*Zib-3Du2<wC};ySWNF
z$b|~oNM`1n$q`LLuK1_`ypU_5Hdg%hVUm#T=UPb|%pz@uXFsfVIjEmvR{y3LV`gob
z9wk-smZK|Mk)4-D*qtdb`pC(AW)Q;WP?@1Wi&lwS0A-3+%w5TI0?YL6NzD{7<xigP
zwzMw@I5coVn0m4jmg#V2b76$Ow`TC2Mv+0IOck<Q_d69o@&)Ldx2H>&I>r}v)~MNq
zFH+u(V0N|n73g0o?}_-+OlYRfP*u6)&aD+m6Fl48TJzbT?S#+;n>09#SLtBkCyOSA
z>GJ+(a5nu+!EM^~#qVu2pAGR`CcV#UyZ(pwp20~ZR6V&W>V#B%PIJXmVdr5TN~SSN
zEzBWDh)FqPHnmP_61}$u>Cj?Wqv}H3mlRvk7jKuoaOht5^|kEDFWmG+?oL)rwppy_
zZ+ahYDy8aIdtB|j#g4Z1c%5vUb96;=`Gf@Q`~y8QlhQg|S^%N^*nM`oB&d|GhX@(L
z0yPL0%E`8jV@}l`Tce=XKSFwkBNWS^V%=DYfg6^ujUIiu^3%hKh{F9rjnC98%DZ+c
zEFN%(9yTobuhKpp{$StQ+LFmprm~PA;P^dH#dM$x(Vi?E-l~?Pq11GP-<->2;R9q|
zKFh($HvG`)X(s*GP$NZI6g%y#8ao~((UJxgQ5k*<Vue!1q*=W%;-v>9c!;-os#TjH
zt(?qmmUc;H6@PK+2A{P;DA&~TQwazX11Q(z!;@#sqBiIHeA){~fR;h4Rqu8@t&8kP
z@P^&YjVg3Y1J!%a4i8|Ht&q*VhIVya>IDj}^-a7sbOMbroay^p4@RW#w{r0E>XsRR
zaoyJ`tQ~ijB3d0g3Y!~idC;(rHT^;GK$WTO+H|YPHc|uoG<`Su!oShv(9S|f$l=TD
z<+nZ0@AO2sofCwLNRd#!|JJUrH(d9bwxq}a@sk8?Nms+}Hz)7I?jy8LX4ATPH`J*l
zKsy8f22I!c+=wR#nMrReC}T`y&hy!f?l%opX=1YciK*j646{t$cLN1)PI6KP*^6`=
zJj-_e<}}T{?cfe%2QEX9@*7-WI*%Y+!;LYpC-c`aq#}A@==8)&OmvZ7LU0<oi@7fW
zKUXnH8I7xn%m~=<D(JZA1%()_@McY23%tP(hPPytlq|i#$Q<nN)3Ha5b*QoE-zFXB
zXV&*}cbqxgUik?|=ZnH_G3@$>1=?l#+Eof=wAxYU)C+Y&ZAWz~9N6{C;AKw1etVrF
zs~t#prTk&AnZ4HUZ4X*qUD*NQG<jIDHq+c5iSr?GTD<4Eaa%rK@XnnpjE|S0=9Psh
zsH(oBn9g+QXlO}uyEBx8Y?{S;^ObaqH)h(Co2`;yFYwIKk?2h5u-E>FkirR*EECus
zA38?Zo9ySrC!rP*MaC3zRO?5Ss=XO`#I><Bq>jASW%Z~n@6?vzw|AQ>D*|4#@2zGa
z$NfUH&wAsYOkO>Ag@Ig)wN{~Hswo<+RS=gOV4l~LJLo#gApYgRb88aqoapo3cHrYc
zZ!fQB5G9F|n}<i9cE~BTQNRT5<avVglx7A7$}njW8_6I+f^SQNy#*gQoN+wLBDRZT
zRW6IeHP%BgFG9EbNWHwg9HoNFy3H99A<@du126LPlfOz<kIrk2u1z-XIX-C5Q%DrT
zF(AC_FHS6wbZrfEuNhaa&rQ88bs4G5?cVo!jNA!|+5&TlhlzX#5SUhtD{b(DaF)HD
zG5of}kFh*ceUgMhQ*yFdkU7c7FLk7wqOUNj7(wALOG#-US$w%M4zW5~Wg0A4<+;U%
zSl3U<`KzQ&ci(lxioZ}_9sA|$g60v$-q9*n>gL$=6!YUp*)*c=%DD!a4`aFM<&r)=
z`TSz==+zH{S$+rU1B~fliS-S7g~gMEoqw<ZoefVNQ*JKP##>9Q+NI}+56obR>?*sy
za;9v-fpCp|-K(HPLH&<jk~LdkqHuFY?H8JKbbft5@<gQ~7WwVoyri-zgl61Jy6me>
zk*e!^zPfb>)ACp!DfW;MaS|LM>EYbp+V3Bw_7@q($H#;D^}<TJRC5%%zsP&<voC>K
zfle+Vsf`X++-~K-J3IT$LCYNXGNv))rY{zY1+{B|e1nE46bne!BbwbfL1%#3qciQs
zU!2}qn+{#7Vp2s>2_p^mUk2!pEI_E@>Hgd#ibXr&hNl{ee!?|gb6YX!`XZx0^17fP
z&`N5}I8Wro_rby2VY>UK&Nps2Kig=~Cf{Fb7j0{6Gi^({A>iSZudxX_o32x1mwPX&
z6poxXulU%U`?!5F7GpYT<l%W_dN&zzqp@_f%Usx3C=|3YE{O>g+}zy%rkrP@qn&6(
zv#j*RS@hkP%TVpw|NKyiczpy{Gg~ovcYB**_uzBk<ttY*V#_XgGezF!)-1Ei%{Mc#
zVat`=w9+IXo?V(;;CVWcVaackrI7eQ*YC%KKZnspGeimL3f9->$YA#H9nJkN(;fMR
z+0Jxm>S~<k(!3-JG^;&2YyEItckCxVLQ8NP6dOiq^7G$epb1jH<zW6m$4%c}AD5?B
zA}{K8XUX&14nD@}H8dQo%IU^rj`KT1v96-h4Y@E$z+212ak3%T>>y=Jwb-M2ccZ}C
zswbHl@DK#ShZ*cx+u)n4%t;JNX*vSMs3Q#%WK@f+lkP`1P9vhVnOw!T(xOsc<#!@p
zZfISp>$lNR`!}Fm@Pdvr?d)15v*5GxtEWA*^4{C%zRRYl{I)n#&JUe(pF_Ij)e?dJ
z*hLy6gY_IGZqwF0Rn#UdBVFI|)ukt-AOU_F#^QP&4>mT+ytpirjQAj(aA&23f_rj9
zec}t0D1~Dw$fL8=0_4c}Q)HZN%K%G$r30F7EVRN;vSM`#wmI|_t1|CQ^w&5>@1N;U
z(^S!fL^A{nN-t6f=37-b1ccL3@VG6H>|HFLX}DRjJnFs2Zv{+=Be>>vXUl}cmS%pM
zd)UuVEhn+-BXiSdM&T_aLG?1=_T~!Xw|7+8jM%9~Ho^}J{Kid>2RDMLgguT%t8=@v
z$QYGN?gx;BXFaTOUz?8Q&fXXviR(oHEj-h*BLrxGL(du+Tb>e14N#0NubnlyA9@&*
zf^%1ym^u-xK6Xckz(P1owXqVEx;1ve33=(Bv;d6{)aZzBkvy8ku$EJ{5f-NZe!gxy
zM-*dF{&c0+X12hd;RrX69%=7nu@442#Z|70>ogpnhKF^MMf;t#s!U2>wso7fNCR@X
zc-NhnTJWO>UXT&6`1)AK86l?yhLw^@3?zQQe3aKE?4F(-Gd@e)=;%{GwoEnPhm35A
z6>{Bv9ZE<_mmq3u^L2F!cKH;rS&!z=9eVFggHi9s;6_w|*4FGOes}=0`coScH495i
zFl^b|pUmx7D4Opn%sd?Chfm1Q&%e_qAI6g_;z`4if`xrRR{NkOgTkRZ!qeSdKJHGc
zO|^%1nRRy|I~Ji<s55s^<q9=N7<wa`njNK9I5{(uJu8K5wd{E>9#>*cOe0+8(2J|{
zCw9gUBf@s+6)5#f?8dhVNtZ;udQw%gc~R=jod|PertH;|Cr`RA4tgI>e7({b&Y!QZ
ze=wqII2&@4ULi>bYu^neEwg%VSE{#=>sI{l1f`lH_8bb#s|?%8seHSe^YngU@=~J*
znnMthUR|WQ{g-{WN$c?e&W28j-|CU5XHWvrS3?-rvG8m~LDzHcEkl*gmH>T$6Z!jj
zew!c)p~WTW2U+y;XZ?TFUP896aGsEW&H-Pb&7W4;grUE9#g~(lGk}!7?JXI5?K_Gq
zLM~Q~iM=<&OU$WJdD);;^ziibr<s&S((#nP@7T$-wX`I=LYYCaEt)s!FYa>`yu0sv
z9kEUm^QE}FZ)f?r*?Zy*TrWzRse$la?#REPemPw3N7N*$s6I&d=Fhtkth%z?*Zk?)
zny^1bg0BnQJAyGK{R3a&TO`3==g*!ESBi;?s}H=PepuN@ZKvsjmA6Z6{~BoaHD}sT
zaG<}RMC|0#gO|T)jc3ni!<DXWo1P7##gz;a3WD)C&W=*wTjVA(BKhVszGaECzqyP3
zi4t0q*hAM%ZBOB!ip#q7&;ED|?z^A;?Xmhyv=3?z`PP;z`!18kO<z@!Jb(Y5Z28fC
zb-8n_sY~m#trQzdM`uck_RlXk)Tyaiva-To{onjg8;l$sV`F_c%P=p-Uh6!n$ak=h
zqzOE6{oiu(#CCf1hP$<u(Ze$bLm_gEWRKZUtEB(@=l43HtA%}iUrf|HVlZ#NaufO}
zIgC%PHcCbu|LBfD%pW}L(9PCcZ*Rx@Jy=RP1X)_hT5ZpR54qzfDIeRVXwkZc8`p<r
ze*KLn?n&Ftk#5WWWk4)p_xnGcIRE0$2RiZO(y5L=|JnCHpX3DjssGSOpZ@vtv`(Bj
zBYxsnVSM5Q$61xrpV~h+4c7Pa)+AQ@!i@cI-uJ$w*r#t>OI~+{llS&^m_#r9ZT2Jk
z$0P|qa{oT;uLL>zg|o}*zy8u^Iq%=UFD`eLPP#P$=I==&73h7+vnkJM*v(f<K8uSl
zE~;Po^^^Z-{r&fT^~cGLTTfqnA>kjvdP?jNlG8nF3#Ye@2?H2_;e?aDLjd#KTDR%N
zKfq_aOa~o>)4lQxQ3=sma^jRK7yM|cW%=?HiI`%-o#*7&&(<{!-iFV${(Fc}?0ndH
zL1)~%(NT7vZMP0iYB5(L8lIWPaP_9X!dC6{2fSQnV(}<TFI(F`kl<@25<!{u_1SSM
zU`88HXi>RK+?wWK#Ap?};62<Wg?tr4Z~4W>R=5OY&om$V=`*T)udOxc&I)`p3jG=o
z6s~)l)&P#*mX8D1{hsD#mA{auggpI$_Wk|B#ol>rwb9#8Og06Z<deSwXU3T}U5sga
zYMbmVODE=`^cgDTOEYg4&0??iB=13V9IvIEJA7BzrbL-35A=lfR1+^(C_?Ugp>EX-
zP!NA1FCDX#C;qUhzrI5T5FhSmQ_TQ8-dYqcHg5i&A}(BdzcmG$NwXeGE9J4Zm>TQ7
zRxdS*Qbie9QMQsFe0qKWnGIGqEB!e{oUM<9Q=kKJp6&QdB~)ffhBOp4^YOuc(;CJ4
z(EF)mJ&YIe&LSC1+^O}G18ORk*RrkDlAqtIKY_<wxwTS0j&G=Z=@WR8cy8dpEi2=i
zNn66yr{@wD7tLfK<_m`cYS)YEgB9_H(=7v_Ahaljpw$-3tzK4P_^pr<I)A-9b#yA5
zMQ7U7b6=RZuB-woM&8x-_eXqY@ZrSna0Lc{Fx?6V$(U7Jnzyv)|K%Y1xt`kCOyjOY
z!BykBG^$(ep$fKdbi8Wwk8_os`#Z+r?~enLkFEhB8=>6XtJ;&AX>DyiGCT|vAo9nj
zLx7Wk5R&0TOp!>i>wLJQUI+uRE%42cGGtVYt^yUJ`4}Kgao<;zf^P3svNvI@R4$4I
zgTeg15GPKgp65L!MaN@k?}Q&Lco4{N{tG<%HeSo`<|dZCd6y|EDYM#Yy!U{}`=5vb
zpRGk*z%8Nc988nMq@<((ibN@#=a~(r+VIG0?8ZMn1dNDFz3{H=Z1`0WwhZNKhC`>+
zxG>*0TK6jO(Y)Nw40|&C%yCKc^ILFLWo2Gs@$XoALbhe|S(K5c-ma6i8n;>QwM>O$
zPiFSg*?ch7LO4%ASN7n+1Cn!q!e%HWPWKnlhKa~kBqt|d=bU%iz+G*{724|<-;#KB
zzIXy4$DUQFG|ZT6hsrjZXV|5JC~3G&bQXu*7ss&ZKL_dXYMpQjkYn#%to6L9xpN-0
zD|uWQ2l_zB$&AcBkzM~q525^w8DR=+i2%h7uQOdkkeM@Y#$h`yD{BxFcWz?3^#+hS
zz=gPfe&ILYi}Hayb?$1D_u;<GpYQc$o4mt=cxAZMatp48j8*};-jgRkpe=;cpVcNy
znaHSOa-fd&n0f<lq|g68-8%qfl-V^+|LXz{_vgA0f-Y9cHzi)d&Y3^4`Pn1Rqf51D
zla9D`_lYknO|C^S>?9Kc)Kx6x<;%1WjuC_-X9z!wi%7@Xmog)j8?)Wn06wttzI{bZ
zRc6|L+*H#kB+wlr+pFtyq`x33=)RbyPnsdR&hPGJw;SMk7@MP5!Hj0A%vuO4cDUN<
zN0o4#;7g8FI7-cRWkOKwgnw&I<20;K5cV{g>zeu&l*pi72vI`VW~`>*&!fIa!FYzY
z6LYGAE0yBnu75`Rb*R<=_ydbH)wG7u(b4wyB`83+5~1OTgUD;%Wwtabj8kT2W(H&(
zWIYVqx*2~24pRf+1hPHG%}PI-A~C<}oD-M2xlCH@4;PdWIFb*D01J_<@W4Rp^P(>w
z#SdQ8;xcp3trI@_w5|y@9gNrKFuuNZp|sxseXj;Ynw~y8idEZZdwCo{j<|D&slOA#
ziBCQh9M9AaTT>9OQPC}jpVkEikF5&IZ2)dqa$mc4>dYAk5~W@{T<}zWe~=UZD8IUp
z66wP=ONx{3z==^}6G-WU0OSz=3rP%uDtKz1>wxhQ9MP=9YHvK?x3J9l=OYdv#u=3}
zpkRIgl-sKJ!6)5cgZN^c9TI2j!e@8L<ddH#!%2p5c7ch-MG>FFeRyQH{qJuAs)b8?
zTK5VfqWBIYLMH5foHa}Uc)5z&_5FGSk7~3}T=;PVm}yHOS>UKBK>RE=YV69Co0*y_
zbzd_fA|m>I3b0wY)LUroC!e07zwek|7CVW31zE!iu>3EtFNX;=FF;u*=&~?7J|4=d
z%_pBI;=QX=?Xdw3$e_Lq@H1K;U>BK?E8Rz%j+Ez{e8xon#8eKhuF1TXYWv$Oz4v5F
zzP+Px#1EDNxz`@UDbelS-_~YR`;rhIQic7``X8Ttr6d@Z|6l>mXU3G>;eR}a`$mAI
zJRWesNRu3cP7w8c;CU7^mOctwhxQwmNGy+5dluV6%Uik+k^r~~(Ec1k6ao?yng^{?
zFQ6*AOj@6+q15Ct2R!Co4NsenNkJ8ugkQD}KdDn>;K%a=9*YAPVAa14!ZR9qt_uNo
z=nR5#Ua)i-(PD2wz0nr}t_=r!Tb9wMPMreURj*jfxeQP&adB~0t&)&aF4HZsPy?&o
zBX|dGQXm%VQ}^n^vH8M|GZ4EyyYT!ihRX2Jx@nbJQ826JtAZrR-5$a}w6EWxv)tX7
zZ{~jj<L((9{rzqbVr0T^TaVRv!_5L3;jZ0}PaLd|=Z#uoiafU#;kksKk>lo(Gya+j
zF(1@@O>j~e5kOlOtC%}RGO1>`0}B&*J2x_Opg0<w!K8=a0I|fDYAycw@u<qhy7j57
z&0(LuPwvLlEL~i5dc3e_nbDYWQv_l6$J0dD8ax5A*xST2GnOT={W>T=q;Bw8^}}nR
zGx#1W4&>}(aG*+DwdC4{3fZd)dVT47rZL{o9(OqJF`R}*6HtthTrzEr!b5;|#`U;E
zN`bRc1B}n=q)ek15Fz<$wFUtJh%4}QG5HRQkV8$|;cmLXX@Sdehg!A?AYG>MQj+UF
zP-QTC@2=B`c!dlA6~qP{B``?IBHmp*|3F3raxLrtzM_r^ymu&9)LOfsj*vTPbW17i
zzQtK;a&m@FOh$cJMsvPbU=th92AmLPd<3Ds{umtI%F0R)509q&kNyG=1(qwF=SAF>
z#kedtG>phVUl&?h(jH71{bj80-c(EMS}#id*X94DD8^;RYZm1i`#r+4%M@R$4^rf1
zqUDtpsGT7LufcD=m6slnjc5mwrp)NOtQiCBRacTp?v*4UrX=SyxSy|4WRx2i*qSQg
z-{T-EiiPkXXH1v^DZj|9GYxyV3jmKU7b>d`gdxS{<=_O0)fxjaBan4C;9u3dPiX4K
zWoNZdAQ@V_;`wd!Na5Zr_7|lKvd#gWhCqxcfB**a3;-QuHHQELMs%FjyO6>=HR#XS
z8r~}vOkKd%1eXTxV_ibB9}yWuic-J@;N1_En5)>?z5i8&FFT%17C)k%!_>kS8+P$p
zHCNZI^Aub!8KZkt!%NPbK5gE_JC~QyVnJpS`4B7*G&MD4DtZ8GN;e5L>cCy1gdhZ*
z<~O*a0DE}CHHI_Kl<F(gyf@?{?6GbJoWP(qF&53i)7o7kPl5*(;zi0kkBS$nJ+~lG
zaINk>Z7L;`S))to<FSQL2YQEd-Ou1;spmWrCsx^X+gum`V&u0NOZ39A{5yVKGnIg6
z83kwaKD7A9*YPiu)-8Prcv9dGxC~F5R!fcqro<gBOyC#d=H}+c$5#MV0SerxEnx?O
zoHARk6FkD{wnWrRk(V9K&6d(RfENM|=?*s>o;JY56hbcfgRz4>Jw5&XcQ`m6dFm@?
z!z~T7L2;I(ryEXu2|zRi<yZsS{T6^nU>15QbvCc!^%@;w-~eCewTKY3G&j#pEI=82
zedEj)F*%}LW@X<0{wdu5U!BLZ<X2fVB_zASBR;;rzZAKkQw|!v1lI!6cKko$F94cp
zSpQz2-FunoR<U_^78I@}W}WvO#@|tJH$8xBmG#mkR}TUoTu$W->8GZqeO0cuz&Sy@
zY)*r-8bl*HIyeY$79(gMa2k!k_C-!=H6hf1f{(V^Z3v|e6SrKF!vU>(4+p+;p!Ymx
zz~SqKmf&~RX2Pz}%f~&=f;$X<i*DoRNVCv7mPaYijGDrd<S<hm(2r#3ik}0mLgtHr
zfB<cVKOMB_O~S-JwEodhM*BIqL8#@mHI#1ECX{ryAI8{0{XxNPB8?k_6VuRF3CZhc
zeIUHSV~zpvFS##w4ZfUpRsv2LN)T@d3h?M7A%($7CZUmos51gk`5L4d?Q$DfkF+`4
zDKX+1c%2v43^VHc0KLVkmahTLO^H<9qkG@BLIg<|<kqM~ykY=Ud=PkDvWqXEZ3di|
zp<sX~(hA8#`KQ^|vnVwvTQZ#IzdIl^2D(V(ZOtM9t*4CkvTv>d5DYlbT)^oVekEj4
z8bX=l<9Hu~y}5h?z{~%_ClNW#QR$x|nN1@ZzzooR1E(4>p`|$m%|u-GWeXUQ2Upa_
zwB-$uB|)+y%NiDZJUQZz$K!kL?_LoG*HjqLmtmu%RXpwF;u5t!(ATFvqYUy0x0MN*
zpS|?VzwYn;=>Mi*Vl{+pPc4km^;UzUuCl!@5Vng<jga;WE}*^XZck^ZA*DLm=mrG}
z-N^5Hr-tm+k3Uu3|4mQ-2mLtlO#G7AZ>ypIOSs@qS;led|M*L`L;wC;1SZRVYiY&a
zg>}fJ(f^CAATt0lSin>L>GmJU%+hs+uckwRBN~=H<48|W_PYT3Z?8(20!09H>nuy-
zWRWbId6s>PtA!^XUGWhe<45Zw9)@WAF7pjue~~|K(xJi4dh^$0TVl3Uu%0Q@74EAq
zU3MBm(;-!6D6nf5e*jmfbIad6cPEiuljc)$<8v7Q-%oPcn$C=ii!Z7}W{1!Vd-INL
z6boVw^RkVQv_9N5Ht2z<8N9?2^KM{KWI1E7hq4KG?8Bs)0NRqd(W4INE|@n&93Pob
z=c_;Tx0Xh?*BOCDddJ4L;&%JyuXmItZh#<+rZWgjk(szXHS;8dx<fEiF<G1tznxzb
zOevrx3sI9QGjOt9|H;=ks$8M$`bm%y^88kQenab2G(jW;Tguy*0nAK8EcXmZmm<s{
z*d>5TLT_H=t-MS8HqZxbnwtO#2vtZoWF#M-qt|ML-L+sD4-K!%3%AqT(ff2$_=B!q
zUgX4=MphP<-(bo=Oz`q*d}bWC+BTA(PF@IHA`{cEa#0<HhetPu5xnHDMS_4xB<wit
z1Th960zUhRQ>7eAY1rLOJXC@R-ceSK_fJ5$W7--=K}nfU-ZI%3u7=h#2NePIMo=OL
z-{4P$)O%T#xci<M{f>p(`f|{3RB4~BX6zEB=jMW%kO(N{?u{A?=8Yt?va&WuFjhIv
z1VK~;Z*O^47VWa(O6MC!2CZ?<PzqDsv3sA<&gD5iF-1%z*!VIr@!<VaS|IV<X4<@S
z!v&qMx1IsK;e+E$l6Ltb^v`@ywTy4|e{_GlHp70ERf}c+7ELlg2u&*>P65_hZat*+
z(aqlQXGpka&ZATiwKUhXB~^DE!%D0@RyS3$T8hU|>b5Nj0z*x>WF<1-A3s<R5u10V
zN=VK3<YxcAj-S})_fB`D!GQz0V|YN8{0*s}gf9VB0OKeyjUR*HK|-$(#%sxk$hfgl
z+KZAnGX-I<6{<9sh5p0IM#EStUWYFrNCm!QmJ_O+WNuS62;`veDhPO1<vibsF-2oc
z6)#fui>k5s17re`$9$;}Ebe{JT!<C*S%hWsw6-zeODQIHtR&2PoJ+>8w+WSPTcVJx
zC*3);D#|71n#FhA_kt=bxF&U1nbmMZ<=BW1mG!_q`Q?um8SVkA4_QUTb@A?>7HdE5
z_)X=(!DLLWPL0e#DQDuKDuCYp2of~Ff9fc;gId2eC=0`$s5|Jni`q|oAc<R(U1eT^
z$^+7LET45=)t-DT?2x1uMW)5a4}m{}kkc%KJ!p?kX6!GIOW+5c-(xUao11D|k)l4&
z8^g2NG&tDPiZZ~EjfI89%E}77q?HSG+zD$kAH}I-OiJM}Aa~cz0c(Rt5pqhiYX&NG
z`J}rtgY2XLDYXEyAo$e40NSnznEe2`5uhzs7Z=O_#I<c+@1+x!;C&re6rcX(^XF8f
zMr9~>o$T!+H3{A4d(on19iQ5hMI~#}qNCLZOXir=3lr#Mx}fWj3#hKH4iCrV=H_Nu
zV*LHTJ^Sl`2L<Z9r@eW+T%2ypDX;m4s$6N@bGreKo*${oekg4SIjJi}JROQ8kfPp#
zp}%7E>oUl$SN}y@z&1E4KqXtD5$AIxtoZjXB;R~}>>^5v;P?3wW%WJ(IaJt_xV4JU
z*=ag}^c%AhsOe6-qjjs=zP^o~0`5Uvg|s_O@-5Q&D^!x~8t)m*yNnhW`JvNGy*Ak2
z->?T;PMr%4jE$$}c9aS6j#Ql{?TJDliJON=GuaSYs+@TaYTW2r_>NSf$ULR=dYF2L
z(!djBj0gj0ws0?}p9YZd1AArn<@I=x;WuhdgPukeQ%L5ye=Y)=aoST1qFd$Dx(8gH
zDD@>sh354hdQ~po@C?%X4m5KVsh|OSb-gbxJ|3ny(qJV+T<2Yw=_;9T&hL2#MNMbg
z*E8p5%k9ShX3W<vuc=&zI;)sRyKLcDM}N<MI!CptEeJoPU$Y)E0FCWcc0E9)O4A<%
zR={88OCablX*~o|%VL3tPeB;x<uwXo?)&(P{4<M#^2*@HV-d&DsSo{pq<Y%@0O;`b
z(jOFDrhWB0k)2p3dNY2a5)K5QUb8Swg@cwxhWub*00Y37+<N}Yb?>B0)r;*Q1#StY
zoq0#m4aHj)BQ)l!(ELGhuryk|w$nTV8c<m;uj6i*U*eS~)X{HVHUn8meD-WZg1}o0
z#xaaeX0Y5AT?n%KDj2r`NMU6FlMPRNslP}CnyO$*k#(+&G0eozH9iK09Pd3BxOgBC
zbou&b3VJU~hIeGt)L?f8r+goR?}NZN@V(EQda6a<iG$k>MENc-&rmI2?)o~^1J{-Q
zzqi`J?QGEc9CyQB7~(BRTNswOMzR$*=RbY^g9YdVsY+C+l&-bjWs0DaFSLMN2cbnS
z<530it*x!ik*H<hiDJ1;9;5XDH4J$kzlDcWzmx<|Wn->ev1{h9le^K(>W5vKD4+I3
ztj&R7D-Ig*kT^Kp!gfC%LE8yUjx#_{c)XkjV0JUm(yT9uieXKdU@8qD*unZhZHVpU
zqDZd|3g24~iD&`Gn}%8!+M}b%MsC0#wM)!WO<I0$Xg#q#Mb5~X2QQB38ViKB@{INi
zH~0YC0|uEEbTwJzNwB-p&#wZFMhjXR8*jj5VChV8Zmv1>KVXTl0<eaiWo+e#568qg
z_pP;ZM+b*6T`Xw)R<AK#rhc7^LZNsVy)0L}{}+7hPfaloJlVg~vV44HoRnhBT83iG
zsk*7W$A#V-ea>fP#l<ep&d{NU{(V0Ye5gjfb_xm#who2z4sB(Kxh3C3fbOfyCz5>M
zC^jYrLIwI!=q>Oqs((<=em4mw#qF0y_4i&%A(3ewo0C^GH8i$&b{IvI&4vlFU-}$A
zZm&Qag#=$Bxaj}3Vkw9-Cuhm2Ur0z#fRg_wKqL)9bKEJ}1CG<WADmiyc;f1c)pIn=
z2j2}SX=Pdsth%_k$d-J0Gi8UbxBj|ZV=r|;aNeS~vS8J6u-Mu(Dt{niDNP;LLGNxV
z!uAsQ@WbRywoEc%89=(i=H@P+tF83RAm<ctm{v}cQ&_;2-Uz!bH=6C*e!Z7T9i?U8
zk`t<$r*=co>ZR6A>p`c*@}=exHZ)b$rVDO(1Jz#8E4422w}8WBgkz>+YeReR;g}pB
zA0O#$c>(v`;ZVcuGMk~un-UKYS~Nbw!Rl?B0V*>QIUSU550ft+sCSBZj;(1k+YEn*
z=d)#2&d5oyKxoy>^c~0iXZq?b1RVw-qX&c#erhY@q(O+UuOW`dTru%(C{|1yq4hmq
zPqRSwD?>q7m940$DcR{q5r7Y$r{Xf(En!q>YxCZq-Vn+9BHfi2ytlPv+!)a|G^Bl`
z%9ETA<CDFGD(V4+)WV+0ckR7qL!QI-yTEuJR-Fv9rpLLJ&iI6X#B0McWl^vI6qzVu
zE$d!t(aEBJ_;=uSekEjxR_Xk7OQd#kTxc@Q0XDkQ2~SOaDTLoO2!s_Zy2aAS5N=LR
zCFJcm!_Fh_v?Hc5H&;pRtQJk1vC7_R?HSPE{@d$3;W$H>^4EQtIWA)Ww^*<Pk8?B_
z_qzaren-KdYK#5Lv`ts1%)mM8VQglHh+4kz9x<<3zs5Po$rgljePA+drSe|xD1s=O
z%N)h5{`5O&Jk4COk*M#wl@5k`ZNe6!Re|wkm6i2iO`?yPW;N!6QlWUtk*x4xJg0VX
z7{`SWI<rroK1&59-t}6~fVHRto}1JWCRbS1bTHp^Jva4hJRBRluClQeTKohLT=uyx
zFu3R|9GjeunoX`>63)@AhK=7iT-WLxw`sDltBggS?my1TL$rYdAKbMg^Ll%03r9S7
zEQX!x^93A0Pn!s;)zn;?>5>RmZRB)5wv?aYFEeQ(#e@pGxxx3B(|ac6`1*@g<K5TD
z8qZ9XGz6czto!!07WH9?e}x5{cT##qVeics3H}CO<z9+*U13x%)Whg0=<X3G_K<)M
z<}V<3gpn3w&+9<*t3(7_z%|jxlZ;BJ#`Q9)D#av`F^qchGNWFM<rPu!zXy=3R~U_4
zz9&>vZBd3KBQoeL&CvDB@nPLvh2B!;y%U+urTnNh4Z1HnWnPi_BJNG=pov16iVbRF
zk#%ci=q768C8BF=q4oR1w$F8LJF_O@(c0+4GJMsPplmA87Wd1eNak8uJjZ;NUz2>M
z>d#Y+M;;JZFxmEh;03unjvl46^G3oyI6{Sf?@dl<sE&MvMX?_RcUGocG7?u33vd&o
zQd&>R90v4dt+CuFubuao@!|BreFd5TLyRty@$WNIi9Rj%poeW@aursZga`6+BLBpx
zTvv*(v(iD(6s}%nBBl`35s~KtDVa`1`P7GNteS-t<Gi;7MF-_*D>SYvJ8Uk*wmVqV
zcxhrxR7>-Y1n31tQ{$>87IvD8T?M@GstLL}eAWYpy~*oo9`p@Vd%f+_F?AQQvgG4{
zdqhU=s@`^eJB@lc<IkDKE{qs1m)}McS9BCdv4kCfMqb>yKqrg2Z#eR7O}A_WOQ~U>
z9%BNJaa>?vpceU|<-Y;B7Wi-E-2l(cr6JGRAJ6aky)iq?>x20)cGbKV|BEzD5ll6P
zd*98uO$LUBZZJN8yyfKRh*Hk2osuKV47#$rw+D=&WbGAa$p8$ZFDd{g18v935Uzz*
z+}VmZ1T5Y~^c1Kx!=#-@uPh|2havxr$Jmn|B?+S*2iyX&8a1DlQOucj+(;j*QW}^$
z^H>hPm+3aK$fC7>03$R2Q53nf=5ZR*OW(V~93@djOa<=P@yw>*p`>wM?2@<k0-_5_
z36%m_KcFzz7hzn(eLFXlM;Ei(-_eUujukO%`$|M6dxgE&1>iI884Ydi`MbInp19sz
z0jGwP!jVdF*ik%}=@1xKYSNydgtjR#Y7FZuR8dqBZ86W)$SwBJ;-Tva?*U&9oaDJF
z#aOOL9b#u+5;3$^MVd~m^3rHc<gh@R<z=Pjy5vm`^#Yl0SQBdU_05%qzH;@o>4IAS
zuV3XNW`}dV+o^T6OKsx$bUhFmV5$oYxP>ay#=@wogB>AHCI@)yG%9Cmms`}>ef|g<
z;qSTH`rq?3tKZz0yKqPqs(<zHdbQi($NNS10R6KXey`WpMg<@}L$;hOpv@VMDh_77
zmOXKI?7hBi;!DaY4>cxh!rUz9y1rg*j$T<^jbM-$J_(I8KOZNf)`w@&(R~w$X2f$=
zy^@fO1Pg{N$86>PkCLd->Pmha9q=EM`9xb;dJ7wCyaX0ol1>EFcRuJZUT`L-6et32
zlU?s)3KAIqVG)z{*B}>aiVgVpDh>2O)hM#N*O#MY+4XV-#yp|~(R%KTsfoqmx8<^4
zlCmSc6xrK3$kb;TBbgC1;<t;9T1~()o!ti+8zr>6lJ4)oc;v%AXMx$Q=jHwOj@o_s
z(_xX}1LyfJnV@^ff(oA{y#X!+zqJOtX7;J7L41!pvX&)q*1$acVvtwi)E0-pgV>Gb
z<qqU|bem$%bRmOo@iBTk<T{(5%PxARK~ZY{d!c~K`fHNhoKeD6_Z^%mUCX$?Cc^7R
zZE|(-6jP4Av4gF219j)r+etY^!YymkLzD#D`m;lC=o6Xus_lPPmZ;ghTAOKWno*i@
zjmwPe?YAdAb75A!MEb9aSR%5W8UMOveU;;S|I!%%41EDrhAY)WA4IdZ;!ex?eDFEv
zJ1Arn;sxPid463r20ymu2!XdGgUoiT8HB*8z<%<c9&mFsoa34@y7%Iuj5XL0vvsq^
z@j@fonEmM!!9|)66$miljpF&zx8-Zp0Z8q!z<yM?3d(i5AsTLr`>C~(EiEl2TY9Mm
zQ%@z%GzWnNol3gLRr5Tp8Y2+1s-x*DmAmW9ZM~bK*z7l3=D;xvu06Pr$`(w6PtSZ*
zYZwEZ4-VKTW&x3P<w%{MH;_j3`F&QCX_K{?1J;?Rt++_^$BzKsWvso+#fOs5Px!5Y
z0A6Krj5wo<gD`GsxTe~<ISZ&QGjy@>TGn#5<j?io@KOsk&;4zCJG%~WfkTWdHzP=(
z&JU*ZhHf}2MjNkq{ZQ+E&+2lvaEmH<eTS)7TUfYkE>IBmm5}oH#;Kz80F&77?}Rv$
zsgS5eDBlj!a=PqwXtQs8M>DG}Bqx;-O}9p(XvrQkJ&e7pl$Ctf{jT9|&%{x6Vy%8U
zjGc>OeQeJ7`1m;Alg;3~Y%Lq+DqvX5h-dW|jjEM=(;#2!*{2}zJY6bKI_j?9AmK<u
zgGO6eevNzggMd|I6^A>XTMK}rR(L!ccV!aIY*;U~RENQ{I|kd2a!ET2HhSYVY4@oZ
zT-)G2ti3!;QYy3B0r14E@b$xnfY2kA<lt<~aqa<Ag9>J&TjI4Zi{EH%gKGqW2hsER
zEl5cg%5^Hv=~lX+$5J|Xoh|EhbP}^4%hDyN-m5~k$8VJjIz51XF_?0v9nErC7i`;j
zd8gXeFKoaahnX|MdY1?xHH97kS^#W5mbov}bGPht%FJv%d*#&uz8E2_+M7^U7V4C;
zJq*fSBh9N|p44((8g!p-F}E<5lWWG#utl8LeSws`s8mThxt7*$dS5$6^@?!YXsYkt
z(GJtlM@Cg#2)g*S%az9Hq}4Io_+@>nn`D9+x;HO`SE=KggOy46<){+J%pK4`!N{FI
zfEiVhYR@LLB~Gu_NB$VC6eI8SnxJ?Vqg<sREF@I5DD1(Q>P-%Qt}Nn;F@hw5(r;1~
zM7`WZp;K39(~s)E<uyzjJNG)&aDrYsgjqcazyfKnl$Rz9t#RcKXQP&ZNaA8<jKv-u
zsfUuI6h=H$QN52$5%Pf9B;CFZ-AZv$QD=+n!*m5OK-d`>DnEMo(bLr2m{CBXYLf~<
zRaR6M71Q`-J()TMeMIH3Rl3DYL?kzY($>1Im~_t}lPJ0{_iBDY!OyRXcEH(i5RhjH
z1CYq5UQ;V-z2_=5imq14K2WT6-d_HEIsHMid1%Pu_KM-tS``9<Zz2b~a$hLPaU1hK
zWov-*J5Quzu`jux>-g@@YGrL*SFST-u70oXcB`s(k(YV<sP{!0Vf(o*zd4m`X*-JP
zC)G#R0hDo&{VA)`(|<mfkm3~z`$r}bxpi1As8sye+&#A{<Xo2({=x&NK&LlmDh}1P
z>cl=U5S9Ir#^VQ0Nz`jutnj_Zm~1hlAM7mozVAYE>CzJ`E0Ruy@NDTKyK%45>1t0`
z$n)Vh9&|ceN+P)}iF^o{Zi+s(Vo}K&?xgjXi)I{3)xCjWGQAy!+Swn#xUKwbewlD;
z=UG+NScK;TWH<*Wr?Ye5+QOWQyu1wI)MA*S)%T2JA<L1#_>tc6A=Y9hO!M-h^H_uw
zxwCpTQCA0)y4|@FRp>HJ&!2*s(xI!L5B4ksDI8XpMkA>hJJZ%Y#fAcJ^bM7nGn!`U
z9lU}9kWp*<NTwV@{HAWIw_=(3klrXDz`3*Z^-C{pvkz3WOja)A8N%3wCFh53hoOnB
zmyU!31+jsk)fy;QY=7?is=+mMvS)3&P06SH>>6+8al970bE@OhMYSxe9YEl!&s}g)
zFVwglnmH+D;UjZFCYPrh#zlo;u<pKg_<7?A<14Cvuz;B$JTUNKC$ugUCnh99-9DC~
zbU;MbCP(eMvCArt%!2`-oitDl1z#_8^o807*fz{5F^ecx!mQhY=Ok7`xs00|g8<HE
zQc?=m^Nz@IgYyY?rl`k-DZ1oP{Y>IRx!3l0xTh>Z;!t8aLoC1wY9H-#7x|b>Dj{c1
zetve9ylsfzg06E}6awmwgHt()iMknngd@YX`b3I~?aQov?t^uAt(JhisrGcC5pjB-
z@S$Rj45nq|u3u_Y+J=Aj_O3F8%y@rE9WP3k0^-T#$&pB+T)I=>t+B`C<H3@Ja*#`T
zuj>5#AWOX0i-)?#s;RdZ%n|LKBfWDkySRmpwdj{x&wp>#9s)H$<5;`?>LUbG;JZl+
zS=8iVXuNylgrr<Fx+#Ry5I`A-nEjdBt`&Z2Xsy(Nd-H0owB~yEv)3EOeRo#L>|7k8
zq<29EbBz9ZZo`n1zV(`V<7TO?TgACJjk{+kC@55+J3p$aCNXQ0iRbn-souRXc|{nx
z-_A||_4J^t-{w{q=%OI333#+@GetIm#O7W=lx+p+`SBaB8SU!+e2HWA_Z0F!!ZgQ-
z&!>L`X2Nd={VPrryLkTdU;EN<dF)(VY&5WKV~!?`mc#v>;Elkd&bE+za6D<|Kiv?)
z=ve<S7OfM+ax!c`(<ql~t}9#AY57?T_|hJ`9<EJaAQWR(Ei||yODOL^MI}L<?>e!~
z8Gz^=zihMzt$XKa+!sNBBrJQg3cg$b=}og*{`b4w9Oq?T-=#Ar3iM@uwJ06%MthOp
zP)I;7DC^~Po8vUwS?)or?M<j?`E9z^XMOyyzix;En6e~8HgUQm_2jrVvUx<em=$d6
zpqjL}&L*BDc*{DyULLr^l+AczA6BQbyJ_8p1*T{bn2C-$pcZkGR=xv4xZxt~?qw%o
z=QF<^rX-sqY&5$Js|jD_Isz^OqsgeB3O(qt_vV;uPlI??E!P+E+A>=`y|iOJ>cLZA
z0t}6tRUav)2%6RV5^P1HJ1e@=rGg;;4|jDb2Z45>?CGoJ@7H!(_f_@uZekHIg5nIb
zJWsFrA@vNTx*DVlvxZA7)zDUbHFeN)Sw2R2L1l924NI|xf9zLaFs7~jmByH~<kt#w
zK(AZ$7CKHZn8%7B7t9XM1VZg|#bks*x0T;k52a5G;4WC<_n0yPx0`QPGy$VxZ=OUR
zB`4>EwZAT@kRRH_U0_TW2T>P5fZrc?>=5=2UzKfWTpC&fD+ri&q8G<!1>U$VpOh8!
zMK{yJxs;&t@KyzB+6qOdo+RNxG#e}n-RZ@UWj2!~iRe=eIw7+`@Z>bQFL|?XB5Duh
zC<zG(v|1yrtf6fLxMON(+pzQG_3h9m^&Ge5ABWGLose&AqZ*p$w<>Y#{2Ol(rqP?P
zTV;Fn96S&X_BN0^U9?_(PXgu0*n#jj{`qPHXCi#}Zkg4{N7tjLF#JJRc>rP#E$i_Y
zJ8+OjKAP7}%8+KsCzcpY4F>;3gBYU_bbAzYVH4kNIk+C{A4JK|$q97JQfQsOm9_Kz
zOoEFGXw|C4ByR%5j}GoD-#4Lp;49F6N5%gcmTJ^iMKVWKuda5v#|+{JO6;rKeB`J{
z{fK4&Ml18^eRDi~safLGm<D)RB)fiRPfL%kWk;}Xm1~>+2aU8eAV11&hqPGF`><wk
zcr|A}nlbMy1Fk0^JiF9(tdY~jYG+40c{I-3V<U#kdiryn!$LjCAPA2hVi0f1Ztu>c
zPx=ReM|JaQd{?gTW*1tImauj*q6v3$cPr3KMPK+D=hOX|NK_w`7g(RILe;k>mp2lR
zEcT}UMkpj09eqv*Un#oorQss)`zRpqcvs_hP?KBnML%yhMP5*03oXn*N(Cq9Jt}<H
z_TT}M7X}M%i;kYZ!6|!tviuTb=rn$;T(R0`-RWSE7xLDkjEsM_LM&Z3iG<vvJNEk@
zIOZSBSu~kibVZm~ILw%L<scz~!65Ij&!;Cc{!?Bc2~(V58k~_j=p$6>!btVm|D;b8
z@f-)L4T-EN(B=zgKh-Kt^>62Yi{qakJ8x$a1rJRdLRWr1VArq6(%wq?`7Lnnd-b<%
zd&8-EwX|DlLN~7`U&gCWUehghl5AVhEMYcF7EaWD-8I!chx+#f-tYvAg{HmUBGPPc
z?}JGa*TW^kKDCr5pG{h|aYxO^t^czzy`D;jzkOaj&g~klbf(Qi-Su1*<9tVgkn06d
z)ja$afU34*yDurkBoxD3Vq@a+BoZy8&zW0U<r5kuCL{nvN7cCrQeXuB&E!qPxWJrX
zc9k@_d!{guBuF~MfnV9$>f3q5o;WG(x-d9YrGAlcwvIj0uJ!BJ-l4rn6JLN$S65fV
z=#&Q2343l~uZ?RLu9f(YFHEdXZ&)5&yiZ6KraDSnam~RPzpy~t^cU765NNK+!bf$j
z4g6OhY#WA>TAJF@>`-)I4op&OJP7ijRZW-oewIyQPfJ@7rwmiA^`J3RCn!C8_I!-!
z(o$<YACuCRYL)9U@w5i!#v3bRofA`|#M};*3WGEB*C*@27`Cq>eL4A2<S<ECNS>n8
zyVsP?5hD7#uj@_k>mpzj1wZ6!)t_RseNJE4Q>oHR(0c<#`)(P^TXl^XZLbXzjxPeo
zbkuSp;=fK;9sq5>vu&j6$(Hn6K}49St=(l#yhW3w(H=M}k(?mcStXp8P~iZlzI$y-
zE^!V+B6#*$8^LRtini`T3|t!Lq)m?6cUuL)=xHejO|a;!@dzxbnv|-^<*223oAAl(
zex{)7E@MPmvMu(ab5|RIGapwNigAOCEry+aYUut_gvDUWQSW}vM!vGJXyjO!2=mc!
ze`WclPWs0-0S#cpww@Cib1ks_b){@qMq?0-P#&gMy<IPYEm>h#sy%PHPj~Sg{s!%>
zU*=3D#|nii0ALDsw>XVoQxg%rg=tNz!4Kj`s=%?6ikOaTo!GvnU2e6D6J3I*0f+58
zjAA@Ju=>wH#+b@^;?Ga>kN@!apC>2&pJy`ukJ5`@zxn@X+~a@x)iF$G)KbJg1KH`n
z(AWd|LE1ko(U0~g{U<7=L(||H^tJGrJzDzl`Q-0Ed?p$Xex@i(N>5KuB00I!oHu{`
z{06;(yGPCX)|v{~VO>Z;*c8Ib3*q16IVa5S2vyN3#61>&7sfCqsaIG?4cjBUS2cD7
z$i2>+!5mexMB~fV)=BkHP+&u%>1k+?{;l~~M#)6oJw1mJ{~Ac9s8GD>$noUjEa<h$
z&AX2g=(sQ-Put>n9f7Ho?GX?Zgb}JLn0&=8_!3+M_Re8%ll8aY<P&@Cz`$3C&8N@Y
zrWZ)nPD@UuDM|GZgO6^wGLab+R3sI6U9;SV)xGg$i)<>3a+=LT{|c!2fE|_v#+gZt
z<!DajM;M~{UEqaL-y6SPh1k3I#bsGbYp$gHdUplJVX`CSM7bvB8X&5PqCPetbOrv&
zg)ZV@L;jVfTe&Isl|a_U4n{*Dk*1+ZhElpOSEWiNn;4|pxUNmS5XdoSfT#yxUp`r+
zTFcDTRMe{fwc`xiXoaH>h#^3Es?==Se(2ei!3b*B;~|Ry3>lDSSp#yQI0Rk8%^?A&
zS+hjJjX#t(=a*jIpchNCrgz3UX~e)*2KY87C{92>(8JaaWgbe+I>W9xs#RG$k5Q?}
zyt^KXMtCgTAbIB6Tg~);*$GnuTq6bA!BEI23VV9Mh(wWrK)zme8%$v~fkZ$Bw8;XF
zCZNkgxGaRU_2IH8si+{Eg1^!RXd0k8{Rpz2Ou1;Kd+2Y)#>^0CNB*Na(DU5?L*$Ls
z!f4TF*LCiM<rtcimG=X}Rz=La=<u~pb6vn}bKKDgz2nxE5db7-m<6*Mi~2gBGtLMk
zJ7v~G&WpoeM-IReh#B+`;O;{2=m^Wl1)J87#Rh{=R1KESKQT33!sCUl`a?jfmv>RL
z<Ui5`P}v*tDNyzSD+=aj$b-taWN7IQ_|$C?j4E+4F))?mHda#&M5k7%g<qAB;ltm$
zD$csvF6G}J`C<xuXBUuK3c1=?%F=o371L#G*{46aFsXY@<}}P(oY)0{i-bQhJV!N9
zal<G(hfzbvJ->6jHp3jii@}@+0r7%5%H7TFJb8y=;wB`MOwf-igwdG;k9@VDLH~Nn
zW)gUQYyg`Is~RIiOzD!s+;*3+Gx!0_9^BzDdAU#j83{;3O#A<^b8_-J7}T!H@Hq-8
zx^tb+%I;v7xAZ=fG%o^oS6Cl#lnk|k>mcuA)GE=y^*}bX%Gih5k#T02eR2EzLJ~yL
zM0n2Xd!C)(trRy0D3kNOiRoLC=Yq&N?}Chl_Q5+rcicmeSpF6noe(Se;&tKx<OTgj
zi6wGS9_y4^7|ZXn9NX8dM{zu@g;IgntmBc&>g<Z4JB)i`9j4yUHGm<AdNZ(#@jTYo
zfMK{vxB-*kAl-&DaNl_{upu@s?zZfDAI!+XsI1=mCn8b=-$2O8_=)Bp;38MemD9d9
zG%&!-?Ky+j;AA#?Ao8z{;?vT%Q4!F^6BZO$N6?6G&d<&o8IY_QO3&7{wCHTwn44$r
zPk`$l%-48<d`3BA+h=SXBpjk1>(bo+dhT?4hBtw3wYpmWnBuOTIyTTK(DqqQxk*h;
z4MGbf>~H~cTF_}$1MIbAKGz3PvA+fAgYL(FNq;Ef0Sr9qt$v)ZF$a@SV4dgS=*avi
zC1tWxF&QabcBZD&Pp&VkHKrg|9yo;yTSBr|5D#ZvR-LYhsN9kYN(d7|b-#^fV}JZV
z*n7*kDBo^v7+X|8!9q%;L<AH;8WfZc5$RI8J0u2BK}zY6E&-8}92x`x$)P)?yBT7D
zXMu3v|NXvu|K9i6`}z2MLmXzVxvuj(*ILJMtYhU1z3P;$3#JDhX_CvwE+AoLqA`Th
zd4_$VR0fZ$mej2UL3CrT*gg%Z550W;Gmk>mlASz*At{ga7LA&&l%Xdc*XNZEHCfJN
z^|iGLin-eW<pN*9_xTnMSo|4kX{9-+O+RpPzH*EOv}&cxXKJU)<JS3r0?nbv-t%g5
zkeV{Es~}GBL&Gu>coho)W2IE9UYqJ3&>U9VYsrp?9q690-CVi?&@kLwhZiq?3*7=e
zKsVB4ajHdwil+%wrQwg$0OF#VUIj@_eGnbU%sR>@o79kw19CRx;$d)-4wdeLdh3zq
z?;nu<d?d_2_24uG1r=iZ63io$Da|<GQ7@4Ysa&OdX}TCSAf=!*J%Egc{!6j`GABmS
zL`!IYsUt(x_7s@xpQuAl_r%ZszETN`VJG<TARj)*^zb3Q%=b7yzvYoidz<-Q%aMv{
zkT8Q$nDS4?yU?=3$e8i;!&v|i^nUxsj)aK3sqzd;r~qUl@SE@36yX4Y<d;;Ss}Tf4
z5pW6Ho9lUG<)_&QqI%&F1}kr31yJY~YSdWgf~AKRoZ`OQJ=t2JY;PPYT$a<-${5CT
z^*g?SV~}>e>xFS>smjG?I=iN$Cl9K9^N9v(&Y7Vylh?0fPTuT>O-MlViR6Llj|7=+
zr<Ye~B>E3HQ<w(U;y(_Ob=)%J*~jzHz@4Wv6sugYA5ByZ%}Sjd_6x1O>)}kAzrS4%
zzN?^LlV0+YO|Oobh={01W$VH<w@V~E8lA)ng|A2Oll92xI-^R?0W3zhnALdaxmWTm
zw5l18f42%r?}yHLN$-e)ubQKYX<#*Gy)f97YAdQ>u>X@nU)+N+gkH^RWo@fgIuV?{
zltf^1Rv!4Jne>(J01F5VW&5Yo{&$|&br^JlV?`dqO+w!TI=q?p`d#U2BqGw)_M=bO
z1_Rxiu6!mpF>&-q6W{-nj>T^K2z*wCe6H+c1_LVbu=@=!dwSEkcNo=53N)uL+z9d2
z3BJyt{LEWQCG7T7KK4h;1eDz+lg=(HS#7EN8{ZdNbBh}4T!jMfN@*tP4#h(GAI)wf
zC1H}(q@tx*cMgY?dRAX`CbY}eEPztD@O8^eTH;5>??aOnzEq>49!a(_D#`MiPJP3u
z6Ym+i6i^*5q0M*dHP(=AJ1zg2u5`13RtdB98Q0w%oBjd|X%&5w#TPlcp}o1`?a6Ja
zrXw#qJM&)3XK7Z=bP$DwD}A%Vr^ciRd=?;l^bzA~{N_z4jbyBT$4pmh&s~$jiZG5h
z8}i>?)GFqNwSQ}QV86iyGkL<Euh`_=|E^M$tobJ|&ssm0@@9egwQs5=PfP6R>jIPS
zY~?Ge#yxX2AOBudSPhHY-;iFdG_Jau{DdK9)3`N?Quw7NDoV~;DwYq2wq@=Pw5GQ1
z6<UQu&C9PyT51b9NvnBJByrYU#ZU0+oCU8=#fE5Jo0Tz-#<1M(vVG`jA-V9;A3HRN
zPl57Upe~?)^>9p5(c+c~T>xQC?1o1tL*RB+a2%_`IOunz6who5fd5H8$ZXu40%U_6
z+8QI)(YyBOx?tJ@y-GWeGk}`r(7j59;RLz2j1-Z&9dUZ_Su6(P(GMs8xL&04yrEE}
zy}lM|0cbT<FDa*SMa+p^&+D|%<y~g#r>-I3!}a#{e)q%pLM!YZz5D0RNk4i-QFS*q
zT<PD`Yo-RxO+v!j*8dM;H!!#T%@CDaB$HKjYl0VDFyrX>IJ;G^80{zB@LQn0GaQVQ
zSyUYm4Y_}d)wq9ygkxVCZug|by#2;h?{}-doat6k58`-CFQr>^{u_j_-e{FiMqaU4
zfq7UMh}b`W`yq(p!G9wM)Uysc9kGKW6v9(t{pjN*BD2@~r5Ia_I!1YXcLPSxYxS`z
zZr%V6GzL97uxAD+l-gB$Vgih|_M<E`*iSJ=@n$F{#Fdq)d8oSrBxwu4-9HKBHr_1h
zz!wt!N<kvmV944{^OF1Y2@bvO!Ydk~#S?qnvz0sOu5{H7TQe$=VEa+PqY^}~6+ycs
zruFi~0*CdQkgMlDW=ytFj9o9BnF-T#-a_<n%`csT#P6lQ+d*4wt-mzMiP7mcK|E5I
zPYU;(&WGHU;xX>ugmXXNzKdHbj?(pFNT9iJ3Rq2ow`7VE7<YtXI>5nOW6J=FjaK1+
z#6bGrbhaz){?u+gk&%%lhSK;W03a6Ijz%)5Xk&-4h-Pcm)9Y2&_&A!4Qs0&T;iCA3
z)x;0VeP}>io9XZZO&oM~(L6*3)|0Jgu?UCm?jo*HvDvP?0wMJaJ^~^=$=)2o$Oz@Z
z(seUS%V1drd6#D+trPFhc!~aUSe;<OCiJ{cpW>0tVh$|Po#(gMBWAl8MP-4PV`u5w
zqq?boejcDCa5~8p56=UQamUpt=<$<^KMTSjX)N7`OpkAI+KqJ@73CQYe%-1$0fV8e
zKFzb)ww~Tn&}vJ>sS*ut2w~ix5GP_W2)d`DJ+YR&us~k6*BHfZ(LQCy<j1VQ^vEK6
zYjrPp8cZpmM~z0KS_~Rqa4%d4zPSy(a0ol}D>?K5A0{{-{5#|zVI3?%6al;b*r*Ro
zLx(|02!yH>U)fzUE{EZXU?E3z!09$%Q&aaq2-sK%0TYB)%?m1=T6SySuE3ECBl)7D
zqsy9%^gI0xEvwg(q5Uan8eVX2ujnUBifqYwE4WV3r48jf8Z|{I%-o?9rCaP8q?P^}
z*dV9PYSbOm3FC7tK~n`3Ky3Dlm2IX3&z;TU<u!+bH@k&kSgu^Qu}>3!_S~6TC-Sk7
zq$;oLE(IJbYOYxc{Cl%^_GR8~F1^_tY}+>^XOriqaddRl_ZVwZ;;*@-Sgbn&tBZpD
z`AYP|g66PmG8z2BcNtG0fW{q<ND>NV!c>9KHw{ChKk-Sg)mcmQ1_;Pi@Qq;da(CuI
z$pTs*^Y!{*Iz}BO?A`S{n4V_aqs6;hOIA?hJ&*FEP^<pbGqw(DOeG}DcDJRv8+d;k
z07$TE#qYIH_@gK-{m3IJTeEh(OHFujpomK08Q7ab-wTCRf4{$wYg>{}VUgPy*1LD_
zrdzfAugXJW&S7;{R5S&8mV~kBv%z|$ZDDMC_$Rm~GX8!BITmmjR3}18AWAGWMTYyI
zrz1D>lu8uq(emS<J5kY-T~ku5+S|to*{GnpL1Q9VegO<YP2kT)BkW&MTMH6K8vhqN
zTU(%TR(MQTBVS_oVQo4a^ox8uE<zuuT>KhEBEio|$p3bd(AM*tON8F|%=PtERa9nw
zD4BMaMouv@GM;f}fb<ngmYYnLZ_&mo?f#&G;>mYXTSeF`E)0y-O6z8TRQ08>OUHE0
zKF_4|%vZ6{nTiCbIGHUYdR5Hnl|IQK9`19vw?JH+3sMyDAQNi(mQA=qPc6L6ORzYY
ztYQXzQbVb>^)ANPa3ZC+VB+zlot#K!fp=VS)I9?ZBy?Or-}Rc0uV_W~VfGbiU*1<{
zQ;Q5v2s8KivLCv%k#~V4g3_pP4LYphfcy}WloXj33B3@TVZp)IIW7Wh2el?1F~@gy
zdZIl}1`OnN+c-Dda}>M~_GmB@-Kq_!flx`722Kj#bk|eetH==Gk?au{-L>!SwcEQB
z#8E2pEJ-M_@+;~d_HK=2M3(NzNtPH0{*bQOtu4h)lyQJd&85CiT^Xnd9{MY*1r|C~
zyS#Q|OLC~cZX~=BZZ+9yN?nvfOCjNXYWQ@}vn0sZO(D1;@(M(}91vMSoF3#NSD_`W
z(b&)c&PXsa=#HZUD|Wn!%BaW%hh4khyf0+Q-UKme6|$M}?a}9Yi4xn|n7XHtJgE;J
zXPixv+!vPfCLPEaz!$$hH$CmgX2#_4T}#d1xW;q*_LYJX#QogLENyuyz1XiP5uxUh
z)#doIjcfvza67OOJgKWd>9iyIk%4M!Wq0-M16pj}it2blG^KlnY+C8*&I1c>g_BeJ
zs}~ZmHp2j=hRVG}tjBz2ZdC`RtTL(_4BeWl1?CDxdtQ?$7%vyEu#HkgMGqC5m57XA
zc=NavbOp9RXcg`|KlT465yqz4;uDa)I+ZyZ&ivhJq{4RVY_Z+0>@zh}sH?n)SQqw*
zh-=oj%1-49@^!W{tKPb<eU-#Wqefi5%vd}nxRLU=YNo!?4}8}}1u`-+aGu~hvr-IB
zx;m~<F0^MT(Md$)(<>nfIgQmLdplUXM1t?p-+10s4y_VEV0XpKkx?;=Av1Gj=(>A*
z=(as(X!ZNjKg{X=EYr9?U7R19tr?`f?-Z_x{!|V0Qe9BS<-S_InvFDkYo~R?zp+gN
z%FSCu;SSqZH|KgNYyr>7GVIY8_NU~vnD`P1XR=DGs)sriD(DAaV_?<p4wCAkgzs&s
z;<wn8C7U+Cy?v9Y&Ya#nciIILpvI!LvAQFP;;PM{@^intd>$9~!lPIhAUk*b&kFgH
z+`Q?_tS6GTy+7n_$g(0H`UOLP`rb$YeIR(eY)fD-0(Cl=fl1)o_JsII=Fuy4>LVw0
zHtIiJJBit#)F)=rd_79tI2Qg&dtktXgN@@V9Vv7O1Mca0oz8K)opyd3gk=78D<7g9
zIvyLgKcg=mcYKr=U{Q)8KXt7Z&kT4sQ)@H$YSYDAUSla+o%Cps<Fm25Vt#B)G#Y@Y
zD<iM2p`CenRIpZOyf6FZ_&tGGJ~<}>?RAjV2GPqwd%TOt)OkFS-@H-<`yKOS+~!}w
zDN7$Y6;-mmap|*-6%#8m-(lK6B4G@gj739u8lDjN1u!napR?-qDr4`GoBeJc0qVEo
zevm)-Z`LaKN0Uhs^HPWIIH3&|mib!ue81+aPZ7T0<M=uR4srZ|RA}ZoY&qeN*q98}
zNru1<cMrRgARS1dlg?o^i=Jr_C#ah(&PVnSs3@y+BynmthS7sd#|Ue#)BfNmki6ZM
z5+SLeip!2gh`vfzR3Xti1ofO38J~MHgEOFbC{r58j&R&mIaaOJxQ{tZa7|53m55-o
z94>DX4QbM~(Sr8GC`@Dc?RQF$P)9{E@;IEIwn^Bq1ZR(lWNE=MtF0AwTR^{F+1r3z
ztd{Jzgv9=uZ@n+M==Pez9la=w48t@uEVCZen;Ub>Fh`NLg{o#<;-o8*CrOe_Mrmrn
zQT!zOK?i6y!L=0WwC~MgaJ}|Tone1|Swr;v*~Jq$Pn>j65y4om5Sq$Qo;>*nQ^OA8
zA<O+e?)f?pHGzHi3`LDZ9dZfidNBRF=L$`+hHZsaAo8M2&&|$ODp2pCV`K#Rl&WnR
zhxMPFjErb-s|FTNxDjWz3tVk<`l^qy049351upSh9X?-$A%ej4mcgR^AB%2ykgT<F
zowWQHZTCU!8&y|^O85iE2B`POYf8|Ig9rL&|AmHIkT*kjUG3fn!BeMB!XTMJ+8iSe
zFq_l^5v^*Js>x7^j9{s^KTnCBSm@)`;gL~l>H`){3Wh`a@3YMhWE(UVe$FT<0lH>q
zV>-Fy&(Bjk1|8`|IzvylBwIk!(NO`HgNkOg=?GiL7dNoGD|)v~Z*&{DH{7WqIUS-n
zOV0!UNV6rlg!Z0yr?%^;E;^ZM`9<V_jV>NBbNgyS4QS&k&^RGQeCa9>**jvn?r;!=
zDa9!Sd>kl5-{dt;CH~vlR&IkHtE~hj{a8b&n!jwV-)NQS)Xc4}wzf(bo-$ty!%Zq|
z79A*cgUuTi@h3p*a91Jg6<G7ld}|c>T}I>hXLjf5W9U%1b$RKbXmEtJb>?G3`Sbzo
z?LlrdG&Wqn`(kZ-y&mSxL02wRn6<eEHz@R@m?_xUx@&78tfxmtB4*kN15Iu}wazmv
z0DNs@_$SGY5H@&yz$L{MUGXy%6r<`@b<nsO#cm<Ca)+J9zp4zeBe3=SS?opfB{!je
z_QzhW^i}H^v-#m3tf-_U>UeL6XQazNLrz>3Z1+>|H_%rYid^8GA#T|!1GG>~OuQpD
zf`!sIh|zL>^71|MArAqVuKh;eF(@=Nl=3_DzIYdhVUj9Z9_EFFB;l)=7Y6z|>Bifa
zYrz;s>{+Yysj;!EdnXXBr0iR7_FTPPU0ovrg#5>+BJUWDFsA$FDB>@<%Mw0TZ*Qyd
zVZk$hHO)mdLr<<lfhj{D5(UFVTBuM_R2cr^M6LAimKIuOhw}~_bG5YrZdB^QW%8@z
zbpC8+=36_xm7@iet#Ht(Wov^mt|Dk1;5f>`B$w)U@Fk}j*9{Inl{K@r4iXoRpzlf7
z&ey?Ffajr%i%Y)Gv<Yb$KpLByExdx>4tj0c{h1mcI1;nB$I91dLuv(D6C1(4nL+Q9
z7-+j#5!?3#z2~4c+8E$n^(u4ayg3uAY!-dy3m3NUq=3wkK{2Pn^<q-GDo$-Kxckrv
z(%2W+ECx4#QxXN7K>i5PsM`;7PB%hU*_*<~SyLO1{PFe9O9iHPk952bTxp$b(m8A<
za`3IN`~9D>khOtpM=;i{^Rqe^W8RtgLEix!gEHwaa~*nGd3eeiGU5;7n)8tV-iaKM
zI~tIkKHz^$7fZnjV=P4kQl}b!{dzTjnnaicq+zvQm6my4IYym(d!-N8xt`F`8R)4}
zB6`7J8@hEVcwLqp-(odhCdOLg%+ASK+t^5#PC5H`gv)RUg`VN&8g$e7chcC>N<nvx
zj_q?*8j&7j-9DbX4+ZCck$9AsKN-LA3~b2CvH?A;6a7o~Y+m_vj38rOaz1u9D@Vhg
z&>y`qO0;{41}66&MrW*YG^pY@&kVJoOe>)G;qNaU@Zb=><{-#hiA{6t$F{`1xwB;p
zV8n3I(#l#OK{`hFU&LH#064>x+3qU7dsi#$xVH4}A3knNyZuG>ZjQ}o$H%8>X%zlp
z+_pr*jacah!uLOA!7zjZgU$c)U|T8?7TON@bmhbc_4BxYFY>?9m3{dX7<j0wtH&L^
zLm8V#0p;9F_46l~FGGv^Nf=sm#P$r|pm`YLq9SsM-1)4!bM(+Tm==7*fNfR@H&DF^
z!RH5Owwp_PyY_SjME}`;UA}p9cyiJ}XEEmZ)9z#EQ%?B*5cMEG-Tb8C?Rs53PjGxF
zJH^w#9LR78WlQjBWqb?Thc!P=Sb}^L3P|V@y=V)jWh$x{pbcWkm5WQ2t=jrAbhG?@
zS7$X(7e#y{;qq%A2BKY))o<c+LlhJrgiKTl4BD(@v!VZZ`2tMG+}Ze?oa_-G+RvJy
zhVX2`yZ84EUb6uN;+?4irM#cBsD~7ATW%gv<0==%Rrn^GC7N44#Y%(Wg0?mT0eE*n
zTg=+(s<d;o4-%b%iZ1*0nP`8Yk9Bcq>&Psi9M#w~_!GXDTaDLE$!J$U{P=cvc4p(K
z7y;Ck4k^BqQ`p-&&CrNwW?><n^x^$`0BxajwusYa;qDW$BXfa3lh?+^BXb9n$3_<?
ziI!US+mf6?*#582`1$MCuZD&Sm?Z?3dngpTgD&IADa;2)BBDMpwga_utWIibb#oX)
zs~XjbH6Ssequbcf&>vh8Ag6$M#;cSE5S){&^Ud{n*v9I*oSd8n21?*8boS%XEF9D*
z=$wGDgHc_e)F9LSk*P`L>|IOF2DUsYF5Y?Mi{Nh}r&B3SFw?9*5cq8gjkX6!PYh<{
zm_qx;BkhK|FAv*54s+0#4~z!ju&k^|AX;%rxuyVicqwi^Gg2uC=~N>M1+E}Q(13aV
z(xpIiPR<>;$ZHJB@=Yt?){&r0(mXoXa}h{R=w19M23NY+lWo%e%@00b5A5ln@&wp~
z)pF_wuy59jgEHA?l$452o!fvhB2%E|%L*<j2}A=4<z7$_I%ftZE?@!Wmvg#|b!*Db
zzJ507kifvg!uVZUxy<Jg)$uTfDjlcn6-hk*7Idxu^0Q&t0Q}t^Y$hQ6of%oqdhP|?
zP3iX(bAF7WVJI>S%R_+EkkH*XRskKb0dsxr?S|kn0_YrM`{~din5|7unP=RY>fzFo
zCGIiSF%K>)0H$VUW%=tVDfMkG6F}!8aHsU(RnajBY(Obc8`c)0uX6RNdU}VPP&>03
zzwo`4l$31dx@%h=TEp$qy2zn)yphXI8gIj6oP5w6I}jJ&xvUTmU>1x3Vt&XX?#K1K
zJ~$1Q*&dYZAV|O^;q)eDfessmmx3q%oH~aaM5|;B3QgevO1RoV@FPh$=&6Pt244?o
z<sC<<#X#F67=woN080VJ9NYjU0XOQd*#+n^x4ku|{YI+TWPOO5{Y7Y2tqpyI1W&?^
zIrgu`$_1@Z-vl3+<G_=~C3@UmGx@pcFI9qtRlW!pZ3$)wfz48EcfR{_*?Jb)#IIt?
z6|yJ35x|WEACZq@kpFkK|H^?bUx=_6r&In(-B&OFFzV}s(h^AVWpFkDmV0|?<imYn
z4#D(h3D!(|81SDVXz)A`Bz@uq4F<^sGuMH|{nkW^OGS`HVGGO0<9?6_yg6-b(w_s*
zoxd~|oC#&DA5J#|Z!H6Rm1V}avA4g!U%&mEEjR#D%}~}F!Bb35o?aN(feDSph#gsM
z!kS)zK?GlN2iQm<=6hvAr<!9UDa*2o9vk(7A$S6K;6N4hBQI|Ye{H-i$%$0u=H<&w
z<$2I+{{=xv=!)RdFg5k%h&3jEuq6HE!pro$XE-s8%502`R=$@b>5t76hmjx(P!xaN
zm8y_t0hYOMIxa|!6Nyj*1j6Qs`E^g`J3QlsnGU+FTu{~l$tIRI@#oLX_;|7l*Y;ut
zm=P}a=C<|r+Ckq<V>r^c8(kMvpGchuR1b&KUPOCs7)yAuXl!vASk!^z(~JQ0A77Vx
zRAERClpgpog*YfE-pK}L&UR_I6hG{fsArnBb!QL$(b<pXXi)8WLigh^XcC@(3E^N6
z1f)FB<Od9Hg53%Cv#p_F4rpsQ=nfq2YW))^C+9m-P=J5~A~rKIVLkRcvn9TUTG;=U
zHcYXPv995PIu5Lasy`7bfxzUT3z3)|+#{6q10A+j67D?r%roeU1xg<%P*2^(F#4<a
z<%RONtY$3rYJqm8GI9bRPB7sB#>@{Sny{+Cg+oz&%KdmIB~}?yP47JJXE<3uk@12H
zSkHl>eg11lH{5wJuQ@2*;2?o&3g>3G8cB13ppP+#9g+{&6L2ZmjCp!0sQG6+cnNX>
z*qi{^;7@WqdVmW{z;*ooOj}Y{vF$}jODOy-0pk-1yqjzR7kOWyu%Z3eT5qla*x2~0
z2wergok+l}p;P^5d;2Rs@K;d!UXo{(cRVT2(L_L`0Zjkl>CJ)zqUp*QcIY>$_^>8&
zw)W>tEnqd_f;~$65F)~_s;Y75LGB&32VSDeg8;g>SZCx>y}%$tpuu1;6@g0f@-7*v
z0ftZSf$qkQ770Bvd3m_fq{5<0*}{J__hY@sP<eIrV`}giwCu(a4qi{aFSQP0<7>k-
z{KvMh4xBLC82Z3(v3x&>(9vNK*3J*{9%WWoOMUJmq|N0f&ZI}CvgOF^%uE*9qjUi4
z0oFfMME|=6Ge>XoU;5Gh-?#pc2EFcI@L~Wl42*tqIR4@h6VuT|J$RY+_g@iATKB+Z
zs-?FV8sv2V`g*%I_3kQgwXybS$1o0q&ig~T1_t1up_DuGtprY)dI+@Fr3x}LYm05`
zX~b_K)@P__=h}3H0Jj2bSa8m!12r<ELh;*$+5o{08Q@b?vNRQL+~^8n<PK(tv>B~t
z$>rt=?>)u>ltmPCbfcN|R?5rEE8WmwOu=>c?y-Ig>!!e`GtKymo!_KvMk?5mCPl2e
z&8aY`cC;F&?LG<9SJdAbxARK2AOTSa8O7Y(oc;PO7?Cpu80s@s(kKvZY^?-QHQ`D}
zk@HV*SP>cZ<_kQQNmmBT%%Y8%j-Oqulu2-E7J7K-Mf0ctVBJ}0RRj3UK%tfNQC;x&
zGC<=szT2BiXEOK}70yZl2x6}&<Wk!Qv`DIxyAG(e#wt`*qYe<tVlJ-Q5U*==7E8lC
zj2R)ZXMXD2#`0A)MRFGy^$CQ6_yoqcivyF?js-rA-H^2gZm+B?+s==VCmipSOVrgT
zr$7qCjo1cNv=mqsaal|}`_fd!qTjv)wq#;(td6e3WMW%zd}~T`WyF(Snd_0JpopL8
zm~DWjIQtPbC#s%OM7Ef`ygZCSOH(Ur9U78UvD{qR3#RV_DOVJ)(?omn=*-g5kZmli
zQy!UamqpHUX$nQ-5XsVrO?4KbW5AM9moY0BV4m!d5O4v*SLr3pG1Qswy{3>gCKSb$
zV9ji#t-Y~jAtW~o3O9)_52RIrt$T4pn2E>qbp|~7d#}EM5h0tPAkA^uc>Unvbx@Q2
z+M3Ov1e0U%ew~8v1c|T-*!^O{Z$TimA1o#WJ?zS>($K<2z_Vb!dB)3xTQgIw-yxNy
z6c1CT&NCTm|1QI?rluw-iDxAh#ymY#Vqc_LTMUDu9Jf}eY!)1jRf*-V)$cpQrAhga
zo&x6)BMpsku=4;tuda=}wYj;h8n_6HH1y=?8G*ZpmQR>JXqW&u`D!}y2OKX`6mt_H
z{6im5`}16VmT%HYu`q7<{b_8iYv2s@kIyi?^zUi3JmBpJco@ARv!KD7CHE@??a4Sq
zorXiD)B6|sT!$1lS4=zjv=Iniz~d4fcd5f#fePYeV}pDqQ?-Pel$4QLl5`iGBCT5d
zsVu@-3?Se{fV>>!fip0p_TQiSDe$J2rluw+k-$9{Pt({KX8v9-?XRo5cl-A3gY9(3
z_nu5Ic&Qy#5?H10z<Tx5y0h$=bLaLiO=mZU@?3OsI(CA_dj0m{<Fm}i3$gdV@c#bq
zp0zH?_|KuA!`s^%Od8-8U05Qxc<IvG`Z{8DLj1`S=cBxQxCjO)&(F-vjEzwi3_>!2
zy}lF>Kqfk-;}7|p9RxBvyQ5+bt2E>8>E?qOi_avpxZ-p$_$T>leW(t&J2Zf0ua5Td
z63H~@*&N8%i$M(Txkgw<TpKfvBv>asGKF6nn7Z~v^z9^kAZ^r1OxV~$kiGnZ=FyTZ
zN5{!w%}-4UZGTcz1gsR~H2t+l&%k-{c?MQ5*q&B!p4kkl^|@<KbL47>ReGc3q^^a9
z#Ye~L42gv|1p&tx#gJF&Kjz|!tX+s{6El!|J%0Omi(r+6&Pdlj=Koi!<^1jSKTv?1
zT+R{$v5E<ObYoNm$7^BOC${S{aSL^<#dq8eV{s+MHm2p7hDNz0ljBG4%<KI0r0%4$
z-ndEtOOe~zW{HB<kDAR%CN2uMWT5N;z0m-u13^%g<PZ*)4j?RoW+p4B{@|H`HI=VN
zOw8?Z`{Wm~@8@jbkUaimj5TQBWbL^Pv^y41GtWvBcIgIGV?(X>ZTzA@*a61xo6zv`
z?O@a?B+C3b8oF>&!AgelKoO9pL5c{roqAvl1|frsi|gtKVc*+N!AB5$Z2%0A4xI<5
z(a)c8jxFf{i1OnJx>efGuoy1gxvMV@--t>p*mSESG`xwu&4ti{e}0FU$?wr;m-ZT>
zOI>ATmVS4h!?1?~lRuDe4wND|!Ke&sWZ3+5;jD{53<Z7@^{1?b#$-;bnH-q?LdEQp
zheSF7Kddg~9}7mvC7`tgy=stxsHkX92BdrM7Y|ICSWN~o`niW~16A@5|8ARd)=Wrx
ze)FI2=<iWcpK4=$X_G43f(R|v<kQ}_jVwrhCI!PWNV(p=NRo&IVxHG_MHA9R@$knu
z7cShBP5q+y^yL8ji`!un1efc;jlH}G8STQt0z>8^7z$~vs}xyNNk%Ex!FW9KX_&Gb
z%JlpmG(Le@B+RI7gBtCnuCXzXcEcB_LX-<FA%E3}pTJ<<U)umOY$;ZlE2$7F9(+Gk
zOca7)U!5x4c6@5FyO~*rOQ1Spg0j9A9)<{sZOEDeb)NA+q20QE=oc`L!)&c~qzPlV
zVYvWUpq6j?2GZYF%3OyQFdo-F7`oC4{hOMMCH839z1JY!*{?($ohC~cJw~7*FocEQ
zRA?&VJ0jPOZlhL|T2q$ZXXX?()eVqf$3H{$M!Lf72H6IO6~+_XsYEt+KsW&=+rQ_a
zJZb;Z4UiQWwm@3$Uk6u!0-<N`kS!F_00jhlz{l3z1Kbl-j4!1JR={%-41dV2piYCf
zD<9C}vazx0=20)_C^pvBiD-+9^M8Ek=K<c|BDF9R2O<bG>QjVvm)Ii>p)ltJTOi-z
z9Z&|ho=q+`9~WV<v9`4Q1kK2W<Df|v;iF#!J!vvb@=A?M9C`Wly$LP!ql5o6iqa7j
zQ^hNS{u)DhMoNn>jt`4y)drsvY2NE|5p-!|^|XDmwm%F}L9t$t*U$1;A!cwpA}kWw
z2Vdv!^@+jUfZW{m&qP<wcH$F&xF8$stbz9Ti`js$1=}x0wWP4{)%#&M{C>N*RDp3Z
zJhD!x+Yk;895xI06_!5Y5aqCHX=t>?JpBMyg$9j{HXaFwB}fCG;{hd-rc#v00h(ny
zJ)gPf^dXw;kZI8I2~&)#ki6&T|Fd$SFE;Fc@zNv|(CBxXL--ESoHi2J;>e3v@7`YC
z20JGzVN?iX^w^I&GJ(cOs!qA2ah1s9Bel&FWM9{quq;oLMDQ01(Mf>}ifU0pLV_dY
z77>w7U7#Ll*8O?v=Kx~?gy@@av@1vNM_(=^sKH@*d1$5{7(78?15k@(WDs#rTbp!C
zC0La)w*gducmDhonB>7ig=Ke-%HK{fD_ye@06VC^WOUF#ye?+N-FhNQM2QH-HZd`&
zO-$H@s|?^V;L~B!{ktTGCvU83JV~iE$d`oU5~*V>_OeW~`rYSoDgvey7otRdGW=p5
zM~r;jn|VIKQ2<gCj#aoj-@*>WS6*K5YsE;J4|?R}i*o1$+~io5M-Xpy#A}mtb#haz
zpa%fXI?$Yg`N9__EzcDe2zjl)Aw@LkWn2t<6O)TfMUi8)E0Rz%Iaeo8(Q3z`DjUqi
zdfDX^CnNNXT@z6ih?#Arwl11<C1q76@@)NrSHAi$753?)+05cVZ+{@k0bda%8z`D#
z7!|;Ga3%o^lBDe?2CIcVZkWv+gvNfpa#<QykKx=4%Z!D^M6syXw%2C3Zu^k~B;;>l
z|G@lW60WyPpfIhtj}xFw7mLWD+H3-q5Jw6rs3|wdz^GUQicP$>9tBRH<A-d)1Vh*H
z84MC(@a<TWKG*I{gZTUfJ6IZWu<77~3&22HSeq&itm>-(<ijQ7Np<0|G6m0Y*sFkp
z3WDu9IKIMMDIzLGc%VpV(tsmLQBjcxP$qD64O`}bb+QVuv%=WuD21&VcwJNU{sxGL
zG731=Ot4&aze2%04stPQ5zao{2E-y$8ZGb~n{c>7f!dEWQR`WO0=j=-08HiMZ!<f0
zDo7lcw3sn<HfKkx?dmkWS!t_piG<@@Z$FI8ylzfTcmQ><mES8bU0>Zu$}{P*X}z$I
z^dU~cJ;Ed7X@Ix^E_nK^I-zhX7<Q(HYBs~;C42DN`B{gEW$gx_vfvfD40y%*;*i=#
zT(A>>7?4r6@kN4C<IW;DcTe@d&#?e|Ww67&aQ?jSG#qi?$5mBT{h8n?DpweYOX^cG
zuLs9N1_;H;?E4QNsO*e;vJy68?i`=0^$%N<URH+mjUz1T3Oya$Gg&CrnvjOhV#FD|
zVuKKg$z!v3a@NBVL@Z$z;Wr<uODO12M(Latr~nJ(-d;t%H=%jCxh1gc;J5|*$E4)f
zU~i1uMqF?j8~-hU1{r!F=rlH7n4KkZyw(%>YzAaj7cSlYkKymy?he7<OLE3vnc`Fe
z`@vZ35Gu1KWRBC!K99+gQk;&=v+3;3jWq?s?jKLz&%rPRA#3FfRc`EfXg5t(c^bW@
zz-7N7rn8mwg5w5abLr{Pj&L4&4|xktqdT#P?#=nV#Y$`^a~LsB40Q#hgTN!ggN5D+
zqLv50j&6#x`_0GB*B8np7E+g&Mk>$Z-1=7zWb*nSjaGK+&U>coPY>kL$A38p*_es-
zmu2V`_;)t;@bs~-V)<?Oe;D-y#;8|^<*3mQC~A-XawtIc1aRLOpg%l`sRO=iT;dq`
zaA34M(+mnXza?*p=FNovSCTjdeXnptaXcOEqO!^8ul#2Ui6G;fnx3W|At7XTWQRNq
z_PEFt_wjew^j^b>sRHRNToP0*j1QSB&4wqF1W<6y9#}IL$sM06h){v#yriT_XjLO2
zA))#ZtSouLQGLbU11|X)>QnL2>oAw4F2)2kFULSz?J+Kdb?2HZIor|K#A+rxPQ<YO
z0~WK)eR2xU-eXThXI`;DGQOKQFc;)FPaMYk7m$SYz<u$eQ)K%w7I5VW5z(X8<GKT5
zHg)3PgNC4G@aVHIy*~z)u&_SFoI8Gb`R#wc{2#Rm#*W|guPuzf$MA3r<Zoxrp1t?*
zE9j#k^#Vr$+b`xcG&FQ{Ad-qcULjZ|yLQ|M#xJ3ebVx>@{QOz`SAysb7)LV=$f^UV
z-Va=M!P6hCB4yrOhh8df2%7-B9Xi|`T&dj-sn5AjJ*3U}0EcA3zzy*B)}&V{bU`A~
zFtI+!WMXzU9Dw(w>Fh#5fh)(W{M$C^3Co5=WUtu|cuqh82uE^!_VP+;Fdi(<HS945
z2?{4-J5@0ja82+bWpmh^`X+T?S583%=q=2$$<;Q11+uTP*fd%kw#Vx{6sp~u_*{=l
z>CQd>gsXfT<D!&GuD)sbTJ;kCR9Si0*!2E!t)-Xg<5cWD;t-Ov?HCCj$JKC?@R!k!
zIH<`{o`unVH1}jbCyP_b1Xt61SH^yiPBcO9Kq11qI#j26MkYnIBSEywq>N;_T^dD6
zqtm!a(eJoJ67ATF_~kB@QM#=d%jc?IWkebY=a(QE!l5}P7A$Q{dUF&+L_`kp&LzeG
z+EY`XLLe{2oy;|G!kavK=E7sc%_q@3YG6HYlf!~Yw^(gNI$)OF@VM7r14#(!Yyb>j
z1{eN_x9U9*1FJr|O|h$$VkiW?-EmM+^h&9lbJ-|YTZlqL3>js6AD6o2_a97Jb*Vr$
zHVa3bEBlaRkrs5+<vFc!qubMz3sx%ec;7CTtb22Bbf3jp@H$*^ds<9Gg6G@hp17?_
z36iW2f56*cszjIV@7bre7Fg5(Gg3`zhaNz4?QO<`mJ~aLfcn!S;Qc}OCZT)*e}F}X
zqB&kjOmWxi8TTdk_jcjPy1YwhWD?2#tCNJ&vA=Y8Czji|zne)*!hQGr2(kY-=VI#W
zE?Oysoz;-dsQbqVO|*l^mj|QqAO2MN;8w{a`;1c{W7|G|aDl^W)Y9qBrK8?O)MA^E
zGSzb1I~Krvz@3F6*4<7?-rcJPZiXBXgohk=#OKT*X9T-mY$@{`tD;W}A*yx?QxX3D
z<{Lee(8H+_j=nGRea&X*vuAEwYby+7BPhByafzQ#dv|kG(q(keo(P7Fra@WQ$Hf7+
z*H})~R%T~|#JF%8?qe3<7!ME6(9MwAPbVyy!3-B3Q@?4YRZ^t2Id~S{S1aY(eL9V*
z3w=bTSwk2w1Uy~MhWbKR#?aGqB(ES*SVfh+hMD5Lm?cE@$W!+qR^#omcTl%@iii9A
z(=h}4Qve&cyCn;BWZI3Mc{?vgAj4uP-Fy#yW-v0uXlXb$M8(?nXjx_R<_&ivPgs6g
zOp4Y9{?oV%FYK|A{`nYij9!JO{mVG=?H>;^$8Pf8!Z&NZ?@palemhbH$;Irltxq%k
z=#nWr7>f|pMJzS`c#~-dL0SV@5fP3wT!3`caL4;L%<zDy<CV8V$nR1DL4Kl94Y!6L
zkK17~(q<jzRs6jjthH-o<o!Kqz|d^WZB+$G@>s032*P}fl&2qdaC!2}p@7k_fvGc&
zBd#~1Y$rma_ZRnw2;I;#1G7z>i#+o=E98Qu3x%_i?Bnh72Zm53b{jD7rRR+s$#o7j
z^V$R`Y_MrJHcUDSEV`1S9jW0of_@4*sXt#JrF(w3koTEFP0p-64p+gT)AkEtD+#LE
zC4<+#nr36L)ppLbO~2U=RF)b@floIbH%A1aqTC8ma~yQsbR*$mgYgzNgL)w_h6)^f
z^9;~U$w_;mPkA@wM{lUUP1ZpTLi?Rs(FQsx%1-^jq?MPWT`A|S5m0r281nA1P4De2
z9&f0P`H7pHd9Z-N99M8((%;|TVq8QaQ~i04TSYmH0KTtMXt|@LkfllcBBmVjkyhkl
zcWko`jHm+6&-3>y@Lgvy>K!{={@oX8X$v-LE==vKB`1gP32YM+<yWq;gL${bw)%_;
zG|346T?-~bguHx*fAWO-NMLcB0iWXV*0`Ud`zr!*zxcoP!%+}4dvo!xI^$2p1>M6p
z{KNM*wS1y{1fIEHJbo=mD-K?Ao54SBQ&dRE{qXghAw3XLG0|T20y6c2RG!avel?tt
z@>z^49X-6l;c^ORZ6|h0HOob+mSjP}ofqe`$nx)SBw4NrL{A~dq0bHr%k*~UIp&>u
z9?9r7SMa<z_*MA{0jx$xGqawz38;r}R+bLG|L_xkk5f~lK8!LjY~oW8SRR7`F~>ux
z?~cRCiaegk-M=q;Evea=y5T|~ar43J7dsnd+V@G#e);Y0;E4&>UYqyeuv)ka{cO*a
z=TkCp_x5=XS9&)=D2sFH_KX3C<>v5@N?gu`{L%Q5)uqbMK3pr`+;?XSE3{gh?DHDU
z<bE+I5!=`HT0|e-0cR&)F~TQ0zz@#I$br2tfYqg4%F+m(0bs_4GKR{@oFaM)t@`df
z-%}>tX%%f;EI~f?x}E`W=xo153e3x30AKh>PN&v1CA29kROAqxNw~q^W;uW_TDf4u
z@F9!+j5og|edNo#hnKqN!K8(S=u`-*+;SsxoNAk_Psu3d7;EW67feRk<?0WtRTE_l
zSS!r~I#r5R-H}Ja${e(vgq9tKG?kqR$l(Vqr5j(sHms%a;ktSYJv21cZ-Ig<H@+#8
zHD(5Z%JdnR_#R?ev_|<$rvDe;CGFb!>rv}VIi5HS9QnVJZE;mzZuzaQ+(7w#A@-Cc
zwvw27G&a^79bu|+xMqpF{o}-@!VJEnw^r(b?z}|8K?w(rPLx%r9KW0PobQ(}Z-)@*
zuJ1A$po<tWhvq?z8VNQyEg%S<57DT`EWrg;+Z{~a0T77*u(yXA0{Qo);$TixrN)49
z{zxxm{Lg>2^{on&sI084u98Kn>RE0QvUmlS7>W3Jt&+7BG~`l!EDMhCO?Ww2$!grA
zeAl3keaqWnYx3(OTn<d8!iPHtD{Z(uc<ba8C<kQH>^cT)h7@3|sp-}(+>}?d6GkVe
z;(d5H;82R~8xK(<P0?%&V{xg^)U<{1<eb1ihctorHYa9@VjFl@sQ=)g6!_J~O6N$L
zZ`dhH#Xwx_V4Z3{8Jk2J7+9j59_N9L9V<mG7fW96bT4|c8As`*U}}WDVidn*t%Z>L
z*B!=4!o!T}TwVk6Obu0t@~tL-MhIDr)!CZ3k#)~+s1!G9H`3B7F+yO>gdVr<<z54N
zb%O{Sqv7%sI*~GZ;KbLZVl&`=Wk|(VtHYhG$VniYz~UOuYz&2Z2s=SQrL9Gd*5Jn=
z6oy%Ixq4`aG2B)^iobr6c4PTHHWAXWG;_)0B5Qi+5A8Qc&ys2A!W3BZOt-}EJVJ3@
zD{26)1jaepZ;kIy_ZLXpMbk=CCmBlsJ3a{&jd~CyjB`znx8Ph=0#~S26e~`Rh7ULJ
z#w94;#Vc1N13K^Pug^}|RozSN%c51bR%Oey8(|`AAd|Zz2yUi9dsdY*C+f9#GsOj$
zYjp6qbhi9hJR`a-YIAb#(jRUCT*FYqGY7aRZ2wV+hVq!Q>-XiGfpCVc$E|?`AMCZM
z!QF(AFfs@T*x1<QQBll#br5v&D%oLxgG}C>aBZ#9jX~?hz2|L-jnHZeGX?fEyxFZ`
zBVSoYkEQ+;Wlh`7=C)t*F}N<C(H(;pX6Z5<%xALN{gf*@nW~m)EIQLZ6tbrF_>sv=
z>z%{-j877MYh|CPA*^yQL+b=LhsN?Ms>o)xQzP7A>*qP5k`)oJz1?%#^}(>ZoJ{&R
zM_`2Hf@xEin#uB5fFx`PZkmV}GcAH-wzFwSsQrV#e1TqE7eH<VehG%S22@-zV3bsm
z8=k$PK7W}*jVqns``1`|4t;p*;~Gyv#EyRIa#IGc3&r6*V*226cdxaz6(4`2=0jcx
z7@C321WY1&P+XaA4<m-4B<RSrzM18?`w`%d=W}#vv(MoCHe<1PYT3ovQu-oG6Yyqg
z!Nb#7RY<rtXp4t0U+^(hf?zdKCKml+ZH-+XTEf<B$!3>TuA1zO93JN7QJZe(nu+gj
zd;63|U#pV*!o_uXJ#4<`V|vsErwB4GaflI7AC{!J4?^cCTr}0o=zU11Z-PhecSXnO
z`E%SBKRY8?QxOO8#`%;#R@g3`OVx_{!If;<{5bQsnl<}ZJUY@f{&M{*l61~LBIhsP
zII5=p{{*%F$(#7W0Rkr}^m(@m3)l9w1HgEB=3oNThT@m6kaK2kd}i&u4>9L(LzR=(
zIh?SB5P)9fU0SJU97^1)qoe2B^`uMhUtg+cD1vsTm7)cU@gNx`fWB{mrpaz5ISIwN
zh*7ajm!8DMW;uK&8%*QZi7h6ZN|vi{5z;+}zVuhqp8#Oo8}FXYC>wzq;<Ggh+(1M^
zc=kTv^)AMtD)Cr(R({9dIrwv|J*C7;G4|`*aSp%@kjQYAm=9QWIjwgz``)Nw@Zs5>
zg29V`ZqZrWRuk%g7K)3RXTNx|U{Y4EdAQV+6-ETcnlD$~u$gX!`fVD<YH^JRN+X?Q
z_xDaU@k~ZE|AvnapcaR+^^qgy>veinynq`F%9ITOfWtRM@=il}ba*?SoDF4iRt2G_
z`$(lp@p5&y79U^5de_kA)+Be9=GJNrn2`W!Q-O``r226#AJ$&%^6-bx*BKQ6?~4gH
z{tkKdcbG?2ytl1{*jX<b`8Z1>b`!l^6A3+yg^k%T!sH9L(nfRs{+_^Ol)drpwv|ay
z8tn5L?zQGhh>19>E=oXH*pB(R{k=0xzXMNL{*EZJ-u-H~KC2#mhif*q4hoa`p)xh0
zI2&$5;3)#AjSogL0S2|bPPCdzGJcE&<QNaE?4kz&;c0+u8Sdd4k#WA6j)rL9-G}PG
zmS7yJ!~X6R{BEOQGVE)j@r6|weZeEfrcwRrFvoGe<R8~CUC(IGYP5}k<G#JfCd2oZ
z)1Ivl9BR+(ry?wx=#}$L4H><M^GCe_(OzhR#@JS%=dB?dcm`D(n04eqjQ{&?k@a8c
zV&b7%K~J@e7S5(at3C?emAG|8#d2_@Zc5&)<GT!uEwBaQk=@epQ_gVB|1^#qzgsF@
z%m<(rV6fF{9bHDmqsb)rDDC20z&%YFpkMU27yqa`g-^fZTSdiQn;}FO(j*$vZ=w{y
z8a1GV<Fr=>jsa?}70jx5<#M+M7;!5tuA=Op9WKhbXWA+!NI>1>2!JGtt4(uf9OZSL
z{?bAT@~595sSNxrUB+fvN8JHz4sbAxK_bA%hcUP9F+X<!-jx&+gSXBfp%6HT=1rts
zB|A6Z*<L&a#;r~b4{I0{vX~JSSz3}J5)$5rpZNPW!MWzA0H|bX)o=9Z4CIwrp}1{=
z8B``<6WKy_3CgE%)%~e>T-aJsJc!Qanve^%;BsezH0;stOl61CdH>HUDRczGe0NgB
znqQkFFJfg(Z?szczWk424IdWo4mGEe=V^+ppGi1J7<u0v-pi$oEMBIzoSdBf4AaNI
z+Bh+6ZvZF;S|id?;j0jgI}T1vG~Q0xio47WjRXg1O;MDu7#Lc=1hDz=(w$3up|T`c
zJW;}F{e|aTpGy@GKJL~i7_wud!*}@Qn9$dW4}T#3@jp4={?DGY{&%{g85oFU=*fca
z;?EO2y77#=)C;1;!G$`X@`2NS+}EL{B;;8VDakxP`ESQz&#8#k79vF4Q1IVq^zPSn
z;yK10E`-F5M4W&_eC^!L6U;kRRa&D#JT)%0m4~&5^C@9%oER_Y?krg85hOO#<m2P}
z^)5qy>+ayj(JQ$9wl<u>iepj9B=^!ZIC8Gyv5)ye(_(wF#VlhP2H)&<pPU*AW*>2Q
zR{fwk$c3Ox1wr?+3xP<a<F=kw9r6Bb#wz%=koff|%jJvp+M@E<7d*SQyfhdU>=y_Q
zqv8^tKLm+UZ_d3wlQNZDeHmT1RY*1oz1ND+{nCK`pO8*!+MJ5_1{T-n8vkesx)<!p
zjlk}xF|6cEU?6b{9x2xv6bvpHyF;jC1NTwQ4A{-XOQr$;sP>6&kE@!6SmEjJ!->nC
zYbg?YxXw0dAlj_yL_-7h0QyyiqY+HusvHMy4N?H2B3SF|GwlVVa47{Fz2GgBx;YkL
z94l#V4jxiui3tfRPP<mfA;($v$%unFrt<rMZw)#*Re~o-XNr@g{>%hyaz<G|mHv~%
z^~&<YEp!zliN%|05p}+ba4JTnx1E)3_a5g@4dW+Guv-d`3pUlOaS5uM-{moDXOBhs
z1{gS*S6Kb63SZYd*grYItHK`}+0A9rgt6G0b^plVwA_6C+xKT|)R!;aF+UNXZw<i6
zDwL`15CR8uuYM5`R=e9Wto^3*Ku7SsBAEe(o_9WHe@Afu=JFL<?JzS#dk0{>YM{T=
zUH<bNv;i<4a}$KQeB7T@p!x8bLov5Wdmj}eFYkWKbdZ2sv{bfGPha9%KHL7o$a-ZZ
z^-Y6XY=wK{+zz9`jjmaV5dn+8L!2ZyMq?_;!dd=SX^^6toUzo`*WcM#jD}@mGhkH%
z{PLj5{?pNFpO4#+<wg4YuRv?{t_f0{%%RzFeI||5%4Kb<c(n;{pf}IR25`eMKxPqn
zz}QsZf>?TC5;)C|79k9gFraJ@uuFi`0^p=LEIMlbU3BzE<Wb2MtTs#IiPWhw$hG`(
zacRCAkkafs&KrcX(5)(V`z+6n&f#*4@}Km*ER0s;cy#h$_rWzYI(x%t1{jTg>K5}i
zwKCO#qJ=`5XDD`yM5wl@@*3FVfz4W*=NyL9SX@Melu6UHD?M7XI6OEwPn_cXqi8GH
zgafMp__`DV4mOa(Q2d$LBSc6v$ZV#5@OD?35bH1GM^EV17vs=HZ|VL1^SKPI_IS0O
z%PklsJvVxW;IVO!gT@HK4P)g;ZyGBO*D%`;tt>1K5Sx)X^(O<mGabZk;aCTc7mj}z
z`b~Utia?U<;jV0ghz`_e2eAm4%aWyv)i7q;MCl}NSU(M4SQcOWJMu6VFJW*=dLi~O
z-Z7?5Q)r**Y9UwiR)Jc?Z1AHD)FSA4Pc={N#@*SE9jAgD@A<QIZEbnsDe@TnUWwMf
z%Kq?GYh2F1FU}64DESBD&bcZ;C$3eD!<1j%eauAwEJ0DY3~*$T&3>wIz$9b=SME#$
z0x{J*5)Wm0Q}n*l264{;#_#|GH2`eFSqNy>yMYS>Wx4<~pU?eA<hm0T6~Xd$Ix*KN
zPX}+$tTAr-8qpe0@<do8kz8VWbf)!m#5!H4k#OYpj{jc0_Jnwy@%|wb@%!ol6l_v3
zo+zh=n6GEtp{Ah$f1;6alaB*VP9M6{+(_+Wo_lqbVY1YICqkO`wr@U{|3L}3TcC&R
zA^w~okKLO`4%w}3rYaW%*zCFk96pwY96Z3Y)ztyTCpbW>Gc&9d*l39}H&)uM&XhWm
zcjCsbR*iCu35iLFL#1bAk@~hBnNfXf5wp$Dc9?73ekA1nhmoFsp793BV)ECoWBj<Z
zw@!{jS~YJ1{Q#yv-=Bf;q{567usaVj&V99oGQV`l0cX2R+!58jB^`wlui}KR%0U#d
zDIu7@2)hArQuD*pdd@X4P&ss+!Uga($F1>@`L@aKw9CvoP`UtkunUHyMbSLxfQk*~
zS$qUB=#LTa-%{le45AL0=H%ISl)cLPZ}{mBU|F{DlEq9@4~)JXMpm|R%~GGs{tCN!
zTy|eIEX{hp>2D$O$krOpDA^4D*dRRIRzfFrH!?0?ulG7A?T3ec9tGw9R>9(TmE<jc
zHVw_#?=as$s`n+q!G-Kb1J(4itcPG}`JUD5GtJlv_yiVOlE3Y4SO3v`Il@SYU0^|}
zDLR;?jp&`AKRjK3lo87-nYv6VY>RQZ45cg~KOe5<ZXetjERH-3`}@uAu%|kbe>08U
zajXk51gm52x1;dQH9sGGDQEay?_!1AIS<w{je}qO;3bi_|4Vi)`TW-z!*7U2W;MZF
ze|}WPpF;iITH#$Drg(ng+EF$J=zE4lbZPIJs|q^#t)lC>nSmQsLsoJ!MSC*_>hmi}
z5!+)QKBKrw)DItVIj_}4?^P5#vL^sVNlE$4Om;F+X)%ARQ@#jQzUL}Rx;1@+`zWio
z!cy5AlXePaOEXV+#97+rIFiH8Z@<AkF@+zyxAI6l+Tn+pZbKyVuHVir*XpOXtI%eh
z8>&I=x|hMd|1v!=u=^6kTbvNy&*4mnwawY|@102ofVCqgQW$nnNW?jD5|+oWDjK4#
zrgC(*QC>Qjm8bPKD-*Q@o|UD<rW=GhQ8LS)nztezp*ZHpq^l9!D-CUQRn&NuJC577
zH(QJ9bwX54ThfQve}_^CzTKY74B+2w!{g!kD%5iLY;HfQ|8>IB-N)-XL+jdd5?H3~
zJx%hd3ue!(FCyXF%~n-w*czW~ew$O<wtE&&Ohja6Wzg-0Ec;>*Qq?J5JVmi<pgU`8
zHj{ABA$Ds3**QHpyNc}1wM`x2PYR^BX?}Vx0fpJV*jOWRb6=#Mm5;f<$O5V1!_cyn
z=|;qAyOMR0(Rdjn8rzp*Qg$VLa(OZ;l*dB5b1W@Bi<-u*?#$#X>?^Cl^OG8ETjpcN
zcJVZRt~Cv^zg?c5)K_t;^vWnR-`Bv4l>aW~COd!lP@Eg?)7FjIp%-^53^H5<AnO?D
zTjT=krz`P-R#UCZwdaVOx)U@&P7##dgj+LxBWkrWKg}T2No{9`h>_W8ER;qzO;x6-
zTHGYhsAI|_tv=x#g2l4Gi-M`Cf2PDHELWG*KrYR8w@!x6DRN&)H(CnDXNc&06hIGh
z!(`9!U%y<I@=a~quLvgkAaX`N@Jd9QH`22J$kAUqDyZRx>ois>5TeHGptD%4K3+#4
z60~Pl7nny@d}DAc+z(L2{;P*@ou+mukF$4G-Oq1i0$nK<awB}M{9nQ|D{HmtU01o0
zo!CE(*J`wHjX3l_tTFD+e@IRqJ2d<*(-=Ol*mODW(<wopE%K7x`eL>8!Z}ZKnqYb<
z%#=kFmqFLGDKtP95J>8;tM>WwxYZvB?J)Ykt@d})Dk4i(1ywka`g_|hZ{qFnruq`>
zk(mV5he<M4s6yiY`8W5+aMZU}Hq<$J7?n!7tUql#T6zVWFev0P)6&*Ij)#coZ}xgy
z>*t4ypNJmMB<O@sGzRGWW>rIzFhA%`82dVwT3ZV|kz_`yQW=AecLe#D!75JVZ1Y~u
zYSRV3H5NJ5-GTB9HIt3MN3L(E*7mjLB41zM%lLy2M{8WI!|?{g+3jW51W8F|Qo2&H
z_003_f3nM*y+lGhQ$wNzrXzPaBPQQlq!3HZ{Rp@xhcTNOGgU~J=`o7R65q!mV#Tmo
z)lDY_NoGVi>TkifGa@iGiGT6#{ly#fg(Xi1e5H}FO*vRQ9J3Sxf>LDvQbwU|ypNot
zn73+7OGjpA)Nsf)*4<6CQCrFU^)|P-Ti*6~jx+MMt>pwrvQGpO@a6TzuGZizd=Cfs
zxuC46C{}UZXk$U>M&I^Us%H>D4Gx1nldnqVR@Ug*sKvLI3sW-KSJy-cXe8^{#s++N
z-mX^3MZI0}i$auHiN9?*#sZ2bJX84G`eueoyl&vqZpf8vr>P(pHqN45A`08hYFy=T
zX#etkzIs~Q^laAO(9Vt}+v|Eey-FzVJxli>#)6ISpTi&H&a~LKBIA9y3xDAthl(fA
zL;T31TP$z)Izl9Al@|P086BpQYbF`LlvVbW60-jp05-U!r@l-g%65NX9cXvq?X=GM
zp<TVE2y(Txf^A-zN4R>sjzvkTZ_}H^a|Q8k$;NN5<MHl3o8x!o3<wUkUgfsYtPfi+
zdZ*^ZyBYprb-Zk1;#QIB!^3RC)L9gQ_SclYMd{3vukUT+5chPviIYK41T^X{6O~Tg
zp9ImpMGs+NT6T--yn^46bX|-DNyu5S9FXMBtL))J72B@t<;DAQm_%`<$Yu<VP`A5Y
zyxu#}_p#`D+$6o8QgDX+l`CY)Ui)@(0g&gxqGvzMP&fEQMADsBNSh71()uRM!|Os+
z3U4sHTAIEQmabH`H$kNT(Y-)!pNBJi9-V7YnOUh+)SYbW(>nQjdPVCn?v?Xa@LF8-
z9<bD@+-}ouawys|P#N4=`c~=l&3g5-8e&KMZ(u21k{o=0Do^JxLDtRt@}>E1irnA$
zcA57WSo{NVvF#<R;AKh2nu8$t+KI#W<dhW=g*(l^qT-ViYr*RP(IyI9Ceup}uUz~K
z1I{s?>m+Sf>P!uJN`N<l*02Bmx9s^rM)mxhe@>&);|%5SFWl_pf}Jj3?_ZhA&1rAc
zn`Jf1+&ZM;=4{T%Vv%H9MW0rpI{0KPP4jb|M~MYS<G&{F{wFxVG0q8STwj+-ai(^r
zdX+Uu4m3m$@Z>H8Kq#``Urqn|b!uE~VyV&x+IN3}FXzXDs`T(0abH7$Vcha(z0bJF
zC|q4gBie3edbNqusY`=*cP(2asHwZuu~m5dyQ-B{D&p4_!Hq@U2UO$E?luAb{yS^a
z2Tik3qwCzIc4g%nZ<jtQ^SgO9FM>lzXCMOtbB-*>XD?VJ=-vR(H&f-(AV3D_4hMR8
z>%Pk!9S(K8I(Son#77{S*fXuyXSz0K*2lqaOVzPpiyql-+_g}$X3TCe0VNOgkOcrg
zhrlc+@Qv5fL_4mv)PQi8SGytqB18Uz&a_v_qntK-V>M(+r8^5dgf{c}lTn4B6uil4
zjR6En0hmg8plC8?yE8@YqCuQt0AF9e2nxB8r@%ZAvzeM!pE)427Q0Mde<_2J3V`JH
z^x(;)^|FA*aIPaoXWiiY(UD%qOXJM&BIfmmVGsW(W|i^nbi#z1!!lfSe~#H`;#u@S
zG&BdU83VLW#;p6gWE%|#qvK);ntvQBd>DKWO3OBJ7O;FKoV5m`AF02-0i~1m9}g|4
zQG4W<qYj3tSqM(4WvC7Sedw_C(~XvvwuLNq<L5cDh&^|p$w(}lpJoaqNkm^FdOQd4
z^>pug07xFItTS*|+rL}25t$TQ_Zj7aDspGgeja)yvvwt~l3qEv4Eo8n#i5K>)2%hc
z7Gj6H%-5Fk`92#th2#D%8Y*6bUXV}hV$($UE*pcguIR8<2g(w3J8sW5fpUsu{$JI7
zcT|&k+oq%MSVjdE6$@q1!7kY70xC)o0XrZ93L+{Uq(fo>QIX<^qS8bJtYD<qC>@dB
zYovx=Lx4b%y&jl(clXTMbM~Kozi<DWa|YqblV7>-tKHX)!1`>}c)7Yad}RrQ_sGFL
zdriQh4#S8o^xcF14G9Qe1&x^RJH_g=La+CFuvxLOK4|q$2OaQs_#=0r?Jk948!!L?
zFOD@i(%3Kz-1lroB!!TiL)P`^r@}I}Ig;4`fgXkdeg)<m&W4r(1XG4?9DQ!(ooEY-
zn=h;XV&B$f!W@f_A<v#M@t#f6<xIW@=n&$jRzS7kf|~mPkuwm8VKG3+C!*iHabu5b
zQ&@l&Rs1-EIebORa#Hra0Yg-7rXlrqsX}AN$G9C{3>ir+bht>Odym#JYvk(!-h2K?
zhhEjlOYMmYf_~oMCvWT4)XrymN=|}vb;v4i{F*WlUJo8D5pmRvy<%>f-V~MT0}giJ
z*?v=m=juVk<KJQmD3-EYI+5(nsHxUAbOx1|!l)>MYupN&WblXR?PE?Frq~_>!lM&b
zYhVT>`;kSIbpPk<?=vDfWj(q3OQh|9#>~BlA3wv^9`Z_e!bcW)D~P3s`(7WIJ{q}e
zu}Bn>`B&N2P^UJi)Q$HCVpJ7-B8k*u4Y`VlxaRTWni|ck#n1y6FiwFH<Ft8~X4?#Z
zTLhKrdu(LPy;W-tZUDwp=PP^|dBR7YWfZr^WTrNtf#!^bsaNi_qBi$}ZC*O7g}C)&
z(;3Si>$1aB4^90+Hav1{OmL;w=vkT7eLe+olY|xL2F1vW-RS`kS$4Ew^C;Z60r8bb
zNeF{(P9xX6DI5bPw3uQWq0B4fW_=st8V^0_6HA|LEp?x0HvD`kd}mDZ7l>vkBJ?ow
zw+Wix@)!1KgRyeg-RVLLYFYO=TxDWVJfmu6IGdMuJF_#8YYHq+gxb<Y0PaIgDeY~`
z2&uuJ>SE1>FU^S4@zw%OFfwLUZ>PY1L<yS|g$9gR0?&tf#&^Y}0;6m*mCe+H*OzOX
z1^7+l`JT%VsYuZ-y7D&*xpd!tvES5f%7psh$reNFZ=Oj_wv{0Kj<BI0QXH>(l3+%Y
zHOhIrLYB<BUaP}}=^V-7kiUq74#hbnhjm`TtLP@&%d1d#4Rk2v62bD*bV4Iz)9wX3
zLD0zIts!T{{?!MW)?>=LtU+Mc{)hiMm<}IVO%{>VP^}Z@Jsya6PROGgpk2F)0`tfp
z?7#>xtSOhX?*YylO4Y+%3atAXjw%iLnMZ|%h0sYgMF~B`3}}QN!{ev7uLcLl>CczG
z0dya9k-EX8{-X*wkuu+<)-q$9DNgOz3(xBD60j|hs69(<d$@BEuTZ?)0;F+F2lm+c
zzf8S8&5&VjHl-=J^T6ZIz_D!kL}5{@E@6;RSU|jc?pbcU--?AHvhHr(;a-_jU5&pk
zT|0BVM5|QNx$B8m>QUl{=JgwLf9#gNWL0-(_8&1@P)YF2{vV!y{aq3KU+8E4zJiaP
zUQNbUoh?h|ard47tGM`2v6lbn(eXS|{1>e+Bk~D;BN^*UT<k{W+0Qo<bmc)?`=_J}
z3Zts+xTfDC#eE<NkQhA-0Nh22QRL&zRPWaw7%Q$~{c6X_S3i**J9{)-5+@`RVtUpG
zhriy1<Z>JvV(rfJ3`V8a#(h_Yi7OHcEq^&Gt9K_DuHV#dG91_J(%G}D6ze&j+5}P@
zJ7M)eg1ZDS@hFF)Rs_yt)ihcTRYZ>E3zJtj!2N3mF8x}cuK>U2*oRn2-o2Ox8X>QZ
zMS-{ooaRTMdMC};+{pLU|84EA)w#NWt*~Pro5f~`HP}J;)c_e~^R)BqN8J~Z{I4=+
zTe|M&ONUt|1+TJYz<5)Np!c5fSyKju#Z-i!EU2zz<>HMc2jeO-CTez~&M^%e-v&qU
zYAp;-*nzYXT&rsbQox@ovbx*xExXFhJ^t0zf%9B`JQsd{Rz{rtMcL<NE3)LD*O@>g
zX5c>l^cpV!xokty)D#Y^sT<v8KstNt$GrPuV@Y+Fy#U8AZ?#OZ-Rie~{~*o|q~A|S
z(af7K$;!y2;F3@V+v+x1uru~!1I0KHn|FJal7L&Ig?%Q6)d=P7vJD41D%8cji^<ai
z_8<XZrK(4SIh+V7CPg)HW881vaNt@u;9J2Bs7ZLW3Y{+AEYA%Om2(Wm*d^T4bx77C
zj}}Jf3p%=OQ<&<gT)t7^^SGgLKgJzyyb`=snlpJCqY(uaNf@W<KA1ih!w}w|ZVgx#
z+!$q#o>PXmc&0R~b}2dLK3m<=kQS72k$CU7oV?YMogWk%hF~K^%#u-h7&=Gh;-{OC
z*ch9+VMALMDmfLhc@9N|?<#Z}CtmQ~;}J}Szl+fZK_1dIgc{Guz(S4UieOKHO2SpP
zW=E+at-mYCj67u$JJI5r^v!+3>xxX`zozpxnjIYb5r;MMR(mKE*iM3Zbt>rk@KB_s
ztT6R@1sC*TLo&O1jrPU*<dF!<B0!ScL`Ai)5frY&K+6Nco#$f?cE55{WFL^LGK2ur
zEG7je^z+~(!f=rBDopNK4NP^SDTV5x97hjAq=$6-L4eb2Fg<`!8CZd`a3bJt+~FSW
z3lU@OdwV+!v}jBsE8c`vLSr)JH92Eg#oJ<Ew{?Ajnbe#ZPoUt>*V0h89U5qms>Vo3
zh%teKtTC#Aiqn^)^93h8F|PiY>$WR7sAGdAEqW!#VIDMj^t;kEeC}8;<>SY{6D0d!
z+CV6YRcI|kxEk)>%VD{V<kBynz5l1uG&WZ{Y64C9@pyj|uc9|^-k<^lkS=^=8no@F
zli_WWej6ojT#-J~4y^&H<FQJZ+vo@!TwX<(vE@8gEQRdGRSm83K~iLiEA_1__0veB
zDw-@cz&Ux&pla4s3>S%0uW)8Q*|@2e4yDCjMj$?%BLZSDlr(&9br0Wb*YybR8DGam
zD#<;9Okr4QD|4r#y@z8r=&4Yn$#eDvW;C{Jx$yd%pEX9T@;ybKET^MOusQ>G7Z>+N
zg?PTtMt-vZxbj3qE*A**`9^$_8L!G!Uz?ArBDN*jCOcz7QkvDhic(z(CAV7G<+hw9
zl)UGAjm6TtUkhf!%yz8BseJ$wFFn)c&I8i7!59l{beF1AxjWBFy9dc6X=5k(pU<zL
zU+b$8xO?QH!Rws8vh=ZCe`5g@5BDq&o1UQ+Y>K5Ut9F{!G*xP)eLRdP+kQWDUwvLi
zcCqvRJWonwS-B-J?|L{HAx?<X$T-_`8X?$P)TS>c>K`AA76~hA-?PuZ&UNh@OdE0r
zF9w^@R5mY-DCT#@#urFmW-V*{sH+(m5K#5SBnaDB;>Jy~%Lscy@$JQ_{uOE<7M;NY
zj`z_v4xGk1fTX-q+;{-f9rDDatT^6|laAk?A6EbC(ds6CVU##@X&5GK7`&(8`cecH
zSljoVA2LDAQFiaU1A-{+((OCpneKEbnLQbaww-nmQhu;@2H*Z>=*`6l<zigX?)idA
zUd&S}Yy6mHP;A+bZr`e%#(Iw_A9*_n?aJxSbnJp%>3Z?@emyT6m#L|$)@?a1q)2i@
ze|9g&8Hq-%qXB17DhA6skNT}lTRrW$gq&IzK{c2?wz-B(n|aNjTNj8J#u#KYFjrnS
zr?u#~tZS?wJXvW}Va6FP_&y(O#d9wTbE`1vt=djL*x69Vff~Hg5$?ou$>*X=1aXdV
z!F0r=_JXZDpKG~W=kqI^352%7*0ut_gKyvgwBA2s(gvq`KZK)9NS<u-Rx&|<K;^Ld
zaHeX?zPpGm>?_;*7Rs&2iLiYpeKBRY`qq#-7|W&Zz@c3I-u?^(KuI^M_j$C7sBsad
zvPUh)kTN{W7wmhSb1m%QZo8J&`PJN(BjL{7aoL^~a(t^gUP@RkYaNoPy*P%xCe-%(
zJBSaRyTcbb)Not9gwa&gqQZBD)>Gp8=#M*|OO3{(G{WR?KxKRR3GBIKZSKw(OzVCB
z0Tfe-47~|k%TF*+pBc77Kyf6e9rE+3WE;N5%(21fW(5r-JpH`&%K{b^vb8)P;Uei$
zk0pGAnbRf4e!J^G)COw2JXnjO9MsXCS!`y~RP8=9q^@Oy+(nK6-{3tv^Xf4}hZav%
z=}|+sDErma)NsLE%y8+;qN9&w4`(O)DRR2e-1#=kclaxz?0aUjxhrF}kTwJmXwY!)
zItS_D->7P6G((@lj6kI>O!6P_8s>iZhY&&xLUm8v(nnnf#4G7P+x_HFMhru=`P=p}
zcqhW(x%g!PXUNWzsG{SwJnuW>*UP0R;Q9#h`Ax)WwjmwnO%T^Uq(c5^){^_M%VKaa
zb<98(>Q3}7g;1q?bUWug>WR&$c}?b$R`xHP(_CK~ihR@2kPjL3f;rsf(vaso7h$r;
z+<YISzw5pKGJV=VD!u<cPjc*ZykEc$`>eaX3Z#5N2`P())naBf=?T`YuVd3I4#dNS
z!{W}+-!np?268G1u7B`Ax5YiF9c5mSw9Q4<C!M_q65m9!nSD($`f`ZLkepqMzw<Si
z{=$eU4w+W(tBK8R0Lj;2Psgm9l2G}v*WO~WdP$ertR#!SeILKa)obZlLlHd!v4f8w
zMYJOAvw1yiGUUPX_9w7C3E8SrW=WV^C$0&{-a>~U3%rxZXO-yjdjc{Uq~UMB#!xv?
zWmu|gMx}4s{%VL#SC(K{)2yy#UV#UWC&3Cj8gUP0;sSJewo47=^@GHPWkDR<KXGnw
znT_e2j`6JDcjd1P$lsq}Q8846GXh68d-RN>Y=AUCFHNQpHkWmZq#xqcA7~X*=K6;h
zl_b{U%coCQd|SkSKLHo!i%cF+=IOI218|>>J4s{3We@oB=P<A<SEsk%Qozc_<t$fY
z*}!-J(`|kOKE2k*@(7jMQbq28**Ez!Y?H`*jvmS_6gC30AcLz2YM?p(ZJy1)9SQ%9
zSGnrLwg{y0H}V5A5t{u7!$asIQsG0BTlVTMIPuPE?V!0<cBXP*dS2?~>_tadII0pJ
z<(|A=_qklyF)7q!E*6UGG_7z8!8>hGqC3VnDo6Mq_nOBVGARSnh!>honlc%L9T+h_
z87Nn~!w3yKnr{{kXmky8;*bJ!=7h>(rG<iDdi)O$nfv*M^w7wc(j11o#{5MLxs&Zx
zeu{%PSv_kaezaGe(MkiPNUk5irHhi|+(-SGrb1NRC*e+;;|2L1y3Pv;h_`=iZ?16@
zy-wE35BW8Rhca<F{Q$^i+qu6)k@_9xp3it9UqLxQhN7pooB}M18uTD)qS|K6?m_s0
z1_klCcfSY7WNOETmQxKT6JDSokjzJEFx$-ioVPZA9?O&8;9;Z(VeMk%H_-9+L|JL*
zs}I2OjN20<nLEA36{zDi4G}8j2}WgUlq2fv7UY@uZIl`rNYX<B^`;CG5Y-DwmU765
zAIh8#zZ|h>6<-pkp!0jkL13$l++2SBn>NV@d*8N&LtFYBk_o52PtPi&OK$+34G0ME
zf9ll=fG^g)&!VUD*^YCm8bOZeQ1+SE4eMFH6I6d@Tp3Do$%XCNLodvo={(Y=M|VTt
zvQg6Q_XBy41P!UAyJd^VCtA$7?S5w<wq|w(SpnwQx>}K&Zi*pCJI+eWpE&)lVm(j~
zOPI5I#GMO8108y+L=#!l*ob~>9GN-f=fg!$Mxfi`Dd%!5W>Ep@OSyY*aR$>)iP-Su
z!*p)+RNK%(Xz2>acqK-tnnp9DGcW@QOAY|Iyo!{4gb2U^BH3|N<-&&VtGt9AARD~&
zmVfsJ1{zH?P36TwR0eLzmfD}3MM6&7s^YF{h@E|FZEIUoN5nPo2CAv)9!axq&9d)p
zLbKY0M7B_Ori?{n=Eha6FhY$Gb^B<)9pze@>f=pN#M_`e!B6yvC@qwqXd07hI=R`s
z0attohS@<}q#oF^;k1{F6D(QeB|cY6r4YJcjjAt8Z;d#K0aa^D{PiberHWJnm2Ade
z%Wa7UBnlwu>4<2l!gT-nPmK_@W+GXlbu`4W#pl;bIoCEtE%TM`(wee8Z&1ZNoZC!a
zZ}0LoQ&pV)sJB`RHeg<QMPv~|^IntKu8Nbd*!WW`cc49+M78r?n;K(Ml!Uh7DO!ZN
zzG14hChM5D<VV_Y;C??LcJos41515ST)w`LV1`9Zf_#~8%Zcvlz9QRBO`cO$kYH}T
zs)mK02jo?8>WzA9)-e<`p}vBO50?u|TmKBQ$`smw;eOb!&#)whsKU+g6kxBdD7k+9
zdTR}E_H@L`U|)GSVAi?OwC+UDn8{)tK0ZFBBx~oKm0r=*({~q6Xa&g*FdMC!;pM`T
zTEruO_T}!W2+O8=K8)#D!{+lO)ANN~H@#s3a$LIi=4|aD@U?B-A?k3JI+%=xC_?_+
zTazKzz;9$0hWN^hAXd<V0k_NTrOu3wAtZr#mt|sliT#*SV$@?d%yAtWEcpT5k=;ki
zrEfF9;0OrWLK=3xost&c=KmUW;QEHX^H|c*rmI5$tB?CqtY#gePa)+oczZH@p#3L6
zc1Nu9P;}vhDts9&{(8Gu%hsb6Ch!t|TQr1U$ub_F_<Y$=-?{T#kDvqn0e4<c52h*Z
zo?vXA&C2}B;m@Dv0x2G#^@b>E(-N(6g;ln6e;y$2NTR9CHn|o}`;F)~?x77mp2sRN
zAG7#cx2aRV0QSmY?T<Pu(;$WtE3awZ!)Yor9_!kj7P|E)9dyWYD|}10tf=g(uo9Yv
zI$w>q6M?Wic6vy74-7^W_D4tJdDd6bXHUk0Wq75ILmb`JQX=k|<28+N2!_7ISg9<J
z73oC%O!*XvZ^#avN}^ek{mzb&_Izz<B=5TbJlrVu0T>MfQwD~S1C-rqlP@??ER}sE
zVzOLis4zQX316NthzF5n&0kE+Mq!EOpkauHXt(ILNDq(rNr+AXaLWy)+eK>xZFsmf
z*t$*9J#l>k1k(`oh1!n3>v=ky4d`VrlR;iEmm+;d*=A;O>r(Ob1Bm9a@J*swu3_(n
zktU=2wRdbv6btMWsof`uz+GrvTnAWwvp&JS0mJ48?3oXs&43M2NAiNgCv*A3RP>aF
zEpb9vfpP*jcdykdqk8oHhZvr5fE}N7<5<kbp~WNUNt&E`L<0v4)69!&l)7hNQd56+
za4^17v#&nR5jxO*7mP(elLevu2WaXyfE5RNCw}tPAtyTEnLjcbu>g+;NJjy85m7Fc
zPCpavM;rsFX`XIB)Ad+o1G08R&b}u5KpbKfrZB{g-bLKPw~`;W|JFT}xiNt^>8Gk%
zed^RG@DK{@m3T#@$;)2M0h-_LE53=Oh*%ChZp^l&;*oFOoCuOk&<trb^7h_(;<@!i
zvm?9;?N}Qc>gs)sNu`9~I&n~!GF6f`c#SjqL0pP#QdRI6)&dtefE~Fed49r<U^os~
z&UC*ztdtcmvcv-Lp+4_=Y3r{T#0SvnSZSzX6LfJn7c48@05>V#q8YsIG{`Ql)<+=l
z!XC>q^pb=Kq#QE!o^0Z*f(`g41e*uUC%*!F2y-2*uk-qiD@q(gLB}VhVyVd$|IQ0A
z(4R9|E{gZKX4uz|peGI8w}trh%yRTdC<-;TBKHGBJ)|0g@YFaBdB6c1CC%@1VqgsM
zY^AW}9kAAAPM<l0ayeC31so9;ah!GQoq;q@)=P;Gj>+M6P|o4h5Ll`84@I1f?l1ZP
zZ0{`>uFK_F5}u7WyK2Bpq_O!jO8{QzD_-LnYGHRn<Sk8cv<J2rOnV7B=w(1nfAuf0
z{6%i2;V*(&optl+`jf_75BKz$^~^PY_d>ZQzusI-WC(6B>eiolFx#9@s(9C`EI#&Q
zu2Z*tFjunX-2SgJ?EI%2qD|YspIybr=O;Hf2}TSMnaM|C96E)Cx=NdO@5XScFyd8@
z)BuSgm=+2dttqd3yw1mrtHr$lgGC#bW5;H&nX>spdRT_8FdK@`mgkq~Z3**<QBy#{
zdFhXGiElMCS*7IQ*hdiD2qt3O-|YKCXQ-^T{UmSxtzYg&oe1IN@@McU&fI6{!DQbr
zIR@wWF$$-3oq}5xNN^!ivJD(KF<~tq>%CzGRYkENY2LJAwr>8cZnNZ-Qce?6TnG9#
zD=*`vTlZO+mTBwTkE1C8{(TuNYGTSbWX(9nIgj@5XmPVcK!Gh#D0xIcq=gPd1>LwO
z0%V#53kC24E^uy|J@@<5(m_z&#V@5u5;w2qkXDmSv%<s@Wxzyjoc+s-KD!GaijFSD
zY3D6k(vxMfO_?lp7wz0MOp*=JrGfB?rm=c07IfoJ!J#ri52JhBoGg~25wJY`?~d}V
zz*n>U3!jk9>qkG~Sk%Vo%JWn}obZpx+V?VAGNyxV@?KDo1Kyq$OaL|;0QbwRMz~`$
z7%~X3*CW~iN3ieiS7O?O9c3cvM3qmSy4vR#hH?QP>Uu{(d3ej4LOZbLl;}r7@=;fd
zFThMy2aXW5XhAN&VKB!iAB7%>e%M-3Ckk(nboqVnNGUf;P+^4j`%J@?g9@y-O53)G
zntWM)h1fAaX;+08m8GeM88f%s&HQ<1sa@xHjFJ5cY)06*;}i<<?<Fo!$nFnD96__s
zKG@R1Zd0LN==L)y*{zolii)Y-PjT%I=%;(2*3f);0I^?m?sGf$Yd?@F^na`h8&b7y
z+M>+}l5{75+6Auvo5=OX#DNlp>0qo_xal>4&Sg%v6;Zq}c{2I@ryzLW>W~WoZ#x_j
zd<*Zn+)q(ty={lwy*YhK9hG>G`|?5Z&)Z%{+)cG+0vA(dDD7{aXuj7Si_%#*D=!i#
zV2*64(2p+NOIaq%Sf&DdeMGZE^*L?A%m&<2M9?7as(r$Z+DGfhlvvF;A>pXp4gTY1
z&%WgwnvzfmuizVU$pUQf5U~>_f#NjKuk=@Ud0++5-qzx1m>qkM$D*p6Q$|qDRJKD0
zs4N0TgGiVt%U)}RiNpN$N0SRU2)?*KFpka`@FPIONbA;3@H=Sb`wHh?<#{m*t%DGo
za@}4UNf~XZ9lVOlWd4;8U<}px9cw&L#l7W2OMQml4>V+;B~QWChDcZ>v8JOeFT_2O
z{mIjNt;OVKHQwvvVxg1bD@h&0)H0OUxB)%a$<A(Zh-R+x-CeN){K7Hh4(`zTd@@-8
z`Q|<^B_N+Etg6zW@X$l`OyEVLFk$|IIhqBSq2Hy%WqeS>iiV2}(u+T~Yysh_a4{2T
zo=(QK^4Frr1>)FsC=1r^I{6ua&XgkXdW#P`+@~4`iU|2gXdWENu?Ei3fXX*~<>;Wb
zLf3O+qhA;vOUMoz_g_6B%?~mJ!u|hQd$JxtX#bESSW!tw+{Iw=U$;El7^}BOJ;;%=
zShihKu-r0jW|ZqO2KHfvFT)59epsjZ%@8Wsix&B}@G*n{5>(DoH^+hA53w^N`NFXo
z%vAqg#Dyz-|NLnfIdMilk`@<`PUAF9fivMsKeKSF{%gham-EFc<AxZPl!^8GyS%J(
zn5@N;R-8D!yd(`ZwFenLEEPr!R~>@>d$yVVeScm4FE{fBBpjX}=5}r=m*bo6{b^r&
z&d(%4#EBqis^9BB5jq4F!VLOZKW5Glc@pGhAM7#^!wkZA58uT-RoM<q2|CEvcLuTm
zn0G7`9WdG!SEf#ZlCiEGLcLJ&hhz%KHG_`I0!}YC!>H`<_Oq5j-wkFo&FRBmMJKLt
zqUy9*USGOYaTLKCj$;qFsuiZh5m4}mIij*SLZ5VX*ebe|C@bNWM;Y7&zy^e0QtLX|
zo2qEt#FKw!LAP_%b?cR6;Aik2wAC88x+nKTaPU<7JaL1-2-QL6*yUm!li~hJ6t2#g
zHWisqf|N*9UC6QFdh~dIeVY3;Z{pBe(vL85=olK~5SQNT&_rCTeqTJ?8gXP<hWA8I
zONJhHBeF6waMGY#AAyG|9pJJf7mtlY7<79}grNxW_?Nhi6TjRH5V_l;yvwhpk|Fc<
z!g#NThew^t{7U!ou`%pn1BZI@>x{KuntS#~NtxGeL(Ky@jKNr!IBco%G?H8!j&csV
zf}xCB%V`nFG1B^C<TOzUgSK*mPY>w3S$iI@70m(y3#k^T>^z?!1&GQJwBz|)?hy-~
zYsZm&=m(Rh2j%?a6R&`tgfK+>%AlWojnhQfq~F=7A0v&?rLOUwONod6%oRP_e-teu
z%z&&w*NYuRfmY}`C<FT(M2Py!u4@^ea@waux99ia+$B+co82~%{{fT*&fAbEI-8tv
zD}#T2ce44n+3W1@Eb;%>*5v<mrSlK@gZG<l9K?dIE<v?02Zc`7-Z!2nXiG<XkXu22
z?tj>C-QKqU1%JyGy`||Fs?<inZwzoZYn0^U|BbyZIVFJPI>lfmMmjrjBhi@`y>fJ#
z5C=0m2|sKQ{IJ0?ijk3##}>T-@qi-_a)wBJK~U{*aM-=hu!gK~%O8Jugh?5Zx9fhX
z!eRTDPyzOn1}swmXn0_ZD=)7zF<<Iyt!X$e&=9Vbms_5;8CV{)Mya-)-zh~<%=IKT
z-awGYZWfntYbzZfm}(0UuZE5A;!zw_3sKNWz@<!-JLvSwL;ETs&4AmW<lbjQUO6lH
z_}a4cmzzfMS`z3SgmuSu_B{2M@QS#ct&ECJi@V|S{ZMY*<A{pEQlc*-eA$R%*m0(7
z5)vf0$|xT}S+{`a$$m7lU)4ul;DbR94in%7KVF=Agk}ovCqF__gp(Djv!gS+TeY{%
zaLnz19!ULlxlAj3T|Q;YGNSvdsF3>;SL*c(G`ekOjhT65SBg8T5L$zcQV!_mVGdk}
zV-?or%)@tCQ0=tVz<4;A5^ecW4>ckZ93gN{2zQ6FK-q_dt*W(t&!sYtC5oBj=ZkRH
z<)?az0HG?6zaEE>Rj~0id=fSCNlYFgoPCJgqPgu)$4!Kt^{5)m{l=?spdDVfiUs*y
z>55m{Z>?RNF2dtw&dowd=}V0AnB3bKf88Bn2}IpSq$l;C2Qk|i?@WlTuve*_&l=zx
zk5N*DgFC~;UB;r}2hM|LYbBon`ZC3GUd2ZrKs<IEZei{WAh|J4d7V6Q{9*gn1H>M^
zm624ceMoA<UZbNdllz85N8=ro{n(}u8k5W~Dmz~hu}9^{_!Wo0DuD#MmJF@m;l&X+
zyjC<owxo%$nZ9TK{up50ibM<#2i*VYo*QPKY9olY4UYUUGG|JJSqz5Sya2MnGtj}H
zEWr5e>fIO8NiZX;=<P4=fP31pCo&KU!jZVrRDFa?fGEqqhtnw5wlhxY{!EFS1!ihA
zAyT!DFG#`_&S~8=(iDM_VC56qnFjEyQ;_2-odnmZMNFANP>i2RaccrmnPF4FUELx@
zTZTZ7uIMm>z3qQ!8|aR|iw<>0bG?vPXf=EK4R>wG%?dRMvzFCGb0WJ1^_dryUS?)1
zyNG6FuxkW*lpMy+c%aKB{9usNWB}ELtGWVEhyQk<A`Rnj_jHWcUT}kxz03fOLflnx
zz_vFCk)$m)c~bLvISGjb1ga=`@uWf02tm*X*!qK=yL5?wr$9p{k2|`7vAm5|AqY-G
znA1`6u9OVOhKO6U0lG~dE1|9-s8O#;0rf_v)xPjkA8Lvp=&mxWe!sG73U>#-mL;d0
zP`wGd_ESW92FqISLfpsbt4*?_`<{vB(0FQFKN+|V_y88JMN(HeRcA73)_N*wu@AYu
zE0ktQg0H`rll#L3D(H&mmASMU0dh9DVggVFDnd&hAwmV*yIz>mT!+}r^$T2}k~H=q
z1S}<#)zav)oI*9n9{;TiPz_Tu#!AI7p-0syW8tHeyi)K}C#>#5`x8ys?GA|XV(74D
zq&gHQe`3H%zR;=9hrR*mCh9orv+r-_A=~X~aPUFfjshSD5aPz5vp~{5FoCNs>7=YB
zTW=1|sCAD4u{p*yngi<Qu>4y|iu1ecv=<pS9*S-xr7#9{;;-SHa7Z3Z?S&c;l^I>o
zv1z37rYcQKra4N3oR<up-ZDC*Hdbf25gB{WL!xCehB=~=k$Jt8-3qoHlXe@sQF<OF
zt3M}74_wlI@|#%3Z2KQu!)^jcvB%m}YH}M)d5Vrg42C`k`#0_#O+!44q~t+ds;!H7
zeLlpb%CeIFoE7FBii#6o&>iA_Vb6J5ln&(P&01mDh|Fx>_8ZkK>TZ4#r!&x+C&fZq
z90_{30KBV-Bhn)8*-l5>k2b*jJs?C@%oEcBDgSZhzP>WwYNSJi1&F>w(X!slqpifi
zd^+9L%fP8MGRGqayJm}IBMvJi|Ase(`&*r+2c)p4ILK?!I)0pBf?M1tLWqMEq{^sZ
zKr9guk&XOChu(Kvy~r_Fiwy|MqMYi-n4|I|+|%c~Ahf8Fd|^*cEPAm*od*_6LPqR7
z(}*M$<S+w=(izaR+KJ~!N{AclohhPhR(RjTr~t>olygXtA|qylW|JS%_{bglg;Egr
z00_GwM(6ZIhhgx`iVt1^DK_mYN{pHQI1OLL%qpl-g<QFij=7BF2A0Tvuw6F}wYbOd
zgqLt8tyNDWL^ks117i#~@Q1EzVCddtvdg%cFe!P29yXEQ^|F_!hzOw%P_<HU?%aPM
zf*verqGX(g%Z52bsq5rY5P|6}8-s3uI6>w1PCIrG*E>2uVoou;$b;Ji^QFAL!mI|a
z-*kF(vxnUN8&w65c6#Eer4l_d5!>-niabtH5iUhf563K(OJcAmr0x$qD94sU1H~=a
z?4zVJ(;eYMRJo59&@87M(2HW>kD$4&`QSJK_{11CmYG-Zs49ISazT<>Tq1A<D&bH)
zCvl@`vcb&CZL&Q7)P>cdwg6Aj!zN{G_m*AmTZTEyPQ%}nF~_Q@YY_e55<1wA^`M^Q
zhT@TIWcpF44WTTlo3GFi-mRvtzLd+;%2r~dGvIwOiHs<rJEOyY4m47!#lcJY#je#2
zXEF!m5Ut3kB|m<JVRbs{N22Se8A`189OlJyEiK`0&LB8s0@?iHeMRO?DT2|x6UA1<
zFs06aCiHD+(uhO{cf~ysSgg5;=9;M4Cy47tMc~w~92)jJa#NgHpMVgJqdIn)>f}e`
zFFe0{z_bX$8r396`jfl(DRjv8_y3HL55OiF&T2fkY5R60svN;{Hi4nY;r`QN<DN2K
zHgQTB=d$t2G2tNdWx|x|u)}r`DIyP3K{a{$$Syf7U%{4!E$$`TI*I_eKf<+?m<{;R
z>~(XT%lP|ltNPZRp4x1PX*Ln%^sOIOh6~Fme#`TWx)mMjoJ2j!$!<?RpK|e{CJj#w
zAw@42mD|8Dk^C6%HuYtWZBMSx*Rwv#O&fL&I{vZsgUyxS5`WJAwv50(|1_g5D)X<O
z8-qw_E@bCI9B)bgrvrfgQ&qNFd8R|Vj|66ry(FQQsY2qkXP!x*z5!C(W(5MUr+CeQ
ztK5^*(zjxC<7#kL#A}Sa_Ab#<S2wHd3bE+L2JNXEX`g$+<k#*3htSGP2YauXw)^!a
zHgKxL0NAgVIulePAWVeJFg8Z9{YVe>CU_F$q%QaI$K27eN}&0#r3t+!fIVp9PQ}xK
zJo&*7^y|_talOP{8Q?L)p+QH|sOXykxsA^u!9h$?FOazzgeuNH=U2sJQS}Q_mAw3>
zCxqAe{<2`9#tT{ODi=Z0<jV5QnpoN`g3e{{Mh(Lg>o{Iry>G2qZKlL(RDhY@w?V2L
z={^HK{I6f8dX=@f6?7*6?y3DHZ=J@96Hu#HBU%s0_R*Q8HwPLlTGFQ)1?;+h%-NV1
z=v<uN4M-u^S3Y$-5C;M}h$f=ztu70<%A8WhWB^>}g1yM8e0PTK3qBbmYUpK3yvv`e
zi>1V$i55df<T%tuAUdbQPeZr|r-VL%sJ>I+B#-?RG0bg<4z|6KY|okEHy=wz;A_(L
zu@V5SI3P(yyAz<rIzk~1Eczbu9Gd79zZJ|lVo-;o4M|L0zem$1{7^)v4+Lzl%$j=h
z<omHJCkbgnzKXE@{lr1%FGGsqONdR;uQV;41q|i}Bj2U^Q7&-i+-Ezi&iL7LTyaXS
zFM(-(F`W>ZesCOmzE?4Q^!OMkD`0Z<pDrY=-{)ivW?AVp3d*4t>+A&BWRx%#kHGpM
zeCz}@&RDX5_<Hes!|ZEx7YSedIX$Fe8cdzT4@a<l<)`~A;eBx)Orb;4UqxwG(T&@J
z)s=j`l0J<C5z4(rs*clf2(T-}<B;&#0(j2Qd}H79;j(mR{wPC*sjA8h7t&tTKtWb9
zY|=EZSjuD;2-l-Cv5e+y6qTW%kAGW#Q~K{p4B!&3snnl$b}SMM5YO0WR`Ub5s<K|~
z?}0MRx<7lyaS{&h`P%FWkm24zss9Zpgv30@5(%+>AbbVPq^?<W<KI<UQrR`|DPS2m
z|NQ!Gyie+_?pPkmHy7k!-Qz*{3#(1kn}7F3q<yUyxy3_Yp%tq`+0-6)qdHY)ue#Bv
z3lcSO9srU0jbCh)ZRv_b`Gbj8Tn@0p%<Mq7j>mbe_n8-|neJguZ6jrihj5E(YhSc6
zX-u@(#L=5HbRv>YX3I_Kzr?;jnd~hKmn`8Xd{R-pZR}&gG}BaXTs07m$VPnHU>#S4
zm>}<j{cJZ`b029YS!eU!y%dO}6()bO>+HZ1E#JtjeyVM-rU6q!Sf%8cZGaF}gQ>#u
zE?|jJ@uQaZBLZ3x($(Chi*IGO&Z|p+yNv@0wQS%M0D|nMdi8tpE@iK7_XGkNw+BV6
zoOXG(vV|ag24uI$6~9TVx%!gZA|^(x$FH1#&vGFMJzeunF$;Y*_lwq~CoRNs_Wy|y
z?e?cNWm$9C+|0B8jTJ@AUAIb*+!fCc5(jxg8)hM#VR3&GscA5riI=lgz;~wajCuPE
zW)ln(Ef1AzyC2b8V{zcxN!qp85I5T?ghSIlUuN?RoquQBs-;-`Q2KLc;ggA%W|qKN
zZCkgU?;nN&Yv47o{c}Jq@H_7@jzdx;o;j%qx}Mt;t<RPevO7_TR)b%hbYk);q-H)2
zO6a_ymi}9qh4|34g!!`g{xw5f(2SjK&zq1RuTla*qYoTELSD+Wq<@c6ym&B~bL`jO
zRyWi)!-28A?N%VnVUJbT3h#SEmd>2EoD?Gnh0Rxr;Yiz(aXS1+WL$|XQi?)NgKe0|
z56g_ZjXn8Ze>$c$+e>uo*4huXb0Sb?#GB?GjDt>uI|vKOllgE>k+93#794g;X=mT@
z#bmNl!EK>=SH?_G!jD+A+Yvjn3v4sD&07nX|3^#)(SqTZk<M&*iM9A*&*gsT6WCcx
zwN&)@I@EC>rK2A5S-+nJfk*@TS7ux!^-%e1uNId+eFBzyl4LPmgTx}onGq8qa{7<7
zp+r_!P&n{h;5U)L9c|i4-Bmqzp}tvuy?uXaW>sQwkO*zp=?;I(W?4_Q_vg|sw`NU+
zlT&P?VagZ>DZ1qLr0Y;ZL-9FEzt0LjFK#_Lq=WH0&mZi2b$4{UXYANDq@-|w#<GiA
zp-UJncuYg^xl9J4r<@TeZo`?O;ak0sV*3;WO9rfeqH>=aNHWw2VYR=DKEIf{1iEv?
zLYd4eLHhaeCAuJ}PUNR6tB3!{J-ydC6e0-eMsJjVC&a^gFip!dPO@>(891Aam+c4K
zk8jhBQ9ccIYu{eu%%zm}8q+_nA`<W;R4h-QKYza2wB)1=mRfj4d=H=BL0iN7PoavW
zWY<^dlcvtm+@`C+od34uDlWV<`@VxF-`^lDZ_}GXk?+eY6*x{2Dni#+v<!evywQ^0
z11(^v%V;>nB0&Mc0{aH*{s?~@5HDdJt2>s6mmr$n(O<uRjIJoXi34oHsp|zjrvXSm
zPawqs-&2z#EgSi&(lhTanHpz@t<4G($YkBPq#6UJjc+H~A0n2?G)zCzaYzWa41Nf8
zus|wAQ%=%ECjE@<tSjj&=ZhZV=oH*Dk>8|)X?b8ix-h7W%4|^27dW%es^zYx+yKK`
z3I^VMLG4sKI!`#8J+aw%=Q$PM8Oe?U)Wy5c^?IOF#tD9qz0?EcL`7Nn0;L$i2Efd+
z!CEqrGd!l=FC;BSA$ofzAp;k0MBuKe*kb4GcpRpHb{=8QXIGJ<wd%U;I0tr|$8f5$
zPs3&v(%3+f(*BsZEhJ(y8|8jMq_7c2UpS9;v0<7zviFZH?Ck!w+`z2CZS&^+YfSCv
z;j>G#!<OUb<e*D)^umkT2`ym>#5-AJo5>=TkI&Id-Ra5ZQM4_4MOs2uRab8$ncLc)
zM#$9D9sCYGqpeG}1}vY8cf3Td|1?i_`*s-+kw-HyN`xmLPO6JBP1{ce3{MZ4A&hdR
zg~n~|6T#AAHN*fSN?xkH8F|KLMr~`zhOEw5s?ZFLZ;M4saBA^p2Wh<%>lEy|;?HQl
zEBo9ULD-Xk7im!K`ziU&B-dszksdlJ*UFW$^w_l@q9aAOa8ka@sXtSsCfCI@H-hg(
zeAE*dS(yp71~Y_abwtW2M=CnxyiNJ*UuixpyEOWW<&YK~I3g6X-}E@DD96cjg~tIw
z6h29E7?6VlWEJPqXRvBILhe10+N9~?GO)^Cw0Oa&(r<W0esVEY2wft~tx{H*)^j1c
z(?ymR-%cf4KL!cgf%=8jo^69|av{@ASJeZY=)vn1lklxA`Na^J?7$)td))uwno{^s
z3FM+sCroxcAC=+OKg^eVe?S1ub7SAear3~7w#Nz*0O5Vaafk(T`mM*oy@^T6&)t4J
zFJG|G4F;q~M!7tG<4{hWQH@vH+!2JuCo6LzP@<8NFC@&S*fLZ5ZWKS?`w0sYsyClC
z^}Lx}QWajjZST7^%2=A`mr!iMFdS+3S9%DIvWUDpRHSVScn^jm@z0_DUFD)7DlN)!
zs1(MQ$}~qmOs)26^HbE6Cax0h-e4G{{W$@>)mG_|%#fbI@Wx;HFQUBTq8Rt$vg&k*
z3-}VZ4!19rBb%fZ7K-bu;(hgp(T<Y+H@m;Cm;r!}EbGp4l`wroqx&Dnf!f7f03B1)
z+wzFJ3&)Emr;;yKy={d=?6q!OEu<*?yCw&`#Zx^CocQB*>wf9}wg}<Xw$91bspEa&
zqt)7Xq1+Q}xx(mv?6X0B?LzdoCb<tgDVzlh8HkPN$6yaRi-v$bTsT-}Is;`y+I=|%
zQ4!mAcl02BL@&)jBU*FwCZ_lBkl-i{zgS$KMc=X`_o1Lev4q6=SOeW;>vG2y=bagJ
zKv?!oHjzh4X=Fn_HdxJ%nb*qiSbMyZZAjgEq7<!q)Zx2cW1U44HF~jc{P3)2ThbRr
z8s1a9?goW)+TaZ+Z*Kc3lE|h@BWH17C)K*UF-s7kMAwB3MsmBs;@_al5gbT?9uHTS
zXO6SuRrM1mmi5@>>4mQ{*uK^RtJX1yU;X%TTmcg2m((*PmpCEZrhCPv^7~vXaN|aY
z?NWznxCNQb^`Ua2qMZ{oZr{Y#nbV$zkH9Kk-9_BKIW;{&*)x&;MqbpAqq8-W!Qyh7
z(7(!t#pfE%Sw^Y3VZq!4TV}xjPjZ?W0t(`C#ar*(!hb9zj=u%-YGQdFScKkoBR;I!
MG0mefM=ss@A29{hJpcdz

diff --git a/docs/images/prowler-app/slack/disconnect-confirmation.png b/docs/images/prowler-app/slack/disconnect-confirmation.png
index 830847e7f75f9171b3b588bd21d03656151f3a16..77e732a8467b43e6ff573d3f7c477afb48b3c2ea 100644
GIT binary patch
literal 159397
zcmZU)bzIZ!_Xmt3qO?*Xr6MII4I?HX-Hed#ZbrjErKC|xU^Js)A{_%okY;p;fG~1&
zje2(f?pwdl^LqBzUfU<G>pJH;=Y8JieMM@h$rBSiCcweLAy!m)t%ZYw{}u=5j>x^+
z*k5d`bSZFf$Z!;2OKJN;x3BO$Y4x*M{1@KhOYI_9Wwi=kGwrGZU?aLZO}+gG<Hn;d
zYdhO$n!~}gQSd^4OJ>^6PS&IjytygRMi*A1<eHqumz2sTuT+zFy6`R(|Ag_u^E>Ul
zX6psJlXlj>o-HqYpvBR~EH8&kSB`(dqf1mch`RMA5`ggdqO*K2M<9tZji~@YFR27`
z*@ehP{C*)*I@%SLn`s%r^z^BHU|`ZM?3n-W^UBUDnvhfu!&z4g7;wLp6#n(uif-N@
zjuLZakD>|4KXYMnMOy6p+-3{#&n-CUU<;h9Zw1K8SPu?HIi`@5nte=P&fiBqp|c{j
z!1Rlsn6I|mSq*&>lDkX%=Uz8PEnjv*-UdSZLrP*|W)<Royta}y0KJKF+L-aDDS&L{
z!y+I_j+&_$<K>BDocI{z;A>WbR0M!o;Ljs)?kKOBxGfeUbI04X=ATt8T)5B)5Z21$
zPCb^%{X2+>-Vq#3kXp8k3m#2P%?Mc?X>s&NDcnB~Dfi*Nb!1S8r0tmT9=`f46>+zU
z@6UhVn(7|Cg1ci{(iN9W2d<t#4k<+fduRme{q1X$1Vwus|1tRgeZKj#-Wej*z|h4}
zeUyUV2>yM$8GV9;?*>?8M)oe^dh*Vn>)+NEn&l?YxhfgCdacODi3TEmn?0-}@gEJy
z5PO~+9{R~TqJZF>Xy)nV;z8M6kI#+`EPrmrDQBl4G<Y*&>#|{)?0&0_OgeK!kHkm*
z4qsDR;uPTL|EBiM<2`YXjCywC@dKu3At!cz75wXN^(22E<oLXpU1Y*{X5Gy&lAV5H
zN#MaJ)bi9zekU{TzZbn(9CPpr3JTKI)%EaD^7M?6%P*A99~R)}m*C@@o1L8<9yaGo
zd(#lPV`HP$+{4RTHRxSbR3s-Shr#HU8mmLarD=!mzU%0Mc6{~v{@|6pomcpTKU=`>
zgr=%5c{Ry0hNDmYR2jXL&?FH@I{MOq%V%e7e~oib*TTZW%gf8pPc|SRz|@trvlTQ7
zV#)t#qU9)1#al%|Y-?jpO+hi&3c0`>J6c*=a?%ygmzHiuMMc%s)n#R6EiL7il(6Ry
zRff;R#;PhR4h#-*zj)zbXV>7q;@>cH%=`_<-#!qUn4FoI%xtf-Xq|^%$U-lez<D&u
z$H)jZcES!hHR71Lq9RzX6))rh)|-BHy^{z)q#Vwk_)e#|a*NG6E*k_~L+g*L&yQ1O
zoEwGf1wtggxH1xETJ{77ZfvqhWI0ya;BYl+-5L6`^kkoK@kzAq1g>C?!^8a(d)94L
zYYjk}Rj|^g^yObOGyI%%I}_vM^G#kLqD)BcOaHBjUgz1mFqkp$_Wc}0XBWJ6@6#?3
zz%20f?BrGoJt!-{?395jX(pQb%@gyZck=<H+xo3sr9<kOHy1aDH#^|6L$o3NRP&^|
z+0_i=^{<q4EzISnG7s;4J44_t0of^d(8a8i*M6F>&uQ9>fo;zV{Go?ivN(UXtJ`8?
zna*Z|LZhxspHRrKKuLXCKc`h>WMsUAx0938(Pbm}I^R~0LS}cqo`;ur;}8iXbWz}|
zy;#rhl9QKbQ$1mnXwG|-&bL)i@SCUg%qc8fy3bk(7C?hqS#m~fq-|8Ju5zkaSX!Kk
z7&cfg9QDV%S@(e+^MzLR2ZptV>xpR+Ty7rnC^>!bR#b=;h3Ds9#lAh6A|`kbiQO$^
zC~kwyR-D%BYAeuOtJuwMY}lK^we&zb*eRieStIgChvx?-J|tzB%Gogyh5Oz8V~A7c
zxKWlaS!$aX`JMz7=?pcmm`O6`0gNLx-83{bi<fI)VOOKJz>T~Co8;D~6?4<mPZN9C
zUNbye&(6%Wen&Qo@UB3&haKuV;_Qs{?(FQ0p{p$8@rNrZ7;e>!iKbIe<R>IakH54T
zQc;Mlcj4YeZ&C8EYuvW84Wl3s<2ZUf%wOAmyGFyAN2mEYDw*Nc1<iFo8gD2sj3ia$
zGOeNy$KW;1(RW<@l;~VN@2_q*wGk3;B|X=NeA+IIF^O?aWo62o{R0CK%tleR-x`ft
z!!n<sVCSFdnXPJ0(0$A*j+*F9{@vj^7(J-0C%aL8D3_-6ecO8rI=1w~<smsaJDwzX
zO&bJaBJAz%-YXAE;j<&iN1<RpK^D!X!B^v%V)gnO;SmuwHa2neVhkG14|`I?3132}
z_W5O7j#&tW&BZ;wfq)lF9Gl6Kd(#(dJfVI-$O_3eaaZ}k){l2r7wnNXj<(}25sJfy
z-$U>_tqpRD20eOnGQ*bt1lw<=nzk&}`0+*+Bi1Zs7S9svQym^!c1UBd)K=gbCg5bl
zy4v;ujL^A)i}Oy6sE)Lb;$rCStwR*Dwnm_uY-mmUzD{TR0P|atrwJ?k>-BoiLW16f
zsjJygg>@<`ef@fU8hmj>03q4>#b<Z(BOBt}j%Hf)Tcz}FBTrndtgKwTKB*7Bs1H^q
zJkq8kR)uGYg2M?m)LA-)i2hqnv)W=la!<pkM4uh2GU>~AB8FTar`h)@@m$nFr_Q<Z
zn57q9M%tbxO(<Q9TmbhcJoLABA(oc;#Kgy(R@l+WQYz`E>C)2EH+pTc5YqfJ11CKI
z4dEkHty37^`YR@b8@3Sd*bGz1wJa5j)+v8z5|C(vzuqA~2!=s(z`rIaNaodwcw;QQ
z3X#kGw9B_CwdPbB4>v}ON;EFXnf@eRGr_crpW{s*bS{%c$nlpdNR*&Dya4yKJX?Py
z!nF-i2=dE-6%1!a^kh2u4ckJ>%O}{4Oi4+JLS|Z;OY3NcX>%nGxi~vd0a8jojkvs`
z;Cu<q=Hm?^u`E?4*<Jtz?B6D2REp}nFVjxvY-^3cv@63A#}TV~Fti8f_I<+FzTrR+
z$(Gv}FD6!2F=5uCz6-0NXo*^)$g+y>RiFtKsp?tn$s{Sz%XwxpWoUjb&3_C0O62tp
z_v%^y>!17Y?%kM?V8Bc4u;-Skl_L%zyHGO@nHaGSO`m6z)}~vb(T{{d6a7?)b_P`0
z57oF)Rz}(`j|sCkH`8e+;TbAYY79G(rFjHpWo7EnJ)gMJ($cNX%@{eJohYU!oz}gX
zP{pKRZAu-5@t||-sRi0wv2WK>xblerEq=V@UyZ3G2c?E6oU6a&Il$C9zALIFQa1}j
z6J5)z-G?Y%MYPCldD00$zHF?hG9KR?WnU+5;n-r$qM8j;Y5neQ6!o@3PgGQN@$9GY
z^78T&L4IX%$#kx6nS|-59;=d)lCkl}0|>(88kH+5a`GRySyTJ$XA26R{}-0NNZIj$
zYSQdW`wNQaGc3J_^PhQ7rc4<du6XNpj#}z@wO2YvHrJ(IWwe=W^aw+JZt{XlqYqs_
zRDS}<d`fPX`1~R~TPEb8ty1>JQo1C0#&^4Ps35Z6&&7@|gG$frUC!scmKJf&MAwEq
zg1$bE7Mmx7-W)Gpw5YW{=nZAneyX!oH2+GG?$!XF_BNsQXp%-i3dnPdm87tHY7%Se
ztCY!^DZX>Q`t9`<bnC(lAu5fmM63)JI34W7MFdA%KfLquQvcB}+O_HItF<q+s6nsO
zqceX&R<Vn3lDntU<r2!Y1o@EEIR3$&9?37kZMy{LyN}%?#DB6XGtAQsiP*KmDCr0?
zIovW$R&u@_N+*7nj25lE>C-T%IAH~z-{-nS-CSnVxB6t=9yM<E9wwmX4m}4X6rG)&
zjf{+7*H_F3Jp{sJ!FCJLXtd*GWmPf-Ep2L2k_BJdTyI%vDK?4~YQN|#s&`$y-upqy
zMWw8$*fXjQoF5xII+=B?#*vkk)vTu_3ctBtyb=2kj!fMf$qMjXv&e6B)y_z6CtZ1{
zb;so?SuW}_SQP)p_Mp-j47mbBAWnE9U4qTA2yo`-qx!ZhE<>8qN11*Ylh$plEk+9@
zpGnx4!dU$RN@m0PGjW#*ILXe>&#|eaH5}+#Q66}?zf!X|k>Tp?SrZ+GY}>Ptx&@RK
z>=ap9Sy7FRMV)PkrC3Q~ZKRwGDqkv_ud5S+|Hw{z$;a2gP)JZ>0NlB&q=ZACb(D7B
z+{MQ=9<??PkvP&KtEVd<hEQTk+@{0X*r-QQ%;N`Q$cVn{uO0*?)v1hd`n}(@7rMU|
zLW211PH|?QwqB*)cV>s6H__${j^6iIv7yqsZd<KF?e2iC8-QfLGGzHHe@G#ZE*vBt
z4fgy%$Vo>*&?!SIQ3JT;sipO>c6@r8{q7K}8nnUhaP8NxCx+%plJRjQ&6HGBRFcPI
zAb-U5SP4idBR0>Cpo6{O`fMfszc}zML@GIrtU4gtZ!n?3arQSX1LSHtae7=JewrY}
zf4rciypoV)900g}wD*>4Bk=0Lkkcp<yAS$D13z$*gn3)?r=c)%&ql~?o9_xnR`n`y
zQ5p~zZq%8~I0Tu+=$gIj?(N;&Iu=c@uBjPw65>ei{rZ*97KbbE(E{3yf|7Cv==RN`
z%BVH4$Jwwn<;5xG9a|fl<FiMyo3@^!VS4lP^Vee8rLbN-uD2wHnC)P&WC(ien14!C
z!=&1ty`>O&YJzaf;`0O^8Zk~G0^iWN;UH}BZm+)`vgX4lWQN0>(xrExPCTHb-@mPR
zoE>m&hb%Chg*}6=T0rb#@=J}f)Z`v1YYh(%1F!ev<>loa9UV&!IyySm*4EU4SK39R
zR|AWe#N?GW*R#PFu5H&CN2Sn`z3z`po&!;>YwLM5ogHBCCElx8Iq>C~d()VZgv8af
zZMMYe99XyPnDKgvQOI@Sa>_DZP(YyD>MJ%ln%-b06B85V;~8LZ>C&jjFkE|QXBd1C
zl^vY5+0)mTUl(+kvFNnenpr2|cknxwR=8MPLISe8fH<<2&wW{|yqZLKF#~R%SIbCB
zO4^>SkN0q%`H_-BH51zECqW7n6@?WQ^;IO0BwQE3JEN(2Mx?Q5-P#(4!h5xuMla?)
zHa6DL*@=bcCe7YEm*-)m0k2<&PH7rcq_l>$T^=YmU9LBAd39qq)DHFqWqR<DYyN-J
z##=AB<mBQWr8*TPD1kgJjoFgmN?P(K%|-ZzIt>tC;AY6$Dhj)(4o5?$iWsTj93#||
zljqlL;zpJSb1DKg(M&n>;nHF>az*RN?tZJ4sj=>4IRjn0acqXdaJEvA5pbkGrbV>A
z7L`#`<7TEzlBIB+d497EQc{4zwW2Iu_Aj~=-)yy=PoCqQXWcsL?pCm$wprX^!7r-0
zHS&iG;N8VvW#}`(dBni*f``Y}{NcLlJ-j8gY*}-a?2t7egevmT=;ARxVmoHsyyeua
zA|W%(&zr>j6EU*jGb1@7MVQAZjR;WQAsW+RD*U0^?E}B-2RH^J2}|yrN*7A?osa)C
zgncun&VRF{h)ok_^!cGq??-kudIpBU?ryWo$&N4I&2om)_&~kyOS}xgeJNZ=okxe+
zH*-sF8i6X)yvD)#tFDkOLyNGQr_R!S6wIJE;{5zF%t*<L?LyTI%*DmV40UqbUOVB<
z0ng2H`i_<%g-O}C!;A*>R>-GSJrlpMR&)Hjcd-@Q$@a8NFxGQ}k7`l2$Sl}=VY+>=
z3)Xj1QtBKhxf_ktrfX)a`c|XP&O)1-`dn6%BC(Ft+|)E<#ivOmAtK^CIO}ZdgPuEI
z&yUxN9#b+mU&2O~*IZgTD$Q31eLNs}%^68vUa2nSKH$}cx^X?_A!cxJ5WLi!%k{5Q
zyn3|3Q#X|VEBNAis<Wv|Sufwmbr7>?lEf>Duv({2Z}D_3`~`KDAWv%~yI$Ajdu!qy
zMoExkEMx1=RwEYi<0YTyB(PL9l3#UD>-*)mVtXyd^(k9TPtX3bn$xMK24C{kr%C5(
zs;XL;kEz+g^%VoonH{gM(V#={VO9pHR$KJ&DGQ6Y!;4=HbE4*)hnZ6U{6?7Ai8B+x
z)^cf#kGp0GX2*@deP|TcSBM-OhYIr(jbRwCRW=UG7O(3J&378Xwu4#L-vJH5ZIesL
z1?RUl(}eqA4iYP>A}^b0y~9iOeHD0=z1J(Cc&@^!UK>Wo)pd6`U;cDwR^FbkvjL7c
znQ6Q5xryUjoiq*3oG2+S&Utb?QDL~-b|WbP3#~6GC}?Q#_4G`dsDHx=yqHF^#m+bT
z@W@tGCWF#1<8RL5m&tx{=vB@k0#ZkuODA0F^>lSd>Zo~40uKj-O#}C339LHnj5MjR
zV}>cGww^5$#>yS)1t04r8G&3leomO28ubr|0RWPib*6n`b`#sf9M|8CqKIKTH;y7S
zY^~09u~j{1a?8FRnGNKLtME47S&0W0*7$pSdv8rtAjJ=fI<asIRIeeg8J$!yYA%Tl
zU`e^4H|k}Pv|0m6E+C;RY`Sh9zyGh%zf?ZD2yg7fQ8W7W2$j+;Yh}aTGAM3BIQ>tx
z#Cu==gdt>^VA-`x&jLWA6Ek>2@N?fjOwBU=^9ex701zwZe8BqvtjG==@buBs)7Bot
zvI^|`Zp1llHzAA~qReASLca8UD&tzK{XWgDEN{JQZIKL0qH_f7^m#9pibf#^J*-(7
zkFM%y*`B^NsW{Sah&N3+J;(_M2B@ZWvb-<;a$<oqx^_Sweuv>zg!>skx!kJ=$QhW;
z<14sBjGzhDe&oE&3ONb-@gp`(ia*uSr&9Q-CqxHIY7kS@sTa~bVau21AEwyDt_JH)
zZmkfXd;l_5GT4|6y+3OGa%qx=0Pp7e?(S|8Husb3HsB3ONJtFcXR{Lp05E6!EBpKV
z)9rpnC)~vr&9UvS>g$Bj7S>ViC0`JT`N^!&1Iu^`IjOzH%Yj9W=;PyKCMKpVK~~nH
zm>8k}=cINtAvL$Qj*ey_G&$MpclU!C=lb2D+}x)QaR>XMp`n~hha3#i4L=4329}8#
z7X484?pIT9t_>K&HsXQTB3v3G+^dfC|C-5+__*z`#MXSSvNzOt{AcTf!S5R>;Wikv
zqN-z9bF)}Z?!cg-RamCTt(sZ-d&c)e@<Gq4L9CBwrU{1ZYL?4$u^D37iqBxGrSWo9
zU9!rcVwr#{T9zfr6ycwIKwh`WwqwqrUgd9@eYMc)nyJl3A1vJY&5(3u4>fc6>8>NZ
z5clG=>f3Prr&DSngS)C}Uqw*iaMw5PmA3BFe!Ei7sQfdZ&yb=-j3(1U=8Cmnu*|9I
zKu^z4c4k%1h{Mjt*UG<x72t;f8r-Qjdl5htRaKaHx|U^Bcqhdy(ES++DlW1%GOYCk
zda`MY-B$~U073$SIs%uuhW(`o#-?#-QqtVi)UWAh%-uC*xVX5rw|jF;gU(lbdwa3b
zw%<#z_ahdWsv)Fy0Z}a_l#}${47EH-M(`n?kbhSYNB0}z*5Gms@<EzCT_Tu-_xH-$
z1ty%wIGynHl6G*|*W%%httu~tL2g<OQ#HH3+J2%Wzj+~vf3byUYhhGMx1B(V;A5oJ
zP-livBw>b<5;P1CFN}+8VEJGRjwl?qyWU3LKs`1=tfCQJJH5pQrO<O1y&v!|{dSFn
z)N}ar3;@p$S`P^F1Bt~a&zyxd_~IYBgpHtb@C06pQp_U|gz~%R_aa`6+TJjgPnzS<
zL-~WyC>8{25`DGtI{OWZ9uHCZBnUNPd*OO>;+jeBDY9$$Xu&kyjc$?Y>gr16v&;(Q
zyXdXXAsHDNm3z)iOy?Z$n7K{gyJ%@?u|W#WPK&T{AD=PsN!;fXr*7g3BvpKByNml=
z&6{;)CnwHY+2&K9;8UN$bD55uxyaUwXH5A&f67S+7wr!02H#xh=;$nup8Ew&JV)AP
zwHmTtUv~vxcKIy$6;)S{ZjnUSO59u?+S}U?QnJwrKO*Yv>>TWW{GaoNxWANK@Z^kH
z&R7{mMfa9ZedzbB<4cK6*7N*K4MX<t?%959jUZKA<{)@;&&H<E5;5@E=tY0q{w$VG
z3cmWWIJ&Y^zpzZ$*Nb&8D6|36{FI%&r^4v<KXD~uV}pHva`sm4T*xza;08bW`}B>C
zx3;M#ojWX{k`^uaPaq~g0U4;JR>f?`)J#2pnb;8T1<j!?9#tb&AD>LLaf|CyLj1%Y
z0U@E3&!5j?T?1D($IB`zD*O>aU2*gj<fHAC#?3VbJHVSmV0=u>kl;@!6xwzc-IjA~
zX%VPqqi)E%gnC5LB8RPj*tP>Br45_7<=Id6SGwj~zf_vGnds`uncBL$yC31DCnUTS
z5mB&jnDmo=owUOs<{jg`HdE_paiA==AtWHi&TegCF}EdRy<hnLpCC}HocV-g)WzQ3
zz0BOjCC*!s?#>Qoi@_i<i;9v`6RpCdqo)V*{RgP_thUEKCJG-O*7R3GD2XZd)cOX<
z{k#5ek7JsJ+xUh3HVTFKRa4V?=m_(3<#~*CcY7jxy7hKrpiSC9PxedwL|;Qr(^1E>
zHcQ<G1;rE@#yeQX8ar2Uaq-^<#lv=NPx7GOMOolwWus0)p!d1jrACwDK4>F9zs`48
z_~{wxb9qFi6O&d2(#=fl>?O;uWH#6y9Ar!K2Ps&TPWEVqtUP`NZ$4^lhS#4gpTAtl
zPFQv-Jsd}w>|q?#bam^q^<7ieGDP)1xt7%5M#tkcH5YX)?%5W_CQ6A#4EYo1bnXvR
z^flQGnct+{*9kb=TRJ#6*x1;Bw_-MHCrtvDBUv3B9N3g$Q%CB-n9;qLH?_xW8LkWx
z{sLlR8LejveyB{w>%9mQ$9&aw4*SJc2(~m3fc?PI<=FC<!ZbZI6SgZ~>Ni{GO!2G9
zMfL%g;OpS;L&{Xqu!@SEtJB3(ew}-{bJ*mN{`Ekf5t7vEP!dimdG^hjo*+kF9ua(s
zrJtkg@>*fL8cMSpeOGG(8Q5yh&2R@x?gpPs+s4z0N~ax!5mFc9cX;$pcgE$>K>-dH
z7R!n1lDW8^h^VQdp)c6lPc=hG0$cB8of`kw{&)iqwL^YK5?8Di{d#j&brWdXw)$QZ
zVJJL1>$FX4!|}uGPF9&U?$FRiKsZx1C<Q^93trVI{I$Nb!^OSu+nZV{fB5X?9C(xA
zc;A}oW)b_fW3_(Ke^g&mLU6UN5M-n4?dV8&m<xy3fBCXLQIWw(ru9=w%gXcAg_e+9
zt#TBQia-qB_A)~*d{G%tQQUWQJ+ys)d;O)Z!uKjT&dhWkF#6o4frS5FlB5{!I&Q!z
zripaPG59Rx^y1>a$Jc68$ObbDVi=4XyqBL0278!Xoz&}#T%wOB5o$O)5;EQjaVgC3
zjlC+He;XQv31=60YZqc;qGDYy0(%^44KV3oh8*c!jS}tU4vJ^B2K0=KKoODd(A}he
z;uD3+%_#6HadL(&5k}BCJmkW*10(cLLix`pnB={k1;^O~^YZf8Bu|=puvy!EwYM`e
z(jAz=fmbR2Sc5!^9`E11@<pn1n>&8KR_CV`U81USX?BC}4=}x|O=%U+m;LI8nriJ-
zxOV$p%UG&P<@4#Z=wqZ;CULAqO50^$8zwdTrn<+<YAIjWG3e4Z_<A(^I={#2U=)oE
zIsqZ=b2=aOif;1e?5`!EE;~&xVcFiet8}*zj}Ik5?HP$_%<coL)n>hK7XAA4(znZ`
zuh-s54z;dY+4x+v9ix^X%?h^MEEy077ZwjM3C}`yVueYz7qb%)ms4);+tms20W>u&
z4lAGa@}5q*>0kPLNy3oli`P4gQKH8L1MuD7DfbNV28$@zZho@@vGipL9A5NA2b!=x
zm?_rkkWc7oGHS~bde%B(%VM-;c?-K4jtwd`*fv~?dwTA-86Nt?GjkTRe3qC0uT$sb
zNy58y`0;JI24>p^W=R$aO>_$N?UPcc7+Ywa*TA-BD$xXljHP>65D=tg=3kPVYmRNo
z^riANBAyQhw};*re)G0ix>U$$gWr%SM~?|&(@yj#X_h+!TX@z|Gh3G@u_*WC%)dBF
z3}KwAM%C6|-5rYAO>-M0@K_3bCCplIJWWt0;S<MTV!E6XV0ej+6>dE|=<Bl?YBS^u
z`40Ic)vUJPZ*=$dC~EGwh<LecVT+EwEd2IA*#0Uvg5d=xXMv-2ettd{p0{`~Lrp)L
z+twPSr@Q=DCF9%+1rNsRtcg}mJLfPM&Q~ER09|?%>jB|9ydP`Chldyzh%lJrEuNM=
z3mF+m!(FMe@$}No&H4ocn^1HtZD4b~%lr`?-Xo(^2Z3~KGm2~0<&{-gie$7&z=djW
zFrxK&|5@PD%~|u!Q(lP4RB65KG%e+t6<1`&Rk`~2qpwR}Z`h@7BOEPq-thr1^)b`>
z(dW(VAt(ID5$nIMuapT}w%1E{0vaBBT<w22^v+vu`9F^P{UZtZIb8W?SJ$HdR>eQN
z9u<7fbF+#9-kbx}v;Q;S6E{a6OJUc*`B*nEjk#?oC7^>Q8}XQy*3r&xsu|miBQK45
zQQ(jk>P<>_&u~#oM{9=oL%Xs*o2%OW*(h?}X3B+(v-gArYH`68CnI=4+6Ua(xi33=
z;gUDYj=Ks<=yTo~ef?T$Zr{PqkBMmzGbA5V!})`OPqwIgA`tJ&w$|M~y?~SLGM=_=
z+b}G=^zriH87M)-huD;Ty)d``u<UpLA;%vsz=j}|l%V4wuQinn>i^i|HwqioNsSAC
zy2jGHkg9hKPV;XL#X~)8{l8Fx3<K7Z^-L;?r<T2i+n;DKM@A~b+pg1-l1t`OO@q9!
zp7?54ZawmaqLNb33bEpj66(P#xEqFZnbjht>1)AphkI9_)ew@)YAA^lWP>m=yOQ=X
zb@g$Df2l`MC?1mDPmK8TN~52C3R77P<Vod3S=nBs5iqfe^&!LY15GRU#SlN+dp0-G
ze%OtAX*={!<79~?v`^Ldt9#)JS)w&>i1%Rik5Kre^{)E8f1?i$4(&XaK03KP<aw-G
zST{jMRi3x3D(17}cd>)R@*P_(<{IZ$!C+~4j-!R25CNxnW0kL!ao2SevvKuB-zwqu
z<~Z_XomLluufjU~gcF-c-^JLOsAR(!@>6@ST>Q;k6UcQg)GL_@UWA;a;kf1y&1@Y#
zF2eiMuE9Z@VksuZz`X@5vs<QF7D9_}tXUN{Vq5w=NAV@Pwru#0FbTG^s-%>S>#X-|
z8qrBCjH<-Hwh2kSjAi%ET%Nv3|6a>5g^}vN-nNIRu2tW$9>SJ<=ccG%?{NRV<yY&_
z;^Gaq3{6RKmh?D!T5G@rkugXU$|bf3mxkggIMuhbEPs?|fITw6gxBynOVi$+tfb(h
zqT=u{Y%%*fZq2`r+kEnY#&f6h(7ZqA+&hHkniF#MZDdoh&UbSVDzOC&8SELn9xQ|V
zPLHU={wyxe*7(%a)E2x=2<Un?=+jp3JR4_iX=m_GH$T~)eCFjkZ+FcSt!s;oz~kVv
zAB;P5jgHfg(sgsj?W|`)g^VJrkk1-bU`B6<0E>oA=4!g$YAL7ZVOzAjDoB-T9FAlD
z^RJV48k^&@zlsV0!q2}={&c^jKwhR#2Tde>P|xOBApC%BG6$ifCl~zrzZ@?fNnQ~E
zjpcNUN3BDZAu>P4YA()q&>KsSQWICetd^D*9$>J`cmzN!;F0YAw+Ty@gk|Xm2jie~
zbCz8U>Iy0&4gz#t`p!qey8b#9!_Qfsuc1(rPP5lTKS<S8)gi~@sj8}~oK_aijg5`!
z;`^_k)s~HW&{Y$BCIhgtuuxG@pr@)<s=635va(3@nuFNhe9*Oe<4~O3dNODTmppx+
z9dI{_{1wRIaz@ORVG7|heV%jGkSeL11@winZYAV3*RwYKPQShS%JzdK_=NMy&#bMD
zmNp1At`~GVv-SV7{7WGr@8u3^+d*hyjwlC5S&b9;Ux`F&jNE8{Kb8t~b9C&(ZUP&u
zM&eAP*)+&6ukM7XHX|)f$HatzoP5j4$KT(<%IY_IUTCI%uWn2E-Yw4r_Wc*C1y4jn
zTEA@16JEK|UU2e;tl_S{LVKeiCnz$Fuq387jMleX0?s-C=s7H1Bt)2yASH%Ppu3KE
zy*Z=|Q^AENoPSjm4W=61v(L@S94lsyDYof`Xw4-Ttc!dLhxAp7+2yZ+*TFaZIqbRT
zs@LdXPQ`55zT<wx5^@Cda{EU%JEV{-4KHp4H5qghP~sRsm-&*hrY$gS*}gYN|5ft;
z1TX+9Z5)J@#W(cA!sPW?%8i$iydp^8pA|lj&+SahHx0Pp;u)?MP`+(_UxH>~3CWQm
z$>Sq}<ya+xbjkSE|F@xV(1cJU>Z%4d2-Ak6%h=O0ix)fnh3uX-?JYgGw4eHg6R)|2
zYDJzJN@Avl1aFRoldHS9&k5q_Z*8~8v;!oSsb@b9F_H8b?>ei#Q2L-w$H-{?chiui
zcjEXnkJ#3|!(GQ4$yec-y<1cG<5c;fV?rHli~xqdY9h*^vHWg3bnj0)6$htX_Vas7
zY<YX}Z4+<Z=vAjwWnHhX6})|(iT3L8f7}xe&Nl#y45lSU5SgQAy>;<`&+gAl-wGBc
zG%Y{2@stvvZ||pB@P13^q#HqI@bKERAyv^S%`h24)E%`wLU7c*nQ8I&F8mKFBL=h_
z5F3s!Kj;iQO@5_tCA8Xq<8UJ4c<B<Xqt5&1%5S(*(m05v5!6uqvHlVSD?s|1Ji}=9
zS8al`HScjtU|B@ZahCRT#q2zR_5c1NV;Cv?bx-ZXsW+hn!5o|4{?*jwLn95IKdA`k
z+ueGLTSw_d$fXKfnVBc}@kIX>!Z<j;By0I@9RU=x_44Y7@6!BFmsL)KM+o<#lxWu3
zG9xV@_Sl=l%yfl@{^@UG$NkAS@`O%W{|)Z?ahhcFL|g9zRB1iiWJz*~``8z2w{{_0
z3uT|M#2%~1loIZ5oV=^8&u3~LdpYF2U^l58{@lenz(ig+>|XC>MG&UKHD+Hsqp}vT
z;|?_{TkYHN&KT}a?Y6S$X(y0IPL)$NPxnt`@9%5=Rej*(-Z#ZT4365`a-436*y-3v
z_cQ50mDoL>2lLShMJ#!r_J{rK)M+SoX8t(dNr&yZjxy~+kM!ufI(KFs8|(MFUq0u8
zy7{lGZ}ra&6|oMGg9a&A>UDnVxWZDoM)@;cTUI#Z**O#?eBTOH(Zp1=T@yQ(D=PKg
zOn@zRJgL}n3l*T`4>$K`k3&#{b6vLhe@yx7dyR$g(@-4>&1A-l4)1AfUnmJXtHRmz
z?7brwgEw#D$t_Ip>j(FO<Sj~jMS^w$Hu$efKE(A0F0or1#ccIL&oCqY?2RYG4_UYI
zScyJS$t(3G*6C8WozaK&o&9x5oCeY};vBu53AZvo(k8OmWnDAVMjR!H9<TIndRdi6
z65C&<V}0;ZTg~O8;N`N?nvV5(>(dEuPGGNy2Plh$N#Ce$6V-(@rIqk=uWK}(OIcp2
z>5Au`ev)I}N3!N7Vgmr!h|L~DAQO$ERR*eo(u4Wx7%{sI`gp^~e}hIjX=~B11|F;(
zqH|S_zai<L`UONf`<bea{M00M*8kAye6la>=v;l*04lNg=%z!>OP6o_fo6&r1YM_`
z+!ymcZqbyf(u^h>9gO0)sUQ8?+6bx47v9<bQBxih7dPEvk5P;63-X`$TjS+RhfkT;
z9R;3LRkK-lp_6u+H(oJ~R#Q9xNPaqz#YFyaV)$bOoUOO<4~9<NF?1>3lcOSb)*j^z
zFN5=CRI+9HZE2mrav2MD!k?{6J2{B^I=}K&q=UH2#Sg~uu&}qdt!z>Nz&?>PpkjGz
zr3L+MFFD$~ubut@xe`ag*i(ey-*>!`S&(}LpSi-BOliQCich5Ew_}&dm7%ZSa+McN
zmj1k)wwQ7LlVLKoeDsj1?P3J+B5vgp9m67_Pj|ij(vWKf<Z@BaHd~^ml=Do-2wFYZ
zIm_Umr8#JM$#1&0_hwW?s8o3%2hYoi&XDT=r3rK*bMz!{KjsH`d4)?yEcqhzauq&!
zbI+nwo%H+gzLtiD-J1fq?m5ly2{NfH_fvcX)W4uto;;dvsHgujh!hK@PWt#!g&-#6
zuGycd(7u(&K@hx~_wTzisdIM#@8oe&0$0lu=VG4vBT{wm#LpIBI#%#v+%;3;eVNP+
zoxxSXL73!Veg(|Y16}qYOpUeGOz`oKVa@NAe`6_*d955%4x<W3La0HPEj0(q%7K|M
z&CgTIC_&yXrL}z*!6#&((!^Db30v+|RA9^SHU<?QRq-#p_wed(|KfPKO_WITzlih=
zQ|C#to&yGu++UpeRW$F$dDP|&S~G$a9Wq;cIE@IC>?xB7o$)Y=Zj-nZ*gU;$LYKMy
z06(LPg?i0J_l2On;?M7zlY03=lu?48yI49NW_)M6Oa;Au-B4Mw#u~Y1=)Pd)b_*qG
zC;&qe#OfMlF+TpgJUDJ`_qy)c6(AjZ0d+4OL_7kjjOs<4(kyu|UUV>T9nry%gsXi6
zW9Gt!RQ%Q{M?)rQn+vbj*1xLuehzyugc%H@WiYUz3O56LGy<*{GVe3-jZo_jZS9Vu
ze=$}zKLM2zWcdZ<+Glt*<;VUnY+p%#mkvGhs~CWmtNSj!eJK_GYy<Y==ZRGFaCwiq
z-fP)C(VCDAczshPl2<L6Eb(N7H?<_^yjld3uedlSr7kB4%(&iW3WR8WoL)RHY^@y?
z5{3^b#Ve>&${F&Hu7|cl%!`kWTp1||c5ic^HoB?^*J}mQ8z;b{qNrxm8v}f*jLpxg
zLwb^X-@A&d^YqjjsH#B0zplEEIsPIj95hqzoguoy31iaoM9euxZ9XONI#RlFKB<Rp
zZdseQe@akbai+PU@=)y^pRCI7<pEr3K09lpnzKB6JMG1h2aP3f9TG~ChBKn6CmyV!
z-KMrfvV&HgGPB~K%?V$FdC2cdbvbi`5p3p<=rf(1TI%7^hqCeoh0XK#-7g0#mddFA
zXpeAk=H%a#<b0HbGgVWkbK;U$k?Mi&aArN;|J^?!h%|9*tk3$fB<?)OW^f5&Yx9wl
zS2qzLiDN-8N>O?c`th~BcXzYeJ4_S``Cfb66E2rAoaB9$qmt{XtKhuR9N-VU=wJH6
zBj8dGp0hBF3!5(9(JeD~^4xSed~-$ozsz(>t;W#kyW4<sdv$08<@MQ!N0|S>BSU#%
z;lT``Pw;vCNU0XN)#GGq&t5*j&X<`K_>5^X^aZzEG6j!b*}zI7HY+wyZ`;OG7^uGX
z2NY>Ml9yK{C+`#d-E8g}v60YHcm#lyuPgljU{TKPbutu04u}2-kSj!ChQsxg&->0I
z+3mk6<Lw1B=C6C<;FRP1PtJ;i^W_=YtG{>?=Udb(9AYvX1LxN^y1Jg8M9rpdbktY@
zPFfml+#xgUaV!gqPzs(JcPi`i=N@w}RPQn#1yzEFd3ncTk3Og?<ZxSa{0iD>qO6s6
z-R&+ezLyzS5!P_#3sdS8DjZUeP=ay8r=IDtJ^D8S-BIQSu~Snq{>~t~-SA;Z?h(-;
zryF}oNjzh)$7vQsw9!vzd{zrIdiO4---h21)YHShu|Y#lzQW12zkeSYxMG+*E~q~(
zI_t9?7aO~?u~9d>!^~`rZ8F)nfHUyegt*b?)TWhfUO#NAtCFez8ERJ?uo2QV_-W+p
z*MZe>!C8L3YX5)$PAWpe?2Fp1*XMX)4zY6ZY%h-Z4@1t}i+os>#dGl0hl-)ui=m}_
zPqllh5r4P<SZ;k$L`4&|slT;FV4#D;Cug!sTcM*-Dbp2sM*o6pghWFd_CUcupSNZj
zq_2E6)Z8z7ifA`oA(u-RcSEF#Mt5cqr#(e&`zIN$<!U3F%KmaTE-og9h8%<hc$rwa
zq#oSJLxfIqcvxNHD%N?{$E3+O>$^d-*Wu4qWoo;33r+ziXyA1RXt(7U|L%x}HxR(b
zCm`}mmw|>xF?-HX7(PmCVxjXisN+dXVCM9%qtnx?Wz>zZv4`cq<09k4y26sCPIbkV
z%WQHVb!QP63@%cKTy-QOpBEJnk?d*Slhvj)d_kW0DLnkH>p}wymCFnEfj$m9N9W3g
zI^(ifJ7;@un`WMtvx81TlwDX%e|g#lR@T^-^~m&5Cp0zHwAI>CORKk|<E)d=HX<Ut
z!=viHgS)>&)JZ{6QNZZ}#IRm>RC)1yffNaqoSq-wXhQ1iPtW?Gqtq1y`jLxG?pG%}
z{`DbRW#dU*Scd$A`P_Ctkt~!T-Za0f<0pEdnnyw+L^oee#OEZ2A6`;k%Fg*BDl(G(
zF&(xiK(zDO@G2g-uN`cfUA_2vF%aDuj>#CKtuZpLb_SoPEVf-6_U?<u1uVhzildtV
zVo6HOcwy6`jY1i<Wz~reWVEm#tUGP49YlqO7MNZwXB(BNVwsxXRhFp12`ymvs>ckf
z<ucG<9gUXM3z)H}>iGFn;<#T}^5S<sZbaN`dHK`hV=Y6^v6>1k*i0kXCrBz+36=-;
zSv#8aM=a>oUjS9rOitgq_I2f+OS=jIexpo%MWu@}vNI01Z|!rwe!Y(I58yU!5)m$n
zkBSO9$v`4*(2TY=h4y#=!m$oic92Tn{{8#dV){tTwb^!BXIwBWtn;I$<`@_C;J8-4
zw(s81$LVQ(e_RR*ilDuPY^<o;NH{V&da=$DD~?K;c50n>i+%{M3hbLu0u+7xsF|3!
zLOqyGyS{4~1SC|u1f1g?G0e7FrmC>y*WZH3L8*OPf;#Sb$@+Eb`m=(#{nq*w0ji$c
z?Ckc_(~U6ejE#pMhwUgP`;k1pzpJo{xcS|iFC|r){ihNENUzj6Nehc$mgmn$ydKXa
zzI%6_Xc}y<e@PQMDe1YgwexztxCFmkx39KL59(JxIaqMWCn2Hg`rQ4hsZ0+|uywKf
z+u8?N&1!5aff-`Do4?fFSiL-&G&UyBAaOD{>-w1ZF1$$Yvf*keb}`cRA|^%!GdB#X
zmqP?0&SoZd`lAHTum@F;<+FzAn?6EE>z46F1%;wMG2Sc3i&yFQO-Y)=NXuhZ48r=n
z90P_Q{NFAyL)>>Du`Bt}j>GT-8-Wnqnh$b`mP1Z&p38CBZ)}hP{bMXL)q&@B9u~_}
zE9#w{U7$v-+=4fupQ5X4Z8u%#=M409v|AMCjA$QdRzu`{d?qJNgUo%V7{$DeIMtPv
zfd@lOne_CG!AA@0-7l@@0LBH5<czI1E&&0vmhnI-LD2eSP<`^lVs+s4P+C_co4Mci
zK5IaL|H9RZVG>v~E+st$?XAI*80r1%S8jgN?uWzT^nt?jbLJ|F)wkIG-E(UhM#$MU
zbvEQva;7S8%GtwJv81?R$sz7Em7hgf*Wp{*r4&{mwBkGVRY8}XxcJz$-@l{!8XM0&
z-!8W@v#?+V7&trqGV$Va_`Y=~N6E_6U=J`Uo%r^)u#zjg%f)sgsqt1phZ0>Lcj2Dk
zthbdlD)4GG5-EB0TvF1!Yj9q>yGKMRpM(+8a6J*rBYC3@)5dDT@AJAX*6-pN-_JRU
zk~Rd;N5qS_xB*(cnzKiL_g+YzNeTe9UkGO2=G6yp-9qW-2!BdA11dKD-rgocaPU=s
zO-t~xwMA(}M9V9sG84)55)oG(gP5%|IM^l&LFKw78!tOgadi}24Gc20E=o3--Jh>!
zcm_G^av)x_+j<Rn_i~p6juwt!1FJE-8B^r5u)TqnJUJs@Zf-}~evh0`R8{4GPf2IW
z+-E;txW<i`QwyDy=j7*b+-=46(&K46MT_}gamwat`(l1i-u)4%?n4dXUROnzx3#sw
zPx{#n&VH}Nqwh^xwwz>bar<3;aIPqAbzgZb3+w6W8Ed+c^jzKA={Vb>!Sjr2!yH6o
zMH&8%!*~yYnTpL#_Mk{GBq}^V^!Up2;A=Cgmeu(9<Yef2i2D6ml0z2sbHQmi9K;kf
z2dx;g{`}#?y?Ouy@{gBqr5$?#TC()(>uVfkw0kxZP50wLriK-|m~@MF{1dE>A%7PJ
zG7a`S*-m@ko|oBt^77wo;I_o~Y4|C`+Xf%(_PO^w=u0k~Sz+-!8K|Pf#^yrHcq)qY
z&^fMKEBr}2xn<|)YnRY&+ABE-1@xRj)dJRz6tNn@#uu{U6h?Kmbsr2h^Pb1uu6x6Y
z&C{YvZ?Hrldv~+n3T7wVP+O8u9Qx^#fq|~B&vBF^d44_<HWoVZfz$*50HtBn=Y-^j
z^sIFMiwfZm-Wc+gm5e?Pwwc4rc>wIi_-q|E<Bd{9my}f>P7Kf{CX!cj3}pp(AOU<l
zBp63WXI0hJ9~QmV4t35&UkVXd+!C<$x*DhIKwfCxxAl)*4E3M6Ota4Bz?Ha9k0smB
zjC3fo6JBXPVg7XmL5u;Jm}KPgKQ3SQ_iz7`9NdSNkB*MOJb@YSo!tA^cET}Y^|VGD
zF)>m82OGA<3<UEXpBfq(-o0ym_b$lb`s~Lko0>;u;MSVgK81#G>%rzJAAfaI69Ac6
zrqfNiEdGVK-X&_EZl`h5#rE=>^KMa(7rX^6qowsVTjnt8>+yWR2?@!G80xL}$=g|d
ztmM#tV|DlU+Un>nZyzsfYiq#;dj({7&Ts8p?ZQGBHnp(Yo_g}ou&XCK&9<&2#skT4
zC-(QNb^~|ikK`y%p_?tfOHh=F^9y#tjDaGxAm%Jnr6Z?y5%k2w+Pm*T?ndXefNMxb
zLc%NKj>{k_sKDc$Y%B@baNhELufKY+$?cj`@b?xI6)i1LOl&r&KDM{SgV(C)^kpWe
ze*=V@?JFJmUH8%Kn%N+KWMky4yh_)ZA>KlhJ4EA*O;g3l$mpvRBjDU$jCbi2pW^yp
zmFWjouF}I^!q3ki1OP9*+-;IX;C7C;cz;crKb%Rd1kCJ?bUs|V8kMEQvcbb8=0R;&
zDXUvsoz!sKiLH%2unhzO>x^SI<S5&qjaitjfhIv!7@?Cv7aaSe@_I(=eeWt8%qIRj
z1y__)^y}4KNL#b(&qjFfyU!|e5kJ&=;^2l}nx#{}J^1Te7Z{W*J6Ev>&1|)Kg#b$C
zd0;_QCT{0TS&lnHSY-JC(A!+Qtek|zY7~8imeS_@W}V4*<N^bwos8&KK_Lq^sxU9^
zETGQ{rWOjFQ_WDy4&I;5hG2N{R4TVL#9zZ%n2R)OUMp5Ta_IW`^F?y$!h(rAJwT54
z;rM-ZMhS1|`~O1~h@S#uKne*g2d?R+qOYZ{?&CEe<ejF;r(DHOE}dOcavx=NFDZ3c
zQiHUAz>C1R={M*4Gp|K|G~P^FnI5+oVMYcmqu&u$5=aEwbgmev1g81KS=N3Y81uK#
zdWbiKU8XGUx<+vp78WiE<6MniE54atEcgJZR<@u+Ze+l+jSDFiI&@t{_A)Xdtdcil
z=bx(a=LT<E&&h;@Xwx#j^6`<l?6$0Nmb0N+jUj+NV`6g5Y0I|ga#RlSC=HFPFSa9>
zjk358bFB*WUqFic&qf;1tnY$NjMu3P!=GqBOYLEQ9}^vo?GfbBYm^B_H}4!){}K=u
z=D1s;qQGA=x(<;JSl(iq7<TuWJ=x)DIa0cqpEzmundi<vLlvD~x~^aT))F$-*ZGmM
zCBq8Lw(w{DK<L?xRX%$TN1yMgpkgGVw|I!SPiA_wyj`cW3a)dBn!Xf&Ze?6omA&s}
zD=&6<vBMfR2~U0ND?uMLSbihMU06_vo@(4$iC>_$b;+&Jeo+e^t5&K=>G^$>yYQ;s
z`Crw;8+$3$?^SR4>{Nc<+WKsHY~dN@%eIn((_JAh!NkwU7j=JB^^MWbDFZIuC?HkV
z*)^T$53zc|{=xv4`Icd>j_)q2oY5YMsix;H?(UJ(P7W>(o*6kmVu#J_>|HQ>AwIOb
za|?Blh%MzLir}sDRJP#US1Ip{Qc_r|jB>SyuV<YWd?HU$v@UkUy!|2L7F8Mt$sg0w
zvOW$^&MNnf)jQMzn7JwpA3@8sUsNcQrerk@#QrK6eoaI|GJ;-Rr4}J%@4o&)+eS-6
z!_CeGIUnEEbXW`QacQHLn|1bfR||<?2uhL$8(Te>9hroWH!^&HyPW!`8~M%SZ$wOt
zPw#)f2oBtx2WrLLd=CirP_x?ZJ>+~-K~+`v{ap|N4Lf2$0lB@kwXwScTPWNj8=KqP
z`?OKodHN!g2eo8W*8J7!69?Ug&gz!(^2@MP6E#IeY<H*C|9ttA*YnFvi|T1(T~<QY
z?n!y4AQv<ih833Vdpj5aj3uY5eSnGm>bvJYt{OMX?>i)q4!u1%&mX^eb26G{GU+qV
ztf%FzuB2X9BY;}n2d7h0Qr0gzlP~sMw_X{!n^f9gVEjLR<!binKo>Es^D8e(lL9@q
ze;xx+)N2-#TsdV-V_qhU=l>=@(((jXX@wi;%1g4x6WKa#BGP`Z{W?=7Qfzv`ouAG^
zL$NsNC*$IEhzU?kNGKf&9hsbEYE6QETJ~-h+6cdk4-lKp1Sx7XFcpetsj8@}HV(RO
z6&7RF#xab+XRT+Rj@HSxMKD;Ap6)pG>=J~+G4E|;)A2E8m5^ZK<2w*;yAD&GiZyON
zjp~`~IC~TpLIEZvCgv_r`zYGdptAFm^||Ev7=K6zE`2-v*SyA5QdXAYyWQy-(51rf
zk4pzp6)gGgfiaBu005tsarF<sZG#G-C`Jy6&0_^t)}L)>+llGUVkC@yAB3n~$>nL%
zzP}7UU&iwvlGM|goHK4IqqY9JOng@~PFX?4$=SJ(B4%Xibnz<Rmveerbg&oV)eOgi
zvMoskpg=EvCiwQ*vLDr_PoR!SsdcDULv~^YEhW8#xWMaMi$C`7r|C~45E3qlc`?|d
zQj3T!=)||JrG{J|UnPgqLwhGD=zvSUZ)JJQ<z{l<B;43qT0u3FY^b)sxY#aPi7TkL
zSS?JNy_Go-(y{*BgO4Wjp8rs!nD?ck!;Isb-5&K_JS7XpyBKzoDt_D<33dt5p+)&3
z77j61R^i=fByitLW4R=^A!9#rxNEp5WB<^y!x#M-4yR_H#XLAllkhk)$J}nz^%>Wf
z?vnlvnIG?4E(#|%yZ-OUtX^)+Ta!@tp)U*NorVV^ork*7tNSbJYip|@i%+ShZdmLs
z2B5l~iA=57{KEyT70N|Xv%iCdelU5#K0h}yM`0wRsv4UF!zO7^{{zPCUv#2dPVal!
zYjd~7R2$qE$HuHYRj^00-J4;Ltjn>8KmF!=LwP|>%-2UqMK6}0U07n`gi)kmbb~FS
zcd)0TycE5;`9=!~%`%CKT*A#sN*en#qUG+*&?`JUV{l3@qQL%C5Mk}Ox}q*FJDl4<
zi6@YxV~p^KlwSHg^#=K48@;K7{8i0LV6|cIs;=IdQZXpiL6M0Z*f?brS2^db0Izpr
zBY#M1&>?rY6h+FgZoK4)2;&IvNxyJb{z{%iQC4Jhym0?wGiu=^v)MkI-E#q9%jl&R
zYzps`rfEof2=-5IvY0&yz^(u5D|bBY`aC2Em69DU;*7N`d}-xc6Pv|0N_$=f1HC?q
z?D>KH!VbrolWXee!~<Wqd^DDlS~?9rv!%Fm;o5ZNlHvQ~RipF+8cJCS)2DNxZffwN
z5SUBuw<Q11(gSZREk-IwvhHP)d;J<(diPFpzw&ddqy>e(<l%OG&CI<SVged0{%`az
zQ6?uRmtf^9^c{Ao*Hn0+R<&Go3dOqC`*j&pS5{N$?f$pkNImtYJhHl4nDs?m=24`3
z+=CM@hxLvD<c6a|9cXv>G#-T?dVcM{UtIy`-wJAZI9N{Gq?GzG+1O{5@AzS@GU=vY
zQ?U>bsLuFizu6N@YakJO&b;B0fk#W*of#$nHcrI5Q?3cQ-d>P#hq({Yeq<_6orpZH
zKcwgi#PrBFd+&<6?YX@UjXOxiV$4bt<IkR-Z>N6v@F9ZHFGi~r+cB@ME%Fa&($_FZ
zr)B5JE$uiDE1}%4GaF=K!_W1Fp*L5#pQ>+cpdZuIpAVh}`R=!$W66#|e>TeAo}Q}(
z(jb*c6H`+j=9VmDtQ=j^_cT5tUh-(uC-~JO2}@#CW8;1=EV^<lCN@rJ3=1vJQ;RhT
zYG(}$*;~j>0pLx?D6`h%%jl#&4Y|Y4B1T%G!^agr8+VQ!y(osY1kQ_qt<HvkIS>DI
z#xqeqKF&Cf0`yE3*avAL{TgxA)5R!$w3lCFc?5tZVDZs|!|2U(Odn5Hz!I}kCbov~
zJLxaUCk0|c7_UUFy~lt@pTGkd!j+K2MryWid62W^YIUN!lGK$F;7u$MhvmKU(O7E8
zz(Z+sd1G&3r&TSH1Aal)k$a93C#1L;rVK+$o_G5JWtME><pZb|qsDsD(xy!o)3EH8
zs^%FO8ElxF0NPeSEQ!KuGa@7R$+Lr-Y!|O30!~4X<j>cz{95t<L)BS8HTl1P-vk8(
zm6j5bF6k0b5Rh)9yHmPBg^6^>s8IuH=?3ZUZt3pPgFPR=_4_~Pcsw55#<u&uultJk
z`*k6YR)adoe3rz0P6-fk?d3Ijh%Af^`nA!O*3p$$PFQ2SJUpM4f(Bacb;*mtd!>0r
z?R|D7l!+srebj>k3u?I_wp|dsJfJKi1`Rrobwqco8OQL204QIsue}^kuMsIx+v52}
zMI93<Qk(z($!KnEo|`)l%A=C?cW&NS3RL1`?kjLxA5$ZvA2(}{r*BtIBR&6Adndiq
zq=MovrFcti=qr@zR|2zBF0x8jz<pGs2nNUA8S*Flb27Y&vQtu00tJA?0+*x2=LWr#
zQg#6{hyA~Aes9cp+>Ba>zZ!E5wu*Pet&5wy%1L*6q({mwvw0%WvRpYGoG~(NXpVvP
zYze2MLtOm<tpl!-l-$$ikbCMp8;*PyZO4`K5fKrieww^(Inlp)-ZazMO=cC<JEgyd
zJY%&pz$o(5uhZx@c%z$+fQBYClXhSrHH6`c0U0jp^5Ak!?6crXY|FMgJOr)8?jr9)
zIow}Ei}G4~HEd4GM#`f}I{PPQCpxvs7lJYkr%iONA`T*^U+ANGPW)I#?=Iy$GGpL-
ztN(K+a;Rif+wn`2!-E2!)m2T&9<IjYQ}T^#>Zq>dk-4g)%cn}Y%94;~%j&j_b?BgW
zlJr^~?MwI>hzGMDcK$jB4Cq79rrngH6vx2O(3?|+h3o6>#$>2n*o2qYmBPIp&K~EZ
z<C7&zO<mJ*88tzIe&ADx5sTYb+>%E3e);!6;I}cBS)*^Nl8d$MtVZiCt~*XvuLPb|
z;0BL#Vvo-o<#o!X5Emk#=NJKX?X3;=(g9sTZ3c(rwhGre%M{eT(BCxGSP|;N?JNG8
ztvm0FBi5yqdH9zdCX0#;wYV%0<=7Nt3B-JuY1vkzcfVu}^mg3-b{_j=eqerKSVzbp
zTGTy+(#ts7^Jx3ojpU|4Kpe)aQ~kHsIPC)ypp%eCBMRE+F)Eze$;s^Vf^-cH*T`%j
zf1d~{vSu0v4Vw$C@A-Eoo@EaFeRibZTKg<Julf~1#Fd_DO~os>V|=TpcxGp0MCp6T
zI8)RV$2R46KTZN1Vvm(HaoXVm0f)$c<_(NTK!1@oS%1qArk@eTgT=?F^y%*x{qy%R
z?;ZEeb0Mf!D0t}_@X`sbYX2Lk<h7mQk}wlFZlz$L{XC>n#{U;MaO;*DllS^(o!(SR
z_9((%?F7)|?*Cp?ubehBKQnNg^>c_EDRI~T`S}No)Z1jZSpWM4i(hX&*Lyl_`tM^t
z{}jIU`18hpb0s~|H*as3HMscQ1oui}EvZz&D7^lAwi*%k`&$BzY5M2FzExTW%_1pu
z?C^nITQ4f+?46tsb4pFWZ+}7j@3q?AJh=^KjJSN+J5$Y`!FE}~7+Da`ZF6HlpTYR|
zn+ETML878}n^-6fXMH>s0aY{+Vz>HU6i88C6~N-0*Y}#w7@BOF*T1MYTIOaV+uhAo
z>Qrd!=xx?)Q~Ix56pR~GX!P%Khy^ek6GH2*u5cb|Vz84>HL1qU8JJ)1W)IybavLB+
zlqR(75%PF>?YIY>M@RLrlTYL8D*XEQ%eZw*b?92?zCTa>x7J!rw6dcbPJ4L7@VZ|C
zq!?b!<!ioTZ@5noH)c0f)BAtqAwM<9zVoKu#fTP>fB_S)fByt=N0u?Yv6h7Fbd#hk
zbw+c_05g1NI!R4MdRv;y`EgQpgk2_|vy$u;KaDlDLwkg^h^g)K_N<KKky5fbiNx>a
zk9BJV=EhAE;)kd^;G{oBjc0?xfTc)$JHZ;?(!f~ZD3q;oE`EDC`-#MSwK`rw#(isx
zJ29Ocl80kCu_=d_wa31O-JRc8cHv8%X8yh*b7n-1Qzj`XN^KjF6)~@@=!}}Li92lP
z`aDj5b&gSc0jn|{^Y$cjvBv+t3zSj3KBd;93?)(@K5O;_x{EP5O{k6~8Q;R&RcC-5
zG5wiXuw>z!7vp15JXF%B$0oOlE~~AyQAT1s;=<P^^8hj`vcAPz&FC%l#m*pWIXNn;
zOZ|{)`5duPj_)MQF~+Xu;gIDpXf0<DSh_K=hdm&(uv@B`pZnu`)v%Ve0VAGlCGf>~
z&cER#*423{;R3#Tn#7tPo=B7JUtN~C64^U+adfL*G==gu{rd%7!Ud0#YGn6uME%4T
z_@xv7cWT^v==XFm`klkhyTOY+A`Byl=)`QYkgG~C^LDW|<Goxn?fFvla*5*Z9}oQJ
zbWmruo3;LvHw8D9>A(1{KZGzdMI5cJ>3Y9^$f9dj60BoAoYjigfOy?u#|lxWjN4Z;
zS;ylGsggK^2{3=8Yv0~iRD3hRO_Ch9reUh3P6ioW=H7R%*Oj7kP}b4dYA68t!0^F^
zJ5*Tbe5s`@YE*Ll%Jc^peHe3ZrYCO}ZBUe54I=ZjvLRuYD70G}{Ev`;@w$nI88Z89
z4ZUMml~|?ue+LPvk@R)BsWTPtsl{>G*tXQT8xCfOR)KPds0^30!nq}3vXQfYpOv~Z
z1IBltj=Mjtnx>+8f~Ju|PL?f{am-E&l;8O;mResJK&Dq*C1K|8lA>E)S}g?*F9x@8
zcFpu;Y1EkRo%WTT4LCo>t4Dt4qnLip1(%Y`M5xa$HWQFN<5mzAji=-gA=sirhmjK+
zA}38tOPf1;A?6Y<*&?$v-2uR*xA}jw*dF&6YoDDl?1D>u*pq#e_fxW-@Y2(87BbqN
zFIn$z^Tx`$FC|>D^xrV{Pc&T+8uxZpwcUqK;8}^W)5OtHmP>F_A>z%<_OF+YT(9TK
zu48b69PC-fuu|$d?Jq+41QSZu&W}9Ll3gk~=g#8jUQ_)`1-kWivXjuSYh@P;BQ8kS
zi}C6_rFF}|e~dbofrGvs+al!&?73KWYytgC&M!>!QsME`CYOzciR8~spUF4OA$r0R
zd@dqdYzU;HgEC^;Sf{^5NZ64*^KThCTLl*#8TIT~xXv`<dKntF^SxJAADj07M7Tx7
z+u+aRXQAJf)covLtDB0yjBqE(DV;_$P?ndy9-AhPh<)u`-v&ilL@o1FTdmpXf|K1?
zvbw?4b*eijcLNy=4ZUe7D%@g=5-;LVv>?%pY<cyY2VXNuz&o#C_l(9Muw;k2$Mss9
zK8&t6QwXO5f7r&QL6=xJMaZGjCl{_sL`qR%mM}cvj5S<{l~UbA_Wr}aa&#aW+_@pY
zE%U|xN>g_Twx~VD!^f#HvEn(&G~Q}WH62~`MQLL1=EhGrTcJZVz_L3!Fp1`r?&WBd
z3tyj-16^$o^d7I=ZqQt`z|`c_@u6GKj_0^xEzq>XJ9%oD%sq09-EB5@3L+Rn>_hm@
zHm{dR??+X{WbNd<4v{<awAZgG;4XGo0x^wVPDqPMsgr*}VD7}*+RB{S<M)gI-F_Yj
z$rc8wX(6f=FXU46iDTpG2<i^PqwV@`7wp71&3Dq_F3H@Po3!SFYW3e){KS**AO?{o
zo}KL}W5@LwX*s3}ntuzenqeG{c2siQv$WW}61iTeciRsD=&K~Tzq7pmZeF+i)^1>5
zMS>&!Sw>3*G?U~60y0uA#ypECAuolOx8cAoNIi>?OPZqG;a@J-Fjl_j@mp`_zo7F=
z(hZ#EvQtW|o@wt;;~&d*oE%Ge4yLNve9`a!pW83q%Coop$iC*{H27Xlsy|Qr)b@r6
zeWqRlgzNNw@8y;j6X|U)l*yn~^(Ues_Me}^zQ^{g(#L4zDAVEEht{HO&;Ju65kp$^
zD>ba~gQl#wz@G|(H(9@{irCF=2{p$HDj`UorYX_K;0Lu?utI~mE<gPDjz6D#SvJDe
zr^A&jP?dT*jzrF4v<=R$eFhXf?DzvLPt`n5Fes&tdMCu+_gDPMH<*n6w-@l|2jk@6
z1}wlxO{tW_SzLVRew`nX;+NR$F(3TsIT_)i46J<m0Y>Wjn#nE~!++`vwX<I8j4_Ll
z@883_jL=%%U^3Y0XxKhYl7hOKgx<FD%%ZE;l$h)g#A&G`+x+jnTD`zE1$8Rjbo%EY
zNX&7&*$tbS*8=U`$#aB&NTFPdcTZDiCvA<G-)73cfk&?;O+F}{38RX3&0vvIbIpk&
zJ+W$}=@wT*S37fs!ONG9)KRw$|GOmgeACT>?l1>dtDRS&4GOmV^2OVEn(UYm-<|9f
z+fG<VZ=dW=-4>RF57*rpDf{o^<UjxO3ow>nm{mR<6lC8>lXA)8za;wA&M`O5ujUa|
zKo}!wU99$x76hnp(ZpE^Ali)5D{L{tn!M}k93!kRlsYLDaR`5XW7C+JJzG`T+!i;Z
zyi-4C`rfbKgmY#${`$WYgNrNhTa08mopj^L#{=J#`pmw0Nl<1hS=S#X9#gVMDzh#o
zVcdJMBdz4_H86PISKD4pSJ8}%QQc+sj~W6TH{zr|lM%BPuKWI9QIz42rg;R}pL8pu
zk!WU<Fun@CCF!fl@Kg29j}eMuUjKa}jZ9n#-I1nd-F3-j9%####eWiJpsHC^=oQr`
z0Mvj$)t6JzTC3BVEeN*^Oilsag8zdU9J?Q5v|vhvnBE(Bj$TDf)g(&&Uxfa7NV~@*
z3H#pSQmh>6#7-c-VYjLw+pxF`i2*i?&Ft_{`qqp0@s7mQp6H*Ac~;mwGRM<YX2v9`
zv1jD`#-Ao?o0NP)i;}keZ56-!k4%;8SzDwjwgy@VLR}*xFLv~$7ux5yQ%f0E#SuF<
zVh=t15=4JkKO8!utM@dB{pW14dV+Cwhc#~bRm`O{@)dOtG2h)sRPH8e9k~q7%T0QD
zk0KEKkI+=V#Nj;^xI0TjA_?K-9Zyp&L4OF}buQ3gWouK<|3@~aH+Oufw5lTYksI6(
z^dTTSz9YI>N+q!PP6{UKIEpN0!291L1wK-<ndycL`r{3+pNKKXiND_<oE47-7kYud
z<tqw`Vv`xJ>HGMq<13R_4mG9$D{Kw_igCvU8ke*0Bs}Bu!<$G6qZ9Kiq$>bC%?Tba
zEWzBzI}d<Vj7AF>5ftncfC54>ha*wu@yX-${^VpB%ye7P$S7Jh51Kqi9D;_Q8W_kV
z_vXS#NonM2zkd5vQOmPVm>CuyUpDnMX+dvdPrx6WJPQJ_C`p1&fdx6w1HCJ4gMxzA
zd2HM*avRbXXQxW@JRt{*;$;0jJuW;XpxvpIHwFMP)KTUpCf^{x@X7JECQa{m<P%?6
zesTYNdHeVu4&*OBaF4&fAx^<eb%Z`Ana7y$EhpQqm9&&3Fz6&(8sC2LH1LmR>I=N^
z=~KSau1>BJniNlqffNDY@#RXiHZXX}#>PfTnUR|MGc9f2rn2;8eM1CW$QxPZ?d+_l
z_xV086&2idB&)c%cx{ckGOpolZhv>KGOT3t;(`}HTAa))+C2<EJtMtPr@ni<KTX6R
zn^Z7g)$;P{azj|yKv7XvR@Tu`SyPi(Q<R;(lq>H9xX|!}sxvbYaN9-_9Gsca(ax`{
z;XU~|hm1UIp?E*k(-Ky5)oLP9%~0)=N|*ek9HZV>yFJXBT}NY9omZ<*{Kcpeq3fT%
z{BspF%M^^GC4^m+%sz^w!1`(;c=Y~qqGS}KIZ=f_mg#{UWm2W^W}=iQMQU<fy!<`j
z`TVNMl*;L)S?~e*PF`6{OF`isCd}tX{kp(CvF|xK>|iN~g_??LcdGWRcXQ-XCg^Eq
zJ9@af#@izuBO_P`7Y6RMyJ?kRE<NtCF38VB)g7PCkdp3}g-1nQ?Z)ZO18zYp0ZqOt
zrY4hsz#Kwv(J*YZ<hQ(d><_4H`*fexe1E!e{@XT}-CtWLXe=^Kv~nrM#h+5=!{yN3
zivKau>fwE;f+%bdl@$e0zEb)9Ko_lEW0M^-ZS8Tipp>=y{c)qbN+s;?!^3QsrF&ar
z0E!kw1vGDf+R=8*QYWvWxb-NNp~8v@nEpFE3CW4KH+H~~_f1>A!37}n73oy7fr9~T
zeqd&ivbP7Y1fymv;t+EFQ`dL;i{K=VOH8b-_AJ$+wzaU}Ya5U${zO(%>HtVW_Vx}r
z6``lj?p?fj-?R!ROHJi;yuI!1j{xE41hBYt8^u;x8jmon+s-#h$)?IZ&TPG}E$h8i
z)8u#NOKF4}U$C<3ds-op7suAt1qK3a(4F5+BGILm90|bJ4BCqB&cg5Cw_<yrXZ-j<
zt8p_F<}<r6aaOx<9UGgGVfZ6pc9x`EV`Og5>H6}dVO|F%Ff}t`Sgb+o!^|+V^Ze}<
zA4%X9-SaH`oFl`IP=G<;ds<#@+TFtd8s(`Yn?HnvkOv~Bm4LRiH(k!a%_5gKhV|%C
z67q7pnDvY@FeC&{Su(Q=&>990caiAibw!Ff(UNe&w^unG6NQoFHya&gH$^@tdDXlE
z0&pxJ<oO|RH-!lz-@XZtSX|uZE+pr*2OYfYy~;+noylbg1VSV0`Hr;2<BV+DXe3L<
z=VZd?cr}jZ(ebzJ6z_z2uCfF*-i|Ktamk0w-M9OMg5CLLTGLLrlQ}*T%3yn!*Rmtj
zj-HDSJhXS7`?cn$Fo4D%<-llR_j1#biu|!smtTleJan!p5|>e=>l-7ZRGUz}rO60a
zRz$JnV@vj9!zdM!?b4s#6pgWVjJj<Ta{Jpln8aEdAAV$ZG>gv%G%wV#vZ<OLG{k&0
z6s7l0MdT-AcV91g+`ave;UnMh*&VYruRtScuu><UeRWbKX{hGqv>5bqYGg~Mqd1eQ
zac-TmAx^nnIQfd_Jm&|g;+EqF9i^q}Vtx{5;sJ|t_hg<sL!}?19}U9*c%%>lt`*b-
z>Joi@1Q<=p+*TB}#+tr-$y`|p?(GGv5$t&%7+=gwnQrS5cDB>qh3tuKx-&*PrZF>4
zpY!W|a}f-N&9SY7t>)&JQC+yCq%v-WT~-aBZjuHa(b{Gaq{A~aI7CD$>MAiY$tOL!
z$gi?5@%|9Wlw+o>w)Xc2KFIkXiaQ)5YD&w?aRUNxa}be}SI*F(ucvr!ZAL~$=5%$<
z&o|`f=i36HmN>b$>y`7}0uc`#746+mJm0>3quoh?LQi+@@p0rzK1y9*U#H2=YEAap
zoMBNYl%$};vzgb@(W=`Fnb0LCK?v@Ps}q62xU+LYp9zL0T@mUskA<|kV{l+`@Qk)R
zF**r>U>^X8&o<HbJ0PrHZv9RZ0lr37R@Ug>LKmYzwRs&|CB@S4z7|)G=BqnD3(NkM
z(E05XLT&a>b5T=ML>3?5isU{^0qmx-fTW|poXp>kha6ot{b(*Stuh_kaNg#QD|tU=
zP{P#Hs*n5u=|1r9i^^qFXD8X-f(!FzH^xONeoT~EYiQ89l=5RXm+u82h350Tr&AIV
z5{TR)1XM_=!PLhYFe%w^3^qJi#JiwV#o>ZMNro^w%YLO|XPidiF9~4*Gt$BK%MWA;
zS*@4YHw-vy>5=Cjx{7h{Z?he1DtNxJF%;u(l*kO`OpO1wWXP$@X1<I`C%%^VjLkU1
z_e4|u>sOd}%~<QlRVN0GsOQ$Khx#ssf!N(%rT#nwTz}=yw|-$n;lB;S?|7-Sl&_eJ
zi*X+!s2UXWl{~SP&S1jrb^Y`v`#Q44WqUZvMCh@E)|7)?bsy<G*Qw^3fHD?+-RY$k
zwa&AME=RuPHiNV$gPh;QE_Y(YGD3oaGD6eyN6M27-gi^A83%qN_db8Bu@0uKV+RMX
z+Y*E>hr(#VywluHc1<%Jh6>WX`TDgVi9{0Uc+%0(e9TcC;(ekk^Wg(h7j=N`s1F2o
zzQ8Ta#7zI}?gkCaJ+eWXb{KvuAw}@Iw^W%4(&qHBC^j}$0Zme!9iATTr-*^fAV<0O
z#1;TeB?`#FcAdqIjX{u*9UVJ7W{ium&O%gYWc&e(WC~=zJ@!~YHGzAy=XyUWA78Hg
z<b^IaHnsxUWefTBWGQ*D*fO~{s$I_esAy?v*$355oRQ&4=6*1!Z}G88d(mT*$^b*|
z3VG~vV><ABgOKhGe50<mHj(+O{8thn34Z71;zEFfCJqAW`dXPku60~&jKFbksdy+E
z+-7rg6J#janLIT7iOWWg5Yb8aIeWI8Zq+YaH5HZX$zns0>HJ{{Y}Bxq5tDl%h5#=&
z?jcZ=Oixb(r30^E!>8EmKWAqf>;BCUC)#4&XtmcG$Q^_!Zj=C_ad`M>Z)tw`;dFx+
zKPL^^puyLDXQtL<t+j1D)5{&tnpdB*!Y3wrdvIy7H3_mbVxj8Afpd6yztyrK<Uo#P
zRr-xQk#Vc?AS2Cmmr=dRzl~Zy4cNtchpWpDTavP^7$y3{Vp5*)g)|#uq%vV~SuSV)
z9-O(@_bJkBV>m}Z7rNUAaMDlQ>TW##sZsO<9=!T&;u)W+Oh0B(K4!s6_y{1Qos!-a
zHBFk@ofpB#)Dsa?auJA-kJNIy-gvcrCIolb0GqR3l9dA<Sk|k0_{f$=k_siDM{uq|
zBS4wFTvcmr9W6Mbgh558^X76;1h9zvZ`EX!Dv_8-(H-pUSSc$j3wt&X4yK-4h<MfW
z?23TY1S1uUD52qAN>yEcJsP-bBh9@WLR{)35i&6&uxJ(~2kCgc6;q+>obUh-UMLY1
zidbK1^>Z-d&<;+`=jGz!;$(_h$UAigEvqjLwY2_ol|DjIZ)g33Jm2?lyBF+DH~IS0
z(t)CtI&4NZ7Gu%;<3|GRt5iru#rV-tU`byha8^#Wq{-r-t1i^{n8FYZc-gXhJ3E=b
zQ-(c5#ANtkQBh1*g2jV|rJlbMs1fnRHE#x|hN?l5aTJKLb&$;OqBtrw^pgkr4d#Al
z%S{fEb}S9^O5;W&e;XG)p290)>nlS=<#_$uS>&$f!(->zt!3N#2SkZKXEkN|S<9d7
zXpjnD_MS%!wGy3bkeunjg*Bizj1#kY;r2%KneIt<3kCL_H=Gzk<Tpr8tUmqJ%dY#U
z5wC`Q2QyU#_sb6zlPHO;a8tQ$c3&M|#8iQ`xeJq48iKbfmZV`qD+4k0c-4g~Q6^(Z
z-rj-@N_hUZn#MQ?OsoJ~tADZBCNfHCV?csJ7eAn<i>|BxSw@d2UAF|?=QX1w%dVw6
zLIJmFq8^ShTit*x(Ak=qnX6yD+A;&EKaVMRc>^9E`wbdOsMr-heCXLebEfs{-(CQd
zYz{?&z51!|vJnWm&4N4=E`t?xbaZ9wOX1cZ0YnjD`tDs5PV+rn2t*WN3L*mm%*Up3
zCRTt%5=t=r<e8j*%LV85Cr0md^SIW|n<-n*7AMUuYl!e-ep5jD0jN6$DXFQmYO+k$
z`?bT~T$+iSb|6N}{yq%N)v=cW@Vq;KEipO(zym`=$Q3fj+lJ6JD`(vnZ&DXiE%bM_
z1Gft*k454QS3Ua~x(Q5v{op=oiBbu&{iyMYk-GocP<I*M*s{CjJE(kEg5hz{Sk2g`
zDT9WajU5BZs_Dk*pNj1#{hbG?F&I?vfu={E&dUsT+BkW<jN^-deS_0$8(rMov!6X@
z1B1Z`Y}=?qeRT$auLA=E)864Y{xuFW=3sTH=`PmQg~PhqZ!|QtKu|&j25Q~iKp=ua
zB#v0x)J66TWJ6kGg)P?eA{3BEqky_Q5w~gX?GPyAa}lIl6&v&}muJX9*(ka+sgR1t
zQ%fuDeT*@nkI4a^d`;}gjkwrhKqgOhX{XZ^cHn2ztZYLA!_8kb)cA$^-;-Z+a&A_z
ziT-%_Fks1ER1~r;<#yq=>#~pL$aCXtZbA(}Y?X}{A+BNKG<i;4D}(?s1?(w6xVqcy
zx&@%+TS>jW`Mtn6jzHveNeG>sFR0kP%TW%HQwhR+XZfQ@$R1&)ub^Nh{b+f8p=#B~
z3)*E6cHm7e%xZV)hSSW;FEk()kkHui0y1Q0f79-3-3(1GJ3J#MDL)cPERFFLw#Hr=
z9qb<AiiI0736n_6$cre?M9Y8JRm`swZIPROhkZ#uY>)hHmKauGvWpZPRDDh)6yV>q
z*vS1?gXPy<5$d?SXp3rLx+s0N8mDgN-bu@f_?>52pB!Ttl|C{U9Iw=<5!pE5)X~+#
zN4Q+(_&5!8#SK~EXoH9*Rm)M6F#Sx7YORbR+8D`dt^Qxw9nGj2zgMGXuhr&+{0o~r
z&3qvuFPX40T}_(>M|nRBq<V(T!?_asY;+q%?w{=oy|7b!pxfGqO~Ug*0x?xue%pG+
zbsg*e;1bim-vv1dpY}=yz}Q`nzvykBSy+(sStG!eznD!*S?Ub57c|@@-!P>}Rd%$o
zk<DApCVaA=78l#Uy|t6R`sL;elV(NiN9EZ%H(z17a*b<%yup$5TX0==T9=_-4TP|;
zb`OGrNkUq(#&I)Ut;Auyuq#KRyGq;-$_>a(fX8EMYP!*rYjtd*TWdtnPRf9vw@Xf#
zdaK4jstr1leL>baFtO=adZ+Sn+XXjRkZ^Nw#hnBJZ2{$X@7}3TnMi)QCc(nImyC%K
z3IcgsYOH%vNp4M1(F8z$MH7(=da4zHr1)ba?)p(y3xTO15i#kpZWt;BmXwqk#E1Cy
zv?hUpi7BRTU;2$@{~q34wZqjx1f`o>wVmA|bySY^Ce=N;q^4HSdxO1}dpm(kYj-$(
z8sFh{nD#}#$Hr`F_h9mzu2pHFX=CT|##npHnW&bNup9ilv5n3JA6>oj0fgUASTYtJ
zQt^$^bG(k>t9H^^wF*?;%<<<_2A}=+sQSNJJqLR7mSvKVZYwV6`bl&BhQ2^#*M{y^
z_XF$9HVZByIF_M6y5w|Du;~-F!2LX<VwLX6p4fn>HH8Yn506t-BxA-5>=NBX2%f%!
z-d}Y$DV?&w?4a=xMZaCNSfvw}g@<v&>;_s5Xuftf-u;F${%5jkL&+{xT#Y4<^WQ<R
zOezo4gdk@6gpG}C!g4U}0G0dE@3=WRhdqu47h47dP;aQ3ml$!PpDB`gWt~348D31}
zwgt;Ayw__N;GVAm^iY7(@YAQC#l;bjHAIe52h4S8hNaPS{nT2LCNDQ{Q**UX2&wPs
zxdT8$F)AuhD0JbX-=)^021FY0?AqGe*2AIQT^9fz2Sg4r57`*`?-Dbr%F6O)^Ai(s
z$;mQZEKFq;Wsk7K9G#t4R#$z_JQgxu@KCZV1=rPEG|r@iho1xNX+>qF61fhKPpI(v
zT<w`WMZHh!&y&%vs1)MZn4{Z>lkEwhg-?b|Y!wdM$g4{ETwMy0Y%(Va$<-o2lI4g&
z+q6*U=AfuJ48dIY@Q9Uu$j0+_-SjmR({6{)>3V&AJ)-`PjRSUv9^`bV;5^da-P+3J
zz9rfY*w>OVf%C72T~aFGjcoSz_GF-n?bGB&_roNP4s&sIloua50tDdL-6zm_J*n>|
zO=&D)wbVCgz8ImfrYV&~d1f3m>Y#7<wo;vboBaL#Ov-lStKlq+DK>$n+abs*lcoG7
zO9~Yg)8Cl8h?Ca3e7&;LZ8R2-jmIZwe<f9}w|<Ojgf1g4&C#}rwTWLRZt9Pk(Q%Cu
zJ?cRv9;!RJ2M7<d#JuCfKp66@dSu<M!0I&aUiB~U;el!tutEC@Aqol#pp*Q**QD0)
zam$>Ot@*;_E*1zQT$<62Q?dnIwWqlbGX3jo3>_5p@LSI2RHuUR*JV@I&3)_ziY9M>
zjqv+1t`x!3G<J{KNZIs*tbz2MB$80OC8nKMTie_4R}sSN=jX10j+@EAjc@|$`(GFM
za3fWKE1{uTUtJ&3jC<As3e|yEz4PHIDLV4<Ja0Hg$H%D)wY0S}fF7@Oe4rns_`nuZ
zQC0@b>aX<?46D`AoJzO4&*?t<)A>lt0!pqq4ppXD#vvfC;dJ~`RGgX~PIy8NONmHH
zOcd{8Q=#q6?$v#m5e*dC-@YD!iWCUU4-f6S6P9tF(YiAOB$NnH2me89L#}S~O;7Jp
zKcuyS;{y^tEpC=;eRXwL0XcOxbq+dhW|lj%cHR3cu}y0OVPP8^W=J&<MVrdPY|MVR
z%mg|c4gk{g-sR4SoED7-G$keNd(ylI<>=Nycu`AQLvCTt)4e&Dn1^veXM1x}{yvAz
z_lwDLwV2~{YaAoyTO1S4wI!u9TQcuK8~k&SU|UGa{_aer?TB%6)%p48sPY!kWrdA}
zl_%=@tQ8BP1fp7YfkC?A(()20!{_Hy0PopmswBq!8#6@}>G#f)$9j0LsHs+0*0xSc
z1?Dhq6)eg!GyU*olg^tR9IJ^#8|6EAInrdV7q{1+qz%CK!?iYi?mrZo442z9J|?{V
zS7Y!@s9cO8%C7wuDhJE5$D*7zTC!SL|Cqmb<2!whB2kat{a4+i^s?jTm`A<<g7#Sd
za?sAcz<J89gPuyL5(}352{TXe$2;@yny((~ocFP9NIrpkU@oW5jjzNm%-Ys|33-Y|
z;dLsc*~vEMJ|pA5;Osjq$M+UvXhXm%_8?2<j|CTdM;znfLy1!MC`MY;jSy12g3bFn
zPxtZT$0fJARxv`vc1_h7v^|Hn*R^aS2*{d$81-*|B<|=+H%zDNsc=IMe=X5C8Lr;k
zjQk_ohs37{bt=+EV?buDyA6w?=>=!Ys_HapVer0|qrUC+Pj{M8S#-ku?CiBW>tC6}
z2jeP>9JaE_8U<J~3b8Jqn8p2IPfl~w(YXm?sek|RsrStQ>QynClvujR_1gi=b|_=_
z4eMVi^C#3YKx(p{y7>kM2Sd3xy!z0S8I@4-i9LE$*TaK&vz~(rLv~-*3>zLORj|Zu
z&Lu9WKfuJbmn<m%0E?^C>QE%i9kci$1P_hZBw}Dcg%<p}?N<hi7Od@iQ%m-z&ruNn
zwfPP{Ph#JekK+Aq=av*foVx=aby9sYax!jxe00XniRuuxKETT?8u>Cb_K^<2GSf|a
zhKqRIQGVMsFj&jO2c-SIy}{7~ZAfGi?C;NMi@gdyWh;VLP%zD)XB_mRM~-3`;@}gh
zgiwQu6aKubz|yIUzey0Tx6C*+N{JegGe0(FbD{<Jmy`;AO|IirlJU76rlfg4dxS1D
zysI<#`?q*xLWCfTl(3pb`5||E#*L9>$D$gj8hAoebs}q)`06AIgEhV51c}O#=@X7#
zCX4K9+(RdFE^<S#9-H{Y#Ex6z;9gN7aM+3imKOlZf2GZQWCMk1F+F-aZxlqp^}Kk%
zaVPed3HD#JiOJLz4EWgPiyIcy)!k%%KHmnNzNl@&{GTU-UCeidN$2-&cbd9kg)Z+f
zSCT8!$2>@lqu^zPrzqz%Uo#xVbVid#N{JLWz~v_g>=@j^A!FpfVqfj|6}uU6@tRJ^
zS|d4y)&$75cMKw7GfNIczr>t(r^`b_LxJDy@bI%~)Nl5U8&*xvXeO>mf!8Za?ia0p
z!-ib-I*r&sk_vhJr9T<A__??Q-QA>ZtQdS@o5A;V*v+u*p}iL6#ZCmP1;k%ga#a&m
z7%;aVY`h&d&B-g2zTA1>z5I)3a!YJZpVO?QmXUvF+(W2_{59k8T_h-a(S9~4?2)`j
z>;w+0O(Bv56t@R+cP*%{@!Ix;xN3Wi79UYV=YI)w;)MOx4f^o&kNFL$4(@>m2Y|zb
z>3gN4k7h~!U?<D$r^cJCR;RvH(q3I^TBZUlSyeGHTOXmB@8iy~E1xn45)in{zkY5f
z%vb7W^*+_w)~`$(F;ygGLbZOcd-#jI+h}#f!OA`KuZ-u{-F@N(WR_-^&s7l$(sWJ3
z9^ex$6_TG7zdO?`Slzj2)5~+{ovk<Dk!IgdHGy*197!Dfx;e-1yffe6i_ff6Z-3a0
zS0M;Vut4KbfRtgyBne)rD?rJ}b(J`Gs|2_wD+jC2v?G=AKWs0C1#r6~7$uc@yrbdH
zp}u<^nMHrMzHT+tA6{;Q#(E$jAK3YHK)$(IlGwR=<mdN(z&@yrjhDBHj1a)r_BQv(
zNJ#Xy7Yf-bN`p^Aj))v3u!4q)9Zm#COv@wTG;F>B>ekY>dhKu=Oq#ZmS!LA;Pu<oJ
z+tJP9Ze}fsB9oUFrYU{Bov!QGXB%>XX{E#L^WLa><4Q?M>7<ktR?WToFB}%-vf0Ei
zHE2<QiVO^z`R5}s3@`Jd>k@ZN(B05NZdM-M6)7_!ijOy{eB|qU_WZ0uN)p0GMb&1;
zp@<FI!gewtdKMP+2XpT)>+T8dmzsC|FbzzDzJ6Y_VEBFgvwp5kI)gTG(8a%yrms(k
z@J>K`tFyGOv1lLgzL_xJgPb~0^ZEX)KJhy-6BAXFakvzLxq87k$s5;$@xDaj7oYJ*
z)_X#Lyapq+(JdS$x>K$S+g{Hu6|Y$E;N$J#L!W}oNGC0RQo_$;HVM(T>hI(VFS{qG
z(pbTo6{m3SO;?6wK6u0@^&!dp%kcXAjki1E<V>jxwakK&WIQZS3yuQ2af0@}5&9qH
z!b*R>VA=mY?<I7#%Az(|;C#twESh84J{nyb{J_cm*?M@-WOGaP8x<Ez<g`=E=SBpt
zaGuxs2I&1jdEP(8`L`FKnx_I+l$DW#@p<Jo!caE!V4WEQgU4|}W#+z#im|bW$5rpn
zBh0*z6hU2>Gx<8>y#H&N-Bpnjebi%cMMp)y7m88%SJ3$4Nhv!!AXLk>t&*e82lgt;
z6~^E7a9RH17Rt{pTq3MgxU*4LhrGTz1NZTOblj+}b8H{fnMr9tfsa>)Rd&x2tp9+B
zgKDU3rz1OVasxMLv}A=xuvs?Hm|R;ApMihkS0NXB6vUcwiVmq@g}lXQ^aUUY1%=Lf
zOQU&eLtXF<HqKIf*3{k2IkT5jZ82aE*TiIDl$KoP!%EbJ^S>*4IL*6en>QD;*Va3P
z`PG^$EVSKC2E@rP!J|^V)<F6VU1+@U&)KAd3#%(A9IhPF%wLSa050-+ziwh~w%&4L
za#GFp?uPuxdU;CWJiC{3Oks$VwsSo;h4Fuzo$eS_&SYzQ4_I?0YQq4U07PL4DJf!d
z7?0DDk&8>5T7zLne?d$P>(CJBg6Mi(tN7?HxHMeV130?-W)W&l*XO(my`NJQL`aXb
zy`HYVay7=2N*mD98mD;w#K6s2wjY6TR5Dy%?TKqWL2ZGjfFuaiF^N4rA!3HRQ1+!c
z+{*n)1tsm{CiH!BLHk!=V+Qc1f?j+UA0(s-D9U4_qX$*N+)3B#Vs&&>SQUgf2`3pR
zG57XS1cwTklDZ-`MEISLc=r~N+dkSZCtD!(_W|fuG0dgU8*k4nR1^k1t0Tzo_4z$a
z-OS-3@JHQpmux&p9it7nX}_%+-G%L0NN>QIILRWkh?8bU%CFU?xO~yYH+?yI@eQId
z9KdQNPS+#3*0b+;R1mZoA=!1R@-qq7d!~@W+bihP(2{@0R19@PMWmJBbc1VR<GYt>
z6&1KY2be*7|IR#nZ$rLe|2E0!dwsM<6%=h=z0<y!xbg?hA)UV7;vN}f=<Y&u*fh0}
zcjTPa@?FG<OuK6I3awmle0_h#I|$;L5UKwG5mx_c?$$>g*F_r8;x6_l3k?j$#pI5Q
z7IZ)cY!zstjyi<APap&%ii(&=N8aaKE;pBeWUd<3h0iBmpeW#YFc{W&RWF2^KRer>
z%8>7zdVYZSU21pfM|Op%4a2HI#!(6~_QGP|+<zTnK;i5B2`Ta+t$fqGrtFa}zkG=~
zju)>t2!MZ@vq59_V8XZ-8=K!Nz3vWy+-IpjSi){N^A)H)<H0N~E!B11t8P5+lKV3e
zx5@dD`Yc)YtYshdHcehW{kqTAGwQw*;tak;2#bRZkFrhNn(nJOe}iWEE<4E4Tl=4Z
z#`P-}78KMp1^(m|jEq6ar|Y>12a6`!U8vx200{Y!QGeZnEySVO3&5@E8U+oW<`i%N
zudUJHFYb)=^p_9<U4X#&0mRhnr@Qr6r=&ce2FsI<Hkz86D8<9Tgi~|&6&oAqGb9{E
zf#Gb9a;|BL7nkCPGG%%vX{()^YxL>;3NW0Cjg2AYb5xr(LV;~=r@NNc)&dtN6QI^$
zsYg7!&w?p_xKpZ{x7!+kvutQsCQa4H)MwD|y)~K>8tPmu8l!<Xt5X0>va4)@F8J&l
z+RcVjh$)%<2SQYik|d4!%CD16(vX|=j9ih)HBE(;N6`I>XAQ3vds3zbmeMEN`15lT
zcT@4Xk5}131&R|FVEo$oIsUM~%gI7WmyMH#YQ(_H(fo$w99+-p$$RCZ7i_z);bYN)
z1g6FHc$hLu6!!<Cm0)?M#R@x9cai#R`kBYewddiN2pKL`uuY_E&RZ~;8rRJQyV!~4
z;OXEOu`kcs-|f#AXB0Iq4BRqxr(;NlrDjz6TwJ6ISQi!MOx2w1v|*OId!39+Vk9rP
zpUIg7iRJ(=b*8ke%=O_lc7<xRkmE*po5l4`4~tU`P-&t2``dDjI*^>5Q-*b~9<elB
z1`7K5pYF!>7-fUKYfa&vQEw@*ofk$+iQ!>mPOlBMYjeejV^T)07CTf;0-p&AmpZvf
z-!+sbM3Cw#6-W)FLRzh7)&+N57IfamHG*!ZRRvY!TVAiVU<Y1$HhONFGe>J{ca7=7
z<XSLY+1L(d4iY##KeU`E^6@${5;kZaY7y^f?*Q{kLFBneU@lm}u`o5Z>a%{A2)m!F
zX3NYiA%U2KiT4@()9f$QLUeB!u{`m`-v(8)GhKCM#hn~b$_*wa9mcuIEH4|n*esN2
zh+OYVNLqm99rI%h>r?dUz}`77Egj5MYoejCwz2Uux+OSFjsqI(;NY$?Uy176o#D=o
zo%c0ZFZ6QR8^y*h*m<RHY^*6wt>kgles1^pc<AHbR{=5RYBfMxz&w$xOx#>tH+g_p
z4{WTSr<*j<;gh?kU<V*kNPA%+Glu>q3`iRKfT{wwfP-VSc1%e{1wLfveY~wZfYEqo
zV*5ljZ>$v5rMokYsH4>$<l{=hjLs{tbtL`%W%ea^<3&Lk0#Tvron;7>cHTo)-`200
z22z0h9V?C0e7Av=`e-kpRlT~r{KLeqFjwkI=J%Wz0DWDsJs{0udwV;qzn_l;C`%hI
zzkLJuP43Z&+Eu!y-LdZU?@%&)Vj<`A<)Hj}*g$Fk57wo<q26r{X#8Twi`w*Gaghs&
z*7@aeK9Ws)`CoKXY1IpiY`yyyeueiELF0psUmY5z3sqNrI&Lu+@Nh&Yx4?dgdXn||
zs)sKvO<gcsHo%lr*ye5VNlX^RX(>ZpY)N<|S`cRW+t-$jr(eg-56`3|maL*QIz;BU
z6e9m<a<UD}YL&nY(rzPIniUzMN0t5ilLoVI)~Bfxu)p&S12X~(Aq8{xH8A#<dLh+R
zJY|JX;A}l}+SXO1xjzrj_7!Pa@L7%dT8E@wM8AUwC=l>TxwF8&-j7-h^Fbc2!>}J6
zvcDi$CCG$l&RXf^bkPx+n+u`(Y+I+TRA)vy!X|X8-Y&2)zP_C~kRsX)3x(v-S{>%B
zJP&~T*pCkxNx`7xgx`JK!{|eNeDX%3vbXWGsMs<eE8g05I(oFOsA#a%r&)>Q5Y=_2
zk%N`YSOHh7y1F{(se_d<t*9$*)N9@@(=5Z~WxQ29^Bi+rqY)Q!ubI%`P}%c<A7nof
z>d_p0Pgy)|yV;{~p#kH96taDFE+X^FT(&UspZ%pq?LveoO|+W#M4q=~`jZ86CI*I`
zM$?yu3p6dk4uw{(7Z^b}&muGL4Z@9A+2gXnKh&qHfyTz**6vu25)H|1ABumXxVt#;
zV5s6Vk@ze<EPh2#A9yn*f!QYmV90xy$1r5xI9QBSi$q-%(Q`6cI~o}|+hGmY)a2>(
z%<Na#&S^m7<KIFb3IG@pZckhOlvDoU!C?3?Jl(*X>s#iEQDAj91O2n8z55Ry20V1c
z1<A`q;aI>SE1X8x=Y$H=$QHgoCi!%qk2XCzc6hz{(T&(w12iVtrl+(835~>Q42j9*
zCr3(}uR0D}qUdJIACzVej~s475YSnTHxpgWx3&t~Zg*-o-?`ssQ1zycM`0`cHU2zr
zXF{;_oClrm15q5qi@_oef2#KjnoNR$*ve5$YS(ifta=5FS~hb>_-{QzUbH>o-S|8}
z;gk%j9wQSY#KV0(@97Z4qoQMbS3Zx$=HCZDkIi*t`^S&$HNJ<106p!TK)peAn*|Xe
ziL`{Qg+<z}X;ucU<23skSz{NTwZ~|7+z1DUVpi6&q@?H{iaDpd(^NKvs(G6&B*ZuZ
zth}qogqfdQnH;Jb`Y&|Y2NCK<&k1ol_}TS4*#&4n_g{2XUho4+B1PuXMN<<b@rk>Q
z97TE4k0FceG7e4wV_gz*nFUF^V!NeNu_$u~bs{eiE8E~%nUeKsxs;hVv#HW?3Bhp*
zt;Tbeky@~JWTNdL?Ay4{QOOjK61A1mD=Wh^)<l`)WS6r&f!6cJ8pV+j_RYJIv9X73
z>*N+3(<ObHw2R45sExIGQbIy!S65hYV1vUIbwQoiRf_txw8MyXd)R~dh4BibO9~7~
zP@rUbx?y{VxGnc=rs^!cOQCvQPB637t5%x!)^>%^S$UrpgT<n2*NT3>cjJkHJsV2A
zd|bnWpD1~G%j>>2J~k9KSenrF!Uwt+9R;xKQ>MxNx?tPE;p|3ds&@aUMgee*rmd~<
zCzDz$GqvrN-L#%hg0-(&w$*P#hP{Wu28`93C*4XAI2`Zk)2DND$u5wV*<wQ$(sKkN
z6NZ0%Hr9G><}B+iE1RNKNcemwyFUG_tcV#nexI8q7Z>YSlKoUKXy60==h7cl@AE?9
z6Tn`;(te|*{apqwNiTk$$pzQ-SXb>3XHI^aFlJH2*-2R$2lEYf^!*esxN`34j=%>?
zo9R|m(U+|DZxIn5LMS>~TGbp*nGj3@)Y*=}dj@IQ(7)x(pPl5WHRB;MM^Ee)L5v5R
z@J7)=YaVqr;9cW&6<UWxcIW1%rKK(0tZ_Tn4kY3$Rv8s*#4!<o^|Xzpt=Xq-J`rwc
zubi)hBaZQ6e#U@xRdX|oY5IH^2Ic3q%gR-!7NSPfhnvT%VzIHm1_aZhkCnJ;LwvEK
zh5O}lhGv&_ZZ7b~#|O}xM(=T6s*pB@N;cKahemeiU?x!xw>m`!v7hmIbd<)u(N%o-
zuwbZH=>3G|ML@2xr&-6HMxr%$O3i@UCCE#u55OOt<xeOg#UaSc`kG_I^LrF7`^|D%
z<~>vW@dxOr)Ua^Hv}m>6=IprP=ZmZY><*h-Dn+_P6z~C0jJ@zOYD|Gxr*pb^@(peW
zG+j#&`Cd^`*WgiO;JfruiRfy{%1VO0vI}66%nAk3DCF+lVcG4wP(d8i*`2OwZWHeF
z-aV#eCq|O8=S<pR`px@y!MGJ*06_8iZbB;0(pj-k!()x1o61~0e$(I$6_tvb5*aCu
z$Wtbq_4L31r)1YJ!UIg2meVtu14%c-R$O4IR<+9Bbd7LfYG+Ay_OaFO1b&dQr7>7#
z$m>xd>*HlJr{QpQ+6OGAgXl@ark5K^x%_-=o|m{jOaP;9Z{!*txzY4RFi>4vv)b{H
z5ncxLFq>Nz*>ich^FwoEc6&P#8C@TG3M~~OxY>%+9>?v?W1G>@WkCKoTjLgT%FdSn
z+~&G$Nx{bp>8OTuzT@K{+R_I5)i?J$aL2E<UP6Q=HXUqr!6Kg&f!}#|H+`t&lX0(o
zPF86g@7Jn*2uuzcb{jI|5EX?RfNz<*P`BQ7QQA}3K-T6a^6Xn!L*Vy8g;!pO!q&EO
z+`Ez6wmRR$zk&RkClvOUnvXj6`7@S(FthpLR{Da0J}B}VN&!Mt-nbP$V`3lQn>RqS
zlMHBPRDyuk=BQpJPJYcFM3ya^j2vU}IUMpQC;$GO{NG+cR#w*9D$@;n_%R#yuiwA*
z?Cnd~TbO8R8EI(`7za8#%Vu^dDO(sni8RM=@K?s|SW8K<leTSan2D{`Z=zS&6o46n
zo#4sr!s|U1!tclYN`uJxDTo_@e&ct%L*M<tiISU`e|mOANV-jAK(4FTh>RyE*H&*O
zz>+KRi}&cVx1mQp>B-qwTq5Wmd4`YS`}(ET*l<h#ILn*D@*{SS$sOcx%VLwEwKq4R
z-(`FHJnCd0ly(=kAelXDIrzB5B+MigBh_e7wZ1DWiwZfE$NpedcyO)bNjIb?Zu1>x
z+;(Aq|CaB9VHfW)M)p9`!Q&PoKilUwLuW%BXf_&&DUoH?{u8@b=$8&9rBRWQNmLk+
zrGVuQc7Z+Y&6>lkC7G5M5g+$6?aN3TYfBvFhd)=HZ*I%L0-B9;AM4+Qc<ierF6c(n
ziV)sNtD9<QPzxL#1p)u_nWM}1Rb186Q|F;Jf@J2v;o<RE>e8vvg#{5Ju-<TZXNM!1
z)}4--+1t}9Iu@`eO@0x&)Ne^OZ5#~#+Sqt)4T|yb=%nU{l{*fqdll>%lp-xHzRL5i
z>-b~TaSU}8vioY6W+P5oHP2?`eUjO9{abAC26YRiT`lF`OT{_U8rxWDv0dXAyv3d#
z)UO=b8)^VMq?Lkjxs}3mhh~Y_<b2u!o%q6jRAvVi(u9SCfGk^7yrW8WJ6jax6_XO-
zR9WEW?r!fbyWpCgl2UVmYBrDTsjyxUc*FML=}-CJ^LHEg1`Svz#=S-PrFZ-LwlmVt
zbrC$oaGiR$jJ>@%lj5J{<q}0OC=8bIQAuf7E38>gcZfNlWqotSLfe}r4VIjixBswN
zfN$e5*DqMs)t(6EU#ZTvMC0qE!+MtmIJ#yM^-D9bGXxCOk55VY4VITArFw3Tif$}`
z+&#E4Zn#AVITUtujJcufw!}d?GBOfOP9)GR*PRqopqi(>4aV18<Y_=Ouc4u#V0Sn&
z@J6Yk+EW62F44Bw<XUHifU)Pl%#3L+<20lkj?-HF!2s6Ka2bn?55bMP)Xl~mnV+w7
zqhw+6S-822DB1+Q7y)l2&o0_B>bjHWXCil85K0zNQc1C|LMTu8QudY%?YF(B_6Li<
zI=Eui4#EUhcP?6x%{kkc4#qs9;y?EV+e1eW&M2g1^c0?Aa$j2REs9GEl_bL)D20**
zDx$2rbta3=1^6}k2JR(Cbz^-jJ|yyXUV9PG=s8<g`Lzfp{As$2T&PJAVs_<BBea)j
zaOP*`?H=xLf&X&f?&i9EUm`QMz#~ZM6OXB<8a0tx+wT{QGQ70rC7hKNWP+c5kKoXN
z{jV0exwIsk8(Yz8O}_^RXOYMuU;locI=y1G)BUN$#N_Ll1(dh>w`ZYHZW5^?4W3y{
zzvkEQfuJ*<q{3S3=Y(Tf+0W58MtX?Q&?rZOR5k;aKh|S6Tkmg}*_gX69WKWeY3*%q
z1EE5#%U(K}jfKt8NR_uNkZxrR{pd4s0Qw_EdwX4!up$>PZ%kz5o7aQ34#~o2w`E~O
zLc8s^N8r@m$z!$MZ**hKN7_=SxEhUU%ig@yeyVXRIRYwbmpx>b89eDGB;Y;}gbDbP
z&3?}?1qvqy#Kew#coj$_re0o`^9iz=RH!X2<A5oqxOm*`=a>qx7q+Lj`zdT#^hH6q
z1|Ne9JGT%G^Pr|wXM@wznhyix))n*LE{VY`AKn|MI2{_wH8b3ZnfQFWr@KNvQ`UcE
zeEdzLS^@FRAOajtc|WiT4kTPz-=P<J8cC@wR%`(-Hqn#mu!i(km8FLISajF3R$%|^
zIX_D!Gd<(%dmrbrO6JqBF-vS$=ij}((h3R^?qXTOg|7)8v+2JnvCQbN{t3(-n-n)j
zez{JyZ+@2-Wo1)uUdbnI_+psD=4#+RsoYFVhE|U8H+8C&6zlkZO>#azevc%OIW|z#
zFNJV;HI>)!g=mPR?SfsWR+Tf`wsX0)-Ke*xy_@W~(+$9M5DZIgIhe|Zg@zpZwioKw
z#zv&vbmtX$Uv|;p>hNz9J%8@GU+)6;avjz0qdupA!LsM!#ky2?<C&NKr0PgE%)9&R
z2_W~80QMcwQo<E;WT;1gi1fRV2*}rb0zOWR0$d%;e&u+*Kj6wa4pv_ia%5(428bF5
zC6$YldGd$6`y^Lu?@qJXk!)0TxSfG5>30>W9+_rIyXhs(nHgGp?J@NBmKGHrx?C`H
zt(DT{qJlr6iBnI3?r;Os4m<;?BpFCoM{R;BM0*uMx-)g{X~4?UKJfb~!jTB3Yl3aN
zZfp2M@qiQ7P#qpNQOO<>XifK<ra7y-h@+TaICqM*bKvXs0oV9+M?<(fW_|e*8+w_@
z(a&8@$!mA?SGuM4j8k1Ka>?$9jiESQ*DnTtlzC@DH)=(&D7C0I1Fy3d>@Wf30n7)5
zo+Qo1$$8Q?p?jbAtL>Nxzq-xalO<b*bCf)SF>?SD;Z#s@1BH*gWwEO{?X`)@$t~I1
zSfoVs%?wRlfUQe`>|E!=latYjQCAt{H=Q=60MUAiK=54cTg=6HU7ddXIEL(D@eWmp
zkloUTTc~cGP}S<c#gCB1Op`m?3B0+?sdZN<f}NCq9nzD}+t*f9%Hzc4XQKd6%ZQZm
zg&J8~-`3WZ^YeSA`E==x0kwQHbQ8`@!5VzdlX%x-4ON{AePz7xVjWHL=Udt0%F5DH
zYfRCWl@*N8b6^R&9EO)Z58-M|b?q5XkRq_G=Q54wHY+=`xt}^@7W~Z(9~Z@RxyisM
zW-;M*j;O4i2xz&y^6>wLR$)~j=yDoO7~!#ddjLyXMk+h2NK4T6buZwO#6?><TaNN}
zpe8pyxX7({9_SHXS)?|)EZk56dm^sGK)>ui8F);k59+pET6Q*n`0gYMNsgK;SV3Mm
zAif6&C%|AXH-^?WvZ(PyA9?y1!~pYzk4#ut*!3EBqiP-<inDf1M1e&B_y-ZTpC%Hq
z16DPx{f5jO>mLuGzzVQD2WSG=8hO&lxHC{)iulxkxG;qci)dvf2%Z1-3XKvK+wz0$
z^UsEU6+Q+IBvV>B%>BA!E>eiA+=~hPyK{MX%1XW182IdFb{vS+_Fq}vHd|}t4f2^D
z#&&wfh6JeZqhJK~|Hyjlu&TE2dzg?A1XM~IQM$WB5Tv_PknTnrMY@!f?iP^lknTEk
zN^|J$_$|EN`~AGn`;U*h&pCVTwda~^&bh`MBlWH|UrF4((p&(}Iawz0Y%5twI{)eV
zjnieo&HdF%<C^QM>i|JFvyh~QLBY3Ughs>B(@?f^>yMjt*t_Em(1mD7#le!RmuZzJ
z{A+V58{rx;UXR1xn2i+AGcew4BRiG=^1dNDy7RMh_j!@}wmTP~w`=X^l8^{}$pGns
z0&j1~60e!f@?sxtvtDCS2x9}%d=HgN?yKAw;*B#gHUVWvoovN7_g#zG!^su8TH7bn
zOHJq-77l{Ya`|s7t=S<bX<z#cIk>gO7$!N#AZ?c?Hyx<Ua7I@9jrUEeh3P(_O+R!j
z>Sq^ZF+j`X>RHH3+b<2bJSM3mwu7fX2HhlcWK0S_XQ;$T#wSIJjbzE<0*5~_vLLp$
z@*y)jdkwU_zW-jX-k-=3^Vr0-hmgHO)@dMoaIii)UJ)feQOovtT}99ekXJ1>&I&7-
z>FUDX8i|d&S?T14(9zD?gN(hG4FD*|XzsdXjLYK}WJ8;K$pA<2dGc&^o<BffWn~#w
ztA1f0zbRaKHCw%(PWoLFYolp+`;^$CV9Gw$YD7*iEDU{P9XmYq2}ExT0igpxDRmRS
zL$>pguCAXK7F6riePkdbYb{4=a3=M<#=Dr6KhV>=3GHv~TAZf3-KU&kzB1+HT+E5)
z<K#@e%ZhN8m2Hw{*xxaA*z=ie%DB&7ZZ?soc(tpqU`LIxX&@mi{QNe8U@rLSpJ+!F
zj(l)qFy#R#O%H)X#Vq+yMF%%zF9?6?amzRPbVr>^?nJI{T4VoJzp;r4AFAiA5O;$+
zc2?^XugybleObf9xaDX8B%U*Fc{h^gV2%r}qSyl&Sz*|el8MGxo3GcHH0ocoBI0z3
z$@`+;ly~qx<>}LjTXfxTTo^XqO>byp_e78GFsS_KDrnVm5`UO$tv_K>9kuy>G@_fT
zlofZI^@YcvnGkI1Z11nyeTWHXY$;D~+H^r$Xj$=|qS0E_Kw|YU!Mi|>%jSO2jRtmJ
zR#tKbNJmPK#JSn`oLtIT%|w@70ihTwER>lEZ!KRDctDc=tq)sy>C__5vwCoZ{3|#`
zn6`9;PI;{GkeDmkCjhUzy7|GxLJl1bZExB=&{-~Der!_D#llZ<thc}lu%i|gh0)Wy
z0G=wLRLm=>>b)(|>S|$cJr|?#voBxTY2${jr>(9~7raBft_lhZeUDDs-Vvu`eIIo`
zRQE^^u>cHLxi<+oeC{n4Na0T~j7&C&`A(Qb7sf=b!)7d<GwpQel2Bgd9WY@ZB~|NU
zDfI6)mw2RmEtFN(-A%9`nmIeCj2nx>{L>pqySg*2>1JrM@rdUJZz6f{%~_AA*92-O
z9Kq?6?Z=eO=a`n1=eFF6xtJNVerYe6U)nj#4#C-kSSiyISSX%{hq+@Iz-_Y#VoEb+
z%gSMG=fKQx{p6Zp>5h*hy3^IOmVr85ElL`I9`R>OxA?zDCqTilvkSidyI5lX;3J1r
zNSvN4`|LiNtIR_=3CAlr{dxjc<MZ^`b^3*J{7<XtAg<Ostryvf<b!7fj{vKkw&j6K
zSuY4`Bxe^E3Y2O1363mv7{DQdeT1;zM-t)iC<XrFW=ng~l2McQc36TNm7<gWS<-~-
z%^gNnF+GM!(sK^bIky%$B*pvs1(}iQJjJD^Hb*SS{1z7*I*3}zD5RW)rMy_T_V<rB
z7nsL;e+<0^z*|>7U*mHA!1NmY-8^Y!@bl<yRvQ(SFu6wPm|4#w%;$`wg?sGH&=MhA
zV=zZ|nr07_l^HG6^#{K8Rl}Br+v1fM@x_mY4mm^_yb5Ere6pxw!h_m!qXyX=ox5UR
z{hR!6O2bgrm4G^_2qPk0f+IRCq%Air2E!WkfO)yho7bx0Mw*URff4|ZYE-pWuJ4|v
z<+=-760qXbm8URdzoh%w%dPEM_pA>s-Ar^$jFNYslQ>s~$)DkW?X|83GgRWz`{`7U
z%SGTmpVz3my*D;~@|p14<o=0-RBA2{<6(|^nU`@|zO^Bn{(Wg`eACf=x1Q)CW>h}v
zIMCx6=+@SWAY4Mw`Rh5S{gf{#kKt2Ao!@oa6sd5s@tIaHd8<6KX>>}{ep!92<T|F`
z`j3GjhYy%590<;}3u1G==5cXE^lY3lODv4+U{RMC>#;2AxoN6<I>=3kj@QNAM`s)o
ztz~~%;_ym6%rFXW)18$xpyVZ}j<2%Bx6yCwA=z}E)$dw%Bni5NTd`rTFz`Qj|F;&9
zsicJY<a6Z$&#-Z&vtz|yjv=44czTNQWtmC+wseP$jdvB3MM_Upr>wT0Xjzo4ss4V&
zQ~k0IF;jsdigwi=QI{J|oI^!2d*t;l(lvUIpXE5q+G(7`H3e$l`(s-Ie0=SoAeO1#
z{^q|;-9LMG0Ns}Pgz2jnmTZm_n{$`7lOuuij?<qNOlbq_s)wxKTgWgdQN`*=boO9L
zW;-M(1k4ZGB}o>Qsl(T6#D<&-K6@w6Z0bXhuS`=uZFxi_<RE44%oH9qoV5CK0G+}q
z0$w7O2tD6IvP8*V<nDm;Tls8UVozKN8=0^PQ-8V8Foki{H-zlm+{6#s&a&vJB$BB^
zDMkOveG#M%n5)pJM9XLtSqLW5i@$}kb`XiJu)s>?S_w$x$VTgbb-!TOG7)6OD1V<n
zKJ#G8uMvjP*X0Y9i=zaz=y0-y^S{zs{u+X9PGQ}|e(|OO%P$>2%s<29HmTWFy~e!=
znZ6crSUeT}Es?B7bK7DpDr1p7%s^}Mn^%8XHhiw1hz{BN2^Wqia4kP&Qjarasa4FM
zFn5Z^V@MPTNw6xXk&UIEWI;{^FlhNv6PyW{geVKXVy2JR$c60qZodpPSXMQ1LjWT6
z`+#xcK-Fr>7lLgu-#(OW7tr)c6C=qGh4;jtd-5dyc+|q<+qPOkpY&Xcs@;M~z$#6g
zMfXcrnSC^gdC7cb`_>(1MNK(zaeSbN_9;!q*n~o(`)qHPa>elaY~KVHbRg)r(xZVh
z2S6FhGR4J)Uo`UKW=KC;65A7g#p@r@umjSs3V9jIeb|!mmeUeO`c_j=l04OrX@jy^
zxa$D(GHIQnK!8RwFp@<4l~AU|W90x$?v=Bd(%lsfHW99=z&a|WTH*Y$flWLyWt6CC
zCBTw9;^_DZ%R+-B^P>e1l!O_3ygfHEPPntI+3>?us~<}@AP!rX7S{}VMhPrxk=LAP
zZ24oIL$I-euXh)0gg142@DYbGeq^mG2h0m_aI}6_(X7g@g;upan_^pZy%ZJkg?9vb
z0}qOy;zb2dLk#2PA#RtQeQoPDV=EQKncF17)!kgvhoR}2D1%!<&+%Ta>L7!>uf=J|
zF0`jd{)^hW-0a*7i;I08nfoSnk9IezF#fm|@JDg$3nA2F8?IQAa_Q->J(jA4%GMvm
zi&PVJOX9x1M>6-ki4>kgmF*4OTYLW7-S=Tr&{51j&*DC)iYtU%Cn!q!%B8|<vu>tN
z%3nzbHAnD1Esk)R(d_H)25s?;b}J~TI0z+|2%=U+GIUgr4}*-$siR?dC@D*_FP+nD
zA_0LXG+#mw)=^qoTU0b=z&a!_(A2_e4+_QV`>?WHZJD3W7uWQnM5kUF6^lPER;9g*
zvWIKXfL*V!UOM1aaZ+rohP=A8To|H==dDvUh5a!~eLZi-xxOqY<y#9hDo|2V?#(rk
z<BaB0(=dQ?(4;9Fr_I<vKV9vcpOV?K($eM)N{j+wfx{}6`8kbs_G=9e$>40`Ic5~K
zNUrv^<~(`-_kY>W3e66YP>b`!B5KAZsY5z4#!Xj=1s&8sJ&Dl5#R!iAefPprsh(p!
zu7D(tTj)eLdvn;3MT0I@UbFdL;$z}9Wn5o*`SH}P-;s83D5EZy19Vv<*pAu|x35}R
zd9l_Zq_^@}-OXnMiq(CJ%)`0qsLDz`1@)vjHL79>Si8fVvc9-Mom!8kraOPFTa*X1
zSy4%K;vp-o8I@^{|6nR_a&mHFbaelh(xJq@YQ?3Pz70UfYlcvbPxTYb=<_a52>F*?
z-m^hzx!RP0nwl?JS<y4BdOBR*31>{Sv;lv;BFqo6INqm{FOaO56N%6d{lBPIU#98U
zVJQEswq(IqzS=1ozAlh9PgYbjER3NpIjMh3&4eE&FlwTXXcV`G9fOrFD<eDCILpG{
z$kZjS>!lzoOKg-0gz3Xvwm>uS(Q!ywnL~ax2BAmbq01Y-HE&6SV43o=BW0Sk?rx@W
z(qd^emB}5zI*5nAV`JS!UyMhRDh^vLmbtsXZ--toVg5=|iWW3}LRUFB=bf+l#l^$`
zQ}R{VwpzZX{`(^w6jw7!Y8C)bXVT9I1rZ`eZq{JGG;Iux;59eb6eUCd091zJl}`Wn
z<m8}XQJU!9!_sH;g78h$<m8pvmsR8DW;Qn1YQ!W2*>vjK0D+q>iL=pU>)oZqIcgUa
zAeR^#7N+P2g=&mR+Dp!WYH7!nbNxKk&7Pr`?2w&VaiY>z^0#lIjr0QGb!1B?@i5Ww
z%+#Xq7U&Ar+hQFn!y8NdZM^hRsbmZN`V?95fX{|W-XD<OM57?^x4SORbD+8Mtsy>(
zJ(;%p>ICz_le}c>z2b`QyTI(icmel(VTKjT`tiK+Xl#2AYpxAe&(6(_HTfrQm!q{M
z%~zq3@*7jLfyhK10~<rh0!~LE;b$DB?z}vEKsYBh)?&y*2IC&;ASvkv7KupPDI~Xv
zkbuCh7;wmse%zRto++VHRw-nc4$P`nwYIP_Yp}g@^w1Ut<z-An1T~fY@8d(m>!;Pl
z^~sCv?a>*_iY9qF>dG04`QVIsdVXF(r&2_llCzqWg=MStl2s<GI{z`nrvsJTq|}Z5
zTglpTE+eFlP5J?s&HUNkXFSPX)-R98Ma2~DbxO0{uEQJi^P$CsBb+A2s@5)Q0T<C*
z>Cs6zqYzeJ-kElD>d71~_r8g(&CRKXhSu<oP_5_~QK)mXgCyDv?M4HMEGFiMy1;I*
zi0YDrJjGo(|4ucGx+vgp=~}+QY+B*=5-`mip^Ku%LXo^yMj^-bZ*dJ<ZXr!@>WPj6
zY`a=l4RcAvNpb!jKQ^o+pHL_WwIyW_H7<G1+I|@rwHDm`37Lf$mueOXP<oz~v(vq#
zNCc%AW@cSY)t5LkmK?R(Dc`^IvGEBltuNPwcgVFJ@h5(ZA75PL<?o2dCC1-zi9J6*
zeG%qp7Xm#kuj{7jwaSl~o;E9uX}U{k&szQUOQ1JAGb4jh_eVCXOiA5@G__SnY;Rp5
zE}Fk<=@*u5EzWH^99DK^MaAL~)BK>-Xto*H(xTdqtSLbhZ!^rqu>0u%#h%5euSc86
zMd4>Mol(3W93?AQS;~OZc_onDAi%)Tln><)ZBtR<r7}o~*O)TV42$&K2!r(-x$?ib
zXz$5?9MvN&*Ku@qHc=GAKF$ufZQ6b?eb##W#=}|mZcWPMcE5JOe0R%ysJ|DSWA1J5
za>NTaA~F2kSA>MHbbDWiM_10$8<&$;P}!g%NtTGiL1|-7k(0TDF6q0t3Db9>lKs~^
zw-UB!2+T;1fkdrBWWjDyl6};=*<+)w?0)u3+mj5qSk^SN4cWQ%nMFn9!vfjn^*8~y
zS7aPHA)#O$^4j{OPJos^f-kVG(SmX^GCU1BI^ZxmF)7J5rvhta%aKRYrh`a1Ul|KY
zsawi>kWQxfHdCI9oc(sRL-R0y+#nq}g={`$fgw13mv7b}WG=R7+-1Ki5Xyo1`7->h
zYUJBXO&}wcRRDzM88}PQ_O{4PKwq3FMSrH}#vuJt$|oHC)bSXVS;izmnQt!oOF0P%
z$#FQC8=xnqr^k+m=*~reo12}Q+t2(fEmn+HH8ytKBhO6nzw_inN~PW{9Dg`nDu%~4
zY7)Vo9V<!lifB2Qwv2ytLr8v^n~!a3c9uM<hkDO3795m>K4vAgnQhV%%q1b*M9tF#
zMQu&Oh5DU@3ixW9MXc0d8<VJ!O^fCA&Q5<K-t+Y}Y=CCMo~TxG^jbS|HIbzCO55y>
z7iKsulmkVKlDr00muYSYf?prL%v%FtMKu$5p#RHiK>?1*kB^TV`I85qo6i_KbV686
z!c!w7CEwI?#dHZ*B8s?)QFH+L5sl1|7nkwj7iJR1#yRadv$I+#C?V95I2+U5eT)rG
z<<`@;;H{7l;TgBeZ-$3g4Xgn)|KEM)J-gqAzp^$m_tDn7&xLUUN>deVp6gk;L!mD{
z(T~qSP?{AsjQ7QnorNYClSyB?n2W#k7n2;cK)CelswUNICoZhuwWzhA!_v@x%R}Ba
z2RI|OD9jI!gCwvxdA}sA+236UlWA6J5)lv#U6@6$6-RN+T25Fv#epCpN@)~l7GGwl
z+a9^yHM{4e9}A&=xpb3^>~_aTEVHO!!R}Zrd0UzYP?kw|%E-x$Xwd+vhmRk{=@{wg
z(icn{l=d~@{hG08`_@q0UcWwoSOl(tC<hCvz8J7RW8uaPPtMBpK|LycL-!5giSj>g
zv`p1}>@6EG_Ua99Z#P6~N_N3L@ih;Okb4>ja_V-4)qg{>LNNxVFZxd_sG>{z3pvo;
zVt`$2#s_u181C;`n$K?0bW4M5AfxEwQa+1q3UaOOc{)+Px%ndaEp^=hBUMhoh-p%C
za;Z8UsA?&w5?~U2V2S^sO0f2mx%4n5W)?V7Gj`1-Ypp)eZQY6x1!A2|@@z?dcJ8IZ
zqMn|h)z#=_8KZa&Zi$|J5#QSiYVv~UVp$X|BV%JZ=}-uD+Rqr2K3W>cD2s#rac&L;
zwNvHnE-OR{TdRPoW3Z1gYy6}&iNH^ke0R5~LMjS#MMY({t4oZUgoJ>Ao@y>SIVvtu
zDJ>)v|C!=EG`}Y!BNAw(t*$B;4sZwvY;8NnMXSnFNxLT|Y6)Sq0miwclwLDA6qI0U
ziV4$7fYQq%PRpw^o@K~Zl(?3#$a#GXk!BSrnt-e)N^)$ht}6BT$csC5c2L&MD-280
z#bzwC9Et<UmiVV6N;9%ZiLtSu*<HzdJK<xd@KzMq7pv#PBjmC?(*)98KA4-=4Ok~8
z$LBN%@bic8P}1^p3g=qnH7^nN{$*l<`5mHJgvLg4>=#uyPWR(;$YV}h82VjAU(mPz
zx_XFPcp3tOk3wpWz9#zxmVMPpt1I}?@PZV0!Bo+P|70xFo&kW*QG2O@Al+fzC|j{(
z$b)V!+NS4<C0@ALc0qjz<8Z-qv{hafutFcp);y=kWRh~ltsNMn%Mkfmmg;pDylfoA
zE>FTk=)9rBTv+IGcH#_*i0;J_$-<td<qS}D9@L8JLE^yRV1|-B`-Kg8lr8fDKoR)Y
zzQnQq$zr4~;7t{t>Mzk44qLDw!Ml{~s^Hy)o=j_@jY{FcnX2o*G+ETo`!^(PiC{t;
z)=%_q3uBduB_=FBL3^wQpqg{DVpk2)-%6~&KM>W;(oMSlqmX=`sh$rrL!I{8tu5d)
z`a3E-H<$ntgFO7@h9O#}UlkF~Px=4dn_(>9qx8O2=?2o#Phlk9zEQs5vSv4a?`*Ns
zBmuim6!&ViwC`n6@CkQP(SKhN+Pru+Tp0VNUUT<M6@PT&J;Bik`v0&fqRCO*QI0k2
z!v>siPx*UP`2HUW@oz8E`szR*25?-wsQS7Az0&pHr3X_JF^`%?)OwGAn4aP5H-%cr
zb~F7<(@ZFU+VySa>VQaq3(dcuZNdLqEAW`hcO8eL{`_Ow7l7b?0(CImF1E`4_aiVr
z>HKCL1o0|{2(TI2htch>TWq&?jK36eBp#zk&k-)KTk!6){;lzVFZo<Y2wxST2l##n
zaV<5mrW5P=gjiE?mtZoC&M5U#1yf8s)i>b(p5uKO!c!queUB4i#9jQoTEy-_Hg2CC
zdwQ15rzXM3`<<Uuf=^rrXb}D#j*rhH93j@pCo|cB8?i6zjeGmV;tS*71bmN`od1r>
z4ljB|$oD@4rQ5<SuoZIXHpljX9)5kr)VY&bygRKa0+93~p^Qdzr~_%D6z=j_V8p*R
z0<(wt>(Q_-;v2@Mr|O>@u2^ksVWTCNZ)3v<C_K-Y$#|lxgd3iHFm?I#<lTRRf_cio
zf`b)Ml63e<^8TxU6cvi8!~YE8JnDDuZ)7&#GXYb#@h+jo6@EV5qDKxglzZv{#{vN}
z$ASORIRduHX&Q=R0e@6plETN(a(C*{jmlhks>zdt{#ywKwYP8IvLH(aHs-2Y06DdP
zLvW<;ObA^w#={JZC5kV?PNo~NpvU-qgM+gG-}?=;;va2dW*cc4vfTN`M<z6RcIo2$
zc*?0q324duv;{8OB!;?w6i@&991|a}q|$h^UN|v(N6<S!%XfCcIx<o^7)h^HfQrI-
zshN5e>oz4f@bXO8%*-`?f1<79lH%L)@X|ZLO!qH&<B!-5?zBk>#NDz5$=&CpCg+Mk
zbT@Q#<L2|Szdr$G)5S$Ul<^fA8Hde6uaLZ^YO!hn+n1{9-0ho7$j&EyHvGQ6YDq%L
z62(HPKAM{!PYw3x>zo=(OFtF;9A13=*9?BzuO?|XWxZdcg!w&pN9*b<&kg7GvVVfj
z^Q_c0u*)m8-*buLPjw2ZE@;}&@J;@7)%8_n9|RHw<ij*5JG($XT0j7j)3<NT%yxkP
z69hkCHUJ$yJq~J7)Yq>SP8Kp|)3H-iHHU}Hi34JOhlfF0RTJ{|G9|Lop;|>aGhaDK
zHuu-KG*nK{^1Abaf|zN*9E!$&kd&MOgf1Nh&hwaIVp1{DacVg^M&PhIQMxn1s($nJ
z_9^R4;Y^_Cb;QY;GsGU87lK{K-u^h>e_G>i94NTauA-QWrz>}MbSR;H$ZRvHbUz~=
z-8Kmm^DTeLleCpUM4r7C^jPA<hgXhcV1ENJLx2A(s7eus!FdWi|9rChIne}^EFYUk
zjK{g8@#Ws}`cZFtR&*_Q<5ckWU^jN~a)x37H~%Y(uEEC3OVMSK&K?TNu6zf+2vLSO
zn`uQEpy_1>PJ&to(tmkPh98a364!TO+t3vLm{V2OE(jYA3lATD=MSKe8ONv`Kv)$Y
zlYo<jZ`GD-^8gi<a|B{ERC!$C=E>O6*}=QR(P<}{t?2P?Bq*nVg0j<$o0rlXq&_z{
z23r-Sr3zacA_2szR9M{Hu1Zl+V+tt&LcA1bDJA?_3<W=CbhWj``pC)GKvi|@!{9CT
zg0dtMFJSlB2+IXvL=rB8O7*J!si^oEkuEM?R{EyZsy68tWdqHkv;`nLM?-{9wwvVa
z8C(4_DHq^CnO_KyDM%0cvzY&S;Kea>tF+7Sj4bD$V^U$;o|#I8Gx2+jHA&)aY32?s
zh`mJ`ty_II{z<v^c|h~8ym5R<nB3glByz0lg&Mn#rJoQMKhvw}>EjLAp`oFe*rQh}
z)NENW#f^=pz{shgg?V|;Q40%P99^6Mb=@&YNP1_q6RAq_vYN~-ESBQ>Xy5rGHQ#NO
zKcMM|bktV3itCI)0MHJF=sn<`$^eR!fJkCU{d>ksdUj7Y^T^ia$jAYjnBcRmi2;k~
z6Va{%Oab|2u&Q-kP8Cfy=9j*uhlbMiI_D?pj+?SYOYsn7w3O!Mtva_2lr-IZfzv}V
z%m?a{3hFy^n0Cv*rErHdizZMvh8&$L-FMOKQmN;Q`Hw+g6$ZVMcinDixpD6aV^T?W
z7pO}Zv0Qd{KV4x}V(d~>tr9JkPvLbhsH_Z%l&Mx)FRbQwVH9}z?Pxdz*FrA&=Cl3O
z$;lI%EW@N$$XPvo97A%pItMSW8sAM;7S_f(dDGBo+2(LUqK(ojy|W)Cc{5i1<YJxI
zTCZ#GHz=08kJNy|TlcH6xaG%3e2+}_UFSt4y{fJAtt~9Txwv6gcyU~NFy(v@dhCMe
z-Qq{-8ZQw%=41e`vr(vze&#-}Pty;gI9jA!xn$G4<~Jpy1TCjB%avW)E|G(9jRgPs
zDzf-<1Bnr<1H!_IQF~rc@S3UuETu@IHmzwo`&}Qt1LE(^Z0tIo+02X&d7v50>7(g;
zN5?5kfLUOFO`dDZf`_fxGc4acZeBY(VPCWtS?(`Go|qq$SiRLwLD+hryX7IdjZd(x
zGdn6OrqDe#Jz`w?-QB&83MrS%-u7oInX=vI`HGYNyF22}A=D(%H!q8rxVZsEh0L3D
zb$F}7$)Twqs<%6#Bk#q<r43r&Zvb(efWGUnt&*Z!a|46W-u3m<=*L%^1YUex{F`Zn
z&h?WE!_W+>0)S}FSV;5C#9~)49dk0-8#k`Rf8tPanG?w(8Qbw|P&a~{ojsW+U?S-S
z$?o|Ji=BrT7{Sr}ap_4%rQ^kkiJ@|6&HB_-_sPlY(@`OB8^;sj^d3`3YvSE&?Q$c#
zQ1cwF1uJVbp3!=%fw8@tq^3hzz_eKH8?&$56xD&b>WW;<cg{r3?PLnjqDEUSot=pB
z`}4=gotTwXY)3=_%o7j@bqazFZ@;&l9ZPUBx8^ZOW@oG>IfEvNGw0@Nqh!L+D(Lr4
z{t`g{Ou!O|EXlqXI>$UixMp;HC)7dEp@}r0JE8R{C{cuu?CntT$(2SC$LAHp<*z23
zIUPZ8RPs@%<!f)nM8WZ-k?~sKT67Lb8)%XsL&4<A5e{y!k{_TW5C}P9O;&zs(+^82
zU9V?rpkHSoI+$lRI7>4l1L*Kc98$CAj+le30s7_>>6&LnDmdQ8x+qXC04JhO#S@d0
zuNbs`;Fwt5!Z(_=(h;8IT97jAIsGp-Nme*-tDbXx-8gyw@s{+)?V7err;37IP=^6@
zZ!68Hq)XV3rFO37f&f!euu`+g0<Fny*5Mo!{IgpeQFh?UUG-(3m-p<<wZ|Vb%xiag
zBw0|PCC|YlMNm*=&&}?3=M9F}FPC{)bC8h<Q$*EUt+^sM>8+j1=Z0k6Jwv5N;J8fj
z>l`AGTcwMKY%3{3Ja=tfTuda)E<tP{BP%P<Cu1WuDcNxLLPsNBYfhp!pZW4{wYY^w
z>4M4y?efOBAN?#Xg2Lg;iM@QxE6*lxbvomyp6IXNSCg2z$;is;+yY8?oAI99TtISi
z$T^)^`w7@ICxZ~UN^_~k>fKJ4Q}~hIz4LF!qXa27qYh8ui0LtEaJ6Motz+p#Ezr+P
zQyWU<U7IlQ_O=mo!$GL@^}UU*9z~zEtO7V(>(g%s!H8Gx=evT>2?*p02L@&9o1zn9
zW%Ex!c^J+A@=N<F@Qcdg&uWEB51d}3*TjB414#F{o`UfNP?{Iq1{&ue`Ag+>m)s#K
z>1vJmie2`>F2$g-EA(NqmF(>Dr6~&ekJ-odw6)jqpjR8G+V1GmXTh45=5;!%n#{Fa
zmygHSlRSkpC*;vBs%O<rH_^oKDr%&mKe_CJ)w~uylJU4K-^^Epf4>9nr+iw~ds}lQ
z+06~tYPM;1cg}T}xnMv8gEDF)-ss;LCO9jUU)wr3^qK)vd%<33xlGrzNSxucjCgbd
zEu;1l6s^WV)Pd!RQax6Pzmc2!(_P0EKwUF9!<e4OF3<N$dciH19)7E+kOo%&_*`qY
z{5-AZh%X)jG>I3>Dm7n)mM@e#Fp~R6pM-^l<&8@%3kM@p3rR~$8w=k^LQ}Yc4!RHI
zr7bNb&Fem{@CLLo12Mcfz3wkRoE==rv+Gi>%~<fLT^MK>PLo<cvuMDRcOeQ`t>y;f
zFzADtA2V~Q!p&=JZ8x_Z2cz=o9l;6Z{OF$6P&6JLWe@~iTzoHy$xi`=H?&jEqz~^K
ziBYj-LnE-Uu$1tuBIDy%R3l0j&fdP`;pG*1oUffOE+K<@qM1DDu=^Gq@5?r&YA_-q
zU4>GBfNHDNI^qFfq9`r>PVyb)+_P^Q^f(3YM*E2uLc^crX6HcMecduGk8uJb7>Vv}
z_!M-BlM%ufK7vM|Wr>rzHV{ET@ifM=$Jk;*aOsn5o|o{8RgUmVzDg=-m=ivPgYW6?
z$3gwKpd(5Rr>)nI%f;A%(ap69!y=zGWKHnO^UT`xr(V9Yq8Ff}$;@qR)ESU*@c^=s
z{L>RN4HoCH_48uT*$2#wt+87{_S)bcKM=nLLEn6x>wr_#x20cqP3;8*R&fj|;0SlF
z{2cJYE7D+LN!J&PVe1ywzkNpUy~ync@c2qe3ZHtZuQRizTwndV(wZ!=a3&NuqB3$-
z;@kHPzrJ>(zQ~E0@1-6AG&B4kH}z*c9PQ>f$=8yJT&VlmU#ur%GBSD5Y}A90Hm?90
zPd!9oy12E)prUF$+u(}oiKJkI%xeEJE;;JmH@AT*on@t7NIp^nF=`CN{9U+!arLZO
zC35m$CGmaZ?gR2;EBz#jCN();ANI(tIGK!$j5EfPn25km_VZHy;b74%QaF!`KiTgG
zc*ytfpRWPNpGBV~?Cvh5Er6tU-ZlzBwj{OIt~|W#LvM6_-App3ZGCznHCQmMDCoV>
z5rm%6%j*j%#Y;=Ddc1smeCisNjd^)ro^PDh7cHlmZ6sz@R*sZ+ZF)*s?9IA#8<$6f
zJ~@Qg9q3Wa<;WyzCF}=668=VWExk*IlKIWfF0;dG8j1!6Ue+o1FP+fq8_Vl03>~Ab
z=ptA2a5BEGe0WEdSdLw@o%U+=n!i|xVoyp~c=Y1qdmGsqLucbiKYs%~T5kxS1d=Fh
z(zK;>B7K0pQ18XfWXmCmTXt%^ZHy%Lu7AnPDOr1N@5^4}@+-}k{QR`9Shu%gQ2V>?
zlxVHXg^(TeKPhf}__r2Ne_!T<0<G`h4y!Ej#4+hd4xjw+Y^&m8Pg<gpzF4f0sF$*3
zwic&gy+)`o+r}7=(t%eo*mKw89I-qg8XAI2lUGkwCg^m8s%Jy5XTvvhuqo0daK8i3
zgL+b2&d5Ka>!MEI-@W9vV{P+%h&U5_)xLICn>KvB4vqdFZ`0zB`L|+{_9`uzP`B$1
z(5G#<S(bXvVN&n1>$U<Ijl;uA!-N$TpM`V5L(9j`_Nx!N?|<}KH*|QQ3%Y!&ua4~V
zJZ^~mzIqju0_{uxX{w~EDht||nkEkFFm#n{nrv&8h$OH2JqY{kog}xcdI~RBwmlFI
zf7u^=Yj&qZ;>W8{B`7u7PhUu3@E!RY8~eta{?gTg{<`zn4X0u6r%7C0qXZv82KJ^~
z*XVzORWOAwH(?T72hu<%IdrJ`zU$s%I_!Qx@7Br7TK6ez1pt<T4uFpzr=E*z;#Op}
zx6dWb)mcn>^pif@L;mv|&xnik?EU7f%jX*uIJvn8f8QA~^`{DY^YGKNk_k^PPO>r$
zcfpyIPbVZ=|65<Gk)v+d_^3$fcy<(Jo35_N)m=g;9{l}Vir2+(di$40ohCSEO?P*g
zdMV!%Q%#mun?w?WLkejN@e}bk*4Ncv_;GbObOYvq%ijL$&`sCIa*ZM)BC99FFk)>U
z@7~d(eww%5-ZK9O7X$MIW=~E)Oo+GDLFw0r2x29w)nanMEsV>khmw)K^Wz6)gdj5)
z+r`4A14Ib|xDBq)_uTgq7q3>__qR^naENsy2aa(Ww2KNcjor{lvW9+51pQBa1^$p9
z;T;!?Y58=P{9C%}*sNIRy(wl^*4q(E5-qwLzH}uB1kfpf?7-etV>+8wErrhuPy;p`
z=L!bVniv@ioOQpVY`QC`ucxGDw(C0E)ri*sWLTX=iKl3%=txpBGOkC5E4hP7)2cd|
zBj!yvTZLUD?mOF%Tpk{tcKj6AEwgy(v%Twm73+D)?HeGDS~a^%*k!d?Rg{-T#lutA
z+`QjET@GP|#Awl0PmVR*1uPOgL5z_+O^(w8L@8HC+a>vtTLlGM1zVh6_x`_3we4#b
zc;Eb=g#d{Lg^Of(p4BH;+e(z#MK#h=EO>EA(c0eiZ=_R2qd@kEiP_UbT`>olb-(!i
z>!PM6s7HdLKQUdN3iJ@adgV04cZ!ugUb!(yK}kNs!;!dqcAwhV9B%z#_S|EHhWUH^
z%g)#6zANqMtZl80?^mX6>#k2~WzNG6JFkxyno7DhA-A&UzdX;T-5LGqdNY_<d4iH(
zd@!bvz)|0)RLSTjLzUdzH!<VRRvb?%H<pP}PQ8MvRaOdrlFwHjg{+$lAtEBVyScxJ
zrKe|DdgKUrWvylRDhVddG|6IzBelcUEc$xb7i-;J?9I*Bj<DZh0OsH}40pG>nBFk(
zI>Kba0F$ip2d@RV8AnY4K}Nl7#a{yMPySD~1vr6czqC1Dp8R^F7F{AGDOr{xg7eYR
zGSp5JbLB@_O$}G6IvbmzyGVKZ(h^`&NH8_EoKjX%(N=amKC}8HBrh*NJUk^{>?$$+
zoTX1M^}@gZG%8n4f*erP2R~w~zG~}=uwJZflbPgXqtj?mr^DHHtjlN>HkZ@!Om@;C
zOE=x!8lMEL^XI<>_;;aD*NviTX>9f}xqRhm4GLHp@7Wn%`?7M(=g&>0Adt~oKNG8r
z6|{4l=9-z`#eW6B|2VS1r|Zv$L*>vlfp&z69ANm4w?ON{*DO+n=+$alv+4ngMP>72
zxP*y`Dzb7P3RJqdo~^Ca(VMYotZd;@*A-*yOS)qz;dCGOnaN2L>Vo1uXzyCzvAqL9
zVnQ%#2oDdhNp>s;i$sq^Ruyh+Y@~Koe~y{C9neLH>5tL7K9Pu4{1y{0T7(_+rKqT=
zysH23tj=$wNF&tbZgN+6UT<FQHuT`{y8bg@GK6o*GY+p48|{b7Z8$ccRmqSw^9cxi
z<Ks<95SNrRH#1wxNgd;#Z+5W}7WPokUz(cw=pu(PfE7Z1qQ-j5_qa0($l=msA=l7^
zs+LuFzkhFPnwR%8FSi<WGTfd_vvN3rJi<W%l7K6DyWooi4}Z%xGCEUcy3`8Zs=5BV
zcketbwT;F6r72V_*cv?>(K)&gjopS{$r>~N{7>Tq4Ap1&mjK*M&<^W>^Xv4D=a6i2
zaziJ2IV2<`eq2aS9dA94RB#B1fSY0Oq^0qAaEzp1MtNa~mJi**Nrm$pATFT0uri}5
z%W!^v-qHD1uhBWiohGg)w{j*PukG00#AX{(SI2HKLASXzy6q%0Aj7!DVeg$!rP);6
z)Ra@@@BSuTK2MpZ6AN};0B9Z<OdsV_j~@)nYiZ5K4rsl8{#fS42KrS>V{+5LnzvK+
zq}am$&aw|0oE(nx4w0U~O;2`T9C&DqokhLcbbEaXXt>oZ=a0pMRj86wj<N4AV8=fV
zF72}wHPp^MC@u}+rJFprtJ=S`hn}2p>bmd#zPlYPNXvL_V0W3oE;Ez@b>vA@>(P#i
zS@`L7`}qa|guUCe6Au)il2THcaTS_YE^<SWW#m96A#^&1HYT`Xj?aEMbhbsHo*Va%
z3H<ZNQ-+#v@NPH^QFbqg=tNPz6Ne5-TjVzL9LlU+p`l7i#h`Q?9CY7qAx+w7SL?2u
z%|pnIi~!M0=7-F=q^7$j64^WPiHqdw1r~f6^9z6>A1wHul(4nA)88{#T<G4*HB$#x
z<hP53Mu*(DWG_iPmqxP}7IgPS?FTgC<E?gg*<_CD3hNVl%`7ZF%)y^c57hq8=zN$y
zV+Zm%4Tqv4H9GGmoNm+HZ7kmHYNN7v-|pXST@4Ua0}3a;cN8(^KlZFP(e2}<ZJ4II
z*y~$^;EWLH@NCP*RZ%YtrSwzhlL(jq@CY<9@aY&CczpS<unq%5dJ_~LbUqfr-G+MI
zUlZu-b@s#W(TU#uxE{0h@aRnMN59;&czFx9l%n6-pYTmWqoS0o>9^RuM#}Df)&(m4
zi(q;fHdhBP>;RX;u&=K#iO0#vXM{_*2^D83-b#OYERN>)$1;4w1x@(snOfy9hG^{T
z<w^QZBE0;^5dSh9Km0`ClLnlJ=iQCfFphtUa5mk@qW_;x(!&RepK+fB{zyFb81^ex
zMGH+@Uv#?KDHdT!EgN~k^y<m!|NNFv)=OJw3-0sv%ODtKgzFu#Z~vdQ1w-<ig?)$<
z3GM%XW%1`6jqM$m>68g)@R$G71OvCf2tAcSCYo0selb^%VDB7Rg7awH37_BVSAc=O
z)BnsW%&&KB*ZErLJiirrvYZM=a><291dteRrjZqZ=Ok5p@9Ww@4D<WlK@9f8Q?+ou
zb#@Sjya}Lc!h1jUu!u<eKe-^1E|)e89G?F35!$!m#yowu{ezWXrPMh$5HM4-i%FVd
z5NWI`zI}3gcn@>%3wS=R$kKn*Cw$Zb`81}k5@R<ubY6ZpaO3zn^a*Bh5{&T+<G~;d
z3?c>opF6YiJs+O<NS-M&^`=b#3C`mk5{Qq(TX^AN2;ngQ98Ug5)I~M5sM*)rOHTC5
z^7Z#be{`Yy@DvR`E{HHSkN@7!;p4MmLNPr;N7HB8r~MaQ0={2g^H4k-qC8c6_&E=x
zfA09Qt^EQSQ~4v-a3~`>PoUz==1CCJ_F+)!4r^<wNMstxgO)QN(gGgLZ;S)>Kjg~C
z#9jz&n9k@kFHkyN_axu{u?Sky5LlR{&w}A<7tRmk1nQ!z>cUqi>^-~tB4Q<zPiTc1
z<0|yVSeuYQE^@&6@X#%!YkwxE^@&2@0uGab&!3m;0Xqtck4gHTU)pi)A137sjW!B8
zm+3vs^@BNmL>mJkXbpx-e><ncpUcFtgu}MO9`OHMhHU_sKcbcWxkh^Ov+40mLPvSz
zDK!xfBybw_v_Oal44|2m7tAaSj4<NJPOj}R-_o87-@ON}qkMsPlhblN9k^8T$q^C8
zrv(P@&*P+#l_kO>?XvzcS|1V8WLOx|8X>WVyo&U9AmIR89rsY^tVyK4T`%5T`@r7h
zZq1Pp`(r&7Fyl2CSzt_GD87z7+!7g?tW#|+JRJR&$$ZL$q~Kv3x^PhNY)c4+f9B)H
ze;?qtpFXSwk<*8-Jbe8v@;_hyjjj8L4f6~g|7<#73;cM$-k-6QeF}XrI-j8f^0fHC
z-j1c{r#HQRHlM)%!J$5Uzh90t6MP)zH#Q%NDTOvsMg3y(=NqEF5tjxSj>me;urTih
z;2%cOg5PZlJ_l2S)(n^MSny#KRu7{fBNTsF3VZ)d2u$1oLmD1N`=-a8y@4YaV;=wW
zxknIi{WE$fxEl;f=_S>th(AM;5DKspTmOmhplT<y3A6uj4>@%KgZCL=JU*_W+;I5l
zJYQP`z+56D{00*X^XSR<hatQtJ|;szB6NKJ$1t91|8woxKiBS-A_)H=eUbUo9?bd+
z`dsdFwukv+!g$({v<l7CBYo=jldaFK%0u1vPr&i!lkCwS|Mi9R;>&|wufvwVO7oOz
zS5TMNR#v9NkpcundxABr92}CYQIU!hYRa0i`JRf9xw)3_O=ds)VvEJ)hSJso`~!&j
zYBCk`rTZvzf9R=Q&SNb0zj$)uII!j9=6m<cw>~z`)WF!-*wM10?rLFm^$|Zky-re6
zlKomQLP8FUgTrx=mJ{^I)m*~Pj+%YHzcz}eD7Ijs&S>M{;J5FVyL8JxPmE=201&*S
z?dcITUxXh_?ORCq#3!EnITM{hRVwTdoS1J|6p7L}9}hFg!Jb%3_ZH_nW^V%2%o<%|
z<>aLQT|}WuLB5fc8iQWd*5#2lysp>%PxCa_<>hP#;dI->We^CI)VZBz$XI|7P{4g6
zIx<03vuyKd?U>C(l3mn0F_GZ-7zc}v>PMkFC`ggV^_fX@%FN+Z>K|u6*4qcKNC4)+
z$&+dei2)x3Lu!9Wic}GGu(?sb#=?CIXv`<`#?SW`6~sg}7}=PaLEQ3zpOTUD9txQ$
zE=EuAy4bvH9qq`9K{Fm?a+vzJ79g>k(9`pnrl6?E2pYL|Rw64GwLH<@-kCtd-u2Ew
zzUTB*4wqh2*sU%vuOj;tP$?VC!TzzXDcC=wA^hYImhMv_QY^`K#dLAHr^qj!T7P9{
z-*nQPKM5s>Wq<$C8B-V+-Oco)sfU5baZZsA1&==>QW36BgK1CbrA2$WNtk)1X1aV}
z$8vf)?B4jdZ~EJ|P;O1S=cPYL*~w#2t(;S<&L%#8US_wT>5k##n5eBpe@G^L4&b&P
z?7RjZ4fu^;B6P8m*(^oQnuQ6kqk4R7MM$3pzcujVlgyozwHT8&{T=UPtj%Tm${jjd
zo0Qb>qkre-Mg|Sd$;nBME=2P6^UO=sM;3Q1FWDA94m0sm%*Z(J&kV_EH#+x3oo=Fr
z9`-;I*bDo%w^B_jH91vnT^Rn1;WzxBX^8ZBm<FF$akLVkTPvKI)H1yfQInpZjivUp
zbDrj|#!YeRfw~Z{NV>8ld1TcDj@#-6E}f>bSjyzl7BIsJYAy;2$|r~-+S(1hgdK$0
zp}l(Y7ppxV67navUqt<kHSdpH;A6I!(`#@HCv?$W_#71UxKjiX>3YB$>0zrNHSl@Z
z3ZLc+iNM1Mr9BPFHcVx=HvWO|5@T1=epoS{4{JHCQDS}hpiPj1!uj?pEGQ_*Am}v*
zhqIg8OvPM?C^iMu+AZ+yP>hR-+PmrHY>=alj4%Uz82}1gc`gKya$BcYqNuo0F`(2Z
zAudixh+k1`YH$B}jKg)S^)p$gH|fnEw<D6f_Q!RT5qm7a!uX^<L-te5e{#m%nnpx}
zBVoG1@~g8C+4TA?p{FN5s6%W|sG#@>$4IK&9;BQWYE|#8Qlw0bb8t*R+B4r_#4>8t
zx~bHP(-9NnH+b)#9Y=<BCUTZA=rtv%jzBBW!cO`5bvP=A`uo{9*y-qW=5BtB6dB^{
zTBf)={Bb~!kdgwxdj4)hiVybv8~?X-<L0?|Pwj@Svy%&%A6<^Z4XH(H#9{}%<w+jA
zT|<ET^lQWlFQ2eccL?VEml|`5xU_WD+)K!<3PtBTFw@8|@_!PQK~G?TYS9X%=5tO=
z&z~WGu@@bSR&#C4{IJY_`eE=lJrWzhjX5p~IP~#W3_aQ@H~CEfzW$cuVLOKLLFnru
z8}tQ#!FU7*yW{XyxIV_20n_p$&M+z0Z!Hk2zoq%-gQ)-b?ypF2JU72M=|QB(_s2QI
zMEC>&lY@zjijwj!<gm81vB(Spf)r<G9DN?v_%Nu#Ny~8WeTCDN-9N6VX^Qd|={Jy(
zle4q3N>O3;7}|%4wXHPLui0PL1)qwDi0~wroNv)lQ_ILm5xw|Lc^bhF786ixH#ZM{
zj0o6Z9DA4D8DU%C>8@`cwl<jkmH=w7`G+ghxae6Zt60r>|85!0mg?&41gs9RbnI{5
z=^hPUV-NzBD$kqEZ*AC^m{A#-nK8XokuaJ?g9BM4c=7SulQvW|G$89_$2WOF5*QK@
z*Ta3j%)CU)z&BINLF=~FmGlXDlL;yAye(DlZc8oJtVnfsdK$2+JC&5+#Fi9pW{~ml
zn)1AQRbEhFZfl#i2UY460dyQV^qM!TJyC~tN*Pzd!6>C~kFu&_4>9`Ge$3U_t$5!y
z-!oFYxLJ;CuJgK`S(A!;0rMGoFzVsKyp{yC>^gy<Uc=GE?EdQNs&=C=NV{K?>u9Km
zVsv8N&FxvvPcD9Z#laDq$blc`>FG(?bZKmA`qd7dd$D@a%f!GSqo`>7{lTfT9pL>m
z0(wFu4MQK%+x-}YgaTME7_grW>nj%~3*24WrOSVhPO32M8RcB?INmO4HqR?D;WOEu
zC{ioY1(g>E2gv<JV)KaUSm;K3M~BUHU1e@=0Ol}>$AJJUFQQLsOX35?#sSGN*qvKQ
zUMKVjJaCS3=sQ>$7jPu#I_U^YN%cht-n5`h)l6}XqT4hd58hwR-Y@otLTZd@zFPKB
zrh4$P@b&xrM1bRoW^!Y~efz{QiHI1Vn3y;N`svf%RoxXB+Xp}r$@qw^-mA@jbaWJC
z@^!%<&-&v>MxG_m;)GONEh@;%lYSF7y~~fHG+Q6?K199J($J{%xD0N-uWy!;ka1m$
zQ3J?=!tn63SMS2NPU<FNC!Dac0gSS)?rQ7UB4#In-9oik6Icl=3yUx=)Ash3q@+{?
zF~3;J?P^hVLSllz^$r9c34Qe0{l(!B9z>2QORLIK=jZ!hp(7VRYA;*;Q0HuflGK<(
zqNAhH2xuIRj~sdCGXpRr;t2GTFtTz@ET`+pK|4Za_S*G+b0&hRv9R#+gw<?Wd3le|
zgBnDvtel*Qp&_yRT8vH8U4mvxYN{X?)4}ceqJ!sV2A*PmsK7$rS_M7WFmM@lhs~_K
z8_S%nF3Z;XK723$T#JJ#ytCueJuts1|Ey0RpHELf5ZZzS6d}|~v`g<tsw&;q%Y=DF
zN+93>Y_xr|ySpfn69``>#ilIGkFOnkxt&kFqhn=_!nqr;@se7<f&ijdC9k&rClWrD
zYiow$=H|pvB2)4j@o{mvs`-0!wGR6W{DWC*Yil+O4cye!W*!F16Ge#_g@yE1RJ2;H
zc<>3X2+L%o$Z4D+2va8Sjg32n0=@(8TR-7n-_e(W)?Ex>l?M$CQsRN$#{-<AWDuv!
zBCTqAjk49w(`^7($au8^SX6Ry*>M@Q)8aZiJ54_~a1a#%u+1jpKs4>D<Cw0ts#w5a
z(BWZ0LBVq5^Uf2@$TiRqY-(=FcR0Y=CIaZxNzzx0^=uY_Gl!0MMUcct%!f)_f2Mc@
zw>0vh<ZF7d*Tv7A9Dfu(k5%M86m4aF8Ar$dZJUPpuirmj9%auY;9q^6s<De&Q@Lt4
zw>Hngi17=-`L<%*pK^Q3xgahs&gF1*a(TRgf*RtyGbegnD>K_*)Hgi*yDb1iNl7V!
zkiQpu`3D}{r{9}E1mkJ0TnzwbFzVD90_H}J0a~3J+u5^S!*RJJuJmy;J?~qzvfU>z
z4ZiKsU}*{cY{_K;Zca*NT<mIlc*^VI*Y*AB{atfSKpO(#b8I3}?{S*Sa!hBpnfZAc
zOhfLyg~qn;a+hYzJg&{2*UsMFdXA2467bo=c4s@&fT{(M)X?iS%_-X}j}h23<tr98
zb05lBSZpseUf0yWV#!G&KE(MTB#?aLFH=a$aPx^9F5xw$z-M379oC-)wk^^3RP5|U
znVFuqS7?q&*&$ABxuE@t(d%|QGIDfg20wDpF?;*&_L@x=l)IlG!s|G{(rdVHfxVK#
zxHf>coCkPc;x_7n6$B*SCcTrRk|FYX_gQC;W7>2W08wS;D;s0giIsO4`JvfTaU+XW
zRjS*<o1ckw)NYRY7`L{!UL0fh!6RYhK-PNq7)(^uOPUNiQ0i*Va|Q403=EP|K!e(7
zYpfbHgG}cv>v7%Nc&jF7NrF?rZtzVDNZbB4ufF5Pa6R6hEE)MCPpaN%jHW}G#F0Dh
zGWF!@XL{^CG~#{+0%?npPL<9&1$}082#O_<HO<bu1!9@$5mYn*44N!32grjTfvfhB
zhjHZw3yfBK)n)xRUrETdCN?&()0#kO3j@XFnaZ`-WMX3e$45s*DL*GCC#hq40X1_O
zVQl^VNZo$(Iq|vDPFNyGDcv<RH+2-!MUhF=Xgy!IwS^=h(ZhCs*XS<u8XX^>SXC|R
z>bEMT&UMG(5Phc)8~g?*osjm0FD^CL?=)ZJ9oFw*!e+sqDG3SEvJ&a=7SoaBpkNCo
z;f0Jh$s}LS_WS0$fs#c0#1y{#-QC^f@~Kas-t492s}=&mpH0$^@7C^IR>K4nHhJJI
z{2}S#W{EG9GFeT4GU}MGqyTVFys<GK?l5}cPYQZ|&$Q-L-ayPb1Zh-H#;VWZ>#>{A
z(!<ix$kDM1wz?#s93WLNU&iP1mZGk%UX|6NKR_p}+&C*cdt_0iP?cc7rufSv&~=66
ze`?pT2ZbCRIW=GI?r+vCP8nWB!1^%$N$`B+;U9t}zE4soJ8tm>VFa_YGup_e%RoD5
z?om7>Lh$OV-Ts&P*555KCaHK1!cSPncwKf^QzF^E_N@u0e|>v7H8nNzp{rY<x}s`~
zuQ)#5l>xK+t%&v`;#D6+(p7O8iR?BYl0d4%k(rAh20&l7i~v_zSW+E9Q9#1C3Ek6Z
zG<Jfv`mJqG%-6f0pFow0L)Zr;x9)G;ok73?d=wzxadC2*w`?r6x%Zm%6My}@Zp@g8
zk1@C&p-7$1PQh<ri>DD%KQY+<!fHa93QO?%lF^jD&Uk8KMsi*l7hX^GJ-60(otQRb
z`In*4?&9?nmw1JI<q6ue^Yi<*#rt`%Asyq=sW%xQnB58jl8sn7YM2J3GrYHt=rXW<
zh{W2ZeUN<wa+cCyVOr3%EsVmGk_acc)3mg-B1rDFsh&PW7o+Bt_+b(*H4d%Tzf7Hm
zV*@+Zu~T`Y-bF|YBH<$Y@f4k<-a}JWf2b=cYd2U-?g0TE&y%G9U*8;3)4-6l_vC5M
z9uZ+Zy?bH|n9S<j2Jq|h#8cuzEQ*Wri;BHk8Vi)gfY>xk4t!E1MbrHrZ>*8a{&c;;
zTCY?bgS}w=f%wzmrJAPVy*|d~G$>H*<&Mj>aDn?o%Fo|e*cV+1h~OMKeHL(WPv$f{
zp`+Qaf7JHHARzd$%_QozE6qlwHj{F2oauSp56wjwq2~}8gQlU$vF>Y(JqMRTY^m2{
z3Yxn=NDAcJHtm*LUEQK%=mBHodoM392iE1ZPZ&b{zD$oY@M<E;N8p&zTAw`R)jk9u
zR{Zg!U>Wqa%nIK8_Pj=TK`D_z{}rEuU%HmAcn>JR94?n7By{a1{p9`fTEtR&&hL1G
zYlt?ERy_1;7`fduTwIrpK`XamxaQm4{ch1DLGN%o_&`)|((k8FNNQja&+xuOMj_a>
z<WjN4nw3{AzeH>rZ_h3+E~+V;^rf4{M!pg)G#E)KDA;Lh-{cG=-fu15yO$puEqb0m
z1a_=I{usmw+|)tE5oQDDqS-4tpo@INZ(bkBUcY4ih60+U0n25s(H*c~JX>>h1B1xZ
zBgbD3hK7bf5XaTkv9##@dCGjnYs$>|^r{@O*UxtaZGEsfu)Q`9mPAAPv^gX0MsdE`
z=0;>cudm0ilXKU)2C+c8ZvabqnQ3M?A@^0>{rX}c`SWcfu%R9H>D>lb(FzE>q~%Ry
zUL5%b+hXxP^^IwpKr?pSt}kqh2~(Yr`ezJl7#Ld#S%$d9__1RoHHKNu^`s>2Q3wb<
z?8+;;B8bs2Fl^>3dZL-z!Z4i!fb0-poNjbKw|zwE^=~bJoRSg<1>WzN2)dtEPMY3j
zh=$xRPd4jn=@JtVyz`3n_<uBAWmJ}1w<ScnrBgskI;Fd$5kXo)y1P52LAs>7yHUD9
zx{>bgyc^H`{+ux!<Geh*_gZt!xY(JcUMEJwc@i|hff{j!+uv$odYz1WgIRd1ARNTe
zs=czb<ngj{IvqzVY-#h^tfc_gBNASF1+wTr4lN+`({3&vY_vkfAO^KPXZP>lOvVV3
zZHDXdN>5Pr3Ovq@KK&(mT27k>+Al8<TD9`Hse_O7I+=l*dUdN<`4gwr;+IC#&n70j
z&rdpDW@_p4C;e0;Bp<9#Kq>Hb=vs_IwQOP+_j>2>@OH15u`uA}v)?iC@OT83sTSSJ
z__(5$Rx5~U(`t6SzPkF;D+m^uFx9Bx=S20k=Z*!dc99IeobmR%GwC!Hv(};9(1fA-
zW_AnwLthfF8=w0C6bNEJ)-S89Z;SSrYJAw!y@*gcI>b-dPvBqP?hZ}RFtl7=El`k@
zu-aPx8sEs%3KG!JXB*LMbKgDrOa5M^q{Z!eB$es_1*D=<_E&rxoYr~lF2}Qr--{J^
zlEjoxpUlh6pLhV#FR|v0PRGlgdqH7tV7r0VZi5o90T^_;7X>9HDzeMfQSQHvwEb6=
zZvpjYS69yPY&N3DMq1+!sp&74#e0+>4j9ZO%j+-upnMdlF}QhmV$t%8=tG|Q0vM3~
z7<uyu6zC2KFhzgNMX};vh0$XjiIK8FRDeDEOq3W2Fv4wr*;mx!%qIa%w|PjPku@P<
zks%U|M0>kN3)z=l?}_g2|H2+?*xE$d7!G|*X7255w8}_h-iB{xm5kiEd`%!Bgu)4Y
zjWrSaEqm<9#5EhL?b1qj3Q2(PXg&`5-cQ|(?RRgf!TR|Za`L=|>VXC6>yWP?hNVsx
z5Xk^|@$1uSL^cp;DOuOpOf+tV5neDRM0BQUyz%{sh5)7Bb>f%JgBy6Sh5WD2Z$Ldb
z=OrJ~WDTT(gGmkVRCx3}Jh4D|&)5DF)#(GkIGufJ_40PN<(GzUk+#^~;s1j@q3;RD
zZ^qg6S0OrHorHG;N&3g7J9P-XAb|Xx+1?Q)q{jXN;9u6T1>1eTMl)gKkb;uT+Zuls
z81F0oprahgz(FL!f_z4}SHF|+prOeS&n+)0VK~}P2q1}Q0CWr>k&aYBK8aTkxJF?x
z5M<EWvHr7!+N;@}#Ky)Df};9k`=Vr(Du|FoCNGf0;46aVPu93gsV`Wy|9gc|-3a+V
zcswNDF2S9gZ9&@~rX`5`c9>p+{TVIO*kJ;}<%deKuAsr&XvxoeQk1hde6aRn-7igV
za)a*L3;qtq9^kKpa{j?{BY;?iA}L`ru%CT_%z{4{BE3%2ejodu%@hlo3}!ylwKd`e
zgm`%Ov%0E!m(^vd={v~S!59te7ft!OJ2Hae`_dx+hAY@U>C!q5TSA0bg&8fa*<^yj
zB=UR#p2$K?!qpj6e+x+<)x6&|3sh(A_J?>t-1+|fQcZ0mquL}{^n5$Rt7q5nY=mur
z5ZMADxNhkBO|DW>YAP>?n|%q9#;g27h=U`*%~3RAiWvG`R9I1K>1Ep1(E_!{wdf5d
z1^(F65(L?yxoFr#>Hm%jSL^zbHdaEc+q8BfuTO0;mI(;}GGx(Tz_LS(gnmDCLj#q3
zaBh_0HO;la=#<!Kv(9Z)FjHE5qAVEOzTD(srlf>%T?0z#p`;1VsWA}tQQm%ace>sS
zcB$zyHEDi)C{Pb=p@SO<1BM=?NEL*>;OM&ljvfH6nQ9WipN(W6Nzs@{7ZWr0U%RG#
z<ikTq;-oua{3*o{t9E41kkBvGez#{97PPUo1%eX_ii`KpHl;f|J3%z)=g*&&N8FAd
z)w1D5zhB4;-2Vs&0VS>r6v~aRuLgJlFd@)<X9<(TM&gCP*nfe1d3<n^nx;s7zaekB
zjyd0MggWd`11&`QhtqJm{OtU7%AN=!w|9(;8KECR9E>_Jjx{w^x3ZFVxb!m`O&@>B
z6ZL~d1rC^w!^yR$r|_sGAfngJ2z2_0*l$23n#$+aR9zj54NUPNv`BUi4!$%yrj392
zq@&|?IRAP5;27D>@i_Cnz$8TS$nc<sP9;ALP12&1?6CgP)_0TL-5?a=yQll(1bU75
zloTE|Hv78^8fkAwUB&UL+(96jESTf8S~4#v-`>K(!kRb(7VQR8<(jR3#+P64F*xj#
zk+)$+PUv0fuOR$!EOU0PopJr+P{inTsQv+B5Uf6-xn7r3GqkkRtlGa2UIB~>a3E4W
zwn+8w?^m8#jWYV-ju+~6%4c+1T?5jIKUg!dz7M5*C7h{LnBxlK?vj&%xCby<<mKgc
z+C62-qQ_`86<Lz#c&Lo#sy3aDmn^KTbebJYJwBP>HEPOXhDb?CppYmQPf^J~-fT!&
zh>3NtRk0*9vdw%}Q<Fk22Kg{@a+ysH4uvlF*N2?ANH`4X`Ks54OBo=|E3vcb`fx#l
z_VMBNTzR!JyB7l!6RZpnK0zZ`x)~zSSGOY-9z%`uCE&C7XG|v?YvDEY?eMmGnb~{e
zJ&Oyb9El~y4R0=jmuYbp5o2w=TkmviEUFr2I<B06kdXWI5Pp3Ksei?3#iQQc;x>V?
z$nECj?@P~JEkH#jk*VN*+HKSGBUVG<^Jjpvh&&~v59Cxu^50qi=9RT{-5iLU8MYa|
z3PXx?f4Vi|Yi(tHEut^d2}*z}mTFTo(+1Uy+M2~ShgjxY<6mc+?{k%CZY|4PR#I;Q
zlT|e|noZUz8CqOH5f3`)41TeR%S(s$o9=RzGEIlAArtWV3U+iP>7JZ?j{XWpv0Knb
zOPynu@BF2MkopF}qVjclT?bODvg~)x&uSU6yTFkB<+yC6B&AVn$iAxzx|En0B`qyk
z*97Kw3mi4IwQ=$B>e#qM1niIcY@p|iL8(ipiI+?lAR_vEz&buZtq#6t0?hpiZdxyM
zclWtJ-+)IcJUsmP__#q5efibpr7b3?f#0hz0X0zZlsac*vd!)vv9dY9;9;w@+h(wg
z+u5O}jRGfz#`HA<I#|95j|Tw)0+$L_1gxJw>{ox56I#EF#J1i)$^HU{ni&p2h_PTK
zpPe~ndI?A~z;^jkCR3rIp@fd>ofs+FSdDgheT(P>S@g{&AN11APtGq(_%SKiA%qLJ
zLnS3TPiqN-@$~uX>AW6#{bvs?MR@C>+!^w-oTDrmDPt|GM@!Aa!^2?w;|<}h)BPGD
z(hGHj+ZCLEbs%bxY|a53_07@CZEXAP_39!#1yDyW*#|$_jv<lQJ2-%pAZ1n6>k9xV
zVly%<w0Yd)=(sa~-60_)l#w5;pi7O89$#58y4XOlb9eU@rJYJ%&j!4wOV`f6KI<ml
zPS1V-`$yAx9=8gN4khwBbT@HfXvB`xnP{uc#k94x0i5vZ$p;j3g9(f_=U522AKAOX
zshx0scsv)d+(kM7FZBr~anDB$l=<M0D;~H2@IEj-pQyg73B5<QWpuE2WJ<UG`}-C=
zACVvw)z21m3=AOX@;sg%v{M>j4c?jRWsf{Rvn|{J=-$A<zz`sXtt;L_K{h*$E{BB;
z<qpcQac~S-<FOtj0`vcmxhA_NAnucZ14P{oa3R*SF)}loT<)=ha0MAz+1y)p_DDcG
zQ!UfP1BETYC63qWK41f}fRlbeIH(p#B2PrI83qqubnycmIVCsRYBAi)YW(^ceGG(-
za9S=F6cqe4xz8C@o1449pcf2fPG{odd)!RWQC3l*SFbT1PG(mxt!ui2j2jK$5-2H)
z?>87spwIsec&>~(Z4Wth)7fWkZf+9d;@V!1mq~c~0H{r>HcF+xJ<)Zrv^*jxZx@=7
zPv@-^HE8ab<SjJ6wf%H{;rck7!f7_-nabg#$w9LVj97*etug?K(Bt)xs;FLw5*~fr
zfWPoFr4j5`?e$+YBv#{6=M*FTaiwr)AskS{gx)7SXmnqfQ_&_pnVX!yX%o^p6UAF5
z1VA%`OBeXcw3DCD4hV{_Y4PxQ50_%wQ>r@E@{gK|mFY<45)wg?E?jRAV4O6BVHs)S
zifAIMzqFhU6bombOvnrTJ(4Pz7-<dKu;rrBAEZZKddaj<w<OUhRTeLtqBUZkA?^5A
zxgt9^4FDp<I<&2rvb{YWGBmf$&L#J2KzjJe_aF%8_A>b<W;vF%|LNoRvh8z%eVjJ#
zCHYdF{V1jA`+uYz3#@e#NoKpIq)?|kE)el?^>Lmjb<Su)`V;@Af};eVUBQ%Tj~yiy
z712mWa<V}OFD3umIb${ylq+zl&ye>+oMmU`;7D*1bg<UhkMHTAk%xKuK!pq8ZFS*F
z#Fv*xsi(Il$r+Axt{>&m71@4KA8g1#1h`zipp4iu*$VFv)c!(xqRMR!p-HYP8tp+0
z9JC-Ho}jOi1kldFml}=g#OsumiI-?h{O>|mNhH~#{USm_u9;DiaiHw;664Z{lEDPi
z4Jyf3gd(1Tf`S}Wi_cK^LzpikCMFUg?Fa~nms9Expm>*yf{N;#fXa=eWIYS$8Qvm4
z2EZT^d}j}^2dpHd3$ITQ!Xm9-VI$4@v=Bl<*u1Px571InO7i;IA~Fg>%kU7sA<DEV
z>C*tv6o9-xU@a-cR10G4U=U}ZlSf61_<9Vz{b8<NPJqT+VpaNOupl7#Cu9;6(;Vsz
zNJq5}R-gu4IV3P>SQQ=NM7tym^xtUv<qePHjMBDY)=N&wc43`Fj6Xic@AFb_L%56l
z_iIv6;X{a$Rg8l9H6eZnrC-Nd_Xx5-HR8A-q_MHrOIHCwis9o8o;8|H2frJlB`Yqk
z^P$cG9UATf=O6boE4ub>NY#o6Hyr$Vs?~pgjS%hS^2iWpjmo`UQRvbyXzoacM4Ths
z0%NYI<b*TvjE!}?U)~-xH9<kpm)UhyQAdk1U`WFVGrvb;A>FWEml=`;{3j{#Y~7xp
z6Z<u;rRw=f24pw|M$hYx0^+Vg1b;sXBXPu(&2lZi$-bA?x4wJL#&-O#GYBSqxu$cX
zc&xsxwRdN@X>vTJD)O>nxED=HNqDdQiCU81_<)IcNVig<GI4gW)Sn_Mwpem;eNkj2
z@b{UH?OAJVZ`PjL5LG`P`WOYqY(X0vd;WV#&}hK<qV)uKu~f>?yczT->wgHDWgo#s
zaxE3gA2-Rn;6`32APdpNOUP4{MZUa@aWWLV`CU(#8H&a_Z_-4YnT$(?SsE7cU1~s4
z7HO<Q|2Ij2QO0Re3e<AFLZ>$)6l*+GW}}7a37t)lMlrbm{Qn&m{pGNUIhwoRmi_Y!
zh>zlk6MGkBKV1;a+^WLKs{eHhHm^cC<O^9`zy2plaWl%GOLg{jtf~UhXk})WG5MHi
zNZs&^G#D+Q;lopuFVtIG4<Mrn=cY9GadjlfXzsLngfB%Riz5{^aKpPkXmV^385R^d
zham(!67LgOD17e|5n|bSWiBp`JVh~KioE<N(;3s9%p^jBI2tf!?Z4Zlx$Ht)e@p4d
z_y+az3e?%~lc=4$!rclwR+>s#yp&RW{C)le3ZrtX`s=qxg4Bi(n(KFbYq9B9bO|;0
zVoc}CG9n`9Q2!3d^m0IJUo1GRN*dS4p|A3s(71tbc=_}&Fyc;kiz+>{7j##_wN;H~
z`~BTU>%?zl`G`(Lk0HG{?a;F5Fjg?LtBi@cN8@Qp@qzn;C`vNJSARu9w#jO8-bGsh
zr#FC@!>e~5xb{{vIV0F;dIF0K*4TLEzk5CMa<Ap0Jf`LLDSO57zINZ7C@7l~I*d#P
zYy2Go50~OI=@nNLoLE-kO&8#+-t<*iCb#=j9dW@_Di;NRkD+;^+$>aX<Q_<9uV<S4
zg@fqs_Genrw##0cNEYX6G9(-m%8I@FR*GXjMRqmT)&%6QMxUTSN5p@hrEaJ<B!oZw
z*^X$d=j*Gvx0CdfT$5sU4E<G5-!$iMtZ}zbkR|%~<;^DbMf`l~M_+yB=3rwh9q;O*
zV&Y}yXUPhd%lq5qPf=3n^ab`R$>TIpqC$>y;ki}U{uML?93<4^mAz|+?)G}-+^*tW
ze-KVZN0uG<SpDCDZ`L1nqfu08^QNLVDPkM-<-lYii<f#;1<v872u?&u6vENQhCM%%
zagCh2&M}!xA=pLA!t`#u1Ea+G-i3bG7e>m@KRTDT{D96~qN5x+&V>X)S_0R#FgN96
z{M2tuwSa(pi16QK!o6aH`0K;M?_p~m2FZ}g5F<8>zD66}D<dnzWQmDGfJt(kWbotT
zJ3KrSBxfN_r7F`ue*75(R`RXNv9aHcJzudgvoq7gcQa)|3a2l{j4bQf!$X5s|7QOK
z1l}+y>Ac;)rO2P)<+32jD#Nhg*lF|U46l#o+REIqWX<O^rBEqJ3HfWbXQMqV8B%}z
zsHmt3K4qO0n^c_C8o@>z%(CY$6)Lx@>(F_++TJyxVLLs~Xak0N(wIDs=F8P?@7Lj_
z6X-mz4`&WyrJuZ>R-Q8(3cOGKTNV!v4v;8^&_mv78!VGvGGf3JwXAkZ;joKP#4zy+
zK}(fS{Q0TpJMe(wvh|7kUW^`8+^`RXf~48#XovjPFKg#-ghhWeZze&yPo~PWIEYcp
z7RJU~lzV&lNn_*!j80m&1Np>tr46$=W{tAz)U=u%2w(QOI20rlopv4YgUY{CoSD?l
z&ox2$kn;08S{wT_UvI4br1{&gs^fLM>+$_)(c`3H3!d?h>2NX@et2GXb_%=|pqHtu
z59mCcS@`LKS>)K%(*5O(fSin+I-~X1=aH29BX*A3A%=b-#bOl(3uAX+0M_rkfE$sO
z1#?kfd7AW1PFILOoD-afjM*ecrA)p}wQ0J|UK%;!bf_vJR5cPHXK)1JJGCo+Xw_Na
zZScvAwdf5;u=vFX4=9AbUuuleA3e@CLPEcBSj@9AF|E2LMZth|fJu-#zEC;h+=_y-
z>v*M}oRgD>pTQBhHi1-}4O0hhr5X(mt1or-l?v4EXE{$ByNDaN{=&bG(lkP)5e$)7
zXUbOE+>SE~tuw#QL;&zOz+PN*>tbL^<EnN{T6zBL+c%{`f0>mKEBRgfYTw|&nKI2r
zTazD3YM(TmwhqKvm%m2f8|v$2DSe6=)oB=jK?k~`lV*X(Tg+(58mrN(A3rw!Mvs$t
z@h*(-PL=^GvQ?YS#=3l)sW}UtVAbfwMeJysVQO~Tw4}a%S}QGvbUvjxVOx!{?&;Bz
zMq#t(Sr2-E(%Xc=2;$}I;SiGdv?_=&zmGjXh@=QEh#~%<XCT5Qyju%Brp%XN-o3qT
zBq*NF&CdnK^&ZdbNxy#Ss{gF20)FkgqZg)XbH9rQY#U`9uNJ>aYuQvXH#=JN5BKM3
zIqqEq)LqFX-|p)GeAV*ucYs(D-tHx`?24z8>vb8u=B%@$<JQV^Cy52VOzn?^a#M42
zZJo-kjHlby(-8Rkw3Osz^NFdNX)p#N;VWAD@|l^R+2!xr=aDinc0O2c1mJYB*VmJ?
zxD<MNi)q;bN%?F_kLyP~?$EsSOcs-3_KAs^@|8BHXY_h89w*DKx}A%p&_(RwkdL`f
z$It5|6d3)>OA7_(0s@}D@20K=crBZKV`HxzHjD4>UN2&g$z`5i_3Q@;++OVG8OB~x
z-pj}fJU$TM6z}BKB8Z{=5gcW`97?e<Bn7O=Up;r!8}VUvYF#@=X3-G!9%Ew+FXe`}
z<l9@A1O_eJ28cN$*Em2PO(%tch0yg@pcpqJG729vb&yZz80!iMohc%j`qPzEo#5(r
z9~z1Xn)s)?E~!7YFfcBN*ojqA2g|ke<gAZiaMSL*dv~Ozfs^=2=3uTi9GkS>`E2qQ
zd4Dj0PR&?HT37e!Z1Wpc8_(tTHUIFCBmiRO?>^fmr*M?zzb1TMTUg72`5cE8MuS>q
z-+flKybM`2HL5;O%*UdYeSfpg2nai<B#R=+XF5-pe$&%er5Z)J+fh#7^8X}F0uW`l
zF!aR8m;2)mZ?CT)wPU=OzO!>qc55ggZ#oZ&5w3Wh1iz_P7EU4iTUSt0V(%|=)Ncn5
zZ=+G4tduqe<2|FpH@mcS{}hx_Jh{iI%_Bn<YcPw2Fwu%O@ka@TWKlNoda&H<OOpY*
zQ@T{obNEc;Sj7EF_Bws(VR^e_qDJCVOmDl_^Z4d_&c4fuhz6VU<=Goio#&1O9Z#c`
zuhCzAh&u|<oQ9USWuz)`EjC_h$(rTnQEYB+kB#i@?YV63csAJ!$-16jl20CtMr8c7
z$fVCYtg`$QSIpT+IX+Z0;1D7Of9!EG*Bv^;VOgR;`=*B50>)xog2YQm<6^!zsDa)V
zvsC4N^{+m|dB6NJZ<B@Dl-C`qS5hLb`~)KQ#=&A`k|`T~Zxvfmn7h6G<bqY}+4CLa
z^O0)1b0~hh)p3Ns|4qi@MYu1FOU-1&VaikF%RKmbEo~@FxksdrC)R^<S7tA%dh}va
z?1oi;<o7RxZW#!hxE(HAYnO7tQLm5)1AHKe=}O6tE!HR9AAZYnVUtdr42fiG17H<@
z!R4e478*m0;j41>1G~gP0oGtJW2O5F1Mq0S&ICX!baTA}?>I4^r|?LG`#YTI<mhN|
zD%KhmBcto*yJi8VE$WnS(l}mcbE;`td>7R8G@3O9{`R`yTgO~U-w+N1Id}c41Dh=B
zG4C_BCa2hA{O(Df&oc@HbCsA`xW(runvel_(dJg3d~OdwJ&k6=?toBLljNc{`&;gM
z8C54MM@Mldc@q5*d!cQ$PoIh=j2Kw#bZy4iEZ_qiAuU)OaMp{cj0oE%7dQon2{IDh
zHP4mF&;>9MOnw_C{mqQls6U<%b#>i?sy+e~wH$t`UHJ*HuFx_w|GFcrDq!-mHckxn
zNKZ|C7+iTwrIeZez;znw1rk0uqckZirNyQa_g&Rz6jWD4F{KBv^YU|JYN?1y#*GUs
z*z7KgzHI~#FBrFY^iCob?eAj>;3Ki3I5D_*1!>X0L1=$Gs`;2}X?9G<pe=|)wewx<
z<HtYuB<}pVO0~5PQEs`1O`hu!4zW8d(6tZf=UvKMVT$DwpPsF?L}w_BL!T~|sjf6O
zD3#A<6L%Q`3~r?gpZ`XZj0YeTijuv71D<R^|7g28Pmk}$HK(TIeoNGN86STY$^T?~
zUl)$Guad#*P*y>Dyl>@ce!P=qMhsBK=NoyiJTuxLl*3w7f(*=1zdRFZ>Ka7j4~@81
z4=kuz>F9u4p4je8h&Mcx6z=D6s(#~RY>Y#S0w8QMDBH1A<Gl81n=$PB1G*2~bl%`)
zX?goe3ZH?S+jMXXIrp7dCG&V3!9clo^VHbb!-?V{k5wx-Uuo;}>Udmn{TqZvNecIS
zs`4+>7A7X4;o)!RxS5!`hTkqpc@;+K*|BK$&_zfIN{G>1A1v3A3It8&|N6Rfv|DQ_
z^2?XkRiTx`g8X>5Vpt%ZyWQ!!?)ie`sVckrey!WA)PhI`PT{j!+c!Iq9#^WO@wqW#
z1X_xJdU9Hgk(KNAfj<h62=yv=Z<1nC4R-m$4V#LKdtGmV%r^6vuBEH-jmuu-#s&p<
z<%7WUd3!Y-HVKZt#?wa57XvqU%2V1{DHCBUCTl2l*3!54Ly4Hiv&Wh}QmVyM`13M7
z?qxi@Y#;xmB4l!XVmu2&MMC=H$YqA1r7syANuI>d%i_AewRC??Vxw`P^EA<3JD+9T
zgKR9*c0XdqQpm>7f3z;&zG0{$0O)iqceWzxJa0b2XlVj{Y!;vJ`mKo;Fvle&l23rl
z%g--71x(YgV-s6o=S2^FC!LTOW28u){o^Bp?8jHDANIH~yzL{D(V}sVR+rw$+{BOD
z1@Bq^4hanO3w+sQ`Z|_{BmzAQK@SRt7{>bACzjM$sna0CM3^BKY?3TnH+px{$u~hH
zqv`F|0VSKud<*^IF`TJMNw?>28S2}b*a))dzm$J_-v+vU4DhAfn7!$8BXPIX8mue*
z%sj66@AXPRIamP(>?JxDR>x$llG7<RkzjKGf@gu4HO+R<;r()=yO&+{!qu-jfIf-S
zc%GZ2hP5C&j8#sW^*X0R7tLPzM<GGKs*=1dW*7lbb8n`^YB6ms;_Fo=HqD>y&E7a`
zYol-y5#_p94m4<&KbJqRv|lR6dvNfGRk2fa9Xc_r7ZjUNs+mViidy{KO-w9kx)WzO
zNPELkPY#Hr8tSr7^SX#8e<S&CStu!8PqWrM-0H5ck*zf@o*(L;Hv^uU9UtT6@{f;>
z*5^AD1CL5tS@qfYU6gb*m7@|;w6q=*x5lt=_NJ1P^V8Cn78C19F+z;AAEItS-SB#w
z{1;w4a1F6YL!HOla<+~%I}Mgp9*r8&g+w~z?d^s1=A^U|6zA!X6Cr;y|LUcu6n!;~
zlFYmv7y)rVL<-9Wq3a`5jwMC7oz!Y`ZYiRFe#+Q>|97KNA~M7Mxie`{)pG3Nb8-CR
zLB7?P)L?Zy2e8P9`zR?@U*}*xTcJW57vt-`Kdc{$lkjIKe)<Y*R2x5l4*O}1ahXP^
z`A-}6S={<MCV1>gzkj;}P2gCmW+eqbL;Ogn<KbeJezRYg7+}941f<eY(af(r-Q|N;
zVvhuuLgQnP!YZ$ykd2Lx7`Mi@pJA#9k=WAa!4#gK9JTFYtUx+1Cts<Dm3XGt|FD4P
z$I(J66a5vpXV#PxqaZc`v*7_59k54;8f*qSJYO+-^=m<_8e1IxR4vRX?Bujs?ifDU
z-JLRZh$EPesgRTV_z<eomi8lYwdA3&zp!BzmtlS$2CT7%>_J+x%_jTtAMr7YRT(2g
zL&58IuzQ#-ROKKYCrXxQ(LeAp|Ik)t<`*=`_?YMB;+lFW2`{M^rFE$kGi#u~n_^tH
ztrVLsP~O|x;%M^LtsJdO9IY{v62t)!!})B<TGn!oTiw#CyT0Fd#G)GH%5e~6C)nQf
zN3OJ;ui6ZMnirg>?!o;29s5fTYeJ}B2_KCKPVtyE3%-4rmv!<HSD298c1OqADMSYj
z6WpV(m#ugZy(E$a>KT|23yOa2hb3aZN)iICCV1NU(URZP!}U`D-2TBhLMJZ-7M0kJ
zm0&NWpZ96|`Nj(OlfUiu;R34hS}0??+hv^J^Xc<VnqUXW<Pu<&?qO`dd#Y7MdAihj
z3^bgco?dFb9&7ua!g<_wdKdkCF7T`or#>;UWOTmtG=I53k>_>3?<55k5f<iodwG5J
zj*X3f|Cl7}>fyFk{&?A|0Tdq4_fC8EcO;&?#Z%mu-9ra0qim=BMmp6{sw<_1*#*t1
ztwl4kp}9(Fj`L5sVBqnm@DnYT)R$Z(;J4b-AS5AieJzl_)M_?ZNq*ng|EEqPNHzBH
zr5^S1;E`;e2!JfTm5a$~6nMHQ7J+rNDp8l0KVI};`oMNj@^C*Dsl(Ou-2Ra7bq~JB
z_F8!4x?i5#F;fn+Q?Z{u8T1#*nD!S=;JCWpo8%Qr!8%QB!tO!NlO1t{p%i+4vD+Ba
zZrbQbw3?NSN#jVm8vOOxTtvIQOor-ggE6%{E=HVD25SvDue|H?*xb`g^_dpS>9w|&
zmfg)sdTc(!*kz)=#P#!0y+C%F^R^uOI@k1DaPf1em}R{wUuZLhx^H~?lty_C$^*?%
z*3ltIFc|z7Q-&ThSxF*M`NhNuw$llSNy&rwf?rnLVDFrBFbI<rd|7s_<siKILPGjQ
zM4;2lSeW^LJIlF>Tk7b{q=trcvACEI04!<!ty1BSjh}Ly?}cLxs2^*SXrd)|?s<$P
z)6lVUQ<IgrCImOww!^q`iyB>bWu!8rc%(575v6wV_9{JFF=6TB#X>eK$sawCR;c3;
z;yxZ$*cBLwl4W|VfFew(W5n{iG4ihROmmO#<4Eo9-sa$7on_%e%JXStO?81x%IiS`
zrTsT#44{@Z4e!Z29jT*c=czBx4nKuU*#0w_LHE958O)}bSkHOMWazM?OPr=F3)Q$h
z(hia2yQuPa*z~!PGm`SiHTgPuMulz;%-sW0NBt-6Z9R!ZzQ{v=4YwRdKn=TM-Kq=<
z0JjI?tC*>&p?rN%{)S=Jf8vJ|=~wnDDs{uDBO_4_{kRai2)oMbVM2KdrpoCqWxFP@
zEaT#Qb`2;ZTNR6uBX2kEw}za*7AEJ!2pq6Fpga6nc6n7J$66RHh5fy&2Cefw14odn
zc(DVi$dWwT-#iaP!b43XE!n(T&%BhYq>9DLF?=J9oEZ~YpX~`t34~FHCv%j5^f;F}
zZeGp&2_B8;WT9|fXW!Q`l5~pUzxjE(?vax?|8T7~V-Mh-z_jc4w;wxmoP2(b9@&{i
zB#Op^K#PL-#a~$CKOFn*>rtqtEIkh~v4F>ih=>RRPD?QMUu943|64F?AP;llPEO0A
z!pgkiidX8YiATi8|63v=m?@{Z`1;Q#fy`G$SsCiAtlq^pV^1<V1;O8yWaU_RGsC|B
zDeT2d5B_qAbZq`R;~qmD&!0!AuZEeiq-OIccYTOsls`EydyQ7{_T@1A3(F9~AEO0v
z2LWR^C#4ibeHl%--`&p{W&9F?UL^wPwE!PhY}5yS-Yy6Ug>40#-Mnq<i{$?3#0|~M
z$se6EW9ahF9i)7T9a-tgKWKh@-@%>g(rlV8zvALnCq+}z$K^+prces7)r$%;C#EBz
zi4lRenzZY3F?zZp9AbgsXt>QgIs1uGsWPvRNd$>M&+sNWDFYw>rKS|@>&W-sVzG+y
zsH+^h_~ASpHiN?b_N@^08}-qo<Ya(>2Ly<bMOT!SMcAYi6i^o`bF;Ali5B2Jo&ru3
zR@O(M4?oj!m3s0ex_e|J!dbp@OwyA@e>F9*<gsEKDd@S^$G`{#h7@SjJraR>YnW2=
zz`QXPNSRVRu%&aq7f@G?@`|@f^iqMy2ICLRZRj*Uqr}DAlBXlQhx84G5YGPcu|sE{
z6{uIsLLwlL!&5NT{~HeA-@JpZDb$QM2BX2lLyM)QyoJ1Id&<j$P(Oa#jW58F;xhHU
zY8fEfyB*Hg>Q&B?Lux5j@(XzV0tKc3DCH*Dl6C?EU%&RY7G$3;50(`otU;c9YmiZB
zx2UO|pM>$<z(z_c+s`KgCcPf_;x5{UzmbKOl3&Q6=~Gs#g9EE({3&6!cK&BsxihSL
znXY$~_<5hzr(Uf?M`PR^B)Ot^9Uq(%`<lHbr9LstRa*&#<F-uN=^Gn^3o!f-eSGzV
zF$T^Mlw^E(%jIo%F)8cKe!!QI$L%U?lg6pO7=Rf5mmJ1rAe-&@`RSMq-{~0owcr@@
z2yULZ>&AEpSaf3b^(EoyKT&7v>0eHKI_l!r$W9`R>80otg2h$ph@fX8kduozU>(Gt
z`os_ONkVk>oL6y_{{R=<Sz$ur5_{)+<D)*peti7QvHynRzTxe!?2U|!%z(CEfBhhd
zpUXH+j+2AKkkt-w?g0_ME5r)uNKlEmFMzs&UZV~qtvMMR?*N)F$mCws12P?e2owru
zIzQZ0ZoXGhSD()m32MJTS|}@HVA%qaw41*{$3;aPlvMdO_4R4o4oc-S6MBH}2ENUK
z{{GB)M$HdEkM!%kDuaN_nLo43)o1B=x{#On3;Y)QT{4^_WbbxGd8ClM&jUNJCit$E
zX%B0}%cq8ia1(D|CO1-D7=<!<3Q^Ijk*GVhV324mrlzc?r+#;Ha`G?)OGN7*30^&l
z@l*IflQ_mJE;6VLat%JWX4ao6kikgq15N1h{I1%@#{R;cFH|x(TJV^1^x7ZJ5btl>
zdW9B9WBVHx$AmKl3&FftrM9+KRz`+StI7QN3HrGGnYdM1y~%n%z7&vqQAzkg%M0Xo
zpnhjAC(HTVF!c^Y%G_KAki6pKv4Lz(UA;(27N{76C@`XP^16WnL0TI8Cn&EwZzYno
zySp1Cptd<3YpbeKfz&yPh^MFP_8DP)A8)|{2ipc|iujOkA5F~Z@YGaD4Ypt@(vV+9
zO^T71`wsk%zCx^A6w_vFv7gwA3JXKv{j__%AuuVg)TlAuXJ_Rg<QkgxB@7Y#CAlFi
z+?y+2f>=lD;Qi%RJmgxht`KaE9Ijye`ri`4beiDp=+i9((!SlF8iAILmG%5(xXk<b
za6WpF-~!YUhYR(%)sfn5?zzgeY3b?Ojke!(be`*1(tjR*2DHehhwXOzFKvRP4G#N;
z@{zl320*}=l$7U23)Vs)6?hS_3=hkO(HsZ40xs#|8DQ~KQ~_a(&}Z<D#3lxMyoL<C
zD2{xMy~FlteZr!u;HGPm?ceBbKQF&u)GndW+Y8>}o{kA-A++m4h%7d=3nR_dU9Vzk
zzZoUaYt?R}&}h_+qz4b8!}&0~Q$$>%EiipM6X@XqobLN711fol<*%G^b+-^8(KeI3
zDxD#qq}px>P}b35<P;)y=|<?G3#c{tPQu$T>XG(m*Pf4WX?GV-PUX0|L|fsDBqj|_
zVU3=K#(U28*4E)FYY~yoy(u$EBcM&<XB{5`kUg5x_q~v}uEF0FF+wym!*Jlb&#AH&
z1sZHD*L#~$&OYVX^f2j<;n`1c4=0*V=DY9f65kxCt&3>zi2x$tO%FjO;U3F8J+eiO
z%ZPtapg1+#zggJV4m-dZA>af`s3n`R8eDyj@vwy`&8O2|5=};ZuH#zwA_SR=*PVkG
z4bu}ND)oZzM;Wd*q5S-yy>2>>!QzvYl2UKK`v-*RL<&5iDaHZ@6ZbF$A1)fi@4YfV
zevFYTE|$sape5vWB#0AyE8lDpRq@fxOrpfaia-C|K0yd{rk39U922i_mJZA-0bLLa
z3(KGw?^&eD#lV1qk1x&bqfRDBnqSmuEiaE$=^q~6OyAnr_@a%G(g>v9up}+=hP>?T
z-BmAI*!&@a`=MlxDF!<+Tys9N1%>I)gW-%{g<%}8{I<IRUtf!tzr}y;)HuSg#jhu@
z|MW+#JVSTY`L_O7{(u*;IvfnpVTKW)%<E-XEjEn2@^5P5R_X+5MM-Jtg*pom=<wry
zA0(=wqM!g3R!XuK5WCrK(hf=kNt(-cniJ5RtgWrFuvQz7+}wNs3qS|Vc|ZTcD1r-N
zYDBZKW1q7Tt`UUb2ed7I*9iSKKaRkVz`C@5lW>R=)MqHbM*0bDl@X#*Z^`d^5xjUR
z?|Bw4oLNv>>foi7CU@P9qr=9|j*X2?NkNgydz-zPTdZ0RbZJCfwg))vH{TQ$Pm@@U
z0s{kI?#4)B{T0{b=&w%Z4ZI$%$*-ruJFq9v#Md^G2hngy!F6UtFK+=v2ao4N-`h(W
zsANjI+n;`V8T4?kpenxrOTl61U}f5O$iwfPfbiE7Q105E?#u@1VZojb_yozq%d>rN
znVDUTjXNg(F_K56q=pHJh^Al20_dX;ANt|zJB+5gS>1$5m*)<bySQqvPo|w_;s3&w
zTiH@1U1FoUGW4YljokjVOkH<@)2+#17U*I6ufrn82w7jlxVvw{9sPf|7LmT2a1h`d
z5i!zjxHAY}xIj8@)Z;#Xuy*A)0$dCM>5LKNhEJIyKfViMh?X455HM<-BbD8;SAQ*v
z2I9U-Ra~0BJF0g&M@Z74BLv_Ilb-o_pl}&VxDR8cVY8f$9MQv^-eN54X}P@bYpyz3
zeMI*r8n)6sM?h_&plBM23#_xyf;%>z_Uw7Ujs34b5NA*YI+Hwhuu<eFHRgK`;d#Cp
z8$yI70z^BM<X84+ht)GXmv?P#%f7z8SnpMU5DZ8FJ?;-f3JYmoi!%7U8M9Xe<QTc!
z-@#Dm$Om?Cy7{!4McxY6Bj+=kw>jru%8A2P2BCZc+C6&rsXLgeI+qSnLegzavn*1u
zi|(Uq!7Y1D@DGJx0I|F4>*O0h@kakD3c~Kh1`fU&ezyj!4d4wBP{=4LwMpMZL`Jee
zh=QO8{-8DSYP*pNO6R?#&2Q1xJ?q2knF3#lz1vT3gV#PoqNjc7C=H*T%F*~A7Jw*+
zIuxDIxieits$b(0s7VN3o!>Eui4Ayux{DgR-TDY9=$L3gMP&V&2yP8CX7?vxum~n%
zoL$XTZ^20MjmjSn-Cb1aOuy<7aOS2A*T(*u>Xs|1XdWNVde?+@Y@I<~mX(>oXvF&d
zha)miG1rBVfX=^V3eHy)(}U2>BIEX*AYkLJ`bPitNld)S$x*IVXXh&gLq4GmCe+^<
z<URbIJok9%nyf=CiB!&;DR}ii?7Gx;71+n)Be7H|=Xds8qLPA8lCJ=f9LxnD&_lX_
zzXXG-@njKN<tP$p=HEgQy;0ty$z|bYU=X72BES@VWjAYdJZdexz0qfMe=r>1(0VJx
zxz2#k?PT`*0cqADOC`I$7z%>-*Up`omxm+_(RBnFKT(!T&xc;SAZNGmh0ZBqcAOxq
zgqv;2-!J4iI3uLjj~6wD&d!466D)6`d2t{zp@{H%#Dj1l$owQDJx~rcPy)>rIQG}~
zWrDfi<{uh{FPFkXoDh_ivh5!x|LQ0e362hW2j#Dd&y9wAXe8Q{^{*T2;6!`bki3oj
z!#z-NE(r~n=iV<N%^(Q|ud+Y~JvPsNl&Y3fMZ}2T(|X?e?P$^~?cbp|UHA5FY_wmk
z{JQUt|9<^Kn}JwO2}bck(Y+^3_8Bd~DYy1lD8dS|%LFwJZff&4`5*RUDC*N#Jnf=e
z#wH61Kt(=kJ0`PJ`#lAH90kAsrDr)o2DcNKu7FPrB@_GR;8UMn#i*-pDrDmI2d6=f
zAYX;^am`Y@UeV@1V=_^wotbzD$S;H-h#QE1KYa2AKYaTwqZP>o1#*Ge4cnd-qQjT-
z?Vn#4<KS08o`P)PGc*5J44=UM`w0_grfEiIdTUReEEAv-qn>;aO?GIhc}^mybUpIk
zS*7VyyA1NiG}_8|X<i|mp<bxn5b~myH`Sw8Nmy{N=$;?Xs|2&FtDxUBce%1Hc!Y_s
zhnZmB%p+Xqu)ZAs(;{LtN>*6<dPG1ORF;UKNRTr1MT_kioG<u;9hm>!|My>Xtd4qt
zvq7NOR@JC(S$YOeXO(a~`_RyhA>r292-Aos<Pv^c2j{6zHk!%cuU^Hi9R-&0%)CsI
zF(KCK&Sms}_o3m{ztbZTHU4*c=y0!)o_Vb#PM|VchwA<kLB*$?8ipFOcMDapzS>><
z8M#H(cHs2k1J%&g5JP7cv}sl=xUp!CH5S|vQPS{4l_>Z^FAw+z;^ohJj}BqpA85Vh
zb&?yKuzaP=C%`ysf3<&9RX2)$@PILEfCkZmYj{3nF_*hiff!n+@jIgdAsFS?#h7_;
zu75i6zl~!R$?Jg{*ZV{~Q=w>zR$g^n&Ma~DEk;Oowtk-9{A;w4iaD-EP>cb!S(uZ5
zkhdZ5)tfS{ZI))GYpn)KVqjrUU)|CHK(s;0TqVC>9nN8}CY*YD`U!Me@zF^%v4cP-
ziA(&|qDhc87XKozG&m%bUZaYQoct4IZ1|m~s-~u<wkJ?y{k)V}C(Lgvkv;E&9K);x
zsVrFE=KV@M&SkrLd(GI6h`IXxK*S*4C;q4?kqdX}S`{tb=L#(`JgnSWBrD=o9eD-B
z>Z&Sa*H)E5eIB3un|rv?CIL(G@Hvg!GrWC+5bv74Uv$&mYmh4vB@<La-nAL%yMEZ<
zk-H1i#<>Brg1?a~FwhXZhR;uaKvk*Z`uOP)=yF@{uiR=rDk@frl6`9d|L5ao`>j*h
z^J!%kD7wnkTLa<cmmm5UOm^{P1ZOKUtE#GKX_%z|AHCx%?>m{_8B%6#ck}xooAU8<
z0jJ~foHS--rOj?qQrKuz#uAV^7nipIBh$9}Wly8ss&9)Azkg>rEkEu?XZIRECD)qe
zvLt2K@>Pubi<erOxQNd)FfvA-Vrg_&xOacoFK=nG>pcRb4L(kR$URdFi_9ilJ3G9L
z==X0L8(kQ%C8cFU!$WFKXU&hz-SOnUD12#fxOa5r16mDwzNI`ud<<ArqWJ#JAx&W4
zBAZg*avNK(?e;j_DG@>O?j3U;^pA^tkP)~Jzqz?j$Fl?jYIduZTTCiO?s$8kGq7B)
z3fGR8?7F?Z4I`lYq5$+zD%-`l^pS~)i9pY4>1yF}8<Q(ts#ELgJh{<GGC;lQ;}=v_
zRZYQC==82ctKJgcp@9Gh{RE;^Dkk^y#QQpF#79YZ*S=+UhRqQe*iqY6_^&WE1v@*c
zyL4Q`>|aQs1^?9D`QFz${=z%!@P0!G@roo#CjCe1;@o&N@Y28tI!&FQ?*%0GQ{%XS
zqHt(v9nw4`G`154ou=8TDLeuk3FvGP00K{K{?${MhnxHC-s>qp39o)Fq7g1HU)~Jp
zsEx_US;@&+i}Ra9Ps7>G24P>nX3%cvNc<i24anh%h>7#Af$`+g5l9a}N?Wy9Zh2AK
zNaHZh*7b$mn{d{sAC9elHJ3p$l5Xu5@(2(U12khDuk$#eaw;`Cv<givW<X?@!+ZXu
z-UO@{jm+I2Trkt9obr}>!?)SU__FKsdtD0wnfiL=zM2PpxLBo>1NS1s{o$>HoubWY
z-60SE{RO7sQG+>bL*sWB8dMM@jlY+YjE^_b5HrDKW>Wb?&CIQqJJRw!Ixx#6&S(T7
ze?(eV{&=7DS{tHON6B`eudgp|FafvR#_jplz3Mq6Hxi3o-EXrnJKk#z#8hI;B&O~v
zAt70;LpHve;sG@y#+v}OT9|vHuC+jau>5oozVIUIUh%`g_P<HfURhpl`}wn?v9W(^
zs-@*&%4`6bE;=4Ai%jGc10rs&(wzLVYl=4Tm$tUDVwB1Ns%4<{IBvPG-pZql5elPm
zuFlbW4D1QK16f;qZr2v`HH{59_QuZ6dU_9+oSqmsIQ8~(EJX=nGAb%pS47Q49F`xY
zWXTZ=XLd^nI;wnu4%}j?&g1qhj<qMLtxX&7Za_VM1_jhGnsx5CT{j;J`O130hg`m*
z5SNxFo02`TI~1;y5|i9yH$xnwLNO1(AldNe{sr2pH}!Wnp;I7iu>N?q(Pa=A7ybU_
z;{yu4vMj($S*SM}oIZS)oBP^N*V@|KP(|5XQs$$2ttoP8ItYV1>o!gW%}q83(go_!
zQT!U{gsO?&H<#%>j%YQ{#FvMLgjkqa<W9iRGO@E;0Obw=r$rvTX`^<zQv)MmU8>={
zQ}eKPcG=I`I`g?Y=hK*we)yCw7=V7{Ml9913^sj71_QV&M18p}g<2cd!%(2}H_6Kn
z8sb7gA>pEomvlUwCyyO4t^{LAph46>oOiHoYym-|TR+0C&}&T}?*<O&Cit^LNr0%<
zQpQ{c=qD$?n$k~wR;jBguXnPw{oPgolt}qN#MnT~z))E3HgE`RQ-nYgs03eyv*KLW
z21Px6jyZ_dQ>$!aVSiWK+#Jds<+?hY(IN(Qw3<oI#l@wirPb_ooLT#4Vj_djt;eOK
z>YcO+^h}9Xe$;!qL&o<SRSx?RSnpNEXtKF^WSfA8aM4t;iSglVW%JL9isI^6=^sLF
zLF!eRRkQ)clcr2|kIyH%?6NIScPX@SrlaW|HR0<Z)iOI9=rOZwx#t(~&I{Mym$%4~
zr!K3pz5bHvoh&*Lip}V9a{@_U(O?dL_yHfuHYv5v7hj66;@dulD<-{qL*f-BmT}?C
zT>|o<g$4BE<09LfMw(pnS0SOnY9pZOx`@w#PnIXBYA7kG%cFeDY_swNU1JxA@Ge}w
z>d!UFqS25VIe1DRk%1H;XE`y6S;ev-Clh2F_Q%Os5vo^awxw%)VBq(xi!d;Dn&`-D
zpGY=2T9UBJXmz_D2cBf#iFlmi%HMmPtorCzce2zR&Xj2<v8YNc{G8xFHu$7vV^f;v
zG$yT5qS>e`0(wI9@GoT=eTIL2<#(1W;V`Jnc%}~433YnE?gUG$F`AO}4xgFU2%^>C
zA5uC7n#@y?wCTG8JoZEsxQo1zp#gjXlH4WJB~xzfab|z4iW;*57yF9RLKky(ikx0;
zm$;^6>}-AXTK{Dmm)l!_Z7lx%UDS&`jtdOtvrO(5=FepEClCXK@srrHjJF0p7Z*qa
zm=7I`s1sRnLOnM(E{?!tv8PLP!Z=5^Z(!ihuEV2;$3=Qp_Pf@>;O!;TO9kpThzJM;
zx)_BQW0~X^(KQbHSHKBmd@Ku^l8Er^?0g7%w95xNsHaC9OcWV)nAzBz4`$y_`n-FG
z2y%9IA;jqO>!FESO-im3ADYLN2(-k$wE3#wWyvv>Dw%4Fv46w-nyjOs0DOKnKPA~$
z#@;0j{3KFURE++SD03f;Qm0H&stp=_@WkfX%Ch3#t4_>nR2kqQFLhB&h^bggq0D#N
z6aIwfMnXYCDf&$73g~DGY5>SnFDAmn%Y!}xXbvcM3O1J8+PeI^atBomwl~K9K96Sy
zef;*O_WNrQIm_jfKDbgjv2ix!OwcA$Qc#X#5jD+=!oDi2oea#$NhqzQqG@(^H8r=*
z8FkGQCDv+i?e*Q%z+grEtna5DzB^kMCe1*zl2Gq%r{oyo>Tayg{x+sB-oh=^wb;Hh
zv;VKQn2eIjZgRoRWEOifX7%@;*WAcWYBR1lszg}dDc<d0<!&X6pW(eL4xKra8ekwI
z*%>pFU3pgkQN&qa5`%z8vXjodvo>*7jT290Ku4|KoL_u|@*ZuAeo48)Rzv-lQmdS_
zg}yJ!{%z+vg1fmwgYL}9_UM-dJV@i<^~Ms|(0jz`U&_{BEz$%2Mx|iB0_bSR12oMC
zh+t~Tyc%9JOACws!9ns<z4IbLYC1YP3WBp=_s7w)ltw~-{I`0e-iL=gZmdV%xw;wS
zB^PqKA)mD@eg|^>LyJ;2A;&nChlG{qbC7#bZ?Pa}*Y@G5QKcC82FU{x4<Ou#@@R9q
z9=U%}St?qwKL;=1+agp}R`v=!A9Qi*jE8v0$ua0Vni_aTc%7<QSRj|mtw>4jmC`c`
zcs(t)KRjjh87t&!u1md%DR?}Xi0n&IR<YO^$jQ@CSpkLsyYK1W|CA-S5E^z?(r9*C
zfy5v~X%00TP0(@o1mdzPxw$#6uv^$OFwtLXwYv{x<d+YYr`D+Is%p`y|4~<4uZAPZ
zAMoY@r&r*9g5)`lg8UGrOz<paqlh2)B#gY_S-=@lw_G{oa0}=DM2gmSy)BT=<J7a!
z_hkY4%-0u&%Io3pP|~MjmGZYdGIo+jgPSb#Hb!z8MMd+8sd~vYvHg;Ip3h75sKkr;
z@GN@ya!<|==kly9tO>(Ul>&#^>}E6C4c1Sn&u61GkpnZIqaN;79|b@ni^ut;D)0iz
ziIJlEL+GY4kN!U_;B1{kjGp~*XL*ty_#-a0xcK24YOy3S&c}noW8(JQ$fVg=!&vih
zzV-TVc2I`r89GhrQuDQ~w77)CL~+f=kB?$xPe-lIlSvyf#_eOpx3`D|N~Z9K5f@=d
zWlG6X2$8P4T_NQrvAZ#Wmt)*dw^VF3eHuxKk#lt(+mCKe0(U3S_(Lh27L~h7x1k1z
z<ILkg$g1P<*d0q%yVcrRS63VLIp0T?DqO0+A0gM5`_~1KxM#3)>a=@;`r&Xra@lBT
z#^1PNoZ+XCWVogtvH6P#kN9RM8<jzuSH4xZos)iJV+)YK71Z#sh-4GIfZLh{cGQ4D
z>PO&52kaaXEDVKo$7_pKgNE^%VCb41_Uq!~jg)!x<#q*4RjkHhcgc?*j^w@Mg3xK_
z#1iRilL%MlSo0aRS}K5@hkBynpYAZTnX;Iv+@>;}W)5E7y;Xzd5&~l+Q85YR<^+b+
zRDP|X4-R`2t%!XPwhoFsyIDl_-eJqaTbhE(bVMZS{4Qrx2|6+3b!N}fn0DJ&^i6Ws
z+ta0kIHMCje#<F<F{0yn378<zT5eIJBl$vZz>1-!u4XZ>mYW-VABD1r-?q%DYH*VV
zK)q-s?=EZg9Tcn<*k;BB`92b`*k_p+_NE`dEeSW##>U4#t)s30V|k;T)qWz@JQD1U
zv8f+`xZ!oVX@fD4<4r&KDYoy7lY`CC!C|y8s-S*-ZO!ZEl*d#Ah)#!hcg*wa^Gym^
zdb)B%8-<rwRz@vo!c&ji_=F<vi_7^*a0!3@635wN&}uq)L|w_t%V*H68EdLjE8el!
z@wmP109KvQ1=l;Yq?g3>UtKK?`o?3SUQlYib-hCO^Pa63i+20dHB<q2iG%=b2F<?1
zowYSR^|OtBk~Ka3Mv?sz*=#c>#c}2PRl(<h&t?WJG(^2++Kn<esypA|JZP61Y+Bpf
zBe|`ejicNKC*nPCyKP*(qK)%*K^#F=VP$k#@YoFii!OGp&wDNz+dfz_?Z{>=BF(6q
z`sLPI3fKNnK1jhmD&>Fl^fIHr)vM}Z6L34d`xOz`yz<yqedPG7XuH?3kVU;H%)|XD
zw*N0bcUV{MR$-3>vDS^ft0}LQRIY5la0neO^X1>h$UAl7Pgv@g8;>N<4z@X*&Gu=9
z)M7F=x9Q7UK{XIGR<;vJ*GVagO#HJR&l?%Qh;+_1L{x5*bBQmuzJ`UCApl;2mvyo&
z{~k_*gs-{ZagOVuO{~l{$pM>^sDt>0N(PWSNH}8%U!*i|pi6YHuZd+O|NHqX2M&iZ
z+eE$PQqI0yB#8joOnh?BH<oW;l)}%<Z0Yg7y6LXzw{Wb<yJC_2mGJO99fMe<%n2)X
zb9;OLN&2+h{b9w>uA#8E0s_x!cAvmNBhKq`Aa1e6{mgi}7AGOG2I?~#FYg7IT`PQQ
zyal>*;GDV#d)@CBrJ9yL?SAviZAmL_<6GbQ7tas@cJ?U+9f^o_-Am|DGja=qTJHXV
zog07WOof}(C%(NP(5lf+DVv%mcM`A9v-0y#FHCqmFSll`Z7cbuz9~eobp%S}eyQpl
z?N-@(wxN&A<5P1&5pjgrX}aN&;cDv3^YeEHYOJ*zXSty{jfE?OM~FuB^~a7Wt>Q%Q
za>8-onwy*Z>gRhmr=}-m<mBvY>H*GftM=yO&;ma@``pCD<Hc?)%<ZTIq67IM(R_Z6
zLZJ(r?4t-bzt^vlzoPeGDOuUR8lOF<XWz3Qg@q1Bpno(9#Ml2c>FX<87S+?^x>vdF
z)Z&hgsNYIYAujuO+r<TpqS<N+L?qKe=<b-pw(DwtEWUbc+Y!xY(eTXSx1A|bQD5g9
zBj)9s6G0A);PdPbHT>Kfj$3LVHjO8~dL*%mok-~7`zguGKPY6O$+0O$tcmnva5;RE
z<WbYPj<IkA%wmP|2H%p(jK+*JuOmz%D;B4R6W#hIxirc94I{!5v*x87?ZUyxF_RPO
zQKES(rM%r9`<s;d|1ouz4N-P|*9T7pMM@BnZV;rqOS%Q5Q|azbDe00Ly1TnYx*2+C
zq`SMG&3(Ojz5oo&aqRt%wSFu7H`75gaH|@L<w=!Rt>@%*NS2RNmguww4(9$z?VKpf
z-*vll2Rr!9nr;JYV6xAvoy(U`x5L(ZW?jjOcuM>S3gO^9@lxRmOJZl(!h%S4!Z{z#
z@#LiPp!8;w)z!t-*R7$$@`SA^hc}|RilZMFn%)t)O4@D2Vq!W31mY$Ew<@g3c$<MO
z%&qF7Tc}5@#AYO*C~r|H;+r*NS9fp!dKJJfnoRD3#u1ksCqmJ2;(F4aOf%nEjfXBn
zvCsrRM&0W+2Y5?5jC?Qa*qi8MATe&&eU+fQvlV|68l7o%zj}8BG({$amb3?CJr3}N
z6-~DtV7?@l-RN<13b1mGmYHARwJAx`_r#XS$!f!TXtXIaQ9KkizexS=*#$74^+^K_
zF@!jArwjE#mfbjPZNtgkoz{}ArS6*You>B$KSB89j@^%lHRMGxx3%P%F)sXi)-%x~
zJ~YRp{q2vq_!&mL=3XC&h(;3;rvRp*A!M7+u&|)HI9apmMx8|)x8`$lX<3`RUwlN6
z^54>AjvX7JAY0rgm^v4$($&4?)&0+xtvlOv@`F)QdG#Pe?gw`aE9)fmjt}ZF#6j>&
zgf!LZc5do(DFbten#TOX!cgtB>^k(#<mw{Im4k+(t~5&HN`cEna_-?AN9!mdt}!yC
z|7#LyNcFg~Yj14wMA1nS4qt6t%Bh}sstO-;QL8jewvNH0qE)AS>b!PR${^%19=FxW
zE#sh&wr8^Cx~2uXRF_#snQByYaPrO7p+$sH)=(}SB?fWER7N#Frb=3aP$y?6IMYgl
ziQf|*GrFNTzZG-B;+lFV1F{`8Jq90%<Sf<2WAa=v!X1Bj#)$R(rc)=4lbSB)5S55d
zC2>~oHDs^&X^^sEE|9u9LG7SxT`n0iJQ62V1DfIaIzDdhK-SNxj<FbqLy}ZO?eLK#
z%Odgt!oEvVf4iv2>D8+YR<lGGlwwTCIfvLF#5|PIzv$!})45oT7JH~A&bn$O$VsKE
zj4Ziu6f4za<i=v0{!}4xy~tEpx47_ssmLAtJoB@Ao0v_Teb9MgG4~}8?3iz4&y;r)
zuqcKjXei=ZrWWXcR~b;?CaTYJ`wULOd<h1FA+YSSvvDlPi26<<ODf9Iz>eMqi+o?U
z3tAkpp*ic;algM_4IC&+f4EO*ZRM-CUfi!6WGGQArt|!S5o$WWVVAU#XRHj3ozt*#
zyA^Hn`T1Aa&F0(K3oT~!w+sBF-e%R2`2R{i(NDZmO)*@BK*aYrlpoKH+cPX1?e9KV
zzC9R=UfmL^s+r1r5C7&3XuBwr3<<q!_ULBh&Jp;`>4)`m*T3!TzN#mWle~*YK>op2
zW0C@n7*=QS#}sni#xS87f$(t1?6{otWYNRx9MdM|uN4_SVFHbeRpBFYc-Zg9_TF;F
zQGW=PP-ouc-N&lLTk_h<_w;PNI$R<_Ij~v0Z}Dg<f=(=^evi<Z*+bckGFOsijhEn)
z4~vZb$zlA$Rfn(jtyr(jm&*Q>7*a}hC;w1>c3jh+>``UjQCfooLs`=5$}WnE%>7dI
zm4U-5_G1!x950;fC99S&V=?0s0H3o_U*PjY_r6zRN@9+!#NA-3R!`1fK<PD8ba1E%
zr4ZLK%G5vbHXqS2Cim3;`0wAEWUVHyFon&L(p9BJz-IS+cwnsH%E~-+Y;3I2-gxI)
zNwLWWkfcESFm#IHNY+}-%*;F#6ou0yBYFUI@!94QT3>1>7%<&vwasp||5|h(<xmYL
zbNxtx?&j&rm;{iL$WBD$Rf^15+u5J(j|a5VMu{-;H8|s=*j<ELp1)7NEM#N2qv@dC
zYYd@1(u&)tc>3ON8ZMTomrS%^$D89<Aw$XMwvT1SA2&8RYqE^I82TT<1zoG|^E5er
zV<%iNfxKL|T@2gBL>dndui$KF93qP+lD7Vd>Z~{{Sl4}}enDy1HTduQr?kXxDPL=Z
zi^9G}CX3OUBZ(SIEaIIrTvb`!x}t68e=8a5Fk}Scj|;dT+(<YL?F;$}gs}x_F0RLu
zG7;3@Wrpk4Ptc{Yz6U#Wm!)gqPA}_>4t>#bVO%TmUeN4?6_X_O&ot$V-SI;A2WPH(
zOs!0;%Akvl_bkPP?1?-P;pZM>4mr$X(;vXf==E!`KzWHXF4)@Iy0F7d9Sk~c>i1G{
zX7L<3O6G$OznKRpQ;XRQCUEiaz(4>%)3}bvR6l{}-J1(lUEo@a+Pz)WedI}I2nTn@
z6dIvcs~b$;cOAPxrs}_xK_~rGBqStL%>vR>PtcKRNxi&EN=zh%UhYs4sgM4aGAx_V
zRu*gR%h*NYuCz8|c9d3eiV&UCAl4T`I_gAQnlP&c@)GP;i3j~1r#Z7ZYUOv00(YK5
zF_Uc@sLhL%X8s0a&lSFIlbV{E!|~Xv_e1BA<@m^)WpkjxFwxTm8od<(Y-w6W>1-A@
z++{-aReRav0joZeX4+aWWv%HGo{8p2DxdwvDMiuuCtpAB+clyBBzkrDAmPkJhad8`
zadQhHv2IJ_2dqL588bW)KXPe6dkb2cxD$MCQF8c)xjpNgoE(T<C>jc<W>t1;c3xec
zr4w1<H|&vg5Ppe7y$`Os_N%3IhltBO;lk}CPa<Bsv4voK0z?@Ok{Z^n?)E^Kvuw_f
zfWjZc#UkROO0AO`808KyKV>~nZEYPLF9(?#3ZV)<rPx>p8<**YAwIUY^EV|Iqtqpu
z`Y1PUaZ&_$*gV|-So`K)pdc4}Vs8u$CWlPPBzsdFlg`5O?5LP5YkEyh)YHaU6XYPy
z+uI!*wKHapkwknN4L0w%#(*L4P{sFoI44bf?v<~qTB6neu;3ek9ABqCGF@1ooSbZW
z43txz?*H)UgYVB!YK*2YxjEPCc->W;j?uL(7`Fk_T8^W!xwyEkt!&Luq*2M^_nSji
z10}jEG!&X$O}pC^W~Zj}P!+}H@e7}$b{_p|I7eE(e`}aBlF9=z0w|S*LsLe$ICzq*
zrD-Yn1a2Oyn0raz3#)9VE~!-8(?0I%zxr7l<h2*4&a46X-hO#L$!Xk_KJzJ7zPP79
zP;+y;7T0gd=4qYif_p)1_Klou74#riy9M|Au4SENUEem060%wk6KftY=HqB$OYk<D
z!n8nqsG^A8eqNixjS3;5{_!D>iHed4{8!A--r#(M$_F~cxw$#BH#@cHczDfvzSQu-
zfazqWp#g5XQ0Be8v=}5gNl8;Sce6}E!MYKTeEuJjJHnT)HMx?=w*88dIAf<;ZZB!P
zx61gYbD?hp=qk)EaAPVA)FKGo*%+2j<URXWAxHU!F=1dnT@us|#lyvq8pMKazMNQ3
zy&~c?=*QSA;rm|caub53mA1#l>E;U<M*rglkT8iSC;k3yK*rG+kA{L8bB`5D0Tw)J
zbFy{p;Nqo>r_*KP=KlL?Xzu835S{b%!L-G!!Z$@lsS7&}%h*Jg)uultDLdQSYL$O~
zOU4_%N@ln29~h`p&uh*0>>oGOS_%e}>S*k0nBpKm4Lx<`vUtkNb(MO0v;LUeX&eij
zo=c9zy&2UH*a>5G01#w5KMsR^RZ|;sBu-%M<ffd#LH&GSVx6z87g2>hh6TC2R531A
z$_3{~V}}eOEG2b;u7L>Tv(k(wm=6r%;aYUQnKBEfXsjrVmX5azrv)Qt3m6h4LmJxw
zUd(t0zS-aqA9uLsPYU7OZwrW_C~4-SD{+pkiv7?>g4Q50aWRv1dmQQQpHk&FCW3tO
zuVS3>a0p0(WiaF4<C}#C($A_T2qLunNl^%(`4&aM&K=WS@|o&vT~b!G8$sz)8TF6a
z$(Y)}-Ks{D$>rsQxVUa4HI1+(&j-&uo|eK%8jz^w_>(KLv9N0O-NezG_jX)-lGO&U
zY)}2{hHJ!(%E0CWFjMT_fY$imc2!9Da=o6_Jiav(_HWQqPyYV8I0*rCNZi#;La!y}
zxv1z>{VL#^u&c6fY+N_MrlZG9a_et!yO^6Qp0Q#7ZedZAUESK)XgaYuY`|C;_A`q#
zcWMe3bq0QuRRt{m%hhi7lMX0I4{G8grWUUEcMr4T?I&_`-vUndzY123fF<2{54L{l
zLIy<yzMu$XttyLou{MP!<#z<zv{=wU9*yyx573Tqr-kol8t3c`x~kFfo2;5|f4E^I
zPZY?FGUjS#dR98lqjJCQ?dr0cZ}W?=BdcKv4BDs;YGrfyRUs+Ajy^S;p+*xa%@j@_
zt)`-33ykgK^vTe@A&v(YO5+5VORg=#AO8_Zs*5TH?5rgH{=w~1L}f(4E89+uvn|2E
zO5j@1e5z^@EIVTKCxuhC@f~#|&w|ug2a6asovk(fQw3_?&;QK%aG2Npv7>&08q{Zt
z7+A;kguer6ZMU8a&IoLBw!#5sC;b;bqO7c}+tBbE9><%2pJ!Vma<Z~>K?s@vN+~HV
z?G89-s{8Bf1^`OQbM%-p`7yXUDQSzEznF-Zct)n~c5`?Slz5z%1I6Sr6d1t|<&C4M
ze9d6N`&|DyWX+F{F93#ZC~QU=tQIW#!O!@uC6nx~IE!2KaCaoPKiep6(!>y7vw1=m
zXEv~Eq*0$=b{LH3sw^9|C?PLjUg*lp!jtx!iK=?ZdnIEB!9lnq<J)*-US8gppvb6S
zP_umR>qj1|yoa`oq)R$unc#c^hi10XG`6F;R%fseVs5-&T5OJuwMTpn5{%uh(mVmT
zlc8TH#&v(My7m1@MH7T}2)Ngibn<8L&cT?`<bmdZ4C4!c&zDtu=0FPyrA;qFu}7L|
z1`fNjb2o5MsOCNt$~ZkO@y&g3TWGO8*sfIV<F+L*DNo<u;&r=bWM_{Md#74RjfODn
zan49je|X^RB{mn3!p|{50utt&j~2K+)<1D1mTR?jHTZq|jElS5rw`qnuZf~}r`4^z
zPj&XbgypC6dY%7r+bpeLUd46YJg4sYy_p-}!Qm>l>x+1G)E;J$DhnjC+QP*DNqeQx
zyDM;Yc1}B=RWp;)#-bDH0@*hW&F&vxKY{z>)DFhZL~bPzB+?Cd-V-kyjmn&a+1Nzc
zVHq4z9|5PU7CB!BqiQhzXx`iB)_*=2j39y~gIVi_VQ8}~#&Xf#<k^-@l6t>m;(1+n
z5ov;KM?md99u0QGQ#&>1lz{Ea$jT~mCOgv;kGpdq>1c}rS^#J~-MopUn=`Mg;-KaJ
z@ff2v+<djOfFnZ!aR9r!+4ro=lOMQCtgmIc#IztGJ%NFAn)SJ04fi3H&)sdUXLw@+
zi<QQDsey@|=cX1KR=CB(vt!m_UfvEk?Yi>jtWNGrBn+B18>fbDGwnCAif#-O)2Te}
zftRi8qH-kMNYIM@QC-2_D1CcX1z1fh7#E61wi+cu<z;1)P)k+ZewA^K&wEc5O|e#*
zO%(wIESo$#aQQyOyG}1CtJj|NT$r;Dj^#2}&7V&<g9wKSD*0_vblC~i+$XSF->wkc
z`(~mF<dk~=dtav$)^m{69jfbkaRG*sYZdzOAqDm(YICZrR5Rt;um;n&j@SeX+uUO-
zQN<EYMH_!_s%vf>K4m+*eevYOajk_+nXpbuq{_)_u4kbDs+$A3h3m8hi-0w(rzLmv
z==Z#idv^Yb*TeA9Th*h!9~{BtF>S_d++c&kKL)Gt*y2G*ji;@EmTG~02ix4Tj{T35
zydQaYp}RGXGwt<6MZ;Gk9}<q#EANaQ2+YlLyzO!#;dNG68(>!p1VSjzj-M$Z^&hxp
z2i|ps;g>k#vtp9&aFWuY;s$eq%iZO5na&G6>F?i9qt0}fc{D*V-Ql*}k(z=+Lykp1
z$Fhgv2v6q8p?QrOZ6>B;@<K1U&CbFUslkR_0N0m-wbLE)bmaigX;Zuc^wb?M6}KME
zKI5-%P{T`Q-TRn7F7n^y(|PV4IFF`r$^Kkg-2;p}kS~Ztp39aCA!U%sl0730DA@DV
ze{L|X{Dd=etT^1Vn7TH}N$4+M9jJrIO4B+N`$Mu!1(EEZEJ_ifb{IGROf=Or79G(V
zU|zmH_<4FG??ApU<0wdj_Kz`dz;n^SmGm1knkdl0{mAY<5p$bDM#Yif;ikPfF)$Dg
zb}Uzii<TUSvh%aXn)`BR<ch(LM*1^->&&St#;N*#O-i&F?L*rS9>pKg^kjc5k=oNq
z7%HBjywIJdh*xOe31_Kh4FFs^Ir;f@7&;`@77rgqZvLEjGp8qB--6J{KA)^YC&0Er
z68LFFO9Tr%b)ts}^#Nv}fMpSF3<<X$BUmll_TocErNO$U!CXt|L2pqtC_X0Q>9n10
zYy1Xzr`MKAtW?%t(Ek^+)LPH=1Jyf^Qk}?gxP2A9p--u+#iZ!YlOAIb@KT|>|8f;*
z^>KW4wjSb};6GzXYpZrFK8<l-v91uQUM;R={)W>}CZFp!=kFZ(c9&v*)3tprnNfN8
zBw;u9EDd8s`}IGB*?;c<IR<6KBa4SqrbIG-d0LlXioxpN7W&Li@FHy&!NPBBtGXaE
z78Y}8RyU}%<@Q<h9WbiQ9A*ztjpynY9Ql<{lRcIX8T0+w7V8IYOp@%0)PvS}J`LO)
z(GysPLf_(TR6OML>}SuUu5NOk_wloA&VSX&D~!HO-jr+2N#<JfcwB&COHOGQ8TXuU
zrQKa7F)iwk<`vR9Zq;;1jl0_N&GpIfoEA;sYF>#S&gY>{J0#TYB;2Iw>K(7o#nnnV
z_43b`e4qN@%y{tPOjCZ#z%pCvV5L>YPbE9)#{%vHx|sPHz0;OuUn#&b&MzKteycaX
z+s`2#MTpnQzcMMsCVI(`;9VKI^{HdilS8#Q&vJlu+ajn&fN^H82+40re%MF3>Sy{V
zQ}2!MPT0i_TQGPiay!%Ci0n*)nUyDnZS@NTw)fnMYXFq~%t^z1HbpxEM~=A}A<G{`
zf6{k_#)oBLR^#_2Fn%PoJJOh{M_04-2j7`X7$V3LyvbIa?r6zaky{jFn0afTR?EvW
zatlAeJ8PsD8p*>q9`L(a3gY<V!RIPY33IqQ(20ReTrlUj#7&*kB<=rbPAlx3<#2!E
z6{I`h1z*3Te!(4esZNZ}-A<KnY|7ygm}(!GZg&2aFSan9g)S1Wp<s6V1XmxS?Z|hG
zN|805L!IYm%|V2c{qgk2dKSB(WC#3rNumEeYx78P36*SKe|%EVX&YI+2fAS(1vyUu
zy#cz8NRH>Fz{v2<nbDYO`_lmnp3U8Ti`X>fMWAZjtx>xA78af^?|%G6U7=8b<0BmL
zdGK%e{h9+OM0~`(mmi9`VF^somfEiE5=HETW6U}t(T*ULaHC_vmk;cyps>+Bkw%Ir
zDcMKCV+Zg^M<*w>(d9bJyDG!Mh8=K4fu&>o^T+rgQsjx+WrTx*;3r625#r~Bb3Jq|
za1gjWRXrtun&#qzRylh33NJ9%FirlCg^QE{0$J0Q6RNDmoRvYz+z_`ex6iy`+#5gp
zF<#1z*Nr7(3=}+=Depg3^Lvw0U?XAxxCNYz-=7U10RJZbAC5#eDhw=$O|7gh3(&dU
z<)x&u?4g;NBs~IMJv~t4?d|P?>Q@q^KuB#jvHl)RoWlsc{?WWg0)|$`Kl122;0JQN
z3H01#)L0Z^vVjTUtFCP0r{`n#V(-FC1Q-|_%4l0!>|G$L*Z(p)@91AUmabd)eW_in
zMy}?eguEH6yH@|g6XEW(l7aJN#elc}dn|hQxm)vTe4XM0IxoW^-_ZqKj4{?;CHPcO
zAOZCO>q(Hny}reMBN=cG($mqE78fTcCT8U0;NXB;$@y?WzvX*x1i}9hineuv%F2^G
zM=j>AMH4$FpXJi|FaGuHp;nlJ^i*jeCphNtK3fJY*Xy^Wr1xAdmoUjvK<J7vTUX^{
znZD$*;oEm|Fpxl7A2Y#6X0GVyC3(kMze#+|Sz}|7l|&pQIyyZjHf>c_@2>!?A2kAk
z=+7Fs#$#1f6ZhM@yKRPqpMH0P!zaJS#{+-_2iV6$KhV_-f&8!1qPdUQ*u8w9w#m&8
zOK)^N+ibrdJbD7+KJYlO3kY~`jcC(<s52!2Hbu;LNs9~(m$0K9dUfahYA6~I4?|5K
zy#9zzPr@2iU_Na9WGO}=7e6TM`QcU)6mWb=c*iX943WKxwz1>XC<2XK3TI9ND@Qa}
zsEn|P!cNem5jDx5_f;z~e?$d2I5_NmN6+<!gvQbW1wuuDrXmXjiuCsOg6xm&o^U+Y
z*iC#+n<z>h&x=}sIt~vDE77P8NqgL^Z+EwOdIUZra*Ulo6g(3qkoPb@Zx6tu9UVet
ze`?JKLqkFeSs~sacINTXD;XDfTN*(Z1WLBrnwr@bP`iTPV*1_1g_DJ)I48&7P(2$e
zaqAAkSb)A2P_FVe-?5G71?YM|V5vU0=78#KXD8+EK3}Lr)d;tnlCl8UrT+e1{r$l}
z-!whRYXlz2Yh=8!u^&{ji4Wz=pY8blPIO1Y;arW4{q0(+(+!c}qJ8I&tlNs;_^!y#
z3vTJ<hj_h9!~YeAFN7Lkl$6mUMD`BgRef#*S4cC0?YBn2LfD_O?Pk-Q;ZU$aPsmq<
z)YOzDbRHnJ6VlQ~68{$5nVXrJWPzZt)z00Xp1{gVCO5Z>fsJXEShgjAhJ7|VZ>I5k
zD$*wq@q7IKT$=TrFL>whP)>22IcYymRVQ1uwD>bM^<s_bpdaGZ{y{ZRl&O{fVVMK;
z%m2*+IHEk|WMsJQ)(bRB!N=*Pk~b?1=?)#V&@fRqf4IF+wgXGSesg*QO@K$_a|=^>
z0!!Sv`FZd<B!N~JI7-ojTh{T;miW)!U*Ge3(N=sNwd&#tQV7fTCZ+!mmla9y)9P{u
zk(4#feBclc=D|~s8qvW`!DOt0i8ltb?U;oD{=ok(1TNoDpUsv1iu}q^{I}Tj_=JQc
zJ-xlP8V7#^Lfzcl3Ir8f4Gj&?>$9`{KCBHfz;vui0mOE(%`-IAjZ&!vBn1E^YGGmF
z>FFuJ34xz5=27*>e7Yn~Dwo{5vDVJc&gp3B3;<Y-8*@ZS0U(T=BrPEUxZGs^C4)s8
zvNwP!PZj|xB;?D#WMn%_%W&DZTvou8COs|!@+7DrrozN}l8VXi-R+eCI$OGe9Yk`%
z&l<Nu81HnSrvG^$V3zrgj!2=^x)`@<`e3@kZFa%fsM7{fbR2d|#`KJPwVn_~s!=h&
zAX2`c>!9Tq!e?zK#(CD<Q@zv>1RunvkcC&2G8XIo`^m}4Pw%DNq;{P^)(2?KiKq75
zKprz-l;q~-+S;C^Y*9c<6h6It;Y(5DYG-%)H{dKD6iJG@t{dMV8K<dOnx=uthd{OJ
zeu*rr0Kg~=z_|&q+ax3;+}w~|I~8Hw<+Jy*HFN<10jy9kTV-eWTKOY{ac*g83FNd%
z_Iuz{H4wiP4j~=l4@z@G-6Y(swc0j<yZ-s~60hSD8c}V}DLuTJzIj7M76esauqU3d
zeK{jEYWDh>bOiTH?VdCP#Dg`or=}82pM9p8o><1?C}T-e($bRg9vo6L+T7Y2#gXy6
zK8{{k(9*Eb)6+9B$Z2UwVG0nI2B(`7jIdHoWKN?{nO>{mcxNIXHGyR39(;KqhkJfr
z`Vo>0&Sc3=2swB@_hPB!CG49`5}}9x7<V=Wo^B$6h?0V+6{sRF@YwO6?yJGg1J0xu
z^4CEE^K)Co777Kk#_ccp?`*S$CwR#IaBXJ{rojJT!{&W!@Q701%Z8V<@=`?8)TB)~
zlfXM?hzN0b&Z8lq-B0ZK7={xEpm?BKYO{bb_u!KO|CD9_#r<w^xuLPKJNDyHBEX<#
zwWoVOa$UUxSfb}-G?vnr=OssU3v}>6Y$~CcF5uk;fWyP&^@FV-PF|cS^n)n<2cR~J
zV`FEPlTA`)=32g5x??F^x14tZ^mlL}&DQ5<W~NmnHJU)bhl`ypxqJU3P2gI!TKv>Q
z@xm8`zr?q&^O^kH5_o!r<+3qg`26R}tQ(&Ad2VKZctYeKy|BOaITZhB+~&i1$>DKv
z++r(skH~tao7IdpVwv@jo%tU+5}z)C1Nr|jwy0^Z9E616Va72d!1Ef4%|MC6$IlO5
z81daCrf&Y_WBPk8kPAyjc6NC%Pe5=GpTx$-23|S<bOxAwa*sl@@m^LwM!kV#E#L`;
zLNis0FWkOpXh4KBe}#r>f^4n&G8LZ1+1UywOD;BRy^Qu24<Lh-)HL6l{JrxnrjNYb
z8(4<{Bi(tq?SaVqJ~O$H5io)a`IHH;nk`@;hrNHe-ZZm%3P>`6CH1+(2lP2GDm#TL
zqk^FiJVIf*YoYgL`(tT0l!Y>dnLkLbkEP0tlYFw?fdAv6PXj&?53_}5thZ-PdULl>
z%(l-<kvo#lHGb1PjPub)8PUkkhItWE1DD(y2a?9k^7h9N4|82zU0~;3SXcnrY<3;_
za;a{oIq@e*F^!FlT;N4b{D)kL)7l{z0gQ(=#l;}M5hS$L<m8+`KDe_|ad8<=6|n)@
zHOO)U>eh?hsddO1cA}z$(iu2hC0M|)91{~$wN#_kY>K8)%j@=Bk|u~roGJDOXrMrZ
zW@qP@nlcem@RHU}N{6^^418k^Y7WR?tMO1#VYg(%l0H-`pLut2adAG=6rf(C;50Iv
zJnGkhP5TLCuQj+|(KnhF6@!;dCEv^ad>fj|Qy+f4j>`G}S?%D^aYWQkQD%+Pix_+B
zaB!TakqPy;ez_Svd@bx`KmLj`Xsqwid3*f2n?1lv{w~O7yI8?8A^&)x#>XPh4_A%q
z?TL2bhHm_7<sh%y2vvz+AzX)seBf*{@M`|?5dEL`qT|e1Q%I--7{y0ZdG3x^I}Hcp
z!Mpk}5ck>OD=?Byt9^POv%8TNB9eu}vLH>K4J0r7hV-pD3ZMGS&$eA9jg?v_CML=>
zw~;ku3Y7s>UYHLtw5w|!gwo2ZCVeE*hx-Mmm+n~(zJ0Hfzc<L~0s<v+9S>O7`xOm>
zfxKs5g+8@uznG+)jlPkAYtIZ^O3?SxSl>FRLcvM<@usbar7B|6?bTk(hnec@j%_^}
z!H=a>olgenTh-v++yt>I&kmA~ryV~EL{=f(xtRX|pceiG?vVLkEkVS)9>0$IQQlYl
z$xm-W+)!<g@HLLmbTu)vj+`1S+g?kab&6*Tn|69wO8=2@P+(<Uc6LueL!C1@qaAuh
z|7?r$=K@*OkJiExJ&m=s&pC+g?W4P>zTn^yPJ7*aMZ8~)_6<arBYx$(Q*e`Lq2sj@
zVbnzN!zaCNAiF1vSTLQ`V!K<;Z9?1ofvKje;#7Z~z(He>+Bzh!?bU}g%w6>Ng4RpV
z?>8C*Wlrt#ZQpY{w({!!tw|OP8N4`fFQYOjmw&<C;YS0Xc$VLhJfAuI(?Ng`f(+wB
zt?JLD3m23neb2(>bV_bL+*?t}g{@!Fh8_$aX*}Dn8%aP}*&ssx;d9(qK$9Rp4b4gk
z0)9#mp#yMe4_cBw|Gl}S2fu{n-G@hf1-<k|ngt~9Vq>&H6r#0#S?QAz1fh;lU*q!z
zUis<Q*hB{$n0)nts8EINo9zs;H_ws+tt^F4YyZ}8{(L57$(tXPl?jWCWXgnp{?GYH
z5WB37!q<;FVcj@=$CljX3Tt5*?8LY)`A@KKrTT|cqgdbd_6o#A758?-++*sm>Zh9j
z5Qk@%&6$4Uvp!o4&-||aMH;n6;M#%QneKhCSYS{hy5Jx1f#LM!jt}hr6s=6~S8Lhs
zzZF0Jj-WfcN0?1yR{49|DYHaiZpA3BY&XsQ&5Y<@e!pK`XPJjfRUPh6E?SvH8rN04
z*^9ley|G#gHa7CZ(D1$khy37{7jebf`UZK#5uDF!kxYfZ{D^S7>xqeKlrI774ZJeM
zPl2ixs8kQ%UUfEmvOler|1sYCcVC*ur_L@&wn$gGF)fU&#RBK#a++szSBiOjm6$*Y
zIYLORfR44OoM+`E5OL^lWvJ)N`)IC6Q^Ng0jaCaA!h<KH;f8RhykY-8|J&bW;s62h
zD9=qLw%LS@{1m*jV&nGCSld8zgg-nB?nf>g*$*;fZ0Gi2k44*}k~U*Hsv*Q6563@K
zS&WI;$6q*z3^25af9t<`0nfv*MhQH4LqlN#)hHu}^EQX;D@Z2Up5bZB7QH4t^l-yF
z)##`mbv;D8u-K}5{*P+uI+uExuCLtubvK=N)ew7)89wNz5H4H?TokyB#yb@=<_Blq
zv~Xn}sb?M}o6Lw!Gu-`3JvyQS&+NNG<pCc!3?u?n06l-Lu9m6LH>4_oGO>w=jPR6l
zICQ8vYs^r@)*0$)G}N42(X@_^ez&j7VBx@<JWAuC9d*V2hcnq%2$kAnf#BWN`~qYD
zJ?+1@ONk~+Y^;07uiA<j7gZu_hfebhenb&CWLU7`Q9G06ltX$dEP3Jnp#2i5h=!+l
z&yC-V4~L%h`eolcgI#|REY!&n4Xf8TPuGnftlH!>5t!RLM)p80bGuaM4l0fe5Jw0@
z>m-(ui4CfPaXM4CST!L2OHdWZ_g66CG;ub22_Ch-AA#0S@E5ZHi}mbEzTB_GHWV=_
z5pS6BW~0w#kY^eJXy3n~oZ(&X>j>RPzL-vDKzxU<EcEBtq#__pJ9$tXQC!R&9ep@9
z5LM<A>y@qkIU7N5i_I8=IqDYp=HTGY@Lqm=0q3JhOaJ+^uBs3kc;ZDcMhqRK%yvQ0
zXT^)7+^P7|c@XPL(Dpka;d!ZbEb7w*vA-KKzd=nu`H`;v1k)!gzl4PcR<&41Okk*|
z>!9+M#3I6FN)|+@B@EkUmwH%-HV2$2uZ7C<igQq{`(Y2CpN#m6-F?^Q-$I=3_)QcX
zw#Gp!4Z@p<<D`HCvFke%CUSvJlFUd|2UEcd-zc+4pB#!aj&>Tj5rt2`&1wfGzST_N
z_I&nwNM4RB*K9XBm;+`Lr5Gh{9-bjnZ_n>SLaROD$-8@diEzM1lpdA%oUOhU1JYk&
zL5pvd=Lz{0@D|%>YyJH49G~ZMw>sX)FYRgJJ^h$zEl}Tra8^3HQC2esXJ=tyVJoX8
zpd-60{us^@X5Df(k?!o^P%vdSn4<1ESjALXIbU~VVqrnt3XJPuhuEMBoM0fhZg%_Q
z8XdUWT}*xrRC)&o`YILzyqXa&IR`^z8T=SJlFOxW!qiC=EQ$?#jnn&;^<@%~TJKk{
zdkM7qDHeeS!#JEsUDS_fI;_=a`%LYxE9q@uA&rne^Secw;K*HzLA})06(y_%qUqhn
zgl<lczt`TgFCEkn*6MY^X(0dws!w|AgwKGImX~ML)k_7iE75^@EXrrC_AkUWG>qir
z9%pBN>6HI?A?M&=p|4-qk@1|l;PHn*^+%*K&DCTi*Ym9NWx727<MGkcp||HfG)N=W
z>FzRB#sy^EtE<#?rBZw@W(TvH9{VgABKADLJQ13tX&Dw@Lk9;38$H4D85VxQ7u-}F
zL2sA<{f}yhz#LL>s|F|<1P2FUXy;cK(bPsR6g)gU{QO?iC4bUFZ^&)}_bgxY-B}EW
z78nx_IA_0K$_e^`!x|(E8DzXkk~ohp8I8O_aHAEe3%Sq`JDb@gHZf@r5N7e{72+xJ
z(|y5vNV+-<au5hRtA76dixF=)KbHpNs2ArB)Nx-M8{d9J4}9kQW&RY)_Bvj9+$(?b
z&jaL#&=Bdco}{cSpnSf2l0}5cCUbyTVN_Jqr3SCk@^WXe%?^GOjLndiAAm;4%gf5^
zaIlL70i1_8&3bEf?Buw();bSu(07T8Bhr<t6j~tF)2e^16e^yI5toyd-rL`Av3bO2
z3*MZc8A<dj0c}vMxRtfFfcK#Vu)%^itYP=@0__Q(D80gQ{<5p9Yjt(i-gp#bpK6-9
zK7^-#iW{h3cD<UbEk-+B9vm8?VbBGS_3RW3MBu#I`=pHrwEwhP4GP&%THQKQ8X7kc
zkGnOJmV5Jz<!Nb<`SczY1x35jBba4US#+vL7GO(STNi=0gerOfs|ti!i&_xXKi4$>
zmm?60EuC9cS2qn*;yj_5a?<k4HKw7$Bu57ajX<U;=q<2@ALRJe8U&Q4UT^N9#69Ov
zD)#{g2QZ?gLgGOKvwYvL`Q?ira3Fjis?RPhDH<3V$t-RFIV`H>+H9Q83!<VF=7WQ#
zXLoMyU}Bc5C<|Sp{Y0ArfdDZHQ{&o1zTEgLeGO)Bp$?Gg30kGY<>tMtlk@1bcD;@!
zN36*(U>a<==KKdlu34qCRfgtLW;ArCooLJUZjjkVdsWXb4<PVpo%yEK-5Kbp8g3j8
z^np@vvJ&WYXUeoQBV?uImg+2dT0y9y(^-$BbU^6f0En)UyNjNa5l&B*{4bbZTH(Lj
zTQ_>`mcEPC2m&5FT)cRC?YyYZhs*8aj$g?l3EcxejEw45IP_OF<;xTCxoukvV#LPO
zSuIY_&T{gzOZf#kO*~sr8k<b=$tjX{n>=<foJD<ycn(D7oZQ~>dfw*L<pmlk-f3!R
z7Ssa9(qSr34M`Y`zg(-as-ogod`X$t*xa1dB^MtbAIoP=+7HlcA{?AdTTVV;td2=C
z#9ac+I(n6fkK2d4%+6fRWm!Kjue-WlUJU)BURpS;i6KfFbRRbco!V+?Z5zWsN9~ec
z^Oru1(I_^g`azM+v?3Fu+zpI<FOjFerH<$tq?WCT9*7ZsfHadLf|J_%^K}DVrmV01
z$SD>(XMaW~CnoFQsqHW!9AhNVn7r_{ne>;W9#fAK%g*9jD0a9_ijEd-`x(Iy8@r~h
zO~9R6myzMW31WP01R6nx%J9Gdu&m}+3xFlnmL(Kg`2t?rczAIU)yq?kEiWf$0;e8o
z0-9*j4a=M0A_?-5VY*)t5nqeH5fIQVjCx3l<m4KH&hG0fYkPivY^ah>MMmPLgLC~v
zF>_K%(cZpAZkEZ#{=P?%My5hfHw6f&(dfo_DQ1s>8M_k}Cr9P(-rS(%ZoWOl%EA(a
zlqpAyC%9oVPDv|>gbHWz#s(?kTk*{EqBeMDJ;#7qWqlF@BestaO#DC&B<Y(fV2{4M
zxJ>1;mnxqCJ%2W^oMx-Ub{2Wrq@$Vvb!LpQ$NhD*7CkVKIc}VG&o(qn{+_(O<>qDt
zS)$vwwZ$A|y7JQUpXq5xLXEXK2{P#D)GIRdfc+c5H!}hzCRo5V3;sbnG1;C64llhn
zre@?)@1x^~Mn;TY{mknT<9-CdlJ@(5_85ikR|nRXrd+P4h?x?<fdRU1Mp4>RdvV-w
zu$}YK6<8S^)C3%^w@Wn*R?DKx$tT1QN2_vVkpM@kZD9dS$VR}Dpr@-#tHCCXpU&i`
z^3hhhr`yq^HU<P-kSX#D^-pm93ujxSF%v_8+A~R#G#yv0k_wKi=~6u9Yp}qrP8FUP
zp7%OBBnVcPa%!&3>^M~fA<6*eG)>KkKP{Rpzr-aVke-HXWHhIt3BI*7KJz^Gaq;)T
zrZoPVtqnQ;>lZV+o|5iSa@3%-w#5A**&&pk4N}NkTu%N@eNF(>U^_c|P0cju5;=hk
z&&Krd9(AE<qpPcII0~410jh6Cx7A{cy0Vsxdu&+I+IxIj>2#;_H{zDf_E%2&`X|Ad
zy0%2QIWg({uEK5CIF{v`H<$F9a+d-j3(nT^SAi(sSVK%GwY}6T?I;eSfy?)6f9IFH
zh;N18$bYd-K-P0|fGKEU7fjm7A*L4~j1|nEewBT&q2|2YUljLr+4&ccle3<ZlHz1P
z%N8zHv<G4c`SO}*%+1YBOrXgDfhe_?r`@5R53QTBHZ7Pt8gCmHyF;-joFl-RJti`5
zIP(VJQAyre6n*9j*!?HmGV`qjgnMN)ZKIIty~+tR-2@KL!cnjg=Hq6Ta)T75>4$+K
zU5&A6e}}IZMDm3O4<A8#l;9Dy-2-dlTco!pk@k1CM@ycn<vN)sixU%Hmf0J$E52{g
z+{TD>%bDkYp0;+mJ>S`1w5)-Vmdj1PFidxSU232GIzB<x2Hml*=@ZXbWgH1+{(##x
z+*x=94oQbe2uJiNFB=0RbgUXl&$xYsrDUp|c1=48pcLecZ$j2kPtZC%zJPVgXhYIZ
zKaW>$)Pbg0M>u~12ic9eI>jy*b2KX}fH}#+#KdP4ge5^Gr;m>_)M!ZvN|^LDXxZ5O
zHl3ZF$D7Cl`uSrA^DuQZbm&zh!iMZ#U<B7xRQw)+@9h!WVddrL50=6sBFe2TK)0Jv
zemy1q7*rezh*H{uq5#ShMVp5y56Qb6YwGVW1SevAj%>zvQ`dM3X?`JQNSy>}G!W0z
zgl__Fek@V`#2-MuX=!<ZfeYvsH6P;yRZ>;*FF}bk#@hcfW(JsmYu-3~kWZF8Lqxp8
zxq3bwHhCO2iYk76(y9E8wX+DG1>3WrK!o(k=`j*YFbf+x9ZsH+ESQ?&11j<Uk^W58
zekJHCB_CgFb+uoFii64Ez`)_|Zq>*;p%=gRNp5tx4YXSAC^#6>n>9?R7xI`4CL|7^
zajbR|U;yh7JgR>X#<k%iK|5`h4`f6Wvw~7?V)<+x-DQgI+b&Z4xB3@;VBoExDwJ^T
zuqkS6gzQQQrkM+q5^RcR|1dH7>A3ekrK*Uh)91YJ#^|5DPIS^Rr<auv9~v0Ri-fNV
zNukP(^y}&pIlWfK43?WiFY}MVh*iv&PDg0XY%J`*;b(edqIh58184^$LqiUgIn_;^
z5`SaZbG`6z3I8>9<6r5s%C{_(%_gcbR~x8GYBm>y@|yu?-@{><oJOhx`_$kt)!7p8
z0G&QSJI%o4%2?8CdO>DxW}z}c)>+!dYh1XMB%xniT&#ei##zQ{ae>_|a_477>SIng
z+p`SxOQmgP$&D9tcX!@fJYdsSem`~R!A16^7|*!35xDytot>dElbto~4XPVRqQb&2
z8ZCA^A-$0%ALl38czN+L@j9mrb-E|rr#-iS=H!sa{B8B*1Fj{_T{o?>L@_zbVbGaw
zISb_!?c54ED6=}gIB*!;t+_jQ`|qkQBsi4q!qSScRlHBZ`RaVkWJp4OD?aBfxj~ZY
zcLNu4cJ^sS3nMW~&okmFe%AB*LD`O<FNz>-Tu`=;O+F&JI!3je?+>cOt5^1n{HzMl
zr-=@nnM2=H6d@Ji+Mj@3t+2_;t2!ws)QzDAuK7@@8#R-N7c#R8DN*^C_D{IR0?x^e
zRuX;wt$tqWm=QBzPbBPq$HF}fL^}+0beat|l6H2GjjkviGqa+jot@poL*jaADgT;3
z+XXu{pXo<_S4YQ_7fWwJ*S~NEFHB6prT}~w%FQ^2O+fHP4%Sqblk@)cBe+ykQ_00}
zCFM2KM`N(Tj<&40IJ26!j2;4;pO=+Z^!4;yT#x4B8>VA;k5ouc@A{fAJj88hVMhjx
zIMWDoV(5y&g&akbnbg{<eV$MRmZ|kSC;`GkTRSza$^>*1<KqU%p!a>IMhJ<0djC5f
zta5N6DUcSs4d6xgt(@E0;)=k;!0fkINBvB`)|bJQH-u0M><Q$8&D=aYzhr2_AI;4z
zYe5XpVGKpy!s`VkU!U-hkSh9xz)I*>tDhp|JElt9f!8i~b9)y};8wGkt5K)@5S!WT
zeU#=%&StxDnhPiq<!X&F4&*xmce)Y0%QgNY(tjAJ_o2{tb85HiHVuqBdLvwrv-bkJ
zVt}g5d(&C;t+=>|o!{&JdTEiT23gXc`xnTS#am#m;q^SWIU|}kv`|z1T4~U)I5=_C
zeiwiL!$a5uNI-A@WSnX*?@g;~FHC^C@z%Ur$->0SD(3S#(8XqA9WAt328TI~{YTpj
z>?kmuU8nKk_)kVn?8hF$rKFjXn6{O+1_g~tIc}+x?5?&vc1@2m+PGK*2VQMPd-MDX
zR8gEx#-(7hl}R#>Ze4~J*?PKr)-!bYCArCh$+~0i6kIlgv}baU*Z*z(4EFVfw^HU{
zV`t7|AhlJVfoAtw>^6DcZ2~_#Dj~Ow-*L~yUZ<1o_W6fwH1}Af$l%JZoe5R+JL#)H
z96!UM6fS!R!d7v4D|m2hL3tcA!Wx$SBWq_-pH(+7qZl@c(Byw?XJ67LaBY@;!^Krg
z9gt9iN6QfE^7ZB3;m=26pDH+=7ybmOh^5}6`6>7d_Zo4~3*N2j)`F38NiH2P4IJYu
z^1&~=$eXU*s7H3T9}m_t{)-AF)AP5VPxqq*gfcV|fw3_K>03^Ac6xSpeloJqk-@&*
zaoBIM>`gnBF?B5L0ZR1OJNF67fn1}3K4C1WlUK>!oP&}&_Pn*GlJv+Dl*w32gLFTj
z*arvI|2l!SOh+b)CYb7*tYh>d$aciRfo-xU8oZtAqZ6Z3E|j5it3k%*GS+>c>N7z(
zChedx06PZN<RJy*%W(A$3b!@|cDv2$cyKV28C60Oxz=+CL*Lj`HSoeR@$Rz{bah=f
zIEInSUR_);8Nq9Vbt2+2=-~<`i}v?ZK;9(~ENYhXa4~&-Sm~H5PAD~|O!6}z_+I!6
z)yd(Qf?85sKB$(1gKeCQi78kam(C(}J>erh{`G0-=#EXh*#!iUBRp;IS%Rj(pwqtB
zM0zz|tCRiH?~rV9-CVLeKpSM=(b#3>o~}z=3*h15-WK{`4d4|HoRp)SY+RCJN6!+y
zk`b5;ggUO@LaNPm4S~<Xs7#|aFLwh5bbbD$`uh6s*6@uTZHGQ0hv7}~ddWnFg@pm%
z!PWU?0WG&3J81JJ6Rq1GLvF*JoV#yPMv!tMnRc11ApCy7&lEa`hR>N8AMbR$q93hB
zi}41aPntdVDA(Sg@=TMQV+oOZJvN%}d;*WI_oH2uiyPJzNUk}rNSEK3HMq!XqiDPT
z*C4Bn(7HMeLNcuuX*9L!9Os>idw2!H!-K<DMFe2?TYl3fIo4c@i`rrKCcL^WHaeuy
zCCe517Z5f8(qJ1&#ISv4E4nghes3x*c7rnZynXQ<lsO)kJB~+1uLIpse<6Tr<~td|
zQU^hg8nV5;u9tU|zZU6yF8YO7;!DO_xVNzluP21gQ1DU=fba|bBua!5tneMyHFuzk
zi(i#%euY`8s`3mXg@j^9muK7<_?Lc(6c-EZ6OHnVh+r3eYs&=Hy8jTY=htx_YdgZM
zY4yRdaHQ`Q64zg|$H7-fNKys#W^j#0G+g}rwq=e4*oJQy)*!u!UUmF>M8Q+@^P-Lv
z6uDpm@Ku{Udv7n@e^4Av(FP8E7a0{b#${Mn;ZNdsQOwgbYzIdtX3CSfGzdh>Dik$U
zJCy*OoDM_4U{k9DR^zQ16~CH4CPE-}0CqFu7`?h40UeAlCr*-9-Nm1lOStP(g&f^+
za56GxFzOa66|>nj?z|xI#K7nF_$^y20H&({n+3#Yl993byl<4HBVTEt*qO@8!YJzj
z$-X@vLZkYf%1T8*D-F1oUguCmgC%)z_!y^4ip9Da$<Vw1?8*|M&D;TE1v5?1o)b(D
zV`HT2vhVNivQB;Hr(T`56O)la#(tZEp8lr_d9Z3ayuJ-}r-a^k%up(smF(or8`8=h
zjg>zuJ{^o?A3{@0rLmw`ujp@^8*;juzOj$R1LJ^5QoSwgbb~&gybYj+0b>%-OpixW
zHLs4A&nEdX$@L4low?%!l~kPAe;kfK<Ebd8<dWl4V*XxaT9onU91)J1pJ=t(I)b~~
zzR0jC=YAnMxojYD1P4H*9#j(YV6z{Un8VlKHyL%>32gxP+qq6QVO+mqf4`(B@H%B(
z>MEINHiYsy=syPuDO!MJY9S$CE`rdLjpj}>O{AT_G0Y(+AH5E$ha(GJC7U}&D*5-^
z2i4sVRx*_16Pi+{4%5fgsUmM)hxWD*!o%+d`?REPCH5XG+%3GiR_Q+b7Vah0yIQY>
z@8xm?1nu`P%x|1^2tmnx7Uu7tQ&oi(96b7Edq|x${SF591@=v0)A8|?<5ko7fR)p^
z`Fns8URLpEbN4&!9T}DS>gsSpF!?!8Oi96lGk%0;HGc=ArZzpdf$|nA_fYs*nH7<7
zl}*X9ED6VW&iMzL6Y?P--nqMRTYezJ&YaoP(7-h}FP2OjQ^Ho4`GO(>QW1B@-d#2W
z4f{f)J5Vg=w1R;NC-e8))K>&zJJ%AA3CVfVt_u$fB|Aq);5g{1RMp8<mHejL<kI1&
z4PePZs6-@6VnHKBZBHYv2PIOax7`d+!o^djtY+gKVO*r{-2-s~Pu=DGkK3Kb!?NXV
zmk0#^3dh08Iy<TOumWFreA|@IVXf0{`>^}DyiJS<&7tJsa2}IhSa;ZzRE7xcoccTH
zEq^wctx<;ethbpOov|oABGLFm09r|<DNXW>NJUk^RZ;q^zszdBZf%%jIcq6{@b0nM
zy7bI&)N1tsi1-W*r3;9-dAI?wMl+4CJ$z|R9If#4<mURwu&nIJ?wo>p9LQ@{uZ{jt
z?0P?|cnW4@TnhAyT^Hu6{i1+%%%Ia^U}r~4PakpH74xc_(C#qwLqhArNV7w3$8B50
z<@x31LbLPL#msUJiiM>m$=%KhWc%%B0xYa<*k$5&Vn?RX;GSl^Wp?rFuh6eNPKQ~9
zkC$B>BSr3DhzT_24Z8(D07}Fi0${hrYVE$r4B@_H;*orA=TS|?&lCiG5c+F=UdYAt
z=s~3j2o#QXYk9*pALyR0p=5jRU*{&q)Y^aami>o_7TrMQUN&JyKp!6!RiXbS7bLG!
zv_C!a(Br1=a=UM`hU3iXDq|l&nws(_v4Bzm`k2)rlf5@`kkBy+<KhYs4FI9*V8jMZ
zmUg+Wa0Bz=-iTHyU1vf8uY2C=>TKI$1)7=CVn*EocBFvs(#+>T4r003L`FpwsmzIU
zW3F00#2sJ&1JTY)jh@Ywg}x_nO7B|cjLn4wj*~8&;*YMk?gjpqzQ}nKc|Du-?tPKz
zGNy+W{$7HeI-+P*9ZL%BmZ|9KN2K9fHdM%l^RMf|zP^|0K*DVWNCO~6D>W(UOJ3Xv
z>yAPATaM{uYr5{l4LC_nt2RTrn8up#9v-By^|rRHMjR^29tUnZEKw>G1FrFLW=SFe
z&)Yuk*KP&|j3gvX0A8(^Ay4}uKhG%Y=L)k6r@w}fHxPRZzoUqgij7gkA^J#2C?P*O
z(67$O%`Nf@ST$n(4tLG!HT;K18M4k4Ag27z?4nk(^2JGv@LO<jv%(28+f|AA#bAxe
z=oJ_d>0n{l@-rfMQ{+!s+d;Hys-o;-vwK1pzH_hIOl@pFrJs>NEDut3i6CWy`Z(si
zVEK3uymtF~8nk21YofuS=TH!38m~Y@Gg$^Daav|x!ZH)56w};vN?66BX)w!_$yb5#
zhs(_xHh3Z>av`wbID+X7WV<Ss9-KXd3Gok-IzjyrbTckoCaU9z`7Dn7?wBvZB*O-0
zda|B&wAY)1C!Wcg-*agGDvrm~B={<NAV>LE@%b2i=2Y#(oVsIWi58{OM4$INYe!(H
z1Y$pwNaP8@)TvL|UuiRK%Q!}cTAO$7;DhZZN(o9i{w};hph>t~+keoLBC+IOG~)dO
z{2#V%=tM~8n~w6TsK4AUzla#j`jkiffgD##+}Hm;!U(q?vEiC8rfE_88~zQr4mMwe
zl}usE>k-6l{%b7%NFZ}ES~4%{pWh$ggP^w*d-Bif*j{+69R_nH*W~hL<mX?4!K6Zx
z(qgD1LRl7x%<b%cI>5=!O!Kchh*(%?>FAKiPEPVx7#Nc03yA_dt46|zW^>cr{*j94
z=e%4)+xFiS#*0f!!dsr?9kH=WczEe{T&ec<*b3U@<%Q@F`RT;ZHVzJ)6cm74gCqMM
zn<0x`z|A4@vlBGS(BV+B7~Jw3TiBQ94t6@p%8Du~^i#~t-;pe&qz8dYBd^*;BN2%N
zDidC>6M#E<f$(F1NH}?niG8yyc=vGEfR~D!a!E;G6FEf`PEWcI$;A6iSa4Zi_`j=H
z4hBESGF&@|UT`y3s0i>~So0zOz!>8wvlU==2`<l<DG4<WQx{}O!|sdqM0HtVDc?<U
zG^Zw7EpHg}d|FK=0s77<8IQWq8B5k%#?c^}1#ejEU-ck+PijomIej{?EB0aR_Jki6
z3RES>faO>i4Rz@I^Q@|?h`wncHo+boyQzY5t{K(DHd=lk??9GUFrDPZ_Eq1!!>>vU
z`I+(7<eC7)J44dh_6|_DiJ9Lx-{GV0?xv5|o~u{iTco#sW>h|~SD0c+Cku$I65c>T
zY(#z$$&*e0ktSsHH$e-+y<2=j=N{g4liE~J430D|lFo#!zbZW{dj{FunXYUALf>C_
zxMTFHN^bG0?;x~vf~Y%2o&DpcS~pp}xfLE*wYf&aI$y;n9v(k~WRFwIMo=k#uUJX;
z4q1mi-Z&9Pc=8PL-wE6&6_l5!v&}zU!a5iE&<^a0r>d=Ay?Q!$HG};3bx<eUiroOz
zcPvQJg&FEKH70hX>y*8YZa0Q1ZGVzNbzhjJzDKLRy7MeI9%2D1cQ_Ix?S9s$8Uvj*
z$A~qqP|;=X)oytYzsw^eUi2}qs!=h-vlfQoYHU85X@OlXnOu93W}{yY^1=8hSQeiT
zw#Pp9T^M7nQK1~PD{LpALMnGdGPq2B_(W2aIMQGg=!1RkpO--XKy1K-i;Una$SAOu
z5x$wD<i%ypbYYx$VF}lnp1QJiY&>zu{%zHWPURA&`gfE+D8&u6X6iMEUeteKkpzUh
zWwa71b2Al2L^5TuFH%gl6_5hF8q=aV5QnikLj6z`&}#(VToIcXtitJeWzX!1lD_W$
zv-%ZcA>jJ}w(o`#e*+EOvTcYhZsSu2mrm8E_Pt%{r%x@WANE?Q4{|*>>AnU=Ub;RO
z8n?SojbYX+^q;{WUD`!aD8iN2$WwB|;c|BgXSzC%F{q&Yhe&WtY(oAIXkoB{&<B0Y
z*Z*0q;I+KW#nreV-}mZ;kh?n`(5evs@^|NSg@YVf-&u&7z>L#aE5#X_+UK-JJ?WO0
z_g>X+qnG3R^Bsnz3nnv7w@<lSXL;JqGQ3T+Om!XX>u~>cK3F$ojCjEDg1r6#0SG`6
zLFlk7O`H_MOQc;J%GqmG!L5xAu;ZCLJqH1w;EsO&Z^K>b{YTYvultVZ5(Z--3OP;o
zj3B?*FNeNUJ9;~a{PS1nDt6+rg22>Paqy=27oPsU4i~M*h0HPjJpauJAs+WbNF&g6
z>;1>}f6~|2c<29*tgj4<vWwORky1iRln@NML`u2@q(r(wLApDKkWvs3=^PsA?idge
z$)S<%j-hjy`8Mx4=hyeg>k@IEJ<pD{_F8uc&8_}^qv6Vng(P<4b9+r@i)71`7oZdO
zqXErWj0dE_`WG&_3=4~SZ&LMzyfj0{Yq$VtI}qNX4fp#OsDu$<iL(?^O|rukyAEBn
z<WhFU;N^vZ=Y?t?Z)F<al{~&*UiBK|>ua4<#|uZ7TlM1)Pe5E`B>%eVEQp2ts#ls{
zW-f(+xnhBXi)-FLba#bEA@3D{Z*y{HfMxu$98bJpy?&KC#tN#tGp>`d$Fnna1)53?
z+G+kc+&1SJ^sn%S{;fCPakzI}>OSG7YeX>!q{I8-znxXLa7Oa!i8@i|<YXI&5W6}4
z!^H^Zc-|=u82<zZ)MKq<JxZ2~-FTZwBsM_n0w!@){}yPRx@^2t?Bn_4^6AwSfI9bx
zxv0p=%BrMYcv~`ST#<lDfZct1i36pm;>?h#f}E*|`kc%b{JPZRe~FEqIW~mF8e;s6
zt!4;OInsh7=R-rbC(T<kS5$&{EV!-{L|FOS65gB4MiNF`TJ;n|a;T2t8Ng=K14DE=
z^+HVrvp5abE<5~7sq#sX*@FsPsMI>)ebiL~%<tyPZHE;HHw@seM-~?3TtN4ilG7kA
zF3$6KJrcw_o+r-0&SY$?24EIHT3Ui|;|BouCY2Y&{uh+b{i?Ap7;hE$|5gV;^Z=VI
z7?VB@zZgl4snm9u?V3^if%e_23OMH^zRPL<&ZB##g!hAJ<b(GnZ8N9`<(x9&m!u<Q
zDdCSC6!^U_rw!ODZ{P30CVh*yy^frWpzku<A6@hX_RP%_EeE5tVc>lBla!VWQAp<!
zYRt)1qEq=}_xR@e93-Y6lBYlqbYpN2+`5Mpt!vjig08<Y<rWlx%Dji0+lZ@*3jA=T
z8_0qIlyS$0OhKE;1WF2u*ra{X5B9xO^Y<4Yh<lq$&2P)h%KAgWj28_+$U#9ty#8nu
zmQZ?GYwNA%>4}>1Kn}2aajackT?PIrzy$%o^=4ar>hssRZ#Qtm-F7kDA|>c<waS4B
z^isKbNllceZ8sUC*a8*$eltb?^_o|NT(ejlIjM^MXxVGJ-Xr$AQ`LEP+Ud0S1{yM!
zJ_fp%b3dt%U3hJ24>4NKw4mGyd%73>3QHB>voRKhr9vIZ?{xv;Wj$kKkM(}5oy)>P
zD}bUFus2|81sV(6fG4vpf{(4un)8s$i2VVcoSa;(Ug^7n^rS}{zo4LJPZk+T2r#ff
z{RPMzJaa0U+yUHLLjwcf>$AP4CMGYhO8}2;^hZD8fVpl}{r;T`s&&B7At`ASpiKw~
z2ndLY*=`&8eqk?8Yi+c36BxYahKISu#0CSrLZz}aiZwIJvePGCVg$3}`Max9lQpbT
z&r|SS(;@n}S8%U)mHmbrfrfbWpu2<eM53N2n~4^8hkta{Al=iu5ptIMkI1s7)x@Zm
zT_iIo7VQk(cPfbz4hkij6Gek-p+|MvcJ~iTXePGELg87|2LhPX7p#z{v->{)>hBo0
zP-7pg4IDJd5H>dU$vJ?}Oz?o5hKRB+{K@~-0%(QakO5L)tJ8|CygWX~*+nJpVHc>>
zykKcDA4mZTvN6x|-RQ(hGLn;lO9MdBjE|2~awcV$&P?kKI1Q-P>H)RhyqS6jCsjC5
zBmleNMY>=X4Mm<W`bM0ZAQY%hA=d?9pj%>ZZLOfBM2@G!3M>dLKv(foWuqH7f9?{Z
zGk#oL23xov&dV@fruhcd+I<#~sWfU?9=s=#zUxz!Qhq(V!A-VWy_=~?+`LG9v8{>j
zR<7zOnWai7@6|Pq_%LTYGt*?Q{ZTs$m&3CWCz>To7qy(JyYp!%gIoKR<^0G0SO_2d
ze!&9XslY)Aj;gL{;Mvp$u;Cf{t!)gE@!w+53wU_^RstLd#!arkuv-{Z#(-%La1sGR
znAcZ3<v?-}geFDB`}P08au2z`(FjnFEZ%^T!V3=4X3A$@t@asS^%?9F9gUfq<|yR-
z;9hv{WNV8AWM#nD0l41Pe0fJ6ux{`CElEmmXJ!+#anjTJt|l(m0wGHBKC_FvE7^9H
zr|@?5ZC9e`PBp^hMzf+I-bXjffpMA#f4A|KxozHyoyGOwn2k(Pwigm#U*9ne)7?=d
zYM_1!@R1Ls+7BX?7_0H&^9@d9rgd;o?U<zjU&~Y^EbS;qjyReQjhwEv0V3b>^71B?
z!Q2Z=!+uMhVbL@~uCK+!0wa>@{Cch?LK5Uh2K-USbX>-5?1_B<41d;Vd?N#B5@1g+
z5%~ca)O>T-7IDT$sGZh_J<S?p5HU;zt`5jNp+#rejDAI*Zd94Syhrlu-4Vlqly-+b
z^sXz~0FLrdw?n5jb1S3Pb!Wny8+Jsv3GM8Xqy0DcwFb|9p4TZtcZ{`w6U4}p_#M5R
z;osox!vz7LLW2GgHFb4=OdrLB$_8MStw##@IUlbRR>5a!?A@~7{{tv{9Kq+$b3kj3
zyI@+!Kx^XP&|A8XpMJuj;>LzI0qb14Rjz}2KVtv`_EvTiR~ZRhjDQdQVLV&nV~q7*
zmT4b#F>e5IM(n}*65N-<#taH!TgCRBv7j5{AzN&>@H>IfPuy3)&T?xazFZXlOmcS%
z+HRh(akO3nPSIB5(bx-f;)m(AKZd(_RPMRfzNYR6N0wRnawaX`R|lj<$+6yp|Co`K
z7vl!V`<odV`#@hl7&I;(0u%-Q4)$hVZtibf;(hMhD{YxpaZypxU8xRGbBM3_*cl2c
zQ`Hcl_0C^nsQ<2yfZ!xCv7C*Q(+WsX7kIZm<={}xdJkS#sbRDGpq|42hna7{dg@3<
zW$P;VraTN(xDD_OBw|%8{N{0&2g<~GcU@lp-1vSph$N@dQlPoOZ95~Odls?Q=$TOe
z!+?_RCE1=fp{NgG^QmsM;(b2cy`Uw&CaScS)Rp$1w{XLDrv8+^_Jh0VJ54~UzMCi?
zK(4M4FqZ}inJ%F#ePd&|=dZ&RC}OtJ#&ldZ=Iy7KkD8jBRWgt<eYuA#(c-()wLU=K
zoAj%vwe>dmk3gh1>ynZ)Z2=G+0SPK!qezaJPA%3zTT)p;S-H4qy1{DHyw%9~mKnDq
znPB}A3c&NvVgNXv8zY!%={WWeMyPl-Kl(^3bFTWsi-n}~v#D~U)Phr_h6$dH;{%d@
z!ABQF4(6T}BS?mW(<+hji4!I1W9oaf_(UmTpN2{xCPW!!?T_pVE|`>pGPl@@NsPd8
zDTSByR;emt2_KfGc^hi`5&s)%k4M%A^tH+iyq122fC=Qu=&S+?j3=wBxi@>5*mnY@
zvgk4G(if7=Wo2Z5z1X8U)XN;rI0XjHkH0q-d>L-@1<Upv&CRCwwzjjY!MI<|Fz_Bc
z7$Pc8x#4oaepP4YO>+6C8e%TO%*y?=u;S+nE&=i9qOth^Rmm=Zzy>q0{s~a1OiX+&
zJu83?aBXQ`VP!`CoZ;n~Ts}PUK|kAL-D0Nw4k6a=B{BrJP|`A8&grL%wDIM;pd};q
z_2=fl%1YIsKq$SXfBG^Is`3LO_#GWt;N(6zKOatuiyH%>4nWm`JpRhn=?(!#RygII
z6nb@2-a*R(J_3xVGD&!r!Q${LxROLC6l8*ZllD5T)*Q4qR8$#twfyI<9sqTxr1ULD
z;R6^g#(8F60ze7@s@~RP-9|6$uCDuAil=ivKy9OqpIeao{E90l$j-v+Pei=0+mI~N
z+7%v6&3|_-`cL2Anz6HG?(`C<TpY3ky5lXB3~VHJ7XT9lD{OS+=o=<|@Zmd&`ysy?
z8iIjW+T)-MO!_wx7uB6b=IA~ZD|h&>XP2@jQX^-3&Goj^ek*_CuRR<l#>ZdXj?Eu*
zG>sa)4P|7;LlgmNQB=@Fg14M#`ab5s-F8W7iDryj8#O76!1uWtve8jQ#}ugki)(i1
z%LS~L8H_+rSA&%Tz|mLI1I(2q>0VJC6cx%pL6F@GP@zXowG~Z)RY_0g-6OEhYO#<Z
zjeABX=yG*^e?#Ta(~KHCz5+0~%=;z`K{fFDthu}meV8hkKvWkb`z-3i9e{(z=m<5#
zzGp_xGHYezzf8y9;e>IQpd6d`X(HRFSIK&%QZ&4H`1F~3#U@h1m$DMOF81$G)a5W9
z5#EcruPZ@8Hw54zi~gY2e@1t^^tM)1794CGoN6uK3R<EWmjePa{xgcXOA+{<IgyQz
ziqMNAR6Cde;{zz{jqG@&7?tx-MXIU}^V$LD#tsIWV~00yE~?MZk`K%5GNv|;jtJ5F
z3&=2aalhj|0cf#?`t1WBJlK>jxayz{47izdKzo0%%q%YM+{!Mwi94s8FBwN?l$r^z
z5hHcIU*n{Pz$di<#Z2UdTC%|tz&esaB`;9}z_jh5j0BH4qGbFXu*YmP=(rcWdwl=0
zA&K}7(J!docJl3B5%ONQdRmP>%)iUyGPAL#?}3<aM9`s84o^gz;9wjWm<2hlwfk1U
zHM{ls2W+@rN*ZT(L{OdKco3-$m(k%DiO2htZW6nI&f<vCckc~2RHU|bxp_>}k{(TN
zxqhQ--*|vgck$zMCso$_w^VxU318kwc`Nc@+)es`XPL7ho<;yYu*eA-*)=+NQ2d46
zh<~B%!47Rzp>^N1rVV<F4$U-T4~BuqDKF1*D^j@7=5aj|e?K9asIBpU^w-B4<i{4y
zVHDQHc!WLaKcyj~PfH(yNCyILd#4X1zWsUJI-faeRXc6<#6i%K7*qx74j2H@o)OQ#
zuF&EP)<W_3;4t;WpGgdBN*;ENl423(gMVn$3>xPeOanbRJ?@PIdK>2Jwj2QrPlOEr
z0{5uKrB2DPojJT1{98g4UcgT!Fu?ZbQg8NsK0uG1kNr=N7m%0HXuSVE;!S4si>nXW
z(M(t0otqx)Oq6^Gkhmp$v}1k8qQcPk?Z+gPc>BPeWC-&wjAUvF&Uyb*0Cv5j&ZI(*
z0GUs~cN14vPhVeGL`G0zxshwr1Amqx-<!duXap<fMH`ML5g6uOiT~Ihiw}NYFCFOL
zci8B_tcK&B(LQ<nq-lM5797PGc%&zXK)Ut~oo3lXlMT=Phb^xyuSvbI>Yo9C{ezxc
z&m@W8B#cXNF8t90Xr@~=E(H_g3tBPH-Da|Gz}v>4f00GZa`iKtm|aEd-iXD^&zV@#
z{~+<;Fnvk+wgWSO1N`yp$?8Hy*{3rYGH!h{SuW(_0cuxr+hX}|mUasD&J&S_PVhk(
zProYgF+7X_U}L&T5%7h$dj3ZO0pl({XrzFl-od;fvAhc%YMiav{JCkT?+z?6!$I1M
zA@%6L0bKoat{w8d;oWFvwY*&%k{F;W@b5F8<%6?eY2d{JFGa2wfl+|T4VJqA*U%Zp
zKXQn<)}H^K{!L350LC7Xkxe2?dSXvOUP2o%!w8;>L4x}%6Xa4=5_c^9<LSI<g|#Cl
z$~a-f|IH&!CNcZfzZBD~_sFPD_0(VMJMS|ks6aIT!hT!R!nm6ffJBZ$HG`!tjtv-I
zFai&mys`f|A|?Jx)9IX4@|~CBO$lbe2U>_f%RU72h7pK+E0-X#N-DSne<G0C&`^`L
z#Bw{5VEmIx89JkH-N6eMHO3MDefI}oOM}zwISst_Ga1U(_#e&c28X4MojLevz{^0f
zy3J0T{WZ_4M}$lCmS~I)aP-l8{x`381AV>VOZ9Y~90TYcf!D8iUimZ$-_B_}F-T*R
zp6tUtaIgMl6LZx+Tw@`@^$$Lvj6T3NwgK<r^MACP2k-ABdJWN?UOYkVjyD;7k4qAH
z{kk1|00wFah!WK~4V=W8znYh#(?412^8Ct0=_$>KC*)`xv*>>NX2?lyztdf8|McrO
zuH-*v27sMua?&Hy+Yb;w01`et=D2pr>$}HcbiVDPr+5Avi$`KU@tYMiwDlUpHv4J?
z12rOlZa?*&xu#~f^?cq(g+zt~Q!)m|{Fxfl?8}!ste>mSL#xi`^K6+z>@5{NQqf$Z
zcvdO7k3Hl$Fa1i^oLA<WV;Ii|`h?BjU6g)*nQGxK4Bk))_8st66$80gSzp1|;X;X-
zDjU=^KybgmUkUJy=n1+AQm9|PfH0m^$#5A7v1ig0Y(FYrhoih7w`S`;Ju>+8JA8AX
zl)M?30g%!Mfd8^WGNUclmAbVuiU&4UnhB2GhpQ5a7Lt-A>vs-4xnG)qiKEUC0N)45
zJTN@Aa5{l?5a$T^%U*%=COiN1esZA4^SI5*Z^L-%T*Iw$?E**)4E8&EU}FSyaaW@R
zzBOmki-?FIZ?ImF_C!#^^VF;i4AL~lwM~TGx5t3L1`s%yYlNhB*tom9cXV`kd3nXe
z!~m>Pc<h}!cQ!pheMU>`A<s9U<`5CV6EB^|&GW(j6clCuUPH{WuY>qmT2r6qP~I-j
ztW0b`BGVyoX}QU48-Qvi{5md~zIN+zpyV_Z@;_Wo_c;f4?FY=;Jy(R(Oe&WR8ii`%
z)dLwfD-}!6=Y0_1^8k)nTB>M>c&%@H{qXoWhxU}0@oX%)+F~$0+V9~pyl6ab-9<e;
zEzQz@M5XoWG`S<+Pbfb8%Hq`8{7HYQ81Q!NY9<;XCLEHc>bc1Bcy0-q=v=TV5Nx9W
zE9<3T&Fw3H&aH+!lrV{$N)uXmtE5x|Yy?kEc87os`8O)QBI#>)l?;)k{J|8yY74j#
zTLPD<R;F5>0+R|fE3j9R0xAa4^9%)<^S<x{BR~QGU=INK_3`n-*7`Y=V*v+1s5<MZ
zJA0ooCC11{E$qL&TTLwlQ~MuBz{G#(&pyF)dou}DL#8FQWDYf0PA{o$hxI_*6=Oi$
zsMs=hkHVLaTELcBJKr@~jUkBjE)mu1#o^Adwcf;qN*Bt>=)1Zw`?;Z~LFI<ce*!8|
zSU74|G!zt?1zH0M1F4$jTD4xIjG){?5%jsq4bg#t@uuv+5Vz5N=$ncOa&vljVJ-8&
z#|qsA#nBIs?>4{Y&b+KPirAh*P5~PslRAf)iBkQ^iwn<ibzI`dy^&~#f$1HA=ks&|
zQ9hQYraT{)bFr3ibD*L*hiFuNzFJ;y_*xC1TK71>hI8dqRq7D4Q)Pz2U4>7cJb}Ku
zUKpHf&dG+_&s46gsN^>_H1!rZ?`)4ZdxR0uPL%1RFXVaShnn1|_bli$GBRqyfvu5f
z<X1tzqp{!ebS$R@Bs4TfbLZk|uidV6mDmRk2AdH;9CG9W4LN%}iA<jT(jde3gS<(^
zeyWJ!M$F~vBu6f~fg7-iX}Ep=q4ObBH!s2qm$$di#wU%TVm_SwVo#3-=YZ|c$o_b~
zSO{3_qwcC*38gxcxKd6d&8FQW7eF8GZ}<CTUh_5a;#E_A+i4}!wj}N#pPvJjk6wM+
zydV~Daleth=#ZWs>z<o~%&Ulx+JE~RDeQw1Asl^VzYYpJqiJB#7M!9geJ@*aiLEYn
z9AJ4;<bAnQb@mH>8}pE9YPl#{f14A_u0q#0mIUc;uI_V95C9Jrw?eQCzRy#LNBAcx
z`=s()Bie2Zo7~MXGWp782=}`04}#^>rW+8JXm9k?2Lx0_dRs~wpc!d3_ER<am6_$m
zYESGXOywoml7R=)4m{%Qd6zC9f&TDZ!$&N$OhB7n`9ls$n6^_@Po8AVcINpbxj(eG
zx3shXZ`A}=%_5t6d%Nj6yRnLnIbjb=)-_167FzMr%G}&sOUoPxrEG27oX_iDo*VPl
z>QtJ<Q3=?O1c$1t{m@rSnW@qoHCMhq-RhhxkJi^7Na0)X@uwM3vU<*81oI0b+M8Az
zEFK`>b)LH-B&6o+9T<Qdt;(PJmg?1S50_GFqucLMFgu@~pC>Bh0S7f+xBV9A_E_ol
zeiAoe@gLntB-a*8QL#~;UU1*!U!>N#ZbZ?}+ELfr%@vt@^a{m``JTL8>+JxdGaxku
ze%k~xO~4|{Zn(q>5X#rDm?_p47Y`6AXiJ2Q?0m}6u$(I%c|nG#OTKN}QD7jT2^Db9
z`J7~iVPay|s95fi-yOBUA}2Ejp3~Q+!^J9e(>mTs-;;DcK`c$9X~iY=<1#Y*z?E&N
zqT;(p(Gbf}rcrBJ8Vyr{i3Yv0-YEj+I%e4phesbRS5y>1e9o8cSKkVU-SMW%G^M=Z
zO(8l#V&7McV?G?1G<IRjYrpCwW^!~pJ3QQ)g!y;BqZO`m@L%htu(#O%SDPBHtf;66
zL{G;WxNrJX1dqF?#9v~(<dWTv{5%<dpqh5~zuc_vsm6WF@QmwW;TzPAl_xNBj}sH{
z&f~rT%V9C%ZCe5}cZpR@&!hMHigu`y&23HH1i8nSOY&f=f?$vp*b#)oZ#VnX<in*K
za7k(QjyF-K(ycRS6h~jBj%+Z%P<k2J6KZ+uXe3!A8X#Bzl;3hOY)V|sNS@oKnlV!G
zA=iA9reZh=aP&Q1>(>pp@$#R=MSSxTZijmewPVJ;7^#9BFZfvUbe@a%=bv02t@UZt
zSFk<>kMlzz1xrm17N5=%Q1jd8)|`*^#A<$KOXSiI<qytQNztn}YJF_%JN&bwSQuA}
zs7R+w$%@lh>!g!d{QZrgfgxJI`b_qBsSJ!gA1~vVLB1@A5XNmv&2DVj-s2Uar#qVX
zL;#@5ZPpw|M5#;H<;-ktd^DrhYX_{iCW_^vf2Av{qn?nFbsp(I7)3a*ZQ;e4UE;si
zCg1Z?fNli^9vnFCMawk1@8$cS>Aqc4fOwy>SBY`x*Jk4-MZJx**3_@FG%7T~7J5L=
zpk1UP-$qXhZqR6J%}#}Q=66t~3MAvP1MJ-l3ueI`aj01Ogif>h030O{Dcg3uuVZh$
z;CIt-a+zMgz^UKFOS^n4zu(yCFSx^I9}0vx-d`a%!YRxY6Ymv0cx}CkM|HVXW2K-x
zh$*4uX>)g=Z+c)RRlw|7p@8=i2seT#EX%x2;I>z*su~Rf8n?r|fwYOGgM$Oix2?_Z
z?CcCA5Q~IQxD-8EdjBTMGd8oXP+cal>;6!Tq*z;D2Vxwf5~X^zmexi_^ZGfmYVM6z
zE3#BmC00D)COJ7dECQg@mqqV30SFxEb65u!uJfKgi*@dTu|MAq&~Rdh4etX76)tMy
ziqxn*U?n|Y!vf5$anAOqI!oX6J#Kg+p0Avq^8LF6RvZ#lx2jFG2_kSGEQEgY<KGKn
zvBmwW2D=?CswYFR1;CL@eh9d1+I+kx#k$qZlfXCS<V(zR^o_&7X(|ci>P%A*U6~^X
z{BfiNUwbG@_xhV2n=XS$yrlsxZ@Ubg|Dq~8+iXGXg`f*(W?QKCN!(@Tb&!RzP~|U_
zM=AQfm@8@AJ&$=VH)7N_wxu&vfTvLp*r?BTVv}Qfj-Df^_-xdqZkD_5U&UqnOqK!W
zk%oc$kzDMPS(pmbNG}YXePpF{gG1OLkBFpItUQH_53D>9^E?PxgBj*ls~TAdouE<8
zLQG6yy-;2dJ-?Ef4_<tpNsed31rF-U$w-nti-ZNp<=2&NS{fQ)k=KRMzWe1+b9{C_
z8Jyxtq;NyWRi?g3fCf?;=2;t5P-h9vr?Y=@`G`Ytf4n$4th+c0z4?oUpWlA6jP`3t
z+X_Ag#zY?h*N|&5ss8{pvX+fiGeIUB#DKhDZ7b5Q-eT=iZ=e38Lg+hc^ir@QCD;CJ
zr775p<Znha%JTNc*|ZzPXz&R8p=cffC8$6mhjtXsAXJ!%>tMIBT4@5`xuUq3nqn}r
z1tP2_)(LdWz0bDu#*{0X9<LT(Se$O>PC76(Oq6##eR@RIrlg$rLC@&Ur0AD3OH&K<
z!A-Wz{Zs%|YJ-FswfbCNUvn8BS|~Ul&A0m8hZ`4Z6h4&>8!uEZFnQkv9M4?_^7eLZ
zYs*!R*Eu%BaL$0#=;^km8^uhm&Ex^e^Hg4|-lJ5~QHSYEQSY<W&{SR^2UqDc`7Xb&
zvcb==Yk+BdeB)qAI*w1fP|Xa49daG@r8shRqkagoJ?q@Zz=9<WfZ*NsCQ3ono|UGi
zPK`=`Yr&dpa0#&ClpB9sT0LEwcV?%mkGi&$zC#HNQX%1~Do`(;&f*;73aBN<OHApe
zjQ2)biB<g-efLiQiUK3y^EpP-u>51?$|@5AWmUJOG`)1tDBGW@*M3%ccyM4jQQ`&q
ze2JWf*<+<o!4x}un?r|Al^1;ni?(Xg>C?wp#&`dk%=*H}nE0)vV)A!4VpYWV7RnKa
zrrl|VX;z_t<QjipsJX!rE4<O&9Mw-Q4C-?|((sm+XPg7$1N5-4CwUu3ViAbhRz+Cs
zk59zu>1J+!`+Heu>qE=HGM}yX5xD6`I{!IKZw4Z!r)NnX_i%?!sd@haey5!e5JduC
z{ugoZWT}3=(Tz4OWK$1HL@TV8P?V&_CggeW0b~PHRc0(l`H!xEz7RR4ahq?WQR@{@
zO&Yfu`%s0UH=&SHZknY*HyzFxNkv2@@~K}Kp;4?AnLh##;z9`6Os`%ZZyb3!yEv~h
zeA@8WQtelL*sJ*B2TU6!{Z(*4+AQO>9}-x`kugDDK&QH7+<kdoX+l55rMh6vl4#RJ
zg{wjQ-(tMvdu~>VQ;Oro4X(9RzBog9ihcI{7q8JX4M2ZuV_#I~QR4ei+avcOJ;0{T
zSA0d~dANKDTn(CCw@4p6Xoo1*N(SM?vts*rHjJ8eW=Z23w|I6O`9N*wnv}niGFWy1
z15nfMDCYrd8X6j~YPH&Yy_zgRzfvr6qwTo}kVXKr_&Rk#=MO+g{i|4#i+%!HecmAO
z+Kd+g1JwB<O*U44#JuPcspTS&u>s3qxvZCl*2>p~%E88_uQY~D*H9T;uKT}Kq6uS5
zVX7;CZg2@cVb3J93VOaw^V{9s1sT@SC=$x1O@vwuIwY4+pB3~x_&!wezAL%e4dJ)7
zEaM$^aL^GH9DJ7!kfDn-*C4NgLwkPhgTVk<pI1Sm4gTWX+`}_7K$98%Q!K>dH56Jj
zN^oKxw8NdeR=*J$9UbxI3-i&jL$4h$LXxCLEnOVe;5NjZ@UNc~s*_7x<K87V`h>h7
zwkk{)b|;_~3buKKT1ct&9%JHt;dwk!T2rizJk>6KIMB$+7}o-JyvK8pc;yi!nrv#K
zOLAkDaL?4|LJ8>rf7^fM4`Ep|L1%PG)74OFHVl0g>t|Wq?6y~TkZ9bCi$nC})u%%)
zm?O{oc3M)>U#HiSzlwUadgr9R|8d!JX|A)gOdLtt9xrCY8FGCG$i+guyh>t!78aoE
zg8nF9H8s+D9xEndsv)RPF%HIh*NHqQ7oP+@xV;~Q(+fP!eUUPRy(+KC?6ID0Ee$Rs
z(<_dZ4mq-spcU_WzP|?=mYzT+Zfi90$e3!O+JXx-^09EwfaX*gI3G@rXC4f9DS>`2
zn`V*k-t>5?fP+RM>2#i=wmeFd@TZcGPuQf*_lAZcX<Z4#;^N}^`nyR_(Cq~@k~$N7
zAb7-XELP!j{=}eXuE~u{yG$fx1$1JF@81XBXrkH)y(!=ZO*}liEE}_=$uEnhmYu6S
z*(w42(&A$Mpin|_q~ouqQ|fREHuvR=Ll|0Zm|F&9ImE$qE#7-VX8D4Gf^tzb>z}2(
zC36=F-eu%2oR|oitiH8Jp>A+XQ0K6S#PT8J$-yfARDEIo4Z`2xzJd4C3?a87+YWW6
z$0`k1zPw)dCathy=k6T(O#jSi_2$-19I9`aS%aJo2+UpwXDY;lOPj~lZsQrP(95ar
zC9Z}%<|%dq&*{FzVU-*f)%4TTNdwA<xgT?6A=jrlft_JQ4~>3LPA0B-@OI?EtLl1`
zQ+o>@>e3PIS$JceP5h0~cw1{dZVox+QxCFPL{4lDpQPGE4cx5%alCPGBoKVKz0Ko1
z_EX(r(EeXd@{Be>i9`${{-p?uu3DNl3j2>0>em~KPu<8gyc6_=+~}aL+aoAB9bL}o
zUcYye+@J9zw+IVuyZUZ=wP9>KUFFtSx5uj#BMNyW;c&pHl=fRWk0+V6+P3T7K4UV*
zhlCoR9-dXL;6Hv_0{63hV?n{dq|=3xCY;%ZbG8*n2HwQ)n*h}Giwp#loQ;}zOVtbP
zL0bvb09b77hcY`VP37Qg9?FksZ$AD065}fAbM2m+m^cX<Je!{*o%T<@|6eU&Z6Sq`
zk1xK5b3-AKL*IR-uC)Fb@lTq;b$d*ZKJ%j5LWQqn`j2dt!$QX9rX>}pdVYxsKImj>
zFd8<4JWXvP)N)+hpg9+u4-=&`G-AH5pFcM=11CvI4E^M5bC0D@z4!1N_oLE<y8bXR
zN8Rp?1pvAk8Mz1dy_v2B7cC?b`7TWeh{!#?`joQc<T+lX$qu94(XKX!pt>j{{B)7~
z|IUp>{0Boy75xnR=N3PLoTq5=r)2rH2VyR#cC1)GdIa9=vG04;!}N`*Cfs_w7`WY{
zM%LIY2Ga^3k!yfl8C)xG`CdIjaet}BTsK3NQ*j8XX0v7bz=G$q8wuWaJnK(}TuO4R
z6#)y!vW3i!_0pOB*|xbt(=eJ4)U&@Wf-XB_Wzuva#?5{!hdFXxX=x2VuX<vc*tE;o
z4d}e#Lp8e9D*5l$+N38M6)C$AiWItZGKpNq8G@#N1QsCYs0Jr+`XG8>*V#Wn`}XFw
zg}tLAUMT~z9g|8rRl1UW&&9rIIqKDc4tW_Ics+xxP-SQ9q`~!2YEQ_`3Jo+ZY;|Cg
zPLkd(pq$cqeU6yyhiNYjqzW{i4TBC=R&|sZ$y75MqZPk|Q(fArV<C~#Zl(+ZzI+rk
zHw~FvA5B~ub++WO;Mcj=PtqA$rd#j#C(+m)G5q}1krp_5whU)Mtx1eVJOeX8@TK9-
z$7<Vpc8R<pG0?I4_V)Y3Au+M4Iz`Y8MQ`TxD2Vg^So05z+sXrPFda~^|5bc6GTOg7
ztwQ9D#B<1uXch(6IV=SFF(<9}78C;@_ur<=J+tjehwsVBJ+(}%Mj{fdX08mK6n_c-
zIvC_&8pb+e8Q{+jOz8T-$C%#H6xa*~Aj?N5N^~QN<sBU<?6rRugM9L!$3V@}bfS}Y
zhCN=vVYZ>tcdE)`-mlqbl5<uW`+kmZg<EmL(h~0GsS~)uDW~%LoE$8DS?WaTUJ3|w
z?gFO5@-ZAVKaFawHSZaLD9e4^$8~!RN>!k{I@_GL16O%3FSTC%ty&jQfSPOeh=_<V
z70J5W2vY85_x+QDlU;Bv26vJ&qt@w4X`f!5#>YgoLa$x_E|PUeUte9Ry|Y6sRvaN<
z-sjsa@DSL=vdc7po4`XOsWb;+bUE4J9Iv+>Ufvvj4sa!AeepRb$*eH9zJzt<)Y%?1
zfqqX*qsvd<t51+IeFs8nF(k}iyZjO%-t{=VBsv@HU`IoLcHJwVfTAbjAiaM;@^nWn
z=$UQVjF~r2C&Tc`V~mjDBSA00hYF`z#OqcY3r!TNV7MPU<%Z^kJ<e=Fbfge2&F8WE
zfX0lQ9L>tAR{@I&u~5!6xyCCqF6!eN9Ufk!UN9JpPo@~pD&r&T<Ob?^(zwJ|J8<!>
z8|rk!II&SNx>ueLXzlHBSnd7|J+0xf8VSI}0!0MLSiO4NL(<Z_82u@0u)nO*JD)(i
z6VJCTGoI5h^k@yF%L*^5#4@*j{Mf0|jcIQ7(b4(W1R%_vYvvP2jKQF4<^@ut1ddb|
z`zQRiugx0Rv{B01jAp%Ydz0mKhSI&)(w{E16+HI;a_#|@W+~~;-Z&Oh8=HC$#FM5W
z>)8f*ka1D6C&5n>n0L|+JMlsGA?kD1pDRz7E(S>%`NY`l5!u&_h{{v!225=Ad5)dN
zqXMs4JO4O^?>UFOOop|r^R%1m1Jtu?x=Sf9UupyJA3lByHVww-*e{DCs{{4IAvTx;
z(mhvhpR=;RPoj6~;+o{9IW--BS26fU(+T`Y#>B<N4L630LKtEC>7;aYbly{WFICOD
zdrz8FBGf%OX6?ePDAusBSPGSVF4fiu0GcjOA<+-H8Pki3o12}z#SqmGvMD`_iDS{{
z=XoxD*cvVbDo<;@@dX}otTXX8>U2wZPV5GTbIeF^at1DUACs3mfVedOzH!5&Q8v&`
zK_R@CR%)1M&*)wu-)w5kc3MV4J|`!aR>`A1rD<kY9KsJo4^c-Oo0XjlB3g(26J_IN
z8s&LLaJF$%mXIz!@ril~%oH}*)I08)kc9B89~c;!q4b81j$DM~62-fpgYH<~7zuCo
z1~>BqyVOqr*dZlV^u7h?wMgg5ym<pWph8jyrluG;l-)76mX<DoK%lV4{=b<SKs5Xb
zv}VY!|NIuo=_?2bSXP1dUX3!VX1}<}k5QV4{eUxh^X%|QZAMnV5G0bu{{HB{fAwcI
z8L%hd(7q<i-1rd+5)Zz-Dn?K{=ug0O;-6+^$x4)pC-hq*Jt|C9(A@}{T+k=QD_sV@
z8C2%LgJZG+e|tKhPnBQcl5v#CtoI~e>R2RY=Q+*OC~OG3)3tl}x)<-=bCn~Xs0pRx
zLHOUl4L%z{fAal@_XzUMY0xLmd?0zp(u<O2+x+0{Y~9;)j96v{lrX^o)KjWY;+lSo
z!OT}qRo$ckBd)cs1<?h#G^RX>qB?yz;0TI~0*}w-qCX|lMbpWN`lDJv1ORpCs>+xe
z+o=>z@5aG&7F{9&g4`dmKS(=|91vwcT7p64#mwBi)^28ScsS;cnZk^f@5W#{F|E*B
zN*)fq8g`?W3jj~u2LO~RMhpy*2hztDHYN~bLXa!GWHnuH{`+G9zjaIIIVkQAlfDR8
z|7AvK==lCu9|4f+Qb~I~4<xR)`K%3^Je@WMX=#OAcgG5=gMzTuhL><V8-?$IYhr;+
zgqCKJMo(WXpj2-zN>0&kR9C$cu>Cg#{FlK!xf(er1m?15j?WT}f&i=GTz287Pf_iG
zSQKnp8jbE=_^saH8eI7`G7`8IKiB*UbV%Av!IjfeBxD$13Ht^MZin8E+vcoebZlUH
z0#kj%jj>EYMpkWhY|io-2V+PWQ_JXm;%CpO^h;JED?kPM@(2x)fQon>0bJ|$l}Exk
znPI+CvTP(3h=hrUpqJm!(2)DE$qn?1Yyezl>H7G+o-!qW$n|w~ZLOvk5A@g1yD7={
zw5c2{EG!%xj6GYLQUV$!>4xYTpIKpYe4-n=<BC!0Z&e;0Rwx``zCH%JUKjxhan}Ln
zj5|0@?OdX7$HiV|^0r}FI-Oz;3=x8+*q6hpJ1NWNBg}N8|FCfdzGhqhp;L%e*PLq*
z(HxlTr$D&nyuA+4F~k?VOq$@s#Hg^nvk*Asn^c1)<n;&B6_K00#O1xT*s~LvQ*WK!
z16s2ZX`cI^O+n!-l8SG_{9Sm_{rc$JiN!uVhk>g-MmT%Lf9<ZyWf<`$(9XTBv&X!m
zzr(NP{VfjkXG_w!pBV;C1onfLsYD<l=w&`&JN{~-tVi}@1oT@vl#s8&1a6@yp;8#&
zQu53~E75e*AN*Ro(%W#)lD;a&5D(A`q<6*xgK6)T*C3*LAD-!WEeTF@G15}m$ELO3
zoZqx<z+bIze?>xqw76mUmnH*vS=iM`O79)dPB31^APg{=0H*)>=n@?zE&y@BFbM@e
zm8f}<-Sl!9R%KpwNg9e006z~lUp9K(ziAjIn8?KL)Orfq3fTXBct1fa=~4j}SjiX|
zW+Lubksd5yZ05KBhH>!$2^x%^9C}SkQ<(}KC+gfke*^_RCkqG*vq-L5OZs3iH+ywL
zx4Ow(?0ZPc0J%Yat5AEM*(urG^+y)&;R+f6g{sB;JUrpJ_j_@*Hirt?cnW`j^O%k9
zuTsZ+$J1N|ozs-s^tANkgZ|aWBpQXzfI)^6a(L|g)#%n<<QpO8?Gl++nns6`K=@a7
z%>2>KpQaZ4k*A2ZPA1Bmy3h9=y~gSw-Q{hmop;G-)Xb2-qZ=D8gYaW<iK)$k<L|xT
zEzxU^N^e|J%j-kddbd`$P0bF)IGpc^>l}+<;SlHi&A?Z3${{CC;GVP*BR}^_b*JrC
zPAWOKAaE9I^OFvZ{;`R|b{7_IUSpdqF{&T$9F2IaUCh7dz9%l^u=Hc<_~Aaj_@JmA
zHiN(HW^1!&<ubJPgnh`_JkRAHo{A2S&xFp$|E6a7zX=QeEL^1j!(aPmyv{2~OL_Zj
z4~Wt|_1i}pC;v<n_sO?AzVfh_dlmTjX=RaSfjvSD>k$wycQ~O$UxNW7+Rz`jM$D4h
z$pv~XaU%|!c)W5O;E5cDv&}ZmEiEGEN#N8+M5EtEA6I`|$%kji0<WN4!?1Ts#@;3M
zZ+g_K+ft7&Ygp1}_;<$gx8lC8%tQP|G(+*_QQwAqJRU<w1a1G4Y4z>#!7T_M5jo6&
zCI0%qb!vS$gjti@F5bkEdlchm_DJ2pcGtKs5l8dhI+Y~4+FX6+Ed3!GwJ|Tv)c81*
zfUXw227M1Yr0;q?3J_{Tor_^w<s11AU7V+z*wWUQo}6vYAto2ltSt#2pUa^et>^X+
zR*WG6-S7n{wcu&><LC3<8`Y1E5#r85xe7_X>!b_{YRP#<7Mw2YT&R!xckCNX-sf=$
z6MK63fa;~+N?q&VAg9v(5CH`<h-Dp7dK2oZdx3W*mu1wzz`z1>y%LyXF=0QgTVMq7
zvQkd1PlH{Y8{$UYT#Rz@*^Ga@R8~M6!fJue+>sX!F>Rw`k2B%U4{C9zdut}+HWT^E
z_9G>0#RDZ8$y$;TzUM2xMWO3+KQ~vbpwWIC5US1D+U|3gb@lkox2ipeXy}{gTMtGn
za!e~PBhVLSTlef^);aXKE>4N3R~h=Wv`V$4jWl#>w_PZa3Om^;yq06Z4_AM&=cUV!
zrvhM(kf^2HFcO8?b>AUwq=VI0wy?OuoX>jPsL6yPT?FibET_?RRuA*b_VAi=_g&$m
znWOkQ@3R;#MSV%?cN-LT^mcxr5_&&TMKk;HW}HsF*T$c{YfGLzTAEdLO?&LEIgiDn
zTKzLxvD$-4Gqc_VwibBdKS6P>e9UPM-a==`w@apWpb>l)gzvgM?0rp0b2Rm>eDj-H
ziGJV2o*&wUkI;4o@_l{GfPn!BFbI2oFup*wrZ>52r~HnWh%b<4ai}a?JC>UJ`a(O)
zB=4lA#>L{@aD@h|sLS>nggq^=|I7Ar+Q%CiwY!;^3kr?;PL~3u<cNp!IM?jLzxXCj
zIQ&Z@!W0#q+OY^8*=I!t)4u-HfW$8*6~+D;d|+xJU^_Qjupr^ZH<n&AKQG49c4gl^
z-|6Z+f?rtG{|qXe-gGi_gs;e#d^4Jj!U`Mt`o{m6RIyf$xcW}rZngz(IzdhAQM$Ch
zRbnYJ`iyB$^XhFt;U(E84aV&dX|%TCljcBh#6IA-?V!`kt~=se^a~|TG89J?>u2zC
z?U_*#`gmQx|5oJ>-;ZXB%n6g0YvKEFa8QfB;W<7oEVH*4M<JcZGXT=+f3*W+tB=<r
zD48qPufCV+R@X(B8;?#_%EX#;fXY#!h8V?2wTFLrV}WuqC@7(B(y$HCSiDMKM~*k-
z)tRFGk(*h*r~;K7AQ`{SXZfZxPLJPqtVT7~yepg{Cybm!v;dow%+7AlvX!4-Z?ESU
zbzYSiuRdB*IuVW9DdEbmwOUx}hEmGRH(jEVVn|2?%puoB7Q_l^EDeGl>nBXHVxEp@
z&JeLciqF6Ypv<6cEXzgUl1kWPrvuw=dxD|<45o>Dwm10qE%eplO<&@m%X1bxgVXbH
zs2`H^1+VL`RTW-@tPJn`luW|0kf5L@5q{nczsFg<>jkrM4#A<98fj@rKC0@&eDngO
z>xgHT%N*jd`u^fK@%+~YubToHm{W%th#(el!$*{4(y3l22OTN}{_;NhYlCU8&8+9V
z31O(C>ht+08HuTKs#Z&pY9czUaAr4(2}h-^-xrsO3sy`pQInxET7B5%$0wyyR;}cB
z2Ge1{-Qw6Esx;f`avc^cwtsQ;Xjn@LwOYM1S@tgZ0G0k%f8plB<+A;rLUAUmW~ouN
z2Mp82|H8bZWr|#K<k^vFmNVOCZr+Ma!O*|qP7_npHk6<J669T%w|CD~+oF5l;>VoT
zZf|6+cIo88^@nGgr{@g!Vd;YDKi*7p%zlh-cHHleUg%RuedRR!$IXUULmpq*dZcA-
zDF`=;RuIIyie;@n#fuNS`Yb&?_Y>Jyn)W8vy|VV-sJX6>9qyKtJT``K8CyyD(v-gK
zTt0gK`ZVV-f)d5+JC@Xjg~PTlec7|Pzw~q=FK5BaVG0qEh&<x)x%u{f+AsuKVc2{w
z<a6~xJ*esevBCKovVD;h6XdVovKaJLy+KKLPF^t(AyDm~Epgcg7r$}29EldoV2t_M
zAj@{t=yLR%gacZk5j#{-gxM9L@<@Pjc|B4kAHwbWds7#xa&7&`0=Tm64HuXDZVc&7
zl%Y1N3+aaKvtUn8JT%v!^y<}hiKe;#!1fVy2e*meZwVIeKcqPe)RWqy`uaw#&ft=m
z(bskB*JVvj;_P3-9n@R{N<3kKz-4vQ1D1a31<sR`?;}lUep{P~mT{mtv_Bh_Te7zl
zbnQmXo4uN6f$#%`BIl}Vo5{j@zX9tmO~;V;{T^G{?9&Y{OwK#|L44K|ZJtXsqAl*H
zM_k7n56k|2U6I=su&nXwoYr&OR%4V3(JoevAbqCCqHNNnKF#cQI@RhzohZFG)tG*#
z+aL9VFB}Ou{KZdQpUAAcZFLfx^<2(jp~-3u>OXW*tj!tEsczq%nYG}5yjHfS&rIy*
z;!z+`3Zl|cAVnebz|Qh-5g%{1<xnWpf3+0Pdvk*+B3281%#?>zny`_S=VTnsXJ#-m
zGOC89$ET-5)<!}=<yY-foyDZPo}#(A?5E$6KpkgTByLmns)x3Uda^7uRC8xKM?fZ$
zw%OI^Y<FuHVGj62K*2PoNX|=ZDP7(#;~1+e4ipi2Th<ri#rxyCmRSYDtweIhG<D`C
zhBKThJTiHLosFgwTAMx8Qsh@CCWSv;`~;r$dbD=fdn!J{*QyTDc`Lu-9oJ8KVA{yR
zBb8tGB;%XTcdHi*=;9}qx3*+31!z5}^6ikP=dg!2NK;^1&{UeKVz#*wdvN2EtHzQ}
z@vbY4c}HV<LxI1{SbC=KNE#iLZg!YgT57itD4nm8?u*=f>g_3fH1TK8Cq6;pogc|#
zr`Q>zX`umOE!7?VJ%E7UtR|xp^I0dS-DHSZrxfFj3wK9MP0r6}{4&n(x{WNk4c0<c
zEAzB`?z6#~HuWNY$d|qg8GOasZJvi|h2q4*ZhM^KpLw^sjzI;LMl0^p#bTksPqTCX
zhuv^gsW^uotN*Wr`z7?^-1l;#yF-b02Ow|V&j<I6Ah;Uks<Fb>tSZw(MdLxzMJIdn
zF+N70%s&lg)K@rK;7yBoY+@1EWmK?>8yoTZbEbQ`hVK)JA70k<oZyE4ska;t-LC#P
zSIo2vLnFIHOMxI`rQeQy5f6kst3meTP@Upq@=)5&qXi7bN=mRbaBq`bJYxCE3qtC{
zvw)6HyBDP4BFqIzsI5<zxq!Oih!v+SEGP)|ntS>3x#&&rn&MMUDVFhU@&==u(72$n
z(#a1?aB($K1#zGw&zq|DqL*T%OnO7h&Iq!U?%Y|mhSfN=x})a2{4Yj#0rl3cSiKx`
zKwi=)-TRcw@U@)H<#F^v(taGjf*~YBG;&=Q_((7@FgSHO9abuxLA-RyG^UZIsS|w>
zqApi&&XG~Hz~%4(CFN+g=FFZxf1TaJ*79XF`HOhslFW~WRI|-KVbl#2PA-2B>cdOw
zQk4DPHa-&Yz19lu^}zsfYix3I;rMi5llkk)nS`Swb38kuAgS&hcYv0N^+}`5+T!>9
z*6Rco^)l}Py{>RUP#^<6^rDg<p*#wG_xe<c-frxLYwn!wP08a^P0kz0JH}Vs-+=$E
z|4cLyMh98mUQbB*@yjmGcQ9fDUbq|bod4``qFAhrHm8}Hg=P`WkGQy>_H0BU2x`8o
zIsXY;u?hzP1|aZVJayw!9_6-Lni>=qnH$)CPcklkl;wA1!51wv=hC;wQJQa-SmJlr
z_6CkpRn?!tK=pW9MuFkIJtz8Gpw(f^dyi)<S%jCay?2GG2J~w7Cvqr53J_6LQZcR5
z#}$htBK~ItqrY;(&Lh&o#QtWfup5bf6n4!wB%wZ5>O``z^ne5|D||TWUa{U@?@p}T
zn!F+$@5(VsF`*~Ek5VI{aMUF%=cD*29gUS=xLgbbl!T8b!&m^-DNc%V<Y*KHa5lZ^
zY`EH41;kkQgABk8G&t<`iii>Je&Tqs;E#Gba2w~jL^+h#M9AN+$sbp}s$MmH#WT`~
zIE9M1=Xxw)KFKi3>x*mkzI@f?U%Ndv@b_<K;BE<fmsCTBf2{fs7Z+nbLxW1&p3dw$
zd<x=wySuE|VPj?Lhz-F7N*8BuoBn^Xn#G{B0)R!yk0oGNjxR{@L*CRRA8|h}_rQ}8
z_i?v(m}xWh!<cirq*El&O+0a1W`xXfDn)1Kj);VOEbJZlSk=HP$iSCOeT*oAWdOM?
zEdDzF@QAnL0xGG8<L87_e1e`I9DWb%kZ(h-rV^Dz2`%FIDYTAINhIXm^|o_o*Mi3m
za`QlTu|6Iy%2dFFO{67@B4Pi7JtSD}BAu}CI&sHd>g%$IM&4{1O^R}-*6;4F)2-o3
zx$?Hi6kck<E845ze8*yIhLGsm($bP<9F|dQv<ojnr}6d*viMe<T)IyVw8)?tbs>tt
zxQk3auRHolnNg$3T#6>FTt|lQ(rp;N{ZL!za|&A~*>qmBhkdO0$HbdDozDIaO({wa
z-FMIjL%0;eb@utuxa7U6P9r1oKhkf^Rm|DaWWrs&_g~JPS1W|a_o%u|-$JFy@xciZ
zfR}|P^n2{)apZ(6rJgx^`KPuxWuwuB=@plNK(4|jSR}fBND?&$+nZ^BUB7Z{fGujh
zI)nLcNoi@VZ>e|7!H)d^#rUF4v^NCA(*Bc0l;{z{L;X&Ys>aVZ^3Os{lvC=MRjbHL
zBYth(qhK3%7`iy=Svgw&el=V!MsqKTIk<>a@3g;=Y&L1A!nz&^z=wM5{S&fX-At+7
z_Vl`@xwqi3*yLGK7dp`By!9(addWtsT!WQo`OhiifZo4<{~Uc%n<q^^0#9MP8INrG
zBw=YPe*4~gj0L^=S*UL#K@r6}fsp2{?$JJ*n}oSYDuFyZ)wHM2mP42KcBMLt7+?HW
zm+coVp`m$(a0@JQ-8d`#Rm^Nu71z?mJ1Ki{w)b~+m2$i8^I1}9B*&i0RaWcaib@1Z
z@31>!LtcpznClJ#B~-%#u}SPOP{9CMU%@+?Q6MNSTqnIz2JXtyj|Fwa%-02~h26H^
z!TIt?b^KmJPJ0>hl#Ce&nSNx8-QdQvYU*YDRqx^EhHu7FC~ti1c>Xpl;Apg9SY`78
zIhX1W6#GzA_F*`OZ*9F#H^29<i6V74V80G^+)%9p400dPK4OgW3G;dF_}8)U&spAy
z)88-k^Dz!GYrRiHHil0dJ8S0QDZ^Iq+S9t)TEZfllB`5(lK1u-Hox6rmL~mNxA+r!
zsRn$2D#4R7*`H$dA1CvbW{`<`Nf!5DZ?4s4q<geCp4ipNiS}my+Gu{BDT+2<K29-1
z%&Wv0-4Ta3+R2v4nZRZon4SHLmRDUwIYjAZS26qt3#H9m-Ax%*w?Z7V?&@?jo$yG(
zLOVD_)&9JBdcSK(^!j9D!XB@6r*o>!Y;=gkL6zSEu{e~inOY|5jhJo=Nj-V7eF!-I
zmL7m75@4fIw$}7S)K>yOC9Hr_M(U2HzLlHiucGOhK0POUkVb(-uXwUVxyLFbToT;M
z>?gCx`VhzUo?l6!aAZEX;C9NkDa$AKW`mZdnz}mcUCr!|;{NFRKP}xx=+gI%s#Jr_
zgqC}?){~l4@|PFuwAVq!!D<82Qc|=L6p9K;8hTt18mWyJYZ-B)s{8!=ojqW~{YV_j
z^C<`T^ie0<$x4^L2|Jd*oGsQu=lLiH9L-mmo?ls@ett{Hso;y(g!+f5FggwtAVxXR
z0owaj<})6i*d0AXCn)7tttR_{qC)7v=5Vudgq9sF`9?jZ2*E7kMH(L)t4tU8o~U>&
zYHz3!w0)_8Y0;{9Dt}4V=)ayR-O9Vud7$u=dVI`fUuLf)y!|fs4uv1`=R#)INp8Lp
zRP7X`_5!wJt2%yv%j}&lNpf%GzaH0D`)?=ull}TaEdbn=<l1h^qN5!^t%^;Ph_fm*
zyg7pU_~NkhOX?)kJJiWyVC&<{Ib3c&CVgAmZ&2fa=4M=unOYyN@GU+Vy-~As^0Om(
zI&?IDY(@nl5*o*(iTbB>y%EK)qO%wISUAJkHyqXtxriw(oolQvNOt%C9Lz9m9oKHd
z8&TzHapo`&%0eX%Zpk^DlE3=TpN+(wrrhk^YB_RTU&BCEh2L)CC{})D#l*Bx9<0B^
zlcV)Jo4dQV;m#Sd;xPhTnkStC#$vvX=<@L$;wR$h!x}C><bH8M(N&nH^HD<yQvGs`
zOfROOU~(&#DXHV6nAl?DjKjbD0s?ktXLLsL!SGn4xbO4wr&%wBeyUZ7{FrbyWQwMX
z{L)bAHW?^(gTwu?sB{x<rs#9F4|6-0yjSI6JJYg_SgUSJr}f*NJ&LzEN6dB21w|39
z{dPjEudhea3Ir|}d5QZKS217Fm<*m9`@j5n1d2vlsQRtVrJ!9mws&sSc}w5aEJor~
z6cboWd4Kd4yxfl#*H#~Zp+3$dV4TZW=Bfq=kXq;a3nk;+mRA-h&AOv$jc`{@KmK1W
z;A%%I<mO;zRYfdk<zgvU1?22Oy{HhndD!{E5=5bC(r#Y9dFR+Fmd~MU8>S72LqlzI
zKAWGS=ON-y{tz3<k_LG4!-rf+_2#Dwv_fu=Uw^vDKegGPk75^rgOd)8to7ahYz(`y
z=NvWZRy)(Hv-QeDFw=;$-Y?Xzvo6;8)v>aHLqNs9xAOJK=vzcCxNW|H$2qj6iGgdS
z=n|9rzPOO*zn_S<l#be6t@;Ke-UupJ+L3K}{fF_x3goUQY8Etf>00djIIoyZCZp_R
zCf-|lI9YZ8=!l2?0xMn4(We|94lyzJ?zT?XXTx%LPU_#fsGD7lEsgfjg=*l>w4DzX
z)uwLYskN8Zd^v;Df?Rr9ztvd=CGTAFam5@8dG+=BpKPDFWGHtxrOww87zl!yd@a6r
zn2!$+72kd_#V}WVapOP^N+JI73`fQ|@$W6)7j!W=;JE3(pL<^Vkj0y2YSl~;MI~<k
zf`<fnX;4y50-p*VED(h*F0Rz1IQXI+rm1v5192fZ*ptKJ|FQKIP*Jbl*Mltxh!O$<
z0s_(qNS7jA($c7OcZZ6!fOJWhv~+`rba#VvclUSZ-uL}~>x)@;E%mNpW|-ged!BRl
z-e>P2Jq>6l3z=E`*R{XoPm12&hjQvfkl)?iFS#58odYPs=;-`S@1YWrt)nKX<-XdR
z^73gPXDMdif566D`Z4}&qx+e?Jtk_qlbvA-b4F=d+0o%nnj$R{ihxa+F`i%fyMA*m
z`LsK)haA5af8Cd3hj8v9nYvF<_u+G<l7tK6EOO2E=+PSJ6ufUlO&}IOQ@>85GPGc0
z#?U@pv&OcidT@l=SapqN6D8)QTk1XcEV;YI5^#?ltgWSQ`zkyl3asYIY>O8gpa&0<
z(BR<u7gUic0z+L>nz7Qa=ELliBh7e40`SN4MW{A!K>DMjgVX4UX!#!{iQ+VX9|#V;
z4!h&X5`GGy=G@=!j*%i#eIYI*bF{rpcfRsD!u_*N$#x{aNDxsl|BoG+2!(7}q0Z!X
zEuqZWYn4}=;aRSU%A78BbmBO-h5D*){v%Sx*+)*?B6w1w8h-7A4(*t>FgN=-K15vh
z>(dWYY~A>^om`w0_Jt-KU!B5c>N5p@_sM2o<KD~g&))Y49cPba(`&_LQWAcAPc=&^
z=1+lht=fGnuu`h4t1Hm)u(;*G=nlGK>FBU}%y;NPU9*`DhL~L`0pu1`=^&}Qc$K|8
zP~z<_@GH7MYy6US@^9C622J>{1FRepQ)y{*Z^6k~n(_DYMmh4Q9oTkw6hFfSv%WsQ
z=o)js3U)sS8`J(0M)Pz_3C=NodshB;wy#J`eoQ2&Ufu=X5~2MMM<RJkOYoY6<=SFE
znm^vx$GoKqE6jIyEU5xXRQC5C>!D(2FvRdj?$Do#DLBbms)0Fmo6Yzg+^*P*`ajfw
z_&{t<wf#|-_g0Xv)430dI{~}t<xo_CNYLZ4@=d8Kt54EwEWx31Qu?x*@wzXV8#@s|
z%t+oCu0^!<+`JvdZBtLmDC?qOvD|y*MJy3ri-w%k;x!n*dAq-iAHBwTMgZ^e;w=pe
zp!ZPCUfn@Fp&=7XK)e5=4NjVXyCgWUhhw)^YcWt5kvw{X;r{1XQ}C;~FA5^(5pojl
zZ^G*l34H6yd8Vp%67?VyV4#?aB3bsb0zZ}n{|$gy(L0ELD4IO%(`k5P#M%?tQ|M_C
z#s82U$p3?U-1vlKrFeSA<0$Iu;fI)*tB+M5R6mEQC`=^8ifF2D)(x@MGUDXm07jv-
zpm%9fqCr^7XdtUIC%(o*P&EAK>I-9TPVROQCkKZJYPG->=`C`(j@C@+n$wrzG;8*(
zo_c2b{@Jl=36~x)WrqJK-9_6ISO8{^-hS^cmrbffhr5(tXDP%_Pfwn^+HQ?{i)-V4
zO~8BoGz$6tACaBXFOwC=cO7R3HbCz@E7VC>%Cd<D*1}#%RJw%SW`5lD3^N^tM5~Up
zK}3wMY&6WvLn!qBpn>=tMxL3uj2{xg=8MrEM=bKEeLR-t=h?3vbGKu|Mt)=E+)4Fp
zI}N>Cx9$;B%B;=n`$ylw$Yge#Z9a7sMfi;suW^|D)@k5BypydO*L6M}k*{93zIC8x
zXF7>9W&ZbmQyC_uWCXvM?ZW!{?u<wRt6AT7-)|`Haly!m)hKFiK&_uVwyu5@_Tw?@
z&!>A&6g(?!wrpW_Le0n2d%9iI3rPUCu3hu1<G)OCzdG@EHgFsu%6UK`(Rpgt1wb%|
z<N33Ntpftq)13?<(3A7o&OTznH8)T2l!y@F_a$IU9G+{&^ylO}SYh98PH=ZT%1wgG
zT95Kz^NeJwhUjG7kX4>Tt>e#0k^UH4enMzy!!M@x2!>1JlRhA*n!E!|WAyZO;X)5(
zD!apJ{vn>1*Xr5#Xm0=liPYG!t~do5jTZO4$9}D1zn$n{3yA&@0GB4@pW(xg(oZ|u
z2vjagU362LI)ww>?AP)vFl87i&j_3wfdef1FpU*6kgK2Y+dqt6IbJVs`sWT19d73<
zcm!b81iw>)`9!IGd)IX&M-z-5@O@{{p2Th67Xmp4jm@Siru!vI{n9(ty0p&EpcFRP
zfz}3F(=)c}tPkhvjX?|VV>YY(gzTXW41Q^xy}ctwo~ve1>|Au60UCOC(LK0tF}~^X
zfj>&%I?!JH9crRzdDE57BQ0fUWna@{WKJE%h9+-gKIUbyug?d9XCbs)e3ReG>7?xi
zIw3o~mCIg4F5dZRGtg*}bZROks_15^H6GW)>kOM~iJURr+2)M(_3_MH0#r*P^WF-1
zo?mQvHAyM5exQ>toxrrlTjzB6eE48P4UW9<+Y))N8pT%(4VSvUC%+R{?*7izTczd=
z*!MG>@kH5&V?r~{Ai1pc?t6FQkTnvP*>Cui=t$=B$WuN^sass+by{Ftl~|hNRV<fp
zpT1L6aD46R77n!V`G6m>dsND=CA^3=km))-Y>qn%>NCrHq~J@)57ZryrcTc5<pJYI
zxte7qz&@gm6TTMe?K-i)80yk+HW<0D#m_&c5g6DARNh=<8tuqhk>@Rg`mLo7b7(=d
zvWNS5Y*yRa!D}W--e4m=u6Wh$y0;74Tz0*n2=3JUrH5DEX!+b<-#yw(6}2ie*OOyu
zjjDdP^nVb6;)J@39ewn(g!ni66Ej`twpFjNHX@*H5XpELR}Ado;r4c_H!FYK2OyrF
zS>a{!l$2B1F8saERkm`nI~laMl3CxGe-!GoDz@j&WQnTy_0VD(#baSyVhuI(L8-}t
zyTa|Pr>-t!S~`E!wtCWg<vsMYv%2uJm`t&VUO3)d?&+Z-nLvr#+k4*`o3aob4$e)f
zn6}H&jl83VIK@ZH<^6|NXjwejhTc7nE$IEe1+H79j`@tmwto6CULK0ajJaf|p`sZN
z`;S>sctyi5fvZQ*BZrCa-`&}N^rT)fTK8l#n-RJSX<~k6-PyBD>Q*4Ztd|%em*RYy
z>LJ{ZmouqB)QSqKe};y-nupEzxuG(5-3ifhOBc{zWakfKP&<rO>0i1yHeItLY6=W(
z49k#-Umi%~#xoDLBjV;Sci#fihN26*<U6<ZX{Z<pPr1AOp^X1E+8fjnS{<#vtM^Ip
zj?O}a_AQou%A5{2uZDNi`qL#XtgWxyx<3EbD#+OBVqn1QiaXgk%U_-WrkO2IP4Ifr
zZdLs8-^sGY?u$>%1Z_Uyxc@J|V~EYJso83|70BhF&6vx|k?QBQ6UN~Be65Py`!|)_
zwlsi0{Pd>*@3{%ChQ>b-vKetfxtt&!{f6|}a@<jK(fPOiB`voM(X|aM54(+#(@xAi
z19zICHb9T<BsAk~X3Om_k9Pi?1`za1KXdtsjmK%d>R_id^fkYhk>u?s!qEF9ks<2Z
z#Nxzt2~~ghGv_`CV_cf<Tob=lF~zeR^mo0Dl+@bo*y%JQH2aIv#d*6q>tih2SFaiv
zG&w{D-#iu*(b=fG`gwlXyDCl3Xr55k^p)3gy`=-jh9Gsm{Ege&73`2jvAXYk2V;X0
z(CtP@(9~4dQ0q&Ii>F@v1hNhLS8v9(RkknEoG}6a<;^Jg)eL?CfMF$SkV4tH*mY^Q
z;eK`RF|+!V$F?(xWa{cgt<FptONRUmD`uGwnRxWHoBc#WyE`GT$*;_Z&Cep|Pc4DO
zZXCFBb=00V<7z0fE)=Qd9fH){hRdb+H*9PV(BW1YtTR5+RA$inzF%LJmuD81B;N|K
zp|@S*?T6`a!ZP3CWpbC4bKN6m^W$SVUTNNX^-8c=<}^wzZc2tMOTP}q!_~zl-Idu8
z@)5!+t*Ro`@H$KF4)_zKE`03hc!NOM-bDWj|MY(|n{C#BH!lIGO@w{PV7ocwaklJ<
z@$3jI(yOy~u?2T=cJ-9`MYx(!=a}u<K<?E>PB-TIbjoH<t>uQ%o|0*~E+MPQ`oe;I
z-OCS~*l9#R_FKPIdZg_~DrJh>WN~nCFdfJ|MA-h>7sfauy#e=-O+8dl+BV6R>dAMG
zmHq^%VX>2&3;jHoqzAQjVL0fS+wmAj#z&ER*k;@~DkF#c<~reUexHEBpwXbw!0KR{
zhU%Dvlc>r)3QHj4Y?l9CQYT2~Pyc+LW{6!?Y&PyTBUAX)c)10HSZ1mxOC+o=2W@G6
zx^3u>SohD&Yv=t+>@AK@v$y&+(>ssXA7)*r=djwZlBcY8Uzv4`aaxj|hcm)>AV=z@
z{tOKTRh`e*a<S{hLKDN=?ctcI$17bMYWpnZ=JtLLVYnxbU6|Mea#<1$#+MpmFEU>A
z75ar&+wKW>6zON4?1WbCG>8Nw{V={DP&qShiw79ZcB9w%WUEf@CPO@b`(OlF9gG@L
zt}&#fdek&5q8mff<Fl~oDrYLsM!yo|NKJI;gNL9^TbZey<Tk{_<9jRa|Avz9|HHbd
zTM~=!1Cb(CXLt->T+J!Q56zUta0$FuSziWCdn^RHyA()b_CbCEFi=~h92c2njd(q2
zv7D{^iv(4um>0bI`}^E3=FI=?%A7>K^+x4XVuySPhk<ImuT*l{zf7f3dEoNkz+r0L
z-0=J$TN%JAPGH_Yh+t$++;5{bv<LM0weUn@O|AkhBV+#PbXRhX$XSvZ5G8lEMoT7#
zhDx`7kwTIlpWFWZPV0X;C^YllDGhEI^N~47nptqCOR`RRpVnrxfBPPB>AQ{9E2Rsm
zxqOY94%gR7@2+TZvdxsA`2o^kx_67<?a5LhXn@?t@=l=lE{+D2EX8^Y_{vqg;7WP_
zBFhVcJibPWu=SA>MO@^mLcFpd3}KZ2>H^Z!GF(~qtW|VeR<5OOWAF5DE<~IjCDfI_
zb0W^2u8g(gQw$paP}h;r-YFQHvip6s#1+l;%iQ9oG)aNNy(|U3pUG`?vYzZB?c~`l
zjg2KzRTzMWT^OHiO+4~_{i=d<_~ItTE{(Cn>io_MOI=cB@27NYtIpNBwE<&+gz28U
zE6Z=!J61ydvftSMEYIAnD<=5i62p}3SxX6r&ey;zgzBYNU-5uqgJjli1mYH!mNOo&
z5goPF7qJ`4cdINezn(YlcdR@_mQYZ88;Se%eGej@axW1T{Q-^=)z-JfJz;(U(2@&)
zP&{rQ0$JpH%>Y%)567Cz#e%={z8r<kTKd7Rl>yEqj?;%@yTfi6FI(-Yd`_WDcO|hb
zE#0-jWn(tDILN+9T}dyInU{sAWI}b!aDAQ)`Ue1T(WdJ%EV}EkW0Wy4R;H@VqnQ`7
zhI53%Q`_X(G89??jIp@B+5~voKfIG|*&}Qo%SrUDk<ybjlErX3jnk1CL1(+IzpA(8
zDTP|k{zEN2e>m(Qe^=-W1m$4fMNjkVol1#o^?S9lnjudK%Hcc}|Dj2z{p1_xld^*G
zi^_rw6ciO|-FynXV+HRNvn_YjEy8<5FgLA}=#g!m+r0lXA}sWHDhkUD8O1&qqscnp
z$VeO|4zWHTtqmMZt?k&nF}Pmi>S9n1+xtf40hLsAlN3?_Cb08B$jnDPh?p<Te0W0*
zYa$MDo%V)oh-kuNi#h6M#_#H(6BFu4Rdj6oZKWRyoPUJh&uuO;WNTXBINq1Zm{^d&
z6V$qWN^?~A04ky0qG9hB6epfJUfrSPwiJ|4EhaO5j0;K5W!hd%#VTSFvxN{2or(R~
z<^LLdB=0gaF&doG+*bF%^5mej&Lvu$B)dm?j!e1n^ar=T!DxAT6mIUA*>qv><?o(g
zKgYu`oT*SxHdu}AoHpk!N_M!NGFA2<`q1F8_aY>@cq(2iyJ{rrKT&SyDQC+?c>Ox9
z^o7BBC4JRO&p`I{c3-3Qe(&d5Ki0=|>D!S?*TZEVN+gnr50Pu&syzun5P{W&Pd9?=
z*|T!FG;L?+Gq9CK!|SpzHG)YOLUy-)%b9~U<;@9SI>ju>$x3wW$Qrwiw#h1^W*9r%
zoILx^<46Z=U;qRnrNzdcU0zg`uYJnXaMq}_;iFj{JP_2@e$(g|4tg=boAcF^>=Ozm
z9Q5@gxolUR9Uc1{e|g+KGMgwj%Csi|03iD*^>&c<_qgxz^JRStIyyQ%?KVi{=5~)c
zZYyTBoSfFdp}=+82>O|r)6KDh4etsxm@uS%n#^=+YbcF>Qz<xaWR5A9mh+@>*?ua4
z|H%9Nx9)VHjI>x+r)&7}n;FbOePMAo&})qJ3WAn{;H>_O{S+a;?ktBRWn=WeTv$@2
z&_p#12%gCBpM@-xStw*Z6=`rdjf;t)o4$LMce>U(*UV~hzC81(rs{B$J5k~&eyf`Q
z@+`k@qRt*Kz}>y$j^BV<soB}Z_meVmbJyd`aX((=^2*A~QkU?6Ty%Q3-9H6UQTn^m
zY5x1iy$vupoTFB>dW4hhbU^geVMb<GEUcSBweb7za$pKJMk=F2UYPL+o!ej!;QX+8
z&6?=?w!+G%uLb0z#qMSz!UlXL^H}kHXY7q$H+RKs+Iml(Opl9TcrPt1;#82*h^5iA
zm6e1a?2swm`J_;rz22L>HJ_P4#O3gWdA2EO`(pZ>DQF?#Uh1#&eDA>xcZyXzPw9aT
zvd)YM1sHO5eqf2sU!3?(ja$tTk;_3%#T~m=^V*SiAc5uoWFDhv{@F9z@sGMhQ4{4g
zpIW=dWTz&10al&nlF+xhrkoF~;G}Q05Xt<T9y;@}^Yr^KZc8}RBv39&lD-!jLxmFJ
zt^-=)$}S^a&RC=W(t`)H#sfcyaFs6p_>%8tdSh$=?W0?0uTj{9@%*_=L&H(eAnY$N
zP9!eonB?g44h;QlP^@cuhC9zM{FSqn$jN58YBcf`s8cm-guyy@eyR>^l*OO2!3atE
zy_ol#`rXNBWw=ng6g6wr`k7rncz|Uo`1~6xdbW6eMp(ST+xekRLg10xBQM)LpOl8}
z0O6M3h1Z=RB_?gw^8*MK`V4@j7re=_e<|M0by^(o9nStCOwl3{%dr{f7f#cCrMm*B
zH3spB{gT~NAr^r1gYCIq&PdPPc}t|s&Mxl0?EO9;Z~*(QL6PS|X-t73mTjN&)oVpD
zD`LNj>DtmMv}O%H8v)jiJ>JN9{!MxHWOjAPekm38^POQK{{HSWaA_yxj6q8TGY8D|
zaVh?IP0h8k^>p6X{_V6%MRpojA3uVWMn|u0ih5zXFvsU>y3Ex}uu9R~?hl#}^ebBF
z3^|YY{*FOZrCw*}dB}8R@%P(|`U88~+0&NZt(LX*%}rSVZDQH;o-2yH79@froqsNS
z>$70iMBCOK&o@~dXBk4qN>@@S#l#sATp(OqoIfv^$2(CiCrWb^ECwWQ0~{~LY*(#`
zUN`{KgqdTp`saDtsMFy}oykhRJH1xh?lg`3i_{5xV#^}w$y2Jp)+rkK$0{{?^m+9;
zl^2XRY^y|r<R$8;u-HrF7PL>kht-Mjx;=H@Rl>mV4G4b0n^gDcWw^(JhV`>Pi>~#t
zg7A1L5TNet9wzN47$UdMBwDOAj85Au(l`Wks1E1b^}yb)kY3~|W-xS~&y{IW<0Nlt
ze>&dA&mfP1Q~CMK2IUtRblK--V_RHkAAl`!qS98-l19TWeZIXbqDCTx-Hx@x);B8R
zu&`yvQ&xfK(Oa>VEZ;Cj5(vD*!N=d3ZL}6|NZ<>I=oWk-DeWfR$mh6wJW?PC{<Sb<
zgh=!R70Mfg0`z^q3%6aJpOGc8hRX4X`!u<7I5rPS#o*Q1ZJ-J<$n(WXJ0{fBT$JAp
zy;3iUuabG<X$kbV^Vy^&{>n<ErhQC-YkPVU`BauhSuNmtz?@YcF4q{J;W|Rsr^R8v
zctlZmzU80a7Df-T>J@N3G80@?l69!FG}lTu?1?y(l3$D2hC7m-*}1TJj$uath;2G<
z{lgi~-e^Gga2aJk7iu>~L(Ja)%^6O|iD`<dmMX<Lq2XT1l3%%58a10wvO?vJ)c5Y-
z(A>%$FRTKzg7tD(*Ig?96n{f4OY#I2rvjDLaOnMB;6+$-ZwD!9QedMWwIUq@o7bx!
zP}KKXfQ}c6(lGbrWQU)qCdYFk;1sdZZ~mmw6Fd8Wh^hQt3T5-IJR7GI`O*@efVZ!m
z^zdd4)WlYV5~J@yMm?X|58dBN9FF2K$ceML$yn3f8k(?K<;{K+?_rWm$atT5JECP;
zaA`tm6jP;rSIB{TFDM_mfM?E*dPoz=B~JJ@MjX*1U3TjjS<UZkl+nCXTsa>|cX4X3
zGz(bQwBU6*GVaaV0JWbu?TG$0??bA_$YK%$jXA#amZqi%?x)D+;VeNqLs%+C>dZxN
zXO?1NFMHzZ)tfSZ*6*q`_`6TZKH+$Pu3JciCsll8e5<z3{7Cxb^M|HDMzuVih2i2g
z6Vr{ZINsd%$lX>ZnHa=Yra(nwknnuVTV4K<x)3}V??uq(&47=;g47JV${jimMu$>W
z9xMxzpy8Ow<Zf!i=7#XOX-=QG(r^x3KKT2jIYhdJ5#V`yDlQT5!pI;u??op&$)M}a
zoNb4+=dFdYr4p|Mvtde7e5XhY6ElCjOcy<I*)<E&oH}Eb7qq6GkGD1BxDHmX{axv&
z0;?3i_4NDjE*xrXd1vp3>~9Bt$A4bF1r8)Y*_||qB}jhf3FqsCOqu3BEj%O5@4pvX
zA5OtD%hc?=$Hzu^-1e6NI9brTJ6-Z&4Ve2A>rwOFVJAOwR~J`(H<t1K{?OUqKuub&
z&ReE2D_@?7z=T8X$-60}_VReK-7um1)cC+jT)(fsA1F`SG`9ep8i)A(ZmsquhU0_Z
z6-E7g@k~oq`IM6Jr@d4OvZ~I{T=;cm{8;2EmRzn5GWzQtgDAbm`Yp(Be`XC<G{x?U
zgBvhtr0B0)?;bTe+Rg#hDVemCV{VvIy)u)IZv6YG-OP;b=*(Qt<=`TIdycKN6x170
zoEP#0aGT4b=3E_H+nSjXH!jp&RW6SWw)^4uSK}18b*}O&=cXwBY2q2L(${}GXhee<
z;es{hJ?+AIQG-d@*Tg)kf6`rhX5=N;FRe-~l+1ldl>TUQBDz0AhIomMjhx&g@X4Tc
z|KUZcT`7CM*2Q|L7(t+@#XkT>oQAqwNNBiT%EbvF#~1`$AsG0k1RLM;>(0N%Za@Q7
z8LzsE6z=ZHP$6MBQ#!?C(4MrrspU8dUaFUd1@40QmaEJ(y^{vW&?6q|0>KQ12fpY;
zXl?#z-9<J#pF#CH;=X@xAs4o7ar5vB`R}Et{#ULOP^s(Ds}k`$MM--(p%XkmIMccV
z?V6Xo1clS9m5Zlj+-0Uo-G)tpu`p3v;oi+~%Kb#k;-C$u{qi!%O6}DDrMDRM@S*{q
z{;~({se#eVn$neO-(riAj5WH<WA46m4UtVp@or0}wsl$CqSv;!(O|_1&>fp7k_L-H
zo;uj0t3Zp}(h`e>RVdu!=5`6ANGYN*RavRQhKBhu#N1rCYduNr!Q?aDdt3fw$__l?
z6S-<z@)?1a>;Z;j#S~Ib`^zu=aZLkB_$3#>nd8&i^-2h;0@MB!F)(Ynd-tyHiB@2h
zGkXYab7yDGE6>E)MhQ9HA1)f)C^u+l=H?>5C3fSvp?smhlJds78MD5lW$b$%`I3UE
z1}&J$wNfp@z#(;zOo&l2QO=$2#Q3~C_^UDlLms16dK-z{_tV)E>o~IwH8>AuQ<ucV
zRJ*oPRyU1Sfn9yGOGtv3A%&R%4n(Z{M=$IMwh#7X#KjekOr2s#L0?fm^5`U>5&Pse
zwv4#sv-A4W${n}MOYAgioCRPl!^2x$?@AVgO!3tgYua*0+ogkeB<+hQyUL0-b@KJd
zNGjJI^$poXW>b@=G<$r?%F52SZ-<A5jf{-}hi?>B-_XDUmbVK$PTy5m9h@9{Wf>+A
zN|Rm&Bj)1Jh#HhxA7rrTOfG6*=bEWsY0Yr1NQ#PyDP?)QXG8@cZm7O~X3tQ*+?(LA
z?!Lk%8G1&9_$jY1sJ<C$%Cwlw*>e3E?$5X1Qo3`h-<gh)OOTe4(eD@%74>G|^n^#h
zn7@!~Ce3TLOJAZ8xYB82?$0>O8n5QWo(&o)$QBt~hy^KFn$_@;gk(MHE4yFIAAqwW
z@?R_<k>+QAV}IRkv-KN@C%0S<QKYs~N%*Q|_&<HZ5fsd}L}5L$ve=pB)SSYi0m<yn
z-};)rf8XTU8+L*1V@-86^~YLQ?pa9rgMq_vEurJnQz|O{j31|CCGELtWf_Uz^|WCb
zCK9D-O9y?VBj@EM*YK8cx2;sWUeoX6A24X8*Qg$aJ6{<y_+}SymeuquHKj?1@NfnE
z0$B=RX>?b0@4sL%5S8`ku^=ckO!HB{-nqik?%thl_8@39yHbXGz|<#Vg(do6^08Cw
zS+jZFo8+-fV@#;&STbaOd@tIL?lJ%SjkxBt>*R86d6~*~b;!IwZ*JXOzb(UP1kRd@
zf6toZr*dVjHn@hNd@P#X_!~hv(hiwPhY3^2(;*6H>Y9PQeGs%{30$^xoSdU@!C8ua
zb-M3vP12zy78MmKloI!0>Q0!B+59ZC{}$x9zx-}v>|i;Bl9V*hWONrS;Kju9r%IJ_
zRpXeA#S<W@!T{@^SwRHig6=!}8K~oN8B{ixmmRh?<1nX59v&PAN3@%bS0h(1W9{kG
z_&62KYH#w1wH?jAl^O4Y**QhZEYPVIv+V6k_Gk5eBS+rv2$~&Sf#yFvuII;KKQ9G?
z$54}inMnpmiR~K3#4iZPuHcJVDBilIYRJ_dR76ge2N~rOe21-}%`nyh4itGxxq3!M
zG&g5=^Vv0PU6Pb?!GqSWy|XhQFwp6A|1MG*i0FYqm|i5fx<Wxt{-L+qdf8j0EMd_l
z!-_{k{@(JWXS5Hg2rlxO3bS?Q(%jr<-yio+Ps?a@dw?M*tEOLIvH&m8^m?eS0<;l6
ze2IhIjOrvvPWJOFlAcQJ&wPn{GkwGefqM?dDD?UmD=hNUdryLhJ|bW8-^a&WY@qP}
z??V9b4=?_oe+u0H|NKjU7VdbU7-<wMzrLP{h=Q>b=((de{UV>OtSvSF`=h^-NrCb}
zd?YKcsOpZcbASP_1h>Nlcfzv#V|`QKkhF3!e>XMFDl^{nDj-FPc}%eX`9fgk6FCD3
zve#`8*O-`?aFv)2WjK3Fo5nQpICHIylOU~b;UOUVkAg`6i{_SMrNySCkvJ-P|5kT~
z>v>}_wfG(kyGsARY+VeSIj8&1)>+VZ%~~s|h9)Vr$mtsW1Q4Ky(J96tS15dB-IvJ0
zPlV7&k?|SwjI!N;)g+1uAS#sDN-_GgVVSmTFV0WfyQiF;9W>3R^jT_Wn}%}~m$J7O
zfp2k|s7iq@40`gL^`wf}cqWs14acC@+U^7gmgGnOyb0nhE_XV)nwlDDwVj=v3A7P<
zbPz}cydTnq4W9Ez`yyr#Rwa~p%X2dP{LYI5pc0af<49-i?zVPIbl`ga{FB%4dDSie
z6Yw?d?(TX8KCW?HOAmLyd^u-6S&g-~t^#@mmrSpKnDebY6<B4<Z43VYxz==nW+=t}
z{%C34*h{*)x(oC3Ob8YTbrc~9b#Qc)y>+p>AOY9!G&%ATraMv|R{#W?J8l=nYd*8;
zeyLt)P&><GXvj!=+uLSqvP?4C3aW4#rH<CFE<RdX77(-!Nv$mufuK>44=D3V6c4YB
zk<t|qr2hB)gE2HL%B!llIXK=#L`Fn-?c;Zl#HB??M^jT%V+;0=wgYR-v@dc1sD)PN
z@pNQ@JD1MLGb(-k#!Q$OyBsHRKRm+pf$^g)9Cr(HiU)Todcjtb1}*2Y`T`Uhooc1j
zAcp<VnvzI0MQqH@{?-YIz0d1${O0{Dd{%pyWB-^3Gq8*F>T;YMulW{R=S0}pN@4n8
zs$*_-tkg9llO!PFVk5`)D%a0HASqamk|MawOzCbeO#(}?(TlQS5>&IdM_coEw`8?1
z4lu1@KJUL*_i^qugS=^d@tsE>IpFK<<@_4hj)K_#783$ar)&%T-5xZG=~3l!3*TDh
zGqj)?UfYZoB$3TXPgl5;^|}FWF!KP%pj%J(Nj{91nGkTz<^p{(J~A?pC2w9o%WpK0
z(@8IsU<C19uAHt}`9afvS`)0uZ(|a1x(qym>xO*bzRc!Jq^?Lg4@B|7)qM<tVjD`@
zsT06HiuYSZNL&sZhhY*I`n?>rB^dB?=e4e!y%$E_4cj|RZ*jWKhQX1m=$;Q^2935<
zRzr~R@zvI{)J1P>Zc3X|MO@X+j|2<)we!h{pPsvuFsc@=x22&u+nMGMCkA_@G)&XF
z>Hqslp13_Q)q@rKTjTaic+GVH(n3N){J!@$H#3rw2BJg}`YO2>bbflh)987nDluPo
zkLJ^ghR>H)yuqX!zFs1#^m6-hH)#%<L+YA>2wNS5+(j?WufP8g-z(xoqyMv@;O;X`
zG6pu`1?O8=A7{mU?_$fa1pK%kkzfFx>pz*%+)ws43dkR|Um^BzGShFSss_*);nL&E
zM#*Na$$5&uA%N5Tx_FNQ9ea!Y%<o{oj4T8~NirL^r?j+GG~wm?@?$$ItM_pFGM);a
zvYz^S;XivZ#B`lvSQ5<#nIHxaI^R-u;HUoQ(c`OxQmnOfx^P;GY{Ao;r}5}_!lmG^
zOay$>4u7TKKJf8X(y-t-c18v-Fd56`UFm1u=QW2V`^dkPNC5u)D4K{A1l=dy(fGD1
z`@t}n9G;mI>1O|A{vB56?^t;2`=q(50))TIUj8t@pkcl5zNmM;LWsP_dc<L){Ppzy
zU%)ya#r;HKjpUQxrz6bMqSz2qS5<fnFV8EQCP^09A=j4r;7>OE2!iY>j;ttS;}Y1(
z%svrCY^aX~xwRMR<;@gXQ}a)sCIuy9&`J%4XJ=<8Buqmr)Psi)qu+s^b#)*U<QZ10
z1Jp2Rjfz9l^Krl@{~g#>!}rH-miUeXoB&!>8B=Z|E%0$dXfBW^tm<F>j}b=|^)oU2
zOPCYS#<Lw;j`?<XDi2#^OHD=(H^#v-#tIWs;;M~@8EQTl_`YV=Y5DfP(N9Q72v{Pe
ze9aoo8Yeh(A#Ydrvn8na(9zTWfWuZa*rSZ}OidAkwCOFgwWJZws*d(ShuPZwuSnZ%
zrlN1dzgCf61!$rJFrP2VbGxT2?V_BIy)XU`XXLK@y0ynGVpFbNBQ_OdgGs0PJNNFb
z_h(>wHqOk<Kxxj$2cDv(k9i!n!DSlS!01h$y^X1wGjP@1-|k5gq>_p6Xlc=YmHa}k
z1l*|GZuVp=<%amoqa6U~i0X8!t=tdRNig$YihKEP@IB~>e`DY%*NH}pbS3<9I)Ik+
z=}QsT%~&4gca;Wxsjc8#1-=sB;^L$*wdM&qES}u#S4W!#>oV}6#9`F@K067|n69w)
z76#X;La@~ZXIEql4!A|m&CS_EI~Nr-0uCII1=f2H3J^fgSIp}!l#28^!HWaDGB_9+
zyMb1Nq$_AWx;i^~t>#6+!NYJ6ThThrbhK~*{3MD^0LA07S^nvCU_@gvQEmwaQq*98
z@#akr{Mzzza<BpfX>IN8GjzdJ#%XPcKI<J^AA@=@@0+Y~wg)pc_(*BCy~4esAjNJ=
zr&ahNfKv|6G&g4_A`aI_S%5>X_qeT41J_rh*5zcR;6sOMc&C1+GfY^04O(n9n1x0C
z>sUNCSOs~5c%aXP)7iT{*iz#Ub8fM1-Z@|8JxxM!IyQ2-cmo*7VmB0u;1Z18ZWT>O
zMM^pospU4)r|*~K44v1@jhP1T71D)j@Xkp>@w0~@9kpVEmn>QpR-ULcWZHfnGI3l&
z*A*z~U%f;ce{{BnPt>|Pw*?v!qZUHkn`9CjMcr=SGCO;0O${$^YGuKBd?w)wBON$C
zM-9Mv5&A(eXqKSfD>WTA7*t?4H{XKPG_Y^(>wpm9DvOzG=o|}k;^_vl4~*I(!E}ij
z7gyNdf};N(woCt`EdGTt>_~a$uAB#^XMgKGVi!LkhVHVf7ChxZirs|0@U$d8vp2y#
zTJMf#ke9E&)aMq)cs770R%yk)xJ_a9fcGoEtH*nTCAr$&O^)K1EA(kKmX=1>*C?f8
z{xmm(H_LNI#-Pt*Wm8W6v)Xxa%t=p<|M)(n<8R4RD`ObmvKAH=Zty~<#;SGPOMfpL
z_FCS>Wpkne46gbcZetRECFYGWBxPf>13#e&rf{)?q>>({g|0BVNE*deqgt@5?A-zz
zMH&XRN}CmM2nC}-UpaH9<MWd}_~qrciHL|gcl$RM+9TzwrAPOVcjnq7=n3)hTXXJ3
za$B1wR3Hd8693&*;n(f>4(2*P&o$!*Usy;xKgck?A~ZBKEM$(0Q<M%DeG1nY0tyrN
zqluw`lrwrvKtPi)1CEyyh{&bN@^XXawNbDhTqygxNG!LCENaqko~VlI=}|5;1`x8R
zFIT_zeZcBvESQVI9^{f17G+Idfhte*gEgX#1dga5mmO^_{rZl}U+)nhB*llYZgDlh
zXZlGam*x(iP=NdVc8~fIfx3P7U43$wwYs*Lnk?n7{N%>QbX)0jvIFnv+f)A@fK{hD
zD;>D1h)`QgN=m+Z^*J{;_x;vm?BTKT@%F7Ps=<XSPW5IyKYxRY@>vsf0#<{;tiieF
zAaHZBI^AFCisLrcj4+Cg464cFXD_s9Rr+CZN@sri;u*<x#2&e>obSh-98TRjy+}dw
zM}R1!Y3nHqEGiPA7?TTC!})RTZw00SERwD?m$~lh%F!o{J=k2%O4$PZtWWChl6DFd
z^>&O!O1?9Lgx*ZKwD}L<aw=S(S5(B(SYl~u=@)8n41sm03#DNOMd#9K72dVAwY#-R
zkX^b`mN1=d1O;q1Z7SF=f{`NZN`py)-sOQDtSMu1+ZxplmYeTdLntbO?>$QKafFRU
zJRlBd&j7JT)+Cd9BdhRbqqrhQ42Ak_IH&%RvZnoyl=V9D5cKhb>(3GC6iV05ygXcC
z?Z&eadH7V?@)rHZbX~&kD4*-8I+*DoO-`S~&2<LuJD9{giJ9OqXEt5y+Mh0EK3yxt
zX}i*wX1_jCzaJ7EEtdU5IX^xwP6L9%3=EzH%urHLQtCmKmI_*mHh+kD9K;EUi4or^
z&dA7ssn@lk+=aP^4<0}T1NQ5$S$clD@aX11gdA+AJQjZu;S+G5$9#(c|CoPu0bouH
zrvOvSG$&0nIkZ7ovnh_uF&uFEgwIhqzy1v8tM*ekb_``Lcl6B`?W=aOmI6d#11;iS
zp0V9=oh0&JXYWkU3pEITwg>yBDVVxvDdmnOzPyh5nNhvmVt-jSFPa4%hDyN`(4W~r
zJOF-WQBvl9<n977eXzU!-P$4nchht!LNgxSX0XBB4BLW@oJ#upGMKiuJ@|1A{KSdj
zI50C~Kv&Lr8%%fwR^Rd&(y}(vGY5=y=VS>9%w}ViNH6ED=>%fA{c6*3wnk|o*oCi=
zibILXL~x@E?gh%^K~M7lYL6BBKflo>xz(o$!WbhrCO^Xw8g_8-n7I~n7|q*-rauzw
z;wlNR8%3q^f)^Gn8K^2eJR0EcX9NQG?=O^-d(hFUvv<Z+R8?i9rQyW)vytd7d*USx
z%BBV`t2{9?GuzqO5$am}2mZP`x%-5}mxH<enybK`mhM037dF9wp=E3A%Sl{?BhhRj
zKTUBq$I*XFM);tAKFlz>2NH9Wxxe|KO7{<<v;06*0tc^$w{@`s4Wl+?{~B+o@6!ws
zJh0+PCKJVbylcUE*%44!69ZR8kyFu}fK0EUU!Pg~7Xq~q&N=Z>OIYpCzCwa)>Fm9+
z)b6L8oGJ^)6D~AVnUZNJ2-HOO2{NQ-5j-5A!9fU^+_;;#fbBG|?Z-~aY7GvAMsPBM
z-xU<ZvvYHB&L`#(LY?_jsc@5}qXZ4zW&;Jmthh1J%n@$B@E6Zutpnj;#m~N>tu(Q<
zf|<AQlqD(ZL-h~$J!GMsO=W`UM4kHbhAy7py%zE;;UeAo#+>;l=fj&zIo0~TsaLcD
zzwaT0PR3r?e6|+4^^5(KhrB0qLQQ&MF=H|=-pCJ)_u_Q=uVa9oEbi9p{wsI^p8%vq
zQg1yT=85jWB=z9-9mGdGTHaMM*IP-woWlA9577j<J}x>AYCoz5gDogWuPx_{EUm~q
z{I?Z~D$CapbmofCM*L1;3Fu;nmqa86L*4slgC{g3<Tw0t--Cf1)GEnYaol5k9?yGE
z4z+~CzFoZZ_|+2+FY?8kfdj7IT`hi{a-BXz)vaIR0hTn~h_C)zMHr0ljI^7Xs!`yb
zY2lqgOTo=uZ?1gj$ulnR6-hmWHfhJqZbOvquLWF$L0Y&6$#o_M`2^dcL#wZ4P=!6=
zQ@z;(Bg(+$-V^A60A%FPAk0M-F;?ZjnECHnlDtxPyY`XhQ)$<|U*%t&hIaOnGbO0y
zH1OUOl()fFix?8jMsPvT{+pZi^DWsFOxb1RyS|oFH$Yx?AC#$5P~BS;Z+!L$K|W*0
z%El(u`VmslKb_j)&>3x^0%lT)e;zRg{^v*$8JqgD4QC_vl&oJf;&mg;N{p%;<_d6m
z<HHN}puwAdOq3izUK_+C(Q!n~Qz|O?TN{gu!p~VN=Ma0%Lft?ns;H>g95N$*ih60{
z?;@?Z;HOY|>=6I)hpJp?0d5e=)Wp}__4S|JSP(4236W60Sd)BbLij%oXZHQ#dsBmB
zM_uJoV!%I#peai{=^(0=4}qZVEkHqotUIemA9ut`2q;F3I-epIs|aS>O4590P!NB_
zm%KW{7Shtwk!{VJWVOfY7G|$o5!zk^UWH!o3O^+b7uZ)87z&O$?~QEs-xHwgLH;fu
z@dac6_IdJzI#isF|E-Y2J#9^Ob&a*5%-E=?`&d}PadDkrDSp1X>HFGhYg0oHpYrg-
z!_z`}cAe)o`Fc4fh_g)+sg<HQ`fR-4CMIv+GfRklkhN@MsqT-9tL(~q+jcn<oPT?7
zPlug^nMpo^L`VXw4EE!1ND%2`xV%pgx@br*+U<{=;J5dukN*-%?@VNI2SaX`^Ffpw
zlU0%UjlYHbAFmUQl^M6wAtL#@wHS@hBvJP3SVmGFmD<Fn3tg)oU1gl&`6~8a-@MTL
z@?G}>9n49Mkua3?I*Xl~Jz=q0<&9mF?|<VDM7Rzl+(dt0;doDh+473ei}9-i%w6Qf
zVEofWGKuKfN@b|&rV<dNe9QwI$0GabOX#Zt-Ha7Vvfk0Fu|gJapS$t!3!{msPkGWB
z%8zR6Z*_*1d`y2@DSEZ8n@d$leD#4pS2t;4v?>3sXGq~rE2GM!{YYec^s*%3?-)h>
zC&IXJgHMsdSKoq9{_%3V0TYR=U3Dyd?nr%6Z%Zvu8=N8>{!FFNxhyZ1%?$ZPoLDaj
z-y^ZxTkM2>r$@o}^)8sV;xTFjN{I5f9;ye$^H!uaxo+2|wJRG9=he6_b$JJ+T%NBX
z9pxOOLo-}l_K$t_pBJ!}fGypGD9tJa&JgoE($Ji)#FVUow={FRVA9_C0kA3$&uW~W
zt@)GZEZ^MX55G{aXdn7g^s*?bhRFG9Fi+3fP3J>p4FU0_=SEz6-c=(Tuw4pnMI4>g
z8_uK0iU~zOciZN=>2=X4fBL0q2DoIia38Z|E4^gf^W-1-eYc}^XD~I?fAnvu$*Q*9
zu5zh9hOyR`lx!S9%VOOr)%Y&GvHC&h@wdYDNU=gIX}Sp0l7KHa9SZs-bVB*oX$dWU
zy0h%HNEbez+AMshOf{-n>wYwtT2@skFA)_v9?RT)#h^AEm1mBdvD!=gmNi)Dyg~dF
zcjQws`;Tj(w++T*CuWO;+l{IYxQDV&VjHPxr}xpTcFIhMxm>Kwy4KgqMuR;Ig%$&x
z6?r43nJ;3WuaA(8F1m2~apHZ@Yx%=y?N9{Ui}te*H+uGo<KVA8pHcAan<^Rp98i5U
zDp?x<kMpKUZu|KUP_x9a8XfP1wbJp&U%opGf<uSkV(7<sa4<IOZK!7EG&Cl`LF%Zk
zJAG@ih6=)Z`CQN3IIVHZj`jO9+@F7FYJErrMuK1+QsTPAprxgvbX?cX7kj#rF<xdG
zdpUXq04xX=)C%6~;g7H6ez?A<O||AC82_?grlIFrXL1Qv?4Pa)ok7}K@KB*>HxgU&
zGC8%dJAM#b?31SZb0MK^R+c%FB$nq}oWHhKo;Gow$sk_-1I?3Tp;(>Z&4hlPILe23
zR7zu7N@aq0qXpSH#vcw_6P4F?kMsn`TJ_W_yeqInb^9+h3wNZl+r1M06ydk4yhlA-
zbI-9d96g@pTkpPVB{04!jxgnFYdU%tdRjEk%66tTIzVMv_-SH-J=X3rB1a%k%;AD2
zr<~nb&D&C$H`l1(7>|y6K`MHWz2(8l75axQJ9l|rzX5;F7CS5PvDo(>;syNaZCoDd
zI|O#v^q11?N^OyyYP4!DU1#}Y2FeWNu~g5ar8GN+NFp|(-RO1aHcUqILv>rv#ym{w
zZw)0=s&NUiO$|lRU;4brCtXw5J&_*DxOrxG@8NCB1EiIq_69Oo41vhMc($hWw!We_
ziRB}T5hNDscbnPD59h1N?Ch_|XBZr}h0{W|f=N%}3=rWfNg&|B<acpD?7%0$fO1}}
zKb`gO@-l~GTXP+w#%XJF;SYxMUzb6YGL}c%qEb?EyE{}`Zaa<VC;a^mG}|2&d*E03
zw#p9uA-A7Ap;y7a<l)Nw!zrH8i(3_s!i+^F-tA`+N-CG7=vbDf@U|<I6Y7Lp6*AfP
z3Lnl=a9c`6%**+$YIjd<HC~Q3=v`9BE-m96YGSHP#l&c8yBy!N`%5)cMxj<Hboeb<
zk!C4*oug1ZO;_dT<At9jS2Tp>gq;zRdM{`SU6)3_@U3s_9*SKaZ%~cSoR}!+vzby8
zPIx(%|BO$lSuKc3w$5VO@I&|3-C?*$ClMOnY?oVXQXK7)&yjt^ZRhzSvxz4BJ?8tj
zaoUH@Zu+C*x?|(5s&ZEa7m6a??8HCI^zojt{8Gd9nfBKsIX^cd4(ImUJEw5g4>Vb=
z^f0-SF?lUAN}Qs5yYqeI*3b3FrE6hyZ_Mtu4H1QGL{KV@p6!j~ojZ$8xsnkI?%2n*
z74A%C6l5Ri%o#fC*HTms>PS8)Lg>L!-3POHKkb_CB=$l=;IA05XocTtS-A0e1lD^N
zw6732v$L}<t}cU8Qet9VZ5`*wp_$<{%HTAN5dhI=-(+fBRvxemJhzF=E6jV4r3Ag%
z{?xFq9c1i=wUYD-#8ujYl?V9pKbE6-UF%>W%Jh(XGtcAumU3&KK5Ae?cU@bejK(mP
zD<$k!Qwccz`h|0;IgEkZ38V2W>%VTQq<8E#D2az+YP!7WE_%)O!P6vB_|2!Cp!Yf_
znbnFf+Pgn<;*qOxd*-p_O*r%N@yDm{4+;NXT_h<P-KvREm=GCSj#9{OG2?X##}2I<
za0}V-Q=l=n>n!<brl1&cP5vb8(5a%m&n~Z2T(|H1x@!9=rmqW~vqMEs=OblzhPA+y
zExf`fZyN$<d$49yb^2?0t>tk)hkjSb#i24jB~lkI)u3?E;WcS7l6$E%(~vK1rJ^9k
zpK5e-bZdr4^JeNN3Y|K`mqn<FQZ{EV<#XDXQ+M65g5g~M2{V?kH<Hv1OOY*mUPmaD
zTU@G_thTZHuMO2e=JJN2_U}JpB7sEa{pp=W88YrMN1=Tt75UD}-^8_egETbMSL~gf
zy!yUR978zu>r?(K{rb-*&{^sw3%{gE>)so#YomyJtQ#kEeu`yGFR`kNU+e~?YEXFo
zq&zYHj?W7c#x;y&r~7Af4^<eOu%B1W+kXfNPUEqj*<oE@KVE#NIhBo)#$RvVR2Q#(
zRJqf+H=xX4XRd$NRi`R3qiBrlCL2K+$w)fh6goW8x>l&yc<@Rm&Ro4RH(Ao`t){hM
zlJdR0>&A_Nv5K3|r0u$5M-9rOJWM_gxjFC=4rxY+oAc1DeT@}-kyH~Lo>DDrHr;k~
zi{hYI@PYiJD8(y62XokGX1#HNFnnU<^5O!=o$;~34Rocgk%BovFATz?`rCDMs(%9R
zf-&E2f+BxsY!x7kfEyXNFLnxg-viy1$7esf4anZX79KY5`3v6N`#qzLy2slyu*N0u
z49~}27+<Ove2!&#^5h96rI)X21Cz?1ju&<j?4FBbFA0;~X_eUDDg{13eMfC_@vdY&
zL!afa|8^n6*Y3#>-NF*uI@Bt|c(+^~oN}l9Uk>d0D$0cI_RPFGy6s%G<wT9O8Yf0y
z6R7;183@a*l!xBk%w?soJFv`FJu&^R#g4D!$Z5UqmxI3hL%Q&ii!5a%xZPw(t<WqJ
zQ%lcL4oA0-vge$gBr8`l+jo7^tk8@rP)m1Q`p2ZK`razROY>FX2KHV5v_aXxiFbZE
z)U5I?h4~YqwnyqUWL5X6o!?g6LqpTymZ@EJ{4nTt_=G>pj)9VPLzhIm1(5!Ku>dX>
z5-0t9+>xtWR<H})fBxa0ki#TV%NOsJw$ro`@~Q{jZSWnPEsk%wsZ^J{U!gptlpZTE
z9tO{OH;wA3g`*^}R+T&X^-DaQ=8Ea8nM^`LT6(J5u)mqaod=TP0F$6oFJ3+)(W|Pg
ztZ~?RzZOByqVGBgZu>N*U}Qg4VP9uf<0LsCt<k-O;Hne6>z4#^gOOWIyl-xeRaNAm
z9FQcmY#Nju9A{$$<G4N#+4xRhg`-(9TPR%hlty}}YA3JXM4fS{D098(<8*BU9|>u@
z^}?JptL_UA9a6fPT@~IO&X!8{cjmTw3)kL83a=kCnwVgY9@97L1o$jfGp^+(YiJzq
zIgGAylo7Yaunp7gC*4&1`f87KL#LOeecBsazbvN}qjvL|peE(bKgDWIHldSKZ!*~*
z2t}(Da^Hye|7PkuiYS2tspj)~pufWI*Wf}z7Bg-J!V@~#p`}}jCFSg~%->F&YhzCK
z(GRzy*DY9cFO5jt2DEVH5^7tCn|>znf3v-%QGl(+8cd||%s;7<K+`A}XKMc%!UrFj
z$BDpxFJSzh_4O?#oJ@t&sj97}KYwi2M=Xzhf}xo@JK8wg@6UvhM%IJ9?u>lZi>*Q9
zVHOsax?>k7XyE<mw&R|gUscYRouJ{CmsiSt<9&bp6DemCohH5*n$?OtFEELYjpbe#
zAd!i7*<4qlG|Dh*IaRu}zeUI@&*nlZH`EtljGLR?vum=+p~8->(1Mvg>Zg$(bDcJ(
zN_dEO$4^Fg!_=_LP(n91q*cU!BxtM1ys3q`XXGi{rT(bK!TelZCke?(R1No$B72+D
zu`|21eS~g(nAy_&bp2MhM&XX~R;$^?(aL=lcDyj_4bFBxtwW>W6T*>VQj>o6oCWW~
zawXYgA(gsrbwpf5Yu8lBWIu><FW=7Vnq3Op(Kg0q=%{6>m=T{@e4?|_<oI-OqP`JG
zmVH<d6F%b1tE*wcIMp%qrCm60g4RE3xHAOZoNG60&p09>Jm@&06TkWLTww_N^z=I0
zsq<*1!6?>r3)${fZJ6!mOVWe#gtw}<iky(AC3GZ0OieF#!>HvKJE9v9uYdoCCiL-q
z#5W(>qGfg?Gw1cCe?l@U`l{;Z`OZW$v@B=PJKb!iSKB>0wj{^@Sh9O~m~Oy9B~sBp
z4h#j=)2FE!Ydx(W0rV3P_yq#Dy?IyEB{05TXp-p6)X?;EXHWP3r!CdRw;4sKEKe{g
z43V%7lY3iyf2^xwF>^L4`)YNm_5H)}P-6m_J*u4nLCcSL5~6N{ik@U7m@4|6o>fT}
z_Q8!Mr#n`m^s%wc`|=JVlNUksQ&0UfbSW|lCO)gpY%mb+y;3yQ_^xvV(WXiTsHfCC
zn#N`Y<Bv%G<2kRz`{v?L-|UK>#TB7k`q}535^qifWcsdMZHuY1lfFiSJ>)ryF!B#X
zeY8ZwhYv&719DLY#3dyaIQeL3{8oJA)&YCOCQgWrB?O?IPN4Z#;r>aL`$(T@Ax2`W
z%k@pJA2s`uqcZQX<M|}s@bdZAoz3B3)N<ZsR0ta8cBQ<fq&68Sr(EduIQp|~xCW2$
zTTjP=+DrEPmDi9dw_13QH#dn74-1VX()u99bAEA=IUX{02yhNKD1>0wg)p3&8ds~r
zOL{<b|KhwPlP_w2C#6FAr4Nyqy}h?y<Cwq6{>&y@|8Jv52540mTW#vIRfKD=vAM&g
zXSxQBG6<gT-r3HWP$7dGE||yp&;*cNL&ICFVl5(A)}fSA((ycw7pE`M#FCPdfSDSr
zw55eRxJEQufvocF!1hz+vInSLxf_Kou_(W^RXFqe^zZw#g+{&TV|f0e{0iN}hiMQ;
z<O)32o><MIC1(DFyn{F{TR$&Q6CvX=A&UY2V`>0E1Yi=$Ok@5NE=xyDgf@{wtF;sn
zDtQ=uQdt&PvNj3y`^dEPYO*H2#OXiv@N6FUOX#7l!$Rxp)5Lhpv3!1Ft(dI@&L<~x
zLDPm_0Fd9lsc2<s2~meTnetSIZZQOpA6LI?aLT)(rZx_Q840h`{!GK|i!)3Pw^`65
z2N}4Cir(p5+1zx4V59wgo5njeb{kwTU%muLR905D8KxeX4O9EFGT(|f!AwpMBHU$v
z84I->`gtFJ6tO%kLGAfY=qGl*VlNUD{|nn1jWEsZOkGnAPD!~QTB6mJJdG{LZZrTk
zT;mW&pnbAp4dI|b;Z>VY^Fe?z;L4-p<NOX5{7(|g6B0<u9DrYhpx@+VVr&2L(Xl>(
z3abUR5+m0ojPRmRVo+x(x|z!8dU-0Q<v2nPih|x!mqvN6ys9l=_0X@BxnF6<1dy$G
zp%Vg3bUy}P^LRyxBGXIcRUY6Vzf87IcJ(JN*&V!<t)X<ro?ZJaSil1Vfxuu1i-=fn
z_#2*=7%Q)M$NI|s-QK<qG-r}Gn0k3(5aB+0^az9?L>H+Ld<*OaYpvD7U#MCv?3p_l
zl@8tAOk59OM_@f)AC-5%LYRf0=nlc^qP1_{<8`(RB6v~x+BZZYaW-p@cJX4q^`TiQ
ztj2kyJO*+9eo*em#u2pJ1TUeuyvbs9-`MQJ{E0U#hTey8Utk{$Wy+W7b*i2u{rqxm
z7WB@oRFo9FOI|#@ya4eMFC1mOe0I(4Q~{Sl9zld<S@hCF7y@0&%E}m(^UjBIV;B6b
zuZ~YnG%BoAYK2ujgMzx(m^Y}4Fi=rvk%_@_ccf8@XR}(t&>sYJ>oYT!SC<!RWn|?a
z2@wMK<)}k_p18PJlf1I@Ol#Wo6s%Ljx`wC*xR}0YC>rGvR-A3e<41kxDs?v<)JBjs
zvXGoPwVVS2VfpX_nt|QcR1Gl6a8swIzHY1yH{{(_93AKG@eg~yD}m2S(Zy;3s}Gl6
zHT;?E@5xDW`VER<X%$OLH8t+Wn}$*2H^hq#^Ex`dR#z+MyThDJ8rQSj7$C|2Cb%mp
z0Rs-j3pyd&Jxt6xSMCtNM0<|KOdLC11F*@+AqOnlL&frw^unW$SiLIEH*~`0gO|d$
zWgkCKhO7T1x%%!53>?GtRgezBq<H$L-@ml3?h1DCis!)psaNT><!nt>0Rr(2VpIO)
z`uz6qF9iRF-JyPkJM8yKNEpK*MBCbXt=6MeRbaekQ#0k4ZXFOis;XnYE>bb9kWj^d
z^h^14H{#c-%1@K$fYc($&v-BD)$SzLmoMjhplnv#)3348LTPwE55=<f-Pi69U)hFQ
zSzDV=Rt_c$!LTah?c3h4oVmEUr|aAkVhOOYWMQ5RGy+q8KF_Kh<~KzBzDh*U32|Dz
zeLMJoLcFaVvZ+n}7h7)`5M}p$fexTZmoy^MAk7ehbV`YI2`I=64bmwfp|nVMcS{LU
zk_rP1-5^qf2uMjt+%vqt|Gi)CS7m0-dCqzEIeYE3*8+WRtkXyQ93^9q_gV)DxhBhi
zLlfW^d;*(7zapinNz=zi91B7cg96^LZ_f{m6`39Qs<bcyO$Sx7vOSV9s0R;@-nmT)
z<Qm!?!ezsEFEP<lE+o=gje%321Pr}SgMbkQ@D_RRvKA5&;xOL`s_P%q$tjL!y1SWq
zd3Ql^GL)*-<?PeDFTP-bK_&_8R()2w&OWl5TOscd{dSsfT>SA>9`px%s;eWqFOiZ_
z@$+&jSAGQ$RsBvDYsuUD`}%fg>i`?YuuXJP2EUc|%D_T~*}90h4OnQm2|;SMN<{}|
z#ZTP0zd~*`iXCo+Byg#78286uiw1~T%QB8>G2h<90p{|ZPoiF@iu<1*Rd-yarM{1j
zjt&l%S5m?rC*?t*P$i%C1$#kD^YFnV6Z$kjoD=2ZiVrFQ#Wq$JoVj@VKuC`>gB+Xh
zWZbuRA;ws%wa(!KvZiVuT4^R6WQUlA_`dvZ>gWgjAxNjO{|>GA*JdUx5(Id9t;HjN
zBIJ7XrTg&C@zd;7$Nfs(*BISc)>%xZHbDViVUJ0`(Ki}id%NBd;AuxsvYT&Dx@R&b
zsz$13s~D$wFA#&Ye$LR08SEi?4b8TFbEOID;)BY27nly2G!V_*%_4e41lUhOA0(Zq
zF^952)`f^!zXNuXzU)H^HD;7S$bi9+K$E{7duDl9%p*wWg9Ku{SxL-5=cviEFx^<I
zD5aT=k-VUd5j3yM?*=8_Co^#h{@J$ibrJyQ@5#;lqA}0~(?9_L=Yo)ADT7a{2s=tN
z<Q(tdQwE_m4X|d!#l_LEd|Xa4kI(+tOAM)W>HKTLx)9MO;EIWf)&fd-|7@E4BFPSB
zAZ2U-bYy3ThJw)m<E=LP(a7XR*K|`s&afti_pV^M6mHOSEt);9?2TC*<7%s8l5CRA
z?d^W>6AEw58d1HGTPoSfYUK`BQD`5F&TnW$EAaMLDhhLfRsAPn&mWZg6b#3s*jZJR
zVBkYcvV0~-KMN--uszzpdd2$ioX;B+y=`g$lfK211Afu1$II&F+pHWtO8t<3#Jh=H
z=5hb;;0#6&_m2c^J%+MF!ybWCMEypY*N}IqszLqDXp!q}CT8Y`236>i)Bg=l-LHD|
zEhV@*ya>CQN-a&{rYxhu%QPk6c-|BDff^``(UFn$fsY{Wx4jr0q-^t|5Ma>EbV_-B
z2>-gwoQnmPoL>s9f|R7_cDasgYCdRl%k+tsu(<24+fEB1ID-Rc^QpLfW*=Ixx%$O2
ze+0`om@$f$1hx9Afdl5GZREp@%FB>&uh7beIXdp5i7rv2Y7{rWH%^!)4aWB#3!S3`
z;!+=PXH)tK7r!3Y*481qw=iAieg~}ei#}9ggjo&BN^M+y>fCntr0m0M^q-?;M<Dop
zdwP_7h5L&*#+HmgP|tq4J+itQ{jL0JN9ZPjqql`NY^D175ih(B;XsfLdlVdYhTP~$
zQQldUp@UPf%@2uJJYp1hb2vo^dReW&^MHk$6`%^sQ1ir;FY=~e#I<M2p!f5O8`G0c
zp{QflXM=XPOsxf?L+$5l!R4V?WjqNzH3V|-ZrhVlwZx*-0!4`_yfpL<1Y@B`|K1Di
ziYn6j6&kmdgNgIa<qm8jS{iEV9`y6aZsQ+Cf6^u`yu(06ejI+o`bJWr12-fy<$GcV
zQKqc4m)CVHMMpHXFl8qCkWS4>X7PEMm(1=Hr~UXYpQ$uHW-TvR5~APKfdaR0*L=`M
z%qQ+M2_z~?y!5o7hH%8GrYdwHvJzBS5je*M<qF|HJLD27mp@h~P1TXmQ$F_om6BdQ
z|9J1I;raZ<>8T<5;fn*?FSW6&KW#?`1%oa{0Q?5;Dk?x8LmWK*U*u`2ARa?h6l8U4
z6dKjNKya7vJLSjX+SHE{uI`dkgR<Z0qk32t#dqimfBl`C>)n12@Q0F=jK+AM31qz3
z@Sm|p5Z`*P`8B|s>)9l;DL&_EtQ4y?HKXUr68&S}e?eI9r2U-t&JGpOgTV_5lHH5S
zbpG??bm{Vo&`^KCCLK0K-b(G6ToRz&ZD5!>2i6Le^r-p>Fg~l*eFS+QU+bj!ZGP?+
zs@W);$sP4R7+H8#R7oe5CP;t60*a*ZIaCjPX!59-7sug?=4`idW4wLXZz9nP4FIrF
zD?ST+wgr8MSFD%AM+8x1+6v8wl;%X|gmPyl$2>YUZtDB_G)w&N(N=tJu##@sy%zs%
zAGdz++V-t%Z!b6ange;N>h?=HosN;H&8qC7+C#$C1l~Rb&7~9Ah8(1xU%}tOEiFNJ
z2`d9IG~3?ZPS463?pzQe+Nj$kOne?u`>i;N81)v5`;N~FM{C*J>jV7<&>D4IXbCe>
zk&gMj5pxM?m*3AoTU>uk<_jPPN>85%T2;Wl30c|LSgO@IX<EAPxv@|xt<RmC%&6gd
zm?(8Pc3d|gH&lc!W7m?{QQf<`x&p>id$V;-KY?@B2<Qr!pWmi*o2oMHUtG)#$~kS>
z&apATfOK*EX?V6;4<-AnFXzL{?GG)1<EANd%r;scvX8UP&OG+}clj15A-xL;0j9VR
zv(ZTWwjLxtVcP;SlBn&7yf(18aO7v($%~*9eVkShA9{M`ZYw7~%muh35iaij@iDN2
zg=1UK)!X>_J$G>t#A3#C-QU}0@Q`Bl@x9>jnfY3*ZQAs4S)z03A%+)gpV=dYq8Cn7
ze(ndkaIu!-URg4-RfFr3lg6ENT4DRSX1l!==6)rmCBM@jyW=PhA1ieg@3_?Pq)||q
z<^gOyQBh)Z^A4afmds^d>$3iEf4>$!oM{F<yG)o!$V=W7_TLEd+LPqaMtd1`x`Yb`
zCOu(c)GM=}ZvoY7ULm31-$*A*t-!?}oaPIQiy*)8LLt8b)q2`lK-dADf>~K+fP1*q
z=wJe%l#&mCPXRcdfW+7bc!}PJl(MpkH{QH=h{L!%_Ay$^SM?8$B1=C1P9}g<q$j8>
zyY;-x$jb3H!Ot#*UZ+<nhLhv{UhIf`<JamBOnGs+%^B-$3C$U#MMXU$$iRXIdY~)^
z6B5==Lq4;QYVw*je}-Ll9H|sH;vZ&8rulEuSzm!jrLT~H;Rezg)Cst0f?Nks`aD5i
zWs^&+#_3<BmEQ+ggn$DD*jh9B$|IBI2BY?FJf_7@+w7*R9G6<fczHd>i=yS<5j}QU
z`vypmHl^TtcpDpgcdmgMq%wNtpz~G;I0Zkz`r2bv+;CX>`Fxh*j9N8E{9G5T=*YLh
z*+i1mtYm1t*Rgx;Gy|MPlY1Pc?lKX#NvxDml9-g<#`~8R3&Jmot@sU(M#wxm$6Z$7
z>vx@gl(GY(cruTcK*4#fV<C-H^2#9frwkcZyo0ZV?FtxkcOPsBetwcGr(wxmx<eM0
zRIwEoqi6#SN*;@R{!RTcS_-g6Kkqjdu<rdmyfdG`Chhg7b9lJQ{>}Z$Croid_A}0a
zY1HJTtfZ*uu-ra0J>3Kl%7qEwaT0q^4CJ->;A#uH$v`jm%uGs8k3!no&d%lOzNImX
zxVX>dxjVT!lw@pntwi;y6h%hsx+Sf5Lg_AT4fD!Wchsi;W%tKV;|?hrG|I6bV;p%K
z|E_0B?68PfMS4qoS4ifB%#n_OV*JA0dReNy&`3cSIMSFR?{&S%`k#GC*iKU1F9Xfe
zEXJ6GE#Cs6<dRLIhZo)O=vzh@@85N@V+APUIln#l(>meL=m4LL^DY|Eu2ixyih*oF
zH8($=8z@SJ*PlVrcjy}HpLQ5KKYoyqk$v+2=K*TiK2KC$NB<HA=8`#&Vw01T0YP9$
zzuCpgF{-kXCv-4@d)!%D`(sNNV02DZns^cu$AZLDNnrsoG-UOlK$(Vbw~)Qzu*ysN
za#FT*+w4<HwCU?RqPUhqKlXkcJYX(O$oH)h;(G{9#a4aPGRyyc@d$+U9BIyF!pDVg
z>&e&4>FcG|ON^8@^Om?fO^sB^i}@v0#~o?>@!)s{JL0^hdoFVnWlyd(e&%wU8syv+
zYM_h}D-`#eR{Y^G-r<GS<%$8*YYxd}Fi5jI=Y}i|Dvp6}0DWaY47X>`SkD(hO5Gcm
zpvvVjrB0k$LHy|^ncD@f$f{2`#6PtH=pS&zKn2nW(4Igh4vg?lrYdo;<>unOeC<np
z68Kz+cUT*_uj|g&77*Pd3<c{jovDR|I*B1?R^g&VgEL!R3_jO7i%&=gp}^aM7Me))
znFeaziiFtVoZG`WsZR?j3}u?1NpkgtMCGQYvW`A9=p-<YZ^7vi(&ERY8Dv823r!hW
zTr3zhDSG3;BfsUjbE^KcG3I-T45G|AgK9>(UPXY_1ILCqfRO+=L`q5uLdx3xxtW<L
z+GBm-6IpHQJI?G38kT@{2T=X6x91k^15t{dz4%+#e_dWN8+O3|9gtf|W$<}Kw%2FZ
zQ0KdaE(cJQU8z8B)m5@~miPSQ(3Vpz0)J7-(mKs`yr*U>DklR}hZVcD&Rjeg)1?sc
z52~rR9Psh)ekK(%r>VbM$4Qli#*2o+#3y8~spkSiDa?yP{IB-MpS64=OGVCO{A8J-
z6U^@zhq{F-MLr&CT!BJgpWAO_I^h`RD9WI*s-&l{{AB>d56l%d0Fl+E8gOjPI^IYE
zf9=<efcb=1I^O_d`HCztXV#nROJWde^^ySlo1ElX##?*Z`;VNTrHeT1?CgM8=I7^E
z;)mV!IK@p`lFvlyUh=VvUn;hIgu%$b;1FU^1@Y83D?W~AD01ZKm-H-@wdFf-f9Fmi
z^?gfe!6T8xYIX3_%RaJLQ%hU2$hr=~Fny{`PZ>}9nY|FZmq{Co>&3T+-X?7mfeid`
zHpx$Hl2%@Zj0^$yLQ?+?$=Nap6pR=r+QC?DnkjECadk|eD3O3p?tLc6BQ9?IdJR}d
z3fmIs4kUw&bUatSAAQ))%~`?W^p9%z#Egy|wx4E8%>tKVz-s3)yBG|@`Ug-eLC1wV
zWZ^7;%L(it2|`|9TKzr-wfJKAn$^e~uPD0Vj~iEqzdvR6h-f|>vaCK|Pq{v25p`x{
zO?yKPY`sf!DtSYBGLwH6QqB;i;UdY?Y`zp^l|M6H3S>&a#IO{7IQ2m}B`34-J`&F)
z&g&;@T`8v%g}~<ri!Si{`Y)}I5IrBI=#>8G=zXJj;0*3!P*_ycJ`{#X5p!jO-X4ep
z=ps-xh|JKbrLuv;H#0I8Dk{{m{kDwLy}t;`vKD>Xp`vE+^Sc0IB-DYSq<Vb!$a<66
zUvlwkohOe7>Pe2}bEpI<pC{*ghe(B5OV)n7&7!D2-SO)FCPfv_lG;x?ZF6K;bCJ2<
z)L=?8bd}3z$~GkC_Aeo$FRTQMhU)=@9IA_!QmP`_5S~xy3o1CR@!nV96Pc<MYCDX<
z^Sp?=>+6LIMkFG=x<X(fdXPXB9A7;qg)NDIv*cpFW-0->FLDKGY_!kP5<tdWN`$XQ
zXcT8bDnZYBg}0iho6Jzdk|%j2F&!EE$&ITsa8gB>s=)WVqL816&3Q$u#7K3AA5{As
z9IY?HxFrIyU0<_@DY6T!JX@*9gCJ#eE7b}@tCK^`3!9TFKFHGPlJn6BtqKS0n<*Lh
zSemMdzzBxCVpbF~wp9uLVZ1TwUm+>`DM0~8pp43P<NPvqt$qn>B!?2rbZejS!BBBz
zyMCfwP?a-{c(1Hh^;b^MK(mJv(>4~Z!tW!8sT?w{tzIwXEhq&MBq@|Pn?>pTXUCBq
zF_!jyUs?{sq+Hg)q-5GTn)<TPV{VPIQZ;MXvufl+)#+mOHp(P(OgbN04pX&5H~rEt
za!vKS0v{9tecoo%w^qq)b`cD{bf?SpO%>Oe@?ktw&pvy6x8Pyetx#WLfFpPVU&+3Y
zAHV)Jx01!+E+BWhlw~g(@L7_XhePZhP?#cNl{7-*)d)<L+K8DMWF<_Td&GpSQum${
zYZ;GOO(G;EaP&ZYJh>n4H6VZV{7CLe_7E;69OM{Sw~#NMlT$MD-PEw2H!<lt-r{+I
z&7;6<&884N#2pMvOOvC^uq(Hw9g3oshc3liv+1r{4{?!tIY7cb3a*mD{C$#a4bi-_
zQifv7+BwbfT6L^O(}&l+kImE)%cy^*9*Dj8T^yf_=IjMd%Agx1HwJIfzfResEw~Ua
zO*%-Bg|>fLeWBPt>_cfcb8vwF>Pq_A3rq^rp1Fhv>DalckE{f>FW?!h_<RltsMIZU
zIK~*9FqV)@14l{x-{={5ZBn4<OmIrUJ~}56H=7K99w#l9z_@Hi>vji?5Hx=GQOdwf
zYDY|N>Q(rsXDUKa?Nw_YgDNsP+h_gvbohd{UzIJS+Kl&N#|qRE#k(85e|KbbX5Ou;
zbCNRMb^F2JP8u}+Qh|%k8~N>+I_Mbh>R=Cf4MsL(m-yE{j1UkC6Uo8Bh_^1J;1IOI
zt}uTVIAi==f#wcP?HG3Dz(5{6?8wOb$+Md~B8&)~$S0D%WJY1q)aypYC4Hc&m-RyA
zL>hlAwix0HgDE}9)2mXC^Oj~Hh*J1qzCF+d<+$sRm0K<>cZA@U_Sfg_iW-Nnet1X}
zQG4|S0Y-*@lhKL=(aIh^Wenb69-e|_Oce^`rprNJT3Q#uWy5$JAf!cObMi7T+tmGk
zYupzv=Ty2i3cbtbpEM94;Cem&;s^~CK{kldh|c>!QaV|DUGa|SoKzY(QjrH?-om3!
zP-#d4tv9O2u%hnE)3K=$+8`a<*TKJPR79dujXclo3pPgNvSuut&{yFpG?Wr}OuAW#
z6Foz7RDQhQCSo_3lM2zuO(hZ#S``f!$@$#15@?eZFc(6OQyOHxK^whq#20i<H07Ux
zQI34`$t=`F=iGil$E;%OzuT1*y0us)qyRx34FYd4Y(SAZfxIpc%reUo?8{(l4K9Ha
zmaKtQ&A40$ne8){Eb{Q{G`#!IRU0x!0`*V=?_wek;;AC}{YA8I_|LUB+cEEDj}o$r
zbzvhz7HTOPI%UyP6>29sAalVws=B^!T*gnJDMj)!oj7v1He~J*#sG!y5#oasUFEC7
z$p;Z&_l=^z<wau8EdD!O95RJSXfW)pa3~B^#T4&Vh=jo~Sw~xwOde_1l(3fvh2vg1
zbIM&DrPcV#rHn-*=ffIr<B&R-n4d=#=O^8~BzoX=2ga@kMWpq*{@W^m`u`smfMQVv
zO%f^8g4S$hMaZ&9<OJWHyLkZ=imgdiyS9t8-G(ewQ$yAoYSAVl*BV(3Je}NhQc$hp
z5zOp-Cl9<UY7k0NZt$IF%18p^<1zy7w;cp&seq-hDi#L&rMmvoR8e34Y06{?f&r;O
z%^j?@Dx6<|Xw8Gekj5c)r-+cJ*|%TR16n$8oJFHwhFtilQ2B?yDm2P|#splzkm@Pm
zUF+1yrCH?*gB9743{6ZZpC&RUVvh>Q+QNJEXrZ34F69yRKaQd)HCuHlPz(HTO{3_@
z&~P(pCd(cZQo($Wp0B6FIo@0!_7~~zK=lcR+#E@Ubf2zfk{((oa_Qa?6aF(8^@(j&
zU$JbPJWk=i??a8jb%X+xZfbPmH#-GU(Dxm$QX&}E<<|c->b`tk9-RW02B0Ut!dJ#+
zQ+?|`Bt&9pLN{7qR#Z}=8yhY$Ii4^Il|Qc#Vj+J8Iu-tN#jQxO_Fdt31QBtGAZ>qv
zRp@RGrx4VFU`R;lJ?vKmpT#E`1lz|cM5oNHvxa>mSeVsV<rupstaWns5qQHstw42t
z9i=k*^V&A#`P1GYS6nv@>k3Z?)ITbw`{#~fu0WmaNJ_xhDiRD$u#O_Q(-iFt+cHkS
zycYe?pg8ly3Gs>wMI#QC+IIShN=<b-uW+P?nHSJhf?l0KClPgfP%pZ?xUjcRu-pCp
zTYWVWh^`VSg@V59*WIAu!_(6fMEe)8f+UZ9_Q^lrItB5sy47m6ca#rxKF8FdK8u%z
z;c5>JramJ7P<CF+rp@)QmKWBDFEo``^6<bopi=dxrMu$A?X_UtE438?1}j@HglK+N
z66z9c1qD@*47?-C1gWYS$ZQJtcji5F_P>5*Orxp>hKGPpC^Q0EVL$~<l-AkV*?Kh3
z>cxxOgiw$V-oX`yyic+6qaS-h$EbI1P;#IrDOiILz5b)`UHUZNo$q<sB)6Yq%p6%E
zwuXpQNb&>T4WB;SiWo}wbzhTuo~UABRrjnM*R!7**@fV^d_@z`akHD;@0vq2%vzrS
zMTM51)CLCAf>r}XMeW=!v!GEaiOV3%hMkMcZvUquKuE^;H9^adq@*O63w0*v97ecM
zaFU>GRdQik8YZ4W`#|%l1e0QqlDN7^^`Jv3uQVi#Wb?beZd-jxJ!HO6-upsvM0=49
zRfo48;9b_-*MGt9a{m0q&?&lc-GX&MDu<cbX|hzOe|&uV?2yG#9TamwvzwRiKWAc~
z;&Fb$P-D^SqWWQr(P|tNTR=@}wlgSLHHjO*n1+?c4IS54Twrt@93`Mm2x>2}v9Z#A
zr+<J7gz7e}i2Z49_dAeYzOb{KZ}pDM$x#&owClFuJKZ}w^q{zD3x`iPIdznjl%VU=
z;QXQ}9rX!L#PgQ#l3Q0j`~4;Li_3b0n)R{OzL9H@o{{lL$-lYOmb}Om1m11(ysbLJ
zy%a1_%6gWhEDxI#Tq@!^l=8c`-a}v9Gjf(67O2L0Kh*EGY@fEMfZq`Wo2&*W&mJQ)
zF768C?s#$QmY@rXl9cqN<>9Y1Q1t2R?Nxk(s}NTk83`r)4U$1C<2leIDC#hmlA3B%
zrdt|A|9H9C7Y<S>P`d+-Y^%S1mDTftMEbFbk@|AYOJ>z7&z-qi_idQD`7%f-3yO=i
z#DuoK#W4fbJWEgxVBO$TRK5K<Y|^&j_BBPBpI$5h-`^o=za;L-H$vIv&qVVdyeoRY
z5vQm=^^#31p7t-+Mb`?)lgOP_IHlRc((Z+eN`quvpK8plx?Q_hKOO%oLsVpOU|Fjs
zfj&skciFcXQS-dn1z6RA&avWey<}u$7M8DoSLorv0f2VAb{A&VsQ9FO{~m!>Od&mi
z3H_ftI~t{)y1Kf6fO&qr&EZx=RsxWY|3Mw#2+@DyM^m4`*@x>lWp1h8J^v8F7_M&|
zr0-p?n=a@a>iEn!f+0imwoR>c{k)YD&|aY!v9l6N>{<S+nyBAvcPT7I3F86BcMg`8
z$5&a<#Ri&$(jzE>9hYO)K(jO;T+k=-nJ@MB_J02!?u**qPR_`vaNO9Qt_DrKi{0I;
zyNh3dOYE^BP~60k1>N0eO;?3Vd+&pBo3u;${a?3oZVySTpY95JEvdEWri~DCy9ldy
z4<!7=uY_5k#xZ3c&#ea=7r$4EqH{N)Sf+sLA0hA(z6GrOx{qH&X_-lP`!Cf2z-CEA
z;~E2DpyQfc+@R8U^6OUt4vzO@FA1S)6XwlU4<7|wEr9JXG2{(O%b=sBw?`sBG3LG`
z+oMMzpjJrWC#=oz_PJ`g>Frfd9>8$nU&2qel}@{+ut}MI0&mgZVQokY&wa@y!`LFh
zS^wr2^`%(RVcBU_%G`mMDd`xzGhH2w!3p2mWoK?O2<y(fkXzD#d;wY&BjN=G1r4t%
zaX5h`GO?y+BCCY=!5V0zq~gukygxTPt5sF$=nk6GK_{v5p)jy0eRFx<<fw>#qp;X)
zZ#iTn;?5DJaW1ERpjqDtQGY*$RByr_MSR-~CsT=os<`od6sS+c#xL-7>2+1JUfODf
zVU#_bbWM9>N6O*@>r>5+Zo{J}mqTAmY9JO47#bE979T&7nKat_@1(gLZh}As0vKRy
z2Nf5?Wn^UD%h|0L6tGAGoey7Mw#b@lVf&dH0I89MgMMAlqj^g?xrs)*|7GwtvY_?}
z3R8Ib&HLfuDi|2O%}XT!C)QPW6O}7Ez%wb)`^JEaG&U-m;Ye#bm`rA+u!!B7$$Iwi
znXsF&C#eQWWY!4M3W5mRWv}5?OF0kEg#*HJd0FX`EB%ue7Mq~yCuaE$`Gq6e6!LH7
z(fJys@<QzvKsa}P+dD0_YI%*t(9d67UMffXlmi&^KxBArAaM{F!>#rQJP|lL-ku)L
zlAJG8n<kddcm%q}O+f!nT->iI_aB{C;N*w}ywaK4J+a4+86G(Y(gmC!eWw++MLxj>
zB-GQl1y=>C*La`tj+wnU%~SAq^2ivkw$c^SIa0>jv0Dqr(gGj^{U_n@KV(Y9o9DO7
zoks&qPffIf0%%6knI~<@m$$pjmHbzBSRs%#XrHGr9FZd6x}grk1MB^8j}rCc#|KbI
z2zV0bW^8N>Kp?Gkfru<u7Z;%KB20yochg=-(hsTlpm1dVBblSUipJND<$ohOH4atq
zzLg!iEub}{hu_E%;8qpFX&0R(!yUY(&D=I+kIk4Yt4H$bN;{ZsyOt>z+_mVp>OzGB
zl+c&JGlhja^&+}OBMO|{Pl0H`T--@(ZnF%a66HnS+J_^Zo<!dZX*0_X+~(00y59ac
z@Fh5jocgQ5in_yVTK0o_+cy0iuO0hOo9_njy~3;TQ8lfM1nP7j%ny6HEg7U9T0NzM
zS)1NkqRdwuA=rZMZ8zXN0jbUpVSHkA?X-;iGhMFAl#>yS(A{4fAr<eb(^9R-hVT@z
z*kV-OpB6S4nW<qqiXY(B!F%Liy@6v%3ky2zB0^%bXvW~(xhLq&%yM%T3p%BfrTUgr
z*cXcv9WPslS&08p7Rs0|SC^;bkfr0~&c$y}zmcfyI&quwZ3YvzoC$mtIxRC86)YlE
z&UOK#74v~9*_>A7Jy|_6v^W|k%LKtBaQ)`anAC?Sh>|PB|5Rl_Q}Y6(7mWf!P~%{e
zZhgxb@A?ce5zh^-jGC|qCIqrEg&`UePVcllBK5gQ;pkgDC}|pEqLasG9~6&nITV74
za)eRVa|(?=gi+dV>sE#B*9q1Q=et|HAh($4#>TFhqW^yFk*>$i+7;H-=Wq(XBN7{3
zaFvloPc(-F{|g;sT^d0eO)Y2r13D`r!aV%ysA4_ir}rzlgxn};-`=MW7k@qVGPKJh
z&i*KD1VK9n#}7i^sqt=9gvtyJ;Yb1+At$bnc$4(+enuFQ7SaiW(|~mqzBrYxyiFL6
zjZ%whvqg2lEDP$NWZyOvK6!ExfI?3u@F98-ofe#MBwOj*LMx>D53^joiYk;*iVEg)
zGv-(AhYpZ!D-6Pn<L4cU3L}WLvCX&0V>JB9kA4a{*y6z(<#<X1IjLGLA+Q1PG+&EE
z+axNaAB3!bQK=hvfLSUO$dr2^UiTeCV`;7V2Q7Ccz#ZMsqpHBZ>9oB`FOEOR9_rn;
ze1$}~q{~qm+KkrK<iW}BFMHPyXnXU}bynb}+okH*7Rj4(bNIlXWcLzpff1D4n3r;A
zH^7mI0}E>&{rux7CB|1&bhNx@aT>v&sX03Y2U8FgE^ycZ3f!l`vH8Ev#T;pUs}ivW
zQhi6yd+JDyq=)ZD`rhZJTE|<9y-a&zXQmQIVu;m&U^RrU297Maz>5TZV3c!zQd1@T
z8}Hp@<+Nz+slYr#Gv#}T2^yg~L=jTG)Y2N3k;(m+CCxHHqU8xTHqN(do>)UDYh85{
z&Bn00sU2JmYybqKztScETVJr=5CR%%2EgJsaSCxEneRXW0Of|ln5&4lj%kVXK8*45
zj(zaKdVAoP_Jdl7n#N<{a}OG@w~MUN8wqU26asWAk9=DQ3REIsLi))_#AmPyG(E_O
z@>g?gqs9ok`xO-(@DS(&=8Z#{rk3<psD)mzTvhG2+OCRe1$aVX(a6n|jBk?Lx!MVW
zxmQtBtU^#99c!3~fY5klL*40twW5BKMsQ(m3V+Pj@R4^(90)v>gxUDA=-@qtjYa_s
zGXX#`5wevb0N@!VC%hp9XBeynB*ki|&lzW<j~~dm5Vm}37gD|E5m{^(Oa>r;7P$B-
zGuPh+t;IKfQ1viQ03qms6-7@%n_y^7l*{k1^IQGyL*s6j7CxS**hMVgs(W!pQ<TDX
z@5k?&HN32g(|OU5f6I(-4BnoLM&_*vF@&fMo<Z<Ads|Iu_{emOdhU9#hhYScJ_x4F
zV-i%_jtNf9<8%vhPthP7IwH=;=c{z0p(LEW_5Pl8aZPD9P8zLPIyhygCU>yMKum%F
z)Jwv#*DzSMqJV0Z^!99Yu#tCw$GM2w_ZJX|xL`U+iq*iw%Aii;3>zV%&{2OIdta19
z1?xSPlXsf;Em!SI2AV?5w0^v1+X6IdQUvdYL<OH58O1~tc42f{bC(ZA>RQh8uYPPV
z4T`g6nsmwFFMrd}Hil_pc3NBd1phMS6E)-qjnjw*)c2!WqPhBn6j=+caV&-XWRcW8
z$_%M|^u$p(VB-H@tvs2ryZZmI06;DRlmD;}wJsG|je3URs*$&j9$->o-;j$U%aBq<
z*)KgB=~IzlP0S?%(0UDl*s)JR<|Zc_z}5Bs{VW0n#sc!YX{7oXkR&zRylppOJS7|@
z<9x9mBy5STh5sv)&GSVpRP+dY!mKp3aIW67F%31VJ_avUEJjb+ht!+_2~6^U5-X=c
zm7lF`M0&c(^XC_!B5T&_^|do&-+fwkyb2RSZiHOK5xadJJRD%JVJcT{9*_Gs_`=vU
z&uh}`M@%Tf{-3@+jnJQo%=(w>7>49mP|5v*5N*QPl<y)6W!;8B(~iH6nmd^z)v`w~
zK#)9QYKOE~4eFDHuT7f=d`BP(_<<1SQy>Un+U7%nrG@+dU)X+xfXFC(kj0Pu(iczN
z#D>Q;`DmD9iDh(vSXV*>9?CaOSYE#|7|=8Rf+i%oS%Eq)6~2p5r<a7*+5GR#EMaYj
z%uP@82_8@ujtHrDG&wDA{QSw3Z44-{pyCJW`+#r;(k{@VZe5U^Y;d^2qngailc);l
zeu}FgHL$*TPs&Wp0G5|hztO&Vb0i)xXXzLiG*>|p$>!>RnVV#qG#6K75aieAM2SnL
zhrIt-LAjO~mL$tH(ODuaP)?m@^o)$B*o|<+ZZZ;a=fksLF@BE^taCpQ_O5UkHX6PF
zFYp7RpW9gH8$)#9dXG;?SXUQcxCzv}zJLF|Pyh-bAobqt3dIL16~OQrHC-(|1WZ82
z>)?D5S<|2r>Asx=s&?b{3m1So2b5`AKpAh?^zp$#0qFDl0jw2fIQaQNJ(nH`2mL)h
zb{H$b#d`T)LAvBom`nCksl?(0hjZDjFpA7pHSv}J?JAp`_~gu<Bqfm(Zq36e4z2R+
z06lETMkm>P*OSPW1yS+Rv5r2o>aj;UyCmyUQiY-H5eErEj?#77ivbWJ=$Cla3-;H!
z5o&s`M%f&WqmGQ?gbV%)bJ!&2_$akx-i`Hj5pdH488mptt$t?*K)c_jRe{L{G&wG{
zePL#1-dX`!4#@u<EiKdI<LlmBwt(72M464Bf`US+w$rY@=k=8&;G{ly%w_kZQx=r?
zfLvW$TN@CRx<^5wxN2kcFer$Bm`&OJZ|U=|-%X^7;*?W=RbiN{GQZ96J3oKN<K;IH
zHk<JJ=v$(ysr}C2WA7}lmpY9p{Xspx1P~d1*dkF{Y70Plyz?z53G-4v&ns|gd1gB0
zX$Z1-$OPNfl5D>dO;Rjdi93I-#60OrdtG45kP--H3SPJ{QgcXVa<V5-B>`-KM8F9G
zEafao-z-qZnyJkP*HR*)zvL=|@GpL6WTNU@uAz7o!1iri0!S8VsH!F;_Z>IOf+TgT
z3FO|lkzk#{@_%{vt{;$&nVB42z6;~5X!S+<ZmI0FaxH0U{_LA@=QBd|RecVoGp!m6
z><AtVjw;ZO*=-(cEkV4Z<yb+%x>-EO@6te0a3i;IjfD@t=cMj)<xBk)@pw?>a;)xf
zV2`U(Pd3yXX5`48N6r7<JwpbT^%&|Jk(FvxJVJ?&M%6p{0aH5|bN~Pkl{PSxorUH)
zN8petNTgj_?`&sv=T1KmhXDWqqOWh`>hd2@yfw%uJ4j4W1qzu)>WDh9p#RGdgI@e)
zSt4?F<}^VB`&#qWTAdNz`REEImJaxkl&)dqs-i3!kyTyL_l&@Fi1mk+qrN(2OEfm*
zWvTVoSLcy@r313eRi*$?w2UkJohg55sb)36OAI-(>fLnsTA5I`1Mi-w%ql!rzZ>CQ
z{NLWo`S=af8gSh~Z~N)Le}nxJ0a>psnR8FYq@-dnQGtPwvjPA-0jXM0fSnr}a$g_l
z0Bi@pojE;+H0ZcCI+u*SUs%X%-mcs6#vl7__>hmch*;Wz)$U5e1a(9fU!jC=!hYA}
zR8ZJn5&NjjZT9MaTj3|;*#@43pSkRKqfa~_8$ELKy(#NfufA4v)l(pSB1kzm^=;#=
z?fhuseqCYZaAm+0<0w-frw<JaG@(){uIwDmxJCSx(3vKG$~R0D0--*TGhc55NK(oI
zwScKlDD8iqu>JFFV<;UE+4ukc1>_t69)WC5bSUHFM+;Dh+}cu!Oy<yH;;ulYPZI*F
za75v=c@SOt``_Wg9~1<uoQxlSTJL^s#Mhr}!(ZTaT+zCKXwB&PUB4+tGdtFL`n&$i
zR(Onv2Pi3a-ZN6ccHlKJ;&0;DxIIxZA0>z}sZy_d?DkB>wv+fhRm>O2M98qVyK73)
zTtrIM$AN(Mp}+&WTQ{$TZFn^?3eel#QOMWdKIAqwiin9d1ErOPI=HB)&2oDiP}~{F
zewChf?lL&VV{^s}<jdSp&Z;GxQ8Dj7s|eI@=-qo%)8V?wyV~b3BkQ5AjsRId&7Ym~
z!I|w7%jT7+*59+lv9G(0#ufsyOdI28Hh@DOcPyRQ^}dSZ4>?t#OMn3|YrmG4gAw`f
zsA^2J)@uu=%zYtGQ;Y36h}_I;iQwg@BnUxZR-{h^zGh>Y^nNRV){-N%Ss^`*yaO)X
z;R02)pyrFtIs3SP)D4jJ#7h7t2A(Ep`cTo(NPOsL3|s&=*VYscp_L#B*6GXyWVB9a
zQ#+`W0b5CrZsR59YH)0<xtttO>60|vUBqDxH5VANFkyXoM?)d6pL{%yeBW^11_DWw
z(;^KSR(Fj?<gk+n6RUTZjr~W9%zA&!7LxF|!)rg!`5d8<mt$o7r&o}jUAg!uwV<$&
z(SJju=PsKNa|I@(BE@Ja{zK`hQWIxsb<ozfeu}O<1HCrk;ZKWukdz{6{4pk<8U7Bo
z5pDk>nqZeEI&@A6WIie|gx(`EsVOsiLgYioA3{3UxLXRNnnBq>>?eP1o`tomgmQu6
z#;7)79kU;##!I`>#VT3{5jD{YOqowds%UB&k8VnFfzp6vZ}@bX@?mh1MX57{|L(UO
zjr?b*mlk7r@z#fh;v!?@Y^k2eTM%)b>w+nGgb}B>r${i0W~=V|P2yk{zQ-2wK%bMw
z{#uWcyi-nfe~Q7)qO4+*u-+e=U({{XqB&ERYdM}jAi?{H6k*Dh)}4t<K~bT%!il)>
zHPmmxG4S7%EBZ{IR)i6F7WYe_uq1p#$rkx)RiOKSxd}fxrZqn=USu2<R^YeP*VsdN
zx{CgP?c8X~nbKI&@<mLics|0O6k@2$K13+gv97-)VveKSpLtcmgTAbhK+t&rNuZ+W
zTUa%p6n+nKBT*I#jmb3{RS~*t@Tgp#W$1${7In1j>rW|nl`4NZKBcp69EEZ%3`I~V
z{1=@tZxVp6nj?ZV3P(H#C6G?6Qm5HWZWz59%1fk1QX2zli=Q?S#kt#7+Ga3;fV{!X
zRBvT85CF~_r<-i%#Ru7Rv#)rmmdB5h(i8^wC#a1FUqQr#-)FWnrZl`7is(ss?D|0}
zoeupnKA=YDkPvKAd7vx;s&Xu&8=X0Q$cL0jcNGmq$e)29&(*3ix&Mj0ZXJ4M4@gw0
zDHKKMvrX<Mk(c}QRtc$Yg*}9L90uDkQYq4tMpC9IaE-BTd_c7X&V?Rx$>|uq7(G>6
zQICIO0wG=0t>GtC8bSE{ZwoWt2nYum!NFJ5fY#f%#WWj&q0#lCP()eRvmHy!r7>7|
z5CvxoH$N{l;^S>DgrM~oHH7bUs<#uJ%grVYK^xaXLf#R~{Z2XL!NVV~8mgm=F0PEd
zpNi?ERW}zLnA07_s3C$c{#&eW`MX6p8tDKtz(}=(@YL45^k^ibqr-l|Z)0|U@O$FM
zngE2KryQJ%+@8=)-du{(h}_iEc<V6!Ig-`}Tcv`Rvd;XW#q&~>rn`uqNu~J+aepQB
z{Y~j545MCw>2*!~43iJ`(l@E^&NVL^y~ir<wSL9q7uf!mllrJ7M8BZOoQN$#9J<(L
z9VTJ?z$^4NGHzItRzPA<A^9<s%kjUfYv6v0!Gzi<6tuLx{XO9#^9~Aub=vZ}7nD_5
z4`tOm)A8@?nv^-XyJyft0vW`w_em$sxk?9?M8LWN-VMlX6*kDfuZsr2AYC8)8(+eM
z+aE#HN7CkG>$(<S^B+0|arI%3M!4DkiTXPVc|a0rzgnRXrI95z1zb;WK5q{rKUKXK
zCl%cJ+nxq&Y}XgUG(ubpptg5tmP<h~FxX3)15|=Ut=C2&Iimi8lA{}eKcmr)_P>vB
zkjt!A1wY^y@Bib7-}(GOFw7z*x7P>dMv#AO4B}CwUg)sP7}Nc9aEQPDZyiIG`oX}N
z^pj+vg`g(+`QyS{fqIT~IW7V2DA>1rjEcmp{mjCGH{fSdCq?}L3IXmSuWt7ImLaI_
zD=d?z8G$0-Xn7{|z#77p8}JHl^fKG(1}6j96Y0%fi~rP4kQV-hQ>bo%IxXL+>iKEQ
z{WzgOYMO*mBkNA~U#QgF6<4X7Noe07GZPhnQ;`ISLPkCWJaC!E@I<PAAP6At5Qk?J
zzVo4^`tONBiXOE8yE;2R1(r1YhpTIA6Rj#b22@laGJuR*jk(l5T~BC$jLs%VRgFg~
zI*#%};4@@!*%Go5)Kr``DdC&gq!}__UbX@j9qi6{5_5>;XQykT%6Z$YVz*N5=xxzg
zUHIkNg|>;$96#%Zf8?PR<uPd?00@Mn;ri{5zX)gr>aG7IureoN{~*oQ<S6%p87mz{
zIf_2Ic~BDX`2weuLJxu*jO&HEnx1b@l;{=1cpOiM+rGF`Uiz)--vVECX=sP-KnfCn
zihg9oX=HoB+$A7Qz04-}dTXR`gh2i=0!$8Y3!!7$#cBbAxb!_<`s`o_6aldY6Js^s
z10P*DfWg1$SJF*YYC`>vu1=wwBlM5mKN$-2iwv3Q5mbP(m+RqF<)8d_pFVxE!3OP+
z9y}&@49YT+lj+_ZIS<(iqm|7p_Z+L%O#hvTR4pTCzuS!Nb$I*wHrb7;PPG^@HT$0s
zX$&9`_k>>=Zhb5)$xzt~sImDsRq^{bM%%glOv}2~ge5JFcC*W3T7%jx@_>WiTeJ9^
zj>~Q3xx+%hh_%YUyiu0oAy8(Nj_|3sTV6_-(8Y$laHy!3wvLHNzw445{d1n?_BKz)
zX~VDfSUn|(#184s>TNe^!j12@NWnM11^U8d81+8-A!r;B5&qspM#t~>ub*=*-jSyv
zA%h0hw@&XIZ7)UkEl0H;U-aVB`UMsOc=$hFz$52VWahsUAnASn7iB8I|EDKar+6f@
z+^oSk`ETZDGN6a9DeJ7TRtcpV7Im5^cqOwBG*iE;6_t)ySUk;;)ENEqq5aaowe2Ki
zPultP#d?G+{d|4??9(jCp~Smy)|}-mn3~9~7PvcbJ+d7o>s(!k?nx>T|2swvxew)5
z4Hq~JPED5UOM3k3$-?@Fd2!+Ez5}Y~74a12f<~%3)<t=X_tLf>LVaA-IIE>!4E4D2
zt{hE1>AfP^;gvhDz(F53DKw-_fg20$zMC_p@j@>w?Q}Xk7A<=3<!4DW`(4^b_GxU1
zwr%5Z8}QcHH%seZogK|W(|EWZM}AzteAfl76SUK-etmv1+qQDY`l9U)abFB=rQyMB
zBvnkN#8<-Wrq}*TFqo<;9$_-4Y0LA}PeLT5G-rSInSnOg*_@saYHN$rywNDX@Adw^
zov71?4HZ7qHbIXyR1qOvrP;NiX(m)qkkc(DGEzF=jA`;rYho49C&3~&R5Z{F)s+CW
zP;qkfK?@Eo6Bcyd%G%q(Tj8D|quqF%?z>v1K$H>g%|@5bBhJY`w6r>45l@?h0ecPd
zjfca}m~w7iRvDBNoh<dt52nBQcYeCI#tx{n%d4=+$XMUhzn^5jYv!+a^L;cA(Z%B>
zeYP+^SnfCLk~aP_qQGXjj%q~bT%GvP<&a~M$k)GG&fUG;<q|AC{W6{K#^1Kb(~e7C
zly|$qilkD&k=)lmjq(!a!==JtPx1(v=X$7Aa8S6#M9bXVp0Kj*n4?s1S4&|Sy@S-Y
z0a7EvPQv%@{RW~YO5&oIDn3HJ?KWFm&z<NZ_>g07tEUd$0f@kfn9jz@Dd68OaD~3F
z?Lu$Zcu!{p6nm$pM8N$~itRCbI%RU}Q*GU;v#xcu(UGjFYEyQh&#L)8gd819Z2=5e
zkQ$hNHi*<k$TQ2{jF~dLQ3`WkQl-P-<RgqbSOh^h2>U0;8Elx=r_ZTxo}>YIlEOKW
z9zIlE$E~lg#(H}SSpGhYO?qWzB_=LD)*Z2qwI}&`<X~RmOUvgn?spse&YtF<ER3G}
z-HR74<*o8=18_*~{_BNHTrr^w?u}I4RXR*6_~t}1U(@cKikLfid?2W~|3Srp{0J=c
zP{m^qxTl!!DEqHP@y|t3r&#<r4X3x@7O4AyObtdEvED@aK5l4WOmt-7vR-+Jl-~vF
z<wSnL=7_KRR{Q3UtD~r>zdR<%+*&RxW4#GGX6+t@vWq?*e?36vq$l4kI8o5{z4TL6
z_Fy7se9~XR8o#p-s)_4B_^_`xR1X)#XLa=}+I7%;uu$soZv*r-FE!KC-jjpcFE+^Q
zM6=qj{dhSmHY-H8KJli#eT!x*;UjpnYR(DLjErONMUW_&JY0JK>9g9;h2HUZED64e
zHR)E^$fmue=vLoilm1~*M@9RkT8GJ&Yah2=af=@$bad&!?}e_>abRGeXtr^0_L51A
zm80fuNA+@h@Cv<gla|q3en~$$ho}8`jNm$4K)}H1d9iwGy4&tps5Yx=47Jd!`7Bf1
zaNGmMVbj(hx)p{XyqgF)re%Embd8kVRSLCLp_!~x-sH6mi_KHU4G*^ybx8Q>0J@0o
z(A0<B7fb0~tNZmOREe4p@+@T{=Q|U4)>zL)0GDYN+Gn*8MFWKmXBe&7iwws^8T|e0
z;q9&MZD-|U?X>qHDd{gPT0{gG(>xcY0)mb4OAG-k2a2kBlL;_$#HawPaKj%KkiH`-
z)D!mt&;;*xzwh-MAkAt9g2vcbFV_kw7R$r`msbT|*Lh}t)yu+tyJwC|{^1pAC=S`z
zwHI$4@}gC+HzgW<`{;`ffol()&&j{3H_P+$O&(2lzji}17nhbAwjBE#7l#8K)UofX
zQ_2R0V9MRX?fv(}>0gvO2^s1|=yJ90uM>$)!p$eeHAmCqBU_H=e!)+lG;aj7`|c#O
zue0r9pfb<Dsc$wGZ2m1BfgIgx^Cm={pNDZdnh6|?9rA_ATzoIyrlqBYjbtQdC3*b#
zle?W=*(<zf3oqPwI=PusRK$k)BMlLJWz3L5xHv`8VO;FCc0bT8kC<}v*4A0r1RUb?
ze(7G06KY7ht<H8fqF-M+BPj{sN>>Nv9nu~bUbkeL3T2x{&B9`QUPteAei}7nmeHJE
z*m~>}yRl6eS-D&wg@trI+Jczs={0OLNGm{&9?%|%nm(3SZu63JGnoz_or=Qt$!out
zX*uTFkDdjGzqkw*lGz4npmO1|bi$^<{(e-3m_=N<#dQ<?|3a8T5XleN{`CI7a&B^W
zEZho|v6jQyTZ;}S3pUep!0%zX=R+13CK5iT(aMg6OdH-hqNP1LP9<3k6V4BE>;w<Y
zZ8N<H{2|o6m<CB0t<?h25DcBBMy6XMMO}h%N43oDs_D~d{58z1JCEJOasN(+%`6N{
zw%Fb&0Ru2xw83_h*O{p1EX>B%&=wLEZfNZbG*b%R4cvyIN~(E=M)le0{Qh+u`x46S
zO$jen6Hm);olT(!|7y{W5Vg?~#?jV+t&wc!Xm9K7j?wlJdr?5}$o=`A!TGSCSen!E
zEg8?z+liVS_VPZvWWS&g$>*ZJce{W#_29AA^+ZX4^tS9ctMQb-qqS}0DfW>gt=qfr
zNP3S!*Q|7>jR!v(TfSEmV|xT1E$E?_u-%a|$E2Ymo+RSsEeL&)tY;X3|KQx27;9nv
zoinEHo$2spfeUe$x`It!^m1{z^@BRIsC@7)3yrv#xWwTsxy=)i<};D_tS?FD1Ts#H
zV0|L3k(uoB?8`hXTi>P`#EV=DpH6Svj=3i5WMiNdZ&^cps0h!Cz9E|o;B3;%3UB`m
z<rQ!LJYZX6jX%mD08?s<gb>P9=gTfv(7m!YpJ4elcKqlg6>lrHb$L3Q;QFqJZTnKq
zUKh_Z@O|#+?_(xBr+h9dpN{8m;y#!<Qe=5zVJn!)B*`9*9uo@~lbQ{(36zY2S{|CX
zZFw4~ZRPu|`togwd7~c!CkAccl3H-Pm7rVp1dqH(Q}|WyvC4=_A(*i*E)sHNOY3Iv
zSvD*tL8(ebJ;?0qJi!t+dYoxsoKD5Eo^f=oiZ5B@v5t7h4tH|Fr{>Y0!k~4VR#CXK
z?E*P6)}R0E0DkHm0)DDpHh9-|Y8`@dQ1@;hLjP;nL`gA?ko7YUkH3?vo{Pd<qM}Wg
zmY}aBEh}s3N(#`M1_uY#wnXAAesl)OhY>Ve@Jn>jNs&UT)}~uotR2rjiI_iD7Yew<
zkn!}m45*s_r<`T7)=vgGkIJITVemo4HM{P$TkucJ6sjdhGX%i@^|$}&iVO|4th&!2
zV9_&CI{tHq<a5VK+g@>@dt_^RTH5)T+Va2cj;obG46He#Fy%)s6D2r-!v}+AWAz3c
z3D$v*C5r(W?we}|Shx^>l@Wa8w61}{$+r1*GN|z=h!)n=I0M;ztrIAaA^G*|S6*Ho
zr%tgF#0|IOfOVX3V?a3I5G!!L6zdu%{lM?>sn)GPsiKn#jLWt?|LgdM?0b)WgzPo5
zr7VXt#DcL2#l8N#Fq%yTVv+6pecStv01J(k{Od(sS|<MQ>fat{mEtjN`JLsvi|cuL
zu^DhzX*jby!g%U4b))s@&z0`O$VkoBf4h$vo%`R70IlkQgi;`P0d!4(=F%~ccgG1v
zcTtGD&+P?VfAPw`jZYb-cD<#!7q&B+uPptia}0pWdIs4h0Cv?HjjJAkN@uW(ik<+{
zTDIT8Yrm{=jdYRAA73w5mc(2)c4yipF>}-miN(+6e5<=e9-9X55p-5=zgp4FaAG*7
z32ZM;Mg$Up4CMU8ZfnbP$$Jx^(kFY%Cv$eyz*T_P@G}PxeyW`ZdiDVSJ^1@Lz~0vO
z&9Bnpu5X}T2L2F`+5Y@04|wGL>Cw{8lJBO&QtQ@gtTbYTp%yq;dGYJ6e%Wh>&o?>%
z9|jL4r9SA01f7e=1Z~3|f^VwNnE*Yo-D2i6vcn6|?p8Z4cbvdV9roPS>?=2TcZdL0
zg4I60C9l;6=d9u^pYt@er|-V7si!!jkbpc$3@l+x+sK3<qI_9D6c5~e1WgYcq#&QO
zOn{uH-{$<l$bHC>UK<?SP0qRp$bT=lxZBN0xdZXkH*e;BflkDqNdw<*C3*kLNWM4h
z<Un_0BwI`;4IuhJi;4ffNY^Hhi3rf87qnm7Aj**P_nE<o_WJrZbg%8i@sa#zBW;)S
zchVQ5A-H#eV%9I8SQhZEn0LGZWsT3yD{{aJXXfx{Z{&&uJ{9jpH^bGvFM|V17wH{m
z9ZIqHL4S;2?@BzoCfGIxT3V!y^1WG7{(Z&SRk0A1T#?+elEIyrgqRTz5d+!>EtAsU
zaEF%JwrB#SDozlAPpPFOu6x2)!_!|YKjq-#ixgE=Q|sRJQazX)7#v)UMi#C5V-w%c
z$jb8gJyYw|+TJdeaTd|yf2<;halLfX-T{hCVE=}l-^*s_;c)<l7K6#vI1G_g%T!Fq
z!f?@%EXgmQPZjjb|3rZ&k)HPv;wCm8*De{J>ggaY?%v8dCbQ?Mb3L{AOS;C5QQ8KA
z+&u20K{AdtUherGie6hTf4x3p_fWG3@asDrVId)wzqs>TTU$HXo9oHfBWvH|*)`HG
z*5WlmXY%E)XLZlJ=k3quCyq9C0`_~UC@2yQ?xg_zuvWc!Pi1cId#)F!wK##iRM)P1
zdwz?Z$7J6Li_}ETn?+?bC%+@_jXG=%Ly%=u*eED`7~HDZ_B{gfm17-2W!KTj+uH~S
zd3JUN8v7!YyZ*+|^EeS00v#9U7vTSG{c?c@5o-)yvv)u_1{U_kX}>hR^cz1QG&HjV
zgpKwi7-WI$%)H0WOufxGu!0HrH-DW-?ftv9zgRPyR|bnk>nD{WYs<f8*sEs8M8~VX
zr;tTcS7i?^s4vbU4WzwPnfGg4YO2`hXcFi7r7sTiQ_TRcH?HTHSeh(n7#O1W>b|S5
zpG7$NNa!a?Ty>MCrRA!DxqpL2?*OBGSV%>y*S<ecWK)i*f3^GZ;~3~P4aKJd8%r})
z5G^~n&xn3wN8bDu&DAL`C<qy`vAF~a^W?*Izy|;bF%jRJIp}25%(~#a>b=fPPxtLz
zm$L)Z&*?%DkKF|Uo3VmZ2V#sTyw^^%_w(ehr(O2oIBxRv|BAn3(n>~UGeCYA`>YY5
zj4H`Q&EK4@pAueL0RHcr?MhKVG!uK-)l);?vIFc(=A~bPSTr^^mVJHU1e(O>hsjq@
zmIL-y-Z6M@74H27Y|YlzpAFMyZQ#A2t_Fc}zaMxg)w{I{+5I0DaJuBXCkZ5U!0^I|
zN1P-bwBCOMtyp}*qN4A1FJ|G{y>-RQzI&R)l1G0|+D|S4i*b5-+W&Or-{j<^1D}vZ
z&wG+75RjHV_<MH$bgNq<bIp|@3)oZZC@nJgqWnnr(>}~5^E=a63F*G~z~WTxd0gxs
z?_FPZToYffNGmjH%`5WA2@;9Qe{5gT0#SXXWP|P!^&u?{9DQacCcej}jOy=@e#ciJ
zUNh>Mzuo|z?p_jk=``X()p>c`nAU1xyQ$jZr};5Xd><t8T=&={u{xuVzOg=<6ZPC(
z<ZC-x9L>ky{k$3j3>?4;3fJCu`}Yep_&@$LF0Z3AF1+nJ(W2fje1c|nPQr<pe?etp
zSFUyEq3%c5ElYlt#DT-VE~MG?XHZ`+?1B2qIR0`7C}#7?`@A_CRj&K=sl05s%Jk$r
zh?-20&+e4#sM@){%$TQ<?J&JRLw78iNbaw1+}HHP4je{>VzlJuzFcf+SYgHteDxvM
z_j7vqr~^?ucJ*!4VhfW<#Bf{45dkD~8XrptvOpy0R_&}vrrO+`<kxm@WfDVDExAas
zx49`U3*!e2+%TN+U!j)P)4p=77s($GT82^)Ej(4(erN2;#||DsC20=EkEBp@4Pn$$
zd1U#KsHT6qm-kraamnXm;S(`%e_0U3poO%&#a`@Zsa0hUR+K{#`55<)r)gzl<f!2w
zAxK5;{?W}vegpR}ay;ts1d=SXTZ8q=|4((_85L#PZCSPf13^V4Ln9(80xA+DD=JAv
zv;j$lm{382<cyL;lF}*?3ydfNMsiT1s6@%Rh(*p&<k>I%eY58Nym!{RbEkgvT4Gzg
z;d#!p_dffa<Gju@NkD0}QrMyG5d#B`qjOKre>rek#rCI?knr!dz%#USz~QzM=i}0^
zrt&{)In`NvB~7CLKua|4O|9MGa#~eIoYVI0SGRmk{2kkOCu2mtb`rc)J``GZiOIUd
zq+LO8DkhccH2m@o>#|1l3BE8TsqV(LhW>h6F}d-aK!q#-^Mfn+ExRahaGfox<s>Tu
zT(MQ=cl?ou_#+qbfLux{NTaui=as^Wr_uC)zV?FuI?pS=qwxpa!`IXw-q%U0ynP58
zw}^{geF*;%!5=dih-bqD@b*=tDtc9HB%WsMyw<Z-vFB}Zhe?2)w4z7XN!R_*PNgLV
zs965aRwmMh3~|yVH@<0dPixX<&zw_uSTQF(*Lm`)`mT#j#+AgHZpAkhhsLd<ZNh!g
zN<!IVN3v}4MydH`W@b3=4ULR=R*_2nR9;<SpjJ+*n3xI(?W|Pc%UoWX-?V8{aR{Hs
zOv}t)+R<nUCA??PLW!n3r~3&}QH3o>9T3`$&fDz$gXVt)u$Te&;T-T{4Z7s8m4}PZ
zEFwHCPSp|9kQ_%JI8F5U1ObGMMvgr@5pX7IPfp*FO2oa{SpfuTY`|wt9l#b6l9HIQ
z!k-~wWXBtN+H;+=90#Xoj0WzjRdDaBxe_5tBfKrXOccK%G`Yjj%|kJ3jLw}qXXyGY
zHugY$rh{g++H(~)xrtxmEOPH{ivl_Ldv<Kw#w~0A4kx7gD}+~5idz!&mH7BQ{V%kh
zpFE9u%+=^~=E!RyzKWA3NZiT};#Qu&c(;n@(tyvVWw~;xn8B#<aE`Y9qN3!_*R`tE
zE*Ay50U{~?#K^~?^tW#T`octw<~jn}^gi`;r_}Y|=8s(-YFo-kN)qkQ`f#}zCxRmy
z&EwaQ(l~1Ic3wZg+nG`S!AL`Ia~6(6w%FyJk$~f7dEOgP*ev6aw6EEf>cd7%|7y4z
z%jZsi=<Dm-wrEk>@Z(2gW8?k%_n$oz*tBDRd_n@t373L<4~g(&(_1D#S&<K%gD!9`
zH*fZ%V;9`)@@Ods9}0{a=99Eam0<1-uOnn<hE;f-y6!MMITL<JuvuGAk7M0P&it?+
zpZg>_afir_)2d$noS2x%pY7CEaG!imdGYF1l#JcY)~s1gxv_%mTYqV5N6Q<8$HZ(Y
zOM!EzFkpnGa`snvl~p5<e<>yRPi_UX=_vO%i)e5dF0IMVExF&a@cv_A9XV+j*sUDX
zEEW!X%>AZF9j^BKHtLEK#|gvV>C~yKYuEZvHLRyL?GEhiVLnwfZxFGHX;PB&FsUUR
z+csPO=A$)SQtl5aiVH8pa#C@GCg>`D#;7K@`Dx_T4{ysiUg&7^<>{z7A|om&NF1av
zGcYm99CXBbd=RG+$i5|IeoCXXtPEvA-QnV<DdsoAt+Q@-djS}tiN#mgpLU2EKBXw4
z%aXv&L@HJri{RW)>N0!TX#M3745*O~#5f%m?x&f+{NNj-XO$z#AFrsn##!}z{yh19
zOXC>eb7#orZ$Q_|9?YFA3iS5LzTc_9%s2;`*$=e$y{0gEQLFgx`2}g#CCfU0jvsQm
zefxHd+jP2Bi&#$mS$%zsoT|dsDXjZZQW7I!c4mF7to`76mc4RWR)1CZilD1|q(DHv
z@u7{IHVKd{_AFc)ad07J@GtxP;i>TFUJWbnta-qE(F>dNM)GhAe!u2sdqoP5bmg%M
zoq4A>p<b;PSM%!SOYOfN86V{R!}eaIe<XpT)2uJoua_;4a?({TCpbr%(_sA=-$FaX
zm;y>!Hud_y<_~)u9e(&mRlL^oWB$xi=g*&4mVq_Hww@Pr)o7KvMWufW1>~z#XQUJ@
z&WO#@J45nTua~MzG|0U1y9iy!=v8s)DE;u&7;MQDvaOPLNirOAu6@^lT}DuZjzZ;Q
z^2TXaTC}>-L`9dHYC|lORwk~;kGE?o%vS$nR@*jZQdlU2{jpiBY3p*|PFL;xQYI0Z
znJ`9Ah0^=nBwIcrK60pSsL(R=3a-n%KJd!M1mpGSau>gP3KxlsGZ<z}mTL&&kT2i@
z*I>ytX5(3$Xj=5?a2*?H0gvS5;$qu>;Q->7<Fu`uxQvdzKBuKOqr6E+ftkWn6v<!%
z4I-A}rQB12d*f+Xn3P?AH4rD;wrz&iWeMHAy?*-97c%C)KYaG!rynB+C);#YRcOKG
zd-}bnRoq(ZT4u{N{1VE+Z^ky|Ze{v9^jdbcQrq8;NJeMRI!-mNzhz@mA9vnN$&chV
zY-mSr9ThH`@a@H1Olj*+vjdcCh<%++T9NY|%h@xnPAqbxO4in603WcMEmSD8e33Vq
z2y*9DKYiK_h?a}9zf<kUhu0MMYak8$YGIEbN6WiNRu4^UhJyRsi#&9c6%i51X{fGV
zDD^uPkiw+zwvP6P`e9OPP}?n1EX%+gX>nnqjvOv^&`hGbm+rP+wq~>P`xx|ZL<vQw
z(>E;*^&BZ#;eiPL`CsAURG}z@K5WSS&D@8ss9xe7d#6YA+@tqIT6z!RDXB!;wz<s^
zw6i-5gTrTU%VFFT!Qn#`=Jv>?#M=e+2{U6dRr)itut$&JLJ`>3J2y9HWm6rmMa)UO
zYPz#=d+x<EQPPzS4)52*%HvYip2@Bz8S%!liRg3pPY5Sx-L~5qST__jV3PI15?w}%
z>%5k_{tiK0qd516qe&*{ykEj8kbiI@W4EcA8rixUBj(H&n{xTZ`4yxFX0SDz4pX8R
z=EX@{UHm7kJ}*m~D3cw@c4+-@Sp}n>cc+L}fL3T>0!2lIG{EY+ckghIr4&WQ4<34Y
zKSMd=BK=IGFIWlGr;a3`u167p8UdO2(3R_Z`lxz`B_&Tb-}5ggso9>`UGaPsZGRyL
zDNQ|$f%fD^SzS~tXBG9Cj#+Kg^=Jkot5W}}I@XQjd`qMAf*QO}!CWzJ>coj|G-^?p
zAN)NqwET@>#BWj#&oV13>x-G9+UFklE#+ss{#INX(>ylH)MVlppa1Gi^bU6pzPf$9
zvy;Cy;bfx&wu_+ctK9p5Fj2R38`Dc~Is{ah84zDxQSJgVB5NH38i1zh!g67`a|vPC
zCg=-03SHy`sUq=n(E3Y<Np%8f@;KE0qfMyui$v0q#Us-T6Jp-wWAA#ohMR+N2p0tQ
z48S}z)TWr2lyo(9a&nTgIB01<G<WC`jovCdoc8?Ht5-wEex>d)L@yJeT_Xv)4~Nl+
z@_a%<2<L%|N^qrqqSR-E$0<+j+xKH9DM>AG-Phy;Bqcw=?$hg=v<wZoTRw8t_O^pn
z{46V58vIm#>}t#rn``KiNtLwJWmmVZetFCoH9k2#MnhMIH-8f#(e!==uA@aBHzl>d
zvK<=<!WlI53xk1MryX)mtY%<#ZNKvp*us0#P)`pWmaB2y_3M5d6%Z)#&)kTA_GH#*
zOA-XY=6we_V|%wouksYN%M5FWAzAUKEopN9GjY-bLN$JH>e6AQnO%5BsXoAR&7zkM
ze@)e}T}QHz1rDT3-m4^~`q3Ckt_c8s?M=H+uC^7a<RH-`@yA$Mwd1UUoUxw(3}fek
z6Fn{VmhCxoSV;vqRLMb5X*H?kY0VK*k_x`h`44;_jsIQQs?8wKN-O}OB>B^aIs)RE
zc6nW3BuzTuYCQXDl)`{INjbam*Pr8#ua-LPu#S{=AD3n&qJFsID8lI1DIi?Z(79)K
z%!vP0MhPVeG<HGGd$<hGGF%2pM$O+>L6!K2d-0`TOV2%vs{`^SSp*T^^K;ie7!%CY
zf{^it8D|6Tg!qIW!}s9x=idL`A3XD@K7kR_V&sLdk(NtwZ{F-}j*>95u(vPsWg5tz
z{(M6mU8f`JZP05JjO*2l7jm;*He8af&ON8pI+7d@m>*WDob9(ki_v`|BL2i3kZ5-@
z_A8|(XUsJ}5iu@kLN94^k6s?xlo)w~Bi0>VX#ABuQO1QPpj%e{clpv=`gaA6cTE@v
zyjD%ca^JmX0O)0Mpl&2s_O`&v|Kl7h8na5?v`pUG7(wE~>C%@4jygKEzrsJ|pTxA$
zRwJGx+7`pHqv<IryV16pM2cnT?;!Eap^vN0z%`quu}6=pCnp1Ic`UMGik_XAp(q+h
z|7}wYmGP#T+5i3(%oWD&>Dfb(n|Bw9k+a_4YI?;S)74edQC0Q3w@e#CWWdVB(84W#
zM{dTpWM+S`-O@P6F!I7W8Gs|+<m6<_>+vBBA$*F&<3Vx^CHR{5k$+60R9Gk3{ctNe
zcd7HokNX_;V#EK|0vzXuGkXiUFtnm2*TeFke`EP@>#DZHw%5rgPUx-tq&cE`{mSnS
zC6*gL|J}>vKe0OJR7$jnBm1KDnE%Q}d*<+ivCQ@w@7cdUtH+2--<221Yt+v)*|~Xw
zMOep|CufbTH+?(s5oPDKE(Qu_gh35`zsb4r2|fj2W{Ze2Z=2S4LM~pfEd%GJ`Ef0E
z)3DC(KYwCAD{Q%ohs4Ff<DM)0Dfb&NQClY_F*!LTjUZZPH$_hn-}W_8t(LQ*4)bw^
z%N3W8-K!>MCjRBM1dWhVpOlaw3%r7{iWq13oOfsS1l9(O>gkIun2{6_x^<{2Rm>dc
z^X<xKh1<7pXJF>OM|>&CIpPHat-87z%b_B|i;e8a?;2dJ>_z_cignc-4$3gGy6mwc
zGvpGufCnf0#37c8EzyfpnR#TkO|7|H9Lyv!>$?hwPY(mqtvy9CG;1n(*^DoIxFyFd
zX&*0HH+Qba<391bJcr*7gtcEcG7)IZbSU>?Npha+GX*%e1(SIYlCQe$C7QPTy5QO_
z;OLd9(z5AkHqz3{vFQy4<@s`EW2^Dmvj^<@Kf``sDEo_&d$Hl;_L&xkwo&S=i65w^
zqig;9tnI=&Nrve+F&Gx@wuLlPPDSt@yws&3=9c=RYjSp?H@|cP>uz6ZcTkD5E(B@u
zBhno1bgIh9Kz8e{?++p4gA|>gX|~b4eEu>(i)&+6)|219z0x*4@AljbF7EvO<Ozlv
zkAH>!J`4_yZt3|)z#4b(lIu-s2ahbCn~%nX)Y0~DgaG#AF-sXm(WCyo2{^c=x%onw
z!_pzSH=}|P5@yrk;xECS#d7G;1zu6o)>Y%(!g(sHAHIAEL$pe<DU5g6AoiG5=>Cjr
z;)f6XiXO-JOmRt?-wXY^6|*3*1O?AMf3e|>gK`2?s$v1ewHz!Ds=z^(xmOYr5<GH_
z2R=7KEIpn$;>un%@#cIXmy`wL4SKj~%%&;HKzM!S<_B%!rrnojO(A7s$hZ$7EEoO5
zsD|rC$``XemY1m4Zr)TM;BSbN(AA|heY`q>F)YWNdF3<OC(0F>wmTM%Z%2B`Uz5xD
z(omx&jPhI6Cyg9R)uX1D=EMHd(HU;dmKC!Ebx_<=1j1#7ck_O%Z_Z97WQWhs!jOLa
zg+6AqMmw~o!!u+x@<ha-qZp+Vb3cB3qEZEUyP#Y0c`S^9Hft&xu~{ep{1B>f@BM5|
z>{7bGg7%+l=EQQFIaW4ii^0~gc6xt8^0O;%<Kx#;po3y&U)IHMcY$DC7siTB@Rsux
z7pNh~-lSue@Y#K!cJA{{ZJ1%o-)u+iC@k_V;)<Dt_)T%2yHS1Uyh{b3qsQXF@@@2&
z2Wlel5|#_cIZNqV>NkHRBrnC~<hTQOHZ&ZWX_d7kG=O|;w~ru6@n4wB!)+XpP<eCy
z_4IHH>prLYBdxuVSebeQ`LtC_)~;P^(peGb#a{|xxWFc#fr;~}qbf2H`^1tRJA>*X
zBO{fsFD=b@yubJ@50^btmw8FrshZ0td15t-+~&7#Sfg~&<HUkcl6q1=T5R`9z|>p2
z!gh45Y;~Ux(bE0?<7W80>sZH2U`XtC&|Jrb=5(95Eg|d&cbfP1_5wQ>M@!XzaC1>9
z<1W_;*547M&{k2gxwzT!01`hp_2`$5+w0U~eRi~L+*HiS{(ys5+4a-s$?~7JM7m|T
zd5^5@d_OmWojkN^$S6SAh8HfN+ah@fi<*q>^x1l4w_tr!4?gfxWHJ1CWNsId|J0&@
zM;o3!%l_{-x7rrG2g*}2d!Vl9@Kz_Md}W@bckkHcGp^2A)t_nJp7Oh@>RBzh*?z(K
z+_@ZU@!_nYdzvv9ZaS66v}pYt>~z=VcF+FJ2wDzBf$I!<Tt39eVm}pWylmRsu|{U0
z+>Q;?Ba|oOQ=K`~?JjpxrjD$fxz2ZY0shU0rmaySlUwn0G{HvD4HQ%{Zvgc8et^M~
zCucOv*$-WzK@rHeS5qrN3gcKmLN$vNHaFk2ob%^B7R6(k%RWKhy!>qY`>FTS(^sPk
zhApgZ^CL`Q;N~r1Vqq+i=00RUn1%`U9&@if-p20<(SLPA(Y{bYm%FCE{sNh-aJwtM
zK-KZ1Y1t#mnU2<l(~w>9nLI9kZ9_2XQ%)mRpl<~}{Dr=cT$dJR2|VAdt?Mw`{%!R{
zuUI?)@!Plh?=K!@Z_f4b80gN4kaw9@W|7ara*v9V<wd*`Pzm-X86o`W>N-Fgtga=a
z_&fUWjdP~F8b8NtanO*z+?)ar5kFK#h*nlD1^0i|{iRb|6@d&5=QF3QU8<mA05e2>
zs`v4Qy8_-l@5?dAw{wvd&E3CX#`cMT9XtxIj^kY=CVmcWZc_c?J>?V+JGY#v)Q>C3
zAatMqs=2O`B*VJ`B8gYWx*s@madKk*F>)U1I9v*Lvd10w`@tQGc~|<^(=2mlo#oQg
zAj>4Cw(5WEx)Vm8v#_!GnYn=E0)y5-#CFS^sh)mqmPB%PMp~L95|X?wgJZ#pPr=o}
zbZjv3S&{yYCGQ3@yRM_(=7;z&RbI8&PdC|}{`JlxRI@Yde+cWmTYozJ^W>@T4RL#m
zGkso5U=gtyFO<1}BTk!N?HD}}gG3Q#&ExhE+6ifXjBES!mfWQ&kL*jkTubZT5kML+
z&OpOIqj91<ce6sW-oy`)VH;L-+Cy_zR_%;Lu*$PZ1O5F;>?2qq^OmIgoXtM@)Ui2U
zp2}R0<ySgd1IMcR`ZxeU)0|TekaZn~9JVlOcA-<jmXiO7u3r4|6y1+uOV_Psg?D-L
z5K4;Om(BLcdK9mL6HNwh%C#bA_y=QCEO%XK>yOAZN>)&*^Vmr&DN@Vnx^hp^J$nd+
zvawC*bDt<>iP5N#aRt`Xwi@xpUglR$wXwARP~*~<^AEVEZ7p$TJ?0M=DQ+=D<9`Sh
z_)lQG{|k-+!twmYix-SslJDNUd4oVYM1R1qjD9O@k`a;5-@g6C#Kd%KWTO-^kWIrB
zw3ooV8_T+y8rT~|`#r7vkz#kDRhSU^gDc%?We<Fv5)@W~&IEJCCIU&~NGoWExDMgN
zw(#O>#F(D+-ld)93yW>bi|IDn{$r*wP8RK76&bo8yw=drXhVp%)?tQ>AMJ$WqAA8S
z&)c6xalxwN+O1ndC^S-pkT9K$fg@gk35xCuj>?xWul#1E%+Rf|opY{JbbnT%W1cxO
zryQE$>VV37<a$Lc)TdkZ@8gDy;COIZUYvnM#lXb-*}U%~8<}3#w%D><hY(iQKz5sA
z0j31p>MROEBOyUxp~f6H1KIfy9@$~!X8CWaG?NL?YGOj&?nM=2`VWwBwe2$nW25l=
z(gXBk2{24StD!)U?4@`pAjf#)_bcNqu_znsw3CE8qw#6_7_u5fP(j*HRwxTuN>^1q
zy#_obA_OzgtR6Rf>J4N+`0V4y+kmYYWWpkV9sR4U4C>a+J#iyh6J?k<4(W2o{tLvR
z5E0P`bd2&w0dCn#1>fOa=+8%k5Gl)6m{^vmd`k*zh9S+cqbLwS{aEf2%pcS^UwHyM
zqF0Xz%r(^X>e^ZYL=hvm_yF~saC##f{=4FAE~q6W;LTx^X5<fI7e4ho9?ej1hWh>k
z659Fmi5Jma3%gLCO(@I0-)6r>g^9pmt>j+&f@p^`=;tlAPX@t<3i&Ar;+nGyG+v+b
zTe^2Gj8((=chpr^9~b!@Rje>w-^qW<W3tlEq$|BQhJfmj!jJg}mvcz&6BZ`4Xs4cZ
z1RUr`N1P{BzyBueLO1n<WF&0+(c;=yImNtzyKDhw4)jJ6HOFiXJEUAN9wk@|9t(Mh
zRqx&nRy@p~*vQ7jkP_TWz()R$e!CXo%24(vXVG&U7b0{A1@eT2mezZ)ub-OzDdupJ
zxHF}h+CuTzrsVPuDHE|Cvp<)G`rqT7g5fY7;{k0!hGY&4jdf;vULUF`z&AO~>H~Ps
zA}g{PS4Z3VSFgK*1t};lK7q5%#EP1C0x1Buk!(euAuN?;nu=oj{IE-_$8t82Ga3E5
z8hfi538XaP<5YA4*EL>Lc5_=qqV?k^n_-B2Nk+y+rjYvPi-NeG*Pcl5TAs>vXDu&e
zmi4pB!nqZ|CgvR}ArZDT`Pw1><etX=L#OV)dF@&eJjjuo*z}?8k6pT~{4?~oNmjJ*
z^cLz~zmdEQy8#?td2G8@5Jkp^E7==N!ZzJO-_i|exm*Smwwt?Z0&gA=wiBGo(GN>;
zIl*HpxpN4=7a%X!%wrYp;?lxe{~;WhGZk^l;8g&-%u+a`_VDI*21mheVCXgo>HOoT
zk59ymx4=}*&3erKlGeQkDxE<K3k#!8Wl`y4UK_GyU7_Nua>r_DEN2-QR&{bzP#<97
zrztSVrdV1o-}g^eN)C%JhjuwUIO#;ZuJ-AH4pPfQ!I&n|-&^eJfq?US!xOi9@yqZj
zxJtJ|+8t-$%i@!<JdqF_H35f+!HM^m{;dTdTWCr^YJhmh?BL@^lM)kyq_DDXqntP)
zBuIBwbuh)Wd^p~2hrO$KWe$K`XG_OJ#3Y{($Hb8M?pu=)xvk5Ta+qP<OAD2g910b-
z#x~XVuF!DWh74(?w$WSbEYnmcr%pvm%HMPn&ya|#J()<If;za#%b(=dQQ(g?p%Sg7
ztE+2lyxbioJA(ZHiDCr!8j=kFm9~z~JA+ioR`h0@uX-7v%V(gk9}y{Qh4$apdc2S%
z_q6M#wmWtQA!6%jM+fN(+{P<SvycsW`{KnF><W`|diF-;D=fOwNc4E=4n9Wi8XuZ}
z2L1H<=k{&aMqdrsU|t3wBXn5Xj)F1PL~x=E1OhNm^maa;y8Cc5!l5e|qWHDXzY+<X
z2d2sqIXm==Ivpd|{aSIc0Z=Vj0W2nG;|9l?w>4<k4y~Ztc&Xc1esNM<cVtJ*HEr#h
z=OGH5(;SDcd<Tgd>*QPB74y?oetz1m1`xuJ*I8Oo(F3OeWO%|BBja93z5%qTTh}{!
zXhi_<wAjDbOi8HcsPRGah5D-JvIZ0{(3F=ij*msI**&QE-UF^8Og3XKk;b#0^({z;
z#*ytZgS3PE@gbLyXd(?(@k+U;HOH-~#_!RSCs|Xqk(ehm`;EoDqPcneks`f)F~I@#
z;^T11%_ApC_hBQSI(?eypbYnR&09JD5~0mXLK(=;eVNo>h@lIZ`b}JGUtR7}vTmUF
z>)dOE_=r!7zIuV(6<Fx24Kt{mY~kVIc&kHF-LaslI1v16D6%_+g%jf9sQptiGL9!K
z8vkV)ApWtH*_!KVq5pi5(X)ZNf3zr1)qiPHYX1dTFsJfW3J;6;_OFTJt5Mbmo#Vyk
z74%0^-3Zn8f7B0Xe1gU%CMI-OY?PH<<*6Xxze>io7f2QeWcSJY0m?oKA58Ll{}DH{
zjn4gHyHnn;BkNk}&#{YX93g(Um{#s7wob!8w4E)N?m)FsE!P#x-13KQb8NEH2-8*5
zUIHCu%o%EHYeT@S7QuiYY=F6{ml0s_o7l>TV=MJyMeI>((_h+lk{$LOlKbI0+P@Ms
zEeJsB4m6tIYrHhBSR~cCHg?m-jh%YsR2v{8z=DHUXsklyVfqaQM)pzK^AMm6$sCTm
zg9FLAWGyXTHy0#BIIBi;+>DJ5DwyPXV;gi07?eJKY#MMs*mbUN4pk%Z6PN`T9nm;~
z5azIgg({xgT6+fTwqDQ7J9)j-KeI!x{Am69&bZSKu3OP73<8IH_v7XBAZN%TqUV_6
z#IH{t%QMSE22l(+AO{~kGFwBd=Ub-tAPVBd9Y?<120@dK%hJ)+Wvg_eCUf3mV-0~Y
zv)Hej8@RGEhTj?^e{uednm=*ebVl-L`96FQiT2{+my3QO7+`>vP#}UCTgrV)`vRo#
zHPp{oHhernuIm`3DkEzu3J=-7F8InOs;k|>%NR4^Ia|b`h~T?dSU3|$Bd^DTKLPya
z2R}jG;oEA3@pIC0gFBcvP+*N4`z{c2Dn{-l^rb;Q<2?cbmuJVJp}mU|H?`Q)LVaN6
ze}MOlgmuRY96JhA)#pJ+z?`&^K!I9U79k<*-P7N1<L}2Qx^24o^Nq_Gk>U6X7qT%#
z&UG*Ptr_Up?;d;*CgqAI_f$rQ7CT*9@5`4j$L@gM5xLAT5d&V{3oz4#i;EBfsj8Y<
z%O_KZdggK(Tq19QJIsV{d)KMa?frDM7PjO_!)bDCQM2k&2T&jN<@OcfAa%Dy|GC6X
zW(yN9dNwl=FoV6^nYrnf&<9^z$Em1V`@yD}8kj%X#B#(Aw^>a<+4PTyijMv}CWd!p
z$FnPG4Y?lr^~_#JjySw?r^Vq68EH=ML{iYT!(RwF@lItR2eNbxJSTXUGZo4qfm~9e
zfqoBoritV^#t`Pr^(O$=`0V87JA|w>(xsT9;e_rNaXNn6c#X$?Yt~WZ4H}lb2>cDs
zyhY%o_Ye}#n+ufp7-vrZ4JL6m!?Y|**j=?;Vczic=~4_{bAy`_-azBAsc>Xw;Q&dw
z)ui*6?XG^8Gp-`89Hylai#Xy|5&*F-13v_%JGx_(ub&Crb!oCj!)6zAU;938*ekYl
zjN>qYVfimIIR(cM;jEBoxv1T3^}R?;5*;$d%#E`gO}c+*J2^Rx1$M%eg0?q_Z{FO1
zrsA<!r--#M3_*F*#*-l&;?t#4ZPJdTO4T2$Y-<EU<RT~(w94y?7u0;6voOA#1T~~7
z?x>$BXIa}fwPp|lXgK*rgAF!$S|0TLk$k7TxHuKUP7RTaFsp}#q7I`Bxk)}5+v_vK
zM%~@p{qysmJ42C8v24Sjl~?gBn~W0#HJ&6H=cb??;T76HfS@R2>Gb;K9sM@+_36_(
zJ5HtHjA{HrF>m;IwWDAI{JMH6=ChCvja`OnxRO@65&l|%$?kZ&*#K!Jzfqp##L9|_
zv#7|qAiWzJSjfF+J<nAFI+Q!oiv&&v-dk;Z@4K~I&W6<=KbGm}q>y)_XO0V8FJq3X
zXzI0^pnSZ_c2ns>F^=Qdi(ns3nGTjalY4tvmSK`sFn1j<5z^v&5>MP~@N(nILbWwD
z%34z_;WJ4DRFJ*fP2U{d{DX5hm<(cAHSEZSU<kklwhMGwKc=6VH^UwYTNFP&a^2j#
zFCEJ=_fnQ!=0RRf4GpuK78d4N9S=U!drs$4O{Agxcy*3OKdJqwuR27ywLYQ4&gR(s
z%XIiA`JgaJVOee$<|Uk8;0G1SESj4%<!<WvT-LAF{gPO|67VZnZMzw1j&Z%US7VKH
zE-my&!#ma_T3eX|rkA_$GZ)S%rZ|OS0qtJ>)=4qjrg*`gT15N(ynKhQjBYOuW<NNN
zJ~1YjyS{5_{jB0J&Ee(SVhO(N?bb0?aqs;3b1H$~6=CZh;1}rpMyr*hx4(U~ryG9q
zL{ni7=>rasQmo6E)1k6voTXsnAsGO<zjpMXRr^=u$cqsm7&A|Zh$sJCE?%a;#%VzP
z#=y6K?-93Y^EPLOJXNBv0m(DwO@OJAU#;tu!6x5@x%y7c&piHN-oy0CUSzqEOla{~
zUTxFciixJQ%;AVH=6&NJY~D|~hDG-7<&d&iSeV_k`%IK$x%>>-dJuw3em3jwQ-&F~
zdfGJ&$4{5RF@L2b^g#^zWh$6oXoVv8ytbs#gfi+0s>~IvpFaL=vj@r$>`GO%$z;hZ
z-z)Cky^Cyl!br4&+exeCMU7)JEKPiFlSf@++~#vORyqOT@kjXej_Z0%RsGgf<S9aV
z+ng8Qf}P_+oPuA1AFq*-o2Y{Jt)cF-2?XC~VhSQE8KPR|A0Z)WXhe}+Vn9hh0K7qE
z;oeX0Yqp!o`=L85Oj2g7^Kz3F0&%=cC{3`Z7gWY6Ge8noz?n6A(4sj_+*IAzW3h&C
z6=j}@mN^0hPXw}H!pK|p^x&s>n(Fo6an@`*f@iM`2@!5GxSvq@>poE`1*;7EmmQ<g
zvZ*Y5F?@fFVIU(yRK`^ejb>B|@87qNQ*o)xX`)v%S|;)1$DQ0zzgUMiN*oasv_oj|
z_uKZ-F}@tuH<;x5;WP0c8<j>{>oDZc(b-_x;XT5_O=)8R*)GcqWFMF=#7;;XI5NUI
z&N$-^^^WTAZFcp_i*ictfx|S2knla1p`^lRI4aG;$jAr>VVcz7j%3po2lLjfy)l2s
zY|f$cxXu?xqSGeNQu~&F9UX%G=W^+VxtpfaqoueQ)#ym|F>;~#YIDQdSTCsMh|(2S
zO-b$C128TqD=RlWgtJ?O?An&>KJ_zR;%+g|k!j1N(%crDe(^Pl!WRv5=FACgcFDd=
zgdsm%nKQ?~J1+la{_32Lt<(+IOilgN-KUg0QZ{&$s4ir$ppUd0M(OKp@BOT#2pvt`
z)pPgm6YZEzpSVt*j>l4YrNXTb-gh2*0*eJ)4!YI7!ofEUC`}oyj@N%^6&HMZZ<!|{
z#>3l>?AFRz;2D!V(B^%ByjsTGynfV4wUS>($bP+-l+@U44}=OGZKL_cxjgz*)rzW2
zGI|ye)_zalRLS_^)6VcpEwi}b*rrcw7>MO$>z~9@QSqDb46LM^{z*2g5_SZ9{s$x7
z{{jT3@!5SrG<b|YQE7TwTJ8{b-XDa&5mh{bL`I$d@3WTV{6>_y0s=V}p|&pLQjgT~
z^YrxDv0_TrB{|07#;L3SsB4zhg{v@kRn~Q>TWtBV>!<hcN3phkegA&XGD&Y@9GY9l
z5aDn961~Sw8T<}Dn!1bz0yY~P^9deB76SH5VvE_49UZAhA&lg}UT}~-=TAVN?(VB`
zDaIpTKY#uVb%-LXs|}R6vZ5z<80D@}359p|6S5DTL$7*XRfUG8wz<n5Z;ID&o5^fz
z`+TDlP=?cveCEtF;n0W1;n<Xt=>H9cNTL_sk18(rE~iFcilI=J^ES23wv5zrE4u%K
z&uJpgr#zV<6HUXI^b$%ax>5I4T}2MF!<_$>K8eH_O3W05Jm_JDvJTo1*^yd!_imo>
zy8P57B!mBXHnzHO^ZEGrNLkl0NgS@GKpi!Q3zdoe{n$elUev7#i-;^Xl)LBP5PK+~
za{B23D&O)L-`j))l%pJWnT~?Y5gHl_;g09X?JEWMwrI*vO)~JgTG2=2tb9TF1EOSy
z>93cULQGuXF@w#uYknlx15#Q_7?SQekdgB84u1I}fpVv&bQ={Ln+de{hDGuXsIpaS
z)-0Ii@+gZ3pItqObtU@M0TGGh%)%J_CO)3t?lsdH+0dXz)$*C3D7ejiDpwHRdxU4~
zi!RwIeMs08m10;P$fvAm<DM4p0#@6eIN?NJfPKo{=KW4V!EXJ|?#j~sHbs$}YE?m6
z8X2YGiXKO4DHM;TSu~|C4&s`@vBfR2PaoA|dn$1Q)gvCcJ#aV!lIyOofZ7TG9iU(L
zm^tLuucsf7#{uXzcUeNT!mE{hGz_he1N7tmcB0#p0~}e~x~$TzCZH%GFxEL=Tx2yP
z7fZ1=tzO4Scjg$_L49_MEs~sJ+kmM>0r&5N_fNn|wv5G1z~wE*8t-@&U@16D$z8Z@
zO6Oi#YAqMo7-+CmEtD_MYT}XkKST*P)~ruZ?qZX%Uwb5ba$>e27(jpEW)J0ZSpAqz
zI3mjo5)uFI-MtYRn^%KKga)O;oq0ivyi~-MEF~c^gjQ$sZOcc$|0Vz<=$$?g+Thu<
zXDjATda>n~ZjJ>i!I5HwP8`$vpG?a)RLXH<&*YkFYJ@Pih_8Y53>eqEnO-Qt*9F_^
z20pD`pJ$5@j!%dP2XQZcV_9;>D?(>MfBLIYqYEFe^vz9~X{f9JE5Feb`eBWVdJ|V^
zX{iVAX|>rNi&8D2ATFsT<E5V-JeGcU7c$!xMXkpP2dFkmVA|4cT(Tr>!4t+hRd90e
zNCDFXsS?EIx9vUu`iv10%a3Rkk5qy<zhG#TaMEK6h4T1uHj0Pn*X~sVP99qoV(B~Q
zl+BP1h0H3hpcE<$(tLaSJqu(v`|fs!YO}dPAZM=@1;Vteuvt10e@Uq->MHh}lKaK(
zlH;<n27Twf*<4lZR}+8LSQp1pfmT_>C;Bnx%Ii|vifRYqvx~5+;iGi!|IrU7N2*()
z*Gx@KRhFtFky=)kZbfxnqxI<F!y{LJe0I!y)l>D&Yrd(0Ff0oSz7{i1Ivu!eM=%en
z=>{8qfGvEnX-8op^f(8A#nlYc5{H`?5-?sDO5D5PGEZIw*8(pVg^#v<Kj7^hFOwBI
zDRmVM7dNrBvf23{q?lg2MjmM$>l8X}>p~sjK((moJ{fKWNX?Z?F>qDCNlw-X+_r6-
z?=Cl5#htu7Yy2#y^$rS(U`ug<st05+JHhskH|JJ$94R_9^me)Y1kmH47fb6Ry>sUE
z>B#WtXjVHiP@|P^ys-EBn8%OZvR#ll<f)8C#=@fN#hWpE6KcKM->(XqkU8ot*Yyh_
z%q|{|Xc7W}xZr#J2NWb_4xp+Nu8?E?xP-N9FT*ISPj=tEhK5`&ddjby%I)@jbq}NG
zW;8c_oB4XjEso@S$#Jm$VMay<%Dl6(7F<S*4&c#(#y@%d*w>}^SGwu<2PRY-W#z>{
zj!&=|6`EKV1?o98TdPRl{C2kxgeFLT<M<1>W1^+4)pc}qP)d8?_Ef`GmUcMXP+4u+
zQBV>m^dv0I$Ccy$mG8mSF8It&QxwDvt@FG~@T90;3j_Gp*Kr=XZF}|V3HPP%D5~n5
z(4@H6d9KnkS;kvHalsxrPpde1)TsW)cj+0mz{KCXZTpvZkGCwzSq)y$f<x5V`6NBb
zXT(Ld3LyQFp-buI{5HirjjL!5N_B~N_|Uqqs_=lcU4J0XP(0P?t`b(N0S7s%PR{<<
z(=lo}FO{*6dWj=kTl+C0er1q%?yb*!1;mc<45n2u($4-3IQ-tc!7GmHd!0+>_WARd
zzdIqUw0!IiK=F%Eb;jQFuT(_dWO&?jfPVQJegfe5kMFGvtG8}GuWTY`*MEiPiREmv
z%NFO#!GT)01ssmP4`Bi@oG>S-C{u$>)O7ndH%uh}0cSq#)RGaBckx<}r&VK!g7XL#
z%!ZI#Se_J*oTLvQ#yUgVl9Lp|keW(vqX@Xvub0X%dZ*`L+4z~7&(bFEl5%KQ-@UGc
zH*Yp{OSwAeD_fnsmuGU|MOV3k!F(Yb#eJ$~7_@*qQopdUg<8IjUlWb}yz@K1jh3EL
z^S{l&ys@p|kxreQ<lv5_(1Y#^-bgTb2NeXY1c@{znYrEG3@pQn)*W<Or4Ld?uc4;~
zh$$eibUnW4`N{3a6I-0>-&2v&U~GDQW_$79Vdx>_7t9@MOeVXp4~|pp>1y6W5!qF^
zc}=H-cT<j=23_uEHO(wWL<e-pB(KZrEd;4T){Csj#NQA0X4r9t_vY>IZPv}^D)$JB
z+Xj}A0{`c!<1zPb)#-QrMn>QW+4@u7uTCwE<4aO$=#wYBIV04Uc2jq#$!ydw2OWm9
zaT>C;C4<Hl$U9?O2?g^p9hGGyTXMS8Ba4|85uri-g%heS^2$o&+okMxP3iTk=>eR;
zFIrJF@Xl!71S%9zK>kHHH=|n#_wSEqyW|EsoO$u}!P=ic)KP1qeL=dX{=+lNm;+zZ
z)BEmg;N^a>qN4-uu~;PEOP(I=Y;2W)SU5jy5b@;6j*qvmUM;L)Q8*|i8MDM~-juR;
za<aMkC<=H{PRed=;GKKQn@#z8MPZ=_a|OR}v3SQwnm{UqI4w#(g>{FR`=19Joa&OI
zsma?g@E!oeZL~cnP0ue(hc157@r`#m(iyvx4qYxXvgv7!OyjVRJYaH8tCBi67&Xcn
z5VDpCh87{rrJiLaC3;zoCB=NX9tf7OPe4_R*n#C0p*)|EkjcHz3M(;zg^}ur9nCLh
z(US3I$kAz*D4eHATgz4V_x(17=j|_@C#g0mh*fa>++1EtJ{H6LZ46UY<8)CrI^GW7
zk}GB=;92_0!EMqqwuJLOPEt}r!nfVAH~MdVHnQr5*Yc=`GS`fh6ekzJbSl8817E6Y
z&M1RFs?9KUVpq?5l#^hLVnR}qr0jffO7a89piEp(*rwklBn0RSr5ATnGdUDG&fsC(
z!3GmGbo97(tq0b}t;JB2*iLSh$`{_3r4PZ*1Rh&dxF*i5yz$iY>I^e@LgO#g{#N#6
zuAHV-3dF7Td!l>xtn}3%fpc>iXJ5jFc0t>2y48g(N=}dazE#Ips5>d~w2I*t5%CC{
z+rv+#EKSxoXbs3#2C*O9htVW#Wqy}|uaXrEI(9)5{S|dY$osoh9jwFNnRy??uQhMy
zErIVYV2AwXU{r4~2_3oJb(S4+-bv{z#leZD<vPA}_Sd}?^7(hD51<?eacZA6ZrdEZ
zap=&lk$aY!&d$!<5v)kP=TTT?KFa*4DfSIJDlM0_wUL>~1)H~w&2f)ApmchLax_N-
zucO6FY)Uz!p6z<#djP}pGBY>7uN52vGPhG|r4F33bkSX?wHb5%&A}0_EBD@NxToip
z<1WKJts?yH%EvY-*_?*w8y{Q$Gi$EX1pbAGw(`L5LHw9R+yDO`^P?{#t}QR$<00kZ
e4%QLuWHo6}diGP;%kY(_rgq}Y@uXuH@BS}~p2DjD

literal 159804
zcmZsCWmsEX6D<{_P@n}0#S1MCp}4yhiWMmu+}$107AxA~PLN{739iM926rh?+#y&(
z!p--+Z~NWnJ~uyePImU0GqYyRn%NQRstWkH6u1}|82E~BWHm4_us>j6JQT#akN(EG
z`aKB-#uE%hSt%`_%mXC02bEqBEox<NDJIk1>i(OrpI@cAZ@pHI6=_MIpVm*-3F<#S
z-u8(75{Rl<fn31Y4fO2`fQO^1TNa}(g0I4btchMc#i8HM{5XmXn#Sa%%u>&i{BRo-
z5?tQyxxey#@ngEP@lw3vG%J6EIekRMPN+%kZhYtnQ50DLO3Q+@W1+T@<(Yr$ekAF*
z3VgaSBN8RnPx@9_+0fXS@Bw<m|9m8VZsHD1T|(l-@d8Iwy)*y&W5d@Auskgb6;%(F
zQ^)3t{+p|Z?vQi%pWk5kz#rX%@g#^ZdJkesM9X7w?EPv=k@~x+<cl}iy|6T)ESZxo
z8;h|#0(mU_KfgU8iEm;)=V?6OKgkITqff@#3Xqu6%pgrEP(EOZILM;ci5sHzA1`c4
zxI+2}=o}pjH5FTr<RF1W6n~b$2w-q!_pzI_zFQ!isrqbxRg!@{a!dV=Gqz95=Fd$Z
zm@NG;ki13EpsP=h^$kmC`~CTPe&*c!bA3y=1p}^F2tDsfpw27e3ce&Xv;1@IgODTZ
zhoG+Aa|gx<Nd0B-b$77KO&*Vp)8&L67oX5L-``bCDj-;6P<1%fXPP)EC^G%e3K*}k
z-(<JJgq|SjgR>F;yZ@JB0vG6Wtbp81#<EYGIjMIGyK>LCI4%6zC8}7XL%qh~>GTV*
zltI~@fV;Lc;QZ0d!#_)YU{dM|ApHtU%RuoA308Vvj~8AKex$*1wi0ls_wN_|`{Wp@
z5ta99?{;|v1k7YD##F^5b{`9mwf%iNKZw^SiKx_k=659V`r--PUD9yI?Olg6p7B?a
zV*mNKVMnC`ZV?d?4h{}+aXL{^=>iRn-1nuFG&FlhM|QThC6$%4yB_RgAwim&C9Bt;
zKff{PkdX;qUS2LQ@7$XuXPPc<6aJBLol307&!pSRd{L=#=XbRo&2C0m|DHr=z9XG<
zoNu|7#ZQoZy|gBEXRf`S2J6qC|0<oEo6F0~vm83x-`mqSNN2gErlOd#t*d=oq9G?Q
ztHGO@o}8VK;C_cfE;cw{Twc~l<^<v4MV+0W+uPe`WMs573u9wr*UbcJPdQsyNK2df
z`N6wF@z_{dkCvLKi-UmiL(hz`#?<WL>^^%uHplmET*Yp5-1#5ajK|P__`8t~hq<aa
z`d=aq&N^C&`yTp)d`U{$L8!B?Jo?CBC|IKZ{`m1ohQRT13tPzOk^1vCGdU?mMMX)t
zXa5k!0*m-cl@$lFO40^xFgwTGnDZ3QrX9-*iY<Htdlin6+QZ&B()O0<T3)#8qT5@@
zx#9vs?G6gsugQ!R1`YInyxYBlHypwJ?l!(;X-?k3obQa49}3r(H2Lbs0Sz<avQabp
zm5_NiR2L?Ec}_O{u+k>^flb`u|Mdi`J$-#g3w13G4cimFQQ7&{{v<M$zy<(6|4}$?
z><vFd8hp9Q-CIpfpkUyitD08SWMrV*>uM9_&_WD-*0>?+C?Np})r+!uz&4=tLdin5
z$Kqh<UGVN@36~hG9?!s@Eg6uHC1*88BGz#+Sn5GSeN?^aVSjK`ujifH%Gc^8YSFDf
z*fI&6p{1Y!bbwY(VFG19g?TRGkFnGg6mAVE01LSw@eB^~_iV|WtBs~&3eY#2#QxGf
zOSc;NGs?=*Jbyd`!};5{Z>=X?Z@rI~+Py9!2P{ZHFSMO(ic{XaBB5_+Xo!i9e(j8d
zTxs?^KihmOpHGI=*lcbV-t)dX5)+4sykv2GoYPwo&!xxtfxPwysmx-HKJ9&*aI72I
zIrGOO3Q*3DJ#Ef}kuxq2h`T+2(3M=W<6_T#IHm+c|FzIB=eDi-_F$oBl8gDT^kuQA
zmp1i98)!~2{3Z)koI8;G$U;142L}>d9v&V-DnXZ%Us9~!!h?f@AOG3ERg^Ftt7HH7
z=s<ho+28g=d7clt`?#u!!-0`8F$E;oOHDl5+DXGq%gex*`7aZtG@px!1NgIv;9{P8
z{n&&@JYWw`PXa>1<CV7A(x6@!+?+OLFy=jIP8#1zom^iK*4QY%@QG=}7uykG%dzzb
zHiVPlG;<6U!P80bJQV@@w&0aU)8HyVf5Q4&FU=fAdfxV@PxnnlCihm_{A-b9pi{EA
zxHxG#?HpMea^8QpJ<Mon*J|q%EtbF>Xat*avh-*?`O0tho}H?~{(>nu2z5htw9<6w
z4rkvv-sgD^E7hrF;p8Oq{h2Gnxzy}Axee1Bo1HD4-JdPfGk8Z=Z_HJQJr=ZN@)fGx
zWMVmX?@>-##^VJr?8X(6z;e6651jEJ$PrTpSpn|ba285Hny4l5u9@pazjE$KJ~F{j
z+2sLRnVWA2yie0aqr}ctll%6H|FKx?hD}D74PEM=@J+>xoJt+reA{If->1K*d*ZlI
zYrD}G14$0*N!seI9HuUFssW|e)V&H~aQywQmAs92F<E@^rwm`cOlzHKw>)laC9tjQ
zc4m1w>1%3gW+uHAxxt=J<t*^hXGk~>?Ntf!@fsQ$4;ljiU<sZ|SHRG<$N{iv_<m%b
zDIsx4pyP>a@*xO*+ejTJU|vhvif`Z60?Kc=0AA26d2+NS#bsxw#dY4&!y~hM>L#&E
zzlv)PvX`~eIjGYG{?dR4TpsALk_2he{Xy<j4)~0?<!8pZ{hWpT*C8XMkr^@?>mi53
z!IV36j?r}&9>$e<tFYIiOuaYEDWPWQ(BInLHg5Kb!^Gi}!`FZ)%XVx-u^miGSh$dW
za(%7czRV)d_zMq+b{8CUA@aXD9?A(cULw^bOh3K_JC4+pJWaiapR##MXXLR4!WbzN
zD(mgqiUzmdY|%<w=Zs&Zuxh^Kdk{CB{i9BEMp+8dts{?i+1JZ942feh{4KPd|N75~
z2cALJ&}mvk$i{=GsBpcVtKTw8ihh+VId;_GER#;U9_p?#k&npw7U7RXI_U}>EcT@J
zED?o=*^~)v=CGw-cnJceRX<o*S=-$a^{U&mL=%_AEOu4J#XCKZ)S&N7O~=tFT&GWl
z#N~Mr>NuF?pqOYqMZ))HBwLicYBo&g9<P8oIYSkBiS5T$CR4i?DHm1FudAelAXtMl
za{TGm6@y%yR?2v`o{|&W1N__Xu|`@ye?>Z(cvWVt%)u^KY%DV#jue8ba6v)b=9*Of
zz5V?>C^fp~xy;14xOawz0b9dqA3xqBRpup;lPkD7UY*?aAZU3-^e84?sbKHmpf>Pq
zqWkk_9KRh?ISTJ@8Z3bu*8Ca%etysYvCxlz93_>U9KAS-BBi%qb(vk0m9Ce3?YimX
zUbBcrbF%HX`L!YT_(*xlH9^;aG6hyq2RpkOm7)B248Vm6=c`cgkGBz!s<W^_ID1a`
z_)v`&*HZ#)g4vrIiU^Go!+M8#3FL;euB5hB;@vG7NNFwJ9m{NAKtkefwgctA4U}Gg
z#qHtca=fxEfq;N~QLT$XZ4BHWwtC0}>gpTua%@wE+@LIw@HTONW~X<yc1xtpcx)es
zQ}qmrbfVHL4|`$O_Kg%jG15n>Xyi1{ACot?P|`JvjGf023skJ0^cP-*61xqC^(suR
zSd0azNk!*|s%axO`9dBq+=w|N*i%pKnd|hCL&m6he$+k)SxI`ur1sHPPmf%?F+k|Y
z{+eJ^Z0zXB2sIT|z{#(BV&9;8@Spi0ey8Q;-cKyt+^hgV=M8aHRh7%t(ehb|+~M(R
z2k7_Dr@@_776b7QunDxZwW-AeQhiz2*`vb(&CJ$2?yl}e|8>u;;BP5j1jZ#(4VT4}
zMAx>4GbA4~9?R}<-F0M!-l>qobnO>)?b-0|FTzB^o4haa656j;{MiMiHP-tUXw(?p
z-+(bkR*nCIjNx6QL+wiy>>?s96&0h)u<d7<nEsas1u<$8H{aUZRha{Bl62hN+@6Eq
z>A~Uf@2qT`XG7k~LjlE7cF7b)y4}Ezy1F_*kp$2F@S9cnRElp_Vz7M<u6wm)yAbPb
zPU9d^DIfS6<$FZUi#|lSglofod5W<onT)e8q|aSiW&HeRDCHmp^`yRJ?7WM520>Lr
z?%Q_V*ZiRndjE=?ck|~qHECHj4krjj76`mR(}x!Es*;<fP&|k4g>5nWv(CC5*&{w0
zkOV2n3)N84BVlHTMQ$6oiDy#}q)I-#s`I`SV}j#iy`$ItoyJDNz0%xVDV!X&OhH$)
z<zr(BNG%e@uV8|z4~(l!I#Ec3f`S4xQ^=e<jTyH{GE;i*xE&GuFMAfHBq`x~TAH%o
z&uBKJgjKOZEgIlhTPL(u;J7!{)1Oq>Pxr{ueox}cuPfQ-2z6$_{J3wOlHc61&B2bf
z_AN2+K|TlYdn!(vyc{8imHU3gzShsyl;q@@y`Xm?OG}1rMw}@_=VxaQ_i8_w`9OMW
zT-LfSDEXg14zr)F5T<%NqOo!G>DSa$t(Et=)bgr#Ojl`PAtN+c4SfMZDv8Y=co}eg
z!<KTtg%K-s*}3gDatN3`xqYq!@Yfym?enbY4H+`R9<%@SMAARBoe^?fr-X$$32XKi
zdX}zK<jwbm$A&JDbi!hhsU(~sJ5)j_S7t}@)L1bzJpAr<TjF?kR|td><)fjbGynpT
z$g9=xkdWIwoer}ZXP&!}jvIj@)vP?(RNMxKdFfTX@qVg6TY0Y2xw+>MfO56>u@U^c
zqm9kZT(vo88!Ud@=610IxmfTv1<m$K^YWzW<48zJQK+j9+UL*bnmyS9Ni;O4Sb#sf
z!wGlu&o@(y3%zP;YKki*Zr2D43JN?9b|;IDmzrcY2L=Yv_9@uTls4T<8Dt^z^4_w7
zq!H-VSPV3K?laF8@|2a7pdTe+_U3G3gE&2dk{WmS{;ohEyHQius$D&L)tsCkH+Yg1
zX-RB4q-10Ya&l-^hUNkL69oeTE%NzKv6RZ+PZpgFBrxsnD<I5mC5=GHi;$2IN&%;_
zn}5092O;@5(o&@;fyXhLUy0Mx8BMuybISb%9qq}G+4@m3MDg*gWe-)RcdTpqz6zK?
zs*Qu^(oPiCKBgyZ=bV<hn;%MJh&i&>K1djqH0^BbKz*)Eqhh04e}Kz|jym8`UMAhk
zmkIH>gY={vM(kpjVhpe9+Y<B8WOKEW`A(+;9(9oEu#M5&(jp?@T!IMNU}J5~u2E^~
zk2c0Yb1;BGeKh9hkee4{yY8=f>mqfd<|DRYzBQw;fpLPK{`b}if3yJh$<Ed_-%~XC
zmtDGi{o*!g=GI_RA>ayfcIFmJq)iuC$gKA{V|U~he0L7I6z$j3rA#LvakJxMeuR&Y
z9}^q9(g6a=%0AreN-Wk`cndbJf0k!!Zf5pL+ImnqDl!ra8{6OCKZVm6wUyzF3$m9v
z<qC{_Q=k#md$u0MsS#{yYO19gKE^LMQ2M@{=>C#SIKjI{<=of3EhHW7XM=1J5fPX3
zfD5^`I*pQV4?>^4X4Wf=-LV%_YAA6TN#~pT9L`e&WMN^M;x2%qGh0#L(BNRb^XgH+
zp+*V2uyA3^qAM1!<$AR7amVKxx54&Z2Tr3_pYtu1a66B8B$aF=xO<_ho@m7Iu<g?B
zIPIhK;I3U>UG4BWHG?aCsQ8J}rK>E0-J1P!vcdZYke^8A>)7d|wkE%x%&n9P>`UA^
zWKzCCfLgz!lO&LsBkK@MZI3*#8M0pG2VIW%>~AE+%G?ipz)zV1A~@2<1kWoBbZOaC
z5}dyG@#*<BmNNv5BIPI)4Kb?@3-gPls43Ijp+b|R@#E8K*KObwJKyNi=g*(N4Tt+i
zxLL0iTGDheqtV#<9yi~E1y4JHb0Bux*47Dr=>yS$*#<0YG~+&|Mg5jQX52;Hy!tQ+
z4o(zz)@_IlqCzzLxZ3&R8)rPLe%Sx**RT%(Kb;LJBRAfVFr>u!T$J-v**~=MVH>=g
z7}w?Q27K34P!LK#>$yK;X=w>;bXh~Az@7Kq(dxUx+fHm+^{m_503~yDd3kj)Ydk5V
z<ded#S7S3yuk@~@z0>6Sq7tM+&L#JQq<29;mG(2}${WO_e6KwS3C~yfg3gU{Bk3bs
zXnHSvIhe!-4mcYqt!!Ty8+!q>biUY|h9Os`OLe}`N>pf+pl+denM96*j-hi4n`xRD
zDlL2a`yI$jgEeOj!-_2_@K1B|eEq`^86kX5PX*gE;nMN(cfyBnQvi?LOAku}ua><N
z-+zgYF4L`E|J50cN6Oylx`Bm{hfi{Gt#$`f^GHL36p`f)jDudAnBZG7%W|Ou{A8`0
z!0|uQ8TvEKvM>X1V*NnOFW4va$}N3rY5+NG3tn9bLO9YrI<3MDkt}}Elhdgi`|_30
zj63FFA)5N$rXkqXOA>_z@VGb!MhaF{Vq(zVzCTl5)U)x<vE1<(iu$cqoJnM-L}@r`
zS!h+_y47y%jVHNi0I|X^pdtuOBzX7y84-~iZ0Fs!Of3!KBAM?)b~$W*x%|$`Fmc{7
zxMcU9!^!P4&g2nCJKLx3OfuN_z$mI;8N_g=moLR2^GD>>qJXQDhz<Bm=s8cY)y(lx
zNZCA!G33%e^dcwJM}KaAkv3z;qnUJHIUrJ##qHS^r^pixppyRXWQbnMkjYHP=+}X3
zfgl3|$^z(cvq`87#`4mVgTaSS_1)dw=$uMPO`YWgl<hUOt7-{iD+l>Y)9RA2X_Bah
zdU|>ujb_$+A1=sAom2*0u<cd1wzjskEH-UkUq9U5h2F<);WTbH)YW~H=BBT|kj!DQ
zQ%fx_gI0A)L<alO5HeAAY`mr)LR?W%LF#mJJ#P(ubn)`#%`u!=c@<(!=%_9T*fOX7
z=LP+GWQREL-|i}|`IK5i?`SVzy+&0i`UPGa`2kx+MWx<H_VFS|&3)B`uA&OSu_W_z
z=ll~o0Vm6qxmhVa2h9Qvywb4bq$F3OAi79&mI?&HipOn8Sf4+}im1Eoi=j*eSLrF(
z65@%^AB+T&CKu_B-2b`E3WfZ-O?vBG&^Fl0dsQTXKpP!dF0f)^<krI5A25^?Dq-}b
zP_(7&McD<r!{W^53+db;xjeC|k?uNUp`Rb6b4_MiN^tkZ(R2{3cNZpoZ3C(MC0a0h
zDa4$lwCcN^)zc$8n9ssjXrue4T8x-<y(%kpEM0x)Xn40Q2)S=u32fnKVzLgM&JyvC
zr4m{nb3>DTOUqFAFNrTEOX?dMzzuni;V}X$%*@P!UI(dxe1mbJo3cCF3ULA#W}vS6
zQm^p%{TCc6nEzPu$-^&9f_QA=_8JL-jGOGzKl@`E>b-z%!lXNxIgXIikXH*bDs&{c
z6G~&Q1-_?j?k$!6%`q#w{>QooU+xle>h!ZT3f!_Ew%MGTnVO%*Gt_rwW@7U3O?O>l
zA9qx0lmwj?fs}+U(k3%|cfBnC3vE}W>ukfX4UWz%`xP59_#N}KLb{l}iJ{v6@%M9z
zF~hGD)?i;gu6f$q!BHxABr(oPAvD`s7ut!jAh0dE1a+h-yS;thX71=s;-M#XJzQ{g
z3A*9D>#dgzKWq>Eh<r<In!8=kA0$__KU)cM^c;^g+Zi2IwZeClk&#KeI079lD86}<
z155j~+;NBKxI^cu5c0`UYM~ss!=4|@0qK?sUg(jmyu607hac!%0Ay|;(Ua>6KfuGs
z-#_$p-N%40-OfXU-s|czi&D{U>!`TJZtX&n){i?7Eggsh2$X_?!Z5pPY+;DABQr74
zqEvG2x~HcnPcF(Kjqe}B{}44d4QRDZ%j^~CD}w6$wv9`lvLL16=^K>F+LGJlITu9g
zjk#x4e)auX$uig7EfZJqUU{^xqT_Uh7Io5rx&%!?*VH67@y^c<_8&int#%kcB_rEb
z2ju(*Rr<!pa!zI!jdGWQ=~)POc_3JPGBQS$fWue^xQqbT3eQ(@=nvc2@^HkH(N9H;
zf#MPy%@gN#G%)|;Hl~MzfV+tv6jpwh^P;GY>88!yu1E9A$_iQo-3EhD=-42n6{n)6
z1~$1dFf`S^d;h-heJSWXW7Wgkd(u0aoSYnVX$_LUcuBtmuu@at+6SAfpHPsJ%I8)&
zl7-g8+NcWV{I8BYuYWWLBD{=@XaY0k<mAS&ZIqRj6%?=w)&R4Qo~qZk_+L2*rx`Rj
zJsRN5`qq6F<m&nei3|j6vuJ*AH|hK&=6|W)!Hd(ydzhY15k9bNZf@?O)b+{+(Q%ZU
z4nuS6&_t2Rio85}+{!Q1B8*8&ww!WMF)=aNSNSB>`1t*`HPe5Enb!@jUuM0x(2QTZ
zh%xkAA@|U4hn?)w*+hG8dX1W-QfchUWN#z<fSFfIq(jSR6xqkA&zRG&1%`F|?-a+-
z(%9+gDG-=-8OoXzd7ple+`;{ff|3&EC&uvHt*NVht2c@)g=1*7DoDmtJ4q%{YNXj9
zdTPPhTUt8r^|-pIQix~~G#VVAy5r`mwK|7A<_-w7nn?oO_W?;qLNfFXR{RDox~R!*
zZB=OAx20t}`-x-;Rb@x)Lix{`g6masJ;^2U&huH4>!3LgP}Yo72U{Z<DI5m;yu7fD
zFB0u{C<Nm2kPQGRWKS}i<ZQprD~-CFga1xYt9M#X&(2n*4FCsT&WjwkZq)Dzhlt0|
zlpA>e`f*Pw+<B$7$!?m}boS>@oIr7nAqEBpl3xq7a!)xtW$%8B0fIZ#4Ga)yD&Vin
z8lrwgMMI;icQcwLvYVf*e~peRsy%g#<;e{=1T7ExdyvF%1cqrWsL~#JAFqhHu7}9f
z(FR?wjpfQ1)H~!V-<)j@@!ppf+C1ozd`F=AV0v{GgwBJ_k_hLgXq`M60BrU-T}L9W
zL{`0@{u4wd6*cnyq(P20d>s$_f72qqG}My=?2}4m<n_PTl>^xY53GO9XK-O$7++m{
zzfNjOWREI4fD%!mn+RwE=G7RL^S%^$ciV9{*d9_7cXw=jM`(&TDFV+8hGSt<+bw)6
zERYD$?Ow8RbkwUdS!?t6P7~-E4*vFYXFOk@^hGAGtmC3r9oRQ2UN5M8ThiwaqL!hb
z&hmjkEBNke_4Z42t%vtLUdu@|JF^I5EIb>*Fe+?d4y?x<qnxSm^rr2)l0eN}AdzL)
z7wN|SF%ieG^<MXx`N1@Da_2UbFkZ+x8KCiT4$%51>G*ifPCBUopLw1+0`8ZZ64GI8
zawH++Sn5996<(%aUid|55p&RjJ5-vEU71duHEDc&oSK??7@l?p0VAV7?SihuK`!$Y
zmNip3uPGPq6|})ZX*Qbxgx`Q9E+Um&hf=z_&wKj;g!6Uws~7t^a0Eh>3eZr~p;6iF
zLc{!zy+8P}nqAcVta(PnxRz>hV&{98Br@u$RT8oA{&))-DJ%3S0~ehFNufV~n#_2D
z(fQ+Gf7qS`aytaN*}j8)=@{RwWp_zbnudbVY2oe)R5ZCO3PbE0-?g1{k4Zna%(&Q@
z4saiIM;$;>1>r$$^eJo(JUQDl%}@u{z)QpJ+oU0SO%vP{Yr~P3FZnoL^0f_|mrE3F
z&54)5(!`o}p(K3zqE;>F(y}7U6nNq-9{?X_S^zL|Ko>-}Ogt=T0eG~P_2Dq_JI=e!
z4jduRuQRg^u5UtO-q(kdFyEb}bVPst%*@GIRHd!^b*D2J`$#{ZbH}g{I!v+N@)n$S
z(IUQ85Eu6}Ws^HC6BSDFeCNuC7j&iD6|nb72p`>U{m<t|fb~-%ae+r~(0L5IGgeBr
zhNEU}n*%%Rox1;BkQ};QlOa$E`H_o-7KM)KFbjdto;_oGPh!~OHEo(wg?a=5G<LSi
zqUF(hieOB1(fD?k$8s=nQDbz!Dg6m4G*z5u|30;{EU9w&BfgtHgY=R>@9iqnk@PD<
z=oDxF{U+9*n{SQEx1=ugzP^h+aN6S)m>l|Kw%M@a)9p@ece`|R?gbQOAg@IdL5H2B
zdE20ecePSJi!Fxv<}>O!|Ka%#=<2BR6DAC(r=|u)7tIyMgufLmevrq6egBU5(>rK2
zHE=gi7J}M)r55*Fc^~nFj;4k4dl^^aDn{TdM%dr(8Jh6ypxa>`XM?5Bo^5_ie^{>d
z9XBdc9O)4@O>wlehG_FXt~h6xTn*DH&`3&59G<Jxc?A)@x<Ph>)lvISoE<oQ*5ETw
z*>BMMO3BvQ3z^CM$R`aKEUDRChL^3cJ~w!)!1&d-iX@^yUIBqLEYx18r|u@^?&k>F
zpq-}JQkDsTs>h5t#e?ZMB<+_uCnnZ1#D4{CobhwwyZ!j~_I5Q1B&_ldUU_%Md3Q#8
zcS^hM1OM}cEB<*=l!C6_0$uY`t`J9U8ws5NuM%`qCoj+Ju-TJc60P}uO}C_nFIUl-
zn7>tt*qvqLCbLAf3d&Kvy*ab^X<xoH)wMl7N!tEPwqf8DF>2g43{?WSQ{rlt-OdbE
zw%?@{|2D!&apWnaRu{>(b~)!sm#Z9I^MpH;N`xN|F<FddZ%f_%9uc^^?!=yyahyHR
znJ>!>k`&HsOzYZ=c`qIDl^ZYj9E5`2=`nwU=?&{2|Ko!g7^vsX8d4Gtqdx1tZ=f+s
za8oIF)NPZ%YJhfGTG}5ifK39_)V+)oC>et;KLbxX5oWBK9nP(%Gm+0QS5{)i$oYuK
z$nMs{^We{*XjpTDv;W!vRwv0#6K_%bkLIvkkeXTIwuqH=b(WFyB5@pXZv-I~qg)&7
zbSrA0%bIrN9+Zb+C_BY`^o`oN%P*`e<Jr%8>rK^)9$3q~=RJEjHB{kW+40D09kZyd
zkUm+bsE|MVf4z!4>8?&O4$>~2oE9%LZP#zKIsIP47f$G3jnj9!F%wj`ke+V0RoWYs
zQU+`pEe(=Or;&sz!4Fg{IVrNZf=Rs|k@IQ??HA~zDkKo6>F{ulc4m-|XzoJh>^;UC
z`(*^mE?jf%P6dcyAGmkWNb96~yn9T*?=*MPe<e}H=8}N{&40YGc}8Jf{;w>Kfg#%F
z=kMQfvsH@La7z-ER=1?Kw>gVoX%we+Pow*h-?iFDf{m*4K1^6UBc3Uq`M9r?H|>XX
z%>U9>bB|;RCVhWrW9N8jIN7k$R(jmM2OZs-F%zH6Y;pO>ZA18sc?&gQ;LQEU1Rsi|
z4Gb37y1~D<IF@TXGc-zw(9Oj{v}z}uNnvV41P9i$gZg8$NMxcUzOqizdE_`FBk4@<
zJxyF(zlkr`z&%)F3?BvrZyg&wZ+x5%Z4XRCvA4H-+g=d!UrhOerTq0zGX9PZ3_G^9
zwb2Hgpsufb)K*ZoiUWh><~H9Yr;E9%rLp0n*l7f}C*4<d`iE$y&|;@OAI-(9onxn!
zMv(g;nCnXKMH2JxgbeX*|4G8(H*cYD+}qk+d^dx0*XXt^^QY2VdQ*UmKd11hiO6X>
zmwp*+2o9FqB;`y_h)t11sDTfi^czh_hV6}8?{=A1rtf+#&e(3<$Zb)8l&8!pBO{Z?
zY=U|}xd1P_4;AI*Wi70%me{VmJufjPius6%H~xey#t$ZR@rRFpL7tY@;(Z(u5u;hE
zMb%HP0t3k}lxmfjnVUf%kf^sx4UVhgg1pxoUzke2e@|Tv2|~9>uMQW<-XgzGQ}su`
zAEprQN4Kkfv+FjwZB_tV!otGtPgja)lxX$ck|f%ep!ne^YjFF;1Y5Qfk6;}Q3;_<T
zF}=_yWK)3dxWd`}kiSegXXxZL-$I-R_%H`oDxL%$q1)nzreZdBE*oJN+oQ%Ne_k|(
zS}2-d6EnqvMZA+gZPnJ+F0~e{tvzK;iubauYhGK+JvyogC$vYirBu}-^N%vfY*F9!
z+Z*>OXFI!v8p|PidU{7B0Y1K$x3`3!*4u5;xuE6Kmme;<7_tjONo1|ZQmkA3bFm5B
z!RW4dK+eI)@{wUB>HypBtK07eqjTX8h54h#t=DMzorhD8$7U$(Vt-lti5Fe)pVsAv
zqDP^v+V35_#7cs)Zkn-R0lHtj`xvrWJV=S`2GP{%Zq?Yo?iDZSCz|%y?m|oo<9tPt
zdP~o-0^mFaP!f8c<9F~|lmcx;`JspB%tema=1`)P^HNo|@ASXq0&R?8Q*q3(^H*37
zcDBBE=W1fJ)nEpd@e{OZ_k_Yo-^T{sofHA`tX&H+2kGUxt0uwLEP-CZ+&0^Cd53yD
zJNSRS03#b0P0o1gSWquc`L<6JwQ&m_=Xpa%hnt;h$oiv<OoR2<QM~K$<S$MHwNQ{4
z$L4{D($OdLC^9DJr|<e5ceNzw<$LJ;c7W60^8TM;5R9O&L(eqtdAy#m=I?l5lYPxR
z*;{QiUE8?IP=o2J5b3CXFb^HTNaxz}$BM!DJ0$et1@nh`K<CqMup5@w{`Z8pwX45O
zTj{BfvW~svUhR1KHx5&~U%dfapY-tT=n27XLmvNK;n$;ti1O=)Ji@fim*$&~b(ntm
zHhd4J71IM5Pz}jm4v!29`7tmTk%T-=Yb*MTSii{WpK99&6+qc>n1-wMs4$)S?w^MH
z0ZoH&x>}KXfsudzIQtR({T<&FaRjJr5eppo*e@A#Kj7>Crl^KJc`(O5ZybotkN>b+
zj{TJQze|!PpA9~B3k0n!j@&W3wEyl^GryX25kLG_OvAwV;0v(12P0MkKUf@X<y8ax
zua}SULz7kT9*jy696Y`t8vMV<#mIh6j#no1OiYB=-W2-H*X?v^Nw_~XRq&5bVqoMo
z#$FCvxl2CSX-X4cY>*gwx}AWd&47y%;@gjAe^S&nU=i8KT%uHPO#M1Gy2e`m|D808
z{DC><E*e;Wah5n5oNSZ$bP@0O>C;TDLF1xv2MP+xHoemF<IL|}p#Ug>L0UhT>g>v*
zH>_qGYnptZ+CWDWHcZPRDn`nGSzNL`Y#B9fQA(=)l@?O-ncrhMki!^c%|<vhpt{nW
zM!@&@%M|F0g)b*EcEs;g&d#ESZ>?e8>^b>vbC6|Y?h#9n*IzWqR{3c3=|T2GORIpM
zSZP)IvK>bxt0ZGmudM7LJ9!(@=C^*Gx=Nmg((hXyz;v;w!1KC#X0u)*esUsr<)1l1
zq|L9{Uh$OgA~}ckv(z=eYn(Xh3+jFDYsXB}=ZG5!#m@~%P<q9kb^&Yb-&X8ZvfRo>
zKG06$uvUGINA!1W>qAj^f5wy1h4MA4a~hAJ%U;YiLm^Hj;8eof?uJSeBGsQxDi8AE
zu|fN<EZbkyx|rHXjczO?r&*Ji#&2}%u#?u0$WPAY7p|Sz0gpepu=fr|wD2$T{fx-2
z7Zr+0m$pKVJwZP2>r0!b=cTNB#TmFrqejLN^vm_F%pXg9XzD~h-YMcnzn~qctifPT
zuiDhJ`ILRTJOYBn#^L4zto(<5zgqU;_2O1pPE?3>KRqo$3CAXj)177E7Dh++ufV9q
z>i5Ma6tndpc$=*>TcQH#W`E+di7;Unu2*b<Wx2jJo#bZbP75*=qHU-(>|>Q@Z@9e<
zqkbAml2J6dxb8P4SY@qfn$u&`l=}YJ7RK;BCo4&b-d%S|c-GtVoFu(d>5+&*E4n~N
z(tO_&7%(WPdcI5X715&EDo<|>QK(_wdtCg>Tc7!4@r2IBXJKnxxuIj3%5nI@ZpF@A
z0?3oBUI(ig7hy&LP*^t?;opciLAmff@S8cpzP5P8^y^$yk1m*$=h?!lZ%ejnVuGSj
ziB@Wrs8_>EP)e?U@rJ;v(9E`#E|*La5ofIx*K>3QOt8(Xp-tKL{WIjXoJZo}K}bO+
zaOC?|=9a{{C24p%DWty0fEe6!MMFJg72-Sg_W{pCLd2fBTYK#tD2EdKxM+5gCME7G
z)ObJn^I^t7^v5Q8fd1U;7&Srfa#|`<;e_yTl{y>n>8MK<>6Y+Q{^*!TlxJ118L_sc
z9=!f{%@4jmSUzNj{&1?W{N&CWyw$qc&tjP%BCB%oZ1m!k)0#BcwT3gQv|_|cHMNgD
zZZ7?Irj?M|aTH|Hx>TgxKTU~mzSW5K^T)F~#=pCKI7OU(59xp_O=P!6nPr#h-#P}N
zEy~;9CFB1_k#tUX_7jILl|NQ>R4*t~Q-Waq20vnWWI#97{dn-_fbA?i&Xkdc`+xr4
z<mjig<F49Ix8~2SY_31bErj}>`R(*O=_0__L-zoWGBtE{`X=0*G+!~b#es~xB~_sO
z_y}y+qL-`Qr?B6QIJ^qu7$nuN+MHr6cS(^}r6Dpi)+B$%(3(Ar6%4Firm|V|4GSBZ
zqA>MuZ3+I1yFVuBpYY_wiA%ieLk%d7<(9fLC^eOf1|Z!~s1WWFUqf^O=-%-VA_iG8
znb`|DY;@e;aapVw3!T4h!!GBD=2Kx@4qJO_8VuKv4OwKhk56D!a}Kz5-6xIee&j-=
zINF)Q=$)<-{DtN(v&8Vx|7={_iT@3%ws4YmwnH}S3R7nO?dt3}`Mx2w&QDu4Qj}F0
z-BpIEma8XZ+>Q+7za%nVFl`{=y<;a>EhR6v&B0z~0x%w~_CY_!K8E@rdgHz;^i{j6
z*txxtXO#e_o5NALap7M=`1|$sOYlrhcgj+XsmjW@Rh2`we>2n5hqi~&iq&MXT4#xk
z3~cHl2*&|w`uUL&5S56dCV%^_j8}h?$B)}JHH;Bc+vTPoV<Mui9f}b4gnFSgEeQKi
zI*uBkF4z8uqSVe!FeKs4Z?30Z=K>e(ZfB`)Oe^cl?Q83~Jm^+qWlKKm#tG;t;DnDP
zU*<D8sOUu(W)ID-&nD|-e3h%zb-F5eSai5g>2vbSwO<oYGQ7|V=d|IFZ^~GE-1XxA
zpNS`o4@IA$_jo6^g)FYu9|Zav|DKUnwF7dQv)-d=1M;}#_qA_n?F`dE!?Q(A7AEJ<
zHyD5lYQqaekN9kWPxXrn4|k3PgZeBwzGGSTU$H6+1J}bYW+(~W5@HPIY}_@6u2v1$
zw+8%@OVTE0+5+UAOsx`J^BVk5-l-h7E&gBh29U|C#Z$N2`wpGh-Cs9dy02lM;wk9f
zmhxySOuVk6=hDy9dhQqgSWKpC0?NaCSfZ#(LtYUb703Dvj*<eZf%Ph{T;#dy^b_KT
z6<;l^7y&_d%G6EAbJLdkva=+s=;`d_{~zx`^Ru7|L^Q_2wlK=;w<QJ#J$L=}%G3M*
zi=rZO%rT<>rD%*N4{`oC<c#rx`HAFTV`50EzxaTK^BTR2^kh;Rn$B!es(v|n`GUg2
zl4(1GT&04@&(Rhu2}%WAT-8(pZ=*U90om?`KC%z-Um|7ud&a)jyztQv2NZvToe|*U
zO@@S2G10LK>sP2(-3;6n$>gd7hKvD81OIZNYbDlqKbZu;n;B2;&yD}LY#8=`6cOQn
zDc;~W(i}Zp)|D6E)AQ}}@_m~TG`slvI^_57L=;MVD`96RH5l5VtFD!qoc*rZ&C|ld
z!reV#-odEmRb`oj%4RTP_-)*~cbpw?`I|No#)Jq=Fmzj}|8NCixI3u**6sW(8NkL0
zP*GH|x3xu2e6YJ@&*TzYY_qF>*UHa-Nw7(w@^iv+2;B)wwYhYze$mz{;JBi+%3I4T
z0MWbJvv<C{y1*wOsPgSXrCr?Z=6pFVU-aUgn!dUG@^6%&8|=z^_i!E$vRsOL=j7e4
zcq_DLr>5dOdc<PTcG>g*if#~h&nxOLE2=7v3=e-V5BwP*EybD6srW|=us-Zgr<|?S
zXHTv=IYDA)bFu(EF9sQ~)E3%Wyeoih%9JoO1Be%LB@iKjfSF^ht9z|ZE-%lIAF0z&
zP$(TQ`FlH0;u%?J2DSITs9F+(wA<R-BM&7|wD7^0f57fTCHn0@ls9!%T+UzEpRK?l
zMAulO*+O;4O~I#+9#J0#kVrq(MxA|{Yit}HjcxIEdK4O!^4rRCb4t7nz{;Xs%13Db
z-Esbit+L&9^Gxph*Z6dPQC^SBgA!ExfZnj4-uzH<<>#okJIBW@Za308)<x<74=FJM
ze1eHIUIBq}qZX&$Ncx3~1aQ0i(ZOzE9~Q!0_3c|upf)Kru?UxV(DCRY;%bN*pj4uz
zK{Gq2%NgSOvb&qabube}Ax6*bc9HHmFu<Y}gSECE>R#Vkm{aA`*%kWqX<QaHH5q4i
zKC!zE2-=QxEHAHjC2l>LD1El+ZOd!ZQru{<TeC?UctW#zP1WCawvfRq8-su0)|C0F
z3l^=MFfcbaCdq-5HPN`->}kGRbDNsl2tpl7%n4AEk#(5Q9z~IjP701)IeU!i&Cl14
zPfdB8-s%N+J|QQsyZd$C9~;zSI+=WOaxybRx))WE9-G8Qf*!9J9o5TGXWnTN@xGke
z*(q)@y}IR{ZxqFD=M+fUB50f2i8l_~#8-Lq^Lj4z90v#bNuGFOVItsgFR8kEysGL%
zhO-rRkpd<pBz%YIM_L?3+kO{YpKoq<c_?x+Z`#k^QdR8J`AII<)RdP!g)_TIwZvtk
zkmKdcm$3Uk2lP%xbc|szk40LdXU~8&ZrXNs=|+_u#;#w8+;anNBJcaD%E)wMVZi~$
z&2uX=gQD$Z4%fo-LNE$8pdMq~n;lEZ<EM*cqJUMikT5en6s{kGCcyV-$<{A@XMva~
zeqxfx{XBU>M^?Z5eQ{b=7Q}qkXu$_zeXOPZ9`~mGd}kgU-)*4$9GaS{3(pQ4{nplY
z2rEelE0G9x5eg$%YRkj{^2K}@w`ug;Xy!Qf5=w=&KE}r%$5Si@o%dZR%)qm;efuWe
zX%rD{1`UU)W2%PjK2koZUsD^+w~wF%puDV9mzyaZ=Y}s5xA`YEYKn>lSJYx2J5!te
zQ7z`w*?PH{-fH1P)-!7iDu;{03r+TF(q{38Jv+SO*Bi%a7u}|H7x-*zjo~wu``HI6
zvHuVo_ZT&M$*3$+tdqwPU({@>qatxEpR5KTL!Z>WVqkJ!ZOSmqI{p$QGPc^`4@DL4
z*s!Jy{U(W0cXM64Z94P!)*&GQ7}n|v8kUcfq*S2iGDSVl8t2Vc>ijF!vlA0rEf-_M
z;PB&i<oBYMDDI=LU)2$S*Z`y@5O`Q2hA6hgMefmveS5fvIF6k=6THX3-f}5AJF#@T
zxeeABl@ro8)2Qi|+w~9@{uq-{uhIUpEdTrLeqVo4uSVj7qxo|xOPN)g8~Al~zU}TV
ziTR@z=G9z}=+Td=iba!05+|)ljqfBDnn#KsSvL6yke3&iXe`BDOiP>h_}JCd+t;TD
zIq(ura}@C!$21ZIUBai?&{7U1zf*k-WkCZ;1GR`>PrHgzSqRIXG_J8>4L66_#?%0D
zf4c+)H8sR-+K%=2E2@Hb84YOl*n9h$aFy+MB(UY`(MLqHC*@8ChEgSSZ9$RwdGcX`
zT6n4H)d}ysdmzCP=g5OlX+^b<U(1A|KOE}ikj3+zf@0kU;^IvGw9#!K9{ZK7>};tA
z07I5Q4zApSVVAD<K)YAYw&I%$FcP+BO3lh^7n1lBQOS0ib`pZT9I@X560(gG#^1Cs
zZ?dxj3J&52$v8(jSU6e&&-=*0ffGwpwf<1?HSM*vHWL|7BI1PPP0pgu+>k_hXJnWP
zfm%qn0XrXu<6$$tfU_ZDZwM-{pukL2&;=<{Q&El<5a63Yd@}l7f4R7z4+V?JP%3mF
zE<au%o~PtngOt!A!-gA$K3XF8&Nd)G^y0|(@nMs{5Elv&P30E}67_9`KoX4fVVDu&
zo!>Nptv(Uu;&R=lGjJNL|9HGm{H4Br`fk9^11X<39E32!G5hXi&6lmq4sBzzuPI{s
za#g%(IgesJZ-$%wg$>0a1e~^r*y1=y5$HE)G?SYm2FBG}<~(<}=smtYk*3MSX(*Ti
zF<C>)xBqgOgSiol+Rw&W^Ihyz$!<Xu!~4fXJ>Y;7&IBUd$VE7OsRClCtEB<d_T9cz
zSvcA|$T>-=`QmP^$|GK+2^R5RaNyUhP<l#;nNmk+ACk}fj>zgB<>N4Pl9qimbbT#|
z>HD7p8EB{(Y-wpGA|i4>KXY1XbXt{DQ@cU~p;1v$W^qwbcplWq{=J#AjmybN5iPF!
za|8mO3>Yf1f!-X?uxPWevMfW6KXm5UJJ>XOUyc5d><GjZK6k#+R_F^=1l1AJGBTc-
za&2<=G8B-^OihdBg_A6AZE+;2hH8>LKb))U&k@KJJq<qB$DWz;$J=n%mh(`4EcY?-
zLqlEt*fqLcZda!tiO|%Xlz{&dGo4r;8ykCD*{Uj4|JwRINbV*W@$3>mEG$&a``3#)
zncNI@G>%TMtSqdo$S<x^-$bszGT1~XT|BjW_!}9{NM1g^^6Kif_1<&t5@lWN`t=nc
zU3NZ?x6nZ}xbYBfTO+}ivi*dN?09X$FwY_IBE629+OeK5$MNN_6L$0nVf$sD8aJe7
z_kIQi<>bT!E3MY6qHpSMtO-NJ3Gw;{HeV+*G73i$i{zD*bZC%AlyoMC`}@cNwbcT$
z?=D+YTS-G?Sx~#vc=VtvXbbkG>-=p*_JHsg#9H^>Wh}p`(M@^A?LI#vV_4W{-vG|J
zVy!(+@jETSfB>`gU%6zQ#?6w{P5x16{)e91niBh7;AUrtGr!BHtVW6yY~^IGIjB=z
zFI@Flppl1qeMUz|$Y}#^tM|57_(i!a*J+;ITPrFVN^edkD<t9pF6id$r~*BTa{4F&
zJ-0-I<sM+R)Gpq3KhzF@tv9^eM5X9|;rV4}h-iPmD2`%yK<|wj{`vK;z{~$Qc4L4Q
zP@I}3ThE)**3@Jm@)JG$Vg4+?BYMt$l5!h)h0^o68W#Y-)+AROO{NL{!EH)#$}dSQ
zWUas5RugnEbjL$Ks#kd+w#C5n-FIC}Z=QykWGf}}(8JD7DFdzX#Yq{{yz=zJ(T~!p
zdG%Ohw!7r%PX=42y8wgM3i4rDEiS4@hFSHosxO6w8M#>_&q@e%N((iz*iry1O@VAL
zU%H>JFQpg<BImAF-~F&K4qvBRpd<rJjuSETN*7a;le46->Feu<2z$gxzoIY;Y;?ae
z!i`7WG<3L<PmW!y!>A}J6*{>r6-P!?<a!wnDDo|m%`~m>1F^6Xj!|^#M)KQ|FJJS|
zm{3pHLZ#o>{EXsklV)<?fb$ucdU|fgX8Ct_zhu^~4AgbJV>++*EyHTd_WKeOm5-5L
zzY)KI=DShoGk8j>$pgQMB0^%_1P+d}8T|p!&hvu#d_(7(Na@&($yzkYBbEqoUbLjV
z7jFHL`)D+lz%GU`CxfElcuuar@LS=#QRajp4ULI~#RX=sRz5N2BKaLZGJv6ST%Nl0
zuE8sCb^}+@czv$X!lJ(8Dxg*`CG3S3ebO72PtlQ)u@N!(#Okctnnj0~Z6-YY{PYh?
zhSRMka>n;VMthbG%Gy!y6m56eD%<p~c1)M^6$p&MK3k?RQCb`SZ4G{)y6&(Qg$yO(
zv6&wO4yDJyg9i^_1!U)fsrAqN3-{Di0bW8s%~YNH;=Y~cKKASEl7rnya<VEFQ||4j
z_Nz&783wib^lnbBt)*QA^!JAJ^dyxIwj(a>O*ct}m2%Y=ti;$7l_F%7ocDY^7Uloz
zMITJgZ6C!dCQ6xe5u|prL&)+qdt}J5F(nB$2UtpSb4`bvmqI$7V#~)(zFnK2eMDTv
zakRP@=gx|G9Uo;e+EX2j^+q!b_->3eka6he&F+6MWu+$FammR_EiS1LJ{w6%B0Ne-
ztf*a;Q#_60?2x~~!>l0@ou1Nqw8`D{X>`@XEl|m$K5-$X!f?~AveP8zHyZ;VpAbVq
zT|sEQtwWNMrL=}df~Q-BAwWR2L)UMoivLrLQo-)dPR``e;Ar(TjjzblaL~cgk$!vz
zqR&90U~0I2$RUVIK10RIR3+GP(ObiYhKNEb4t8iDaLC!ST-6ege$XU}eVQ^er+zmw
z3kF?mZYOSl&Zo)hL!%FcB=F?(rEJRc+hU~Um7F!>H4O|h7WMUQYIpr{_9{y47u=@1
z?31!N7dMxheFOVm&HB+{ZJ)KaT2{7R%1cX6pg}dpUZ-&S>8UgNcwT*}DkJ!Xw{!Jr
zbu}UCI{f<}B0_Nhb}^7%x1VN%h89SF0=$S{Ha0grCBbr`|Htq8@J<iCRaD|Zgpe55
zOFd1^tfbyb+jf_=yk>>EF1Go}BCyzKulK@{xKR()5RGy5#^l;L&s(tcqW1y%cu?Wt
z19!U}#_@)iydD7Kn}4tZ%HH8D{pL=n-;|zrSPX*N#Myj0be1AfR#GUc!yFMCF%SB6
z10@8B3JXsxE)vs%#}+2o4<gmxxHJMYe6pwy@$o(D3tllVJ=LJu283Z@AI>&-R=JFu
z4U%_=oYkGU$Vug%=P)oZk&%#suh;w+ADRv}F>5zeCS+z3QBc6cSMO#l#A0fu?L&W;
zc2uTxNkulHi%&-T!f#$Gj+!0gT-8u?@i9Jb<cwtV!6xBnU@Fr1<-c}I9>nP8JzI18
zOt`$hG6jsiFu4rWYMt;pw5t=22D2@1oGD?$5wWx)`i3=b=gE#9jV>92gFhJ=`znD=
z$`T%<p>n-n3Xk^W)5=_erD8YC%*<)U%L+-NC)O%EZVelgVX(&r8%JTw%aaz+O`*>n
zyo1<|_V*h%ZrOW!nQ-ue$J~|Hg5<5NbbWkuteG$a7W2(DCMOK^)2T`2b|L&4S37Zz
zdJj@kHa-}wp=<m4aP)a7Mo7eZQ>*2WlVOJ!Vg}y|zr^-QD;&VX&Tg2ij(f~)r^%Rr
z$N9+HnahtzC?X^q2cFC1bhWZwY@cG<#zUCD%@Jq5bJ#Km?S$>YdZI1-4cNr^(11;z
zrq>S=+&jt(DGFP6>f@BBl{<FotNikGEx_!*-mw1>3Oz_JU)+80duD{Po~W4=_sDsr
zk+IcYkgcrapPJYN3ML=Zd`(EPmCke;-|Dv+KW;JyxoR3Nb5K&Qsd4u@_N{0S;vOrh
z`2Ni&j!0MOv(0S$QUTwzcDpC~6p^ByotXxAFV*-sSA80!9#EXAK{?o-P$qChNkxV8
z<+FN;7C{3^el*{!S6TyiosAZXPBfNWqfvXXtBZnfh2^VNEU#XL+%JJevjYQr|7Zcj
zpStq;`rx*Q(J>PhpK-)7l-|5CjL%>z8<n}Say;zzq~zC7dIRJ%eph9^8Wc$on$Mh*
zTejDCQA&cVAS*9yY^7;#?uH8%d-vikp+S1ac}iuK3Vq>DfP;evvTr02s*$B)Q19vG
z(TK?KrhA-M6&;JNjtFTdxV%noQg)hmhHWkK^75JbXjk1UJ*Mr1t#Pw-D)khCCubJS
zUaMnO6!m0YPN*j)if1<-I?XMMsazUn2kWHpzeHF|Rj4Ocu;*KaF1|hsUYe3zO|NaJ
z8-MbM7@PtaYB<cA`PrQwlhJ@9P&0%sQ6b(zQc_jh75g;PxB`z82QB_n%bwlLWITzD
ziJj=3s8Tmkda0aSsIzJ|Q8JOHi_PTFT{v=hSl$KXT5juQt`YUwk*m{}DUzal2`sF7
z&xvpA;81oh-ABTiKEjBr7|QToG&(z`r6HBjeCKHMcPuz~cY3#pQqiBJOT4Uv1=tk1
z!c{NSb(Brvx8Bz;9~Jf17PfQVe}mt(1ZwpWoLT1C_i3Zg*29Kzpr^FqBm1*9iN(h7
z+_)mn>AwE{U3|8H<O-vfqXHcxGP9i#gN7otW#wo8g_&P^{K$^6)<(iLk5p_iTD^b;
zK84}7gd)K$ME+`Wxe>&4!zzX`<SYgIip^;$)zBmLK3R-BB(NVXfAsbB0Wu{fCzg5w
zG&F&VdXM-R$~cwVa2hZno>D?My=>^J#J+ZmWke-LOl(==W>-W9VEmoA!`?nzBR4vF
z7>pW#vW(k1I_8GV`tEoLFAEq4wfpYZH>{wD;T~hVwbRo{vz12Gm6MB;n(u;+3sQ{p
zRavGg0<XVziI~nd@f0zC@;%+uVM)o2-nzb8Mb|u~Q>=^C4bIEoJ}2i5aEePfq>C@R
z*?b0H&o3`C46}V(({Hl#JlB$z%@2gNIM+L_Dl*9<SVBcFkqyHy?Y5@|HaOePC<;`!
zM>E@9j)rFrMecqtOB4*p_Jw=R+pV;@?}w%s<zhsQuAz%pV&VWm0BR{sC8ME2uO&8Y
zfAr7*%_TL}!uL(Ruh2!KFM+sWx^=zv$8`y~{My{Ov*Q&{?aG0x{rS|}I4mJPzU57}
z^Mf=^lF$y=**<q#qL~5({x(B7HSFpt>v|2rw?9*<*OJ{OI4FQV)vLTYTLGMJvtDiK
zxaNT?Y@p!+mUp&iFx>eO)%o!r1(h8nKOfn1YA)T>(lECy(qL|8zKWU`f%S}Q`kwU=
zc6t0Cvd%gzs_uLH7#M&cQqqcaNq09xhjdAIcS}mg(A`LPmw<FLbT<s$G1PmW-&cK}
z>w5jeKfGo<XU^Gs?X}ms@6UedzrCunT;|U|nawAhjZ-F7D~U^6Zn;ISuBjQXI{JEU
zzQ3$nQZjTntTFh$(T%-feOt%X!SzsNyuCB25U6}6vzD@J$DHL8GFJj6f@!TsaVICE
zn?+9hr^qEP*UmOh#rKS6we_h%)LV%Tk!{UDL-K(4+NWg0m-oTb-rjGi94L}p1KWXE
zvHJG*cE)^}@%%R)Bz%PB*`GRxq|JUSleo;-Onw-;wj;g#k=2<UZxERGi=spD{ZG6+
zTs(Y>!`&w3q66%Agc1tYZ_)7Qr>8sb_!6@t)i@w3R>ZweKLWwZ)#gF{XmnI|w<9xU
zO%Y^GExj5;X8~E9os&%v2udiY^Ou-1X*TWGO>vTgNh(XNhLgPVqREsc_nU1RBr~n)
z)@Rtga9#bXXnzjW5pPD??q4FT?AVgi)|E*<!@$90Vd2<4J=)Vm=CpfcYT$f{%lmog
z2{+<IMsF_JLMH0lG*DT17Gkw@Tq=utTtG;xj&+*A-YlTP0IE@*j@NpwE#k!T^R}#)
z8m(O$2>u$RcB+=vI4*|xw9-Ts9u!1|=L;=ec;E2^fxU`TtjBxFW$BScu{poMz_y32
zd7wtPbX>02e0T_nAkv9ftqlu|z;fzobTh<%zTxqeQ#?_lwC0vNx4n8r=GXtGc_LXn
zRmy|N<T~-rugcsCDoh6N8$N7o5HJ0JovWpiQ%c)_VN@U&t1Oh!2J2lzXwc$j0udO?
zw|#|uDeF?RTX3+^&?j(XPR11#8~hR(wdzfm$Z*pSYyFvnYHg=!Hob|RL%h3YrkCf`
z*XfmGubh*47+JA)wk0}Xu8#N7jyIUu)Z+$tP}=Mbuy)h2^59O;T_NAbdsk+jC+=QD
z&cGm(k4#CCmsMGq8Kv9bO<g;LjM%{jxjdWeIj24x9-u{D`TsOF(DpgU{=Z+ux6*|(
zdO{)*$<yhMu3Sm1x2*Pp4y~$>i;3y`jPdX|)Zvq*kC^is5z(hQ^LhTL!yCK&|9ung
zCwe{!8)*nWBHb1C7H8C1#<R-je<31p09%HYF(ZHE5iFJ~mj1Ohgi19lI86V4Ng41r
zo%+J(_OJ2$WTkyZaA(?*?N9&hWK?yn<BTd`+Z&tWJxh2LfS~=pBJj0A%)|sx@bTLh
zbdMCD1poW*a!;6kR&{jzy}$=qpaL$*|5suN_f{5YkG$pn+Y@=-#fZ)qQELx58m)FF
zyzGD=LI1)g_^i3mp4e}12A2+CbT|%E&8H|Bg3|YR?&W5rRlw=>r0MO9Pyh4rQQ+fD
zfcS=ktXOq;VbCT|03ol0d7yyd>5dWnxY3`R^45tSEcbdKv+tP0i2*GC`(ORvd@Xw`
zj~H05$C5<q`r^%}b@M4z>d?k1l!%}L^KslBHMefg+aXfMzqbvS;6P-^rx&+lkGA+M
zf`<dO%AJ2VJl5PX@l8PBkq2QKINHHDJJ1xfD))Z>U}>JYLr|JhYEkK3YI^6N`+$Qp
z9D}qy4=isE=xsuD{o*pb+o~lFwHpkEk7`KFd#!m@(;v4!9V55;vB2ivUYJfT7n&KL
z8wU9;m?whC(O!#k`Vv_j{qzS3wm2>#TaX_@a)hQ7xjK$|{r6oYMV8w1CU9jgxvh=J
zqEWsShev;0^f00mnQLH26&T`JnkDEr)mXYjSZFbMfl{=d9nFI7m%|kvaZ9xe%%x<c
z?inBd6RI;jX}#iDZ2@A>NqJ%CR~A3e^nM6sMI*YsG)ubeCk%5s?-yh~$!+KuG!F5<
zSSo-vsTUFAC<yueilq)xZS__?TApz_lAFqWv&dQ~lFTt_BWKby;Ai-^DGbL2*6|PH
zOWeUOeq1XSFUsFwC1$VPR&v<RMWAF&9_+4oUA086$cP(uC+HhgD}}~!zhZows9yP&
zS#<W?_r>a4fsYQ`UAEGcL0W0q2ZW`M`_+~@LNmDsxVsHsvO{0zJ8}#!<6G`nvw^=0
zo18a6d%H44OALMGQ1gQNhZK86<X2@i)geyt=f0oD25iZpmh7Gu8HG{(w}(9DydEJ$
zP(S7YVp|iy<{XoJW>mx|`}x4g60#?hCl^+0Keqbs3*vjehh*HJ!G1|?e0_=sUpXap
zyO7%EEG#58SIV&UQrKB+Dl=@iUd$z-TbCvNaYRNmnPV1)krt8llfy;AMogZ1b6~RV
zHtwBPtE|yZgIuokceUd=$MAI`%p3=8H=Xy`@%}&j1TpV*BNRXGQF#f8pQxBAJ1a$d
zB+I#|qRU?`dQ4njxPTHnE2G~{mt>%2Yih>#lQ2Mil<Oek@}J*mr)N+7;Bx1u+#Enf
zgs{EFipEpEf<}BA()^kT9ttoZBP&(|;l@55PdbaH&l+cm{1sQhd5bDYSaacGS4(D3
zpkQkrGKB9Xc;$c^7%0s%Dx*4<gVLTD)+U?>U`J$mCyX1-W#}20=Gxf%)b=#NcAT6Y
z5&kjRQGPF{`#ze%!IK1h;w|PToeD~YDAc-tYwdcxxjiXwRkWnj!QxX`D&q1?X6Wnm
z9egD5@Z57%wpI8tb2MZ*Ka+EuFWZ~8{p~&TZrHq6s#a!nOb)iH@1#HrvQkwx8X;fU
z{!TI-k&$0Gqb#1oHkao0nc1rYRp>;42E-zp1`e7HM~!I)uq?96hR2EBkq%e<lw{TJ
z6u;!T$ogWP@m=-;A%eniDlGxtdkhDfp0bNrUXYqLUj-YP!<c!GzuV$80eN;Og;}^(
z+=26HEkQ&6gBb#~_}?J$mhRn)Ck)nYX&sxwRtKQvCem8ts4nAo{RWiq>txJVh$v*P
zFO1AV;P;(*ha_V5_nj8`mf=p9^r+;^rLe_1U=U2{vLKS27R>f{;2i`VKKY9OE~IPR
z^|V_@im_^GGSZReVRmT(pGpvdHp7VUpHTRL8;vnTRK3xkg!-w9OL2DH{XYJDCoqCH
zGEL{+yU%2a2SZyl^#;5qPvlY*8SZ}6Y+f@5X>iOfFzc;PC^|d#TYISQMX(CUue+5h
z%bVgg5c>xGw4t_@b6swkn~RVZqLyUbL-N>+_`#*iPkA4%TH!6-w7Pc&urC4$Yu-#T
z^>s1}L^QUKMFk*pOorPz%~ZYm&;5CG-!o=V$d=xoi^A|{`sdQx(~`f`5>~apSFaRG
zeLLy7HI*G9-7BEj|AQ_wPl$G4rcOFf4w=h%6eXObSgTv8cczWj)&|CBAb92!kMwEX
zq^aKzBfU#(Rt*4{n7zl@Yql=Cb<I`G9poz4s?XNZ5V!0|a@Smz1@2I=hNeO|WL<en
z&gFEAC`fYdcyqS9Y(#X+u+j+mKkLNL^_-7M1yXgfardVmlI#2=*|%dYbhnt@zRZ%W
z*T;eT{F0w@&?QU0D~NIF)U9~mQ(gJC#>(t7q)+xvig&mPDH|;&h_jeTN}N@A`!Fuf
zlOyJFh%ACoCGS4sfM3$y{Qr~Z<$JwG{s=m3)EJ(kuH&{R9dz9)YAE{@Aen7jH!y#m
zsA>fxE8a&v2HVUQb4hllu_yesC&0a>{%4@SHal&iRSxxpeX?juS)`V9ul-_pT+H{M
z1z5=ONp%;567NiHEy*2*y2S>3PSPJ;lJRki=kL&k^KOAMW~476B@Lm|esX<*xr03h
zXn`|jPpKArbMUUtmygl@OtCG*kS=qkB%~KDT4juhlGMg2aVyS+jK**%PZM|)&Wp$V
zdN*x-+jW?L5;0m!?%#Cb=fY2$cfsZQ3=M#t=areeJGB^nbrEw$6n`fpX*pUtfci2v
zPLO7$=V16>;`h%5w+MjX3ZvhtmdsTAr*s}3zO%!h(WkLJ)SI!Ih&pqwS~4XI$IZf`
z%Yyyyl~VGjO~OR7MY5yBhynF9b%vjViKei%qXBG{9!O%K=N!p^_x*qDz!#$Upr<@n
ziISlaL>_<AA#WGIwc?Wsx!_vz72PKWP4r3mNUqg2flmg#vWHSHQJ#4Yw2zL`!NOk+
z{LO8CHVbBA3ag`A%MErt6=mr3G!vSB%t!;i@+>xt+L$TnZK~x{yYxRxpiWwramZ8J
z;0Bcyz!PV=<*SxZYgK<`N%JgW1Xzh9>aHqRGLHN=Y#Vr94OIVqQ-e4N_2gR!E5ycu
z*rS$=JHtgN0lV|>f8H^jm*=kEX<{-V_>b$*{n4cX%G7XOT7)JQZ!r>th9cYH2IKlx
zO(L-AJH7Wmo5$^{8ZS29oLn%QhSk;GP8bVFinPpzPX2q7p4rAKw930rPwF22(T2;o
zI!3WHQPvFm5)@kmX(iz&z03dpYD4}5+>`wO+u!Ur-HOd~_WDSYf_JM)|2$4Ox{*Xl
z(pU~13G3c#ZGcHL*ShNH700kLgJ<y7v%*<!SDog_^(0Fwr1y~eP}vw&fw(o#AHH=+
zXPqsm%Lh90XYA1($qfpB#X^iM2=IwA54Jq*bMt|oxo=y!@~Hny{nMGciP7gZz&;0a
zr<38W497pmO8mptg8O-=hsEc{9ClUEmvPSvCTqA3D8g?SPjA5{Yb)&^xe!WlJ|lJi
zn^Py0<&AiIPB9qgjI42_)@=VL>i&cXZK-_Nuub_PUl)|#%lT$_4{0=gC-H``=*2;|
zZz~IwtgUVHE$`{~v_CH$&M;`up`y#+yE!T@O-L!5_D2t7@|+PLK$epN&z_j5S`D;e
zhnwwBI^e6i+@Wj2|2{!hYx%Ibd+E=h`vSHRu20Y^0R0s*0;bWzVDvI&z>42E?ERmj
zX)6p6S46Eo*$TYaV=Y#1OM`z(GKNK)V$=%2kwCeo?(U)O5P?!zF}5J-d;=K)Nl9}<
zB|~8sf2}gT-_Mzj(9d7gB{`yjIG##B?UI-CEMt+HeyujIUfzpxxaC}RKT~V+*Mbp0
z9K?u-Y18Ay5C#_3XN_t)W@ahccm*Y~pjE&W3Y2eVQ_yj60Q;<nh)B)c>#f|oyUp7)
zx6;DG-Mz9_`xy)jd>Sz5_V%SD>8CUC*<I#jR;#=)DrMSqZo2?(xvnk}l3WrwxiP$+
zH*b*Rlody>(5jjr#xC*at12sLFb59Q>ta9#&d&AH`2Z==@b}#xBSnHXY-MimQ=VIB
zPp=hP(>jk+Ne#+No!lYK-gCJkKkve+G1Tp7n)s6adhC{?g{d4`^@017ubu{=db$?8
z<gW7qNE~u<a-`sbwl-cSCMLicN@m0_EZi__ZfG|$WifxXzsSkKFut@j+#C}bS#Er?
z1~?pccPRrkc|C6P&8ADT&F8k+S2!IHbH=j6j?2pd)=D{<5hQOYnZ-(p@(ZA#ITsc%
z*U$i-jI*<fg#}HrFwk)#%|5w2n1A8x*%!Sqt>yKJh^Vr#F#7lC`KghsSlBYuqXE3f
zO6<aG_SZ=beP}e8V{e|b6x9x@yiJg1Q}$m&!D{F%0%Nhm&lH`jZX{uP(m+<1%!Sw5
zF^|t@r>HkWQ&aJEDS@{|&dZz50(dS|Zdz=?eedz{&vuK-y1TkcRGTgrW~-2X1qFxa
z**6sxh1lNdM@Nq@O?5YSvwIk9cOu5A%gORRp3SayUR*d-0|dJp7_JqyX5;>^6Eu<R
zZ$p?cqF+Tv0>59#iV1@P+|bh~{w8%c0mWx=KMh8!VtE*O)zU-(w^FIEEO=;19DaVz
zVNYdrgSr<Ln{Rt-YwReQ)pDW1L!BIYbj0a-cRf(n9Nk1bjmZaKnW6yZBydO5^Xki^
z)|;m!!K(hJVYsYI^`0KUXvoPS<{-^$D1gpX9M!0KDqSBgy4hk<U&D&Z7#JDjY1JuX
z#Q<B(@UfYKBo7J{itX?352!FE)I2ot4=PIv`L&}<RI5m-I5~NEJgu#dFH6+xtd_G*
zS(n_w;ktLH$ejI3We=T4Uc4L}MBqN9GF5PDDjF^>WP08SI-WZ>7bw8_E=Yg9TPmii
zNU`uG3c>khy-KH8_Sjt?=TU&a|JY>{@1u*l*&gBJHGxH7pr|ZXVj?yux3Hk#pZ8xv
zLz5<2ncFa{!zBBV5??pL<L&6gj((-UB*`tm4)}hQ3Kh?VQh2>AXDjaj#1eq=8FeOL
zxBbOJ4M?>Bv`M0>s%cGQOUwOvfkI15xH396wz#rB3-HjA{oiriShe1$Wy%7p^hfW@
z(eNe(lB4EZyTZp?uZQi53OQG?XRSs@OL=*DRuS%>G{l^grw=&m04h?}<nF`u5~1V4
zQWfA&2kbl$?_#Z%0A$r>=acluBJETz7hPR<-N$dw&MPxb1=jJ%T(%dTpeC?$aD<!d
z)AETw2GUS!`5<;h3puJG5IYz&)2zoJVgJHXfDAizMbhpNWmfq4=-|b>zIU(5!2JNc
zjf4}A)noat<$h(KriZ?SETVIpv=!@1_nqeL%vJ6W8r`|-@1+!{4fN{NhG-+kOpO|B
zx`#p|PhYd11<s8T2nJ4Rpns%7h#&7vz7J!)#RX+mfwCC62@?_%9e@x^`jo`?ys5c)
zp|!lV_0a3FtgVKdnwDa=LXRxWRMgE)!`&TZYAPu?$g1rn<qL`;-K_1Spa9C704gMR
z!A{(=6jTDc&W_mOL!dITlCv4}fk$-U&~$cY+ic)yc{t4tnJQHv-^v?_jEmbE9WD3i
z=%_xgUcSGqJ13T31(;n06fIiQQ&Vx#Db04%rIDkNh}$Cy#FWoRbIQs_%=7S4+$<lz
zkx0ZLAtM3Ssl43Wmg{keW#D~3dcsd;GJd9}tW=>+O-)621cYqtC{HzUm`R?GuCK2@
z^Y!iMYrBM*#T3blf&2k_jC!^4Ng$#7=-8_3Vnj0+kGG|<@#x+Kdab;c*KQ9Ob8mjM
zb8~c?`~nw?&}n6*y`rLmJS?C!F{5Ix-bBI5$_fA@kz9`)EI-b!%J?g|UNCdy8oLr1
zR|E0b^ODR<;FHKQ_Dp(TZ!eugjx71r;k?t~f+`LsWwHD5Po;K2P6Fvz<Q#=uJ*cm?
zu_$T0+-q)VXhg{kV&<O5VZ;5owYARZ<<rQ44ZZ9LW#-JxslD@(5}NafS01_i^iEDr
ztm|!IVi6%B*)3wfa}*uNgse`<s7!OMY&gwqeVkkhQVk9^$^*i$c0u(3M3fmT@tu*s
z#z$};`8hpKC@GIVR($cuiH>V6#Ax_(z~g8QY>0v%RJ`BJ4q3%ie(6SShfjHnuGQpD
zjoSJyN=!gN0O`duf52;Yt^qitzhAIgq9l`hY_SG}ii3uA3G&VpPw1H*-MW#~kYYjj
z7#PCOgjMrB*t@>RNFdCkzp+|w_1(Q&y?R`joD{CuYC39__`27bgfp+(%04^WcE4yv
zu`@V4?72BP&A`C0i2%?2vSTSBVdn9o&PzfY$$X*OW+<s91d|s1>CW~guP7lYI#eD`
z3Izp^OK3=5#r>>1Y+-?`pO3;UPcbH17W8fT{$>QAQ`y{%=VmW^7_q1$ARtJmvDuuF
zwhh~AEy)8FwY@zQFWBo;cK9UT``L8!`PO^D3U2Q(k#Vu%wLCc~?y|#q^swN9SFLu?
zL+Ei0U;;ya?CeDF+?D4CjtH_^&Pm>@St(y*ya|fzfUrNVTY0W8Jk|W<pO2o(%FH|#
z{~_i>U_gMp?9#+UZ!tJ~Q8WC&nnN(S7Emc66L3`<>?z^IZEfWh11-Q{#&HO{w7_z?
ziVOt|Sajk)pS{Gy#5|a5aXZ@@(sn;-xbGV^albvN1HxWk)$Y+zSxHHY)0L(6@<!Eu
zCO%3&<)F(|Xscd1&u3QrB|BD2jr_M>KnP-HX4aNYrQzlWU~3bpZ}|{kw{|*x{JkKx
z>qHHNo<w2hrf>_BOR^TlRvz*X>*(A0#w+yGNYaAMCUEAG5)wwC=jhzYzm_x1k+-~9
zWONRz{2wbMAIb&_i3SXJ#Uu^ngx64zhcSjUy384{i^;bEft27tzGW3Vpj;ua-x+kA
zkGl-wpBKEfh#!YQ5?|S}KMKdp_G_kY#OQ~w13JX4^F#u9a+5GDRS+n+MA}2pmu@Id
zeg&}L7ZRf3>&>gnX<2Gsw#$1)j9>x)kVNL&JZrG&xYG-C70Af(TV7VxgeV#&=^F-z
zp5h{(JJ`|V!_nj6k%nOgMM1&2TSi;@Q*BexlBv;n)EH(_5fM^Sl2fBE%A!z4i%}!2
z&2mY+RlL$;RGLQw0N{(+)gOaS6-&9@-!OGtT~QI$dYjRXjtSSN-Z;@pff6t1ODb9H
zdA@^spBG<IZf`3n_zeCkW~)dM)ctug#ge<(%l4N@0Q76L!!Nwi>1PvNvy4VNMezMe
z$|Y*T?6z`p73I@{oLXVcjKQa=5F;nbV%4)~l7>Op!PXjy#Lg|C2gCSXR{M}Z?!iLb
z!({-i@}>=LV`^Y!jPUJiI+K-so~5|s!0}nY=w%!`I|}S|&IqzcNR!!D07kIvT3KIq
z;|EX)VwUB!^5hH1mvcrVhh&6T$Ft{FN*4tiws&@njg83-Vrrok$ZP9pJ6GP!+L*8A
zPhOwYzB~BkXOS$hR9;Re-7y<4X>q*#Ms~y8!twNYdfB<NwdqGMx%&ELYIu0#Jz6xN
z!86n(^YhGO#=yWv>)c-Hh{o}0Z^y25djh|1V`DRAS3X%cTJiezYx}K^7z;NS7x&;K
zFt}=@5v~hZAD~YB{Ou=%o*8AkhRt}OM6z4Dv(HW;U6;-3)Cxz&Ku|R+_S(7GK8VO2
zivv_0nC9dNZMK^X_d-HK=onaKYF}#gwufN>u*~+4C<o5Wr^Ce~H8W1s9#o?ch~PRP
ze!?Oc{(Q)<t>ZlT8z|+C0*v@G+XkbkoOg|UF6y6?pEbYA*koYO9YJ%%21hKAl*;@v
zmkz0MUSf6fxw&CbcHTN;N*)5%k&coX@(9B-*=YGw%cOA@ltvmhFRrnrrB>syEPq6-
zxtF7WXuPZ$M%e{vyU+K+t0b*Om!H232soMdeU=ri;S>;X-ATa$#5ylCZQADr9Red?
zGr!i_!f4yqwgxajimDu(cCd2*m3S}!y%X&0NMu&4!I-mh<3l|@9+ef+C)RZKdfae&
z-|+zn8JSHn?-esCsnX2w$VlCCY;5WmKop@IzYdKF2n4in%eS3`er{ZI@53N@WMm{H
z2Kt5<=l0X8+X^Uv_<1EKFAwlvkdl$1AR{>&_nZ}|ACz_fsRbb5+BOI{|45iSRuy)+
zi7QdZqSknijoN;F!Fovlzu4ie!yp_u#C4_GO~1}{AL2@&`9X6_Lj^_69F8VREQT_7
z$poiBlJZM|qHTi)Wh}!nU&5Gig=~E`1j1*U>O*#`v((nt;fWd_=;FcfBz<?k3tP5T
zq)Z;%r_VCdFz?;?tL(No*|88^ka5p^r<T5_{{YPwNLs*?Q4hs0HE&j)z>jv&92M{J
zssKxq)8U-(I%#p_=+u-*Ta}&d4?uwsv(|fO;NCqqwbXsbSFkfPlb}{&IORZ);PCp@
z_{?apwwn6w=_Xa&=Js-nTj0`XQ0^&~7fb@=$9s4DY+i~qx3Uj~zJC;ervrMoCfAE#
z*-F3-|8oV-U}148mKESlc64+A8a`-ee=T(YW0k{Fg?Zs@?WH3^###I}AYP3l{I<Uz
z85xO675L2mf)zkI@;>Ycs;{<gUv6(~Y;4lxqR(`0(pin#@weLmYJ#^D<2xAWm^HPv
zYzuyo4C??}7^w3+JfwS(6>mz#e=c?(pNH%<;E#ObrK981-W^5k=9tj1v@G4RGwP@^
z#MJ^;uPauo+346<Yz&MN2-Gy+%l~(zf2)F7@C%~(k|Je5sr)@QSpC_K;j_JjMe#6n
zcTsWGh#m3oRLuL|;=&rlT6P#n1ocv&uV3owJ~Q^$_{#JiPig7Zm@#=(hK5YpG;UYP
z8xG$L>8GAP%PNu%G~koEUWHx*Q-_V2orI+fr$Q4O?pOTWE+HOQ?FTEbnT)?0qVe7*
z3RJ@lE~D^((ydU~J%7Er`Y0(6Pz&))nmVuFyLw0O+*800k^vBMU=syw4LzZo@f4_-
zN{JaUk*7O$+avU59PR*?&d0|mz4@MH(-$B^0@){kzKM;E9pp6{Nttc3THXVg7Ap@P
zATq>|;2nica0Kt+-kt}5L+Ahc)zoxX#`Dxs!4A^lA0i+qn4E;;e>3Lb5D^?43<806
z1`ALT=%F(J`4C}9U0odlfl%D!h6OS+Yice6paH;hV)b~QkN!MACl4X2PQoE#S65f}
zpR7(<*=e-{z~9o!?=-t!;85mFN4%{~WA~W5`Pr<&<K60U8(02NzXG)S?Qvoz`}J){
z;y*2IO2qHP06PdNnI|OIKtdW864K;;BQJ4QO~TJH2fcxcfk3dE&kxlAs8Ndpkl3Ho
zW^^1L(vBQB^GtSkzi@pbtKV$BD$oF!d)}Xr$@Gl#Vgr8w=5LGJk!90G$eaEiAipum
zFunyqO-snHe$QIv!Aw(`CM>F(SM?eL<YBL4%QZ+CRaLI2AL=OKmt(xIp67`+sz4*L
z9ybY)vYr~hCd=Hg*M+5<oJshDa$|a*le%IKuB#p#&T7Vt88a|=*2jbbU|9gPx_i#i
zlZ0GkGdPu?^6P4&ivoUq--BHSA%htwOo%A)7MuaBb#8sTVz&p-D`Gqy&wAU<N~L_w
zN_}xtQ=G04wUW!>gZY@BIOkw(@SXMk`!}DykZU%`=R>&Nua9T0L@nGrl(al$hya32
z44`TmDyA}YKO35k!D8GiLFT>R00X2jeSJe&G0+HpE|@os>m#0uwz9IE91xy$gENbY
z3dsrXH`XH@k7gyt7~!)O6A@%mR;U0YURmp%DR86%uv-K+2vaWiu!|PAt46MLV7J@#
ztJ~1fkd&BItJS?BKY#mpRi@5-t5eDKezX&CQ7OzESfg)V$c>F*hWMXa-kt^oh<tte
z0IY0<MMYd1;m+uUgb(KsU?%@VM5K%zzw(Nw)dcEVSqj1f06DMC<Mz^js_V-RJxLc6
zDOtYj`DpldRGagvfU^o)%eytSHK+mKvZQR}(63A{hT&9hbq)E-tPCA}d!bhuefPl#
zAHBO_xc_^%Z_P1l#t(SH{DeWXVXt}YNwW==ii}Vd5P69QRHH-1*?I6SC(gzcs$;tP
z5{5h88AzIao#f!D&AV%q?ZSCOtuWl<e!($i6ebgkHy~H}>UDB?IR`#2y$n^3$nJ&v
zCz2`mX30)U2lJU<=`sN+{$ev3iQMD#Ef>FZ^{F+73FmbaZgkV_;fBN~cd@tesWxmu
zTGu4@4Sj_lao)gVa<o<D=cnJ6$E>;4s4=s#{R$i(W^TYnPA||t+In>x#p9+$qaR?X
znVQ$7*T$1Zruo6&`y6K~#Cfb+sOR$Hg3by+>xCiRMgyF)$74c#kjAh#W^;147tcdy
zHe*L;^bU1@hClXbhv4=Xwujxedy=zgMM{N&7=pZ-@pzf+Y(2-iUPPq5Vtwg);ml{@
zU_Vj6i15&al-9#&v7COW8N?0`i-3Tizjk(CMU@l`aWX-cAZQ|1KHkHb@7c3u$ER{~
zaa}sKX4lF*8#A5&s#J`vpMh#N?AY-t#nrfHy;s8chezvk4iX&6d5{ngFv?ml)wH#j
zc^|e2f436(=%9@67M48ew7MS`oG|cZx017UzNm>*3<<#FGE|Xrhs0LEBk-^hFq}Z*
zpuBBVHFxNS!4dv7obU9hzYLd#o~deoOOh#V3cZs<CtOa^F+|j6)6unffl0ecrmb)(
zRdH&|+{7|`^aV77fKdc=xts%htP<yxB~-ozb5B&Eq75h>lerspY`(+e0;`TqbTwmP
z5^P%VY(;C7mJfTUL0>q>Fw1m5zk7<B!p#09LIn#0UWO|`KxA*6#562PTXJe`vEmy>
zN&~=|m|mH7k%v)(`_Ani)WKQSCID@3RI2F(C2HI^(l(89)r4#6LGQc;)tTCKyaN<)
z9~;Y-31;otY0s0@uiwxSn*5tSaAe2KuJXak-yK@)3>q_yqM)_A7}m81!}|mdoFHfp
z9GCx4z#$|&E5VQWbTrNSwpJlHJX~B{iiUzB^8mm;{>?`0;(5?8dh9Kq{&1!+o05@M
zFNIWbVG#16-A_Elw-BlQWogN5&@X~$#$3+Ct{|Q;f%CIg?eSTP4^#*n5lrXnKN6E%
z3@*5pbSIV~VF*w6qLFM5kE_)Bv{xtnn3dpG6Clpk8cBJDO@@f3&!e?(p2)$Af?e&O
z4!vZntvY5D-}Vf?+6a0j;ovH$V%+<lj9xu$rtvMN#6JnSiu)W%Em2GKtoz$(2;pMC
zR~NBV7&x~ZNBu^<yJA8`-Cu~slE8{Jyvn)z@$G8`I?Mz(932+9a}9H;^dd^Cqs6X2
zv;0^nOkE`>Ia2Y{>L<f?KmUkAlBuMC0`g!M^FFj#Y#Iezck50<0-~>GOkj*0JYGoR
z__od2I<<tA&6r8_zRfR5d`dRY7w5ke<HTCt8`=;Q$?QM1jmKv4dcX`{-zRJ8+q8W?
z%J}xaIazY+r_8_`kvwx$&0VYHc3p-<HrgL`4M<3flavPlE|7Dhi|sZL^%3R*<31Uk
z#DVvaBv2p<q4)}S)(=z)0g~@a!1V`n{oRlHNlllyIE+Y8v*a8pprww9_jz6UtLKk(
zBN3{+Xp*^%ndyD0TH!#2b*H??d#8k$h)fH%{CY{FEhG8qJ$yt9BY}_ggL+E_uBUZ^
z$vjhQFQh1=-iLi_I$44A3^-5{M|<aGosoIeUVD~1QS+Ozzc;t3V$?G$bIDp<)Dm2l
zdO^1=dw91aNAsuEnZW!m^%kC{#?X^HOap`WBEe5WHBQ$SKJ*EiMAX^0&m=A;whx)g
zA|(YjF&CZzw&65iPEdM^ov1@Aq*0Z`XFzYXjjNCM9A14}%?Q$_Q+riFQGywF{hr~h
zqP|?kEO_v2yg!ZBv6hVnRhJiKu7k_K2eaFUC6$SWBsaGtY)DiqZ-g{E2yun&1(Amm
zY0vJQn^7UV9?bk?;kH<~<BZCKG-7(8+;Xo}Y0fcG&5f8I^$<Bm5B5hW^i#6_H9mxV
z@vszfR)?mMx2C7t?~{CfM>#mym{*m=pvz3iEN88etEWY;KJ$#mE14e@N1=U4CoNr>
zClDN4AWCV@Ac^USty+-OcJ;wv+5Rcj#NDcVICrJAKLJYx<})gJdN4C)I^BqMg-lXt
zLt0?}Z0-Kz^cN}RyH|=7uAb19k6&;5!}b7hoRJ;4tsqYs64CX>_`|r7i>>1RLzwTf
z2L7J0oi?PbVFdHU0%o)%JmM3H#ky0fgstutW8gCEMzX8_(U>JnCK-Wdl34Hl&v9Me
z*y18&lJu*VPU`;<$9n7g98xR@peij6lm#Y*DV0#I`HoRTM~9SUI+dBOiXKr-!t{mr
z%vI`W;D*|guawOuG)xseX0EbFZvy(>hIJUjDzq{DRILofzSU1aku)`_-NqLdiO1TY
zL#+fYuABXnxm5l@pvn`V$F|on-v`Q*OUKUK=&|zH@7|41FOT?qRe~5rVRTL9d{6Xp
zrCyjA-0OP-;~rZwF(%yMw&kB5J7~3QRip)z5fdBNsNsAKF|aMMkDXju`EUkfisF&U
zrXKiGsS)2ah<5N!ioxQ8<)4n$@e?BkiI<{MQJIVrc8Lc`_tGgEON^rpqnV#tir9Yv
zR3-bw1w55!YFnQ1UfEEO7Z&L}RRs&Gk}qghiLF{rcjK1{Ow287F}Cy#EHs)9r`v96
z5bMbR@+(tP7Q{$cKBY@Hm`k=>mG~Vgm<~phOE^q~!Scd#X|Kt_Ol=$DHvVIBzRprY
zTpUQ$5d7V(jduoT87(aC%ol_av9>lhJx-zdYcf^k85yOemd^SK@Dt6_>D-JFb@NlM
zN_hwIKfu^rCP2L%I5@}<O{x2L$1s5~=l+vn&3IN!RX$ce<ETL;J70%SPcqUda5%vz
zOROyWfk9O-Bx~@@<&cpXyUr^+hN9bQ%GU4mnjhhw-~(A+4qI*gga@pc-TpXoR`+HH
z9PxPK^mv}^1<UU*EZn|43<(Od*%x0hDW#<f`EK3xqr&P=DxKzxw3+4n#eS);)&2Qm
zdduxVdh1z!S?kGV_s~2#0?C=Wh~Z@^_ejMo1_5ef0x@OGNWT_fp8hofU}^KdtIqJ8
zcTfQeU}Ox(BTk@F-R@ItJ_N&n?=pX|W>@;Xo3isOc8eVPHroya#WO56)?O9apyZb{
zIV0&F_pxVTFDZO2EzI1YE1A_BF`e38UG87hRH~iFI%K896eI?^ij+k}L<_8;(F^|U
z>_a6q_D_Lif;Wx3XzT}Ti8^7{*u>N%KCef=`Ifdn$Y1w<msvG2@m+XPaY2LaebN})
ztpffcQtnQ*VjLcZTICE~sg$SXbnj4q>EoHj;DbZ|hF{N+Ob`tPw8f=!@^v{$2$ni^
z+>sZXVWspX)B86-4+j|qQ9?or@b#hX(x^l#r~%{}vqH1N&)N;t=z011O43qhe`*2o
zB^tu)7uUa@<I8Kwp}u=}x;s$Tt6wSj5~a4L&g*0oYw&E6H#aFc*~FSlF*3J%_E4N0
zSlo<>W;Vpm_IRp(-t3-r`ug63VjJuAHv^>9J-KW`hXlpN`^5Vw0E-Lbltzu~LB)~l
zh3kDNGuHN&gQFwTn}+)dp1YHmhKzZ<zgzx;WGU_BR!5B8qC6gF8SJUw#*G^JSXiA2
z`P^{fgL^al8%BnKDp@~8@)qMx47!s87ZnX9tyaZaN9;fhCsqkLTfNhAzP4v3>-!B`
z7hQplpDQcd+Fn&eUbD4Q$w(sW6<{(!0j8!pi=&<0Ms>Min}sxd&Rluu389xFIR?6n
z1W9xi)@KIo@A#aERo26S94OhWcIjaj&jL0c%5#u3-KJGU)hE6&2j{Sb+i;5xzZ&2x
z0)usfL;PJvKlV}R9auoZ>w+U9fbIdSl(y;0euG`@LHTI;VCZ1g_6Sg-i7lbrJ37jL
z&%wZ8yPVbnsJwX`VD^&cgHuE5Znv(0aVNsvX`@D2tHmBFFQ}Kj4ZbquVRP#zAGq$y
zs8KFbG-#-tP??MCiFpsR1Whn5I~=e1BMwS%9Q?XJb$glS6;%rvXRNft99KqGWk+1P
zU9@8Q__1i(Tuc(Qdz5WOUV35gw7EqS5**&(9_969f1$-nC*u+J<$)@Ydj!AP&TP)<
zJvsswM!ZPRuiCmAtyX7GUEPID8}*^JaRy(08FpI@cL7ni`K~h~2M(H8&a2^KaIpkP
zxqvyTb_%ml+@e&oEvO%?AkX9ahyoaP%vjBVYz`Z5hu7<HaCF7HB>ve*Th5qY^YQ5(
zYpG@dc^fz(MqW`KbWzYl6;Eqi6A{1tS-pzKsGSHVE+K&>a08sg^u@reqocEkfUDjv
zxouF>Ev?D(z}8BpE|7pb0^>pgV<(U&21rFLwb}$ety_NInNLl1yIibytSPCP{rcQ^
zXW`8U<}WH50LpuAana%OJOXW9uS0bVCCoz5V-fJW`h5|)?#LZbq;vql8OhUSry<Sr
zHUw1u@(qtGA$67-xusBr-Q8FTnxU{-*Z^WM6VA}&060DI7Ny1cpg*^C82NXkKh8P9
zwpTBs;4t61$k;}KuI%8cx^$8zNLbG}4?d?*%3Cf`=wsk^zghXX+EWzEO0M(}qWyq4
zKXN&w?q>^%8~}l&wb>ps8XFsGE_P1V0V@_6mHG@-l-RI#<HRJy<8Upver9Ig>8RGp
z5r`n%g=I3J6{DAA-DEk$B=|QEZXB0#n)d}&Mu>5r^RpACo5j*oLo_DOIKcQ#C$iH^
z5U;b+ZzdSx6}9(sm!(0M!$FtGfv`a+{hKI@yebKX#QpPGMtuAOU|^b>SxJCESpvb=
zys(Y+qUq9$%ZteguKh!(G)R&md5D{vTO_-pDL>yUV|l%gcL-{yr`H+kK<*oUJw1Xb
z&Q!JJDciCW-(P*tNMKxheHus{BPY){c<mI(#7NatRkdCf!JBb4R*T;R9H-cNw~y9O
zVv?*Y8;lBJWGKi}qznlPld7Q=<Zm}HH`j1dj@R`4ipy#R^g}L<(mj7nnogH4?~K-a
z9L4-BB_}T|bv^DfN(bC29FeNaUBfMqkg!XwM(e}lo+Aii(3%=Zu1q`kyb5|uMmR1v
zA!n!XiDV3L4U;R@9BuAIl~Lq!pH6NAeo6?`VzxH>)U!)j8!r!WxzZ!wLkbj^oQ!Lw
z(d520A)ZP6iE-~df^0aIy(X)ioRlRT6a&gVPF%?p9nllE*eWCE^13{)$X*7-1z4D|
zjkrYq0{qak&Rt4SdaCHpML5dXe;gVTSi_#zJzfMmN1tg`DKx&1Lbn5X5njK}w0h+y
z07{2GZM%mdf-279Hf6jl>fckr`h(Z5dwX}XMOzCCN~<rgulFkB@<f7<{7*7h5yt%N
zog97>p}g6B*VJ4T;;XGx7)q1NLTnQT?N9Ar-}w(#oF_J<JvlJFU+TlI=XvQKm*}WU
z%BscT+>0qvMyn}4Ph`ZcUGLt|Nqg4c->Xs)isGI1DVsdX#MBbC|BZ;Co2aOOyT%u(
zHxBF!47wGh4KWi5G;t?EuUDBwdb)`|5gBvx(8j$>cQ7#MSQQvY$3|V^rQ3PX6)LZ%
zu9`X8#xosvv0YfVNaxt)u}$(E0B8Fr4p-y1c@<qK`7s0u6IJspjajnZyUd-Sp{d2H
z4J}+Tu>rsp4BX8DxhT1g6SY)J6D=)sNlAT0MO^{i!0#CEilun&(b56Omj!T|CVUUc
zn8F403&0Q2(aA_3-)_#mxuQCJy@{^GQ(T%8*89U4Bw@AOEOHbtTEmQ;I7?ArQq3<&
zh>9&-pzEftu4rGah8CTWAe30pcYa;QHO|0*i;JVCe(mO`)#iFLRQKqY_2sr3U)E<q
ze`vEztMzzm{-{^~bhMmqdkGhJ7y8k^+_mMQqXE)U@gi->n2v65An;NiAC!pSNQd)A
zK&on1sDUO`T~81{RvUoY)UYli1E?HaTny9ky;(l|_eix=S)s9)<1#=i-rinP+bW_&
z6@~lq>dNIkRj~2VQtRyeyhY1yh`Q5$v&UZJ*;{dgar~xBxo*vyj1IM*>=E7rPbQ$%
z+U}S1Ro%;-g1})Zw0Rb{(j#dPaw@`p2v&>rJjVCZJHrRb1Ip-J39j^XdpXYA6<Pbq
zJdy-l<kNfh=lvAql$pw7J3AX~j^|lf6(DJ83k!?9X%$V)5`zcos^1p*kypd|amZm6
zne;FCKcF>8GJd|!{6>ch>%Z8eIk2d{m+$|0(sTLdyl(zp)k$$<qvU|xBd=M{cJkF8
z$@@@|2Fd+7S_F2lWQKkj|G;XSi|#k3?O!x`$K^SMr8T6stf)CX0%~fe`&w_BP^GKu
zoE96`4zCZ>4(n%B0y|X9#LJiisv_dd=TB^GMhM+o^Xu|UN=ga~<tc3+u7M*F(E15K
zYt@%q-n(KNYn8Npi~`wV(&B7XbyO57(=szpA#S?fZ&2}4Qo0&jk6xxABVR(CURRIJ
zEu^HRWK9`!%*~T;N&>-H5@cy%S!tEh8mJOoXFj$@(jf>`mHhl>SPylaoq_V0z8xU$
z<nj^XxUwu})?jloylA{YFPA6RusNcI@4r0IXtA{cNJBRRh~!}{9%r!L-tvLNo$(j>
zQ~l*CgPnqcin@pysZx@Xw4<4m(z4f7t)eJ;!Z#1VYObKn`W6#YTD;=yEe85&Na;e8
zo13Y-Muhhn9P;@U24?IQwF+RVhmQN*^j@aUar6)NXA+two_LLZAS5JAwkdXXZKP<P
zQs*TeGGz2f+@_;;s6nZ+wI%l+?$<hAKRNm%BIS}OrvG-0<T~}7R(>CPkh?(nk+!tN
zHzJ=sTp~20O+kzH^td$55}%Mmn>G2yE?Vrzli>|rme%yl@|mP3pmefyD;S}sTO9|x
z_{_A^-leshhmg3Z@woBwkos_7T}|D=Of5GpZE3!d?Gzb_)a~UVP<yp3TjY`r9LD;r
z2B-yYCRvwXb@{{lGiv|(=eTHE4K|s!XUY5uFlr_$z(vb;(|Luy-&jP)!IAZPY=*#;
z=_5MlxQGNIZ^@UEsT5wPr0Ch02}Oi2NAb(4j{7q^zQJzOrCODrL&Jj{rm>i5%}3qB
z)Ch3#V?nvJZdT?$veN+$SS9mb!D$KZ^!_~bXpb9qFr5?`i2*MRtTMNUz43zwx!hXN
zAdbqRrHi<20`Ab*3p|0mQfa}l+Iw`{WFUgrx8Sl^+`vLQ1%wW5pQpT}W2EAw;@qAY
z`!peE3)=1fVur_&n<UV>JT<5B#igyGAPU~Hc$Z+3z<qVI{`z@~mR0KO-_r?hB(k94
zN5r(tvBolk+c#}KSOp!pPx1bEb?XgoR(4hlLf39A)ugFI%Xfb#c>L5<z4di<R!jMU
z82JMI&N&CG78p*CP59z>9ztaUOspm!o-3E}(V^h><V}3h@H&s%dm*<bYW85g=svMI
zaZL{o2dSY}ZnraAyUxxI@H_D3kz2S(ePLt2;C2jefM38k9Edm?IP$0d+Ijx^4H6P5
z@h{HdAkVmQqbL4dJPUNA_*M`jde|*Y5%k4X1k(a=3g;T>JE}~Zm{^&Gg@q`SqXSk!
z#psw6fg|L3Bn^HyGc!X+>F><-Iq0^KxP!FYtZG1O7|IeytIos3lmju*yd*$HZLquI
z2~q?l8Upfhl9JH$*kYi$ILI;LI=ytSXyk5QTvGGppxQpPhE#iIY6{d)KB_nDBYf^=
zY&`cAa5oAhrwz?y2UeJxnP|ne2~ft$^#yliO~qlxYa+ctmS?)#`8u>^!TEzT{?m#r
z9LYNh_$fbxn+w)rD?au7YN;su0_Ipt3zK2>S`C#?Bu*v(-~Z_?T7pfn22h{OW~8Q7
zRqZL8?Z`Hh5tG#Yy-z$wD!&zkHdJE<ws}a6^vR^LSJ~}Nv1+*pQ^v|mpItaDhlK}g
zj(6$MdAe-$9v;j;o*Q`qL{Z@A-X59zopqeNHIyV!jz>xYt*$_g!xQ5N(fK7Q-Uz2^
zMu}5n8TI(&yxG~aZKXYXV0x&tTG1yDUA%ciCX+e=wI6Kh?=J-Q7Ea49)8-6y@~x8#
z=D2ORtYu~Db*(?juhTtmBV;5J_CE!OLX7~-{X6NkPIF_NFNQ6-03)MOx~azaX_r1j
z8r#Et9?iT`+2#n4%_0g;<pM`1wK(cFm(?lHY#mWT?L!)tmJa7x%Z}!~dW{+SH-o9-
z4PW)(?(I1qx=7Q;LoWgp$if?rQj-%BobQLyagbi5D!IXW)(4Z)<qctTxK>^_H~CU;
zE=KU(`HNCBq(7%{u8$7f2R9|xTISPTO%0i`mT50Kt+=>q?_D$k2q-6KUx1*n)a>xm
zAdeT1du_Fv2D9p)NjM28Cst9T%9<bYy3C<_d)ywoeu3ct4xsX?L6C$B00T6waXqDd
zS)SWqBYrp@ujP@dYxb4i@>W_(1kC`_u{zc9U0KTwqLY(9;A{v>JioYfCZKX6n4B`7
zslT|J?ei~$>hGL3`5X)UK3B=RApjhlFpGtQ!$6-|V|l77XfC<mtMXxb!}Dfzy(UdT
zLEfD8WA!p=U>hv>hMy>k93%L3NgN=~z=O4&6l`iAd`FaCoRB9+M;Det{=BUMiHDn$
zf|+X<i-m_RwrO?b;DKxJI`gFiLmG)<<#Qo>)P`q+`8poON=0npxP*jGr82%5(|ax4
zPn5YE(l#x!$BY3bt)c1YJ2bRuz*XDK9~g>+Qf}lOo#vDpVMP?HR<fzRo0gUh#5c0;
zo}<N<5=F{XPTNCGQm}X~L%u*mc`*HE31zG)u(LDJu8!B5S!R&?Qwsoh3;`Mgfr8Pd
zM@oMVhDNQs#R@4DZdZWf27UD7BoE%EdrI&kvU@p$m5ut4KXn{8QoxSop7O`&JsNkX
z3j2U+xp8|(S5Jfo=OmBO$!_YO2v<c#&DB5eK1kA_@llWG)Wfxu5frCfra`grZIs8R
z)}pSuW;Xt|+nnV#1vnN%(HLe!c}eAQS(Jwr*p!mpE913=mnL))73r_t&ZjTc?iaG}
zIevaV>x9`B5r}=0!h=?FJME1YG7z4E7^Woc55_L-(!Gp?hiKh48M;a<cIAvPUhZHE
zuPT_-V`+o~nUX#G!$h_qY_M2)^(3hFyG(jXNHF?mt!Sr*eTt^b6T{y{31=nX+?Lc1
zgMsQt8*+>x1s#t~*aemOFoJC{h2s;;u>(meJGnxuqXSOcC3<h<?*4(Q*yc~Jo~BI9
zQz4<Q?YRvs-VBKg`V6Vu4wXfSh?c(t2Up0#khddq`|Ps#$hQ<G?vO3<N(v4S%$+&6
zd}U!6lAVvWmEiHL1}>j3zqZX0^6%U6Hj4dqPaD$20G=fVgAzY)X-;6B>nl*kCTY-Q
z?|X@A{i^(<7X&W!;T18#l{8Ju*9tMVVI{*+TyzBZvoS7&JHt=2F(BfHhZe4JBOBu%
z_*RMEe>-;n`Bnlk<Cm3B9B1b<mI6hwpqy4|AI}#mzetl~*7q)4t9r3VF~|JPrx-RH
z;>DZDqCi6rGAw^>1aM=9NEtyuT<P1eo!0}8vC-3?RLl5WLWya#@I;^eh#cr4BNdvg
zrNfeHdhOqp<}<*uIEAihimI;Qo}9&*^leN(sQ`gg`1cQngL@vD0GFi8nXO3lbzxoo
zRd`q!_8XDhJCmV|mPCH@$4^O-JQ1Pc!D?R5pjAJ@4L`&W7~xpt{54X*eIrH#n<q&b
z`i_x<#oq+<+$<jViiv$Er6yJ^n@*O@GqICkC+)a<ef!iYPkyhF1f2)+>J17CWR!cU
zrvaNeWWI@?BX(%6aRhTr>IDzbeK@y2hE}z&c)ms!`p;F!*1@c(F7(2=I5kPp#$Zi9
zRu-002vm`hnWS*n$WwgB<fbf{3j(;Q!bAW8mQqp83|WC#y71H)1$i8Z81M>*g*BMP
z{`F7ry#)*;L=46uv&E3TSOj?C{L4*|Y!iF?iPasx4HvslXz0T}XpGrzdCzC2zV9H#
z3c{!hvlA)4P=f9jCA~!cV~nD%?0W=`lwzOGOc~QzVUsSAKQXhE966;XQeHe3$e2G1
z>#a(l$G+h4aFhe%@Wb{=3WNlpRnqy4?~!QL4StVUAVe@#_9PR@>-%b1Rj9-u_>bvV
zYop9Pxsrr;d&nOdW-JyS@whzn4Dy^ra?iutR}NYL6-_pZ|Ml3weW=%m5CrvRP&l(B
zO5SCSn8uDJ@h1;*1q!CeBDp$l@!V=pcKqV`h{-Eq#OUET=BG%MYulenB2Uqx1OP@C
zmYm;K{rkW9NCKvm=Y0fcdY;_IB}$*8di5C!6tg1x8sLf(PW;yR2pek#VvN)-XTQL>
zAi?7)A>j)Xb~VH=(E5r@hS#Q-tUb&>bQp$&IBF^~LIxoED^?dj9B{cA|1)^1__wko
zHzZZ7W;3R7??O(~RzM^C;vc$bD%<JDZfJUd(+5&b=%zdz?|;^XyQ@5#8+r2e@AIPL
zBp$SS@avVKL=uASD=L^5T(ggRDk1fs{AZ3DMuo!rM3%!a4^<642+sF&N2H4^oTGR~
znmc+1dqPSnYSI6-7s7qVN`O=QITQ#m{l|@z5xL#sc^Dr*cp&eL{k`gnFW-yN!3ZQ*
z0yG=n_CEQ~0o`riQfhuokFd{GVQKxHS3l9-uD~VTG~)H_OZp&#Li=1eY%JB5iEg*4
zAM!>Xo;R%-3Ax!tuNf&e6&inSPk0Db{H;R(LPY&jLOw+E_M+>^&okKP)IDJ-ddq8A
z%X~1d5~4rdw|@=`pj3HM9i}XP-i!iIgXzU!|Cx4qM0Rq-A>Ft9XLYjYfBf=;dJO&7
zY?dsRPj*Io6u?jCfU}mSnLm0s?!Nr@_y4@>9`R1AL7H1Kzrr#XOZPbFmE!%+!`$Ky
zItH5Y9wTfyBdv}bd4&IYl`_xz)}@}?w<dmG$Ba3iTR!|d)mA7juSxwd4OgjCoFw#A
z(pqzwn)SbWiWF5b-OsLR7bwS5xQf*5blwME|9%2GO8|EOp+TM!EJ6J4g&nvHXq_U7
zwD6am?Xn?|gy=_w7-WjSi}mR|+so#!%4}zHoM)S{xU{_U1sOj6+(SxA<{GTnz+P2`
z4Z76Xz62V`AOAS=60Tw>Yc%pk_Z(m+a#gdxbfnkVq(R!Ky%_znu}YklOgO*rYWQ#(
z6;KIjqZp56a)h+VgQ#OfwHVLSr>@Ey+D~quBeubnnOV-S_$|y5;T<fFXsj>xai+C(
zg%FNmS=q$zzF_lkgha67-++14n}1NL$>R9`%<@XqXGpYTzqi}0jI_I;A;0h3(x}&2
z)tz_Jod_8y>nVB3;b|2Yom8r1mM~w{#T)p)5mzOZsR;3k3JXVuUZ~}a*kKEQN9T}{
z43&cw%Lmrqp*X%A&|m#rARo!|a*ERB{G$OwGH%X!iQn~Hgpnxci2WAZL(j_va2m6P
zO~s}%<CBe%Uq)M+u>C^a70%NwYu=lsA0lWB^z?@ZA6--9Tq530{?qblZA}Bt2j6Ph
zPw^K4i<c$elu>HA+>?p;W|mF&9JR8T&n3mSWK?7>6=gdfEE3|Q0lc9#Ltf>|N^@ZU
zA#tV*5D{yunSdzth=PiS)@0E`J15MIjEo!_7S3QM-|TQZ9BW{98jocxAOH~Q{7K~%
zAXi*YI>P*8SzQv1O^tx%%kT8~dvE3BUSZK8#1UG^46sdAYnwlCab?xys{Z%~=xcWL
z4Fj-aV4;t<g)c5@)<WiP7rqs~yn;SvQjk+GwH$eaa%%~?Fyc$Is)p3#(i3ABr>0Ct
z_kM59{~u9T84%UhwNWG_6$!~vx&);gq`Nzn?(RlFM7m45ySqWUyGy#e>)UwmeZM~{
z&M<RgpS4#!@gi9^Gg_FXFy=8AMJhV(p?+3Z-h`JT_~>IPqh^|`LR9BFcx@6<7&4=e
z*H@h~loM~f9LGd5We*kQOQ(4`Z)X}VeBRFHi(mWqd)r$*2q)u<CXbvsxvMnVySchP
zPe`VtD<^m0y6b_1G(NiYE{Tcu<w%o8SS(hh=bf~|9o`>Y6ygE_RwYUWc}?{?Yg5y`
z^vg%ft5wvkaEgR1UePpW^O=j)W60uT`{BVtZKGWmjrmSHfTAkE=VH<Jh>1!*oSaH=
zKc1xn7vwt(UtV83TxKOD&a12T%ch$<Im*D`V2oZOqI5D+Qd_qDol0D7?N!L6yaZEh
ze0*FKUy$ovD}-D&+xA~`qZZTUH9DBl&Fde}4HNBob7h@!$|VWf-x(_Qq*MGckc#i`
zyP330!{6XWR7vLBFirkE^j1&SS0w>%-$0e};>+L?5;~w0Zn)iuQy9zi^a=z-cVqmF
z-pE4S9DExD+xr!Cm4*EaHH+&VE+r)<yuq-7-xo9lz=_m4J_PPt`t#QrpU(#Ni#z8l
zDlP(D+Gyz_X-bE^C&k9$`ElWM-(m>ho;0yAOBGIzPfdWvq3?rPN*icJ%D+WJ6K&M0
za|~|EuV9q)1!BCHC0TW8canyN$}{nHK)jBKsC|k?YiG|i8v*FH$v^Sba;iG*(G!7y
zx_OR=u16g3N>-xLc!gtOVm6>9!-H#eeC*t)$x;Q%ofK|vAnupiRMc2lSX>;Fq>l5m
zsA#aen>???(MnUoP7e&F%%->ss*;T*ph<MQKy$FpW;bh)jr)EwXm^*%oU+*^p-O>L
zK}w0tY`EGforowe*8?S&eJ6k^XT51L=})-A8TH49Tl)zx$XRqo^i3)%T3eI<clOaL
z^vIe!HIzD+>!oz&Y?eb89wAJvUw*m>FWIDw+4(N^r*0VcR{iuFj2ahFXZU;5u{3;l
zJd|YL>5t3X^j#8#Ui(M%+`w%M1#4(%H94xMk02vUk6QH?(5jm`Y`!ODqT%vjP434;
zkK*SSlzo|*BhZmaS$WeoGbXQjopP7NC{qd6wFa<J%0%2O(yXmXOCbkiq*T}A@cH<i
zy!vVjAg0V>@Lnr6vAm?DCK89^bk)D&3<#uYr&{XG#KU2%b0@K2zQHx&o=~DulJ)^s
z;z}~^G1>?F?3ZtmzOOEM2>I_<CDw00l7;r@&e`u}iC>TRK!|@4zke^o^3h`Z<Xf7y
zU*F#T_CcKL)i-VJ_gp9;Kk#r|8*qAthrcL0zA$58W(4u&qx;VaYI>^d!k}V2Yz#dH
zoJ%f;BQoyW>)?f3>dDNkSjJY+Vc6T-iZ!-ewlev;(l(`cN!6=Vq?rIj>y_n2yX@@k
z;O)q34@x8x?Ujo%Dl_ArU+P^`jndO0iiuJ|<p1SF!*k_|)0_y}e`JmegpC_NN1tZM
zjsF~~C&D)!v2l)MxM7WUHjc6}!Lc!;bsu+{CXXJ_S7W=FF=VdKe>)b#Jaw><<>wyf
z?ND{5DQ2@u25Ayf$x|%^DAeHKl}8)_!j&uEJBiLZA=GU@(Td3^Lg%`Aq3?dCU9uOV
z{-?e+*+4LEYo!|uF1mk|<QG*{<%Vhfj-v!9KTd7NNPZ;+E<>Xg6Rw<^m}-Vc&;^Ku
zk(2x&4tY4fLamC<l%;^s;0A3DCZ%}=1N*PQ;D>{5C7=LExGfM6L!6xz926)kdOM($
zyj$@GOqsXiRN6{6hmyj3=V_RmSsaYyZ5a~j%>cnAalv?&txz#N&Yru)4wuQHqT0^x
z#OYIzl&m!Z<04>ID$AFdbro4OKYUX$_=<{(jEm%qgDkpJDTlmc%jPeiCrx?Aw!q^7
zA-T=WSM>AoQB+vOYVyy#0U!bcsmCqXa6#|V`g#+AuceCYpNq@B)_?k^8uDBQto)kY
z<pzDG1XllDijvoO<{WQr!)%rhf}36pQ+r~cHGDr);SW>tBXYycVFZ)f0x?OE%-=Jn
zbmz+1e-tB^5D`NhkJqOtZVGA~va{+&*Gu20ex-|ZP4TcEv;Z?uv#G1`Zz`*+I&|2N
zi&7#I*~u6%ZDrjN77IB!hVL6l+uK9PhzxY~#|}ZqQh&GbIZ=Ar7T<DVaua=JG9n^k
zb}<7*awgDUAS0TSRqg$TE!d>~UoQaJys1c1QiO_z;{G6^m|_+{>sfR3>QjfOyLNp$
zo@~v8n(tK|bEbB;Tzzg4G#jmt2dbA+g`GiTp$dv2vHfcLt?z7`8_tArWshNoS*?1h
z+h!6(3NJlUoiyff#^noxLq*+*yQ%u!^0H@N@g&$N0cF(fuGQu2@lschHl>~We#_0-
z{a<KhKY%&VmM%cZK{L6&zCJ4}zBNJz*+jj|Hyo<-$5$Lo>|WJ6?0!xzkp61i^v-_|
zErQ-9i&d;g2{E8*MQW2BUtI5}5lvo0gFFP^jiGTO0{vrOA0PMgj+N4pFt9Z8$L}B+
zfx$@0EEo7u2AkB%_3m;W9?53+2rlR}a=dvjUt;6!W&7RTExjzPH^|N}Z>-E*UtCbT
z@CDEq+nSO>Y4RY_^iY<NK%|8RceB&U{d2p@$m`(X;8^iaZh-UOv(OVWDwEAjvsDw0
z;A42-*dLLz6$=y;6S<t`qiw<3Q;ETgQ|}@Ltlq*(mFdbaBY$8Ju{<sZV%m5oCgpHG
zNfo}=D+RRZ$uZ$Zm)q#V)~(p-&%2a(<ME;Xa@|E!yA*EvcjNkeIy!E=yo4}-uM*Ky
zS?=RQTxYqWcKQ9L4mqJpdf6N@{7)UwqJDITNXrs=H{o$B1}l|0&hoHnOoAv=zE5JR
z?g!;;9^SA0XGg!TWZ!@Z<l@u<H+RG`1$eKqN$$D}Iy(g^+<;k~n1mSCPQg-*-udh~
z5TO7(M$7;eAh=1ui4^i9bo!nI(YFJC-wejL!?^N03b*A}W@g{X!nxS?X&Ol_dd6r>
zd%j{Zl}2T!>U4vn2!TKaSm0xm`)XAOuP85V9hk?t^NL(~W~dk!=f-qCzKzC07a<-6
zQRUuGGb7?~cR!V*y2dt2y+}E{US7E=PQ^fKjL&b8F+LQZ{ZhTw_H&I(YD#^51l>A`
zlh}47fJev*nH9PcijP=s_fC+xv#@=2SY54~^+Ol&J8iV=J3$1=9R+5LaAqWngH+}z
z<3tn#4*G8@FuMIS8c*rIaRv0lRntYp#q}qB3+d_Td@+&%<bkcg;hpW|)Ko-V6j3Sc
ze4NS*un$3V`geb{=?84omV(ssP<BLAPT+)ceEf2d`z*P0Po*r+)J|5GE`e5ay8AKX
zcWJX@*uH8{j5@i4h8%@~iU{?m_zuC3QEgTh>cmtUCrE``N5skoJVTRp*ydOVv9tHe
z(nE0D<vJ9jn`EZvv&dEZIzr90TJ9Eeg9{c-_ra3c>r=xe58J~)9uO=wTGeo&xyZCC
zHJj0&E)HT!g<0>Sg3Br`0Wd<X>d<xlyqd*7<3YwuVFKFWK6<Gh9}UO($TwztX?A60
z#U@)yb*_Q0=iCNPE3{V^y)OwY+=oyTC0a64vf`zR_1~rGWFa0>rH)@^UPdW#*3i!H
z9`0>Nm`quy)|m>Jn3P*;eeQ%CRzZKGB*h(p;VS^*8OX3QA<n{K2e%$qA2NqP$XBg*
z*V*nZ3tL$^HIRCVs2y3TlC7AJ+IUoENu7DbP4L)MU0r{-m<SRyV(Lq)6TkEdDlV=t
z$+;>XWj75oant!!EX`CIQ)APdytSd$FT=@f?xy!y1L$RPu1nHdO4rLx0Albnc>BQK
z&0rej1|uqs7oBsq-<=bK(=7YO7!L{lRyWIW7&w?0gY}1OF+l14;W*^*lf@IQM>_wc
z6`Bc>@t0$z(dg`36(u?W{M13Wb#7#2aD(e-QqPk6;3HQ>QYKkRy3)+F&u;HbkEzi1
zsvk5_L8`Y#(~$Ticb?|2&Yzg2y@E_xdZ)s&NMgZy)yC7VEh1}jt&gT8_rI=^zFCQa
zyj?7ei~Xm+Kj3>DUxWh13ryi(s_7$=f$SN-C@WR7CuV3l`>i7B#mw?$r-3vcj%NDT
z4R#ngXawK3he?lq=Loo3UW$T^J?#580!~F{6i8mYx#-avRqPTQ3fd-WT{?o}4C~#t
zC~fT^%X4llO1nEaV?)c^aGgV_v-EC#_e<GYlyZFoNc><dVf|D0y--tjj8uB;05TrO
zoe35QW66*A9#<g{_oL6J<3YjmsgEyE5K*zJJRVN9IPwZPZ7z_^5(2YEMqY0q@5FyA
zM&)u$9)R1Ov`}t#zt_62ek9FcI)hxDLB^jYn`Z(!o`4-Y8no}{C)0L6-)=y^_k8#>
zzt&#H;Z9kxpXxo2#O3+$K)H*pn`(>+>6kj)Gg#8phc!7#iKJiXzwVhYqYP<Ac>gWA
zM=R($Ty9Kl=&AQCnzJ|QiK(ek{+ch~fTAQ@_t;s;lXK*3W?;o#lU?5vHbhU`wZB%L
zedWqY;_)L(_E0}tPmKRwkG8!q@Qfy?)E+hX<4V2ys4>E7|7SfwKo?9X%{)p627*BD
zE@{_KBgIqf;kpb`9-vem%k1_~i=jo%^Wlx7;n6Xt`xZCGK7>ZIETg7|g@PitxcISu
zdrU$ii1)fTDqj&Do!`gr^6c!+ai^<lauV>M#v&upXU~h>&#{D>t~(XwUO^zu_WQu%
zNE}$UyB{tB@e!X#dCXpbngPb9d6ZPe8ugUpkEb5z`C?eKU{FA#Q6-)~k;LtAu)@bB
zNUc#@R+Dp;V9~VLpeN?)%B#cIK9atKO}d$EWinX=s5&q4C+6qxR(m4aK7_@dF9r&9
z2ml(EHy_`)se;1#WZ|4*k*YvFI35oxK*;Wkp}oJuYED7^%3D!wz&J;4f*HMB;yajY
zMUO|v!gf72+fFtzWbp-2?%IFI7g6O{`=UPGRTPt;jS1@{!0xR?K~<DSUhFRteB4&W
zjj{^Irn}G3^@^<6{uFDb8eDzC%OPfaYrD7wa!ZRdeML&gg&#yV)Ay+^RTAwqS<fpu
z{P62LAsARa@%7U^39bpxceFnvc*v`vvU`LeORV$C3k!{?AcvHiDBSrMY7Gv}l5%?l
zFBIxAZ`_zMkp#oEY6Z{yF_Vghy00;Ei>4bVOXRALf4whpm}VgFGN${H29jjQxu7xl
zsqrmQJ6~HO?!P^w7l8W##4gfaT>u#nz#DzyftXT5Y-xH17V6B@+%y)#h=k5y@2QF#
z^5iLtH4?>*hLTvvrlt&*B$bt~fLbZADSEPThPym0)~Ggb{~mO)9x3EtYil}FS6N_M
zX(<foyI*BwgoV2S&>kJ3qm|Du$LH9iFF)`{pn9`A9~j_)8$RFAAd$d?=vS~*;tu?V
zP$66#ZaeazM{H8uNE*>YTKs4Defo&)pWpsXi<+}p;XCoh?+v(ZHpJcB5{J`ybC325
z^rd3IqkfwiKQs7BX)B5cK?s-{9U!%(e*beRx=;CsaoJsqD#)w`=f74%PU0+j(3(EV
z51<qo$b8-Fg;t#St+-K2w`*2Jj5k*uFXabeD9h8YBKF>=c@r(OZt*iVd4NGwQL_u3
zu1S6C+fABlEp>=gK82fRWap&hLQMbyg=f~U8*SDABppAdkGYIh5>j7Wdapun_B1BB
z+braI(wVpdNzt8{?aElCHtMF|&mx{x7}g79d(V%FlYKjznQ98<`nRRoA{Trz4;*oT
z7=X|mAPqkL8G0zNUGLRdf&_(xFeeNEV%E5EWl&HMdfSd|U3~n`#s+Dy6$VDILpv2U
zwS2C;$JPCzZ}SY`9AZ2iO{D@l7f=;?n5{Hvn@vD>^0-{6t{9n`x@|+GB_$!7;&SaS
zF!`?DU@KF@E^lgTs_M*EPNP?=KcL#%<U7*~5GmY`9kiIVnkUQ8k{!Tf?fNidFmCGP
zbUhjN8mQe(&Z=t4l)B&F{5-Mt`_)lhj=%<BKFlRgsaF?Sx2Z9~nN~x$lyTFJ1eC;$
z-!*IZ1^H3t8W7HMF>Fl7fT<^%yf#B8p<3UIkTV^>u@vtUpJeTebe2PRKSO}PMWo79
z*^oet9aPDxWm?=$vMSSGb7f2Z&_ACP8AeyrDvmFBgFh&%O;(?EcC8Hq0g5kN7aJ&5
z@1iCc$`xu09DZnh@JVav6|DLS)BG8OGU4i3YWOwJ25C<M!3!7oTUUudAjvd@CB<fF
zFGCBD$b9Q0@IU>hF9)kEG>jjDm@W?H$Rd4weLFgjOfZ#{6be-pF0z~Nuux5mjUmU6
zo3**WGcuA6%;$cFF<UHJs%T#30B5gn)6;Kz1Gc{!2>D6V=nh=i1l6;#o7H2|{87^R
z5fGC7#aYE2)C~oNs^X?d8Uotde+t!@v(3r%SkG5QHU?&Xa_7HGOJQXU)^hlkHW#pd
z$FbEd&GkJCDc)KcKo`;!PaKFU4Cu;dF`ELe$laak^y=FXM$Sqs4C&lRFSC+%9d}>s
zbmqS7Zi9sx;H{Zwth98>wxek<3uoLWaBZMU&?@)s5Im8~wxL%RzgjgO`RaOrgVoUs
z;Y7I_T+%rWO~4)=<K+s$F4vnh_%OtX3H0j6S^n1;_gn^qw6@OQzt<K*fF(5(Qzxz4
z@WR5qhx`3yW+qj6SvevCB0vK_F}#0SxLKr2lOq)!*sV#MGn|OA_N^nVq&m^j*@qp)
z4nzo4aU$%>sP6mR&)D19k0`uK|GbwNeaD*rCG|(#-68F?8hc#-O~&+)_r-g+EWxxk
zWxH~nYt$(fGhE0EEZU93lgm|!reNL+$2ff#c}c!6Nq9j$Y$rWa{i`EZ1SFdpZ5lTf
z&JRMCx9^*!EBV``f|=^vGzPHfUfby-q$jr`soFm8zw<hq*>?PI1c5qQxGQt_#NqSx
z1H@KfOwvzA8c~{`pI=>ld6o<D4G#?+2Kqbt5<1(P{c&Sw<)$hRHn*1sdU_KRDx00w
zG}>jLW?Juy8GGNBxNl>PDcvulq_ioW6drEOlmKeK*h{uTn>5J0hvnq~zF+zN_BLRQ
zl}@Mw!}goXbKcF}SA;M}1<$?9mQA7}UCS@sztEa%bI$-Bg;@i&pH~cW-NpL?J|!EH
zic_7N-Lw{8VGysO>P$RCGIIHATEFNMKGv5;&}Ns4{n)_z{Z8a={Hp6sa^t8OXI@sE
zmJWZ4OsUl_)=M|Oh!2R-`lUtg?lLIPn7RMZ`Ny0u%nu&Uh`@dT!wH}N%~Zb?4%E^7
zR?>18;WjmngHK+lcX-lI%A^830fF_6jr%_C$5UY9kmGtAybm;r%<b(Z<>f0%#Jh%H
zCBL+HxI7A=%g&^V61}x2m~W<y=(*s$R0nP<Z2|!(cpS0SwlftcYimGrEWfum=eOaR
zc2!xBWOiY0(PD+uDPThr5~VYl&z|KsUj?k`ayeuPvr$pGEZiWMmRjX2M(xkk$4Gkj
zy3}32u-_il`}%dIXlU}Vyx{A8%zwQAguuz9t~sqFK<J7VffW0{NAvAIE7!+%aiVXw
z+PGL##b#Q;xwxRI%8b>TC;IeVYn`uV1fn-Qz7Q<yJ`l90TV;Zw_KV9&kuTlU<aINe
ztsvo?diTwDvUWp@ZKONiQIpf_3yK%n5qH;I(QgM1(}dYLy+W3C+OF3>S7DrnF_*)R
z`3w@v4{UIJqEAVzjX&j3z{J8$NQ~<c;SiX^EU!(?1!!cy0ow96ob=77OYeSnxo>WF
zhy1%?zuOX@#Qm+Hq%^~QHdC0utRRZvTQyf@26lyYKss+|rCoA8*keU7({egj=%gL~
zWVLsD=;Cr6y9*?-D0+G<n$9OLg+gQ<%}lZZcsakgX&&f=OL<(7ot0!|ZCs&pi&H&r
z51lz{C@4%^E_n>O+O2gny8u}rk1x%<sQ|4*CiTnE!s5-KXrU|?(6!KNPO@GDDH_7&
z#Sg8<y66+boy$3*r5ctwo?i-3^Z7b1eOEjey8(9`h8F1tpI3MvnDu)1-S#9u<eS+Q
zeB>B(Z|GQBw-8~2=*l#?4&ETyqm~>Nm)Z5rn5bR*MWV|&N}R!7Ou$s>kg!)Ig$%Gc
zUt@5%YSOIwnV7mzc;NE+23lP2E%dlHGz90On>wL1qr7BvZ~VzwG8kTT_yrmNPL>!|
zZRU8_)O?lLn)Ng+fSdeBP>|DU<y0IC#Qnrd%7Qk5mY*cY>xas{Wb%Dty7_B`H3@I`
zuA$HV;|qU_mD7W{*KE4F)7ji*|AmIjwzl+!8`^`jvp}FRb_&=F6^-WiH_bN|9zD<B
zGccICy3T)%GN@HAlFtJ^X?T=WQIU^38n9S667T{okvnXW`4c#WitKjDJk6HBh#44w
z>D>7B3vvd4d9;CF-=-v2bBG&<TPr{pb^lqUxk<>VNgJY({UdJW>J{UhN-wR*>o<db
zZMjw;G7gq5zf>rHiSHrB3ujCMdB$Fx^&#e%&kX*z=m1{VQqizpo1_6_kxRo`1rO=^
z8>dqwsbQ_4iI0aP|5OvT>ML_dhF$?q!>lSZXFyYI;W6oW+2elmk&>Oh&ku@?Ki&W5
z&x4&EI%Opu)GC172VgBQPN`M-OgM~9K59^UuOrI%@0DROHa7<vIcWy7nA%&OmXdM)
zt-ZDC*<-aPekWQn>rdLAJmj<l*w|LJCg76R4zH8ExGQk2c4vLO%||pf{gw>lT4+7{
z6R&mI{QJ32LiWU~nhp`_gH4Be>SVG@vdG%O<KK(&!^dAFl?^o1*SeK1NCm`2Bo`Zu
z<V=wsJAU-&0!9<N)yeN^$1h7SgUJA!DJ|_=TW_A|3TgJ|-7dLY522ySHvFQ9L$cae
zO#dD>hxZd$lN%_@aV@#O+6aY1HvQrwmE1ES3j22x#5~5XAggyci0;X_AZcuDR4URq
zPt887r~vG)-L1W=ozafe*3_%3t8<g7#<RA7C(od*EpkL8te%a`z8H)7hV7Mve5mvG
zP_6)@H~$+1|L{6<3SOQ!;Mf1eDkaA3?KF6ghUe9ta_*cco)woHos*<ksLsm4akf8l
zh%{-m59${{Sg>e3?ksC)$e$|au68IE&AizQp!MlB%FV5}-(#`b=>iWjxJgl&nMS!r
zPhtg)_3Iexn22KH;*RD+i}ag=QRo=?<9QL>4>bl;MREp1<5N?JAMoZqcnHH>ug{fW
zs1&6Wm+n_C^~>W{YevJveOVEKPRo<ApGM6`1`hd>w3LdPEAJ3)Ah{$>j?V40T9~!b
z8Idh1LnPqqE8r^taX(w}QDon@)<FG6{=d2Q^2}$iKz>3yWmoKt*P_#b=944%W&NEu
zbwf3uPa`0@AtpSxiJz0%Y*f`du${w&Yp!apPHr(^>je~GfeYB}?ds|q!}{7xJy5ZY
z$jID7-<6#OV0{ShSt~3wOHF+bijeGzo4XD~0H>Dk(xqGQIO3rU`wq1B+Uss^k`@<(
z2T?k$#4tZ#KHmZ+Oo3;CVoEe)RlG$h@w_4VibZJ!*PR0i={h<BFup?&j;jYhh`nuv
zpO2}qgh-*Ad_wpyUQT^I{jp5B`-1+0<72CgAx*yj;Zqbz)4g~J8VR1AxspWnRI*L&
z;#9|yzI~zMO_7q1aI2e@@aiV)bFroZCN8dt7B9uo@bD{}xi>abD!RHE>NKDyVncqo
zdnhF#k{aY!iOO80)oi%Z25$1$B_%7^@l8x9Oa`^0rFu@Lgql*<>dNwdrmcmiX(Ocg
zwjU})YBgK&O&2*`ee~FttyMSw_!g5!nP*c@L(Xg|Mx0VjMb>)zWL?d{e5@U$B-M+K
z-iH82I(_A+N(tc^JIvaM28$VpE!B-?{3cF4sSvYuTWLZNRlL<j{SOiqo58%rup`~5
z+4luVV9Aq4v}!Ze&$H`(8h<N<+1K{=#emuBJC{*?gp@cf><Zc33N6l=y^RT`M*5BU
zrQa_e-F~PR+LJ5g%7fcDi7?yQndLhP6)*dxQdB`hPGJ4z@$q|{fh^<%pPSrC4cT0N
z$LWa)J(Ik;y1bl}cl1Q*7bEEch?rFsRg!9|vu)a|+7z>c8f89hdTO7{#;}2onM@z=
zEovSmA0I<5MXqfXT^x|avYL&mZPJvXPWu__a9zA5*a11PxC{KBKJCX2@#{>PVp)@l
zH>*e+7`gIU^0{4tew^dAhFg44_#9J6_X``Ii!*~{bijmBVR}yvmh)cUThoezq&Ei0
zK>o=Z$|ePxd&tPhZT5P069A2zmYxnS{YM6d`NfgXzSgzh+)eBvmckVjk8>;J318Qh
zO#5aoaB{l2xglav?``b?HYeNhs)%0`5Du=SNVKPvZMNH#ltOJrapu$E(=<2N)g?~+
zDkdf-&#x<LT_&3OYuK2*o=rnNbhqzJn|~ht)BnIBN0B2&WaB%pbcas^#7UKM`6}M%
zBuyP=Ii9I$blLP0!+I&2;jtDTezoyDMKWam3eno5^hu(K)hu)Tlv!8h2Ljt7+?eZ9
zp;;k#uIiLD2aBgn71Wi{(?%+)Dqmud!%S|U%>eb0xHt?{0{9hc2L~l^n>xg>eEp20
zRI{h%G%r!Cj1=tbjEs!z)e=Sw9px_#^DF|665`WtCKwqnA@f-FKv?<M>cP7>H+ROA
z39E?wEiUfi;V!77W*dykc~eu6`}!lAvbC~3GQGIf&qkCl|3mnH)791%&z1H2F1U5h
z)@x=d)y5jI%91Nj8bh_koH=x0&TV+uWTkBK=}`W+pV%7G^R@U?kKl|U@o_Y~klJ{7
zv*cGd4qd!MgNfY9uON@}O>R*N3T};!xw*NuV%A1;RkGzhy3WeCB_%2Eh>0`moXbK_
z{@m$Z&sCW=x@`u_=1$kTbpbLac>b(rU>Gay2jUenGedTEkzu>4;Yg+;Mde@+5?z30
z=lTZ?71fiTm3AQV=-k-UnC{J%mzSqIS-?Te{{|EDqTL@7YY0Gd(f^udx6lh`Cw>$@
z2T+{Cmr=sRNE@U99l9EfzD@M6JcfzJ3>SVYhf!OXQZtC8$yz$PyD=CtF~oM7<HBvW
z_2M#V!VH^!?_i;(F_w8D&fRap)_9Olv{ay0&g9S&{wgS|*<<-)fjy>Jy{cGFK_jZ!
zR7FUrYk7EWXI5iDW9iW{P<9nWgm&$f^p!D#p_*N7ThoHfN=D8Pg>`j5YwPMDl6Xr^
zc5_Ae>;QPVK4LJKn0}@*Ju^HV8XrD7J}*9pt_k=Na_kZk65@CnLxf`gW~<9_dQ5Q@
zqy=rqwrQ^0(N>=BZ#nE({QKvS;+?uvl!~Y|<f?8w9*Q3s<peH@A18`wv>L7NJCQdy
zqhxa@oMQguD^L=--D}4>%|7aw6G}_A$vl@ds?>mK9+iFi8Uw&MQP)a#@W|i+;Nevw
zwExnxB-pPjGK(8JG(GDGkWqt;uLQPkZqP8pk2gxq+Jp=YOmxY>GbZ9?;bcAZyif{e
zxgH=Y$txtokVGR3<^?$Q{`Wyp%h49k7;IubUtV0eAB_mj%&4G+m{i7o*tq!)o7cZV
zN~^8l@kTiyhj2qfC=K_#d|>(a5PYTAzZU?iWvq1*>gi+!NcvhEbW*jz{%`XC`#%(v
zBdJXyku_o8-48@gd^YwK+vRe}=JH+E>ZGy`IurkoX$Jotif4Av?}ftk-%&6<)V980
z+#2!U#`=zhB{-sI9qGA5`b(L-aik<(bx~tgL477O0e*hb3|UwyTpCKY@7JQF5g=rh
zu!{7G_;kc~3_2xsMA3hn!WcDpEy2~kO@D8~`7b^xhPm#=-|uxKHR9z3D5N_5g-$>!
zQJG=&hK2?P@$&9lzDhT@w_tP@Cw0f+N&}qT0)GZ$3Z?@NI#9C)WYUey%3bD;j*jXo
z2KwZNlUX%0vqDhbZyJ{~%_gxs?`9uj#uQLfQ@(Z=6cWs#d*c^AKVdS-ndjEM;SZ>?
zHZe3~+ZA9S?x*Rh=LoupmYy)<Z31El2m!#(65uadl&0`%2@?wTU{-a~0VX_GzVUp_
z;b5^=uQ`Sb3We)Y*3K?-#87uJJs=ZH#BKr_^POns>{I(ZSKe3+dUoR5pmyIkVqpzH
z^B*DpPg<YnmGoYj$<RYq=l6ikp`CL!glE;JOHOCqN|BkR2AZ<6)?nJ+5zvncOuL-3
z9@K90hfq;bF3JsfM2%<H1F+cGXAN(Ux*)Lwq*h&4-I^Q03i(q6w?#_DQ}y#=OXPRQ
zm(3XW{cM2$Sm37IzCnDO@QQ1tVFqIbA1#O8G3}5!V2b_D5Hp$jpZoq1OHY3jjB=Oi
ztP~ulr=_ugTO$4&q8GzJWIMli(#O|NiPO<?^8z_l(tNRO{)zs}s7D2O2$jnH5x!1+
zfH#eNZU?N;J|++dF#&K6puln;w_oa{6QNrI-%VK)2D8Es=uWsuW7ZJA=r?F+0H0yA
zmOtd%sAn=65)uR^XW&0Y=R|sX0M9FiHt}$OTai2p4yEa8`LlqG)i!Wbo+@0rS_mul
zd6}Rxg9vn+?~Z?es&}vXGa40ux!JpZawAk3Lz9#(Mo#l#OfrzWMoY5Z29r8%zP7Q@
zZvRH&>?145IzVK#Tyf{bn9Y?Y(D>QQ6aaxvGps>o1uciu8;pRC@aUwl#PU$4GHc9+
z%laksr~-6VuB)~_VE$~62Jtu&+KFLHvk4CN&t#(2;-D3`5FhHMq^3#jYjC)%>N6Nv
zH)Q8l5shm=0qvcCd<3GL2WHQ6jkX2Tj}H>n6i_L1EQgxBClpYh9GByPE$LFD+n7cw
zKVhmP4L$vwA>Bf)-KtDsh>WVZ_}*WPmkto<q|xFadvRlX0@&#(WLBoOXR}daz>SZ0
z{m-aEK+IZja3D}vv(|O&o`gpp0ipuU4}aul2eo7Xd}ld<mOFhvJW3DNdu1_Ejm9PJ
z`h0^SkS1B$8Dpf+=;XI#VoDnr4ol}UxLn{H=6LXv0JN3E{p|Y6%KN$9P)+M`_{QiQ
zYeD_V_IOHX1&i5+phc}HRLZUOeRH2}JwaLy=Sf&NxUGuBF1fdLph5Z2v<O_)0C~RF
z1(tPi)?JYaMh^516jikrladu<im`Ebe2W}rPQD4Dnrty{+{rATSjH$-0JwutC2B6?
zY*x(8;=SJ!%{hH!*|ruBc_R(zfT|kjQCck3nLB8x%)b24SZ)kaoP#XixdsIy(LZ>T
zXXa!u(9z|kH$KsFRQG>-ZEB4g@@hI>pW{vy4Zrz)6%v4VL!L5!Iy)gYAQ5!ddU6*~
z?0&N1Qc((s>u0PKdqDR@R?LQ|oTiZ%VqR)>{9!<1e0jMA%6IU>;N;QZusMB>Wr|ax
z0wD}4)@D#e9)*}hmeoKly1dcsut6$&`=HjLuwH+GTVJBa#^8J#+>nzQ1B+}kwQz6U
zo-*q}uSkB;K<z=+=Py2MYo-Xp^AGwrcYRdIIdao-Q^?`vJpWU;_lv{Wv#0Wiroq?3
ztoMG;sy^3#q)#KLJoh@7#w=4ep=(wqud6MY6U*R98m0z2x&x86;rS^HlqDmu!i0U@
zG%=L4<^E3U&)!MLDX|*ZjDePZd(iuJej<;%l{p`u-)(7`^TO8OfC(X&)gCQfT%deF
zQ3Zep45&GT-V)u46Bv(0n*km_`^CiOT6Xu~)|835wUiWA90lMA>d&y&0u^%VKJz(X
z$d`S4HKi54JJV!S%|o66&2MRFC@j2%x<s(Mv$M6kOA_`QLrkoaw!)E^^Ua%xZfTFx
zm?0v<bYZD6VQb&#t?CG-T*<U({yA?BmPiK1t@n0mYmbRJdvX(5&)ppP`9H6q-D7aO
zY;*zH<EZ>e<Ah$a^(ml9aF<VeCf0OxDwXYi6|AX|sGBg?GYJFdC+!!i$MrA}gW#*p
zcTFmoaH+GpQK$>s{CJ_Ps~gEbq_WG_t7`%D=+P|c>FJkT&#!@rEf8rZLqz$?@aa%{
z)aKNth_uwid~NoRtaSicGq=@!FUg6UdYt0Rm&mCK%bEojHI2?1B04(vG0FE-DkCQn
zYH!WjtYoh<h>VEBc^B$*VwCatS9P>kg;x^q4qjmMg>T<<pdh0R_sYfvPVSCWMGG@<
zM#RT2jxCs#Vdmc^STV=XrQkT_nJ9062c_OD6)9O4n0<-R+u#e==RCMi&&{=e5Y|7P
zTh$^X%|wqeWpTJ**yk1yi}CXnirxKMSIc{g6m@j9a^FTGhFqsKWtU+hay$BQ3YD~a
zxi0)XH8nL`%KZ{ttK89yHTnF6i8ZctZ)1_6Zov1?&NGk_CqNLVF}Dudl8cLq=tCYW
z#2MYn+AH4}i%(3rC33TD;tmUq1ZE8n#*LEqJeSE^uzcFGWe<d%a{+>*24=e#i9`8G
zBV9kuPlsuQh=zXMcpZpH_e|IrCqW1ZL~wtgP}^2}*QdcFjPAuT@aStXM_o|i2&w(L
zN#@$FKm-b`n^@E<h%aD2q!Q3qV=np{Fmy8GSA=L!Ld~r;e*H^d;D-B&;OPkmv4K)Y
zR>3GU+Q<qwj*ESJXlOxXfRpR?R!PzRARX?~&kwd|PoBd)HYuq!h<JBuX(>On4-n70
z1+<J2P+u-o8Y~T%DAl}^xIr2dpfUQKDeJU4yB-sCeq)CnBThfY@k^A{gPDnqjf3MY
z0YU5LaWZFNY`m=WDG-GfL8qIAm~cBgTDZEJ+UsYPrUvWc1)=-@e(5hF5rlk$VP|K5
z=Xg?II`W#*!`7CVkZyFXF5+F%WQx4RkW(oTaR)ImHMRBo4V&cAw&JgN`^$@gf?s&%
zgQ=~pY!Y*%XNVa|co5tmfcy>i2bP>{K_Vhz7Ussr7ABeQ^&Xc@*s^qrU<CeQfL2W{
zem&xie3qgK9W1_HS#=Qe<XCSPc%Ee?B`C79ftU;b@A-J9@hM9idk1?#Bc<PK!g*U4
z1G^QNwqz+yMWhn-g@v+BM!O)!*2D<sM-3%&-lyGQJN1Nxt%Qbt96ip^>ha=ocMM_D
zRx_cm9jDmW`DHjZR+X+V&+U?DGJUrpEhjXR2+gJS3J*^_!Ly3GR!POu(n2bxN44O<
zqI1E}+*_7x3ny#g%s5JaYIqN#{;mP#{yubM!!qSQ=%A^hk^vRzY~;$z%RM}5MfI6k
zncwz7N8%iFE{*Ci%Z~b#ovw_Lv4xbBto6_953x3zlgN3IT#6a~?Ci5|O%f*Nxzbl>
z#zZND6c^W0Th{)NPW|ADs$krfL`62x*H7rXALyZ+{ZYZvqcuxYJZWMYY0l5-CL0zP
zrBf0)axpqzk#e662*zBBmk0A%57`N7loJe>*i$4kIYsWG_+rk9Tn?@8-y>F2*MBj#
z{8)&OJdDCuFFkOY2P{c#mL$cCd>vlL;usBnE}zsd`w;^%GJGQ`rok+%Ae9-UNH6_F
zbMiFf5qMStKjL<DY=#N7`IZ0&0g)azSO~!%SDJk7xtXOFU;;PRC<|D-{?b7X`BC6}
z<C7ql`)l+=lTn}jjaX;2i<lTtWy!24_=QQVcC#mv=`Q*rf+Qk(w$5#;{nkN*kC|cI
z%1(e^(CzBDxHi*paC!NaEO&W%Ih))(n3YypAqJ5NiEx=4uh8#w{7LyUiVP%%=-1#4
z^k?Tx-M%&QP61J49$e<U=0EN2e8ls$elFV%-?(IR199xP+lJH!XMP<0xNA$BZ*VoI
z>^sq=!^Z9m3#%P}GtS)^0%4e%>%^s^WYZs*4d04=yCY8L=E^nXD5=q()!O~e--mxw
z?a;j?D8s#|*rj#4MT$F#q5GKxGjueK*5^b%cHDGieKH$nI*tOw+Oari4b;AKoGkAb
z+QzCkTix&~QwK$oGzXRC>4{8@J*qi2)O!}B^&|7J6Be;NEe8GR%@Dfy4=l_a`AG^x
z{e`sqcD8D*x~LJd*%-;gT$kYh3XZJ#*4uR0E?$l9^=lh5`q^*1VL$q~QWNuf4z%sc
z<L3-)w{CjZ;3gfdY)trrGT2FSjj#ddp!I$0M$)JVZe3H=Mav42{5!MOo4VO|BB2k?
zp!b4}Xt=sBaL>f?_(Qm^n&0Jh&?m<NLL)=j%~`LR++2#AR}#DH-<gtda4;qF(-S^V
z5vxtM?Uw$2?xH_wk$*p>!4<3R{Jvx;32JEylx|nFM}tsMu%tLp2H0DNeN^NH1&%p#
zsw6-N0~YR#K5l1hWbx*YlY)s@`9t^d@uytzPULdxe5##|b1Ge@Do`(MjH9aOZEa);
zIs*?ZnGXz`APiE+hz}5{Vd1|?2#@c~9GK_~y|B9Wu(N!LXB$ds>^u`29TpcG+n;Ga
zVK5PI=gRf?yR=wXs7O<e`V~TrfKOU2I-a_G)`zX)8hJ{RZ2ecL`KX1o*w^u!6OEh;
zHUTDt49P%Tp|3=ITRm<z`3O!WN4~i_Xr@9>O=BPcFatvA<{XX~>ro=)5MXLMfV=tl
z{OOFT&)sV0hdFmHo4oA$go0h6=DQF0#g+L-l$Af$D~CrG7psbDBKwHuCuT~mCvezK
zs*O4_dsN>B+$QvxSD1LS`S%b^5`U1%H%hm0kjM~xsf<(?Y#-Isq-nFBZ(v|2V6|&#
zS3cV`6noc#Lt9kqt*sw~gS$glUPgk})7J@maP<Yju45HWiW1U6Mr=0Upr@^!mS3*n
z(U`;Bxw&5jQ*n=3;9{~W8;y;NkNncj&gC5ovF<}QLEuE?a@t5Ee2CR6KWnPF$i;T{
z7A}|Pu0o()xg4?#cLfC%vAhiB$rpOFQpz!ElW`<0v%Z0$ySWzcdWJ3JqGs}Sgbpp8
zLA^v5%nGRtQ_>474Y#dn6m2z*Zz?-%W?XtOxN1E7xZ+GEqdv~U+3(MmCwFb4qM(HG
zZ&**M(!`Ct_&gO(O8REN*K#yXx1gp1nmE<|V9`Jt1+KR6EU>>jCkKd0d5gH3L3eW@
z`VyKwJR7jmaWo`n{6Iu5O!x|3ZZiUn936oM8Yst6NorKPuIF7aiOCvW_fBwdg{U{1
ziyOGOIO|7??{)w_36sUbXXu5*L{NjPpUkIa_9;gj6v^s;wZLuPJic{y5rO#*^b3T#
zrtLh5Rc2;JG&2?uD(rXrn8F68lHb4oL_x#VYRt+(U?G@^^L8tnu-xXPqH$nU5D5)V
z#*cn>t-+%4_H!t|c4ZEQudAyo2R(fPj^Ifczp=KpwToIntt$25)3aWLyhBXt5-Vu$
zU`L}?`m@vDo0zrs8dhxEK||S*-&mEc*3o7iVAID`rB^BhT~P5PMI@^0RLqtP#NEFH
zVO5t1g6zFwE<4kJX?$RPDdkon{JNeN59ru*Wa`PkbK30b5xLphEsg<+>%Jb1vubj1
zuzmP~`jMSt73n3z<u8SOgZY~#1GL#<!%W2@O|j(3Z*7F$8K0u3z8y2!3-Ba(m;bE7
zS8}C8!MT`u)AEF>Iih_R1qH?QE!Gff@2kF`-O9WaxGn@vr}%W`#CltWzSAu`c?Q5}
z-J<dIp+Z!k_pmqf^pvQ5$@%ggdjg4~tq*HxdxLC~_Y}|ho?L|7y4AY&ZsC$UJ}D_l
zmi)|sUWqPUrsv#bGFrXfTBf+wfZ1$DFi(seZK5HE^phDL>HOFNK2{8moZXCu9Y?Wq
zozB!^K>=QL7w$N@7&0yHZVybvOMDz0Q|FoP^(fL(0oDD)OZVdie~bRh@A@4R<;G>n
zF`ILyNIi5CziIj&{zNQU>NIg)D0p}ruKHbGLR^CsV@+9N-qrz6IFa?$_F@Q7oEX=s
z5E$2|WIQl~Cg651ahoEzURxU<NB0-&lq}L}Y_RJps$RSg#aWV4Ew%V;YvA6BX8cvk
zA*NNfxbZm4{OVvofi_8LWWbYo$z3Y<*MX_UDifU9@6%29*#<iot8Lg+>7%O=K8?W_
zeZ!bNg9EE{WQI}NgKIvdr_e#4iu81Kf6qSXPX|?5NXL9B^DEY>FVmSya#(!q2xLld
z0?vUCgmpz!3(}Gnhx2ux=#o|1VsWQvE#{gMdN+@!qc`*=$5j^#st)N%xl2f~n5zXV
zXl#qAi0A{j;OE~OPbaD|uRHgQZP$GM8K+A13SPJ}qMS*&80-o+bvT_kws5;E_w_*A
zO!7fB_ZJ(OaMNrw?x?H-<qVu1<NPGfuWfy|nE&+x_I&KiZ49J}Rn){USq%lYYQ7$r
z_&t?-@%3ndeI?gyL3WNJ)hSgci@^dK-t2qy(9g`MWMn?s7LP6pbPD=CLHnOUHPAz~
zIDJWbR`M)*-N-sgaxT)sOCQspAGS8iiGwSMVNk^sYNBlu5h=P-y-Y-y%_NzC$s`N!
z;ynFuzQ#GuwWwzsXrc61e%^pnh0*!?;T3!>fAvO6<`(yTfAa+zaTxg;f|~@-J&*n*
z?+qfZOG4Kwc>GR$L-;BXy`&@Jemm}0P~gACU4Y-Vi|(?fuswf?5I)R?b6KksThMXx
zpkIcYxRhf5wam}xl2pq0J-t5-oUcNT+W2fXaA%KfFLLX=f;KU?iZGE^Y;v+SJu_O@
zF>k%(x?7`7ew<<1fB8YofgP!H%y~rkw3c1GT8S7Fd+&V(LIpj0)f-Vgx&usjtD_^_
zp(I77M$?bX<vo=p0inb2F88q_IlJm;&kFhWE%7R_yi+Fhm!?a9QF;9(i*leoT{qu%
zV7tYA7owBywxQ1yt)**Oa3d{vO3sUHA7zS$SPpiF^>r+9Ny*sKp?GIfiEG9PwB9ne
zjc9AxRGh9yS#D*?CQ}`Yh!lrTE_!`DlJtS2mg&G+jlO6F%QDQqr|rtt-Fw!zhoI_)
zqU2boEp`|4)Oq2*Q}&+uR%t{fJ389T{=mpgO3YADo!ym@%vf7i1t~t8GjYZ8QEV->
zfXgTZEk<URkHZTS*tl4<VWJ@O{m^f5OL_`b6y%viHMWAy>9L-D0kdk_h&F8y@(tb)
z#2>qN0neZUu!YT_TtmP!7&<(BbE6spQ~DfgkC20dkd?78b9;Synw<H2*DB%*S2Bq6
z_SYBBzuHTh8!As<O;3Z3a%xffQ>X9iVd_45k`ybIO<q^pm<qLV8z?u_@16jh4}n<(
zbCNSJ|0kfn=bWV(0!p$g^_Lc?zXqf%&>29CH<s@a-k)|2yaDP+p$2c*a`@oc#nW`f
z@@)?2Gne2W#QIxo{C%0z7WKW4w>@LY-<%n`g&i8ovweBR@1GYPo!he#Ni69JcC}5#
zz<)I%V82-a2A!U#%QXn#=NGS1zpemU5!2wWh=gXlTbj<8<qxiiaQlR&`wW-1MgFo2
zZ=QR#JiQeKniUK|lAd*`fgf6iM1+O=X_ecqK0HtV)ZMYd@Xz;)EOUVu>z8YvTp~P~
zl^d&comE8$SV@_R^2=8@&hzEu5O5&Lp%umhvqwkpI8LB2@#U2y0xFVI1s|e?GXZUb
z!2on<zn=^+aDAfK2J1PlYZW8LTv%#IexP5T!+BU*ODy8W^JfDQzrsPG$uIVa3pUyA
zLUwqg<Ni<hSiOIOS@E3hdXlkhiibj!sGjw8Mq>bZCESxR$oF?A;4jxVcz>&6sW3oq
ztI^#~_q!zEs=)%3%7}!iX=w-^UYX01R~IT|xEq)=wWaBu+c9Q@qk=7ECle7BGA|)6
zN@_EAR%WHj%E+G2b-IcQYKC3WNipJ4Ahc)aU~fL(05We4F4o#6(+FkiCdY$4&;_ge
za}Ib@73iyY+NHlWx%JVwl81DDb?9Sl-;SbP%=qtsgw|7u#~A$S;kEh%cv#k-RaH}s
zPgsk1<6yD$uACaABC=zE9-NSXW3<-DUJXQEb<4i6QRPn<j}8O3k<Q9Kut`nq%orhy
zPMk4BMMQxq*T#8IkAG4U4ccTzm65Kq;07oY$w)f^z_BLQFqyZd1}cHx_R5+Pb=rU|
z4<uz!%b=zGj)y1y>58==1Inx=G-cG!Gb=-7Wq$s(qoY^M;nb&~$OtmBuxPZ}7d290
z#on2X2V6M$aOX)35dL1kh%7o^LLYn>kkh*4B@8=(`R0FIdi_(-+nevLRvXFl_+uA1
z<l8;|bMO_Iw4or0e>Ke`_=Kya0Xj-n(A0h5bV+Z?Iy2%!H?OgEN39C^&CQK7lyr6F
zdv2`buSdLH>YTFB5u%K5c4@g4D793KB);iYs#2r;IT01hl<n-Y<bv@FhU)G3iU~1g
zYk~nw_lWu`4qR1gNz1#Zv-|~oDI*ZYHDxPIb#;Aot%QVJ^c9(y>8RLa9)bgr{Cs^6
z|4Ss1kj}#LvW^ja3CYQSjLf4bI@niWeNbyPY&^XwlkoTNVJNH5x0(5=z#xf7+|x6#
zX^iyp<@(QaHtIf`RB!#elQ^F$N_E<NO}S@q1g4|fKOKJj{Fy3M(-;sKgaY*DU*)ts
z!E!#r5vD)Qqf8<TXt9p2tzP=`rt;+eYO;NxuGPm$PEaZ_9$=&E7F{2Y3c&jA2e-Xr
z0@`z+F%FzX<PbX612zGI>B_Y=$qkN=m$!-i7<mBX4m2m@#3{G8&c&LwIq^x+!g}oX
z`(ZubK$)+}GzrYafT^A@XoeNDTufjE^7;4(PVaV!6QciAr%A!)wizxN3RZ-)@bG}J
z0xJw+57fnT?5D<Q?6(&cuGS|a>pG>%{Up7^-WdJ@y}1<kGS8n~8+*0>dhR8i8J~oU
ziLgz3smzP7ZS~6Ev~qDfmbh|uq`VvvrXt^(XSe*VwG~Uy>>5k)#Se!!;!hbM+efe%
zpnm;cmVXX;`W|W?Gu>oHBIG^#bT{euUl~rK%$cNz@H&0--B#79k4Cbe!!rGiJ+5$$
zPlspD>+th$Y%QrVGIBSfj>JNpg*Rj|lzRRYUt6#|9YEY&{scCE@Y&{dZ0xZD{jLZo
zEQUjW18__IQv`)NBK-IyaMALo9iKJj>7FdR@I2WOAK}-OqcJ==-j={GH{#fi<R*8m
z&V6F;n`Lg+@;-Vx08KBNlfPZJt9LAXPrn-A33h`)l0V&py#qZx7zhHuZY+d~ATSVV
ztb1!~`aDyw&M7ZhiIHjYQ@jPv-iaO+nBy2dc(r={{0SEk5fOi_qdgT9nfS21w%3o;
zs8OHA&zPQ<<Cv4c4-EoOJ5hU7R0v>@ZJD`006EENT;`(Tk5O^a(Wy&$CR4O>V%9dN
zxlUL#_Z)@tvJ-06dw6(z#W}9O9g(L09`7@(3viUKcx(#q(Q&}P;MHGzM;X6!O0Hy4
zrHlZUabf7B3F4TJA}gbF4(40>goynw^*YAUnZFlU@$!z28AL@yyy=T6R4sKqpTARw
z)^vLuHc7Ex-l-IG<?`qW*P~J_XmUEu`wWl+S`Dr<uRx$pR&u<*(Ziwt#QNC-7k8I_
zl)jv<+{8EuQ2BwtMSMi*>jZ(qC0C=iDRw9*Wu$+uJyvMgQ-pw5cdQ!9t71__BTj8@
zbZZ2Bh!6;OPN7<gLsut|2JPBn<Sbn4%*fVjaFkgX8DU~zxLVuR!QoSlEA;|R0M(4l
zObTj-e#f2h$Zy6n<ZJPwm5hUfgQG|N{o-c(0sVodz-}rcVrl$NmL|C(lkM+idVq5u
zd0Ie_)@!hTLc#OzxxlB!q2tGoKzl={>!c?zo9zz|GYu~lbMJ<?WtOWRUZ3bSs?)@X
zX7Z+5en|;Q5am_jR-Y9OfO#Ih-qF!%l{x^#lV^WLMb+DzQPiH?+~6cc|4p=(wU+CE
zwU}qKw;{+$px%{~Nb%5P;#I^q+V9I68#`OeiVAjS)d505{AQhs0AZNwEzGwG_qb&f
z2nS1gkVI9?Lj8peG_!?9xdH3V^K|!zG~@mFKk>7hqM4)LVNCH6|2_)0f3GS$aY`y!
zrJg*k=FiMfa>Yq8{lSj21x%9^K)6p*Vy;X(87W9IC%}ay#KpZt4T&8W`~=tcjh?PN
zncG8<NFmQikf@+T9S3>8<%hd~Qn3bM7ocdd0*v{zh=)h<g$3m4roBM=+thoG@%NNk
z9!rVfDo`TG9)T=A@KP2O5O^t&R#H*|T0jG?r{$s~vi=t&ulgwtFM_MmNcw;;5{PKP
zdl3T@lPld#6mYytL^CO=m3bA}NJtpL(8?o4t2qtaT-mv`-12hkx0hajAI2tBYdsM9
zm64YJ`c7ZbqX_cglKt7*-Zlm>EeeX&(`)dAMM)8CO946y8S_zER$Wt5G;9)Ap>nC~
zMEpd@^HfXAl*i-rTN{%635UZ)^-^u*4|JS`1^LDMJ3Ak9-0bbEno^72d5Em`IVXf0
zv6MJh1^GVZ%ggwd_+ShDQtI{3IdfYbC+bG)!8~t0JFD0~J$2-uxtM{X6v~wS)M9_6
z&@aF*(6N;iYIIAelg<a0nj_Rxt_KA*1yU*~&xDsRgG#1C;`qtYYpLNF{8S687PxFq
z6Do#Y?3KGM<ATEG1=CYE49XK_!RYnW=cj)St!h6*Zh&sGdj`dm^865dD3mf3NZ&yq
zb9$F@4{;rP4&~Vb{gjYGl^}wu8!T`oFHdmrP_D3l!)c4i-$)4sfqp(a)EYwxRz4DN
zUI%ZOYD-kJ>UcsQIO4(^dcZDaf~5-O>HPG|^KgG-<g(ej6t|a^_&VVISIqw$To;cf
zxF}F9F7OP_Z(>@Sp!Pt%OO5u=XIgl9{ym0OL!y+Gltz@lufhKFnidq!-vfVlO2M+6
z(g^?b+6#`qtID(Z8S>L!;rL?h@3GG#?a{--EAvx95sm+dgL(#)n6>gZiaVr{rM!Nz
zkMZgOT#9E%<Mc;-@8Z4oW9QV~WqBogN&o%wMCw4#@7@<5ONIiHKv4wyv^{gpdE>;~
z6TqcmI}-db8fyQetBb{g4NeQ5|EZ`fCj2;_XrFAUg4=cdY4~@GndAK{kgOxt%)&{o
zrrW=*XBzGzYes3eg2saSd!#k!n>IWNKjTp{gpL1(7yD<oNd2qKpSz|5ygtOvNj2O^
z%v?xe%QJpNEaQE8fM_~MP~Rh|gRJQ(3fZS5VR1ghj6c7nwuIxN$O<aG@$ya89Dhgk
zv^OoYsS~Eewb+8q8~kJnci|MaVo-!#Pj&=z$1lG7@%ocrl&1Q-ztP?jrU-2qysL!}
z_JTFVD&3?r7#eD|74;hxKViXH8Z^q&MYqJkLfC3S_$GMu<P@Uj>5M|Hz87EW0JSWq
zd@sy)qX$uBYx&If_r|iS<37VD2R$9Is5})?lAxbYy*1cFgn9u>BY~!E>F5=5;qo`+
zKnYnnA)r(St%8q)@_^Zy8L|>((^-Wsf&X;fT78Nm^w<rJz2C*d_jLLfs~32~nVGvO
zau31(^#TCY&S*LK``pvAUT)^$y!{X?Y+z~z<q7kvWHfZd9rf=b{PKT1y>&p8+xI;@
zgrL&hp@a$o(%s#PNJ!_<4bmY}(jeUpBHaywAUQ}kDBV585WmCyyx;f!=^e*s&U4N_
zd#|<jUN{H%qrlkBMTPa%D`k24XU9VpO0{U@cJ}sk4`@JVw7(}@)#iL;rWFE7GVDm0
zqAE1Zy~X+8q2<wK%T`pJe(@sSPbJ3)f4DE2X4Qq$14>>N89aq5wF^i*B}QNy0cKQ?
zk&_!QM1am2oM=*NvP=yo;2MbPEv`I_0ggmxF7nRovcC%&<dXPWmZC1G372?3>wmv(
z%0Us8Yj)G5FS?HHY|!@O!9vq8*-l)Xn%5()t6k8J2huuc`}z5KHeJ3$4J;}Ol8dP{
z`wTwE+`2lm#W~ltyk}r{8{#3I?`b|{FE^0IXOE5kAff&5_ft<}Si}vQCe9BJnmLWi
zMz{CR$bbBJog*0{ARqw5t2}&sq-10t^z~KNz2UP(PlG-?iY`+kf`h`q3zSC2zV!X9
zJVr)A09gqnrA(dJ*pSewHTd6wOa8f!^UQ?^c(?=Eagj<!dS+%}Lms(I6r~59uyA0w
z!bpF=cD;><uC6ywAex!|0{xqorV<iAy8=U4^_m+&XK85Y?-u}57V)n1K|~D={Qw%x
za1vNUL&LZY;({hQBg59-UZ<g4sw@-qx3#(M7JB}@2o`R+IC2-Vf?yRD6jiY4(NIxI
z9<+SlA-iz+b@}BBFp|jNcQ(H|SqJJy6cm(ASl0L>3+U$BYlC{BXU}3&eJ++3o98~-
zd8??f4g(>-s>W^aFokVd*~3n<M>^c=p1B|tw~+^hn2}^Ec6^AqmZgEzg)8!Zp>y=7
ziO{b<dG?8k<xtAc>&M0>CcyohA2B4}3(va0%Hl&P$+$1K-!diaYz$MJ!8-#2fhLEm
zbM@4WgKSdg{rhoH!s_ZOm3vrO?ZEeSp2vm~|NRQQgcanK_1e9Eb<5%ax4`K#9q593
zs_gUFQ89IwGwTq8_`!A2EJ4JL2M}#;$K^gJhfPm?(9n><0*33L{h^?_(X7M+aj~D3
zlG5aK&Y`^6@X7DvM}a)7-K7S5nvyfH_U{8^^+oZCh<<_Jc_idg_8758QRz(4ePrfZ
z^@t7pnZX`^Hb3wV$V6IZ1)qVi97Ot035CDm4;pL|57cd}LXnb@dK~mK0MK}x-w2b=
zE^yMXkH2}kC9WNY(D-V#mS479?PLmhoSbbF2wW5u7J`(+zC&1?&O=Dw!vlbcFRu(d
zDd@4U2MyXO$Fbwn^y{o9ZEbaH*d+rc!QtB7ImpaNDXAz04U$SK3gzYB{}r~|ST*|{
zvgRHCX(eLT2>WGxvZ#Bik|`iRTv`qqjvNU{^!3!#Bs6YsuAI4ab#zYqUvzw|vpNsL
z*nGIys8KY7m%6p3KP#hyL|_JvDVZ09%ev1=%ZC22!K1w%xme1V$cVqNmO7)tYM^3<
zIyuGNIU)V-t$a;EL7}6qE$^AM1QJAG5x%y$xoZwi_tZ_EMs##^JoXgLE5fjiC2Sl=
zc#4Ic<;dV51_l<VHdTTshd{IU?8(;F7HH0niNUQNYAz8LUR)5<)Vvr-h)`k#Gc>P<
z^UQTy+!Cza)YR~?_7<ALb?E8olb@P`r+&!JasGX?>kS6^OYczE=o4lvhJF4mW^_sr
z;{AVp^?L6>DeC*9tZaBjWS#<xC20_doJ@?3&ty-oZWyGc*{iCAsH1~FFeTXGV_~5F
z)P!Ny{*@Bt<TQEn8aKKA6zs{4o3*6Dq>Aj1nH}!sgC|0olRrG$N1BjUH@177QNDUm
zi+In>%=`vVa|F5k@S~^_ak28F<e?wmna^=XY5+U>^M7*-h?&cy{o9={M$%-LC)ya$
zhZ{dfMZv*5=YfHN@^Tfsp*RNV`3C!Y_`E&B+!OQ%fC9&r6U^X(!{NpIP2H4uc(3ro
z6Xq_rzFeXvSeaW`yb+JH5P}+sKkNSo6G6DRX{?qgD*m9aXUwo2ZOzRs0L>LXKoH#K
z6BvjxU16}=s|dVR`=5Y7>)+C~o`tBAhZ=&)!9T5%Q{&^OQ5mJ$dGVM3ty@UT^K2F&
z`<S!|;Nm*doxlv#;UPFw0=oL`?7Y18<AuXI^)|M4c6PS5IVG^~nFU2f@A^SdGBY!i
zmzU@2EkE%Pay!gy3k#DUOtdbps7PDqFehaf5n&|`UnTel<}CBtyablB8W_{uY+&F!
zuoxHobPxfI)sH`XfSsJ20Lx~O#i}r$?;6~j@6WkD#GD3X#Gc9z)bVHKV8gbCVxb%L
zNCAqB2qYMlza4x~UA%PWGXy^=fD3PiZ`;{P;i+;inFUWTbzxy)JK|uzy7~k-$JSX-
zGbMl}f6A1F;q0rXO-4vqYkc*T2{_l@T%Yg4N=x^dI$B!5`0A~)hNaYu4?v2q*XZ80
zkgl4kURY4jb~`oCbpsBOo>cuKu3-Z7GOZlTOof7GFg`tDDteqLW{{Dg&Eqstdw-RH
znTh%#7g#`Ny;=xn&<W57hlxh&lY>TD`frZMp>8yxf#7XaCOb?M{RP32yvUc8MNbv2
z9_-itR!V@Ld%eyHljoRS`?9G0ddYqDWftsyBdwwdim$?)pg{r#8RbW~MswB1uB;eZ
zH96YUDG|R;QcVqSLZfD6Vlp?(hW&qdzJD|dVh?R40|`Rw@Kz@oS!V}r<ssR-eDf>^
z4}Q%a|2XLRw5*tOjPZsGC&{6bNnCt<WJ0Y;at$n1o<L>&ZN0Rx^Y3-1USCi{D@SD|
zlRjkKjYKn0O_Nu!hiulb$6JXDId>8H-^2I5#$I5^CTqK)&=rWPudfHU_H3F*H)jmV
z#_>V|HkjAwe-Ys0M)epBV)5?`5zI{cGm5DMVE_M?<MGjGg0YjrSNrc!NQC%PYzQ*e
z43q@v9BhJcytVZshy%#Q3_ka5hJP_`7Yj91_A_;JbCcmNOV3QrNHI$9#!+)1{U1;P
zSkx9|(|HJXz->28z#|kHTDA~$F%TR&p}0?f89T<P@fW01zKHLK_ys<I)e<H2?jH-%
z)%fDXW~kid0H6b~3J84G5~Pw0GtJ>-nzla0wPHQS`q&m0(1*vpgy4roL~X9F(qSIy
zY}E&-$+JnvNGVXLvwqsK^e9J02C1Q#KiImIZ(+Wns&*86Z|**a|00ocTS3O!7kPLK
z`qD26$BlHKWtobJiKWF+*7C{y!*CqMeaJYG@c`fmaxW~y_yDM*;i{*^w=0Vp2v=>3
zKlsPppHOG95u-nY^LNssQ&Cd#3~LHx;mpa?KD+}|N&riJ?!)xNNrJQS5FcS4%#Wv^
z*#EE&M@ckPzF_65ecvgL0%;A9d#S-xM2hP$YF-dontbeJD2VzH1v-)8v(K_Kg~Nq?
zzTTmS<C63VOUkzpaOR9+a@BG^{8b@r16p;JC{Egyw<U!PV}`x+4-gpSF|A?NKKjn=
z?aV^-mIH*ccdbv>7O@cHGlGP*@AUACGlTk8hetg56;T|}Yqc#`IhN4=Tc>OY!sf+W
z*a1>A86>L<8-~fS|1>*C597aRE{62qXT-o~aNfdHR^RgG*drYYpwUPo@ITGelKKa`
zG5ohP7`VA3?-K17X6D8uP*_-4%F0-pj~CuR1THZlhR@W%__YQ$K|z+>bhS6wcoY;#
z-@XlPVtoEg59YE2C2`@0<>$NHc6N52)y6qSwYJ`X#;x{tkzQfoz6J8Iu&^h+6g|DY
zV+~%LUQgT!W}s<C+!?=8)6gWpqgx-ZzXdCA(A@<q8Se}E<$pC&>B5NIyP}8<>7)z&
zg+E^><8jq{i;n#o1W?cl^IFJzn*+<m=EY&_eP<WAJE5vssk(2Nm;~tQr5G_7pJc16
z%qO4GvA?psy~YBKQ_9N2R_Cu*QUBuMiQ|v7%|zaR#c1Iv@A~|3h>!X`08m<SGH7tC
z!23g;31q{E3+?+yi$DLxjbSt8wnYX5f#ks8Ah=zu^ji)0K&xhLr9=PeCQMdVcFWe%
zvg9qjr@r2BV+awmrtL!GvETjjon|kEH~7lMcAwqrI%~|M_YOwp6rr9xfy^4z2wDhI
zpifi2E!$`9e8=(7V7Dg^A?*_Xu<c$PWNyP0J+6y#YGY>W>u1JXe_>@Ci9Wmg4c$L~
zHX7A^TpS;F-dXDh`mA1|HScA=`#^AqBqna8kP)p?f;L?<?WH6G?~xgto*+)JvsTQu
z-h5YA$>8(-eDGMhPl`>id2j#I($(LP!(A(DGQ@1N>n^bT<wIJWnK?4Jzpfy9%5NeH
zCZg%o+W{EjAL<zi__m+NNXw{Rg;-+3X+KA}`=Zb~jeAe<IyKmT&$WoHK(O|O9yZak
zzZB=}CR@klPg<LDX~ip<Vf8@<E^h9O+wB*LeZe6?@ow(-fjD;?_jeuU(BWS0_W`Dg
z?RVFuIbGstmn`7yx|0cvU}FQrc<fOJ0|R?o<^B1?);5s8dms&$FIPSj6%`c{N<Vn6
z-|ArG?jG6;cAxG1CsQ-CFsbL{eg~UbmTP@k-V%O;0|S~rw5~q+AsVV2tL$4H&q5A6
z?5(YR_UopLK8z154+C3EadB}lTZ4D=;6t_bbh%!grz^O>Kug|Y=Z~_I{y~`E?KvIS
z{^G@wwT%Uz+g=(9I`$aeeNWhG#KsHKe=Iunz-@Wt`y?9$MTKtD&s($}Zz2rPSiD%7
z^O{B2$J6tAJN`xf;N+=6A;?M^Y!>k;D5e)CTsDR*Qv<*}8yVZhdKLzTAWV1A(pk1W
zF`;g3JQmBl1Uy1;CQc$EBJSGTIiVvCJ{CD-0OZbCDqgPzmM`3z75XU}<aeHCz)EJF
zS>sDkFmN0OKFw8mZ5c@In0qzcug&JQBC>e_WZju)5<0hl94`MVl^1jy@*tsOL5`3H
z1_tey8jWu9Y<<p$%z}7AtUNtUO_R}rLxK+$+q|}p{(@R(Bnms8WRK?VUtWGbed<+1
z$1PRLu6_I6SJo@2IaD6`2Qw?9q}qq`2+E(q)zxQbE<jok2qwu0d-h~lj*WBj*e_91
zQ3(t1xE(GnzDP)D<{>0vS&u-9Y(;YXi|39B=}ZDOSdOHUmR7PllNlHK@d>c0Z*Fb|
z?&Lr*)p|N2h#aud{s#=|No3XY+=TC+ZjStkJs$ll`TqUaQqA(w{McALa@q=I*-~(m
zUn|lvs6C;oOClutljCgTQrp@p#LE`_=jMy)FE|w-{C8C|g!uX1I9wiCyDaQ&A9!4!
zJyG_7@0Gx3hEe6YMj_FCez(6VOpBSbg#Nnf+5aCFQ1bnIE;3FBoP6-)wR(;!5K-&c
zcMy;fx!zva?R;kvkhfWAl;=$t(Tc>1bWsDtaOwMoErb!^LsVpB9)E9u+d7*WbaQW}
zDg4g{PVR^KR<prQvHSQJs{j7|)Azb{Eyr~pUO9HJpy8K5cNFLrZuIk;tu6rW=-d|i
zzT#c=`}6(Zvjkif_{+R^%NqLYIXj^NK0G){`r}`G^dra=hF_TLMYJJ7j_}QK`1Xv2
zNK=HFYUFTiA9-IPLEIBgP9o2y^Q&%8!eRFp_xpb9`i#&w@(yxuZWB}ohV?4P=SN0V
z$Y}?UkN%>_c=fB+{P~5rMO=7!c}Yk}$dUif9}6d8<Kf{sSg5o9^_3_!E--M}cQZr2
z>1M4Yet38ogq+pPsNWV&o>E&8NLMZ=6li6i8y(O?{n0u%w+_eGM8AfIgQKU{;fq2A
z-8QFsAouRi?S12uk_`0pq{mVYT!ejZk`MOk>gtAvhDL39PkteAD6>1xI9L<0z5Q;I
z{N9zQ!!m^t7x#Zf^9%E*CZ|Lyd{x#R8U{T*J-2?ReM`UD+a_Q#nXO(wYbYqt?!ax%
zk-Z@50Qu`&D!GhT-$`dz;1idY>Y8p{qU&&QTI1{vZm(4R$SEia8o<yat{OY0MfLpo
zOfIp8m+xyYR4fakXar^Kd~9qYO7-qHh1Q1cm)oULys7Pn=jvRt92C+tmQ6XgOeI<F
zPqXgoN=w6;Q%02X&-?oNTpp=a#5HyRJOMN^z9&qO<YggSNn1f4!hGy8^;rd^k4$Lj
zxzf~Rwv629$hj;5d=`M5t%_Mr2|R5j&a_U5Pt$q(R<4knNx*8c*%%*BQZf)Ur8Bb4
zSX*10a%dYHKi9@y9KW}ig^3~}5U=39%4u4Ow;O5pTl<`mf3N}eT=L^bXjD|raWsvv
z6|Li2&5Qi%xC!(IzU?`CRmy2HlrhZo<xy}7u|djn#GlWhym#8u<E~`$no27?ku@?Z
zY)ZMngzMHv<2>RZ@OGo2!?M`k{jRmSrDfi#%E#w+LHs>y79}}(ZXjWv$KKzG2rKj3
z;OgSy-(S8+krNP_ZcmXlnO`e5%r!OuWoBw@m^1R6DbaP$3wq#E;)L$_xh0?^59-UZ
zWl<iUNlix84;zdIqj2WK0IHHd=X&ZaYnq!^V}ezq;WhIi*;)oj(Qd(LI;>CZ1Y{-K
zG6F_hG=0|ktzdfQ)&8NcYTxZO+OQwyk+NY{r2nVj2PBNaJmb_j?vJ^e^OlP3n?J$-
z<!q=)TeBxZ>lD28^|e~KqdkA8^;gk;r~95Kv60QQ&bXdkoP%2X4`UClWSjG}$^nZ!
zN|@Bo%~Sbr(Gd}?zH5(XHw!lkze7LN)HrhlC~@@!Z30BQb2BtNGOzospP%R=PhP{*
zAYE2XhxmiVmg(_DNt6U4BE1YfFp#XD?d40>R~~0af3HqAUz3#T$4vMg2wFSJZ%>u!
z%zxAo6c9MzS)Oh1>sXhNdXBef1vnAruU@EN5NGw<pss)8Of{-y85tiaUcX9E5WT)6
z`1tjJte%VaeZ%N*rzX)>y9e8k0aMOmTp4H6B<DlHTA-8JVFN7+hzq}q25`R({vOh;
za$>N&RlUD~E^0r$d|C;^&|cUf8zY0@iiye4(ayO&q?t>d)fyXe%F1==D9uexSKzwy
zrap`}xKk)mXCfqDG#Y%=f?c<S^p>8`iX`2cQ8mlT7kgy&v?yV~@4C-Vx5>#&#qI!%
z0^+q>I7?#d*gKp?6_?a?fArV_;vGIS)5vW-J*F&u(yFWL?D_#%>^<WBz=)9vY9lUm
zJ~FIyexFpc*+nmSxo+LgTwUn`jCD^TT{dKOE;aSA9g!GJ_nfY5MD^mpT}U6qC)p52
zYgyym4NJ)4Desw$w)bqc8U2r@`2=n4S(kL%^ynfUMmjpq*RS^s?yj;LX$C1HM2Gkk
zG#d(I0a5C#IzseSYT}*3`e&N&Z@af#*9XiziHKN)9gYma{cJ+_50DHqP+=v%8I+C?
zE%ZW=;Aa`ZJ$%B&WOOh?gM)n^Jyb=j-;(TKGqY_518}Y5=AZK_87ZfHu4@eWR4Z50
zYr6vgQ1r*;e*X@w*R4$ZLNBT1ewi?s#0LXznDP-ZkqnM_)YNw?T|S<FFgp;7hyBvJ
z?cQNkNTC>?{6lb&SIjQGMHXXqnq6jhCauAYoU<jwVRTf~o%;@b-WB)P&wEE3EILk3
zPC&B3W4m;7cz4?|Enooe#u4@2-T(9tC_})1xp~`n$!Z8)b%CXV{6Z)F8RFjF-sgF_
z#Yew?7gGtk?etz;T*M<41xrgy@4{4hg#dpK-&;(}RN<Ykb~~I^c6Q>JBmQ3c9TmCj
z4h3D#=>6XiY#LTwHPa@Kv!toeFM=6~ClQ%e7J_9gWuQwi1e+ST&J`wjf`se-NYjsj
zFzjq|w#vDW&F`G~V+E)Q*1i$SAf#l`F0m_Nr&^w!hLE4E-m_efK>3EMh~6wF`Z(3^
z?K2d<qshmR6>YWg#+#A+%#KFK#Ze9b{>5gtd#naW76^M?yEr&FtQIP#Mv(D<_04Z?
z{`fq0Z?T1qk&%&~e?2c+MBsWOjjJ7`>=k~eX|BJ185#XugZ9hfL}PN+KSV)XBrN|V
zJZl^V7mN2L>Y!g6kiMR0M|e-n>~>1tzqr_+_d6ODkCjupIA%>3g_-Gyxb6_LoE*RC
z$p72b6=1KLzG8Rrr^<JCs;uL3E3e}o(NR+XX9k<!ckTD#{ZU9t3K{vxz`(y=RTY(m
zHfQMM&g9kA)%~sgo&Dm?L~upN-41|q?b~j7@_bmIH=S&6TlVsRXxn~&CusFomc~y4
z+@IF4+nbu8tNFP(CT8YO54Z93!NGx@0M;4_;Tvpmo_l7it2>m#j(emGFS$Iw`^8V=
z3I%sUz&&nU<Upgws`kmq-5J3J2Gt6|3cljtzfezes?5iLtcogtSSZ4H&rFoo*TuNb
zm~kI+L_W|F56Tgde)QW2N?ix8Cd<LUu<PQ<8i0ujdSBKhFl!2XUv}<1YLRbl7Lez#
znXNw8?6||q8&<nLovq<I0${SY1ajnZy{%w>qHHv^aEbTN8MK}t!A>(uNH8EIF)?Q@
zwhR7KPBwH^x2_n@g5c2AVBh>lb}2<MB|rM0>N^i;brs-$rCEY0%n{wUiE+t@b4}k<
zVx{-b&nt%_&;`449i2M@j?QRYHM7=@PAOLWOPAx79omkV<_C0Ll)cm3x3J%3pty|6
zb#q9~%HiS1zD{@mAox_}EWUgwJ6=N2j4p$MMK>utFoHAh!&n3l^@tn72D_AGZ-Z7i
zS8bS-@2OK`S6A1Xnw%RaoZ!vBpNWyycH;jD8l4^F(fyx^yv#<@n&=b(gelS(bIeG<
z)B3Cql$3QCYHNfBMRX@M23SxBVjW5|E2gB+c|jB^<K}DGeoZcv^+LJ0?vD&`N9DS}
zGj@h(pTYTYCpq(L4E!Ujemgp$`#(NqsxRC=njbd(_6>!MpNp0R9nyKb#cWQV35@7Q
zpq0h{ajGk&uk8?&q5QnWlE~Hu5TB>5QHpL7#ax<(dNPQbU>Rczl!wp`Qjh=e5pN(%
z%zNjH(ORQ;G|$>y4=3?f(V1=E?QEP4E|;C0>bpia&s2SkJ`CdB?a;``iTlm$EEyUq
z@!ar^+*6xrWF)|ec3x=p00?E0Q#YUJrYNxT6$*|hyp1>&n*jP$kx>Ab>&zG@DEMKm
zdm^kp(&92D;Eo2M*=o!+Ml?8v`>Uv^u#=82E%gGt22u|}v^sqALq4}5ioSTvgXBO|
zzL>PYJfH>B+*VC?7`gkAgZH%TfiW}`9oT+VLa$Y#{)V;^H>@ZA#Ibk2QA;c-v7C*C
zg`0YLYRYYMgz7(vO+)JkoZk?vXA#;b_~(xEHxZ$SE6j)}lIImh1tiALY3D?_xg>JV
zA2!5H|K8A0tpXW+EYn&%=3_#Oz%c;q47yV!VQi`459g<y%NFM6kGfxb?ai=*j12-Y
z*Zv0Q_owE0d_L6ZRCim1V#Iet*us;px);sE^Rr7BUt>;d<+?1mxBChI!{WPf6vQaf
zbMS5X2k<atpb|aJnn^7u9M#>xs)nH@rYzyxTRF~%1El@r%KMg`0ALRB@w2o1$VeT9
zg~3%Rpv0-t5_<Cn7eKF0>jN)TGr<bJ0ngEjv3Gj&Qq=U%cPL5OceZm<-A8Z2Py~ag
z;ntd|rc)mtT@fH<=NvmoP(76Bg0X`ydc@;aR^AjiDHNpkaz44mqmE|7eJuU_xK?4C
z4xZw;EcqBH2~xSO!F47eC`eWo$auaN5$L;LM`vV|b8TV=AdZ!;Ti4yGCqWV|s4kY<
z*AWpz!0FykPEIb{h~tl|>wnNQTlM9hb2h378_)UP8M){8@D&RGX-D@LE`voqW*Vuk
z?T_zi!Hg7%9I}TDcv0!q+PHUt+{;9{Ko22ml$%KHX8Y{a%x}>Mi480&z_gZXlzr^*
z6((B(F)oT?wKdSr(z40@`13)TZh3#i-7v2~O_WtQz^ywFEgc_T#ux#mOY2jh(>~v;
z;j1#X+ah?0T1i^zBl-z0xq-|~wIwpQ{P6z&_jV-ysj&yXrtC~;R1^aoAulg4u%u(7
z-2N5_6#igX6+3AY6sF(&%z0;`|MKz+xZnU2=y`QQ^#3z~6y)Up%yp`q)~gE!^VPO%
zpfHzQIuVh((VXrg)%%%0f5dyeuTBy~Z(W*Oy-k#qY^<#Zo18^U)tORRxVT(adzC@V
zRYw5c0Ed##eYN)-u#24Juy#){Uhmnn92AsW08*^~1eG3Srt5hP3<>X&a%N}t&$;6}
z(N0{5p<tpY8@BJujDcpnY!Ly-!^-}rO>igr^lL2s>+L~{ed+g1vWQJeF07cq4JR2v
z`L}OlKyN#eNEQHd0lW|Vs{!LD_xy0#&p+*jXoul$Vi}-c!DS<_pfE5rw9$Kd<^A!C
zA`1(C*w3F5fV~Dde_but=K6X<QWEE!?sNJQuxkP3dU>)wxY%+r`dlI>h7n8!v|DOT
z5kkO3@AK7}47~PTW95dx)~%$PflhUx9{k+6)?Q`l+-aly_&dk<ZJH+%L^o(q#5l@t
zCPPr>l010#uja1V_bQvtMe(|yx!yAm*f~v?9^NSN=r8f4#6)UQJ6T+=rq#R$mgu3F
zJQi9DJzVbSv+z0lN>tiod^|BR@%=+7C>Q;1j=y~@^Sx`mUXAv%toEjk2GX0w@^V)4
zsIOlY6vi%(zkU0boSY2mb5QiYNo`%9)=2(8EP&<&aOO^@U~~$Iic4)?A>S=*Z5i0h
z)Kvh42(d9`*L!^Bx8l4aEj-_W9aYX<%K>Q*Y=Y%cW!a<WrE8-n9!uW{kdx<({zqY~
zFzAvYDVwKMGSsFxkFL4xKmDvxV%~fHhF?`xm6unHIz^>|K1e%};r+tgT<%n+bx~1K
zOY;!p01z4dVPVBc{3B*#L&-8THZ~Ml<mAFRJvli%@?9PZO4UFOsiXsdD*L+<H~GMe
z8rgaL_iAqcgu>YZvdtkkczvQxQBwSZ)e-hx<Q*6Bu7JY&kAiSVA(0hZZgLK(t!8<Z
zX~`pFolBPXtjQa`r<%C=4z~Pfa&dOu(hz!<dBbON_bSFJkK*S7f#~^HA8tuMzh#>H
zOBgt&fK4)}x6xKrJ=8St;TIGfe0bLYnDSfcV43b4k(uv^dOHL`rAMQ&O^d>cLX}0>
zn%0JmLhr+Z%}FlepWuND6QtFReCV~2uQI_l1Ftx)%zOc7djs@LfBAxXz%p3v=y+Vu
zwlqF284gr;j`r{0zjuxQ^6?=!{Q`1pvgq*e$ziZhI$wwPiqxcj;QmSl53GYKZ+gOO
zVr<hWY&Z8Xk<*d1zVV%OH6V_R?~i})R&F>+BD@jGH?1LhQvdgov~}-sB}%bBLbDEm
zdcyrnYAU%}_wKZPXmm74ZoK5=D)$HL>*|2HHTeH&sd^e3?N*aki}?T_^gike+1}m;
z!{$MICzrX4%QtX#4Fi6eW<|<g2{E$v-3}yo^8rc#)w}lD55J9dt)Xq8Kms3f$88Y$
z^7bNGd{vh+vjNuA=Jg54)P7R|*d4gds%vV30i*McduL~74a>fYwtzwgA?oUCv*xh%
zl$CdTV_2uF>sdvc+n13=r>1{DgD`+t0TUAS9QUhfHEtDODD2|rxH!@gDv#dI%>IS<
zk!C(4a@KzDab0zXr1x;bd^NHg7v8`OotP;q&n0OSm7u5utB6W7b)9nF>y>mWSDv&u
zoWfOyVo4h<v?e|Xgmxu4<(;zfD@Mj%^>Kw>sKe?-+?uH}hXwg4zeU9iluC$N^(CQ-
zvNF5dbK-D$N$38I_iAcU)IO(x+jqaJj!k32ef*nLMJa-l_AQVwlaX%Ke2T4lSClF7
zDi#eGmGrO2yCeg`gbacl{R_`x)jj|Q4|A%!V0&+SpuF|A&ry5Xi0+b(^)^P*hW{&-
z@aDRTd0FPdq{b2g*J>3n+=S*K74h$spv8?V{wA0I^lGix`8yLm*UtyNe9qe*=t3`;
zeWs&>z-KvI|1wcVvd@{<W>bH3DejE==#kG!KN|pX*PI^RGK8?=hp`&8=X=f2VksfU
zSRSnifyP{^O3({XL>Q4LCDnU$^*JX8X)fuAQV}<~Qv^X-SS^&+H@`DmZ;*|EsZI(%
zw!R-6e#Eaqtk3G_VJO*BUnw0#rT33O4=OK7Q9lyG%VjNO?6?>I`xn>?0gqlVy?F8B
zGrd}vdST^zhiy7y#Wj`J<$<uxmRr;K^dH9~rdgIV;qY0q;$sS)Z_=`TF&zi{`%O;k
zCo3zoD99u@vSNz)T`u-kE-uMPv~L4^;LrA~^KsmvMTO|BDrHT~Em%{=Rezf$KaVr8
zOeHJVVQe_iXdvfij12yL@=y*yX#F2!VP$2cIPzi70nIUWv)xLjOmP+_IV9^>Jn~0c
zLTQ=avx|#25LBk{aS=&jLG0Z)?HjTdP1vJbq-e~A$WPwRVi??M8Y6<jxbEcS585yP
zdweP?UcQ-4EfEWnrxrNEyO=v<koe!G&seYcQ6Qb+m#sea6(0I(u<&ug8Wm-?!8k}G
zy4Qt#UErhQGB(1OUzHo2te{XQ{soVoAHh6-UQVsFT^NyYg{Yi`{{l=K<T0O|K&&S@
z8MR^SQ!qZ&9jA)VVjyho59CrHoc4y_aIeObx;JkoUV5sdD(+xvz;y6*ww4~^8<f}5
zjOF}j0oq%baP%|vqi9*B#*!CV_vz+yzWV26fagPfPM;ws%)Znsi3gIZ_@gW21glge
zT3WEQ9B#$X-tkJ-lwTo6RO!8!h_5Is+OPfeClWWRiJA99{+73s6WG3@oqKaOd(@Vs
z{l#&#HYFw$JT5XuoJxKssXfYn=`|K=vk!b<7W?{#r+G&DL20F%YNaIyq?7;kSE#kd
zTvkG@@BE|&^kmfYsx+9#X;i7R=*z<%hpeE{f)KJoB-AeUGVvq`zx}OL_v=BZzvU0T
zl$l$|bCPTg*w9F^d0_%4)79Cx^kA}!6<+wP!9-1#hgOISr!FT%<a36`++jkkD{SxG
zyme79TpE4&b=?0%j0OKw?4OK0w@enJPl;1yTKl^Fr;02=K^O#j^dq%P&cVDEG~}GO
zFYy%v^KzlzoC>^MJO_TkuFi}Qduai%A1Lp=F{h%crizdt-Z-arv(yax^D<*!!{D{S
z^=F|HG?+p9HrV9iU}eEn2|%kFR&|qvewN5}7y8>XQ{37RjimCgZH>aETdY8ROi_fr
z>kSHiiV`s;L);gpUUaCsLNC!}h!6b9`QG$17*PGc_8e+4lP$a?Ow2Docem91>z4x>
zpTM{K6FmGFVs2y0VtOt&8+QjM%$-@HOSK*7*yveY@E26sf|tFXMT~u<n@84&J%XLt
zPb@6f<1f<+kpRgoE0OOrFN=^7t0lt1Lf_Z>FLF0x1EA}MG~kUKDg7!&;3YENpw8>r
zuah;LoJ{LOwZ<RWb5b?lsL(!%B1G*+^Az}?F#V+una0$~Mv0%Bh#K#g$)l67XT9&d
zCm)UxruBMT**Ku^@mo-GY&|)$Nh+yv_l2?AvVC#5d!L36KWuXd>jPolAw?U9`baj;
zMMDXnj%odDZx6GEZ#4gk=!x_{T6wM4{T9D2vlU)J_d@nKRq3g=w#9RyNq-eVRX>Uq
z9MGP5v_%@m_<9c9y$Bnusq#Nd-8|cvi<po~l6mADA59sZr=jrlV0iS~E$MY2b$z&@
zr62f3KRJn9RO8vp-=W4%pS8VXtTdUn3P@?lu;T_kcN?p}Cpf7>YI%yMC|Oqp<C)#8
zt^GDkp}5V4)lgf@-B4@L;+ux#`^a|d?_K-vWWK78X7;SuQyU=&4`OCG*^V~O)W}6A
zL$=N>$t9zvArtQ0w~e}d-!^~k`MoDtwyy~1rYX5hDvAEf7$8~?>);23a|K3KOp`W#
znlDgDg9(M&B<S)?@t(xfwOP&o?7Tvb1@Ah$Xq*^v6OOaAHo=LG<!t{q8|!%T2ufAk
zBpZzO+=M`V;MIJV{MIgf);a*@8*3ZLjp*HbX$ZNtaQrvq781zWEdjG(e?7+=N5x6Z
z#kD#mlZqY0qty4;`Be_elsMhvhXBXy?~m4*MT_{6o=QzaX6{d&7l_hj^ml@vKvJ)M
zh=vfKn@7k(acNVTVmjUqR5LA}x7fGqy*6`N3KeIyYpSB6y%6lI1{h`SpFUZ%UtO{B
z-HY`@u<Kl(Q_ndp8co<^w|a;T#}Nd3&pdp{maGX%S7be);`QjTAf)~oRfreG3hDp$
zIsXISrW*4_szkk}62_Qgmot*XS}joY_VxPlmw1yrjm<S(POKP<4bTjO<$afRpL8!_
z@0v5(*^x|1kw@k4hEnQ$ZMp>Awd7r}%+gkT!rQvQ|3jSaM;ng1RyZ5PJ6^hVnN?Tu
z{q7#htzn5TZ~gEd+3;Mnj?mXI`=@*}KxqbHd{_-pL+wnl*A!H>Y~#ndp9Mmi<!Ixy
zGL`AE(ki<|2(~TzBYOFk*)v@}2s+hhsG|5i@tb1j7h(GLg#-Q%2Nb6!lkFv$Bsrjj
z`_T7q{RJD%FE$EWUJT9O6FVMW2`nEDdV{a>0<o2D_6Hw)Zwyetj<^>ij(sD-@e>mM
zmgLbR*^kKqeIzkCiK-EtJciGvIZ1H$9Z+4|wJfBh8uh|Mf8_!$1g#PIst0u+t(H?O
zx$i<vlx+fErg2y#tpqm6XexfrsH;xf_=;xS7O9v!0MEB60mZI?(<E2h+1Z^`F`=dO
zgE`gN=fHMN_L~8J6dLdxhL1rQ^Ys@a?K!#p+W*9vb8oSxE#I9R%Vt(rhOL*5QlxhC
zw>82honJtpnpQN#k#j<N;@yPahB@xng7+u#y)`#~KheDC=^N|p>u`TTM;D3awl~uX
zz0hcRs$K8W57=$Xbev<q>-!s=CVuS*;ryZkK-+SZ{}iP&w&2B0#Yw!dMA$t2GzWdZ
z+RB!u)Mj+^QP@Kx>ndI!)%P=OU;VCwAPo-|5rmi76Bq0zY_96;Fq(<_Ukpx%;5<X^
z#KA@DCyY<5eYL&V+$>|4U09fTEX*-BuJBc}t+K|psfoO9pp0Br#f@>$<h+kmj7oa3
zAXOtdeSk!P(CN{tH~{RWq_plkaq|`hZf{fRnZVS^;JQ=Ao4^nvpoVMd;Vjn%vp?U~
z*12*7NT{eV-j-GPl~BZIB#0xz?nqGziwOVGKB1%G%v>{o&yMfRT34Dczwxz9T$s0b
ziM&FhwfIiY+udaGV>87c?u7vYjJ7J7AN{Gy(XRLh-q3%$1f};{6854s@5=63#c1RJ
z^4Td&NK8Do49aYsWaxOIGMLAjxOuD%ZqFl>%b(f(^5a*$xzFj~hx4(CiTHTbJVHVe
zDB3BO1KXBrwK_cZTJ1JZvS5C9t?<oLO>-#p%6kb+k#jz+Hiw$qFSg$w{UK2P>%CM?
zrE_vpy)7uLJwm~INH#4IUtCKx7~W(2PVaW`y=Z1yX695@j{730PZJ*vntqt%CSle8
zP-0$-*KPx59_rc*tuymB`7hs}(fHkOs&)`RMn%AFfX6l&CAo+f+*qeYo8WuqhmKRY
zwSmvAk56DPeVk8Wg8>a9fIT{{$5@Nhr2d8Uc%Df_(aYDr0l&{|`}xzduQF4-0=;+z
z&C;iniP^C+Zg1-QGgXpeo#G0M;9Q0)pIek=UoTH@34+bc*x352R{Ccm<)x*YL$esS
zw}D)e+S<pWH>*Wlb;ZTmtv|Hz30;oIT=n$+8s!LnvQtr1&RJZ!2`XhN+vhr&?(oj4
zck=ahQ!|#Z)dN!|N!<1qhJtd7^677HMQ>)ayVM7pT}#P#C_t%qH!kWYBETbq2(}CH
zIJ<l`Oh7_X^XY=e?)29CfWx+(A;^P)!5VbYENSTr2=Mrx&kbK+Go}KH$7MQdSpA*7
zf#|;G@NgN|iDp)-tTNNf-||YK6{Yt1jDHvy&M_0@t-;`^W*@}e>R0F-_tV*`)k*TY
zde`J#=$z`3=jkYKp9&9`)eZwf$v!%R&&+6CNtGGEFTJZiLn1ZdU}E0?VF8Tju8n;n
zh;N?Qq=$Pu^%CrXzx>y47iL#!c2DpZqhP5PFe?jd?9}6pLQHpb<%|mKAKV}eW<4{{
z1Z-SNdcYp1G6T}^<qK~#NF^>9VcWo|h{7VV6knAU6LS>yWLHETA75C6!&r^y$tCi&
zm7;l~x}mDQfv-LfR?K%gf;MNw2ElTM@Acl*^;jKBpk!cRx7US@s*(bq&$ag_)#dg!
zAZ2O^4wn7>2x?w<>jGDM|9&uPKTTFf*2@clW!2x`zffCsHnHuDL!*&MSV0{2g@tAR
z>WW_|(dXTJ)hVYwxbo(Rfk$B(GiXj#r;F6BuU+{SehtL)4WC?M(-<AEW}(YKtJ8*n
z@19*C;zeWKz(<by$E}>1Rcc(_;4v<R9r<&crnOg<8Zx`j1G|3~F$R;33zHSd7uX(`
zo)$*#ihAE~Z7A=$+AFuayzg%wtHVtqnuEk4{u&vvv%k|UUozGPJl{e>DX(BlGsfxZ
z7YU?kR}T;ES{ax4?BbU|4OClS9y@i`jT1G-@<lPpzNfD*@rTa&iV?&1+`_^S!A~?}
zq&uBOs#(j;r-s8j>tK%7<YZkp9UV>k{RU`~Y;sO|B+&)8rC`odS5__k{r-K!a@$2H
zJQ8bn`p-tWuf8k=7{7eB)?c$q5RC9JR=XJ>QhWi1-PtW{?^Db)nPBX{fsW{I9UK%;
z73Sr|E4UwK(ADbs^0{g}kA2NDX4Bpy_3?Ws92QPef&M70!DdcOIah~}ruEY|V8wZZ
z8!k29kT5;L^?UtmHP#&Cq7UD4zR}!rz1^%>5T&4Rb%nj*U}80Z9s%OyeYCVd{zUqx
zt<L7u?=?m`B9+3-e9qg*h=}C)KUm5ULAO%Fza_dc;Xq)QRRyc?^{~4{cywQggzh?F
zxwCvig53G<iqhVl8tKf4<!yMD98(YdHkuPp^H{aS>`*{mct#Nhiuq1qpsCveC?SQ?
z<m_e$4h;vKfRa)`WaGEwuO8#D1tM*wD{qnK4`EV^I?Fq~U*2SOm3|Qjp5(Y>rKKYx
zq8yFB=b!#o{iC+OpW%1f;AdKEFqOonb8=pFD33lKuI_4Nq)(9YFZc6%(Yv7_Qk>`r
zY@FyAl0yEb6H6s!Wnr?h`|IVq*r(t6^Ydv}jZMzxE4{DcLZX@Y*_6ti7v~c4wJnps
zPYHKb<kbi=FjUo)hWs%vpmpV8XZN`K`JtD5;!PZ23oW%sp4uXPG}~cyey^RVnqh3@
zSf<Nrwih6fsMB-l7({<<nIPNOoAsfM*82V%tOzO40}UNWp!}3j@{2e*$1Q2u*wX4(
zgTkjRF8jteb90}ce=t#TlezDtB|!*@@Z2GmeWXy1Yvqk|?`~$N>AmIm%C+>Rq(4~h
zdcJ$F`F_6BA}`I7hhsV;V-YmJ%*oKn8)2ZP5_IkTxV}SC<}5A;1Ngy|ox%M#%and~
z-Gqc|Z8o53L8Ls0(nWyZX9GE9H*pG{o({xd6PcMyGc#Lk_b2;3Yo^xLUK-{CFGejl
zQs=He+Ts&gsY!TKZksEo)L11beE6Uz$(H&p8CTZ&Y<qKgl>8ii{$7!TW9)lfywcd{
zjMP}l1Si(6L=KBs3(`L3wTYJX&*_><wEG=`?44QFzzn?!4&4!y6$vHZY)T=AYwzsZ
zf=Y|qUa$Pw%%?#-8Br$U!atH$v&n8pUDp0Rq&EZrnqHOSyq$~=oSKC?cm452Lgg~_
zH>jyCHbm4%K6};$?#th>!6z74ujb!+pH8(kH}}3!EfsY?+?x1y;`nPET#fPt_yPX+
zcP;i?iMCc&PcSeT*ypBsJ0qWQ%lnnY=-R63$uLLBi=m?r!uOUEQ(_fToy^S(Yf5!G
zu-1sTrO(N0ZH<4PMON2rvK}tB?Tg;`iPqMA(r@!DomJnfY?#r~m+-qsEZ^>~ti(iy
zOUcOGq=|Y<V31>MomBs0NgI?K1S0p7YW!yX=j<QrMsuU0VZu7VDqQ#F1Z6y+&|P(;
za*}tpw#KqV1(>X|{bDGnlkH8Fl(_VQZ#(WzJN^t4<B230NHh>_=?A?vbRUArsbW3F
zANRL14<;D>`s&dvR3=R<&@K65NxQOpbU6!VFk552>o;cCZar=1oTkdEIcmi*XZ^D)
zz$k7*{c&VUGE8r2SyXJ-ta4zLfB?C@7kS(#JoM;j`Tk(FE5|5qf`|y#$bC(7KW?yH
z_U`2>4{-y)cFy-sm&kw^xZ{@@<E&;vEd#-DV>hynWtc2iZAbnWY%cUjDN2A7@I+9#
z7|uW+RK%diO|YAj09Dy4d5;rI?lbUw&Ly?=X1`@nz8RklPpVk>JtQ~Z0u}U7a`FbP
z;aR@$NZ%1Nk*u#71^CysIDPT*1*Vv?GT=h|*XYYKU!NEfjC$WK>Z=fsy|?@-UjDqO
zzTPcHlVNvwM#kBBclowE3k)_h=zy2;;@l?PUtcgyMl_`~wZcFOBaF4X8OVd~`pt97
z#?tB>v-C+lHwEgjUjK|;mMdqPcd?;ErTKV_c|ln>)*GHTLL70ivAtNQS3)^&<<eAn
zT}@rMgoP6*u%9FjvvGV^E4lN#zwfA;R-wL!%R0x)g^sr$&u;c%#<`4dAP|1n-*^lx
zw^Mnesc&}g;W%7zuj|EVvw23rz*GlYJroiJ)u(CmjT1z}EM;gPwmu3930+U}E(3W4
zA@SP5d`(+JQM69p{p$VAAx}A8(#2Jp$qP#@QJPwQu9g5#JJDkX#NJgcg?=rp{V*dZ
z4e7B3@(1~OLW2D};?${*AAM9@t8}maN7T%Owg;NmHszpniVz5)K~_$OioYSpj;`f{
zOKfVAH}mq~OjXpt6I}QyS**Gpjv>7j`fWFP2Cd4=g9bcxz%8>%OG=@+slc{7*wwfy
z+2ya-A*FUTeU=OlcSB-QLd<(?42;|J3elJP4FiqDPT_fZCIC6i1V}+(iRm@)86n4`
zmYIgMxY^BC`NTUu0VJea$(IQF?TO{v4U)k`VmSOfewOg@7ok%!PABIYmoaU?n}6dn
zq277<5M!ZGb?<;pyVi``t1)n@PhrvHQ#si5DLQ5%VPB$plZN}{p9BSYxUl8eNcMMJ
zb+a|4J*6BTw&hBwr?Tx)J`MZc(%hUduw9L1Ew9xlC40LQf03K_d^karT?CJsctBc5
z$A8{vixH`zyA|Xd6ZCTgzKC6%Bw`{`8<7L{gxa(}Q6$vVQ&Uq*i{pxdONql~&togI
zX?gki|E>?3JG=hTi(G7}kBC-nwXtH{Wx)?`20bg0JU=$4UY;b;bWl){8QC4Drz>T+
zOs)T;Ww15czeE<<$Bek2fz}cC{+g_+k8tM3h>NdAqn;zcs`O`e>ZmS%1zy!7UHH{`
zWM1dbYwhmw2*kX3GaAXX_4Uo~RG(E#Viy6GCm>4Ne0JfKhqBWAcjy3ac=?EP{Anzo
zT*;f;^zN;#Vqe=E4lH$bp;eiwNuId1bq><n`ugP#196avf4bhHK))ZqKk}lE2ElRt
z%gU$aERWO3!27?;w}~<un$tqwXFZKyTRzdW-%eTIAKo7?D-8hcnK0UN7AQtkjjtOz
zu3}&$m{?eT7u{s5_&YlWa5(l`FOl25w2<hmz4?~F^wqQ4ouV3&1cjRRWbNdO6ts2`
zILctn*?ES**XF^6i4@C%w=dPSfBXSn)2Q((8OiDNPnhHTgM)1bt^xDzv9TwOUoERY
zFRPMx?X1COns)F~x6KXF*-o|gdD|RC`y;u0YMST9%AMZ289Br4ijnkvXLi#GbEf*c
z{#us1==)RqMjMKaY@gLgI`q3$ze}oyZZ7V+V)gGKM5>Xz%a=W<+9&rnH1}dG{C<C}
zG#ePZ&UpL$_$vLTo9mcM(B--s>OQ5E7N5vZT897$S(W;D>i`sFwY3AM*6Io*i8wSL
z;5wL!(>NZ50VXe0w3k#Zc(XIQpnEkqs3Km*=h_645o{iQ(QIvx#n7+lLaipcxx0pc
z#19IF>o3$SW#4gqsvoeC!R8H-U@M-!Ewu~~iwu;(1&DAXLEK1CP!N4KO1B7S;~Pk4
za&d8TK!AuB2^mElon>Ium!8_pOzhH{Ctt+lDrfG>ReDu=jM>9lf!OCZRw9QndCo9j
zjy~7EFMXIx)}hh{h{4k_=<Z(<hp#yW1>qN4mFqXl#V9ar#7PNCx=7@D=WCkviia2E
z{16l17`3-M2JieVYwPg-26z(oQd8;-Fma@~IH}oHcb7CgLT*2X$H{$`LxO$u9(|6^
z?>LyI)AyN5#>*92d6md!Q0=NX>vwB^FDD2|upC{<rmgaQiihz#U#&^PXw-dv`Zp^8
z(MS_?U(uv_b%gHKXgb+dV%)JG_jdE)Ew*lTl1Lk}g{#W(xA!jXGS}6K^J-eT{xC@%
z3aPI|quD-%Tqi$BF#SbwNs=ZeXMfH-=x^G5hv+489zUD}r2O{)Ar)6kF&-<V|0z&d
zs1z!Saz2z(`|PFG#U5XL%=22Ctn*UFq77_>lAaV*0S66|urN0nKK}6K6XNDjPn{C3
zzoun&$W%OY(B27blh!Lfd4<9mcSnkS&Kxh}9Fh8pSUpsE)755LM}xWt?tJh4&g|V+
zl)m<#bSTk(k482c$OjE0_qA}Q0?c#+^~EZ;!H;Nm_%Ud;Hj>6DkuzDi?EVeB?Fa7J
zrdy9cJ3L%bDGD|)zy!L_{Kz2w!Y_N#L5V|Zh_~~6=OqSbOoqm*b$snND3t!(Wkk&a
zEfvd+gO@mJ+HdyJbg?Zej0M<VgoJR2w8S=%Yp=eBW%g#O7q!PWPQKGR1&CUf*lYlm
zWlPf3H*SyTPR@#2;rkAc3g1hx@ez4sb@rnV|04w0ZztmdK2k<{dbLq^FmUyO!+CCx
zff<}ZyEi}Y&02rFViGF{1Ts%+P?(zfI5L8qiqg>kRk3q%cyZoqSYbM4Y>?F8i(WEA
zk`1;uo(Qz9Uzbl@`d?sSXOJIGw_T_(D`D+8c+FuoltSD5lv<B5c_^TwCb4=u-8M6d
zhB6;M&fs|a2JMGO!$BkDW?qgk{!`oMROq|=-$pSs*&Y66#{!B7;*aId`bbtogLoGD
zUs~>O>f-GD-ozwNFKCoE3^cON&dvrPed>>@taK0v!N$Q!OAF{*1xiH6ZZHg7Qc@D0
ziVW1J@%`7=x-rs^UNfzkpj3x`S*biajx|Di{iRu&c10OeTa-gdRrzcF_*l$nf7QFy
zk_93~Fo19+yG*{#(!7^t7T<sO&)g=ivcAiKjP%MpbgI{}yllj4XLe)YM$G!U$Rmgi
zF2K5s+V1Pb+3>S{&Q1rb=FZc@RIfERN14we=>v3FoU{DHQaye#;IBG=+`juiECA5k
z!JDWqfQ<*}>Be20e<3^k=@!r&(8(@k2Z#c<ZMsuzR?vYfDhkv*<~B;Fd?h_SU>biu
zXqb3|U1idTEs}K)6f9|J&-nN*193zq+Q6uj!a6>`yL1IJ`1ArAi*CKm?DaXt-F1cD
zO)EzwX)@(@Lh!HW*mIB_+-leaKhH=7DaGS3l@BVf)MZjCz-DW)G}#8X?2CwuOHJ&j
zEl)z1HOI^{#pp4yqe*EjHkZ7LhzikM8>dBD4209joOlENX87bezWLn=dGYB<MH4py
zIl9fCs%pe-Xy-M?V$GcUkNNL9e8kvu%VG}^4`SWOj9$y$)+T(Gq}bI3fa@7)Ute(`
zj_B!;GBOIVGu6`40*zZoM-B(JA3u_}nJo-0wtTu@2U1*snvEAIk^skfw}S;UBlAFF
z<dru&vngRYtkij5Rpc<^29l+5T#;QLxjuHqaE*#o94`KL@@MJjw?!h<9kbQ#7GAge
zX)n&7i<3nHgCjs8+w>xDn2H#Wg=RmGs&f!NtKO^#u59i~{VLdxuxAa%&Qt1BCd$<q
zvK+qzbiyV{AmzU_;bJsPfA%fD70rnnJh476FDd=bIgMPz?qg@x2C^G*6l5Iwhx2ZT
z2a^`#<>7G(fSnoFijTsBMKMr6r>Ca_Wv{H16d@tu5|B*Dj3qyG2z7#<)OPPHC*W6d
zzB73SZ|Fey{95h1I9w(O>!IMW$)4@`mwj+h&aBCLaRDp1(`_i{d+{PkA@3MSD|h#~
zF|%|*<9aIhF0iAUo|rIwBcBr!9cAU)A<D;>{OwzMQj#q1%r*jR`w)z`k&^9uN%-~q
z_o4~8K;pZj?hD-~Ko_yTzRu2G1v>aPM{b86y#;bv(B}ktYJhhz5N%e1aRw;<cz~Aa
zn#g}muXZ}r)-P{Me|Yv|_<C~r@9`ya>|1*5r*R7M0`aP~sTZ@!CH?QHRdMkM1Sh6T
zGczW$@?A#*tm8?TYv;en_7xZQCY-Pz&O_;LgpX!xNKSmo5BEl<R=(4qViLQVYX)mp
z+p#Q)d$TZliU@h!8MM8#D;>1>0hP$n?k#m3mFs!XM6j>$BPr`PyS#e|AX(x}p{u|)
zc*^ggA^b2YWo6TpZZM!H6F99-PD)QT0vn~`;$qM!R9^08WyJ){Wr4hVBXU<aZhe2g
z0cvU*^BBm<*;rZmy)V!Gu9Ez6kHL5kMFj<*o877d+Bx1O_fu8B>pa~%1rxAT_H(uC
z8^gQ3U}Vn6R|!_Z?XyzS(jD-*UC`VjdhZQXK#AW;si>^&?Z@qN>`Kmer{DJjl@n0#
zo+S-6DlvM2HZc~KVJPfQ>bckENCueLy}!SY36Y6$qN3TueH{2joWoIzluSFZ4@!(q
zp8-`LNU;n8*Ee^WA!U%~Tl^uZU%fauaEi@;5NA{=q42l#Ps2kQ5kHbiKl`}ZN{bX_
z`dEaxs=i-I?aKYNHgZ_q{bIM!iAubKg{R;vHthrVI8BQOx}+he?&@L$baZqPJmjfW
zS)V_D1}YF^7Z>0MO-x7#q7rhJXa!@Nq8|_uTkw$6o+{QS>FiveTZ7HHnw!~A2ox;L
zK#B&6zsAN!(E2@)z|57IemGaR+hbg%A_g|n!BSgM?!T%g-7(~V7}#b!E|4n0`uoc&
zD)M4MqY9X_kf$*WCSH-M?E`#qa`FQj%UYw?1@^E!%DZ>(xF~o#SF1ozI5;5HRaH6P
zcT!ljC?N4MzOKEU$WEjGv_Gip{+l_<?uX*Dx*`7*8T>36*iE;V=MzAU*keB*a$gXc
z*J!@D(9mpvfR6Uk#z6%{M0CA8yjhesl{<xW4m8@bo-P9F0`i~4fJ}%53|UcZnjnMY
z6B2$)0B&C&7$!H`7+hO`V!2eaVu<x-zm<J06^u7HIXwjudOnz9t~OJ`iMx=V#VK%e
z1adsraL~F63>V*#XP*oc=@bT09PI72x*sEBy)}^wWix1h4#u5uaB$Gmf7#*Clu(5M
z^Nf#4dwVwI7WVcuWMsk)E3{9p6B83j*fMqW{vTCm9aZ%fwQEEK1py@mB%~#!rKLMW
zI;Fe2k(4e0>F$P2H%Li0Y)ZPDO~+lF?|x(4>tAO$JR9~e)|zY1_kCV&IG<Q)nTVoa
zAsJEBg><%h7K(gK!#-aGNMrkbyNrzUdy$}QuIVj8KA^k$ZDa`oVJIa4r+Jl?8w7%-
zi?LdKBWFZmBw=a@BiHr|Q~?GwaO0naY9N5yMtWJ-(jw#SVY=gX<GvL^)~{r5Z@*(5
zjkDMXpm4<<lR@Zh;P()%hQVOKnS+gs%aSB-^7ejXoPmH03t3zvww{`r+T~<5px;%T
zOGS|<EirND@Q~7bC|p`nlGI)Xqaio<8W>n|8t7REXSt)S9?mED>9rceJkDz^=clb_
zZC0-;0m1_uiDboPWM4bJ>Q)G*qa!D^ljJK@q|VC+nu9nure%cFu47~6SdtVuF_+BG
z;&jo&)Y#wF?k5_tR<u<!eQHMzBP*Qja8&%@jLZEPSdhZv*fi;)w5;n7%G3__rDfT^
z97Kab^lApK^1GM+S1KUA;`Xe?a{dB@Ewe!1fwY7uQ2f}fMG|?kP*8MN9vh3sdS^#H
z5b=AZaEqK>-_7Xo3zESQ&V8*h7Ra6fyn=)RD4QCps(eLb<~Q;#&d*0pzvlM^2(H9r
zW!*I1ys|td<6H*Nh+m4QK-CTwAi#GBoByVwBK0nej!rX6o|^A=e?)VgnQ8$>(5>p<
zy9N#f(KC6ts2+DGREqz?31&c<c$=7(l!JRM#XKf}5lqMGAE?G&!D61=##8Y<ebGi{
zrHFKDH*pScY7k=Q<Ywpb{R?mQrGczY)ri;c^ErK>o`{{$LJq4g_WA6@QMS7xvKFRE
zJi32_VOcub80?fl=;Tff;U;9wZc%6bR+~WRKmzxln(ieo%63T!UDXJADoC$Rpi>iM
zc5`@Yl%!6wWCwe;uBl$xgDnf3I)M3a9;)t02Be?>9RswJKt%LPrzq*13H1_YdP=#q
zwN+PB)4yRCXGY1#r%e+V7!*{lQ5T`1T$oZ+4*sj`cM{OfYG`W4Bqz^|FYqvBCQ4!?
zwkF)2PskB_U9Gfw-nQNBN)de14U3HY=3c->;{<fHAnk_0dQ{Lp6sSoL=Bh7&`3F3u
zg@vZ;*@f@H^CTdyBP%n$Wo7Gq4o?bWDK3AG6YO~*{f}iWBE*Ag9Z!u-dUemd>fP%)
zG0lir!kxO-{uVyy(4yYreIpeKltnF5Cg0y_UjLP6mjKz5hR4UpzqkI^?Cj^8+x33T
zI7tz2)B5J-lzo<lfBL-<oJQ$*;W7*v-`-tj@DtWJ)_CyoQ&BnF*`0RyAq50TMZ6y)
zx0>c@FR!%S8eZJkAOP6QGR=mR<mB6?<@<;B4xy2B{uz2Npqyj{-c@d|lhDY50OR4i
z&#VxV@kE0YApPy_?go0r;L32oDFS}WWv|=R<-5(g4<9~gX{9c>_~9gF*VbN~to2Ur
z>)h|o0QWm^_LUU5^?*0N0`&N2lsZ~(j60%2iz}EHTL_{Z)!0gCQS8}DFd20$VvjB$
z?#Dr`r&CUIp`po}(NmB@M3p+-R-P8S#p<MzxJxws)ttekcc*Vk9x@_5slkWB<=dV#
z(9_cH0nKs(gBJO1Gf*sB&ety2+pcx^0k`4GiOYI6kfAoz!T<QKjKcBp^Jf<ei@_@?
zM41@LT+lCK_yvy<?7y3ulvK4KXg_MfoCtD|HN%s8v`PP8w#IF6xD-ASk>Zn}&jaBR
z-CG;sBC&?6GeD{SKrhA7u5q5=Um>$*cn}nUyXyDJKMuv^Tju?&ZH=DN0<BL$&!-Ay
zA{-s*<Hb0Af`5&gVG0ommhx{u;`-I60Rs{77m_!DL1Gsd4xcVCG4OTEiCKc>sqOAJ
z{1}i}vrz-4H+&G=b&hj<&`=_?=CLs`^<M+YQ#y)CSH=gqa+xo4#zzIl#FxXZuxp!I
zHohCvpm`^3K2tBvF=`!kCgb^4EzAQeu<cs%2jVP`ykK}DKU~2vtG$fuB>-Zx{oVk0
zC=C4r`P#z50v0fR&(CLH`hS7*c_q#(CfWl;Gddqgs`%RgDk7L>K|j5vAT5=8k%|w;
ziK8>QG*IB;ZOX!%!?$9!tbf&qO2|+eUQPE?Rt(cwn4g#-QO#>5G*t^$TY1oBmaqF6
zwbU{;y)f_vRVp#a?nOgu{6fkdy!V22tRUbSoT?C8sbU|MkWiPHSP)oy>|NNdMd4<*
zd=y8}un#=F&2&%}oCx6QteUsV2{8ss7NzRnPbc0inr89lWo}80(~jjvB&#`~aeX2B
zZ(!~oWktFpyc>MN&fxX(16;eds94bUEdwFeJGf>kp8$S$EI@WZ=HTt7za=!+8Qbqn
zz^$lxQBs)TX*hoh-|ni}vc}os-)mdpRmV1aGuG{hO@EbOd$L=>9&QJ>>_(~E?o$qe
z+W+y2vqoFtJ5uYG4A=sK8C*L<AmXi{5Ls6C+WKjK;l~$g5-)w8yD;9({mEqyYTCDN
zFEF0bH_lvYrmpQLXv$QC^LTelmVThtS$JiD``!6x^&-mb*COblX~a~PO4c4Sht@j+
zdD~GsU!atO`yBCw1S`~!9HUT>@5ur2Wa<>l@axR+5Trx_T*~#clMaNXc8i}OgbBP$
zlIO;4p0zcZ)6;!~(;Akw$aO9+Z^T+`{AFe<O4ZD>7jcNJ{`gKe&W=N?aM+bhb(-!L
z*vLK>IG@}`3A<kqCvQ2<8PEMdR!c~0DCtnA9f2l}lv%mJYy@X$9oM+ql=HX)q5A~S
z_jm9JjI@q<#E#yxswJc(+WY|(-Uu^Gc2bhUYqX2&Cs)L=CfpUWgNe<4We!|D9Dm(g
zZDj9@FS*Kk>8Wy6e~VB>>k(L@1Ivym+$GN?HJi^^n24-6;k-gEk%SX&OmKB|l*+7T
zi%(VUF*TI}pgROnCD)xpEzYRy+$J1KyO#q0spKlQ|Hosr+|I|Xd79$sl<j7;V3h7D
z&)Y;@jOf4u7oq!btgp*ZBh%e5mpYe_+S%G*Nn>613D#NTBqWMf1G0D`;!4<;hD$W;
zY(K@D=`OZPy_@oTnnA$b5dyg!Xk)x;)=kH?{Z}pLYCK)o?=%Q0_!3zk-)&i9AwSMg
zJ3ahe#~1l_v$pUP8;efTk3c7_RU_EKoLF%tA=U!rVTxPFe?qu+z9;G9_p!B+YmVmk
z5BoD0bI*T_Xn!5CT0s4tV)+blF5kw^9wEiLx`VvQ2*=pwk8qQw(5(hFB%hGgH{-y+
z)r=GcTxL3}r_X^yK&TjD$J$H(F|wpIA}eL=4XZrv^Rd<AIL4eX$hT0|VC+Vf3xPEU
z5)U7r{ckVeLXevEJ%s*g)(_|P`e|u^^A3RdlAVd&Hh(%!v@OPWviw(V`J%x~qv9}S
zU*zAfAH5ak#%Fj<MnhumVxseJ-yD#l9wf?}96Dq=u@m-Y*^HK(iBdjYrU&Gw&!e-t
z<9zI)<$+*4Sf}4p9w$2X)0GvCEr+oPvm7%H9#k&jSmJm>*wlvVwMFO6vb6Fu7x9q~
zvK-!rb_%$wJ2W8~tbpyW`$<{}2iNvzZDr)JY&de?o}|!t`tTLI%*DIVB{s%dG*!)u
zp7m*%Hm>S<|Fl7M>FI1lyvr9M#+Ly`=hK}c5y`G`5nYe(AzObr3SR#w6}rRt?{<30
zlKeE03b+AsSbo?blxcdp|B&*H(q7i(meZO?<aJBKDJtzjeV9{f@I^$RlN>c<fDqEp
zr5P$#Q{7wqBx(Fl_X$U*cgOx1I0G{E^wYKEL)r85LSy-w7?0-$cIT*Cs?$B#b))Xl
zs5lZMX+EvhoPHOgr!hRk)WQ<pmq0yemEU$n8u|<v(SGoy5q3D}RI4sZrOSu{WdGe_
zJ#dR(A|SwLN>dWx;Tgf%Ah1)gDN$p!T3CF)L*q6;27k->`SbT%c#j(ciQMe$?28#g
zMGg=JL@h2MgBjXQHvr`7Gc!|l5LUIC5j3p=SCH}IFBmM$%+79R_l%1{?YEgGo#R`b
zb`=@9<n(U5{qtdz{F7_=U_~w~L#;5JXmP-WvPfR!CQ_k^1*+}WXy<_Z#<FDb@|bvk
zQK)${sW~%;FxaEkr2L>1x`+=g%^WQ`(SLP7JE2aB)^kJ%5u*o?54eANPwGCT*|x`j
z*4~#$L?a!M2HM&WOP;p}>f}^ZD&!a}XdiHp?pMkm=-0ebN=(*zhKgrO4DVv=mR%Y7
zK183q1hR3^A`lZ14HnMYPtokzvZcENq4Rfr1Y&-^<h6`3v8mPeGer0=QBWe~96ao!
z7Wf^mY+PLaz|2+TQtuwt(U%vS+<|GzS!hnwDzKnnTjybygV_7DIMVyNn9RDl!3>6f
z$OV<S)l^VuwCJ|$kp=V%!LCjm9Fq*C&2cLOBO}YX#&ATiRjsaKzW&?aHwc1&X!Q$I
z?Yoivv#L&I#Fjnw`l7P|86s;bBig|S1hb&;LnqCrOEeT9lY%1eqocnnzBMlsDS2fd
zmlpk1yKGJs^6}dQ089eHKlO6Gsa5nOD@q&~U3CBHvDF8(v~TkD{<cUZD^jGfz)#B!
z1SjM;$r`o;`_L8+ke2(b9lpepk&(6AuO>06bM`azholx$Y#cmm0d88h=A_r54y^N%
zU0?7s%d{9Lin(6jqRXB0cW^^|s!701^+-sRj*Bv{r8Jye#NHlLpMPp<M7!C=YKGKs
zgW&e2RSEE;Doheb+61_Xg2zDbw&K{P$^t~ShKbpd=JclRm9MO1@;?mlj|>mbwu;LP
zoi%dFSc4`aIVF{&vm-NFWm$brcJ^Awz59AbbyXE`tg8|o0pr!Y^FFyuzvnJCa(9A`
zm*{iQ1kk9n{3a{ITkO^|J4AcCUxAuIpuWhvm`z632oF<@a>_0%%gfA6Lj-Pdi7%H9
z&O0OOIx6$Cqu<M-Z%P0*03_zDUU8VQ#ipjV81792?&8XMcg@ghM_>qua!S^2&3R@k
zKe{_r3<B^<8OK$ZCt2%WE`9~>C^imby0^H?GxJ^b$n%X6!u$szz;I;*aO{-M>X(S_
zNu2c!H8eFFwwq$y@~IlxnL4R;T7<~F%MARXei!c^7A`oW0>FxZL;JrvsRTJ_(@#6e
zj?a=_UMnD~$BmSQwrPwS3I4i}%{(+VCdT<-NvI2)=P)tX^lV3)j#}itp%ZZ}EG`ma
zV=HNDjxQ|Sbp#PdpM0f>3#07eEO)p^wEF@YX6_e<^AJ;eEA0o6@C~#U0O3MFMAT|=
zZC6y+R7}gsX?Po<1@IBk2p>>Pk1<{1H!K$*rhByq07IUnG;(q70J?%o#meZYs0Z`T
zHrFB8`q|kz7xnm;hx2V-LavgM$fd)8&|G`6r?<B1bO?=2jTMUVG&7T&xB}C>l$3us
z#Hl(d%>>u=02OFtXn1)E1M${2*dX3_xt<pQnMMXi0E2Vq=qNinH<utQD;uzYq(Wl{
zOwG&`ij616#|u$CTRc&kDC!^%p7-#*f8&3ZEjO5RsC5DwHi*-?aguw{)7@RJ)nv7n
zH^lmdUgb%57SJC*A--nCF>5x7Jzsm2ksFVN6CNIkj*hxhZZtM-sGqH`=q}Ok7A-G4
zA0T?_(hS~4jXEohMhi}QzR_hlGW0elVQP#6XbqM4d*SM_9Lss95)Bp7XmRNLJZhO@
zmAze|(%wu$E_pu4kRKb0yj*(x#7f87mf?dhU5bqyAQexSTgt=7Cu*5-(CVZWtVp^M
zlGOunA){U*i>ewL*|f^!7!xVU9M<%cB?Is31b{iVfP&TDLfXRE7|D?Y*3Ny@ny*}p
z{+=f#DF!+=*8sfn;1bFw$}lDaVP*sNa+Tvew5EH~E2dWSHi7OVw9)bQuTn9HxG1AF
zSu0a-NpdO$ASok5<8Np6O&=kS1r%UO1nY#O3GI|M`P9R?1O@7Q-kXc{_4P6>_rk`p
z%F5_yU1$qSbrlr4Nw>0BPMpij!_53dWh4(Rj0S%oPIBqW<CC2fBFXI5YBg^3Y*p2<
zB@lILtT7%39V-5EpV~YxzV}0`$#rS`m-YsV<c{Lj*4BCo;{eHJW@Z)`h}eG-llMz9
zSB-NH;BRuT8wlh0;=&mTE)N&wGz<pfE%l=7i<@Xa@aazU3{7$}jWL0kJcttj#=m_T
z0HHl~Z3dvP?+(Iew%{PoWp{33DT8Y1YdYm17ujQhgM~A`_(EOA%syc{=V+-~g#>Gq
zh#Di<Bxqe-LsJ2q-KB_EK!6#TSD2})xw=Y7m@3$f_Z@$7OlqCU6D?D%j8V1`Qgam+
z7PivvINPOJ44IhR7*K&gSSR2P;&Zr7k7T4qGW5~vBDhXZQMkCdAah?Q{e+%7P-iOv
zIy$)PCb#}tm3G)ll@@b$Hzkh4N7xO3Cc&xIs%I!J{xVMD7Q2*@UYz)vB-mmL=!@_-
znZIw(y95g-MMn#890=>3EO{bfAz$}|Yizq@CAwSus<o3eGn=^^3IyI$g?s=U1GKZS
zo9p%;LJpdLhx_-4xAXl}Wvz%jsYBu!fF`guUB`0)12Yz!b@@Kk{fy#sy9d%_G)-|c
zbvMA|ba7EtcCxY@LTQ{3FkIi<DAlfJr(q7^gEu<};G&mJ&MPp%^E7G*iKo{Pa1J{~
zL76Ghk|K~|$?usPEX|iEU#d1{Y{~T7Xm9t?WXRXwfjV|8qB-(e{*5bEo~Q*VPep5M
z9cy7>a?fM1Y;8XW1l}59nrwUIgS-CzLZPlM<Oa>N6-n8Tw6ytN8Hr6zjXTeiQ&U-(
z_ypWir++o(mX{|yYY%W?RfdvHxiFJJr%g-}ep&y^NDWMVWO-~8dhy$1jY!%V9Esun
zT>_Hc6SZJ_7473^xMRL`{3LC5b`B1JA&u=}{{46D4Cs0!@H|egjSXV^k3+hXCh;=Y
zC55_LA9fje7qwW?!@+Ug-QBJ4%noI9W5ZV0%|OMp!~1&6+s)?j0kr>22kWRJXyYb&
zTd!{<48bj=p4$>bC-!)l%O}?Zf<~iJIA%0mU0o``R&qQAMrRe<HVP_Cd^|kI)p>o;
zD~5dbT%oM1FRKUkVX4Q{kw@`XKbj4ExvZ#?p-Srq!K{W74~7*uHm$m=2tsZ)<;0D#
zB49TE%95s{5{pfGWK`8uf8lX?Z~_FjF_N+p5{3|dJ1Vj3<Bof<V-exKRfC*QjU0zJ
zQncmPh_tom7?5tvWA;AW<$F`a$tC;I+Q5?7086zMKwK1B=GnqoTj&RC7V76wYw;Z^
zBYPk3s`){SFgmdCy&v09-{9xVvpIm2j$Qu1Ev+v(lORDZ&>QJ#f70o?8}wUsNW3aM
zF;UG}_EGig$#2Avkoa*0st9kPc>C+q7dyDD^Cns+pu7Bd#rP;ZUr?U|#)tcW(FN8)
z+tZ+<{-|*Vfxiy}jC>S?iP6y#B4gsacr<2nRfd{%SXguo_FL>qnL5mgbm|F=e2<EC
z3=o~@Jnx(R9S$9DHYUzWspLN2vA&z{Ns{)m(y~N6F56>kVv}7CC_%NMMsY06rrdUM
zl;o5QQ&wX55>;W6fN6rHzQJZbZ97lOMj!4}YAxp>)HHpAY6$HV+8!3}UK8`aK1G2h
zN(|#We1yeWp_2z+boC$g30f^S#$B|>gSgdQP5cxPI9ezTotTiSiAwRjt~xnf<aUtT
z*eh@S4!QJ4MoG|Yc3A<{Vl)>(*k(nqixwh*=WAeZraZ=RYB^~V+koBJNO3*S)EEG#
zc6(sOv9b8s9L&suXkS?-I%$>FY>sm-SmjXjx;g{Sw)(md2YmZWRrt#v9&W8oY4BW=
zeoTHiXk~pvknqJ)PF6B&1xQAAF+H!-K-)WA$7bU+mnC1WySo<`2gmFZiOG}4RHtaV
zy660ZnWd$>&EpEpd}do;f-T~8<lS+XGb#+mN*65&o9~CAFIKx=9Y0%qezkIo+4Bvr
z)R&44toJt)AibG340DZja%N0cTUAk*R@Pc#e;k#3QPJ$vA_AB9;r`{ar<C*XI1950
zc+q#*+Yh+wym=gB=r~`=8<i2OafOVtTbh`FMNXY^Cma<m8gz}*+ic1*Gg}qyC-u0w
z=1no}-35gWa)fCzn<N(+M_VYMXNCH5k5|tZA2Qbv@n$tRtmWrTM#w*uF;<wA?wm0f
zYWedi=X>)=5OekXteu_?2?>da7zSV6PT!<AkE|ceUQHQ?`loXKd^nR5s{p&XcD)S)
z7ds^tV}e;mGLpl<dbfSjnV^Yy!Qq>HKR#v1i2T9i)AByPnMb&@w8(w_Di@aJ$G<qg
zx3_n@Gg!EiDWI;SPUt2jhGFKWriQn33VvFfg+-1KYQG_$&KJoW&^OKZzKeDv(PbbD
zPdb!d0Bp>q7Vhg80V{8#!>GQWs8?Vzvhz%09?~r;78;q^H9GCR_^i^skaZ~8yHcz9
z-s)<<f--OczWCPpD-k%J!~I`mq=M1cuVa>$rRxKIHvp!LH<B$c4F=5#huqQrq~)yX
z=5a0VmlvR*8yqbD1<zK)MlSrWRGqY3U8nro@h&po%LSkShk(07cvl(NgJV<EC?ktf
zQd9f;`dsE_N5{vdH<p`i$z=4kaqiejIT#<IQ^ks7Aa|=$UuREHIGv~Pmz=D!GSB9T
z>S@up-CuRs|Jw`r76RBZB_Ob?R2dx|J+^<th|KVtiiXhij)b9z^q^*~Jcfo_Xl%*r
z;Gba`?s_?Bg~Ub0>Crz(Hw>zJ>n}h+mV>h+pVv9H7?~$)RPWBg0p9y}1*N6IYQN(l
z(-|7OI61$!LDaSucb3HG3?f3jv6|+FhQvX#n)RESVuPlFWoauEdwPyTC%;lr!tVUI
ztrIXV?aSXI;6RI!2V^MAQhGwdgR!xsl6nJE2^4Ukja4JFPfBE}tCQy#pU$+DL=H<5
z>zd>@z+hp<-Is-gKb&rC+0UC;$xHzbDfjaOY{?rr6t=+KactPXhnB$-i?XP|KrR|x
zGu^&6E3E?EWp8IeOfMi_9v>HM!g1_7(5Mr487mux!QrW@r(7U|Iat<|soOO(DXH&R
z4`iv$+uB4N^OG!xNd3hGC1u;(%#4&qkb#cXp=SIp2nNMSfcOFElm8yEU5x`{eoak4
zEl8)X1L<Y2os0+}NaHw)eH#$E9rp26p(JWp<sb6!L5fJZ^wb9Wtn0#UI@lW+M!tio
z4yipyi6yzE^G)CO<rimXTuZn6QVBQ3vT%1)v{#AVq{PMY+m0C*7zzNBe={C>XQ8Y6
z)zXrl;{@c=3v~%i6z%+)oUE;7Z~P|GwA|9<+|@~DprGdNo=j;JuM4c=CbAf-it2iT
zq~S9<I_lYAFgk`5I~~mz+(_3mr8Hu)4q1vM0sv8^3FxCD3uHOwS$TnrFyYiyRc3h`
zM~5P*h0Nn%*KYx!3C{aKpmDb9YLJtemy?aGHaYuy)-MR{XrU(PP<BTyw~1}b>mgWO
zRw+C(Jit7T*OA+^6%pyiRAaf(^-N6(dnWQ+_vtJ>cYFiI$L#Fz$JX7s`ji_rGu@nV
zknfsQOgZZA%RM-LUkggTmeRuMi!ekhD({PZJVGuLs*<uI$?2unEQdt*BJaMn<c~Y0
z9tQrPeCP3#&$-LtB{B+nHe$Xx4T$qlVg-o65a|<-5eIX=OfoVDICOLr4w_`AQz{VK
znUc?q8cD>L!<*mMR$jPcsG!FjKFMyTKL07aIFk(9k}QdeoYlY4mrJ-X#qGLEfFZ$N
z!+(<$Q-&CUiv%*X+(RZrpPrIoDV#2EH8BhKs~APVczA6o&R(uzQw9RN-Y@Oj;iRL#
zkrX13wn5`}8f_<~a|7vuIAncKc(0G@jf!+Qr8?!o%j5yVhgEr-0UbQ+gbq46{cnMr
z=BQnQ*pE{qDH)V8L>L&7Nj2cuKKVLZh6_X<o7w#Vr^ztU(c^Pcvc#W#1-ViQI3{GI
zcrqp|Qp~a%*@(fyG#IZOtvAlvh|^P3H?VS?zK4_`;I-83h4iZ<2MCT2H6qdM;(RFY
z*g_ekm-Y3#Iyic0ANmpyRSK3*7F7Yiiztu&u^sX2;*czToR=o2pEYV0V^UH8_`{4u
z4zyrE%K!iqj39j)>kBTY@(XaB_@{g+8ca(#q|tr#8<b6{i7Ji@DeHmL*3`G%V(C#;
z<e5VF(C>y+8+Ka6$o_)r&cWo{T{<2)#oOIy4S$xuoxMV>s;b`URuW*b>Hp#|%C27R
zw79^Y^!wBGs1(dYuXV75&J7P&WPZQ}AW-um48#ws`c_)vLO}7d8xu0B9=kz~v^YPJ
zJ!T2Lw^km|L?0<oJ(zkq^*cJTf9Q+*i-d9?uEdlb&2)6sApfW#+)sH<rN=+}vVghl
z#ft^?(P3#m+ofv;pQ23#CljP!nm=GLN67GjWvK)4cIP!p7+yiZIrBDN)owRM?osQd
zfSlarnizT$tm;E7%LY8?lm>#Ky{R|IM$JPRSbHIrtAEBx`V#75cHjj&8{xN|du<}(
zK#<U=SSMG6#}<b}^j3g_N?c3SUyS?@Ra9y|8hNw~{!RDB3yBqpxbcAu{a3lK4DWWU
zqW<Qi=I=-!e8#Ued56k)v2{rio+3YZH0U5dPKb0)n=^7cRh&?0yp1+dd%)fLc&MTE
zO0SYKh?$V6L9QU{+u1cLI(qRKdFu>aN&0AZfyu{kw@loL(&A2XM0faWb9^gs;+K&)
z*xe_2=6TiwyPjhCd8DtPFuu*!M)h+2Y;XG|mtPli$n|q9!a`C6e6{ox!C}tCd5=kV
zO_52W#T3>zM7qtUn|$VzKOExcy#JAK#5=(;q}Swm!=@z?JU+7ivf}jz?70FfuR>|j
zx=SLS`Z|Cl;cNSSI5;&uIr`&ksS)-!$+8^>IguvAOzb<9t-1vCEju<<&V-s@j;_J>
zB1QCJ6`!G*H1B_RNnV>Ru9kGD_UbMsp(i=cqwTlGpcd&)d8K0lX<xhE6JVTCD5<Kc
zDfvv`>6kj;UZ}{<+0af9BRqi$^1LJ>e$$4(m-O`H-Kox5$C5RW${9c4c6vCzch=I<
zT3_>e4DvQVUPrIe2e3>IYi$lSk~vbESS<Rjs(y^3As$Y0TH56402<QegqWDWxxy8x
zm6c56L(3lbxcAZPGIVuflql0ZBI>$MPI;LE6ZHKb3qc?OY90=5LX_hTz}|}U$Neh7
z9n60ib>uE(v&1U;2?;x?C3!Siu!~)^dUGs*voqd}!cnF(Fg(m@b3B^<0MmJmv4&sT
z<f}N7{&-%FLqs?S9e-jSyPqdAEwFQ4cU>k~{z_7A^m?wJRy(Z>{b1=qlLxjt<WtS`
zhie^xfjz&KB=Z#$D~%V5Q@BN?$xWNV&JCuFA7E1-`o*3&iU8#YB|OgB8&G0ezxRxN
zUuotRKR|C)h0|Db2H1H6oxP)D(+y6rzXuu|EG*Rk!6?-fdnns=^{4)#C%C?`$ZYw+
zZ;YujXHrZ|bf!d&7A1a%h*)yZ@u8CwWr$^4VHa6l$BeXw>f^`Y=Ci(Sabsg+H&H~q
zuFQas-Q3(<+dkj#-Zuvj8w+U&At4n?7ZJ#?U6@ZqB)9KB50Kuahjj*9fR17^<xnH#
zoBGCGyhXAP&x>wN7&U5B4wvs-c9D`AJ+38NFRVJQuE=4#3#ZUEjC`BqWbJV?&~@U!
zoxmIVG3jt`#?o8a5KTWc6ySad6rII+N<b!rqOzq_p`&6<MW|Yzv+k5V^Qp!asjsHG
zxH^=ExmC;%Z;{5#dpYCgWU_z9G#7QCGB(x@>dlbCF-ySaj^ENJGf~R6dq!jV*REo_
zvZ%tdC!%3VtO+U%5)s07kgyx&gt%8S@KOVf!h5;2ONcqQRW=$X1l;?qpGFI12v6r<
zO3*G|cK~niJb)99hVBEUOf^G}3R1)GL1`Iy|9Swhzq(4h?hQ!Hsoi{G+5_TBj7sx2
z&s=hdAnY=!2|8cUeobT;H1(-6L5bTY?lj#HXuP*P%CynOiCMdL*~}$400w3z^1aMR
zAFCQ8r{=g)3d`St5#xh9*Tpa1#5*}ypcQjE4EoumTjo5;Uhe*aD<N^T8n|v>>?grn
zY6h~I2ndwSuD^KmbK+;p3t!039G2|wM@7lwtG4QGfV5Ox4$EeG>DmR&y1i;IPrP9E
zqB^y+S)n1aQ@V0rbzZ3$tBt=(VLkOHfD4*+OVJuJT|1o%HTV;zJP$(XB)w@Odz0ry
z>5`KZjGM#ru)YCFmqv4LO#t%0K+q8}lK*wmxW2hL)(Gr?HhY4}!3G>NKcEZsVGs7#
zg933l^jbYi>WYwG7G&8q<C7RMMLh9sX0YAbS{(aOfKW3uGMun{g&z?<#giUYiDc>P
z`vBOlL%i7v<?dJ^9~%!kP-Fc;@BY^myWJ~P(`s~F+=TIP1m>KSb*&1vsa=pk=wKb}
zmbUK=%Cp3qbT2M|zE@H^xyl{07aJNI8v{Ky>=Lae3ro>o;AUEtnu_fnj=jg>;)bFi
zBcq;Ln`~yD1W48YzV!8l-_^)o)hR92lYE=ga>>HVLyi;L;F$~|JFs5V(n1Wi4RkP*
zG<9hDS!0lgBR%OMYC@chPAiKYEZpVhjuJUSKs3JoDl-)biA0iNF%;LyI`Vz}+e)-5
z6QRkj1_n9VE#Ze97SxRTHG9d?i4<}D@7yzPHP%xT7&N9A#tn`q+;i=cBHk@bAMGCg
z?H^hTG_}sJ`J|R)^!8agT81XxS0*OSYRA#7h=KhPy0GeLR6ONhDxWxthnbRDcI`3Q
z&?Bev)MnoIsg!Di;2`T?r9ej1WJD;&I?wx4N{|#Qc;GL`*f8;Xj7HlvqZ^BHq{MTF
zsIf%>E&HA41p_DWJ|}5LyBh=tb~0*Z=D){2_w0UdDzb5?f_1Xhvl0e5nYQ(Jugvj6
zby)uIbd2u_ipueU2`ErmS<Yz4M1?#F8`!lvpP^yMNri;`<*-^kb4_5>O8Nbc0}XXr
zz>OA=?z%&9H7fy58-TotJ+4k53KC8V3FjGAS-zSqbGuC-X}HaK3yhQ`e#cybr7c9@
zM*;(|RX8t;5kJP{7=QbwFJ;ei`JL&xiAZ0!=kW@oxLwUGWdJM_I+DUyqrb(_x~Z$P
zT4XE-a7fZ+d0y^)dpq#r^b=E4ap0{`f>}5@^?V<XrHTVDRgR@VTCon}ju@CIWp<TE
zpDEDfdvVz(5tug9o8;II;K{6-VlI}Ub238_%x7?rB*+0R8=tt2=&$GXcz{;ZrPo!c
zoC{B_nBPk2Pk^t_%+v)15Sb;iPFzPee80m4yBmlyaP?^Iw-jC~t-W|*`KMTgf#37g
zKZOkS+gFxq#mNyI{EJgVvO0#<jEs=pNK>tC$IIb^naJi$2~s9D$IbJ|_}6nhBWZlO
zl7#`9w;)SQ@n(N+;`sRZa_RPkD+EM5$b8RB9EfjiT?#@!B=kCPv@)g~F)t&v56?vZ
z7hgJGuEU}!Z+?-`a`}J+x@zTa7hzo2i_Xib$_gWcn#~0g(*hjqwN~?$W>fgP&!ET)
z5t)8B{)f^Q)bpxp*Y%YGv58tFSTQ9WSEYW2CX2*;&2qOiY-yU0-6*)M&veaXLe?ve
zD?&oV!Zz2IWiG{ucs)!i_Rn_B8u5;M#yE@>lO9cO8B&HB_Wj)&TizzT@m{$b0a{%;
z+WC4btyfw!OHIx*3tIkQxYbD^714aMxkD^xYCWaeT)~<oez^pSRqmTj4d{Eeq|KoM
zMUOGf2dhSRi0i;K$P-|$5c0D>>8q(>1JJi1v{updZIC0PmGyc!MV^1+0HkdwkNa#|
zi@YFgdS||Ug!Nyj!`{(y6F<M{@N3$9tn+?em*anax0fL3VrP2s$8)4YIa9fe8r6!3
z5~s5Y@(gT<`=|wo-3Gbb3sr{mm&^1n>iQ}wRErR9o8yWOBxNyAEkY%T_v155ks_e=
zW|>wasXPRZEcHg+<p-hlbtJ?B?B_V~DIgck^-R>(mMO9>>F|t=oz=w4R`8K_y*7H8
z@_%~)NN7Y^=(wI)I}?^xwp`DmL#=Bb>ELjfaJ*?&m^3j-4;m{>Se}iQg#|k4P(yUz
zv#u%r2&=XorIe~ZUJ|JY6Z6f8exgMA==iut!o34oYb>8ejgOupJ;U7l2LEcSLx4;D
zsK%8FE5b7YgaNMypxP0~wi~J`QyEZT6tdS8?3_w$Mf+ABM=@!AXf&?jM3gY5>By;M
zGeHlgiA9Gozbf5vKk{|~{mc9H=9>vakfF4mQ`R0%z#%6s8`TF^)zxv&Pt&ylwgWOw
zP0s-Jta0%Idkm*o0z*$%V>BK+w7b!WAY)Fn$P{J%=LqhocE?Bc0TI0KW?HK13wG$A
zYHQL*Fr&`XHO$So7^wK@N;=w5pzXNZR=8iuOsQB^*>*LGX3nP#u0f>$lz$3^l(q=h
ze?g<(hB>LSJhSBY?v#<aE^3UWx>k&#2!s<0F<Hp_S|y=+VM4OO*}=G5a21yjDnjRV
zp+*}zvDGat!UG1{%XOL(JVZLw7{jH}iJhiWb9dKOz%8at^X(GvZHO>=9zEj_Jq97B
z1|(<uZ=6&Q%l4609)TG4tAM<l-f1KIhG9#7zKOSCRw@Os2-8V%sOa=J*9xAVH2tLR
ztasmupOs}cL)?ay_Z+IHl*K+p%w##4Re_>~vX@IU59$zAgRS~aM9t-hj?!yr)ok*{
z&+DpR<yJQtC{<40{*OHEm6qDm$hfUT^py!lZ0i?VdF__C5&l0T<na@j^Qu4TXQ^o|
zEzrdj6zp_YVuDX>SuPUg3H(cTdy@B^V#&fatfYFBn)JSJh1S>+_|%pJw1`+)ijCKO
zj}K*TpKL5Rs2QQ8HN+cAjcG`xV1N11n2!$U(>C6k5=+}-_4-;-8gHspa+3}Aelz?x
z#)=Uq`a<P-lXSd;Y7R$Ci^`EOrD{{luALbZNRIkU-A(r>15@trO3f<Ei#fib!bc%w
zHWq*}Ex~E0$H2#cT2cnZ7~T$=s0h0+*e~=!-OWd@Ub1Hgchu@i-17wqTzryssxK$_
zz}PLxO)$MLoKlqtKPW78t3Z8TyzyE=kh`hneW;%@!9Fh$vab`>0};Yd)f2|3qTq=j
zGy~Xx<xd(&s(&a5IcW{~%uw;Q0nxbVt?t@mWTHW9laF_EFS?W5j2~+fE~+$2ABS}Z
zp~hPwRn}Pt-BrqYO&Q3}j5Fio7O*WsS*3r<88NueBP<OWrO46MP4lH8NUV@-B~`WI
zU_Gt9j4fQ)bEF}+byI&78e!5WsWo5tJR_yTw~2aldZNe~D6|t8b+6Px;Fe}EF(1tE
zhmVu>nc5;TZi4A%s`Z>PuBl!VCA9T-&E;_X(cwn31|(7i4d;b6yMCIu-@i(V@B}9{
zQMAjvwNH*S6DQ+$A8>=*I{2-gJ%Jd2sjy9=BRVbZ<YupYZ^`R&(RpY{<|)?gJAw8~
z?+ZoLh`@qGuPx!PR@Eava?%!SoL#1GJDHy|>gisdNrN2kU3(r%XoJsofK+mSU&pLg
zD@@+Rc-*!gVEh)`2UJ7-oRHEA`~?29^DOtYz$ZDJ1!Gcyy&rtfA8i5r)n$rh(?#l6
z<)NXDy1`C-E~5r`Ze7E(#&t-1?mE0py3d)3;Ii<pa5pbhofBE7>8C!MWbtNXrb?vh
z+TpJWCzd&ko&|r_43#phM8dGGK$K9u8xkPHd{QytyM!f!QFii_;PbEvkP`)}%;RGa
ziVG4=JBjUsetT~zo`$zWMoJ#^N<t4<%$HArK5<q##obA7di%wf@BcDA=clkgEBv;v
zsg578E3g5=F&tb4f=Ii1R^`&m9;3;;kgDUQnGRh*VDjPr*Yk24aEbvoosx=buLn|B
z$M15SQMf~)&kurtZZ8g~ZU<Wk@$tbRB<Mc{JKPtN)vXaC1NvqZgWLTKx7xjyZvjna
z+9O!&KNLLC3$SJ|R5JstBIBG)Z6J$GW3s|R1oVHo(xbcnVw6O73(TuT)Cj+qh5Us>
zM-U)T{`sHY&EqZK8qsvQP8+a%<=WkhWrG139}wJg_OJT;|CuUQsid2qp6;3LPvdn5
z_H3Y*4g#|gHda<3kYP|$Q2hF}1MZ($jzXd)pXm|l-;Xbz`!KGlTyyaJ_Rw#2z*Xr;
zdT;POot~jf-PPK<pPg}EQ3Nr!p6lm$Zmt``bOWvpeW<>Deentd&2TGoN<lOm&vgam
zW<{HHP~Kd{8*`q&mE)={j|V!?b%KP|A967(36zi5$IM<AFF;cphd{6L&l4|`Fa0R~
z<u(}L#r^ul=XH0rJ4M?V4MM}vi58ZdT~TCW2C%WQBk=$nReXDYe}CH~f2FLf43kRM
zKPc$TrTK}6Uu~sjD=TXSrpKVV$J<?6(#HRY5zJvR8x<Q%hJ!SA^`AfLa^mX#7F}9S
zuCBHgl==~rN=m#f_FHHwQf6lAYHDf*29sA;vt2>xfNcDP;B5{?+ON+4>+qM4J3wlm
zW$#$H7^MOzDz&Rnwj6cdGBEZ}wWHCg??ca9u^dbt2JOGv%KqwxD*1TY6EHM>!b+;-
z=^Ta+&tr0`i*+=8&sx_k1v~~gJAqnILPNJK3-BX=ik0{oeVimf+N*15*sp-i@&tIU
zfE@^Mk||q&iZ2Pkxuagxwx}l3x%9_S@DO=}L2{v@tQ;*!k)MK!;rxm(quSluD=IDq
zJw4?zO_^2ITm>MX;O5}Ce7L`5V;h;6V2P(wySX|cO9Ej)8(_WxY9KJ`%*_1o;za-e
zRe^>ibK?H}B|nLT=ianTyrG0P5aowQL@<Ak{_)b}jStD)oS<cxd9jV|n%cL=&)N|<
z9J9t^oiIA6@$^bujjIIiAGXGfpD(&y9$9vYbt~w!TN`v)ugs*h=HBF^RF%Vt?J=uI
zurURFdx0-gi#hGmH>S--*WPNUT5bJK<*<?H@eRp;kUOd4otIC}0$?~9*1C@dI+`Ff
z!mJ<QR1HjVRE&&~M(!7b5m&1qCnyF>8zj<8NW9|IQ@`ks{W~|OrXB=zU;sT$tHL@q
z4O~>vdZS8BhBmKzD6k>a7Z_*C*V}I~#DJ0y4K3dD;Tm9BSQxc=9uKU&fna7Fq;-MJ
z*|kc=eUP#QPDXut_5(n8d5nM9LT-EZVx)7GFjU%(>l)E~7C|gTkMOtN06atEY@IQa
zab3g2ZCFBiRf{t3zAv|pQh6i4RSe8%<EEmlD8;e%<@7}^VX3(;wkS4q%vVLK{u2f3
zUgKvIWqv$}r>Yd<ft@PCljc-4rC$3B6*>9ECHiZ$RyQ7!xvd#(_i#jz-Qa#B6>EZ+
zG{o?XmyONw06GOwIv}cS3*fNlswjAQ?}Lb2BZGs1rd~!yX2Aj+oK(s*Hv>U>sfn4F
zmzRqR!X=$B#>4_S^MK|d+UX=2Sr;%#jPa4#0w56xj0g`82k+c^o`lU)UM5eU?{C5p
zYFd?Py;?fPTrV`2C&$$Og7)f*>)m*o57E!DjcZFLT0<RGIxdtCzXuE_n%t6C00c49
zub7hHAWXzGzuNLQ=oG8RVT497YtDbB{@`OhUJ|XD0Vmn(&T5e8^2g-BUPp(KBhV;g
z?%nN&{JZm=SWK#j<wi$ZU_0aDdJ?y|#7P?RoUL?~6LL9xCMAst{XL!jXXEfUaT)>1
z;@wWZcca&RqcG_lXtjedkiCKeYOv<t5#Cjdu`(RtRP(z8da|qfuqlsO)c~{0;`Sf8
zf2l>#A4!_uDE1-*1$<U(Te{b7Gpb>q#{_S2YTDuhHmY%CRoLS<M_EIq3c|%Wl_&4M
zVeZokTPj8bT*~@o7k)f81j`pZAxP__#R>tt%stcA$m8JJ3FvS+=mX*RgGRA`U|{S0
zMH3LGeYhPAU%}Zry9QaX22sG&061FjEQ`V^L_}bYFb8BZAy1G14bo8Y+Z=Y7i)-Y`
zKr|l>4bem>BHzPRY-cA0hn1!=xOOfG{OI0JN|kOGa}9!<wl$tkg1jt5XdX`Ct(Sl7
zv<uto7%o2$F9dP;k}P7*4mQ^F6vJk<n%AVDn9CNuB`7!w8ZO3iKjMvyTkw#E==bH{
zLkcMy@Hw!}TXFt-_>Kudh<H;YS7=BGDOt9I+Gh~za&DX<F*f!UtiSJ)@dydy2B-!G
z23$R~b*vfVDu7G;<ixhrQyCa^N;OoZ&(2{m&?g05o*Gt;361~X(KBpD@9OFbg2-B&
z4$Q!sV`hebZNl^84Y-n6BQIDv9XGaINR~QpJiGXA{oF1-9_=Ry-b)5Qzx-EZxsDv&
z-B|B3ZAhWUu%u53EyZ_R!4Ms&c1qYZM}xlVDz1gtH!i$)7ZrJG$?^H`y>QUiUyC4=
z1_{)OEcr6S^6Kh>-XQe^&;7IQ>eX;+6MMWh)=LEN`h$QLV9Sgj$gu_9nkJ`%rB=@%
zaq^Vkzdze=_JRcx-+SZl2B2>PCn-=q@PQL~l0gHqnF5Fk2X17UWcFgkBCz5V(QsEO
z0we+BDmX8mf4^ceKQ13YW_8;NUndA%;%k~RZ!+QJh}-VMe~*Bm?2M=q#KFQ)F<vJ1
zZ|}P+8og<HppzxF1IcF-Tyj67a7_F9ZL~0`O&{#a^bM=0p;FhtbGR?<tMSF4r>7Eq
z?Rj@~0(SS;l$J})hEqjK;7u<qa2cFMAE*L$AMon;L?W%9xPbIp1c;ZHF+Se=_dM+E
zd9~LDqM>~T%teCXXUlpN|F4Ax&g0EXlUODCyBWh5%z=hnZ>~4>ZU<+-Dk>T{ILT_e
zsf+4)C@3mAh=URSN(;EiK1v`Pp{GX_3Gs%zi91On34hld3Gvoa>uT!b#E!;GXuxF2
z62bg;nK=E^@U;S&*9}B94;hb|Q>*YmsqYaMHTv>NKjbeM-Nf+ZRn}2ZfG+bNuXdj;
zEfL{k5)i1!%LAXR<K-ck$6B-e7dAqYag6ya{CMldMdFFcmA$x)_(>zGxpH~7keb$F
zX#8eR+3>}~Lu+N_TZLEuQ`b7o10N+F7Z>FRCQf=@T8=uORz-dfhsULR4gEF!=>%_V
zLW|FT`8ILwrUi<Je(jOljBbKs0kFSxp(C(@mSBU^0d#%cVDUGIfClb*R<;%cxMN+C
z41s?>$HxC%FScB~mb1`xg0InI^L0l{Ri?M8+#E#w%^*O12wW$)GBSSe{vtMz5V@gJ
zrUi_i#(U4k7#v3d*|!H|kibLXpH3tHq^^Q|Hb?oMfAR&vi9w*K1Xd;@u=RchTW@_)
zz++>{m!8WQYgJm~<uoCri@=}OW&hg?XmeV*OQcO02@hY%Yyv-VK?D>^@uf{p`wN$A
zJ4Yiayrza$*4!rKtH+dYM&aoA5Ck(pN-<983-}rSJS*EQg+g#I0c>4qVj|4`D%J<F
z{RmuyAI}jWwn|~vRLjRdJ!PeaTy9Iz!6aBNooj4)`3b@gcSyy><@DIW0g|8E9yZV7
zr$Kk&=9iz7H7VN5?Ev6Rs_2W7Gz2-RuWislZd7(QSr}%${FgI4xOTzqm(&UKxTSJW
zm~-Hl3gF*de);p*xc7i%O?7_1dZfFX;Nd{$zSrJZ?!o2sYJDBy>D6{Y;M!4C=J|Ir
z3!qi}=cwn74v@suI5r}?yY->nd+TL|K%v9-)ZAPBio{0`&lez?N7z6S$p4-%1d7w)
zybM5YNU_DLRMi6}u2<>b;owk!8|4{%XFBSx+SStw3maY%#Ccc~f2CeBzjdGi*6)T(
z;)laFKF^!qPa+W>Sq*dhq0pkbr8}SAQ*Cy(->D-MXi%H4+>+lxJ%F3Wym03DWgi~S
z1Eq?(Vua`mHC7ef-f{KDhm2=7WN$`Ez8rHuYk8N>yWP1?0073Y+>OU$XYa+ixgPN8
zaN2q<E)~0K8!KJb$N{9>gpm8~7;DbV^6+>VaUu$^fgejC2<j?2us-MU6{m}*T?Z<=
zu=}TL`VRcxKZ5uJ`I~Cez|)d#(HrlewQEd^g=;-q<vPy~m{I{bBj6u3qosyz|AH8v
zIdSpMRi_ATNev4m_t9E9e_%iq7^M`zL4(72#tc9sJU<y7KL2Ox_>OB-9?EmO@SZ!y
zIw#l2<8Gy#|9*nMlMmdI<G0(t&Uexue#pu>#4vNm25%v`4a=(YlnTYb!}+ZJ?AAkc
zd84y!^PiK0&j+b&4W9l^EeN(wVBH4mn9;d!=<gg!dAhWbLR6Goykio7$E7LXL+-Bx
z-azJkXprEph~R(tJR|yp%k>^KHQ;=lj~yORITDOU;wp<{tySp^zzgB`{2qvo48f<s
z5&J#;CRyL&auYRUeCIwO9dwYGJXuuW-t>V-5-g)D&JAZcT36L5w6&`(*`(R%``!oV
zg_ut(#=qE6i4a*Oht4YYY-bExIyiyRv}dNky+iWvX<6|3^5g{!2$-+=2>{_(<ht-F
z?I_;0WH6RW&)Y+ktq~H~Q}L7@Agka|l!Y1p^eepn4?X@b{b%<oXe(#R_qjYTN?=G)
zo90H0>s|YH@GJ^~@HF&1OJ06>K=+0nJshh%UaZM^)!1)YC9DUI4F2VF*k<dg_74&x
zr=*x?HkOqw6F1m1%gZ;mSZa;~Dtk<@Z4J2igU(vHcJ*{m;(<D$`$uYO)`n@IlQ!I1
zA8#*GGLOfi&;7Bm(9G+8$#hZSB{T<o_^(9+0|Pzp`pfa$-vkSTe4wyYmvga<XC4B^
zwo`(>LbVo9uZ>equpWX%Z(C7>ijK=tEy=VpZAeQCo0S8uJv~Z1=f#VG)3XF4qfHzf
z24F70eaTarsjs(sb{Y?&4w#lmK7aN%i-bIIf6ze!-}C4UrlRw(xco4r;(e{aSqgMp
zRBP$v6cpH|G6hP1|8hv?D)g{-l93_?A)1nqGTWKhM4j;Ns}ricefzcphUhqOJo*Ne
z$6MQRKe_yXW_>l_3`}{AQ$$JQ6sSJ6{^Vw?OzB(P|9fm4id8;uvo#!ES^4$<`vP;H
z%5i-&!li5oD!Rb;LXO`6fvVu3Jbqf0nVDByEJTSSD>Y!?L+raH3;&On8tXJ9q}RFy
z#*mGAJJdh)t=QP!&hGKy=z*KifWvYLlnRr}%idcTrD<u0xdZXQ_5#u+6OH&>j*r{_
zwU;Jym|VeTmg}7#)4VGC`#<i5NM&VbKQR-$uGez}RvI~_q&TSKBv1QnPfh^pL4`pl
zi;@W{jEY#p0wviSABT}^gX|<moyOm3(UpdK>}8GK_iOwjKq$Rf%S%IJW@B><2F^l4
z<$q3q#{dAdmLC6g0S%rqj~57^(bUw$c#AhRwgfgZ>;}!U<ts2P-`v8LFD|%vf(o!O
zF==aQ8Oq<DLt=W@;^M49F_Q#3(9TCsQe{#1Mw;b%CR$pJQX^n>zdD!5EsQXhl9WP0
zNq8C130&)7Oz~}GJ1>#$qGo2<#H2u{!A@x?6c;Zs(XIH*Ma$M!SNCmXud)(vllM`X
z7n^`UOn5STer|4|Vi9Oo@Oa+%ixPPqh&w7xRc#D_=}J*i8sDfDcVl*w>sdVH{2ZKA
z!ARV1Gtl3^Y*}8EP`0Zm5pOqsbaWJufsul{U0tsMC4>Is;-`=4IT5)s5(KGqXM<rO
zMtOWWWf2j<ATcE~TuR05JbrV%(Ga#<1C-(be#+-|F0X=%UFD?3RClJ?<`w6Z27#P|
zfoO1Wu&*zL;*%b9(hSyg)GEjFxSFk#c6*(Fc*t-+9nvizw)9z&w#iECWUiXu(b0+S
zqq-yq%{HHtmdp?k3KrCf=$(MV&}8JRtjuDgXK`*ruvw-IPp<s>#uobP*C4X5sje<a
zGFH+MBCxiGX+rME$N?f{yMW99<fZ2Fm6Um1sLnrtbH(mKUmx|Z5VRar1ocF!Ek^VQ
z@eub|R~5R2Ig56RYYxo-u#ScqRhQlF^jhPAx3qoB_3rp^>A4t#_QTw`G@UcNqPyy(
zdP$_?5bm?-p=B!7BM%+h_wk044^w(@K6{x1qC}DWB?8%4eTdXpv8;i~lDNsi!TsyB
z+fht>e9*BmQ6mys+Q^=nY2`5rp6vS{)^>I`?O&|r<Z#m&K|==l)vIij3otz$9%i>9
z^268H$Mp3R+U9b0aq;<8=k}l~JhNkJs^-AUkRVrE!xo*F5e=;Ge0(42=u(jLPqefS
zCdKiA3q?wwi(A8#rVy^EtfeI}B&++I0&{^`V=XFrB+!YQzSU}f6CNBA@?ngLjcsai
zQ9ufhH4;HYL4gKaF!d8Br@)5Icn{+juv_s7i`%>;6gKhc-HK&D*x$d~pWu%bS*&|(
zAN@B93{2W*tDLA4nMKvvev?$$oJ+5=^z|fWnUeH#$=Mmo#75x8f0zPeP7XK!<Ni0U
zPnL^SLm4*r(Ej!^?drh69T0{t+shr(7B;<tKO-x)1i~(3{@k69cxRDO_KybM+yGk%
zD+h=7!(6(_$Cxo0MxBQ};>U*8R;!(H!<!lp_tkm@PEW9Or7J2coB<ui<@!!+`NL`V
zpY=a!yoh+@vyD)7(KDBG0`NE(8Bf(&FPj~iaFnHv8N^a2i2D|(Dr5mXfWDr-seziB
ztE%d3@LI2I>Rp<Lt(jSpZ8{YN=Evo<&lg+#_q2um3(Y+Dg_NPF$jDh}JojrK8+9|<
zxD?;)oMQI2<<))sSg5;#!pzL5rXWoE`{oV^sVC@v{EK>1R<NJ4Z_l6J;&O5aQbMz`
z^-ai?$gzTf5}#IK$sxZZqr)MsxOl>0pxRhYr`bjJc}`eRP@qY*-L-}Zw}KXA41^^M
z8wjt*WRY6Q&DOXxI<h(9bFQW~IoaFWCFa=KpPiy0d)@2|CQk6jgw7oB0HY9jdhsGL
z7I2%aI1xeTwp-y#0Z^H`@EGLLul2Sjrlma$B&0_}*$-FVaCHR*eoa5WZ~%Co7*9U$
z!>uFP_j2OWnvIH>%xxam$XuQe8v`RCnYr0+LlU~7N)(yHA9p>a1KgMe%Qfzi;^cWJ
zO_%$*S|`cYtwqJ9nbGGPU*>~WOZMqb_rb(5r}RB`?zO1`IN;F_(WiSqnCk04uM<5d
z)H{o}jKhuu5u1z<E`k9Lrs040$HsdU!XiLl(G5b^pSFLW5uyJ!N^h(WAaKJG$MX$q
zl?`Z01oZdYHqwOs{7D`zrJmRm6}w@;TBsV+>=4KCX%s})5aZy0?tHh2w}Q}2LuRHu
z?plt+4n2K$6_Cz22@6kdZ+~h5bY{wA3wc5<M}<U(4?r?5oySc{$;WveCqyzQQ`aLd
zAfMZ4_)TFPw0jH3mzJ!|K5V7pg_q)tZn)~{ArHw}laXbEiUF_md*%gzhK+U8X~mB(
zpPyS)&4%^F1?A@&j=RBNFf)zhY{xwml0;eh{EJH%Y_uvdk+bBHrv@7U_FV83tmim6
zh5WucV1ZmJS3{8(9A4iu(o1Nwc@?A8THP<%7a58RU857@;$o82HO_nwyT*Q~QpVQQ
z)kSksFsA(aH90nxsZi(;0PbM3g@uW!Y2HdQht=Kxq3J85qU_qX@m4{kRHRF#K|twF
z>27J22I&}T7!?7fySsA$=^O#+?k?#ZV(0<B?fb3AA1)TUi0j(>%p<P&5UU5oJCFIk
z;2!tIhjN3Pr=66j<p2_k(|#x(o>rqclNL)pyHV3`HlfmS@q8@uyu|G<ioF-|=Kc~y
zuISXsLEthdb&xPC6A)>;$cRAmxV3?yF1l%Fa+3Hsd1AtBc-%DtdX*D38K!S;=nbf?
z;7-d#r5^A_#SQd#@9gf=mwKV6r{?$nn0B>nyfOxh%7?R-B>e?iL+QGZs@hb3U`z@v
zY2E66beiL9t4yr8%1SLpPDz<yaCAAbVjrq;0^)VI6-CJfn8(-M+aaqrq$VQc5zW&Z
z0|w&y=3XN;!5}dqk$t^`w^zFeN7}+6DJkMLshrB^)zLN2-SFLXArMHh`}NM)<ZQ1r
z*3{(WAFEt<eJ{ZQRiXQMVs)@PfE&I#u{7Tl_Hl$|AXMiD1A$JTCHKdRZDkG$Yi1c2
zf@KCfD*MgEgoJ`Aa>rRp{m9a^$<Jff_G66sIRQh-=T{Aa`-r`pYe;>eSp#sl<KyO*
z(-qC>)-5qSMQs!A@QJ2cc%tF(K_G1o)L1eTybhN|i9oFon;NYM(P8N9vexxET&5mS
zeVpc=2K;wzuulaS3NrBCl>z^|26LrGzFMpz%L#357u%$`xXF3cuTo_~bzdM~V&a3s
z?prOk#6x-{ckQkWozXA7_~mlEvt#_`-}Ols&u0_##GBu({b+oXVW#@v98>b&PU+%h
zX(<OGq2}t}XIs*kU*PfA*WTm$R-=1+C5ECsR<!ZkI|*=>z(A~L&!XDeX#wL+ZZK*h
zm(?mM5VL#J-L=X&+!CakmDg`-`LVz+9rW4W{>43IVD`o}?j_cd(Ko$ltXyUCam9I*
zLyKf$abZC|KHbzbNzGiN)ye56_fKzdZHtmqQeM1GO*eT?N!j~`%1~YFx-UK{*qn1P
zr@J~hBr21kc6j=|V#lbU23ti1wzBf+RrAYO1#4g}MR7w#MwUgSbv+a=4d~*BoIau)
zz!uT*!v~*F=+4mHlvi{ynws+%*wtX}wD8f~(eVu@XB4K~0+<FUn*RzrbN83bl&_CS
z86TZ5G4Xh3Ha?oGi1QfdK`L?4|7HR8wZhaCl$0eVb@yDkA}L-dD+z`xee!ts-D$tN
zXd6fveV(mKJXnaN@j-7rrD8hmt9QDY1=Wf!T>tb}#nEDOV<&<#(V)7U$w=R_+AFS!
zt+Yf%9H{U`BoSa^>$UhiH2Ixh^IGp$OpzwpgbE`zzyXucK>OL`R!xLqDx1$D<qC@R
zMFk+nAX^h#)B4x*Vm*`xWj*ja?YD}oZMwRL6Z^sNHJ@;<7I_&y*;*0_M_9`xuNxKF
z4he_xmWd1qN&xW(3@PZpvOfD+mz?rv&F9r4n@kJo9F42KdTSYPzbSF?{Cvw2{bmMs
zcHfy_M6O&fL`BnH3;eXW@nqOk&2r_XFSMJVxU$rfaWUZcvGN^@Uf962+GJ*7>E&Qr
zUfgk~Hd2j>-#j?jNk7>Ndq~oy%-!rG&xczeI4DX8N>|kAJgvIzRdmBQcy&=xdTbmV
zcIRgTP$bb<jCcc94u-p4;VO5aAsM&6YJ7z^CKnCuwt9Y2dP>o|9j4;qG6r@?1yul^
z416t(zBgL9nQ>x8(|R+4##gzA?+2<1w*diq4<PCAUuw<Pnj3PFjrBwz{fCsnf2lDO
zuU9k9Pi6IRTY+=3R5!u+gf_6O12mpMe`z`fhUo8h)?nWf;40C(Uh<-yq68Yk7T%@H
z66-1gAE<1lT~(S|Xl_oT%cAon3&r~p*~9J9YnD`Nb|1wNTJPzKpIKckkDv!CH7ECT
z6kct$Men?7qylPY2?<$tej8qTkX%)^HQ!~G6UVQvozkJ<n(C3<Keaf|?=Qu~;MzY6
z&D<bEVG0mFI|6-Qx6|&o)|-E3>`l1!^<!dbqyA&$T)cw4RFnc%35u@b{|N#yLi`p0
z%zCks5EYe_kf3#RQE~fg4YU+2xYXQTWb)BlELnc3XYBK&R3gfgi_>bV98vXjN!A;U
z5c}PDsakr(^%+0afo_>zBfxB}Ixg31Q&6mjjWo1bo4Yx5NJwBGVTbVY3J5YJQ7lJs
zla2c#;S9geRPU~21#fqW^N(D0Bk*SoHRu+aCHxkd*x57P&;Z7}wWhA|D-9=X<3*{1
zVTtrO5Uqn=9EvXBPS-#gQx)qx48lO8)B-A?{%y_iA^^SQIlnP^sjDXBHZY0w!53_%
zr=trAAA@SW#T!lx;e!RN>dcu{U>eyu=Eo!{@Yd)Gm3U{o+80)3VRcw&$TU&Ws*0uQ
z6fJ{~62Lco8FRBst78wyBA)x6&Z)-f=z%^v7Z9(&Vip*L1LcytoF!aIhFBgxK2;SZ
z(!HSO=H`v0w{PAYt`^c*(HH{^7C>x)!q4}U4;mzce=K;))?A>yq1w_KNt%vATR;3a
zFsu6tyk*Chq8VZ3PEBmCZZ#at`X9$i0@x>fYi;hHr9JxQu4wIxGYV#PTQ7eq#lz|D
zb=Qs-S5~qy=0}9s$;z_!9Xq?=Z0o0WMnBCH5P<eueTv2GmX7el$Hq429(Di18Z`25
zwy=(o&M8ihggLi3EVz_+hP3&p%%Z!uH@l(W-da-O+K(ShwtY$LLAKP{*kNhc($~Mm
zX$tTAIX5&46~KXS#_+IXQLve--M$M<!2AUkH%5yJ3;<QTLV&hiCa`x0t9B6n$n70$
zLxY0}f4+0w+Ou*{R8h$@B|g`DN<}AL`OBp)`779*3PJWO40Uzfc_AUjEuZKY46=pX
z7;N+BpkR8NXL|En9A;vYuH~Jt!mcYvmqg*}%E0e>;g%E_7BY?jjqZLK-&ZeSZKI+>
zt!rv*ESlY%nV%f0Qv`20I7k&TbKBkBVP#>l5-&~Tfv3s<qs~&p`k-RyNn9!D>|K@e
zk9)q1kp&NtM4TuOy*a8fR2I0oF-!NCe2P8%&>CNf$ky<iz1x<rxaTE<pgaH#jBR&)
z=qSueJFrgz#8sdjWqa^n0L%W~*86H3o(Xw!K{3Sd4*^L@Bw$;+Ig|=LTsDS67l7Co
z!oyyq$HCj%z}=mFYGRx~cF{u<#$u;A`*&QiDyc7S$ml{H2{5xRLaLuX&!15>_7lNV
zG)6@X7Ajx79-f`luW}_z&#yn%)2ea>Ho_ri+wtRWRoMFa+}om7Qo~E-<-;hH5`1U6
zu5K}n+PSxiH80oJ{?V9dL|mK-mH97X{ov+n{9&qN`O9~*vO=|P1z1*m8^5g7?;K`|
z<hdk^o6O|F4u6U@)#*|5p=DrPYFF5+EqrAJZz-VBU@YS=df!1+_;xdDxucw(3)(pi
zIhT{&jAcpjc|h3+tMWNLU*Q3zCXOE=A?z&rWJEk9lCrvEf?^cp<P1+9&CVtzCy~qb
z?NBVPtVnn%at)ty$YUQ^e>KeE(pxw?BldEGKt^qSd|Ej^0d!}*n(%?$=g-2;uenuU
z<7eUYx3=B}1dvCq@?yagztCOBU_P7@_BuU3cXz9%=$8o+&rPzoDFS5-ou{NjJ&rp9
z<DaUupzC)L=+!t_9)Z<m|F8b)V%@+1ZbW59I};U6&u`~;SJv=8qYPCChoKv9NLZ6o
zOkPw`3jn6BH;@C5N-Ez_vsYAtFhQ4DpZ&cYpW|qgTm8Zm9i}z0^qZd}GG=9l)jMG9
zcM94RpP6Y#)Ija_6V=$AQSRM>l7bgR#(=eTurLR)U-DVqN_O?iFx?06N3wa+kdPmH
zTjO$_Ke`{;my!)^n@!i9DUu8U5<ZfI<|fKM^2};$GOVf264??idP`5%lb0vsho++h
z!kGtRj&Jz*!n-z4&&g&5qdSreQUN?JqBD1A>z$lJZH1G>82~&Y_ZMnm&Yv_gN3P<k
zmI2xGd|&MFh!K$!t!8AzmdcN3@#Du2((#S4jN1`<yjmp_2jqfKt+CiK=E7<&1ra7i
zZq{EXE!S}l(W`{PEf5b^tG{kSq0IybOVIsO+WA2jQ02S$kLeVYLXU2-Xh!iTKgC4o
zr(3F~N0Im<ZwM@^YSV_&r-Zj#0KjHuAJB>)%F_{r(~RkUCuOLqtSrtb2igGw=|dV7
z^A7QYX(E+wyJvV5z1F%-o~r@3`;Vbk95(h|o)^`$&K)`SwfUkj)ZuNbRA6;6ZIkB-
zL-xr0M=+L~ot<<2DXX+1q-#~fu(X_kG%!5-2Lt)N?)Y{v#eO3|;2OP7V!}^++i&Gt
z&eOK=x)ytr(5a3T_UN086%WSmGO(~xQBnf-*7Rcvqke-=4eKftuC175ynCcZ<0#4u
zg5cTKtsoZu>Jbq!nwJyo0CrG?ObwI_eXSxBhaJKBR}#ZgQa1p9URX#5C@zwjZ`j!*
zy&E#>H=GDafzhmnb@>KlZp0~s5Quhx1eBj=0R*nqK;Xk(%McROKeZSUPE<3c5Y#Wk
zs(V1Csp;IQ`a4w>12=Qd*43bYQMywmkd#lVOIEOk6F*ZK&QXhwjedRth7Z|+1b*MX
z)u9REY#CJtHcvujon=2dw@5_2Flza5->QgL8uR=Se;oeg89b?H)_?W^IVK|e<wJRy
z(GNKiE@qr$Gd|T`lWS(t9qjLo9o!1CEx5h3&4npacedzS>$Qs21Y9Y8x5z$z55r(z
z7@QEcXf>;-N~)~1Szt4#s@W3`;Z1sfPAAiM_+He`X+X4-y+Ars%`y3f2yLa6{L_WY
z;R82KOzq%zpKQ<Ls#iLN)A;2|A}9`eW>E}}jS{Q&`|Th%qaj#iLh$93p4+B3=$W*R
zyA_8!w8PyF?Z5f2BZc60zm<6vz&frv+@1{~DtFg%1)2pfG+!?4+2|lcdERT%1BC<r
zoriaIq}2x|V(KH^ZTG}qL?y(0UQKaL1@(&xiPJpMIdJy%_U2-?@KVg<7dAZcDLFcN
z`|Am}q0!Cvv8NwDu5545aI0x+x8@$1RmD$h#b~i)o6B25T&qaMN`r`jUjzevn^mft
ztu3L^Z1e+w*(ff9wHo!gsN&OkD*F$6{OUCP+TQM0QE|k^#$o+}uQp;9AR}nu(`{|*
zuDMFV09ydsW{6w0i*d4+hO;yI1SfY+58*SKbW$=hDUuCtE+WaSMDjAkBc8NfJeg~?
z;;^uq$fpL%T9&dxreZHMpPpU4jeg|+3e;`5M|$`6?Kd8x?qgmsm(Wm->Ya${VqtI5
z`zsEnTt+(8J?qrwd(TF1a#r%Ch69~waTAERA^g9s5F}f%ais}rvGD-a<(^`S=VIld
zE6xS4=%ju+9D?At0$=^Vr*jXvvB-?SihrOa>>T^ViSF}J7iNDn+a~PO@-K<1w0>@}
zlN@ag3C<WT@FbROtQrz9V=Mdi)|g~iuJs;9LiUk)cCSXln?pNvt0>2BA8+6)pEegU
zJ$vA66l6pq1?;T<Z*S8zox;-g=4oK607F&fn6<v$NuuU{4=}K5Yh6|c$P>H`-!Wk!
z+hT@ERvUMV&fZt<^+tAch8F3Gm;Kbh_uciH1gu8C2nf#3kz)9K8Hs!vET4Esb9QjQ
z{O3;i{R>6Lg+_C!%;C{r=TXh)i!XjKaXxq;eVfH(|L(cOpL;(Z^+q*k?lnW0DHJkY
zCC&%$;;FxLE02aWuCd?vmaIFkE;L3moDcK~iTv1V5tq?@_!0=||47v*q1-cv4HKKY
zw%Lq-lU%Eh>iYq9VL{(8z^1DN6OmauIodypu3w&gy?~x+Z*K?wJq*zzu-g#PHP9kW
zT;!IkqzavHjhHSrdDhx5njJ=^rW!dqIvN`r10spOpZ^z(j%I~tgoO2TF3D}c(!HZ2
zu{U!x;n9y$QH<Y>Z4jz89zWiOr&VuvSIVANJ-3&B1n{8lyx^h!er>j4Jz)zSNS7YI
z?BocBi9lA`W==L87V5pP51O&m!zWAc9CoVC`(l{01?N%(mhfnfu7r>wrX63v^hr*R
z=PJ`jZ%!D1kE*h%yM#rYc2I>}mf7il(9O<Zyf&`|QuAy&YAoZUl*O-Y8kPL4TjT1W
zpMKLj_c72cDWYQ-A~~S<IFdq=@FZ5?5Nk&`;^<{4;jy+(m16wn#NDYTQ(_FD3L^&l
z^HED_D)C@Uv4QkpmJ+!Do*IibMPQ~5?hp#KH(f}06GF~YWEyw|aCU$52GefzfZ0tv
zn^9ZPR~GFeN-@tM%py!}fIW0tA?uCjKv<f1Y>(ywL3xl&cK6qb-WO^N88;W{mMu1D
zD^}rPVidCaOiA3kT6$A}T`nJ*f%mCXX81pGzF~|H)`^LUg0qeoNUK0DMJXI0v{#P*
zt)q;A8y1&HtsBf-a_4Y!^?1EEj#X2zKx27X;y%qh!X)!k2T%-hypfA=vz@}H5L^Rd
z*|?+>ZycZG4gsm_)17hqiNDoJJVmuui?4-*8lBbD&Z$L!2xpA?WXW6mNnT?|2EK2;
zmkDv*K*a3{hWtATtthr6nc+4PJd6*_g@w$x{c^ZMhSL}gKpqF6AU%-Hg{ZL{dCjYj
zAUL+IY;xj(XZM7Vu+ptB?qH#@qoYGTMbK>PjXfGsJZ0ES{nj4sagZ4rI*`+&dFGD{
z_dWjJd3S=`0ne`}ZVYbJ*nzlJh^BrgGTQ+41^`&?d@m0VAO2O?9ONJ*$hXOSuI5}U
z;o$F1QA%%VF(h3SjLr=KNw{5hL`yQ6*X}g^tB04@C=1wSp71klY#k9s=Qrg~64UbY
zukAXth`9e<i%!VrZU;LqJ6l`D)w}Z%S;G@cXSTnXrE)r3!H-JyYqOT}Rnovv>K@+)
z`tqbKob(n!Mk6B@^eL&Xp#gf^LBgn-?nzEU<GFkGcgZ(<p;#6A7-(AO?`H+E>D7eb
zf8WWe?F!310_+NnuuM+t{vd=dOIOKKd1R*#r!DchTDs|5*RArO$QJMQo$A9IEL355
zW8-xbjc?8Z=?V84YNnD~$+Rxf#Jlw2fagxXo<5RBF@CWgk{*D#0G-3TYNaH*lgZNB
zgZbQMr>*W0KACWxR0Y}Zox^&vmQ$h0wQ=m%(PwEpxB%31y)h?HRcoCMmIQOv27H(p
zpUj4FQY!Y%@L)u-Ck82Rz`FZ~ri#0}f-~p+N;zfaT&ls>$_2#8=OTR8qdA84&HxN-
zSZRTWH!QV2zS<QIYMEvKcUMau6GItQ>;*~%rPc%Kc+KY-59jNFi1O(!^L@MFjC*`}
zW<60r_WJzraE<!*tcwQt5cKx-H3AocL{9StFs!ICYGeqdSZHwz&eK?|b)FE5Ne9{k
zKw=D-N(A|KHlGXzA>ziypV2F*+00kzagnR2sMttb+ZRs`nAk2N983;;q4NzkQ}CO?
zx+89`+|VkI_JB~q8V6Z{GEuJK?&{r1KKoHRfL{fOW}cI3`>_Vg^8>@1`>fho-4jbo
zChYM5BRM>d+`LgM^S!C<3ULCm^aohIB}Uq#?{f<R3AXt<ma1~+YVB6-=jzN)EZ7<~
zM+#A`?SVx)c!S;Db<k@d61~ne3e<>=`lga(Wo38a;ri<M`1p4vxAAAjW^19=$Y$9<
zakrgq&HUcYVp38M<be_SShl6A7wMBH;@96NRV3a(dBxuX>E%t77%{M|%ni*AJi^A7
zo($wY>mD(!k_NlSDY!8n9uAIYF?s5Lq2%1%U<KgJBJprEC-x34B^!!~Mx&WH@NtS4
z%Tyf>WWuUkm@@M33A&GjXK#xS-C0W%YUBd_ARPPL=kLKzg$_O_Dk^$|g}XIgubGce
z#ctH_2UI>n?iv-=*498GUpa|4H+?1@dbW@P_JMLSR|}8u4y@ZU44&HPHNNYPao~PV
zG4O|=*%9M?YEI5(jk`N|HMrm3Ipm~^5lT<N(6wJS^hF5C^R_(qXL;1s37DPI_>kA&
z@bG!IE>8|GE-w0B`ao~?fOZJT5Uj!s)lJ+mUKi)j6&Y8@=F)MpWL7Kk)YR0_D^%{+
zmws404zoGVA3CaSCk^X;5<h8@>$OPwi^bnbZ=d`%@hy~7w@u_cfuX;4!cI@8=I4eT
zHhpA0={riwcx?3>%zAiB4b(%X^OWaQ#ga=K;+$3)n|L+`FvONx{V+A6<oeF~U|3m0
zxJy1lfuozjBpezGZAJd$Wd`Rnm6laOFQo#Uxk~PkVhY}>lw!tgbv7Nx>sC@sS2=~J
z6x<1?J&ela&2=sxCNg@7dShcr8s6NV%{dg_vcutbaAOy?znyLAB<c@TKeCTyNwfz5
z4iTUIyYUk0$-0kzHm$8FW>NFT7<>{vnh9qn8x!=dL(H70=Wz~XD9v9eIS(zuz!0!r
z`yy|Nh-LIC)6g-YBb;gWBt~=$>;B5h$`wuU+5X%RdMi7kNc-ySK-&zeUv01a^bJ*{
zJ_z$RGg%7j3a&4h6yO@ULCz9_?|pr5d5QvKnYE)t6F*!kZ!GyF)@c5x^3Ye<g`u><
zet(wc#sM?bXLrA1e%$xw+GYF1z@bI2<+GmPA29oHbaA<JJ=>he-JLAUhs46z4Rl&Q
zCuS&o&6a6Vp%qJcD^=Pffbqjm&P4m6!-D}BaHDw@mGC6oefXOK2ra4of4**FBz-ck
z-qLfkSs~R&e$zuPLIDO@Ld>k~`%f@s%9l$5r3=%~!~X`#S&pWzE9>1KPIcG1Zjbs?
zZ~#oG`6g_lSS3}En}>q~8LCdp+&F)@1mixg-Y8RlPC-SbT>nu)f%9QurP%f7jk{Yu
zv*8zTD64cR>N<GH(xlGu>pI`;&DpNQ^Hm)8u?mo-LMeEMv97txy{Fji-Mj{WpI*E*
zy+U1hbj)!o_`;0PIC!pm<3HDzBqMg;nEm~ZJ#R!@`*~5R{XP~7;da6>*1jMFDGChm
z74_y_pEd7`gF@H3VYf!mQ?GYRzBk;1u(iV#;(=s!{K19Mh~uUF%ePLaJ3P2WLz^bP
zGqB$ny+5u|JB52UQbgwKjqV3(l>WqJBMw0U+vmZnQ8e<1Ny($@;Y=y(!a__coU7+w
zcZf+ybj_fgT+jI=GrJpg_Ge?%#DFD_XztcX>D=k=ly-dT)nbe{1UdS%>TlV)mT0K;
zbiq@;?bHfW=9=51K+k#L$$L<NK6~uS%d)E!c$*H>SzlXIyVPV*PUG|(wX76fakrQ#
zY6V<|vAmY9g(&ld+3Kz^YBxtmtAz%h`xt$HPu7Qkn#Udce;DFkQBi4PQ1a|8+E<K$
z_f!Fuhdq~yHL7NaGOckrL+!He8=RWgisfdF@0<Pc;fhpsgnl5H1|VlD4Hznq4i7VM
za_-&7yg8fuRP7M^4=3L_f8)UPv-aGQN4tpS)re57gJxSX@6S)`fZE(5V9}2vuvGGa
zi~?vyt;1Z6>$b+@SJo_3qi4stiiR}!-!V6a?jkA9PEJ@&GXKL%5pj{xTi)i%Ps}1*
z`=G1K$C5(fd18^{900Z$r#lM<rO6-cxR`X0&Wp5vax{i4>mx7&zcbk;Bt=QKR{eSa
z_kMCS(m8l}mh6v1(sVX!3jpMM3;E#)#NDVljDeAUA1pf#(dNA|WP+bPn!Qe0u(aW7
znXje{X9ov$?yjn=MxuPJJ|NSY!9sXarvj8KAs$e(N{azKU(HWf%0dXsGUIv2%DkXO
zUiX9PL0kc1-7=fH%bc1kN@0&Lzcy?pib{=Y)Bdw%Ns0Q@8(bew!~Z<SB{kP^FhyXj
z)Eih5*t!sav6P@2gHb`mV<J|-(TJiLI{iDa4+m;jtR(qd5}urnc4y4?qMkbwxEx`=
zt-e|J#JO>IRwV7wRNsSDIRKRQZ$xw|TT#mM2W^%ZMm3)Wu5R8S-fG?5-Uk(Az7sEd
zX5NgJxBsN9ySuwa)Ze1h%M(k>!IT5=-NnT*rW6X)vt_i49(a4y0kd5y{_;EE$MO2E
z4`DZ3#im{KoDH;;o@?D74~jZlTO;B3fjFrg2``v7=N=gnmcBJzY;jzf-$vUKSz2zc
zw98V8`dk331-ISFQq6pO4-XIUK_METVwe>(z5+D-u=I1t%Knzzs==@a05#c%8urZE
zfTQz@w&RxXb^R^Se65UkGW)2>pgP-RJ=Pe_$Y(1PnfG_ok3fua7_l@$E1P1JVjTed
zM?!G~8|xhJ7uCC4-1a{g0$X2ZsiCH(S79MFWHIN%*(k#q%cIh{+HJ_EtiPF+m09?S
zdV0>$La9oM$_v#lj5j`K+a;xQknuvz&4ITLMEDsLyf#(leLA!5UbQZ_==wwG3b>OF
z!-vwcGy#+Oruix{xkY&sMQ6w*utfx`FwdYS=72ni=JR_115qL27jSTJz+*e{DF{P<
zL?NlnG*gFWHpoJmoPe6swco&DqCnj*Z*-_x71=V`1oG2R%*k3&m4DCRT}jsW>{l`I
zJ!Y`di{xi6NrAn>?x-z4taC<HPgQ}+;NZU(7G^f0txSBIn02&pK_w)L6i`LhqYa_9
z8C*LuF95;r@Y@T%mpODvjW-#cd`E`umKNl?x*h9JAZ+6~@?!yb6lsEPob>e7_6uIn
z>obEEw5o!K_vwyuybP$--JF~<4f$DFqoW)^i6cv3VuCo?92#{@6+C64TCB3BHTtcV
z2>cy6re0*{?(Gv@ceS>*4h%F)2giX~=#Q{49k!ROtc~i~omy=>6L+H*2MgZd<!kWU
zJ2<GW0z<hPhb0+$s}k({7)-oo8t7+*+uFRccNB5+6`*3F0$mR4^q|(j?ad0x)Y5XQ
z%DR$f;|`3#55Hp*GJnadbLox%jQPwWE(mgDwe9i*#jtYQ?0s}}1gfEr6UD68W{>bR
zzb_B~VZtjEGuI4I&;p`aP0h`~A>+r6rbj^KWuf4Jc)Gib2ty_MtjWo#0xa*OeeVT3
z&t=Poj|3ouoL=qUv!|o)V^mGaz?c;SQ1e%Wj4g_ac1tyO7v-6T?T0YkvbR~HnJ-%@
z_#E<#nm=D2PqG;}8YvaXE6Znww}bt=EE#*pFzcPM1a15Ier^LE&D(E_oraC>p}Xwu
zDAUYRQB)z?r0*_=W_IUbp@HM#ax>`bSE&GeBh<;zJT7XH8F>Eep8I{DP%DXP^nVe$
zISQ8Lvmh$J1tU)_yo~LX*TA*I$|}J*1c4A6a5>wX0p@7-mZLzC(NVnS(E&C-#?=VN
zkal`s#Pey?pZDJqE6on1Ku539d8hm+wk~eaMlA2$5MU^}o<4h~5z77vG+wtT>pgH9
zKik<+@YuMbww~(Gfa<@-eqnEWTQ65Zn;f~m?sk1<rw}@nDpdQa!^E|x^|^^Xn<9xm
zI64BJ$8>DJV0SGFu`CZC#EduFP*BXIi8NZVfgqvIwt~KN5pw^W9h$|e)G(NNq;;=B
zLlAn!Z8SA95g8m@T$6->@m%)XT5gtN?ZEV%%!(V=3crxhm}M~>ZXZg{2Ux1|wo|1X
z>REp(vSsh|;hCmEn0OQiI7_h0UhQ5b0L8?o66}5m#GRB8s%x+(ie*z};gmfCVjq70
z*1kh~-~OdPpeE=FXKpx2Izrqzu{mx>FK>_Kvl0up&N0>*LKl+-LwBpbGTVQ>z_ZgT
zTWn6uQrx1L-#-?;J623osxa^?($cGR-|rc-1PP@3`BInHAe(fL#Y)?lhGsU6tY((r
zbudRA`)j#X2IZ?$r0RVvf<2C=A7y16eMqZsis?jl(aC(eDr~<*DQAaJHEW@fw1pAm
zJU0EeXq>!<Q@<}mN3ys1rYMuI2SQh_mX;HoUsp|7t`(>=s-zktKGN2fO_mx^q%KwP
zK)jenI-P6N;JOIkyW60~5XV&Ki>s>&bigC999rF=d}9@{^UV<A_}nrupyi@H3*Y*G
zvw#TGjjr_1(^Z~hai!c!ks?si<>lo!*2mB7SyFqn66yQmocMYkVDxdFuJ>P%XeN@j
zzrSa^FwzQO7YUIs*fO9#&*Q`HKVA$lCNeT$XhJs>O8{NrPCT%$gd5~r5wC4-TAG?_
zmg*PO)`r_$*4Nhq@&pK<1dkp8w8||YtJL+?N73J3b9O&JFtS&%&j3xPYMSt5^A6xQ
zI^H+Lo^Q5)?>jX99rM3q1Fi|UQQ)<GNqqb##$h;+UHIAw&Iv~P_olFCws#a8E$(~c
z^(SL>|JADJg=<}(?kC5^>3D1u>%t%C6usjZ>rzP(_Ba%;cV4ff4g}<wp5wU+Q0AR=
zrThFk+>~|*hi+b0S{hC_T*OPy3w<v{Di`V%6GIPut_P{~75%R8m~NT?5i*d*=eLJs
zae;cJ1z;hv8#cM_j2HGwNPzS<(ARgpv0IjqCH1rEX?sBFQu)Wj<(Ggb)Bq4?Cl&(*
z`1z`-v(Yr;8gQ?jwVr@ba=ZDa^~r(cR3SI5Mo4c{{nAviK^Xw$>cWk^FP0^+85!A&
zd{J8?K}4*Nr#6>c{RT|D_x-lV>Q(w1T=$D+Kk7!Fs=FQi?HIBcxH{e~>k6fzX>mZp
z(TyBMGr;o^;({Q+2iyJc$T?Y4D;K7?T<D;(_JTSCb#U8hz3b5{>2{!&>*{654};q`
zUsc_K>DFYKL0Q8GFzG_hH>x5hZ8n#R53f#l4X?Mx@>NIlWYd4_EjEUW9+wrWDY~^T
z!LCb<uJM5_o|spP^YQAUsA!eoY@iA3l)jeBghur9>8x9&=uMUEP+DXpUlO;qKFE<?
zmFEY4e&S;M=}W;2@!a-r|6C2;<P#nVeQ}rgFrYXtV*Du7jKf=(`#F6*4lx>pLY(a#
zCINxO>&J{!)-nM>T$Y25CXW_cpmQ4o$yPO(c;q3}A`Emn<a`Ljw0v|P3#7E02d+-f
zieiwQS%0M~xuTLXVRL-p#69tSm+qaZG6sgYnMboPH%K_r&uO1{Ni>1SK1#2+=yftc
zz0lyyNAx=6xD~XT{(;EsA(KE{ve~9fTd<viLH`^gbkQ9HZ#L%~L@zH)y-d}bz1$uf
zr-QP6CO`dO=f%e(DA-^begI|-eSOiIi%E&G)#fJ~)FKUCot>O%YTxFw4Qi?8YP~(Y
z&S>6bfc^)RlLzA!e#gNISonK1ysq6KumL_CbAAoP@%_=%v1qe5^U{5v<DRanuW4y%
zp~>8ZNiZ=PZ4hkj07!bJJy1g<s!z8-e49(#_asl5Er~DtcY`Bz11c8Z3uwDkr=1k-
zvLP4e>DtA2H@a>CuXeM87CD`aV6SiY&oPumeCH7mj#rW+xtP+^hP8dDydR2L+o6>H
zBfSEi0>n0_0+0jBeKZB%E1U6xw?2P%tIh{gL>C&&aVAuXx0NWkKfG8!b+y`39$#$s
z#zG;x+ys;zs=QA3o&rI9Fjke1W{79j3^)tf+4)sj8Hh*LgdP%O*37F69<`j^lnTVn
zYabX8&&8wRjd5pCCg*ol149lgjbt4*O-&6_j2{mi%77jEpA%N*Br*VDU^=`EdSCOo
z9<&-Idf8S9{dn)BMYumvhceZMhC&tIviBj@)xq_I>`gn}T=4*?lG7@~-a_LhP<@_H
z860G{wk}k1+7(kJ&tQGh8;^xYt`u)stW#P724q8N&9|4EG>?B+rvWEN00Dt5G*rjf
zhf@i$3tl~~eGE@?-3D~}j?PdDRxddEBXzt)aqRNys$x9Qh~i_>!QGpw+yo%3^!25d
zXdPfFTh}>AZrdha;^Tw<yNZXy-_#7%(2UxS#>V{M%ZY6`*R*qAzmA>XgGn#XDS~YJ
zzpD;iNGNW``a|mN#+ZPo!6fX-{JwOA_rR7T$Ru6ZH>=4Ym7Io#hJ=LVF(Hq8$!Akj
zsbEbHBeU8*nQUz>T-=--PBtFxRa`K}G4G9oUVun>8?!J!Z)ay0Q#;5SvPclaY9h)-
zD>VbD#7A}JN%{w&4&+Q5ouNCllrO{li;F4z5#SfsyzwRN*xlu0Iv83>gAEZpE&-;L
zJO@vL(yY%l<Vsf;L$o$gRor$?o<E<_gHBN<lgkR@?fb)%bW_F<uhaMKTn31#H4>K|
zTmuDj<NE$Dxn@ZU!xz6vkN>+nl!v2rAD5P_YZTC7d?AYL`D|#o@a);&#Gbu<D!R#s
zSeu~i$0O&?QM>32ebj&giN)ds3<cUKK)>AV6)F=-UaDUmL>)$ciaFp2X7qdy&#?%e
zQ<)3<kV?n@_!o~Hm%oIDmS`9Af|_t-B#23XVMG4IhZnJcobe<M2B8X#p$ARb3ofo=
zqsBAWQqreRsc<4|AD~NyPdS|)89DOHyf}(p@%E?-=^9&5!SF%Z+1VL9Ll@^K;(jyo
zFQIXQD8$ECkBNDBFSLV(^6gm6Q_qdvQ|O=Q|I>?g>yJoFgPRgoRo~Oi`iyFYLQSrK
z_%gJp)SG(Y^l8|Wu5Y4ob)H;$=fZ;Du4OMpWOwttH^;nd=4$QVVnl@eox;I#+*0P?
z1lt0x-tc;7GSvsz8L>u=bo7NLQT2_Df&TtvQx5~58Fhm;w90nM9`qRvj<;wqK@$9z
z3tdRSiD~$ZvqUrKw$)@g1P3DWy2Uzd9ICg6D}FcEM11I;-d@0Sfaa^DUZb|#j}h7p
zrd{rE+AyGI46;t}uf2;4Fcv-2h8yaw&c@QC4i-QF+W?gk1>dc#c9!;LIFkFrZ*g+f
zk0?-&{5r8N!G0gTw+EIH*C~|TY5%<uYk^-3-+@)@mu}Kj-eL|bISFCec^@Ln!8I!I
z$(h+1&FK!0HW-ExaJCC1AZoTz!ziu5!GD~w9j$nPDdcsAkcfMIX>__0>ND?XZ_jQ%
z%$eBV(LpbryV+8FX=r3L1{B*GWqoeZGoZ;((^oF6*qLGj=M-dkiF;yvCrzG9E~~0*
znnsPk9wa61uIrhj5$-YXX6K5-rgR9)$x#*GqoXw~Fu@#Tna^9Bd0<#kBvF1UpsxIZ
z+K-<<XR4gCDcKe<ert8|Dd&;6*1rrUeou(ddm9Dl*X0j-dF$E3JX<X>l&v|fqr$iM
zzWF7)g45VZ)1V+f;<}XZoQ*G9ecwhc_V!*y%`@lYx6QWy>3mV4xO&sxTJerp(&~%k
zg98kG;n%Zwm`P%OMD-p=S+mLy?`2$!K0yRkkl@QlF(XA@M$3RT62=Gi=Z@<A9j3JU
zX$IoJVk1vJI`67qUcLHuApPE-a8Z(D6e@3s8i2D%G2}u}*GnL)Vrc73|8pbyA}~EY
zD<CK+;%%XE*JE>m{I+^=WQv<{kvZfKatEM1gVJ@)c|P=s_%Ax}$~0_1m<0l2uBBNd
z|3qnAz!e34#LUZoYY9G5U}6aO^!L9QWQU_ZKE03O@<jEy?MTv#NbsgvEmq<Mnr6Uv
z{M*(!87IjWRKt0B@PYU(8Akf(*x2#$v7yldC)d~r4fmJCA3M&tHxA&-|M>pHYvm2z
ztR~<~A5u~(@(T*)=FnL_eq#CZ3+6JJh`NjOuheZWT0R2l_<eyO<GB%LtS>)$xbYS8
z?(qIhf@gE8)IgL;>a`;N9qcJT(M8WpKNIqnd^%Zai4D5D%<mZFUtlO#WfhgI{Bl3P
z?B-@uY(@hw1ul%2-TkSez3Tx+qCHiA8iga7VPtY}W4X+V03E3_o8k9GN419GiB%!s
zr;K1H(IprlT=NS3WaAK~BoAHhHR-SWX67F}#xITRJxu@9r;UZ@6K;71$y6FV-?)$Q
z+}qjH7^slAyX)xd7m1H>Vcp~YqPA6-oR%gdhAYm`S&<+92`>YONW*G)_?ecZ)&029
zGr6VQgeTrWPvG~bG!eyNVF@HgLqR<*_S<!ahr<s^IN5}WOfc;3Jpvp=I-F8Y@V6pr
z+vVPWxkJFZ`uOu~gKIeWVaruGn`N+T^q)5GK5_AEi<&er!N5@a`frPz(|-(34ER6X
zk=D=;`e3e$@yzevKYStB*n&yvl6_+_fcvP$ez+>6)an339_-)k?Uja?kCooQ?d_ph
zxbCi6S}kUUqb<I^7VitmhF3CHKbe}Y2{m*oCruP-#{Uf2Y5f-THCE95p!0Q+YvL~=
z7EDgXa){%jLSmgtcOyniO9tUcVcKs+T5Kz8e=^?q8nfduKdj&YKMBnfz{tcP9mu+I
zNEnf=Y<Yh?B^DfyKJ7Y&oly$698Q@Ve(B40rvikIQ$vP?<p>)>M#NCZ03m}i6{k-O
znGQ?Da5?$DklRW?UkqEV&xD|*X=VLK+NC|d4?hk(G4aV%B1H%jc4P{vU%S9{g|*H-
z=gv|)Rg-K`mbeO{ExuB+A)J5nfY__MqHc+CwR>e?J_%RZq}?2H+S_CCTZhXA+cc4H
zjQ8wgh0BmPUXY_tGfTExdKsJjHk;*SY2~lHC!e<)|5I1W0dE@v<B@cLA`k2FQ1AM_
zKDW(6i7z58_1WLmmh?NE=$OiU)oR<3!^r_ThBsVvI&M1?$T7%^)%HeY$n6>oxtq4R
z?}P-AI}BUNExX^noU}|RTDIugr^g}q%GEYKKE6wd@QIr9{Gam>elZF@yW2G<)KPZe
zEM%`g#Qcw!Vk|q?^=>`QP{L&Hf^F&?Z#u6hdTy0L!#p7(X6R8iB>u86wLMSx<LSJy
zlc?=)SC2Vxhub7D!1$<xn1D*W?=jkRT9TZGOgBKFLloNJv+W?E{jFYR7*@78442xJ
zM%>k3|8}wu$fT8FyY?Q~NWB)j-D8E_VUSDJPaJFS))msHr0^mi<$Klzid>`a*3Z}d
zr#OAqw#0Pd3uL~ild{dL%WD_fd>HrcDc|Ci)g*~GK`L$`ab8NjR^h0YMPhtn-~458
z%grsLeVwyftn%DB(2R&LQ#(SiH3DQq0`+5un9i%=&s0K?>-BJiRSol)1#p)hyxnPp
z2CA0Mls6mu1@w+4)mrhuMvy{hRF?;V>9$jaUB}5Wx0UuT$?jA!C%9z1&aHoQ1t)X4
zosPMCJ8UN5ipleP)jAx!l?vMW57~}SAt#084Up`jb4wrLt5PTK;ar0uhmFB}mXXM;
zs4nFcN!slvW98YVKQDuCFD`4%=U=huS6^<&i&;gJaOkNw%dnZNf8??8y&L1GVlR@<
zW*D%NVDHzMOVny+Mh<0+`MEzIK+>rFI+Q7-DrvKfsd>DsQ>?PE6jz!Py;%mE1jJIw
z)xi?d_lai{H6nq&Mh#isWi7qt)~r_T+f7+`IRj-&<xVTdg$msFQ=i%L+21+rQqL*@
zc+9$1sDZ>4ilWMSAWsBK_4S3heEl)ei%0HR|C<FoM!K-LAA|>6eR0Q8E+VJYxOhJ|
zJspzz=BJ9VzQdh_lvvWKK&pC?o9#s24H5>=`pPDBK9<r@oRg;+e{g-ikG<5`2>jb@
zqU)X&9J?~bvQ3`)7+VQN#;|C^qtfEsH^#Ba<NDU~RVa7InpY=S<6SuhsU*A_O6Qtf
z4$G%v12?+-5zL!p0{Tam@9GsPc<mJezoez@t#e7*L5O_Y@W}-wFTYRxNc&Gq@*;9<
zmk+r!2aEVcKC7bd;E=AD4r{hMmk<=#{yzTRB628o(8zn|@_TMl|K-P(FB0ur@3O?6
zW=_}+rx#WyyAN0TsbJ0;uMcJ-suXq5ieSCY0;T(1g~sM&#W`*Jh%ROiU-%b<<cR+R
z)mOx;w}x$rmH2-f%-o#Z`l2^;bMr>Z<7){zn7kqTKCoU7FaEt#J`h+cHkJ@#*B%YU
z$#W2J3)c30j?e;+OX@|<fM3k+>h2WU{PW0OH5iZ@>awOk-kz|;=$PlqQ+5W6IEw>S
z!@K+3N<T*{Eq{*XtN2_jw>aN+g=d4FoSfT6vOPwh*M77~zH&+-hDm~eS>H<rhmLM~
zc6P+e?lWpO+MiFs6lzs-&o7Ye<|ck7z29msa}^@S9@69loll5-`gF<ycA8~Lppe2`
zC*ZQPhNa0c-{_qznf_ZrLO?(O!11@Ha~qvQjT+9^zVX`aYUrOJd!gR$7G^oB$-)PJ
z{VV6?6ex6WtM>wtE%?}Ysobac7aG-xLLu(zYfYfn(3X<4MnJ_jSp|J!%G3icUcZf;
zl+*+~xkZQxZ19+CUey8y-4ef8!*-B1L|nDEnba@;0y)H`#pDSEp;WTx#quqIrLTgw
z!Rla&FmOx23`Ja^vLTC<k@3m0>eefv8Y1t>hnVb$CY_YF|6CkxE?F}oF0YoU=6GS3
z`@;JEvtG;((7v}>{r&xS&^MldevMS|M2z*BzB71x>K6_-t{1i&tuu(^Yq>q>0@-O?
zM?$;ExY9lS_CDh7tS^0IAoEcau{t#lxGjuqR2+i-onh2q6xvU+<YVHIu33?09Mr;5
zx4>z3!L(kH#=kDTdkSGt$}75U@o3deAIPDLbjN|bj~z@EI9=ci8qHItzFV4|5G=|G
zVBoPG*;&4Y%HmTMXz;vuD~_dCBE6Pz))@WPp;%|%c<TA@vS_6WI&llJ+D>jRG3k=i
zkSMZ_R@5CoQh_=A&3Y&nLdui3^!sJewVEeqowo-QWP7W2QSbOVt3&Lr+gOx#++BBt
z@pCP8vue8VU{%KJ+hin6(DUzBLZp<h5o+vv&sd$3-kiMRS7f}4Z-)5gShyG(c()^)
z#iSU<97A>1TsAK%q`X8w7BXahoVc$Lm%{C<1pF6i`Y+6;ce5>F!mB5GG}Sg^a7(0b
zZ>p57UgZulJP#q;=zkk9yrdlp`}VrDu9=dy1Ei4c3R4V>7t$IR#^uZ91Xa&$rhow7
zF%gSO0&3CU1vtrR)JN`4-JUEp!1R2%`XjTKZf(xGR=go&QVP4bMu_!l;!+55-hJ1C
z&fM-Cxlp=PfKAWQe1+mzS&NBIHL5lCb1T*@gnwiG{;36LlW3%~)F3h$a!{t-cyQ@r
zxwR78M*>T`gRTTo33(NK%x0jNDl6116E%OO<q@jy#`H2Pc9hP7zdCeOCmnQajsoNG
zeFJ7kw0C`$`WiBrxa!8iws6#(T2_pl*BLcAK%s-a#0o|DY)j5K6Jg?0pAE#PA51s=
zJXYg_Kpu~SMPVTb%t52g>?-}yU3{<LK(0-8@kd6WuWt~)^~4fPqj%_eGjYtuCr)UP
z#_IYy&t~xq_yc4gikHgYN?SC#f6lE2qtkaXhK-PO`~j(-)Vb;NFB{$0ovq%7+KXJP
zjZYWag7pve(508VvGHPV@MfV`j3v=x;#ybzl7>=Z#1qx_;yb;g{qvyrhO07fQ~#w9
z+d08mF8nim*8sIa#kpVJo9+r+)=fKJfnlVvQBjh`*`*mb)()0pI|CK2hIP+WQiX4)
zel6+U%D-nWPzX1M!md_?s;dDCOZ~TUS89MY1?&=f*+zp<R8$<RAwm`6LVcdKK;nV>
zSY=z`cS7@2n`^@X*sjjl*)Q}kLX$+=$J*9*&S7{saV#H*`+lKb3~4%Anq06^q^B1N
z52+ip<FHFTpeim>p2HteS4YiY<E4wbeZxlq5eFO^as_E`)Q%<C7_D%Ot$Jqeztb?{
zp_(~z2qzcv9qr{wrWS3YX|bHz(Pm8(gLPJ=2c|Zjs!>ZMq0oAt+}-h6d(p^E!$vQ?
zt^<wFBQ*nJuhGhv-%Fpom-qbiT!tn*lyp4sI%4mvG`aa2uSBny7c$PBRs|9TW}w#Y
zR5syxQ+I!N3YUY#%HR`}=fN-*>6P$DJ>Qll$J=w)zaz{IT<Ga8uDnqiCURf^XizkC
zRn3uBeur*O@z!6c^R-*pNY%2uVv=+VZOgEW=VHPY3Rp+ni!%jvt{lO?-13Av>eDvG
z?N##qz>xCD9;V}rlusLhnz7N;^N21yHQxQTHJ=^x_TM2Wlp+bocP*S;tzeC1u<g*q
z*FZ>QKNRzom1nxi$<H7AY!k_(D+g%m`nAv_e@HK0pDym2g(h5apn^6Kgnp`tQe!_E
zZpMe6r{vsCjt97<>qBC`<^h^>Om?T9$NWhYi9i}6A)y<ut5d{02-(M)lrg&Duvo65
zw^tb5<+TRcb3AIRpPo(tBqO^8lu09g>QK6fvV=y*Zv{{`wS!w!_m$%5RA87#cDIe~
z%-VHKuv0sq!#k@ctPiUU15oIVh{<9|SQNiK!2_&7jh<fLAnRSN`&JX#GU*0dc=+2R
z`9LXx2vlC0S>J&VC{#x$uajk)KO0q2{%rk=>ms{Bz55V+KPJOze_-N)E{+i7EXJ92
z>qGPPA{OXNn0tEWWtcaGVP_$o#{6lb(6-#6wccDDy%|02q5wdXvziOKzv3+u>U)ix
zpg7;3k(XzWKiP3V9}G67@?5=&SfRCkQLgdCeBJf2(<*b;M1o=QXtSxdx`zV2x2Ja{
z+G0GW`>w|7-u|oVXH0y$zMa2O9{<Aj_;7#^zuhycnJN96?Zrwy|9o&h6(XA_Ps*2{
z3VUBYA8Yr!h6JYsigstJzBU&ADCC}Lbi}>!Gwc#fDjLpr6p6B_h;*7ebK@DqJEP;$
zo}yML<6lPu#)kFlv5ZZ8*)HEaG5%xp^YB;KO-=Kb90Zz%hM&n|*>hs^foR&}^+9dF
z;*qhyudxzvP`I~A{VU%wq=kImpv%PWA~t)F3yslfad}SEk8_UKJoOUwdfz6JZO@-y
zh0_R(=P!v9sFwW#y=;p|<X?o~=?;LB4~x6&#M!(w974$V$k*3%B(bv_{JQW}|4N>l
z4mu<4Z&Evxwuh_p4hsAN&2KICj&^uBxwy&<Te_7#7()4hjG*MJS*7)aka(f*S?NY|
zwKcoL%wk^-s!-t_c_oUsoKDe*&m<P_)SW%kddm%0H{M7a#>S*X{RzFaTt5afAfsPG
zOG9^FIqwgQSwL@<LA88_oTGBOVe$8(@kKF@sdSO$s`^iaP@D*M9F@*iU0WQWlOy>S
zsm}AR>NnR=1;1N+yT!iI*I@{5n%j3DQ*1gfC>N-w1{TF6M@v<1PY2aaPq&B&o$f7^
zfuc$#%r{sxlX<>KUwOsU&bD|9E-{Fjy`x+Z(kTRO$aDTtf{x+dNVi?SoP4{LXQ=$u
zccWV?e%Hl1uMHZ#){%WW8p^(U7uhu(6JZ$#k4e9~Zx8Mp#HdcwBiKjZx;R!3`v=F5
zGCn{_bkqz`Y_Hynb>>c~a*Z;xM9fCduvkX2_@xQ;AKsKi+L$|6rJRBHhaoKq-s202
zEtsE)#X_pj{MX@UOpq4$^<M{`_6tG%eFJ!f#9rHfJ>zI#ATk)#ZqURn*-F^k+arDN
zvm5ir$Hsad{}~x^2<-z>f=iW(%@N6wF^LCDjf$5y_6itWL62jZ<a5+Y^iJY(72-49
z)JcsBonr$+lhTBJwPq+s`8y{9rS1{>t4&B2rwclTP!N*qtahH-&L4)^B?pF68a1kj
za5$ucJEd$$5<W3m0jkIpA=ei^r$t0I<{*#Ff?AiCmv??~<DmL|LUFMzh#Aa}HU=XA
zySVaOPvMo0l~{Jj^52~Xhar`#Bh;~et+i!z-hj1%mgSEhb$MPwjl<<TKu<8{sS80d
zW+0QdQ3lIGgJ<?3i$WZG_UE?))lXYIxj31(>uX9gL@aDgK`rlV<=}JP-nQO%>v8)!
zlI$-C?x4PP+vQnnSO&`Xpnux_Q$Z_8JmS*jzBjtxv%2+`Hjt^y=WIO%bPdBU%B2tD
zXp~G^TqW4XrsTSQ<`f~nv;s(wHp8)&vr<3dm6`OE=ljD)qc1biC?^!H-~)Qa*gP?u
zs%)z!8yu6H{rMXIv~sr{p2Oo~(Q;T>n1GP`j@M~#ZqMq{U+RB-47?J`45d82qHtiY
z&9a$@XgeXjn*Zp9v|QM#+MM+QIzX7(c#|W2p$`gbPk2llO}O7~ka(?tPUOY>_b0$L
z{w1MzO|Qx6gC#Y+NZNPbo@D`Um8vI9#y{vQJ3BmkiF$K=AG+5qk@T*9t!GvCihxw|
z=NpkG*A*ZCpjajrmU#)TjxnunRJdp^Q=)SP@4n#PG$aQcb7}a^R-_d4nm`bC#%-?j
z{FfT;LNOA<en0O`gJ?==GB2+84PNiY9u=iN5dAN;Os6v7bBd;x7HM)neY_6`#4xAO
z-c!RV@Bx#=$ssCBPA<cyxD>Ac-p$)vnspE;AB9lfxDU*_F$<Jx30Uptr2<B+#U=DM
z?zQ&L>QKw)*`|)eNCyp#yov%K*BleGrXZnhH9fR+7y1@i9uH&XwvP$pQoz#pPHi}y
zkkJrrahh9Pw#n2w0YX|`&*+~KJ{zA@qzN1rkgsQ4ca3Qbg+X?}g^Qtg-5+WExSHom
zIS1JpEm9VG{0pZnX|Q?wE?GJjmr2iNHjpM=$Xig9U8hSY#QVHi8o_aXb_PJiIRq>q
zvem;Uw9h>wt#WO3%TjJfO46WLwVxLb`UJ#stgph_vSrl;1ZGfAAFY>r9ZZKAH8{+m
zO(Z3ojxF1-CS1vd1cZv?#2a0gBUW5s=$V0u&~4edpIRAh1T-ib;gGcPm~G9XMTcc@
zF_Nfy2xh9;;KJXk#F(9KZ3YQ$P8=jjo%WNGldrq^md=ij?B-fDV~bj)C)L~_PNx4#
zAg7z1wL+SMrCK3c#Py53bu;fP?#>~O-wO+Var=|md>yC;lP6_{4RTK}W6tknljT*X
zAq*-#(Z#UOd3P?d>5R{a3qVcs|2YCBx1AxWasr|qORG!Jp~=aE{_SWbgqTEI)HaX8
zGEY#}>&2h90~DZyA^KOsV9<6acyPR8(<>7&fx06PQt4qgjiyU08)em3AA0{x=d0Gs
zcZE?NqmDQJ16s|WgPcK8t-;HoeYzi?zKDQ8E{oi*!_%O!PR1qZ&84aGO?#1mua^4l
zPxLW%Y4_OJ?%I)QzZr-{mC)ThMBL5oOuS1QL3$Eu5rstDXy{2vesl%1N^`o>&4w@<
z5z41db|+y_aELA1v<xQF6@7OnEPsQ!6m$1tjrnRXB5v^3M&%-s3rzQB8ojX~1cHJw
z(Ornt<YYc~G+j{f2J}3(Gi%G`NBxq|+mEB;|At5xkaiI4XZmzfW_cAr<{5~wrio+M
z)Ul(BRsA?m0|p{Vu%rE^C753K=|EP)BEUHgpdDH8_5?is=9|P(iZ~zEnh+Q41)Ajh
z9zLb&g5>-BOP)Mu96opdkFB>3h_Y+Hg~vw)MKM8?8bu`qq@*N7N<g~Pplj$Z1wl#a
z?vj?y0TltIyF<FW2ZlKpKJR;e=bZ1Ge;jm1X7;`By|2C2y4G5Y2L+{kH`;F6ZdePD
zx@>0#Wo+pq7M6s))wQ!t&U=gdoBl?cm)`Wbw(oph$aKt6!S)qe4?KG=W~y3_*@K3r
z?WgV$2m4#;6S$q0c^&tTox#E|bOf`G+$t}D*i{ChCFQ)4tcb6;h3I#lJ{=D3MMWgj
zR7P;%>|&d3kueCo&7rSyP`K)R_39n|rR5F-OUCN|Ou@x#qaQ1359Sk9-Rz#?j!;L0
zw~Oq0u3%{2G?g*J3^cR1H2j`KuT+j2%Oy|U)J<h$WLjG+<HKJRP6;}<fC^sAXx_=H
z_feRD&8p0H|6RDrlkV$j9vWuXv5CA;P4AW)HxwO*&WKNE6u9nuCt7<;#)mr>E$Yww
zm9^9zKx#ph!{IsE`RQpAB(en|EJ=k$5g7{CyNByF>rjWw8g?c%=oR1*YRHb<N8h4z
zqHCCW=obmv?hv()z-svUErV<=>Y}Nssf&v%U2=rqbZi-QKjdd|^7Bh~MDMDpT%^g&
zZEdCEy*+8d*?k6_lI8e!w)Zn>eV02urWY2Xq7SFs49A@I91V`s@+s6=8I=fV)#&$(
z{FkQ4&B)SmcV^etp1oEp$T#Dd>jh8HasJv8<5HzBc>^sYN1!Rm-ZmYvUWjGZms^@&
zo+m+)WLg^RtqObr@b13PUS{`~ADUw17}N6skK|H>CwrcoB`ym-WT=X3Z__)hwqI?e
zV8E$oIH?Hs@d>ig28AukDAB*OGtyj9n8sAmxlj>{`rK!h$uBgxVdm%Te59+ZYti;Q
zoc42Rarr=I=(UHXV|}I01#)j2_tuA^dC%A+no=e}E;B1rVc$(NBP;okKy)(BI`bEe
zY4AS`=doy~=S}@DfvMqp`t*`}RnmOo-RF!4haFvSbvlr}hcuG;17A|~S!N1SG;Pn+
z<Kmi2`5$MK*XrDw&Gx*pIQ9?p5g^2U(CD)m4}bv>339Ek-(Xs|G>(af`upOfa)VA5
zixZaR?f!Y?B!`ie6zXffoPUdFJ+nce9gF#KSPba0&lRNO%EIdmv_w!U(kL#?EOkd9
zm0t03jq`j&*~|9!_CUw2ieI}+7YI4Zh6c1^LSXZE&0#U@XLF@4u1k<qYem+bNaZYy
z=4HAIe#;7t89B)r`_sOYNgw`g_qr*$tF$zQ&-0Nf(vdd`#-_5ERz*9KhhLSRX9tjD
z`(xZsl--V#j&#{dm{A$llH3>pdmDk*ghEJD!_h>ilZzltMZBuGcn{c;hCe3auNciW
z>-I)c5=8?kH8M;q4=M)Vid|(qwqz<k=c_={j!W2N#K<W+$ysVhNcc9|j9k9e8q4;2
ztK__2Bo7bIc%|#|nC06PO8!^h5;NK~YM_>$e2#yjag?o9DM%A5KBH^UqZSrvpcNox
z$tDQD`_lJPW)B{l?`PilFmZ)Flqk4#<vui>y`gKdhwezkt8=c^e_l22WxlpyCSQ2}
z+_dvNKElIhaD?{{H8eejPzCQ)BHm@2{@xji+mM6)AHm?CSSz|7%r`HqgZmBpr1CD3
zml3l5z`G$3C%?VWVb^;e`YbTHTkyeOC=2Q`8%$*fdXxrF2Al(K198f5cqA)gPRT}(
zsb?8`ryS10U*ZFv{C!;b2VUf1lT^-Y^4{|zd_;YR%~EQIx0exjDNac&M5|{|OWKrc
z*6g1@w-p}_Ha14tGlRw@M=6tuVGoK8q3jQRxmp9iht#;c|0SYYEku#QH>9QEEPFXy
zzON#cj=eCR@xSDhjqa<M|FBO|qB2OH?aD-tko2g>5)t&P%kxeCeW@xs^zYPI+_bL+
zzk=%-b@uN@*2TK@BWizn5vU#o-QSP$q=u|oRPwBqUr6tAn$E;x@h&HyLF&{2)A2jE
zd?+l?QzX=Gh3_fq`xN)~trY?R9>4|7U7*J0$2l>v#a$Qs*)kGK|J8b;i@6T_8b~7L
z{2|p$b64tr&iY(d$*^rM7J2agdG^b=<62AP4UcRHdkjcq@7oFD`;k46#)cb6XSl_D
zXfl>T5o_<Yk7N(qH2aa3)l8F>92c)O?z--o(Wd_RBI{%UTemI@bZ`+sZipY(ryG)_
zrjtHB{NyQ1yfmD;AFw>Yq{Y?rV0p}5v}M+c^uh&NZu2SUzbJ*FYY9cJe0odkiPIV&
z!sG%@QCs_X0Wqf)H0)ssTy|d35Vh6;C}k>Agb+D+G+BQHgbrp8xic0dP={^&3VH=r
zKPTtW>T;AQzax2@V*9ONE@zBl^({hBV&0C@2dXN98OsPp{hP@OBXdJ)YFDlV!i76t
zY2jv(p+xdrYyWwVk+D=ER=-=oU_s=il>3*Lxzg_%M9Pe${5jzIn7lvj=S1KI7ryEL
zwFJWw!|rM}vrx{teqn!O=Z$Ycp~}hea^=V#dCH41=Uv7c@k0V)qdD(@*nG|6#cHHm
z1`E{1>+T1e?izNe;ab$_PdcKZ&R;+qVAq_Hw2|3z#e0pb&U|R19K-RHzGIQP^+9{D
zTLoH~+LKBZmDRYi6%+wsrBA(B;EDC@aQviL)*H8zlMnOm?u|{U6Ql##FOMd0nj%-r
zS4IWwemo%E*uQ#UH~x>h1t386Vzp`&dhC5J%|~oc)<^5sH?r2<F%1GqX;wE>exrS)
znY0S4EPLie0#RMrZ8CMog-72u8zhw#3*`LBjMo1M&Y}j(3`W*Gk!_eCLqi|PbpFE%
z37udJTzlq7V^|^>bS6jE-G@tYw^ttym%{;_^lF5Bdb3h@Pj`D9&$Ifl`~)7$T$z1P
z*J;W#l*xtam-zh%iqo!hBuTGt-c&3!>M`gR=UGD@uiwlR%1h`A{3se<WfR%5eZuKV
zklwNL_&%TOtWJxa*@Sw*v-{?FW|{pHIh>sdao9flk$uXHF?sGU1e|Udv10GQ+q-jv
zn>e$vV&m1hJqq3&Q`9wL5#ISk+t_NG<*c{QU9iW7_S`%XQFRMJiS8PW+6j#8f|uOb
z?A?HhizrYR+wRQDc?41uZ|P(Xva+7+qpPHtuG|iv%VcT}q4<|6%P@6jM?vvgd;2j}
zyJYlD_G|r~du&SU^>CoU9{1S`EDhpzyi(?`*qa-U5N8{f*Rae{@Wd~q#q+uc`}olC
zr5!GklRaJ8rLqrhRPb|_S0TKTY#p1xtmDp^m_RyuEGqEnO9DF%AoDM8N_>t8$x}wP
z)m6kxzdmF*N#~J$xHx@tma3p`^OhMYABQ1c#$sGDLC>u&IR#~pD}=6F-zhpP1(>?g
z+)k8g>AAU57+IeLwb9Uc<!8=8fxKqS<w=djF?JW?eMTS0-`224%I;x=G%}qs7P(YE
z;JUL@1U}jDu*A#UeEeQ&6-awT=il||(`V_RGpw57YLNiyu;06Pa?tg>hdM~|h4j|m
z-r@htdnC$>l!};|t-82iMeBCkLncTVPY%ThZ1|71M!;6po!fb?X1&(9r*?X9(>H1h
zYV7#xy+2co-L(pl&~EfpQY!6dbV>wUrnK8*y&vf6^7-ShkH5-)Ha>*g|H~E2!ooUc
zZSku<=o8Tb{<Cm{n>CiaFgIVDXvJo2sH_;(6#KPQvSrpD%~?BfnQa~5`tvj14IOI9
zNI4t@98S1P-XYZcX?#gK;R)K!vr)$d)5VJl{MFKy%I-^6kUMiwF19*R9;*yg<jW=p
ziAerv>~8Ye$xxaaVmRzvz2u%g7}!|1IX4I=rj8SbMxP#PB?1B`lTqOaWXQ?E_BxRf
z`hU2g;l%9HqVn?0v5-ib#HS~DIJ7|J>(Gpnn*_*5eInBFTrpr6zPyd1$5Wna{Mpn%
zO+y^z6VimL#VyW!N_{JO<<PcEChW2m+HnT?og0|0Ik%&R)~lJym-0?FGj*1@sD{0~
zyyFGzy|a^fLIQt55uty$npzsKu076=^1tJ}@+-N6{{)OxBBz9AU#BaGC(z(*=5`n&
znZc?_MN@upcJ(DUqz(VG>cfG{PeTOq6L*%~vuW-!W#64ogcHf`d~@*!JW$|ddwV@G
z+8f@tt_6Z_!qYoYcJJ<SyVq|;^aKg>!BTOwB3D~IV~Vf*9OncjZoXRwur!CM!RyTr
zE8XH^(fw8!9RFCk0Zshm5ckmi3G(I1$>g^<YZ+QHvgkmqWZ$KUJh62^9%Z68%0LOI
zx1hKcb`jN;ANAOXR3w_mF1Sp=FQ@+VWa<K&C$jd4=K;ITRM>uH-yQ6O6p*uW{cLJ7
zXv9}|a#9{4uVTJ$wVX24pNlz4U0m-9OrMtnsbGZ&?Q{3NN0yl0PY{ha;LtuZGoxAM
zkeu2)k<K*cY=uO3o|)yJ>MrEQkPrRP)YJkEXoXU5zDAuk)?26T#9?AwYq)*MM1`r`
za4bTjOl~>@Y?%njIA*2ghTj<{UN+)YHFh`Z%NEY`_4GX3bHaY6Q&a*qV}TSxAU+9_
zK!X%QpC+s2p|1x@ShM=NCEu3lxt5Mzd3kwSjo;AK>~Io?j>mrCY+4(wP2YIGU6*LR
zx}-;XAx}G1G>->eT_z(bneG$TAbX?S@cUK#z4iFL$yV5G<YPn&C1DA>b(|z#<Q+hc
zw%zt7c0YMm4>6Xs8u>rK(6{z*OCev?8Q+JQA4ko|Vb(8(l%+8I4)j;T6Qj`&+XhBU
z|C`5RIv@WbCoF8|DeDvuVdpJNo%#Y<md{g}U<uaQ@!5@!c1lj;FZE+6p2b91aAI)2
zFRov_C0lt5Fgg~QgtVC^nc>Eu+Z^60`L;R4s|9q<1cW(VfZC+j;e?2}0OC>6@I7W_
zWsORy_U{Ig2skoF4EyAzV&s3Z0B@l~z?KwLbJcU;=pMt(au1q%LMhjVD&zMoCOy;3
zF6d3YZIV&1)CYgN{rdeCb+mB<9JmzclZ8<~llXUHy-^cYL)8=CVoHs5sw|k&)K#&f
z0r-1MLc7T?;IOOAm|JB<S9<?PNzM&&A%?yuO8Z&1Q2d*7@iDGO3Y=_hZUzJerTW+y
zMjU4t_K;ex8p8<JXAiiLW51Z}YX_xJw#RN02h=$o%7bPY|H>W9na(o-WI~P)SMyt2
z{eOKlDJkzWp8c0_E7>;`=tT`i-I&zkEgK#l-Xmj&yD$rGkt9cR(eVS+^4brL66dC}
zOY`mWu7(baNWaC=FPiD}6j*4=DbOiinh1A?<fuqyE2P}QAkMhK81@$`s(iDdiUd66
z<4WE3n)Apq)aJ1om6?7)Ep~CV+WIJ>Oe<}*cj~y@oI@osBwfOOX^YB_6Z1m&YEO4h
z?eWT65nY!_^7IX&&7QT{2+aKY?C4{@pnkLQ7rcqtO{;~8^X?sO&tp?J<Aw@tZ@PL-
z&#g%#3l*<q%d>nfYOIs{z$w;oKc~5&q15as&~~X`r*_BQ++T`1bu@1I<oylD0FI}Y
z#|y0;wP{sd?=q~dcC+i2I1GgoCps@KE~rlR{+`ax>9qS=k=0yR!ei(X^YzUo*OzdU
zL{Z?*lxz{E>lx*Ei)Vv~kUCh~ndH9lBL*ukk^k^7TMawCzu!W7`n#N14GF8F;kZ)^
zr$WdC$;pW=vc{A60P$Rsk#t9YPSDsRyYl7E=zk0ebR@zocq-hP+pfto+H8B<Hd`4I
z^C>#LJuq$$0vYS#U<Tboy+=671!?Ja00@o7_8K_X=&BfHvhp(!RgVcA4P02O0kxMV
z=LPmr1?0(e>;<Ic-KjElR<rcIxmrH-FTyiTrSn3-F>o5MBmgy<R#{L`H{W8;LhCS9
zMRtk=kxaBRXqBx5d*a)zjy9HF$&m65+1FzjSQ{#he?y(WnL+A%A@&Ih0u&{PQ_*6)
zp~N4$`>tlbq*tl^VZu0Kvpy7iW20P*&^1nnFdcF%*U%XGUBf1CrGoDb*5CVtkfYTt
zAIcsqO`gTbF{RiE+c-o-{VEmc6NeeTzsG3qGDFxPc43@ZVStypspnZT;m+P>@?`eC
zWFQ&hSk3S_v!v0OGY=(+EANr=Rk-U^Y5|#MVgJwNTq5BYRIXOv0y4?#EUZq|BNXK1
zwC4G@RkI}eu8~CtRL54QIDPL6d-gQmiiA1ts_UHvlTn;;$tr=8j5cNeOxnCJDZk`Q
zfA}?Ihizht83{{#X8#y(fij=&fw=kL0?qXn++)!pnN8Th#R4gFjwOCJM2;lH#0VjC
zI;E$nRQfQ6yat9t|C<a%Vm~C`C*B4N#~PYTW`PM}5!QbehQK;GCedyk$_#${IU-Je
zj9i#iYDwScTa|XRH`14Ep5WmrC!CD`1W8VJvQg*PO<4aHQqT7hLmebF%ba(GG?BVr
z@OhZ2aMhzyLDDlkfGk`~JYyp(YY|TW9gr4qHvpseso~y(!$VFpO!oAT92MrVDq^(^
zsY=W)Sr(J?Y%@4Mlm<c{C7;s{pWE>-Xkszc-JZ)E9Ua|Y8~d(x)n*w24L=mi$uZ|6
z|2gYPuaXaWVId(QR*N^#M=s4EZ?Vf#DM*ft<kY%6T5Uf+T-ws_v=66$+6dkAC)fRp
zLwiz>m8;^Q{nRO%=@h|1VEU*I->FzN`;Ai?z8VT?&{UY97%6i(!pgwGhv<gfZEO*H
zrvE=V;wr0_QT^dzJ1#pK({t`PGq*`!R1?iZn%TKpahER}N5gFQIqH}&i@zq%jydg6
z^1klYSeJ@>;#k8PI@O9fjum|wBR58suY<NYS@A)-Hg9QgWh;fGzI}?7e(^$n&C6Yx
z30%$Y5t8${SjZ-tyJ84ehEoSLrm5Yw8#1BDOWK@ntdS0O%6YO{8_kQ;p9!#ULT3$I
zLkqxifuzdt;Be<uQxL_cPmU=oidEvUTkDj*85-_maMvj-vafsR2RmJy@Zrjj21z=9
zUiZCLK-%flrW+N0%7{JFcxNmoj6dw7l;iy+;Bxj2siS#)U9U9-$vcx-Xm<rORd{PA
zdHmI8wClnv2W@lhV6v28&HQ8+4Gj?_vsL&t@#*U31oY9%_>-=8*dwa@`4kr>j%LfZ
zRZo5k613v1zz|<0)lB8K@CZ}4tMPA+yx|I(>teglFOim&7AxU(W`|l86<3Z+_Ld7B
zaTl8$^@C<~7QZt-;-oOjNZ!GE=V?*gCMqBe!E@+%V<59ql*ia%<=5-xeY(6_*iAG|
zSMq+5?L513zO6Z<t$?7*>g!JCrV*7s{dI<JWmq0fzG)y{M!LU#&Cw1{8Av3E>&L!+
zjcE#`keBAOc!ko|W>TnGmS?y7_{ou+veqyE37rIF#t2(&S&vO$vbL~Dx)hc3q1JqE
zU8hJiK>hl4mBm%7aQb`D_5iKGy!$5{TwIFO#Y5HhG<uyx)&h<<v?@w3fL5B){gA$j
zkX=IfCr6(kJ$o(>Iziqk<!vx*-w$bM7_qA)Oy>&I{hJ!Soo)Hu_iU`><x{C&#)AHF
zyFTlY0C_SZU)^w5fhG{GDMCp9Ol^2(6Qz_dZ+p^Fr&VQPj;rM>Hy4#>FLqyN(#yO_
zv_=GQkEN}3>W+^a?VkEq2cw{IS0x2Sf@#`2nU4;-8@6{oSO1RElxq?S&(-#PuQhzj
zY&xsV=ZY7@2%4VZ1<Dy%8Q@0mWBp^f^bUS?X(CqtFUpT*^`5$>TH&zm@)7<yo8?Yc
zHib=TI$VUFh%P&bjhPfOR%8TRn)uSVV#goRtvmi&9L!n<38CRt>#O*L6yG0Og5D;O
z92-&8zP3gQJulU6s{}nZ!Zy8=KProh`Efj4X~O}>fwC9UeXZS8E1ddthy=+jjg6ku
zNSRBwBmLZ!^FNHpRdEWt1B~7J`*)T`!My=FPahux&^FKnQpm;TsZ5-abUV^J?4D3P
z(a_8Gj^nMrpFfZ@u`zhPK|{~?zDa+6Jx5eu8SX=p8Oa?><2(BgrZSYXNOR*txAwt(
zCQN2L`};kaw?r>x7MMk4`(Eh{kZ0S(vGJCfWf&-|^6b{sxYA+`FkRcftQI7M^PXFK
z8jI6>`}4X$pvHY24k0_A-3GE$67^5kayt45y6nCRIvx1;TyF!xeAtHFO(8JO!eDod
zq>PQ5E3GrlM=LUT!kKtOxAhDd#?!mVcuD7~gry`U8LeDi6Di^2Da%zGQxP-Zfk(ZF
zsOVF059{6lv0?bOEMaI!f?Oe(Vm-B*5i~ZY2OT7W?`eg5&_784xDiEsSRWF(ela~d
zY)Vdu{bVd_<O!-1eGtwNNoy6oH!0P81V%7TGBKF>X4_HMf9U*2DqUM*Q9&KzGIbk8
zJ^ufahyieJALivMF&!(@=-}rqGnbDLwcLj7#!csV8^?cG17dSEwP@JA6HmG_Puc0E
zQlo*_O||#aCBplaqs3sMG*I~R@^!RN=0JoNzSGW<WH_B#w#{$(blOYG@!XJG`0!z+
zyeu*4-uAxx+g9F{*|F%b@HD;UUXzWU6anMe31;c#gElfC{;Ty@tJrJhXOmzfDqA0n
zZp0Po9`-IGyK2*$6>}A%a|DYA)XhiBB0(j?{op}wq4330-v<7G<ZIccm0RrO%BlJT
zYv{1VFJCBg{~<fsc!v944*;34<-G=DEZ!BP(X^r9<FJ>X#(y0ip6`5}65j(ytk1^D
zqmA-qx1sZ<caaTUgI<g$Ryx4mL7MPVv1b5NNyM&T{-tai$|*^oqY=kTUo3dEp*A`^
z$!s8+H0uzk6^&CL_F5kk@$m?JG<#I?cAio7_&bij3w^I-BKw0<=C(rO)*|EbaG$U9
z_uZAAI=y8(o%X|fd9M;Lk`E^m>2$j#*#@}p^O2EhtbNXf<HM>uPkao!vsq(PV)!F9
zb?&-GEb}?DYVoG5^k6y}svD}@h6^9%Y<@n^{(wH*tKj1;XCNVGvwH(z8(m$7mVt?h
z{oKwALXBi>oFmch2J90G<B66QxLTW+Vq*9Cf^tu6dO!2q{Qf1r-kW~(d)l`nN18&Q
zA8nw6QT<}!Y;1;q3Few0y@Sb_m&iGqhkU5MY>I~Joz(scu1C4l0}G4o@v)1G1+|A?
zRvBJ>XvztAAwOE8b&FJex;6S{b|Mzs#l~u~3=tyh3XqzUuTz(Mj2Q<zdkCx$CqV=u
z1$=#-WOX?|z;F3Bv@<abid6J^XV!qvPPOfJBb?`Jd1pO;D`fU$R>I6XT8%tkMUrXZ
zxRhoO@Izll{AAgaClF9`V6`VTtMbF%bmSN~d~D^6%B%@rLok1BZK5l8Q%_Im)DIvg
zw|;J>8tdgBYzM`ZF1sAA)_}~w<!CmOjXwbmO$ibPz_HXGVXRBt0+jgvhrWY*z@SFJ
zXl)=-CWZ%#zRI6cvL|?;-JGCkkRj2Io$~{YEDuQ3o#wx873jV0GqDQb3=g-lx9@0f
zR>vH@S@YW-ZbXd~1q*cy>2!%Y_S6$DtN5%djgGDyp=#rH4>_xU1i{WeUg5S{9F6S$
zH7#~k;T5(iF$W?zXqj->$PW-Vq?o5V6Yvofme@)w#=I$`*3hx)G9RUa<jq%fB+0G^
z@HHl)A4fllpyO|G-`bro?v1hQmY};aRyKdP!NLG!gpS9w<%M_d+_5>Al|WXuR$5w&
zcH7+&LrQg73cr6Y6w7WhxiS?J7nb&fY_+4j3C-&;D9)o>VpL*Xd$4ogybRFiJ5I(%
z)<^wqK>~3+ueaETRkJs;ZZ<_6SBdX?A6L$B@-#p94qED7<8W0j1X{G?#!cuqp${GE
zEKI7Y*mzpUh*<;)?6C6z(QIBz<cTOMyiy^q3=@h&Poz5+fLM#)>ELesWkOPp*TegD
z*Gg8YC^92Ncf45PXjX<A5>D*#rx2iHW3yh*r`WL<to)Nr+!ArT%RF1QL*jWQR6W0~
z%eB1|UuCDO_kCpE$!=Ola9`pYDJ8Gf7qcVj(e1E=>7B5l^hNzo!&h#>obyoJ7|Ir+
z4h?74DKs70;^(go4j#BqMHG;PJwA?QcMPC1TFVX*%}7TZI)UAD%G;)VpDP~(TI!g6
z<tH~4t@hVkrQ^7MjIn1pZY#4de)n{S=5nZO?}ocWzH|Q71?l)It!ldu)Jl2kj1L}!
z&AM~1?X8OElY?uTMEHA&h(|BOleY+0&t3Dqh(y*MIJ~XhxODeXv@VZ7ZKrM!PQ4|p
zPKy5B9j%Z4cY4N(q?+!d*)Mp7{TB-Way9FpaLn7ytxwZptlE_o6%Y|fi<FPU91pR1
zny+g7`2A@r&EV4~r}p*K#WmyM!NEb<Eiw|a9GR<`P_45I>~q+WZtQN$NJ(|>nK{MW
zOVZ66%w%aM^UK=0N*f(@P3OSV%xoHajHQ!MU}zp0p#iMn=th+BL$s@l5qj8;bye!B
z470?=OQ@pZ@A4w}Owh}C9NnKPs5d<Li+#=&BB1xKTp^{&Dl9E+YisLcIo-k~B#Igx
z{kcj@Kwp%Ss#$R+w~Vl>aH4l`XsFA4eo4mQ*KhzYtvVJpR`+2(jqM&c_lvwM*=X8R
zU=GaR0HbK+>n((R-I8RHtCXE}?Zr+5=R}Y5(WzeCw(I<Rt09okpSHsk+J-_N0FMmx
zvHGbCB+mPvi1pvC>6INhG<|vN_;^0{t&YKYr^rsn8_m0<O1+Pq+`I3q#E*RG@R=d?
z_Gk23zxst>#b$A5{T&(a8N|l~AW;)t1$%fGK_Ad9^Xk=XXD6v9q76+RC*bZKY44Q{
zW=#`N9ddDnEo;SWA0M(YGouKSP~-j;w#%YTfn#AR*K2D}UcBg_&91eY1!E5iTH4Gz
zr?G$wVvJF2RCim%Wje$;|Mcj1uJsG9v%g8?@3YqL(~P<`Qx(%Ew>7;WHk@Isp*-Rc
z5Z-&cQ10Q|gs1w$de<1)7R2TJo?7q}8I^w2#2;H^YjN+$FuM^nlv5_dTVnPxVUZ2+
zT1}_eqox7@g_Pk+4H=w=hXPHIQC#sxbf<e~ClvN=u$V0@i0v+MnvT@=#1-%>Nca68
z<GlGI%`9~BQ8$gNeoX=!2C3$`A^#jJfIh89t`U#_V`y(5<g`ngz-9S>j_!ATJsVr`
zw>I~!^|9OwNf3d^UPj4!MQ_w>#4e3oi+k?7=aKF5lO)NQgM-1XSq7M!52$M$M%2+x
zFPn4eT<yT^Mx^r?4D1jH|KeBUaTh}~8C7c_l4cWReCvT^H+MJQCA63iRq(^4mEp%V
z!tA79`u^k4x;$scO4|iMV<Ra=>!M;KgSlC?45d^$vC~@~!9K<45%>ubxF)fU0kI(M
z%1BSws<05XHHNEE`3|Djtz6j|7AFWxhHWB{24cdRd1}RhRx9ARBN;|}orp*?Rdh8h
zjELZ8xDE=ELN()g2zhLm5@KV)9&H!myH81W;G>~-6NovXWRnmTZTx|p@4m_~?iO`a
z+PG=+lI5$6ivGO}a<$V}c7DXwazh4|wbdhV(>LS0It;gg12>QFKdYVi>>r6R9?Fc@
zT?I`Nb>N!<HGA#@e-a_xIak5?`gA^o$HL|ieo4sfZi5W;{4+{k1ia$E4+_)MiS?g{
z2jXuR-+zC)`~UNkhxYL?mW<t4KEsqdx|xyXEW>$NQdsN5A1MtFbOinTKYJ+sN6Ttq
zZJ)^N-Ua-f`$1PG?xfrn_*98-ruvua2g}`1O+K!F8O3h<YeVkT`xhR$q<=YG+8@;l
z{NVYzIJ#C^%g1A9KJs+#_w<mCYtz3k`;V_K!dI62OEc`f@*$x{QEt%cfR)jgQiyG8
zXt4eN(suIOxANwgF|O;$p&%kMA1!g5+yb3?HMCcC>otRm@9E<!(_d~o=>jPGp)pZ$
z-kgt|f@1Ntvhv(?Q<w3!)c?zT92xe{j~)!$E<t1CDDW<U?#{g@uGMwXM+z3=9DV0U
zO4hk7n~x^k4vltFPa~~QAN>u1cYgKv_X89%KAwPg+vDTx+?>9FK_*DT5pb*A%+)~C
z)9^YUSFfXSlTF}2GWgYe_tRUk-nm1|wQ?dEng>67HkRC#PvHsBYC1YP){6#?S2@=E
z3gD79IrDY=z|H63Ly<~F&~TsZZ>~Vchdqc+|MUBmo4z838yY@z8~AP)6%|2?JbVP`
zYv^ivpslSP_AE0a1IFX=E%Z)-&JpwMuU+Wu>dBvubG)RC#m<AsUuph@q-5UziQQ!i
zU!;K!^4#23sF7nia~0aloadj+T7cpY{|aTTS&MgQQ_z10SrpIa`y`lb{rMxPrme0{
z+HG)6fJYKSoIzO)PF%&2XAmAn3qea=_4opbyLB=GCl(7Ea?<VX*$M`(5I8x3U06q6
z14>D!<>ZfOvo5Pd3N&1?-%{nM7=~g)y~J1}+vd)H2U~pN@0X<`<-F&Fx0w9Xi`8(A
z9RBfnWmRRH#@7mCi;q^VV4DtVqj(7}bWBrUsg_TB&qOR2bbFZKwC)_Sdy6(l#|e*D
zXfu{nS+#dAag1ua(LyaIpg@Cu{%)6K!VR_l=iA?Fi}<#*KrCpD<yY`+LZs0#F!;5<
zw$Z$Tc;yu~qpPA)ZiI9rS4^jG_zCiMsd)bFrEp12`wnu<N1p%t=)-<D6?c22%BcS9
zz{D4gIxy^g8Sg~sroJPVH*8y(zM!yLQ&S^jAicl48T)kix%tfJ*Z0NzN$dafA?O$S
z@Yx^QhfS~`ey8}~2M()Uw~to`1~!4;0rf*H(Pa~Qb5~c1$9NLCZ6QZRKf7I!dutR`
zdtfn_d6Pz_rM+GIaG>bx6348RbZ8lBY-W1-2t<6NV`Gb}Kf5PLklZ$cwnI=kAaUzh
z&`E0o3Na9v2ZfoXh0TG<(E5Mw=`@*)4k?&c70Y+ULE9DY>G}N4n>WGMn1h3crY2TI
zVesNEiN<B!Y-Xn80riYyJ^72R3qrb5m0!+0{AKgB+ax$8l3q4T;1+WtSZYiYWAE*5
zUv(he_TumE;exdLmx90L3uWH2*BWg6tw&@w*?T?_ygvN&1Wws+^uKqw*K+UKHf{-g
zb9t6;a;8!{)i*{YNJLRTjI2sA`9?2n;y=A^*bui6ZowKq)15_+5VX`ottY8mG6ZY8
zw2r&BHdlDLxj}XF_!jn_D>+uY>2et9a@4yJlMH;}j(-QdUw9(++NsLuKabnO1&HAS
z$$A2;I=m6lGQI8>anMW+PooGEQBOChVFIQJ7cg;=AA|cd;6pKS%Q!VA;f@jbVJ-!Q
zf2y6hdwt<OEC&z7ok-F|dsVe(07&wfYN_D8w)OR+$YdM5MEtWhW75mX5!&AJ*BqoD
zd2RXDW;o#gMi{2U_`kY-!2;IgR_Q@RjASC6lk#QG+=xBeCyewFFcYrNSW$<H>eCrm
z-I-E?w;(QtNYbW7PH%%o$mrSw4?Cu1vAS?Iwt<bIO8-PueJ8#geqRP@b6;OyN5?w&
z3tqf<v6UU9>$^*R)|QssmQ!BP+6!lWLqYS#fv<o5ywcDZF&XH5OpXu~BFc;GdJo?;
z>2^pC_Vmc;^hdx$d9U*OWQ@T4RZWJ8YLQ<*YnwN{_kPLMx*UQT7&u~`Iv=}KyluJy
z$%WBUPiz)C!HZZ}L_|+tzdu*4_?agjnD78>`ue@4z5P`}!t|fqbabC6pO}vhLi#ue
zm{i$Vs7vW>Sqq&~MtIIm!-#MQ-`a{%rKs%3Pw@~2KMSv))`(Tj{-9;+`>S%f)^`N@
z_&E*#eD{9Ntglew{Ulc`@Y}a<wXR3<s^nmYi$tzZPxoXi<$xtEgl9eA<BPx3&Nk5=
z&&#Y?A$avFIT!evYyzxI{XqS`($VI0lO_TUPEygrwX#<ch=^CZN&Y$FAPT3wsr_SP
z3Fw)-^6zcFe}CAbS+N2aG4t64!k>wOw1YF1q-?_AQJKK!T;_(w0FUQ%@N^>SnI~=3
zocc8|2^q*z$OP*xqIG!19vFGB7lA>mD`sb?#?gAL$`<?`Z<COegAs_AmsgqD$P>d(
z5B&x3NZg)lbI0xufNdnFaj#)liU@2TWo2bx6Pcx6Y7AO{<mW!d{kbo4GQPwxnDu15
zgiDa7mjgO;@TOAAQI>lLCc*-?ON!tj{r>%Xx1-f^pn{!tm%1dz#>R|>ATevA!qU@t
zu-YD_Zn5#_dpT-CyV}mI+<eSXt3-~y8!|?V7Qtjr?)=(l<@0x3<>_b;+W-CyNwt(p
z1;U?hKztaWSQi-bo97wYo#8g|51RXJI0e)B+kr%Euo~PEQJ#d;;Z*i+MDrt$!<>KF
zHf^qKQDBnKI32uksh5p;iJR+yZSl;RGej*`(T`~O`A_B(-REGtOLpE{dGT!ZyC?qQ
zz1f=C=J3=rzV=#LT42Zbf=#E&<`cmr)hl05nK-UzXBDX#g`O1y84b$J(d6g&&4EUg
z1Vv!9Cz1T*VO?|g0w-rI8qLR-R#kYMkQK{r^v1wIY{(D{w87;D##fAP8$19E`xH4*
zsP(9*sFq0Po>s6pIkjaX<eHt9$S{n(VcZ-ER!gL}Zi)I?JnXql<kE9HTVQsWC{ls7
z-S^?}9?UcLjwXaJ&8T5R%%8uyw>#P{c^AiTpGAn{;~0}FYZKyIFmkmkJ$D~$cCSWx
zl2p9dc?^qyZ*qLg0e$s!Cw_W)*j{6!F=1{jhY48M?oYVmfLfK4J!&LF$&$C0Do_)h
zLxL;nEdCHUz0G4>!CBjIw1VZ~kAVUm6-M6>L*Jl|IPPNmb!{hy^>H+qd9(3B;;#+N
zv(d-lFLsklJ0H)shdlzjs5z@zu*B<Jhtp3E6O8H*0WrPl;MaHZD5nE3Su!81lG~u5
zplI9bSxuLWl&_H<+WGnECJYVo&Yj=BcbM$whWV|}un#|jtNicdW87UWi?7Gp38fqs
z(#}LChBz|t$o6H8kLQpM|E&ub8R(?cooLFrxjA`ba#GUlxJkJ0MiG(oRTUKr3(G?j
z6N$6s{&SS_OYt!=%{xh&m%s-lt){}LCxa+Hl3vNT(ZcLY>ExVTe%K9b^9L%gv(JV%
zZtcT1Mb(!`%+|c4c8BM_CmzC2-p1=)`(yZ6zQmQob?|2r^5m>xzB6Hd_54B4^;$w5
z-8O9whNgJ=5)Ng%p3S>UNeO!L8yN6TWFl1t6Rp%RZfZ#R<R9<vS1z@`;%fqkSNQ&Z
zDB0E+dH(dJK9L<wP1`c?NdkLM%w)X}0J=PmTe@IxWWy|3+Sbyf-JeLNRx$JDiv=dv
z6d!vRc^0u5%vLG&%|Tges9?d$@b4OTUfAyZgZ!lns$|@*u_n0xVgXaOr_VZE1$iTP
zt(m6D?3Wta@Sxu694Z!l2zSry%L_($F#-Dhb-D!B&xM4VArFFFAyt%+zz+6py8M8E
z0Ht{0dT{$=VJc4-j-9oqZ{yq9-BsEnj890AuEQQ{D~^neXlUFkH5sV2oNff?T38Xk
z+5Su>>x+254#rGYSHbkREkO6%ZIM>+?vgiI$&C>^OT;XHEG&^kAFG(FIh{m1$#V^c
zR(#5>GR(yFl@RxF@RT#5&1qW|9juj;nsZ7;xxbQh=GqT8OLT@)Rr~Jjl)&6<HUMWe
zXRw2B3PLLU)Px0x*M1Gyzn~0luyqAv>$X_VI!Fnc?FEnMu`)9<HVJ)w>bw-#ML>H8
zwKzmnLvV7~=g*(R!$m?tVgZisSFZFci%UolH1vRl+rR6iTwqX8P)AEkj(j>nn;;1B
z!V2M{+AZ}OP1L$7T2<Sv0vSok=k)Wg`@A7}5LmQ4`1s!ytbtr$=>82Um^y5e+#b??
zz5%df*Np^_@S&a#T6|o-JX|if(6YuwRA=<WEMC||IC?z>9MsE9)nJi?c_DYr1y)U1
zW3Aibj0S=903W)rX9~tO?l?Ds;OIiTmBHY!FvTqShwkn;Xq<wT-)fqUcf7*#?Ys-D
z<WKEZR67#*I3fgz!5Xk*u<$L!CKy$KY1-&PZ*T8S8fjS@>B-#=0bFieBCGju734u&
zx&7FKQhujKujN*sv<R%i1otGM!gx$}t{uL|t(1Wes63<R3-&+X?@9@1PLPH%N3QpT
z;87lDE-Z8FzR}4ixiYJ${|Kzl%sBCSSzfrq(hSHFSli;``+T}dqg`R~8b+@94u}pa
z%wue=?d?IU!|*iIjK8__5;L?ri&JzJ3j+BI<LVpN*3`tzKYp-%Q_zCdNH^j<#$&Fo
znRS*qRDzb>uyd+N#nYSd%WAN;9}zn2%~nW53r!&MH+;~vw@?ZOQXV;-B(;~Q{ws)o
z@Hrxf>6JrBn>7i!i`e3MC+bjf=^!Ssfk~?$AAj~4wAzzaqgf`i&gC0sMA??vT{gn4
z8JQirf4;pV(uLY2s%RRPJK5W=+jB2r8oo$;0lrL)o0W&`(%n%KU?n7os(2Xk?_#!b
zd65m_(R<;BAVb#9ukVT|AzCY5yA?y&V}X7IH2{3Q{sNtXJhC@HROb_o8GI}S>+{t!
z2!g)V(Ize>)73vDhRdx82P;laGk4{c^~L@CnFlP%A6c~7YY!o@Sg?@B6wyX7?j=iq
zS{1-Le_FJ@i~FsY68P*;(&&7L^QAn*MK%P{?4^Ou7wzG95EBdA{(_kVC@!U_L_24F
z--k>){>$#3^M5;rUVu*%)GDN49fb(-WTxC|$*oq%pT3SjFe^LsieWAbrCR&9vr`ji
z*dW@rv%j-Dkbyk>nbY}BHJQY8fj|QocBpX7bt=5~tR6KWyu=Jh<58#Q0zn#d)t`@J
zZuH;}2?gqHd@WJf)kSQ1?MqzotW&mEC;Vye9eLutOXh>GaN(+!1(dosYu$cX{7yS-
zM<~d`(U?Vb_Azs92TzTc(L0Lz4ZPb3!R#G^B$&^uE9dI8?s+6FkY}((pYaI4RzK^*
zz3kD#i0G6w!56@Lr5(Y)>^suJGJXT<=^Z$(85kJwa&bLI&=r@Kro(#>HB<v!hEmtP
z8QYs&FIXO4M8upM=3zr@vo5POb@*l6OaDcvC0IX23Ysef5fZ*IL_`pcCtqh5Cw2WO
zWWahB!4@(t^p_bS*eHWR^h!mMkcW+)z9KR;^?rQ)X=Q&vZ7^rj?$rVkHw4F=gJsyi
zl`&rTKDAd?Ru<8?9GoE^G(hvjklJRRAde5^#8`Cxbp}g%)O%{thKPdGZ44as<?vSL
z=0sW8tELf~(<uft&>oZfh{yR3LiM3S!DYt<JTQtv2%e?n^=Panf@{iJZ#4rqJXER@
zJLKf#3!G=Kv0!Q*@bbnU{qZ`Z`mi$Yx2_cZ!jDh$&09JtazuTPRg?(w#2y^M=J!cD
zK=nW^BD@~aDw97z`(2qK1QE4vEY2_xao-ys@tNL}j8!2bG9={3>F*49ZE5kn^7_NG
z9v3*S=mpdhofXK}L)jXzc^BHx6~@!t@lZ@Uoo0yZf->+S@80DOZOIi-6>+$H7xdrx
zyUTqt;va(`JF>l9f9{5AR)`ce$g`dlUkN=bet{kQWa4|fYTqQ+1#yHyX)PAVGn!oc
zVQQ)>bVE}5tz6*}TTP#5d_^;pTFc2~Z~^}Iw(h_>+cmo7pp@B<BWDnT;-`R5Qk24{
zpqJtyU6=4ZZiD;HQn|p1VSjGrX?a&;zrWVIpRqEIj*V`3|KSqF3I$IIswo!{$={)q
zX?P@cW=EiS(DU}*$Sp0ua}LEyi8W5QLw`x@80eg|CH!Qdtg8NMbatq2vinjJ9jAc3
zXME*%FSZH_XB6TRX{*)tZA0D36HY0e+nY=<mrU^fc8d!73){XlP}Q5^p*-V}4Et!g
zbH_Lo%|UK&6$6%D=c$)fSWNz?GwFX~G#vIWSz1%+PHiKedxqhemoIFBPsZDZrS$o5
zO>V07LJUPXeuHochDMt7A`GffCX)4cG)ov-IrJTo+DjangAWY-4TC@gX3Ty9l4uae
zH#^Qpi<rD$miKVEFBU+r1kPk@V^5CvC%}!nBY}Gx^KlaD!u6g^=9f@^O*aM!xKF+@
zb@>6t%1(Pr4U8OaKfErHF!$wY*e~y`?juF9mB-9*hv`KtWTM><77A%tWQ>fVMy?1}
z>^(wC2{;`KEACA9ne;1PzO38tBQ$@w4D<@kzWb(Z7m1i^*QIgS+=EJ+*t{zSo(62r
zyie8|^7X50-@dJ?yG=P3zIu|NrPY3N^u8|#V{94Y*uv?%$snNrnz*ki@h||({z-{x
z`^^lQ*5C<JEkMFIx&!<Dmed>RKxS$RouA$%Z+m>cPS<_avR3oKEAU+!6=%WC3Jhfw
zsP-%sH2Q=Y2*}8VS(^sG$uZM?^vy3`GdF6-T%f_j6Ppt)W~c1GX{U0znuo4`t8Ijt
z8a)&cui9EOsvYjQXWvlOXyaVUr4+RH?Z@v&Qz+%(@^4qt(9ejYcw`3xr*0+ksmqPD
z=@gGMYBNf!9eOhlmDUk$cTOr;S?lZ6{Jz2{`-l~F?6*{S9I>bq_*(21{ge3~xz@^a
zH}74lYn^O^+utLr^}1k>vkg4Gdy!gmG<vz}+CU;ArY}zg2PY5^M#u+(IM$>;ZS$xn
zqv+THGr~Qw3cLOeS*p3HsC*|tQ3L_@wziPe@B_ymQ|UaPzu|g>*<0RUG$^iY5QyR4
z4h3i%$@|1?m|aGu0DSfjF!V(~aIQODJ68optMpo0gHBYqziiF5X-I@!(=#<Fkq(IR
zj8EAn)Wdrz5b*pGyI+4(kFebmPmbDQ!*c;<5oO6Lc6~Onubw1>VILkbdNN{VuLp(D
zVTXF3tw^0avbnQup~oQL7`#E>#5|hx(FPZnyucn^!Btpv;#)<*)e)$vKNeGT6|YV;
zvW}B%Ses?USF1JMiz;?+U)~?3t-x|j8`!4ad?RFN3s;z}M?5Ww`6__RG|a`;la@_B
zjvb7AdFNY5_h6hmkpi-T9?!~J$830r%=e#4>Pf<!!jSP?Extyr-IDzJsf6O6Gb(!R
zItAi0IL<iq*tF6vtvvH&5>#GB1-^vz^(RsJ3zuUWmj~ra4m8Hp?&v&01-#j;oYpSs
z%2$_WkrBEPTlF!I_sbv~R)el_WT;3dgFa-R<7h}`S*>MwrQFDOv#iXt%Q;tsQDmN8
zvb?yKaY*HD6uWrN>5}L%b;VT>4niBlK}D}W5XX^G@SKfG0@GutF?*lbjt$!qfo+iG
zdv9i~s@`Ii0w@qCsvJWphet--k5)MWH%^)SY}^;afs#HO7#Ik*A2fs3xo*@_WnY>o
z-$!TljPgAN1$71*_dPSwh1LBeh&_SesqLI896Sbc)!Nbmr+OP-KjI5@<qAWy$ynAs
zW5Syy?UujoIz`IX+eRxAw`$nIs<eiumiL~jRqFuhoX{MoCHJ5*EQM#V*b+T7Q9Wqj
zPCv)(@(JCe5L}*-MsgeJ7Pxx!Zr7yY7E1nUnqhb|cL7&mu7sM%tz2R5m7_XZJae()
z1_iaeX48&4PqLVK9fDmy3%D&?+F9_E^?hhN2p}|Sd8(;e5Tw1M`m&2#Dax(^<LT=V
z>DCjJ&0tSVXWg@8dUUb>fj>p%&zQbfO3h!LS#q@>AMw={o0hV!t`ae3;RZ1&sq-fL
zgR#~GVR!!IUHG{!TzpZWHcD(daO$a~9;!`AN~=0?75ff7{-UtSaOivSP=m%JUY}L2
z<O^YBABsxxiK^4pY@e7@js&}3{XG&y^p^G{Uqy+fw&}9nVc?smX6pthT62y&p}%rH
zK4K;WN#Sxf#B={+SOP72wCyueOw;m83^FQhm5vp}(6(1tSXj$nJDdR#@p^jtwYcv)
z^h!CsIVwSoVB<rZsa<37jx6bRl?kVa%EdmD-lSJf`z^w}JUmXrz59kq+E@%6VLZJr
zU(C9dqWP5TLDUNh`+;ZeoD9T^Z0DOM4RmxnY4S-!`ER1^Mb<mA7ukmFG+}K$2r?a@
zD_f7FQqVtq&5-{4sG}}w{>4ABrBW=i3}3z-;IsH1D-LDH%o==;+YZh}OQ?`VuGNqy
zB4reuOzywk-3}U#v)7iQUraT$kup})=cKF=_x){^m#ABFH<BSn%bGDMR#7GGn<9TY
zT6@j6Bt9okJ(?Z&?TPQnb1Eb~rS>Bmwnil+L)G-c{wJyn{e`JqHo_IRhDuN}S}I<D
z9?(RJG|<Pm;YTW%s?Z@tu9Er2D9S4y{P7Fbysp%9HB0-&rn7Jp$r+<pbPXtVS;aFY
zAIt>|KiNjdYaTLFS;2AlR@EQa(-x=qt6rRTxq9Huw<l!DDPZ+2$DDT-I+M>5O2s^#
z?F>$Z1TojGgUzekZnCkA`+DmHR)>D`g*ko<SZSFK+1OCB#Hgsxg1C9y@lMaN9|<$-
zi`2W}-LO?@&xA+^`nFTKIR=%=J=pcVJY2C8J=@f*vi2p&-{G6Ol%fs39NS0i=DQS<
zx4uzYTh%PTf5|6SZa9$I*}3dKW?pab7*717GOZ*1)p_V(POaH5aiYA4&p;<PeIwiU
zl0boYC_{w2>GUSU%7Kzd@f6-Y-*!%>(Oy|<&fMI}nob71fp?|GO>Lz1L^QnfeWvW1
zKc2A&nh0<u60RqSr{j2Y7yM(Nb0nh+capOIiv<LSr`C#^Ptfn<J=`sMek0`0$7~#7
zP5J3q{mnZ3%w8LFB2h<jh5fzvoAqD8sn2}~kpi!ObX+2_dMhN9op<0odv&{Z0$hj5
zP&I`{(~Ym6`*a?FslG^r-3b`zr9uje&B4Y!r-hX%);B*d&`<vOu+8q)w$ulaRgG<T
zu3dwS!ukh!mQhr1=16%NVuh?%lU}kUapWL#X~hUXd?hM#tCra8S?1WQKPN)cXkbpu
zI#i{k<2A-EgX{Mt(5zK>RTEpBk`s_V5`Dd>h?qiW)c=i6o&!r`M`#1T!ez~>yoImt
zm180%Fcr4($4}asV=tT3#Bp1_=)!YUG!Sv82$oyv6nSz)C{o^w&s_Ah(wo)jrs2u*
zeyMW7uI`?ly$C0T7;`aWQ^^`_zN2kkl8SBWq{(4J_Y$qx8rRD%qL?h*p~yAbD(8H)
z=y*THr@88ZAI=x8HtFot6k0J?M<SJYBW1%PV%mS!FRb(t98CybfmPs!{@<X>yF}di
zqQd8O2=Kn9g}WE1qA?T9br{UNh#%hN+gwIlVP?E`PaU^rB1QaE-H@bUdIv7y(Dk`g
zZe7bzRFamK2C-Q+xRWDD^~+Yy8-~iX?$9nUCuamYIXF?nJ3}iS)i$dV>1~*u9t~)=
zLv?z*82*%VNFg|HPy398ec%daic$Yuv*1yQEPK+)^w|cA)h9^Tu6sq<GNMJR)<oq$
za%APZ3?qdb=$$ynEkgp<+nhL5MsIKAln*u)Fl=eg9wfA>t=<*6AX(wke<5eTn6hn<
zOiT3xqQCSaFNTe5M1jSv=eo%Ksmf_0v{Feyhg;kiRf_q>vm!ln!youdl6>V1`Ag7L
zPWp#OpQl!oONUM(DfDPt(mbN<TB6o`N64~wMN{b6BrScuv0e8yV@4*~idh;f%a2+H
zOC)f}TfS{%6eGT$_<$BOnv@-}qu+za;@&~RmRQrcCLl*1ILD#0QooN!E3_0kFoeCm
zH+@dTpfkMX>xa;x$@9Lq)q6MOH8dw*GJ_a1`8;$)3*MtHp%#6vi;xU%nO(2J+DS=C
zfz7sP4L>Ubg9!lbNH;Dl7-_TbP6rv}YwmW;GN=G)DRAhZ4+nU^M;m!8sFR|DfkOf8
z%+!*^v%Tf}-V-2g6U59daNfce9Rxj;1QdfV)6IRjmn~C<?FFyp%dYY*I6nO8AgZ6I
zB4#wJ)bH{p$oo}`ELiY<PjF~QtWh>CV*N^KqCnY3re@{2h_gnFbtB4G`S%R^!%DT~
zN(+nc<sBoc*n`xme5dA3o!OuumtW&2CnB89q6a24*7nM}-^0x3XC}U{cTo6lMy}JE
zWA`UzML0>qtXFy3__ep*1RpLB`6rv!N9Oib`&K9`9XN{Ab!Z~uBYsOy$d2}`ceb3U
zhUu9f%Ud!utkMu^WNVmHI`7knEY!TZv3yk6Pa&eb_PR9ZtGyFl)u47saNZRaf6YRT
z>nsKFdAG+c7DVO;9tkkGV;P><KRw!hE~2oIvp=|iB3e$-)4|DK55^s3rC47j$ZEoU
z>t<Cgq)9n}=u<@Qd+z+;%$KoG?AJ8$?q28TciY@7yevqcws9{}>d@-GxE^>(91|&>
zdNAw$kCz0O`R}PZ>Ql(amjQ)>6gO+DUS2e4uE0vd#i{B{{AJJ(oj-T(soOD^%uuEU
zKX82JHJVbZTOrtLw)-`G@ol#=ekHZw(+bTuCi|WwRZ?<$P0xJ!_5RYtdf*Lt0hvAa
zXMB|zo9ymXGJHh%4uuD4Bw9*ewl-yL`ZX)a2<%BjG)>5vIU9;99b36R*!Qlw52X<L
zI;hK8k+v{a5Rb3<vUG6t^*6k*4EpKyfG{U1@yGP;+@8&)>H7DHIC4I_pMLl;iK<Rd
z$E4QWpSNGu`TFW2Df0FU?LSEV7t7RMhGzf?Rf80#xzlHeyIh6rPoEg@bq<mW=6HFX
z3z$w#Nr`$#+W;XXa+8~o;L_FA)k<JvoF<-FcM^*&6X`m`9*z2;g})n_kaa-k|D%Uy
zGp31V%ig`_$9GPelghbG(aesYKaEXB<c1~sgYPSR%`fybpvbuvIW>U86H)=01VQ)m
z`}(o5`f+VJvr5eq2x%Q1)octk?h{H)p`@nCsSAKMa%kR^kzlO_$PiI;S6r9Aio8FB
zScsMo;Y}dWG9JA@<>o0=?u4g3>fCB@i&;A2lD5d5LxRCmLC?3#X(WQ>Mm<mNeoM46
zh;D6c6y2No9SWdUT6%QngL_Dk*0vZ9UI_YyM4Dde58mDpbP5nQ&<5a=Kb3)1^voN%
zo>0wt30ki5+7>Dl9wJn4wnjYh8U3*I>xN*rPg%dgsap7bRzCY*6NFEp+K87Qv}znC
zfsJ5anVRZ`>?$BDK-Uu!P0h>eyx9HFSnG&x;8Tk;l;!UtpAK{<KNf;mp3m$pG$}Q`
zi0^QE|8_}!<t#>tJT4~22{N4kSmx%fPD@X}Ldp*02U}mxz{ck0;dIc1kvGVJ@Xjk)
zT3WgtY)pQ-*<|DvLrP9w<A&wQKL@PocTb<w2(}Zf^I5#hPeE8%kAKzBMO^$s+v3`q
z8{piaS?jxih7d5wfC2^<qJ_l*$un4u(uT9MR3#eEo@MAlguB50OHcvBDeiaiMgE=V
zuV&hS0o`pSnu{qR{fpkJ4?dpUgqHX4)YP*IB|7aX6GYD;ban?4T1LuIZx0u(SBFcP
zb!saNIw&EL14aY@evq$m-c3qNOhlGDH24xjELchkrIp{v&~Ufl2LfV^a&znDTj9m=
zl*$F#T8?Hidfp&x&UI`GTvgNuDx)$_LBrM)kC0yR%UAn#^OyjtMabm<`0`rJ1?J<+
zIU$-&_wNk=c6OK4rS>?w97i}l*$4ffxgU0_{>U<(BJXO&b1<njkKT~F&o=8}CiPQ@
zxSqO9<Y|;Iyq0PWeO>R3kB27;4>5sk`E+Ab(?<aX>Kq4qs~V&6m$&_tjuVj@I*@qx
z521kL*5HJIhlZY8G$Akstz(-m1Nrf(q5(`w+3dt$s+Nv@9R-|rKE|2>!V8vUFu%_I
ze9Q3afARFyQBkem-$P1DNF#!DBMjZ$2#RzmIf#IiNTUeST?5i34bqK-Gz{G#9ZG|M
zfbTQh@9$mf{^MPoGv_>Y_THb^Z08*x6ahy6vU~7hS7_-!{B`gTIuEcd0<xC?8aiEO
z!XibI_)NOlW$XS%S67$KLNuWF1O#*jT;K9zDYQq?a%5ZLWHQi~0UUOHrZNYV#7Ws-
zEHr!MI6LjrN=dZ=q=bE1xfm=N4}*LOt0^$k3!p$}g!7%vU)MyS!S}{+YuH3wTzr42
z#cNFwo%}5t1WT6Nh7bEwRQbLfYiY&ALd#nUcMe&IKl%P<J_fRa3C*sG4Eew|lo4U%
zUl%y^6m;~UKTBi?1Z6uxwpxE{fS8DQotGGM1HPx$ZzI6dG)@4N#unv5<~9H{tg52{
zJlA3Nn;Xz=E-Xrn0ZZ6-{Y7DbBUi|++_}K4m960d(E0U^miISepg-88jQ!*~cs{>>
zE!iMF1?`aS7V4eezrPqtjR9l%>4&EIfZe`bJ|U%n0EG3|NGQH*Q9EQXcvzH~u8J{A
zy!=ztYIHp+vfaqK23CfIS~$=(ImJ4&N=inWR^Qy*&`S9ZMqp!Mt;`8%Tl;Jc|L#u+
z02~zt(9hlUOXArd0<GHgeA)UB_4UFH;s*dIH~vGTK8iZGZ}o=?gZnS&4KhA97P(;u
z_yjjsXG9>~#!|09pX&Wc8U~8BkmOlVWnYp8ediTyXsU#lQlzL8{^C%OF?<F!7dyJk
zRKnM(@u{g^Yd<0Y*z4utAtEfy59kN8vzMUx_QFJPa4@Le0hYq8qP+aiZU#ri=a$Be
zu9W>TogGC0do(n#2IfBiRAy_)|12Y;v*fvF@1S3*dvk>kn=GnnY4HK#YtVfL@XnFN
zU&cQ*^4Jqe)9fj>UQQ7>kYB1#$F8gA@!E|O^Op;%BC+%81^vk4*Oz$iYN|VNmbfqp
z>HyFX$!@u|6VM0PlmL3Q{LRV*h(v_g*mtu&e^z?)<`;+=ae3bFtSS(=gLdSe;PJu6
zxL9bY%2R9W&HVFwe!k4)FTkRK{MO3G<~MN6W>e|>TZ(qC10Wcu=kpe9-hNl7J7p$f
zlmLbJQ$!8>px60NRUL*t6#mMU0al%a2@!;D7-AT0nMUSO__qsMOQy$rhhQrl%#5yY
zjxckv%8S0vU!g%Bqsbv6+}fbG<z+Xy*%Mrl89Tjw+uPgw5;GeEK*s`truq7StY$!I
zV<&e4xCfwLHD5Hz9XDFW>l+%OKgqsaFG;y5-$t~S-Ai#Y?r~ul4EsM^$m`R-Rnqm<
zbk`9BC4@u|025E0%LXCnRs1)S2RkRo@9)id@U=|NxQ(^GH;0}{`za))Kv@rbd((g3
z2Ua{UO~Hrv`5P4b<mP5^hA|rl8G93(-i>4Wahupg=E%PQ>LC%Dn#Q7nv`a&^%WhJM
z08(LYcdt#_$Of}LuBpNHZ<V>9W*dv;2z9>n2@)Y0t-J*oVWxicK;9VE6-L&v4)10y
z&#vX$Nd(b7Nb;v+na52^5W>g?(dB6B%J5mN`D+6{B<;1GUHJfM4@773e9vC1aaz3I
z5EP3-I>O3DGSPs^+Y=TSbmS3rANDv~Ro*Nl0lN0rIezbbu93BMJ^&%WA4g+(&SsPI
zppmUqT|%#x37MK3Fd!9V$eMV&?5D>3l{(`Xlgn+BwDon+#+v|HXCylProdx*HO$p$
z`5eblif{{T&Oka))qqs-E$c~k&tlDewTd7lC*RxK>jAIF_|dd>yE}}sFF9$zeEyme
z**e4@o<#s2kmDl{dn?_lu5!LHot<ayP)<)2V22L;|BKYh4K#jv2OK>*Gd!y+=frTd
zLxGfF8G=3PzoC58-+?M2W5-#7<$kbOs8tCtm;b#^dG^-Yj@1j-p^U&FVR8tB^Ul~v
zpJ%D8hSPV{`Yi@M0|Q8ze*FL638Pf^EFb+y2JS#7d-v`OgJUO|(Zv<&46sho)nLuw
zum~?IVq)Ya@=>N0+g4$w&7sLr1;aw}3)cpRf0Vb8oj3*wke*3yF~)u#veVO^R5Ikx
zUqn335HYCpwLlJ?=jlfU9wUW8#vgx#iEVE=8wM$9z{}{9-_`s}5^97#a`zuSP)gzV
z08IEa0E`7ww7eL_C2M)Z+nI?(`26`Zk(r9Vzd_rrZMU9_s1TP3lgIL{MCrUM(oTq8
zkw@q5M;fi!%gQ&s%W)_{EUgbg(rPQruT8Cvo>MJHWV(?}6j(C;UoGI99WYI#X}r3+
z0>1!xmQ4;c1KH%9CeS{>ct;;km9pcE5eg0hOX4-sV5&lN8*@&)xMIdZ@MZTAwiC5b
z`N32UU?M;WnLGhmuPED5O5Z=wG=S;q9V+tu{PXU7sRo`*CrOu<6S-z}yOMpgnpXri
zq}D@50N;beWF@g6FJ%Y68TP(}oZnCJA2nFHBFM>*Mh`V%fQ>`9J2q@<jx#m_Fr)DB
z@Bl^%$(G?!KRuS`dERKfdZ05laY}jDAtgKzIT`JA^bN7lOz5`PpM%@VU(?e{5g`2o
zvp{?rEC0Xi3~g5P_H1P6rZB*6@uxw1QjiHDdmiM`#AnKwTM?}EOBW9fBH%0%*O$EA
z2RHsPsHNGc8ee$JAwT<r>(bno0hjk><r+(5eM4h}hu7Fa+i+BvS3h_%&d*~uo+@+H
zt*NHzcm~7HX^vpmf~Ege8cFP%>P^Hh2V5%9&f8LJup!|kS5YP6+hE^^qrg!1t%2(W
zgEzzj{jbEG-n~=N)U<#+X9<L)u%W(y@1mhhYaf~|;Y^(NB4lxHE!43^6<HTsT?Rlu
zcSI%;@Lcye=llQ`j=t>6mk1*Z78+raR<DEmCMQSBmq99l+wVC|d!3PE3fhE@V%$qs
z%V966CVzlRsuqam&kz5r`>DB9!#_PWf^Ez{QW(o**Kwx#w#63eqzORE3M@~Q?4-w@
zynNz5f`F(Qy^>tuP7J#RAM$Q&P-v^d!Xae$+0^=3jdR+KlBr7H@|J{-yqc&wI`3qR
z=$_f$l)(a6-jAew`CSk900GuvvHAX@6Ij+Bfb8eKH##yfzjabBIXZa&U2E90;eFTo
zDt#<3StJKp4d-C`$t?_e)&rg{AT7sRfHwf`_CPNw%3zK0my%vfh~7N(Fz>+&e{SJ+
z&rI^jj$-x;9!Ctm2LtiEaiXg)G0(b>eqB~|D&3FgH1Pa2qXI&%(a~o>vIt&4ngVd&
z(nSBfUmH3q82)l$F>CHgIVK=vwgcrc0XyIYe>a#{<&U45Ru2FCq2)D~FE{mhq2%f5
zd7oCYV`-@(6XXk?fYgkK-aTz{kE;m>La6wmJTRpoEvBN5n9upuWw8u{8bU&LDAAr;
zDw((Y$I{PYM_($wH?GRcfXxM2A#JHgsNuCB5Cixv+XyvHBHUmupTzx^d$`SYvMXQ&
z$e1U&fmj^3<^7SlvNGsQ>S%2I5Gn)Gp0!o;xY$^V<Y&oYep3G`s`^Ha)*KL>k&-&Q
zO$oQhj~sNd+c`kY`j{8Pt7)Y;j(}l+w}j_DaRy=C?s8l0n?*#f(+T(DRXBx+Am8!T
zjaMD5lF}%Lh4b;rpn7#UIJ|s7AF9R%<UA#?o7Bp7_k;Bt7Ut!-JJ>g=-NRJCNZuk|
zz5^x5^*WFVkwxy_DYaOXYISDZLS6fTO$|_=2CaWT-?x3rMa>VR0Bnc-{o9rAH)!|H
z3vzQ2z30Eh7?~vgoSqgL*6e~%3baF04m{nPmSSgrJ(MyDs5e}O)p$5XvS^?m?QENr
zaZMP(iit$s7)ypyw{-y@gmr0M{kDkV{>dr&(7fS=dfMf(tAuK<*2_OjG^cB8zl~~M
zE5Gbk&3aYCD*4vMrGOQ=O}0Nv)~bW{Qc+K6C460P$1W%LZnHE+&rFgJemy%)bG$or
zNf=`BGC5v+m2LyU=CAej2@neb3QixckG|@T3ji|jKN3$)PoMhwYz@#Zz`tXybL@72
z%ms8N^Z<cjWu>Ojn+wO8il3mpVWZ2IAlGEQQyid`(umapA|Bv+<r`F41IC;UUGmJY
z>T}5iJ&A_ghjQ32STfjOao<vUh={E+jGs6MC6qLr?@WHCREZl95J@0$+n#NiR-05A
z7&85Pih~9rq>iJvOu$PiS40G5Ca+wCFr4Pp5C#k++ER>N&s2=5XAGQLsT(}aB*wU0
z!8FT;++Y*Bz>RaYvhqa|C)}~M)uzsR+p|yM?P@y;+>B$x$U00Yhsrq$4Heb9y-f|(
zIABT+pj<sksVH5hxIQW&hh~eO$W$Q)P;&sChFACYjPlhf9d?0O0=z58KV^Wl1=u%$
zYCyVVgbHvLR#{qFLQ+Z<vU75#OO4dN^P@dZdm37_x~|>VXC#szqSTO5hBCkExG?g5
zYD9{YS8Oq8Hs0lw_4oFsxt-Z)-}qB&?bc5{IqI%()J)nPZ}_u*37J&aBhz|Ts5@q<
z-eXavJ?;Cn%NA3PlnqX2@zj*7z3@sURre6Z{mc$2?<wVIQh!%0Z@xplTnGy*!H8NX
z`Ix&dS_sr9aZf;X#2H;V!$UNwx{du<C3`4i6woaEb>d8MVSud!s9_+-6a{^a<y1rM
zCQID@ElEsz03tq+Putc4TCg+nRAMvEw}b~hc<`Wx)c0&R;lCc*3#~q4^sAnr9Uj_a
ziQf0VEE1J1?i)=zJoi<7{){ob`K2ma-$#*y;&(5}i!#LO;iAii$1}JJzgGX~P*9&k
z0m~BzWUcSgVTO%7H;>iqcV+~e(f}VO`Pplf{r>0qqJfmpQhWy}w1u@BUJJcdu}B&(
z*V6gnNK9Zw*@zmDSy=P7D}MLTg#1I@(8a0-)(A$j&KhyPuQA)ysR5)pDJ&PXE(@jE
z!9ai{WZNC2!Y`DbvzN{pKqV|gC42dfk4>8!GlZS!C0n<9j{)BqWT%Bdw+N`;fK}RR
zGqMl*j8b6P>U9iNT2X1W4oXxf&3?Nc*^P6C5=b^BC8lZ^xZsY2@^|LNCr_D@+SQ}y
zZd!L+X3fJO9F{-QGvO6>yoLHAv}rQ9Uu2*GsvH&mo>_{z;n<XN&={ssD!q1fv$$HU
zF1}|^P$~E52aout4a{#BW-Amtux!G5v+>zf|Ji!-yc+vJ1~#qcpv$dlH8Nt-7X$AE
zn0=s6IB3(l^$3W_!l}*_K_Xgi>@msk7JN;BIKk3#9jwv@UT{i*BwvBd!Ojk}B7P^l
zY*$_bo2ht=3d@ohQk6&}Swys`KlR1*VPayQnEWSu{J_zxK#N=|G|RDo<=s)CVP7AI
z_|emD;&cHMG>6>oHBr)b2#6oD>|eb?75ccz5g^$5@G%r-eUy(F^rxbrl}oLt*d2(k
z0Bs$pRLKqKA9#vMr=WYuS)aRm=9eMfI2FLCC84+lBlHK}a_y+4sK|0v#XI6Xw7JR2
z8gRe>wzRSr8xzw8=)DOJ*rF;RC3>z5y6oN~ARzEmK02*;dI0iafkb$8GzFnn?8i4$
zkN9D4=WBn1H492Npep*+8?$3R<GqjskCDj3)CAE=<D4ueJL`=N>&*>D%L0jkzTU*G
zZmWXDr<!l8E9Jo1t~(emA%j~<_Glm$YULze+YQZUZ6MM<HSmwJ^KL*1>(f|>bB;47
zY6u~HVwKQbYU<EI5DZs{DpAm+e5BjkLwoPlrf*I3loH-fmFY%k38TdH$4#K5pkpVt
zLoop-=)^?z_BL!XM#w>aqDVlQ%M6qd^m-!Gf(U3|+1VwfrPVktr{^*b)s>2Q9KRn(
zET!UyRlr6^KxORrSl-^n(F03919kO5&{vZZYwh*!c(J=#wdP3gK)TC6ETJz<BR7Bh
z6vW{6>Bi|jrl$kE|9(0-tQb4<-#me^O0IvbZ6v96H4RNNdL;&9mez*lAH*t_$=Z87
z2-U(xA6)#Zuk`5Ehj(*|(j0Ge#zK<hwY8Vn&7Ea}HipGZIwrQ^Doj3t5i12n(Hzn%
zAhw{lj;uQZWd5sPRU^qvT9Kf>2+V4puYW0OQ5F*u+xjnuT~VuR9Gp+UW`7)LFVS-W
z+SA^dCzpihdj5<qY!$~ga)Qsbc_$X`#1JX;;fV9KK3rr7XOlk&QQ)TIFmF6!IuR~^
zt8i#ayc~V?QL-z=_sD?9Wpg;ZeA}R$2$Kwku)Ilp;$|`VPauocKI)QnRvo3fD@E!q
zxU#cxJfN%O7RF;r8aPwQ2-%gu19g#T$rH|1q6aCIx+oB`$G>z!2=h*^H_Xyo*G;>y
zZg67uQed*S&XPRW8<?D&LRJbz3Wu)o7aZYw&T_u(Daz-F6Js99e!ddO16`JBljxsJ
z<fDhP**jHN$Kq|b$3yCX5DD?eGVp-ln>%p?DX{SUM8=K~gv|3&we`UAq(HMgeKp;_
zObzzXB)pWP6q#Zk2A<W*ET&XwkhOTvTjF82jr<!(TWHTu!lG4i(4utPpzL>y^Ov7i
zR02cMf$B4z&Ko?|yD`N3-a?&Fl^cyX*Ysv}b4M+Z%)r1VqGJ5Dt}*o$hvRqmd!-#H
z>3zslAa{nP_0?+IwE_W}^CK@RR{g|6CXU3U)H%xP{J;oKjk01jnDz5=1eK~#zIqOs
zt|@A&C)HOIwG&re+a}q%+I`+=dH;7GGiaL2+E+T%hhE`Rzj_bH)R^*m?36!pordj<
zFZZ#d<sOK_zksf^4U9GwElCDi5L~uSBR>Q-TWGov;+!&5I9iPx#!*Je4=o!+RjCY`
znVBfH#^f9^A}-Z^=*aY%%d{c^B!aWYq60}iHt+l8PK{4xl{320KY&41MnQ!=;lT-u
zAxF~>HRdigA}SL4NcJRvESre`LG};&flPQ=K7x5`jw(eF3jKiy|HGJqJt=JXM-|<a
z+P`ppu=$fgMoeCcE@eZc(p(Rve#z}P9_RQc`y>v(qsZy!8&pB>^L_6p|J|`<KW#&S
zXuY|s033ajR(iN<67Z#sdD1zZ5B9^|{b9-W%xtf@hLNeqhrxgMaMUxi!}L?BEXV2i
zaSPO~L;np{S^mr$B9?%z?Qu$9m8@0T=3#$Vw~-PB2OWeLsU+3<qFhQ;E&5a2{1vs#
zNsP>Zj#$x(P=Gc4PGo>>c-rM2MG9pGD{g{36e<uo<+4HbI2Y5tE7=p<m_==4SUrPV
z@O^j)e)5}MS@GPF-G3>%DYZS#WZaO#d&9`wMeEDmvp<WwSj2+IgNHUUE%_&Z6E>+8
zUdUUGt$>v*UtB7kpa6Zj_7SyfYK*>5xHmjO&{n6L)6-fxWAZb4;N98fj7(NTDX|4V
za!1Py<WbmS!(~!G_24yrW%6LxHRk1q$`O}3Srv8Nct7DKmhrV`<rvB2toFz+o5CA~
zR^6T&v|texjBGyEqlq`aiAe^PBp&1~A@S(1(TBu9To)y5l;Px=^y8BQ&d{fbEO-nC
zytW#fF<Etw07c=*YRAIy2w|YcOB|dIf3gEwe};wJXa>xtN`d4em=;+Ah=xD~KazcQ
z^`(}964@XWxCYG{xzsz1Lq-0t7Jyf3NC>SlsK&NR{!yfDTOqiLwR2I3;WtkYI~@#l
zzj~9uIU<`r^W5<+=|i?d@?TX-siWt&utD%l_57I&HNqT1hv5w21!qyVsZ?Wklit6_
zd2&6@k}Iu@e@$%1|HGyQeOGMe(22Q3_FtbOsp*$7o0Ih8=NfmRmh{nGPg6$a;lWX?
z#u+PwdJ9%uthuhMHtdHB-q5Glgr#;&%n4oE9@lJqB+|0@MY(bGM`qgJ1JoMQPv8|e
z44Y5hKJz^`$Ic(IevN!cI?}r$0^i^amSO!Tqd~Bt+_hm6`P7E>zB%e$W?(x#D$m2|
zJY7d4s(r8T7Rfa616!+XBF84^boLEXaVh3AP;pVlM82xIN=nOHeSbQcYJMn;SzjAw
zZC)eL_1(|{#;ip=WY-YLfKlxEEhRa5g&>K&OOpq?iRBa9B3_IAwvj*K=({7ej3d{H
z2gpx2Ya&uz?H}L#8l8(=G=#W};XZR9UW!T)TlFTr>)F8fPupe+q~&>bO@=&?uQ+4F
zR)^kbs0|qj{?kZ5<C2cY&w%HS+k6-q)f2<;!vjZ&>YZ8}#sI@C_0VA^`)-Cg#5qNh
za`aFRYM*ypQAS^!#W?tyf0F=4k2m$b<S4~Jm$_^k4zDKrNhJx*8n;17=JEk~UNk4N
zX4suTdfM?g$#sf(`fZPtFL+sX_lN2$`H1i%ayjULK(MvpF2i+yv}(Y*K3xrTjeQ6%
z2K||1!~DLET7Bl!pr5jmbbWr?4-Jx8k8FqoA-4EoM8sG1uIu~7aHa=G^wA>CJ*Xbu
z5S|0!5dYJ)G|CfL1jhuXh`^zmyg{5tF};v$sC@Q+_jBH<V*1}_D*7Sv>FBJSPb>qw
z#RIH6TzkF`K9Z}-rj{?(u-NRg#8tv3Q~iiP#80SCE)=WM!ujl31JMJIq5>x5d>Ys*
zv-W-gqt%ZbEfR~^-+`UY5t(pTC|F%d2z7rDm4);2kB`!&*mAT6_n{JLFqWo<e84)k
zJE<DR8^|`YQr{nZUtHw@9?i1TCVy%NDtBc(@tWx`|6RqZo8oSp35!%IlW|?iZeVoS
zEKSjAfrS!6kz%Ws4QEYJ*wb%`J#BIldgc^X5wjF*Nlrm23YFY*{J9Me5%QU;y+2A0
z`dEQ|e>fDR5&=M?jEszk2+tv)!LjuQXh3q`S3({h9*26xh!kYK0hA;a9qh^doN1!e
zIjdHrnn^gO{rIH<sfEKn6vyo)(@nR036w)=$j?}nHy!j1C6D=ynpVSF6xuvxRvvqy
zZ$jjUa!IFm``lwt2`>8RWT>Qo$<q%kg^*ZN$YQ0%*3V9*7o~<e_TC_+v-N)aHh8}q
z=m8BuqPKVg)P=6U=h83%ha9L>NGbGHdIsJ0rsQPt0nvrV>@)wkV(;WFX_2=Ec({{E
zsb(Eh2L!AWH)&4*HzPHtM!rEMZiwI~lX95;h<@7SXik~8V_0k8QMF>j_Xl{~W{uz+
z>x}j<SvwHA+crx87mnK+iF-ZqwNUiOT?l;4##X4nZ3F}|Kx@W#V`*gtDg}qD-MFHg
zwoA<o1qCeN{Hv;x7o!WYMmRI~o_#ac)0Y0(KP^n2p_Cgu)9c^2+PIKNeT?=J$2R?q
z!lYW1DsF`dW;`JBa0<Qo$Xl%SFR379&wG#nS}=k!6)rUlmY`1TFEmlUV@2?@;u0;O
z<@5TFPk}mZe*e<z>InWI0O_{f|HD8cR~|b2(R0B?P%;3jBRnepdLYyM@Zp2N>xqlK
z@(myx0I(jAOR*Vzvotnd0K!CCsYqR;>BFB4_aBPC1^FdFgUPrI0a%>%p~?N=*D|ex
z<H3_RGf%|Cnt(7=NkIXLQ3Ew^UhmKpb%}8=H8B~x-muN`&_V)7xrwYDPuNHbw55N{
zOR;l$xSG_Y%Tkv$Gg>{PTe0V1ePyOV<$1MQn`Zs{<ZfY1l0myA`xW#x-N$-fgW8o~
zF|?4mNQgy?fTKz$+7fp=JpA-C0qyhPl84$Yo)N*pSk$TH)8atT!_CdzuSORdZesk!
z_T@<WVxg@qsM9P~{A>e_J^8HqU3VuorhXgkO_hd)c#PFKn(683)wqd>iOtWln_mH!
z4K3#ui=J8_(E?>?LAxnV35kgQEETZg=9=6I(12i;&5!Llce_A|X))JDxz>iAr=@3Q
z`R&gt%ZA&WOXI*=N(>Qx1^y^b^KU3nm6U~Q+7<HqN-~~rXr-zSpR1s4ZaTIEsXy@~
zRnEXSV~BfqVsjU_{8Hib&$qmst0{i<>eWIi7AW&*Wq(@xJzp1U%n5X(wtyZ{pm}n9
z3}imun}a*JTO$A&d;jnDhF?cuLU--=Z;e9t7cXA8x}G+=*|E9i6MqGM&tD2OEr^MU
zfwu;U+}J?ohPuGhm8x6ODyk*j$3cvS_86WUqs~74?WBz=wrsv{B}sF8ZV`@2aI11E
zUGegSQ5|Bxc@8}z((<$EOa0^;5D59BFwSD!Yw$R+23R47-u*@oXsq4sm(<h&ycd<`
z3P4;1yyW(?%FE4w0I3!ZG^JxLpfe0X6oB!8KZ%ez(Eib(18GJ4@>No53;5bBsBUze
zb{`d$=>2>0vuR+(gNO3Dt)x&z@8lC24(%|W)0B`bO<c&$b`rsE8hr|{1OFQxZ@od|
zQ7DHN{l7pvFV1$uK{p4I8M9sx07}m>&Y`AktgmZr8@G76-MiP5nMtSm*=>+>+;=0f
za23!Wz<L-J+)5L3PvkZsesJ<hSJd+~d1ZwV6Ns`8CzUO*oY_j<NW+(FdU3Bi-}4xk
z{e#`=<yx3R({?;-k|yk!gMvySffUENh`)sv=Ud6&i&vY>4F}fT6qGYi96?8Q=|-;1
zJ^;4f!v|0e@imZ}vS_A%ecBJ8!^=AQ+~#CVad9AhJKP@40UQP7gLuJ!WVfNVc5?R4
z<ArAU&zv0>mEfEA08R&o22q6;1MH+k9q|sKelz@OkW+}oQnotCItYCKtR*!kdPBdc
zSi@q%vr75(A9u!aq#Mbe46g{_YUwn@jE5VA(Tzf(dRK4ubzu6WDIf~-CyjoM3nPB;
zATBu>QKXZ~p*N8#1<W?`b8`h>Pk^pTP&zs~`MerubMtI)=mYhMw)~79D6$!Yvlgzt
zxwa;DH3Zz84d(?2z)1pZa;h_dWkysKLEz}Z#ivhQ{{FGXjuQYlVIym#emwp@kZXcH
zJ_;RH%Bg2hGGuf)HxP?k*@O2+la>4{6=rEuFmtfNh|Mk^B>U9`_M2YfL|=1?*(LZv
z(Jp&z+hhwT;2a6WPQ&Kk+?~QJ(URaDCS%^c@w_~?0$Udt;gF_R+s~5$vEj3vCD>wP
z#J31&gX>N<@FMLBIe3oe1L|L3|G592`@QJSLO?Be4PbCf%iLNwu*2%!%zj(z(WC&~
zy=`o^fK=US4QNYEi*>oEfMAai-z=Ix-T1c|ie8ovI?o2KOP0wC`YtJpI2bO5_SLk1
z-3!A%1pYf0l1J*M9lyej+g_4#UzOwfaj+lqta-Ssdq%8!nOqFOIGbD0A^zT*7iF8k
zGeGk1FQ_#(C?``LkZrH50I6r5w{ncDp`jrt13lZ|4NV8N%BpXCZsb_8V8HKE@X*Kb
z^|p2%Z66cppQ+x7Thh0rb4rIbIPfbhNn9cG?22NtH_vV<jIq_Gs3bn<-y6tNR4g?>
zf1ISEL-_61IgXjSl0GZjMpt~yhQsbQ9Ena*RMojhzokW7A(AB@)KmyFF$L}@&7K79
zqoP0<L%4}^Gi2K6g<J^FoqbTt>a<3$%hk$$-8a;IiEb7ME$!a<(mP%hVfbOUrm8!g
zmWpS^Dv0}K`*HpgUVCZZA@XNGB)wm#s#9CPHbGw^t5O&N(!+zj8XT}uAS+B91erkc
zq|f$NNH(lwxseaXJTZiAK*Y=cz>0VXM*)p2QWgJc-kE`^CaQzzG0rG-?J@E4Y`bOz
zXX;&$2jXJa?HfQVD#1oZJ6ex#6cHGFu!c(p*%M1diS*7#ON4rFKB8p%Me5ds(L9d2
z(dYVOSY&OxY_xWlJZ$fcuQ`6T{KM)a1A(7H<AY$AsCC-lE2I?k5Laa+ZhM2RS3-`w
zb%kIzT>$rsM!G%E7!+I(&hAjlL8}Dn1?&aP2Xhj-W)|S(Z?lEbXP;v^moU9q^$;8U
zW^`&8!jBC0kTfzXWNPRCu_T*i+dM@E`oSC~lPU{sF}KdDeY*CVLW<*o+ar6z2RVdQ
zj|88{I4#CpJJx*_Wg`+K5p?WC28?$=I|S!0h7Hu8UBoh|?8}5xrpn@edu9$JG<k0&
zUOMJ^43o>sszMN+QYepwRH1N?)P`AB33*$0KlZ65Mh<!=Au?{w3`uaq9Ez4Xsikkw
zT6Fqa7EJoA(I5_1qr>MrW#WAT%XvHsu~4bh!(W?z6B$poQw1sBe5CS^fMyI31rX=}
zU54m$o#D;V>r~X@rC={`R0mCxO5j#0`w!TC8gy^P*YY-yL9=0)b|eMI^wS*|ne8j&
zJl#d52-Gy06CDhw6=IOnL>77mVqNjnAE&C>Tpk_Ai@63Cgdbi|NhfG|q`{n}!-PDz
z>oM)@E(ST%By;w_&$9~NWi0P{GcSuiitxd#TQst8ORBdG^hcpMQ3v9N7KP1;_;jy3
zHVw^Hhw#3Jks_B})#+noR`L7p+B1%QO8%-=3d5+$ZHXKMtl93MNHt$j3gEKtFPEo`
z3t@M+CW}g^M7}NPAA{T{uHQlx5xbn}GSHKEJ>St6EgL*9-b7NQs0fDW66c3h?<bI8
ze*j4X=l7IgG|5Vk?pvG=mQ??QR=vM^BXMUA=6W}I3YD#q!pV7{^qQuT1vl&gFE3`W
ztHR&I>ERlqjz<`6W<*<Pt(sk4hvj0EUs_XDBj{~yuADJ?2_B#10WycotY=LG*`uR2
zOgB^MzV$FDJ0Q@izs7-;9p>Sr)ZDB@s9cS&^XoZXp?yW`nZVz7a1l@IMA*e3^5BH%
z;~|$cBA~{#>v0NR3LIHRTFOVLqw`kpvcp?dsvn(%%JJ?UQ2xYYRlXE|QnF8W5UxL-
z8EwbuT=HbE20>|6x&yuYjy$>>PTvxNfLe+wH|(LoC6bg7X7FLEd6#JVsI(~AYW$^r
z33IqbP?h(i*ZJFU(&?a)KsqoJ{;QbCRYW3&+^`tqA}(N5@2+M8S2K;izTYs;{C~9o
zHH!K#7ZfyvbPbqtq;35D7hJUqt;A}e4)E;C_@xp<H3rCt@3<A)Lxxl`Rpx16mIMQ>
zU-R;7FO?ilqCv--ieWSZl&#hL@Z?y!wnTb)3sHEZ7iXhaP0*0_(+@R~#P3^_GcJRW
z1(Zx7bi_+j85GW3ypwlU&C1HJh@xgnDKH_{0eFVNp{&WJV)v~>@(~zQk5d>^C}|bR
zP3LC#N~peJM+^HteWfNv<SO7?s|+4buZ|kI>42SCz-4{H%ZQ?iG1G7*5=$X`Ytoz9
zzEn<;02By?GCw8%12vGErBkF7295CHYjb{#dL%@sf~HLF=#e7)QKVrhYVbMAqD7#w
zz}=D@sCot2{O)yCBH#V|C*-Bz)a0f@S(SaVN1xebyShNkp2*W=owgZJ>EhzKo_W3=
z=*ww<2RRI{+sf}vUw1wue^46rsVr#80>h{#kKi+D!N?tUjtLg1H4zEji>tw`4qH-i
z<K9dR%Ue9dvJqkE3+WP-YGQg@NZ+@qdV|8?+}UuQ$!7MGd&~3}j4P9L$OmKH&!v)X
zYHZZ~s`b6IGwuW9r}$U0&`x$pyJsJlYg(DYcdYN~b|i9mT*rc=f!Jg!YrBuyVcwEi
z^8W_o_r{kRX5>fcRWdeo(~#?wLctSQM2L#M+Zn5o4GaZ7eSlyJNLYYE?Fp0}XuNBC
zWdVsM7?7{uvYUvUaZc~0{i_#t!!GsFAe$lRw{wH<>Uez+BjX!AFD>DPtrUvcj`yQg
zuwUDFj;Ua8h(6*CvkzYIuS6|h9NTgEpro55nS(@X!0)2C0#gVpzFD5O>o0J)$}3ku
zzXw{k+Sik+n6bp0tIH!&zuth(?)B8C6*-y-R}Oh?&F;}C{-5Xq$jICySfGv?FLaAs
zz8EyCW>3<>-g8<9@=R+KSMLw_b&bEI`4rK>NRb@^b+=B8Oozij-6I#QJBXnQkN^4E
zSy*_p%nlTP`~X0F_4W0v1;8_hPFT1Lgk?Zy_3!qut4p40XJcbBTVddv)j<EoF}08b
z;sWr%sQz8;F%UcwrywKKZS@Yc86p1jYnFzbTxku^3vF*RGuipy{@JHVkpgaDA0WF8
z36huM?1Ewmz%MeOmk*Xem0ZJ|9hwCvWg1m|J$=}$+tTX|!4?Sq&=A1chiQ{Nlm^Gj
z{_l$>O_e)+?-bay>`prpQc+pk6ey1X$vXi5>s5dUd5KZoQiIFZRGCR!Ow4H8KS&Db
z$ds>FzC<EX4q{%wVI}3z&7G~k1jPj4SmO+=Q+^{s=sqBZ>H`fI>Q!F8T#2Ls_Rve)
zdwcUG22jk7;Gw5>2igX1cpH*wK1EMCmc3<Xe<Y+etBE!GX=Qn2#wDc<CMwn*mMEVz
zn-)Fw`?re+>1wB%@8}I{To4iiPAQwF<#WPn`-Eqbk{f|6s>kvCj#5?5oqiD42a769
zH*xh^-5XTjU}3eMidQ8?!nyx#3+8B3+-+R);jN90T3}QJz{WoZ%WdzER$IK>ZJX7Z
z?Iyk+?JtTkFfi==1b`%{2-sR!q{hVo9>!dCHGgQ4t+%|qJe;q5Ul&NYX;iCi>BKnf
z5SibHhq-NS3;)BR!$U)}kE%Hn+NCK9;<6hrUX-q{mp&Zt$}!fM_8)R0l6fk5bKU9d
z`M%>0h3-ulFnRNvL)7Dumje=oZv7;N2a$e~?Qn01bCD#)pn0@%6LVC3&OUn*)-+s)
zV1^TmWqz-Dp?ua!y+=QNr2JR7Du!Al!q2&sfHM=kDOi5_F{Y5Tq$GDBkmArQiwA7$
z*OM!zEuLv2E}OkEoggf|fB&3Bg~O)l{Sm5=`i={5*g{2B9TNxkMM#!z;*YZi8PGXh
zwGAZSZ2qmDXR3epK_f_UhvilpBBwO9G8rrazVu}k%{K=omkyrvLiw#;JH&$Tm}nNZ
zof9yxX^i)+7!#dbM-sLate8io*_4E+nVZtm+ac17C1otIp{_V^u<I#${j%SeHeTC>
zPp!{V#li#{UGSeduw+v_Q8^O+AfGM<<y9C_pV+CIltuCypF{w<_6p!<E;P8<Yz@<Z
zM6}$j?L*7Q0Ap^R1;g3z-<@VEh=x+ztSu~D{_HQ>O_votoxD(0WddqeM&?Zw04*y;
zJ$mr)VTbgSCSnIn;re)<pWpw(m4nb!8sPUb7S#rZ@=F@3bEp+YlAfEh29^CJj!sD>
zjSF<hL6O#{GJIliyQ)^^gb24wq89BoUZ?WfLfp<68hjf-gIJKRoz$-A_Sc+Oz1q<o
zakj|ER#^D&0}FvMRzl`RM=LcmT5oS}`*}ywnSfg@t8ZjjSRO=_j!s&n5MZw$ivV-r
z=Hg;fxmpekW=tEL4Kg+dt6vxz&H?ux+d`ld<bN|0{o!T0bzb_@(0p&W*Lx<WpzJN&
zKFvp#;_fwWnLp=uLin}%`t}?=I~GrEkgzdFirQKWjeoMfZ4<>aQ$?~tc1|OdmV)FM
zPlr5#5bj7G2ISts3mh+DJ*IcD8U6LJQemXz(9FfDa_&D0T)QPPZYGc>u?0BH*QS-1
z({^|H`ug$%Ych+nuq}|b0cph)aOz=>11kM;_XA0Oq+A1>37}ZUWm@#2u%aT{(NqYA
zc*&k9YY!?5w6wJBUp_>ivn*+h4CvnPvCezSISqsLr5JcLz&%8;XKhEE`Mzy<IL+GD
zjX!v3{|oUC)1QJg4$qL&$lys`g*rxciIF_qf0NO$%tI8$DD?AQE^dzr#8B3zp;m-b
z%}#++PvuN%nLhIt6XgyS)E(PH^IZFZPb2n@O4K#Ev{d8i)BS*Ze?ThPr!iM$;|@Lz
zCoHodb#|C*X5(50c66Wdsb#PQ0!N96rrCm~T0%ia3BF-&*B96%mOWivZ<brrP?pQ`
zC0jiIunB#MNs`#QC2|l}OaJ>PF6<rOym*6n)P@tomX!D~{ui~#d|FVLP^5BD?(ITM
zmn}G($QJ7a*tV!;>3cHjnu?Q8>bQQWd`WLfrq$f1L181~9KezsV7!Mm5KaE*L)&|>
zu^W@usF1w!44-q#wFKav1pHqy`hnkCAPX=}1q!}i9Z3*qR)Mk4zJxD*0Uk>$!~Ol1
zFB=`);B_1iUdZCidqy68M;hKpCZhNgmHct|^sS>jIeSJI{zC>ghLX42*-}A#%AE@0
zU#9f}H48d!!a#J2p1twGilq3zrQlD1BrLaJKi(J~$&ljtBIy#x3QHvSt^_R;cv*dz
zftMEGyF54w#vZ~e2JxJF{2xY3s@73^l{veYmyM*%)1ykCjeDBwDegh?_eMT82R{<*
znqD_>802@+I(Ub6H(4)K1pF~W8b~{{AHd&!eQSsT(f^`T7f)n|IW)m=AD4qYh-^)S
zo`)|gaW9$XCz}6c++G65-WPg4XD21Fax+YbSRMYi^ZbyI=$B@;7nmBzAd8N;H<K$z
zYx~u!<Lo%t(bz-k9h|r>8h#Z2@6}R;5pa5Tg{@)w;Pe<tqld^)XeHs)K^E(I!k6#o
zrq*|{q~nbYOD?PDlJvX{q%tdvZ0|Ro;Z6Fd%bc!Jr6=yCtU+QAirDpwJG7H8y!3UO
zu%^AYWb+$o8uL;7FM1=ApHIkF#-#GkddpKt{1-0dgK%wA;T7+(IV4&bplBu1I@LC9
z)&*7Uu`1ajhT~S9^tM4SsM?9wJJd<IL<n4xLz;to$g~&kVn~!bun|SyjRAIkyjmrV
z$5n=x5+WRAt-vy>ZuqkVC5B&)9si{ub9dkKrxa&JP04~<)gYN$7*gd8P9H^zqtN}4
znbD_LzbW}S7Dx=`K^W_VH+1^?gtO9m^tCz+uk>#R?Ge8}`^`r_5uU2xjCE%l=KXE>
zT_(1IkIX^{@%Uf^9Qu!Wb)zgwL42thk#(ky8Lb^KK}r3QG^xZOfyBk;{+Lar%oV^F
zKFS~=oR`FGAg^y><Ci1m!ekZ*nyT>6Qrl%m_19zGGE^jexmXvnX3y*rw<plw5&8;w
z9UbExT9a#zz)G<l%!JnioNQQ?ujT4PZ3m-af+X+fK?FuM_ZwrP#(vb|A7(f<aQQhL
z<?Z~Bfhtctt-D!#6p>#NLgKqe);|Kbzyj$z{%onT1uXKh5SL{)JKm%e^9q-JB3wTv
zdjR!>_*p!s{;MgOWfS^+6PDv8!T7t}3kwaI^<WWDR&NJik_86tOm7-Q{TT0#B7&nj
zKC7Av@XwU%ie?V`h~oA1RLp>V6u>&j7og+CMDU4GTib9{Rlb5S$8Bv?elhlV`Unj&
zz%EG1uf6VIzE5nJkPi}4sSs<d9F6Zr#n$pvy6E?`-v|A+=mYtvp?!7Ovw{(1LekDD
zPbNKJ$#+i-&XsMm60sVGcaPdSm1U&=J2fW+m*Wv7f1F|xqNw_G;5*|ppg^D)idMo!
zFRy@L@?EGf1lqvCOzMUMLJ%@=cqzFW>d6K|COlcKFNXKG-(mu$^iW=;@i=Meb{}pX
zO5D?$jVs;h_E{9j#j8VFT9uocSi4{LXggKGcS`|Etj(CTd<{pzk~^9WO2fZeg;X@J
zPTWr+-H!|iX~QTZ0jL^Z#dqkO5}Lns$+w6qDmFonO_HtuEhU!+&sI2G<gf5htE#L(
zg4~rk1Ij;d0Z_Q!B3sNJpQOeht!MGl5z(82(hmD!=@~nOl1Gi)MR$X-&_yD>Ru(|_
zM6~D70auzcS_aD2gLp3CiWxMj$b|ywR;$EGOITMBC*x`O;dGbKeF{|U0Wbczn=`=r
z^`g@gTc!pK3z&*vpss}>a;(ru^b~)%PsLuT2!Z9(`t!e8B)fx@ISYgVntTkBe}Nx}
zhdFa13{jY@%;8bLN;rO10VMQpNS-htSM1AY-8=!-V*q6@5enL*NaY}JEmLB|r&D0I
za@D0eR1x*GhFyFiKpuViBzJYHYV$-Hs2za4OC*AH`LfcgeuVktjzLzx%hB8X&Pt!W
ztH6OOK9ll6t6!_6B(M@y_XaqDA-~=J?rI09RB3e|j47ARSmQ^0%T+YZ9CI$#v{=XR
zQ|E5K`a|I_e0V;=Avj`s_B(Fn{PpXL@Vn|3JpjW9c7!r5Qr|Uhu>t1gcu)lVumkWA
zO}XN!xwVU22l9solDNQ_wPST3qpG-IMo<{?z3-2WQAIlp9$|S=>1}PObQ<m;B#azi
z>4)HkdpXa$+iSUu;6Il>4qN<REx@Sk?Db@!UekRc@4eyQ4Y+>I?-)J;)X6E-4%41g
zBg=p{GE3)(+^6sCFAA&VC!gml*w&y1CD&;K02gp)e#V7+u5i%n?{xoUIdSN0ZvwwW
zi<eu{;bizXu#x?3RA+14_IT)UsXnA&I9<ef^?e9&q`gsf*+c!lsj1DY2<o4o2>`S=
zjt7D+z~#j*doIAkBXoWEeNNytkcGaP-%m5{6Fc8`n5(D+?Y%md{m#zM9hSe<WV=<V
zzdJeSN{NTVMP6?oe#;xs64CylF;n5@qWkW=eaUCqap{z9_i+Rsa6t9_-I#}}D(QKA
zaoPYCa$KHzW|Ly+=s2C_)|9E50PGrR<t1h+ZQPwz0pFI@A=Jzd@ep5#Wu2QkuMUbc
zW#n;WRPtAHiUQ@ZTIn>39C5=R9EU;Am+OoH#1u>@u(J{z<gy74`D7%m?fq+abuM3F
zp#I__EQtr>;@;`OXzCBMsAfP@ccGebKWr~;at8#(tFvF)B2Nxy3LmhHd?_?&QJlV?
z)<7&;w<j(0R(?G~duzBBHdf*)-3Q!pS=I6jHO<W<(<D_!4-vj--pwuUfd`B3Z~Z3w
zWzyzq3uYrTB>NH`_-?=SmPM^2v0C74!+y8C-}24H`J6^ln&9uBU!874S*63dCdGmR
z#d=cCt21RjUZ~gCUhaF}0ZFvL+`G?`3+$tycP_B9;^ALITpP`|(oW2IF4zU-PpQs7
zTe=gC+34KOyCvfSYKqIrc_{-+<hXxCsYYkxnOgkYaL?22)yV;_RKbGf(=vt%*}(Q=
z(p&wbtu+=+SS{#5r<(ZZ5!T3He~EV0R9{tr`{#q4BlrD9YO&YVulou{GQ^y(DTJ;M
z{Py_xkgnmj^~ST`Nc$5CJ_Psn{w1L8wfq*Q$2~5msj0c~tz5vCikiI6dd<@#{kmgA
z%|a>CVX3~a$c><8QiOpaPIhZ%roM`NL^};k?%>dn72rSUI@#YFDk);)AJ=l@59a<D
z*(+_?gvV753OHySmiCyj)K7F#2_=f}zK^R6mk?1=DP88M>>LA=&DB-aS7p0+U>%Jf
zV7l!(9cVPSH1E`vM`=Fw?eO}$PvcNKQ$I6NJ%P#uu-^Mpnx2oIGu6M4R&nGh58dF{
ze)^d$HeW<DLrQH2DlrJU>$-wQNG&)ulb2(Y942C}o;DN7sqPLY4Zgos)PX>SbvV=s
zbLf~S-RgBi+PVcSh;fcTR>M2ylYh+H-NT`NXPf+nedP=gIrv{FOZq1coS5RlJc@s=
zywq$PhmJMuM2+RJoolFRZh6jY`FsGuVU4b&>$`WpE*HvPUVl@8jg-&ZjMzOeMak~~
z)(dtZAj$Ugf?l-M^}noQvnz+UxJ`q7kLzD8dS-o}OyP&gU!D!OcmYd3C*5CASpF1=
zs9#C^10#*cjk|U{9WdX+Sjm-_{%nLFLV^~0ZHfIsb@J}~t&H`Cl%knbk2evPZADa(
z53?{be<Sy(=H%cQ0LH<Objv8-Z!MW5E;G+fcI#M(@JD@a`nzhSX1-<)&sK3$S=<A{
zDIY5GfyInyxlT><^j^2t$8Vk9Jyp?IY_<^Fm;l39q*pwA+xeLf3I$q4C*5XH61JCc
zep{_HjFqF%)kT8Vqq$3Hp#mrUJp538gzE0Oh^mGmSGK>juS{ADw{JcZ>?=tqd!LuM
zPd{opKhPNI-9{8?>^#pSzpf4bwg^_9K+$sh@Dev*CV0a1gA%KS*c3+3TmqdpfM6Dl
zLl>{`xy~#`&-lzt#p|q%fyA&rvz)O@HF7b~YBSs5q}NDDE<g?zG$dBLQ&brq@sLkk
zj3w1N=gZv4w2%Zt+H+@6lkS!bu%4P?_{{!kbP7iV%iqJmXM0d4gL)2G=7l&RA9(Zk
zd`z9A+rh-fTtslhd~J#GU&j&dMN?Y-i61|hj|^6?hNyv*#<sS!>7Ase>V2G&^@F`S
z8^8BGg7yN5=ip4l=uf*HS@KcTb7R74m5SApj#VI`S4NKuz^=va_(Abxc-G!{ai87Y
z&0Xhg(9=<N#QR`!d24dQ2&!#2m3n_1Dj;B?y`l9^gyo4Ka{zwwLkwkB2)#0ED_7dF
zy@5ZWGC9Y!ubP_Mek+Tyiu<b_Klk5F=2o!&JS!`+gC)`wXYc9F-$p&*R5xRw_syo)
z!3$j-=KHhF_IvFmB~4q44X#HmlUpNx7dtFR)TE}`E+mh(w4)@?<7jV$7m7-XJU43e
zQg5hG2*)$U^kW!yp+4tx1F~VG5WUy?V~Z`}rwb^4f~bhK#ZalW+f7IC-@kLm@+PC#
z@2n?E$HwpR3ka}Sb9@F3tSEtU{c4K?fVBk$Jp;x-w0k}8cj@Q2SjiQ?ZTE#sf&+ST
z9f+&9lmLf&H0&Si`27QxvJF6~GhquXTJRPD%q&PRlEQ7`rvn7)$6!G-WESlF!54kJ
zQS|R}ziK%>KDGW{rsFOPG;KaMT`XS`4Y3yZXg+D$zpUI5=3cef8#dBLh<a48Hzml=
zKL{5P1MS_HzoSh{8if@vO@3D$5_*vlkdl&u<zLK4aAkD!Qqa}t_igplok0nRkGvG;
zF!tDqTj2=gl-Nf^+H5-Yprz{gb|XsS;w|eDDJdyW+xdJ>Pox6mRG-R~n#OATE5Y>4
zQ%>sNBB-bDhJ?J8mPfryUsawpP1ry@qkL&Hfst&})tMdx#FGgBs;MkJD@RiNabu}n
z7tBr(t>u|t<S_3}!wK@Q6Tn}iY$xz<b1>ctANW1Ue$WNWBqvT|SiJm!d>}zoen?9+
zrVsv&m#nKSi@9sA658_T+vfa}gxsyvOfV9-XPJ=2g^Bps6e^jqPh0xvr<7EuHE_bk
zAc33@kJ{C@YF)QdkwYeSmP?7ik9ZaY(clZ*qCh0U5YsMc*rU(<?8?(pDSdR(VeK^w
zZ;5}E<5xBWc)3nK)yhEGuJIhh+YZWSEoEcU2w-MQNlh_Kw~(gIk#X-3fVxgBCvL*_
zFsZ$J{LZ}Y%PvnzESA$w%k4DmAz!X4y#~|O#Y8TiS2`enUO-5&M!d;iQYB#jA>|cS
z*%`}Cgtu5qlP79s!FEtT3rX!`33uExN`KR`&n?)mTwG2zu3*xy`RRr{5w2m0ZW+`m
zDO{~6KB<_CwtTJyZXUxfCqoa>7oH2j&nDWRMyEH0UExU|On0KX7ALw9%kqXpGROJ1
zsUOR^8{BIv$aOuZTehq}b69c2^NU>I+-aaj4luR^uQXcw5F*nt8ZYf(TKeUiP=3bL
z1@ADGkwrBh%*=8^Fh6qOHY{>1X5_K1>wgK-TrBdQPVYI4xzuTc5t2iPL9WQ~ukw2l
zbyE@QzO5nXKR+utP7iHp^r|uMh){x|xFSQL@|RQ!Xf>GbL$nsEOqA|9G4dF{zmL!*
z(6H=Z<eC5rNGgyUIpQwJ`_bb!;+Da)Gy+@mJl6+p#w-6m5r9+EOR$81cQj*^Mnfps
zB1{<M{>UySa5bJ46z834`yTovoqiGDg+hGdA^6hEc{1*ByhWa~-smB&Y(FRaF_-7a
zH#PxF$|nVLk)|vziy<$jm{>bg^H4CL&L7-4gBjd;+7_|6F6#J<q7MP_2|M++`wFgd
z16SSnV=np-kA81_2=Pgr6m*~jljSSzkD2L*$ZSe=6M<Y&X{S5#g8zH_SYX#4li<;p
zxHy-M3mW&q;emm@iy2@)VP$FQ+N=pk1)%Jv8WlnU>@GkR3)b}g5Uc!eAOw*vbrPG|
zurWUe48TUOf8T>h%+~yC*x#o0XzVR#f}B#f@JLIYA{b6K7iS%wOw8n|9b`QDc^(;M
zQnMSFon5IH8TC-ad9Hfr=pELA)b-D(v2ic?B@GP?pQCQt+u4kp_rRgp{$3};Ljg}$
z^!AA39@8<`7p(Cx|3_at{l2(utsmoJLvB<Ka1nYsdU}5b%x<@U8cj(k@9S6C@E4J1
zBhXhJpLTb5fzC}cO^^#U)950O2VMr%E4yr>g)FG1T`0}OZy9|rr-z(EeQfZzX>Sje
zGRiJbw__MydHo27yMU6f`1`}#o4*4Cno%@j`|fRC3`<-R5;v7Sj|doSM$#`=0tndI
z`;)j^{*^WD<GA1avhgET1eJX1ni418=KA+X!9*BLOg+m!f6@r+*E+XA{mN~(8e~m5
zN>OD-e`W)5$vajC;ZR@_bUVL%%e-XsvqRzM*g?x5hnYuE>p`DCTr_~o<960C0$3l1
zKjoIwZDfQsO-+|7EtI5gPU9}b^-?5#egK!1&KB^z^R4zq=+bo+k6e%4PE7;t-!<Y$
zQTmrPeeWm~UKRxl?naXqjzVK;V?&^9x3g2X?EAMrfdJS%Y@JP;*}ZvVT>n*=gM*`T
z{v!r1=wESqF4pGw`nB(FVL?YPFrGNyUo<jXKAf{FPZxeheDLni;)#&`+(jP?Eh$Mj
zaPqP`dinK-`;x~r_*-!6-+(x0lkOq7{_Cs2Yl4T#Y4!5J(8RmD;z-Hw^cpl{@V(hH
z1MVz)AuQ?Pdgb@G;82_4AbhjiefRRuC*o%l<9a5}q6-2}t6kvx^HBW#6Dg^G{Rx>U
z^&Us)Jh2BsEaL)ZztQ~db~>a|H^r8p`~HDsw(W{RGatw@EVcT~0}*D&d0!k0E)LGz
zQj_Cyt7GddjUd(Tp4t1K_p-1ur2KAAcfJ8bD?sr1d{jXs>A2Lq1MG8NG4MDd!YQF0
zim)zRa&FImH}0L39YbSd+ETYi8KAX-?MS*~*_rb3@$uN$7;r521;|HHQBlQKcNlr6
z2OvA1?iTw6FK%o&-cFj`gz;MZh>wr27W3|pF9ge`xTFMcKFfS0nHTiA7@>zW#uOsz
z5D6a`@=mJKh7vG?8?QcoL0tR9rlV~4Tn*!Ge<EVQiKLZEtfzEe{}dW}{5}U*BYQ^{
zFq#!+XVWiX*^4gO^hQ6Xq}%~;Lqrd-E$D>LPyXi6B*wWQ@Vm$Xyv+z2G46@23voc#
z1a92`2=%zoZ@x$;EG!po@&MZftkNo@z;f9Bf(IKrwsakoX6J8Qvd8rKT2Q2r0@e0k
zhu!7IvRgDYq2p9c$c-uO7Ze(L`}u#ZLVkaw&eN_n{mkpS6g@o^g>~fQ<jgZF(g1pQ
z<YDT2`A;46**IQj)0Dh?;o))V=zF5--McYRqoLs^e3oS9YhYk7x!(>Hh(x7xtzzcS
zMrVK?QxW3YbdljzesTtxR%M)qb1yFVI{Gi|V#>M5N9Bp3Nf%2}WNKzeN`S%dn!kyl
zgyt6(vh98YgF~1Jru%8SIAzqQ-@oULmMAJ}Yu_O<o2&9%1^=%W0DPk_WCQLIJbg&&
ze6pkqR@Ze{+eP0e><2&!{qP+Cdd!+vm7ct8_pdb(6ZE+X2j_^{zbii`#YbMhjwqql
zSO|zp{Ds`JkbRFbDuXhEywtX;2hy6;3viQ(K~q_GO#cJW7U?ZW_wj8R&=+d|0N)|2
zrDl)r?(VE}$%_>^508K{ua2T3XcpCH#fS9AHRrZ(-dt~{Iwta%@q#Wf(Fx={t;l{<
zh^)jx6GOv9IJ^P&49Mw+K?fA2a0((?XVACg-)Vs#si>Q(s_Mm;bjg*mJhh+Vpg)K~
z!|`{S0K-Q!@od_+8*SHZV4=>La93}piM6#(`~c`EpcOuB`~4WwxABi_Ud?s)pW*%u
z-iJqDUH<VKNarLS{Y8TqYm|RMk!aFc-5lU)d)Ss`_G{&PfMd(q<{-R^`RNyuTDdwJ
z!0YQ_5%<2(GBB7O@jcfASi#QA(4%{_&HoNNqna;PGeF-tofj`!Z~tF)-yIZH`fb|`
zqv!ylFoH-LL_|e`Lz2*qf|3*w5s)k@pooByp$RHMR74cP05l*fl2OTNB#KB<BuLIV
zG(j@F)%v^j>b<I4@71k)Z@t%lObytaK7G!2_P6$0Ywx{ug+tVMQ!g!O_C3<NbC&}#
zu^k1&XusHmAesD{h>O6tPQ8olCq~|TZE=t~HjFtRlQ99jYuzl~p<&X|g@qF@f=Tfy
zDYhOlAp)xYX@xLkX5Qj=4luJ+y0v9h?zb-XG*Q*mhw&1TCP^hM?Add2IlR$rZKFdq
z1pBL5J$9)@i_eP|TZ>j(huE$2;*Y77cU!7`X(H|?5{ca3$OUFRr*(8Nh|BuQmDGG;
z-{Gy#Qri?E9>t9~TVY5~V1<DDlYb#!pUjIx9s6EBDjHd!{#Gd<H-Ghu1i^7Hk@!Mi
z^h15R+sp)+TBgV&@oFlw)%H0eK*O7_tfNO<k_rn8bJ&WAz~v?xB-P|9M`NdTG_Nsp
z8xW5r(a-K&)5<8&v06_Zt=3;AWNXW;1qW`Ic0X9eML0Y-`$2|(Woa~3$=z$VUKP4a
zO%(B+<@jqj4DJx3M-P0ezmgFo9~sH+`7NO<fTc8dD{udRsTP(aS3Lv0qq1@ddMX#I
z{!Xa;OL_jf4BLxVZu0gh#=0ygRhvH}mp2V_5^Rn6nCb}j!XN8AmGX9nUUv{#G?XoV
zNADhPt9kd1gP8ykD2z3lE}HS;P+@<<hrRu;l&768_z7)k(@-A`Fm&J(BGMmj!UIxg
z(XFM!oI5!(uz$5(r*l_S)a=EA{S%j~SMP(FHUWY;>{1uK{B*b8@WnK>O~fO1qppS$
z*rXg8>2?xw1N#px6^srf@ao6=U49r7zFXe&>3y|YLY*gY*O1;TC5Nk#ET)|f3GA<i
z@9}aDU9`x(f#bGo_-yo<u-q?c;>@_~d$pvkrhkfd!0>RK6+!JcZ!Tqz690aEy)adR
z$?GFu8Ryy_Ck+#QE!_p@I0+B`A`(lOE)mpr>ckBDr99r^cR6LZ<X2UE=z|l0RlA?+
z#tgH?sYKhIrqKOWiPKOc>BP`QzYd9_>k0$@?9vOtk3tXdBReipSL4GNx~}D2xMCtg
z0I&1>RE9KGW<upFdHkS?^PGIVxt{Pq0V{{xN&8lG7x5oc{5Z>m&zs%R*iY~g{SrwR
z9k2~od{8@<uFD^5xlU&@F7K^<^@KXQc20u30<M=kz2Hs)tD_ZRh)6q<ZoUaWVfE=O
z6QLjo(nrAqCg#K5xOayqfk_Xi3M$jr@zE~kbHRg$u~nCD6HsYrY~+=5Ov}xc`;GAM
zh(91THlXPF<98qS)~oX6&3Aa*y>n;Ji6{1hkuH%$kCfQh{Is+ovGr-8ZmqtD4|})G
zo@r^3m68hI<<p^tKexkmh}KeLjNN?}6C~SmW)Syo$#l4SqO+K?KU1Wlw^#FCF)<cz
zPI$lh6iu&xb%@0TO~yY|8XFq$cpS?rZFi})v$4r_r7AT@wL9@X)b!ctPUPI_({bE=
zqYr7f0o_ui5Cu|d?b4i??>J`gP!!yDMg5L=X?XfN&Telrif$cmmEYS(9(Zask!Lpy
zu%-N2<iG(1_t{J6y%Boi>C>mcR>sI;pm)FEk_4@XsXCDgZg1}ncC)iZ-ykXBySU&M
zN7rs%mECvca6q$rcd=saOpuVgm4!u_%yA8kJ9qEmPo2lIUq`viy&sdh(i9=@;aqzA
zCME<GP8GB0rF!LzXXKh}8d{$#T6>$4BAScgGC{(kruq0V(I^Ijt$#)g-H-@Y=}_K7
z)@ZFrIVtnvaWgX2jXZN--m>BrwfYnVP3!sEqwO1DN9c6zo%8qix1WJWyubgonfq|9
zWp!?El~@yCHSk*0($I_G0pLyhu7A820*bUWHBEA7*VG^Fk&%*0fsqEPF03=lQzb0L
z>A>h1>D1P0TP5%D<1?=17}{eob+`>iIt+aFz&;apAV*BmyA+_a(_^xI!BBCjo^rLb
zP|C4yafZXU{W~dvMR5g_vgkQEpU$^A)S}TL=AvpG*YcdMtUzMkJ>t^tq~APf<vk~s
zd9@v1-oMnXxNE9=@h-c_{sRXRQb<{d<swGX6+$bOT3(svB}?c%s7WEc0OvraO(okp
zXGaZPbXD@qqsI5oF^vY&JMLXkPd!3k_Xx>S-RqYs>S^XB;Ttvxn3Aah*k5J<&XZwr
zK#mVow7G05b$zMRk0<3`AkT4ib<Tt5OR<Oa?BbSp7&u{J(f=_-;6+$Y+Z*tLm^^j}
zbI1m&Mf_aK?l34>bQF1aW?nT?9ue8Q1M7t|qj3t5ibu|IXgtfCuV$+GLNE*G-@ETw
zUA)M&GgRL=9~}`(x??ce#;Nk5Al0w<DI8eE<v^n7O2F#vD;M$j@pe|{9o}6x7%V?O
z!Dcaltxl$I@-@Xvn#uooKp&5Eqi5z1cxSHGK6?Iq8CBPQqyCPjdU}~CzNxG3y@DF~
z&rw7fd3oB%pl*J@0FL{2mI`{<?-t3wbwz6c{u8PMWBrAaj?N#1*~4p$8wjh1Pg@=i
z$X~|xA!59vcrq4`OTg!)G7gb4*}h_oL`yYY)o{F}l&Fa=`AJEaWO#pbRA83Q^jywl
z=92aeN}EYCaPgg88GcRieU2;YG5j*T#}g?5TMb)km9eRp`*dF=@|rDza&0FxHJOJM
zqTUcOIP2hr?-kW-LK?-Y4Y`@+1@oc+0Kp~nn`96M-eDo!xpQaXOH2+tQhvuVqC(j5
zi%H)1RA(q65tzjZ)TK}D;g5+DGd#n+<m50qX^IHbfmN8Mt*cAJ5<yt+T_3!Nn{(s(
z7MA8ldo7H5!bOW+q@q;4U!-0n%wEy!BSa6@A&PdYY53eX<Z`UDoqFY9j$Cs=0gs1s
zuYm!*7^pFsyTT$OK{6^pS8IhNavzJ`Jjb1xGCP;V#KfP;k$v|Ae&ybluhh>&X8~LD
zxBWd^s{SZt>D+Y(2R^sHbRbGNmWaGG&dkee?fvDiNUcwwJ=;7Hp}&9c-c1>D>5g-l
zPNyu&C+B$9xVh?+23s({b)*c>oJXhgpyC0Z6cT+~ektFIh9n^?3Wag2TBm<=%)exp
z_aQS!e9T_?_`E;CbHdokYwfmk@1npo3y;E+?3R^rI|&fA)baRgPwIMy=lsg@L|$rK
zTwlYRM<}*&ABqY19+kG}Uc~b9)hp7E=3ZvzIqL5I=C4|c61HvG58|q-sxTgnZN#}k
zs1lRY^1{^eF%OHk)5h9*Z9@6gvDS^rBzi~eFg`}*ozjH5U?*=MueHU*)X&eKWb7Q7
zfnI0(p5Ol*5kvS;79rU2d1@kWvZk`8(E1|@W7Za!t=h7wSTxKssE2y?M3sh8SC{9D
z76&Gae{_9Nj^%Q!CC=a9DK*j`ZieBB*A*T<e=d&%K3H+>kV58AtBbLXu%O^elO|CS
z5!lKs_twnK&2<l;5au~1qE%_BI_~u<=2rA-<6`;EQ3xlxyFQZ6$Cjn8tn99`r&s@D
z{ge~F)ZBt=#Czehi2q|N?sXKeCG{gmKImu>-(6{{!8){m3}`=rg!H*xVb1lz+}tYj
zth|X_)WOjqb*GR#-D5e-FzX4q7U&QSP0a%2y!AoZt3O&N3q95_RSq5`p$ySFbYwCx
zF=?->J9NG8BZfkuC{FBb+F$A3Zf;c%cg8#qNR><PQc1I_l|g`Y!|jo=>yUIDN;~zX
zM8CeddB-*49uoa-?YtAws`U0R{<I=={n5@FZS+dk%;~1JT0mK{UMi_WjwN?0f$e3g
z;Gcc^W~<{51?Q`u92CIZoVRbStHP=&-h~r}%ias!4E#i`C*u5yir&@FwAhl}kZ~gy
z>oZ#^GxP7_$}HKUP3uuiTscT8)Kz$kL?wtzhK#t4(mzI)v7VR5&BmKU&L%9>#oYRE
zi-nYL*V%y_U;bJYi1(}xcVV)K_q32$<F{|P^OLt&I)Vw&s+YO8m0lvG9K&1>xrRt@
zt@0~ZjGdMo#uf+l{c5R6gQF8|H^2^*-W#~0uBpi*{#QXtibdAFd-o`7v#H1y5>LhU
zdf4TSXMzmQWIX7ioox&YuUdzG$}S?ZvR8Wgyi#~{(ah1ZD1A=+-!Pr=;~mUCisl5L
z8g)z<|MYyTb97wX?vb~nje}h+R+OsB%EgtLT4jqUsVjQ!?n@t}?euqOTx&>HGQ$k_
z!VwdmixXQv2oQ!$KHu9oL^+D<{>pKtGsw^H7|-WRwk~!R@-FpgK}iD=PY(L=6ZLg<
zy%zhIGU;~8o!cn+PxaOpbW6PToP?ogv$IUz!b%>$Ngmb@tS1zN4>1uODU;@#w-BNy
z-<@DMJh@Abo}eypn4VC%TZMl1M63kC{y0GMKgqjP=*dO2j}Bvtrt_J+wS(FI%IzA$
zKl1>#ghIRXl85J6v9x)W@uU00qmlrHwxI|WvkHKWbpmCa$NV=AF#*XBy#Wx6W_TyZ
z@J|K~aM<oId|H9;H(A0ifW{#U+P`M0tB|*4+_<>)E}f5;7LF)huyaT+SAy_Q7XH~s
zI`mT4t6>z2>I2;pQd9yr%Bj0-BxFkia7HU@NZRY-t%rqh-h{{(N9jXw8uk}xf5;Vg
zR9P`jo}SS5C*Im+xv#!%kaips+BbH5dKBI2?4{mpgT)MGQa5Pc9P}?cO*;-=yZ!#F
zf3d83>7Re&0{+)eWV)TJj^J8$chX~~S|72cxVq)tAgTgW%+?K>;Zbc2-S?Fh{qkq(
zTi#h=@<<eUItOOvNRr93Y++s|u4-+^!lkx}cC+xuk5y>LCd?|evq#J8nRvpyEY>>?
zN2PQA3>x{?M7((>dHK`IV%cQ=OkR0;`6k-CeL4o%MLulXHN9w8rV}TBN=Jw7<{V@S
z5KXpuB4WSM-V@C+GQe5qFxatuz8~93Q-iU_Ju54#+GkQiHohJ%lWVyWuRm3Bag&-F
z8;{cdfOZbt(aL6chHTqyY~`aKK71Au(vn*;*YtI-XyN?I;z(Ot>wRw7Ge$;SC_6xr
z2cwgN&)P`h)vKMp;s?E`J$}hXGS1Vxg-(WsK8}=gnXmyV`L7cmW`_)5Z9VeOjTY(;
zFgt-3H0Ne76?L%w{!6Y?&FKQKwZi{(F)Xw89!BZk!UqPvpe)7Zu}29BpInz~<OeIb
zuqSlnxw!mJ`~1UZA*^(rQZ{G3EG*o9{>JeL*d^<q|4UG(EoHnO{E0PBd#UsPzxE6I
z*uK374&+`>i|cd!^^Mjagc4R)W)iW{q_{UNv6~(JdFr!H?R?R9?{Wkzt$Y$reb2)r
z0Fo$qK9k&tM-H#0{P*#Bex=4HCaeA7qlvAXdcl%1>B^yi-sY(Gry$Xa5DEnio`>GQ
zf1i|;gpe4|x5;c64b2l1Y8ucqvQ6n<X&LQk(TqwpnvFZ_n%=t43D+tX?LUf6XThDP
zZv7-#no|-J(T=DO-K@bW#hUJFm;rNPgUPzR?XONohCO5*M@gzp@J^|OY}ac*%@`}Z
zi*{I_jy=P4a#B(mVBy{moC5&uc2MBmIXm)AW@|JC3)?SVZ=dv<caI+^@n;4bGT>0V
zT0iN%-gtwaA-3Zj8Y;)^F_SqAtS&DoD7d8#CE9EKV(Z5hpH8%=C#LM@jnXe#DD%Ge
z^RuE7mczR)nV1WF2YE!#l0;q_wn7>~y56VuvBG@!oztMZiVLtqCx9yA8BWS^n8by_
z%&29gV}?Q-Cb9oVNMBt7OWn)Ee&DR@`fAl=&R`T+*5WNvQc_gF_r<F4)U)a5`}5sq
zAhT;lTzV==yxtejVYY&%LOMVLEHXkM!Fm?3wJVRWB4=S&8K};i=?>uIl)c`Er;=UN
zc%hU{tKF%|BuF#p<;$1U%QG`ZC%FpC(JD_>8<&TYnUv&M`EXe;#n^3moDG$u+iFmH
zy4v0C$75Oh^m*7b=bq9)^ek4Gtt%1MQ%F1a;U<z)47yE9Pp2{{F7!?v^RufTYjHS9
z5yiA~uWmoS-MoEq>W{)jjCe^(caoC}$UnxOZb{iOC(`}q`ig61ik+0S^q+s;V|t0o
z`#Ejav$W~l@c9B&iAZTYd*I%bg}&}*6yAERawO^(v65J4qU{WIbiP6bQBLGJWPh$<
zsV0D*NKr6&3z6u7KgDez=agNED_T#!t0i$*PjZ-%*Q#amIMBhsl}gmE(vN!f=n-4t
z+JX)Gz;BY#(a|wvsob2Lle^T07VTJQd|zg;mzt5&MbC7>NWj7)CrP?W4wSk=!UaFI
zx89}gp!~J(9+M`gb#*hKajdLt11LPYqZ3IP3Pp;`b88!UWv?GH7WFzqAx~4maM=~D
zA`XQIcmP&$D@Gx|Pf8d$;p!U5APcx#!RMWiK4a~<7?}G=izJH-Y)eY>d}t_luwrrI
zZ~S%MbKma&3~fU#53_%-km)3|3F=r_SS%=<FTIVnS5R#L^H=e=n*{)8SE#}3D6BUC
z(q?*zIU6%gMQh(^%8m(#sHu(3rTmGfkPOlRtl}+R{pcG0YPB*QzK$ucRX8RMIw9`v
zkL$4i9@-GvWa^PoSm=e+NLDt-rIWZmnp$*+MG=HBu2gKJoPx_lBr;IYw{2iH;`_`8
zT`5gw-XakaUT63PIoR3#gV2sLK$7zCA!{u&pMvYD9)1zSGsfE5i+P;|^=)n3N;AP;
zvtNq+?wWeeWi{oVKjhZH;Ws%0HkKp76ISYleLus}VV1B`!s<Wt!eDIMZSC=3;-W6c
z%U`t0`s`WgN<9r(5FsDSv6qUQ;-`Xv*B{eNPMtcXt-Z~q<J@xQRlsxwBUx($*CjF}
z0d9xh55RZv7TtG4WLsJQE`wc!_wSUqKd0x)M6G`NR`I~sYa<PB+-72-j|n^2J2}mP
zMo_)CcgNos)i534!Ua_Wh26t-Ez0IBbF$WvtDdt%^<Yl~orgYeU-mib33^?}++6!-
zu${G0XR1RaL2o%5nH{OdZ6eb%s=ji@y1KHKC#q(<(;~BlZP1uRHMt;rd?6z)jy!1D
z<|e<DqLAJ&jUM1H8aHTu=kZGZ%EWzWs*Gb@GNP|8Mj10w7=!J{n$znu{ND4N?3iHW
z7XORb-&*0>F8qV;>Zrr7&)$g7_V}^;+UEN!D=WzDc@(|!F$@!$jc*fjgz(V!2Sgx`
z$O7=AP|J55TRW65{{|y7Gd|msfa+szeIL8Cc`7E?IHdiVINg=?S@b_wam}_^UFn_X
zx`~w&ULue)af6>TKpE?T5*|LUwLYr_QbD^)a=haE_}7Ve;0bIr+AmauREjw~mK+Tn
z_$I15U((9s00kSagmvu@|Lf|PICaR3XidIppLARwXy~Gun%3?VWIo{LjndAU<1PT_
zfV<zZ5fv`2?m2eg|7YryS?s>QKPWSw8Nla-#6X$<Fre_aZ{OP822C<D!ts=2iIN3^
zUs|}00zV}gFLptULnP((S_rXkFTL|wU)Qwb%QIvi?6Ge7yVcOULbLiMG(o>q;q>2C
zH&vTcu=A8I3z0GE9fZtYQBjiXR2Kw|;w_Vf%eD=62hOH-eOhXp%X<6ssz2NxNVilP
zIAMHKfLLHb?SJ6TwR5M&@#8MIT_~d{-L)g;Xuv1#hb}5A?w7Ld3Kvxra<Y?>#*(u-
z4Bz$@(gORyK$y$o^3V&G7mZTF9puq!27S^jSfsGfP@Cqd{tLmxjztC?J-wwyBRf%p
zw|y_eP5*c;vQKsmLEn-55m$kSk397u0L|u+e^2^G=aUzw>q4tOoeYTJd3HVDXyGje
z2+S2TDq_c(hYwPNo45Sk+qVNXkw)N*Ru&miK@`{-pGH}r?R|M6Q$(`@Lx6JZue>6H
zBet~tnrvFI^jLJlf$f)4!K#~^j0E#k%IL_*_n_A=UplR9^x<LDKE%zNI$6(&n0v{3
zdxq$4tT#7+IAIsYUMDAgZ;lUBerV#qZ`V_Q=Bm`B1HrUiz(;h`2FZOA(V%%D(72>2
zDK(qZb_o|o^ZA51*=)V{;~Jj#zvr`<3uSl;d|1-cZyz_Dlg<6X@e`HSeRW)C8Y(W1
zMPFT~e634g+exdOxpz5#g8Diq7?1#TF2LnsZ>Jvk&0{zRi2`0jxfg+V)j!kzAHw4Q
zKM3zX1A5ZOnj%VB0C0efdi?nD)e0Iv5*EfT{p|S*@Y<4+lJ5(I+mZle^1LlAEm2CB
zZ=$acvNk84typj(f2Ic8Fp3H%A<q3ur<%f&2qtIGzPJ9Cpl|B-67chU8o(M}c^|m`
zhF&@twfrKDI`6$c4+2>8p5n}Bhg%z0`S%7WnCR*K_|aMv{O)>oV*bi30Gmqd%!!CY
z!&u-a+me!#(MzdfkdivOFakItexdvxq*^IS>0i*^aqm7lxs+OcDAisHzYhtQI1YkW
zScRSrUM%Y1g(Z-4tsPE?+AJhjML|KQsRtkC#R|N?CGf4ZcdmLv`QwQg&uB7D2JiRz
zGsv7`u!R6bU%<V}H+zFY0@ulSS-z*yeQi<q*s){d8%u<l{})_H?-)xmGk983EuNk5
zO;d7+j(+2bD22tlVujd6KF$tHeBUsHw8S+s2%DDe$L~{M$?xwt7z=!Oiw$GE`AKp4
z`LxZPZO@6@^p4q|B4iyfmc~F=cMkjk0{MY^2h0k02?<$!e}6f~w{WIL9-BgSZ7pb_
zdLYaz*49~9Ti+t!*pFf4T$KCBn_$w?C5#uMY0LrM3(H%x!w=-xp^goEZH!r}(Y%3c
zym>8UrO%2>I*Cv6(y0YQsE<VpJu~==QWl$qsg+}Q*|%>Gx_T*|hIhivQi6{!>83XG
zC4sMXH5Ify`CQuR$C&J!H+td>c!Yd-lb^GhGR(=c%M7J$bH4KYPx;;-twI>mfq6Wb
z7kCSIgBQ)4GJc%U(qf^sru^QX{@`!r11WFb1RB1Q4fYsIuTXxnw$K|~{L!J7C<6+Y
zW{+Uyp-9-A(bXLo7$9NAV0^`uMzVX~$CwANC$ld&H@rRRXg$<`NWCe*rXzn}#3D=`
z+%mT0=8jyaDyS~{DP-}&OSZN(fU6KLl~lKw>1SU$l;)%`k1NX<Lfkz}b7yGG_LR++
z_Uad$SKJmQOI39>|Epmzweb74pScjxNT$|jBAZn4z2?^1V(mI5{_86(im9&Co=r~K
zct)0HIZ;%n(f0gDGGHRC8@cw~=XG^;D}*8dYeC*JZ2A1`ZwqTZy+#1q;;z_ZWvWlO
zlh7o3D?$C}ku&$X-4L0Jf1p?E`bzEkbdCJvQrE5dT6EfhUX7t4-t!YC-6>oBbWZD-
zdW?U=QbJKL*Z~^nnp(8BpM=D|RobR`Ylf&H&r0h0T%xO}b2G+oNnL3)&UfW+OL~(t
z3-;PS=+t|F)i;nJ;4%8E;oHBcZVu7+V-DRtW##^1g0D+l8T7}5io?0R{=mingwEXg
z;1@3a@NjOAZ@cL4Js3WZP#__nXYtHltrh`eZT71cII|ue2z5|A=86Kd#7y%SU@m&q
zyCM4421fQhnKbDgiwos@@VM-0qitC|RER$`LE~`+(CFVn@*XX3`>ECNY4KkaV)xtR
zCfTtU1U3Z`gG2F2U0%r`!cI9|ZqgV_UYQ^<ijHT?oA~(KqYi1Ft(o^zpDb*dbqicV
z^7M);lEgxb>}~E~AmrbbI<#8I#h!frw}r-nLZa?@@uP!SkL9hj`7+R=lm?S+zCCp)
zT$x^%g#-hu0sIiWsZAk!KW1cPP|J}rptjbrKb^XtFR&eRWH~cxitpR)`R)R8Am2#g
z`bb0N)V9>QZ5jDNrZZW~>oZRw=cnYle#}T|*80t{b&31uLMk{S!!R^jSl#8s5m*=o
zNPbkrP9;mO;d{JPKAct#=HlC;gZUI`27@7$1^}C;CR$biGI%t~V?x&cocDzby~AJo
zb#))p_U!q}8d~Po^SC1H@#Fq}X0*x8xMskMbZKvwerA_zKkPTo5k!wY)<GZl?c3L#
z%cGF+FVsiuo!`$CLNxA%*b|w5o)Y(O2(8*qX@}E-^eq_^3YvGR1oJ{HDMzl(W9QWO
zF$62}WW=F^;8{kV)!8Fl+(n-FIilt7Ecd~hR6GREP-!u>%N3R*#l=c37!2(DwL8f(
znri<D>yr)v&;W|AQ~A~_p#nJc+jdvcIC=OhcK+bRI_M2nq;hyu!>PstR{-FiBaqUv
z&<z_lunC=XpRKRJbJwvb{6n3Q{Xq6xQo!pYzp(E)bpv|2gDko2uG-qigA41IxKDsv
z78JbGxm(<PvakR>gr6z6X{eQJH~9{5v07cbh6?z+OuJ6@*dI`Pi$JKyXa;;PxZ2t%
z%(72d*mE>lCj5ZG^q1peQZiZOO2EwzkMm3*5o8suj+d|~=39Sb1i0o`33$=-rn>1g
zwlKgm5rgZUcg5B&ADX#AzpS`4R8nJ>uC??pRMnqqD)N&qIvgCvdW{*G79^#Vyz*mu
zdU_WwT&U2L-64MNFy<nhpBt>f(01EPm$I)H+&^g=@?83VBc%KZ%;V7F@v3v;KkTx;
z^B04;Rj^lc)6a$W7kmJ;e^z4!4~myh9F0k({o;>*_ZK_1(se$5$olhbCV$F3|AnCb
z8)#A5dHqMo*D{~Ii@=P<gIJ!bw1dF@i5w_Ko`XY7^uPg)d!eDee|VBtm&AUOMTDi?
zxZj74x^F3Sn;Qx5{a`P_%hI~@Cy{rU63#04!3=SWg`(_Uc)cZPYjp2M&u<>7!a_nW
zfJxuJVf-zz6^ZPe8blUAkQ~Q1uVP|gz?%Veqs_s@t8i%L3EsnYEs=>Y%1m3E_t%Ad
z07KfUM6`agJ3pDWcPNu3ObNO02t>_slfpx};W^?^@+Wz%^w&_F;XTE^y^wvax92(k
z$3kj37m};`dD^be&pg>OqnSrV=q175+Sy^9k|5`>Fcsr8N`gvw&$bPgN|@{m5X0{O
zycq6}ZMW1>KXF~vZ{CzFdre<qRCW`Wxx)M58m*gKc$|mo_*3(zz4!0mk6aJi4GZ?y
zcR*+B;~o(VG#NBBH1YSLX0T-g7~P3h8Su9iH<7?az)S(%M6{>ePhaZ0=pJ66kEJp(
zuU}u7sA~veL+7M=AWbb@u-uetzPoRrJ<p{&LKZzFj=(eYM=v7VvE-iTk?D@ZZ^3Il
zm$AFklyS&)>acnx75(x3{#g7<Svw#lHQrarW}byaLvekkC_XuPpO_dj#XMf`l|Y@>
zCy5ZKp}2Fg+N-OpA5s`&-?Euv_4&!-M}c6N|1#3k`N#Oo_DV=NU{e9F_C(&rbZ>k2
z1N%U6-jh<7ztGq+;#`9cl67*|jmH<t{~YM=uLc$9J1{ch5E!si^v@q)2$g9Rj0RXT
zPF}YKJpi*;`74gi{O~2**)CknIg#Cazpl3G)2AN#iXg6eX!4!j>u;z2*~!JFMX}|i
zKs40Q7(s4d;=FJNto<7pHrFzDsk%n_^0~OOm+^H!*EuErcf<N_kv&n7k!(?hKk;<k
z1^~4;+F8~nXL~6^QURA1W+>|cu8j`Ow(@~eaV5fo@14;u(hin58sQbQ=>HtqvRXr5
zL_{0-4%e)$f+f{-^j}^yZdbYPVCOLv69COT??T0oRxm06NzlrJSaOyp7Q4?-yw}_y
z8!EF9|HfQMab6|oW-Ey5X5OoFAfY6%A)fN>Ro=LT`;cwhLgk~^=sqXdF!G?dSD0od
zek!5MqqqP>{;k1yr|k8M%{A54%tsV_r)g9g86^_!?=0K5DaKh*JX2o18i;i1AUTf>
zVX<Z|uOUc}uPsk@<~ogn(urLgT*xZUx&~Bf=9wYzGrM!oq@~uT6SBSorE0rW%yJ}E
zdmfxjDNcv!f?u?jQgp69wg>i0Y)l}>3f>IMCGHPUmL}(Tfjcr^Ml(}j!_T#~!B*T*
zCGbRzBICgtTzRLsOfv@ocAP$Y$a1Xt8glbIXv4=ugf%IieIcqeJ7=Wa_Kd#ahH$gB
zPUybo@{&VSkNsy{uCuyeQ9!RrJ7`tYX5WyQx+WbV#J$sf7W8)!WJI8pmvM0u&FQ@W
zzVHw?=gf@Wx$~*CyIY&MG9}OoGs^qR7aD^7CcixtJg&HGqlvryvF_KMzvZ<4e5>ic
zhQX<A*RSfcpU6f!|4fQv3!>>uT%gXY6Eyi3HXaX96e)QdXR)F72GxbXXzUm3A@CHt
z<Y%gY_`)LrPb;V~@xSjpgE@zrkF{0`gylsDGDq)^&S>s<66yIWAz_Yn19*Bo9=9u$
zZ`OX=`2<-YuQF5?p(xjBSZk1Hw4-m#u2hac?=8GgbSK$>_kOLd7#3d(=JAf%_^(*=
z*4Ff9Z-SCLXo7y^e>vml@(Yg+Ld0=K`VSO>tl<-fS<-WO@w-cAQkw-|wvT83%@7nM
zLUe)7Jzj2<#nnrlot=F(Fi>9Z91vF_W4FZ2Qc@Yf#K{^kIXfHnP06|l{a#bx)(If+
z@RoS5Pp&V3n!@G96{7cE3|Hg?1kMV09U!J)ZQysoy}>Lax%SsJ<#HTk8gh*pY_y0r
zvz77cuR$7jm1A`1EIjS7e^SVhQ%_NPL*5M<cFc-7w#Ew%G&1p#6nNp7P|HKzBR3Mr
zkhFu=4MXu3!}q>+-VeSf0~xNEM0LGX`exr70af-0n78I0Xj9KMNU<oS{Vk{=>pXUL
zv_*q~`IAwevu4CQW!pk>4(!md0mEfv*Pbg#Mqk^Z3dOa%AmaSmW5b>{ZC~&8Uimsx
zo9Yge4xCJpvR{ijZivJAhwB{eLKEO(q|6o@Z}JzBek`zERqYXskyl*J$<1AY4Hss)
z&U`nQ`<xO3aBp=MInu2DN}rkM!@|OlADe%;>Gx=lX6|T8UMo)?GF<z~(!fVys3Sm^
z(ZFZMr^K(rIK+=}7MZjJ5F^S}k{@N1kh<xDxnxASGtQUM^RGq8IZY=7C&b1gt26iW
z^8+ue-ywgY{Bu`_N4T#eZ>HkfLdgP99hoh529LS_CEmg?#l=S)@I4HRlTe5dZo2et
zYC+j^i#`hx=WR?*`2M{rMi1=yB*-&9Se*~$%?r;Aisip0xvXtKI{~z(@Tjle_by&H
zFC$8sLWFnfV@9ASulrEQDHfVH>?Gxooc+1=+uH;zYopjm<-vU3OO7oVu<i`P+r9}F
zDA<oNR&%y4L~)(m4uB8G^`GAzFSQ*zc0ti(W>_FtK@PjR!(alystdM+dxne)a4f6b
z+q>z8>&FK%@UFGw=Lp)OjFXo{b}ja89TYn&e)an-ghYEa1eI*zhQ83y1|(*Ccu#-q
zi6My@pCwPUwIGWXDlh4cki0w{ul=HAu+=s%8OeT$zZewL5|8cvw!DSgyKTA;etsq;
z+_ntP!&hv#v9N^1g%3B6#T=nkfF!0m+q7jLbQ~;o0^f!Wq`1I5%au5~cH!%*AZo;{
z?^N|<U#nt=@7P$x)J^zo@p3!@H=;&E^4e1Bx@UYXPkzfewc=XEb){xZOz-D1A;{sR
z!F@0@XN~_+lMbLwBYk)b-p8X+l!q7fE=4tYo5IA$bnj)m^>)y`O3Ah+biLD$t*SuV
zQnMuNWOvkXf0@!ez``TS!)u>++*eE-p5-&s!hEb*CtL*usP3C-Ct~lQWHDYN6|HQ1
ze@%RIuHZoq_ROSdZZRgF$*rmR+iWvEl#6Q^4KlG35?nG8Ysc?f8&O(w8(lAb(jF{*
zmu6S2E5^e+f;Ke*w8Qyyq%I?@n9|GHB$=%rQ>*8f6LQ{kOGbveH~=dt=19%Wk23Z)
zY0x@E;WFGsU=py7q-z&FSRwJ^MWYhWkzgzMA@CZ?#ZEcFQdigdKe6=dU!>B5-~Tgc
zw*T8>m_HXOClI#mqj3TMU7GU2zea3n8kdZW%r%g~=Q|5M%`bck-3Osm>z)~$vsiRT
zX;+CbtBn*Iddv)DnO5et5&iWSIXR2e3W|*k??&2g_e+m2jDJq=c=F`Qg%ui7S+LaB
zuAiwbdH~;Ir!iI>FnUF+_iEF6;rP+vQM3v^Yi(^fYB>X%AB7_?c7Lp`EkZ;>CCdvg
z4qj8&2OOdisc+t>Gx^)8IXj;`cFZk)yh%=+Nc5cQ;s+m)oS1m`=jkoonJ~L4pdRHm
z(2}2jgzBv0pkr`(7$}D)_9~YDtd{qC*!^l1%{bb#+u9<2mRor(RYHYjy#+ST2n?F{
zlGeH%Ls@=wG$drcl>wPVJas#N;`iC@1$z!Nz(Te<RWh%0`ZSz%`Or$m@~4VBSKGY-
zeeVp7>Lt6!q@~5TpIfM3@8MAV#cD_G-$$1lA3wBbA~ywo1e#hE1f~SLRd<LgZ&hur
zn6U8ju$FhGMb!ZG5@>bEim7}FiHXoK6o4yk-n@xq{c39_?9rEydutKrW}$mPj<{j(
zPh(TzoLzpsz7}kb9(46u3e-LZKC=B#-G|KZs#?BubbbSml93^W$OQt`16E_i9~uIM
zjtOdT1M-;lDHd-&r|-zRL&Cy-lyjw4$k1w(zz8GZJwlcc5|UR)uwMh#_C#sK%a^Zr
z70!JU7R&M+I1wp#^(XuH%S}^v3%-q%q@+z0fJwi}EqZ7#WqdV%SFQp5#yC|G_1uHj
z>RCBR+L_vafEA@dngwbvpT|m|Kmd#Pj~1(#ql(m09pu&{kA$@Rm5WXI4_jGU-sh4b
zS)1s~DP)2H#{69PtYgO)k&B=+R0{^TCM`Oa-rffAatT!|v;u`ATf!M-VB0-qYU-82
zApKYRfD>6Foe0mCU3j|fHqr0S>BA@q?98&81mL7OkwILoV@b~x`!R0o)JWnbd9SUU
zq7*Gzt1kTFY=~#U*??JHtzBQ#!ZiyFK>(&DDM9N?X5O4P?at?C{<!Y8I6S1{yTIjc
zYi(`4w;29nntfbX*Mi&xz6KnfVSa&qckHJ-cRE)mf{>>Hu&xcMiuoz5jwBWl-DlNk
zXiXV<)F>CTDU*z{kLdpWa&FUS&<L^hO7&9-nWHoIXFNSuQ%ppNa*nmgPdzYDx)3l}
z-}AwIN8WDoQ5n%c$7#kzYlF*uACHTzwxISS)24-+YSR5W?PBGZT9T2Dq2c~t90W`F
zJ;6h#zjuHeT`Rey@yW&I%6&9tq_VAjD_WAFI`92hv{-G&Duh+4X>0*cIjS7Xt|-IC
z%`5MGain3`d>Ms-K%>=_m7Ciap_$SuZ3N{c`+-N%udc8?<Bvc7c>B%)Oxm_irVu&d
zD`2HyCs$0J`wP9uI7LIVWwCw28m=1oz?Gr6t`xR$zFi)rE`lR7uQZ?Mz74}DbL<~i
z;v6ks12hT@v7zcQHBZa6*u|1IV2=<D<2PsIGdhv-pU<lOi_<^12vl7ByClc|nFjeU
zc}I3Sf#z&=Is$)-?ZnkzlF8~}L!o)DgXb?^qduhe3gMA@@#YQn^V5W(a%NtIiyv<G
zpf%o66LdI#f&c>BePRc^sig=aM`vxGJ~fcA>d-zVzMtIJ&x|EGc5d)m?;dP{($Z@)
zTKVyp+WIPWXt@XV9r^`!e|=TGL(Z`oKodM|>`CxTU=C0JPpI(P@-W6pwmCK3Wac8F
zjLJoEvF{cbO0di-GNMPj?fv8B+q{<JPHj$gnoKfq*yWxNv_AE$w7Z0%q#}^5LcYV{
zOWd2eIj6u7h;a|%Sh$<@&q#WGiQ9*;4dr5@Ef3UY*t2IlO;>Ky?w*g)rNdUv8ppZn
z+S-iaH_N<o<qB#w#{K=v(;_Km;+{*Np^r#dC4i<oZDywEGGXH6<b*UGd2C*qJ>~*-
zo;ed5K*Ydn6CDTW+>Rajc}>a7lGgh^KB@?&Y^@=WGz6OD75*_;G;I^eVBdPxt^1!-
z{3Vs>pT1+u=UToHN)dUqQ4=Z7(}NcppBy|E^C&zl3T+ovaYs%y!p_3^gUM3@dUJbT
z(H5bn2Yc_Mt!BWgYS2!eo$eYM)|+~e%8m3Toy|Qz)=b4MfqWfkXeAmznWojoI-~Mw
zapqg3Y<^td*;YzJ_O+}4zEL2VD_6wI1eX#R*xBzBy;jtYl?~UwsPMH?a%Bn^Yx;>m
z{t>BvgK~W4IR=)Ay!AB(r4rEOXXF1t)*jQ3a9{^hpW;GSBm$9Uq@2K*EbOU3f59a8
z$>#JIF$Xxd2L&7MIrZ9qz;(JW5M`jQ+lO!7)CSsZN?GkIVd-QRKru|gNDJ$$6HnQT
zuN}I&_eoApPM*u;0Wrk_=kW@2aXhex#w+-W*1H2HeJjw@wM(q<Y-@8ft?>4YKIJ&f
z_6Oxi>Q&^)hOktZA7k<;%UiEko%H`gv_I#3boz04xZiDVy8t2O1!`F<{~uz8j&`oq
zf90RCPrgu6>$0-Y8q7=la|@H0Lg}sU%g7VUrcRd@dV0t$@LO69`nOL{Zv^LlkbKc<
z`5MhW@K5sB78(AwBJasuCyFVk*!%JW9S*f$-oK{<Xkq;3Iy+Phb}V3m8>07M<s(7r
ziEj@dUO;Jv@(*ST=l~rfqeq8~cEBffYUq1)wI=ReN<u<@W6SyN+xxRRNwRIaCMK|r
z8?@#XU&g3SNy`)Uv%~L{ZjYTax$k>Q5f}(V+p~dWXqw8dMMU~yt^N55p!h-nb5iSg
z?o2_ZT%4|Q>LkB&SX(*PBqyz4gu-kiBO~-z<=PU=P?ETL-#+b*=nvhxzM*>hMCmd1
zs353*Oto2QA+AzCIgjiOav8s?T3c7Ob#L9u!rR6{!fxWy5Wn@d&dBJf68k;F{r2O-
zUtdzev{X}7P*3FM)&kiND8*rRsCzO>Tq<tRIXru$<$U+l);A??ckYIxv}O>7$iO^*
zW-hP6NR(NB=X-k{p-7*!aP--|*NO~)33w#7?VNvqS)yoVdIlWWwn`4u2b;vieS0Wp
zCuINZUfAGM_kvba!pNfUsb3izd#$@H&~0XdSH@P!^|T3e%!ztz-|}8#YMZ{Bi&K-X
z2#raTUA<tjuphv)ys&vA?ZI!`iI^RU`jUU>Su89qRYdF<!b2h>;oi{E)va%6AmbKn
zy30T1caz+IgP$8q8Df>1LCc%W-tF68Gcs0`U3M+MXTZP9g`5dG%D*_<Wl{z+Dp4lG
zsRG{Z%NN5Dw?m6>bcD9>wt1t>#<U~ab^VlduY_-*EP3Jfdv^L_-PlIILl6aY3=E)d
z-v9LJj_U)XuD;5LjrszA9M@Re8m+8%Km20OcxL_-y=KGU!3%fT#R|m^wk(dOy4bX4
zx}o3#c&NCF<=VR~saNsrE^PL%y(&~z8{t;b=H?<~>)#G;4uf1jfRURD74PPueRbQH
zC#!u@P<G_KUT9IJhgB?laY#UQ3&cYIUHMkEHG;>(Ao}?2FR-Zc7iLL{-zz3+dVOK)
zhO^x)2WuZn7W9)`58Z?8OA76W*Jeu%8g-U=Oc)p%8L>@#&tI$(hasvP(uuz+>s!lf
zRL|pKOhJQ}DwYFy3v62GQDVIL#@`X^u))g1OzZkt`*@D+z1V@eucM<}#Th3fnzvm$
z4)-P!0Fr=!#EN8Z2uh?;p3wB|+dy9%uxfc}6fBOsBn8DW1ATptjFh*m!2x7$QqM`A
zs0RosM(>9@aI1s3nuPB2NFPwVx7*fV+H<TqByZ9*G%^yLRcnfr_D@kl%|Dc@SxWF_
z#%5DnRNH(QD$giX?(#WxL*5~?QAYgpB@g}lX}gF_)O39(rrA#n47_sPZ5(ex7u@+k
ze0TlrNh8$tb3bD%4t4^C6uCHT>}Io&?q6bLX1QR6igSJ=mqJp&3XiFLAnn@2XR<i4
z@i)m?wqJRfqsgYaNJILcr$VqrOAOkZ{u|xkw2%7_$sX%aHrLmUdstuM2pefhBRyff
X=AqB)z+G;%gQ_1pc{D}o+|B<1ha8a1

diff --git a/docs/images/prowler-app/slack/no-workspace-connected.png b/docs/images/prowler-app/slack/no-workspace-connected.png
index de0c47f4b72ea4d0bf1fe1bfc1d14e7fecb05e17..513eff04ad7d2f3d0d30dda607b7ac244b46a9c8 100644
GIT binary patch
literal 95176
zcmYg&bzD?k*EXVpQYz9Z-5}j5(mjL>rF3_vh;(-|^w22XsB{iBbVxI#Gz|5f=Y4MP
z=bJx(-<&;j*4cZnbzSRPYZI=fB8!bdf`Nj9f-Ns6t$~7q{uu@3iNG^d;2n$a+IT1^
zFHz*BB{e;>_LrXOlMc<J{lT{H**lbIFOmu#EL~}7ZEYPY1%9-)N-9QsD=IGOSvt+M
zJJh_Csv+g0Ron5p@AO?9F?Ba*6EuP-nPW%U*%8G^{|cjhWzcUqV-EgUU(W3BwwzHh
zd#<bPdUVU%Q#Bf4nB7TVu(VrosAKV-(ll>565r+Q;=&lP>Ax=tVejV;H<a>_=8kT6
zhF7}u{&vTGy40_hgaee1%OmX)0}`eAnLpKm4T555=M7X7&f3Tx{r&L0c?}A(Gf|Ai
zo%z*k8JZx1@A6g&lH6douP=%Jj(PKV?1rNl7B$FMf>{tR897U9I`;P(O75@EP^DWe
ze6V@=+QQUxPS9gav$2Z)jK!q>3TNdUINixSb2*Dv(#2?mZKByV#(VpOSw6G5s$Hca
zW76bolN@Y((Vq=FF{bFcK}>o7+9d%!OTxULK1+``D`moR*RHLS;ib#hA=Cl=^04F~
zLLUh`lC#acrHQJy<0-1w7=INa_4uz%x10lycRB_9QZDnGO4MWfbF~!RvLtN+#Ns6X
z9b@_i<58XYqw*%H<9kgh#&Peyo*AV`IPXxd+Y)^uLGW79`^>-Jhmy-3{-_RZu4Km%
zWE(`iWim#0&>*giljKeV<L%FVzfz&<T35cO52kJ@cBK0EQ>IuoC_;CW+omp@(15To
zEO067JF~G9DYh-Fe;@NRmITM$#I|Xk3-k00o9UQ>88LUzbpFeKzvQ0haWZargJ8uh
z>14S5+e$g26sVHS=F^`UQDGVSvaGOOR)>Nz<q~)HcsR%^vC~6aDNni~du@J$DM?O~
zUoHq9%%Af~+8&o?tN-7-N+8D-?|GIcE#yyRg%ZR3CDB9a3__%A_;J9~`2??x<fI`F
zb!m}7*RNCmXUQ`VR_-LfUy5l|(@SC=)yM$8pp-Cnyd~CuZM}Vt0dm|C^P4t37nh^<
z-bG`xQJAoad3Lb1Hs-w?B@TY}cWB(F4`A?grCzl)yo^pUWiXQ;lAMf>kM{Jb-}TA$
z^{E8~1w|@{5e5#9xoh;^OiwV9EuF*2->VZM9^id{dwsBA1+Qif|K47?A5foJtb6-*
z8B16q8Q*|e>};cQAi^Hxs;oU+2>*gzgKE}h7r|^gnM<#QKd%-ajB1evZTg^&?%=?I
z_Sc+yZQO9_SPE}kU3P`>SEQ7%-de2k+DEZ5F){5vmx!^v$(~5U!^MvC+qqg*i1^c|
zXcLOs)6>_dn;g1jn)s>K=X?CKodGK;Y?+1~z5_d`=L_XJkQj2|Y+;X!E#*rF)g0g3
zD=M|=>iT-OK-8y0Nlc)2?`WB5lB0!2kG<)UmR+4N*3T+-$bE2qhE2V7ei=rp)1rv|
zc+e%C6^B+iCrL)TCshFxpKffGR=M*~L}u!@+zX*BF83_!%;$T{2?r)8ducIwHubx0
zcB6)Gjq2l=F)1%-`R$ioTfMk-)ldAPDrs-(?2X^QI^uWYb!ci{a&*zD99W5$KpA=V
zWHxF?DxR1J)$*Si`P`W%Z3O$#J^N!(dS&VZOah{?X0pCUop0PlZ9-Ep+vF)@1A?kR
zpLy=3DBoNhKF7e&1WgVOwwORi+r2M~1U#oJh@)_j2TlHW$ZX+8m%Q4S7zM3vdz>GC
zeD=G!uv)1m!CkL#&)+*qG7xd6#z%a6X(jEm@Qz71hs%61Y1|}TGrisPRe?N_sM%Q)
zlZnP*BuQ4g+_w=q$jYq^o5lwg&a*5od*7NL;73L9^Gtq_e0jN%h*!d^Jj2OiYgEgb
zT{uU!*hpbD>EWTh{UP`Eu(@Z0+$a9v$Cfg0ewa%WMhxV>lK2}AZYycgkTNM-XL0@c
z7Vm9s^<5o_L@fj5+0fDZHivXPJH4A7fBK$}*HTC1^~FFW_F{-QZ{g)rSn|bgscd@3
zYdxoPwH9TuIr!>WqGp42xO56JWa)$cpu#>7{VUIs=|nkm4#Vyp9J9G3UeFpV`6|n7
zHCkci0Ev=QY>CQ7tda4=_SZqNPG}T4#~S1FxUj11wqhH%?4CPBwRtoNh(R@j&kJKE
za_y+K1pc1Nkxh~3iu~{PMKM*u^%J#1+M4BMh;i%l*_ly|6rZ1`X_ji1p2XAi#ZU<H
zcuhPxMsU+)XA3$G7Cx_|u2hMBOR|Ps>I^ta<1FZg!oD(3GS?aJBJtmCszt;;GUHtm
zv4=arzl<|QL~&4v<p_KOqkn(HOLTol2$MVLZs4F0%!!bkPSTdWzpY%XpyxNy<i6D{
zEp9Ua2M=s82E{yo0patinFlkG$+B@^2FedjG6&sXt_0{3gX0LN%e409>uvO@*tq{b
zMO-m0?&H@cULCetB1Xx<LEuGw)feDgsFJaiGF&4bPf$R>exbo+E6U2}a^GAdSi2Bj
z`pR127OdZyNUuEm-9$K%8F;QLt4?aV7rDGj5J9VW$=AAQ2HE4}_hGu!%8>f>_Zw^K
z1}ak2aw(Fk#1O=!MRRE)!;Gt&vSIODt5B`!SQ3{iL@Zmc_^CHD$F{RY6%gtEv9FMu
zB~@cMAY5A2_@n)=Xusm7=8F`0!LsC4e_~b4GajlSzOhv8$w>ivaEEVC#HQkCmROHv
zpf*&dgz31PRj<K#_186n3YkTnL^+6N3a`Kh03iBz9?5dtJJW!rlqRly@FEhkkpYD=
z?R84xN~-U~brXe@CVk-~_Z8oeMsII*$2U*6(>uviS&cgV+uaZ5al^k7GzG#I)pm%v
z&DE&x%uG3X{%+|wLstC=i-X(F1ey?T#Ft+$ufMgq{+{i8KN9^qDW{>Ob2A`Sn@51F
z(eWmL%!gl{BAhW^4%6&RIhxKpW8@d7+wPf8wPCUMel4|i_YGXpT20BU>;l;6nz4S`
z($Q)l>KlC3(>W#2&@hDw<{*{x19UHSw8}I*BasUD3~EH-q*7#F&lQ-w5Jv2fvCcxs
zPRpTI8;o0t@zCAj;$q{7;Jz!uwGYH#vM*jtkIZZCBzlDX&s-yz&Kerc8Y*z<lM~6I
zsQk}3`~=Qz?2YmS8kNSmMT?$xhB_>hx8eR-dl&EiAlD~W-mhNI)0k_K%P~%??Ck2g
zKl^<$|LG|)xo*=(F<!Y5E~d)`r;Gjcs2DZS)W?WB>u!mHc_{>U=umF546#i(>du^^
zs~6;*^|y{bwz)6#1+gHh=8K*JhTTT%9A_;d{R&&fUh9TOpkAw{pSN=rUq9*6ca<Q(
z1u5lwZv6Zmgs)?hT5y#yCjC~JY>IQQd!tDsf|DdcYrX~{Eb*}+=6^T2E7i=-w0A|$
z*YO#Xo$4Hl0*+5+0YyU-C#gfzYW1N9GTc`0oTjpk!;wNQYqLf|O4By$&+XF_EW!TG
zt4$s8d0xx5N3;pQ4j!0zE659k0eD(!F-w&3AlHn|$Vc<JJmfZyYH^tY;OBgA=5*OD
zj`Yz08|aW$HGit0xJ1(0eg8wY0cnPBPadD&mKs{+LR(tAS!>i`Kf2_eyDcxxg39+y
z=2zKb3>3?nH~|EMx!kyexx90^!#p?{%d=+}#f?HkH4%@qno+<VtmY@!etvgcTmT{2
z-EFae<@^f9<hD{$Rjm$q$V*AlF5@63AxUA=OTnp+j*f1NOF=Yk!XS|GtoZm>m3sNo
z&;LQ-H;LcenM`zwq*9n;nq})pglqgd;<GWLb~GHN8>MJ`2#DuecfvY)WUw5G#7ai`
zW~@Z7Wkxc1o1Y?~Li`VC{4Av+wDCG)&9?YtI~;VQNn*n1Hlsx_O{rJPzP4m+ZNiRp
z8(ki7`~Yu}O@a~<7VkF&MMY+zIOLZHOI<s7yt8@l7_75i9X6WusR(=6>-foMK34^1
zOIx`!1D78a%-AsbcBH^|{-7b$y4eO^29kN+`?HE&E7-7XrI^ma=1fO9XrlGHh{q&k
z;ovLnk}{uu#;4aOX6N5|d09^Uqe!p<QldBEo>wj>a4igYcJtin_KKqip*OtV`@Hlu
z!$}8^&7lateb2^`s?H1$?v-(EzlE@L4X^UaxsBCmzsm{kl`OZ-vxg_B-{Ly7MC}qP
z>m!FZr*=C-^6}1(*ZZPa!((D&3CqlFZAE;q9Lv6W9vjm~<1=X#YL#n4#QcODf1`*V
z$U&5{g_fF})|Xm6l)%htxp9dgL|oj*qLbxzpKAT)iQ(ZWpB9Ie4lzIE*U(UYhh^V|
z20PgpGONjA?1DV~X6Nxwm#3$-jg1!n>}aka4D?ig18>H&3q{gYF5F)V4{}E}eF}x&
zpEa`jB$08h&1CzCdDwGXNr+YHTJ2}Abr;s#%$QGv_yw<ZQhE+SoDtlg*4Njm^Utt~
z!b`R*?CKj;R2oQzIu@NX^a`yj98n7j?U%d>ISgNt+%LAv#=>o;C#1>=MmP*wy74Il
z-P-_;Q76GUx;L{di$kgVHXui1Lm6A6cIs-pK=vzA)Z>u#=#PaA9~YOKY#K?SIsB}g
z>D8k;8AR>8Tm}HUBK%&;3O-9BA{tIZl3?``HRT{Ccj@udeLBoU`~muAcg3{UcLFTX
zxEAnWP%dwduSuJGt+-8&Wb0B}`o7>0Z=95+BH|Rg10@3kAXY|V0WtC;DaDd#BZaH3
zWQzvq&1PO`%9IstAQ2ZAS4Ye!_O!G#)(_v__@V9qL_y66h_johJDeuHYNI!QR^QP_
zCo`(g5ABssFgSOGU;~SAyWSTItib#C@7)d;(@~Fq|Ni~xG1}XImf!)KfW7B5c9(2z
z{phXnj~g>#v3lL(_0bV7^zDU~Bt-?;55b*SAnR^R2oA}MSzOhf)D`_tV5JVK?VI2D
zi2``wm}m==E^6#yC4dD<E<*yAPHR|`hGtce+<R9$X?>BG8hLeKTQaSJLF$__aQ!ZM
zM^eIMjaK>C*h>(ocG_;f|FI=b&mSizr)X0C91$}G&kwVM$t+3JMdqbWd2eQWigrgb
zZwut$QS8t^yFhT<eIdrH7`?~*S;YziXQ>FbYoowz+3|C{bc^118lG4Li}d7E*M94B
zEOmYf#^bIHofRe++>3>Kw^*}T<iuGnNNDg?<`>&UC$&u2&tvD=sRkhgn$FTQSJK7g
z@zEtuRgQ<@g<3pFW$EQMug-u6|LYSoaJ(3YudnZPwUNWek8vzI><S-==V<XY^MJrr
zm&K;n02uFo^=EY(25EIa$cO6F@bU2h5%uow=CVLG)_ST$^1Ku$xzT3kzNCEjuNDxK
z!qf?nelIyWxw#rMHa0e3HI=JFf`b8S)d?(`W~JNSbYHAur$_||iUa2`Y`e-5bSWv+
zYqZzD866!(e?d`b=X0_#0K`rpNWyIe8x@99*p8Ol6|*~hF6|K$MJL~f6&OGJAFrir
zd}{YT-#Pkj(wD-jE2Xzkrd2MVNUuJl0N?4yq7=KmKHXkjT?PD?y!sDZWx7I_-*#3a
z`2PN$K_x3!R0BLSHueV?RCfm|R{HeUgDE1*aHiRd@(Ui*MfqPaYq@Bava=<lz3~q8
z$U$55B6Hl1e^`?B_n?#$h%&^n;x$n5FPC$|G1ijmI(Pk5xq@mxRXd?(8Da)x2Khl<
zvjT{nt+cp5SF=s)aP+bDtuZqQOaVP;Qc*LoES$3KLyc+aHZ143!_>w`uhzVB5~?cx
z=gfAZE<HXzeyx0=!Ctq)Repv&+p5|A&bzD}R68X=GwUD^Kcjh{G|+FtLN&$8JGv7V
z!cVoaBjmSLl5S12L|Y6)H7&4e_Nog0vV{i?oW5NS`qBll;Lz_6>lDnR?Rho)T)$ig
z8mf`!s&ocv^ZGO&6*SFck3(}fgT2T~wm3|>ST1FfRmw%E_rTH>mRns7;kFpv+1Ua1
zg<8Hsy7R;RU8nE0)HMRImqn*a$t_3JXKQ;~mYCh|hgQXhcyDNiL5pi13@0K4h-NRy
zh0b8&4{Gy@LpPU4P_%;le9QOX;1s5i(L@GVqr(ajqD@>lli$G~SZLsv#x)SDN+o+J
zJ=BbVY0%czuA@#R5f%_o)3&j&*hV1a^G*SZd%6u<$$N*M#|Hh=qEVzU#bx)xPN~^>
zQznK?9@76V1WSG1!^9+!`hA4m>^FtdEO(cw5_Nzh;NakhIdAlLg}&Gx$%K0EgkY04
z*v@g;&&Q!*lMF+|#d&yK0X*H>+OinU%DeM^xED1W1KucC%lk4h1=Eby25y2;+4Ikq
zF%=O{&B~R%gV`?+O}Fbe@Ew(0z&o<WEU=jHjyvzJ?rIKBGOBJo)DDNu=<u{2+7bty
zvUZEoI9wz#64CqzLd0Es@l(>febWh|SV!=O?u^<jOidsNEiWlHjpep$F~9rn8{FVg
zG&D4O{zWnWE45PR&4Ar$QICrX4RTpo2IS4ni~}5AstbU29EZ_;ET#Bck_1(vp=U3o
zpg_!#k;Rpji0srem@kA0b<%y@B~i)|!#up-@4-ym!W|!@B)YGlQh;z|3l^Nc%(zU4
z48~^)d1;K0@DjyOn0LE?*Owa?7ljt<Mi)yg*b}r*y#}>jyRb;T$3p<LyZ+<PFZvT;
zs7m%qX8=fQu%G@#esCg#Dlnx9Qd$aeR*$WxE4*&6j%&<@?vDZ<STqWs6~R7z`c$Nl
zoL}g+Ihd>vtp^4R2?=SqE3J4`8n%1?{t?K|&OWsSz%b%n;&c&N!+T7G>Z2;db_GB6
z!ty5M&UgWn9}s5*&s9Fv#m2s%o0+N~OPMrc=LdGB^Gb)G6{ywYsKfux8{Y2j=y-B|
z{`}b=5Hqw(acTV5*XOSfS2`a6MhHX;fRdGI7xcFR(u=6iMHXXgAt|4&T!594C5TeQ
zQ?23yXT+};lwxErU*-}?yr2+C<BO_6G}tZl_V#l9v;M?dzq6qU-Q66YS}g3FYQI#l
zCpQn|njJ%867jCj3YnHo;>zFnE9Df|&_e>=sbp}W2g}@JocaA$W@@tw|AIBt+t=Ou
zBvhTMy?fAJlQAbbSu5^`^e~%Vy>VesOf@J)3bQhCC2w%#&Rjz6&%h*<$!@mQqH%Zk
zKc4^Wl7;6{T|N*4?NzHJ0#OYO4e?|u^%`S5k|pZztQGiBh1w@9X3Dghg`Y5|wrVOa
z{jpe1N(Y;0@aAMV?AQJ-?6z+d)gariPzddU5F?)LJhf()n-C3it5omer7}}-AG4-U
zKK%{Jpm`nTxyA5ssN!^w-J{b?ndX?seQCYhv4@F+bMYr`6zqaLvl`TJ*&Hkahe~N7
z7XT|NbZaM2pY}!V&k)no)7Lp3EsL@Xh`H{>O_VGHe(vp~7y$WIvk#193^#0bXX}}U
zo4s2HwP7;PaP%}q?LUq*-W<&q2CV{$Q*c983X^1Ucb1gluHWV15)2})W2eja&<lb)
z&yU8_$g&%@r6rgRCNUZ3a9iNm@x9-UfHSH>4;d*rz;%{da~7`}ITq1C5|o4tcQ3Gt
zhV}iB0>zzp#noUsa+jrQBXNx4e?;ETSo?;;n=7wDavGM>vH3K}C(B;Nuw9GtwS1z?
z9p9@{02_Ho=2<)6r;N@CD?YZoCVz(i-RYQfHC}v)lJG#kT4IvKXmlyhHZVFib@Zm9
zbs=PKc6O>#FO@(him0@@S{3tP!Gnm)Qq9zqR)>mJBr7x1^<bVi3Gx<E<+%DwX`WlI
z^E(U=8Z&YJ)?$f|@fGvtKyDFDE-$5NW!EZf@s@N~9c`r8<fX7%0)0W@>*nU>BKgIv
zLt-AY!Nn|6Daf}77tx_3QMo3mW%+z~Sa`TPSk3IyC&>UN&AanGLbm;tPDuQH$Qlhl
zPa38kKH<g&BuGX^22UcDMJMLOQX$$Zo%CBpPIL1aKkH%^#mUnuHOnD!-z&9z>2Rm@
zUS7+w+}2?rnL(Z*3Z`ljL8V=xmt_|pN;T+AOiWZ&VRKwbk`Q5!D%n_yccD016*7V+
zzkde#`S~F_gYmpT91*0fD>hn-ggr@4HavR#|8=DwlyveWkCX#+!~K#myrZbt`tP$@
zuH9}%Yd44d4tGwfY@>czim-=kgA$qFh95sGu!*_T19IWR`s1%3u~W|5x6c<Q7doVz
z7Bqqb=pd!<Xe1>i0co-<C^wVGu9uC+A>LK78Hr7jB@+KlE1F~qiccxx3qX?_bXPeh
zRww83-Mp>ZOPa<1D3cLExrA&Q6t0TfVH&S63cmK{=#?MnfXeu(k}Olj_WY*~_KPCZ
zTvxYNsctp{ci&OFs!By$W{9<FgZO`WU;KI+^(=wsiZ0lGB#T=XDQ?Ai5b{+XW&ri5
zKni0xLz>T)i&ed@>qt*-2zD>}=)Jus8ZQ8Dg*e)Ump99K089<QHz*MjfWj!-S%=Xq
zL90Bk(=DlkBzA+02@4GO?5r&B^WC24G;{op=Nm#Azs`paIQ(M!qBFNJg7E-Kt(4A%
zNx<5lEzHj!FSk9Ky?M#7@j-84qd)!>&cXqQBX-95iR*$FLE_>FGV+rrS?@x#ainZ*
zD}sXF0h|vAx6CVq_6to25Ye2Vkn@IIFb4j{o`%5T(a}ns70Ao{AB7^$>e~eR5ca`l
zFLO=Q(LpOLg@d~iJk}AxoyeyVl{{&QYKc<>i~8}$;=N%FMiprvH~8vg)5X7oII;Pf
z-+HDD&?O#u*IB_6avJQjZ3$v7kCqQs8dDR{i{=Cc{x8a1-ClzLshAjBJwhrzDFY~k
z+%vZQwg}X%1W6+3zv3QHcPeFxK_!H;E?~-gxl+Txy$~XJ;5J<#F_bT$f+0MYH$3n*
z?ux?KHVz{u+g%c+xmzSwlmP}AfjSK&fYk=A7iWk`asOK)Ay>wpZt;M7GC}9U%1XAU
zgFvW(Hci9f=YXuayu1vo0={+Jw6Upp-_CR;>HDs1Ava^((8nN4#g!qgGR<%y4U&#_
zU=*L-yc$&{K$|{PeE1GfTQxuSqb+!$d}1<-&P1=n?6*AM>yxPc<q(Bhwp2#--KAE3
zKnnm!UfFVqdI6BC*4r-$(b9eu&H>O>!#1$SoRX4qzA*4HIueO=Mu#jAmI>O;*8wR6
z=upWGd2v8WPA+OY`_{fhpl1$1g0rNU-3WY^D*fh@^F5uv@`6cXKRUev?NO>-W4Q*E
zP4eKxDy)WcoFk?B8wrTpVY4Nr%f(l};pW&`orawE*Alg&r8l-Wlk#Ir6+kW1s5rd|
zbbaYMje%22@#OCIx;CLmLDUZ^{e5hHJ_D6{keI^L+nFwjBse65$9AfJSY+<*1&~Cn
zbiC^uNQ9CJduuXb<pHc@)gO||1ll@YmyMza7(%I-AN>^T(MCyWfq*w>R}l<=C09}j
zkj?o*1D<!XhyN}uu8b39b9(UuUVIk>-|UCe82{pu1vA>162M-~CmhJ?ZawJQ#NVoC
zk!I-SdidB8%XsXV0MTxST-d!(?sB2g0r<PqWm^ScuiL}vuV1~A+yn&9qTfxxTJ23&
z7I<c?%>#_)dA*GM-f%ki$jC^e-NJOUi-kgHdbfHPz;B?izCV8)2VIz^wDtD@N5#_u
z(y1Jzo4dQ1%NABqm%@5{vf2<PA$uXCFOUF{3%TaT>4?3m%>tAKLXInO7mve5`OM3U
z13e^`9Z(fGU<w`w7^!v{pK*8C=g%lYc!0;|F6wu1xRUKiEVX$h;*cDShQ6TOxf&Y>
z>3hI(M1kbxTTM;AXZAk@tbQ_6raIf-r%UcZ4vl*O<$eyA7ot^-N4q}TqcA###}4A>
zh7HTIGm{cSPKZ!zuZTw_7fl2FjJgD;xr6gcKY<iU{XHEs78X`reFL*bN$xFlV|;vE
zuog%J;bJ1J6>dWWy2B$)D~<ukt9a`aHV~NUKTGAoz-HL!;G<d1?zzHCl_Xu{`R6|j
zbo^Dg6JKlhd$w&q6~=5X@BO54p|p(jiEX4^(PV)VF|Rg*i>M2>hNJKC80Sw6J8<Ec
z!Wure*_lB0zB%)-VUrq#geoz=|DeEqy67&y&6fLVv2pm?@bfBoxsi}t#H$s=?KSuI
zsF|q;UYqL{Rsp6PDPP;_Rxx<=Wb}Mghq0qrrks#v_xHgFH!R3|@raOU6{dE*PlotI
z1tbr$^5wo;Z$KarMts1-JzMohD=XbXxp-iPxh7yqyN8E|syQM|dJU`&HUJz>{RUiL
zD>kj8L(HrONF3W(=4WTWhJ=)*7lEJqJ<0@<B0zjTuB!394uO}aw)x$Fl`+lD&*<_6
z`M2vc*nR!{w8STg=K^cKeN(Fy`Y*~!n8!P4_My_WlDrM^j{4bW*1F8TR0i(rEwcS_
z(5FPAcKcl5(&RXU*M_Uc3$h7Rqo)U^7|oAQPO9|3`>LtEDG=7yp7uBrcXei_AR`-o
zcBxlWSg^}8rjJEOX;L-r>0)EEw+%BYL+F6QX>#3?#LBnng#=Qeu-#JPQP!#41-qZs
zuKEUL#UfR@2}!lw0dmYh4njMR{UoKZ&cD4kdTDWq_?3NAtKy`EmD%$5Gh=?uq4*Kp
z=!hP5tW-p0)fKVAk&FF>#b7BM_On_PiK^_hj0_8V)^nz-uUGz83rI)Z?2DybY4vdE
ziy>D`VV$eDA;hNuNOcJ>^2;G`sm;qzUq4F?sl@n%5F*B1Q~jhP;9;~iqO>%<_2&HY
zXr<JFN<>88&v)4EXC`p{aq!tc1nr)FF$yL%nOLljtoYh`iGRuBct`;rhQ!r>37Ys)
zrKZ*z@UR?{EyOMK9vk5Ls>&Ej90v=Hje3m~WgJeY5XVNZDLg<4-(~hQ$3@+7m4^_|
zVG$W~S<XolGeKcdtjYw5k}SL>=A_a+gSZ1p;~7gTYSD9%yqP0j7t|xWEUywJVL9R}
zv-4o&x0(cT^O4NHu&|K5h@srqliOdTH7ehTJyyxY65_>!dTtTyMA9Gf1x3J{s&6KQ
zK5NIKZUV(l05r-ZgV2J|u=AgI?TqEQn9(e9SA>QAp^?4l>FeYCC%brq!;fC~H8YIH
z?~bM5Lq3mMY@^D2-q@Vmx@X@#o3(wG1f~!yx6yWPvE0Lmg~dijwuH&raVSN3x7=>2
z#p}oCN7K_Hcg~@yLwCF+_ey{g7<IT)q=y{Nd-H+uVbk1~Zy-^*zzf0@r1HIEqRE{1
z+yK}aX_Dm-6VnUa5&Ft$9<>ylfNAz@_(w9=vJj=nfn2C^PQ_HBb+%HfB+H%W*Vb%C
z{6UN5-vmuJukVkIQaycq0DHIqp|rTT7@t}5L%TQc-$G0Pe)!-o2(2ssue0O5pDfkU
z3|UCt8UJ1jLk^>k#YTstremg+Q?<hH>kMi^Q>=;3oj1iw>AgG8c;90e&sNJ|c@EY!
z@8yPZXf}nXC6mZy5WjPC<K-;bFPa-7P?V*MC8N;<l7`68m>Gu|sc)E1K{C-rBL!r-
zZZ$Z}(4BNJs1^z2y*;qec;qS!_a{V!alM>r{9^*<^M|BC>yZrMqX|Jb?p)Pu9z;my
zLbRzMFD%5Fl&RR~n0M0H4X0-Wk6kr&RiP;<9W#6LR7VY2vCxY1pO%>ayh@O5t{kFi
zSnILdR2=+dQ1nD|^N|dv``aFs?AHCI+RSkr-nHMqXTN>&<4i7HaoJ{fKUy~Fi#dpL
zFNp`#Pd;nfGNWTnR7<u=3#Y=lDi!GUCK@j^PLfioKes5TIF&7f%ekUuFf_J#>Ebt+
zCI5>TGi4KqJh&_ji~m+Pu{z0|W7@H)ZfzgNWHtsw%yF94=R>Due<I*O#XEOPOGfS2
zD5yriT76w{dlX~FlpP|@(fT~E)e%&2qM<-LAKVYF8l@Z3M;jTb?Mil;BrWX}r~2=+
zp`e($)5u_nJ8yhYQyWX4gr-d)jS`EyWTWht!26X){r&M1{*NC&R?U+0`vtJqNT+pr
z%c*KP-1Yqn447wm7;{3ZyhRC759DClVS($@hwt<V?t1zp*36BOsw+)p<(M<=ui@*t
zG@VymE#?U<<#n4!`S!*#2yT8<p%Z8mGLoQd+23(+_88QQu$8iAgWKGS&*hq@3_00M
zm*j~BnKupOCIa0yx3L-|!#?OD%j0uvHW(G7cr4(>g@wp}`#r{_0p$Sz_V32m2~*KQ
zhf~d%MKDnx_fC(aDj62%J9d2makuqcKtPa0xG)1HU=AzwATLOLqWR?Luwjdw5P9fZ
z1RgAW^=jWNBU((Q*+bbPV0z#Hox7V%Od+9H5|$yX>IW|!O#J^EY_#!yH`p)LXzexB
zZja9F<b2ii8eO~wDzrHfcxii$??P1~2{|^~8S-A1DV2{!l<w(ZiOQIOl{@m}KW1du
z^7deP5B7h3G+&b;G?dHam(wmCB%!-Lz|YgBvr3ubxobX>T`m?>rCZRuiMj1HtvSi~
zchw|h&UfKMA=rC2*VjfZ&VE0B{AB7K1Jp<L%@zN9z=F}jh83CUUG%3<y*w9*`D~>l
zIC->ktu@oN^YB4S4iP-qx!kTmyfB>u3O*Sa5yW-Kj5VJP`n>6n_}N$iqgXt!+|4+F
zzaB18%wsbh1+=ql^r!C~-i5O0RPRkSD<US$DsbO@0!rALavbWxWP&alX5irQjEa>M
zfPMMh-)<Hw>$P|ssW;dPdJ!pOo+V)*=*lGEB{eEYtuBeg!TBN>*u5|uc>p#P@l+ZS
zecUYkQo~xm(*SdB80e6gN+^acZjj<We~|7fD`&kv?Sd@XFS%A~8=RgKHD>a|mqX*w
z&Bo3=b_>I$@SCt&?1MtE{?5@4qt(r!RFmGQ48hZt7PmdEN^m`}RDfZ%0M$zU^5sj1
z@AWOfbpg3EnuwECKp<_LeAi=tb{vld)XC1SCG5JB_W!r!0GtuXd`lPngTt_L-H1dL
zHSY3d&i5Kq&BnB*EXHu>esA{F<=!6#OC<m`mxK7X)YO)UKNios!Z6Cs&fUl*V20m5
zqwYj9@Z$VuwRs(ui?}U_um`v--FFM+rSKVpa`?PXh6P;`2yL9x{yqi@7ZHY6EQP4l
z3wpo1Qh%-R^e^uc&vY}t54BJzWv}7E@Pu3n3Yld21~LuqHpT~|Cz+dTkE6^~tT+<1
zUp01G#fweS;D=^TY<oZ4KxXHeM_?J;siYWern?*RlNwD7RP>ww-m70p11p!?2C1}Y
z?=$7FqTxs0lP+Y+?Odlx`3{shVZKl|<w}CxY+5TGIcu|oHWrSk?UgQqF&*HTjoBX_
zS~K@^?J#BV{-?k2zc1qCZh=<6HR_|i{KuBZ<);qM5>>iKcHSr#>B{6NyIeB6w)!as
zJ*V>A4l;i~Wg5J9T8{wNlhD-A=*DE#<=Zk_qyz}-=HOpj*W8lAm{~C!2Eq=qwHQs@
zriwG*>BjFPeSCcW!YT?%Zgw{c_$?^q4?b5u2J!eKSD_cq%8@U1Gu?EP2|uhNjWf-H
zZ#1k`hnlqO--n2Q-ddm?Z?8pt#M3p2ZA9gu>}6LJ(G&6J^S^ylV~^(W$Vj3r2@Dtw
zk*eR{bjTh*{!vf&O0Qxw?d&W`1zn+)MeC&R#p}Nh{KH7`NIX@{X8wp0mg~iAo`WTn
z{U+$&@9Pf(z;1%UZ~6_YIS;*g3Rd`425!!CvhM1tM;$VBzU|NKa8;GF9SZ3u3O$Z*
zm|Eg4J^um`%4hfgbPRqu6J(oDeWs}l$r}TYj#a7$^Ay!CPkvnN7-RbPKA)!)C?p=p
z5iTU>2|2`d(okYop}sQQdR4bc#vm+`zt+B42R+N3WbhlE;`;sPlhR$qg471=??sfB
z0_cU-!Gr*t!wS?7FU{WXxG$6VZPoodT9S^hctn54{jScX|2(>Za1pv>9M9!xH|;08
zjD@}Y*K8ETd&bZAEEC(VhlIqgWmNy0jVn^(lB7b(Gu93`4+eF!xo-9}9yoiG4PLCy
zb~m?t{fB~1zIVQNttb26o1wf6G}FzKDndazC_(TS2#K9`nX#0oRlI2{Lgp%l2MH47
zXg|GJ?zzR#n8ypx3k<A(YWLn(+Ew4uGoq4s4y>EvHoW$syT4ax>c+1>lK&@%Aq#w*
zpOdrSSOxPqUY(OFPyP<EN4zkvFl1s}@c6MA9a3Lj>Z!JOhY9sBW2tvu$oomJy2eJr
zzp)VoWnLXC_hI);cUci^F}AC%)TIgkRphz+Ui6%8n0A7j%I_QJvH#6d2b&n}k?73l
zEx{X}qEu=_KmTR>vW#h3Z||p}9wQ3{^*K3WiL-A+sXMR5C`9Pa4rIMXsP9?{4;P{h
zF&@s&=O5+=hE5ypb=~Ljm}7CCiGT_S4qBoUC&h1GI9I9@vB&SIqbUz1sddhE-u%2J
zCboO|x3vca#Zo?29+bAgZ!mjVrT6hpB8b%-ml)v$eKt4tMsKF&ePdJ#5xxJ&n|N9+
zweqtq-D~g0@yW?VxQch$*66CUYpqw_t-KbUl2rD_io_0rl-9lY!)Sd0gEHiGqs&Tw
z|93q|F+)|_?EL?n@eiRqR<76M0oTabNp9%$g-Q_hbgJc50&P9{0Fim)s8}KA5Z8pP
ztL^XW&`uAdNaV&)yR~|rXU@1?VoRJBXvHUH%dLVXC1Kh$t)H@UnRR}H*KFYOb!s6?
zO`U=F=FG5i*@!|@#z1EBw{XAj13n2U-F*SA&WHuLqL_z+>@AW`Fa0~SM#WZ5w2+W%
zKIXq{;SC${vyKy;V%P~qefn--{wM7-WSO6pBc_--X@-v>VR%js&$E~qza?jtGk$UA
z+m0Q_)$=Yk0|hzSgbF)r|MbpS8x<kybS;wPii-Zi`^7&S-)10(jijT!y&9{ruYq=f
z7A^a8R_iWS)kEKd%m6V*Y9|)D=dW#O7hH8o2X59d)_-+5;E?twj|H-FyJ{i=X{=;x
zg<I3iM<`bJx}F`hU%g8uK6LrFo%GMl>$ETH94ZjEiE8QAb6%qSOlMj1B8;~+q{zE@
z_jE;wpwaez^f7kS#q+S^7jS-lc}8WXK;F9g34Y#H>kgvMG+;<))e4UPb&So=24^q&
z_pB=&CAL2jwG@qMsGD>m8+Q9kLY@BC_MDEs@@&Vol`?lWBf}vs?bV=uc_{_%kX>?r
zOdUynx&6EIVP#qww28`3#GUW>@r@#oCwpG)PJ_w=GIZsF$mvl!x*8#;yjPzb#F*_8
zVa+z$F+C;8tihP{_5J*)8LQ@5TcnRF!Q8)-bsB2$t$x->P!%1(@8T@jV8VYx3rZM0
z>7zSY`kycLxV1<b{439hF|u36n-Y?2GVx#|BY8^30qERJ#-N@4d{0SxmF<$1M`awL
zez(6y_H7erd}`=lZ+WNuIqTu_<xO;>yuKmSu}u+$X4p;YQU&Gx?^zL&W*9N9&$cFn
z{H9%(>iTo(s1>?(Ui&M<W+kW-PvQ)pU&<zY>p>;&c@pdxlyQD`o~%=Rh-J1Ue<WSP
zz_CFer9w8t>cIcWw6205o-xqEKavrxC(6wD<~&rTKnm^O9y=6?j7gI>ONI7ib>R5w
zPKKz@#oe=mS>xcHq07ZD@!85JI)$XxDdHTduCl&21Nb$Iw6v@R79VpzO#YbCbaSgJ
zW*)i?ehri_lUIShuK)RWVbR8;y0okq@!vP3uRDgnsebpT!b3QBMc8F(Yx@pVNC#rX
z^67Zi^<1wKga^6`)SjT2c93KFUB_e=&;1x4Zt;Cyq~pTx&|m*@?Jk8S{NlxixjWzY
zMx6>P-KMuX-0ZCShW*0mxs!@ff3<)*v->Z-)6YL$R`=!n%eqi*+0J+(bsvNg+zj0N
zx*J2)HR}DgF_OyIwYm&R3bfbs?pvta{V*|GTQVJ1&&lp?(P(V!*b7WkQy1RUH2%>a
zzmyE=92Sbrubo}kuJoO@F}gba*UjChxw!^43gg;5ZX!nYM;s|3g@&d<_4tiHe+;+X
zUvw=x>uXMJ4{iSsD6aH~EY&VMQ^Z_ol?EqS9@LGXhwSdI5nri4a=(UxYEe1F!myv!
zmg@Z!(9uSGFws6SIkoaKv-h_+&A%RkfPc1U2(Z*`3{4k^#~9`d!DL6vznQ#BPTLwZ
zTt8WcK&xf0k#o%g3xcWf)2VV_j5@BJj!9;ISL=Du9al)J#_rCDecL__pB%q`)Vv4h
zg(YY1?d>(Ygc~T{#DBwmhmq|;nU@-6w_kBWm|*k)#$Qc<^S}P}H>a-%B@~}1JkWsl
zoLke?3&#6B#Ql#tGU`vo>sUGY>g;x@Bg4;|uyNY%`;Y2mjhDJJAMNe|X_urMt^A|9
z9Nj#T#d675!&?zAL5o`C)R(|!-5hu2X2$f4qKxBl&KGE^ahDX7uTO246DAUS$7^!p
z)qghF;W7_BY4g3l?_VvnOSZ#3w=rt?V$6Gj{9VOhllr$E2L<I1;VY-tzaBi1tf_&Q
zmpAz|l(P083rw0d`9I}bq+EC0cQ3@3C+zmrhJSZ3&hFj?N*g{qyk>}UViwca9<&|I
zK2OB_{o4%}<W`I#+5=`i`dt<`no3Fv-FG;K?%P(~i~M{PN?r@aMkn`kKIdJhrU?+e
zXcKqX%_d&|_s|B)RjXW-3;nWij0YDskX(oFNZrHhG5vaA+i(0`xmj8YG-piVZQW%K
zlZ>g^@0;_{v<X%XA-|0LBVwaeoZPfa)mGD`^DTg8asp_6NQ$o1itn>yZ}Qi;W#(=s
zq@+IE7)W~hKtqn8l@6_gaCHRJ_b4qrP&17I91q<7A%1On+3<h+-jYG<QQeh3(IZ!8
zYwK4Mm{pAWAY~M`Vh^?n!zcfXGy#IIK#u>0HvpG$9{taWQ3{{`e?w8?=wC`a-bu^O
zZdZg`19^+dJ%Kks7BC3P)-*<@r&SCs?d-BUB_w5BfXa1Ggs@tsQj6TVySby+=_a&G
zE;hd>Vv@>i;>U{j&V(k3!Lp#s=4b{R=_vyqyT;VwuP*~xb>if@H6Pq}rr@*PU;hh_
zpQofyfaK6@Fh$t&Y$}<wk&xBU33&^2pf_yy$0uG-Dx@$kT?HtoPcduM&4zQQ;*bdn
z+8lndIrP}(0Gk^dD{Nwu^6J)^J}qb#@j4|J@}3`F%#tT8T^_}<zgP^u!J$}a-u|6)
zCo6g=x?JNIJNkIA^L)%{7w+((s;$<#*>Bob)aNqM(iu~~r||<|c0r%Y&UiV;DZ^Ni
zR;dO){i&Kr?K}iW7K&@qt2_*;M)`+{l?J1bNbnD)lz+2d=WE=X*=^Exs@&DDR^bf@
z=u}>ChmP-P9y4o~O;o+Jpx0sy(W^IK4|cIA(`E%#yPx-BTPHK=`TzKxhh>T)+~`oc
zrr)A*jT^l?b8>U%GlFEp3Y*T?S}22Cm!tp_VbWdVgsa>;Y<)`bIQz9wZK=!Ap`CYX
zyZ>Fp|38nU?Ke10p7;B^$%;%K#n28hu?LmxtDzaFY3YQ1Fu49<uE`9V8M<9opUEts
zvw@M>XxZ)yM*`(cauM&{6Svq`1$_ggBHnBI=Ony@?1oP3(|1cZID~B4`u7^y0lRkd
zEql{TeZm)Hte}RhwyeFii#vv!7umUPrKV?1;Yr2GEJsSwGZk90R+&u2bF~lsOQA5B
zLCbia2_ZatFrkObXEcky$|yWCvH-f$;cqunhB(Y#NG{vtP;>0rJ#Rb|%Wu!*vMUY@
z47@GMX}=*C@cp&Eyk1Y*P&T>^2<`PYM|pW&vMk9*!me%dwFHaK5dX&<2CV~|SHNCn
z7}c*ZfU>h?W@f792n99VULi1PWMfl36#6PZt<x{K9~P_^OjUrw6D&9k*JFa><Hx@a
zOmY~yb^4zkRy1Rdn3>RG;;~Ajmq~|f)IF->h)k&(&SrSgSk)Z-6yE8)ezAlOvoyl%
zYbd91mpQOXSYJZpZKeOp-k?l6L%?y^kNrhk6m?NIHyXn2pnkD0SVF6FC{hPK2{&eJ
zE9UNJn@o1Uo@eVpXbZF>&%`}93U3b3T|d;A!A9{_GC83R50Z7q9wLwlClI(uZIxOx
zJ!Ydha;EishmGTCqOz~lMdwibB)_sOO`t`4#78n_cg+31+Uk^>u*$G$O+_{~Cht~j
zxsk|f<@@P(&^Cg4vCWR(<JIA!Pu!?x=cAxf8XHnluaTB>lKr`WB!a5tKSW~AQ9xCw
z`-Xr;dpNM+YYe<5c@J;9`nPC^!dG?%F3X)~^ENHacmb0?eBL73#>|KI_^lT;hb2{<
zfWGy@{ASFQsO-18_eoV=Ee&?IcEo|8uJ)ykRKKD@cIc>~_CeC+`g==*Wo{N%Ax~Jv
z1f4Q@cISStTb*kUiM959uE|iPl-)##I<NQo7}ednk<fqBI8&Zdj9gu`H$g}jLW}T(
zA`$y$mK14O*~{H!MBug`xOmuXH6hvK$P<fv>gcYuk!8k~S-+4mIWr?eNGQ4F5Nxx&
zPweAvcQoBj7;Lk++u-hghmPaq(#q$w$T%2~TB$#joLa5sG<w^kQ>{-j*4R38YO%*>
zzn=fvi?H3twZn6D|3quAWV5~1U0=Y1o{P)4|A*KMN>66{9M<VM$GsGvRGdnk>JMDj
z`_gdY=U;+?79I2pq(e@~?J3}KalcnOeew5*NJy%{wVYx(2Q#fVC96SY+SQVr1eds*
z!Uiqpi?uegkQ{@O(vbysCY2(En-254Eu&7~nF_<Isp?Bb4xO3#MXvWcb2XccdR3@w
z!U96T!I|IV1?Y90r-W=!sEdWNQM<8KbVfZRN&+Q6#uFGsSkzUmh6xjcfK~eEamSLd
zgMO!i>dgx>aAnJ0;c-Fe3*rxjmfxwmWYqIII{c?A=FCTRzxix8jMIdqW$LMc`;-N_
z{MV)iwe*XXNEX@^eT2w0Lv2znzm*FrM|d_$j#QO?`V>zmCI-~>l+K^^!%z+6bXnPS
zDi=)6%`fg2bXu6pG%H8@PweNTNUG|aMBPfkqHo@QzM*&@Lt?ei0rWiE$l{R787Yo^
z8lRl8C^Vw_pi!e#ABuhWa6F0LqqV=k&omPg5s{yo!e$_6MC-c07(JND>%i;yCro*7
z#?^Lat+<ucEOJpRZ>v4mb0mpLFUNSSx%S?GC&0blnwMVrS_dJ`*xsXGrcKKKX%Jao
zzS9k;Zj$57`1e4c3uMK?qjB%7<JohZlt!SwlRd``9sl+Fk>88`1sc~gJpS-Yw&`|@
zBRf6*QHXG@^gzN?E7GJyZpWG0ZFkCKeVrkS{CeZKVD6M)b0AS?<Y(dOM4hgp*PY-g
zp_5TjiC{mIJ;hPHrZnZ}snXk<gkI&0_JGTnD(t-fbBmx6MC%h_AD<$=U@^n5)0?8T
zQqZ8wVP=Dg2y(lHn)nXw!oDc0#Qc2fb|Wv&8vgw+?}vaRac}KTu9{uUc`U~~cb;uJ
zO#K(n@7M9rrq!LHLI^qss^l76nIK{=P-Lga_}=c~N-6+t5Oc?hFx>Oa783|BX^)+Q
zp%13k4&36$u}NryZ2}IL-^mqK5k9aL(>Rrdz+=6=?$ezhV`F0q(X)y*jcASE+)x!q
zo95Of0lyOgHlTa`Xx8t?ve@3yN+)CgLWkRAhp2Gr?c5|okwU7~Tnk%~RD^+NyQj)?
zbxXN^plWB-;TzB9bD_i0p2UZk?0aDczK^}1;Ii{-#mOE@VNqSk)r{6i7P~`NPaq;7
zaK773&K7Ra_*(cOu%Rsga+su}F(s!8%Mt4d?nxRtBYo?MOnOepkyQW%(Z|>=HHh}e
zFM?%4WKL5maWFAS#m%MLY(49#`5X5p@3YzB<%Zc<BM4ahKR(zi{9yW#zka$uxBlbv
zXQ0(!(m652&DYmo;|?gz0*t}?AOjzO%CoZ{9ZUM&jH%o@huC`VWQ&~^GoyC;@;{}5
zMUGaE+X7-!ZY~d19_6>4j2`GUfqrkE-!As-Y3Y|4cDkGWY}2LhrBAX`7o_t@IvdB)
z*c$SgC7%0Xw>(+cq}8_YTQk2f!vOSNwp1eUOF?f`z@OiSX{?{MMNkziR_7-B7+{8F
z2GGOwNroi{eW={=SYSIov$pru?~c-R-R6@`2cN}!Dde=|cTDTA9hk%-x%`)QgEkIF
zEd2Js!Op;i6R0W$hk=NZTUSQCB|ZrWm)+o#!`lhn0>xkg;N+BKCh}lU2fX|(rfT87
zCjuY(uDisKqhCFHlpO3-4(R%JEA;`#`ChKW!OO+~=exf@Sm-&m&`rta^y8xYrWshZ
znrg_glLz<?28K7{Jd0q*;9X|r*3N*Ax_6}0<4_OV1*y;^0_W|~$wI40yx6>~u}$d?
zznd2O5e41rT7Y6CGaFp&&2U)b&>NI1oHtvyq3aHB9aG4^*I_rv<xtcwgXivr{@MdZ
zau~i1Rlh-`Qs>1IQngv6T)LJB)=H)Fczh(b%3lhlc0k&ini`3wuo&g}XYVeyatJX;
zh>@jm=n|2V4*l0VK1WFoYH^vMMW5;Vq}vBP=p&V+z67nU8Qa+&i1~WL^a3?{XhJWB
zAj=ny4ok(NjkkzNboMkFybQ+sZ+8a^GbheS8w&^3N3Qj|Rl2oi1$f~;;U~HZ!J4gV
z!~I{MprhAYPgYruuK{ya`1LGL0Xf`H-AsqMZMW3+6JGB=xyAN^Qdrb?N22I+!de~>
z4H?7oEW;Cw*{6y%r-p~KP?f82dN}oI2eF?RHaN3Am4}xnr5?5B3sdm3v9d-83v3Oi
zM;bTj9oi>tYY1+d;bl4t->h~Cv*()?dd;!SqcK1e^c8M6uXS^k99Mo8n41&W=rAm4
z99@0yQcS5FNMxW49!gq!FDpA_v{u86OF*I^pAuB?8vgtRri-hq^-{w-;N0(!mLnf0
zXVKeiDbBnucGnENWBVYa0Z6*pFx9^O?2Hyyw4EWAB8E7fhrjXm8Dn;ESXh|s3re9B
zM)?KAmb=~R8h%o@R+R>P@|0pT-1U&rk<}<~EyT?RPdHyjNg3$>wFg)G(^P$(;E$kb
zc0E~_y|-B&FWtCn_1IWpUu^Zs)C&W+U^Qin`=0JM$5%o<b&r5^PK%1x%b3n$V&YA2
zl102u!f-Nzf?iHt0-4Nz|6c%&UHF*Z{z=g(fa+r2CyM~DX0+2pBBe!nWmWGY99C%C
zToA}rdy0~KqQO!x!lBNU{PM%Q8;=X!S}yAs#lEDty9_w&TcZ8Od>lPA@_pMUMVQ#6
zcd=rW%sNh-e0&|w*SG~2ld4$Dv4qioa&UMpw09D=0JyRLGZz2&=KL8JmZ_-+Q{A_I
zYKSajWKmII;HMm*&)VPfA3ghXR1=fHhh@B2t{vBbix0|N(tOycvKO84Vivo8rcW^@
zZJ>;6UN;xmPbCyK@maL;o@r6X1IJjT8Kb^OM}-w$1?icuuWxSJp0K5K(sDqHiL92%
z$;cA^%zpQaY`t-Vvuj9~j-{XK09}c%aB+QaXI~XP7fO0^bpsLbFI0uG%i@p|y>$#*
zQzX!>*%$XUo(<!~Yh85hbUNu)uUecM76DLPNGPIFa(+HH_eWq*=y3-L1;zc3Q?X#>
z(PZY8X1~a_abuhqpmW}AFxex~Y{m7AI`PQXRQl`0;xlJHKKCScVj_~MQavNX9rrtM
zZLb?}mVCa=Y|n+Tn%{O&`aZ#!US()83+<GE-Jr$T?t)Cvu+6i>YhCD2>;LvzQW>z>
zt_)h;&z-9e$y?p*joO`?bC!hA(4Le`tBYbz33wccHU-3Txkk*eXjk}NUR1U=ie|BB
zvum{g{=YE^9VmwJB`SYbG}7t!u;@a<DVL#f8xwr8CkAnL^X>x9Yqq6an;pLQb>^Ej
zVPTHf|F^3mEJAlD3B`MR>8+QIJAM5~;pJ{;V}Z__*@(SF&UFUP{8B;h|7ZzEi`@?j
z5rQGRD?KNC&F;+)S}t$B_PA016Sl$y6QC+&<v_CW9+qTg)Z!R}lZsRoFIv)J!$W$$
zs;$b}MaZ3}7pdkwjnuJSYRe&I9+k8B7O%q0CT<TjmlwU0J<|QBe1aQJ^oXrbTo!#u
zZsOCMx~9A_qAM(Cg#Q|a_wvzL=@25Zj|sM^0DxJC*TUh2UB=zj@f}>TI)P4crNb@J
zr_>ZNVOV2?w244Xl6@gsZO}{$QTWx}ofLVU)WWFMG7OESWKzeqE^|sW2jCR30u{cj
z)4Mb*Gh)(mteP#*>Exsdb?gkVFy)p~W32elH`lBI<Sy2&+TjsVg-{xq*maE@{%Rw2
zk)0jQlj8z(edUOCh=_kb8>sVrq@e9=O_2NcM9*ni=JuicNV73MhVS-h1_c4h?)j~5
zsER>Q5Nf+oyQyjI>$3y#4;@Dh4eo$6aB<@O^N-i%#Yq3B$2ZtSTsEU$_?N4J8mUrn
zQvCJJP34D{Fp9d7|Kv#l7d$!;t~p?Py{+*wj}#Wj5_J2b@hv1e<7{U>aDnh}+OZ;P
z>=U8T|B=+&Ds?eN$ZLtP3EkW*74OKN_Ew@fvP}<rpQh=GY+==9hFD7VAB~n)oT+7S
zQ6RBUjyTz>=l_3Hon=6j>(=*;Ep9<UrBq5OX{4nF1nF++?vl;{R6@F2x^w6b0qO4U
z9GYRMq26mh=jc8!ANa&DGxxpjb*=cX-&$_~u|=ee`OkW8@hx;l1xoltAn@%0{{A<o
zC+4%KM3Y6TwWi<frR~5EnZCYq<N-4fsz*`;Qk*fYcI>&jHOuopLsZ8R4^QS`f576h
zp`EnKJiu~pb5$}6NzVR7D99EYDO;{aEE&u$(-+?0c_3|KB06ryW;T(}Vs`#|At@py
zA@w!fV|`Hju>ClvBJAx^Ok99BMC(^!fupB_ol)Kl$Wfc2*JU<sYA$aYb>V*%Y1aq1
zO%C~?5xrd?as1E8cV!GWjTt=(Ws!pAhK{d{S8N?wBVwO;-eA|4>rJPBKm4v_&M{G}
zz#$Uy<95uv#J0bqH+I18%K%6a+)npJ9u<a%%O%yFs8^XeA<l=#9PD?umYeRQ#e&qH
zNhCbIeL$;WBG*QtogsIwR&QNO-6<OOx-oC56YGFFskEweSjIzwDJ6xk+;Gs!(9lpv
zXDD5Xpz}F}QnRG%G0Gu}h9NThN`j3#EPq+8Km^t_3DXpt2pN>Y#*PG1)=^tHv!Qy0
zMSrkxru*@3yaM)H8QM=JPuG<->rXTqJy?YN=G01UY@(EkG%MXZb}t%O=xgR{_BG@Z
zcpIH>g2Lw)3-vdxtjaDpUQCl0H8t_Ql}Y??K}WRrvV2o6j2t<8HTB8#MTN`i3<#L$
zRhts@v|a0<XLn~9fufI#*#`sv=uDz+b74uBjG8`c$Ym|=2!%oesU`@36$*tHsos@6
z;zfHLA??_*m;J}+GBhQ^S5)6sm%MmyP*aqYG#gyt|L}qaYHoYGFh4c*Nt__h9G!K(
zSX%)^Zyu?_+5K^m+%m*7|3o{rF3uZ0Ng~im{J|7@g(^a*rH+N3z)RG~x_M3F(~$=X
zxu2iay`p|c#Od15l-%?&(wfOsA*Vl%zJJ|rBY_9H0nW9WdOh^U_T0d|`qSCz=~1I7
zD%Aj6$$jNu627J!Yy7Px+LIfg*{{<PkEW42z&H_+k=~+@3DBpq=X^Ab&@roU5fG7=
zb9d)~>Iy!jp`%m0$v{t25PZ8I3zJ#A`G(l&mAQbez@Fkbg@J^=zfQndIlPOdAk+Lz
zD_S$ZNWGkt18N${$j7_YHJZ}{G6YJQqz@@szP`R09n$Zekx|Kyv&Mm?8~rzTIgSYR
z!sG0De?R1#FzN@oMZQ+gYvzRxk&hoAzZ`Q~%Poz}>F-NmBUoqj!`xM`r_>!;#_kNA
znx19+)bK-|Mw=w1wmfIC4&IU3<FD^$X=#bipgPdc=>GY3ArOCn#_<E^-|b>Mlf^3$
zdLZFrY)sa!-7mF2`pR2h)jOM}`2F6xImbbJ$1nMgZJSZelitjwrPO3i?!F)8ODoZd
zQ5!>}tDTrIwNk}WOp0BAN8tIqW*}*g1o^^1GDIog{^foah}1{xE-{I6G&Uw-+GKv1
z$m2^X5&owA7^xlV^eovLJHLs!zeQ>XQy{+H-aMYC<XY_dcZiBX`rW;moLylrd%JLq
z&(P>Ro>Vn+e3P^+h$<kt6x)*|<U=imM`BaWC9%5<^qGR=v)*MhEjhU<cJkPNRk+*S
zYO&7r;7bN&c6P;+3}39%v)GN+a%1UBr;RzLRmzTEzbt0UN)_Q{8cqU!np>>YEAzgJ
zy9us{a{i;mSq_*V<~D7LbV6}3oMoejQAjNply_J02BSIkXEHsF`?;OhDoRVAwI5Zi
zFE&G!78y_2jMj$0!5B=$CzhV$w2$mo>W!7<)a0X8hBdEV1l?qmnzn%;f<O3lzwNS`
z1k%uKFXj3H;(D&rm+Ku50||vadmye;jqR$Vh6Y_yk4=W3ot-5Kq{MpQD@DaiOLaDv
zy=(CW4;}uW%BV8Ewh1?<gCIh7+5X{31^2-DTBw9cZ#$u2TCdpmn1>1({n%U);?ha)
zCkh6=PRvz$sz3JUEY>iQZS-loBl@z82Z;|BN`u+?^Vrx(7zK7{lBeHC6a47$=PVcJ
za@y0?vnVsX)N&DPt1IU7aL?h`ox2ER)NU?<!OlRIY8u%&niCu!A8+12!`I}gkibOp
ze<r)cC#v_O4Z<`M-F2I*tH~-8etK&FTQdmf;JzRB#mD{X=y+pvl6&Am!__YmiDL>j
zoCF+N`F})X!(WSvH2J;wte+cLrvOQ+b`XO>Z}R-&AR{}wavl%x!coUG*JyKNW2`h>
zTv`+%X`-Ss>79m!X0ma5rl##uk}bWzevNf>_|oL=SAO|&cdrr*|1`9&mDlNoQ(!#U
z3J=fwVKY830HNWcVI}u=Q>zgj&UibZR3Ohl$}=}J<BOT0XUGe^22--AtE)WMzL#Ix
z2L4W=OtTCdwVjL_QY|SdS+YuuF|+?`cW=-00%aCuJAyf)<xN3CFX0#1G?<ziIsDNt
zL{qKObh6lir7ro&<Hzfx^HeL)z<BjfaS3sV7(XB1e0Blt_@RNGW}IhsNbdzb@sGs+
z+_GF-8cd^Yc9|{F9#AqlLtYd}y_&c{odk|Z2&8y`P69&A!#VH5`I(x^Rv*o9_vKeX
z{5w!{+@%9X#^K4yPzku}e|*L{qwM3<cpR23X0jPhd+WYC1~ghbp?p6YHEW{`&ku_7
z0`I(Hrgphg^y;CY@N2BpmtD@}&mVD^^FZgB^|tQ(H`wAAmO;Ix_EF$?U9jebCz|qx
z#rD-utHbq_fly5~`JunR|Hah>b|M;C<%hQd0)ie_=L7t{QH-8nK*>h|#pBkY_}_o@
zI^5zf)(qxtRYL*eAgFKOfcbT)U%3-`Xfo5ie+4g3;79mxQ;g&myPm>X3>>BJtIfP$
z`#tJ^=g#ZKtw&AiVIN`%X8rGWT?IH;|N76D1;6=S|Ist#{F3TREmv{WyTjZ}$ky|3
zPb^I9@h`=)uEZqpx-y)u?*Dn+GhF`rS1Kj{HjB2<@0oag6ixY~NU%o-ZJ_i&pTmpw
zhy*<q%9A|2xT_?QwW4&M_y+pl?|J8rD8a4&9aQ&9qYU2Oatr}sA}oPf0p*^y{+Cs4
z-_(F%hrQks-#z#r?hJpzh4o)Ufv0P^Y5@_3!a6}LxbpA%$1@+^+qy;1{8#T|D#mCU
z&Jomm^@xb08ZB!uin$<O_nTWZMqaIw_b=g(4;s#&-duA;?oT<#)L~w)kY(FSns^^1
z;d_KG{u1i^_fp(}GhF;_5|BtCj{C_s`dz9Q>5|<ofo7q38%>}eGn|&4ZbdQajSGQd
zaid*Af|-TIkIiOvEh|WO$q3_9WN<LeAjzjp1t?lX%lW^Tq#}#?!9#1bq<EWA^Y0Dy
zslw4Lg_{Lf&2#qYpQ?o)sE-FAusoU&VVzyLF+R4&1@d3N{PjOqc!Y3~aERxn{YJK2
zYM~VB>KfJ7iQ)Lr)swyA9sN{m<<(fSt1p_Ov-wn+eA_H1(n{Q6fu!kFXJaCu9EE4H
z@0vFswUs&~UVh1!P*1irp2KrOQ%CnwxIlDPZ#t(J%bnASduxwlHo~VzW<R;eR^I)}
z@jwW6(y8A{O6Yn6`xVA6p15px$$3rBSy&{ruv?*{QcM;7LM`47=E3E1d{S)JOyZij
zUctzei_5{B5Nxb%$$8@189y}GwBb@7{bH)jB-S^`LVkC$eqeHe>7;#zjBh@9DvIip
z<+|uG&vcyR<KcgAIoI%|dX9&*=Upw5V*3PQq8IXJpJodOFtrFm6kH|NZRD7qL2gQQ
z!!;_WzEior!ha^!D|ge9M&h}UQq|2`U-XgG#c2t>8a*uxb#$ePBMb&0`L_CFd-rnC
znr{ahKi)m-4Srh~u;Gt<;{48hRy9m5;dd>dx&SMxid;L=3^`dec*VGR@XJ>uVY5dq
z*TIsY^Pb}QdaGvjT?_%p4b@0#Q}UN4aKjElH8K#Bvx9RfWi51mQ1~#>lfEG9P_2{e
z89|!RM~`xfPJUGRGdzkcoZz$Ob=Yb4`t#%fK^TEWFUQ&ijNqYEv19y)FNGFzOnR~V
zIp7*AsRZd%=p=KiCnb$q{6J4wFAELzpI1m7$ExmJr*u$hR#wyzO`5(gQ~vz7$Jw6q
zxJT5Xyso|MRG>qrg#^Bpvu*fCZANRd*iBkYU(Z{^gmE>LnT|;$ZNX!DN$mqJPvbtC
zl-WVs$-LAlqcrx)Z(5!njjMB&`{h)v*($x#TjB&AUBaw81O#k6rD5z5uC){T%964#
zqBl)tr++PQY3t+rfAN?I2*FpEKDRj*E1p@eMYEf9U|?(DZ7cKZb-cU=ZSyU(?2dnZ
zhnJea!sjavW)p1gf+6oaYO0yqPcw+fXpiZ9Y@7Mq=?_mf@4&GBA$*BC2bjz8|EP4g
zQ7fVQk;u;2`qnGvI=LyWf<tCrJPI;8N~k2U9wznpIhpxTm7=bAis>6S!?!4c<yF`i
zWmX%m@d+(c?n!6lzV_hah3(P8*-q%IBuzafR+*o@p{hwlRL~9fnwHXwIhu{ya$gVB
zh4XOo(%GVio2$enI%XtCT%))c{8p4)m6j9A<-*d#*!9|Our&?O_x6u?ZtMHqW9{_y
z7se+|n$XXcz0Do$F|}qfv}4%=ql1^{JMEpckVsK-r01hvG}PQZ4sE|C|2Nk6pWkov
zegK6g$Evb(QArNUF4E;BDcs^Ao$JrifjwC}rZ94paueXgtSvI@Mlx!-Q;Od6KVmcN
z_u(Fc*4b+#h_SgwR`-rzU(f&O3HXhX^3FsyKTHlzwX>b8yR&e|Cqrzu=E)hD6KFZA
zs&q2HB`n&?+;4znPeo}?>meu41~B$b4`*R#lts7K=WJy6dYL;lP{gnaJ_uzDEz@99
zwEDX;=4!gQ(c9_zsgl1<`)kg*S0~)LTq0u@cN=w7-#e8P?BvrCCuF#qZt$VU{t-TT
zF@PFG(uE)=NvQF(p~9!F5(MnwLh`LuI3GPrU4|;Ay4txtDh67s$H<Wq6dJs$RYtEW
zy4ZEtd%;airt%{0<!#M{cX-FIZA@CW=p3yqSnU3MQVF~I`g6t!!XwX{CVmVR;lKQo
z$vsE6VNO4ICk-T<I+XMUTD1<i21UtT2$a)Q0v*ghCPIrge*hTMh3oP{C$^Oak7Z07
z!`f=7wF=1=!AqXF%HRt|0n{JsOx33j_8PdNl5HBYy>~rsxeiQGYbT_Kq;xqv<i6Te
z41>Gpc88r*XM$0ADP3G-fvJv_ntq!zHh1rtU$L(Tf|@t~KH1lu>_-n0CR3H>9@0I&
zy{X?WTb`!jWLi;7=1%>Us;sN+PSQVr<bLu@pP*MwopL>&qA??N^rtd7`OpzJ_I5)n
zgT}msm+Xw3nNOm*2e&e;E$o45MM>dXC<R^&e)yly>-NtmgMZ-H=o!B076Ubn?75{W
zcc#?@w){R?gi~shKa*1=KZT9laKkZUK}$!w$T?b^QFZiI)`nwPc=J8rrl{|#K&h{C
z_zYKEebEJ%RN1fmQpA*Z417G3=4%t*^6Exj%d}$0P%Br|{Qs)ai%V;PE}?F4h*Psv
zm0#u2SdFnLDJY0M#&$DLi)EDpllzuvCw;avOnE}4WkV8k-fz0OBjeV~jBo7To&GV~
z*F{&?cUjZ6;v?2m=-&=8A8Z*}EtNMg-@nBz+!FW`g$%{D;t&Qc(GkYGqGNJe1(l<o
z4b6Z!N%GAF4k3>!OK(|w0GAFr=ARerQIOp2&rf{BRjxq7K<0`jJozmpI4G#xpj*$#
zNEb{L!(ji04hD|_8b?k}Zh1NF&6_vF!*Y@da`9hRVFRgm$A)xKlEdYVP-PaD<L`$h
z-%G-lel8+o{+oG%_hUu_GvtDT`q<bC1O)Ymhb3SrGfVDqKgUB>W|Q;K;k}>6w6uv}
zau@C4gR85X_&>hC%XuZUm5i+I+r8_uPipvdpUyW2Nj`kI8&v#KG^ZsxcdfrGb(v4F
z8eR@GG+9}du)(vqimUZM%4Dx%&^G`hfwIMhI;jVnXNkkqyl|2x^-}5%+ca(W7hZjg
zYpYmU&yzx-Rb^$Tx7XPJ22}>6IK~&(D6wI@2O2@raEdF~%;TBO5d28YslG$6zTKQl
z?Dib4=5?JALeBeFO!I$^W&;S0nOud?UHo<pFttTNkI1$uYps3=d-v)huw3)kMEvw+
z+hiQ8zI6)Qd#XG7e`3Vfk?AIZ_ZR|dU(Cz>ok~rG+m(7>+ta1;nvTp@XQAgNmUsmV
zBa;N?(COjQq&I>FWduE7;^%~2f9|M(8qR0AzO1$nLnyQjqizZEhH4UI?Qv_qs8vC0
zZDhb0MZTzdw5a?M`qt3qX!U-OI$2p6xN<3rjKbIx6YP(Bg@uIwjq>8-o0`6Ww)Mx4
z?=vv+?^XnPzs0+@g*Sc4D}_#{kG$=EZuF}^@Aa~#cg0fWe%v`SUQFqZrF9BDGbtTA
zyYIhuv5!3HS09f=Nr=Y|%v#5&gTxDAI0SLha<516lZL-AWMU~R<3|><`H$Rw#r!9;
zyBI6t&QO8AcNNUQRd~j4+#AD7{@%;*DCGB7_38^YT%|9vxVpZ6q4_S1tsCD<J}Num
zL+{47(;tmV&jjs@lirl1OQ;SP1O|~kATUr^#ON)_)6!gEOSFvysL<2U2}yG>kPWQ*
zk8k6r6k)>m(F_V9U+|WVG*F<kWS+J^eK>0TL9Hkm^>@tpVOF2~AI0t+xHO~BWaZ;?
zW+6!K`hKR+0bC{SZkw9H$nOt%$MccT9W@i2l6@8v_WSE!3b*h-1*?gsfB~TVJT<Bc
zh67G)nJa2Q>%@*!2BiV>e-i-xZV~?5NoJGGK{K;*YS!1uTam%P=P2*oS%T@MYW!Tc
zeI6|zv)uUh4PUbQEA$F#$LosMTzfc;RcJebSU#0S)E*A>4<W~n3{`j8rM?=K)<635
z$xJ`!V4C!I^aW@nJ)<Wg704W<#y3lXn5+KJ1Hivw^!gmVmpd$e{pG`=mhF{?9Ob5*
zn6Kb=JwA1!DMFQRWRIKUAb>ql?C}ka&3rt2{S}+pyH^PuPSP40b6+ox|F|&F8<d$3
zgtKENtV2ugt*b%K6N2%HYHmbEjEA{@&6d_wj*pFPjXYC{TOQpMi+l^PWNe1p6|b0s
zHYlYNBn$k!eH0XeeD_@-skprRbK{efvG{m28gb~?_rJvjrQLent>7(~EHr#=xz-my
z+TGm^a`#~kFwX|xZMZ%6|80q~shyc$&#6MCnhN7iX&|gS>b(!OBS~jN@aI3jBF~*c
z>t8W_T2?-zI97GYC=kxn-uVx0F|R9CEKfcQb#gHH(-Rl!V{_JI460Cngs4Pf)LwW!
zq(W$41JW$ZY{PX+l~pT$qEUE$pMQSB7FkWiIK<-lreG)G-cfni@aQX0IuJOjem;iE
z{sw<pp2IYsJ@`Y>ct{~z8bGrM{sc~`7^K4d=3%0g6Eeho2%+kgNC*+-*Ohx3HU%^d
zsR;@gMq@OVH^a#IX0j%EWeug61F@d?vhxJ=c25b=8g131d?H&8Ks}=-(Si@L)YQ}l
zlDSoK1;9m#rPJKFI9%STK47<=-<Ge;H%ki75N>w8-dKFeQj;T<z@C*O5<;|@3<OsE
zGI<ZIibM0q^X0g$7aE&yms(aRB=VreYQyR6xiiaTA_Qz!lF=}Y#_XA4uP^uW25OJ-
zfe>KJv|T(}IvH{eZm1Ipgc#x)#I=%Nq*0lW&t@@Za`V;4dePJQaBDayp5@8oi0tN^
z4146c{}~A%^!DO-_u{y?m<`trK9@yXdAip*h_A&6@A~w~AiP<zQ8>70wo1WC3)YZ_
zpB7IW6dVliy)*Lw$RC^z+)m-MDwWrai%r^1w$al6@VFX&u)9r_EElO&H#x(Z_a+B4
z>x+ttaGml40(-svBZ(m%S64oheX8Z;=-9~3-V{%G*?K53-^KX_M&-fQR@}<zP}AAg
zbR-@gy_P^QKoCU6NJ&ak%Ea65p`LKPpR}%FyIH)&;b=0i-mjR}ZoYm0`S58|_3uYb
z3+-N>I)dO%8IK_v8j4c511I*yi&tB43am00YegzK(|6G$RFqLB6YQ~G0kv}J{PKk(
z)mQH&#>Ny!DQR5;j6LWUNekF<jmGWCuh_l`NX0Z$T9fx9PBP{`Xt=vuNJ=UyDjFCV
zSXj_y%y72Vi}j^2d$j&V**|7I1hh*cD?11C<+GJW{UJo$mWx&Ws}uBDDxiET^Mgxh
z_z=`l!9@Lh6Vxvo+;*$6!<KIk1IEGhwTP}sn{e=L5+o@ZOa(Fm0s^P)TIv=%D{H2&
z`4d-H#4rDvn)jOlxS>RRx<HDAge!1!*WcVn8!J|*w@Tu=d-tv{$hLzS;K7OPql=*=
zU`9Z4)TkeiP6Ow~i}!#gR5COKhG#Wuoc+y``J6)TO#nJpk?X3f*xR?Bo}M!nW@g(J
za3OSjkBe<3KxGgKCI+3K_1ti>Tq1EJm`1&{>3Nn!>{d@&!(~^gzJuAg`|0jWvP6dj
zJ)63){rSekX8teBZ6b<P+Fu;wxzdCAY>_XZ$oV=47El1>bvwydD>56WQA*Fqz^#s?
zv6yMdGAvMj^QPr&f3aXo!)6+R3&0^MEN)eLmsmW!5>a$=wc^ow?Exp-)8A&QOWx)5
zXDdPl=KTS41WXI%2p3uwCbF5fCSkZnm#qRinUA;kT6d(M?QK}tkPrqw`40fe#K5OU
z9Jbt7J4^Ar$x}U!k%;cGUTlyn=S_il6w0+l&+c+qYjytmC7Ui44O%i6%hzsLp|j)p
zN?ED3+9{CB)4eP%%b6<8dMhG&XBQWx&yEWvrr5t-MrtentHz_uT=y)0U~6c2MjMpb
zlu@!Dg+G22Vq#*V5z`KMX^)m^iu!>H!Fdk#pII2?f+`cL7ro*ykV%Q8FQaKMjN^Tt
z+fATV{&*0Nnva7VO&(nO!0+EvEu@)z2Tb5Bat-hl8%ctc-?f0SFO03kXzi!{<|A)m
zOuU-6r!#dNlW2HFys4s=C$tlVN^UJz7eSOp{Xa@w`)9IxV^m<<>BteJr?D)`9oZF5
zJYPS2(&3YX!_5`T2>Y}*us7S%(jqM_jq^?ZW=Cx_dR7WQmIeo*3}a|)UIBDK_(6wM
zA{8|Iwex64a1@|PRwkAWn2z2Oaq7LF#97bR?+jWf@n{@bmnz+jDVn9)ww$bb;*+l^
z;KGsQ($nvU`BGA*-r?X)U<19${Td|`{Q!Jg@h=X54o79PKMPv~fRKe|H^5M+G(0xK
z3RMT}=`1t5&3+Oti%%IHw;6Z10ALOSpFUfrR;`$gij;$mt#R2S(spwsOM=e@;mw{L
zVTGPio9O{Mm^fXh`=iG5GX`g(7UOknS&bxo?w|AIeGq4)LV*jlZZL^St3W)4%s$Oh
zDEijHT%$zr4=x9w6svY^1eC-Yxf{S(oY#N*4+pUq2)ge%?T@dt69wQgd|a%QOoTxD
zrfhC67jJ9sBn;p<u&yq8;xnp=%DA2EH|nkD$FmqaY)^gYKYdL2?ln7mvB+Suecxnn
zgyGB!E;9RxnF_O)BqZ8p2HiVW`^R{6@0}0tKt11ieyKQO$`BcTl&*0(6rO>Q+x+dy
zY|FxXSM)h!m{^!9tIIPeJo#?JmYxPAyNnnMYuff0^*y9*qCAKqO{XAw$qot)w_wh`
zX&PtLxLrWmK&aI1SEi#M)c{89#q}iz5nezV^@`$XsP9{uGx;B$`p2<Upgf^F8r$X9
zQkr~2LJiH%LB>Xy2<IT5Ja*ihqb3SgPycJZSA0?_t0x+M5YZl3g9s*ImmSh5{A5E*
zOWST1b*^3O4gePa99HO(@hADww5HK!;{_~brnDv(D?Y~nhKZC1bMQvfU8*!|Bl5-g
z()|2hW+;s+jaos!P+7vcdX>R?r~S`9p~MgagSK>$AVMX8#A|eOWYl<f3(!u8N~*+c
zq^jESa7KX&Y(yZQ*>H=olHX-#n#CA2`o;@g?2L_#Y5HOrNv^XB<88+S@fl>fBxT^2
zLAPvXakL_i;wiPkIg0Z`Kf?rcUEME8_X@sRoESVTim-PASWgjCMtWHdt$gpuNI@I%
z!RVPBbVaEq^v!=zq>#~8Fz?(9y%atP#HFY4bQs*%tWdId2k;vq86v{xh{adMBT=_|
zvmA3(!vP3Og>v4YfS%}rA?*OT`Pk<y$A7e*b~$rAo?q_S8v#-b@$=`Bv3JMQoLw(Q
zvVKRwUID-SWmV-?Q|bHq=*vEV{OQ<lpvSyC=woa4kU__5h>t;gN8Iz$0y}uoM;9M^
z(Uft;XOWO{cONt5$y8Yjp%W_KY@Qi_71FB@3ws()WXOv3HFCim>)VQ62Ba%x;q3B#
z>i0Sa^Re6(lkX9~mfL(6J~wlkBBB!a_Yt<}>a{N30RAy`r|uBqe$LNi<sU&2y|GjC
z`Nq9hxd^CC*Ns>qPNx?0t|$4*Maro<AH?aY@0}hU<uS~%n|<)OYe%oZh@ghvySi3l
zv}Slu8UE}UqIG8yMz38}VZG>4ZlIv<evNWi4_J>1?r3kf!G%Dts9;w|-zvzgY8ZsN
zX;q4>Mk=T|Xjz4}C07nO#AE0vX7kSwxSrRjcKRU(JB*ycWTm+(fd?2&-O+SP@_FGT
zd>-TtnIn+uzM_cFf8D!>6Kl6QP?Yn|0P>S>S;>=+57pcF(Kw*hMs2FnEp#PjttT2Z
zm_GKO=F-TO{Y94e)|*(eY@Y4~5s@GU_+Jqzseo|wn^bs*24}-cnmUMug((X;y|~B+
zfGswkN|$<HdJ7X|EQjeS=eanfSs_0Bf;+i?{Hy=v*K^&G?qs<;fJ<gAAt7<`eoHb3
zW-$|tM1u3k!F+P$!_F+MxgjiK4yN5SBoOk0bIoTCx?RJgG7N})RI!EfwE=+=N~l*$
z3yt+aD*!Zq0<BjBo0)0!v43xNrOnO64yI85Wjr=hXNYmFS*@!Nyi@ISHN)*FYRvY)
zldT2I%PPycUA&X+Nf|R96^092hG_);^!XO>{?#Vah^tyVsoS$=fd>eg6m})8;8_8y
zg7*l6tK%G*APY(R+A>2NlKFZEr5Q!G;J=CPjz5C2k@6~NH;)MHsj)?~Gt$tAgG;yK
z7>QXZ&rMuy?HLn%K9KcU5jXUA?&|g9Lzyv8TO@YCW8@RMB052Xw)?m*30|tsPRZ68
z8<=z*DsV4dV1@WfOZDUnG51nlX;)Z;d<SCH+^wy(Jqk=8>B9cWuT%0zvl*y+v<+W}
z%GY2fFU<mz1_V=sa(JlTb<NBG_+`Rbl{YoVrATx&YmNH&w(iRNEw?5~t~g#dWnio`
zRh9*xoB_A$>H)g_{+vrk^DXm8J;p?T4E?Or%dBx=P$wYZ0{U1u!Hb&udWC(Li;?y(
z-_RW3BR=85q1nwq(0g=rly-iS;<>F=Ya0*Rsc^cz_Twg$<!rg}*`coB@kTG8_44+l
z&Q_R-`8;{Wp6Q6WyXdrbsOu^ldj0Tmu2u#bMem%N<!q&Txht;beHX-9o>DztG!MXI
z-~0nMzmfj&{!8F6tzvF!O*8T=rOpAk2I)lc-cIQsU9lY6gT(W|CU<vs%=Pu#x{OM7
z46rrA%vE62mh@~RS>_!3O(9Vc3Wc{z!}>i<1RQ2vmD<%>yv0!TuXza;(QZMGAQqFT
zhc7MFxJ^n6v)?)lYBe6r)k-Di8@a8W?Xj}6FV7qyk-KwQ1sRd62*XFC=8p;3ui84X
za3mGNh=7m!;0Z#}ns0NpcKE+DWPYD7wqN+sEUm1FpFMjP$<y2mNUue~Qug+eCMG6|
zimVyFU8$T>$0nBPLiGA#K00G@%x;2h_a301Uq0;e9EQn8uJip}CzTRCVTfBVlULRi
z^9z=I&vMk5W|h)+Ac7)r#TzaC5_O;5(_j9F%QwZ6s3xV$H8$lZskN$Uv@^J(N6FqR
zK0dx7L@cfcP1gZF;22M>uwTm^22$U%vomXO-1n9#ygeS&1(*z%9s}w@@RvBeSuYY0
z{oqVeu)36G*Jg=lHXZ5cPjuRyaoF9G3t%R=J@B;uipQvt={OqqX`1mJ+UbGQ=E5~#
z+{z9$=w73~KEROwdEHDY1&%~hGqaI2eUW^-qpJrOYMgc(4a*+KH;ryMO2*xKE?}bv
z0FKLY3Uvzw;AxiVECYcmNY&@+q~telHu}xQP2G^YF6-NsK=1ROi)%dZ7;AkD@O&~=
za%2*#9Ovs;j0femrD`n?AW-T}%Y_O!ppyrvyB+@gfbLmPQ=`#jJ3c>OB)57ix8bqc
z;lT9@aS8{(ivh)a#XP+%ar@7hB#=H6<D+yR`|KFlC%IC+cA(~{HeX!m?)FEwo^QxA
za(gj7bOM21V!n7E21&h1g6u7QxevClz{m2+E2B@q?wKv*@ZDy+%hSBbw|NMJVQ-Ff
zVioi<L?K6J*b_rMit0}nHuv2UwSw64W8{gHRM2&#pA!h^nAs!nvY+zy&f;J*+#cO|
zN6-G+B^NZ<iQlB@0y-M}1tkG*&$t2hW~x%P*o-BW_CTK*-bnzpzJ0`8;10ycGX2iX
z!UBYx{G-lOd$d>QlJMhf#&B`qE&uLShZjs7K%HpGg46is&Ms@RY-NN+s0?^K_cegE
zu2BGzpQTzg;DI@2bOeL;J(Ztkx$6l?ubfqyKi|x)Q7f1%gNQN6qACDDRY8t*7GdFt
zSv+uaeJLp^g@*ZRu2BRF6|uArNUAx~E+^X*WM4x=2UEY?$0X+BaU0NZ;;8OVWLH&F
z3npZX*g*p4DTsz;YghjU#%H}x7?9(3x-Fz`d)gP@1a-B;hDyfs__vz(G{HaUA`9bL
zHU<(IwatGW>MAz71mXckdrl7UBQGHqpA;2w0J^(!bZAKD=g$vh!XW^-0Q8eP<K+*P
zWM>A3hQgHT6JTnM9hKR%>%A3;>eUu6`K$^Xpmof7*DZp+K&YJpaWLBoYl*sHnQ=MY
zRozjh2O;x#mbnTU8QF}l55@*#93Nl%UakGnN-}SKBCDx56DyRK|6z$xdA4G$Yw#<3
z_grS&5e{q(L$lGInS6j;0#H66N410z^A7ZMRQ=9)s3Km>PG`S(q8=B&L$IarlnhI_
z+^FBoz(kaqCbGvW{xP{!xk%;NKzVuPlP6E4UOX&PjN~389WhqU@Mm?_)>9fWW}m)2
zY|L~tTyTM1*y%St;y70}W^39^v&{fHT>B?}G}&(VEb;z9)9tmJq&wT>SZhPxC15<l
zP@&1&eMYY6qA7NKJ_XZQkpxN4o`t&XO%#tQtAc4X-9}x?)l6Ss-`LogjN>YIQb~Dv
zhJv6RT}CDFWTVuW=;B<y^=G?T-qkWNt%sPq)upBWK|w*XHEwS@CnhF<hOK|^9I??)
z@bsxDyl7jZg5kjsHSs^|D!|y~&G`*4SHdO%H;N&E)Zv02+rdW~n@AnKQ)$t}tg3Tp
z=pBH!0r(x_IWI47F|*;2cr=^>HF%dp=ywtDip_SDKGzgN`4QlTvzEJsJA@x~f4Beo
zw|{APcu{bFXo?y+W`J%N$)k)><DayN0vu6M!{LuH(N{VY^9u`F3<zf|<UxbMXhi4S
zj%L&tb3GB@g4251Bv^)~jHMSFDD%luIoGqWZE&8dg(FNTHNAV^)n&BNCAKQF!O;6#
z(qB{|P^9&D^|vS1heW8H?(=KqADis_CA2s9<PqBpv3Pv6BMk(ST>mDG#`V#k!hCM{
z`v-mrj}r_5{IKSwfT4`4IYFXqktccaRFh&|`w%>aqm23t2bYM52wUIMvOjX^Gs`Op
z^8Bp2dGeTX2B?vc;>ewXX^Hev;}C!knacN+PHE^^FG7-_Q4l<qpeRGCZi{8agA~NH
zWxDDP{pZ^9a?1~{J-@S{I|k(FE`-)-^no8vKuE>1DgPxtPt_!D|K3(+$Oyz&x*4fz
zArye1@9UpdJg7Ur;P|-Nmw;n7EmybE4AO8{6iU))Y3(HYkO;2W)uBWvmH%FN1i|5(
zw?YMz^}QzA*?f7FNZlez^2@6~-RLvYbGo6{j@^0&iO90@VENPAcqImT&6-6R)r%4Q
z_(?ix#wa<R^ymvN%~9jhB(P>-T1}lrpfg#C@UMPuCzeGTQVxGl2j6GvxgMyEC>3Lu
z9aHvfRUCG~5PQ7m6;~!pWn^=<r}q_bQZ{ZY{BBT5G;Q_isz+b4+tJ>I%>m5S7S`{F
z?vCfzWZSz16+faLp)Xztjy?Zf3owzM{M3=9M`3zdxG%r@I37Z4SW{TX1&@WObH^&v
z<IIQmV3)$n<qey%6uULxEa9E~`J@L8K}W|pu55E|M1S5OEPRVe?1S~nH$!avNW8!H
zH9PZ*i=cBLwg?mCcJzQ=1mM+p*dGpY#;kjO-=#|{6K9eUldl)UdNN|1ET!i&YFr*5
zgno7qUnGFrE-*}VRGlXu?#W=*6sA$2(22flf@YllZrs=YCU{oNPUK_v#`;q|W%t+r
z^ZqaXmb(5~@_d~6CLyRRAzc=^E1xGnyFb5mklP}tK_eckpwZjivV0uNn5L_Xcup(P
zyE|Rh=y4e%hM^{{Mdy0reHA6;!6C3GpsTP+`dnFt)H3{%)~&?#ZnDhQ_~E5BUkUd$
z36J7pcwU}q{7BaQd-oO_pal3Now#bfV9}afzhhZ?^>H)%p=wB?<2Rso2`^I8W~;E<
z__`6dcorEwtMcoL;I~PJ4R>vLDfb8ZY=n#UK2DJMVfy9y=Iq(N4HnG>3W2LaT9N*x
z>84%3llyGXZgoS-MfaM^Av-ulwkHcc!_M>vq&JkX_dAgS9RxZs*-WM|JTOx04KX+Q
z`2t=pjA%xlmv~GjK1sahCCP(#4NN#LH(W&1DusLxs(8n7i@X>e^UPVSXM7@<$Z9rM
zB{jQIq>f%xoB%o7U07Xd4_pMIzT$2ZisS4-!h&Z-TP>IJK`A+3l33_pTm6pbyn+~Q
zFimcr<)+`4ePV{lKwb=mBuVO_`fx|?okeMh$Ayq-ijucZyVL=PqeP~tybOzDzd*M`
zT3czRArBnzTX`0{eED|7$RoU)M;?fk-i78{&SYkjxpCKP&N_kV`D>U^c>qInuS&7=
z`POi-`6NEAGF|(EOD81s6%(`Pje8GUWngHfRLb;YBCSr83z{1;+ix+C*=*xqoKe@`
zI938(`E-9jBN_597JGI)!dBp7Jew-uD#k@5k|i!__GEj0^J+LFbk4dMY)3H;A=J>V
zkD;%IsV~;6bHLor7znwQi|yl44%^NebyuimvV0>Qou5j*db&*3sAeaamfPnx%aOQJ
zpwg4vHgTByBn2$GY)&0*jc`c5S!aNY;MAwM@g#dtKvhbtRU7^l3DfjJSEW@n`0Eu2
z(Nx{tuZEtr@d2{03>j%Fhvl^U%2;>4QiN~<huP55TIp)FRZS=nudvpq4A)AshgiIB
zS8J$fb4_3l5f;;BE;aM4Oia_ImYoapZt_#EH&El7RnpIsE%u<o`~$=?M<-971S7He
z1b>^}O*t}xS6?ai-0E>>=y>j@;oLWZR*Uu3_9td(=*Z_BL=PirzM+tNvl*Q+N!)%x
zMEddVww-k+8%9QoRz_yZRf>6YoOX^|)5q{Y{9|JvQ}+ud;C8>N={O;<H=Ru0-h#u6
zRLe4TzFcKcO8?+7HyRZVrVJu%&-^-6Na@a|8t$k04!WVrt23YVZg6tKk<<E&;3>nS
zKDN|a?{N3o&s(Y~)H0|LfS|DV+SIq=uUPeJX$X!0qZ|uo4J1TFMN`+vc$TVzxo)Md
zXcl9s$pjXo{+Uv9V-RYnvs!=fd4RsAUG185*`H`RQ>j_!4)?ZMO`=siJUiPNZDwq&
z`#jv52k`z5<VK<AreO%<?{{YB=QW`Zu<_qsl-b~lSlv7cNrMUr=b*4&lsd!zX@yg^
zZB2Tf2Pmn>!sg08AJx4P>;!uB*x`iuT28hulUzNDSje?+Kwdn(ddRSTPJcqVMN2E&
z{fEI|o<9P;H_CyS$DS_3-#^kApHA`P);L&}VceVit@}_?QnFViw=WaMZdniN|54rV
z%qC4sY)?)>#Lz2IXTLX^s>{N(GcwG=#)j+4=73)=8o&PPKYq{av9zHV@xk09>Ty|T
zG18__16g`yY5j8=glnfzhrEi2J@ZL`IPFc5|Bm<kRZrLRwdMN{Ly~#m$ctknayas>
z6<{RZZl>txNDnLAzyD1Y1HX)p+pgsvto{rwh;aErl<U6js_RK_G<75NAeos$LWxeL
zNv}vPO?PA>Jw3guNRtC33n1(fZomO6N3r=Zyo-9ONyq34o;2U?bGy-Hw@xl%@nBfL
z)R$}df=*8xbzZjrTBWzSHKQ;J`>3xW0y)>+Vslwc)H<&)Wx#y0XvzdQD8!Il<w`Rj
z+x5_t_ovINos{$mU`0+ijdQcde4bzqV!g)=a)@+=<Gy@((Yn(P2$E4;&&x&bMYnfP
z9a~VXP=3SIaQx+JU>->mQemO&u2XZyCCI%AHnb#jIAM|{)Yb|m^IT}Vxp8vEfW@9n
zk-CJCiq84H06+z&uo3hNPGL56*3ck~+_#!<@Yo!XVq$YUBeGqcp}-0y5EkyRoE_#+
zov*UMyX2(Qs@$$zY&tnTx#%{q0CV2z)o|oti{?f%Jrz}|px?d(-k=`a)uHKl-D(dk
zg_M*u&OTPP_`gK1uBCI2H^nHJKI$P$tVi}0ma$al2Z^ZdpjV_xX5SLg)VTJ9+r=A>
zZF3Xq4Z1UOWY%PMY9@AP((cpaFnk)C>+9Q#d8k56{LJQdxow0(oRHfkqVDSSnwvJT
zNbu{o)s@xjtE*ZQL=H^mOT&dpZB(Q_SmDzVO4w3lWoRlC?{L%LvIsr@`F#%TKnNB6
zu^2A}`Aak1%0by)cSP^|riAO~-Z{b{<pBy!l9UPK$4?B--bB57-uw{jiiBrPJ4ImI
z>ka{dy0UXD!~^vL8@r9yb9r4USLaQ!ne6A!_3V~`z-5={q?H-=@HlVfSqTaq$f5f*
zFn>b2uc9hJ>p2&e0dW33NkR)>WHVA@nv9PSuBe-Ng3SO1#2weE@BU6aR%1oCd_bo1
zFxe@TWLD-#)jz_J3Ih`hqe!uKCiGx2goOL>Xq7wvo#Px5OwO|1Xa`CWsK{{_&Dzsx
zW($~@be)*vA1u@Y{Pa;w5f`1>`)}s)5z}5?USOgJhjxFe#-?}91>x%EMl@ATMou2*
zbPO6y2Xl_rBNYzCb1wAsMF0bm=EPvx(X|XMECS7(9iSdRvexEH;c|&%?-)Nx`B94?
zoMOB#GZ<Q80(yB~M|(an*~)pe8@~$juo#Yl8ScF#y;VelA}9%+6sb?JT2A=p<I-<@
z$`oZ%GoK6zMwlmuLst#W%|+JBEJJ3RJs(nB25^&xi<&TMXlMin1(P^0aF%!)yEh<N
z$3I`^_?i=$o6m}19T0KVNF31?lL`@;Je-87zgjwY%jY_PTQJm?_Yp2dpqxv5H!Gua
z_PvUUg@u66+Yl1T_vP!f575wR6dg{^&Ssk&_P`{HGlmNm5iTD6_E3#jZ-Wbl`_-Z2
zL2{8IvnA>tireX?r{7+w!INw;6CIaEK?*2>LP-`Z!NRupRI)b_sL`{H6N%zjpavR6
zwA|;0zf!2XT9X>i5}+SiXmr1z6A95E;y&pEvadmsMW=(A-PPl7(uM{GABWRJE--N1
zk2l7fcxPJ;v{?~Wi6g}qy#qc4$QL*I;q8chqO-`in07f4_?G##LNTw{wrgrNmwCAZ
z-U{4|oIheIEGz`|1(|~~+StLo{Te-PhaI+Tr|E2|f-Qw&r5$O*9_8=B!JKZWsYbVv
z+pA%>i<rxCwaT5@Y2z$w`++3h4?X~%OvH6cw=YY|!xMywD9;fixiPg5J|aH8xi37|
z?3s8O^YsRsMQ?14vz&5x*6%;k1h3|=#ET|$X;0&&zL`2j6RZKAQWEZgFjdEnlQl01
zZv-F29n}?`7#|Nju!zlVRP^45j|Q2wdGTFFAkTPd>hY?T7vgzc=f0<A_T^bAqkv(<
zGroeBZ8f9HfGmGI{$5J2>`v>!%e3d7X(uVo&ih+Ssft^&b04&F-~X-Y0kT!Om2ID1
z`UDOv%txHI$V2GhWl-FcYpl${wG|%>$po;IuIapIV1NP4Gp29Ve(WCUprq7DtF3iu
zM3Zu~m@TnwzXCn2$%~vfWY_avy0x~rAlWw_{Bge2G7k>3gb@PqR@o9m>lBBUD|pmU
zrNua?tjr>^?5HU-y8NFrpp#G!_tGZ%@M~*p<Js|*RhA#j6fL#~<`~~_L+Dte5Fgmo
zO$-bqbs4h0RNOV}<!W}jL@k=?QyuQjdY*$-1t7_CKHKkay7rUXI6s}=k<aR78u5>N
za=g|r^5_-4`X__#SlDZjn4!72saR-~I?-@MOU(<Ks#Tg*GW_7Hb)V+xVJ%RC6@3a`
zxL3_P2TCwXrSeMRLaTcExEV^qF_ieU8#VUbyQT^va&h~+bV<qS_VI`);{AnMmx-XG
zC?xO}08BAgdwjCRsk69Hgh0lNmbV&*Qb)}-IS?H@lidxkwsBeBR>A;?iLqQ83@Z}&
zCoo!SxqRh$edSSUF)x-Ib~YrZ3xfz+X*BaVAiiUfES&7JQN8}@xqJl&@;jF7PzA7W
zs;@t<6Y5qi^Md32@(dQ$MQc@p8hv|UxG+ckq2){CWly$|xW|Rfo@|{s{1`NZK)W;t
zn5FaS?r`R#Hh6lLP84_a2?1-Z%klP)>BzRWwtB~dw-uK8^&LclW`0ePpUO<ok|q)=
zx0zeF-i=(C&1FVsMYA1D%kez3?Ts18;+RQ)z(S?Ixp?$3x<C;opM~~d$G)4*dN>(#
zGX23VSTtR#lsMpWjH_dCV2G0TsdC&52?lT2A1UH`Hpz9%n$AI{x$Wj;oz|afPF)0J
zTF}1%+eJ|PO9?b8P0uxHehd3=C`UXk%?<;XSp5$^ZU%uGU^Iu2Kvt6YXG?MN2oOX-
zphp60+lnky@13U;#sgJ~Q#%oC1uBK=m)D(G!hLvw(h{Sb&=^sXa#|kpN1oPaI|s0{
z>5kf<QLi@*JB!B+2WlC@k8(0q{eh~3y--s<OWu&pZLCnN{H;ui{q~Gudp@r5KvEX$
zFZrgm8v;0s3vw%57~AlBj$AoAdlimvlj{i&9bFWnlG%`^OS{fvZ>8Eg1q$^@=CaAP
zsP$IO$(xyG=@bz7IzL~0esRqpTT)W^$rd#x=h?hiT3QOcD=}A1AfgBBU{R~dzUr$T
zt}B77>q45n|2F6QsMJc2n{%x)gK02B3s4{8QbfFUgLxlcjuV`Lcq4Nu$abMcutT>0
zwQ90NcdB3K6Cm^9eQRi$BSVyi2P*GEcPZFzu4nP<I<~R|d;*$IPXj`YsZVH?=iqzl
z2XS#GF1-Scy#)AN8uqCWPt@V+rOM!Cb?s}J;bF2%=_D@sa-(_9V`W)K$;6!V?ZipO
zSi0ns%W6h~!JC`)L<RN&wk+$-fn>1i<-X-GDs}I7Euj0<atGjXT9mS%dM+)=xj9<P
z_4Pj@TFw=vo*`NwOZ^o8&!fPoodS>$vKj+QnCOo)lh7X{n>|j_-6s{n38LBk+_0e`
z8RB8jM@stj)nbkAgCw7>+%BqV!K2x{!;+Hea>^#?aRAK~>V!q5m?was@CMoKmS%7}
z6@CrGD%k}paD=|W@`=}n3~HO~UoqzF$%a7Rx-#utmx)C((~sNaEKMSfm6zA{&<U4u
z|D(3;p;h8`v7ByufD-7xi4R|avuq%RH|@MwPKcz$zGdi<*?cxOcnG+j5%%c9hlGTM
zWDDsUR!2rZe7Hzp3#?@t9{U@5B#8eGx?^`1;szgCuQiJz8dbRm(}H*&Zzx$!yBJJ6
zLtk=L^~Urm^N5%_1?LeT`(f>mR5Q;hP9lw(Jtx2YJ`qF(CIoLsVm=>Z<b(~EO4j)}
zbHTqy-`L(x!AHxpC0{Zd1%<+_Z?zhCEiAz_9c9@Uzfh9P8x)%p3h5#d<L%=oL(EcT
zbh3TRYMFkH<uIQ)Xn}|?Q(eEOnikRlDSxhfy4#Do-;&H|@uL^b1(LCF#Y<uYn;L7a
zJ>PK<IZrTP1opVH)_qbiS^TMSdtkmEXh8_rEI!)X_YJR#M4Qn-uHna#dgipWy<ngX
zuU|ciN)9nF&pjtW0&%BO${z!VNI>L^E2k0TfjQ2ROd#g%4%(MR^|8^)pS*IQx;9-%
zC!$x_R!Qa84T!Ia^|(eX<GDjU<uTjoFRyPXZt=d*-Xh^pcXvV`Lq*V&p@6cqNR9D>
zCqnoxEB#!vQ-Raso3}EA=`T=C7HVFEoOa{6aybDKt>ok=lq>rLI|7%JLLxd#Cg*$C
z-#su8hOMH5w7B*kkoo2LRhV@jI5+aV@u&#0x<*Du0?OFy4g>J0wKC(rO$NRVpg%q>
zo~j80KfipI=4kG+x*(<^iP@_h>D8(ZCNgek#sk+G;}g{@%trlft3SodGQ#_CK^vyY
zasBH^aky34QJVdom%0KX{2|pg?X4-0#l79KSFc`)ol&uVYBG;nrlc#tK@isw*4kcP
zT@6GJwZCRfL?@Hb2a-Cu()7U6QZfG2=B8u>lyUqABui@xk#VimaP|HPftdA?6TH>b
zrF*!|ZKh&ReltZ_CWR*zCR5Y9JIScMuY_WJKv4y5*X`+E;C9u~zS^|y05a7(E*x{0
zP5C(3hwy~kaE3=DM;`Hf0XyxS&Hu+xh=Ti^=hF8u9dY|C0{#OC21ek^@|e$TrfvIk
z(lw)bS3%z5gBeKs`uUoXG9^D%yBO&C;ptrbDvsc>Rh1QtX<Q!+JR6H&NklW;?(dna
zt8+8LjQ=YuxDvuaBPgSuqj^WYdnqWluy>hmye0}!?W)OBhz0$x)2?SATsWA7xjiO4
z9PJb_kXU~9O!M+owe<6_;8`N5nUX*}2-!^a5J**>`ycVlN?co??vFV}Dbf%f(gk~E
zt}fo^O&Jlqi5RR?7(Q$I%Ng=q?Q&6-MFcH$Yd&LhF20-^Qg6GreJ-~8?d!L3q{n$z
zIFRogxXuL!``1dTc1fLizy4-8QK-&h)B3Ba@lv@^K79N=*+5NvS+;%R2lE6-Bw{3`
zu{r1Oz?k`Y*hJCn_cFfyyy)mBDxEzul&@dw;{8qQWBM0}>67^+97kJ0qXa1A#MNqF
zI^;d@yj`p~T<?90%6_AL^OZt82J`{NfkdHLv+*;s3&J+*xV2>E6m4p^p8Mbe@3{o+
zjtt4-=sm+v>$Hj>={FlJ?gy$UOiYRZ9BPjfgiDr#lG|X?TfU43Tvky_pgr4N>4_Q(
zKf*SmQ9jp>R0i@dFrN&%2__>ImEqw`xG0G;(&exbZiO4Isd6`SuwBaSl(@nj&XacG
z;}haVXuTTXqa350me$gcmh*H$aPwf(SU<9YB7i&H+g819O}R*I>)@=uM(|MpJenq#
z6Dr;~q(vnyP3m-z+_@@pR&T#kuCq|#bq8J{5M|4t%^u4z>3Rb8<1KhjM@$E`MoX%L
z<rRECL!D-wo%XUO?VQeNK`5#BF(cArck5=Nh#M;UBkbdqzijy`2y*ro>~uyqETsv#
z`K`Hne&t9Lzu9Q=K`PHz+F>`g_e8^h$a1S2+iw&vUwL$oEgOv3!mAaCk!-kGn^?qi
zN-WXr|EW+J2#aAu%3cLoO&q=7$|_K)Rm`_H*_3u2`iek=Bq39Myg#X~KO-QB?QB{0
zz3k5vKrad*VN}XOpM)4{33de8<bNvFsLX$&R^@!f`o?;`$ry__+FJO_b7`mNEc??K
z_@^%u-nDH^9xSRm!8OWkv(VY{CvUV@MP!oSiHm#_OXDvIJCn^PX(-fCnA;ZLu{-|!
zx5Zm)6deo{d#jzNBft`H#rzHVeD~=zGGFLr@;fT)vnJktb&7t?`p@0zH{Y_(dNQtZ
z)dz_g#x>1u6bcT!JfN3nnho}kCRcm{@y*8bly*|o5UByUp3e}m0mQsT9}3`KNLT4L
zfX1g^az2P~pShyW{KPCFdyvz1qesuQ()OZ30)KGm8*?E5AVk5!-W3Iy_tyb*fU7I&
zcFYoqa%h#J+bcI(r6i=1P5u1ko)3hgne1hf)PV})HiwD$-ALe?_PCyCQDT~A#`()n
zGN$m^!mG|`VP)$ywk(fi6?k1S4Ol_d&)ClHSiVdQt;~2(HD9roqbxY{Nmoj9YF=I*
z7&@S#R_>FNk&%HUBxXPl@~QN87VP*zM*c#zNjXC}33Q8Tlv9xxAl$$?ewi2-#h{RU
zDeNC2v*-EBc2!WlYWp>o0o1(-@OQ$RXw4=Xg5^chbl>3N;hFuPMI!{b=<Kt#%-(NA
zoejCTHB)J)1r#Om(vO}75pxIQk+!x`8>l3xw*UP3?)6YguMDkHK8@T3LZKh7u<MgJ
z-qI=JAWhz}xrr6vdjKM-BVNr$<O^mCjjCPFd-v~ym8ZJ#?GXjaRfQ~*IGR}ie9_j{
z>RcV{Gzr2MAbbp+Wphm&BJd6$NQh8^Br(B2(c$aY`x4PKy}VLKA7zCtbd!bpLq=nH
z!8)>;D#PHwK=bYhL-?hfwKa_ER+Phc#$vJ5?Px_>fItxcKAVurY9PK0+;*L^MRc3X
zvKTmA>0S`1^k}Eb!kKZ`j;$4o<>xylLjD^;^f9VZ{j^nJ5&cz2RYY5C)broEEaefV
zcfdMgy=tDd{%u<R)Kr|;&nQn)dU768(jUhB@tC8=%I|R|Oi^^b?Q05rfu@n`JG`<d
zI{EWwVA)w(LRwnd6#>nbwM5E#%`BQ(!fW&H>FM>0^3H(rR33L{m{ETnPz@Ov$SomX
z1|m;Rs6}~QuAZta_Y?d-s?Itt%B_3*#u1MSA_7tZN=i#NDBU%5N_Te*sDMgKmvl)>
zH;8n1$Ivj;5JSVvyM3PHd4BKw#RmcJd*6HSd+oK>^}P@U6V_FBbBVoY`!g~bsfoL8
zDNZ0VgfF;v7xDJJ@~-zji}QK<9`r47+fJHwonp<8fjRI^(AlQ_d(U`7P*4v@2oPb7
z1d~j%01KWsb8dQDUP3PKXybd8bDuqZe!ad!Ysbq+bJ=u8lH*#1&{Go=Yu}JBoORz)
zko=Tc1JE3M)71)PzfN}IK{i&oweF$X`RU0c4Ug5!9Ge-Z{)DQ8YN{7M?RPc+5*d$0
zrJBd?SAUItW16rcv8C@>HNSWv;O~^^*L^+vyZexfnI*gNXl`l<c&3_iw0duCc>@pK
z$Kk|+)b#Yhr*?U}j1XTh#Qp#gI{^aLpw|rOcY+1#O_P;=1f%P3Sxc<0tU&FNfGZU%
z;%|c%yZj__MI|3a66wR6L*x6Y0=}=!c9Fo^9)de2*ud?KPbOF|?9oja+?^i}l2Q+C
zNf0F?tbp0Uzo+fu!T~+}A@7Dsnj!;vy61`JqTC(+pckD>)z}3Qz?mx1-5RleK@A7T
z0_BQT6v`Kw8y$Y0Dhxdvlt=C-^Lo?m{mN4$7os6AF8adeW!0#>3YL);vp&xN7Jj^J
zmbKhT0(-f=-Bt*|HqnpfbabOAL9?UI<<C0rGn#)2XNli_+b(E*VEm}sOAVTc_F3ey
zaZ$xPN{#2(ClF03j#mSimBE}dF=iZtiGo)Q_A~v-PuE4M3{^#D0`luS>{LV$Q6~81
zJp8X8xW5>W9zgZ~U6s%0pnd2EY8)e+>x$?6D=fwrNpgqprP8M7=KK_&mlo%ml^KNt
zQgbLxFoFB!>H6K{sYD*nQxtSg*zfWkuxdq%`z4kSPFRoYS6D@YY^{e!LelvVpf#2A
zvI>760x9(<nSne*X^{s!+%atUl?Xk2YA-zXBZa)50|IZPzmJ*-U1DIwggKo>;sy;q
zA~m$ry1`kp{q_(GiG`P^Fd4I*k=2wXGRxl~A}ZPj^4B?(auc=Q^Q=kHSW}!?eTrFC
zNF);Y60SpD)>zI_^YCnqc8r;sZOpr{ZvWmczRLp;PR9h@sk~=W?%H_T-`gUYv_a7e
zy2{t#BqYhh2CTGGDty8cUxvAMPKhDT{rqm*@XfOwqm{~qe4fz%zUb0L>yDp|bCBa2
z{S0eR`z73%h@bNEc*=y`9An^!Iap8Y`Ud&eB!ONxuvak@6)*_4guJs|Ah3$MIt=d|
zMBYtfuLa@C;)O}<5v5w=anF&8a~ofzN{Y}<w!4~@lZlt{5kMI}l?VgPzHTJk7v-0f
zKj(PxoyyD#^2zvS`R#o1#e4SI=o?Es#zS)9?351HVpcLIG8+qAi+WjHvFeKAHU%g#
zsg_?sinADz{LCotdlM-tG0&zFMp<jBDoT~J6na!lHwP7x?vwvh?Eh&X%60GaCnC_*
z6<QXltXes1XzeGBQ9NNYWi)Ee7u7g|S<}2FLKC<+gI5sDAbNS7=DdEy3l7#Yfk0wd
zx9%HuyL&BF!1D=iO48xfSF6UZ`R?H_Ptm5bW_jl+&;Eo6AVF3*kPbZ0u})5mYv0Nh
zxnRZw28zeD_&u~WKgHB;fUSl+zXAj_yiWdHIUht)DD>IPh(V$d2{CbJS4U2xG$vJ@
z`&pb7IM9-Ny}p(BZ8Qb>g7kpwI8C@^?B5ezjQ(imFm%C0I75x`;oq2SY#bb1Y(^?E
zo^1lQ)!!ywe5iWOjs3UE#YM$=5P!f>(svQ8730GTNA15RLQh}44<E6s{-b2Nb!+&G
zez`e4Yg*C!u;6emR`zHDpxwK?y3o<od~Nh2GnnmJob<W`jl@vV&kWV5j$glEu(WXV
zqokr~`KMB8T9IA4>GEZinfFG`%bKj?ghCcx-F~13Jl<6bKHnbxQ{B78mlbb>^>B?M
zivkM^lTdneoT$0QS6p1ojFsEGy<3;45;%P&Uq>p%IjPuy@iDgszSv`ta{9QYl?T#)
zasluPt3<m|b9VNM?ry27ldnSm7TUL>J|vj1bJ1{7Q2ZKi=MkV#K^=ims@!xSiCyP(
zczAd#A;IK~N;PGT*BP|1aD2%Mq!_2d69hL&NJI?omRdHA4mP!{cOOzfUn1v^Oq36S
z^Jp%J0XINst~HN3(7THLPsD23`ev>8j%eGjU0Yk@FCqbw7nVv6Kf<c8s0*q;ed;0Z
zrs5`+(*iL2<*KbGp8`MmKEjl9<ojETUn&j4h#RFk0b=?)79c_S!Rt?c3XIffzz1Z+
z7fe28E-oIbb~f2(=%2SbWMVQ=$P2p2DHD7%IVo0uGsuPZ<#M%1lvC2+QAa|LdNdWk
z7`@s>{hP~gPKjSl)QXFWKv3cNS(x(wa6tGm9-s>oxMbH3^~y2%C@4gLN%Q0^4HX9!
zjc1%BU8)$Ty&0r8ow|qNQS<5Mm$`?Ff2sQ;wbGT>2XmZVUQ>8WUiPyB$qtg2hlfW%
z;9Du#=>K>d9422YyK}$Qd<qN%S!Erwo~JnY(w-cOSTkasJx^^UbVC_bX;*0jETe^v
z@sBj{b-ur)`SvWad^(uVga((8usivG5AuyRyVNNooqwEpcW)WT`rrsF>&C`LH5ZpI
z1}QE>EXUv4bpB=>K^bZ}$5IyZl*+NUe+sn4;aana#B9KZ-xaYS&W$s!<2UW1S0u$k
zN(%H4p%QuT^9nLPyo`nH+W>6aR9<Om>2TP6*2{lYg)fSUUJ*EasBrTA#`rRJ@IEOX
z-ZQgzMn*O!7N9=C7}@Q-lbuv_`9dvf+D(PUPlUc+tvhB0kNzlUNV+SyRKDXVdxB^^
z&J>+zdfBf5IR>*Qe*_OK2--KMW9L`F5g{Q#VHsPzFJ8QP?Pd0Vrfv59yQyp!f`3J`
z3D0~K<NfsbQ5Y6P;YD3is1)$qbd~YH@Z%(k>^CTJig+8;Z8-S!LE*Z~b4yl4g^^@Y
zT+=be$o7=X;rs7`)n8KoUD2Z<snxi+$Kh+H_+;D3<KH#iHCc6N><IAGFAzCH!5!Ks
zgI{P+@4x8%+xBs5^a~*31b%$#=pTO1iY8e>G|I>BZ}ps1m1tu8ojb|T>bUKH6c7ut
zhn}~S!z*gT32i6;G+f+zUzrtu(6Vv_X-(2~?ZBtLlV6U3W0bTOSTy`>iwnBJe<ule
zx5ZIF6<p>2-42FvnzF?g%!WfdSzYRfncLUwRScna@qrjY*29rM9dWe^-j4TKsdZa<
z3Us*tAFxht^fgU@_E1ObEBUV0S7OsLhSY^h{3$dmOXQP<#WCRtRQZ&LZE0E)6sX{9
z)1oiW0%gRpqs_$6N?J1rX5|j^E8RH%9jG_%m@$u3qfK*oQzph$b*1%X%Sbz1V-4a0
z2L$%u^!^ITNUa31I!Y!Q*qckn^4tFhfI}2?TQPCVGq_`1P9~GuC#QgyN%1O?mcc};
z%#hb!g&s!-avjiH6jx~d`uNk<BGDm9#Mb|&8!mf#s3OHk&y!U=DLiN42U)NG(yl$@
zn16lfY5FjVOWA)ZwG<OxakTw^HU~CtI564iOOO5$Y@Du@qJU&9@pd##;s`?Wt_T00
zpF=^AwP?c`;rM~Fr0kk{xT0zzjXW6qI?$~6XZYWviJP)Jgh_^P^8flaAq1Vw%oTfg
zP!oq!;0E5eLg<O5;heYo*nfWf7Lkt1t$~M_-fEIHw~f3^hHc8l_xMeS%8CzihwijR
zTuc!p%2W`Ce%W9!zQ+}0Dptfa91A2nru4<~rxD11r`d}EqE|v0TPnX~I1;{UMg2%}
zk}gp8NOY@E-Vs<*aJ^()Mn&M0hEPB!bLs!j#R|8*f!8HD4u9mPm-~{TWd|MjUfqKl
zu~BMR1jjhd<`&|BU!b>&xc{o(iWgBa9XzXW*!sl|;v)aQ9UK0$_oZJ(30Aop1IVh}
zzYC|>9aDtqD8dl+PmtTV(T0RlcX=I+!?n~6T`ITfbt?-j-zVpargqrf9a6DMQjY#f
zzn6ufRXm*}mDVvX_AeIV>th-DUF}K(XN*w-)0=znk$hBg7;WmnT!#r}Id8gnmy<Lr
zb>V@Mm^8!L6GQ~2=f;e$Uf$3=7KT~`#;7?C{=FCf?$X^`&m}8C=wUu`SlZ~u5zPwJ
z<FE0FDn)Q$q^DHG0VD9lw-xo+v|8$9+ze}jB26KT;y{5{Fq^U@%>Uqz?B<P`x|NYe
z*YY0W`Ir;8Q-*V^$t^GG5baJoD|HRbtiX?!TzV4UgB4}Pqq>jGg2bplOwvOpt8>pE
z<Z@a>k3f?{&$<4rkQZ5F>}>7Ro1y-Lfw7{#8;WDHr*gVTT90HA`RFzi&&uii?^P7b
zP$?DkJMp|?u)l|p<1kgz_q}fPpTC$j5r52SMl|A0&ylHp{RGPNS@>VH!B;-h+%uCG
zlyu`&w~zC{?)xM2<GWyX>c$gICTEkNZniME&n|o03#eJUs`$U7eE|DftZj+G78U9s
zf%(^+t{72RfD+`_LGhp{1-<U1(<z4hm&dMEHth1b9+P%_kBc{<&xDUZoqy3sZZ|#=
z{1Yu)TW(x9zy2C&62P9Bw>SI_i~gZW<dLM8$R%SY&HpCet>I5LkGF)A-!e3QQ!wNJ
zPm441e=n-{aZfkjZ=^LO;`86Gz`(yp6QOSVRXTa@DFyVI^8XRPXIIhF)Db7*_Zxrh
zcuzvZfZNyZ7lu_wa<OW2?v24F9GLv%$h<i-`klIuevx!?=)RGK`YM6TyczM@_{x|$
zQ?yY=>c0x{TUe%J+$1(?CGS7PZp-3HKs;|hD(t1<o%&1gDD08>3-&Px^HSPve|&t-
zU|CA7uvwER#es|g(ex8lv+p*<xkD>m*vI(6<T%BxZdR|yHIX=`oIFaQ>YSVh_bE<5
zZx245_BXP?5IjycHnY+9v9Yd;J{O5D8S)07Bqa3e&ytQ1&-0$<Bw!Z3X%)dD<}~Cm
ziKLd@aU%^28(YH@#V|3ll0jJ0toEePmKGPMT=Ly}gwM)d^A1&syxx84A0BkN86&ir
zj{{nXX%-%kDqg@#R#b}R>W=<1d*9SQkx9c>zE{xs1s8eg{4)d_a8oA6A6y`#w|^W8
zTqwSu`V62!M5I9nSm(>9Jm-5F9nBwM&@6qz0cFa{naV@C4XOhKIciH?EWJ<*gQ;YI
zBU}2C(M>i|DC8qj%kBs{qvN)((_*^0L3+i!P}}6y#&uPsMU+yY)3RLT8S<Yy1=LHM
ziQF~>tob&|R}SM;vFVfl=ZHxTVfy_g9+!5_lx)jAe%FCWc7kKt>(&zX6r&E(nmyj{
z+WJ>%UO9cJo>2SwY|8=dDrNf0ilNy$9mOE3Wp2qrZW|_qZsf(-=y8Q?sETQ?-9lB`
z$Ybd3AI1nnc6RoE#$$gpOEK9kWxVpBt5pB@27GSK!NrgrBZTdPQ+**jepxfs`z?6`
zj#k!Jm?%idzD5imq@if7AM>f1cNZ`BjjJ}WyKzngg?v$k!sTvo_U}G>g?~Bki!wS{
z{()#A9HH>LuWus=SITFOpH&djFGfc`6!aBFZs<Ghv@F^9M}}?~wNY49Ai@pWOccB_
zB_16|(3zQ9X7&2xdwt2LZp-cyoy0{e910QQV8<@VSwM8<?O;__kiaFoBenJXu3&{U
zEp?O2Z?&?RL!2~r&@xWWuQXx7HTFZ{^(C>^8qRiOjTtR41U17XD_YvLj~_8xW_q)Y
zFYLRu%g|N%!*q34U49$Hk=B)y{#R$)_3B<%8=P5HDF06YLKuI6i+VTZ7l!7v)~b_H
zqw()a73@mS$XdJ2aS$B(<x6O&2}-{W<204avMA{x(ed^@Fof^>zn4oZbmU?C8<S&n
z2>l)2gg8^Ka-yvGC?_M7>R`O8byeQc4D-N)6SQx2*A%8=o7q0P`QAEgeD)#4XJ4R{
zr@^2N5>in79G`$pT-wFv9Coc3ga@aVC5=9aKN@~fHI^;!h|d`((wD!@f^T~iA5@(G
zHhESaW58;-VOsR_hoSA8qmzX)S7X57t$RD%fc?Bsr)6YTevU=IWk79fzId~G;l5&O
z3zuu>Jm{W;NH<}Gx$O$}H(4230Y<u7L7SlMV!>X$Jin?pd^YRsRPghlK@+F-;!4p>
zxntlets-Kv5Vi)dU};!zbzscUgw4+ztxX4w!|~6&Wz|an_T;{XorQ_mde@*XpYtI`
zv4xpg$+)tkWS;16+@vx?M{m{kcox%8eCf}GLx{x(5@Vf(s>$H0<Uzf<I*XYkkdJlX
z1l<O2@afg^>o=Dk&}(c*h9_7T^F4|y%5KuBv#W5<p+Aa$h|er?C0o45?^Es=y&+OO
z;<z>8{=)X<-tG#%H8`5U;WK@JZa~`LvN@SKLBL|r#}rSe;k#Nb=rZiK&#zKdUzkKG
z3MCbERc>A_$cwV}M6KYvZcpYp%aCwcd_OwNbTL$_D=X^(mo{ZHpPNf3KF&xQjS-gg
zoX_`k3oct}TN!wy;i;jqaBs0>z5O|NM#T#kLQCUkjC$gEM+ZH}dfv!L^Q=8SH(m#1
zKWD`K%9-^Ph8_~j@$8x0J@5R(2hnI?QPDOp-nY(jsDCW7$FQ;&;uiN<8|<s_cl&}a
zQH%aZm!KM$arSprozIEHVj7#xbbVirRTx>*)mUp~d9`6Sdp%xmF`si!n7-9)X4N)*
zfd*X@b(cbdO#E0-g~k>|q~Zc4Qhj1<EX!)N!f)HCkc(8cA)WgLDW5ivD{A)r%eFcZ
z2&5v>nP5aZ8v@C;VD&W3h<;ULI)(Zamh9BG;B_kKd&*W5SV>eV1AJsG6H8usRgm*~
zet5jJWSE7C`E*|@<1&Lber5B4d-~RD2-kbA2rf4BlKJfj%;<Ao(W%8rz5BrNg_$K!
z@#!UI#(-vvDM5;Q$=6Zy-t=|Xt#_l+buO!e1+F?Ce)BJ2@_a3;H1h0fgeSVS7OdOx
z%(0#!>fPr284_E?Udu`MZG}^e_J25BsTI}wTS57BD+i9oRBNS_5A%Yirh_2fXC&=R
zh0P3V|J~ExtM(ax4b=H6G1OXC`J*KJqW-D0)`yiB7M`Y@LS#*bac$M(-yhr9%y+HY
z1+xh1I4%L+-se7-#JGf|Ke+&C9X!B@H}Dr3WgI!<%!Sy=ZDGOG{AxHa^!PaTv&FJV
z-vhfFQ~xZjQ+WA}`8Kxj()6K3nkN8IzAFCJ*>Saa%+_bPIbGvfEu#=PhlZT}Eb4u9
zzv~m-{b5+Cu)v(f_@apI<JkReUR#Kd9HRyqKB1HO?zVBP7x}BjWeJ#Pfq$vx{ZiL7
z@rGl-9;Au>iV6^*^Oe;jOi4OtRx_+TjllC7z1X0Hs%vXq+p%d+jK4|ZD8O<KVLY_)
z@kns-g_7v-2Zu2m@CduDz4MyQ@h&}0sVALp@$MWy1mu54?dDG_p}@jH<y}h4dt~3w
za??K0A6Cr#$U+J<DK<43&{rvjRa#7h8|?=fe*#K9UcW;bJNgIOx#_Q8zkYYUm0=*{
zr=n}xo^S|yL;6wfM?ZxYR#sO)J4#3F**1H6u<S`9gjRu&y-_KW0w@F3bVIl-;k_rH
zv3Hx+eFZyuu>}!fL@(t9Ef5y1h%*+MZ*+o(jqdLA-7m?78+B@JTw6uNzkh6QzP)FR
z@V#4Oqut;;;FQypMaktgzXmEoVMIb(d)5fgkT`-@no{a^vXPE}rpxK;fF^tRgwA!v
zHY{8;+Keep$dkiK%I{GKBi?-o75GwE+q(OJH3t5A^xfe2tORkhQhlY*0L_rM`=txQ
zW52(L_fedRwFrOTNlqRu4qvP;U<`i)CM25W4$Mun8P41}J-K)9-l@G?Wwt&ler%R+
zDTBkQQ|>aOZac@K_1b)WG!US#N0g%sup0{t_di-q1^?M7%zHN;5{|Y^1yetIb&&Js
zYh+G8^b&iq*;N!#vWM`P&#nwlR!=TDJ&Z;*Il%?=UbB|53SMIVC@)v>8#t~mmHN(N
zl|6z^8qwH6D-fZtXN({2*QK+215~iZ)#Y`z?LjS^%V^v~qN7m@eR&1Ee%B@LzvQ5r
zo}9D;dm8A>itY^K@jFHSh%{awDgHL9CPN}@Jor)I;%Fd|*A$*v=eo^F_}YU|1F}`j
z_wL}p3yZ{Fx5jF}$g&EZuTh!cuR?&t(B&}D_U!-CDv3?H^pLJ9uPK4mRRo}v8ao(j
zMKYqlZ-v#=T<iSh#c4gco6{GQv!2;OdbHMuM)nxbFf%f4EdB6kwV9=l-!3txk(0L(
zp81^mEnx_E|ILU#IdJ|sI#)K^*l;NUjZWjwi7qz#mr%dG3#3i};GeC0*LAkv({8FX
zoNyE|(MQmyZokx=d~tDn6>ghc>&l?+MkM4lKPkV1f!yET*<traJ<VB7uT6%~gu1!V
z^Pa$Xk2LsQ;brEV)utgEyga<h{HjJEZ$s{Kc)0te^@b*lRJkXIUa$V>W_!FUuMss2
zM(T5+2JE(Uo@FFPUJ!xaoXb4n2lt%OiT^svShT)y)L!~9)D}g?@@oy>3$`$Owa=B)
zD<UG~189t{gWBuP^>Gv2Y}XEJ_18HX$%=wW4eUaET<!}pEZpDz_CV>QMh9NXF77t~
zXmkTKaD}WbzRb~4X27iY>p>}PL%F!~<k!b?p0AyERxcWmm{>=gC6{e`BkSQ~F}Y!J
zTRZF4Yfn!nrl3DXWHRX@a$O%)mDom2XqRb&h?XHGSMvU+7~)B;!V3SXPpg3PmvL0P
zm0-PK)-(fMtX5ra4AT=zYl7A-;8}?|E;Qgy`tthaX-1&e3sNjMx?~BR#a@0p8fIaR
z#|1>~W{*3zxeOz8*=Cf@;&Csb&#HWhyEWkzViY~`EkD05XORi}JRwUxNc3JCZqE9g
z0|{4&8_9A<*Rkj6H~B=Ss&v+)yYqqR4NI!<F`%&oivX;_lI~1kRQt2y*`$P|&d&Cj
zQl-cv;tu9oiC5pC*ITy*p;xCTJ;zhMF-+*K3|c`bYPTl|Usjdd=3?buOv6RrhAAM1
z6LdI?D*#TtxJU%q{N`j%yVzko92AnZo6T0s+JJ6xp(FNtz8o-Q+d4ey+ng%ZZ$9<y
zkjkUjgI=zc>CJJEfiBnx(1i(WHjck=My+p`YL*Z0bg(bBc_8-pQpy9qxaBEDW)5gq
z>etzTHCPQwa($zL&N-j=XU4wqIxBB`jqUN-TbJs4rttX&Jae;!l{>%-9-Qd<-??j1
zs9kBdqnbH><!-;u>AcZvYGUDX-TgKg5OqBK4zIO>2O;xXoOw~Hv(wXz-}u>SXg1)h
zp9f<LVwiPMzv{-0T#b#5EoFfNm_f@?CfNjc4v_YL`j|})YZ+ln>2*zZE7EU%B_N<{
z;X0wGw5@&8o#!zhF!(X4P0Dd@j(ZWgHJ(e9W2x$KI8Wr|@4#Q~dhAuN@Q{FM19)*<
zDd<H2sEFT?!v453D@E36(x$CJq>{lr>wLK~-$PXFR0y9d39t?TRIEz_$ir83DS7Vq
zO%G?B*V0K<t)iRd4}I6yQ#?{2outIXGI{USGgzWAu`s<)i5yV7bQ5h1Eix&<uTw2o
zw+}tBDnt!T4{O$D)%v#nI&4;h`{&qpF+*rWH<-`e?G4C5a29plQit5nsv%<<uI|~4
z%P9Of7xm@K-}Uca`DGtxqKexy-aE}_!^cZOWA8GBI2^Y~q@y?W4541IyK-_(r-$z%
z$fHp*+AMC&x2l@9c+P)Hwpi{sz+zw^u`H^nkTnzyZE$z6Cql&Qe^yM*<HoT~9sZoK
zvWYoyc5xA{aG#Q-R^F23>_Xc78&|FLv3d;W*wkyu$NSOtZNR?_Or1CA)|?0$2reWC
zvazHo;>Zn5Usg3Uv#%$b8fwOf%uUECu}olm!wspY)IVXuz)vStpU*E&p|TM*(sqA~
z{R2NS76~nsW!<q)aG4|UbLm{;*x=ye5TYhwESn6`5JeWO!Sefn_Fe%wV14w0hs$w>
zN2vO=o;$R{_O|)lNBq5qUu@Re%1Dsh?t2dbn0KZy_R@FHu)B*~>!FnSg-6w1<%dLR
z|L8~k&Zbybr#m3VnWx8TzMVGYp)@$Rg*1{06HaOL%t8p{m>qK$>K|#%Z8Bi<Dk4&v
ztn#<ge-P}1&%`kUM{x?RVcm6^O+N!WK4s6vHyu^I^4nx2IO54-*p${GADOJ<h~{S6
znP&o~0DO01hIgPdKV6IY>O5gu@SgUKgSQ;RXx!Bzba}c)t7GOSKS^z*v4z}A^8B2{
zOq$T@)My|QfTRiFnx)9@$8sBnUw`df_plYx_`A6{6zMcnr#9Eet*#oCF4i9Y+7S;H
z%z2cOH$;quKLx$)xA-c=o@q%$ZeIJLlSpQ2ANq<kJ^c$C&O@C%IYK5s_;Fsu{2kM=
z++4Gm5+_AUN{Un=&)uahF|CX)rkdc`0wwho-Lj*C^^jM(S&{*}?kl=)D7!dSO5d)|
zqQ^I7UKw>uDu)*(HL_60IO8+y4;QH=H+mk&GwTcj?*7l8Un!#4^TLPpe{g7|3UC8Y
zMF*6eoC}ABu=S*kj@vFfJ2$NHrDZT?Mz4s)lmZz)qn{U|M3Oyl<^gD7eNnj*-6h@f
z#uNE7Iyo>a!5`weDMQ&Mx7G`+w+2%w^OUTGam~{oKZsKx7WX8gyi)0c4JleW95&S0
zZ~55HId6>yR^aV>EH+S@nNNI^nd$V&d>-r#4?ANx;bu~W#ZVZ)(saMdfa3XcQe3^t
zguCJ;B8Apo&3|GMy6Yq!+g#ZyVjwqhVkO51kQpK(BISAA^mi|3?+FH_nm&`2aO)EG
z<dfzErao&_kFLgbj~n+Go^FS9w|q|LzSH3h>@(-N1U%2*kS(cT06rH3-M;3^vcLC{
z+7=%<m(@4%I7Yx>mEm01uynjn3qr7)`_!RcgGQFph%Vi_<Ke6Lv*ILf1EE<{FBXRr
zI#{-KD9-XtLqJ;8h{j{&)Z$|5k>rVePJ2@=KximeYC3ua9rXg1O8wck=sMC2Sqo>L
zv(6hL7j`IP%wV~7=gzf7OYJRfxWClc5bg!-8%@nuCknKI%=8)9tT{tO7bKwT($)LQ
zW-_QkPAL=xF*Ul}(O@~*UGO{mu&TkFlJ_IESzD<fy)rqbVoY@TfJRp&X47qdGDIi0
z0s;<?{?WL$v^l52pI6$h0xnCN4BWP7Df6%ORCsTyV($$bDMWjTAY^{8+gmBt-fMDW
zbNVyba)*|}b5<tSH<^ZgD|Q&(^SYg{KOHJ#LUiOP?a%ZxTezqnenKOMv|B$I&7XZP
zjU^fj`ndG<3|7v^uX5QhWeh9g3cu$o9JTnZ$AAlu?@V|Qk6M;sTg^nJo-Q0V#*M@t
z6mVs5EL<zldkgCxMnoPJr!pRymNpp|pex+*9Q^p8ecp44<lJO8h*25QkZeN+3H1%F
zhwHgvm_9eWKX>kukPwhk+|UV3X)k_yfEye~I3BF?C9+B8szbg(*>vOy4Mdu_m6`B~
z)zeRWcr3oB=RL}8lHr7GsssM?-$1;@>KKr8nL3(aH)bwROONCISs2vc4@FBo`@~_c
zUva#VnphI5)`{KLQQyte<>qfXCt7d3Ft-+pefJ9dFHe`E_^I(SJ1P!Gl%;uPfk-rd
zXQ3IcUfoy`TO|+N(^3UJMWk<cV1c9b=tmX1?tvKM=TDzMO*)vaHoc*39w`dW9ZC{*
zA2|ZqjTWy9qs{7pqa&StZoW#Zqoa;vkj`;jTf3+~!8Q9;Rb7_zeC+4XbhAA_m7;!G
ziby4qY@PyEHb-*^UUI@BTRBeP{I>^YW@e6#Wk*eJ4UTGL>Q<IYuzgvA!K#W1AWG?|
zAK<U6i=99eB|&<mSo*UKCV$ZB<!mRbWP50SpQ)YJ<YNPnsV$$N><z{PvQ8{(jmL0U
zw89NIcb}2-4h*!8Hku~uT}8ybQrnoDVo9DX4gc~L#jQyZz3V{DTv)f^31riA1d@l(
zVvc-)42o_hK3+0JYHvU;w&Yl9ro;Z%cfnAkMl=6!KC$2m@iMfK81!E}>+Ga&W>Hyu
zEn!HGk6n~dqax;UzABj-lNMK~bckBuk0AGYMyEYLI$8icV92<0aLYylB|qyq;?MeK
zaM$Lh(Xu{__p(``y@iNWzWEjzKL#5f&bBs#rIOaz*D<JF-Rx-WY+xyp3CjhY4njYF
z4pVJ*PusSmH&T0C3W~EJ$#jKHCb4{O8<A|Tn5JZq7QH<dL$T;i{d+yU9~56a4Q@P+
z^8Sm7|LJlQbLUXBcYt>(?wANj#by{}Qwl4nk~`GOP0@zrw3zxdC=yF|Np}1=EJ`&T
zeXS)(DQfpp|J2^_rajLK<ML?}-W>}&GIMBj0C3QbBP0fFf4a$_h@h~?m|-E|WlU<d
zy8$Hw3sd-ZXvKpo1gum@spxcX+aGu0%G;J_u)QL1c03Z>A^br!ic$o|6No;$+FJ~f
z1M=c;<x4M2NZuuYYQld#1xHrXcP1iHS3lB4m1(HS^_%i_8czE(SUQl|uL_%>%OZhk
zLf*t=IIR{8>wk~-jFhQ|CGBwAhMKQJran3_We=@fJylDR9y32WT=m{}zp-kBUhxSr
z54MiL;n9+zj1-OzjE<V8#s`~2sqGydRW@V$J*%GqyV@NwzrA4pB+x*EMNi3Y4X|*i
zOZ1vwpl@@E>lIvtQ1ptun$Mv6xD($XO~9Q2gq)7=ThR3reQ;Kbt?m**FN0=}@W`<7
zWF9w<2%#HV`DAfH6_31JHkNuTeeV_*7kW=b_<fBP)yx>+Dl8EIGR<r3gu}~TSDnd`
zH?^r0Qv*A=5=tsG`1tr8TOaEJJ7Q%w;fA)x&gbo(z#?s-#6Yd3!b%}0x1BqdQp4_|
zR@+YLAep<=-`_vrfAe2rc8Oppb=3b?m)cGZm-UQSN7Owg?V7oA$A$1>z`ClH3;QvD
z?|9qv-lmLhvoya*;yarnB)6_riRa=eK6gS53+H0vshf*T{Ri{1m2f#3{idTR*iv|;
z{w6h$BSFf0z-j<MOdal$)hJ0ITL$TW8NI;80>ol-u03ZkKh-x=z6v0@%f1yajUQ=G
z&4&ZJmHU$fucGcb|N13DcWS#(LaAqOuP;0F@vM+Q(CaKZ?QasDIUwzO(A3I#BaoqZ
z%OEXnK9WwQ=seIlFEAW)Xj8671>`>-K6vbVdHz!G!_jcunRC?RhUQeEiH!SIAg8%a
zI>*J}3;kZ1jMut37<~qMi6w49BNBk|EzOCw(`QvT>`_%zo(yf8M<YV!KlSc6l17Oh
zc4nKq_j8qyj4U-p^?{k@6TMbRUVccvn<^%)?^1aI2F;7fl|s9PrLa|QH`9=$%|V$5
zu5wa5fsG@rh96jjom_2Xr0j{-ooScR;%HZN&Zuf%a4mXjzN83wy4&oIi#l9EUqfv)
z1N3H0{1ZPe`tYiGOMTej)a6$ADikl(?=)S=b#8|?-7W#n17>x*tC^XAa^D&|7tcU5
zS3sb}AcGdaxY)Iwee`)z9<x9DZY<-YO*;o0RFAg5V4nS;a&e_;q<|bv2Ce)G9@zuJ
z*!z7)3zLc$yf@Brv-Adcd$Hldi^z*PJP*}^B_GsUzBjkv>E8UwdFtjM(_H!NOvtwE
zL8KF605xT@cCdUpnx;Wp+B@~}jqvZ1`)cC!cdNuV$pz+`3qg?lSD*zzD`gqxmLYF+
zp|NBO5u;;3rNQr9B_4K&Ng4?Fxq&=29vM(SAoqp8sE|Y?kKzS6eFrgAwe1vqe@_RA
zgs)11$&snrw;GqMLW!pcp<Ja!C$nqVJ%n$M7yIq^4uHd5KAc-XKmfF;DB-|sWPt7K
z&V&YE84mY{-FhZ|iHI~CBP%OYTS&T+VXuF!TJ4hk=A=A0;-*x*qZ1dmqJP8-UD1r+
zZ|ddOVB=sb(7H;a8PG|Q6(UpWMkiGjspilZtCbqAYP)W$c>R(xuV{KB&uKl9#Px~m
z9lYQK<VKAv)r%ztR?V3S++8wX^|rS5Ot%Njv7GQ1Zm0$Ww1p(_(F5q94sLN;)9Y+F
z(h8VrcF84N9<)MRU@hZC%$1LhN{9v?q}*F<lfqZft5t~2e=Rwv3l7L@)vZ%gd7$DJ
z!=yqX;4%H`67lz0&iV&v!)zr&Y$^{#h`4!!>2IQURJW1{tbU&hMeKB&bgREP_i^pf
zAsF;>pNp3?PHYjXyq4*TtNz?fomoRak)03~HP+fDk;dyOXG`0Eys1c+MaFLU@LrM&
z1qL>G6LiRM_EAO+J$1xBcS#r_`%A?|A0Q={3`>#n&Ys<^u{Qt*-mPS^;MEBv^HH(O
zRc-@^!a&?=tWC*px6iFz2LtTa<yt|&mMWY~IIyI~X2x0W8{hFvw4}_LQ0y4;I2-Xk
z1Bw4AaL}a}d4dI;n$?b9(xAU(+|?`*>4>%Fj;CX23hDwTnqJ6#gL)fJdKT5%?hM?`
z9Zn?_&d+qitVui2$Y(8?m#kvLH+WQcrRE;Z{Bm}w3^$MMm+!@;62v9RqE0M-6m30A
zF#(CTL<i9#mvcQ%MrEV(hT>ojfH(u(nkWs7qiM)E@}oF>Xs5Hd1ua^K2NTH(Vq?p8
zyNtQ1F1=134*++M7;jZA#wO(p0NvkWF>O`;@KU2;0J-S9p<R>cIPyR^sj@qHpxLI3
z+%7^;qQs*PzP49ZSQo?@GaVbZ(N|iNcHw)Iq4jtU*a1NsRy^HT>bV<+8n89Ln_DPl
ziwbsJaw*&^4&J!%_;uqoG{Z7U)+A`PemwCR7|1x+#wiy`$dAAj^X!!mpul<Pd^+HY
ze4{|GRY0*iukTdY!1es3<hVw%*rRE+$Y=j?h|i3C#T>95dPah?F67||QrOYbf6t3W
zal7KZQZrs3#V466g7^ThHWB|5eAQBI+p7(x7GL!KVxC5^mn)!lL$Z}J{JqcCyCeNa
zh*HC}et0Mc_ToeRE^<|s^W}I{O#|GL@bzfw<x$zO_&Un3q0cmwueUS#2_9yP*Cf(q
znb!epU!d6b?Hjz=EUDEfRkof7%*UAgP@Be#sxT&kH-Jyv=ykEub!OkV`ih|c;tV*A
zgFHa9+fM6r(Acwq<P%X-JBWCU9ayK{-3KEY^N77!ztAW~n!`2bMBzM}x`zZMi+s>S
zzMR*x&-#_M9XrQ^)Y0Y$q4dn!Q=aglU!yqp=&Z)4%Q^|Y?SrT%r)9?py%9|vcA-sY
zWcVbf!A<WFSojR|f4|C<GKU4SUU6{{%)Cs84JEQ~4gzMJnc;x<h39b^CXv|E2_Qo3
zEi@Sq^yUDJuAtMAPZ~<J{k(!TZ9iI_$w1)U!QYN*2w#75`K#m6z+)9T!7*jg`yAF6
zJFUk1E4M{NMB-TVUr;As!J{d@Ygb#{L_!E?uX&B(zdXUgG#a3Bg0AULu0myrxvZ+4
z(aMpx;k*;klGteio>WhB2IkI!3nj2fzMe-@A#q&nnW&XTS^_=%LhbJ^$|Valo5Mb2
z9wX%EIt&VJ+=6^555SxAp`XV1-r7Zz9qrAv&)vJQUcUmx6do?G^B0lvuKSZau@MnF
z>I8ex)tf<Dj+T;u{n#gmn|7nM%C>XvF8q#myV?06n?vDe<o^8Cw$(N6JU%O+7<xhG
zB}B;U@@6%c37b@y-+cLKEH9izi-&t8SuB2=Y&b7js?&W}m;$95#|-gZsf|=-eR`S2
zw;T~^zu5SU-1+Q-vEi~I!C+e0)w`AZ<#s2*aOY>?X##?g4LcW-@R<tQw+NU)laI1~
zE_Cun^%G|G>@96wYN3x(+IsE{b+!9Ak!N3TH{r7IWTAx>CrkB+j-f&zZPkI}e-$*%
z5t$Zxn#L}vXz-2Cct1ENWR3e|Z>H)7!O74mpG4nG#xQB;#9yoEtDIMIVyzA=jag8P
zU&zJ%CFH^A5*DsS?so||?8<F0YPBCz9T6cs=NDGWeJ5ba9nRs;*_W3-G)Z5=xb=F_
zwE7}whq0T}U{!6<sKLTS1$L4b@KdM<Ud>pe&0E~7sQQtLUES`!fDKRAWrbm9gS^qe
z{#~2Olo>x}hS9YyegzAPEMLMyos!&%>(Y6CVH?9spBZ+I%S}BPy;|%<)^k~W<h;k$
zQ9!J?7k9J<QCC!z8Qg|bR(Q_+^jG&5ny-3vG=pNqw-)~6>iw3VdtvRnuaLTFbbRgP
zU`zP~{qf3ltgLaow;dm&(f+J=Ub3lF9)IqesZVaO_2$=BJ<VSJjL&UtoqT<)LlSN4
z)41e+FvJ{hr&$j@{${;wp#g2vteR+9^kf#&ON|r0Flb^SAd$vZwF(L7D=1jmgHW@T
zD-JC}y-x<=*N%r5?Pa*nciFceH?A(TIuA0Ac&r`1o1EvZ*c^~PP(ag^Zy>q2u#&kR
zpz@9+2A}gj-k;&NU%s9>-Uzbb_qY9IRxHHK&7hIH+iy9Bfkom4^rCkz9wE0En`{!x
z0R)~wqg1;AWq)X22P0sr_dtCdG468P8=slvYFjcC1+K+{M*S8wZFWbP4DrkaXqow3
zXaj8SW-<q|=@iQVtXqPA=15N2Ras9CCUNcn{5O~n$laMS7yxHX=E&}Ox!xFD<yBM*
zRU(#xqPy;6N1(XZ!dn10(z|Q+#Mk#mA}^Z-ULk}UL(a_9rGNgcKSAcg;)&XgjG<`f
z9_#JB+?%^aM+B5|Y_oGA0oqxx2=P$&-k6!Q*oa1A<#;JS5Xpk$VCj&6G%;fz;jsdf
z;C%$Ii&1X?E5*BVcZY+s<B%&j+w?4uPht3-zaR<+j)r;?-iK`?#g7=_hlbG?g?LjK
z_nM~63p(X>#;vE%YbNCfm>Ao;YguY#!8{TAxL+(R+W4P+VI{;IvGnTKnC3`o79`gl
zamRQdUB~?0__Q<tOHkmBr_k@a3uRmgdzQ9SBTvTgcg!uU&Cj@AyqMH@<+xH~33#Xn
z8wS*?xEERU`>)98Cg~S6+wI@>rz_TB_+KlRS64q9O7y@_7i+)t-RO@sPYJOeC@}3n
zD@vsawe3uy>iuyqdZbue*11b>Tz4e<o<AoQ4<JQQvmHY4TLRnBMASmLLHTf6bOm-|
z0uvNtPD5ysSoAu~lFd*4!A+a|)gC7o*E2Li>Nlp&g~O{-d??a*uXj@^554xI3&*~z
zanf2`n}R~LjRPmLEJ{~P^WE3kUvf1HF1k3a85H;&TxiWCt+m+|dYospPC;KXgc?B}
zw)<;$|4ZN7of~HLEVS2XQsICv$w}td$RSDcIVY~jsQqLc-sq$VYAWy&cd5<`p3772
zm?E+NBw*ApCC!r5&TesN&lC6%@6vnq@?A>(5U_XfUAjn@T1JRnjVF#7OGfmhFvM@R
zZE46(l<G{)&#&y(IRgZJVH~sfHL|CjF8U!p<Eu^}skWbAGqN&T*;?YU>re2vvvUXV
z2bcBo-tO;j7rdNqrO-igd+{0MQ-tJ$Q8kPVtSZe}U#1#d_W|XJ!ahxdbhgHz#z`%V
zuZl&lnF=F@PS0zoxhY2`u6J!swb;t_!c}vkK=tJKm=db6>(peAiY<jsQfGcO$sJPZ
zclt%eRENI`4xeO*d`&vVl_(C)T))dAh79`pvQa+&CmFF3?gD;9S3TIt{RTO9KKYxf
zFCWAVD*m2hB2J^`bRS?MjlvR#9nm`%olk2jEJG%-d@b2*djkkqQVCd;3oaF_autY4
ztP5&k7XcfJ*ZOHO9ysP&MQItS@NDM8xzMXe@@o+VLM>Ib4{Ss*k0j}&{Rr?iL|}?I
zL7jrJ-HH-2=QY<oehR^9+q8Z^q%RXF!m$s1>4>EMOpi$E-*!h|pC7~Y;gLafSNMN&
z0nM5#M3taP^EKT}rooQ+Gc+B9gaHl_6Djuo&c<~qcFEYG>NjYVcK*cq3iCmVicV5j
z0|kGWir-431Z)bsbKuU^$-d6d8Lb-gUun^4LQr~Y4_dkmLO#G?i;H^(OdUcd{1B)c
zwj7y|&iy8D2`qBuv&}T~q2xUELhEZ)<DtbSLqo%2oyw=MpwkpSpYtb;rgL1hl6lOe
z{6V+0n|=0RI~z>b=j1uSaiGw&Vgu--C{|H*W=uHb_OO%Ej}>OQW`gyuSJtzY)P3<m
zqLKWd=2~hNmITlm$dfa$M;85^-WSL0e1wEQTnE;yDVsfGv>hQgFR)QllA&mSzj{TL
z7f^-wsEF*d^*6zwpu{kJtCaR;^viW$mqVobcBS=|dY)XOWJH>gdHhJ<4!m(@>~vd$
z<GDfTmjj1VbH%L8bJ&aDFEm>Z{0qbWoiSmZ4SL&D-a@_<?K~xi0K9elLp#`KNpn$s
zDXA+V{5P_P*#oSk#L#WC?20l^0>bZt<HnY1*R05$gd9V+YPYgWc9S0`#}WGL$jgCb
z<F1IQd{WXk@eGhoE>Vmr(h-E?Wr>vG=g?EX(C3s9ED*lSn9~!jsS<-J1?o=s^I~YM
zOzauyG|Psgu>0iPoX%O@5&xzJNui(R^lQabbjt#p;{Loc@xb9~S4aQK5Ae!JuC{e_
za(M-*uS`ivNlcs>S?xld^sJy8LA-|aefutI)VvAC_X>XVo%jZUCmbhCNyK+EDI@ay
z{^{PcWTg0`2M-dtt&^sye2P;Ay+<3BNq_TB-z1fvwTYHVpJ(Q;u6Z1G^hyt;8|QxG
z^;V~V(9oY!2KmhN?Rd7{xn~r{p!5RZuO!z_C-+JoZ4TlFIqW4>r3rew9UhsESXvS_
z1q&^up(}m*s*8>6t&R>MJChuZu2-i`S7%~KpNs8SBNzb*kI6w--ub3h5hIgvt``GW
zojE*sy~YmqG>oz<oXc{Y2Uw8YJK7X>-jFM?Z(&l)H2H*t!~Xh9x5<q&6&nxT74wux
z`m$*1r^zBIxP0(=|2BV>%9FLrk<wUxS3j&VM7R`%&TbjES87nV-CNefjv%Tq?@U^U
zWZq9{a46AFsRz`CCZ`kQ_4q+jK0cF5VRzKGZ?DOCy{HZr8n)F6)C*Ni+h_>n<!XIa
zJHu>XKJ2F3X-<<i=GG+V`%tm=uE6OPz6A%TxzoMhvl@OK0R-q**rdZga{9vi_Ve{P
zdhy1agTURT7km93Vrhp!Z|iui2Z9rc(^6x5);o2Ey7BH({6=`z#ba%~vq~E-Nv%r8
znn;}*tr0Go<>xEA@Tajot?w0TpDHkQmI=<`Wgu+#>%2>mj76`~V{7SU3x~z|W_FMN
z{l~NAwmYXO<b^&!ud=sTadmdOM@mYn=WY|v5AfNR*4F%<zuJ8~k7Hk<{C75r`<}7H
z8Nqf}@7loX7J5euG|tHG&p*C*?_P)3tw=kBu*bXZpKpcLu2^*@cl|H18<%`fuQFjF
z5X53jg9}_`C$1Q9(U~6)r3!CuEh*)wtY>wF(;&-m&y}}0qmWuHy#LwBz>`r?9ge1I
z=_U=9!D_*A6*%EEA#O4d{_d@U>m9Q*NLs>=>x~;TsJYPo`czL0HCNJxpg`M>|H$xf
zYP+jAWXhl+m&~f?9=h{*N}WktzuD;maJrp_PDrM_k#IqirJr}bPpvqJaj+tuvuooH
z;YuE#9`ZU*Hi^_7mCV&hA3`ge?_MgV2$*hE!T~jy!i9|8cfRW(39A~9OguewWn6j$
zb+Ft9l;XYd41NMM5#i<q9+y&S!V9whG-!WKYT|<mZq_7HWfQM(Q`}6cS^=|g{^sLD
z18VAYjR>;4m#0IK+-G?hG7$(*g)~m%{f`$xk3(Ddo5Db{#hqlkjZ5^?@Q>FxShUn1
z!dm90r>9#N7dIyu2GEc}lL0W1742nmhXx1l2@2TJo<wa9kpXSk?~g$l@}i}<*}gtN
zb=6_-wmm}Ve=l>f;<0dhSLdfwZyQL3DDG@^oe5G4KIe7Yg@~@SD65Q_FU!CADU7>K
zyZiyTJS_?dd0|ahE8H91{EN*}T2cCM2Q7>LHrKz85S#S$>j`g6A(4{0*N#{@9yM=M
zL0`SDBSNM$xLZvX9vh!*cS>weZ@PSvl#r+;<)y&zGpcVNqDowBwNg=^qp?qyKvXqL
zOQ&&OE=VD0WtQ}bZ-gN#RL&O_fBol1-lKcNdaRi$czq!aMFHsXW9a^h`^%g=jz&gz
zO@`e&XrNK4+|t)_PrnN7eE4JJ*5h1qg`{Yk{qgux*acjmYLw8U?Q>BjwMOXSNvCXD
zEl-)88iIs6<aV!PJJGp8-0Coup~4NWCG|u1cE2WlJ?Ywie6P`1k-kE%f{}&t@?A$T
ztwZf!F;9{0R}=6Z>?txStXS^K@k<uZXYc}GDbihUxwKiNH%VBsD?w57`uxr4=8(ic
zQ{g}yhiEGnN0!RxB-H5iQX(yB=*uMspUx;V<S{7v{@X_{MU&-6EMqoYkBd6%q4@v)
zMTj!REy`$ktz#Gzp?`i+&Jw#ULMVk%z@5t_|6v!uR~bhOjTe$3g-M+<FSI(6IHl{E
zJF>>Ivxm~i3Z+--vQ2s~S#+n+kevA=^RTCVX%A-qt8I8cE<&0|D@|01M~fKa*O+{T
z&TJiuzD8;xvNeW;M$M&R8GqD1Z|F0_TQExLQ=2tEINnh<`1K%Nru2&Hwdw<}`{_O5
z;wNMY{ZEH_h!bOECegOYZ^V!dpiTs-v9kF8JW(K!>i@wSuRJO%Y%S!Rl8-u*-Ut&q
zeDYwh$m8-lC_?=5Ix#*E1Bl^iXw3eTkOFZ{XHbG{fL_#xZkCsFB3wnzd~l*e^Z88!
zZW&bEw5`zUvXG!EEDaZaY_6Xw<8ywn*gr4w&!CL*;5Y~UkY#%UMm8-PYbR7z9Ug=h
zP*<gbPEx_|6Xt~=wIcc;5$=dZElurz*3TPaS|es0H)#x`>@fv1u5U${e6Ax@{631l
z9>wk~D*iuy3}cgj9Gx-w`p-Ra$o{2EvGLR}-sFV@TIhO+Z43QcXQG`?3RRCV$s3YB
z=lpTaJ8^J)TqSL9Z6rf&@!#LemZq3}dOQA09aS4^@Yu1d=`b<WT1@sbE}8~9i8x|m
zgvJ>?d+Y7pQdw2O&BYb>=YJCq(EiUa-i{Z3wCz#xHkRHlE#_9!=WW*4u^3@JeKDLp
z4FYxRJSvP{liq9b1cKI0z}}{qYjEo;e89TJ!5{VZcPBXb#26b{(Tr}^*xwcVNlg^P
zM}r-jf)z5)l8VXan{=MJZh|F;k6F2ujN~0$IEkAaHBW45F%T0o$(7T(18WAM&5M83
zG5I=t$(USlThNF}EC4S1jztjWCFR|~K{UD8<@2k3FWF>xh1~U9tjDN#_K2@^vZqVf
zZ!=!D0^?J#&HQ=Le1t%losf{22$ZPW(DNsN31*(ahJM>}nbtX#@|J|pD^4nHwXR`t
z)ajBD*H71=@qmq!Q#PJCB}c6u(+uy^e|30o=%0et0Ak|H<u-2vVc2VG>z)GF*+bJd
z>F$s*8;s&Nmqo*SW8Gl~k>^=E2o^5k-@y#{oYNECT)lRa$d8QaF^4EVE0DYVHgDSc
z$pBTPyaLxk{i7;+fg|DQ)trl&gyiKl{`0=NMI}ROuTNAcCXq>0NuS!cN}7lGiH<={
zBt%~zdt?(id$97OFAffUEu%jF5x<?U5K_}Q$40SoVEq*eR;f4d9~}Gp+O?<8O@_hu
z{Qmbn4@>JeehWk#@Z(K=g+DT&7cV8ETC?+~uzhpUY*2;K?El`%t%I~Ntn}!*zqMf_
z#B{Maxk)BSY6P>ij!A0&Nf)EvKZ3=t<wnKtQI~8Mqnk0cP0h~#teW$v@2f~EPN*83
zUmM?CNn83w?5h+Ubi~X7tD_3@R89P!J9sY?8kI&v?DKA0<g#e!C)NCyKfCa`c6-dy
z3x9>bL6+cdv;*ZICD9VYks_7_+g7bq+6hrY0Lj0bp8)}7&%5R#59Odgf8tg%4d3m`
z+rK8Z=m3EiNq7<|lcQ27%qg@^7b8@0{f~n1=akq@DJ9O+g6tvnLbHW5>#2&$O0UDC
zj-&NQX#!A2zDIbk1b(2E_7dcixu5gYO3rt8Pk-MlZ9yv)1rYk7TbtGyo?TvCL7&6y
zEvCr!0JX2f@T>$1r~~n(y4ix%#49lgKENw^QHZ5unFTB98Kb7h${K4X(?*eQe$qZ9
zEcvwxW{FOoVKK4mCrktZ9&)j}+u~Pk3z@)yW|@_=06EYO4}FlX#rgAe4>(o22H)U@
zKU52H<LBYwupLzi_;rTxuDm!oGn3c3;e=+obvmv}27LY;)H(O_O`T+RXNTXbs#8QP
z%D35e*2Mx=a@=+3q)B&Lk7cV9g(Bn!b_kVP6$W$YNzbDgVV6{a%iZu4orU>Rd{6~6
z^ru;+4Sgcm?AyFDo+0X8sCH4-8BwKMW6!Ks9-3k+!Kwm#$I<a|_8gJ*v&d^GF~A#A
z`QJD2t)DH_85or`BX)C`Zbp7Plk()`2-7|Sa9UGy9}bBhGHCR9S)HDK=A;<gJ5gij
z%<G2=-E6zEo?;%e-~gRWQDlu!eJ>#&hwJvp-I?Yv?^BQ&a*XG`UD^?FM7kb34z_xJ
zciTe!;@m3NdOl%p0k7S!e*GVJhHj>_hb}Rx|0n{Rt+uJc6w<{cUCwUqpEafmldyaJ
z3VgIFR<yh9sNrrgMpH~dNh!Yib*_1;^oDeol#z)EvCzPjhX3KHk|>($=J&Rutqs+v
z-C{5xr=tVZ>)$jSvW2S|vmXl;?w|Fiz6$xFl>VKl*723Mv}JhwpS5n(I#SZBe%Gyc
zse7p=iC6@?X*knt#-#cr=uplyw83lI(Dqd}^zaCXaj7t8jv|4ep2x@RWPktOT|B2-
z@4m-GwtI8sp4R*xK%GBF{gKT{dEH8Ra{qpp%OpIUT$rNTYQhRk1*fjT;@LZ63>qwv
zvWDIIUM-l99`!}C*ObB-920uzASc^ZT=p|hp8Y@e-a9O-eCrZKEyVyRARq{+M9GpR
zBRL2vIU^vFL2?e3O3qnwMkMD9Dmmwzl$>*py}89})pvV(X1bs6>7MDC`%l$XiuXO|
z{LbEMueJ8x*mxMn&$bnmM=ETm9`uOdth4a$2|0TckTI-MhB!NHY?cNKSaT5k@dm*K
ztc`mQO$1(q2c(<ge5ksaHuA-9+aer0;{pyg*_9O)bvoej6q_XC2%a%AC92kY<F3@b
z)zElUml4KofBM|(ZRRa3%1w#T45JaN))+1~pcc|#Zx<{lVLeU$ERx(3k{(X(m)}sy
zQO3HtYg_8r(C_d6GlJPEG`MDSuH!-TCZam&;x@l(G0KMzt1`J^u6nf-zl4MYOhT5+
zRNFj@4`ed^VR4`vxkOfax>;sP<zz6DYcMws?7-gIm}(iE?}rQwX8p@N&PSPEB_xmM
zEAKfhbRQ^K`?+7AD0Y@lRF8PTS@0rT6EAjSV|$6zu|FT@uPgs1FOtmA?TlWq801J9
z(mXm!^fblW)u~wib9neiaD{Mb!}e!9JfdWpGb6Hef##@>OVv^H{~|dXj4tv7?<Psw
zA8xZjj(9#oXWNQ|4`A?=KR5ZtDgq@TNrff#yPR5FI|(5|oL?8`Bk!;~fzKNLUZZa6
zAcTZ^@j$+%I;tVH5$O{Aj?FIn4!buYQr`RhTm6v=w-16_;$#EgCkK3yS&L$w;r4S4
zMg&3~2C<N#42@Wi?E~}QVO7L690On7?3%>kap~{IXp#;d=D6xs$YB5c$)XOY8;=m@
z!=vj)Ty=q9C$;mb%I~lA`udsLrIVR|B_=OKn09&pMN21A)c1j`-7aa3Gl9n<0VcV1
z^IiVti+sszE7T-O#B8^lEc^RX))f=P-}yfy|D7+8xCa{WI^T3|{B8kudGqA=X?^+a
z?20b-v$I<*h`rtqZBGj?M*zk^yst<iES4EsAKr9A9oC)0w6&kqdT}jMn1cGeOS5q&
zho~^B_0ymLzu1T0x8mp4J#osABp2u>(QXMfs`vif7Qq}#uT@rFZhv-qrIt)GO@<OC
z?nx=}9v)lf6<foE`jCrXOyZ}+P;hzzLu}+E3&zGem<;*_mIaTN755mlo11Y9;#OWz
z!ut)&rC=@Ca#x~TV4y&Xfu7!HV&Qi37lg=Hul8k~<O3bEyOJfP&;L86%Sz!oTrIdB
zC)hm7M5gX*z34=LqwsFfGjY*Jn@cw^$=EsO!ftm&b8zT(^3G`LqA!Kgs@g4K4`9<o
z#<E+Q?PYO=%E`fc(*UXamv#Bgt!U?enJQnTc7IOS>`OF1w9&a*(j%uNgkXgbEvag<
zSja%u$x&are07l?>}E`3F;Yqu4>Rsbp}}Q%<A3+gUekS6J(*NVBZ|UDh!gFvM6rp%
zr|Q})e6+o=H{CRaMlk$<$EvlZWoa-sk;~4)%hU6#RPtBOIIES|f$RyJt=VYHrGEMB
z)5KB5jKSMsw5n-}`TgzD<#lP#KDfHWVua&Qd#kpD99DT23*DPJpKjrFL>9+cE~$6K
zRKA;S9g637!^N#TZEB5S))^l?Fe^8kX)d=~t#a<z`f(sWoIo_G7DlHEZ1M7st6s+A
zC6&N!sFa%N(c$<NYn%xAmG6zA5oF0{R~5lT{iPDaQHwp_hL|z?78qen`g<3Si_G&4
zBqh(LxVj>}o=~TgYq}OhdOqWk0lB8XethyH;MjfiRAI#S?E43)WbqPXYpfNq5Gp!_
zlE)+@Z#IKPHD^i1LqjN4m9`_pBVYv>>b)nOz+{~q?d`0N>2xI|zkmPUSt3&3$cV;F
z$CgrAdBkj{rPyf1xGPYQ{6!3$lL430D_V}8D7c`142yQ{;BIEC74GgV4LBa{3{}`l
zpE+HLU^RJkD515=Y&f5Te4DVO#E@F%OXsAZ__TrG>&kb(5@5<pmzI!6K5T``kjc#}
z$sMFq$ay)vKrHNg7xT2z*s-eOAVEu;i}m6xi`4aY9i+cc=RH#&%A08prQpz--ENC4
zaxW?`FW*))n`<}H(_1j@AdbJ}Xt%dhvecC;?bg`X=yRX7jDUSKU1!aFPN_vlK3lQU
zcuXloOt#A5s{N67rjqbnoqnO+eh#`~{#&er?5C~%-27u@Jh0zar9hBn3?3<Lnf2UL
zi;0P8i(rNIVq!Kn`+x1PQcAJF4S3q3GlupchQqo@H$42yNb%ZhEiK|r<AV)$i(^&J
z@e~Q#L}4EfPfrZ3!`&6@<H6iZR}Q^)+oMNdhTBN4Rx0cU`^(`9h2(BpqP3@X=gHBI
zUwd3)NF=@1p?AmEQ|kSL1CPq+Xw?cGm}Gkshc?e{M+|+<v&P+hJ&4?oRd?OX>RS-`
zi==rwEIhzJ#U>MrR!WMBEpC2<T){w@?0Zb@EU`9*(%4rNV{Y--?`B9uS{+1319KNi
zDvlk%V9=pf?Iddq%iU)7CS-kmePIUffFq|w@Z04<p6Lc!*{{L6&ttjyt4PdeTQ&JE
z@(fbd^|RogFH@rUd)`Wnj&;;Z#0Hh&9l}8%+M<!k@i$I|H8)$cG%)ZzNiJQG<0*-N
zJtYZAEof`X4T_1vg`PP%?~FK@sGl#xoUADV#WIV9p48EiLL(eJygbX1P`BF;7GvO&
zJuQ2jxnkNsxI2}iulvEeO4tj=i=Y+g{)8xp%cx^GULa`ym_fJc4!8l7tDQcCq|2#Q
zIf$<6^=BLeH#rySk8Q%jHK?R%PWf-F{G6;4A1yKEr!|jHh0R>4;yPQas;{?a>YT2l
zqB`z(=G$ycnhLY%jgmb4DY5e)T~I(kr~l*#Rm5Qy#@;IU4diL38w_NPRnZV0!=LZf
z`#qrA1GId2ScOOnKfU6%F!(;u{wYZk8uFqvRzitu9u7U1)27Xgr!29n-xuZL@%dL;
z^?s4>mIu3F;hSgveU_|j2ni6{;W=|!G<HgXbP+?+W@2c_Y27{wyR+e?hiyAW_Is-y
z?(Xi^)8Zy3_anFKJRM^pusr(U1`8^k%r^b}226OX9ANFa)zMP6o}d>t*2#TVW8Ka;
zjRxQ7suLFBO1qto*lL(*|KcByQ|*$GyJqL=s?OWiaN4}r6n4xO%LyHjc`#FJk?5a`
zd4Bu$P2JfDUh8!-i3qEu{wcWhbh*qZZmo!lR@hf33-MTYpeXvfEo`x5)0o_Ei)1C$
zJ586*=C<3`9g!P=cQR4f7ln}FaeRP5e?}I({7Xdy36+*h*ejmP0s=g0hbSw<g_yBi
z5U%<&KHp~%n46-Kr!CGE9Vj%|<2k)YzG;jT<^y|tf-YhM+~?L7WZAC}4r*ymsJk@+
zzIo2GeYRv<URjwLz^I@3`Sa(}5*2AcOT7dcS&9!HYe8NfhTF4e&(7Eh)Nd?!<1%_S
zDjbRNb7{9nDRSD{*w|z^k*7X~MQUaew~yzdV7s@?=moujMB>MA$zr>flFb-f0-ayH
z%OJL;-X}@=h7l4$2b&MWnvMYFZ`gG2<1cl-{Q#jv)QFjTN^1L2z0LP2YCsan^j#DF
z8)(If=VEm}NIiS%46#j0XFKX%_gpp>Ron%6@!_T6)$Qu!N(7=o^5+x^Oz2)E(hTLf
z7?Z)f`52#9T#vEocRk|rMmzumf4cPI9<A@Za=OZdxMAr6zk%J$KQ1Bum>2zz-!s4j
z@9-ifaNK?N|L!0Ds3gS;_f>PJq&zm@;tn9GV_rdqKzn<6!kKr}37xkioId*A1+R)!
zMM&8cS5cu>j~dYuN<*I7EfL8=_CaWIZds+XW~%6-^n7TGQhHe_tKt#StO7;;Xuj>1
zT&|<lwP;x8j)^Hf79*eSaD05MKX5wK+G==YB`<37nNdeFjCQQje$UXzXr%be5e|A)
zRW`}RmvVVVv4g<}vs0@akHQ|mlH$G_pYI+c$p5C(luBSpt1Y7XHlan&7;Kk(bZEal
zKUDr=f<&UP`pgCOK8uG?t|rg+8cz-&lMA{E>09Sr+Z*wnkYwIpLB^s}tB{E7H}i{n
zMy^A!?SV<|ibjyc<*-G@yL_MZw61ZUQEQu67!8M3<spo|x`?hw_adaI;yOT7g8&8J
zd)|u7oWSDUx?3vyc;&6T(J=23uJ`@j{HTM?nRM;uVAYa$8!*|q$Y>-0UfPwy73Z~|
zvsTlKefRlYQKZwj<*H6kk2HmS@q^@fy=srAn;0Q9S(*-k9JO-w7Pg{-LSs!H%o4TP
zkfNU(uRMZ%h7_yaNutsRfbOFG@VQohZM>dq9~+(-M?6Z=Ql!Jlx?9z!!}>L@JGqBJ
z>R!a5e}NMZ*R(W`#KfK)jhY9XHa{oxa$m;t5iy509B+yzZcLGJ+HSs?ZCxOGcDj%n
zVOH(np`rvktl5=|4B=>SnoX~JU^Xlbm^@6uI3aR{y(_SyR~ws7&0>H37d%TZaj4<z
z(#kBCd~g|e2fGp-54TZn-c-te3nd^6;we0Il_GtL5uaJt1y3qPBIu=i;+rO^NEV|m
zLKc&8nZ&MIys6n)7VA~Rt|#=bAa{SSuP1x*BuA@3lGS*0zBi3uMy7YREmAVZ`z!^Z
z3ar))qf^INaX8ovp;eXhw9VIifB7nhg|73@Z%(HBhlOYR8<;a22|Pp$n!C%NO(v?i
z91jZ;6B8>QBZfOY#I?FwAQD=a($W2v?E`jAV8L~ECZ=9t;R>xR^=e91TJ@?7sWgGd
zhK7bwJkIYSF}ZImZaeR<Kl2TrvV^U#D>J^5z6r0AM9@utfr>kQ3g|-@8JGtu2BOVc
zj~?gK19@1Iem)TXB8DNIYW&3NWPJO4qM|g4I~zARagL<YbNz6~0P>KC!*kd)M)M0g
zfdA?d2p;XE^~JtakURX8iRn3q&>urLRB7FM&&pIX`?-42?yQcMsume8_!4l)eU(WD
z0B$l`@+w;`+THyfBALBj$Lq8UwOO5TehtY~K#7Kej+%NoK2>L9vTlYST^NVvu<|r)
zqQq&evGI#$o!F+vr<+)XsnlA}BbajKGGp!bR$<*w0IYWxMZBK(T%B+HB4^Y!I^@)<
zXQB{X9?VrGX}p4rc7CKW$tByP*z!*YV%W?NSI0PdQakXUyzYdP$6>Xc!NqJmy8i)r
z43^|ZKy`JV)Cr+#`}>Uix}r<bg~C45qodItHMG>9xzd}qwK`@`fR7KSB<ZXWvQ?&X
z@o=$;Nv2Za=5!O#ASNqmJZHySKR#_444gVH_I_r!Ttp+}oFA{W|N9q<NqIvIL88GM
zw(C3tQBGS^Q&UgxV0T5C!ULW!Y+JvBj{azPra5GyKu`Q=cLj}r{c&s|V4PghwW%qZ
zU*f<1E$ZDxi6f0hQKH>Devr};O9SsUxnvYjQ=^N0=?rgM2TRQd0Ks6<ojSgJ>Hm@L
zE+W6YzEd9<2t$%f%gc3ILNgWfXNkNe%@^|TU|^U*AdGeT3I$X{b4WT=qXp8b6R-h*
z#G!O~h2Z$a@n1bJ@En>Fmv8FQlwuU9xL*;OQMhzLPu%;cB!(`482PwfNFRs@4lj`q
zACL6ES$abp^kClq!Swu*=u&}L@?uYF_Fw~-Y@$%x=?SuD<wbHs0@DQP)nE!~tIoJb
za~-kP);x(LJbK;15ZRknm<{A^Kj4-@BngLjsjNSQeejqC52^X)G87rTDs`Rf*>#DD
z6M<ZqX_=#@m>n@OpKc6b47j9U=wWlswgnnnU=K>L02&(Fq!Qv<s&pxEcp(D`cq;B^
zjJ0ryO2zZl!E57-&qk)HX`}<2$I7hNHriMx8r?|6g73O@&qc8BWaBcvC1rRhO-8<f
zvT3zF@4;cc+7?^g`QrysfVd`?#!`Q^rvc&w?I$FwAUST$qUMH)ziYHFB^Px%NbUlQ
zA@srMjh5sVG1~8%K;e<*lLV8&NzkS;d5w5sy)d<MkxU3B7W|D8ynxlG5iyNF6<%Dw
zIA`h~f^Ws$CgjX{+qNhglwxCBdDp%Rn@cp}`{-x|&<lGjBlbVPy%+M~zShZerUK{R
zC?OZB_rCN2U&0e%h){LEW~g9x{vt8nLidpO10D!dRC{YYceOU>=;EStbUMb5b_urE
z&y!f`yI(&{*9IZ4i-%>&rOR=xrn$JVo+s(`pWj1iBB8|DneyYo!xcPx0=vH}3<d~I
zvv1+h!moR{im9*jSZUkdbONdYD7i(-UCJQ(!TvieKa1tTCfE%xesN9yZ{beSpgiEV
zSn8)q*f?6NcC5dD-T5%hwXksKSB<e78bNCS@!V~myI~1ouO=)^haTg>QfsA3yFQ3O
z@NFp3$X`U*EDxf0g)_`_K)pb%R`Kqei<6a=)$nzjZ!XV1Am4^-8J+JUhG+>FMygfs
zT~=(+8TTukUJH_(-E`xx+6S#ae!$FJYD&uHA-1!{z9lGC#~}D^a1z}Fm$G06d9NDt
z>u<dDTYn|%Cl31}T~qV(1;%4`rnYP2TrZ;84+hkGnu95*E|L-Na8jsL|9Qn6-q$JB
zeX=P|3?o+I(c0PCRyv<$nNE?NfBNCJ$8{^gcB)+<p+Ysy)B=t@D}@r#-KHA+z;6zl
zQLF_<y1UJW3vglQ#@5EhLSK5Z`v+k^LefLO2R!|W!r2xJhQ}u-GxoAyUYho2utCkD
zob%eL;<lEtu?F-+YHQ0Ti}gX&_WY@A;n@J?&_)QA{EwQNz2%`Xz&rsDy|&r<F`Iz{
zr-*^gW-~4FWfpp+8is}yu<x3+m>=daOq7_OjFl520)CPN1pzNS=-2h$3!>GM&Hj)0
z;k^VP0X5KLG{MG^!vXaMZ(IU&^qBomRaI4hx%3BfAm@~dh0zk*K}KMBTOgm_H=Nuy
zK0cl(<kP7p1!)jy6p#7`&fcQB!@!7mNEoY^S(wgueouHrI6IWDV>DdQ63gQZGnez<
zG!d<abfT~ttAyQ$o0z4TAF3P0WiO{v^`?mdy%QYrnsA(Ak1Y_VOrJvP&qM)_z~M^T
zQuZxxTrdQrD;LKM7VCCxHisB!rYqzI4lAg_OZP&p#B62}i%JfX)e)rF`z#q@95AM;
z7Iw9hjEhrKQ^PwPpxLiN&a?s~0i5aKT&<%(QfH`o$Kn48=qz+6pVKZ`V<z$OkCcmz
zVI^dIaL$)6k4qnA_l9b2E`61yl8Acxy}jLdvbJeer(>=q>;-~oC}>)ziX)eZ=q@ti
z=(-1G?riJl!onC<lX0aY!_p4rQ|d+&0>kl&H2i^xh=?rZ;wm^t!}^4jA!61QPwx^l
zYB$SdD($>V6v|L3<+CW#-${4a1-4|;aAT4b=o1n8WVVQ6-BRlg!UqpbOl@Grh98fd
zx#<v~)L8i}72EB{G5EH7uo~Wa)xB>hNwf#vdZ0u@<Y`;pm#-3wdPt@B4dpwRI~+*m
zYInq(01$)1CHARl1tO^H`M<w14?7b*w-rCON3xUxBdqeV3#RSEE-z2_nB@7wjvgM9
z1M~h2MF8H+kkfloU+8hDs<52GI|AZ2^6gb&0ioV6ulQ>lAl#Lhlb4N}*SJ=@zdHch
z2eh&YXZ2QC@dj@Um;G*Vw&Nb{yN;MKz<5rlqkw9Zp@v8UhSg)L!69LQOZ?I$6PP{?
zm=+GxFF1>R+3Mt+D%n!^=qf9X47+itc2A(h7%nteo1cHY*I@VKBW<>N_4g>Yt$Lp$
zt%<72F7b*!{eK{-B#CRZ-(QuyL(f&ue`_fs;y&oL3m6O%Q{K-MiTloKhtz_pO+GS|
zA@1Ima3hB`^!1feCAoNbs;_R%vFddj*0|39Xfr;KZtPECD1t_fko&f6@0S3}#a_6K
z`oQFtV#Be7%8D1UYMRrKApP*!<Y2Li@mQISo!w$P-H*xBlOt>jsW;P&uMW9V3f}H~
zg{W9owpwAcAqEL-+8X6%Zp@QM@Zkzo4h!qQh=H01*4C--Yshc}Lg4V9{X+8L>#M|B
zPpov;+Ycza=OFP)L@;S@PK$2Mb%X?`%0+@=c<t)dCO7b;qNAg4Hft9uom-LNtpf*r
zeW}<Ayz^62iJ6U24v-=57CRm78cn`<OuGN97bw2TfJtr|Dc5}SXSe-EF2aY)H2pgy
znuT7MP|Z+20|VYGdRGzf>Gd7g+i}U^mYu+Q!vZ<iUDWryczg)xaSy-*lYa_2f;70M
z@iXiW0v<dhc0mjve*7mAqR5WBe)+;@g5*MU9l>=Vc|QFA&=2#`P-H;%g{RkLEtUQv
zhVv1kT&hBAzSb$5E(g8QCMz0|ESW&%68-+m%ao!T87@K*Q~w6dy-7b^MRo?{{s0SW
z=jZnm0BIskkPBrhY;F(}Pl1nygco;r7YdfD-%tEi&L6@%i#)*PRX+cmHyo3%GX@Ck
z-F{AFutiZ((bgOt6fJ=cus%Bx1eA&Lx!>PWij-Is7s?;V_?elRW7ADRuvL+krR$Dc
zf^<}1pz&g_Ua9#U6h2`fg!g8vL(ivSTZE;MkQf)wMf898`R<K(92WDv#U^JnEn#xm
zYTBpArR19Ku21hqPX^z6NcswR4V6l}nbFdGXe@!Vtv{3}7|UG=mW%0ph%w{EYp?+C
z3QkxX9L!LTp5%O79w*p8E)SJo2_UTFgIkR!Uf49BVc#^Qv$0WMm6CU*&S#f~%VjbY
z^!8ROHDjREE;1ZaLY!9z+L{3ut9S2Ut!obu^~k7rUq;jm=J!zVpE4K?tJ`i)L%A{n
zK`BrMW4NmeM50;!Lhx_;O;p;0z2fx1JR3}9ruu+zu3SSIEw|nS6#%#q%!MMa7FT#F
zfjj6+lhzrpU>hki%9Kjh2a-IDMwzI-Sg!}FJqM5?#`1NnAy`1HHiMcBBoudLpsLm(
z>p?aCDoqBU6YL!G4hswWn2o}WczZrPaX_7iLh8{jqfUG83TQ6to>)}OczPR?pWsiv
zs8_$gSLAdu5jYOH3$~~BR@(ak+2rAEQ{##X9IdDObyjBP6~HmNaNfjFIGm0Z{0J+%
zlk+$B_8!2(DPYQLUw4`4>9H9Nd&77LcmU7w+1c3ozr5mNVmb$kkf`WD;DQ(ka7E|8
zMk>AG7qP&l<IO(Oq1yvbdm9^Ak@{kUxO)ypoOueBTNzo#g}g*?0kvvT7*}d@NUnB*
zFf~<wlB?VG11K=aB__**rhu1DSBi@ubwKh1S}D}c*52L^kD1T-=<v`pADFS$&y4aw
z+X(pi`1m-8al#G}K~O^m;AJzlun10=2(Xc>?SX8^VYB`X9-;sX&1GXmJ+iKdqJCw#
zzkhefz<DetfLPee5uO-?dWt>wOPb-q7TIbC8LH(ewp%IACp$WY`hD=ayw=txJ>=)(
zn?wV~Xb0jqsDK3dns$||X^oAKjg%9+8d1?%<zYDTWbF;W!oVC@@z`?%UycBAKlAT#
zyEtvl`b4V=jm3aq#G>E(GLrk2rprCD1sZ^fAWa(eq+}LBFF`8!(e>?44lM&7;?Sw_
ztriy)7@pZ91AYCc$d?9Rf}T?I1~_kxA*>kC^N_D|W_7Tc3>tEpOj?D}wUHEwNCe(@
z>CoKAz(0S(x)QX<D-H@|pQ=^Z#B=aQnORw3vt=i-($Ud5J6A(S{37uj)>;RUzo`2D
z!Oh0rUcK6hhLTeMzme%{N&g)f98aq*4wyXAX|FJyIvoTsU*{PjK)5oqvoMHA4|nKl
zvR$|>=HmwUmIip@FP$9jU>*VV5fSYIux&oq?t72hY@~<)lk9ngbw}c}4`ndRIrVUR
zVP@7!w>dZs&H~gvD#gaCoLpRjhn)JojR3S^eUnyG_l$Cp@xe4rEwP6J*f9fESLfhH
zRqOXPD}3U(2uw(a(xNx#JL7u>bEgEtIo`I;E2IikKczYhD!8oFGC24YgfIZe5V><D
z)B5z0k&z!fc)%9YZ}ql0cmX0AxCZUU`BWwWw#;^&VK`{~yNCeA_mg)&<KXRs^KUp(
zv{Ub6kdP`8kN|KU4n+*JL4ARqvna2=;NLk`>QceW%0s`gGD~>HGK%Iv$%mka&%I1`
zDed0hiTdWXP6lLTHyF6!Sr4^}gQFwq!@l1+7zL6}E2}F467DzOLl9g@k6r%%?EK$=
zAKF*u!Gd8lUeVXGlstI2_uw(h?;v6MQoQ+2m-)FJV|?u7c~6SZ4FAdyE@KMf#=6i&
z{JJu)(3L;vC7Fv8Z{A8Y-{Bp<HQQ#OsY!{4=QG<B)Bs%Rg<Tg3DJ@)#;W3-0uSaBR
zOP4vHR?<9@UD+vaLHW@E#N4KpFJC}8GzPhT3c@VLYu&#*_K5d5u;JUKg0KN`E-h^~
z*M8c7QxbGu9uVIe{oeyDglY{w>J8);Pn<JuST1rI#S`(=pIqm!`j`VNv80|CqUH`%
z**{q&tM+`^F{&sJl)nxz47Qv5(@mI=P8-ANr>rNiuudpLzFMzwBcqj!RjuS|)_q+b
zst#%Jin4=550w$v?Yg0s2k+F(DHOwGFHU>LPDUa3)%(Tj>giGJsY5ch-y<{|86SsL
z!0Ax0V6FhI>+!uW{mkaD;HW^4(L$%hbZU2b$b4mac{&{`)RgC+p<=jdx&lNuEbqo}
zM#RniKhGT>0Rk<|absg+Q!yb1765;yr%869Xz=~~?lmN}xwgoum6e_}={d*^K%S67
z+Ui>@)YsZs|HTijCBOn4tg8NmI<!weC|NuV>+#EX5Ha-&%lO?Sq0V3GjCXwVCMg`6
zNR?vLlNrn`Eb?-4?ifM03$<buE^N^T`5Cm9IF6d5y=R~Zw1MoND1=&T2s!3xcLbjZ
zA1A)3vDV0F1ula2t^1xRLjT!Mpupg5nWVWwkS}KEvaP5O>*TW49JLDBO=2n_^p%1;
z1>Wb@)>gZnRW9w#B#=%#>4_e4n@uaM#4at5l#|Q1tF(mCjg*?Z&GR@N55m6-CW0b_
zMJWTRdkSco+F$S+=2}1RjadtV&>Yp63271F1yD*?yMXuqa}^~fW)HU20Y#yfARyYM
zo+_CMI=9CuV9Dp<PxOxWO`&L;bo_nK^WaOvO_ldd`w`IT0<|i)%{trKZ9rMMqc(fA
zIf7m(39sUKpB3hoK|O4{HG6b+WxA=Hi^*bdRTYGilhyJyXuA0|nYRI2@}x{xf*><q
zTUVm+bO6L~Y@nUaxWVrNrT^Daf1RgR%U>L9I9+w!?|V3wTdmY7b~T1j72n-Td}_J)
zrUFr{BdN0pUY>{R66w0ModPGfjy;4%xd^hItsS?2pd?8t0sA@40q6GW)k^21-OTym
zC2Hhae>WPniuu{L`w3m?^0$HT8G(CVX)@t-1$o!na_p_19u_VZF5&4$-zUgvnkE_=
zxJzo3vdaUE`b@9P_+uVXQ*-tsb<y#7;PXO47d12s@VAK-Ku`#D5fJvHz8McsW0>4P
z3#e(n5=i;jRTs9oX#tB=ecY`J2nwhZocz+VGLT{<31@%)oL@Q;^K{yoC?=Q0ho0ov
z<m4G&f^v4NWfIMarGe};pFTJTl@<#L_qJ+o*VU<6c%DGP33f)h7lBY@ek3IBM`>?A
z00I!Em~D_uzFQe)J~xJF2AT$Fws=KPIbt9}S(UC(;N=3+r{~(|@N^kIK;4i)jjdS;
zc=-5F-{p9Ch`xUPv&zxl4fVcSqL4(u78)+YGO#pto+tire*wx!d}d(QX;+ziA|7fo
zJu|qvx(Zy_;Z{c)@HXJKS_E2ab!^K&aT*R4tQXA`_EQ7cv^ZKS&SyQ){xVHUn|=$*
z``RD@0Ri`d6NrqE>#1HPya93vn^whPwv`Q?pL`qf&a7*Ti<3Sr0BdckL}c0P?+NN7
z1*)Z*w%KZ2DKBE#;F}mMS*(p;h4p+=wDX+0oi6lR^#G?7yrB(mJDff-IefAUgcU%P
z?ZcMN;t}&<*t@G^j8C5`MB%X*Hs)zl0TVz*wD7CO?POcp$7U@nTBB{)65<6o8%7EZ
zh>ag5tiy$X_+t;Ou707?$6hd9gvuK=9R2+zrA1w(fh1~+EN%~{9~(RI)@3ppemahU
zze&+G4-zyO9Z0Xxv#>zbvA(g<mAMu#l@=8hHC|y$JYd(aZDd3M1s!|^g_HA9YRC=Z
ztq-pq9UV0+7K2bzP~hDc+Zgn)(DdJ}bSO}<=iMh#>^IMG|Ekj(4mbhjZ=7%qE$$O=
z{)>#QkhMm4x_I?}O9^0HxT5<o^Ka1b<6phq=irF<(*Kq&f&T~EAb@azq0LD$591qN
zrb_^2g}`ht!<87Kh6|U@j?Ep##nYjWn@*YKtSLx1A^-JvqASS0oxVc_3v1x%28B3F
zJZ!vdpsXZ=<K1g(z7v1|Eukk|=Ci@~S+hLbHEQbLwjZ}aQsZ{Gj^XBoovB!9msWlx
zdJwqSXVCX$BmcvPL_fd1;ldW<i7JXcuNcW_yV>Rtau8GZH)<kT&){T|B8Z7#jT|JU
z+H#4=BBfHZjY@m#k%EQJjG=7j6J|AgtK~tBU%xaGHb8sKt#&$TZVb2rl_eO4T7P`X
zkKu6+wQ*K~W=6{;mb<1_8K*>oRVG7U$E*e<G{3T2;#sYYJ2(2PJ$u&0W_fZb;qB80
zYJbaTMr-JJ%~q=f4=JM44C!&r>q`Z&(qwR=!uF)?{+V{mEC-u*H`meRCwUv2lHDgy
zhqtyD63sQ#C*<kWIA2uo&<4=SXR95}zhYHaj}1rj8C8eU%?oGLdd&)J1&a#%<Zx*X
zmyx~k5;Q17Y3^5NlY8}#irt+Zgx40ylU@PI@vO=%Y@mndG~D5|;^<&YN0Wxuc(}k4
z@PaNrd%+%5kw(=*i5}KPB`3LdF+6)xX)+QK1&}I3SDQ?#+e&ph(7K*5GQvweSZ2xp
zZXNlccVo&8g80JEpEh71&)0d;GV{Acxk*1LeqHbyr`2+f(TEDTCRi-y!(CA$7i02@
zz-JQeGwAK(liZOU`OM3f#Y9a#L!k-M^MX(h85tQcPU4vcz5BL@+gCNyrDn(vf<@{<
zx|p1rQq5MI+L$`aD{T8M-rv>AK^p%4eE~!~7^1M>!P9VZvbPAMIljtJF2wfQ%rpzO
zgtp;CX0K6E3{A6DR>TnUtoFw}lP)bQSYGH62HPaM50`zB^+Gqx<Hz%TR3-;9uwNMF
z+<-n{INv!A<q{Ai7d?1L|GJsc%m%y9J_yZ3TCjjC=`UYEOV~tnGdl=$6IH04syR{g
ziIo*#84+>KcRZQ}gy_zpZ!a0kt(dFXM=9&n8cbmhvSzP-Vd|XYfy~yd5fJqTM$xO0
zCV8IXmoJZtAd0=Zdl}cZVLdE}16|n@Phc@856^^bI`&dj@AIgqs>VhmMS2}ED`!0D
z#H)s;M^h+X+$cBg))vba2GmCkU?(?6^do*(cq5CA$HqsFW-=6|FT)I<RN&D;FWFPf
z$98jbQ?Ibu?M^mF04H90Fd4y1U0V8S7euE=ut5SE_exHH%>`%yof{bbNIG+W5)u|8
zq{}9)9IQ?TAE6+;Zk<Qt+ltrG&=96Hq-I71R0N%hWbvDaMfy)MZ|PHb0O$nI5{NC&
zB_v26V%>uO-MncB$Us;3%SBjvSVv0ZVr5~`3R$&r2e78_7dIKnV{MOpgFr9@92^~0
zgKzZ$3i;;+-r?10i;yL;BWfYG6N<P414Xn&!2w!ZJkZi2j`*=Zw=*xTKoPy`<m8mp
zA!06YjplS!;1un`oF+nVceRtKq6I!uWP{|P5ypht1_AcOn+rh0E7nEjQdC$->L?U}
zjfaPajZIe7bnyUOf)nJCjDV~8!Er;RrB*$`-6RijCCT$xypa(RQir&D(fep#|NM(1
z3_irE2^7diD*HA{h{fvt+gH{ZsTBLHU(gKU=|v*BO8OM>A9%jxbZMVRH~nD0R7Zw~
zI0!$}<K=Joc98Mu%&GZs%^G7Fb**zaH>`~!`Z<u+v0jq66v5QW<wC`+v2Y}It%X0k
zaJNfGa@)y5f`X*u`91+Unp{|*AbkPE9(1w;@9@;1pBk2L#yTB}G9@G=Bn3+WCNiA>
zl!iF=>vi-FNHp1Y{e;aeu`@ykg~azqm9x1jjyfo~Lg>_;h70tr-n{F7yCaIN2gtz=
z-*{QdJ|HX@-ZcJPT_wDCZxDbJA(vf-di6MX8l_rUCmec`M1$Z@K}hwefgc4I^6#^_
zPn5Qe+uN_>H@Ma~uoy(VB93#HBL8~WN&7@Do$N!oHdNacbBjcoOXyOu#*EL-EYJDx
zF%WN{WQ7S|_8{fz=*;n)?h}Jd3=*I{5M;p?z=BqQDH~>g0C`MPH{Hd;!UEwTB$$L@
z8`#O-bon(PrYAc`M^#2y0oCz&HU^TmKsCk9)_Oh~2)R)6ugBvuEj3O0(QMU0zP5AD
zcy4X1<aEqZ6BE^R-;~2ySS$fva8A4JFW`lR6442qRgsY+P@529VaZn7S=zdYSb}%!
zbbn(CE+5`|=~e1i3ALaR3ob(&fSBn4l<MHOCO!nS%;RpIu5bv4_g?Gi4HX&;0K&z+
zf8R?|TDs@l&;vbAkc^DLjF6tb1oUNLKGZI9F~@VU&e(3isAC(^mw^3uk`@T4bJu!q
zUidmN-jkhUW0g)Phnn7l&^63twK6<2IZ1>E#X8I}DdmiGuLcBY3e+`Jg`kPcat4k9
z=k*mBB;cHn;d3Tw`Q6Y$sx+Zm+;4WicmsLyG=Cx~p@kKaJ{6c>9?jpF+A%)AE06cc
zcRqb2!a0TVO<+5tTwx#Hc(70fF3HQJ%Sn8!e)Q;(R)a5=8_<;jTAG-cLC-%kfKN^c
z<rGRfue%gP+1BH5F&T>a0#lvw{F8w>IZq4>4Ctj|Y~kQVvs+?lfz=KWdz@ySr*@<N
zGmc32)ENy3kCQJmeQC9b@St48;gU{yegg%?a3CvM7b+CqR-j={pww{xd2}wV;@19z
zGQY7j9|Q^*EyB44ti2!~%`VvQpt}BCA|P2)hlK9n6$51+7g+vlv*BMts>CMq!OUi_
zi-L$FUv>8JI?Xb5j=HZ3Rz+nW(fRcgRB#)IIEdkoN9Qv;XV>p0-;6pxwQT3Kj-H<F
zk=38?3*9}|MoW9ZAP9N@dT$K3qun=`OQ7Nfba+0r0j@IP(T_=5)v}})v8TYSgT4W~
z8L$-BLF%(e&CAQv?@4J(5cG0Iy-$V)3gPVPD(%9rdY}6=N(KHSzyM)&5U&#LdA%u>
zNt0UAa(BCHU;2kzsCx?#pQA-a$^mv>HIULhmX-gQ0B$%~vwH>908g8-x;jCUbCME=
zEn_<*z+4A?sl_NaY~&(LNzv3GcjnDs?z}<$&R30yhSUdkunxl6p&!o&VG)W=sM^z@
zwGKK8_n}TNT*!YYKXOMP2C5->a`IFGeJ&gdDS>3E($dl<HzHxDoyCwOH#l?#BXCo1
zp`sEzefJvTmDBz&<St^VHGwQF#eAVeHj8<G2b=Yu&vJ2anlBaDT!TGuuGQ7mjVX0o
z;_A3YhZ(5RO&3CkOK-<IbKJ}(p7oqD){6Zt74uW2sq(IB4+*B)_`9jk-M9tT;r2?S
zqb^xReEwVrEgu#UwVj#mk0zDG#l_K|x44--p>g-$3)%}5*Pr+G_Vo0$PHIfEylv?Q
zwAvAPYoI@AYj+o1EJfQCa&mH$kBEtg3OeX^hZ#D{7?-xttDczl=#<j1Q^|aJcmaP!
zGEwk(N5W`z)xWw3KR=`%jn41W8t=!?bh;a<>&{=Qj&i4__VtMlHw=LJa19m2;ItLJ
zzOQ}92U{yEEByTYa9E_j%22FObX8fcDDizaodgbmmQO8!pvA4dy?uDN6AUltM}J=B
z;VwGnuCY1U9WeoLcziGyd$vF22TFN8`+cg?P|bc_ub<@#xtg2t$Ml7_imT1QJNp$5
zOh#RMneBz$+oe|&4B|v8{Y8TF8Ew%sHp6Sj1Y?)%@F2YJO`OyGuGMF!$|U(j3E)Kx
zf@lX$&*bo8G)Z`QfEkAfWCYF;pv1~8m&hDLp)&wv74RO7jgG<<%>k9y*S}Qae0B=f
zi&}6fAqC(-HziNJD0F2|OfCRD9UdMI@aolwGn@<9M}hv_-rnA;sOW5ap$7<uC=hvI
zhDlv37<H=P)8KcK*8b7Cv5SdNnbV@)U(u~LFNUOPx!R|oJab?XdBco;{y2d#W!cq1
z3`P8lh((3KP3ZHOg0jCrw<`e<9`v@TgWLy+YFfKJ0f@Vicz)!7XVo?vnqX`o`Wng|
z7Cr$@Vhs<R&zqJS1BmNXr%$18VZ!Oi$k-cnH1|gPI!~;P_J=X%5KbXh!>m}W70~J$
zPry<`q`eCLW!JL{snU|edzBr^Ai^4hXqnjMJ`Vw}y-ZN>;!S(l_G*FgOJ)aQ?nFR#
zNYaDSBG<;SmhAhac&W|=bi1glnK<!VW2MT4I>{Z-#PF~>^a-u7urSvIZus>=C1`k}
z;M3>=jdpi^T>(fGcXZ-{E3L3`o}ta-Xg1OWtVdJ6O!V~h%*?1aZ+hB$ltjDt@;K~2
ze0E7O@6GvFA$Mcrz}a5kKVBoh_)4FNfKB<8Clb|?P4M|_V(tEOSY9js*bzH0mircH
zUzpE!YdtUptwzf%4bX+wMv7lpyKpb$ufr3!IjYgBwO@p&j6gOH=yz|#6&7HzC51mZ
zT;-u7e?9}YS}v#KeNdzT8h{hN7;^lLkVgoA0Exg5P<@eBW;&S-eh)wn6}m`6NF*Nu
z5aqAS<!z-)C#Us^kTDR<6;kB_7VpFY^BEX_5Fd|Zm-q+r#dYzb15kufUqGK=_=kF|
zJqda9*Wb7VC&?qh4(VW8Rd&FE0B`G96)!&2Uuyei9Mq7+KRB?T5ldh?dl3Cc_z3G+
z7T4A~h;)-wCr7BNY9=G85wU>cu<GMFxO0dqh(8ELXu;>2n9$WZxFNtiMWe!5JSdv5
zFdJshC1gsa0fz<18nf#>SM4hYxwyE17PsgeUs?H~x;h&HO>KKc@lL>L3t*!;UJW{+
zf1~lu&CP_(iyOHfE24x%Q`h@pcX#)9jUW<S^;;=M62bUCwqJ;NAPx8QNF#2$gLdFC
z#*dCTsWg&{JNZrC6`>a(#kmJxkMr^V!h~oORws}{yqrjPzu!buBrZh1t-44r|M=b5
zg5>%7cTdWHaOWmfV&FqyfjamOst?&B$g=S00^c*~_f9VlF#@~p-UmIfLbq;-|HJyj
zYocdzb^GIuAkVuL7=(mx-@Ks);{YIs@6cnBG@YB5hsSBt*!sB#>`e9SeI=$rV8gat
z9(;zl)_EFIwcEObSe-=eYWZ(v7rLQQ@;Dy6;P4`WC4z)h`Q^)(pKi`frgUr)q!A(h
zGtm%?O9dJ|%41LW;dukg-yU1-0<6i?(Oj*84xWK?HNVsxXZjL!t&LXLLKr0{2OXrT
zNp!owa7e%A8qSI#91mnPeDH;N>Y9v|WjcJiY32;^7y2f-9fuuT!*ii;sq8_#RztgT
zQAt^OEVKrOf~9{Hcc~vnMAo?ZaXRb|HU;UBNk$n$Npo=szsZwHT<a`zV_{jSJ*{zj
zm|I+I4Q%5%feZa3WP+(3(ZhvDD{IvQU>k3&uYddNM_p)WD2Smz$|r!P9!!UGejLY!
z@>e%!X5YRwn=3KJtmOn;ea8(z$lYR)df0$$&VAFA0Me=_+gykGYePf)z5cQCy)QCp
z-Tse0z#IRWPQ41c=n*y1dWfh!-J{+t7wjXL1&)TtG~J!-1^#xkj(VRZRzn54i2~)~
zRp>=IXS<(PIGqevIU=XardQc3e<7DaZ~=Q+w{Y4A(xle_E+<rj*%R1)Xx$6p78>bd
z^cn<7yc#riieU)P6e=a|$LO_cBrSkk%53QEJ_AZ5gl5)*Uv86{d}GSDfS|yR-pm1m
zi`&PKzw4tA(IBcgNU-p`GQlppHeATcz>sG$F+MB}1bW~IQ6vOkxUgV{d-(VcGtJuQ
zq~cvO3@Xm2rM~yzImnipg}}Um2D^5!K}YjAOBx$6MWoBqwWQWYO=1Knf^|&H5FByz
zjEpT{WXMoHkFZ9aKf`3x`wNVYB6D+16%@h|VNd;Y!98Aax7+1~dOc-8X_1Pbc9vPT
zfXb$8l2jR%oE*~VYZ)}*?|-KhdkZ>#AdkPyP{@7YeB9L0u?M%fEbJDM9NMk3vrift
zzcvfx<oXlP@9ncZS&y!uQFt-|Z@uSM!VduL{a<%_fZfJpHFlV8%mvx}A5YE$1K$-j
zuFe5&02rI~Cs{YwOQ<f-gTn_bp`zS7W7ZRys^vnSwD(TFx2?SN!7Ds(=W%SXqJO?;
zc5Z4E4)`G`8O=$theIhN!c960?VVu%h*hcL2P*rV(wKA*Le~It`$gn#*x<F>gx$&F
z12BmXA#biTi*CW7rFj_zg~2RU4gk239M;Alzrlle+p6olJ&%5{3?1vt`n_LX#{ckj
zUNo6ktFrG{1)v>5ttd9#2rT?#wTh3U5Ag8H>_OVXBnLmX1WK0b(Hw{*UUxZGrJ?vb
z@Z+ghQabMk0(o{1pba9eIB0i|-<(&dqlKOebvHPs(9|B0z9cEl*kez)$8NnkKQ%=h
zYi7+8#C23`y*lc2xGg%`GLWSh4b}}%6oIe;V~F-pUNWheLu;I{_dOQvX3z|F!O!Qs
ze~0O9>ti~)?2=;a6M!0J4hInd0iaN@9_=h4{LA0u>vQVpCvh+^G>wgEPlS8*F%1mT
zU0jeTJZe8J^o;C-GQgz`N~wtn7^bO=4t#Aq=;PxxKnD>Mk^VO)!V9qsms1l#fsf8Y
zht%r#U{-{HkdQu(H2IH?4uqWMk}a#`@O${eL)3qW<o^@~GX7!R!}`0GFy}JD)Dd_6
z|3-R12o%t;5&ZKa=^#D+^B=$PzpFR#3+W7uNI>8Oh&>)ic>C2#g2}GQNt~ZaKG^)E
zG2)?HsU|~YZbvCiqdcKR4Rod?>LRJNVJVN%!0)Qt!L!RjY83$}wdbtCKW1&byn;s|
z7{9G}r^mDD;#VXw{Lv|bUg${~!rf9kJ&ApB5mG@+_`EoeUp@ivNEsJ|e2B0N3`DXo
z9PvT}gF`PDU;Lc^T|MS>8mXj4uv$Y1OCLE{DP}_>w8+oP3k^(=PHl&b5)${AztVEO
zy7KB@|B*|QNctrUkmP`Rhz5=aY;Ph>jBgrq0A`DcD7Ho4H2CVL993QA@RU(~<+iM_
z=*5RsJ=9}x0nWsDzlAO<OZhhb-~>2}Kf3PBcP)LpR1ATbR;hqQI>oO=3yO&Ta_d;Y
zZr}n`EYt@gAv+>65_+%nmgMA3`+IvWj`uwvQ$qEUa!<=Bx}dIC<ZJsx@Z&c#2r79W
zBe@CbyyHOA8O+#F?t&I4GTmj`03uyJ=mv0W7CYlBeIyQ{h;ORtPJJ<vEY9led<Ico
zwbCxxXhdCbuGV7;L^*0an3(YeEQi2r)yjgx2?>DcnP~9`ht%23_z|rnsW!{3DQQ!8
z;UR8j##suDEg$vd_`Vf0#e1LK+h4JzyVDCh>sF_Um?NtE#gx$QIOtPY9Vus}q+A3P
z4{QS#r5vZza`-9|bh7}X1;O_ayoi(Q;0!$Xx+&)MLUx>7-<%Q0B=ZguuCm=CBO#fF
zDt&Kl0>=#$R8wmn;@bv8d5Z7e<@`a~w#UvoQM&49Ra(e(B`@rZS-K0&x@aJ;r9Agt
zKBvyx&tJS-k~;{ou@-doW$RcP)L-<@Fur;4%T@saO3RWfksvCSY1F6#v!DsE5)Ba1
zV39<*!X*pnjH7|3#2omWX0G$;(JG-q+R)tak<8k3sN_vk9{4l3Y}Vt_m-^4qvlu(p
zdhJT#TrVfHZ-wpSJ&S`Bfop}f^h>Qmlp(rzi>x>gXJ1i7n(!qOjZSb=>1|1vMp6?6
za?hV3Iz;{9>tNs)8k|w@Lh!7z+i@NIDwipj|29*hE+R7{;Wkk9Hb*Qk$IqJ>vP~tU
zB1hsqv06YPEd(zBSg-Cg={|m@ak9F0)IOZ1>1r~=FHVe^>ld6*!8hUSXwl0`J^ynF
znbfd~LOW>3WNk^~RX}D`)z%Gr=aWi51S+-^x2KAO6rJZ-4#PdPruntBra+7y0F&TU
zJ?bz$gkfKI@4-s@0my4Jguq@qF6u$NJvcZ3I_8xjv5+?mwwUuJ7$JSUFnc6_D^`8}
zbD_mMnUbfY^X7?Z(!cuXvS)L13?>!kZRgARv$?dIEvE4fIy0Li@iQ46i(5MQiS-Z=
zIZYW)`O>)+8=QaHs^!Cb4}hryn55sGl(w1!qc2vnvcSgK0%Ih^k})=5j)gUti?G+C
zV911^my?MmM&){cpCz30Ab6Nyd)b_Ao12@XduE%+<+tzVyg%q<Gu?kAzt_Awv~`lb
zMqD#4^l|j;=h;(|hfgUdjr}LS58UofZ%eC21f&~!hF2jv_z2EBfYD>Doqz+Jabtv3
z>V!<X-?kSRp|Kd&+TXr;^IY==9$_-t92m|-;WNlQdqjda(Vz<mEP=%)_V;jc$4X2q
zbvg(!f`3h#OB<RUNeJYecu<%re{3(z%F2Dh;L$1Y$$)64Jt|eF5%ecI4++H4#r{Gv
zqsN37LP=_THw@apV6~B-pP!9ut#FEX*eZ~vX38oU7#N4Es&RktEB1;u2Z>7cUNK2q
zl4`p1?`dn;{)R>%q$)dmduIkm?1F`SXz~|7G<-eMAucBVUil)viFnd+x(Mm#o<&%6
zNlW>LtBhWJ8D4!pB%fdgomeT{f^fO#Xn+0u!;pg?2E4?5X|gi<3eB%~;vU!t%a1?V
z9@f!E6gJo5LtTPNerW1zUwni*ve>(efBnzVTmEMY>;b!%=OItP<T#N`7LPs?2q}j~
zMn=hRFoUL>L&S}X^>={9RYa7oyciIH>|ovv^6j!dKqhiP*f0t@Lo~*yu8@o_gK0ft
z4(ALPqyi#5P;|BGk6(dr(F0|*H;wTI^ToZY4IvYM#|gto0PU7>LAx*|^s4#!b&zKp
zfdO@<S(fyq!uhP~W&C9jAH?3Y`ah~Mn{K4IIMPU`G*H_BwL~pjW&!O>1zZ5@o;n?e
zH+s#~0GSHzo4(;;C2nf<svl4o2>`5B1+HNU+8v)7=;)B!0rfpInRfs^wlK7XQmsN@
z)SiIT=8IVfWdihsusa>sLOfG1w}Ol`q-h3zT1`S|&4)%Pqp?Lw#Fwy0YC?h;*{rKN
z?FIUMV%#!mGEf&m+fjM$MuVT0VFu`7Qfb_Tp38&ZzdvKThKl!dY0e(n+KP;vQBhE+
zRm)(l!Pf4B!HGO=FEI0*p6s~-6W>r4233FQ=ThD6CDu6jrqFo;lv`!K`6(D~0p5Ap
z)}}$b+ie1NL|Q<a7YVvl&=>{fKyQJb`GM?5NT48#oWOt?0gUK<?LBzEY>9{A%L0=L
zjfVNUU4Mp9g@Vv+yFLF3k`<&VS-ydDFXGrqE95kwjCF_dhCbeyA}0D##|eDC=8vPj
zH3SYvBG9KW8ZNi)fG7oAI%wC%0eH}r2tIHbu>?xluV4#rDt!78kO(|v>iF-pwD-fP
z6+;0OL!!2@96MLz5cd%yR7jpz96sW_tr?p7pno3NKa7QUL?5P9acQitUAqRk*HpQ}
zrYnHh4Ktz^N{c$rnJfsd6}INqdt0b@Ou>kE@P>FgRoo|^`vaf@r9b;{4Gc(Sb~~Qu
zU6M$-9U)X<jb4INu#ap~EvrknJ(i~$P8s0xMlQ(qFz))sSUael9UUg!NgkT_={4U#
zsbjr7Nc;P{`pe1l-WteK-P(3|Vzs<q(h{p)xrq*SZV<F~17FYb<?O7l8Dcr$yMlrO
zI1_N`Ku601w@XY+tTT74GupvyxG&CEY;HNmW;*%CG#;k=KzxOH5rvr8(3uX~BrZ}L
zQfGkc6<r`>Q2{VQdFW&R)qal_gcfeo$zG_&p<y#&MZMVACn%@~x-LPmyW6z$=hZD7
zYK7&61Dmtc4;<Ep(3l|4w};2=pbM{=@x*Qkr0EYIYTVIlrcXg#gOM`3%^^#%4p)gT
z?xBOM6cJ;eF4LLpQ>w`Y8+FNWsGfk^)w>N{Y}0dd575z1(+)_`xu9IGvd0PE|0vS)
z?*SSw>r$qlO^?naIRzNRLbK2?Fd!d$192Di%71fn5BrGzQ8@ffF8!Z32;q^{-$8Hz
z@U8!sb{4%9=N0>Uo-xEAV==fRk9Y5Gb)OnsRE#dY!lV>061%?0P?!=Y=_?v0j~6Cm
zl#+fZpQmUWBCoU|#&!R<HmvwRkfl8NKv+q^3PMQT+SlU(i1e{!DIG&Sn(AmSo>UT<
z9<xh3^r1o2tv+EvuH))<bxkHoPX31Y2@=8cR0-#Au1)!2_Z*OlZ<_*Vz@-|^esT&T
z$&Iwn@#F0K6XS@)D3w%+)#-dp-wu-zL<0T<V+OTK$v5bbzJ*O4=-<y|O_`C#ZESja
zxcRHqp^!(00Kqry|Cv;Y#O{20IrT*>8Vbr?qujOrOs~NL9SGC8&S&xPk8I^)Zh*~Z
zsk%T-EVdK)MY66vk2y|NG9rRyo@N;^WRj>F8Yg$NRPAe9&8pMV7Qp38r&8juGTa80
zhqAJ=_)DQV6S2E_W{4Nw!J}IZsnTd96dE&FjfPu6>cxk>EZoqW!rfPC-ys>z4g?g;
zAFT(44a5s9EodGB%U*hyu2O;Sc<$7iEUfT^`FETE)8f^uPl03ES?=Q^A~HMJ#4>ZP
zcDe$Pb~s($5BMPtjyV`5;{J#BDB5OpM6s)}Uw|0%K&kJGx<`cCN4>4#sUO=|okCpY
zid(cb-Vm`1&twqQ<DbNzq!6_s5@?$8aQdZ6vl-9z^>uV&AqkLnf#QS=>j>mUmkIRc
zK-mLrA1mXP;`mVbq=G031mL4b?`f1-wzjq~Ulq<<TUyd6Zl0N>bHJDqXoeA(;(zH6
zECe#LFu0ojDm%<~Gs@?22Cg9^i@&UQ$Tr`KUOLqcQyyV_Xn&y2h_&)g$DXFV;{Gkx
z7W22E9?c~xhs%JjeN*IQ4b6{t1XQ{CchO^hGuH5}l`lc#a4s}TFldW`zRdRI$-9}a
z;KM@2IRQDLC@+uQbaJ1k<_B<YJFBV|$!G!G=i~J56+z))wc;cWeOp#Va0;4z01bOq
zCMJFuEH5!M94$%nYMF(GOHjexK7A5>S)b-YZk)}PI-7=`<`HOL<{(Y<VYnjP@-1<Q
z7}HH<4noJRFTriB+C4hv&PN$ZZLD=hdF~>Iac5V4mvW)Imvt4P{}aj$kX?5chY}42
zR*CG23JO5$3k+jh5({g8dv?kXlDB-igfAgi9u#h4`FK8La{PA~<uepkhYQmoS;F9h
ziMVI{H#`@tohPjOC9xPCs2(Wc3Chp={`ZzBT9*oZeA*_QO&+V1<P^<qObOT5*8|@Q
z#R>MMZR-igR4!R)^92_GR0D4T(+K%2f?FFb5RNuB;l};=bb!&JQB^dEtpCf#R0MOn
z-S#}iGkVsEYNh?-KO4hlYJ9j^EBLO+S6A4v|I~ZiW6{AsL14G?xvBS1xLn0;!sh(O
zS*ENB_z86*SWc;8CTw2hYu7wc>^7%)U>fn`A2WQPZbDfE9*Y*xvw(Wf${GQ~elQG$
zL>IMQ?6n1RKTK+KKG^(J`pFiCGt|xS9KWmpn-gUS<wki)*=p2N)4c12|EOF<|Hmtr
zHPVmOC;e9S-ijasveMJvKt<&OuXnYR<Fqui!2yN5J6?$_z_Kzm)f2B}kN*7V;2={a
zck<hNexi6Mn4<u1kSEsBqYdTrSqA@A6@$`NH<vOvy&LKN`Uq2cy6AeefvT#O#v6=y
zkDCJm&CzTxI{fd8$EssQB8p9#m!i!uJvdgyB1%TTP&AbKvtS%PbOP-K!+{2hT}CFj
zsOQIzAMNdu-e+%4P-&nU$KU_u0kf+}mSFTb=_JUt9$H2lg7W>}xTK`MuscEmA9)-P
znT!vqV=<oP!#`kp?fEo9nB=;?vqS30623A=`X9o(5^7vP{c<%Ka8$v>WH`TRq=-Ab
z#L2BgsWR7S{+UL)^-*<`WD8+)g*a{o;r5la`R4nsYDdoz{;_Wldolb21r(lVUJOY6
zxx{<pqCEP~Y1QSUN#+)sC8NA09WtzNIZy%<J?#dX*UcLU|6fu@FBWgQw~u#5n`}xN
zJ+?3&=_wh1NIReQTZ|oU0Zd#(!V#fJOaH^oJw`M({*R4H4Ci7*Z>q?%w8t)?VLak4
z3<-?7=9q}EASNn!sUX1T(;tsTwKWhZ9)8Q0@v9~TAG`N`FW?CUg=ODwOyWTQf7zbw
zUVy_p*D-f&RJ1I$7}V8o+#47F89y392=FSQ#95mRGH6W(*ER&xDB8X5s0!SSIO{GE
zOe8Zam)XEbL`F@2nUaA3efv`4?~WCc7pJ?lWMTYkj--+E+UTlvX=TSsT#&gh4M#Bo
zhPyDqYM#UR+MfG_A<eQ1)fORs4O3d>yK`;P!rN!eR+ID3Y6PZ++U)s{(C+x4EcDRr
z8}xr@VXfO&3`$W_R%~JnkBIQB5td&YEq|AJK<Be(G*0WPr*oPtS=n=RdxFbaaNGTJ
zaputa;yC8S(F=Jxg^2NbA&Zz%`!8k(H?dkmaXzHWd{NkRo0NYMl?l@zIZI0%&O!+$
z1G#8NoKDl;PIgc$C@Hv?^Hi8AZ<{EdScg9UjL3u{E#1&?J~`DY`I*cYf6DZ1d=YiY
z6Z^DX`v9-2+Gwx6;YF-_{rZM8{?o}6xpY;zjLcV=hugOKbJS{sDYofXd)~G%wnj5#
zj;uwiSg(Z_8*aFte(=Jf34O$WZKX9o^?AA3$?*17a{;CbovD6@(yi?W^lt|DyDas4
zBiQu5-eb`^#kY+Kz^os)U;oxia!4tSiP^O!9imU936p6E={IhhmgvnWv4u;{fBwXC
z7T%d6*utapVvSXE-TLaSY*@E^ftp+jp3@|o+M}(;G8mM>DA4fj`9V_t!|hd^_DoYn
z9=pz*LfR!}Jc&ZjkUF^(p%8KT!~q6m$LkS{+QXf>iI*p?7MYA$tp<L&A|yx`#_e!C
z*oV1V#z?1<Yq8m?XIB0zn`RtppwrDyx-dhwNUHQ^!ml!&fsLM2Z*Q4NtH~#G#cTxw
zXlp$4{bL*wP6h<HxTX3hWmFCAC@UOs#$Jp!xXize6bs(OF0-6#5A36=WsGIFC!?lT
z`F#P@ZOENw8Prkb7V$c%S(3hzM6G=U>-=4sniD5`l0<_cnx1;@j;9p|d^JC0DEr<M
z8*k<)Tbms1S9Mpe|CkXU-j&Wyt?o@zUoKCuHJizjir1W6$O#B|mAh7@UZUyomu0AA
zWFxWd%vN55ucN|vtNv5ZTXh~=<Bs?f+AQU4mESZxuTto&`hV%}yMv-kyFGQBQ5h8!
z1EK`cK|lls1<9bGk`x5QL>fQ`5G6~7))B-+5D}Cp0wO9&B!^alC`go?nk1pgp-J5|
z`)km9_im`&y}PwrcdNdCroI{Ne*1aPbIvavMSh>Wf5JsddC$9hF82B6MdUgg_x+RY
znY>tkwdcb56DLj#8orWq_-sy~^kygY?0=b=D&<NB*J-8w;#A%Km;3jB{K(T1*%|Pc
z`Ua?e_$I%WH@rP?G5^Kg*f243hmMir;V*=rNO(YS-2C?HduI~P?(NEVA9-yqVwm6k
zQAtx^zyFR!EC^z=cqd84$?);x+_E@7C1vJVwrxySK{s*cdc!r+`2%i4qt|UOTr;k@
z;B-%1UhLpBeuyh-!L>6%0$SuU%A3?*MlW!TaJn1jlbhmwJ}0oz#NX(&&cyKf6L#<X
ziH{#`nZB~NTEd#dN)7f6<x;Sp^r9yC_;V*-OmX<|$~bvV2Tk13<O}!xej&r-mvb$T
z(A(oJSvG8VU{;lX>4?>?H;z8R`U}}6&2~uBuNORTaUnh_<JZy(naog$tJ=}0vUg`%
zlMUawx0AC88r<UM14)Z+VRcI<HV#z3(c8;%P<yy1m&JWO^Jr6i?&pLJeN`e{y0N`K
zsjt|J76rd5=gn|Pr%*o>@TT>h-Z}4c7t4RCya#26$7kduG>txo$Y_@PjdZO0?Vhp0
zy6I<PJ;~iC9@NuQKXr=kGjb(9bjr{%YY#~_kaL?fs<KuXXiRLpBNX;Nen;XZ`oKg_
zjLfX~>&7#)fhPn*e4ibP#v@{5j=I+Vz9c~5<QI_xr|zDNv1rUsdzLWhlDU=5KfKJ`
zvN6_RsQCP;pJA8>;sb;DYU{IZ9O%}TX;N8x#lm>Y7IyX>J6_7YfA@ZpGD}_JtiLL#
zuAcq%gtX;Qyu_%GUYcF?(=8K~`%k{iR9)Iz5FiZ>qBGZNVn?*2oy|jvRZ;Q10V%bu
zl>K{-{&Q%ryMjUee@O(ne-VGK@awu#>4)`cjV1M8YP$Rdw%%4!Y)Pl-9{-xlGOBK#
z@tlRbc*j`6@dM&~0v<bPq`aTvjLrw+SAsjMbwcR*vRtxH6|M)D-%poHBeZ52yy=P8
z{CP%KDa{3{+pMzH`se3VC~8FcSDA&~e|Ax+;HKNZSNoTsVy7SXxQc3mz)fc6$E$cJ
zIDh=-+S&(xe;%V)C~mxk_4&rr$7ARGe*RV3YUJ0eIVtj98+WN~CcSy};jf>U=<nL<
z3HSCNIxso1ZlC?uC*BEa*AK4#^77u@IxjC}E%%?F%r-&rX7Gtd)#v|`6BcWW>-wi6
zr}M%8RIccUrKa2|n~1VSLZ|<A>!KqkKG};sP>jCy%E51c=qU@uIF~)%YY+15(fo-8
zSV*hxI&=2rwk!O{ue|;mxABq74uP_5&knH=!)_E%Gl{L6)1wM%hHfNU8q6-db!)ej
zb5kJXM^SUw7!$QE&&svGNB9Q_TkO38NZic&!8&ec`yrg^{*iuiRG-6T_4GZy$RK1T
zdJIXlpN)r`avd?lyv9Vzu2<4I3Wy%Sw7ooC$&(>c^tr7Ns06;;8TqH%%&;iqFTF`j
z*(Y+-^ZS#GOp>QtsELXxRNK!Uh!pg8HhPX9Tl#%_B`MP|$Kl!4dduS@TQwvZX*tdB
z7J0kdi;H75<>#+W4~SyqQ`J4SQPX)ws=t`=r>>$G`UUbz9<ge>@S=EdEbp7pOzzoN
zXS(`wGK=Z10O;Ps8H!AUvx(>AmSsaW$E92wZgNRGG@V#lIA52fJCuXm^RMAj{oh0M
z+FdR4g$+7127|-H+X_5NktoB$Avrhw?SW63j;7qyT#sguke=gYZ$gNn>&3c6=ZS9+
z5mvpuXisu|V@cMPflipNslW-Y`+dfBBgiJtoXs1}8FHhLBWmM~i`E&r#9glw1~!mY
zljlML;c$rZ>j-tsdc4`JsA!H;#!>h}O6M*4vlXEXwTeyk^IPdjiQAVCo8$`)xz&u$
z{@vwD)?Fd`c7y67>AU{y?9sE%cWKQS*~IP6k0DE-oe?@<Qarw}X%x}h{jJtco1SEL
zxE{uT>M~U!(fI67WB0lde9)2VE?>T=YmR--;v!x8nqN7SJSby%Q%TjZEl~jo&sWN{
zr-89)-F=nYZ8%jR^K+yeRkW02t9XZ7GNNQnlX70GkqSH@24GDz<ouMNH{0hpVwk@;
z;|jgHD|N&QkFRZZtGAxlQQ9|61$OD_v~FIta947|%7NIYY%=_6>!I!>0}>cL9dp7|
zMeN~9$$gY&;F&W+v&YO4cb!03@>kkRL)070hcSPBRD@n&Bc*yh6@Uk<x;$cjGNW0c
z;<I1nHB?m0o5nwW^5y=0pI4E9&VIr~$@vfi$9W&_8HMV{+l1ZqVXDq?BA7vS1(auQ
zyod$A#FkGk;~#y<4T+rI?fBM_hpsGS_Xl$-c<P6iC+CnuA%FLz)8?ZWzdsdiG}L=@
zrM%yC`Q$0zjWJv6a6gc@YNyQ1n^%yyj3yK5(v)U=`{NLS|Lx^*>zDaina=>~b#lH}
z5#y@_;==>MTZ<IT$-cIR0KB^x%Xibx4u9yYj5usj8(Ss6n?9UYA(EG3q7oHj8~FG!
z6hZjO?TsyKd%HGkLvnnXRBl}`A8gz6sjpqo{RMt}A+N?C&$GDZ$Qo%xRWdQLD~^V1
ztF~)+JbfAYDapVhmzU2B%H>92C^`#>?~=Ook0~i$#iIU|7UlJuq=N4Ig1HVZcvYJl
zk$er|sFFu}PC7z8A1>rAkOlFyR1O#0mU5oAOWv#$zpYAP=^s(kg1gIu1P7B}#wzLF
zlEZ(0U4Lu@aI2}?6eC9f0?~alKEShNeyujc34^3E<`GQS_31;Ajk|$rAL%WD*H*^y
z8jBBKq_atxE(*y`9Ox8I95=+(Ftk;#v|=2G+eFQ)KbV*J?*T!>Q?6m33l%D$+G+Be
zWR--xiIYB-$%(uxCCzV}a&I7WDaT`K@7Z^kzXUE^3lX;NaBLkx;zZKf!EQiYI0$Xl
z%vmU3TQy~Q5Rr24-nvu02>+ky@`0(CP@wW?FV8t7`gEE4SID@}rPy4>PlX@V9p?mj
zFN6wlUG*UTEe3X9ctbQo#dt3_FflQih1>qUK9oRrq2L)SEQ}Y07+$?Wn<(|!M#Te0
zUaH3D<Zo?Be^*=@Ba$q24~!L1HJ%(e&+%8~GF9}!sB#PYQQ+<UsEBIKNMwyz7_N?v
zYPYX4;2HPmeN^hXFc|Md8kq@O<F`}P1V|?o!@1vsUDplHeBO7uVA1ho08doKQz>e#
zx=1diAq)^G7n$UdIWQO>_4@o+27KvW)$_Mm7EUh0ay|ir!X^&M%MimwNaxQ_mWz1c
z?K?x5>-q!*@JMxZ5wc_H-fV_fTc&Fu5sWR+LcWY*io8wd&AO7!@G0iYT(16c?vCBL
zK=W=AQ@W$jb5a0L9Y22XtM-f$OJJGIkEX2+pM;0!0p5clg)2|b#6;VVqnR-OJw%K$
z&i*(s5Ke&Lmt6NDeP&3OaWJ$Sah9F}&IG%|;Vyoa?hYk#l!Ue8@*O{C>i3zwdYx12
zb*GK&lNQ-_{fj-^OIb55mm2kTZuEZM;$znZ54`7L4`#SA3#=D7TEo)D!sOS1c3GMz
z<^C31bu6n9KV;l;mg<KZvN@pR@eVh+rTHpC!A#5U`N{88s|ly7BTG<H=dZl&v~0gh
zUdc}Xl$E<Z_Cbuz54?c>`~Si%`lENb`=Iy&4XVu*P4EZOL-rLV(f`av{PU04@IyoN
z@4C(Zt3Tw?&Ie)YBKdC-Qiuq<-SX}OfxPM_%Y}{>art3M=}>YeVL0{W_5<NY3EFWe
zx>K;YL>)Fm)Xw%#{!7w3%Kx-#YuZWE{az7fjg0)|v(f2)ubh?Rbf~O8LIIVzJ@D2k
z_D494zS7#)n&FX%caX;k3r=o;wO3;0q~_ySVH4KW(C}NlIGR6O0PSiiJ!N{=ay!*|
zcXP<9g^bp*fp+R5JPTeh8mfmK@es=}JK<MeRB$@%9M2tQc8B5dCxT8Lh@8Vh;f_pe
zB9g0S$n`Qt1+-L2SZVwB`O7-C-)JmlCQ0>&yOBI*mnLkNzo*}ETc+pseV?<DIvrFL
zaLmU8k#{eOP-++b*sIwLFQmf9k39gd4f;QA5PmiOVGRWqpIYLQGMK9SCEwu1L3x|+
zeOzJUlMFwPzXJXEosI1D&J}N*@{6ors~__bbP{Sy1bk48nW(s=lzmW{7>{81Pr2zc
zG2EVW^o&-kMfd4}k_W`yk~SYUNz_S?X7yNQb$znQIQ1-Tzh>m6xU%hxMCQqIxecfI
zczMOG>1`k=A!#*&U<n#k;&`EYG*@?Lt2J>7_2d%r%I|K8Ny_RjGpFH~vxn9eObWR@
zckCg18kpgy;2{U<@UM(z_jgohEz#F@2`6NhizIW9QIm0BlpxUn%z0gW)w=iyM^}D%
zO5I_6?&hh+r-u^JKP8khX(;47W9tGE3Z$IJ`2h54mX&T~(T~??FXgu0adLzIdFW4@
zNQQISdl%G4^_KQouEh3F?7**@-q;dp`-wfu{m^um5BK%<g(qxA?(;GJ@-*614UaIk
zeqFparpVzVj>u1T^<Y`k>46%c>ly;kZJB@kXTIij*|S5u->ZzCpLoy@7f(&9sm~b~
z`h0L^o3=G<Ro2ACb4Ba8fB#}9_8awO*wv+eg(`GkZ_()>Z=tC`sr0d?yi^@TAza<V
zn;n4mc0Ul2C-#NDJ{=~{)y_|#)6g`q_yU!79Gv|7eWF3;=u=ZW!fgACGlVX0w&eVo
z7BnPcR<tuP{dBm*yYVA5!ud-ew_?oqDWQ}8T+dv?0XQ=RXF)m|E|mHs-(H?}oBR^5
zbB@e^=K0a~oXp;eFc3#c(e~7th{FE+izD9LLbaExyHb$MvC@st393IV`3SQhxjr`=
zPkqyF`7F<(h0SS**|fVh7F3U;+VEQUu;Ww3lL%IjweDyWqd<TZ=eI}6yfw+7wHoVD
zS~p3wO*iNn;6_fckwl#ZIdj5e?Z!Dt{p~M$tC7jnu>HKgOQlr*or5wQa8YMmr;>ZW
zkh~lbS^@=cRG%X>U@Us(`VKWG{N-lm&=`y2`Pek&%@YjW65G-4D9Xs1y*YPXF__b;
zCeu19U&<m1x|evac*l_(o=rsZ>jUM%BlmigT<M*+eIdQgf=$B)d@cE;FV{w2YobAQ
zTzM-fx%uHVO;duYz*y45#VSp<uH;=6F$!%)hZwKxO$8nOUj~{wHcG4L(AsT{KVL4A
z$7OCo21zpyvycumq<p)?)q?mR!PThc*3Vfw(_3eMelhRBRcm;9S~C(^WUI%6bnYKd
zi$~-4>`)={aAH2eNGXy_n_QGX_3@wITGQQ32db+SJ2-X0rRnB5--Ave!lCxd_p*qP
zzrT7sIiPzWwq6TYOqy6J>JyuQ-PNEJ+#2HF*-hN~PnXhX=zLD}v0TBG%f{yTUG-J@
zq!JgMQtz6x15G@7NL@yu#ixAs67q}*V<n%L9AISxuU`I|HESOi>Xb(%XtcYHc~peT
zNf{T;Sr<I3i!R!os7DNR{SdUJ_UlEBM^B$N6?nvh$C1GKQ%kjMbUJV@kN<crzLnv7
zbFJHJS&EqtAnzalQ<Zwy^5qN0_R0w2#72T<!eR53jffmuY87tESC{1pq@62juI{%v
zTnsCeF2YMJ8#7~g5B=jdnk`|};T~OJ-H&Vi&UA)J3BiLt-`_P}r=xlLqH4C|2&4Bb
z7)p{+q{cqh@Z)@mf<OE=t?Ko~m<34nUZ~-L3hL&}ec=o9HhVB~(KJURR2>5Dfc<Kb
z*mae7snNUG1+PWd_;6ZPbE<vmaC4do$JuFbCIthIhUDeZ^~2H=2j=Iy#jmnXeupY@
zboZ8%Lo+7_jo-&w<JM;JkQ<1P@|^s7xN5kC5&=#Ou6469gQN{3aHfv5x*$!Vt1iN+
z;|W?CjGqZOauB5WYY5?X=tT*@+!`3jivLF;wa6CjU59;@M-)L`+NdB8+I8k9=usFZ
zG`P%!4029kqSBNej78m#pT<pC^|~5{Iu>rJD<6G3i&&`jiEdMZ$?wrjd8{v03hW>n
z5&u+qNHXa@%s9Us$5>4U4}|vRk(gdDxiNX4i>~tIQ{z@q2^gx&7VsiA8oI%epB&*a
zBZa=nwfE8fb>yXi7?#ZI)T;^1Z!NF>!~(SAgbU`n`zn^w+)E~3b-XCCNBfIa786Bx
zd>{5HbLSxA0uQ;%XlcO-nR+oJWrE4fA1Cl_ZNEP`e>y@sW-83uqk8Oi5bP5yyN_H$
zK2I`|TMkkr5sXWm?Z}0@_K10PKwm`^bc~(2KRH$=(wxh8<D$&3`z~q_{JhePxhq`h
z6_x8A!I>Gf{ZHmUV9K&==-sq?=9GISMn?(KsgdTi(zGi1tr3f*3iMQnCF?ebE*<M~
zgoZ>Ptsm(6Z{cM~TtGNh26QcBx|sKwxG$5`=ZLy*FHE>h{aw29>hBj8;gP+Ia#uo6
zA)Si49VthG_mWgDLfod^H<V1|k&<$0N?BUUDa3Cn5S*k~oCh3WF%m+Wsar|E^EfYe
zlAZidA`d?|b?X=BzI@U?G;Q4&Z5=0p#ssk8ES9M#PUrpgk#^q5;|fZEiOu@2%Ol23
zhewsG#W;RjY5D?$Yv*~r7$0iY<{u{T{|0vQUv*pm9suS)_8)RD)j>ONj-5q;R&3x@
z-wbz-<XfHoj9-5H9mdtY?=9=Hy2x+d#81<z2%*A;dHg&)05&Kv2Y-LauA`%IqNKVh
z-ECG=L3pq=vk`)hmDZHwR;|!Y`7B;_&w-|i`d9g2?Qc7cHY85HI6*S>oY$QtkzO6U
z-HPFE$MTWwRGH!v`k3lL&A_=3ZFwP3yAH>Y%&T62S4$qcp@mX~-<QwWD#>5srZx`f
zSurex5z$x!k{YltzRq9n$QUkAj$N3I=Q?j2`W&jWEsfYbgXI*gD}TfKpvu(_Dp5`&
zE!%fN1)yO7s6<rRFFaLl_4EvhBUUTsrNZL-_kVpPJlrLIY9;s3#!Ib#RgSWMrVi2T
z&p0e7n?%aM;^uYp3q!Uji1aR>5(RqJAIkvNhev~&u1v-zCf%u}eZDPd*43Y_i#TkS
z^s2xDR_ZW`6D1-<4ms0Lbvu`jrSdxkft!rNrkC!z?`o#`L~kak(!a&2&DN-HZXl)r
z)|q3=Z^O-)6L)rw6ESnScjPtyXx~*=X8fZZ{}E0ftLcPRfxEZIgPu>mzRTFe_$+3I
z95hhWP0w%Rj)B?oz{*ps5nfy~aMCx_YdZT}VrasHXh01;`DU}jS5_u5<@{-u=cp+P
z7-|+1GioGbYk6+cJ=h(PWA29^gWL1MI~*ez#Yft*4?DhRq%GvTX5JX<@Ic1(kHNSi
zYLT@NgTyuI%hl^H#q=D-I-(9ZeNwo^$qyKF$?$xKOaBvpPARloZPd}+C5c?dm3t|j
ztd)yiA2^3LW{~9{^1~MX(bWzn-I1ydHQ@sg3VI8@R-Ss!($1Kf4qiBu+C3kluRZuk
zITR^)Y3Gw?QHEJ%6p{ZsF;N<YQM2e{E&_R>hz^UHf!|jxSQa~HZ>19R$J4Qt?qcY5
ze6y8bUF4wO>gf$4dE4T=%pz_$UK?xc$FnQ-Ooq=(<kEW^G=g|3*a6kFTD_65?QX1+
zow}yxvq0gV>wO#z?}l@aFY}4}+f);xJY6SH%<&3fK^xJcE=yIhFw$TD<=2ZqFHS$x
zcc1_Mq^L`kFM^{5O7?=O%3MQ2{vy<rK%->PuJ8!5glIlHl-O}SGkzn4k@qwrI-rF>
zzL=?Xe!5}MLFJ-IC&PKDYP@w8sRZ}QFK(aQ$q8n7aICu?$DhKQ1!Hrs1%RMo;+CUO
zp&Gi4_(BDIr@NG!1*%y^pa<T^4xE)FIt(7dT1E|*&j)mqoX7GzYKF%!IsI{fYrs$W
z+4y(We9FLt)iA+xB|w1wu6yTEq~Ur6Ncvna3;LoJhv`%6W)^Y#3zjMf?0q(}Bk%|S
zlH3uFBUZF=+?h}fc|lGTiMUzhF*ANNGR8(SHcbK*tbJXtj?X{-SCLPsn9Cn^hp(uW
zMG=o`YriyqfAHcvucG4OhtUSlkKU3Q%X5Qg6Za!=;058vDD9kzmyzdu3Etw=`LwDN
zHI8VqP<Ea{B5M}q@ps*;Emd-}G+&7Z4R$CXONp@4cjS{qv`jQrILTdFAqVGq#4gE`
zOt9u1j+;%IH!zdPQtGw}T@oYq2C9cj5QM`=no^afWrg(Qi5S@HSX^pOu-zDFvcTFf
zfSK!kfJdI&c8VJhD$1PIqX|0}4B{&*wAL>BWob`JY?&>PS79<ChAAOMMC(N_@<Vos
zId?`l<;YR$9!DPn#s*0A-MPe})=WY^W&})%Im<(W(1!SPFpS<PZy<5F04+6gj=o~f
zfh$_v(opYR?;xsQ7%XwnE|mpI2_DCSy^g>D(P*po7D(W*^~DKWqs9OvU?x5u0=qp8
zgXW!++S(>~RS^(r5A`eTITm%VRGS!xR(KAjL9Zd%C=&=kwXj}>{`*J@U(`mX)s~8i
ziUT{CH6^>|f|Rc|jYqrK_qW@YUWaeeeQ9wPVJXeej}<X(wUVypg#VvgW|ue7KJ9PK
zJ9VDqx&)p(E0PO>vF*m^M$TPv7<pa_c+w`6kwIX6Q0};W6f97T>7ux}7-Yq93Ihgc
zwPs`Zwci6%5O*34=l5XFDOhZXen?xKB`NzN+2VThJKor;niS(Gcva1t++C)`tvmLT
z&qWu`<I>VlQ@hU$jp8nGAO`LL%X+cMo+LR}${lhp!LEcIfMu;JpHDeF){X)FOphGC
z1e)bdX<z|&=}aY^>u}%HYuz{T4w6AKT)%18_CpoOJ*vL!{JyDR#Ia_8Y3nCsYaTjn
zJJCI6GWbVtB@d?|_I@y4sG@2OsqKt0Bl-~zNF8O3>Xg+7^T5etfAE=YpaS_g>4VHr
zzmbcZdWaibQLctMd%OnR$2&EPwqhzDev@1P>;2GgZ2FsJQZ^_1e3V!kV_{$v=5j+y
z**#i&ZY->HpnkvNfhy2a2nVec7w{c3{dY?^0tP|f%JOlj*(_?SkWd8l$~u}tEpg?M
zaRERl&b?{4!9#9;Z=oak7JzWIJ=Pu&u_{eccI5rH0-D_^^Kkbv0U!IRCL}a4$c4>!
zFpu%gS3KscTA=I(q(~2AyAvxTd$i;}+je37x$Xx`a+tKw$o4!u{B2s*z8-ic@O-zK
zi~X@@3w<Ks;dYoMuK6)$-RquXEo3uvwg8-Jks;ABu$gLb$gI)<g)likqaiV~0TMon
zyodapMYAT0>=}jdmK5W~&X2e8#yr17*>$BXygsSjGFtMl52dMcJkCUvhrCI(RzPLm
z<wk^j4+>da(E~ejVHC>h@yk_|_2}`HFwpvbzsMz6uGw{cgpq54ZmLOq1O_^QNTUrS
z5x0%-3Bps7&n3DdW$8s+R29k$I^{cNxO~*qGI5%=VX(zpsrWE*VRE)(h*1LIJ%!gQ
z&|j_r4sW|?R%$B)IHJC+BG7b~8Q-J&CAMp)8;vwoN_i#UU1?35n|za;(F%09E<p!8
z419M<HOKp!BAuqi&A;{4vl%%Hpynf6CV#53HRemnkMRSw?cT@R3XGM4818D{Ui{V+
zDK6;P;ZbFfXlONM_oiX%Cx7e4r0ZB7#Ik4%?ANtQ&Pn|G!W<B-!W15+>%g$_9Z_Z=
zG0(7CEc<Y44VNo~28MC~kr=QBgRKdo0jT%O$)}FW@F<Nnj>Y(JTjkkwWeS84r!+E6
z{iOPW^{lSfy<))Ik#3{S11G!*TY1$ZBVV%8`_iv6EyuQWiU=tk%%_aBiVR!Uzn))5
zr7=V14iHU6HBP4-f164Y_SArt0iS>jrB9y8fJ=PJV<>XWC!mdm1Ru>Qf?PrUV3kz1
zNy(%~uJ;0rb~Cxp?F-!JfkJHG7m0)$dFzhh<-TCNwD`(e2Y|4+^Xvk)vnu*9?&?~-
z&yKUeyctnTo<oE`JeZjsa@SySvAvqxH$&=3hH=rt8s8s#zWufhDy)(ADzEvqA6ivU
zMQKgKooSP`%NZ)M56}ng<GCaM`C_tvPx6n3b#Skt2+uar<&KwD!Mj4m?qU9S0O9{<
zQSAR)bJe}neQJt|g%<G<1@PPe6^KiU0<Wp6`b^Oj9+U@cgiPRWb@3Q#87x%YqW$+W
zN)=&;UkhH#IY68yK6?=AgeDxzs7nA6%Q_60EjM4Qm=78rM&p@`C716~G!3rdz!j7f
z*?s(t4P6eb>NR}fHYVhS+_9OBloaGXnG8SJF!U1(sBD|ZHU?>Q``Q|EQ(x08K4lNT
zE03WY@0M{a#C^x*@!kS|8?)zZu#k~ESS6V5a&NRYtc(ilwuh{eKK>OqVr!;6`rZ_l
zcu%LbaHRSs6C+a~<wk()ODReTn^BO6(F|>>oMflo4v=PcXx13GEQ@>#_+_RLeaB|r
zkyfG>))Ti{<@R(g3ZBbD!qu%C<hJSgff`Zz@h+LIo;fOMh#_8?X=vVYgjErN@{Is5
z)xveWiq1S-1h9vg3EkKF6JPk0<f+4GhHKYW;|;omCpt?KVICZ}MEndW_Is?n%<`S^
zTNd#Gz`aVMQ_z(|?Jn@z$hPDOss>tfdgsTea02}|E$o&_F#ZY@&*zgj+qsP;*pTc%
zo(BA9k8j{Mlt_8OREHY7UD~T3QCs67Mx*m{4DPSXI|S<Bo#cuz1#Gd%7!XFk3V-8h
zkH18im_->X4V+!!lYhlW8Rj9u0t6O)VaOWLeqg{jiSW&HY|d$O!I1<+$#rZhDK6f3
zZ8bY%Je$i^?O(O9XVAXa|8g}$Q~(MVW_kH*P1Rs02j8Yu%AbM0;Bk>>d9acJ|2|Ps
z0f3y~LGO)3^tA!EhNnk<;&|Gb!RD!a*m5eco)HZ7tY0>-7&yUW|GjPymoJ~R09*`0
zmt++XHHRkME8x9-zc8D@bTS%PC!pK_<nrgb%WF<UFMTF+R0t;;{gx%pG$?~@!W$`@
z?Ppi;Y>Rqw9DPy2Ii*VpTn{UGT}}___*~y{J=mXtW=WMT*T$Q~cMg$CuH(~EtXHa|
z&6=?Md7I4T`ZtXi&?@7zD@y0t_S^{-PmYkC4+~1eG+u^YUt3!nKk)7&?lvF+dG^cC
z-2@_2@r5snk^B56DQDrSsUN$n^BI2mxxZqnl>I^6MptuTHc2knMJVNTlAlz0jCQKv
zVj7>q{ACpg777!5xIM*qOcg<K!%6`k!WdwP4q&Wspxr&m{LBv9IZWNy5}8|{oIl5a
zCM7pUDA}~-&8K0x8H*2`dRBD<AFJ2<qpA1_Q(HDBg<;})ll1x>-g%p=C1p?aX7>;B
zB+7s0T-sl#%)I2iLnsuHbmGM;v}vcv@ZF2WdwwluNEAS&fv=_8NCNb3xj~ji3Nv_d
ze`y+(^aKP2M>_gL7u@5+h~MlqZAe}^sz#0W*#%CR58N~8)=fS@gjwr1Al42MUsOXq
z?6djN5K6y2(?#2S*=J5hdgFw7o#fQl!$tI9Ju-|JGGaisXW}DWuWmbvcs7z1rZQ$K
zVvdye0XXGTi@Kd;O}sHKgH&9(nc09qd8dJDx_@5TvQ%!)KGuF!#G&;0J&&L3h<w{3
zbNRf%jT=oQn<8Ihbph-wwE%4PV&=}KA#RW9N1LUwfr|jDMyu1!M*QkoB%e0iXf)u~
zZpYhHtSuynppBMSH3>SUQ3S*EvGgxrnzfx^WOTYVc5ry$PhP6V;10Pe1`i>0X=q<l
z_7t&QTY;fec;O>eEJHv2%Rt?r{W6Xr$;$X#t}ecde^(Q;Ri<wpx8}^FFI>_(xBH()
zBstc<b-Av#N)C<O>NWCyoPI{LWbEJtC`=hI^7owl5&+oMTSdATF6t#d@?-oguvCt^
zjr?c_1AI<iv<J!4kW30V#3@q((x3>*T~0)*mDV-utZ<MG@K18}CZG>t^qOdcF^k+E
zVQLm(=4R~J@^LPW30zro?RR_-!9z{Qj1JG`e(OiPNR*pZvqXpU2s&U6h)Pm?x#X~U
zU{)l5`W;?{PxPk&T^UyGWI)vgqdB_^yQpKcuP>#ya5}ZQ6f*G{dQilT2y%l3RPvZx
zJ!CH|TgD+0I&g0Iy*)aj&JQ2kbMn)yGsi`tX_>H0&i4fDfGu9JNd1T2V!i0}vB-V^
z*H>VjdUC!c_<$~XvRsfzcclVC=2+nLR|B5*7ioGvr9hEUygo#U07SX)dZV;2zrTFj
zwA8C}i6?Qrya@UA<<39Hdk}_b;PSmbRpH>}+$pxN)^)FJ8OfcF9=W=2LPoRu3-F50
zwpd!@$x=r$bBEo&peqLjnUq#3ZCQL*3llLz_;cj?!azYg#xlaU(-Ky#8H*4xz^=Hz
zxUK885r*(REQc{pxQ*rKLX38M9f9#y^4ME9yd8`tO}sjbF%eCvPrBCz#%CVyFW=m=
z>i2E@47!P=-?JB*DZu%@!R3;75!1MzkI!edsn0?9Gtr7RJLUT+<?SQtVd(?n|5pTs
zbZjAsU6GsIbl4K|Bl+}4s`yd;{|G?Y|4yF<p#X96yP(%%maVBN<B6`KT`v~B$()TC
zV&53l_Co`}<&hxqFF>2{Y6rDx4%U9~H7~aTQsX8^3*BBu;Uvjd?v{M4jVmvdKVC%@
z&aHW+^_c&5$5=CoAv64@A#?ppATOhtg0`y3hyjI_1q)^3heOQ(dV@t<;;9OqURyQb
zn^v036Qv*gw?Yw6TBEI*Mre*1cMa!BbsH~_vbX)!%pTgBe)8Ke*Le2$`T_BL$V>$K
z)@q$BL7?X~Ek$7T^){aa|9na(84AJkh8DZimDCCVe_%Y%8!w!KN%a9|0qVwn-Yc)Q
zVy-?^c(5X&tUaN4&;X;+W$T7E={VMReJS_{#9Chwu-><^W~yVm)B%o#&m#GCWbnY)
zs^$76Fy6?%LKor`x7l_sCZ<6e%_j~9b3hsH&(mf*+?-18_ZvC2r;p_~rh#Ka=+syE
zVIPus-MtHE`6@D;CjwUn0k&ZJYOBv7I{RgOWTi8l(tXX}*}tDVIZU+P#}Q`d%nyjf
zl3XVM_7;xs5tPz4=blaIAXU`Veve0}mOHc%%I)X~Wn3ofE~SGsV`v2my;K1LV!z-%
z>>8jf42>Y*b?c1{A#E=G2C#vLi<-_rc+`NRTILJuI(QSnuczlG%TwW1SAmp+3|S-d
zJ~8v^KlND`2(*b0o1cdWIvHjec>mr%M*RSCNgpKT+*72X=8a_NF|=iZ$$1B)8F<LQ
zh5PPoT#E4V?DF1@ZDoh7J2GRG{j(=NwNU-o<!it$C1RX!BAuGvuGZ{2?JTiv>(-vR
z-%m46Xs5sWEPJ(YsqgL(yPe&QD6}VR?VGeUT_C)m7+2h+gI5zF=Gi^o?@ybGTH5Ht
zxaW<hq2yA^J$maGQ2+ipQ0oNXP@+cMaYU1bo3`%tjW9$|0W`@}7ta2pxBye+L*eY%
z4k}I?4U#IWrj#z!Q9}^rsdCT$t_`zx%!bmA<d%FMfEc2iK!cPH1Y!a_|JGS+{Uefl
z+BdY*pcXc_r=p8Pw1D%t&l33!Be&fE_RVU@L;pg!pwb!01gpRwbZ7TR`oHTNZ<2GJ
z#!B{zH7s>YljWi!#5Qu?R9QS%EUc!Q3X4$?fMT57l1hvUvWAfB-!^5_;Yy+J3Qwx>
z#^sOIatMTQbiY{-;#-`Dr>lTEN`UGOaK;q+Bkxl#rG6vphzIm*XX?*`Q;4ZX$P-f0
zMG#`^j{dm|Yd6v}Nru+IVDjCFSjh7f0>zQ3Dg_awwF1v^ZZv>s>yYI1#XM)*T*u@n
zm%kGrf+?NR$WGLXA>+zabi-=!t}jJ%m_qJxB2ug`gkS5B7`Y*zcco)1!otdF;WN+w
zx?2cYtrqew103-3%7DAXke~@YZev^a62W_D{A_YT%P8)Z_tr}%hpi9N5<|t^-ko^R
zhg6bHq7ExsvJKS34QH4Kr#hb1ED<dHNXA&fRV7dT3RIqf8X)VAAr(O<-KcbNjVnZH
zFFy50`7=}be`EgS$GN+<zZxO-Lx>NEafK=hvN$>H;CiJg)|dspv8D^HRLu0e(`WnP
zRE4Fy134!O^5#PUIpk0Tjo+Xxd#oWXARvH!GZUC~2C*Lm3L12hQzMzAm&HSX=sw|w
zXYznnW3Y*IL2aQeT8X;yvWLu?{aRh4w=U+&bDd!sgM~AINnfB1NhTIFfCjw)kr6|w
z6Ur<wBoN<Jut*dg1uj)6kH5!)?AF@)!qv_$BO=!kt=+!Y%IfZyD;7vso-<f0szG5V
zUzGdgdy8)`^onOHiGH}Bb9LhV(2)ObJ4IYFNQKA-+u6SXII-;^G9)+-E&wlz*0K1a
zQ7EP-#V#xBY>HK@RxKP&-tmxZaUXc4!t^v_t24>{FetwzVsGKB0&VjQPv#~n5bW>o
zziB)m$A{agg<6&a%e@+YqoLVY0m&Hyn1l~$?YrC%%~=mTGx(`!Dx!cBM3_p}$TbzX
z%zDC?qt3+6TChMaH-C>_*n1CBcb2?Hd?gGmn<wYdB8ZEMPC&cuJd`MroIBcbe|uGx
z$Ei`2IDcU@r5(_LZKvxC=@mEw5iO-7gPl<{Z2nN|XRij8)H+-L50B?{QnU_P?foAP
z<i_n>ZIGV9^qXz*?Qe=zZazAGDB}B{#e;*NpXA?#nSqSwG)SlJKAWUJpOibQVLt-G
zoq{D1)OY2=1W*)swQ}JvRi*?SlDNL$d^a-6BV&Fro{ga|i0L=Vo6Cg+YOrvF;GH*-
z1iJTTx+eshi}LlT7WcPFr6X(}s8ZYPwY&b7^*N(8%3;8hKWyz};{S;SKonaKtnABU
zA`^v0VK@p=fY7AszHPGT2YmJ6*6rLIZhUpg*)PeTAH@_+aRZF#8s+ha1YcFG4s!<j
zaa|&P5zWzcQh_PPuwm={H2c}pQ7ldivWy2b&Zk}#vYG2MPQOmoHs+eCu?wsVpLQo(
z*S|iU2FeK$<T!GOnwqOt+7u%$8hXUzJ(hU`FckAD@mJ`WhEi4CqigpFX#gi52Z#}s
zPo(Fg@wx|X8c_!{5l^!|<mk{IqP>fZ&H`%Hl5XuvsdsF5n|?Ur=bbA%esmF}=h*C{
z4iBfQ^@|H0)8j?Hj1n7~#(-CvL@rLk*0L3~b?W)CH8HMt%NZSJfQSE1(W`)Jy2ds~
zD%7om{ONKxL$J5LtVjuKLd7ed;tsIJn1^Kt9^Lo&7;2FwlIoX0i^faMxk*26dwMOi
z#c%hNGJ(}#OyvIKBJ-d<sbJB>ZU6d48t35)fB`Nbpbv*%d5q<h5Cl0jffWK=?&Hz>
zPjg9ic@^@|D<ADE6(Q0B?Z}u)-AB?L@ed}LFBDhhkC`L4f@N?fI?wJ;Fvx(8)@#`f
z|H+6okhKZb`(yw9K4AK2c`yk-oFK$rNbLrA`h#mY<yv{uZwHAV88O>L#|$o;4rj^H
zcZ*3}t&=?P(uJohdPC|kPVubUfzu1&m(VuES0yBZ0wPi{zI<Y?z}#j^EcfIVkR{^=
z*|rSzNlwO@t>VnT_UHZR*`$;jX|EbLl4_G=T+vwA9F2-4k&Yk(X57fRP&a=M5nlnc
zy7xzfblzR8D()A1@~SJ*mSfAokIUrj;NHbG=90B5!08@?KmI>Q5l@&L%x`zl8Nr<v
z$59E>Jz~J484{fBf{vHeJieE0mveRSUw$$+K@2?rnn01faqZCV?;%F-&;g?vI;BHG
z{y1>!mCl>Pw^r&Vl30&6q2VC0S7Uej0Q%j^aL88CZTsz(IC53QAm<?E_#nxFoDh#@
z^>^QZD<X!p_P&ZRQ(K#b!4d*ATo`aaF&jac4J;fuL<W>OK_)<(r@og<fO-nZ;2tRK
z?d@eCQq(cFrG=s76@ojaWJ}uGX+V)2(hkl|&?AbPjnY=HS<4X7q)yMk)M5pecGyYa
zLdsF+JOI=$g&W>D>G3nNIrgwI6ra&xcg;!|)nt|5UgcW#^+fO~AV(t!p7VNE31MKi
zJQw8=%WnFRcnhRAWLF3O^OhIlQKU!yUgLNn-t!y26IT9BF3vts;Fe=(N`Z#FI)0Be
z8Zk1xpfuiK&PCo4y<cI89o8WIi4M1X)ST9|emB%w)mK3WbgweJJqC_0VrQ!&$NV`c
zE_Hw&?F$po;E7d?+-DQ1N%$593kq7jVQ@9&m^=7`1?<laaD3ukh70|CIsE{p5h>>y
zgNlHOspT6w;z<^Mt9*7?WLP~!c<a6=j6tY_(V}LURXm<1c<*O?{Q$pOsY1Y;R@cVd
z>+4E@DWA}J@~tkWlBn76_KPv`N_j(y2$Z6W3oOVIISnKZ2!zcKDz@%3gK1l@IuT}F
zaHGe!5n_G`#9!xwBi_Wha1nY|r6?O?{JQ-p7|^S7xn1jkmh~kU@vo2nV4~2+bpyKi
zC9rA+U5v7g-s+Knjy9e4+oku;bl7(y<lGtxSaysC;@bxm!R-|fxUiB_$dr>wqT-3=
ziLx#oO@+heoj0-jy~9pDKdHSVL3{okN?++5x4;`867V%3z#NALQdSN*!FZ74DE6xl
z)T#?|+MgN?Dl7CRB^l;RXP7bDeE}XASBGf3Owy{^JwO7tO}53x#<KFN9l16KtXGf$
zZaN^6=^};P&YBK*(7dC~1qHtq#gRl<TI?!PhGs2ABO*+G$$fgh-)OURxKoGA8&AV@
zyOJ`P%~)1DH2FBYqG3%K(*?T8#J&|KpnPa(ARA-^SoTKp-1Mu&U65{&n?d#XT*_s+
zE2F84I{Zx&-O;`3^;Nil`{6lA2iYo0&m1>0Zy5fv0`lpu=z0jYgT%YXFt%7;^bhz&
z*;i~x95l0_<5T+Lm>N!^Ukl{qc@v*@JB}=j?SazAcNgG1a7q)EG6peJIA{=yT!nv!
zs|DhOtOc?qUJY*6e$}mfSYt>-i$6=QpTa2M^8LvXi&0?S{{s4L3>l6fhHvA%Gd*>b
zg}s)%W#6564y=OAS9>C8;`7&XCyPqNaFuL+S2{;pp?H@HboCjB5#riAN`nmT$WD&!
zc&!%0JPO(9XL6RS(>f=W!_U2K8UNlYjwG)Y?x6VA|JXwKe+e2n(QQnrgo=<+;)v(L
z+~W`jix};=ec>Qh<()S&*mpJgV%oxE&9xk{_E^gMQe*LN>=qVy^85A!!Th#;(2n`-
zoESVN3>}0Co8jCTtSg(iXf?q?#HH3{5Q!s6DPpz3yUPh|hUU~d9U*ubrUKOulzN5$
zu1Ym7QZ^mzdYe|(S9as;t;%z+9WFj3=JobogUf01m6lS`45iVOrS>pwQY(A1o=DFT
zjRUmdy;+d3F!*7ria0P?o-AGM4Lxh}`LReiq5k0ItxqQLFGD7@d&~kiVRg%zs$3Xp
z$*+4qcpKNV3WeN=Sn55FbC|@ooxB_8gMtP9H*KA?ThS(o(m6pU(TVNn&-%7}FE_dn
zS0=87J$^z8i_@k}=aT93dqRwCJ`zj)m##wVCh+9`b`c1(4Y5LPx?JRq;JLRB&o_V)
z{wKL$!F{ytA_&djHqiIsSuWoKomGJoXQZ!GhJVK+VBwhSLitlPnVat~0@Im=X{NiR
zDvLV0E~y~r<fFau_+{k6^C=CvFo-&q3prVJ(1va_)}!;FAo0C$eYC-=Y6bW?tDk=?
zGV+v?&fq(iq@CO$hkETXoI3w^Rb(peLJwtimz#>-^yZYVeNP09bd%cV(Ol(p-?vnJ
z&Tdi~aEU%%)Ez2ry?!=-_?;l|D&*0=M=R?6YT|8Lx$skk*{_Go;pH^041Z=EfPYbT
zrYSF)@a#~38-Wm`E|O?hCU6330S<YUhmsqX7Is_bT`9g>rAS>E8uFyi-^G!@C+Wd2
zwQ*?{f4r~}{aZ^qad@@`<87N`s~pzl$PB%;$A`*>DDlkObBPV{QOtni3zLalZ1g9$
z*Lq};EJd<9jk?VI|5OCl$e;+@oi-5Wubducm;po<R>G<X#XJ=^JFpMhENYW$-!nGF
zJ9@DyHJEB{U>FBA^;&OshMCh49<jANe<xi^KX=XgEN5XZHaiReMt&+gKeT!4Shlj_
zr_I~oRzv(8kENa6D=&S?v#9Kosij<}G&JPrd-qZ~g-UeK>n=^cse)Ka_VVXahCZor
zY%xGUVYcltPq}>G(>CKKzDRRglj)|Sv<RC*RVdXUJ*R%tl$-4FS7&`32q6K-Ce~f|
z?zuJOCF%6fNOYKUa@p0qu%7CbI&u;&F-(}^U}Y57|6|`*MuC*YySqvu*?pqK%*caM
zLSH07aJ)vtmxUBOo_1{gTToBig#GWUs;cswlOLViTBIOaWJt|FA|N123)D)ey%M9$
zvccCzcV(JS;~=ZA2g~yT*koC7qD_x)=C$^m@Ac=6r12_e+i}_hb@oof%_ueUo)ykc
zD|5|IG5JdejA?VpihkipGsR)OfB-)HmfH?q;NLa!@UR-NW?9#LZ4i-dq^4B~=aOpn
zqRlSAxjM{yCG^l0e1WCpgaqRzr1rsj<f+1E-!FfpnABysZs{OT9t>?Aa}!3Ml==aM
zNsSZC<yp2yk#1J=$mk=;brH+ue2zQUzuq3bWpV&DqO0-2czw%kA!^Yb5+95nxyTXj
zT1tl!fZrcJ&DTaAQdkbhfli?X)TXC(4g$fxX$T^ewhE(K1wMe}!{stf2v!PR9r5&O
z5U+Z}W(vsTEa<0!TMFv*4WFS=8htHiLlp=NYA2>rK=6{+1)GMq7IErPIt4UuBX`kB
z0?SkQGW^6co5su^*|<<=t}Fi8{;H;jO@BPOF8=-wxse*>D5$liipvmE?_WZnJ=N5n
zyOotrMRP<ObKPf<lP7xl^UWSVnTcjIBXnK<4<_QDidiTQ)|y4xYh;g?A3w{KYKJ>q
z2?jp?yz8wELDSjSnkT^_K04GqpFi6%*pmLO^CLHCGnesB|8s9I?6{xy_i2TxuZK45
z__~3LCM3Qs?p$J+Ricwqnel+*V4UtrKaNllqg!Ye1}-sfsLm=|Tvs?pO|hzJpt>%@
z0|0UfFy~Uah$X6@3u@kBGmX|P+oFW{$Y2?#NDmQO_X91ImF?Xnl@Uhj22nCj4Pc8Q
z`u&Q4Ny~;jB+Vs|JY~lA#ONm2RRjraUB^6(c>b2dmHdm}Lt>OJu_q?lVrm3eYul8<
z1H(l2e4mU-s$5qef|`_G<eQexpy}3k9o+5~VyVJ^X?hwOWEQMfvAVls0_sdNe)?Qb
z;LZs)&w%yw)-%IW+QH|cHOj(JpKn~01HLkUzHdlC4kK$Uetj<2JET8M-1xGUDL7U>
zLbM@MH}7Zch`;*9LiPBuvoCvDWWNXLpiL43-;qr0kpA8RhgyHxjZ<aDb0@v6%jIUp
zzT!+(MH;Y(X)Q;Y-}Tw((=_(3Jn60WcQR#nL;u%D_R|AhYt~M0xCq#9JL2Mi@+b2=
zVcs%@&0M1e)LTgF^gb^6y%6fBhdU=MfQBjN!m>TvF<Xri!P+9xW@C>Z9|4-C^OH!F
zzsk0^2bG+?x6QsPx9g5xLn4(o9Ff%5CATLf>b`Mw4pe>o3Ae~W{U=y$^XKRBuBba|
z=~o-Q)d9NYA=?u@Wr}&tH_tiaiPyS<M6BVl`9f)I1fVl@#OJ8Pw@-~m)?4?E?ObAH
z4|DxiA;7Sk!26+ek&_oN1ChR9Nmes4F@cr?J+C$!Ak<wZLrR3!%POh=O87ig+60$?
z=|>1h0qM$Dh}8}^+tUg*N?i5^CdS-65&dw7c1eJIy!`e9U5{Q+UZUzh>HEmK^|9k<
z+ZJ8LBb+zX9|Z+%llEFKy_UKXv2Zj;^5Lpo^!-0=1k8g!Yy>uN2{O*@s{eOh(0`AL
rhNggzytLFbqQV$W*D?;>npM|MZ`fm|R(yi-byQDi98XgG>!1GwdWm~E

literal 94921
zcmZU4by!qw_cfxRl8S`1f^^4_5+dC>G)NAeLzjw#q}0$ILwBc2cMQz{(hbrL-+ABX
z(f4;<-}#esm~)?d*V=2Z`>V2|6gCD41_}xawv4p6DhkTuk0>aQ_@1Bwe}Pnh@ljBo
zp~#58Q+H3<ok#odLS_;Dx57NRtRtLdzci?=zUjXg+5Wzr?I+aEOyz1m{O!`~yBJ#p
z_lyFsf)2*{O>1+*psA}lOT$5$JOn#z&xSZc{Aci+=lVSsQ|6u@YKj<rT^5pxr%$!P
z(1ROLXX#LgL24Uq_WXA7z9vM1(lm1clgRb(@X#Ds(m$6d=K4CJ=hx8tsFTDUIU6^;
zD6{1$LcbImywR59Dg3s^X`V}78E7`1WYGj@Q#xz@^i6M1|MNfp{>z>gGvi)xtI8OT
z$6>_HY4JQcmX(-0TSMwe)Pp|{aXx6dH@+IkxAAXeCn2s5RuDtS{&Nq75zD==V^}%U
z3`XCokot@ZRIZFZ7*gD;@O6N3YE@gGs;s24QB}h7pty%e8&;;gO8eDT4YpS}RLxwg
zGQ+<<qdfY;CUjrg^&2PwkL2&qLS>a2e%ULe6Klhg`aVEFJ67syRGu!5AR6x=Nq@(Y
zu#1R}+Fp^LT62<Wx=h&QM)cf&{`b3m4ClwYPz1z-EhLoWG#E>#M!lQ3`fTGN@!w}e
zX|tY*S`(IsFySA#(R{%xanti2Jkipx!qS<t<=j%CH}I@}`sW8x1Y+<-t-pnb;P7_x
z&>IV*>yO!8Bi2MMd5`q`v2;!buf(OA8i#UevaB(P{^KqGy+qevVP<d%`zUe{Id=sG
z_hiKNacZEmu#FoJJ^S+vO3$McPF5eq=K^pepLsF#5_K3qmjw&P->v`U#-+><Ws%$-
z(!!CtiH->UV&u_hs=n~7xHmYz*QMjAc<6|yaQ2JU2A;N19M7c}q!VA(bdI4^Ax-S7
zxQjoxmcIK6vE(W(hj9ei-?y5QwZyV<z4d|Rc$>0+-Q<NjXmOg-SG%rcn6X%K90rJ=
zTq;F2@FgrdKK;9rkL;Z&0wxHE%z7|p)Vt&A3okB<ubX0{gMUBx`#}afTF^cMq5!@R
zf0G5b8>!5Dlf521V#kV8vN3p367Y8ciGgu(8uN{(h3W;W#af4Y4Nkhcx@txa4!_|_
zl<7iVo;#Bz{qbx8U%s$6cAe@raGvTiyY0U{@)hyD`Mo<+HCKlyGSt8`c`P_1Qj?sg
zeZ#&WFDM#EpwB3LvRcv`Vy6aG01xC$e8#RsHEXsFVKhZ#(rOUQDn|vNLK5Kh4zD4U
zl=kR<*7K@FPfySDd>@hd9v(`>=DyH+xx0nHr4)Je7;RK{l848`X@ddW?4H}Fu`^{~
z?swl>qRZRne)xG5ZM#mhOqg8IRlse(I4J0Pr90BcXYq0GRZT@jZ!)i8Z!}GjM$tmP
z%8JkR+1>R4q5f%qKN2ZMC`#?KexpEKje}|t2Nox)6v*#=A<BjNfQPzK*%Un-<xeF1
zDx({Xkv=)W%T|Gzy}+A(lzQ86J6?cbK)rL@S@-cefAsiqL4l>MEuung!=U9_mF%t8
znY`rVTUTVcQTtHpT*HX=lYmiRuV1o%_}=PsU45V#%=~f4n60)^*88p5ZasrZ7f0hS
z*PXn%J>6<{NH5izL04EZrzdmvQxEI009{^?R!p3$X0~h`iAEttt@lnIlscfSE1$B>
zy?=w*Ks+)hB6=$FYHN6LYB2dUnO7}bD*NW)%jer5+wJwGs4VHs0+NYBeF2}OUizwy
z!E9>R_W8ZQ<R)XB;&KU$CI+%UpDq7?Kl{M^gPn0y|L9u?p@}u7Cowr0;oT)<8cylB
zq!Q+ulBy3b*4jEg>dXqj9G4mnp%0`G^hGTZH17Bv&xYW9lQ^m0>b-WnF}yyIm@DiF
z7UwvLWk7@wvhX;Wl3Z&<qFOvmGalvro?K<hA*4i{tt~JRifY(7;5IZS5k?rTODg0#
zG}igKBo~Xi^Ub_ozk1A>J}fRY`C2RvdSqs~$FR~BTAWxPwW3y(&Y+OWEps&>oemjJ
z<+a`?i(@o~K-XD^x$j9j+dRkE^s)Z<+0C9jS@E7MK6gbGEdJ%3)@VC()BEo+yee&<
z6RQiAGnZ>^1;M3Sjc&ts;ozKn&%T_esRC~NPODnOY4ZmQE!m^ndTpVEEYlSxO|&~4
z_!^PKT!mie6qY-hSUwM(tMJjX5RlS58}ABni)IIsH)h><b#urbv#+W=se$P5Fbeoc
z#^;>WT+z$rs1=gapPeIP=5dl*axXJgmipQ&a$DqBDMWrex%j<>D80R21vUH(rBmWq
z-kq&GXzz{`J6P{cZPJA+4jd>~NxC$8+SNA|l*IJ~<geMVq9VH95YEjBUR>XsLLpsY
z#8ajE*^sZ|PPbPsrRCrfow-`uxmKSh@yW8XGPZ|*c4TYdJF+9Qxaw<aoQGYv82Jvt
z)+nFbN*`eZIrR<dbOPUdreo>0?_Z|*B%OzbSiR2o(?QO&qtro(+#Xjay><46@oa`J
zr`vIcZN6XiLU-K8a-KfM*@cX)9<E3kwt5@1c$P@sh8UTe=EP@-wx1+&0S-Q+Y@we7
zICwk>mq7G*28N7I-i5TC>%cUF$(ZmPk3PQ97YRL_n<CJQs=|U8x=u;)e0*!yMg+)z
z@^wfWTq%8s1%cWU8?Odr^HtcN49OYhvbH?n7bdRsAHVGwN*dc3TWOpoV0#tr{{~Md
zBVJwFUIneN%fhZRB#udwS;$#u_d>;>S^y-b@YT@l@+c0lET7{tUpAUfDoJMEOMSH`
z8J(0GaY<uXo|c}bBLWFXYBT>8b&PJynNVhb!g%Uqg{;9~DecSpwl^Qw^;#W1UCuf7
z9-Zz?Sx=P?V*BOABP}dE-GC5KmmUsd4*ZK6I71}XsI&#{%cg^u<O6@*iKg_@D}rPR
zw#SsW%o2O&`{nmloS;&q8%PflO%;l-^ik57#9crrZVf&Kal34v0Gn<haE#7o)v>XL
zX{9W0R(N)E$)x~U_$3jptVVTBptSP7S43Pr+5pIKbmz*p%GW3S6{#F6W8dCc!-TmS
zrPC2c?qxhy;4*_E$?#Y+t6JqOjirNWw=3f~_%L#S6p2cpij;5QB6{yU{PMvcxIxUY
zTN|k{$sEny;cwZA{j>k2;)I;ey5lO0!80$u`q|Y|_j$6Cu^6>&$Z9Q9nxP9zlku3?
zmhDqeSTvC01zdNl-Iq`$r3hK{M6p$?<hO5KQ@9|6+0^6spaiQn5{{ALM$xN*sQK8)
z(aUnPH5piqU3qKqJN?|@uY-N47W+?fsJ6_#k{*vFO%U~%(<E+#z2ezY%H}ebTzD5Q
zGc@ewdc3m5Mgxdj4`M-TBi<`r*qvg184QlCtnG0<Qt!F`IDX?dAE>nuSn22H4#!C`
zyn9nlYo-dSt#fC5sZ)5CF>gWZLm$zo#;jr}rI}(Co3&xTAK73gn`L>KJV)(W0I~RB
zV{N$-%?r832-`o|pFdwLN%r^me@UL1m;Ym-<vNTwd!OuddjirPi2d%}+gm5<R}E%;
zsjD)vp1`+C4@Qs|Raw7}LD8|j8pwQ9E4jwl*i2`%#u%nJk)Kj;+lbvqtc_mco&4_g
zPhLj#lEefs-1dUYk0-f-(?aqC7pNdvhRfpW1ESljG0giJclOa5llc+0kI$`fX9&j_
z!xAM|qG~t^=<57H#CEp2&VG?|OGZhl%zp95_1PZQQ<YZglFUq_(JTpD8=FmfG<0;Q
zfZE#H2Iq}D`(a#4VRjNuPR=aDo8{%@G!eg{e|PQXsSRWNI0T!SsbN~3HFKC`n=9}n
zI_>o3`-h$|7B!F2rFO$ot!tZreY%^tBJC>LI%T;)FAu;7m*sC6RY>aKOoR<pqg*sY
zvBH8HYz#{2xmr8|e9W6`-6Q9V%*SS$Ivl@d1U>UGNNA+NU@*A=v{<VZD_iaQY`?+z
z;774G*LyLsm!EtEU3b-sUk+QCu{z=r3oy+zIA2#m*vy9scQw_PQ7tk#HoQCS>g=DQ
zjhqnLH(bSP4>noal*`tTXs8a?%-g9Yd55MY=1dDr3?vz^U6tstQ(3UzXv4Ct-rn%9
zZ8HXJ-vxgkZ1-0wlB}`1VQOqTo+>j)ea_=@v`T7cheR(x@6zcU6eF&#hC{<L8|*bY
zDG%$hbWXY0?pdWzA@s5;ltR(IDyn#?-@d(4ADo_czxchRZUlf4c>yM^@()Ge68Z@t
zhhHcyyV8d4sRE;IJY#|%hmv{QimbnmD6iRnUuf|v)2Znj7zp!fuwQHy_PG)l7w5KL
z@CMSjR0NqNA`d$|698feqx17~HwT9g|61tokr^)Qb@Q(B^d3=doSf_vCZFg9v&cAU
zljnBYXY@SA9ZJJZB5&=vwnT+*6fJjCmpgK5tf$P!g3KtoM{q?}*<uiozAt!qKSl1j
zYb!jRf6Hzi>Z`6MGhZ(ibKB%#6g%8x723^v60sRPBe_GiNJWCIr$)t!2nX5p8#@Rn
z_+6WQZ?CFFIfjZfg{5#Pwd+3!Cv%o(p%-Xd-E59hi`}LPy20EoxTr~q6KkpEfh=Hk
zH4z((q7!qXeVdB4!K|P1R+P_7VT&A9%JS`-24B)2)#uAgD`FhgP+E(cr=Yc2XBew0
zSwFMBdG1P6E<y;idt_`?zvG6TM5&d-plK!@G?2mYF-^$NH-rjiEqbM1<#{Rx8Twu7
z-ac<~*6dLk(s!$n`qpwgM@C+!mYbZ@f|fi;%-M~66}Cpq?Nf22csMXP`h$hN@q@8(
zrNh$Cu%{V7X^{2NZ}E)7%;*jye$Rj4{}?v`3a++zYJWf{yV!$G%7d&l>j&a2Pa&C*
zoP55)8G_NV1!;Wn5S{&B+uUOl#)YmDPw<~eeLN0+Z~!~F7%^YtRf>#$Of;>*nwk<(
zjxmg-=H0PLNzP4CPLnob=<6J?#c>&^H{E?8Kc;LUVS`F~wiTr9`dH@%dKckyh+1hz
zyRA9Wls(lhau<y8BojkD{CSCN9AjD?8l8m2OreIBR(?T&_70Ej>I3c|;|t*G3MW-c
z<D{W_>pj7^_F!wA8N`bJNV8P0v)$kCZNB$K10zP69kM?2?w4BCczr4A=D0cWl>Sw5
zYu=Fkhy1*Er(0YlT5T?vb-IiuMP_p;+bx8h10}Cr@31{?D=f+HnBg<kTW^c3XTI+?
z9NRq!i!9a7_O#Nsbi00+X{!`8hv&4#bsqHQM4^!HNs?O#q?EQKYgFNb^IG32P&t9F
z0}*oKa|i%=U{7DZd}%tImWrn($s>cNu{l#k#{wBN6GzSd!v!R{Ao3Ir7TfOcZm&!A
zn>J~tf=f#FfavkNy*mB9)V@7Yq~=rjer<2ICfls9OtV<)ISGkQp*jN-QxV8|a-?Z#
zY3Y1_-g>s0LBkpV>A-s}GZj+>)Z3(^sGK*3a-;3$8y)xJnKbu*{qV20jieMYsJ4iz
zsHjL{*#KM4RIa58y5%DPyR+)n$_vA^fs`|xE~3F$tXW1OL@DTMvo)4mT~ne{lf-Qq
zy$z*-ng-%h-T{#t930GRzYwN*VM!+kV<zRb%lY~7<Hr|tiX#*ZCDs-e?sqpHvv&+?
zd4Jp|F;ap6lHAv6V*L3{SgT1c;|yc(-4}h5kDF*7!cR}U@i#Boe+|9A7d)pSlVnS-
zP8!M^)5zj`T)~*R<SB6Id5&f`UIjRjqMo}tfO+w`r5=Alf9towVM;8NR>F_>dzGAE
zOjrHWsCb2OXS$G2-!&{XRevz4MloI3XR*IX24OBKDH(ELckQ-wWG2_-x+UN5vNNTo
zpPH20Mf}4zG}ovS+-JI45%<grmW&0a8-pgx>BEP&e(bsG*y&3zRW^F_Gx&qKMxD12
zPz&#acP{Pe8_al)bMGT2iK}5qBr>sDE*(n;zUkbbI}Bu{^=0!b_A2Hg-!Lv--fHhY
z9FCLI)6|p{3_|95mz_yugR@#5vdz!0Pu0ZOIPI;+&j|pN7PPgAnAM-4O##>xxF{*p
zS@j$B>K#6T;eMTD0?>Su?ue6;_;25UHqw`lSSJdci58L>giYFYi`G4qD)<<eVs~T1
z?PPNlk4AQcD|al!5BbhVLPA1YR~HeYXSKV#E3a(}q+y^H-rU^ebKTXl`XWFu>!gz_
z7JxBc85)XdEC1ocubwDsqC@?;t}a?MOhPbrh9xiY3^N(f5y5wpvut&=+I(A7L9+}P
zlPt{4IAnaH$&DX=pw5CAd3kw7oY&>sd~YqN8T{=gi)R3^Y7vP)rQhUg>yM7z+|pvn
z@^9z->iDwtq+>9JrD~mdxytx<4ae4RtEKE}>x)b7GFJa1q%X8=UU}H{p?%HH&S>e>
z@SI!B-9l<+ev%Aj!FvA|k!X<b1*_qDpcvEFD}r6O4UdcX^g|U6tYp#1U%ct4X)U>8
zo}r`4rFsn_-Z$T`2?K`E(b4UAk);N4lGyj-B}F>jot<%Mez!NdSA-zBa4uA*jiHsD
z>$K5lX39u~{_!s=Kz<q8lvYI<OrOp5oqFdI5QYwN@ss<`4NBnjAw=F@l}IR@49Eqw
zr-P)^LEDZ$zij^cklQ`}^##b{^Ffb7YRVNpnH6~0)RGIA)na{paw*Sc-PnRP8qC!j
z__oBHJBm&z4G8`9{&@RVo7PwXm+hOY(@;EBNgj`9EGch2fV2!->yL;3j_1iRA57|w
zq=fHY_}yPqN_@Y+IaYFacRyV2?1!;5SxqqJc9j$t(_;?BF%jJ^)BsO^diWSzs+ZU}
z*W||LV>#9sJ6vn=`W9ags03H4jctpYquG0VdkovT3k+d-d<l5A+d3BgTMYmRJMq3e
zG7IUqRBLiOXf<j_pJ;J)bv-@4e*SW^OkFW3zA-!C=?hvUa2N227+M8RZf^Aw$tbrt
zMh(xiU49i;8D5*|Z)ui>7HU9#Gpu(o3i$~DGx^u<0BBodQdLwSm7L+u-F9?z{I|aq
zH78iT6pxO*piw*@z;*+F%XN~l<FwGefv>!g5Ed#((tgFK7eLG@FHk-ZqcGS6bn?FE
z&F#W>zx{5y&U3o!c5wX-ea4}?TtU%mA3l9e(5<!VlzvQZ2xkr;)PXm@k4tWn`ry#h
zi-0rOPB%g7wztQN$DZ)#`UcQ`1arIYPVX_S4JJ>`%_aY&pBVK@c~x_3C41I=KpZEG
zIe*1AA(MzkTCArLgnbn5Lzogfy*H_l>BUl*xwABkIidc|)cu)ml_#jK;~KjU9tJB^
z$@WxOx_)+~H27L3J~5pOh4)F4N&<?`mi|7jeEmqG7q9IL(V#D1kkJbG&Q~XveX3QE
z;ZmI-F%8fC$r4={v$n;j&nA**Q^d5iwABvh`}(YW!qClcWBCTSxVV&*l#&9;yk5ua
z3bI*KCAv}-E})rPI)*fGo2_0O{t9O$8*@mUpxeHD0DyJyf%wjQl!)hy;Zblt-{d9&
zkUTYJGdHA4>iw3203vHJ?ZuOY0qHu}V;|X2J%gXh1kQe&+L-O#teh#PVQMIaY;_=&
zf8gWo{gy?!Z(ssmX5yL0?gO+4)gxtwA{cqZ|G<Qg^1F6TulppJWBkM;#i*|yc?eHH
zPOHF$#V?b+&*l4>QLT{mj_)ZVgI~8vz=pJYP%SzIpD{i?zU=}tMb)TQ0D+qb{a|ga
ztI4zK(GeVVb#+xe(&`iR+8<p)f~E_(^!zyznFA1fxi?>W9ndiFKa8cn>k9YD<8v9;
zGRMz;PlQWp0+psx?~8e-rsKnb{Q%m9<Clk(H2D2ht>o!;{E)^Jl!ceK4*E5j>#hI#
zo%^RJKJAP{r_AZ`{tf}nG2%tfNlA;UGx~o1{G7(1etUUL$FjTFmL7G79l*xRoq(xJ
zK(xBL=nqsAe9?GT{iGuc*>KB5((>Z8h6a8iDJdyuwg$9PWsCmBHb28^i&4jwE|A4Y
zM$-Ub)$5b3?D5JX>%;b-^TIQ&OffVQ6B9PJGJek3cj<y|rBaa;?}KnOiY56uc~hU<
zHhrVA-<ELnU-K#nxz0@Bv<o-i`8Ro9l)UMs&e%$f<5OoW>V7%)dAH4(M#SDrSifR9
zXoE!(zM6el|3*haq44{gPU^5y{t5au^_Ep$Hy5=xK-#3ZS^_Y$RR7x<e8}F2x`RV`
zO?deBt4&&kWJk<F-8aK|%5CrbW9Sqe`ol@a;RFXF?ia%%F7RyyMQLeet9P?D4&_O{
zK=-9e{;0*h;wVE`Kq@vw`6Uha8B)@=ElD-?p-vV6yRKF0oMBrRcVEPEcqwApy>Xuo
z`&zbUC*=);3JWpoH<)#Lf?vr5wdIVIXghDn-bYa&?4%RIkS<ppg>Bid&Qs;mZLeVQ
zN=>iZ>@)4|r^S_&u0~tk4k(1mw5tL`p&P^LZ9wG-$)pta?&%4<bvhOXaEV@iDp3BE
zujGG}78O~S8MM?tM=<v@y5xM>iJvpPB9A2H9VEc$1$YRcsUc$3OQ4p*v7?Ft>L(M(
z&cq~{B^l8lzff3&7|k~1w7_hLzq=db7g&AD7lb27{-wU24+7b6-J1mvwMHu&vepp+
zXRmaIuJ%L$*}88k*WvA}R~bN)b2RWT5Bn?fhb(3BZWP}sSO3L)>oK&`3Bh<t#u#TZ
zCRJGB<heTJ6f4YS6(r)^+9bz>zdiPG^d~@NAO9Xq7#M6*X#x+TULK8QD-^*_DqVK)
zs~noWu3hh2TVmhR4-WmvG%s+J{0>xxqxHdVi(pm!keu<H;joj)pT|D<2@?X?SgNhD
z7DSh~Ken71bJ{J{unIJsDSu*RZ0!yczs1*Sp3%D+kb%D*Cg#IW!jorJUcZ%l0idnr
zak3-Fk)usDxs$nZ0NFBpm~ZhqZ*<uKAl2>OTwUh-Al2yW+w1cvYN^?o8I_Ei-5IVB
zYwPj+!;>vF0J;Fg{8Ny$HAkgL_vT~?sYH9KfQxZ-;6pVFxwd|deC1C9swAx~K!M}2
zomGBavbnshTJNxQeSV<k!+Nkjks}kMQ3M|CvPafe$R~1!?Jfk$wp|mj=-lkhO{u6v
z6&9%#0^E4^M3H8l-Mj!dcdTF<TrpKOr7W>>ol?Yigch5OZ)A8lQt$%Vsyql71Z0Oy
zaDo*62k<5&Bp9^^I==5@7&<#U%ZrDq15Jd-T3_67I${mi`QN4oNF<aA^ij>at@Ev_
zGt6;}vOyyKUE(5!6=R<AgL(uzI@rVOP2T6(1X+>-R$rPVU?V3aC*Vf(krXj~k~|%$
z>vto=X+kXE=8G6Q21(ty>1kzAasGB6Hn!3)s@dh`BZ1*0i8Qx~e2^cX(e?zPK*jH?
z$d-z;6OtHIUHN${%%okpnk|J(tT0}zt>$wjpRc{ptAdbp{AiRXmrktzcw}7Xww5Je
zfgmYMAnJ<>vYR0rL^@QgOBE!-)R(f70bxKNk-rM_H|Mk?tG+pqb-({E?r3L0y9LXx
zF?%_mS$3*fX5g|r9Yr<IX4pDjX1ItzRQcWC0o_A*SXj;x08f<5=bAl^f$m1_t%9R%
zlk46Wo$MT!$ztvG^>qMA?jReua@*y{@|VgC+s4jK#Kj-2HQ-w@l>)@7Mo8gei<i_b
z4Cp`x61ie=n8KyNVk~Sr)xlZ60a)X<Ir2%&;8J|RskD?PO=RPK2xvX&Y!{Mw?KcIh
zwX4jl;rNn3hof6C8~mIa_2I)UWoEtlZ%)pats{;Z57(BK-aQU?-2i+L>b<$iP}&3;
zP6L_{Enpnf{FnA2Hf5-``E{J?>Th4S<5%Tle|{!ZT6eI$v32RQ)tfP=<PEdGSV}Zl
zVQx5iU-NbXMcoUzN?K{kfBINs(i|f~x6V#OwLwi^S@~OPxXX{5%T+&FiWe_dRyQ{j
zI$u-0ZFcD=gsqz+7ajb5pXMgz%EFXo)1QL+=Vd~tfG{c4K)4I&$!4hvUHlhK26ylk
z`HW@3j)m!9io`-NiZE7XtzFma^;i{?+!(2y&oV>BAV$p=_h7$ui@LeG?K;aS*%vaJ
zSZE`SvkD4>+SSq&qDsWPzI}Xm^v%9i=5`bmAv7UebmRHpy|DtdunR>Z<^+&E1$7JJ
z!+)p)_C|KEg=TH%^?VqU9o)Ep2L#e-`R@!X&4Xfm<<9rh^E;fl;i0GphLu1p#8&r7
zJxfkXQVqV@nPT%m1A5KRXqdw8zduI#!quJK-284X91B!)-F3MDk`2Ah@4nQt188j+
zVz8e)`K3QPImyG!EI-IRA-nlli;fPSF5-7oT4~(b1+s><dK}9tV49nsP-pS;Zqy{P
z-rU@%w;_mUK2?^ND_05p6L#Ozsm}8wJfvJfAFxheK3rUDT427`tckE)Q~gv&$+0DR
zsPw%-gb=6zwA9Jx+QPv6IaP$DlX+o5n4mxYDGrV?w0m}TeW>MeX{m%5K)EgXh7vfd
zq@pK<X0DnHfJp3tB!9d+g9*B|>Odl?EFV=zj6ukk#~`OJ9g&f+!2X{m>HL5V3RL)O
zt}$ezon6;?W!is3BE*}j-pJVA&Kz$vH8gQ8OCum#zaa}1C&s+${r!qrDiwSoOPoIA
z1a0rPoQDSQ<oRo^_%CXtL^2qL44)Gd7bFO)WdJ-<Hh`P=fiX<A{*>4sE&%AXfzZnO
z2~aZ_HIgDDz{D?{w=6O;k_d37fM3f9h~!z!_o*^N4^0jb$l0y!4hV}=7JyjGkBn?!
zbqDUdW_%O=XEySE@k{cdwuR>yR5m@%;k<SE4kM*0i11iYYrQwGI)e#+e1Ea6&ICRb
zrl{iopM)EOiqHk9)xF7*plw~`4IR>!0we*jTLLoa{FVF}T#P<>Pu%<RD`Jle%Os6B
zX!;BChUHaJQnxQG3TYz?0eZ~Pf|MRyx=35&OM|B$-UG9ni<TgnPjMJB9yIp@i@}o=
zY{gdjF$s~s0u_tY6+k3;SXZj2>XLVh4sPi}Zu{Y@`ALvy^TT5vYyS2s9J*j|%5tL0
z%V!F02MmgpKW>rTf-=y+Owk6FY)MQ)W&lxrs;Q}|tK;n)v7Rh8;;iWD38t1h<M=mo
zzars%T>T|EnA)Tu!g{^y9TN<)It{@{#dNX!J$PFov2O$OATvB@%@|A}Ev&VhcUtW^
z1m>ZeR?n(yY81*Ae01v+&1wVv?sI)3_mB<xF3+H|IA!7CgC8F})Ty)U-Hb3mkMt>B
ztPM#1{fG+5XQoYFp*Bn(*e@2_1u7~~`T;F`pFA<l!3ilaj{#eg(8~phgo>;-Z-6_t
zfq)(B9!&m<S^1b6wX^S(gcocGr&SUwnMhgQ;=<7}k@b7~b6znPV~xw+0aNefX70YR
zqq`dpRLYr3GcFK_MYq<5Rw@18*^#I-UR=PU%%<HJV*h1x+4R)H_;KGZhyj~H^K_m4
zLH*&2m*m92d=ud9ISbC4?E7LZ!y=T`#y=DS?*9=kpWK8Ka`7(UXszRUM`e;8MJkme
z*y^2vF{79D&=Jj;N-uTylZh;?%jL|K)47^o_98TPb6=cRLxUoVD1We!k1~6@;uH>8
zQ1O>c+I=Y(_m^Q6$4XR`NqWa?<-LW}2Dz}Nix}1!wUaWe@BE^CJQzHuatK10xZrdS
z;<GBnFUi)&CSs<p9cwCI70)%{{80qtU)9^N2_?v{)NQ<8L{g0U%kTmn(p$efWB8E%
z+5XI+MG%RjtE=U7d22%7_(6j+5fD`sCf%-*g5%PoS)C*xyooY*#s}4~tt!4Tjvj&3
zbzVnSoEqYjSe2D^<{0$)ZOGCGQ(|tRdY<`cJ8qc@r^1*ZX%lM&U)7{4@%E*$kSY;4
z?A=s8IF8~gn^u}zfMzj|%g;xk1I~icSN^UqlDGss&hKKk`07m)`!gCmT<e|eJgHC5
z=^p*-gdaubgP*rYlJOIgk$JD5FwmCVP33I;ex40VdStRHZQ1tj-8(u(GRRn=$1&kb
zm%_;2DrrjW1888*aFY6D#;7`%#XbwGe_ECIVP{|W%No2O%SdDH>A+l)FbhTbbcsdc
zZ;(oy)AtSC;gGQ}ROTEERUbR>H3deGn=jSq6x7vRwpV+3ktBtsOw;)n`v}=<tRy$j
zaAMB?&6HaVTD?cBAm_Gou0Yj<+mb<n-KF=*lgwv0wC=qIga|Toe4G38UVw2d+o-l^
z*sRzOs$9oxXNkAGNBZOQ3q*;ziI|$^TV(*@&)fni^_G9|*q*)*-}!=G2AMZ=ysm;?
zl4mfuJ;7$kH~jC$prG6k>@Tz+8eRIqC38cGb>C-aC2vC1J@%W?s;Np8!`Vreul7bV
z5z#dL^nrwJR2q327M<0nOo0^H9D9Kx*3T01XmoS2bOsf0h%M2DcpPC6OP!J`EMRO}
zjpavZXxQ#WaAz(9S3JhjiS`5t*MG0X2>{5F@Dv{$P&#b&oj!Q@7*6tD4Xscz&hPT^
zNQfnczdRF<mAVKY-^C=$uu;2Y&cC-U33NDwx`ds%u`{?_t_BJgOLH%<bbJ(|a<tDX
z7ddV&l`=Z{EZ+P99Vox0l7zg>cP3dX`OVsZ;ZGrGN6=+oHA`G(Cr3GfaFgagY~}0Z
zm>0m8y)5ayvQ1>tEQJgk*eo>H05kbq**I9xXtgL?!MBAhfEH)m$uR_BaTgSyjt|d5
zbDs8Puu;6t+voA8e(`YgYEMVno}b<;k!S40!*a}Ks5t-W7f@O;HTf8%E|~&Um}iy+
z;l;&OfCK}LaN5McV+G=q>fRX0U~2!LjR6c|(Cp4(K9CQfuJIDxGJu9J(Wx7ZW2&pE
z0ksg2k=<+|x&e5VChTL?5p4AO_3N;G<u-th%+pG|D$#3@4Z<M@KqK|R`ARn~fO!G#
zVHcQ~xXhJ3i+WIvlMRtcS{%>!y*;bMYK*?Z(xD=4ZvH|zj%-m5Up?V>^m=2wZ$w9a
zSKK?l52X+t)~^4Cx*19b!pUIp0fr%Wxm=K!*u9(<uE5+wj37@D)|wmr&e}sw^v?%;
zT>L7wkS!HC;@_*)2FQDi^L~xI@tHK=tt@@41{dh$3K&AtTlPgMIPn*@eaduNsg{i>
zeruAbHW#|8(XnUmnKOJM-M*A}(y(xUM^{@bdt3#Ofq`O}nOL5)tG!{8;eQeniYP72
z3gs4_H{7vzR&uqcTUeIOrxs)*83Efiv9MB`wMm90DQ3TpH$H<r_bQn~5n%9{OfcW7
zLg~wxN6rIWk=clvD(p4%uY%}8O(u+-JetsBk%(M0)G*cWeF7Ghr(_UGTwza@<-S1x
zFb%X~fBopdd!#rxso24%mB(7Wpf7k=8b(c5MxWf5xVESWgGjU{G2eGpVf25t<uvw!
z5cFx0*A$q$<T+$g2@5a$jd>J{9{}iK_((VqOXD37mM<m=MM?ePuZN%(pETD8uVI7h
zTc^#nms(?I5uBwOwoyyC8J9dV(1T)8l)>N7cFi7LH3QuO<E76}GXBUHP^u*!RNG+S
zU`uj`vf{I?z_p$&W?ww`H5(nwGU+7mDcP6tFn2zV@p3QduQ2XcS?+ndTsmm)ybdz*
zmf$`GOThn?|KCmN2?Ml&oU}fZuTagoY0Y6+UoVpI(w>ral$Abcm89`*d18yFq>yT#
zLpzr1c6iOu`0d>NuZcdop2T9_eLmqAnvH*=KA4a>qBAs7q7nejty(}BAzMcn{=Vm9
zwJfpdJ^7Ziz-e?8akV&{7>eFqh*!hrf}r=u`lF;md36j3D!6EU?y}8(F106IY1akx
z{HeewC{QV-y{6e*N1cUMrE7Zj_N(PcUM?fO+hl2OZ%l?iLlBhjhVK+mZiC>%#K>%M
z|FN)W2501=@cSo!oEXIvKNIDuOgf#b-q3W!GVp(||7CBQp&E@dT6F<NFa)nAnYrkw
zS-8OJ)RQG^PQ1J}+Pz}mBwCY(;yarC{V~x;u(ilDU<e+Iy4l9z1GX_V?I<W>=avv8
zjxFETO&W9dmVQIs%s^6YZfvup`n{)1V0=S=JpLf8G^dfjO)&E8|I><wJUB5-74G+v
zIl$7H57|m6B;nIq(;06s)}j!irhZCol)Y>$e0S5jWb->N=xBkwX}q7K8oPzm^I)y$
zhuj3Og=R}if3pg{P`_fy$&WYezC_4oIP2HQ5SV8FRJKXfYoC{3yd&fWIP%lc(JuCO
zT&iH`WXQ$MsZ%Jpy4EF=%H?b?zPvIop#wt8DhxCzaBG-fqtoju?9YD<io&wRv4!D$
zZT_TxwlhR8!APYxBdsDzoNCbZR6a}rbEB`#M)b^xWo-h>hUHWte9I`d6YS%U)^*BS
z;oBG$PB2AsK7v5>Pv*O_)MW?qfRB<SC&%*&J{1(mfFE}fhS}O;*E@N6m5L9KjC}7<
z2U~OrVJQrTF_+kc){pD8<n|%W@O*s!x1KvHnFrkVswqZ?j*{!+vkR8W9anhRi_tkX
z)Wky0D|(nsTvwiBU%^_mSM!nOkL~fYjO&*=B3elJ&n&(n(fa9!yR*h36)uhWn|R_U
zO%pEiU$$Y|rMpt%o_Y+|C^<S85L885SK--BJN22<9JOk-{w!Cb+<FdBm!#?6dy)nh
zvutb7id>+Z;{Qir>dE=cd!tM~eND)UYvQ3qd-3L}#`V}QLhmdd?(6C^&n`)Im7kmk
z*JU_O*C80EVOXKN>88;lLE==7+l#y1XPA}irVo=|(EWI}+UQQkyUM?=Inpxu-Wc_B
z{gJni03pdja^GGb%&A!Iwp+u^j+7v8Tp0;XYc+MDIb2$TkW9)jk0Ht`jNkA3k*E$f
zhbMUqkx`P8^gY>Yxp;q0hurw9a|Kk4>}cJFDZ)Sz{OY=6%`VP+8o_K$6u(v&{qa48
z-jzIFmWhb`%uokSx#LsMK=iA1TCDiiJlJ;<tpws(ZD)NiB`qqY^xo^iYpS-JUphUL
z8DQfAQUA|Axy+_3EAx_A(!rrIXLO@X<Bcz}DZ1YMRhZrIUr35Vrf*R?C&#`0JHnLL
zbrg=jY1tKtyXH(h({~{)gxKWU+t8D156JrN*JoXTJC1R2`*D=5f=T0w*Ei?X=~>Ae
z2W0W6vQZD-f@kyCq=pGdW|J3c=)bWQsC@nY#9~I*n>vGr!SC$D$_i>rIzK)e^<K+|
z=aK~kskk1KN6mlN^3kG_{&$`H=hwC7Nj!=-I>cP~0=C(XGzC*UtSPAqNt68R)+jL~
zci;6gZTqv(8fMb7{m=_r$?xu75X~p84Wx}{Eq~aECGBN=+fSq&sFA2my$q+UGu@9(
zeZIhxO2GLN<Bw7b<=b=hyk9*ZKd`m{g4`*ENT6P4iF<>V&QD6@Y4Gf7&3NLLrjZG&
z9YG(Y4wqE)$Z0=m>?MVV#-DXcpI~9HWv9G=dnp!E+w(e_a>ty&-dGxMb~vHYPSzsD
zY~0;vaZ@D&usALLq^gflc(-UEfHW;?vJCxVBIwL>6U$oz3N}w4d10UWwzItCpDrvl
zPGckD_2%DBHZ(RGV~2cAOEXsRdGTUmB4(TE+%B#RrS93;+6!u5ubSci6{c50xmX#U
ztI(SVi;D@rZ=YV{?+`H?y$E_e$4#Go0kizHYqnp^w$hL}u!rqQD;egEV{sXAxc6c6
zm={?+6i7%2mcV3aNxt<vt#1`GXkM2!{`|Q<F;$_;T%*`BPDDhLOZcsrK?3(<Xh_6h
zs#C%=zeE4sFa_tIPeb`#H-ca`zdgtqP7yI0&RX!^2z)IVZe#YrmX&Q7)DYS+9h|i>
zZP-Ufa{q@5`0*5&VrKJcSB2yVg=1nzVq>krLRnKX?2VbrmQULJm@(Ei)-QiMH+2$7
zdf#>RBuxNR%y68V!Az!}cBwhQ;`O$aS6-$Q<YA0*vFEq#J*!K3M!Mp)#QoQqQ2a0-
zVsGC~jRB+vU-clFu+qH7=6CU@OdRFx&MoXBzdQEozq8L>ttlLDe2V~?(=6T#wNI?l
z8s<T&P#fgPb(sBnh5QyAm#=$^)b}nE&~obr;9|#b`HKu^&QGTUHYwY7nc@a@vN>xc
ze=c}mIBla&<t+}*$)hrjBC-j$$z~3`HZ7o{ABL_@S)4YO)}!yBciv;Lu|iKMJNCf9
zj?IFEed08vf@PJ8CH8Qk;%j&$<nNyTvVYC`5%whZPAYG5&6TUFYb1(I<ocj(X{42q
zWhe0^e{~s)QNtXb>>~D=`_XYi@)#qK7R&>Vq?sy?P;`cy9Srv8zc)qtrL?4#IFeia
z80n)@s^d8+J$czfV!E>2f*u~n8~2R-*t@sT*hET|`YJCEt;t29IVdys&BeryTM!Pd
z8*?&Bl4+5i(3WfP*RA8^>}v|<^zOe){B9`Tq44B>Wvfb$c43k2822h-W}vHsCa?`D
zKFoY<dtAWV4yK(l0fbzdKNUup4P$f2dhfh{Ql&RoPuKHZ&gl(iNDY@wSiiVDZ8Bb~
z6Fe7A;pBQPAka|Ae0R6M?^~d-bFsPEG4x`2&8L_5l`!qq#>(|Mp<)}z<^P(Q=xasH
z`!OoRpM_>u%)nWZwno=XHYU%J%8Sv#;?0OLy%>#S!lG7%?A<fMTnrK|UGe6Nmxs#_
zc~7gZCbR)nfF|D8H0^~HaA^Q`33L0xMWAO}2sXA_Rbxe}J`7{+6btLKK{J-ev1ARM
zWG+016Kt!n76H{zvpD^U7J6~v{#Ue!l7Z&z9LkM0vg~a1Xv8wVKmvuOKFdJ?^q@Ln
zp+?&4x#(Z-ycwkbNXUWq`0s9_d|ZF_zuPFHjiM-ja}^587U~1;j}bF-g6gHJAk9+b
zz@nIv5}SSNO&p_UO;uGq(d_i}YHxDnXi7ze;}X@-IBm@9vF6l7y;7vdCi_^n@)8wP
zIuZK2j-nA7rx;(Sc1EUMX>R5lgo=ilsH?^9N4uvKl$)y&q^KXRApi28RY@~F8bJ|I
zt5o0emr~MiaP(S=2E?a^^W`31wKjmt8C>lCwd>xxFGu5tSb$PW1N2u<@60iwfpc5c
zheM|qFVq<Ar}KN4bD4+-*9PLQM@A9m>+AA?(#NjmPR{Ervu?kqhlC!V?}~Wt>}QwE
zoo~L)xY5NWha21m=Jv;`vAFd_*FX+@@f7Sn6<s`+gZF!#Og|O!JT>!u+*r-1p5Jl9
zk3U>|25;}I*-UVJalAV8Z?h+=^ZFzDNVsZlf9YcN;NDe@0ElrSU$xXAweZ1%yX3k(
zMfhmJa$K2mfqu}Ce3CL&o#$R2=EjgZgJGq?o>e&MIHPvqz{el&iF+Qo+AZo7=zYa7
z3*jj=?7yEXt0ArBe5Df#wk=XGDb+~>n5yU5T{7InTt$OYSWv~yfxN+a!MZKAv+W7F
ze-Y9c24FqAlYPNo%a>KwV3urTqQTYe1&7IYN4l>_2m#v<jeL#kbOl|v#`z<i7CYw|
zr?rNk>nu8DS}mEr{*sR)(;B^RCxb^<R<S9B97}ahlR{y|&5p+l`#wRK1gunkMMEN|
zJoimI>#0(LXJpLUh1Ja|JIiM+-PgFO87>8;C-q-r^Ws?5B1p=#iz3E&)a0um_fdkl
zX{k-n?DyTQg@R_5mTQ}<(3Pt=z@t4cfwKXwB}w}W4f+K-Y0a15(iw;2q4%>*3<z`L
zmoIx3w`ZCbKef}@&HGf_t+W*$^J{5qAIy4LZ2lgVUAx91w;wA;t3$#UzspU%ttT^7
zQab2J46WH2&oy&)KJHb6jKL^He2i8%504bL>OnS0)43rZsCR6V3yaR~Zl^WUk)4w>
ziQVI>vuJ-xXn!EBu1AkYk`r)vXa;afL6KDSy3&27kc{8iX(vfnOZk?G*KV=lKK4w)
z(WYtJ2r`~V%fDc&TxBh`X*}0#sUJnfihN};LH#`yZT6z!m`G5-JUe=q-)StZk1izh
zchb<SI(g06HEUi1xbD))HsbzQRLp+e0m7(vd$Wf?F`2*4{{CI{VVZ%`W<5hmberhA
zLV2kpWarMj=Lsy{ZEJF6yn*SQ!V>|GQzFqXTCaK~<zgXtKUIC1h^fh@=LpZ1>Q=sE
zJ&+2kKA66oE;xohx0|U=ZhGRjFC+~qT>SWBJSx1Tq}hDl6Z>peL>5!i9!VnX6gD!d
z)^YuuNpCu__DjUXk;V?eM%gc+K-n*>betBOPiCzf8S(G)KAnFU^T-^8P1%pv7bN(n
zY_Atk$VeO$vXToLRo>9(A46^DW@k81;eprny=>PQ1Wf4yUfMNk3uQ!^E*`_hBU`_O
zs$}E2U7&ZBq*J4nan=Rem;Mnfbr>}=q>>Yx{_lfM>h3rHY2v=k<S=|RC;lkEeXgG(
z5lYbJg3zycLra^dd9HZgvOmgc#u^GMZCvrN-puelSZLL*adrOmIUpZ7K0e-AV^Kp=
zvp$^I0GT?ooA*+w?<%o_*f0A1dd6F4{h~WO>&ES}&_&N9v2tyLRm<tLFZY2@lb48B
zqc4JoRUpc3v`K0slxV0_t0hfmp~<>Cz!{R2MHPg#d;F_4etEsuI5nKtzR_)K#B;DO
zH@izwJvHjpn>W+9T_9Og`o*Pn6>Mzm%Tt6>MMP%i(soTU9^SNXOH(9?aK3EKHol3Y
zy-F)0S9e&b$@OGwCLn3H(l&lsy|DVgn%Cy?5@ElWL?C;6)%?3uC7Y*CepCZcf62zN
z%JmPimIBgjpNrqZwgaC#nKsv&XAo1xdf*mw7L1Rp-QlP|jyDu>$zzTCJ_E8NHHT*V
z^C8lyva$ZVhe6;Hu*ulPXnPPAvsV7^Z${bq%7%s_a<Jm6byj4H^W5h1_XC40^d&2K
zWW*wlR-LkOaCwrs7CA2ga`hl<*m-#oze0$6-Mhik0wW`%#Bbl8J*O!3e6$Mr#QH{#
zsc2${H#srU=k_SEG(=XTkfX9WnJ3#bTnCv3E>&e=r~h_ME)hXuIoFC<58si*A(a-9
z8!;M1OhIx)UTdjT%GU&8?;l(*wJbB9o#Dh<1L_ZiZht&W7A2m5>%QdLU{W0kpL@qT
zwzXib_0rP5<P4RYM*bx;y#W`ETwLZ$=)x{>DA7QHPR&&g16Qo#mocegr?|ouTKSoB
zJ5Xvp<zkykwQK-ap5oE@{o1~3sxVRJ>(@tT2lJ;XT-GEkSQI1Y-&=*mq?8<E+(nG%
zz0MZS4)V~B%?Vh*VV;_PSOib?6>}6*J#EB(eyO0Q6!GMP+%2c@I~VXLKn;?3tQpEg
z+<qAE!|_3n`6mWfgrY+>F~14K-5ZS6%T&49FOJo`hFaA}CVQ9j-@-l|{K^>58<`3n
zX>5joH=)1Nv~%TjDza^Lc}IssP7?TSRiV(>VL5xrvrqc<?h^ZNJ>UuyBKG?O=-4E<
z<e4|2|F9|F{Zf8@7m(dor)ybd$x#LWv|xX4u5)<K>ZzZ4eI4xv-s_i-AW+F_)pH}O
zG|jEwJ7uEG#Avy~;`7}dnH(H@mlsJXlu?}}S4Y7GmyyDpot+&_<DlW;Ia_)N@RmiY
z7~bpSPwiOT>PX>A6z~8*tV-U5%g1MWdAdV~<}r6a-)uju$mn;q>UfApqg!hySMbf4
zXkj>AMGT*i<O)z15V55}T%g{UKXol*gfCj{5l4O}^8M9odje2ajYce6e^rpI#?=X>
zxQwy8`{rqprtAJiJk^^{jOw-9Ybd-qI!n^i<Lrcil{rr@4@h4KxO~0)5?M<Mr=!hI
z?H+^T@+2oGcT$_Tg1h_01qU^rX?qbtLxX-gk4c0$6-Qk;y?TAmr`slm2XK_oh+zag
z@-yngPy)7h{R$+Lmxn8Y6ZaQ~?U~u|sS^FI^OeUfZ_Dj@<0<<1&4w!+cOrn1-tKHe
zI8$%DNZXW<Qkj>VWrN?rKK`pdrUPVaoFLl5!tjuOvq6DV+|E=fbBf4Z$Mly<7Do7L
zM6~eiyFPCZTtRBm`a!QG{JIb~QoT?@wJPhvO?p5dXFr~Bcz&>m9gj8=A|<-T{MP4a
zb9F`zs9i$NS2@?=JNOI~0_Al!ml(MFi(DWsCjGpDJzd^{Z@w<dyPrui7sb$VHwSN%
zj{3Sc`oibT`eN5=Z+cgx`eDq<^X29&IspLzipiXx1lypKo2r=sTyUk4Jm1TkL>O-=
ze5clL>8HfzGY%^eOeb}?a}XH0eRp>^=eB29=`Kv}oEfRL;EmSmd+BrtoQE)jD5lFl
zW!A{Bz6dyX_N4b={p{~==q{3tb~Qd?Uc~Qtq!BA@jQqYtK36;TIyZof--*X^mTJO;
zo({?%#bzj6X4oVPzN-cxMyFit)y-v0lE2JUp{h?Q$-z6qDvxF<)zLUPqRsB;K8+&8
z>H8&@TlDaF=9K>Y+cUX1AWWVuaP@l$jHhU4$|VVwhjEYYzmMYe;pMDMr;v+h&}~x$
z?IVa@kSiGCFu_<uLPJgd0hXd&uTB~LjM2kSw7vY0cXzEPiC+RAb$55q%+3JQ_J}&v
z+z=_8z4*3fpZ*q?<TK<^5bi<4hX`ehtc##M`-SG{ctll;|3kD9jiQO3Xb@AbG*UNq
zSd}qnHo#bt_RX6&^%}{p0T=|m$!wG~Ik@U$5J|#b7JcsfMHW&(y)$3!(cj*!h)XG;
z%#e}eo)4r${0`-6aTyLGD>X(db92Q{w3<Q7FIn-{&{5e8Ya%}9SjF}Aoa;wzu;5~1
zhEff&Dk{z}1U7B$OM0*ZU8!URLtPah16`xikxYtj$+2~CVd=`PZe<uoHT!&xLjmHd
z(yF7qgn4#Hk{dL7+YY5PFzDssv(eH@-Vw%YMEx#jm#s|E*DFvIcdri(wce>EKU(co
zYqa49P&5XD0sn=-t{7bA`2kP<B1j^3$7O3$PDzPs6ybIA`$s}lud{Q1<i|1X;IJ_7
zi(jAQMvbde?d+xqS+r$j^g3lVnw$4k)1)^dP`f$J`t9}Fz!lV19pmH0Dl2)X+q}!N
z^gh{q(Q<S?K9^-4L{rA+`|f>y`t@ELJax|~DV0P-pnH>ChMzt|Lo6Q_7Z*3wje8TW
z`rcf0p%nnf2!o&_z;ROxxi7-T@ocFFA`ZVtV>Vb*1m9a`j}6mp7w~&-YkD6G9LC5^
z;kq4*o^~rM4#HVMS`>e{0Ij=gLVXwD_@+xwbbyK%``X+$EfGrxj{mwK0AvJ&<Jt5r
zrZ@dgZj~!k%}h*InBv(utlDlne%*SGJ~`M@b~X=SwN&g?&3%kZ&R=dAnUV2I(luTT
z6I1T;tr!dpMn@0icV0X5xsUjl%_nwLb0}|SpfDRDj^3+CG7Yv7coebgM-6b_=TQXo
z1No_0!5e^779WKnF1}3pE0y|Jabsg+yaM(v9!AcPWn8;N1?g|`RSb1ncd+J^B;y<p
zH)&~$Ws~l+lKuTDjV5V=TrtRyq3u|;goQ=Vp@~#1?WQu`%V!SD7g54OO=SGg58uDP
z4zbtP(%BdBHl7aVz;AM|U*z*xrq{HyGEW1l_=^{VbFXY|9UMl!|7dq#3=a;jKX8fs
zndd~n=(*4;b7)}%A+omKiO%h>@2#{K@Kj-N1J<T$Y4?a<SJz869t#V5d%T2=4cg>e
zqP@}x46G~{Do-0ir$~A1sQlzOUck-l6#XwlVJx~0LmaxbfY8u(raH|_bF&;Xl{VL^
zdG3`ja7eWUS>)AimpZ3eq}2$ii+K0xQ=yCcFe+$B-|PHfJ{K!>`4l+Yw$R{nJhZ2~
z)~CsAkfpA!J`RY%@`ib06h6v{X!f{4Rsul>i@DLOV?0ua`rmA4UHP1rZ4RSzMSO0`
zT_=uudY)YBS_xx1g+PL~5x63ND&I=jSmgGGWTMFBWaQJBS>Na|ok^FHvACM^$++By
z7~uw)dl<em)`VZknyu5G)4jSgyT=X}>SOJJ^{@QVa7D5reK@PcaIBeOqeBEv{FS{(
z?z|=o{*~wRs?wD0E$QRLT>H!bIq+SR*+X9Sl&GN()T!z^zQ|VZOZlJ(;i`X!NpGHW
zpz1{UMc}}qOuvg-IKI#1_)WaZdD9{EyKyR0EgnG^sg~9shtH^I+Fv`rH^&WVOm_N-
z7JxIX^*#uHuOh9lcng(nCsX)n^thDn`b|zU!f{`|eq|s!W^hqy7VpJvZH=XW3Yq}W
z2vEw;4-lzdGbLVZ6X~&iFs8+9%{C6|AP2wup&s)u8OmA}iVaQ#WaL#7r78>pj3EXQ
zFNGrHJPg`AWezh!tt+H(51c^^5q>wD59;J^2^n{r9d~eMQ{{+;i|o>x=4zbQm{fiV
z+Mk^O3FiQ!BnaIm!6REeK0>2TPR+2t|8e9~S5@WKm)1Ua&ELMUmpnxsguToAp=Y-N
z)9||a=46YSKvk0P*{?RI8Dq~8o^zm4x|u=f`Sh6rX}hauJ&|R3_dm!)_6G@%)mXOm
zV>`oo-S!Gju^|0TZieM~^us2}%M5Qtl-IJ5Pfh|`EQII##-`4(UJI=n+2(sdJ169O
z@(s1MvmZmVR29&lyXDHL7_=Q_rkpPaI3HPJySqs})nB5Kqh0jm0Gh#y3JybIKfAfs
zm8+T}9{bp#|Hsr>21M0vZCFJ>0Y#;x6{JhLLy#`%?(XhX1f)T_L8Lo}2I(HU2c(;!
zJHE&7oY(jGS7(sDpS|{q`@WW$HTYv_IbeRIVGLCIbachFKuBgi)xD9u9Te%)aq_L1
zFZGH0aF9l|HO8%XEB<7myu%3#+4}2(x|FX;6Gyt{Rc`v>t4$4QdU}~k1<IgY9?Dzt
zb9IsMHvi(6eH}|7+q?ly8x|b;si9B(>i>_^?5%WvVzznZ2Hn-s<ycPG&Z_^(=WL8B
zJ(&5vf{+fLV~Xp2*?&4ezxgF)D^tRKQp`kzy^65mIie9h(Jhu2$MEUY*nS*Qk&h+X
zkbLLV`k4yOTZPhJ1=Y#)I$TghuI>n;{h0=0vNE8`cG{k_nJIvQoMLQpq&zF|`uS_k
zdMVCeP84iv&$H!fk+5WH=MQV(VVu8#moOP+vtylr*f)xcuc2`p1HrsLy!B8P6}7Oi
zKtS-rE}pH$q|3Q77~N4RrB*E9G3!Gs5dW-ridXG^vh8s@8;iMjb78Ho|DD@~NS$7;
zLNO$+xNhWIj7=J^gZc8R+2zq%?tFm-B+Y`&GIKLhgNB|jt)jrGP-P&c($^&i5rRL}
z9~*Bh3r*)WGCXJBnXXGtw!C`=9Aky)i|4&##`1iUq8{rhmzeLK-dcHUrm&#RR+zz}
zyV2uIRE5eJn&z9YAMC~F=Ti|TK0-u6x}aEeusJA;iiwlo<gp)c_44xLPJ@t;kWeaT
z>0rK|`AUR<Bu>%r+gaiN1DSB+T*gRAw!|TAf`%#@0n_}@!optH#7{rZSZ~%kmvb3S
zO@i#OaaP16>#0&IRzZILPo!hULxWMw6nlTtoq20FBWRR@*AxykoldQQ<<?TyQeP1F
zsshWRF8ReMVl?Ol)Z<aTC**W*Y))(b7_Gx-rjR?BLOQsXS|OXpx3j=2yI+zZNX)pc
ze_e75il{1FP&MZgL^mj9mBP8NoIXEqmWKlk;Sbat*TYvQb)S4rR>8~Ej3YoWKKcb6
zdX7jkh2uLcvUl%>(b*g`+S=P!eH1~_ve|Kaay<gM&(N$p{&ZJ(q4Fe{yXX4!hp|>B
zbD`L3qS9!!M`>_uVTn!y6Y{NTG&ef$X3rR;54ag9WK+c#vjYMGK#9!ZdJ>a{mOU|H
zF=_mt^z80fKHL|ZvyTHK+)v~x1<5jLq3<2jVwb3h$aCCrm({%T=-k1+?_@M<41v#g
zH6Uzuqe~dw5!2ipw3-!P<f&VT`PT;%y~o<a#G^5~pU=(A(5csdN!Gdeeb<D;kfOBv
z#r{QbG+U9zAX(?W^%O{08|-f<E67kmPET(WDE}5ErqpddEF>%|^fWH8VLL+n?b~0V
zBu`*<S?Z)Aidi4-U+I2cs$C~l{+w*r<9wILcGb{QY5-*ILuq_UjUUDLi`B*`#_B;I
zDpzwIyx2$spP!uH3yTUg?@tcmQ~t>QRO=8pIsZhoE`r!oNJt3S=~CV#Gx|QC0`>Q*
zgRFu&SDp_XF(gi_aa%@X&k5>q5qY=W?Jds@eosEv)z!x+F1gZa+!nJp!u`BF#G6}N
z9v=M39M&<7>t{afa9-Q-j`5fpz43!z4<C+dx(*eYF&hu!Gh6FhTJF{qCkMw<b~;fw
zPW#J5lPp+?wU^{m@S|ehH@V%KZ)P+fZT;MuP2h7#yOICt530R|`d$a4p%gZ=uH8%I
zh!i$9wjUg6H8(r)(CzE&=B`izF5{b@<tr58CnrOxe0A=f^3=IICTmI0K)Y&72QQhu
z1oipzQB(Lri^uWZZG+_0Pn^|u<n!)OiIhwAO;Qn)O52wkpn(Pw@R581c6Sc;DNtu#
zuhVNvB#+c6MXT^JtnDEqBHc;yD_h>2?-N3!+K~!4-R*;k8KHCR{xzBdjF|N)UrpWK
zv(EBllIE|D2N{53cDl?u)>Cra^EwQlS%3cv83k0+{pw_7pK#6;Ax2%{_>`ooWH~WR
zrS4aLN&<7?PlqWY@-A`>2s}2PrAT9C4pMsZITfPYyS4*4Jw4^~JV<48<MEnHNKBl_
zQ@fs<Vvt~7|4&%GK^70K<a{Sw|LQUtkImm6+wwlb08u4GGaOBT9DDnEuc13yg?k9G
z`J$Cr@|cVjGYOMk6$lQKN4}({dg<yuuz9umJ92HRG(D8w(8&?);5;HEM1dL_HyC8E
zo!#<~os~5#JV^XgkOAeZ(dbP(+(JCe9MJJ}z)(0~Vq^p|&1{qc4=Y_=0gt_nbJ7ob
zM`~K-WmP{P@KRHUF_+BFaewUo80a5h&wz?a>v+;pR}d=!V*T{=^r)U<QBiIwe0B9?
z<=SP!VCV^fv&aR@Q!BrexQ3jsLtp&;5nbl0Sh7fe|Neb229?c<iFS@WBjH&yRpZh;
z@jyaM4JGGt+#M~DZg4J69yztt)ul||7kLR69hh%x8}EpL@bJ(|RlmII{pzfIm-Q_n
zi{j*^0?E;96fGIS*fHDpV>NDqqVn`6Lz<wsZ#7yr1fG|eg;!T+%xr9NvPbQbgMZo~
zf+osAGJH4$^$#{x3R`_2xCJ#gdwZHs{pb3(>OcXshtbzqelSBa+;n5Ui4oyI^l-uU
z=2yyIUp8&KkBzj}<KctA@5sXicJB?5jvgd^9uOsovaReIgVK=(JlFkC=y_oHuqy2&
zy_YJb{-IhYQkB3Jnh(j;LppQI*U3MgoX0)p1J+*Pe9#@!`^mQX(NuL4*hq1EV(d41
zxlQg~Nu+NKr1bswtKLP0`5G&V@D@sKhL%GQa*r2mcYmc2Qe~Nh`u>$Jh%tzhW+-K+
z7|Sj8yx3yC+0sO=s&X1?|L=D^cpxA$g5fFp){maI1_R+>gJ!<z<$r$XKmP)kjLLUC
z^%XmnpL5Y>--DaW3MGc#|M@863x!^icvA4W%7LAZ|M`oTSON$)DrNsFmNroynfksH
z`yagxm>E3y@pmBT>v%|vlHoJ&E&&Z!3eH{9x=4QeuK+`g_&(^t)#3N12psrQ96o_Y
zMiP_4m1pMKW9z!r=^?UiNB!UYkGB2}ss!pUZ5|JYoEsL(r+haO(G6wBl7Bxq@e}#c
z<~_>Ke>IF-;tXz4?4j4k7+luY&m_{RjFg$%k<RIH<Q)p11cih?_q^j<-eDkbFMmqw
zL<p?!34P^yQQm3LTjHkhh@gLkIuDpM`(6%XvP;HLm!Z+<2|N^T-MC|~x19=zjYBhH
zQr2``&F2!bXU$Xf*kECun67m##nsTU<m@dQC4O-d7Di3~TD45U3rW89;@?YhlFfvO
zY=d-5v63_O!p-GF7`2Hybdtck{PN?Hb=XmL0T$tlBg=_Q4N?{LH7M}j$sxV^-;3tr
z=^$`yIPAj~_Q=R;bfa{Nm`A;qyJsUS)8DKao3&4B4{$^T{MiHP82B1f9pE{N8?Ysd
zbCX*QZ|B9vK?_ZDb~18~qPCPf^o_kIo|kV;nvP=QpJyrkv?||?#zN*xZ6Lf^578>W
zF(P+?sxxx(c~_qQI1gAUUy2&yy;pG*!_OYPu)D_P#lfGP1m}cqI-dR`S-|A_d;_tJ
zd*iIr{uBZ+GezJJKXp6OteMAWYm*A4&M8l?H%-!LEJi-l0j+mW4|%6|^^WHrp+b5o
z_YrKb+-k&ANhOR0nizZO_tyRIN$+{%?z1xv#bp@2zKxX`Gx#DHf^LzVol<$;wGy)+
z@8;=fxf<bHdq7#Du4%~96dDnlxwh#W`F;_8o@2%4R241u&IVm`N%<|NJimHbNZY1h
z>JD<tog=_)MY`zJK`4KFmjh#SW{RBm=W`RAYx~pY(YRG>`Pekr743!N0y8~HACE`e
zO|ivX{c3ibEY5!IGu7AI*TwF$rpo{H0(85t+>x#zA|;+Kt9Y?3v)=0qF=56t1QMb9
zrn<(S9w*zSQ$(NKEKMI<6;D+SI*KP4mS1`w2Wi~<|NAWYKAG3mXnqUzfpM7HSNBVy
z7#f8Hzie>ir?cl&R^$9K^2IH@$jMoz(rM5n4)*pfo3-qMG7w<Lrj2Xes*ilgbXq^@
zm!ITZ-HTsQx{_;?^k@9F1f3$Tq>;;5>g{~x)ub6l&9CA1etAcBjFxTG#jh<%Q_ad$
z@5+424a!*PGw+?0C8O5Kb_~fUyxCqUB-|)*N|%1g)}&!Bs51Lrgzbmg;&k3pkZ@Jh
zcz-ofrGa02K97lCF!^(~I((J5*PA9(aQpJLuQo&xl~eTXtO;4xb<6E@%(Nc0iVz)i
z9k~E&UGssz;p9PHEDK_{52+tpIpnz{T1Kq!B{K6YV+9*zAbka#*bk+ANbW5rE6WCg
zr1DxJkCthTf``8-eI}@Ki{gJ|Hgn%=A>rXLSuC){+%%w^?aDUO@us{2X)hQj<0KKA
zfTn)bVKw4GHX9WoJ%5AF$cJJt*?J#7_~q6z3_LSzTn*#(pN3j-n$`L^6|M%XZ2b&S
zYn28Z44+;f+>R{szJ)j6934fSVZEZa87`M++~R-tofb=zKjq}x89LiVrODDK)b{(o
zI!nh6-%ExO`_M{vosxx?S)+jRVx_aBY;Y})S6BG%+@C%TE`9gv=`DlZj6k}^@AaKw
zcE(jJ0sV~l+Kf`@F<XDv<G>x<?PSiGhBKQF5$qle3wU)$r~Aj*6wW3q7$BG^s<?C5
zY>dSsQ)cEA)d>XF%f{_V&KT&6x;OIPDZSwT8{aoWwW;Bx;TU^+cm0@fwz{f{*?PvI
zrsNLMPTRFEHtbNxPsjNCMi~&B0_mA}YAGm)e0A|}ZTJ>btCps+R6?K7_7fD&pSw=n
zJuSD>3~~#no&OS5U8lsC>ziw{(ngxix`M&eU3_ah>KCU2Z_-tIBU*{SLqms~RIL7V
zogXEh`=6WaOCR+5;q6ACJ-;=tQ;f7;W_uq${MvPJn%YMVpr|S>ovRL(PNV}z{Xx`B
ze1QXPGE$*!X^vXTJx&9U6U%$%yY<6_sIHFf=QOObmD>K$`2B^%GJ1>7AJ8eHr><x8
zHX(SSPhRngr{zp&?{RpP^d`)Q6?Oy!w9GoCMTyz77JY<c?@xYXyH<zRA<o_(U$$v2
zVpwbPSj7$Uji1lO7oMMnq3uH#x^8g(C&&($kBbQ0Us8T*9=3nPyHjJIaqa;>6<v#{
z{YDx8kZxB3vzFaytS-kux^h;1&0*ObFCkfZkz=7_VH=iNs7LG_^Lpa*%gnCzr*6qA
zxk~fMw80lwg?&d$YBaS>%Ze%N8Jii(OX)X6Lvx3ggD(v<3e`0zj7rIxvNCpBmBEV-
z<?Qk|qiJt<B}DUzje+gwv)K6L8PUb*P4jr%80ifQrI1VLhpWHABg5mBfoR}Q;a?Ja
z#Bkj^Rn46F-_ws6SCUu@257cbBAbI4U7`iZ4o4Upj~NPoby0l0LQLYC6+aoZ=kCc%
z|A1uN72{jjjCIKC%VftZ<p1`77XNT?@m+{?a9hjJKEYtLP8ro*)WsJg6dda1m6gGN
zZtw%3Rvx6gyGwpyFL$)k=^+umN9&UxjDIRMF+TpXz2le2CY>~}K)EM>;AN)pATOqr
z#&!=$e*ezM<W=SF^8ugdUH`R4fp7d7-@@-pj>)S~anrQ+Sbd!kHt@_dPR00l%NH!I
zf3>)H3JG8QUZ(i3M5KKY3ddh5@_t;!W{|!V5owR|Jgq3vXr|3S<$pvfzHvY^r#mtD
z_%>I8n4Z)fNo2||9hfNT=;#IqXhXxoK$`wvoBV?Zz5{Rh`1rWExJXE7Sy))e$&<v{
zsTFK*CU9AN@wlYYsob4yd-RQsiEv*M;S%A!Itk$${d*e()-y^=ZA?uq_4UmyEQnve
zyxW<AItFK6uKS80J-cVDC%mw<vH~_{1u@&-=cUB|^HV9bsY$4*NjQ2INBhWinjZm^
zIw*e(9R~%to|Swgv-$IR+<NKsy*<LBBFh_Z&oF6di{{_kFdRD^nUR+#)>n;&c5-{`
z!^o9Q;kDd=m8?&TbGC&HQaRMq+Z@Fo$K_Dq1AN%hO!_ws^W}fisdmTTq5!1gI9Uqr
zLHCNuAMOuMjF}!>Q}FzjJ%inrFH5E_+P~Le%WZuib^iC)^&vv3rkwrZ8=_Ay;&SpG
z$8C&5Z7JDL<#pIi=M4RiZT^{t_NfHNmEVzM?>Jr<{LK=7qYIB<BWhwgFxF?i5Ku6s
zj{Jb!bai5XttNu@Yd7{5oo9TX@y2>#C*t<Rz4s^jl~&Kd01wN%Z-1lhg@IhFFk}34
z<PSU9o>U1R__e)%k7YMV__yI&nlJ4xid#|B(N_mJ9vz+xB0JPDZ*`51GBJ^){QCv%
zas$G8I9a4uNbANtov(t-XL2Ra(WJr%C9u9Xi$$f7h)5$mg_Hb5hM#tWScj#vxUleR
z@tz{<DRN+uT-1`CUHRYZ(3&pQCN?lYC**htxdWZ9D<os%n}?J-NVo0BmmtEBy$XuT
zPK>HX{9#fo9&`7U3lr3KEBVQ3pij#0E|i5e_Cmm9aQijhtDcIBkN@1$*7PtVjG`hd
zghw~H#c~g<-dKERc#usg&FU97h`dK;PmM5A=bY0TOmBoc;=jBs_6tePj`foLyY%t)
zQOV4BvLWD)wp1Itk4;Shx8mRY^TC}hri0vc=cd>w!En;MWPP*fUgNUG1U}SJ^V2HP
zvZ4T+TdIGVu8~V8@@_i)zVL`1<m&m<lTF?g6lOiu5UIZc{ND_jF9cA-9!+{74I2O8
ziNv}^DwIRTWxfm$VO2u)pIqZLSq|b~EBa=oKT6}(<@s;y*rHu~vU#umXP_o+#TJXy
zf#FpV^=~-1Q9_GBt<{wIA>YT;c>Zp++d)$3Gh1g#I?>16)E`rmx?YEwWi_mwr6p^v
zCJRHIY^^zx!?e!qe{b>|-q!~>m5pzi`lCNsl+|D8CQ9F<;cYo=`>W?d)hBPD+0bms
z_>#qp4}<E}W_9kT+o1vL&}4jK;uhOqkN&2hZyeqOMYhdQMigJJc3#Mdnj-!q)_aGo
z<Db0%#E>*#`dP!PZ`>^ABQ%*i{_hXJfSrstQStp6*LC_Vn1)RAsbtNsbmsBM=N+GS
zUf4}Sjf5c@8q(5X^n`Z)J|0)VKk@^KReh~w>UQ|xn?{-oaPF@8U!r1WwE1S}k~?hj
z>prl8CROje79*CCktr!D0bsq*b^EnGVUvwiIPyRLTY=9+(MZc#JZx(f`m==>!$mf9
z#GcZ@mfRm4+qWV!%<)-5azFG8nJdW6wYB(LkD18eF`3FYx*mGpUNax)u$mpkaGy8M
zx@@-oa}GDf%pX>L!lq(+p@?Rs5EFtHQr%a8$VRy)v>TTPEd6_rKc`)ys%cGOeoGe)
zPn-N5T8JIo5}Pr}PB_q$z?-@Sh{Ws~^^RsDLJB!D{Yk7ee>0T~R1y(@U=|~vki{K1
z5{4{C^AVDNS$?ExS4iEMnWTVfJWg$OH+hoSLfR~^tf>?S7v4^+xJW|j^pU*c@osxe
z4jZ=_7Rb5^d`?tVQIW)KllI9U&<*IcYUX!-`Kj0}SYMtm_9+$QP2zHzpY*Ggnhd1$
zHd&5VQ8n?{?{b`1h`ls%7pJpz@KVfIkDYb9J%cq}pU2Z`iR?K{pkPr;O*|*&oXxW{
zDDYg{W}OH}LL(4!8cJ=^wbuK<(65qbdvvmOPR!Tr1^2kvWZeE%SYv*QS1?&7mxYLm
z(*#V2ckO}9CWB1x#nSH5^slnIWgCxg4^FSoD>tB1d2$Nn@k3hm@)kPHUOxM`U&2HE
z{j+b1%_j=)8?3mUHf~1)-CrivwE@!K=xT2jD*ui5Lfythu8q#b8Nb)1`(>Zf)nIE+
zkC?VhGOy+IfpW2iPNQSunZ-s447A&Vxs~$m*Pdcf@VcIC&N#r;DorFY$v2^?6wrz_
z8X`XT-Rnb)YWVW<_wBRc=JU;&Xl!f-HHk28PR@~vprGDWDuoiQmJi4qSI;0__t)vm
zT`qf*schHBQ#Q!YiQ3@U|2-kC{Q_^CB;61M;&KOC1r|Gc5|&>f2qEw`#e86choO*B
zKg*Hh>iqg@aCZIGCq{M&OtE04t2knlprj=8Swmsj!-0r34a13?wxXo)uRg|~@_LV^
zR>OX(HG9W!f0G3cfUvOe@bKW^Ka+SxZWCAbpi3>x4NYvO1Gfvm-?hzkQdg@?Iq~=l
zni}_4v#o;F$e2aN-knL+<_wx;zAvrdX)spv$=&Jlu`{bVYgl9cNl9udEJz`j67TNj
z@)*z&010=vN_?y<3~vFjVajKlJY1;Itfuo0L$}7Zi~zt5xR9ghG}wZz+uH;Sr}AVN
zWYaia5)<o`cwQQG%YxP(uiH__!b0=C??a%tC;>EGUEPe#%!f)@lI~;cbSJyl3o2#?
zK-W`aJF=XSkpU1LUjzLCGUKGJQ&RExrp^Jg>`nn<9g9B|Qdf`k`0=o@f`US>G=pkJ
zYe+nUWGpqS`N?ZZ$wE0&(NEkl1KM@YsY7ibcy0D&HeUCX8#tLycwU`QktRDO>D$#u
z0tI9=h0VfJyJ!rZLY#9V*N-rM`;*sRr?AGYD3E?YwVMhQi{-QBvl9|tckcZ}NrqTj
z0j?jI`ocV1`r~O@JUb;sMZ4=9)+uXz0H)2f{0A0|5;Y*6m8S9Ld7+{@%vwrJP>iQu
z++MpNBO{x4bWP@{MU&6hWw=mrTThqCnVOmorEpT6qd$A5(P*l-oXBNYA@J)9P@m*F
z-Cu5`C$ZWnmna?%?o652Z1|PhoNlw$4g$!dlBFdr*{ounaDN<pv8lmn$9bYaiPCg`
zDi_-9<&iIwTw^s=tRsuMu&`j%A3Im;#{5q>$!HV6YdZXy=b0^T1b|}L#_Qxc<T0N<
z3X6z{GMATAi|Z8NI+Fi1yGl6=$9&}#G`ldy?WIhhQH&>0D4VW8TS47fl)(EcuNPmt
z5)Fz?)x!1;NglW^|L`^}Wf%j7EVr0R_3y&y(tl8S<@gV#|L9ZQq3H0+ImzTkzWS#Z
zkf?1B%{LxSO5(Lx2jM!7PDid-!YCV(15FU$Ivybvb$5h|OyT3C$?vL`Na1#xr$KB0
zZmPDvULH;2(k3ivR4V$_LSHP6T#rVvx|6#bAojU0RJk!{LopxQEK~(m45c<WD@<})
zU4=%G1~^E|m2f!^Y=+^pQEDw<_FLb&;0rhH&DLaoij|;*=P=9GT@JtX+cJXe^BP7$
z5Un0SP^_e)+WaZY0KtxhY{={SRHM@Pv;ksMTvQCPp0VGV95fJ(kgs+-#z7-w18R$V
zxd(fzt5v3ludd<>m9n^mS95Z5*ynjEUFhY0bO5BH*$UNG&if?EZHU$4htHO9KCj7A
zNxO&+5RVjQcdqZe)+AyneHc{pA~#YSwCbI~d3b5GAH1g^0C(GX&T79sF3#06zYU;O
zSt}x!Hn4i9h*V&*Fs5@rMMasfa{=Z#dc`;Vx06g(S0{`H-M4U``;|wgTnghO1Gvm_
zfL6}nak}4RKd}uy<gz{eVekx%;QbqV`espRn&SX_&v&EQ*IcBIle1OkKxz1?NVR;&
zdjA-Qp2zjz!L4_hZf4aXW0vU1(;u4G!%<mBavT4=`|K;C`j-tj;~1G4oys7&*$?i0
zha*1)r?~-XjutR=4I$Gslfz?3evlF4vN3uX`6vLQ<&5H(NvEK)p>VlJ$4{p~%At@*
zAaKJW#177+T2>s32%vzo*AjofxpaR)0LMDezB@{5DZK)t$I>BF!NpeHsiD--ky_yp
z`Q{==Eu}owsI+)`wSich+1jWt>uvrazz+^6U>)~;YyFs%D&V~(uiFQ}km|xf+N~TG
zC9UzHAIz(OJvbWzgjJ9pks<lF@p1M|wt&;3G`1n1ElJGf`E~jCLX-Q#;mIlrF`sK|
zPk?a5YtBF5elVEQuCo0FutjSYa%|FDl~wEQfq+Gm?f;!ja+JARz-?!S*(4Z;VWG(F
z7^EL^dVox}l~`fir^KLLE3oyx>E|Nz-Bh05nPqqkp98*ZetqWWxBhJ>7boJgDrz&^
zRL|8BxArZk%hE=*)iY`vUFB3%Hb`R9XsTtg@{&BU047fb7~TDWA>8Nk$bTD$UQz6B
zKMmGkTDW<!J6j#1&BaZz-ZEh!2E9&ZFRio6!djclG4^<kg+-(M!z6eMT*wc5({tRP
z)@AD4(i+{i20%FnriQ~t0#1}^+U1tGe<KEo8Hu9uIEN`JvjeJR$Z+I~yJ0mqtGFn!
zX~m=gf{xtCqUqNPB+gFsO|g`vkq@^jlc@DaO~Ag3!EHRu;Nm=@&fyr*Kky(+96UVg
zimZVg8~T;czexD3xdg?R5A=j=YCWWqcsko*TG}#tH0%)v4K6`XIka4X>MHj&#I#&r
z;@C-(!>8G(P&u|xamkp4&*jV#=Kg1eLK3?Up9CG)2mqMptZE!GbUh5ZB}UuAeA%+P
z0>0a8gNWVlfO1CL_4cY7;8jld=4@&#%|ieuv{b$BOT`Ef#Fw-o>*%-{EuN2t*Dlp#
zl9j4A<%o~v%ohz~<}-`?w8#~y+RZ38MVDS2Z^&AIc23mb@H#76u33Y|r;F#S9_mYk
zd0wB<9n!^~)frjGc96b!omZOzpj^EEoEnc1UM)U5IL|fNr{hw<3?FMNfq7s;-g%tu
z0x+I=ji}OyzA)|#&)XAS`Ca4YgalRfgVWnL{2z$<F8-RZsK3KIV$E4BjrAqADsN<G
zCv+zuy-lg&`lewdJuJ_t;_|Q$$Fp9mfA4c7*b=;Xzp*HJ^L`7nl+yR^bSK^qXz8M2
zM45dun3R!R3RL;U@Q}TxBE)U}@Kjr@VUd|a*JnEn3_lSrF2^XghE;McZL}$JF6X_r
zYk5>gIzw<M<BJr_zei=hBs>F<3e6VhViov8(6LQQbU=+JNeX!7U#e?br1N?Ie4)9A
z#B^^BlPE4;tj(AAKhmU>DwIlPGTQo129T8+h01$pgj}@hjbBIijyHzL*wT0#JWqEk
z)?_OVNBZMRO-Cx$wiI&NtfvodE-Qgaf>x*edtsN=TZj^YL|2{F^~DkbDL#f)wmn(r
zvykv$`B_D4eWL}Dui?JiU#IY*((<9{4(kJI4a(Bi!!Aeb!lH#UL`tKuqM_l>yk1u^
z`j-GfQ>XFVScRh?SoFVEm<IwwZ#rqx8ac{)1QuKSW~mj~cs@myNBt4)CnhFFWxj2f
zwHm#_H`uKDS)~51a#TqT#r?;RA42VIAabZGo2{eFNCtf^q#FJ*Egv=4evL%a_+_{-
z25yRL9+EmFlo6WC!$CO>bWh~u0p~Se^VyS^YCMCLQ{4Pws=s?HUav9%MrqR{&#9JX
z<psXd=No=$%qGr&EiqeTRjBF;U*JW_06+pBhb}Y`cb8xFF@oN)a_XsqOUUPN92#xS
z#nx6BEY%*`A5Z_BfF(~do<7vllZDsk>SPN9D9o0-V_6uD3cZ5(27PLFlPgT2#R{B1
zB0fvglKHxwi9%6a$7E%?{IU=20pmlTZ?D4%_@vOc%R!npQJ@l!JZv>rt<hl2s)Z0U
zFj=4#A^~u(QqXLP*dH4~7!<aQ?f~n8bsnEaHR9~(_)|K2&45B?bttyMBw{~;i1+CD
zxU#z1$gooNeZ^Dyp6bG>n3_1et<h?H7ah^73k@|jn9s$x3OGnB?f0gNRU$0Xzvvc_
zYpl^{r8c<i4_k9_H|#D{M@J3%z$#U2WTA6a`QW+nUX(E~z$hUE_(4z{)YsM*situ>
zb%DJfi`UJ$x=CMlhlgKycw7TQnH@6F@6-R&hww!~SbOvtZFYX12VmCOjJ)H?B(b?Q
z<`NR7%gV|&H(!f9i~8VDzdkbiF+{!VyZEm>M#Qs#fOX>>$N3xYn<uE~DkX`nN5qd|
zIZ%lmYBV*RSiTT5@tf`ZVK%QECTo3DNlD4hr_Vl~$Bs~XE!>E^y`gg<ZeyCfDme96
zyo`_P8ivC!udR!xqeuJ?%F4<OMBp%pPPy&j5C53Ba01qP+a;2R4<7=2MGmoCj?8*X
z(DLQ+232%6kITTO+{t%+(?0e><wB9VJ%kz0LBqbE;>k6ZGvyXjfV@W4XL-|dKk`()
z!nAx=+F;r6_#SO{5qiAe1T^fQh8ykL1As?CuJyKsT-teW-pt&5G}Az|z~S%)@lqWW
z%phOchc!vcRcB{UfCnE4S7g>O$#7^DO@VS5z|=rapufY`n|Qr5RZ5w?H&VF~TR0_?
z!n3rzte!i>AEWSRG0Z|LpVe&r=?*l7S2Uk}t)}VvBs&G-HkMPWeMxD(_X`1;>ZVw+
z4k!y%U@#aS>m9MtKD)JMZq{3y^aU=!-v#2{K9xKH<P89k4t4&MxtN%D_Qe9?8qkd!
zG@R{eX=&vj<OBvL?dcf`O<kYtaqIqW1(dg;1iroBpAnke&$q_&E5oY8a&swC`M7?A
z<T0Jg?K^d;YP0@!mDwBw&f#>0dE1a-I->vYx!_G>Qohv7$h9%oC&+)lLQQ(TVu9)q
z;@c{4@9X<VX6#teowFg7{A?I0dHykB-f)?%`$tjXwVtT<zR~Zw<oyuw8~lPn^86Y~
z7Gmap1@Z!-tkWfobUsu|6M0<3VUQ2b^Rzs&GIvXI5@GdHRve;F_pEF5(k^|Vb1B(*
zjbR=kC~|qA7Y>2ABu^HD>SQd>Ze^d>-4i6YJ->eeI`VI=+qTONr$4y&9^=A;gM-NC
z7{E|$ss?L$^n?Pzz4cem(!2=IrKr9?T0<523dZSZc$BFLu0!)~F(uYBjc#W}YR=9z
z(YaE%tnN~_pFT~|r^4o~dv>7d>{C#<D5!Zr^A(!LIacYxZoLph6-@y<Kl-uj(cTpX
zjC+Z^7CHJ1qygv}E!L@-Q6u1a0|CSZEFl5x^^br2BMmNl1R%0}`ZWA4Dyu6TUzU5i
z&;-38qbe1M?uyk}_#LjQDnpp9Q~@&Z9wf0n86S?$fDu4)51okV=eNpZ5dYO7mLInG
zvr@sjks9lXqhGhzARkU;bT9@<6j)#J-e;jv5wbDb83MvsPP#c|0KHm;qL`Rih_UpR
ztx}=3*W~Vu)Ao2~I!e9ceuq*Hn@X`dE*2pyQ>eSq?dWWK#P6R5)Tg(MH4sUs`Evin
zy5`T#EWUB?ln1|)g@B-sm@kFbV8j&V_>9OOo@!!gXlP=wbG?KRZ<1Y<$U<E8?K8AU
z1jFp0xwD{S!7|wApeftgD6W*v$9jOtQzNVXd7*W*{GyEc`0Q*_$<q5yN7;-)&~o?k
zY{Zquq*}gOQ&2xz9JXCc%y$zNaM)KY&)N9Ckz>bzj9nn@#=`z6$s?Z&H88slH_O7<
z*f?hWy5HI}7Xu*f9L*h>#My64FvwGv$yK#0JfI8UO?k34vD5nbHil1BSeWWIuB(SU
z|2-R<vIBQBX!U>{6LRi_SJ=fgQDXAEcmPWaG}BjSrxsFZP^i<12a)jhkp}rTN-8;5
z4d!8?_wcx7L}un&qv7DO+nuc~yI25vjinybI4MQ24u19Dy#K;twI^0~%ri8;uFl_5
zfHGNv#M00*CL#1w@Y^Wc-Yp1R{oQk_%E`qy1|kg=+x0==L76{8m)~w-)))1anV5Y>
zincSY6vrEwrLCc@cKN6$9P>>goioNJDIwu26*|KpEkgPlXj;%46yLw$5XKfKGb(x&
zXv1&K5`urBIV8jND9PSr#-7i;*YMjDToD(?1S5s%f_1G-PF49P$Tm1UUl(3E=qQUg
z+X(EJ_%$kSj7&Zap5^zs8!)ZqjbWnMQxp_@<gzHNbb>wlPv`d&shP+lR$P{TfWNn8
z{@SNq!B$hFr+yz*tA8zzi!EfLy3muepkV4+8=aN)xtR|-cz6L7<N66La^7O5`SBe|
zb#UQTDxU*dZ0_$K$1UdWiEF2avRhJ^U9p-{)O8<6m^uq$HCM4DDq5Crnn-*Yg>kq1
zUYEt8MgQ9r?UBMf0#h;tyy0?pclV>OF(?C4gKce2I06(dF?WoPUD;55ny!wnKi4V1
z|1f*7$a4r|kn0t3zqv-9ktlA`eOFi4_SOz_qV_>>)`$KG+x~Fm9LnZ_V?A`<>vZbg
zh97ECpL6_?-$#z#xH&*97jBmQpWhk(1O9rz5^FDDYVKfX>y{an`N2_9s{U)|7M_ra
z=@o4~a~x}A_K!!TX;{pr3w6nt$}j80>t)l`!jv}_-wbxKgtQq?Mh!Kt+Eo@%LUFGA
zA5&;Y9H>P+P@e#-?X95yK6tU)qWb^z0v`A-evqy6RZ^E3dhBn*l50V$Q0Iwgc3reD
zzcP@-*Zomc@;iy~XYS_}H#RvMSC(oEY99v`9rWYm8tPkz3bZ7m`Dwh!$x#%n#5NXd
zQ+XWO)!7&VUsRGH{Lkd5L*PwPjPQ@6$jI0=|5vf@M@bS@uiG^11pS4$o$dSkCri|7
zjHSs3(W_JV1UY<TDdWGTuM0M)eK+#YSv%&oNnD?^xP)H2jOCLmpKRY(Zzi@&H+-n8
zJnfk*faA@^uY6gb);X7t;g0D(_~$G==&?j|C6T4-+kaPJ^a#?4p~mc#6@Z4z>iQ&}
z+o4~Paxg<-WqbGLa4fg%V0GqcQE?GLrLouP`m<=FQ3|j1d`e<ZdT}}G8tG=iN_)h2
zp+u=V?r~ysv2;D!NbbDBjpswT=kt-*&~X<-b942Ik3p@i8B;b39TXi7{%lOm&CTXD
z7+aOECrQ;u{LYJ2eHaj~?W=ri|6Ud*{uzQ{&vt9Xjb&*FnmVJG@ppR@M%=2;&3By!
z-Q4GU4(;ti+Nv!wsb(t_n5CLQBXy24>1(1gZv~Y&l4i4^aYkAzGYLEzfjgA}NTKDs
zGvA1=ie5qvtlPs?@YxHudKQMPM{W?YXcR+3gDc*%-ya;dkK>NP7ox+vtVZ+f=Gd%~
zA=Xq?_2yUel^zjb|D5;bm2e$-RxCf4momf9B2AkKFT_&Gs4$Z@GyqLk-+UWL`HpiV
zNOth?@hRTD>*(tGTPEG>i380~ga8(=haVE_B~><*Kt1Obb*@Vy+PkPHCL6d+XNl5~
zM0QPx6uU94w-pCPlo$Zw+M-sNh{)Ia@Ne89_;cBpK^CjMOf)@j?$udnbn5gIgV)fB
zdF#z!0d4-MxwG8x=?ytjk@ena4I}1iuAbQ(=q@pawkSE-NPUIrWm3Pj3mO_)f|SA1
zsM5X*5v=z1cU!dv&7?K8YTo-SRvH=$^T?4;egXH%5YxJZq&oYJnJO#jVWrBD)}d;J
zeQI$kA=YG(mP==nbSSy=KDT`1N2*L0$yoYiZdq;eF=lqiMXt6Gxj`5KbGZhzSt@6w
zSwSVDK^6r^JWbo@2q2@}&oL_L33*XbQ8Qh}oEbw-ay1S96R{(Esph{%Dyh97;mg2K
ziIz;CbB5<|jV4Our7XnCqNTF=xu0|ToNNlYM8u-va2fS?Vbxg7*k4~g10BZWW{>l>
za)WHim?E9rp<>B+9bQ+liB-mwZ2!)iE#`gACg=Nrxu1*%VPRp3RU_-Q<(BF;NC`bv
zns<#FqF?V(Xd!0VLY~bOWY+<1O))Z6ZPKfQy!~Bjk_e`sMUvUA;vys8J9ZoZ&i-&e
zpkWSbKvFoIDkQR3qt?UlSUB8vF9z}VLC-A;N4Zq_wC9(QEHQ7h_nLaVOltl+0MUfZ
z^GHcaIa|(^yPT&f)@ZwqZu6&ty`)zt<gr?7{UH9LVFvKvbH$ka;j88VY69@M<g3<E
zM<>$iG-epDF%9BR)H&Ym_Bm;ItMGX*PcJRNxW46cx-3;FP=vEx<*G*`RX@7%3B%?0
z7e^k{sHW3Wj>i$;DzB_0=5yycPCws?Uz`paJ2^RF(XyNFDR(}5J^(-XpUa<p6QQT<
z6m*X5->4cEjAdt#ZnN0be+^t_NLqD*i0<#rnDS&7n|a+W0Z6!Kno&7UnS0XaJv(!j
zJ+nfkd}qjpt^M|J<wo=d6lWmi18ZOyKDXyhZPzKjquEs2_9yK!=dDpsx8u+x4!fgW
zHEDd-r1$oi(MW=oNe2^#!bHx$P7+N{dpzJIjSH%rhR>SsS2u1w5NpD#X*Wos#L~_a
z&wfHXM7_G3=W2!8-pQb)W@`#hh=_xwB>Qf#kf0#BUGJ-+#5ou8JDx~bZ@zI@60-?(
zq1?g*EL_oGvH9TdcD%0EV%*daD4OhS6<@5%rZ<0KZ`6<U_~Lwvf$&GI>EVxju)@IU
zopHp4S>(|@?!%hXZ^~>H4KGJ4#mR6krJtC+oiNMTfF}2UQ*N-n<%U>mw>Z~%x8L`o
zPFc=Rmf4NLki%1XT%0z)G0qbsE9NU3Y!A4_P^Y!HJHXcWN;-oTGP7eRei@j|Id4k&
zgOn9ac8NKimk%rBA#l#|T5$&vwj}$Vq1&UlEf_t_V?=P~2rDltWXcAr(fFlJB6Bb#
zIGD>}+f~!j^0T178A1*;jo+wi-U6~erUAGbsV%N+bu>hUlQv6iIZkuW4Jf46lr?MI
z+aq5FwfGmos*0uRFm*@^nrK+*Mc2lR2Xp=J`~o36(?-9($5!P!VAHZPNgRe?dKnlx
z^zA!MDbx=}MTKlYwQF3P^%1!OZjqmHJ1t!qLAWu<p&1CBu@LjI&*8`Z7LYF4G;34C
zpS382P_63-E@KCI9(Tv2F6k7J<X;|-V-DDcu!wk_><$h_G~Y{Hi*d^&yId`w(s7^t
z@i^o~zT~irQ338_Esb(#3_@ggfaaK8Sol0iCs$FmOg>S(Xu24sFlFstyl_z3B!t}w
zk>~Z&WH6zx8%%2fbBj2+x|>yLxhd{5qIGWtV7|P+qT@F6W4D@1rLf`KS9IPRNv_YR
zHf7jkf6Y3VQ)O`^4f8tSuzE@;beX?;+Pb4HCT80|x%c{WWtJ<+YRw+sW+d58b9*kA
z(_U}GN-&qpPMzzeIuPt%MHz$Jbdt#HxJ=;XUFWh@DRnJ;Ewk~%B)y~bIk0G|9b=Eh
zI{e;D+-9|)sfm-BdJSjPsqzf-Oz>3hwiK1oe$UAIUwP_pn@lFW5SRV0<K{n);$|}<
zLSol|5{{?JfZ}}EbUkcuXR^iXMD<RU$K$z*%>4+r=kL~hhYbQQ@0*<5jo%|#yOvfv
z_s8hx^tXXmyTT!qUTM{~nHDcM2DxiIcs*UumOD}789?Xx3v~>wa--)KlNS<t-Im++
zO}1pT@zCZ>c1V}OdmoppfkO=+uGO^j<Y#jv?>=K2h4d_<9J%9do^lND=;=!<>w0Ys
z5@~5Sd6Uiaf{i*%PF+>k==(Oa6_@)>4MvjjnMrUjujDGzdi@EBbd^$>G_KR#%VVbO
z{*KO0x0Zt(#lyPuV~EY-k#ov6Q4rlmexlmw2EY(xs|PY|@(`c(*hq@iReFteD=XFH
z)a!#y7^LdA0bwv$3C!N5P_w!|F_BZn)W~R}S~MM3fgBBYxKMG%p0MF0Lr_R4YxaH|
z6&-zNI%jJQbz_4;T~E(UyhVd!t>?p*A#}(JY^@c{)C*6kLps}Pc3hf&=oc7Y_-U(m
zB@mMi%g$NPFuegOEXlPNW^3OkqjolAr7;V+(y{&YMp(tXCX$JY1|R=khu;jrd?Nq+
zV#Kdz5PuZe^Vg_Sb2FR^V&%Pm(u*jmEVnLZqf{stqMYei3p@>AUOmQy=sZL(oX+n>
zYZD1^>FmPt$hDW0q!Br5SE`J&a=vMB`?R<pV^(7dQ!ZB*6l~kV5REU<l;sx7HwE)E
zt1^AWz86&Wgu@LMh2*Elpv_VG!GO9*uJCzwpo6j0)^NReTv2$_HQ7Cu;4eX8;{mWx
zZ9f!H4L~d^(%fG1_5%8MU=m#6eH6@l#756Rz?WAFoO;?`$oAK&brRL*@P)JOQ6O((
zXcq~`qF&{7R1^!kSwis8V7c1>%~sIi{9&~}QLSZY_;C(9ES-wL4I~KLb|dqNVR!jw
z`-3~)2!YhrWmjVq@NA9l$-BE2VBF{uyLTq-T<fkD+M-5G1#ZYDhimdC0(P^cz`5$2
zXXaYXu4!N7_7z9hyl#4a4ehCa4fraR3hwTlqDvTe0NtE(0+*iDB2g;ksr6Vh25G3h
z9+!?65}KUEoSW>|`POC_DM_1$%Z{z-z4ZcNd{(;K-Bi_DN}|H%cYGGhn6NObQtLev
z+2oJ>m{@jpv3v1Y{*4Ocp^2<k@(^t=RIIom<k3t?m#g<RW|OveyJo2kr}CjKV_SGD
zyz7o%w%H|aU_0sV&%ka&3I2uu!X*zNzft8cH+*!nvkVku_gDrq$a*t#EkE0vxV`2z
zKX{>zjfY!oxG<WHp8gJ*z{z}kclHAwBW6!L*q1r5w@z2WL&9{l;D<~WjLqwO^v>yW
zZAXRe?dQI&mai)quWoJ;YE6$C79$$#?8ofwRB$9E`wvM)Z3{It)W&>DHhN=s_O8!E
zdu|o^y&fkw!Y%vWZoXPes!({Nvu?(Gx{!VvJA|aGToP&dvoh@?301Qby^D|_!sI7V
zg2rC(A6#uY1-jgVMv;aFx3X)zC;vqsy#8!{j@zgCMswnKWTdmzEH;%Uhfebi;OjTu
zw}!~IWd1l8(|TJf#ddJH?2igG9|oh{ZHTBJCx4pO3jAtwfzOAB1!Z~`8}IoHrE>N*
zIoU3ju$Ow7>a{1udLg6DG+5x%1%7>O1FH=;n#l@0SFl$sQhf^FfNoyRRCzlYetb+C
zR(UU)KMyI@*(~?yZo#Z{hn+S$E?K75Kl9XXrqn4vnqo-zT5Pd`m8^sns_@u|+Yr~g
zUw%JU;ib$~sJGMU>{9{_Zpszw>Dv4a=?ESEY`6V6_EK3wenHgBBb=)88d#$@D_Kj`
zAglSUP*^&@M{vm~kK3_P@ArwF{ZxRTlG|1(aGU|oRe%=3$4|DUQ_0s>s0L4}|9peP
zwf{M@dadm~8qO+}dbKAQ;Gj1+!ddOMi*{5PidF01P`>|kw~tWTaO>`zi8!0Zkj_6+
zV;5*K7x#=ohbMOpSD~w$jPRj^A~HHYtIeb$7gey<uvzdEbo7WPxv-a9kB<5p!)UNe
zR4a7vme(}cN{oIo3*R)l-i4kt!eOiq`y?fZ6M_puD%tAKsOy~9USZuexZN)Kd2FEs
zJ&AZTuk==QN;bD<@U>b8pa&ygQfdt)PnC|R@O5e{Gw668-LTfXQ<W+<-n^cXeiL7$
z314zfeWg+I?(Jt*M#k(cN83efHysGi{CtTH_{mKJ+&-t+w>`fatO^=LP*3pN*H0~g
zYfGr#@jaC#Z<z}YsV~#Ki_PNj(;pvQXFC`hO+*hr+M2d(epEn`CPv95%#BwnoZ4kK
zHNDr?+UkB_-Og2QCX$YKRhGi()aX7q%g4}|e>0zm;myCPW4%ZWJEsO14sa=F9#0Ce
z=_iHL-BPw0_ORx-50q+h@!R%1x%%~nmNr!0UOnVLRk?4=w}*(2sn6#zP@=|2>m*0W
z+40<Gl2{>dSnPBEl8j%C(9(tGL-&hMcT75IJo8@?6LD|Z9UP^q8X-M-lnx5aQG@CU
zl7U~40>9cbnCW%aJB>ezo^8&fS_!*Q3z{Y$OW_0CW9Z1Sha(=oy1&+zWuwPXzehNC
zivOn<Fmr4|Kh$TJ?C{d09)Q_AfAs|TP&;?fVbZ8Oo}XzgFf_vFn><!G^@6!y+u`@A
z^n9aRjlIl){aNw}S{Z+YW}8VO$2L`#u%Wg#`{CiJD$Pbisww@>wTCAgP~tj&Sz>-$
z44fCi5o;UgW1@@mZpU&D2#JZiJAG=LodLs4F|hF9?sl&J8Qw^ne`W4Et!9n)AWCp1
zLkhPv+2s+I=}gY;eNy#r^X(mc!`^L5ohTu-+>f#hJhUgHmw#;DD=6)P82sNaQ7|tq
zeyMmb$>pUo_&ik4$g8)k3qE`P933v1%SWk|qq$YFX0s^8xWZ-w4-P|piuOcI^9dTI
zVuxCFTbM=s)>6Wt8OY_vOaMNzs^x~x!XjBOs|$e5sL12)7`hbVUdy*ae4sMfTBP$o
zi2-6ksghAp^iAC(ot0pJV$VfDQ|TSFF0HlbBJV1=?#DVJ;xZpQzvV7@$H%AL97io-
z;BiVQ_Aom?F)@A71;J|#{+KmaHXo;+_IQIK!}Zb*(65M&wdNo_lFIa29QM0k!?o%a
zuEfPDT@rg4;CXp@IxRO~w0(RwNHbxz0;^Vc0*zG?eRZ&*<N9<gLj2jSWhMNeR{~|M
z=s4|3pQq9k)~p=@Lc4JP<m1N|4)_A;eE9ftq`CCAtY+;)DH1p1KY1cX)Ahm$X4wrd
z5>`wY_&ttXcXFICg^sOjtV<au3}oak+OM^Nn>F)U&-!Y|ZP|a@Nj}fEeAJJPh97<J
zUfYh`OktGPZam4nx1?WEKLKxrP|HV?-#de?=9)BCw`J4#(Vst6Yj%Fdp8Oef@Qm~%
zNLdges*dV?Ee%`IeEoM+QMTwo?>ctsv}Ty*r#GgOYdq_HIH9dWhej<;3uS6frw!WY
zakQF>;}fTK5Ox(nkEpPN)$egT+dixk+~|d|Ta4}=Mt8$JPFHL4RR9*f;KKm`P^=Fm
z(?|z9C4T@;3Rap?{!=_YpR=zdwCa4$7XrB@yg;>lW5hs6P+{*>Vc1KZjwq;2N#k;2
z+mJb}4m$OongnFUzkYof?Nh7pj4$3iJ`$F43<dcH^@O>lYULLRfbDSBg%2t9;}p)+
ztc9!-^ET>i!r+U|^4CZ4RZ>v|bo0$?hqAW;&dz5JCNi0pC7zvq*%I+Eh)2V6ePdH$
zxas5*LdY_iq)rPpVU9$g#c}<_+!=vl(XdIYt`KQfxK)yWVBje}M@;h0*|p1TNQaQb
zQW4KqGQWrV-6KR3s18q_4SMENrLW-v_K3}0Sg3o16^{`S4+7EzUC{}vd&w>&yz&c_
za_MiMFnWFh)o*iL;U}{mz?H)SaWz|eRVDuWv571oDcJpKWpF`GuMbltDA#_rCy-f8
zmhfJEs(?Pbh}G$>s&?Gpj5)N%hnK((8{JNZz0n~%p{9<bDy6DCmg5&2P@;bHq#le+
z<L<c{Qx=1vHjtB+YE_5wdBp@lOmAdWRbNLZWwf?(GLwUsNsBY=N>ZiRX0q(L)mzyq
zuBI-<2u{*lgD+#Jcq|pw)eWA9jUo=n|2b^}>+u{*2KH|fBt*K6HG^}by;Z?vcYS(m
ztTI=MDuKTRbVN2Yh4%J#=|d7+<BxxjkhY}rZ%C(G8(3MHnsOM;UxakaQo<-Cc1{wd
zai<H^v?#V5g3XC1;is^&Ywz?Zm+R+;=k+$~CB9!LAPgFDrQ&DHYmyW)Y4c^qTFJ`A
z4(mN?IgW{R_-vgW9Ynm|iupOq{c!$fZZ0l$4GnP$d@EQE7;PO9^ZZfjHM-haFZi+S
zj_5@4IZ)D0nzmNBgB50O$5>^R5aQ96sgga7tq-`9bm;8C_q8q>kR4M)!=lpC#d3=X
zFk!ay=d@ohP}AUws<$X#J~{AC)Bo}$IDH>>xI0;i?j<iZIKbt&?Mz`NM%wu$rv9q&
zWPQ}CKzS$qN{z76PP%u)^96jcP$kCE;as*qnq3D#;)q?vDfSNQcea+*$J^SLf!i0o
zaX*$y<%6sa95nZWcgz<X3N|+>gC9}pnHXNG_p|M3Hy<b$>6)6JoSo7HUk(fmSd166
zdtvX-*Uw}+uv>dllBM}YKbk>rhEEl1(?@MSd(9-6Pl|F5mb^_6Jmg&HTJx`pa?Ihe
zff=&=@&GF#PKz{JqM~<^ysCJUYxXkzBZprAF<~~8gYYqmf89-$-bzkEi*Es^S8x-H
z>G;<)e(wV%m>`!U=CgEuhwsZCUWu_gY#T$-=eg;NP27+*7wMn1i53M~-Sou#o==`W
zU5BwPXdO4MjnoL4SWj&ljEb`fxt|emV%e<ZZ;$#r+_iWs7i))jByI;iL6P7Y5#%Pq
z!MQ%|-!O~rVl!JPFh5NK>-MsyKqf8Xj2NEEQLK3xEQl|JgTN}Rva*-FUzNL#jU5cn
z8T<1_H=DWbQi}i4X)%7cag*4Q$cx8rR^qxM{h!9)g#*>il0!jOvRbS^T4YW0G$u`W
zGMCfk&80~M0V5OBk=toOck9DNpPLsm@*fQir<%Q#>D6yqVM4Mx_f4hnJaG*FfYa>h
z2T}fQg*53eIyo~GCNY%~DileqG$PXcn$ku|FP|}xH_t<G&eKqec@55rqTZ6apKo&7
zOs3S<*3wLsgr~FcalHHba{u-qinQ8%ywPDtM$>ZF3Oct>v>znL(O;z1;=KGd2&}Q8
z)5+&4v=d3mXEu_SGn9%r#32799~Uq(yuUv>^VAv$P!8Mt15q4CzR9)dtt9WW1As+0
zsGU7CrLSe?73(mK3Hj{8Yqr-U;irZ14p>Bd2j-I%g9jrRo1*@R4mk>WCPqf7`Yy(@
zsSw-C^0D}nXD859KDYI8yONvbOJ)Ql^mI<AN9RXtAsZU(C9pChinSWd9(t{xb||vR
zyw2m1xRp4e1l&P<#F98epg|e+jP)7XfzRm?8ANIiU~k0CwDvqyu&}Y&%;vu_V&sfQ
zWp3`>Hb9tjLRE@vFIv;UD{$OmSZuNN_aF^%$pH|j)E%vI+HVU=ISxd?7jvY<h+ayi
zGxcFZ_V_L~KjWm5yIm$mcbg3AXy#~MF8N&@5&h>(KRtX376hggyr(ID-55Bu;eUR`
zO2cLe!@|W9Z{WAs{wTslz<00<3SSv*RSugR&ug1{9h;GYJ<uQneM(-NW5Y#rne@i^
z$82wDSsVurewjB%QZ?&9+>krZEmY{6>`wdE_dE~~5P*SceK4s{sn&aKw1O3%iUb`U
zHJ!t`cDUwne>U^h!+yO_x&a#(S6o9ZHwcABsbn%=1KqmM@~va7Goe@t_Wx1!)lpHc
z``>z0JSu_`0#Yi{CEcJP-5^~`H_{9>1|i)bIdq3~gVH_p(A_n}P(#f7=(*?q?kj8g
z$1Iq=_fz{DpP(AUFNGpQNgRokBbzL)EV%?gl%+A1*FCb1+8MST=%aTeViAym2@5p>
zF*}ePGE`9S@e~6M!d#8{&!7n>P;Iy97ucKiXT6hbvhoa}T3;vE9oO<@(3fYIgDA}b
zee(XF1;2nx%T`t??Hxhv#<1=VaM3qEe=alJ#3Tg~oS(ER`a9Z_O~rdIXZH{?bRqe3
zYviU}wmZx}tK5=(aP%|v8I63OT-GJTl*>ew`4LleKO6bu$1Fk(p8f_O%GNSf+OZQ%
z+D=j&Q03z1FT|_lxZek(v@&$EwDSuGMraC#D?%#e0kGH8GpT2bp|#ee1a#EtRQFF$
zHJDbef6aO@Scs9>Q}t*`^v52K#$3aH{aOTgir}YZ3BC{Ne`^jW(5bW?_vW1T8JMj%
zQGw!MHg<1Y+gtBY%kkprGUxioVrVU$X&;~41?Q`uBAWoCi4Ce`XJtl2K-^`?rj(5L
z(U#8Ssrh_8gAD2g)eE;A)o`hoAoRR>eJ#_SmzI`R>+8Ej{y<fHotnWy#{F3GQ?)$<
z=PS;4bz-R!?{LX?larH$RvQ96%#4l6h=>X*nk#I9c$tJMl<vgvg9S<c*+|^qD1rNW
z6*q4N%!^WW$^iwAN~?<}{7y4YY+KbKu83TDpwQJmHr6Nf;_X#HDhnzy+Z(TWIoott
zhx{8~?a2v_j6jxDHR5}Mk?@DZV4zpmo3pFX`r$u4Nb;TtMp*VaF{_Nf$_zT7Mc^Kz
z12D<a(=!>gsdpylGNyCAE85<s)g<>IaMeQWKr#W)=eP+HC>Ywcv*7e2DwAo5_iGPn
zY&JP0K|P=+M+w+@>Jn$VzZ%=~NHt`L07y)f7IqrjoMEJuyw07?XS#Fe#xaLfY7Ix-
zhboS({1L;y75iP)EFFx|udmVPs+CE25+MKu;zG)EUWTUnIqg=6opEPOOwyyXza(AC
z-m@{mxjjRlQyxY#*?6%6Y~57zHQ140dpxbot8jm6sCrEMLSLfk;R{#YOXU50fh;<q
zVzw-!y_M)jlf)CXe8kR_@cCWke<}LVhqtm2Ww#?&yQv}R((12%M42n~fF>nZ6vTqi
zsw{87yf5EIe*H*Tb-@FfrHHJ>n<OCHnl^4<-<%?}WIu`K!IeZMv7GGA9qdjMWwp54
z=>rALZ#U0cXKTEv85klzW4C$q0Yzv4c*R2PC2ZMg|Fe1aY1tP#W*HVK=a^hRRw&6I
zY@0DKA=4*f#9y`-P92LA0ehA>wTH*<5tfNku*DgYlzW;YUg+1jSPQs0PP9T@HyS!;
zK%(LPZ*3=TI7;}S)AdW5zMOSoX~g3Uih?&5Kn(;((R75-i<_N2FeC_H+ra5LRh8?|
z%~${J#oxFw7^%M`GG;n>@7_H>H2QG(+x|z;*P>B_x?}a1O<6NBve0w0a|Q<nuORiT
z6@w?{Fw>jmX=xw64A1UY^cMdoI{-otLX9ipiw(TOtB+=XroIo9SEan&f7$&Zg<EGJ
zQ2sqLGZUzCF29p}9YnEKDBV+{m$>9_lq0LuZyxrS`LADV{|pTHKO6_8(x4J>ZhXhu
zNiH}bKEB}<KLf*0k=LWo%q8B>SkiPlc8U)%I{3>iC^4j?CR=7MHC}&`kyqcLxd$);
zT}CW}*%Ob4{@N^`nB$U#wcAF2YRexQ8p<1Mz42c^fg8y~vXxkO9F&KY{jjitU!Fht
z;w=J|kd)9$NaQfQ)FP>n*yKn&jL@Xv_PR!231pqqTfOj7XC9G9Tbr6b$#SZQ+5TUe
zF7++8Zc|-rU1Q_Sya4;R#?hC%aD!&!{>XOv0wYaLO*w1uFmi|Y@o2`lIh?VI-hSoP
zrW2KK>(>!o<RDK2SlN*@S?{pJt3Efxn}Y%?B2KH?<jcqc6|@}UW71CovTrH>9qHk(
zpE)6_{XuFntu3wOJ3EE}qCV@VM`j<Tz7>TqQ|G(*`O!aJusDK8SE01t7y0=3fJE}=
zr%!<HK@d>%mgY?e<-fIn1-Iv33XO774r-t&a6k3x^78i9|2&oy5!Nv6V-hD%U0o^j
z+?Xtr*Gj2|S-=(^1j4c_Tw1;)_&~8_lCvq!zNRQVGbOv+lg%`6>?J);1TkJFJTLB^
zwDK6h=HNl+7UBOR&M_SJW=Vu_#56##NjBmQ&_&wX+?<@8@bmNS$nHC&YmdrZ>$kQf
zsd#B(^6S)_(q89R;!n$X;iJ*$fuUdDcE|zdV{kBhcs)Ek{M)y`o815Rt0UeVzDRVR
zdrCn8Q~=+bSdfsAi$gdSA5OmQpvSY8&<$pMM|(u;GnE6+rz#W=^BUi`^?vbSgi7^^
zj<SEB@s}@OfK%ds7o(IN7QH^T+2A3z7GG@k3?B{m_{_}Az<6wLs?l<0<lQ%nCWFB=
zY!&&~6!(fOUgopk(1dt6v!7^ro|cLFH3zTTMlDIc4JyvpLk3F#)_OjGpvS20S(}?n
zA#z|a*kH(AHuQhN0?!&r=!iakE_d)wdZ8XOaF?8njKcQ4p`o=gpz>NXMRYlCuOt+r
zpQ%NTx;U^li#@GV>x!Oy$8eYh@9qpNk#9d-86#PZHNlLqd#x4ZLC}5K<K_%tBjBf&
zSzLNi1IeC_b`=yEF)<yn5Xb+F8vB=<it(2eU%KOA)^F0u#Qgo+eHm%Pb>$^q21vB?
zXZ^ZtP6(D-V^xG~ybRv>Fo1WjU=;wN*^uRil7+F2M_5B!2$|zgxk6R{vrgFqQ%+RH
z_JdbU2r0G_M{_k@HQ97%Y>5ce&yiX1z;^B9fp0X|pT6ml{&%>C15!}ZL?oQ>w#NYl
znUO1|o>=|)o2ny&d=R}R=MAMyKCdSUi?=q*zp)=!{R^JI@ftlOdzqu;oiD>HA|LVQ
zsH8yI=Q|7JIb+40DO9$*+*#-+V6GLLB?TMN#sBZMoZhlRl&gU!ojrE)^NI&-=ZWt$
zVbdl}8(Oi#9O?JScp|c%zHKa2_brU=RP~hn7sLph>FibJe8Lak2Go$=xQ|$oiMk~Q
z;mZ0Esg}#^K^<PZweRP1+3H@Ib@EMG#pz`k$33{FQU9=6%Gh~9pwNqSf6fOx*&AZ4
z74b`|7Q2@J=Sa0jOh=SU(~D9ukHuQtQM<-c#OtS9iMao;{8Fp9n0*5!4fB<b7QhoZ
z#~NNIF!`V9yH>&yG|`@qQc`xnV_sxb>$iYRVI0duV+l!Pk7%;+O1at<bNeg-p^L-r
z+g|eH=7ay4rt9}u(Ff8m`AH0u?gtp|(S9KCd;Q=vC6ts#xJ1sk<t6FTSC1z4On6Vh
z|53GXoRv#UzBbduN)A>dyVbwtlx}7}8^k!0DGheL#@qkX1K5Y9cV2xpff{gkT1L)o
zWs4}AByi@5qnX~I3+wp*?=|$P`Lq7v67u1Ox5i%smM~!}Wz`pT*&p*J0@Fd%;dx!~
zD^1pa2Ao^}`Nv+plK7|$Na0W?$or*DcXQC4%ALl))|?aHox(?izee{3=5@ye%4KOi
zlz4j-Q~Fn88~cm#CmTSkb(}qBoaRCj{qR3u6&_lce6)g`dS*3-w+1O=3xD1s;(1zs
zzA{_<;1{dNt9ZZ9OAkUg%%ztsd#Ej9i%BX5?rP=mdBuLj7>ReLOTjAh0#W~N;b&rm
zu!%~g<~3|%rXKXsP=@LiB2hswxjCqt3_DuC{EHSXm0Lzj8*#$wI3n0GamTJ7t8!Z?
zrZ$YwRsE~d_s3eQUm-9p=5;S{98J>;6A#%076)wn_v`g)gU$U>=cnn*cCn1x$!}!i
z<z6d(4e-_Cw(l^WQ=`+9Z(T6q#$Wk-m@JcniWgv~A2$1(u+$SSoKs8l-{Jn`q~>X;
z5x2NYd^YRAnJ>5grTexq&vOFUo8E#lY$$Qj)2i&b4W!f^NR<I%v)soc7w2Hj?zJ(=
z@H!{r|7JJ57!{1ocEWd*>iA(d$^U#7g@=jv!`4pwhQ#r}d)TrO+?T2~>mN1TA4ezj
z@=Ie7lQ^Kf<xeFq^u1#EcP<xj-#NG|VzEbE>XE)`PHZ6?EOe=U^sc<_{nOrT&Ez38
zg<l>XEH?0MeMj@Mwn@*_IDyEo3M?D;I=iUH^ECf12xAwmg4p-ZIJ&XTUardj-EK0-
z)GFh)ZSnMj?682H`mXX<6=lsK3oCRc{P%%e)WeRAeCFE3trZ~_q9uV!xgV1IMC7eO
z?;`xa8$B}wl46Z*OcTEt40fjRN30^b7iDrr{FE1c&%D+Q4BjPT|93=hd}@Y$e!cMB
zeIt?BQiix`3?lW`w^w^$F7@6}T5+sRb}s>ZO1?AgxB<RoHus2fC`dn<=zrv?`Z`~`
z-8Zto6~>j@#bd6`cGlZ<k1t#}C^z80OY6q4B6ZYGNZ;Wq=MT>Js1;v(xt8^sK>_9Y
z0f`2q1vqWum*rE_!NA?FEGuHbWPdCFZ<q^WDuuGG#D`TZ$%voY$ISOL@&rqKoyGBU
zDu3Z#Em0AlMNwZ>Jrmv@txB)SXEL38qysQ*-@JX)&Dg&t)jEK#tq;YW`%eIv-*gz5
z>dFIGl<(MS@&<kq5_)x~3G7D2Rzpj2G_gDe*Psdg>S@^z&>SevD7CLkGVJn^lat?c
z>^Bw$HLkMqat#AogX=GAYft)+u@UonhJ$QF*Ga>tf?Vl2Ii1G5Y0LB?zy?r*S*s5F
z&jBC)+-KNK{N3k#wx!$6XyUU=uTl6jE@x2@&m4a1zZ72*Y+MPi%xXwTzPS3UxmM^t
z<VdTuB)r-nmq@~K^luw(8^I$pl`|yeb)SY4UZK{`seqxm`gW3DFE>Y_DgVoMQ6aX}
zN{}G~Jdj=Mc(RVmPQBCeNkYgpP?rDTly7_GSH8~rf!&AOE99v_sahgVv-kNOtTT@I
z2~b?dp%B&{xy=1m-aGi%$T>2*5;@A1sOqxjdKRLGvA<7bKUuY&Y6;neZpF|Y3ve{q
zM`d$ajY;GU&OMi1w-us}Y-<+LE<c!OU+v*&){*db4Nz_{&V#z{npKF2+}N4$nCR;Z
z?*1s+sp?%<kJ=c?)}!TOzC0-)`n~M0pN8}wGG@VV!Tjyc2^tssD*?C}a_6k4H&2^7
zY7`^Dx#aP)JK?Ls7>R@9nFH6DU}td}|3QRuzFl&jNQ>7`(X1BAYM79LBk$$5qC`cm
z!5bnSMgDgUy;)UJVH&&8OzSWMT+f>788oZl^!t|?wKe-vQ#%672zDq<%nk8GV(s!w
z?N(y#3;);K7JW)%RrF<Y8Opz2^nw{H%_zK6rTR6kBR!0+;MZrviu}CK^Z0ql>GBNQ
zkig1<SgVnS51%k4S&Rq{jC58{^mL`swjUQ`v)9O^V(8`v(32=i7?qWh8Z<AuINcjB
zQeN!e)(9R)<35e$Fk|^=gt@K}g(g6t`@3An5ZiQWTE@yv&i%kZ0E7%Qyw-2UI!WQS
zC``B?f3$T6jMpa-WpRAk_BdS8C5qdfv$z5E>&OD_+6XOS8m=bVnTgxuY3~+Gcqk-*
z{1gA-YChs>a=OKni`acf_~QXC+-!9nW#wjRKc<$kM3qh-5E^urh*5o^_7~OJS%%Kz
z&&8%B6*b%=5i}s)Vg_%x`@?4XK!O=SB=X*;y_k8n0Z>)HAwU2^MN~4s#^AI!?l`^o
zl@@N0$nU5>UKsjLrQ}Tpxd*NzGU0ndilA%E)<@RFYRh`>Bb+h)x|5AYFL>IKhTT9)
z^Gn(BLfyr)?veV_EglFu2_Pbq^a2^id3dUc`CMK&ySHEM4XbUJ^P4XBJPZlWy_|@b
zHDj4eCG79(i{WQjT5{h28j539S=zPg$?g@afV@M_;eDU^qmgyNSZ<}m?3$y7;1gB@
zoqQ+Y76x1z@<e@Q)K16*->k|A4L>eWE&!bG0&}E#(Y#8rDD}AxkcY^;${If*7oG&@
zue9+EUeuOAcvZNIOLvbm(0M@}?wGhv?SSr<qt(!sta{;ctZXbxxy3XEzq!CEd7es<
zUjmhw7rBtLa?^5tPNWqCAi01}Z;qo3DYtp<Au`?RgHmm2Dfl*>aoefvY<lrgCh{n7
z*Z>&O$;PH^g-wO;p({i~WA@Hm@oF0xPg?miCt?euCoDShIfwh*M|vKp2(ye`eiy!v
zsJ=>_Q;YK6=z?c<naWY7iPgxg4qCaCp*kCXNRUR?{8HnZ@03Q{G|?^-d4=#TtdU<c
z9vd&cuvU+O!-6#Iv85w`jy6DhejLo}0kR}=s9uCz&Wcn=f<Hs{=2SjM+{{K%HnVm?
zak_iVuq5c}<vH;s^LqHQ;GK^OiBhTw2?^!X2wmi`R9TL^seFLGF`Sm+tGZqS3hGIW
zoLpRqTy|{9Z~3|I0HBA)6aD}P9oJpEi5mLqnIf}!(6e*YkxG11@UBEFF?KUB9rq$4
zifH2o4h475&!3+PO3+!faa*VNTvIo;gSbC&hj9<nd*B>P`bncx(yWm4dUqMr@@QCd
z?C{VyY5fyFoQaYF>SEZeCw0|%<NdI7ty8PxF}kP$I`eE^p1*mSMxH~B_*gep>BCkW
zOU!wYMvs|5n#4wi`{ESylsA9-%!kF3f{%~Q#?VeR=83C0d9QzoE-B)dl;Y={?D2fl
zQNMbZuiyCRHEj_)@-tE=Tmt^wz5;l1pQF>ewLULBGl!UPd4|os>NVBye0P_dW$v^l
zaY;u}gMwE-Yko0O&%jzZO;aIlzvwX|&XaA=^r=tC>XiJdO)jtAay5VRMbX}SwpS)!
zGqg^+53kI&a77k|4<umc*J1jMMJ*k)XS2uLy{5?FYRLHgVxYXGdirxGFbJ#Dm+|hP
zL5T?OwE5`Vr43HZ#uk^2qo_5R1_e367N1Lh>HS7rg3XT^NYAlfh>EX>I(YW%x%=+T
zBmY5sF75A7IW|UFQZ<UgK`}XI5*jgzvXnE|z|&vf+;VqJ4HK6v9WIL15*cp0MwKuq
z3aLAx`^sL7tY_*Ox)rn8ZwD3SeRi_owCQ7J!k_T@_HpwPUFC8@K&sdD(R-)s7phG5
zRDV~%S)c}b+LyP?%*0GoqA6?NvFwja_hTSR18wv^PsL=1yzE`n9nMV9#}F1~jh@Pp
z(5|qQWIJtRYX!>PPnfjY<*DEF5)feBxf4n$gc|9@4J-&I=4jGAmjT!-iisQ@_oII9
ze`^7vo-LrFR(q)Lh4n69*JgY)0KWqpZt&xM^BXZjM7q3om1QfyRe|ERV&x%#j2KBs
zsp3uvXzyc=qwvgR6dU&DNO&B+Aup<fVoSQ?nxCl+B6w20c4qAs#{0Lq3-!_}T%Fn^
z!V)im<~dvI-A2eN2lODY;ry_-XP1s02OB%J1Bfz+-F%Uy&`>mFZ$4bO3RJ8maW?Hf
ze2}((B`!+kkIJa@!=@CA$Dw+-CTC-vwfG=Q7689b>b56yJUT(cbwIBsSQ~#ztC&?t
zC}1#eMVn=3N4wVYI4fvvsGgkPRW-qypYBz-fRdF4vyLFNDj}Odxx8H_+H$Pw3UrLX
zhwn-q)c9o%w?Df&kLfAxYDauurg3`WgR{&use4lleX3pS^!!c}!Qbp<(Y1=0U%)G7
zqTb2_u0s($Za-o<GA8Uj9LyLuFmeZ<lxR8wegnvaA0q_qE&_ef=@L(`N=U9MgpGR6
z%oHh=Kf>=MhfXHZ4V{1%Y}I0{|MWNIWfH<8Gx*<s?}Ha%2#%<x`M2cctKpdK^o$JJ
z5K{Z=oy`waojn;kd|3t2+}>+5zI=}BKuEc#to>+f)aupy{a3}=gObia7Z#77a?e$G
z9|J2TON?rX(g(9FmW^9AZl5a-zd!yOM#2A+P{mTwgUxZv=j`n4Tvpw|SCm$H$cmEk
zyyS0`Z7fqLwM=aKs;GF9<J!Q{$^q3R3lqc6PJ{6x*;Ibdm}PMME3UjN0t0sk!zRU=
zTjCyGACY@NQ$0RDaio@;jZN9ncx9dg7|k@etiBjyUD|2sDnnS5uhr`{^BYPv$FZic
z8k9#|*sNWgmIzeYtc^1RwAB94@-+ZFy+#&$dyA|wY34hT5x6?`_zbZWw`UK0XM|R(
z#!+~<*y=R7HI)}IR*F#rIz37}F8pUG@r>Q@#A8ARjWk(}CWGX<lV}7bzeC~W$Kx%5
zXXl*E;|rVz=~juMq*VKP@9NzD$*7o#Up@>ZKVuR+KM>T_PdiP9ddyE|ztfW1xF~6+
zXmrR|>&TO!_o8Y&l`QU^cduO?ZG{Nn8!kDF7VR4@2mCZcuGm4awa}*X)Icm5$0TUx
zX;V^2n1&^{>|`6py^K|@E3eM!eb1E^Mp*lYEPU{p>oNn7%GBTEmA9BO4`|ZglZa^*
zxv0g}d@IelI#gkMJzgnaHbJNU0ObwM8bN(e9b9UiGNoVNX*@UsvUa(G!Zat^)srQz
zuxdvAXBx{rl<>Kx8Qc3@={0-F_qK(TPnl+xp_5h^wxeYdr6=D7Hy9z(Y{9A*cWbQ~
zkU516b@KLvTpgCjRRdEitoS;rU%4w2u@lBpT}%COZo$St7o+xQg`C}UG~@0m)eF34
z$1t)fSJV%u9_1c(chsJU-S}uh9P6-bkLD>QpIW2DF6f;!K&}GQ!$D)XSFKP^+7Oug
z$;-(v8yfXSGb=(u42g892nK}R-C+7nkfW`Yb1PtN1v&c}q%Z7&b_4j%e9|hzZqc6E
zzl@LADJQCf40$bSpFjWnBF!JP#<x`r)6e2ICzHxbH0w7f7H{1>*;|qseMbXC%~5BU
zo6F#C^v@fNGgTu_guM<YK&RdOd^1WCu<tD9OMAc6a@3$1<5&*8ucJ?2%{4lD<S;!?
zpY1mIp;Z2)NQ2qnvN@Z%$@99xdPs0H%>&)mO)rpDOks<F=y;qDUyL45Rs68J7#HtV
zSIpI*;-w3($`{|RDi#lF_PCJHAEEbfp%Tkjmc&uHT)DWOZ9g)j=T~$#8%vULx3IFR
zH=ip6BGt5E6ww7rd2jRBi3XBmOGt@`Bz5q}$&a_Pc#d<M=*79Ys|a3tU7&qqH{TV{
zHyHH?wm*LSShS#E?~4i|Us8DN_X#vgCJ{J2*Km?1nZw;rC!f(0v_3F+*JnBcT5X-W
zo%uSg1+?_4kfVUM0hFV5RuqJYsMsw_Aaf^#_m11iTZ<AiGZqZoMM_kw-wYX2=W1tQ
zxUxP)4nxpRN>7mAnMrq3RT5EFfxw*$mbsn8zW3wDEB-qb_piPio4=nZhkpW~kvt0h
zbG0q)LN{PNqH|qBamxH=k<05PfCDJdeml*OF<`P002)6ZI9-1=dmU|U<OM}WV;r&+
zDZNnUpR44BtFiS6XJX$<NDSW*JEuw}I;Nz?xf2aSj2!R&{(hkC{dWGnNv{T~&NWB0
zy$3wcpxPURSZ!d;RJFOBS<=?XU1;ZAs}4`m)#iF9o#$q^1<I?;?i6Q_YWb+;0z`SJ
z=jr|UXgt-+lr*$R6EtV!R~MG8>Qt{6beJUPq3v)3p-DfAqc7s?#me+Pu<-(GXRz6F
zv!Hvl?cHWHUp;}^On)AJCvbG2fx061cAYv%CJ|D%CQEQoc{yGHKlUvkAUiH@0G5T%
zTmnVy-$W}cgi5q_bT`Y+)@`P^CA@e6yd^B`kPAqRY@dZn*r}>CZu>v!+G|?$8hb4z
zUR;HB(jyIzE351zy*US$^PcH-!pW`+Bc2UD$=x!n?2b^iAZX*sv(eK;6a7slO4jOR
z?pGWZA05&lCrpb5-V`OnVLH^qtozIHI?+em{Ea>;%eb^cwy5NiQR@`bu|Of43!vKU
zFybMgPEUbPcI|n^R*!e*X^Jk>g9JvsO~K{%HGIN#+;_SKsLVb4h@lE;)T^@6E<~AW
zcWJWxj;frSO$wD&a`K3^-ch`XtJJrU>8R>4o@&X87dEx?$?Gg$i7~JdSiTlf&++zW
zMWAgf*4vh53Up8*KuGyl=&?-j&d*D}Oz3QU((@zQ=DgKk)=v$WIDLmUWusEsI*SZ@
zL1jZ*gxoj~Rcm!B9F3!-^fvx)-y(o;j%_|Z_{v)Sda@!fk0h&LrZ=~%i#Cjsuf9e_
z9pKb-&hN+2G16-^Eo~77(d%YNX6_){YClPYT4m~g?Wn}$!DE!#!V}ZUw74J!GIZ+<
zx^1;u1>Cg`tMtnG6#)TxpFckre`%&b4lDntb&|v<1dt9NujQ=eur+>L2I{!(aB%R<
zm$5+tvD11)%@GO|0!&cI=|GX`{c?QI%YA+G_Rg?K%wMaEUaYoHLR$ukO?uRb`AlDE
z=mWE<PHP2GAnu#+nV<75zXidnN$}1s!UbdrXU!S#f^ll9+U0ZFY|*;!+OX#yIH|>z
zqf*62N$0;b=e~QSawY#@j3=uLjuaruj5JfEXm9HvVAzq1C>Y#INMU8`l;2?bn_S|4
zGmS!`TCJrs2sm{6Bz+GK4uH-h0nd7W9L(j7V!D}$MSIuY8Lc91-WmY=>Y03iC0M0Y
zdx?vBJw8W1LcK|K8yJ{NnfB|%-Rr%j+motx%bZ$VH&D0+s?l^`Z@pC_r2Iz(_JfCN
z`Si^)LA>?anwlq+(Y#xe!##n*VUvz4nQ&I5B$vkCOhqqBYhg>ZNg6>+)ly#_0F{vt
z;TtRmS}3bwTOu;j9`@5SGwFZ>hI+CZlTvN#f*kYj*=%*|ZPlwn6jOT5JC-t~QQr9L
z)|Ewb%?<6%AgK`~{yEQUH#g#A1zKMghBQ{TEF{VK-5ixwOB@_6n@H36RN|}po;DPs
zL?0NaV)kxz0+_Ah2cfHq)OT+zc<9Y?{96{~8+_>CyE8>Z)pBMzGL=sUii<0fqo)`t
z0#A{6+s%iNp**XwmBZ@pRg^XDgVgpUnqwc~m_G>$KjNe-KD)Y+99Qmq$U77ePtm?D
zah)DMGl!Z3ul()}VXNxMQQ4j7r<+ZupTB6jYfQf_$F>K=MP))a-@f^{QO~N?Q>%pT
zlQNoTs$zjag`($@=wEXa@OO%=(#gcKj55MAT~x_1v?ZG&yg)MgXHjIMi<TFa7{<S+
z+P$o6SJR_&6lfdMFI;~_XTz&F=4}Np=d;xOo^-dW2N(7;AFZc`V7ni)4PFS55>eta
zT&cPhSL!~*rzK$K&n2vW#OM)s5|rqYF}(D=kCNK{wg86dLAq?^gM$gVM}Gy*-FUKD
zo}2H<NaY0_$d<PjyoEqpTD{pN=8c!f$L?gj`$KpWKHoQ1lBoF^B72W*J!)bYR0pOy
zxXp@Z0ID}T^V5<as8x-8QL*jnkA8{=eqzris+?QzHVqX9X2bPg*&PHHYLOd&_{?$o
z3FKV<l$2bX3vzHd2>`vk4u_tz=m3tzsfj7&P>c8PmC8><^3>O;Bc$k_tB{Qm$5fQ(
z1<K0UkxYIQwH>(4!BKv8#(S<`KU>3q%UH>oYj<iAv<6(9nE;LRDmHm$rf17ly+6-5
zlQM6mx$uMPg=e0fOvKWMG}GnfrH!s!Exn8*>d1uhpB}_K#X4M>P(}XZTYlK{&=pRe
zyRt`szp^W$UE$UZVDC0_KWNxh(8%`za)GTe6@_aF>ox|D?F`7;b(DH8xY)U~jSciE
zs9sd^aH!P{WEc}Q-^)08HC*oL+T?vD=h4R1a-qz{&7H;^9He@wo7wasxJ8(OLX(X$
ztLxi0N!&&{5ugQm*(i__M&U-t^scR^r_L=vrCKl(zjVk~(qGS>aLPLkw<dd@w)B3S
zyY4X04P=D!RZ2wMh@+<FAy>H_Jan38HYWcHeO~T-<Oj~g?6)54O|7jG4D<Dh&OC&r
z4E~6g7DG@`y1I*-@$vG6ISfFhb4%dTM;0=K$ecft0<YK8Z9OC*O$!vidc)qL3&W02
zmna?!Z?{)G0)^EH+Rd&o{4p#tmdWD-yv=#`rb*h6O#F1C$=mAi!Poj)@UCzjsqm}n
zAKt^VLbtpE^cik)@`RN)NiQ)Fh{<9<TzZjCxD5!y?YDi~JKLrRS(PkB5o>$f4=OOU
zE3=3a4J4yF5VpS#u)J#Ip)kXnxU|{oy35<?CySvHo#&0goL=<L1@%$3KZ`j%m*hE$
zp^2&GtsgDY(@`|g>%Dhi4{Uwi_O1lSQrLY!nT`9nqBoi=H}4I)?_0KsXOdR>Twgch
zl>F57$`VMGFgzEYn`}P@6scgQ7xpgn?wTi^3-A=-(6BJO$?REhJQ^CNBi-gehWg0Y
zK!a6J$#&(KQHHu$ujv`)mStewyCWj;=m4b}G3na~R@W$&z4hBvRLh`~er%;aXas=o
zps3X3c|b-*n#W_mvrplLR!rbdbkE#ZkT=nf&TKe@EG}v96t6QEw^f?k!-(dB|Mm^y
z?KOLq+IqZJi3`L}+yiy1t)<A`NXNf(a^lQ*0N{oiEXg_kAw|23`0I=sd223L`RHUd
zM+PqHrabFO$F9yXhp%4@n!O3}@R%y<B-UkLa+!TTeKm|F0!8~!5C|8~?c0^d7HP2P
zO{6>57bT7(&s_1T9>nE6wyi^Juo^@&YkcnIv5=(04-SgDei--X?a=;kZC5t)jvns6
zwSW*r3F!Gp*)3?*e0va;5XaiM%2Q*MiGZ*{F$U4r?3TDjK%ucYaon*x190F|QYf;D
zMJdOs?evFAo{A^o!`YK30ZT>sQ*UNKR~TOMH(;D-X78k1_t6#{@9j-R)6SXOz_oQ#
zYaepnAc^!o#Q$Jr7RRjP^3NVXJzO|l7H~Db|AfV1amFHzs`W@nweTz_j8argG)2(;
zwMMESa8galY%MOyQFPvTW5c4~WZGH994JD`uuCJp4|)ymi&w#qUpG^kIy+gbG}E|B
znVde8UvB1iJ`Cx+$TR+P;5)qxm0mD)aS?pwn{EcFRf{Pi5Gqht9~rIBKx|GHYhHgz
z#=`*d`^<-nu&YbT#ww7|2}(YZ$u$zAqFV{McMsQnv3IPLnW52S6c^rxA-Y;`B$82O
zW?Z^9aJ*0%o-V(bmA(v%`(%b(YN6Vd%_8n2xI~ZSO^F?Hm*^Xf+}^YbXk$wJYWdaf
z)F68=L08)XI4TJ9uPru^>(+{Gwv-jQr(`vtn(0JR8s$9}XX*n!$2+A)0`q}~q0GEm
zRzDCZ=E?ln9}M54&c$BB7n#ot_!4~52E+rCguER_0S?p;TkR<Ieoh#LtG&zP5mo*X
z8+4y#f^d1dRUi{SF$euS8i%uTtb(AqOeg6TF6mLs4>>_@nl<3GPSvT9x!(oe;jWlB
z(Ni;r;n`BrVzafoLsfb?04X@!3-X$^?nIbMkq*yn^wTuAgr_7T5I@xuGJ@f;JRQso
zAuessjwKpcFaG`DLBGL|N6cp336&ZKn{5&^x68Jx_lSkO%L4N9Dno4ME`h(_lKSG8
z=46bm_w`QqjBhU;gNmwF*Cu{vofA?mTlWq?$0t-`EQTA#YNMBL`d*f3_1=%kAJhhg
zj$(j!&!P=>;+}pm`VQoE7Dnc`VvFWp*$#6`SOH3pp!b@?V<L^fbYQg!;8-<RD$V7V
z3RzN=B4>33%%<k%bWQa9^vksJIj-d8d?E3#j(=Tw0QfM#jhhp#=y4?A^FL_tk6=iu
z`<Tq2`hh!VXEG_N#%BNMB7(=jyXOi0V+uiQ0+UZOig9;Ob}a$rPY)JTpbq18rn!@#
zn<I*7Q2Jc}!gE;OT2;yFt+XCVIc&nCmQ`Kp(FqBCeka4p+QMT);{`fbMLv+8o{wD6
z8U?_pqb@Ci9w$ERTL9pylqyYY2*@har)1fUkH9Y;Zg?+G0q840h1yt{a9QrWouV2u
zZT36|a6;K;loDA<wrd1s)-=W5FfW%?Ra}`t0`T?~H}k)Me2VCoxg3Gpq0Z=?8cm%0
zxB(#y>@9}bi+2hm$f%}Ue#44P1pFiPBM6@TI#<d5xbK%9z+?!}X*7zaRm!4KG!%e_
zvprM~4Nx)36@-5N;;)cYf_Qx%b_44nX{GHEj(~s%|7^73h<z-4wxll6>D~|)(9(=~
zd@_Q(%O#!@5F7M_^#G*a!<VfMC-ZKi2DX73tc_d{G}-w>+CNYy&O<&H$kLlAneKZZ
zx{BsdsdvOK98gL{g~29XVYA^I+hYQph+0?GJ!Ojkl*B3$#~{P3=S#*{(Gr)$)$*&p
zO55@!BRq`x@Cyxfe-&TQ8?57USPkl@wF}d0l`l+dYx3bV@UFb-Lu}*rl})Y|YAp5=
zmI&Y@n&-UcynenA68rjve2ad(8rYoZ(d8iToo)-Q3mUkhPIA?NO%8j-tA6#2OhYcq
zz!Z_BCh1?N{U3Vqm++9#?;xZ*O45Qc&10;O7d7e!<|!%<$3n{wYXz7b1c2Ltnm#`h
z3;UGUex%O??;38zQkNy{4WfYR>cOPvfUk;|Qe|DGRnU&K@{_y%GK35X@d@nw;qI=*
zEG%Eq4+o<*?p3FrJt}V32t;W)8Klc#mQeBK=5uoMr^u?k8R%Z1N99&!M+jMue0)z=
z2Pp`)>~A^&<FsBPc(d14i$EwiQb_=N2|3|$Hr0Otq~t&)^n@p-R-RC~uF?2c((_hH
z1N-KBP(zX_`=0rDP?o5VS*>ozw}3~{ph1DY4-`sc)Bz(dy)xwC9sN9Yb>|aQK=L#<
zJgI&o|6+DAqeIn8adIxp@?tzBqf<V+(l3Op+OWF?^zqos&gF6xh-Zt9;(#2$2-aJ1
zaT`Fd9GU`XdxCd1lTD}j{)i;sUhWcuqn%A7iMD}!zL=#Gd(|NIU4@ip36k)xY~cpz
z>0+ygOf(L;h^&=-GOzYk?BBaz3=zS8J_COtKVakB*JX#Egg-XQ{RscHj4JO*yEQEE
zmz{QXzGgsV+$=JsaR(5F;Q$`C*SfRl;x(078XX5HH>1eTFe6Evu8Y+_4WO5!agWe5
z{fS(aI&k5**}cA`YV+l(m<CncWM22KU(b69tLs5m-23#TKl)yVPW7(arr&!0v5uYl
z%tVEE<&;9Es&g2HaCqba{(8x9PMKj=zN4AEbogU*?m#>n^{ZE(T#it_+iaz5r+e=C
zw#4M&vjW$8b(U8<=dxocmctCx=7>L#uam@WsQECJQY~a{ZM}Mvvq-%Dwe&WC)Z>x~
zh(!Q0ck8GkFV*#hF|ydEY<n_8C1xwCGbD539S}W$!gcF6E6pdjpgeX9d!w#vqX$9)
zm}D-y$9fc)J$|?ICB8k0<iL}?nJ2^>im*HU1VD2G2qXs&M@t6QLl)7@;H0zg7~NTB
zgvI&e?#wo=KeAbm-gIQq=S^IrT&u)%;G-Q>8{Fw*vXc_LE8hQkt8%)sEHzrDNt<Yh
z`5y)jajYwh@}#+3?lu06IUFf9R5lV|gnZcRh@qE15nAl%ppA~7p@L5HU*j6gCfCe?
z7$N7W^eH-4%5wL6Lgkn3>8m)3zDadYO#$2J(#WKT3~QE32P1rN57kU4xsK7%ZJCOB
z@&*Tw3RLrKJ_gn(aC0PY2Xn*QG}zg1ry@66Wmx}hBKIz%iUq`@k}>efZo!E;Lf<^&
z?F;Je$V$<!V!Rlx3-;FUnEnv~Ou(<;cu7C_IzOUz&k=Spvo6S?sAo4{J3kLOuaa>_
zU|?-I$8PyO7Lr#(&{166CcdIx#Pc=bt0S|(SeAI_zH3CX#z|^pbNy-MoY}m3gJHai
z8phj7c8Hx?ar01W@>YJRclyW=9RoW3(j93^!SB(RVFa9>b(Tahb|@-Zvozwb=g;%p
zT-1p0%XVcacDkPMa5tZ4uc;Mi1aYs&Nvp!V7SGr9J)ifKYD<!x4_=*W%vZZtuo#kZ
z8@?@=wo4SSvyFz0W5OE8t7qp>Js1kFOM6hlpIrGFax4x3(SSBLf9ERiq4p^s5j?(A
zZQVXB1t`_BS*V2O3mG@AoRT!Z)e-;ODl$s-39~lw>Knkl14@EoqRA2E29m@Ed4~gz
z>wTd`5`7GrA{G{TKnt_KTd?*inX2uqK&1n34MO7<C3NNb(JMft{BYd>A@!~U2E>`!
z*~OYof;}R>4~STFiapO3jf)<TtuC~#9cYjg>s47>C}dj>ZlssPt@dFwK)QvMLc;d!
zOMQr5Q)yWE@wm>j>3PvAk&gX#MuRlNzZDTdCk*QO4aVI|$EID{W(#w7DVbF=rMhmH
zD^xDJdK(>qG(EAZw8TJt`wANrqU(Xa;&GE`;uG)0_CP|NngvSgWuAjD%NirM%wzS<
zV%p0mE!ceYh;UX6T~=nM&-#oLVXC|)@<PkG#1iSU=dyLrSsjQojwobd&{p2#zY@>7
z-)?*NKDbVRReC$g`34e-`6TaBvn}R4^?s0e?fUNQyKfM|<PK(+il(nhb(7uE6yDPn
zCKA1NfT$>i)|z;GJRoF<2C?(a8?T=bT^`!wND6D7YzRfUOzr#t`A8k6gsezv+6OgS
z5j?iJO<l`o5fn#F$eK{8fbvr>k&>5^qI<W49PWFLz|rvi;f5dQbHnl+b`+#W*BB75
zF`%QFt2tE2N_&YBU@;)E)h?V_g9`H<NRRm`@9k=5S=t_zTKi(YOmu}kyLbU7xkt)+
zl~lAoEv&HvGbyK)OBmfdH*<9NdeS*6gszO6#=Npz$xsw#^FrHk;qor*323`QFkgdM
zo1MlBwUn>B)<jNH+|YS(1{Te3jSZ$pH?1XDkWm@Z7zC}?z^|V>B?JDL6b!<b?q%4f
zV}&i>hvL{7zXRy?fk#!&xGaR5S>vmbLyE9jWhq15c9!$`3m^4zGn1pviGJ@1!E1){
zjyS#~%hf=_TKC8hFQ0}?_>hG6gUM^+Rw7n)xT_GU3wK>^ckMclC;CA0`fT~MH7wV8
zm_A47eB<l3{C}1NT0gOJ^ThxgSQ3uk6-)`e6G^W{f3E@sZ!1!oAEZ%W@>jR)l)+2$
zl;dqWY06ZaBF)s99i$wSf-N%EfBoL^m`#kV*<l=}EZn_ZVqt`F=)LUv4Ffw|$`a2=
z*mc^-=GX`q_Wz)qQsh-+FtnpcNFPIHqac-APC-K;Gb4v4D=N5dkUf{jrB`o4btq8B
z(8cZs?)=4IpJ8@L>{VQD+}$Btv9f|@N|<+B4vyz2u3bcb{)#1!v2ib%gYlfhSL=7{
ztd{+(s4fxumXs|UeZQQ;@;NT2e|3_3SXb<2ePb2DwB$aXhmPbRSLInkuI4*%`OX$z
zEsUyexo#iYV@lBD{7c_Hx*bZ>nhorqY}>iGd)Qnd8Cjc`3g!$t7)<@F>>959^k+pb
z4*Zo%s-amub)q4d+RMPjul~_Mi`X+flD@kY>!J7Ikfc$R?(uwfYcsiam0UcTr|#y_
z+IqBbxfb+N*s)!LeVkmYtJ!qjAhXg2UFd=MAa-~Dbbnc|&TDQZ5Yu!vGXh&LH0PZT
z87ollPdb=R;JQ`=S?HbCB-H9DhO6diIN-U7K9cL};wz^r13`Z5zgu72uaReFg<tS*
z)FYc|dm{P^zv7%DZ(dOD&-o+GLSntoj}dtz*%X>bse{)pT?==S^-yHvNy5nyd~rXi
ze1Ji{@a)H8E2COIYGB*$5<QLL4ij;I9rE;p+*H0ArOT#n=EucALIz<c%#|1VB>9zn
z3vPx4%}bgTkMT*b<~>rD65ZOvgHDRm6%Iv7D~$kJ|A<n7s+v-8UES&HF%8rHlo3=9
z<Gj~JGTJQVy0we4<x_?w0w><Bh{{T>_}yk3zQTQFX9<apfMbR4Ja%&iS_n#Mn4>7V
zFSZUX68F}6p?6NG^@$Bay;%2rsa(;Y*-(<pr~}nOltcnT<2ya;y-*yTHWy|Kj`eay
zzjDQFgrn?H;%SM#kQJOtQSfBiu34P4QMIC!xNa-OBbH9t^Dw%5`&coBeKl9RQY>SA
zy>YK`d#`+ece$3xKu$&`A1ZUD4}+$}#*VL~%i`UKG59<ETMMAphd7U{_G)-ucGJc%
zsMnq37l_>;uWuOfKsHTWBN2zFvz_uFR%>10-4bpOv){6KF1&X=DWVQ1WLBw|JVuBd
zqee;^&n0-VYaL;5512M)6z+cVT>z>-o3Z6{qfTKr1M4A$r`&Aa*hw+>RrRJnrMsr}
zzKF2l38m+emonM#dPvtS|7ipEZxq*!Dx<^)sTtP8YtG~(e0j6FW$*H+gNV#1)>3PX
zPuNff+kr;0%&IPp*TY%8eTmIg1Iq>vo}egSE%c2bum+vO`19p9hi8R%pP+I1f0+6@
ztWwsjUr(H6Se6K>)qGr>SPV1jFjgS!;JJdw9ES=toyHmXK>TnhPr`<WNrt?~PGuRQ
zovtD4Y6T~l63xP@(>W`4b}Ve-N2WOb&Y}4ut5IQ$YK0%)?M|8W#xiSHZ1CJdW0s>#
zFc6;kIIrBKbrfGtl<8YO@6q6-d3ul7KYn>XPhMDjC1b7E<f|q@)zME2o$k<N&tx7`
z(y#P#m|g1|VXhFQ)tKuGuPf(f&3da-+g$@UwwEnAFn4q?2}ctpAG=d5U1?S5Sqr97
zcY9f}&d)2N1q$6Nv~$K-T%L8S()e#cRyLIVDI7M6TxYINRWFfRk+RX6JY(rU+THb`
z+x@T(48hYYG<0PD3zo;8mNVw+gp}R5OW$KhdHWlcEV5$ci|+$T3@?8oZuC`WFgKeD
zIw|8bq~VXr9^{8Lx^P8^LDHI|#qK4#n%X9OrAT1z75ji@GY?f&uW-pVMj9@%J~N^y
zAawL`DO1`8W>r1MlvwUExR3OMd97)Y^E*G~LL*%b^hZ$n_g8yxDcJ;LU!7cJ&jY%=
zLcVKD!10#XV3uP?-A4#8QBiZ5JwBj?eKYAd>5bNEFy7o6gR-{aAWR<8ifqm`f`tcT
zUs?fD{GJD6aU@XM5-76sn$yKbFO)(^c<1oLP8vgW$t%~nnL#qnjp?z?0*uEwAqbR`
z*-Z{VeZEEMzK|9j9ewlG-NMO<2TMnqOMG^#yzCAs^Z6IQA;PZ*`bY$`^KZE8;CWLG
zH8Zna?CJWZ#Ov&ttem0!DIjNv&E}@-o`NE~=H*LAxX02^r)~3bRhY=;RAc9SOv1?U
zu=~l@`8;FEZ^h?o#rjTuk*h+<cy<#CkIeq2iye=)MStgu+-=g5rl&>F@@C3ZkFdRN
z>PWk~w8=QHW^JHI?T-6sc$XFJ3F$1VPIg%8R&$xYs*0`l=5d;MewPwY0f1;%{3*T7
z9S*2(-NpIazf}UeL^DmaaXA!|jo~4^m>@k@UNO%^@tHZw{4qtV%7+Pfk(4q|KJliK
zo*YGd>+U+(zFVHsrwM&mO#yS+KCmFL*-H1p*qLf$Se|1V(>I}F*B-yXZlE*x0Cb=2
z8m`7iY+&8|+0!|*EVUa;5g8H+fN(m_VY>6(lsRGEe!Ixv1T9EKMfJAzbOvf5!L8UZ
zUN~9qk4@?>H=9xKjCt9!moYn&54Mre+}@^{ii(Qph9{;K_e$@Bkse{_RHY^ErHhg|
zD^U6YF93nMy`fv<t3#7=G4e1J<f!ovB>R)iWO~3zPQ%HjFd~Vx^x@ylLHncu*EaX0
z+XGFi$^~FoYC{q;qlH=pi8_0=@VP`%;wyg06bHP@YjHJ>oA1@dUb0M#cJ%73AD?oz
z)8=SJ#iNJoG@tvM>Xp(&347vTLS_mbn4Ba?f+{*GYOW|=7&ucH4QC$I{u4m|KBxp5
zrdX?|j#2!NG5PZzxa8ig97C~Fl`>;9YethY3JTIa4&P_D)^v-%?p-)HKYESfH_?v1
zb%j2ip9$Zwi=IaDY5w@Qh@t6=55bjFRD^MPxP<zxnGf)0!b!U`Gst?xKUt-*{k{_B
zkpuh|vZ0TE13DCq5GKFS%rT!1N5NYgOb7946nL+8I2469GerZWw_&~Pf<j)-^WIl2
z3;lA{n;f;V%kQ~(3T%$JUr}{hc{xT2o2~3f@Oh_)%rH`|!{~VqYcBbIlT;Sw35VhH
zbq{B@%TyUDyp+lic(%;F+3*Aow?24s)65eFJL9QmGz0$F?uHZT{XL8F++H+9nQ*>m
ze;odviTGeUjn0;c@9amG;l2UMO>Z%e4qreJPfXt0nFJ&fca@i$_{=VLxvQ%^iBB<e
zS-FPlV%u>vCaB<dJ?Ilu%WyypK9f}tKOH-9-y$7M_CEmk*ZMDur#qj29pHz@`V86k
z6J)^?Y5#E*Jfu5-hPasyYSCVvMu~&aMEcJ%|I{GcH$0$*ols58Pb7B4X4v;l5}h=X
zMq)1wI}-fUDS4(Jc@6m<(f{BE&&Gv;B-2n|_k+6`{R6eNLpmC^!|VNF{avfIGsZo9
z1~n;1ij~K)B4%wy=SR)>6*)OML=5lfcBp<&4PDnE&zj6kDy?LMX@^LHRyEnQDbdQB
zkk`N_XuveQF^E3ubsVZE1nJQe7G2KY1O4eQmNwnzJAsGNDkofS_+^_qc0-2}=}jTD
zpYHM1!6p1U#6oWk3U;RRQGD;jgF~LiC(4XtY*7u&*Sm)2hgl%KF{pKb{Gs{Y(Hb&r
z7n>kljcS{T^B$OJan9yzR-~}2i1(k^=(AUZ@f?+A!gbuvtKN4<Qn$;#l>B|uN<V$S
zGy3Q$3kSq3bcu5(tvc;-EHT%>(Z@`OH8xw^I{P0JDHBFuQ7Fg*)_IA{tSlCTrb6Sq
z;m5!Knn3gU!hJT4zw6UIBeib1%a$!NEg!yfUor?IT#f{*YwK>!n>ZBT-8ehdwf;mM
z%N%y!pxoQP={T=H6QmbC`Uo!GBcf#>`n}VdSCIr&MNI`?^q6biCOa()`5Q`<z_kqr
z{e<6R{LgSv`)EI(x_?tcm<1YoP4Ze2V~BOdYFa?DO}^qa>zXpMu6y~E2|5?cq+RiT
zDBX9J;awHZZ`Z(2f4ywedOmu8Nd51cbkCTIH;PiAL_1vln2)0F*H7J<ml)#}Hm12@
zWm0kmuYt+c=|bQVP^6!%Uwg<BM8vFF=JpSldb%nSNW4tt^%ZJC*F4Z<FHI63(pZ1L
zZO3`5?_iJ&dq(1GM}tWZ2_!Vrk)NGNwd1+_z(Ln8m-_(0^&7oXLkQ43VnCK%1g`d~
zXcTK!GH?Ne@SjJs5la*Gy-&oVU7>lfL>(E&YH-raI&xTjD3P6MtwG^G!}|PMHl^C)
zyn<aD-SBJHvG9F1oNbX3A#(j)D^qGHl3F%aibbm~w`K76%vg&JkBk5b4)8tv;Kj!)
z4reRHBV*riKCCD6M?t>UuWP<hfN}Ujoz~&F(+z)|PF<wpS)T`s?S5-`IFo<4I{S4y
zBucmhdP+9U@(=sv8Jn!YI-7abeQPZ8FgP)6nkby~PXV_u<_z9?%+V8U?g39-juKvX
z*7|tO3LW^?Iihp@hh<|ex`ZVppn}EhHPEa1kG=X2Y3a$enC(V}k5ME}qTF$20xUVV
zFlx1QVv*H3aGjo{2t+u47%pr#j>hioAE)&nv(ht`S+EDMe*!Ov;ohu2AO7?+q~<jq
z9A0N`*8PW#X3SWQg$f0XDOfei;Xl`63s7#NS1O^L5yhCIlM1B&-1fDz)~yXemM;UF
z8^PwJvho~<gK^dME4C333Iyf9H?Fr`^l9#Z-F)+Cyv9pm{m)*jqLn5^t#EtEcWrL?
zJj5c5zRgaN#ZiV~TZhUeCH6W_G5+Hw?(l*QX<^ueJ5wbEb7X%-#1r|)YVv2Oq24_l
z5>&_k|0&K2lq=O_kTg<w-S|C=Er6l_Ub*D5hS7FaC2njK|2)di(3i3|l5rQers%<P
zN&2b`1=I;CnW>qxB36aX^3{I^CG_PcrR4LMa^I>ZEOJtuJ2uVY=prsVVbF$i(~HgK
ztEc>@^UZ5T%sOVFn}<Vp4Nf)*ZKE~m4i0589usMjJ_kTU&-<w8<Y*0k;c>}aRAS|_
zny*&SviJ~DDJ3uOb+oI&uIMYlOGpE~NJg0UUvrS9Ky5Rga#>bEcCH6;94VkP0a~!F
zG|9btU*Y^m4I^7HNT*&klTH;U8{0vIe@X(s^RN!GA-2CWTzLKC|2(hqFq&keBcsJf
z-bEu<DNVUGNQ_PpRF!&Ju8_VVERd~u?syJi)c$ONdX{fTdV7$O&~q-~%OBdwa~>Yo
z4YhH4;~*z1KKJlsD#X4h4C!+r5ZYfz77rw--EWaCxrB3t30=RAr8V$48KKa-IN9}D
z`0StJYTN2hSu23*OXlH8LT?qo6$@P*uA&sT$FDN9B`MUZ<Z55B=lt4Ge_&bOtVm|s
ze~?sLQ=Lxzd$au%Sxv`s>Y%Cbjb<S|5xL^DJ=xK+YnW{6G}9}`K`+DSF=t0%KbXO@
zkE<fjqUyYdA#LBDk9emH=Z%n(kdT0T3vqZqz9W)zCFuO~r+2-^q)}^m&=Y2CSFIoW
zC9gj0gqFsP=H=xH316&a;w#Ea(?ixs*1bkB1?SsObnP}fW5Jrq{f9v2VlG|#v@rsY
z+^RlDE?MyCl;m{&w99q=A#UkmrZj#zj?L(PB#<i^Jj=I3HeV+gq<Q+{QOn4s2nxG!
z-|kVY_Tub`PZtl0p^NZT>i@dlmrTCe@$=2qHbSI)@?mu}y<RqA9k#adbn_?{H|9SJ
zn#J{|Q^f%`|LsIvA*WNePBMdfmstUYni4bk-mJ(KucNt)Lr(&im1u_2(i9h>l!&lc
zyOO`Baeb;0&r0yRO{}(-MZ27)aho>TuBI5`_5&CVT3`S5f0wvXi<`=mE$SOcttx{<
zJjiNIo1)na)`rOL5Lfw6)HJz%P)y6WbH{O*g@uKO`mD!Z1K;8ghpZmjWTz=fN@#d&
zY@I{<;b2sxisi2_=i5)I!CCwLSOQnj&8(|tn;d#b3B9IR9c~L)9^Zuq{+`ww-^z7I
zKMh3hZjI0W4!5WGCS74$-QD!Rr)MZ#+=@sXV`pAlwhEl{D65v*gCw`dWpPQ_R{kG#
z?;X|j+I5TKwxA+lLsXiGfQo>MNH5A(Y=DS}QUz3y-b*N9tAMD0iV8><1nES22`If6
zDG4>wOMuWz0?ApwWbgNW-}{X_#yRJX@tt$`c>nN4On&8g)|zY1xz_WAC4$@T$6v*>
z-+M<xjdCfo9)3$Qk!0)YC8$v@NYl#S-oT}MSmj!D3adrGUA~(Agx0;;o*|->A)QM-
zqPcOOS~994ibl3SQ&&$pM=RH%p~DhSMt=X?YFqf#`Q7m=kWE+B{c%*Z`N3TGk#KyQ
zaDP$dlz16sRu9OV6k^6xL$GebaU-Qv@@veN$;rtU#nnnQ)zP}(QTO++#&hgSZ|;+3
zfefD7tTN+_BowshU>&cXI}rB|7jXBMDT|_EGwN%L%rw0icTwK8D?r9*TU1teDGVAg
zsd|-pU+1cTS-!?eIHFNkx5qE()gjSOpNr0)zEADHb&>a!qgV#P`^)%Lr{%5B7Zi~!
z$Fy)vMn+IaQ2PAE-q3gN-YqW4TvP<~3lU&pmXTu~_P*~u+8WUk>w25<10QtHv(UZu
zu~H0h$%OxLXd6AnF=e^y9a7fY7Uj!`c}(5iLmaJ;;{I-i<a&3|x^V4r>n=@2kz<-q
zgB%CaSKZGiG$PmW<Is&hq3rGrFCkcAjG)Zqo|Un!W+f6y8y^@usWyVv=`)}x0kQvI
zzm!)c&QH$)K5BLQm2GWb$BLo{?l4MwruD%Xk=Xp0J&>Wl{*71_uj?xHHac&Fy{#yf
zU&|M0<F2W6k8((Tcb?w!I3F4|e&W1<zt{GUjPHE-I!*K^|MP*9e@FXI<l-GUdt|x(
zei-uC-XPb{bc~Iv<de6P%y)*dOll+0X+EDW(bO0z@U7W(BG35E9Z_%9jJDi+$ZJ&3
z$ig>=?rfE{WJ5KGrax(16R?Wg$D#c9CyQ#Gym9U2P^@}Xk#@@6r@eXozML0rdRM~X
z;7}+)Pg@Pb0Uza!;Syh-DU(Y~PaBn%Z>&4gk?%3~R|ikMKRBBIDL*GA`(A%5udGuo
z{OdiGR^E$N6Pl`>0gqcRJwe-Of4hyj8n}t3SXYaeZE#m<)jHk$a1t{ft(~MnbMF5B
zI4Q>aD(oyc810a?CF2SHxOj@6prh>1B%9C}*frYFt?t!O^g>oQ^pa}fz6GKx?^7)-
z*&9<aSm6)5G=2VcoJyKrvCB*bpKI~NP&L6@?%TK-_Qna}7&jBFxt@Sevu$T8F6_cn
zPx@;dx#Zw*gNpNE8+3RXZJHX9t#-9H*F&ftDrdP;t)$hl#&E~U$Dtj`TEy=SpFf;=
z@cm|JFbE+$RX_bS24V-dn?<{$a?<}kL%KJmpyb8b)Qx&oy_|x_<Rznsi&zI`8dbuq
zd740rc+!+%l>I~vixRHf5$R1nLMo#T7T6yc@LJsrQJ0nJa-WFv-<+%Xrlp~ft{NOY
z*kPUDzt4miYG|S4zK}!RWbVu`kh_@XMbR<xoF5fZ6XUr!UCgiImuur?W->%p3LlU5
zqE>MlzRC?&qOP@|mLku)_qYmp*Pc1Oe^zqAUsIJwJ882a^9`3AH6){dwZ}5Ev7utv
zYmVw4BBVY^>BO1Ec&R_39WjgSUat^4Abe}8b8#^~SW&2+<8L6v`r3nuC%qxIqU&oz
zO@806(*ie7M7<jp#oUgA@V-JKpx0k<ghv5<NY|#kwCOMQU9qp>qd8D?5Q-B&9PAfv
z<S`Sdn``M$Ex)o`C+&W+cB)>nGYPI68zE&oUoVm=ZdkIGoD_5G`t@Cfj#eq>AJ>B}
zG0^~|^+%lHkqhRxv!6)iTDTKYF<+b}L2&vI*wtl*&#aJ(qLPW35w=g~+f)s72Y#j4
z55NAB%aMy4AU1cosz=G@I*zl0py8uq<Sy!By)&&hA1x>;xm-#iv6>lqCvV!<@bcMk
zuZWlRDUM98_Bm>V&0$>$1lJfZTy?!nAARTL8DF<t#Cc}?u}PciNY)$wCTrcRu&5at
ztl}}z8rOEH+k=FKMSbq+LP8*`dE3U=^#j5N&d$g|2JA{3StK1Jf|KduU`0e_v&#g2
zu-{cq@WcsjucdQvB3E%jT~CShsZ)~~a-;!x_m`<$Y&S`F$!XcmYn!VC6}d<4Y7rN`
z$l*!fvACS4?P6Aab{*d|Q}3lub*7qC_yq=~c-_4gX=+CC-dtu8m*+g{%OY&x{<!_l
z*Bibiaw~3XnPgkH5-|f=f-7kgj(ON+YE!!YY0D-h-=gz;j>po3qT5_nYDN(mh~+@~
z?d~p3$Sp2-+$w7OwD96{!&IBzyq28)FH<c)!FN|)YSsO{J6i45t+WS=KiGH%*ye4d
z^|7eV*h^cR6;?MIx3ni|1b20%!lB$AU4SXRy9fy<RkESiN5}7zx%V8F{vGMqoPOu=
zs+BG0Sj;)o>c^o57$Z29HDxBdL9F=22bsm`uygUIfj};8u9oeB{HYJedUw?{+z*-m
z{hYm$xA<PVZrpsMgtcktbjf0~aXGz|d00GGwx4_c)OhPexu1$ZTlZP7<{68LGAdc*
zQ7LnW^f5~_$f8H3N+*1_vR%7zWA_Y)h|ZH}-9m@Q^Fvh<L}{~;SluhSJt>VY7P`84
zPLX?Odf(+*;&?Y^T1CXlj!QZ}#%U;0;Y{J|Xf+L^>;W~}yxRlb6H7HmS!m;(I!5bL
zsp9n5=reQq&IdwIo+SmAhy=UJ4xUke2vt#z&4spQiz~J7lqykTC0X;s!3y@*LtdlF
zlSyz6Ag?!mU-)xaFE25sHP!X{Bdr4-B!lmdlHqv0OzcK$#T_jzG}XOl(4Vh#u-1?D
zsF;4i?}QKyc=py$`WHUki-?vH6}86J6t4~4^xl}SnIEorPP_299w7<Ob{WN8u7XbB
zKk09{*Y}J#e<SWnYsAaPrb&Km4F(Dml-aUXgw@>al5-_EuRbt~@*-eYl{Q)hHYw=E
znf&MF-Rz2<w6$UISAN%S`YfqOXe)vv7UP6<7NJ_7@Etdj9(pMtUOc_fAXc`q*y53H
zh?Rv7mgdjeDIMzmyr^q{nn(p$XP_{o<kktnt~XP?R@1%vok2wCXlLg0w40#KRj|V<
zDuMNg3RYN=r%XFueX~aO<FaAoz&sY3{+1}ds#t$Eo?m%068tPdT^W9cWfP83vd$IB
zXOHc9?O+P8Gt>}O7nM%3z-P5B<B((FC*?>bo40zCOdBHQoZONihUn;fU)kwSg9}yd
zk>7ym;UGzyXp4t+8mdv`a#KTtmS|MgODeE76_9h8w(G;xxKc*iTW5QghZ{M%BeGWJ
zT~2#dap=5gDRmgFH;b`e{mE>(IG<1O&c2)c9%tZMv6Wr^;KFQkl#(YgUFtaU;9+HW
z8Y+gpor8rTb!L<M*WlY9eiJgm&NB6(;(Q*WgMO#)emm<r+jlZl7LET32N`l+kQSGb
zk>M88%bVs)$`;`_$j~p`d&I2t*I9p;0r&B_5r_o3nPqpr*2D2o!JSLLjdZZ6!0RE^
zbgoC4_XKP{VV|I`C#{$QnF}g=c+w3h`eqf^P+aehD4RKo2`G}x9&riz&<oEJmMu=y
zvKMo<M~;MFay;V~B<k60JsOy93L-F+?wcq7##wr&ZA4;e(Nxkpu_L+I`f5wWajyZ*
z2V3Y<SKK*UI9h3U=NKS^X+h}RtJG)3FYycX!Am|R0gg;O9E~S*{(&ueU$^<o(`Oz$
ztT{mAU;w@8w|^tPN?#^~&0+E>*sDy3PkTB4U<~>iy39oXK4tx#vGm&hCCioz$geWl
z^V4sK>6qAm_lKOgVt+eHy?+_y$Hudteo<Khb>mD$j~n##@~m==(K};%^SrL^p<j5`
z@U@o<osHpWo5L4y$y!pMZb(^lDDP;>%S0_74G{_qM()K&{+haa9XwG?Jr}=;q4?vV
zWzQu|T$Z){4s44e<)E1U3Cos9ne6c<IIU#T>>y}T9;-H*K{F5;fgg&LcXt5QA){oW
z40gz8IahT$1X3=2g}b@)HHV1HVv}gF^iVC{cxRN#68BMnp;?!m)Saf+3}Y0%vTZmG
z-83g`yQZthL~WWo??OFG{{37m&K^)pu9dsxOiwO7<S{Mi=^I`?tnb{}nLmK)g&5`C
z{aDRJ0kcO|oEXc@#*Hspwhs4aIdo<ZWe01s#;v~c!&sxTOv|o5^kBI!ompgB7c~@#
z^=IYkDx*oopa(=O&3JK_GVfzH^3Qxa^MG46#$(o()5udsH$T#Sq_zzKHUNui0wd<?
zgkxrNafabI!*xQU7iEP@0X5Cz+86$I&UKWi!X}erR7S;cwDO<hyI@}XlbNrta8cE?
zCJ6Sr4jeJf%azw_Q;a1~5sjN$lxRb>0>OJ+pTgnt(;X1j+er~yLWI<2+TzW|9Bh$S
z!t`Zrdn*A=>;D>RxbTyil!=R3)#WChGAMF_N39Zn?Oiz}t)j)|;zaeRp29_cW^Oy>
zYk{Vw%}TUqAb&oBb7g0G6b|ek(NdR@?BXjvaZguPP!JA;JuRv?(345Pfu18h9_d(d
zH%_Ut)wZlZ&SfUv&};c)W*N1}pm@AoQ1Hfwok`8I#Ayl%okf!(<e1wJe}CK{>*AUJ
zsO}EqaS|(2x77$e>KZbKcpZPW@MNX^$h+Jkr*-MYEc@ZBz(EiLC*dg1e*+DofW%T#
zGk78Bb?QhNWIt(A<#RrA;UpzONKjB=wJ%#hmAbcwGFxmr)8qWb+4f!^ns!tz!Vu!7
z(TfTo7a)dPn+&Varj|Ne6mT|x?VmHVXMhZ5r3vlm@Si3%!-uWT0q^iVN9NNdf8#>k
zZBd^;%gVjBssXiAw(GEr!=uZWFYojP2Tcyan}Vjy`~cGh70^=6@iD7F9yy`Kg;yU>
z`&IwN%zIdj`)n*a4c!|1SNL;}m5noA&g36|J&$o4N{$aoSzK&Uq6b2z4GqOiAEdSk
zR!oTq!R@L3GOmw(W!D(SXIqrqomi8Qlo=p-o>SGIsp$5dxQ>pT#&i6&1Nc$QTQXm$
zu;62bM((}0!p@e$8`Uvz?zFGzwEQ*l3sQBo*Gf1P)eQQecJ*kh%$fPV@1wx8<?Vjz
zd=L%Xgpx*t%i5rS4VwzL*W6G4k&Ok6Y4r&qAzqJZdrXCCkj%x!y8+I;UO7!qlcIi=
ztOqjly8X7V;o)RN5OoO2cG*Xqo{;<UX4>2C%}*xvt2~3GlF#Q*8)w}kpSRd7H@?xs
zud+iUQhG4l3{*7d-YC}r=T2?hqi7WDRm#$&Ugp3q5Pox!lx;TFc;xRzGJ<B}u|EHN
zfIR8wNxKG2;$Eife_pyf2YC@ou}MnJEKM|PX%V^mZ4OD1-ZQYuK3^zIa3!^9$j#(f
zbgmSxkBx;VMY|0JkV?7QlG{C?{2FPLXeruU=@rt5=KlL0E+3TQN3m^jGJn+doT~F{
z{1)OA)BI8i2=R;lX+Q`I;6lhW<mquH^7ccWp=0P?rDL=l5C!YeE%}aIQ?!DJiHGKY
z$!+I+g1$d$#W=LkOvoiwH$ue}?0)~=C*bEgF{cilff<EkMc9=dBH)S#c~%c9U2ZUv
zhCAmU6PGpRn<8aQ0m4J|3q)Zx{~Iy8NyjWm=X~gm`43v^);&up!@-%WV7V~xT1K0-
zMDt)a|4SLXpTN-?Zt^kK)K~f;m)UlD4jM6l8uLz$_TQt}TrLDKo_FP6|G!9QYV<6z
zm;HYs)eh}fhVuj=5IN#)-BP?awe<2zBpEUpQ=a8@O>S=IyHOBlO)FpS19)E7Lz{>X
zHu7HQz_`=|@yr&bI@7=Nhl>UA<L_@qv<}$vt?v2#E^L(6foIOG0RaJ$7Tj5+($4sT
zZqr~S5={y1I3dWv*0Q&ErQ0k9w3I7_cR^CIv!;JimO(FSi&N8Q=Bva*ie|H>3WW}h
z=W13a+w&nC@C!9h_d(@hQxMmkQ9OH8P9Cspg>lZ;XwQY@JnNYLN*|#3e9c~36FepC
z%3supV>?RS=7%B*9$|&8VCVnGFIg(EH?2^-_e>x!czL9Lecb4*N#&f3;}a?K)??X@
ztNp75#0-z~0+YZmh;cvB`%9KjfnrrG>udoh|4tjY<|@ut9*99rg{$o`B<-T_7nf~%
z;y$zO;|)PPa`NPfVQ`5YS&8F8IY_F&S#s)1n{NiNO0<Oraq)uRBqs73iRO*9VU5f2
zKvc*%O*j#}*mEE|OLNOi)kN4>>^llb0JS!Fk$_gRsQ(aC5e9ox$+4Wv)@q>GHRgIq
zqRZ@tCO~?rl3{HfgUt%|cn$ga1Xc}E{ep+pZ;ogssc!=AN3Cp3kA!Hb-_oa4$b$(_
ziIS#MfO91TLPgl=rx7Mo0jYKWEF_M#P$O?a$1Tg48eUxX`1s&E@+zOxe3cpl1pi@4
z+}`>V?i<0<t!pGSEqlA|G5OIC<Wr|k8KL`EVa&~Rp;>1Io1DCE@f(!>cr%}0HDsa5
z*1@P2B@(!$YzOBss=Z4jg7^hq^hSUmD_1Gmf^sk2<`lrJC)@f`I;{bS*8l@vMk@7i
z=}C5i&j^Jx+=(+tc>!5-u1U&>gd-8vlo0Xlj#fKBT!dBPku9O%;37O77w6>pciZ-@
zeOZn^yO;u>%__mpO|M?D@H#JRRK5C$usC*bWS^8bWhOQ$8b$sVKlLX)$8FcTljE!g
z-U!|NqriDDwv;{W$$6>-<p$7cp<)KVVlP#^6F{%c<WKVBS!HbT>_^T^>xM4+jYv&P
zoIhVaSi!EeR?gA_0i8bwxP|$pcI(u;$>-s~W_Y2zL%$&bOD(Y<ZY_I|9dYB+8A&vC
z1CI@o8N&meLru>gaD#mO-75?@TTW5k3o<f=hS&qm@{4JEJ^h>K+&B&K5C0R3aQPV+
zvEW9>y3Klh$JqnDR{Qf^W_mDJVL!>bOt<C(iQ&Co1+}M={ZInE;EsLR)3e2?;Zu4~
zo|n)n?h4TN8L(}kf{g{ve(>yz5;ZaG5|u*I19l)0j(>5r2|UUi={n%9ojR*syrLPG
zbT|19)Px#0Zq)1d$OAV4Jc``nd#IZrTo=En-pbxrhIy)&Un*gRSz%Z5Bor;r#O>pK
z0!uQ~z@-Wvx=wnJV)69%n+3S)Cx_)+Zl#@b7^wv+P4ogRi9=%OnOv#M%1Y*~KQauI
z2Bwqf1qA*{)z@t``&7BZ3tLX#iz>A4O^WZ6Bc^3nP`|tu<CUDM$>M>;eBJlGy8L`)
zli}J*FV6sq7zJs>W2kZ$pXZ!+ngrBj(>fXY;WL8BG4B#)E;%+$%hidSaJ#kzgGErk
zF4PLJ%R!I|J@a6{tR*f(0caMHj5Q65sd~5=GVloTfqK9UrtQ;926in|Lwc~_qBSqF
zfFmvjv+`UtA$YC+O~@o}7;V}7J6y&AFi3}oINqq+!speI3*@a{-iFLetTTe@Fa>$n
z-W?~EQoNt<V3kO9KXKy3BOX4sidu+ffQhcJ4tOBhj6+tuaO4-h8|ar8*#OonTjNx|
zIDeHnYUDIOjzuBKmRmhqeiF9(bl-Y>4X=j@ESIv4_i90X*=E7uu`<ZaHm<k|Ib3=&
z;ed%qsOeuGU8=7x!VZ240ncr*30IK^YZP`&fo6O)fD{H0IH<hNt&Gb=TU?7#ndtj^
zbDTxoio1LQ&@|Q%i{eK?Iq&8Dq~Vhi2{5@T?*k%W?8EYFy^YOKN6XVTSO6qTI!}E7
zM;DBI=NlSMhTs&ImDjiEJ|4waK8nyiK<~X(VG}hf_3TX1wk?^j#^>JrbY`|QbzDtK
zlD4@TuC%$NwKyi)tVoIcYb&|Muy|Gm&e3WEGSj96)2(CVwYkuc2`p83>b=o#2diVU
zpL{%>+aBl7d)~DAjYvkpci2@J>T<N5X=n_PI!Mi+!miL-ygF_f>Lx4*phAEyeVhzi
zDBPwB8OYBIQXG(>5W~I3qg;KLWFGwtJSvI*z9gd?A!G!Tj`toPPKyGmF9+Tp(90{p
zv>AF&e)VG&-}wDJ*EfQ)vN;7|QGW4OF)$f&2`%s<Tf)tvB~eRwoFRH~ID^m3aNtXo
zn(@eRuu^xX5v|CXXo%j-ZBJBdkVWr&4cU18$5!@|@n{dnl`zd3Hqsj|Xq(RGMREe{
zrU0zz+54njQi-a;8U)Y9<>J{Qvx(My?22o1@P$ziB<MLc_Q&;?3)-9Hq|#-eiTXR?
z+-?Z<RX`V0@utD0OTSn&Hv|Paz|v3)K+(h>Hir=w<!m+T08TI1>ImHetSD>7jg;GQ
z<<s5S5+div4FIQ=r$d;^nG}9=k$mYrn0OEKKCMW4O#EhutxmW;Os_GIu|w0sf(+oj
z4&XCHeVfy^ux|gG9as<(12NKu2TAuqTv8VoS^v82!=MF@k%l;wRsQ-942NRbi@o$9
zZSvnu5BxU~6<6*YG=nYM2MjT805&AlMhx^R=eM?_RXEblBuSn0nAgzdL5OYX<lj}s
zR#1W(cbo5y{4e6&tYoaPdSn(Vs`ceUnn~4-8Xi~JSssEXDivgzkq3E9eCYnO;e-%%
zkRG{$WK-0iv}75p0Mous%%of`)JeP*4usrj!En%P9x8wqs1{}17Z_Q@$NEmmJ!Jxl
zXw4(*bXqHM8lWAjPB5_I&{1%O`)O&;Dy)xy8yV~Re8)I0t&k=&9+_*Qty>dB5)!KR
z+Ac+ZlX^m8TWs1BbqJo04N?Tp&4iFCEG)*YxLtvEhh-6Bu>LD-QLCj1%?f{ZJ#Yd8
z3#;!re??Tc?=IpC?*1=W$TaFdgQjAqb+@w3mEh&Fg?ivU6kLC9XC<%9toFMKK*;{+
z9tszp0i{xf{3eCHXl+P{@yPX3Zhs&Et2a03Z-82w@b0zFe=?)A_FJV{j<f;VSBh?~
z7XVN)NEKkSk{@q}Hk8S77A|2yj%dYA99#qVCze(TW{F8j{#xm}{aq=Y>A;R;-wbUA
z21F{MH%bnj1p&!rCR$;!Q36z=b+7~KLbVsjWwcSvmFYVV+k0J+GF=Sl8+dj{_`ij}
zpZN{f1jhgdEvVu&S_+r8FAvdBgrVwolo{7ON6tS25p17a*utntV~mm%L&%MV*tBl6
zmHa_#%HIp*w(l;ycFIk__s9tdpq4vVfDBSVSc|Mx0$RKtGaiG6Nn!JTT%Y?r7e)C6
zs6gJ!I=PuGPiYTI^f_rQww3}mtH|22l`LiHqE+|)>sU(+LI9V}l`mpK`M}veG?~<U
z4`$&(!XM1K^Yzs-G3LYP&po-sn)s`MGE?7VjXc{tAWe$i{dOB7EE$3%NJeXO6|2JP
zcTMTM;X{^DG?N$J*k9xGg{So&>cSQHy=L(kEpvVQs>jBB>b_fy?`Qlm0f9<ssdZ~+
z$uDXL;0Hhhkmutdlv0&wg(X)5x4wV>p1e$vy=VnE5n``vngY<Yb}PWLrRq9o_T&cd
zRsaI$Rn%^9?T)vu5i`pYHDU|_teels?f3U}BZDM00f7F}^BsOxvfKLpUL7ZBmdc^0
zw8k>a#>{34$D=9b$OfTICfQ@6>1?)bb7VI#cUFA`ZE#)oLjl4w`2=cRU0oa+;wcv!
zfFL$o>~gcA#|+k{YKihd<7-l8ofRBBQhAi$Mse`Pa8HhV0w8oq!55wIF9FywUgyKt
zQ2JvZ{(J_3`ti)u&Z#jLF==rLFSc@@vuEnp!|#Xu!v$bKWS#NnyK3apJsPgij;4s}
z>Zm+w3_HhvNpWLNz+@BHsDgzuHE6ove({0~j9A&&=hU8DORm%s%+u@FuNRX_Ya(n*
zy$5|+gXLx?;LzO*79G;`MTK0&t{_0d1ruLhuXdXe8c%aW?XB9iW$-SnRh4G0Q9K~#
z@s=1@NSwkPVjJxR7?6rQV3{^T!Up~Zm-e7NRi_1DF@P@#L`@lM(u?$3k=e?;#2yOP
zOI~0}fIG_6&7BIA8Yt*4hSdHalQx7({n~i5<~~m=2BDm{fZo0Y<ijqCp3T!j%$EE<
zhnx7-iTS4=xHyga;HX4nP)J&YV?4>V0@lEBIL#KCK~9gfXd6l_^(sSc%nMVNiAMQ0
z{jdyN0Qd8ImBN}q;CEYmP3a0bg3oo+Ejxc_@IjOL|D0&ChJ$SMh~^;1|LS?7TBbJ;
zMwi1p0JfyNo?i0Lj#JVRiIw0ueb*eGN3^767ZT*<K7ROsRKDHWW;J&v8=C>_(EwnA
z2SldiN<jid2jl2SqjHzTe<zkt9jyBKO;g~&fdhbAt0h|Giyzg!hrQ4X!3^ld$QnNM
z0&I6Bid8Q}aQ>d-z#6{h6mLFy&TMxS(i`X*|L}>~;WESVL|=$h58kKV#5aEsH!`Mf
z6w+7tTV^mi1vKoQ2m`fyolLZqhFu%3P~pdFO`wiuLc`6^i;#7YTdpl08TlZ+qxBrz
z9Nw`dC2k&`USpJ{_NnbY4ANu)`26ddkxd4|jJ3lYa+qE%D|7!hCD#9LE#ft#Yv-vB
zfc_Z>1CaMg)Rt9`L6ZdWpL!L%S0Nv48q@wDhJDj~jyE3b2I?Y+zJBl-5cjZ#OWZ4Q
z64NRZB{ut(4pp~Orn5B$%VF52fPg7j6~HPA{fY2j7VAyGb!SWrIi-{iypEQ-D5T4!
ztQ4}i2L%`q*s*|I*kz0D8cLG316K7PPVF1X|1U5h#!}h;kxXTMI7>`6$K`Pd8Zvuc
zi+%`lu=@SuFSrX?@`S9~XMJuqC2E1*ojWBrUeYi0t?K#_<(gk3_m?8qXMeKh<5PD^
zy}NDO_==;!3}TEIITI=w&(V*e4If2ZTQ4#DQ^AS^JKS^qF=2jK7z;oY;)|-)#%wWZ
z05e=XT&;Ha+>k#)j6=S{P{Aduu!27TloM^Gm!Dm!FY(WS{TM2cmF^X+O(rwII|g&h
z6lun@s8E3SW_zw7J2~?6xxeD3Q*WBY8y-1o;ke;RNb%DtAgL=**Fq}%yf`zw)&^DI
zhlEINo}k}FFQy>v7~6HHv>i)ON=eCcrMB%GRfCLBP6g6lS86c5>2v?u(Ce0#&yo~C
z^6QWcHRLgd78X--JhFluH;RZEU7#A20JQ-72#8*Z>(_ma(3^pqtC{m-5t+h*f|AxK
z=Z~kgKVQV22Mcjycx2@M2qk`g$T2ry%d*cvLyLh+_j0tyED^#CB;inJKPbv!I*sGU
z)5S)1KMRfXaE2bRwO95Gy6wzW5i(4?1;D3-zwzx%2!pri&6WO?RhzeGsYv@*`WI1$
zspO<62&KO7->)R+wMgRhDX<7O$wcuhuMc69-4|>4JeEG{^!T6SKQ@cYq)md0gtBPp
zq1{hxk|IpB4Y#){JyfOv?;&x)0+-<h1e~E`lQyF6a3jVIq;$H(%p-5nQLENh1l<?;
zgn=n|oh&nm1BJK;s+VMK;x`CjJoc6E;%JQ$8kG4OJ{20gH9q%|Hl+V$uzY*B;x6PZ
z{8$kc+p+{m=RkUDIR>)@@`Qx*)Ta`qEYOKe13^ePa?*@%#e-l0)&0>6<^`ajQE6N6
z_9l5)ShPgP7<kM$GxIpL{`hOFoGaCC^4HhF4&byR-@Th}lG-#8pa24xW|tXxtH#_4
zaT81m_&uPGACTkDQa69W<-5tDqkp8?uNsmuPdY`@6Idau82WyFNI4YBgaY?STMtuF
z1IQd*a@w#ut_F%lUbMFO;K5%9TyuRwLV|eNbg@<UFL=CHER7Nh@|qXQolPnb@yC9+
z+OHZaSe825g8pS3!EUiBzYk^EVAHR7O7pmkml_$|x~9*;0bT)2<$hwn2tU6uHu}vQ
zNz7F%znmOxBJ0jgjBvpARz$(cyZ`R3Rm=%`AjM}?3Hk&HW`Tg!oVQK2*4T8bgJrjD
z-28O5b&Pk>3^1ClfVn_1+m-E1?3w{zN+4_M?YN=7LdP$;nbcm>-#@kh6f1_E72{3r
z1`d(OgmBK(`xZ3Q&HZEsP`7H_Xzb6!iv%OiGxxJV)u|FfY%@|Thlx$Mfp>#UwrAbJ
z?Y$j7S*r%9CK=t(H~t6Z^6)af!U6OxmS-8D$^Gcl?=YFgmgT(r20<V`1T6fH4=&n(
zsuEzR2Plc0;)Z=thXX&N168VD<Z6)IEH_X(0RGc}I@rqWO#!0xUV4#^G(!KHHo#z1
z9$1KFK=p(mKmd$d2;mwctnunfof1`={NjMRRo8T4ySm)WXUmL!e7}U5^lZU!MI)?T
z6Sw!BsXG2SUJy%-+y<)zf~3Fe=3313mdQS<o!hHoJAIvT>9*UGx2YyV<qL>^0fe%`
zrSA;{Z(<XGmX$_{nP@cC_rr(xkU>jVOFc}sN7)vqcW$mKxj~Ilz6QDu@FQMrMMG^6
zKNqI6TU=4A*psF+H(4U2%Iv{TG1w91Ixt_&Wt$JKu$Kv>B4V?adUDJRT<ZjWvOnSS
z_2KHk;-Oa!<)W7lde;eZ=3B1zL2iHl;lshpQ^bs7p*#z@UdCh=e5v4{>q)>WA>@*E
zuNk6b9|f|a7FNdeUGp5PZVMpggBGp>-ay<6z(}SoE9~FDA4HrSfRp#r$J3zL2bi4g
zxxTPW21|3%;BPD6BjvxL!6Fj}$EnVP_c#q#79eb_r}giG&WIU!%|wd#y&vUfW7Bl*
z&C^iL3fxDR{*?!OnPg*b+5vcs1wq~Myu(B*KUYRD-8B2K_+5)gtg+m~|DeB^(6=6w
z{jvX3c7XqjVaYq%7AM#*@zy`8c?C`-+kxOpe_G0sf>+kZm)cuohTk~e_;8In987>#
z^{<od=v`4Dz_=09U7>;C*C<xJbS=$grU+-)D^JXgk}IQ(hAK#P#f06T0F-Tso1Mp)
zs`^8f>uCo_)w;i^3SxHoph%|EbnD=9oC<T5n9O8C`xH(o9_Zq1vzDoj$-w#HnkuqN
zOQ#N@0B6|w>({Rxd)CPD!2<|U%D6nw5j`fJp?(OQ?m+(vYec(&(LlUp?ibMS(u>p2
z*#`=N9WaM(pp(-eCp)(&qys(fT*I@PZ%dmdm9^lVXnwFh0o|7DHOs`Ip%XygvyP*`
z*m;*$l>3;wRA1{tkem&4U|OqtHOsKFKyF@a)=Rn9PbngP4(8q51V{aG`nDbtAp9`_
zRz<%}5P%My38PhWi33=YA$CKDPN79-N@E3w<z{KSx~1bFc(1^dMT(du+^!7;h_M9B
zi=6B1H1s)R;2A4TQb>L))7_#uK!tp~DZXi2=)hsJ#R&|uW{qo-Z`gawebG%(a*W#T
zn9YKyPxSf6zZ%2K6y|=I3S8a8bIzm|_4+lJq{Vv}I&sv<YkA!W-PAJOQd?W=lE+HH
z5!ZqFgmVB{xeWVCH?tpT%wkkK4Y7)>fgr(hfdA4G#}3>Bubkw=A2^)8qp9z14)mIF
zWtQ=C(@}aCFw@HrPY)Q^<O8K~GjI$gy*Apq`K7dy#iNfEKEA&LXKvpy2Br9R&e!ix
zT8*QF6;ZTSmEg2{)`YY+WU+z1Tij9Py(tmxJ~o;K;@6GoyVt5o#iSr8T%x>Oo<llM
zxfSlfsEzGIY_~Z1?*6!fkDv0{Vx%-*sY1fy20OG`Zd|+ek{Wsx*ccI@ckke#t@ps_
z1FPn62{hN)SW@Bm#aG&)LF+U5Mk_t3y5>t$otr(D;znR;2BVBg(h9V}fOQ|t67kN&
zF({H$d7PaXtE&%I7Zzv|f=e$J*lQyPhkAgO81uIBG?q^QK>2zRzsM*Y-mKK)wW?6T
zBjK@wo!4m^Bixbd3c9fzpe$dgcmcNrL|OE$eSa-pDlhnT1Q?z}Vh;-JF8%9kSSQYz
zUS;EzpZlaYd*)6;ZHc=h!F{~*jIadM>q1@Rkq|K;PHD6QL@ViDzfG<^dL9LU3vBv}
z^ih)^!?8ePi5V0vO(w;(C)9n+ezLhfogEBs@uW+NX$=lM$b;QxMh4Jtuu5R34EhiL
z^Gx@SrZTMjW~Hknqr1>XmXp)LN`ay-`t#?aCrzJsUi|WJRbo$?UhO|zfO=g%N9#GL
z0(&o$xgSL+GK<_xW8nCgWuB=F0~phTUH=~pS;tS+e}xtK>6Dfbs8#^s_gPgyAov7+
z3dk-U9UVK7y@#K2;8X@DF-E`8fgh*${ZYW}U~By~)9Y&zb%4GQIZVcJ>`&xZe{_9(
z&4hxS#S&mxyYOer!JWy(7fPSN*L~j8!>pM;b%BXVPgC6z`M`72;G`1vO8l|wh|^l{
z^=UbVi(XP@cdUvVC_aU6hpyZ{>uYPf#^!J9K!2T9qVSguA5IB)B`V)kQ&YQnlZ7zC
zxJq4zgUZ6f!v1q&&z_yx*eB>2LZ`AHTGnYY86;fW_ci9!M7gW<|MTO?n>*<R*)bjX
zmn7QdY*VEIB|1p+;l5d47yDsr>Q&^XnBH>Tu%rKBFQ+|w>}qlH&%zJ_yPi4ymYJr{
zI^2C``r5a(kgUckgl(0~Q868Oxogocm~JX#!f&Y*^bs>EzKS<{(sTf~y>-+AcR%71
zJ73vAcVEig<X>Buxz7TsdD@<M#XTGBC1Bvrh4RD`gmy^isQOb$FRFol`I0^gaD;6Y
zk%#Gb<};&CWp2f2w}ks+Mq4n|ZBer_t_zfK{{uAF)BZt<<Ox7PC}1;!dDxDeA4!a`
z=@~jK%g-O@N*aJ#1-b|(U~59jM24k^g^>v0KYBIv1niX7_$*^wh5_=z*lbJJ$3{jT
zG3<U>1~+Q!VjIj>cT+T0v5&F^8gLo=?u_jfYvDQ<=b65VOD)`|M=8nEw5095!(KZ5
zE;92u@L~rP*M2`YuJFUom9qfa%P_=}L3q3kZy1ylvHMxa>al>QgN{n302T*s`X%(C
z17g?BG1ok(!LLFB+67Dp3g)e`cK2Z&+7aOK{AtAjYGlKUT?a18rO|g$G6!9Abbk-U
zT4?CrYKQRvem`DC@3Jx0=I}Ke{AB@dDmE}|@8~b^tIY#>38Zutlzq!kA^^KgA<(F<
zAk0HY(;X}2YtGOmK}9&FnVw~!DFdB(?JM^k5LVxVA%UpJBSsr~Ee;obh}@g=^Z?M1
zZnK5s<vxJ6^j-U%A!3L_aGpS-%>fPhbKV<kZSkt$QHa&cw*l_9Au=6EXiQy;^za+I
z0^qCsT@HIzuu8osMu;|K|6m-#<|w2xc7G_Q5vI31EQ@{8(HvP6QF5+qf#BI0g|hEW
z)1e_!o^>x+1cC)rgFF}NgewH9$PnJ5R%UvoZ2H`4-|`QNrR(Jfxjd}lc5Gy$(hqKg
zj@_886ZZ=uA3PIy(cEckHAkd)(RF|>=sVr-r@t2aoNafTV^>u<yfDSzK3h$eMG%d4
zFBRSzIPv)Q`18oQys4@LZxQkns8jfMl);^VpX#9%))90|aBFq9u0a7_E(pdfP%Die
zS&hMxg!aEoHd83GIwAVcw5qU+LNPRE#UCBSDgp*1>038+^{P)?090@U1&)JxMA)*g
z;)t6EFz@FM0>?s^o~`e14`3_?0qKHlcI=ZJ5W9)Mykf%ToTm=%pUNV^&=Oxx!^2_$
zUk8nqcb2NOK&eZCC+fep41WJtF4qRLS3wk8mZeAQtfmIq(N>IZ%cv!8=lVjaR3xpT
z*sEH8NqzdRbmW>RZqvr%c4-&&xwyxPamU&07DXUp4=Z`c|K<ELK=@WzYr^#qC^`0a
zK$<DgPQAy<b@5FU>!mrM`3@ZAKU2EWW9i!SGzqNf;`#-1V-dD&59WZ>eD9nxGBN^I
z{OON6hJ~>AD~xH>O(>I&j{d-7OvQ^PzQBwUT*jb#xq-<h|AP$e)Gi9~h5sJP{arz~
z_{E?NWf)q07T%)#E1-}Qd_>@1qXIP>?>xBzh7hiy<>n|k{}YIw%_d`&^E_a*nZGMI
zw?eUt4&?J5tn(??q=_<N-)(QU485jWC;?1+mN>-TJTo9F;nDsEgN8yv%b*?TyP#F7
zJt1>frdV&|Z^6zM5s@+^K(_^X<$!4krCz4~{HoCsX6hfd!eVT+5`Xah1SrJty3)Z4
z2Sw>2)a5B`fTc<oQs#r<vx*JeatBrh%kMMsMDr)K#GQj=@>b1%JlN%I_@v{Li8IgX
zW@&39=phRFhznc0jBAbFaL7*y?NXX3rM(cnP;Q)aDLg20=TD+-+2)}ygK1F^L#%%#
zT%R~oqTV&d&7UEv`Q^`@iKhOThq62QNl!=|BFXQZM_`|Q=Q-jqmFEAzADFfhG>s|@
z&N?WifYd28cLc(zLIom~?BaTbV)h=Vu5ibNeR&dGi7gnH3Hh-wQ#vkvsQ0mDi_?0K
zWIe72{i|q6CJfffb#a&e#rGkM?Zmg^g|V?+vl%Z;fC16LW8|IclNEi3Ize&l(w+5%
zQQ#0@{oDp?d81a`CZJQBGtvV&h*{vR)T0_q1#r%0U4DjH4=>?y-{x0MYX;21(rFvx
zN(!hYh#nGPU;GO~Yr3loc0^V;|Ek<J0{H*Ur_ZjOli;)={VoOnQFgPeCAO;h!J;{m
z#vb+_4BgMouitFt-zp>F8dTN3c=cAT>@j~RwS&OHJMx@e(T#*%y?mbQcn_Eoi);y{
zTX*bv*@bnU0}KSPXc_b-Z?HvlCTopDK_8q~3yB2k=1nf}c!B%0j7IeU)#yCY`4+fz
zVIIO@N4YPHilJw-%(#`+dxWB@Y=@_820#_UXGk~nUyUHu{X-PgvT;$}N^Wz%W6;!f
zi27gvDlTsX9t~d^a6t9V;e8k}pXNLxhPAM_z>_U@oRv>$(l?{i*5d7hQTMsW!IiHr
zkvL^>ANyZM?XI|Z?}V%#|8|?!*q;!i&}~;ZbIsdKfNnzE3c!3F)f?mPfhMP?pdHl4
zB0U!fRq|(N+o#=&VD?@FTLu#TAi77}h2BS_P-HZ9F^01Xbh~RWOQ3>Cw=&z=(hc4S
zi10~?iGD7d<Ym)M$MI&?Q;WdPaFi1pKX$Ygb;x-ZK}d#pRs)cZA5}W`+4B1#4mtuk
zX}90u{KP^xww&7TB_7})bWcxUq(QaJ!`6IH>C#}95~Ov0r)XIGjoEFVK+eBBo%@0-
z1)ek;;Yh(Q0Kte!InK^JDIo!xK_`KsC<I6?!F&)pYwjhwx4S^&2QUJ*(%<cXl74j%
z{F&W;p)Y!UuX(`|+-IK!AqX6|#@Q7q$N<A%pU_Ikh54Azq>}Co-FYS;q0bhu2mqs-
z6hq=_yt%}kjaibZg%J%%#^J98Jy@+aDB{A?{pAw_SPwIvw;@Y1NKaMvj8U$7UeYHq
zgQN62wc-TtqFH@f?Y?xDcws7O^hIw0blWOz%vC^Iys54pEp0y}7^?prbH0)exvXw^
zZk>2&^0O{V0;teT&{H4Kfgp5SFu>VfW*OZrSf^=m$T1AyJ#s(jkBMDU*d<_H7!d8P
z>AwIRz(*Ju1g*43FI_rRT5-A#`IaADAL5x%Q2&7h{3iC82#h~m6QX;We{{WvzxnxW
zJAX;`&d+~{{u{1Dywqr_=j+&01?Bltp8ge5^a(Fad7mOnU)VKA%J7$jT+;fDbP51L
z(^f>XqhGw$6&cpp=iw4&iC@3Yd~Xor_q!ML+}h|2N=zrC4@h+QEIJO&%Sg}<gm~Hv
zARUx|1Lr5+60c;jvY^EggYC;`?E&QKeb85C|Clg`zM==&Pp%+8VamE*c=9LxfiuYn
z|2rd7)wMG=NiE_K{qM7$*Dc@NnXmj0C-H;r>OZX>R)I{i=QO`QMLy7nC+P2PkxJkH
znLqsFyglhAD4lY*8w+;MxOeX`Pr!~3?@3b;5ye56T8DVoMMUxq7z3X)NA9Cv(_7Q+
zw%eBkg5^=a|6<P2{rD;DJ{+@+>HyfL=sFvD(iUPf1p6S6;V1jnE0)zI&0DjeHAlyw
zlRo!_=~zu(HF3+L>vpG?*>WzPNiH++VGCKnD?X-ftOI4Ze-vJJLy%13tly;LbWjST
ztQzTpC$lJpZ92-_0y-#kIrPKVK$U%%4Qx!=63x=trZukq>@=~9u}|Am0bqx0*}4N!
zJU}YgtpNQJb<BKD&5`NmZC{MMyT{jtiM}qlj2Ld<;xSan?q!bS!BE2jCTE8kH7AIw
z1yd=OiqwMM*0>7jRmnrVPR+|UP_4WJsd5|~9qdOhB&bEyzzs7XKhLed_QYoMembpv
zei{^|Lo49qHt$~O0*fkij*!i*$)3v`IveBIRoQ-TiZy^}3j(zhQ0Wqh)&%UoK7?ib
zC_hRJ+#lc@F%9Ju(Y?^M4%ER5cQ9l<kS+mjxWd|WxFQlP4NK6$+UL|BXxt2nWFdqd
zt^qQ54B$Q3!~gWaj0qKcDfl`VhO_C1y9aLWlz?txFT@R2JQKv{z2*&18WRnULK^Tz
z!Tn31OBRer7niPmah2wl7^@k;QX;`Dr{Lke0`?BjZKr{l@~1+|D%OY*hwK<%7C)0K
z;g2UnIPn;d%2$CtN=->i-ouog#(eKbEi<uX3JE9XXw&TgPEQp!x#_vH#$9^MP(`^;
zykWHjuK%Nm4kK8|h5b?Z2N}3!E{U-uXedChbdLimAw}quU+e%Nwcpa;3fe;+&;7PF
z^@no%u%yMKm+#|qN6!~U*;j`f+c`MEz(O1mE*jPHAijDFutCAOU?RO5%zH$RV{A|8
zi$*fw2Ud7Cq7Y<&vGYiGCH@Z4D1x7^lS<m>7aC|<Fn1#-Cx>3PK4jL~yLDm$UNvG7
zdM$3_Ir7e5@~Ol8v+b8T$>INS0W9ZjKe%V^7ksbc5-GV3F0RLEhZeyO_5j-LfNx)d
zEEO(gI}49FW_jUQW&P7sDy<xJ2+Y%v5UtD5rgsHchX8B1#b40a`i0f-E*?66lA>Jd
zfllMPVBQKYHo&SP^ss~fX%)Did!0+!f885eN%_#+*hwz6&lk>ZYX#|G13HdOlGtP?
zpqE|tswK-+aZ>MUDtTE0>^A*H=pKbV4JdbMXomXrmm~}rYmL26g9>*qJe^xcAxIlC
zP+ZTD!t*}nc+YPMznvbiCqd}Ci?@M24X-mpCo`HJ$$tbT{D5{0(<I;|6e(#nzycw)
z5+pgq`VLMu80Tv=ZM8bvKLs{N(7QazWn``g;-v0WWb>k-1?O^5U%~tp;JW@yQ<9X-
z9XE@~eY$ubwrlxs5Z8u_Nmu<2dQ>El=PKYhk>5XIqkMou0(?S<V)oAqn!Bf*sWUwk
zlSH+5Yf*4TOj3Y>PTt9>9l0KoSvZyglv<5CE063Wuwz0N-LNfFBg`$R^T^%pw$29t
z9S<}-Y&_I(APyS9NPEbzZ9KubfVjHbzEph@H*$e89nytkg`PhZ!WxgvLQQ35WsLVx
z*9K83Mpuno*oJ7(J1nf_Ly*<Up<u^Xzkc1Yz|Q!?&B5|0m(vIl!>R#_{x`@qj$@5=
zX9(}o&k9LOT7%DE-}W2JQ<6ezNBQU>*8Oc{<afz?%CzEpnTEOBAqbXRwT~YIt<&+`
zvQT4$lsIE0XmV7B?xp|nHq$>0`|C>jgJBx_!7vjr4VC||{NZ1%gnwr!W&QgMF6)1$
zxe)AjXdqS@iC!)&eV=j#O>XA*M2W6uZoOt{n5@W@;&Jj&4gCu7D?4MmbzM#!kW^BT
zH6fkk^F2oCa{Pi~{<CE@h<bl7{YmuhmxNzhfH`6Z6Iny(3_|bWEf@5vo-)^ncm?eW
z@z+BVAXD%AKe&}iW#~WvS2C6w$bb@PbUvq<QaU4(dGDaD-rynR*OYAzcBHL<`*Q=T
zT!MR&R#!75h-{6RQkZO_X`}D8ELl90r}wA+C{B-=*3bCtLe1M-Cs@SHq2%+2nra$c
zN16kD_BBz^L?mfKw9rp}Qhl8rTSSn-RJc&0OE+G4(9^*~xjV<UPCzq8lq+?;zsMQ9
zwBkoETIFDjK>=SH4fR5kpALy+mfR~`AT*f9crHwWn4bfB)JR>sy7XY>I{{Vby`BaG
zxYJCJXe5k%uB~9tU!N_02Wp(yo9ox>`b{hxh@TCDrH>Ud6dtSK-H({OrZF|Xo8Uf2
ze7KzYc9&}7rMMk|zc2*b5@>Z+U=RERHeNkj>;bMkNV_2RE<?{O*!e^tQaXcQ-me)9
z*f#y-mDYmMPxrtlS&qo9I@+0~1TbCg+ov%c+T`UBLw?|~|G<93Z{B0mrlhdDNma?C
zDLk4MIQN=d#pG$jssk+k%^s;;ET*M0)AeG^7wLu!A8WlkcbO!u@ZVO)V=^CPC!%S#
zz$JS(VrtkX2uegB*jnI`8ik1yd-xR3aI1%%_3rp~4lK}?_^h}=yOCNxUiXnWeC>9Y
zLuo*I!i-F<#9O=kA*pf6I$g8EgN?5Ma`j6$)YGxK(3BWwhi<HdhwhB`($|mdHnMS)
zr;k_Hv&MWo{p9te<8JpyxoGHx7-FtDV9$FfN-9iF{3<3W%n%uiG>@Z%33ART*xP`L
zvuuFwWHu<EC=KGpCRipE6k^c3_2*%it_NmSD3}DYzkKxmcX{icoIte!Xn4%Tu2e%f
zX-m>TDl-6-S1Q}{S&~*aEqg*br&jgm9Mi^o41!Na-JNdz5Ov_d{>$-CZdBPG+PIV2
zk&$e9kKN$HaP6I9UPFt}z1P97Ey+Nh*4s0;)j+kk4{DY&S#UmQMcI`Hfbi3Us`?xf
zg5w3>u^q%N%nWofRCP()>JmzgU~F<fWQ+a+`{6hh)ku$7_kH#*4Ic)WzuuM2TjIr3
z><{p*fIbZg3Fo%wWu6jJ)(>LJ5_#c$>V9?cu<Z)Vk(>;@D{Jo3^XuGAGX?<9OaGnj
z1J#=`gn3@iIV#>5#LyjV+@A0}&})Ot;if{j4wuP#IfJJlkV{IeOAAEL$d2}tFfbOJ
z-O%Z$hMz5^L_cY=*;s0y-8X;1W-@Z64DC8>ldF^VfP+mbQXx<C>t`M+w?VpFw;u=l
znu2qk4q8o5C($(1!+TcG_Gh%(X}+cIlIuq_uQKp^?{56=34j$aXUHi@oo9^N0=$7D
z`P)qx67ii4i0PSu^j;_&5n%&5wO+WP`U-Y|Tvg}N3^Xr~=N!K;OQwNaZ@OMEYy%N^
zzkreuOCB`1s8$lZ+R05uxf`UFmQ8P6Su=;ILs+&#r>Cf%FP$PuXJTl?dS8*QwCDmW
zLwJ0%AMW1Tq?_qZ?nN#O;>h01<3M(aS&k>cq|u&S3Tl19IzJaR7VZK(Gt?q@0Kc;(
zi$O;uo;;EpcWlW86vv!VM)ljuo@S3TNC#u<SMd7?3JF0^)L1oF#Fa|b@$TXBLzd$A
zv0pZR)R@lfm5sSrWIA72o+{CmR(~zn`5sT-#V)taRlagYVX^(v<%4Lbba(C28@|c~
zN$EC-Tu-2@FWR_W0Mz$FaKGJ`)Bo=9c<R02Yk`FZ5gpae)2jB8&i9=9iJIR3#g2|(
zOGiNk1uvioBGh7@Hv-ur=bEu36XVRcud4T60ez0rTdrPrrl!21*L?A$q$~3WgxK?u
zu*{Sv_=kDkr*V%Ok>_mfesxIb_p!dU#bX!$c03=;moAcO5)XHjjtF7ul15Z+-hy8)
z^k+gLrM6!=+u1kkz9C(kklP_Bjr^GD|APMaf2HGRoXR9<;W{b_qc%>L7^0z~S3v{s
z@<pB{WEyY~W(5lBBH&sXwc*H}pDeL3geL=Xl3A2<7izObzFlky>8^+<-GFXVV70pv
zYmnUwTmR5eAZ}L)v>(@nqe=pPLc>Pj3x?TOW&8JSNE5MGVZ!yUXvSt(0!CHJW9AB{
z0RnISl*xwS4_n#rWh(xz7tf7>Kco-LhK%G*y9=o+TEU|u#h}=t69OZQ3o-xUL**BT
z4n^$h01$`(ZvuFDVRj3+(sl&`M4UzpB5gxsc0gZzj~mZvS0_Tp3=H%Ds=gawDP|B$
zURs}8LoHv1&hX=4KpO*u2OMbuU@Ddn9ngy#wLm~%SDOBnYne}vzdmOmp&{PfI2AvH
zmcvwlX7^gGXrx`EnDg|~YR##;CzHYUwQCoe&u_W_l5L!QuXXxZb3`w6j{^js1S|^_
z?Pi~&xcB@hCscuLFjIx#L3$2I!5!=IQQRo*ew#_0Jxqmyr27JVC|x;|A3IY?u86TV
zMoFphfI6U3J7QNp1L-}|gh%sM2EC*idNuH9jo}qH$hR|aw_aq=Bkw2Fj4lFQW^al+
z3j99MgV0o61xbEmMb8!_l!a2tY!pmhh8*=BW0|U*deLd(Ef9p>v`tsIwn3<bOHj)x
zXItQnRlI<_#&G=99zS(DOp#Wi0}WBpsHtQuYI#rcJj4$THMKy8WawxEU~(|EY99hl
zB%U<l@xPI28_@LSLhuS!^ddVEyCg+LMd{h&;qdN>-4o_un(i-lMcVp+(}+UBJae9b
z%HLKxS8HU!J5*xcM(724@fSQsu80I%LS~Rc-fXZ^kPSfg);IyAd64mj0!6-w#KO21
z&oYnI7Wi==h&GR*2z-DvO`e@b<}AJC^snXxMsaWyLXH5;F&TP2fS3W(l7M-DLJp6g
zfpSb1cwSXL>jQZZ?~)#5b17}+c+dm-kE;heI9h*#1zp;@rvt{LxK)g{0EA}yEM<$#
z&q9cB$Ch<kXFU*IshaUu1NIAo4M*0M8hhon9=H!ahK1b+XO)T{n-ZyHQOc#*rXQ69
zl}14ptW<D<k{}gH2+Kn+0!)=;RLgI#Y+-}DQe2A#x**2$mve=dRG;0<7Um9a>A7Cu
za7O~A3>&7=tNlTU6H(s1hf2ZitXl@*Y6*I#)FW1i&`mHo|8zB4L8%uHe0=IMOrVnV
z-besT;=OOT2LTqmSyo!rF9vqc697(x*Y@K`@cO~_*z!>#JSf^dX|AD3D<k#$;3oj?
z>k%(BPPq@1tV5H1PoJme%V?d9TQC=AK2bP9IrZQBgLd1oPDIvT^kVB`d2QD8nPapO
zJZg^T`H`<++Frbknf`~~GylgYh5Rd0ChW{hY-bB<PUX-}<sN;Voc(21;ET97ecp|a
zbuiQC^v9v+H5c3C1y+I<G<SZtRS-^bRbKKWO$2YJN3AST&1cWk1qtorw~Twv${;t0
zIHt0-BVFuDevOBnb!TLuEYVZnwm8B12M_)l;C~5zetwf)SHtv^19|15$UpPxJLx7F
zi)ccyDP<B`fb1Rz8R)!m`HR#{DhbgtFrp2a`E1l;B!NZi@SOdJ3t(b$hzCsM4Q`tK
zpwY-@Rl{q4kUd5%qbV+eMiy|={HRV!xcx7c%vo3U>8$?JBypv|0S4L(I#|Ml0yhVr
zyxSZEE)}_H*d{$$kE5}Jeor9pcUA^yA+5I1fhp2;<S5ea@M2d;H4Og1n`%JG8MM4g
z#L*xQ?^$2QW9WU!VKQAtz*zb7*(?HsgWj;$FLr5xlVAR<tdT6{wO4kiVth3(09`VG
zBBXQasAN$V(AR@!B_*Aq;{<~&{b3M<7QudN<YxRFR7ID`Uy^T5fm$X<a;mSbg{FmS
z9fM^83d&f^t}_=)J=b@`fV2f*P6piCSyOeA%GSs9FjQzGa4z2^3{5ZDVChdY^eO|n
zR^Yf|wRi+&L~%KL<%H0QlG~e&-8BQ}lGR^pHE7Fy>Bv|Nvh=#sjeRA2h%IXMUOH#B
zrz8HO0h<+LtM=wS)7eUfx&#b|o&Bx^3OtKFM=xZV*02#g+r^iJg@p2ekx0FlzcjrL
z9NPNWA)rg(+MyK`Tq$ei0PB3e$u7Bqp|e(iMzeO_BzyIP%`*<;+5H_t1)wAQ**+OY
zfl&*@oC><Y1<Z!~=I4Jk4vK3l5l6mzn62dWY);%1;p=m{yxLwryJ+0RlFI6yXLmWS
zNNy%NPY7%BZUpss#nS@ytL>|6nMV(fv1qMD+(cr*5VYAWXUpf@@eUOJCPc9DPO5+u
z#X$y6g#<F>Ut5_sZ1E{DXY9fEN7i41-YUj8{i-v@10@6UE3F#_W}G*RkhV8TI|m^;
z3;3JMc-Pqt<L5g9ArO88Mie=Q=hLS{`}hcAkprulPc`nP#zbR;x*TURR6nSnb}_GS
z4%oFTPE+FRkQ9q|vbF_IR!;j!k$LsIuPzED9b)|NXC=@U|3GX*CZ25Y`9PNk((Dmo
zV+AUP)QgG2KLbW!1yp{LG1G>TUGR8QoQcKn-|t2*s+9#RPQ72Yf)hbdfyWv>r!mg3
z9G$?B36iQkNH|w2n?$uxd>`&i;(vKmvfVt9k=`1`n;srsH1X4@G&~|Nt;I+y_++kS
z`ki8|l;y3S&r3H?^IVX#o(%h%%_zBh@BR2=0^I2UQJCQ}8mHHnaYnm=b@}pVz^((;
z{!C<0&g<p1^Jm*YXaQNM8GL#AWz_3XF8^lcD=7oZTvwWm9;lR2aAZk*a9*+zZ6t_?
z@DwKhyev49@1#y4l(DQkOwUzxo0=tx&CZQa{A5A*7GA3(XoY$%<8tb++))=R#^G2J
zy|RCY3VmeXt?(Zzllx2v+y3^F67bR#l99lR2AGNS1C%aBaDIa|4oXC4;z}Jfz3Zmy
z=I*@?_BBZ!xzb`N(>K@0`Jjot7eLzJ0*nOMC}$A|0~mhE0DKy4iA|>b9msGjaDB_!
z4s5)1E3(xsTTlH&>!%hHG;WUH%4q+B;|~>6)6mO7jeZziL>m;^RekO}5ZXjs#C1fy
zf0bND=Uld5{^_x65ay-2!?-(d>N+QEcXc&2P%1CMmOkz>1@rN&ad4i167Bq>cJM3O
zpgKSDhegBl>V=2|G0yh|8ItwHz-9>2YS^9+Qy;ouCHz{O4}q8n{b`QFflbF3^!|6N
zmIwo<NImEZaP59PzV~D%^h;N0f$1a+-Z%)y=jDJ+H3SfP);oJy>O9QdG#;(*z+3LA
zOV!B;O3@A)vY1MnD8j{W-2QjZ?LjyT4^-tT7@5#})+;D#_a(<JIG+F-3t(DhG)!z|
z)HDRA|5Vd#m-I>WSs$vIpgh&wcu`luNFmk%kg-PB2j=TzD{_n-khJoUOKZ;X^0iCL
zHP5~+Q`(*~tB!ZVf!M8DX6flA#xoMg?^uOwYqc`qKl6zbVY_|=UE0NHgZkeZ@^$T1
zo<cy?ZsCLC@88}%`AojyepEE(xOG##HY4^pTkCCcx*S(o`N3q@mAtC^k$;@t5EO`e
zH2>m@FYb&%_`6ae2I26@I(3`s%jmByl`3n7zGc>bBA5E(UJmQ_R&Y1%tE}nSQ*?ij
zkx6v(;+SMHcjtEwor-gN_phI!I0s~}m8=ILYwSl?j&-LG-R1DG`2T%I*-5u8OWu@w
zg!uZ|w!9?$@b9YwT`<V_2BSvVe$Hoh{b!AJuYBp`Ip?4>FJhpS>O5|3V+W@}>)Eah
z=e2#S{VwC@U;-<0wM=-!n|6`<q!%@_9%murzsgP(r;#LeHl(^{`|~xvPI-9u#WMh>
z@?UJRmOL(%wx+^7I;&x;MrgB@1S1N1rApC5hh<Yk0Y6sSJG&?F$gog;X`#0Hhk>U_
zp)n|zsakvEjqG5>@b{725phuC49<nN9S}mVnhq~=Em6OD9R4J;xNa7$u=YArn2nDE
zRo)o$KdO80u&DBNOBma>F@iZD;h-X|Hey0DD5$8Y2q-8~KqY4c$+jXW*@zNFlqet~
zIh2AVm7I#41qzA+fg%;utX*`UJ9F>M_k8y}GtbQZuLEM$-oNm^>s`T)ajl|v&^CtA
z(AC%Iu=ny_JC0dKLQjCq53+=U*XK!pae8SX2cNVR8DGTjJTItCJxYZFc@pk6#d~5b
zW?$Z0U*zMJ!;~^{8DM4>I_F$!Uz~FOUb@l>1mT{reU~k4E9aj?pBowdoWtHI6+0fn
zBhM6+b|ylhsxpVV*z<=QMfdE98`lh@MBJ`9EG#p{NT3Rvx|DrWlHC&0b-yGce}Sa#
zFf=phW0~vZ@T~=w991=M6%8vGtvyNsT;n~5g=P6(cj@riw>i*EglPFa6<##S)CFTI
zuj`@JrgJspDUKtKy`RfeV>a)}rN{5Mzsf6Il@hjf#}Dk=*0vviT9Nyx7gDY{8B}sh
zjeXh~q-{60p;FrRTU!R-rKp=FbW7HXV_SAr<<h4~%6L&vrOXBxd~UI@uTOi6LT$jI
zP}1IwiPth*H#6_+>$@R9TE<MFK6$EeAkFk;kdQ8&(W8{%HrieU@k>+h&n-Hp9hCO8
zZ*NJwRqhj?BCi@+FdK#f(wrq4WN0;@_UTN_MYwy=tJ8+Ku?DIJ8irDr+#|v6b9u%p
zugg>9!{g048twGjFDuqCYj;UY&xcKQ@YK7X9tzP6yHy?NCp}(p(ud=n^(UnbyK@`5
z5=XyxaBP44Jbf=~N8#<bu<`gjyVoV_;?Psycsc&c9*?Z6?A-RFk$Uch?#UdVEj}i_
zI7OyqROZJS8v|C?r4Mc2j=yg#wZEdwsSCwisTuR=c*c08RDabyj->R)cB~fr+CeLQ
z{q9J1o|=WkMsQO()Dt!89X^TrF{hFW@Tqe6T*(WA{l%-f+J_Q^B^-t%Ouh%OcGR)s
zYMr`rTUR;WyON(9d8MeIwE2$*=7l6?QrkD-?{lVZDk_naNg80FH>^6$x$o&dS*NN|
zK|YgI)i{+77s*i{Xxu|CiN#qx0>k;;m6uJa`hDK(ixfSsIc=z9oGNkfml`CmJtHbL
zb$6XByUY|>^`C#O`Y}t)xaCgYR#*^|_^3-AZK#WgIXU!mpo(;TuqJS~S87b1<XFPO
zyd0A_5VBPI%=*RqJT^>`6TkA8)Xx}qPg~tKn!DGS^UbM8wN}MFSgb2{r|Atk_pK9&
z$_A&Bw^${|=+CT7?f;$?e=;>tmBgq^g^^32Yk+jF(O5U@l!A|o%+dkt9`}`VKEg&v
zu9d#}Q=T+G)2J(v&u~g`rZG&r?#A$%+4kyr(QK#x<Zq!)cR33snW_QP+(xR*%{(48
zY2t9*`<a_e`h~Wv@gL!KE_ve>Qu|VWEy-LVE0X`J3wxMH(oL&DvE3!3aFvpjEzLYp
zcCLHevp<yYw<CFjv*)F(PN%R>Fl^u?te%$1-&-d_ZxNO<IbFsoaPIt)@F}RXR4q9<
ze|Y8wtufqn?2$9?@|2&0Tf!sK_fm&O@`~3iSajqiXuH&JQVbGWRhVR2-(8)q#N##^
z855z!q|ea^qxhx@I`w^|r9EY|)j(-p#*HG>*fH_BMEj6Z-p`5<5@U8qRN6_`itcz-
z*s+f)I^xcFlpsv{nUl;eVr*B<!`ZssS-GqD`t|Et)`cP`eKu~ZcIcd%&lggUHY?m0
zZ01zNGXMH?6yjY{V3Ng^7=8IOo6eq`i9a#colsi~md7E^CyKi&!(?ep+KZ=8wO*fi
z_x)tq)2AK97u=$HS~A+)9nw?pKazabJQy%6M<H^Ga<89BKN-94a%^UM&Kgmn6P2ci
z8veMFd0>Z(T4kHd<tP7Mh<U>~X-S?-k@qAAIRCk}8D}@`lN!Ap0=HWo>#?`|`Xfy-
zQ^hwm(_I|NAEeVBo-NNh8*y)D)xx5KUHYmP!xjGA+39`fpG0499UL^2B-O`JMx2ji
zc0a~R;K#aDN;z9>S8$L6*K-s9`u-MNMu)5R{l)s``@6YL!9BSxp?2p3!H$E(&yj=E
z-?BNK)cAF*SCVxLYStdzcr5v9*4~}ww|*Ualp-PRQo=$5u9-Hao8bRstNeCe%7a!P
zT(ocTzwbNioi4C#(6nZYkkTJ&Vz_BN-pH-%y;@9}@O_rh@OwV1meXuY-vka};*(dG
zSjWz>B^l<=I*E_K_WyP9{wEzqJDKF1@!Jvc^X{DywxI?Ro~5^wZz_9M9lO+;;CS@S
zif7R+uQqZW33}sk_QqM|n>E+szn}Dc`u*^puNzmq^y<)esHC+TJeZzXQ`v7IOE;iS
zfw(>|-ap<rl*((0GU(r|PsJvF82~GVpGd`Ou*^+S!?=O&W)44N)S>xPG5}WLnQ~jd
zyQ5Fo7P#D|{aRw$2c`5-4eGPLwY!0r4%<9@wxP;3AN1z;bA?wZVMm##JGU^$cPZAY
zB54xr)Jt(1LMD7*A_Lt#b7n^KOAh93n9(&oSho}Gv9RbD8^cF^4_ErK9y7y_XSbr&
zJMEnG+bx{>sefYuW2zml8LGodaj<wfpJwSlKYs}b4u+E;*W_iNt=~#~q)+^PqsR{e
z1Mb<vWOA%_RB;-7GeRY96@L>JCG|a*;E~9E(kuj1DDZ@V9XgTRmR^ufyAmrkS$7!B
zJ7PEij^gdE`&&-7d2f<TQwY$hjV_1e(%)E}3O0wc?7ZD*M#lvwYFZ<FN4IXmP%0a3
zZ8SYjo%ScF%0ecDAy}(X!@Deb&((^O$LG*;0v6-fV}QK8<@bx%l=$MECQW}^J<v#U
zCvi2_Jz#xnZWWFQHVLKh+?R)MaQLm-pZOj*hwGf13#Q_jfMvBW<@^C0GflHCdkXXS
zHzTf7z}qIn93(uyvaFYq;XfB0VuHcYQ3^eR+1eIe9-<^OGi@C64C9dg*WJ=nb%Yna
zJUo18<&Soj<k0L1*qORIEdczUI?e0fo>OC^{Jpu_a;CV%ZF-?PZO(B>rc)(PfUjt6
z(wGl}b#-V6FZgqd6Z2lr)!XdnPjqeOU(1}RRr+ns?7J&t-Jtr~um%X7RgX4G4tw}!
zf=JYyVY#IloZ4F;NY;i^J4m__GBmH^*;_+E8+!tm6I?_%F73JasuTYB^3q2N^0jl0
zqM2Rg2OmrL3-F`{fTTNA@BHfcJ@&%oU860Qf}peqZ9!=R%ES8@!9AA-UI3zp<=hAw
z{{HVT$AOZgg*)OqjuCZ3lJ?=1IZ%EtP&1xXN+e*;X;7o>2BT$H&=IiQIjG7z6?AOR
z`$eDE{p*G7;E32(6?gXO@8V7qLCVg^cR~Mnxj7Y(@B=PlN;=1w8K>F@667}fZ$Xv{
z5ildzgYl-1uuK4Ds3CE?>_S5Ag?*b^Qt=}$^9UDoJ=&Yq&lTaIQxqtp&~v>!IPL7S
zc)#tkeCeKR_*U}Y0!h>%j{yLH_wY@-@UQ~G?7ruk^0#@2?uAY41h>WER~rDvZrC6<
z5~^{g<%08zr0|M#^TC`O<-s4!Thj6Jqv=;kZmu7HElE;()EuuyrNCM0Cx~}6xZDla
z#^^e<iR{_aBsbrvt8U)(L4-1n;XSM{1l!hvGk@-3nB3|x4Jokj75o`HSf{Dg?_#aL
z3<PdbdU;6T*EDeSA5y<ZA*C`0QI+H+AqNedmcJrQJHcgA*ck-q+@ORfSyT&dI;B2O
z9zTYa05=C3*y*~24~CWP8MG2T$=QJ@g#cc4&|1I}w`|IO>&|qm_U1bdiMrhLun~KJ
zL%JW0szDTguHiUdezZ|bReq7G$Gw-MOn}E<VsGO^<Lh9NP@90^WKTA<P#P^SX8oKg
z56Sog3qh9Ksy){cq)4ri)~qLw=`Ttxn?DW$2QX@#z7Kw`*Ojc}_n;e*s0`%4R~UEZ
z$?m?=M?LU;1s$XVOjd0aAp?)G2}dD|So880;;hRa$J~Df_X~A1VD?d*vT$sfA$aF1
z!+5|pl)7#Fqzeu?xHTsRs?8m_Fv}i+$ymCVcq8%d*xV((uCu}RHW97+p<D1Yv1?Af
z_nWId04mQ<Q&_6=m_WBXC)e_Eh}jKPl|hQ|;=tgKkfGtXErpz-u(_-F^k>BRmlE>;
zDzGX-@T}HTI$TAW_;c~9{SBZ|->-rg&skv}X2;D@3R7<Lzg2`}ywc9e&~eLZf`1VY
zg;Toj8lDJ_;g_<^xh=Y84YAcb;kI_pISR+L$2FKI=NtR*54Y#LI+wmOV1070yB=2<
z_sK{2yOJ}N<FQmM$?y41NN_*J{jl=U1fR|`Km}NNn91LwwZYK_+X<0lq&Ep(l`ld=
zb1??Co4oivNVo$VGsC>)d3rdKCNL#{(#(#Qpgi8V4|7`Bt+4*SPfJdpDYHLaai={8
zoC?>@PfFjONzU;xr%OZ{>p&t*z_-g5-U5%Y5zgBFYu}!i=YXdkCO(%0k5zz=@K`;l
zJ<ILkEOhn5iA6JT?j(+kptZkYKr`Pj%OvbVh}4^$WgXIu(@nrTido-t+LR|;5n(&;
z7tws~%tF*6tpBsX@h>=f`MkNpKpw*v)^89ic=7+A`160r4&+QqCfsO!zz!iCP#}|n
z#ld}60mbIOYn%QUgx-mKt{;`}uk6RgIzw-vO+#LRBU2~e<$j6*$-8Jh;A@_Hqy#C)
zpD<pQVx11$cW~$y-&o;~0}M_U6wKU!@P3AB#1w`$xE!5ORLG6Aez@T?JGtFsmjvCg
zuRKIli}08s>-J%8vj=-&_zurIYu1zESYf^5m1Q24j(I7VIszYI;8ur4n!>ZsMvI${
zAZgBnc37Ho2vkM@=r%gebLXj%!{*K3aSP+U3U4;V-E|v28pO>^UXUFBo(ed$eJLMn
zNYi<7V-TB!0-YOk`7_e1x7m?#RUDS!#-SeZVu@?J<E9+D!E~_7g3~O-rdn4{b?9b*
zNDghPGN{o8V;=#^0}_>*>Fr6GR|l2_b^i{2{w}r>)-5i!5uOL(2f9MOKC4uc22(<f
z44-L_f%n*qkQzRq#<26fLojIv*z`gX0b5h9eRcqeK5t=`i;yhAe_?IK^F6k+(0V~M
z@d1Czmn+TS&p}|;#eNZdvTg+f)dtWhoXxP1)^$m_8tWxCjW{XH0EPR@H4oSgjA8&L
z#RX3i8vL&9;#A%`(TAmPe4S`WY`KZcS3<;Y-~kA?l1DIj&bJEs*n;8ddP-Ajzfo&u
z8TfmWfFX49+GYEms>+YW#e~P{lDhm!#TidVa*}nLt?#NT2{ojf&%xZ4W9w)ca7}ee
z$!bom1T`uigp}`QUfN^D{SSG@3Mw~M>)JHV{`sztRV#nd)cR!rzdsRNhzOTMFpuUn
zuI_#Yvh57;T39Wt<KM3ZuA^DM9QT~aHIx>_#jF42!Q@b5%w`xh$s+j1=yIR$wkP9#
z-#Xrut-=j#+>(AiHg{C6HpDXNu+=pthR`{vlRU4B2j6w=@e_$~rDwtB0MwOA95)&n
z#?COh@^nJ|Di_Lgw}KcIj}`U9c>7k=seqHBNK4Q?dp5mldUj|Gb>b%T1caZ&M%lpJ
zigD2$)dp;zgCUYTVl+yeq9{jgf9K#9yN2Z<7d5!*{3+k9&+S9+E?b3p4i&z2a4&lf
zk9Vh^WihJil+p-UcWSd}f7z1^)foRsTMS4F`n~a_0yYmG8n7bgIQ-S&Fv0|iy049P
ze!fL%h378(s+_M)2G{f7G;e40kt_Bjz%DXLIm*dQ_P(zeDp_b5&#6a<n5s1|Kje{~
zsFBAaGT>SFv{*XahKqIqZ0UAlEWkTC*fP~)b@{<#d1pvK2>&*CJ#P9iY=xeYAV6Pu
zF?!x;%N~_CP`M3SVB}7IfBzJS)gUIMfDfe)C3zR@Kn-=>^AIp_SWZ&P5aeI^=R6kG
zC=|oQjgzS@88JLDH_My(*O0os6}JetuPgDIVEoBW$uMoSM@`gag;~$!knCD66#j(s
zE`;t-`o*N|yh6#@hsf%|9gNFSjuUfpimdZxRNY&Vji=@1arQxPcZvP0Uz(B8Fi2`k
zLp}g;jV+}MTA8R*2<Jdy<Vg#4;BI-OTB)@#{xdcYT2F-Bw7a|KJ-M)#yF9!CBtXh?
ztQ&u>4ZF`}4s`oC%pF*^a-&f_rTq9knN^Msm#*f!IAT-76W0clwdeaB?6VI#fXx&a
zsHQMzYgSUjEibR7lQ~+ZTp;84^GluK18S%!k7W0}sKdg1+q1=R3b9>~!M0PobB%in
zjP}}@MI?e*hr_nWC+M`guv#v;^Y}d#PTYi>MGjpj&t%nnmuz3?P<7~VtwcK}j>irq
zYWDdMQO%FH1*mu8cD@No4c!Y&@z#(%>`5)FIzQLx!>JIu`aLIV4&OY7m9>CH%GZ(r
zvmWU2-teBH;_Nx)rJ1qt`7rm(nwwRBe==?co0HPM@#qSTHHPvL^W|%a0m5YcWysbA
zHFoU8a3N>>N7;5tj(s>>{7zf$Q)3{b&z+Y8twe9#v!_^ZB37MuVBRVH5#F+2$Zk%M
zd4XRHIea|9BvyWV?9X4|3d`($65wU%L%m{<t(L8bqP6B^88$<_a!+%hSh8lue(rG4
z%r(<3Udp&?_~v=%ALxql!BNOMEv88}flCK)VR*V^o${mPobss7&Qo^UDm18xVW_Jv
zC+yfFq`(s)q6xsEhHixH7-T9xcaL*+xY@BhxW0>!P`rd#8zRg&uof`p_eZw%hu$v`
zsnW?kkQs!-Q--{d*?D&roK3<jW%(Y7T81m`&)Rhf+%1+otu-^nZtxHoDB=+IQW_FN
zn%#?ic@pH*<5Wakdh3>n-UYozHHUsaIrpbV$k9Z3G2X`$oU;=v?tPiwxqC6tkbl=f
z`->-QLmecKPr3(PG~%5dwtqbl?(u7uTH<#3Y3Fj0#$41=hN0Fs(P8kqWp;(n%Kj{s
z$L(c;;~U*H11G=s2fH(uENgmaqWr%S=B%IZd7T`On$oV1ug9ZBtLyGCP<5~w2{~Wa
za?8&2ZXo<qG2d<`P15IF+m)!Y*GoG;-(ycR8as=#E{4bOXK$H9$9%+&liqZiEH-uj
z+!SpJHi<=x*Rb%4lzW02ng$uQ5j(rg$O@_9%=hCuz1a1)mibDbfw%HwfuUd#$=x!B
zXd6Q;cjH{_gK+F&#X=7s^9oq|&G%n$Ud+_~^Ot3t!GM9mk6jF?7og)k$Nf)px{MRF
zkiBVg{etBtAq`a1gREMllkLr$>ptHUmrv<K^qR7i?lovzm1a7X>$oAQ60V$!IRfMP
z44c%zLuh6uAq3))nr4!cMxnR$=DCD46SNK%N{PB8HzoD^YZuEDs}~Y44!<&x>=&Wk
zIAxoi>P&OF<1bCmM7J7m)?~x)ge61=L+6lDmEl1$`%RWJ%%?vUQHlmGH4<CB$gAl5
zbf0bZAAkG2?)XpG*#8R!<p2HHnZL;-|H>!XvBy3TlDwahUg4SJ6&lE6<M2u|X$zKh
z|GZf!*uy@}q*2%LMtxm)rA&(vVl*E<+}7@vqxtRm`IvJrUpVbW3`aU7gtOLqwDz{$
zN()C>x4|d=fmh3_oKcZ+nz!V0rQyO(pQ=C{8&1FxR5I4Iyh#{;q~q9MT*qQ{jFXC1
zX6?B+FWh|7jl3sxKy%jbDxk^E#;T*9WsU{NEf&EX$Jrf!n}E<f1#7kHcdbmL(nqR8
z3VdPEeOj*cL-m%+bjxtvMtNc2ziRGsg4;t@#b>o#qI8Mf=?LOD=W5BYRMJFGxyPB#
zox-zZ;)g8v8@KsWAYa8E`_ml^>?@0HtknbJ4+ZU~y>VTkXX4uQK>)MfVi}H~_38$@
z&j({0u5x2o>#=Z@JMy)<6YC3L;uRH8u^|m2{>D1TD%7~X1je9Aa?`%VEn@Nonz_Y(
zjr;4uYqnYVCSz`09^3Y&><MmK|7J{KmFlJkqT10Qxh?+U!jp2Vr*$!%4-qkSV*MvE
zHedtm7k|%M_WuIw8(o$QVGP;WO@zC#jxO$P&|QK-ZJ4pdt_p3(bD@xu#U`wkhrtG)
z7*BpzqI_!BkF87YxYpmq<GgJVU)Q5`vRA><lkf1&i4nCHqqQo7YmYIrFpN#<Ms@q0
zQ}&P6T*q3VKJeh=l57R(Dd9qxCj54CU1mNk;*XI(lHFit^Gg0G&!GY7#Of45G~0t!
zkp^T=zJ;QX#)si>>qc+tGw||<2x$mXsrf<+bzN;#S@Fs_=U&zhHCkSQ%fMe~=I<j*
z>{M#}&ooqrLTx(dAr!AL{%WcXBttmqs-|>{Z_&Cq)8(}ty>}X1w}Z57jEC1M|FbR8
zqqX7g)5Z;@><qrYz}e7dV2<Q<!Y<~Ug)~AfG~ZuaTx8SReGJ&<yM4-EKOKcj6RMgy
zqGcmTq@ksToVFYr4CyWe9yyeFt2ls3LFK4Oy_hjFk80ki`^z57{HAC$N^z5abqLTF
zxlh)MPHsPP?p*8Gqi;{eT?;%O#zFU$KmFM1HmWO6`t;Za2(c?f+l{21>A661An#pq
z)iIL+bgw>ZGQCa@SyJsuZJMB#pq-fz%BXwzxX*~3TDiX?`h1QR1)M^pT<{pk0KJ_Y
z5?$@LqT@m~E#E0}9R&h3=$v2H##B1ZPl^JPSm({>-kJ<5Ro~Yzp5Njwc7+1+SiSw|
zj!Ax^)f#DYK9x!W4dZTXW{f27&4M67Dv~LkQ<w|si?FnL(ZM?llmu&jYmOEmzz-0s
zbTr_XFKvly^W4!=NTDnOWtPWvqPpun&?R2C=|{lC(o80s<BGg*jkF4Zk{Jng`)A-D
zVRkiVa1G9N-kai!ow`=&$?4@(>{|vtv(kl%t$xo@xDZ7-|3^qk+)H?vS3er*wWKHR
zyF9BtN4NAkF%4qKEG!GR%TBp$GzY5u%C<iVg^DAT=AN8<vy5@!RxA1PI=$^8PG-1i
z@qB;RaZxzUL+Mi9vY)|!Bsjn7`j-cKpg*lpx`nPtda`Z<h+O%ohPXuCWI_QZo}Z99
zACi9npZX)`Rg@w}&0FA>5@}q!yK59t5dL=urQ60vH=KXXsR@m_X?^ydudGqc9a5@T
z1^;~KJ(-l-!P3t5WDrR7hsg)wY0U)Y492aX{EgDU&$=!L<4^ewX=J!Xp<%!`&SiBB
zI@}k8wA0OcJpJ6oeol|+=1uF@R*9ixi&rPXWK)$m00ECpp=!Z)k+0Ltp_f10wjR9X
zEbIcnIX^0OJAo?<HY6(A%>?qx>$uOSRUz&SC|NqUxD9~VX$ZILlRFL!XIOUdUTCxV
zR-T~F%tmKg1;AMAWB8<C#Ol>cOo93hY~}#3kzA(`uTJ}X^{^q7rWhPpAhxR{kiQT;
zaeJn<=*XZyQC{-+7j(>wl|-zLn@3NAOuVJUv9nOzz4aJrT0a$px|n@PP*ea1&0+Z3
zgC8=&y7{>{TCnIb!tkR&89onMDZ++$nsFQii`$-hD#Omx;pnV;isf`s4E2Dh85vH{
zM&$REur4}c)-L4;;BEb_1T1GX83KZW3SNK?eOV0-U{UnS8K&Hfo&X<&W_-Z05e{if
z*H0`xYM-OrF74MRPz6%A*7TDrnmTqWxVfPfP?a41#>2TZZqODb?bMXObK+}!(iQe!
zLL|}z328o0$^>kYa&K2}1wRi8C;KcLL$AWB3(}jKQH`zfLlg3GQu@r4#V4c3KXrg|
zucyQF!JET*lCrHOg{zph%E_!P+nm<pG2rs)j#A+UfKk)mgcZzztb#S~N4@%>v9NQ9
zIkl94EHo;ebVqJ)Jsl#$I>ztFALm{=0EXE=HjBal8Q&4Ncpj=stO>8qNo3aeK7U>j
zE?rV4xMi?PuSBKvudZY5BrwDM+-gZKZUf>j)9(or5$<rCuX`X@T<y0(Ny6COf;R+O
zPGpX6D5x@TvEM}khYSm<99IZ)v>?#Vi#_&AiV6TNROKCLyH^)I7En@b6l}X3a?~8}
z>&Ld3h?g2G`0SxzuWk$Y^{=LDW6_v^hj2dG3?ibzbkPp84Rfk!dv60#(89z)(;}`m
zzJ7b2Qy#OnJ7R=HvJgwVSx$k0c?T-=%kgUaRDVpUCF*b%<-5xIQ<s091M)osa2zP|
zrA&sOs0K(0LUk~hLbggUW<hYAAULKs06)uCe%PtW8EK0T>$6$94|XsB%8$XPe`NkK
zBrzVY;9C=8ETMVAZU@+epwu`d6v55rIPLGRiqOJUv^FXxFV}f02|pUIOF9ldIFv@p
zO&|K?1nj>+r8;MSK7x~RnYB!gX%$)j29s+)$p?y7Z{7@Faha)C*Cb4qy1!UTI=CeR
z`lvqfgY54x(bo8(FF`nu{0BtH4ewqOD(fRzxBqHOaNX)-X<&aY5S`w_?I^Op$iDQ2
z{v^o|QtQvYA40``JT39{rr3>bQ(iBR7<X$sv^B+68(=`eS?IazqjHo2-K`ApK07CG
z-Rq)#Xf2VF<^+ry%M5@&QD?4K`3dm;5QUBro#*O2rHBAtr&z?%+NuhJi+%wHZgr>!
zRY-1yFy<l9hH9Uc0c&xK1}Cjw_#tBQS65&u#Bcw8a->ag*t9Oz?T+h$2Z}YwLt>(9
zjQj9NcQxX0I<H>&bWd%u-*y9cFwe6J`l@Gn=XL;vga>dFW)=G2HQz)+N(rby_SDT3
z{E;T=-3na4+Q1}yZ}0v082RR)Z75dMV*$|VsGVNU0~4Wjl4QB`9K@hcV^HCsDH}K;
zPOhcWuj9MNQEy37(_4Z?5~hyaT?_~pyTr}dR>iO7zgvt}R57`M<L88-*p=@rCfS{(
zTkz}owf0|%z4jn-s$Fog{MHlF5$4}`kae(ecl}o?6#tbT=AZK2zZ)T+H)MVRgbyIY
ztqqMVUU5wWfs6F^`bMT8AadENeAMHv&8pjvnq7ffxp@I+0{m-Mounf27sel)DXxJS
z)L@T7wDTHyj9ZTkq_RpqHs{UBtoL~ZASgLTs3Ez-s<GQme5!T)w>4ac%*YQgx|K1X
z&zs8jbRxr9LBin2aK7stA2Nji(>nghvg^^Zt1ePzzW3vmw!l0pK&s|<SoP8zESo3Z
zVn%vIDO_s1sQKcI{k=M1cKI)@$m!A^0-ne*XGKvmtb&~rY^1F*-9yT*Q?@Et@+W70
z-l!ChVU&wDR^ZBskm0*o8mLE$YO_;Kv?_!AsVaLi<knET1A+r-dG3g>nw_GlCp7p0
z-CoxtyfObUa2>lAprWku{8I<{Gv_PS+I~2oDLk}|x7zBRA{%lX{%bQeio$cfPyPgG
zdo|5uaOnV$Ux;2{4YtL@ZhEp&a}ykXLHBj$vl`5KUA*mYETBf9>oEqKX%_RvsLc1N
zCvn#kX~CEuz|+PVhX|Z_T4SL$_;LV&JD25qa>w_2>Z3%4Fw7Ls3F@nS5Cf`zr5w6(
zfs?1emOdnk6e}J+Sp|P?;?y1{k43g;j*UYdR;^te5CH=t0_<jBiUI?-X&jf2XRpPC
zYrHdWp#xlGQW7jFqDC)XOwW;wGaRJWdnBK4PE-t<k~_F(aINMs)=u(2!Y+QNU2&FM
zJaF|aCVF3=3&9yfo^XAHnv6(vcc#1)P;7YL@m^1N%U1+T1N5B2{NF$_Mm)o!)*ieE
zgsI(*#f&5mO9{hsI6dDFGq70hhf8bY|EeG)``>!~?*R1WXOPx;F|LNxoNnG0S*R&u
zqBVzCp&&}s{Qm}6qcPOTu-LMH_2gPxhedqbq&>F@G;ijyJofEJUBv39>`Hc?nEr9%
zKa_*_q`d5CgSNZAzLKwe5B~Up^hzY39Ytk{*22r~Hnmx#K0)`eUV&(wAqFuo&^usH
zbr&htB}{$7c_@D_cWMbRws>H7d*Gm=u4Uav=zrh=e$l1#&si+B>Q|rdMYdtOtm`ID
z$MgdOAWx#80-!omCb$$MqD>d1C#rV-uPVhOHl<HB)0~9TZL2BowNV=2hFIwpX}cV`
zKW-L-SY-bMuDg_ptY_FgVWk>lgb(qQW6`Fd{W`f~p&Hp{O~qknoK7c9*$@w-w2K74
zv>xd8Jhw`)-aObXhkUkr+?hry*hqDhGoC>~7n*a;RJBB46efVjl)c=UIX`n9SG}gg
z+}0wqYZlcw)%82Zt4ijw)7SE#58QR|U<&vjUGGo&sJ|v$dsc0cacneIe75(Qs8Tyb
zEGN7+?G4><cX+M4f)_up9~TTTG{^|D2?Ip$b*eO{Z~;ada1Sbb;!ZmXDbD*!fGJ0Q
z0^oZ+AwDo&(c(<%!8px8!Lx26>wHK9`_H|KL?PIjYz=6(F0S19<*#A(Fa60faDd)d
z2<X>xxu!`9R16qvZzhcW=MhzgtVIkB@Pzz-0gVo91Pp_rkiW%W-v;T&ALSnkh{}))
zhDadf_vPpSi8$MA0Y#oKHS|6YPxQ@>xVG2*FELPif6~<TSK!(0Le$!5C~i1Y101B}
zei`^UXuAkqY~=1`lc4_O$|--vw0blk{jgo)cH1qH*YA%0nv6kng3f$!9UHQ8s?o%9
zxA2jub=WA9BbnnEMa|&cK?%3=kzHvr-uF?;6H$ofzXeg9sJ&%Rkbn0g(CgGyTQpM8
zmOPQ*k*t5Z=Sg9{ZU0pMoQ0d2VP<Gx;CmpTc~bRo$1|zRJPMo~=!_3_c~d1PpCd-0
zbGJ(hA1_|K94Fal1Uypm@^6kR#Z*EoEHU)%10es|AYFeh>Dh1Z{k9&=HLT>_f|O)X
zZS>i9U(ZC^9;|9N02Q9KB1b7?BqS%<KvT&LQWZ!?kQ2GOR!ZM;$fJPduza1>f2{YK
zg<QVVNV=nVPoa)Kt`cnD+UPcT>C3Io3+kU4EtCOC#jWpIBmB&7p)$=KJ2eD(EOm~D
zQxP3YN7CT9o9lgI1>7OE;|Mn}J~UwWTFS}2w*M8ZcR;DFR{TYEk~(FLdK~5}U&%{W
zHH{35rvlIj#D*qhA2=^ir9rr5fS#-zH%$Kc1ut#kzp6J!fcl&~5)3r;3q)%x;&i>y
z0*zHZCeugFn;Bq~`EEUU=u2x?JdEDWg*gwS;mx5fD1orXzIys2l(%v}pn&zG&-;75
zT`zE<O~kc5SwL&?GwaCtN|#2EK6!82w_xSxgJubJ;6aW32Est4A7dJQ;F?(ksx?FO
zVmV2TDFF_>O8<eEu=|eZ#3Gby)hWlu6ZDrv`q<w-Qhyf;|68h!{|A4`qm4c!gg1H2
z{~OwN5bdp3YZfNe%Cp=nwoSY^Xn;zTmsKKmT5Z9wUBrpwp{*ZRy{Zp(6z62s^W%&4
zBYnNT^?Rf0?)RM4<4NBv0LC5o`pUtX&WRsmqQru+ao62t9p)YR()5g{81bOwN`!m_
zF9>C`4n_>aY{dG<((4*8o=$-E*#9_2keps(M{9Te8kBqyl!So;8h3XNs~Sps*$+Ii
zx0%Q<eYUSL#4?@um3GsRy0zJBhQZ#ZXo05Xdh6NRHSQDDUV{|kIt0V<BsK7HB~WYt
zAONrmqR)ru&n1J;R93bv;c|{dvF^#mHNcKAnTIL&kW}j_nfhaM+_OLtuS7f?aNsYv
zZr6Jd?vPZftk<Dn0s0Vh=9ds+iItj1iQk9oaH8E=d;JE^pX0P3palrFs12`xLeYJ%
znp8i=vxDt<rnqk;97cj4KVILXv_dy>bpA|+(3STG{=QlmY@)s2;+}-b^YXN0HJ>`t
zB(CAIlRnq7Tp@;c#0LdVgxFXMA|I0Q`wKiQiMz#Vas*~{95JYDtSY6aPPL&0!&Ur+
zOC)Ix6_u(%Yi2So9AAu_kljc{yGaaSDVz6ap(2G3o&?whe=e0xB+l3EH!8!UjBA5%
z1R!*N0M`(@f01}#<1)Th7-bg-L^4bGrdBO+A|Qj7%LGA`Q_6jTRR;t#C26;S^V5eQ
zr98&ZeXmt9Dz<DKNsLo9^yL<xeXdE_wTmIcIgbJkGb<}FEFpi+?eYxH@!uv>E!uJJ
zoz@J4yl(gG%C{EU*|}T1&z!M#xxbs(|5lwGv#SSwL!}GS$CzoP+_I=laWmr>DbUmO
zNjHxX?;7e<05P1*@d)N>FQgEy(3?QJCNBxEArwEaEmo{}2z;&*Ac_%YUWw4r!(nE)
zF&P5~`)uH5a>F6uH4Qu_6xT2iBMhh@pn`cVNPc^Z?5_uxS?1Mu5mdbPycTx8i8!@H
zr=bS(C`H_vms9lLuH8YJRLemri^sJ)+n_dD7;H348Yi<aC<>!q<@ig3Rr@c#I@VvI
zEq`$VKndmv6A00G@ZrZO88@6J_;mAAjXWYIy&${F&JF)GX3v_X>?Pa;@E&0jQ$>Cx
zIH`FFMp_za7T$-9h$quY8@^V-e_mT}XWHZD_FKmOb&B+{%O0Q+1iyFz52z`b(NFiV
z`3SSa(x-S_xl;)R0&pVx3VPkfX0!?@Jm111<~;a;+*ntX^cD&#lef6Qh}Q!GBRc1C
zd`DRPID(-uhZq#O2>8u>G?^?0IdzuavLYo+)dJgy=*}ah4T>j5d-WLj`-<qFVXY1U
z+B&W@(~i&={3!r9^g<UgzJHwP!jFTjaQbvMEC|{_^nk}%jI@(oi1;`&*@`Ee0_Y(R
zH%vofhcD0Pf({D6IkTEKWB&s>x8N=ERDL$s_T~grH@HXX3Th8qXl3Y4H;4-eD-dBW
zt<dGR28p~PIFTkU3o{Si2dH#jLn*=U%Hap*8<7ne59*@{Cb;lJ_L)6l>xTuz!vh>j
z@@xdtqg8=#e!TKqlxA=FlML&g-9j3<>(f_msvzddm_%a+p9Ab1OxuqbYuzl@z{KXf
zUn5SrrYMEvs(xVY{yd*mYWt6xYb=6bq&(7&JO1qwTZNW}nKTa8%<1EaBP{`j%py8&
zGjBmZA}Bnyw@zy-iP!%qCzWIp_01g0yO;!;nWZ-cUO{GU>9@e&P?px{hD}LF(4Xz;
z=9<GwD~Oo;hp2zOE!MS&GbL&egNE7$b@{<B<uHye+I>E}63)!{i4x!Wcqp@~`v@GF
zPwEJ&`puFmXCer|yfe`Dz|sNfJdFeKG5g^A<<?Q#4}9Epy!=aZ8k6~WRR?oap6u0n
zbl4pxNvapb1>zyXJu{dj1h^~K8ccGJ`H8{W*M)%TPxu91^|HSdA?2u|;`s*rtG9W(
zHcm}k%lXlkGl{7MjFU(Vn@dNU37vOfbLLp8o-?vyLyo!<rM2SOvl76M+kxFe;2W)9
zWNX9oECJB->u<<jzXgVjm#jLr8)5sCvNPbHMH<F|xXtWc)2=<x)yyysN?$LuB8-0P
zzH<g_3^wg^v#1*wlgMaS1Aw#L^4;Y3+RFWK0rvJ3JRgksX?29N&F#<XeT+m#rEF8s
z-Q(QnhdKzxG9ve&AMZFHE+roC^)yR4szh#r(Q50bB%MaauHu$v;@*R2E-ca$wkA1&
zj4nStM<h$r<KP^r4EhO1Pv3wQB^k=QXo2I7ULQ>UIc=bcC481g&`3otfK%FA5taiM
z`AMH}8(0WoK=Mj8#zB4_c~rbd%}(520JnN~t8{NQE+=14?A%858TE<IG#q;XxkExj
zxg`rc+(%IQEnJ9T(dQQQ*~bMuoDYGc^6~I}`3Z*LbC3Kk&movc%uE|70hn}zZ3KLj
z7e2EOoix=yVlr_W%p-zVxZH=&`CT=Ps-MyeL^VlG`L14nT>Wqk7_&uN4gqV|10T#F
zApH+nAlYFkRG;VEcu_0$=B@HzQ3P=(RA^@xr<W9H10o%nog8wQJ59^WFc^?N0X^s<
zFTg{_RmN!`lAwAjIuLE(^11t~++kkL(6mgWfp&h0(|QIa=(Z2ENO>=q{Yo=<3dX&h
zI`a9v&M{I-!j~U+yj=>jzv%6@==s1?s*0<1Mxzaj6xmIZkDvbj$Sv_%*iiQ0$e($H
zS|Hg0&(EUiLy^wozCamF9tG14?pjUC9=s<41pp2@tq<4FOe}o*2+Vh*P*W%cJYzHR
zXjhN_zKz{9fJj8*dR&a#bXQ5EuH_{Dr4JYEuT?qzL^?sB1?}5DcFeDcvu~|H30;*y
z50}Q|oJ8CR$T0Amg<`p3D^mfkA80!!Sa6aRn~KT@p6}bLs=K$NoC?_SBh1Ilmp8SL
zcHDM;cFk-3>@Dj@a@Kx>wUtpuOwHR$<NGe+=Ch#<fEXM!b#v^^%{ss!lAy;7(;pQ?
zEr8$8nv&m<@A$m>RaDTLQwJw1HXYUQIN;PTxnlbp`)S(^5zJ8FM?zOd+bop8MsgrA
zJ{)4zCC6I1dj-VwnPJnRN$W*&Mf~OOE*8$6pWeQ?jw<a4H|5`|>aeY>^6-w>e^NJt
zBj+C|zKA>Rztgz<Kln?|q}-zxZ#Uii`^5v3C}LhN{cVEN4}9s@M%Ah+L%2|>HE$Pt
z+B=1H$044rk0&OxHJea)-bMG0lqI$7S%^vS-nss&v+dB6gS6`98YxGrL<B>=9135A
zmT%)}h*fs|{-Rph8N&x-!L!Ur*is;7+`!1=59iN!X${G`d_MOuv!#z$%3>h(M>-P>
zZl8^N&=qyVfH8XW_>b}+sL|0KdVF+M+5%GDB(ko+4PFLs4NX?>-DzcA`fkZQs#o?k
zT<g<ODOS7?&jEH1m`rQ<8q_bJGg?&y=`kCB50sVCfwM&I=ApVQk&UP;a)Vakp4&G2
zbdT*K2ch$T&F^_0qnH!_uA4tB-v1P47tN664Au4*B0~0y*e??p?z2WI*jvTK>%K!u
z$^4Z7!yly2OH6v<I}w~+qT8K$ur8U@9*<g$$g-P+(-+}22t5rdtIyzqS6<ATsQH%d
zKobXnI7vGPPTb2PRlxUKv0=9k;MD4i7@luE${3GzE#7A6sR{=`z3djqY;!@YkG>Fw
zVE6&dZ=N7(+xy1XP+keIvAN0Z2T=Qx7mQlc=fS`{CylJ_fSRNr!UJLSBk--2bGXvJ
zoW|UVVw|yGyB#FC@!n3794oFs>;Z?3hbY_@$Q3j3#y;5i-qCww5){Iip*Su*=aE2P
zD1(v|kgF`tdEf$w!X_dCn?IV1x{%+aGx2ycjrlB&Wm7!5knb;3FU3zJgW!l8Lt$XU
zej=#>r%oj}d|;G}Pd4_{`s=<r_9rfj{n)&yepF%b0MefxluszJ%3d54heYgra4zAA
zej!4}ypesCLm5G))I&spN(<^v@8>E09w9%zXC0Xwjf;sG>`11Kb`@IWXI&_{K+|z5
zJBfGva7;HY!3(*%(jWqDJT&k=fHhZlHvkmMd*BuG{uVVEN~~7gGt4}|FW-@Fz+v+c
z{Iuu>V&vQQTc-0PVCRATy9EU?QGTtH$BwfP%~0q-9gJQnby?yjjR{ko?_Q?DT@}oj
z3_7^dz^bR()RV!rlV!SmLCW)X352*deRJ2zHyiwb5^Tj1JF?epCrD0=X_x;eqvU_|
zhV$R?udt`orCd&Ew4VzMkZJziEM<PGDJBBY|AxqQ;kKB@CTCM9@DD7S*6kvVVt*Vp
zuDRX)<>4ZQW;#T2+Gi`8m&y;k{LB2g1{+MFu+TJ<ouBJ?2Hy5sg2-fFxTevvg+BKW
z)K$J*4<9~+L8}WKk*Zx$bW7Rv_JbuN@)7C>r@m+E;Lr>2s?ZJKBLTc1=n#pTjWBH<
zf2OVxodbH}+n+zmS~9Jl3>?t<V7p*rW4E=YQd;`@=>%NHkDac(JzK9RocBjM=P9D1
zMNtU*Jhzqn&c4iN!7>@fwX>Cp-7F#|<Jo%pTUBf}eXA>QgqY={uh5-#9b_Hr!zV$O
zb`4%4<jXpQuDJ`aHY3|V{uQ~z|6#DBXkl3uYSf23gdyfH%T_LaQn6pIlS|z2oa1$w
zDQBNmkSOsKjN`&(-7U<R;E%4DYHztVP^DzRK0HzTElG2#1(lJ#bGl8R4{$#nUs4A6
z1W2CriwRTPZ3gZKs6g-X?67!$3X|ToVp?wU7Aa(4<=nufO`5Z?>?nSsv|r=xS<IWI
z#9ahXIj(PE2aKhiqVM<@0}Er>)|hQoSO5;K${CjvZu)UagOkIlp6G;0;EchXCFpW`
z9^}tfpO<aH#MV;D5WYsyTiu;e(j(>gAv%ziEf~SJD^}vf@OU?q(a{jC2CkA-yCV}f
zxm$mz>R`7|GP(9Xc3OgJe-iBcv8fspHDy^ZmT~_vUV5?b%XCyoXxyrF(kMY*d`UUh
zJ<(PB)!tnPHqrOpv5qlg3yv_!ZGKkMBFh#SE<E<^JMwA3#T}7f32ypC)p)b1X`<H5
zcyC!pyVFn`uCQ}v3U^(M-=6I^L=r)P#~AXckT2Vk6!li-*yp><+{uQV4>!xXe#7<Q
zhk}`by9vOj0N8=$$P@+%B;TxQB`}{2f^M~Wb2)3cq&C+S8%CHm<hKp+cl>d&lMfDU
zocAszyP<RNk!K#dQSnZVI*Y5r;}|2%p?SFH-4%`#4;~h}+jo8nkk4_M87K5)f)NvI
zsNhb+IWxfh_Doj)g7Yw07(}mNjkqggjHwP<`t30#)HJX4i@rv<Hn?YOLF!8uSOhcQ
zU)EMgrD{#@?k#;}J4w+sAnv43y800}j{z@|`PHRTYFxk63OcKw=)<A96Tj|=ezqaH
zJONH`9Y7?L^0QA3yhLC(q%|^h@;&_4B99fi_sP~J((4aHN88@08=!dZ+;;$#v7z=F
zFE1L`^p+{`xx)WiF#O8xjHtKS-QMw0`3z((Z1?yz6&D`-FVVeFaIJ5v>0NunQ!nE7
z>(5aE4XY~cTdf6;Shios&8{RnIT|3l|J>ON9NQd@oHp7eKwaJnDi5_>RMW#N6dPfr
zRiWeo38(~I5=pP^fmRpl)#0At<CGdLy~lZUrR=8R!RFCgx#_a5@k%d`Ua;lXD<8CM
zcY(btc=SK-EaBsEwF{Tl#+AEJm3T4Ipm3o-BIv%bA#1@;Ck)rF9)NB5EIc|t;MIb<
zFph1e<C@k43P<_N@z~S~3CYlM1XS#a*+{GI$*aP!A*K3UJw!>X#chB!fhCr8?K1<M
z%rmY_^$_`v@Qn2~)GD|Buyj55;%zq^BsH#sVT|6(vAEZ_!%Y&OfN5ymegMw!_n<Em
zbYHleWy8a>zSt@`&;9vY9gHswhsnwqChed~nRfRF>8b(R_zCJKP?nSaq2jQu&AGVx
z;i#gpbcV}J&1mXp=_#q{(w$Q@dh@7l5vYO~Szhka<#wBS;Eh~${ul5d>G9&2|3fbZ
zH5|>!+{T7TAKR;*A8S}y0Y|!(>MY9Y9nx2sWmV8egBHY3;W=V-j10T(M_9!Viq-@6
zrUI1LmsIJzj8UVngk?**kjXn;l11~!GjA0mwiWaV=WnHxmhMI}qClIFy`;u2Ed&X?
zJ6!R*I%&ZGL8S=AeNd-*(mNF6gDDPP#+e7tR&8b|+>U2DPEcDmY;ce03*#@OS!y9q
zu^f9(IlgZ2a=aGC!orB-D%d(Edh<Kp$X=3J)8pjg`TSPf2cGh?++6$t6~Q6`s?pzb
zTobNimDu){UX7^$boq|k?ZB06yE9J}kn~=U3CANLP5S8h7V}wd7$YRdgsPYoc}GBO
z^5U>zlGS4Izp!`i<F5(}jAg+`T?Gg(ZJ4nCw<m%fI92h?aknE$^oad%?AlQQLBrO`
z0(@zmd`1>}=WfI()-+(8td{Rm<l(`iXFW-2MDM-FnU7kdn7lH}p5(^oGHXl%jOTT>
zbVF2{NI~a@-M%o1>jd!wvzVh45{|_{BMiwzmBioPw%NMhAbQ8i3w~6LliO~kK`&Mx
zRpN}o%-5T-EPugCYp}*J)bVB(mZR@pezgh$AY}CL-N(%0MX(I`Qu%s?f@sH1dbQ<{
zT2c&hmMoP)_D2CW2I8Q^HX@+HrP=sK0rTK6zE-GH5SNHW?%N7?6;An#Rl>P;<oCz%
zfjF770~*A^(wUs1bodp_zPfN^!3XkYLgTxNN75w^*2&9_W`KnNO~MS>pfXW&O7ryF
zmJD~-##QhvY=89`+!(iD`lR*eOzS8mu}G`h=w!652(5{jrBgTT=*ja%6Y!1KX&?@+
zlLDb8E%daDGmP;_3`bTd9dcuke_O-LxrG@2*T?I=Ubx5Zj?`FTWN^DRyxXS70HYL<
zymtewOYCpfrjY4@F_5IYftcEs6Yy{>Xt_Hrka_dlbJrs8jxEZBT-!7$F6(A_^33=a
zkV-{WoOzvxS715(F~Oi_q@{!<ygM-oUYCc^uk|TBrUes{gKwTd0lo_ZV9VU<9h1$7
z3c)pWiJ~`s#-J{CokQDY=XXnJY-~$R&YU=YNf>+w?Hv2o+7ql;kALv4r$?E}$<c?!
z;i?<9zi8F*uI4mT{W)RG^$m*8@mseCRYO@VKO0KF6ziej{hEr)J=*#Gn>W3vB~LsH
zJRhU@>B*BP@?L8n7EhC&KYlE<GFbJ#yD6BsQ#Tw(z<R@2DuSjot#V(u7-e|P=G5zD
z>-C4~iu4vPo=z#W6#Pr!;4xq+`-_p7++QF9L<LR}4J_IX+nsrV#eev((aJJ8+1QxO
k2$Q#PY-Ib5c<M{pN~fYs!nBj~iM4v><b@MSa@X$uH+I$kMF0Q*

diff --git a/docs/user-guide/tutorials/prowler-app-slack-integration.mdx b/docs/user-guide/tutorials/prowler-app-slack-integration.mdx
index 65be6a94ac..f9ae3f99b1 100644
--- a/docs/user-guide/tutorials/prowler-app-slack-integration.mdx
+++ b/docs/user-guide/tutorials/prowler-app-slack-integration.mdx
@@ -58,12 +58,14 @@ Two of these read more broadly than they behave, and both are worth understandin
 
 On the consent screen, `chat:write.public` reads as permission to post in any public channel. Prowler never uses it that way: **Prowler only ever posts to the channels authorized on the integration.** The scope exists so that authorizing a public channel does not also require someone to invite the Prowler app to it first.
 
+{/* The Prowler UI deep-links to this heading's anchor, so rewording the heading breaks that link. */}
+
 ### Why a Private Channel Is Missing From the Channel List
 
-`groups:read` reveals only the private channels the Prowler app is already a member of. A private channel therefore appears in the channel list only after someone invites `@Prowler` to it in Slack:
+`groups:read` reveals only the private channels the Prowler app is already a member of. A private channel therefore appears in the channel list only after someone invites `@Prowler Cloud` to it in Slack:
 
 ```text
-/invite @Prowler
+/invite @Prowler Cloud
 ```
 
 That invite is issued in Slack, by that channel's own members, and **the invite itself is the permission grant** — no scope bypasses it. Prowler ships no in-product flow to get the app invited, because the decision belongs to the channel's members. After inviting the app, click **Refresh channels** to re-read the list.
@@ -100,14 +102,14 @@ Prowler posts to the channels authorized on the integration. Several channels ca
 
     ![Destination channels selection listing public channels and an invited private channel marked Private](/images/prowler-app/slack/channel-picker.png)
 
-2. Select one or more channels. A selected private channel keeps its lock and **Private** identification with the list closed, so the authorized set stays readable at a glance.
+2. Select one or more channels. A selected private channel keeps the same **Private** marking with the list closed, so the authorized set stays readable at a glance.
 3. Click **Save channels**.
 
 Prowler validates the selection against Slack and derives each channel name itself, so a recorded name can never drift from the channel it belongs to. Once the set is saved, the page reports where Prowler posts and runs the connection check over it.
 
-If the selection reports that no channels are available, the workspace exposes nothing Prowler can see. Create a public channel, or invite `@Prowler` to a private one, then click **Refresh channels**.
+If the selection reports that no channels are available, the workspace exposes nothing Prowler can see. Create a public channel, or invite `@Prowler Cloud` to a private one, then click **Refresh channels**.
 
-A workspace can hold more channels than Prowler reads in one go. When that happens, the selection says so and lists what was read: every listed channel is usable, and a channel missing from a partial list is not necessarily one `@Prowler` has to be invited to. Only listed channels can be selected: **Refresh channels** repeats the same bounded read rather than reading further, and the selection's search filters what was already read, so neither surfaces a channel the read left out.
+A workspace can hold more channels than Prowler reads in one go. When that happens, the selection says so and lists what was read: every listed channel is usable, and a channel missing from a partial list is not necessarily one `@Prowler Cloud` has to be invited to. Only listed channels can be selected: **Refresh channels** repeats the same bounded read rather than reading further, and the selection's search filters what was already read, so neither surfaces a channel the read left out.
 
 Saving a new selection replaces the authorized set: channels left out of it stop being authorized, and channels added to it are authorized but not yet confirmed. Changing which channels are in the set also resets the integration's connection state, so the check runs again over the new set — reordering the same channels does not. Saving an empty selection leaves the integration with no authorized channels, and **Test connection** cannot be run again until at least one channel is authorized.
 
@@ -159,7 +161,7 @@ The Slack management page reports the state of the connection and offers these a
 | Button | Purpose | Notes |
 |--------|---------|-------|
 | **Test connection** | Verify the credential and every authorized channel, and confirm the ones not confirmed yet | Posts the confirmation message once per channel and updates the last-checked time. Cannot be run until at least one channel is authorized |
-| **Refresh channels** | Re-read the workspace's channel list | Use after inviting `@Prowler` to a private channel |
+| **Refresh channels** | Re-read the workspace's channel list | Use after inviting `@Prowler Cloud` to a private channel |
 | **Save channels** | Record the selected channels as the integration's authorized set | Enabled once the selection differs from the authorized set |
 | **Disconnect** | Remove the integration and attempt to revoke access at Slack | ⚠️ **Cannot be undone** — confirm before disconnecting |
 
@@ -171,7 +173,7 @@ The Prowler Slack app is not configured for the deployment being used, so no wor
 
 ### A Private Channel Does Not Appear in the Channel List
 
-The Prowler app has not been invited to it. In Slack, run `/invite @Prowler` in that channel, then click **Refresh channels**. Membership is the permission: no scope reveals a private channel the app is not in.
+The Prowler app has not been invited to it. In Slack, run `/invite @Prowler Cloud` in that channel, then click **Refresh channels**. Membership is the permission: no scope reveals a private channel the app is not in.
 
 ### Connection Test Fails
 
diff --git a/ui/__tests__/msw/handlers/slack.fixtures.ts b/ui/__tests__/msw/handlers/slack.fixtures.ts
index bdb8e3220a..ec267fed5b 100644
--- a/ui/__tests__/msw/handlers/slack.fixtures.ts
+++ b/ui/__tests__/msw/handlers/slack.fixtures.ts
@@ -73,7 +73,7 @@ export interface SlackConnectionFixture {
 export interface SlackChannelFixture {
   id: string;
   name: string;
-  /** Private channels are listed only where `@Prowler` has been invited. */
+  /** Private channels are listed only where `@Prowler Cloud` has been invited. */
   isPrivate: boolean;
 }
 
@@ -332,7 +332,7 @@ export const SLACK_CHANNEL_NOT_FOUND_REFUSAL: SlackRefusalFixture = {
 
 /**
  * The channel is fine, the Prowler app is simply not in it — fixed with
- * `/invite @Prowler`. Identical `detail` to the refusal above, deliberately.
+ * `/invite @Prowler Cloud`. Identical `detail` to the refusal above, deliberately.
  */
 export const SLACK_NOT_IN_CHANNEL_REFUSAL: SlackRefusalFixture = {
   status: 400,
diff --git a/ui/app/(prowler)/alerts/alerts-page.harness.ts b/ui/app/(prowler)/alerts/alerts-page.harness.ts
index aab52fefa2..870a207434 100644
--- a/ui/app/(prowler)/alerts/alerts-page.harness.ts
+++ b/ui/app/(prowler)/alerts/alerts-page.harness.ts
@@ -384,7 +384,7 @@ export class AlertsPageHarness extends BrowserHarness<AlertsFixture> {
     ).map((chip) => (chip.textContent ?? "").replace(/\s+/g, " ").trim());
   }
 
-  /** The chip renders `#name` with an sr-only "Private" marker. */
+  /** The chip renders `#name` followed by a "Private" badge when it is one. */
   private static toChannelChip(text: string): SelectedChannelChip {
     return {
       isPrivate: /Private/.test(text),
diff --git a/ui/app/(prowler)/integrations/slack/slack-integration.harness.ts b/ui/app/(prowler)/integrations/slack/slack-integration.harness.ts
index b3b735cad0..3504f72ef5 100644
--- a/ui/app/(prowler)/integrations/slack/slack-integration.harness.ts
+++ b/ui/app/(prowler)/integrations/slack/slack-integration.harness.ts
@@ -15,6 +15,10 @@ import type { SlackFixture } from "@/__tests__/msw/handlers/slack.fixtures";
 import { worker } from "@/__tests__/msw/worker";
 import { render } from "@/__tests__/render-browser";
 import { setSlackAuthorizedChannels } from "@/actions/integrations/slack";
+import {
+  CHECK_STATUS,
+  type CheckStatus,
+} from "@/components/integrations/slack/slack-connection-check-status";
 import { SLACK_CONNECT_PARAMS } from "@/lib/integrations/slack-connect-status";
 
 import { IntegrationsContent } from "../integrations-content";
@@ -335,6 +339,69 @@ export class SlackIntegrationHarness extends BrowserHarness<SlackFixture> {
     );
   }
 
+  async connectionSuccessToast(): Promise<string> {
+    return this.waitFor(
+      () => this.toastText(/Connection test successful/),
+      15000,
+      "the connection success toast",
+    );
+  }
+
+  /**
+   * The check's standing state, read from the card's own marker. The status is
+   * the card's alone: the toast reports a check that just ran and then goes,
+   * where this retires on its own once the channels it covered have moved.
+   */
+  async connectionCheckStatus(): Promise<CheckStatus> {
+    const region = await this.waitFor(
+      () => this.q("[data-connection-check-status]"),
+      10000,
+      "the connection check status",
+    );
+    return region.getAttribute("data-connection-check-status") as CheckStatus;
+  }
+
+  /**
+   * What the card says the last check found, or null when it shows no outcome
+   * at all. The element is always mounted — `sr-only` while empty — so an empty
+   * one has to read as "no outcome", not as an outcome that says nothing.
+   */
+  connectionCheckOutcome(): string | null {
+    const outcome = this.q("[data-connection-check-outcome]");
+    return (outcome?.textContent ?? "").replace(/\s+/g, " ").trim() || null;
+  }
+
+  /** The same copy, waited for: the outcome lands a render after the answer. */
+  async connectionCheckOutcomeText(): Promise<string> {
+    return this.waitFor(
+      () => this.connectionCheckOutcome(),
+      15000,
+      "the connection check outcome",
+    );
+  }
+
+  /**
+   * Wait until the card has taken its finding back — no outcome, and resting.
+   * Both, together: a status that says nothing while the line it decorated is
+   * still on screen would be the half-retired state the derivation exists to
+   * make impossible.
+   */
+  async waitForRetiredConnectionCheck(): Promise<void> {
+    await this.waitFor(
+      () => {
+        const status = this.q("[data-connection-check-status]")?.getAttribute(
+          "data-connection-check-status",
+        );
+        return status === CHECK_STATUS.IDLE &&
+          this.connectionCheckOutcome() === null
+          ? true
+          : null;
+      },
+      10000,
+      "the connection check finding to be retired",
+    );
+  }
+
   /**
    * The "last checked" line as rendered, or null when the page shows none —
    * which is what a workspace whose connection was never checked shows.
@@ -342,7 +409,7 @@ export class SlackIntegrationHarness extends BrowserHarness<SlackFixture> {
   lastCheckedLine(): string | null {
     const line = Array.from(
       this.container.querySelectorAll<HTMLElement>("p"),
-    ).find((p) => /^Last checked:/.test((p.textContent ?? "").trim()));
+    ).find((p) => /^Last checked\b/.test((p.textContent ?? "").trim()));
     return line ? (line.textContent ?? "").trim() : null;
   }
 
@@ -350,16 +417,24 @@ export class SlackIntegrationHarness extends BrowserHarness<SlackFixture> {
     return this.countRequests("POST", "/connection");
   }
 
-  /** The outcome of a check under way, started by the button or by a save. */
+  /**
+   * The outcome of a check under way, started by the button or by a save, read
+   * from the card's status.
+   *
+   * Deliberately not read from the copy: the toast titles the page has always
+   * raised are the only text saying "Connection test succeeded/failed", and
+   * they are portaled outside the card — so a reader going by text would settle
+   * on the toast and report an outcome the card never showed. The toasts have
+   * assertions of their own, which is what keeps the two surfaces independent.
+   */
   async connectionOutcome(): Promise<ConnectionOutcome> {
     return this.waitFor(
       () => {
-        if (this.containsText(/Connection test successful/)) {
-          return CONNECTION_OUTCOME.SUCCESS;
-        }
-        if (this.containsText(/Connection test failed/)) {
-          return CONNECTION_OUTCOME.FAILURE;
-        }
+        const status = this.q("[data-connection-check-status]")?.getAttribute(
+          "data-connection-check-status",
+        );
+        if (status === CHECK_STATUS.PASSED) return CONNECTION_OUTCOME.SUCCESS;
+        if (status === CHECK_STATUS.FAILED) return CONNECTION_OUTCOME.FAILURE;
         return null;
       },
       15000,
@@ -508,8 +583,8 @@ export class SlackIntegrationHarness extends BrowserHarness<SlackFixture> {
 
   /**
    * Re-read the workspace's channels, the way a user does after inviting
-   * `@Prowler` to one in Slack. Waits for the read to have settled, not for the
-   * click alone.
+   * `@Prowler Cloud` to one in Slack. Waits for the read to have settled, not
+   * for the click alone.
    */
   async refreshChannels(): Promise<void> {
     const readsBefore = this.channelListCallCount;
@@ -783,11 +858,16 @@ export class SlackIntegrationHarness extends BrowserHarness<SlackFixture> {
       "the authorized channel chips",
     );
 
+    // Order-insensitive: where the chip puts its "Private" marker relative to
+    // the name is a presentation choice, not something to assert through.
     return chips.map((chip) => {
       const text = (chip.textContent ?? "").trim();
       return {
-        name: text.replace(/^Private/, "").replace(/^#/, ""),
-        isPrivate: /^Private/.test(text),
+        name: text
+          .replace(/Private/g, "")
+          .replace(/^#/, "")
+          .trim(),
+        isPrivate: /Private/.test(text),
       };
     });
   }
@@ -825,14 +905,27 @@ export class SlackIntegrationHarness extends BrowserHarness<SlackFixture> {
     return this.containsText(/Could not read the workspace/);
   }
 
+  private channelInviteHintParagraph(): HTMLElement | null {
+    return (
+      Array.from(this.container.querySelectorAll<HTMLElement>("p")).find(
+        (element) => /invites? @Prowler Cloud/.test(element.textContent ?? ""),
+      ) ?? null
+    );
+  }
+
   /** The invite copy that says how to make a private channel appear. */
   channelInviteHint(): string | null {
-    const hint = Array.from(
-      this.container.querySelectorAll<HTMLElement>("p"),
-    ).find((element) => /invites? @Prowler/.test(element.textContent ?? ""));
+    const hint = this.channelInviteHintParagraph();
     return hint ? (hint.textContent ?? "").trim() : null;
   }
 
+  /** Where the invite hint sends a user stuck on a missing private channel. */
+  channelInviteHintDocsUrl(): string | null {
+    const link =
+      this.channelInviteHintParagraph()?.querySelector<HTMLAnchorElement>("a");
+    return link ? link.href : null;
+  }
+
   // --- Disconnecting ------------------------------------------------------
 
   get disconnectCallCount(): number {
diff --git a/ui/app/(prowler)/integrations/slack/slack-page.integration.test.tsx b/ui/app/(prowler)/integrations/slack/slack-page.integration.test.tsx
index 05235da60c..96292509e1 100644
--- a/ui/app/(prowler)/integrations/slack/slack-page.integration.test.tsx
+++ b/ui/app/(prowler)/integrations/slack/slack-page.integration.test.tsx
@@ -205,8 +205,24 @@ describe("a connected workspace", () => {
 
     expect(await harness.connectedWorkspaceName()).toBe(WORKSPACE_NAME);
     expect(await harness.connectionBadge()).toBe("Connected");
+    // Read positively as well as negatively (:254): without this, a reworded
+    // line the harness stops recognising would leave that null-only check
+    // passing vacuously.
+    expect(harness.lastCheckedLine()).toMatch(/2026\/08\/10/);
     expect(await harness.offersConnectionTest()).toBe(true);
     expect(await harness.testConnection()).toBe(CONNECTION_OUTCOME.SUCCESS);
+    // And — the card says what the check reached, naming the one channel it
+    // covered. Asserted off the card's own region, not the page's text: the
+    // toast below says "Connection test successful" too, so a text match would
+    // stand with this line never rendered.
+    expect(await harness.connectionCheckOutcomeText()).toBe(
+      `#${SLACK_PUBLIC_CHANNEL.name} is reachable.`,
+    );
+    // And — the toast, which is the other half and goes on its own. Read
+    // separately so neither surface can vouch for the other.
+    expect(await harness.connectionSuccessToast()).toMatch(
+      /Connection test successful/,
+    );
     // One workspace per tenant (design D10): no second install on offer, and no
     // consent URL minted for a page that would never use it.
     expect(harness.offersInstall()).toBe(false);
@@ -356,8 +372,8 @@ describe("authorizing destination channels", () => {
   }, 60000);
 
   it("offers a private channel the app was invited to, marked as private, and authorizes it", async () => {
-    // Given — `@Prowler` was invited to one private channel; `groups:read` is
-    // membership-gated (D2).
+    // Given — `@Prowler Cloud` was invited to one private channel;
+    // `groups:read` is membership-gated (D2).
     const harness = new SlackIntegrationHarness(connectedSlackFixture());
     await harness.mount();
 
@@ -381,7 +397,7 @@ describe("authorizing destination channels", () => {
     ]);
   }, 60000);
 
-  it("offers a private channel once @Prowler is invited to it and the list is refreshed", async () => {
+  it("offers a private channel once @Prowler Cloud is invited to it and the list is refreshed", async () => {
     // Given — a workspace whose only channels are public: `groups:read` is
     // membership-gated (design D2).
     const harness = new SlackIntegrationHarness(
@@ -397,8 +413,8 @@ describe("authorizing destination channels", () => {
       SLACK_PRIVATE_CHANNEL.name,
     );
 
-    // When — `@Prowler` is invited to a private channel, and the user refreshes
-    // instead of reconnecting the workspace.
+    // When — `@Prowler Cloud` is invited to a private channel, and the user
+    // refreshes instead of reconnecting the workspace.
     harness.fixture.channels.push({ ...SLACK_PRIVATE_CHANNEL });
     await harness.refreshChannels();
 
@@ -423,7 +439,7 @@ describe("authorizing destination channels", () => {
     // Then — the user is told what to do, not merely that the list is empty.
     const message = await harness.channelPickerMessage();
     expect(message).toMatch(/No channels available yet/);
-    expect(message).toMatch(/invite @Prowler/);
+    expect(message).toMatch(/invite @Prowler Cloud/);
     expect(await harness.authorizedChannels()).toEqual([]);
     expect(await harness.offersConnectionTest()).toBe(false);
   }, 30000);
@@ -443,6 +459,12 @@ describe("authorizing destination channels", () => {
     // Then
     expect(await harness.connectionOutcome()).toBe(CONNECTION_OUTCOME.SUCCESS);
     expect(harness.connectionCheckCallCount).toBe(1);
+    // And — the card names the channel the chained check covered, which the
+    // save hands it directly: the set the check ran against is not on record
+    // as state yet when the summary is built.
+    expect(await harness.connectionCheckOutcomeText()).toBe(
+      `#${SLACK_PUBLIC_CHANNEL.name} is reachable.`,
+    );
     // And — everything waiting on a destination moves with the save, in the
     // same paint: no reload to find the check on offer for later.
     expect(await harness.offersConnectionTest()).toBe(true);
@@ -474,6 +496,11 @@ describe("authorizing destination channels", () => {
     // Then — only the check failed, so the destinations stay on record, and
     // the failure names the one channel Slack refused.
     expect(await harness.connectionOutcome()).toBe(CONNECTION_OUTCOME.FAILURE);
+    // The card and the toast each name it, and each is read where it lives:
+    // the toast goes, and what the card keeps is what the user comes back to.
+    expect(await harness.connectionCheckOutcomeText()).toMatch(
+      new RegExp(`^Slack refused #${SLACK_PRIVATE_CHANNEL.name}\\b`),
+    );
     expect(await harness.connectionFailureToast()).toMatch(
       new RegExp(`Slack refused #${SLACK_PRIVATE_CHANNEL.name}`),
     );
@@ -516,6 +543,41 @@ describe("authorizing destination channels", () => {
     expect(harness.offersChannelsSave()).toBe(false);
   }, 60000);
 
+  it("takes back a passing result once the set it vouched for is no longer the set on record", async () => {
+    // Given — a check that passed against the one channel then authorized, said
+    // in the card in those terms.
+    const harness = new SlackIntegrationHarness(configuredSlackFixture());
+    await harness.mount();
+    expect(await harness.testConnection()).toBe(CONNECTION_OUTCOME.SUCCESS);
+    expect(await harness.connectionCheckOutcomeText()).toBe(
+      `#${SLACK_PUBLIC_CHANNEL.name} is reachable.`,
+    );
+
+    // When — a channel nothing has checked joins the record, from elsewhere, so
+    // no new check runs to overwrite the standing one.
+    await harness.channelsRecordedElsewhere([
+      SLACK_PUBLIC_CHANNEL.name,
+      SLACK_SECOND_PUBLIC_CHANNEL.name,
+    ]);
+    await harness.refreshPageData();
+
+    // Then — the result is withdrawn rather than left standing: a line saying
+    // the channels are reachable, over a set one of them was never tried
+    // against, would be a claim the check never made.
+    await harness.waitForRetiredConnectionCheck();
+    // And — the badge steps back with it, because the record does too: the API
+    // clears its own verdict on a changed set for the same reason the card
+    // clears the finding, so the two never disagree about what was checked.
+    expect(await harness.connectionBadge()).toBe("Not checked yet");
+    // And — only the finding is withdrawn, not the setup: the wider set is on
+    // record, with the check still there to be run over it.
+    expect(await harness.authorizedChannels()).toEqual([
+      SLACK_PUBLIC_CHANNEL.name,
+      SLACK_SECOND_PUBLIC_CHANNEL.name,
+    ]);
+    expect(await harness.offersConnectionTest()).toBe(true);
+  }, 60000);
+
   it("says which permission is missing when Slack refuses the channel listing, leaving the authorized set alone", async () => {
     // Given — an authorized set, and an install missing a scope the listing
     // needs. The API names it in `code` (contract, Errors), not in `detail`.
@@ -536,7 +598,7 @@ describe("authorizing destination channels", () => {
     // Slack's reason is a protocol token: it travels in `code` and is never
     // shown.
     expect(message).not.toMatch(SLACK_MISSING_SCOPE_CODE);
-    expect(harness.channelInviteHint()).toMatch(/invites @Prowler/);
+    expect(harness.channelInviteHint()).toMatch(/invites @Prowler Cloud/);
 
     // And — a listing Prowler could not read says nothing about the channels
     // already authorized.
@@ -546,6 +608,20 @@ describe("authorizing destination channels", () => {
     expect(await harness.offersConnectionTest()).toBe(true);
   }, 30000);
 
+  it("sends a user stuck on a missing private channel to the docs section about it", async () => {
+    // Given — a connected workspace, so the picker's invite copy is on screen.
+    const harness = new SlackIntegrationHarness(connectedSlackFixture());
+
+    // When
+    await harness.mount();
+
+    // Then — the whole anchored URL: the anchor is the point of the link, and
+    // it is derived from a docs heading that a rewording would silently move.
+    expect(harness.channelInviteHintDocsUrl()).toBe(
+      "https://docs.prowler.com/user-guide/tutorials/prowler-app-slack-integration#why-a-private-channel-is-missing-from-the-channel-list",
+    );
+  }, 30000);
+
   it("names the wait Slack asked for when it rate limits the channel listing", async () => {
     // Given — `conversations.list` is Slack tier 2 and paginated (contract,
     // Errors); the `429` carries the wait in `Retry-After`.
@@ -632,7 +708,7 @@ describe("authorizing destination channels", () => {
     ]);
   }, 30000);
 
-  it("says to invite @Prowler when Slack refuses a channel because the app is not in it", async () => {
+  it("says to invite @Prowler Cloud when Slack refuses a channel because the app is not in it", async () => {
     // Given — a private channel the app was removed from. The API validates the
     // set against Slack on the way in and refuses with `not_in_channel`.
     const harness = new SlackIntegrationHarness(
@@ -649,7 +725,7 @@ describe("authorizing destination channels", () => {
 
     // Then — the one fix the user can carry out themselves, in Slack.
     expect(refusal).toMatch(/Prowler is not in that channel/);
-    expect(refusal).toMatch(/Invite @Prowler to it in Slack/);
+    expect(refusal).toMatch(/Invite @Prowler Cloud to it in Slack/);
     expect(refusal).not.toMatch(SLACK_NOT_IN_CHANNEL_CODE);
 
     // And — nothing was recorded, so there is still nothing to check against.
@@ -657,7 +733,7 @@ describe("authorizing destination channels", () => {
     expect(await harness.offersConnectionTest()).toBe(false);
   }, 60000);
 
-  it("says the channel is gone, not that @Prowler needs inviting, when Slack no longer has it", async () => {
+  it("says the channel is gone, not that @Prowler Cloud needs inviting, when Slack no longer has it", async () => {
     // Given — a channel archived since the listing was read. The API's `detail`
     // is word-for-word the one for `not_in_channel`, so only `code` tells them
     // apart.
@@ -677,7 +753,7 @@ describe("authorizing destination channels", () => {
     // channel that no longer exists.
     expect(refusal).toMatch(/no longer exists in the workspace/);
     expect(refusal).toMatch(/Choose another one/);
-    expect(refusal).not.toMatch(/Invite @Prowler/);
+    expect(refusal).not.toMatch(/Invite @Prowler Cloud/);
     expect(refusal).not.toMatch(SLACK_UNKNOWN_CHANNEL_DETAIL);
     expect(await harness.authorizedChannels()).toEqual([]);
   }, 60000);
@@ -689,7 +765,7 @@ describe("authorizing destination channels", () => {
 
     // Then — checking again posts nothing: the confirmation is one-time
     // (design D7), not a fresh message every run.
-    expect(harness.connectionCheckHint()).toMatch(/nothing is posted/);
+    expect(harness.connectionCheckHint()).toMatch(/Nothing is posted/);
     expect(harness.connectionCheckHint()).not.toMatch(/test message/i);
 
     // When — a second channel is authorized.
@@ -711,7 +787,7 @@ describe("authorizing destination channels", () => {
     expect(await harness.connectionOutcome()).toBe(CONNECTION_OUTCOME.SUCCESS);
     await harness.refreshPageData();
     expect(
-      await harness.connectionCheckHintMatching(/nothing is posted/),
+      await harness.connectionCheckHintMatching(/Nothing is posted/),
     ).toMatch(/every authorized channel/);
   }, 60000);
 
@@ -831,7 +907,7 @@ describe("authorizing destination channels", () => {
     // Given — a finished setup whose channel an earlier check confirmed.
     const harness = new SlackIntegrationHarness(configuredSlackFixture());
     await harness.mount();
-    expect(harness.connectionCheckHint()).toMatch(/nothing is posted/);
+    expect(harness.connectionCheckHint()).toMatch(/Nothing is posted/);
 
     // When — the same workspace is approved again. The exchange is the
     // callback route's doing (covered in `callback/route.test.ts`); here it
diff --git a/ui/changelog.d/slack-connection-check-result.added.md b/ui/changelog.d/slack-connection-check-result.added.md
new file mode 100644
index 0000000000..f671f90151
--- /dev/null
+++ b/ui/changelog.d/slack-connection-check-result.added.md
@@ -0,0 +1 @@
+Slack integration: the connection check leaves its result on the card instead of only in a toast, naming the channel Slack refused or the channels it reached (Prowler Cloud only)
diff --git a/ui/changelog.d/slack-private-channel-marker.changed.md b/ui/changelog.d/slack-private-channel-marker.changed.md
new file mode 100644
index 0000000000..0c25848b5a
--- /dev/null
+++ b/ui/changelog.d/slack-private-channel-marker.changed.md
@@ -0,0 +1 @@
+Slack integration: a selected private channel carries the same visible `Private` badge as the channel list, replacing the lock icon on the chip (Prowler Cloud only)
diff --git a/ui/changelog.d/slack-ui-feedback.changed.md b/ui/changelog.d/slack-ui-feedback.changed.md
new file mode 100644
index 0000000000..33708de1b0
--- /dev/null
+++ b/ui/changelog.d/slack-ui-feedback.changed.md
@@ -0,0 +1 @@
+Slack integration: the bot is referred to as `@Prowler Cloud`, identifiers are set as inline code, and the private-channel hint links to its docs (Prowler Cloud only)
diff --git a/ui/components/integrations/shared/integration-card-header.tsx b/ui/components/integrations/shared/integration-card-header.tsx
index e78f12ed0d..b7f247a41b 100644
--- a/ui/components/integrations/shared/integration-card-header.tsx
+++ b/ui/components/integrations/shared/integration-card-header.tsx
@@ -10,17 +10,18 @@ import { cn } from "@/lib/utils";
 const CONNECTION_BADGE = {
   connected: {
     label: "Connected",
-    className:
-      "bg-bg-pass-secondary text-text-success-primary border-transparent",
+    variant: "success",
+    dotClassName: "bg-bg-pass",
   },
   disconnected: {
     label: "Disconnected",
-    className:
-      "bg-bg-fail-secondary text-text-error-primary border-transparent",
+    variant: "error",
+    dotClassName: "bg-bg-fail",
   },
   unchecked: {
     label: "Not checked yet",
-    className: "border-border-tag bg-bg-tag text-text-neutral-secondary",
+    variant: "tag",
+    dotClassName: "bg-bg-data-muted",
   },
 } as const;
 
@@ -45,30 +46,57 @@ interface IntegrationCardHeaderProps {
   icon: ReactNode;
   title: string;
   subtitle?: string;
+  /**
+   * A quiet third line under the subtitle, for a fact about the integration
+   * rather than a claim about it — when its connection was last checked, say.
+   */
+  meta?: ReactNode;
   chips?: IntegrationCardChip[];
   connectionStatus?: IntegrationConnectionStatus;
   navigationUrl?: string;
+  /** The integration's own controls, pinned to the end of the row. */
+  actions?: ReactNode;
 }
 
 export const IntegrationCardHeader = ({
   icon,
   title,
   subtitle,
+  meta,
   chips = [],
   connectionStatus,
   navigationUrl,
+  actions,
 }: IntegrationCardHeaderProps) => {
   const badgeState = connectionStatus
     ? connectionBadgeState(connectionStatus.connected)
     : null;
   const badge = badgeState ? CONNECTION_BADGE[badgeState] : null;
 
+  // The end of the row belongs to the controls wherever there are any, so the
+  // status travels with the name it qualifies instead of across the card.
+  const statusBesideTitle = Boolean(actions);
+
+  const statusBadge =
+    badge && badgeState ? (
+      <Badge variant={badge.variant} data-connection-status={badgeState}>
+        <span
+          aria-hidden="true"
+          className={cn("size-1.5 rounded-full", badge.dotClassName)}
+        />
+        {connectionStatus?.label || badge.label}
+      </Badge>
+    ) : null;
+
+  const hasAside =
+    chips.length > 0 || Boolean(actions) || (statusBadge && !statusBesideTitle);
+
   return (
     <div className="flex w-full flex-col gap-3 sm:flex-row sm:items-center sm:justify-between">
       <div className="flex items-center gap-3">
         {icon}
-        <div>
-          <div className="flex items-center gap-2">
+        <div className="flex min-w-0 flex-col gap-0.5">
+          <div className="flex flex-wrap items-center gap-2">
             <h4 className="text-md font-semibold">{title}</h4>
             {navigationUrl && (
               <a
@@ -81,37 +109,32 @@ export const IntegrationCardHeader = ({
                 <ExternalLink size={16} />
               </a>
             )}
+            {statusBesideTitle && statusBadge}
           </div>
           {subtitle && (
-            <p className="text-xs text-gray-500 dark:text-gray-300">
-              {subtitle}
-            </p>
+            <p className="text-text-neutral-tertiary text-xs">{subtitle}</p>
           )}
+          {meta}
         </div>
       </div>
-      {(chips.length > 0 || badge) && (
+      {hasAside && (
         <div className="flex flex-wrap items-center gap-2">
           {chips.map((chip, index) => (
             <Badge
               key={index}
               variant="outline"
+              // Weight left to the Badge, so a chip and the status pill beside
+              // it are never set differently.
               className={cn(
-                "border-border-neutral-secondary bg-bg-neutral-secondary text-text-neutral-primary text-xs font-normal",
+                "border-border-neutral-secondary bg-bg-neutral-secondary text-text-neutral-primary text-xs",
                 chip.className,
               )}
             >
               {chip.label}
             </Badge>
           ))}
-          {badge && badgeState && (
-            <Badge
-              variant="outline"
-              data-connection-status={badgeState}
-              className={cn("text-xs font-normal", badge.className)}
-            >
-              {connectionStatus?.label || badge.label}
-            </Badge>
-          )}
+          {!statusBesideTitle && statusBadge}
+          {actions}
         </div>
       )}
     </div>
diff --git a/ui/components/integrations/slack/slack-channel-multi-select.tsx b/ui/components/integrations/slack/slack-channel-multi-select.tsx
index 08d07f67b6..02d4d4f88e 100644
--- a/ui/components/integrations/slack/slack-channel-multi-select.tsx
+++ b/ui/components/integrations/slack/slack-channel-multi-select.tsx
@@ -1,7 +1,8 @@
 "use client";
 
-import { Lock, RefreshCw } from "lucide-react";
+import { RefreshCw } from "lucide-react";
 
+import { SlackInlineCode } from "@/components/integrations/slack/slack-inline-code";
 import {
   Alert,
   AlertDescription,
@@ -10,6 +11,7 @@ import {
   Button,
   Label,
 } from "@/components/shadcn";
+import { CustomLink } from "@/components/shadcn/custom/custom-link";
 import {
   MultiSelect,
   MultiSelectContent,
@@ -17,10 +19,23 @@ import {
   MultiSelectTrigger,
   MultiSelectValue,
 } from "@/components/shadcn/select/multiselect";
+import { DOCS_URLS } from "@/lib/external-urls";
 import type { SlackChannelOption } from "@/types/integrations";
 
-const INVITE_HINT =
-  "A private channel only appears here after someone invites @Prowler to it in Slack. Invite it, then refresh.";
+const INVITE_HINT = (
+  <>
+    A private channel only appears here after someone invites{" "}
+    <SlackInlineCode>@Prowler Cloud</SlackInlineCode> to it in Slack. Invite it,
+    then refresh.{" "}
+    <CustomLink
+      href={DOCS_URLS.SLACK_INTEGRATION_PRIVATE_CHANNELS}
+      ariaLabel="Learn more about why a private channel is missing from the channel list"
+      size="xs"
+    >
+      Learn more
+    </CustomLink>
+  </>
+);
 
 interface SlackChannelMultiSelectProps {
   options: SlackChannelOption[];
@@ -38,15 +53,15 @@ interface SlackChannelMultiSelectProps {
   describedBy?: string;
 }
 
+/** Marked exactly as the listing marks it, so the chip is the row it came from. */
 const chipLabel = (option: SlackChannelOption) => (
   <span className="flex min-w-0 items-center gap-1">
-    {option.is_private && (
-      <>
-        <Lock size={12} aria-hidden="true" />
-        <span className="sr-only">Private</span>
-      </>
-    )}
     <span className="truncate">#{option.name}</span>
+    {option.is_private && (
+      <Badge variant="tag" size="sm">
+        Private
+      </Badge>
+    )}
   </span>
 );
 
@@ -104,8 +119,10 @@ export const SlackChannelMultiSelect = ({
           <AlertTitle>No channels available yet</AlertTitle>
           <AlertDescription>
             Prowler cannot see a single channel in this workspace. Create a
-            public channel, or invite @Prowler to a private one in Slack with
-            <span className="font-medium"> /invite @Prowler</span>, then
+            public channel, or invite{" "}
+            <SlackInlineCode>@Prowler Cloud</SlackInlineCode> to a private one
+            in Slack with{" "}
+            <SlackInlineCode>/invite @Prowler Cloud</SlackInlineCode>, then
             refresh.
           </AlertDescription>
         </Alert>
diff --git a/ui/components/integrations/slack/slack-connection-check-status.tsx b/ui/components/integrations/slack/slack-connection-check-status.tsx
new file mode 100644
index 0000000000..ea925db602
--- /dev/null
+++ b/ui/components/integrations/slack/slack-connection-check-status.tsx
@@ -0,0 +1,124 @@
+import { Check, CircleAlert, Loader2, type LucideIcon } from "lucide-react";
+import type { ReactNode } from "react";
+
+import { cn } from "@/lib/utils";
+
+// Read by the page harness off `data-connection-check-status`.
+export const CHECK_STATUS = {
+  /** No check has run against the channels currently on record. */
+  IDLE: "idle",
+  RUNNING: "running",
+  PASSED: "passed",
+  FAILED: "failed",
+} as const;
+
+export type CheckStatus = (typeof CHECK_STATUS)[keyof typeof CHECK_STATUS];
+
+interface CheckStatusStyle {
+  /** `null` for the resting state, which shows no outcome to decorate. */
+  icon: LucideIcon | null;
+  className: string;
+}
+
+const CHECK_STATUS_STYLES = {
+  [CHECK_STATUS.IDLE]: {
+    icon: null,
+    className: "",
+  },
+  [CHECK_STATUS.RUNNING]: {
+    icon: Loader2,
+    className:
+      "border-border-neutral-secondary bg-bg-neutral-tertiary text-text-neutral-secondary",
+  },
+  // The dark pass tokens are sized for a whole card, and at this width they
+  // read as an alert rather than a note, so they are taken down a shade there.
+  [CHECK_STATUS.PASSED]: {
+    icon: Check,
+    className:
+      "border-bg-pass bg-bg-pass-secondary text-text-success-primary dark:border-bg-pass/40 dark:bg-bg-pass-secondary/40",
+  },
+  [CHECK_STATUS.FAILED]: {
+    icon: CircleAlert,
+    className:
+      "border-border-error bg-bg-fail-secondary text-text-error-primary dark:border-border-error/50",
+  },
+} as const satisfies Record<CheckStatus, CheckStatusStyle>;
+
+interface SlackConnectionCheckStatusProps {
+  status: CheckStatus;
+  /** What the last check found. Absent while no check covers the record. */
+  outcome?: ReactNode;
+  /**
+   * Id the control points at with `aria-describedby`. The caption alone carries
+   * it: an outcome read out as the control's description would say what the
+   * last check did, where the description has to say what pressing it does.
+   */
+  captionId: string;
+  /** What the check does, or why it cannot run. */
+  children: ReactNode;
+}
+
+/**
+ * The connection check's standing state: what a check last found, over the
+ * caption explaining what running one does.
+ *
+ * The two are kept in separate registers — the outcome boxed, the caption plain
+ * underneath — because they are answers to different questions and can honestly
+ * disagree. A refused channel is still a channel the next check will try, so
+ * reading the caption as a continuation of the outcome ("Slack refused #ops" …
+ * "posts the confirmation to #ops") would turn a true pair of statements into a
+ * contradiction.
+ */
+export const SlackConnectionCheckStatus = ({
+  status,
+  outcome,
+  captionId,
+  children,
+}: SlackConnectionCheckStatusProps) => {
+  const { icon: Icon, className } = CHECK_STATUS_STYLES[status];
+
+  return (
+    <div
+      data-connection-check-status={status}
+      className={cn("flex w-full flex-col", outcome && "gap-2")}
+    >
+      <div
+        className={cn(
+          "flex items-start gap-2 text-xs",
+          outcome && "rounded-lg border px-3 py-2",
+          outcome && className,
+        )}
+      >
+        {Icon && outcome && (
+          <Icon
+            aria-hidden="true"
+            className={cn(
+              "mt-0.5 size-3.5 shrink-0",
+              status === CHECK_STATUS.RUNNING && "animate-spin",
+            )}
+          />
+        )}
+        {/* Always mounted, so a landing outcome is announced as a change to a
+            region that was already there — and polite, since the user asked
+            for the check and is watching it. Empty, it takes no room.
+
+            Keyed, because the check's toast carries this same refusal copy: a
+            reader going by text alone would answer for the toast, and pass
+            with this line never rendered. */}
+        <p
+          data-connection-check-outcome
+          aria-live="polite"
+          className={cn("font-medium", !outcome && "sr-only")}
+        >
+          {outcome}
+        </p>
+      </div>
+      <p
+        id={captionId}
+        className="text-text-neutral-tertiary max-w-prose text-xs"
+      >
+        {children}
+      </p>
+    </div>
+  );
+};
diff --git a/ui/components/integrations/slack/slack-inline-code.tsx b/ui/components/integrations/slack/slack-inline-code.tsx
new file mode 100644
index 0000000000..a197148d47
--- /dev/null
+++ b/ui/components/integrations/slack/slack-inline-code.tsx
@@ -0,0 +1,15 @@
+import type { ReactNode } from "react";
+
+interface SlackInlineCodeProps {
+  children: ReactNode;
+}
+
+/**
+ * A Slack identifier — a channel name, the bot mention, a slash command — set
+ * apart from the prose around it.
+ */
+export const SlackInlineCode = ({ children }: SlackInlineCodeProps) => (
+  <code className="bg-bg-neutral-tertiary text-text-neutral-secondary rounded px-1 py-0.5 font-mono">
+    {children}
+  </code>
+);
diff --git a/ui/components/integrations/slack/slack-integration-card.tsx b/ui/components/integrations/slack/slack-integration-card.tsx
index a4e8397afb..619e9242c9 100644
--- a/ui/components/integrations/slack/slack-integration-card.tsx
+++ b/ui/components/integrations/slack/slack-integration-card.tsx
@@ -4,9 +4,7 @@ import Link from "next/link";
 import { SlackIcon } from "@/components/icons/services/IconServices";
 import { Button, Card, CardContent, CardHeader } from "@/components/shadcn";
 import { CustomLink } from "@/components/shadcn/custom/custom-link";
-
-const SLACK_DOCS_URL =
-  "https://docs.prowler.com/user-guide/tutorials/prowler-app-slack-integration";
+import { DOCS_URLS } from "@/lib/external-urls";
 
 export const SlackIntegrationCard = () => {
   return (
@@ -24,7 +22,7 @@ export const SlackIntegrationCard = () => {
                   Send Prowler messages to your Slack workspace.
                 </p>
                 <CustomLink
-                  href={SLACK_DOCS_URL}
+                  href={DOCS_URLS.SLACK_INTEGRATION}
                   aria-label="Learn more about Slack integration"
                   size="xs"
                 >
diff --git a/ui/components/integrations/slack/slack-integration-manager.tsx b/ui/components/integrations/slack/slack-integration-manager.tsx
index 66c6e9c9f7..fdbfbcc502 100644
--- a/ui/components/integrations/slack/slack-integration-manager.tsx
+++ b/ui/components/integrations/slack/slack-integration-manager.tsx
@@ -2,7 +2,7 @@
 
 import { format, isValid, parseISO } from "date-fns";
 import { TestTube, Unplug } from "lucide-react";
-import { useEffect, useState } from "react";
+import { type ReactNode, useEffect, useState } from "react";
 
 import { testIntegrationConnection } from "@/actions/integrations/integrations";
 import {
@@ -14,6 +14,12 @@ import {
 import { SlackIcon } from "@/components/icons/services/IconServices";
 import { IntegrationCardHeader } from "@/components/integrations/shared";
 import { SlackChannelMultiSelect } from "@/components/integrations/slack/slack-channel-multi-select";
+import {
+  CHECK_STATUS,
+  type CheckStatus,
+  SlackConnectionCheckStatus,
+} from "@/components/integrations/slack/slack-connection-check-status";
+import { SlackInlineCode } from "@/components/integrations/slack/slack-inline-code";
 import {
   Alert,
   AlertDescription,
@@ -76,6 +82,20 @@ interface UnconfirmedRevocation {
   workspace: string | null;
 }
 
+/**
+ * What the last check found, together with what it was measured against. Both
+ * ride with the finding so it can never outlive them: a green line vouching for
+ * a channel nothing ever reached is worse than no line at all, and so is one
+ * standing over a notice saying the credential is dead.
+ */
+interface ConnectionCheckOutcome {
+  reachable: boolean;
+  summary: string;
+  channelIds: string[];
+  /** The credential verdict the check was run under. */
+  credentialFailure: SlackTokenErrorCode | null;
+}
+
 /** Order-insensitive: the mirror must not re-seed on a mere reordering. */
 const sameChannelIds = (a: string[], b: string[]) =>
   a.length === b.length && new Set([...a, ...b]).size === a.length;
@@ -129,10 +149,39 @@ const recordedFromSelection = (
     ];
   });
 
+const CHANNEL_LIST_FORMAT = new Intl.ListFormat("en", {
+  style: "long",
+  type: "conjunction",
+});
+
+const channelTokens = (names: string[]): string[] =>
+  names.map((name) => `#${name}`);
+
+/** For the copy that travels as plain text: toasts, the deauthorize warning. */
 const channelList = (names: string[]): string =>
-  new Intl.ListFormat("en", { style: "long", type: "conjunction" }).format(
-    names.map((name) => `#${name}`),
-  );
+  CHANNEL_LIST_FORMAT.format(channelTokens(names));
+
+interface StyledChannelListProps {
+  names: string[];
+}
+
+/**
+ * The same list as `channelList()`, each channel set apart. `formatToParts`
+ * emits exactly the literals `format` joins, so the rendered text is unchanged
+ * (design D3) — the copy is read as text content, here and by the tests.
+ */
+const StyledChannelList = ({ names }: StyledChannelListProps) => (
+  <>
+    {CHANNEL_LIST_FORMAT.formatToParts(channelTokens(names)).map(
+      (part, index) =>
+        part.type === "element" ? (
+          <SlackInlineCode key={index}>{part.value}</SlackInlineCode>
+        ) : (
+          part.value
+        ),
+    )}
+  </>
+);
 
 /**
  * Slack's own reason, when the string is one: the connection check reports a
@@ -160,6 +209,10 @@ export const SlackIntegrationManager = ({
   loadError,
 }: SlackIntegrationManagerProps) => {
   const [isTesting, setIsTesting] = useState(false);
+  // A check's finding outlives its toast: the card keeps saying where the
+  // workspace stands until a change to the channels makes the finding moot.
+  const [checkOutcome, setCheckOutcome] =
+    useState<ConnectionCheckOutcome | null>(null);
   const [isDisconnectOpen, setIsDisconnectOpen] = useState(false);
   const [isDisconnecting, setIsDisconnecting] = useState(false);
   // The row is gone the moment the API says so; the server component's
@@ -317,15 +370,55 @@ export const SlackIntegrationManager = ({
     (channel) => !selectedChannelIds.includes(channel.id),
   );
 
-  const checkHint = (): string => {
+  const authorizedChannelIds = authorizedChannels.map((channel) => channel.id);
+
+  /**
+   * Derived, not stored, so a finding retires on its own the moment anything it
+   * was measured against moves: a channel authorized or dropped leaves a set no
+   * check has covered, and a credential verdict that has since changed leaves a
+   * finding taken under conditions that no longer hold.
+   */
+  const coveredOutcome =
+    checkOutcome &&
+    sameChannelIds(checkOutcome.channelIds, authorizedChannelIds) &&
+    checkOutcome.credentialFailure === credentialFailure
+      ? checkOutcome
+      : null;
+
+  const checkStatus = (): CheckStatus => {
+    if (isTesting) return CHECK_STATUS.RUNNING;
+    if (!coveredOutcome) return CHECK_STATUS.IDLE;
+    return coveredOutcome.reachable ? CHECK_STATUS.PASSED : CHECK_STATUS.FAILED;
+  };
+
+  // Deliberately not a second telling of the caption below it: the button
+  // already reads "Testing...", so this only has to say a check is under way.
+  const checkSummary = isTesting
+    ? "Checking the connection..."
+    : coveredOutcome?.summary;
+
+  /** What a passing check proves, said in terms of what was actually reached. */
+  const reachableSummary = (channels: SlackAuthorizedChannel[]): string =>
+    channels.length === 1
+      ? `#${channels[0].name} is reachable.`
+      : `All ${channels.length} channels are reachable.`;
+
+  const checkHint = (): ReactNode => {
     if (authorizedChannels.length === 0) {
       return "Authorize at least one destination channel below to enable this check.";
     }
-    return unconfirmedChannels.length > 0
-      ? `Checks every authorized channel and posts “${CONFIRMATION_MESSAGE}” once to ${channelList(
-          unconfirmedChannels.map((channel) => channel.name),
-        )}.`
-      : "Checks every authorized channel. Each was confirmed once already, so nothing is posted.";
+    return unconfirmedChannels.length > 0 ? (
+      <>
+        Checks every authorized channel and posts “{CONFIRMATION_MESSAGE}” once
+        to{" "}
+        <StyledChannelList
+          names={unconfirmedChannels.map((channel) => channel.name)}
+        />
+        .
+      </>
+    ) : (
+      "Checks every authorized channel. Nothing is posted."
+    );
   };
 
   const handleSaveChannels = async () => {
@@ -395,12 +488,24 @@ export const SlackIntegrationManager = ({
     // Passed in by a chained check: it runs before the save's state lands.
     channels: SlackAuthorizedChannel[] = authorizedChannels,
   ) => {
+    const checkedChannelIds = channels.map((channel) => channel.id);
+
     setIsTesting(true);
     try {
       const result = await testIntegrationConnection(id);
 
       if (result.success) {
         provedCredentialAlive();
+        setCheckOutcome({
+          reachable: true,
+          // Prowler's own count, not the API's prose: the line has to keep
+          // meaning the same thing every time it is read.
+          summary: reachableSummary(channels),
+          channelIds: checkedChannelIds,
+          // An answer at all clears the verdict, so a pass is always taken
+          // under a live credential.
+          credentialFailure: null,
+        });
         toast({
           title: "Connection test successful!",
           description:
@@ -411,8 +516,13 @@ export const SlackIntegrationManager = ({
         // A dead credential named here is not a failure checking again can
         // fix, so the reason is recorded and not only reported.
         const reason = result.error?.trim() || null;
+        const reasonCode = asReasonCode(reason);
 
-        recordRefusal(asReasonCode(reason));
+        recordRefusal(reasonCode);
+
+        // The verdict this check leaves behind: its own reason when it named
+        // one, else the last answer's, which nothing here contradicted.
+        const codeAfterCheck = reasonCode ?? lastRefusalCode;
 
         const explanation = reason
           ? slackErrorMessage({ code: reason, detail: reason })
@@ -424,15 +534,32 @@ export const SlackIntegrationManager = ({
           ? channels.find((channel) => channel.id === result.failedChannelId)
           : undefined;
 
+        const refusal = refusedChannel
+          ? `Slack refused #${refusedChannel.name}: ${explanation}`
+          : explanation;
+
+        setCheckOutcome({
+          reachable: false,
+          summary: refusal,
+          channelIds: checkedChannelIds,
+          credentialFailure: isSlackTokenErrorCode(codeAfterCheck)
+            ? codeAfterCheck
+            : null,
+        });
         toast({
           variant: "destructive",
           title: "Connection test failed",
-          description: refusedChannel
-            ? `Slack refused #${refusedChannel.name}: ${explanation}`
-            : explanation,
+          description: refusal,
         });
       }
     } catch (_error) {
+      setCheckOutcome({
+        reachable: false,
+        summary: "Prowler could not reach Slack to run the check.",
+        channelIds: checkedChannelIds,
+        // Never an answer from Slack, so the standing verdict is untouched.
+        credentialFailure,
+      });
       toast({
         variant: "destructive",
         title: "Error",
@@ -607,11 +734,18 @@ export const SlackIntegrationManager = ({
         </Alert>
       ) : integration && !disconnected ? (
         <Card variant="base">
-          <CardHeader>
+          <CardHeader className="gap-3">
             <IntegrationCardHeader
               icon={<SlackIcon size={32} />}
               title={`Connected to ${workspaceName ?? "your Slack workspace"}`}
               subtitle="Prowler posts to this workspace only."
+              meta={
+                lastCheckedOn && (
+                  <p className="text-text-neutral-tertiary font-mono text-xs">
+                    Last checked {lastCheckedOn}
+                  </p>
+                )
+              }
               connectionStatus={{
                 // A dead token outranks the state the page was loaded with.
                 connected:
@@ -619,21 +753,8 @@ export const SlackIntegrationManager = ({
                     ? integration.attributes.connected
                     : false,
               }}
-            />
-          </CardHeader>
-
-          <CardContent className="pt-0">
-            <div className="flex flex-col gap-3 sm:flex-row sm:items-start sm:justify-between">
-              <div className="text-xs text-gray-500 dark:text-gray-300">
-                {lastCheckedOn && (
-                  <p>
-                    <span className="font-medium">Last checked:</span>{" "}
-                    {lastCheckedOn}
-                  </p>
-                )}
-              </div>
-              <div className="flex flex-col items-start gap-1 sm:items-end">
-                <div className="flex items-center gap-2">
+              actions={
+                <>
                   {/* The check reaches the authorized channels: the API
                       answers 400 while the set is empty. */}
                   <Button
@@ -661,17 +782,23 @@ export const SlackIntegrationManager = ({
                     <Unplug size={14} />
                     Disconnect
                   </Button>
-                </div>
-                <p
-                  id={CHECK_HINT_ID}
-                  className="max-w-prose text-xs text-gray-500 sm:text-right dark:text-gray-300"
-                >
-                  {checkHint()}
-                </p>
-              </div>
-            </div>
+                </>
+              }
+            />
 
-            <div className="border-border-neutral-secondary mt-6 flex flex-col gap-4 border-t pt-6">
+            {/* Below the row, not beside the buttons: the width is what lets
+                the check say what it did without wrapping into a column. */}
+            <SlackConnectionCheckStatus
+              status={checkStatus()}
+              outcome={checkSummary}
+              captionId={CHECK_HINT_ID}
+            >
+              {checkHint()}
+            </SlackConnectionCheckStatus>
+          </CardHeader>
+
+          <CardContent className="pt-0">
+            <div className="border-border-neutral-secondary flex flex-col gap-4 border-t pt-6">
               <SlackChannelMultiSelect
                 options={channelOptions}
                 values={selectedChannelIds}
@@ -714,19 +841,24 @@ export const SlackIntegrationManager = ({
                   className="text-text-neutral-secondary text-xs"
                   data-authorized-channels
                 >
-                  {authorizedChannels.length > 0
-                    ? `Prowler posts to ${channelList(
-                        authorizedChannels.map((channel) => channel.name),
-                      )}.`
-                    : "No destination channels authorized yet."}
+                  {authorizedChannels.length > 0 ? (
+                    <>
+                      Prowler posts to{" "}
+                      <StyledChannelList
+                        names={authorizedChannels.map(
+                          (channel) => channel.name,
+                        )}
+                      />
+                      .
+                    </>
+                  ) : (
+                    "No destination channels authorized yet."
+                  )}
                 </p>
                 <Button
                   size="sm"
                   disabled={
-                    sameChannelIds(
-                      selectedChannelIds,
-                      authorizedChannels.map((channel) => channel.id),
-                    ) ||
+                    sameChannelIds(selectedChannelIds, authorizedChannelIds) ||
                     isSavingChannels ||
                     isTesting
                   }
diff --git a/ui/lib/external-urls.ts b/ui/lib/external-urls.ts
index b7c611671f..10c240ba26 100644
--- a/ui/lib/external-urls.ts
+++ b/ui/lib/external-urls.ts
@@ -19,6 +19,10 @@ export const DOCS_URLS = {
   GCP_ORGANIZATIONS:
     "https://docs.prowler.com/user-guide/tutorials/prowler-cloud-gcp-organizations",
   ALERTS: "https://docs.prowler.com/user-guide/tutorials/prowler-app-alerts",
+  SLACK_INTEGRATION:
+    "https://docs.prowler.com/user-guide/tutorials/prowler-app-slack-integration",
+  SLACK_INTEGRATION_PRIVATE_CHANNELS:
+    "https://docs.prowler.com/user-guide/tutorials/prowler-app-slack-integration#why-a-private-channel-is-missing-from-the-channel-list",
   SCAN_CONFIGURATION:
     "https://docs.prowler.com/user-guide/tutorials/prowler-app-scan-configuration",
   ATTACK_PATHS_CUSTOM_QUERIES:
diff --git a/ui/lib/integrations/slack-errors.ts b/ui/lib/integrations/slack-errors.ts
index 523afc71bb..d8a3f1cfc4 100644
--- a/ui/lib/integrations/slack-errors.ts
+++ b/ui/lib/integrations/slack-errors.ts
@@ -46,7 +46,7 @@ export const SLACK_RATE_LIMITED_MESSAGE =
  * out, or `links.next` left the API's origin.
  */
 export const SLACK_PARTIAL_CHANNEL_LIST_MESSAGE =
-  "This workspace has more channels than Prowler reads in one go, so this list is not all of them. A channel missing from it is not necessarily one @Prowler has to be invited to.";
+  "This workspace has more channels than Prowler reads in one go, so this list is not all of them. A channel missing from it is not necessarily one @Prowler Cloud has to be invited to.";
 
 /**
  * For a `2xx` the UI could not read. Not phrased as a failure: the install
@@ -69,7 +69,7 @@ export const SLACK_ERROR_MESSAGES = {
   [SLACK_ERROR_CODE.CHANNEL_NOT_FOUND]:
     "That channel no longer exists in the workspace. Choose another one.",
   [SLACK_ERROR_CODE.NOT_IN_CHANNEL]:
-    "Prowler is not in that channel. Invite @Prowler to it in Slack, or choose a channel it can already post to.",
+    "Prowler is not in that channel. Invite @Prowler Cloud to it in Slack, or choose a channel it can already post to.",
   [SLACK_ERROR_CODE.NO_PERMISSION]:
     "Slack did not allow Prowler to post there. Choose another channel, or ask a workspace admin to allow it.",
   [SLACK_ERROR_CODE.TOKEN_REVOKED]: `Prowler's access to Slack was revoked. ${RECONNECT}`,
diff --git a/ui/types/integrations.ts b/ui/types/integrations.ts
index bbd37595c5..74a66526a6 100644
--- a/ui/types/integrations.ts
+++ b/ui/types/integrations.ts
@@ -115,7 +115,7 @@ export interface IntegrationProps {
 
 /**
  * A channel Prowler can post to: every active public channel, plus the private
- * ones `@Prowler` was invited to. `is_private` keeps the API's own naming.
+ * ones `@Prowler Cloud` was invited to. `is_private` keeps the API's own naming.
  */
 export interface SlackChannelOption {
   id: string;

From 8d60f9703ae62eff31471e62bf92f4f415bbcfdb Mon Sep 17 00:00:00 2001
From: Josema Camacho <josema@prowler.com>
Date: Tue, 1 Sep 2026 09:33:15 +0200
Subject: [PATCH 12/77] fix(api): limit mute rules to current and future scans
 (#12681)

---
 .../mute-rules-current-scans.fixed.md         |   1 +
 api/src/backend/api/tests/test_views.py       |  45 +-
 api/src/backend/api/v1/views.py               |  45 +-
 api/src/backend/tasks/jobs/muting.py          | 131 ++--
 api/src/backend/tasks/tasks.py                | 144 ++--
 api/src/backend/tasks/tests/test_muting.py    | 678 +++++-------------
 api/src/backend/tasks/tests/test_tasks.py     | 193 ++---
 7 files changed, 413 insertions(+), 824 deletions(-)
 create mode 100644 api/changelog.d/mute-rules-current-scans.fixed.md

diff --git a/api/changelog.d/mute-rules-current-scans.fixed.md b/api/changelog.d/mute-rules-current-scans.fixed.md
new file mode 100644
index 0000000000..3cfb7c973a
--- /dev/null
+++ b/api/changelog.d/mute-rules-current-scans.fixed.md
@@ -0,0 +1 @@
+`POST /api/v1/mute-rules` now updates only each affected provider's latest completed scan and future scans, preventing historical reaggregation from flooding Celery queues
diff --git a/api/src/backend/api/tests/test_views.py b/api/src/backend/api/tests/test_views.py
index 7b153efb8f..a881a7becf 100644
--- a/api/src/backend/api/tests/test_views.py
+++ b/api/src/backend/api/tests/test_views.py
@@ -18333,19 +18333,14 @@ class TestMuteRuleViewSet:
         assert len(data) == 2
         assert data[0]["id"] == str(mute_rules_fixture[first_index].id)
 
-    @patch("api.v1.views.chain")
-    @patch("api.v1.views.reaggregate_all_finding_group_summaries_task.si")
-    @patch("api.v1.views.mute_historical_findings_task.si")
+    @patch("api.v1.views.mute_findings_in_latest_scans_task.apply_async")
     @patch("api.v1.views.transaction.on_commit", side_effect=lambda fn: fn())
     def test_mute_rules_create_valid(
         self,
         _mock_on_commit,
-        mock_mute_signature,
-        mock_reaggregate_signature,
-        mock_chain,
+        mock_mute_task,
         authenticated_client,
         findings_fixture,
-        create_test_user,
     ):
         """Test creating a valid mute rule."""
         finding_ids = [str(findings_fixture[0].id)]
@@ -18372,24 +18367,20 @@ class TestMuteRuleViewSet:
         assert response_data["attributes"]["name"] == "New Mute Rule"
         assert response_data["attributes"]["reason"] == "Security exception approved"
 
-        # Verify the finding was immediately muted
-        from api.models import Finding
-
         finding = Finding.objects.get(id=findings_fixture[0].id)
-        assert finding.muted is True
-        assert finding.muted_at is not None
-        assert finding.muted_reason == "Security exception approved"
+        assert finding.muted is False
+        assert finding.muted_at is None
+        assert finding.muted_reason is None
 
-        # Verify background task chain was called: mute → reaggregate all
-        mock_mute_signature.assert_called_once()
-        mock_reaggregate_signature.assert_called_once()
-        mock_chain.assert_called_once_with(
-            mock_mute_signature.return_value,
-            mock_reaggregate_signature.return_value,
+        mock_mute_task.assert_called_once_with(
+            kwargs={
+                "tenant_id": str(finding.tenant_id),
+                "mute_rule_id": response_data["id"],
+                "provider_ids": [str(finding.scan.provider_id)],
+            }
         )
-        mock_chain.return_value.apply_async.assert_called_once()
 
-    @patch("tasks.tasks.mute_historical_findings_task.apply_async")
+    @patch("api.v1.views.mute_findings_in_latest_scans_task.apply_async")
     def test_mute_rules_create_converts_finding_ids_to_uids(
         self,
         mock_task,
@@ -18425,7 +18416,7 @@ class TestMuteRuleViewSet:
         ]
         assert set(mute_rule.finding_uids) == set(expected_uids)
 
-    @patch("tasks.tasks.mute_historical_findings_task.apply_async")
+    @patch("api.v1.views.mute_findings_in_latest_scans_task.apply_async")
     def test_mute_rules_deduplicates_uids(
         self,
         mock_task,
@@ -18492,10 +18483,10 @@ class TestMuteRuleViewSet:
 
         finding1.refresh_from_db()
         finding2.refresh_from_db()
-        assert finding1.muted is True
-        assert finding2.muted is True
+        assert finding1.muted is False
+        assert finding2.muted is False
 
-    @patch("tasks.tasks.mute_historical_findings_task.apply_async")
+    @patch("api.v1.views.mute_findings_in_latest_scans_task.apply_async")
     def test_mute_rules_create_overlap_detection_active(
         self,
         mock_task,
@@ -18528,7 +18519,7 @@ class TestMuteRuleViewSet:
             "already muted" in error_detail.lower() or "overlap" in error_detail.lower()
         )
 
-    @patch("tasks.tasks.mute_historical_findings_task.apply_async")
+    @patch("api.v1.views.mute_findings_in_latest_scans_task.apply_async")
     def test_mute_rules_create_no_overlap_with_inactive(
         self,
         mock_task,
@@ -18584,7 +18575,7 @@ class TestMuteRuleViewSet:
             == "/data/attributes/finding_ids"
         )
 
-    @patch("tasks.tasks.mute_historical_findings_task.apply_async")
+    @patch("api.v1.views.mute_findings_in_latest_scans_task.apply_async")
     def test_mute_rules_create_invalid_finding_ids(
         self, mock_task, authenticated_client
     ):
diff --git a/api/src/backend/api/v1/views.py b/api/src/backend/api/v1/views.py
index 2717b523ac..9df5be424c 100644
--- a/api/src/backend/api/v1/views.py
+++ b/api/src/backend/api/v1/views.py
@@ -244,7 +244,6 @@ from api.v1.serializers import (
     UserUpdateSerializer,
 )
 from botocore.exceptions import ClientError, NoCredentialsError, ParamValidationError
-from celery import chain
 from celery.result import AsyncResult
 from config.custom_logging import BackendLogger
 from config.env import env
@@ -342,8 +341,7 @@ from tasks.tasks import (
     enqueue_scan_execution_on_commit,
     get_active_provider_scan,
     jira_integration_task,
-    mute_historical_findings_task,
-    reaggregate_all_finding_group_summaries_task,
+    mute_findings_in_latest_scans_task,
     refresh_lighthouse_provider_models_task,
 )
 
@@ -7551,35 +7549,28 @@ class MuteRuleViewSet(BaseRLSViewSet):
         serializer = self.get_serializer(data=request.data)
         serializer.is_valid(raise_exception=True)
 
-        # Create the mute rule
+        tenant_id = str(request.tenant_id)
+        finding_ids = serializer.validated_data["finding_ids"]
+        provider_ids = list(
+            dict.fromkeys(
+                Finding.all_objects.filter(
+                    id__in=finding_ids, tenant_id=tenant_id
+                ).values_list("scan__provider_id", flat=True)
+            )
+        )
+
         mute_rule = serializer.save()
 
-        tenant_id = str(request.tenant_id)
-        finding_ids = request.data.get("finding_ids", [])
-
-        # Immediately mute the selected findings
-        Finding.all_objects.filter(
-            id__in=finding_ids, tenant_id=tenant_id, muted=False
-        ).update(
-            muted=True,
-            muted_at=mute_rule.inserted_at,
-            muted_reason=mute_rule.reason,
-        )
-
-        # Launch background task for historical muting + reaggregation
         transaction.on_commit(
-            lambda: chain(
-                mute_historical_findings_task.si(
-                    tenant_id=tenant_id,
-                    mute_rule_id=str(mute_rule.id),
-                ),
-                reaggregate_all_finding_group_summaries_task.si(
-                    tenant_id=tenant_id,
-                ),
-            ).apply_async()
+            lambda: mute_findings_in_latest_scans_task.apply_async(
+                kwargs={
+                    "tenant_id": tenant_id,
+                    "mute_rule_id": str(mute_rule.id),
+                    "provider_ids": [str(provider_id) for provider_id in provider_ids],
+                }
+            )
         )
 
-        # Return the created mute rule
         serializer = self.get_serializer(mute_rule)
         return Response(
             data=serializer.data,
diff --git a/api/src/backend/tasks/jobs/muting.py b/api/src/backend/tasks/jobs/muting.py
index 12a32ac574..839889a8ef 100644
--- a/api/src/backend/tasks/jobs/muting.py
+++ b/api/src/backend/tasks/jobs/muting.py
@@ -1,63 +1,104 @@
+from collections.abc import Iterable
+
 from api.db_utils import rls_transaction
-from api.models import Finding, MuteRule
+from api.models import Finding, MuteRule, Scan, StateChoices
 from celery.utils.log import get_task_logger
-from config.django.base import DJANGO_FINDINGS_BATCH_SIZE
-from tasks.utils import batched
 
 logger = get_task_logger(__name__)
 
 
-def mute_historical_findings(tenant_id: str, mute_rule_id: str):
-    """
-    Mute historical findings that match the given mute rule.
+def _mute_findings_for_rule(
+    *,
+    tenant_id: str,
+    scan_id: str,
+    finding_uids: Iterable[str],
+    muted_at,
+    muted_reason: str,
+) -> int:
+    finding_uids = list(finding_uids)
+    if not finding_uids:
+        return 0
 
-    This function processes findings in batches, updating their muted status
-    and adding the mute reason.
+    return Finding.all_objects.filter(
+        tenant_id=tenant_id,
+        scan_id=scan_id,
+        uid__in=finding_uids,
+        muted=False,
+    ).update(
+        muted=True,
+        muted_at=muted_at,
+        muted_reason=muted_reason,
+    )
 
-    Args:
-        tenant_id (str): The tenant ID for RLS context
-        mute_rule_id (str): The ID of the mute rule to apply
 
-    Returns:
-        dict: Summary of the muting operation with findings_muted count
-    """
-    findings_muted_count = 0
+def mute_findings_in_latest_scans(
+    tenant_id: str, mute_rule_id: str, provider_ids: list[str]
+) -> dict:
+    """Apply a mute rule to the latest completed scan of each provider."""
+    provider_ids = list(dict.fromkeys(provider_ids))
 
-    # Get the list of UIDs to mute and the reason
     with rls_transaction(tenant_id):
         mute_rule = MuteRule.objects.get(id=mute_rule_id, tenant_id=tenant_id)
-        finding_uids = mute_rule.finding_uids
-        mute_reason = mute_rule.reason
-        muted_at = mute_rule.inserted_at
-
-    # Query findings that match the UIDs and are not already muted
-    with rls_transaction(tenant_id):
-        findings_to_mute = Finding.objects.filter(
-            tenant_id=tenant_id, uid__in=finding_uids, muted=False
-        )
-        total_findings = findings_to_mute.count()
-
-        logger.info(
-            f"Processing {total_findings} findings for mute rule {mute_rule_id}"
+        latest_scans = list(
+            Scan.objects.filter(
+                tenant_id=tenant_id,
+                provider_id__in=provider_ids,
+                state=StateChoices.COMPLETED,
+                completed_at__isnull=False,
+            )
+            .order_by("provider_id", "-completed_at", "-inserted_at", "-id")
+            .distinct("provider_id")
+            .values_list("id", flat=True)
         )
 
-        if total_findings > 0:
-            for batch, is_last in batched(
-                findings_to_mute.iterator(), DJANGO_FINDINGS_BATCH_SIZE
-            ):
-                batch_ids = [f.id for f in batch]
-                updated_count = Finding.all_objects.filter(
-                    id__in=batch_ids, tenant_id=tenant_id
-                ).update(
-                    muted=True,
-                    muted_at=muted_at,
-                    muted_reason=mute_reason,
-                )
-                findings_muted_count += updated_count
-
-    logger.info(f"Muted {findings_muted_count} findings for rule {mute_rule_id}")
+        changed_scan_ids = []
+        findings_muted = 0
+        for scan_id in latest_scans:
+            updated = _mute_findings_for_rule(
+                tenant_id=tenant_id,
+                scan_id=str(scan_id),
+                finding_uids=mute_rule.finding_uids,
+                muted_at=mute_rule.inserted_at,
+                muted_reason=mute_rule.reason,
+            )
+            if updated:
+                findings_muted += updated
+                changed_scan_ids.append(str(scan_id))
 
+    logger.info(
+        "Muted %d findings in %d latest scans for rule %s",
+        findings_muted,
+        len(changed_scan_ids),
+        mute_rule_id,
+    )
     return {
-        "findings_muted": findings_muted_count,
+        "findings_muted": findings_muted,
         "rule_id": mute_rule_id,
+        "scan_ids": changed_scan_ids,
     }
+
+
+def reconcile_scan_mute_rules(tenant_id: str, scan_id: str) -> dict:
+    """Apply the current enabled mute rules to one completed scan."""
+    findings_muted = 0
+
+    with rls_transaction(tenant_id):
+        mute_rules = MuteRule.objects.filter(tenant_id=tenant_id, enabled=True).values(
+            "finding_uids", "reason", "inserted_at"
+        )
+
+        for mute_rule in mute_rules:
+            findings_muted += _mute_findings_for_rule(
+                tenant_id=tenant_id,
+                scan_id=scan_id,
+                finding_uids=mute_rule["finding_uids"],
+                muted_at=mute_rule["inserted_at"],
+                muted_reason=mute_rule["reason"],
+            )
+
+    logger.info(
+        "Reconciled mute rules for scan %s; muted %d findings",
+        scan_id,
+        findings_muted,
+    )
+    return {"findings_muted": findings_muted, "scan_id": str(scan_id)}
diff --git a/api/src/backend/tasks/tasks.py b/api/src/backend/tasks/tasks.py
index e9101ff1bb..d160a2b6c7 100644
--- a/api/src/backend/tasks/tasks.py
+++ b/api/src/backend/tasks/tasks.py
@@ -73,7 +73,10 @@ from tasks.jobs.lighthouse_providers import (
     check_lighthouse_provider_connection,
     refresh_lighthouse_provider_models,
 )
-from tasks.jobs.muting import mute_historical_findings
+from tasks.jobs.muting import (
+    mute_findings_in_latest_scans,
+    reconcile_scan_mute_rules,
+)
 from tasks.jobs.orphan_recovery import reconcile_orphans
 from tasks.jobs.report import (
     STALE_TMP_OUTPUT_MAX_AGE_HOURS,
@@ -526,6 +529,7 @@ def perform_scan_task(
             provider_id=provider_id,
             checks_to_execute=checks_to_execute,
         )
+        reconcile_scan_mute_rules(tenant_id, scan_id)
         _perform_scan_complete_tasks(tenant_id, scan_id, provider_id)
         return result
     finally:
@@ -635,6 +639,7 @@ def perform_scheduled_scan_task(self, tenant_id: str, provider_id: str):
             scan_id=str(scan_instance.id),
             provider_id=provider_id,
         )
+        reconcile_scan_mute_rules(tenant_id, str(scan_instance.id))
         _perform_scan_complete_tasks(tenant_id, str(scan_instance.id), provider_id)
         return result
     finally:
@@ -1188,85 +1193,48 @@ def aggregate_finding_group_summaries_task(tenant_id: str, scan_id: str):
     return aggregate_finding_group_summaries(tenant_id=tenant_id, scan_id=scan_id)
 
 
-@shared_task(
-    base=RLSTask, name="reaggregate-all-finding-group-summaries", queue="overview"
-)
-@set_tenant(keep_tenant=True)
-def reaggregate_all_finding_group_summaries_task(tenant_id: str):
-    """Reaggregate every pre-aggregated summary table for this tenant.
+def _dispatch_scan_summary_reaggregation(tenant_id: str, scan_ids: list[str]) -> None:
+    if not scan_ids:
+        return
 
-    Mirrors the unbounded scope of `mute_historical_findings_task`: that task
-    rewrites every Finding row whose UID matches a mute rule, with no time
-    limit. To keep the pre-aggregated tables consistent with that update,
-    this task re-runs the same per-scan aggregation pipeline that scan
-    completion runs on the latest completed scan of every (provider, day)
-    pair, rebuilding the tables that power the read endpoints:
-
-      - `ScanSummary` and `DailySeveritySummary` -> `/overviews/findings`,
-        `/overviews/findings-severity`, `/overviews/services`.
-      - `FindingGroupDailySummary` -> `/finding-groups` and
-        `/finding-groups/latest`.
-      - `ScanGroupSummary` -> `/overviews/resource-groups` (resource
-        inventory).
-      - `ScanCategorySummary` -> `/overviews/categories`.
-      - `AttackSurfaceOverview` -> `/overviews/attack-surfaces`.
-
-    Per-scan pipelines are dispatched in parallel via a Celery group so
-    wallclock scales with the worker pool.
-    """
-    completed_scans = list(
-        Scan.objects.filter(
-            tenant_id=tenant_id,
-            state=StateChoices.COMPLETED,
-            completed_at__isnull=False,
-        )
-        .order_by("-completed_at")
-        .values("id", "completed_at", "provider_id")
+    logger.info(
+        "Reaggregating overview/finding summaries for %d latest scans",
+        len(scan_ids),
     )
-
-    # Keep the latest scan per (provider, day) pair so the daily summary row
-    # the aggregator writes is the most recent snapshot of that day for that
-    # provider. Iterating from most recent to oldest means the first scan we
-    # see for a given key wins.
-    latest_scans: dict[tuple, str] = {}
-    for scan in completed_scans:
-        key = (scan["provider_id"], scan["completed_at"].date())
-        if key not in latest_scans:
-            latest_scans[key] = str(scan["id"])
-
-    scan_ids = list(latest_scans.values())
-    if scan_ids:
-        logger.info(
-            "Reaggregating overview/finding summaries for %d scans (provider x day)",
-            len(scan_ids),
-        )
-        # DailySeveritySummary reads from ScanSummary, so ScanSummary must be
-        # recomputed first; the other aggregators read Finding directly and
-        # can run in parallel with the severity step.
-        group(
-            chain(
-                perform_scan_summary_task.si(tenant_id=tenant_id, scan_id=scan_id),
-                group(
-                    aggregate_daily_severity_task.si(
-                        tenant_id=tenant_id, scan_id=scan_id
-                    ),
-                    aggregate_finding_group_summaries_task.si(
-                        tenant_id=tenant_id, scan_id=scan_id
-                    ),
-                    aggregate_scan_resource_group_summaries_task.si(
-                        tenant_id=tenant_id, scan_id=scan_id
-                    ),
-                    aggregate_scan_category_summaries_task.si(
-                        tenant_id=tenant_id, scan_id=scan_id
-                    ),
-                    aggregate_attack_surface_task.si(
-                        tenant_id=tenant_id, scan_id=scan_id
-                    ),
+    group(
+        chain(
+            perform_scan_summary_task.si(tenant_id=tenant_id, scan_id=scan_id),
+            group(
+                aggregate_daily_severity_task.si(tenant_id=tenant_id, scan_id=scan_id),
+                aggregate_finding_group_summaries_task.si(
+                    tenant_id=tenant_id, scan_id=scan_id
                 ),
-            )
-            for scan_id in scan_ids
-        ).apply_async()
-    return {"scans_reaggregated": len(scan_ids)}
+                aggregate_scan_resource_group_summaries_task.si(
+                    tenant_id=tenant_id, scan_id=scan_id
+                ),
+                aggregate_scan_category_summaries_task.si(
+                    tenant_id=tenant_id, scan_id=scan_id
+                ),
+                aggregate_attack_surface_task.si(tenant_id=tenant_id, scan_id=scan_id),
+            ),
+        )
+        for scan_id in scan_ids
+    ).apply_async()
+
+
+@shared_task(base=RLSTask, name="findings-mute-latest-scans", queue="overview")
+@set_tenant(keep_tenant=True)
+def mute_findings_in_latest_scans_task(
+    tenant_id: str, mute_rule_id: str, provider_ids: list[str]
+):
+    """Apply a mute rule to current scans and rebuild only changed summaries."""
+    result = mute_findings_in_latest_scans(
+        tenant_id=tenant_id,
+        mute_rule_id=mute_rule_id,
+        provider_ids=provider_ids,
+    )
+    _dispatch_scan_summary_reaggregation(tenant_id, result["scan_ids"])
+    return result
 
 
 @shared_task(base=RLSTask, name="lighthouse-connection-check")
@@ -1467,25 +1435,3 @@ def generate_compliance_reports_task(tenant_id: str, scan_id: str, provider_id:
         generate_csa=True,
         generate_cis=True,
     )
-
-
-@shared_task(name="findings-mute-historical")
-def mute_historical_findings_task(tenant_id: str, mute_rule_id: str):
-    """
-    Background task to mute all historical findings matching a mute rule.
-
-    This task processes findings in batches to avoid memory issues with large datasets.
-    It updates the Finding.muted, Finding.muted_at, and Finding.muted_reason fields
-    for all findings whose UID is in the mute rule's finding_uids list.
-
-    Args:
-        tenant_id (str): The tenant ID for RLS context.
-        mute_rule_id (str): The primary key of the MuteRule to apply.
-
-    Returns:
-        dict: A dictionary containing:
-            - 'findings_muted' (int): Total number of findings muted.
-            - 'rule_id' (str): The mute rule ID.
-            - 'status' (str): Final status ('completed').
-    """
-    return mute_historical_findings(tenant_id, mute_rule_id)
diff --git a/api/src/backend/tasks/tests/test_muting.py b/api/src/backend/tasks/tests/test_muting.py
index 2e542980bf..b11e704cd0 100644
--- a/api/src/backend/tasks/tests/test_muting.py
+++ b/api/src/backend/tasks/tests/test_muting.py
@@ -1,531 +1,205 @@
-from datetime import UTC, datetime
+from datetime import UTC, datetime, timedelta
 from uuid import uuid4
 
 import pytest
-from api.models import Finding, MuteRule
-from django.core.exceptions import ObjectDoesNotExist
+from api.models import Finding, MuteRule, Scan, StateChoices
 from prowler.lib.check.models import Severity
 from prowler.lib.outputs.finding import Status
-from tasks.jobs.muting import mute_historical_findings
+from tasks.jobs.muting import (
+    mute_findings_in_latest_scans,
+    reconcile_scan_mute_rules,
+)
+
+
+def _create_finding(scan: Scan, uid: str) -> Finding:
+    return Finding.objects.create(
+        tenant_id=scan.tenant_id,
+        uid=uid,
+        scan=scan,
+        status=Status.FAIL,
+        status_extended="Test finding",
+        impact=Severity.high,
+        severity=Severity.high,
+        raw_result={},
+        check_id="test_check",
+        check_metadata={"CheckId": "test_check"},
+        muted=False,
+    )
+
+
+def _create_mute_rule(tenant_id, user, finding_uids, *, enabled=True) -> MuteRule:
+    return MuteRule.objects.create(
+        tenant_id=tenant_id,
+        name=f"Mute rule {uuid4()}",
+        reason="Approved exception",
+        enabled=enabled,
+        created_by=user,
+        finding_uids=finding_uids,
+    )
 
 
 @pytest.mark.django_db
-class TestMuteHistoricalFindings:
-    """
-    Test suite for the mute_historical_findings function.
+class TestMuteFindingsInLatestScans:
+    def test_mutes_latest_scan_and_leaves_older_scan_unchanged(
+        self, scans_fixture, create_test_user
+    ):
+        latest_scan = scans_fixture[0]
+        older_scan = Scan.objects.create(
+            tenant_id=latest_scan.tenant_id,
+            provider=latest_scan.provider,
+            name="Older scan",
+            trigger=Scan.TriggerChoices.MANUAL,
+            state=StateChoices.COMPLETED,
+            started_at=datetime.now(UTC) - timedelta(days=1),
+            completed_at=datetime.now(UTC) - timedelta(days=1),
+        )
+        uid = "latest-scan-only"
+        older_finding = _create_finding(older_scan, uid)
+        latest_finding = _create_finding(latest_scan, uid)
+        mute_rule = _create_mute_rule(latest_scan.tenant_id, create_test_user, [uid])
 
-    This class tests the batch processing of findings to update their muted status
-    based on MuteRule criteria.
-    """
+        result = mute_findings_in_latest_scans(
+            str(latest_scan.tenant_id),
+            str(mute_rule.id),
+            [str(latest_scan.provider_id)],
+        )
 
-    @pytest.fixture(scope="function")
-    def test_user(self, create_test_user):
-        """Create a test user for mute rule creation."""
-        return create_test_user
+        older_finding.refresh_from_db()
+        latest_finding.refresh_from_db()
+        assert older_finding.muted is False
+        assert latest_finding.muted is True
+        assert latest_finding.muted_at == mute_rule.inserted_at
+        assert latest_finding.muted_reason == mute_rule.reason
+        assert result == {
+            "findings_muted": 1,
+            "rule_id": str(mute_rule.id),
+            "scan_ids": [str(latest_scan.id)],
+        }
 
-    @pytest.fixture(scope="function")
-    def mute_rule_with_findings(self, tenants_fixture, findings_fixture, test_user):
-        """
-        Create a mute rule that targets the first finding in the fixture.
-        """
+    def test_mutes_one_latest_scan_per_provider(self, scans_fixture, create_test_user):
+        first_scan, second_scan, _ = scans_fixture
+        uid = "shared-selected-uid"
+        first_finding = _create_finding(first_scan, uid)
+        second_finding = _create_finding(second_scan, uid)
+        mute_rule = _create_mute_rule(first_scan.tenant_id, create_test_user, [uid])
+
+        result = mute_findings_in_latest_scans(
+            str(first_scan.tenant_id),
+            str(mute_rule.id),
+            [str(first_scan.provider_id), str(second_scan.provider_id)],
+        )
+
+        first_finding.refresh_from_db()
+        second_finding.refresh_from_db()
+        assert first_finding.muted is True
+        assert second_finding.muted is True
+        assert result["findings_muted"] == 2
+        assert set(result["scan_ids"]) == {str(first_scan.id), str(second_scan.id)}
+
+    def test_provider_without_completed_scan_does_nothing(
+        self, tenants_fixture, provider_factory, create_test_user
+    ):
         tenant = tenants_fixture[0]
-        finding = findings_fixture[0]
-
-        mute_rule = MuteRule.objects.create(
-            tenant_id=tenant.id,
-            name="Test Mute Rule",
-            reason="Testing mute functionality",
-            enabled=True,
-            created_by=test_user,
-            finding_uids=[finding.uid],
+        provider = provider_factory()
+        mute_rule = _create_mute_rule(
+            tenant.id, create_test_user, ["future-scan-finding"]
         )
 
-        return mute_rule
+        result = mute_findings_in_latest_scans(
+            str(tenant.id), str(mute_rule.id), [str(provider.id)]
+        )
 
-    @pytest.fixture(scope="function")
-    def mute_rule_multiple_findings(self, scans_fixture, test_user):
-        """
-        Create multiple unmuted findings and a mute rule targeting all of them.
-        """
+        assert result == {
+            "findings_muted": 0,
+            "rule_id": str(mute_rule.id),
+            "scan_ids": [],
+        }
+
+    def test_retry_does_not_report_changed_scans_twice(
+        self, scans_fixture, create_test_user
+    ):
         scan = scans_fixture[0]
-        tenant_id = scan.tenant_id
-
-        # Create 5 unmuted findings
-        finding_uids = []
-        for i in range(5):
-            finding = Finding.objects.create(
-                tenant_id=tenant_id,
-                uid=f"test_finding_uid_mute_{i}",
-                scan=scan,
-                status=Status.FAIL,
-                status_extended=f"Test status {i}",
-                impact=Severity.high,
-                severity=Severity.high,
-                raw_result={
-                    "status": Status.FAIL,
-                    "impact": Severity.high,
-                    "severity": Severity.high,
-                },
-                check_id=f"test_check_id_{i}",
-                check_metadata={
-                    "CheckId": f"test_check_id_{i}",
-                    "Description": f"Test description {i}",
-                },
-                muted=False,
-            )
-            finding_uids.append(finding.uid)
-
-        # Create mute rule targeting all findings
-        mute_rule = MuteRule.objects.create(
-            tenant_id=tenant_id,
-            name="Test Multiple Findings Mute Rule",
-            reason="Testing batch muting",
-            enabled=True,
-            created_by=test_user,
-            finding_uids=finding_uids,
+        finding = _create_finding(scan, "idempotent-mute")
+        mute_rule = _create_mute_rule(scan.tenant_id, create_test_user, [finding.uid])
+        args = (
+            str(scan.tenant_id),
+            str(mute_rule.id),
+            [str(scan.provider_id)],
         )
 
-        return mute_rule, finding_uids
+        first_result = mute_findings_in_latest_scans(*args)
+        second_result = mute_findings_in_latest_scans(*args)
 
-    @pytest.fixture(scope="function")
-    def mute_rule_already_muted(self, findings_fixture, test_user):
-        """
-        Create a mute rule that targets an already-muted finding.
-        """
-        tenant_id = findings_fixture[1].tenant_id
-        already_muted_finding = findings_fixture[1]
+        assert first_result["scan_ids"] == [str(scan.id)]
+        assert second_result["findings_muted"] == 0
+        assert second_result["scan_ids"] == []
 
-        mute_rule = MuteRule.objects.create(
-            tenant_id=tenant_id,
-            name="Test Already Muted Rule",
-            reason="Testing already muted findings",
-            enabled=True,
-            created_by=test_user,
-            finding_uids=[already_muted_finding.uid],
+    def test_does_not_cross_tenant_boundary(
+        self, tenants_fixture, provider_factory, create_test_user
+    ):
+        tenant = tenants_fixture[0]
+        other_tenant = tenants_fixture[2]
+        other_provider = provider_factory(tenant=other_tenant)
+        other_scan = Scan.objects.create(
+            tenant_id=other_tenant.id,
+            provider=other_provider,
+            name="Other tenant scan",
+            trigger=Scan.TriggerChoices.MANUAL,
+            state=StateChoices.COMPLETED,
+            started_at=datetime.now(UTC),
+            completed_at=datetime.now(UTC),
+        )
+        other_finding = _create_finding(other_scan, "tenant-isolated-uid")
+        mute_rule = _create_mute_rule(tenant.id, create_test_user, [other_finding.uid])
+
+        result = mute_findings_in_latest_scans(
+            str(tenant.id), str(mute_rule.id), [str(other_provider.id)]
         )
 
-        return mute_rule
+        other_finding.refresh_from_db()
+        assert other_finding.muted is False
+        assert result["scan_ids"] == []
 
-    @pytest.fixture(scope="function")
-    def mute_rule_mixed_findings(self, scans_fixture, test_user):
-        """
-        Create a mute rule with a mix of muted and unmuted findings.
-        """
+    def test_nonexistent_rule_raises(self, tenants_fixture):
+        with pytest.raises(MuteRule.DoesNotExist):
+            mute_findings_in_latest_scans(str(tenants_fixture[0].id), str(uuid4()), [])
+
+
+@pytest.mark.django_db
+class TestReconcileScanMuteRules:
+    def test_applies_only_enabled_rules_to_requested_scan(
+        self, scans_fixture, create_test_user
+    ):
         scan = scans_fixture[0]
-        tenant_id = scan.tenant_id
-
-        # Create 3 unmuted findings
-        unmuted_uids = []
-        for i in range(3):
-            finding = Finding.objects.create(
-                tenant_id=tenant_id,
-                uid=f"unmuted_finding_{i}",
-                scan=scan,
-                status=Status.FAIL,
-                status_extended=f"Unmuted status {i}",
-                impact=Severity.medium,
-                severity=Severity.medium,
-                raw_result={
-                    "status": Status.FAIL,
-                    "impact": Severity.medium,
-                    "severity": Severity.medium,
-                },
-                check_id=f"unmuted_check_{i}",
-                check_metadata={
-                    "CheckId": f"unmuted_check_{i}",
-                    "Description": f"Unmuted description {i}",
-                },
-                muted=False,
-            )
-            unmuted_uids.append(finding.uid)
-
-        # Create 2 already muted findings
-        muted_uids = []
-        for i in range(2):
-            finding = Finding.objects.create(
-                tenant_id=tenant_id,
-                uid=f"muted_finding_{i}",
-                scan=scan,
-                status=Status.FAIL,
-                status_extended=f"Muted status {i}",
-                impact=Severity.low,
-                severity=Severity.low,
-                raw_result={
-                    "status": Status.FAIL,
-                    "impact": Severity.low,
-                    "severity": Severity.low,
-                },
-                check_id=f"muted_check_{i}",
-                check_metadata={
-                    "CheckId": f"muted_check_{i}",
-                    "Description": f"Muted description {i}",
-                },
-                muted=True,
-                muted_at=datetime.now(UTC),
-                muted_reason="Already muted",
-            )
-            muted_uids.append(finding.uid)
-
-        # Create mute rule targeting all findings
-        all_uids = unmuted_uids + muted_uids
-        mute_rule = MuteRule.objects.create(
-            tenant_id=tenant_id,
-            name="Test Mixed Findings Rule",
-            reason="Testing mixed muted/unmuted findings",
-            enabled=True,
-            created_by=test_user,
-            finding_uids=all_uids,
+        active_finding = _create_finding(scan, "active-rule-uid")
+        disabled_finding = _create_finding(scan, "disabled-rule-uid")
+        active_rule = _create_mute_rule(
+            scan.tenant_id, create_test_user, [active_finding.uid]
         )
-
-        return mute_rule, unmuted_uids, muted_uids
-
-    @pytest.fixture(scope="function")
-    def mute_rule_batch_test(self, scans_fixture, test_user):
-        """
-        Create enough findings to test batch processing (>1000 for default batch size).
-        """
-        scan = scans_fixture[0]
-        tenant_id = scan.tenant_id
-
-        # Create 1500 findings to exceed default batch size of 1000
-        finding_uids = []
-        for i in range(1500):
-            finding = Finding.objects.create(
-                tenant_id=tenant_id,
-                uid=f"batch_test_finding_{i}",
-                scan=scan,
-                status=Status.FAIL,
-                status_extended=f"Batch test status {i}",
-                impact=Severity.critical,
-                severity=Severity.critical,
-                raw_result={
-                    "status": Status.FAIL,
-                    "impact": Severity.critical,
-                    "severity": Severity.critical,
-                },
-                check_id=f"batch_test_check_{i}",
-                check_metadata={
-                    "CheckId": f"batch_test_check_{i}",
-                    "Description": f"Batch test description {i}",
-                },
-                muted=False,
-            )
-            finding_uids.append(finding.uid)
-
-        # Create mute rule targeting all findings
-        mute_rule = MuteRule.objects.create(
-            tenant_id=tenant_id,
-            name="Test Batch Processing Rule",
-            reason="Testing batch processing functionality",
-            enabled=True,
-            created_by=test_user,
-            finding_uids=finding_uids,
+        _create_mute_rule(
+            scan.tenant_id,
+            create_test_user,
+            [disabled_finding.uid],
+            enabled=False,
         )
-
-        return mute_rule, finding_uids
-
-    def test_mute_historical_findings_single_finding(
-        self, mute_rule_with_findings, findings_fixture
-    ):
-        """
-        Test muting a single historical finding.
-        """
-        mute_rule = mute_rule_with_findings
-        tenant_id = str(mute_rule.tenant_id)
-        finding = findings_fixture[0]
-
-        # Ensure the finding is not muted before execution
-        finding.refresh_from_db()
-        assert finding.muted is False
-        assert finding.muted_at is None
-        assert finding.muted_reason is None
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify return value
-        assert result["findings_muted"] == 1
-        assert result["rule_id"] == str(mute_rule.id)
-
-        # Verify the finding was muted
-        finding.refresh_from_db()
-        assert finding.muted is True
-        assert finding.muted_at == mute_rule.inserted_at
-        assert finding.muted_reason == mute_rule.reason
-
-    def test_mute_historical_findings_multiple_findings(
-        self, mute_rule_multiple_findings
-    ):
-        """
-        Test muting multiple historical findings.
-        """
-        mute_rule, finding_uids = mute_rule_multiple_findings
-        tenant_id = str(mute_rule.tenant_id)
-
-        # Verify all findings are unmuted
-        findings = Finding.objects.filter(tenant_id=tenant_id, uid__in=finding_uids)
-        assert findings.count() == 5
-        for finding in findings:
-            assert finding.muted is False
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify return value
-        assert result["findings_muted"] == 5
-        assert result["rule_id"] == str(mute_rule.id)
-
-        # Verify all findings were muted
-        findings = Finding.objects.filter(tenant_id=tenant_id, uid__in=finding_uids)
-        for finding in findings:
-            assert finding.muted is True
-            assert finding.muted_at == mute_rule.inserted_at
-            assert finding.muted_reason == mute_rule.reason
-
-    def test_mute_historical_findings_already_muted(
-        self, mute_rule_already_muted, findings_fixture
-    ):
-        """
-        Test that already-muted findings are not counted or updated.
-        """
-        mute_rule = mute_rule_already_muted
-        tenant_id = str(mute_rule.tenant_id)
-        finding = findings_fixture[1]
-
-        # Verify the finding is already muted
-        finding.refresh_from_db()
-        assert finding.muted is True
-        original_muted_at = finding.muted_at
-        original_muted_reason = finding.muted_reason
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify no findings were muted
-        assert result["findings_muted"] == 0
-        assert result["rule_id"] == str(mute_rule.id)
-
-        # Verify the finding's mute status did not change
-        finding.refresh_from_db()
-        assert finding.muted is True
-        assert finding.muted_at == original_muted_at
-        assert finding.muted_reason == original_muted_reason
-
-    def test_mute_historical_findings_mixed_status(self, mute_rule_mixed_findings):
-        """
-        Test muting when some findings are already muted and others are not.
-        """
-        mute_rule, unmuted_uids, muted_uids = mute_rule_mixed_findings
-        tenant_id = str(mute_rule.tenant_id)
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify only unmuted findings were counted
-        assert result["findings_muted"] == 3
-        assert result["rule_id"] == str(mute_rule.id)
-
-        # Verify unmuted findings are now muted
-        unmuted_findings = Finding.objects.filter(
-            tenant_id=tenant_id, uid__in=unmuted_uids
+        older_scan = Scan.objects.create(
+            tenant_id=scan.tenant_id,
+            provider=scan.provider,
+            name="Older matching scan",
+            trigger=Scan.TriggerChoices.MANUAL,
+            state=StateChoices.COMPLETED,
+            started_at=datetime.now(UTC) - timedelta(days=1),
+            completed_at=datetime.now(UTC) - timedelta(days=1),
         )
-        for finding in unmuted_findings:
-            assert finding.muted is True
-            assert finding.muted_at == mute_rule.inserted_at
-            assert finding.muted_reason == mute_rule.reason
+        older_finding = _create_finding(older_scan, active_finding.uid)
 
-        # Verify already-muted findings remained unchanged
-        already_muted_findings = Finding.objects.filter(
-            tenant_id=tenant_id, uid__in=muted_uids
-        )
-        for finding in already_muted_findings:
-            assert finding.muted is True
-            assert finding.muted_reason == "Already muted"
+        result = reconcile_scan_mute_rules(str(scan.tenant_id), str(scan.id))
 
-    def test_mute_historical_findings_nonexistent_rule(self, tenants_fixture):
-        """
-        Test that a nonexistent mute rule raises ObjectDoesNotExist.
-        """
-        tenant_id = str(tenants_fixture[0].id)
-        nonexistent_rule_id = str(uuid4())
-
-        with pytest.raises(ObjectDoesNotExist):
-            mute_historical_findings(tenant_id, nonexistent_rule_id)
-
-    def test_mute_historical_findings_no_matching_findings(
-        self, tenants_fixture, test_user
-    ):
-        """
-        Test muting when no findings match the rule's UIDs.
-        """
-        tenant_id = str(tenants_fixture[0].id)
-
-        # Create a mute rule with non-existent finding UIDs
-        mute_rule = MuteRule.objects.create(
-            tenant_id=tenant_id,
-            name="Test No Match Rule",
-            reason="Testing no matching findings",
-            enabled=True,
-            created_by=test_user,
-            finding_uids=[
-                "nonexistent_uid_1",
-                "nonexistent_uid_2",
-                "nonexistent_uid_3",
-            ],
-        )
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify no findings were muted
-        assert result["findings_muted"] == 0
-        assert result["rule_id"] == str(mute_rule.id)
-
-    def test_mute_historical_findings_batch_processing(self, mute_rule_batch_test):
-        """
-        Test that large numbers of findings are processed in batches correctly.
-        """
-        mute_rule, finding_uids = mute_rule_batch_test
-        tenant_id = str(mute_rule.tenant_id)
-
-        # Verify all findings exist and are unmuted
-        findings = Finding.objects.filter(tenant_id=tenant_id, uid__in=finding_uids)
-        assert findings.count() == 1500
-        for finding in findings:
-            assert finding.muted is False
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify return value
-        assert result["findings_muted"] == 1500
-        assert result["rule_id"] == str(mute_rule.id)
-
-        # Verify all findings were muted
-        findings = Finding.objects.filter(tenant_id=tenant_id, uid__in=finding_uids)
-        for finding in findings:
-            assert finding.muted is True
-            assert finding.muted_at == mute_rule.inserted_at
-            assert finding.muted_reason == mute_rule.reason
-
-    def test_mute_historical_findings_preserves_muted_at_timestamp(
-        self, mute_rule_with_findings, findings_fixture
-    ):
-        """
-        Test that muted_at is set to the rule's inserted_at, not the current time.
-        """
-        mute_rule = mute_rule_with_findings
-        tenant_id = str(mute_rule.tenant_id)
-        finding = findings_fixture[0]
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify the finding was muted
-        assert result["findings_muted"] == 1
-
-        # Verify muted_at matches the rule's inserted_at timestamp
-        finding.refresh_from_db()
-        assert finding.muted_at == mute_rule.inserted_at
-        assert finding.muted_at is not None
-
-    def test_mute_historical_findings_partial_match(self, scans_fixture, test_user):
-        """
-        Test muting when only some of the rule's UIDs exist as findings.
-        """
-        scan = scans_fixture[0]
-        tenant_id = str(scan.tenant_id)
-
-        # Create 3 findings
-        existing_uids = []
-        for i in range(3):
-            finding = Finding.objects.create(
-                tenant_id=tenant_id,
-                uid=f"partial_match_finding_{i}",
-                scan=scan,
-                status=Status.FAIL,
-                status_extended=f"Partial match status {i}",
-                impact=Severity.high,
-                severity=Severity.high,
-                raw_result={
-                    "status": Status.FAIL,
-                    "impact": Severity.high,
-                    "severity": Severity.high,
-                },
-                check_id=f"partial_match_check_{i}",
-                check_metadata={
-                    "CheckId": f"partial_match_check_{i}",
-                    "Description": f"Partial match description {i}",
-                },
-                muted=False,
-            )
-            existing_uids.append(finding.uid)
-
-        # Create a mute rule with both existing and non-existing UIDs
-        all_uids = existing_uids + [
-            "nonexistent_uid_1",
-            "nonexistent_uid_2",
-        ]
-        mute_rule = MuteRule.objects.create(
-            tenant_id=tenant_id,
-            name="Test Partial Match Rule",
-            reason="Testing partial matching",
-            enabled=True,
-            created_by=test_user,
-            finding_uids=all_uids,
-        )
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify only existing findings were muted
-        assert result["findings_muted"] == 3
-        assert result["rule_id"] == str(mute_rule.id)
-
-        # Verify the existing findings were muted
-        findings = Finding.objects.filter(tenant_id=tenant_id, uid__in=existing_uids)
-        assert findings.count() == 3
-        for finding in findings:
-            assert finding.muted is True
-            assert finding.muted_at == mute_rule.inserted_at
-            assert finding.muted_reason == mute_rule.reason
-
-    def test_mute_historical_findings_empty_uids(self, tenants_fixture, test_user):
-        """
-        Test muting when the rule has an empty finding_uids array.
-        """
-        tenant_id = str(tenants_fixture[0].id)
-
-        # Create a mute rule with empty finding_uids
-        mute_rule = MuteRule.objects.create(
-            tenant_id=tenant_id,
-            name="Test Empty UIDs Rule",
-            reason="Testing empty UIDs",
-            enabled=True,
-            created_by=test_user,
-            finding_uids=[],
-        )
-
-        # Execute the muting function
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify no findings were muted
-        assert result["findings_muted"] == 0
-        assert result["rule_id"] == str(mute_rule.id)
-
-    def test_mute_historical_findings_return_format(self, mute_rule_with_findings):
-        """
-        Test that the return value has the correct format and fields.
-        """
-        mute_rule = mute_rule_with_findings
-        tenant_id = str(mute_rule.tenant_id)
-
-        result = mute_historical_findings(tenant_id, str(mute_rule.id))
-
-        # Verify return value structure
-        assert isinstance(result, dict)
-        assert "findings_muted" in result
-        assert "rule_id" in result
-        assert isinstance(result["findings_muted"], int)
-        assert isinstance(result["rule_id"], str)
-        assert result["rule_id"] == str(mute_rule.id)
+        active_finding.refresh_from_db()
+        disabled_finding.refresh_from_db()
+        older_finding.refresh_from_db()
+        assert active_finding.muted is True
+        assert active_finding.muted_at == active_rule.inserted_at
+        assert disabled_finding.muted is False
+        assert older_finding.muted is False
+        assert result == {"findings_muted": 1, "scan_id": str(scan.id)}
diff --git a/api/src/backend/tasks/tests/test_tasks.py b/api/src/backend/tasks/tests/test_tasks.py
index 8c846be805..b4854fe196 100644
--- a/api/src/backend/tasks/tests/test_tasks.py
+++ b/api/src/backend/tasks/tests/test_tasks.py
@@ -1,6 +1,6 @@
 import uuid
 from contextlib import contextmanager
-from datetime import UTC, datetime, timedelta
+from datetime import UTC, datetime
 from unittest.mock import MagicMock, patch
 
 import httpx
@@ -33,10 +33,10 @@ from tasks.tasks import (
     check_integrations_task,
     check_lighthouse_provider_connection_task,
     generate_outputs_task,
+    mute_findings_in_latest_scans_task,
     perform_attack_paths_scan_task,
     perform_scan_task,
     perform_scheduled_scan_task,
-    reaggregate_all_finding_group_summaries_task,
     refresh_lighthouse_provider_models_task,
     s3_integration_task,
     security_hub_integration_task,
@@ -2959,6 +2959,7 @@ class TestPerformScheduledScanTask:
         with (
             patch("tasks.tasks.perform_prowler_scan", side_effect=_complete_scan),
             patch("tasks.tasks._perform_scan_complete_tasks"),
+            patch("tasks.tasks.reconcile_scan_mute_rules") as mock_reconcile,
             self._override_task_request(perform_scheduled_scan_task, id=task_id),
         ):
             perform_scheduled_scan_task.run(
@@ -2982,6 +2983,13 @@ class TestPerformScheduledScanTask:
             ).count()
             == 1
         )
+        completed_scan = Scan.objects.get(
+            tenant_id=tenant.id,
+            provider=provider,
+            trigger=Scan.TriggerChoices.SCHEDULED,
+            state=StateChoices.COMPLETED,
+        )
+        mock_reconcile.assert_called_once_with(str(tenant.id), str(completed_scan.id))
         assert (
             Scan.objects.filter(
                 tenant_id=tenant.id,
@@ -3176,7 +3184,10 @@ class TestPerformScanTask:
             task=queued_task,
         )
 
+        events = []
+
         def _complete_scan(tenant_id, scan_id, provider_id, checks_to_execute=None):
+            events.append("scan")
             scan_instance = Scan.objects.get(id=scan_id)
             scan_instance.state = StateChoices.COMPLETED
             scan_instance.save()
@@ -3184,7 +3195,14 @@ class TestPerformScanTask:
 
         with (
             patch("tasks.tasks.perform_prowler_scan", side_effect=_complete_scan),
-            patch("tasks.tasks._perform_scan_complete_tasks"),
+            patch(
+                "tasks.tasks.reconcile_scan_mute_rules",
+                side_effect=lambda *_args: events.append("reconcile"),
+            ),
+            patch(
+                "tasks.tasks._perform_scan_complete_tasks",
+                side_effect=lambda *_args: events.append("summaries"),
+            ),
             patch("tasks.tasks.perform_scan_task.apply_async") as mock_apply_async,
         ):
             with django_capture_on_commit_callbacks(execute=True):
@@ -3196,6 +3214,7 @@ class TestPerformScanTask:
 
         queued_task_result.refresh_from_db()
         assert result == {"status": "ok"}
+        assert events == ["scan", "reconcile", "summaries"]
         assert queued_task_result.status == states.PENDING
         mock_apply_async.assert_called_once_with(
             kwargs={
@@ -3241,10 +3260,7 @@ class TestPerformScanTask:
 
 
 @pytest.mark.django_db
-class TestReaggregateAllFindingGroupSummaries:
-    def setup_method(self):
-        self.tenant_id = str(uuid.uuid4())
-
+class TestMuteFindingsInLatestScansTask:
     @patch("tasks.tasks.chain")
     @patch("tasks.tasks.group")
     @patch("tasks.tasks.aggregate_attack_surface_task")
@@ -3253,10 +3269,10 @@ class TestReaggregateAllFindingGroupSummaries:
     @patch("tasks.tasks.aggregate_finding_group_summaries_task")
     @patch("tasks.tasks.aggregate_daily_severity_task")
     @patch("tasks.tasks.perform_scan_summary_task")
-    @patch("tasks.tasks.Scan.objects.filter")
-    def test_dispatches_subtasks_for_each_provider_per_day(
+    @patch("tasks.tasks.mute_findings_in_latest_scans")
+    def test_reaggregates_only_changed_scans(
         self,
-        mock_scan_filter,
+        mock_mute_findings,
         mock_scan_summary_task,
         mock_daily_severity_task,
         mock_finding_group_task,
@@ -3265,119 +3281,36 @@ class TestReaggregateAllFindingGroupSummaries:
         mock_attack_surface_task,
         mock_group,
         mock_chain,
+        tenants_fixture,
     ):
-        provider_id_1 = uuid.uuid4()
-        provider_id_2 = uuid.uuid4()
-        scan_id_today_p1 = uuid.uuid4()
-        scan_id_yesterday_p1 = uuid.uuid4()
-        scan_id_today_p2 = uuid.uuid4()
-        today = datetime.now(tz=UTC)
-        yesterday = today - timedelta(days=1)
-
-        mock_outer_group_result = MagicMock()
-        # The first `group()` call wraps the inner parallel step; subsequent
-        # calls wrap the outer per-scan generator.
-        mock_group.side_effect = lambda *args, **kwargs: (
-            list(args[0]) if args and hasattr(args[0], "__iter__") else None,
-            mock_outer_group_result,
-        )[1]
-
-        mock_scan_filter.return_value.order_by.return_value.values.return_value = [
-            {
-                "id": scan_id_today_p1,
-                "completed_at": today,
-                "provider_id": provider_id_1,
-            },
-            {
-                "id": scan_id_today_p2,
-                "completed_at": today,
-                "provider_id": provider_id_2,
-            },
-            {
-                "id": scan_id_yesterday_p1,
-                "completed_at": yesterday,
-                "provider_id": provider_id_1,
-            },
-        ]
-
-        result = reaggregate_all_finding_group_summaries_task(tenant_id=self.tenant_id)
-
-        assert result == {"scans_reaggregated": 3}
-        expected_scan_ids = {
-            str(scan_id_today_p1),
-            str(scan_id_today_p2),
-            str(scan_id_yesterday_p1),
+        tenant_id = str(tenants_fixture[0].id)
+        mute_rule_id = str(uuid.uuid4())
+        provider_ids = [str(uuid.uuid4()), str(uuid.uuid4())]
+        scan_ids = [str(uuid.uuid4()), str(uuid.uuid4())]
+        result = {
+            "findings_muted": 2,
+            "rule_id": mute_rule_id,
+            "scan_ids": scan_ids,
         }
-        for task_mock in (
-            mock_scan_summary_task,
-            mock_daily_severity_task,
-            mock_finding_group_task,
-            mock_resource_group_task,
-            mock_category_task,
-            mock_attack_surface_task,
-        ):
-            assert task_mock.si.call_count == 3
-            dispatched = {
-                call.kwargs["scan_id"] for call in task_mock.si.call_args_list
-            }
-            assert dispatched == expected_scan_ids
-            for call in task_mock.si.call_args_list:
-                assert call.kwargs["tenant_id"] == self.tenant_id
-        assert mock_chain.call_count == 3
-        mock_outer_group_result.apply_async.assert_called_once()
-
-    @patch("tasks.tasks.chain")
-    @patch("tasks.tasks.group")
-    @patch("tasks.tasks.aggregate_attack_surface_task")
-    @patch("tasks.tasks.aggregate_scan_category_summaries_task")
-    @patch("tasks.tasks.aggregate_scan_resource_group_summaries_task")
-    @patch("tasks.tasks.aggregate_finding_group_summaries_task")
-    @patch("tasks.tasks.aggregate_daily_severity_task")
-    @patch("tasks.tasks.perform_scan_summary_task")
-    @patch("tasks.tasks.Scan.objects.filter")
-    def test_dedupes_scans_to_latest_per_provider_per_day(
-        self,
-        mock_scan_filter,
-        mock_scan_summary_task,
-        mock_daily_severity_task,
-        mock_finding_group_task,
-        mock_resource_group_task,
-        mock_category_task,
-        mock_attack_surface_task,
-        mock_group,
-        mock_chain,
-    ):
-        """When several scans run on the same day for the same provider, only
-        the latest one is dispatched (matching the daily summary unique key)."""
-        provider_id = uuid.uuid4()
-        latest_scan_today = uuid.uuid4()
-        earlier_scan_today = uuid.uuid4()
-        today_late = datetime.now(tz=UTC)
-        today_early = today_late - timedelta(hours=4)
-
+        mock_mute_findings.return_value = result
         mock_outer_group_result = MagicMock()
         mock_group.side_effect = lambda *args, **kwargs: (
             list(args[0]) if args and hasattr(args[0], "__iter__") else None,
             mock_outer_group_result,
         )[1]
 
-        # Returned ordered by `-completed_at`, so the most recent comes first.
-        mock_scan_filter.return_value.order_by.return_value.values.return_value = [
-            {
-                "id": latest_scan_today,
-                "completed_at": today_late,
-                "provider_id": provider_id,
-            },
-            {
-                "id": earlier_scan_today,
-                "completed_at": today_early,
-                "provider_id": provider_id,
-            },
-        ]
+        task_result = mute_findings_in_latest_scans_task(
+            tenant_id=tenant_id,
+            mute_rule_id=mute_rule_id,
+            provider_ids=provider_ids,
+        )
 
-        result = reaggregate_all_finding_group_summaries_task(tenant_id=self.tenant_id)
-
-        assert result == {"scans_reaggregated": 1}
+        assert task_result == result
+        mock_mute_findings.assert_called_once_with(
+            tenant_id=tenant_id,
+            mute_rule_id=mute_rule_id,
+            provider_ids=provider_ids,
+        )
         for task_mock in (
             mock_scan_summary_task,
             mock_daily_severity_task,
@@ -3386,23 +3319,35 @@ class TestReaggregateAllFindingGroupSummaries:
             mock_category_task,
             mock_attack_surface_task,
         ):
-            task_mock.si.assert_called_once_with(
-                tenant_id=self.tenant_id, scan_id=str(latest_scan_today)
-            )
-        mock_chain.assert_called_once()
+            assert task_mock.si.call_count == 2
+            assert {
+                call.kwargs["scan_id"] for call in task_mock.si.call_args_list
+            } == set(scan_ids)
+        assert mock_chain.call_count == 2
         mock_outer_group_result.apply_async.assert_called_once()
 
     @patch("tasks.tasks.chain")
     @patch("tasks.tasks.group")
-    @patch("tasks.tasks.Scan.objects.filter")
-    def test_no_completed_scans_skips_dispatch(
-        self, mock_scan_filter, mock_group, mock_chain
+    @patch("tasks.tasks.mute_findings_in_latest_scans")
+    def test_skips_reaggregation_when_no_scan_changed(
+        self, mock_mute_findings, mock_group, mock_chain, tenants_fixture
     ):
-        mock_scan_filter.return_value.order_by.return_value.values.return_value = []
+        tenant_id = str(tenants_fixture[0].id)
+        mute_rule_id = str(uuid.uuid4())
+        result = {
+            "findings_muted": 0,
+            "rule_id": mute_rule_id,
+            "scan_ids": [],
+        }
+        mock_mute_findings.return_value = result
 
-        result = reaggregate_all_finding_group_summaries_task(tenant_id=self.tenant_id)
+        task_result = mute_findings_in_latest_scans_task(
+            tenant_id=tenant_id,
+            mute_rule_id=mute_rule_id,
+            provider_ids=[],
+        )
 
-        assert result == {"scans_reaggregated": 0}
+        assert task_result == result
         mock_group.assert_not_called()
         mock_chain.assert_not_called()
 

From fb7064401b3d683caf6a063e553cc5d73506547e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Tue, 1 Sep 2026 09:35:39 +0200
Subject: [PATCH 13/77] feat(compliance): add CIS 1.4 google workspace
 compliance (#12513)

Co-authored-by: Lydia Vilchez <lydiavilchezlopez@gmail.com>
---
 README.md                                     |    2 +-
 .../cis-1.4-googleworkspace.added.md          |    1 +
 ...gleworkspace-2sv-policy-overrides.fixed.md |    1 +
 ...leworkspace-alert-center-delivery.fixed.md |    1 +
 ...space-cis-full-audit-procedures.changed.md |    1 +
 ...leworkspace-compliance-mappings.changed.md |    1 +
 ...rkspace-password-strength-default.fixed.md |    1 +
 .../cis_1.3_googleworkspace.json              |    4 +-
 .../cis_1.4_googleworkspace.json              | 1943 +++++++++++++++++
 .../cisa_scuba_0.6_googleworkspace.json       |    1 -
 .../googleworkspace/lib/service/service.py    |   36 +-
 ..._spoofing_protection_enabled.metadata.json |    2 +-
 ...mail_domain_spoofing_protection_enabled.py |   42 +-
 ..._spoofing_protection_enabled.metadata.json |    2 +-
 ...ployee_name_spoofing_protection_enabled.py |   40 +-
 ..._spoofing_protection_enabled.metadata.json |    2 +-
 ...mail_groups_spoofing_protection_enabled.py |   55 +-
 ..._spoofing_protection_enabled.metadata.json |    2 +-
 ...ound_domain_spoofing_protection_enabled.py |   34 +-
 .../services/gmail/lib/__init__.py            |    0
 .../services/gmail/lib/spoofing.py            |   33 +
 .../services/rules/lib/__init__.py            |    0
 .../services/rules/lib/alerts.py              |  127 ++
 ...ege_granted_alert_configured.metadata.json |    2 +-
 ...dmin_privilege_granted_alert_configured.py |   60 +-
 ...ee_spoofing_alert_configured.metadata.json |    2 +-
 ...mail_employee_spoofing_alert_configured.py |   60 +-
 ...ked_attacks_alert_configured.metadata.json |    2 +-
 ...ernment_backed_attacks_alert_configured.py |   60 +-
 ...ed_password_alert_configured.metadata.json |    2 +-
 .../rules_leaked_password_alert_configured.py |   60 +-
 ...ord_changed_alert_configured.metadata.json |    2 +-
 ...rules_password_changed_alert_configured.py |   60 +-
 .../services/rules/rules_service.py           |   14 +-
 ..._suspension_alert_configured.metadata.json |    2 +-
 ...us_activity_suspension_alert_configured.py |   60 +-
 ...cious_login_alert_configured.metadata.json |    2 +-
 ...rules_suspicious_login_alert_configured.py |   60 +-
 ...matic_login_alert_configured.metadata.json |    2 +-
 ...ous_programmatic_login_alert_configured.py |   60 +-
 .../services/security/lib/__init__.py         |    0
 .../services/security/lib/durations.py        |   89 +
 .../services/security/lib/scope.py            |   46 +
 .../security_2sv_enforced.metadata.json       |    4 +-
 .../security_2sv_enforced.py                  |  183 +-
 ...ity_2sv_hardware_keys_admins.metadata.json |    2 +-
 .../security_2sv_hardware_keys_admins.py      |  176 +-
 ..._login_challenges_configured.metadata.json |    2 +-
 .../security_login_challenges_configured.py   |   10 +-
 .../security_password_policy_strong.py        |   41 +-
 .../services/security/security_service.py     |   40 +-
 .../googleworkspace_fixtures.py               |   15 +-
 .../service/googleworkspace_service_test.py   |   47 +-
 ...domain_spoofing_protection_enabled_test.py |   68 +-
 ...e_name_spoofing_protection_enabled_test.py |   36 +-
 ...groups_spoofing_protection_enabled_test.py |   30 +
 ...domain_spoofing_protection_enabled_test.py |   36 +-
 .../services/gmail/lib/spoofing_test.py       |   34 +
 .../services/rules/lib/alerts_test.py         |  154 ++
 ...privilege_granted_alert_configured_test.py |   74 +-
 ...employee_spoofing_alert_configured_test.py |   74 +-
 ...nt_backed_attacks_alert_configured_test.py |   80 +-
 ...s_leaked_password_alert_configured_test.py |  111 +-
 ..._password_changed_alert_configured_test.py |   74 +-
 .../services/rules/rules_service_test.py      |  124 +-
 ...tivity_suspension_alert_configured_test.py |   80 +-
 ..._suspicious_login_alert_configured_test.py |   78 +-
 ...rogrammatic_login_alert_configured_test.py |   80 +-
 .../googleworkspace_security_service_test.py  |  138 ++
 .../services/security/lib/durations_test.py   |   97 +
 .../security_2sv_enforced_test.py             |  385 ++--
 .../security_2sv_hardware_keys_admins_test.py |  352 ++-
 .../security_password_policy_strong_test.py   |  208 +-
 73 files changed, 4941 insertions(+), 868 deletions(-)
 create mode 100644 prowler/changelog.d/cis-1.4-googleworkspace.added.md
 create mode 100644 prowler/changelog.d/googleworkspace-2sv-policy-overrides.fixed.md
 create mode 100644 prowler/changelog.d/googleworkspace-alert-center-delivery.fixed.md
 create mode 100644 prowler/changelog.d/googleworkspace-cis-full-audit-procedures.changed.md
 create mode 100644 prowler/changelog.d/googleworkspace-compliance-mappings.changed.md
 create mode 100644 prowler/changelog.d/googleworkspace-password-strength-default.fixed.md
 create mode 100644 prowler/compliance/googleworkspace/cis_1.4_googleworkspace.json
 create mode 100644 prowler/providers/googleworkspace/services/gmail/lib/__init__.py
 create mode 100644 prowler/providers/googleworkspace/services/gmail/lib/spoofing.py
 create mode 100644 prowler/providers/googleworkspace/services/rules/lib/__init__.py
 create mode 100644 prowler/providers/googleworkspace/services/rules/lib/alerts.py
 create mode 100644 prowler/providers/googleworkspace/services/security/lib/__init__.py
 create mode 100644 prowler/providers/googleworkspace/services/security/lib/durations.py
 create mode 100644 prowler/providers/googleworkspace/services/security/lib/scope.py
 create mode 100644 tests/providers/googleworkspace/services/gmail/lib/spoofing_test.py
 create mode 100644 tests/providers/googleworkspace/services/rules/lib/alerts_test.py
 create mode 100644 tests/providers/googleworkspace/services/security/lib/durations_test.py

diff --git a/README.md b/README.md
index de5c235dd7..ad69260cb0 100644
--- a/README.md
+++ b/README.md
@@ -139,7 +139,7 @@ Every AWS provider scan will enqueue an Attack Paths ingestion job automatically
 | MongoDB Atlas | 10 | 3 | 1 | 8 | Official | UI, API, CLI |
 | LLM | [See `promptfoo` docs.](https://www.promptfoo.dev/docs/red-team/plugins/) | N/A | N/A | N/A | Official | CLI |
 | Image | N/A | N/A | N/A | N/A | Official | UI, API, CLI |
-| Google Workspace | 65 | 11 | 3 | 6 | Official | UI, API, CLI |
+| Google Workspace | 65 | 11 | 4 | 6 | Official | UI, API, CLI |
 | OpenStack | 34 | 5 | 1 | 9 | Official | UI, API, CLI |
 | Vercel | 26 | 6 | 1 | 8 | Official | UI, API, CLI |
 | Okta | 29 | 8 | 2 | 2 | Official | UI, API, CLI |
diff --git a/prowler/changelog.d/cis-1.4-googleworkspace.added.md b/prowler/changelog.d/cis-1.4-googleworkspace.added.md
new file mode 100644
index 0000000000..4b3fbc58c7
--- /dev/null
+++ b/prowler/changelog.d/cis-1.4-googleworkspace.added.md
@@ -0,0 +1 @@
+CIS Google Workspace Foundations Benchmark v1.4.0 compliance framework
diff --git a/prowler/changelog.d/googleworkspace-2sv-policy-overrides.fixed.md b/prowler/changelog.d/googleworkspace-2sv-policy-overrides.fixed.md
new file mode 100644
index 0000000000..759f6c9b52
--- /dev/null
+++ b/prowler/changelog.d/googleworkspace-2sv-policy-overrides.fixed.md
@@ -0,0 +1 @@
+`security_2sv_enforced` and `security_2sv_hardware_keys_admins` report MANUAL instead of judging domain-wide values that a group or a sub-organizational unit overrides, or that were dropped because the root organizational unit could not be resolved; a domain-wide failure is still reported as such, with the override noted
diff --git a/prowler/changelog.d/googleworkspace-alert-center-delivery.fixed.md b/prowler/changelog.d/googleworkspace-alert-center-delivery.fixed.md
new file mode 100644
index 0000000000..57e591c461
--- /dev/null
+++ b/prowler/changelog.d/googleworkspace-alert-center-delivery.fixed.md
@@ -0,0 +1 @@
+`rules_*_alert_configured` checks no longer pass a rule whose delivery to the alert center is disabled, the setting behind the benchmark's "Ensure that Alerts is set to On"
diff --git a/prowler/changelog.d/googleworkspace-cis-full-audit-procedures.changed.md b/prowler/changelog.d/googleworkspace-cis-full-audit-procedures.changed.md
new file mode 100644
index 0000000000..c99ad0f0e4
--- /dev/null
+++ b/prowler/changelog.d/googleworkspace-cis-full-audit-procedures.changed.md
@@ -0,0 +1 @@
+Google Workspace checks mapped to CIS evaluate the full audit procedure instead of a single condition, so Gmail spoofing actions, 2-Step Verification, password expiration and alert severity left on Google's defaults no longer pass
diff --git a/prowler/changelog.d/googleworkspace-compliance-mappings.changed.md b/prowler/changelog.d/googleworkspace-compliance-mappings.changed.md
new file mode 100644
index 0000000000..b4fb6924d2
--- /dev/null
+++ b/prowler/changelog.d/googleworkspace-compliance-mappings.changed.md
@@ -0,0 +1 @@
+`security_login_challenges_configured` and `security_2sv_enforced` unmapped from CIS Google Workspace 4.1.4.1 and CISA SCuBA 0.6 `GWS.COMMONCONTROLS.1.1`, whose Post-SSO verification and phishing-resistant MFA requirements neither check can prove
diff --git a/prowler/changelog.d/googleworkspace-password-strength-default.fixed.md b/prowler/changelog.d/googleworkspace-password-strength-default.fixed.md
new file mode 100644
index 0000000000..0c80b92d24
--- /dev/null
+++ b/prowler/changelog.d/googleworkspace-password-strength-default.fixed.md
@@ -0,0 +1 @@
+`security_password_policy_strong` no longer fails a domain that never touched the password strength setting: Google enforces strong passwords by default, so an unset value is the secure default and not a missing configuration
diff --git a/prowler/compliance/googleworkspace/cis_1.3_googleworkspace.json b/prowler/compliance/googleworkspace/cis_1.3_googleworkspace.json
index 167842af4b..8da36da5e2 100644
--- a/prowler/compliance/googleworkspace/cis_1.3_googleworkspace.json
+++ b/prowler/compliance/googleworkspace/cis_1.3_googleworkspace.json
@@ -1498,9 +1498,7 @@
     {
       "Id": "4.1.4.1",
       "Description": "Ensure login challenges are enforced",
-      "Checks": [
-        "security_login_challenges_configured"
-      ],
+      "Checks": [],
       "Attributes": [
         {
           "Section": "4 Security",
diff --git a/prowler/compliance/googleworkspace/cis_1.4_googleworkspace.json b/prowler/compliance/googleworkspace/cis_1.4_googleworkspace.json
new file mode 100644
index 0000000000..7958a7772c
--- /dev/null
+++ b/prowler/compliance/googleworkspace/cis_1.4_googleworkspace.json
@@ -0,0 +1,1943 @@
+{
+  "Framework": "CIS",
+  "Name": "CIS Google Workspace Foundations Benchmark v1.4.0",
+  "Version": "1.4",
+  "Provider": "GoogleWorkspace",
+  "Description": "The CIS Google Workspace Foundations Benchmark provides prescriptive guidance for establishing a secure configuration posture for Google Workspace. This benchmark covers Directory, Devices, Apps, Security, Reporting, and Rules configurations.",
+  "Requirements": [
+    {
+      "Id": "1.1.1",
+      "Description": "Ensure that between two and four global admins are designated",
+      "Checks": [
+        "directory_super_admin_count"
+      ],
+      "Attributes": [
+        {
+          "Section": "1 Directory",
+          "SubSection": "1.1 Users",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Having more than one Super Admin account is needed primarily so that a single point of failure can be avoided. Also, for larger organizations, having multiple Super Admins can be useful for workload balancing purposes.",
+          "RationaleStatement": "From a security point of view, having only a single Super Admin Account can be problematic if this user were unavailable for an extended period of time. Also, Super Admin accounts should never be shared amongst multiple users. From a security point of view, having a large number of Super Admin accounts is a bad practice. In general, all users should be assigned the least privileges needed to do their job. This includes Administrators since not everyone that needs to \"Administer Something\" needs to be a Super Admin. Google Workspaces provides many predefined Administration Roles and also allows the creation of Custom Roles with very granular permission selection.",
+          "ImpactStatement": "There should be no user impact, but Administrators should have a normal (low privilege) and an Administrative (high privilege) account.",
+          "RemediationProcedure": "Create at least one additional account with a Super Admin role if there is only 1 Super Admin account. If more that 4 accounts with Super Admin access, reduce the number of accounts with a Super Admin role. NOTE: A new account should be created vs adding this role to an existing account since Administration tasks should be done through separate Admin accounts.",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Go to Directory and click on Users, this will show a list of all users 3. Click on + Add a filter, select Admin role, check the Super admin box, and then select Apply 4. The list of Users displayed will only be those with the Super Admin role 5. Make sure more than one (1) user is listed 6. Make sure no more than four (4) users are listed",
+          "AdditionalInformation": "",
+          "DefaultValue": "All Google Workspace tenants will have one Super Admin initially.",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "1.1.2",
+      "Description": "Ensure super admin accounts are used only for super admin activities",
+      "Checks": [
+        "directory_super_admin_only_admin_roles"
+      ],
+      "Attributes": [
+        {
+          "Section": "1 Directory",
+          "SubSection": "1.1 Users",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Super admin accounts have access to all features in the Google Admin console and Admin API and can manage every aspect of your organization's account. Super admins also have full access to all users' calendars and event details. It is recommended to give each super administrator two accounts. One for their super admin account and a second account for daily activities. Users should only sign in to a super admin account to perform super admin tasks, such as setting up 2-Step Verification (2SV), managing billing and user licenses, or helping another admin recover their account. Super administrators should use a separate, non-admin account for day-to-day activities. Super admins should sign in as needed to do specific tasks and then sign out. Leaving super admin accounts sign-in can increase exposure to phishing attacks.",
+          "RationaleStatement": "Use the super admin account only when needed. Delegate administrator tasks to user accounts with limited admin roles. Use the least privilege approach, where each user has access to the resources and tools needed for their typical tasks. For example, you could grant an admin permissions to create user accounts and reset passwords, but not let them delete user accounts.",
+          "ImpactStatement": "Super admin users will have to switch accounts as well as utilize login/logout functionality when performing administrative tasks.",
+          "RemediationProcedure": "For every Super admin that is also a Delegated admin account, either create a Delegated admin account for the user of elevate or their existing non-admin account to a Delegated admin account.",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Go to Directory and click on Users, this will show a list of all users 3. Click on + Add a filter, select Admin role, check the Super admin box, and then select Apply 4. The list of Users displayed will only be those with the Super Admin role 5. Click on + Add a filter, select Admin role, check the Delegated admin box, and then select Apply 6. Verify that there are no users in both the Super admin and Delegated admin roles",
+          "AdditionalInformation": "",
+          "DefaultValue": "N/A",
+          "References": "https://support.google.com/a/answer/179832?hl=en"
+        }
+      ]
+    },
+    {
+      "Id": "1.2.1.1",
+      "Description": "Ensure directory data access is externally restricted",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "1 Directory",
+          "SubSection": "1.2 Directory Settings",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Configure Google Workspace's external directory sharing to prevent unrestricted directory data access.",
+          "RationaleStatement": "If your organization uses third-party apps that integrate with your Google services, you control how much Directory information the external apps can access. If you allow directory access, your users have a better experience with external apps. For example, when they use a third-party mail app, they want to find domain contacts and have email addresses automatically complete. The app needs access to Directory data to make this happen. However, this has the ability to share ALL domain AND public data with the connected third-party app. Public data and authenticated user basic profile fields — Share publicly visible domain profile data with external apps and APIs. Also share the authenticated user's name, photo, and email address to enable Google Sign-In if the appropriate scopes are granted. Other non-public profile fields for the authenticated user aren't shared. All the non-public profile information of other users in the domain aren't shared. Domain and public data — (Default) Share all Directory information that’s shared with your domain and public data. This information includes profile information for users in your domain, shared external contacts, and Google+ profile names and photos.",
+          "ImpactStatement": "The External directory sharing setting applies only to the following APIs and the Apps Scripts or third-party Marketplace apps that use those APIs: Google People API Google CardDAV API Google Contacts API v3 The setting applies only to third-party apps, such as iOS Mail and iOS Contacts (when enrolled on an iOS device via Add Account and then Google), third-party Contacts apps (on Android). The setting doesn't apply to Google products, including mobile apps, such as the following Gmail, Contacts (on Android), Inbox, Meet, and other Google mobile apps iOS Mail and iOS Contacts using Google Sync (when enrolled on an iOS device through Add Account and then Exchange) Workspace Sync for Microsoft Outlook",
+          "RemediationProcedure": "To configure this setting via the Google Workspace Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Open the collapsed menu via \"hamburger button \\ 3 horizontal lines\" 3. Under Directory, select Directory settings 4. Under Sharing settings, select External Directory sharing 5. Select Authenticated user basic profile fields",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Open the collapsed menu via \"hamburger button \\ 3 horizontal lines\" 3. Under Directory, select Directory settings 4. Under Sharing settings, select External Directory sharing 5. Ensure Authenticated user basic profile fields is set 6. Select Save",
+          "AdditionalInformation": "",
+          "DefaultValue": "• External Directory sharing = Domain and public data",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.1.1.1",
+      "Description": "Ensure external sharing options for primary calendars are configured",
+      "Checks": [
+        "calendar_external_sharing_primary_calendar"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.1 Calendar",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Control how much calendar information users in your organization can share externally.",
+          "RationaleStatement": "Prevent data leakage by restricting the amount of information that is externally viewable when a user shares their calendar with someone external to your organization.",
+          "ImpactStatement": "Once you limit external sharing for your organization, users can't exceed these limits when sharing individual events. For example, if you limit your organization's external sharing to Free/Busy, events with Public visibility are only shared as Free/Busy. External mobile users who previously synced events may keep seeing restricted details. That access stops when their device is wiped and re-synced. If you lower the external sharing level, people outside your organization may lose access to calendars they could previously see.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Calendar 5. Under Sharing settings, select External sharing options for primary calendars 6. Select Only free/busy information (hide event details) 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Calendar 5. Under Sharing settings, select External sharing options for primary calendars 6. Ensure Only free/busy information (hide event details) is selected",
+          "AdditionalInformation": "",
+          "DefaultValue": "External sharing options for primary calendars is Only free/busy information (hide event details)",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.1.1.2",
+      "Description": "Ensure internal sharing options for primary calendars are configured",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.1 Calendar",
+          "Profile": "Level 2",
+          "AssessmentStatus": "Manual",
+          "Description": "Control how much calendar information users in your organization can share internally.",
+          "RationaleStatement": "In general, not everyone in the organization needs to know the schedule details of everyone else (operational security). Free/busy indication is enough for most people.",
+          "ImpactStatement": "This will be the default for the user's primary calendar. The user can override this setting to allow other specific users greater visibility of their calendar.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Calendar 5. Under Sharing settings, select Internal sharing options for primary calendars 6. Select Only free/busy information (hide event details) 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Calendar 5. Under Sharing settings, select Internal sharing options for primary calendars 6. Ensure Only free/busy information (hide event details) is selected",
+          "AdditionalInformation": "",
+          "DefaultValue": "Internal sharing options for primary calendars is Share all information",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.1.1.3",
+      "Description": "Ensure external invitation warnings for Google Calendar are configured",
+      "Checks": [
+        "calendar_external_invitations_warning"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.1 Calendar",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Configure Google Calendar to warn users when inviting guest outside your domain.",
+          "RationaleStatement": "When your users create a Google Calendar event that includes one or more guests from outside of your domain, they are prompted to confirm whether it’s OK to include external guests in the event invitation, assisting in the prevention of unintentional data leakage.",
+          "ImpactStatement": "Users will be prompted to allow the inclusion of external guests in an event invitation.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Calendar 5. Under Sharing settings, select External Invitations 6. Set Warn users when inviting guests outside of the domain to checked 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Calendar 5. Under Sharing settings, select External invitations 6. Ensure Warn users when inviting guests outside of the domain is checked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Warn users when inviting guests outside of the domain is checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.1.2.1",
+      "Description": "Ensure external sharing options for secondary calendars are configured",
+      "Checks": [
+        "calendar_external_sharing_secondary_calendar"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.1 Calendar",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Control how much calendar information users in your organization can share externally.",
+          "RationaleStatement": "Prevent data leakage by restricting the amount of information is externally viewable when a user shares their calendar with someone external to your organization.",
+          "ImpactStatement": "Once you limit external sharing for your organization, users can't exceed these limits when sharing individual events. For example, if you limit your organization's external sharing to Free/Busy, events with Public visibility are only shared as Free/Busy. External mobile users who previously synced events may keep seeing restricted details. That access stops when their device is wiped and re-synced. If you lower the external sharing level, people outside your organization may lose access to calendars they could previously see.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Calendar 5. Under General settings, select External sharing options for secondary calendars 6. Select Only free/busy information (hide event details) 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Calendar 5. Under General settings, select External sharing options for secondary calendars 6. Ensure Only free/busy information (hide event details) is selected",
+          "AdditionalInformation": "",
+          "DefaultValue": "External sharing options for secondary calendars is Share all information, but outsiders cannot change calendars",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.1.2.2",
+      "Description": "Ensure internal sharing options for secondary calendars are configured",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.1 Calendar",
+          "Profile": "Level 2",
+          "AssessmentStatus": "Manual",
+          "Description": "Control how much calendar information users in your organization can share internally.",
+          "RationaleStatement": "In general, not everyone in the organization needs to know the schedule details of everyone else (operational security). Free/busy indication is enough for most people.",
+          "ImpactStatement": "This will be the default for the user's secondary calendars. The user can override this setting to allow other specific users greater visibility of their calendars.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Calendar 5. Under General settings, select Internal sharing options for secondary calendars 6. Select Only free/busy information (hide event details) 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Calendar 5. Under General settings, select Internal sharing options for secondary calendars 6. Ensure Only free/busy information (hide event details) is selected",
+          "AdditionalInformation": "",
+          "DefaultValue": "Internal sharing options for secondary calendars is Share all information",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.1.3.1",
+      "Description": "Ensure calendar web offline is disabled",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.1 Calendar",
+          "Profile": "Level 2",
+          "AssessmentStatus": "Manual",
+          "Description": "Limit who is allowed offline calendar access.",
+          "RationaleStatement": "When enabled, users can turn on offline use for each computer they use. Data is stored on the computer until offline use is turned off by the user. In this case, the organization can lose control of where its data is stored (for this user). Care should be taken regarding which users and groups have this capability enabled.",
+          "ImpactStatement": "Users will not be able to access their calendars offline.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Calendar 5. Under Advanced settings, select Calendar web offline 6. Set Allow using Calendar on the web when offline to unchecked 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Calendar 5. Under Advanced settings, select Calendar web offline 6. Ensure Allow using Calendar on the web when offline is unchecked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Allow using Calendar on the web when offline is checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.2.1.1.1",
+      "Description": "Ensure users are warned when they share a file outside their domain",
+      "Checks": [
+        "drive_external_sharing_warn_users"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.2 Drive and Docs",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Warn the user when they try and share a file and/or shared drive externally.",
+          "RationaleStatement": "The user may not realize the potential account is external to the organization. Providing a warning allows the user an opportunity to know this and possibly reassess this sharing.",
+          "ImpactStatement": "None, except an additional warning. Sharing can still occur.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Drive and Docs 4. Select Sharing Settings 5. Select Sharing Options 6. Under Sharing outside of <Company> 7. Set ON - Files owned by users in <Company> can be shared outside of <Company>. This applies to files in all shared drives as well. to checked. Also, set the sub-setting For files owned by users in <Company> warn when sharing outside of <Company> to checked. 8. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Drive and Docs 4. Select Sharing Settings 5. Select Sharing Options 6. Under Sharing outside of <Company> 7. Ensure ON - Files owned by users in <Company> can be shared outside of <Company>. This applies to files in all shared drives as well. is checked. Also, ensure the sub-setting For files owned by users in <Company> warn when sharing outside of <Company> is checked.",
+          "AdditionalInformation": "",
+          "DefaultValue": "For files owned by users in <Company> warn when sharing outside of <Company> is checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.2.1.1.2",
+      "Description": "Ensure users cannot publish files to the web or make visible to the world as public or unlisted",
+      "Checks": [
+        "drive_publishing_files_disabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.2 Drive and Docs",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "You should control the publishing of documents to the web or making them visable to the world as public or unlisted.",
+          "RationaleStatement": "Attackers will often attempt to expose sensitive information to external entities through sharing, and restricting the methods that your users can share documents with will reduce that surface area. This setting is only applicable if ON - Files owned by users in <Company> can be shared outside of <Company>. This applies to files in all shared drives as well is selected, but should be configured as described below to prevent unintentional document publishing.",
+          "ImpactStatement": "Enabling this feature will prevent users from publishing documents on the web or making them visible to the world as public or unlisted files.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Under Sharing settings, select Sharing options 6. Under Sharing outside of <Company> - ON - Files owned by users in <Company> can be shared outside of <Company>. This applies to files in all shared drives as well, set When sharing outside of <Company> is allowed, users in <Company> can make files and published web content visible to anyone with the link to unchecked 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Under Sharing settings, select Sharing options 6. Under Sharing outside of <Company> - ON - Files owned by users in <Company> can be shared outside of <Company>. This applies to files in all shared drives as well, ensure When sharing outside of <Company> is allowed, users in <Company> can make files and published web content visible to anyone with the link is unchecked",
+          "AdditionalInformation": "",
+          "DefaultValue": "When sharing outside of <Company> is allowed, users in <Company> can make files and published web content visible to anyone with the link is Checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.2.1.1.3",
+      "Description": "Ensure document sharing is being controlled by domain with allowlists",
+      "Checks": [
+        "drive_sharing_allowlisted_domains"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.2 Drive and Docs",
+          "Profile": "Level 2",
+          "AssessmentStatus": "Manual",
+          "Description": "You should control sharing of documents to external domains by either blocking domains or only allowing sharing with specific named domains.",
+          "RationaleStatement": "Attackers will often attempt to expose sensitive information to external entities through sharing, and restricting the domains that your users can share documents with will reduce that surface area.",
+          "ImpactStatement": "Enabling this feature will prevent users from sharing documents with domains outside of the organization unless allowed.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Under Sharing settings, select Sharing options 6. Under Sharing outside of <Company>, select ALLOWLISTED DOMAINS - Files owned by users in <Company> can be shared with Google Accounts in compatible allowlisted domains. 7. Set Warn when files owned by users or shared drives in <Company> are shared with users in allowlisted domains to checked 8. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Under Sharing settings, select Sharing options 6. Under Sharing outside of <Company>, ensure ALLOWLISTED DOMAINS - Files owned by users in <Company> can be shared with Google Accounts in compatible allowlisted domains. is selected 7. Ensure Warn when files owned by users or shared drives in <Company> are shared with users in allowlisted domains is checked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Sharing outside of <Company> is ON - Files owned by users in <Company> can be shared outside of <Company>. This applies to files in all shared drives as well.",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.2.1.1.4",
+      "Description": "Ensure users are warned when they share a file with users in an allowlisted domain",
+      "Checks": [
+        "drive_warn_sharing_with_allowlisted_domains"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.2 Drive and Docs",
+          "Profile": "Level 2",
+          "AssessmentStatus": "Manual",
+          "Description": "Warn the user when they try and share a file and/or shared drive with users in an allowlisted domain.",
+          "RationaleStatement": "The user may not realize the potential account is external to the organization. Providing a warning allows the user an opportunity to know this and possibly reassess this sharing.",
+          "ImpactStatement": "None, except an additional warning. Sharing can still occur.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Drive and Docs 4. Select Sharing Settings 5. Select Sharing Options 6. Under Sharing outside of <Company> 7. Set ALLOWLISTED DOMAINS - Files owned by users or shared drives in BMDT-Group can be shared with Google accounts in compatible allowlisted domains. to checked. Also, set the sub-setting Warn when files owned by users or shared drives in <Company> are shared with users in allowlisted domains to checked. 8. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Drive and Docs 4. Select Sharing Settings 5. Select Sharing Options 6. Under Sharing outside of <Company> 7. Ensure ALLOWLISTED DOMAINS - Files owned by users or shared drives in BMDT-Group can be shared with Google accounts in compatible allowlisted domains is checked. Also, ensure the sub-setting Warn when files owned by users or shared drives in <Company> are shared with users in allowlisted domains is checked.",
+          "AdditionalInformation": "",
+          "DefaultValue": "For files owned by users in <Company> warn when sharing outside of <Company> is checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.2.1.1.5",
+      "Description": "Ensure Access Checker is configured to limit file access",
+      "Checks": [
+        "drive_access_checker_recipients_only"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.2 Drive and Docs",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "When a user shares a file via a Google product other than Docs or Drive (e.g. by pasting a link in Gmail), Google can check that the recipients have access. If not, when possible, Google will ask the user to pick how they want to share the file.",
+          "RationaleStatement": "In general, access should be restricted to the smallest group possible. In this case recipients only.",
+          "ImpactStatement": "Only recipients can access files. Recipients cannot share access with others by forwarding the email/link.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Drive and Docs 4. Select Sharing Settings 5. Select Sharing Options 6. Under Access Checker 7. Set Recipients only. to checked 8. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Drive and Docs 4. Select Sharing Settings 5. Select Sharing Options 6. Under Access Checker 7. Ensure Recipients only. is checked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Recipients only, suggested target audience, or public (no Google account required). is checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.2.1.1.6",
+      "Description": "Ensure only users inside your organization can distribute content externally",
+      "Checks": [
+        "drive_internal_users_distribute_content"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.2 Drive and Docs",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "You should control who is allowed to distribute organizational content to shared drives owned by another organization.",
+          "RationaleStatement": "Sharing and collaboration are key; however, only your users should have the authority over where company content is shared with to prevent unauthorized disclosures of information.",
+          "ImpactStatement": "Only people in your organization with Manager access to a shared drive can move files from that shared drive to a Drive location in a different organization. In addition, users in the selected organizational unit or group can copy content from their My Drive to a shared drive owned by a different organization.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Under Sharing settings, select Sharing options 6. Under Distributing content outside of <Company>, select - Only users in <Company> 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Under Sharing settings, select Sharing options 6. Under Distributing content outside of <Company>, ensure Only users in <Company> is selected",
+          "AdditionalInformation": "",
+          "DefaultValue": "Distributing content outside of <Company> is Anyone",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.2.1.2.1",
+      "Description": "Audit users ability to create new shared drives",
+      "Checks": [
+        "drive_shared_drive_creation_allowed"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.2 Drive and Docs",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Organizations should determine if all users should have the ability to create new shared drives.",
+          "RationaleStatement": "Organizations should allow users to create shared drives only if it is allowed under your organization's DLP restrictions and meets your organization's requirements. By default, when a user account is deleted all the data in their personal drive is deleted as well. In this case, administrators should transfer ownership of a user's files to another user. Note: See additional information on transferring files.",
+          "ImpactStatement": "Disabling this feature will prevent users from creating new shared drives.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Under Sharing settings, select Shared drive creation 6. Set Prevent users in <Company> from creating new shared drives to unchecked 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Under Sharing settings, select Shared drive creation 6. Ensure Prevent users in <Company> from creating new shared drives is un-checked",
+          "AdditionalInformation": "To transfer ownership of a user's files via the Google Workspace Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Transfer ownership 6. Under From user, enter the user's organizational email address that needs to be transferred 7. Under To user, enter the user's organizational email address that is receiving ownership of the files Transfer Drive files to a new owner as an admin",
+          "DefaultValue": "Prevent users in <Company> from creating new shared drives is unchecked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.2.1.2.2",
+      "Description": "Ensure manager access members cannot modify shared drive settings",
+      "Checks": [
+        "drive_shared_drive_managers_cannot_override"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.2 Drive and Docs",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Only administrators should be able to modify shared drive settings.",
+          "RationaleStatement": "Allowing manager access members to override or modify shared drive settings can allow intentional and unintentional data access by unauthorized users.",
+          "ImpactStatement": "Disabling this feature will prevent manager access members from modifying shared drive settings, requiring administrators to perform settings modifications as required.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, set Allow members with manager access to override the settings below to unchecked 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, ensure Allow members with manager access to override the settings below is unchecked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Allow members with manager access to override the settings below is checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.2.1.2.3",
+      "Description": "Ensure shared drive file access is restricted to members only",
+      "Checks": [
+        "drive_shared_drive_members_only_access"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.2 Drive and Docs",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Shared drive file access should be restricted to that shared drive's members",
+          "RationaleStatement": "Preventing unauthorized users from access sensitive data is paramount in preventing unauthorized or unintentional information disclosures.",
+          "ImpactStatement": "Disabling this feature will prevent shared drive non-members from accessing content in shared drives where they are not a member.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, set Allow people who aren't shared drive members to be added to files to unchecked 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, ensure Allow people who aren't shared drive members to be added to files is unchecked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Allow people who aren't shared drive members to be added to files is checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.2.1.2.4",
+      "Description": "Ensure 'Download, print, and copy is enabled for' is not set to 'Everyone (Managers, content managers, contributors, commenters and viewers)'",
+      "Checks": [
+        "drive_shared_drive_disable_download_print_copy"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.2 Drive and Docs",
+          "Profile": "Level 2",
+          "AssessmentStatus": "Manual",
+          "Description": "limit what viewers/commenters on a shared document can do with it.",
+          "RationaleStatement": "In many cases when sharing a document it might be fine for the users to do what they want with the document on the shared drive (Download, Print, etc.). In more restricted environments these capabilities may need to be prevented (Protected Intellectual property, Personally Identifiable Information, etc.).",
+          "ImpactStatement": "Users of this shared drive will be restricted to only reading and commenting on the existing files.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, set Download, print, and copy is enabled for to not Everyone (Managers, content managers, contributors, commenters and viewers) 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, ensure Download, print, and copy is enabled for is not set to Everyone (Managers, content managers, contributors, commenters and viewers)",
+          "AdditionalInformation": "",
+          "DefaultValue": "Allow viewers and commenters to download, print, and copy files is unchecked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.2.2.1",
+      "Description": "Ensure offline access to documents is disabled",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.2 Drive and Docs",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Prevent documents from being locally accessible on an unconnected device.",
+          "RationaleStatement": "This setting prevents an organization's files from being stored locally, thus limiting data loss issues if the device is lost or stolen.",
+          "ImpactStatement": "Copies of recent files are only synced and saved on devices if you've defined a managed policy to do so. NOTE: All users will lose access to offline documents on all devices if managed devices policies are not set. NOTE: Setting up policies to control offline access on individual devices is outside the scope of this Benchmark. Additional information om doing this for various device types can be found here.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Features and Applications 6. Select Offline 7. Set Control offline access using device policies. to checked 8. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Features and Applications 6. Select Offline 7. Ensure Control offline access using device policies is checked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Control offline access using device policies is unchecked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.2.3.1",
+      "Description": "Ensure desktop access to Drive is disabled",
+      "Checks": [
+        "drive_desktop_access_disabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.2 Drive and Docs",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Prevent documents from being locally accessible on an unconnected device.",
+          "RationaleStatement": "This setting prevents an organization's files from being stored locally, thus limiting data loss issues if the device is lost or stolen. NOTE: The Google Drive desktop application has its own way of handling \"Offline\" files and does not obey the Drive and Doc > Offline > Control offline access using divide policies setting. Not allowing Google Drive for desktop on the device will prevent this channel.",
+          "ImpactStatement": "The end user will not be able to use Google Drive for desktop and its convenient integration into the Windows file explorer.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Google Drive for desktop 6. Set Allow Google Drive for desktop in your organization to unchecked 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Google Drive for desktop 6. Ensure Allow Google Drive for desktop in your organization is unchecked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Allow Google Drive for desktop in your organization is checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.1.1",
+      "Description": "Ensure users cannot delegate access to their mailbox",
+      "Checks": [
+        "gmail_mail_delegation_disabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Mail delegation allows the delegate to read, send, and delete messages on their behalf. For example, a manager can delegate Gmail access to another person in their organization, such as an administrative assistant.",
+          "RationaleStatement": "Only administrators should be able to delegate access to a user's mailboxes.",
+          "ImpactStatement": "Existing delegations will be hidden, when this feature is disabled.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under User Settings - Mail delegation, set Let users delegate access to their mailbox to other users in the domain to unchecked 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under User Settings - Mail delegation, ensure Let users delegate access to their mailbox to other users in the domain is unchecked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Let users delegate access to their mailbox to other users in the domain is unchecked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.1.2",
+      "Description": "Ensure offline access to Gmail is disabled",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Disables the user's ability to utilize various Gmail functions (read, write, search, delete, and label email messages) while not connected to the internet.",
+          "RationaleStatement": "Prevents the organization's data (user's email) from being copied to remote computers.",
+          "ImpactStatement": "Users will need internet access to use Gmail.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Gmail 4. Select User Settings 5. SelectGmail web offline 6. Set Enable Gmail web offline to unchecked 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Gmail 4. Select User Settings 5. Under Gmail web offline 6. Ensure Enable Gmail web offline is unchecked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Enable Gmail web offline is unchecked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.2.1",
+      "Description": "Ensure that DKIM is enabled for all mail enabled domains",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "DKIM adds an encrypted signature to the header of all outgoing messages. Email servers that get signed messages use DKIM to decrypt the message header, and verify the message was not changed after it was sent.",
+          "RationaleStatement": "Spoofing is a common unauthorized use of email, so some email servers require DKIM to prevent email spoofing.",
+          "ImpactStatement": "There should be no impact of setting up DKIM however, organizations should ensure appropriate setup to ensure continuous mail-flow.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Authenticate email, select - Generate new record 6. Under Select DKIM key bit length, select the appropriate key bit length 2048 is recommended if supported 7. Under Prefix selector (optional), enter the appropriate prefix selector 8. Use the text at TXT record value to update the DNS record at your domain host 9. Select Start Authentication",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Authenticate email, ensure a DKIM record exists for each mail enabled domain",
+          "AdditionalInformation": "",
+          "DefaultValue": "None",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.2.2",
+      "Description": "Ensure the SPF record is configured for all mail enabled domains",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "For all the email domains configured in Google Workspace, a corresponding Sender Policy Framework (SPF) record should be created. NOTE: There are a number of ways SPF can be configured, this document presents a most basic method. For more information on setting up SPF for Google Workspace please refer to the Google documentation. • How SPF protects against spoofing and spam • Define your SPF record—Basic setup",
+          "RationaleStatement": "SPF records allow Gmail and other mail systems to know where messages from your domains are allowed to originate. This information can be used by that system to determine how to treat the message based on if it is being spoofed or is valid.",
+          "ImpactStatement": "There should be minimal impact of setting up SPF records however, organizations should ensure proper SPF record setup as email could be flagged as spam if SPF is not set up appropriately.",
+          "RemediationProcedure": "Configure the DNS record for each domain. • If all email in your domain is sent from and received by Google Gmail, add the following TXT record for each domain: v=spf1 include:_spf.google.com ~all NOTE: This will likely need to be configured at your domain registrar (Godaddy, etc.).",
+          "AuditProcedure": "Check the DNS records for each domain. 1. Use a Domain Name System (DNS) lookup tool to review the current configuration for your domain (DNS Records). This information can be discovered in a variety of ways: o Reviewing the DNS Record information at your domain registrar (GoDaddy, etc.) o Using an OS based nslookup tool on your workstation OS o Using Google Dig tool available from the Google Admin Toolbox site (Link: Dig) 2. Using the chosen tool, enter your email domain name (ex. domain1.com) 3. In the results displayed, ensure that a TXT Record with the value of v=spf1 include:_spf.google.com ~all exists and designates Google Gmail as a authorized sender.",
+          "AdditionalInformation": "",
+          "DefaultValue": "None",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.2.3",
+      "Description": "Ensure the DMARC record is configured for all mail enabled domains",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "For all email domains configured in Google Workspace, a corresponding Domain-Based Message Authentication, Reporting and Conformance (DMARC) record should be created. NOTE: There are a number of ways DMARC can be configured, this document presents a most basic method. For more information on setting up DMARC for Google Workspace please refer to the Google documentation. • Help prevent spoofing and spam with DMARC • Tutorial: Recommended DMARC rollout",
+          "RationaleStatement": "DMARC works with Sender Policy Framework (SPF) and Domain Keys Identified Mail (DKIM) to authenticate mail senders and ensure that destination email systems trust messages sent from your domain. Spammers can spoof your domain or organization to send fake messages that impersonate your organization. DMARC tells receiving mail servers what to do when they get a message that appears to be from your organization, but doesn't pass authentication checks, or doesn’t meet the authentication requirements in your DMARC policy record. Messages that aren't authenticated might be impersonating your organization, or might be sent from unauthorized servers.",
+          "ImpactStatement": "There should be minimal impact of setting up DMARC records however, organizations should ensure proper DMARC record setup as email could be flagged as spam if DMARC is not set up appropriately.",
+          "RemediationProcedure": "Configure the DNS record for each domain. 1. If all email in your domain is sent from and received by Google Gmail, add the following TXT record for the domain: v=DMARC1; p=none; rua=mailto:<report@domain1.com> NOTE: This will likely need to be configured at your domain registrar (Godaddy, etc.).",
+          "AuditProcedure": "Check the DNS records for each domain. 1. Use a Domain Name System (DNS) lookup tool to review the current configuration for your domain (DNS Records). This information can be discovered in a variety of ways: o Reviewing the DNS Record information at your domain registrar (GoDaddy, etc.) o Using an OS based nslookup tool on your workstation OS o Preferred: Using Google Dig tool available from the Google Admin Toolbox site (Link: Dig) 2. Using the chosen tool, enter your email domain name (ex. domain1.com) 3. In the results displayed, ensure that a TXT Record with the value of v=DMARC1; p=none; rua=mailto:<report@domain1.com> exists. This designates Google Gmail as an authorized sender. NOTE: The p=none sets DMARC to non-enforcing. This is a relaxed DMARC policy that lets you start getting reports without risking messages from your domain being rejected or marked as spam by receiving servers. Start with a none policy that only monitors email flow, and then eventually change to a policy that rejects all unauthenticated messages (p=reject). NOTE: The rua=mailto:_report@domain1.com entry is optional but setting it to a valid email address is recommended. RUA reports provide a comprehensive view of all of a domain’s traffic. At a minimum, organizations should configure their DMARC record to receive RUA reports. The Difference in DMARC Reports: RUA and RUF",
+          "AdditionalInformation": "",
+          "DefaultValue": "None",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.3.1",
+      "Description": "Enable quarantine admin notifications for Gmail",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Quarantines can help prevent spam, minimize data loss, and protect confidential information. They can also help moderate message attachments so users don’t send, open, or click something they shouldn’t.",
+          "RationaleStatement": "Admins should be notified periodically when messages are quarantined so they can take the appropriate actions.",
+          "ImpactStatement": "Admins will begin receiving quarantine notifications as emails are quarantined.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Manage quarantines, set Notify periodically when messages are quarantined to checked As required, give appropriate users the Access Admin Quarantine and\\or Access restricted quarantine roles",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Manage quarantines, ensure each quarantine has Notify periodically when messages are quarantined is checked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Notify periodically when messages are quarantined is unchecked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.4.1.1",
+      "Description": "Ensure protection against encrypted attachments from untrusted senders is enabled",
+      "Checks": [
+        "gmail_encrypted_attachment_protection_enabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "As a Google Workspace administrator, you can protect incoming mail against phishing and harmful software (malware). You can also choose what action to take based on the type of threat detected.",
+          "RationaleStatement": "You should protect your users from potentially malicious attachments.",
+          "ImpactStatement": "Users will be warned when they receive an encrypted attachment from an untrusted sender.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Attachments, set Protect against encrypted attachments from untrusted senders to checked 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Attachments, ensure Protect against encrypted attachments from untrusted senders is checked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Protect against encrypted attachments from untrusted senders is checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.4.1.2",
+      "Description": "Ensure protection against attachments with scripts from untrusted senders is enabled",
+      "Checks": [
+        "gmail_script_attachment_protection_enabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "As a Google Workspace administrator, you can protect incoming mail against phishing and harmful software (malware). You can also choose what action to take based on the type of threat detected.",
+          "RationaleStatement": "You should protect your users from potentially malicious attachments.",
+          "ImpactStatement": "Users will be warned when they receive an attachments with scripts from an untrusted sender.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Attachments, set Protect against attachments with scripts from untrusted senders to checked 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Attachments, ensure Protect against attachments with scripts from untrusted senders is checked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Protect against attachments with scripts from untrusted senders is enabled is checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.4.1.3",
+      "Description": "Ensure protection against anomalous attachment types in emails is enabled",
+      "Checks": [
+        "gmail_anomalous_attachment_protection_enabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "As a Google Workspace administrator, you can protect incoming mail against phishing and harmful software (malware). You can also choose what action to take based on the type of threat detected.",
+          "RationaleStatement": "You should protect your users from potentially malicious attachments.",
+          "ImpactStatement": "Users will be warned when they receive an anomalous attachment.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Attachments, set Protect against anomalous attachment types in emails to checked 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Attachments, ensure Protect against anomalous attachment types in emails is checked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Protect against anomalous attachment types in emails is Unchecked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.4.2.1",
+      "Description": "Ensure link identification behind shortened URLs is enabled",
+      "Checks": [
+        "gmail_shortener_scanning_enabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Identify links behind short URLs, and display a warning when you click links to untrusted domains.",
+          "RationaleStatement": "You should protect your users from potentially malicious links.",
+          "ImpactStatement": "Users will be warned when they click links to untrusted domains.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Links and external images, set Identify links behind shortened URLs to checked 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Links and external images, ensure Identify links behind shortened URLs is checked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Identify links behind shortened URLs is checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.4.2.2",
+      "Description": "Ensure scan linked images for malicious content is enabled",
+      "Checks": [
+        "gmail_external_image_scanning_enabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Scan linked images for malicious content, and display a warning when you click links to untrusted domains.",
+          "RationaleStatement": "You should protect your users from potentially malicious links.",
+          "ImpactStatement": "Users will be warned when they click links to untrusted domains.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Links and external images, set Scan linked images to checked 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Links and external images, ensure Scan linked images is checked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Scan linked images is checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.4.2.3",
+      "Description": "Ensure warning prompt is shown for any click on links to untrusted domains",
+      "Checks": [
+        "gmail_untrusted_link_warnings_enabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Display a warning when you click links to untrusted domains.",
+          "RationaleStatement": "You should protect your users from potentially malicious links.",
+          "ImpactStatement": "Users will be warned when they click links to untrusted domains.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Links and external images, set Show warning prompt for any click on links to untrusted domains is checked 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Links and external images, ensure Show warning prompt for any click on links to untrusted domains is checked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Show warning prompt for any click on links to untrusted domains is checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.4.3.1",
+      "Description": "Ensure protection against domain spoofing based on similar domain names is enabled",
+      "Checks": [
+        "gmail_domain_spoofing_protection_enabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Moves domain spoofing emails to spam folder.",
+          "RationaleStatement": "You should protect your users from domain spoofing emails.",
+          "ImpactStatement": "Domain spoofed emails will be moved to a user's spam folder.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Spoofing and authentication, set Protect against domain spoofing based on similar domain names to checked 6. Set Action to Move email to spam 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Spoofing and authentication, ensure Protect against domain spoofing based on similar domain names is checked 6. Ensure Action is Move email to spam",
+          "AdditionalInformation": "",
+          "DefaultValue": "• Protect against domain spoofing based on similar domain names is checked • Action is Keep email in inbox and show warning (default)",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.4.3.2",
+      "Description": "Ensure protection against spoofing of employee names is enabled",
+      "Checks": [
+        "gmail_employee_name_spoofing_protection_enabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Moves employee spoofing emails to spam folder.",
+          "RationaleStatement": "You should protect your users from employee spoofing emails.",
+          "ImpactStatement": "Employee spoofed emails will be moved to a user's spam folder.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Spoofing and authentication, set Protect against spoofing of employee names to checked 6. Set Action to Move email to spam 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Spoofing and authentication, ensure Protect against spoofing of employee names is checked 6. Ensure Action is Move email to spam",
+          "AdditionalInformation": "",
+          "DefaultValue": "• Protect against spoofing of employee names = checked • Action = Keep email in inbox and show warning (default)",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.4.3.3",
+      "Description": "Ensure protection against inbound emails spoofing your domain is enabled",
+      "Checks": [
+        "gmail_inbound_domain_spoofing_protection_enabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Moves inbound emails spoofing your domain to spam folder.",
+          "RationaleStatement": "You should protect your users from inbound company domain spoofing emails.",
+          "ImpactStatement": "Inbound company domain spoofed emails will be moved to a user's spam folder.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Spoofing and authentication, set Protect against inbound emails spoofing your domain to checked 6. Set Action to Move email to spam 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Spoofing and authentication, ensure Protect against inbound emails spoofing your domain is checked 6. Ensure Action is Move email to spam",
+          "AdditionalInformation": "",
+          "DefaultValue": "• Protect against inbound emails spoofing your domain = checked • Action = Keep email in inbox and show warning (default)",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.4.3.4",
+      "Description": "Ensure protection against any unauthenticated emails is enabled",
+      "Checks": [
+        "gmail_unauthenticated_email_protection_enabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Displays a warning when any message is not authenticated (SPF or DKIM).",
+          "RationaleStatement": "You should protect your users from any emails that aren't authenticated (SPF or DKIM)",
+          "ImpactStatement": "Emails that aren't authenticated (SPF or DKIM) display a warning message to the recipient.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Spoofing and authentication, set Protect against any unauthenticated emails to checked 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Spoofing and authentication, ensure Protect against any unauthenticated emails is checked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Protect against any unauthenticated emails = unchecked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.4.3.5",
+      "Description": "Ensure groups are protected from inbound emails spoofing your domain",
+      "Checks": [
+        "gmail_groups_spoofing_protection_enabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "If a group receives an email that is spoofing your domain it is sent to the spam folder.",
+          "RationaleStatement": "You should protect your groups from any emails that spoofing your domain.",
+          "ImpactStatement": "Emails that are spoofing your domain and are received by a group are sent to the spam folder.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Spoofing and authentication, set Protect your Groups from inbound emails spoofing your domain to checked 6. Set Action to Move email to spam 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Safety - Spoofing and authentication, ensure Protect your Groups from inbound emails spoofing your domain is checked 6. Ensure Action is set to Move email to spam",
+          "AdditionalInformation": "",
+          "DefaultValue": "• Protect against any unauthenticated emails = unchecked • Action = Keep email in inbox and display warning (default)",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.5.1",
+      "Description": "Ensure POP and IMAP access is disabled for all users",
+      "Checks": [
+        "gmail_pop_imap_access_disabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 2",
+          "AssessmentStatus": "Manual",
+          "Description": "POP and IMAP may allow users to access Gmail using legacy or unapproved email clients that do not support modern authentication mechanisms, such as multifactor authentication.",
+          "RationaleStatement": "Disabling POP and IMAP prevents use of legacy and unapproved email clients with weaker authentication mechanisms that would increase the risk of email account credential compromise.",
+          "ImpactStatement": "If you have Apple iOS or Android device users in your organization and you turn IMAP off, let them know that they’re no longer syncing Google Workspace mail to the iOS or Android Mail app. They might not get a notification on their device. Additionally, new users can’t manually add the Google Account they use for work or school to the device. If your Google Workspace users want to use desktop clients, such as Microsoft Outlook and Apple Mail, to access their Google Workspace mail, you need to enable POP or IMAP access in the Google Admin console. You can enable access for everyone in your organization or only for users in specific organizational units.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under End User Access - POP and IMAP Access 6. Set Enable IMAP access for all users to unchecked 7. Set Enable POP access for all users to unchecked 8. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under End User Access - POP and IMAP Access 6. Ensure Enable IMAP access for all users is unchecked 7. Ensure Enable POP access for all users is unchecked",
+          "AdditionalInformation": "",
+          "DefaultValue": "• Enable IMAP access for all users is checked • Enable POP access for all users is checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.5.2",
+      "Description": "Ensure automatic forwarding options are disabled",
+      "Checks": [
+        "gmail_auto_forwarding_disabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "You should disable automatic forwarding to prevent users from auto-forwarding mail.",
+          "RationaleStatement": "In the event that an attacker gains control of an end-user account they could create rules to ex-filtrate data from your environment.",
+          "ImpactStatement": "Care should be taken before implementation to ensure there is no business need for case-by-case auto-forwarding. Disabling auto-forwarding to remote domains will affect all users and in an organization.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under End User Access - Automatic forwarding, set Allow users to automatically forward incoming email to another address to unchecked 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under End User Access - Automatic forwarding, ensure Allow users to automatically forward incoming email to another address is unchecked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Allow users to automatically forward incoming email to another address is checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.5.3",
+      "Description": "Ensure per-user outbound gateways is disabled",
+      "Checks": [
+        "gmail_per_user_outbound_gateway_disabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "A per-user outbound gateway is a mail server, other than the Google Workspace mail servers, that delivers outgoing mail for a user in your domain.",
+          "RationaleStatement": "Mail sent via external SMTP will circumvent your outbound gateway",
+          "ImpactStatement": "Care should be taken before implementation to ensure there is no business need for mail sent via external SMTP gateway.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under End User Access - Allow per-user outbound gateways, set Allow users to send mail through an external SMTP server when configuring a \"from\" address hosted outside your email domain to unchecked 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under End User Access - Allow per-user outbound gateways, ensure Allow users to send mail through an external SMTP server when configuring a \"from\" address hosted outside your email domain is unchecked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Allow users to send mail through an external SMTP server when configuring a \"from\" address hosted outside your email domain is unchecked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.5.4",
+      "Description": "Ensure external recipient warnings are enabled",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Gmail adds an image or colored border to external addresses.",
+          "RationaleStatement": "As an admin for your organization, you can turn alerts on or off for messages that include external recipients (people with email addresses outside of your organization). These alerts help people avoid unintentional replies, and remind them to treat external messages with caution.",
+          "ImpactStatement": "When this setting is on, Gmail shows warnings (colored boarder) when: • An email thread includes external recipients (not available on iOS). • Replying to a message from an external recipient. • Composing a new message to an external recipient (not available on iOS). Gmail doesn't show a warning if the external recipient is in your organization's Directory, personal Contacts, or other Contacts. Warnings aren't displayed for secondary domain or domain alias addresses.",
+          "RemediationProcedure": "To configure external recipient warnings are enabled, use the Google Workspace Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select End User Access 6. Select Warn for external recipients 7. Set Highlight any external recipients in a conversation. Warn users before they reply to email with external recipients who aren't in their contacts. to checked 8. Select Save",
+          "AuditProcedure": "To verify Ensure external recipient warnings are enabled, use the Google Workspace Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select End User Access 6. Under Warn for external recipients, ensure Highlight any external recipients in a conversation. Warn users before they reply to email with external recipients who aren't in their contacts. is ON",
+          "AdditionalInformation": "",
+          "DefaultValue": "Highlight any external recipients in a conversation. Warn users before they reply to email with external recipients who aren't in their contacts. is ON",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.6.1",
+      "Description": "Ensure enhanced pre-delivery message scanning is enabled",
+      "Checks": [
+        "gmail_enhanced_pre_delivery_scanning_enabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Enables improved detection of suspicious content prior to delivery.",
+          "RationaleStatement": "As an administrator, you can increase Gmail's ability to identify suspicious content with enhanced pre-delivery message scanning. Typically, when Gmail identifies a possible phishing message, a warning is displayed and the message might be moved to spam.",
+          "ImpactStatement": "With the Enhanced pre-delivery message scanning option, when Gmail detects suspicious content, message delivery is slightly delayed so that Gmail can do additional security checks on the message.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select Spam, phishing, and malware 6. Select Enhanced pre-delivery message scanning. 7. Set Enables improved detection of suspicious content prior to delivery to checked 8. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select Spam, phishing, and malware 6. Ensure Enhanced pre-delivery message scanning. is ON",
+          "AdditionalInformation": "",
+          "DefaultValue": "Enhanced pre-delivery message scanning. is ON",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.6.2",
+      "Description": "Ensure spam filters are not bypased for internal senders",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "You can configure your advanced Gmail settings to bypass, or not bypass, spam filters for messages received from internal senders.",
+          "RationaleStatement": "Turning off this setting reduces the risk of spoofing and phishing/whaling.",
+          "ImpactStatement": "Your users will be better protected by filtering their email for spam and minimizing the chances for spoofing and phishing/whaling attacks.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select Spam, phishing, and malware 6. Under Spam, select Configure 7. Set Bypass spam filters for messages received from internal senders. to unchecked 8. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select Spam, phishing, and malware 6. Under Spam, select Configure 7. Ensure Bypass spam filters for messages received from internal senders. is unchecked",
+          "AdditionalInformation": "",
+          "DefaultValue": "Bypass spam filters for messages received from internal senders. is checked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.7.1",
+      "Description": "Ensure comprehensive mail storage is enabled",
+      "Checks": [
+        "gmail_comprehensive_mail_storage_enabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Comprehensive mail storage ensures messages sent by other core services appear in users' sent folders and are therefore accessible to Vault.",
+          "RationaleStatement": "As an administrator, you can ensure that a copy of all sent or received messages in your domain—including messages sent or received by non-Gmail mailboxes—is stored in the associated users' Gmail mailboxes.",
+          "ImpactStatement": "There are some important considerations to carefully review before enabling comprehensive mail storage: You should not enable comprehensive mail storage if you have compliance routing rules that change the recipient (and don’t want the original recipient to receive a copy of the email). When you have the SMTP Relay service enabled, user mailboxes will keep a copy of the message in the sent folder (for example, when sending mail from a scanner) if comprehensive mail storage is enabled. This might cause accounts to exceed storage limits if your account's edition has storage limits. Compare editions. You should enable comprehensive mail storage if you only use Gmail for the Vault feature and forward email to your on-premise mail server or other email provider.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select Compliance 6. Select Comprehensive mail storage 7. Set Ensure that a copy of all sent and received mail is stored in associated users' mailboxes to checked 8. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select Compliance 6. Under Comprehensive mail storage, ensure Ensure that a copy of all sent and received mail is stored in associated users' mailboxes is ON",
+          "AdditionalInformation": "",
+          "DefaultValue": "Copy of all sent and received mail is stored in associated users' mailboxes is OFF",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.3.7.2",
+      "Description": "Ensure 'Send email over a secure TLS connection' Is Enabled",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.3 Gmail",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "The default is that Gmail always tries to send messages over a secure TLS connection. If the receiving server doesn't use TLS, Gmail still sends messages with TLS but the connection isn't secure. This setting allows the option to require a CA-signed certificate, verify the hostname associated with the certificate, and test the TLS connection. A padlock image will appear next to the recipient address if the message will be sent with TLS. The padlock shows only for accounts with a Google Workspace subscription that supports S/MIME encryption. Google Workspace supports TLS versions 1.0, 1.1, 1.2, and 1.3.",
+          "RationaleStatement": "Transport Layer Security (TLS) encrypts email messages for security and privacy and prevents unauthorized access of messages when they're sent over internet connections.",
+          "ImpactStatement": "This should not have an impact on the usage of Gmail.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select Compliance 6. Select Secure transport (TLS) compliance 7. Select Configure 8. Set Inbound - all messages and Outbound - all messages to checked 9. Select Save Note: Enabling the Inbound - all messages and Outbound - all messages configurations will also, by default, enable Require CA-signed certificate when delivering outbound messages to the TLS-enabled domains specified above. This is not a required configuration, but it is recommended.",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Select Compliance 6. Under Secure transport (TLS) compliance, select Configure 7. Under Email messages to affect ensure Inbound - all messages and Outbound - all messages are ON",
+          "AdditionalInformation": "",
+          "DefaultValue": "",
+          "References": "https://support.google.com/a/answer/2520500"
+        }
+      ]
+    },
+    {
+      "Id": "3.1.4.1.1",
+      "Description": "Ensure external filesharing in Google Chat and Hangouts is disabled",
+      "Checks": [
+        "chat_external_file_sharing_disabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.4 Google Chat",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Control how files are shared externally in Google Chat and Hangouts.",
+          "RationaleStatement": "Files often contain confidential information, and some organizations, particularly in regulated industries, need to control the flow of this information within and outside of their organization.",
+          "ImpactStatement": "Users will not be able to share files via chat externally.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Chat and classic Hangouts 4. Select Chat File Sharing 5. Under Setting, set External filesharing to No files 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Chat and classic Hangouts 4. Select Chat File Sharing 5. Under Setting, verify External filesharing is set to No files",
+          "AdditionalInformation": "",
+          "DefaultValue": "External filesharing is Allow all files",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.4.1.2",
+      "Description": "Ensure internal filesharing in Google Chat and Hangouts is disabled",
+      "Checks": [
+        "chat_internal_file_sharing_disabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.4 Google Chat",
+          "Profile": "Level 2",
+          "AssessmentStatus": "Manual",
+          "Description": "Control how files are shared internally in Google Chat and Hangouts.",
+          "RationaleStatement": "Files often contain confidential information, and some organizations, particularly in regulated industries, need to control the flow of this information within and outside of their organization.",
+          "ImpactStatement": "Users will not be able to share files via chat internally.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Chat and classic Hangouts 4. Select Chat File Sharing 5. Under Setting, set Internal filesharing to No files 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Chat and classic Hangouts 4. Select Chat File Sharing 5. Under Setting, verify Internal filesharing is set to No files",
+          "AdditionalInformation": "",
+          "DefaultValue": "Internal filesharing is Allow all files",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.4.2.1",
+      "Description": "Ensure Google Chat externally is restricted to allowed domains",
+      "Checks": [
+        "chat_external_messaging_restricted"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.4 Google Chat",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Control how users chat with people outside of your organization. If you allow your users to chat externally, you can also allow them to create and join spaces with people outside your organization.",
+          "RationaleStatement": "Restricting external chat to only approved domains potentially limits the spread of company information.",
+          "ImpactStatement": "Users will not be able to chat with users in any external domain, only approved domains. This will require some admin-level approval and allowlist maintenance.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Chat and classic Hangouts 4. Select External Chat Settings 5. Select Chat externally 6. Set Allow users to send messages outside <company> to ON 7. Set Only allow this for allowlisted domains to checked 8. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Chat and classic Hangouts 4. Select External Chat Settings 5. Select Chat externally 6. Verify Allow users to send messages outside <company> is ON 7. Verify Only allow this for allowlisted domains is checked",
+          "AdditionalInformation": "",
+          "DefaultValue": "• Allow users to send messages outside <company> is set to ON • Only allow this for allowlisted domains is unchecked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.4.3.1",
+      "Description": "Ensure external spaces in Google Chat and Hangouts are restricted",
+      "Checks": [
+        "chat_external_spaces_restricted"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.4 Google Chat",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Control whether users can create or join spaces within your organization that include external people outside of your organization.",
+          "RationaleStatement": "Restricting external spaces to only approved domains potentially limits the spread of company information.",
+          "ImpactStatement": "Users with this setting turned off or who have editions that don't support external spaces can't create these spaces, but they can join existing spaces with external people",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Chat and classic Hangouts 4. Select External Spaces 5. Under Setting, set Allow users at <domain> to create and join spaces with people outside their organization to ON 6. Set Only allow users to add people from allowlisted domains to checked 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Chat and classic Hangouts 4. Select External Spaces 5. Under Setting, verify Allow users at <domain> to create and join spaces with people outside their organization is ON 6. Verify Only allow users to add people from allowlisted domains is checked",
+          "AdditionalInformation": "",
+          "DefaultValue": "• Allow users at <company> to create and join spaces with people outside their organization is ON • Only allow users to add people from allowlisted domains is unchecked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.4.4.1",
+      "Description": "Ensure allow users to install Chat apps is disabled",
+      "Checks": [
+        "chat_apps_installation_disabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.4 Google Chat",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Control the use of Chat apps in spaces or direct messages to connect to services in Google Chat and look up information, schedule meetings, or complete tasks. Apps are accounts created by Google, users in your organization, or third parties.",
+          "RationaleStatement": "When a user interacts with an app in Chat, the app can see the user's email address, avatar, other basic user information, user locale, timezone, and interaction information. The app can also see the basic user information of other people in the chat, but it can't see their email address or avatar unless they also interact directly with the app. Chat apps that you install from the Google Workspace Marketplace can be made by developers from outside of your organization. Using these Chat app need to be carefully controlled (vetted and approved) since a malicious Chat app could allow the exfiltration of company proprietary information.",
+          "ImpactStatement": "By default users will not be able to install Chat apps.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Chat and classic Hangouts 4. Select Chat apps 5. Under Chat apps access settings, set Allow users to install Chat apps to OFF 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Chat and classic Hangouts 4. Select Chat apps 5. Under Chat apps access settings, verify Allow users to install Chat apps is OFF",
+          "AdditionalInformation": "",
+          "DefaultValue": "Allow users to install Chat apps is ON",
+          "References": "https://developers.google.com/chat/concepts/apps"
+        }
+      ]
+    },
+    {
+      "Id": "3.1.4.4.2",
+      "Description": "Ensure allow users to add and use incoming webhooks is disabled",
+      "Checks": [
+        "chat_incoming_webhooks_disabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.4 Google Chat",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Allow users to configure incoming webhooks and developers to call incoming webhooks to post content. Incoming webhooks let you send asynchronous messages into Google Chat from applications that aren't Chat apps.",
+          "RationaleStatement": "Webhook usage should be carefully controlled (vetted and approved) since a malicious application could send bogus information to exposed webhooks and ultimately these users.",
+          "ImpactStatement": "By default users will have exposed webhooks.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Chat and classic Hangouts 4. Select Chat apps 5. Under Chat apps access settings, set Allow users to add and use incoming webhooks to OFF",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Chat and classic Hangouts 4. Select Chat apps 5. Under Chat apps access settings, verify Allow users to add and use incoming webhooks is OFF",
+          "AdditionalInformation": "",
+          "DefaultValue": "Allow users to add and use incoming webhooks is ON",
+          "References": "https://developers.google.com/chat/concepts/apps"
+        }
+      ]
+    },
+    {
+      "Id": "3.1.6.1",
+      "Description": "Ensure accessing groups from outside this organization is set to private",
+      "Checks": [
+        "groups_external_access_restricted"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.6 Groups for Business",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Choose whether people outside your organization can access your groups. Group owners can further restrict access as needed.",
+          "RationaleStatement": "Who can externally view groups internal to the organization should be carefully controlled and their access vetted as needed.",
+          "ImpactStatement": "No one outside your organization can view or search for your groups. External users can email the group if group settings allow.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Groups for Business 5. Select Sharing options 6. Set Accessing groups from outside this organization to Private 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Groups for Business 5. Select Sharing options 6. Verify Accessing groups from outside this organization is Private",
+          "AdditionalInformation": "",
+          "DefaultValue": "Accessing groups from outside this organization is Private",
+          "References": "https://support.google.com/a/answer/10308022?hl=en"
+        }
+      ]
+    },
+    {
+      "Id": "3.1.6.2",
+      "Description": "Ensure creating groups is restricted",
+      "Checks": [
+        "groups_creation_restricted"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.6 Groups for Business",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Control who is allowed to create Groups in your organization and if they can have external members.",
+          "RationaleStatement": "The organization should have some control over the organizational groups created and the purpose they are for.",
+          "ImpactStatement": "In a large organization, this may cause too much burden on administrators.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Groups for Business 5. Select Creating groups 6. Select Only organization admins can create groups 7. Set Group owners can allow external members Organization admins can always add external members to unchecked 8. Set Group owners can allow incoming email from outside the organization to unchecked 9. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Groups for Business 5. Select Creating groups 6. Verify Only organization admins can create groups is selected 7. Verify Group owners can allow external members Organization admins can always add external members is unchecked 8. Verify Group owners can allow incoming email from outside the organization is unchecked",
+          "AdditionalInformation": "",
+          "DefaultValue": "• Anyone in the organization can create groups is selected • Group owners can allow external members Organization admins can always add external members is unchecked • Group owners can allow incoming email from outside the organization is unchecked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.6.3",
+      "Description": "Ensure default for permission to view conversations is restricted",
+      "Checks": [
+        "groups_view_conversations_restricted"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.6 Groups for Business",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "By default, only allow group members to view group conversations.",
+          "RationaleStatement": "Conversation viewing can always be expanded by exception for certain groups as needed (Need to know), but by default be restricted.",
+          "ImpactStatement": "No practical impact, since Group members can view conversations in the Group.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Groups for Business 5. Select Sharing options 6. Set Default for permission to view conversations to All group members 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Groups for Business 5. Select Sharing options 6. Verify Default for permission to view conversations is All group members",
+          "AdditionalInformation": "",
+          "DefaultValue": "Default for permission to view conversations is All organization users",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.7.1",
+      "Description": "Ensure service status for Google Sites is set to off",
+      "Checks": [
+        "sites_service_disabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.7 Sites",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "By default turn off Google Sites for all users.",
+          "RationaleStatement": "There is really no reason for every user within an organization to have access to Google Sites. If this capability is needed, it can be enabled and configured for those users and groups by exception as required by the organization to meet specific needs.",
+          "ImpactStatement": "Users will not be have access to Google Sites.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Sites 5. Select Service status 6. Set Service status to OFF for everyone 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Sites 5. Select Service status 6. Verify Service status is OFF for everyone",
+          "AdditionalInformation": "",
+          "DefaultValue": "Service status is ON for everyone",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.8.1",
+      "Description": "Ensure access to external Google Groups is OFF for Everyone",
+      "Checks": [
+        "additionalservices_external_groups_disabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.8 Additional Google services",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Control whether users in your organization can access external groups from their Google Workspace account. External groups are created outside your organization and might include a public community group or a group for a club a user belongs to. Control access to external groups by turning on or off the Google Groups additional service — a legacy service in your Admin console that does only one thing: It allows or blocks users from accessing external groups from their Google Workspace account. NOTE: This service has no effect on your organization's internal groups.",
+          "RationaleStatement": "In general, most of the organization's personnel do not need to assess external groups. They can be allowed by exception as needed by the business.",
+          "ImpactStatement": "Users can't access external groups from their Google Workspace account. However, they do continue to receive email digests from groups they're already subscribed to when you turn off the service.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select `Additional Google services 5. Scroll down to Google Groups 6. Set it to OFF for everyone 7. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select `Additional Google services 5. Scroll down to Google Groups 6. Verify it is OFF for everyone",
+          "AdditionalInformation": "",
+          "DefaultValue": "Google Groups is ON for Everyone",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "3.1.9.1.1",
+      "Description": "Ensure users access to Google Workspace Marketplace apps is restricted",
+      "Checks": [
+        "marketplace_apps_access_restricted"
+      ],
+      "Attributes": [
+        {
+          "Section": "3 Apps",
+          "SubSection": "3.1.9 Google Workspace Marketplace",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Restrict what Google Marketplace apps a user can install.",
+          "RationaleStatement": "Users should only be allowed to install approved and vetted apps. This will limit the overall attack surface for the organization.",
+          "ImpactStatement": "Users can only install approved Google Marketplace apps. This list will have to be created and maintained.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace Marketplace apps 4. Select Settings 5. Under Manage Google Workspace Marketplace allowlist access, set Settings to install third-party Google Workspace Marketplace apps: to Allow users to install and run only selected apps from the Marketplace 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace Marketplace apps 4. Select Settings 5. Under Manage Google Workspace Marketplace allowlist access, verify Settings to install third-party Google Workspace Marketplace apps: is set to Allow users to install and run only selected apps from the Marketplace",
+          "AdditionalInformation": "",
+          "DefaultValue": "Settings to install third-party Google Workspace Marketplace apps: is Allow users to install and run any app from the Marketplace",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "4.1.1.1",
+      "Description": "Ensure 2-Step Verification (Multi-Factor Authentication) is enforced for all users in administrative roles",
+      "Checks": [
+        "security_2sv_enforced"
+      ],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.1 Authentication",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Enforce 2-Step Verification (Multi-Factor Authentication) for all users assigned administrative roles. These include roles such as: • Help Desk Admin • Groups Admin • Super Admin • Services Admin • User Management Admin • Mobile Admin • Android Admin • Custom Admin Roles",
+          "RationaleStatement": "Add an extra layer of security to users accounts by asking users to verify their identity when they enter a username and password. 2-Step Verification (Multi-factor authentication) requires an individual to present a minimum of two separate forms of authentication before access is granted. 2-Step Verification provides additional assurance that the individual attempting to gain access is who they claim to be. With 2-Step Verification, an attacker would need to compromise at least two different authentication mechanisms, increasing the difficulty of compromise and thus reducing the risk.",
+          "ImpactStatement": "Implementation of 2-Step Verification (multi-factor authentication) for all users in administrative roles will necessitate a change to user routine. All users in administrative roles will be required to enroll in 2-Step Verification using using phone, SMS, or an authentication application. After enrollment, use of 2-Step Verification will be required for future access to the environment.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Go to Security and click on 2-Step Verification 3. Select the appropriate group with ALL ADMIN ROLES -- Create this group if needed 4. Under Authentication, set Allow users to turn on 2-Step Verification to checked 5. Set Enforcement to On 6. Set New user enrollment period is set to 2 weeks 7. Under Frequency, set Allow user to trust device to unchecked 8. Under Methods, set Any except verification codes via text, phone call to selected 9. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Go to Security and click on 2-Step Verification 3. Select the appropriate group with ALL ADMIN ROLES -- Create this group if needed 4. Under Authentication, ensure Allow users to turn on 2-Step Verification is checked 5. Ensure Enforcement is set to On 6. Ensure New user enrollment period is set to 2 weeks 7. Under Frequency, ensure Allow user to trust device is unchecked 8. Under Methods, ensure Any except verification codes via text, phone call is selected",
+          "AdditionalInformation": "",
+          "DefaultValue": "• Allow users to turn on 2-Step Verification is checked • Enforcement is Off • New user enrollment period is None • Frequency - Allow user to trust device is checked • Methods is Any",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "4.1.1.2",
+      "Description": "Ensure hardware security keys are used for all users in administrative roles and other high-value accounts",
+      "Checks": [
+        "security_2sv_hardware_keys_admins"
+      ],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.1 Authentication",
+          "Profile": "Level 2",
+          "AssessmentStatus": "Manual",
+          "Description": "A hardware security key connects to a user's device using USB (A & C), Lightning, NFC, or Bluetooth connection. Also, many Android phones and Apple iPhones have built-in security keys accessible via Bluetooth and that can be assigned to a Google Workspace account. The purpose of a physical security key is to provide an additional security layer to high value accounts; in the event of a compromise of a user's credentials (username and password) without the associated security key, the authentication process cannot be successfully completed.",
+          "RationaleStatement": "The purpose of a physical security key is to provide an additional security layer to high value accounts; in the event of a compromise of a user's credentials (username and password) without the associated security key, the authentication process cannot be successfully completed. Hardware security keys help to protect high value accounts from targeted attacks, including phishing attempts. Adding a hardware security key requirement to your Google privileged accounts adds another layer of depth of protection greater than any other form of two-factor authentication.",
+          "ImpactStatement": "Users with hardware security keys enabled will need to have physical access to the hardware key in order complete the authentication process and this will force users to adopt a practice of making sure that the physical key is available to them at any point in time that they need to be able to log in. If a hardware security key is lost or stolen, the impacted user can gain access to their Google account by using a backup MFA process and then remove the lost/stolen key and add another one. If a hardware security key is stolen, the user's account is not automatically compromised as the hardware key works in conjunction with the user's account credentials (username & password).",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Go to Security and click on Authentication 3. Under Authentication, select 2-Step Verification 4. Select the option to Allow users to turn on 2-Step Verification 5. Under Enforcement, enable either 'On' or else 'On from' and configure a valid date 6. Under Methods, select Only security key to force the use of a security key 7. Under 2-Step Verification policy suspension grace period, select 1 day 8. Under Security codes, select Don't allow users to generate security codes 9. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Go to Security and click on Authentication 3. Under Authentication, select 2-Step Verification 4. Ensure the option to Allow users to turn on 2-Step Verification is checked 5. Ensure that the Enforcement option is set to either 'On' or 'On from' with a valid date present 6. Under Methods ensure that Only security key is selected 7. Under 2-Step Verification policy suspension grace period ensure that 1 day is selected 8. Under Security codes ensure that Don't allow users to generate security codes is selected",
+          "AdditionalInformation": "",
+          "DefaultValue": "• Allow users to turn on 2-Step Verification is checked • Enforcement is Off • New user enrollment period is None • Frequency - Allow user to trust device is checked • Methods is Any",
+          "References": "https://support.google.com/accounts/answer/6103523?hl=En"
+        }
+      ]
+    },
+    {
+      "Id": "4.1.1.3",
+      "Description": "Ensure 2-Step Verification (Multi-Factor Authentication) is enforced for all users",
+      "Checks": [
+        "security_2sv_enforced"
+      ],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.1 Authentication",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Enforce 2-Step Verification (Multi-Factor Authentication) for all users.",
+          "RationaleStatement": "Add an extra layer of security to users accounts by asking users to verify their identity when they enter a username and password. 2-Step Verification (Multi-factor authentication) requires an individual to present a minimum of two separate forms of authentication before access is granted. 2-Step Verification provides additional assurance that the individual attempting to gain access is who they claim to be. With 2-Step Verification, an attacker would need to compromise at least two different authentication mechanisms, increasing the difficulty of compromise and thus reducing the risk.",
+          "ImpactStatement": "Implementation of 2-Step Verification (multi-factor authentication) for all users will necessitate a change to user routine. All users will be required to enroll in 2-Step Verification using using phone, SMS, or an authentication application. After enrollment, use of 2-Step Verification will be required for future access to the environment.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select 2-Step Verification 4. Under Authentication, check - Allow users to turn on 2-Step Verification 5. Set Enforcement to On 6. Set New user enrollment period to 2 weeks 7. Under Frequency, uncheck - Allow user to trust device 8. Under Methods, select - Any except verification codes via text, phone call 9. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select 2-Step Verification 4. Under Authentication, ensure Allow users to turn on 2-Step Verification is checked 5. Ensure Enforcement is set to On 6. Ensure New user enrollment period is set to 2 weeks 7. Under Frequency, ensure Allow user to trust device is not checked 8. Under Methods, ensure Any except verification codes via text, phone call is selected",
+          "AdditionalInformation": "",
+          "DefaultValue": "• Allow users to turn on 2-Step Verification is checked • Enforcement is Off • New user enrollment period is None • Frequency - Allow user to trust device is checked • Methods is Any",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "4.1.2.1",
+      "Description": "Ensure Super Admin account recovery is disabled",
+      "Checks": [
+        "security_super_admin_recovery_disabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.1 Authentication",
+          "Profile": "Level 2",
+          "AssessmentStatus": "Manual",
+          "Description": "This option allows Super Admin users to recover access to their accounts if their password has been forgotten. The option is not available if either Single Sign On or Password Sync is in use.",
+          "RationaleStatement": "While allowing Super Admins to recover access to their accounts when they have forgotten their passwords reduces the number of support tickets, it also significantly reduces the security of those Super Admin accounts. If a malicious actor has access to the Super Admin's standard user account, they may then have access to the Super Admin account as well.",
+          "ImpactStatement": "The impact to Super Admins not being allowed to recover their accounts is that there may be downtime while another Super Admin resets their password.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Security. 3. Select Authentication. 4. Under Account recovery select Super admin account recovery. 5. Set Allow super admins to recover their account to unchecked 6. Click Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Security. 3. Select Authentication. 4. Under Account recovery select Super admin account recovery. 5. Ensure Allow super admins to recover their account is unchecked.",
+          "AdditionalInformation": "",
+          "DefaultValue": "Allow super admins to recover their account is OFF",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "4.1.2.2",
+      "Description": "Ensure User account recovery is enabled",
+      "Checks": [
+        "security_user_recovery_enabled"
+      ],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.1 Authentication",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "This option allows non-Super Admin users to recover access to their accounts if their password has been forgotten. The option is not available if either Single Sign On or Password Sync is in use.",
+          "RationaleStatement": "Allowing users to recover access to their accounts when they have forgotten their passwords reduces the number of support tickets generated by users, and reduces the amount of down time spent waiting on the account recovery process to initiate and complete.",
+          "ImpactStatement": "The potential impact to users being allowed to recover their accounts includes: 1. The user is now empowered to reset their passwords. 2. The user will no longer need to call a helpdesk or open a support ticket to regain access to their account. An organization that allows users to recover their account will realize less time spent by administrative staff working on these tasks.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Security. 3. Select User account recovery 4. Select either the pencil icon or the setting itself. 5. Set Allow users and non-super admins to recover their account to checked. 6. Select Save.",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Security. 3. Select User account recovery 4. Verify Allow users and non-super admins to recover their account is checked.",
+          "AdditionalInformation": "",
+          "DefaultValue": "Allow users and non-super admins to recover their account is OFF",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "4.1.3.1",
+      "Description": "Ensure Advanced Protection Program is configured",
+      "Checks": [
+        "security_advanced_protection_configured"
+      ],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.1 Authentication",
+          "Profile": "Level 2",
+          "AssessmentStatus": "Manual",
+          "Description": "Enable Google's Advanced Protection Platform for all users and prevent the use of security codes where applicable.",
+          "RationaleStatement": "Sophisticated phishing tactics can trick the most savvy users into giving their sign-in credentials to attackers. Advanced Protection requires you to use a security key, which is a hardware device or special software on your phone used to verify your identity, to sign in to your Google Account. Unauthorized users won’t be able to sign in without your security key, even if they have your username and password. The Advanced Protection Program includes a curated group of high-security policies that are applied to enrolled accounts. Additional policies may be added to the Advanced Protection Program to ensure the protections are current. Advanced Protection allows you to apply all of these protections at once, and override similar settings you may have configured manually. These policies include: Strong authentication with security keys Use of security codes with security keys (as needed) Restrictions on third-party access to account data Deep Gmail scans Google Safe Browsing protections in Chrome (when users are signed into Chrome using the same identity as their Advanced Protection Program identity) Account recovery through admin",
+          "ImpactStatement": "User Impact You need your security key when you sign in for the first time on a computer, browser, or device. If you stay signed in, you may not be asked to use your security key the next time you log in. Limits third-party app access to your data, puts stronger checks on suspicious downloads, and tightens account recovery security to help prevent unauthorized access. Security Keys - 2 Required Android: With an Android 7.0+ phone, you can enroll in a few taps by registering your phone’s built-in security key. iPhone: If you have an iPhone running iOS 10.0+, install the Google Smart Lock app to register your security key first, then enroll. Two security keys are required for added assurance. If one key is lost or damaged, users can use the second key to regain account access. Third-Party iDP You can use the Advanced Protection Program with accounts that federate from an IdP using SAML. When users with these accounts enroll in the Advanced Protection Program, we’ll require security key use after the user signs in on the IdP. Note that SAML users can select Remember the device to avoid challenges on a browser or device. Security Codes Before allowing users to generate security codes, carefully evaluate if your organization needs them. Using security keys with security codes increases the risk of phishing. However, if your organization has important workflows where security keys can’t be used directly, enabling security codes for those situations may help improve your security posture overall. Using 'Sign in with Google' with other apps and services You can still sign into apps and services with Google. If they request access to your Gmail or Drive data, access is denied.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Advanced Protection Program 4. Under Enrollment - Allow users to enroll in the Advanced Protection Program, set Enable user enrollment to selected for the desired organizational unit or group 5. Under Security Codes, set Do not allow users to generate security codes to selected for the desired organizational unit or group 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Advanced Protection Program 4. Under Enrollment - Allow users to enroll in the Advanced Protection Program, ensure Enable user enrollment is selected for the desired organizational unit or group 5. Under Security Codes, ensure Do not allow users to generate security codes is selected for the desired organizational unit or group",
+          "AdditionalInformation": "",
+          "DefaultValue": "• Allow users to enroll in the Advanced Protection Platform is selected • Security codes is Allow security codes without remote access",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "4.1.4.1",
+      "Description": "Ensure login challenges are enforced",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.1 Authentication",
+          "Profile": "Level 2",
+          "AssessmentStatus": "Manual",
+          "Description": "Configure Google Workspace to verify a user's identity post-sso.",
+          "RationaleStatement": "Many organizations use third-party identity providers (IdPs) to authenticate users who use single sign on (SSO) through SAML. The third-party IdP authenticates users and no additional risk-based challenges are presented to them. Any Google 2-Step Verification (2SV) configuration is ignored. This is the default behavior. You can set a policy to allow additional risk-based authentication challenges and 2SV if it’s configured. If Google receives a valid SAML assertion (authentication information about the user) from the IdP during user sign-in, Google can present additional challenges to the user. Login challenges requires users have a recovery phone number or email account associated with their organizational account. If not previously configured, users will be prompted to enter this information periodically until provided. One login challenge option prompts users to enter their employee ID. This method is susceptible to information gathering attacks, should a list of employee IDs ever be leaked.",
+          "ImpactStatement": "The potential impact associated with implementation of this setting is dependent upon the existing 2-Step Verification (2SV) polices. • If you have existing 2SV policies, such as 2SV enforcement, those policies apply immediately. • Users affected by the new policy and who are enrolled in 2SV get a 2SV challenge at sign-in. • Based on Google sign-in risk analysis, users might see risk-based challenges at sign-in.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Authentication 4. Select Login Challenges 5. Depending on your organization's SSO configuration: o Under Settings for users signing in using the legacy SSO profile set Ask users for additional verifications from Google if a sign-in or session behavior looks suspicious, and always apply 2-Step Verification policies (if configured) to checked o Under Settings for users signing in using other SSO profiles set Ask users for additional verifications from Google if a sign-in or session behavior looks suspicious, and always apply 2-Step Verification policies (if configured) to checked 6. Select Save 7. Under Login challenges, set Use employee ID to keep my users more secure to unchecked 8. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Authentication 4. Select Login Challenges 5. Select Post-SSO verification 6. Depending on your organization's SSO configuration: o Under Settings for users signing in using the legacy SSO profile ensure Ask users for additional verifications from Google if a sign-in or session behavior looks suspicious, and always apply 2-Step Verification policies (if configured) is checked o Under Settings for users signing in using other SSO profiles ensure Ask users for additional verifications from Google if a sign-in or session behavior looks suspicious, and always apply 2-Step Verification policies (if configured) is checked 7. Under Login challenges, ensure Use employee ID to keep my users more secure is unchecked",
+          "AdditionalInformation": "This recommendation is giving guidance for using Google authentication as your primary SSO. If you are using a third-party SSO, you will need to configure that through either: To configure this setting via the Google Workspace Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Authentication 4. Depending on your organization's SSO and SAML configuration: o Select SSO with SAML applications o Select SSO with third-party IdP You will need to configure either option to your organization's third-party provider's requirements. Your provider should be able to assist you with that configuration, but it is outside the scope of the benchmark.",
+          "DefaultValue": "• Post-SSO verification is Logins using SSO bypass additional verifications • Use employee ID to keep my users more secure is unchecked",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "4.1.5.1",
+      "Description": "Ensure password policy is configured for enhanced security",
+      "Checks": [
+        "security_password_policy_strong"
+      ],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.1 Authentication",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Configure Google Workspace Password Policy with a more secure length and is enforced upon next sign-in to protect against the use of common password attacks.",
+          "RationaleStatement": "Strong password policies protect an organization by prohibiting the use of weak passwords.",
+          "ImpactStatement": "The potential impact associated with implementation of this setting is dependent upon the existing password policies in place in the environment. For environments that have strong password policies in place, the impact will be minimal. For organizations that do not have strong password policies in place, enhancing the password policy may require users to change passwords, and adhere to more stringent requirements than they have been accustomed to. Configuring passwords to expire at a 1 year mark ensures that users are not forced to change passwords so often that easily discerned patterns are used in the creation of the passwords. The day-to-day impact on users will be that they have to manage fewer passwords changing on a frequent basis. NOTE: Password should be changed immediately on any indication of system compromise, when a user role changes, and when a user leaves the organization.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Password management 4. Under Strength, set Enforce strong passwords to checked 5. Under Length, set Minimum Length to 14 or greater 6. Under Strength and Length enforcement, set Enforce password policy at next sign-in is checked 7. Under Reuse, set Allow password reuse to unchecked 8. Under Expiration, set Password reset frequency to 365 Days 9. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Password management 4. Under Strength, ensure Enforce strong passwords is checked 5. Under Length, ensure Minimum Length is set to 14+ 6. Under Strength and Length enforcement, ensure Enforce password policy at next sign-in is set to checked 7. Under Reuse, ensure Allow password reuse is unchecked 8. Under Expiration, ensure Password reset frequency is set to 365 Days",
+          "AdditionalInformation": "",
+          "DefaultValue": "• Enforce strong password is checked • Minimum length is 8 • Maximum length is 100 • Enforce password policy at next sign-in is not checked • Allow password reuse is not checked • Expiration is Never expires",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "4.2.1.1",
+      "Description": "Ensure application access to Google services is restricted",
+      "Checks": [
+        "security_app_access_restricted"
+      ],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.2 Access and Data Control",
+          "Profile": "Level 2",
+          "AssessmentStatus": "Manual",
+          "Description": "Prevent unrestricted application access to Google services.",
+          "RationaleStatement": "You can restrict (or leave unrestricted) access to most Workspace services, including Google Cloud Platform services such as Machine Learning. For Gmail and Google Drive, you can specifically restrict access to high-risk scopes (for example, sending Gmail or deleting files in Drive). While users are prompted to consent to apps, if an app uses restricted scopes and you haven’t specifically trusted it, users can’t add it.",
+          "ImpactStatement": "The potential impact associated with implementation of this setting is that any previously installed apps that you haven’t trusted stop working and tokens are revoked. When a user tries to install an app that has a restricted scope, they’re notified that it’s blocked.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select API Controls, then select App access control 5. Under Overview, select MANAGE GOOGLE SERVICES 6. Select ALL applicable Google Services 7. Click Change access 8. Select Restricted: Only trusted apps can access a service",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select API Controls, then select App access control 5. Under Overview, select MANAGE GOOGLE SERVICES 6. Ensure ALL applicable Google Services have Restricted in the Access column",
+          "AdditionalInformation": "",
+          "DefaultValue": "Access is Unrestricted",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "4.2.1.2",
+      "Description": "Review third-party applications periodically",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.2 Access and Data Control",
+          "Profile": "Level 2",
+          "AssessmentStatus": "Manual",
+          "Description": "Weekly review connected applications for potential malicious or unintended access or connections.",
+          "RationaleStatement": "Performing a periodic review of connected applications and their permission scopes ensures only permitted and required applications can access organizational data or resources. Attackers commonly attempt to persuade or trick users to grant their application access to organizational data resources by asking for their consent.",
+          "ImpactStatement": "Blocking or removing unauthorized third-party applications will immediately revoke their access to organizational data as well as Google Workspace APIs. This reduces the organizations risk exposure.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select API Controls, then select App access control 5. Under Overview, select MANAGE THIRD-PARTY APP ACCESS 6. Select Change Access for the application you wish to remove 7. Select Blocked: Can't access any Google service 8. Log in to the Google Cloud Platform - Resource Manager https://console.cloud.google.com/cloud-resource-manager as an administrator 9. Now Delete the desired application",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select API Controls, then select App access control 5. Under Overview, select MANAGE THIRD-PARTY APP ACCESS 6. Ensure all listed applications have been properly vetted and authorized by the appropriate personnel",
+          "AdditionalInformation": "",
+          "DefaultValue": "None",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "4.2.1.3",
+      "Description": "Ensure internal apps can access Google Workspace APIs",
+      "Checks": [
+        "security_internal_apps_trusted"
+      ],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.2 Access and Data Control",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Enable access to Google Workspace APIs for customer-owned / developed applications.",
+          "RationaleStatement": "All organization-built internal apps (owned by your organization), can be trusted to access restricted Google Workspace APIs. That way, the organization does not have to trust them all individually.",
+          "ImpactStatement": "Configuring 'Trusted' status for internal applications allows apps to access Google Workspace APIs. This bypasses individual administrator approval for each usage of the application while maintaining domain-level permissions.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select API Controls, then select App access control 5. Under Settings, select Trust internal, domain-owned apps 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select API Controls, then select App access control 5. Under Settings, verify Trust internal, domain-owned apps is selected",
+          "AdditionalInformation": "",
+          "DefaultValue": "Trust internal, domain-owned apps is selected",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "4.2.1.4",
+      "Description": "Review domain-wide delegation for applications periodically",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.2 Access and Data Control",
+          "Profile": "Level 2",
+          "AssessmentStatus": "Manual",
+          "Description": "Weekly review domain-wide delegations for applications for potentially malicious or unintended access or connections.",
+          "RationaleStatement": "Domain-wide delegation is a powerful feature that allows apps to access users' data across your organization's entire Workspace account. Performing a periodic review of domain-wide delegations for applications and their permission scopes ensures only permitted and required applications can access organizational data or resources.",
+          "ImpactStatement": "Removing or modifying domain-wide delegation for an application immediately affects its ability to access user data across the entire domain.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select API Controls 5. Under Domain wide delegation, select MANAGE DOMAIN WIDE DELEGATION 6. Select Change Access for the application you wish to remove 7. Now Delete the desired application",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select API Controls 5. Under Domain wide delegation, select MANAGE DOMAIN WIDE DELEGATION 6. Ensure all listed applications have been properly vetted and authorized by the appropriate personnel",
+          "AdditionalInformation": "",
+          "DefaultValue": "None",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "4.2.2.1",
+      "Description": "Ensure blocking access from unapproved geographic locations",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.2 Access and Data Control",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Restrict access to selected Google applications by geographic location. Note: This setting will not be displayed if your organization is using a third-party SSO, ie MS365.",
+          "RationaleStatement": "Restricting access to known/approved geographic locations is a simple way to limit where attacks can originate from. Especially for smaller organizations that do not need global access to applications.",
+          "ImpactStatement": "Valid/approved users traveling to a geographic region outside of those defined in the Access Level will not be able to access their applications.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: Create an appropriate Access Level 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select Context-Aware Access 5. Select Access levels 6. Select Create Access Level 7. Under Details - Name the Access Level (Suggested using a clear name - ex. \"Restrict to USA\") 8. Under Conditions - Select Basic 9. Under Condition 1 - Select Meet attributes 10. Under Condition 1 - Select Add Attribute 11. Click on the Add Attribute drop-down box and select Geographic origin 12. Click on the far right drop-down box and select the region, or regions, to be allowed (ex. United States) 13. Click Save Assign the defined Access Level has been assigned to the application(s) that need the restriction 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select Context-Aware Access 5. Select Assign access levels 6. For each application listed that needs this restriction, select Assign 7. Under, Access is granted when a user meets conditions in at least one of the selected access levels, ensure the previously named Access Level (ex. \"Restrict to USA\") is checked 8. Also, ensure Apply to Google desktop and mobile apps is checked NOTE: CIS recommends geographically restricting assess to the following Google applications at minimum: 1. Admin Console 2. Drives and Docs 3. Gmail 4. Google Vault",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: Verify an appropriate Access Level has been defined 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select Context-Aware Access 5. Select Access levels 6. Review the list of Access Levels displayed and determine if there is an appropriate restriction on geographic access Verify the appropriate Access Level has been assigned to the application(s) that need the restriction 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select Context-Aware Access 5. Select Assign access levels 6. Review the list of Google Applications displayed and make sure the appropriate access level for geographic access is assigned to each NOTE: CIS recommends geographically restricting access to the following Google applications at minimum: 1. Admin Console 2. Drives and Docs 3. Gmail 4. Google Vault",
+          "AdditionalInformation": "",
+          "DefaultValue": "None",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "4.2.3.1",
+      "Description": "Ensure DLP policies for Google Drive are configured",
+      "Checks": [
+        "security_dlp_drive_rules_configured"
+      ],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.2 Access and Data Control",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Enabling Data Loss Prevention (DLP) policies for Google Drive allows organizations to control the content that users can share in Google Drive files outside the organization.",
+          "RationaleStatement": "Enabling DLP policies alerts users and administrators that specific types of data should not be exposed, helping to protect the data from accidental exposure. DLP gives you control over what users can share, and prevents unintended exposure of sensitive information such as credit card numbers or identity numbers",
+          "ImpactStatement": "Configuring a DLP policy for Google Drive will detect or block sensitive information.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select Data protection 5. Select Manage Rules 6. Select ADD RULE, then select either New rule or New rule from template New rule Examples can be found here. 1. Set the rule Name 2. Optionally - Set the rule Description 3. Set the Scope as appropriate 4. Select Continue 5. Set Triggers by checking - File modified under Google Drive 6. Select ADD CONDITION and configure values (Field, Comparison Operator, Content to match) - Repeat as appropriate 7. Select Continue 8. Under Actions, select the desired action to take for each incident 9. Under Alerting, select the desired severity level 10. Under Alerting, Select - Send to alert center 11. Select Continue 12. Select Create New rule from template 1. Select the desired rule template 2. Optionally set the Name as desired 3. Optionally set the `Description as desired 4. Set the Scope as appropriate 5. Select Continue 6. Modify preconfigured Conditions as desired, or add additional conditions 7. Select Continue 8. Under Alerting, Select - Send to alert center 9. Select Continue 10. Select Create",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select Data protection 5. Select Manage Rules 6. Ensure data protection rules exist and are enabled",
+          "AdditionalInformation": "",
+          "DefaultValue": "No DLP policies for Google Drive are configured by default",
+          "References": "https://support.google.com/a/answer/10846568:https://workspaceupdates.googleblog.com/2020/10/data-protection-dlp-reports.html"
+        }
+      ]
+    },
+    {
+      "Id": "4.2.4.1",
+      "Description": "Ensure Google session control is configured",
+      "Checks": [
+        "security_session_duration_limited"
+      ],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.2 Access and Data Control",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Configure Google Workspace's session control to strengthen session expiration.",
+          "RationaleStatement": "As an administrator, you can control how long users can access Google services, such as Gmail on the web, without having to sign in again. For example, for users that work remotely or from untrusted locations, you might want to limit the time that they can access sensitive resources by applying a shorter web session length. If users want to continue accessing a resource when a session ends, they’re prompted to sign in again and start a new session. How the settings work on mobile devices varies by device and app.",
+          "ImpactStatement": "The potential impact associated with implementation of this setting are: When a web session expires for a user, they see the Verify it's you page and must sign in again. When you change the session length, users need to sign out and in again for settings to take effect. If you set the session to never expire, users never have to sign in again. If you need some users to sign in more frequently than others, place them in different organizational units. Then, apply different session lengths to them. That way, certain users won’t be interrupted to sign in when it isn’t necessary. If a Google Meet meeting starts within 2 hours of a session's scheduled expiration, the user is forced to sign in again before the start of the meeting. This helps avoid an interruption to the meeting while in-progress. If you’re using a third-party identity provider (IdP), such as Okta or Ping, and you set web session lengths for your users, you need to set the IdP session length parameter to expire before the Google session expires. That way, your users will be forced to sign in again. If the third-party IdP session is still valid when the Google session expires, the Google session might be renewed automatically without the user signing in again.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select Google session control 5. Set Web session duration to 12 hours or less 6. Select Save",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select Google session control 5. Verify Web session duration, is 12 hours or less",
+          "AdditionalInformation": "",
+          "DefaultValue": "Web session duration is 14 days",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "4.2.5.1",
+      "Description": "Ensure Google Cloud session control is configured",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.2 Access and Data Control",
+          "Profile": "Level 2",
+          "AssessmentStatus": "Manual",
+          "Description": "Configure Google cloud session control to strengthen session expiration.",
+          "RationaleStatement": "As an administrator, you can control how long different users can access the Google Cloud console and Cloud SDK without having to re-authenticate. For example, you might want users with elevated privileges, like project owners, billing administrators, or others with administrator roles, to re-authenticate more frequently than regular users. If you set a session length, they’re prompted to sign in again to start a new session.",
+          "ImpactStatement": "The potential impact associated with implementation of this setting are: When a Google cloud session expires for a user, they see the Verify it's you page and must sign in again. If you require a security key, users who do not have one cannot use the GCP Console or Cloud SDK until they set it up. Once they have a security key, they can switch to using their password instead if they want. If you’re using a third-party identity provider (IdP): With the GCP Console—If you require a user to re-authenticate using their password, they’re redirected to the identity provider (IdP). The IdP might not require the user to re-enter their password to start another console session, if the user already has a session active with the IdP—because they are using another application that caused the session to remain active. If a user must re-authenticate by touching their security key, they can do this while using the console. They will not be redirected to the IdP. With the Cloud SDK—If a password is required for re-authentication, gcloud will require the user to execute the gcloud auth login command to renew the session. This will bring up a browser window, and the user will be taken to the IdP, where they may be prompted for credentials if there's no active session with the IdP. If a user must reauthenticate by touching their security key, they can do this on the Cloud SDK. They will not be redirected to the IdP.",
+          "RemediationProcedure": "To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select Google Cloud session control 5. Under Reauthentication policy, set Require reauthentication to selected and Exempt Trusted apps is unchecked 6. Set Reauthentication frequency to 16 hours (recommended) 7. Set Reauthentication method to Security key 8. Select Override",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select Access and Data Control 4. Select Google Cloud session control 5. Under Reauthentication policy, ensure Require reauthentication is selected and Exempt Trusted apps is unchecked 6. Verify Reauthentication frequency, is16 hours (recommended) 7. Verify Reauthentication method is Security key",
+          "AdditionalInformation": "",
+          "DefaultValue": "Reauthentication policy is Never require reauthentication",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "4.3.1",
+      "Description": "Ensure the Dashboard is reviewed regularly for anomalies",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.3 Security Center",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "As an administrator, you can use the security dashboard to see an overview of different security reports. By default, each security report panel displays data from the last 7 days. You can customize the dashboard to view data from Today, Yesterday, This week, Last week, This month, Last month, or Days ago (up to 180 days). Charts/reports available (Minimum, but could be many more depending on account type): • DLP incidents • Top policy incidents • Failed device password attempts • Compromised device events • Suspicious device activities • OAuth scope grants by product (beta customers only) • OAuth grant activity • OAuth grants to new apps • User login attempts – Challenge method • User login attempts – Failed • User login attempts – Suspicious Details on what each of these charts/reports mean can be found here. This report should be reviewed weekly. NOTE: The availability of each individual report on the security dashboard depends on your Google Workspace edition. See Google documentation for more details. NOTE: In larger organizations reviewing this entire report weekly may not be possible. At a minimum, all Administrator and Super Administrator users should be reviewed, since they are a higher risk. These can be filtered from the overall user list.",
+          "RationaleStatement": "The Security report provides a comprehensive view of how people share and access data and whether they take appropriate security precautions. For example, you can review who installs external apps, shares numerous files, skips 2-Step Verification, and uses security keys.",
+          "ImpactStatement": "No user impact.",
+          "RemediationProcedure": "The remediation for any anomalies in the various fields varies widely (different sections of the Google Workspace Admin UI). Please refer to Google's documentation for specifics (here). NOTE: Many of these settings will be remedied by implementing other sections of this Benchmark. For example, an Admin not enrolled in 2-Step Verification can be remedied by implementing the Remediation procedure for the recommendation Ensure 2-Step Verification (Multi-Factor Authentication) is enforced for all users in administrative roles.",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Reporting 3. Select Reports 4. Select User Reports 5. Select Security, and a table of results will be displayed with the fields listed in the Recommendation description above. 6. Review the displayed users and values for anomalies",
+          "AdditionalInformation": "",
+          "DefaultValue": "The report will display all users and fields.",
+          "References": "https://support.google.com/a/answer/7492330"
+        }
+      ]
+    },
+    {
+      "Id": "4.3.2",
+      "Description": "Ensure the Security health is reviewed regularly for anomalies",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "4 Security",
+          "SubSection": "4.3 Security Center",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "As an administrator, the security health page enables you to monitor the configuration of your Admin console settings from one location. For example, you can check the status of settings like automatic email forwarding, device encryption, Drive sharing settings, and much more. Settings reported (Minimum, but could be many more depending on account type): • Blocking of compromised mobile devices • Mobile management • Mobile password requirements • Device encryption • Mobile inactivity reports • Auto account wipe • Application verification • Installation of mobile applications from unknown sources • External media storage • Two-step verification for users • Two-step verification for admins • Security key enforcement for admins Details on what each of these report entries mean can be found here. This report should be reviewed weekly. NOTE: The availability of each individual report on the security dashboard depends on your Google Workspace edition. See Google documentation for more details.",
+          "RationaleStatement": "The security health page provides visibility into your Admin console settings to help you better understand and manage security risks. If needed, you can make adjustments to your domain’s settings based on general security guidelines and best practices, while balancing these guidelines with your organization’s business needs and risk management policy.",
+          "ImpactStatement": "No user impact.",
+          "RemediationProcedure": "The remediation for any anomalies in the various settings varies widely (different sections of the Google Workspace Admin UI). Please refer to Google's documentation for specifics (here). NOTE: Many of these settings will be remedied by implementing other sections of this Benchmark. For example, an Admin not enrolled in 2-Step Verification can be remedied by implementing the Remediation procedure for the recommendation Ensure 2-Step Verification (Multi-Factor Authentication) is enforced for all users in administrative roles.",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Security 3. Select Security center 4. Select Security health, and a table of results will be displayed with the settings listed in the Recommendation description above. 5. Review the displayed values for anomalies",
+          "AdditionalInformation": "",
+          "DefaultValue": "The report will display the status of a predefined group of settings based on your Google Workspace license.",
+          "References": "https://support.google.com/a/answer/7491656"
+        }
+      ]
+    },
+    {
+      "Id": "5.1.1.1",
+      "Description": "Ensure the App Usage Report is reviewed regularly for anomalies",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "5 Reporting",
+          "SubSection": "5.1 Reports",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "As an administrator, you can use Apps usage reports to get an in-depth understanding of how your users use Google Workspace apps. Fields Available: • User • Gmail storage used (MB) • Drive storage used (MB) • Photos storage used (MB) • Total storage used (MB) • Storage used (%) • Classroom - last used time • Classes created • Posts created • Total emails • Emails sent • Emails received • Gmail (IMAP) - last used time • Gmail (POP) - last used time • Gmail (Web) - last used time • Files edited • Files viewed • Drive - last active time • Files added • Other types added • Google Docs added • Google Sheets added • Google Slides added • Google Forms added • Google Drawings added • Posts • +1s • +1s received • Comments • Comments received • Reshares • Reshares received • Search queries • Search queries from web • Search queries from Android • Search queries from iOS Details on what each of these fields mean can be found here. This report should be reviewed weekly. NOTE: In larger organizations reviewing this entire report weekly may not be possible. At a minimum, all Administrator and Super Administrator users should be reviewed, since they are a higher risk. These can be filtered from the overall user list.",
+          "RationaleStatement": "The App usage report can allow administrator to discover user that are potentially using application that they do not have access to and/or using in atypical ways.",
+          "ImpactStatement": "No user impact.",
+          "RemediationProcedure": "The remediation for any anomalies in the various fields varies widely (different sections of the Google Workspace Admin UI). Please refer to Google's documentation for specifics (here). NOTE: Many of these settings will be remedied by implementing other sections of this Benchmark. For example, an Admin showing recent Gmail (IMAP) - last used time and/or Gmail (POP) - last used time can be remedied by implementing the Remediation procedure for the recommendation Ensure POP and IMAP access is disabled for all users.",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Reporting 3. Select Reports 4. Select User Reports 5. Select App usage, and a table of results will be displayed with the fields listed in the Recommendation description above. 6. Review the displayed users and values for anomalies",
+          "AdditionalInformation": "",
+          "DefaultValue": "The report will display all users and fields.",
+          "References": "https://support.google.com/a/answer/4579578?hl=en"
+        }
+      ]
+    },
+    {
+      "Id": "5.1.1.2",
+      "Description": "Ensure the Security Report is reviewed regularly for anomalies",
+      "Checks": [],
+      "Attributes": [
+        {
+          "Section": "5 Reporting",
+          "SubSection": "5.1 Reports",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "As your organization's administrator, you can monitor your users' exposure to data compromise by reviewing the security report. Fields Available: • User • External apps • 2-Step verification enrollment • 2-Step verification enforcement • Password length compliance • Password strength • User account status • Admin status • Security keys enrolled • Less secure apps access • Gmail (IMAP) - last used time • Gmail (POP) - last used time • Gmail (Web) - last used time • External shares • Internal shares • Public • Anyone with link • Outside domain • Anyone in domain shares • Anyone in domain with link shares • Within domain shares • Private shares Details on what each of these fields mean can be found here. This report should be reviewed weekly. NOTE: In larger organizations reviewing this entire report weekly may not be possible. At a minimum, all Administrator and Super Administrator users should be reviewed, since they are a higher risk. These can be filtered from the overall user list.",
+          "RationaleStatement": "The Security report provides a comprehensive view of how people share and access data and whether they take appropriate security precautions. For example, you can review who installs external apps, shares numerous files, skips 2-Step Verification, and uses security keys.",
+          "ImpactStatement": "No user impact.",
+          "RemediationProcedure": "The remediation for any anomalies in the various fields varies widely (different sections of the Google Workspace Admin UI). Please refer to Google's documentation for specifics (here). NOTE: Many of these settings will be remedied by implementing other sections of this Benchmark. For example, an Admin not enrolled in 2-Step Verification can be remedied by implementing the Remediation procedure for the recommendation Ensure 2-Step Verification (Multi-Factor Authentication) is enforced for all users in administrative roles.",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Reporting 3. Select Reports 4. Select User Reports 5. Select Security, and a table of results will be displayed with the fields listed in the Recommendation description above. 6. Review the displayed users and values for anomalies",
+          "AdditionalInformation": "",
+          "DefaultValue": "The report will display all users and fields.",
+          "References": "https://support.google.com/a/answer/6000269?hl=en"
+        }
+      ]
+    },
+    {
+      "Id": "6.1",
+      "Description": "Ensure User's password changed is configured",
+      "Checks": [
+        "rules_password_changed_alert_configured"
+      ],
+      "Attributes": [
+        {
+          "Section": "6 Rules",
+          "SubSection": "6.1",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Configuring and enabling the setting that an alert will be generated when a user's password has changed.",
+          "RationaleStatement": "Ensuring that administrators are alerted when user passwords are changed provides organizations with the ability to detect and halt potential attacks involving credential compromise and account takeover.",
+          "ImpactStatement": "This setting should have no impact on the end user but will send emails to super administrators when triggered.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Rules 3. Under Google protects you by default select View list. 4. Scroll to User's password changed and select it. 5. Within the Actions pane, click the edit pencil on the right side of the pane. 6. Select Send to alert center (This will result in the alert being set to On). 7. Set the alert severity to Medium 8. To enable emails when this alert condition is met, select Send email notifications. Once enabled, the All super administrators option is selected by default. 9. Click Review to confirm the values. 10. Click Update Rule. 11. Confirm that the User's password changed shows an Alert status of On in the list.",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Rules 3. Under Google protects you by default select View list. 4. Scroll to User's password changed and select it. 5. Ensure that Alerts is set to On. 6. Ensure the Severity is set to Medium 7. Ensure that Email Notifications is set to On 8. Ensure that Email notification recipients is set to All super administrators",
+          "AdditionalInformation": "",
+          "DefaultValue": "User's password changed is OFF",
+          "References": ""
+        }
+      ]
+    },
+    {
+      "Id": "6.2",
+      "Description": "Ensure Government-backed attacks is configured",
+      "Checks": [
+        "rules_government_backed_attacks_alert_configured"
+      ],
+      "Attributes": [
+        {
+          "Section": "6 Rules",
+          "SubSection": "6.2",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Configuring and enabling the setting that an alert will be generated when Google believes your users are being targeted by a government-backed attack.",
+          "RationaleStatement": "Ensuring that administrators are alerted that they may be being targeted by a government-backed entity allows them time to check their defenses and potentially up their sensitivity for anomalies. NOTE: Google sends these out of an abundance of caution — the notice does not necessarily mean that the account has been compromised or that there is a widespread attack. Rather, the notice reflects Goggle's assessment that a government-backed attacker has likely attempted to access the user’s account or computer through phishing or malware, for example.",
+          "ImpactStatement": "This setting should have no impact on the end user but will send emails to super administrators when triggered.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Rules 3. Under Google protects you by default select View list. 4. Scroll to Government-backed attacks and select it. 5. Within the Actions pane, click the edit pencil on the right side of the pane. 6. Select Send to alert center (This will result in the alert being set to On). 7. Set the alert severity to High 8. To enable emails when this alert condition is met, select Send email notifications. Once enabled, the All super administrators option is selected by default. 9. Click Review to confirm the values. 10. Click Update Rule. 11. Confirm that the Government-backed attacks shows an Alert status of On in the list.",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Rules 3. Under Google protects you by default select View list. 4. Scroll to Government-backed attacks and select it. 5. Ensure that Alerts is set to On. 6. Ensure the Severity is set to High 7. Ensure that Email Notifications is set to On 8. Ensure that Email notification recipients is set to All super administrators",
+          "AdditionalInformation": "",
+          "DefaultValue": "Government-backed attacks is ON",
+          "References": "https://support.google.com/a/answer/3230421"
+        }
+      ]
+    },
+    {
+      "Id": "6.3",
+      "Description": "Ensure User suspended due to suspicious activity is configured",
+      "Checks": [
+        "rules_suspicious_activity_suspension_alert_configured"
+      ],
+      "Attributes": [
+        {
+          "Section": "6 Rules",
+          "SubSection": "6.3",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Configuring and enabling the setting that an alert will be generated when Google suspended a user's account due to a potential compromise detected.",
+          "RationaleStatement": "Ensuring that administrators are alerted when the account was suspended by Google. The reason for this should be investigated ASAP, since it could be a possible indication of malicious activity. In any case, the user's account was suspended and something will need to be done to allow the user to resume work.",
+          "ImpactStatement": "Emails will be sent to all super administrators when triggered. Also, the user's account will be suspended and something will need to be done about that based on company policy (investigated, re-enabled, etc.).",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Rules 3. Under Google protects you by default select View list. 4. Scroll to User suspended due to suspicious activity and select it. 5. Within the Actions pane, click the edit pencil on the right side of the pane. 6. Select Send to alert center (This will result in the alert being set to On). 7. Set the alert severity to High 8. To enable emails when this alert condition is met, select Send email notifications. Once enabled, the All super administrators option is selected by default. 9. Click Review to confirm the values. 10. Click Update Rule. 11. Confirm that the User suspended due to suspicious activity shows an Alert status of On in the list.",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Rules 3. Under Google protects you by default select View list. 4. Scroll to User suspended due to suspicious activity and select it. 5. Ensure that Alerts is set to On. 6. Ensure the Severity is set to High 7. Ensure that Email Notifications is set to On 8. Ensure that Email notification recipients is set to All super administrators",
+          "AdditionalInformation": "",
+          "DefaultValue": "User suspended due to suspicious activity is ON",
+          "References": "https://support.google.com/a/answer/3230421"
+        }
+      ]
+    },
+    {
+      "Id": "6.4",
+      "Description": "Ensure User granted Admin privilege is configured",
+      "Checks": [
+        "rules_admin_privilege_granted_alert_configured"
+      ],
+      "Attributes": [
+        {
+          "Section": "6 Rules",
+          "SubSection": "6.4",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Configuring and enabling the setting that an alert will be generated when a user has been granted an admin privilege.",
+          "RationaleStatement": "Ensuring that administrators are alerted when a user is given increased privileges could be an indication of compromise unless this access has been approved.",
+          "ImpactStatement": "This setting should have no impact on the end user but will send emails to super administrators when triggered.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Rules 3. Under Google protects you by default select View list. 4. Scroll to User granted Admin privilege and select it. 5. Within the Actions pane, click the edit pencil on the right side of the pane. 6. Select Send to alert center (This will result in the alert being set to On). 7. Set the alert severity to Medium 8. To enable emails when this alert condition is met, select Send email notifications. Once enabled, the All super administrators option is selected by default. 9. Click Review to confirm the values. 10. Click Update Rule. 11. Confirm that the User granted Admin privilege shows an Alert status of On in the list.",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Rules 3. Under Google protects you by default select View list. 4. Scroll to User granted Admin privilege and select it. 5. Ensure that Alerts is set to On. 6. Ensure the Severity is set to Medium 7. Ensure that Email Notifications is set to On 8. Ensure that Email notification recipients is set to All super administrators",
+          "AdditionalInformation": "",
+          "DefaultValue": "User granted Admin privilege is OFF",
+          "References": "https://support.google.com/a/answer/3230421"
+        }
+      ]
+    },
+    {
+      "Id": "6.5",
+      "Description": "Ensure Suspicious programmatic login is configured",
+      "Checks": [
+        "rules_suspicious_programmatic_login_alert_configured"
+      ],
+      "Attributes": [
+        {
+          "Section": "6 Rules",
+          "SubSection": "6.5",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Configuring and enabling the setting that an alert will be generated when Google detects suspicious login attempts from applications or computer programs.",
+          "RationaleStatement": "Ensuring that administrators are alerted when suspicious login attempts occur. This could be an indication of an active attack on the company by an adversary using previously obtained credentials.",
+          "ImpactStatement": "This setting should have no impact on the end user but will send emails to super administrators when triggered.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Rules 3. Under Google protects you by default select View list. 4. Scroll to Suspicious programmatic login and select it. 5. Within the Actions pane, click the edit pencil on the right side of the pane. 6. Select Send to alert center (This will result in the alert being set to On). 7. Set the alert severity to Low 8. To enable emails when this alert condition is met, select Send email notifications. Once enabled, the All super administrators option is selected by default. 9. Click Review to confirm the values. 10. Click Update Rule. 11. Confirm that the Suspicious programmatic login shows an Alert status of On in the list.",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Rules 3. Under Google protects you by default select View list. 4. Scroll to Suspicious programmatic login and select it. 5. Ensure that Alerts is set to On. 6. Ensure the Severity is set to Low 7. Ensure that Email Notifications is set to On 8. Ensure that Email notification recipients is set to All super administrators",
+          "AdditionalInformation": "",
+          "DefaultValue": "Suspicious programmatic login is ON",
+          "References": "https://support.google.com/a/answer/3230421"
+        }
+      ]
+    },
+    {
+      "Id": "6.6",
+      "Description": "Ensure Suspicious login is configured",
+      "Checks": [
+        "rules_suspicious_login_alert_configured"
+      ],
+      "Attributes": [
+        {
+          "Section": "6 Rules",
+          "SubSection": "6.6",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Configuring and enabling the setting that an alert will be generated when Google detects a sign-in attempt that doesn't match a user's normal behavior, such as a sign-in from an unusual location.",
+          "RationaleStatement": "Ensuring that administrators are alerted when suspicious login attempts occur. This could be an indication of an active attack on the company by an adversary using previously obtained credentials.",
+          "ImpactStatement": "This setting should have no impact on the end user but will send emails to super administrators when triggered.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Rules 3. Under Google protects you by default select View list. 4. Scroll to Suspicious login and select it. 5. Within the Actions pane, click the edit pencil on the right side of the pane. 6. Select Send to alert center (This will result in the alert being set to On). 7. Set the alert severity to Low 8. To enable emails when this alert condition is met, select Send email notifications. Once enabled, the All super administrators option is selected by default. 9. Click Review to confirm the values. 10. Click Update Rule. 11. Confirm that the Suspicious login shows an Alert status of On in the list.",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Rules 3. Under Google protects you by default select View list. 4. Scroll to Suspicious login and select it. 5. Ensure that Alerts is set to On. 6. Ensure the Severity is set to Low 7. Ensure that Email Notifications is set to On 8. Ensure that Email notification recipients is set to All super administrators",
+          "AdditionalInformation": "",
+          "DefaultValue": "Suspicious login is ON",
+          "References": "https://support.google.com/a/answer/3230421"
+        }
+      ]
+    },
+    {
+      "Id": "6.7",
+      "Description": "Ensure Leaked password is configured",
+      "Checks": [
+        "rules_leaked_password_alert_configured"
+      ],
+      "Attributes": [
+        {
+          "Section": "6 Rules",
+          "SubSection": "6.7",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Configuring and enabling the setting that an alert will be generated when Google detects compromised credentials requiring a reset of a user's password.",
+          "RationaleStatement": "Ensuring that administrators are alerted when Google detects that a user's credentials have been compromised due to a publicized breach. This is usually because the user has reused their credentials at another site that was breached.",
+          "ImpactStatement": "Emails will be sent to super administrators when triggered and in these cases, the user's password will need to be changed.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Rules 3. Under Google protects you by default select View list. 4. Scroll to Leaked password and select it. 5. Within the Actions pane, click the edit pencil on the right side of the pane. 6. Select Send to alert center (This will result in the alert being set to On). 7. Set the alert severity to High 8. To enable emails when this alert condition is met, select Send email notifications. Once enabled, the All super administrators option is selected by default. 9. Click Review to confirm the values. 10. Click Update Rule. 11. Confirm that the Leaked password shows an Alert status of On in the list.",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Rules 3. Under Google protects you by default select View list. 4. Scroll to Leaked password and select it. 5. Ensure that Alerts is set to On. 6. Ensure the Severity is set to Medium 7. Ensure that Email Notifications is set to On 8. Ensure that Email notification recipients is set to All super administrators",
+          "AdditionalInformation": "",
+          "DefaultValue": "Leaked password is ON",
+          "References": "https://support.google.com/a/answer/3230421"
+        }
+      ]
+    },
+    {
+      "Id": "6.8",
+      "Description": "Ensure Gmail potential employee spoofing is configured",
+      "Checks": [
+        "rules_gmail_employee_spoofing_alert_configured"
+      ],
+      "Attributes": [
+        {
+          "Section": "6 Rules",
+          "SubSection": "6.8",
+          "Profile": "Level 1",
+          "AssessmentStatus": "Manual",
+          "Description": "Configuring and enabling the setting that an alert will be generated when Google detects incoming messages are received where a sender’s name is in your Google Workspace directory, but the mail is not from your company’s domains or domain aliases.",
+          "RationaleStatement": "Ensuring that administrators are alerted when the email is being spoofed since this could be an indication of a phishing attempt.",
+          "ImpactStatement": "This setting should have no impact on the end user but will send emails to super administrators when triggered.",
+          "RemediationProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Rules 3. Under Google protects you by default select View list. 4. Scroll to Gmail potential employee spoofing and select it. 5. Within the Actions pane, click the edit pencil on the right side of the pane. 6. Select Send to alert center (This will result in the alert being set to On). 7. Set the alert severity to Medium 8. To enable emails when this alert condition is met, select Send email notifications. Once enabled, the All super administrators option is selected by default. 9. Click Review to confirm the values. 10. Click Update Rule. 11. Confirm that the Gmail potential employee spoofing shows an Alert status of On in the list.",
+          "AuditProcedure": "To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Rules 3. Under Google protects you by default select View list. 4. Scroll to Gmail potential employee spoofing and select it. 5. Ensure that Alerts is set to On. 6. Ensure the Severity is set to Medium 7. Ensure that Email Notifications is set to On 8. Ensure that Email notification recipients is set to All super administrators",
+          "AdditionalInformation": "",
+          "DefaultValue": "Gmail potential employee spoofing is ON",
+          "References": "https://support.google.com/a/answer/3230421"
+        }
+      ]
+    }
+  ]
+}
diff --git a/prowler/compliance/googleworkspace/cisa_scuba_0.6_googleworkspace.json b/prowler/compliance/googleworkspace/cisa_scuba_0.6_googleworkspace.json
index 72ff97d97d..6bf49be05f 100644
--- a/prowler/compliance/googleworkspace/cisa_scuba_0.6_googleworkspace.json
+++ b/prowler/compliance/googleworkspace/cisa_scuba_0.6_googleworkspace.json
@@ -9,7 +9,6 @@
       "Id": "GWS.COMMONCONTROLS.1.1",
       "Description": "Phishing-resistant MFA SHALL be required for all users",
       "Checks": [
-        "security_2sv_enforced",
         "security_2sv_hardware_keys_admins"
       ],
       "Attributes": [
diff --git a/prowler/providers/googleworkspace/lib/service/service.py b/prowler/providers/googleworkspace/lib/service/service.py
index 22454f3c63..35a10454cd 100644
--- a/prowler/providers/googleworkspace/lib/service/service.py
+++ b/prowler/providers/googleworkspace/lib/service/service.py
@@ -6,6 +6,11 @@ from prowler.providers.googleworkspace.googleworkspace_provider import (
     GoogleworkspaceProvider,
 )
 
+# How far a Cloud Identity policy reaches.
+CUSTOMER_SCOPE = "customer"
+OVERRIDE_SCOPE = "override"
+UNKNOWN_SCOPE = "unknown"
+
 
 class GoogleWorkspaceService:
     def __init__(
@@ -42,26 +47,29 @@ class GoogleWorkspaceService:
             )
             return None
 
-    def _is_customer_level_policy(self, policy: dict) -> bool:
-        """Check if a policy applies at the customer (domain-wide) level.
+    def _policy_scope(self, policy: dict) -> str:
+        """Return how far a policy reaches: CUSTOMER_SCOPE, OVERRIDE_SCOPE or UNKNOWN_SCOPE.
 
-        The Cloud Identity Policy API typically scopes all policies to an OU;
-        absence of orgUnit is treated as customer-level as a safety net.
-        The root OU is equivalent to customer-level. This method accepts
-        policies with no orgUnit or policies targeting the root OU,
-        and rejects group-targeted and sub-OU policies.
+        The Cloud Identity Policy API typically scopes every policy to an OU,
+        and the root OU is equivalent to customer-level, so telling them apart
+        needs the root OU id. That id is fetched on a best-effort basis, and
+        without it a root-OU policy is indistinguishable from a sub-OU one:
+        that is UNKNOWN_SCOPE, which callers must not read as either.
         """
-        policy_query = policy.get("policyQuery", {})
+        policy_query = policy.get("policyQuery") or {}
         if policy_query.get("group"):
-            return False
+            return OVERRIDE_SCOPE
         org_unit = policy_query.get("orgUnit")
         if not org_unit:
-            return True
-        # Accept root OU as customer-level
+            return CUSTOMER_SCOPE
         root_id = getattr(self.provider.identity, "root_org_unit_id", None)
-        if root_id and org_unit == f"orgUnits/{root_id}":
-            return True
-        return False
+        if not root_id:
+            return UNKNOWN_SCOPE
+        return CUSTOMER_SCOPE if org_unit == f"orgUnits/{root_id}" else OVERRIDE_SCOPE
+
+    def _is_customer_level_policy(self, policy: dict) -> bool:
+        """Whether a policy applies to the whole domain."""
+        return self._policy_scope(policy) == CUSTOMER_SCOPE
 
     def _handle_api_error(self, error, context: str, resource_name: str = ""):
         """
diff --git a/prowler/providers/googleworkspace/services/gmail/gmail_domain_spoofing_protection_enabled/gmail_domain_spoofing_protection_enabled.metadata.json b/prowler/providers/googleworkspace/services/gmail/gmail_domain_spoofing_protection_enabled/gmail_domain_spoofing_protection_enabled.metadata.json
index 7e6be13d58..88035f633f 100644
--- a/prowler/providers/googleworkspace/services/gmail/gmail_domain_spoofing_protection_enabled/gmail_domain_spoofing_protection_enabled.metadata.json
+++ b/prowler/providers/googleworkspace/services/gmail/gmail_domain_spoofing_protection_enabled/gmail_domain_spoofing_protection_enabled.metadata.json
@@ -9,7 +9,7 @@
   "Severity": "medium",
   "ResourceType": "NotDefined",
   "ResourceGroup": "collaboration",
-  "Description": "Verifies that Gmail is configured to take a protective action (such as moving to spam, quarantining, or showing a warning) when emails appear to come from domain names that look similar to the organization's domain. Lookalike domains are a common phishing technique used to trick users into trusting malicious messages.",
+  "Description": "Verifies that Gmail moves out of the inbox, to spam or quarantine, the emails that appear to come from domain names that look similar to the organization's domain. An action that only shows a warning is not enough. Lookalike domains are a common phishing technique used to trick users into trusting malicious messages.",
   "Risk": "Without protection against domain spoofing based on similar domain names, users may receive **phishing emails from lookalike domains** (e.g., examp1e.com instead of example.com) that appear legitimate. This enables **credential theft, malware delivery, and business email compromise** attacks.",
   "RelatedUrl": "",
   "AdditionalURLs": [
diff --git a/prowler/providers/googleworkspace/services/gmail/gmail_domain_spoofing_protection_enabled/gmail_domain_spoofing_protection_enabled.py b/prowler/providers/googleworkspace/services/gmail/gmail_domain_spoofing_protection_enabled/gmail_domain_spoofing_protection_enabled.py
index d3a6bc94c1..5d674b60a0 100644
--- a/prowler/providers/googleworkspace/services/gmail/gmail_domain_spoofing_protection_enabled/gmail_domain_spoofing_protection_enabled.py
+++ b/prowler/providers/googleworkspace/services/gmail/gmail_domain_spoofing_protection_enabled/gmail_domain_spoofing_protection_enabled.py
@@ -2,6 +2,10 @@ from typing import List
 
 from prowler.lib.check.models import Check, CheckReportGoogleWorkspace
 from prowler.providers.googleworkspace.services.gmail.gmail_client import gmail_client
+from prowler.providers.googleworkspace.services.gmail.lib.spoofing import (
+    describe_consequence,
+    is_protective,
+)
 
 
 class gmail_domain_spoofing_protection_enabled(Check):
@@ -9,7 +13,9 @@ class gmail_domain_spoofing_protection_enabled(Check):
 
     This check verifies that Gmail is configured to take action on
     emails that appear to come from similar-looking domain names,
-    helping prevent phishing via domain impersonation.
+    helping prevent phishing via domain impersonation. CIS requires the
+    configured action to move the message to spam or quarantine it, so an action
+    that only shows a warning is reported as a failure.
     """
 
     def execute(self) -> List[CheckReportGoogleWorkspace]:
@@ -26,38 +32,30 @@ class gmail_domain_spoofing_protection_enabled(Check):
 
             enabled = gmail_client.policies.detect_domain_name_spoofing
             consequence = gmail_client.policies.domain_spoofing_consequence
+            domain = gmail_client.provider.identity.domain
 
             if enabled is False:
                 report.status = "FAIL"
                 report.status_extended = (
-                    f"Protection against domain spoofing based on similar "
-                    f"domain names is disabled in domain "
-                    f"{gmail_client.provider.identity.domain}. "
-                    f"Enable the protection and configure a protective action."
+                    f"Protection against domain spoofing based on similar domain names "
+                    f"is disabled in domain {domain}. "
+                    f"Enable the protection and set the action to move the "
+                    f"email to spam."
                 )
-            elif consequence == "NO_ACTION":
+            elif not is_protective(consequence):
                 report.status = "FAIL"
                 report.status_extended = (
-                    f"Protection against domain spoofing based on similar "
-                    f"domain names is set to take no action in domain "
-                    f"{gmail_client.provider.identity.domain}. "
-                    f"A protective action should be configured."
-                )
-            elif consequence is None:
-                report.status = "PASS"
-                report.status_extended = (
-                    f"Protection against domain spoofing based on similar "
-                    f"domain names uses Google's secure default configuration "
-                    f"(enabled) in domain "
-                    f"{gmail_client.provider.identity.domain}."
+                    f"Protection against domain spoofing based on similar domain names "
+                    f"{describe_consequence(consequence)} in domain {domain}. "
+                    f"The action should move the email to spam."
                 )
             else:
                 report.status = "PASS"
+                state = "is enabled" if enabled else "uses Google's default (enabled)"
                 report.status_extended = (
-                    f"Protection against domain spoofing based on similar "
-                    f"domain names is enabled with consequence "
-                    f"'{consequence}' in domain "
-                    f"{gmail_client.provider.identity.domain}."
+                    f"Protection against domain spoofing based on similar domain names "
+                    f"{state} with action '{consequence}' in domain "
+                    f"{domain}."
                 )
 
             findings.append(report)
diff --git a/prowler/providers/googleworkspace/services/gmail/gmail_employee_name_spoofing_protection_enabled/gmail_employee_name_spoofing_protection_enabled.metadata.json b/prowler/providers/googleworkspace/services/gmail/gmail_employee_name_spoofing_protection_enabled/gmail_employee_name_spoofing_protection_enabled.metadata.json
index d6d107f360..103d09ea1e 100644
--- a/prowler/providers/googleworkspace/services/gmail/gmail_employee_name_spoofing_protection_enabled/gmail_employee_name_spoofing_protection_enabled.metadata.json
+++ b/prowler/providers/googleworkspace/services/gmail/gmail_employee_name_spoofing_protection_enabled/gmail_employee_name_spoofing_protection_enabled.metadata.json
@@ -9,7 +9,7 @@
   "Severity": "medium",
   "ResourceType": "NotDefined",
   "ResourceGroup": "collaboration",
-  "Description": "Verifies that Gmail is configured to take a protective action (such as moving to spam, quarantining, or showing a warning) when the sender's display name matches an employee's name but the email comes from an external address. This is a common social engineering technique where attackers impersonate colleagues or executives.",
+  "Description": "Verifies that Gmail moves out of the inbox, to spam or quarantine, the emails whose sender display name matches an employee's name but come from an external address. An action that only shows a warning is not enough. This is a common social engineering technique where attackers impersonate colleagues or executives.",
   "Risk": "Without protection against employee name spoofing, users may receive **emails that appear to come from colleagues or executives** but are actually from external attackers. This enables **business email compromise (BEC)**, **wire fraud**, and **social engineering attacks** that exploit trust relationships.",
   "RelatedUrl": "",
   "AdditionalURLs": [
diff --git a/prowler/providers/googleworkspace/services/gmail/gmail_employee_name_spoofing_protection_enabled/gmail_employee_name_spoofing_protection_enabled.py b/prowler/providers/googleworkspace/services/gmail/gmail_employee_name_spoofing_protection_enabled/gmail_employee_name_spoofing_protection_enabled.py
index ea6283c940..8f33bf4d6d 100644
--- a/prowler/providers/googleworkspace/services/gmail/gmail_employee_name_spoofing_protection_enabled/gmail_employee_name_spoofing_protection_enabled.py
+++ b/prowler/providers/googleworkspace/services/gmail/gmail_employee_name_spoofing_protection_enabled/gmail_employee_name_spoofing_protection_enabled.py
@@ -2,6 +2,10 @@ from typing import List
 
 from prowler.lib.check.models import Check, CheckReportGoogleWorkspace
 from prowler.providers.googleworkspace.services.gmail.gmail_client import gmail_client
+from prowler.providers.googleworkspace.services.gmail.lib.spoofing import (
+    describe_consequence,
+    is_protective,
+)
 
 
 class gmail_employee_name_spoofing_protection_enabled(Check):
@@ -9,7 +13,9 @@ class gmail_employee_name_spoofing_protection_enabled(Check):
 
     This check verifies that Gmail is configured to take action on
     emails where the sender name matches an employee name but comes
-    from an external address, helping prevent social engineering attacks.
+    from an external address, helping prevent social engineering attacks. CIS requires the configured
+    action to move the message to spam or quarantine it, so an action that
+    only shows a warning is reported as a failure.
     """
 
     def execute(self) -> List[CheckReportGoogleWorkspace]:
@@ -26,36 +32,30 @@ class gmail_employee_name_spoofing_protection_enabled(Check):
 
             enabled = gmail_client.policies.detect_employee_name_spoofing
             consequence = gmail_client.policies.employee_name_spoofing_consequence
+            domain = gmail_client.provider.identity.domain
 
             if enabled is False:
                 report.status = "FAIL"
                 report.status_extended = (
-                    f"Protection against spoofing of employee names is "
-                    f"disabled in domain "
-                    f"{gmail_client.provider.identity.domain}. "
-                    f"Enable the protection and configure a protective action."
+                    f"Protection against spoofing of employee names "
+                    f"is disabled in domain {domain}. "
+                    f"Enable the protection and set the action to move the "
+                    f"email to spam."
                 )
-            elif consequence == "NO_ACTION":
+            elif not is_protective(consequence):
                 report.status = "FAIL"
                 report.status_extended = (
-                    f"Protection against spoofing of employee names is set "
-                    f"to take no action in domain "
-                    f"{gmail_client.provider.identity.domain}. "
-                    f"A protective action should be configured."
-                )
-            elif consequence is None:
-                report.status = "PASS"
-                report.status_extended = (
-                    f"Protection against spoofing of employee names uses "
-                    f"Google's secure default configuration (enabled) "
-                    f"in domain {gmail_client.provider.identity.domain}."
+                    f"Protection against spoofing of employee names "
+                    f"{describe_consequence(consequence)} in domain {domain}. "
+                    f"The action should move the email to spam."
                 )
             else:
                 report.status = "PASS"
+                state = "is enabled" if enabled else "uses Google's default (enabled)"
                 report.status_extended = (
-                    f"Protection against spoofing of employee names is "
-                    f"enabled with consequence '{consequence}' in domain "
-                    f"{gmail_client.provider.identity.domain}."
+                    f"Protection against spoofing of employee names "
+                    f"{state} with action '{consequence}' in domain "
+                    f"{domain}."
                 )
 
             findings.append(report)
diff --git a/prowler/providers/googleworkspace/services/gmail/gmail_groups_spoofing_protection_enabled/gmail_groups_spoofing_protection_enabled.metadata.json b/prowler/providers/googleworkspace/services/gmail/gmail_groups_spoofing_protection_enabled/gmail_groups_spoofing_protection_enabled.metadata.json
index c5f5ee61a9..0a8214370e 100644
--- a/prowler/providers/googleworkspace/services/gmail/gmail_groups_spoofing_protection_enabled/gmail_groups_spoofing_protection_enabled.metadata.json
+++ b/prowler/providers/googleworkspace/services/gmail/gmail_groups_spoofing_protection_enabled/gmail_groups_spoofing_protection_enabled.metadata.json
@@ -9,7 +9,7 @@
   "Severity": "medium",
   "ResourceType": "NotDefined",
   "ResourceGroup": "collaboration",
-  "Description": "Verifies that Gmail is configured to take a protective action (such as moving to spam, quarantining, or showing a warning) when groups receive inbound emails that spoof the organization's domain. Google Groups are a high-value target because a single spoofed message can reach many recipients at once.",
+  "Description": "Verifies that Gmail moves out of the inbox, to spam or quarantine, the inbound emails to groups that spoof the organization's domain. An action that only shows a warning is not enough. Google Groups are a high-value target because a single spoofed message can reach many recipients at once.",
   "Risk": "Without protection of groups from domain-spoofing emails, attackers can send **spoofed messages to group mailboxes** that appear to originate from the organization. Since groups distribute to many recipients, a single spoofed email can enable **mass phishing, social engineering, or misinformation** campaigns across the organization.",
   "RelatedUrl": "",
   "AdditionalURLs": [
diff --git a/prowler/providers/googleworkspace/services/gmail/gmail_groups_spoofing_protection_enabled/gmail_groups_spoofing_protection_enabled.py b/prowler/providers/googleworkspace/services/gmail/gmail_groups_spoofing_protection_enabled/gmail_groups_spoofing_protection_enabled.py
index fd4238239f..c4fb628e83 100644
--- a/prowler/providers/googleworkspace/services/gmail/gmail_groups_spoofing_protection_enabled/gmail_groups_spoofing_protection_enabled.py
+++ b/prowler/providers/googleworkspace/services/gmail/gmail_groups_spoofing_protection_enabled/gmail_groups_spoofing_protection_enabled.py
@@ -2,6 +2,10 @@ from typing import List
 
 from prowler.lib.check.models import Check, CheckReportGoogleWorkspace
 from prowler.providers.googleworkspace.services.gmail.gmail_client import gmail_client
+from prowler.providers.googleworkspace.services.gmail.lib.spoofing import (
+    describe_consequence,
+    is_protective,
+)
 
 
 class gmail_groups_spoofing_protection_enabled(Check):
@@ -10,6 +14,9 @@ class gmail_groups_spoofing_protection_enabled(Check):
     This check verifies that Gmail is configured to take action on
     inbound emails to groups that spoof the organization's domain,
     helping prevent impersonation attacks targeting group mailboxes.
+    CIS requires the configured action to move the message to spam or
+    quarantine it, so an action that only shows a warning is reported as a
+    failure.
     """
 
     def execute(self) -> List[CheckReportGoogleWorkspace]:
@@ -27,56 +34,44 @@ class gmail_groups_spoofing_protection_enabled(Check):
             enabled = gmail_client.policies.detect_groups_spoofing
             consequence = gmail_client.policies.groups_spoofing_consequence
             visibility_type = gmail_client.policies.groups_spoofing_visibility_type
+            domain = gmail_client.provider.identity.domain
+            scope = (
+                "private groups only"
+                if visibility_type == "PRIVATE_GROUPS_ONLY"
+                else "all groups"
+            )
 
             if enabled is False:
                 report.status = "FAIL"
                 report.status_extended = (
                     f"Protection of groups from inbound emails spoofing your "
-                    f"domain is disabled in domain "
-                    f"{gmail_client.provider.identity.domain}. "
-                    f"Enable the protection and configure a protective action."
+                    f"domain is disabled in domain {domain}. "
+                    f"Enable the protection and set the action to move the "
+                    f"email to spam."
                 )
             elif enabled is None:
                 report.status = "FAIL"
                 report.status_extended = (
                     f"Protection of groups from inbound emails spoofing your "
                     f"domain is not configured and uses Google's insecure "
-                    f"default (disabled) in domain "
-                    f"{gmail_client.provider.identity.domain}. "
-                    f"Enable the protection and configure a protective action."
+                    f"default (disabled) in domain {domain}. "
+                    f"Enable the protection and set the action to move the "
+                    f"email to spam."
                 )
-            elif consequence == "NO_ACTION":
+            elif not is_protective(consequence):
                 report.status = "FAIL"
                 report.status_extended = (
                     f"Protection of groups from inbound emails spoofing your "
-                    f"domain is set to take no action in domain "
-                    f"{gmail_client.provider.identity.domain}. "
-                    f"A protective action should be configured."
-                )
-            elif consequence is None:
-                report.status = "PASS"
-                scope = (
-                    "private groups only"
-                    if visibility_type == "PRIVATE_GROUPS_ONLY"
-                    else "all groups"
-                )
-                report.status_extended = (
-                    f"Protection of groups from inbound emails spoofing your "
-                    f"domain is enabled for {scope} in domain "
-                    f"{gmail_client.provider.identity.domain}."
+                    f"domain is enabled for {scope} but "
+                    f"{describe_consequence(consequence)} in domain {domain}. "
+                    f"The action should move the email to spam."
                 )
             else:
                 report.status = "PASS"
-                scope = (
-                    "private groups only"
-                    if visibility_type == "PRIVATE_GROUPS_ONLY"
-                    else "all groups"
-                )
                 report.status_extended = (
                     f"Protection of groups from inbound emails spoofing your "
-                    f"domain is enabled for {scope} with consequence "
-                    f"'{consequence}' in domain "
-                    f"{gmail_client.provider.identity.domain}."
+                    f"domain is enabled for {scope} with action "
+                    f"'{consequence}' in domain {domain}."
                 )
 
             findings.append(report)
diff --git a/prowler/providers/googleworkspace/services/gmail/gmail_inbound_domain_spoofing_protection_enabled/gmail_inbound_domain_spoofing_protection_enabled.metadata.json b/prowler/providers/googleworkspace/services/gmail/gmail_inbound_domain_spoofing_protection_enabled/gmail_inbound_domain_spoofing_protection_enabled.metadata.json
index a049a7ede5..fef0f77322 100644
--- a/prowler/providers/googleworkspace/services/gmail/gmail_inbound_domain_spoofing_protection_enabled/gmail_inbound_domain_spoofing_protection_enabled.metadata.json
+++ b/prowler/providers/googleworkspace/services/gmail/gmail_inbound_domain_spoofing_protection_enabled/gmail_inbound_domain_spoofing_protection_enabled.metadata.json
@@ -9,7 +9,7 @@
   "Severity": "medium",
   "ResourceType": "NotDefined",
   "ResourceGroup": "collaboration",
-  "Description": "Verifies that Gmail is configured to take a protective action (such as moving to spam, quarantining, or showing a warning) when inbound emails spoof the organization's own domain. This protects against attackers sending emails that appear to originate from within the organization but are actually external.",
+  "Description": "Verifies that Gmail moves out of the inbox, to spam or quarantine, the inbound emails that spoof the organization's own domain. An action that only shows a warning is not enough. This protects against attackers sending emails that appear to originate from within the organization but are actually external.",
   "Risk": "Without protection against inbound domain spoofing, users may receive **emails that appear to come from their own organization** but are sent by external attackers. This enables **internal impersonation**, **phishing**, and **business email compromise** attacks that exploit trust in internal communications.",
   "RelatedUrl": "",
   "AdditionalURLs": [
diff --git a/prowler/providers/googleworkspace/services/gmail/gmail_inbound_domain_spoofing_protection_enabled/gmail_inbound_domain_spoofing_protection_enabled.py b/prowler/providers/googleworkspace/services/gmail/gmail_inbound_domain_spoofing_protection_enabled/gmail_inbound_domain_spoofing_protection_enabled.py
index b9a22cadc6..822c445595 100644
--- a/prowler/providers/googleworkspace/services/gmail/gmail_inbound_domain_spoofing_protection_enabled/gmail_inbound_domain_spoofing_protection_enabled.py
+++ b/prowler/providers/googleworkspace/services/gmail/gmail_inbound_domain_spoofing_protection_enabled/gmail_inbound_domain_spoofing_protection_enabled.py
@@ -2,6 +2,10 @@ from typing import List
 
 from prowler.lib.check.models import Check, CheckReportGoogleWorkspace
 from prowler.providers.googleworkspace.services.gmail.gmail_client import gmail_client
+from prowler.providers.googleworkspace.services.gmail.lib.spoofing import (
+    describe_consequence,
+    is_protective,
+)
 
 
 class gmail_inbound_domain_spoofing_protection_enabled(Check):
@@ -9,7 +13,9 @@ class gmail_inbound_domain_spoofing_protection_enabled(Check):
 
     This check verifies that Gmail is configured to take action on
     inbound emails that spoof the organization's own domain, helping
-    prevent impersonation of internal senders.
+    prevent impersonation of internal senders. CIS requires the configured
+    action to move the message to spam or quarantine it, so an action that
+    only shows a warning is reported as a failure.
     """
 
     def execute(self) -> List[CheckReportGoogleWorkspace]:
@@ -26,36 +32,30 @@ class gmail_inbound_domain_spoofing_protection_enabled(Check):
 
             enabled = gmail_client.policies.detect_inbound_domain_spoofing
             consequence = gmail_client.policies.inbound_domain_spoofing_consequence
+            domain = gmail_client.provider.identity.domain
 
             if enabled is False:
                 report.status = "FAIL"
                 report.status_extended = (
                     f"Protection against inbound emails spoofing your domain "
-                    f"is disabled in domain "
-                    f"{gmail_client.provider.identity.domain}. "
-                    f"Enable the protection and configure a protective action."
+                    f"is disabled in domain {domain}. "
+                    f"Enable the protection and set the action to move the "
+                    f"email to spam."
                 )
-            elif consequence == "NO_ACTION":
+            elif not is_protective(consequence):
                 report.status = "FAIL"
                 report.status_extended = (
                     f"Protection against inbound emails spoofing your domain "
-                    f"is set to take no action in domain "
-                    f"{gmail_client.provider.identity.domain}. "
-                    f"A protective action should be configured."
-                )
-            elif consequence is None:
-                report.status = "PASS"
-                report.status_extended = (
-                    f"Protection against inbound emails spoofing your domain "
-                    f"uses Google's secure default configuration (enabled) "
-                    f"in domain {gmail_client.provider.identity.domain}."
+                    f"{describe_consequence(consequence)} in domain {domain}. "
+                    f"The action should move the email to spam."
                 )
             else:
                 report.status = "PASS"
+                state = "is enabled" if enabled else "uses Google's default (enabled)"
                 report.status_extended = (
                     f"Protection against inbound emails spoofing your domain "
-                    f"is enabled with consequence '{consequence}' "
-                    f"in domain {gmail_client.provider.identity.domain}."
+                    f"{state} with action '{consequence}' in domain "
+                    f"{domain}."
                 )
 
             findings.append(report)
diff --git a/prowler/providers/googleworkspace/services/gmail/lib/__init__.py b/prowler/providers/googleworkspace/services/gmail/lib/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/googleworkspace/services/gmail/lib/spoofing.py b/prowler/providers/googleworkspace/services/gmail/lib/spoofing.py
new file mode 100644
index 0000000000..7c3b86a352
--- /dev/null
+++ b/prowler/providers/googleworkspace/services/gmail/lib/spoofing.py
@@ -0,0 +1,33 @@
+"""Helpers to evaluate the action configured for Gmail spoofing protections."""
+
+from typing import Optional
+
+# Actions that actually keep the message away from the inbox. CIS Google
+# Workspace 3.1.3.4.3.1, 3.1.3.4.3.2, 3.1.3.4.3.3 and 3.1.3.4.3.5 all require
+# the action to be "Move email to spam"; quarantining is stricter and also
+# satisfies the recommendation.
+PROTECTIVE_CONSEQUENCES = {"SPAM_FOLDER", "QUARANTINE"}
+
+# Google leaves these protections enabled but set to "Keep email in inbox and
+# show warning", which the benchmark does not accept, so an unset action is
+# evaluated as the insecure default rather than as a secure one.
+UNSET_CONSEQUENCE_DESCRIPTION = (
+    "uses Google's default action (keep email in inbox and show a warning)"
+)
+
+CONSEQUENCE_DESCRIPTIONS = {
+    "NO_ACTION": "is set to take no action",
+    "WARNING": "is set to keep the email in the inbox and show a warning",
+}
+
+
+def describe_consequence(consequence: Optional[str]) -> str:
+    """Return a human-readable description of a non-protective action."""
+    if consequence is None:
+        return UNSET_CONSEQUENCE_DESCRIPTION
+    return CONSEQUENCE_DESCRIPTIONS.get(consequence, f"is set to '{consequence}'")
+
+
+def is_protective(consequence: Optional[str]) -> bool:
+    """Whether the configured action moves the message out of the inbox."""
+    return consequence in PROTECTIVE_CONSEQUENCES
diff --git a/prowler/providers/googleworkspace/services/rules/lib/__init__.py b/prowler/providers/googleworkspace/services/rules/lib/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/googleworkspace/services/rules/lib/alerts.py b/prowler/providers/googleworkspace/services/rules/lib/alerts.py
new file mode 100644
index 0000000000..c3c3754b67
--- /dev/null
+++ b/prowler/providers/googleworkspace/services/rules/lib/alerts.py
@@ -0,0 +1,127 @@
+"""Shared evaluation of the system-defined alert rules audited by CIS section 6."""
+
+from typing import TYPE_CHECKING, List
+
+from prowler.lib.check.models import CheckReportGoogleWorkspace
+
+if TYPE_CHECKING:
+    from prowler.providers.googleworkspace.services.rules.rules_service import Rules
+
+# A rule classified above what the benchmark asks for is stricter, not weaker,
+# so severities are compared by rank instead of by equality.
+SEVERITY_RANK = {"LOW": 1, "MEDIUM": 2, "HIGH": 3}
+
+# The rule can be active while its delivery to the alert center is switched
+# off, which is what the audit's "Ensure that Alerts is set to On" checks.
+ALERT_CENTER_DISABLED = "DISABLED"
+
+
+def _severity_issue(severity: str, minimum_severity: str) -> str:
+    """Return why a severity does not meet the benchmark, or an empty string."""
+    if severity is None:
+        return f"severity is not configured (should be at least {minimum_severity})"
+    rank = SEVERITY_RANK.get(severity)
+    if rank is None:
+        return (
+            f"severity is {severity}, which is not one of "
+            f"{', '.join(SEVERITY_RANK)}, so it could not be compared against "
+            f"the {minimum_severity} the benchmark asks for"
+        )
+    if rank < SEVERITY_RANK[minimum_severity]:
+        return f"severity is {severity} (should be at least {minimum_severity})"
+    return ""
+
+
+def evaluate_system_defined_alert(
+    client: "Rules",
+    metadata: dict,
+    rule_name: str,
+    minimum_severity: str,
+) -> List[CheckReportGoogleWorkspace]:
+    """Report on one system-defined alert rule against the CIS audit procedure.
+
+    Every recommendation in CIS section 6 asks for the rule to be on, to notify
+    by email, to include all super administrators as recipients and to carry a
+    minimum severity. Returns no finding at all when the policies could not be
+    fetched or the rule is not among the ones the client collected.
+    """
+    findings = []
+
+    if not client.policies_fetched:
+        return findings
+
+    for alert in client.system_defined_alerts:
+        if alert.display_name != rule_name:
+            continue
+
+        domain = client.provider.identity.domain
+        report = CheckReportGoogleWorkspace(
+            metadata=metadata,
+            resource=alert,
+            resource_id=f"systemDefinedAlert/{rule_name}",
+            resource_name=rule_name,
+            customer_id=client.provider.identity.customer_id,
+        )
+
+        if alert.from_default:
+            # Nothing was observed: the state below is Google's documented
+            # default and the severity has no documented default at all.
+            if alert.state != "ACTIVE":
+                report.status = "FAIL"
+                report.status_extended = (
+                    f"System-defined alert rule '{rule_name}' was not returned "
+                    f"by the API in domain {domain} and Google's default for it "
+                    f"is OFF."
+                )
+            else:
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"System-defined alert rule '{rule_name}' was not returned "
+                    f"by the API in domain {domain}, so its configuration could "
+                    f"not be verified. Review it in the Admin console: it should "
+                    f"be ON, notify all super administrators by email and be set "
+                    f"to {minimum_severity} severity or higher."
+                )
+            findings.append(report)
+            continue
+
+        issues = []
+
+        if alert.state != "ACTIVE":
+            issues.append("alert is OFF")
+
+        # Only an explicit DISABLED fails. The API does not return this field
+        # even for a rule that is ON and has a severity set, and a severity
+        # cannot be configured for the alert center while delivery is off, so
+        # treating its absence as unverified would leave every one of these
+        # checks permanently MANUAL.
+        if alert.alert_center_status == ALERT_CENTER_DISABLED:
+            issues.append("the alert is not sent to the alert center")
+
+        if not alert.email_notifications_enabled:
+            issues.append("email notifications are disabled")
+        elif not alert.all_super_admins:
+            issues.append("email recipients do not include all super administrators")
+
+        severity = _severity_issue(alert.severity, minimum_severity)
+        if severity:
+            issues.append(severity)
+
+        if issues:
+            report.status = "FAIL"
+            report.status_extended = (
+                f"System-defined alert rule '{rule_name}' is not properly "
+                f"configured in domain {domain}: {', '.join(issues)}."
+            )
+        else:
+            report.status = "PASS"
+            report.status_extended = (
+                f"System-defined alert rule '{rule_name}' is properly "
+                f"configured in domain {domain}: alert is ON, email "
+                f"notifications are enabled, recipients include all super "
+                f"administrators and severity is {alert.severity}."
+            )
+
+        findings.append(report)
+
+    return findings
diff --git a/prowler/providers/googleworkspace/services/rules/rules_admin_privilege_granted_alert_configured/rules_admin_privilege_granted_alert_configured.metadata.json b/prowler/providers/googleworkspace/services/rules/rules_admin_privilege_granted_alert_configured/rules_admin_privilege_granted_alert_configured.metadata.json
index a93b4fb737..84a665b8c6 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_admin_privilege_granted_alert_configured/rules_admin_privilege_granted_alert_configured.metadata.json
+++ b/prowler/providers/googleworkspace/services/rules/rules_admin_privilege_granted_alert_configured/rules_admin_privilege_granted_alert_configured.metadata.json
@@ -9,7 +9,7 @@
   "Severity": "medium",
   "ResourceType": "NotDefined",
   "ResourceGroup": "monitoring",
-  "Description": "The **User granted Admin privilege** system-defined alert rule should be enabled with alerts sent to the alert center, email notifications turned on, and recipients set to all super administrators. This ensures administrators are notified when a user is given elevated admin privileges.",
+  "Description": "The **User granted Admin privilege** system-defined alert rule should be enabled with alerts sent to the alert center, email notifications turned on, recipients set to all super administrators, and severity set to Medium or higher. This ensures administrators are notified when a user is given elevated admin privileges.",
   "Risk": "Without this alert enabled, administrators will not be notified when users receive **elevated admin privileges**. Unauthorized privilege escalation could indicate account compromise or insider threats and requires immediate verification.",
   "RelatedUrl": "",
   "AdditionalURLs": [
diff --git a/prowler/providers/googleworkspace/services/rules/rules_admin_privilege_granted_alert_configured/rules_admin_privilege_granted_alert_configured.py b/prowler/providers/googleworkspace/services/rules/rules_admin_privilege_granted_alert_configured/rules_admin_privilege_granted_alert_configured.py
index 55b9a685bf..30ebec64e4 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_admin_privilege_granted_alert_configured/rules_admin_privilege_granted_alert_configured.py
+++ b/prowler/providers/googleworkspace/services/rules/rules_admin_privilege_granted_alert_configured/rules_admin_privilege_granted_alert_configured.py
@@ -1,61 +1,25 @@
 from typing import List
 
 from prowler.lib.check.models import Check, CheckReportGoogleWorkspace
+from prowler.providers.googleworkspace.services.rules.lib.alerts import (
+    evaluate_system_defined_alert,
+)
 from prowler.providers.googleworkspace.services.rules.rules_client import (
     rules_client,
 )
 
 RULE_NAME = "User granted Admin privilege"
+MINIMUM_SEVERITY = "MEDIUM"
 
 
 class rules_admin_privilege_granted_alert_configured(Check):
-    """Check that the User granted Admin privilege system-defined alert rule is fully configured."""
+    """Check that the User granted Admin privilege system-defined alert rule is fully configured.
+
+    CIS 6.4 requires the rule to be on, to notify by email, to include all
+    super administrators as recipients and to be set to MEDIUM severity or higher.
+    """
 
     def execute(self) -> List[CheckReportGoogleWorkspace]:
-        findings = []
-
-        if rules_client.policies_fetched:
-            for alert in rules_client.system_defined_alerts:
-                if alert.display_name != RULE_NAME:
-                    continue
-
-                domain = rules_client.provider.identity.domain
-                report = CheckReportGoogleWorkspace(
-                    metadata=self.metadata(),
-                    resource=alert,
-                    resource_id=f"systemDefinedAlert/{RULE_NAME}",
-                    resource_name=RULE_NAME,
-                    customer_id=rules_client.provider.identity.customer_id,
-                )
-
-                is_active = alert.state == "ACTIVE"
-                has_recipients = alert.email_notifications_enabled
-                all_super_admins = alert.all_super_admins
-
-                if is_active and has_recipients and all_super_admins:
-                    report.status = "PASS"
-                    report.status_extended = (
-                        f"System-defined alert rule '{RULE_NAME}' is properly "
-                        f"configured in domain {domain}: alert is ON, email "
-                        f"notifications are enabled, and recipients include "
-                        f"all super administrators."
-                    )
-                else:
-                    report.status = "FAIL"
-                    issues = []
-                    if not is_active:
-                        issues.append("alert is OFF")
-                    if not has_recipients:
-                        issues.append("email notifications are disabled")
-                    elif not all_super_admins:
-                        issues.append(
-                            "email recipients do not include all super administrators"
-                        )
-                    report.status_extended = (
-                        f"System-defined alert rule '{RULE_NAME}' is not properly "
-                        f"configured in domain {domain}: {', '.join(issues)}."
-                    )
-
-                findings.append(report)
-
-        return findings
+        return evaluate_system_defined_alert(
+            rules_client, self.metadata(), RULE_NAME, MINIMUM_SEVERITY
+        )
diff --git a/prowler/providers/googleworkspace/services/rules/rules_gmail_employee_spoofing_alert_configured/rules_gmail_employee_spoofing_alert_configured.metadata.json b/prowler/providers/googleworkspace/services/rules/rules_gmail_employee_spoofing_alert_configured/rules_gmail_employee_spoofing_alert_configured.metadata.json
index 34885cb605..1966208719 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_gmail_employee_spoofing_alert_configured/rules_gmail_employee_spoofing_alert_configured.metadata.json
+++ b/prowler/providers/googleworkspace/services/rules/rules_gmail_employee_spoofing_alert_configured/rules_gmail_employee_spoofing_alert_configured.metadata.json
@@ -9,7 +9,7 @@
   "Severity": "medium",
   "ResourceType": "NotDefined",
   "ResourceGroup": "monitoring",
-  "Description": "The **Gmail potential employee spoofing** system-defined alert rule should be enabled with alerts sent to the alert center, email notifications turned on, and recipients set to all super administrators. This ensures administrators are notified when incoming messages have a sender name matching the directory but from an external domain.",
+  "Description": "The **Gmail potential employee spoofing** system-defined alert rule should be enabled with alerts sent to the alert center, email notifications turned on, recipients set to all super administrators, and severity set to Medium or higher. This ensures administrators are notified when incoming messages have a sender name matching the directory but from an external domain.",
   "Risk": "Without this alert enabled, administrators will not be notified of potential **employee spoofing via email**. Attackers may impersonate internal employees using external email addresses to conduct phishing attacks against the organization.",
   "RelatedUrl": "",
   "AdditionalURLs": [
diff --git a/prowler/providers/googleworkspace/services/rules/rules_gmail_employee_spoofing_alert_configured/rules_gmail_employee_spoofing_alert_configured.py b/prowler/providers/googleworkspace/services/rules/rules_gmail_employee_spoofing_alert_configured/rules_gmail_employee_spoofing_alert_configured.py
index 0993f72d3d..4c648a43d6 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_gmail_employee_spoofing_alert_configured/rules_gmail_employee_spoofing_alert_configured.py
+++ b/prowler/providers/googleworkspace/services/rules/rules_gmail_employee_spoofing_alert_configured/rules_gmail_employee_spoofing_alert_configured.py
@@ -1,61 +1,25 @@
 from typing import List
 
 from prowler.lib.check.models import Check, CheckReportGoogleWorkspace
+from prowler.providers.googleworkspace.services.rules.lib.alerts import (
+    evaluate_system_defined_alert,
+)
 from prowler.providers.googleworkspace.services.rules.rules_client import (
     rules_client,
 )
 
 RULE_NAME = "Gmail potential employee spoofing"
+MINIMUM_SEVERITY = "MEDIUM"
 
 
 class rules_gmail_employee_spoofing_alert_configured(Check):
-    """Check that the Gmail potential employee spoofing system-defined alert rule is fully configured."""
+    """Check that the Gmail potential employee spoofing system-defined alert rule is fully configured.
+
+    CIS 6.8 requires the rule to be on, to notify by email, to include all
+    super administrators as recipients and to be set to MEDIUM severity or higher.
+    """
 
     def execute(self) -> List[CheckReportGoogleWorkspace]:
-        findings = []
-
-        if rules_client.policies_fetched:
-            for alert in rules_client.system_defined_alerts:
-                if alert.display_name != RULE_NAME:
-                    continue
-
-                domain = rules_client.provider.identity.domain
-                report = CheckReportGoogleWorkspace(
-                    metadata=self.metadata(),
-                    resource=alert,
-                    resource_id=f"systemDefinedAlert/{RULE_NAME}",
-                    resource_name=RULE_NAME,
-                    customer_id=rules_client.provider.identity.customer_id,
-                )
-
-                is_active = alert.state == "ACTIVE"
-                has_recipients = alert.email_notifications_enabled
-                all_super_admins = alert.all_super_admins
-
-                if is_active and has_recipients and all_super_admins:
-                    report.status = "PASS"
-                    report.status_extended = (
-                        f"System-defined alert rule '{RULE_NAME}' is properly "
-                        f"configured in domain {domain}: alert is ON, email "
-                        f"notifications are enabled, and recipients include "
-                        f"all super administrators."
-                    )
-                else:
-                    report.status = "FAIL"
-                    issues = []
-                    if not is_active:
-                        issues.append("alert is OFF")
-                    if not has_recipients:
-                        issues.append("email notifications are disabled")
-                    elif not all_super_admins:
-                        issues.append(
-                            "email recipients do not include all super administrators"
-                        )
-                    report.status_extended = (
-                        f"System-defined alert rule '{RULE_NAME}' is not properly "
-                        f"configured in domain {domain}: {', '.join(issues)}."
-                    )
-
-                findings.append(report)
-
-        return findings
+        return evaluate_system_defined_alert(
+            rules_client, self.metadata(), RULE_NAME, MINIMUM_SEVERITY
+        )
diff --git a/prowler/providers/googleworkspace/services/rules/rules_government_backed_attacks_alert_configured/rules_government_backed_attacks_alert_configured.metadata.json b/prowler/providers/googleworkspace/services/rules/rules_government_backed_attacks_alert_configured/rules_government_backed_attacks_alert_configured.metadata.json
index 35fa25f248..3769f7b132 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_government_backed_attacks_alert_configured/rules_government_backed_attacks_alert_configured.metadata.json
+++ b/prowler/providers/googleworkspace/services/rules/rules_government_backed_attacks_alert_configured/rules_government_backed_attacks_alert_configured.metadata.json
@@ -9,7 +9,7 @@
   "Severity": "high",
   "ResourceType": "NotDefined",
   "ResourceGroup": "monitoring",
-  "Description": "The **Government-backed attacks** system-defined alert rule should be enabled with alerts sent to the alert center, email notifications turned on, and recipients set to all super administrators. This ensures administrators are notified when Google believes users are being targeted by a government-backed attacker.",
+  "Description": "The **Government-backed attacks** system-defined alert rule should be enabled with alerts sent to the alert center, email notifications turned on, recipients set to all super administrators, and severity set to High or higher. This ensures administrators are notified when Google believes users are being targeted by a government-backed attacker.",
   "Risk": "Without this alert enabled, administrators will not be notified of potential **government-backed attacks** targeting their users. These attacks are sophisticated and require immediate response to protect affected accounts and investigate the threat.",
   "RelatedUrl": "",
   "AdditionalURLs": [
diff --git a/prowler/providers/googleworkspace/services/rules/rules_government_backed_attacks_alert_configured/rules_government_backed_attacks_alert_configured.py b/prowler/providers/googleworkspace/services/rules/rules_government_backed_attacks_alert_configured/rules_government_backed_attacks_alert_configured.py
index b566d99e0c..aa8eec5ca0 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_government_backed_attacks_alert_configured/rules_government_backed_attacks_alert_configured.py
+++ b/prowler/providers/googleworkspace/services/rules/rules_government_backed_attacks_alert_configured/rules_government_backed_attacks_alert_configured.py
@@ -1,61 +1,25 @@
 from typing import List
 
 from prowler.lib.check.models import Check, CheckReportGoogleWorkspace
+from prowler.providers.googleworkspace.services.rules.lib.alerts import (
+    evaluate_system_defined_alert,
+)
 from prowler.providers.googleworkspace.services.rules.rules_client import (
     rules_client,
 )
 
 RULE_NAME = "Government-backed attacks"
+MINIMUM_SEVERITY = "HIGH"
 
 
 class rules_government_backed_attacks_alert_configured(Check):
-    """Check that the Government-backed attacks system-defined alert rule is fully configured."""
+    """Check that the Government-backed attacks system-defined alert rule is fully configured.
+
+    CIS 6.2 requires the rule to be on, to notify by email, to include all
+    super administrators as recipients and to be set to HIGH severity or higher.
+    """
 
     def execute(self) -> List[CheckReportGoogleWorkspace]:
-        findings = []
-
-        if rules_client.policies_fetched:
-            for alert in rules_client.system_defined_alerts:
-                if alert.display_name != RULE_NAME:
-                    continue
-
-                domain = rules_client.provider.identity.domain
-                report = CheckReportGoogleWorkspace(
-                    metadata=self.metadata(),
-                    resource=alert,
-                    resource_id=f"systemDefinedAlert/{RULE_NAME}",
-                    resource_name=RULE_NAME,
-                    customer_id=rules_client.provider.identity.customer_id,
-                )
-
-                is_active = alert.state == "ACTIVE"
-                has_recipients = alert.email_notifications_enabled
-                all_super_admins = alert.all_super_admins
-
-                if is_active and has_recipients and all_super_admins:
-                    report.status = "PASS"
-                    report.status_extended = (
-                        f"System-defined alert rule '{RULE_NAME}' is properly "
-                        f"configured in domain {domain}: alert is ON, email "
-                        f"notifications are enabled, and recipients include "
-                        f"all super administrators."
-                    )
-                else:
-                    report.status = "FAIL"
-                    issues = []
-                    if not is_active:
-                        issues.append("alert is OFF")
-                    if not has_recipients:
-                        issues.append("email notifications are disabled")
-                    elif not all_super_admins:
-                        issues.append(
-                            "email recipients do not include all super administrators"
-                        )
-                    report.status_extended = (
-                        f"System-defined alert rule '{RULE_NAME}' is not properly "
-                        f"configured in domain {domain}: {', '.join(issues)}."
-                    )
-
-                findings.append(report)
-
-        return findings
+        return evaluate_system_defined_alert(
+            rules_client, self.metadata(), RULE_NAME, MINIMUM_SEVERITY
+        )
diff --git a/prowler/providers/googleworkspace/services/rules/rules_leaked_password_alert_configured/rules_leaked_password_alert_configured.metadata.json b/prowler/providers/googleworkspace/services/rules/rules_leaked_password_alert_configured/rules_leaked_password_alert_configured.metadata.json
index 870144a873..8866d76e02 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_leaked_password_alert_configured/rules_leaked_password_alert_configured.metadata.json
+++ b/prowler/providers/googleworkspace/services/rules/rules_leaked_password_alert_configured/rules_leaked_password_alert_configured.metadata.json
@@ -9,7 +9,7 @@
   "Severity": "medium",
   "ResourceType": "NotDefined",
   "ResourceGroup": "monitoring",
-  "Description": "The **Leaked password** system-defined alert rule should be enabled with alerts sent to the alert center, email notifications turned on, and recipients set to all super administrators. This ensures administrators are notified when Google detects compromised credentials requiring a password reset.",
+  "Description": "The **Leaked password** system-defined alert rule should be enabled with alerts sent to the alert center, email notifications turned on, recipients set to all super administrators, and severity set to Medium or higher. This ensures administrators are notified when Google detects compromised credentials requiring a password reset.",
   "Risk": "Without this alert enabled, administrators will not be notified when Google detects that a user's **credentials have been compromised** in a publicized breach. The user likely reused their password at another site that was breached, and their account requires an immediate password change.",
   "RelatedUrl": "",
   "AdditionalURLs": [
diff --git a/prowler/providers/googleworkspace/services/rules/rules_leaked_password_alert_configured/rules_leaked_password_alert_configured.py b/prowler/providers/googleworkspace/services/rules/rules_leaked_password_alert_configured/rules_leaked_password_alert_configured.py
index 797bed4f71..8134661eeb 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_leaked_password_alert_configured/rules_leaked_password_alert_configured.py
+++ b/prowler/providers/googleworkspace/services/rules/rules_leaked_password_alert_configured/rules_leaked_password_alert_configured.py
@@ -1,61 +1,25 @@
 from typing import List
 
 from prowler.lib.check.models import Check, CheckReportGoogleWorkspace
+from prowler.providers.googleworkspace.services.rules.lib.alerts import (
+    evaluate_system_defined_alert,
+)
 from prowler.providers.googleworkspace.services.rules.rules_client import (
     rules_client,
 )
 
 RULE_NAME = "Leaked password"
+MINIMUM_SEVERITY = "MEDIUM"
 
 
 class rules_leaked_password_alert_configured(Check):
-    """Check that the Leaked password system-defined alert rule is fully configured."""
+    """Check that the Leaked password system-defined alert rule is fully configured.
+
+    CIS 6.7 requires the rule to be on, to notify by email, to include all
+    super administrators as recipients and to be set to MEDIUM severity or higher.
+    """
 
     def execute(self) -> List[CheckReportGoogleWorkspace]:
-        findings = []
-
-        if rules_client.policies_fetched:
-            for alert in rules_client.system_defined_alerts:
-                if alert.display_name != RULE_NAME:
-                    continue
-
-                domain = rules_client.provider.identity.domain
-                report = CheckReportGoogleWorkspace(
-                    metadata=self.metadata(),
-                    resource=alert,
-                    resource_id=f"systemDefinedAlert/{RULE_NAME}",
-                    resource_name=RULE_NAME,
-                    customer_id=rules_client.provider.identity.customer_id,
-                )
-
-                is_active = alert.state == "ACTIVE"
-                has_recipients = alert.email_notifications_enabled
-                all_super_admins = alert.all_super_admins
-
-                if is_active and has_recipients and all_super_admins:
-                    report.status = "PASS"
-                    report.status_extended = (
-                        f"System-defined alert rule '{RULE_NAME}' is properly "
-                        f"configured in domain {domain}: alert is ON, email "
-                        f"notifications are enabled, and recipients include "
-                        f"all super administrators."
-                    )
-                else:
-                    report.status = "FAIL"
-                    issues = []
-                    if not is_active:
-                        issues.append("alert is OFF")
-                    if not has_recipients:
-                        issues.append("email notifications are disabled")
-                    elif not all_super_admins:
-                        issues.append(
-                            "email recipients do not include all super administrators"
-                        )
-                    report.status_extended = (
-                        f"System-defined alert rule '{RULE_NAME}' is not properly "
-                        f"configured in domain {domain}: {', '.join(issues)}."
-                    )
-
-                findings.append(report)
-
-        return findings
+        return evaluate_system_defined_alert(
+            rules_client, self.metadata(), RULE_NAME, MINIMUM_SEVERITY
+        )
diff --git a/prowler/providers/googleworkspace/services/rules/rules_password_changed_alert_configured/rules_password_changed_alert_configured.metadata.json b/prowler/providers/googleworkspace/services/rules/rules_password_changed_alert_configured/rules_password_changed_alert_configured.metadata.json
index f1f4fbc622..bdd6a84d5f 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_password_changed_alert_configured/rules_password_changed_alert_configured.metadata.json
+++ b/prowler/providers/googleworkspace/services/rules/rules_password_changed_alert_configured/rules_password_changed_alert_configured.metadata.json
@@ -9,7 +9,7 @@
   "Severity": "medium",
   "ResourceType": "NotDefined",
   "ResourceGroup": "monitoring",
-  "Description": "The **User's password changed** system-defined alert rule should be enabled with alerts sent to the alert center, email notifications turned on, and recipients set to all super administrators. This ensures administrators are promptly notified when user passwords are changed.",
+  "Description": "The **User's password changed** system-defined alert rule should be enabled with alerts sent to the alert center, email notifications turned on, recipients set to all super administrators, and severity set to Medium or higher. This ensures administrators are promptly notified when user passwords are changed.",
   "Risk": "Without this alert enabled, administrators will not be notified when user passwords are changed. This could allow **credential compromise and account takeover** to go undetected, giving attackers time to establish persistence.",
   "RelatedUrl": "",
   "AdditionalURLs": [
diff --git a/prowler/providers/googleworkspace/services/rules/rules_password_changed_alert_configured/rules_password_changed_alert_configured.py b/prowler/providers/googleworkspace/services/rules/rules_password_changed_alert_configured/rules_password_changed_alert_configured.py
index fb6382caf8..c61c6e9d76 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_password_changed_alert_configured/rules_password_changed_alert_configured.py
+++ b/prowler/providers/googleworkspace/services/rules/rules_password_changed_alert_configured/rules_password_changed_alert_configured.py
@@ -1,61 +1,25 @@
 from typing import List
 
 from prowler.lib.check.models import Check, CheckReportGoogleWorkspace
+from prowler.providers.googleworkspace.services.rules.lib.alerts import (
+    evaluate_system_defined_alert,
+)
 from prowler.providers.googleworkspace.services.rules.rules_client import (
     rules_client,
 )
 
 RULE_NAME = "User's password changed"
+MINIMUM_SEVERITY = "MEDIUM"
 
 
 class rules_password_changed_alert_configured(Check):
-    """Check that the User's password changed system-defined alert rule is fully configured."""
+    """Check that the User's password changed system-defined alert rule is fully configured.
+
+    CIS 6.1 requires the rule to be on, to notify by email, to include all
+    super administrators as recipients and to be set to MEDIUM severity or higher.
+    """
 
     def execute(self) -> List[CheckReportGoogleWorkspace]:
-        findings = []
-
-        if rules_client.policies_fetched:
-            for alert in rules_client.system_defined_alerts:
-                if alert.display_name != RULE_NAME:
-                    continue
-
-                domain = rules_client.provider.identity.domain
-                report = CheckReportGoogleWorkspace(
-                    metadata=self.metadata(),
-                    resource=alert,
-                    resource_id=f"systemDefinedAlert/{RULE_NAME}",
-                    resource_name=RULE_NAME,
-                    customer_id=rules_client.provider.identity.customer_id,
-                )
-
-                is_active = alert.state == "ACTIVE"
-                has_recipients = alert.email_notifications_enabled
-                all_super_admins = alert.all_super_admins
-
-                if is_active and has_recipients and all_super_admins:
-                    report.status = "PASS"
-                    report.status_extended = (
-                        f"System-defined alert rule '{RULE_NAME}' is properly "
-                        f"configured in domain {domain}: alert is ON, email "
-                        f"notifications are enabled, and recipients include "
-                        f"all super administrators."
-                    )
-                else:
-                    report.status = "FAIL"
-                    issues = []
-                    if not is_active:
-                        issues.append("alert is OFF")
-                    if not has_recipients:
-                        issues.append("email notifications are disabled")
-                    elif not all_super_admins:
-                        issues.append(
-                            "email recipients do not include all super administrators"
-                        )
-                    report.status_extended = (
-                        f"System-defined alert rule '{RULE_NAME}' is not properly "
-                        f"configured in domain {domain}: {', '.join(issues)}."
-                    )
-
-                findings.append(report)
-
-        return findings
+        return evaluate_system_defined_alert(
+            rules_client, self.metadata(), RULE_NAME, MINIMUM_SEVERITY
+        )
diff --git a/prowler/providers/googleworkspace/services/rules/rules_service.py b/prowler/providers/googleworkspace/services/rules/rules_service.py
index 76b0b0df7a..962548d7b4 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_service.py
+++ b/prowler/providers/googleworkspace/services/rules/rules_service.py
@@ -90,6 +90,7 @@ class Rules(GoogleWorkspaceService):
                         state=default_state,
                         email_notifications_enabled=is_active_default,
                         all_super_admins=is_active_default,
+                        from_default=True,
                     )
                     logger.debug(
                         f"System-defined alert rule (default): {rule_name} "
@@ -119,7 +120,12 @@ class Rules(GoogleWorkspaceService):
         state = value.get("state", "INACTIVE")
 
         alert_center_action = value.get("action", {}).get("alertCenterAction", {})
-        severity = alert_center_action.get("alertCenterConfig", {}).get("severity")
+        alert_center_config = alert_center_action.get("alertCenterConfig", {})
+        severity = alert_center_config.get("severity")
+        # CIS remediation step 6: "Select Send to alert center (This will result
+        # in the alert being set to On)", so this is the toggle the audit's
+        # "Ensure that Alerts is set to On" refers to.
+        alert_center_status = alert_center_config.get("status")
         recipients = alert_center_action.get("recipients", [])
 
         all_super_admins = any(r.get("allSuperAdmins") is True for r in recipients)
@@ -128,6 +134,7 @@ class Rules(GoogleWorkspaceService):
             display_name=display_name,
             state=state,
             severity=severity,
+            alert_center_status=alert_center_status,
             email_notifications_enabled=len(recipients) > 0,
             all_super_admins=all_super_admins,
         )
@@ -139,5 +146,10 @@ class SystemDefinedAlert(BaseModel):
     display_name: str
     state: str = "INACTIVE"
     severity: Optional[str] = None
+    # rule.system_defined_alerts action.alertCenterAction.alertCenterConfig.status
+    alert_center_status: Optional[str] = None
     email_notifications_enabled: bool = False
     all_super_admins: bool = False
+    # True when the API returned no policy for the rule and the values above
+    # were inferred from Google's documented defaults rather than observed.
+    from_default: bool = False
diff --git a/prowler/providers/googleworkspace/services/rules/rules_suspicious_activity_suspension_alert_configured/rules_suspicious_activity_suspension_alert_configured.metadata.json b/prowler/providers/googleworkspace/services/rules/rules_suspicious_activity_suspension_alert_configured/rules_suspicious_activity_suspension_alert_configured.metadata.json
index b79120abde..af11bb2e0d 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_suspicious_activity_suspension_alert_configured/rules_suspicious_activity_suspension_alert_configured.metadata.json
+++ b/prowler/providers/googleworkspace/services/rules/rules_suspicious_activity_suspension_alert_configured/rules_suspicious_activity_suspension_alert_configured.metadata.json
@@ -9,7 +9,7 @@
   "Severity": "high",
   "ResourceType": "NotDefined",
   "ResourceGroup": "monitoring",
-  "Description": "The **User suspended due to suspicious activity** system-defined alert rule should be enabled with alerts sent to the alert center, email notifications turned on, and recipients set to all super administrators. This ensures administrators are notified when Google suspends an account due to a potential compromise.",
+  "Description": "The **User suspended due to suspicious activity** system-defined alert rule should be enabled with alerts sent to the alert center, email notifications turned on, recipients set to all super administrators, and severity set to High or higher. This ensures administrators are notified when Google suspends an account due to a potential compromise.",
   "Risk": "Without this alert enabled, administrators will not be promptly notified when Google **suspends a user account** due to detected compromise. The suspended user cannot work, and the underlying security incident requires immediate investigation.",
   "RelatedUrl": "",
   "AdditionalURLs": [
diff --git a/prowler/providers/googleworkspace/services/rules/rules_suspicious_activity_suspension_alert_configured/rules_suspicious_activity_suspension_alert_configured.py b/prowler/providers/googleworkspace/services/rules/rules_suspicious_activity_suspension_alert_configured/rules_suspicious_activity_suspension_alert_configured.py
index cd243be8e3..f9f4c2cabe 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_suspicious_activity_suspension_alert_configured/rules_suspicious_activity_suspension_alert_configured.py
+++ b/prowler/providers/googleworkspace/services/rules/rules_suspicious_activity_suspension_alert_configured/rules_suspicious_activity_suspension_alert_configured.py
@@ -1,61 +1,25 @@
 from typing import List
 
 from prowler.lib.check.models import Check, CheckReportGoogleWorkspace
+from prowler.providers.googleworkspace.services.rules.lib.alerts import (
+    evaluate_system_defined_alert,
+)
 from prowler.providers.googleworkspace.services.rules.rules_client import (
     rules_client,
 )
 
 RULE_NAME = "User suspended due to suspicious activity"
+MINIMUM_SEVERITY = "HIGH"
 
 
 class rules_suspicious_activity_suspension_alert_configured(Check):
-    """Check that the User suspended due to suspicious activity system-defined alert rule is fully configured."""
+    """Check that the User suspended due to suspicious activity system-defined alert rule is fully configured.
+
+    CIS 6.3 requires the rule to be on, to notify by email, to include all
+    super administrators as recipients and to be set to HIGH severity or higher.
+    """
 
     def execute(self) -> List[CheckReportGoogleWorkspace]:
-        findings = []
-
-        if rules_client.policies_fetched:
-            for alert in rules_client.system_defined_alerts:
-                if alert.display_name != RULE_NAME:
-                    continue
-
-                domain = rules_client.provider.identity.domain
-                report = CheckReportGoogleWorkspace(
-                    metadata=self.metadata(),
-                    resource=alert,
-                    resource_id=f"systemDefinedAlert/{RULE_NAME}",
-                    resource_name=RULE_NAME,
-                    customer_id=rules_client.provider.identity.customer_id,
-                )
-
-                is_active = alert.state == "ACTIVE"
-                has_recipients = alert.email_notifications_enabled
-                all_super_admins = alert.all_super_admins
-
-                if is_active and has_recipients and all_super_admins:
-                    report.status = "PASS"
-                    report.status_extended = (
-                        f"System-defined alert rule '{RULE_NAME}' is properly "
-                        f"configured in domain {domain}: alert is ON, email "
-                        f"notifications are enabled, and recipients include "
-                        f"all super administrators."
-                    )
-                else:
-                    report.status = "FAIL"
-                    issues = []
-                    if not is_active:
-                        issues.append("alert is OFF")
-                    if not has_recipients:
-                        issues.append("email notifications are disabled")
-                    elif not all_super_admins:
-                        issues.append(
-                            "email recipients do not include all super administrators"
-                        )
-                    report.status_extended = (
-                        f"System-defined alert rule '{RULE_NAME}' is not properly "
-                        f"configured in domain {domain}: {', '.join(issues)}."
-                    )
-
-                findings.append(report)
-
-        return findings
+        return evaluate_system_defined_alert(
+            rules_client, self.metadata(), RULE_NAME, MINIMUM_SEVERITY
+        )
diff --git a/prowler/providers/googleworkspace/services/rules/rules_suspicious_login_alert_configured/rules_suspicious_login_alert_configured.metadata.json b/prowler/providers/googleworkspace/services/rules/rules_suspicious_login_alert_configured/rules_suspicious_login_alert_configured.metadata.json
index 93af99b565..132a3fd3e2 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_suspicious_login_alert_configured/rules_suspicious_login_alert_configured.metadata.json
+++ b/prowler/providers/googleworkspace/services/rules/rules_suspicious_login_alert_configured/rules_suspicious_login_alert_configured.metadata.json
@@ -9,7 +9,7 @@
   "Severity": "low",
   "ResourceType": "NotDefined",
   "ResourceGroup": "monitoring",
-  "Description": "The **Suspicious login** system-defined alert rule should be enabled with alerts sent to the alert center, email notifications turned on, and recipients set to all super administrators. This ensures administrators are notified when Google detects a sign-in attempt that does not match a user's normal behavior.",
+  "Description": "The **Suspicious login** system-defined alert rule should be enabled with alerts sent to the alert center, email notifications turned on, recipients set to all super administrators, and severity set to Low or higher. This ensures administrators are notified when Google detects a sign-in attempt that does not match a user's normal behavior.",
   "Risk": "Without this alert enabled, administrators will not be notified of **suspicious login attempts** such as sign-ins from unusual locations. This could indicate an active attack using previously obtained credentials.",
   "RelatedUrl": "",
   "AdditionalURLs": [
diff --git a/prowler/providers/googleworkspace/services/rules/rules_suspicious_login_alert_configured/rules_suspicious_login_alert_configured.py b/prowler/providers/googleworkspace/services/rules/rules_suspicious_login_alert_configured/rules_suspicious_login_alert_configured.py
index eee7844c43..951015c0e8 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_suspicious_login_alert_configured/rules_suspicious_login_alert_configured.py
+++ b/prowler/providers/googleworkspace/services/rules/rules_suspicious_login_alert_configured/rules_suspicious_login_alert_configured.py
@@ -1,61 +1,25 @@
 from typing import List
 
 from prowler.lib.check.models import Check, CheckReportGoogleWorkspace
+from prowler.providers.googleworkspace.services.rules.lib.alerts import (
+    evaluate_system_defined_alert,
+)
 from prowler.providers.googleworkspace.services.rules.rules_client import (
     rules_client,
 )
 
 RULE_NAME = "Suspicious login"
+MINIMUM_SEVERITY = "LOW"
 
 
 class rules_suspicious_login_alert_configured(Check):
-    """Check that the Suspicious login system-defined alert rule is fully configured."""
+    """Check that the Suspicious login system-defined alert rule is fully configured.
+
+    CIS 6.6 requires the rule to be on, to notify by email, to include all
+    super administrators as recipients and to be set to LOW severity or higher.
+    """
 
     def execute(self) -> List[CheckReportGoogleWorkspace]:
-        findings = []
-
-        if rules_client.policies_fetched:
-            for alert in rules_client.system_defined_alerts:
-                if alert.display_name != RULE_NAME:
-                    continue
-
-                domain = rules_client.provider.identity.domain
-                report = CheckReportGoogleWorkspace(
-                    metadata=self.metadata(),
-                    resource=alert,
-                    resource_id=f"systemDefinedAlert/{RULE_NAME}",
-                    resource_name=RULE_NAME,
-                    customer_id=rules_client.provider.identity.customer_id,
-                )
-
-                is_active = alert.state == "ACTIVE"
-                has_recipients = alert.email_notifications_enabled
-                all_super_admins = alert.all_super_admins
-
-                if is_active and has_recipients and all_super_admins:
-                    report.status = "PASS"
-                    report.status_extended = (
-                        f"System-defined alert rule '{RULE_NAME}' is properly "
-                        f"configured in domain {domain}: alert is ON, email "
-                        f"notifications are enabled, and recipients include "
-                        f"all super administrators."
-                    )
-                else:
-                    report.status = "FAIL"
-                    issues = []
-                    if not is_active:
-                        issues.append("alert is OFF")
-                    if not has_recipients:
-                        issues.append("email notifications are disabled")
-                    elif not all_super_admins:
-                        issues.append(
-                            "email recipients do not include all super administrators"
-                        )
-                    report.status_extended = (
-                        f"System-defined alert rule '{RULE_NAME}' is not properly "
-                        f"configured in domain {domain}: {', '.join(issues)}."
-                    )
-
-                findings.append(report)
-
-        return findings
+        return evaluate_system_defined_alert(
+            rules_client, self.metadata(), RULE_NAME, MINIMUM_SEVERITY
+        )
diff --git a/prowler/providers/googleworkspace/services/rules/rules_suspicious_programmatic_login_alert_configured/rules_suspicious_programmatic_login_alert_configured.metadata.json b/prowler/providers/googleworkspace/services/rules/rules_suspicious_programmatic_login_alert_configured/rules_suspicious_programmatic_login_alert_configured.metadata.json
index 202df2adad..e4979b65d3 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_suspicious_programmatic_login_alert_configured/rules_suspicious_programmatic_login_alert_configured.metadata.json
+++ b/prowler/providers/googleworkspace/services/rules/rules_suspicious_programmatic_login_alert_configured/rules_suspicious_programmatic_login_alert_configured.metadata.json
@@ -9,7 +9,7 @@
   "Severity": "low",
   "ResourceType": "NotDefined",
   "ResourceGroup": "monitoring",
-  "Description": "The **Suspicious programmatic login** system-defined alert rule should be enabled with alerts sent to the alert center, email notifications turned on, and recipients set to all super administrators. This ensures administrators are notified when Google detects suspicious login attempts from applications or programs.",
+  "Description": "The **Suspicious programmatic login** system-defined alert rule should be enabled with alerts sent to the alert center, email notifications turned on, recipients set to all super administrators, and severity set to Low or higher. This ensures administrators are notified when Google detects suspicious login attempts from applications or programs.",
   "Risk": "Without this alert enabled, administrators will not be notified of **suspicious programmatic login attempts**. This could indicate automated credential stuffing or unauthorized API access using compromised credentials.",
   "RelatedUrl": "",
   "AdditionalURLs": [
diff --git a/prowler/providers/googleworkspace/services/rules/rules_suspicious_programmatic_login_alert_configured/rules_suspicious_programmatic_login_alert_configured.py b/prowler/providers/googleworkspace/services/rules/rules_suspicious_programmatic_login_alert_configured/rules_suspicious_programmatic_login_alert_configured.py
index 0d609a99e1..377da9e1c9 100644
--- a/prowler/providers/googleworkspace/services/rules/rules_suspicious_programmatic_login_alert_configured/rules_suspicious_programmatic_login_alert_configured.py
+++ b/prowler/providers/googleworkspace/services/rules/rules_suspicious_programmatic_login_alert_configured/rules_suspicious_programmatic_login_alert_configured.py
@@ -1,61 +1,25 @@
 from typing import List
 
 from prowler.lib.check.models import Check, CheckReportGoogleWorkspace
+from prowler.providers.googleworkspace.services.rules.lib.alerts import (
+    evaluate_system_defined_alert,
+)
 from prowler.providers.googleworkspace.services.rules.rules_client import (
     rules_client,
 )
 
 RULE_NAME = "Suspicious programmatic login"
+MINIMUM_SEVERITY = "LOW"
 
 
 class rules_suspicious_programmatic_login_alert_configured(Check):
-    """Check that the Suspicious programmatic login system-defined alert rule is fully configured."""
+    """Check that the Suspicious programmatic login system-defined alert rule is fully configured.
+
+    CIS 6.5 requires the rule to be on, to notify by email, to include all
+    super administrators as recipients and to be set to LOW severity or higher.
+    """
 
     def execute(self) -> List[CheckReportGoogleWorkspace]:
-        findings = []
-
-        if rules_client.policies_fetched:
-            for alert in rules_client.system_defined_alerts:
-                if alert.display_name != RULE_NAME:
-                    continue
-
-                domain = rules_client.provider.identity.domain
-                report = CheckReportGoogleWorkspace(
-                    metadata=self.metadata(),
-                    resource=alert,
-                    resource_id=f"systemDefinedAlert/{RULE_NAME}",
-                    resource_name=RULE_NAME,
-                    customer_id=rules_client.provider.identity.customer_id,
-                )
-
-                is_active = alert.state == "ACTIVE"
-                has_recipients = alert.email_notifications_enabled
-                all_super_admins = alert.all_super_admins
-
-                if is_active and has_recipients and all_super_admins:
-                    report.status = "PASS"
-                    report.status_extended = (
-                        f"System-defined alert rule '{RULE_NAME}' is properly "
-                        f"configured in domain {domain}: alert is ON, email "
-                        f"notifications are enabled, and recipients include "
-                        f"all super administrators."
-                    )
-                else:
-                    report.status = "FAIL"
-                    issues = []
-                    if not is_active:
-                        issues.append("alert is OFF")
-                    if not has_recipients:
-                        issues.append("email notifications are disabled")
-                    elif not all_super_admins:
-                        issues.append(
-                            "email recipients do not include all super administrators"
-                        )
-                    report.status_extended = (
-                        f"System-defined alert rule '{RULE_NAME}' is not properly "
-                        f"configured in domain {domain}: {', '.join(issues)}."
-                    )
-
-                findings.append(report)
-
-        return findings
+        return evaluate_system_defined_alert(
+            rules_client, self.metadata(), RULE_NAME, MINIMUM_SEVERITY
+        )
diff --git a/prowler/providers/googleworkspace/services/security/lib/__init__.py b/prowler/providers/googleworkspace/services/security/lib/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/googleworkspace/services/security/lib/durations.py b/prowler/providers/googleworkspace/services/security/lib/durations.py
new file mode 100644
index 0000000000..93736e9b7d
--- /dev/null
+++ b/prowler/providers/googleworkspace/services/security/lib/durations.py
@@ -0,0 +1,89 @@
+"""Helpers for the duration and timestamp values of the Cloud Identity security policies."""
+
+import re
+from datetime import datetime, timezone
+from typing import Optional
+
+from dateutil import parser as date_parser
+
+_DURATION = re.compile(r"^(\d+(?:\.\d+)?)s$")
+
+ONE_HOUR_SECONDS = 3600
+ONE_DAY_SECONDS = 86400
+TWO_WEEKS_SECONDS = 1209600
+ONE_YEAR_SECONDS = 31536000
+
+# The API reports enforcement being OFF as the protobuf zero-value Timestamp
+# rather than as a null or an empty string.
+_ENFORCEMENT_OFF_EPOCH = datetime(1970, 1, 1, tzinfo=timezone.utc)
+
+
+def parse_duration_seconds(value: Optional[str]) -> Optional[int]:
+    """Return the seconds in a protobuf duration string such as "1209600s".
+
+    Returns None when the value is missing or not a duration Prowler knows how
+    to read, so callers can tell "not configured" apart from a real length.
+    """
+    if not value or not isinstance(value, str):
+        return None
+    match = _DURATION.match(value.strip())
+    if not match:
+        return None
+    return int(float(match.group(1)))
+
+
+def format_duration(value: Optional[str]) -> str:
+    """Render a duration string in the largest whole unit, for a finding message."""
+    seconds = parse_duration_seconds(value)
+    if seconds is None:
+        return "not configured"
+    if seconds == 0:
+        return "none"
+    for unit_seconds, name in (
+        (ONE_DAY_SECONDS, "day"),
+        (ONE_HOUR_SECONDS, "hour"),
+    ):
+        units = seconds / unit_seconds
+        if units.is_integer():
+            return f"{int(units)} {name}(s)"
+    return f"{seconds} second(s)"
+
+
+def _parse_timestamp(value: Optional[str]) -> Optional[datetime]:
+    """Parse an API timestamp, tolerating any fractional-second precision.
+
+    protobuf emits up to nanosecond precision, which `datetime.fromisoformat`
+    rejects before Python 3.11, so the shared dateutil parser is used instead.
+    """
+    if not value or not isinstance(value, str):
+        return None
+    try:
+        parsed = date_parser.isoparse(value)
+    except (ValueError, OverflowError):
+        return None
+    if parsed.tzinfo is None:
+        parsed = parsed.replace(tzinfo=timezone.utc)
+    return parsed
+
+
+def enforcement_issue(
+    enforced_from: Optional[str],
+    allow_scheduled: bool = False,
+    now: Optional[datetime] = None,
+) -> Optional[str]:
+    """Return why 2-Step Verification enforcement is not in effect, or None.
+
+    Google accepts a future start date, which means the policy is scheduled but
+    not yet applied to anyone. CIS 4.1.1.2 accepts "On from <date>" explicitly
+    while 4.1.1.1 and 4.1.1.3 ask for plain "On", hence `allow_scheduled`.
+    """
+    if not enforced_from:
+        return "enforcement is not configured and defaults to OFF"
+    parsed = _parse_timestamp(enforced_from)
+    if parsed is None:
+        return f"the enforcement start date '{enforced_from}' could not be read"
+    if parsed <= _ENFORCEMENT_OFF_EPOCH:
+        return "enforcement is set to OFF"
+    if not allow_scheduled and parsed > (now or datetime.now(timezone.utc)):
+        return f"enforcement does not start until {enforced_from}"
+    return None
diff --git a/prowler/providers/googleworkspace/services/security/lib/scope.py b/prowler/providers/googleworkspace/services/security/lib/scope.py
new file mode 100644
index 0000000000..0ef08d2808
--- /dev/null
+++ b/prowler/providers/googleworkspace/services/security/lib/scope.py
@@ -0,0 +1,46 @@
+"""Whether the domain-wide policy values describe what every user actually gets."""
+
+from typing import FrozenSet, List, Optional
+
+
+def _listing(settings: List[str]) -> str:
+    return f"{', '.join(settings)} {'are' if len(settings) > 1 else 'is'}"
+
+
+def unevaluable_reason(policies, evaluated_settings: FrozenSet[str]) -> Optional[str]:
+    """Return why the domain-wide values cannot be judged at all, or None.
+
+    In both cases the values a check would read were never reported, so every
+    condition it evaluates would be built on Prowler's own defaults.
+    """
+    if policies.unresolved_scope:
+        return (
+            "the root organizational unit could not be resolved, so the "
+            "domain-wide policies could not be told apart from the ones scoped "
+            "to an organizational unit"
+        )
+    unobserved = sorted(set(policies.unobserved_settings) & evaluated_settings)
+    if unobserved:
+        return (
+            f"{_listing(unobserved)} only configured for a group or an "
+            f"organizational unit, so no domain-wide value was reported"
+        )
+    return None
+
+
+def failures_shadowed_by_overrides(policies, failing_settings: FrozenSet[str]) -> bool:
+    """Whether every failing setting is also overridden below the domain."""
+    return bool(failing_settings) and failing_settings <= set(
+        policies.overridden_settings
+    )
+
+
+def override_caveat(policies, evaluated_settings: FrozenSet[str]) -> str:
+    """Return what a group or an OU also overrides on top of the domain, or an empty string."""
+    overridden = sorted(set(policies.overridden_settings) & evaluated_settings)
+    if not overridden:
+        return ""
+    return (
+        f"{_listing(overridden)} also overridden for at least one group or "
+        f"organizational unit, so this does not describe every user"
+    )
diff --git a/prowler/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced.metadata.json b/prowler/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced.metadata.json
index 3a2c0b4566..c9e790a7b8 100644
--- a/prowler/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced.metadata.json
+++ b/prowler/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced.metadata.json
@@ -9,7 +9,7 @@
   "Severity": "high",
   "ResourceType": "NotDefined",
   "ResourceGroup": "IAM",
-  "Description": "The domain-level policy **enforces 2-Step Verification (Multi-Factor Authentication)** for all users. 2-Step Verification requires users to present a second form of authentication beyond their password, significantly reducing the risk of account compromise.",
+  "Description": "The domain-level policy **enforces 2-Step Verification** for all users, allows users to turn it on, keeps the new user enrollment period at two weeks or less, disables device trust and excludes verification codes via text or phone call from the accepted methods.",
   "Risk": "Without 2-Step Verification enforcement, users can access their accounts with **only a password**. If credentials are compromised through phishing, credential stuffing, or data breaches, attackers gain **immediate access** to the user's account and organizational data without any additional verification.",
   "RelatedUrl": "",
   "AdditionalURLs": [
@@ -35,5 +35,5 @@
   "RelatedTo": [
     "security_2sv_hardware_keys_admins"
   ],
-  "Notes": ""
+  "Notes": "CIS 4.1.1.1 audits the group holding every admin role, but the Cloud Identity Policy API returns domain-wide policies only. This check evaluates the customer-level policy, which applies to administrators as well, so it cannot confirm a separate admin-role group is configured."
 }
diff --git a/prowler/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced.py b/prowler/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced.py
index 7cf17b348e..e5bf69c5ca 100644
--- a/prowler/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced.py
+++ b/prowler/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced.py
@@ -1,17 +1,54 @@
 from typing import List
 
 from prowler.lib.check.models import Check, CheckReportGoogleWorkspace
+from prowler.providers.googleworkspace.services.security.lib.durations import (
+    TWO_WEEKS_SECONDS,
+    enforcement_issue,
+    format_duration,
+    parse_duration_seconds,
+)
+from prowler.providers.googleworkspace.services.security.lib.scope import (
+    failures_shadowed_by_overrides,
+    override_caveat,
+    unevaluable_reason,
+)
 from prowler.providers.googleworkspace.services.security.security_client import (
     security_client,
 )
 
+# "Methods: Any except verification codes via text, phone call". Listed as an
+# allow list so a value Prowler does not know cannot pass by not being "ALL".
+TELEPHONY_FREE_FACTOR_SETS = {
+    "NO_TELEPHONY",
+    "PASSKEY_ONLY",
+    "PASSKEY_PLUS_SECURITY_CODE",
+    "PASSKEY_PLUS_IP_BOUND_SECURITY_CODE",
+}
+
+# The settings this check reads, to tell whether an override reaches it.
+EVALUATED_SETTINGS = frozenset(
+    {
+        "security.two_step_verification_enrollment",
+        "security.two_step_verification_enforcement",
+        "security.two_step_verification_enforcement_factor",
+        "security.two_step_verification_device_trust",
+        "security.two_step_verification_grace_period",
+    }
+)
+
 
 class security_2sv_enforced(Check):
-    """Check that 2-Step Verification is enforced for all users.
+    """Check that 2-Step Verification is enforced following the CIS audit steps.
 
-    This check verifies that the domain-level policy enforces 2-Step
-    Verification (Multi-Factor Authentication) for all users, reducing
-    the risk of account compromise through stolen credentials.
+    CIS 4.1.1.1 and 4.1.1.3 ask for more than enforcement being on: users must
+    be allowed to turn 2-Step Verification on, the new user enrollment period
+    must not exceed two weeks, device trust must be off and verification codes
+    via text or phone call must not be an accepted method. Each of those is
+    evaluated here so the requirement cannot pass on enforcement alone.
+
+    Note: 4.1.1.1 audits the group holding every admin role, but the Cloud
+    Identity Policy API returns domain-wide policies only. This check evaluates
+    the customer-level policy, which applies to administrators too.
     """
 
     def execute(self) -> List[CheckReportGoogleWorkspace]:
@@ -26,33 +63,125 @@ class security_2sv_enforced(Check):
                 customer_id=security_client.provider.identity.customer_id,
             )
 
-            enforced_from = security_client.policies.two_sv_enforced_from
-            # The API returns "1970-01-01T00:00:00Z" (protobuf zero-value
-            # Timestamp) when enforcement is OFF, not null or empty.
-            enforcement_off_epoch = "1970-01-01T00:00:00Z"
+            policies = security_client.policies
+            domain = security_client.provider.identity.domain
 
-            if enforced_from and enforced_from != enforcement_off_epoch:
-                report.status = "PASS"
+            unevaluable = unevaluable_reason(policies, EVALUATED_SETTINGS)
+            if unevaluable:
+                report.status = "MANUAL"
                 report.status_extended = (
-                    f"2-Step Verification enforcement is active "
-                    f"(enforced from {enforced_from}) "
-                    f"in domain {security_client.provider.identity.domain}."
+                    f"2-Step Verification could not be evaluated in domain "
+                    f"{domain}: {unevaluable}. Review it in the Admin console."
+                )
+                findings.append(report)
+                return findings
+
+            caveat = override_caveat(policies, EVALUATED_SETTINGS)
+            issues = []  # (setting, why it fails)
+
+            enforced_from = policies.two_sv_enforced_from
+            enforcement = enforcement_issue(enforced_from)
+            if enforcement:
+                issues.append(
+                    ("security.two_step_verification_enforcement", enforcement)
+                )
+
+            if policies.two_sv_allow_enrollment is False:
+                issues.append(
+                    (
+                        "security.two_step_verification_enrollment",
+                        "users are not allowed to turn on 2-Step Verification",
+                    )
+                )
+
+            # Google's default is no enrollment period, which is stricter than
+            # the two weeks the benchmark asks for, so only longer periods fail.
+            # A value Prowler cannot read fails closed rather than being skipped.
+            raw_grace_period = policies.two_sv_enrollment_grace_period
+            grace_period = parse_duration_seconds(raw_grace_period)
+            if raw_grace_period and grace_period is None:
+                issues.append(
+                    (
+                        "security.two_step_verification_grace_period",
+                        f"the new user enrollment period '{raw_grace_period}' "
+                        f"could not be read",
+                    )
+                )
+            elif grace_period is not None and grace_period > TWO_WEEKS_SECONDS:
+                issues.append(
+                    (
+                        "security.two_step_verification_grace_period",
+                        f"the new user enrollment period is "
+                        f"{format_duration(policies.two_sv_enrollment_grace_period)} "
+                        f"(should not exceed 2 weeks)",
+                    )
+                )
+
+            if policies.two_sv_allow_trusting_device is not False:
+                issues.append(
+                    (
+                        "security.two_step_verification_device_trust",
+                        (
+                            "users are allowed to trust their device"
+                            if policies.two_sv_allow_trusting_device
+                            else "device trust is not configured and defaults to allowed"
+                        ),
+                    )
+                )
+
+            factor_set = policies.two_sv_allowed_factor_set
+            if factor_set not in TELEPHONY_FREE_FACTOR_SETS:
+                issues.append(
+                    (
+                        "security.two_step_verification_enforcement_factor",
+                        (
+                            "the allowed methods are not configured and default to "
+                            "any method, including verification codes via text and "
+                            "phone call"
+                            if factor_set is None
+                            else f"the allowed methods are {factor_set}, which does "
+                            f"not exclude verification codes via text and phone call"
+                        ),
+                    )
+                )
+
+            failing_settings = frozenset(setting for setting, _ in issues)
+            reasons = "; ".join(text for _, text in issues)
+
+            if issues and failures_shadowed_by_overrides(policies, failing_settings):
+                # The audited scope (e.g. the admin group of 4.1.1.1) may get
+                # the overriding value, which the Policy API does not expose,
+                # so the domain-wide failure cannot be confirmed for it.
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"2-Step Verification is not enforced as required in the "
+                    f"domain-wide policy of {domain}: {reasons}. However, every "
+                    f"failing setting is also overridden for at least one group "
+                    f"or organizational unit, so the audited scope may be "
+                    f"configured correctly. Review those overrides in the Admin "
+                    f"console."
+                )
+            elif issues:
+                report.status = "FAIL"
+                report.status_extended = (
+                    f"2-Step Verification is not enforced as required in domain "
+                    f"{domain}: {reasons}." + (f" Note: {caveat}." if caveat else "")
+                )
+            elif caveat:
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"2-Step Verification meets the benchmark in the domain-wide "
+                    f"policy of {domain}, but {caveat}. Review those overrides "
+                    f"in the Admin console."
                 )
             else:
-                report.status = "FAIL"
-                if enforced_from is None:
-                    report.status_extended = (
-                        f"2-Step Verification enforcement is not configured "
-                        f"in domain {security_client.provider.identity.domain}. "
-                        f"The default is OFF. 2-Step Verification should be "
-                        f"enforced for all users."
-                    )
-                else:
-                    report.status_extended = (
-                        f"2-Step Verification enforcement is set to OFF "
-                        f"in domain {security_client.provider.identity.domain}. "
-                        f"2-Step Verification should be enforced for all users."
-                    )
+                report.status = "PASS"
+                report.status_extended = (
+                    f"2-Step Verification is enforced in domain {domain} "
+                    f"(enforced from {enforced_from}), device trust is disabled "
+                    f"and verification codes via text or phone call are not an "
+                    f"accepted method."
+                )
 
             findings.append(report)
 
diff --git a/prowler/providers/googleworkspace/services/security/security_2sv_hardware_keys_admins/security_2sv_hardware_keys_admins.metadata.json b/prowler/providers/googleworkspace/services/security/security_2sv_hardware_keys_admins/security_2sv_hardware_keys_admins.metadata.json
index 4aae5840a5..cae39072dc 100644
--- a/prowler/providers/googleworkspace/services/security/security_2sv_hardware_keys_admins/security_2sv_hardware_keys_admins.metadata.json
+++ b/prowler/providers/googleworkspace/services/security/security_2sv_hardware_keys_admins/security_2sv_hardware_keys_admins.metadata.json
@@ -9,7 +9,7 @@
   "Severity": "high",
   "ResourceType": "NotDefined",
   "ResourceGroup": "IAM",
-  "Description": "The domain-level 2-Step Verification policy requires **hardware security keys only** as the allowed sign-in factor, providing the strongest phishing-resistant authentication. **Note**: the Policy API returns domain-wide policies only and cannot verify admin role-specific enforcement.",
+  "Description": "The domain-level 2-Step Verification policy requires **hardware security keys only** as the allowed sign-in factor, with enforcement on or scheduled and a policy suspension grace period of at most one day. **Note**: the Policy API returns domain-wide policies only and cannot verify admin role-specific enforcement.",
   "Risk": "When 2SV methods include **SMS, phone calls, or software-based authenticators**, users are vulnerable to **SIM swapping, SS7 attacks, and real-time phishing proxies** that can intercept one-time codes. Hardware security keys are resistant to all known remote phishing techniques.",
   "RelatedUrl": "",
   "AdditionalURLs": [
diff --git a/prowler/providers/googleworkspace/services/security/security_2sv_hardware_keys_admins/security_2sv_hardware_keys_admins.py b/prowler/providers/googleworkspace/services/security/security_2sv_hardware_keys_admins/security_2sv_hardware_keys_admins.py
index 5913f448e1..c95c67a72f 100644
--- a/prowler/providers/googleworkspace/services/security/security_2sv_hardware_keys_admins/security_2sv_hardware_keys_admins.py
+++ b/prowler/providers/googleworkspace/services/security/security_2sv_hardware_keys_admins/security_2sv_hardware_keys_admins.py
@@ -1,20 +1,50 @@
 from typing import List
 
 from prowler.lib.check.models import Check, CheckReportGoogleWorkspace
+from prowler.providers.googleworkspace.services.security.lib.durations import (
+    ONE_DAY_SECONDS,
+    enforcement_issue,
+    format_duration,
+    parse_duration_seconds,
+)
+from prowler.providers.googleworkspace.services.security.lib.scope import (
+    failures_shadowed_by_overrides,
+    override_caveat,
+    unevaluable_reason,
+)
 from prowler.providers.googleworkspace.services.security.security_client import (
     security_client,
 )
 
+# "Methods: Only security key". The values that also accept security codes are
+# PASSKEY_PLUS_SECURITY_CODE and PASSKEY_PLUS_IP_BOUND_SECURITY_CODE, so
+# requiring this one covers the benchmark's "don't allow users to generate
+# security codes" step as well.
+SECURITY_KEYS_ONLY = "PASSKEY_ONLY"
+
+# The settings this check reads, to tell whether an override reaches it.
+EVALUATED_SETTINGS = frozenset(
+    {
+        "security.two_step_verification_enrollment",
+        "security.two_step_verification_enforcement",
+        "security.two_step_verification_enforcement_factor",
+        "security.two_step_verification_sign_in_code",
+    }
+)
+
 
 class security_2sv_hardware_keys_admins(Check):
     """Check that 2SV enforcement requires hardware security keys.
 
-    This check verifies that the domain-level 2-Step Verification enforcement
-    factor is set to security keys only, providing the strongest protection
-    against phishing attacks. Note: the Cloud Identity Policy API returns
-    domain-wide policies — it cannot verify enforcement for admin roles
-    specifically. This check evaluates the customer-level policy which
-    applies to all users including administrators.
+    CIS 4.1.1.2 asks for security keys to be the only accepted method, with
+    enrollment allowed, enforcement on or scheduled, and a policy suspension
+    grace period of at most one day, so the requirement cannot pass on the
+    accepted method alone.
+
+    Note: the Cloud Identity Policy API returns domain-wide policies, it cannot
+    verify enforcement for admin roles specifically. This check evaluates the
+    customer-level policy, which applies to all users including administrators,
+    so a passing domain-wide policy also covers the administrative accounts.
     """
 
     def execute(self) -> List[CheckReportGoogleWorkspace]:
@@ -29,35 +59,119 @@ class security_2sv_hardware_keys_admins(Check):
                 customer_id=security_client.provider.identity.customer_id,
             )
 
-            factor_set = security_client.policies.two_sv_allowed_factor_set
+            policies = security_client.policies
+            domain = security_client.provider.identity.domain
 
-            if factor_set == "PASSKEY_ONLY":
-                report.status = "PASS"
+            unevaluable = unevaluable_reason(policies, EVALUATED_SETTINGS)
+            if unevaluable:
+                report.status = "MANUAL"
                 report.status_extended = (
-                    f"2-Step Verification enforcement requires security keys only "
-                    f"in domain {security_client.provider.identity.domain}."
+                    f"2-Step Verification could not be evaluated in domain "
+                    f"{domain}: {unevaluable}. Review it in the Admin console."
+                )
+                findings.append(report)
+                return findings
+
+            caveat = override_caveat(policies, EVALUATED_SETTINGS)
+            issues = []  # (setting, why it fails)
+
+            factor_set = policies.two_sv_allowed_factor_set
+            if factor_set != SECURITY_KEYS_ONLY:
+                issues.append(
+                    (
+                        "security.two_step_verification_enforcement_factor",
+                        (
+                            "the accepted method is not configured and defaults to "
+                            "any method, including SMS and phone call"
+                            if factor_set is None
+                            else f"the accepted method is {factor_set} "
+                            f"(should be {SECURITY_KEYS_ONLY})"
+                        ),
+                    )
+                )
+
+            # 4.1.1.2 accepts "On from <date>", unlike 4.1.1.1 and 4.1.1.3.
+            enforcement = enforcement_issue(
+                policies.two_sv_enforced_from, allow_scheduled=True
+            )
+            if enforcement:
+                issues.append(
+                    ("security.two_step_verification_enforcement", enforcement)
+                )
+
+            if policies.two_sv_allow_enrollment is False:
+                issues.append(
+                    (
+                        "security.two_step_verification_enrollment",
+                        "users are not allowed to turn on 2-Step Verification",
+                    )
+                )
+
+            # Google's default is no suspension grace period, which is stricter
+            # than the one day the benchmark asks for, so only longer periods
+            # fail. A value Prowler cannot read fails closed.
+            raw_grace_period = policies.two_sv_backup_code_exception_period
+            grace_period = parse_duration_seconds(raw_grace_period)
+            if raw_grace_period and grace_period is None:
+                issues.append(
+                    (
+                        "security.two_step_verification_sign_in_code",
+                        f"the 2-Step Verification policy suspension grace period "
+                        f"'{raw_grace_period}' could not be read",
+                    )
+                )
+            elif grace_period is not None and grace_period > ONE_DAY_SECONDS:
+                issues.append(
+                    (
+                        "security.two_step_verification_sign_in_code",
+                        f"the 2-Step Verification policy suspension grace period "
+                        f"is {format_duration(raw_grace_period)} "
+                        f"(should not exceed 1 day)",
+                    )
+                )
+
+            failing_settings = frozenset(setting for setting, _ in issues)
+            reasons = "; ".join(text for _, text in issues)
+
+            if issues and failures_shadowed_by_overrides(policies, failing_settings):
+                # The admin group of 4.1.1.2 may get the overriding value,
+                # which the Policy API does not expose, so the domain-wide
+                # failure cannot be confirmed for it.
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"2-Step Verification does not require security keys in the "
+                    f"domain-wide policy of {domain}: {reasons}. However, every "
+                    f"failing setting is also overridden for at least one group "
+                    f"or organizational unit, so the administrative accounts may "
+                    f"be configured correctly. Review those overrides in the "
+                    f"Admin console."
+                )
+            elif issues:
+                report.status = "FAIL"
+                report.status_extended = (
+                    f"2-Step Verification does not require security keys as "
+                    f"configured in domain {domain}: {reasons}. "
+                    + (f"Note: {caveat}. " if caveat else "")
+                    + "Note: this check evaluates the domain-wide policy, the "
+                    "Policy API does not expose role-specific 2SV enforcement."
+                )
+            elif caveat:
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"2-Step Verification meets the benchmark in the domain-wide "
+                    f"policy of {domain}, but {caveat}. Review those overrides "
+                    f"in the Admin console."
                 )
             else:
-                report.status = "FAIL"
-                if factor_set is None:
-                    report.status_extended = (
-                        f"2-Step Verification enforcement factor is not configured "
-                        f"in domain {security_client.provider.identity.domain}. "
-                        f"The default allows all methods including SMS and phone call. "
-                        f"Security keys should be required for administrative accounts. "
-                        f"Note: this check evaluates the domain-wide policy, the Policy "
-                        f"API does not expose role-specific 2SV enforcement."
-                    )
-                else:
-                    report.status_extended = (
-                        f"2-Step Verification enforcement factor is set to "
-                        f"{factor_set} "
-                        f"in domain {security_client.provider.identity.domain}. "
-                        f"Only security keys (PASSKEY_ONLY) should be allowed for "
-                        f"administrative accounts. "
-                        f"Note: this check evaluates the domain-wide policy, the Policy "
-                        f"API does not expose role-specific 2SV enforcement."
-                    )
+                report.status = "PASS"
+                report.status_extended = (
+                    f"2-Step Verification requires security keys only in domain "
+                    f"{domain}, enforcement is on or scheduled and the policy "
+                    f"suspension grace period is "
+                    f"{format_duration(policies.two_sv_backup_code_exception_period)}. "
+                    f"Note: this check evaluates the domain-wide policy, the "
+                    f"Policy API does not expose role-specific 2SV enforcement."
+                )
 
             findings.append(report)
 
diff --git a/prowler/providers/googleworkspace/services/security/security_login_challenges_configured/security_login_challenges_configured.metadata.json b/prowler/providers/googleworkspace/services/security/security_login_challenges_configured/security_login_challenges_configured.metadata.json
index ec945474fc..c02ab1a669 100644
--- a/prowler/providers/googleworkspace/services/security/security_login_challenges_configured/security_login_challenges_configured.metadata.json
+++ b/prowler/providers/googleworkspace/services/security/security_login_challenges_configured/security_login_challenges_configured.metadata.json
@@ -9,7 +9,7 @@
   "Severity": "medium",
   "ResourceType": "NotDefined",
   "ResourceGroup": "IAM",
-  "Description": "The domain-level login challenges configuration has the **employee ID challenge disabled**. CIS 4.1.4.1 also requires Post-SSO verification to be enabled, but that setting is **not exposed by the Cloud Identity Policy API**. This check only covers the employee ID challenge portion of the control.",
+  "Description": "The domain-level login challenges configuration has the **employee ID challenge disabled**. This check is **not mapped to CIS 4.1.4.1** because that recommendation also requires Post-SSO verification, a setting **not exposed by the Cloud Identity Policy API**, so the requirement cannot be evaluated end to end.",
   "Risk": "When the employee ID login challenge is enabled without proper configuration, it may create a **false sense of security** or interfere with the login flow. The employee ID challenge is a supplementary verification method that should only be used when specifically required by the organization.",
   "RelatedUrl": "",
   "AdditionalURLs": [
diff --git a/prowler/providers/googleworkspace/services/security/security_login_challenges_configured/security_login_challenges_configured.py b/prowler/providers/googleworkspace/services/security/security_login_challenges_configured/security_login_challenges_configured.py
index e3732053b8..68de612b65 100644
--- a/prowler/providers/googleworkspace/services/security/security_login_challenges_configured/security_login_challenges_configured.py
+++ b/prowler/providers/googleworkspace/services/security/security_login_challenges_configured/security_login_challenges_configured.py
@@ -9,11 +9,11 @@ from prowler.providers.googleworkspace.services.security.security_client import
 class security_login_challenges_configured(Check):
     """Check that login challenges are configured correctly.
 
-    This check verifies that the employee ID login challenge is disabled,
-    as recommended by CIS. Note: CIS 4.1.4.1 also requires Post-SSO
-    verification to be enabled, but that setting is not exposed by the
-    Cloud Identity Policy API. This check only covers the employee ID
-    challenge portion of the control.
+    This check verifies that the employee ID login challenge is disabled.
+
+    It is not mapped to CIS 4.1.4.1: that recommendation also requires Post-SSO
+    verification, a setting the Cloud Identity Policy API does not expose, so
+    the requirement cannot be evaluated end to end and is reported as manual.
     """
 
     def execute(self) -> List[CheckReportGoogleWorkspace]:
diff --git a/prowler/providers/googleworkspace/services/security/security_password_policy_strong/security_password_policy_strong.py b/prowler/providers/googleworkspace/services/security/security_password_policy_strong/security_password_policy_strong.py
index 33448aa536..82118537e0 100644
--- a/prowler/providers/googleworkspace/services/security/security_password_policy_strong/security_password_policy_strong.py
+++ b/prowler/providers/googleworkspace/services/security/security_password_policy_strong/security_password_policy_strong.py
@@ -1,6 +1,11 @@
 from typing import List
 
 from prowler.lib.check.models import Check, CheckReportGoogleWorkspace
+from prowler.providers.googleworkspace.services.security.lib.durations import (
+    ONE_YEAR_SECONDS,
+    format_duration,
+    parse_duration_seconds,
+)
 from prowler.providers.googleworkspace.services.security.security_client import (
     security_client,
 )
@@ -11,8 +16,9 @@ class security_password_policy_strong(Check):
 
     This check verifies that the domain-level password policy meets CIS
     requirements: minimum length of 14 characters, strong passwords enforced,
-    password reuse disallowed, enforcement at next sign-in, and password
-    expiration configured.
+    password reuse disallowed, enforcement at next sign-in, and a password
+    reset frequency of 365 days or less. Shorter periods are more restrictive
+    than the benchmark asks for, so only longer ones fail.
     """
 
     def execute(self) -> List[CheckReportGoogleWorkspace]:
@@ -39,12 +45,11 @@ class security_password_policy_strong(Check):
                     else f"minimum length is {min_length} (requires 14+)"
                 )
 
-            if policies.password_allowed_strength != "STRONG":
-                issues.append(
-                    "password strength is not configured (requires STRONG)"
-                    if policies.password_allowed_strength is None
-                    else f"password strength is {policies.password_allowed_strength} (requires STRONG)"
-                )
+            # Google enforces strong passwords by default, so an unset value is
+            # the secure default rather than a missing configuration.
+            strength = policies.password_allowed_strength
+            if strength is not None and strength != "STRONG":
+                issues.append(f"password strength is {strength} (requires STRONG)")
 
             if policies.password_allow_reuse is True:
                 issues.append("password reuse is allowed")
@@ -52,9 +57,22 @@ class security_password_policy_strong(Check):
             if policies.password_enforce_at_login is not True:
                 issues.append("password policy is not enforced at next sign-in")
 
-            expiration = policies.password_expiration_duration
-            if expiration is None or expiration == "0s":
+            raw_expiration = policies.password_expiration_duration
+            expiration = parse_duration_seconds(raw_expiration)
+            if raw_expiration and expiration is None:
+                issues.append(
+                    f"password expiration '{raw_expiration}' could not be read"
+                )
+            elif expiration is None:
                 issues.append("password expiration is not configured")
+            elif expiration == 0:
+                issues.append("passwords are set to never expire")
+            elif expiration > ONE_YEAR_SECONDS:
+                issues.append(
+                    f"password expiration is "
+                    f"{format_duration(policies.password_expiration_duration)} "
+                    f"(requires 365 days or less)"
+                )
 
             if not issues:
                 report.status = "PASS"
@@ -62,7 +80,8 @@ class security_password_policy_strong(Check):
                     f"Password policy meets CIS requirements "
                     f"in domain {domain}: minimum length {min_length}, "
                     f"strong passwords enforced, reuse disallowed, "
-                    f"enforced at next sign-in, expiration configured."
+                    f"enforced at next sign-in, expiration "
+                    f"{format_duration(policies.password_expiration_duration)}."
                 )
             else:
                 report.status = "FAIL"
diff --git a/prowler/providers/googleworkspace/services/security/security_service.py b/prowler/providers/googleworkspace/services/security/security_service.py
index 96f24061f8..dd0cbff557 100644
--- a/prowler/providers/googleworkspace/services/security/security_service.py
+++ b/prowler/providers/googleworkspace/services/security/security_service.py
@@ -1,9 +1,13 @@
-from typing import Optional
+from typing import List, Optional
 
-from pydantic import BaseModel
+from pydantic import BaseModel, Field
 
 from prowler.lib.logger import logger
-from prowler.providers.googleworkspace.lib.service.service import GoogleWorkspaceService
+from prowler.providers.googleworkspace.lib.service.service import (
+    CUSTOMER_SCOPE,
+    UNKNOWN_SCOPE,
+    GoogleWorkspaceService,
+)
 
 
 class Security(GoogleWorkspaceService):
@@ -18,6 +22,8 @@ class Security(GoogleWorkspaceService):
         super().__init__(provider)
         self.policies = SecurityPolicies()
         self.policies_fetched = False
+        self._overridden = set()
+        self._observed = set()
         self._fetch_security_policies()
 
     def _fetch_security_policies(self):
@@ -48,6 +54,10 @@ class Security(GoogleWorkspaceService):
                 service, 'setting.type.matches("rule.dlp")', fetch_succeeded
             )
 
+            self.policies.overridden_settings = sorted(self._overridden)
+            self.policies.unobserved_settings = sorted(
+                self._overridden - self._observed
+            )
             self.policies_fetched = fetch_succeeded
 
             if fetch_succeeded:
@@ -79,11 +89,18 @@ class Security(GoogleWorkspaceService):
                     response = request.execute()
 
                     for policy in response.get("policies", []):
-                        if not self._is_customer_level_policy(policy):
-                            continue
-
                         setting = policy.get("setting", {})
                         setting_type = setting.get("type", "").removeprefix("settings/")
+
+                        scope = self._policy_scope(policy)
+                        if scope != CUSTOMER_SCOPE:
+                            if scope == UNKNOWN_SCOPE:
+                                self.policies.unresolved_scope = True
+                            elif setting_type:
+                                self._overridden.add(setting_type)
+                            continue
+
+                        self._observed.add(setting_type)
                         value = setting.get("value", {})
 
                         self._process_setting(setting_type, value)
@@ -239,6 +256,17 @@ class Security(GoogleWorkspaceService):
 class SecurityPolicies(BaseModel):
     """Model for domain-level Security policy settings."""
 
+    # Setting types that a group or a sub-OU overrides. Sorted lists rather than
+    # sets: a set reaches the OCSF output as its Python repr, in a different
+    # order on every scan.
+    overridden_settings: List[str] = Field(default_factory=list)
+    # Overridden settings with no domain-wide policy of their own, so the values
+    # below are Prowler's defaults and not something the domain reported.
+    unobserved_settings: List[str] = Field(default_factory=list)
+    # True when a policy's scope could not be determined because the root
+    # organizational unit id is unknown, which blanks the values below.
+    unresolved_scope: bool = False
+
     # security.two_step_verification_enrollment
     two_sv_allow_enrollment: Optional[bool] = None
     # security.two_step_verification_enforcement
diff --git a/tests/providers/googleworkspace/googleworkspace_fixtures.py b/tests/providers/googleworkspace/googleworkspace_fixtures.py
index 72744b6244..96e50ce2e0 100644
--- a/tests/providers/googleworkspace/googleworkspace_fixtures.py
+++ b/tests/providers/googleworkspace/googleworkspace_fixtures.py
@@ -1,5 +1,6 @@
 """Test fixtures for Google Workspace provider tests"""
 
+from typing import Optional
 from unittest.mock import MagicMock
 
 from prowler.providers.googleworkspace.models import (
@@ -81,17 +82,19 @@ ROLE_GROUPS_ADMIN = {
 
 
 def set_mocked_googleworkspace_provider(
-    identity: GoogleWorkspaceIdentityInfo = GoogleWorkspaceIdentityInfo(
+    identity: Optional[GoogleWorkspaceIdentityInfo] = None,
+):
+    provider = MagicMock()
+    provider.type = "googleworkspace"
+    # Built per call: as a default argument every test would share one instance,
+    # and a test mutating it would leak into the rest of the session.
+    provider.identity = identity or GoogleWorkspaceIdentityInfo(
         domain=DOMAIN,
         customer_id=CUSTOMER_ID,
         delegated_user=DELEGATED_USER,
         root_org_unit_id=ROOT_ORG_UNIT_ID,
         profile="default",
-    ),
-):
-    provider = MagicMock()
-    provider.type = "googleworkspace"
-    provider.identity = identity
+    )
     provider.domain_resource = build_googleworkspace_domain_resource()
     return provider
 
diff --git a/tests/providers/googleworkspace/lib/service/googleworkspace_service_test.py b/tests/providers/googleworkspace/lib/service/googleworkspace_service_test.py
index 4581ffa527..5e72d285d8 100644
--- a/tests/providers/googleworkspace/lib/service/googleworkspace_service_test.py
+++ b/tests/providers/googleworkspace/lib/service/googleworkspace_service_test.py
@@ -1,6 +1,13 @@
 from unittest.mock import MagicMock
 
-from prowler.providers.googleworkspace.lib.service.service import GoogleWorkspaceService
+import pytest
+
+from prowler.providers.googleworkspace.lib.service.service import (
+    CUSTOMER_SCOPE,
+    OVERRIDE_SCOPE,
+    UNKNOWN_SCOPE,
+    GoogleWorkspaceService,
+)
 
 ROOT_OU_ID = "03ph8a2z1234"
 
@@ -80,3 +87,41 @@ class TestIsCustomerLevelPolicy:
             )
             is False
         )
+
+
+class TestPolicyScope:
+    @pytest.mark.parametrize(
+        "policy, expected",
+        [
+            ({}, CUSTOMER_SCOPE),
+            ({"policyQuery": {}}, CUSTOMER_SCOPE),
+            ({"policyQuery": None}, CUSTOMER_SCOPE),
+            ({"policyQuery": {"orgUnit": ""}}, CUSTOMER_SCOPE),
+            ({"policyQuery": {"orgUnit": f"orgUnits/{ROOT_OU_ID}"}}, CUSTOMER_SCOPE),
+            ({"policyQuery": {"orgUnit": "orgUnits/sub_ou"}}, OVERRIDE_SCOPE),
+            ({"policyQuery": {"group": "groups/xyz"}}, OVERRIDE_SCOPE),
+            (
+                {"policyQuery": {"group": "groups/xyz", "orgUnit": "orgUnits/sub_ou"}},
+                OVERRIDE_SCOPE,
+            ),
+        ],
+    )
+    def test_scope_with_a_known_root_org_unit(self, policy, expected):
+        assert _make_service()._policy_scope(policy) == expected
+
+    @pytest.mark.parametrize("org_unit", [f"orgUnits/{ROOT_OU_ID}", "orgUnits/sub_ou"])
+    def test_without_the_root_id_an_org_unit_scope_is_unknown(self, org_unit):
+        """The root OU and a sub-OU are indistinguishable, so neither may be assumed"""
+        svc = _make_service(root_org_unit_id=None)
+
+        assert (
+            svc._policy_scope({"policyQuery": {"orgUnit": org_unit}}) == UNKNOWN_SCOPE
+        )
+
+    def test_a_group_is_an_override_even_without_the_root_id(self):
+        svc = _make_service(root_org_unit_id=None)
+
+        assert (
+            svc._policy_scope({"policyQuery": {"group": "groups/xyz"}})
+            == OVERRIDE_SCOPE
+        )
diff --git a/tests/providers/googleworkspace/services/gmail/gmail_domain_spoofing_protection_enabled/gmail_domain_spoofing_protection_enabled_test.py b/tests/providers/googleworkspace/services/gmail/gmail_domain_spoofing_protection_enabled/gmail_domain_spoofing_protection_enabled_test.py
index de18c6d9c6..a87979ee5c 100644
--- a/tests/providers/googleworkspace/services/gmail/gmail_domain_spoofing_protection_enabled/gmail_domain_spoofing_protection_enabled_test.py
+++ b/tests/providers/googleworkspace/services/gmail/gmail_domain_spoofing_protection_enabled/gmail_domain_spoofing_protection_enabled_test.py
@@ -40,6 +40,38 @@ class TestGmailDomainSpoofingProtectionEnabled:
             assert findings[0].resource_name == "Gmail Policies"
             assert findings[0].customer_id == CUSTOMER_ID
 
+    def test_pass_enable_flag_not_returned(self):
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.gmail.gmail_domain_spoofing_protection_enabled.gmail_domain_spoofing_protection_enabled.gmail_client"
+            ) as mock_client,
+        ):
+            from prowler.providers.googleworkspace.services.gmail.gmail_domain_spoofing_protection_enabled.gmail_domain_spoofing_protection_enabled import (
+                gmail_domain_spoofing_protection_enabled,
+            )
+
+            mock_client.provider = mock_provider
+            mock_client.policies_fetched = True
+            mock_client.policies = GmailPolicies(
+                domain_spoofing_consequence="SPAM_FOLDER",
+            )
+
+            check = gmail_domain_spoofing_protection_enabled()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "PASS"
+            assert "uses Google's default (enabled)" in findings[0].status_extended
+            assert "is enabled with action" not in findings[0].status_extended
+            assert findings[0].resource_name == "Gmail Policies"
+            assert findings[0].customer_id == CUSTOMER_ID
+
     def test_fail_no_action(self):
         mock_provider = set_mocked_googleworkspace_provider()
 
@@ -70,6 +102,36 @@ class TestGmailDomainSpoofingProtectionEnabled:
             assert findings[0].status == "FAIL"
             assert "no action" in findings[0].status_extended
 
+    def test_fail_warning_action(self):
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.gmail.gmail_domain_spoofing_protection_enabled.gmail_domain_spoofing_protection_enabled.gmail_client"
+            ) as mock_client,
+        ):
+            from prowler.providers.googleworkspace.services.gmail.gmail_domain_spoofing_protection_enabled.gmail_domain_spoofing_protection_enabled import (
+                gmail_domain_spoofing_protection_enabled,
+            )
+
+            mock_client.provider = mock_provider
+            mock_client.policies_fetched = True
+            mock_client.policies = GmailPolicies(
+                detect_domain_name_spoofing=True,
+                domain_spoofing_consequence="WARNING",
+            )
+
+            check = gmail_domain_spoofing_protection_enabled()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "show a warning" in findings[0].status_extended
+
     def test_fail_protection_disabled(self):
         mock_provider = set_mocked_googleworkspace_provider()
 
@@ -100,7 +162,7 @@ class TestGmailDomainSpoofingProtectionEnabled:
             assert findings[0].status == "FAIL"
             assert "disabled" in findings[0].status_extended
 
-    def test_pass_using_default(self):
+    def test_fail_using_default(self):
         mock_provider = set_mocked_googleworkspace_provider()
 
         with (
@@ -124,8 +186,8 @@ class TestGmailDomainSpoofingProtectionEnabled:
             findings = check.execute()
 
             assert len(findings) == 1
-            assert findings[0].status == "PASS"
-            assert "secure default" in findings[0].status_extended
+            assert findings[0].status == "FAIL"
+            assert "default action" in findings[0].status_extended
 
     def test_no_findings_when_fetch_failed(self):
         mock_provider = set_mocked_googleworkspace_provider()
diff --git a/tests/providers/googleworkspace/services/gmail/gmail_employee_name_spoofing_protection_enabled/gmail_employee_name_spoofing_protection_enabled_test.py b/tests/providers/googleworkspace/services/gmail/gmail_employee_name_spoofing_protection_enabled/gmail_employee_name_spoofing_protection_enabled_test.py
index d30284b852..c4ba415ba7 100644
--- a/tests/providers/googleworkspace/services/gmail/gmail_employee_name_spoofing_protection_enabled/gmail_employee_name_spoofing_protection_enabled_test.py
+++ b/tests/providers/googleworkspace/services/gmail/gmail_employee_name_spoofing_protection_enabled/gmail_employee_name_spoofing_protection_enabled_test.py
@@ -70,6 +70,36 @@ class TestGmailEmployeeNameSpoofingProtectionEnabled:
             assert findings[0].status == "FAIL"
             assert "no action" in findings[0].status_extended
 
+    def test_fail_warning_action(self):
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.gmail.gmail_employee_name_spoofing_protection_enabled.gmail_employee_name_spoofing_protection_enabled.gmail_client"
+            ) as mock_client,
+        ):
+            from prowler.providers.googleworkspace.services.gmail.gmail_employee_name_spoofing_protection_enabled.gmail_employee_name_spoofing_protection_enabled import (
+                gmail_employee_name_spoofing_protection_enabled,
+            )
+
+            mock_client.provider = mock_provider
+            mock_client.policies_fetched = True
+            mock_client.policies = GmailPolicies(
+                detect_employee_name_spoofing=True,
+                employee_name_spoofing_consequence="WARNING",
+            )
+
+            check = gmail_employee_name_spoofing_protection_enabled()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "show a warning" in findings[0].status_extended
+
     def test_fail_protection_disabled(self):
         mock_provider = set_mocked_googleworkspace_provider()
 
@@ -100,7 +130,7 @@ class TestGmailEmployeeNameSpoofingProtectionEnabled:
             assert findings[0].status == "FAIL"
             assert "disabled" in findings[0].status_extended
 
-    def test_pass_using_default(self):
+    def test_fail_using_default(self):
         mock_provider = set_mocked_googleworkspace_provider()
 
         with (
@@ -124,8 +154,8 @@ class TestGmailEmployeeNameSpoofingProtectionEnabled:
             findings = check.execute()
 
             assert len(findings) == 1
-            assert findings[0].status == "PASS"
-            assert "secure default" in findings[0].status_extended
+            assert findings[0].status == "FAIL"
+            assert "default action" in findings[0].status_extended
 
     def test_no_findings_when_fetch_failed(self):
         mock_provider = set_mocked_googleworkspace_provider()
diff --git a/tests/providers/googleworkspace/services/gmail/gmail_groups_spoofing_protection_enabled/gmail_groups_spoofing_protection_enabled_test.py b/tests/providers/googleworkspace/services/gmail/gmail_groups_spoofing_protection_enabled/gmail_groups_spoofing_protection_enabled_test.py
index b06092ebe5..1decd300f2 100644
--- a/tests/providers/googleworkspace/services/gmail/gmail_groups_spoofing_protection_enabled/gmail_groups_spoofing_protection_enabled_test.py
+++ b/tests/providers/googleworkspace/services/gmail/gmail_groups_spoofing_protection_enabled/gmail_groups_spoofing_protection_enabled_test.py
@@ -103,6 +103,36 @@ class TestGmailGroupsSpoofingProtectionEnabled:
             assert findings[0].status == "FAIL"
             assert "no action" in findings[0].status_extended
 
+    def test_fail_warning_action(self):
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.gmail.gmail_groups_spoofing_protection_enabled.gmail_groups_spoofing_protection_enabled.gmail_client"
+            ) as mock_client,
+        ):
+            from prowler.providers.googleworkspace.services.gmail.gmail_groups_spoofing_protection_enabled.gmail_groups_spoofing_protection_enabled import (
+                gmail_groups_spoofing_protection_enabled,
+            )
+
+            mock_client.provider = mock_provider
+            mock_client.policies_fetched = True
+            mock_client.policies = GmailPolicies(
+                detect_groups_spoofing=True,
+                groups_spoofing_consequence="WARNING",
+            )
+
+            check = gmail_groups_spoofing_protection_enabled()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "show a warning" in findings[0].status_extended
+
     def test_fail_protection_disabled(self):
         mock_provider = set_mocked_googleworkspace_provider()
 
diff --git a/tests/providers/googleworkspace/services/gmail/gmail_inbound_domain_spoofing_protection_enabled/gmail_inbound_domain_spoofing_protection_enabled_test.py b/tests/providers/googleworkspace/services/gmail/gmail_inbound_domain_spoofing_protection_enabled/gmail_inbound_domain_spoofing_protection_enabled_test.py
index b319b8fdb1..1677df655c 100644
--- a/tests/providers/googleworkspace/services/gmail/gmail_inbound_domain_spoofing_protection_enabled/gmail_inbound_domain_spoofing_protection_enabled_test.py
+++ b/tests/providers/googleworkspace/services/gmail/gmail_inbound_domain_spoofing_protection_enabled/gmail_inbound_domain_spoofing_protection_enabled_test.py
@@ -70,6 +70,36 @@ class TestGmailInboundDomainSpoofingProtectionEnabled:
             assert findings[0].status == "FAIL"
             assert "no action" in findings[0].status_extended
 
+    def test_fail_warning_action(self):
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.gmail.gmail_inbound_domain_spoofing_protection_enabled.gmail_inbound_domain_spoofing_protection_enabled.gmail_client"
+            ) as mock_client,
+        ):
+            from prowler.providers.googleworkspace.services.gmail.gmail_inbound_domain_spoofing_protection_enabled.gmail_inbound_domain_spoofing_protection_enabled import (
+                gmail_inbound_domain_spoofing_protection_enabled,
+            )
+
+            mock_client.provider = mock_provider
+            mock_client.policies_fetched = True
+            mock_client.policies = GmailPolicies(
+                detect_inbound_domain_spoofing=True,
+                inbound_domain_spoofing_consequence="WARNING",
+            )
+
+            check = gmail_inbound_domain_spoofing_protection_enabled()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "show a warning" in findings[0].status_extended
+
     def test_fail_protection_disabled(self):
         mock_provider = set_mocked_googleworkspace_provider()
 
@@ -100,7 +130,7 @@ class TestGmailInboundDomainSpoofingProtectionEnabled:
             assert findings[0].status == "FAIL"
             assert "disabled" in findings[0].status_extended
 
-    def test_pass_using_default(self):
+    def test_fail_using_default(self):
         mock_provider = set_mocked_googleworkspace_provider()
 
         with (
@@ -124,8 +154,8 @@ class TestGmailInboundDomainSpoofingProtectionEnabled:
             findings = check.execute()
 
             assert len(findings) == 1
-            assert findings[0].status == "PASS"
-            assert "secure default" in findings[0].status_extended
+            assert findings[0].status == "FAIL"
+            assert "default action" in findings[0].status_extended
 
     def test_no_findings_when_fetch_failed(self):
         mock_provider = set_mocked_googleworkspace_provider()
diff --git a/tests/providers/googleworkspace/services/gmail/lib/spoofing_test.py b/tests/providers/googleworkspace/services/gmail/lib/spoofing_test.py
new file mode 100644
index 0000000000..34d14c8de5
--- /dev/null
+++ b/tests/providers/googleworkspace/services/gmail/lib/spoofing_test.py
@@ -0,0 +1,34 @@
+import pytest
+
+from prowler.providers.googleworkspace.services.gmail.lib.spoofing import (
+    PROTECTIVE_CONSEQUENCES,
+    describe_consequence,
+    is_protective,
+)
+
+
+class TestIsProtective:
+    @pytest.mark.parametrize("consequence", sorted(PROTECTIVE_CONSEQUENCES))
+    def test_actions_that_move_the_message_out_of_the_inbox(self, consequence):
+        assert is_protective(consequence) is True
+
+    @pytest.mark.parametrize(
+        "consequence", ["WARNING", "NO_ACTION", None, "", "spam_folder", "UNKNOWN"]
+    )
+    def test_everything_else_is_not_protective(self, consequence):
+        """Anything the benchmark does not accept, including unknown values"""
+        assert is_protective(consequence) is False
+
+
+class TestDescribeConsequence:
+    @pytest.mark.parametrize(
+        "consequence, expected",
+        [
+            (None, "uses Google's default action"),
+            ("NO_ACTION", "is set to take no action"),
+            ("WARNING", "show a warning"),
+            ("SOMETHING_NEW", "is set to 'SOMETHING_NEW'"),
+        ],
+    )
+    def test_renders_for_finding_messages(self, consequence, expected):
+        assert expected in describe_consequence(consequence)
diff --git a/tests/providers/googleworkspace/services/rules/lib/alerts_test.py b/tests/providers/googleworkspace/services/rules/lib/alerts_test.py
new file mode 100644
index 0000000000..886de269c2
--- /dev/null
+++ b/tests/providers/googleworkspace/services/rules/lib/alerts_test.py
@@ -0,0 +1,154 @@
+from pathlib import Path
+from unittest.mock import MagicMock
+
+import pytest
+
+from prowler.lib.check.models import CheckMetadata
+from prowler.providers.googleworkspace.services.rules import rules_service
+from prowler.providers.googleworkspace.services.rules.lib.alerts import (
+    evaluate_system_defined_alert,
+)
+from prowler.providers.googleworkspace.services.rules.rules_service import (
+    SystemDefinedAlert,
+)
+from tests.providers.googleworkspace.googleworkspace_fixtures import (
+    set_mocked_googleworkspace_provider,
+)
+
+RULE_NAME = "Leaked password"
+OTHER_RULE = "Suspicious login"
+
+
+def make_client(alerts, policies_fetched=True):
+    client = MagicMock()
+    client.provider = set_mocked_googleworkspace_provider()
+    client.policies_fetched = policies_fetched
+    client.system_defined_alerts = alerts
+    return client
+
+
+def configured(**overrides):
+    values = dict(
+        display_name=RULE_NAME,
+        state="ACTIVE",
+        severity="MEDIUM",
+        email_notifications_enabled=True,
+        all_super_admins=True,
+    )
+    values.update(overrides)
+    return SystemDefinedAlert(**values)
+
+
+# Real metadata: CheckReportGoogleWorkspace validates it, a mock will not do.
+# Loaded from the file rather than from the check class, whose module import
+# builds the service client and needs a live provider.
+METADATA_FILE = (
+    Path(rules_service.__file__).parent
+    / "rules_leaked_password_alert_configured"
+    / "rules_leaked_password_alert_configured.metadata.json"
+)
+METADATA = CheckMetadata.parse_file(METADATA_FILE).json()
+
+
+def run(alerts, minimum_severity="MEDIUM", policies_fetched=True):
+    return evaluate_system_defined_alert(
+        make_client(alerts, policies_fetched), METADATA, RULE_NAME, minimum_severity
+    )
+
+
+class TestEvaluateSystemDefinedAlert:
+    def test_evaluates_only_the_requested_rule(self):
+        findings = run(
+            [
+                configured(display_name=OTHER_RULE, state="INACTIVE", severity=None),
+                configured(),
+                configured(display_name="Government-backed attacks", severity="HIGH"),
+            ]
+        )
+
+        assert len(findings) == 1
+        assert findings[0].resource_name == RULE_NAME
+        assert findings[0].status == "PASS"
+
+    def test_no_finding_when_the_rule_is_absent(self):
+        assert run([configured(display_name=OTHER_RULE)]) == []
+
+    def test_no_finding_when_fetch_failed(self):
+        assert run([configured()], policies_fetched=False) == []
+
+    @pytest.mark.parametrize("severity", ["MEDIUM", "HIGH"])
+    def test_a_severity_above_the_minimum_is_stricter_not_weaker(self, severity):
+        findings = run([configured(severity=severity)], "MEDIUM")
+
+        assert findings[0].status == "PASS"
+
+    @pytest.mark.parametrize("severity", ["CRITICAL", "high", "SEVERITY_UNSPECIFIED"])
+    def test_an_unrankable_severity_is_not_claimed_to_be_below_the_minimum(
+        self, severity
+    ):
+        """Saying CRITICAL falls short of MEDIUM would be a lie, not a finding"""
+        findings = run([configured(severity=severity)], "MEDIUM")
+
+        assert findings[0].status == "FAIL"
+        assert f"severity is {severity}, which is not one of" in (
+            findings[0].status_extended
+        )
+        assert f"should be at least {severity}" not in findings[0].status_extended
+
+    def test_reports_the_minimum_severity_on_failure(self):
+        findings = run([configured(severity="LOW")], "MEDIUM")
+
+        assert findings[0].status == "FAIL"
+        assert "severity is LOW (should be at least MEDIUM)" in (
+            findings[0].status_extended
+        )
+
+    def test_an_unobserved_rule_left_on_an_active_default_is_manual(self):
+        """Google documents no default severity, so it cannot be verified"""
+        findings = run([configured(severity=None, from_default=True)])
+
+        assert findings[0].status == "MANUAL"
+        assert "was not returned by the API" in findings[0].status_extended
+
+    def test_an_unobserved_rule_that_defaults_to_off_still_fails(self):
+        """The OFF default is documented, so it fails whatever the severity is"""
+        findings = run([configured(state="INACTIVE", severity=None, from_default=True)])
+
+        assert findings[0].status == "FAIL"
+        assert "Google's default for it is OFF" in findings[0].status_extended
+
+    def test_fail_when_the_alert_is_not_sent_to_the_alert_center(self):
+        """An active rule whose alert center delivery is DISABLED is not compliant"""
+        findings = run([configured(alert_center_status="DISABLED")], "MEDIUM")
+
+        assert findings[0].status == "FAIL"
+        assert "not sent to the alert center" in findings[0].status_extended
+
+    def test_pass_when_the_alert_center_status_is_not_reported(self):
+        """The API never returns this field, so its absence cannot fail a rule"""
+        findings = run([configured(alert_center_status=None)], "MEDIUM")
+
+        assert findings[0].status == "PASS"
+
+    def test_a_failing_condition_wins_over_an_unreported_delivery(self):
+        findings = run([configured(severity="LOW", alert_center_status=None)], "MEDIUM")
+
+        assert findings[0].status == "FAIL"
+        assert "severity is LOW" in findings[0].status_extended
+
+    def test_reports_every_failing_condition(self):
+        findings = run(
+            [
+                configured(
+                    state="INACTIVE",
+                    severity="LOW",
+                    email_notifications_enabled=False,
+                )
+            ]
+        )
+
+        extended = findings[0].status_extended
+        assert findings[0].status == "FAIL"
+        assert "alert is OFF" in extended
+        assert "email notifications are disabled" in extended
+        assert "severity is LOW" in extended
diff --git a/tests/providers/googleworkspace/services/rules/rules_admin_privilege_granted_alert_configured/rules_admin_privilege_granted_alert_configured_test.py b/tests/providers/googleworkspace/services/rules/rules_admin_privilege_granted_alert_configured/rules_admin_privilege_granted_alert_configured_test.py
index cf1a6128c4..c3c83fd019 100644
--- a/tests/providers/googleworkspace/services/rules/rules_admin_privilege_granted_alert_configured/rules_admin_privilege_granted_alert_configured_test.py
+++ b/tests/providers/googleworkspace/services/rules/rules_admin_privilege_granted_alert_configured/rules_admin_privilege_granted_alert_configured_test.py
@@ -46,7 +46,79 @@ class TestRulesAdminPrivilegeGrantedAlertConfigured:
 
             assert len(findings) == 1
             assert findings[0].status == "PASS"
-            assert "properly configured" in findings[0].status_extended
+            assert "is properly configured" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_fail_severity_below_the_minimum(self):
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_admin_privilege_granted_alert_configured.rules_admin_privilege_granted_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_admin_privilege_granted_alert_configured.rules_admin_privilege_granted_alert_configured import (
+                rules_admin_privilege_granted_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    severity="LOW",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_admin_privilege_granted_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "severity is LOW" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_fail_severity_not_configured(self):
+        """Test FAIL when the alert is on but no severity is configured."""
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_admin_privilege_granted_alert_configured.rules_admin_privilege_granted_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_admin_privilege_granted_alert_configured.rules_admin_privilege_granted_alert_configured import (
+                rules_admin_privilege_granted_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_admin_privilege_granted_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "severity is not configured" in findings[0].status_extended
             assert findings[0].customer_id == CUSTOMER_ID
 
     def test_fail_alert_off(self):
diff --git a/tests/providers/googleworkspace/services/rules/rules_gmail_employee_spoofing_alert_configured/rules_gmail_employee_spoofing_alert_configured_test.py b/tests/providers/googleworkspace/services/rules/rules_gmail_employee_spoofing_alert_configured/rules_gmail_employee_spoofing_alert_configured_test.py
index f907b2f89e..82ced6a8d1 100644
--- a/tests/providers/googleworkspace/services/rules/rules_gmail_employee_spoofing_alert_configured/rules_gmail_employee_spoofing_alert_configured_test.py
+++ b/tests/providers/googleworkspace/services/rules/rules_gmail_employee_spoofing_alert_configured/rules_gmail_employee_spoofing_alert_configured_test.py
@@ -46,7 +46,79 @@ class TestRulesGmailEmployeeSpoofingAlertConfigured:
 
             assert len(findings) == 1
             assert findings[0].status == "PASS"
-            assert "properly configured" in findings[0].status_extended
+            assert "is properly configured" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_fail_severity_below_the_minimum(self):
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_gmail_employee_spoofing_alert_configured.rules_gmail_employee_spoofing_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_gmail_employee_spoofing_alert_configured.rules_gmail_employee_spoofing_alert_configured import (
+                rules_gmail_employee_spoofing_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    severity="LOW",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_gmail_employee_spoofing_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "severity is LOW" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_fail_severity_not_configured(self):
+        """Test FAIL when the alert is on but no severity is configured."""
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_gmail_employee_spoofing_alert_configured.rules_gmail_employee_spoofing_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_gmail_employee_spoofing_alert_configured.rules_gmail_employee_spoofing_alert_configured import (
+                rules_gmail_employee_spoofing_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_gmail_employee_spoofing_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "severity is not configured" in findings[0].status_extended
             assert findings[0].customer_id == CUSTOMER_ID
 
     def test_fail_alert_off(self):
diff --git a/tests/providers/googleworkspace/services/rules/rules_government_backed_attacks_alert_configured/rules_government_backed_attacks_alert_configured_test.py b/tests/providers/googleworkspace/services/rules/rules_government_backed_attacks_alert_configured/rules_government_backed_attacks_alert_configured_test.py
index 90ec845258..0bc9fd4158 100644
--- a/tests/providers/googleworkspace/services/rules/rules_government_backed_attacks_alert_configured/rules_government_backed_attacks_alert_configured_test.py
+++ b/tests/providers/googleworkspace/services/rules/rules_government_backed_attacks_alert_configured/rules_government_backed_attacks_alert_configured_test.py
@@ -35,7 +35,7 @@ class TestRulesGovernmentBackedAttacksAlertConfigured:
                 SystemDefinedAlert(
                     display_name=RULE_NAME,
                     state="ACTIVE",
-                    severity="MEDIUM",
+                    severity="HIGH",
                     email_notifications_enabled=True,
                     all_super_admins=True,
                 )
@@ -46,7 +46,79 @@ class TestRulesGovernmentBackedAttacksAlertConfigured:
 
             assert len(findings) == 1
             assert findings[0].status == "PASS"
-            assert "properly configured" in findings[0].status_extended
+            assert "is properly configured" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_fail_severity_below_the_minimum(self):
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_government_backed_attacks_alert_configured.rules_government_backed_attacks_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_government_backed_attacks_alert_configured.rules_government_backed_attacks_alert_configured import (
+                rules_government_backed_attacks_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    severity="MEDIUM",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_government_backed_attacks_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "severity is MEDIUM" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_fail_severity_not_configured(self):
+        """Test FAIL when the alert is on but no severity is configured."""
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_government_backed_attacks_alert_configured.rules_government_backed_attacks_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_government_backed_attacks_alert_configured.rules_government_backed_attacks_alert_configured import (
+                rules_government_backed_attacks_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_government_backed_attacks_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "severity is not configured" in findings[0].status_extended
             assert findings[0].customer_id == CUSTOMER_ID
 
     def test_fail_alert_off(self):
@@ -105,7 +177,7 @@ class TestRulesGovernmentBackedAttacksAlertConfigured:
                 SystemDefinedAlert(
                     display_name=RULE_NAME,
                     state="ACTIVE",
-                    severity="MEDIUM",
+                    severity="HIGH",
                     email_notifications_enabled=False,
                     all_super_admins=False,
                 )
@@ -141,7 +213,7 @@ class TestRulesGovernmentBackedAttacksAlertConfigured:
                 SystemDefinedAlert(
                     display_name=RULE_NAME,
                     state="ACTIVE",
-                    severity="MEDIUM",
+                    severity="HIGH",
                     email_notifications_enabled=True,
                     all_super_admins=False,
                 )
diff --git a/tests/providers/googleworkspace/services/rules/rules_leaked_password_alert_configured/rules_leaked_password_alert_configured_test.py b/tests/providers/googleworkspace/services/rules/rules_leaked_password_alert_configured/rules_leaked_password_alert_configured_test.py
index ace6c29d13..450e825309 100644
--- a/tests/providers/googleworkspace/services/rules/rules_leaked_password_alert_configured/rules_leaked_password_alert_configured_test.py
+++ b/tests/providers/googleworkspace/services/rules/rules_leaked_password_alert_configured/rules_leaked_password_alert_configured_test.py
@@ -46,7 +46,116 @@ class TestRulesLeakedPasswordAlertConfigured:
 
             assert len(findings) == 1
             assert findings[0].status == "PASS"
-            assert "properly configured" in findings[0].status_extended
+            assert "is properly configured" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_pass_high_severity(self):
+        """Test PASS with High severity: CIS 6.7 sets High in the remediation and Medium in the audit."""
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_leaked_password_alert_configured.rules_leaked_password_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_leaked_password_alert_configured.rules_leaked_password_alert_configured import (
+                rules_leaked_password_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    severity="HIGH",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_leaked_password_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "PASS"
+            assert "is properly configured" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_fail_severity_below_the_minimum(self):
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_leaked_password_alert_configured.rules_leaked_password_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_leaked_password_alert_configured.rules_leaked_password_alert_configured import (
+                rules_leaked_password_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    severity="LOW",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_leaked_password_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "severity is LOW" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_fail_severity_not_configured(self):
+        """Test FAIL when the alert is on but no severity is configured."""
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_leaked_password_alert_configured.rules_leaked_password_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_leaked_password_alert_configured.rules_leaked_password_alert_configured import (
+                rules_leaked_password_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_leaked_password_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "severity is not configured" in findings[0].status_extended
             assert findings[0].customer_id == CUSTOMER_ID
 
     def test_fail_alert_off(self):
diff --git a/tests/providers/googleworkspace/services/rules/rules_password_changed_alert_configured/rules_password_changed_alert_configured_test.py b/tests/providers/googleworkspace/services/rules/rules_password_changed_alert_configured/rules_password_changed_alert_configured_test.py
index db1b8056e7..9e2bc07c20 100644
--- a/tests/providers/googleworkspace/services/rules/rules_password_changed_alert_configured/rules_password_changed_alert_configured_test.py
+++ b/tests/providers/googleworkspace/services/rules/rules_password_changed_alert_configured/rules_password_changed_alert_configured_test.py
@@ -46,7 +46,79 @@ class TestRulesPasswordChangedAlertConfigured:
 
             assert len(findings) == 1
             assert findings[0].status == "PASS"
-            assert "properly configured" in findings[0].status_extended
+            assert "is properly configured" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_fail_severity_below_the_minimum(self):
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_password_changed_alert_configured.rules_password_changed_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_password_changed_alert_configured.rules_password_changed_alert_configured import (
+                rules_password_changed_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    severity="LOW",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_password_changed_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "severity is LOW" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_fail_severity_not_configured(self):
+        """Test FAIL when the alert is on but no severity is configured."""
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_password_changed_alert_configured.rules_password_changed_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_password_changed_alert_configured.rules_password_changed_alert_configured import (
+                rules_password_changed_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_password_changed_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "severity is not configured" in findings[0].status_extended
             assert findings[0].customer_id == CUSTOMER_ID
 
     def test_fail_alert_off(self):
diff --git a/tests/providers/googleworkspace/services/rules/rules_service_test.py b/tests/providers/googleworkspace/services/rules/rules_service_test.py
index 6368df4bcb..0d0fd39ed4 100644
--- a/tests/providers/googleworkspace/services/rules/rules_service_test.py
+++ b/tests/providers/googleworkspace/services/rules/rules_service_test.py
@@ -1,9 +1,19 @@
+from pathlib import Path
 from unittest.mock import MagicMock, patch
 
+from prowler.lib.check.models import CheckMetadata
+from prowler.providers.googleworkspace.services.rules import rules_service
 from tests.providers.googleworkspace.googleworkspace_fixtures import (
     set_mocked_googleworkspace_provider,
 )
 
+METADATA_FILE = (
+    Path(rules_service.__file__).parent
+    / "rules_government_backed_attacks_alert_configured"
+    / "rules_government_backed_attacks_alert_configured.metadata.json"
+)
+METADATA = CheckMetadata.parse_file(METADATA_FILE).json()
+
 
 class TestRulesService:
     def test_fetch_fully_configured_rule(self):
@@ -28,7 +38,10 @@ class TestRulesService:
                             "action": {
                                 "alertCenterAction": {
                                     "recipients": [{"allSuperAdmins": True}],
-                                    "alertCenterConfig": {"severity": "LOW"},
+                                    "alertCenterConfig": {
+                                        "severity": "LOW",
+                                        "status": "ENABLED",
+                                    },
                                 }
                             },
                             "state": "ACTIVE",
@@ -68,6 +81,7 @@ class TestRulesService:
             assert suspicious_login.email_notifications_enabled is True
             assert suspicious_login.all_super_admins is True
             assert suspicious_login.severity == "LOW"
+            assert suspicious_login.alert_center_status == "ENABLED"
 
     def test_fetch_rule_without_email_notifications(self):
         """Test a rule that is ACTIVE but has no email recipients configured."""
@@ -204,6 +218,114 @@ class TestRulesService:
             assert gov_attacks.email_notifications_enabled is True
             assert gov_attacks.all_super_admins is True
 
+    def test_ou_and_group_scoped_policies_are_skipped(self):
+        """Only the customer-level policy describes the whole domain"""
+        mock_provider = set_mocked_googleworkspace_provider()
+        mock_provider.audit_config = {}
+        mock_provider.fixer_config = {}
+        mock_session = MagicMock()
+        mock_session.credentials = MagicMock()
+        mock_provider.session = mock_session
+
+        def alert_policy(display_name, state, policy_query=None):
+            policy = {
+                "setting": {
+                    "type": "settings/rule.system_defined_alerts",
+                    "value": {"displayName": display_name, "state": state},
+                }
+            }
+            if policy_query:
+                policy["policyQuery"] = policy_query
+            return policy
+
+        mock_service = MagicMock()
+        mock_policies_list = MagicMock()
+        mock_policies_list.execute.return_value = {
+            "policies": [
+                alert_policy("Suspicious login", "ACTIVE"),
+                alert_policy(
+                    "Suspicious login", "INACTIVE", {"orgUnit": "orgUnits/sales_team"}
+                ),
+                alert_policy(
+                    "Leaked password", "INACTIVE", {"group": "groups/contractors"}
+                ),
+            ]
+        }
+        mock_service.policies().list.return_value = mock_policies_list
+        mock_service.policies().list_next.return_value = None
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_service.GoogleWorkspaceService._build_service",
+                return_value=mock_service,
+            ),
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_service import (
+                Rules,
+            )
+
+            rules = Rules(mock_provider)
+
+            by_name = {a.display_name: a for a in rules.system_defined_alerts}
+            assert by_name["Suspicious login"].state == "ACTIVE"
+            assert by_name["Suspicious login"].from_default is False
+            # Only seen in a group-scoped policy, so it falls back to the default.
+            assert by_name["Leaked password"].from_default is True
+
+    def test_empty_response_marks_alerts_as_inferred(self):
+        """A rule the API never returned must not be reported as tenant configuration."""
+        mock_provider = set_mocked_googleworkspace_provider()
+        mock_provider.audit_config = {}
+        mock_provider.fixer_config = {}
+        mock_session = MagicMock()
+        mock_session.credentials = MagicMock()
+        mock_provider.session = mock_session
+
+        mock_service = MagicMock()
+        mock_policies_list = MagicMock()
+        mock_policies_list.execute.return_value = {"policies": []}
+        mock_service.policies().list.return_value = mock_policies_list
+        mock_service.policies().list_next.return_value = None
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_service.GoogleWorkspaceService._build_service",
+                return_value=mock_service,
+            ),
+        ):
+            from prowler.providers.googleworkspace.services.rules.lib.alerts import (
+                evaluate_system_defined_alert,
+            )
+            from prowler.providers.googleworkspace.services.rules.rules_service import (
+                Rules,
+            )
+
+            rules = Rules(mock_provider)
+
+            assert all(alert.from_default for alert in rules.system_defined_alerts)
+
+            # End to end: nothing was observed for a rule that defaults to ON,
+            # so it has to be reviewed by hand instead of blamed on the tenant.
+            client = MagicMock()
+            client.provider = mock_provider
+            client.policies_fetched = True
+            client.system_defined_alerts = rules.system_defined_alerts
+            findings = evaluate_system_defined_alert(
+                client, METADATA, "Government-backed attacks", "HIGH"
+            )
+
+            assert len(findings) == 1
+            assert findings[0].status == "MANUAL"
+            assert "was not returned by the API" in findings[0].status_extended
+
     def test_api_error_sets_policies_fetched_false(self):
         """Test that API errors result in policies_fetched being False."""
         mock_provider = set_mocked_googleworkspace_provider()
diff --git a/tests/providers/googleworkspace/services/rules/rules_suspicious_activity_suspension_alert_configured/rules_suspicious_activity_suspension_alert_configured_test.py b/tests/providers/googleworkspace/services/rules/rules_suspicious_activity_suspension_alert_configured/rules_suspicious_activity_suspension_alert_configured_test.py
index acd60756f0..58b8a273f1 100644
--- a/tests/providers/googleworkspace/services/rules/rules_suspicious_activity_suspension_alert_configured/rules_suspicious_activity_suspension_alert_configured_test.py
+++ b/tests/providers/googleworkspace/services/rules/rules_suspicious_activity_suspension_alert_configured/rules_suspicious_activity_suspension_alert_configured_test.py
@@ -35,7 +35,7 @@ class TestRulesSuspiciousActivitySuspensionAlertConfigured:
                 SystemDefinedAlert(
                     display_name=RULE_NAME,
                     state="ACTIVE",
-                    severity="MEDIUM",
+                    severity="HIGH",
                     email_notifications_enabled=True,
                     all_super_admins=True,
                 )
@@ -46,7 +46,79 @@ class TestRulesSuspiciousActivitySuspensionAlertConfigured:
 
             assert len(findings) == 1
             assert findings[0].status == "PASS"
-            assert "properly configured" in findings[0].status_extended
+            assert "is properly configured" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_fail_severity_below_the_minimum(self):
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_suspicious_activity_suspension_alert_configured.rules_suspicious_activity_suspension_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_suspicious_activity_suspension_alert_configured.rules_suspicious_activity_suspension_alert_configured import (
+                rules_suspicious_activity_suspension_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    severity="LOW",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_suspicious_activity_suspension_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "severity is LOW" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_fail_severity_not_configured(self):
+        """Test FAIL when the alert is on but no severity is configured."""
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_suspicious_activity_suspension_alert_configured.rules_suspicious_activity_suspension_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_suspicious_activity_suspension_alert_configured.rules_suspicious_activity_suspension_alert_configured import (
+                rules_suspicious_activity_suspension_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_suspicious_activity_suspension_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "severity is not configured" in findings[0].status_extended
             assert findings[0].customer_id == CUSTOMER_ID
 
     def test_fail_alert_off(self):
@@ -105,7 +177,7 @@ class TestRulesSuspiciousActivitySuspensionAlertConfigured:
                 SystemDefinedAlert(
                     display_name=RULE_NAME,
                     state="ACTIVE",
-                    severity="MEDIUM",
+                    severity="HIGH",
                     email_notifications_enabled=False,
                     all_super_admins=False,
                 )
@@ -141,7 +213,7 @@ class TestRulesSuspiciousActivitySuspensionAlertConfigured:
                 SystemDefinedAlert(
                     display_name=RULE_NAME,
                     state="ACTIVE",
-                    severity="MEDIUM",
+                    severity="HIGH",
                     email_notifications_enabled=True,
                     all_super_admins=False,
                 )
diff --git a/tests/providers/googleworkspace/services/rules/rules_suspicious_login_alert_configured/rules_suspicious_login_alert_configured_test.py b/tests/providers/googleworkspace/services/rules/rules_suspicious_login_alert_configured/rules_suspicious_login_alert_configured_test.py
index aab70797dc..1c6f568421 100644
--- a/tests/providers/googleworkspace/services/rules/rules_suspicious_login_alert_configured/rules_suspicious_login_alert_configured_test.py
+++ b/tests/providers/googleworkspace/services/rules/rules_suspicious_login_alert_configured/rules_suspicious_login_alert_configured_test.py
@@ -16,6 +16,42 @@ class TestRulesSuspiciousLoginAlertConfigured:
         """Test PASS when alert is ON, email notifications ON, recipients = all super admins."""
         mock_provider = set_mocked_googleworkspace_provider()
 
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_suspicious_login_alert_configured.rules_suspicious_login_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_suspicious_login_alert_configured.rules_suspicious_login_alert_configured import (
+                rules_suspicious_login_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    severity="LOW",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_suspicious_login_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "PASS"
+            assert "is properly configured" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_pass_severity_above_the_minimum(self):
+        mock_provider = set_mocked_googleworkspace_provider()
+
         with (
             patch(
                 "prowler.providers.common.provider.Provider.get_global_provider",
@@ -46,7 +82,43 @@ class TestRulesSuspiciousLoginAlertConfigured:
 
             assert len(findings) == 1
             assert findings[0].status == "PASS"
-            assert "properly configured" in findings[0].status_extended
+            assert "is properly configured" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_fail_severity_not_configured(self):
+        """Test FAIL when the alert is on but no severity is configured."""
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_suspicious_login_alert_configured.rules_suspicious_login_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_suspicious_login_alert_configured.rules_suspicious_login_alert_configured import (
+                rules_suspicious_login_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_suspicious_login_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "severity is not configured" in findings[0].status_extended
             assert findings[0].customer_id == CUSTOMER_ID
 
     def test_fail_alert_off(self):
@@ -105,7 +177,7 @@ class TestRulesSuspiciousLoginAlertConfigured:
                 SystemDefinedAlert(
                     display_name=RULE_NAME,
                     state="ACTIVE",
-                    severity="MEDIUM",
+                    severity="LOW",
                     email_notifications_enabled=False,
                     all_super_admins=False,
                 )
@@ -141,7 +213,7 @@ class TestRulesSuspiciousLoginAlertConfigured:
                 SystemDefinedAlert(
                     display_name=RULE_NAME,
                     state="ACTIVE",
-                    severity="MEDIUM",
+                    severity="LOW",
                     email_notifications_enabled=True,
                     all_super_admins=False,
                 )
diff --git a/tests/providers/googleworkspace/services/rules/rules_suspicious_programmatic_login_alert_configured/rules_suspicious_programmatic_login_alert_configured_test.py b/tests/providers/googleworkspace/services/rules/rules_suspicious_programmatic_login_alert_configured/rules_suspicious_programmatic_login_alert_configured_test.py
index f1596ace67..35c51dbd59 100644
--- a/tests/providers/googleworkspace/services/rules/rules_suspicious_programmatic_login_alert_configured/rules_suspicious_programmatic_login_alert_configured_test.py
+++ b/tests/providers/googleworkspace/services/rules/rules_suspicious_programmatic_login_alert_configured/rules_suspicious_programmatic_login_alert_configured_test.py
@@ -35,7 +35,7 @@ class TestRulesSuspiciousProgrammaticLoginAlertConfigured:
                 SystemDefinedAlert(
                     display_name=RULE_NAME,
                     state="ACTIVE",
-                    severity="MEDIUM",
+                    severity="LOW",
                     email_notifications_enabled=True,
                     all_super_admins=True,
                 )
@@ -46,7 +46,79 @@ class TestRulesSuspiciousProgrammaticLoginAlertConfigured:
 
             assert len(findings) == 1
             assert findings[0].status == "PASS"
-            assert "properly configured" in findings[0].status_extended
+            assert "is properly configured" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_pass_severity_above_the_minimum(self):
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_suspicious_programmatic_login_alert_configured.rules_suspicious_programmatic_login_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_suspicious_programmatic_login_alert_configured.rules_suspicious_programmatic_login_alert_configured import (
+                rules_suspicious_programmatic_login_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    severity="HIGH",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_suspicious_programmatic_login_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "PASS"
+            assert "is properly configured" in findings[0].status_extended
+            assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_fail_severity_not_configured(self):
+        """Test FAIL when the alert is on but no severity is configured."""
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.rules.rules_suspicious_programmatic_login_alert_configured.rules_suspicious_programmatic_login_alert_configured.rules_client"
+            ) as mock_rules_client,
+        ):
+            from prowler.providers.googleworkspace.services.rules.rules_suspicious_programmatic_login_alert_configured.rules_suspicious_programmatic_login_alert_configured import (
+                rules_suspicious_programmatic_login_alert_configured,
+            )
+
+            mock_rules_client.provider = mock_provider
+            mock_rules_client.policies_fetched = True
+            mock_rules_client.system_defined_alerts = [
+                SystemDefinedAlert(
+                    display_name=RULE_NAME,
+                    state="ACTIVE",
+                    email_notifications_enabled=True,
+                    all_super_admins=True,
+                )
+            ]
+
+            check = rules_suspicious_programmatic_login_alert_configured()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "severity is not configured" in findings[0].status_extended
             assert findings[0].customer_id == CUSTOMER_ID
 
     def test_fail_alert_off(self):
@@ -105,7 +177,7 @@ class TestRulesSuspiciousProgrammaticLoginAlertConfigured:
                 SystemDefinedAlert(
                     display_name=RULE_NAME,
                     state="ACTIVE",
-                    severity="MEDIUM",
+                    severity="LOW",
                     email_notifications_enabled=False,
                     all_super_admins=False,
                 )
@@ -141,7 +213,7 @@ class TestRulesSuspiciousProgrammaticLoginAlertConfigured:
                 SystemDefinedAlert(
                     display_name=RULE_NAME,
                     state="ACTIVE",
-                    severity="MEDIUM",
+                    severity="LOW",
                     email_notifications_enabled=True,
                     all_super_admins=False,
                 )
diff --git a/tests/providers/googleworkspace/services/security/googleworkspace_security_service_test.py b/tests/providers/googleworkspace/services/security/googleworkspace_security_service_test.py
index 13335e22cb..e17614de0d 100644
--- a/tests/providers/googleworkspace/services/security/googleworkspace_security_service_test.py
+++ b/tests/providers/googleworkspace/services/security/googleworkspace_security_service_test.py
@@ -1,6 +1,9 @@
 from unittest.mock import MagicMock, patch
 
+import pytest
+
 from tests.providers.googleworkspace.googleworkspace_fixtures import (
+    ROOT_ORG_UNIT_ID,
     set_mocked_googleworkspace_provider,
 )
 
@@ -280,6 +283,141 @@ class TestSecurityService:
             assert security.policies.trust_internal_apps is None
             assert security.policies.dlp_drive_rules_exist is None
 
+    def test_group_and_sub_ou_policies_are_recorded_as_overrides(self):
+        """The customer-level value is not what the overridden users get"""
+        mock_provider = set_mocked_googleworkspace_provider()
+        mock_provider.audit_config = {}
+        mock_provider.fixer_config = {}
+        mock_session = MagicMock()
+        mock_session.credentials = MagicMock()
+        mock_provider.session = mock_session
+
+        mock_service = MagicMock()
+        mock_empty = MagicMock()
+        mock_empty.execute.return_value = {
+            "policies": [
+                {
+                    "policyQuery": {"group": "groups/abc123"},
+                    "setting": {
+                        "type": "settings/security.two_step_verification_enforcement",
+                        "value": {"enforcedFrom": "1970-01-01T00:00:00Z"},
+                    },
+                },
+                {
+                    "policyQuery": {"orgUnit": "orgUnits/03ph8a2z1xdnme9"},
+                    "setting": {
+                        "type": "settings/security.two_step_verification_enforcement_factor",
+                        "value": {"allowedSignInFactorSet": "ALL"},
+                    },
+                },
+                {
+                    "setting": {
+                        "type": "settings/security.two_step_verification_enforcement",
+                        "value": {"enforcedFrom": "2026-05-25T15:27:52.352Z"},
+                    }
+                },
+            ]
+        }
+        mock_service.policies().list.side_effect = [
+            mock_empty,
+            mock_empty,
+            mock_empty,
+        ]
+        mock_service.policies().list_next.return_value = None
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.security.security_service.GoogleWorkspaceService._build_service",
+                return_value=mock_service,
+            ),
+        ):
+            from prowler.providers.googleworkspace.services.security.security_service import (
+                Security,
+            )
+
+            security = Security(mock_provider)
+
+            assert security.policies.overridden_settings == [
+                "security.two_step_verification_enforcement",
+                "security.two_step_verification_enforcement_factor",
+            ]
+            assert security.policies.unresolved_scope is False
+            # The customer-level policy is still read, it is just not effective
+            # for everyone.
+            assert security.policies.two_sv_enforced_from == "2026-05-25T15:27:52.352Z"
+
+    @pytest.mark.parametrize(
+        "root_org_unit_id, org_unit, expected_enforced_from, expected_unresolved",
+        [
+            # The root OU is the whole domain: read it, do not call it an override.
+            (
+                ROOT_ORG_UNIT_ID,
+                f"orgUnits/{ROOT_ORG_UNIT_ID}",
+                "2026-05-25T15:27:52.352Z",
+                False,
+            ),
+            # Without the root id a sub-OU cannot be told apart from the root, so
+            # the value is dropped and the scope is flagged as unresolved.
+            (None, "orgUnits/03ph8a2z1xdnme9", None, True),
+        ],
+    )
+    def test_an_org_unit_is_never_reported_as_an_override(
+        self, root_org_unit_id, org_unit, expected_enforced_from, expected_unresolved
+    ):
+        mock_provider = set_mocked_googleworkspace_provider()
+        mock_provider.audit_config = {}
+        mock_provider.fixer_config = {}
+        mock_provider.identity = mock_provider.identity.copy(
+            update={"root_org_unit_id": root_org_unit_id}
+        )
+        mock_session = MagicMock()
+        mock_session.credentials = MagicMock()
+        mock_provider.session = mock_session
+
+        mock_service = MagicMock()
+        mock_policies = MagicMock()
+        mock_policies.execute.return_value = {
+            "policies": [
+                {
+                    "policyQuery": {"orgUnit": org_unit},
+                    "setting": {
+                        "type": "settings/security.two_step_verification_enforcement",
+                        "value": {"enforcedFrom": "2026-05-25T15:27:52.352Z"},
+                    },
+                }
+            ]
+        }
+        mock_service.policies().list.side_effect = [
+            mock_policies,
+            mock_policies,
+            mock_policies,
+        ]
+        mock_service.policies().list_next.return_value = None
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.security.security_service.GoogleWorkspaceService._build_service",
+                return_value=mock_service,
+            ),
+        ):
+            from prowler.providers.googleworkspace.services.security.security_service import (
+                Security,
+            )
+
+            security = Security(mock_provider)
+
+            assert security.policies.overridden_settings == []
+            assert security.policies.two_sv_enforced_from == expected_enforced_from
+            assert security.policies.unresolved_scope is expected_unresolved
+
     def test_fetch_policies_api_error(self):
         """Test handling of API errors during policy fetch"""
         mock_provider = set_mocked_googleworkspace_provider()
diff --git a/tests/providers/googleworkspace/services/security/lib/durations_test.py b/tests/providers/googleworkspace/services/security/lib/durations_test.py
new file mode 100644
index 0000000000..7e1a6d3038
--- /dev/null
+++ b/tests/providers/googleworkspace/services/security/lib/durations_test.py
@@ -0,0 +1,97 @@
+from datetime import datetime, timezone
+
+import pytest
+
+from prowler.providers.googleworkspace.services.security.lib.durations import (
+    ONE_DAY_SECONDS,
+    ONE_YEAR_SECONDS,
+    TWO_WEEKS_SECONDS,
+    enforcement_issue,
+    format_duration,
+    parse_duration_seconds,
+)
+
+
+class TestParseDurationSeconds:
+    @pytest.mark.parametrize(
+        "value, expected",
+        [
+            ("0s", 0),
+            ("86400s", ONE_DAY_SECONDS),
+            ("1209600s", TWO_WEEKS_SECONDS),
+            ("31536000s", ONE_YEAR_SECONDS),
+            ("86400.9s", ONE_DAY_SECONDS),
+            (" 86400s ", ONE_DAY_SECONDS),
+        ],
+    )
+    def test_parses_protobuf_durations(self, value, expected):
+        assert parse_duration_seconds(value) == expected
+
+    @pytest.mark.parametrize(
+        "value",
+        [None, "", "86400", "28d", "P30D", "-3600s", "1e5s", "abc", 86400],
+    )
+    def test_returns_none_for_anything_it_cannot_read(self, value):
+        """Callers must be able to tell a real length from an unreadable value"""
+        assert parse_duration_seconds(value) is None
+
+
+class TestFormatDuration:
+    @pytest.mark.parametrize(
+        "value, expected",
+        [
+            ("0s", "none"),
+            ("86400s", "1 day(s)"),
+            ("1209600s", "14 day(s)"),
+            ("31536000s", "365 day(s)"),
+            ("3600s", "1 hour(s)"),
+            ("129600s", "36 hour(s)"),
+            ("5400s", "5400 second(s)"),
+            (None, "not configured"),
+            ("28d", "not configured"),
+        ],
+    )
+    def test_renders_for_finding_messages(self, value, expected):
+        assert format_duration(value) == expected
+
+
+class TestEnforcementIssue:
+    NOW = datetime(2026, 8, 25, 12, 0, 0, tzinfo=timezone.utc)
+
+    @pytest.mark.parametrize(
+        "value", ["2026-05-25T15:27:52.352Z", "2026-08-25T11:59:59Z"]
+    )
+    def test_no_issue_once_enforcement_has_started(self, value):
+        assert enforcement_issue(value, now=self.NOW) is None
+
+    def test_naive_timestamp_is_read_as_utc(self):
+        assert enforcement_issue("2026-01-01T00:00:00", now=self.NOW) is None
+
+    @pytest.mark.parametrize("value", [None, ""])
+    def test_missing_value_defaults_to_off(self, value):
+        assert (
+            enforcement_issue(value, now=self.NOW)
+            == "enforcement is not configured and defaults to OFF"
+        )
+
+    @pytest.mark.parametrize(
+        "value", ["1970-01-01T00:00:00Z", "1970-01-01T00:00:00.000000000Z"]
+    )
+    def test_zero_value_timestamp_is_off(self, value):
+        """The API reports OFF as the protobuf zero-value Timestamp"""
+        assert enforcement_issue(value, now=self.NOW) == "enforcement is set to OFF"
+
+    @pytest.mark.parametrize(
+        "value", ["2099-01-01T00:00:00Z", "2026-12-31T23:59:59+00:00"]
+    )
+    def test_future_start_date_means_nobody_is_enforced_yet(self, value):
+        assert (
+            enforcement_issue(value, now=self.NOW)
+            == f"enforcement does not start until {value}"
+        )
+
+    def test_unreadable_timestamp_is_reported_instead_of_assumed_active(self):
+        assert (
+            enforcement_issue("not-a-date", now=self.NOW)
+            == "the enforcement start date 'not-a-date' could not be read"
+        )
diff --git a/tests/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced_test.py b/tests/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced_test.py
index a6d6a549a9..1da5b1bcc8 100644
--- a/tests/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced_test.py
+++ b/tests/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced_test.py
@@ -1,5 +1,7 @@
 from unittest.mock import patch
 
+import pytest
+
 from prowler.providers.googleworkspace.services.security.security_service import (
     SecurityPolicies,
 )
@@ -8,149 +10,264 @@ from tests.providers.googleworkspace.googleworkspace_fixtures import (
     set_mocked_googleworkspace_provider,
 )
 
+CHECK_CLIENT = (
+    "prowler.providers.googleworkspace.services.security."
+    "security_2sv_enforced.security_2sv_enforced.security_client"
+)
+
+# A domain that satisfies every step of the CIS audit procedure.
+COMPLIANT = dict(
+    two_sv_enforced_from="2026-05-25T15:27:52.352Z",
+    two_sv_allow_enrollment=True,
+    two_sv_enrollment_grace_period="1209600s",
+    two_sv_allow_trusting_device=False,
+    # Security keys exclude verification codes via text and phone call.
+    two_sv_allowed_factor_set="PASSKEY_ONLY",
+)
+
+
+def run_check(policies_fetched=True, **overrides):
+    mock_provider = set_mocked_googleworkspace_provider()
+
+    with (
+        patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=mock_provider,
+        ),
+        patch(CHECK_CLIENT) as mock_client,
+    ):
+        from prowler.providers.googleworkspace.services.security.security_2sv_enforced.security_2sv_enforced import (
+            security_2sv_enforced,
+        )
+
+        mock_client.provider = mock_provider
+        mock_client.policies_fetched = policies_fetched
+        mock_client.policies = SecurityPolicies(**overrides)
+
+        return security_2sv_enforced().execute()
+
 
 class TestSecurity2svEnforced:
-    def test_pass_2sv_enforced(self):
-        """Test PASS when 2-Step Verification enforcement is active"""
-        mock_provider = set_mocked_googleworkspace_provider()
+    def test_pass_full_audit_procedure_met(self):
+        """PASS when every step of the CIS audit procedure is satisfied"""
+        findings = run_check(**COMPLIANT)
 
-        with (
-            patch(
-                "prowler.providers.common.provider.Provider.get_global_provider",
-                return_value=mock_provider,
+        assert len(findings) == 1
+        assert findings[0].status == "PASS"
+        assert "is enforced" in findings[0].status_extended
+        assert findings[0].resource_name == "Security Policies"
+        assert findings[0].resource_id == "securityPolicies"
+        assert findings[0].customer_id == CUSTOMER_ID
+
+    @pytest.mark.parametrize(
+        "factor_set", ["NO_TELEPHONY", "PASSKEY_ONLY", "PASSKEY_PLUS_SECURITY_CODE"]
+    )
+    def test_pass_any_method_that_excludes_telephony(self, factor_set):
+        """CIS asks for any method except verification codes via text or phone call"""
+        findings = run_check(**{**COMPLIANT, "two_sv_allowed_factor_set": factor_set})
+
+        assert len(findings) == 1
+        assert findings[0].status == "PASS"
+
+    def test_pass_no_enrollment_period(self):
+        """PASS when there is no enrollment period, which is stricter than 2 weeks"""
+        findings = run_check(**{**COMPLIANT, "two_sv_enrollment_grace_period": "0s"})
+
+        assert len(findings) == 1
+        assert findings[0].status == "PASS"
+
+    @pytest.mark.parametrize(
+        "overrides, expected",
+        [
+            ({"two_sv_enforced_from": None}, "not configured"),
+            ({"two_sv_enforced_from": ""}, "not configured"),
+            ({"two_sv_enforced_from": "1970-01-01T00:00:00Z"}, "OFF"),
+            ({"two_sv_allow_enrollment": False}, "not allowed to turn on"),
+            (
+                {"two_sv_enrollment_grace_period": "2592000s"},
+                "enrollment period is 30 day(s)",
             ),
-            patch(
-                "prowler.providers.googleworkspace.services.security.security_2sv_enforced.security_2sv_enforced.security_client"
-            ) as mock_client,
-        ):
-            from prowler.providers.googleworkspace.services.security.security_2sv_enforced.security_2sv_enforced import (
-                security_2sv_enforced,
-            )
-
-            mock_client.provider = mock_provider
-            mock_client.policies_fetched = True
-            mock_client.policies = SecurityPolicies(
-                two_sv_enforced_from="2026-05-25T15:27:52.352Z"
-            )
-
-            check = security_2sv_enforced()
-            findings = check.execute()
-
-            assert len(findings) == 1
-            assert findings[0].status == "PASS"
-            assert "active" in findings[0].status_extended
-            assert findings[0].resource_name == "Security Policies"
-            assert findings[0].resource_id == "securityPolicies"
-            assert findings[0].customer_id == CUSTOMER_ID
-
-    def test_fail_none_not_configured(self):
-        """Test FAIL when 2-Step Verification enforcement is not configured (None)"""
-        mock_provider = set_mocked_googleworkspace_provider()
-
-        with (
-            patch(
-                "prowler.providers.common.provider.Provider.get_global_provider",
-                return_value=mock_provider,
+            ({"two_sv_allow_trusting_device": True}, "trust their device"),
+            (
+                {"two_sv_allow_trusting_device": None},
+                "device trust is not configured",
             ),
-            patch(
-                "prowler.providers.googleworkspace.services.security.security_2sv_enforced.security_2sv_enforced.security_client"
-            ) as mock_client,
-        ):
-            from prowler.providers.googleworkspace.services.security.security_2sv_enforced.security_2sv_enforced import (
-                security_2sv_enforced,
-            )
-
-            mock_client.provider = mock_provider
-            mock_client.policies_fetched = True
-            mock_client.policies = SecurityPolicies(two_sv_enforced_from=None)
-
-            check = security_2sv_enforced()
-            findings = check.execute()
-
-            assert len(findings) == 1
-            assert findings[0].status == "FAIL"
-            assert "not configured" in findings[0].status_extended
-
-    def test_fail_empty_off(self):
-        """Test FAIL when 2-Step Verification enforcement is set to OFF (empty string)"""
-        mock_provider = set_mocked_googleworkspace_provider()
-
-        with (
-            patch(
-                "prowler.providers.common.provider.Provider.get_global_provider",
-                return_value=mock_provider,
+            (
+                {"two_sv_enforced_from": "2099-01-01T00:00:00Z"},
+                "enforcement does not start until 2099-01-01T00:00:00Z",
             ),
-            patch(
-                "prowler.providers.googleworkspace.services.security.security_2sv_enforced.security_2sv_enforced.security_client"
-            ) as mock_client,
-        ):
-            from prowler.providers.googleworkspace.services.security.security_2sv_enforced.security_2sv_enforced import (
-                security_2sv_enforced,
-            )
-
-            mock_client.provider = mock_provider
-            mock_client.policies_fetched = True
-            mock_client.policies = SecurityPolicies(two_sv_enforced_from="")
-
-            check = security_2sv_enforced()
-            findings = check.execute()
-
-            assert len(findings) == 1
-            assert findings[0].status == "FAIL"
-            assert "OFF" in findings[0].status_extended
-
-    def test_fail_epoch_enforcement_off(self):
-        """Test FAIL when API returns epoch zero timestamp (enforcement OFF)"""
-        mock_provider = set_mocked_googleworkspace_provider()
-
-        with (
-            patch(
-                "prowler.providers.common.provider.Provider.get_global_provider",
-                return_value=mock_provider,
+            (
+                {"two_sv_enforced_from": "not-a-date"},
+                "enforcement start date 'not-a-date' could not be read",
             ),
-            patch(
-                "prowler.providers.googleworkspace.services.security.security_2sv_enforced.security_2sv_enforced.security_client"
-            ) as mock_client,
-        ):
-            from prowler.providers.googleworkspace.services.security.security_2sv_enforced.security_2sv_enforced import (
-                security_2sv_enforced,
-            )
+            (
+                {"two_sv_enrollment_grace_period": "28d"},
+                "enrollment period '28d' could not be read",
+            ),
+            (
+                {"two_sv_allowed_factor_set": "ALL"},
+                "the allowed methods are ALL",
+            ),
+            (
+                {"two_sv_allowed_factor_set": "SOME_FUTURE_ENUM"},
+                "the allowed methods are SOME_FUTURE_ENUM",
+            ),
+            (
+                {"two_sv_allowed_factor_set": None},
+                "allowed methods are not configured",
+            ),
+        ],
+    )
+    def test_fail_each_audit_step(self, overrides, expected):
+        """FAIL when any single step of the CIS audit procedure is not met"""
+        findings = run_check(**{**COMPLIANT, **overrides})
 
-            mock_client.provider = mock_provider
-            mock_client.policies_fetched = True
-            mock_client.policies = SecurityPolicies(
-                two_sv_enforced_from="1970-01-01T00:00:00Z"
-            )
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+        assert expected in findings[0].status_extended
 
-            check = security_2sv_enforced()
-            findings = check.execute()
+    def test_fail_reports_every_issue(self):
+        """A domain left on Google's defaults reports all the failing steps"""
+        findings = run_check(two_sv_enforced_from=None)
 
-            assert len(findings) == 1
-            assert findings[0].status == "FAIL"
-            assert "OFF" in findings[0].status_extended
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+        assert "enforcement is not configured" in findings[0].status_extended
+        assert "device trust is not configured" in findings[0].status_extended
+        assert "allowed methods are not configured" in findings[0].status_extended
+
+    def test_manual_when_a_group_or_sub_ou_overrides_a_passing_policy(self):
+        """A passing domain-wide policy cannot be confirmed for the overridden users"""
+        findings = run_check(
+            **{
+                **COMPLIANT,
+                "overridden_settings": {"security.two_step_verification_enforcement"},
+            }
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "MANUAL"
+        assert "security.two_step_verification_enforcement is also overridden" in (
+            findings[0].status_extended
+        )
+
+    def test_a_domain_wide_failure_is_reported_even_with_an_override(self):
+        """Whoever no override reaches still gets the failing domain-wide policy"""
+        findings = run_check(
+            **{
+                **COMPLIANT,
+                "two_sv_enforced_from": None,
+                "overridden_settings": {
+                    "security.two_step_verification_enforcement_factor"
+                },
+            }
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+        assert "enforcement is not configured" in findings[0].status_extended
+
+    def test_manual_when_several_settings_are_overridden(self):
+        findings = run_check(
+            **{
+                **COMPLIANT,
+                "overridden_settings": [
+                    "security.two_step_verification_device_trust",
+                    "security.two_step_verification_enforcement",
+                ],
+            }
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "MANUAL"
+        assert (
+            "security.two_step_verification_device_trust, "
+            "security.two_step_verification_enforcement are also overridden"
+        ) in findings[0].status_extended
+
+    def test_manual_when_a_setting_only_exists_below_the_domain(self):
+        """No domain-wide value was reported, so the defaults would fabricate issues"""
+        findings = run_check(
+            **{
+                **COMPLIANT,
+                "two_sv_enforced_from": None,
+                "overridden_settings": ["security.two_step_verification_enforcement"],
+                "unobserved_settings": ["security.two_step_verification_enforcement"],
+            }
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "MANUAL"
+        assert "no domain-wide value was reported" in findings[0].status_extended
+
+    def test_manual_when_the_policy_scope_could_not_be_resolved(self):
+        """Every value was dropped, so none of them can be judged"""
+        findings = run_check(**{**COMPLIANT, "unresolved_scope": True})
+
+        assert len(findings) == 1
+        assert findings[0].status == "MANUAL"
+        assert "root organizational unit could not be resolved" in (
+            findings[0].status_extended
+        )
+
+    def test_a_failure_keeps_the_override_caveat(self):
+        findings = run_check(
+            **{
+                **COMPLIANT,
+                "two_sv_allow_trusting_device": True,
+                "overridden_settings": ["security.two_step_verification_enforcement"],
+            }
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+        assert "trust their device" in findings[0].status_extended
+        assert "also overridden" in findings[0].status_extended
+
+    def test_manual_when_every_failing_setting_is_overridden(self):
+        """The overriding value is not exposed, so the failure is unconfirmed"""
+        findings = run_check(
+            **{
+                **COMPLIANT,
+                "two_sv_allow_trusting_device": True,
+                "overridden_settings": ["security.two_step_verification_device_trust"],
+            }
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "MANUAL"
+        assert "trust their device" in findings[0].status_extended
+        assert "every failing setting is also overridden" in (
+            findings[0].status_extended
+        )
+
+    def test_fail_when_only_some_failing_settings_are_overridden(self):
+        """A failure no override reaches is still proven for the whole domain"""
+        findings = run_check(
+            **{
+                **COMPLIANT,
+                "two_sv_allow_trusting_device": True,
+                "two_sv_allowed_factor_set": "ALL",
+                "overridden_settings": ["security.two_step_verification_device_trust"],
+            }
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+        assert "the allowed methods are ALL" in findings[0].status_extended
+
+    def test_an_override_on_a_setting_this_check_ignores_does_not_apply(self):
+        """The sign-in code setting belongs to 4.1.1.2, not to 4.1.1.1 or 4.1.1.3"""
+        findings = run_check(
+            **{
+                **COMPLIANT,
+                "overridden_settings": {"security.two_step_verification_sign_in_code"},
+            }
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "PASS"
 
     def test_no_findings_when_fetch_failed(self):
-        """Test no findings returned when the API fetch failed"""
-        mock_provider = set_mocked_googleworkspace_provider()
-
-        with (
-            patch(
-                "prowler.providers.common.provider.Provider.get_global_provider",
-                return_value=mock_provider,
-            ),
-            patch(
-                "prowler.providers.googleworkspace.services.security.security_2sv_enforced.security_2sv_enforced.security_client"
-            ) as mock_client,
-        ):
-            from prowler.providers.googleworkspace.services.security.security_2sv_enforced.security_2sv_enforced import (
-                security_2sv_enforced,
-            )
-
-            mock_client.provider = mock_provider
-            mock_client.policies_fetched = False
-            mock_client.policies = SecurityPolicies()
-
-            check = security_2sv_enforced()
-            findings = check.execute()
-
-            assert len(findings) == 0
+        """No findings returned when the API fetch failed"""
+        assert run_check(policies_fetched=False) == []
diff --git a/tests/providers/googleworkspace/services/security/security_2sv_hardware_keys_admins/security_2sv_hardware_keys_admins_test.py b/tests/providers/googleworkspace/services/security/security_2sv_hardware_keys_admins/security_2sv_hardware_keys_admins_test.py
index 522164f341..6fa4de8157 100644
--- a/tests/providers/googleworkspace/services/security/security_2sv_hardware_keys_admins/security_2sv_hardware_keys_admins_test.py
+++ b/tests/providers/googleworkspace/services/security/security_2sv_hardware_keys_admins/security_2sv_hardware_keys_admins_test.py
@@ -1,5 +1,7 @@
 from unittest.mock import patch
 
+import pytest
+
 from prowler.providers.googleworkspace.services.security.security_service import (
     SecurityPolicies,
 )
@@ -8,119 +10,259 @@ from tests.providers.googleworkspace.googleworkspace_fixtures import (
     set_mocked_googleworkspace_provider,
 )
 
+CHECK_CLIENT = (
+    "prowler.providers.googleworkspace.services.security."
+    "security_2sv_hardware_keys_admins.security_2sv_hardware_keys_admins."
+    "security_client"
+)
+
+# A domain that satisfies every step of the CIS audit procedure.
+COMPLIANT = dict(
+    two_sv_allowed_factor_set="PASSKEY_ONLY",
+    two_sv_enforced_from="2026-05-25T15:27:52.352Z",
+    two_sv_allow_enrollment=True,
+    two_sv_backup_code_exception_period="86400s",
+)
+
+
+def run_check(policies_fetched=True, **overrides):
+    mock_provider = set_mocked_googleworkspace_provider()
+
+    with (
+        patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=mock_provider,
+        ),
+        patch(CHECK_CLIENT) as mock_client,
+    ):
+        from prowler.providers.googleworkspace.services.security.security_2sv_hardware_keys_admins.security_2sv_hardware_keys_admins import (
+            security_2sv_hardware_keys_admins,
+        )
+
+        mock_client.provider = mock_provider
+        mock_client.policies_fetched = policies_fetched
+        mock_client.policies = SecurityPolicies(**overrides)
+
+        return security_2sv_hardware_keys_admins().execute()
+
 
 class TestSecurity2svHardwareKeysAdmins:
-    def test_pass_passkey_only(self):
-        """Test PASS when 2SV enforcement requires security keys only"""
-        mock_provider = set_mocked_googleworkspace_provider()
+    def test_pass_full_audit_procedure_met(self):
+        """PASS when every step of the CIS audit procedure is satisfied"""
+        findings = run_check(**COMPLIANT)
 
-        with (
-            patch(
-                "prowler.providers.common.provider.Provider.get_global_provider",
-                return_value=mock_provider,
+        assert len(findings) == 1
+        assert findings[0].status == "PASS"
+        assert "requires security keys only" in findings[0].status_extended
+        assert findings[0].resource_name == "Security Policies"
+        assert findings[0].resource_id == "securityPolicies"
+        assert findings[0].customer_id == CUSTOMER_ID
+
+    def test_pass_enforcement_scheduled_for_a_future_date(self):
+        """4.1.1.2 accepts 'On from <date>', unlike 4.1.1.1 and 4.1.1.3"""
+        findings = run_check(
+            **{**COMPLIANT, "two_sv_enforced_from": "2099-01-01T00:00:00Z"}
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "PASS"
+
+    def test_pass_no_suspension_grace_period(self):
+        """No grace period is stricter than the 1 day the benchmark asks for"""
+        findings = run_check(
+            **{**COMPLIANT, "two_sv_backup_code_exception_period": "0s"}
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "PASS"
+
+    def test_pass_ignores_new_user_enrollment_period(self):
+        """The new user enrollment period belongs to 4.1.1.1 and 4.1.1.3, not here"""
+        findings = run_check(
+            **{**COMPLIANT, "two_sv_enrollment_grace_period": "2592000s"}
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "PASS"
+
+    def test_pass_ignores_advanced_protection_security_codes(self):
+        """The Advanced Protection Program page is covered by CIS 4.1.3.1, not here"""
+        findings = run_check(
+            **{
+                **COMPLIANT,
+                "advanced_protection_security_code_option": "ALLOWED_WITHOUT_REMOTE_ACCESS",
+            }
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "PASS"
+
+    @pytest.mark.parametrize(
+        "overrides, expected",
+        [
+            ({"two_sv_allowed_factor_set": "ALL"}, "accepted method is ALL"),
+            (
+                {"two_sv_allowed_factor_set": None},
+                "accepted method is not configured",
             ),
-            patch(
-                "prowler.providers.googleworkspace.services.security.security_2sv_hardware_keys_admins.security_2sv_hardware_keys_admins.security_client"
-            ) as mock_client,
-        ):
-            from prowler.providers.googleworkspace.services.security.security_2sv_hardware_keys_admins.security_2sv_hardware_keys_admins import (
-                security_2sv_hardware_keys_admins,
-            )
-
-            mock_client.provider = mock_provider
-            mock_client.policies_fetched = True
-            mock_client.policies = SecurityPolicies(
-                two_sv_allowed_factor_set="PASSKEY_ONLY"
-            )
-
-            check = security_2sv_hardware_keys_admins()
-            findings = check.execute()
-
-            assert len(findings) == 1
-            assert findings[0].status == "PASS"
-            assert "security keys only" in findings[0].status_extended
-            assert findings[0].resource_name == "Security Policies"
-            assert findings[0].resource_id == "securityPolicies"
-            assert findings[0].customer_id == CUSTOMER_ID
-
-    def test_fail_all_methods_allowed(self):
-        """Test FAIL when 2SV enforcement allows ALL methods"""
-        mock_provider = set_mocked_googleworkspace_provider()
-
-        with (
-            patch(
-                "prowler.providers.common.provider.Provider.get_global_provider",
-                return_value=mock_provider,
+            ({"two_sv_enforced_from": None}, "enforcement is not configured"),
+            (
+                {"two_sv_enforced_from": "1970-01-01T00:00:00Z"},
+                "enforcement is set to OFF",
             ),
-            patch(
-                "prowler.providers.googleworkspace.services.security.security_2sv_hardware_keys_admins.security_2sv_hardware_keys_admins.security_client"
-            ) as mock_client,
-        ):
-            from prowler.providers.googleworkspace.services.security.security_2sv_hardware_keys_admins.security_2sv_hardware_keys_admins import (
-                security_2sv_hardware_keys_admins,
-            )
-
-            mock_client.provider = mock_provider
-            mock_client.policies_fetched = True
-            mock_client.policies = SecurityPolicies(two_sv_allowed_factor_set="ALL")
-
-            check = security_2sv_hardware_keys_admins()
-            findings = check.execute()
-
-            assert len(findings) == 1
-            assert findings[0].status == "FAIL"
-            assert "ALL" in findings[0].status_extended
-
-    def test_fail_none_not_configured(self):
-        """Test FAIL when 2SV enforcement factor is not configured (None)"""
-        mock_provider = set_mocked_googleworkspace_provider()
-
-        with (
-            patch(
-                "prowler.providers.common.provider.Provider.get_global_provider",
-                return_value=mock_provider,
+            ({"two_sv_allow_enrollment": False}, "not allowed to turn on"),
+            (
+                {"two_sv_enforced_from": "not-a-date"},
+                "enforcement start date 'not-a-date' could not be read",
             ),
-            patch(
-                "prowler.providers.googleworkspace.services.security.security_2sv_hardware_keys_admins.security_2sv_hardware_keys_admins.security_client"
-            ) as mock_client,
-        ):
-            from prowler.providers.googleworkspace.services.security.security_2sv_hardware_keys_admins.security_2sv_hardware_keys_admins import (
-                security_2sv_hardware_keys_admins,
-            )
+            (
+                {"two_sv_backup_code_exception_period": "1209600s"},
+                "suspension grace period is 14 day(s)",
+            ),
+            (
+                {"two_sv_backup_code_exception_period": "7d"},
+                "suspension grace period '7d' could not be read",
+            ),
+        ],
+    )
+    def test_fail_each_audit_step(self, overrides, expected):
+        """FAIL when any single step of the CIS audit procedure is not met"""
+        findings = run_check(**{**COMPLIANT, **overrides})
 
-            mock_client.provider = mock_provider
-            mock_client.policies_fetched = True
-            mock_client.policies = SecurityPolicies(two_sv_allowed_factor_set=None)
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+        assert expected in findings[0].status_extended
 
-            check = security_2sv_hardware_keys_admins()
-            findings = check.execute()
+    def test_fail_keeps_domain_wide_scope_note(self):
+        """The domain-wide scope caveat is reported on failure too"""
+        findings = run_check()
 
-            assert len(findings) == 1
-            assert findings[0].status == "FAIL"
-            assert "not configured" in findings[0].status_extended
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+        assert "role-specific 2SV enforcement" in findings[0].status_extended
+
+    def test_manual_when_a_group_or_sub_ou_overrides_a_passing_policy(self):
+        """A passing domain-wide policy cannot be confirmed for the overridden users"""
+        findings = run_check(
+            **{
+                **COMPLIANT,
+                "overridden_settings": {"security.two_step_verification_enforcement"},
+            }
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "MANUAL"
+        assert "security.two_step_verification_enforcement is also overridden" in (
+            findings[0].status_extended
+        )
+
+    def test_a_domain_wide_failure_is_reported_even_with_an_override(self):
+        """Whoever no override reaches still gets the failing domain-wide policy"""
+        findings = run_check(
+            **{
+                **COMPLIANT,
+                "two_sv_enforced_from": None,
+                "overridden_settings": {
+                    "security.two_step_verification_enforcement_factor"
+                },
+            }
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+        assert "enforcement is not configured" in findings[0].status_extended
+
+    def test_manual_when_a_setting_only_exists_below_the_domain(self):
+        """No domain-wide value was reported, so the defaults would fabricate issues"""
+        findings = run_check(
+            **{
+                **COMPLIANT,
+                "two_sv_allowed_factor_set": None,
+                "overridden_settings": [
+                    "security.two_step_verification_enforcement_factor"
+                ],
+                "unobserved_settings": [
+                    "security.two_step_verification_enforcement_factor"
+                ],
+            }
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "MANUAL"
+        assert "no domain-wide value was reported" in findings[0].status_extended
+
+    def test_manual_when_the_policy_scope_could_not_be_resolved(self):
+        """Every value was dropped, so none of them can be judged"""
+        findings = run_check(**{**COMPLIANT, "unresolved_scope": True})
+
+        assert len(findings) == 1
+        assert findings[0].status == "MANUAL"
+        assert "root organizational unit could not be resolved" in (
+            findings[0].status_extended
+        )
+
+    def test_a_failure_keeps_the_override_caveat(self):
+        findings = run_check(
+            **{
+                **COMPLIANT,
+                "two_sv_allowed_factor_set": "ALL",
+                "overridden_settings": ["security.two_step_verification_enforcement"],
+            }
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+        assert "accepted method is ALL" in findings[0].status_extended
+        assert "also overridden" in findings[0].status_extended
+
+    def test_manual_when_every_failing_setting_is_overridden(self):
+        """The admin group may get the overriding value, which is not exposed"""
+        findings = run_check(
+            **{
+                **COMPLIANT,
+                "two_sv_allowed_factor_set": "ALL",
+                "overridden_settings": [
+                    "security.two_step_verification_enforcement_factor"
+                ],
+            }
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "MANUAL"
+        assert "accepted method is ALL" in findings[0].status_extended
+        assert "administrative accounts may be configured correctly" in (
+            findings[0].status_extended
+        )
+
+    def test_fail_when_only_some_failing_settings_are_overridden(self):
+        """A failure no override reaches is still proven for the whole domain"""
+        findings = run_check(
+            **{
+                **COMPLIANT,
+                "two_sv_allowed_factor_set": "ALL",
+                "two_sv_allow_enrollment": False,
+                "overridden_settings": [
+                    "security.two_step_verification_enforcement_factor"
+                ],
+            }
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+        assert "not allowed to turn on" in findings[0].status_extended
+
+    def test_an_override_on_a_setting_this_check_ignores_does_not_apply(self):
+        """Device trust belongs to 4.1.1.1 and 4.1.1.3, not to 4.1.1.2"""
+        findings = run_check(
+            **{
+                **COMPLIANT,
+                "overridden_settings": {"security.two_step_verification_device_trust"},
+            }
+        )
+
+        assert len(findings) == 1
+        assert findings[0].status == "PASS"
 
     def test_no_findings_when_fetch_failed(self):
-        """Test no findings returned when the API fetch failed"""
-        mock_provider = set_mocked_googleworkspace_provider()
-
-        with (
-            patch(
-                "prowler.providers.common.provider.Provider.get_global_provider",
-                return_value=mock_provider,
-            ),
-            patch(
-                "prowler.providers.googleworkspace.services.security.security_2sv_hardware_keys_admins.security_2sv_hardware_keys_admins.security_client"
-            ) as mock_client,
-        ):
-            from prowler.providers.googleworkspace.services.security.security_2sv_hardware_keys_admins.security_2sv_hardware_keys_admins import (
-                security_2sv_hardware_keys_admins,
-            )
-
-            mock_client.provider = mock_provider
-            mock_client.policies_fetched = False
-            mock_client.policies = SecurityPolicies()
-
-            check = security_2sv_hardware_keys_admins()
-            findings = check.execute()
-
-            assert len(findings) == 0
+        """No findings returned when the API fetch failed"""
+        assert run_check(policies_fetched=False) == []
diff --git a/tests/providers/googleworkspace/services/security/security_password_policy_strong/security_password_policy_strong_test.py b/tests/providers/googleworkspace/services/security/security_password_policy_strong/security_password_policy_strong_test.py
index 850bf243a9..7f504d2293 100644
--- a/tests/providers/googleworkspace/services/security/security_password_policy_strong/security_password_policy_strong_test.py
+++ b/tests/providers/googleworkspace/services/security/security_password_policy_strong/security_password_policy_strong_test.py
@@ -115,8 +115,8 @@ class TestSecurityPasswordPolicyStrong:
             assert findings[0].status == "FAIL"
             assert "does not meet" in findings[0].status_extended
 
-    def test_fail_strength_unset_treated_as_missing(self):
-        """Test FAIL when password_allowed_strength is None even with other fields strong"""
+    def test_pass_strength_unset_is_googles_secure_default(self):
+        """CIS documents 'Enforce strong password' as checked out of the box"""
         mock_provider = set_mocked_googleworkspace_provider()
 
         with (
@@ -146,8 +146,7 @@ class TestSecurityPasswordPolicyStrong:
             findings = check.execute()
 
             assert len(findings) == 1
-            assert findings[0].status == "FAIL"
-            assert "password strength is not configured" in findings[0].status_extended
+            assert findings[0].status == "PASS"
 
     def test_fail_min_length_unset_reports_not_configured(self):
         """Test FAIL message uses 'not configured' when password_minimum_length is None"""
@@ -183,6 +182,207 @@ class TestSecurityPasswordPolicyStrong:
             assert findings[0].status == "FAIL"
             assert "minimum length is not configured" in findings[0].status_extended
 
+    def test_fail_expiration_longer_than_365_days(self):
+        """Test FAIL when the password reset frequency exceeds 365 days"""
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.security.security_password_policy_strong.security_password_policy_strong.security_client"
+            ) as mock_client,
+        ):
+            from prowler.providers.googleworkspace.services.security.security_password_policy_strong.security_password_policy_strong import (
+                security_password_policy_strong,
+            )
+
+            mock_client.provider = mock_provider
+            mock_client.policies_fetched = True
+            mock_client.policies = SecurityPolicies(
+                password_minimum_length=14,
+                password_allowed_strength="STRONG",
+                password_allow_reuse=False,
+                password_enforce_at_login=True,
+                password_expiration_duration="63072000s",
+            )
+
+            check = security_password_policy_strong()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "expiration is 730 day(s)" in findings[0].status_extended
+            assert "requires 365 days or less" in findings[0].status_extended
+
+    def test_pass_expiration_shorter_than_365_days(self):
+        """Test PASS when the reset frequency is shorter, which is more restrictive"""
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.security.security_password_policy_strong.security_password_policy_strong.security_client"
+            ) as mock_client,
+        ):
+            from prowler.providers.googleworkspace.services.security.security_password_policy_strong.security_password_policy_strong import (
+                security_password_policy_strong,
+            )
+
+            mock_client.provider = mock_provider
+            mock_client.policies_fetched = True
+            mock_client.policies = SecurityPolicies(
+                password_minimum_length=14,
+                password_allowed_strength="STRONG",
+                password_allow_reuse=False,
+                password_enforce_at_login=True,
+                password_expiration_duration="7776000s",
+            )
+
+            check = security_password_policy_strong()
+            findings = check.execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "PASS"
+            assert "expiration 90 day(s)" in findings[0].status_extended
+
+    def test_fail_reuse_allowed(self):
+        """Test FAIL when password reuse is allowed (CIS 4.1.5.1 step 7)"""
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.security.security_password_policy_strong.security_password_policy_strong.security_client"
+            ) as mock_client,
+        ):
+            from prowler.providers.googleworkspace.services.security.security_password_policy_strong.security_password_policy_strong import (
+                security_password_policy_strong,
+            )
+
+            mock_client.provider = mock_provider
+            mock_client.policies_fetched = True
+            mock_client.policies = SecurityPolicies(
+                password_minimum_length=14,
+                password_allowed_strength="STRONG",
+                password_allow_reuse=True,
+                password_enforce_at_login=True,
+                password_expiration_duration="31536000s",
+            )
+
+            findings = security_password_policy_strong().execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "password reuse is allowed" in findings[0].status_extended
+
+    def test_fail_not_enforced_at_next_sign_in(self):
+        """Test FAIL when the policy is not enforced at next sign-in (CIS 4.1.5.1 step 6)"""
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.security.security_password_policy_strong.security_password_policy_strong.security_client"
+            ) as mock_client,
+        ):
+            from prowler.providers.googleworkspace.services.security.security_password_policy_strong.security_password_policy_strong import (
+                security_password_policy_strong,
+            )
+
+            mock_client.provider = mock_provider
+            mock_client.policies_fetched = True
+            mock_client.policies = SecurityPolicies(
+                password_minimum_length=14,
+                password_allowed_strength="STRONG",
+                password_allow_reuse=False,
+                password_enforce_at_login=False,
+                password_expiration_duration="31536000s",
+            )
+
+            findings = security_password_policy_strong().execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "not enforced at next sign-in" in findings[0].status_extended
+
+    def test_fail_passwords_never_expire(self):
+        """Test FAIL naming Google's 'Never expires' rather than 'not configured'"""
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.security.security_password_policy_strong.security_password_policy_strong.security_client"
+            ) as mock_client,
+        ):
+            from prowler.providers.googleworkspace.services.security.security_password_policy_strong.security_password_policy_strong import (
+                security_password_policy_strong,
+            )
+
+            mock_client.provider = mock_provider
+            mock_client.policies_fetched = True
+            mock_client.policies = SecurityPolicies(
+                password_minimum_length=14,
+                password_allowed_strength="STRONG",
+                password_allow_reuse=False,
+                password_enforce_at_login=True,
+                password_expiration_duration="0s",
+            )
+
+            findings = security_password_policy_strong().execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "never expire" in findings[0].status_extended
+
+    def test_fail_unreadable_expiration(self):
+        """Test FAIL when the expiration value cannot be parsed, instead of skipping it"""
+        mock_provider = set_mocked_googleworkspace_provider()
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.googleworkspace.services.security.security_password_policy_strong.security_password_policy_strong.security_client"
+            ) as mock_client,
+        ):
+            from prowler.providers.googleworkspace.services.security.security_password_policy_strong.security_password_policy_strong import (
+                security_password_policy_strong,
+            )
+
+            mock_client.provider = mock_provider
+            mock_client.policies_fetched = True
+            mock_client.policies = SecurityPolicies(
+                password_minimum_length=14,
+                password_allowed_strength="STRONG",
+                password_allow_reuse=False,
+                password_enforce_at_login=True,
+                password_expiration_duration="365d",
+            )
+
+            findings = security_password_policy_strong().execute()
+
+            assert len(findings) == 1
+            assert findings[0].status == "FAIL"
+            assert "could not be read" in findings[0].status_extended
+
     def test_no_findings_when_fetch_failed(self):
         """Test no findings returned when the API fetch failed"""
         mock_provider = set_mocked_googleworkspace_provider()

From b6a8af3c5464035bc3fe951289a3620917b779c1 Mon Sep 17 00:00:00 2001
From: Jonathan Nguyen <87379568+tamg-aws@users.noreply.github.com>
Date: Tue, 1 Sep 2026 06:18:57 -0500
Subject: [PATCH 14/77] feat(guardduty): assess unified Runtime Monitoring and
 AI Protection (#12564)

---
 .../guardduty-ai-protection-enabled.added.md  |   1 +
 ...rdduty-runtime-monitoring-enabled.added.md |   1 +
 ...rdduty-unified-runtime-monitoring.fixed.md |   1 +
 .../aws/aws_ai_security_framework_aws.json    |   4 +-
 .../__init__.py                               |   0
 ...rdduty_ai_protection_enabled.metadata.json |  41 +++
 .../guardduty_ai_protection_enabled.py        |  59 ++++
 ...s_runtime_monitoring_enabled.metadata.json |   4 +-
 .../__init__.py                               |   0
 ...y_runtime_monitoring_enabled.metadata.json |  40 +++
 .../guardduty_runtime_monitoring_enabled.py   |  75 +++++
 .../services/guardduty/guardduty_service.py   |  43 ++-
 .../guardduty_ai_protection_enabled_test.py   | 215 ++++++++++++++
 ...ardduty_runtime_monitoring_enabled_test.py | 270 ++++++++++++++++++
 .../guardduty/guardduty_service_test.py       | 137 +++++++++
 15 files changed, 884 insertions(+), 7 deletions(-)
 create mode 100644 prowler/changelog.d/guardduty-ai-protection-enabled.added.md
 create mode 100644 prowler/changelog.d/guardduty-runtime-monitoring-enabled.added.md
 create mode 100644 prowler/changelog.d/guardduty-unified-runtime-monitoring.fixed.md
 create mode 100644 prowler/providers/aws/services/guardduty/guardduty_ai_protection_enabled/__init__.py
 create mode 100644 prowler/providers/aws/services/guardduty/guardduty_ai_protection_enabled/guardduty_ai_protection_enabled.metadata.json
 create mode 100644 prowler/providers/aws/services/guardduty/guardduty_ai_protection_enabled/guardduty_ai_protection_enabled.py
 create mode 100644 prowler/providers/aws/services/guardduty/guardduty_runtime_monitoring_enabled/__init__.py
 create mode 100644 prowler/providers/aws/services/guardduty/guardduty_runtime_monitoring_enabled/guardduty_runtime_monitoring_enabled.metadata.json
 create mode 100644 prowler/providers/aws/services/guardduty/guardduty_runtime_monitoring_enabled/guardduty_runtime_monitoring_enabled.py
 create mode 100644 tests/providers/aws/services/guardduty/guardduty_ai_protection_enabled/guardduty_ai_protection_enabled_test.py
 create mode 100644 tests/providers/aws/services/guardduty/guardduty_runtime_monitoring_enabled/guardduty_runtime_monitoring_enabled_test.py

diff --git a/prowler/changelog.d/guardduty-ai-protection-enabled.added.md b/prowler/changelog.d/guardduty-ai-protection-enabled.added.md
new file mode 100644
index 0000000000..8c72ef0b15
--- /dev/null
+++ b/prowler/changelog.d/guardduty-ai-protection-enabled.added.md
@@ -0,0 +1 @@
+`guardduty_ai_protection_enabled` check for AWS provider, flagging GuardDuty detectors without AI Protection, which analyzes AWS CloudTrail data events from Amazon Bedrock, Amazon Bedrock AgentCore and Amazon SageMaker AI; a detector that does not report the feature is `MANUAL` rather than `FAIL`
diff --git a/prowler/changelog.d/guardduty-runtime-monitoring-enabled.added.md b/prowler/changelog.d/guardduty-runtime-monitoring-enabled.added.md
new file mode 100644
index 0000000000..b65d5eb8ae
--- /dev/null
+++ b/prowler/changelog.d/guardduty-runtime-monitoring-enabled.added.md
@@ -0,0 +1 @@
+`guardduty_runtime_monitoring_enabled` check for AWS provider, flagging GuardDuty detectors without unified Runtime Monitoring, the only feature that covers Amazon EC2 instances and Amazon ECS on AWS Fargate tasks in addition to Amazon EKS
diff --git a/prowler/changelog.d/guardduty-unified-runtime-monitoring.fixed.md b/prowler/changelog.d/guardduty-unified-runtime-monitoring.fixed.md
new file mode 100644
index 0000000000..a3069a2677
--- /dev/null
+++ b/prowler/changelog.d/guardduty-unified-runtime-monitoring.fixed.md
@@ -0,0 +1 @@
+`guardduty_eks_runtime_monitoring_enabled` no longer reports `FAIL` for detectors that use unified Runtime Monitoring; the GuardDuty service now reads the `RUNTIME_MONITORING` feature, which is mutually exclusive with `EKS_RUNTIME_MONITORING` and already covers Amazon EKS
diff --git a/prowler/compliance/aws/aws_ai_security_framework_aws.json b/prowler/compliance/aws/aws_ai_security_framework_aws.json
index fa8c9d83a7..205d5902d1 100644
--- a/prowler/compliance/aws/aws_ai_security_framework_aws.json
+++ b/prowler/compliance/aws/aws_ai_security_framework_aws.json
@@ -878,9 +878,11 @@
         "guardduty_s3_protection_enabled",
         "guardduty_eks_audit_log_enabled",
         "guardduty_eks_runtime_monitoring_enabled",
+        "guardduty_runtime_monitoring_enabled",
         "guardduty_lambda_protection_enabled",
         "guardduty_rds_protection_enabled",
-        "guardduty_ec2_malware_protection_enabled"
+        "guardduty_ec2_malware_protection_enabled",
+        "guardduty_ai_protection_enabled"
       ],
       "ConfigRequirements": [
         {
diff --git a/prowler/providers/aws/services/guardduty/guardduty_ai_protection_enabled/__init__.py b/prowler/providers/aws/services/guardduty/guardduty_ai_protection_enabled/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/guardduty/guardduty_ai_protection_enabled/guardduty_ai_protection_enabled.metadata.json b/prowler/providers/aws/services/guardduty/guardduty_ai_protection_enabled/guardduty_ai_protection_enabled.metadata.json
new file mode 100644
index 0000000000..93dda805b4
--- /dev/null
+++ b/prowler/providers/aws/services/guardduty/guardduty_ai_protection_enabled/guardduty_ai_protection_enabled.metadata.json
@@ -0,0 +1,41 @@
+{
+  "Provider": "aws",
+  "CheckID": "guardduty_ai_protection_enabled",
+  "CheckTitle": "GuardDuty detector has AI Protection enabled",
+  "CheckType": [
+    "Software and Configuration Checks/AWS Security Best Practices/Runtime Behavior Analysis",
+    "TTPs/Credential Access",
+    "Effects/Resource Consumption"
+  ],
+  "ServiceName": "guardduty",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "",
+  "Severity": "high",
+  "ResourceType": "AwsGuardDutyDetector",
+  "ResourceGroup": "security",
+  "Description": "Active **Amazon GuardDuty detectors** are assessed for **AI Protection** being enabled, which analyzes AWS CloudTrail data events from Amazon Bedrock, Amazon Bedrock AgentCore and Amazon SageMaker AI to flag anomalous model invocations, cost harvesting and prompt injection. Detectors that do not report the feature return `MANUAL`, because absence means the Region does not offer it.",
+  "Risk": "Without **AI Protection**, model invocation activity is never baselined, so attackers using **stolen credentials** can invoke foundation models undetected.\n\nThat costs **confidentiality** of prompts and outputs, and **availability** too: expensive prompts harvest inference spend and exhaust quota.",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://docs.aws.amazon.com/guardduty/latest/ug/ai-protection.html",
+    "https://docs.aws.amazon.com/guardduty/latest/ug/ai-protection-enable-standalone-account.html",
+    "https://docs.aws.amazon.com/guardduty/latest/ug/findings-ai-protection.html",
+    "https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "aws guardduty update-detector --detector-id <detector-id> --features Name=AI_PROTECTION,Status=ENABLED",
+      "NativeIaC": "```yaml\nResources:\n  <example_resource_name>:\n    Type: AWS::GuardDuty::Detector\n    Properties:\n      Enable: true\n      Features:\n        - Name: AI_PROTECTION  # Critical: selects the GuardDuty AI Protection plan\n          Status: ENABLED      # Critical: turns AI Protection on\n```",
+      "Other": "1. Open the AWS Console and go to Amazon GuardDuty\n2. In the Region selector, choose a Region that offers AI Protection\n3. In the navigation pane, choose Protection plans\n4. Choose Configure all enablements, then under AI Protection choose Enable\n5. Choose Save all, then Confirm and save\n6. In an organization, do this from the delegated GuardDuty administrator account and auto-enable it for new accounts",
+      "Terraform": "```hcl\nresource \"aws_guardduty_detector_feature\" \"<example_resource_name>\" {\n  detector_id = aws_guardduty_detector.<example_detector_name>.id\n  name        = \"AI_PROTECTION\"  # Critical: GuardDuty AI Protection plan\n  status      = \"ENABLED\"        # Critical: enable the feature\n}\n```"
+    },
+    "Recommendation": {
+      "Text": "Enable **GuardDuty AI Protection** in every account and Region hosting AI workloads.\n- Enable it org-wide from the delegated GuardDuty administrator and auto-enable it for new accounts\n- Enforce **Amazon Bedrock Guardrails** for prompt attacks, which AI Protection requires to raise prompt injection findings\n- Route findings to AWS Security Hub and review them on a defined cadence",
+      "Url": "https://hub.prowler.com/check/guardduty_ai_protection_enabled"
+    }
+  },
+  "Categories": [],
+  "DependsOn": [],
+  "RelatedTo": [],
+  "Notes": ""
+}
diff --git a/prowler/providers/aws/services/guardduty/guardduty_ai_protection_enabled/guardduty_ai_protection_enabled.py b/prowler/providers/aws/services/guardduty/guardduty_ai_protection_enabled/guardduty_ai_protection_enabled.py
new file mode 100644
index 0000000000..734849d5d5
--- /dev/null
+++ b/prowler/providers/aws/services/guardduty/guardduty_ai_protection_enabled/guardduty_ai_protection_enabled.py
@@ -0,0 +1,59 @@
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.guardduty.guardduty_client import guardduty_client
+
+
+class guardduty_ai_protection_enabled(Check):
+    """Ensure GuardDuty AI Protection is enabled on every active detector.
+
+    AI Protection analyzes AWS CloudTrail data events from Amazon Bedrock, Amazon
+    Bedrock AgentCore and Amazon SageMaker AI, which makes it the detective control
+    for AI workloads.
+
+    The feature has three observable states rather than two:
+
+    1. Reported as ENABLED: PASS.
+    2. Reported as DISABLED: FAIL.
+    3. Not reported at all: MANUAL. GuardDuty omits features that the Region or the
+       GuardDuty version does not offer, and "could not tell" is not "not
+       compliant". The same account can carry a feature in some Regions and omit it
+       in others, so absence cannot be read as disablement.
+
+    A suspended detector, or one whose GetDetector call failed, is MANUAL as well:
+    the feature state is unknown either way, and guardduty_is_enabled owns the
+    detector-level finding. Regions with no detector at all are left to
+    guardduty_is_enabled entirely.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Assess AI Protection on every GuardDuty detector in the account.
+
+        Returns:
+            list[Check_Report_AWS]: one report per detector that exists. PASS when AI
+                Protection is enabled, FAIL when GuardDuty reported the feature
+                disabled, and MANUAL when either the detector state or the feature
+                itself was not reported.
+        """
+        findings = []
+        for detector in guardduty_client.detectors:
+            if not detector.enabled_in_account:
+                continue
+
+            report = Check_Report_AWS(metadata=self.metadata(), resource=detector)
+
+            if not detector.status:
+                report.status = "MANUAL"
+                report.status_extended = f"GuardDuty detector {detector.id} is not enabled or could not be read, so AI Protection coverage could not be determined."
+            elif detector.ai_protection is None:
+                report.status = "MANUAL"
+                report.status_extended = f"GuardDuty detector {detector.id} does not report the AI Protection feature, so verify manually whether AI Protection is available in region {detector.region}."
+            elif detector.ai_protection:
+                report.status = "PASS"
+                report.status_extended = (
+                    f"GuardDuty detector {detector.id} has AI Protection enabled."
+                )
+            else:
+                report.status = "FAIL"
+                report.status_extended = f"GuardDuty detector {detector.id} does not have AI Protection enabled."
+
+            findings.append(report)
+        return findings
diff --git a/prowler/providers/aws/services/guardduty/guardduty_eks_runtime_monitoring_enabled/guardduty_eks_runtime_monitoring_enabled.metadata.json b/prowler/providers/aws/services/guardduty/guardduty_eks_runtime_monitoring_enabled/guardduty_eks_runtime_monitoring_enabled.metadata.json
index 99d2ebfc83..a4599023db 100644
--- a/prowler/providers/aws/services/guardduty/guardduty_eks_runtime_monitoring_enabled/guardduty_eks_runtime_monitoring_enabled.metadata.json
+++ b/prowler/providers/aws/services/guardduty/guardduty_eks_runtime_monitoring_enabled/guardduty_eks_runtime_monitoring_enabled.metadata.json
@@ -22,10 +22,10 @@
   ],
   "Remediation": {
     "Code": {
-      "CLI": "aws guardduty update-detector --detector-id <detector-id> --features name=EKS_RUNTIME_MONITORING,status=ENABLED",
+      "CLI": "aws guardduty update-detector --detector-id <detector-id> --features Name=EKS_RUNTIME_MONITORING,Status=ENABLED",
       "NativeIaC": "```yaml\nResources:\n  <example_resource_name>:\n    Type: AWS::GuardDuty::Detector\n    Properties:\n      Enable: true\n      Features:\n        - Name: EKS_RUNTIME_MONITORING   # Critical: selects EKS Runtime Monitoring feature\n          Status: ENABLED                # Critical: enables the feature to pass the check\n```",
       "Other": "1. Open the AWS Console and go to Amazon GuardDuty\n2. In the left pane, select Settings > Runtime monitoring\n3. Under EKS Runtime Monitoring, switch the status to Enabled\n4. Click Save changes",
-      "Terraform": "```hcl\nresource \"aws_guardduty_detector\" \"<example_resource_name>\" {\n  enable = true\n\n  features {\n    name   = \"EKS_RUNTIME_MONITORING\"  # Critical: selects EKS Runtime Monitoring feature\n    status = \"ENABLED\"                 # Critical: enables the feature to pass the check\n  }\n}\n```"
+      "Terraform": "```hcl\nresource \"aws_guardduty_detector\" \"<example_resource_name>\" {\n  enable = true\n}\n\nresource \"aws_guardduty_detector_feature\" \"<example_resource_name>\" {\n  detector_id = aws_guardduty_detector.<example_resource_name>.id\n  name        = \"EKS_RUNTIME_MONITORING\"  # Critical: selects EKS Runtime Monitoring\n  status      = \"ENABLED\"                 # Critical: enables the feature\n\n  additional_configuration {\n    name   = \"EKS_ADDON_MANAGEMENT\"\n    status = \"ENABLED\"\n  }\n}\n```"
     },
     "Recommendation": {
       "Text": "- Enable **EKS Runtime Monitoring** with automated agent management across all accounts and clusters\n- Enforce **least privilege** for agents and segment cluster access\n- Integrate findings with response workflows and periodically verify runtime coverage",
diff --git a/prowler/providers/aws/services/guardduty/guardduty_runtime_monitoring_enabled/__init__.py b/prowler/providers/aws/services/guardduty/guardduty_runtime_monitoring_enabled/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/guardduty/guardduty_runtime_monitoring_enabled/guardduty_runtime_monitoring_enabled.metadata.json b/prowler/providers/aws/services/guardduty/guardduty_runtime_monitoring_enabled/guardduty_runtime_monitoring_enabled.metadata.json
new file mode 100644
index 0000000000..36f201d703
--- /dev/null
+++ b/prowler/providers/aws/services/guardduty/guardduty_runtime_monitoring_enabled/guardduty_runtime_monitoring_enabled.metadata.json
@@ -0,0 +1,40 @@
+{
+  "Provider": "aws",
+  "CheckID": "guardduty_runtime_monitoring_enabled",
+  "CheckTitle": "GuardDuty detector has Runtime Monitoring enabled",
+  "CheckType": [
+    "Software and Configuration Checks/AWS Security Best Practices/Runtime Behavior Analysis",
+    "Software and Configuration Checks/Industry and Regulatory Standards/AWS Foundational Security Best Practices"
+  ],
+  "ServiceName": "guardduty",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "",
+  "Severity": "high",
+  "ResourceType": "AwsGuardDutyDetector",
+  "ResourceGroup": "security",
+  "Description": "GuardDuty detectors are evaluated for unified **Runtime Monitoring** being enabled. The configuration is at the detector level and relates to visibility into *process execution, file access, and network connections* on Amazon EC2 instances, Amazon ECS on AWS Fargate tasks, and Amazon EKS nodes and containers. The legacy EKS-only feature covers Amazon EKS alone and does not satisfy this check.",
+  "Risk": "Without **Runtime Monitoring**, on-host behavior of EC2, Fargate and EKS workloads is blind to detection. Adversaries can run malware or cryptominers, break out of containers, harvest credentials from instance metadata, tamper with workloads, or pivot to other services, degrading confidentiality, corrupting integrity, and exhausting resources (availability).",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html",
+    "https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring-configuration.html",
+    "https://docs.aws.amazon.com/config/latest/developerguide/guardduty-runtime-monitoring-enabled.html",
+    "https://docs.aws.amazon.com/securityhub/latest/userguide/guardduty-controls.html#guardduty-11"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "aws guardduty update-detector --detector-id <detector-id> --features Name=RUNTIME_MONITORING,Status=ENABLED",
+      "NativeIaC": "```yaml\nResources:\n  <example_resource_name>:\n    Type: AWS::GuardDuty::Detector\n    Properties:\n      Enable: true\n      Features:\n        - Name: RUNTIME_MONITORING   # Critical: selects unified Runtime Monitoring, which covers EC2, ECS-Fargate and EKS\n          Status: ENABLED            # Critical: enables the feature to pass the check\n          AdditionalConfiguration:\n            - Name: EC2_AGENT_MANAGEMENT\n              Status: ENABLED\n            - Name: ECS_FARGATE_AGENT_MANAGEMENT\n              Status: ENABLED\n            - Name: EKS_ADDON_MANAGEMENT\n              Status: ENABLED\n```",
+      "Other": "1. Open the AWS Console and go to Amazon GuardDuty\n2. In the left pane, select Protection plans > Runtime Monitoring\n3. Switch Runtime Monitoring to Enabled\n4. Enable automated agent configuration for Amazon EC2, AWS Fargate (Amazon ECS only) and Amazon EKS\n5. Click Save changes\n6. If you were using EKS Runtime Monitoring, migrate to Runtime Monitoring; the two features are mutually exclusive",
+      "Terraform": "```hcl\nresource \"aws_guardduty_detector_feature\" \"<example_resource_name>\" {\n  detector_id = aws_guardduty_detector.<example_detector_name>.id\n  name        = \"RUNTIME_MONITORING\"  # Critical: unified feature covering EC2, ECS-Fargate and EKS\n  status      = \"ENABLED\"             # Critical: enables the feature to pass the check\n\n  additional_configuration {\n    name   = \"EC2_AGENT_MANAGEMENT\"\n    status = \"ENABLED\"\n  }\n\n  additional_configuration {\n    name   = \"ECS_FARGATE_AGENT_MANAGEMENT\"\n    status = \"ENABLED\"\n  }\n\n  additional_configuration {\n    name   = \"EKS_ADDON_MANAGEMENT\"\n    status = \"ENABLED\"\n  }\n}\n```"
+    },
+    "Recommendation": {
+      "Text": "- Enable unified **Runtime Monitoring** with automated agent management for Amazon EC2, AWS Fargate (Amazon ECS only) and Amazon EKS across all accounts\n- Migrate from EKS Runtime Monitoring, which covers Amazon EKS only and is mutually exclusive with Runtime Monitoring\n- Review runtime coverage statistics rather than treating enablement as coverage, and route findings to Security Hub or EventBridge for response",
+      "Url": "https://hub.prowler.com/check/guardduty_runtime_monitoring_enabled"
+    }
+  },
+  "Categories": [],
+  "DependsOn": [],
+  "RelatedTo": [],
+  "Notes": ""
+}
diff --git a/prowler/providers/aws/services/guardduty/guardduty_runtime_monitoring_enabled/guardduty_runtime_monitoring_enabled.py b/prowler/providers/aws/services/guardduty/guardduty_runtime_monitoring_enabled/guardduty_runtime_monitoring_enabled.py
new file mode 100644
index 0000000000..64d86fc184
--- /dev/null
+++ b/prowler/providers/aws/services/guardduty/guardduty_runtime_monitoring_enabled/guardduty_runtime_monitoring_enabled.py
@@ -0,0 +1,75 @@
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.guardduty.guardduty_client import guardduty_client
+
+
+class guardduty_runtime_monitoring_enabled(Check):
+    """Ensure GuardDuty unified Runtime Monitoring is enabled on every active detector.
+
+    Runtime Monitoring covers Amazon EC2 instances, Amazon ECS on AWS Fargate tasks
+    and Amazon EKS nodes and containers. Legacy EKS Runtime Monitoring covers Amazon
+    EKS alone, and its AdditionalConfiguration offers no EC2 or Fargate agent
+    management, so a detector running only the legacy feature has no runtime coverage
+    for EC2 or Fargate workloads and cannot PASS. The two features are mutually
+    exclusive at the API, so the FAIL message names the legacy case to point at
+    migration rather than at first-time enablement. That exclusivity is also why the
+    legacy verdict is reached before the unknown one: a legacy detector is precisely
+    the one whose GetDetector response carries no RUNTIME_MONITORING entry, so testing
+    for the unknown state first would report every legacy detector as undetermined.
+
+    A detector whose own state could not be read is MANUAL rather than absent from the
+    report. Detector.status is True only when GetDetector returned ENABLED and stays
+    None both for a suspended detector and for a GetDetector call that failed, so those
+    two cannot be told apart and neither is a definite absence of runtime coverage.
+    Leaving such a detector out of the findings would leave its Region with nothing to
+    read at all, and an unreported Region reads as a compliant one.
+
+    Regions with no detector at all are left to guardduty_is_enabled entirely, which is
+    also the check that owns the detector-level verdict.
+
+    guardduty_eks_runtime_monitoring_enabled remains the EKS-scoped check.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Assess unified Runtime Monitoring on every GuardDuty detector in the account.
+
+        Returns:
+            list[Check_Report_AWS]: one report per detector that exists. PASS when
+                unified Runtime Monitoring is enabled, FAIL when GuardDuty reported the
+                feature disabled or reported only the legacy EKS one, and MANUAL when
+                either the detector state or the feature itself was not reported and no
+                legacy coverage was reported either.
+        """
+        findings = []
+        for detector in guardduty_client.detectors:
+            if not detector.enabled_in_account:
+                continue
+
+            report = Check_Report_AWS(metadata=self.metadata(), resource=detector)
+            report.status = "FAIL"
+            report.status_extended = f"GuardDuty detector {detector.id} does not have Runtime Monitoring enabled."
+            if not detector.status:
+                report.status = "MANUAL"
+                report.status_extended = f"GuardDuty detector {detector.id} is not enabled or could not be read, so Runtime Monitoring coverage could not be determined."
+            elif detector.runtime_monitoring is True:
+                report.status = "PASS"
+                report.status_extended = (
+                    f"GuardDuty detector {detector.id} has Runtime Monitoring enabled."
+                )
+            elif detector.eks_runtime_monitoring:
+                # Ordered ahead of the unknown branch below because a detector running the
+                # legacy feature is the shape that omits RUNTIME_MONITORING entirely: the
+                # two are mutually exclusive at the API. eks_runtime_monitoring is set by
+                # either feature, but the PASS branch above already took the unified case,
+                # so reaching here means EKS_RUNTIME_MONITORING is what enabled it. That is
+                # a known absence of EC2 and Fargate coverage, not an unknown one.
+                report.status_extended = f"GuardDuty detector {detector.id} only has the legacy EKS Runtime Monitoring enabled, leaving Amazon EC2 instances and Amazon ECS on Fargate tasks without runtime coverage."
+            elif detector.runtime_monitoring is None:
+                # GetDetector did not return RUNTIME_MONITORING at all, which is not the
+                # same as returning it DISABLED: a Region that does not offer the unified
+                # feature, or a features array that could not be read, would otherwise be
+                # reported as a definite FAIL. No legacy coverage was reported either, so
+                # nothing is known about this detector's runtime coverage.
+                report.status = "MANUAL"
+                report.status_extended = f"GuardDuty detector {detector.id} did not report the Runtime Monitoring feature, so runtime coverage could not be determined; verify manually."
+            findings.append(report)
+        return findings
diff --git a/prowler/providers/aws/services/guardduty/guardduty_service.py b/prowler/providers/aws/services/guardduty/guardduty_service.py
index ed575e6a4b..2a23145040 100644
--- a/prowler/providers/aws/services/guardduty/guardduty_service.py
+++ b/prowler/providers/aws/services/guardduty/guardduty_service.py
@@ -63,6 +63,15 @@ class GuardDuty(AWSService):
             )
 
     def _get_detector(self, detector):
+        """Read a detector's status, data sources and features.
+
+        A feature GuardDuty does not return is left as None rather than False, so a
+        Region that does not offer the feature stays distinguishable from one that
+        turned it off.
+
+        Args:
+            detector: Detector object to populate in place.
+        """
         logger.info("GuardDuty - getting detector info...")
         try:
             if detector.id and detector.enabled_in_account:
@@ -108,11 +117,33 @@ class GuardDuty(AWSService):
                         and feat.get("Status", "DISABLED") == "ENABLED"
                     ):
                         detector.lambda_protection = True
-                    elif (
-                        feat.get("Name", "") == "EKS_RUNTIME_MONITORING"
-                        and feat.get("Status", "DISABLED") == "ENABLED"
+                    elif feat.get("Name", "") == "AI_PROTECTION":
+                        # Recorded even when DISABLED, so a Region that offers AI
+                        # Protection and turned it off stays distinguishable from one
+                        # that never reports the feature.
+                        detector.ai_protection = (
+                            feat.get("Status", "DISABLED") == "ENABLED"
+                        )
+                    elif feat.get("Name", "") in (
+                        "EKS_RUNTIME_MONITORING",
+                        "RUNTIME_MONITORING",
                     ):
-                        detector.eks_runtime_monitoring = True
+                        enabled = feat.get("Status", "DISABLED") == "ENABLED"
+                        # Unified Runtime Monitoring (RUNTIME_MONITORING) already
+                        # includes threat detection for Amazon EKS resources and is
+                        # mutually exclusive with EKS_RUNTIME_MONITORING, so either
+                        # feature means the detector has EKS runtime coverage.
+                        if enabled:
+                            detector.eks_runtime_monitoring = True
+                        if feat.get("Name", "") == "RUNTIME_MONITORING":
+                            # Only the unified feature covers Amazon EC2 and Amazon
+                            # ECS on Fargate, so it is tracked separately. Recorded even
+                            # when DISABLED, for the same reason AI_PROTECTION above is:
+                            # a Region that offers the feature and turned it off must
+                            # stay distinguishable from one that never reported it. A
+                            # plain bool cannot express that, and the check would report
+                            # a definite FAIL on a Region that has no unified feature.
+                            detector.runtime_monitoring = enabled
 
         except Exception as error:
             logger.error(
@@ -345,8 +376,12 @@ class Detector(BaseModel):
     rds_protection: bool = False
     eks_audit_log_protection: bool = False
     eks_runtime_monitoring: bool = False
+    # None when GuardDuty did not return the feature: unknown, not disabled.
+    runtime_monitoring: Optional[bool] = None
     lambda_protection: bool = False
     ec2_malware_protection: bool = False
+    # None when GuardDuty did not return the feature: unknown, not disabled.
+    ai_protection: Optional[bool] = None
     # Organization configuration fields
     organization_auto_enable_members: str = "NONE"  # NEW, ALL, or NONE
     organization_config_available: bool = False
diff --git a/tests/providers/aws/services/guardduty/guardduty_ai_protection_enabled/guardduty_ai_protection_enabled_test.py b/tests/providers/aws/services/guardduty/guardduty_ai_protection_enabled/guardduty_ai_protection_enabled_test.py
new file mode 100644
index 0000000000..2b3e585611
--- /dev/null
+++ b/tests/providers/aws/services/guardduty/guardduty_ai_protection_enabled/guardduty_ai_protection_enabled_test.py
@@ -0,0 +1,215 @@
+from unittest import mock
+
+import botocore
+from boto3 import client
+from moto import mock_aws
+
+from prowler.providers.aws.services.guardduty.guardduty_service import GuardDuty
+from tests.providers.aws.utils import (
+    AWS_ACCOUNT_NUMBER,
+    AWS_REGION_US_EAST_1,
+    set_mocked_aws_provider,
+)
+
+CHECK_CLIENT_PATH = "prowler.providers.aws.services.guardduty.guardduty_ai_protection_enabled.guardduty_ai_protection_enabled.guardduty_client"
+
+make_api_call = botocore.client.BaseClient._make_api_call
+
+
+def mock_get_detector_raises(self, operation_name, kwarg):
+    """Deny GetDetector only, leaving every other GuardDuty operation intact."""
+    if operation_name == "GetDetector":
+        raise botocore.exceptions.ClientError(
+            {"Error": {"Code": "AccessDeniedException", "Message": "denied"}},
+            operation_name,
+        )
+    return make_api_call(self, operation_name, kwarg)
+
+
+def _run_check(aws_provider):
+    """Run the check against a GuardDuty service built from the mocked provider."""
+    with (
+        mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=aws_provider,
+        ),
+        mock.patch(CHECK_CLIENT_PATH, new=GuardDuty(aws_provider)),
+    ):
+        from prowler.providers.aws.services.guardduty.guardduty_ai_protection_enabled.guardduty_ai_protection_enabled import (
+            guardduty_ai_protection_enabled,
+        )
+
+        return guardduty_ai_protection_enabled().execute()
+
+
+class Test_guardduty_ai_protection_enabled:
+    @mock_aws
+    def test_no_detectors(self):
+        """A Region with no detector has no resource to judge; guardduty_is_enabled owns it."""
+        client("guardduty", region_name=AWS_REGION_US_EAST_1)
+
+        result = _run_check(set_mocked_aws_provider([AWS_REGION_US_EAST_1]))
+
+        assert len(result) == 0
+
+    @mock_aws
+    def test_ai_protection_enabled(self):
+        """An enabled feature PASSes and carries the detector's own resource fields."""
+        guardduty_client = client("guardduty", region_name=AWS_REGION_US_EAST_1)
+        response = guardduty_client.create_detector(
+            Enable=True,
+            Features=[{"Name": "AI_PROTECTION", "Status": "ENABLED"}],
+        )
+
+        result = _run_check(set_mocked_aws_provider([AWS_REGION_US_EAST_1]))
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+        assert (
+            result[0].status_extended
+            == f"GuardDuty detector {response['DetectorId']} has AI Protection enabled."
+        )
+        assert result[0].resource_id == response["DetectorId"]
+        assert result[0].region == AWS_REGION_US_EAST_1
+        assert (
+            result[0].resource_arn
+            == f"arn:aws:guardduty:{AWS_REGION_US_EAST_1}:{AWS_ACCOUNT_NUMBER}:detector/{response['DetectorId']}"
+        )
+        assert result[0].resource_tags == []
+
+    @mock_aws
+    def test_ai_protection_disabled(self):
+        """A reported-disabled feature FAILs and names the detector."""
+        guardduty_client = client("guardduty", region_name=AWS_REGION_US_EAST_1)
+        response = guardduty_client.create_detector(
+            Enable=True,
+            Features=[{"Name": "AI_PROTECTION", "Status": "DISABLED"}],
+        )
+
+        result = _run_check(set_mocked_aws_provider([AWS_REGION_US_EAST_1]))
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert (
+            result[0].status_extended
+            == f"GuardDuty detector {response['DetectorId']} does not have AI Protection enabled."
+        )
+        assert result[0].resource_id == response["DetectorId"]
+        assert result[0].region == AWS_REGION_US_EAST_1
+
+    @mock_aws
+    def test_ai_protection_feature_absent(self):
+        """A feature GuardDuty does not report is not a feature GuardDuty turned off.
+
+        The Region or the GuardDuty version may not offer AI Protection at all.
+        """
+        guardduty_client = client("guardduty", region_name=AWS_REGION_US_EAST_1)
+        response = guardduty_client.create_detector(
+            Enable=True,
+            Features=[
+                {"Name": "S3_DATA_EVENTS", "Status": "ENABLED"},
+                {"Name": "LAMBDA_NETWORK_LOGS", "Status": "ENABLED"},
+            ],
+        )
+
+        result = _run_check(set_mocked_aws_provider([AWS_REGION_US_EAST_1]))
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert (
+            result[0].status_extended
+            == f"GuardDuty detector {response['DetectorId']} does not report the AI Protection feature, so verify manually whether AI Protection is available in region {AWS_REGION_US_EAST_1}."
+        )
+        assert result[0].resource_id == response["DetectorId"]
+        assert result[0].region == AWS_REGION_US_EAST_1
+
+    @mock_aws
+    def test_no_features_reported(self):
+        """An empty features array reads the same as an absent AI_PROTECTION entry."""
+        guardduty_client = client("guardduty", region_name=AWS_REGION_US_EAST_1)
+        response = guardduty_client.create_detector(Enable=True)
+
+        result = _run_check(set_mocked_aws_provider([AWS_REGION_US_EAST_1]))
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert (
+            result[0].status_extended
+            == f"GuardDuty detector {response['DetectorId']} does not report the AI Protection feature, so verify manually whether AI Protection is available in region {AWS_REGION_US_EAST_1}."
+        )
+
+    @mock_aws
+    def test_detector_not_enabled(self):
+        """A suspended detector is MANUAL: its feature state is unknown, not absent."""
+        guardduty_client = client("guardduty", region_name=AWS_REGION_US_EAST_1)
+        response = guardduty_client.create_detector(
+            Enable=False,
+            Features=[{"Name": "AI_PROTECTION", "Status": "ENABLED"}],
+        )
+
+        result = _run_check(set_mocked_aws_provider([AWS_REGION_US_EAST_1]))
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert (
+            result[0].status_extended
+            == f"GuardDuty detector {response['DetectorId']} is not enabled or could not be read, so AI Protection coverage could not be determined."
+        )
+
+    @mock_aws
+    def test_get_detector_unreadable(self):
+        """A denied GetDetector is unknown, not absent: MANUAL instead of FAIL."""
+        guardduty_client = client("guardduty", region_name=AWS_REGION_US_EAST_1)
+        response = guardduty_client.create_detector(
+            Enable=True,
+            Features=[{"Name": "AI_PROTECTION", "Status": "DISABLED"}],
+        )
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
+
+        with mock.patch(
+            "botocore.client.BaseClient._make_api_call", new=mock_get_detector_raises
+        ):
+            result = _run_check(aws_provider)
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert (
+            result[0].status_extended
+            == f"GuardDuty detector {response['DetectorId']} is not enabled or could not be read, so AI Protection coverage could not be determined."
+        )
+
+    @mock_aws
+    def test_real_get_detector_payload_ai_protection_disabled(self):
+        """The real GetDetector payload carries AI_PROTECTION alongside AI_ANALYST.
+
+        AI_PROTECTION is absent from the pinned DetectorFeatureResult enum, so this
+        asserts the name still reaches the check alongside the two runtime feature names.
+        """
+        guardduty_client = client("guardduty", region_name=AWS_REGION_US_EAST_1)
+        response = guardduty_client.create_detector(
+            Enable=True,
+            Features=[
+                {"Name": "CLOUD_TRAIL", "Status": "ENABLED"},
+                {"Name": "DNS_LOGS", "Status": "ENABLED"},
+                {"Name": "FLOW_LOGS", "Status": "ENABLED"},
+                {"Name": "S3_DATA_EVENTS", "Status": "ENABLED"},
+                {"Name": "EKS_AUDIT_LOGS", "Status": "ENABLED"},
+                {"Name": "EBS_MALWARE_PROTECTION", "Status": "ENABLED"},
+                {"Name": "RDS_LOGIN_EVENTS", "Status": "ENABLED"},
+                {"Name": "AI_PROTECTION", "Status": "DISABLED"},
+                {"Name": "AI_ANALYST", "Status": "ENABLED"},
+                {"Name": "EKS_RUNTIME_MONITORING", "Status": "DISABLED"},
+                {"Name": "LAMBDA_NETWORK_LOGS", "Status": "ENABLED"},
+                {"Name": "RUNTIME_MONITORING", "Status": "DISABLED"},
+            ],
+        )
+
+        result = _run_check(set_mocked_aws_provider([AWS_REGION_US_EAST_1]))
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert (
+            result[0].status_extended
+            == f"GuardDuty detector {response['DetectorId']} does not have AI Protection enabled."
+        )
diff --git a/tests/providers/aws/services/guardduty/guardduty_runtime_monitoring_enabled/guardduty_runtime_monitoring_enabled_test.py b/tests/providers/aws/services/guardduty/guardduty_runtime_monitoring_enabled/guardduty_runtime_monitoring_enabled_test.py
new file mode 100644
index 0000000000..9d861c5f23
--- /dev/null
+++ b/tests/providers/aws/services/guardduty/guardduty_runtime_monitoring_enabled/guardduty_runtime_monitoring_enabled_test.py
@@ -0,0 +1,270 @@
+from unittest import mock
+
+import botocore
+from boto3 import client
+from moto import mock_aws
+
+from prowler.providers.aws.services.guardduty.guardduty_service import GuardDuty
+from tests.providers.aws.utils import (
+    AWS_ACCOUNT_NUMBER,
+    AWS_REGION_US_EAST_1,
+    set_mocked_aws_provider,
+)
+
+CHECK_CLIENT_PATH = "prowler.providers.aws.services.guardduty.guardduty_runtime_monitoring_enabled.guardduty_runtime_monitoring_enabled.guardduty_client"
+
+make_api_call = botocore.client.BaseClient._make_api_call
+
+
+def mock_get_detector_raises(self, operation_name, kwarg):
+    """Deny GetDetector only, leaving every other GuardDuty operation intact."""
+    if operation_name == "GetDetector":
+        raise botocore.exceptions.ClientError(
+            {"Error": {"Code": "AccessDeniedException", "Message": "denied"}},
+            operation_name,
+        )
+    return make_api_call(self, operation_name, kwarg)
+
+
+def _run_check(aws_provider):
+    """Run the check against a GuardDuty service built from the mocked provider."""
+    with (
+        mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=aws_provider,
+        ),
+        mock.patch(CHECK_CLIENT_PATH, new=GuardDuty(aws_provider)),
+    ):
+        from prowler.providers.aws.services.guardduty.guardduty_runtime_monitoring_enabled.guardduty_runtime_monitoring_enabled import (
+            guardduty_runtime_monitoring_enabled,
+        )
+
+        return guardduty_runtime_monitoring_enabled().execute()
+
+
+class Test_guardduty_runtime_monitoring_enabled:
+    @mock_aws
+    def test_no_detectors(self):
+        """A Region with no detector has no resource to judge; guardduty_is_enabled owns it."""
+        client("guardduty", region_name=AWS_REGION_US_EAST_1)
+
+        result = _run_check(set_mocked_aws_provider([AWS_REGION_US_EAST_1]))
+
+        assert len(result) == 0
+
+    @mock_aws
+    def test_detector_disabled(self):
+        """A suspended detector is MANUAL, never dropped.
+
+        The detector exists, so omitting it would leave the Region unreported, which
+        reads as compliant -- and it is reported here with Runtime Monitoring ENABLED,
+        the case where the omission was hardest to notice.
+        """
+        guardduty_client = client("guardduty", region_name=AWS_REGION_US_EAST_1)
+        response = guardduty_client.create_detector(
+            Enable=False,
+            Features=[{"Name": "RUNTIME_MONITORING", "Status": "ENABLED"}],
+        )
+
+        result = _run_check(set_mocked_aws_provider([AWS_REGION_US_EAST_1]))
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert (
+            result[0].status_extended
+            == f"GuardDuty detector {response['DetectorId']} is not enabled or could not be read, so Runtime Monitoring coverage could not be determined."
+        )
+        assert result[0].resource_id == response["DetectorId"]
+        assert result[0].region == AWS_REGION_US_EAST_1
+
+    @mock_aws
+    def test_get_detector_unreadable(self):
+        """A denied GetDetector is unknown, not absent: MANUAL instead of FAIL.
+
+        Detector.status cannot distinguish this from a suspended detector, which is why
+        both carry the same MANUAL wording rather than a definite verdict.
+        """
+        guardduty_client = client("guardduty", region_name=AWS_REGION_US_EAST_1)
+        response = guardduty_client.create_detector(
+            Enable=True,
+            Features=[{"Name": "RUNTIME_MONITORING", "Status": "DISABLED"}],
+        )
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
+
+        with mock.patch(
+            "botocore.client.BaseClient._make_api_call", new=mock_get_detector_raises
+        ):
+            result = _run_check(aws_provider)
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert (
+            result[0].status_extended
+            == f"GuardDuty detector {response['DetectorId']} is not enabled or could not be read, so Runtime Monitoring coverage could not be determined."
+        )
+
+    @mock_aws
+    def test_runtime_monitoring_enabled(self):
+        """An enabled unified feature PASSes and carries the detector's own resource fields."""
+        guardduty_client = client("guardduty", region_name=AWS_REGION_US_EAST_1)
+        response = guardduty_client.create_detector(
+            Enable=True,
+            Features=[{"Name": "RUNTIME_MONITORING", "Status": "ENABLED"}],
+        )
+
+        result = _run_check(set_mocked_aws_provider([AWS_REGION_US_EAST_1]))
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+        assert (
+            result[0].status_extended
+            == f"GuardDuty detector {response['DetectorId']} has Runtime Monitoring enabled."
+        )
+        assert result[0].resource_id == response["DetectorId"]
+        assert result[0].region == AWS_REGION_US_EAST_1
+        assert (
+            result[0].resource_arn
+            == f"arn:aws:guardduty:{AWS_REGION_US_EAST_1}:{AWS_ACCOUNT_NUMBER}:detector/{response['DetectorId']}"
+        )
+        assert result[0].resource_tags == []
+
+    @mock_aws
+    def test_runtime_monitoring_disabled(self):
+        """A reported-disabled unified feature FAILs and names the detector."""
+        guardduty_client = client("guardduty", region_name=AWS_REGION_US_EAST_1)
+        response = guardduty_client.create_detector(
+            Enable=True,
+            Features=[{"Name": "RUNTIME_MONITORING", "Status": "DISABLED"}],
+        )
+
+        result = _run_check(set_mocked_aws_provider([AWS_REGION_US_EAST_1]))
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert (
+            result[0].status_extended
+            == f"GuardDuty detector {response['DetectorId']} does not have Runtime Monitoring enabled."
+        )
+        assert result[0].resource_id == response["DetectorId"]
+        assert result[0].region == AWS_REGION_US_EAST_1
+
+    @mock_aws
+    def test_unreported_runtime_feature_is_manual_not_fail(self):
+        """A feature the detector never reports is not the same as one it reports DISABLED.
+
+        GuardDuty returns a disabled feature with Status DISABLED rather than omitting
+        it -- which is exactly why AI_PROTECTION is recorded even when off -- so an
+        omitted RUNTIME_MONITORING means the Region does not offer the unified feature,
+        or the features array could not be read. Neither is a definite absence of
+        runtime coverage.
+        """
+        guardduty_client = client("guardduty", region_name=AWS_REGION_US_EAST_1)
+        response = guardduty_client.create_detector(
+            Enable=True,
+            Features=[{"Name": "S3_DATA_EVENTS", "Status": "ENABLED"}],
+        )
+
+        result = _run_check(set_mocked_aws_provider([AWS_REGION_US_EAST_1]))
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert (
+            result[0].status_extended
+            == f"GuardDuty detector {response['DetectorId']} did not report the Runtime Monitoring feature, so runtime coverage could not be determined; verify manually."
+        )
+
+    @mock_aws
+    def test_runtime_monitoring_reported_disabled_still_fails(self):
+        """The complement of the unreported case: reported and DISABLED stays a FAIL.
+
+        Making the unreported case MANUAL must not soften a definite absence of coverage.
+        """
+        guardduty_client = client("guardduty", region_name=AWS_REGION_US_EAST_1)
+        response = guardduty_client.create_detector(
+            Enable=True,
+            Features=[{"Name": "RUNTIME_MONITORING", "Status": "DISABLED"}],
+        )
+
+        result = _run_check(set_mocked_aws_provider([AWS_REGION_US_EAST_1]))
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert (
+            result[0].status_extended
+            == f"GuardDuty detector {response['DetectorId']} does not have Runtime Monitoring enabled."
+        )
+
+    @mock_aws
+    def test_legacy_eks_runtime_monitoring_only_fails(self):
+        """The legacy EKS-only feature covers Amazon EKS and nothing else.
+
+        It must not PASS a check about Amazon EC2 and Amazon ECS on Fargate coverage.
+        """
+        guardduty_client = client("guardduty", region_name=AWS_REGION_US_EAST_1)
+        response = guardduty_client.create_detector(
+            Enable=True,
+            Features=[
+                {"Name": "EKS_RUNTIME_MONITORING", "Status": "ENABLED"},
+                {"Name": "RUNTIME_MONITORING", "Status": "DISABLED"},
+            ],
+        )
+
+        result = _run_check(set_mocked_aws_provider([AWS_REGION_US_EAST_1]))
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert (
+            result[0].status_extended
+            == f"GuardDuty detector {response['DetectorId']} only has the legacy EKS Runtime Monitoring enabled, leaving Amazon EC2 instances and Amazon ECS on Fargate tasks without runtime coverage."
+        )
+
+    @mock_aws
+    def test_legacy_eks_only_without_any_unified_entry_fails(self):
+        """The real legacy shape: the unified feature is absent, not reported DISABLED.
+
+        The two features are mutually exclusive at the API, so a detector on the legacy
+        one has no RUNTIME_MONITORING entry at all -- which is the same absence that makes
+        an unknown detector MANUAL. The test above supplies a DISABLED unified entry as
+        well, so it never reaches that ambiguity. Here the legacy verdict has to win on
+        ordering alone: EKS coverage is stated, so EC2 and Fargate are definitively
+        uncovered rather than undetermined.
+        """
+        guardduty_client = client("guardduty", region_name=AWS_REGION_US_EAST_1)
+        response = guardduty_client.create_detector(
+            Enable=True,
+            Features=[{"Name": "EKS_RUNTIME_MONITORING", "Status": "ENABLED"}],
+        )
+
+        result = _run_check(set_mocked_aws_provider([AWS_REGION_US_EAST_1]))
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert (
+            result[0].status_extended
+            == f"GuardDuty detector {response['DetectorId']} only has the legacy EKS Runtime Monitoring enabled, leaving Amazon EC2 instances and Amazon ECS on Fargate tasks without runtime coverage."
+        )
+
+    @mock_aws
+    def test_unified_enabled_with_legacy_disabled(self):
+        """GetDetector returns an entry for both feature names on the same detector.
+
+        A DISABLED legacy feature must not mask the ENABLED unified one.
+        """
+        guardduty_client = client("guardduty", region_name=AWS_REGION_US_EAST_1)
+        response = guardduty_client.create_detector(
+            Enable=True,
+            Features=[
+                {"Name": "EKS_RUNTIME_MONITORING", "Status": "DISABLED"},
+                {"Name": "RUNTIME_MONITORING", "Status": "ENABLED"},
+            ],
+        )
+
+        result = _run_check(set_mocked_aws_provider([AWS_REGION_US_EAST_1]))
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+        assert (
+            result[0].status_extended
+            == f"GuardDuty detector {response['DetectorId']} has Runtime Monitoring enabled."
+        )
diff --git a/tests/providers/aws/services/guardduty/guardduty_service_test.py b/tests/providers/aws/services/guardduty/guardduty_service_test.py
index 4b903ecb4f..b73a81a0be 100644
--- a/tests/providers/aws/services/guardduty/guardduty_service_test.py
+++ b/tests/providers/aws/services/guardduty/guardduty_service_test.py
@@ -2,6 +2,7 @@ from datetime import datetime
 from unittest.mock import patch
 
 import botocore
+import pytest
 from boto3 import client
 from moto import mock_aws
 
@@ -143,6 +144,142 @@ class Test_GuardDuty_Service:
         assert guardduty.detectors[0].region == AWS_REGION_EU_WEST_1
         assert guardduty.detectors[0].tags == [{"test": "test"}]
 
+    @mock_aws
+    @pytest.mark.parametrize(
+        "feature_name", ["EKS_RUNTIME_MONITORING", "RUNTIME_MONITORING"]
+    )
+    def test_get_detector_eks_runtime_monitoring(self, feature_name):
+        """Both feature names set eks_runtime_monitoring.
+
+        Unified Runtime Monitoring supersedes EKS Runtime Monitoring and covers EKS.
+        """
+        guardduty_client = client("guardduty", region_name=AWS_REGION_EU_WEST_1)
+        guardduty_client.create_detector(
+            Enable=True,
+            Features=[{"Name": feature_name, "Status": "ENABLED"}],
+        )
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        guardduty = GuardDuty(aws_provider)
+
+        assert len(guardduty.detectors) == 1
+        assert guardduty.detectors[0].eks_runtime_monitoring
+
+    @mock_aws
+    @pytest.mark.parametrize(
+        "feature_name", ["EKS_RUNTIME_MONITORING", "RUNTIME_MONITORING"]
+    )
+    def test_get_detector_eks_runtime_monitoring_disabled(self, feature_name):
+        """Neither feature name sets eks_runtime_monitoring while it is DISABLED."""
+        guardduty_client = client("guardduty", region_name=AWS_REGION_EU_WEST_1)
+        guardduty_client.create_detector(
+            Enable=True,
+            Features=[{"Name": feature_name, "Status": "DISABLED"}],
+        )
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        guardduty = GuardDuty(aws_provider)
+
+        assert len(guardduty.detectors) == 1
+        assert not guardduty.detectors[0].eks_runtime_monitoring
+
+    @mock_aws
+    def test_get_detector_unified_runtime_monitoring_with_disabled_eks_feature(self):
+        """GetDetector returns an entry for both feature names.
+
+        The DISABLED legacy feature must not mask the ENABLED unified one regardless of
+        the order they arrive in.
+        """
+        guardduty_client = client("guardduty", region_name=AWS_REGION_EU_WEST_1)
+        guardduty_client.create_detector(
+            Enable=True,
+            Features=[
+                {"Name": "EKS_RUNTIME_MONITORING", "Status": "DISABLED"},
+                {"Name": "RUNTIME_MONITORING", "Status": "ENABLED"},
+            ],
+        )
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        guardduty = GuardDuty(aws_provider)
+
+        assert len(guardduty.detectors) == 1
+        assert guardduty.detectors[0].eks_runtime_monitoring
+
+    @mock_aws
+    def test_get_detector_runtime_monitoring_is_unified_only(self):
+        """The legacy EKS feature must not set runtime_monitoring.
+
+        Only the unified feature covers Amazon EC2 and Amazon ECS on Fargate.
+        """
+        guardduty_client = client("guardduty", region_name=AWS_REGION_EU_WEST_1)
+        guardduty_client.create_detector(
+            Enable=True,
+            Features=[{"Name": "EKS_RUNTIME_MONITORING", "Status": "ENABLED"}],
+        )
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        guardduty = GuardDuty(aws_provider)
+
+        assert len(guardduty.detectors) == 1
+        assert guardduty.detectors[0].eks_runtime_monitoring
+        assert not guardduty.detectors[0].runtime_monitoring
+
+    @mock_aws
+    @pytest.mark.parametrize("status", ["ENABLED", "DISABLED"])
+    def test_get_detector_runtime_monitoring(self, status):
+        """runtime_monitoring tracks the reported status of the unified feature."""
+        guardduty_client = client("guardduty", region_name=AWS_REGION_EU_WEST_1)
+        guardduty_client.create_detector(
+            Enable=True,
+            Features=[{"Name": "RUNTIME_MONITORING", "Status": status}],
+        )
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        guardduty = GuardDuty(aws_provider)
+
+        assert len(guardduty.detectors) == 1
+        assert guardduty.detectors[0].runtime_monitoring == (status == "ENABLED")
+
+    @mock_aws
+    @pytest.mark.parametrize(
+        "status, expected", [("ENABLED", True), ("DISABLED", False)]
+    )
+    def test_get_detector_ai_protection(self, status, expected):
+        """ai_protection is recorded as a bool for both reported statuses."""
+        guardduty_client = client("guardduty", region_name=AWS_REGION_EU_WEST_1)
+        guardduty_client.create_detector(
+            Enable=True,
+            Features=[{"Name": "AI_PROTECTION", "Status": status}],
+        )
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        guardduty = GuardDuty(aws_provider)
+
+        assert len(guardduty.detectors) == 1
+        assert guardduty.detectors[0].ai_protection is expected
+
+    @mock_aws
+    def test_get_detector_ai_protection_absent_stays_none(self):
+        """An AI_PROTECTION entry GuardDuty never returned must stay None.
+
+        That is what lets a check tell a Region without AI Protection apart from a
+        Region that offers the feature and disabled it.
+        """
+        guardduty_client = client("guardduty", region_name=AWS_REGION_EU_WEST_1)
+        guardduty_client.create_detector(
+            Enable=True,
+            Features=[
+                {"Name": "S3_DATA_EVENTS", "Status": "ENABLED"},
+                {"Name": "AI_ANALYST", "Status": "ENABLED"},
+            ],
+        )
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        guardduty = GuardDuty(aws_provider)
+
+        assert len(guardduty.detectors) == 1
+        assert guardduty.detectors[0].ai_protection is None
+
     @mock_aws
     # Test GuardDuty session
     def test_list_findings(self):

From e5df95c2591843e5b81cf4414670d97758f1e5c5 Mon Sep 17 00:00:00 2001
From: Jonathan Nguyen <87379568+tamg-aws@users.noreply.github.com>
Date: Tue, 1 Sep 2026 06:40:45 -0500
Subject: [PATCH 15/77] feat(eks): assess Kubernetes network policy enforcement
 in the Amazon VPC CNI add-on (#12661)

---
 ...ks-cluster-vpc-cni-network-policy.added.md |   1 +
 .../aws/aws_ai_security_framework_aws.json    |   1 +
 .../__init__.py                               |   0
 ..._cni_network_policy_enforced.metadata.json |  42 +++
 ...cluster_vpc_cni_network_policy_enforced.py | 129 ++++++++
 .../providers/aws/services/eks/eks_service.py |  64 ++++
 ...er_vpc_cni_network_policy_enforced_test.py | 307 ++++++++++++++++++
 .../aws/services/eks/eks_service_test.py      | 156 +++++++++
 8 files changed, 700 insertions(+)
 create mode 100644 prowler/changelog.d/eks-cluster-vpc-cni-network-policy.added.md
 create mode 100644 prowler/providers/aws/services/eks/eks_cluster_vpc_cni_network_policy_enforced/__init__.py
 create mode 100644 prowler/providers/aws/services/eks/eks_cluster_vpc_cni_network_policy_enforced/eks_cluster_vpc_cni_network_policy_enforced.metadata.json
 create mode 100644 prowler/providers/aws/services/eks/eks_cluster_vpc_cni_network_policy_enforced/eks_cluster_vpc_cni_network_policy_enforced.py
 create mode 100644 tests/providers/aws/services/eks/eks_cluster_vpc_cni_network_policy_enforced/eks_cluster_vpc_cni_network_policy_enforced_test.py

diff --git a/prowler/changelog.d/eks-cluster-vpc-cni-network-policy.added.md b/prowler/changelog.d/eks-cluster-vpc-cni-network-policy.added.md
new file mode 100644
index 0000000000..7002eae1d9
--- /dev/null
+++ b/prowler/changelog.d/eks-cluster-vpc-cni-network-policy.added.md
@@ -0,0 +1 @@
+`eks_cluster_vpc_cni_network_policy_enforced` check for AWS provider, flagging EKS clusters whose Amazon VPC CNI managed add-on does not enable Kubernetes network policy enforcement, and reporting MANUAL where the EKS API cannot show the setting
diff --git a/prowler/compliance/aws/aws_ai_security_framework_aws.json b/prowler/compliance/aws/aws_ai_security_framework_aws.json
index 205d5902d1..666530ef53 100644
--- a/prowler/compliance/aws/aws_ai_security_framework_aws.json
+++ b/prowler/compliance/aws/aws_ai_security_framework_aws.json
@@ -1130,6 +1130,7 @@
         "eks_cluster_not_publicly_accessible",
         "eks_cluster_private_nodes_enabled",
         "eks_cluster_network_policy_enabled",
+        "eks_cluster_vpc_cni_network_policy_enforced",
         "eks_cluster_uses_a_supported_version",
         "eks_control_plane_logging_all_types_enabled",
         "eks_cluster_kms_cmk_encryption_in_secrets_enabled",
diff --git a/prowler/providers/aws/services/eks/eks_cluster_vpc_cni_network_policy_enforced/__init__.py b/prowler/providers/aws/services/eks/eks_cluster_vpc_cni_network_policy_enforced/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/eks/eks_cluster_vpc_cni_network_policy_enforced/eks_cluster_vpc_cni_network_policy_enforced.metadata.json b/prowler/providers/aws/services/eks/eks_cluster_vpc_cni_network_policy_enforced/eks_cluster_vpc_cni_network_policy_enforced.metadata.json
new file mode 100644
index 0000000000..f9b4bb0b30
--- /dev/null
+++ b/prowler/providers/aws/services/eks/eks_cluster_vpc_cni_network_policy_enforced/eks_cluster_vpc_cni_network_policy_enforced.metadata.json
@@ -0,0 +1,42 @@
+{
+  "Provider": "aws",
+  "CheckID": "eks_cluster_vpc_cni_network_policy_enforced",
+  "CheckTitle": "EKS cluster enforces Kubernetes network policies through the Amazon VPC CNI add-on",
+  "CheckType": [
+    "Software and Configuration Checks/AWS Security Best Practices/Network Reachability",
+    "TTPs/Lateral Movement"
+  ],
+  "ServiceName": "eks",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "",
+  "Severity": "medium",
+  "ResourceType": "AwsEksCluster",
+  "ResourceGroup": "container",
+  "Description": "**Amazon EKS clusters** are evaluated for whether the **Amazon VPC CNI** managed add-on sets `enableNetworkPolicy` to `true`, which is what makes the CNI enforce Kubernetes `NetworkPolicy` resources. The policy objects themselves live in the cluster and are not exposed by the EKS API, so only this enforcement precondition is verified.",
+  "Risk": "Without CNI **network policy enforcement** every `NetworkPolicy` an operator authors is inert, so pods reach every other pod and service in the cluster. That unrestricted east-west path lets one compromised container move **laterally** to sidecars, tool executors and internal APIs, widening the blast radius and easing **data exfiltration**.",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://docs.aws.amazon.com/eks/latest/userguide/cni-network-policy.html",
+    "https://docs.aws.amazon.com/eks/latest/APIReference/API_UpdateAddon.html",
+    "https://docs.aws.amazon.com/eks/latest/userguide/updating-an-add-on.html"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "aws eks update-addon --cluster-name <example_cluster_name> --addon-name vpc-cni --resolve-conflicts PRESERVE --configuration-values '{\"enableNetworkPolicy\":\"true\"}'",
+      "NativeIaC": "```yaml\n# CloudFormation: enable network policy enforcement in the VPC CNI add-on\nResources:\n  <example_resource_name>:\n    Type: AWS::EKS::Addon\n    Properties:\n      ClusterName: <example_cluster_name>\n      AddonName: vpc-cni\n      ResolveConflicts: PRESERVE\n      ConfigurationValues: '{\"enableNetworkPolicy\":\"true\"}'  # critical: makes the CNI enforce NetworkPolicy resources\n```",
+      "Other": "1. Open the AWS Console and go to EKS > Clusters\n2. Select <your cluster> and open the Add-ons tab\n3. Select the Amazon VPC CNI add-on and click Edit\n4. Expand Optional configuration settings and set enableNetworkPolicy to \"true\" in the configuration values\n5. Click Save changes",
+      "Terraform": "```hcl\n# Enable network policy enforcement in the VPC CNI managed add-on\nresource \"aws_eks_addon\" \"<example_resource_name>\" {\n  cluster_name                = \"<example_cluster_name>\"\n  addon_name                  = \"vpc-cni\"\n  resolve_conflicts_on_update = \"PRESERVE\"\n\n  configuration_values = jsonencode({\n    enableNetworkPolicy = \"true\"  # critical: makes the CNI enforce NetworkPolicy resources\n  })\n}\n```"
+    },
+    "Recommendation": {
+      "Text": "Set `enableNetworkPolicy` to `true` on the Amazon VPC CNI add-on, then author `NetworkPolicy` resources that allow each workload only its declared dependencies, ideally with `strict` enforcement mode so traffic is denied until the policy is in place. Layer security groups for Pods to reach VPC resources such as databases.",
+      "Url": "https://hub.prowler.com/check/eks_cluster_vpc_cni_network_policy_enforced"
+    }
+  },
+  "Categories": [
+    "trust-boundaries",
+    "cluster-security"
+  ],
+  "DependsOn": [],
+  "RelatedTo": [],
+  "Notes": "The EKS API exposes only the add-on setting, not the Kubernetes NetworkPolicy resources, so a PASS is the enforcement precondition rather than proof that pod-to-pod traffic is restricted. A FAIL is a statement about the managed add-on, not about the cluster: two documented architectures enforce network policies with this setting false and neither is visible to the EKS API. A third-party policy engine -- the EKS Best Practices Guide recommends Calico and Cilium in its 'ThirdParty Network Policy Engines' section (eks/latest/best-practices/network-security.html) -- would correctly leave it false, since two enforcers are not run together. And a self-managed VPC CNI can be enabled by Helm or by the amazon-vpc-cni ConfigMap key enable-network-policy-controller with the aws-node DaemonSet, two of the three paths AWS documents (eks/latest/userguide/cni-network-policy-configure.html); only the managed add-on path is readable here. A cluster with no vpc-cni managed add-on at all reports MANUAL for the same reason. Detecting Calico or Cilium is deliberately not attempted, because any signal would be a guess presented as a measurement."
+}
diff --git a/prowler/providers/aws/services/eks/eks_cluster_vpc_cni_network_policy_enforced/eks_cluster_vpc_cni_network_policy_enforced.py b/prowler/providers/aws/services/eks/eks_cluster_vpc_cni_network_policy_enforced/eks_cluster_vpc_cni_network_policy_enforced.py
new file mode 100644
index 0000000000..cd634c9278
--- /dev/null
+++ b/prowler/providers/aws/services/eks/eks_cluster_vpc_cni_network_policy_enforced/eks_cluster_vpc_cni_network_policy_enforced.py
@@ -0,0 +1,129 @@
+import json
+from typing import Optional
+
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.eks.eks_client import eks_client
+
+VPC_CNI_ADDON_NAME = "vpc-cni"
+NETWORK_POLICY_KEY = "enableNetworkPolicy"
+
+
+def parse_configuration_values(configuration_values: Optional[str]) -> Optional[dict]:
+    """Decode an EKS add-on `configurationValues` blob.
+
+    Args:
+        configuration_values: The raw JSON string returned by DescribeAddon, which is
+            absent when no configuration has been supplied for the add-on.
+
+    Returns:
+        The decoded mapping, an empty mapping when nothing was supplied, or None when
+        the blob is not a readable JSON object.
+    """
+    if not configuration_values:
+        return {}
+    try:
+        configuration = json.loads(configuration_values)
+    except ValueError:
+        return None
+    return configuration if isinstance(configuration, dict) else None
+
+
+def boolean_configuration_value(value: object) -> Optional[bool]:
+    """Read a VPC CNI boolean setting.
+
+    The add-on configuration schema types these as a string carrying `"format": "boolean"`,
+    so the API returns `"true"` rather than `true`; a JSON boolean is accepted as well
+    because the schema is add-on-version specific and this blob is otherwise untyped.
+
+    Args:
+        value: The value found in the add-on configuration, if any.
+
+    Returns:
+        The boolean it denotes, or None when it is absent or not a recognized boolean.
+    """
+    if isinstance(value, bool):
+        return value
+    if isinstance(value, str) and value.strip().lower() in ("true", "false"):
+        return value.strip().lower() == "true"
+    return None
+
+
+class eks_cluster_vpc_cni_network_policy_enforced(Check):
+    """Ensure the Amazon VPC CNI add-on enforces Kubernetes network policies.
+
+    Kubernetes NetworkPolicy resources live in the cluster and are not exposed by the
+    EKS API. What the API does expose is whether the Amazon VPC CNI managed add-on has
+    network policy enforcement switched on, which is the precondition for any
+    NetworkPolicy to take effect.
+    - PASS: The Amazon VPC CNI add-on sets enableNetworkPolicy to true.
+    - FAIL: The Amazon VPC CNI add-on sets enableNetworkPolicy to false.
+    - MANUAL: The setting cannot be read, or the cluster does not use the Amazon VPC CNI
+      managed add-on.
+
+    TWO WAYS A CLUSTER CAN ENFORCE NETWORK POLICIES WITHOUT THIS SETTING BEING TRUE, so a
+    FAIL is a statement about the managed add-on and not about the cluster. Neither is
+    fixable by reading more of the AWS API: both live in in-cluster state that
+    DescribeAddon cannot see.
+
+    1. A third-party policy engine. The EKS Best Practices Guide recommends Calico and
+       Cilium for requirements the VPC CNI does not cover, such as Layer 7 and DNS
+       hostname rules, in its "ThirdParty Network Policy Engines" section
+       (https://docs.aws.amazon.com/eks/latest/best-practices/network-security.html).
+       A cluster enforcing through one of those would correctly leave this setting false,
+       because two enforcers are not run together.
+    2. A self-managed VPC CNI. AWS documents three ways to enable the feature and only the
+       first is visible here
+       (https://docs.aws.amazon.com/eks/latest/userguide/cni-network-policy-configure.html):
+       `aws eks update-addon --addon-name vpc-cni` with configurationValues; `helm upgrade
+       ... aws-vpc-cni`; or the `amazon-vpc-cni` ConfigMap key
+       `enable-network-policy-controller: "true"` together with policy enforcement in the
+       aws-node container of the VPC CNI DaemonSet. The second and third leave the EKS
+       control plane with nothing to report.
+
+    Detecting either is deliberately NOT attempted. Calico and Cilium are invisible to the
+    AWS API, so any signal would be a guess presented as a measurement.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Execute the check logic.
+
+        Returns:
+            A list of reports containing the result of the check.
+        """
+        findings = []
+        for cluster in eks_client.clusters:
+            report = Check_Report_AWS(metadata=self.metadata(), resource=cluster)
+            report.status = "MANUAL"
+            addon = cluster.addons.get(VPC_CNI_ADDON_NAME)
+
+            if addon is None and cluster.addons_discovery_failed:
+                report.status_extended = f"EKS cluster {cluster.name} add-ons could not be listed, so Kubernetes network policy enforcement in the Amazon VPC CNI add-on cannot be determined."
+            elif addon is None:
+                report.status_extended = f"EKS cluster {cluster.name} does not use the Amazon VPC CNI managed add-on, so Kubernetes network policy enforcement cannot be determined from the EKS API. Review the self-managed CNI configuration in the cluster."
+            elif addon.configuration_discovery_failed:
+                report.status_extended = f"EKS cluster {cluster.name} Amazon VPC CNI add-on configuration could not be read, so Kubernetes network policy enforcement cannot be determined."
+            else:
+                configuration = parse_configuration_values(addon.configuration_values)
+                if configuration is None:
+                    report.status_extended = f"EKS cluster {cluster.name} Amazon VPC CNI add-on configuration values are not a readable JSON object, so Kubernetes network policy enforcement cannot be determined."
+                else:
+                    network_policy_enabled = boolean_configuration_value(
+                        configuration.get(NETWORK_POLICY_KEY)
+                    )
+                    if network_policy_enabled is None:
+                        report.status_extended = f"EKS cluster {cluster.name} Amazon VPC CNI add-on does not set {NETWORK_POLICY_KEY} to true or false, so Kubernetes network policy enforcement cannot be determined."
+                    elif network_policy_enabled:
+                        report.status = "PASS"
+                        report.status_extended = f"EKS cluster {cluster.name} enforces Kubernetes network policies through the Amazon VPC CNI add-on. This does not confirm that NetworkPolicy resources restricting pod-to-pod traffic exist in the cluster."
+                    else:
+                        # States the measurement, not the inference from it. The previous wording --
+                        # "cluster does not enforce Kubernetes network policies" -- claimed a cluster
+                        # property from an add-on setting, and is false for a cluster enforcing
+                        # through Calico or Cilium, or through a self-managed VPC CNI. Both are
+                        # documented architectures rather than edge cases; see the class docstring.
+                        report.status = "FAIL"
+                        report.status_extended = f"EKS cluster {cluster.name} Amazon VPC CNI managed add-on does not enforce Kubernetes network policies, since it sets {NETWORK_POLICY_KEY} to false. Enforcement by a third-party policy engine or a self-managed VPC CNI is not visible to the EKS API and is not evaluated."
+
+            findings.append(report)
+
+        return findings
diff --git a/prowler/providers/aws/services/eks/eks_service.py b/prowler/providers/aws/services/eks/eks_service.py
index b0ccace49b..ef06feb823 100644
--- a/prowler/providers/aws/services/eks/eks_service.py
+++ b/prowler/providers/aws/services/eks/eks_service.py
@@ -6,14 +6,19 @@ from prowler.lib.logger import logger
 from prowler.lib.scan_filters.scan_filters import is_resource_filtered
 from prowler.providers.aws.lib.service.service import AWSService
 
+# DescribeAddon has no batch form, so only add-ons a check reads are described.
+COLLECTED_ADDONS = ("vpc-cni",)
+
 
 class EKS(AWSService):
     def __init__(self, provider):
+        """Collect the audited account's EKS clusters, their configuration and their add-ons."""
         # Call AWSService's __init__
         super().__init__(__class__.__name__, provider)
         self.clusters = []
         self.__threading_call__(self._list_clusters)
         self._describe_cluster(self.regional_clients)
+        self.__threading_call__(self._describe_cluster_addons, self.clusters)
 
     def _list_clusters(self, regional_client):
         logger.info("EKS listing clusters...")
@@ -95,12 +100,69 @@ class EKS(AWSService):
                 f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
             )
 
+    def _describe_cluster_addons(self, cluster):
+        """Attach the add-ons named in COLLECTED_ADDONS, with their configuration, to a cluster.
+
+        ListAddons names every add-on installed on the cluster and DescribeAddon then supplies
+        the ARN and the raw `configurationValues` blob for the ones checks read. A failed listing
+        sets `addons_discovery_failed` on the cluster and a failed describe sets
+        `configuration_discovery_failed` on the add-on, so a check can tell an add-on that is
+        absent from one whose state could not be read instead of reporting both as absent.
+        """
+        logger.info("EKS describing cluster add-ons...")
+        try:
+            regional_client = self.regional_clients[cluster.region]
+            list_addons_paginator = regional_client.get_paginator("list_addons")
+            for page in list_addons_paginator.paginate(clusterName=cluster.name):
+                for addon_name in page["addons"]:
+                    if addon_name in COLLECTED_ADDONS:
+                        cluster.addons[addon_name] = EKSAddon(name=addon_name)
+        except Exception as error:
+            cluster.addons_discovery_failed = True
+            logger.error(
+                f"{cluster.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
+            )
+            return
+
+        for addon in cluster.addons.values():
+            try:
+                describe_addon = regional_client.describe_addon(
+                    clusterName=cluster.name, addonName=addon.name
+                )
+                addon.arn = describe_addon["addon"].get("addonArn")
+                addon.configuration_values = describe_addon["addon"].get(
+                    "configurationValues"
+                )
+            except Exception as error:
+                addon.configuration_discovery_failed = True
+                logger.error(
+                    f"{cluster.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
+                )
+
 
 class EKSClusterLoggingEntity(BaseModel):
     types: list[str] = None
     enabled: bool = None
 
 
+class EKSAddon(BaseModel):
+    """An EKS managed add-on, with the configuration values collected for it.
+
+    Attributes:
+        name: The add-on name as returned by ListAddons.
+        arn: The add-on ARN, absent when DescribeAddon could not be read.
+        configuration_values: The raw JSON blob supplied for the add-on, absent when none
+            was supplied or when DescribeAddon could not be read.
+        configuration_discovery_failed: True when DescribeAddon failed, so a check can
+            tell a setting that is unset from one that could not be read.
+    """
+
+    name: str
+    arn: Optional[str] = None
+    configuration_values: Optional[str] = None
+    configuration_discovery_failed: bool = False
+
+
 class EKSCluster(BaseModel):
     name: str
     arn: str
@@ -113,4 +175,6 @@ class EKSCluster(BaseModel):
     public_access_cidrs: list[str] = []
     encryptionConfig: bool = None
     deletion_protection: bool = None
+    addons: dict[str, EKSAddon] = {}
+    addons_discovery_failed: bool = False
     tags: Optional[list] = []
diff --git a/tests/providers/aws/services/eks/eks_cluster_vpc_cni_network_policy_enforced/eks_cluster_vpc_cni_network_policy_enforced_test.py b/tests/providers/aws/services/eks/eks_cluster_vpc_cni_network_policy_enforced/eks_cluster_vpc_cni_network_policy_enforced_test.py
new file mode 100644
index 0000000000..56b9990afe
--- /dev/null
+++ b/tests/providers/aws/services/eks/eks_cluster_vpc_cni_network_policy_enforced/eks_cluster_vpc_cni_network_policy_enforced_test.py
@@ -0,0 +1,307 @@
+from unittest import mock
+
+import pytest
+
+from prowler.providers.aws.services.eks.eks_service import EKSAddon, EKSCluster
+from tests.providers.aws.utils import AWS_ACCOUNT_NUMBER, AWS_REGION_EU_WEST_1
+
+cluster_name = "cluster_test"
+cluster_arn = (
+    f"arn:aws:eks:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:cluster/{cluster_name}"
+)
+addon_arn = f"arn:aws:eks:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:addon/{cluster_name}/vpc-cni/1a2b3c4d"
+
+
+def build_cluster(name=cluster_name, arn=cluster_arn, **kwargs):
+    """Build an EKSCluster whose add-on state the caller supplies through kwargs.
+
+    The defaults leave `addons` empty and both discovery flags false, which is the shape of a
+    cluster that carries no managed add-ons rather than one whose add-ons could not be read.
+    """
+    return EKSCluster(name=name, arn=arn, region=AWS_REGION_EU_WEST_1, **kwargs)
+
+
+def vpc_cni_addon(configuration_values=None, configuration_discovery_failed=False):
+    """Build the `addons` mapping for a cluster carrying the vpc-cni managed add-on.
+
+    `configuration_values` is passed through as the raw JSON string DescribeAddon returns, so a
+    test can supply the exact blob the API would, including an absent or malformed one.
+    """
+    return {
+        "vpc-cni": EKSAddon(
+            name="vpc-cni",
+            arn=addon_arn,
+            configuration_values=configuration_values,
+            configuration_discovery_failed=configuration_discovery_failed,
+        )
+    }
+
+
+def run_check(clusters):
+    """Execute the check against the given clusters and return its reports.
+
+    The clusters are model objects, so the reports exercise the check's own branching over
+    already-collected state and no EKS API call takes place.
+    """
+    eks_client = mock.MagicMock
+    eks_client.clusters = clusters
+    with mock.patch(
+        "prowler.providers.aws.services.eks.eks_service.EKS",
+        eks_client,
+    ):
+        from prowler.providers.aws.services.eks.eks_cluster_vpc_cni_network_policy_enforced.eks_cluster_vpc_cni_network_policy_enforced import (
+            eks_cluster_vpc_cni_network_policy_enforced,
+        )
+
+        return eks_cluster_vpc_cni_network_policy_enforced().execute()
+
+
+class Test_eks_cluster_vpc_cni_network_policy_enforced:
+    def test_no_clusters(self):
+        """An account with no EKS clusters must produce no reports at all."""
+        assert len(run_check([])) == 0
+
+    def test_addons_discovery_failed(self):
+        """A cluster whose ListAddons call failed must be MANUAL, not FAIL.
+
+        The add-on mapping is empty in both this case and the no-managed-add-on case, so the
+        cluster-level flag is what separates "unknown" from "not installed".
+        """
+        result = run_check([build_cluster(addons_discovery_failed=True)])
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert result[0].status_extended == (
+            f"EKS cluster {cluster_name} add-ons could not be listed, so Kubernetes "
+            "network policy enforcement in the Amazon VPC CNI add-on cannot be determined."
+        )
+        assert result[0].resource_id == cluster_name
+        assert result[0].resource_arn == cluster_arn
+        assert result[0].region == AWS_REGION_EU_WEST_1
+
+    def test_no_vpc_cni_addon(self):
+        """A cluster with managed add-ons but no vpc-cni must be MANUAL and name the CNI.
+
+        The EKS API exposes nothing about a CNI it does not manage, so the verdict cannot be
+        FAIL: the cluster may well enforce network policies through a self-managed CNI.
+        """
+        result = run_check(
+            [build_cluster(addons={"coredns": EKSAddon(name="coredns")})]
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert result[0].status_extended == (
+            f"EKS cluster {cluster_name} does not use the Amazon VPC CNI managed "
+            "add-on, so Kubernetes network policy enforcement cannot be determined "
+            "from the EKS API. Review the self-managed CNI configuration in the cluster."
+        )
+        assert result[0].resource_id == cluster_name
+        assert result[0].resource_arn == cluster_arn
+        assert result[0].region == AWS_REGION_EU_WEST_1
+
+    def test_addons_listed_but_empty(self):
+        """A cluster whose add-ons listed successfully as empty must get the not-installed wording.
+
+        Same MANUAL verdict as a failed listing but a different explanation, so the report does
+        not tell an operator to fix permissions when the add-on is simply not there.
+        """
+        result = run_check([build_cluster(addons={})])
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert result[0].status_extended == (
+            f"EKS cluster {cluster_name} does not use the Amazon VPC CNI managed "
+            "add-on, so Kubernetes network policy enforcement cannot be determined "
+            "from the EKS API. Review the self-managed CNI configuration in the cluster."
+        )
+
+    def test_addon_configuration_unreadable(self):
+        """A vpc-cni add-on whose DescribeAddon call failed must be MANUAL.
+
+        The add-on is known to be installed, but its configuration was never read, so network
+        policy enforcement is undetermined rather than off.
+        """
+        result = run_check(
+            [build_cluster(addons=vpc_cni_addon(configuration_discovery_failed=True))]
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert result[0].status_extended == (
+            f"EKS cluster {cluster_name} Amazon VPC CNI add-on configuration could "
+            "not be read, so Kubernetes network policy enforcement cannot be determined."
+        )
+        assert result[0].resource_id == cluster_name
+        assert result[0].resource_arn == cluster_arn
+        assert result[0].region == AWS_REGION_EU_WEST_1
+
+    def test_addon_configuration_unreadable_wins_over_stale_values(self):
+        """A failed describe must stay MANUAL even when the model still carries a true setting.
+
+        Guards the branch order: reading `configuration_values` before checking the failure flag
+        would report PASS from a value the failed call did not return.
+        """
+        result = run_check(
+            [
+                build_cluster(
+                    addons=vpc_cni_addon(
+                        configuration_values='{"enableNetworkPolicy":"true"}',
+                        configuration_discovery_failed=True,
+                    )
+                )
+            ]
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert result[0].status_extended == (
+            f"EKS cluster {cluster_name} Amazon VPC CNI add-on configuration could "
+            "not be read, so Kubernetes network policy enforcement cannot be determined."
+        )
+
+    @pytest.mark.parametrize(
+        "configuration_values",
+        ['{"enableNetworkPolicy": "true"', '["enableNetworkPolicy"]', "true", "42"],
+    )
+    def test_addon_configuration_not_a_json_object(self, configuration_values):
+        """Configuration values that do not decode to a JSON object must be MANUAL.
+
+        Truncated JSON, an array, a bare boolean and a bare number each reach a different line of
+        the decoder, and none may raise out of the check or be read as an empty configuration.
+        """
+        result = run_check([build_cluster(addons=vpc_cni_addon(configuration_values))])
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert result[0].status_extended == (
+            f"EKS cluster {cluster_name} Amazon VPC CNI add-on configuration values "
+            "are not a readable JSON object, so Kubernetes network policy enforcement "
+            "cannot be determined."
+        )
+        assert result[0].resource_id == cluster_name
+        assert result[0].resource_arn == cluster_arn
+        assert result[0].region == AWS_REGION_EU_WEST_1
+
+    @pytest.mark.parametrize(
+        "configuration_values",
+        [
+            None,
+            "",
+            "{}",
+            '{"enableWindowsIpam": "false"}',
+            '{"enableNetworkPolicy": "yes"}',
+            '{"enableNetworkPolicy": 1}',
+            '{"enableNetworkPolicy": null}',
+        ],
+    )
+    def test_network_policy_setting_not_a_boolean(self, configuration_values):
+        """A configuration carrying no recognizable boolean for the setting must be MANUAL, never FAIL.
+
+        Absent, empty, a different key, `"yes"`, `1` and `null` all mean the setting was not
+        stated. Reporting FAIL on any of them would assert that enforcement is off on the strength
+        of a value the API never returned.
+        """
+        result = run_check([build_cluster(addons=vpc_cni_addon(configuration_values))])
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert result[0].status_extended == (
+            f"EKS cluster {cluster_name} Amazon VPC CNI add-on does not set "
+            "enableNetworkPolicy to true or false, so Kubernetes network policy "
+            "enforcement cannot be determined."
+        )
+        assert result[0].resource_id == cluster_name
+        assert result[0].resource_arn == cluster_arn
+        assert result[0].region == AWS_REGION_EU_WEST_1
+
+    @pytest.mark.parametrize(
+        "configuration_values",
+        [
+            '{"enableNetworkPolicy": "true"}',
+            '{"enableNetworkPolicy": "True"}',
+            '{"enableNetworkPolicy": true}',
+            '{"enableNetworkPolicy": "true", "enableWindowsIpam": "false"}',
+        ],
+    )
+    def test_network_policy_enforced(self, configuration_values):
+        """A cluster whose vpc-cni add-on enables the setting must PASS, string or boolean.
+
+        The add-on configuration schema types this setting as a string carrying
+        `"format": "boolean"`, so the API returns `"true"` rather than `true`; `"True"` and a JSON
+        boolean must land on the same verdict, and an unrelated sibling key must not disturb it.
+        """
+        result = run_check([build_cluster(addons=vpc_cni_addon(configuration_values))])
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+        assert result[0].status_extended == (
+            f"EKS cluster {cluster_name} enforces Kubernetes network policies through "
+            "the Amazon VPC CNI add-on. This does not confirm that NetworkPolicy "
+            "resources restricting pod-to-pod traffic exist in the cluster."
+        )
+        assert result[0].resource_id == cluster_name
+        assert result[0].resource_arn == cluster_arn
+        assert result[0].region == AWS_REGION_EU_WEST_1
+
+    @pytest.mark.parametrize(
+        "configuration_values",
+        [
+            '{"enableNetworkPolicy": "false"}',
+            '{"enableNetworkPolicy": "False"}',
+            '{"enableNetworkPolicy": false}',
+        ],
+    )
+    def test_network_policy_not_enforced(self, configuration_values):
+        """A cluster whose vpc-cni add-on sets the setting to false must FAIL, string or boolean.
+
+        `"false"`, `"False"` and a JSON `false` are the three forms the setting can arrive in, and
+        a decoder that only understood one of them would report MANUAL on a real misconfiguration.
+        """
+        result = run_check([build_cluster(addons=vpc_cni_addon(configuration_values))])
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert result[0].status_extended == (
+            f"EKS cluster {cluster_name} Amazon VPC CNI managed add-on does not enforce "
+            "Kubernetes network policies, since it sets enableNetworkPolicy to false. "
+            "Enforcement by a third-party policy engine or a self-managed VPC CNI is not "
+            "visible to the EKS API and is not evaluated."
+        )
+        # The finding must not claim a property of the CLUSTER from an add-on setting: a cluster
+        # enforcing through Calico or Cilium, or through a self-managed VPC CNI, has this setting
+        # false and does enforce. Both are documented architectures, so the old wording was false
+        # of them rather than merely imprecise.
+        assert "cluster does not enforce" not in result[0].status_extended
+        assert result[0].resource_id == cluster_name
+        assert result[0].resource_arn == cluster_arn
+        assert result[0].region == AWS_REGION_EU_WEST_1
+
+    def test_multiple_clusters(self):
+        """Six clusters must yield six reports, in input order, each judged on its own add-on.
+
+        Two enforcing, three not and one with no managed add-on, so a check that carried state
+        between iterations or reported once per account would not produce this split.
+        """
+        clusters = []
+        for index in range(6):
+            name = f"{cluster_name}_{index}"
+            arn = f"arn:aws:eks:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:cluster/{name}"
+            if index in (0, 1):
+                addons = vpc_cni_addon('{"enableNetworkPolicy": "true"}')
+            elif index in (2, 3, 4):
+                addons = vpc_cni_addon('{"enableNetworkPolicy": "false"}')
+            else:
+                addons = {}
+            clusters.append(build_cluster(name=name, arn=arn, addons=addons))
+
+        result = run_check(clusters)
+
+        assert len(result) == 6
+        statuses = [report.status for report in result]
+        assert statuses.count("PASS") == 2
+        assert statuses.count("FAIL") == 3
+        assert statuses.count("MANUAL") == 1
+        assert [report.resource_id for report in result] == [
+            f"{cluster_name}_{index}" for index in range(6)
+        ]
diff --git a/tests/providers/aws/services/eks/eks_service_test.py b/tests/providers/aws/services/eks/eks_service_test.py
index 86de0e246a..1feb75cc45 100644
--- a/tests/providers/aws/services/eks/eks_service_test.py
+++ b/tests/providers/aws/services/eks/eks_service_test.py
@@ -1,5 +1,6 @@
 from unittest.mock import patch
 
+import botocore
 from boto3 import client
 from moto import mock_aws
 
@@ -7,6 +8,7 @@ from prowler.providers.aws.services.eks.eks_service import EKS
 from tests.providers.aws.utils import (
     AWS_ACCOUNT_NUMBER,
     AWS_REGION_EU_WEST_1,
+    mocked_api_response,
     set_mocked_aws_provider,
 )
 
@@ -14,6 +16,77 @@ cluster_name = "test"
 cidr_block_vpc = "10.0.0.0/16"
 cidr_block_subnet_1 = "10.0.0.0/22"
 cidr_block_subnet_2 = "10.0.4.0/22"
+cluster_arn = (
+    f"arn:aws:eks:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:cluster/{cluster_name}"
+)
+vpc_cni_addon_arn = f"arn:aws:eks:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:addon/{cluster_name}/vpc-cni/1a2b3c4d"
+vpc_cni_configuration_values = '{"enableNetworkPolicy":"true"}'
+
+make_api_call = botocore.client.BaseClient._make_api_call
+described_addons = []
+
+
+def _addon_response(addon_name, arn, configuration_values=None):
+    """Build a DescribeAddon response, omitting `configurationValues` when none is given.
+
+    The key is absent from the API response for an add-on left at its defaults, so passing None
+    reproduces that rather than sending an empty string.
+    """
+    addon = {"addonName": addon_name, "addonArn": arn, "clusterName": cluster_name}
+    if configuration_values is not None:
+        addon["configurationValues"] = configuration_values
+    return mocked_api_response("eks", "DescribeAddon", {"addon": addon})
+
+
+def mock_make_api_call_addons(self, operation_name, kwargs):
+    """Serve the add-on inventory, with vpc-cni on the SECOND ListAddons page."""
+    if operation_name == "ListClusters":
+        return mocked_api_response("eks", "ListClusters", {"clusters": [cluster_name]})
+    if operation_name == "DescribeCluster":
+        return mocked_api_response(
+            "eks",
+            "DescribeCluster",
+            {"cluster": {"name": cluster_name, "arn": cluster_arn, "version": "1.34"}},
+        )
+    if operation_name == "ListAddons":
+        if kwargs.get("nextToken") is None:
+            return mocked_api_response(
+                "eks",
+                "ListAddons",
+                {"addons": ["coredns"], "nextToken": "second-page"},
+            )
+        return mocked_api_response("eks", "ListAddons", {"addons": ["vpc-cni"]})
+    if operation_name == "DescribeAddon":
+        described_addons.append(kwargs["addonName"])
+        if kwargs["addonName"] == "vpc-cni":
+            return _addon_response(
+                "vpc-cni", vpc_cni_addon_arn, vpc_cni_configuration_values
+            )
+        return _addon_response(
+            "coredns",
+            f"arn:aws:eks:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:addon/{cluster_name}/coredns/5e6f7a8b",
+        )
+    return make_api_call(self, operation_name, kwargs)
+
+
+def mock_make_api_call_list_addons_denied(self, operation_name, kwargs):
+    """Deny ListAddons and serve every other call, as a role without eks:ListAddons would."""
+    if operation_name == "ListAddons":
+        raise botocore.exceptions.ClientError(
+            {"Error": {"Code": "AccessDeniedException", "Message": "denied"}},
+            operation_name,
+        )
+    return mock_make_api_call_addons(self, operation_name, kwargs)
+
+
+def mock_make_api_call_describe_vpc_cni_denied(self, operation_name, kwargs):
+    """Deny DescribeAddon for vpc-cni only, so listing succeeds and the per-add-on read fails."""
+    if operation_name == "DescribeAddon" and kwargs["addonName"] == "vpc-cni":
+        raise botocore.exceptions.ClientError(
+            {"Error": {"Code": "AccessDeniedException", "Message": "denied"}},
+            operation_name,
+        )
+    return mock_make_api_call_addons(self, operation_name, kwargs)
 
 
 def mock_generate_regional_clients(provider, service):
@@ -139,3 +212,86 @@ class Test_EKS_Service:
         assert eks.clusters[0].public_access_cidrs == ["0.0.0.0/0"]
         assert eks.clusters[0].encryptionConfig
         assert eks.clusters[0].version == "1.10"
+
+
+@patch(
+    "prowler.providers.aws.aws_provider.AwsProvider.generate_regional_clients",
+    new=mock_generate_regional_clients,
+)
+class Test_EKS_Service_Addons:
+    # Test EKS describe cluster add-ons
+    @mock_aws
+    @patch(
+        "botocore.client.BaseClient._make_api_call",
+        new=mock_make_api_call_addons,
+    )
+    def test__describe_cluster_addons(self):
+        """vpc-cni is collected with its ARN and configuration from the SECOND ListAddons page.
+
+        Also asserts coredns costs no DescribeAddon call: it is listed on the cluster but not in
+        COLLECTED_ADDONS, and DescribeAddon has no batch form, so describing it would be one extra
+        API call per cluster for data no check reads.
+        """
+        described_addons.clear()
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        eks = EKS(aws_provider)
+
+        assert len(eks.clusters) == 1
+        cluster = eks.clusters[0]
+        assert not cluster.addons_discovery_failed
+        # vpc-cni is only on the second ListAddons page, so this fails without pagination
+        assert sorted(cluster.addons) == ["vpc-cni"]
+        assert cluster.addons["vpc-cni"].name == "vpc-cni"
+        assert cluster.addons["vpc-cni"].arn == vpc_cni_addon_arn
+        assert (
+            cluster.addons["vpc-cni"].configuration_values
+            == vpc_cni_configuration_values
+        )
+        assert not cluster.addons["vpc-cni"].configuration_discovery_failed
+        # coredns is listed but not in COLLECTED_ADDONS, so it costs no DescribeAddon call
+        assert described_addons == ["vpc-cni"]
+
+    # Test EKS cluster add-ons cannot be listed
+    @mock_aws
+    @patch(
+        "botocore.client.BaseClient._make_api_call",
+        new=mock_make_api_call_list_addons_denied,
+    )
+    def test__describe_cluster_addons_list_denied(self):
+        """A denied ListAddons sets addons_discovery_failed and issues no DescribeAddon call.
+
+        The cluster itself must survive collection: a missing add-on permission may not cost the
+        scan every other EKS finding for that cluster.
+        """
+        described_addons.clear()
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        eks = EKS(aws_provider)
+
+        assert len(eks.clusters) == 1
+        assert eks.clusters[0].addons_discovery_failed
+        assert eks.clusters[0].addons == {}
+        assert described_addons == []
+
+    # Test EKS cluster add-on configuration cannot be described
+    @mock_aws
+    @patch(
+        "botocore.client.BaseClient._make_api_call",
+        new=mock_make_api_call_describe_vpc_cni_denied,
+    )
+    def test__describe_cluster_addons_describe_denied(self):
+        """A denied DescribeAddon flags the add-on, not the cluster, and leaves its fields None.
+
+        The add-on is known to exist because ListAddons succeeded, so the failure belongs on
+        `configuration_discovery_failed` while `addons_discovery_failed` stays false.
+        """
+        described_addons.clear()
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        eks = EKS(aws_provider)
+
+        assert len(eks.clusters) == 1
+        cluster = eks.clusters[0]
+        assert not cluster.addons_discovery_failed
+        assert sorted(cluster.addons) == ["vpc-cni"]
+        assert cluster.addons["vpc-cni"].configuration_discovery_failed
+        assert cluster.addons["vpc-cni"].configuration_values is None
+        assert cluster.addons["vpc-cni"].arn is None

From f295d290dd96bcd2ca5479bc78535227e2f71e12 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Tue, 1 Sep 2026 14:00:04 +0200
Subject: [PATCH 16/77] feat(image): private network allowlist for SSRF guard
 (#12678)

---
 .../providers/image/getting-started-image.mdx |  14 +-
 .../image-private-network-allowlist.added.md  |   1 +
 ...mage-registry-basic-auth-fallback.fixed.md |   1 +
 ...image-registry-bearer-auth-switch.fixed.md |   1 +
 .../image-registry-insecure-trivy.fixed.md    |   1 +
 .../providers/image/exceptions/exceptions.py  |  13 +
 prowler/providers/image/image_provider.py     |   2 +
 prowler/providers/image/lib/registry/base.py  |  79 +++-
 .../image/lib/registry/oci_adapter.py         |  65 ++-
 tests/providers/image/image_provider_test.py  |  71 +++
 .../image/lib/registry/test_oci_adapter.py    | 418 +++++++++++++++++-
 11 files changed, 655 insertions(+), 11 deletions(-)
 create mode 100644 prowler/changelog.d/image-private-network-allowlist.added.md
 create mode 100644 prowler/changelog.d/image-registry-basic-auth-fallback.fixed.md
 create mode 100644 prowler/changelog.d/image-registry-bearer-auth-switch.fixed.md
 create mode 100644 prowler/changelog.d/image-registry-insecure-trivy.fixed.md

diff --git a/docs/user-guide/providers/image/getting-started-image.mdx b/docs/user-guide/providers/image/getting-started-image.mdx
index 6382f10e5c..bb1c294af5 100644
--- a/docs/user-guide/providers/image/getting-started-image.mdx
+++ b/docs/user-guide/providers/image/getting-started-image.mdx
@@ -306,9 +306,21 @@ prowler image --registry internal-registry.local --registry-insecure
 ```
 
 <Warning>
-Skipping TLS verification disables certificate validation for registry connections. Use this flag only for trusted internal registries with self-signed certificates.
+Skipping TLS verification disables certificate validation for registry connections, including the Trivy image pull (`TRIVY_INSECURE`). Use this flag only for trusted internal registries with self-signed certificates.
 </Warning>
 
+#### On-Premises Registries and Private Networks
+
+<VersionBadge version="5.42.0" />
+
+By default, Prowler rejects registry-provided URLs (token endpoints, pagination links) that resolve to non-public addresses, as an SSRF defense. On-premises registries live on private networks by definition, so to scan them declare the trusted ranges explicitly:
+
+```bash
+export PROWLER_IMAGE_PROVIDER_ALLOWED_PRIVATE_NETWORKS="192.168.65.254/32,10.20.0.0/16"
+```
+
+The value is a comma-separated list of IPs and CIDRs. A resolved address inside an allowlisted range is permitted; every other non-public address stays blocked, so link-local (`169.254.169.254`), loopback, and the rest of the internal network remain protected. The variable applies to registry enumeration and to the connection test. Malformed entries fail at startup, and a non-empty allowlist is logged as a relaxed security control. When unset, behavior is unchanged: only public addresses are followed.
+
 #### Supported Registries
 
 Registry Scan Mode supports the following registry types:
diff --git a/prowler/changelog.d/image-private-network-allowlist.added.md b/prowler/changelog.d/image-private-network-allowlist.added.md
new file mode 100644
index 0000000000..fc9d1cc39d
--- /dev/null
+++ b/prowler/changelog.d/image-private-network-allowlist.added.md
@@ -0,0 +1 @@
+`PROWLER_IMAGE_PROVIDER_ALLOWED_PRIVATE_NETWORKS` environment variable so the image provider can reach container registries on allowlisted private networks, keeping every other non-public address blocked
diff --git a/prowler/changelog.d/image-registry-basic-auth-fallback.fixed.md b/prowler/changelog.d/image-registry-basic-auth-fallback.fixed.md
new file mode 100644
index 0000000000..d5ff396694
--- /dev/null
+++ b/prowler/changelog.d/image-registry-basic-auth-fallback.fixed.md
@@ -0,0 +1 @@
+Basic authentication fallback in the image provider when a registry rejects the negotiated bearer token, so registries like Harbor that guard catalog listing behind Basic can be enumerated
diff --git a/prowler/changelog.d/image-registry-bearer-auth-switch.fixed.md b/prowler/changelog.d/image-registry-bearer-auth-switch.fixed.md
new file mode 100644
index 0000000000..9b76bf292c
--- /dev/null
+++ b/prowler/changelog.d/image-registry-bearer-auth-switch.fixed.md
@@ -0,0 +1 @@
+Registry catalog listing when the server answers with a Bearer challenge after negotiating Basic (or anonymous) authentication, switching to a bearer token obtained from the challenge instead of failing
diff --git a/prowler/changelog.d/image-registry-insecure-trivy.fixed.md b/prowler/changelog.d/image-registry-insecure-trivy.fixed.md
new file mode 100644
index 0000000000..637852e147
--- /dev/null
+++ b/prowler/changelog.d/image-registry-insecure-trivy.fixed.md
@@ -0,0 +1 @@
+`--registry-insecure` now propagates to Trivy via `TRIVY_INSECURE`, so images in registries with self-signed certificates can be pulled and scanned, not just enumerated
diff --git a/prowler/providers/image/exceptions/exceptions.py b/prowler/providers/image/exceptions/exceptions.py
index 387b443ce3..72e362a72a 100644
--- a/prowler/providers/image/exceptions/exceptions.py
+++ b/prowler/providers/image/exceptions/exceptions.py
@@ -70,6 +70,10 @@ class ImageBaseException(ProwlerException):
             "message": "Invalid regex filter pattern.",
             "remediation": "Check the regex syntax for --image-filter or --tag-filter.",
         },
+        (11019, "ImageInvalidAllowedNetworksError"): {
+            "message": "Malformed private-network allowlist.",
+            "remediation": "PROWLER_IMAGE_PROVIDER_ALLOWED_PRIVATE_NETWORKS must be a comma-separated list of IPs or CIDRs (e.g. 192.168.65.254/32,10.20.0.0/16).",
+        },
     }
 
     def __init__(self, code, file=None, original_exception=None, message=None):
@@ -227,3 +231,12 @@ class ImageInvalidFilterError(ImageBaseException):
         super().__init__(
             11017, file=file, original_exception=original_exception, message=message
         )
+
+
+class ImageInvalidAllowedNetworksError(ImageBaseException):
+    """Exception raised when the private-network allowlist is malformed."""
+
+    def __init__(self, file=None, original_exception=None, message=None):
+        super().__init__(
+            11019, file=file, original_exception=original_exception, message=message
+        )
diff --git a/prowler/providers/image/image_provider.py b/prowler/providers/image/image_provider.py
index 7a245e4125..8eb4f2b198 100644
--- a/prowler/providers/image/image_provider.py
+++ b/prowler/providers/image/image_provider.py
@@ -718,6 +718,8 @@ class ImageProvider(Provider):
             env["TRIVY_PASSWORD"] = self.registry_password
         elif self.registry_token:
             env["TRIVY_REGISTRY_TOKEN"] = self.registry_token
+        if self.registry_insecure:
+            env["TRIVY_INSECURE"] = "true"
         return env
 
     def _execute_trivy(self, command: list, image: str) -> subprocess.CompletedProcess:
diff --git a/prowler/providers/image/lib/registry/base.py b/prowler/providers/image/lib/registry/base.py
index 298583620f..b8c08955b6 100644
--- a/prowler/providers/image/lib/registry/base.py
+++ b/prowler/providers/image/lib/registry/base.py
@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 import ipaddress
+import os
 import re
 import socket
 import time
@@ -15,6 +16,7 @@ import tldextract
 from prowler.config.config import prowler_version
 from prowler.lib.logger import logger
 from prowler.providers.image.exceptions.exceptions import (
+    ImageInvalidAllowedNetworksError,
     ImageRegistryAuthError,
     ImageRegistryNetworkError,
 )
@@ -48,6 +50,30 @@ def _registrable_domain(host: str) -> str | None:
     return f"{ext.domain}.{ext.suffix}"
 
 
+ALLOWED_PRIVATE_NETWORKS_ENV = "PROWLER_IMAGE_PROVIDER_ALLOWED_PRIVATE_NETWORKS"
+
+
+def _parse_allowed_private_networks(
+    raw: str | None,
+) -> tuple[ipaddress.IPv4Network | ipaddress.IPv6Network, ...]:
+    """Parse the comma-separated IP/CIDR allowlist; malformed entries fail loudly."""
+    if raw is None or not raw.strip():
+        return ()
+    networks = []
+    for entry in raw.split(","):
+        entry = entry.strip()
+        if not entry:
+            continue
+        try:
+            networks.append(ipaddress.ip_network(entry, strict=False))
+        except ValueError as exc:
+            raise ImageInvalidAllowedNetworksError(
+                file=__file__,
+                message=f"Malformed entry {entry!r} in {ALLOWED_PRIVATE_NETWORKS_ENV}: {exc}",
+            )
+    return tuple(networks)
+
+
 class RegistryAdapter(ABC):
     """Abstract base class for registry adapters."""
 
@@ -64,6 +90,14 @@ class RegistryAdapter(ABC):
         self._password = password
         self._token = token
         self.verify_ssl = verify_ssl
+        self._allowed_private_networks = _parse_allowed_private_networks(
+            os.environ.get(ALLOWED_PRIVATE_NETWORKS_ENV)
+        )
+        if self._allowed_private_networks:
+            logger.warning(
+                f"{ALLOWED_PRIVATE_NETWORKS_ENV} is set — SSRF protection relaxed for private networks: "
+                + ", ".join(str(net) for net in self._allowed_private_networks)
+            )
 
     @property
     def password(self) -> str | None:
@@ -106,6 +140,30 @@ class RegistryAdapter(ABC):
         """
         return self.registry_url
 
+    def _ip_is_allowed(self, ip_str: str) -> bool:
+        """Whether ip_str falls inside an operator-allowlisted private network."""
+        try:
+            addr = ipaddress.ip_address(ip_str)
+        except ValueError:
+            return False
+        return any(
+            addr.version == network.version and addr in network
+            for network in self._allowed_private_networks
+        )
+
+    def _host_in_allowed_networks(self, host: str) -> bool:
+        """Whether host is a literal allowlisted IP or resolves only to allowlisted IPs."""
+        try:
+            ipaddress.ip_address(host)
+        except ValueError:
+            try:
+                infos = socket.getaddrinfo(host, None)
+            except socket.gaierror:
+                return False
+            ips = {sockaddr[0] for *_, sockaddr in infos}
+            return bool(ips) and all(self._ip_is_allowed(ip) for ip in ips)
+        return self._ip_is_allowed(host)
+
     def _validate_outbound_url(
         self,
         url: str,
@@ -119,10 +177,12 @@ class RegistryAdapter(ABC):
         - canonicalise via ``requests.PreparedRequest`` so validator and connector
           parse the same string the same way;
         - reject schemes other than http/https;
-        - reject literal non-public IPs (private, loopback, link-local, ...);
-        - reject hostnames whose A/AAAA records resolve to non-public IPs;
+        - reject literal non-public IPs (private, loopback, link-local, ...)
+          unless inside PROWLER_IMAGE_PROVIDER_ALLOWED_PRIVATE_NETWORKS;
+        - reject hostnames whose A/AAAA records resolve to non-public IPs,
+          with the same allowlist exception;
         - when ``enforce_origin=True``, reject hosts that don't share the
-          registry's registrable domain.
+          registry's registrable domain or resolve into the allowlist.
 
         Returns the canonical URL the caller should pass to ``requests``.
         """
@@ -165,7 +225,9 @@ class RegistryAdapter(ABC):
                 infos = []
             for *_, sockaddr in infos:
                 resolved_ip = sockaddr[0]
-                if _ip_is_non_public(resolved_ip):
+                if _ip_is_non_public(resolved_ip) and not self._ip_is_allowed(
+                    resolved_ip
+                ):
                     raise ImageRegistryAuthError(
                         file=__file__,
                         message=(
@@ -174,7 +236,9 @@ class RegistryAdapter(ABC):
                         ),
                     )
         else:
-            if any(getattr(addr, prop) for prop in _NON_PUBLIC_IP_PROPERTIES):
+            if any(
+                getattr(addr, prop) for prop in _NON_PUBLIC_IP_PROPERTIES
+            ) and not self._ip_is_allowed(host):
                 raise ImageRegistryAuthError(
                     file=__file__,
                     message=(
@@ -188,7 +252,10 @@ class RegistryAdapter(ABC):
             if registry_host and host != registry_host:
                 target_d = _registrable_domain(host)
                 registry_d = _registrable_domain(registry_host)
-                if not (target_d and registry_d and target_d == registry_d):
+                same_domain = bool(target_d and registry_d and target_d == registry_d)
+                # Non-public TLDs (.local, .internal, bare hostnames) have no
+                # registrable domain; fall back to the operator allowlist.
+                if not same_domain and not self._host_in_allowed_networks(host):
                     raise ImageRegistryAuthError(
                         file=__file__,
                         message=(
diff --git a/prowler/providers/image/lib/registry/oci_adapter.py b/prowler/providers/image/lib/registry/oci_adapter.py
index 878525bd04..c5c35aef06 100644
--- a/prowler/providers/image/lib/registry/oci_adapter.py
+++ b/prowler/providers/image/lib/registry/oci_adapter.py
@@ -45,6 +45,22 @@ class OciRegistryAdapter(RegistryAdapter):
     def _origin_url(self) -> str:
         return self._base_url
 
+    @staticmethod
+    def _find_challenge(www_authenticate: str, scheme: str) -> str | None:
+        """Extract one scheme's challenge from a (possibly multi-challenge) header.
+
+        RFC 7235 allows several comma-separated challenges in any order, e.g.
+        ``Basic realm="registry", Bearer realm="...",service="..."``.
+        """
+        match = re.search(
+            rf'(?:^|,)\s*{scheme}\b((?:\s*[\w-]+="[^"]*"\s*,?)*)',
+            www_authenticate,
+            re.IGNORECASE,
+        )
+        if not match:
+            return None
+        return f"{scheme} {match.group(1).strip().rstrip(',')}"
+
     def list_repositories(self) -> list[str]:
         self._ensure_auth()
         repositories: list[str] = []
@@ -93,7 +109,8 @@ class OciRegistryAdapter(RegistryAdapter):
         if resp.status_code == 401:
             www_auth = resp.headers.get("Www-Authenticate", "")
 
-            if not www_auth.lower().startswith("bearer"):
+            bearer_challenge = self._find_challenge(www_auth, "Bearer")
+            if not bearer_challenge:
                 # Basic auth challenge (e.g., AWS ECR)
                 if self.username and self.password:
                     self._basic_auth_verified = True
@@ -108,7 +125,7 @@ class OciRegistryAdapter(RegistryAdapter):
                 )
 
             # Bearer token exchange (standard OCI flow)
-            self._bearer_token = self._obtain_bearer_token(www_auth, repository)
+            self._bearer_token = self._obtain_bearer_token(bearer_challenge, repository)
             return
         if resp.status_code == 403:
             raise ImageRegistryAuthError(
@@ -130,7 +147,18 @@ class OciRegistryAdapter(RegistryAdapter):
                 message=f"Cannot parse token endpoint from registry {self.registry_url}. Www-Authenticate: {www_authenticate[:200]}",
             )
         realm = self._validate_outbound_url(match.group(1))
-        if urlparse(realm).scheme == "http":
+        realm_is_http = urlparse(realm).scheme == "http"
+        if realm_is_http and urlparse(self._base_url).scheme == "https":
+            # Transport downgrade: an on-path attacker could read or replace
+            # the token. An all-HTTP registry is an explicit operator choice.
+            raise ImageRegistryAuthError(
+                file=__file__,
+                message=(
+                    f"Registry {self.registry_url} uses HTTPS but its token realm "
+                    f"{realm} uses HTTP; refusing to exchange a token over cleartext."
+                ),
+            )
+        if realm_is_http:
             logger.warning(f"Bearer token realm uses HTTP (not HTTPS): {realm}")
         params: dict = {}
         service_match = re.search(r'service="([^"]+)"', www_authenticate)
@@ -184,6 +212,37 @@ class OciRegistryAdapter(RegistryAdapter):
             self._bearer_token = None
             self._ensure_auth()
             resp = self._do_authed_request(method, url, **kwargs)
+        if (
+            resp.status_code == 401
+            and self._bearer_token
+            and self.username
+            and self.password
+            and self._is_same_origin_as_registry(url)
+            and self._find_challenge(resp.headers.get("Www-Authenticate", ""), "Basic")
+        ):
+            # Registries like Harbor guard some endpoints (e.g. /_catalog) with
+            # Basic even when /v2/ negotiates Bearer.
+            logger.debug(
+                f"Bearer token not accepted for {url}, retrying with Basic auth"
+            )
+            user, pwd = self._resolve_basic_credentials()
+            resp = self._request_with_retry(method, url, auth=(user, pwd), **kwargs)
+            if resp.ok:
+                # Stay in Basic mode so later requests (e.g. catalog pages)
+                # skip the doomed Bearer round-trips.
+                self._basic_auth_verified = True
+                self._bearer_token = None
+        if resp.status_code == 401 and not self._bearer_token:
+            bearer_challenge = self._find_challenge(
+                resp.headers.get("Www-Authenticate", ""), "Bearer"
+            )
+            if bearer_challenge and self._is_same_origin_as_registry(url):
+                # The inverse switch: /v2/ negotiated Basic (or anonymous) but
+                # this endpoint demands Bearer. The challenge carries the right
+                # scope.
+                logger.debug(f"Basic auth not accepted for {url}, switching to Bearer")
+                self._bearer_token = self._obtain_bearer_token(bearer_challenge)
+                resp = self._do_authed_request(method, url, **kwargs)
         return resp
 
     def _do_authed_request(self, method: str, url: str, **kwargs) -> requests.Response:
diff --git a/tests/providers/image/image_provider_test.py b/tests/providers/image/image_provider_test.py
index 92c4236dd8..df80e1d35b 100644
--- a/tests/providers/image/image_provider_test.py
+++ b/tests/providers/image/image_provider_test.py
@@ -678,6 +678,18 @@ class TestImageProviderRegistryAuth:
 
         assert env["TRIVY_REGISTRY_TOKEN"] == "my-token"
 
+    def test_build_trivy_env_registry_insecure_sets_trivy_insecure(self):
+        provider = _make_provider(registry_insecure=True)
+        env = provider._build_trivy_env()
+
+        assert env["TRIVY_INSECURE"] == "true"
+
+    def test_build_trivy_env_secure_registry_leaves_trivy_insecure_unset(self):
+        provider = _make_provider()
+        env = provider._build_trivy_env()
+
+        assert "TRIVY_INSECURE" not in env
+
     @patch("subprocess.run")
     def test_execute_trivy_sets_trivy_env_with_basic_auth(self, mock_subprocess):
         """Test that _execute_trivy sets TRIVY_USERNAME/PASSWORD for native Trivy auth."""
@@ -1381,3 +1393,62 @@ class TestRegistryListMode:
             # This is the line that crashes: global_provider is None so
             # .print_credentials() raises AttributeError.
             global_provider.print_credentials()
+
+
+class TestConnectionPrivateNetworkAllowlist:
+    """PROWLER_IMAGE_PROVIDER_ALLOWED_PRIVATE_NETWORKS applies to test_connection."""
+
+    ENV = "PROWLER_IMAGE_PROVIDER_ALLOWED_PRIVATE_NETWORKS"
+
+    @staticmethod
+    def _private_dns(host_to_ip):
+        def _stub(host, *_args, **_kwargs):
+            return [(2, 1, 6, "", (host_to_ip[host], 0))]
+
+        return _stub
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_private_registry_rejected_without_allowlist(
+        self, mock_request, monkeypatch
+    ):
+        monkeypatch.delenv(self.ENV, raising=False)
+        ping = MagicMock(
+            status_code=401,
+            headers={
+                "Www-Authenticate": 'Bearer realm="https://harbor.internal/service/token",service="harbor-registry"'
+            },
+        )
+        mock_request.return_value = ping
+
+        with patch(
+            "prowler.providers.image.lib.registry.base.socket.getaddrinfo",
+            side_effect=self._private_dns({"harbor.internal": "10.20.0.5"}),
+        ):
+            result = ImageProvider.test_connection(
+                image="harbor.internal", raise_on_exception=False
+            )
+
+        assert result.is_connected is False
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_private_registry_permitted_with_allowlist(self, mock_request, monkeypatch):
+        monkeypatch.setenv(self.ENV, "10.20.0.0/16")
+        ping = MagicMock(
+            status_code=401,
+            headers={
+                "Www-Authenticate": 'Bearer realm="https://harbor.internal/service/token",service="harbor-registry"'
+            },
+        )
+        token = MagicMock(status_code=200)
+        token.json.return_value = {"token": "tok"}
+        catalog = MagicMock(status_code=200, headers={})
+        catalog.json.return_value = {"repositories": ["app"]}
+        mock_request.side_effect = [ping, token, catalog]
+
+        with patch(
+            "prowler.providers.image.lib.registry.base.socket.getaddrinfo",
+            side_effect=self._private_dns({"harbor.internal": "10.20.0.5"}),
+        ):
+            result = ImageProvider.test_connection(image="harbor.internal")
+
+        assert result.is_connected is True
diff --git a/tests/providers/image/lib/registry/test_oci_adapter.py b/tests/providers/image/lib/registry/test_oci_adapter.py
index b814019504..f904c00c21 100644
--- a/tests/providers/image/lib/registry/test_oci_adapter.py
+++ b/tests/providers/image/lib/registry/test_oci_adapter.py
@@ -6,6 +6,7 @@ import pytest
 import requests
 
 from prowler.providers.image.exceptions.exceptions import (
+    ImageInvalidAllowedNetworksError,
     ImageRegistryAuthError,
     ImageRegistryCatalogError,
     ImageRegistryNetworkError,
@@ -96,6 +97,37 @@ class TestOciAdapterAuth:
         adapter._ensure_auth()
         assert adapter._bearer_token == "bearer-tok"
 
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_http_realm_from_https_registry_raises(self, mock_request):
+        ping_resp = MagicMock(
+            status_code=401,
+            headers={
+                "Www-Authenticate": 'Bearer realm="http://auth.reg.io/token",service="registry"'
+            },
+        )
+        mock_request.return_value = ping_resp
+        adapter = OciRegistryAdapter("https://reg.io", username="u", password="p")
+        with pytest.raises(ImageRegistryAuthError, match="cleartext"):
+            adapter._ensure_auth()
+        # The token exchange must never happen: only the /v2/ ping went out
+        assert mock_request.call_count == 1
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_http_realm_from_http_registry_keeps_credentials(self, mock_request):
+        ping_resp = MagicMock(
+            status_code=401,
+            headers={
+                "Www-Authenticate": 'Bearer realm="http://reg.io/token",service="registry"'
+            },
+        )
+        token_resp = MagicMock(status_code=200)
+        token_resp.json.return_value = {"token": "bearer-tok"}
+        mock_request.side_effect = [ping_resp, token_resp]
+        adapter = OciRegistryAdapter("http://reg.io", username="u", password="p")
+        adapter._ensure_auth()
+        token_call = mock_request.call_args_list[1]
+        assert token_call.kwargs.get("auth") == ("u", "p")
+
     @patch("prowler.providers.image.lib.registry.base.requests.request")
     def test_ensure_auth_403_raises(self, mock_request):
         resp = MagicMock(status_code=403)
@@ -218,7 +250,7 @@ class TestOciAdapterAuth:
         adapter = OciRegistryAdapter("reg.io", username="u", password="p")
         adapter._basic_auth_verified = True
         # No bearer token — using basic auth
-        resp_401 = MagicMock(status_code=401)
+        resp_401 = MagicMock(status_code=401, headers={})
         mock_request.return_value = resp_401
         result = adapter._authed_request("GET", "https://reg.io/v2/_catalog")
         assert result.status_code == 401
@@ -709,3 +741,387 @@ class TestCredentialRedaction:
         adapter = OciRegistryAdapter("reg.io", password="secret", token="tok")
         assert adapter.password == "secret"
         assert adapter.token == "tok"
+
+
+class TestAllowedPrivateNetworks:
+    """PROWLER_IMAGE_PROVIDER_ALLOWED_PRIVATE_NETWORKS: explicit CIDR allowlist
+    consulted by the SSRF guard; unset preserves the default rejection."""
+
+    ENV = "PROWLER_IMAGE_PROVIDER_ALLOWED_PRIVATE_NETWORKS"
+
+    def test_unset_env_keeps_private_origin_rejected(self, monkeypatch):
+        monkeypatch.delenv(self.ENV, raising=False)
+        adapter = OciRegistryAdapter("https://10.0.0.5:5000")
+        with pytest.raises(ImageRegistryAuthError, match="non-public"):
+            adapter._validate_outbound_url("https://10.0.0.5:5000/v2/_catalog?last=x")
+
+    def test_empty_env_keeps_private_origin_rejected(self, monkeypatch):
+        monkeypatch.setenv(self.ENV, "  ")
+        adapter = OciRegistryAdapter("https://10.0.0.5:5000")
+        with pytest.raises(ImageRegistryAuthError, match="non-public"):
+            adapter._validate_outbound_url("https://10.0.0.5:5000/v2/_catalog?last=x")
+
+    def test_allowlisted_literal_ip_permitted(self, monkeypatch):
+        monkeypatch.setenv(self.ENV, "192.168.65.254/32,10.20.0.0/16")
+        adapter = OciRegistryAdapter("https://10.20.0.5:5000")
+        url = adapter._validate_outbound_url(
+            "https://10.20.0.5:5000/v2/_catalog?last=x"
+        )
+        assert url == "https://10.20.0.5:5000/v2/_catalog?last=x"
+
+    def test_allowlisted_resolved_hostname_permitted(self, monkeypatch):
+        monkeypatch.setenv(self.ENV, "10.20.0.0/16")
+        adapter = OciRegistryAdapter("https://harbor.internal")
+        with patch(
+            "prowler.providers.image.lib.registry.base.socket.getaddrinfo",
+            side_effect=_fake_getaddrinfo({"harbor.internal": "10.20.0.5"}),
+        ):
+            url = adapter._validate_outbound_url(
+                "https://harbor.internal/service/token"
+            )
+        assert url == "https://harbor.internal/service/token"
+
+    def test_private_ip_outside_allowlist_rejected(self, monkeypatch):
+        monkeypatch.setenv(self.ENV, "10.20.0.0/16")
+        adapter = OciRegistryAdapter("https://harbor.internal")
+        with patch(
+            "prowler.providers.image.lib.registry.base.socket.getaddrinfo",
+            side_effect=_fake_getaddrinfo(
+                {"harbor.internal": "10.20.0.5", "evil.internal": "192.168.1.99"}
+            ),
+        ):
+            with pytest.raises(ImageRegistryAuthError, match="non-public"):
+                adapter._validate_outbound_url("https://evil.internal/token")
+
+    def test_metadata_ip_rejected_unless_allowlisted(self, monkeypatch):
+        monkeypatch.setenv(self.ENV, "10.20.0.0/16")
+        adapter = OciRegistryAdapter("https://harbor.internal")
+        with patch(
+            "prowler.providers.image.lib.registry.base.socket.getaddrinfo",
+            side_effect=_fake_getaddrinfo({"harbor.internal": "10.20.0.5"}),
+        ):
+            with pytest.raises(ImageRegistryAuthError, match="non-public"):
+                adapter._validate_outbound_url("https://169.254.169.254/latest")
+
+    def test_private_link_from_public_origin_still_rejected(self, monkeypatch):
+        """Regression: the allowlist does not open ranges it does not name."""
+        monkeypatch.setenv(self.ENV, "10.20.0.0/16")
+        adapter = OciRegistryAdapter("https://reg.example.com")
+        with patch(
+            "prowler.providers.image.lib.registry.base.socket.getaddrinfo",
+            side_effect=_fake_getaddrinfo({"reg.example.com": "8.8.8.8"}),
+        ):
+            with pytest.raises(ImageRegistryAuthError, match="non-public"):
+                adapter._validate_outbound_url("http://192.168.0.99/v2/_catalog")
+
+    def test_local_tld_origin_enforcement_falls_back_to_allowlist(self, monkeypatch):
+        """Hosts without a registrable domain pass only if they resolve into the allowlist."""
+        monkeypatch.setenv(self.ENV, "10.20.0.0/16")
+        adapter = OciRegistryAdapter("https://registry.corp.local")
+        with patch(
+            "prowler.providers.image.lib.registry.base.socket.getaddrinfo",
+            side_effect=_fake_getaddrinfo(
+                {"registry.corp.local": "10.20.2.3", "auth.corp.local": "10.20.2.4"}
+            ),
+        ):
+            url = adapter._validate_outbound_url("https://auth.corp.local/token")
+        assert url == "https://auth.corp.local/token"
+
+    def test_malformed_allowlist_fails_loudly(self, monkeypatch):
+        monkeypatch.setenv(self.ENV, "10.20.0.0/16,banana")
+        with pytest.raises(ImageInvalidAllowedNetworksError, match="banana"):
+            OciRegistryAdapter("https://reg.example.com")
+
+    def test_allowlist_logged_as_relaxed_control(self, monkeypatch, caplog):
+        monkeypatch.setenv(self.ENV, "10.20.0.0/16")
+        with caplog.at_level("WARNING"):
+            OciRegistryAdapter("https://reg.example.com")
+        assert any(
+            "10.20.0.0/16" in message and "SSRF" in message
+            for message in caplog.messages
+        )
+
+
+class TestBasicAuthFallback:
+    """Registries like Harbor guard /_catalog behind Basic even when /v2/ negotiates Bearer."""
+
+    _BEARER_CHALLENGE = (
+        'Bearer realm="https://reg.io/service/token",service="harbor-registry"'
+    )
+
+    def _harbor_responses(self):
+        ping = MagicMock(
+            status_code=401, headers={"Www-Authenticate": self._BEARER_CHALLENGE}
+        )
+        token = MagicMock(status_code=200)
+        token.json.return_value = {"token": "tok"}
+        catalog_401 = MagicMock(
+            status_code=401, headers={"Www-Authenticate": 'Basic realm="harbor"'}
+        )
+        return ping, token, catalog_401
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_catalog_falls_back_to_basic_when_bearer_rejected(self, mock_request):
+        ping, token, catalog_401 = self._harbor_responses()
+        catalog_ok = MagicMock(status_code=200, headers={})
+        catalog_ok.json.return_value = {"repositories": ["library/debian"]}
+        mock_request.side_effect = [
+            ping,
+            token,
+            catalog_401,  # bearer without catalog scope
+            ping,
+            token,
+            catalog_401,  # bearer retry, same result
+            catalog_ok,  # basic fallback
+        ]
+
+        adapter = OciRegistryAdapter("reg.io", username="admin", password="secret")
+        repos = adapter.list_repositories()
+
+        assert repos == ["library/debian"]
+        assert mock_request.call_args.kwargs.get("auth") == ("admin", "secret")
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_basic_challenge_without_credentials_still_fails(self, mock_request):
+        ping, token, catalog_401 = self._harbor_responses()
+        mock_request.side_effect = [ping, token, catalog_401, ping, token, catalog_401]
+
+        adapter = OciRegistryAdapter("reg.io")
+        with pytest.raises(ImageRegistryAuthError, match="catalog listing"):
+            adapter.list_repositories()
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_fallback_with_combined_multi_challenge_header(self, mock_request):
+        # Basic not first in the header must still trigger the fallback
+        ping, token, _ = self._harbor_responses()
+        catalog_401 = MagicMock(
+            status_code=401,
+            headers={
+                "Www-Authenticate": f'{self._BEARER_CHALLENGE}, Basic realm="harbor"'
+            },
+        )
+        catalog_ok = MagicMock(status_code=200, headers={})
+        catalog_ok.json.return_value = {"repositories": ["library/debian"]}
+        mock_request.side_effect = [
+            ping,
+            token,
+            catalog_401,
+            ping,
+            token,
+            catalog_401,
+            catalog_ok,
+        ]
+
+        adapter = OciRegistryAdapter("reg.io", username="admin", password="secret")
+        repos = adapter.list_repositories()
+
+        assert repos == ["library/debian"]
+        assert mock_request.call_args.kwargs.get("auth") == ("admin", "secret")
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_multi_page_catalog_falls_back_only_once(self, mock_request):
+        ping, token, catalog_401 = self._harbor_responses()
+        page1 = MagicMock(
+            status_code=200,
+            ok=True,
+            headers={"Link": '<https://reg.io/v2/_catalog?n=200&last=a>; rel="next"'},
+        )
+        page1.json.return_value = {"repositories": ["a"]}
+        page2 = MagicMock(status_code=200, ok=True, headers={})
+        page2.json.return_value = {"repositories": ["b"]}
+        mock_request.side_effect = [
+            ping,
+            token,
+            catalog_401,  # bearer without catalog scope
+            ping,
+            token,
+            catalog_401,  # bearer retry, same result
+            page1,  # basic fallback succeeds -> basic mode persists
+            page2,  # second page goes straight to basic
+        ]
+
+        adapter = OciRegistryAdapter("reg.io", username="admin", password="secret")
+        repos = adapter.list_repositories()
+
+        assert repos == ["a", "b"]
+        assert mock_request.call_count == 8
+        assert adapter._basic_auth_verified is True
+        assert adapter._bearer_token is None
+        page2_call = mock_request.call_args_list[-1]
+        assert page2_call.kwargs.get("auth") == ("admin", "secret")
+        assert "Authorization" not in page2_call.kwargs.get("headers", {})
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_basic_fallback_not_sent_cross_origin(self, mock_request):
+        catalog_401 = MagicMock(
+            status_code=401, headers={"Www-Authenticate": 'Basic realm="other"'}
+        )
+        mock_request.return_value = catalog_401
+
+        adapter = OciRegistryAdapter("reg.io", username="admin", password="secret")
+        adapter._bearer_token = "tok"
+        resp = adapter._authed_request("GET", "https://other.example.com/v2/_catalog")
+
+        assert resp.status_code == 401
+        assert all(
+            call.kwargs.get("auth") is None for call in mock_request.call_args_list
+        )
+
+
+class TestBearerAuthSwitch:
+    """Registries that negotiate Basic on /v2/ but demand Bearer on other endpoints."""
+
+    _BEARER_CHALLENGE = 'Bearer realm="https://reg.io/token",service="registry",scope="registry:catalog:*"'
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_catalog_switches_to_bearer_when_basic_rejected(self, mock_request):
+        ping = MagicMock(
+            status_code=401, headers={"Www-Authenticate": 'Basic realm="registry"'}
+        )
+        catalog_401 = MagicMock(
+            status_code=401, headers={"Www-Authenticate": self._BEARER_CHALLENGE}
+        )
+        token = MagicMock(status_code=200)
+        token.json.return_value = {"token": "switched-tok"}
+        catalog_ok = MagicMock(status_code=200, headers={})
+        catalog_ok.json.return_value = {"repositories": ["library/debian"]}
+        mock_request.side_effect = [ping, catalog_401, token, catalog_ok]
+
+        adapter = OciRegistryAdapter("reg.io", username="admin", password="secret")
+        repos = adapter.list_repositories()
+
+        assert repos == ["library/debian"]
+        assert adapter._bearer_token == "switched-tok"
+        # Token exchange carries the credentials
+        token_call = mock_request.call_args_list[2]
+        assert token_call.kwargs.get("auth") == ("admin", "secret")
+        assert token_call.kwargs.get("params", {}).get("scope") == "registry:catalog:*"
+        # The retry uses the Bearer header, not Basic
+        retry_call = mock_request.call_args_list[3]
+        assert retry_call.kwargs.get("auth") is None
+        assert (
+            retry_call.kwargs.get("headers", {}).get("Authorization")
+            == "Bearer switched-tok"
+        )
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_multi_page_catalog_switches_only_once(self, mock_request):
+        ping = MagicMock(
+            status_code=401, headers={"Www-Authenticate": 'Basic realm="registry"'}
+        )
+        catalog_401 = MagicMock(
+            status_code=401, headers={"Www-Authenticate": self._BEARER_CHALLENGE}
+        )
+        token = MagicMock(status_code=200)
+        token.json.return_value = {"token": "switched-tok"}
+        page1 = MagicMock(
+            status_code=200,
+            headers={"Link": '<https://reg.io/v2/_catalog?n=200&last=a>; rel="next"'},
+        )
+        page1.json.return_value = {"repositories": ["a"]}
+        page2 = MagicMock(status_code=200, headers={})
+        page2.json.return_value = {"repositories": ["b"]}
+        mock_request.side_effect = [ping, catalog_401, token, page1, page2]
+
+        adapter = OciRegistryAdapter("reg.io", username="admin", password="secret")
+        repos = adapter.list_repositories()
+
+        assert repos == ["a", "b"]
+        assert mock_request.call_count == 5
+        page2_call = mock_request.call_args_list[-1]
+        assert (
+            page2_call.kwargs.get("headers", {}).get("Authorization")
+            == "Bearer switched-tok"
+        )
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_anonymous_switch_to_bearer(self, mock_request):
+        ping = MagicMock(status_code=200)
+        catalog_401 = MagicMock(
+            status_code=401, headers={"Www-Authenticate": self._BEARER_CHALLENGE}
+        )
+        token = MagicMock(status_code=200)
+        token.json.return_value = {"token": "anon-tok"}
+        catalog_ok = MagicMock(status_code=200, headers={})
+        catalog_ok.json.return_value = {"repositories": ["public/app"]}
+        mock_request.side_effect = [ping, catalog_401, token, catalog_ok]
+
+        adapter = OciRegistryAdapter("reg.io")
+        repos = adapter.list_repositories()
+
+        assert repos == ["public/app"]
+        token_call = mock_request.call_args_list[2]
+        assert token_call.kwargs.get("auth") is None
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_switch_not_attempted_cross_origin(self, mock_request):
+        catalog_401 = MagicMock(
+            status_code=401, headers={"Www-Authenticate": self._BEARER_CHALLENGE}
+        )
+        mock_request.return_value = catalog_401
+
+        adapter = OciRegistryAdapter("reg.io", username="admin", password="secret")
+        adapter._basic_auth_verified = True
+        resp = adapter._authed_request("GET", "https://other.example.com/v2/_catalog")
+
+        assert resp.status_code == 401
+        assert adapter._bearer_token is None
+        assert mock_request.call_count == 1
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_switch_with_combined_multi_challenge_header(self, mock_request):
+        # RFC 7235: multiple challenges in one header, Basic first
+        combined = (
+            'Basic realm="registry", '
+            'Bearer realm="http://reg.io/token",service="registry",scope="registry:catalog:*"'
+        )
+        ping = MagicMock(
+            status_code=401, headers={"Www-Authenticate": 'Basic realm="registry"'}
+        )
+        catalog_401 = MagicMock(status_code=401, headers={"Www-Authenticate": combined})
+        token = MagicMock(status_code=200)
+        token.json.return_value = {"token": "combined-tok"}
+        catalog_ok = MagicMock(status_code=200, headers={})
+        catalog_ok.json.return_value = {"repositories": ["library/debian"]}
+        mock_request.side_effect = [ping, catalog_401, token, catalog_ok]
+
+        adapter = OciRegistryAdapter(
+            "http://reg.io", username="admin", password="secret"
+        )
+        repos = adapter.list_repositories()
+
+        assert repos == ["library/debian"]
+        # The token exchange must hit the Bearer realm, not Basic's realm="registry"
+        token_call = mock_request.call_args_list[2]
+        assert token_call.args[1] == "http://reg.io/token"
+        assert token_call.kwargs.get("params", {}).get("scope") == "registry:catalog:*"
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_ping_with_combined_multi_challenge_prefers_bearer(self, mock_request):
+        combined = 'Basic realm="registry", Bearer realm="https://auth.reg.io/token",service="registry"'
+        ping = MagicMock(status_code=401, headers={"Www-Authenticate": combined})
+        token = MagicMock(status_code=200)
+        token.json.return_value = {"token": "bearer-tok"}
+        mock_request.side_effect = [ping, token]
+
+        adapter = OciRegistryAdapter("reg.io", username="u", password="p")
+        adapter._ensure_auth()
+
+        assert adapter._bearer_token == "bearer-tok"
+        token_call = mock_request.call_args_list[1]
+        assert token_call.args[1] == "https://auth.reg.io/token"
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_failed_token_exchange_raises_auth_error(self, mock_request):
+        ping = MagicMock(
+            status_code=401, headers={"Www-Authenticate": 'Basic realm="registry"'}
+        )
+        catalog_401 = MagicMock(
+            status_code=401, headers={"Www-Authenticate": self._BEARER_CHALLENGE}
+        )
+        token_denied = MagicMock(status_code=401)
+        mock_request.side_effect = [ping, catalog_401, token_denied]
+
+        adapter = OciRegistryAdapter("reg.io", username="admin", password="wrong")
+        with pytest.raises(ImageRegistryAuthError, match="bearer token"):
+            adapter.list_repositories()

From 9c5285adc3b229aade4eb696fdd74625c138fa8e Mon Sep 17 00:00:00 2001
From: Jonathan Nguyen <87379568+tamg-aws@users.noreply.github.com>
Date: Tue, 1 Sep 2026 07:00:41 -0500
Subject: [PATCH 17/77] fix(cloudwatch): skip metric filters whose log group
 was not retrieved (#12561)

---
 ...h-metric-filter-missing-log-group.fixed.md |   1 +
 .../services/cloudwatch/lib/metric_filters.py |  26 ++-
 .../cloudwatch/lib/metric_filters_test.py     | 149 ++++++++++++++++++
 3 files changed, 175 insertions(+), 1 deletion(-)
 create mode 100644 prowler/changelog.d/cloudwatch-metric-filter-missing-log-group.fixed.md
 create mode 100644 tests/providers/aws/services/cloudwatch/lib/metric_filters_test.py

diff --git a/prowler/changelog.d/cloudwatch-metric-filter-missing-log-group.fixed.md b/prowler/changelog.d/cloudwatch-metric-filter-missing-log-group.fixed.md
new file mode 100644
index 0000000000..b17ec3af4b
--- /dev/null
+++ b/prowler/changelog.d/cloudwatch-metric-filter-missing-log-group.fixed.md
@@ -0,0 +1 @@
+CloudWatch log metric filter checks no longer crash with `AttributeError` when the account has a metric filter whose log group was not retrieved
diff --git a/prowler/providers/aws/services/cloudwatch/lib/metric_filters.py b/prowler/providers/aws/services/cloudwatch/lib/metric_filters.py
index e5d104b840..069f542b2d 100644
--- a/prowler/providers/aws/services/cloudwatch/lib/metric_filters.py
+++ b/prowler/providers/aws/services/cloudwatch/lib/metric_filters.py
@@ -48,7 +48,27 @@ def check_cloudwatch_log_metric_filter(
     metric_filters: list,
     metric_alarms: list,
     metadata: dict,
-):
+) -> Check_Report_AWS | None:
+    """Report whether a trail's log group has a matching metric filter and an alarm.
+
+    Only metric filters attached to a log group that a CloudTrail trail delivers to
+    are considered, and only those whose own pattern matches
+    ``metric_filter_pattern``. A filter whose log group was not retrieved is skipped
+    rather than dereferenced. One compliant filter anywhere short-circuits to PASS;
+    otherwise the last matching filter found without an alarm is returned as FAIL.
+
+    Args:
+        metric_filter_pattern: regex from ``build_metric_filter_pattern``, matched
+            against each filter's pattern with ``re.DOTALL``.
+        trails: CloudTrail trails keyed by ARN; only those with a log group count.
+        metric_filters: CloudWatch Logs metric filters to evaluate.
+        metric_alarms: CloudWatch alarms, matched to a filter by metric name.
+        metadata: check metadata for the emitted report.
+
+    Returns:
+        A ``Check_Report_AWS`` for the deciding log group, or ``None`` when no
+        filter matched or an inventory was not collected.
+    """
     report = None
     # 1. Iterate for CloudWatch Log Group in CloudTrail trails
     log_groups = []
@@ -58,6 +78,10 @@ def check_cloudwatch_log_metric_filter(
                 log_groups.append(trail.log_group_arn.split(":")[6])
         # 2. Describe metric filters for previous log groups
         for metric_filter in metric_filters:
+            # A filter whose log group was not retrieved cannot be matched against
+            # the trail log groups, so it cannot satisfy the requirement.
+            if metric_filter.log_group is None:
+                continue
             if metric_filter.log_group.name in log_groups and re.search(
                 metric_filter_pattern, metric_filter.pattern, flags=re.DOTALL
             ):
diff --git a/tests/providers/aws/services/cloudwatch/lib/metric_filters_test.py b/tests/providers/aws/services/cloudwatch/lib/metric_filters_test.py
new file mode 100644
index 0000000000..e29b2f0a5f
--- /dev/null
+++ b/tests/providers/aws/services/cloudwatch/lib/metric_filters_test.py
@@ -0,0 +1,149 @@
+from pathlib import Path
+
+import prowler
+from prowler.lib.check.models import CheckMetadata
+from prowler.providers.aws.services.cloudtrail.cloudtrail_service import Trail
+from prowler.providers.aws.services.cloudwatch.cloudwatch_service import (
+    LogGroup,
+    MetricAlarm,
+    MetricFilter,
+)
+from prowler.providers.aws.services.cloudwatch.lib.metric_filters import (
+    check_cloudwatch_log_metric_filter,
+)
+
+AWS_REGION = "eu-west-1"
+AWS_ACCOUNT_NUMBER = "123456789012"
+
+TRAIL_ARN = f"arn:aws:cloudtrail:{AWS_REGION}:{AWS_ACCOUNT_NUMBER}:trail/trail-test"
+TRAIL_LOG_GROUP_NAME = "trail-log-group"
+TRAIL_LOG_GROUP_ARN = (
+    f"arn:aws:logs:{AWS_REGION}:{AWS_ACCOUNT_NUMBER}:log-group:{TRAIL_LOG_GROUP_NAME}:*"
+)
+
+# Matches the filter patterns built below, so a filter is only skipped because of
+# its missing log group and never because the pattern failed to match.
+PATTERN = r"\$\.eventName\s*=\s*.?PutBucketPolicy"
+FILTER_PATTERN = "{ ($.eventName = PutBucketPolicy) }"
+METRIC_NAME = "PutBucketPolicyCount"
+
+METADATA = CheckMetadata.parse_file(
+    Path(prowler.__file__).parent
+    / "providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_unauthorized_api_calls/cloudwatch_log_metric_filter_unauthorized_api_calls.metadata.json"
+).json()
+
+
+def _trails():
+    """One trail delivering to TRAIL_LOG_GROUP_NAME, putting that log group in scope.
+
+    Without a trail carrying a log group ARN the check has nothing to match filters
+    against and returns None for any input, which would make every assertion below
+    pass for the wrong reason.
+    """
+    return {TRAIL_ARN: Trail(region=AWS_REGION, log_group_arn=TRAIL_LOG_GROUP_ARN)}
+
+
+def _trail_log_group():
+    """The trail's log group as the CloudWatch service would have collected it."""
+    return LogGroup(
+        arn=TRAIL_LOG_GROUP_ARN,
+        name=TRAIL_LOG_GROUP_NAME,
+        retention_days=7,
+        never_expire=False,
+        region=AWS_REGION,
+    )
+
+
+def _metric_filter(name, log_group, metric=METRIC_NAME):
+    """Build a metric filter whose pattern always matches PATTERN.
+
+    Args:
+        name: filter name, which the report echoes in status_extended.
+        log_group: the collected LogGroup, or None to model a filter whose log
+            group was never retrieved -- the input that used to raise.
+        metric: metric name an alarm has to carry for the filter to be compliant.
+    """
+    return MetricFilter(
+        arn=f"arn:aws:logs:{AWS_REGION}:{AWS_ACCOUNT_NUMBER}:metric-filter/{name}",
+        name=name,
+        metric=metric,
+        pattern=FILTER_PATTERN,
+        log_group=log_group,
+        region=AWS_REGION,
+    )
+
+
+def _alarm(metric=METRIC_NAME):
+    """Build an alarm on metric; a non-default name models an unrelated alarm.
+
+    The check pairs alarms to filters by metric name alone, so passing a metric no
+    filter uses is how a filter with no alarm of its own is expressed.
+    """
+    return MetricAlarm(
+        arn=f"arn:aws:cloudwatch:{AWS_REGION}:{AWS_ACCOUNT_NUMBER}:alarm:{metric}-alarm",
+        name=f"{metric}-alarm",
+        metric=metric,
+        name_space="CloudTrailMetrics",
+        region=AWS_REGION,
+        alarm_actions=[f"arn:aws:sns:{AWS_REGION}:{AWS_ACCOUNT_NUMBER}:topic-test"],
+        actions_enabled=True,
+    )
+
+
+class Test_check_cloudwatch_log_metric_filter:
+    def test_metric_filter_without_collected_log_group(self):
+        """A metric filter whose log group was not retrieved must be skipped
+        instead of raising AttributeError on the None log group."""
+        report = check_cloudwatch_log_metric_filter(
+            PATTERN,
+            _trails(),
+            [_metric_filter("orphan-filter", None)],
+            [_alarm()],
+            METADATA,
+        )
+
+        assert report is None
+
+    def test_uncollected_log_group_does_not_mask_a_compliant_filter(self):
+        """The skip must not abandon the remaining filters: a compliant filter
+        listed after an uncollected one still has to be evaluated."""
+        report = check_cloudwatch_log_metric_filter(
+            PATTERN,
+            _trails(),
+            [
+                _metric_filter("orphan-filter", None),
+                _metric_filter("trail-filter", _trail_log_group()),
+            ],
+            [_alarm()],
+            METADATA,
+        )
+
+        assert report is not None
+        assert report.status == "PASS"
+        assert (
+            report.status_extended
+            == f"CloudWatch log group {TRAIL_LOG_GROUP_NAME} found with metric filter trail-filter and alarms set."
+        )
+        assert report.resource_id == TRAIL_LOG_GROUP_NAME
+        assert report.resource_arn == TRAIL_LOG_GROUP_ARN
+        assert report.region == AWS_REGION
+
+    def test_uncollected_log_group_does_not_mask_a_missing_alarm(self):
+        """The skip must not turn a filter with no alarm into a pass."""
+        report = check_cloudwatch_log_metric_filter(
+            PATTERN,
+            _trails(),
+            [
+                _metric_filter("orphan-filter", None),
+                _metric_filter("trail-filter", _trail_log_group()),
+            ],
+            [_alarm(metric="UnrelatedMetric")],
+            METADATA,
+        )
+
+        assert report is not None
+        assert report.status == "FAIL"
+        assert (
+            report.status_extended
+            == f"CloudWatch log group {TRAIL_LOG_GROUP_NAME} found with metric filter trail-filter but no alarms associated."
+        )

From 9ffbb4b75842635cb62ad1a9dba94553571a80c5 Mon Sep 17 00:00:00 2001
From: Jonathan Nguyen <87379568+tamg-aws@users.noreply.github.com>
Date: Tue, 1 Sep 2026 09:53:58 -0500
Subject: [PATCH 18/77] fix(ecr): read each registry scanning rule's frequency
 instead of assuming scan on push (#12560)

---
 .../ecr-registry-scan-frequency.fixed.md      |   1 +
 ..._scan_images_on_push_enabled.metadata.json |   6 +-
 ...cr_registry_scan_images_on_push_enabled.py |  64 ++++-
 ...gistry_scan_images_on_push_enabled_test.py | 245 +++++++++++++++++-
 4 files changed, 300 insertions(+), 16 deletions(-)
 create mode 100644 prowler/changelog.d/ecr-registry-scan-frequency.fixed.md

diff --git a/prowler/changelog.d/ecr-registry-scan-frequency.fixed.md b/prowler/changelog.d/ecr-registry-scan-frequency.fixed.md
new file mode 100644
index 0000000000..38fedb90be
--- /dev/null
+++ b/prowler/changelog.d/ecr-registry-scan-frequency.fixed.md
@@ -0,0 +1 @@
+`ecr_registry_scan_images_on_push_enabled` no longer passes a registry whose scanning rules are all `MANUAL`, nor describes a `CONTINUOUS_SCAN` registry as scanning on push; each rule's `scanFrequency` is now read instead of inferred from a rule's presence
diff --git a/prowler/providers/aws/services/ecr/ecr_registry_scan_images_on_push_enabled/ecr_registry_scan_images_on_push_enabled.metadata.json b/prowler/providers/aws/services/ecr/ecr_registry_scan_images_on_push_enabled/ecr_registry_scan_images_on_push_enabled.metadata.json
index b589a8db7c..4b119021bd 100644
--- a/prowler/providers/aws/services/ecr/ecr_registry_scan_images_on_push_enabled/ecr_registry_scan_images_on_push_enabled.metadata.json
+++ b/prowler/providers/aws/services/ecr/ecr_registry_scan_images_on_push_enabled/ecr_registry_scan_images_on_push_enabled.metadata.json
@@ -1,7 +1,7 @@
 {
   "Provider": "aws",
   "CheckID": "ecr_registry_scan_images_on_push_enabled",
-  "CheckTitle": "ECR registry has image scanning on push enabled for all repositories",
+  "CheckTitle": "ECR registry has automated image scanning enabled for all repositories",
   "CheckType": [
     "Software and Configuration Checks/AWS Security Best Practices",
     "Software and Configuration Checks/Industry and Regulatory Standards/AWS Foundational Security Best Practices"
@@ -12,8 +12,8 @@
   "Severity": "medium",
   "ResourceType": "Other",
   "ResourceGroup": "container",
-  "Description": "Amazon ECR registries with repositories are evaluated for image scanning configured as `scan on push` at the registry level, with scan rules that cover all repositories (no restrictive filters), for either **basic** or **enhanced** scanning.",
-  "Risk": "Absent or filtered `scan on push` lets **vulnerable images** be pushed and deployed without timely detection, enabling exploitation of known CVEs (RCE, privilege escalation), supply chain compromise, and lateral movement - threatening workload integrity and data confidentiality.",
+  "Description": "Amazon ECR registries with repositories are evaluated for automated image scanning at the registry level -- `scan on push` or `continuous scanning` -- with scan rules that cover all repositories (no restrictive filters), for either **basic** or **enhanced** scanning. A registry whose rules specify only `MANUAL` scanning does not scan pushed images.",
+  "Risk": "Without automated registry scanning, **vulnerable images** are pushed and deployed without timely detection, enabling exploitation of known CVEs (RCE, privilege escalation), supply chain compromise, and lateral movement - threatening workload integrity and data confidentiality. Repository filters narrow the same risk to whichever repositories they exclude.",
   "RelatedUrl": "",
   "AdditionalURLs": [
     "https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning.html"
diff --git a/prowler/providers/aws/services/ecr/ecr_registry_scan_images_on_push_enabled/ecr_registry_scan_images_on_push_enabled.py b/prowler/providers/aws/services/ecr/ecr_registry_scan_images_on_push_enabled/ecr_registry_scan_images_on_push_enabled.py
index eee087359d..65a2f435aa 100644
--- a/prowler/providers/aws/services/ecr/ecr_registry_scan_images_on_push_enabled/ecr_registry_scan_images_on_push_enabled.py
+++ b/prowler/providers/aws/services/ecr/ecr_registry_scan_images_on_push_enabled/ecr_registry_scan_images_on_push_enabled.py
@@ -1,27 +1,69 @@
 from prowler.lib.check.models import Check, Check_Report_AWS
 from prowler.providers.aws.services.ecr.ecr_client import ecr_client
 
+# The two frequencies that scan an image without anyone asking. MANUAL is the third value
+# GetRegistryScanningConfiguration can return, and it is the default a BASIC registry gets when
+# scan on push is not specified, so it is the state this check exists to catch.
+AUTOMATED_SCAN_FREQUENCIES = {"SCAN_ON_PUSH", "CONTINUOUS_SCAN"}
+
 
 class ecr_registry_scan_images_on_push_enabled(Check):
-    def execute(self):
+    def execute(self) -> list[Check_Report_AWS]:
+        """Execute the check against every ECR registry that holds repositories.
+
+        Returns:
+            A list of reports, one per in-use registry, PASS when its rules cover all
+            repositories with a frequency in AUTOMATED_SCAN_FREQUENCIES.
+        """
         findings = []
         for registry in ecr_client.registries.values():
             # We want to check the registry if it is in use, hence there are repositories
             if len(registry.repositories) != 0:
                 report = Check_Report_AWS(metadata=self.metadata(), resource=registry)
                 report.status = "FAIL"
-                report.status_extended = f"ECR registry {registry.id} has {registry.scan_type} scanning without scan on push enabled."
+                report.status_extended = f"ECR registry {registry.id} has {registry.scan_type} scanning without automated scanning enabled."
                 if registry.rules:
-                    report.status = "PASS"
-                    report.status_extended = f"ECR registry {registry.id} has {registry.scan_type} scan with scan on push enabled."
-                    filters = True
-                    for rule in registry.rules:
-                        if not rule.scan_filters or "'*'" in str(rule.scan_filters):
-                            filters = False
-                    if filters:
-                        report.status = "FAIL"
-                        report.status_extended = f"ECR registry {registry.id} has {registry.scan_type} scanning with scan on push but with repository filters."
+                    # Read the frequency rather than inferring it from the presence of a rule. A rule
+                    # always carries one -- scanFrequency is required on the shape -- and a MANUAL
+                    # rule is a registry where nothing is scanned until someone runs a scan by hand.
+                    frequencies = {
+                        rule.scan_frequency
+                        for rule in registry.rules
+                        if rule.scan_frequency in AUTOMATED_SCAN_FREQUENCIES
+                    }
+                    if frequencies:
+                        report.status = "PASS"
+                        report.status_extended = f"ECR registry {registry.id} has {registry.scan_type} scanning with {self._describe(frequencies)} for all repositories."
+                        filters = True
+                        for rule in registry.rules:
+                            if not rule.scan_filters or "'*'" in str(rule.scan_filters):
+                                filters = False
+                        if filters:
+                            report.status = "FAIL"
+                            report.status_extended = f"ECR registry {registry.id} has {registry.scan_type} scanning with {self._describe(frequencies)} but with repository filters."
+                    else:
+                        report.status_extended = f"ECR registry {registry.id} has {registry.scan_type} scanning set to manual only, so images are not scanned when they are pushed."
 
                 findings.append(report)
 
         return findings
+
+    @staticmethod
+    def _describe(frequencies: set) -> str:
+        """Name automated scan frequencies in a fixed order.
+
+        Args:
+            frequencies: The registry's configured frequencies, already narrowed to
+                AUTOMATED_SCAN_FREQUENCIES.
+
+        Returns:
+            The frequencies in a fixed order, so the message does not vary between runs for
+            the same registry.
+        """
+        wording = {
+            "SCAN_ON_PUSH": "scan on push",
+            "CONTINUOUS_SCAN": "continuous scanning",
+        }
+        return " and ".join(
+            wording[f] for f in ("SCAN_ON_PUSH", "CONTINUOUS_SCAN") if f in frequencies
+        )
diff --git a/tests/providers/aws/services/ecr/ecr_registry_scan_images_on_push_enabled/ecr_registry_scan_images_on_push_enabled_test.py b/tests/providers/aws/services/ecr/ecr_registry_scan_images_on_push_enabled/ecr_registry_scan_images_on_push_enabled_test.py
index f736866742..f30e2de49e 100644
--- a/tests/providers/aws/services/ecr/ecr_registry_scan_images_on_push_enabled/ecr_registry_scan_images_on_push_enabled_test.py
+++ b/tests/providers/aws/services/ecr/ecr_registry_scan_images_on_push_enabled/ecr_registry_scan_images_on_push_enabled_test.py
@@ -72,6 +72,7 @@ class Test_ecr_registry_scan_images_on_push_enabled:
             assert len(result) == 0
 
     def test_registry_scan_on_push_enabled(self):
+        """A BASIC registry whose one unfiltered rule is SCAN_ON_PUSH passes as scan on push."""
         ecr_client = mock.MagicMock
         ecr_client.audited_account_arn = AWS_ACCOUNT_ARN
         ecr_client.registries = {}
@@ -119,7 +120,7 @@ class Test_ecr_registry_scan_images_on_push_enabled:
             assert result[0].status == "PASS"
             assert (
                 result[0].status_extended
-                == f"ECR registry {AWS_ACCOUNT_NUMBER} has BASIC scan with scan on push enabled."
+                == f"ECR registry {AWS_ACCOUNT_NUMBER} has BASIC scanning with scan on push for all repositories."
             )
             assert result[0].resource_id == AWS_ACCOUNT_NUMBER
             assert (
@@ -186,6 +187,7 @@ class Test_ecr_registry_scan_images_on_push_enabled:
             assert result[0].region == AWS_REGION_EU_WEST_1
 
     def test_scan_on_push_disabled(self):
+        """A registry with no scanning rules at all fails: no frequency is configured to read."""
         ecr_client = mock.MagicMock
         ecr_client.audited_account_arn = AWS_ACCOUNT_ARN
         ecr_client.registries = {}
@@ -228,7 +230,7 @@ class Test_ecr_registry_scan_images_on_push_enabled:
             assert result[0].status == "FAIL"
             assert (
                 result[0].status_extended
-                == f"ECR registry {AWS_ACCOUNT_NUMBER} has BASIC scanning without scan on push enabled."
+                == f"ECR registry {AWS_ACCOUNT_NUMBER} has BASIC scanning without automated scanning enabled."
             )
             assert result[0].resource_id == AWS_ACCOUNT_NUMBER
             assert (
@@ -236,3 +238,242 @@ class Test_ecr_registry_scan_images_on_push_enabled:
                 == f"arn:aws:ecr:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:registry/{AWS_ACCOUNT_NUMBER}"
             )
             assert result[0].region == AWS_REGION_EU_WEST_1
+
+    def test_enhanced_with_no_rules_fails(self):
+        """An ENHANCED registry with an empty rule set fails: nothing is scanned automatically.
+
+        Reviewed as a false FAIL, on the grounds that enhanced scanning defaults to continuous
+        scanning for all repositories when no rules are configured. It does not. Enhanced scanning
+        is filter-driven, and a repository matching no filter is not scanned at all: "Any
+        repositories that don't match a filter will have an Off scan frequency and won't be
+        scanned" (https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning-enhanced.html),
+        and "Any repositories not matching an enhanced scanning filter will have scanning disabled"
+        (https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning-filters.html). With
+        no rules at all, no repository matches, so the whole registry goes unscanned.
+
+        Nor is this state a disguised pass. ECR materialises "continuous scanning for all
+        repositories" as an explicit CONTINUOUS_SCAN rule filtered on '*' -- which the check already
+        passes, and which an observed ENHANCED registry returns instead of an empty list. So an
+        empty rule set is either unreachable or genuinely means nothing is scanned, and PASS here
+        would report a registry that scans nothing as covered.
+        """
+        ecr_client = mock.MagicMock
+        ecr_client.audited_account_arn = AWS_ACCOUNT_ARN
+        ecr_client.registries = {}
+        ecr_client.registries[AWS_REGION_EU_WEST_1] = Registry(
+            id=AWS_ACCOUNT_NUMBER,
+            arn=f"arn:aws:ecr:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:registry/{AWS_ACCOUNT_NUMBER}",
+            region=AWS_REGION_EU_WEST_1,
+            scan_type="ENHANCED",
+            repositories=[
+                Repository(
+                    name=repository_name,
+                    arn=repository_arn,
+                    region=AWS_REGION_EU_WEST_1,
+                    scan_on_push=False,
+                    policy="",
+                    images_details=None,
+                    lifecycle_policy="",
+                )
+            ],
+            rules=[],
+        )
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_aws_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.ecr.ecr_registry_scan_images_on_push_enabled.ecr_registry_scan_images_on_push_enabled.ecr_client",
+                ecr_client,
+            ),
+        ):
+            from prowler.providers.aws.services.ecr.ecr_registry_scan_images_on_push_enabled.ecr_registry_scan_images_on_push_enabled import (
+                ecr_registry_scan_images_on_push_enabled,
+            )
+
+            check = ecr_registry_scan_images_on_push_enabled()
+            result = check.execute()
+            assert len(result) == 1
+            assert result[0].status == "FAIL"
+            assert (
+                result[0].status_extended
+                == f"ECR registry {AWS_ACCOUNT_NUMBER} has ENHANCED scanning without automated scanning enabled."
+            )
+
+    def test_continuous_scan_is_not_reported_as_scan_on_push(self):
+        """A CONTINUOUS_SCAN-only registry passes, but must not be described as scan on push.
+
+        Observed against a live ENHANCED registry whose single rule was CONTINUOUS_SCAN: the check
+        reported \"scan with scan on push enabled\", a configuration the registry did not have. The
+        verdict was right and the sentence was not, because scan-on-push was inferred from the mere
+        presence of a rule and scanFrequency was never read."""
+        ecr_client = mock.MagicMock
+        ecr_client.audited_account_arn = AWS_ACCOUNT_ARN
+        ecr_client.registries = {}
+        ecr_client.registries[AWS_REGION_EU_WEST_1] = Registry(
+            id=AWS_ACCOUNT_NUMBER,
+            arn=f"arn:aws:ecr:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:registry/{AWS_ACCOUNT_NUMBER}",
+            region=AWS_REGION_EU_WEST_1,
+            scan_type="ENHANCED",
+            repositories=[
+                Repository(
+                    name=repository_name,
+                    arn=repository_arn,
+                    region=AWS_REGION_EU_WEST_1,
+                    scan_on_push=False,
+                    policy="",
+                    images_details=None,
+                    lifecycle_policy="",
+                )
+            ],
+            rules=[
+                ScanningRule(
+                    scan_frequency="CONTINUOUS_SCAN",
+                    scan_filters=[{"filter": "*", "filterType": "WILDCARD"}],
+                )
+            ],
+        )
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_aws_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.ecr.ecr_registry_scan_images_on_push_enabled.ecr_registry_scan_images_on_push_enabled.ecr_client",
+                ecr_client,
+            ),
+        ):
+            from prowler.providers.aws.services.ecr.ecr_registry_scan_images_on_push_enabled.ecr_registry_scan_images_on_push_enabled import (
+                ecr_registry_scan_images_on_push_enabled,
+            )
+
+            check = ecr_registry_scan_images_on_push_enabled()
+            result = check.execute()
+            assert len(result) == 1
+            assert result[0].status == "PASS"
+            assert (
+                result[0].status_extended
+                == f"ECR registry {AWS_ACCOUNT_NUMBER} has ENHANCED scanning with continuous scanning for all repositories."
+            )
+
+    def test_manual_only_scanning_fails(self):
+        """MANUAL is the third frequency the API returns, and nothing scans a pushed image.
+
+        The registry is BASIC because that is the only scan type MANUAL occurs under: scanFrequency
+        documents CONTINUOUS_SCAN and SCAN_ON_PUSH for ENHANCED, and MANUAL as the BASIC default
+        when scan on push is not specified. Before this was read, any rule at all produced PASS --
+        so a registry that scans nothing until someone asks reported as scanning on push.
+        """
+        ecr_client = mock.MagicMock
+        ecr_client.audited_account_arn = AWS_ACCOUNT_ARN
+        ecr_client.registries = {}
+        ecr_client.registries[AWS_REGION_EU_WEST_1] = Registry(
+            id=AWS_ACCOUNT_NUMBER,
+            arn=f"arn:aws:ecr:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:registry/{AWS_ACCOUNT_NUMBER}",
+            region=AWS_REGION_EU_WEST_1,
+            scan_type="BASIC",
+            repositories=[
+                Repository(
+                    name=repository_name,
+                    arn=repository_arn,
+                    region=AWS_REGION_EU_WEST_1,
+                    scan_on_push=False,
+                    policy="",
+                    images_details=None,
+                    lifecycle_policy="",
+                )
+            ],
+            rules=[
+                ScanningRule(
+                    scan_frequency="MANUAL",
+                    scan_filters=[{"filter": "*", "filterType": "WILDCARD"}],
+                )
+            ],
+        )
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_aws_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.ecr.ecr_registry_scan_images_on_push_enabled.ecr_registry_scan_images_on_push_enabled.ecr_client",
+                ecr_client,
+            ),
+        ):
+            from prowler.providers.aws.services.ecr.ecr_registry_scan_images_on_push_enabled.ecr_registry_scan_images_on_push_enabled import (
+                ecr_registry_scan_images_on_push_enabled,
+            )
+
+            check = ecr_registry_scan_images_on_push_enabled()
+            result = check.execute()
+            assert len(result) == 1
+            assert result[0].status == "FAIL"
+            assert (
+                result[0].status_extended
+                == f"ECR registry {AWS_ACCOUNT_NUMBER} has BASIC scanning set to manual only, so images are not scanned when they are pushed."
+            )
+
+    def test_both_frequencies_are_named_in_a_fixed_order(self):
+        """Two rules, one of each frequency: the wording is ordered, not set-iteration order.
+
+        ECR allows up to two rules, so this is a real configuration rather than a contrived one. The
+        frequencies are collected into a set, and rendering a set directly would let the sentence vary
+        between runs for identical input.
+        """
+        ecr_client = mock.MagicMock
+        ecr_client.audited_account_arn = AWS_ACCOUNT_ARN
+        ecr_client.registries = {}
+        ecr_client.registries[AWS_REGION_EU_WEST_1] = Registry(
+            id=AWS_ACCOUNT_NUMBER,
+            arn=f"arn:aws:ecr:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:registry/{AWS_ACCOUNT_NUMBER}",
+            region=AWS_REGION_EU_WEST_1,
+            scan_type="ENHANCED",
+            repositories=[
+                Repository(
+                    name=repository_name,
+                    arn=repository_arn,
+                    region=AWS_REGION_EU_WEST_1,
+                    scan_on_push=True,
+                    policy="",
+                    images_details=None,
+                    lifecycle_policy="",
+                )
+            ],
+            rules=[
+                ScanningRule(
+                    scan_frequency="CONTINUOUS_SCAN",
+                    scan_filters=[{"filter": "*", "filterType": "WILDCARD"}],
+                ),
+                ScanningRule(
+                    scan_frequency="SCAN_ON_PUSH",
+                    scan_filters=[{"filter": "*", "filterType": "WILDCARD"}],
+                ),
+            ],
+        )
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_aws_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.ecr.ecr_registry_scan_images_on_push_enabled.ecr_registry_scan_images_on_push_enabled.ecr_client",
+                ecr_client,
+            ),
+        ):
+            from prowler.providers.aws.services.ecr.ecr_registry_scan_images_on_push_enabled.ecr_registry_scan_images_on_push_enabled import (
+                ecr_registry_scan_images_on_push_enabled,
+            )
+
+            check = ecr_registry_scan_images_on_push_enabled()
+            result = check.execute()
+            assert len(result) == 1
+            assert result[0].status == "PASS"
+            assert (
+                result[0].status_extended
+                == f"ECR registry {AWS_ACCOUNT_NUMBER} has ENHANCED scanning with scan on push and continuous scanning for all repositories."
+            )

From 821fe43efd44405dca4bc9d9b0d963d648e65879 Mon Sep 17 00:00:00 2001
From: Jonathan Nguyen <87379568+tamg-aws@users.noreply.github.com>
Date: Tue, 1 Sep 2026 10:02:05 -0500
Subject: [PATCH 19/77] feat(iam): scope AgentCore PassRole and workload token
 grants, and flag unbound service trust (#12664)

---
 ...iam-agentcore-passrole-restricted.added.md |    1 +
 ...m-agentcore-workload-access-token.added.md |    1 +
 ...m-service-trust-source-to-account.added.md |    1 +
 .../aws/aws_ai_security_framework_aws.json    |    3 +
 .../__init__.py                               |    0
 ...rkload_access_token_wildcard.metadata.json |   44 +
 ...gentcore_workload_access_token_wildcard.py |  426 +++++
 .../__init__.py                               |    0
 ...bedrock_agentcore_restricted.metadata.json |   45 +
 ...assrole_to_bedrock_agentcore_restricted.py |  606 +++++++
 .../__init__.py                               |    0
 ..._restricts_source_to_account.metadata.json |   46 +
 ...rvice_trust_restricts_source_to_account.py |  484 ++++++
 .../providers/aws/services/iam/lib/policy.py  |   56 +
 ...ore_workload_access_token_wildcard_test.py | 1169 ++++++++++++++
 ...le_to_bedrock_agentcore_restricted_test.py | 1369 ++++++++++++++++
 ..._trust_restricts_source_to_account_test.py | 1410 +++++++++++++++++
 .../aws/services/iam/lib/policy_test.py       |  100 ++
 18 files changed, 5761 insertions(+)
 create mode 100644 prowler/changelog.d/iam-agentcore-passrole-restricted.added.md
 create mode 100644 prowler/changelog.d/iam-agentcore-workload-access-token.added.md
 create mode 100644 prowler/changelog.d/iam-service-trust-source-to-account.added.md
 create mode 100644 prowler/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/__init__.py
 create mode 100644 prowler/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/iam_policy_no_agentcore_workload_access_token_wildcard.metadata.json
 create mode 100644 prowler/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/iam_policy_no_agentcore_workload_access_token_wildcard.py
 create mode 100644 prowler/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/__init__.py
 create mode 100644 prowler/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/iam_policy_passrole_to_bedrock_agentcore_restricted.metadata.json
 create mode 100644 prowler/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/iam_policy_passrole_to_bedrock_agentcore_restricted.py
 create mode 100644 prowler/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/__init__.py
 create mode 100644 prowler/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account.metadata.json
 create mode 100644 prowler/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account.py
 create mode 100644 tests/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/iam_policy_no_agentcore_workload_access_token_wildcard_test.py
 create mode 100644 tests/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/iam_policy_passrole_to_bedrock_agentcore_restricted_test.py
 create mode 100644 tests/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account_test.py

diff --git a/prowler/changelog.d/iam-agentcore-passrole-restricted.added.md b/prowler/changelog.d/iam-agentcore-passrole-restricted.added.md
new file mode 100644
index 0000000000..1f8337db07
--- /dev/null
+++ b/prowler/changelog.d/iam-agentcore-passrole-restricted.added.md
@@ -0,0 +1 @@
+`iam_policy_passrole_to_bedrock_agentcore_restricted` check for AWS provider, flagging customer-managed IAM policies that allow `iam:PassRole` over every role where the passed role can reach Bedrock AgentCore, so any principal holding the policy can run agent code under any role in the account
diff --git a/prowler/changelog.d/iam-agentcore-workload-access-token.added.md b/prowler/changelog.d/iam-agentcore-workload-access-token.added.md
new file mode 100644
index 0000000000..7aeb272764
--- /dev/null
+++ b/prowler/changelog.d/iam-agentcore-workload-access-token.added.md
@@ -0,0 +1 @@
+`iam_policy_no_agentcore_workload_access_token_wildcard` check for AWS provider, flagging customer-managed IAM policies that allow `bedrock-agentcore:GetWorkloadAccessToken`, `GetWorkloadAccessTokenForJWT` or `GetWorkloadAccessTokenForUserId` on resources reaching workload identities other than the caller's own, which AWS documents as the only binding on the unverified user ID the token is issued for
diff --git a/prowler/changelog.d/iam-service-trust-source-to-account.added.md b/prowler/changelog.d/iam-service-trust-source-to-account.added.md
new file mode 100644
index 0000000000..e6b3101605
--- /dev/null
+++ b/prowler/changelog.d/iam-service-trust-source-to-account.added.md
@@ -0,0 +1 @@
+`iam_role_service_trust_restricts_source_to_account` check for AWS provider, flagging IAM roles whose trust policy lets an AWS service principal assume the role without confining the request to a specific source account, including trust policies that `iam_role_cross_service_confused_deputy_prevention` does not evaluate
diff --git a/prowler/compliance/aws/aws_ai_security_framework_aws.json b/prowler/compliance/aws/aws_ai_security_framework_aws.json
index 666530ef53..e69acaa128 100644
--- a/prowler/compliance/aws/aws_ai_security_framework_aws.json
+++ b/prowler/compliance/aws/aws_ai_security_framework_aws.json
@@ -241,6 +241,7 @@
         "iam_inline_policy_no_administrative_privileges",
         "iam_policy_allows_privilege_escalation",
         "iam_inline_policy_allows_privilege_escalation",
+        "iam_policy_passrole_to_bedrock_agentcore_restricted",
         "iam_role_administratoraccess_policy",
         "iam_user_administrator_access_policy",
         "iam_group_administrator_access_policy",
@@ -269,6 +270,7 @@
         "iam_user_no_setup_initial_access_key",
         "iam_user_two_active_access_key",
         "iam_user_console_access_unused",
+        "iam_policy_no_agentcore_workload_access_token_wildcard",
         "bedrock_api_key_no_long_term_credentials"
       ]
     },
@@ -305,6 +307,7 @@
       ],
       "Checks": [
         "iam_role_cross_service_confused_deputy_prevention",
+        "iam_role_service_trust_restricts_source_to_account",
         "iam_role_access_not_stale_to_bedrock",
         "iam_user_access_not_stale_to_bedrock",
         "iam_role_cross_account_readonlyaccess_policy"
diff --git a/prowler/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/__init__.py b/prowler/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/iam_policy_no_agentcore_workload_access_token_wildcard.metadata.json b/prowler/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/iam_policy_no_agentcore_workload_access_token_wildcard.metadata.json
new file mode 100644
index 0000000000..5693212ae3
--- /dev/null
+++ b/prowler/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/iam_policy_no_agentcore_workload_access_token_wildcard.metadata.json
@@ -0,0 +1,44 @@
+{
+  "Provider": "aws",
+  "CheckID": "iam_policy_no_agentcore_workload_access_token_wildcard",
+  "CheckTitle": "Custom IAM policy scopes Bedrock AgentCore workload access token retrieval to workload identity ARNs",
+  "CheckType": [
+    "Software and Configuration Checks/AWS Security Best Practices",
+    "TTPs/Credential Access",
+    "Effects/Data Exposure"
+  ],
+  "ServiceName": "iam",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "",
+  "Severity": "high",
+  "ResourceType": "AwsIamPolicy",
+  "ResourceGroup": "IAM",
+  "Description": "**Customer-managed IAM policies** are examined for `Allow` statements granting `bedrock-agentcore:GetWorkloadAccessToken`, `GetWorkloadAccessTokenForJWT` or `GetWorkloadAccessTokenForUserId` over resources that reach a workload identity other than the caller's own -- `*`, or an AgentCore ARN whose resource field wildcards past `workload-identity-directory`.",
+  "Risk": "A workload access token carries both user and agent identity and unlocks the outbound credential providers holding that user's stored credentials. `GetWorkloadAccessTokenForUserId` takes a caller-supplied user ID the platform does not verify, so AWS documents the IAM scope as the binding: with a wildcard resource, a compromised agent can mint tokens for **other users** of the same agent.",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/get-workload-access-token.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/identity.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/agent-identity-directory.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/identity-manage-agent-ids.html"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "aws iam create-policy-version --policy-arn <POLICY_ARN> --policy-document '{\"Version\":\"2012-10-17\",\"Statement\":[{\"Effect\":\"Allow\",\"Action\":[\"bedrock-agentcore:GetWorkloadAccessToken\"],\"Resource\":[\"arn:aws:bedrock-agentcore:<REGION>:<ACCOUNT_ID>:workload-identity-directory/default\",\"arn:aws:bedrock-agentcore:<REGION>:<ACCOUNT_ID>:workload-identity-directory/default/workload-identity/<WORKLOAD_NAME>\"]}]}' --set-as-default",
+      "NativeIaC": "```yaml\n# CloudFormation: scope the token actions to this workload's identity\nResources:\n  <example_resource_name>:\n    Type: AWS::IAM::ManagedPolicy\n    Properties:\n      PolicyDocument:\n        Version: '2012-10-17'\n        Statement:\n          - Effect: Allow\n            Action:\n              - bedrock-agentcore:GetWorkloadAccessToken\n              - bedrock-agentcore:GetWorkloadAccessTokenForJWT\n            Resource:  # FIX: replace '*' with the workload identity this policy is for\n              - !Sub 'arn:${AWS::Partition}:bedrock-agentcore:${AWS::Region}:${AWS::AccountId}:workload-identity-directory/default'\n              - !Sub 'arn:${AWS::Partition}:bedrock-agentcore:${AWS::Region}:${AWS::AccountId}:workload-identity-directory/default/workload-identity/<example_resource_id>'\n          # Where a JWT is always available, deny the unverified user-ID path outright\n          - Effect: Deny\n            Action: bedrock-agentcore:GetWorkloadAccessTokenForUserId\n            Resource: !Sub 'arn:${AWS::Partition}:bedrock-agentcore:${AWS::Region}:${AWS::AccountId}:workload-identity-directory/default'\n```",
+      "Other": "1. In the AWS console, open IAM > Policies and select <example_resource_name>\n2. Choose Edit > JSON\n3. Find every statement whose Action includes bedrock-agentcore:GetWorkloadAccessToken, GetWorkloadAccessTokenForJWT or GetWorkloadAccessTokenForUserId\n4. Replace \"Resource\": \"*\" with the workload identity ARNs the holder legitimately acts for, for example arn:aws:bedrock-agentcore:<REGION>:<ACCOUNT_ID>:workload-identity-directory/default/workload-identity/<WORKLOAD_NAME>\n5. If a JWT identifying the end user is always available, prefer GetWorkloadAccessTokenForJWT and add an explicit Deny for GetWorkloadAccessTokenForUserId\n6. Save as a new default version and re-run the check",
+      "Terraform": "```hcl\n# Scope the token actions to this workload's identity\nresource \"aws_iam_policy\" \"<example_resource_name>\" {\n  name   = \"<example_resource_name>\"\n  policy = jsonencode({\n    Version   = \"2012-10-17\"\n    Statement = [{\n      Effect   = \"Allow\"\n      Action   = [\n        \"bedrock-agentcore:GetWorkloadAccessToken\",\n        \"bedrock-agentcore:GetWorkloadAccessTokenForJWT\",\n      ]\n      # FIX: replace '*' with the workload identity this policy is for\n      Resource = [\n        \"arn:aws:bedrock-agentcore:${var.region}:${var.account_id}:workload-identity-directory/default\",\n        \"arn:aws:bedrock-agentcore:${var.region}:${var.account_id}:workload-identity-directory/default/workload-identity/<example_resource_id>\",\n      ]\n    }]\n  })\n}\n```"
+    },
+    "Recommendation": {
+      "Text": "Scope the workload access token actions to the workload identity ARNs the policy holder acts for, never `*`. AWS states the security binding of `GetWorkloadAccessTokenForUserId` rests on IAM scope, since the platform treats the user ID as an opaque unverified string: **do not grant it broadly via managed policies or wildcard resource statements**. Prefer `GetWorkloadAccessTokenForJWT` and deny the user-ID path where a JWT is always available.",
+      "Url": "https://hub.prowler.com/check/iam_policy_no_agentcore_workload_access_token_wildcard"
+    }
+  },
+  "Categories": [
+    "identity-access",
+    "gen-ai"
+  ],
+  "DependsOn": [],
+  "RelatedTo": [],
+  "Notes": "Scope is the customer-managed population, matching every other iam_policy_* check; inline policies are the subject of the iam_inline_policy_* checks.\n\nThree deliberate limits. A bare Action \"*\" is not read as a grant of these operations, because that is what the administrative-privileges checks report; the Action must carry the bedrock-agentcore prefix, wildcards within it included. The assertion is at ARN-type granularity rather than per workload identity: a resource confined to the workload-identity-directory namespace passes even with a wildcard inside it, because that is the scope the AgentCore console issues. A resource naming another AgentCore type passes for the opposite reason, since these actions accept no such resource and the grant reaches no workload identity.\n\nAn unconditional Deny of the same operation on Resource \"*\" clears the finding; a Deny scoped to one directory does not, because the Allow still reaches every other one."
+}
diff --git a/prowler/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/iam_policy_no_agentcore_workload_access_token_wildcard.py b/prowler/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/iam_policy_no_agentcore_workload_access_token_wildcard.py
new file mode 100644
index 0000000000..f6bc2fa584
--- /dev/null
+++ b/prowler/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/iam_policy_no_agentcore_workload_access_token_wildcard.py
@@ -0,0 +1,426 @@
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.iam.iam_client import iam_client
+from prowler.providers.aws.services.iam.lib.policy import iam_pattern_matches
+
+AGENTCORE_SERVICE_PREFIX = "bedrock-agentcore"
+# The three operations that hand a caller a workload access token. Confirmed against the
+# bedrock-agentcore service model: GetWorkloadAccessToken issues a token for the calling
+# workload, ForJWT exchanges a user JWT, ForUserId names the user directly.
+WORKLOAD_ACCESS_TOKEN_OPERATIONS = (
+    "GetWorkloadAccessToken",
+    "GetWorkloadAccessTokenForJWT",
+    "GetWorkloadAccessTokenForUserId",
+)
+# Every workload identity ARN sits under the workload-identity-directory resource path, both the
+# directory itself and the workload-identity children beneath it.
+WORKLOAD_IDENTITY_SEGMENT = "workload-identity-directory"
+# The leading resource-path segment of every AgentCore type that is NOT a workload identity, from
+# AWS's machine-readable service reference
+# (servicereference.us-east-1.amazonaws.com/v1/bedrock-agentcore/bedrock-agentcore.json): 32 resource
+# types collapsing to 23 distinct leading segments, of which workload-identity-directory is the only
+# one hosting the two in-scope types.
+#
+# SEGMENTS, NOT NAMES, and that distinction is the whole point. Probing concrete resources -- say
+# token-vault/default, gateway/my-gateway, runtime/my-runtime and a workload identity called
+# another-workload -- makes their example NAMES load-bearing. A resource field keyed on any other name
+# then matches none of them, and the check concludes it is confined to the workload-identity
+# namespace: "...:*prod-*" reaches runtime/prod-chatbot, gateway/prod-chatbot-gw,
+# memory/prod-chatbot-mem and two distinct workload identities, while reading as reaching none of
+# them. Names cannot be enumerated -- the AgentCore devguide's own examples are prod-chatbot,
+# dev-chatbot and customer-support-agent, and its own example policy wildcards on the name -- so no
+# probe corpus can be completed. Resource TYPES can be enumerated, and are, above.
+#
+# This is the same correction already applied to the two short-ARN branches, which stopped pinning
+# region, account and partition for exactly this reason; here it stops pinning the resource NAME.
+NON_WORKLOAD_IDENTITY_SEGMENTS = (
+    "ab-test",
+    "batch-evaluate",
+    "browser",
+    "browser-custom",
+    "browser-profile",
+    "capacity-provider",
+    "code-interpreter",
+    "code-interpreter-custom",
+    "configuration-bundle",
+    "dataset",
+    "evaluator",
+    "gateway",
+    "harness",
+    "memory",
+    "online-evaluation-config",
+    "payment-manager",
+    "policy-engine",
+    "recommendation",
+    "registry",
+    "runtime",
+    "token-vault",
+    "tool",
+)
+
+
+def _as_list(value) -> list:
+    """Normalize to list: None -> [], scalar -> [val], list -> list."""
+    if value is None:
+        return []
+    return value if isinstance(value, list) else [value]
+
+
+def _statements(document: dict) -> list:
+    """Extract Statement, normalizing single-statement dict to list."""
+    statements = document.get("Statement", [])
+    if not isinstance(statements, list):
+        statements = [statements]
+    return [statement for statement in statements if isinstance(statement, dict)]
+
+
+def _covered_token_operations(statement: dict) -> set:
+    """Return the workload access token operations this statement's Action covers.
+
+    Only actions that can name the bedrock-agentcore service are read, and the service field is
+    matched as an IAM pattern rather than compared literally -- `bedrock-*:GetWorkloadAccessToken`
+    reaches the operation, and an exact comparison read it as granting nothing at all.
+
+    A bare "*" is deliberately not treated as a grant of these operations: a statement allowing
+    every action on every resource is what check_admin_access reports, and re-reporting it here
+    would duplicate the administrative-privileges checks rather than add a claim. The
+    `separator != ":"` guard is what preserves that, since "*" partitions to an empty separator.
+    """
+    covered = set()
+    for action in _as_list(statement.get("Action")):
+        if not isinstance(action, str):
+            continue
+        service, separator, operation = action.strip().partition(":")
+        # A statement allowing EVERY action is the administrative-privileges checks' finding,
+        # whether it is spelled "*" or "*:*"; re-reporting it here would duplicate them. The
+        # separator test covers the bare "*", which partitions to an empty separator.
+        if separator != ":" or (service == "*" and operation == "*"):
+            continue
+        if not iam_pattern_matches(service, AGENTCORE_SERVICE_PREFIX):
+            continue
+        covered.update(
+            token_operation
+            for token_operation in WORKLOAD_ACCESS_TOKEN_OPERATIONS
+            if iam_pattern_matches(operation, token_operation)
+        )
+    return covered
+
+
+def _token_operations_removed_by(statement: dict) -> set:
+    """Return the token operations a DENY statement's Action removes.
+
+    Separate from _covered_token_operations on purpose, because the bare-star exclusion that is
+    right on the Allow side inverts on the Deny side. There, skipping ``*`` and ``*:*`` avoids
+    duplicating the administrative-privileges checks; here it meant an unconditional Deny of EVERY
+    action credited nothing, so a policy that grants nothing at all was reported FAIL at high
+    severity -- contradicting this check's own published Notes, which say an unconditional Deny of
+    the operation on Resource "*" clears the finding. The Allow-side guard is deliberately left
+    alone: relaxing it would reverse the settled decision that admin-level grants belong to
+    check_admin_access.
+
+    Deny expressed as NotAction is still NOT read, here or on the Allow side. Inverting it requires
+    resolving the whole action namespace, which is more than this check can claim; not crediting it
+    errs toward reporting rather than toward silence, so a policy denied that way may still FAIL.
+    """
+    removed = set()
+    for action in _as_list(statement.get("Action")):
+        if not isinstance(action, str):
+            continue
+        service, separator, operation = action.strip().partition(":")
+        if separator != ":":
+            # A bare "*" denies every action, these three among them.
+            if service == "*":
+                removed.update(WORKLOAD_ACCESS_TOKEN_OPERATIONS)
+            continue
+        if not iam_pattern_matches(service, AGENTCORE_SERVICE_PREFIX):
+            continue
+        removed.update(
+            token_operation
+            for token_operation in WORKLOAD_ACCESS_TOKEN_OPERATIONS
+            if iam_pattern_matches(operation, token_operation)
+        )
+    return removed
+
+
+def _may_reach_segment(resource_field: str, segment: str) -> bool:
+    """Return True if this resource field could name a resource whose path starts with ``segment``.
+
+    Decided from the field's own shape rather than by matching example resources, so no resource NAME
+    is load-bearing. The two wildcards are NOT interchangeable and that distinction is the whole
+    function: ``*`` spans any run of characters including none, while ``?`` consumes EXACTLY ONE. So
+    the field's HEAD -- everything before its first ``*`` -- is a fixed-length template in which each
+    ``?`` stands for one unknown character, and every string the field matches begins with something
+    that template accepts.
+
+    Compare the template to the segment position by position, then decide who supplies the remainder:
+
+    - A position where the template holds a literal that differs from the segment's character rules
+      the segment out entirely, however long the field is.
+    - If the template is at least as long as the segment and no position disagreed, the segment is
+      covered, so the field may reach it.
+    - If the template is SHORTER, only a ``*`` can supply what is missing. Without one the field has
+      a fixed length too short to contain the segment, so it reaches nothing under it.
+
+    THE HEAD IS CUT AT ``*`` ONLY, NEVER AT ``?``, and the two must not be treated alike. ``?``
+    consumes exactly one character, so it belongs to the fixed-length head and is skipped
+    position-by-position above; ``*`` spans an unbounded run, so it terminates the head. Cutting at
+    ``?`` as well empties the head of any ``?``-leading field, an empty head is compatible with every
+    segment, and the field then reads as reaching all 22 of them: ``?orkload-identity-directory/*``
+    would be reported while its byte-neighbour ``w?rkload-identity-directory/*`` is not. Measured
+    against an exact oracle over 1345 fields, that spelling costs 265 false FAILs.
+
+    THE COMPLEMENTARY ERROR IS TO RETURN False ON AN EMPTY HEAD, and it is worse. That repairs the
+    ``?`` rows and simultaneously turns bare ``*`` and ``*prod-*`` into "reaches nothing", which
+    reinstates the false PASS this segment test exists to remove: 10 oracle mismatches against 0 for
+    the rule as written. So the decision rests on whether a ``*`` is PRESENT, not on whether the head
+    is empty, because ``*`` must keep absorbing everything.
+
+    Deliberately errs toward True on a coarse pair such as head ``browser-custom/x`` against segment
+    ``browser``: over-estimating reach can only move a verdict toward reporting, and the reach test
+    that follows still decides the workload-identity question on its own terms.
+    """
+    head, spans = resource_field.split("*", 1)[0], "*" in resource_field
+    for index in range(min(len(head), len(segment))):
+        if head[index] != "?" and head[index] != segment[index]:
+            return False
+    if len(head) >= len(segment):
+        return True
+    return spans
+
+
+def _reaches_other_workload_identities(resource: str) -> bool:
+    """Return True if this resource lets the token actions name a workload identity that
+    is not the caller's own.
+
+    A resource confined to the workload-identity-directory namespace is accepted, wildcards
+    within it included: the AgentCore console itself issues that scope, and the ARN type is
+    the granularity this check asserts. A resource of some other AgentCore type -- a token
+    vault, a gateway -- is accepted too, but for the opposite reason: the token actions
+    accept no such resource, so the grant reaches no workload identity at all.
+
+    EVERY field of the pattern is matched as an IAM pattern, the first one included, because a
+    leading star matches "arn" as surely as it matches anything else. Comparing that field to the
+    literal "arn" instead would read ``*:aws:bedrock-agentcore:us-east-1:123456789012:*`` and
+    ``*:*:*:*:*:*`` as naming no workload identity, while their correctly spelled six-field
+    equivalent names every one.
+
+    A pattern with fewer than six fields reaches a workload identity when a star in its LAST
+    spelled-out field can span the fields it never spells out, because IAM wildcards match the
+    colon. That question is answered structurally rather than by probing a concrete ARN, and
+    deliberately so: matching against one ``us-east-1``/``123456789012`` ARN makes the region,
+    account and partition load-bearing, so ``arn:aws:bedrock-agentcore:us-west-2:*`` reads as
+    reaching nothing while the byte-identical ``us-east-1`` spelling is reported. No finite probe
+    corpus fixes that -- an account PREFIX such as
+    ``arn:aws:bedrock-agentcore:us-east-1:111122223333*`` has nothing to enumerate. What the fields
+    it does spell out must still do is name an ARN at all: ``arn:aws:s3:*`` is short and starred but
+    names another service.
+
+    ``arn:aws:bedrock-agentcore`` and ``arn:aws:bedrock-agentcore:us-east-1`` carry no star, so they
+    match no ARN and reach nothing. The star is what separates them from the cases above, not the
+    length.
+
+    THE RESOURCE FIELD IS DECIDED STRUCTURALLY TOO, by ``_may_reach_segment`` against the enumerable
+    list of AgentCore resource-path segments, and NOT by comparison against concrete example
+    resources. The tempting argument for a small probe corpus is that the namespace test intercepts
+    everything confined to workload-identity-directory before this one runs, so a single probe cannot
+    produce a false verdict. That premise does not hold:
+
+    ``arn:aws:bedrock-agentcore:us-east-1:123456789012:*prod-*`` is not confined to the namespace, yet
+    it matches none of a four-resource probe corpus, so the namespace test intercepts it anyway and
+    clears a statement reaching ``runtime/prod-chatbot``, ``gateway/prod-chatbot-gw``,
+    ``memory/prod-chatbot-mem``, a token vault, a custom browser, and two distinct workload
+    identities. The pair that shows such a corpus has no defensible boundary: resource field ``*`` is
+    reported while ``*prod-*`` is not, and no rule stated anywhere separates them except "matches one
+    of four example NAMES", which is an artifact of the corpus rather than a property of IAM.
+
+    So the lesson is the one the short-ARN branches already record, one level down: a probe corpus can
+    only decide a question whose answer space it enumerates. Regions, accounts and partitions could
+    not be enumerated there; resource NAMES cannot be enumerated here, since AgentCore creates
+    identities named after the runtime or gateway that made them. Resource TYPES can be, so the test
+    is built on those.
+    """
+    resource = resource.strip()
+    if resource == "*":
+        return True
+    arn_fields = resource.split(":", 5)
+    if len(arn_fields) < 6:
+        if "*" not in arn_fields[-1]:
+            return False
+        if not iam_pattern_matches(arn_fields[0], "arn"):
+            return False
+        return len(arn_fields) < 3 or iam_pattern_matches(
+            arn_fields[2], AGENTCORE_SERVICE_PREFIX
+        )
+    if not iam_pattern_matches(arn_fields[0], "arn"):
+        return False
+    if not iam_pattern_matches(arn_fields[2], AGENTCORE_SERVICE_PREFIX):
+        return False
+    resource_field = arn_fields[5]
+    # Confined to the workload-identity namespace when it can reach NO resource of another AgentCore
+    # type. The startswith test this replaced asked whether the field begins with the literal
+    # namespace prefix, which is a different question and got the ordering backwards: the confined
+    # workload-identity-* was reported while the strictly broader workload-identity-directory* --
+    # whose reach is a superset of it -- was accepted.
+    #
+    # BOTH TESTS ARE STRUCTURAL, and they have to stay that way together. Comparing a field against
+    # concrete example resources instead lets a field keyed on any name those examples do not use
+    # satisfy both at once: "*prod-*" matches none of the four non-workload-identity probes, so this
+    # branch would call it confined, and it also misses the single another-workload probe below, so
+    # neither test would report it. Making only one of them structural leaves the verdict unchanged,
+    # so do not read this branch as a guard for the one below -- it does not intercept everything
+    # confined to the namespace, and a pattern that is not confined at all can reach it.
+    if not any(
+        _may_reach_segment(resource_field, segment)
+        for segment in NON_WORKLOAD_IDENTITY_SEGMENTS
+    ):
+        return False
+    return _may_reach_segment(resource_field, WORKLOAD_IDENTITY_SEGMENT)
+
+
+def _is_workload_identity_scoped(statement: dict) -> bool:
+    """Return True if no resource the statement names reaches another workload identity.
+
+    A statement using NotResource names no resource at all -- it grants everything except
+    an excluded list -- so it is not scoped.
+
+    Only Resource and NotResource are read. An Allow-side Condition is NOT evaluated, so a
+    statement narrowed solely by one -- aws:ResourceTag is a condition key on both workload
+    identity resource types -- is still reported. That is deliberate conservatism, the mirror
+    of the Deny-side decision below: a condition is not credited with confining a grant any
+    more than it is credited with removing one. What it costs is that the finding may name a
+    statement an unread condition already scopes, which is why the FAIL text claims only that
+    the RESOURCES do not confine it.
+    """
+    resources = _as_list(statement.get("Resource"))
+    if not resources:
+        return "NotResource" not in statement
+    return not any(
+        isinstance(resource, str) and _reaches_other_workload_identities(resource)
+        for resource in resources
+    )
+
+
+def _denied_token_operations(document: dict) -> set:
+    """Return the token operations an unconditional Deny removes across all resources.
+
+    A conditional Deny is not counted: it only applies when the condition holds, so it
+    does not take the permission away from the request the Allow statement grants.
+    """
+    denied = set()
+    for statement in _statements(document):
+        if statement.get("Effect") != "Deny" or statement.get("Condition"):
+            continue
+        if any(
+            isinstance(resource, str) and resource.strip() == "*"
+            for resource in _as_list(statement.get("Resource"))
+        ):
+            denied.update(_token_operations_removed_by(statement))
+    return denied
+
+
+def _has_unevaluated_notaction(document: dict) -> bool:
+    """True if an Allow statement expresses its actions as NotAction.
+
+    NotAction under Effect Allow grants everything EXCEPT what it lists, so a policy using
+    it can grant the very actions this check looks for while carrying no Action key at all.
+    Reading only Action would find nothing and report a clean policy. Inverting NotAction
+    correctly means resolving it against the full action namespace and its interaction with
+    Resource and NotResource, which is more than this check can honestly claim to do -- so
+    the statement is declared unevaluated rather than guessed at.
+    """
+    for statement in _statements(document):
+        if statement.get("Effect") == "Allow" and "NotAction" in statement:
+            return True
+    return False
+
+
+class iam_policy_no_agentcore_workload_access_token_wildcard(Check):
+    """Check whether a customer-managed policy scopes AgentCore workload access token retrieval.
+
+    A workload access token identifies the agent to AgentCore, so a policy granting the retrieval
+    operations on every resource lets its holder obtain a token for any workload identity and act as
+    that agent. FAIL when the grant reaches workload identities beyond a named directory; PASS when
+    the resource is confined to the workload-identity-directory namespace, when it names an AgentCore
+    type these actions do not accept, or when an unconditional Deny on ``Resource: "*"`` clears it;
+    MANUAL when the policy document could not be read or expresses a shape this check does not
+    evaluate.
+
+    Caveats:
+        Customer-managed policies only. The assertion is at ARN-type granularity rather than per
+        workload identity, because a wildcard inside the directory namespace is the scope the
+        AgentCore console itself issues. A bare ``Action: "*"`` is left to the
+        administrative-privileges checks.
+    """
+
+    def execute(self) -> Check_Report_AWS:
+        """Flag policies granting token ops beyond caller's workload ID.
+
+        MANUAL is used deliberately below, where the document could not be read or expresses a shape
+        this check does not evaluate. An unread document must not report as compliant: the grant it
+        might contain is precisely what is being looked for, so PASS there would assert something never
+        established. This is not off-contract -- 110 upstream checks emit MANUAL and
+        `lib/check/models.py` places no restriction on it.
+
+        THE COST, recorded so it is not rediscovered: `lib/outputs/asff/asff.py` SKIPS findings whose
+        status is MANUAL, because MANUAL is not a valid Security Hub compliance state. A Security Hub
+        consumer therefore sees NOTHING for an unreadable policy, and absence there reads as
+        compliance. CSV and OCSF keep the status, so the information survives in those outputs. That is
+        a gap in one output format, not a reason to report an unread document as PASS or FAIL.
+        """
+        findings = []
+        for policy in iam_client.policies.values():
+            # Only customer-managed policies: the inline population is a separate check,
+            # and an AWS-managed policy cannot be edited to remediate a finding.
+            if policy.type != "Custom":
+                continue
+            if not policy.attached and not iam_client.provider.scan_unused_services:
+                continue
+
+            report = Check_Report_AWS(metadata=self.metadata(), resource=policy)
+            report.region = iam_client.region
+
+            if not policy.document:
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"Custom Policy {policy.name} could not be evaluated because its "
+                    "policy document was not retrieved."
+                )
+                findings.append(report)
+                continue
+
+            if _has_unevaluated_notaction(policy.document):
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"Custom Policy {policy.name} expresses an Allow statement with "
+                    "NotAction, which this check does not evaluate, so its effective grants "
+                    "could not be determined; review it manually."
+                )
+                findings.append(report)
+                continue
+
+            denied = _denied_token_operations(policy.document)
+            unscoped = set()
+            for statement in _statements(policy.document):
+                if statement.get("Effect") != "Allow":
+                    continue
+                if _is_workload_identity_scoped(statement):
+                    continue
+                unscoped.update(_covered_token_operations(statement) - denied)
+
+            if unscoped:
+                report.status = "FAIL"
+                report.status_extended = (
+                    f"Custom Policy {policy.name} allows "
+                    f"{', '.join(sorted(AGENTCORE_SERVICE_PREFIX + ':' + operation for operation in unscoped))} "
+                    "on resources outside a workload identity ARN, so its resources do not "
+                    "confine token retrieval to the workload's own identity; conditions on "
+                    "the statement are not evaluated."
+                )
+            else:
+                report.status = "PASS"
+                report.status_extended = (
+                    f"Custom Policy {policy.name} does not allow AgentCore workload access "
+                    "token retrieval outside a workload identity ARN."
+                )
+            findings.append(report)
+
+        return findings
diff --git a/prowler/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/__init__.py b/prowler/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/iam_policy_passrole_to_bedrock_agentcore_restricted.metadata.json b/prowler/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/iam_policy_passrole_to_bedrock_agentcore_restricted.metadata.json
new file mode 100644
index 0000000000..21c86ab8dd
--- /dev/null
+++ b/prowler/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/iam_policy_passrole_to_bedrock_agentcore_restricted.metadata.json
@@ -0,0 +1,45 @@
+{
+  "Provider": "aws",
+  "CheckID": "iam_policy_passrole_to_bedrock_agentcore_restricted",
+  "CheckTitle": "Custom IAM policy restricts iam:PassRole to Bedrock AgentCore to specific roles",
+  "CheckType": [
+    "Software and Configuration Checks/AWS Security Best Practices",
+    "TTPs/Privilege Escalation"
+  ],
+  "ServiceName": "iam",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "",
+  "Severity": "high",
+  "ResourceType": "AwsIamPolicy",
+  "ResourceGroup": "IAM",
+  "Description": "**Customer-managed IAM policies** are examined for `Allow` statements granting `iam:PassRole` over every role -- `Resource` `*`, or an IAM ARN whose resource field is nothing but wildcards -- where the passed role can reach **Bedrock AgentCore**: the statement pins `iam:PassedToService` to an AgentCore principal, or sets no such condition while the policy allows an AgentCore action.",
+  "Risk": "AgentCore runtimes, gateways, code interpreters, browsers and evaluation configs all run under a role the caller names in the create call.\n\nWith `iam:PassRole` unbounded, any principal holding the policy can hand AgentCore **any role in the account**, an administrator role included, then reach that role's permissions through agent code it controls. The role itself needs no change.",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/evaluations-prerequisites.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-permissions.html",
+    "https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_passrole.html",
+    "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "aws iam create-policy-version --policy-arn <POLICY_ARN> --policy-document '{\"Version\":\"2012-10-17\",\"Statement\":[{\"Effect\":\"Allow\",\"Action\":[\"iam:PassRole\"],\"Resource\":\"arn:aws:iam::<ACCOUNT_ID>:role/<AGENTCORE_EXECUTION_ROLE_PREFIX>*\",\"Condition\":{\"StringEquals\":{\"iam:PassedToService\":\"bedrock-agentcore.amazonaws.com\"}}}]}' --set-as-default",
+      "NativeIaC": "```yaml\n# CloudFormation: name the roles AgentCore may be handed\nResources:\n  <example_resource_name>:\n    Type: AWS::IAM::ManagedPolicy\n    Properties:\n      PolicyDocument:\n        Version: '2012-10-17'\n        Statement:\n          - Effect: Allow\n            Action: iam:PassRole\n            # FIX: replace '*' with the execution roles AgentCore is meant to run as.\n            # A name prefix is enough -- this is the scope AWS's own AgentCore\n            # Evaluations reference policy uses.\n            Resource: !Sub 'arn:${AWS::Partition}:iam::${AWS::AccountId}:role/<example_resource_id>*'\n            Condition:\n              StringEquals:\n                iam:PassedToService: bedrock-agentcore.amazonaws.com\n```",
+      "Other": "1. In the AWS console, open IAM > Policies and select <example_resource_name>\n2. Choose Edit > JSON\n3. Find every statement whose Action includes iam:PassRole (or iam:* / iam:Pass*) with \"Resource\": \"*\" or an IAM ARN such as arn:aws:iam::<ACCOUNT_ID>:role/*\n4. Replace that resource with the AgentCore execution roles the holder should be able to pass -- a role ARN, or a role-name prefix such as arn:aws:iam::<ACCOUNT_ID>:role/AgentCoreEvaluationRole*\n5. Add Condition StringEquals iam:PassedToService = bedrock-agentcore.amazonaws.com so the roles cannot be handed to any other service\n6. Save as a new default version and re-run the check",
+      "Terraform": "```hcl\n# Name the roles AgentCore may be handed\nresource \"aws_iam_policy\" \"<example_resource_name>\" {\n  name   = \"<example_resource_name>\"\n  policy = jsonencode({\n    Version   = \"2012-10-17\"\n    Statement = [{\n      Effect    = \"Allow\"\n      Action    = [\"iam:PassRole\"]\n      # FIX: replace '*' with the execution roles AgentCore is meant to run as\n      Resource  = \"arn:aws:iam::${var.account_id}:role/<example_resource_id>*\"\n      Condition = {\n        StringEquals = { \"iam:PassedToService\" = \"bedrock-agentcore.amazonaws.com\" }\n      }\n    }]\n  })\n}\n```"
+    },
+    "Recommendation": {
+      "Text": "Name the roles that may be passed instead of allowing every role. AWS's own AgentCore Evaluations reference policy shows the shape: `iam:PassRole` on `arn:aws:iam::*:role/AgentCoreEvaluationRole*` under `StringEquals iam:PassedToService = bedrock-agentcore.amazonaws.com`. A role-name prefix satisfies this check; `*` and `role/*` do not. Keep the condition as well, so the same roles cannot be handed to another service.",
+      "Url": "https://hub.prowler.com/check/iam_policy_passrole_to_bedrock_agentcore_restricted"
+    }
+  },
+  "Categories": [
+    "identity-access",
+    "gen-ai"
+  ],
+  "DependsOn": [],
+  "RelatedTo": [
+    "iam_policy_allows_privilege_escalation"
+  ],
+  "Notes": "Companion to iam_policy_allows_privilege_escalation, which reports a full AgentCore create-and-invoke action set but evaluates Action alone, so it reports that combination whatever the PassRole scope and nothing when part of it is absent. This check asserts what that leaves open, how far the PassRole grant reaches, and needs only one AgentCore action beside it.\n\nScope is the customer-managed population. A statement pinning iam:PassedToService to another service is out of scope, and a bare Action \"*\" counts as neither the grant nor the AgentCore action, so administrator policies are left to the administrative-privileges checks.\n\nA resource names every role when no role name escapes it, which is broader than a field of wildcards alone: role/?* and *role* both qualify, as does an ARN whose star spans the account and resource fields. A bounded set passes, since role/? names single-character roles only and role/AgentCoreEvaluationRole* is the scope AWS's own AgentCore Evaluations reference policy uses."
+}
diff --git a/prowler/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/iam_policy_passrole_to_bedrock_agentcore_restricted.py b/prowler/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/iam_policy_passrole_to_bedrock_agentcore_restricted.py
new file mode 100644
index 0000000000..112db48d18
--- /dev/null
+++ b/prowler/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/iam_policy_passrole_to_bedrock_agentcore_restricted.py
@@ -0,0 +1,606 @@
+import re
+
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.iam.iam_client import iam_client
+from prowler.providers.aws.services.iam.lib.policy import iam_pattern_matches
+
+AGENTCORE_SERVICE_PREFIX = "bedrock-agentcore"
+AGENTCORE_SERVICE_PRINCIPAL = "bedrock-agentcore.amazonaws.com"
+# Bedrock AgentCore also reaches IAM through subdomain principals such as
+# runtime-identity.bedrock-agentcore.amazonaws.com, so a literal value in that family
+# pins the statement to AgentCore just as the base principal does.
+AGENTCORE_PRINCIPAL_FAMILY_PATTERN = re.compile(
+    rf"^([a-z0-9-]+\.)?{AGENTCORE_SERVICE_PREFIX}(-[a-z0-9-]+)?\.amazonaws\.com$",
+    re.IGNORECASE,
+)
+# Concrete principals used to ask whether a condition value, READ AS AN IAM PATTERN, covers one of
+# them. That is a different question from the regex above, which asks whether the value IS a family
+# member, and asking only the second let a wildcard covering the family out of scope entirely. Both
+# are needed: the regex catches a literal subdomain nobody enumerated here, and the probes catch a
+# pattern that names no principal literally while reaching several.
+AGENTCORE_PRINCIPAL_PROBES = (
+    AGENTCORE_SERVICE_PRINCIPAL,
+    f"runtime-identity.{AGENTCORE_SERVICE_PRINCIPAL}",
+)
+# Two role names used to ask whether a resource field names EVERY role rather than some of them:
+# the shortest a role name can be, and the longest. Only "*" can span an arbitrary run of
+# characters -- "?" matches exactly one -- so a pattern built from literals and "?" alone covers a
+# bounded set of names and cannot match both probes, while any pattern that does match both leaves
+# no role name outside it.
+_SHORTEST_ROLE_NAME = "role/a"
+_LONGEST_ROLE_NAME = "role/" + "r0le-name-" * 6 + "abcd"  # 64 chars, the IAM maximum
+EVERY_ROLE_RESOURCE_PROBES = (_SHORTEST_ROLE_NAME, _LONGEST_ROLE_NAME)
+# Operators that COMPARE the request's iam:PassedToService against the statement's own values, so a
+# value under one of them names a service this statement can hand a role to. An allow-list, because
+# the deny-list this replaced -- two substring tests for "not" and "ifexists" -- dropped the entire
+# condition on a one-word operator change, and a dropped condition fell through to the document-wide
+# fallback in _targets_agentcore as though the statement pinned nothing at all.
+#
+# *IfExists and ForAllValues ARE included, unlike _RESTRICTIVE_ATTESTATION_OPERATORS in
+# kms/lib/enclave.py which rejects both as vacuous-true when the key is absent. The difference is the
+# question being asked: this function asks which services a statement NAMES, not whether the
+# statement is restrictive. A value is named whether or not the operator would also admit a request
+# that omits the key.
+#
+# The ARN operators are DELIBERATELY absent, which is why this list is shorter than the trust check's
+# and not an oversight in it. iam:PassedToService is a STRING-typed key holding a service principal,
+# and AWS documents it as working with the string operators; an ARN operator on it cannot compare
+# meaningfully. The trust check needs ArnEquals and ArnLike because aws:SourceArn is ARN-typed. Two
+# allow-lists differing by the TYPE of the key they read is correct; differing for no stated reason is
+# what gets flagged, so the reason is here.
+#
+# Consequence worth naming: ArnLikeIfExists on iam:PassedToService contributes no value, so the
+# statement takes the no-pin path and reaches every service -- the same route as carrying no condition
+# at all. It still FAILs beside an AgentCore action, by that route rather than by being read as a pin.
+_PASSED_TO_SERVICE_OPERATORS = frozenset(
+    f"{qualifier}{operator}{suffix}".lower()
+    for qualifier in ("", "ForAnyValue:", "ForAllValues:")
+    for operator in ("StringEquals", "StringEqualsIgnoreCase", "StringLike")
+    for suffix in ("", "IfExists")
+)
+
+
+def _as_list(value) -> list:
+    """Normalize to list: None -> [], scalar -> [val], list -> list."""
+    if value is None:
+        return []
+    return value if isinstance(value, list) else [value]
+
+
+def _statements(document: dict) -> list:
+    """Extract Statement, normalizing single-statement dict to list."""
+    statements = document.get("Statement", [])
+    if not isinstance(statements, list):
+        statements = [statements]
+    return [statement for statement in statements if isinstance(statement, dict)]
+
+
+def _covers_passrole(statement: dict) -> bool:
+    """Return True if the statement's Action covers iam:PassRole.
+
+    The service field is matched as an IAM pattern rather than compared literally, so
+    `*:PassRole` is read as covering it. A bare "*" still does not count: a statement allowing
+    every action on every resource is what the administrative-privileges checks report, and
+    re-reporting it here would duplicate them instead of adding a claim. The `separator != ":"`
+    guard is what preserves that, since "*" partitions to an empty separator.
+    """
+    for action in _as_list(statement.get("Action")):
+        if not isinstance(action, str):
+            continue
+        service, separator, operation = action.strip().partition(":")
+        # A statement allowing EVERY action is the administrative-privileges checks' finding,
+        # whether it is spelled "*" or "*:*"; the separator test covers the bare "*".
+        if separator != ":" or (service == "*" and operation == "*"):
+            continue
+        if not iam_pattern_matches(service, "iam"):
+            continue
+        if iam_pattern_matches(operation, "PassRole"):
+            return True
+    return False
+
+
+def _grants_agentcore_action(document: dict) -> bool:
+    """Return True if the policy allows at least one bedrock-agentcore action.
+
+    This is what puts an otherwise service-agnostic PassRole grant in scope: the same
+    policy can both create an AgentCore resource and choose the role it runs as. A bare
+    "*" is again excluded, so an administrator policy is not pulled in on that basis.
+
+    The service field is matched as an IAM pattern, as it is everywhere else these checks read
+    one. It matters most here: ``bedrock-*:CreateAgentRuntime`` is a plausible thing to write, since
+    one prefix covers bedrock and bedrock-agentcore together. A literal comparison would read it as
+    no AgentCore reach, which takes an unpinned PassRole grant beside it out of scope entirely and
+    clears the policy.
+    """
+    for statement in _statements(document):
+        if statement.get("Effect") != "Allow":
+            continue
+        for action in _as_list(statement.get("Action")):
+            if not isinstance(action, str):
+                continue
+            service, separator, _ = action.strip().partition(":")
+            if separator == ":" and iam_pattern_matches(
+                service, AGENTCORE_SERVICE_PREFIX
+            ):
+                return True
+    return False
+
+
+def _passed_to_service_values(statement: dict) -> list:
+    """Collect the services a statement's iam:PassedToService condition names.
+
+    Read through the allow-list above rather than by rejecting operator names. An operator this code
+    does not recognise must never be silently skipped, because ``_targets_agentcore`` treats "no
+    values" as "reaches every service" and then consults the whole document. So a skipped condition
+    inverts the verdict in BOTH directions, on nothing more than a one-word change of operator:
+
+    - ``StringEqualsIfExists`` naming AgentCore, on ``Resource: "*"``, yields no values, so a policy
+      carrying no other AgentCore action falls out of scope entirely -- a PassRole grant on every
+      role in the account, cleared by a high-severity privilege-escalation check.
+    - ``StringEqualsIfExists`` naming another service yields no values too, so the document-wide
+      fallback pulls the statement back in beside any AgentCore action and reports it, when a
+      statement pinned to sagemaker is out of scope by the same rule spelled ``StringEquals``.
+
+    A negated operator is deliberately not read: it names the services the statement will NOT pass
+    to, and the set it does reach is everything else, which is what "no values" already means here.
+    """
+    values = []
+    condition = statement.get("Condition", {})
+    if not isinstance(condition, dict):
+        return values
+    for operator, block in condition.items():
+        if not isinstance(operator, str) or not isinstance(block, dict):
+            continue
+        lowered_operator = operator.lower()
+        if lowered_operator not in _PASSED_TO_SERVICE_OPERATORS:
+            continue
+        for key, value in block.items():
+            if isinstance(key, str) and key.lower() == "iam:passedtoservice":
+                values.extend(_as_list(value))
+    return values
+
+
+def _null_guarded_keys(condition: dict) -> set:
+    """Return the lowercased condition keys a ``Null: "false"`` test forces to be present.
+
+    The helper the trust check in this PR defines, for the same reason, and byte-identical to it
+    EXCEPT for the value type read -- see below, and see that file's docstring for the other half.
+    Both spellings are handled, the scalar and the list, as kms/lib/enclave.py does.
+
+    A JSON ``false`` counts as well as the string ``"false"``, because on THIS check's surface IAM
+    stores and returns both. Measured on a customer-managed policy, which is exactly this check's
+    population: ``create_policy`` with ``{"Null": {"iam:PassedToService": false}}`` is accepted and
+    ``get_policy_version`` returns a Python ``bool``, unconverted. Reading only the string leaves the
+    guard invisible, and the consequence is a false report on AWS's own prescribed hardening: a pin
+    AWS's simulator holds to one service -- absent key ``implicitDeny``, AgentCore ``implicitDeny``
+    -- would be reported as passing every role to AgentCore.
+
+    The trust sibling stays string-only ON PURPOSE, because a trust policy normalizes its scalars
+    and no bool can reach it: the divergence is measured, not drift.
+
+    This also DIVERGES from kms/lib/enclave.py deliberately: that copy tests ``isinstance(value,
+    str)`` only and carries the same blind spot. Diverging toward the correct reading rather than
+    inheriting the house copy's defect.
+
+    EVERY value must be ``false``, not merely one of them, because IAM ORs the values inside a single
+    condition operator. ``Null: {key: ["true","false"]}`` therefore means "key absent OR key present",
+    which is always true and binds NOTHING, yet reading it with ``any`` credited it as a guard and
+    rescued a defeasible pin -- so ADDING the word ``true`` to a guard list improved the score.
+    Measured on IAM's own evaluator with the key omitted: ``allowed`` for ``["true","false"]`` and
+    ``["false","true"]``, indistinguishable from carrying no Null block, against ``implicitDeny`` for
+    ``"false"``, ``["false"]`` and ``["false","false"]``. Reachable: ``create_policy`` stores a
+    multi-value list and ``get_policy_version`` returns it unchanged, and the trust surface preserves
+    a multi-element list too even though it collapses a single-element one to a scalar.
+
+    The ``candidates and`` guard is not decoration: ``all()`` over an empty list is True, so an empty
+    value list would otherwise be read as the strongest possible guard.
+
+    ``0`` is NOT a guard, and it is the VALUE comparison that excludes it, not the type test:
+    ``str(0)`` is ``"0"``, which is simply not ``"false"``. The ``isinstance`` merely narrows the
+    accepted types to the two JSON scalars IAM actually returns here. Spelled out because the
+    tempting formulation is the broken one -- ``not candidate`` or ``candidate is False`` reads
+    ``0``, ``""``, ``None`` and ``[]`` as guards, since ``isinstance(False, int)`` is True in Python
+    and falsiness is not the question being asked.
+
+    ACCESS ANALYZER DOES NOT CORROBORATE THIS BOUNDARY, so do not cite it as support. Measured: it
+    reports TYPE_MISMATCH_BOOLEAN for ``"FALSE"`` and for ``" false "``, both of which this helper
+    CREDITS, as well as for ``0``, which it does not. Its type-checking is therefore stricter than
+    this helper's casing tolerance in one direction and looser in the other, and the boundary drawn
+    here is this check's own decision rather than an external one. Over-recognising is the dangerous
+    direction, because crediting a guard turns a FAIL into a PASS.
+    """
+    guarded = set()
+    for operator, block in condition.items():
+        if not isinstance(operator, str) or operator.lower() != "null":
+            continue
+        if not isinstance(block, dict):
+            continue
+        for key, value in block.items():
+            if not isinstance(key, str):
+                continue
+            candidates = value if isinstance(value, list) else [value]
+            if candidates and all(
+                isinstance(candidate, (str, bool))
+                and str(candidate).strip().lower() == "false"
+                for candidate in candidates
+            ):
+                guarded.add(key.lower())
+    return guarded
+
+
+def _passed_to_service_pin_is_defeasible(statement: dict) -> bool:
+    """Return True if every operator naming iam:PassedToService can be skipped by the caller.
+
+    An *IfExists operator is not evaluated when the request omits the key, and ForAllValues is
+    vacuous-true for an absent key -- kms/lib/enclave.py records these as the same trap. So a
+    statement whose only pin is one of those reaches every service as well as the one it names,
+    and cannot be treated as confined to it.
+
+    UNLESS the same statement carries ``Null: "false"`` on the same key, which forces the key to be
+    present and removes the skip. Reading that guard is what stops the check penalising the spelling
+    AWS prescribes -- "You should always include the Null condition operator ... with a false value".
+    Without it the hardened form scores worse than the plain one, which is backwards: a caller cannot
+    omit a key the guard requires, so the guard can only narrow the grant.
+
+    Conditions are ANDed, so one non-defeasible operator naming the key holds the request to that
+    key's values whatever else the statement carries; the pin is defeasible only if all of them are.
+    """
+    defeasible = []
+    condition = statement.get("Condition", {})
+    if not isinstance(condition, dict):
+        return False
+    guarded = "iam:passedtoservice" in _null_guarded_keys(condition)
+    for operator, block in condition.items():
+        if not isinstance(operator, str) or not isinstance(block, dict):
+            continue
+        lowered_operator = operator.lower()
+        if lowered_operator not in _PASSED_TO_SERVICE_OPERATORS:
+            continue
+        if not any(
+            isinstance(key, str) and key.lower() == "iam:passedtoservice"
+            for key in block
+        ):
+            continue
+        defeasible.append(
+            (
+                lowered_operator.endswith("ifexists")
+                or lowered_operator.startswith("forallvalues:")
+            )
+            and not guarded
+        )
+    return bool(defeasible) and all(defeasible)
+
+
+def _names_agentcore(values: list) -> bool:
+    """Return True if any value can name an AgentCore service principal.
+
+    Two questions, and asking only the second was a false PASS on the exact grant this check exists
+    to catch. Probing the value as a pattern against the ONE base principal, plus a regex asking
+    whether the value IS a family member, left every wildcard that COVERS the family unrecognised:
+
+      *.bedrock-agentcore.amazonaws.com          covers 2 known principals   read as another service
+      *-identity.bedrock-agentcore.amazonaws.com covers runtime-identity     read as another service
+      runtime-identity.*                         covers runtime-identity     read as another service
+      *.bedrock-agentcore.*                      covers 2                    read as another service
+
+    Read that way each would pin iam:PassedToService to something other than AgentCore, taking the
+    statement out of scope -- while both the narrower literal and the no-condition case are reported.
+    Broadening the grant would flip the verdict the safe way round, which is the shape that never
+    self-corrects.
+
+    So the value is now matched as a pattern against several concrete principals, not one, and a
+    literal outside that list is still caught by the family regex. ``?`` covers nothing here on
+    purpose: it matches exactly one character and no principal has a single-character subdomain --
+    that ``?`` cannot match zero characters is pinned by iam/lib/policy_test.py, not assumed here.
+    """
+    return any(
+        isinstance(value, str)
+        and (
+            AGENTCORE_PRINCIPAL_FAMILY_PATTERN.match(value.strip())
+            or any(
+                iam_pattern_matches(value, probe)
+                for probe in AGENTCORE_PRINCIPAL_PROBES
+            )
+        )
+        for value in values
+    )
+
+
+def _targets_agentcore(statement: dict, document: dict) -> bool:
+    """Return True if the statement can hand a role to Bedrock AgentCore.
+
+    Three cases, in the order they are decided:
+
+    1. A condition NAMES AgentCore. The statement is in scope on its own terms, under any operator
+       that compares the key, *IfExists included. Dropping a spelling before its value is read is
+       what would clear a PassRole grant on every role in the account: with no values the statement
+       looks unpinned, so scope falls to a document that allows no AgentCore action.
+    2. A condition pins the key elsewhere and cannot be skipped. The statement cannot reach
+       AgentCore however the rest of the policy is shaped, so it is out of scope -- this is what
+       keeps a grant pinned to sagemaker.amazonaws.com out of the check.
+    3. Anything else -- no condition on the key, or only a defeasible one -- reaches every service,
+       so the rest of the policy decides: in scope when the policy also allows an AgentCore action.
+    """
+    values = _passed_to_service_values(statement)
+    if _names_agentcore(values):
+        return True
+    if values and not _passed_to_service_pin_is_defeasible(statement):
+        return False
+    return _grants_agentcore_action(document)
+
+
+def _names_every_role(resource: str) -> bool:
+    """Return True if this one resource names every role rather than specific roles.
+
+    Decided by matching the resource against the shortest and longest role name a pattern would
+    have to cover, rather than by a regex demanding the resource field be a run of asterisks. That
+    regex was both too narrow and, being anchored on a literal ``arn:``, blind to a wildcarded
+    partition. Four resources naming every role in the account read as specific ones:
+
+      role/?*   every role whose name has at least one character
+      *role*    every role/... resource there is, since the stars absorb the prefix and the name
+      arn:aws:iam::*                 the star spans the account and resource fields
+      *:aws:iam::123456789012:role/* a leading star matches "arn"
+
+    ``role/?`` still passes and is the case that shows the rule is not "contains a metacharacter":
+    ``?`` matches exactly one character -- pinned by iam/lib/policy_test.py rather than assumed here
+    -- so it names single-character roles and nothing else. A name
+    prefix such as ``role/AgentCoreEvaluationRole*`` passes for the same reason -- it covers a set,
+    but not every role -- and that is the scope AWS's own AgentCore Evaluations reference policy
+    uses, so reporting it would report the documented configuration.
+
+    Residual, and it is a judgement not a hole: a pattern of exactly 64 ``?`` would match the long
+    probe and not the short one, so it reads as specific. It names every role whose name is exactly
+    64 characters, which is a set no operator writes by hand.
+
+    A pattern with fewer than six fields is decided structurally, and NOT by probing concrete ARNs.
+    A probe corpus pins the partition and account it happens to carry, which makes both load-bearing
+    in the short branch while the six-field branch ignores them: ``arn:aws:iam::555555555555*`` reads
+    as specific while the identical shape in the probe's own account is reported, and
+    ``arn:aws-us-gov:iam::*`` and ``arn:aws-cn:iam::*`` read as specific merely because no probe
+    carries those partitions. No probe corpus can fix an account PREFIX -- there is nothing to
+    enumerate. So: a star in the LAST spelled-out field spans every
+    field after it, because IAM wildcards match the colon, and what remains is that the fields
+    actually spelled out must be able to name a role ARN.
+
+    The region and account positions get an extra test, and both rest on a fixed property of an IAM
+    ARN rather than on a corpus:
+
+      account   an account is twelve digits, so a literal that is not twelve digits names no
+                account. This is what keeps ``arn:aws:iam::role/Prod*`` and
+                ``arn:aws:iam::12345:role/*`` specific.
+      region    every IAM ARN has an EMPTY region, so any region pattern that cannot match the
+                empty string names no region. This is what keeps ``arn:aws:iam:role/Prod*``
+                specific -- the same shape one colon short -- and, at six fields,
+                ``arn:aws:iam:us-east-1:123456789012:role/*``.
+
+    BOTH BRANCHES APPLY BOTH TESTS, and the six-field branch not applying them was the defect that
+    reached review. It tested only that the partition and service fields could name an IAM ARN and
+    then probed the resource field, so a fully spelled-out ARN naming a region IAM does not have, or
+    an account of the wrong length, was read as naming every role: a high-severity
+    privilege-escalation FAIL on a pattern matching no role ARN at all. That is the same defect the
+    short branch had already been fixed for, surviving in the branch nobody re-read.
+
+    The two branches phrase the SAME question differently because the field means something
+    different in each, and this is the part that is easy to get wrong:
+
+      short branch  the last spelled-out field carries a star that spans every field after it, so
+                    only its literal HEAD is pinned to a position. ``?`` is discounted there because
+                    it can match the colon and slide the rest of the pattern into a later field --
+                    which is what keeps ``arn:aws:iam:?*`` naming every role.
+      six fields    the field is delimited on both sides, so the WHOLE field must be able to name a
+                    region or an account, and ``?`` is NOT discounted -- it has no colon to match
+                    and must consume exactly one character of a region that has none. That is why
+                    ``arn:aws:iam:?:123456789012:role/*`` names no role while ``arn:aws:iam:?*``
+                    names every one.
+
+    The PARTITION position deliberately gets no such test, which is why ``arn:xyz*`` still reads as
+    naming every role. A partition is not a fixed shape -- ``aws``, ``aws-cn``, ``aws-us-gov`` and the
+    iso partitions differ -- and a PREFIX of one cannot be enumerated, which is the same reason the
+    probe corpus was abandoned above. Over-reporting an unspellable partition is the safe direction
+    for a privilege-escalation check; guessing the partition set is not.
+    """
+    candidate = resource.strip()
+    if candidate == "*":
+        return True
+    arn_fields = candidate.split(":", 5)
+    if len(arn_fields) < 6:
+        if "*" not in arn_fields[-1]:
+            return False
+        if not iam_pattern_matches(arn_fields[0], "arn"):
+            return False
+        if len(arn_fields) > 2 and not iam_pattern_matches(arn_fields[2], "iam"):
+            return False
+        if len(arn_fields) == 4:
+            # The last field sits in the REGION position, and every IAM ARN has an EMPTY region. Any
+            # literal head -- role/Prod in arn:aws:iam:role/Prod* -- can name no region, so the
+            # pattern matches no role ARN however its star spans. Discounting ? keeps
+            # arn:aws:iam:?* naming every role, since ? matches the colon.
+            region_head = arn_fields[3].split("*", 1)[0].replace("?", "")
+            if region_head:
+                return False
+        if len(arn_fields) == 5:
+            # The last field sits in the ACCOUNT position, and an account is twelve digits. A
+            # literal head that is not digits -- role/Prod in arn:aws:iam::role/Prod* -- can name no
+            # account, so the pattern matches no role ARN however its star spans.
+            account_head = arn_fields[4].split("*", 1)[0].replace("?", "")
+            if account_head and not account_head.isdigit():
+                return False
+        return True
+    if not iam_pattern_matches(arn_fields[0], "arn"):
+        return False
+    if not iam_pattern_matches(arn_fields[2], "iam"):
+        return False
+    # Every IAM ARN has an EMPTY region, so a region field that cannot match the empty string names
+    # no region and the pattern reaches no role. Asked as a pattern match against "" rather than by
+    # stripping metacharacters, because that is the whole question here: "" and "*" match it, while
+    # "us-east-1" and "?" do not. ? is deliberately NOT discounted, unlike the short branch above --
+    # this field is delimited on both sides, so there is no colon for it to match and it must consume
+    # one character of a region that has none.
+    if not iam_pattern_matches(arn_fields[3], ""):
+        return False
+    account_field = arn_fields[4]
+    # An account is twelve digits. Two ways a spelled-out field can fail to name one, and the second
+    # is unreachable in the short branch, where a trailing star always spans the field:
+    #   a literal head that is not digits    role/Prod in arn:aws:iam::role/Prod:...
+    #   a starless field of the wrong width  12345, which is digits but names no account
+    account_head = account_field.split("*", 1)[0].replace("?", "")
+    if account_head and not account_head.isdigit():
+        return False
+    if "*" not in account_field and len(account_field) != 12:
+        return False
+    return all(
+        iam_pattern_matches(arn_fields[5], probe)
+        for probe in EVERY_ROLE_RESOURCE_PROBES
+    )
+
+
+def _allows_any_role(statement: dict) -> bool:
+    """Return True if the statement's resources name every role rather than named roles."""
+    resources = _as_list(statement.get("Resource"))
+    if not resources:
+        # NotResource grants every resource but the excluded ones, so every role outside
+        # that list stays passable.
+        return "NotResource" in statement
+    return any(
+        isinstance(resource, str) and _names_every_role(resource)
+        for resource in resources
+    )
+
+
+def _deny_removes_passrole(statement: dict) -> bool:
+    """Return True if a DENY statement's Action removes iam:PassRole.
+
+    Separate from _covers_passrole on purpose, because the bare-star exclusion that is right on the
+    Allow side inverts on the Deny side. There, skipping ``*`` and ``*:*`` avoids duplicating the
+    administrative-privileges checks; here it meant an unconditional Deny of EVERY action credited
+    nothing, so a policy that grants no PassRole at all was reported FAIL. The Allow-side guard is
+    deliberately left alone: relaxing it would reverse the settled decision that admin-level grants
+    belong to those checks.
+
+    Deny expressed as NotAction is still NOT read. Inverting it needs the whole action namespace,
+    and not crediting it errs toward reporting rather than toward silence.
+    """
+    for action in _as_list(statement.get("Action")):
+        if not isinstance(action, str):
+            continue
+        service, separator, operation = action.strip().partition(":")
+        if separator != ":":
+            # A bare "*" denies every action, iam:PassRole among them.
+            if service == "*":
+                return True
+            continue
+        if not iam_pattern_matches(service, "iam"):
+            continue
+        if iam_pattern_matches(operation, "PassRole"):
+            return True
+    return False
+
+
+def _denies_passrole_everywhere(document: dict) -> bool:
+    """Return True if an unconditional Deny removes iam:PassRole on every resource."""
+    for statement in _statements(document):
+        if statement.get("Effect") != "Deny" or statement.get("Condition"):
+            continue
+        if not _deny_removes_passrole(statement):
+            continue
+        if any(
+            isinstance(resource, str) and resource.strip() == "*"
+            for resource in _as_list(statement.get("Resource"))
+        ):
+            return True
+    return False
+
+
+def _has_unevaluated_notaction(document: dict) -> bool:
+    """True if an Allow statement expresses its actions as NotAction.
+
+    NotAction under Effect Allow grants everything EXCEPT what it lists, so a policy using
+    it can grant iam:PassRole while carrying no Action key at all. Reading only Action would
+    find nothing and report a clean policy. Inverting NotAction correctly means resolving it
+    against the full action namespace and its interaction with Resource and NotResource,
+    which is more than this check can honestly claim to do -- so the statement is declared
+    unevaluated rather than guessed at.
+    """
+    for statement in _statements(document):
+        if statement.get("Effect") == "Allow" and "NotAction" in statement:
+            return True
+    return False
+
+
+class iam_policy_passrole_to_bedrock_agentcore_restricted(Check):
+    """Check whether a customer-managed policy scopes iam:PassRole to Bedrock AgentCore.
+
+    A statement granting ``iam:PassRole`` on every role beside any Bedrock AgentCore action lets the
+    holder hand an arbitrary role to an agent runtime and assume its permissions, which is a
+    privilege-escalation path. FAIL when the PassRole resource names every role; PASS when it names
+    a bounded set, when the statement pins ``iam:PassedToService`` to another service, or when no
+    AgentCore action accompanies it; MANUAL when the policy document could not be read.
+
+    Caveats:
+        Customer-managed policies only, since inline policies are covered by the
+        ``iam_inline_policy_*`` checks and an AWS-managed policy cannot be edited to remediate a
+        finding. A bare ``Action: "*"`` is left to the administrative-privileges checks. Conditions
+        do not rescue an unbounded resource, because ``iam:PassedToService`` binds the service and
+        ``iam:AssociatedResourceArn`` the consuming resource, neither the set of roles.
+    """
+
+    def execute(self) -> Check_Report_AWS:
+        """Flag policies allowing PassRole to AgentCore on all roles."""
+        findings = []
+        for policy in iam_client.policies.values():
+            # Only customer-managed policies: the inline population is a separate check,
+            # and an AWS-managed policy cannot be edited to remediate a finding.
+            if policy.type != "Custom":
+                continue
+            if not policy.attached and not iam_client.provider.scan_unused_services:
+                continue
+
+            report = Check_Report_AWS(metadata=self.metadata(), resource=policy)
+            report.region = iam_client.region
+
+            if not policy.document:
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"Custom Policy {policy.name} could not be evaluated because its "
+                    "policy document was not retrieved."
+                )
+                findings.append(report)
+                continue
+
+            if _has_unevaluated_notaction(policy.document):
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"Custom Policy {policy.name} expresses an Allow statement with "
+                    "NotAction, which this check does not evaluate, so whether it allows "
+                    "iam:PassRole could not be determined; review it manually."
+                )
+                findings.append(report)
+                continue
+
+            unrestricted = False
+            if not _denies_passrole_everywhere(policy.document):
+                unrestricted = any(
+                    statement.get("Effect") == "Allow"
+                    and _covers_passrole(statement)
+                    and _allows_any_role(statement)
+                    and _targets_agentcore(statement, policy.document)
+                    for statement in _statements(policy.document)
+                )
+
+            if unrestricted:
+                report.status = "FAIL"
+                report.status_extended = (
+                    f"Custom Policy {policy.name} allows iam:PassRole to Bedrock AgentCore "
+                    "on every role instead of the specific execution roles AgentCore is "
+                    "meant to run as."
+                )
+            else:
+                report.status = "PASS"
+                report.status_extended = (
+                    f"Custom Policy {policy.name} does not allow iam:PassRole to Bedrock "
+                    "AgentCore on every role."
+                )
+            findings.append(report)
+
+        return findings
diff --git a/prowler/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/__init__.py b/prowler/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account.metadata.json b/prowler/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account.metadata.json
new file mode 100644
index 0000000000..b22d5263e7
--- /dev/null
+++ b/prowler/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account.metadata.json
@@ -0,0 +1,46 @@
+{
+  "Provider": "aws",
+  "CheckID": "iam_role_service_trust_restricts_source_to_account",
+  "CheckTitle": "IAM role trust policy confines AWS service principals to a specific source account",
+  "CheckType": [
+    "Software and Configuration Checks/AWS Security Best Practices",
+    "TTPs/Privilege Escalation"
+  ],
+  "ServiceName": "iam",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "",
+  "Severity": "medium",
+  "ResourceType": "AwsIamRole",
+  "ResourceGroup": "IAM",
+  "Description": "Trust-policy statements letting an **AWS service principal** call `sts:AssumeRole` confine the request source to one account -- via `aws:SourceAccount`, an account-bearing `aws:SourceArn`, or an organization-scoped source. Scope: statements whose condition binds no account, and trust policies that are not a plain service role. Unconditional service roles go to the related check.",
+  "Risk": "A condition can look protective while binding nothing: a `*IfExists` operator is skipped when the calling service omits the key, a negated operator never matches, and an `aws:SourceArn` that is wildcarded or carries no account field (an S3 bucket ARN) names no account. Any account can then steer the service into assuming the role -- a **cross-service confused deputy** path to its permissions.",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://docs.aws.amazon.com/IAM/latest/UserGuide/confused-deputy.html#cross-service-confused-deputy-prevention",
+    "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-sourcearn",
+    "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-sourceaccount",
+    "https://aws.amazon.com/blogs/security/use-scalable-controls-for-aws-services-accessing-your-resources/",
+    "https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_common-scenarios_third-party.html"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "aws iam update-assume-role-policy --role-name <example_resource_name> --policy-document '{\"Version\":\"2012-10-17\",\"Statement\":[{\"Effect\":\"Allow\",\"Principal\":{\"Service\":\"<service>.amazonaws.com\"},\"Action\":\"sts:AssumeRole\",\"Condition\":{\"StringEquals\":{\"aws:SourceAccount\":\"<ACCOUNT_ID>\"}}}]}'",
+      "NativeIaC": "```yaml\n# CloudFormation: confine the service-principal trust to this account\nResources:\n  <example_resource_name>:\n    Type: AWS::IAM::Role\n    Properties:\n      AssumeRolePolicyDocument:\n        Version: '2012-10-17'\n        Statement:\n          - Effect: Allow\n            Principal:\n              Service: <service>.amazonaws.com\n            Action: sts:AssumeRole\n            Condition:\n              StringEquals:\n                aws:SourceAccount: !Ref AWS::AccountId  # binds the call to this account\n              ArnLike:\n                # Optional but preferred: bind to the calling resource as well.\n                # An ARN whose account field is empty (an S3 bucket ARN) or wildcarded\n                # does NOT bind the account -- keep aws:SourceAccount in that case.\n                aws:SourceArn: !Sub 'arn:${AWS::Partition}:<service>:${AWS::Region}:${AWS::AccountId}:<resource-type>/<resource-name>'\n```",
+      "Other": "1. In the AWS console, go to IAM > Roles\n2. Open <example_resource_name> and select the Trust relationships tab\n3. Click Edit trust policy\n4. For every statement whose Principal is a Service, add a Condition block that binds the source to an account, using either:\n   - StringEquals: aws:SourceAccount = <ACCOUNT_ID>, or\n   - ArnLike / ArnEquals: aws:SourceArn = an ARN whose account field is <ACCOUNT_ID>\n5. If the aws:SourceArn value has no account field (for example arn:aws:s3:::amzn-s3-demo-bucket), add aws:SourceAccount as well -- the ARN alone cannot bind the account\n6. Do not rely on a *IfExists operator: it is skipped when the calling service omits the key\n7. Save changes and re-run the check",
+      "Terraform": "```hcl\n# Confine the service-principal trust to this account\nresource \"aws_iam_role\" \"<example_resource_name>\" {\n  name = \"<example_resource_name>\"\n\n  assume_role_policy = jsonencode({\n    Version = \"2012-10-17\"\n    Statement = [\n      {\n        Effect    = \"Allow\"\n        Principal = { Service = \"<service>.amazonaws.com\" }\n        Action    = \"sts:AssumeRole\"\n        Condition = {\n          StringEquals = { \"aws:SourceAccount\" = data.aws_caller_identity.current.account_id }\n          # Optional but preferred: bind to the calling resource as well.\n          ArnLike      = { \"aws:SourceArn\" = aws_<service>_<resource>.example.arn }\n        }\n      }\n    ]\n  })\n}\n```"
+    },
+    "Recommendation": {
+      "Text": "Bind every service-principal trust statement to an account with `aws:SourceAccount`, or with an `aws:SourceArn` whose account field holds the account ID. AWS documents `aws:SourceArn`, `aws:SourceAccount`, `aws:SourceOrgID` and `aws:SourceOrgPaths` as alternatives, so any one of them satisfies this check -- except an ARN with no account field, which needs `aws:SourceAccount` alongside it.",
+      "Url": "https://hub.prowler.com/check/iam_role_service_trust_restricts_source_to_account"
+    }
+  },
+  "Categories": [
+    "identity-access",
+    "trust-boundaries"
+  ],
+  "DependsOn": [],
+  "RelatedTo": [
+    "iam_role_cross_service_confused_deputy_prevention"
+  ],
+  "Notes": "Companion to iam_role_cross_service_confused_deputy_prevention, not a replacement. That check reports a service-principal trust statement carrying no restrictive condition at all, and only on roles it classifies as service roles. This check asserts the clause it leaves open: statements where a condition IS present but confines nothing, and statements no service-role check evaluates. Both can report one role.\n\nA condition confines nothing when it uses a negated operator, an *IfExists or ForAllValues operator with no Null:\"false\" guard on the same key, a wildcarded aws:SourceArn, or an ARN whose account field is empty such as an S3 bucket ARN. A role leaves the other check's population when its trust policy carries a Deny statement, an action outside the assume-role family, or a non-Service principal.\n\nAll four aws:Source* keys count as bindings. sts:ExternalId does not: AWS documents it for third-party access where the third party supplies the value, while a calling service passes source context instead."
+}
diff --git a/prowler/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account.py b/prowler/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account.py
new file mode 100644
index 0000000000..795f39a458
--- /dev/null
+++ b/prowler/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account.py
@@ -0,0 +1,484 @@
+import re
+
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.iam.iam_client import iam_client
+from prowler.providers.aws.services.iam.lib.policy import iam_pattern_matches
+
+ASSUME_ROLE_ACTION = "sts:AssumeRole"
+ACCOUNT_ID_PATTERN = re.compile(r"^\d{12}$")
+ORGANIZATION_ID_PATTERN = re.compile(r"^o-[a-z0-9]{10,32}$")
+ORGANIZATION_PATH_PATTERN = re.compile(r"^o-[a-z0-9]{10,32}/")
+
+
+def _as_list(value) -> list:
+    """Normalize to list: None -> [], scalar -> [val], list -> list.
+
+    The same helper both sibling checks in this PR define. A present-but-null key -- ``"Action":
+    null`` -- makes ``.get("Action", [])`` return None rather than the default, and iterating that
+    raises TypeError out of execute(), discarding every finding for the account rather than one
+    role. IAM will not store such a document, so this is consistency with the siblings and not a
+    security fix.
+    """
+    if value is None:
+        return []
+    return value if isinstance(value, list) else [value]
+
+
+def _grants_assume_role(statement: dict) -> bool:
+    """Return True if the statement's Action covers sts:AssumeRole.
+
+    Exactly that one operation, not the wider assume-role family. ``sts:AssumeRoleWithWebIdentity``
+    and ``sts:AssumeRoleWithSAML`` are how a federated or web identity assumes a role; an AWS service
+    principal uses ``sts:AssumeRole``, so a statement granting only one of the other two is not a
+    service-principal trust grant and is correctly outside this check's population.
+
+    The direction matters and is easy to read backwards: the statement's Action is the PATTERN and
+    ``sts:AssumeRole`` is the value, so ``sts:*`` and ``sts:Assume*`` match while
+    ``sts:AssumeRoleWithSAML`` does not.
+
+    Matched with the shared IAM matcher this PR already ships, rather than a literal tuple plus a
+    trailing-star test. That pair recognised sts:AssumeRole, sts:* and * and any prefix ending in a
+    star, but nothing else IAM honours: sts:*Role, sts:A*Role, sts:Assume?ole and sts:AssumeRol?
+    each grant the action and each produced NO REPORT at all, because a statement that does not
+    grant assume-role drops out of the evaluated population. Beside a second statement the same
+    miss was worse than silence -- the role reported PASS, asserting it confines every AWS service
+    principal in its trust policy to a specific account.
+    """
+    for action in _as_list(statement.get("Action")):
+        if not isinstance(action, str):
+            continue
+        if iam_pattern_matches(action, ASSUME_ROLE_ACTION):
+            return True
+    return False
+
+
+def _trusts_service_principal(statement: dict) -> bool:
+    """Return True if the statement trusts at least one AWS service principal.
+
+    A statement that trusts a service principal *alongside* other principal types
+    still qualifies: the service principal is reachable regardless of what else the
+    statement trusts, so it needs the same confused-deputy scoping.
+    """
+    principal = statement.get("Principal", {})
+    if not isinstance(principal, dict):
+        # Principal: "*" is a string, not a mapping, and trusts every principal there is --
+        # including every service principal. Returning False here dropped the statement from
+        # the population and the role produced no finding at all.
+        return principal == "*"
+    return any(
+        isinstance(service, str) and service
+        for service in _as_list(principal.get("Service"))
+    )
+
+
+# Operators that COMPARE a request value against the statement's own, so a value under one of them
+# genuinely pins the request source. An allow-list, because the deny-list this replaced -- two
+# substring tests for "not" and "ifexists" -- admitted every operator it did not recognise, Null
+# among them. Modelled on _RESTRICTIVE_ATTESTATION_OPERATORS in kms/lib/enclave.py, which solved the
+# same problem for attestation keys; the Arn forms are added here because aws:SourceArn is compared
+# with them. Matched lowercased, which keeps an oddly-cased operator as admissible as it was before.
+# The IfExists suffix is included, and admitted only under the same Null:"false" guard ForAllValues
+# needs. kms/lib/enclave.py calls it "the same trap as ForAllValues without a Null:false guard", so
+# rejecting one outright while rescuing the other was inconsistent on that file's own reading; and
+# secretsmanager_has_restrictive_resource_policy already ships IfExists paired with Null as its
+# accepted restrictive form, so the pairing is a shape prowler recognises rather than a new rule.
+_COMPARING_CONDITION_OPERATORS = frozenset(
+    f"{qualifier}{operator}{suffix}".lower()
+    for qualifier in ("", "ForAnyValue:", "ForAllValues:")
+    for suffix in ("", "IfExists")
+    for operator in (
+        "StringEquals",
+        "StringEqualsIgnoreCase",
+        "StringLike",
+        "ArnEquals",
+        "ArnLike",
+    )
+)
+
+
+def _null_guarded_keys(condition: dict) -> set:
+    """Return the lowercased condition keys a ``Null: "false"`` test forces to be present.
+
+    Both spellings are handled, the scalar and the list, as kms/lib/enclave.py does.
+
+    EVERY value must be ``false``, not merely one of them, because IAM ORs the values inside a single
+    condition operator. ``Null: {key: ["true","false"]}`` means "key absent OR key present", which is
+    always true and binds NOTHING, yet ``any`` credited it and rescued a defeasible pin. This axis is
+    shared with the PassRole sibling and fixed identically there, because a MULTI-element list survives
+    on this surface: ``create_role`` stores ``["true","false"]`` and ``get_role`` returns it as a list.
+    A single-element ``["false"]`` is collapsed to the scalar ``"false"`` here, which is why only the
+    multi-value spelling matters. ``candidates and`` is load-bearing: ``all()`` over an empty list is
+    True, so an empty value list would read as the strongest possible guard.
+
+    TWO AXES, MEASURED SEPARATELY, AND THEY DIVERGE. On VALUE TYPE this stays string-only while the
+    PassRole sibling also reads a JSON boolean, because a trust policy normalizes scalar types and no
+    bool can reach here. On LIST ARITY the two agree, because a multi-element list is preserved on both
+    surfaces. Both halves are stated at both ends rather than left to look like drift, since a helper
+    pair that agrees on one axis and differs on another is exactly what decays when nobody wrote down
+    which axis was which.
+
+    A trust policy NORMALIZES its condition scalars, measured both ways round: ``create_role`` with
+    ``{"Null": {"aws:SourceAccount": false}}`` is ACCEPTED, and the document comes back carrying the
+    string ``"false"`` -- from ``list_roles``, which is the call this check's collector actually
+    makes, and identically from ``get_role``. An unquoted ``123456789012`` comes back quoted too.
+    So no bool or int can reach this helper, and reading one would be dead code with no fixture able
+    to exercise it. A customer-managed POLICY document, which is all the sibling reads,
+    PRESERVES both types instead -- two IAM surfaces, two behaviours, which is exactly why this was
+    measured per surface rather than inferred from one.
+
+    If IAM ever stops normalizing here, take the sibling's reading: ``isinstance(candidate, (str,
+    bool)) and str(candidate).strip().lower() == "false"``. That admits a JSON ``false`` and still
+    excludes ``0``, because ``str(0)`` is ``"0"`` -- the value comparison does that work, not the
+    type test. What it must not become is ``not candidate`` or ``candidate is False``, which read
+    ``0``, ``""``, ``None`` and ``[]`` as guards; ``isinstance(False, int)`` is True in Python and
+    falsiness is not the question. Over-recognising a guard turns a FAIL into a PASS.
+    """
+    guarded = set()
+    for operator, block in condition.items():
+        if not isinstance(operator, str) or operator.lower() != "null":
+            continue
+        if not isinstance(block, dict):
+            continue
+        for key, value in block.items():
+            if not isinstance(key, str):
+                continue
+            candidates = value if isinstance(value, list) else [value]
+            if candidates and all(
+                isinstance(candidate, str) and candidate.strip().lower() == "false"
+                for candidate in candidates
+            ):
+                guarded.add(key.lower())
+    return guarded
+
+
+def _enforced_condition_value_groups(statement: dict, condition_key: str) -> list:
+    """Collect the values a statement pins to condition_key, GROUPED BY OPERATOR.
+
+    One group per operator, because IAM ANDs the operators in a Condition while ORing the values
+    inside one operator. The grouping follows that structure directly:
+
+    - ACROSS groups, a caller asks whether ANY ONE confines the source. If one operator holds the
+      request to literal account IDs, the request is confined whatever else it must also satisfy --
+      an ANDed operator can only narrow. Pooling operators together would let a broad ``StringLike``
+      beside a pinned ``StringEquals`` widen the verdict, which inverts the semantics.
+    - WITHIN a group, EVERY value must qualify, since IAM lets the request match any one of them.
+
+    This is the per-operator evaluation ``kms/lib/enclave.py`` performs.
+
+    Operators are taken from an ALLOW-LIST, not a deny-list, so an operator this code does not
+    recognise is never credited. Two consequences worth naming:
+
+    - Negated operators invert the match and so pin the source to nothing. They are absent from the
+      allow-list by design.
+    - ``Null`` is a presence test rather than a comparison, so it never contributes a value here. Its
+        role is only as the guard below. A deny-list would admit it and feed the literal string
+        ``"false"`` in as though it were an account ID.
+
+    TWO operator families are vacuous on an Allow, and both are credited only under the same guard:
+
+    - ``ForAllValues:*`` "returns true if there are no context keys in the request", which AWS
+      documents with an explicit warning against using it with an Allow effect. This check evaluates
+      Allow statements only, so that is the reachable case.
+    - ``*IfExists`` is not evaluated at all when the request omits the key, which kms/lib/enclave.py
+      names as "the same trap as ForAllValues without a Null:false guard".
+
+    Both are credited only when the same statement carries a ``Null: "false"`` guard on the SAME key,
+    which forces the key to be present and removes the vacuity. The guard defeats it identically for
+    every spelling, so all four of ``ForAllValues:StringEquals``, ``StringEqualsIfExists``,
+    ``ArnLikeIfExists`` and ``ForAllValues:StringLikeIfExists`` are treated alike --
+    ``secretsmanager_has_restrictive_resource_policy`` already ships IfExists paired with Null as its
+    accepted restrictive form. Refusing the guarded spellings outright would also be wrong because
+    ``aws:SourceOrgPaths`` is multivalued, making a set operator the only correct way to write it.
+
+    ``ForAnyValue:*`` needs no guard. AWS documents that for no matching context key, or if the key
+    does not exist, it returns false -- so it fails closed on an Allow.
+    """
+    groups = []
+    condition = statement.get("Condition", {})
+    if not isinstance(condition, dict):
+        return groups
+    null_guarded = _null_guarded_keys(condition)
+    for operator, block in condition.items():
+        if not isinstance(operator, str) or not isinstance(block, dict):
+            continue
+        lowered_operator = operator.lower()
+        if lowered_operator not in _COMPARING_CONDITION_OPERATORS:
+            continue
+        group = []
+        for key, value in block.items():
+            if not isinstance(key, str) or key.lower() != condition_key:
+                continue
+            if (
+                lowered_operator.startswith("forallvalues:")
+                or lowered_operator.endswith("ifexists")
+            ) and key.lower() not in null_guarded:
+                continue
+            group.extend(value if isinstance(value, list) else [value])
+        if group:
+            groups.append(group)
+    return groups
+
+
+def _pins_every_value(statement: dict, condition_key: str, qualifies) -> bool:
+    """Return True if some one operator holds condition_key to values that all qualify."""
+    return any(
+        all(qualifies(value) for value in group)
+        for group in _enforced_condition_value_groups(statement, condition_key)
+    )
+
+
+def _is_account_id(value) -> bool:
+    """Return True if the value is a literal 12-digit account ID."""
+    return isinstance(value, str) and bool(ACCOUNT_ID_PATTERN.match(value))
+
+
+def _pins_source_account(statement: dict) -> bool:
+    """Return True if aws:SourceAccount is pinned to literal account IDs only."""
+    return _pins_every_value(statement, "aws:sourceaccount", _is_account_id)
+
+
+def _arn_carries_account(value) -> bool:
+    """Return True if the ARN's account field is a literal account ID.
+
+    An ARN whose account field is absent (an S3 bucket ARN) or wildcarded does not
+    confine the caller to one account, so aws:SourceAccount is still required.
+    """
+    if not isinstance(value, str):
+        return False
+    arn_fields = value.split(":")
+    return len(arn_fields) >= 5 and _is_account_id(arn_fields[4])
+
+
+def _pins_source_arn_to_account(statement: dict) -> bool:
+    """Return True if some one operator holds every aws:SourceArn value to an account."""
+    return _pins_every_value(statement, "aws:sourcearn", _arn_carries_account)
+
+
+def _pins_source_organization(statement: dict) -> bool:
+    """Return True if the source is pinned to an organization or an OU path.
+
+    AWS documents aws:SourceOrgID and aws:SourceOrgPaths as confused-deputy mitigations
+    in their own right, so an organization-scoped statement is not reported.
+    """
+    return _pins_every_value(
+        statement,
+        "aws:sourceorgid",
+        lambda value: isinstance(value, str)
+        and bool(ORGANIZATION_ID_PATTERN.match(value)),
+    ) or _pins_every_value(
+        statement,
+        "aws:sourceorgpaths",
+        lambda value: isinstance(value, str)
+        and bool(ORGANIZATION_PATH_PATTERN.match(value)),
+    )
+
+
+def _prevents_confused_deputy(statement: dict) -> bool:
+    """Return True if the statement carries a control AWS documents for *cross-service*
+    confused-deputy prevention.
+
+    sts:ExternalId is deliberately absent. AWS documents it only for third-party access --
+    an external ID is a value the third party supplies -- and an AWS service passes source
+    account and source ARN context, never an external ID. Crediting it here would accept a
+    control the calling service can never satisfy.
+    """
+    return (
+        _pins_source_account(statement)
+        or _pins_source_arn_to_account(statement)
+        or _pins_source_organization(statement)
+    )
+
+
+def _has_enforced_condition(statement: dict) -> bool:
+    """Return True if the statement gates access on at least one enforced condition key.
+
+    A statement with no enforced condition at all places no constraint whatsoever on the
+    caller. That wholly-unconditional state is a different (and more severe) posture than
+    a constraint that is present but does not confine the source, and it is what
+    iam_role_cross_service_confused_deputy_prevention reports.
+
+    This filter DELIBERATELY differs from the allow-list _enforced_condition_value_groups applies, and
+    the two must not be unified. This one asks only whether the statement is gated at all, so a
+    ``Null`` presence test counts: it does gate access, even while binding the source to nothing.
+    Pulling such a statement into scope is the safe direction -- it gets evaluated and reported
+    rather than silently skipped. The other function asks what the statement PINS, where a presence
+    test contributes no value and crediting one poisoned the shape test beside it.
+    """
+    condition = statement.get("Condition", {})
+    if not isinstance(condition, dict):
+        return False
+    for operator, block in condition.items():
+        if not isinstance(operator, str) or not isinstance(block, dict):
+            continue
+        lowered_operator = operator.lower()
+        if "not" in lowered_operator or lowered_operator.endswith("ifexists"):
+            continue
+        if any(isinstance(key, str) for key in block):
+            return True
+    return False
+
+
+def _is_plain_service_trust_policy(statements: list) -> bool:
+    """Return True if every statement is an Allow of assume-role to services only.
+
+    This is the trust-policy shape that the existing service-role checks assume. A policy
+    that departs from it -- by carrying a Deny statement, an action outside the
+    assume-role family such as sts:SetContext, or a non-service principal -- falls outside
+    their evaluated population entirely, so its service principals go unassessed.
+    """
+    for statement in statements:
+        if not isinstance(statement, dict):
+            return False
+        if statement.get("Effect") != "Allow" or not _grants_assume_role(statement):
+            return False
+        principal = statement.get("Principal", {})
+        if not isinstance(principal, dict) or set(principal.keys()) != {"Service"}:
+            return False
+    return True
+
+
+class iam_role_service_trust_restricts_source_to_account(Check):
+    """Check whether a role's service-principal trust confines the request to a source account.
+
+    An AWS service principal permitted to assume a role without a source-account or source-ARN
+    binding exposes the role to the confused-deputy problem: another customer's resource can induce
+    the service to assume it. FAIL when a trust statement carries a condition that confines nothing;
+    PASS when every in-scope statement binds a source; MANUAL for a statement using ``NotAction``,
+    which is the one shape here that cannot be evaluated, since inverting it correctly is more than
+    this check can claim. A trust policy is always present on a role, so there is no unreadable-document
+    branch on this surface, unlike the two policy checks beside it.
+
+    Caveats:
+        Companion to ``iam_role_cross_service_confused_deputy_prevention`` rather than a replacement.
+        That check reports statements with no restrictive condition at all, on roles it classifies as
+        service roles; this one asserts the clause it leaves open, so the wholly unconditional
+        statement produces no finding here and the two can both report one role. Bindings are read
+        from Allow statements only, so a trust policy confined solely through a Deny is still
+        reported.
+    """
+
+    def execute(self) -> Check_Report_AWS:
+        """Flag service-principal trust whose present condition binds no account.
+
+        Account bindings are read from Allow statements ONLY. A Deny can also confine the source --
+        `StringNotEquals` on `aws:SourceAccount` denies every account but one -- and this check does
+        not evaluate that, so a trust policy confined solely through a Deny is reported even though
+        it is confined. Rare, and it errs toward reporting rather than toward silence, but it is an
+        unevaluated shape and is declared here rather than left to be inferred, as `NotAction`
+        already is. A Deny still matters for scope: it takes the policy outside the plain-service
+        shape the sibling checks assume, which is what brings the Allow statements beside it into
+        this check's population.
+
+        MANUAL is used deliberately for the NotAction shape, and is not off-contract: 110 upstream
+        checks emit it and `lib/check/models.py` places no restriction on it. THE COST, recorded so it
+        is not rediscovered: `lib/outputs/asff/asff.py` SKIPS MANUAL findings, since MANUAL is not a
+        valid Security Hub compliance state, so a Security Hub consumer sees NOTHING for a trust policy
+        this check could not evaluate, and absence there reads as compliance. CSV and OCSF keep the
+        status. The sibling token-wildcard check carries the same note, for the same reason.
+        """
+        findings = []
+        for role in iam_client.roles:
+            # Service-linked roles are excluded: their trust relationship is managed by
+            # the service and cannot be edited, so a finding would not be actionable.
+            if "aws-service-role" in role.arn:
+                continue
+
+            trust_policy = role.assume_role_policy or {}
+            statements = trust_policy.get("Statement", [])
+            if not isinstance(statements, list):
+                statements = [statements]
+
+            # NotAction under Effect Allow grants everything except what it lists, so a
+            # trust statement using it can permit sts:AssumeRole while carrying no Action
+            # key. _grants_assume_role reads only Action, so such a statement would drop out
+            # of service_statements below and the role would produce no finding at all.
+            # Inverting NotAction correctly is more than this check can claim, so the role
+            # is declared unevaluated rather than silently skipped.
+            if any(
+                isinstance(statement, dict)
+                and statement.get("Effect") == "Allow"
+                and "NotAction" in statement
+                for statement in statements
+            ):
+                report = Check_Report_AWS(metadata=self.metadata(), resource=role)
+                report.region = iam_client.region
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"IAM Role {role.name} has a trust policy statement using NotAction, "
+                    "which this check does not evaluate, so whether a service principal is "
+                    "confined to this account could not be determined; review it manually."
+                )
+                findings.append(report)
+                continue
+
+            service_statements = [
+                statement
+                for statement in statements
+                if isinstance(statement, dict)
+                and statement.get("Effect") == "Allow"
+                and _grants_assume_role(statement)
+                and _trusts_service_principal(statement)
+            ]
+            if not service_statements:
+                continue
+
+            # A wholly unconditional service-principal trust statement on an otherwise
+            # plain service role is the fully-unprotected posture that
+            # iam_role_cross_service_confused_deputy_prevention already reports. This
+            # check asserts the narrower clause it does not: that a constraint which IS
+            # present actually confines the source to an account. Statements are therefore
+            # in scope when they carry an enforced condition, or when the trust policy
+            # departs from the plain-service shape and so is evaluated by no other check.
+            is_plain = _is_plain_service_trust_policy(statements)
+            in_scope = [
+                statement
+                for statement in service_statements
+                if _has_enforced_condition(statement) or not is_plain
+            ]
+            if not in_scope:
+                continue
+
+            unscoped = [
+                statement
+                for statement in in_scope
+                if not _prevents_confused_deputy(statement)
+            ]
+
+            report = Check_Report_AWS(metadata=self.metadata(), resource=role)
+            report.region = iam_client.region
+            if unscoped:
+                # The finding says no condition PINS the key to a literal of the right shape, not
+                # that the statement sets no key. Most inputs reaching here do set one: StringLike
+                # aws:SourceAccount "1234*", an unguarded ForAllValues, and Null "false" all set the
+                # key while pinning nothing. The weaker claim is the one the code supports.
+                report.status = "FAIL"
+                report.status_extended = (
+                    f"IAM Role {role.name} trusts an AWS service principal without confining the "
+                    "request source, since no condition pins aws:SourceAccount to a literal "
+                    "account ID, aws:SourceArn to an ARN carrying one, or aws:SourceOrgID or "
+                    "aws:SourceOrgPaths to an organization."
+                )
+            elif all(
+                _pins_source_account(statement)
+                or _pins_source_arn_to_account(statement)
+                for statement in in_scope
+            ):
+                report.status = "PASS"
+                report.status_extended = (
+                    f"IAM Role {role.name} confines every AWS service principal in its trust "
+                    "policy to a specific account."
+                )
+            else:
+                # The organization route reaches PASS through _pins_source_organization, and an
+                # organization may hold hundreds of accounts. Reporting it with the sentence above
+                # told the operator something categorically stronger than was verified, so the two
+                # postures get separate sentences: a reader needs to know which one they have.
+                report.status = "PASS"
+                report.status_extended = (
+                    f"IAM Role {role.name} confines every AWS service principal in its trust "
+                    "policy, but at least one statement is scoped to an organization rather than "
+                    "to a single account, so the trusted source may be any account within it."
+                )
+            findings.append(report)
+
+        return findings
diff --git a/prowler/providers/aws/services/iam/lib/policy.py b/prowler/providers/aws/services/iam/lib/policy.py
index 333fbad993..f8f9d75de7 100644
--- a/prowler/providers/aws/services/iam/lib/policy.py
+++ b/prowler/providers/aws/services/iam/lib/policy.py
@@ -21,6 +21,62 @@ def _get_patterns_from_standard_value(value):
     return patterns
 
 
+def iam_pattern_matches(pattern: str, value: str) -> bool:
+    """Whether an IAM wildcard pattern from a policy document names a given value.
+
+    IAM honours exactly two metacharacters, ``*`` for any run of characters and ``?`` for exactly
+    one; every other character is literal, ``[seq]`` character classes included. Matching is
+    case-insensitive, as IAM matches action names.
+
+    Args:
+        pattern: A value taken from a policy document -- an Action's service or operation, a
+            Resource ARN field, a condition value. Surrounding whitespace is stripped, which IAM
+            tolerates.
+        value: The concrete string to test the pattern against.
+
+    Returns:
+        True when IAM would consider the pattern to name that value.
+
+    MATCHED WITH A TWO-POINTER SCAN RATHER THAN A TRANSLATED REGEX, and the scan below is the same
+    one as ``_action_matches`` in ``bedrockagentcore_full_access_policy_attached`` -- taken from it
+    rather than written again, so there is one implementation of this under review and not two.
+    Building ``.*`` for every ``*`` and calling ``re``, which is what this file's callers previously
+    did, backtracks catastrophically on input the ACCOUNT controls: against the 17-character
+    ``bedrock-agentcore``, a pattern of N stars, a literal absent from the value, then N more stars
+    took 0.7 ms at N=6, 62 ms at N=10 and 2287 ms at N=14 -- a 31-character policy value, where a
+    managed policy document allows 6144. Cost rises with the number of quantifiers, which is the
+    account's side of the input, so a short value does not bound it. A hang raises nothing, so the
+    bare ``except Exception`` in ``prowler/lib/check/check.py`` cannot catch it and every finding for
+    the account is discarded in silence. This scan is O(len(pattern) x len(value)) with no
+    backtracking path at all: 0.006 ms on that same 31-character pattern, 0.214 ms at 4003.
+    """
+    # Normalised here rather than inside the scan, so the scan stays identical to the one already
+    # under review. IAM tolerates surrounding whitespace and matches case-insensitively, both of
+    # which the regex form this replaced provided through .strip() and re.IGNORECASE.
+    pattern = pattern.strip().lower()
+    action = value.lower()
+
+    p = a = 0
+    star = resume = -1
+    while a < len(action):
+        if p < len(pattern) and pattern[p] in ("?", action[a]):
+            p += 1
+            a += 1
+        elif p < len(pattern) and pattern[p] == "*":
+            star = p
+            resume = a
+            p += 1
+        elif star >= 0:
+            # Backtrack to the most recent star and let it absorb one more character. Only ever
+            # one star is reconsidered, which is what bounds this at a product rather than a power.
+            resume += 1
+            a = resume
+            p = star + 1
+        else:
+            return False
+    return all(char == "*" for char in pattern[p:])
+
+
 def get_effective_actions(policy: dict) -> set[str]:
     """
     Calculates the set of effectively allowed IAM actions from a policy document.
diff --git a/tests/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/iam_policy_no_agentcore_workload_access_token_wildcard_test.py b/tests/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/iam_policy_no_agentcore_workload_access_token_wildcard_test.py
new file mode 100644
index 0000000000..79a677eb0e
--- /dev/null
+++ b/tests/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/iam_policy_no_agentcore_workload_access_token_wildcard_test.py
@@ -0,0 +1,1169 @@
+from unittest import mock
+
+import pytest
+
+from prowler.providers.aws.services.iam.iam_service import Policy
+from tests.providers.aws.utils import AWS_REGION_US_EAST_1, set_mocked_aws_provider
+
+AWS_ACCOUNT_ID = "123456789012"
+DIRECTORY_ARN = f"arn:aws:bedrock-agentcore:us-east-1:{AWS_ACCOUNT_ID}:workload-identity-directory/default"
+WORKLOAD_ARN = f"{DIRECTORY_ARN}/workload-identity/my-agent-abc123"
+TOKEN_VAULT_ARN = f"arn:aws:bedrock-agentcore:us-east-1:{AWS_ACCOUNT_ID}:token-vault/default/oauth2credentialprovider/my-provider"
+
+CHECK_MODULE = "prowler.providers.aws.services.iam.iam_policy_no_agentcore_workload_access_token_wildcard.iam_policy_no_agentcore_workload_access_token_wildcard"
+
+
+def _policy(
+    statements,
+    name: str = "policy",
+    policy_type: str = "Custom",
+    attached: bool = True,
+    document_present: bool = True,
+):
+    """Build a customer-managed Policy, with the document present unless told otherwise.
+
+    `document_present=False` reproduces a policy whose GetPolicyVersion call failed, which the
+    collector leaves as a None document rather than an empty one.
+    """
+    document = None
+    if document_present:
+        document = {"Version": "2012-10-17", "Statement": statements}
+    return Policy(
+        name=name,
+        arn=f"arn:aws:iam::{AWS_ACCOUNT_ID}:policy/{name}",
+        entity="ANPAEXAMPLEPOLICYID",
+        version_id="v1",
+        type=policy_type,
+        attached=attached,
+        document=document,
+    )
+
+
+def _run(policies: list, scan_unused_services: bool = True):
+    """Execute the check against the given policies and return its reports.
+
+    The policies are model objects, so the reports exercise the check's own statement parsing
+    without any IAM API call.
+    """
+    iam_client = mock.MagicMock()
+    iam_client.policies = {policy.arn: policy for policy in policies}
+    iam_client.region = AWS_REGION_US_EAST_1
+    iam_client.provider.scan_unused_services = scan_unused_services
+
+    aws_provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
+
+    with (
+        mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=aws_provider,
+        ),
+        mock.patch(f"{CHECK_MODULE}.iam_client", new=iam_client),
+    ):
+        from prowler.providers.aws.services.iam.iam_policy_no_agentcore_workload_access_token_wildcard.iam_policy_no_agentcore_workload_access_token_wildcard import (
+            iam_policy_no_agentcore_workload_access_token_wildcard,
+        )
+
+        return iam_policy_no_agentcore_workload_access_token_wildcard().execute()
+
+
+class Test_iam_policy_no_agentcore_workload_access_token_wildcard:
+    def test_no_policies(self):
+        """An account with no customer-managed policies produces no reports at all."""
+        assert len(_run([])) == 0
+
+    def test_aws_managed_policy_not_evaluated(self):
+        """An AWS-managed policy is out of the population even when it grants the tokens.
+
+        The fixture is BedrockAgentCoreFullAccess-shaped, so it would FAIL on merit; a zero here
+        therefore measures the type filter and not an absence of violations.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:*",
+                    "Resource": "arn:aws:bedrock-agentcore:*:*:*",
+                }
+            ],
+            policy_type="AWS",
+        )
+        assert len(_run([policy])) == 0
+
+    def test_inline_policy_not_evaluated(self):
+        """An inline policy is out of the population: a separate check owns that surface."""
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": "*",
+                }
+            ],
+            policy_type="Inline",
+        )
+        assert len(_run([policy])) == 0
+
+    def test_unattached_policy_skipped_without_scan_unused_services(self):
+        """An unattached policy is judged only when scan_unused_services is on.
+
+        Both directions are asserted from one fixture, so the flag is shown to be what decides it
+        rather than something about the policy.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": "*",
+                }
+            ],
+            attached=False,
+        )
+        assert len(_run([policy], scan_unused_services=False)) == 0
+        assert _run([policy], scan_unused_services=True)[0].status == "FAIL"
+
+    def test_unreadable_document_is_manual(self):
+        """A policy whose document was never retrieved must be MANUAL, never PASS.
+
+        An unread document is exactly where a token grant would hide, so reporting compliance from
+        it would assert something that was never established.
+        """
+        policy = _policy([], name="unreadable", document_present=False)
+        result = _run([policy])
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert (
+            result[0].status_extended
+            == "Custom Policy unreadable could not be evaluated because its policy document was not retrieved."
+        )
+
+    def test_policy_without_agentcore_actions_passes(self):
+        """A policy naming no AgentCore action at all must PASS, with its identity fields set.
+
+        Also pins resource id, ARN and region, which the rest of the file takes for granted.
+        """
+        policy = _policy(
+            [{"Effect": "Allow", "Action": "s3:GetObject", "Resource": "*"}],
+            name="s3_reader",
+        )
+        result = _run([policy])
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+        assert (
+            result[0].status_extended
+            == "Custom Policy s3_reader does not allow AgentCore workload access token retrieval outside a workload identity ARN."
+        )
+        assert result[0].resource_id == "s3_reader"
+        assert (
+            result[0].resource_arn == f"arn:aws:iam::{AWS_ACCOUNT_ID}:policy/s3_reader"
+        )
+        assert result[0].region == AWS_REGION_US_EAST_1
+
+    def test_scoped_to_workload_identity_arns_passes(self):
+        """Both the directory ARN and a workload-identity child ARN are an accepted scope.
+
+        This is the shape the AgentCore console issues for a gateway's own identity, so a FAIL here
+        would report the product's own default as a misconfiguration.
+        """
+        policy = _policy(
+            [
+                {
+                    "Sid": "GetWorkloadAccessToken",
+                    "Effect": "Allow",
+                    "Action": ["bedrock-agentcore:GetWorkloadAccessToken"],
+                    "Resource": [DIRECTORY_ARN, WORKLOAD_ARN],
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_wildcard_within_directory_namespace_passes(self):
+        """A wildcard confined to the workload-identity namespace is still a scope, so PASS."""
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessTokenForJWT",
+                    "Resource": f"{DIRECTORY_ARN}/workload-identity/my-gateway-*",
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_directory_arn_without_child_passes(self):
+        """The bare workload-identity-directory ARN, naming no child, is an accepted scope."""
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessTokenForUserId",
+                    "Resource": DIRECTORY_ARN,
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_other_agentcore_resource_type_passes(self):
+        """A token action pointed at a token-vault ARN reaches no workload identity, so PASS.
+
+        The token operations accept no token-vault resource, so the grant is inert rather than
+        broad, and reporting it would be a false positive.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": [
+                        "bedrock-agentcore:GetWorkloadAccessToken",
+                        "bedrock-agentcore:GetResourceOauth2Token",
+                    ],
+                    "Resource": [TOKEN_VAULT_ARN],
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_another_service_resource_passes(self):
+        """A token action in a statement whose resources belong to another service must PASS.
+
+        However wide the S3 wildcard is, it names no workload identity, so the token action it sits
+        beside grants nothing this check is about.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": [
+                        "bedrock-agentcore:GetWorkloadAccessToken",
+                        "s3:GetObject",
+                    ],
+                    "Resource": "arn:aws:s3:::*",
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_wildcard_across_the_whole_directory_namespace_passes(self):
+        """A wildcard spanning every workload identity in the directory is still in-namespace, so PASS.
+
+        The ARN type is the granularity this check asserts; narrowing further is a different claim.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessTokenForUserId",
+                    "Resource": f"{DIRECTORY_ARN}/workload-identity/*",
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_one_broad_resource_among_scoped_ones_fails(self):
+        """A single "*" beside correctly scoped ARNs must FAIL: IAM evaluates each Resource on its own."""
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": [WORKLOAD_ARN, "*"],
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_wildcard_resource_fails(self):
+        """A token action on Resource "*" must FAIL, and the report must name the operation.
+
+        The full sentence is asserted, so a reworded finding cannot pass silently.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": ["bedrock-agentcore:GetWorkloadAccessToken"],
+                    "Resource": "*",
+                }
+            ],
+            name="obo_permissions",
+        )
+        result = _run([policy])
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert result[0].status_extended == (
+            "Custom Policy obo_permissions allows bedrock-agentcore:GetWorkloadAccessToken "
+            "on resources outside a workload identity ARN, so its resources do not confine "
+            "token retrieval to the workload's own identity; conditions on the statement are "
+            "not evaluated."
+        )
+
+    def test_condition_narrowed_statement_still_fails_without_claiming_capability(self):
+        """A grant narrowed only by aws:ResourceTag still FAILs, and the text says why it might not.
+
+        `_is_workload_identity_scoped` reads Resource and NotResource and never Condition, the
+        mirror of the Deny-side rule that a conditional Deny is not credited with removing a
+        permission. FAILing is deliberate conservatism -- a tag condition is not the ARN-level
+        scope this check asserts -- but the finding must not then assert that the holder CAN mint
+        tokens for other identities, which this condition may already prevent. So the sentence
+        claims only that the resources do not confine it, and discloses that conditions are unread.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": "*",
+                    "Condition": {
+                        "StringEquals": {
+                            "aws:ResourceTag/owner": "${aws:PrincipalTag/owner}"
+                        }
+                    },
+                }
+            ],
+            name="tag_scoped",
+        )
+        result = _run([policy])
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert (
+            "conditions on the statement are not evaluated" in result[0].status_extended
+        )
+        assert "can mint" not in result[0].status_extended
+
+    def test_service_wildcard_action_fails_on_all_three_operations(self):
+        """bedrock-agentcore:* covers all three token operations, and all three must be named.
+
+        The order is asserted too, since the finding renders them sorted.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:*",
+                    "Resource": "*",
+                }
+            ],
+            name="agentcore_all",
+        )
+        result = _run([policy])
+        assert result[0].status == "FAIL"
+        assert (
+            "bedrock-agentcore:GetWorkloadAccessToken, "
+            "bedrock-agentcore:GetWorkloadAccessTokenForJWT, "
+            "bedrock-agentcore:GetWorkloadAccessTokenForUserId"
+        ) in result[0].status_extended
+
+    def test_operation_prefix_wildcard_fails(self):
+        """A prefix wildcard such as GetWorkload* reaches the token operations, so it must FAIL."""
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkload*",
+                    "Resource": "*",
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_all_wildcard_agentcore_arn_fails(self):
+        """An all-wildcard AgentCore ARN is not a workload-identity scope, so it must FAIL.
+
+        Only the granted operation is named: the finding must not list operations the Action never
+        covered, which is what the negative assertion pins.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessTokenForUserId",
+                    "Resource": "arn:aws:bedrock-agentcore:*:*:*",
+                }
+            ],
+            name="wildcard_arn",
+        )
+        result = _run([policy])
+        assert result[0].status == "FAIL"
+        assert (
+            "bedrock-agentcore:GetWorkloadAccessTokenForUserId"
+            in result[0].status_extended
+        )
+        assert "GetWorkloadAccessTokenForJWT" not in result[0].status_extended
+
+    def test_partial_wildcard_service_field_fails(self):
+        """A PARTIAL wildcard in the ARN's service field still names AgentCore, so it must FAIL.
+
+        `bedrock-*` matches bedrock-agentcore, so with an all-wildcard resource field the grant
+        reaches every workload identity. An exact-membership test on that field recognised `*` but
+        not `bedrock-*`, and reported PASS -- the direction that does not self-correct, since a
+        false PASS is filed as clean and nobody looks again. The service field is now matched as an
+        IAM pattern, the same way the resource field already was.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": f"arn:aws:bedrock-*:us-east-1:{AWS_ACCOUNT_ID}:*",
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_unrelated_service_in_the_arn_still_passes(self):
+        """An ARN for an unrelated service must still be out of reach, so PASS.
+
+        The guard against the fix above over-reaching: `s3` is matched as a pattern too, and must
+        not match bedrock-agentcore. Without this, widening the service-field test could quietly
+        pull every S3 grant into the check.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": f"arn:aws:s3:us-east-1:{AWS_ACCOUNT_ID}:*",
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    @pytest.mark.parametrize(
+        "resource",
+        [
+            f"*:aws:bedrock-agentcore:us-east-1:{AWS_ACCOUNT_ID}:*",
+            "*:*:*:*:*:*",
+            "arn:aws:bedrock-agentcore:*",
+            "arn:aws:*",
+            "arn:*",
+        ],
+    )
+    def test_a_star_spanning_arn_fields_still_reaches_every_workload_identity(
+        self, resource
+    ):
+        """A star anywhere in the ARN that can span fields must FAIL.
+
+        Every one of these PASSed. Two separate causes, both of which made a BROADER pattern
+        score better than the correctly spelled six-field equivalent that already FAILed:
+        comparing the first field to the literal "arn" rejected the two that wildcard it, and a
+        fewer-than-six-fields test rejected the three that are short because a star absorbs the
+        rest. IAM wildcards match the colon, so none of these is narrower than `arn:aws:...:*`.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": resource,
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    @pytest.mark.parametrize(
+        "resource",
+        [
+            "arn:aws:bedrock-agentcore:us-west-2:*",
+            "arn:aws:bedrock-agentcore:eu-central-1:*",
+            "arn:aws-cn:bedrock-agentcore:*",
+            f"arn:aws:bedrock-agentcore:us-east-1:{AWS_ACCOUNT_ID}*",
+            "arn:aws:bedrock-agentcore:us-east-1:555555555555*",
+        ],
+    )
+    def test_a_truncated_arn_reaches_workload_identities_in_any_region_or_account(
+        self, resource
+    ):
+        """A short starred ARN must FAIL whatever region, account or partition it names.
+
+        The previous fix matched short ARNs against ONE concrete probe pinned to us-east-1 and
+        123456789012, which made those two values load-bearing: `us-west-2:*` PASSed while the
+        byte-identical `us-east-1:*` FAILed, so the check cleared the common spelling and reported
+        only the one nobody writes. AgentCore is generally available outside us-east-1 and that
+        account is a documentation placeholder.
+
+        An account PREFIX is the case that shows no probe corpus could have fixed it -- there is
+        nothing to enumerate -- so the short form is now decided structurally: a star in the last
+        spelled-out field spans every field after it, because IAM wildcards match the colon.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": resource,
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    @pytest.mark.parametrize(
+        "resource",
+        [
+            f"arn:aws:bedrock-agentcore:us-east-1:{AWS_ACCOUNT_ID}:workload-identity-*",
+            "arn:aws:bedrock-agentcore:*:*:workload-identity-directory*",
+        ],
+    )
+    def test_a_resource_confined_to_the_workload_identity_namespace_passes(
+        self, resource
+    ):
+        """A resource confined to the workload-identity namespace PASSes however it is spelled.
+
+        These two were ordered backwards: `workload-identity-*` FAILed while the strictly BROADER
+        `workload-identity-directory*` -- whose reach is a superset of it, across every account and
+        partition -- PASSed. The cause was a startswith test on the literal namespace prefix, which
+        asks whether the field BEGINS with it rather than whether it can reach outside it. Confinement
+        is now decided by whether the field can name a resource of another AgentCore type.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": resource,
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    @pytest.mark.parametrize(
+        "resource_field",
+        ["*prod-*", "*/customer-support-agent*", "*chatbot", "*-agent*"],
+    )
+    def test_a_name_keyed_wildcard_escapes_the_namespace_and_fails(
+        self, resource_field
+    ):
+        """A resource field wildcarded on a NAME reaches other AgentCore types, so it must FAIL.
+
+        `*prod-*` matches workload-identity-directory/default/workload-identity/prod-chatbot AND
+        .../prod-agent -- two distinct identities -- and also runtime/prod-chatbot,
+        gateway/prod-chatbot-gw, memory/prod-chatbot-mem, a token vault and a custom browser. It
+        PASSed, because confinement was decided by matching four concrete probe resources whose
+        example NAMES were load-bearing: token-vault/default, gateway/my-gateway, runtime/my-runtime
+        and one workload identity called another-workload. A field keyed on any other name matched
+        none of them, so the check read it as confined to the namespace and cleared it.
+
+        The decisive pair is `*` versus `*prod-*`: the first FAILed and the second PASSed, and nothing
+        stated in the check separated them. Both reach a workload identity and both escape the
+        namespace, so both must FAIL. These names are not invented -- the AgentCore devguide's own
+        examples are prod-chatbot, dev-chatbot and customer-support-agent, identities it creates
+        automatically named after the runtime or gateway that made them, and its own example policy
+        wildcards on the name.
+
+        Confinement is now decided against the enumerable list of AgentCore resource-path SEGMENTS
+        from AWS's service reference, because types can be enumerated and names cannot.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": [
+                        "bedrock-agentcore:GetWorkloadAccessToken",
+                        "bedrock-agentcore:GetWorkloadAccessTokenForJWT",
+                        "bedrock-agentcore:GetWorkloadAccessTokenForUserId",
+                    ],
+                    "Resource": (
+                        f"arn:aws:bedrock-agentcore:us-east-1:{AWS_ACCOUNT_ID}:{resource_field}"
+                    ),
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    @pytest.mark.parametrize(
+        "resource_field",
+        [
+            "?orkload-identity-directory/*",
+            "?orkload-identity-directory/default/workload-identity/*",
+            "??orkload-identity-directory/*",
+            "?untime/*",
+            "?",
+        ],
+    )
+    def test_a_question_mark_consumes_one_character_not_a_span(self, resource_field):
+        """`?` matches EXACTLY ONE character, so a field leading with it is not a field leading with `*`.
+
+        These PASS because none of them can name a resource of another AgentCore type: `?orkload-...`
+        matches only strings whose first character is arbitrary and whose remainder is the literal
+        namespace path, and no other resource type ends up under that shape. `?untime/*` matches nothing
+        at all, since no AgentCore segment is `?untime`.
+
+        This is a regression I shipped and these fixtures are what would have caught it. The reach test
+        cut the field's head at the first `*` OR `?`, treating them alike, so a leading `?` emptied the
+        head; an empty head is compatible with every segment, so the field was read as reaching all 22
+        of them and then as escaping the namespace. An exact oracle over 1345 fields found 265 false
+        FAILs, every one `?`-leading, and replacing the first character of the nine pinned-PASS fields
+        with `?` flipped nine of nine.
+
+        Bare `?` IS here, and getting it here took two corrections. It was first reported as a defect,
+        then dropped because `accessanalyzer validate-policy` returns ERROR INVALID_ARN_RESOURCE for it,
+        then reinstated because `create-policy` ACCEPTS and stores it. That is the third time in this
+        campaign that validate-policy has contradicted create-policy, every time in the direction that
+        would have discarded a real input, so create-policy is the oracle of record.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": [
+                        "bedrock-agentcore:GetWorkloadAccessToken",
+                        "bedrock-agentcore:GetWorkloadAccessTokenForJWT",
+                        "bedrock-agentcore:GetWorkloadAccessTokenForUserId",
+                    ],
+                    "Resource": (
+                        f"arn:aws:bedrock-agentcore:us-east-1:{AWS_ACCOUNT_ID}:{resource_field}"
+                    ),
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    @pytest.mark.parametrize("resource_field", ["?*", "??*"])
+    def test_a_question_mark_followed_by_a_star_still_reaches_everything(
+        self, resource_field
+    ):
+        """The FAIL direction for `?`, which no other fixture here pins.
+
+        `?*` matches any string of length one or more, so it reaches every AgentCore resource type AND
+        every workload identity: it must FAIL. The four `?` cases above are all PASS cases, so nothing
+        pinned the direction where `?` MATCHING a character is what establishes reach. Stopping `?`
+        from matching anything would leave the whole suite green, because every `?` fixture reaches its
+        PASS verdict by a different route -- "confined" instead of "reaches nothing" -- and both routes
+        end in PASS. One-directional fixtures cannot separate those.
+
+        Both spellings are storable: create-policy accepts `?*` and `??*` as resource fields.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": [
+                        "bedrock-agentcore:GetWorkloadAccessToken",
+                        "bedrock-agentcore:GetWorkloadAccessTokenForJWT",
+                        "bedrock-agentcore:GetWorkloadAccessTokenForUserId",
+                    ],
+                    "Resource": (
+                        f"arn:aws:bedrock-agentcore:us-east-1:{AWS_ACCOUNT_ID}:{resource_field}"
+                    ),
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    @pytest.mark.parametrize(
+        "resource_field",
+        [
+            "runtime/prod-*",
+            "memory/prod-chatbot*",
+            "gateway/*-agent",
+            "tool/web-search",
+        ],
+    )
+    def test_a_name_keyed_wildcard_on_another_type_still_passes(self, resource_field):
+        """The control in the other direction: name-keyed is not by itself a finding.
+
+        Each of these is wildcarded on a name in exactly the way the cases above are, and each reaches
+        NO workload identity, so each must still PASS -- the token actions accept no runtime, memory,
+        gateway or tool resource. Without these, making every name-keyed field FAIL would satisfy the
+        tests above while being just as wrong in the opposite direction, and the suite could not tell
+        the fix from that over-correction.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": [
+                        "bedrock-agentcore:GetWorkloadAccessToken",
+                        "bedrock-agentcore:GetWorkloadAccessTokenForJWT",
+                        "bedrock-agentcore:GetWorkloadAccessTokenForUserId",
+                    ],
+                    "Resource": (
+                        f"arn:aws:bedrock-agentcore:us-east-1:{AWS_ACCOUNT_ID}:{resource_field}"
+                    ),
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    @pytest.mark.parametrize(
+        "resource",
+        [
+            "arn:aws:bedrock-agentcore",
+            "arn:aws:bedrock-agentcore:us-east-1",
+            "arn:aws:s3:*",
+            f"arn:aws:bedrock-agentcore:us-east-1:{AWS_ACCOUNT_ID}:token-vault/default",
+        ],
+    )
+    def test_a_truncated_arn_carrying_no_star_reaches_nothing(self, resource):
+        """A short ARN that reaches nothing must still PASS.
+
+        The guard on the two fixes above. The first two carry no star, so they match no ARN at all
+        and what separates them from `arn:aws:bedrock-agentcore:*` is the star, not the length.
+        `arn:aws:s3:*` is short AND starred, so it guards the other direction: the fields a short
+        pattern DOES spell out still have to be able to name an AgentCore ARN. The token-vault
+        resource reaches a type these actions cannot name.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": resource,
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_partial_wildcard_service_in_the_action_fails(self):
+        """A PARTIAL wildcard in the ACTION's service field still names AgentCore, so it must FAIL.
+
+        `bedrock-*:GetWorkloadAccessToken` reaches the operation, and a literal comparison on that
+        field read it as granting nothing at all -- so the statement was invisible to the check
+        whatever its Resource said. This is the same defect as the one in the resource ARN's service
+        field, one function above it, and independent of it.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-*:GetWorkloadAccessToken",
+                    "Resource": "*",
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_wildcard_service_in_the_action_fails(self):
+        """`*:GetWorkloadAccessToken` names every service, AgentCore among them, so it must FAIL."""
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "*:GetWorkloadAccessToken",
+                    "Resource": "*",
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_unrelated_service_in_the_action_still_passes(self):
+        """An action for an unrelated service must stay out of reach, so PASS.
+
+        The guard against the two fixes above over-reaching: `s3` is matched as a pattern too and
+        must not match bedrock-agentcore. Without this, widening the service-field test could
+        quietly pull every S3 grant into the check.
+        """
+        policy = _policy(
+            [{"Effect": "Allow", "Action": "s3:GetObject", "Resource": "*"}]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_wildcard_dense_action_reaches_a_verdict(self):
+        """A wildcard-dense service field must reach a verdict rather than stall the scan.
+
+        End-to-end with an adversarial Action, on the ACTION service field specifically, because
+        that surface exists only because of the pattern-matching fix: converting an O(1) string
+        comparison into a match is what made it reachable. The dense field does not name
+        bedrock-agentcore, so the statement grants nothing and the policy PASSes -- the point is that
+        a verdict arrives at all. Timing is asserted in `Test_iam_pattern_matches` instead, where the
+        matcher can be measured without several seconds of service construction around it.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": f"{'*' * 14}zzz{'*' * 14}:GetWorkloadAccessToken",
+                    "Resource": "*",
+                }
+            ]
+        )
+        result = _run([policy])
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+
+    def test_bare_action_wildcard_is_left_to_admin_checks(self):
+        """A bare Action "*" is left to the administrative-privileges checks, so PASS here.
+
+        Reporting it would duplicate check_admin_access rather than add a claim, and duplicate
+        findings on one policy are what make a report harder to act on.
+        """
+        policy = _policy([{"Effect": "Allow", "Action": "*", "Resource": "*"}])
+        assert _run([policy])[0].status == "PASS"
+
+    def test_not_resource_fails(self):
+        """A statement using NotResource names no resource, so it is not scoped and must FAIL."""
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "NotResource": TOKEN_VAULT_ARN,
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_scoped_statement_does_not_rescue_a_broad_one(self):
+        """A correctly scoped statement does not rescue a broad one in the same policy.
+
+        Measured on a live gateway role. Statements are evaluated independently, so the scoped one
+        cannot narrow the Resource "*" one sitting beside it.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": [
+                        "bedrock-agentcore:GetWorkloadAccessToken",
+                        "bedrock-agentcore:GetWorkloadAccessTokenForJWT",
+                        "bedrock-agentcore:GetWorkloadAccessTokenForUserId",
+                    ],
+                    "Resource": [DIRECTORY_ARN, WORKLOAD_ARN],
+                },
+                {
+                    "Effect": "Allow",
+                    "Action": [
+                        "bedrock-agentcore:GetPolicy",
+                        "bedrock-agentcore:GetWorkloadAccessToken",
+                    ],
+                    "Resource": "*",
+                },
+            ]
+        )
+        result = _run([policy])
+        assert result[0].status == "FAIL"
+        assert (
+            "allows bedrock-agentcore:GetWorkloadAccessToken on resources"
+            in result[0].status_extended
+        )
+
+    def test_unconditional_deny_on_all_resources_clears_the_finding(self):
+        """An unconditional Deny of the same action on "*" removes the permission, so PASS."""
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": "*",
+                },
+                {
+                    "Effect": "Deny",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": "*",
+                },
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_bare_action_wildcard_pair_is_left_to_admin_checks(self):
+        """`Action: "*:*"` must PASS: it is check_admin_access's finding, not this one.
+
+        The only bare-wildcard fixture was `"*"`, which the `separator != ":"` clause alone
+        satisfies, so the `service == "*" and operation == "*"` clause was load-bearing with zero
+        coverage -- deleting it left all tests green while flipping this policy to FAIL, emitting
+        exactly the duplicate finding the docstring says must not be emitted.
+        """
+        policy = _policy([{"Effect": "Allow", "Action": "*:*", "Resource": "*"}])
+        assert _run([policy])[0].status == "PASS"
+
+    def test_a_single_field_pattern_is_not_an_arn(self):
+        """A one-field pattern with a star reaches no workload identity, so PASS.
+
+        `myprefix*` matches no ARN at all -- an ARN starts with the literal "arn" -- but it is short
+        and starred, so it takes the short branch. That branch's first-field guard is what rejects
+        it; deleting the guard left 55 tests green while flipping this to FAIL. The six-field
+        branch's equivalent guard was already covered, so only the short one was unprotected.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": "myprefix*",
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    @pytest.mark.parametrize("deny_action", ["*", "*:*"])
+    def test_a_deny_of_every_action_clears_the_finding(self, deny_action):
+        """A Deny of EVERY action on "*" removes these operations, so the policy must PASS.
+
+        Both spellings reported FAIL at high severity on a policy that grants nothing -- prowler's
+        own effective-action resolver agrees the operation is not granted. The cause is that the
+        Deny side reused the Allow side's reader, which deliberately skips a bare "*" and "*:*" so
+        this check does not duplicate the administrative-privileges checks. On the Deny side that
+        exclusion inverts: skipping the broadest possible Deny credits nothing.
+
+        It also contradicted this check's own published Notes, which say an unconditional Deny of
+        the operation on Resource "*" clears the finding. The Allow-side guard is untouched.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessTokenForUserId",
+                    "Resource": "*",
+                },
+                {"Effect": "Deny", "Action": deny_action, "Resource": "*"},
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_a_deny_of_every_action_in_another_service_does_not_clear_the_finding(self):
+        """The guard on the fix above: a Deny of every action in a DIFFERENT service clears nothing.
+
+        `s3:*` removes no AgentCore operation, so widening the Deny-side reader to credit any
+        wildcard would have cleared this policy too. It must still FAIL.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessTokenForUserId",
+                    "Resource": "*",
+                },
+                {"Effect": "Deny", "Action": "s3:*", "Resource": "*"},
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_deny_listing_the_wildcard_among_other_resources_clears_the_finding(self):
+        """A Deny whose Resource list contains "*" denies everything in it.
+
+        The collector tests the list with any(), not all(): one "*" entry is sufficient,
+        because IAM evaluates each Resource independently. Under all() this policy would
+        stop clearing the finding and report a false FAIL. Every other Deny fixture here
+        uses a single Resource value, so nothing else distinguishes the two.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": "*",
+                },
+                {
+                    "Effect": "Deny",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": ["*", DIRECTORY_ARN],
+                },
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_conditional_deny_does_not_clear_the_finding(self):
+        """A CONDITIONAL Deny must not clear the finding: it only bites when the condition holds.
+
+        The Allow still stands for every request outside the condition, so the capability remains.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": "*",
+                },
+                {
+                    "Effect": "Deny",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": "*",
+                    "Condition": {"StringEquals": {"aws:PrincipalTag/team": "agents"}},
+                },
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_deny_scoped_to_one_directory_does_not_clear_the_finding(self):
+        """A Deny naming one directory does not answer an Allow that reaches every other one.
+
+        This is AWS's own recommended Deny shape, so treating it as sufficient would clear a
+        finding on a policy that is still broad.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessTokenForUserId",
+                    "Resource": "*",
+                },
+                {
+                    "Sid": "DenyForUserIdAccess",
+                    "Effect": "Deny",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessTokenForUserId",
+                    "Resource": DIRECTORY_ARN,
+                },
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_deny_of_a_different_operation_does_not_clear_the_finding(self):
+        """A Deny removes only the operation it names; the rest of the wildcard Allow still FAILs.
+
+        Asserted in both directions: the denied operation must be absent from the finding and the
+        still-granted one present, so a Deny applied too widely or too narrowly both fail.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkload*",
+                    "Resource": "*",
+                },
+                {
+                    "Effect": "Deny",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessTokenForUserId",
+                    "Resource": "*",
+                },
+            ]
+        )
+        result = _run([policy])
+        assert result[0].status == "FAIL"
+        assert "ForUserId" not in result[0].status_extended
+        assert "GetWorkloadAccessTokenForJWT" in result[0].status_extended
+
+    def test_deny_only_policy_passes(self):
+        """A policy containing only a Deny grants nothing, so it must PASS."""
+        policy = _policy(
+            [
+                {
+                    "Effect": "Deny",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": "*",
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_conditional_deny_only_policy_passes(self):
+        """A conditional Deny alone still grants nothing, so it must PASS.
+
+        Reading Effect is what stops the statement being treated as though it allowed the action.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Deny",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessTokenForUserId",
+                    "Resource": "*",
+                    "Condition": {"StringEquals": {"aws:PrincipalTag/team": "agents"}},
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_single_statement_dict_is_evaluated(self):
+        """A Statement given as a single dict rather than a list is still evaluated.
+
+        IAM accepts both shapes, so a check reading only lists would silently skip the policy.
+        """
+        policy = _policy(None)
+        policy.document = {
+            "Version": "2012-10-17",
+            "Statement": {
+                "Effect": "Allow",
+                "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                "Resource": "*",
+            },
+        }
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_malformed_statements_do_not_raise(self):
+        """Malformed statements must not raise, and must not mask the real grant beside them.
+
+        A bare string, non-string actions, and an action with no colon all coexist with one genuine
+        wildcard grant, so the FAIL proves the parser survived rather than short-circuited.
+        """
+        policy = _policy(
+            [
+                "not-a-statement",
+                {"Effect": "Allow", "Action": [None, 7], "Resource": [None]},
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore",
+                    "Resource": "*",
+                },
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                    "Resource": "*",
+                },
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_action_of_another_service_matching_the_name_passes(self):
+        """bedrock:GetWorkloadAccessToken is a different service, so it must PASS.
+
+        Only the bedrock-agentcore prefix is read; matching on the operation name alone would
+        report a policy for a service that has no such action.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": "bedrock:GetWorkloadAccessToken",
+                    "Resource": "*",
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_every_policy_gets_one_finding(self):
+        """Three policies get one report each, judged on their own document.
+
+        FAIL, PASS and MANUAL from one run, so a check reporting only the first policy or carrying
+        a verdict between them would not produce this mapping.
+        """
+        policies = [
+            _policy(
+                [
+                    {
+                        "Effect": "Allow",
+                        "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                        "Resource": "*",
+                    }
+                ],
+                name="broad",
+            ),
+            _policy(
+                [
+                    {
+                        "Effect": "Allow",
+                        "Action": "bedrock-agentcore:GetWorkloadAccessToken",
+                        "Resource": WORKLOAD_ARN,
+                    }
+                ],
+                name="scoped",
+            ),
+            _policy([], name="unreadable", document_present=False),
+        ]
+        result = _run(policies)
+        assert {report.resource_id: report.status for report in result} == {
+            "broad": "FAIL",
+            "scoped": "PASS",
+            "unreadable": "MANUAL",
+        }
+
+
+class Test_iam_policy_no_agentcore_workload_access_token_wildcard_notaction:
+    """NotAction under Effect Allow is IAM-valid and grants everything it does not list."""
+
+    def test_notaction_allow_statement_is_manual(self):
+        """The check reads only Action, so a NotAction statement looked like no grant at all.
+
+        `{"Effect": "Allow", "NotAction": ["s3:*"], "Resource": "*"}` grants every action
+        except S3 -- including the ones this check exists to find -- while carrying no Action
+        key. IAM Access Analyzer ValidatePolicy accepts the shape, so it is reachable in a
+        stored policy. Inverting NotAction correctly means resolving it against the whole
+        action namespace and its interaction with Resource and NotResource, which is more
+        than this check can claim, so it reports the policy as unevaluated instead.
+        """
+        policy = _policy(
+            [{"Effect": "Allow", "NotAction": ["s3:*"], "Resource": "*"}],
+            name="notaction-policy",
+        )
+        result = _run([policy])
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert "NotAction" in result[0].status_extended
diff --git a/tests/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/iam_policy_passrole_to_bedrock_agentcore_restricted_test.py b/tests/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/iam_policy_passrole_to_bedrock_agentcore_restricted_test.py
new file mode 100644
index 0000000000..04962eade6
--- /dev/null
+++ b/tests/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/iam_policy_passrole_to_bedrock_agentcore_restricted_test.py
@@ -0,0 +1,1369 @@
+from unittest import mock
+
+import pytest
+
+from prowler.providers.aws.services.iam.iam_service import Policy
+from prowler.providers.aws.services.iam.lib.policy import iam_pattern_matches
+from tests.providers.aws.utils import AWS_REGION_US_EAST_1, set_mocked_aws_provider
+
+AWS_ACCOUNT_ID = "123456789012"
+# Role ARNs IAM actually returns, used to ask whether a REPORTED resource names any role at all.
+# Concrete ARNs rather than a list of shapes that cannot name a role: the impossible shapes cannot
+# be enumerated -- botocore models no ARN format for any service, so there is nothing to derive
+# them from -- while these are simply true. Empty region, twelve-digit account, a bare name, a
+# path, a service-linked path, the 64-character maximum, and the two non-commercial partitions.
+REAL_ROLE_ARNS = (
+    f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/a",
+    f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/AgentCoreRuntimeRole",
+    f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/service-role/AgentCoreRuntimeRole",
+    f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig",
+    f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/" + "r0le-name-" * 6 + "abcd",
+    "arn:aws:iam::999999999999:role/Prod",
+    f"arn:aws-us-gov:iam::{AWS_ACCOUNT_ID}:role/GovRole",
+    f"arn:aws-cn:iam::{AWS_ACCOUNT_ID}:role/CnRole",
+)
+AGENTCORE_PRINCIPAL = "bedrock-agentcore.amazonaws.com"
+EVALUATION_ROLE_PREFIX_ARN = "arn:aws:iam::*:role/AgentCoreEvaluationRole*"
+ANY_ROLE_IN_ACCOUNT_ARN = f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/*"
+AGENTCORE_ACTION_STATEMENT = {
+    "Effect": "Allow",
+    "Action": ["bedrock-agentcore:CreateAgentRuntime"],
+    "Resource": "*",
+}
+
+CHECK_MODULE = "prowler.providers.aws.services.iam.iam_policy_passrole_to_bedrock_agentcore_restricted.iam_policy_passrole_to_bedrock_agentcore_restricted"
+
+
+def _policy(
+    statements,
+    name: str = "policy",
+    policy_type: str = "Custom",
+    attached: bool = True,
+    document_present: bool = True,
+):
+    """Build a customer-managed Policy, with the document present unless told otherwise.
+
+    `document_present=False` reproduces a policy whose GetPolicyVersion call failed, which the
+    collector leaves as a None document rather than an empty one.
+    """
+    document = None
+    if document_present:
+        document = {"Version": "2012-10-17", "Statement": statements}
+    return Policy(
+        name=name,
+        arn=f"arn:aws:iam::{AWS_ACCOUNT_ID}:policy/{name}",
+        entity="ANPAEXAMPLEPOLICYID",
+        version_id="v1",
+        type=policy_type,
+        attached=attached,
+        document=document,
+    )
+
+
+def _passrole(resource, condition: dict = None, action="iam:PassRole") -> dict:
+    """Build an Allow statement for iam:PassRole, omitting Resource when it is None.
+
+    Omitting Resource entirely is the shape a NotResource statement takes, so `None` is how a
+    test reaches that branch rather than a missing argument.
+    """
+    statement = {"Effect": "Allow", "Action": action}
+    if resource is not None:
+        statement["Resource"] = resource
+    if condition is not None:
+        statement["Condition"] = condition
+    return statement
+
+
+def _reach_grid() -> list:
+    """Every combination of the two ARN positions whose reach the check has to decide.
+
+    Generated rather than listed so the cases are not the ones somebody thought to write down.
+    The region and account fields are the two an IAM role ARN constrains -- region always empty,
+    account always twelve digits -- so varying only those two, against a resource field that is
+    unambiguously unbounded, isolates the question the invariant below asks.
+    """
+    regions = ("", "*", "?", "us-east-1")
+    accounts = ("", "*", AWS_ACCOUNT_ID, "12345", "????????????", "1234567890*")
+    return [
+        f"arn:aws:iam:{region}:{account}:role/*"
+        for region in regions
+        for account in accounts
+    ]
+
+
+def _passed_to(service) -> dict:
+    """Build a StringEquals condition pinning iam:PassedToService to the given service."""
+    return {"StringEquals": {"iam:PassedToService": service}}
+
+
+def _run(policies: list, scan_unused_services: bool = True):
+    """Execute the check against the given policies and return its reports.
+
+    The policies are model objects, so the reports exercise the check's own statement parsing
+    without any IAM API call.
+    """
+    iam_client = mock.MagicMock()
+    iam_client.policies = {policy.arn: policy for policy in policies}
+    iam_client.region = AWS_REGION_US_EAST_1
+    iam_client.provider.scan_unused_services = scan_unused_services
+
+    aws_provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
+
+    with (
+        mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=aws_provider,
+        ),
+        mock.patch(f"{CHECK_MODULE}.iam_client", new=iam_client),
+    ):
+        from prowler.providers.aws.services.iam.iam_policy_passrole_to_bedrock_agentcore_restricted.iam_policy_passrole_to_bedrock_agentcore_restricted import (
+            iam_policy_passrole_to_bedrock_agentcore_restricted,
+        )
+
+        return iam_policy_passrole_to_bedrock_agentcore_restricted().execute()
+
+
+class Test_iam_policy_passrole_to_bedrock_agentcore_restricted:
+    def test_no_policies(self):
+        """An account with no customer-managed policies produces no reports at all."""
+        assert len(_run([])) == 0
+
+    def test_aws_managed_policy_not_evaluated(self):
+        """An AWS-managed policy is out of the population even when it would FAIL on merit.
+
+        The fixture is the failing shape, so a zero measures the type filter rather than an
+        absence of violations.
+        """
+        policy = _policy(
+            [_passrole("*", _passed_to(AGENTCORE_PRINCIPAL))], policy_type="AWS"
+        )
+        assert len(_run([policy])) == 0
+
+    def test_inline_policy_not_evaluated(self):
+        """An inline policy is out of the population: a separate check owns that surface."""
+        policy = _policy(
+            [_passrole("*", _passed_to(AGENTCORE_PRINCIPAL))], policy_type="Inline"
+        )
+        assert len(_run([policy])) == 0
+
+    def test_unattached_policy_skipped_without_scan_unused_services(self):
+        """An unattached policy is judged only when scan_unused_services is on.
+
+        Both directions are asserted from one fixture, so the flag is shown to be what decides it.
+        """
+        policy = _policy(
+            [_passrole("*", _passed_to(AGENTCORE_PRINCIPAL))], attached=False
+        )
+        assert len(_run([policy], scan_unused_services=False)) == 0
+        assert _run([policy], scan_unused_services=True)[0].status == "FAIL"
+
+    def test_unreadable_document_is_manual(self):
+        """A policy whose document was never retrieved must be MANUAL, never PASS.
+
+        An unread document is where an unbounded PassRole grant would hide, so claiming compliance
+        from it would assert something never established.
+        """
+        policy = _policy([], name="unreadable", document_present=False)
+        result = _run([policy])
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert (
+            result[0].status_extended
+            == "Custom Policy unreadable could not be evaluated because its policy document was not retrieved."
+        )
+
+    def test_aws_reference_evaluations_policy_passes(self):
+        """AWS's own least-privilege example must PASS, and the report's identity fields are pinned.
+
+        Taken verbatim from the AgentCore Evaluations prerequisites page: PassRole confined to a
+        role-name prefix and to the AgentCore principal. A FAIL here would report AWS's documented
+        guidance as a misconfiguration, which is the strongest possible false positive.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Allow",
+                    "Action": [
+                        "bedrock-agentcore:CreateEvaluator",
+                        "bedrock-agentcore:CreateOnlineEvaluationConfig",
+                        "bedrock-agentcore:Evaluate",
+                    ],
+                    "Resource": "*",
+                },
+                {
+                    "Effect": "Allow",
+                    "Action": ["iam:PassRole"],
+                    "Resource": EVALUATION_ROLE_PREFIX_ARN,
+                    "Condition": {
+                        "StringEquals": {"iam:PassedToService": AGENTCORE_PRINCIPAL}
+                    },
+                },
+            ],
+            name="AgentCoreEvaluationsLeastPrivilege",
+        )
+        result = _run([policy])
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+        assert result[0].status_extended == (
+            "Custom Policy AgentCoreEvaluationsLeastPrivilege does not allow iam:PassRole "
+            "to Bedrock AgentCore on every role."
+        )
+        assert result[0].resource_id == "AgentCoreEvaluationsLeastPrivilege"
+        assert (
+            result[0].resource_arn
+            == f"arn:aws:iam::{AWS_ACCOUNT_ID}:policy/AgentCoreEvaluationsLeastPrivilege"
+        )
+        assert result[0].region == AWS_REGION_US_EAST_1
+
+    def test_wildcard_resource_pinned_to_agentcore_fails(self):
+        """PassRole on Resource "*" pinned to the AgentCore principal must FAIL.
+
+        The full sentence is asserted, so a reworded finding cannot pass silently.
+        """
+        policy = _policy(
+            [_passrole("*", _passed_to(AGENTCORE_PRINCIPAL))], name="pass_any_role"
+        )
+        result = _run([policy])
+        assert result[0].status == "FAIL"
+        assert result[0].status_extended == (
+            "Custom Policy pass_any_role allows iam:PassRole to Bedrock AgentCore on every "
+            "role instead of the specific execution roles AgentCore is meant to run as."
+        )
+
+    def test_wildcard_resource_with_agentcore_action_in_same_policy_fails(self):
+        """An unpinned PassRole is in scope when the same policy also allows an AgentCore action.
+
+        That combination is what lets one policy both create the resource and choose the role it
+        runs as, which is the escalation this check exists for.
+        """
+        policy = _policy([_passrole("*"), AGENTCORE_ACTION_STATEMENT])
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_wildcard_resource_without_agentcore_reach_passes(self):
+        """An unbounded PassRole that reaches no AgentCore action and pins no service must PASS.
+
+        It is a real finding, but a different one: the privilege-escalation checks own it, and
+        reporting it here would duplicate them.
+        """
+        policy = _policy([_passrole("*")])
+        assert _run([policy])[0].status == "PASS"
+
+    def test_passed_to_another_service_is_out_of_scope(self):
+        """PassRole pinned to another service stays out of scope even beside an AgentCore action.
+
+        Measured live on SageMaker Studio policies. The condition confines the statement to
+        sagemaker.amazonaws.com, so it cannot hand a role to AgentCore however the rest of the
+        policy is shaped.
+        """
+        policy = _policy(
+            [
+                _passrole("*", _passed_to("sagemaker.amazonaws.com")),
+                AGENTCORE_ACTION_STATEMENT,
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    @pytest.mark.parametrize(
+        "operator",
+        [
+            "StringEquals",
+            "StringEqualsIfExists",
+            "StringEqualsIgnoreCase",
+            "StringEqualsIgnoreCaseIfExists",
+            "StringLike",
+            "StringLikeIfExists",
+            "ForAnyValue:StringEquals",
+            "ForAllValues:StringEquals",
+            "ForAllValues:StringEqualsIfExists",
+        ],
+    )
+    def test_every_spelling_of_an_agentcore_pin_fails(self, operator):
+        """A pin naming AgentCore must FAIL under every operator that compares the key.
+
+        The policy carries NO other AgentCore action, so the pin is the only thing that can put
+        the statement in scope. That is what makes the case discriminating: an operator the check
+        fails to read produces no values, _targets_agentcore then treats the statement as reaching
+        every service and consults the document, finds no AgentCore action, and PASSes a PassRole
+        grant on every role in the account. Every spelling here PASSed before the allow-list.
+        """
+        policy = _policy(
+            [_passrole("*", {operator: {"iam:PassedToService": AGENTCORE_PRINCIPAL}})],
+            name="pass_any_role",
+        )
+        result = _run([policy])
+        assert result[0].status == "FAIL"
+        assert result[0].status_extended == (
+            "Custom Policy pass_any_role allows iam:PassRole to Bedrock AgentCore on every "
+            "role instead of the specific execution roles AgentCore is meant to run as."
+        )
+
+    @pytest.mark.parametrize(
+        "operator",
+        [
+            "StringEquals",
+            "StringEqualsIgnoreCase",
+            "StringLike",
+            "ForAnyValue:StringEquals",
+        ],
+    )
+    def test_a_pin_that_cannot_be_skipped_keeps_another_service_out_of_scope(
+        self, operator
+    ):
+        """A pin naming another service PASSes only under operators the caller cannot skip.
+
+        The AgentCore action is present, so the document-wide fallback pulls the statement back in
+        unless the condition genuinely confines it. ForAnyValue is here rather than with the
+        defeasible spellings because AWS documents it as returning false for an absent key, so it
+        fails closed on an Allow.
+        """
+        policy = _policy(
+            [
+                _passrole(
+                    "*", {operator: {"iam:PassedToService": "sagemaker.amazonaws.com"}}
+                ),
+                AGENTCORE_ACTION_STATEMENT,
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    @pytest.mark.parametrize(
+        "value",
+        [
+            "*.bedrock-agentcore.amazonaws.com",
+            "*-identity.bedrock-agentcore.amazonaws.com",
+            "runtime-identity.*",
+            "*.bedrock-agentcore.*",
+            "bedrock-agentcore*",
+        ],
+    )
+    def test_a_wildcard_value_covering_an_agentcore_principal_is_in_scope(self, value):
+        """A condition value that COVERS an AgentCore principal must FAIL.
+
+        The policy allows no other AgentCore action, so the pin is the only thing that can put the
+        statement in scope -- and each of these PASSed. The value was probed as a pattern against
+        one base principal, and a regex asked whether it IS a family member; neither asked whether
+        it COVERS one. So a wildcard reaching runtime-identity.bedrock-agentcore.amazonaws.com read
+        as a pin to some other service and the statement left scope.
+
+        The severity is in the ordering: the narrower literal FAILs and the no-condition case FAILs,
+        so BROADENING the grant flipped the verdict to clean. That is the direction that never
+        self-corrects, because a PASS is filed and nobody looks again.
+        """
+        policy = _policy(
+            [_passrole("*", {"StringEquals": {"iam:PassedToService": value}})],
+            name="wildcard_principal",
+        )
+        result = _run([policy])
+        assert result[0].status == "FAIL"
+        assert result[0].status_extended == (
+            "Custom Policy wildcard_principal allows iam:PassRole to Bedrock AgentCore on every "
+            "role instead of the specific execution roles AgentCore is meant to run as."
+        )
+
+    @pytest.mark.parametrize(
+        "value",
+        [
+            "*.sagemaker.amazonaws.com",
+            "?.bedrock-agentcore.amazonaws.com",
+            "bedrock.amazonaws.com",
+        ],
+    )
+    def test_a_wildcard_value_covering_no_agentcore_principal_stays_out_of_scope(
+        self, value
+    ):
+        """A wildcard that reaches no AgentCore principal must still PASS.
+
+        The guard on the fix above, and the middle row is the one that matters: `?` matches exactly
+        one character and no principal has a single-character subdomain, so that value covers
+        nothing and reads as a pin elsewhere. Treating any metacharacter as coverage would report
+        all three, and `bedrock.amazonaws.com` shows the prefix test is not a substring test.
+        """
+        policy = _policy(
+            [_passrole("*", {"StringEquals": {"iam:PassedToService": value}})]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    @pytest.mark.parametrize("operator", ["ArnLike", "ArnEquals", "ArnLikeIfExists"])
+    def test_an_arn_operator_on_a_string_key_is_not_read_as_a_pin(self, operator):
+        """An ARN operator on iam:PassedToService must not be read as naming a service.
+
+        The allow-list carries only the string operators, deliberately: iam:PassedToService is
+        string-typed and holds a service principal, and AWS documents it as working with the string
+        operators, so an ARN operator on it cannot compare meaningfully. That makes this list
+        shorter than the trust check's, which needs the ARN spellings because aws:SourceArn is
+        ARN-typed -- and a shorter list reads as an oversight unless something asserts it.
+
+        The value here names ANOTHER service, so admitting these operators would take the statement
+        out of scope and PASS it. Unread, the statement reaches the no-pin path and the document
+        decides: FAIL beside the AgentCore action, by the same route as carrying no condition at all.
+        """
+        policy = _policy(
+            [
+                _passrole(
+                    "*", {operator: {"iam:PassedToService": "sagemaker.amazonaws.com"}}
+                ),
+                AGENTCORE_ACTION_STATEMENT,
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    @pytest.mark.parametrize(
+        "guard",
+        ["false", False],
+        ids=["guard-as-string", "guard-as-json-boolean"],
+    )
+    @pytest.mark.parametrize(
+        "operator",
+        [
+            "StringEqualsIfExists",
+            "StringLikeIfExists",
+            "ForAllValues:StringEquals",
+            "ForAllValues:StringEqualsIfExists",
+        ],
+    )
+    def test_a_guarded_defeasible_pin_confines_the_service(self, operator, guard):
+        """A defeasible pin with a same-key Null:"false" guard must PASS, either spelling.
+
+        The guard forces the key to be present, so the caller cannot reach AgentCore by omitting it
+        and the statement really is confined to sagemaker. This rescue was applied to the trust
+        check's collector and never here, so every one of these FAILed beside an AgentCore action --
+        penalising the spelling AWS prescribes: "You should always include the Null condition
+        operator ... with a false value". Adding the guard to a pinned statement made the verdict
+        worse, which is the shape that turns hardening into a finding.
+
+        The guard is parametrized over the STRING and the JSON BOOLEAN because IAM stores both and
+        hands back what it was given: create_policy with {"Null": {"iam:PassedToService": false}}
+        is accepted and get_policy_version returns a Python bool, unconverted. Reading only the
+        string left all four operators above FAILing on the hardened spelling. Measured on a
+        customer-managed policy, which is this check's own population -- a trust policy normalizes
+        the same value to "false", so this surface is the only one where the bool is observable.
+        """
+        policy = _policy(
+            [
+                _passrole(
+                    "*",
+                    {
+                        operator: {"iam:PassedToService": "sagemaker.amazonaws.com"},
+                        "Null": {"iam:PassedToService": guard},
+                    },
+                ),
+                AGENTCORE_ACTION_STATEMENT,
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    @pytest.mark.parametrize(
+        "condition",
+        [
+            {
+                "StringEqualsIfExists": {
+                    "iam:PassedToService": "bedrock-agentcore.amazonaws.com"
+                },
+                "Null": {"iam:PassedToService": "false"},
+            },
+            {
+                "StringEqualsIfExists": {
+                    "iam:PassedToService": "sagemaker.amazonaws.com"
+                },
+                "Null": {"iam:PassedToService": "true"},
+            },
+            {
+                "StringEqualsIfExists": {
+                    "iam:PassedToService": "sagemaker.amazonaws.com"
+                },
+                "Null": {"iam:AssociatedResourceArn": "false"},
+            },
+            {
+                "StringEqualsIfExists": {
+                    "iam:PassedToService": "sagemaker.amazonaws.com"
+                },
+                "Null": {"iam:PassedToService": 0},
+            },
+            {
+                "StringEqualsIfExists": {
+                    "iam:PassedToService": "sagemaker.amazonaws.com"
+                },
+                "Null": {"iam:PassedToService": True},
+            },
+            {
+                "StringEqualsIfExists": {
+                    "iam:PassedToService": "sagemaker.amazonaws.com"
+                },
+                "Null": {"iam:PassedToService": ["true", "false"]},
+            },
+            {
+                "StringEqualsIfExists": {
+                    "iam:PassedToService": "sagemaker.amazonaws.com"
+                },
+                "Null": {"iam:PassedToService": ["false", "true"]},
+            },
+        ],
+        ids=[
+            "guard-names-agentcore",
+            "guard-demands-absence",
+            "guard-on-another-key",
+            "guard-is-a-number",
+            "guard-is-boolean-true",
+            "guard-list-ORs-to-always-true",
+            "guard-list-ORs-to-always-true-reversed",
+        ],
+    )
+    def test_the_guard_rescue_requires_the_right_guard(self, condition):
+        """The rescue must not fire on any Null block that happens to be present.
+
+        The last two are the sharpest, because they made the check score a WEAKER policy BETTER: values
+        inside one condition operator are ORed by IAM, so ["true","false"] means "key absent OR key
+        present", which is always true and binds nothing. Reading the list with `any` credited it, so
+        adding the word "true" to a guard list turned a FAIL into a PASS. Both orderings are pinned
+        because a fix that scanned only the first element would satisfy one and not the other. Measured
+        on IAM's own evaluator with the key omitted: `allowed` for both orderings, indistinguishable
+        from carrying no Null block, against `implicitDeny` for "false", ["false"] and
+        ["false","false"]. And reachable rather than argued: create_policy stores the multi-value list
+        and get_policy_version returns it unchanged.
+
+        Seven negatives, each failing for its own reason: the first is guarded but names AgentCore
+        so it is in scope on its own terms; `Null: "true"` demands the key be ABSENT, which makes the
+        operator vacuous by design rather than rescuing it; and a guard on a different key leaves
+        iam:PassedToService omissible. These mirror the trust check's cases, so the two collectors
+        are now pinned to one rule in both directions.
+
+        The last two are the controls on reading a JSON boolean, and they exist because crediting a
+        guard turns a FAIL into a PASS -- over-recognition is the unsafe direction here. `0` must
+        NOT count, and what it pins is the FORMULATION: the tempting `not candidate` or
+        `candidate is False` reads 0, "", None and [] as guards, because isinstance(False, int) is
+        True in Python and falsiness is not the question being asked. Boolean `True` must not count
+        either, for the same reason its string spelling does not -- it demands absence, so it makes the
+        operator vacuous rather than rescuing it.
+
+        An earlier version of this docstring cited Access Analyzer as drawing the same boundary. It does
+        not: measured, it reports TYPE_MISMATCH_BOOLEAN for "FALSE" and " false ", both of which this
+        check CREDITS, as well as for 0, which it does not. The boundary here is the check's own.
+        """
+        policy = _policy([_passrole("*", condition), AGENTCORE_ACTION_STATEMENT])
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_one_unskippable_operator_confines_the_statement_whatever_sits_beside_it(
+        self,
+    ):
+        """A defeasible operator beside a firm one must not make the statement defeasible.
+
+        Conditions are ANDed, so `StringEquals` alone already holds the request to sagemaker
+        whatever the `StringEqualsIfExists` next to it does; the statement is confined and out of
+        scope. Every other test here uses ONE operator on the key, so none of them can tell
+        `all(defeasible)` from `any(defeasible)`; this mixed fixture is the input that
+        distinguishes them. Under `any` the pin would read as
+        skippable, the document-wide fallback would pull the statement back in beside the AgentCore
+        action, and this would FAIL.
+        """
+        policy = _policy(
+            [
+                _passrole(
+                    "*",
+                    {
+                        "StringEquals": {
+                            "iam:PassedToService": "sagemaker.amazonaws.com"
+                        },
+                        "StringEqualsIfExists": {
+                            "iam:PassedToService": "sagemaker.amazonaws.com"
+                        },
+                    },
+                ),
+                AGENTCORE_ACTION_STATEMENT,
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    @pytest.mark.parametrize(
+        "operator",
+        [
+            "StringEqualsIfExists",
+            "StringLikeIfExists",
+            "ForAllValues:StringEquals",
+            "ForAllValues:StringEqualsIfExists",
+        ],
+    )
+    def test_a_pin_the_caller_can_skip_does_not_confine_the_service(self, operator):
+        """A defeasible pin naming another service must still FAIL beside an AgentCore action.
+
+        It names sagemaker, but the caller reaches AgentCore by omitting the key, so the statement
+        is not confined and scope falls to the rest of the policy. This is the same rule the
+        pre-existing *IfExists case asserts, extended to the ForAllValues spellings, and it is why
+        reading the value is not the same as crediting it as a constraint.
+        """
+        policy = _policy(
+            [
+                _passrole(
+                    "*", {operator: {"iam:PassedToService": "sagemaker.amazonaws.com"}}
+                ),
+                AGENTCORE_ACTION_STATEMENT,
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_role_wildcard_arn_fails(self):
+        """An IAM ARN ending in role/* names every role in the account, so it must FAIL."""
+        policy = _policy(
+            [_passrole(ANY_ROLE_IN_ACCOUNT_ARN), AGENTCORE_ACTION_STATEMENT]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_account_wide_wildcard_arn_fails(self):
+        """An IAM ARN whose whole resource field is "*" names every role, so it must FAIL."""
+        policy = _policy(
+            [_passrole(f"arn:aws:iam::{AWS_ACCOUNT_ID}:*"), AGENTCORE_ACTION_STATEMENT]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_role_prefix_without_slash_fails(self):
+        """role* without a slash still matches every role path, so it must FAIL.
+
+        A pattern that looks narrower than role/* is not: the wildcard swallows the separator too.
+        """
+        policy = _policy(
+            [
+                _passrole(f"arn:aws:iam::{AWS_ACCOUNT_ID}:role*"),
+                AGENTCORE_ACTION_STATEMENT,
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_named_role_passes(self):
+        """PassRole confined to one fully named role, path included, must PASS."""
+        policy = _policy(
+            [
+                _passrole(
+                    f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/service-role/AgentCoreRuntimeRole",
+                    _passed_to(AGENTCORE_PRINCIPAL),
+                )
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_service_linked_role_path_passes(self):
+        """PassRole confined to a service-linked-role path must PASS.
+
+        Measured live on AWS Config collector policies: the wildcard sits inside a path that
+        bounds the role set, so it is not every role.
+        """
+        policy = _policy(
+            [
+                _passrole(
+                    "arn:aws:iam::*:role/aws-service-role/config.amazonaws.com/*",
+                    _passed_to(AGENTCORE_PRINCIPAL),
+                )
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_role_path_wildcard_with_name_prefix_passes(self):
+        """A wildcard path combined with a name prefix still bounds the role set, so PASS."""
+        policy = _policy(
+            [
+                _passrole(
+                    f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/*/AgentCore-*",
+                    _passed_to(AGENTCORE_PRINCIPAL),
+                )
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_multiple_resources_fail_if_any_names_every_role(self):
+        """One resource naming every role makes the statement FAIL despite a scoped sibling.
+
+        IAM evaluates each Resource independently, so a narrow entry cannot rescue a broad one.
+        """
+        policy = _policy(
+            [
+                _passrole(
+                    [EVALUATION_ROLE_PREFIX_ARN, ANY_ROLE_IN_ACCOUNT_ARN],
+                    _passed_to(AGENTCORE_PRINCIPAL),
+                )
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    @pytest.mark.parametrize(
+        "resource",
+        [
+            f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/?*",
+            f"arn:aws:iam::{AWS_ACCOUNT_ID}:*role*",
+            "arn:aws:iam::*",
+            f"*:aws:iam::{AWS_ACCOUNT_ID}:role/*",
+        ],
+    )
+    def test_a_resource_that_names_every_role_without_being_all_stars_fails(
+        self, resource
+    ):
+        """Every resource that names every role must FAIL, not only a run of asterisks.
+
+        All four PASSed. `role/?*` names every role with at least one character and `*role*` every
+        role/... resource there is; `arn:aws:iam::*` has a star spanning the account and resource
+        fields, and the last is a wildcarded partition, which the old regex could not express
+        because it was anchored on a literal `arn:`. None of these is narrower than `role/*`, which
+        FAILed correctly all along.
+        """
+        policy = _policy([_passrole(resource), AGENTCORE_ACTION_STATEMENT])
+        assert _run([policy])[0].status == "FAIL"
+
+    @pytest.mark.parametrize(
+        "resource",
+        [
+            "arn:aws:iam::555555555555*",
+            f"arn:aws:iam::{AWS_ACCOUNT_ID}*",
+            "arn:aws-us-gov:iam::*",
+            "arn:aws-cn:iam::*",
+            "arn:aws-us-gov:*",
+            # Four fields with an EMPTY region head, which the region test must not catch: the
+            # star spans the region onward, and `?` matches the colon.
+            "arn:aws:iam:*",
+            "arn:aws:iam:?*",
+        ],
+    )
+    def test_a_truncated_arn_names_every_role_in_any_partition_or_account(
+        self, resource
+    ):
+        """A short starred IAM ARN must FAIL whatever partition or account it names.
+
+        The previous fix matched short ARNs against probes pinned to partition `aws` and account
+        123456789012, so those two values became load-bearing in the SHORT branch while the
+        six-field branch ignored both. `arn:aws:iam::555555555555*` was therefore read as specific
+        while the identical shape in the probe's own account FAILed, and the two non-commercial
+        partitions were read as specific because no probe carried them.
+
+        An account PREFIX is what shows no probe corpus could fix this: there is nothing to
+        enumerate. Decided structurally now -- a star in the last spelled-out field spans every field
+        after it, so the resource name is unbounded and every role is named.
+        """
+        policy = _policy([_passrole(resource), AGENTCORE_ACTION_STATEMENT])
+        assert _run([policy])[0].status == "FAIL"
+
+    @pytest.mark.parametrize(
+        "resource",
+        [
+            f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/?",
+            "arn:aws:iam::*:role/AgentCoreEvaluationRole*",
+            "arn:aws:iam",
+            "arn:aws:iam::role/Prod*",
+            # The same shape one colon short, so the literal head lands in the REGION position
+            # instead of the account one. Every IAM ARN has an empty region, so each of these
+            # matches no role ARN at all -- and each read as naming EVERY role until the region
+            # position was tested, drawing a high-severity FAIL on a pattern reaching nothing.
+            "arn:aws:iam:role/Prod*",
+            "arn:aws:iam:us-east-1*",
+            "arn:aws:iam:r?le/Prod*",
+            # A resource that is not an IAM ARN at all names no role, so it cannot name every role.
+            # Each of these four reaches a different rejection: the partition-prefix and service
+            # fields are tested in the short branch and again in the six-field one, and none of the
+            # four was exercised before. iam:PassRole on an S3 ARN is nonsense a real policy can
+            # still carry, since IAM stores any syntactically valid ARN.
+            "xyz:aws:iam:*",
+            "arn:aws:s3:*",
+            f"xyz:aws:iam::{AWS_ACCOUNT_ID}:role/*",
+            "arn:aws:s3:::amzn-s3-demo-bucket/*",
+        ],
+    )
+    def test_a_resource_that_names_a_bounded_set_of_roles_passes(self, resource):
+        """A resource covering some roles but not all of them must still PASS.
+
+        The guard on the fix above, and the reason the rule is not "contains a metacharacter":
+        `role/?` matches exactly one character so it names single-character roles only, the
+        prefix form is the scope AWS's own AgentCore Evaluations reference policy uses, and
+        `arn:aws:iam` carries no star so it matches no ARN at all. Widening the fix to catch
+        `role/?*` by treating any metacharacter as unbounded would report all three.
+
+        The last three are the four-field spellings. `arn:aws:iam::role/Prod*` above puts
+        `role/Prod` in the ACCOUNT position, where the digits test rejects it; one colon fewer
+        puts it in the REGION position, which went untested. A region literal is included because
+        it is the shape an operator plausibly writes, and IAM has no region either way.
+        """
+        policy = _policy([_passrole(resource), AGENTCORE_ACTION_STATEMENT])
+        assert _run([policy])[0].status == "PASS"
+
+    @pytest.mark.parametrize(
+        "resource",
+        [
+            f"arn:aws:iam:us-east-1:{AWS_ACCOUNT_ID}:role/*",
+            f"arn:aws:iam:?:{AWS_ACCOUNT_ID}:role/*",
+            f"arn:aws:iam:us-east-1:{AWS_ACCOUNT_ID}:role/?*",
+            "arn:aws:iam::12345:role/*",
+            "arn:aws:iam:::role/*",
+            "arn:aws:iam::?????:role/*",
+        ],
+    )
+    def test_a_six_field_arn_that_names_no_role_passes(self, resource):
+        """A fully spelled-out ARN naming no role must PASS, as the short spellings already do.
+
+        The six-field branch applied neither the region test nor the account one, so every resource
+        here drew a high-severity privilege-escalation FAIL on a pattern matching no role ARN at
+        all -- the same defect the four- and five-field branches had already been fixed for,
+        surviving in the branch that was not re-read.
+
+        Every IAM ARN has an EMPTY region, so `us-east-1` in that position names nothing, and `?`
+        names nothing either: unlike the short branch, this field is delimited on both sides, so
+        there is no colon for `?` to match and it must consume one character of a region that has
+        none. An account is twelve digits, so `12345`, the empty field and five `?` each name no
+        account however the resource field is spelled.
+        """
+        policy = _policy([_passrole(resource), AGENTCORE_ACTION_STATEMENT])
+        assert _run([policy])[0].status == "PASS"
+
+    @pytest.mark.parametrize(
+        "resource",
+        [
+            f"arn:aws:iam:*:{AWS_ACCOUNT_ID}:role/*",
+            "arn:aws:iam::1234567890*:role/*",
+            ANY_ROLE_IN_ACCOUNT_ARN,
+            "arn:aws:iam::????????????:role/*",
+            "arn:aws:iam::12345678901?:role/*",
+            "arn:aws:iam:*:*:role/*",
+        ],
+    )
+    def test_a_six_field_arn_that_names_every_role_still_fails(self, resource):
+        """The guard on the fix above: the region and account tests must reject only unnameable
+        shapes, never a wildcard that spans a real region or account.
+
+        `*` matches the empty region IAM ARNs carry, an account prefix followed by a star spans
+        every account sharing it, and twelve `?` spans every account there is -- one `?` short of
+        twelve names none, which is the pair that pins the width rule rather than assuming it.
+        `ANY_ROLE_IN_ACCOUNT_ARN` is here because it FAILed correctly before the fix and must go on
+        doing so: it is the shape the check exists to report.
+        """
+        policy = _policy([_passrole(resource), AGENTCORE_ACTION_STATEMENT])
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_every_reported_resource_names_at_least_one_real_role(self):
+        """A resource this check reports must name some role. Anything else is a finding on nothing.
+
+        The general form of the defect the two tests above pin by example. Rather than enumerating
+        ARN shapes that can name no role -- which cannot be derived, since botocore models no ARN
+        format for any service -- this asks the question the other way round: a resource the check
+        reports as naming EVERY role must match at least one ARN that IAM really returns. A
+        privilege-escalation FAIL on a pattern matching nothing is a false report whatever spelling
+        produced it, and this catches every such spelling at once instead of the six now listed.
+
+        Measured on the state this branch was reviewed at: all 24 grid shapes were reported and 16
+        of them matched none of REAL_ROLE_ARNS. Now 8 are reported and none is unreachable. The
+        two tests above name six of those 16 by hand; this covers the rest without listing them.
+
+        ONE DIRECTION ONLY, and worth stating plainly: this cannot see the opposite error, a
+        resource that names every role while the check clears it. That is the more dangerous
+        direction and it needs a different invariant, which this does not supply.
+        """
+        by_arn = {}
+        policies = []
+        for index, resource in enumerate(_reach_grid()):
+            policy = _policy(
+                [_passrole(resource), AGENTCORE_ACTION_STATEMENT],
+                name=f"reach-grid-{index}",
+            )
+            by_arn[policy.arn] = resource
+            policies.append(policy)
+
+        reported = [
+            by_arn[report.resource_arn]
+            for report in _run(policies)
+            if report.status == "FAIL"
+        ]
+        unreachable = [
+            resource
+            for resource in reported
+            if not any(iam_pattern_matches(resource, arn) for arn in REAL_ROLE_ARNS)
+        ]
+        assert not unreachable, (
+            f"reported as naming every role, but matching none of the "
+            f"{len(REAL_ROLE_ARNS)} role ARNs IAM really returns: {unreachable}"
+        )
+        # Guard on the assertion above, which says nothing about a resource the check clears: if
+        # the grid stopped being reported at all the invariant would hold vacuously. Any positive
+        # floor proves that; 6 sits below today's 8 so a legitimate narrowing of the check does not
+        # trip it, while still being far enough from 0 that the invariant cannot go quiet.
+        assert len(reported) >= 6, (
+            f"only {len(reported)} of {len(_reach_grid())} grid shapes were reported, so the "
+            f"invariant above examined almost nothing -- the grid or the check has drifted"
+        )
+
+    def test_iam_service_wildcard_action_fails(self):
+        """iam:* covers iam:PassRole, so the statement must FAIL."""
+        policy = _policy(
+            [_passrole("*", _passed_to(AGENTCORE_PRINCIPAL), action="iam:*")]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_iam_action_prefix_wildcard_fails(self):
+        """iam:Pass* reaches iam:PassRole, so the statement must FAIL."""
+        policy = _policy(
+            [_passrole("*", _passed_to(AGENTCORE_PRINCIPAL), action=["iam:Pass*"])]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_wildcard_service_in_the_agentcore_action_brings_the_policy_into_scope(
+        self,
+    ):
+        """`bedrock-*:CreateAgentRuntime` is AgentCore reach, so an unpinned PassRole beside it FAILs.
+
+        This is the consequential half of the same wildcard defect: `bedrock-*` is a plausible thing
+        to write, since one prefix covers bedrock and bedrock-agentcore together. A literal
+        comparison read it as no AgentCore reach, which left the unpinned PassRole statement out of
+        scope entirely and the policy PASSed.
+        """
+        policy = _policy(
+            [
+                _passrole("*"),
+                {
+                    "Effect": "Allow",
+                    "Action": ["bedrock-*:CreateAgentRuntime"],
+                    "Resource": "*",
+                },
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_wildcard_service_in_the_passrole_action_fails(self):
+        """`*:PassRole` names every service, IAM among them, so it covers iam:PassRole.
+
+        Legal but implausible on its own; fixed for consistency with the AgentCore-reach test above,
+        since both read a service field and one line each removes a known false PASS.
+        """
+        policy = _policy(
+            [_passrole("*", _passed_to(AGENTCORE_PRINCIPAL), action="*:PassRole")]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_unrelated_service_in_the_action_stays_out_of_scope(self):
+        """An unrelated service in either action field must not create reach or coverage, so PASS.
+
+        The guard against the two fixes above over-reaching: `s3` is matched as a pattern and must
+        match neither `iam` nor `bedrock-agentcore`.
+        """
+        policy = _policy(
+            [
+                _passrole("*", action="s3:GetObject"),
+                {"Effect": "Allow", "Action": "s3:PutObject", "Resource": "*"},
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_bare_action_wildcard_is_left_to_admin_checks(self):
+        """A bare Action "*" is left to the administrative-privileges checks, so PASS here.
+
+        Reporting it would duplicate check_admin_access rather than add a claim.
+        """
+        policy = _policy([{"Effect": "Allow", "Action": "*", "Resource": "*"}])
+        assert _run([policy])[0].status == "PASS"
+
+    def test_bare_action_wildcard_is_not_the_agentcore_evidence(self):
+        """A bare Action "*" is not evidence that the policy reaches AgentCore.
+
+        Were it counted, every administrator policy would be pulled into this check through the
+        AgentCore-reach test rather than through a real AgentCore grant.
+        """
+        policy = _policy(
+            [
+                _passrole("*"),
+                {
+                    "Effect": "Allow",
+                    "Action": "*",
+                    "Resource": "arn:aws:s3:::my-bucket",
+                },
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_other_iam_action_is_not_passrole(self):
+        """An IAM action that is not PassRole must not put the statement in scope."""
+        policy = _policy(
+            [_passrole("*", action="iam:GetRole"), AGENTCORE_ACTION_STATEMENT]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_passed_to_service_wildcard_is_in_scope(self):
+        """iam:PassedToService pinned to "*" pins nothing, so the statement is in scope and FAILs."""
+        policy = _policy([_passrole("*", _passed_to("*"))])
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_passed_to_service_subdomain_principal_is_in_scope(self):
+        """A subdomain principal in the AgentCore family is still AgentCore, so it FAILs.
+
+        runtime-identity.bedrock-agentcore.amazonaws.com reaches IAM as AgentCore does, so
+        matching only the base principal would let the subdomain form through.
+        """
+        policy = _policy(
+            [
+                _passrole(
+                    "*", _passed_to("runtime-identity.bedrock-agentcore.amazonaws.com")
+                )
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    @pytest.mark.parametrize(
+        "value,expected",
+        [
+            ("browser-tool.bedrock-agentcore.amazonaws.com", "FAIL"),
+            ("code-interpreter.bedrock-agentcore.amazonaws.com", "FAIL"),
+            ("browser-tool.bedrock-agentcore.example.com", "PASS"),
+        ],
+        ids=["browser-tool", "code-interpreter", "wrong-suffix"],
+    )
+    def test_a_subdomain_principal_no_probe_enumerates_is_in_scope(
+        self, value, expected
+    ):
+        """A literal subdomain principal outside the probe list must still FAIL.
+
+        The third row is the one that pins ANCHORING rather than membership: it differs from the
+        first in one field, so a family regex that lost its trailing `$` would return the same
+        verdict for both and only this pair can tell them apart. The first two rows are positives
+        that no probe enumerates, so together the parameters exercise both mechanisms.
+
+        This is what the family regex is for, and the test above can no longer show it: the
+        principal it uses became one of AGENTCORE_PRINCIPAL_PROBES when coverage matching was
+        added, so the probes alone now carry it and deleting the regex changes nothing it asserts.
+
+        `browser-tool.` is not enumerated anywhere, so with the regex gone this value matches no
+        probe -- a literal pattern matches only itself -- and the statement would leave scope. The
+        two mechanisms answer different questions and each needs one input only it can decide.
+        """
+        policy = _policy([_passrole("*", _passed_to(value))])
+        assert _run([policy])[0].status == expected
+
+    def test_bare_action_wildcard_pair_is_left_to_admin_checks(self):
+        """`Action: "*:*"` must PASS: it is check_admin_access's finding, not this one.
+
+        The only bare-wildcard fixture was `"*"`, which the `separator != ":"` clause alone
+        satisfies, so the `service == "*" and operation == "*"` clause was load-bearing with zero
+        coverage -- deleting it left every test green while flipping this policy to FAIL.
+        """
+        policy = _policy(
+            [_passrole("*", _passed_to(AGENTCORE_PRINCIPAL), action="*:*")]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_an_account_head_of_question_marks_still_names_every_role(self):
+        """`arn:aws:iam::?*` names every role, so it must FAIL.
+
+        The account head is "?", which `.replace("?", "")` reduces to empty and therefore accepts as
+        account-shaped; the star then spans every field after it. Dropping that strip judged the head
+        non-numeric and declared the pattern specific, with all 87 tests still green.
+        """
+        policy = _policy([_passrole("arn:aws:iam::?*"), AGENTCORE_ACTION_STATEMENT])
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_a_naming_convention_scope_is_not_every_role(self):
+        """`role/*-*` is a naming convention, not every role, so it must PASS.
+
+        It matches the 64-character probe but not "role/a", which is exactly what the shortest-name
+        probe exists to catch. Dropping that probe left the suite green and reported this scope as
+        "every role".
+        """
+        policy = _policy(
+            [
+                _passrole(f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/*-*"),
+                AGENTCORE_ACTION_STATEMENT,
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_passed_to_service_list_with_one_agentcore_value_is_in_scope(self):
+        """A PassedToService list containing one AgentCore value is in scope and FAILs.
+
+        The other value being a different service must not rescue it: any one value that can name
+        AgentCore is sufficient.
+        """
+        policy = _policy(
+            [
+                _passrole(
+                    "*",
+                    _passed_to(["sagemaker.amazonaws.com", AGENTCORE_PRINCIPAL]),
+                )
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_negated_operator_does_not_pin_the_service(self):
+        """StringNotEquals inverts the match, so it pins the statement to no service at all.
+
+        Scope then falls to the rest of the policy, which allows an AgentCore action, so it FAILs.
+        Crediting a negated operator as a pin would clear a statement that confines nothing.
+        """
+        policy = _policy(
+            [
+                _passrole(
+                    "*",
+                    {
+                        "StringNotEquals": {
+                            "iam:PassedToService": "sagemaker.amazonaws.com"
+                        }
+                    },
+                ),
+                AGENTCORE_ACTION_STATEMENT,
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_if_exists_operator_does_not_pin_the_service(self):
+        """An *IfExists operator is skipped when the caller omits the key, so it pins nothing.
+
+        Scope falls to the rest of the policy and the statement FAILs, for the same reason as the
+        negated operator above.
+        """
+        policy = _policy(
+            [
+                _passrole(
+                    "*",
+                    {
+                        "StringEqualsIfExists": {
+                            "iam:PassedToService": "sagemaker.amazonaws.com"
+                        }
+                    },
+                ),
+                AGENTCORE_ACTION_STATEMENT,
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_associated_resource_arn_does_not_bound_the_role_set(self):
+        """iam:AssociatedResourceArn bounds the target resource, not the set of passable roles.
+
+        So a statement carrying it alongside Resource "*" still hands AgentCore every role and
+        must FAIL: the two conditions constrain different things.
+        """
+        policy = _policy(
+            [
+                _passrole(
+                    "*",
+                    {
+                        "StringEquals": {"iam:PassedToService": AGENTCORE_PRINCIPAL},
+                        "ArnLike": {
+                            "iam:AssociatedResourceArn": "arn:aws:bedrock-agentcore:us-east-1:123456789012:runtime/*"
+                        },
+                    },
+                )
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_not_resource_fails(self):
+        """A statement using NotResource leaves every role outside the exclusion passable, so FAIL."""
+        statement = _passrole(None, _passed_to(AGENTCORE_PRINCIPAL))
+        statement["NotResource"] = f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/BreakGlass"
+        assert _run([_policy([statement])])[0].status == "FAIL"
+
+    def test_statement_without_resource_or_not_resource_passes(self):
+        """A statement naming neither Resource nor NotResource grants no resource, so PASS."""
+        policy = _policy([_passrole(None, _passed_to(AGENTCORE_PRINCIPAL))])
+        assert _run([policy])[0].status == "PASS"
+
+    def test_unconditional_deny_of_passrole_everywhere_clears_the_finding(self):
+        """An unconditional Deny of iam:PassRole on "*" removes the permission, so PASS."""
+        policy = _policy(
+            [
+                _passrole("*", _passed_to(AGENTCORE_PRINCIPAL)),
+                {"Effect": "Deny", "Action": "iam:PassRole", "Resource": "*"},
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    @pytest.mark.parametrize("deny_action", ["*", "*:*"])
+    def test_a_deny_of_every_action_clears_the_finding(self, deny_action):
+        """A Deny of EVERY action on "*" removes iam:PassRole, so the policy must PASS.
+
+        Both spellings reported FAIL on a policy granting no PassRole at all. The Deny side reused
+        the Allow side's reader, which skips a bare "*" and "*:*" so this check does not duplicate
+        the administrative-privileges checks; on the Deny side that exclusion inverts and the
+        broadest possible Deny credited nothing. The Allow-side guard is deliberately untouched,
+        since relaxing it would reverse that settled decision.
+        """
+        policy = _policy(
+            [
+                _passrole("*", _passed_to(AGENTCORE_PRINCIPAL)),
+                {"Effect": "Deny", "Action": deny_action, "Resource": "*"},
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_a_deny_of_every_action_in_another_service_does_not_clear_the_finding(self):
+        """The guard on the fix above: `s3:*` removes no iam:PassRole, so this must still FAIL."""
+        policy = _policy(
+            [
+                _passrole("*", _passed_to(AGENTCORE_PRINCIPAL)),
+                {"Effect": "Deny", "Action": "s3:*", "Resource": "*"},
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_deny_listing_the_wildcard_among_other_resources_clears_the_finding(self):
+        """A Deny whose Resource list contains "*" denies PassRole everywhere.
+
+        _denies_passrole_everywhere tests the list with any(), not all(): IAM evaluates each
+        Resource independently, so one "*" entry is sufficient. Under all() this policy stops
+        clearing the finding and the check reports a false FAIL. Every other Deny fixture
+        supplies a single Resource string, so nothing else distinguishes the two operators.
+        """
+        policy = _policy(
+            [
+                _passrole("*", _passed_to(AGENTCORE_PRINCIPAL)),
+                {
+                    "Effect": "Deny",
+                    "Action": "iam:PassRole",
+                    "Resource": ["*", ANY_ROLE_IN_ACCOUNT_ARN],
+                },
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_condition_block_that_is_not_a_mapping_is_skipped(self):
+        """A Condition operator whose block is not a mapping must be stepped over.
+
+        The guard is `not isinstance(operator, str) or not isinstance(block, dict)`. Under
+        `and` it only skips when *both* are malformed, so a valid operator with a string
+        block reaches `block.items()` and raises AttributeError -- which the framework
+        swallows, turning the check into one that silently reports nothing. Policy documents
+        come from the account, so a malformed block is account input rather than a
+        hypothetical.
+        """
+        policy = _policy([_passrole("*", {"StringEquals": "iam:PassedToService"})])
+        result = _run([policy])
+        # What this pins is that the check still REACHES a verdict. The malformed block
+        # yields no iam:PassedToService value, so no statement is a relevant AgentCore
+        # grant and the policy passes. Under `and` the guard stops firing, block.items()
+        # raises AttributeError, the framework swallows it and the check reports nothing at
+        # all -- so the finding count is the assertion that matters here.
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+
+    def test_conditional_deny_does_not_clear_the_finding(self):
+        """A CONDITIONAL Deny must not clear the finding: it only bites when the condition holds.
+
+        The Allow still stands for every request outside the condition, so the capability remains.
+        """
+        policy = _policy(
+            [
+                _passrole("*", _passed_to(AGENTCORE_PRINCIPAL)),
+                {
+                    "Effect": "Deny",
+                    "Action": "iam:PassRole",
+                    "Resource": "*",
+                    "Condition": {"StringEquals": {"aws:PrincipalTag/team": "agents"}},
+                },
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_deny_scoped_to_one_role_does_not_clear_the_finding(self):
+        """A Deny naming one role does not answer an Allow that reaches every other one."""
+        policy = _policy(
+            [
+                _passrole("*", _passed_to(AGENTCORE_PRINCIPAL)),
+                {
+                    "Effect": "Deny",
+                    "Action": "iam:PassRole",
+                    "Resource": f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/BreakGlass",
+                },
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_deny_only_policy_passes(self):
+        """A policy containing only a Deny grants nothing, so it must PASS."""
+        policy = _policy(
+            [{"Effect": "Deny", "Action": "iam:PassRole", "Resource": "*"}]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_conditional_deny_only_policy_passes(self):
+        """A conditional Deny alone still grants nothing, so it must PASS.
+
+        Reading Effect is what stops the statement being treated as though it allowed PassRole.
+        """
+        policy = _policy(
+            [
+                {
+                    "Effect": "Deny",
+                    "Action": "iam:PassRole",
+                    "Resource": "*",
+                    "Condition": {
+                        "StringEquals": {"iam:PassedToService": AGENTCORE_PRINCIPAL}
+                    },
+                }
+            ]
+        )
+        assert _run([policy])[0].status == "PASS"
+
+    def test_single_statement_dict_is_evaluated(self):
+        """A Statement given as a single dict rather than a list is still evaluated.
+
+        IAM accepts both shapes, so a check reading only lists would silently skip the policy.
+        """
+        policy = _policy(None)
+        policy.document = {
+            "Version": "2012-10-17",
+            "Statement": _passrole("*", _passed_to(AGENTCORE_PRINCIPAL)),
+        }
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_malformed_statements_do_not_raise(self):
+        """Malformed statements must not raise, and must not mask the real grant beside them.
+
+        A bare string, non-string actions, an action with no colon and a non-mapping Condition all
+        coexist with one genuine unbounded grant, so the FAIL proves the parser survived rather
+        than short-circuited.
+        """
+        policy = _policy(
+            [
+                "not-a-statement",
+                {"Effect": "Allow", "Action": [None, 7], "Resource": [None]},
+                {"Effect": "Allow", "Action": "iam", "Resource": "*"},
+                {"Effect": "Allow", "Action": "iam:PassRole", "Condition": "broken"},
+                _passrole("*", _passed_to(AGENTCORE_PRINCIPAL)),
+            ]
+        )
+        assert _run([policy])[0].status == "FAIL"
+
+    def test_every_policy_gets_one_finding(self):
+        """Three policies get one report each, judged on their own document.
+
+        FAIL, PASS and MANUAL from one run, so a check reporting only the first policy or carrying
+        a verdict between them would not produce this mapping.
+        """
+        policies = [
+            _policy([_passrole("*", _passed_to(AGENTCORE_PRINCIPAL))], name="broad"),
+            _policy(
+                [
+                    _passrole(
+                        EVALUATION_ROLE_PREFIX_ARN, _passed_to(AGENTCORE_PRINCIPAL)
+                    )
+                ],
+                name="scoped",
+            ),
+            _policy([], name="unreadable", document_present=False),
+        ]
+        result = _run(policies)
+        assert {report.resource_id: report.status for report in result} == {
+            "broad": "FAIL",
+            "scoped": "PASS",
+            "unreadable": "MANUAL",
+        }
+
+
+class Test_iam_policy_passrole_to_bedrock_agentcore_restricted_notaction:
+    """NotAction under Effect Allow is IAM-valid and grants everything it does not list."""
+
+    def test_notaction_allow_statement_is_manual(self):
+        """The check reads only Action, so a NotAction statement looked like no grant at all.
+
+        `{"Effect": "Allow", "NotAction": ["s3:*"], "Resource": "*"}` grants every action
+        except S3 -- including the ones this check exists to find -- while carrying no Action
+        key. IAM Access Analyzer ValidatePolicy accepts the shape, so it is reachable in a
+        stored policy. Inverting NotAction correctly means resolving it against the whole
+        action namespace and its interaction with Resource and NotResource, which is more
+        than this check can claim, so it reports the policy as unevaluated instead.
+        """
+        policy = _policy(
+            [{"Effect": "Allow", "NotAction": ["s3:*"], "Resource": "*"}],
+            name="notaction-policy",
+        )
+        result = _run([policy])
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert "NotAction" in result[0].status_extended
diff --git a/tests/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account_test.py b/tests/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account_test.py
new file mode 100644
index 0000000000..e01bdb36ba
--- /dev/null
+++ b/tests/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account_test.py
@@ -0,0 +1,1410 @@
+from unittest import mock
+
+import pytest
+
+from prowler.providers.aws.services.iam.iam_service import Role
+from tests.providers.aws.utils import AWS_REGION_US_EAST_1, set_mocked_aws_provider
+
+AWS_ACCOUNT_ID = "123456789012"
+OTHER_ACCOUNT_ID = "999988887777"
+SERVICE = "sagemaker.amazonaws.com"
+SCOPED_ARN = f"arn:aws:sagemaker:us-east-1:{AWS_ACCOUNT_ID}:training-job/my-job"
+# An S3 bucket ARN has an EMPTY account field, which is why AWS documents needing
+# aws:SourceAccount alongside it.
+BUCKET_ARN = "arn:aws:s3:::amzn-s3-demo-bucket"
+
+CHECK_MODULE = "prowler.providers.aws.services.iam.iam_role_service_trust_restricts_source_to_account.iam_role_service_trust_restricts_source_to_account"
+
+
+def _trust_policy(statements: list) -> dict:
+    """Wrap statements in a trust policy document."""
+    return {"Version": "2012-10-17", "Statement": statements}
+
+
+def _service_statement(condition: dict = None, principal: dict = None) -> dict:
+    """Build an Allow of sts:AssumeRole to a service principal, condition optional.
+
+    Omitting the condition produces the wholly-unconditional shape, which this check treats as
+    out of scope; `principal` overrides the default so a test can build a hybrid principal.
+    """
+    statement = {
+        "Effect": "Allow",
+        "Principal": principal if principal is not None else {"Service": SERVICE},
+        "Action": "sts:AssumeRole",
+    }
+    if condition is not None:
+        statement["Condition"] = condition
+    return statement
+
+
+def _role(name: str, statements: list, arn: str = None, is_service_role: bool = True):
+    """Build a Role carrying the given trust statements.
+
+    `arn` is overridable because the service-linked exclusion is keyed on the ARN path, not on
+    `is_service_role`.
+    """
+    return Role(
+        name=name,
+        arn=arn or f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/{name}",
+        assume_role_policy=_trust_policy(statements),
+        is_service_role=is_service_role,
+        tags=[],
+    )
+
+
+def _run(roles: list):
+    """Execute the check against the given roles and return its reports.
+
+    The roles are model objects, so the reports exercise the check's own trust-policy parsing
+    without any IAM API call.
+    """
+    iam_client = mock.MagicMock()
+    iam_client.roles = roles
+    iam_client.region = AWS_REGION_US_EAST_1
+    iam_client.audited_account = AWS_ACCOUNT_ID
+
+    aws_provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
+    aws_provider.identity.account = AWS_ACCOUNT_ID
+
+    with (
+        mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=aws_provider,
+        ),
+        mock.patch(f"{CHECK_MODULE}.iam_client", new=iam_client),
+    ):
+        from prowler.providers.aws.services.iam.iam_role_service_trust_restricts_source_to_account.iam_role_service_trust_restricts_source_to_account import (
+            iam_role_service_trust_restricts_source_to_account,
+        )
+
+        return iam_role_service_trust_restricts_source_to_account().execute()
+
+
+ACCOUNT_ONLY = {"StringEquals": {"aws:SourceAccount": AWS_ACCOUNT_ID}}
+ARN_ONLY = {"ArnLike": {"aws:SourceArn": SCOPED_ARN}}
+BOTH_SCOPED = {
+    "StringEquals": {"aws:SourceAccount": AWS_ACCOUNT_ID},
+    "ArnLike": {"aws:SourceArn": SCOPED_ARN},
+}
+
+
+class Test_iam_role_service_trust_restricts_source_to_account:
+    def test_no_roles(self):
+        """An account with no roles produces no reports at all."""
+        assert len(_run([])) == 0
+
+    def test_service_linked_role_skipped(self):
+        """A service-linked role is excluded even when its trust policy would FAIL.
+
+        Its trust relationship is managed by the service and cannot be edited, so a finding would
+        not be actionable. The fixture is a failing one, so the zero measures the exclusion rather
+        than the scope gate.
+        """
+        role = _role(
+            "AWSServiceRoleForAmazonSageMaker",
+            [
+                _service_statement(
+                    {"ArnLike": {"aws:SourceArn": "arn:aws:sagemaker:*:*:*"}}
+                )
+            ],
+            arn=f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/aws-service-role/{SERVICE}/AWSServiceRoleForAmazonSageMaker",
+        )
+        assert len(_run([role])) == 0
+
+    def test_role_without_service_principal_skipped(self):
+        """A role trusting only an AWS principal is out of scope: no service is involved."""
+        role = _role(
+            "human-role",
+            [
+                {
+                    "Effect": "Allow",
+                    "Principal": {"AWS": f"arn:aws:iam::{AWS_ACCOUNT_ID}:root"},
+                    "Action": "sts:AssumeRole",
+                }
+            ],
+            is_service_role=False,
+        )
+        assert len(_run([role])) == 0
+
+    def test_non_assume_role_action_skipped(self):
+        """A statement granting only sts:TagSession cannot be used to assume the role, so no finding."""
+        role = _role(
+            "tag-only-role",
+            [
+                {
+                    "Effect": "Allow",
+                    "Principal": {"Service": SERVICE},
+                    "Action": "sts:TagSession",
+                }
+            ],
+        )
+        assert len(_run([role])) == 0
+
+    def test_wildcard_action_that_cannot_reach_assume_role_skipped(self):
+        """A wildcard action whose prefix does not lead to sts:AssumeRole is out of scope.
+
+        `sts:Tag*` ends in a wildcard but expands to no assume-role action, so the statement
+        grants nobody the ability to assume this role and belongs outside the population. The
+        condition is present and enforced but pins no source, so were the statement wrongly
+        admitted the role would FAIL -- which is what makes 0 findings here a real assertion
+        rather than an absence that any exclusion would produce. `sts:TagSession` alone cannot
+        make this claim: it carries no wildcard, so it is excluded by the literal test that
+        precedes the wildcard test and leaves the wildcard branch unexercised.
+        """
+        role = _role(
+            "tag-wildcard-role",
+            [
+                {
+                    "Effect": "Allow",
+                    "Principal": {"Service": SERVICE},
+                    "Action": "sts:Tag*",
+                    "Condition": {
+                        "StringEquals": {"aws:PrincipalOrgID": "o-abcdefghij"}
+                    },
+                }
+            ],
+        )
+        assert len(_run([role])) == 0
+
+    @pytest.mark.parametrize(
+        "action",
+        ["sts:*Role", "sts:A*Role", "sts:Assume?ole", "sts:AssumeRol?", "sts:As*me*le"],
+    )
+    def test_a_wildcard_not_at_the_end_still_grants_assume_role(self, action):
+        """Every IAM spelling that reaches sts:AssumeRole must bring the statement into scope.
+
+        A literal tuple plus a trailing-star test recognised only a star at the END, so each of
+        these granted the action while the statement fell out of the evaluated population and the
+        role produced NO REPORT. The condition here is present and enforced but pins no source, so
+        an admitted statement FAILs -- which is what makes this a verdict assertion rather than an
+        absence any exclusion would produce.
+        """
+        role = _role(
+            "midstar-role",
+            [
+                {
+                    "Effect": "Allow",
+                    "Principal": {"Service": SERVICE},
+                    "Action": action,
+                    "Condition": {
+                        "StringEquals": {"aws:PrincipalOrgID": "o-abcdefghij"}
+                    },
+                }
+            ],
+        )
+        result = _run([role])
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+
+    def test_a_midstar_statement_beside_a_scoped_one_is_not_a_pass(self):
+        """The two-statement form of the miss above, which was an affirmative false PASS.
+
+        The unscoped statement went unseen, leaving only the properly scoped one in the
+        population, so the check asserted the role confines every service principal to an account
+        while a second statement trusted one with no source binding at all. Silence would have
+        been better than this; the full sentence is asserted so the claim cannot be made quietly.
+        """
+        role = _role(
+            "midstar-and-scoped-role",
+            [
+                {
+                    "Effect": "Allow",
+                    "Principal": {"Service": SERVICE},
+                    "Action": "sts:*Role",
+                    "Condition": {
+                        "StringEquals": {"aws:PrincipalOrgID": "o-abcdefghij"}
+                    },
+                },
+                _service_statement(
+                    {"StringEquals": {"aws:SourceAccount": AWS_ACCOUNT_ID}}
+                ),
+            ],
+        )
+        result = _run([role])
+        assert result[0].status == "FAIL"
+        assert result[0].status_extended == (
+            "IAM Role midstar-and-scoped-role trusts an AWS service principal without confining "
+            "the request source, since no condition pins aws:SourceAccount to a literal account "
+            "ID, aws:SourceArn to an ARN carrying one, or aws:SourceOrgID or "
+            "aws:SourceOrgPaths to an organization."
+        )
+
+    @pytest.mark.parametrize(
+        "statement",
+        [
+            {"Effect": "Allow", "Principal": {"Service": SERVICE}, "Action": None},
+            {
+                "Effect": "Allow",
+                "Principal": {"Service": None},
+                "Action": "sts:AssumeRole",
+            },
+        ],
+        ids=["null-action", "null-service"],
+    )
+    def test_a_present_but_null_key_does_not_abort_the_check(self, statement):
+        """A key present with a null value must not raise out of execute().
+
+        `.get("Action", [])` returns None for `"Action": null` rather than the default, and
+        iterating None raises TypeError, which check.py's bare except cannot usefully contain: it
+        discards every finding for the ACCOUNT, not one role. Both sibling checks normalise
+        through _as_list and were immune; this one had two such reads. IAM rejects these documents
+        so the state is unreachable through GetRole -- the assertion is that the check behaves like
+        its siblings, not that a real policy can reach it.
+        """
+        assert len(_run([_role("null-key-role", [statement])])) == 0
+
+    def test_deny_statement_skipped(self):
+        """A Deny statement grants nothing, so a trust policy of only Denies yields no finding."""
+        role = _role(
+            "deny-role",
+            [
+                {
+                    "Effect": "Deny",
+                    "Principal": {"Service": SERVICE},
+                    "Action": "sts:AssumeRole",
+                }
+            ],
+        )
+        assert len(_run([role])) == 0
+
+    def test_empty_trust_policy_skipped(self):
+        """A role whose trust policy is empty has no statement to evaluate."""
+        role = Role(
+            name="empty-role",
+            arn=f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/empty-role",
+            assume_role_policy={},
+            is_service_role=True,
+            tags=[],
+        )
+        assert len(_run([role])) == 0
+
+    # ---------------- SCOPE: the wholly-unconditional posture is not ours ----------------
+
+    def test_plain_service_role_without_any_condition_is_out_of_scope(self):
+        """The fully-unprotected posture belongs to the sibling check, not to this one.
+
+        Reporting it here would make this check a strict superset of
+        iam_role_cross_service_confused_deputy_prevention: measured against 366 real roles,
+        195 of its 199 findings are exactly this shape. Staying silent is what keeps the
+        two checks complementary.
+        """
+        assert len(_run([_role("unscoped-role", [_service_statement()])])) == 0
+
+    def test_deny_statement_brings_the_allow_statement_into_scope(self):
+        """A Deny statement puts the policy outside every existing service-role check.
+
+        Modelled on a real role: upstream's is_service_role requires Effect == "Allow" on
+        EVERY statement, so adding a Deny hardening statement silently removes the role
+        from the sibling's evaluated population. No other check assesses it.
+        """
+        role = _role(
+            "allow-plus-deny-role",
+            [
+                _service_statement(),
+                {
+                    "Effect": "Deny",
+                    "Principal": {"Service": SERVICE},
+                    "Action": "sts:AssumeRole",
+                    "Condition": {"Null": {"aws:RequestTag/Attr": "false"}},
+                },
+            ],
+        )
+        findings = _run([role])
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+
+    def test_non_assume_action_statement_brings_the_policy_into_scope(self):
+        """Modelled on a real role whose second statement grants sts:SetContext.
+
+        is_service_role matches its action list by substring against sts:AssumeRole, sts:*
+        and *, none of which appear in "sts:SetContext", so the whole role drops out of the
+        sibling's population.
+        """
+        role = _role(
+            "assume-plus-setcontext-role",
+            [
+                _service_statement(),
+                {
+                    "Effect": "Allow",
+                    "Principal": {"Service": SERVICE},
+                    "Action": "sts:SetContext",
+                },
+            ],
+        )
+        findings = _run([role])
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+
+    # ---------------- FAIL: the source is not confined to an account ----------------
+
+    def test_source_arn_without_account_field_alone_fails(self):
+        """A bucket ARN pins the resource but not the account -- AWS requires both here."""
+        role = _role(
+            "bucket-arn-role",
+            [_service_statement({"ArnLike": {"aws:SourceArn": BUCKET_ARN}})],
+        )
+        findings = _run([role])
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+
+    def test_source_arn_global_wildcard_fails(self):
+        """aws:SourceArn of "*" pins nothing, so the source is unconfined and it FAILs."""
+        role = _role(
+            "wildcard-arn-role",
+            [_service_statement({"ArnLike": {"aws:SourceArn": "*"}})],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    def test_source_arn_wildcard_account_fails(self):
+        """An ARN whose account field is a wildcard confines the caller to no account, so FAIL."""
+        role = _role(
+            "wildcard-account-arn-role",
+            [
+                _service_statement(
+                    {"ArnLike": {"aws:SourceArn": "arn:aws:sagemaker:*:*:*"}}
+                )
+            ],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    def test_source_arn_list_with_one_accountless_value_fails(self):
+        """One accountless value in a SourceArn list is enough to FAIL.
+
+        Every value must bear an account: IAM satisfies the condition with any one of them, so a
+        scoped sibling does not narrow the accountless entry.
+        """
+        role = _role(
+            "mixed-arn-list-role",
+            [
+                _service_statement(
+                    {"ArnLike": {"aws:SourceArn": [SCOPED_ARN, BUCKET_ARN]}}
+                )
+            ],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    def test_source_account_wildcard_value_fails(self):
+        """aws:SourceAccount of "*" names no account, so it FAILs."""
+        role = _role(
+            "wildcard-account-role",
+            [_service_statement({"StringLike": {"aws:SourceAccount": "*"}})],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    def test_source_account_partial_value_fails(self):
+        """A partial account value such as 1234* is not a literal 12-digit account, so it FAILs."""
+        role = _role(
+            "partial-account-role",
+            [_service_statement({"StringLike": {"aws:SourceAccount": "1234*"}})],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    @pytest.mark.parametrize(
+        "condition",
+        [
+            {
+                "StringEquals": {"aws:SourceAccount": AWS_ACCOUNT_ID},
+                "StringLike": {"aws:SourceAccount": "*"},
+            },
+            {
+                "StringEquals": {"aws:SourceOrgID": "o-abcdefghij"},
+                "StringEqualsIgnoreCase": {"aws:SourceOrgID": "O-ABCDEFGHIJ"},
+            },
+            {
+                "ArnEquals": {"aws:SourceArn": SCOPED_ARN},
+                "ArnLike": {"aws:SourceArn": "arn:aws:sagemaker:*:*:*"},
+            },
+        ],
+        ids=[
+            "account-plus-broad-stringlike",
+            "org-id-pair",
+            "arn-equals-plus-arn-like",
+        ],
+    )
+    def test_a_second_operator_cannot_make_a_pinned_statement_fail(self, condition):
+        """Adding an ANDed operator must never turn a confined statement into a finding.
+
+        Every value was pooled into one list and then required to qualify, so a statement pinning
+        the account with StringEquals FAILed as soon as a broader StringLike sat beside it -- while
+        the same statement with that operator DELETED PASSed. An ANDed operator can only narrow the
+        set of requests that satisfy the statement, so no addition can make it less confined.
+
+        The org-id pair carries no wildcard at all, which shows the cause was the pooling and not
+        the wildcard. It needs the second value differently cased to reproduce, and that is not
+        contrivance: ORGANIZATION_ID_PATTERN is case-sensitive, so an upper-case org ID is exactly
+        what StringEqualsIgnoreCase is FOR, and pooling it beside the exact pin dragged the whole
+        statement down. An identically-cased pair does not reproduce it -- I wrote that fixture
+        first and the control showed it passing before the fix, measuring nothing.
+        """
+        role = _role("pooled-operators-role", [_service_statement(condition)])
+        assert _run([role])[0].status == "PASS"
+
+    def test_two_values_under_one_operator_must_both_qualify(self):
+        """Within a single operator, one unqualified value still FAILs.
+
+        The guard on the fix above. IAM lets a request match ANY value listed under one operator,
+        so a real account ID beside "*" confines nothing -- and it would be easy to fix the pooling
+        by relaxing this from all() to any(), which would clear exactly this policy.
+        """
+        role = _role(
+            "mixed-values-role",
+            [
+                _service_statement(
+                    {"StringLike": {"aws:SourceAccount": [AWS_ACCOUNT_ID, "*"]}}
+                )
+            ],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    def test_if_exists_operator_is_not_a_binding(self):
+        """*IfExists is skipped when the calling service omits the key, so it binds nothing.
+
+        On a plain service role this is out of scope -- an unenforced operator leaves the
+        statement wholly unconstrained, which is the sibling's finding. The assertion that
+        *IfExists is not a binding is made on a role that IS in scope, below.
+        """
+        role = _role(
+            "ifexists-role",
+            [
+                _service_statement(
+                    {"StringEqualsIfExists": {"aws:SourceAccount": AWS_ACCOUNT_ID}}
+                )
+            ],
+        )
+        assert len(_run([role])) == 0
+
+    def test_if_exists_operator_fails_when_in_scope(self):
+        """*IfExists binds nothing, and on an in-scope role that is a FAIL rather than silence.
+
+        The hybrid principal is what puts the role in scope, so this makes the assertion the plain
+        service role above cannot: that an unenforced operator is not a binding.
+        """
+        role = _role(
+            "ifexists-hybrid-role",
+            [
+                _service_statement(
+                    {"StringEqualsIfExists": {"aws:SourceAccount": AWS_ACCOUNT_ID}},
+                    principal={
+                        "Service": SERVICE,
+                        "AWS": f"arn:aws:iam::{OTHER_ACCOUNT_ID}:root",
+                    },
+                )
+            ],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    def test_negated_operator_is_not_a_binding(self):
+        """StringNotEquals inverts the match, so on a plain service role the statement is unconstrained.
+
+        That wholly-unconstrained posture belongs to the sibling check, so this yields no finding.
+        """
+        role = _role(
+            "negated-role",
+            [
+                _service_statement(
+                    {"StringNotEquals": {"aws:SourceAccount": OTHER_ACCOUNT_ID}}
+                )
+            ],
+        )
+        assert len(_run([role])) == 0
+
+    def test_negated_operator_fails_when_in_scope(self):
+        """A negated operator on an in-scope role FAILs rather than passing as a binding."""
+        role = _role(
+            "negated-hybrid-role",
+            [
+                _service_statement(
+                    {"StringNotEquals": {"aws:SourceAccount": OTHER_ACCOUNT_ID}},
+                    principal={
+                        "Service": SERVICE,
+                        "AWS": f"arn:aws:iam::{OTHER_ACCOUNT_ID}:root",
+                    },
+                )
+            ],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    def test_unrelated_condition_key_fails(self):
+        """A condition on an unrelated key is present but confines no source, so it FAILs.
+
+        aws:PrincipalOrgID constrains who calls, not which resource's service call it came from,
+        which is the confused-deputy question.
+        """
+        role = _role(
+            "org-principal-role",
+            [
+                _service_statement(
+                    {"StringEquals": {"aws:PrincipalOrgID": "o-abc123defg"}}
+                )
+            ],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    def test_hybrid_principal_unconditional_fails(self):
+        """The blind spot: a Service principal paired with a cross-account AWS principal."""
+        role = _role(
+            "hybrid-role",
+            [
+                _service_statement(
+                    principal={
+                        "Service": SERVICE,
+                        "AWS": f"arn:aws:iam::{OTHER_ACCOUNT_ID}:root",
+                    }
+                )
+            ],
+        )
+        findings = _run([role])
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+
+    def test_wildcard_action_unconditional_is_out_of_scope(self):
+        """An unconditional Action:* grant is the sibling's most severe finding, not ours."""
+        role = _role(
+            "wildcard-action-role",
+            [{"Effect": "Allow", "Principal": {"Service": SERVICE}, "Action": "*"}],
+        )
+        assert len(_run([role])) == 0
+
+    def test_scoped_statement_beside_an_unconditional_one_is_out_of_scope(self):
+        """Modelled on two real AgentCore gateway roles in the measured account.
+
+        A redundant unconditional statement sitting beside a properly scoped one is a real
+        finding, but it is the sibling's: the unconditional statement has no constraint at
+        all. Both of those roles appear in the sibling's FAIL set.
+        """
+        role = _role(
+            "partially-scoped-role",
+            [_service_statement(BOTH_SCOPED), _service_statement()],
+        )
+        findings = _run([role])
+        assert len(findings) == 1
+        assert findings[0].status == "PASS"
+
+    def test_one_conditioned_but_unbound_statement_of_many_fails(self):
+        """A present-but-insufficient constraint on any one statement is ours to report."""
+        role = _role(
+            "partially-scoped-role",
+            [
+                _service_statement(BOTH_SCOPED),
+                _service_statement({"ArnLike": {"aws:SourceArn": BUCKET_ARN}}),
+            ],
+        )
+        findings = _run([role])
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+
+    # ---------------- PASS: the source is confined to an account ----------------
+
+    def test_source_account_alone_passes(self):
+        """aws:SourceAccount alone confines the caller to one account."""
+        findings = _run(
+            [_role("account-only-role", [_service_statement(ACCOUNT_ONLY)])]
+        )
+        assert len(findings) == 1
+        assert findings[0].status == "PASS"
+        assert "confines every AWS service principal" in findings[0].status_extended
+
+    def test_account_bearing_source_arn_alone_passes(self):
+        """AWS calls a full aws:SourceArn the most effective protection -- no SourceAccount needed."""
+        findings = _run([_role("arn-only-role", [_service_statement(ARN_ONLY)])])
+        assert len(findings) == 1
+        assert findings[0].status == "PASS"
+
+    def test_account_bearing_source_arn_with_arn_equals_passes(self):
+        """ArnEquals is an enforcing operator, so an account-bearing SourceArn under it PASSes."""
+        role = _role(
+            "arn-equals-role",
+            [_service_statement({"ArnEquals": {"aws:SourceArn": SCOPED_ARN}})],
+        )
+        assert _run([role])[0].status == "PASS"
+
+    def test_account_bearing_source_arn_with_resource_wildcard_passes(self):
+        """arn:...:<account>:* still confines the caller to that account."""
+        role = _role(
+            "arn-resource-wildcard-role",
+            [
+                _service_statement(
+                    {
+                        "ArnLike": {
+                            "aws:SourceArn": f"arn:aws:sagemaker:us-east-1:{AWS_ACCOUNT_ID}:*"
+                        }
+                    }
+                )
+            ],
+        )
+        assert _run([role])[0].status == "PASS"
+
+    def test_bucket_arn_with_source_account_passes(self):
+        """An accountless bucket ARN paired with aws:SourceAccount PASSes.
+
+        This is AWS's documented remedy for ARNs that carry no account field: the two keys together
+        confine the source even though neither does alone.
+        """
+        role = _role(
+            "bucket-arn-scoped-role",
+            [
+                _service_statement(
+                    {
+                        "ArnLike": {"aws:SourceArn": BUCKET_ARN},
+                        "StringEquals": {"aws:SourceAccount": AWS_ACCOUNT_ID},
+                    }
+                )
+            ],
+        )
+        assert _run([role])[0].status == "PASS"
+
+    def test_source_account_with_a_same_key_null_guard_passes(self):
+        """AWS's prescribed pairing -- a comparison plus Null:"false" on the same key -- must PASS.
+
+        `Null` is a presence test, not a comparison, so it pins no value. Reading it as one put the
+        literal string "false" beside a real account ID, and _pins_source_account requires EVERY
+        value to be a 12-digit account, so the shape test failed and the role FAILed. That made the
+        more secure policy score worse than the same policy without the guard, which is the worst
+        possible direction for a check to be wrong in.
+        """
+        role = _role(
+            "account-with-null-guard",
+            [
+                _service_statement(
+                    {
+                        "StringEquals": {"aws:SourceAccount": AWS_ACCOUNT_ID},
+                        "Null": {"aws:SourceAccount": "false"},
+                    }
+                )
+            ],
+        )
+        assert _run([role])[0].status == "PASS"
+
+    def test_null_guard_alone_pins_nothing_and_fails(self):
+        """A Null guard with no comparison beside it confines the source to nothing, so FAIL.
+
+        The guard forces the key to be present; it says nothing about which account. Crediting it
+        would clear a statement bound to no account at all, and the guard's own marker value is not
+        an account ID.
+        """
+        role = _role(
+            "null-only",
+            [_service_statement({"Null": {"aws:SourceAccount": "false"}})],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    def test_for_all_values_without_a_null_guard_fails(self):
+        """Unguarded ForAllValues is vacuous on an Allow, so it must not be credited.
+
+        AWS documents that it "returns true if there are no context keys in the request", with an
+        explicit warning against pairing it with an Allow effect -- and this check evaluates Allow
+        statements only, so that is the reachable case. A caller who simply omits aws:SourceAccount
+        satisfies it, which is the same vacuity *IfExists has; both are credited only under the
+        Null:"false" guard, and neither without it.
+        """
+        role = _role(
+            "for-all-values-unguarded",
+            [
+                _service_statement(
+                    {"ForAllValues:StringEquals": {"aws:SourceAccount": AWS_ACCOUNT_ID}}
+                )
+            ],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    def test_for_all_values_with_a_same_key_null_guard_passes(self):
+        """ForAllValues paired with Null:"false" on the SAME key is not vacuous, so it PASSes.
+
+        The guard forces the key to be present, which removes the no-context-keys escape. Refusing
+        the guarded spelling outright would be wrong rather than merely strict: aws:SourceOrgPaths is
+        multivalued, so a set operator is the only correct way to write a binding for it. The guard
+        must be on the same key -- one on a different key leaves this one vacuous.
+        """
+        role = _role(
+            "for-all-values-guarded",
+            [
+                _service_statement(
+                    {
+                        "ForAllValues:StringEquals": {
+                            "aws:SourceAccount": AWS_ACCOUNT_ID
+                        },
+                        "Null": {"aws:SourceAccount": "false"},
+                    }
+                )
+            ],
+        )
+        assert _run([role])[0].status == "PASS"
+
+    def test_for_all_values_with_a_null_guard_on_a_different_key_fails(self):
+        """A Null guard rescues only the key it names, so a guard elsewhere leaves this one vacuous.
+
+        The guard on aws:SourceArn forces THAT key to be present; it says nothing about
+        aws:SourceAccount, so the ForAllValues binding on the account is still satisfied by a caller
+        who simply omits it. The same-key test above cannot make this assertion: it uses one key for
+        both, so a rule requiring a guard on ANY key would pass it just as happily.
+        """
+        role = _role(
+            "for-all-values-guard-on-another-key",
+            [
+                _service_statement(
+                    {
+                        "ForAllValues:StringEquals": {
+                            "aws:SourceAccount": AWS_ACCOUNT_ID
+                        },
+                        "Null": {"aws:SourceArn": "false"},
+                    }
+                )
+            ],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    @pytest.mark.parametrize(
+        "guard",
+        [["true", "false"], ["false", "true"]],
+        ids=["ors-to-always-true", "ors-to-always-true-reversed"],
+    )
+    def test_a_null_guard_list_containing_true_rescues_nothing(self, guard):
+        """A Null list containing "true" binds NOTHING, because IAM ORs the values in one operator.
+
+        `Null: {aws:SourceAccount: ["true","false"]}` reads as "key absent OR key present", which is
+        always satisfied, so it cannot force the key to be present and cannot rescue the ForAllValues
+        binding beside it. Reading the list with `any` credited it anyway, which meant ADDING the word
+        "true" to a guard list moved the verdict from FAIL to PASS -- a strictly weaker policy scoring
+        better, which is the same inversion this check was already fixed for once.
+
+        Measured on IAM's own evaluator with the key omitted: `allowed` for both orderings,
+        indistinguishable from carrying no Null block at all, against `implicitDeny` for "false",
+        ["false"] and ["false","false"]. Reachable on THIS surface specifically: create_role stores
+        ["true","false"] and get_role returns it as a list, even though a single-element ["false"] is
+        collapsed to the scalar "false" here -- which is why the multi-value spelling is the one that
+        matters and the single-value one cannot be tested end-to-end.
+
+        Both orderings are pinned because a fix reading only the first element would satisfy one of
+        them and not the other.
+        """
+        role = _role(
+            "null-guard-list-with-true",
+            [
+                _service_statement(
+                    {
+                        "ForAllValues:StringEquals": {
+                            "aws:SourceAccount": AWS_ACCOUNT_ID
+                        },
+                        "Null": {"aws:SourceAccount": guard},
+                    }
+                )
+            ],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    def test_null_guard_demanding_the_key_be_absent_does_not_rescue_for_all_values(
+        self,
+    ):
+        """`Null: "true"` demands the key be ABSENT, which makes ForAllValues vacuous by design.
+
+        Only `"false"` forces presence. Accepting any value as a guard would read this policy -- which
+        requires aws:SourceAccount NOT to be supplied -- as though it required the opposite, and the
+        two guarded tests above use `"false"` so neither distinguishes the values.
+        """
+        role = _role(
+            "for-all-values-null-true",
+            [
+                _service_statement(
+                    {
+                        "ForAllValues:StringEquals": {
+                            "aws:SourceAccount": AWS_ACCOUNT_ID
+                        },
+                        "Null": {"aws:SourceAccount": "true"},
+                    }
+                )
+            ],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    @pytest.mark.parametrize(
+        "condition",
+        [
+            {
+                "StringEqualsIfExists": {"aws:SourceAccount": AWS_ACCOUNT_ID},
+                "Null": {"aws:SourceAccount": "false"},
+            },
+            {
+                "ArnLikeIfExists": {"aws:SourceArn": SCOPED_ARN},
+                "Null": {"aws:SourceArn": "false"},
+            },
+            {
+                "ForAllValues:StringLikeIfExists": {
+                    "aws:SourceAccount": AWS_ACCOUNT_ID
+                },
+                "Null": {"aws:SourceAccount": "false"},
+            },
+        ],
+        ids=["string-equals", "arn-like", "for-all-values-string-like"],
+    )
+    def test_a_guarded_if_exists_operator_is_a_binding(self, condition):
+        """A guarded *IfExists must PASS, exactly as a guarded ForAllValues does.
+
+        *IfExists and ForAllValues are two spellings of one trap -- a caller who omits the key
+        satisfies both -- and `Null: "false"` forces the key to be present, which defeats the
+        vacuity identically in either. Rescuing only ForAllValues meant these three FAILed while
+        `ForAllValues:StringEquals` with the identical guard PASSed. That asymmetry punished
+        policies for the operator they chose rather than for what they constrain, and
+        secretsmanager_has_restrictive_resource_policy already accepts IfExists paired with Null.
+        """
+        role = _role("guarded-ifexists", [_service_statement(condition)])
+        assert _run([role])[0].status == "PASS"
+
+    @pytest.mark.parametrize(
+        "condition",
+        [
+            {
+                "StringEqualsIfExists": {"aws:SourceAccount": AWS_ACCOUNT_ID},
+                "Null": {"aws:SourceArn": "false"},
+            },
+            {
+                "StringEqualsIfExists": {"aws:SourceAccount": AWS_ACCOUNT_ID},
+                "Null": {"aws:SourceAccount": "true"},
+            },
+        ],
+        ids=["guard-on-a-different-key", "guard-demanding-absence"],
+    )
+    def test_an_if_exists_operator_needs_the_same_guard_for_all_values_needs(
+        self, condition
+    ):
+        """The rescue must require the SAME guard, not merely the presence of a Null block.
+
+        A guard on a different key leaves aws:SourceAccount omissible, and `Null: "true"` demands
+        the key be absent, which makes the operator vacuous by design rather than rescuing it. Both
+        mirror the ForAllValues cases above, so the two families are now pinned to one rule in both
+        directions -- without these, "credit a guarded IfExists" could be satisfied by any Null
+        block anywhere in the statement.
+        """
+        role = _role("ifexists-bad-guard", [_service_statement(condition)])
+        assert _run([role])[0].status == "FAIL"
+
+    @pytest.mark.parametrize(
+        "condition",
+        [
+            {"StringLike": {"aws:SourceAccount": "1234*"}},
+            {"ForAllValues:StringEquals": {"aws:SourceAccount": AWS_ACCOUNT_ID}},
+            {"Null": {"aws:SourceAccount": "false"}},
+        ],
+        ids=["partial-value", "unguarded-for-all-values", "null-guard-only"],
+    )
+    def test_the_fail_message_does_not_claim_the_key_is_unset(self, condition):
+        """The FAIL sentence must describe what was measured, on inputs that SET the key.
+
+        All three of these set aws:SourceAccount, so the previous wording -- "it sets neither
+        aws:SourceAccount nor an account-bearing aws:SourceArn" -- was false of every one of them.
+        What the code measures is that no condition PINS the key to a literal value of the right
+        shape, which is weaker and true. The string is asserted in full because a status_extended
+        change is invisible to a suite that only checks the status, and it ships in every CSV and
+        OCSF row.
+        """
+        role = _role("fail-wording", [_service_statement(condition)])
+        result = _run([role])
+        assert result[0].status == "FAIL"
+        assert result[0].status_extended == (
+            "IAM Role fail-wording trusts an AWS service principal without confining the request "
+            "source, since no condition pins aws:SourceAccount to a literal account ID, "
+            "aws:SourceArn to an ARN carrying one, or aws:SourceOrgID or aws:SourceOrgPaths to an "
+            "organization."
+        )
+
+    @pytest.mark.parametrize(
+        "condition",
+        [
+            {"StringEquals": {"aws:SourceAccount": AWS_ACCOUNT_ID}},
+            {"ArnLike": {"aws:SourceArn": SCOPED_ARN}},
+        ],
+        ids=["source-account", "account-bearing-source-arn"],
+    )
+    def test_the_account_pass_message_is_used_for_account_scoping(self, condition):
+        """An account-confined PASS keeps the account sentence."""
+        role = _role("account-pass", [_service_statement(condition)])
+        result = _run([role])
+        assert result[0].status == "PASS"
+        assert result[0].status_extended == (
+            "IAM Role account-pass confines every AWS service principal in its trust policy to a "
+            "specific account."
+        )
+
+    @pytest.mark.parametrize(
+        "condition",
+        [
+            {"StringEquals": {"aws:SourceOrgID": "o-abcdefghij"}},
+            {
+                "StringLike": {
+                    "aws:SourceOrgPaths": "o-abcdefghij/r-abc1/ou-abc1-12345678/"
+                }
+            },
+        ],
+        ids=["source-org-id", "source-org-paths"],
+    )
+    def test_an_org_scoped_pass_does_not_claim_a_specific_account(self, condition):
+        """An organization-confined PASS must NOT claim confinement to a specific account.
+
+        Both of these reach PASS through _pins_source_organization, and an organization may hold
+        hundreds of accounts. The account sentence fired verbatim on them, telling an operator
+        something categorically stronger than the check verified -- and over-claiming on a PASS is
+        the worse direction, because a PASS is filed as clean and nobody looks again.
+        """
+        role = _role("org-pass", [_service_statement(condition)])
+        result = _run([role])
+        assert result[0].status == "PASS"
+        assert result[0].status_extended == (
+            "IAM Role org-pass confines every AWS service principal in its trust policy, but at "
+            "least one statement is scoped to an organization rather than to a single account, so "
+            "the trusted source may be any account within it."
+        )
+        assert "to a specific account" not in result[0].status_extended
+
+    @pytest.mark.parametrize(
+        "value",
+        ["*", "o-abcdefghij", "not-an-ou-path"],
+        ids=["star", "org-id-not-a-path", "junk"],
+    )
+    def test_a_source_org_paths_value_that_is_not_an_ou_path_fails(self, value):
+        """aws:SourceOrgPaths must hold an OU PATH, so these three must FAIL.
+
+        Replacing the org-paths arm's shape test with `bool(org_paths)` left the whole suite green
+        while a statement carrying `aws:SourceOrgPaths: "*"` reported PASS -- the same false PASS the
+        o-* negative already prevents for aws:SourceOrgID, unpinned on this arm. The middle value is
+        the discriminating one: a bare org ID is a valid ORG id and not a valid org PATH, so it
+        separates the path pattern from the id pattern rather than merely rejecting junk.
+        """
+        role = _role(
+            "org-paths-shape",
+            [
+                _service_statement(
+                    {"ForAnyValue:StringLike": {"aws:SourceOrgPaths": value}}
+                )
+            ],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    def test_both_keys_pass(self):
+        """Both source keys present and well formed PASSes."""
+        findings = _run([_role("both-role", [_service_statement(BOTH_SCOPED)])])
+        assert len(findings) == 1
+        assert findings[0].status == "PASS"
+
+    def test_string_like_source_account_passes(self):
+        """StringLike carrying a literal 12-digit account still pins it, so PASS.
+
+        The operator permits wildcards but this value uses none, so the account is confined.
+        """
+        role = _role(
+            "string-like-role",
+            [_service_statement({"StringLike": {"aws:SourceAccount": AWS_ACCOUNT_ID}})],
+        )
+        assert _run([role])[0].status == "PASS"
+
+    def test_lowercase_condition_keys_pass(self):
+        """Condition key names are case-insensitive in IAM."""
+        role = _role(
+            "lowercase-role",
+            [
+                _service_statement(
+                    {"StringEquals": {"aws:sourceaccount": AWS_ACCOUNT_ID}}
+                )
+            ],
+        )
+        assert _run([role])[0].status == "PASS"
+
+    def test_source_account_list_passes(self):
+        """A list of literal account IDs confines the source to those accounts, so PASS."""
+        role = _role(
+            "account-list-role",
+            [
+                _service_statement(
+                    {
+                        "StringEquals": {
+                            "aws:SourceAccount": [AWS_ACCOUNT_ID, OTHER_ACCOUNT_ID]
+                        }
+                    }
+                )
+            ],
+        )
+        assert _run([role])[0].status == "PASS"
+
+    def test_source_org_id_passes(self):
+        """AWS documents aws:SourceOrgID as an alternative source key."""
+        role = _role(
+            "org-id-role",
+            [_service_statement({"StringEquals": {"aws:SourceOrgID": "o-a1b2c3d4e5"}})],
+        )
+        assert _run([role])[0].status == "PASS"
+
+    def test_source_org_paths_passes(self):
+        """aws:SourceOrgPaths under ForAnyValue:StringLike confines the source to an OU path, so PASS."""
+        role = _role(
+            "org-paths-role",
+            [
+                _service_statement(
+                    {
+                        "ForAnyValue:StringLike": {
+                            "aws:SourceOrgPaths": "o-a1b2c3d4e5/r-f6g7h8i9j0/ou-f6g7-11112222/*"
+                        }
+                    }
+                )
+            ],
+        )
+        assert _run([role])[0].status == "PASS"
+
+    def test_source_org_id_wildcard_fails(self):
+        """aws:SourceOrgID of "o-*" matches every organization, so it confines nothing and FAILs.
+
+        The organization keys are accepted only when the value is a real identifier; accepting the
+        key's presence alone would clear a statement bound to nothing.
+        """
+        role = _role(
+            "org-id-wildcard-role",
+            [_service_statement({"StringLike": {"aws:SourceOrgID": "o-*"}})],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    def test_external_id_does_not_bind_the_source(self):
+        """A concrete sts:ExternalId is not a cross-service mitigation.
+
+        AWS documents the external ID for third-party access only -- it is a value the
+        third party supplies -- and the cross-service guidance names aws:SourceArn and
+        aws:SourceAccount. An AWS service passes neither an external ID nor anything that
+        satisfies this condition, so crediting it would accept a control the calling
+        service can never meet. The statement is in scope because a condition is present.
+        """
+        role = _role(
+            "external-id-role",
+            [
+                _service_statement(
+                    {"StringEquals": {"sts:ExternalId": "unique-tenant-id"}}
+                )
+            ],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    def test_hybrid_principal_scoped_passes(self):
+        """A hybrid principal is in scope, and PASSes when the source IS confined.
+
+        So the hybrid shape is not treated as a finding in itself -- only as one no other check
+        evaluates.
+        """
+        role = _role(
+            "hybrid-scoped-role",
+            [
+                _service_statement(
+                    ACCOUNT_ONLY,
+                    principal={
+                        "Service": SERVICE,
+                        "AWS": f"arn:aws:iam::{OTHER_ACCOUNT_ID}:root",
+                    },
+                )
+            ],
+        )
+        assert _run([role])[0].status == "PASS"
+
+    def test_service_principal_list_all_scoped_passes(self):
+        """Several service principals in one statement PASS when the shared condition confines them."""
+        role = _role(
+            "service-list-role",
+            [
+                _service_statement(
+                    ACCOUNT_ONLY,
+                    principal={"Service": [SERVICE, "events.amazonaws.com"]},
+                )
+            ],
+        )
+        assert _run([role])[0].status == "PASS"
+
+    def test_service_principal_list_unscoped_fails(self):
+        """Several service principals under an unconfining condition FAIL together.
+
+        The condition applies to the whole statement, so every principal in the list inherits it.
+        """
+        role = _role(
+            "service-list-unscoped-role",
+            [
+                _service_statement(
+                    {"ArnLike": {"aws:SourceArn": BUCKET_ARN}},
+                    principal={"Service": [SERVICE, "events.amazonaws.com"]},
+                )
+            ],
+        )
+        assert _run([role])[0].status == "FAIL"
+
+    def test_single_statement_dict_is_handled(self):
+        """A Statement given as a single dict rather than a list is still evaluated.
+
+        IAM accepts both shapes, so a check reading only lists would silently skip the role.
+        """
+        role = Role(
+            name="single-statement-role",
+            arn=f"arn:aws:iam::{AWS_ACCOUNT_ID}:role/single-statement-role",
+            assume_role_policy={
+                "Version": "2012-10-17",
+                "Statement": _service_statement(
+                    {"ArnLike": {"aws:SourceArn": BUCKET_ARN}}
+                ),
+            },
+            is_service_role=True,
+            tags=[],
+        )
+        findings = _run([role])
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+
+    def test_mixed_action_list_containing_assume_role_is_in_scope(self):
+        """One assume-role action among others still brings the statement into scope.
+
+        _grants_assume_role uses any(), not all(): a statement granting
+        ["sts:AssumeRole", "s3:GetObject"] does grant assume-role. Under all() the statement
+        is skipped entirely and an unbound source goes unreported. No other fixture supplies
+        a multi-action list mixing an assume-role action with an unrelated one.
+        """
+        role = _role(
+            "mixed-action",
+            [
+                {
+                    "Effect": "Allow",
+                    "Principal": {"Service": SERVICE},
+                    "Action": ["sts:AssumeRole", "s3:GetObject"],
+                    "Condition": {"StringEquals": {"sts:ExternalId": "abc"}},
+                }
+            ],
+        )
+        result = _run([role])
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+
+    def test_service_list_with_an_empty_entry_is_still_service_trust(self):
+        """A service list containing an empty string still trusts the real service.
+
+        _trusts_service_principal uses any(): one usable entry is enough. Under all() the
+        empty string makes the whole list falsy, the statement stops counting as service
+        trust, and the unbound source goes unreported.
+        """
+        role = _role(
+            "empty-service-entry",
+            [
+                _service_statement(
+                    {"StringEquals": {"sts:ExternalId": "abc"}},
+                    principal={"Service": [SERVICE, ""]},
+                )
+            ],
+        )
+        result = _run([role])
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+
+    def test_non_string_service_principal_is_not_service_trust(self):
+        """A malformed Service entry is not a service principal.
+
+        The predicate is `isinstance(service, str) and service`. Under `or` a non-string
+        truthy value -- arbitrary JSON reaches this from a real account -- would be read as
+        a trusted service and the role reported, inventing a finding from malformed input.
+        """
+        role = _role(
+            "non-string-service",
+            [
+                _service_statement(
+                    {"StringEquals": {"sts:ExternalId": "abc"}},
+                    principal={"Service": [{"unexpected": "object"}]},
+                )
+            ],
+        )
+        assert _run([role]) == []
+
+    def test_empty_condition_block_is_wholly_unconditional(self):
+        """`{"StringEquals": {}}` pins nothing, so the statement is out of scope.
+
+        _has_enforced_condition tests the block's keys with any(): an empty block yields
+        False, which is correct -- a statement with no enforced key is wholly unconditional
+        and belongs to iam_role_cross_service_confused_deputy_prevention, not here. Under
+        all() an empty block reports True (all() of nothing is True) and this check invents
+        a FAIL for a statement it should never have evaluated.
+        """
+        role = _role(
+            "empty-condition-block", [_service_statement({"StringEquals": {}})]
+        )
+        assert _run([role]) == []
+
+    def test_report_fields(self):
+        """The report carries the role's id, ARN, region and tags.
+
+        Pinned once here, since every other case in this file asserts only the status.
+        """
+        role = _role(
+            "reported-role",
+            [_service_statement({"ArnLike": {"aws:SourceArn": BUCKET_ARN}})],
+        )
+        finding = _run([role])[0]
+        assert finding.resource_id == "reported-role"
+        assert finding.resource_arn == role.arn
+        assert finding.region == AWS_REGION_US_EAST_1
+        assert finding.resource_tags == []
+
+    def test_every_role_gets_one_finding(self):
+        """Three roles get one report each, judged on their own trust policy.
+
+        PASS, FAIL and MANUAL out of a single run. Without this, a check that reported only the
+        first role in the account would satisfy every other case in this file, because each one
+        passes exactly one role: an account's roles are its most numerous IAM resource, so the
+        silently-unreported remainder would be the whole estate bar one.
+        """
+        roles = [
+            _role("scoped", [_service_statement(ACCOUNT_ONLY)]),
+            _role(
+                "unbound",
+                [_service_statement({"ArnLike": {"aws:SourceArn": BUCKET_ARN}})],
+            ),
+            _role(
+                "notaction",
+                [
+                    {
+                        "Effect": "Allow",
+                        "Principal": {"Service": SERVICE},
+                        "NotAction": "s3:*",
+                    }
+                ],
+            ),
+        ]
+        result = _run(roles)
+        assert {report.resource_id: report.status for report in result} == {
+            "scoped": "PASS",
+            "unbound": "FAIL",
+            "notaction": "MANUAL",
+        }
+
+
+class Test_differential_against_existing_sibling_check:
+    """Pins the two states iam_role_cross_service_confused_deputy_prevention leaves unreported.
+
+    These assertions describe upstream behaviour, so they hold on master too -- they document
+    the gap this check closes rather than the new check's own logic.
+    """
+
+    def test_sibling_passes_a_source_arn_that_binds_no_account(self):
+        """The sibling reads an accountless SourceArn as protected while this check FAILs it.
+
+        Both halves are asserted in one test, so the gap is demonstrated rather than described. The
+        is_policy_public assertion describes upstream behaviour and holds on master too.
+        """
+        from prowler.providers.aws.services.iam.lib.policy import is_policy_public
+
+        policy = _trust_policy(
+            [_service_statement({"ArnLike": {"aws:SourceArn": BUCKET_ARN}})]
+        )
+        # The sibling reads this as protected (not public) and reports PASS...
+        assert (
+            is_policy_public(
+                policy,
+                AWS_ACCOUNT_ID,
+                check_cross_service_confused_deputy=True,
+                not_allowed_actions=["sts:AssumeRole", "sts:*"],
+            )
+            is False
+        )
+        # ...while the bucket ARN binds no account, so this check reports FAIL.
+        role = _role("bucket-arn-role", policy["Statement"])
+        assert _run([role])[0].status == "FAIL"
+
+    def test_sibling_skips_a_hybrid_principal_entirely(self):
+        """The sibling's is_service_role gate rejects hybrid principals, so it reports nothing.
+
+        This check reports the unconfined cross-account assume path instead, which is the second
+        state the sibling leaves unreported.
+        """
+        from prowler.providers.aws.services.iam.iam_service import is_service_role
+
+        hybrid_statement = _service_statement(
+            principal={
+                "Service": SERVICE,
+                "AWS": f"arn:aws:iam::{OTHER_ACCOUNT_ID}:root",
+            }
+        )
+        # is_service_role gates the sibling, and it rejects hybrid principals, so the
+        # sibling emits no finding for this role at all...
+        assert (
+            is_service_role(
+                {"AssumeRolePolicyDocument": _trust_policy([hybrid_statement])}
+            )
+            is False
+        )
+        # ...while this check reports the unconfined cross-account assume path.
+        role = _role("hybrid-role", [hybrid_statement])
+        findings = _run([role])
+        assert len(findings) == 1
+        assert findings[0].status == "FAIL"
+
+
+class Test_trust_unevaluated_and_wildcard_shapes:
+    """Shapes IAM accepts that the check previously read as granting nothing.
+
+    Each one made a role disappear from the population or PASS on an absence, and each is
+    reachable: IAM Access Analyzer ValidatePolicy accepts all three.
+    """
+
+    def test_assume_role_action_wildcard_is_not_a_pass(self):
+        """sts:Assume* reaches AssumeRole while matching no literal in ASSUME_ROLE_ACTIONS.
+
+        An exact membership test dropped the statement from the population, so the role
+        PASSed claiming it confines every AWS service principal -- on the strength of a
+        statement the check never read.
+        """
+        # A non-confining condition puts the statement in scope. This check deliberately
+        # judges a constraint that IS present rather than its absence -- a wholly
+        # unconditional trust is iam_role_cross_service_confused_deputy_prevention's.
+        statement = {
+            "Effect": "Allow",
+            "Principal": {"Service": SERVICE},
+            "Action": "sts:Assume*",
+            "Condition": {"ArnLike": {"aws:SourceArn": "*"}},
+        }
+        result = _run([_role("wildcard-action", [statement])])
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+
+    def test_leading_whitespace_action_is_not_a_pass(self):
+        """IAM tolerates surrounding whitespace; both sibling checks in this PR strip it."""
+        # A non-confining condition puts the statement in scope. This check deliberately
+        # judges a constraint that IS present rather than its absence -- a wholly
+        # unconditional trust is iam_role_cross_service_confused_deputy_prevention's.
+        statement = {
+            "Effect": "Allow",
+            "Principal": {"Service": SERVICE},
+            "Action": " sts:AssumeRole",
+            "Condition": {"ArnLike": {"aws:SourceArn": "*"}},
+        }
+        result = _run([_role("padded-action", [statement])])
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+
+    def test_star_principal_is_not_silently_skipped(self):
+        """Principal "*" is a string, not a mapping, and trusts every principal there is.
+
+        The isinstance guard returned False for it, so the role produced no finding at all --
+        neither FAIL nor MANUAL -- which is the worst of the three outcomes.
+        """
+        statement = {
+            "Effect": "Allow",
+            "Principal": "*",
+            "Action": "sts:AssumeRole",
+        }
+        result = _run([_role("star-principal", [statement])])
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+
+    def test_notaction_trust_statement_is_manual(self):
+        """NotAction under Allow can permit sts:AssumeRole while carrying no Action key.
+
+        _grants_assume_role reads only Action, so the statement dropped out and the role
+        vanished. Inverting NotAction is more than this check can claim, so it says so.
+        """
+        statement = {
+            "Effect": "Allow",
+            "Principal": {"Service": SERVICE},
+            "NotAction": "s3:*",
+        }
+        result = _run([_role("notaction-trust", [statement])])
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert "NotAction" in result[0].status_extended
diff --git a/tests/providers/aws/services/iam/lib/policy_test.py b/tests/providers/aws/services/iam/lib/policy_test.py
index bf64ff9211..d2c4a4aecc 100644
--- a/tests/providers/aws/services/iam/lib/policy_test.py
+++ b/tests/providers/aws/services/iam/lib/policy_test.py
@@ -8,6 +8,7 @@ from prowler.providers.aws.services.iam.lib.policy import (
     has_codebuild_trusted_principal,
     has_public_principal,
     has_restrictive_source_arn_condition,
+    iam_pattern_matches,
     is_codebuild_using_allowed_github_org,
     is_condition_block_restrictive,
     is_condition_block_restrictive_organization,
@@ -3062,3 +3063,102 @@ class Test_has_restrictive_source_arn_condition:
             },
         }
         assert has_restrictive_source_arn_condition(statement) is True
+
+
+class Test_iam_pattern_matches:
+    """IAM wildcard matching: only * and ? are metacharacters, and it must stay linear."""
+
+    @pytest.mark.parametrize(
+        "pattern,value,expected",
+        [
+            ("bedrock-agentcore", "bedrock-agentcore", True),
+            ("bedrock-*", "bedrock-agentcore", True),
+            ("*-agentcore", "bedrock-agentcore", True),
+            ("*agentcore*", "bedrock-agentcore", True),
+            ("bedrock-agentcor?", "bedrock-agentcore", True),
+            ("bedrock?agentcore", "bedrock-agentcore", True),
+            ("*", "bedrock-agentcore", True),
+            ("**", "bedrock-agentcore", True),
+            ("s3", "bedrock-agentcore", False),
+            ("bedrock", "bedrock-agentcore", False),
+            ("bedrock-agentcore?", "bedrock-agentcore", False),
+            ("", "bedrock-agentcore", False),
+            ("*", "", True),
+            ("", "", True),
+            ("?", "", False),
+            ("  bedrock-*  ", "bedrock-agentcore", True),
+            ("BEDROCK-AGENTCORE", "bedrock-agentcore", True),
+            ("bedrock-agentcore", "BEDROCK-AGENTCORE", True),
+            ("a.c", "abc", False),
+            ("[bs]3", "b3", False),
+            ("[bs]3", "[bs]3", True),
+        ],
+    )
+    def test_semantics(self, pattern, value, expected):
+        """`*` and `?` are the only metacharacters; everything else is literal.
+
+        `a.c` against `abc` must be False or a regex dot has leaked in, and `[bs]3` against `b3`
+        must be False or bracket classes have -- the latter being the false PASS that a `fnmatch`
+        implementation shipped earlier in this campaign, where a Deny of
+        `agent-registry:[Dd]eleteRegistry` denied nothing while appearing to deny everything.
+        """
+        assert iam_pattern_matches(pattern, value) is expected
+
+    def test_adversarial_pattern_stays_fast(self):
+        """A wildcard-dense pattern must not blow up: this is a DoS guard, not a style preference.
+
+        Leading wildcards, a literal that cannot occur in the value, then more wildcards is the
+        shape that forces a backtracking engine to try every distribution of the value's characters
+        across the star groups. Translating to a regex and matching took 2287 ms on exactly this
+        31-character pattern, growing about sevenfold per added wildcard pair, and a hang raises
+        nothing so `check.py`'s bare `except Exception` cannot catch it -- the account's findings are
+        discarded in silence. Policy values reach this from the account and managed policy documents
+        allow 6144 characters.
+
+        The budget is deliberately loose: the linear form measures ~0.006 ms, so a 0.5 s ceiling
+        cannot flake under load while still failing hard on a regex reimplementation.
+        """
+        import time
+
+        pattern = "*" * 14 + "zzz" + "*" * 14
+        assert len(pattern) == 31
+        start = time.perf_counter()
+        assert iam_pattern_matches(pattern, "bedrock-agentcore") is False
+        assert time.perf_counter() - start < 0.5
+
+    @pytest.mark.parametrize(
+        "subject",
+        [
+            "bedrock-agentcore",
+            "iam",
+            "PassRole",
+            "GetWorkloadAccessTokenForUserId",
+            "bedrock-agentcore.amazonaws.com",
+            "workload-identity-directory/default/workload-identity/another-workload",
+        ],
+    )
+    def test_every_call_site_subject_stays_fast(self, subject):
+        """Each subject the iam checks match against must be fast, not just one of them.
+
+        These six are every distinct value passed as the second argument across the eight call sites
+        in the two AgentCore policy checks -- an Action's service and operation field, an ARN's
+        service and resource field, and an iam:PassedToService condition value. Probing once against
+        a single constant would not do: cost rises with the subject's length as well as the pattern's,
+        so the 3-character `iam` is cheap enough to come back clean while the 17- and 70-character
+        subjects were taking seconds.
+        """
+        import time
+
+        pattern = "*" * 14 + "zzz" + "*" * 14
+        start = time.perf_counter()
+        iam_pattern_matches(pattern, subject)
+        assert time.perf_counter() - start < 0.5
+
+    def test_long_pattern_stays_fast(self):
+        """Cost must grow with the product of the lengths, not as a power of them."""
+        import time
+
+        pattern = "*" * 2000 + "zzz" + "*" * 2000
+        start = time.perf_counter()
+        assert iam_pattern_matches(pattern, "bedrock-agentcore.amazonaws.com") is False
+        assert time.perf_counter() - start < 0.5

From e9121f5f1adbdb02814b2ad8295294c8598540e2 Mon Sep 17 00:00:00 2001
From: Jonathan Nguyen <87379568+tamg-aws@users.noreply.github.com>
Date: Tue, 1 Sep 2026 10:04:16 -0500
Subject: [PATCH 20/77] feat(cloudwatch): add agentcore log group data
 protection policy check (#12662)

---
 .../cli/tutorials/configuration_file.mdx      |   1 +
 ...re-data-protection-policy-enabled.added.md |   1 +
 .../aws/aws_ai_security_framework_aws.json    |   3 +-
 prowler/config/config.yaml                    |   8 +
 prowler/config/schema/aws.py                  |   9 +
 .../__init__.py                               |   0
 ...ta_protection_policy_enabled.metadata.json |  45 +++
 ...gentcore_data_protection_policy_enabled.py |  98 ++++++
 .../services/cloudwatch/cloudwatch_service.py |  22 ++
 tests/config/schema/aws_schema_test.py        |  47 +++
 ...ore_data_protection_policy_enabled_test.py | 333 ++++++++++++++++++
 .../cloudwatch/cloudwatch_service_test.py     | 116 ++++++
 12 files changed, 682 insertions(+), 1 deletion(-)
 create mode 100644 prowler/changelog.d/cloudwatch-log-group-agentcore-data-protection-policy-enabled.added.md
 create mode 100644 prowler/providers/aws/services/cloudwatch/cloudwatch_log_group_agentcore_data_protection_policy_enabled/__init__.py
 create mode 100644 prowler/providers/aws/services/cloudwatch/cloudwatch_log_group_agentcore_data_protection_policy_enabled/cloudwatch_log_group_agentcore_data_protection_policy_enabled.metadata.json
 create mode 100644 prowler/providers/aws/services/cloudwatch/cloudwatch_log_group_agentcore_data_protection_policy_enabled/cloudwatch_log_group_agentcore_data_protection_policy_enabled.py
 create mode 100644 tests/providers/aws/services/cloudwatch/cloudwatch_log_group_agentcore_data_protection_policy_enabled/cloudwatch_log_group_agentcore_data_protection_policy_enabled_test.py

diff --git a/docs/user-guide/cli/tutorials/configuration_file.mdx b/docs/user-guide/cli/tutorials/configuration_file.mdx
index 90de1dbdbc..ac21f5bc6c 100644
--- a/docs/user-guide/cli/tutorials/configuration_file.mdx
+++ b/docs/user-guide/cli/tutorials/configuration_file.mdx
@@ -51,6 +51,7 @@ The following list includes all the AWS checks with configurable variables that
 | `cloudtrail_threat_detection_privilege_escalation`                     | `threat_detection_privilege_escalation_actions`   | List of Strings | See `config.yaml`                                                                                                                    |
 | `cloudtrail_threat_detection_privilege_escalation`                     | `threat_detection_privilege_escalation_minutes`   | Integer         | `1440`                                                                                                                               |
 | `cloudtrail_threat_detection_privilege_escalation`                     | `threat_detection_privilege_escalation_threshold` | Float           | `0.2`                                                                                                                                |
+| `cloudwatch_log_group_agentcore_data_protection_policy_enabled`        | `agentcore_log_group_name_prefixes`               | List of Strings | See `config.yaml`                                                                                                                    |
 | `cloudwatch_log_group_no_secrets_in_logs`                              | `secrets_ignore_patterns`                         | List of Strings | `[]`                                                                                                                                 |
 | `cloudwatch_log_group_retention_policy_specific_days_enabled`          | `log_group_retention_days`                        | Integer         | `365`                                                                                                                                |
 | `codebuild_project_no_secrets_in_variables`                            | `excluded_sensitive_environment_variables`        | List of Strings | `[]`                                                                                                                                 |
diff --git a/prowler/changelog.d/cloudwatch-log-group-agentcore-data-protection-policy-enabled.added.md b/prowler/changelog.d/cloudwatch-log-group-agentcore-data-protection-policy-enabled.added.md
new file mode 100644
index 0000000000..5e68d03676
--- /dev/null
+++ b/prowler/changelog.d/cloudwatch-log-group-agentcore-data-protection-policy-enabled.added.md
@@ -0,0 +1 @@
+`cloudwatch_log_group_agentcore_data_protection_policy_enabled` check for AWS provider, verifying that Bedrock AgentCore log groups mask sensitive data with a CloudWatch Logs data protection policy
diff --git a/prowler/compliance/aws/aws_ai_security_framework_aws.json b/prowler/compliance/aws/aws_ai_security_framework_aws.json
index e69acaa128..32e50d66e9 100644
--- a/prowler/compliance/aws/aws_ai_security_framework_aws.json
+++ b/prowler/compliance/aws/aws_ai_security_framework_aws.json
@@ -487,7 +487,8 @@
         "awslambda_function_no_secrets_in_variables",
         "ecs_task_definitions_no_environment_secrets",
         "ec2_instance_secrets_user_data",
-        "cloudwatch_log_group_no_secrets_in_logs"
+        "cloudwatch_log_group_no_secrets_in_logs",
+        "cloudwatch_log_group_agentcore_data_protection_policy_enabled"
       ]
     },
     {
diff --git a/prowler/config/config.yaml b/prowler/config/config.yaml
index 7dd7c2bf3d..46127c9699 100644
--- a/prowler/config/config.yaml
+++ b/prowler/config/config.yaml
@@ -119,6 +119,14 @@ aws:
   # aws.cloudwatch_log_group_retention_policy_specific_days_enabled --> by default is 365 days
   log_group_retention_days: 365
 
+  # aws.cloudwatch_log_group_agentcore_data_protection_policy_enabled
+  # Log group name prefixes that hold Bedrock AgentCore agent telemetry. This list REPLACES
+  # the defaults rather than adding to them, so keep both entries below when adding your own
+  # or the log groups AgentCore creates itself stop being assessed.
+  agentcore_log_group_name_prefixes:
+    - "/aws/bedrock-agentcore/"
+    - "/aws/vendedlogs/bedrock-agentcore/"
+
   # AWS CloudFormation Configuration
   # cloudformation_stack_cdktoolkit_bootstrap_version --> by default is 21
   recommended_cdk_bootstrap_version: 21
diff --git a/prowler/config/schema/aws.py b/prowler/config/schema/aws.py
index c0ecf9a21c..75fa5f73c0 100644
--- a/prowler/config/schema/aws.py
+++ b/prowler/config/schema/aws.py
@@ -267,6 +267,15 @@ class AWSProviderConfig(ProviderConfigBase):
             f"values accepted by the AWS API: {list(_CLOUDWATCH_RETENTION_DAYS)}."
         ),
     )
+    agentcore_log_group_name_prefixes: Optional[list[str]] = Field(
+        default=None,
+        description=(
+            "Log group name prefixes that identify Bedrock AgentCore agent "
+            "telemetry. Set this when AgentCore log delivery is pointed at log "
+            "groups outside the service defaults; the value replaces the "
+            "defaults, so list them alongside any prefix of your own."
+        ),
+    )
     recommended_cdk_bootstrap_version: Optional[int] = Field(
         default=None,
         ge=1,
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_group_agentcore_data_protection_policy_enabled/__init__.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_group_agentcore_data_protection_policy_enabled/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_group_agentcore_data_protection_policy_enabled/cloudwatch_log_group_agentcore_data_protection_policy_enabled.metadata.json b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_group_agentcore_data_protection_policy_enabled/cloudwatch_log_group_agentcore_data_protection_policy_enabled.metadata.json
new file mode 100644
index 0000000000..063474adbf
--- /dev/null
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_group_agentcore_data_protection_policy_enabled/cloudwatch_log_group_agentcore_data_protection_policy_enabled.metadata.json
@@ -0,0 +1,45 @@
+{
+  "Provider": "aws",
+  "CheckID": "cloudwatch_log_group_agentcore_data_protection_policy_enabled",
+  "CheckTitle": "Bedrock AgentCore log groups have a CloudWatch Logs data protection policy activated",
+  "CheckType": [
+    "Software and Configuration Checks/AWS Security Best Practices",
+    "Effects/Data Exposure",
+    "Sensitive Data Identifications/PII"
+  ],
+  "ServiceName": "cloudwatch",
+  "SubServiceName": "logs",
+  "ResourceIdTemplate": "arn:partition:logs:region:account-id:log-group:log-group-name",
+  "Severity": "medium",
+  "ResourceType": "Other",
+  "ResourceGroup": "monitoring",
+  "Description": "Log groups holding **Bedrock AgentCore** agent telemetry have an active CloudWatch Logs **data protection policy**, so sensitive data an agent writes to its own logs is masked at ingestion. A policy attached to the log group or inherited from an account-level policy both satisfy this.",
+  "Risk": "Agents log prompts, tool arguments and retrieved context. Without masking, **PII** and secrets are stored in clear text and readable by every principal holding `logs:GetLogEvents`, widening the audience for regulated data far beyond the agent and defeating filtering applied only at the model boundary.",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/mask-sensitive-log-data.html",
+    "https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/mask-sensitive-log-data-start.html",
+    "https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/mask-sensitive-log-data-start-account.html",
+    "https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/protect-sensitive-log-data-types.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/observability-configure.html"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "aws logs put-data-protection-policy --log-group-identifier <LOG_GROUP_NAME> --policy-document '{\"Name\":\"agentcore-data-protection-policy\",\"Version\":\"2021-06-01\",\"Statement\":[{\"Sid\":\"audit\",\"DataIdentifier\":[\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\"],\"Operation\":{\"Audit\":{\"FindingsDestination\":{}}}},{\"Sid\":\"redact\",\"DataIdentifier\":[\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\"],\"Operation\":{\"Deidentify\":{\"MaskConfig\":{}}}}]}'",
+      "NativeIaC": "```yaml\n# CloudFormation: data protection policy on a log group you manage in the template.\n# AgentCore runtime log groups are created by the service, not by CloudFormation --\n# for those, use the CLI command or an AWS::Logs::AccountPolicy instead.\nResources:\n  AgentCoreLogGroup:\n    Type: AWS::Logs::LogGroup\n    Properties:\n      LogGroupName: \"<example_resource_name>\"\n      DataProtectionPolicy:\n        Name: agentcore-data-protection-policy\n        Version: '2021-06-01'\n        Statement:\n          - Sid: audit  # CRITICAL: required block, finds the sensitive terms\n            DataIdentifier:\n              - arn:aws:dataprotection::aws:data-identifier/EmailAddress\n            Operation:\n              Audit:\n                FindingsDestination: {}\n          - Sid: redact  # CRITICAL: the Deidentify block is what actually masks the data\n            DataIdentifier:\n              - arn:aws:dataprotection::aws:data-identifier/EmailAddress\n            Operation:\n              Deidentify:\n                MaskConfig: {}\n```",
+      "Other": "1. In the AWS console, open CloudWatch > Logs > Log groups\n2. Select the AgentCore log group (/aws/bedrock-agentcore/... or /aws/vendedlogs/bedrock-agentcore/...)\n3. Choose Actions > Create data protection policy\n4. Under Managed data identifiers, select the data types your agent can log, for example Address, EmailAddress and PhoneNumber\n5. (Optional) Choose a destination for the audit findings report\n6. Choose Activate data protection\n7. To cover every log group at once, including service-created ones, open Settings > Data protection instead and create an account-level policy",
+      "Terraform": "```hcl\n# Attaches a data protection policy to an existing AgentCore log group\nresource \"aws_cloudwatch_log_data_protection_policy\" \"<example_resource_name>\" {\n  log_group_name = \"<example_resource_name>\"\n\n  policy_document = jsonencode({\n    Name    = \"agentcore-data-protection-policy\"\n    Version = \"2021-06-01\"\n    Statement = [\n      {\n        Sid            = \"audit\" # CRITICAL: required block, finds the sensitive terms\n        DataIdentifier = [\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\"]\n        Operation = {\n          Audit = {\n            FindingsDestination = {}\n          }\n        }\n      },\n      {\n        Sid            = \"redact\" # CRITICAL: the Deidentify block is what actually masks the data\n        DataIdentifier = [\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\"]\n        Operation = {\n          Deidentify = {\n            MaskConfig = {}\n          }\n        }\n      }\n    ]\n  })\n}\n```"
+    },
+    "Recommendation": {
+      "Text": "Attach a data protection policy to every AgentCore log group, choosing the managed data identifiers your agents can plausibly log, or create one account-level policy so service-created log groups are covered as they appear.\n\nMasking is *defense in depth* behind the model-boundary filters: keep restricting `logs:Unmask` so only incident responders can read the original values, and keep the log groups encrypted with a **customer-managed key**.",
+      "Url": "https://hub.prowler.com/check/cloudwatch_log_group_agentcore_data_protection_policy_enabled"
+    }
+  },
+  "Categories": [
+    "gen-ai",
+    "logging"
+  ],
+  "DependsOn": [],
+  "RelatedTo": [],
+  "Notes": "Scoped to log groups whose name starts with an AgentCore prefix (configurable via `agentcore_log_group_name_prefixes`, whose value REPLACES the defaults rather than adding to them). AgentCore log delivery can be pointed at an arbitrarily named log group; add those prefixes to the configuration so they are assessed. Not covered by default: gateway, built-in tool and identity spans, and runtime spans for agents created before a Region supported the per-agent span destination, are delivered to the shared `aws/spans` log group, which is account-wide rather than AgentCore-specific. Add `aws/spans` to the configuration to assess it."
+}
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_group_agentcore_data_protection_policy_enabled/cloudwatch_log_group_agentcore_data_protection_policy_enabled.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_group_agentcore_data_protection_policy_enabled/cloudwatch_log_group_agentcore_data_protection_policy_enabled.py
new file mode 100644
index 0000000000..339f8dad4f
--- /dev/null
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_group_agentcore_data_protection_policy_enabled/cloudwatch_log_group_agentcore_data_protection_policy_enabled.py
@@ -0,0 +1,98 @@
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.cloudwatch.logs_client import logs_client
+
+# Log group name prefixes AgentCore uses for agent telemetry. The runtime creates
+# /aws/bedrock-agentcore/runtimes/... itself. Log delivery for memory, gateway and built-in tool
+# resources is CONFIGURED by the operator rather than defaulted -- the AgentCore devguide's
+# observability-configure page is a put_delivery_source / put_delivery_destination /
+# create_delivery procedure -- and it targets /aws/vendedlogs/bedrock-agentcore/... because for
+# same-account delivery to a /aws/vendedlogs/ log group the log-delivery service-linked role
+# grants write access implicitly, while any other destination needs an explicit resource policy
+# or the delivery silently fails. So the prefix is the convention that makes delivery work, which
+# is why these two and not others.
+DEFAULT_AGENTCORE_LOG_GROUP_PREFIXES = [
+    "/aws/bedrock-agentcore/",
+    "/aws/vendedlogs/bedrock-agentcore/",
+]
+
+ACTIVATED = "ACTIVATED"
+ACCOUNT_DATA_PROTECTION = "ACCOUNT_DATA_PROTECTION"
+
+
+class cloudwatch_log_group_agentcore_data_protection_policy_enabled(Check):
+    """Ensure AgentCore log groups mask sensitive data with a data protection policy.
+
+    Agents write prompts, tool arguments and retrieved context to their own log groups. A data
+    protection policy masks matched data at ingestion, so without one the values are stored in
+    clear text and readable by every principal holding logs:GetLogEvents.
+
+    Scope: log groups whose name starts with an AgentCore prefix. AgentCore log delivery can be
+    pointed at an arbitrarily named log group, so the prefix list is configurable through
+    agentcore_log_group_name_prefixes; a configured list REPLACES the defaults rather than
+    extending them, and an explicitly null value falls back to the defaults.
+
+    PASS when the log group has an ACTIVATED policy of its own, or inherits the account-level one.
+    FAIL when dataProtectionStatus is DELETED, ARCHIVED or DISABLED, or was never reported: all
+    four mean nothing is being masked at ingestion today.
+    MANUAL when the log group inventory could not be read, because nothing is then known about any
+    log group's masking. Only a denied DescribeLogGroups leaves the inventory unknown -- every
+    other collector failure leaves a readable, possibly partial, inventory.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Execute the AgentCore log group data protection policy check.
+
+        Returns:
+            A list of reports containing the result of the check: one per in-scope
+            AgentCore log group, or a single account-level report when the log group
+            inventory could not be read.
+        """
+        findings = []
+
+        # An ABSENT or explicitly null value falls back to the defaults; an empty LIST does not.
+        # `is None` covers both a missing key and a bare `agentcore_log_group_name_prefixes:` in the
+        # YAML, which parses as None, and both mean "not configured". `or` additionally swallowed an
+        # explicitly empty list, which IS a configured value and the one way an operator can say "no
+        # log group is in scope" -- so the fallback overrode the operator and contradicted the
+        # REPLACES-the-defaults behaviour promised above. An empty tuple is meaningful downstream
+        # rather than degenerate: str.startswith(()) is False for every name, so nothing is selected,
+        # which is exactly the request.
+        configured_prefixes = logs_client.audit_config.get(
+            "agentcore_log_group_name_prefixes"
+        )
+        prefixes = tuple(
+            DEFAULT_AGENTCORE_LOG_GROUP_PREFIXES
+            if configured_prefixes is None
+            else configured_prefixes
+        )
+
+        # An unreadable log group inventory must not read as compliant: without the
+        # inventory there is no way to tell an AgentCore log group that masks
+        # sensitive data from one that does not.
+        if logs_client.log_groups is None:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.status = "MANUAL"
+            report.status_extended = "Log groups could not be retrieved, so data protection policies for AgentCore log groups could not be verified."
+            report.region = logs_client.region
+            report.resource_id = logs_client.audited_account
+            report.resource_arn = logs_client.log_group_arn_template
+            report.resource_tags = []
+            return [report]
+
+        for log_group in logs_client.log_groups.values():
+            if not log_group.name.startswith(prefixes):
+                continue
+
+            report = Check_Report_AWS(metadata=self.metadata(), resource=log_group)
+            if log_group.data_protection_status == ACTIVATED:
+                report.status = "PASS"
+                report.status_extended = f"AgentCore log group {log_group.name} has a data protection policy activated."
+            elif ACCOUNT_DATA_PROTECTION in log_group.inherited_properties:
+                report.status = "PASS"
+                report.status_extended = f"AgentCore log group {log_group.name} inherits the account-level data protection policy."
+            else:
+                report.status = "FAIL"
+                report.status_extended = f"AgentCore log group {log_group.name} does not have an active data protection policy, so sensitive data written by the agent is not masked."
+            findings.append(report)
+
+        return findings
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_service.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_service.py
index 56b7ebe25c..d01ce42142 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_service.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_service.py
@@ -188,6 +188,17 @@ class Logs(AWSService):
             )
 
     def _describe_log_groups(self, regional_client):
+        """List the log groups in a region into the complete and the analysed indexes.
+
+        A denied DescribeLogGroups sets both indexes to None, but only while nothing has been
+        collected yet: that None is the state checks read as "inventory unknown", and it must stay
+        distinguishable from an account that genuinely has no log groups. Any other failure leaves
+        the indexes as they are, so a partial inventory reads as a smaller one.
+
+        dataProtectionStatus and inheritedProperties are stored as reported. An absent
+        dataProtectionStatus is the API saying the log group has never had a policy, and it is kept
+        as None rather than a status string so a check can tell "never configured" from DISABLED.
+        """
         logger.info("CloudWatch Logs - Describing log groups...")
         try:
             describe_log_groups_paginator = regional_client.get_paginator(
@@ -215,6 +226,12 @@ class Logs(AWSService):
                             never_expire=never_expire,
                             kms_id=kms,
                             creation_time=log_group.get("creationTime"),
+                            data_protection_status=log_group.get(
+                                "dataProtectionStatus"
+                            ),
+                            inherited_properties=log_group.get(
+                                "inheritedProperties", []
+                            ),
                             region=regional_client.region,
                         )
                         self.all_log_groups[log_group_object.arn] = log_group_object
@@ -337,6 +354,11 @@ class LogGroup(BaseModel):
     never_expire: bool
     kms_id: Optional[str]
     creation_time: Optional[int] = None
+    # None when the log group has never had a data protection policy, otherwise
+    # ACTIVATED, DELETED, ARCHIVED or DISABLED.
+    data_protection_status: Optional[str] = None
+    # Properties inherited from account-level settings, e.g. ACCOUNT_DATA_PROTECTION.
+    inherited_properties: list[str] = []
     region: str
     log_streams: dict[str, list[str]] = (
         {}
diff --git a/tests/config/schema/aws_schema_test.py b/tests/config/schema/aws_schema_test.py
index 838853f52a..f7c8e3b485 100644
--- a/tests/config/schema/aws_schema_test.py
+++ b/tests/config/schema/aws_schema_test.py
@@ -203,6 +203,53 @@ class TestAWSELBv2PQCTLSAllowedPolicies:
         assert _validate({"elbv2_listener_pqc_tls_allowed_policies": value}) == {}
 
 
+class TestAWSAgentCoreLogGroupNamePrefixes:
+    def test_valid_prefix_list_round_trips(self):
+        prefixes = [
+            "/aws/bedrock-agentcore/",
+            "/aws/vendedlogs/bedrock-agentcore/",
+        ]
+
+        assert _validate({"agentcore_log_group_name_prefixes": prefixes}) == {
+            "agentcore_log_group_name_prefixes": prefixes
+        }
+
+    def test_null_round_trips(self):
+        """A bare `agentcore_log_group_name_prefixes:` in the config file arrives as None.
+
+        It has to survive validation rather than be dropped, because the check distinguishes it
+        from an empty list: None means "use the built-in defaults" while [] means "match no log
+        group". Dropping it would collapse the two.
+        """
+        assert _validate({"agentcore_log_group_name_prefixes": None}) == {
+            "agentcore_log_group_name_prefixes": None
+        }
+
+    def test_empty_list_round_trips(self):
+        """[] is a valid instruction, not a missing value -- see test_null_round_trips."""
+        assert _validate({"agentcore_log_group_name_prefixes": []}) == {
+            "agentcore_log_group_name_prefixes": []
+        }
+
+    def test_key_is_exposed_in_scan_config_schema(self):
+        aws_properties = SCAN_CONFIG_SCHEMA["properties"]["aws"]["properties"]
+
+        assert "agentcore_log_group_name_prefixes" in aws_properties
+
+    @pytest.mark.parametrize(
+        "value",
+        [
+            # A single prefix written without the list, which is the mistake the YAML invites.
+            "/aws/bedrock-agentcore/",
+            ["/aws/bedrock-agentcore/", 123],
+            {"prefix": "/aws/bedrock-agentcore/"},
+            123,
+        ],
+    )
+    def test_invalid_prefix_values_are_dropped(self, value):
+        assert _validate({"agentcore_log_group_name_prefixes": value}) == {}
+
+
 class Test_AWS_Secrets_Ignore_Files:
     def test_valid_file_patterns_round_trip(self):
         files = ["*.deps.json", "vendor/*.js"]
diff --git a/tests/providers/aws/services/cloudwatch/cloudwatch_log_group_agentcore_data_protection_policy_enabled/cloudwatch_log_group_agentcore_data_protection_policy_enabled_test.py b/tests/providers/aws/services/cloudwatch/cloudwatch_log_group_agentcore_data_protection_policy_enabled/cloudwatch_log_group_agentcore_data_protection_policy_enabled_test.py
new file mode 100644
index 0000000000..2823db9ee8
--- /dev/null
+++ b/tests/providers/aws/services/cloudwatch/cloudwatch_log_group_agentcore_data_protection_policy_enabled/cloudwatch_log_group_agentcore_data_protection_policy_enabled_test.py
@@ -0,0 +1,333 @@
+import os
+import pathlib
+from unittest import mock
+
+import yaml
+from moto import mock_aws
+
+from prowler.providers.aws.services.cloudwatch.cloudwatch_service import LogGroup
+from tests.providers.aws.utils import (
+    AWS_ACCOUNT_NUMBER,
+    AWS_REGION_US_EAST_1,
+    set_mocked_aws_provider,
+)
+
+CHECK_MODULE = "prowler.providers.aws.services.cloudwatch.cloudwatch_log_group_agentcore_data_protection_policy_enabled.cloudwatch_log_group_agentcore_data_protection_policy_enabled"
+
+RUNTIME_LOG_GROUP = "/aws/bedrock-agentcore/runtimes/my_agent-1a2b3c4d5e"
+VENDED_LOG_GROUP = (
+    "/aws/vendedlogs/bedrock-agentcore/memory/APPLICATION_LOGS/my-memory-1a2b3c"
+)
+
+
+def log_group(name, data_protection_status=None, inherited_properties=None):
+    """Build a LogGroup carrying the two fields this check reads.
+
+    Both default to the state DescribeLogGroups reports for a log group that has never had a data
+    protection policy: dataProtectionStatus absent, and no inherited properties.
+    """
+    return LogGroup(
+        arn=f"arn:aws:logs:{AWS_REGION_US_EAST_1}:{AWS_ACCOUNT_NUMBER}:log-group:{name}:*",
+        name=name,
+        retention_days=365,
+        never_expire=False,
+        kms_id=None,
+        creation_time=1700000000000,
+        data_protection_status=data_protection_status,
+        inherited_properties=inherited_properties or [],
+        region=AWS_REGION_US_EAST_1,
+    )
+
+
+def run_check(log_groups, audit_config=None):
+    """Drive the check over a fixed inventory.
+
+    The inventory is set on the service object rather than served through a
+    patched _make_api_call: DescribeLogGroups -> LogGroup field mapping and its
+    pagination are covered in cloudwatch_service_test.py, and patching a global
+    here made these tests sensitive to the order they run in.
+    """
+    from prowler.providers.aws.services.cloudwatch.cloudwatch_service import Logs
+
+    aws_provider = set_mocked_aws_provider(
+        [AWS_REGION_US_EAST_1],
+        audit_config={} if audit_config is None else audit_config,
+    )
+
+    with mock.patch(
+        "prowler.providers.common.provider.Provider.get_global_provider",
+        return_value=aws_provider,
+    ):
+        logs_client = Logs(aws_provider)
+        logs_client.log_groups = (
+            None if log_groups is None else {group.arn: group for group in log_groups}
+        )
+
+        with mock.patch(f"{CHECK_MODULE}.logs_client", new=logs_client):
+            from prowler.providers.aws.services.cloudwatch.cloudwatch_log_group_agentcore_data_protection_policy_enabled.cloudwatch_log_group_agentcore_data_protection_policy_enabled import (
+                cloudwatch_log_group_agentcore_data_protection_policy_enabled,
+            )
+
+            return (
+                cloudwatch_log_group_agentcore_data_protection_policy_enabled().execute()
+            )
+
+
+class Test_cloudwatch_log_group_agentcore_data_protection_policy_enabled:
+    """Tests for the cloudwatch_log_group_agentcore_data_protection_policy_enabled check."""
+
+    @mock_aws
+    def test_no_log_groups(self):
+        """An account with no log groups at all must produce no findings.
+
+        An empty inventory was read successfully, so it is not the MANUAL case; there is simply no
+        resource to make a claim about.
+        """
+        assert run_check([]) == []
+
+    @mock_aws
+    def test_non_agentcore_log_group_is_out_of_scope(self):
+        """Log groups outside the AgentCore prefixes must produce no findings.
+
+        Asserting a data protection policy on every log group in the account would bury the
+        AgentCore ones. The lookalike name is the case that matters: the prefix must be matched with
+        its trailing slash, or /aws/bedrock-agentcore-lookalike/ is pulled into scope.
+        """
+        results = run_check(
+            [
+                log_group("/aws/lambda/unrelated-function"),
+                log_group("aws/spans"),
+                log_group("/aws/bedrock-agentcore-lookalike/runtimes/x"),
+            ]
+        )
+
+        assert results == []
+
+    @mock_aws
+    def test_agentcore_log_group_without_data_protection_status(self):
+        """An AgentCore log group reporting no dataProtectionStatus must FAIL.
+
+        dataProtectionStatus is modelled at the botocore pin, so its absence is not a parsing gap:
+        it is the API reporting that the log group has never had a data protection policy, which
+        means nothing is masked. Pins the resource identity too, since the finding has to name the
+        log group an operator must remediate.
+        """
+        results = run_check([log_group(RUNTIME_LOG_GROUP)])
+
+        assert len(results) == 1
+        assert results[0].status == "FAIL"
+        assert (
+            results[0].status_extended
+            == f"AgentCore log group {RUNTIME_LOG_GROUP} does not have an active data protection policy, so sensitive data written by the agent is not masked."
+        )
+        assert results[0].resource_id == RUNTIME_LOG_GROUP
+        assert (
+            results[0].resource_arn
+            == f"arn:aws:logs:{AWS_REGION_US_EAST_1}:{AWS_ACCOUNT_NUMBER}:log-group:{RUNTIME_LOG_GROUP}:*"
+        )
+        assert results[0].region == AWS_REGION_US_EAST_1
+
+    @mock_aws
+    def test_agentcore_log_group_with_activated_policy(self):
+        """ACTIVATED is the only dataProtectionStatus that must PASS: masking is running today."""
+        results = run_check(
+            [log_group(RUNTIME_LOG_GROUP, data_protection_status="ACTIVATED")]
+        )
+
+        assert len(results) == 1
+        assert results[0].status == "PASS"
+        assert (
+            results[0].status_extended
+            == f"AgentCore log group {RUNTIME_LOG_GROUP} has a data protection policy activated."
+        )
+
+    @mock_aws
+    def test_agentcore_log_group_with_inactive_policy(self):
+        """DELETED, ARCHIVED and DISABLED must each FAIL, not MANUAL.
+
+        All three were read successfully, so nothing is unknown; they mean the same thing
+        operationally, which is that nothing is being masked at ingestion today. Together with
+        ACTIVATED these are all four values the enum carries at the botocore pin.
+        """
+        for status in ("DELETED", "ARCHIVED", "DISABLED"):
+            results = run_check(
+                [log_group(RUNTIME_LOG_GROUP, data_protection_status=status)]
+            )
+
+            assert len(results) == 1
+            assert results[0].status == "FAIL"
+            assert (
+                results[0].status_extended
+                == f"AgentCore log group {RUNTIME_LOG_GROUP} does not have an active data protection policy, so sensitive data written by the agent is not masked."
+            )
+
+    @mock_aws
+    def test_agentcore_log_group_inheriting_account_policy(self):
+        """A log group inheriting the account policy must PASS with no status of its own.
+
+        An account-level policy surfaces as ACCOUNT_DATA_PROTECTION in inheritedProperties and
+        leaves dataProtectionStatus absent, so a check reading only dataProtectionStatus would FAIL
+        a log group that is fully masked. ACCOUNT_DATA_PROTECTION is the only value the
+        InheritedProperty enum carries at the botocore pin.
+        """
+        results = run_check(
+            [
+                log_group(
+                    VENDED_LOG_GROUP,
+                    inherited_properties=["ACCOUNT_DATA_PROTECTION"],
+                )
+            ]
+        )
+
+        assert len(results) == 1
+        assert results[0].status == "PASS"
+        assert (
+            results[0].status_extended
+            == f"AgentCore log group {VENDED_LOG_GROUP} inherits the account-level data protection policy."
+        )
+
+    @mock_aws
+    def test_agentcore_log_groups_mixed(self):
+        """Multi-resource: one report per in-scope log group, with the PASS/FAIL split asserted.
+
+        A loop that stopped at the first log group, or one that let the out-of-scope Lambda group
+        through, would not produce exactly these two verdicts.
+        """
+        results = run_check(
+            [
+                log_group(RUNTIME_LOG_GROUP),
+                log_group(VENDED_LOG_GROUP, data_protection_status="ACTIVATED"),
+                log_group("/aws/lambda/unrelated-function"),
+            ]
+        )
+
+        assert len(results) == 2
+        assert {result.resource_id: result.status for result in results} == {
+            RUNTIME_LOG_GROUP: "FAIL",
+            VENDED_LOG_GROUP: "PASS",
+        }
+
+    @mock_aws
+    def test_log_groups_not_retrieved_is_manual(self):
+        """An unreadable inventory must yield one account-level MANUAL, not PASS and not FAIL.
+
+        PASS would assert masking never observed; FAIL would invent a finding against log groups
+        nothing is known about. The report is attributed to the account rather than to a log group,
+        because no log group was read.
+        """
+        results = run_check(None)
+
+        assert len(results) == 1
+        assert results[0].status == "MANUAL"
+        assert (
+            results[0].status_extended
+            == "Log groups could not be retrieved, so data protection policies for AgentCore log groups could not be verified."
+        )
+        assert results[0].resource_id == AWS_ACCOUNT_NUMBER
+        assert results[0].region == AWS_REGION_US_EAST_1
+        assert results[0].resource_tags == []
+
+    @mock_aws
+    def test_configured_prefix_brings_a_custom_log_group_into_scope(self):
+        """A configured prefix must put a log group outside the AWS defaults in scope and FAIL it.
+
+        AgentCore log delivery can be pointed at an arbitrarily named log group, so an operator who
+        does that has no coverage until the prefix is configured.
+        """
+        results = run_check(
+            [log_group("/company/agents/support-bot")],
+            audit_config={
+                "agentcore_log_group_name_prefixes": ["/company/agents/"],
+            },
+        )
+
+        assert len(results) == 1
+        assert results[0].status == "FAIL"
+        assert results[0].resource_id == "/company/agents/support-bot"
+
+    @mock_aws
+    def test_configured_prefix_replaces_the_defaults(self):
+        """A configured prefix list REPLACES the defaults, so a real AgentCore group drops out.
+
+        This is the sharp edge of the setting and the reason it is pinned: an operator who adds only
+        their own prefix silences the check for /aws/bedrock-agentcore/ and
+        /aws/vendedlogs/bedrock-agentcore/, with no finding to show it happened. They must list the
+        defaults alongside their own.
+        """
+        results = run_check(
+            [log_group(RUNTIME_LOG_GROUP)],
+            audit_config={
+                "agentcore_log_group_name_prefixes": ["/company/agents/"],
+            },
+        )
+
+        assert results == []
+
+    def test_shipped_config_matches_the_check_defaults(self):
+        """The prefixes shipped in config.yaml must equal the check's in-code defaults.
+
+        The same two prefixes are written twice, and the shipped config wins wherever it is used, so
+        a prefix added only to the in-code list would be silently ignored by every operator running
+        the default config -- and an unmatched log group produces no finding at all, not a FAIL. This
+        makes that drift a failing test instead of missing coverage.
+
+        The provider is mocked around the import because importing the check module constructs
+        `logs_client`, which reads the global provider's identity. Every other test here reaches that
+        import through `run_check`, which mocks it; this one imports the module directly for the
+        constant, so without the patch it is the only test in the file that cannot be selected on its
+        own -- 12 of 13 pass alone, and did not.
+        """
+        aws_provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
+        with mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=aws_provider,
+        ):
+            from prowler.providers.aws.services.cloudwatch.cloudwatch_log_group_agentcore_data_protection_policy_enabled.cloudwatch_log_group_agentcore_data_protection_policy_enabled import (
+                DEFAULT_AGENTCORE_LOG_GROUP_PREFIXES,
+            )
+
+        repo_root = pathlib.Path(os.path.dirname(os.path.realpath(__file__))).parents[5]
+        shipped = yaml.safe_load(
+            (repo_root / "prowler" / "config" / "config.yaml").read_text()
+        )
+
+        assert (
+            shipped["aws"]["agentcore_log_group_name_prefixes"]
+            == DEFAULT_AGENTCORE_LOG_GROUP_PREFIXES
+        )
+
+    @mock_aws
+    def test_explicit_null_prefixes_fall_back_to_the_defaults(self):
+        """An explicitly null prefix list must fall back to the defaults, not silence the check.
+
+        A bare `agentcore_log_group_name_prefixes:` in the YAML parses as None. Passing that
+        straight to startswith would raise, and treating it as an empty list would skip every log
+        group and report nothing.
+        """
+        results = run_check(
+            [log_group(RUNTIME_LOG_GROUP)],
+            audit_config={"agentcore_log_group_name_prefixes": None},
+        )
+
+        assert len(results) == 1
+        assert results[0].status == "FAIL"
+
+    @mock_aws
+    def test_an_explicitly_empty_prefix_list_selects_no_log_group(self):
+        """An empty list is a CONFIGURED value and must not fall back to the defaults.
+
+        This is the only way an operator can say "no log group is in scope for this check", and the
+        docstring promises a configured list REPLACES the defaults. Reading it with `or` treated `[]`
+        as absent and re-imposed the defaults, so the check reported on a log group the operator had
+        deliberately excluded, and no configuration could turn it off.
+
+        It is the pair with the null case above that carries the assertion: null must fall back and
+        empty must not, and a fix that collapsed both to one behaviour would satisfy either test
+        alone. The distinction is only visible when both are present.
+        """
+        results = run_check(
+            [log_group(RUNTIME_LOG_GROUP)],
+            audit_config={"agentcore_log_group_name_prefixes": []},
+        )
+
+        assert results == []
diff --git a/tests/providers/aws/services/cloudwatch/cloudwatch_service_test.py b/tests/providers/aws/services/cloudwatch/cloudwatch_service_test.py
index 3d2d53ffa0..8420d78ca0 100644
--- a/tests/providers/aws/services/cloudwatch/cloudwatch_service_test.py
+++ b/tests/providers/aws/services/cloudwatch/cloudwatch_service_test.py
@@ -1,5 +1,9 @@
+from unittest.mock import patch
+
+import botocore
 import pytest
 from boto3 import client
+from botocore.exceptions import ClientError
 from moto import mock_aws
 
 from prowler.providers.aws.services.cloudwatch.cloudwatch_service import (
@@ -16,6 +20,8 @@ from tests.providers.aws.utils import (
     set_mocked_aws_provider,
 )
 
+make_api_call = botocore.client.BaseClient._make_api_call
+
 
 class Test_CloudWatch_Service:
     # Test CloudWatch Service
@@ -226,6 +232,116 @@ class Test_CloudWatch_Service:
         assert logs.log_groups[arn].region == AWS_REGION_US_EAST_1
         assert logs.log_groups[arn].tags == [{}]
 
+    @mock_aws
+    def test_describe_log_groups_data_protection_across_pages(self):
+        """Both data protection fields must be collected from every page of DescribeLogGroups.
+
+        moto has no data protection support, so the response is served literally. Both pages carry
+        state a check reads, and each page carries a different one: a collector that stops after the
+        first page under-reports silently instead of failing loudly. The second page also proves
+        inheritedProperties survives the round trip rather than being flattened away.
+        """
+        first_page_arn = f"arn:aws:logs:{AWS_REGION_US_EAST_1}:{AWS_ACCOUNT_NUMBER}:log-group:/aws/bedrock-agentcore/runtimes/page-one:*"
+        second_page_arn = f"arn:aws:logs:{AWS_REGION_US_EAST_1}:{AWS_ACCOUNT_NUMBER}:log-group:/aws/bedrock-agentcore/runtimes/page-two:*"
+        pages = [
+            {
+                "logGroups": [
+                    {
+                        "arn": first_page_arn,
+                        "logGroupName": "/aws/bedrock-agentcore/runtimes/page-one",
+                        "creationTime": 2,
+                        "dataProtectionStatus": "DISABLED",
+                    }
+                ],
+                "nextToken": "page-two",
+            },
+            {
+                "logGroups": [
+                    {
+                        "arn": second_page_arn,
+                        "logGroupName": "/aws/bedrock-agentcore/runtimes/page-two",
+                        "creationTime": 1,
+                        "dataProtectionStatus": "ACTIVATED",
+                        "inheritedProperties": ["ACCOUNT_DATA_PROTECTION"],
+                    }
+                ]
+            },
+        ]
+
+        def mock_make_api_call(self, operation_name, kwarg):
+            """Serve page two once the paginator follows nextToken, page one otherwise."""
+            if operation_name == "DescribeLogGroups":
+                return pages[1] if kwarg.get("nextToken") else pages[0]
+            return make_api_call(self, operation_name, kwarg)
+
+        aws_provider = set_mocked_aws_provider(
+            [AWS_REGION_US_EAST_1],
+            expected_checks=["cloudwatch_log_group_no_secrets_in_logs"],
+        )
+        with patch("botocore.client.BaseClient._make_api_call", new=mock_make_api_call):
+            logs = Logs(aws_provider)
+
+        assert set(logs.log_groups) == {first_page_arn, second_page_arn}
+        assert logs.log_groups[first_page_arn].data_protection_status == "DISABLED"
+        assert logs.log_groups[first_page_arn].inherited_properties == []
+        assert logs.log_groups[second_page_arn].data_protection_status == "ACTIVATED"
+        assert logs.log_groups[second_page_arn].inherited_properties == [
+            "ACCOUNT_DATA_PROTECTION"
+        ]
+
+    @mock_aws
+    def test_describe_log_groups_without_data_protection_fields(self):
+        """A log group reporting neither field must collect as None and an empty list.
+
+        This is the common real response, since DescribeLogGroups omits both members for a log group
+        that has never had a policy. None must not become "DISABLED" and the list must not become
+        None, or a check cannot tell "never configured" from "switched off".
+        """
+        logs_client = client("logs", region_name=AWS_REGION_US_EAST_1)
+        logs_client.create_log_group(logGroupName="/log-group/test")
+
+        aws_provider = set_mocked_aws_provider(
+            expected_checks=["cloudwatch_log_group_no_secrets_in_logs"]
+        )
+        arn = f"arn:aws:logs:{AWS_REGION_US_EAST_1}:{AWS_ACCOUNT_NUMBER}:log-group:/log-group/test:*"
+        logs = Logs(aws_provider)
+
+        assert logs.log_groups[arn].data_protection_status is None
+        assert logs.log_groups[arn].inherited_properties == []
+
+    @mock_aws
+    def test_describe_log_groups_access_denied_leaves_inventory_unknown(self):
+        """A denied DescribeLogGroups must leave both indexes None, not empty dicts.
+
+        None is the state checks read as "inventory unknown" and report MANUAL for. Collapsing to an
+        empty dict would be indistinguishable from an account that has no log groups, which every
+        log group check reads as nothing to report.
+        """
+
+        def mock_make_api_call(self, operation_name, kwarg):
+            """Deny DescribeLogGroups; defer every other operation to botocore."""
+            if operation_name == "DescribeLogGroups":
+                raise ClientError(
+                    {
+                        "Error": {
+                            "Code": "AccessDeniedException",
+                            "Message": "not authorized",
+                        }
+                    },
+                    operation_name,
+                )
+            return make_api_call(self, operation_name, kwarg)
+
+        aws_provider = set_mocked_aws_provider(
+            [AWS_REGION_US_EAST_1],
+            expected_checks=["cloudwatch_log_group_no_secrets_in_logs"],
+        )
+        with patch("botocore.client.BaseClient._make_api_call", new=mock_make_api_call):
+            logs = Logs(aws_provider)
+
+        assert logs.log_groups is None
+        assert logs.all_log_groups is None
+
     def test_log_group_limit_exposes_only_selected_resources(self):
         class FakeLogsClient:
             def __init__(self):

From 51c5fa7168216d9abecdf426a47755c52e2fbbec Mon Sep 17 00:00:00 2001
From: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
Date: Tue, 1 Sep 2026 17:16:56 +0200
Subject: [PATCH 21/77] fix(checks): report MANUAL instead of FAIL on
 permission and data-availability errors (#12645)

---
 docs/developer-guide/checks.mdx               |  33 +-
 ...permission-errors-manual-not-fail.fixed.md |   1 +
 .../bedrock_agent_role_least_privilege.py     |  24 +-
 .../services/cloudtrail/cloudtrail_service.py |   6 +
 ...hanges_to_network_acls_alarm_configured.py |  52 ++-
 ...es_to_network_gateways_alarm_configured.py |  52 ++-
 ...o_network_route_tables_alarm_configured.py |  52 ++-
 ...dwatch_changes_to_vpcs_alarm_configured.py |  52 ++-
 ...ws_config_configuration_changes_enabled.py |  52 ++-
 ...loudtrail_configuration_changes_enabled.py |  52 ++-
 ...g_metric_filter_authentication_failures.py |  52 ++-
 ...metric_filter_aws_organizations_changes.py |  52 ++-
 ...isable_or_scheduled_deletion_of_kms_cmk.py |  52 ++-
 ...ric_filter_for_s3_bucket_policy_changes.py |  52 ++-
 ...dwatch_log_metric_filter_policy_changes.py |  52 ++-
 ...cloudwatch_log_metric_filter_root_usage.py |  52 ++-
 ...og_metric_filter_security_group_changes.py |  52 ++-
 ...h_log_metric_filter_sign_in_without_mfa.py |  52 ++-
 ...og_metric_filter_unauthorized_api_calls.py |  52 ++-
 .../services/cloudwatch/cloudwatch_service.py |  22 ++
 .../services/cloudwatch/lib/metric_filters.py |  18 +-
 .../rolesanywhere_trust_anchor_pqc_pki.py     |  15 +-
 .../s3_bucket_cross_region_replication.py     |  34 +-
 .../s3_bucket_object_versioning.py            |  20 +-
 .../providers/aws/services/s3/s3_service.py   |   8 +
 ...ra_global_admin_in_less_than_five_users.py |  15 +
 .../entra_non_privileged_user_has_mfa.py      |  15 +
 .../entra_privileged_user_has_mfa.py          |  15 +
 .../azure/services/entra/entra_service.py     | 114 +++++-
 ...tra_user_with_recent_sign_in.metadata.json |   2 +-
 .../entra_user_with_recent_sign_in.py         |  61 ++--
 .../entra_user_with_vm_access_has_mfa.py      |  17 +-
 prowler/providers/gcp/lib/service/service.py  |   7 +
 .../iam_account_access_approval_enabled.py    |  65 +++-
 .../providers/gcp/services/iam/iam_service.py |  28 ++
 .../defenderidentity_health_issues_no_open.py |  42 ++-
 ...ical_asset_management_pending_approvals.py |  11 +-
 ...int_privileged_user_exposed_credentials.py |  19 +-
 .../defenderxdr/defenderxdr_service.py        |  30 +-
 ...nused_privileged_permissions.metadata.json |   2 +-
 ...ration_no_unused_privileged_permissions.py |  12 +-
 ...s_account_fido2_security_key_registered.py |  39 ++-
 .../entra_seamless_sso_disabled.py            |  20 +-
 .../m365/services/entra/entra_service.py      |  39 ++-
 .../entra_users_mfa_capable.py                |  30 +-
 ...xchange_shared_mailbox_sign_in_disabled.py |  24 +-
 skills/prowler-sdk-check/SKILL.md             |  20 +-
 ...bedrock_agent_role_least_privilege_test.py |   4 +-
 ...s_to_network_acls_alarm_configured_test.py |   4 +-
 ...nfig_configuration_changes_enabled_test.py |   4 +-
 ...watch_log_metric_filter_root_usage_test.py | 331 ++++++++++++++++++
 .../cloudwatch/cloudwatch_service_test.py     |  37 ++
 .../cloudwatch/lib/metric_filters_test.py     |  69 +++-
 ...rolesanywhere_trust_anchor_pqc_pki_test.py |   2 +-
 ...s3_bucket_cross_region_replication_test.py |  94 ++++-
 ...obal_admin_in_less_than_five_users_test.py |  54 ++-
 .../entra_non_privileged_user_has_mfa_test.py |  47 ++-
 .../entra_privileged_user_has_mfa_test.py     |  45 ++-
 .../services/entra/entra_service_test.py      | 110 ++++++
 .../entra_user_with_recent_sign_in_test.py    | 132 ++++++-
 .../entra_user_with_vm_access_has_mfa_test.py |  51 +++
 ...am_account_access_approval_enabled_test.py | 132 +++++++
 .../gcp/services/iam/iamgcp_service_test.py   | 114 +++++-
 ...nderidentity_health_issues_no_open_test.py |  41 ++-
 ...asset_management_pending_approvals_test.py |   7 +-
 ...rivileged_user_exposed_credentials_test.py |  15 +-
 .../defenderxdr/defenderxdr_service_test.py   |  61 ++++
 ...n_no_unused_privileged_permissions_test.py |   6 +-
 ...ount_fido2_security_key_registered_test.py |  65 ++--
 .../entra_seamless_sso_disabled_test.py       |  40 ++-
 .../entra_users_mfa_capable_test.py           |  79 ++++-
 .../entra/microsoft365_entra_service_test.py  |  39 +++
 ...ge_shared_mailbox_sign_in_disabled_test.py |  70 +++-
 73 files changed, 2852 insertions(+), 389 deletions(-)
 create mode 100644 prowler/changelog.d/permission-errors-manual-not-fail.fixed.md
 create mode 100644 tests/providers/m365/services/defenderxdr/defenderxdr_service_test.py

diff --git a/docs/developer-guide/checks.mdx b/docs/developer-guide/checks.mdx
index 93facfaadf..6f500ae9ec 100644
--- a/docs/developer-guide/checks.mdx
+++ b/docs/developer-guide/checks.mdx
@@ -129,12 +129,42 @@ Each check **must** populate the `report.status` and `report.status_extended` fi
 - Status field: `report.status`
     - `PASS` – Assigned when the check confirms compliance with the configured value.
     - `FAIL` – Assigned when the check detects non-compliance with the configured value.
-    - `MANUAL` – This status must not be used unless manual verification is necessary to determine whether the status (`report.status`) passes (`PASS`) or fails (`FAIL`).
+    - `MANUAL` – This status must not be used unless manual verification is necessary to determine whether the status (`report.status`) passes (`PASS`) or fails (`FAIL`). This includes the case where Prowler could not retrieve the data needed to evaluate the resource (see below).
 
 - Status extended field: `report.status_extended`
     - It **must** end with a period (`.`).
     - It **must** include the audited service, the resource, and a concise explanation of the check result, for instance: `EC2 AMI ami-0123456789 is not public.`.
 
+### Permission and Data-Availability Errors Are Not Findings
+
+A `FAIL` must only be emitted when an insecure condition has actually been detected. A check **must never** report `FAIL` because the underlying API call failed: missing permissions or scopes on the scanning identity, an API that is not enabled, a feature that is not licensed, or data that could not be retrieved are scan-configuration problems, not security issues. Reporting them as `FAIL` surfaces a misleading (and often high-severity) finding to the user and skews compliance scores.
+
+When the service layer cannot obtain the data a check depends on, the check must:
+
+1. Emit a single `MANUAL` finding scoped to the widest affected resource (the tenant, account, project or subscription), not one finding per resource. For example, if user registration details cannot be read, emit one tenant-level `MANUAL` instead of one per user.
+2. Explain in `status_extended` that the check could not be evaluated and what to fix, naming the permission, scope, API or license required, for instance: `Cannot evaluate credential exposure for privileged users: unable to query Microsoft Defender XDR Advanced Hunting. Verify that the ThreatHunting.Read.All permission is granted to the scanning application.`
+3. Leave the check's severity untouched. Do not override `report.check_metadata.Severity` to hide the problem.
+
+The service layer must make the distinction possible: log the error and expose it to checks in a way that cannot be confused with a legitimate empty result. Common patterns already used in Prowler are:
+
+- Defaulting the attribute to `None` (data could not be read) instead of `[]`/`{}` (data was read and is empty), e.g. the `metric_filters is not None` guard in `prowler/providers/aws/services/cloudwatch/lib/metric_filters.py`.
+- Keeping an availability flag raised on any denied listing, e.g. `logs_client.metric_filters_unavailable` consumed by the AWS CloudWatch metric filter checks.
+- Keeping an error flag or message next to the data, e.g. `entra_client.user_registration_details_error` in M365 or `*_scan_errors` in AWS Bedrock.
+- Keeping a set of resources whose lookup failed, e.g. `accessapproval_client.settings_lookup_failed` in GCP.
+
+Make sure the error branch only captures real access errors. A `404`/not-found response frequently means the feature is simply not configured, which **is** a legitimate `FAIL`; a `403` or an unexpected exception is not. An "API not enabled" error is usually a scan-configuration problem too — **except** when the API's activation is itself the control being audited (e.g. GCP Access Approval: with `accessapproval.googleapis.com` disabled the feature provably cannot be enabled, so a definitive API-disabled state is a legitimate `FAIL`, while an undetermined state stays `MANUAL`).
+
+```python
+if <service>_client.<data> is None:
+    report = CheckReport<Provider>(metadata=self.metadata(), resource={})
+    report.resource_name = "<Tenant/Account-level resource>"
+    report.resource_id = "<stable-id>"
+    report.status = "MANUAL"
+    report.status_extended = "Cannot evaluate <requirement>: <data> could not be retrieved. Verify that <permission/API/license> is granted to the scanning identity."
+    findings.append(report)
+    return findings
+```
+
 ### Prowler's Check Severity Levels
 
 The severity of each check is defined in the metadata file using the `Severity` field. Severity values are always lowercase and must be one of the predefined categories below.
@@ -437,6 +467,7 @@ The metadata structure is enforced in code using a Pydantic model. For reference
 - Use clear, actionable, and user-friendly language in `status_extended` to explain the result. Always provide information to identify the resource.
 - Use helper functions/utilities for repeated logic to avoid code duplication. Save them in the `lib` folder of the service.
 - Handle exceptions gracefully: catch errors per resource, log them, and continue processing other resources.
+- Never report `FAIL` because data could not be retrieved (missing permissions, API not enabled, feature not licensed). Emit a single `MANUAL` finding explaining what is required instead; see [Permission and Data-Availability Errors Are Not Findings](#permission-and-data-availability-errors-are-not-findings).
 - Document the check with a class and function level docstring explaining what it does, what it checks, and any caveats or provider-specific behaviors.
 - Use type hints for the `execute()` method (e.g., `-> list[CheckReport<Provider>]`) for clarity and static analysis.
 - Ensure checks are efficient; avoid excessive nested loops. If the complexity is high, consider refactoring the check.
diff --git a/prowler/changelog.d/permission-errors-manual-not-fail.fixed.md b/prowler/changelog.d/permission-errors-manual-not-fail.fixed.md
new file mode 100644
index 0000000000..b4fd4660c9
--- /dev/null
+++ b/prowler/changelog.d/permission-errors-manual-not-fail.fixed.md
@@ -0,0 +1 @@
+Checks no longer report `FAIL` when the scanning identity lacks permissions, an API is not enabled or a feature is not licensed; they now emit a single `MANUAL` finding naming what is required, across 28 M365, Azure, AWS and GCP checks
diff --git a/prowler/providers/aws/services/bedrock/bedrock_agent_role_least_privilege/bedrock_agent_role_least_privilege.py b/prowler/providers/aws/services/bedrock/bedrock_agent_role_least_privilege/bedrock_agent_role_least_privilege.py
index e53183d90f..0d9b84bf14 100644
--- a/prowler/providers/aws/services/bedrock/bedrock_agent_role_least_privilege/bedrock_agent_role_least_privilege.py
+++ b/prowler/providers/aws/services/bedrock/bedrock_agent_role_least_privilege/bedrock_agent_role_least_privilege.py
@@ -24,10 +24,25 @@ class bedrock_agent_role_least_privilege(Check):
 
         Returns:
             A list of ``Check_Report_AWS`` with one entry per agent. The
-            status is ``FAIL`` when any of the criteria above is violated,
-            or when the execution role cannot be resolved in IAM.
+            status is ``FAIL`` when any of the criteria above is violated and
+            ``MANUAL`` when the execution role cannot be resolved in IAM. When
+            the IAM role inventory itself could not be listed, a single
+            account-level ``MANUAL`` report is returned instead.
         """
         findings = []
+
+        if iam_client.roles is None and bedrock_agent_client.agents:
+            # iam:ListRoles was denied: this is an account-wide condition, so
+            # emit one account-level MANUAL instead of one per agent.
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.region = iam_client.region
+            report.resource_id = iam_client.audited_account
+            report.resource_arn = iam_client.audited_account_arn
+            report.status = "MANUAL"
+            report.status_extended = "Cannot evaluate Bedrock Agent execution roles: the IAM roles could not be listed. Verify that the scanning credentials are allowed to call iam:ListRoles."
+            findings.append(report)
+            return findings
+
         roles_by_arn = {role.arn: role for role in (iam_client.roles or [])}
 
         for agent in bedrock_agent_client.agents.values():
@@ -39,10 +54,11 @@ class bedrock_agent_role_least_privilege(Check):
 
             role = roles_by_arn.get(agent.role_arn) if agent.role_arn else None
             if role is None:
-                report.status = "FAIL"
+                report.status = "MANUAL"
                 report.status_extended = (
                     f"Bedrock Agent {agent.name} execution role could not be "
-                    f"resolved in IAM and cannot be evaluated for least privilege."
+                    f"resolved in IAM and cannot be evaluated for least privilege; "
+                    f"verify the role manually."
                 )
                 findings.append(report)
                 continue
diff --git a/prowler/providers/aws/services/cloudtrail/cloudtrail_service.py b/prowler/providers/aws/services/cloudtrail/cloudtrail_service.py
index 92caa6fb9b..d597e362d6 100644
--- a/prowler/providers/aws/services/cloudtrail/cloudtrail_service.py
+++ b/prowler/providers/aws/services/cloudtrail/cloudtrail_service.py
@@ -15,6 +15,9 @@ class Cloudtrail(AWSService):
         super().__init__(__class__.__name__, provider)
         self.trail_arn_template = f"arn:{self.audited_partition}:cloudtrail:{self.region}:{self.audited_account}:trail"
         self.trails = {}
+        # True when DescribeTrails was denied in at least one audited region,
+        # so the trail inventory may be incomplete.
+        self.trails_unavailable = False
         self.__threading_call__(self._get_trails)
         if self.trails:
             self._get_trail_status()
@@ -79,13 +82,16 @@ class Cloudtrail(AWSService):
                 logger.error(
                     f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
                 )
+                self.trails_unavailable = True
                 if not self.trails:
                     self.trails = None
             else:
+                self.trails_unavailable = True
                 logger.error(
                     f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
                 )
         except Exception as error:
+            self.trails_unavailable = True
             logger.error(
                 f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
             )
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_acls_alarm_configured/cloudwatch_changes_to_network_acls_alarm_configured.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_acls_alarm_configured/cloudwatch_changes_to_network_acls_alarm_configured.py
index 68f45a8d27..911c50ecf7 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_acls_alarm_configured/cloudwatch_changes_to_network_acls_alarm_configured.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_acls_alarm_configured/cloudwatch_changes_to_network_acls_alarm_configured.py
@@ -13,7 +13,24 @@ from prowler.providers.aws.services.cloudwatch.logs_client import logs_client
 
 
 class cloudwatch_changes_to_network_acls_alarm_configured(Check):
-    def execute(self):
+    """CloudWatch log metric filter and alarm exist for Network ACL (NACL) change events.
+
+    Looks for a CloudWatch Logs metric filter matching the expected pattern on a
+    log group used by a CloudTrail trail, with at least one alarm on its metric.
+
+    - PASS: A matching metric filter with an associated alarm exists.
+    - FAIL: No matching metric filter, or a filter without an alarm, was found.
+    - MANUAL: CloudTrail trails, log groups, metric filters or alarms could
+      not be listed in at least one region, so the absence of a filter/alarm
+      cannot be asserted.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Evaluate the metric filter and alarm coverage for the account.
+
+        Returns:
+            list[Check_Report_AWS]: A single report for the account.
+        """
         pattern = build_metric_filter_pattern(
             event_names=[
                 "CreateNetworkAcl",
@@ -34,16 +51,29 @@ class cloudwatch_changes_to_network_acls_alarm_configured(Check):
             self.metadata(),
         )
 
-        if cloudtrail_client.trails is not None:
-            if report is None:
-                report = Check_Report_AWS(metadata=self.metadata(), resource={})
-                report.status = "FAIL"
-                report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
-                report.region = logs_client.region
-                report.resource_id = logs_client.audited_account
-                report.resource_arn = logs_client.log_group_arn_template
-                report.resource_tags = []
+        inventory_unavailable = (
+            cloudtrail_client.trails_unavailable
+            or logs_client.log_groups_unavailable
+            or logs_client.metric_filters_unavailable
+            or cloudwatch_client.metric_alarms_unavailable
+        )
 
-            findings.append(report)
+        if report is None:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.status = "FAIL"
+            report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
+            report.region = logs_client.region
+            report.resource_id = logs_client.audited_account
+            report.resource_arn = logs_client.log_group_arn_template
+            report.resource_tags = []
+
+        # A denied listing in any region means the inventory is incomplete: a
+        # PASS is still backed by a real filter and alarm, but a FAIL (nothing
+        # found, or a filter found without its alarm) cannot be trusted.
+        if report.status == "FAIL" and inventory_unavailable:
+            report.status = "MANUAL"
+            report.status_extended = "Cannot evaluate CloudWatch metric filters and alarms: CloudTrail trails, log groups, metric filters or alarms could not be listed in at least one region. Verify that the scanning credentials are allowed to call cloudtrail:DescribeTrails, logs:DescribeLogGroups, logs:DescribeMetricFilters and cloudwatch:DescribeAlarms."
+
+        findings.append(report)
 
         return findings
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_gateways_alarm_configured/cloudwatch_changes_to_network_gateways_alarm_configured.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_gateways_alarm_configured/cloudwatch_changes_to_network_gateways_alarm_configured.py
index f7bf8e1d22..cce7b092da 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_gateways_alarm_configured/cloudwatch_changes_to_network_gateways_alarm_configured.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_gateways_alarm_configured/cloudwatch_changes_to_network_gateways_alarm_configured.py
@@ -13,7 +13,24 @@ from prowler.providers.aws.services.cloudwatch.logs_client import logs_client
 
 
 class cloudwatch_changes_to_network_gateways_alarm_configured(Check):
-    def execute(self):
+    """CloudWatch Logs metric filter and alarm exist for changes to network gateways.
+
+    Looks for a CloudWatch Logs metric filter matching the expected pattern on a
+    log group used by a CloudTrail trail, with at least one alarm on its metric.
+
+    - PASS: A matching metric filter with an associated alarm exists.
+    - FAIL: No matching metric filter, or a filter without an alarm, was found.
+    - MANUAL: CloudTrail trails, log groups, metric filters or alarms could
+      not be listed in at least one region, so the absence of a filter/alarm
+      cannot be asserted.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Evaluate the metric filter and alarm coverage for the account.
+
+        Returns:
+            list[Check_Report_AWS]: A single report for the account.
+        """
         pattern = build_metric_filter_pattern(
             event_names=[
                 "CreateCustomerGateway",
@@ -34,16 +51,29 @@ class cloudwatch_changes_to_network_gateways_alarm_configured(Check):
             self.metadata(),
         )
 
-        if cloudtrail_client.trails is not None:
-            if report is None:
-                report = Check_Report_AWS(metadata=self.metadata(), resource={})
-                report.status = "FAIL"
-                report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
-                report.region = logs_client.region
-                report.resource_id = logs_client.audited_account
-                report.resource_arn = logs_client.log_group_arn_template
-                report.resource_tags = []
+        inventory_unavailable = (
+            cloudtrail_client.trails_unavailable
+            or logs_client.log_groups_unavailable
+            or logs_client.metric_filters_unavailable
+            or cloudwatch_client.metric_alarms_unavailable
+        )
 
-            findings.append(report)
+        if report is None:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.status = "FAIL"
+            report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
+            report.region = logs_client.region
+            report.resource_id = logs_client.audited_account
+            report.resource_arn = logs_client.log_group_arn_template
+            report.resource_tags = []
+
+        # A denied listing in any region means the inventory is incomplete: a
+        # PASS is still backed by a real filter and alarm, but a FAIL (nothing
+        # found, or a filter found without its alarm) cannot be trusted.
+        if report.status == "FAIL" and inventory_unavailable:
+            report.status = "MANUAL"
+            report.status_extended = "Cannot evaluate CloudWatch metric filters and alarms: CloudTrail trails, log groups, metric filters or alarms could not be listed in at least one region. Verify that the scanning credentials are allowed to call cloudtrail:DescribeTrails, logs:DescribeLogGroups, logs:DescribeMetricFilters and cloudwatch:DescribeAlarms."
+
+        findings.append(report)
 
         return findings
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_route_tables_alarm_configured/cloudwatch_changes_to_network_route_tables_alarm_configured.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_route_tables_alarm_configured/cloudwatch_changes_to_network_route_tables_alarm_configured.py
index 460765cb2f..f000c5b83e 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_route_tables_alarm_configured/cloudwatch_changes_to_network_route_tables_alarm_configured.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_route_tables_alarm_configured/cloudwatch_changes_to_network_route_tables_alarm_configured.py
@@ -13,7 +13,24 @@ from prowler.providers.aws.services.cloudwatch.logs_client import logs_client
 
 
 class cloudwatch_changes_to_network_route_tables_alarm_configured(Check):
-    def execute(self):
+    """Account monitors VPC route table changes with a CloudWatch Logs metric filter and alarm.
+
+    Looks for a CloudWatch Logs metric filter matching the expected pattern on a
+    log group used by a CloudTrail trail, with at least one alarm on its metric.
+
+    - PASS: A matching metric filter with an associated alarm exists.
+    - FAIL: No matching metric filter, or a filter without an alarm, was found.
+    - MANUAL: CloudTrail trails, log groups, metric filters or alarms could
+      not be listed in at least one region, so the absence of a filter/alarm
+      cannot be asserted.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Evaluate the metric filter and alarm coverage for the account.
+
+        Returns:
+            list[Check_Report_AWS]: A single report for the account.
+        """
         pattern = build_metric_filter_pattern(
             event_source="ec2.amazonaws.com",
             event_names=[
@@ -36,16 +53,29 @@ class cloudwatch_changes_to_network_route_tables_alarm_configured(Check):
             self.metadata(),
         )
 
-        if cloudtrail_client.trails is not None:
-            if report is None:
-                report = Check_Report_AWS(metadata=self.metadata(), resource={})
-                report.status = "FAIL"
-                report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
-                report.region = logs_client.region
-                report.resource_id = logs_client.audited_account
-                report.resource_arn = logs_client.log_group_arn_template
-                report.resource_tags = []
+        inventory_unavailable = (
+            cloudtrail_client.trails_unavailable
+            or logs_client.log_groups_unavailable
+            or logs_client.metric_filters_unavailable
+            or cloudwatch_client.metric_alarms_unavailable
+        )
 
-            findings.append(report)
+        if report is None:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.status = "FAIL"
+            report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
+            report.region = logs_client.region
+            report.resource_id = logs_client.audited_account
+            report.resource_arn = logs_client.log_group_arn_template
+            report.resource_tags = []
+
+        # A denied listing in any region means the inventory is incomplete: a
+        # PASS is still backed by a real filter and alarm, but a FAIL (nothing
+        # found, or a filter found without its alarm) cannot be trusted.
+        if report.status == "FAIL" and inventory_unavailable:
+            report.status = "MANUAL"
+            report.status_extended = "Cannot evaluate CloudWatch metric filters and alarms: CloudTrail trails, log groups, metric filters or alarms could not be listed in at least one region. Verify that the scanning credentials are allowed to call cloudtrail:DescribeTrails, logs:DescribeLogGroups, logs:DescribeMetricFilters and cloudwatch:DescribeAlarms."
+
+        findings.append(report)
 
         return findings
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_vpcs_alarm_configured/cloudwatch_changes_to_vpcs_alarm_configured.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_vpcs_alarm_configured/cloudwatch_changes_to_vpcs_alarm_configured.py
index be4fb0859d..35488dd8fa 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_vpcs_alarm_configured/cloudwatch_changes_to_vpcs_alarm_configured.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_vpcs_alarm_configured/cloudwatch_changes_to_vpcs_alarm_configured.py
@@ -13,7 +13,24 @@ from prowler.providers.aws.services.cloudwatch.logs_client import logs_client
 
 
 class cloudwatch_changes_to_vpcs_alarm_configured(Check):
-    def execute(self):
+    """AWS account has a CloudWatch Logs metric filter and alarm for VPC changes.
+
+    Looks for a CloudWatch Logs metric filter matching the expected pattern on a
+    log group used by a CloudTrail trail, with at least one alarm on its metric.
+
+    - PASS: A matching metric filter with an associated alarm exists.
+    - FAIL: No matching metric filter, or a filter without an alarm, was found.
+    - MANUAL: CloudTrail trails, log groups, metric filters or alarms could
+      not be listed in at least one region, so the absence of a filter/alarm
+      cannot be asserted.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Evaluate the metric filter and alarm coverage for the account.
+
+        Returns:
+            list[Check_Report_AWS]: A single report for the account.
+        """
         pattern = build_metric_filter_pattern(
             event_names=[
                 "CreateVpc",
@@ -39,16 +56,29 @@ class cloudwatch_changes_to_vpcs_alarm_configured(Check):
             self.metadata(),
         )
 
-        if cloudtrail_client.trails is not None:
-            if report is None:
-                report = Check_Report_AWS(metadata=self.metadata(), resource={})
-                report.status = "FAIL"
-                report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
-                report.region = logs_client.region
-                report.resource_id = logs_client.audited_account
-                report.resource_arn = logs_client.log_group_arn_template
-                report.resource_tags = []
+        inventory_unavailable = (
+            cloudtrail_client.trails_unavailable
+            or logs_client.log_groups_unavailable
+            or logs_client.metric_filters_unavailable
+            or cloudwatch_client.metric_alarms_unavailable
+        )
 
-            findings.append(report)
+        if report is None:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.status = "FAIL"
+            report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
+            report.region = logs_client.region
+            report.resource_id = logs_client.audited_account
+            report.resource_arn = logs_client.log_group_arn_template
+            report.resource_tags = []
+
+        # A denied listing in any region means the inventory is incomplete: a
+        # PASS is still backed by a real filter and alarm, but a FAIL (nothing
+        # found, or a filter found without its alarm) cannot be trusted.
+        if report.status == "FAIL" and inventory_unavailable:
+            report.status = "MANUAL"
+            report.status_extended = "Cannot evaluate CloudWatch metric filters and alarms: CloudTrail trails, log groups, metric filters or alarms could not be listed in at least one region. Verify that the scanning credentials are allowed to call cloudtrail:DescribeTrails, logs:DescribeLogGroups, logs:DescribeMetricFilters and cloudwatch:DescribeAlarms."
+
+        findings.append(report)
 
         return findings
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled.py
index 49bf9a03a3..17da91376f 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled.py
@@ -15,7 +15,24 @@ from prowler.providers.aws.services.cloudwatch.logs_client import logs_client
 class cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled(
     Check
 ):
-    def execute(self):
+    """CloudWatch Logs metric filter and alarm exist for AWS Config configuration changes.
+
+    Looks for a CloudWatch Logs metric filter matching the expected pattern on a
+    log group used by a CloudTrail trail, with at least one alarm on its metric.
+
+    - PASS: A matching metric filter with an associated alarm exists.
+    - FAIL: No matching metric filter, or a filter without an alarm, was found.
+    - MANUAL: CloudTrail trails, log groups, metric filters or alarms could
+      not be listed in at least one region, so the absence of a filter/alarm
+      cannot be asserted.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Evaluate the metric filter and alarm coverage for the account.
+
+        Returns:
+            list[Check_Report_AWS]: A single report for the account.
+        """
         pattern = build_metric_filter_pattern(
             event_source="config.amazonaws.com",
             event_names=[
@@ -35,16 +52,29 @@ class cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_change
             self.metadata(),
         )
 
-        if cloudtrail_client.trails is not None:
-            if report is None:
-                report = Check_Report_AWS(metadata=self.metadata(), resource={})
-                report.status = "FAIL"
-                report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
-                report.region = logs_client.region
-                report.resource_id = logs_client.audited_account
-                report.resource_arn = logs_client.log_group_arn_template
-                report.resource_tags = []
+        inventory_unavailable = (
+            cloudtrail_client.trails_unavailable
+            or logs_client.log_groups_unavailable
+            or logs_client.metric_filters_unavailable
+            or cloudwatch_client.metric_alarms_unavailable
+        )
 
-            findings.append(report)
+        if report is None:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.status = "FAIL"
+            report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
+            report.region = logs_client.region
+            report.resource_id = logs_client.audited_account
+            report.resource_arn = logs_client.log_group_arn_template
+            report.resource_tags = []
+
+        # A denied listing in any region means the inventory is incomplete: a
+        # PASS is still backed by a real filter and alarm, but a FAIL (nothing
+        # found, or a filter found without its alarm) cannot be trusted.
+        if report.status == "FAIL" and inventory_unavailable:
+            report.status = "MANUAL"
+            report.status_extended = "Cannot evaluate CloudWatch metric filters and alarms: CloudTrail trails, log groups, metric filters or alarms could not be listed in at least one region. Verify that the scanning credentials are allowed to call cloudtrail:DescribeTrails, logs:DescribeLogGroups, logs:DescribeMetricFilters and cloudwatch:DescribeAlarms."
+
+        findings.append(report)
 
         return findings
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_changes_enabled/cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_changes_enabled.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_changes_enabled/cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_changes_enabled.py
index e9567315f4..1c9efa94e2 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_changes_enabled/cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_changes_enabled.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_changes_enabled/cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_changes_enabled.py
@@ -15,7 +15,24 @@ from prowler.providers.aws.services.cloudwatch.logs_client import logs_client
 class cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_changes_enabled(
     Check
 ):
-    def execute(self):
+    """CloudWatch Logs metric filter and alarm exist for CloudTrail configuration changes.
+
+    Looks for a CloudWatch Logs metric filter matching the expected pattern on a
+    log group used by a CloudTrail trail, with at least one alarm on its metric.
+
+    - PASS: A matching metric filter with an associated alarm exists.
+    - FAIL: No matching metric filter, or a filter without an alarm, was found.
+    - MANUAL: CloudTrail trails, log groups, metric filters or alarms could
+      not be listed in at least one region, so the absence of a filter/alarm
+      cannot be asserted.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Evaluate the metric filter and alarm coverage for the account.
+
+        Returns:
+            list[Check_Report_AWS]: A single report for the account.
+        """
         pattern = build_metric_filter_pattern(
             event_names=[
                 "CreateTrail",
@@ -35,16 +52,29 @@ class cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_change
             self.metadata(),
         )
 
-        if cloudtrail_client.trails is not None:
-            if report is None:
-                report = Check_Report_AWS(metadata=self.metadata(), resource={})
-                report.status = "FAIL"
-                report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
-                report.region = logs_client.region
-                report.resource_id = logs_client.audited_account
-                report.resource_arn = logs_client.log_group_arn_template
-                report.resource_tags = []
+        inventory_unavailable = (
+            cloudtrail_client.trails_unavailable
+            or logs_client.log_groups_unavailable
+            or logs_client.metric_filters_unavailable
+            or cloudwatch_client.metric_alarms_unavailable
+        )
 
-            findings.append(report)
+        if report is None:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.status = "FAIL"
+            report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
+            report.region = logs_client.region
+            report.resource_id = logs_client.audited_account
+            report.resource_arn = logs_client.log_group_arn_template
+            report.resource_tags = []
+
+        # A denied listing in any region means the inventory is incomplete: a
+        # PASS is still backed by a real filter and alarm, but a FAIL (nothing
+        # found, or a filter found without its alarm) cannot be trusted.
+        if report.status == "FAIL" and inventory_unavailable:
+            report.status = "MANUAL"
+            report.status_extended = "Cannot evaluate CloudWatch metric filters and alarms: CloudTrail trails, log groups, metric filters or alarms could not be listed in at least one region. Verify that the scanning credentials are allowed to call cloudtrail:DescribeTrails, logs:DescribeLogGroups, logs:DescribeMetricFilters and cloudwatch:DescribeAlarms."
+
+        findings.append(report)
 
         return findings
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_authentication_failures/cloudwatch_log_metric_filter_authentication_failures.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_authentication_failures/cloudwatch_log_metric_filter_authentication_failures.py
index 1b2e5173bb..c99d164bce 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_authentication_failures/cloudwatch_log_metric_filter_authentication_failures.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_authentication_failures/cloudwatch_log_metric_filter_authentication_failures.py
@@ -13,7 +13,24 @@ from prowler.providers.aws.services.cloudwatch.logs_client import logs_client
 
 
 class cloudwatch_log_metric_filter_authentication_failures(Check):
-    def execute(self):
+    """Account has a CloudWatch Logs metric filter and alarm for AWS Management Console authentication failures.
+
+    Looks for a CloudWatch Logs metric filter matching the expected pattern on a
+    log group used by a CloudTrail trail, with at least one alarm on its metric.
+
+    - PASS: A matching metric filter with an associated alarm exists.
+    - FAIL: No matching metric filter, or a filter without an alarm, was found.
+    - MANUAL: CloudTrail trails, log groups, metric filters or alarms could
+      not be listed in at least one region, so the absence of a filter/alarm
+      cannot be asserted.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Evaluate the metric filter and alarm coverage for the account.
+
+        Returns:
+            list[Check_Report_AWS]: A single report for the account.
+        """
         pattern = build_metric_filter_pattern(
             event_names=["ConsoleLogin"],
             extra_clauses=[("errorMessage", "=", "Failed authentication")],
@@ -28,16 +45,29 @@ class cloudwatch_log_metric_filter_authentication_failures(Check):
             self.metadata(),
         )
 
-        if cloudtrail_client.trails is not None:
-            if report is None:
-                report = Check_Report_AWS(metadata=self.metadata(), resource={})
-                report.status = "FAIL"
-                report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
-                report.region = logs_client.region
-                report.resource_id = logs_client.audited_account
-                report.resource_arn = logs_client.log_group_arn_template
-                report.resource_tags = []
+        inventory_unavailable = (
+            cloudtrail_client.trails_unavailable
+            or logs_client.log_groups_unavailable
+            or logs_client.metric_filters_unavailable
+            or cloudwatch_client.metric_alarms_unavailable
+        )
 
-            findings.append(report)
+        if report is None:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.status = "FAIL"
+            report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
+            report.region = logs_client.region
+            report.resource_id = logs_client.audited_account
+            report.resource_arn = logs_client.log_group_arn_template
+            report.resource_tags = []
+
+        # A denied listing in any region means the inventory is incomplete: a
+        # PASS is still backed by a real filter and alarm, but a FAIL (nothing
+        # found, or a filter found without its alarm) cannot be trusted.
+        if report.status == "FAIL" and inventory_unavailable:
+            report.status = "MANUAL"
+            report.status_extended = "Cannot evaluate CloudWatch metric filters and alarms: CloudTrail trails, log groups, metric filters or alarms could not be listed in at least one region. Verify that the scanning credentials are allowed to call cloudtrail:DescribeTrails, logs:DescribeLogGroups, logs:DescribeMetricFilters and cloudwatch:DescribeAlarms."
+
+        findings.append(report)
 
         return findings
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_aws_organizations_changes/cloudwatch_log_metric_filter_aws_organizations_changes.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_aws_organizations_changes/cloudwatch_log_metric_filter_aws_organizations_changes.py
index 9976a885bb..f876dbeda2 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_aws_organizations_changes/cloudwatch_log_metric_filter_aws_organizations_changes.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_aws_organizations_changes/cloudwatch_log_metric_filter_aws_organizations_changes.py
@@ -13,7 +13,24 @@ from prowler.providers.aws.services.cloudwatch.logs_client import logs_client
 
 
 class cloudwatch_log_metric_filter_aws_organizations_changes(Check):
-    def execute(self):
+    """CloudWatch Logs metric filter and alarm exist for AWS Organizations changes.
+
+    Looks for a CloudWatch Logs metric filter matching the expected pattern on a
+    log group used by a CloudTrail trail, with at least one alarm on its metric.
+
+    - PASS: A matching metric filter with an associated alarm exists.
+    - FAIL: No matching metric filter, or a filter without an alarm, was found.
+    - MANUAL: CloudTrail trails, log groups, metric filters or alarms could
+      not be listed in at least one region, so the absence of a filter/alarm
+      cannot be asserted.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Evaluate the metric filter and alarm coverage for the account.
+
+        Returns:
+            list[Check_Report_AWS]: A single report for the account.
+        """
         pattern = build_metric_filter_pattern(
             event_source="organizations.amazonaws.com",
             event_names=[
@@ -50,16 +67,29 @@ class cloudwatch_log_metric_filter_aws_organizations_changes(Check):
             self.metadata(),
         )
 
-        if cloudtrail_client.trails is not None:
-            if report is None:
-                report = Check_Report_AWS(metadata=self.metadata(), resource={})
-                report.status = "FAIL"
-                report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
-                report.region = logs_client.region
-                report.resource_id = logs_client.audited_account
-                report.resource_arn = logs_client.log_group_arn_template
-                report.resource_tags = []
+        inventory_unavailable = (
+            cloudtrail_client.trails_unavailable
+            or logs_client.log_groups_unavailable
+            or logs_client.metric_filters_unavailable
+            or cloudwatch_client.metric_alarms_unavailable
+        )
 
-            findings.append(report)
+        if report is None:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.status = "FAIL"
+            report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
+            report.region = logs_client.region
+            report.resource_id = logs_client.audited_account
+            report.resource_arn = logs_client.log_group_arn_template
+            report.resource_tags = []
+
+        # A denied listing in any region means the inventory is incomplete: a
+        # PASS is still backed by a real filter and alarm, but a FAIL (nothing
+        # found, or a filter found without its alarm) cannot be trusted.
+        if report.status == "FAIL" and inventory_unavailable:
+            report.status = "MANUAL"
+            report.status_extended = "Cannot evaluate CloudWatch metric filters and alarms: CloudTrail trails, log groups, metric filters or alarms could not be listed in at least one region. Verify that the scanning credentials are allowed to call cloudtrail:DescribeTrails, logs:DescribeLogGroups, logs:DescribeMetricFilters and cloudwatch:DescribeAlarms."
+
+        findings.append(report)
 
         return findings
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_disable_or_scheduled_deletion_of_kms_cmk/cloudwatch_log_metric_filter_disable_or_scheduled_deletion_of_kms_cmk.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_disable_or_scheduled_deletion_of_kms_cmk/cloudwatch_log_metric_filter_disable_or_scheduled_deletion_of_kms_cmk.py
index 20d1d62a5a..faa759608b 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_disable_or_scheduled_deletion_of_kms_cmk/cloudwatch_log_metric_filter_disable_or_scheduled_deletion_of_kms_cmk.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_disable_or_scheduled_deletion_of_kms_cmk/cloudwatch_log_metric_filter_disable_or_scheduled_deletion_of_kms_cmk.py
@@ -13,7 +13,24 @@ from prowler.providers.aws.services.cloudwatch.logs_client import logs_client
 
 
 class cloudwatch_log_metric_filter_disable_or_scheduled_deletion_of_kms_cmk(Check):
-    def execute(self):
+    """Account has a CloudWatch log metric filter and alarm for disabling or scheduled deletion of customer-managed KMS keys.
+
+    Looks for a CloudWatch Logs metric filter matching the expected pattern on a
+    log group used by a CloudTrail trail, with at least one alarm on its metric.
+
+    - PASS: A matching metric filter with an associated alarm exists.
+    - FAIL: No matching metric filter, or a filter without an alarm, was found.
+    - MANUAL: CloudTrail trails, log groups, metric filters or alarms could
+      not be listed in at least one region, so the absence of a filter/alarm
+      cannot be asserted.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Evaluate the metric filter and alarm coverage for the account.
+
+        Returns:
+            list[Check_Report_AWS]: A single report for the account.
+        """
         pattern = build_metric_filter_pattern(
             event_source="kms.amazonaws.com",
             event_names=["DisableKey", "ScheduleKeyDeletion"],
@@ -28,16 +45,29 @@ class cloudwatch_log_metric_filter_disable_or_scheduled_deletion_of_kms_cmk(Chec
             self.metadata(),
         )
 
-        if cloudtrail_client.trails is not None:
-            if report is None:
-                report = Check_Report_AWS(metadata=self.metadata(), resource={})
-                report.status = "FAIL"
-                report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
-                report.region = logs_client.region
-                report.resource_id = logs_client.audited_account
-                report.resource_arn = logs_client.log_group_arn_template
-                report.resource_tags = []
+        inventory_unavailable = (
+            cloudtrail_client.trails_unavailable
+            or logs_client.log_groups_unavailable
+            or logs_client.metric_filters_unavailable
+            or cloudwatch_client.metric_alarms_unavailable
+        )
 
-            findings.append(report)
+        if report is None:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.status = "FAIL"
+            report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
+            report.region = logs_client.region
+            report.resource_id = logs_client.audited_account
+            report.resource_arn = logs_client.log_group_arn_template
+            report.resource_tags = []
+
+        # A denied listing in any region means the inventory is incomplete: a
+        # PASS is still backed by a real filter and alarm, but a FAIL (nothing
+        # found, or a filter found without its alarm) cannot be trusted.
+        if report.status == "FAIL" and inventory_unavailable:
+            report.status = "MANUAL"
+            report.status_extended = "Cannot evaluate CloudWatch metric filters and alarms: CloudTrail trails, log groups, metric filters or alarms could not be listed in at least one region. Verify that the scanning credentials are allowed to call cloudtrail:DescribeTrails, logs:DescribeLogGroups, logs:DescribeMetricFilters and cloudwatch:DescribeAlarms."
+
+        findings.append(report)
 
         return findings
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_for_s3_bucket_policy_changes/cloudwatch_log_metric_filter_for_s3_bucket_policy_changes.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_for_s3_bucket_policy_changes/cloudwatch_log_metric_filter_for_s3_bucket_policy_changes.py
index d5fe1ef994..95579f5a37 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_for_s3_bucket_policy_changes/cloudwatch_log_metric_filter_for_s3_bucket_policy_changes.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_for_s3_bucket_policy_changes/cloudwatch_log_metric_filter_for_s3_bucket_policy_changes.py
@@ -13,7 +13,24 @@ from prowler.providers.aws.services.cloudwatch.logs_client import logs_client
 
 
 class cloudwatch_log_metric_filter_for_s3_bucket_policy_changes(Check):
-    def execute(self):
+    """CloudWatch log metric filter and alarm exist for S3 bucket policy changes.
+
+    Looks for a CloudWatch Logs metric filter matching the expected pattern on a
+    log group used by a CloudTrail trail, with at least one alarm on its metric.
+
+    - PASS: A matching metric filter with an associated alarm exists.
+    - FAIL: No matching metric filter, or a filter without an alarm, was found.
+    - MANUAL: CloudTrail trails, log groups, metric filters or alarms could
+      not be listed in at least one region, so the absence of a filter/alarm
+      cannot be asserted.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Evaluate the metric filter and alarm coverage for the account.
+
+        Returns:
+            list[Check_Report_AWS]: A single report for the account.
+        """
         pattern = build_metric_filter_pattern(
             event_source="s3.amazonaws.com",
             event_names=[
@@ -38,16 +55,29 @@ class cloudwatch_log_metric_filter_for_s3_bucket_policy_changes(Check):
             self.metadata(),
         )
 
-        if cloudtrail_client.trails is not None:
-            if report is None:
-                report = Check_Report_AWS(metadata=self.metadata(), resource={})
-                report.status = "FAIL"
-                report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
-                report.region = logs_client.region
-                report.resource_id = logs_client.audited_account
-                report.resource_arn = logs_client.log_group_arn_template
-                report.resource_tags = []
+        inventory_unavailable = (
+            cloudtrail_client.trails_unavailable
+            or logs_client.log_groups_unavailable
+            or logs_client.metric_filters_unavailable
+            or cloudwatch_client.metric_alarms_unavailable
+        )
 
-            findings.append(report)
+        if report is None:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.status = "FAIL"
+            report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
+            report.region = logs_client.region
+            report.resource_id = logs_client.audited_account
+            report.resource_arn = logs_client.log_group_arn_template
+            report.resource_tags = []
+
+        # A denied listing in any region means the inventory is incomplete: a
+        # PASS is still backed by a real filter and alarm, but a FAIL (nothing
+        # found, or a filter found without its alarm) cannot be trusted.
+        if report.status == "FAIL" and inventory_unavailable:
+            report.status = "MANUAL"
+            report.status_extended = "Cannot evaluate CloudWatch metric filters and alarms: CloudTrail trails, log groups, metric filters or alarms could not be listed in at least one region. Verify that the scanning credentials are allowed to call cloudtrail:DescribeTrails, logs:DescribeLogGroups, logs:DescribeMetricFilters and cloudwatch:DescribeAlarms."
+
+        findings.append(report)
 
         return findings
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_policy_changes/cloudwatch_log_metric_filter_policy_changes.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_policy_changes/cloudwatch_log_metric_filter_policy_changes.py
index 4347a9b3aa..af43cfbb0f 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_policy_changes/cloudwatch_log_metric_filter_policy_changes.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_policy_changes/cloudwatch_log_metric_filter_policy_changes.py
@@ -13,7 +13,24 @@ from prowler.providers.aws.services.cloudwatch.logs_client import logs_client
 
 
 class cloudwatch_log_metric_filter_policy_changes(Check):
-    def execute(self):
+    """CloudWatch Logs metric filter and alarm exist for IAM policy changes.
+
+    Looks for a CloudWatch Logs metric filter matching the expected pattern on a
+    log group used by a CloudTrail trail, with at least one alarm on its metric.
+
+    - PASS: A matching metric filter with an associated alarm exists.
+    - FAIL: No matching metric filter, or a filter without an alarm, was found.
+    - MANUAL: CloudTrail trails, log groups, metric filters or alarms could
+      not be listed in at least one region, so the absence of a filter/alarm
+      cannot be asserted.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Evaluate the metric filter and alarm coverage for the account.
+
+        Returns:
+            list[Check_Report_AWS]: A single report for the account.
+        """
         pattern = build_metric_filter_pattern(
             event_names=[
                 "DeleteGroupPolicy",
@@ -44,16 +61,29 @@ class cloudwatch_log_metric_filter_policy_changes(Check):
             self.metadata(),
         )
 
-        if cloudtrail_client.trails is not None:
-            if report is None:
-                report = Check_Report_AWS(metadata=self.metadata(), resource={})
-                report.status = "FAIL"
-                report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
-                report.region = logs_client.region
-                report.resource_id = logs_client.audited_account
-                report.resource_arn = logs_client.log_group_arn_template
-                report.resource_tags = []
+        inventory_unavailable = (
+            cloudtrail_client.trails_unavailable
+            or logs_client.log_groups_unavailable
+            or logs_client.metric_filters_unavailable
+            or cloudwatch_client.metric_alarms_unavailable
+        )
 
-            findings.append(report)
+        if report is None:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.status = "FAIL"
+            report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
+            report.region = logs_client.region
+            report.resource_id = logs_client.audited_account
+            report.resource_arn = logs_client.log_group_arn_template
+            report.resource_tags = []
+
+        # A denied listing in any region means the inventory is incomplete: a
+        # PASS is still backed by a real filter and alarm, but a FAIL (nothing
+        # found, or a filter found without its alarm) cannot be trusted.
+        if report.status == "FAIL" and inventory_unavailable:
+            report.status = "MANUAL"
+            report.status_extended = "Cannot evaluate CloudWatch metric filters and alarms: CloudTrail trails, log groups, metric filters or alarms could not be listed in at least one region. Verify that the scanning credentials are allowed to call cloudtrail:DescribeTrails, logs:DescribeLogGroups, logs:DescribeMetricFilters and cloudwatch:DescribeAlarms."
+
+        findings.append(report)
 
         return findings
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_root_usage/cloudwatch_log_metric_filter_root_usage.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_root_usage/cloudwatch_log_metric_filter_root_usage.py
index acdb49a9dc..149e3738ff 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_root_usage/cloudwatch_log_metric_filter_root_usage.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_root_usage/cloudwatch_log_metric_filter_root_usage.py
@@ -12,7 +12,24 @@ from prowler.providers.aws.services.cloudwatch.logs_client import logs_client
 
 
 class cloudwatch_log_metric_filter_root_usage(Check):
-    def execute(self):
+    """Account has a CloudWatch Logs metric filter and alarm for root account usage.
+
+    Looks for a CloudWatch Logs metric filter matching the expected pattern on a
+    log group used by a CloudTrail trail, with at least one alarm on its metric.
+
+    - PASS: A matching metric filter with an associated alarm exists.
+    - FAIL: No matching metric filter, or a filter without an alarm, was found.
+    - MANUAL: CloudTrail trails, log groups, metric filters or alarms could
+      not be listed in at least one region, so the absence of a filter/alarm
+      cannot be asserted.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Evaluate the metric filter and alarm coverage for the account.
+
+        Returns:
+            list[Check_Report_AWS]: A single report for the account.
+        """
         pattern = r"\$\.userIdentity\.type\s*=\s*.?Root.+\$\.userIdentity\.invokedBy NOT EXISTS.+\$\.eventType\s*!=\s*.?AwsServiceEvent.?"
         findings = []
 
@@ -24,16 +41,29 @@ class cloudwatch_log_metric_filter_root_usage(Check):
             self.metadata(),
         )
 
-        if cloudtrail_client.trails is not None:
-            if report is None:
-                report = Check_Report_AWS(metadata=self.metadata(), resource={})
-                report.status = "FAIL"
-                report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
-                report.region = logs_client.region
-                report.resource_id = logs_client.audited_account
-                report.resource_arn = logs_client.log_group_arn_template
-                report.resource_tags = []
+        inventory_unavailable = (
+            cloudtrail_client.trails_unavailable
+            or logs_client.log_groups_unavailable
+            or logs_client.metric_filters_unavailable
+            or cloudwatch_client.metric_alarms_unavailable
+        )
 
-            findings.append(report)
+        if report is None:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.status = "FAIL"
+            report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
+            report.region = logs_client.region
+            report.resource_id = logs_client.audited_account
+            report.resource_arn = logs_client.log_group_arn_template
+            report.resource_tags = []
+
+        # A denied listing in any region means the inventory is incomplete: a
+        # PASS is still backed by a real filter and alarm, but a FAIL (nothing
+        # found, or a filter found without its alarm) cannot be trusted.
+        if report.status == "FAIL" and inventory_unavailable:
+            report.status = "MANUAL"
+            report.status_extended = "Cannot evaluate CloudWatch metric filters and alarms: CloudTrail trails, log groups, metric filters or alarms could not be listed in at least one region. Verify that the scanning credentials are allowed to call cloudtrail:DescribeTrails, logs:DescribeLogGroups, logs:DescribeMetricFilters and cloudwatch:DescribeAlarms."
+
+        findings.append(report)
 
         return findings
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_security_group_changes/cloudwatch_log_metric_filter_security_group_changes.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_security_group_changes/cloudwatch_log_metric_filter_security_group_changes.py
index 3557632904..a60476fa0c 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_security_group_changes/cloudwatch_log_metric_filter_security_group_changes.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_security_group_changes/cloudwatch_log_metric_filter_security_group_changes.py
@@ -13,7 +13,24 @@ from prowler.providers.aws.services.cloudwatch.logs_client import logs_client
 
 
 class cloudwatch_log_metric_filter_security_group_changes(Check):
-    def execute(self):
+    """CloudWatch Logs metric filter and alarm exist for security group changes.
+
+    Looks for a CloudWatch Logs metric filter matching the expected pattern on a
+    log group used by a CloudTrail trail, with at least one alarm on its metric.
+
+    - PASS: A matching metric filter with an associated alarm exists.
+    - FAIL: No matching metric filter, or a filter without an alarm, was found.
+    - MANUAL: CloudTrail trails, log groups, metric filters or alarms could
+      not be listed in at least one region, so the absence of a filter/alarm
+      cannot be asserted.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Evaluate the metric filter and alarm coverage for the account.
+
+        Returns:
+            list[Check_Report_AWS]: A single report for the account.
+        """
         pattern = build_metric_filter_pattern(
             event_names=[
                 "AuthorizeSecurityGroupIngress",
@@ -34,16 +51,29 @@ class cloudwatch_log_metric_filter_security_group_changes(Check):
             self.metadata(),
         )
 
-        if cloudtrail_client.trails is not None:
-            if report is None:
-                report = Check_Report_AWS(metadata=self.metadata(), resource={})
-                report.status = "FAIL"
-                report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
-                report.region = logs_client.region
-                report.resource_id = logs_client.audited_account
-                report.resource_arn = logs_client.log_group_arn_template
-                report.resource_tags = []
+        inventory_unavailable = (
+            cloudtrail_client.trails_unavailable
+            or logs_client.log_groups_unavailable
+            or logs_client.metric_filters_unavailable
+            or cloudwatch_client.metric_alarms_unavailable
+        )
 
-            findings.append(report)
+        if report is None:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.status = "FAIL"
+            report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
+            report.region = logs_client.region
+            report.resource_id = logs_client.audited_account
+            report.resource_arn = logs_client.log_group_arn_template
+            report.resource_tags = []
+
+        # A denied listing in any region means the inventory is incomplete: a
+        # PASS is still backed by a real filter and alarm, but a FAIL (nothing
+        # found, or a filter found without its alarm) cannot be trusted.
+        if report.status == "FAIL" and inventory_unavailable:
+            report.status = "MANUAL"
+            report.status_extended = "Cannot evaluate CloudWatch metric filters and alarms: CloudTrail trails, log groups, metric filters or alarms could not be listed in at least one region. Verify that the scanning credentials are allowed to call cloudtrail:DescribeTrails, logs:DescribeLogGroups, logs:DescribeMetricFilters and cloudwatch:DescribeAlarms."
+
+        findings.append(report)
 
         return findings
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_sign_in_without_mfa/cloudwatch_log_metric_filter_sign_in_without_mfa.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_sign_in_without_mfa/cloudwatch_log_metric_filter_sign_in_without_mfa.py
index 07475a6185..f870a93109 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_sign_in_without_mfa/cloudwatch_log_metric_filter_sign_in_without_mfa.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_sign_in_without_mfa/cloudwatch_log_metric_filter_sign_in_without_mfa.py
@@ -13,7 +13,24 @@ from prowler.providers.aws.services.cloudwatch.logs_client import logs_client
 
 
 class cloudwatch_log_metric_filter_sign_in_without_mfa(Check):
-    def execute(self):
+    """CloudWatch log metric filter and alarm exist for Management Console sign-in without MFA.
+
+    Looks for a CloudWatch Logs metric filter matching the expected pattern on a
+    log group used by a CloudTrail trail, with at least one alarm on its metric.
+
+    - PASS: A matching metric filter with an associated alarm exists.
+    - FAIL: No matching metric filter, or a filter without an alarm, was found.
+    - MANUAL: CloudTrail trails, log groups, metric filters or alarms could
+      not be listed in at least one region, so the absence of a filter/alarm
+      cannot be asserted.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Evaluate the metric filter and alarm coverage for the account.
+
+        Returns:
+            list[Check_Report_AWS]: A single report for the account.
+        """
         pattern = build_metric_filter_pattern(
             event_names=["ConsoleLogin"],
             extra_clauses=[("additionalEventData.MFAUsed", "!=", "Yes")],
@@ -28,16 +45,29 @@ class cloudwatch_log_metric_filter_sign_in_without_mfa(Check):
             self.metadata(),
         )
 
-        if cloudtrail_client.trails is not None:
-            if report is None:
-                report = Check_Report_AWS(metadata=self.metadata(), resource={})
-                report.status = "FAIL"
-                report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
-                report.region = logs_client.region
-                report.resource_id = logs_client.audited_account
-                report.resource_arn = logs_client.log_group_arn_template
-                report.resource_tags = []
+        inventory_unavailable = (
+            cloudtrail_client.trails_unavailable
+            or logs_client.log_groups_unavailable
+            or logs_client.metric_filters_unavailable
+            or cloudwatch_client.metric_alarms_unavailable
+        )
 
-            findings.append(report)
+        if report is None:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.status = "FAIL"
+            report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
+            report.region = logs_client.region
+            report.resource_id = logs_client.audited_account
+            report.resource_arn = logs_client.log_group_arn_template
+            report.resource_tags = []
+
+        # A denied listing in any region means the inventory is incomplete: a
+        # PASS is still backed by a real filter and alarm, but a FAIL (nothing
+        # found, or a filter found without its alarm) cannot be trusted.
+        if report.status == "FAIL" and inventory_unavailable:
+            report.status = "MANUAL"
+            report.status_extended = "Cannot evaluate CloudWatch metric filters and alarms: CloudTrail trails, log groups, metric filters or alarms could not be listed in at least one region. Verify that the scanning credentials are allowed to call cloudtrail:DescribeTrails, logs:DescribeLogGroups, logs:DescribeMetricFilters and cloudwatch:DescribeAlarms."
+
+        findings.append(report)
 
         return findings
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_unauthorized_api_calls/cloudwatch_log_metric_filter_unauthorized_api_calls.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_unauthorized_api_calls/cloudwatch_log_metric_filter_unauthorized_api_calls.py
index a328560ee3..045c5f4b96 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_unauthorized_api_calls/cloudwatch_log_metric_filter_unauthorized_api_calls.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_unauthorized_api_calls/cloudwatch_log_metric_filter_unauthorized_api_calls.py
@@ -12,7 +12,24 @@ from prowler.providers.aws.services.cloudwatch.logs_client import logs_client
 
 
 class cloudwatch_log_metric_filter_unauthorized_api_calls(Check):
-    def execute(self):
+    """CloudWatch Logs metric filter and alarm exist for unauthorized API calls.
+
+    Looks for a CloudWatch Logs metric filter matching the expected pattern on a
+    log group used by a CloudTrail trail, with at least one alarm on its metric.
+
+    - PASS: A matching metric filter with an associated alarm exists.
+    - FAIL: No matching metric filter, or a filter without an alarm, was found.
+    - MANUAL: CloudTrail trails, log groups, metric filters or alarms could
+      not be listed in at least one region, so the absence of a filter/alarm
+      cannot be asserted.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Evaluate the metric filter and alarm coverage for the account.
+
+        Returns:
+            list[Check_Report_AWS]: A single report for the account.
+        """
         pattern = r"\$\.errorCode\s*=\s*.?\*UnauthorizedOperation.+\$\.errorCode\s*=\s*.?AccessDenied\*.?"
         findings = []
 
@@ -24,16 +41,29 @@ class cloudwatch_log_metric_filter_unauthorized_api_calls(Check):
             self.metadata(),
         )
 
-        if cloudtrail_client.trails is not None:
-            if report is None:
-                report = Check_Report_AWS(metadata=self.metadata(), resource={})
-                report.status = "FAIL"
-                report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
-                report.region = logs_client.region
-                report.resource_id = logs_client.audited_account
-                report.resource_arn = logs_client.log_group_arn_template
-                report.resource_tags = []
+        inventory_unavailable = (
+            cloudtrail_client.trails_unavailable
+            or logs_client.log_groups_unavailable
+            or logs_client.metric_filters_unavailable
+            or cloudwatch_client.metric_alarms_unavailable
+        )
 
-            findings.append(report)
+        if report is None:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.status = "FAIL"
+            report.status_extended = "No CloudWatch log groups found with metric filters or alarms associated."
+            report.region = logs_client.region
+            report.resource_id = logs_client.audited_account
+            report.resource_arn = logs_client.log_group_arn_template
+            report.resource_tags = []
+
+        # A denied listing in any region means the inventory is incomplete: a
+        # PASS is still backed by a real filter and alarm, but a FAIL (nothing
+        # found, or a filter found without its alarm) cannot be trusted.
+        if report.status == "FAIL" and inventory_unavailable:
+            report.status = "MANUAL"
+            report.status_extended = "Cannot evaluate CloudWatch metric filters and alarms: CloudTrail trails, log groups, metric filters or alarms could not be listed in at least one region. Verify that the scanning credentials are allowed to call cloudtrail:DescribeTrails, logs:DescribeLogGroups, logs:DescribeMetricFilters and cloudwatch:DescribeAlarms."
+
+        findings.append(report)
 
         return findings
diff --git a/prowler/providers/aws/services/cloudwatch/cloudwatch_service.py b/prowler/providers/aws/services/cloudwatch/cloudwatch_service.py
index d01ce42142..017deb3331 100644
--- a/prowler/providers/aws/services/cloudwatch/cloudwatch_service.py
+++ b/prowler/providers/aws/services/cloudwatch/cloudwatch_service.py
@@ -19,6 +19,9 @@ class CloudWatch(AWSService):
         # Call AWSService's __init__
         super().__init__(__class__.__name__, provider)
         self.metric_alarms = []
+        # True when DescribeAlarms was denied in at least one audited region,
+        # so the alarm inventory may be incomplete.
+        self.metric_alarms_unavailable = False
         self.__threading_call__(self._describe_alarms)
         if self.metric_alarms:
             self._list_tags_for_resource()
@@ -56,13 +59,16 @@ class CloudWatch(AWSService):
                 logger.error(
                     f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
                 )
+                self.metric_alarms_unavailable = True
                 if not self.metric_alarms:
                     self.metric_alarms = None
             else:
+                self.metric_alarms_unavailable = True
                 logger.error(
                     f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
                 )
         except Exception as error:
+            self.metric_alarms_unavailable = True
             logger.error(
                 f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
             )
@@ -92,6 +98,9 @@ class Logs(AWSService):
         # index for cross-service evidence lookups.
         self.all_log_groups = {}
         self.log_groups = {}
+        # True when DescribeLogGroups was denied in at least one audited
+        # region, so the log group inventory may be incomplete.
+        self.log_groups_unavailable = False
         self._log_groups_hydrated = set()
         self.log_group_limit = get_resource_scan_limit(
             self.audit_config, "max_cloudwatch_log_groups"
@@ -103,6 +112,9 @@ class Logs(AWSService):
         self.resource_policies = {}
         self.__threading_call__(self._describe_resource_policies)
         self.metric_filters = []
+        # True when DescribeMetricFilters was denied in at least one audited
+        # region, so the metric filter inventory may be incomplete.
+        self.metric_filters_unavailable = False
         self.__threading_call__(self._describe_metric_filters)
         if self.log_groups:
             if (
@@ -166,6 +178,9 @@ class Logs(AWSService):
                                 arn=arn,
                                 name=filter["filterName"],
                                 metric=filter["metricTransformations"][0]["metricName"],
+                                metric_namespace=filter["metricTransformations"][0].get(
+                                    "metricNamespace"
+                                ),
                                 pattern=filter.get("filterPattern", ""),
                                 log_group=log_group,
                                 region=regional_client.region,
@@ -176,13 +191,16 @@ class Logs(AWSService):
                 logger.error(
                     f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
                 )
+                self.metric_filters_unavailable = True
                 if not self.metric_filters:
                     self.metric_filters = None
             else:
+                self.metric_filters_unavailable = True
                 logger.error(
                     f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
                 )
         except Exception as error:
+            self.metric_filters_unavailable = True
             logger.error(
                 f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
             )
@@ -241,14 +259,17 @@ class Logs(AWSService):
                 logger.error(
                     f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
                 )
+                self.log_groups_unavailable = True
                 if not self.log_groups:
                     self.all_log_groups = None
                     self.log_groups = None
             else:
+                self.log_groups_unavailable = True
                 logger.error(
                     f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
                 )
         except Exception as error:
+            self.log_groups_unavailable = True
             logger.error(
                 f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
             )
@@ -376,6 +397,7 @@ class MetricFilter(BaseModel):
     arn: str
     name: str
     metric: str
+    metric_namespace: Optional[str] = None
     pattern: str
     log_group: Optional[LogGroup] = None
     region: str
diff --git a/prowler/providers/aws/services/cloudwatch/lib/metric_filters.py b/prowler/providers/aws/services/cloudwatch/lib/metric_filters.py
index 069f542b2d..2f5a6e4c51 100644
--- a/prowler/providers/aws/services/cloudwatch/lib/metric_filters.py
+++ b/prowler/providers/aws/services/cloudwatch/lib/metric_filters.py
@@ -62,7 +62,8 @@ def check_cloudwatch_log_metric_filter(
             against each filter's pattern with ``re.DOTALL``.
         trails: CloudTrail trails keyed by ARN; only those with a log group count.
         metric_filters: CloudWatch Logs metric filters to evaluate.
-        metric_alarms: CloudWatch alarms, matched to a filter by metric name.
+        metric_alarms: CloudWatch alarms, matched to a filter by metric name and
+            region, and by namespace when both sides expose one.
         metadata: check metadata for the emitted report.
 
     Returns:
@@ -90,9 +91,20 @@ def check_cloudwatch_log_metric_filter(
                 )
                 report.status = "FAIL"
                 report.status_extended = f"CloudWatch log group {metric_filter.log_group.name} found with metric filter {metric_filter.name} but no alarms associated."
-                # 3. Check if there is an alarm for the metric
+                # 3. Check if there is an alarm for the metric. The alarm must
+                # watch the same metric name in the same region, and the same
+                # namespace when both sides expose one — a same-named metric
+                # in another namespace or region is a different metric.
                 for alarm in metric_alarms:
-                    if alarm.metric == metric_filter.metric:
+                    if (
+                        alarm.metric == metric_filter.metric
+                        and alarm.region == metric_filter.region
+                        and (
+                            not metric_filter.metric_namespace
+                            or not alarm.name_space
+                            or alarm.name_space == metric_filter.metric_namespace
+                        )
+                    ):
                         report.status = "PASS"
                         report.status_extended = f"CloudWatch log group {metric_filter.log_group.name} found with metric filter {metric_filter.name} and alarms set."
                         break
diff --git a/prowler/providers/aws/services/rolesanywhere/rolesanywhere_trust_anchor_pqc_pki/rolesanywhere_trust_anchor_pqc_pki.py b/prowler/providers/aws/services/rolesanywhere/rolesanywhere_trust_anchor_pqc_pki/rolesanywhere_trust_anchor_pqc_pki.py
index 495ed4e9c7..b85e387273 100644
--- a/prowler/providers/aws/services/rolesanywhere/rolesanywhere_trust_anchor_pqc_pki/rolesanywhere_trust_anchor_pqc_pki.py
+++ b/prowler/providers/aws/services/rolesanywhere/rolesanywhere_trust_anchor_pqc_pki/rolesanywhere_trust_anchor_pqc_pki.py
@@ -15,10 +15,13 @@ class rolesanywhere_trust_anchor_pqc_pki(Check):
     """Verify that IAM Roles Anywhere trust anchors are backed by a post-quantum PKI.
 
     For trust anchors whose source is ``AWS_ACM_PCA``, the linked Private CA's
-    ``KeyAlgorithm`` is checked against the configured ML-DSA allowlist.
+    ``KeyAlgorithm`` is checked against the configured ML-DSA allowlist. A CA
+    that exists but cannot be inspected (cross-account or missing acm-pca
+    permissions) is a data-availability gap and is reported as MANUAL.
     Trust anchors backed by an external ``CERTIFICATE_BUNDLE`` are reported as
-    FAIL because their certificate signature algorithm cannot be inspected
-    from the IAM Roles Anywhere API alone.
+    FAIL by design: the bundle is user-supplied rather than an AWS-managed CA,
+    so migrating to an ML-DSA AWS Private CA is the remediation regardless of
+    the bundle's contents.
     """
 
     def execute(self) -> list[Check_Report_AWS]:
@@ -56,13 +59,13 @@ class rolesanywhere_trust_anchor_pqc_pki(Check):
                         "post-quantum (ML-DSA)."
                     )
                 else:
-                    report.status = "FAIL"
+                    report.status = "MANUAL"
                     report.status_extended = (
                         f"IAM Roles Anywhere trust anchor {trust_anchor.name} is "
                         f"backed by Private CA {trust_anchor.acm_pca_arn}, which "
                         "could not be inspected (cross-account or missing "
-                        "acm-pca permissions). Verify the CA uses an ML-DSA key "
-                        "algorithm."
+                        "acm-pca permissions). Verify manually that the CA uses "
+                        "an ML-DSA key algorithm."
                     )
             else:
                 source = trust_anchor.source_type or "<none>"
diff --git a/prowler/providers/aws/services/s3/s3_bucket_cross_region_replication/s3_bucket_cross_region_replication.py b/prowler/providers/aws/services/s3/s3_bucket_cross_region_replication/s3_bucket_cross_region_replication.py
index 21c33ed895..d30e4d8ad9 100644
--- a/prowler/providers/aws/services/s3/s3_bucket_cross_region_replication/s3_bucket_cross_region_replication.py
+++ b/prowler/providers/aws/services/s3/s3_bucket_cross_region_replication/s3_bucket_cross_region_replication.py
@@ -3,12 +3,31 @@ from prowler.providers.aws.services.s3.s3_client import s3_client
 
 
 class s3_bucket_cross_region_replication(Check):
-    def execute(self):
+    """Ensure S3 buckets replicate to a bucket in a different region.
+
+    - PASS: At least one enabled replication rule targets a bucket in another region.
+    - FAIL: Versioning is disabled, no enabled rule exists, or every resolvable
+      destination is in the same region.
+    - MANUAL: The versioning or replication configuration could not be retrieved
+      (missing permissions), or a destination bucket is outside the audited
+      account/scope so its region cannot be determined.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
         findings = []
         for bucket in s3_client.buckets.values():
             report = Check_Report_AWS(metadata=self.metadata(), resource=bucket)
+
+            if not bucket.versioning_retrieved or not bucket.replication_retrieved:
+                report.status = "MANUAL"
+                report.status_extended = f"Cannot evaluate cross region replication for S3 Bucket {bucket.name}: the versioning or replication configuration could not be retrieved. Verify that the scanning credentials are allowed to call s3:GetBucketVersioning and s3:GetReplicationConfiguration."
+                findings.append(report)
+                continue
+
             report.status = "FAIL"
             report.status_extended = f"S3 Bucket {bucket.name} does not have correct cross region replication configuration."
+            unresolvable_report = None
+            same_region_report = None
             if bucket.replication_rules:
                 for rule in bucket.replication_rules:
                     if (
@@ -17,8 +36,7 @@ class s3_bucket_cross_region_replication(Check):
                         and rule.destination
                     ):
                         if rule.destination not in s3_client.buckets:
-                            report.status = "FAIL"
-                            report.status_extended = f"S3 Bucket {bucket.name} has cross region replication rule {rule.id} in bucket {rule.destination.split(':')[-1]} which is out of Prowler's scope."
+                            unresolvable_report = f"S3 Bucket {bucket.name} has cross region replication rule {rule.id} in bucket {rule.destination.split(':')[-1]} which is out of Prowler's scope; verify manually that the destination bucket is in a different region."
                         else:
                             destination_bucket = s3_client.buckets[rule.destination]
                             if destination_bucket.region != bucket.region:
@@ -26,8 +44,14 @@ class s3_bucket_cross_region_replication(Check):
                                 report.status_extended = f"S3 Bucket {bucket.name} has cross region replication rule {rule.id} in bucket {destination_bucket.name} located in region {destination_bucket.region}."
                                 break
                             else:
-                                report.status = "FAIL"
-                                report.status_extended = f"S3 Bucket {bucket.name} has cross region replication rule {rule.id} in bucket {destination_bucket.name} located in the same region."
+                                same_region_report = f"S3 Bucket {bucket.name} has cross region replication rule {rule.id} in bucket {destination_bucket.name} located in the same region."
+            # Precedence: PASS > MANUAL (unresolvable destination) > FAIL
+            if report.status != "PASS":
+                if unresolvable_report:
+                    report.status = "MANUAL"
+                    report.status_extended = unresolvable_report
+                elif same_region_report:
+                    report.status_extended = same_region_report
             findings.append(report)
 
         return findings
diff --git a/prowler/providers/aws/services/s3/s3_bucket_object_versioning/s3_bucket_object_versioning.py b/prowler/providers/aws/services/s3/s3_bucket_object_versioning/s3_bucket_object_versioning.py
index 27e88635ff..9652d8fa84 100644
--- a/prowler/providers/aws/services/s3/s3_bucket_object_versioning/s3_bucket_object_versioning.py
+++ b/prowler/providers/aws/services/s3/s3_bucket_object_versioning/s3_bucket_object_versioning.py
@@ -3,11 +3,27 @@ from prowler.providers.aws.services.s3.s3_client import s3_client
 
 
 class s3_bucket_object_versioning(Check):
-    def execute(self):
+    """Ensure S3 buckets have object versioning enabled.
+
+    - PASS: Versioning is enabled.
+    - FAIL: Versioning is disabled.
+    - MANUAL: The versioning configuration could not be retrieved (missing
+      permissions), so the status cannot be asserted.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Evaluate versioning for every audited bucket.
+
+        Returns:
+            list[Check_Report_AWS]: One report per bucket.
+        """
         findings = []
         for bucket in s3_client.buckets.values():
             report = Check_Report_AWS(metadata=self.metadata(), resource=bucket)
-            if bucket.versioning:
+            if not bucket.versioning_retrieved:
+                report.status = "MANUAL"
+                report.status_extended = f"Cannot evaluate versioning for S3 Bucket {bucket.name}: the versioning configuration could not be retrieved. Verify that the scanning credentials are allowed to call s3:GetBucketVersioning."
+            elif bucket.versioning:
                 report.status = "PASS"
                 report.status_extended = (
                     f"S3 Bucket {bucket.name} has versioning enabled."
diff --git a/prowler/providers/aws/services/s3/s3_service.py b/prowler/providers/aws/services/s3/s3_service.py
index 94768138df..32c1f67c65 100644
--- a/prowler/providers/aws/services/s3/s3_service.py
+++ b/prowler/providers/aws/services/s3/s3_service.py
@@ -122,10 +122,12 @@ class S3(AWSService):
                     f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
                 )
             else:
+                bucket.versioning_retrieved = False
                 logger.error(
                     f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
                 )
         except Exception as error:
+            bucket.versioning_retrieved = False
             if bucket.region:
                 logger.error(
                     f"{bucket.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
@@ -441,10 +443,12 @@ class S3(AWSService):
             ):
                 bucket.replication = None
             else:
+                bucket.replication_retrieved = False
                 logger.error(
                     f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
                 )
         except Exception as error:
+            bucket.replication_retrieved = False
             if regional_client:
                 logger.error(
                     f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
@@ -782,5 +786,9 @@ class Bucket(BaseModel):
     tags: List[Dict[str, str]] = Field(default_factory=list)
     lifecycle: List[LifeCycleRule] = Field(default_factory=list)
     replication_rules: List[ReplicationRule] = Field(default_factory=list)
+    # False when GetBucketVersioning / GetBucketReplication failed for a reason
+    # other than the bucket or configuration not existing (e.g. AccessDenied).
+    versioning_retrieved: bool = True
+    replication_retrieved: bool = True
     notification_config: Dict = Field(default_factory=dict)
     object_sampling: Optional[BucketObjectSampling] = None
diff --git a/prowler/providers/azure/services/entra/entra_global_admin_in_less_than_five_users/entra_global_admin_in_less_than_five_users.py b/prowler/providers/azure/services/entra/entra_global_admin_in_less_than_five_users/entra_global_admin_in_less_than_five_users.py
index cfcb3c8514..09701d613e 100644
--- a/prowler/providers/azure/services/entra/entra_global_admin_in_less_than_five_users/entra_global_admin_in_less_than_five_users.py
+++ b/prowler/providers/azure/services/entra/entra_global_admin_in_less_than_five_users/entra_global_admin_in_less_than_five_users.py
@@ -7,6 +7,21 @@ class entra_global_admin_in_less_than_five_users(Check):
         findings = []
 
         for tenant_domain, directory_roles in entra_client.directory_roles.items():
+            if tenant_domain in entra_client.users_retrieval_errors:
+                report = Check_Report_Azure(metadata=self.metadata(), resource={})
+                report.subscription = f"Tenant: {tenant_domain}"
+                report.resource_name = tenant_domain
+                report.resource_id = entra_client.tenant_ids[0]
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"Cannot evaluate the number of global administrators for tenant {tenant_domain}: "
+                    f"Microsoft Graph did not return the tenant's users "
+                    f"({entra_client.users_retrieval_errors[tenant_domain]}). "
+                    f"Retry the scan or review the tenant's global administrators manually."
+                )
+                findings.append(report)
+                continue
+
             report = Check_Report_Azure(
                 metadata=self.metadata(),
                 resource=directory_roles.get("Global Administrator", {}),
diff --git a/prowler/providers/azure/services/entra/entra_non_privileged_user_has_mfa/entra_non_privileged_user_has_mfa.py b/prowler/providers/azure/services/entra/entra_non_privileged_user_has_mfa/entra_non_privileged_user_has_mfa.py
index d231a7a6b1..4494a2e99c 100644
--- a/prowler/providers/azure/services/entra/entra_non_privileged_user_has_mfa/entra_non_privileged_user_has_mfa.py
+++ b/prowler/providers/azure/services/entra/entra_non_privileged_user_has_mfa/entra_non_privileged_user_has_mfa.py
@@ -10,6 +10,21 @@ class entra_non_privileged_user_has_mfa(Check):
         findings = []
 
         for tenant_domain, users in entra_client.users.items():
+            if tenant_domain in entra_client.users_retrieval_errors:
+                report = Check_Report_Azure(metadata=self.metadata(), resource={})
+                report.subscription = f"Tenant: {tenant_domain}"
+                report.resource_name = tenant_domain
+                report.resource_id = entra_client.tenant_ids[0]
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"Cannot evaluate MFA for the tenant's non-privileged users for tenant {tenant_domain}: "
+                    f"Microsoft Graph did not return the tenant's users "
+                    f"({entra_client.users_retrieval_errors[tenant_domain]}). "
+                    f"Retry the scan or review the tenant's users manually."
+                )
+                findings.append(report)
+                continue
+
             for user in users.values():
                 if user.account_enabled and not is_privileged_user(
                     user, entra_client.directory_roles[tenant_domain]
diff --git a/prowler/providers/azure/services/entra/entra_privileged_user_has_mfa/entra_privileged_user_has_mfa.py b/prowler/providers/azure/services/entra/entra_privileged_user_has_mfa/entra_privileged_user_has_mfa.py
index c8c625f927..8499d29982 100644
--- a/prowler/providers/azure/services/entra/entra_privileged_user_has_mfa/entra_privileged_user_has_mfa.py
+++ b/prowler/providers/azure/services/entra/entra_privileged_user_has_mfa/entra_privileged_user_has_mfa.py
@@ -10,6 +10,21 @@ class entra_privileged_user_has_mfa(Check):
         findings = []
 
         for tenant_domain, users in entra_client.users.items():
+            if tenant_domain in entra_client.users_retrieval_errors:
+                report = Check_Report_Azure(metadata=self.metadata(), resource={})
+                report.subscription = f"Tenant: {tenant_domain}"
+                report.resource_name = tenant_domain
+                report.resource_id = entra_client.tenant_ids[0]
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"Cannot evaluate MFA for the tenant's privileged users for tenant {tenant_domain}: "
+                    f"Microsoft Graph did not return the tenant's users "
+                    f"({entra_client.users_retrieval_errors[tenant_domain]}). "
+                    f"Retry the scan or review the tenant's users manually."
+                )
+                findings.append(report)
+                continue
+
             for user_domain_name, user in users.items():
                 if is_privileged_user(
                     user, entra_client.directory_roles[tenant_domain]
diff --git a/prowler/providers/azure/services/entra/entra_service.py b/prowler/providers/azure/services/entra/entra_service.py
index e23f3cd34a..1c249abe0d 100644
--- a/prowler/providers/azure/services/entra/entra_service.py
+++ b/prowler/providers/azure/services/entra/entra_service.py
@@ -39,6 +39,18 @@ class Entra(AzureService):
                 "Cannot initialize Entra service while event loop is running"
             )
 
+        # Tenants (keyed by domain) whose sign-in activity could not be read,
+        # mapped to the reason. Microsoft Graph rejects the whole /users request
+        # with a 403 when the tenant lacks Entra ID P1/P2 or the application
+        # lacks AuditLog.Read.All, so users are re-fetched without
+        # signInActivity and the tenant is recorded here.
+        self.sign_in_activity_errors: dict[str, str] = {}
+        # Tenants (keyed by domain) whose users could not be retrieved at all
+        # (throttling, 5xx, network failures), mapped to the reason. An empty
+        # inventory caused by such an error is not evidence that the tenant
+        # has no users, so the user-based checks report MANUAL instead of
+        # evaluating it.
+        self.users_retrieval_errors: dict[str, str] = {}
         # Get users first alone because it is a dependency for other attributes
         self.users = loop.run_until_complete(self._get_users())
 
@@ -69,24 +81,76 @@ class Entra(AzureService):
             loop.close()
 
     async def _get_users(self):
+        """Retrieve the users of every audited tenant from Microsoft Graph.
+
+        Users are requested with ``signInActivity``. When Graph rejects that
+        request (the tenant lacks Entra ID P1/P2 or the application lacks
+        ``AuditLog.Read.All``), the tenant is recorded in
+        ``self.sign_in_activity_errors`` and the users are fetched again
+        without ``signInActivity`` so the remaining user checks can still run.
+
+        Any other failure to retrieve the users (throttling, 5xx, network),
+        including a failure on a later page of the paginated response, is
+        recorded in ``self.users_retrieval_errors`` so the user-based checks
+        report MANUAL instead of evaluating an empty or partial inventory.
+
+        Returns:
+            dict: Tenant domain mapped to a dict of user id -> ``User``. A
+            tenant whose users could not be retrieved maps to an empty dict
+            and is recorded in ``self.users_retrieval_errors``.
+        """
         logger.info("Entra - Getting users...")
         users = {}
+        base_select = ["id", "displayName", "accountEnabled"]
         try:
-            request_configuration = RequestConfiguration(
-                query_parameters=UsersRequestBuilder.UsersRequestBuilderGetQueryParameters(
-                    select=[
-                        "id",
-                        "displayName",
-                        "accountEnabled",
-                        "signInActivity",
-                    ]
-                )
-            )
             for tenant, client in self.clients.items():
                 users.update({tenant: {}})
-                users_response = await client.users.get(
-                    request_configuration=request_configuration
-                )
+                try:
+                    users_response = await client.users.get(
+                        request_configuration=RequestConfiguration(
+                            query_parameters=UsersRequestBuilder.UsersRequestBuilderGetQueryParameters(
+                                select=base_select + ["signInActivity"]
+                            )
+                        )
+                    )
+                except Exception as error:
+                    status = getattr(error, "response_status_code", None)
+                    reason = self._describe_graph_error(error)
+                    if status != 403:
+                        # Transient or unexpected failure (throttling, 5xx,
+                        # network): do not blame licensing/permissions, but
+                        # record that the tenant's users are unknown so the
+                        # user-based checks report MANUAL instead of
+                        # evaluating an empty inventory.
+                        self.users_retrieval_errors[tenant] = reason
+                        logger.error(
+                            f"{tenant} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
+                        )
+                        continue
+                    # A 403 means signInActivity is rejected for the whole
+                    # request (no Entra ID P1/P2 or missing AuditLog.Read.All).
+                    # Record it and retry without the property so the other
+                    # user checks still run.
+                    self.sign_in_activity_errors[tenant] = reason
+                    logger.error(
+                        f"{tenant} -- sign-in activity unavailable, retrying without signInActivity: {reason}"
+                    )
+                    try:
+                        users_response = await client.users.get(
+                            request_configuration=RequestConfiguration(
+                                query_parameters=UsersRequestBuilder.UsersRequestBuilderGetQueryParameters(
+                                    select=base_select
+                                )
+                            )
+                        )
+                    except Exception as retry_error:
+                        self.users_retrieval_errors[tenant] = (
+                            self._describe_graph_error(retry_error)
+                        )
+                        logger.error(
+                            f"{tenant} -- {retry_error.__class__.__name__}[{retry_error.__traceback__.tb_lineno}]: {retry_error}"
+                        )
+                        continue
                 registration_details = await self._get_user_registration_details(client)
 
                 try:
@@ -124,8 +188,15 @@ class Entra(AzureService):
                         users_response = await client.users.with_url(next_link).get()
 
                 except Exception as error:
+                    # A failed page (throttling, 5xx, network) leaves the
+                    # inventory incomplete: the users retrieved so far must
+                    # not be treated as the whole tenant, so record the error
+                    # and let the user-based checks report MANUAL.
+                    self.users_retrieval_errors[tenant] = self._describe_graph_error(
+                        error
+                    )
                     logger.error(
-                        f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
+                        f"{tenant} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
                     )
         except Exception as error:
             logger.error(
@@ -134,6 +205,21 @@ class Entra(AzureService):
 
         return users
 
+    @staticmethod
+    def _describe_graph_error(error: Exception) -> str:
+        """Return a short, single-line description of a Graph error."""
+        code = None
+        main_error = getattr(error, "error", None)
+        if main_error is not None:
+            code = getattr(main_error, "code", None)
+        status = getattr(error, "response_status_code", None)
+        parts = [error.__class__.__name__]
+        if status:
+            parts.append(f"HTTP {status}")
+        if code:
+            parts.append(str(code))
+        return " ".join(parts)
+
     async def _get_user_registration_details(self, client):
         registration_details = {}
         try:
diff --git a/prowler/providers/azure/services/entra/entra_user_with_recent_sign_in/entra_user_with_recent_sign_in.metadata.json b/prowler/providers/azure/services/entra/entra_user_with_recent_sign_in/entra_user_with_recent_sign_in.metadata.json
index 64ccb383a1..ebc7c508c4 100644
--- a/prowler/providers/azure/services/entra/entra_user_with_recent_sign_in/entra_user_with_recent_sign_in.metadata.json
+++ b/prowler/providers/azure/services/entra/entra_user_with_recent_sign_in/entra_user_with_recent_sign_in.metadata.json
@@ -33,5 +33,5 @@
   ],
   "DependsOn": [],
   "RelatedTo": [],
-  "Notes": "The signInActivity resource requires Microsoft Entra ID P1 or P2 license. Tenants without this license will not have sign-in activity data available, and all users will be reported as never having signed in."
+  "Notes": "The signInActivity resource requires Microsoft Entra ID P1 or P2 license. When Microsoft Graph rejects the sign-in activity request (tenant without Entra ID P1/P2 or missing AuditLog.Read.All), the check reports a single tenant-level MANUAL finding."
 }
diff --git a/prowler/providers/azure/services/entra/entra_user_with_recent_sign_in/entra_user_with_recent_sign_in.py b/prowler/providers/azure/services/entra/entra_user_with_recent_sign_in/entra_user_with_recent_sign_in.py
index fa6d1af05d..051400611f 100644
--- a/prowler/providers/azure/services/entra/entra_user_with_recent_sign_in/entra_user_with_recent_sign_in.py
+++ b/prowler/providers/azure/services/entra/entra_user_with_recent_sign_in/entra_user_with_recent_sign_in.py
@@ -13,49 +13,56 @@ class entra_user_with_recent_sign_in(Check):
     This check evaluates each enabled user's last interactive sign-in to detect stale or dormant accounts that should be reviewed or deprovisioned. Sign-in activity requires Entra ID P1/P2 licensing.
 
     - PASS: The enabled user signed in within the last 90 days.
-    - FAIL: The enabled user has not signed in for more than 90 days, or has never signed in.
-    - FAIL (tenant-level): No sign-in activity data is available for any enabled user, indicating missing P1/P2 licensing or Graph permissions (reported once instead of flagging every user).
+    - FAIL: The enabled user has not signed in for more than 90 days, or has no recorded sign-in.
+    - MANUAL (tenant-level): Microsoft Graph refused to return sign-in activity for the tenant (missing Entra ID P1/P2 licensing or the AuditLog.Read.All permission), or the tenant's users could not be retrieved at all, so the check cannot be evaluated; reported once per tenant.
     """
 
-    def execute(self) -> Check_Report_Azure:
+    def execute(self) -> list[Check_Report_Azure]:
         findings = []
 
         for tenant_domain, users in entra_client.users.items():
-            enabled_users = {k: v for k, v in users.items() if v.account_enabled}
-
-            if not enabled_users:
-                continue
-
-            # If all enabled users are missing sign-in data, avoid claiming
-            # they never signed in. This usually indicates missing telemetry,
-            # often due to licensing or Graph permission limitations.
-            all_null = all(u.last_sign_in is None for u in enabled_users.values())
-            if all_null:
-                first_user = next(iter(enabled_users.values()))
-                report = Check_Report_Azure(
-                    metadata=self.metadata(), resource=first_user
-                )
+            if tenant_domain in entra_client.users_retrieval_errors:
+                report = Check_Report_Azure(metadata=self.metadata(), resource={})
                 report.subscription = f"Tenant: {tenant_domain}"
-                report.resource_name = "Sign-in Activity Data"
-                count = len(enabled_users)
-                noun = "user" if count == 1 else "users"
-                report.status = "FAIL"
+                report.resource_name = tenant_domain
+                report.resource_id = entra_client.tenant_ids[0]
+                report.status = "MANUAL"
                 report.status_extended = (
-                    f"No sign-in activity data available for any of the "
-                    f"{count} enabled {noun}. This likely means the tenant "
-                    f"is missing Entra ID P1/P2 licensing or the required "
-                    f"Graph permissions to read sign-in activity."
+                    f"Cannot evaluate sign-in activity for tenant {tenant_domain}: "
+                    f"Microsoft Graph did not return the tenant's users "
+                    f"({entra_client.users_retrieval_errors[tenant_domain]}). "
+                    f"Retry the scan or review the tenant's users manually."
                 )
                 findings.append(report)
                 continue
 
-            for user_domain_name, user in enabled_users.items():
+            if tenant_domain in entra_client.sign_in_activity_errors:
+                report = Check_Report_Azure(metadata=self.metadata(), resource={})
+                report.subscription = f"Tenant: {tenant_domain}"
+                report.resource_name = tenant_domain
+                report.resource_id = entra_client.tenant_ids[0]
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"Cannot evaluate sign-in activity for tenant {tenant_domain}: "
+                    f"Microsoft Graph did not return sign-in activity "
+                    f"({entra_client.sign_in_activity_errors[tenant_domain]}). "
+                    f"Verify that the tenant has Entra ID P1/P2 licensing and the "
+                    f"scanning application has the AuditLog.Read.All permission."
+                )
+                findings.append(report)
+                continue
+
+            enabled_users = {k: v for k, v in users.items() if v.account_enabled}
+
+            for user in enabled_users.values():
                 report = Check_Report_Azure(metadata=self.metadata(), resource=user)
                 report.subscription = f"Tenant: {tenant_domain}"
 
                 if user.last_sign_in is None:
                     report.status = "FAIL"
-                    report.status_extended = f"User {user.name} has never signed in."
+                    report.status_extended = (
+                        f"User {user.name} has no recorded sign-in activity."
+                    )
                 else:
                     last = user.last_sign_in
                     if last.tzinfo is None:
diff --git a/prowler/providers/azure/services/entra/entra_user_with_vm_access_has_mfa/entra_user_with_vm_access_has_mfa.py b/prowler/providers/azure/services/entra/entra_user_with_vm_access_has_mfa/entra_user_with_vm_access_has_mfa.py
index 917200864e..73cd3d143d 100644
--- a/prowler/providers/azure/services/entra/entra_user_with_vm_access_has_mfa/entra_user_with_vm_access_has_mfa.py
+++ b/prowler/providers/azure/services/entra/entra_user_with_vm_access_has_mfa/entra_user_with_vm_access_has_mfa.py
@@ -17,7 +17,22 @@ class entra_user_with_vm_access_has_mfa(Check):
         findings = []
         already_reported = set()
 
-        for users in entra_client.users.values():
+        for tenant_domain, users in entra_client.users.items():
+            if tenant_domain in entra_client.users_retrieval_errors:
+                report = Check_Report_Azure(metadata=self.metadata(), resource={})
+                report.subscription = f"Tenant: {tenant_domain}"
+                report.resource_name = tenant_domain
+                report.resource_id = entra_client.tenant_ids[0]
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"Cannot evaluate MFA for the tenant's users with VM access for tenant {tenant_domain}: "
+                    f"Microsoft Graph did not return the tenant's users "
+                    f"({entra_client.users_retrieval_errors[tenant_domain]}). "
+                    f"Retry the scan or review the tenant's users manually."
+                )
+                findings.append(report)
+                continue
+
             for user in users.values():
                 for (
                     subscription_id,
diff --git a/prowler/providers/gcp/lib/service/service.py b/prowler/providers/gcp/lib/service/service.py
index 746952542f..5c7ec78ee9 100644
--- a/prowler/providers/gcp/lib/service/service.py
+++ b/prowler/providers/gcp/lib/service/service.py
@@ -28,6 +28,11 @@ class GCPService:
         self.client = self.__generate_client__(
             self.service, api_version, self.credentials
         )
+        # Audited projects where this service's API is definitively DISABLED,
+        # and projects whose API activation state could not be determined;
+        # both are excluded from project_ids.
+        self.api_disabled_project_ids: set = set()
+        self.api_state_unknown_project_ids: set = set()
         # Only project ids that have their API enabled will be scanned
         if provider.skip_api_check:
             self.project_ids = provider.project_ids
@@ -69,10 +74,12 @@ class GCPService:
                 if response.get("state") != "DISABLED":
                     project_ids.append(project_id)
                 else:
+                    self.api_disabled_project_ids.add(project_id)
                     logger.error(
                         f"{self.service} API has not been used in project {project_id} before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/{self.service}.googleapis.com/overview?project={project_id} then retry."
                     )
             except Exception as error:
+                self.api_state_unknown_project_ids.add(project_id)
                 logger.error(
                     f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
                 )
diff --git a/prowler/providers/gcp/services/iam/iam_account_access_approval_enabled/iam_account_access_approval_enabled.py b/prowler/providers/gcp/services/iam/iam_account_access_approval_enabled/iam_account_access_approval_enabled.py
index 16d01c3739..4eddf4a22f 100644
--- a/prowler/providers/gcp/services/iam/iam_account_access_approval_enabled/iam_account_access_approval_enabled.py
+++ b/prowler/providers/gcp/services/iam/iam_account_access_approval_enabled/iam_account_access_approval_enabled.py
@@ -5,9 +5,28 @@ from prowler.providers.gcp.services.iam.accessapproval_client import (
 
 
 class iam_account_access_approval_enabled(Check):
-    def execute(self) -> Check_Report_GCP:
+    """Ensure Access Approval is enabled for every audited project.
+
+    - PASS: The project has Access Approval settings configured.
+    - FAIL: Access Approval is not configured (404 on the settings read), or
+      the accessapproval.googleapis.com API is disabled — with the API off,
+      Access Approval provably cannot be enabled.
+    - MANUAL: The settings could not be read (permission error) or the API
+      activation state could not be determined.
+    """
+
+    def execute(self) -> list[Check_Report_GCP]:
+        """Evaluate Access Approval for the audited projects.
+
+        Returns:
+            list[Check_Report_GCP]: One report per audited project.
+        """
         findings = []
         for project_id in accessapproval_client.project_ids:
+            # Under --skip-api-check a disabled API is detected while reading
+            # the settings; those projects are reported by the loop below.
+            if project_id in accessapproval_client.api_disabled_project_ids:
+                continue
             report = Check_Report_GCP(
                 metadata=self.metadata(),
                 resource=accessapproval_client.projects[project_id],
@@ -18,11 +37,53 @@ class iam_account_access_approval_enabled(Check):
             report.status_extended = (
                 f"Project {project_id} has Access Approval enabled."
             )
-            if project_id not in accessapproval_client.settings:
+            if project_id in accessapproval_client.settings_lookup_failed:
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"Cannot evaluate Access Approval for project {project_id}: "
+                    "the Access Approval settings could not be read. Verify that "
+                    "the Access Approval API is enabled and the scanning "
+                    "credentials have the accessapproval.settings.get permission."
+                )
+            elif project_id not in accessapproval_client.settings:
                 report.status = "FAIL"
                 report.status_extended = (
                     f"Project {project_id} does not have Access Approval enabled."
                 )
             findings.append(report)
 
+        # Projects filtered out by the API-activation precheck never reach
+        # _get_settings(): report them instead of silently skipping. A
+        # definitively disabled API means Access Approval cannot be enabled
+        # (FAIL); an undetermined state is an evidence gap (MANUAL).
+        for project_id in sorted(accessapproval_client.api_disabled_project_ids):
+            report = Check_Report_GCP(
+                metadata=self.metadata(),
+                resource=accessapproval_client.projects[project_id],
+                project_id=project_id,
+                location=accessapproval_client.region,
+            )
+            report.status = "FAIL"
+            report.status_extended = (
+                f"Project {project_id} does not have Access Approval enabled: "
+                "the accessapproval.googleapis.com API is disabled."
+            )
+            findings.append(report)
+
+        for project_id in sorted(accessapproval_client.api_state_unknown_project_ids):
+            report = Check_Report_GCP(
+                metadata=self.metadata(),
+                resource=accessapproval_client.projects[project_id],
+                project_id=project_id,
+                location=accessapproval_client.region,
+            )
+            report.status = "MANUAL"
+            report.status_extended = (
+                f"Cannot evaluate Access Approval for project {project_id}: "
+                "the activation state of the accessapproval.googleapis.com API "
+                "could not be determined. Verify that the scanning credentials "
+                "can call serviceusage.services.get for the project."
+            )
+            findings.append(report)
+
         return findings
diff --git a/prowler/providers/gcp/services/iam/iam_service.py b/prowler/providers/gcp/services/iam/iam_service.py
index cc2deddefa..beb941f162 100644
--- a/prowler/providers/gcp/services/iam/iam_service.py
+++ b/prowler/providers/gcp/services/iam/iam_service.py
@@ -1,5 +1,6 @@
 from datetime import datetime
 
+from googleapiclient.errors import HttpError
 from pydantic.v1 import BaseModel
 
 from prowler.lib.logger import logger
@@ -219,6 +220,10 @@ class AccessApproval(GCPService):
     def __init__(self, provider: GcpProvider):
         super().__init__(__class__.__name__, provider)
         self.settings = {}
+        # Projects whose Access Approval settings could not be read because of
+        # a permission or API-availability error (as opposed to a 404, which
+        # means Access Approval is simply not enabled for the project).
+        self.settings_lookup_failed: set[str] = set()
         self._get_settings()
 
     def _get_settings(self):
@@ -234,7 +239,30 @@ class AccessApproval(GCPService):
                     project_id=project_id,
                 )
 
+            except HttpError as error:
+                if error.status_code == 404:
+                    # Access Approval is not enabled for this project.
+                    logger.info(
+                        f"{self.region} -- Access Approval settings not found for project {project_id}: {error}"
+                    )
+                elif error.status_code == 403 and (
+                    "SERVICE_DISABLED" in str(error)
+                    or "has not been used" in str(error)
+                ):
+                    # Under --skip-api-check the API-activation precheck does
+                    # not run; a SERVICE_DISABLED 403 here is the same
+                    # definitive "API disabled" state.
+                    self.api_disabled_project_ids.add(project_id)
+                    logger.info(
+                        f"{self.region} -- Access Approval API disabled for project {project_id}: {error}"
+                    )
+                else:
+                    self.settings_lookup_failed.add(project_id)
+                    logger.error(
+                        f"{self.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
+                    )
             except Exception as error:
+                self.settings_lookup_failed.add(project_id)
                 logger.error(
                     f"{self.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
                 )
diff --git a/prowler/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open.py b/prowler/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open.py
index 32e1fe2201..d667e77c61 100644
--- a/prowler/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open.py
+++ b/prowler/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open.py
@@ -21,6 +21,8 @@ class defenderidentity_health_issues_no_open(Check):
     - PASS: The health issue has been resolved (status is not open).
     - FAIL: The health issue is open and requires attention.
     - FAIL: No sensors are deployed (MDI cannot protect the environment).
+    - MANUAL: The Defender for Identity APIs could not be queried (missing
+      permissions), so the check cannot be evaluated.
     """
 
     def execute(self) -> List[CheckReportM365]:
@@ -50,11 +52,12 @@ class defenderidentity_health_issues_no_open(Check):
                 resource_name="Defender for Identity",
                 resource_id="defenderIdentity",
             )
-            report.status = "FAIL"
+            report.status = "MANUAL"
             report.status_extended = (
-                "Defender for Identity APIs are not accessible. "
-                "Ensure the Service Principal has SecurityIdentitiesSensors.Read.All and "
-                "SecurityIdentitiesHealth.Read.All permissions granted."
+                "Cannot evaluate Defender for Identity health issues: the "
+                "Defender for Identity APIs are not accessible. Ensure the "
+                "scanning application has the SecurityIdentitiesSensors.Read.All "
+                "and SecurityIdentitiesHealth.Read.All permissions granted."
             )
             findings.append(report)
             return findings
@@ -67,11 +70,12 @@ class defenderidentity_health_issues_no_open(Check):
                 resource_name="Defender for Identity",
                 resource_id="defenderIdentity",
             )
-            report.status = "FAIL"
+            report.status = "MANUAL"
             report.status_extended = (
-                f"Cannot read health issues from Defender for Identity "
-                f"(found {len(defenderidentity_client.sensors)} sensor(s) deployed). "
-                "Ensure the Service Principal has SecurityIdentitiesHealth.Read.All permission."
+                f"Cannot evaluate Defender for Identity health issues "
+                f"(found {len(defenderidentity_client.sensors)} sensor(s) deployed): "
+                "the health issues API is not accessible. Ensure the scanning "
+                "application has the SecurityIdentitiesHealth.Read.All permission granted."
             )
             findings.append(report)
             return findings
@@ -93,7 +97,9 @@ class defenderidentity_health_issues_no_open(Check):
             findings.append(report)
             return findings
 
-        # If health_issues is empty list - no issues exist, this is compliant
+        # If health_issues is empty list - no issues exist. This is only
+        # compliant when sensor deployment could actually be verified: with
+        # the sensors API failed, an empty issue list cannot be trusted.
         if not defenderidentity_client.health_issues:
             report = CheckReportM365(
                 metadata=self.metadata(),
@@ -101,10 +107,20 @@ class defenderidentity_health_issues_no_open(Check):
                 resource_name="Defender for Identity",
                 resource_id="defenderIdentity",
             )
-            report.status = "PASS"
-            report.status_extended = (
-                "No open health issues found in Defender for Identity."
-            )
+            if sensors_api_failed:
+                report.status = "MANUAL"
+                report.status_extended = (
+                    "Cannot evaluate Defender for Identity health issues: no "
+                    "open health issues were returned but sensor deployment "
+                    "could not be verified (sensors API not accessible). Ensure "
+                    "the scanning application has the "
+                    "SecurityIdentitiesSensors.Read.All permission granted."
+                )
+            else:
+                report.status = "PASS"
+                report.status_extended = (
+                    "No open health issues found in Defender for Identity."
+                )
             findings.append(report)
             return findings
 
diff --git a/prowler/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals.py b/prowler/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals.py
index 747ea117a5..a86d4ecdd1 100644
--- a/prowler/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals.py
+++ b/prowler/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals.py
@@ -25,6 +25,8 @@ class defenderxdr_critical_asset_management_pending_approvals(Check):
     Results:
     - PASS: No pending approvals for Critical Asset Management are found.
     - FAIL: At least one asset classification has pending approvals.
+    - MANUAL: Defender XDR could not be queried (missing permission or Security
+      Exposure Management not available), so the check cannot be evaluated.
     """
 
     def execute(self) -> List[CheckReportM365]:
@@ -47,10 +49,13 @@ class defenderxdr_critical_asset_management_pending_approvals(Check):
                 resource_name="Critical Asset Management",
                 resource_id="criticalAssetManagement",
             )
-            report.status = "FAIL"
+            report.status = "MANUAL"
             report.status_extended = (
-                "Unable to query Critical Asset Management status. "
-                "Verify that ThreatHunting.Read.All permission is granted."
+                "Cannot evaluate Critical Asset Management pending approvals: "
+                "unable to query Microsoft Defender XDR Advanced Hunting. "
+                "Verify that the ThreatHunting.Read.All permission is granted "
+                "to the scanning application and that Security Exposure "
+                "Management is enabled in the tenant."
             )
             findings.append(report)
             return findings
diff --git a/prowler/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials.py b/prowler/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials.py
index 031aaacb29..86d4512d41 100644
--- a/prowler/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials.py
+++ b/prowler/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials.py
@@ -25,6 +25,9 @@ class defenderxdr_endpoint_privileged_user_exposed_credentials(Check):
     Results:
     - PASS: No exposed credentials found OR MDE enabled but no devices
     - FAIL: Exposed credentials detected OR MDE not enabled (blind spot)
+    - MANUAL: Defender XDR could not be queried (missing permission or
+      Security Exposure Management not available), so the check cannot
+      be evaluated
     """
 
     def execute(self) -> list[CheckReportM365]:
@@ -46,10 +49,12 @@ class defenderxdr_endpoint_privileged_user_exposed_credentials(Check):
                 resource_name="Defender XDR",
                 resource_id="mdeStatus",
             )
-            report.status = "FAIL"
+            report.status = "MANUAL"
             report.status_extended = (
-                "Unable to query Microsoft Defender XDR status. "
-                "Verify that ThreatHunting.Read.All permission is granted."
+                "Cannot evaluate credential exposure for privileged users: "
+                "unable to query Microsoft Defender XDR Advanced Hunting. "
+                "Verify that the ThreatHunting.Read.All permission is granted "
+                "to the scanning application."
             )
             findings.append(report)
             return findings
@@ -99,11 +104,11 @@ class defenderxdr_endpoint_privileged_user_exposed_credentials(Check):
                 resource_name="Defender XDR",
                 resource_id="exposedCredentials",
             )
-            report.status = "FAIL"
+            report.status = "MANUAL"
             report.status_extended = (
-                "Unable to query Security Exposure Management for exposed "
-                "credentials. Verify that Security Exposure Management "
-                "is enabled."
+                "Cannot evaluate credential exposure for privileged users: "
+                "unable to query Security Exposure Management. Verify that "
+                "Security Exposure Management is enabled in the tenant."
             )
             findings.append(report)
             return findings
diff --git a/prowler/providers/m365/services/defenderxdr/defenderxdr_service.py b/prowler/providers/m365/services/defenderxdr/defenderxdr_service.py
index c1b804f126..559c821392 100644
--- a/prowler/providers/m365/services/defenderxdr/defenderxdr_service.py
+++ b/prowler/providers/m365/services/defenderxdr/defenderxdr_service.py
@@ -116,7 +116,13 @@ class DefenderXDR(M365Service):
                 request_body
             )
 
-            if not response or not response.results:
+            if response is None:
+                # A null response object is not a successful empty query:
+                # the data could not be retrieved.
+                logger.error("DefenderXDR - Advanced Hunting returned a null response.")
+                return None, False
+
+            if not response.results:
                 return [], False
 
             results = [
@@ -200,11 +206,20 @@ ExposureGraphEdges
     TargetCategories = TargetNodeCategories
 """
 
-        results, _ = await self._run_hunting_query(query)
+        results, table_not_found = await self._run_hunting_query(query)
 
         if results is None:
             return None
 
+        if table_not_found:
+            # Security Exposure Management tables are not available in this
+            # tenant: the check cannot be evaluated (not a legitimate empty result).
+            logger.warning(
+                "DefenderXDR - Security Exposure Management tables are not "
+                "available in this tenant; results cannot be evaluated."
+            )
+            return None
+
         return [self._parse_exposed_credential(row) for row in results if row]
 
     def _parse_exposed_credential(self, row: Dict) -> "ExposedCredentialPrivilegedUser":
@@ -253,11 +268,20 @@ ExposureGraphNodes
 | sort by Classification asc
 """
 
-        results, _ = await self._run_hunting_query(query)
+        results, table_not_found = await self._run_hunting_query(query)
 
         if results is None:
             return None
 
+        if table_not_found:
+            # Security Exposure Management tables are not available in this
+            # tenant: the check cannot be evaluated (not a legitimate empty result).
+            logger.warning(
+                "DefenderXDR - Security Exposure Management tables are not "
+                "available in this tenant; results cannot be evaluated."
+            )
+            return None
+
         pending_approvals = []
         for row in results:
             if not row:
diff --git a/prowler/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions.metadata.json b/prowler/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions.metadata.json
index 4044bef298..b344f39b58 100644
--- a/prowler/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions.metadata.json
+++ b/prowler/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions.metadata.json
@@ -34,5 +34,5 @@
   ],
   "DependsOn": [],
   "RelatedTo": [],
-  "Notes": "This check requires Microsoft Defender for Cloud Apps with App Governance enabled and ThreatHunting.Read.All permission. If App Governance data is unavailable, the check fails due to missing visibility."
+  "Notes": "This check requires Microsoft Defender for Cloud Apps with App Governance enabled and ThreatHunting.Read.All permission. If App Governance data is unavailable, the check reports MANUAL because unused permissions cannot be evaluated."
 }
diff --git a/prowler/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions.py b/prowler/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions.py
index f7107827b9..a8889a7a40 100644
--- a/prowler/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions.py
+++ b/prowler/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions.py
@@ -15,7 +15,8 @@ class entra_app_registration_no_unused_privileged_permissions(Check):
 
     - PASS: The app has no unused privileged permissions.
     - FAIL: The app has one or more unused privileged permissions that should be revoked.
-      It also fails when OAuth App Governance data is not available.
+    - MANUAL: OAuth App Governance data is not available (App Governance not enabled or
+      missing permission), so the check cannot be evaluated.
     """
 
     # InUse field values from OAuthAppInfo:
@@ -47,11 +48,12 @@ class entra_app_registration_no_unused_privileged_permissions(Check):
                 resource_name="OAuth Applications",
                 resource_id="oauthApps",
             )
-            report.status = "FAIL"
+            report.status = "MANUAL"
             report.status_extended = (
-                "OAuth App Governance data is unavailable. "
-                "Enable App Governance in Microsoft Defender for Cloud Apps and "
-                "grant ThreatHunting.Read.All to evaluate unused privileged permissions."
+                "Cannot evaluate unused privileged permissions: OAuth App "
+                "Governance data is unavailable. Enable App Governance in "
+                "Microsoft Defender for Cloud Apps and grant the "
+                "ThreatHunting.Read.All permission to the scanning application."
             )
             findings.append(report)
             return findings
diff --git a/prowler/providers/m365/services/entra/entra_break_glass_account_fido2_security_key_registered/entra_break_glass_account_fido2_security_key_registered.py b/prowler/providers/m365/services/entra/entra_break_glass_account_fido2_security_key_registered/entra_break_glass_account_fido2_security_key_registered.py
index e90eed0023..4beb9d7e06 100644
--- a/prowler/providers/m365/services/entra/entra_break_glass_account_fido2_security_key_registered/entra_break_glass_account_fido2_security_key_registered.py
+++ b/prowler/providers/m365/services/entra/entra_break_glass_account_fido2_security_key_registered/entra_break_glass_account_fido2_security_key_registered.py
@@ -16,7 +16,8 @@ class entra_break_glass_account_fido2_security_key_registered(Check):
 
     - PASS: The break glass account has a FIDO2 security key (fido2SecurityKey) registered.
     - MANUAL: The account has a device-bound passkey but it cannot be confirmed as FIDO2,
-              or no break glass accounts could be identified.
+              no break glass accounts could be identified, or the users / user
+              registration details could not be read (insufficient permissions).
     - FAIL: The break glass account does not have a FIDO2 security key registered.
     """
 
@@ -61,6 +62,18 @@ class entra_break_glass_account_fido2_security_key_registered(Check):
             if count == total_policy_count
         ]
 
+        if entra_client.users_error:
+            report = CheckReportM365(
+                metadata=self.metadata(),
+                resource={},
+                resource_name="Break Glass Accounts",
+                resource_id="breakGlassAccounts",
+            )
+            report.status = "MANUAL"
+            report.status_extended = f"Cannot verify FIDO2 security key registration for break glass accounts: {entra_client.users_error}."
+            findings.append(report)
+            return findings
+
         if not break_glass_user_ids:
             report = CheckReportM365(
                 metadata=self.metadata(),
@@ -73,6 +86,21 @@ class entra_break_glass_account_fido2_security_key_registered(Check):
             findings.append(report)
             return findings
 
+        if entra_client.user_registration_details_error:
+            report = CheckReportM365(
+                metadata=self.metadata(),
+                resource={},
+                resource_name="Break Glass Accounts",
+                resource_id="breakGlassAccounts",
+            )
+            report.status = "MANUAL"
+            report.status_extended = (
+                "Cannot verify FIDO2 security key registration for break glass "
+                f"accounts: {entra_client.user_registration_details_error}."
+            )
+            findings.append(report)
+            return findings
+
         for user_id in break_glass_user_ids:
             user = entra_client.users.get(user_id)
             if not user:
@@ -85,15 +113,6 @@ class entra_break_glass_account_fido2_security_key_registered(Check):
                 resource_id=user.id,
             )
 
-            if entra_client.user_registration_details_error:
-                report.status = "FAIL"
-                report.status_extended = (
-                    f"Cannot verify FIDO2 security key registration for break glass account {user.name}: "
-                    f"{entra_client.user_registration_details_error}."
-                )
-                findings.append(report)
-                continue
-
             auth_methods = set(user.authentication_methods)
             has_fido2 = "fido2SecurityKey" in auth_methods
             has_passkey_device_bound = "passKeyDeviceBound" in auth_methods
diff --git a/prowler/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled.py b/prowler/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled.py
index eb6b633ee9..9098b7c4ed 100644
--- a/prowler/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled.py
+++ b/prowler/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled.py
@@ -14,7 +14,10 @@ class entra_seamless_sso_disabled(Check):
     Primary Refresh Token (PRT) support make this feature unnecessary for most organizations.
 
     - PASS: Seamless SSO is disabled or on-premises sync is not enabled (cloud-only).
-    - FAIL: Seamless SSO is enabled in a hybrid deployment, or cannot verify due to insufficient permissions.
+    - FAIL: Seamless SSO is enabled in a hybrid deployment.
+    - MANUAL: Hybrid deployment whose directory sync settings could not be read
+      (insufficient permissions or no settings returned), so the check cannot be
+      evaluated.
     """
 
     def execute(self) -> List[CheckReportM365]:
@@ -38,9 +41,9 @@ class entra_seamless_sso_disabled(Check):
                     resource_id=organization.id,
                     resource_name=organization.name,
                 )
-                # Only FAIL for hybrid orgs; cloud-only orgs don't need this permission
+                # Only MANUAL for hybrid orgs; cloud-only orgs don't need this permission
                 if organization.on_premises_sync_enabled:
-                    report.status = "FAIL"
+                    report.status = "MANUAL"
                     report.status_extended = f"Cannot verify Seamless SSO status for {organization.name}: {entra_client.directory_sync_error}."
                 else:
                     report.status = "PASS"
@@ -66,7 +69,8 @@ class entra_seamless_sso_disabled(Check):
 
             findings.append(report)
 
-        # If no directory sync settings and no error, it's a cloud-only tenant
+        # No directory sync settings and no error: cloud-only organizations are
+        # not applicable; a hybrid organization without settings cannot be verified.
         if not entra_client.directory_sync_settings:
             for organization in entra_client.organizations:
                 report = CheckReportM365(
@@ -75,8 +79,12 @@ class entra_seamless_sso_disabled(Check):
                     resource_id=organization.id,
                     resource_name=organization.name,
                 )
-                report.status = "PASS"
-                report.status_extended = f"Entra organization {organization.name} is cloud-only (no on-premises sync), Seamless SSO is not applicable."
+                if organization.on_premises_sync_enabled:
+                    report.status = "MANUAL"
+                    report.status_extended = f"Cannot verify Seamless SSO status for {organization.name}: no directory synchronization settings were returned for this hybrid organization."
+                else:
+                    report.status = "PASS"
+                    report.status_extended = f"Entra organization {organization.name} is cloud-only (no on-premises sync), Seamless SSO is not applicable."
                 findings.append(report)
 
         return findings
diff --git a/prowler/providers/m365/services/entra/entra_service.py b/prowler/providers/m365/services/entra/entra_service.py
index c839216a76..c761834195 100644
--- a/prowler/providers/m365/services/entra/entra_service.py
+++ b/prowler/providers/m365/services/entra/entra_service.py
@@ -86,6 +86,10 @@ class Entra(M365Service):
         self.tenant_domain = provider.identity.tenant_domain
         self.tenant_id = getattr(provider.identity, "tenant_id", None)
         self.user_registration_details_error: Optional[str] = None
+        # Set when the Microsoft Graph /users request (or its directory role
+        # dependencies) fails, so checks can report that users are unavailable
+        # instead of silently evaluating an empty directory.
+        self.users_error: Optional[str] = None
         self.exchange_mailbox_permission_service_principals_error: Optional[str] = None
         attributes = loop.run_until_complete(
             gather(
@@ -924,7 +928,7 @@ class Entra(M365Service):
         except ODataError as error:
             error_code = getattr(error.error, "code", None) if error.error else None
             if error_code == "Authorization_RequestDenied":
-                error_message = "Insufficient privileges to read directory sync settings. Required permission: OnPremDirectorySynchronization.Read.All or OnPremDirectorySynchronization.ReadWrite.All"
+                error_message = "Insufficient privileges to read directory sync settings. Required permission: OnPremDirectorySynchronization.Read.All or OnPremDirectorySynchronization.ReadWrite.All (Microsoft Graph only supports this as a delegated permission for a Global Administrator; application permissions are not supported)"
                 logger.error(
                     f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error_message}"
                 )
@@ -941,6 +945,19 @@ class Entra(M365Service):
         return directory_sync_settings, error_message
 
     async def _get_users(self):
+        """Retrieve the tenant users with their directory roles and MFA registration.
+
+        Depends on ``GET /users``, ``GET /directoryRoles`` and the members of
+        each role. If any of those Graph calls fails, ``self.users_error`` is
+        set so checks can report that the directory could not be read instead
+        of evaluating an empty user set. Registration details are fetched via
+        ``_get_user_registration_details``, which handles its own failures
+        through ``self.user_registration_details_error``.
+
+        Returns:
+            dict: User id mapped to ``User``. Empty (or partial, on a
+            mid-pagination failure) when ``self.users_error`` is set.
+        """
         logger.info("Entra - Getting users...")
         users = {}
         try:
@@ -1026,7 +1043,17 @@ class Entra(M365Service):
                 if not next_link:
                     break
                 users_response = await self.client.users.with_url(next_link).get()
+        except ODataError as error:
+            error_code = getattr(error.error, "code", None) if error.error else None
+            if error_code == "Authorization_RequestDenied":
+                self.users_error = "Insufficient privileges to read users and directory roles. Required permissions: User.Read.All, Directory.Read.All or RoleManagement.Read.Directory"
+            else:
+                self.users_error = f"Unable to retrieve users from Microsoft Graph ({error_code or error.__class__.__name__})"
+            logger.error(
+                f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
+            )
         except Exception as error:
+            self.users_error = f"Unable to retrieve users from Microsoft Graph ({error.__class__.__name__})"
             logger.error(
                 f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
             )
@@ -1124,7 +1151,15 @@ OAuthAppInfo
                 request_body
             )
 
-            if result and result.results:
+            if result is None:
+                # A null response object is not a successful empty query:
+                # the OAuth app inventory could not be retrieved.
+                logger.warning(
+                    "Entra - Advanced Hunting returned a null response for OAuthAppInfo."
+                )
+                return None
+
+            if result.results:
                 for row in result.results:
                     row_data = row.additional_data
                     raw_app_id = row_data.get("OAuthAppId", "")
diff --git a/prowler/providers/m365/services/entra/entra_users_mfa_capable/entra_users_mfa_capable.py b/prowler/providers/m365/services/entra/entra_users_mfa_capable/entra_users_mfa_capable.py
index d3e75cef7f..808d4e7e1e 100644
--- a/prowler/providers/m365/services/entra/entra_users_mfa_capable/entra_users_mfa_capable.py
+++ b/prowler/providers/m365/services/entra/entra_users_mfa_capable/entra_users_mfa_capable.py
@@ -17,8 +17,9 @@ class entra_users_mfa_capable(Check):
     evaluation.
 
     - PASS: The member user is MFA capable.
-    - FAIL: The member user is not MFA capable, or MFA capability cannot be
-      verified due to insufficient permissions to read user registration details.
+    - FAIL: The member user is not MFA capable.
+    - MANUAL: Users or their registration details could not be read
+      (insufficient permissions), so MFA capability cannot be verified.
     """
 
     def execute(self) -> List[CheckReportM365]:
@@ -37,6 +38,23 @@ class entra_users_mfa_capable(Check):
         """
         findings = []
 
+        data_error = (
+            entra_client.users_error or entra_client.user_registration_details_error
+        )
+        if data_error:
+            report = CheckReportM365(
+                metadata=self.metadata(),
+                resource={},
+                resource_name="Entra Users",
+                resource_id="users",
+            )
+            report.status = "MANUAL"
+            report.status_extended = (
+                f"Cannot verify MFA capability for member users: {data_error}."
+            )
+            findings.append(report)
+            return findings
+
         for user in entra_client.users.values():
             if user.user_type == "Guest" or not user.account_enabled:
                 continue
@@ -57,13 +75,7 @@ class entra_users_mfa_capable(Check):
                 resource_id=user.id,
             )
 
-            if entra_client.user_registration_details_error:
-                report.status = "FAIL"
-                report.status_extended = (
-                    f"Cannot verify MFA capability for user {user.name}: "
-                    f"{entra_client.user_registration_details_error}."
-                )
-            elif not user.is_mfa_capable:
+            if not user.is_mfa_capable:
                 report.status = "FAIL"
                 report.status_extended = f"User {user.name} is not MFA capable."
             else:
diff --git a/prowler/providers/m365/services/exchange/exchange_shared_mailbox_sign_in_disabled/exchange_shared_mailbox_sign_in_disabled.py b/prowler/providers/m365/services/exchange/exchange_shared_mailbox_sign_in_disabled/exchange_shared_mailbox_sign_in_disabled.py
index 849731f7c8..7e14902a4b 100644
--- a/prowler/providers/m365/services/exchange/exchange_shared_mailbox_sign_in_disabled/exchange_shared_mailbox_sign_in_disabled.py
+++ b/prowler/providers/m365/services/exchange/exchange_shared_mailbox_sign_in_disabled/exchange_shared_mailbox_sign_in_disabled.py
@@ -15,6 +15,9 @@ class exchange_shared_mailbox_sign_in_disabled(Check):
 
     - PASS: Shared mailbox has sign-in blocked (AccountEnabled = False in Entra ID).
     - FAIL: Shared mailbox has sign-in enabled (AccountEnabled = True in Entra ID).
+    - MANUAL: The Entra users could not be retrieved (tenant-level), or the
+      shared mailbox could not be resolved in Entra ID, so its sign-in status
+      cannot be verified.
     """
 
     def execute(self) -> List[CheckReportM365]:
@@ -30,6 +33,23 @@ class exchange_shared_mailbox_sign_in_disabled(Check):
         """
         findings = []
 
+        # A tenant-wide failure retrieving Entra users would otherwise surface
+        # as one misleading MANUAL per mailbox: report it once instead.
+        if exchange_client.shared_mailboxes and entra_client.users_error:
+            report = CheckReportM365(
+                metadata=self.metadata(),
+                resource={},
+                resource_name="Shared Mailboxes",
+                resource_id="sharedMailboxes",
+            )
+            report.status = "MANUAL"
+            report.status_extended = (
+                "Cannot verify sign-in status for shared mailboxes: "
+                f"{entra_client.users_error}."
+            )
+            findings.append(report)
+            return findings
+
         for shared_mailbox in exchange_client.shared_mailboxes:
             report = CheckReportM365(
                 metadata=self.metadata(),
@@ -45,8 +65,8 @@ class exchange_shared_mailbox_sign_in_disabled(Check):
             )
 
             if not entra_user:
-                report.status = "FAIL"
-                report.status_extended = f"Shared mailbox {shared_mailbox.user_principal_name} could not be found in Entra ID for verification."
+                report.status = "MANUAL"
+                report.status_extended = f"Cannot verify sign-in status for shared mailbox {shared_mailbox.user_principal_name}: the user could not be resolved in Entra ID."
             elif entra_user.account_enabled:
                 report.status = "FAIL"
                 report.status_extended = f"Shared mailbox {shared_mailbox.user_principal_name} has sign-in enabled."
diff --git a/skills/prowler-sdk-check/SKILL.md b/skills/prowler-sdk-check/SKILL.md
index 1901e996d4..d3dc759067 100644
--- a/skills/prowler-sdk-check/SKILL.md
+++ b/skills/prowler-sdk-check/SKILL.md
@@ -181,7 +181,25 @@ Examples:
 |--------|-------------|
 | `PASS` | Resource is compliant |
 | `FAIL` | Resource is non-compliant |
-| `MANUAL` | Requires human verification |
+| `MANUAL` | Requires human verification, or the data needed to evaluate the resource could not be retrieved |
+
+### Permission / availability errors are NOT findings
+
+Never set `FAIL` because an API call failed (missing permission or scope, API not enabled, feature not licensed, data unavailable). That is a scan-configuration problem, not a security issue, and it surfaces as a misleading high-severity finding.
+
+- Service: log the error and expose it distinctly from an empty result (`None` instead of `[]`, an `*_error` attribute, or a `*_lookup_failed` set). Only treat real access errors this way; a `404`/not-found usually means "not configured" and IS a legitimate `FAIL`, and a definitively disabled API is a legitimate `FAIL` when the API's activation is itself the audited control (e.g. GCP Access Approval).
+- Check: emit ONE tenant/account/project/subscription-level `MANUAL` finding (not one per resource) whose `status_extended` says the check cannot be evaluated and names the required permission/API/license.
+- Do not touch `report.check_metadata.Severity` to hide it.
+
+```python
+if <service>_client.<data> is None:
+    report = CheckReport<Provider>(metadata=self.metadata(), resource={})
+    report.resource_name = "<Tenant-level resource>"
+    report.resource_id = "<stable-id>"
+    report.status = "MANUAL"
+    report.status_extended = "Cannot evaluate <requirement>: <data> could not be retrieved. Verify that <permission> is granted to the scanning identity."
+    return [report]
+```
 
 ---
 
diff --git a/tests/providers/aws/services/bedrock/bedrock_agent_role_least_privilege/bedrock_agent_role_least_privilege_test.py b/tests/providers/aws/services/bedrock/bedrock_agent_role_least_privilege/bedrock_agent_role_least_privilege_test.py
index c6e5d7f756..ff50416579 100644
--- a/tests/providers/aws/services/bedrock/bedrock_agent_role_least_privilege/bedrock_agent_role_least_privilege_test.py
+++ b/tests/providers/aws/services/bedrock/bedrock_agent_role_least_privilege/bedrock_agent_role_least_privilege_test.py
@@ -265,11 +265,11 @@ class Test_bedrock_agent_role_least_privilege:
 
     @mock_aws(config={"iam": {"load_aws_managed_policies": True}})
     def test_agent_role_not_resolvable(self):
-        """role_arn returned by GetAgent doesn't match any IAM role -> FAIL."""
+        """role_arn returned by GetAgent doesn't match any IAM role -> MANUAL."""
         result = _run_check(
             role_arn_for_get_agent=f"arn:aws:iam::{AWS_ACCOUNT_NUMBER}:role/does-not-exist"
         )
 
         assert len(result) == 1
-        assert result[0].status == "FAIL"
+        assert result[0].status == "MANUAL"
         assert "could not be resolved" in result[0].status_extended
diff --git a/tests/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_acls_alarm_configured/cloudwatch_changes_to_network_acls_alarm_configured_test.py b/tests/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_acls_alarm_configured/cloudwatch_changes_to_network_acls_alarm_configured_test.py
index 928ff2b47c..9a79761ac0 100644
--- a/tests/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_acls_alarm_configured/cloudwatch_changes_to_network_acls_alarm_configured_test.py
+++ b/tests/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_acls_alarm_configured/cloudwatch_changes_to_network_acls_alarm_configured_test.py
@@ -670,10 +670,12 @@ class Test_cloudwatch_changes_to_network_acls_alarm_configured:
             )
 
             cloudtrail_client.trails = None
+            cloudtrail_client.trails_unavailable = True
             check = cloudwatch_changes_to_network_acls_alarm_configured()
             result = check.execute()
 
-            assert len(result) == 0
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
 
     @mock_aws
     def test_cloudwatch_trail_with_log_group_with_metric_and_alarm_reversed_clauses(
diff --git a/tests/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled_test.py b/tests/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled_test.py
index 62ca14d4ba..dea4a7aa47 100644
--- a/tests/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled_test.py
+++ b/tests/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled_test.py
@@ -662,9 +662,11 @@ class Test_cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_c
                 cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled()
             )
             cloudtrail_client.trails = None
+            cloudtrail_client.trails_unavailable = True
             result = check.execute()
 
-            assert len(result) == 0
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
 
     @mock_aws
     def test_cloudwatch_trail_with_log_group_with_metric_and_alarm_reversed_clauses(
diff --git a/tests/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_root_usage/cloudwatch_log_metric_filter_root_usage_test.py b/tests/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_root_usage/cloudwatch_log_metric_filter_root_usage_test.py
index c04f4896d1..140a4017b5 100644
--- a/tests/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_root_usage/cloudwatch_log_metric_filter_root_usage_test.py
+++ b/tests/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_root_usage/cloudwatch_log_metric_filter_root_usage_test.py
@@ -596,3 +596,334 @@ class Test_cloudwatch_log_metric_filter_root_usage:
                 == f"arn:aws:logs:{AWS_REGION_US_EAST_1}:{AWS_ACCOUNT_NUMBER}:log-group:/log-group/test:*"
             )
             assert result[0].region == AWS_REGION_US_EAST_1
+
+    def _run_with_unavailable_data(self, *, metric_filters_none, metric_alarms_none):
+        from prowler.providers.aws.services.cloudtrail.cloudtrail_service import (
+            Cloudtrail,
+        )
+        from prowler.providers.aws.services.cloudwatch.cloudwatch_service import (
+            CloudWatch,
+            Logs,
+        )
+
+        aws_provider = set_mocked_aws_provider(
+            [AWS_REGION_EU_WEST_1, AWS_REGION_US_EAST_1]
+        )
+        logs = Logs(aws_provider)
+        cloudwatch = CloudWatch(aws_provider)
+        # The services set these to None when the describe call is denied
+        # (AccessDeniedException / AccessDenied).
+        if metric_filters_none:
+            logs.metric_filters = None
+            logs.metric_filters_unavailable = True
+        if metric_alarms_none:
+            cloudwatch.metric_alarms = None
+            cloudwatch.metric_alarms_unavailable = True
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=aws_provider,
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage.logs_client",
+                new=logs,
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage.cloudwatch_client",
+                new=cloudwatch,
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage.cloudtrail_client",
+                new=Cloudtrail(aws_provider),
+            ),
+        ):
+            from prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage import (
+                cloudwatch_log_metric_filter_root_usage,
+            )
+
+            return cloudwatch_log_metric_filter_root_usage().execute()
+
+    @mock_aws
+    def test_cloudwatch_metric_filters_access_denied(self):
+        """logs:DescribeMetricFilters denied -> MANUAL, not FAIL."""
+        result = self._run_with_unavailable_data(
+            metric_filters_none=True, metric_alarms_none=False
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert (
+            "metric filters or alarms could not be listed" in result[0].status_extended
+        )
+        assert "logs:DescribeMetricFilters" in result[0].status_extended
+        assert result[0].resource_id == AWS_ACCOUNT_NUMBER
+        assert result[0].region == AWS_REGION_EU_WEST_1
+
+    @mock_aws
+    def test_cloudwatch_metric_filters_partially_denied(self):
+        """Filters listed in one region but denied in another -> MANUAL.
+
+        The service keeps the partial list (not None) and only raises the
+        ``metric_filters_unavailable`` flag; with no matching filter the check
+        must not claim FAIL.
+        """
+        from prowler.providers.aws.services.cloudtrail.cloudtrail_service import (
+            Cloudtrail,
+        )
+        from prowler.providers.aws.services.cloudwatch.cloudwatch_service import (
+            CloudWatch,
+            Logs,
+        )
+
+        aws_provider = set_mocked_aws_provider(
+            [AWS_REGION_EU_WEST_1, AWS_REGION_US_EAST_1]
+        )
+        logs = Logs(aws_provider)
+        assert logs.metric_filters == []
+        logs.metric_filters_unavailable = True
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=aws_provider,
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage.logs_client",
+                new=logs,
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage.cloudwatch_client",
+                new=CloudWatch(aws_provider),
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage.cloudtrail_client",
+                new=Cloudtrail(aws_provider),
+            ),
+        ):
+            from prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage import (
+                cloudwatch_log_metric_filter_root_usage,
+            )
+
+            result = cloudwatch_log_metric_filter_root_usage().execute()
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert "in at least one region" in result[0].status_extended
+
+    @mock_aws
+    def test_cloudwatch_trails_access_denied(self):
+        """cloudtrail:DescribeTrails denied -> MANUAL instead of no finding."""
+        from prowler.providers.aws.services.cloudtrail.cloudtrail_service import (
+            Cloudtrail,
+        )
+        from prowler.providers.aws.services.cloudwatch.cloudwatch_service import (
+            CloudWatch,
+            Logs,
+        )
+
+        aws_provider = set_mocked_aws_provider(
+            [AWS_REGION_EU_WEST_1, AWS_REGION_US_EAST_1]
+        )
+        cloudtrail = Cloudtrail(aws_provider)
+        cloudtrail.trails = None
+        cloudtrail.trails_unavailable = True
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=aws_provider,
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage.logs_client",
+                new=Logs(aws_provider),
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage.cloudwatch_client",
+                new=CloudWatch(aws_provider),
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage.cloudtrail_client",
+                new=cloudtrail,
+            ),
+        ):
+            from prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage import (
+                cloudwatch_log_metric_filter_root_usage,
+            )
+
+            result = cloudwatch_log_metric_filter_root_usage().execute()
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert "cloudtrail:DescribeTrails" in result[0].status_extended
+
+    @mock_aws
+    def test_cloudwatch_log_groups_access_denied(self):
+        """logs:DescribeLogGroups denied -> MANUAL."""
+        from prowler.providers.aws.services.cloudtrail.cloudtrail_service import (
+            Cloudtrail,
+        )
+        from prowler.providers.aws.services.cloudwatch.cloudwatch_service import (
+            CloudWatch,
+            Logs,
+        )
+
+        aws_provider = set_mocked_aws_provider(
+            [AWS_REGION_EU_WEST_1, AWS_REGION_US_EAST_1]
+        )
+        logs = Logs(aws_provider)
+        logs.log_groups_unavailable = True
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=aws_provider,
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage.logs_client",
+                new=logs,
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage.cloudwatch_client",
+                new=CloudWatch(aws_provider),
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage.cloudtrail_client",
+                new=Cloudtrail(aws_provider),
+            ),
+        ):
+            from prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage import (
+                cloudwatch_log_metric_filter_root_usage,
+            )
+
+            result = cloudwatch_log_metric_filter_root_usage().execute()
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert "logs:DescribeLogGroups" in result[0].status_extended
+
+    @mock_aws
+    def test_cloudwatch_metric_alarms_access_denied(self):
+        """cloudwatch:DescribeAlarms denied -> MANUAL, not FAIL."""
+        result = self._run_with_unavailable_data(
+            metric_filters_none=False, metric_alarms_none=True
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert "cloudwatch:DescribeAlarms" in result[0].status_extended
+
+    def _run_with_filter(self, *, with_alarm, metric_alarms_unavailable):
+        """Create a trail + matching filter (optionally its alarm) and run the check
+        with the alarm inventory flagged as (un)available."""
+        cloudtrail_client = client("cloudtrail", region_name=AWS_REGION_US_EAST_1)
+        cloudwatch_client = client("cloudwatch", region_name=AWS_REGION_US_EAST_1)
+        logs_client = client("logs", region_name=AWS_REGION_US_EAST_1)
+        s3_client = client("s3", region_name=AWS_REGION_US_EAST_1)
+        s3_client.create_bucket(Bucket="test")
+        logs_client.create_log_group(logGroupName="/log-group/test")
+        cloudtrail_client.create_trail(
+            Name="test_trail",
+            S3BucketName="test",
+            CloudWatchLogsLogGroupArn=f"arn:aws:logs:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:log-group:/log-group/test:*",
+        )
+        logs_client.put_metric_filter(
+            logGroupName="/log-group/test",
+            filterName="test-filter",
+            filterPattern="{ $.userIdentity.type = Root && $.userIdentity.invokedBy NOT EXISTS && $.eventType != AwsServiceEvent }",
+            metricTransformations=[
+                {
+                    "metricName": "my-metric",
+                    "metricNamespace": "my-namespace",
+                    "metricValue": "$.value",
+                }
+            ],
+        )
+        if with_alarm:
+            cloudwatch_client.put_metric_alarm(
+                AlarmName="test-alarm",
+                MetricName="my-metric",
+                Namespace="my-namespace",
+                Period=10,
+                EvaluationPeriods=5,
+                Statistic="Average",
+                Threshold=2,
+                ComparisonOperator="GreaterThanThreshold",
+                ActionsEnabled=True,
+            )
+
+        from prowler.providers.aws.services.cloudtrail.cloudtrail_service import (
+            Cloudtrail,
+        )
+        from prowler.providers.aws.services.cloudwatch.cloudwatch_service import (
+            CloudWatch,
+            Logs,
+        )
+        from prowler.providers.common.models import Audit_Metadata
+
+        aws_provider = set_mocked_aws_provider(
+            [AWS_REGION_EU_WEST_1, AWS_REGION_US_EAST_1]
+        )
+        aws_provider.audit_metadata = Audit_Metadata(
+            services_scanned=0,
+            expected_checks=["cloudwatch_log_group_no_secrets_in_logs"],
+            completed_checks=0,
+            audit_progress=0,
+        )
+        cloudwatch = CloudWatch(aws_provider)
+        cloudwatch.metric_alarms_unavailable = metric_alarms_unavailable
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=aws_provider,
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage.logs_client",
+                new=Logs(aws_provider),
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage.cloudwatch_client",
+                new=cloudwatch,
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage.cloudtrail_client",
+                new=Cloudtrail(aws_provider),
+            ),
+        ):
+            from prowler.providers.aws.services.cloudwatch.cloudwatch_log_metric_filter_root_usage.cloudwatch_log_metric_filter_root_usage import (
+                cloudwatch_log_metric_filter_root_usage,
+            )
+
+            return cloudwatch_log_metric_filter_root_usage().execute()
+
+    @mock_aws
+    def test_cloudwatch_match_found_despite_partial_denial_is_pass(self):
+        """A filter with its alarm found in a readable region is real evidence:
+        PASS even if another region denied the alarm listing."""
+        result = self._run_with_filter(with_alarm=True, metric_alarms_unavailable=True)
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+        assert result[0].resource_id == "/log-group/test"
+
+    @mock_aws
+    def test_cloudwatch_filter_without_alarm_under_partial_denial_is_manual(self):
+        """Filter found but no alarm, while the alarm listing was denied in some
+        region: the missing alarm cannot be asserted -> MANUAL, not FAIL."""
+        result = self._run_with_filter(with_alarm=False, metric_alarms_unavailable=True)
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert "cloudwatch:DescribeAlarms" in result[0].status_extended
+
+    @mock_aws
+    def test_cloudwatch_filter_without_alarm_fully_listed_is_fail(self):
+        """Same setup with a complete alarm inventory stays FAIL."""
+        result = self._run_with_filter(
+            with_alarm=False, metric_alarms_unavailable=False
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert "no alarms associated" in result[0].status_extended
diff --git a/tests/providers/aws/services/cloudwatch/cloudwatch_service_test.py b/tests/providers/aws/services/cloudwatch/cloudwatch_service_test.py
index 8420d78ca0..88a28f8aac 100644
--- a/tests/providers/aws/services/cloudwatch/cloudwatch_service_test.py
+++ b/tests/providers/aws/services/cloudwatch/cloudwatch_service_test.py
@@ -173,6 +173,7 @@ class Test_CloudWatch_Service:
         assert logs.metric_filters[0].log_group is None
         assert logs.metric_filters[0].name == "test-filter"
         assert logs.metric_filters[0].metric == "my-metric"
+        assert logs.metric_filters[0].metric_namespace == "my-namespace"
         assert logs.metric_filters[0].pattern == "test-pattern"
         assert logs.metric_filters[0].region == AWS_REGION_US_EAST_1
 
@@ -535,3 +536,39 @@ class Test_build_metric_filter_pattern:
                 event_names=["ConsoleLogin"],
                 extra_clauses=[("errorMessage", bad_operator, "Failed authentication")],
             )
+
+    @mock_aws
+    def test_describe_log_groups_access_denied_sets_flag(self):
+        """A denied DescribeLogGroups must raise log_groups_unavailable."""
+        from unittest import mock
+
+        from botocore.client import BaseClient
+        from botocore.exceptions import ClientError
+
+        orig = BaseClient._make_api_call
+
+        def deny_describe_log_groups(self, operation_name, kwarg):
+            if operation_name == "DescribeLogGroups":
+                raise ClientError(
+                    {
+                        "Error": {
+                            "Code": "AccessDeniedException",
+                            "Message": "Access Denied",
+                        }
+                    },
+                    operation_name,
+                )
+            return orig(self, operation_name, kwarg)
+
+        aws_provider = set_mocked_aws_provider(
+            expected_checks=["cloudwatch_log_group_no_secrets_in_logs"]
+        )
+        with mock.patch(
+            "botocore.client.BaseClient._make_api_call",
+            new=deny_describe_log_groups,
+        ):
+            logs = Logs(aws_provider)
+
+        assert logs.log_groups_unavailable is True
+        assert logs.log_groups is None
+        assert logs.all_log_groups is None
diff --git a/tests/providers/aws/services/cloudwatch/lib/metric_filters_test.py b/tests/providers/aws/services/cloudwatch/lib/metric_filters_test.py
index e29b2f0a5f..ddcb241f1d 100644
--- a/tests/providers/aws/services/cloudwatch/lib/metric_filters_test.py
+++ b/tests/providers/aws/services/cloudwatch/lib/metric_filters_test.py
@@ -54,7 +54,7 @@ def _trail_log_group():
     )
 
 
-def _metric_filter(name, log_group, metric=METRIC_NAME):
+def _metric_filter(name, log_group, metric=METRIC_NAME, namespace="CloudTrailMetrics"):
     """Build a metric filter whose pattern always matches PATTERN.
 
     Args:
@@ -62,30 +62,34 @@ def _metric_filter(name, log_group, metric=METRIC_NAME):
         log_group: the collected LogGroup, or None to model a filter whose log
             group was never retrieved -- the input that used to raise.
         metric: metric name an alarm has to carry for the filter to be compliant.
+        namespace: metric namespace the filter publishes to, or None when the
+            transformation does not expose one.
     """
     return MetricFilter(
         arn=f"arn:aws:logs:{AWS_REGION}:{AWS_ACCOUNT_NUMBER}:metric-filter/{name}",
         name=name,
         metric=metric,
+        metric_namespace=namespace,
         pattern=FILTER_PATTERN,
         log_group=log_group,
         region=AWS_REGION,
     )
 
 
-def _alarm(metric=METRIC_NAME):
+def _alarm(metric=METRIC_NAME, namespace="CloudTrailMetrics", region=AWS_REGION):
     """Build an alarm on metric; a non-default name models an unrelated alarm.
 
-    The check pairs alarms to filters by metric name alone, so passing a metric no
-    filter uses is how a filter with no alarm of its own is expressed.
+    The check pairs alarms to filters by metric name and region (and namespace
+    when both sides expose one), so passing a metric no filter uses is how a
+    filter with no alarm of its own is expressed.
     """
     return MetricAlarm(
-        arn=f"arn:aws:cloudwatch:{AWS_REGION}:{AWS_ACCOUNT_NUMBER}:alarm:{metric}-alarm",
+        arn=f"arn:aws:cloudwatch:{region}:{AWS_ACCOUNT_NUMBER}:alarm:{metric}-alarm",
         name=f"{metric}-alarm",
         metric=metric,
-        name_space="CloudTrailMetrics",
-        region=AWS_REGION,
-        alarm_actions=[f"arn:aws:sns:{AWS_REGION}:{AWS_ACCOUNT_NUMBER}:topic-test"],
+        name_space=namespace,
+        region=region,
+        alarm_actions=[f"arn:aws:sns:{region}:{AWS_ACCOUNT_NUMBER}:topic-test"],
         actions_enabled=True,
     )
 
@@ -147,3 +151,52 @@ class Test_check_cloudwatch_log_metric_filter:
             report.status_extended
             == f"CloudWatch log group {TRAIL_LOG_GROUP_NAME} found with metric filter trail-filter but no alarms associated."
         )
+
+    def test_alarm_in_other_namespace_does_not_pass(self):
+        """A same-named metric in another namespace is a different metric."""
+        report = check_cloudwatch_log_metric_filter(
+            PATTERN,
+            _trails(),
+            [_metric_filter("trail-filter", _trail_log_group())],
+            [_alarm(namespace="OtherNamespace")],
+            METADATA,
+        )
+
+        assert report.status == "FAIL"
+        assert "no alarms associated" in report.status_extended
+
+    def test_alarm_in_other_region_does_not_pass(self):
+        """A same-named metric in another region is a different metric."""
+        report = check_cloudwatch_log_metric_filter(
+            PATTERN,
+            _trails(),
+            [_metric_filter("trail-filter", _trail_log_group())],
+            [_alarm(region="us-east-1")],
+            METADATA,
+        )
+
+        assert report.status == "FAIL"
+
+    def test_alarm_without_namespace_still_matches(self):
+        """Namespace is only compared when both sides expose one."""
+        report = check_cloudwatch_log_metric_filter(
+            PATTERN,
+            _trails(),
+            [_metric_filter("trail-filter", _trail_log_group())],
+            [_alarm(namespace=None)],
+            METADATA,
+        )
+
+        assert report.status == "PASS"
+
+    def test_filter_without_namespace_still_matches(self):
+        """A filter with no namespace accepts an alarm in any namespace."""
+        report = check_cloudwatch_log_metric_filter(
+            PATTERN,
+            _trails(),
+            [_metric_filter("trail-filter", _trail_log_group(), namespace=None)],
+            [_alarm()],
+            METADATA,
+        )
+
+        assert report.status == "PASS"
diff --git a/tests/providers/aws/services/rolesanywhere/rolesanywhere_trust_anchor_pqc_pki/rolesanywhere_trust_anchor_pqc_pki_test.py b/tests/providers/aws/services/rolesanywhere/rolesanywhere_trust_anchor_pqc_pki/rolesanywhere_trust_anchor_pqc_pki_test.py
index 2038fdde57..a9a825d042 100644
--- a/tests/providers/aws/services/rolesanywhere/rolesanywhere_trust_anchor_pqc_pki/rolesanywhere_trust_anchor_pqc_pki_test.py
+++ b/tests/providers/aws/services/rolesanywhere/rolesanywhere_trust_anchor_pqc_pki/rolesanywhere_trust_anchor_pqc_pki_test.py
@@ -185,7 +185,7 @@ class Test_rolesanywhere_trust_anchor_pqc_pki:
 
             result = rolesanywhere_trust_anchor_pqc_pki().execute()
             assert len(result) == 1
-            assert result[0].status == "FAIL"
+            assert result[0].status == "MANUAL"
             assert "could not be inspected" in result[0].status_extended
 
     def test_certificate_bundle_source(self):
diff --git a/tests/providers/aws/services/s3/s3_bucket_cross_region_replication/s3_bucket_cross_region_replication_test.py b/tests/providers/aws/services/s3/s3_bucket_cross_region_replication/s3_bucket_cross_region_replication_test.py
index 2cc4ffd5e5..4eb53dc387 100644
--- a/tests/providers/aws/services/s3/s3_bucket_cross_region_replication/s3_bucket_cross_region_replication_test.py
+++ b/tests/providers/aws/services/s3/s3_bucket_cross_region_replication/s3_bucket_cross_region_replication_test.py
@@ -1,6 +1,8 @@
 from unittest import mock
 
 from boto3 import client
+from botocore.client import BaseClient
+from botocore.exceptions import ClientError
 from moto import mock_aws
 
 from tests.providers.aws.utils import (
@@ -9,6 +11,20 @@ from tests.providers.aws.utils import (
     set_mocked_aws_provider,
 )
 
+_orig_make_api_call = BaseClient._make_api_call
+
+
+def _deny(operation):
+    def mock_make_api_call(self, operation_name, kwarg):
+        if operation_name == operation:
+            raise ClientError(
+                {"Error": {"Code": "AccessDenied", "Message": "Access Denied"}},
+                operation_name,
+            )
+        return _orig_make_api_call(self, operation_name, kwarg)
+
+    return mock_make_api_call
+
 
 class Test_s3_bucket_cross_region_replication:
     # No Buckets
@@ -598,10 +614,10 @@ class Test_s3_bucket_cross_region_replication:
                 assert len(result) == 1
 
                 # US-EAST-1 Source Bucket
-                assert result[0].status == "FAIL"
+                assert result[0].status == "MANUAL"
                 assert (
                     result[0].status_extended
-                    == f"S3 Bucket {bucket_name_us} has cross region replication rule {repl_rule_id} in bucket {arn_bucket_eu.split(':')[-1]} which is out of Prowler's scope."
+                    == f"S3 Bucket {bucket_name_us} has cross region replication rule {repl_rule_id} in bucket {arn_bucket_eu.split(':')[-1]} which is out of Prowler's scope; verify manually that the destination bucket is in a different region."
                 )
                 assert result[0].resource_id == bucket_name_us
                 assert (
@@ -609,3 +625,77 @@ class Test_s3_bucket_cross_region_replication:
                     == f"arn:{aws_provider.identity.partition}:s3:::{bucket_name_us}"
                 )
                 assert result[0].region == AWS_REGION_US_EAST_1
+
+    @mock_aws
+    def test_bucket_replication_access_denied_is_manual(self):
+        """s3:GetReplicationConfiguration denied -> MANUAL, not FAIL."""
+        from prowler.providers.aws.services.s3.s3_service import S3
+
+        s3_client_us_east_1 = client("s3", region_name=AWS_REGION_US_EAST_1)
+        bucket_name = "bucket_test_us"
+        s3_client_us_east_1.create_bucket(Bucket=bucket_name)
+        s3_client_us_east_1.put_bucket_versioning(
+            Bucket=bucket_name, VersioningConfiguration={"Status": "Enabled"}
+        )
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
+
+        with (
+            mock.patch(
+                "botocore.client.BaseClient._make_api_call",
+                new=_deny("GetBucketReplication"),
+            ),
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=aws_provider,
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.s3.s3_bucket_cross_region_replication.s3_bucket_cross_region_replication.s3_client",
+                new=S3(aws_provider),
+            ),
+        ):
+            from prowler.providers.aws.services.s3.s3_bucket_cross_region_replication.s3_bucket_cross_region_replication import (
+                s3_bucket_cross_region_replication,
+            )
+
+            result = s3_bucket_cross_region_replication().execute()
+
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
+            assert "s3:GetReplicationConfiguration" in result[0].status_extended
+            assert result[0].resource_id == bucket_name
+
+    @mock_aws
+    def test_bucket_versioning_access_denied_is_manual(self):
+        """s3:GetBucketVersioning denied -> MANUAL, not FAIL."""
+        from prowler.providers.aws.services.s3.s3_service import S3
+
+        s3_client_us_east_1 = client("s3", region_name=AWS_REGION_US_EAST_1)
+        bucket_name = "bucket_test_us"
+        s3_client_us_east_1.create_bucket(Bucket=bucket_name)
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
+
+        with (
+            mock.patch(
+                "botocore.client.BaseClient._make_api_call",
+                new=_deny("GetBucketVersioning"),
+            ),
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=aws_provider,
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.s3.s3_bucket_cross_region_replication.s3_bucket_cross_region_replication.s3_client",
+                new=S3(aws_provider),
+            ),
+        ):
+            from prowler.providers.aws.services.s3.s3_bucket_cross_region_replication.s3_bucket_cross_region_replication import (
+                s3_bucket_cross_region_replication,
+            )
+
+            result = s3_bucket_cross_region_replication().execute()
+
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
+            assert "s3:GetBucketVersioning" in result[0].status_extended
diff --git a/tests/providers/azure/services/entra/entra_global_admin_in_less_than_five_users/entra_global_admin_in_less_than_five_users_test.py b/tests/providers/azure/services/entra/entra_global_admin_in_less_than_five_users/entra_global_admin_in_less_than_five_users_test.py
index 4270f485f3..a7dd874d5d 100644
--- a/tests/providers/azure/services/entra/entra_global_admin_in_less_than_five_users/entra_global_admin_in_less_than_five_users_test.py
+++ b/tests/providers/azure/services/entra/entra_global_admin_in_less_than_five_users/entra_global_admin_in_less_than_five_users_test.py
@@ -1,13 +1,18 @@
 from unittest import mock
 from uuid import uuid4
 
-from tests.providers.azure.azure_fixtures import DOMAIN, set_mocked_azure_provider
+from tests.providers.azure.azure_fixtures import (
+    DOMAIN,
+    TENANT_IDS,
+    set_mocked_azure_provider,
+)
 
 
 class Test_entra_global_admin_in_less_than_five_users:
     def test_entra_no_tenants(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         with (
             mock.patch(
                 "prowler.providers.common.provider.Provider.get_global_provider",
@@ -33,6 +38,7 @@ class Test_entra_global_admin_in_less_than_five_users:
     def test_entra_tenant_empty(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         with (
             mock.patch(
                 "prowler.providers.common.provider.Provider.get_global_provider",
@@ -58,6 +64,7 @@ class Test_entra_global_admin_in_less_than_five_users:
     def test_entra_less_than_five_global_admins(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         with (
             mock.patch(
                 "prowler.providers.common.provider.Provider.get_global_provider",
@@ -111,6 +118,7 @@ class Test_entra_global_admin_in_less_than_five_users:
     def test_entra_more_than_five_global_admins(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         with (
             mock.patch(
                 "prowler.providers.common.provider.Provider.get_global_provider",
@@ -179,6 +187,7 @@ class Test_entra_global_admin_in_less_than_five_users:
     def test_entra_exactly_five_global_admins(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         with (
             mock.patch(
                 "prowler.providers.common.provider.Provider.get_global_provider",
@@ -240,3 +249,46 @@ class Test_entra_global_admin_in_less_than_five_users:
             assert result[0].subscription == f"Tenant: {DOMAIN}"
             assert result[0].resource_name == "Global Administrator"
             assert result[0].resource_id == id
+
+    def test_entra_users_retrieval_error_reports_single_manual(self):
+        """Graph could not return the tenant's users -> one tenant-level MANUAL."""
+        entra_client = mock.MagicMock
+        entra_client.resource_groups = {}
+        entra_client.tenant_ids = [TENANT_IDS[0]]
+        entra_client.users_retrieval_errors = {DOMAIN: "ODataError HTTP 503"}
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_azure_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.azure.services.entra.entra_global_admin_in_less_than_five_users.entra_global_admin_in_less_than_five_users.entra_client",
+                new=entra_client,
+            ),
+        ):
+            from prowler.providers.azure.services.entra.entra_global_admin_in_less_than_five_users.entra_global_admin_in_less_than_five_users import (
+                entra_global_admin_in_less_than_five_users,
+            )
+            from prowler.providers.azure.services.entra.entra_service import (
+                DirectoryRole,
+            )
+
+            # Directory roles were retrieved, but every member was filtered
+            # out because the users could not be fetched: without the error
+            # tracking this would be a false PASS with 0 administrators.
+            entra_client.directory_roles = {
+                DOMAIN: {
+                    "Global Administrator": DirectoryRole(id=str(uuid4()), members=[])
+                }
+            }
+            entra_client.users = {DOMAIN: {}}
+
+            result = entra_global_admin_in_less_than_five_users().execute()
+
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
+            assert "did not return the tenant's users" in result[0].status_extended
+            assert "503" in result[0].status_extended
+            assert result[0].subscription == f"Tenant: {DOMAIN}"
+            assert result[0].resource_id == TENANT_IDS[0]
diff --git a/tests/providers/azure/services/entra/entra_non_privileged_user_has_mfa/entra_non_privileged_user_has_mfa_test.py b/tests/providers/azure/services/entra/entra_non_privileged_user_has_mfa/entra_non_privileged_user_has_mfa_test.py
index 04d838a2c0..91f7f02e05 100644
--- a/tests/providers/azure/services/entra/entra_non_privileged_user_has_mfa/entra_non_privileged_user_has_mfa_test.py
+++ b/tests/providers/azure/services/entra/entra_non_privileged_user_has_mfa/entra_non_privileged_user_has_mfa_test.py
@@ -1,13 +1,18 @@
 from unittest import mock
 from uuid import uuid4
 
-from tests.providers.azure.azure_fixtures import DOMAIN, set_mocked_azure_provider
+from tests.providers.azure.azure_fixtures import (
+    DOMAIN,
+    TENANT_IDS,
+    set_mocked_azure_provider,
+)
 
 
 class Test_entra_non_privileged_user_has_mfa:
     def test_entra_no_tenants(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         with (
             mock.patch(
                 "prowler.providers.common.provider.Provider.get_global_provider",
@@ -31,6 +36,7 @@ class Test_entra_non_privileged_user_has_mfa:
     def test_entra_tenant_no_users(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         with (
             mock.patch(
                 "prowler.providers.common.provider.Provider.get_global_provider",
@@ -54,6 +60,7 @@ class Test_entra_non_privileged_user_has_mfa:
     def test_entra_user_no_privileged_no_mfa(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         user_id = str(uuid4())
 
         with (
@@ -102,6 +109,7 @@ class Test_entra_non_privileged_user_has_mfa:
     def test_entra_user_no_privileged_mfa(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         user_id = str(uuid4())
 
         with (
@@ -147,6 +155,7 @@ class Test_entra_non_privileged_user_has_mfa:
     def test_entra_disabled_user_no_privileged_no_mfa(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         user_id = str(uuid4())
 
         with (
@@ -188,6 +197,7 @@ class Test_entra_non_privileged_user_has_mfa:
     def test_entra_disabled_user_no_privileged_mfa(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         user_id = str(uuid4())
 
         with (
@@ -229,6 +239,7 @@ class Test_entra_non_privileged_user_has_mfa:
     def test_entra_user_privileged_no_mfa(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         user_id = str(uuid4())
 
         with (
@@ -271,6 +282,7 @@ class Test_entra_non_privileged_user_has_mfa:
     def test_entra_user_privileged_mfa(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         user_id = str(uuid4())
 
         with (
@@ -309,3 +321,36 @@ class Test_entra_non_privileged_user_has_mfa:
             check = entra_non_privileged_user_has_mfa()
             result = check.execute()
             assert len(result) == 0
+
+    def test_entra_users_retrieval_error_reports_single_manual(self):
+        """Graph could not return the tenant's users -> one tenant-level MANUAL."""
+        entra_client = mock.MagicMock
+        entra_client.resource_groups = {}
+        entra_client.tenant_ids = [TENANT_IDS[0]]
+        entra_client.users_retrieval_errors = {DOMAIN: "ODataError HTTP 503"}
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_azure_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.azure.services.entra.entra_non_privileged_user_has_mfa.entra_non_privileged_user_has_mfa.entra_client",
+                new=entra_client,
+            ),
+        ):
+            from prowler.providers.azure.services.entra.entra_non_privileged_user_has_mfa.entra_non_privileged_user_has_mfa import (
+                entra_non_privileged_user_has_mfa,
+            )
+
+            entra_client.users = {DOMAIN: {}}
+            entra_client.directory_roles = {DOMAIN: {}}
+
+            result = entra_non_privileged_user_has_mfa().execute()
+
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
+            assert "did not return the tenant's users" in result[0].status_extended
+            assert "503" in result[0].status_extended
+            assert result[0].subscription == f"Tenant: {DOMAIN}"
+            assert result[0].resource_id == TENANT_IDS[0]
diff --git a/tests/providers/azure/services/entra/entra_privileged_user_has_mfa/entra_privileged_user_has_mfa_test.py b/tests/providers/azure/services/entra/entra_privileged_user_has_mfa/entra_privileged_user_has_mfa_test.py
index 3475baf592..8a9e9c6e11 100644
--- a/tests/providers/azure/services/entra/entra_privileged_user_has_mfa/entra_privileged_user_has_mfa_test.py
+++ b/tests/providers/azure/services/entra/entra_privileged_user_has_mfa/entra_privileged_user_has_mfa_test.py
@@ -1,13 +1,18 @@
 from unittest import mock
 from uuid import uuid4
 
-from tests.providers.azure.azure_fixtures import DOMAIN, set_mocked_azure_provider
+from tests.providers.azure.azure_fixtures import (
+    DOMAIN,
+    TENANT_IDS,
+    set_mocked_azure_provider,
+)
 
 
 class Test_entra_privileged_user_has_mfa:
     def test_entra_no_tenants(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         with (
             mock.patch(
                 "prowler.providers.common.provider.Provider.get_global_provider",
@@ -31,6 +36,7 @@ class Test_entra_privileged_user_has_mfa:
     def test_entra_tenant_no_users(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         with (
             mock.patch(
                 "prowler.providers.common.provider.Provider.get_global_provider",
@@ -54,6 +60,7 @@ class Test_entra_privileged_user_has_mfa:
     def test_entra_user_no_privileged_no_mfa(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         user_id = str(uuid4())
 
         with (
@@ -94,6 +101,7 @@ class Test_entra_privileged_user_has_mfa:
     def test_entra_user_no_privileged_mfa(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         user_id = str(uuid4())
 
         with (
@@ -134,6 +142,7 @@ class Test_entra_privileged_user_has_mfa:
     def test_entra_user_privileged_no_mfa(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         user_id = str(uuid4())
 
         with (
@@ -181,6 +190,7 @@ class Test_entra_privileged_user_has_mfa:
     def test_entra_user_privileged_mfa(self):
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         user_id = str(uuid4())
 
         with (
@@ -224,3 +234,36 @@ class Test_entra_privileged_user_has_mfa:
             assert result[0].resource_name == "foo"
             assert result[0].resource_id == user_id
             assert result[0].subscription == f"Tenant: {DOMAIN}"
+
+    def test_entra_users_retrieval_error_reports_single_manual(self):
+        """Graph could not return the tenant's users -> one tenant-level MANUAL."""
+        entra_client = mock.MagicMock
+        entra_client.resource_groups = {}
+        entra_client.tenant_ids = [TENANT_IDS[0]]
+        entra_client.users_retrieval_errors = {DOMAIN: "ODataError HTTP 503"}
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_azure_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.azure.services.entra.entra_privileged_user_has_mfa.entra_privileged_user_has_mfa.entra_client",
+                new=entra_client,
+            ),
+        ):
+            from prowler.providers.azure.services.entra.entra_privileged_user_has_mfa.entra_privileged_user_has_mfa import (
+                entra_privileged_user_has_mfa,
+            )
+
+            entra_client.users = {DOMAIN: {}}
+            entra_client.directory_roles = {DOMAIN: {}}
+
+            result = entra_privileged_user_has_mfa().execute()
+
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
+            assert "did not return the tenant's users" in result[0].status_extended
+            assert "503" in result[0].status_extended
+            assert result[0].subscription == f"Tenant: {DOMAIN}"
+            assert result[0].resource_id == TENANT_IDS[0]
diff --git a/tests/providers/azure/services/entra/entra_service_test.py b/tests/providers/azure/services/entra/entra_service_test.py
index ebd2b790ab..7f5a188391 100644
--- a/tests/providers/azure/services/entra/entra_service_test.py
+++ b/tests/providers/azure/services/entra/entra_service_test.py
@@ -305,3 +305,113 @@ def test_azure_entra__get_users_handles_pagination():
     assert users["tenant-1"]["user-2"].account_enabled is True
     assert users["tenant-1"]["user-3"].is_mfa_capable is False
     assert users["tenant-1"]["user-3"].account_enabled is True
+
+
+class TestGetUsersSignInActivity:
+    """Service-level coverage for the signInActivity 403 fallback."""
+
+    @staticmethod
+    def _graph_error(status):
+        error = Exception("graph error")
+        error.response_status_code = status
+        return error
+
+    @staticmethod
+    def _users_response(value=None, next_link=None):
+        from types import SimpleNamespace
+
+        return SimpleNamespace(value=value or [], odata_next_link=next_link)
+
+    def _service(self, side_effect):
+        # SimpleNamespace instead of MagicMock: several check tests assign
+        # attributes on the MagicMock *class*, which would shadow instance
+        # child mocks here.
+        from types import SimpleNamespace
+        from unittest.mock import AsyncMock
+
+        from prowler.providers.azure.services.entra.entra_service import Entra
+
+        service = Entra.__new__(Entra)
+        client = SimpleNamespace(
+            users=SimpleNamespace(get=AsyncMock(side_effect=side_effect))
+        )
+        service.clients = {"tenant.onmicrosoft.com": client}
+        service.sign_in_activity_errors = {}
+        service.users_retrieval_errors = {}
+        service._get_user_registration_details = AsyncMock(return_value={})
+        return service
+
+    def test_403_records_tenant_and_retries_without_sign_in_activity(self):
+        import asyncio
+
+        service = self._service(
+            side_effect=[self._graph_error(403), self._users_response()]
+        )
+        users = asyncio.run(service._get_users())
+
+        assert "tenant.onmicrosoft.com" in service.sign_in_activity_errors
+        assert "403" in service.sign_in_activity_errors["tenant.onmicrosoft.com"]
+        assert service.users_retrieval_errors == {}
+        assert users == {"tenant.onmicrosoft.com": {}}
+        assert service.clients["tenant.onmicrosoft.com"].users.get.await_count == 2
+
+    def test_transient_error_does_not_blame_licensing(self):
+        import asyncio
+
+        service = self._service(side_effect=[self._graph_error(503)])
+        users = asyncio.run(service._get_users())
+
+        # The failure is not attributed to licensing/permissions, but the
+        # empty inventory is not trusted either: the tenant is recorded so
+        # the user-based checks report MANUAL.
+        assert service.sign_in_activity_errors == {}
+        assert "tenant.onmicrosoft.com" in service.users_retrieval_errors
+        assert "503" in service.users_retrieval_errors["tenant.onmicrosoft.com"]
+        assert users == {"tenant.onmicrosoft.com": {}}
+        assert service.clients["tenant.onmicrosoft.com"].users.get.await_count == 1
+
+    def test_failing_second_page_records_users_retrieval_error(self):
+        import asyncio
+        from types import SimpleNamespace
+        from unittest.mock import AsyncMock
+
+        service = self._service(
+            side_effect=[
+                self._users_response(
+                    value=[
+                        SimpleNamespace(
+                            id="user-1",
+                            display_name="user-1",
+                            account_enabled=True,
+                            sign_in_activity=None,
+                        )
+                    ],
+                    next_link="https://graph.microsoft.com/v1.0/users?$skiptoken=page2",
+                )
+            ]
+        )
+        service.clients["tenant.onmicrosoft.com"].users.with_url = lambda _: (
+            SimpleNamespace(get=AsyncMock(side_effect=self._graph_error(503)))
+        )
+        users = asyncio.run(service._get_users())
+
+        # The first page made it into the inventory, but the tenant is marked
+        # unavailable: a partial inventory must not be evaluated as complete.
+        assert "user-1" in users["tenant.onmicrosoft.com"]
+        assert "tenant.onmicrosoft.com" in service.users_retrieval_errors
+        assert "503" in service.users_retrieval_errors["tenant.onmicrosoft.com"]
+        assert service.sign_in_activity_errors == {}
+
+    def test_403_with_failing_retry_records_users_retrieval_error(self):
+        import asyncio
+
+        service = self._service(
+            side_effect=[self._graph_error(403), self._graph_error(503)]
+        )
+        users = asyncio.run(service._get_users())
+
+        assert "tenant.onmicrosoft.com" in service.sign_in_activity_errors
+        assert "tenant.onmicrosoft.com" in service.users_retrieval_errors
+        assert "503" in service.users_retrieval_errors["tenant.onmicrosoft.com"]
+        assert users == {"tenant.onmicrosoft.com": {}}
+        assert service.clients["tenant.onmicrosoft.com"].users.get.await_count == 2
diff --git a/tests/providers/azure/services/entra/entra_user_with_recent_sign_in/entra_user_with_recent_sign_in_test.py b/tests/providers/azure/services/entra/entra_user_with_recent_sign_in/entra_user_with_recent_sign_in_test.py
index f940cf232c..2ff8884da2 100644
--- a/tests/providers/azure/services/entra/entra_user_with_recent_sign_in/entra_user_with_recent_sign_in_test.py
+++ b/tests/providers/azure/services/entra/entra_user_with_recent_sign_in/entra_user_with_recent_sign_in_test.py
@@ -2,12 +2,21 @@ from datetime import datetime, timedelta, timezone
 from unittest import mock
 from uuid import uuid4
 
-from tests.providers.azure.azure_fixtures import DOMAIN, set_mocked_azure_provider
+from tests.providers.azure.azure_fixtures import (
+    DOMAIN,
+    TENANT_IDS,
+    set_mocked_azure_provider,
+)
+
+TENANT_ID = TENANT_IDS[0]
 
 
 class Test_entra_user_with_recent_sign_in:
     def test_entra_no_tenants(self):
         entra_client = mock.MagicMock
+        entra_client.sign_in_activity_errors = {}
+        entra_client.users_retrieval_errors = {}
+        entra_client.tenant_ids = [TENANT_ID]
 
         with (
             mock.patch(
@@ -31,6 +40,9 @@ class Test_entra_user_with_recent_sign_in:
 
     def test_entra_user_disabled(self):
         entra_client = mock.MagicMock
+        entra_client.sign_in_activity_errors = {}
+        entra_client.users_retrieval_errors = {}
+        entra_client.tenant_ids = [TENANT_ID]
         user_id = str(uuid4())
 
         with (
@@ -63,6 +75,9 @@ class Test_entra_user_with_recent_sign_in:
 
     def test_entra_user_never_signed_in(self):
         entra_client = mock.MagicMock
+        entra_client.sign_in_activity_errors = {}
+        entra_client.users_retrieval_errors = {}
+        entra_client.tenant_ids = [TENANT_ID]
         user_id = str(uuid4())
 
         with (
@@ -93,10 +108,13 @@ class Test_entra_user_with_recent_sign_in:
             result = check.execute()
             assert len(result) == 1
             assert result[0].status == "FAIL"
-            assert "No sign-in activity data available" in result[0].status_extended
+            assert "no recorded sign-in activity" in result[0].status_extended
 
-    def test_entra_single_user_no_sign_in_data_reports_telemetry_gap(self):
+    def test_entra_single_user_no_sign_in_data_fails(self):
         entra_client = mock.MagicMock
+        entra_client.sign_in_activity_errors = {}
+        entra_client.users_retrieval_errors = {}
+        entra_client.tenant_ids = [TENANT_ID]
         user_id = str(uuid4())
 
         with (
@@ -127,11 +145,13 @@ class Test_entra_user_with_recent_sign_in:
             result = check.execute()
             assert len(result) == 1
             assert result[0].status == "FAIL"
-            assert "No sign-in activity data available" in result[0].status_extended
-            assert "1 enabled user" in result[0].status_extended
+            assert "no recorded sign-in activity" in result[0].status_extended
 
     def test_entra_user_stale_sign_in(self):
         entra_client = mock.MagicMock
+        entra_client.sign_in_activity_errors = {}
+        entra_client.users_retrieval_errors = {}
+        entra_client.tenant_ids = [TENANT_ID]
         user_id = str(uuid4())
 
         with (
@@ -166,6 +186,9 @@ class Test_entra_user_with_recent_sign_in:
 
     def test_entra_user_recent_sign_in(self):
         entra_client = mock.MagicMock
+        entra_client.sign_in_activity_errors = {}
+        entra_client.users_retrieval_errors = {}
+        entra_client.tenant_ids = [TENANT_ID]
         user_id = str(uuid4())
 
         with (
@@ -198,8 +221,11 @@ class Test_entra_user_with_recent_sign_in:
             assert result[0].status == "PASS"
             assert "10 days ago" in result[0].status_extended
 
-    def test_entra_all_users_no_sign_in_data_license_issue(self):
+    def test_entra_all_users_no_sign_in_data_fail(self):
         entra_client = mock.MagicMock
+        entra_client.sign_in_activity_errors = {}
+        entra_client.users_retrieval_errors = {}
+        entra_client.tenant_ids = [TENANT_ID]
 
         with (
             mock.patch(
@@ -231,14 +257,63 @@ class Test_entra_user_with_recent_sign_in:
 
             check = entra_user_with_recent_sign_in()
             result = check.execute()
-            # Should produce 1 finding (license warning), not 5 individual FAILs
+            # Graph returned the users without any sign-in: every one is stale
+            assert len(result) == 5
+            assert all(r.status == "FAIL" for r in result)
+
+    def test_entra_sign_in_activity_errors_reports_single_manual(self):
+        """Graph refused signInActivity (no P1/P2 or AuditLog.Read.All) -> one tenant MANUAL."""
+        entra_client = mock.MagicMock
+        entra_client.tenant_ids = [TENANT_ID]
+        entra_client.sign_in_activity_errors = {
+            DOMAIN: "ODataError HTTP 403 Authentication_RequestFromNonPremiumTenantOrB2CTenant"
+        }
+        entra_client.users_retrieval_errors = {}
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_azure_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.azure.services.entra.entra_user_with_recent_sign_in.entra_user_with_recent_sign_in.entra_client",
+                new=entra_client,
+            ),
+        ):
+            from prowler.providers.azure.services.entra.entra_service import User
+            from prowler.providers.azure.services.entra.entra_user_with_recent_sign_in.entra_user_with_recent_sign_in import (
+                entra_user_with_recent_sign_in,
+            )
+
+            # Users were re-fetched without signInActivity, so they exist but
+            # must not be evaluated individually.
+            entra_client.users = {
+                DOMAIN: {
+                    str(uuid4()): User(
+                        id=str(uuid4()), name="user", account_enabled=True
+                    )
+                }
+            }
+
+            result = entra_user_with_recent_sign_in().execute()
+
             assert len(result) == 1
-            assert result[0].status == "FAIL"
-            assert "Entra ID P1/P2 licensing" in result[0].status_extended
-            assert "5 enabled users" in result[0].status_extended
+            assert result[0].status == "MANUAL"
+            assert "Entra ID P1/P2" in result[0].status_extended
+            assert "AuditLog.Read.All" in result[0].status_extended
+            assert (
+                "Authentication_RequestFromNonPremiumTenantOrB2CTenant"
+                in result[0].status_extended
+            )
+            assert result[0].resource_id == TENANT_ID
+            assert result[0].resource_name == DOMAIN
+            assert result[0].subscription == f"Tenant: {DOMAIN}"
 
     def test_entra_user_never_signed_in_when_telemetry_exists_for_tenant(self):
         entra_client = mock.MagicMock
+        entra_client.sign_in_activity_errors = {}
+        entra_client.users_retrieval_errors = {}
+        entra_client.tenant_ids = [TENANT_ID]
 
         with (
             mock.patch(
@@ -282,12 +357,16 @@ class Test_entra_user_with_recent_sign_in:
                 r.status == "PASS" and "5 days ago" in r.status_extended for r in result
             )
             assert any(
-                r.status == "FAIL" and "never signed in" in r.status_extended
+                r.status == "FAIL"
+                and "no recorded sign-in activity" in r.status_extended
                 for r in result
             )
 
     def test_entra_user_boundary_90_days(self):
         entra_client = mock.MagicMock
+        entra_client.sign_in_activity_errors = {}
+        entra_client.users_retrieval_errors = {}
+        entra_client.tenant_ids = [TENANT_ID]
         user_id = str(uuid4())
 
         with (
@@ -319,3 +398,34 @@ class Test_entra_user_with_recent_sign_in:
             assert len(result) == 1
             assert result[0].status == "PASS"
             assert "90 days ago" in result[0].status_extended
+
+    def test_entra_users_retrieval_error_reports_single_manual(self):
+        """Graph could not return the tenant's users at all -> one tenant MANUAL."""
+        entra_client = mock.MagicMock
+        entra_client.tenant_ids = [TENANT_ID]
+        entra_client.sign_in_activity_errors = {}
+        entra_client.users_retrieval_errors = {DOMAIN: "ODataError HTTP 503"}
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_azure_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.azure.services.entra.entra_user_with_recent_sign_in.entra_user_with_recent_sign_in.entra_client",
+                new=entra_client,
+            ),
+        ):
+            from prowler.providers.azure.services.entra.entra_user_with_recent_sign_in.entra_user_with_recent_sign_in import (
+                entra_user_with_recent_sign_in,
+            )
+
+            entra_client.users = {DOMAIN: {}}
+
+            result = entra_user_with_recent_sign_in().execute()
+
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
+            assert "did not return the tenant's users" in result[0].status_extended
+            assert "503" in result[0].status_extended
+            assert result[0].resource_id == TENANT_ID
diff --git a/tests/providers/azure/services/entra/entra_user_with_vm_access_has_mfa/entra_user_with_vm_access_has_mfa_test.py b/tests/providers/azure/services/entra/entra_user_with_vm_access_has_mfa/entra_user_with_vm_access_has_mfa_test.py
index 83c06ea5b6..d62b16c520 100644
--- a/tests/providers/azure/services/entra/entra_user_with_vm_access_has_mfa/entra_user_with_vm_access_has_mfa_test.py
+++ b/tests/providers/azure/services/entra/entra_user_with_vm_access_has_mfa/entra_user_with_vm_access_has_mfa_test.py
@@ -7,6 +7,7 @@ from tests.providers.azure.azure_fixtures import (
     AZURE_SUBSCRIPTION_ID,
     AZURE_SUBSCRIPTION_NAME,
     DOMAIN,
+    TENANT_IDS,
     set_mocked_azure_provider,
 )
 
@@ -18,12 +19,17 @@ class Test_iam_assignment_priviledge_access_vm_has_mfa:
         iam_client.subscriptions = {AZURE_SUBSCRIPTION_ID: AZURE_SUBSCRIPTION_NAME}
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         entra_client.subscriptions = {AZURE_SUBSCRIPTION_ID: AZURE_SUBSCRIPTION_NAME}
         with (
             mock.patch(
                 "prowler.providers.common.provider.Provider.get_global_provider",
                 return_value=set_mocked_azure_provider(),
             ),
+            mock.patch(
+                "prowler.providers.azure.services.entra.entra_user_with_vm_access_has_mfa.entra_user_with_vm_access_has_mfa.entra_client",
+                new=entra_client,
+            ),
             mock.patch(
                 "prowler.providers.azure.services.entra.entra_user_with_vm_access_has_mfa.entra_user_with_vm_access_has_mfa.iam_client",
                 new=iam_client,
@@ -47,6 +53,7 @@ class Test_iam_assignment_priviledge_access_vm_has_mfa:
         role_assigment_id = str(uuid4())
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         entra_client.subscriptions = {AZURE_SUBSCRIPTION_ID: AZURE_SUBSCRIPTION_NAME}
         user_id = str(uuid4())
 
@@ -120,6 +127,7 @@ class Test_iam_assignment_priviledge_access_vm_has_mfa:
         role_assigment_id = str(uuid4())
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         entra_client.subscriptions = {AZURE_SUBSCRIPTION_ID: AZURE_SUBSCRIPTION_NAME}
         user_id = str(uuid4())
 
@@ -193,6 +201,7 @@ class Test_iam_assignment_priviledge_access_vm_has_mfa:
         role_assigment_id = str(uuid4())
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         entra_client.subscriptions = {AZURE_SUBSCRIPTION_ID: AZURE_SUBSCRIPTION_NAME}
         user_id = str(uuid4())
 
@@ -249,6 +258,7 @@ class Test_iam_assignment_priviledge_access_vm_has_mfa:
         role_assigment_id = str(uuid4())
         entra_client = mock.MagicMock
         entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {}
         entra_client.subscriptions = {AZURE_SUBSCRIPTION_ID: AZURE_SUBSCRIPTION_NAME}
         user_id = str(uuid4())
 
@@ -306,3 +316,44 @@ class Test_iam_assignment_priviledge_access_vm_has_mfa:
                 check = entra_user_with_vm_access_has_mfa()
                 result = check.execute()
                 assert len(result) == 0
+
+    def test_entra_users_retrieval_error_reports_single_manual(self):
+        """Graph could not return the tenant's users -> one tenant-level MANUAL."""
+        iam_client = mock.MagicMock
+        iam_client.resource_groups = {}
+        iam_client.subscriptions = {AZURE_SUBSCRIPTION_ID: AZURE_SUBSCRIPTION_NAME}
+        entra_client = mock.MagicMock
+        entra_client.resource_groups = {}
+        entra_client.users_retrieval_errors = {DOMAIN: "ODataError HTTP 503"}
+        entra_client.tenant_ids = [TENANT_IDS[0]]
+        entra_client.subscriptions = {AZURE_SUBSCRIPTION_ID: AZURE_SUBSCRIPTION_NAME}
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_azure_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.azure.services.entra.entra_user_with_vm_access_has_mfa.entra_user_with_vm_access_has_mfa.entra_client",
+                new=entra_client,
+            ),
+            mock.patch(
+                "prowler.providers.azure.services.entra.entra_user_with_vm_access_has_mfa.entra_user_with_vm_access_has_mfa.iam_client",
+                new=iam_client,
+            ),
+        ):
+            from prowler.providers.azure.services.entra.entra_user_with_vm_access_has_mfa.entra_user_with_vm_access_has_mfa import (
+                entra_user_with_vm_access_has_mfa,
+            )
+
+            iam_client.role_assignments = {}
+            entra_client.users = {DOMAIN: {}}
+
+            result = entra_user_with_vm_access_has_mfa().execute()
+
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
+            assert "did not return the tenant's users" in result[0].status_extended
+            assert "503" in result[0].status_extended
+            assert result[0].subscription == f"Tenant: {DOMAIN}"
+            assert result[0].resource_id == TENANT_IDS[0]
diff --git a/tests/providers/gcp/services/iam/iam_account_access_approval_enabled/iam_account_access_approval_enabled_test.py b/tests/providers/gcp/services/iam/iam_account_access_approval_enabled/iam_account_access_approval_enabled_test.py
index fab9264535..c37ac8c139 100644
--- a/tests/providers/gcp/services/iam/iam_account_access_approval_enabled/iam_account_access_approval_enabled_test.py
+++ b/tests/providers/gcp/services/iam/iam_account_access_approval_enabled/iam_account_access_approval_enabled_test.py
@@ -8,6 +8,9 @@ from tests.providers.gcp.gcp_fixtures import GCP_PROJECT_ID, set_mocked_gcp_prov
 class Test_iam_account_access_approval_enabled:
     def test_iam_no_settings(self):
         accessapproval_client = mock.MagicMock()
+        accessapproval_client.api_disabled_project_ids = set()
+        accessapproval_client.api_state_unknown_project_ids = set()
+        accessapproval_client.settings_lookup_failed = set()
         accessapproval_client.settings = {}
         accessapproval_client.project_ids = [GCP_PROJECT_ID]
         accessapproval_client.region = "global"
@@ -51,6 +54,9 @@ class Test_iam_account_access_approval_enabled:
     def test_iam_project_with_settings(self):
         cloudresourcemanager_client = mock.MagicMock()
         accessapproval_client = mock.MagicMock()
+        accessapproval_client.api_disabled_project_ids = set()
+        accessapproval_client.api_state_unknown_project_ids = set()
+        accessapproval_client.settings_lookup_failed = set()
         accessapproval_client.project_ids = [GCP_PROJECT_ID]
         accessapproval_client.region = "global"
         accessapproval_client.projects = {
@@ -103,6 +109,9 @@ class Test_iam_account_access_approval_enabled:
     def test_iam_project_with_settings_empty_project_name(self):
         cloudresourcemanager_client = mock.MagicMock()
         accessapproval_client = mock.MagicMock()
+        accessapproval_client.api_disabled_project_ids = set()
+        accessapproval_client.api_state_unknown_project_ids = set()
+        accessapproval_client.settings_lookup_failed = set()
         accessapproval_client.project_ids = [GCP_PROJECT_ID]
         accessapproval_client.region = "global"
         accessapproval_client.projects = {
@@ -151,3 +160,126 @@ class Test_iam_account_access_approval_enabled:
             assert result[0].resource_name == "GCP Project"
             assert result[0].project_id == GCP_PROJECT_ID
             assert result[0].location == "global"
+
+    def test_iam_settings_lookup_failed(self):
+        """Permission/API error reading the settings -> MANUAL, not FAIL."""
+        accessapproval_client = mock.MagicMock()
+        accessapproval_client.api_disabled_project_ids = set()
+        accessapproval_client.api_state_unknown_project_ids = set()
+        accessapproval_client.settings = {}
+        accessapproval_client.settings_lookup_failed = {GCP_PROJECT_ID}
+        accessapproval_client.project_ids = [GCP_PROJECT_ID]
+        accessapproval_client.region = "global"
+        accessapproval_client.projects = {
+            GCP_PROJECT_ID: GCPProject(
+                id=GCP_PROJECT_ID,
+                number="123456789012",
+                name="test",
+                labels={},
+                lifecycle_state="ACTIVE",
+            )
+        }
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_gcp_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.gcp.services.iam.iam_account_access_approval_enabled.iam_account_access_approval_enabled.accessapproval_client",
+                new=accessapproval_client,
+            ),
+        ):
+            from prowler.providers.gcp.services.iam.iam_account_access_approval_enabled.iam_account_access_approval_enabled import (
+                iam_account_access_approval_enabled,
+            )
+
+            check = iam_account_access_approval_enabled()
+            result = check.execute()
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
+            assert search(
+                "Access Approval settings could not be read",
+                result[0].status_extended,
+            )
+            assert result[0].resource_id == GCP_PROJECT_ID
+            assert result[0].project_id == GCP_PROJECT_ID
+
+    def test_iam_api_disabled_project_is_fail(self):
+        """API definitively disabled -> Access Approval cannot be enabled -> FAIL."""
+        accessapproval_client = mock.MagicMock()
+        accessapproval_client.settings = {}
+        accessapproval_client.settings_lookup_failed = set()
+        accessapproval_client.api_disabled_project_ids = {GCP_PROJECT_ID}
+        accessapproval_client.api_state_unknown_project_ids = set()
+        accessapproval_client.project_ids = []
+        accessapproval_client.region = "global"
+        accessapproval_client.projects = {
+            GCP_PROJECT_ID: GCPProject(
+                id=GCP_PROJECT_ID,
+                number="123456789012",
+                name="test",
+                labels={},
+                lifecycle_state="ACTIVE",
+            )
+        }
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_gcp_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.gcp.services.iam.iam_account_access_approval_enabled.iam_account_access_approval_enabled.accessapproval_client",
+                new=accessapproval_client,
+            ),
+        ):
+            from prowler.providers.gcp.services.iam.iam_account_access_approval_enabled.iam_account_access_approval_enabled import (
+                iam_account_access_approval_enabled,
+            )
+
+            result = iam_account_access_approval_enabled().execute()
+
+            assert len(result) == 1
+            assert result[0].status == "FAIL"
+            assert "API is disabled" in result[0].status_extended
+            assert result[0].project_id == GCP_PROJECT_ID
+
+    def test_iam_api_state_unknown_project_is_manual(self):
+        """API activation state undetermined -> evidence gap -> MANUAL."""
+        accessapproval_client = mock.MagicMock()
+        accessapproval_client.settings = {}
+        accessapproval_client.settings_lookup_failed = set()
+        accessapproval_client.api_disabled_project_ids = set()
+        accessapproval_client.api_state_unknown_project_ids = {GCP_PROJECT_ID}
+        accessapproval_client.project_ids = []
+        accessapproval_client.region = "global"
+        accessapproval_client.projects = {
+            GCP_PROJECT_ID: GCPProject(
+                id=GCP_PROJECT_ID,
+                number="123456789012",
+                name="test",
+                labels={},
+                lifecycle_state="ACTIVE",
+            )
+        }
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_gcp_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.gcp.services.iam.iam_account_access_approval_enabled.iam_account_access_approval_enabled.accessapproval_client",
+                new=accessapproval_client,
+            ),
+        ):
+            from prowler.providers.gcp.services.iam.iam_account_access_approval_enabled.iam_account_access_approval_enabled import (
+                iam_account_access_approval_enabled,
+            )
+
+            result = iam_account_access_approval_enabled().execute()
+
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
+            assert "could not be determined" in result[0].status_extended
diff --git a/tests/providers/gcp/services/iam/iamgcp_service_test.py b/tests/providers/gcp/services/iam/iamgcp_service_test.py
index c2b5e655f2..1109356ca7 100644
--- a/tests/providers/gcp/services/iam/iamgcp_service_test.py
+++ b/tests/providers/gcp/services/iam/iamgcp_service_test.py
@@ -1,5 +1,5 @@
 from datetime import datetime
-from unittest.mock import patch
+from unittest.mock import MagicMock, patch
 
 from prowler.providers.gcp.services.cloudresourcemanager.cloudresourcemanager_service import (
     CloudResourceManager,
@@ -113,6 +113,118 @@ class TestAccessApproval:
                 access_approval_client.settings[GCP_PROJECT_ID].project_id
                 == GCP_PROJECT_ID
             )
+            assert access_approval_client.settings_lookup_failed == set()
+
+    def _build_with_http_error(self, status):
+        from googleapiclient.errors import HttpError
+
+        http_error = HttpError(
+            resp=MagicMock(status=status, reason="error"),
+            content=b'{"error": {"code": %d, "message": "error"}}' % status,
+            uri="https://accessapproval.googleapis.com/v1/projects/123/accessApprovalSettings",
+        )
+        client = MagicMock()
+        client.projects().getAccessApprovalSettings().execute.side_effect = http_error
+
+        with (
+            patch(
+                "prowler.providers.gcp.lib.service.service.GCPService.__is_api_active__",
+                new=mock_is_api_active,
+            ),
+            patch(
+                "prowler.providers.gcp.lib.service.service.GCPService.__generate_client__",
+                return_value=client,
+            ),
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_gcp_provider(),
+            ),
+        ):
+            from prowler.providers.gcp.services.iam.iam_service import AccessApproval
+
+            return AccessApproval(set_mocked_gcp_provider(project_ids=[GCP_PROJECT_ID]))
+
+    def test_settings_not_found_means_not_enabled(self):
+        """A 404 means Access Approval is not enabled: no settings, no error."""
+        access_approval_client = self._build_with_http_error(404)
+
+        assert access_approval_client.settings == {}
+        assert access_approval_client.settings_lookup_failed == set()
+
+    def test_settings_permission_denied_is_tracked(self):
+        """A 403 (or API disabled) is a lookup failure, not 'not enabled'."""
+        access_approval_client = self._build_with_http_error(403)
+
+        assert access_approval_client.settings == {}
+        assert access_approval_client.settings_lookup_failed == {GCP_PROJECT_ID}
+
+    def test_access_approval_api_disabled_is_tracked(self):
+        """A DISABLED serviceusage state must land in api_disabled_project_ids."""
+        serviceusage_client = MagicMock()
+        serviceusage_client.services().get().execute.return_value = {
+            "state": "DISABLED"
+        }
+
+        provider = set_mocked_gcp_provider(project_ids=[GCP_PROJECT_ID])
+        # The fixture is a MagicMock: make the API-activation precheck run.
+        provider.skip_api_check = False
+
+        with (
+            patch(
+                "prowler.providers.gcp.lib.service.service.discovery.build",
+                return_value=serviceusage_client,
+            ),
+            patch(
+                "prowler.providers.gcp.lib.service.service.GCPService.__generate_client__",
+                return_value=MagicMock(),
+            ),
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=provider,
+            ),
+        ):
+            from prowler.providers.gcp.services.iam.iam_service import AccessApproval
+
+            access_approval_client = AccessApproval(provider)
+
+            assert access_approval_client.project_ids == []
+            assert access_approval_client.api_disabled_project_ids == {GCP_PROJECT_ID}
+            assert access_approval_client.api_state_unknown_project_ids == set()
+            assert access_approval_client.settings == {}
+
+    def test_access_approval_api_state_unknown_is_tracked(self):
+        """A failing serviceusage call must land in api_state_unknown_project_ids."""
+        serviceusage_client = MagicMock()
+        serviceusage_client.services().get().execute.side_effect = Exception(
+            "PERMISSION_DENIED: serviceusage.services.get"
+        )
+
+        provider = set_mocked_gcp_provider(project_ids=[GCP_PROJECT_ID])
+        provider.skip_api_check = False
+
+        with (
+            patch(
+                "prowler.providers.gcp.lib.service.service.discovery.build",
+                return_value=serviceusage_client,
+            ),
+            patch(
+                "prowler.providers.gcp.lib.service.service.GCPService.__generate_client__",
+                return_value=MagicMock(),
+            ),
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=provider,
+            ),
+        ):
+            from prowler.providers.gcp.services.iam.iam_service import AccessApproval
+
+            access_approval_client = AccessApproval(provider)
+
+            assert access_approval_client.project_ids == []
+            assert access_approval_client.api_disabled_project_ids == set()
+            assert access_approval_client.api_state_unknown_project_ids == {
+                GCP_PROJECT_ID
+            }
 
 
 class TestEssentialContacts:
diff --git a/tests/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open_test.py b/tests/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open_test.py
index 1602e9c821..a58966db9a 100644
--- a/tests/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open_test.py
+++ b/tests/providers/m365/services/defenderidentity/defenderidentity_health_issues_no_open/defenderidentity_health_issues_no_open_test.py
@@ -94,7 +94,7 @@ class Test_defenderidentity_health_issues_no_open:
             assert result[0].resource_id == "defenderIdentity"
 
     def test_both_apis_failed(self):
-        """Test when both sensors and health_issues APIs fail (None): expected FAIL with permission message."""
+        """Test when both sensors and health_issues APIs fail (None): expected MANUAL with permission message."""
         defenderidentity_client = mock.MagicMock()
         defenderidentity_client.audited_tenant = "audited_tenant"
         defenderidentity_client.audited_domain = DOMAIN
@@ -120,7 +120,7 @@ class Test_defenderidentity_health_issues_no_open:
             result = check.execute()
 
             assert len(result) == 1
-            assert result[0].status == "FAIL"
+            assert result[0].status == "MANUAL"
             assert "APIs are not accessible" in result[0].status_extended
             assert "SecurityIdentitiesSensors.Read.All" in result[0].status_extended
             assert "SecurityIdentitiesHealth.Read.All" in result[0].status_extended
@@ -155,8 +155,11 @@ class Test_defenderidentity_health_issues_no_open:
             result = check.execute()
 
             assert len(result) == 1
-            assert result[0].status == "FAIL"
-            assert "Cannot read health issues" in result[0].status_extended
+            assert result[0].status == "MANUAL"
+            assert (
+                "Cannot evaluate Defender for Identity health issues"
+                in result[0].status_extended
+            )
             assert "1 sensor(s) deployed" in result[0].status_extended
             assert "SecurityIdentitiesHealth.Read.All" in result[0].status_extended
             assert result[0].resource == {}
@@ -644,3 +647,33 @@ class Test_defenderidentity_health_issues_no_open:
             )
             assert result[0].resource_id == health_issue_id
             assert result[0].resource_name == health_issue_name
+
+    def test_sensors_api_failed_with_empty_health_issues(self):
+        """sensors=None (API failed) + health_issues=[]: PASS cannot be trusted -> MANUAL."""
+        defenderidentity_client = mock.MagicMock()
+        defenderidentity_client.audited_tenant = "audited_tenant"
+        defenderidentity_client.audited_domain = DOMAIN
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_m365_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open.defenderidentity_client",
+                new=defenderidentity_client,
+            ),
+        ):
+            from prowler.providers.m365.services.defenderidentity.defenderidentity_health_issues_no_open.defenderidentity_health_issues_no_open import (
+                defenderidentity_health_issues_no_open,
+            )
+
+            defenderidentity_client.sensors = None
+            defenderidentity_client.health_issues = []
+
+            result = defenderidentity_health_issues_no_open().execute()
+
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
+            assert "sensor deployment" in result[0].status_extended
+            assert "SecurityIdentitiesSensors.Read.All" in result[0].status_extended
diff --git a/tests/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals_test.py b/tests/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals_test.py
index 5163d153dd..74a84f2cc9 100644
--- a/tests/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals_test.py
+++ b/tests/providers/m365/services/defenderxdr/defenderxdr_critical_asset_management_pending_approvals/defenderxdr_critical_asset_management_pending_approvals_test.py
@@ -10,7 +10,7 @@ class Test_defenderxdr_critical_asset_management_pending_approvals:
     """Tests for the defenderxdr_critical_asset_management_pending_approvals check."""
 
     def test_api_failed_missing_permission(self):
-        """Test FAIL when API call fails (None): missing ThreatHunting.Read.All permission."""
+        """Test MANUAL when API call fails (None): missing ThreatHunting.Read.All permission."""
         defenderxdr_client = mock.MagicMock()
         defenderxdr_client.audited_tenant = "audited_tenant"
         defenderxdr_client.audited_domain = DOMAIN
@@ -34,9 +34,10 @@ class Test_defenderxdr_critical_asset_management_pending_approvals:
             result = check.execute()
 
             assert len(result) == 1
-            assert result[0].status == "FAIL"
+            assert result[0].status == "MANUAL"
             assert (
-                "Unable to query Critical Asset Management" in result[0].status_extended
+                "Cannot evaluate Critical Asset Management pending approvals"
+                in result[0].status_extended
             )
             assert "ThreatHunting.Read.All" in result[0].status_extended
             assert result[0].resource_id == "criticalAssetManagement"
diff --git a/tests/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials_test.py b/tests/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials_test.py
index 87db061f3c..c860eec342 100644
--- a/tests/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials_test.py
+++ b/tests/providers/m365/services/defenderxdr/defenderxdr_endpoint_privileged_user_exposed_credentials/defenderxdr_endpoint_privileged_user_exposed_credentials_test.py
@@ -7,7 +7,7 @@ class Test_defenderxdr_endpoint_privileged_user_exposed_credentials:
     """Tests for the defenderxdr_endpoint_privileged_user_exposed_credentials check."""
 
     def test_mde_status_api_failed(self):
-        """Test FAIL when MDE status API call fails (None): missing permission."""
+        """Test MANUAL when MDE status API call fails (None): missing permission."""
         defenderxdr_client = mock.MagicMock()
         defenderxdr_client.audited_tenant = "audited_tenant"
         defenderxdr_client.audited_domain = DOMAIN
@@ -32,8 +32,11 @@ class Test_defenderxdr_endpoint_privileged_user_exposed_credentials:
             result = check.execute()
 
             assert len(result) == 1
-            assert result[0].status == "FAIL"
-            assert "Unable to query Microsoft Defender XDR" in result[0].status_extended
+            assert result[0].status == "MANUAL"
+            assert (
+                "unable to query Microsoft Defender XDR Advanced Hunting"
+                in result[0].status_extended
+            )
             assert "ThreatHunting.Read.All" in result[0].status_extended
             assert result[0].resource_id == "mdeStatus"
 
@@ -103,7 +106,7 @@ class Test_defenderxdr_endpoint_privileged_user_exposed_credentials:
             assert result[0].resource_id == "mdeDevices"
 
     def test_exposed_credentials_query_failed(self):
-        """Test FAIL when exposed credentials query fails (None)."""
+        """Test MANUAL when exposed credentials query fails (None)."""
         defenderxdr_client = mock.MagicMock()
         defenderxdr_client.audited_tenant = "audited_tenant"
         defenderxdr_client.audited_domain = DOMAIN
@@ -128,9 +131,9 @@ class Test_defenderxdr_endpoint_privileged_user_exposed_credentials:
             result = check.execute()
 
             assert len(result) == 1
-            assert result[0].status == "FAIL"
+            assert result[0].status == "MANUAL"
             assert (
-                "Unable to query Security Exposure Management"
+                "unable to query Security Exposure Management"
                 in result[0].status_extended
             )
             assert result[0].resource_id == "exposedCredentials"
diff --git a/tests/providers/m365/services/defenderxdr/defenderxdr_service_test.py b/tests/providers/m365/services/defenderxdr/defenderxdr_service_test.py
new file mode 100644
index 0000000000..78e468f2b0
--- /dev/null
+++ b/tests/providers/m365/services/defenderxdr/defenderxdr_service_test.py
@@ -0,0 +1,61 @@
+import asyncio
+from unittest import mock
+
+from prowler.providers.m365.services.defenderxdr.defenderxdr_service import DefenderXDR
+
+
+def _service_with_response(response=None, side_effect=None):
+    """Build a DefenderXDR instance without running __init__, with a mocked client."""
+    service = DefenderXDR.__new__(DefenderXDR)
+    post = mock.AsyncMock(return_value=response, side_effect=side_effect)
+    service.client = mock.MagicMock()
+    service.client.security.microsoft_graph_security_run_hunting_query.post = post
+    return service
+
+
+class TestRunHuntingQuery:
+    def test_null_response_is_unavailable_not_empty(self):
+        """A null response object must not be treated as a successful empty query."""
+        service = _service_with_response(response=None)
+        results, table_not_found = asyncio.run(service._run_hunting_query("query"))
+        assert results is None
+        assert table_not_found is False
+
+    def test_empty_results_is_confirmed_empty(self):
+        response = mock.MagicMock()
+        response.results = []
+        service = _service_with_response(response=response)
+        results, table_not_found = asyncio.run(service._run_hunting_query("query"))
+        assert results == []
+        assert table_not_found is False
+
+    def test_table_not_found_is_flagged(self):
+        service = _service_with_response(
+            side_effect=Exception(
+                "'where' operator: Failed to resolve table or column expression named 'DeviceInfo'"
+            )
+        )
+        results, table_not_found = asyncio.run(service._run_hunting_query("query"))
+        assert results == []
+        assert table_not_found is True
+
+    def test_generic_error_is_unavailable(self):
+        service = _service_with_response(side_effect=Exception("403 Forbidden"))
+        results, table_not_found = asyncio.run(service._run_hunting_query("query"))
+        assert results is None
+        assert table_not_found is False
+
+
+class TestExposedCredentials:
+    def test_table_not_found_propagates_as_unavailable(self):
+        """Security Exposure Management tables missing -> None (MANUAL), not [] (PASS)."""
+        service = _service_with_response(
+            side_effect=Exception("Failed to resolve table ExposureGraphEdges")
+        )
+        result = asyncio.run(service._get_exposed_credentials_privileged_users())
+        assert result is None
+
+    def test_null_response_propagates_as_unavailable(self):
+        service = _service_with_response(response=None)
+        result = asyncio.run(service._get_pending_cam_approvals())
+        assert result is None
diff --git a/tests/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions_test.py b/tests/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions_test.py
index 49a294194a..5598e37580 100644
--- a/tests/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions_test.py
+++ b/tests/providers/m365/services/entra/entra_app_registration_no_unused_privileged_permissions/entra_app_registration_no_unused_privileged_permissions_test.py
@@ -45,7 +45,7 @@ class Test_entra_app_registration_no_unused_privileged_permissions:
             assert result[0].resource_id == "oauthApps"
 
     def test_no_oauth_apps_none(self):
-        """OAuth apps is None (App Governance not enabled): expected FAIL."""
+        """OAuth apps is None (App Governance not enabled): expected MANUAL."""
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
@@ -70,10 +70,10 @@ class Test_entra_app_registration_no_unused_privileged_permissions:
             result = check.execute()
 
             assert len(result) == 1
-            assert result[0].status == "FAIL"
+            assert result[0].status == "MANUAL"
             assert (
                 result[0].status_extended
-                == "OAuth App Governance data is unavailable. Enable App Governance in Microsoft Defender for Cloud Apps and grant ThreatHunting.Read.All to evaluate unused privileged permissions."
+                == "Cannot evaluate unused privileged permissions: OAuth App Governance data is unavailable. Enable App Governance in Microsoft Defender for Cloud Apps and grant the ThreatHunting.Read.All permission to the scanning application."
             )
             assert result[0].resource == {}
             assert result[0].resource_name == "OAuth Applications"
diff --git a/tests/providers/m365/services/entra/entra_break_glass_account_fido2_security_key_registered/entra_break_glass_account_fido2_security_key_registered_test.py b/tests/providers/m365/services/entra/entra_break_glass_account_fido2_security_key_registered/entra_break_glass_account_fido2_security_key_registered_test.py
index 1147b64e8e..8db15ca447 100644
--- a/tests/providers/m365/services/entra/entra_break_glass_account_fido2_security_key_registered/entra_break_glass_account_fido2_security_key_registered_test.py
+++ b/tests/providers/m365/services/entra/entra_break_glass_account_fido2_security_key_registered/entra_break_glass_account_fido2_security_key_registered_test.py
@@ -67,6 +67,7 @@ class Test_entra_break_glass_account_fido2_security_key_registered:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -105,6 +106,7 @@ class Test_entra_break_glass_account_fido2_security_key_registered:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -144,6 +146,7 @@ class Test_entra_break_glass_account_fido2_security_key_registered:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -181,6 +184,7 @@ class Test_entra_break_glass_account_fido2_security_key_registered:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -232,6 +236,7 @@ class Test_entra_break_glass_account_fido2_security_key_registered:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -280,6 +285,7 @@ class Test_entra_break_glass_account_fido2_security_key_registered:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -327,6 +333,7 @@ class Test_entra_break_glass_account_fido2_security_key_registered:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -375,6 +382,7 @@ class Test_entra_break_glass_account_fido2_security_key_registered:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -430,6 +438,7 @@ class Test_entra_break_glass_account_fido2_security_key_registered:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -466,6 +475,7 @@ class Test_entra_break_glass_account_fido2_security_key_registered:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -512,10 +522,11 @@ class Test_entra_break_glass_account_fido2_security_key_registered:
             assert result[0].resource_name == "BreakGlass1"
 
     def test_user_registration_details_permission_error(self):
-        """Test FAIL when there's a permission error reading user registration details."""
+        """Test MANUAL when there's a permission error reading user registration details."""
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = "Insufficient privileges to read user registration details. Required permission: AuditLog.Read.All"
 
         with (
@@ -551,28 +562,27 @@ class Test_entra_break_glass_account_fido2_security_key_registered:
             result = check.execute()
 
             assert len(result) == 1
-            assert result[0].status == "FAIL"
+            assert result[0].status == "MANUAL"
             assert (
-                "Cannot verify FIDO2 security key registration for break glass account BreakGlass1"
+                "Cannot verify FIDO2 security key registration for break glass accounts"
                 in result[0].status_extended
             )
             assert "AuditLog.Read.All" in result[0].status_extended
-            assert result[0].resource_name == "BreakGlass1"
-            assert result[0].resource_id == bg_user_id
+            assert result[0].resource_name == "Break Glass Accounts"
+            assert result[0].resource_id == "breakGlassAccounts"
 
-    def test_user_registration_details_permission_error_with_missing_user(self):
-        """Per-user emission and missing-user short-circuit on the error path.
+    def test_user_registration_details_permission_error_multiple_users(self):
+        """The registration-details error is tenant-wide: one MANUAL, not one per user.
 
-        Two break-glass user IDs are excluded from all CAPs, but only one is
-        present in ``entra_client.users``.  With ``user_registration_details_error``
-        set, the present user must produce one preventive FAIL anchored to the
-        real user; the missing user must be skipped by the existing
-        ``if not user: continue`` guard rather than crash or yield a synthetic
-        finding.
+        Two break-glass users are excluded from all CAPs and both are present in
+        ``entra_client.users``. With ``user_registration_details_error`` set the
+        check must emit a single tenant-level MANUAL finding instead of one
+        per break-glass account.
         """
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = "Insufficient privileges to read user registration details. Required permission: AuditLog.Read.All"
 
         with (
@@ -590,37 +600,40 @@ class Test_entra_break_glass_account_fido2_security_key_registered:
             )
 
             policy_id = str(uuid4())
-            present_user_id = str(uuid4())
-            missing_user_id = str(uuid4())
+            first_user_id = str(uuid4())
+            second_user_id = str(uuid4())
 
             entra_client.conditional_access_policies = {
                 policy_id: _make_policy(
                     policy_id,
-                    excluded_users=[present_user_id, missing_user_id],
+                    excluded_users=[first_user_id, second_user_id],
                 ),
             }
             entra_client.users = {
-                present_user_id: User(
-                    id=present_user_id,
+                first_user_id: User(
+                    id=first_user_id,
                     name="BreakGlass1",
                     on_premises_sync_enabled=False,
                     authentication_methods=[],
                 ),
-                # missing_user_id intentionally absent — exercises the
-                # `if not user: continue` short-circuit inside the loop.
+                second_user_id: User(
+                    id=second_user_id,
+                    name="BreakGlass2",
+                    on_premises_sync_enabled=False,
+                    authentication_methods=[],
+                ),
             }
 
             check = entra_break_glass_account_fido2_security_key_registered()
             result = check.execute()
 
-            # One finding for the present user; the missing one is skipped.
+            # One tenant-level finding, regardless of how many break glass users exist.
             assert len(result) == 1
-            assert result[0].status == "FAIL"
+            assert result[0].status == "MANUAL"
             assert (
-                "Cannot verify FIDO2 security key registration for break glass account BreakGlass1"
+                "Cannot verify FIDO2 security key registration for break glass accounts"
                 in result[0].status_extended
             )
             assert "AuditLog.Read.All" in result[0].status_extended
-            assert result[0].resource == entra_client.users[present_user_id]
-            assert result[0].resource_name == "BreakGlass1"
-            assert result[0].resource_id == present_user_id
+            assert result[0].resource_name == "Break Glass Accounts"
+            assert result[0].resource_id == "breakGlassAccounts"
diff --git a/tests/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled_test.py b/tests/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled_test.py
index 620d54b896..879ec2c387 100644
--- a/tests/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled_test.py
+++ b/tests/providers/m365/services/entra/entra_seamless_sso_disabled/entra_seamless_sso_disabled_test.py
@@ -169,7 +169,7 @@ class Test_entra_seamless_sso_disabled:
             assert result[0].resource_name == "Cloud Only Org"
 
     def test_insufficient_permissions_error(self):
-        """Test FAIL when there's a permission error reading directory sync settings."""
+        """Test MANUAL when there's a permission error reading directory sync settings."""
         entra_client = mock.MagicMock()
 
         with (
@@ -199,7 +199,7 @@ class Test_entra_seamless_sso_disabled:
             result = check.execute()
 
             assert len(result) == 1
-            assert result[0].status == "FAIL"
+            assert result[0].status == "MANUAL"
             assert "Cannot verify Seamless SSO status" in result[0].status_extended
             assert "Insufficient privileges" in result[0].status_extended
             assert (
@@ -272,3 +272,39 @@ class Test_entra_seamless_sso_disabled:
             result = check.execute()
 
             assert len(result) == 0
+
+    def test_hybrid_org_without_sync_settings_is_manual(self):
+        """Hybrid org, no error, but no directory sync settings returned -> MANUAL."""
+        entra_client = mock.MagicMock()
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_m365_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.m365.services.entra.entra_seamless_sso_disabled.entra_seamless_sso_disabled.entra_client",
+                new=entra_client,
+            ),
+        ):
+            from prowler.providers.m365.services.entra.entra_seamless_sso_disabled.entra_seamless_sso_disabled import (
+                entra_seamless_sso_disabled,
+            )
+
+            entra_client.directory_sync_settings = []
+            entra_client.directory_sync_error = None
+            entra_client.organizations = [
+                Organization(
+                    id="org1", name="Hybrid Org", on_premises_sync_enabled=True
+                )
+            ]
+
+            result = entra_seamless_sso_disabled().execute()
+
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
+            assert (
+                "no directory synchronization settings were returned"
+                in result[0].status_extended
+            )
+            assert result[0].resource_id == "org1"
diff --git a/tests/providers/m365/services/entra/entra_users_mfa_capable/entra_users_mfa_capable_test.py b/tests/providers/m365/services/entra/entra_users_mfa_capable/entra_users_mfa_capable_test.py
index 86e8e38f22..ec1464968a 100644
--- a/tests/providers/m365/services/entra/entra_users_mfa_capable/entra_users_mfa_capable_test.py
+++ b/tests/providers/m365/services/entra/entra_users_mfa_capable/entra_users_mfa_capable_test.py
@@ -12,6 +12,7 @@ class Test_entra_users_mfa_capable:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -55,6 +56,7 @@ class Test_entra_users_mfa_capable:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -98,6 +100,7 @@ class Test_entra_users_mfa_capable:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -157,6 +160,7 @@ class Test_entra_users_mfa_capable:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -196,6 +200,7 @@ class Test_entra_users_mfa_capable:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -254,6 +259,7 @@ class Test_entra_users_mfa_capable:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -293,6 +299,7 @@ class Test_entra_users_mfa_capable:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -332,6 +339,7 @@ class Test_entra_users_mfa_capable:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -372,6 +380,7 @@ class Test_entra_users_mfa_capable:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -414,6 +423,7 @@ class Test_entra_users_mfa_capable:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -459,6 +469,7 @@ class Test_entra_users_mfa_capable:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -519,6 +530,7 @@ class Test_entra_users_mfa_capable:
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = None
 
         with (
@@ -559,10 +571,11 @@ class Test_entra_users_mfa_capable:
             assert result[0].resource_id == user_id
 
     def test_user_registration_details_permission_error(self):
-        """Test FAIL when there's a permission error reading user registration details."""
+        """Test a single tenant-level MANUAL when user registration details cannot be read."""
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = "Insufficient privileges to read user registration details. Required permission: AuditLog.Read.All"
 
         with (
@@ -595,26 +608,27 @@ class Test_entra_users_mfa_capable:
             result = check.execute()
 
             assert len(result) == 1
-            assert result[0].status == "FAIL"
+            assert result[0].status == "MANUAL"
             assert (
-                "Cannot verify MFA capability for user Test User"
+                "Cannot verify MFA capability for member users"
                 in result[0].status_extended
             )
             assert "AuditLog.Read.All" in result[0].status_extended
-            assert result[0].resource == entra_client.users[user_id]
-            assert result[0].resource_name == "Test User"
-            assert result[0].resource_id == user_id
+            assert result[0].resource_name == "Entra Users"
+            assert result[0].resource_id == "users"
 
-    def test_user_registration_details_permission_error_skips_guest_and_disabled(self):
-        """CIS-scope skip (Guest, disabled) still applies on the permission-error path.
+    def test_user_registration_details_permission_error_with_mixed_users(self):
+        """The permission-error path emits a single tenant-level MANUAL finding.
 
-        With ``user_registration_details_error`` set, only enabled member users
-        should receive a per-user "Cannot verify MFA capability" FAIL — guests
-        and disabled members are filtered out before the error branch runs.
+        With ``user_registration_details_error`` set, no per-user findings are
+        produced (a missing permission is not a per-user security issue): a
+        single MANUAL finding is emitted regardless of the guest/member/disabled
+        mix of users in the tenant.
         """
         entra_client = mock.MagicMock
         entra_client.audited_tenant = "audited_tenant"
         entra_client.audited_domain = DOMAIN
+        entra_client.users_error = None
         entra_client.user_registration_details_error = "Insufficient privileges to read user registration details. Required permission: AuditLog.Read.All"
 
         with (
@@ -667,15 +681,44 @@ class Test_entra_users_mfa_capable:
             check = entra_users_mfa_capable()
             result = check.execute()
 
-            # Only the enabled member should be reported — Guest and
-            # disabled member are skipped before the error branch.
+            # A single tenant-level MANUAL finding is emitted regardless of
+            # how many users exist; no per-user findings are produced.
             assert len(result) == 1
-            assert result[0].status == "FAIL"
+            assert result[0].status == "MANUAL"
             assert (
-                "Cannot verify MFA capability for user Enabled Member"
+                "Cannot verify MFA capability for member users"
                 in result[0].status_extended
             )
             assert "AuditLog.Read.All" in result[0].status_extended
-            assert result[0].resource == entra_client.users[member_id]
-            assert result[0].resource_name == "Enabled Member"
-            assert result[0].resource_id == member_id
+            assert result[0].resource_name == "Entra Users"
+            assert result[0].resource_id == "users"
+
+    def test_users_error_reports_single_manual(self):
+        """Users could not be retrieved from Graph -> one tenant-level MANUAL."""
+        entra_client = mock.MagicMock
+        entra_client.audited_tenant = "audited_tenant"
+        entra_client.audited_domain = DOMAIN
+        entra_client.user_registration_details_error = None
+        entra_client.users_error = "Insufficient privileges to read users and directory roles. Required permissions: User.Read.All, Directory.Read.All or RoleManagement.Read.Directory"
+        entra_client.users = {}
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_m365_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.m365.services.entra.entra_users_mfa_capable.entra_users_mfa_capable.entra_client",
+                new=entra_client,
+            ),
+        ):
+            from prowler.providers.m365.services.entra.entra_users_mfa_capable.entra_users_mfa_capable import (
+                entra_users_mfa_capable,
+            )
+
+            result = entra_users_mfa_capable().execute()
+
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
+            assert "Directory.Read.All" in result[0].status_extended
+            assert result[0].resource_name == "Entra Users"
diff --git a/tests/providers/m365/services/entra/microsoft365_entra_service_test.py b/tests/providers/m365/services/entra/microsoft365_entra_service_test.py
index e38ac5c0e6..1c98973e0a 100644
--- a/tests/providers/m365/services/entra/microsoft365_entra_service_test.py
+++ b/tests/providers/m365/services/entra/microsoft365_entra_service_test.py
@@ -1951,3 +1951,42 @@ class Test_Entra_Service:
         assert [policy.id for policy in policies] == ["policy-1", "policy-2"]
         with_url_mock.assert_called_once_with("next-link")
         next_page_builder.get.assert_awaited_once()
+
+
+class TestGetOAuthApps:
+    @staticmethod
+    def _entra_with_hunting_response(response):
+        service = entra_service.Entra.__new__(entra_service.Entra)
+        post = AsyncMock(return_value=response)
+        service.client = MagicMock()
+        service.client.security.microsoft_graph_security_run_hunting_query.post = post
+        return service
+
+    def test_null_response_returns_none_not_empty(self):
+        """A null hunting response must propagate as None (MANUAL), not {} (PASS)."""
+        service = self._entra_with_hunting_response(None)
+        assert asyncio.run(service._get_oauth_apps()) is None
+
+    def test_empty_results_is_confirmed_empty(self):
+        response = MagicMock()
+        response.results = []
+        service = self._entra_with_hunting_response(response)
+        assert asyncio.run(service._get_oauth_apps()) == {}
+
+
+class TestGetUsersError:
+    def test_users_error_set_on_graph_failure(self):
+        """A failing /users request must set users_error and return no users."""
+        service = entra_service.Entra.__new__(entra_service.Entra)
+        service.users_error = None
+        # SimpleNamespace: check tests assign attributes on the MagicMock
+        # class, which would shadow instance child mocks here.
+        service.client = SimpleNamespace(
+            users=SimpleNamespace(get=AsyncMock(side_effect=Exception("boom")))
+        )
+
+        users = asyncio.run(service._get_users())
+
+        assert users == {}
+        assert service.users_error is not None
+        assert "Unable to retrieve users from Microsoft Graph" in service.users_error
diff --git a/tests/providers/m365/services/exchange/exchange_shared_mailbox_sign_in_disabled/exchange_shared_mailbox_sign_in_disabled_test.py b/tests/providers/m365/services/exchange/exchange_shared_mailbox_sign_in_disabled/exchange_shared_mailbox_sign_in_disabled_test.py
index 7cd9191049..18e921ec04 100644
--- a/tests/providers/m365/services/exchange/exchange_shared_mailbox_sign_in_disabled/exchange_shared_mailbox_sign_in_disabled_test.py
+++ b/tests/providers/m365/services/exchange/exchange_shared_mailbox_sign_in_disabled/exchange_shared_mailbox_sign_in_disabled_test.py
@@ -11,6 +11,8 @@ class Test_exchange_shared_mailbox_sign_in_disabled:
         exchange_client.shared_mailboxes = []
 
         entra_client = mock.MagicMock()
+
+        entra_client.users_error = None
         entra_client.users = {}
 
         with (
@@ -80,6 +82,7 @@ class Test_exchange_shared_mailbox_sign_in_disabled:
                 account_enabled=False,
             )
             entra_client = mock.MagicMock()
+            entra_client.users_error = None
             entra_client.users = {
                 "12345678-1234-1234-1234-123456789012": entra_user,
             }
@@ -143,6 +146,7 @@ class Test_exchange_shared_mailbox_sign_in_disabled:
                 account_enabled=True,
             )
             entra_client = mock.MagicMock()
+            entra_client.users_error = None
             entra_client.users = {
                 "87654321-4321-4321-4321-210987654321": entra_user,
             }
@@ -199,6 +203,8 @@ class Test_exchange_shared_mailbox_sign_in_disabled:
             exchange_client.shared_mailboxes = [shared_mailbox]
 
             entra_client = mock.MagicMock()
+
+            entra_client.users_error = None
             entra_client.users = {}
 
             with mock.patch(
@@ -209,10 +215,10 @@ class Test_exchange_shared_mailbox_sign_in_disabled:
                 result = check.execute()
 
                 assert len(result) == 1
-                assert result[0].status == "FAIL"
+                assert result[0].status == "MANUAL"
                 assert (
                     result[0].status_extended
-                    == "Shared mailbox orphan@contoso.com could not be found in Entra ID for verification."
+                    == "Cannot verify sign-in status for shared mailbox orphan@contoso.com: the user could not be resolved in Entra ID."
                 )
                 assert result[0].resource_name == "Orphan Mailbox"
                 assert result[0].resource_id == "00000000-0000-0000-0000-000000000000"
@@ -284,6 +290,8 @@ class Test_exchange_shared_mailbox_sign_in_disabled:
             )
 
             entra_client = mock.MagicMock()
+
+            entra_client.users_error = None
             entra_client.users = {
                 "11111111-1111-1111-1111-111111111111": user_disabled,
                 "22222222-2222-2222-2222-222222222222": user_enabled,
@@ -310,8 +318,62 @@ class Test_exchange_shared_mailbox_sign_in_disabled:
                     == "Shared mailbox insecure@contoso.com has sign-in enabled."
                 )
 
-                assert result[2].status == "FAIL"
+                assert result[2].status == "MANUAL"
                 assert (
                     result[2].status_extended
-                    == "Shared mailbox unknown@contoso.com could not be found in Entra ID for verification."
+                    == "Cannot verify sign-in status for shared mailbox unknown@contoso.com: the user could not be resolved in Entra ID."
                 )
+
+    def test_users_error_reports_single_tenant_manual(self):
+        """Entra users collection failed -> one tenant-level MANUAL, not one per mailbox."""
+        from prowler.providers.m365.services.exchange.exchange_service import (
+            SharedMailbox,
+        )
+
+        exchange_client = mock.MagicMock()
+        exchange_client.audited_tenant = "audited_tenant"
+        exchange_client.audited_domain = DOMAIN
+        exchange_client.shared_mailboxes = [
+            SharedMailbox(
+                name=f"Mailbox {i}",
+                identity=f"mailbox{i}",
+                user_principal_name=f"mailbox{i}@contoso.com",
+                external_directory_object_id=f"00000000-0000-0000-0000-00000000000{i}",
+            )
+            for i in range(2)
+        ]
+
+        entra_client = mock.MagicMock()
+        entra_client.users_error = "Insufficient privileges to read users and directory roles. Required permissions: User.Read.All, Directory.Read.All or RoleManagement.Read.Directory"
+        entra_client.users = {}
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_m365_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.m365.lib.powershell.m365_powershell.M365PowerShell.connect_exchange_online"
+            ),
+            mock.patch(
+                "prowler.providers.m365.services.exchange.exchange_shared_mailbox_sign_in_disabled.exchange_shared_mailbox_sign_in_disabled.exchange_client",
+                new=exchange_client,
+            ),
+            mock.patch(
+                "prowler.providers.m365.services.exchange.exchange_shared_mailbox_sign_in_disabled.exchange_shared_mailbox_sign_in_disabled.entra_client",
+                new=entra_client,
+            ),
+        ):
+            from prowler.providers.m365.services.exchange.exchange_shared_mailbox_sign_in_disabled.exchange_shared_mailbox_sign_in_disabled import (
+                exchange_shared_mailbox_sign_in_disabled,
+            )
+
+            result = exchange_shared_mailbox_sign_in_disabled().execute()
+
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
+            assert (
+                "Cannot verify sign-in status for shared mailboxes"
+                in result[0].status_extended
+            )
+            assert result[0].resource_name == "Shared Mailboxes"

From 7c84822fa3a900d7d64d384f76994709dcd29c44 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Tue, 1 Sep 2026 17:18:47 +0200
Subject: [PATCH 22/77] fix(image): skip non-image OCI artifacts in registry
 scan (#12695)

---
 ...-registry-non-image-oci-artifacts.fixed.md |   1 +
 prowler/providers/image/image_provider.py     | 101 +++++++--
 prowler/providers/image/lib/registry/base.py  |   9 +
 .../image/lib/registry/oci_adapter.py         | 145 ++++++++++--
 tests/providers/image/image_provider_test.py  |  40 ++++
 .../image/lib/registry/test_oci_adapter.py    | 214 +++++++++++++++++-
 .../lib/registry/test_provider_registry.py    |  54 +++++
 7 files changed, 522 insertions(+), 42 deletions(-)
 create mode 100644 prowler/changelog.d/image-registry-non-image-oci-artifacts.fixed.md

diff --git a/prowler/changelog.d/image-registry-non-image-oci-artifacts.fixed.md b/prowler/changelog.d/image-registry-non-image-oci-artifacts.fixed.md
new file mode 100644
index 0000000000..518c7d1926
--- /dev/null
+++ b/prowler/changelog.d/image-registry-non-image-oci-artifacts.fixed.md
@@ -0,0 +1 @@
+Registry scans in the Image provider now skip non-image OCI artifacts (Helm charts, cosign signatures, SBOM attestations) and no longer abort the whole scan when Trivy fails on a single discovered image; registry enumeration also runs in parallel instead of one request at a time
diff --git a/prowler/providers/image/image_provider.py b/prowler/providers/image/image_provider.py
index 8eb4f2b198..97a014d9f1 100644
--- a/prowler/providers/image/image_provider.py
+++ b/prowler/providers/image/image_provider.py
@@ -6,6 +6,7 @@ import re
 import subprocess
 import sys
 import tempfile
+from concurrent.futures import ThreadPoolExecutor
 from typing import Generator
 
 from alive_progress import alive_bar
@@ -49,6 +50,13 @@ from prowler.providers.image.lib.arguments.arguments import (
 from prowler.providers.image.lib.registry.dockerhub_adapter import DockerHubAdapter
 from prowler.providers.image.lib.registry.factory import create_registry_adapter
 
+# Cosign companion tags (signatures, attestations, SBOMs) — skippable by name
+# without fetching the manifest.
+COSIGN_TAG_PATTERN = re.compile(r"^sha256-[0-9a-f]{64}\.(sig|att|sbom)$")
+
+# Concurrency for registry enumeration (tag listing + manifest inspection).
+_ENUMERATION_WORKERS = 10
+
 
 class ImageProvider(Provider):
     """
@@ -164,6 +172,10 @@ class ImageProvider(Provider):
         if image_list_file:
             self._load_images_from_file(image_list_file)
 
+        # Images discovered via registry enumeration get per-image error
+        # degradation; explicitly requested images keep failing hard.
+        self._registry_discovered: set[str] = set()
+
         # Registry scan mode: enumerate images from registry
         if self.registry:
             self._enumerate_registry()
@@ -550,8 +562,15 @@ class ImageProvider(Provider):
                     for batch in self._scan_single_image(image):
                         image_findings.extend(batch)
                     yield (image, image_findings)
-                except (ImageScanError, ImageTrivyBinaryNotFoundError):
+                except ImageTrivyBinaryNotFoundError:
                     raise
+                except ImageScanError as error:
+                    if image not in self._registry_discovered:
+                        raise
+                    logger.warning(
+                        f"Skipping registry-discovered image {image}: {error}"
+                    )
+                    yield (image, [])
                 except Exception as error:
                     logger.error(f"Error scanning image {image}: {error}")
                     yield (image, [])
@@ -568,8 +587,13 @@ class ImageProvider(Provider):
         for image in self.images:
             try:
                 yield from self._scan_single_image(image)
-            except (ImageScanError, ImageTrivyBinaryNotFoundError):
+            except ImageTrivyBinaryNotFoundError:
                 raise
+            except ImageScanError as error:
+                if image not in self._registry_discovered:
+                    raise
+                logger.warning(f"Skipping registry-discovered image {image}: {error}")
+                continue
             except Exception as error:
                 logger.error(f"Error scanning image {image}: {error}")
                 continue
@@ -811,6 +835,16 @@ class ImageProvider(Provider):
             return f"Rate limited — wait or authenticate: {error_msg}"
         if any(kw in lower for kw in ("timeout", "connection refused", "no such host")):
             return f"Network issue — check connectivity: {error_msg}"
+        if any(
+            kw in lower
+            for kw in (
+                "unsupported mediatype",
+                "unsupported media type",
+                "unsupported artifact",
+                "invalid image",
+            )
+        ):
+            return f"Not a container image — trivy image cannot scan this OCI artifact: {error_msg}"
 
         return error_msg
 
@@ -846,29 +880,49 @@ class ImageProvider(Provider):
         # Determine if this is a Docker Hub adapter (for image reference format)
         is_dockerhub = isinstance(adapter, DockerHubAdapter)
 
+        skipped_artifacts = 0
+        with ThreadPoolExecutor(
+            max_workers=min(_ENUMERATION_WORKERS, len(repositories))
+        ) as pool:
+            all_tags = list(pool.map(adapter.list_tags, repositories))
+
+            candidates: list[tuple[str, str]] = []
+            for repo, tags in zip(repositories, all_tags):
+                if self._tag_filter_re:
+                    tags = [t for t in tags if self._tag_filter_re.search(t)]
+                for tag in tags:
+                    # Cosign companions are skippable by name — no manifest fetch
+                    if COSIGN_TAG_PATTERN.match(tag):
+                        skipped_artifacts += 1
+                        continue
+                    candidates.append((repo, tag))
+
+            # Drop non-image OCI artifacts (Helm charts, signatures, SBOMs...)
+            # that trivy image cannot scan; one manifest fetch per tag, in parallel.
+            verdicts = list(
+                pool.map(lambda rt: adapter.is_container_image(*rt), candidates)
+            )
+
         discovered_images = []
         repos_tags: dict[str, list[str]] = {}
-        for repo in repositories:
-            tags = adapter.list_tags(repo)
+        for (repo, tag), is_image in zip(candidates, verdicts):
+            if not is_image:
+                skipped_artifacts += 1
+                continue
+            repos_tags.setdefault(repo, []).append(tag)
+            if is_dockerhub:
+                # Docker Hub images don't need a host prefix
+                image_ref = f"{repo}:{tag}"
+            else:
+                # OCI registries need the full host/repo:tag reference
+                registry_host = ImageProvider._strip_scheme(self.registry.rstrip("/"))
+                image_ref = f"{registry_host}/{repo}:{tag}"
+            discovered_images.append(image_ref)
 
-            # Apply tag filter
-            if self._tag_filter_re:
-                tags = [t for t in tags if self._tag_filter_re.search(t)]
-
-            if tags:
-                repos_tags[repo] = tags
-
-            for tag in tags:
-                if is_dockerhub:
-                    # Docker Hub images don't need a host prefix
-                    image_ref = f"{repo}:{tag}"
-                else:
-                    # OCI registries need the full host/repo:tag reference
-                    registry_host = ImageProvider._strip_scheme(
-                        self.registry.rstrip("/")
-                    )
-                    image_ref = f"{registry_host}/{repo}:{tag}"
-                discovered_images.append(image_ref)
+        if skipped_artifacts:
+            logger.info(
+                f"Skipped {skipped_artifacts} non-image OCI artifacts (Helm charts, signatures, SBOMs...) from registry {self.registry}"
+            )
 
         # Registry list mode: print listing and return early
         if self.registry_list_images:
@@ -889,6 +943,9 @@ class ImageProvider(Provider):
             if img not in existing:
                 self.images.append(img)
                 existing.add(img)
+                # Only enumeration-added images get error degradation; an image
+                # the user also requested explicitly keeps failing hard.
+                self._registry_discovered.add(img)
 
         logger.info(
             f"Discovered {len(discovered_images)} images from registry {self.registry} "
diff --git a/prowler/providers/image/lib/registry/base.py b/prowler/providers/image/lib/registry/base.py
index b8c08955b6..7341128cbb 100644
--- a/prowler/providers/image/lib/registry/base.py
+++ b/prowler/providers/image/lib/registry/base.py
@@ -132,6 +132,15 @@ class RegistryAdapter(ABC):
         """Enumerate all tags for a repository."""
         ...
 
+    def is_container_image(self, repository: str, tag: str) -> bool:
+        """Whether repository:tag points to a scannable container image.
+
+        Registries that store arbitrary OCI artifacts (Helm charts, cosign
+        signatures, SBOMs...) override this; by default everything is assumed
+        to be an image.
+        """
+        return True
+
     def _origin_url(self) -> str:
         """The URL whose host the validator compares against when enforce_origin=True.
 
diff --git a/prowler/providers/image/lib/registry/oci_adapter.py b/prowler/providers/image/lib/registry/oci_adapter.py
index c5c35aef06..3d2aaf6e58 100644
--- a/prowler/providers/image/lib/registry/oci_adapter.py
+++ b/prowler/providers/image/lib/registry/oci_adapter.py
@@ -4,6 +4,7 @@ from __future__ import annotations
 
 import base64
 import re
+import threading
 from typing import TYPE_CHECKING
 from urllib.parse import urlparse
 
@@ -19,6 +20,27 @@ if TYPE_CHECKING:
     import requests
 
 
+OCI_MANIFEST_MEDIA_TYPE = "application/vnd.oci.image.manifest.v1+json"
+
+MANIFEST_ACCEPT_TYPES = (
+    "application/vnd.docker.distribution.manifest.v2+json",
+    "application/vnd.docker.distribution.manifest.list.v2+json",
+    OCI_MANIFEST_MEDIA_TYPE,
+    "application/vnd.oci.image.index.v1+json",
+)
+
+# Multi-arch indexes: their children are resolved by trivy itself.
+INDEX_MEDIA_TYPES = (
+    "application/vnd.docker.distribution.manifest.list.v2+json",
+    "application/vnd.oci.image.index.v1+json",
+)
+
+IMAGE_CONFIG_MEDIA_TYPES = (
+    "application/vnd.oci.image.config.v1+json",
+    "application/vnd.docker.container.image.v1+json",
+)
+
+
 class OciRegistryAdapter(RegistryAdapter):
     """Adapter for registries implementing OCI Distribution Spec."""
 
@@ -34,6 +56,19 @@ class OciRegistryAdapter(RegistryAdapter):
         self._base_url = self._normalise_url(registry_url)
         self._bearer_token: str | None = None
         self._basic_auth_verified = False
+        self._anonymous_verified = False
+        # Enumeration inspects manifests from a thread pool; serialise token
+        # exchanges so N concurrent 401s don't trigger N auth round-trips.
+        self._auth_lock = threading.Lock()
+
+    def __getstate__(self) -> dict:
+        state = super().__getstate__()
+        del state["_auth_lock"]
+        return state
+
+    def __setstate__(self, state: dict) -> None:
+        self.__dict__.update(state)
+        self._auth_lock = threading.Lock()
 
     @staticmethod
     def _normalise_url(url: str) -> str:
@@ -94,17 +129,78 @@ class OciRegistryAdapter(RegistryAdapter):
             params = {}
         return tags
 
+    def is_container_image(self, repository: str, tag: str) -> bool:
+        """Inspect the manifest to tell container images apart from other OCI artifacts.
+
+        Uncertainty (network error, unparseable manifest) resolves to True so a
+        transient failure never silently drops a real image — trivy gives the
+        final verdict.
+        """
+        url = f"{self._base_url}/v2/{repository}/manifests/{tag}"
+        try:
+            self._ensure_auth(repository=repository)
+            resp = self._authed_request(
+                "GET", url, headers={"Accept": ", ".join(MANIFEST_ACCEPT_TYPES)}
+            )
+        except Exception as error:
+            logger.warning(
+                f"Could not fetch manifest for {repository}:{tag}, assuming image: {error}"
+            )
+            return True
+        if resp.status_code != 200:
+            logger.warning(
+                f"Manifest request for {repository}:{tag} returned HTTP {resp.status_code}, assuming image"
+            )
+            return True
+
+        # RFC 9110: media type tokens are case-insensitive
+        content_type = (
+            resp.headers.get("Content-Type", "").split(";")[0].strip().lower()
+        )
+        if content_type == "application/vnd.docker.distribution.manifest.v2+json":
+            return True
+        if content_type in INDEX_MEDIA_TYPES or content_type == OCI_MANIFEST_MEDIA_TYPE:
+            # Helm charts, cosign signatures, SBOMs... reuse the OCI manifest
+            # media type, and since image-spec v1.1 an index can also represent
+            # a non-image artifact; only artifactType (or, for manifests,
+            # config.mediaType) tells them apart.
+            try:
+                manifest = resp.json()
+            except ValueError:
+                return True
+            artifact_type = (manifest.get("artifactType") or "").lower()
+            if artifact_type:
+                return artifact_type in IMAGE_CONFIG_MEDIA_TYPES
+            if content_type in INDEX_MEDIA_TYPES:
+                # Plain multi-arch index
+                return True
+            config_type = (manifest.get("config", {}).get("mediaType") or "").lower()
+            return config_type in IMAGE_CONFIG_MEDIA_TYPES
+        logger.info(
+            f"Skipping {repository}:{tag} — manifest media type {content_type or 'unknown'} is not a container image"
+        )
+        return False
+
     def _ensure_auth(self, repository: str | None = None) -> None:
-        if self._bearer_token:
-            return
-        if self._basic_auth_verified:
+        if self._bearer_token or self._basic_auth_verified or self._anonymous_verified:
             return
+        with self._auth_lock:
+            if (
+                self._bearer_token
+                or self._basic_auth_verified
+                or self._anonymous_verified
+            ):
+                return
+            self._authenticate(repository=repository)
+
+    def _authenticate(self, repository: str | None = None) -> None:
         if self.token:
             self._bearer_token = self.token
             return
         ping_url = f"{self._base_url}/v2/"
         resp = self._request_with_retry("GET", ping_url)
         if resp.status_code == 200:
+            self._anonymous_verified = True
             return
         if resp.status_code == 401:
             www_auth = resp.headers.get("Www-Authenticate", "")
@@ -206,12 +302,29 @@ class OciRegistryAdapter(RegistryAdapter):
     def _authed_request(self, method: str, url: str, **kwargs) -> requests.Response:
         resp = self._do_authed_request(method, url, **kwargs)
         if resp.status_code == 401 and self._bearer_token:
-            logger.debug(
-                f"Bearer token rejected (HTTP 401), re-authenticating to {self.registry_url}"
+            challenge = self._find_challenge(
+                resp.headers.get("Www-Authenticate", ""), "Bearer"
+            )
+            if challenge and self._is_same_origin_as_registry(url):
+                # The cached token may be scoped to another repository; the
+                # response challenge names the exact scope this endpoint needs.
+                logger.debug(
+                    f"Bearer token rejected (HTTP 401), re-authenticating with response challenge scope for {url}"
+                )
+                fresh_token = self._obtain_bearer_token(challenge)
+                self._bearer_token = fresh_token
+            else:
+                logger.debug(
+                    f"Bearer token rejected (HTTP 401), re-authenticating to {self.registry_url}"
+                )
+                self._bearer_token = None
+                self._ensure_auth()
+                fresh_token = self._bearer_token
+            # Retry with the token this request obtained: a concurrent worker
+            # may have already replaced the shared one with another scope.
+            resp = self._do_authed_request(
+                method, url, bearer_token=fresh_token, **kwargs
             )
-            self._bearer_token = None
-            self._ensure_auth()
-            resp = self._do_authed_request(method, url, **kwargs)
         if (
             resp.status_code == 401
             and self._bearer_token
@@ -241,15 +354,21 @@ class OciRegistryAdapter(RegistryAdapter):
                 # this endpoint demands Bearer. The challenge carries the right
                 # scope.
                 logger.debug(f"Basic auth not accepted for {url}, switching to Bearer")
-                self._bearer_token = self._obtain_bearer_token(bearer_challenge)
-                resp = self._do_authed_request(method, url, **kwargs)
+                fresh_token = self._obtain_bearer_token(bearer_challenge)
+                self._bearer_token = fresh_token
+                resp = self._do_authed_request(
+                    method, url, bearer_token=fresh_token, **kwargs
+                )
         return resp
 
-    def _do_authed_request(self, method: str, url: str, **kwargs) -> requests.Response:
+    def _do_authed_request(
+        self, method: str, url: str, bearer_token: str | None = None, **kwargs
+    ) -> requests.Response:
         headers = kwargs.pop("headers", {})
         if self._is_same_origin_as_registry(url):
-            if self._bearer_token:
-                headers["Authorization"] = f"Bearer {self._bearer_token}"
+            token = bearer_token or self._bearer_token
+            if token:
+                headers["Authorization"] = f"Bearer {token}"
             elif self.username and self.password:
                 user, pwd = self._resolve_basic_credentials()
                 kwargs.setdefault("auth", (user, pwd))
diff --git a/tests/providers/image/image_provider_test.py b/tests/providers/image/image_provider_test.py
index df80e1d35b..cb3bbf2899 100644
--- a/tests/providers/image/image_provider_test.py
+++ b/tests/providers/image/image_provider_test.py
@@ -1452,3 +1452,43 @@ class TestConnectionPrivateNetworkAllowlist:
             result = ImageProvider.test_connection(image="harbor.internal")
 
         assert result.is_connected is True
+
+
+class TestRegistryScanErrorDegradation:
+    @patch("subprocess.run")
+    def test_registry_discovered_image_scan_error_is_skipped(self, mock_subprocess):
+        provider = _make_provider(images=["reg.io/chart:1.0", "alpine:3.18"])
+        provider._registry_discovered = {"reg.io/chart:1.0"}
+        mock_subprocess.side_effect = [
+            MagicMock(returncode=1, stdout="", stderr="unsupported media type"),
+            MagicMock(returncode=0, stdout=get_sample_trivy_json_output(), stderr=""),
+        ]
+
+        reports = []
+        for batch in provider.run_scan():
+            reports.extend(batch)
+
+        assert len(reports) == 1
+        assert reports[0].check_metadata.CheckID == "CVE-2024-1234"
+
+    @patch("subprocess.run")
+    def test_explicit_image_scan_error_still_raises(self, mock_subprocess):
+        provider = _make_provider(images=["alpine:3.18"])
+        mock_subprocess.return_value = MagicMock(
+            returncode=1, stdout="", stderr="unsupported media type"
+        )
+
+        with pytest.raises(ImageScanError):
+            for _ in provider.run_scan():
+                pass
+
+    @patch("subprocess.run")
+    def test_scan_per_image_degrades_registry_discovered_error(self, mock_subprocess):
+        provider = _make_provider(images=["reg.io/chart:1.0"])
+        provider._registry_discovered = {"reg.io/chart:1.0"}
+        mock_subprocess.return_value = MagicMock(
+            returncode=1, stdout="", stderr="unsupported media type"
+        )
+
+        results = list(provider.scan_per_image())
+        assert results == [("reg.io/chart:1.0", [])]
diff --git a/tests/providers/image/lib/registry/test_oci_adapter.py b/tests/providers/image/lib/registry/test_oci_adapter.py
index f904c00c21..8713f98f97 100644
--- a/tests/providers/image/lib/registry/test_oci_adapter.py
+++ b/tests/providers/image/lib/registry/test_oci_adapter.py
@@ -225,8 +225,8 @@ class TestOciAdapterAuth:
     def test_authed_request_retries_on_401_with_bearer(self, mock_request):
         adapter = OciRegistryAdapter("reg.io", username="u", password="p")
         adapter._bearer_token = "expired-token"
-        # First request: 401 (expired token)
-        resp_401 = MagicMock(status_code=401)
+        # First request: 401 without a challenge -> blind re-auth fallback
+        resp_401 = MagicMock(status_code=401, headers={})
         # _ensure_auth ping: 401 with bearer challenge
         ping_resp = MagicMock(
             status_code=401,
@@ -905,11 +905,10 @@ class TestBasicAuthFallback:
         mock_request.side_effect = [
             ping,
             token,
-            catalog_401,
-            ping,
-            token,
-            catalog_401,
-            catalog_ok,
+            catalog_401,  # bearer without catalog scope
+            token,  # re-auth straight from the response's Bearer challenge
+            catalog_401,  # scoped bearer retry, same result
+            catalog_ok,  # basic fallback
         ]
 
         adapter = OciRegistryAdapter("reg.io", username="admin", password="secret")
@@ -1125,3 +1124,204 @@ class TestBearerAuthSwitch:
         adapter = OciRegistryAdapter("reg.io", username="admin", password="wrong")
         with pytest.raises(ImageRegistryAuthError, match="bearer token"):
             adapter.list_repositories()
+
+
+class TestOciAdapterIsContainerImage:
+    def _adapter(self):
+        return OciRegistryAdapter("reg.io", token="t")
+
+    @staticmethod
+    def _manifest_resp(content_type, body=None):
+        resp = MagicMock(status_code=200, headers={"Content-Type": content_type})
+        resp.json.return_value = body or {}
+        return resp
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_docker_v2_manifest_is_image(self, mock_request):
+        mock_request.return_value = self._manifest_resp(
+            "application/vnd.docker.distribution.manifest.v2+json"
+        )
+        assert self._adapter().is_container_image("app", "1.0") is True
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_oci_index_is_image(self, mock_request):
+        mock_request.return_value = self._manifest_resp(
+            "application/vnd.oci.image.index.v1+json"
+        )
+        assert self._adapter().is_container_image("app", "1.0") is True
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_oci_manifest_with_image_config_is_image(self, mock_request):
+        mock_request.return_value = self._manifest_resp(
+            "application/vnd.oci.image.manifest.v1+json",
+            {"config": {"mediaType": "application/vnd.oci.image.config.v1+json"}},
+        )
+        assert self._adapter().is_container_image("app", "1.0") is True
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_helm_chart_is_not_image(self, mock_request):
+        mock_request.return_value = self._manifest_resp(
+            "application/vnd.oci.image.manifest.v1+json",
+            {"config": {"mediaType": "application/vnd.cncf.helm.config.v1+json"}},
+        )
+        assert self._adapter().is_container_image("charts/app", "1.0") is False
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_artifact_type_wins_over_config(self, mock_request):
+        mock_request.return_value = self._manifest_resp(
+            "application/vnd.oci.image.manifest.v1+json",
+            {
+                "artifactType": "application/vnd.dev.cosign.artifact.sig.v1+json",
+                "config": {"mediaType": "application/vnd.oci.image.config.v1+json"},
+            },
+        )
+        assert self._adapter().is_container_image("app", "sig") is False
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_unknown_media_type_is_not_image(self, mock_request):
+        mock_request.return_value = self._manifest_resp(
+            "application/vnd.cncf.helm.chart.content.v1.tar+gzip"
+        )
+        assert self._adapter().is_container_image("charts/app", "1.0") is False
+
+    @patch("prowler.providers.image.lib.registry.base.time.sleep")
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_manifest_error_assumes_image(self, mock_request, _mock_sleep):
+        mock_request.side_effect = requests.exceptions.ConnectionError("boom")
+        assert self._adapter().is_container_image("app", "1.0") is True
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_manifest_404_assumes_image(self, mock_request):
+        mock_request.return_value = MagicMock(status_code=404, headers={})
+        assert self._adapter().is_container_image("app", "1.0") is True
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_anonymous_auth_pings_only_once(self, mock_request):
+        mock_request.return_value = MagicMock(status_code=200, headers={})
+        adapter = OciRegistryAdapter("reg.io")
+        adapter._ensure_auth()
+        adapter._ensure_auth(repository="app")
+        adapter._ensure_auth(repository="other")
+        assert mock_request.call_count == 1
+
+
+class TestOciAdapterScopedReauth:
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_401_with_challenge_reauths_with_response_scope(self, mock_request):
+        adapter = OciRegistryAdapter("reg.io", username="u", password="p")
+        adapter._bearer_token = "token-scoped-to-other-repo"
+        resp_401 = MagicMock(
+            status_code=401,
+            headers={
+                "Www-Authenticate": 'Bearer realm="https://auth.reg.io/token",service="registry",scope="repository:myapp:pull"'
+            },
+        )
+        token_resp = MagicMock(status_code=200)
+        token_resp.json.return_value = {"token": "myapp-scoped-token"}
+        resp_200 = MagicMock(status_code=200)
+        mock_request.side_effect = [resp_401, token_resp, resp_200]
+
+        result = adapter._authed_request(
+            "GET", "https://reg.io/v2/myapp/manifests/latest"
+        )
+
+        assert result.status_code == 200
+        assert adapter._bearer_token == "myapp-scoped-token"
+        # Token exchange used the scope from the response challenge, no blind /v2/ ping
+        token_call = mock_request.call_args_list[1]
+        assert token_call.kwargs["params"]["scope"] == "repository:myapp:pull"
+        assert mock_request.call_count == 3
+
+
+class TestOciAdapterPickle:
+    def test_adapter_is_picklable_despite_auth_lock(self):
+        import pickle
+
+        adapter = OciRegistryAdapter("reg.io", username="u", password="p")
+        restored = pickle.loads(pickle.dumps(adapter))
+        assert restored._base_url == "https://reg.io"
+        # The lock is recreated, not carried over
+        assert restored._auth_lock is not adapter._auth_lock
+        restored._ensure_auth  # attribute access must not blow up
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_retry_uses_own_token_despite_concurrent_overwrite(self, mock_request):
+        adapter = OciRegistryAdapter("reg.io", username="u", password="p")
+        adapter._bearer_token = "stale-token"
+        resp_401 = MagicMock(
+            status_code=401,
+            headers={
+                "Www-Authenticate": 'Bearer realm="https://auth.reg.io/token",service="registry",scope="repository:myapp:pull"'
+            },
+        )
+        token_resp = MagicMock(status_code=200)
+        token_resp.json.return_value = {"token": "fresh-token"}
+        resp_200 = MagicMock(status_code=200)
+        mock_request.side_effect = [resp_401, token_resp, resp_200]
+
+        # Another worker replaces the shared token right after this request's
+        # token exchange
+        original = adapter._obtain_bearer_token
+
+        def clobbering(challenge, repository=None):
+            token = original(challenge, repository)
+            adapter._bearer_token = "other-repo-token"
+            return token
+
+        adapter._obtain_bearer_token = clobbering
+
+        result = adapter._authed_request(
+            "GET", "https://reg.io/v2/myapp/manifests/latest"
+        )
+
+        assert result.status_code == 200
+        retry_headers = mock_request.call_args_list[2].kwargs["headers"]
+        assert retry_headers["Authorization"] == "Bearer fresh-token"
+
+
+class TestOciAdapterArtifactIndexAndCaseInsensitivity:
+    def _adapter(self):
+        return OciRegistryAdapter("reg.io", token="t")
+
+    @staticmethod
+    def _manifest_resp(content_type, body=None):
+        resp = MagicMock(status_code=200, headers={"Content-Type": content_type})
+        resp.json.return_value = body or {}
+        return resp
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_artifact_index_is_not_image(self, mock_request):
+        # image-spec v1.1: an index can represent a non-image artifact
+        mock_request.return_value = self._manifest_resp(
+            "application/vnd.oci.image.index.v1+json",
+            {
+                "artifactType": "application/vnd.cncf.helm.config.v1+json",
+                "manifests": [],
+            },
+        )
+        assert self._adapter().is_container_image("charts/app", "1.0") is False
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_multiarch_index_without_artifact_type_is_image(self, mock_request):
+        mock_request.return_value = self._manifest_resp(
+            "application/vnd.oci.image.index.v1+json",
+            {"schemaVersion": 2, "manifests": [{"platform": {"os": "linux"}}]},
+        )
+        assert self._adapter().is_container_image("app", "latest") is True
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_mixed_case_media_type_is_normalized(self, mock_request):
+        # RFC 9110: type/subtype are case-insensitive
+        mock_request.return_value = self._manifest_resp(
+            "Application/vnd.OCI.Image.Manifest.v1+JSON",
+            {"config": {"mediaType": "application/vnd.oci.image.config.v1+json"}},
+        )
+        assert self._adapter().is_container_image("app", "1.0") is True
+
+    @patch("prowler.providers.image.lib.registry.base.requests.request")
+    def test_mixed_case_artifact_type_still_rejected(self, mock_request):
+        mock_request.return_value = self._manifest_resp(
+            "application/vnd.oci.image.manifest.v1+json",
+            {"artifactType": "Application/vnd.CNCF.Helm.Config.v1+json"},
+        )
+        assert self._adapter().is_container_image("charts/app", "1.0") is False
diff --git a/tests/providers/image/lib/registry/test_provider_registry.py b/tests/providers/image/lib/registry/test_provider_registry.py
index 97901ea0c4..43c8f2df4d 100644
--- a/tests/providers/image/lib/registry/test_provider_registry.py
+++ b/tests/providers/image/lib/registry/test_provider_registry.py
@@ -232,3 +232,57 @@ class TestDockerHubEnumeration:
         for img in provider.images:
             assert not img.startswith("docker.io/"), f"Unexpected host prefix in {img}"
         assert len(provider.images) == 3
+
+
+class TestNonImageArtifactFiltering:
+    @patch("prowler.providers.image.image_provider.create_registry_adapter")
+    def test_cosign_tags_skipped_without_manifest_fetch(self, mock_factory):
+        adapter = MagicMock()
+        adapter.list_repositories.return_value = ["app"]
+        adapter.list_tags.return_value = [
+            "latest",
+            "sha256-" + "a" * 64 + ".sig",
+            "sha256-" + "b" * 64 + ".att",
+            "sha256-" + "c" * 64 + ".sbom",
+        ]
+        adapter.is_container_image.return_value = True
+        mock_factory.return_value = adapter
+
+        provider = _build_provider()
+        assert provider.images == ["myregistry.io/app:latest"]
+        adapter.is_container_image.assert_called_once_with("app", "latest")
+
+    @patch("prowler.providers.image.image_provider.create_registry_adapter")
+    def test_non_image_artifacts_skipped(self, mock_factory):
+        adapter = MagicMock()
+        adapter.list_repositories.return_value = ["app", "charts/app"]
+        adapter.list_tags.return_value = ["1.0"]
+        adapter.is_container_image.side_effect = lambda repo, _tag: repo == "app"
+        mock_factory.return_value = adapter
+
+        provider = _build_provider()
+        assert provider.images == ["myregistry.io/app:1.0"]
+
+    @patch("prowler.providers.image.image_provider.create_registry_adapter")
+    def test_discovered_images_tracked_for_error_degradation(self, mock_factory):
+        adapter = MagicMock()
+        adapter.list_repositories.return_value = ["app"]
+        adapter.list_tags.return_value = ["latest"]
+        adapter.is_container_image.return_value = True
+        mock_factory.return_value = adapter
+
+        provider = _build_provider(images=["nginx:latest"])
+        assert "myregistry.io/app:latest" in provider._registry_discovered
+        assert "nginx:latest" not in provider._registry_discovered
+
+    @patch("prowler.providers.image.image_provider.create_registry_adapter")
+    def test_explicit_image_also_discovered_keeps_hard_failure(self, mock_factory):
+        adapter = MagicMock()
+        adapter.list_repositories.return_value = ["myapp"]
+        adapter.list_tags.return_value = ["latest"]
+        adapter.is_container_image.return_value = True
+        mock_factory.return_value = adapter
+
+        provider = _build_provider(images=["myregistry.io/myapp:latest"])
+        # The user asked for it explicitly: no error degradation
+        assert "myregistry.io/myapp:latest" not in provider._registry_discovered

From ae43d21efb5fd1d7a180a4f44b867a57eb8760f3 Mon Sep 17 00:00:00 2001
From: Jonathan Nguyen <87379568+tamg-aws@users.noreply.github.com>
Date: Tue, 1 Sep 2026 11:22:41 -0500
Subject: [PATCH 23/77] fix(sagemaker): read DirectInternetAccess instead of
 RootAccess on notebook instances (#12659)

---
 ...book-direct-internet-access-field.fixed.md |  1 +
 ...thout_direct_internet_access_configured.py | 24 +++++++++-
 .../services/sagemaker/sagemaker_service.py   | 48 ++++++++++++++++---
 ..._direct_internet_access_configured_test.py | 42 ++++++++++++++++
 .../sagemaker/sagemaker_service_test.py       | 44 +++++++++++++++++
 5 files changed, 151 insertions(+), 8 deletions(-)
 create mode 100644 prowler/changelog.d/sagemaker-notebook-direct-internet-access-field.fixed.md

diff --git a/prowler/changelog.d/sagemaker-notebook-direct-internet-access-field.fixed.md b/prowler/changelog.d/sagemaker-notebook-direct-internet-access-field.fixed.md
new file mode 100644
index 0000000000..919e15c548
--- /dev/null
+++ b/prowler/changelog.d/sagemaker-notebook-direct-internet-access-field.fixed.md
@@ -0,0 +1 @@
+`sagemaker_notebook_instance_without_direct_internet_access_configured` check logic to read the `DirectInternetAccess` setting instead of `RootAccess`, failing a notebook instance with direct internet access enabled even when root access is disabled
diff --git a/prowler/providers/aws/services/sagemaker/sagemaker_notebook_instance_without_direct_internet_access_configured/sagemaker_notebook_instance_without_direct_internet_access_configured.py b/prowler/providers/aws/services/sagemaker/sagemaker_notebook_instance_without_direct_internet_access_configured/sagemaker_notebook_instance_without_direct_internet_access_configured.py
index 8acfee1522..9e326e5e18 100644
--- a/prowler/providers/aws/services/sagemaker/sagemaker_notebook_instance_without_direct_internet_access_configured/sagemaker_notebook_instance_without_direct_internet_access_configured.py
+++ b/prowler/providers/aws/services/sagemaker/sagemaker_notebook_instance_without_direct_internet_access_configured/sagemaker_notebook_instance_without_direct_internet_access_configured.py
@@ -3,7 +3,21 @@ from prowler.providers.aws.services.sagemaker.sagemaker_client import sagemaker_
 
 
 class sagemaker_notebook_instance_without_direct_internet_access_configured(Check):
-    def execute(self):
+    """Ensure that SageMaker notebook instances have direct internet access disabled."""
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Report whether each notebook instance has direct internet access disabled.
+
+        - PASS: DirectInternetAccess was read and is Disabled.
+        - FAIL: DirectInternetAccess was read and is Enabled, so the instance reaches the
+          internet directly rather than only through the VPC.
+        - MANUAL: DescribeNotebookInstance did not report DirectInternetAccess. Absent is not
+          Disabled, and the two cannot share a value here or an instance whose setting was
+          never read would be reported compliant.
+
+        Returns:
+            One report per notebook instance in the inventory.
+        """
         findings = []
         for notebook_instance in sagemaker_client.sagemaker_notebook_instances:
             report = Check_Report_AWS(
@@ -11,7 +25,13 @@ class sagemaker_notebook_instance_without_direct_internet_access_configured(Chec
             )
             report.status = "PASS"
             report.status_extended = f"Sagemaker notebook instance {notebook_instance.name} has direct internet access disabled."
-            if notebook_instance.direct_internet_access:
+            if notebook_instance.direct_internet_access is None:
+                # DescribeNotebookInstance did not report DirectInternetAccess, so the
+                # setting is unknown. Defaulting to PASS would report an unread instance
+                # as compliant.
+                report.status = "MANUAL"
+                report.status_extended = f"Sagemaker notebook instance {notebook_instance.name} did not report DirectInternetAccess, so it could not be determined; verify manually."
+            elif notebook_instance.direct_internet_access:
                 report.status = "FAIL"
                 report.status_extended = f"Sagemaker notebook instance {notebook_instance.name} has direct internet access enabled."
 
diff --git a/prowler/providers/aws/services/sagemaker/sagemaker_service.py b/prowler/providers/aws/services/sagemaker/sagemaker_service.py
index cd0d79933f..be89bf538c 100644
--- a/prowler/providers/aws/services/sagemaker/sagemaker_service.py
+++ b/prowler/providers/aws/services/sagemaker/sagemaker_service.py
@@ -204,6 +204,39 @@ class SageMaker(AWSService):
             )
 
     def _describe_notebook_instance(self, notebook_instance):
+        """Read one notebook instance's settings into the inventory.
+
+        Args:
+            notebook_instance: The NotebookInstance to populate, identified by
+                name and region.
+
+        DirectInternetAccess and RootAccess are unrelated settings, and this
+        method previously guarded on the presence of the first while reading
+        the value of the second. Three consequences followed, all of them here
+        rather than in the check that consumes this:
+
+        - An instance with DirectInternetAccess Enabled and RootAccess Disabled
+          was recorded as having no direct internet access, and reported PASS.
+        - An instance with DirectInternetAccess Disabled and RootAccess Enabled
+          was recorded as having it, and reported FAIL.
+        - With RootAccess absent, subscripting it raised KeyError. The
+          enclosing ``except Exception`` swallowed that, so the assignments
+          below it never ran and ``kms_key_id`` and ``lifecycle_config_name``
+          were left None for an instance that has them -- degrading checks that
+          read those fields and never touch this one.
+
+        The third is reachable rather than theoretical:
+        DescribeNotebookInstanceOutput declares 23 members and carries no
+        ``required`` key at all at the pinned botocore, so both fields are
+        optional and a response with one and not the other is legal.
+
+        DirectInternetAccess is therefore assigned in BOTH states. Setting only
+        the True case would leave None meaning either Disabled or never-read,
+        and the check has to tell those apart: it reports MANUAL for never-read
+        rather than defaulting to PASS, which would assert compliance from an
+        absent answer. Collapsing the two states here would take that
+        distinction away from it.
+        """
         logger.info("SageMaker - describing notebook instances...")
         try:
             regional_client = self.regional_clients[notebook_instance.region]
@@ -223,11 +256,13 @@ class SageMaker(AWSService):
                 notebook_instance.root_access = True
             if "SubnetId" in describe_notebook_instance:
                 notebook_instance.subnet_id = describe_notebook_instance["SubnetId"]
-            if (
-                "DirectInternetAccess" in describe_notebook_instance
-                and describe_notebook_instance["RootAccess"] == "Enabled"
-            ):
-                notebook_instance.direct_internet_access = True
+            if "DirectInternetAccess" in describe_notebook_instance:
+                # Assign both states, not just the enabled one. Left as None, "Disabled"
+                # and "the field was never read" are the same value, and the check
+                # defaults to PASS -- so an unreadable notebook instance reported clean.
+                notebook_instance.direct_internet_access = (
+                    describe_notebook_instance["DirectInternetAccess"] == "Enabled"
+                )
             if "KmsKeyId" in describe_notebook_instance:
                 notebook_instance.kms_key_id = describe_notebook_instance["KmsKeyId"]
             if "NotebookInstanceLifecycleConfigName" in describe_notebook_instance:
@@ -553,7 +588,8 @@ class NotebookInstance(BaseModel):
     arn: str
     root_access: bool = None
     subnet_id: str = None
-    direct_internet_access: bool = None
+    # None when DescribeNotebookInstance did not report the field: unknown, not disabled.
+    direct_internet_access: Optional[bool] = None
     kms_key_id: str = None
     lifecycle_config_name: str = None
     # Decoded lifecycle scripts keyed by "<hook>[<index>]" (e.g. "OnStart[0]"),
diff --git a/tests/providers/aws/services/sagemaker/sagemaker_notebook_instance_without_direct_internet_access_configured/sagemaker_notebook_instance_without_direct_internet_access_configured_test.py b/tests/providers/aws/services/sagemaker/sagemaker_notebook_instance_without_direct_internet_access_configured/sagemaker_notebook_instance_without_direct_internet_access_configured_test.py
index da0f9548bd..1be22a9c3a 100644
--- a/tests/providers/aws/services/sagemaker/sagemaker_notebook_instance_without_direct_internet_access_configured/sagemaker_notebook_instance_without_direct_internet_access_configured_test.py
+++ b/tests/providers/aws/services/sagemaker/sagemaker_notebook_instance_without_direct_internet_access_configured/sagemaker_notebook_instance_without_direct_internet_access_configured_test.py
@@ -38,6 +38,48 @@ class Test_sagemaker_notebook_instance_without_direct_internet_access_configured
             result = check.execute()
             assert len(result) == 0
 
+    def test_instance_direct_internet_unreported_is_manual(self):
+        """An unreported DirectInternetAccess must not read as disabled.
+
+        The collector only ever assigned True, so "Disabled" and "the field was never
+        read" were both None and the check defaulted to PASS -- reporting an instance it
+        had not read as compliant. Now False means disabled and None means unknown.
+        """
+        sagemaker_client = mock.MagicMock
+        sagemaker_client.sagemaker_notebook_instances = []
+        sagemaker_client.sagemaker_notebook_instances.append(
+            NotebookInstance(
+                name=test_notebook_instance,
+                arn=notebook_instance_arn,
+                region=AWS_REGION_EU_WEST_1,
+                direct_internet_access=None,
+            )
+        )
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=aws_provider,
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.sagemaker.sagemaker_notebook_instance_without_direct_internet_access_configured.sagemaker_notebook_instance_without_direct_internet_access_configured.sagemaker_client",
+                sagemaker_client,
+            ),
+        ):
+            from prowler.providers.aws.services.sagemaker.sagemaker_notebook_instance_without_direct_internet_access_configured.sagemaker_notebook_instance_without_direct_internet_access_configured import (
+                sagemaker_notebook_instance_without_direct_internet_access_configured,
+            )
+
+            check = (
+                sagemaker_notebook_instance_without_direct_internet_access_configured()
+            )
+            result = check.execute()
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
+            assert "did not report DirectInternetAccess" in result[0].status_extended
+
     def test_instance_direct_internet_disabled(self):
         sagemaker_client = mock.MagicMock
         sagemaker_client.sagemaker_notebook_instances = []
diff --git a/tests/providers/aws/services/sagemaker/sagemaker_service_test.py b/tests/providers/aws/services/sagemaker/sagemaker_service_test.py
index bfadd59efe..c931350639 100644
--- a/tests/providers/aws/services/sagemaker/sagemaker_service_test.py
+++ b/tests/providers/aws/services/sagemaker/sagemaker_service_test.py
@@ -262,6 +262,50 @@ class Test_SageMaker_Service:
             == lifecycle_config_name
         )
 
+    def test_describe_notebook_instance_direct_internet_independent_of_root_access(
+        self,
+    ):
+        """DirectInternetAccess and RootAccess are separate settings and must be read separately.
+
+        The shared fixture sets both to "Enabled", so a collector that reads RootAccess while
+        testing for the DirectInternetAccess key produces the right answer by coincidence. These
+        two cases separate the fields, which is the only way the confusion is visible.
+        """
+
+        def only_direct_internet(self, operation_name, kwarg):
+            """Serve a notebook instance with internet access on and root access off.
+
+            The combination a collector reading RootAccess records as having NO direct internet
+            access, which is the false PASS.
+            """
+            if operation_name == "DescribeNotebookInstance":
+                return {"DirectInternetAccess": "Enabled", "RootAccess": "Disabled"}
+            return mock_make_api_call(self, operation_name, kwarg)
+
+        def only_root_access(self, operation_name, kwarg):
+            """Serve a notebook instance with internet access off and root access on.
+
+            The mirror case: a collector reading RootAccess records direct internet access on an
+            instance that has none, which is the false FAIL.
+            """
+            if operation_name == "DescribeNotebookInstance":
+                return {"DirectInternetAccess": "Disabled", "RootAccess": "Enabled"}
+            return mock_make_api_call(self, operation_name, kwarg)
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+
+        with patch(
+            "botocore.client.BaseClient._make_api_call", new=only_direct_internet
+        ):
+            notebook = SageMaker(aws_provider).sagemaker_notebook_instances[0]
+            assert notebook.direct_internet_access
+            assert not notebook.root_access
+
+        with patch("botocore.client.BaseClient._make_api_call", new=only_root_access):
+            notebook = SageMaker(aws_provider).sagemaker_notebook_instances[0]
+            assert not notebook.direct_internet_access
+            assert notebook.root_access
+
     # Test SageMaker describe notebook instance lifecycle config
     def test_describe_notebook_instance_lifecycle_config(self):
         aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])

From 86e4408f29892b4c39fea1800bdcfad5b06f1695 Mon Sep 17 00:00:00 2001
From: Jonathan Nguyen <87379568+tamg-aws@users.noreply.github.com>
Date: Wed, 2 Sep 2026 01:53:52 -0500
Subject: [PATCH 24/77] feat(ecr): assess enhanced scanning on registries
 holding repositories (#12660)

---
 .../ecr-registry-enhanced-scanning.added.md   |   1 +
 .../aws/aws_ai_security_framework_aws.json    |   6 +-
 .../__init__.py                               |   0
 ...ry_enhanced_scanning_enabled.metadata.json |  41 +++
 .../ecr_registry_enhanced_scanning_enabled.py |  43 +++
 ...registry_enhanced_scanning_enabled_test.py | 311 ++++++++++++++++++
 .../aws/services/ecr/ecr_service_test.py      |  37 +++
 7 files changed, 437 insertions(+), 2 deletions(-)
 create mode 100644 prowler/changelog.d/ecr-registry-enhanced-scanning.added.md
 create mode 100644 prowler/providers/aws/services/ecr/ecr_registry_enhanced_scanning_enabled/__init__.py
 create mode 100644 prowler/providers/aws/services/ecr/ecr_registry_enhanced_scanning_enabled/ecr_registry_enhanced_scanning_enabled.metadata.json
 create mode 100644 prowler/providers/aws/services/ecr/ecr_registry_enhanced_scanning_enabled/ecr_registry_enhanced_scanning_enabled.py
 create mode 100644 tests/providers/aws/services/ecr/ecr_registry_enhanced_scanning_enabled/ecr_registry_enhanced_scanning_enabled_test.py

diff --git a/prowler/changelog.d/ecr-registry-enhanced-scanning.added.md b/prowler/changelog.d/ecr-registry-enhanced-scanning.added.md
new file mode 100644
index 0000000000..e4624d5859
--- /dev/null
+++ b/prowler/changelog.d/ecr-registry-enhanced-scanning.added.md
@@ -0,0 +1 @@
+`ecr_registry_enhanced_scanning_enabled` check for AWS provider, verifying that the ECR registry scan type is enhanced (Amazon Inspector, covering programming language packages and continuous rescanning) instead of basic, and reporting MANUAL when the registry scanning configuration cannot be read
diff --git a/prowler/compliance/aws/aws_ai_security_framework_aws.json b/prowler/compliance/aws/aws_ai_security_framework_aws.json
index 32e50d66e9..ceac752ff8 100644
--- a/prowler/compliance/aws/aws_ai_security_framework_aws.json
+++ b/prowler/compliance/aws/aws_ai_security_framework_aws.json
@@ -1138,7 +1138,8 @@
         "eks_cluster_uses_a_supported_version",
         "eks_control_plane_logging_all_types_enabled",
         "eks_cluster_kms_cmk_encryption_in_secrets_enabled",
-        "eks_cluster_deletion_protection_enabled"
+        "eks_cluster_deletion_protection_enabled",
+        "ecr_registry_enhanced_scanning_enabled"
       ]
     },
     {
@@ -1161,7 +1162,8 @@
         "ecs_task_definitions_logging_enabled",
         "ecs_task_definitions_no_environment_secrets",
         "ecs_task_definitions_host_namespace_not_shared",
-        "ecs_cluster_container_insights_enabled"
+        "ecs_cluster_container_insights_enabled",
+        "ecr_registry_enhanced_scanning_enabled"
       ]
     },
     {
diff --git a/prowler/providers/aws/services/ecr/ecr_registry_enhanced_scanning_enabled/__init__.py b/prowler/providers/aws/services/ecr/ecr_registry_enhanced_scanning_enabled/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/ecr/ecr_registry_enhanced_scanning_enabled/ecr_registry_enhanced_scanning_enabled.metadata.json b/prowler/providers/aws/services/ecr/ecr_registry_enhanced_scanning_enabled/ecr_registry_enhanced_scanning_enabled.metadata.json
new file mode 100644
index 0000000000..ecd5069429
--- /dev/null
+++ b/prowler/providers/aws/services/ecr/ecr_registry_enhanced_scanning_enabled/ecr_registry_enhanced_scanning_enabled.metadata.json
@@ -0,0 +1,41 @@
+{
+  "Provider": "aws",
+  "CheckID": "ecr_registry_enhanced_scanning_enabled",
+  "CheckTitle": "ECR registry has enhanced scanning enabled",
+  "CheckType": [
+    "Software and Configuration Checks/Vulnerabilities/CVE",
+    "Software and Configuration Checks/AWS Security Best Practices"
+  ],
+  "ServiceName": "ecr",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "",
+  "Severity": "medium",
+  "ResourceType": "Other",
+  "ResourceGroup": "container",
+  "Description": "Amazon ECR registries with repositories are evaluated for **enhanced scanning**, the Amazon Inspector-powered scan type that covers operating system **and** programming language packages and can rescan images continuously as new CVEs are published. A registry left on **basic** scanning is reported as failing.",
+  "Risk": "**Basic** scanning matches only OS packages against a static CVE list, so **application dependencies** (npm, PyPI, Maven, Go, .NET) are never assessed. It rescans only on push or on an explicit StartImageScan, at most once per 24 hours, so a CVE published since the last scan stays invisible until someone acts. Vulnerable images keep being pulled, enabling **RCE** and supply chain compromise.",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning-enhanced.html",
+    "https://docs.aws.amazon.com/inspector/latest/user/scanning-ecr.html",
+    "https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning.html"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "aws ecr put-registry-scanning-configuration --scan-type ENHANCED --rules 'scanFrequency=CONTINUOUS_SCAN,repositoryFilters=[{filter=*,filterType=WILDCARD}]'",
+      "NativeIaC": "```yaml\nResources:\n  RegistryScanningConfiguration:\n    Type: AWS::ECR::RegistryScanningConfiguration\n    Properties:\n      ScanType: ENHANCED  # Critical: BASIC limits the registry to operating-system coverage\n      Rules:\n        - ScanFrequency: CONTINUOUS_SCAN\n          RepositoryFilters:\n            - Filter: \"*\"  # Critical: coverage comes from the filters, so * is what reaches every repository\n              FilterType: WILDCARD\n```",
+      "Other": "1. Open the AWS Management Console and go to Amazon ECR\n2. In the left menu, click Private registry, then Scanning\n3. Click Edit\n4. Set Scanning type to Enhanced scanning\n5. Under Enhanced scanning, add or keep a repository filter matching every repository that must be scanned. Coverage comes from the filters, not from the frequency: a filter of * covers the whole registry, and any repository no filter matches is left unscanned\n6. Set the scan frequency for those filters, either Continuous scanning or Scan on push\n7. Click Save",
+      "Terraform": "```hcl\nresource \"aws_ecr_registry_scanning_configuration\" \"<example_resource_name>\" {\n  scan_type = \"ENHANCED\"\n\n  rule {\n    scan_frequency = \"CONTINUOUS_SCAN\"\n    repository_filter {\n      filter      = \"*\"\n      filter_type = \"WILDCARD\"\n    }\n  }\n}\n```"
+    },
+    "Recommendation": {
+      "Text": "Set the registry scan type to **enhanced scanning**, which delegates scanning to **Amazon Inspector** and adds programming language package coverage plus continuous rescanning on top of the operating system coverage that basic scanning provides. Feed the resulting findings into CI/CD gates so vulnerable images are not promoted.",
+      "Url": "https://hub.prowler.com/check/ecr_registry_enhanced_scanning_enabled"
+    }
+  },
+  "Categories": [
+    "container-security"
+  ],
+  "DependsOn": [],
+  "RelatedTo": [],
+  "Notes": "Scoped to registries that hold at least one repository. The ECR API accepts both the CONTINUOUS_SCAN and SCAN_ON_PUSH frequencies for the ENHANCED scan type, so ENHANCED on its own does not imply continuous rescanning; frequency is a separate axis this check does not assert. It is NOT a coverage guarantee, and this check does not claim one: enhanced scanning is driven by repository filters, so clearing the scan-all filter leaves any repository no filter matches unscanned. What this check asserts is the registry's scan TYPE, not that every repository in it is covered. Registry-wide scan-on-push coverage and its repository filters are asserted by ecr_registry_scan_images_on_push_enabled, which passes for either scan type. Reported as MANUAL when GetRegistryScanningConfiguration could not be read, because an unretrieved scan type is not evidence of compliance."
+}
diff --git a/prowler/providers/aws/services/ecr/ecr_registry_enhanced_scanning_enabled/ecr_registry_enhanced_scanning_enabled.py b/prowler/providers/aws/services/ecr/ecr_registry_enhanced_scanning_enabled/ecr_registry_enhanced_scanning_enabled.py
new file mode 100644
index 0000000000..49c7819217
--- /dev/null
+++ b/prowler/providers/aws/services/ecr/ecr_registry_enhanced_scanning_enabled/ecr_registry_enhanced_scanning_enabled.py
@@ -0,0 +1,43 @@
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.ecr.ecr_client import ecr_client
+
+
+class ecr_registry_enhanced_scanning_enabled(Check):
+    """Verify that in-use ECR registries have enhanced scanning enabled.
+
+    Enhanced scanning (Amazon Inspector) covers operating system and programming
+    language packages with continuous rescanning as new CVEs are published, while
+    basic scanning only covers operating system packages at push time against a
+    static CVE list. Only registries holding at least one repository are checked.
+    - PASS: the registry scan type is ENHANCED.
+    - FAIL: the registry is on another scan type.
+    - MANUAL: the registry scanning configuration could not be retrieved, so the
+      scan type is unknown.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Execute the check logic.
+
+        Returns:
+            A list of reports containing the result of the check.
+        """
+        findings = []
+        for registry in ecr_client.registries.values():
+            # We want to check the registry if it is in use, hence there are repositories
+            if len(registry.repositories) != 0:
+                report = Check_Report_AWS(metadata=self.metadata(), resource=registry)
+                if registry.scan_type is None:
+                    report.status = "MANUAL"
+                    report.status_extended = f"ECR registry {registry.id} scanning configuration could not be retrieved, check manually if enhanced scanning is enabled."
+                elif registry.scan_type == "ENHANCED":
+                    report.status = "PASS"
+                    report.status_extended = (
+                        f"ECR registry {registry.id} has enhanced scanning enabled."
+                    )
+                else:
+                    report.status = "FAIL"
+                    report.status_extended = f"ECR registry {registry.id} has {registry.scan_type} scanning enabled instead of enhanced scanning."
+
+                findings.append(report)
+
+        return findings
diff --git a/tests/providers/aws/services/ecr/ecr_registry_enhanced_scanning_enabled/ecr_registry_enhanced_scanning_enabled_test.py b/tests/providers/aws/services/ecr/ecr_registry_enhanced_scanning_enabled/ecr_registry_enhanced_scanning_enabled_test.py
new file mode 100644
index 0000000000..fcd52222b3
--- /dev/null
+++ b/tests/providers/aws/services/ecr/ecr_registry_enhanced_scanning_enabled/ecr_registry_enhanced_scanning_enabled_test.py
@@ -0,0 +1,311 @@
+from unittest import mock
+
+from prowler.providers.aws.services.ecr.ecr_service import (
+    Registry,
+    Repository,
+    ScanningRule,
+)
+from tests.providers.aws.utils import (
+    AWS_ACCOUNT_ARN,
+    AWS_ACCOUNT_NUMBER,
+    AWS_REGION_EU_WEST_1,
+    AWS_REGION_US_EAST_1,
+    set_mocked_aws_provider,
+)
+
+repository_name = "test_repo"
+repository_arn = (
+    f"arn:aws:ecr:eu-west-1:{AWS_ACCOUNT_NUMBER}:repository/{repository_name}"
+)
+registry_arn = (
+    f"arn:aws:ecr:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:registry/"
+    f"{AWS_ACCOUNT_NUMBER}"
+)
+
+
+def _registry(scan_type, rules, repositories=None, region=AWS_REGION_EU_WEST_1):
+    """Build a Registry holding one repository unless told otherwise.
+
+    A registry is per-region, so `region` is a parameter: an account using ECR in more than one
+    region has more than one registry, and each carries its own scanning configuration.
+    """
+    if repositories is None:
+        repositories = [
+            Repository(
+                name=repository_name,
+                arn=f"arn:aws:ecr:{region}:{AWS_ACCOUNT_NUMBER}:repository/{repository_name}",
+                region=region,
+                scan_on_push=True,
+                policy="",
+                images_details=None,
+                lifecycle_policy="",
+            )
+        ]
+    return Registry(
+        id=AWS_ACCOUNT_NUMBER,
+        arn=f"arn:aws:ecr:{region}:{AWS_ACCOUNT_NUMBER}:registry/{AWS_ACCOUNT_NUMBER}",
+        region=region,
+        scan_type=scan_type,
+        repositories=repositories,
+        rules=rules,
+    )
+
+
+class Test_ecr_registry_enhanced_scanning_enabled:
+    def test_no_registries(self):
+        """Check produces no findings when no registries exist."""
+        ecr_client = mock.MagicMock
+        ecr_client.registries = {}
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_aws_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.ecr.ecr_registry_enhanced_scanning_enabled.ecr_registry_enhanced_scanning_enabled.ecr_client",
+                ecr_client,
+            ),
+        ):
+            from prowler.providers.aws.services.ecr.ecr_registry_enhanced_scanning_enabled.ecr_registry_enhanced_scanning_enabled import (
+                ecr_registry_enhanced_scanning_enabled,
+            )
+
+            check = ecr_registry_enhanced_scanning_enabled()
+            result = check.execute()
+            assert len(result) == 0
+
+    def test_registry_no_repositories(self):
+        """Check skips registries holding no repositories (not in use)."""
+        ecr_client = mock.MagicMock
+        ecr_client.registries = {}
+        ecr_client.registries[AWS_REGION_EU_WEST_1] = _registry(
+            "BASIC", [], repositories=[]
+        )
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_aws_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.ecr.ecr_registry_enhanced_scanning_enabled.ecr_registry_enhanced_scanning_enabled.ecr_client",
+                ecr_client,
+            ),
+        ):
+            from prowler.providers.aws.services.ecr.ecr_registry_enhanced_scanning_enabled.ecr_registry_enhanced_scanning_enabled import (
+                ecr_registry_enhanced_scanning_enabled,
+            )
+
+            check = ecr_registry_enhanced_scanning_enabled()
+            result = check.execute()
+            assert len(result) == 0
+
+    def test_registry_enhanced_scanning(self):
+        """Registry with ENHANCED scan type passes the check."""
+        ecr_client = mock.MagicMock
+        ecr_client.audited_account_arn = AWS_ACCOUNT_ARN
+        ecr_client.registries = {}
+        ecr_client.registries[AWS_REGION_EU_WEST_1] = _registry(
+            "ENHANCED",
+            [
+                ScanningRule(
+                    scan_frequency="CONTINUOUS_SCAN",
+                    scan_filters=[{"filter": "*", "filterType": "WILDCARD"}],
+                )
+            ],
+        )
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_aws_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.ecr.ecr_registry_enhanced_scanning_enabled.ecr_registry_enhanced_scanning_enabled.ecr_client",
+                ecr_client,
+            ),
+        ):
+            from prowler.providers.aws.services.ecr.ecr_registry_enhanced_scanning_enabled.ecr_registry_enhanced_scanning_enabled import (
+                ecr_registry_enhanced_scanning_enabled,
+            )
+
+            check = ecr_registry_enhanced_scanning_enabled()
+            result = check.execute()
+            assert len(result) == 1
+            assert result[0].status == "PASS"
+            assert (
+                result[0].status_extended
+                == f"ECR registry {AWS_ACCOUNT_NUMBER} has enhanced scanning enabled."
+            )
+            assert result[0].resource_id == AWS_ACCOUNT_NUMBER
+            assert result[0].resource_arn == registry_arn
+            assert result[0].region == AWS_REGION_EU_WEST_1
+
+    def test_registry_basic_scanning(self):
+        """Registry with BASIC scan type fails the check."""
+        ecr_client = mock.MagicMock
+        ecr_client.audited_account_arn = AWS_ACCOUNT_ARN
+        ecr_client.registries = {}
+        ecr_client.registries[AWS_REGION_EU_WEST_1] = _registry(
+            "BASIC",
+            [
+                ScanningRule(
+                    scan_frequency="SCAN_ON_PUSH",
+                    scan_filters=[{"filter": "*", "filterType": "WILDCARD"}],
+                )
+            ],
+        )
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_aws_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.ecr.ecr_registry_enhanced_scanning_enabled.ecr_registry_enhanced_scanning_enabled.ecr_client",
+                ecr_client,
+            ),
+        ):
+            from prowler.providers.aws.services.ecr.ecr_registry_enhanced_scanning_enabled.ecr_registry_enhanced_scanning_enabled import (
+                ecr_registry_enhanced_scanning_enabled,
+            )
+
+            check = ecr_registry_enhanced_scanning_enabled()
+            result = check.execute()
+            assert len(result) == 1
+            assert result[0].status == "FAIL"
+            assert (
+                result[0].status_extended
+                == f"ECR registry {AWS_ACCOUNT_NUMBER} has BASIC scanning enabled instead of enhanced scanning."
+            )
+            assert result[0].resource_id == AWS_ACCOUNT_NUMBER
+            assert result[0].resource_arn == registry_arn
+            assert result[0].region == AWS_REGION_EU_WEST_1
+
+    def test_registry_enhanced_scanning_empty_rules(self):
+        """ENHANCED scan type with empty rules list.
+
+        An ENHANCED registry with no scanning rules still has the scan type
+        set to ENHANCED. The check verifies scan type only, not rules.
+        """
+        ecr_client = mock.MagicMock
+        ecr_client.audited_account_arn = AWS_ACCOUNT_ARN
+        ecr_client.registries = {}
+        ecr_client.registries[AWS_REGION_EU_WEST_1] = _registry("ENHANCED", [])
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_aws_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.ecr.ecr_registry_enhanced_scanning_enabled.ecr_registry_enhanced_scanning_enabled.ecr_client",
+                ecr_client,
+            ),
+        ):
+            from prowler.providers.aws.services.ecr.ecr_registry_enhanced_scanning_enabled.ecr_registry_enhanced_scanning_enabled import (
+                ecr_registry_enhanced_scanning_enabled,
+            )
+
+            check = ecr_registry_enhanced_scanning_enabled()
+            result = check.execute()
+            assert len(result) == 1
+            assert result[0].status == "PASS"
+            assert (
+                result[0].status_extended
+                == f"ECR registry {AWS_ACCOUNT_NUMBER} has enhanced scanning enabled."
+            )
+            assert result[0].resource_id == AWS_ACCOUNT_NUMBER
+            assert result[0].resource_arn == registry_arn
+            assert result[0].region == AWS_REGION_EU_WEST_1
+
+    def test_registry_scanning_configuration_not_retrieved(self):
+        """An unread scan type is MANUAL, never PASS.
+
+        ``_get_registry_scanning_configuration`` leaves ``scan_type`` at
+        ``None`` when ``GetRegistryScanningConfiguration`` fails for any
+        reason other than the "feature is disabled" ValidationException, and
+        when the response carries no ``scanningConfiguration`` at all. An
+        unanswered scan type is not evidence that enhanced scanning is on.
+        """
+        ecr_client = mock.MagicMock
+        ecr_client.audited_account_arn = AWS_ACCOUNT_ARN
+        ecr_client.registries = {}
+        ecr_client.registries[AWS_REGION_EU_WEST_1] = _registry(None, None)
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_aws_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.ecr.ecr_registry_enhanced_scanning_enabled.ecr_registry_enhanced_scanning_enabled.ecr_client",
+                ecr_client,
+            ),
+        ):
+            from prowler.providers.aws.services.ecr.ecr_registry_enhanced_scanning_enabled.ecr_registry_enhanced_scanning_enabled import (
+                ecr_registry_enhanced_scanning_enabled,
+            )
+
+            check = ecr_registry_enhanced_scanning_enabled()
+            result = check.execute()
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
+            assert (
+                result[0].status_extended
+                == f"ECR registry {AWS_ACCOUNT_NUMBER} scanning configuration could not be retrieved, check manually if enhanced scanning is enabled."
+            )
+            assert result[0].resource_id == AWS_ACCOUNT_NUMBER
+            assert result[0].resource_arn == registry_arn
+            assert result[0].region == AWS_REGION_EU_WEST_1
+
+    def test_multiple_registries_one_verdict_each(self):
+        """Each registry is judged on its own scanning configuration.
+
+        A registry is per-region, so an account using ECR in three regions has three of them. One
+        ENHANCED, one BASIC and one unread must yield PASS, FAIL and MANUAL against the matching
+        region -- a check that reported only the first registry, or reused one verdict across them,
+        would leave the other regions unreported or misreported.
+        """
+        ecr_client = mock.MagicMock
+        ecr_client.audited_account_arn = AWS_ACCOUNT_ARN
+        ecr_client.registries = {
+            AWS_REGION_EU_WEST_1: _registry(
+                "ENHANCED", [], region=AWS_REGION_EU_WEST_1
+            ),
+            AWS_REGION_US_EAST_1: _registry("BASIC", [], region=AWS_REGION_US_EAST_1),
+            "eu-central-1": _registry(None, None, region="eu-central-1"),
+        }
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_aws_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.aws.services.ecr.ecr_registry_enhanced_scanning_enabled.ecr_registry_enhanced_scanning_enabled.ecr_client",
+                ecr_client,
+            ),
+        ):
+            from prowler.providers.aws.services.ecr.ecr_registry_enhanced_scanning_enabled.ecr_registry_enhanced_scanning_enabled import (
+                ecr_registry_enhanced_scanning_enabled,
+            )
+
+            check = ecr_registry_enhanced_scanning_enabled()
+            result = check.execute()
+
+            assert len(result) == 3
+            by_region = {report.region: report for report in result}
+            assert set(by_region) == {
+                AWS_REGION_EU_WEST_1,
+                AWS_REGION_US_EAST_1,
+                "eu-central-1",
+            }
+            assert by_region[AWS_REGION_EU_WEST_1].status == "PASS"
+            assert by_region[AWS_REGION_US_EAST_1].status == "FAIL"
+            assert by_region["eu-central-1"].status == "MANUAL"
+            assert (
+                by_region[AWS_REGION_US_EAST_1].status_extended
+                == f"ECR registry {AWS_ACCOUNT_NUMBER} has BASIC scanning enabled instead of enhanced scanning."
+            )
diff --git a/tests/providers/aws/services/ecr/ecr_service_test.py b/tests/providers/aws/services/ecr/ecr_service_test.py
index 9181d6e8d8..a93badad2f 100644
--- a/tests/providers/aws/services/ecr/ecr_service_test.py
+++ b/tests/providers/aws/services/ecr/ecr_service_test.py
@@ -6,6 +6,7 @@ from unittest.mock import MagicMock, patch
 import botocore
 import pytest
 from boto3 import client
+from botocore.exceptions import ClientError
 from moto import mock_aws
 
 from prowler.providers.aws.services.ecr.ecr_service import (
@@ -201,6 +202,21 @@ def mock_make_api_call(self, operation_name, kwarg):
     return make_api_call(self, operation_name, kwarg)
 
 
+def mock_make_api_call_registry_scanning_denied(self, operation_name, kwarg):
+    """Deny GetRegistryScanningConfiguration, serving every other call normally."""
+    if operation_name == "GetRegistryScanningConfiguration":
+        raise ClientError(
+            {
+                "Error": {
+                    "Code": "AccessDeniedException",
+                    "Message": "User is not authorized to perform: ecr:GetRegistryScanningConfiguration",
+                }
+            },
+            operation_name,
+        )
+    return mock_make_api_call(self, operation_name, kwarg)
+
+
 def mock_generate_regional_clients(provider, service):
     """Return a single regional client for every requested region."""
     regional_client = provider._session.current_session.client(
@@ -437,6 +453,27 @@ class Test_ECR_Service:
             )
         ]
 
+    @mock_aws
+    def test_get_registry_scanning_configuration_not_retrieved(self):
+        """A denied GetRegistryScanningConfiguration leaves the scan type unknown.
+
+        Prowler leaves unretrieved attributes at None, so checks reading
+        ``scan_type`` can tell "not enhanced" apart from "not answered".
+
+        The patch is entered inside the test body rather than as a decorator:
+        stacked patch decorators are merged into one ``patchings`` list, so the
+        class-level ``_make_api_call`` patch would be applied last and win.
+        """
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        with patch(
+            "botocore.client.BaseClient._make_api_call",
+            new=mock_make_api_call_registry_scanning_denied,
+        ):
+            ecr = ECR(aws_provider)
+        assert len(ecr.registries) == 1
+        assert ecr.registries[AWS_REGION_EU_WEST_1].scan_type is None
+        assert ecr.registries[AWS_REGION_EU_WEST_1].rules is None
+
     def test_is_artifact_scannable_docker(self):
         """A Docker image config is scannable."""
         assert ECR._is_artifact_scannable(

From 18453e592e0a2550c726a754fda79870de428abf Mon Sep 17 00:00:00 2001
From: Prowler Bot <bot@prowler.com>
Date: Wed, 2 Sep 2026 11:23:18 +0200
Subject: [PATCH 25/77] chore(changelog): v5.41.0 (#12707)

Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
---
 api/CHANGELOG.md                              | 12 ++++++
 .../jira-finding-labels-url.added.md          |  1 -
 .../mute-rules-current-scans.fixed.md         |  1 -
 mcp_server/CHANGELOG.md                       | 17 ++++++++
 .../mcp-app-tool-failures.added.md            |  1 -
 ...mcp-compliance-scan-or-provider.changed.md |  1 -
 .../mcp-docs-search-swallowed-errors.fixed.md |  1 -
 .../mcp-hub-check-provider-mismatch.fixed.md  |  1 -
 prowler/CHANGELOG.md                          | 43 +++++++++++++++++++
 .../aws-partition-env-var.added.md            |  1 -
 .../cis-1.4-googleworkspace.added.md          |  1 -
 ...re-data-protection-policy-enabled.added.md |  1 -
 ...h-metric-filter-missing-log-group.fixed.md |  1 -
 .../ecr-registry-enhanced-scanning.added.md   |  1 -
 .../ecr-registry-scan-frequency.fixed.md      |  1 -
 ...ks-cluster-vpc-cni-network-policy.added.md |  1 -
 ...cbeanstalk-environment-no-secrets.added.md |  1 -
 .../github-repository-pagination.fixed.md     |  1 -
 ...gleworkspace-2sv-policy-overrides.fixed.md |  1 -
 ...leworkspace-alert-center-delivery.fixed.md |  1 -
 ...space-cis-full-audit-procedures.changed.md |  1 -
 ...leworkspace-compliance-mappings.changed.md |  1 -
 ...rkspace-password-strength-default.fixed.md |  1 -
 .../guardduty-ai-protection-enabled.added.md  |  1 -
 ...rdduty-runtime-monitoring-enabled.added.md |  1 -
 ...rdduty-unified-runtime-monitoring.fixed.md |  1 -
 ...iam-agentcore-passrole-restricted.added.md |  1 -
 ...m-agentcore-workload-access-token.added.md |  1 -
 ...m-service-trust-source-to-account.added.md |  1 -
 .../image-private-network-allowlist.added.md  |  1 -
 ...mage-registry-basic-auth-fallback.fixed.md |  1 -
 ...image-registry-bearer-auth-switch.fixed.md |  1 -
 .../image-registry-insecure-trivy.fixed.md    |  1 -
 ...-registry-non-image-oci-artifacts.fixed.md |  1 -
 .../jira-finding-labels-url.added.md          |  1 -
 .../jira-get-issues-status.added.md           |  1 -
 ...ter-in-transit-encryption-enabled.added.md |  1 -
 ...permission-errors-manual-not-fail.fixed.md |  1 -
 ...book-direct-internet-access-field.fixed.md |  1 -
 ui/CHANGELOG.md                               | 18 ++++++++
 .../import-findings-drag-drop.added.md        |  1 -
 .../refresh-cached-permissions.fixed.md       |  1 -
 .../slack-connection-check-result.added.md    |  1 -
 .../slack-private-channel-marker.changed.md   |  1 -
 ui/changelog.d/slack-ui-feedback.changed.md   |  1 -
 45 files changed, 90 insertions(+), 41 deletions(-)
 delete mode 100644 api/changelog.d/jira-finding-labels-url.added.md
 delete mode 100644 api/changelog.d/mute-rules-current-scans.fixed.md
 delete mode 100644 mcp_server/changelog.d/mcp-app-tool-failures.added.md
 delete mode 100644 mcp_server/changelog.d/mcp-compliance-scan-or-provider.changed.md
 delete mode 100644 mcp_server/changelog.d/mcp-docs-search-swallowed-errors.fixed.md
 delete mode 100644 mcp_server/changelog.d/mcp-hub-check-provider-mismatch.fixed.md
 delete mode 100644 prowler/changelog.d/aws-partition-env-var.added.md
 delete mode 100644 prowler/changelog.d/cis-1.4-googleworkspace.added.md
 delete mode 100644 prowler/changelog.d/cloudwatch-log-group-agentcore-data-protection-policy-enabled.added.md
 delete mode 100644 prowler/changelog.d/cloudwatch-metric-filter-missing-log-group.fixed.md
 delete mode 100644 prowler/changelog.d/ecr-registry-enhanced-scanning.added.md
 delete mode 100644 prowler/changelog.d/ecr-registry-scan-frequency.fixed.md
 delete mode 100644 prowler/changelog.d/eks-cluster-vpc-cni-network-policy.added.md
 delete mode 100644 prowler/changelog.d/elasticbeanstalk-environment-no-secrets.added.md
 delete mode 100644 prowler/changelog.d/github-repository-pagination.fixed.md
 delete mode 100644 prowler/changelog.d/googleworkspace-2sv-policy-overrides.fixed.md
 delete mode 100644 prowler/changelog.d/googleworkspace-alert-center-delivery.fixed.md
 delete mode 100644 prowler/changelog.d/googleworkspace-cis-full-audit-procedures.changed.md
 delete mode 100644 prowler/changelog.d/googleworkspace-compliance-mappings.changed.md
 delete mode 100644 prowler/changelog.d/googleworkspace-password-strength-default.fixed.md
 delete mode 100644 prowler/changelog.d/guardduty-ai-protection-enabled.added.md
 delete mode 100644 prowler/changelog.d/guardduty-runtime-monitoring-enabled.added.md
 delete mode 100644 prowler/changelog.d/guardduty-unified-runtime-monitoring.fixed.md
 delete mode 100644 prowler/changelog.d/iam-agentcore-passrole-restricted.added.md
 delete mode 100644 prowler/changelog.d/iam-agentcore-workload-access-token.added.md
 delete mode 100644 prowler/changelog.d/iam-service-trust-source-to-account.added.md
 delete mode 100644 prowler/changelog.d/image-private-network-allowlist.added.md
 delete mode 100644 prowler/changelog.d/image-registry-basic-auth-fallback.fixed.md
 delete mode 100644 prowler/changelog.d/image-registry-bearer-auth-switch.fixed.md
 delete mode 100644 prowler/changelog.d/image-registry-insecure-trivy.fixed.md
 delete mode 100644 prowler/changelog.d/image-registry-non-image-oci-artifacts.fixed.md
 delete mode 100644 prowler/changelog.d/jira-finding-labels-url.added.md
 delete mode 100644 prowler/changelog.d/jira-get-issues-status.added.md
 delete mode 100644 prowler/changelog.d/memorydb-cluster-in-transit-encryption-enabled.added.md
 delete mode 100644 prowler/changelog.d/permission-errors-manual-not-fail.fixed.md
 delete mode 100644 prowler/changelog.d/sagemaker-notebook-direct-internet-access-field.fixed.md
 delete mode 100644 ui/changelog.d/import-findings-drag-drop.added.md
 delete mode 100644 ui/changelog.d/refresh-cached-permissions.fixed.md
 delete mode 100644 ui/changelog.d/slack-connection-check-result.added.md
 delete mode 100644 ui/changelog.d/slack-private-channel-marker.changed.md
 delete mode 100644 ui/changelog.d/slack-ui-feedback.changed.md

diff --git a/api/CHANGELOG.md b/api/CHANGELOG.md
index 7b05c116bc..0ab4c9bfe1 100644
--- a/api/CHANGELOG.md
+++ b/api/CHANGELOG.md
@@ -4,6 +4,18 @@ All notable changes to the **Prowler API** are documented in this file.
 
 <!-- changelog: release notes start -->
 
+## [1.42.0] (Prowler v5.41.0)
+
+### 🚀 Added
+
+- Jira issues created from Prowler Cloud now carry the `prowler`, `prowler-<provider>`, `prowler-<severity>`, `prowler-<check-id>`, and `prowler-finding-<finding-uid>` labels, a link back to the finding when `DJANGO_UI_BASE_URL` is configured, and the tenant name [(#12540)](https://github.com/prowler-cloud/prowler/pull/12540)
+
+### 🐞 Fixed
+
+- `POST /api/v1/mute-rules` now updates only each affected provider's latest completed scan and future scans, preventing historical reaggregation from flooding Celery queues [(#12681)](https://github.com/prowler-cloud/prowler/pull/12681)
+
+---
+
 ## [1.41.0] (Prowler v5.40.0)
 
 ### 🐞 Fixed
diff --git a/api/changelog.d/jira-finding-labels-url.added.md b/api/changelog.d/jira-finding-labels-url.added.md
deleted file mode 100644
index e16b26b77d..0000000000
--- a/api/changelog.d/jira-finding-labels-url.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Jira issues created from Prowler Cloud now carry the `prowler`, `prowler-<provider>`, `prowler-<severity>`, `prowler-<check-id>`, and `prowler-finding-<finding-uid>` labels, a link back to the finding when `DJANGO_UI_BASE_URL` is configured, and the tenant name
diff --git a/api/changelog.d/mute-rules-current-scans.fixed.md b/api/changelog.d/mute-rules-current-scans.fixed.md
deleted file mode 100644
index 3cfb7c973a..0000000000
--- a/api/changelog.d/mute-rules-current-scans.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-`POST /api/v1/mute-rules` now updates only each affected provider's latest completed scan and future scans, preventing historical reaggregation from flooding Celery queues
diff --git a/mcp_server/CHANGELOG.md b/mcp_server/CHANGELOG.md
index 62e0446bb0..4c6c858d28 100644
--- a/mcp_server/CHANGELOG.md
+++ b/mcp_server/CHANGELOG.md
@@ -4,6 +4,23 @@ All notable changes to the **Prowler MCP Server** are documented in this file.
 
 <!-- changelog: release notes start -->
 
+## [0.12.0] (Prowler v5.41.0)
+
+### 🚀 Added
+
+- Prowler App tools now report a failure as an MCP tool execution error (`isError: true`, explanation in `content`) instead of as a successful result carrying an `{"error": ...}` object, which clients and models read as a success [(#12532)](https://github.com/prowler-cloud/prowler/pull/12532)
+
+### 🔄 Changed
+
+- `prowler_get_compliance_framework_state_details` now rejects a call that passes both `scan_id` and `provider_id` instead of silently ignoring the provider, which could report on a scan belonging to a different provider than the one that was asked about [(#12532)](https://github.com/prowler-cloud/prowler/pull/12532)
+
+### 🐞 Fixed
+
+- `prowler_hub_get_check_code` and `prowler_hub_get_check_fixer` now report a check ID that belongs to another provider as such, naming that provider, instead of reporting the ID as one that does not exist [(#12533)](https://github.com/prowler-cloud/prowler/pull/12533)
+- `prowler_docs_search` no longer reports a failed search as zero matches or an unreadable answer as a bad search term, and `prowler_docs_get_document` no longer reports a failed fetch as a missing page [(#12534)](https://github.com/prowler-cloud/prowler/pull/12534)
+
+---
+
 ## [0.11.0] (Prowler v5.40.0)
 
 ### 🚀 Added
diff --git a/mcp_server/changelog.d/mcp-app-tool-failures.added.md b/mcp_server/changelog.d/mcp-app-tool-failures.added.md
deleted file mode 100644
index c51daa6c86..0000000000
--- a/mcp_server/changelog.d/mcp-app-tool-failures.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Prowler App tools now report a failure as an MCP tool execution error (`isError: true`, explanation in `content`) instead of as a successful result carrying an `{"error": ...}` object, which clients and models read as a success
diff --git a/mcp_server/changelog.d/mcp-compliance-scan-or-provider.changed.md b/mcp_server/changelog.d/mcp-compliance-scan-or-provider.changed.md
deleted file mode 100644
index 04eebef825..0000000000
--- a/mcp_server/changelog.d/mcp-compliance-scan-or-provider.changed.md
+++ /dev/null
@@ -1 +0,0 @@
-`prowler_get_compliance_framework_state_details` now rejects a call that passes both `scan_id` and `provider_id` instead of silently ignoring the provider, which could report on a scan belonging to a different provider than the one that was asked about
diff --git a/mcp_server/changelog.d/mcp-docs-search-swallowed-errors.fixed.md b/mcp_server/changelog.d/mcp-docs-search-swallowed-errors.fixed.md
deleted file mode 100644
index d24445ea71..0000000000
--- a/mcp_server/changelog.d/mcp-docs-search-swallowed-errors.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-`prowler_docs_search` no longer reports a failed search as zero matches or an unreadable answer as a bad search term, and `prowler_docs_get_document` no longer reports a failed fetch as a missing page
diff --git a/mcp_server/changelog.d/mcp-hub-check-provider-mismatch.fixed.md b/mcp_server/changelog.d/mcp-hub-check-provider-mismatch.fixed.md
deleted file mode 100644
index da39e914b1..0000000000
--- a/mcp_server/changelog.d/mcp-hub-check-provider-mismatch.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-`prowler_hub_get_check_code` and `prowler_hub_get_check_fixer` now report a check ID that belongs to another provider as such, naming that provider, instead of reporting the ID as one that does not exist
diff --git a/prowler/CHANGELOG.md b/prowler/CHANGELOG.md
index 401d8a7a1a..4161d195b8 100644
--- a/prowler/CHANGELOG.md
+++ b/prowler/CHANGELOG.md
@@ -4,6 +4,49 @@ All notable changes to the **Prowler SDK** are documented in this file.
 
 <!-- changelog: release notes start -->
 
+## [5.41.0] (Prowler v5.41.0)
+
+### 🚀 Added
+
+- `memorydb_cluster_in_transit_encryption_enabled` check for AWS provider, verifying MemoryDB clusters have in-transit encryption (TLS) enabled [(#12246)](https://github.com/prowler-cloud/prowler/pull/12246)
+- `elasticbeanstalk_environment_no_secrets_in_configuration` check for AWS provider, scanning the option settings of every Elastic Beanstalk environment for hardcoded secrets [(#12378)](https://github.com/prowler-cloud/prowler/pull/12378)
+- CIS Google Workspace Foundations Benchmark v1.4.0 compliance framework [(#12513)](https://github.com/prowler-cloud/prowler/pull/12513)
+- `Jira.send_finding()` returns typed creation outcomes with the issue key, immutable ID and browse URL, and supports length-safe finding and delivery-attempt labels plus marker lookup for uncertain deliveries [(#12539)](https://github.com/prowler-cloud/prowler/pull/12539)
+- `Jira.get_issues_status()` resolves issue references by immutable ID in batches and returns explicit open, done, moved, missing, forbidden or unknown outcomes without treating missing issues as deleted [(#12539)](https://github.com/prowler-cloud/prowler/pull/12539)
+- `guardduty_ai_protection_enabled` check for AWS provider, flagging GuardDuty detectors without AI Protection, which analyzes AWS CloudTrail data events from Amazon Bedrock, Amazon Bedrock AgentCore and Amazon SageMaker AI; a detector that does not report the feature is `MANUAL` rather than `FAIL` [(#12564)](https://github.com/prowler-cloud/prowler/pull/12564)
+- `guardduty_runtime_monitoring_enabled` check for AWS provider, flagging GuardDuty detectors without unified Runtime Monitoring, the only feature that covers Amazon EC2 instances and Amazon ECS on AWS Fargate tasks in addition to Amazon EKS [(#12564)](https://github.com/prowler-cloud/prowler/pull/12564)
+- `ecr_registry_enhanced_scanning_enabled` check for AWS provider, verifying that the ECR registry scan type is enhanced (Amazon Inspector, covering programming language packages and continuous rescanning) instead of basic, and reporting MANUAL when the registry scanning configuration cannot be read [(#12660)](https://github.com/prowler-cloud/prowler/pull/12660)
+- `eks_cluster_vpc_cni_network_policy_enforced` check for AWS provider, flagging EKS clusters whose Amazon VPC CNI managed add-on does not enable Kubernetes network policy enforcement, and reporting MANUAL where the EKS API cannot show the setting [(#12661)](https://github.com/prowler-cloud/prowler/pull/12661)
+- `cloudwatch_log_group_agentcore_data_protection_policy_enabled` check for AWS provider, verifying that Bedrock AgentCore log groups mask sensitive data with a CloudWatch Logs data protection policy [(#12662)](https://github.com/prowler-cloud/prowler/pull/12662)
+- `iam_policy_no_agentcore_workload_access_token_wildcard` check for AWS provider, flagging customer-managed IAM policies that allow `bedrock-agentcore:GetWorkloadAccessToken`, `GetWorkloadAccessTokenForJWT` or `GetWorkloadAccessTokenForUserId` on resources reaching workload identities other than the caller's own, which AWS documents as the only binding on the unverified user ID the token is issued for [(#12664)](https://github.com/prowler-cloud/prowler/pull/12664)
+- `iam_policy_passrole_to_bedrock_agentcore_restricted` check for AWS provider, flagging customer-managed IAM policies that allow `iam:PassRole` over every role where the passed role can reach Bedrock AgentCore, so any principal holding the policy can run agent code under any role in the account [(#12664)](https://github.com/prowler-cloud/prowler/pull/12664)
+- `iam_role_service_trust_restricts_source_to_account` check for AWS provider, flagging IAM roles whose trust policy lets an AWS service principal assume the role without confining the request to a specific source account, including trust policies that `iam_role_cross_service_confused_deputy_prevention` does not evaluate [(#12664)](https://github.com/prowler-cloud/prowler/pull/12664)
+- `PROWLER_IMAGE_PROVIDER_ALLOWED_PRIVATE_NETWORKS` environment variable so the image provider can reach container registries on allowlisted private networks, keeping every other non-public address blocked [(#12678)](https://github.com/prowler-cloud/prowler/pull/12678)
+- `PROWLER_AWS_PARTITION` environment variable to select the AWS partition used for STS credential validation and scan bootstrap, with a clear error when the account belongs to a different partition [(#12680)](https://github.com/prowler-cloud/prowler/pull/12680)
+
+### 🔄 Changed
+
+- Google Workspace checks mapped to CIS evaluate the full audit procedure instead of a single condition, so Gmail spoofing actions, 2-Step Verification, password expiration and alert severity left on Google's defaults no longer pass [(#12513)](https://github.com/prowler-cloud/prowler/pull/12513)
+- `security_login_challenges_configured` and `security_2sv_enforced` unmapped from CIS Google Workspace 4.1.4.1 and CISA SCuBA 0.6 `GWS.COMMONCONTROLS.1.1`, whose Post-SSO verification and phishing-resistant MFA requirements neither check can prove [(#12513)](https://github.com/prowler-cloud/prowler/pull/12513)
+
+### 🐞 Fixed
+
+- GitHub repository discovery for unscoped scans now paginates beyond the first 100 accessible repositories instead of silently scanning only the first page [(#12460)](https://github.com/prowler-cloud/prowler/pull/12460)
+- `rules_*_alert_configured` checks no longer pass a rule whose delivery to the alert center is disabled, the setting behind the benchmark's "Ensure that Alerts is set to On" [(#12513)](https://github.com/prowler-cloud/prowler/pull/12513)
+- `security_password_policy_strong` no longer fails a domain that never touched the password strength setting: Google enforces strong passwords by default, so an unset value is the secure default and not a missing configuration [(#12513)](https://github.com/prowler-cloud/prowler/pull/12513)
+- `security_2sv_enforced` and `security_2sv_hardware_keys_admins` report MANUAL instead of judging domain-wide values that a group or a sub-organizational unit overrides, or that were dropped because the root organizational unit could not be resolved; a domain-wide failure is still reported as such, with the override noted [(#12513)](https://github.com/prowler-cloud/prowler/pull/12513)
+- `ecr_registry_scan_images_on_push_enabled` no longer passes a registry whose scanning rules are all `MANUAL`, nor describes a `CONTINUOUS_SCAN` registry as scanning on push; each rule's `scanFrequency` is now read instead of inferred from a rule's presence [(#12560)](https://github.com/prowler-cloud/prowler/pull/12560)
+- CloudWatch log metric filter checks no longer crash with `AttributeError` when the account has a metric filter whose log group was not retrieved [(#12561)](https://github.com/prowler-cloud/prowler/pull/12561)
+- `guardduty_eks_runtime_monitoring_enabled` no longer reports `FAIL` for detectors that use unified Runtime Monitoring; the GuardDuty service now reads the `RUNTIME_MONITORING` feature, which is mutually exclusive with `EKS_RUNTIME_MONITORING` and already covers Amazon EKS [(#12564)](https://github.com/prowler-cloud/prowler/pull/12564)
+- Checks no longer report `FAIL` when the scanning identity lacks permissions, an API is not enabled or a feature is not licensed; they now emit a single `MANUAL` finding naming what is required, across 28 M365, Azure, AWS and GCP checks [(#12645)](https://github.com/prowler-cloud/prowler/pull/12645)
+- `sagemaker_notebook_instance_without_direct_internet_access_configured` check logic to read the `DirectInternetAccess` setting instead of `RootAccess`, failing a notebook instance with direct internet access enabled even when root access is disabled [(#12659)](https://github.com/prowler-cloud/prowler/pull/12659)
+- Basic authentication fallback in the image provider when a registry rejects the negotiated bearer token, so registries like Harbor that guard catalog listing behind Basic can be enumerated [(#12678)](https://github.com/prowler-cloud/prowler/pull/12678)
+- Registry catalog listing when the server answers with a Bearer challenge after negotiating Basic (or anonymous) authentication, switching to a bearer token obtained from the challenge instead of failing [(#12678)](https://github.com/prowler-cloud/prowler/pull/12678)
+- `--registry-insecure` now propagates to Trivy via `TRIVY_INSECURE`, so images in registries with self-signed certificates can be pulled and scanned, not just enumerated [(#12678)](https://github.com/prowler-cloud/prowler/pull/12678)
+- Registry scans in the Image provider now skip non-image OCI artifacts (Helm charts, cosign signatures, SBOM attestations) and no longer abort the whole scan when Trivy fails on a single discovered image; registry enumeration also runs in parallel instead of one request at a time [(#12695)](https://github.com/prowler-cloud/prowler/pull/12695)
+
+---
+
 ## [5.40.0] (Prowler v5.40.0)
 
 ### 🚀 Added
diff --git a/prowler/changelog.d/aws-partition-env-var.added.md b/prowler/changelog.d/aws-partition-env-var.added.md
deleted file mode 100644
index c94ed6b23d..0000000000
--- a/prowler/changelog.d/aws-partition-env-var.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`PROWLER_AWS_PARTITION` environment variable to select the AWS partition used for STS credential validation and scan bootstrap, with a clear error when the account belongs to a different partition
diff --git a/prowler/changelog.d/cis-1.4-googleworkspace.added.md b/prowler/changelog.d/cis-1.4-googleworkspace.added.md
deleted file mode 100644
index 4b3fbc58c7..0000000000
--- a/prowler/changelog.d/cis-1.4-googleworkspace.added.md
+++ /dev/null
@@ -1 +0,0 @@
-CIS Google Workspace Foundations Benchmark v1.4.0 compliance framework
diff --git a/prowler/changelog.d/cloudwatch-log-group-agentcore-data-protection-policy-enabled.added.md b/prowler/changelog.d/cloudwatch-log-group-agentcore-data-protection-policy-enabled.added.md
deleted file mode 100644
index 5e68d03676..0000000000
--- a/prowler/changelog.d/cloudwatch-log-group-agentcore-data-protection-policy-enabled.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`cloudwatch_log_group_agentcore_data_protection_policy_enabled` check for AWS provider, verifying that Bedrock AgentCore log groups mask sensitive data with a CloudWatch Logs data protection policy
diff --git a/prowler/changelog.d/cloudwatch-metric-filter-missing-log-group.fixed.md b/prowler/changelog.d/cloudwatch-metric-filter-missing-log-group.fixed.md
deleted file mode 100644
index b17ec3af4b..0000000000
--- a/prowler/changelog.d/cloudwatch-metric-filter-missing-log-group.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-CloudWatch log metric filter checks no longer crash with `AttributeError` when the account has a metric filter whose log group was not retrieved
diff --git a/prowler/changelog.d/ecr-registry-enhanced-scanning.added.md b/prowler/changelog.d/ecr-registry-enhanced-scanning.added.md
deleted file mode 100644
index e4624d5859..0000000000
--- a/prowler/changelog.d/ecr-registry-enhanced-scanning.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`ecr_registry_enhanced_scanning_enabled` check for AWS provider, verifying that the ECR registry scan type is enhanced (Amazon Inspector, covering programming language packages and continuous rescanning) instead of basic, and reporting MANUAL when the registry scanning configuration cannot be read
diff --git a/prowler/changelog.d/ecr-registry-scan-frequency.fixed.md b/prowler/changelog.d/ecr-registry-scan-frequency.fixed.md
deleted file mode 100644
index 38fedb90be..0000000000
--- a/prowler/changelog.d/ecr-registry-scan-frequency.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-`ecr_registry_scan_images_on_push_enabled` no longer passes a registry whose scanning rules are all `MANUAL`, nor describes a `CONTINUOUS_SCAN` registry as scanning on push; each rule's `scanFrequency` is now read instead of inferred from a rule's presence
diff --git a/prowler/changelog.d/eks-cluster-vpc-cni-network-policy.added.md b/prowler/changelog.d/eks-cluster-vpc-cni-network-policy.added.md
deleted file mode 100644
index 7002eae1d9..0000000000
--- a/prowler/changelog.d/eks-cluster-vpc-cni-network-policy.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`eks_cluster_vpc_cni_network_policy_enforced` check for AWS provider, flagging EKS clusters whose Amazon VPC CNI managed add-on does not enable Kubernetes network policy enforcement, and reporting MANUAL where the EKS API cannot show the setting
diff --git a/prowler/changelog.d/elasticbeanstalk-environment-no-secrets.added.md b/prowler/changelog.d/elasticbeanstalk-environment-no-secrets.added.md
deleted file mode 100644
index 9f85bf8550..0000000000
--- a/prowler/changelog.d/elasticbeanstalk-environment-no-secrets.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`elasticbeanstalk_environment_no_secrets_in_configuration` check for AWS provider, scanning the option settings of every Elastic Beanstalk environment for hardcoded secrets
diff --git a/prowler/changelog.d/github-repository-pagination.fixed.md b/prowler/changelog.d/github-repository-pagination.fixed.md
deleted file mode 100644
index e9add3d1a1..0000000000
--- a/prowler/changelog.d/github-repository-pagination.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-GitHub repository discovery for unscoped scans now paginates beyond the first 100 accessible repositories instead of silently scanning only the first page
diff --git a/prowler/changelog.d/googleworkspace-2sv-policy-overrides.fixed.md b/prowler/changelog.d/googleworkspace-2sv-policy-overrides.fixed.md
deleted file mode 100644
index 759f6c9b52..0000000000
--- a/prowler/changelog.d/googleworkspace-2sv-policy-overrides.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-`security_2sv_enforced` and `security_2sv_hardware_keys_admins` report MANUAL instead of judging domain-wide values that a group or a sub-organizational unit overrides, or that were dropped because the root organizational unit could not be resolved; a domain-wide failure is still reported as such, with the override noted
diff --git a/prowler/changelog.d/googleworkspace-alert-center-delivery.fixed.md b/prowler/changelog.d/googleworkspace-alert-center-delivery.fixed.md
deleted file mode 100644
index 57e591c461..0000000000
--- a/prowler/changelog.d/googleworkspace-alert-center-delivery.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-`rules_*_alert_configured` checks no longer pass a rule whose delivery to the alert center is disabled, the setting behind the benchmark's "Ensure that Alerts is set to On"
diff --git a/prowler/changelog.d/googleworkspace-cis-full-audit-procedures.changed.md b/prowler/changelog.d/googleworkspace-cis-full-audit-procedures.changed.md
deleted file mode 100644
index c99ad0f0e4..0000000000
--- a/prowler/changelog.d/googleworkspace-cis-full-audit-procedures.changed.md
+++ /dev/null
@@ -1 +0,0 @@
-Google Workspace checks mapped to CIS evaluate the full audit procedure instead of a single condition, so Gmail spoofing actions, 2-Step Verification, password expiration and alert severity left on Google's defaults no longer pass
diff --git a/prowler/changelog.d/googleworkspace-compliance-mappings.changed.md b/prowler/changelog.d/googleworkspace-compliance-mappings.changed.md
deleted file mode 100644
index b4fb6924d2..0000000000
--- a/prowler/changelog.d/googleworkspace-compliance-mappings.changed.md
+++ /dev/null
@@ -1 +0,0 @@
-`security_login_challenges_configured` and `security_2sv_enforced` unmapped from CIS Google Workspace 4.1.4.1 and CISA SCuBA 0.6 `GWS.COMMONCONTROLS.1.1`, whose Post-SSO verification and phishing-resistant MFA requirements neither check can prove
diff --git a/prowler/changelog.d/googleworkspace-password-strength-default.fixed.md b/prowler/changelog.d/googleworkspace-password-strength-default.fixed.md
deleted file mode 100644
index 0c80b92d24..0000000000
--- a/prowler/changelog.d/googleworkspace-password-strength-default.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-`security_password_policy_strong` no longer fails a domain that never touched the password strength setting: Google enforces strong passwords by default, so an unset value is the secure default and not a missing configuration
diff --git a/prowler/changelog.d/guardduty-ai-protection-enabled.added.md b/prowler/changelog.d/guardduty-ai-protection-enabled.added.md
deleted file mode 100644
index 8c72ef0b15..0000000000
--- a/prowler/changelog.d/guardduty-ai-protection-enabled.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`guardduty_ai_protection_enabled` check for AWS provider, flagging GuardDuty detectors without AI Protection, which analyzes AWS CloudTrail data events from Amazon Bedrock, Amazon Bedrock AgentCore and Amazon SageMaker AI; a detector that does not report the feature is `MANUAL` rather than `FAIL`
diff --git a/prowler/changelog.d/guardduty-runtime-monitoring-enabled.added.md b/prowler/changelog.d/guardduty-runtime-monitoring-enabled.added.md
deleted file mode 100644
index b65d5eb8ae..0000000000
--- a/prowler/changelog.d/guardduty-runtime-monitoring-enabled.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`guardduty_runtime_monitoring_enabled` check for AWS provider, flagging GuardDuty detectors without unified Runtime Monitoring, the only feature that covers Amazon EC2 instances and Amazon ECS on AWS Fargate tasks in addition to Amazon EKS
diff --git a/prowler/changelog.d/guardduty-unified-runtime-monitoring.fixed.md b/prowler/changelog.d/guardduty-unified-runtime-monitoring.fixed.md
deleted file mode 100644
index a3069a2677..0000000000
--- a/prowler/changelog.d/guardduty-unified-runtime-monitoring.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-`guardduty_eks_runtime_monitoring_enabled` no longer reports `FAIL` for detectors that use unified Runtime Monitoring; the GuardDuty service now reads the `RUNTIME_MONITORING` feature, which is mutually exclusive with `EKS_RUNTIME_MONITORING` and already covers Amazon EKS
diff --git a/prowler/changelog.d/iam-agentcore-passrole-restricted.added.md b/prowler/changelog.d/iam-agentcore-passrole-restricted.added.md
deleted file mode 100644
index 1f8337db07..0000000000
--- a/prowler/changelog.d/iam-agentcore-passrole-restricted.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`iam_policy_passrole_to_bedrock_agentcore_restricted` check for AWS provider, flagging customer-managed IAM policies that allow `iam:PassRole` over every role where the passed role can reach Bedrock AgentCore, so any principal holding the policy can run agent code under any role in the account
diff --git a/prowler/changelog.d/iam-agentcore-workload-access-token.added.md b/prowler/changelog.d/iam-agentcore-workload-access-token.added.md
deleted file mode 100644
index 7aeb272764..0000000000
--- a/prowler/changelog.d/iam-agentcore-workload-access-token.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`iam_policy_no_agentcore_workload_access_token_wildcard` check for AWS provider, flagging customer-managed IAM policies that allow `bedrock-agentcore:GetWorkloadAccessToken`, `GetWorkloadAccessTokenForJWT` or `GetWorkloadAccessTokenForUserId` on resources reaching workload identities other than the caller's own, which AWS documents as the only binding on the unverified user ID the token is issued for
diff --git a/prowler/changelog.d/iam-service-trust-source-to-account.added.md b/prowler/changelog.d/iam-service-trust-source-to-account.added.md
deleted file mode 100644
index e6b3101605..0000000000
--- a/prowler/changelog.d/iam-service-trust-source-to-account.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`iam_role_service_trust_restricts_source_to_account` check for AWS provider, flagging IAM roles whose trust policy lets an AWS service principal assume the role without confining the request to a specific source account, including trust policies that `iam_role_cross_service_confused_deputy_prevention` does not evaluate
diff --git a/prowler/changelog.d/image-private-network-allowlist.added.md b/prowler/changelog.d/image-private-network-allowlist.added.md
deleted file mode 100644
index fc9d1cc39d..0000000000
--- a/prowler/changelog.d/image-private-network-allowlist.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`PROWLER_IMAGE_PROVIDER_ALLOWED_PRIVATE_NETWORKS` environment variable so the image provider can reach container registries on allowlisted private networks, keeping every other non-public address blocked
diff --git a/prowler/changelog.d/image-registry-basic-auth-fallback.fixed.md b/prowler/changelog.d/image-registry-basic-auth-fallback.fixed.md
deleted file mode 100644
index d5ff396694..0000000000
--- a/prowler/changelog.d/image-registry-basic-auth-fallback.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Basic authentication fallback in the image provider when a registry rejects the negotiated bearer token, so registries like Harbor that guard catalog listing behind Basic can be enumerated
diff --git a/prowler/changelog.d/image-registry-bearer-auth-switch.fixed.md b/prowler/changelog.d/image-registry-bearer-auth-switch.fixed.md
deleted file mode 100644
index 9b76bf292c..0000000000
--- a/prowler/changelog.d/image-registry-bearer-auth-switch.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Registry catalog listing when the server answers with a Bearer challenge after negotiating Basic (or anonymous) authentication, switching to a bearer token obtained from the challenge instead of failing
diff --git a/prowler/changelog.d/image-registry-insecure-trivy.fixed.md b/prowler/changelog.d/image-registry-insecure-trivy.fixed.md
deleted file mode 100644
index 637852e147..0000000000
--- a/prowler/changelog.d/image-registry-insecure-trivy.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-`--registry-insecure` now propagates to Trivy via `TRIVY_INSECURE`, so images in registries with self-signed certificates can be pulled and scanned, not just enumerated
diff --git a/prowler/changelog.d/image-registry-non-image-oci-artifacts.fixed.md b/prowler/changelog.d/image-registry-non-image-oci-artifacts.fixed.md
deleted file mode 100644
index 518c7d1926..0000000000
--- a/prowler/changelog.d/image-registry-non-image-oci-artifacts.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Registry scans in the Image provider now skip non-image OCI artifacts (Helm charts, cosign signatures, SBOM attestations) and no longer abort the whole scan when Trivy fails on a single discovered image; registry enumeration also runs in parallel instead of one request at a time
diff --git a/prowler/changelog.d/jira-finding-labels-url.added.md b/prowler/changelog.d/jira-finding-labels-url.added.md
deleted file mode 100644
index 16266aba99..0000000000
--- a/prowler/changelog.d/jira-finding-labels-url.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`Jira.send_finding()` returns typed creation outcomes with the issue key, immutable ID and browse URL, and supports length-safe finding and delivery-attempt labels plus marker lookup for uncertain deliveries
diff --git a/prowler/changelog.d/jira-get-issues-status.added.md b/prowler/changelog.d/jira-get-issues-status.added.md
deleted file mode 100644
index 4926418e7a..0000000000
--- a/prowler/changelog.d/jira-get-issues-status.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`Jira.get_issues_status()` resolves issue references by immutable ID in batches and returns explicit open, done, moved, missing, forbidden or unknown outcomes without treating missing issues as deleted
diff --git a/prowler/changelog.d/memorydb-cluster-in-transit-encryption-enabled.added.md b/prowler/changelog.d/memorydb-cluster-in-transit-encryption-enabled.added.md
deleted file mode 100644
index 90ce26d446..0000000000
--- a/prowler/changelog.d/memorydb-cluster-in-transit-encryption-enabled.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`memorydb_cluster_in_transit_encryption_enabled` check for AWS provider, verifying MemoryDB clusters have in-transit encryption (TLS) enabled
diff --git a/prowler/changelog.d/permission-errors-manual-not-fail.fixed.md b/prowler/changelog.d/permission-errors-manual-not-fail.fixed.md
deleted file mode 100644
index b4fd4660c9..0000000000
--- a/prowler/changelog.d/permission-errors-manual-not-fail.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Checks no longer report `FAIL` when the scanning identity lacks permissions, an API is not enabled or a feature is not licensed; they now emit a single `MANUAL` finding naming what is required, across 28 M365, Azure, AWS and GCP checks
diff --git a/prowler/changelog.d/sagemaker-notebook-direct-internet-access-field.fixed.md b/prowler/changelog.d/sagemaker-notebook-direct-internet-access-field.fixed.md
deleted file mode 100644
index 919e15c548..0000000000
--- a/prowler/changelog.d/sagemaker-notebook-direct-internet-access-field.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-`sagemaker_notebook_instance_without_direct_internet_access_configured` check logic to read the `DirectInternetAccess` setting instead of `RootAccess`, failing a notebook instance with direct internet access enabled even when root access is disabled
diff --git a/ui/CHANGELOG.md b/ui/CHANGELOG.md
index c3c655e442..eeadba64b8 100644
--- a/ui/CHANGELOG.md
+++ b/ui/CHANGELOG.md
@@ -4,6 +4,24 @@ All notable changes to the **Prowler UI** are documented in this file.
 
 <!-- changelog: release notes start -->
 
+## [1.41.0] (Prowler v5.41.0)
+
+### 🚀 Added
+
+- Finding-report imports from Scans for Cloud and Private Cloud deployments [(#12554)](https://github.com/prowler-cloud/prowler/pull/12554)
+- Slack integration: the connection check leaves its result on the card instead of only in a toast, naming the channel Slack refused or the channels it reached (Prowler Cloud only) [(#12677)](https://github.com/prowler-cloud/prowler/pull/12677)
+
+### 🔄 Changed
+
+- Slack integration: the bot is referred to as `@Prowler Cloud`, identifiers are set as inline code, and the private-channel hint links to its docs (Prowler Cloud only) [(#12677)](https://github.com/prowler-cloud/prowler/pull/12677)
+- Slack integration: a selected private channel carries the same visible `Private` badge as the channel list, replacing the lock icon on the chip (Prowler Cloud only) [(#12677)](https://github.com/prowler-cloud/prowler/pull/12677)
+
+### 🐞 Fixed
+
+- Cached permissions now refresh from `/users/me?include=roles` after access token rotation [(#12640)](https://github.com/prowler-cloud/prowler/pull/12640)
+
+---
+
 ## [1.40.0] (Prowler v5.40.0)
 
 ### 🚀 Added
diff --git a/ui/changelog.d/import-findings-drag-drop.added.md b/ui/changelog.d/import-findings-drag-drop.added.md
deleted file mode 100644
index ee9c9b931c..0000000000
--- a/ui/changelog.d/import-findings-drag-drop.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Finding-report imports from Scans for Cloud and Private Cloud deployments
diff --git a/ui/changelog.d/refresh-cached-permissions.fixed.md b/ui/changelog.d/refresh-cached-permissions.fixed.md
deleted file mode 100644
index 2a93ce6f29..0000000000
--- a/ui/changelog.d/refresh-cached-permissions.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Cached permissions now refresh from `/users/me?include=roles` after access token rotation
diff --git a/ui/changelog.d/slack-connection-check-result.added.md b/ui/changelog.d/slack-connection-check-result.added.md
deleted file mode 100644
index f671f90151..0000000000
--- a/ui/changelog.d/slack-connection-check-result.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Slack integration: the connection check leaves its result on the card instead of only in a toast, naming the channel Slack refused or the channels it reached (Prowler Cloud only)
diff --git a/ui/changelog.d/slack-private-channel-marker.changed.md b/ui/changelog.d/slack-private-channel-marker.changed.md
deleted file mode 100644
index 0c25848b5a..0000000000
--- a/ui/changelog.d/slack-private-channel-marker.changed.md
+++ /dev/null
@@ -1 +0,0 @@
-Slack integration: a selected private channel carries the same visible `Private` badge as the channel list, replacing the lock icon on the chip (Prowler Cloud only)
diff --git a/ui/changelog.d/slack-ui-feedback.changed.md b/ui/changelog.d/slack-ui-feedback.changed.md
deleted file mode 100644
index 33708de1b0..0000000000
--- a/ui/changelog.d/slack-ui-feedback.changed.md
+++ /dev/null
@@ -1 +0,0 @@
-Slack integration: the bot is referred to as `@Prowler Cloud`, identifiers are set as inline code, and the private-channel hint links to its docs (Prowler Cloud only)

From f013a5e1adc7570b575a36e249d360ef2f49cc23 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Wed, 2 Sep 2026 13:51:45 +0200
Subject: [PATCH 26/77] chore(changelog): v5.41.0 highlights (#12709)

Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
---
 docs/changelog.mdx                            |  89 ++++++++++++++++++
 .../import-findings-button.png                | Bin 0 -> 153459 bytes
 .../import-findings-dialog.png                | Bin 0 -> 172689 bytes
 .../providers/image/getting-started-image.mdx |   2 +-
 .../user-guide/tutorials/prowler-app-rbac.mdx |   2 +-
 .../tutorials/prowler-import-findings.mdx     |  28 +++++-
 6 files changed, 116 insertions(+), 5 deletions(-)
 create mode 100644 docs/images/prowler-app/import-findings/import-findings-button.png
 create mode 100644 docs/images/prowler-app/import-findings/import-findings-dialog.png

diff --git a/docs/changelog.mdx b/docs/changelog.mdx
index 68e93b9a94..40df5cb9df 100644
--- a/docs/changelog.mdx
+++ b/docs/changelog.mdx
@@ -4,6 +4,95 @@ description: "New features and improvements in each Prowler release"
 rss: true
 ---
 
+<Update label="v5.41.0" description="September 2, 2026">
+  ### 📥 Scans — Import Findings from the Browser
+
+  <Note>
+  This feature is available exclusively in **Prowler Cloud** and **Prowler Private Cloud** with a [subscription](https://prowler.com/pricing).
+  </Note>
+
+  Findings produced outside the platform, by the Prowler CLI or a CI pipeline, can now be brought into the app without leaving the browser. The Scans page gains an "Import Findings" dialog that takes a Prowler `.ocsf.json` report by drag-and-drop or file picker, hands it to the ingestion API and tracks the job to completion, reporting how many records were processed and how many were invalid. Files that are not a `.ocsf.json` report, or are empty, are refused before any upload starts, and a rejected upload or a failed status poll can be retried in place. The dialog is available to roles holding the Manage Ingestions permission.
+
+  ![Import Findings button on the Scans page](/images/prowler-app/import-findings/import-findings-button.png)
+
+  ![Import findings dialog with the drag-and-drop area](/images/prowler-app/import-findings/import-findings-dialog.png)
+
+  Read more in the [Import Findings documentation](https://docs.prowler.com/user-guide/tutorials/prowler-import-findings#using-the-ui).
+
+  ### 🎫 Jira Integration — Finding Reference in Every Issue
+
+  Every Jira issue created from a finding now carries a stable reference back to it. Issues are labeled `prowler`, `prowler-<provider>`, `prowler-<severity>`, `prowler-<check-id>` and `prowler-finding-<finding-uid>`, so they can be filtered, searched with JQL or matched by automation; labels are sanitized to Jira's limits so a long or unusual value never blocks issue creation. The issue also links back to the finding in Prowler, filtered by its UID so the link keeps working after later scans, and names the Prowler organization that sent it. Prowler Cloud always includes the link; Prowler Local Server enables it by setting `DJANGO_UI_BASE_URL` in the API environment.
+
+  Read more in the [Jira integration documentation](https://docs.prowler.com/user-guide/tutorials/prowler-app-jira-integration).
+
+  ### 📚 Compliance — CIS Google Workspace Foundations Benchmark v1.4.0
+
+  Prowler now ships the CIS Google Workspace Foundations Benchmark v1.4.0. Alongside the new framework, the Google Workspace checks mapped to CIS were reworked to evaluate the benchmark's full audit procedure instead of a single condition, so Gmail spoofing actions, 2-Step Verification, password expiration and alert severity left on Google's defaults no longer pass. Expect new `FAIL` findings on domains that rely on those defaults. Three accuracy fixes also land:
+
+  - `security_2sv_enforced` and `security_2sv_hardware_keys_admins` report `MANUAL` instead of judging domain-wide values that a group or a sub-organizational unit overrides; a domain-wide failure is still reported as such, with the override noted.
+  - `rules_*_alert_configured` no longer passes a rule whose delivery to the alert center is disabled.
+  - `security_password_policy_strong` no longer fails a domain that never touched the password strength setting, since Google enforces strong passwords by default.
+
+  `security_login_challenges_configured` was unmapped from CIS Google Workspace requirement 4.1.4.1 (Post-SSO verification) and `security_2sv_enforced` from CISA SCuBA `GWS.COMMONCONTROLS.1.1` (phishing-resistant MFA), because neither check can prove what those requirements ask for.
+
+  Read more in the [Compliance documentation](https://docs.prowler.com/user-guide/compliance/tutorials/compliance).
+
+  ### 🔍 Checks
+
+  Ten new AWS checks land in this release, eight of them contributed by @tamg-aws. Thank you!
+
+  #### Amazon Bedrock AgentCore
+
+  - `iam_policy_passrole_to_bedrock_agentcore_restricted` flags customer-managed IAM policies that allow `iam:PassRole` over every role where the passed role can reach Bedrock AgentCore, so any principal holding the policy could run agent code under any role in the account.
+  - `iam_policy_no_agentcore_workload_access_token_wildcard` flags customer-managed IAM policies that allow `bedrock-agentcore:GetWorkloadAccessToken`, `GetWorkloadAccessTokenForJWT` or `GetWorkloadAccessTokenForUserId` on resources reaching workload identities other than the caller's own.
+  - `cloudwatch_log_group_agentcore_data_protection_policy_enabled` verifies that Bedrock AgentCore log groups mask sensitive data with a CloudWatch Logs data protection policy. The log group prefixes are configurable through `agentcore_log_group_name_prefixes` in `config.yaml`.
+
+  #### Amazon GuardDuty
+
+  - `guardduty_runtime_monitoring_enabled` flags detectors without unified Runtime Monitoring, the only feature that covers Amazon EC2 instances and Amazon ECS on AWS Fargate tasks in addition to Amazon EKS.
+  - `guardduty_ai_protection_enabled` flags detectors without AI Protection, which analyzes CloudTrail data events from Amazon Bedrock, Amazon Bedrock AgentCore and Amazon SageMaker AI. A detector that does not report the feature is `MANUAL` rather than `FAIL`.
+
+  `guardduty_eks_runtime_monitoring_enabled` no longer reports `FAIL` for detectors that use unified Runtime Monitoring, which is mutually exclusive with `EKS_RUNTIME_MONITORING` and already covers Amazon EKS.
+
+  #### Amazon ECR and EKS
+
+  - `ecr_registry_enhanced_scanning_enabled` verifies that the ECR registry scan type is enhanced (Amazon Inspector, covering programming language packages and continuous rescanning) instead of basic, reporting `MANUAL` when the registry scanning configuration cannot be read.
+  - `eks_cluster_vpc_cni_network_policy_enforced` flags EKS clusters whose Amazon VPC CNI managed add-on does not enable Kubernetes network policy enforcement, reporting `MANUAL` where the EKS API cannot show the setting.
+
+  #### AWS IAM, Elastic Beanstalk and MemoryDB
+
+  - `iam_role_service_trust_restricts_source_to_account` flags IAM roles whose trust policy lets an AWS service principal assume the role without confining the request to a specific source account, including trust policies that `iam_role_cross_service_confused_deputy_prevention` does not evaluate.
+  - `elasticbeanstalk_environment_no_secrets_in_configuration` scans the option settings of every Elastic Beanstalk environment for hardcoded secrets. Thanks to @haneul-24!
+  - `memorydb_cluster_in_transit_encryption_enabled` verifies that MemoryDB clusters have in-transit encryption (TLS) enabled. Thanks to @UTKARSH698!
+
+  Explore all AWS checks at [Prowler Hub](https://hub.prowler.com/check?provider=aws).
+
+  ### 🐳 Image Provider — On-Premises Registries
+
+  Scanning registries that live on private networks is now supported end to end. `PROWLER_IMAGE_PROVIDER_ALLOWED_PRIVATE_NETWORKS` takes a comma-separated list of IPs and CIDRs the provider may reach, while every other non-public address, including link-local and loopback, stays blocked by the SSRF guard. Authentication negotiation is also more resilient: the provider falls back to Basic when a registry such as Harbor rejects the negotiated bearer token, and switches to a bearer token when the server answers a Basic or anonymous request with a Bearer challenge. `--registry-insecure` now propagates to Trivy through `TRIVY_INSECURE`, so images behind self-signed certificates can be pulled and scanned, not just enumerated. The flag now disables certificate validation for the image pull too, so keep it for trusted internal registries only.
+
+  Registry scans also skip non-image OCI artifacts (Helm charts, cosign signatures, SBOM attestations), no longer abort the whole scan when Trivy fails on a single image, and enumerate repositories in parallel instead of one request at a time.
+
+  Read more in the [Image provider documentation](https://docs.prowler.com/user-guide/providers/image/getting-started-image#on-premises-registries-and-private-networks).
+
+  ### 🛠️ Prowler MCP Server — Tool Failures Reported as Errors
+
+  Prowler Local Server tools now report a failure as an MCP tool execution error (`isError: true`, with the explanation in `content`) instead of a successful result carrying an `{"error": ...}` object, which clients and models read as a success. The Prowler Documentation and Prowler Hub tools follow the same rule: `prowler_docs_search` no longer reports a failed search as zero matches, `prowler_docs_get_document` no longer reports a failed fetch as a missing page, and `prowler_hub_get_check_code` and `prowler_hub_get_check_fixer` now name the provider a check ID actually belongs to instead of reporting it as nonexistent. `prowler_get_compliance_framework_state_details` also rejects a call that passes both `scan_id` and `provider_id` instead of silently ignoring the provider.
+
+  Read more in the [Prowler MCP documentation](https://docs.prowler.com/getting-started/products/prowler-mcp).
+
+  ### 🙌 External Contributors
+
+  Thank you to our community contributors for this release!
+
+  - @tamg-aws: GuardDuty unified Runtime Monitoring and AI Protection checks ([#12564](https://github.com/prowler-cloud/prowler/pull/12564)), EKS VPC CNI network policy check ([#12661](https://github.com/prowler-cloud/prowler/pull/12661)), ECR enhanced scanning check ([#12660](https://github.com/prowler-cloud/prowler/pull/12660)), Bedrock AgentCore IAM and service trust checks ([#12664](https://github.com/prowler-cloud/prowler/pull/12664)), AgentCore log group data protection check ([#12662](https://github.com/prowler-cloud/prowler/pull/12662)), and fixes to ECR scan frequency ([#12560](https://github.com/prowler-cloud/prowler/pull/12560)), CloudWatch metric filters ([#12561](https://github.com/prowler-cloud/prowler/pull/12561)) and SageMaker direct internet access ([#12659](https://github.com/prowler-cloud/prowler/pull/12659))
+  - @haneul-24: AWS `elasticbeanstalk_environment_no_secrets_in_configuration` check ([#12378](https://github.com/prowler-cloud/prowler/pull/12378))
+  - @UTKARSH698: AWS `memorydb_cluster_in_transit_encryption_enabled` check ([#12246](https://github.com/prowler-cloud/prowler/pull/12246))
+  - @ye11oc4t: GitHub repository discovery pagination for unscoped scans ([#12460](https://github.com/prowler-cloud/prowler/pull/12460))
+
+  See the [full release notes on GitHub](https://github.com/prowler-cloud/prowler/releases/tag/5.41.0) for the complete list of changes.
+</Update>
+
 <Update label="v5.40.0" description="August 28, 2026">
   ### 💬 Slack Integration — Alert Channel Destinations
 
diff --git a/docs/images/prowler-app/import-findings/import-findings-button.png b/docs/images/prowler-app/import-findings/import-findings-button.png
new file mode 100644
index 0000000000000000000000000000000000000000..adc7b2571fc5a76f2be6998d394307130321de40
GIT binary patch
literal 153459
zcmZ_01yodB`v;0hhjdG)FocwJcMC{&44p$rhjc1P3=N`)fWXk*Aq<^EhYm<1-FN){
z-}`=g@4Bor>l|jCIkWe(pZ$A&Pfe_rh9WK&B^DAA60Wk6oHh~?3KR+HaS;X@;+=$j
z)d9rm5lCB62I=eQ)1QccoNW!1f$Hi=?1*a&B$P*#NT|PWLA)d$QT=<Z@Q4lR@qgY&
zMnZ~qKtlQNJsODf@4vT**YD5#-x;|8`JX#bpaqZrxqe*q`_`oaVRFO?(_P6BgoH%O
z{QLDtS)1ty2}ue`Sx#E_^`pHu%z~%#br0qjaG)jz{aYkVCkz4<Ica7oWHDO;Vrk+o
zRFa^v#4SR38p{9~LVT2$OGhOkXQhqRrJ8yqN^~*5PQ@coY*uCHFqv#t5ANm~{2f1)
zlmvX*J>^~ITMch&n<)kD=!mO^fSQ}_woHAgwb<I)9H&3ObNpVl4m^n^%hPw7tKi!$
zz5l5^nbmR}D(KOmLTHV%IQ>|qMf&i4%tY$zSK6*zc~jd)zueJulcx<F$(9ob8Shj?
ziLQ5lCOg-EdxUP+{-u3}#U=VF<y%8ajzX7PkIFvy6?SaL4=xu&r%$#n#*bv@828Lg
zq7z33aB2&UdY&vMHh-KpcWFg?Km3dnzO|d=_b_wDuo6X9Q(5>Ls8NST872Zd6#gOb
z>7Fqe;03X^C8T@wzk`i2Oai6NVVG3F;r2DrL)O{uOnfDv#2~%j{!@i@WdHj}qFV4q
zq_J+yvt|r=qH3L$78-$qN=GNMO@b%gKEt_Db+caPmFY1z1jV6;QkA5pCd6n&vE?9M
zj{Pb{V=S)QM9IPmf)#2%|9h|2Bp-zhvV?pZ5%B|YnF%!!%Dx6Z6R2O-812bDh}P>4
zhTNqy#FyVbfsKh+!ha7hqDLmGpXp_zG9_dI0iMSo;^CB>M~y4hl}!7+kjM|^D(Noz
zR`ofa?j*%bzL*n$c_XMxsVNkGH{(9RrCt$X4>z;PO*Q<vO&5q6S53H}(!YGdilHkM
zOy2y+@}ZYC;Z$yTLc>c%HLAkOdL;xo;P7c`?jo`;Km8w~LWs>?rl7&iJ)ct2HK!E0
z8j#9xe}^X<RxL<i@U6wQ2Rc&f&4wqOXKNPB-jnk|^wj*|NfAXks=PhRQL+2P3P*wt
zS5}j+me`Z+?1GT~{LUxVbR;7-2R3(agr*rm7^+@6T5*p0@z^H6h)1C}nw>;jnU^Q>
zJf8pWVPLS1zi{0Xgb%86cRV%gIjAu8ofm(e&cFzYrElU%B+&9AdHI>)!!|iq0Mk~m
z-m>uOFbjkIlCp`zOBwgA9L-dGA(Bif{vMZf<EMwrbw%JkQgxh2<0_x|<?>pp7}*qK
z{zU2`ualTD7RC4Q)(Fu?&y)13knP+SS#B+&y5W2kbW=68<-q-NdwAehHK;@EG4~?W
zg-gJ|XhKb_GK<G7>)jvAhgiqgDA2mcy^st&egdew_@;@R0`YK;urDNR?<pYxK{M}0
z>>zytiUumn5z4XCTdm0YZi)pD4v2-ko<gE${OI)TXl>56Gn<@4)Y5YH6U_z5Qw{hy
zIM$BNGwKP}-M5i)cNVv<K5e^zX5EXKx^A!=nZ9x;iqap4C*An<i`H!s1sfYKa4%Vr
zwn34Wyuu_#%MzF3tc*VKNLFqU?`H-MFt08_^^$m;WLYhTuUl4iZ3s1IR;-eq=KQRA
z=**XA<y!ozj~KH5+(UF>OBk8Ek%N1@6Lm3zF;<4IvStd35Rl5WP9aAeaKwJNAg;W)
zD8;8=t)}WZabmbDn_ElO{O0}#d(vbgr@urc)j+VFnA4)>)yBwMWH9Sum;1Q`0^-p8
zJ-~_d#QedyBEw!Oubq8xQB83Yfqad~)1|-0@`!L8#b4jeU=BmZ>yG~SGnDcJ7%&G%
zs|Vp()cDOs_URJ36IxpQ@#HZYBqI#XPCf&oZ`iT~tOu=`q>%r2j0d4mRuXKO8W$_5
zh~d5E56`(_#ZC1=rK1zmAM(@~W<BBVobSb?53?sNxw4=>Zp0p|VFG2LS|>MfKH)bz
z!L2j7ZJKs*pZ-K`o6w~Gc{}~D^;nQ9@ZA?Nj{;v_w2W)nv%s0oSp|usReIQvg_9$v
zbEh>#E>g$ME46e9<6UGzUfRj(-7uek{i-q0WflkuMN1o5X(TLjv_mHEWAl}s?d5yT
z|M2;Usk<U?l=7$UNvWVXQUHY?lG4q_V{URm54|3fRj*MZwlo|@Jsch!^J!eISx&d$
z#kqCE6Vk_5&-TqmeJ1a{+wEsZFVKQg|9X}m#_NpMNo<NKO<!x1!A4`|(5yj2hD{Xd
zDgG=es(!gOLKaB8PZ%Gzs>MRQ?}yGOT()4KXGndvAK-@}Fh&DIcd{DgE7Mkq2kY6h
zD%Fk3S;-dzxtv)|)o*iBYX1V8Fbz73uW3K1Js#H8tJO5J(}R%@w(?euYPsAoQy1i0
z;`PJ$7F#>t7l9-7JBsb~#(G@AI%@8D6aitTgdva%+LeZIsR`*qux<7jgjgE>Cfw}L
z?Vv;#9(wwTeL3d_&o$1L;6vxK4C46(<1a_l{+R?->Hpu;S8m3ZpULxyE|~l+>I(vV
zEMN*YUTkl=h18Plsj#Zeo>O!gjL5#n0Mn#9qR4O_R`3nubyVH^9};oEb+3_e<pE8L
zxh3-xG}}W-U{++Z*u~$E+#+%(hPq2n-WD+tgAq6zDM;c}GEafi*IzAT{SkmsYq^9{
z68oHB-fydTP|Hh%aSE_nVz<+->=rV-;T303R0K8=B1$rs1E~A<q>bmw>GB>#+%tKw
z9J7v)r!FX8&v`lX3ERg2CwZxu{{;ImUZU-IvcP0EQ3ZcoTPs3}_=F95jMB8;?C;(D
zOc9wa;qRXG)~c2mC6DK}7*^%~?4^ZaErIE%87m@w+JDS-Xj0f2TLu%1_+O_jYzT$E
z#z)%Ai6<FBL+KI`O{IEW1Pgs}sxdNu!dG(tYD}|)Zp5x_^DPxR@X~88CxA6UX9sUX
zKY8ux$=>*@0UEg2p6iGGO4BT<J84kvUmJ;+5udRq!OD<4D8PZhr+lXUJkB<TOZl|I
zfA00uySmE$4-)~u5_v_EJ}Iibg(xxWtu!%K5oZ>x;&-57Y8b$#_&ACy+-HdcTkwWJ
zBc4GI$^)kM(aEImN(YtlAIpSHCOkjB!7C}NO>WBH`H0Ey%j>1|Crp^47-0a3hr2bR
znKFow_vrx<nKxPT3ws7oIO@!J$V1sHqWxINE8Vb77A3=CLXKnkmR|4yyL?UOYyB6`
zvR=Ks)IarO5t)%wSn$a0xJ=aIKfyC{7nc|)U~c#e!wYmU5Y~e&JrdV5WjJOd#<t#0
z+249mss1$H?%q43Y(IIDR=u|wQ=7E3_cuxkeQ(b$GGy}%(pDXH0>4X=+D<Mq+}?iW
z6Q@vR_(n|Ok4Z=&e`LU?&wL5Mrs`wL!0RI#cE(FR9jbqKKN)9N|HDeb;X@ff{Xfzp
z9znictXG}@5VuK`GH=yEl@#et6(;~*r|hEgjPvEvG>m_#(Ih^`e+HdsmNFc*5ocRp
zqU>+CI0*bnHX29uvGVZ$gc1joICnAqXipkvo<E&(VgxK^<hfrG*XGBjZX43@%^NY=
zeEvVuh5&pv>@c)0fVqdF_0G}iM$-vk7`#PZVlD*YAL;NP-KxEOO4R=>cih}D;{i!U
z94ky^S$RLg5+0Nn+d<WPmr4=Wq%@H1^FOrz5ArwRV_*Ow*l6Ii1M~YRhR>5cCmnB7
z6tDow&hiGf3e1=~nE9t{`+5Ab3L<-L-S^7!H8h2iKZTT<lvYnR?lB+llPr9bWG%L<
zpVl}()~4a0Ap5!aS<Hm|+5fm4f(#TZ($QspoO2&ex9PYr7Bqg3HHp1d)NB4-NTo+`
z3uFS7rz{!QV9!$CA7aRg6#!Hhx+8%u^uKE|_W!+TOyi{}f#Kl24P_f<UWn}5!FfT#
zfM>@nq+C{tBzi9i9jbEq7clC<_ku;vc-C|6+e)ZPs4QunHYa$L)?qrSADOD&NXA~y
zl%bniZJlY7e;!x!49+qfM*swC*2OxvcV<H_h5UUfBOTRaAb3XlJKA6KkR$wz0qmw-
zc{d^`Ob2@9!1K-{wV)eMxmB6#eNS7<UYZ=`OmLQq{FPEW?aTV;I;TAm?MK>S%FH}*
zz;}#HudpKC&<jgG%Zg0Qb4TjV+Gz~p6`X948CbWD{tK!LFvBD!W?EgfPWeo2Y(8k(
zI8(*8y?>o*LO1Y)4N}B3IoQvRJ`R^EQ*n`WEt(GTH;NG1T$3d>i>3*5H-*mI4Y#6R
zWX`mZ0jgT2_bSbdOf~DZF(L9f(zL%`hT02`r>KtS!$^hXKN(7*bybHPMJH6}-H$6V
z_%ckDcj#Y?O^otme6*0l{~U^ayUtfQb49VoCdZeMA5n7gZEsfcwoJL>O3t_DWP>!E
z;0AkgquvH8t$wXX=kb@yZj&O5_cT!H`=${qo^~;(fIRp`F5=C#Yfj7dez<b>LR;pD
zEK@Leq8&W8;JdB>lqaW{%!$DtC+KrJgI^-c%$IZLIb@y3TM?S$PnO4|+uVw+ifFI4
z;8rht_P8-w&cL1qZHT6k-0nQFw+rSv8)&Vl<L1O$+^;>{_NA$WJ89f)=TwGxPzoQa
z+LeM%Id*w(ILu$xa5ojh6&SL*7UnuYWA}L82O+nL73yCF@H1b8w0D=8gR)<Q<TX33
z+)7c?j&~B&7>b*iVwTNRxk(ANYq!u8b_5riUfwJuzKbN~MycEvFKO-16#q3S<21_r
zm%4ZX9_3n+b_h9|)kUF3<q1vbkVrTtraA3vamKAh^6p~i#qeGH8rFuI4dqAgCz}?T
z>yfK*u{T`|<d|KLB{<}1rRy@CD2CQM2jH*6g9X0L|D+>uZspJoA@BA+JcoXczXFY_
z>3@cRvYKL${9<eikBWZ^0B>cCzmMW0^L^6Pf9+?RZfGK8_tnsh-!93lAC<BpZ>v=F
zA)FvC+a2gO2Hm&*hMf}fH|idtu!AxMl8GdH_BD^;0*@7sRhMol8#o&|>D#3Wwri2Y
z9QLtQNg&%ew8Nz{kWM<fyx1F(S+{7u1HoKB^t=X>5bIY<Ls%qoHFc`3)ip9%HQbBl
zcCz3uq}#|N;(=9$1haiNtpwdyHW_twa_$ZkMDCCn%$$%>K;)d?R*toq<<_T04@yVm
z^}`E2d(V3VN0KMWfAg|M%vxe-?_3nzir?=+<Q4y83Pv8zVC7unZ(^z%W#pX2liZ*U
z0m&OWAsMzBu&duWO*aLK2%~=-^^3#&Mi{=VX2+K+Ss&P`tRtu~GLvZ`vgw;qEYM|`
z>*NB^?+33mGp#HvKiG()deq?#2Yy>P#u(I?eBa)@898Y57l>+EAgiPD!Ny#c7vG0?
z_(JTXK#!59Dp0}sfDsVMoeC40LJURb7_OnMeaCWNzQ^o=fzcIS9I#@CReVK_-zmTc
z+yNrk0(W4|)i5HhJ5Mdtr8(E^-Fn##L)?zvcXVUN-yikh>H98uM7OI37yQKb*2;+d
zgAf$7V8~$sA^9*$Glh;?QB(eGiG7PYJ-cjaoSotn100+fioxyf9=wHjuV$T1=yI5c
z1)XO7{Ril>=v(%3_)h!^6yDqG#q9A)&UX62C40{TF>=h?<oRermN(_kUGgUM{R*qh
z-Mdh$BY0wLKM%|NVMfPIQDlBk-U*j$(|kUcD{Fna<!XUSM1%hgc_!PNuM9w9<}$zz
zWB1A@3h!3q3v~G!8QY92^vEJ`zJl@Wvn<<4)ANeFV|{<UT-%nv<oXs1Veiz=Ym5d`
zrnsHrfTalm2Z>AsBX7NZ%ksF(?G0@$@t?nwpuq}d^?|=KS*aNeALeL*u7-5j>oxB2
zh7=Hw-109#Xb@aG=cfy1+nR>$t>?9)8+HqK$kp)9sOX{dPpbc~DETpfw%frCF+f{#
z><n_|B8pyKo8_*0wIAtJDH8YvYHf*R9C9_?z>KRFx+#)dPIqyHKQsZb?BQp9MEeNC
zQt_!r#QjBk-Y4$qSjO_JEI9igkRXMQ|CtP0Ocp2nK*Zmjb26hkvs7s|`$!glIa03S
zxx$OZSw{SJ6B-n)h}gT2o$m2KGceF&rFnmd>*R#P%Lgnuo+CMR`?cwSAk^OHGJ!(o
zsmBUIqWT3pI9H?E)fv!FQ!07*i01jzDy%=g7U9u^W=g%{A$mZ{FlCK-d`{)lY!7GW
zx`Gk=Q8O6iL{mxe0E~f#Z$)`Wei4p@x5w8fM&rK!QhQuep_{{tb1uf2^)22DY1oRD
zRaW&ch^GsiMY+~OwE}Mwc9F*dj1@^=GH&A*QD8y*M5?7svV#1!Y$prNeK{LhJqJak
z0X4bV-f*zvN=wm=<1Vx5M%#1z38m+d;a`5db|}bQuIjalM2X?-_U~9+QGn1)R|xbV
z=S8K}{2l<$X|b+d`%=F+_#}~y;_~(ueCVPaW0~2QjG|Ofh4MsXo33t5;^uR%?~0*|
zI4~g=)Hjs21GdY1i6?PcaD9^hU@|{XLH=K{yw8;~2lw$}cTCCi#VCSA)%a!M<Pd1L
z9N!Ye@Epn;;A$0%{%EO)*2o>&qH%OMYO{RjDIUqQRx9t|>jPddN_(4kPZ}opbT*xM
zg!1$ErpJarfiATT*qy2Lgj#n~pkTm$U53c7LB^R{hp7a*>M0G;(&r@7Rv$^3@`BC{
z8I_g-4%>Fl7v1#ZNjcfgSt&f8VXiHSolWb^91qY|DkM_Q)Z&%tSL$`#?Yqs4h1`Sk
zKBy}n)BSh+jYQjt9u<r8U!D^h3f7Z=G&$UI0|S7pv5NQWPqOoI7>wqFJ4`9&=(FgD
zIg$wjE5E0hl6p~YZws3bl^i~5@Xl^iB7H-+VdAxAbUN0gOxep~Q3G{EOX+fNIMyKX
z73J3O6)lxK_QDb<Fl{(r#|tr74!T%&T<?zD*)@M?7WwgBC&2>P$BWb@0`Ygp@zx>}
ztg@vKE5}H9Dy(h#dOdQ-x8o+)fAwZ%P8%Tm6o2~n4f0fgfA{!LeD{t({<%j7WRI1*
z6L%Af3<-y>78d|~9d=>_H9D#jG{|p7wqjm5w$u#Y-WA)!OJ3%k*?_>XV1=B5bN4}Q
zb}K*iA6p29Ke!gTN6Byh_Ig0_zA*T*hxUu?6Je%eg%i`NFwTWc`d~VF5Utok8_LQp
z{6*R7!~KQAErdAl^#<ly?qQ%}(6%hCcB23&S^S)byWE;KsW6EXe{>ve!RlZ4TuGx-
zorg~|3Dkk{HVRYo>&o6fSUX?7Znw9bqw4%(_{UGMJavhlhowYKE7pqW*3a^K&?xkI
z3&(d{;|K(>f?|M>Xp5cEZ#Z`cO<Z(uHPR`bM&}f8Zggc7pE{)bUB9tcSO@s?Y(c>v
z1l?AgA^k;8eWKyenwEoR)xr^mwByZzGV3H^h1{TXn1Yh<W&$5{{}ZD^0-JVb0&_&?
zOGWCB!RIykrOK%+;1Bp+z|ox2s)t|0-1-+wpk$+ZXTur7-T7$i&u^Obgk-7gv2P6j
z<(nx4JgN5$uE=C@6;2;tJ^l(!4%tEj;Y<n(Qpyojk@*E51HQOU-kltp7Qpps1Vhi(
z_P-hqgc|c5XU%;NLs!0;_X#*bJ1=6>_Az`LKhf@<4Lp)6b0L2sWL)Q%Hjs;Xslm@`
z49;cE!rewkZcJyoKSDxo0F4CaS?!3Ee)L)LP&`|?XxAUf65t?4hqJW&NH>P|{(QLI
zk}NCgtzUF4J6{56rp`Pjzyjr>VlVvOH!~%YcMf&0k2luVm+CK8Lqfbq1m@VF0VI0$
z&M+(2Ia!6tvdVT!y~vvdB_x=|>iu~`8NuzZj1Ju`AqjeNQ06)+0oj%))<WRJ&1&UA
z%VE3YqRGFj?aqiV%QGc;ejFfKV#UQNcQ2>#uC1Ht24A<h59_%hHqY1Nw*6(+<}BUa
zF`-L~n&5NjDWn)s0;n10Ng^MsLdTijpCZewIn&YKH?cNMq;?(Q*Bnv1cwdo}YAP)W
z`~fxvQd>K$462ZDwm@l%4Cg%J;HR3;rkwNgh#b!Q$X-N{_$p?yc;=0AfjzbhJ+d(>
zUbx){dQU9%H=<c#MMm$I7#HPG(Q8MDxK#56{(2aSo$anau3Gx4k8R)=3yh(X$t|--
z6UDGw=E{-=-2BuG`I02Gfk9Ww(U^t{N=0y0M(>+_G~U-oMpYJJ%^PtX)6=CoGj@_U
zhG*Y2gD3T#4-;t!bwPd4!|(zNIE!HDl9$rnXEXX`>pjtPeLq$^D?Y~%Y3c-SiLRE?
z1f9Nou>9Ka4hc?mGo;_Hortu>4CyaMm029-?l2M8oH+Lwpe~s$H)M24`NshrpZOg`
zxa`ZNrEP>fh#bHL?&#<t)3MK7AI-pk%&kIEHebeCE@)y6bN8J&C8XC>RE0zX7wC6#
zh~<SAyMQv_3Y~`XoKXCcTju@a8be?(ZEj=mXvQeJV#8@;gARX-YCQ0MgTWIg!iIMF
zV;`hAoMHnJxCD5h@;L>p=QQo$H7u0_)h<wKEdsa}8#(z}Ghet~7Jdr&;e!aghI2xt
zZ5B}aAUB5{s~G0^-6mKOb(%ptItrn0#(mbp(Dg>vH;q@X(?yQut|XOSQGpDuwiPA6
zv_IS(zA$iJs8y~os#9^P84>gzcpDbw%xE)u<#t$B)|+U8nd3ccIJ3y}&M;jLP!sk6
zH$i+fWGN4mb}K)mT^#za2NC)>j0K^n?30BbBVLVsj33M&WV5V29--%=Zz-L^x=v$y
zJT}JYB8}zp=4yg9SBur;I!NJb_S84g61trAw7yIFVZiQW{T@VRz%y5r^O>6X_r7~3
z<%O<uSjSmr!;du+5r5AX7V|vyYmPJ4d`0#1WG(e(trXct0bH=<J+kyhqFdmHZ<Hs8
zzJ}4`QG(;?9dvIv#)L<%udk;=?zcj&Wwnwe?;AyKk9tOQ2nQ0WN)Xmek}=(RzN*m3
zZEwC>fv5anO=S^7s<W5rjx93;FzS-Il^5U&IL3B?36HEX?)WU%d*>zn*ZU}7LSf*A
zo+kTW9r|y5?Md5H3`&v~x%dL)QH*~vb=Lao{Jdx3oo6NW$pO)H)|R=-QfzIL)LM7}
zE7uIsWXt*pFz4g5J^EqiuPXS~@uRRs6=U7uJ@+h7#>gBIl_r_k#Ap-9e@Pw;98GdW
z`*Dd<*2iHQP?q<22hTt6bMX)NJDYCNt&w>9{#FmhB!NZF2J26Td|&rPqm1$2fYPPc
ze%m~4?4f$wt$3N9Bfs5>hA)2aw(K1bX1;$*Edwjp&#VQ$dY#2;HYjuwA018YlPQ2{
zx}ltazv#2zz{<A;vrZNVE*Mr@$=lzpY1q7wF6eUF9xvP}Ey>fy6F+@xh_<`1-_TaU
zQeJ7=GApM0XrMoV!a7f>dG~9}muTAHc{Q)(O%E(c*-<E(%`~SWM2^#_R>?9?q$8BP
zB)5Dg$A71E=2OSjh@0Nr2fZYTYx^^V-JXA{@aenyi)G?hGkc2JK1=KIhCp?Xe~Cl{
zAtG9J+V}V?ttUHNTmHMI&3m0nM_0A?KQQV@YkMdm&`HwPr%Nw%)dA@+(&s>hzKU4j
zYlF^_xn+ANCNmj+)e`<Zi`*1b!L3QvnFO(3UQv8X+xsHJ<o0TaAQgp%XvQM1%eF~)
zsNW`**5E!}){Fx8SEo|RQ3ulKqlf#$huK$e8ZA)2Hb2IEG0qaf@vsj@7~|ET3-x(V
zClGXu6fh=sqUN3f>lbsqyQ>3V=zTSzFgo<E49IQ%HN>HwZd8RV#}2KG6s}I^GNlxA
zuJ?u6lA*qX@4JNr^mr_d2Azz&D1+75l_3mA!+N9nt+eDgDenjO8xERI3+&zw^Sd2=
z1)**o%^s}&A79G8eyOQB6Lekr3?I#PGP5ts{c*XO{NmspW)$X)aasprgJW6GEiRUY
zZ@tdsT<A^J_FWC~MKvdecC&fV{+FHcvyQ*k#|$3WGOz*L3ZrFCzlz*i#)LmnrIcxy
zFJVbHv<SOEhS#c|oI}f9hxdy2An{yf>QT<o%qO-MOMDk|s88S{PC0m-Ev~BQRRAB@
zyWNQNcVTbJ8A7^j?v$}yL9LrfqEPJJdqQWbb{EpO9cBx=mP8l%zAJuM4UTBoC|nqt
z=Vu>i@7N6b#HNunad6Ma^qxMqin#73YcDvM1#!7HEc^KQdSgnX8QNG{QLvwFqknuF
zuvfj49CG_1YsE@K_Vf`<_u<U^VTR5hmqu(}?CKa{1;QL^C_~Mpf%NCU4YXTT%~=!<
zg_W!A-LUz6(RhhZ+M6dLN{N&LLyd}hRyn^WRk=$aKM|5@yFaT;z6-@%6b$TQ{WsMc
zN)_hcrRLwZ2CvaG-qUn8ILYlXQo)-Xrq^zYXRys+ZpP)qlD5G22!Jme32~Slw=s)6
zYbkfn!6tp{HV=wbyT*GuL3D0M<g?~NwHR9)qTM1^(_}4+QJQ(-M@lHOXG(iBKd`gI
zz%k?<9uo36lNHB`B7&)vt8oqa!E#D4@KTir?V-AMHb3A%n9mN}AuiT+;udm~oh1zV
z)Py?`QVzRD_=)9o>8O!BODYt^aQA>sx8RfPX82L@0OH0)-~oRClA)F44Qy;$V9w-&
z+3R)GmPN4<BCuxTE50vM)8UQik8t|(sqI`eMECi<CzV-Y>NUNoDw>jar_Dk5ms~U8
zp%}ljotYVHgsJK9i;?wK9OVdpNv6p?^5t^z{02HiyZGNUMVJPo77=vlG`<n#1Ac3$
z%5H3m{LVGbo!4;Ddw#wSqccp<BqAzv!BaDgCCvLyT76El)}+HTa-qPj=D1_Fqgh)Z
zVA*HtkZ}=uEp=4GnIs7nPgjV|>i`sculr^dha7R$am3q`$~3yS@Yv1LhZ#50w<=-x
zLJFivXZ6O>tp=@Aylo(;eN0PF;!2n{O7r5$xb-A&*YRe48+bYy`84x~>p5UMZ@}%(
zl6*b4*F99zt}Xk(h=vbIA}STe4Wl%AQ=imzev7bdF*5}EfU>+>*|B0%F5TJP>ex7Q
za<!FTIlJn=Te0hET|x7?e2r8M12kyA7<{v@&O*BIYasLsI&GkPt^-dCE`{SDut$gC
zSPN}>;MO*Vq(NFESEO!KVhlIteZ58bM*54kpXykZjeV>2t9B*<v;U3Khq<z@VFD3R
z6}h8ciN2`VZtv&)kvi(J(+vG&kPwC<)j)?Cbr9h#)ANtP96+8-sb-ah1|ZrpGYsfs
zNa+8g)@6XTC|-zP*1RgOj8%55g`7)9i0kg;Le)_pZ9*+(GMV+{j4@dZGKvoQbQ><c
z+(k<D(h6qkyF6ooNqh8zyUXBqVA4qOoVb_ACOa~X+Gk!`TKDGg;ogmJ{XSsjBrnPl
z|NIsir<ZBoq8(s7-Vo2-KJRR`Qu%Px@xXUt1>2l63#cGi;*pl@tqr-G3wgCWSJ@Cf
zl4I8e=+J9GH}m|)4D7xpGY_1=upQLH9zFSyOf|Z;YR)s!(XsXj<2MX0IF?mFmq0N!
zrnXMz<-_Tm@g!*1@d@Is;X%ocoxcU98+5?>Pg>(M>-b_i?aqezidE0GnO!3Z@vv*t
zxx$PC%ytkU+Y#p_3XGE75unB&IYJ68O4AtP;-FkC8kkDb>=)X=?}bP%d4kw4;UoEn
zOG)bt5kw^+mXDP87k-&Ooed*Ad}FZ5-GGq~rDRSIx*9gu6C%|MZx64IfE8Ec1$&fH
z!?h9o{DvVr;&s%wUmZ8ghqE)%=b0UA%I^_qR}zw8IM9Q`<4X$f?%q$xWCa+Q1)aT$
zG)6KHzOn^jfNci3ZZ1L|e7zHbwZC>q)jH}Og@#&$@oaHd`i(f<X76;N)0QvZZ;*9-
z4n{Zw+0p1~VBS8cUlf%0p#toUhPq1r!qr4T=E2{aRsUb7Nt<;%!#}=)lGv>EwWg%g
z%xnJvdbB1inc(U@El&2Pg%YwLFI8p8@;K}JqBD-vrr~aU8UCq<>!ff1AJo>z-chp|
z2ee)9HcQs=9r)JB<xo9n6#VmYAoY0-c#qbjS#pd=K#k(Xd!NHm>=CT^0X!LsIMYuP
z-XPIW1*!dV7SWl<U@kwa(&^C{;4ywlSncKl#^}WN{Ela?cFa~33s0`G`U&ScifQt4
zE)g`Yr<Fw`=kpWMJ)X1lhSol{PRZcg%VrkI`{QIPOWX#>BDF03(gPusnkr-hD3+z=
zKs8>&%lpNSyX<elG7keu)KstPe%uex1e6z!c1L3Gp07K+yZ=>J8KfR``hiw}!e%~s
z^Yu8A8QU7a+lp9fX%v7{><Xb<kx6}|OW`|XC^a`z2G{vKI~QPuMdvsF4PG{fNwtSl
za2d(TJG1>l`%tvx%61?XVOe6^GScB2c3C8d{PJX3VxruyFEE+61;FK2=t<acB{-+L
zn@T97pJk>0#Q;UtUJb=3#+W@=d7mxo+gN(8&qC?wW&Xph-Lg*^ZmB_(&l`j;)&9zz
z^?;H9-4@?iM3m?=h&m5Y`<6F%E?MaDV8<C{UZ`n*ZT+Qk1|AFiwEiuvzG5W%MYKfM
z6b&BN9jFL3S>8qRX0Jwp?e;i1#M!kCXSRnk`|$OED0FwPW=!ue=rCaB?qZd;JbhS@
zCe8vIu05>6b22sszi<cwDgP5L9nX=vlN=MM<dBTRCTY!ypC5<mOyJVtRPz&N`d0cn
zF>z^tIPgbK%al?d8n|1aAIxs|cpqRBuzZfIz|S{+@S5O>9AN>)@QW4-?=b2d6-o1A
zAIRY_WuB`k_Ne6#b{RT84uh=asGpTorz8n|<}VVxZQi!+njU^>4+q;Eg`p!az1~dR
zk)^%X%2kCLN3j|g0Zf}~59SdVt=B+p_qah~BYm7E@P!^0T=)k5qQfCiF7~Sah<HQ{
z3#IDrd{L7+_;MYK!md$$MlwGu(eh&1SHH1u%CqX`#OT_M)<q!SI3@Ge<tB*5A+`R$
zfu3=76yCOaUddd?j{K*M-AWd0{2+{kSJ(<jtW`m;yvlDGPEDVF->RLMD(73g(TWA>
zG?Ua++Zi6NqbtltOgTQtbQl1sNCM?Mrvo+S1)rvCAFDdrwIfFcd2N%H3DV>11Dq!1
zfYEf?2!!>XA%kPavv)xmZ1P+X1m}}TUd&JKOk&CMHJ@R_YeAQ#m6%0|J5;dIz327M
zl5D?G{3+k|6Y8_Mj{CZwIwE)V4&`nzi2V9G4xinqE`9=!IVB3eSlg7j4}w#kyhVO!
zZ=LnPuFO^4-~Nz13axOVY7cL~wS&LM{cn0g3Y}n3ji=`@5EdDJge7gSmtLI%>a(@Q
ztlRe>l^YmJ>`4$D`yhCS@8;T4Ox?d^3*x#_StbIe)>DkN_ehFuNV9oWG$X>-#gm0o
zK7=|j->lP?s>zqi1;GlYwMoKXZu=xdQbR(fMNoLvUMJ5HC_W_+?h45a8rSDZ=gDTe
zq4D1?6gf!_{LaWOgek#Jw~GxkzYkwz+)ouaMp1v*Pez24%KTJ5bx6#P32ovCC}PiL
z%F)*2k7*(NI%w}bQ1(H(BLuOlVIw=dfPhMWp2)O9+2}0Rs62$<y2C1Y6$>tL9(+sx
z$yN+TgiIMBF6KRDe#8^uLvk~%Y16Vk3)4fTcvF8lx8J@-=u+fDyvtz_z4&j~Zv@kZ
zH<}`Nb(jkfp^qk01GkR@oo;Zn8|7GFk$!7MU2pgz!(Rp+Gp~xF(0Gch^~)&(%>$4!
z`#j%BnW``d4MheK4h$}qE!pQO?6_YoU2EZ-Lw`gk;y|10uXjI`*)tTv!2~G^Z%`53
z{YWyLH4`g>h7f=O1n@iXr;e7^hD&H@{%|7sVC@=od$aoBdYyPxwsLpiTSmbLoR0jJ
zy?U!4%`Y2viTeBpB0OkU_XN%;E8T`mCHPr0aDzyJr%Z30<2*La9-YEDl~q$Px{J2K
z;yQoc?;CRl+Y(xqZ5W$RABlb@I-Y?f!Uk81JlvklWC=JyzamJ1wt6N{7meVsd_3ul
z%T`kuYhpVBJ@~ljmFfxWT-(m{BClXtRV!Z#)Q!9I937KA{zVUbb-FVgzLOT3kev9z
z!Irn~=dZZlz^F4#)6+48HrL)TqSq|)jxb2SUke@KI*HD@j!x}39`|0i)3P^S0&_h2
zIqo1DTe?RZQT*^$m;M<h|D3daN6p$(_4})AND|jJ2f6CP{V~5PlmO0+2rOzfzB)mK
zgTMs3N8h0Z22sW*NA8b9t~${rEL^i|Z|MBj3z0Hcan86qZhtjjeH(9ophpk6p2{yT
zHI#WBad{GNek-${u4xk_Jw61X+r&Z!cdVtWiNQ`*0uEojChtZ#q~9f-^D<#yl^+N&
zdPT$v9-)FQ2G^WkaW!u<MCzA?*E{=A1lH=1JCktyllzl;hgs~e9=Cb|!Ny!q3mq>X
zd`y_Y$!Ym)-c__=f;A@8Pi&A*b;9|&*1q~{ZlLHl-!HUU)tz2l(JFu^eV-%tAcKp~
z-_WZ>Yb+|O*{*s|9uBJ5F^8cEdmjl#5QGTBGp%p4!C%pXP_4gpUu{WT2>*_G4Y>MW
z{rbU@3Sfgv6U*LqEsCMzQtGn4@0y@}xKxZ39=b*CUQS_F{n8SJO9ezgrZF9YnAn|l
zV{`Mzc+Ctw`+9p?A}K)Ob8oEXVa(F2_MjuP{tJOP-llq{ah5^?XK9szAN>OWuh%g@
zDPu2Goea^x!Iv=jmu%ReAd=2~hp%C%5l2{3_AEWqG#ng&x`6;6vngn%sF%_1RSkrA
z1oB~8oHN=sqpsoN$EEwbpq2WJ^7soF2;NUN?A-HzaPpH}X<zLHbC{6?b$crU(Rcl0
zjE~%nt!7ar)`rc)t1pv3)+Lp*FLC)*jn?+JS~fC+mYco3N32J`{^t3P=X)^6q4&?&
zGjV|&j6}N?Zb4<uJ73DC<48F64t9RMQ>1xWlIxSz&Gd`vg=_i2z|dnnF$>ooIiTSY
zIi#5<ghH;S9NQJ|4j~X1czzGch11;E3XlV9`@{Tz#3v1jtMB8%vlQQ}!WQM<h1m@w
z(B_)~7+4?d9t-8IwZvYiZzx^}`d<xNFYDWdr@&Y)q>X_^0fBcxX`iZeiQVrLnp(VR
zQ-Kc5b(-C_{@JXHnuMY*$_3jfTse!^=f&d^Qd*w5nK-zZ`%vHfPTD;tP+{abSQPis
zl8?`r_{C@0Ks<)7h>QH|=@MRM;v8Mt=imLXpF&{H3RHQan3gyo@AdkT3^V^{KCADT
z&k>}de`z+BRY@a@|36_r@$-3W&OT-+EDD_&hepg`zh+DVEA>d$Cg4Y!e!_zyZP4@*
zoPs1FH=c7x=$zZ6v5J0^vs{AZGGEXot291%4-xc+&yKU^2SN@Wp<CAP&qrUaxF-eQ
zEUpS3yrVwvf6+d%<hkf*#z)1?aygJ=doHMk2<_ZAeRnqH`ZtxoLG-({C#0Fw%x;^_
z_P!W+TwUA1(hIR(0a*pS8SD(uqX6-FrNdeS4jm{xNbw%oml({|)-a10wC?fZt%Q!Y
z?SH!{ecb&rHRKwL8g3;RaIh4Y?|F(>y6{oRwD*I4l84j<4@J8<k8C}z>x?n}aVYuo
zlsI}w%PobtU{vwG%KkfVv_dRy2kCTj6s}eiY&d(5EP9-lyAxbTQ{2`}KBmMF2VtbM
z{Smy|%{4zl3v(SC?|CRj6z2WA=h4sW@Txm?4Bx?G7S-RKZIKPRQ?c+4v!x3#j{Z}&
zik~dy*kIES%8=nK>`xEhGRX=x5M=F9zF%bSjf}PRt;28HK+Zpl<g<RI&WHVLDO184
zwO@tlZH&}4ZQKcbOrH#uWn6=}=*_Y5nTZN#e!|ajnlc}<M@w1cIUjZrX)b>tez;4|
z3o8ryNBYS4jY*;hjXQ6UEb!=Y!U1_nm=id#;MbPaH||jGbj$FNTIp(Nn#AruOhD*S
zz6DFmc8VcAdDzEJrq;!Z3;1*TARer2!}O1CyNuhS!!9vihAU=qYTP#9I(8x06yeB5
zoL7aF<JNJLd0TDn!K<$@Tj5}zT6D*2YPod%ydnxYkr-Qp^y<rYwPEt$gv=?)0V^Sr
zS6yOy_nwHTbQY`N^~J~Pq!Otjmyo8laO~S`6V^wp$eC_?w<lvS@YF*uBmL%#NT#Ki
zeOouF`_n<`bqxKR|259|`BFd9)nIs*V3Kem11z--Yx{CxM19IMj=16sjIU$<HP0Jy
zO9}&u#^>rr6MO0At8dfdztGwY%VUPlC+kx-2+DM3T^zt0Y#G>0rq6dl&%P~5|BehA
zV*_j2FPZuDT&_}20v65$Rp+j?qYz~{y)b?gU1Y5;8zc4BMPtS>(VIP%x)j>*{Oxkc
z=}ns0#t|uWOZAfeVB}qAtKZ4ANstC2O;olsBO!3~UPq(!Kox>q4Xt-r3>*6$M{xC2
zMz%uEe2mvkVb-`$c+$Nd`@uMw!g|4^+Vi779Bij1$P5|zAFx8`3lPN%ugaiUx%i0r
zPId|y#{=06<AC@HS+Ob(r;O#emyt>tuU5x{a~35hF8CuvV_fkedzq1Eume>@0TFu5
zFhKdrbJRBDi*UwI#pTVm+^_vp{GVIpsy<0yJ{j$}aYgM?)2t)Xmhp|6J~>o*=;3vm
zC~q==9~uiIsvk(Kb4G=?p4MHg1e75XE`^l%C||#&vT~?Ra_3IrfYR3mp%y?2mg{Iu
zQbMI{B$VfIRt`G00spL5GE(rODA^S=xKrC=W2uk@4c~$e@X@rq0Ocj-?mk<iI&XY?
zAvb>2<ls}#y5~8RFVUWK0FAYMcOM-6GogpS57I(bI~o%|MW#$`lR@(7`z=khy<QRn
zDq~&zC*+qLWs7`vYWXz#jm3&8pt!X6Zc9}jPH<}9rI-5DGGx7+V(;)%KMinx#-^G_
z>*Ku?y852FDcI-#FV{m{Fw?J{w$Nl)LR6m@euNtCY$J4>E`dav?d0*0HX`S4z%c>k
zJsx;(v;2y`XNqr=IL7vcdG-NkIf$Ji!Q-~Xuw)sOQOM1LDC{WB++2I14588Ik2mI4
z28_6X(59HkV}R=o;eyZOJTSsxw60Ab<wrK$?FsD9c-l>J+bzn{O_bw1H~Qjd&?Sx@
zd2c4Z5af^jHc1<NX&G5UG@2u<Ll45yq^U*yZ+5h+#IlGBh5s^?oAi$|hp<rwEpSh{
zU&;3jc9~%&pv)rOqtu}9PQw~TA)iNcJfHbGy@N{NPUb7a1L+Uq`}#tvTr*eWzqUec
zj7P2muTScv`G-a05v?IAIg5NR#}I|k4Smm2>(YThia@KRR-ZH<yNq=o=y*8D#FNa*
z-nznfqiuX@wb|^(={wFR<>=(V#p<2&Y&UHOyGX+coYZ??qv|5VXBu@HZz^vd)9>~Y
zY3hRD(9-NFsL$CTW3ujRWh^*g(<PJ8^N$+yFi(8@XPMu;DGO~0`3hZ@3L!;?OV=;Y
zy5-6~H~a19-w9}TIz-#2&x!$q_4N3AB*@mG+*vSV9%I{YS9i@7c7fedC^~}(=Ojle
z<%2!k*L3f!wM#BP8?j@yc7+RySRc60G3w%;bW_OJ=)H%CKC#@LHFkTodOh0!McGjn
z6Te)0gQeN?9pyopZSs%ifH=+0`%Pc_;)x8k!kHk^$aH0BM16Y!$dI$h04Vxo!ueos
zGQSdcKVRqDHKhGk)n>)^c?P8%UqC!O!6Ew6RN*V*B908K0+Et%?SiTR_!!KnMqw~>
z7jqz0fg++*N0CX9OFmfg`rYeY;qd2AKHMSJW8)kOI@7_W&+>M3xQ<*b&E?YSI68$Q
ziX8NVzBAH3Z_sXzidy8hj2C1}Z<@3Y`ky|q(T3%%6V>C6Y{j(eVjbGJAbaZ%s{|-R
zk?WoELY|2!MYkC)DP(@%2<(?eFEb8K3w%;RAgXDvyuLKH%PI|Y5BQYZ!O0#fFxE!y
z%~p3uwu??Z&+8_=Z;8!!Y9bJ=Cs$W4$Gc0`U@gNlY-Ps3%jhhuA8%W?_`I#*Zh?8Y
z`wOt%t@qO7c=2l>@3Q}<+svu#24>zdmE8ys1wPVYOzpQ<oyOi?iLuJ=`k{9pY)E|b
zT`i=)L}$mc&2kSPJ;Fyk$wzPsIy351ygHFzmwH`en6LBcb?SFXL>1$rO=-sO;*}<9
z&_b;P%dRtm(P>-vCp-@_YC^#1In0g(^6jAQ!VHl@ZYV=|GHJ~nIC*~*q;)1rZF7Pj
z-F+*R|Bt3s$d+iAX2}6mnUSIu-Z}`HVtYAYE834CGC-tHAkfh~@V%I0u=%~Qz*yc-
z$&|5XlHp&+vrz06A&IjOhBNPz`Vi$$H$#$g9ll@nF(dF$c%g{;3q)s51>F?RkKvlF
z;%Teuto40xA2}X|#p|F=s#P`xsf6%9hE$-1LV1AyZdddFwr{IqftnTA7IYe*$**}@
zyXe4KVNW_s1CKe8B&RRefL-+EYI5!e&)Q|cW>1113u6N@_*U^b$+@U7BJd(eMkv3O
zR6Q<&`FS_kMGd?SFRSODIQp@e&bIyjkMBgZBGJW3`GwSEd|xO{umX!4B1rmZV&)VM
z9@6&o<S46kefG0n$b!q_ep1xEElRhfR}JC@NmfK4i=l+%@A@qy%tk^bc^;}xwVx>r
z0z?bSGHO;jz-s8ZD8~d&gIQE8&`=zy^Ss1V^|Z_YW_y+Lc_cTz(%fGaEY)krEms2r
zacjW9b2)1K@ffwX5!x;3xFtr?_kEmu`Qv~Yjheq}%?H7ux4yp2S{}18N9c|7=A#y(
z-<F?>ml%>VtMKpk8uKMf{EPtLrx&SDRAheKrg(Eo)M$UOq$Xd}gGi~j#8-3Oro>M0
zmLW>N|2(`T!sNoitY(;8Dkv=ESeL5A?n#?4Oqea{T&pCv)<8~R(XyI11#_0|@%u^L
z$G-M^E{CI0raAcCTU_zhU^8l9#>WB3HmB{gth@De<7rDipb!IoFignbLDBolxA1N3
zcsaH6cIsb?FiA&uKcZd@pbTM+wXM(C#~%@~l;DFJ`^<$00Q$cg^R|>fj&6-~*AAX2
zmq*9uFW%sGmr(y8^<hx!Uk?m%5vL+`8jx*ec<Szh0HuKJ2Ky+#j<*hav&hxurYGrP
z6g9&`{_yvb2fyNhKPVngWHkOX^NZ;Em4L?hXP3z~6Y^+B-LrIgyb#uS+xj{D5qR)^
znGfHL?fgF2mSn`83MkqK(M4C7C$AZfSQF_5s7~zNf<_6nc1*$sui{%(DnVe~mO+yL
z!4aZ20H4tPI(J_jSLf)lu|@d(+IqIeBP@C*fj3&SxK`jF{Kk?f|K}IKso<!Iuov{4
zMDac*fnj)ik800{8q6Lb$`KF=+_H@Nv;H!TycXyCW#2NG`IQQmo$9qZbgJ6c%qsYk
z9dp)5riAI;@vJfGastI`<5l5sR|ld%{h@a5E+#HAL+4tCe^LgBLD7Zr62_d}P|AQ=
z(=nUbE~#CE+p+hc$-$qUg-J@afZWa|=?-UK6wS#g+Oyv6PSPGO;mFq*2M4{$3U+U^
zkD~9J;)@4lNzZeH8<2|K?F*q_*foh?KvZj-+bdkgI<{QBr$tvLX32|kXuX#_*vYy8
z?4fV(5E329r}bolech9<u{o|AUI^A`xp5m{jSP5S`+Hdb9$~E*YYpC045UNj?7<<T
zq}B{oC%wFic9>sO`G$;;ljD?onU?#}kVkCUv+ll_6j8uAM6Zj97V-?E=piuMu=SKy
z>No1WD+)e_UrL;v$6$KpakkAM`CZyxNXxH5E+V?%-REu`nf5H(a^KW?R|O(PYgEzl
z*8l8x^1=!G)KU5@Ju(@zVr8iH87q0nyK>J{l3cY#uBK?I$f0Iv=$D)(>~l-5@%<h|
z?6ygswbGPi_`A9d5Zr8#-qnfN45n*hC5C9!P-m|nxG(O)-4>jEj~wDc(f{=Y5&GMl
zC-wc%A<lMvOTiA&NaF^HFA|fl0ZD`azu&qy%Ga27gGq*x{4OvZSK2Pf3xrp2ozbf-
zDbh^gm26brA=o2xZ$KHg`;~tDKcDWiR|BYR3M*`wvvSK&`Ftk;{Jlww6j#ivkdoY^
zQ5Tr9-v6ZhTM?9y3p+j{CV8?0KtR?@pO^15?4!_;mad1X807g*88p`cYHT%3)qrq&
zcrvS_so>7bikb79nqkL)c;A~M$$GtAQ;u|7uM|WnyDP`{qRoRMLj`JL`TUBP+hjq2
zjO89S(kFU<D&ICcGH%C*-*OGHL$u&jBBskTffKI1z?@`{maiuy3KwVnbnTABk&>7r
zWOl_jRCEpFn%Fx)v`w&DEA){paZ{aHaGWi6AwuvIfZMCZF{`#gE7-(9TU#3_9TS}x
z4@v5iA!(l}zY}R>)tiwl=gsOU?wk2)FVg7wWuW|@YW9_NoG-Au{;WCr)Y1Gh+h~XD
zP&e-vqLCy_>#Rh23E>$ShnS#;`HLg>fb8-djD&UV$_k}Iu{naP$3~R}&EvIFc<Fjd
zBYFz_Bc6P;WG|GAT|Rw-M*w>FtM-YpxQAzdVf1W1jdlTYUglbel!YC#Pj%U@&T>?r
z?iig7M}|;P@bc}<^>oZfALv|Q&zH-)x$UaL{c&m;(L(T(u1y}><WiO#MH)kLN>blH
zmGi9>E5T<XC|z(2A2ebpR*h$B6wxU2X70)g{E_f*V|=z=^`{m_E%&B2Ll(?HUUmJ|
zr*WuRwn&snfjplgk*TSLwnq^sYCq4rIBdd@J08N`pSjitQNN!1UPOku6GgGh>QlU#
zr`ctnb?F7hd%VrbCk&g(RjtrW+|(D<`!LrCKjSnr?Wo%tTOJiHS>8Vab5KSPWyger
zQDznH{`oC{kkdwue{w8{rl#?qDBpb@yhOk%55-o78EX!zFNS$p9&0ndv}ZkMrS5Cp
zB)(4dL3Bc`DM<N;!(Fy!Ic8b@#f0D5>dLG|0xgz=ouFr!7b{1A*$ot>4ul`iN>iHH
zxF}ht^U5TrCL}VG20T-Jqr07N(3^rAxn%B49u`+56!6_6?iST5sSR9KGyn4AtLJGe
zA19TJ#D|Kg=bkjrHay?5W4%{{6e2v;Kiwo#nNEAs$^0FJB63eMg(v7@q+n_OT*+s*
z1|*seVQrbEJol9FeU>H9NR-Pf90x4AboM2pSX97jf!6pgGfpd&!tLh7tzXVJ&^-RL
z8;$KznAuOw)7zW$-!maEMPee!nIswB`#fZzdP8R$WuKamw(qjXEMH@<TcpE+=xP)B
zMXo598$aRt{0q~8=>}R{7rh9UGCH$h44tHC9B_hhl=07jGa(@>*Ty}?RN-b=l2v2q
zRI*fwWVz~l^^}VjKH07WD`Zvf2Rw;w79k$lai4aH(V&O}dgCnCPIzr+(KzdLmNt)k
zc{AyAQuDz+eJ8fJ|4)-Ek|0Hx%YaVY=>FDBtTCFE#0=>rGT}ywn#E9jJT$r1Tsw)}
z;pcqUY?Bl}5r*A%ekT-L^HOl|F5G~aRgUkS<!v&$<;mF=8m02b!fPNlB<-{B^Xl)x
z5}*17f#_7XB&$!XwO2eGkVdKhn$la!u=Z&ql{)&L@=*Yc()r0U?!1p1Zvm4&hTr;S
zS<w7bBDN-~BjX%}$McC;W5ihG8iW!Bi`AFPz4DRzV1q5>2L$u6&*C=sUYg}3bz$Ab
z-sqEzJl%XR3Y{SodYKcDaU=BF1Ad{u(B(7Vlw3eE;(1p-=ytRn`xkM^!Bisrkdxa;
zF+VKug2Q3I*a|$&y`M#N#5HTXC8L>VSBLo$zXZ`Ci<u}kQ7(M^J~>XrZj+d@WGQlX
zB#n7=Rvfcz0@jAT>yZ<r&F;5Y$jyrYzIfR;-hT>NsUQ{e`!mkoHMW~D+7IjF?8L(|
z)x<zn`I?wQ{C0KE4tx#bk`L9^XBd$1Wfu@2W@fo~p=C!UUT|a9X+rHj+7#KhboWqs
z#pj6g1bkx`NlP^Mr`=I1phLl8%KR2QuPUq!NKF}@ODZx%aa&(xzQA6W^T0}Ed~4g#
z0`M5Z@bWpdQ7e|wz4zJ9cSZp{l)rs~y8qWu=@^kw37|HT+aJ}~(v`o}4g7wT@A@Lk
ze;y@5E~=YImu2B=oXZ*`npdiGn8QABVh%N$OoF?h`}5{Eh3FB33Ml?$)>0XSY@rq`
zH}u@p+;O(rp8Iu(4*f3k%kyt{GKiIu*`$NK&%zWmUL0ML9(hGITa3qx8<lm_M217>
zY0Mi;NQLsYA$Q5nV}Qex&hL-k9zYCRn_dg43y>CUvl7EPZ*vg!BnzKyg#3FDC*U;W
zCeoe811pGMc>lGMOhH+{^a8APpXsqO)gNZ#5#hEOvUfQ664~go#XP5)?v!<mYj=gH
z*j}6#9|%+$Xt%%P))4D{VL3{@J#rQJ3_UFeojz9dnO3Q3ior?k{^|XXZz=763osnf
z1u|?57+y4&duVEj$I#;6E$Ra5i$){$6^>G<o=5zpfhuyH7(l;x{UiNXJ0=#)jsFi@
zZygoo_C5Y9BHbXJQYziuDUC=s$j~J{lynIwIdpe-=MYMFN-N#n{2uPT-tYDO`TfJ1
z#ac7ZdCuAA>^OVBwp~;xbtbp&bywpMY_=xIj!FPM*>4xg57zb@@zsP$!Y_=EXpA4T
z<HPAT4v0mqi4j=MKXeNGxwl^W=xre5?dV(@rx+zX|7L;(gEJU4B0H{jDe?t`z%o~e
zJ!mu`6-%{h!IR$ws~lrds-(Mvmy^b5?<hv5>srqEheweuEgUCIefw3Rg1-B!u?kQG
ztgHaD0xvqWqApRD+&TDNeh6pWf%dwW5E#yr|DWN&Jay@iyIe~)(nQMYrXd6-#8P-H
zm!uOtkUrBIOGcHwztdJaNnRAOV8O7da@#{~FOEPcA;#?#pYJ~d5f(wL2XczYez_9n
zCS@TpWC;C`p>9Y)VhLTP-&}T<)xa3c?o9Z}zlB@6f7eB%cA4wsLR0(6Y>Mavv&B4_
z>{t5Bo`i2oF(z=4_KH>YXIN*M<URbONURtrzmp{%*Ab|PKJDHQUhafK5O(F{MESly
zw=oxIrHGy}PFC&qDJCqn#mh_x`Zky$U<$t8nO}>G`6Qsc&?B-fZvj7wV%(ZTo5tNQ
zA|az<13xOq4*Mi=c;q|ZG+IBgLUn=4g^kqk|M*THsWBAkDuvofMA>Ly_|`<tOast^
znERuZX+ErWzN~8G>Dkv6>L->NN*jPUi9;*xzcuanb(t$vN&`=s;wn%b5+g^g(sAY=
z?c>n<{GW)Abh;g^mMH|$%aI7%CnbZjIy#u-XrdG5bHbOmPhXY=d=mT_g9^i?SDMfy
zmMk^EUWBTBTyqQ8>T;>X;d)atIf6J3Dd%db7PSViyr^;8yZ&Y~a};P6r=CmT8zP(I
zGK0YZ?klw@YRSu2E}PXo3nwj@5<E)Qs@Y^Y+wSb0Xrz{<yip5&X3tmX_rfHRr&=F@
z)D8YCW*T4xL0l9!ftsTK?B<WOBRb5`Nb6oBAlalRd?dmsVU4_|h_`227m6hzJ1XbT
zK$*1*=e3z_J?Wh0nndXKO|Q^)_Z3Oo1;tpA5YF|PMVXo*7!GdYI$$^-$RQ2W@>)x)
z`BckTohCAB)jJ-kI^Vj(JPz86>(HxNt!>LUZM`oV;nZ=KR3_m6SU-1?Ib3MZwwMnN
zLS>UbPbaGnc%L@&ESCCuPH3czlR-0=v~^jg#<AnBVgY>-Ovkaeu{3^m=3#Sf>unOU
zcO!HsQF9%Vr(Nqb!d3P@i{?Ntyq|4T8C}mgK<gH`nw(MOUqv`;WJ<}oQ18jFEFL7*
zoL?%t3DE}KaM`>|($g)76FU6_-nwrqq&_)#pEMN|sqZJYe~2KSV)j$)4?~7(Bu2Q}
zU|qL~odb=O9T1xF2w=K2?QoD<!|ekTW5s-kK#9Me@WzEX!UL<xTywH}QH1$WSw>*u
zpYFtRtLj$`Tm4)%n|_NLHaDYeK_c9HuhgP*L-Cz#E4T!_74MQ+`I@sIg~)5vYJx~F
z3r;aHeO|1BOi93^Ya(SZmHi&JVE6Exa)MM}Q0xqaAoFfJD_14fYx7>U(JT(55$q10
z93kl`x+`lHXK1@&+9uOaEaEKDT41df@${PvPN7lVcJr)K#314S_(9hFJ-*N##w1^U
zSrox~%~J(Rml=u)ub=*VlR%l-Xs?Bn^5}KV%~7g^P|HOrP@%bl{$54MwUKb9UX$Va
z=t1S-@;ug}KM<AqVgLo-HriVZ;Rz){z^4_)KhF7J8VoP>%$C%UT1)On3CpF(AnC3Q
zG<?;Iw&E(wyP-?j2W&B>x1Se`DT#u}(=zz1i*gq|S_!Y>?i_Iw;#5zOSEK60K?!wx
zuV2?VO>B|;$aChudCzgSv5}uDvO?yaIs(TcQ<tu9hW>ody_=CP2@%f>Rnr9i_85ud
zEGofbWF#Y32;+JLzKLD&LY(XkQ<-<_GJCqpaBa#x$Z4i|X97)%Y>M?ICD!)(DDHJY
z&e{0bjM|9v2vrLwzo1$FW=t(w+-4wSt>?}#W6=#}Sb>gq=TL2AAUW0kNm-g2Ez@NX
zVb#qCVjJBz_uA^ahlD>zR-O&){}+UlEuVfAs(hWrYswc&V4jAQGEa(4$7^a8^m$2Z
z&udS!&~yMH#e*Z=w&66Yympgu^;{Nb_XLkvtYfSceb&;H<JSWp_M1o^+;cZ08{`S=
z+4E);P8ESkp%zcSiTk#Co$!g1m=0Q-Ch=sA%o%FZ)ll{F%L@^V9~Z~S6ZKqef*K`;
zM0Y+6HkuL@UIUWJLUSmbX3$CzZRNe0JC3&0=xwiR?3L*y!P_%5qSA=Fvq6iA?36d*
z;`krA{-X;1ig+O)!oso@Y*U}=VO8aa)em$Y1R8E$3ik18jN1NCWGKj>m%F%pgZuW!
z+39(quJ`Rhq06QLn-BqOOmjT0%_+D|S+Crmjkt*6t8Sn+-Jo?u?62Tyc{RS2E4}wf
z3?Q_UQ1qnla6;zsEoI!YsPopD-_86KH@$+##~+%#$oplix74*yZ!I|~`*+80-02=N
zhR>arFBnxQX#$oAx4QL>H)`MmwSvbUIG7GsUQEEFGd&wP2?xr|YxQz!w<1lS34P;+
zVwQPd+fsweNOq-~Y9mQq%B;JB_e7vlg?0KaNkfFhyA9H7Wg*{NGD6jMtX|bPIEz2~
zL#)Z4n!=1aKzO($fdBi{VzqaB?Qh$72`t_ZV835FpNCk{P}buEuIThpYE9BaXcMWD
zB_4nAl+alwA&W^SVW~t#$)f$2W7coYV2rG5r#`H%0&4{x(U!}WrJ`^;H4ewFiP5v=
zjCIBQeD>=7y_xMA_xy^Ww%N}~@vj4UW=^sBYSe!a@{TN(rQY^LPL2uDD_N#`E#jjR
zvglYlw6|JZFx@8+*4zy7LS+?a%lKxpo<pBn`{ktS$nD*vnHJs%a<WaZrNUZP)fS5f
z?mdlW!nIhP-?C>vGt9bM$$)JMj5)U@I@dIKVK^%Wu8C^kO6M%r$w|Fl2!CNez(&aa
zA)m0S_kGQzO;b^Zc4Wyp@|{1qMPq&u8fi@|7`id6cA*c>FopE!m$?ryh}??mluB4^
zYzLkFVLyL@{ef@^%cetJ4vUCT>g_9EZ|yS9jKCzf@TnFUnBTX~icVkc)47p+tRXeY
zZM&+d={Th=5>}0Hfh!D#I9G=#pUCevW3s#Rw?96fZ5G5A-m6*``INXFzRoFalR|yC
zAGD}D@YF+{HPrb9!F9p#$IS(w_9>XQDGGQ^O~xA61Pn5>&Fa1I#uCY%GFqEUbr7`l
z=ev0?&E~P0bzbK-NqE+lmr|f6aPF8wQ8^Gd1gJOgh5n>q)$n^hVsD(rOyn+BTSQFI
zu81wO@7y+RYC%;m9IW_6z(~Mn=F1Y3_ykEpt8JHdJS)SXK*uB+gtC_F#zoxQ^wKla
z&!-tcRd3Nf=S3znHuki^UG_-b?N6<mLCXt{Rh>aHIq-yDo~O>;QXQjul3E#}HFQ@z
z-jU20Z~8hmFlRM>g3;Mq<Le*VT)I6$n7ZMKIy}7y4CA!Ai1w&67n)e_h31q<FhOM|
zDv9-AcjG|9OdpGQ&7Ra!W-I~2)+QJAI-^(zmV>9Ymq!Trr~j;zQ9^;zRn`7%&UPBD
zZgyH>eL>?ql0L>~Nrk1d#-%nRajLc9dE`1hTu57-hv!VK@ub~{VAX5C0eU`{**H|9
z$+XB@B|i<d4f*MZ-eTFwlj()`FElLgj*U{T4<58kjkvxTsuk@ViRUH`eylo6WWcPo
zhL+YPLQ(dnSx5NW20fN%ashbXAZ?qjz(enRO^M6;<(<gY{Mih)HpiORk29(g*L?rY
zT}6wH-C(#stZ-qN3Iy_Da<y)oBAkPFj1q4a_)$ofTr}ZNa0cyYfO3L1c%9pDp7STs
zqaSQ~#|_%y2oy8~T^1FqEovLg$&;MarYgx6wDxl1_p&9p7KE3A4J{5K%BbfU%)38K
zzFDvmScA=3lL;-F4j^``+RdL|lRRTxl#>IKc%?n8)L4usI#m#Qo>mqOmL%bel<C)K
z)I~sU$p}FCVZL6oIn!LW^Sf5Z@SxO^4fH*?GCRss<Ok8Uiz0@z)Tw*&N(RVTgOYc!
z;c>{Q!>DSO`ChJ8P2<ao(VoZLQ1$S5y8n6E0?hmmken$!DR%LSVpQm>W@c-#Y|;2i
zG_`6JAH_Yz<#z@zgG)eIy<{{uWX)^b(Gn(Up&=-g&76WQ?@Kf<<w`neEc;6v#H_(4
zv2(}US|@WK;w&dXEoG(?hj6k?P?Qs2Ll9Gw__`Wz8peFHQ{s0>=N{yI3-XN<U`(hy
z9H^rniSNzi+e&z>Tqm6w9w5f*6)&@;UrR=+L2Ik(GN-f-O(8y%Nb5olTSU8um6|3s
zIn#QFOs-%8&?2U>t%e#50wHWISBX|moY3W`bNI9xylWm%oq+g;d%MIXC^?$F>)m4#
zw5aIvpT-5b4=k*Q1BBWvM@()_w>D=+b0t6{6ceZDbwA~W&o^YhVm~!@zxHLdYN7hi
zhQVQu!5FV9UkPY`UsAi5Bw^M(L*M35Z1|Cx1x+@>82VyedwWyY?c8Ag%i?SVQ$M)a
zcCGwHv)n5tcO<Lwa1$*85Y#!@U{2iI>ITwe^}WQUh=J%Uiz($8pLPsw>j^f;k-!0S
zf;^3&aj1}h#k?Qd`{6sZS*My+6NuqJ%e@G_!yX=MlbsFNAzqVFFHmPt#Ts=3-$Nr}
zuJPjtqootkw34Z?5b-iEhfUga0(7zM+_hFr(st4etG3sYW>@;eQ<U%Frm(^9I_q82
zwOYNzpVsLY|0iq%>;gIwwXIb0zB~qDVN3_SOm?4=0)=}|zB*y7`fpbIWVF8nQ40lS
z-J;G~dzkFAGSqK!6{a+y>{ybzzS}Pk$a#U0!FA1+)$G=)h2P7~Z&su%`AQ5F$K{gX
zoZa8pn}(`UM|$SO#4s+hYM!81989od=6-oT|9o!z#);PA?&P-73kkgEE^kaC$ii8>
zkgn21#*(pol{Mv1ZZmOSXqw6zbbG&y-M6s(l`?B!`=YK#Q-8?@agW^VEz)jwEtdCx
zF7^M4Tml6eXTAwL&$R^vJK_#k-!2#2(vS?xjEGpjEH6w(W|d8dy*)(+JVH>+cbX~!
zdFPO;ZqCg-W00y`T;%yvZ%#HOo_FRRX6NCg8E`8UaE(>p>MLc7%iLLCK{A3w-h{W1
zYSd*A(iur=yP}fT$%~mByiU+d(tBv;<`<eFgQk@l8BIG?oc285LERrfYa%;S`eGRP
zuzJY~cRf58uU8xqaAq2x<ubdVX4&#NxFRQGWazxb<c8u!)J!0IukQcsR~E!<`#rpI
z)uTdXdb&jjyEs*|u(erUIUg*^1kI3|s^4}fHfBO>bXa4bm$zSUL@5a3rYWbDKWe+^
z6VA(IiTtsu^0gjrG_Ym~Dwkd5icxawRkmFSY_^)#`>X=Fjc%73C*lwTIB%~v;rCqh
z?hT2*0+dE^=ZGr@X9D}aF|#d<N;Nn1^FM(5)$1CBnDl1cy~@Rt&fmth1`fR0&U$}m
zv~UUaS#LE6s&xL2{M38#vi&01y0_Q5$C5r(wygA_Y=kl7Ft%%ojQ7uI*eBRk>`kqX
z0dGxwGIig?&ah%wQoi15;1-lOUmjL1)<G2Xx+*Fya7uqTIHM8s1M_P(?}WMu9{r?B
z08uspl-s~z$9-cwVI8pgP#b5^khAn5*6^M+n8G>4%Vu_BHzaMewQiF(z&AYJKBxOt
zi%+e45X$J&sd)<M0Npo8)ty+%H8^~Js&q>5wj&Zy9|*O6EqXVcMJTdOdX_cai3;6*
zWH`fV3;W8J@vRe`+&}F!AQY2?&WL+a2>NfWh*mey{<QLZ;$REo<ryrUm7a&1P!r3o
zJhyNIzu8RZw682I(y7BFiXM35e1iI7rA%LFaO~&HEiOhX)&bqx=T)JoBtMjd_DCRQ
zC<)3MbF2DwH#+e|>c#8?pv}m^=E{EMCONB7oy%7!lXZG?yA0JP`r4-|>@DxA!~!)-
zmS3m8ntN3}v3nb2eWRzQIjCQvFfwGh)c;1TB)!exPD|F=y6bYU$n%tSt{H```fR&O
zan{17f64|rk3C0?*$RlBi?93t*jkwgjwuGX&EjD&(Q{ra5~>#Wd<7X1rmunb!PHP4
z3I+Gq<E@>k&88V>s}&!aV4EMwnBt>~)~cu7^AXRQ&c@8$>gegsep0Uf5+2)pYCAQ2
zGeIWlyw6%4{P}gYfYC*YF}E3U0EKpV=?8s^wf_F*&W{TxOqX*fySv1o!;Ld+Rl@mV
z0#4F#dG$MT=jyc<3$=Srdz2E$0JBQB7021OEuwY!q8ryz!}1yCo`}SJGdNbAWUvu8
z1l0p!Z?$#0v+-*eXR*Nkf3E?6+c*T;FFiH-uKhn`VW_^KKaCG_j&HmYUmEL=Gbxf&
z!(>f3+@1{e8DuA_4NI+iljY0Pe(ki5<<BsnvpzUzQdJSfx3^S2`XPaUM1d=)m15ko
zt2Ek(Q;%q%^(!TRg-o5{24j^&Sc$u{eYyYx`_{bXokRQ;_7Ge+K54!!m*stVUY`1r
zbm86PI^#1shD39g@>W;p+)_b<o(ipuINSBT!VBdRHO&OaF69^AH4XjC-s6dr9fkYz
zgSt|6wAERMFT!J_{u`8$PDg;fo+I)<l%c#x@5eITH;`Gw=quO92_~xl-t`rKHD=TZ
zM)o6&<->h_!dj6&+ur1}v9j2Bk=VEOJ;c{qHRmh&Z;y98FCy@B&+mU-6}pU&Gt^Va
zqISF63Y~xNKO27?KS8u<3|Z>`U_jsmEt)^oCm`-2QG^n=OyevFiZgzYb?e`Y;1y>`
zyc-mzALMfJIyj2mWleVGRIt6;hDLJYmyOr?gYSe%k~lUd$#`pzD4uq}f!W3EL|9Im
zMYzS_67*~|YUwpvR*_Trz4e|CFV0UJU^N=AW=KK2RvEU)f}EnR`bGK4U$$C{wcFwS
z;buBgJbmDh!gEg3rSU;QbOj3sqBUl1)hM=npy{l0hzIt2AK|>msaeVv&VjL2XUO>E
z@>{^~ikL5?;G59%T&q*wN!2DqWZN!?9EJNTwT;&Naaw<XQ=A4T$&k}^7oX!OMGDMk
zd@J!l>wU|vf^9vEH#c8t<EM2s6OCE|+2y(OS5`zWg;n|*8mRaqBg4zC_b`M{?XI0{
zt|EDg5fM~9SuCJ<c5fk-R3^{6D$U_Yziuu@qwN_ui`~{#+rSd}$5rDaqlnVSRXs5x
zyr)PHmm`DTz9(yOuqK<<ojT!dU_@TzXYF>2amwMOhJI%K7wgPorC4z-(7-~(ycP~6
zz7Hy4GV`9h+|k`8$H|V^<-L}JOZNqE)vh>tV5fB)SkgUNrX%+L>mRvxbSez1Ulv+U
zYoF^mCu~KYf4blF`!<ny8xT2X!4Ti%wM@k!y%ZIKFCQ0QTh|}|aD5?tGiW)jdY2J(
zQ7xB4)A~#QrS-0lZiHY@R~V#(iT+6I!sv4R%~=K#E_3yLv(voI#K)156^prDx<bK~
z>DF|1L61T7Ou3Yc-mq^CnuPyNi2**xeE#%aOnPRpQYR{gddMF-DzQF>otmlXt{9cG
z)RM#M5{n!A22rL(I%CY_mY}z&1bs<}SD2x67re4%F*21UkBc{OD9UHH_G{-Lw7Mjz
zNzSx(E1}I%mx+mP>>H`s(NV>AMc(9f9$u1$fiI+4jv)tbi@u5r0QPdYewgquN{vog
zbo-om+^uM#&9s9wms+>akaoK=Y|W0^e>TiidJPr1lteK;pO*?3x=atecJ4jgt5sDI
zbZ$KIyVk3X$1N|f$k8uBZlE5Yd08t%$w`M=QTxVEDpKvBe#M!?%95!Gh4X$os*O=8
zNiBytD1qq<uGmJ=ch&z<Bns3cfjk3!A78(V<K{b?7%0`p7&MY0brKO~-}#E4`65}N
zq{fHW`$s;ehW)T;&01)U<mvG`E0jfe5+*TK(K4^hQ#AZ~7QkuRJ}6K)^u<xE^%j0#
zx@#tEyb;%Tj=or&8o#8=q0QHKzR|ZnYsVtc=hkk%2BhE})MZv#{&u+{ws8=&e7w8M
zQ}r`YX!HA)WkrTh@4A=zp39kp)|2DP{zA{O-r6~rLf)UXY55O#T@4o9LZqdaC%6!Z
z_rU|V*q-a^{3+USr1w7Srjq6TmA}>$6?FHC=w5rz>D=<op4u%Xs$8ARh)dbK3(xJU
z?d~SL_Yv-4n0z*6i^n_q1tM9J+gcoL7-U~{Yj?{o+zPc*RIQ;^A~cEdhJiGJwpAr_
z`)Ba@V|w~<?+=zcEKV7liuRUV%jeFldyAf?P?+6ia8M#8YQ%y!-PI?Fv+DyFj~J3(
zDsld42vbvjsRE+31~1Z-HCO2czh_EHj~3@sVv|fem_BIi9j7Sn6f-~EIJC<xqnjJg
zUp#~n7U>HVO&1L^m8pr*d{z|@3$(C@n^o7MngnT_Zwg`Lp8^^-0onU~3rSThxrOZ<
zapU;8#aIGa;g8f1*P0j=%+Jl|HRRcK6i2SlO_SdBZ!9d4Lm2cAxgG=Z13w?~p9!cf
z!4^Jrsx84ZPMSHjbEp@PGVGS<Hj7(>uT(iKj!P}daf=5SzT^ru<{stAe~zuY?Y)Y3
zrNi`2Yg}=$D60Zl1nGIGAqPIBrs|!67!pyf_SJXr+R{18meM8ns-w4wI0r5{?n<gH
zZ$dmHANYB*N^k?Gh4_7N?uc8VXxp1<I@;!SAH(vtB7do`SZ?2Fji%@w$GcCgx^GN6
z=Qgj0i}r<A^8An3zQZ^yjbTN95l?cyO6y>XNDS;^Slw*%*e42J--(`dhF;<hvNod@
z`iIsWZ>N!|(b;Mkte19fAhNdJGBuUCOdxQ4*f^3wB{2d}b0HK2h@BDfF+Umf8}^vC
zbC!l8ce7n=HV5cliS)#`s=i}V-o?6UakiA*t#WV|nb<CA&J4Ww8GjJ7)@taxEEimP
zwr50Cmf9*}@pCA8V(O+%4V7Ro#01o~rPLyHsmH!yxg8s{T{Sk6+h#SI;2LIo<u@F;
zfqpcPQZC}@Id`C7F_5Y<k-n0u0lKl=zz`!dtn#}0c=jXh{-+D3#sxw<Y4<t$PGGcN
zru;lp*QdKFMY{(3$)fEc#Z<Txxv=RbIo<L<DWK#&Fj(z1Zv%7a;|Wbd*q|BPtGP!s
zUz#zoLO|TVG?EedJx7@)id^^&cA3-gD_eJw`ED|-w~W{st0u5-cBom)caiJRZS<Pu
z1Xy<5^9ePZKNme+pn>bZJ|;fRV$mHKr#Y*bOV(NxB<^A1=fQHqj5qJmn0)B4PJB3N
z9WEHOoSGszTrKU6^h<3^M0c>vJbI?DN3#$ubR7WR#^ai(c~Nt8QN^TWndZJ&E<&>4
z|9W}j>cZL8t60CRt=5|+mmz7ABrmlv+=?`HTH#K=jG<cFa;eDh#^i2>`rKIHQmg5d
z+G*T9LOE$_dTCYbfN6ojOE$Ydy5zs{?JvTkh|-R}5YIPZFO}lBjg3q>Se|}Q5}{9|
zkVyp(89#set6*5aMDPB4n#Zh3&1a?$4jHbRii=ol+a|Pb{pwzA!UC?VJd@fi;UeG2
z4m|RQjZRqmn~Pac(&Gt!4f`H@yhI^}?xhEtV;CVE8M>6XpFih#D8DGA=K7&l5F$sH
z;+JD>Eg8R*CUnwwGM>fB;4N`?b(f|T)_Tn_Z`DtoipF~ogI*Ae&dBbxGJMc$V{Cpm
z11S%$H2fvwv;i-aK1J^}WF_@*G*^39(Vr*;%#E#=_o2D|@S<0A<9!Kyq3W>Ui@i5c
z%E2BMu{x{7KcjBsrZ5D9hH7!Lp_N?;Cz_+(`{Yrs2@*#X!t7PpO}%x66J4)0zHi&t
z?iu-Ql+`OR+)V0P<T0h?O12n=x`A_OK~HmW)xX5TewDDDYv||XzsUq!tk+G<^=1Z;
zJZPK)S#JpQ$*+U;I#zATt}$!Bz73>a6|UG&af;Vu3EI9twf#{{+PG}FJ!|Pzbbfd3
zU1-R+Juee(rM6VMhn~oF4|hEoEmSWla2$SMxq%rz?N+!nQ*V@$=&~I&QF;K*OFS-!
zELxdY9NF6*;9TI2tJR-EY7tGV-5jXTvuzf+Tgr*wZW!WMt5ul!IBxO78A-bffnr44
zC~aeSCvs`&)Bb!9hvfusit_pC-a`rQ-KDz)G*sPSYzhW$KYN~#HRTV&=@Ue5tWAQ}
zJLj{un-)v{UeIZP!enV9RvBvVcCE5GNO4ftdayR(J1Z?$LYH2b<j(Na4CeMNWCpmC
z3MFQgG#W)wC|prh*U@R(qH<!~=KTBwyVt%&l{id>#3$XDK8bsmgj3x5j;T!D*mO4!
zTsN<UN>CTO4Fry@HJWuwye|oAoGJ7a3u+V@BVN4fu@B30?Jm_XnxRtCew{6|P}<k?
zrNVdu(sHh(-Qujs0UrJis(eWON;v^e39r2#rJdN8h)i(no8rGJZp9w!15dp@p@!|w
zXElPqQ}Q!j%9Y%23?r<#JGa=Zx1NL(5F%J-({6K2@Vaa_I{N{jmDF(=LoG7xy|KM1
zVv7#idJKaj=9kcHR&ZWOH5KAX@ew7l4}sQ9=h3w1v_qf(ugUaIe%83K;QSk<o}>{Q
z(f?4nE3u_DnX&W5V6cT1X&{IxGLn2!>QRR>rYbF>PGLV(nZ<VYFb6-7I5z5)IVjgD
z%XH9R%Z+#z9q2i#E@7&7pyYB?u;)UBYZ?a|QS}WdirkPH-+5z6;2pGOB7^X;*mM+Z
z+vkL3+_at+O}%U8Kmr|cSK$6(v48r+C9n8~zAqC6$j*5W7Z6TGPVVL)9iW3vqc{kg
z^#b(f*&70}5P6L*esqiXR0nN|PF|LkRrGC_|C1RcEi6f%#WV1sV<Z%o*XK!Bv{sKY
z?P;)Quvoh}P}RZxA*%amm=_4DoWWk7T6eAWSmyyGsXWO@(h{IVwe<QLZd!fy_t+dU
zeE`})!P)iewIa2WcXaBE>izLds!7HJ653Saw_Z$RW{zI;I0L-ipJ&DXQGJ_)FqBde
zYSA?NnYBxXM$@MWB)=Io+^~n}QdyEKHL-IU#{vx>zMpJ2Y^17LPPw9+g#r-F?ZcZE
zl8LQoUxML(lkR*X$eG=aQ!U1_7YaQ!Tdq~_$~NgvCE6`&?ANZx?&!cZl)veGJ~#;E
ze3sw77+U=Nrp$W-wxmq9Zo3l?n06QzC?NH|O?&P7whhs%EpIr6p@&kqgPxRj>fgN3
zSFfJl9(oU2o^uG@Vy+(lVk$K0*LzRIS<GbCg%bA9adk}lX`YG8R<C5LRJQ~mN@WJ3
zk>u7cIQyn{8u(tp=atlv=8<|`lC6^^9!HjrQnoD-CD<vp!oGt1>Q7qy*F$|r#S9wI
z0PZfzxK5%0^o^Fl!!6soD7gflRp>uY;*EN8Z@2{@Z`8_~D|O_P>#MGU^6oCYqrrzA
zZ96<edghjCS9gnQw~l%gN^$UC?c4wTb?NkoC-=W*Lrv(^=+z?y8^0K7l2F+E<5&n=
z!T{HIF0Wc;S%wK(wU0>VOFIuPoWJHRkv~NOiM;&rZ@S~F=TCnGhLD|K`aBG<MaI7b
z!TnB4l%W1}@QyBVg|AjOVCi7*rDB^149<YBc)k4ZfU1%!4CD#E;#H?L1g9TKNC)N1
zU#|sF+zwMh57az*SDQEwfaf-cjO()j-%T7{`M1cxrxTMoGOmmt726@M;$L?tTdLiw
zZuR^4<<MZ!;f(;(*eQ1Wljl|S*&6?*W29ri(#X$sclqQQ8ZEx~w?@n76k)mP#Ztwq
zXd3WR!&VLH0#@5n*6g9QJAx9kCAtgv-xPcdjLn@L6@XJWs==teeh0y07sLK-&-u{6
z?z-%r^T|z|1e|jeBn(jias>Tak}dnmSF@3Smhks(77m2%37;RTZUvteSwI8N2*5_;
z|Aa6{T3`=J!Va`>ZWfZLQFr{74m96^=1T$TXu$e^HAFtOnD}g<<f9gg$<W$v;oje0
zMg;~?a<@NNIXo3~mXO0#D-UCjsKgv58+!Kd($6UvoSNAluW(p$yJ*hC`#t@8{v6q#
z-soDkxmWELpBZ|Bw!*BVg>`^wUyU*n`1b{CvGF;r>O&0IBo`xQ&pQmB{QY1O`F5}A
zxr0S|K1)xHG|g+Hc`A(mGxK|}z`2ox58z3EoNM6!F6?k*{r%XY|NGeBx9NF8APKdd
zS1<}|f+Nbhrlzp4U{^GR{Lw!X&5kL*WE!Z&=|2GWVO#X4)K0)sVxk?T+EjD3kXc1(
z+#j$eQ2LH9WA!qjzca$Bv>3kcqaHd!4_$~xTvu)J2F%*OBK??n?&FLht;{TT=}Q;n
zeA>uvU;7*_#R4WO>`Xi}<gkP?q>2wt1L6IXUbi17$nqmeMv$0a&2cCuSRHgB)+~~7
z%Ku8_;|F0kglu|9##)qYu=5i-+2lQg@dZI@yq%%U5VDHH_c2{tF7pjLqUkW?Aw9aw
zWkhno&}4@yseIM3=54rbXQY15{$IzPbdoTfFM()`j!gDK4fh_P2)I2BQ`ixt8K<yA
zXgXDtuuKU(LYD$D%yNtwjkn&_^)YC=PJ(!ya_BdlobZe2N~EYlmSekWod9Uo@2&WE
z6CVsoa>@>rQsPpo&X@hx`kJc)sM6ECQ98w8;@GkpuG?={s~P#+U&Frn6lM0~`F&$Y
zHvLA;PkPyxuGAHKfhU2URR12xk8@azaB4DHK3&>Uz4?7gesu~6v8_f_`e49}Av;x=
z87bC%(Ma5j>X|Jb9O9;deY5MaxW<T5#SSvzDa$cUcz+l*7YkY@c=dbF{3S3r$-+Ip
z341Lq6X|xK5W88gzkbZXmvO$%SL`Ckp11y$x$4sae}NZ~o<Ee<retR#Uqa%4H7l@E
zy&DCt_WbQlQ2yB~f4}p{YgpE1YBm(*DA~yJ^U68(IPR)#?~OXT77aXP8sRtGCE51Q
z_XtP^wZKbTCDo*O<qtN;u4-rw?c|D0pQd}@zl!@lI~w(esX9glILCn_Y>j==(V^x=
z^!B-nM-jG4;EGgfCCp@nF>XGuC-bKSFA2Rn>RqlcV}bGUI%2KJ8jWvlAm2#+u_}8n
zN8mb8bmhUXqwq=r!xt~|_~xr#aab2tn5-S)+cjWGTwZ^gWyCMdXq>WDZ^OD|=yzL)
z$Vk_STkgvIvx~+D;dFUl0`ORbEEZx%W!LL1ZI@YTrm5F)FMjcxFS(Ci5u54fOAr(X
za%Ug31qQM%e(f1)2-Pn=W0P!O|DQNFyALN4=%*qKi2`{z-2s}^#MgzjdY7N&pvl*v
zCYoRWm&N{BIO%y+rH*DC_0R`eF<NceD(z&TI7fWtHD&mC<KB-P46{YyY(ts7<NdS|
zePDK*gM5q<4*fF;{#gH?!s&y)nrH$j^_z%R4pri?$E}GBh=h4zHmvmD^Lr3gcp(zC
z(LK09>S4T$rMla-cKy&l)>{~+o9auVL7WSm5BG^wq*!St0aNi9&k45O?$+|vadKBB
zE+uAN39Q)YOW#AN+s%B`4!pl3r_}4%%9(%^WESH{&5|L%uG~_eImsUv%7ZWSYH)5K
zDqW6$X0cgQ0}lz*du*8{tCuhSDWrk#sZgkiU=JeqoZ36HPM{@GLLKlAL+DGA=jwdZ
z*M=2H=M9ZcB}@pfouXNLl6he{|JyQ07{&(n-HU<cM4(B{lS5x>7`d<o#Cm0V%Z{ld
zJKqeu)1Rut^JLwX<%Uraz7ve}fhZTTR0HC$jTw<4PevhsNM|QvHY211RiesnCZ~ao
z`Q_~o7ux!fEDc=z5?K1tccLf4%q3hW=kXV&amC)ObXS|dwiLJN>=+x^*WOJxex1>n
zcc$;hwdKPfrTt@V#4)~!Gy9b_GYRwLX?7vRJGuBG3xt|%p@DrfFrG)%wKWSBeYlI(
zj1{BDPNDh!Ih#A$ZE(7g=o-SL4F2zB!zL??r{?*zUN9)P@40Us(DtaEV*P4p@4Az>
z&+X&UlhRciEx`y(=Sn3woYn7L0sH}=h%B|D)H<P?tM_5#^Bisu*>Nd0w8Ul26$ntA
zq_;P;&eFdv&%f)6HsxRvkU+QzEzB=AHEI#_sQuXr%;2ONbZs@HaE6+XYWR~S=ZPvl
zlE*kH(Z{%%8I7Lae32mNmp994zMCD+8Zls<d3})f<K6vhnzMwOl<K?oPclg%<{RE*
z&-qQ;2-tddpJl-Rad2;<z%(F$a9=RK_sg7JR;HXlV>?%$C*f8NPid?o<S}n1Y@W2U
z?EH=Ibwu?Er<*S1P-IeO5<1NWn|JtaU(Fw=6RDM$FM5ZX3|<}nc{Cy*n027ERiE?^
zS7gpY1ZWEc6a-}UoL3!1X4wBBQ~L~2GJhBVqD5^BlNxu49^2Y-@MI5HWRp;#%NDJQ
z&4L~@6?)76lW`5>BNM3EnmOCbrl_o<$j2LSI1BsF$~$sCMKE<0@Hn%be9*bf(lUJ=
zH>qJ)vV(AXx|tvge@V01=wll6_tC+dC_LJ_<XQIt#FS_)U=jr$j~B|VU38C+ApPJR
z@sEg((Htg5l9kcO%}X&ruAFL&R@ltBhR=x+n>Pdwls!Echx3zcTQy5GDl$!w;YnT7
z6Io3{wOYV6*9!+;>go?O#*wN(sj;#m|B-(qK>gc}sF~w_gy;iE6e2BafJL+2ji>(}
zK(#}(8Xe8eQdswrnGJof9|_lwBypg(fN5cpP2*df`|q@A#c-&E*`%(^PtQig&_m|F
zjhRJ$kDer2I;Hs<c7N}61~5zCeUPPmT<1+^m|HK~VFIOz1D7;|I0nd(?TiY^$6p)V
zLYlRZS>C@UOc)-!y(Cde&!qzB6~wdMeS_<4rx><S!_~Zky1iXgRtm>sIYoa4yh>do
zNzKQ;*LnHlibA>qcc<g1zO#>P%SV*?BdeSn8DyH`6elV-h$J5K2zdv(7PtX${o_<V
z+7!nq-sMlv<kTPeTone+ld9?k9e(gdJPzwP@0gPWjRPBRkNcBQ&3{%fByp)Qhh;;b
zJsy%6@}HItMy)CZ-%T7`v=iUXX4g_y0d2yj^6=;XMmcW6!9X^wdLoCEjW6aJh#IxO
z3BKg}u21g&B18C<CP0Z_u&i1P8Ux_AkF@Z!M-rAifYd}-2{o$UtDT>qV`?iNnFdH3
zdJ~cap8-a$*>y-OoIdCMH(r)X5^JJ=z&sNOfRESn@}MTutBnf;K|C1P9d&+&IgHkB
z4e>ZOS<EB8`#Uh^_~vOaXuS1Y(`lSVe{+Hnw^qL%75f1x^y9Bs^}=D#eFuxSyK|Mt
zVsx!)GiB{HFKN?=M+Th}3knJE`@NHgDi_ixYB(2U4<y8QpRz*VV~W!o96T=$VX$Cl
zA<XJ24IwlRNi_TXi!59c+jzG{GQ6S}3;A58#^@>Lm&}Q*=?9OEh28mux+Ys^y#^PT
zB_9_)KEAfsX|r{|ZgQ;}3wA5}8IRp3u}ih<Y>t0MEA|QA>}Cad!@cD4B|%|WaE+GF
zHtvnk!ncBzaDKB2FaVh@#Ty!A#Qoe4JK%o}unm6>?PLawDJ+Z`0KM0;BUE|;P{`WC
z62pY<01i;K@&z2@8we|P&y9P6aPJ3|f{P0!^s4JIK4*46GhFAS0>pbBQ%wlc#Xssh
zof!r{wc$*n7bi}dbSM7?Od3t&?Fwv%kxcAB?nOH&>hamM{tmCY3{#ceGkX12okyp?
zyCqsdP*Z82Q~>-9Xch1xV$SRw2pD8%Js#UWAF<jasWECkmpg4{1mQBcX9rN6+@FTU
zabs7$Y`<xGksBph*mdJ>gU;rcjvz4Dh_cl`$&9LK^Lt3&U^)4(gs+a5%JL<i<l^v{
zV1}BEN}~g?NzY|Jbit9#LBKbsrKO`liiXt(*rb)<vu!gd5<)jd55NIZ9d@a;HWR&?
zD$(vQwOFLDw_oeoYFwE<x2~O)tX=YQzgi7r`U&7<hYFtWI?ouw6EGWms<xh2%T-8u
zbI|tSm7P9WphC-X<prR+Sly0)CZFCug~;XtU@2e2oGi)kv7p;uT_5h)Km&(Ku(uFw
z8vx24&8XYB>DH%I)*Xfizxs3Dr#`rw@cQC_X>;~$)--KvxG$E@SiU1mEC@|YuA6Dy
z4)`!BX0+0F)I(J9x<Jg`zz2~#x#$WvX9nO!oR#a+qp*10x>`?HnJO;0WAOo0v`SoU
z`N-};t|guFbXeEV1Z<MMbysVh<7qb5)+LPCt^m=tt`Qzh+!CR~kxI!1Cb!N$Ltv0R
zE}^<l7k)jSy8XsI?zu;Eo2hFTGKgC*-Hh|{u!XJRkm<M57JiFh<+%Iw_<VL6kHZ?6
za&C%CgIAP4*oOJD>M*{NLjb6-EV4pb^KmFz*@O@V7rD4~MK|uXA^wR$hhe}F02J4_
z86;+`TLc%ONiDBM3Z+s)0Je+$$Nh$lZBom*@_Y2Lt~cS_f%;+Leh+clHkiSrOs$uh
z5RU=-2i(p9fM%W>q$e7~?win-jPU>vp1rRItI3Q;Yo_&**!W+(oVEoB$uk)d_x@iV
zV%7CtZ}J4k!?pPd`!!~uDWkcG6$1y~4lD`_tn+fa5APdrPplX-bVPeR^%0xLDEnR$
zGf)C&0Qn)n`_hjVvRA(r@e#mwnz0qjAg!DZ@g1BFAx4wJ)>aMi(kXM(`O_Zzj06U7
zc8W#V?`A~`VkL)RIBiL%$G|enVF|R~4k75S^ZgV8twmz@6M}==<Y$xK5ic(J2?ZbB
zr?#|7p?^P31B%Cqb#@ZZSr3<WiRsP%?Q~=yYj8(-{)Ll-Z$@&MDAGuiKa=ckQ_2_5
zyFM=!EMvRmwn360;9h&KzFjV-TYoJi8%IAXSd0;(7$Y{EJ#W(_k4(AA!UZS?md?Zw
z@1I|#`c&0*e}$M}_{!P7L6B>^>}ERc%TQIFMYN%SB*gbEOz2o*h^!L(za3D4!{drq
zk72-NZ|~~xGJIa-n;G<CJ8Y8Wqz1e17HABkg03y03k0j^uxaElPFsDoZClQ&@dGB`
zM(Z>=?>WwfYrx$Aln&|yoIQO1(GYCf?b9g#x8lq#Z$_dIR-{Nn=$~~}O2wojbzlkf
zw?j|2MVSOW$Rt1GW14HfQmo#3H3=Q5-b&_iINi<%=*{C-h7p3qOX7ppQc^HERG%yn
z#jDEw%+^`?*%au-NY}LphQe-gC?4gP?%)7D?BPCDpZOUd{AlrTX_9Hd_`m*<5@08u
zFXp~7SD}~fG4p>O{Cv{{7Jjrn*z}QvJuxw{c_?$|muh0?dK5;K8k~{i<mA){kKaW>
zZ}v&gv1bnmD}LPLnBLSqtrTrx5l4eE9Ca8W*gaYmIsmS7&h{Svs3?bU|7wlwVFq@?
zD*W3s3N#o<I8-Kmv&F=}p02cB6n$ylZ6n1gvg{F3E_iz=)*u;60+nC;@u;l(;WAJh
zkTPsAEC<SEQ0)Erw9g7VebMdr0V`#ab8`|-8$oDuL7mZ5BTGsy83KzrS`9rJ7CH#=
zU141W&b;Fk3uF)YDSdCxNce5I4AfQf8KSS_w)(Gz0oIeql&*_zi`J_lj?+abGRchb
z5JmCJ(A&}IhzM92`6r@kEaGgTCOI|*j$0@9sVm(#?)!HO3e3;iVgR&$Nl-4IEJ4z5
zzo0#&otF=1stQJwpu6(Jsprl43lwEPsFFw<8<V1|d2iW7>^6C_fgoc&0GeW|g`BJp
zMw8ti27$jBYP|O&_ce6GXlB+Y2()fKo6^>^r95TzTRxZeRLoIP;F0h;^dob1GrS}X
z9O)oX9^lhB=x8=^H4B24cV=I8Zp)v-?XuM2{s2IK<Un67{jO6{-~5yHBwHkL`qM-<
zfu#X8q5>fe`BQ+DJJsZUf0E{;$TnVu0z=s6J;2htc{R}fWK}!aa<(#u*uD$%<Fu}e
zTMNe8YTQd=sF8XR7}{MCxD2~!CuuOwmm#z_Ul$*(!21@^p$~3QD+*Ai%`$9|;dk0p
zSEKeyrBt)DM@(&=+w_9VjsxnR!H<~=<6qU|it#u5O^WEx0?lLqnWa(6H<PR=o?wV!
z^jutGYj*XHY;DVHD*AAs=r-IrmvMK}V+i}(`1k2Vbewhc%oBeVGi&U({3+h0x!CyF
zqs<+F-`2SLm#0lKAuS6nj(7zlK=P18$;1VMUm1=L>r0+)CJK5s3Vk~fYi{>Hw|i{M
z;Hb!ckUs1HAiod-hdKhf34=B5HupGPN67as9(Xp>{hCP)Fhs3Lz||cYy<fe#1C~g`
zP<1@dChyZfk%e)!8;bbWyF#o;fjSnEbf^)$vJJpu1XteX8~;M^8@cess$XXQKrbW5
zYVBv(ZSPRoL27+|y;BBFTDu1(Y)9gS9XUNdULW=n&j14~-ZUSeKJUtsOU2oO@j;M$
z&Sf&JR{-d46tEc)iMm<Lfw@_B^~P&~$X(v20-`4?J6bHZlp2voKlpDnatvdW*&u~|
z)Jf<3m2A)e0<y+aEP<k1w3mrn$~Do1_d)taM4g7ggzKay-l-m|hyors0)EWzF<Xih
zlv+NG%)c3;J`-f4GZ%Gq2jE<*QC|X(@wO)kFe&)!V%w%?6k{+5oC7)5S32K(u0=bs
z>hR15mj}4_T#ZX>P1^tb_LcXI_`Zrp;BOYd2vtx<iXBGAfJMy8CAT`^9DzMn^trKF
z;nEdtL(eMWW&qv>U=fkHNQb>&PbT2Bg3#u7rYoglv@<J`6AxtpwymH&esRP%Au1&r
z7;_0=3z}F!VrC)kXa@%gv6XJ#=!;858Qvy&#x?v+^q;kyEKC#dv;Mv3#Su+++K`JR
zn`eI&HyhR0CC2n}APLqqP#+ZW;X#xc>Y=cS>DQoie?8p>LXR6YUC#>b!#at|*uYb3
zmixGZcz<V4(cJD?0Jiu=^aim48Op-)6FrO?@`7!nkkkNZZ&th??oTQWk|rC|RUAwR
zbQ@WY3PjjOXcfXJZFD&(6+13r#G~!Z*kdlnKtq0pZ?6RJe-CNK`0M~hFuON<OMG`E
zvn6FKa(W6aOfa~cvn+F)1!iWbcaENXnIMSYD_6k%d_v$fwELv_WN1A4HVX}ZH57dv
z!vio^oIFRMC>xw4i0rU{-EIe}kyC-IvW-xoXZ!HRvj4`tR>0MJxEx_=spx2=S?x6_
z2V=1Ea_isFKt3!CPXAb)ZvqN_oVuQy$>R5JqIb+<iWF^r(i{%!a#sMN@E35XkJAxf
zN9LVPPfb~1vvFxewFses*%BJs4g50VFs#VGJa*MF0vjh#c>Kk!r_DO<BG!hmp`e|~
zf5iAQGCtJBWzRA((T4xY&5gNttrqg7^&N@0Jb+yXI;~hNLed5i;&auXgM&Pey759(
z+hq#g4h{c6$)Lwoj6pqtzXy7zj5xK+q;T6F^4uOmojh$?uRvFA0DV7sQYX4^z?e#j
z9!3&}?PbE->9&K5q%|GX@h@ie3<n3A=YYKiB=+tfOwMGOfxg%Qxt4#$DdppzbXT5Q
zBR{3S&Gd6?kNUCP;dhp7_!c@7wW}Lxc&30rnd1o3tMqvWzdi`(3r8GSJd`G+e>0c{
zOq2xB2QNci$lnedccA?ERiM*cBcRT=NNqLF?3KEj&F&om%QcNMZlzu*TwUMuFMw{F
zX7LgeZnvaG`?F1fz!Mm3USpOZ+6m?bLC@=NKqrc9+1N4{f|nUBEM?ls(7uG840sA1
z7B^8V0id;*Bl=sEmTq`tq;#~+mSCO%a=So05@wUtI6yJAOR}HD1EIY%N$4f889r{@
z34D9zUf*Wffx>r9(TLO<Gi2ln>cb)UPs{2zzU=^Ed>!=+%G^n1|Flh9&uLP%@dy5x
zx=lwhar=PL6AUQxtN_@zyCIx&PMWOK|9E93X>%oD(atp0EtlA?{pq7k+BcFR_S}e4
z2g{U%Vild#>gH@GZ#;y1_qlcbN?@wcZioN<GdPqlaTdX*6U_Z~w>{;N6oqR&;p50S
z>FQ*#Y|Oo1zEjJ_Q87L-+zzUByZRMBXfuS{yE0O0X1f+Thz-?YDaIiy_HF!5lk^Rh
z>jyc64^?cjT<IBDW$df47)CJmV5doj1}@DQ^G$Obe8b5-=}*IR-{^a>+mH68&WvuO
zfxi_pImgp;M%i#VBFGA%tFjam$v`~LMFXIkT6i*<<281sN)}j44Cv@dp9Jwh&lg;l
zW}=K3%S-AOwaB<QSH6Kn!2@mq^)xNEtyeV85<PZ=_nxOne)Epw@-=qrLhBbmWMuz-
z;nPwvPD4Us9hyM=DskYa#7WV$)%Wk}G0B0ZZ;GCJ`%S}wjjkBOBiQt5&@hwaqJo0a
zmKHl=?9(KQv>7Hi#biqmnn?DR3z_$=y+Nxm<&Uei5k;6^R8L0fZAxWh{ERetv?+O*
z02|q3pe6C*V);(s736t>{lB+ypI{Rio}w7Cy+qTy#iQ5w68~K7lmE_GPS|eC#iH99
zS1kfWd~v`uV9^m2<>4(b;(*xV#T@@ajfdSRTnOz}zaZclvppYiT-8#ZUY8r-F`qFj
zc#?Mm^!^PYUQTf90^l=iO&}*3zkC4P6G7tLJxbftDA9T2n$bgkQ<|6Sl~4=`1O<%Y
zHw!D&B%-+6H4pbU{Xm<8^f2OS&Xw!kieA!>r=wCqerNYD)O9j~#Edq8e<63hj-fqH
zVK<M$T^-?L?7O;(Boh*Rg9MdMFNR%xG`mc!1G@%*!>k*6;~x0-@}86eQqiQbzXiqk
z$1E@#fOWNXF&Ah~7xVCu-DX)<ByzA#AmtQNDKg>Y2x?qWzXDuKOJxk~J~FqTU%@kP
zz#j}%2LOJom}CTTL6KL-bG&arTMMGFj#E}BhFY;&;MI_vMzQjMk8+kIBI)G{^ILxK
zZ3Y*?ItSEl7HIaPz|6xRXw!pAO~MBH{MbT_7d6-wV~|-rjt6~&2n~8){*H3Jt>aJ#
z#j@Bji05aj+d6^nKtE%XoK|6_*dd#*N$at3J{rwrua2SLB(Xh)MBTg%p8!1;{WA0E
zBb6JKO7+z+*OJHhjiBK#&EP_i^3wrT_#<pz65_xSg#=dWFG4QT=@|(4qr1_Hf|wqR
zEvN5T#5jox<p#K9KV4kVBd@L930&Xr4;q4mO=?}sOOfFIpQxl`Vx?=W&zS`keBWFl
z4>kyROQf!@P7B%DP4`2KYKe87sIgRMiB6xN;R@u|(0S4lPWsN_i{XAg(ECc^f(i<)
z^%n8>zFi~x*w0W$rG_XFMeZsb><caLD^SU!nWG}{Pxng&5!p6Z5W6n>T>G7iHIN@0
znC(4w_XuDPHpAHL+)s7i9~IaD97ld8)Pas#=^AUi$<!VZl*e$|piQ^!XcCH8fP9%S
zLbUQ(WFbNz<&x91E;wKY=)a<YoO@4EfI&ea9k@{_rWJ7LUmntpXBXkLGbMkaCXOyF
zr(iuq@YBZuE(~Vmt1vZYy0F^Y5=?sJg98y#P~^o03gW|^KxR-vN9@fL!w5hz)WU+=
zt}>QSRy#J_(-74K(xF!42)$u4Wh3lRH@mdQlOz%D>0-a`ymHyg`jeqKVuv^e-Np&t
z0x42A@!oJPpMKu2NRh#a%joI?VTVeHK|G3|H3CBxA1-@^EbOWEImkf*_m^vW?DG`9
zsUqL}5I0ypp946~vpE#8bMm+hsTVX&bz7<dh`%Z@d^8ELS|)(6^D{OdiY_EEHeZ|O
zbHAuTW*L*)M#(^dQd^U78{D%22bMNvT!~(d%td0y;Tm9%&~rA3x@O{0f|0y{{i_A(
zX4a&P6Zsst8Ok%I#L4@(UA{>H((yqQI5H0oRQIN~NIepVwlw0fG32>%_Gs4*K1cM9
zfW)4>oUN0g4|9+j^y1xDGP)EHxQG;Jz2cGjW_OnHSDb2Ha`}D{KB$nmxkbt`8?ifb
zelWYLV|k#@7n{}#3$KEHg;MfXc!SNb)7|8IWWrC{Pw|m}KclD^6`3lCp|19tA}51{
zCaV`<!qwD(>lcB(UGa_57;{Q>t)4d)+9)NW2f01ldfs<VEtNlInOdj-__!igk&j*!
zz8*4{$E95YfagAU+5e%5o)!>%`zu~QcUwgBl_JWGMAG@@s2H*%hUpftY%;P2mxtC)
zaAmF69&g!J?^?25Q?NGfbg4knxoNbdF=7^w2j)8}43Q@Stx;W-2+^6a;bI3hb%HSh
zWH%1VW5zEZjfN3!M4<g(k0yLvV+DqA8TGhBK~&%8NiunK?&*&iTrXgS$HxaaQe?`Z
z#P&&6l_89MKqP8Ihl<|IP>o7HNjig{Wf#vOcJy!4G$!@Q!GW4D0bwV<s|q*Wo%!sg
zL;IJv2<km&i{_9c@cfEt(*?{;1{M_bMj53OV((>-<`t7+D&9&XSoha(*byN&PUFQS
zmOvu$vceOn^vZ||%E|6OzYkoLQ(>2H8m=q0^9QSNpQvOANk1`)TYAw{hv#4ZiiLg&
zL&-Z~^DzwVlPlH!BP&U7P~$Q1&IJRwZkeQSn&K0^txRj?Xo=N!psVnXf7?yK-|w*R
zkU%sn{4px*Z0z;nv>203^n%Vu5pwm{PiGxy(fa90m2<^^-?@%J5Dd`j9#6gUOMiR7
z+bv7YUfOl|ZHG}|D3ZIwheu*N_-AUOKtN=>WN&6;4CvF;X~*@yDX=bBpHPgsLA~S)
zLQRVLCrlUPV#DG#Z+VOBN{g!&dZ-88e`T7mUWjq990lor?;OsP={<9ooi_B#o(K8m
zsOF(j4<?2D=6{P}Y)%%%H(#wMja3*+C2-qk@&m0P9;3)wc+ZP`S}*@Us?Gu^u4eh$
zfxsKwgG+Gt;2JE!-QC?Scpyj!!QI^!cXwwOx8N2axI^&oK;C=*_p92XsM@M?&d$u~
z>G^f{(;H#Dg4-xBBJA_HY)fRl>Ov}_N#SU~EZ~`QpWv$b6+TsdiDu(GbczMx$KU18
zWo{S6mP^hK|A(kqdkCf`9uWtu4H{|pIMVGB>rpJfW=b8B<I1EzY<7>}g#f}ca9t=2
zi#V9dfUT}KA?jmw6~ll$MEPg@-xG_lGv#>B$@h;Pf!G;L$`%MPo<~W1>wY|YGYU5e
zxpt7Ah|U1{!a=|5+i)3=t8|SjBwC-l+s__$73`)fffWZBW(@z{<nOJX|N2wOXTb$%
z#+vsc6i_G(A|%n)Ac)x)dA|-?lM_eNU~?|#uQ{HtHgGDyAwZZ>M1CN=k6kvcVMmQ!
zA#aFEu+{Q1ElU;D&JbAB@h2kskKFm6gcD$;VR2JTz4|pSBO0JRL9ao~akpEY+c}(!
z9Bn^OKa6ya@#ms{z+`44U#}H8@;2M%d?z+vyySq={_-rIZGHIeSI<7l%&8iqE>q>=
zp8SA^+r|Hv@9}b@_wvy54Fk8g>a>T}Wnk!}X-LWrUauA(x<-vt{Im~`F19z1Y=ZY)
zdWuj<n2Sb5qRXPwHx*TJKPc8-hpO+0>iKG|TJF8u(H?$JD}~iLc2$D2&Gor1t5%}S
z#GVQxPoHBNR=pz2>ilM^<JtDZ;j91b+vkfu=}kJ{g_lwH=(ic=dq0g*SASlx;fQ`x
zD#ja^=0)D6CVEr8zh%6ydD5qn%zh-TS=L)ZtZh$`&b3DZCZ`=amhjsqDz{tIs&D=k
z_(dc5E8}8q3?tKRzW2i~0;R(3!msCxyI;mLO`Z2mj(&$K74B)x<Vam>l`NZNUEZ6Q
z>?I6~sD7-y`+gIar+a*))N<-MDaj~;wqw?D8C|N?EJJeC=t~l5U8T{t1$Mv~L|dyx
z<j4H481TGjQTr2iA>jgxcr4bxj!6JYhF|EW3&-^0X_;Kwd<;BP>83z3|3^J!aE<(W
zl;>(_M1BwlwKc0pyCj~-?`lhw#}V!12$pLo?e?Z|cG*yQem|7H^)vg7x32yDUd75|
zG<!x29<$H8<20W(h76to#1PzR^M*2$ULu@NV7K|~Fug#}u>n6X4Z*fuM@=?&!#`0M
zL{0ffPs?Mk19au`ZokY(s}C-k-^)@7oq8IyS8+<6ES@e*<*)kk^(IRMGplzeIL;g{
z&{dV@&yUO>U7qA?wRZc1X3Lx+$PH#TOwS%YxQ2cW=*6o_y}M{h0L?9|^<2ftj`8U5
zmM)I?4W9Qr_E?j|$g7~%&qy&Kx2%AGv<hcGrv0KTgqDWUKP?Ty(7~~Gx2Zj3nstYh
zlJ)APx5q6$-0(-SUrH5`a`OLBaASdEexLlORryO2(i9aMUkIKUJN1s$P8?qNr>s-7
zFB(^8V~;fU_uI$OMtD|iPbIr&v-TBJqOZY<HODKD3VH%pPtZnqXSywBWirYl_z~G$
zI&rBEeLh-$!Z5&SehWpcXZMl5)T{0Myu<ti1?6}Z>7VmuJn!p(r2_}vncFpH{}?{f
z-*7TxH$E0tXR{)5b6;-W_E1?Uae1@{^1ND~GM(~Y?`eLlAa+jnJ{=F^F~TDgeU<uo
z)%omR&>S3NnN0lUQ7i$-UC&rJHMu!y{z%rx*86ZZg1VL8!xW==?7P7=a$2F;MwRe(
z?<RPId%y0K#|_D11?F8szI$tOp}7R&{}>qm0<m{$ETWXODIEC)X1e$(o$A+5@&z4i
z{qz#ohWlW*#B`dLWuI)DvfzK}_vicguDbf%;erhk7JM8gY^yy-@Hy@sMZ5U*+uV?@
z90Dw^W*(CDY#*z=eHWG4j#B(QKFkm;40XPCpSZ;Rd{XY&NQNRJgYOF2s{ZU*9%b^w
zyp>a;K=7%&R=-efR>(pf&t=dK3j5RMrE&%5L|OgAHT+ez=kYZcnEs;<!&HWsJd1mB
zow8I<YM~C}ls?f;vdixoS<c(7_Ub;^jwroF`;8!Gr5;oL+nYX~oYf>m``Bi@Rj<>3
z4r;z0d>+|lQ@UJPyigZX>#=5UTUBG!Caoax@`z|NFXBfdd0mQvTrG0kFsD>~Rw(Z`
zMJ`-bx?4wU{olP1a3U0lp`%6F9yIw-$1bQvgy5$!lTP<ElFxpZh_AD*MWI^}S1^8$
zQRBhTWN`$!ELV0w)X&u~)q38#w_KA^Cg6^E^6i!d3kx<aR=6sT6WGprWft+Y{u5Vg
z;VhKF;KhGItxFs`(Yu(L;6BzdbTE9KE0l;FF+aDM$^IzqaedwJ`Hthka~P^Zr(&Dm
z`Z%cUDOTWDy#Br9I5~pIIF7pzeX71gocq$T=GijzZc7XPqsJIYp6Nr>C&=;TlA!r6
zvHQ0$J*}_;$n<&cjqT?BYrpys@AHF2wyk;hRvKmfd*PF=y`+7cmgoybkE=z$f!_B*
zEtihTrQ6)>c5OcHQMyO1ovG@!N%+J(M^8ry@P1xmACn8kMm42$_Vd-&1GTFRs!BE6
zMR>1vX*EJI$p~zI>{p!GueO8;kAHm~#ybP9oLXzAk}}}i$(2l*8T4Yl*fs$h<_F(0
zrSNKxGr5eU0@BX*@?)vM|Lj!4hA?LcW}ko}KEo)>bjp)q#l&KGNTT^`gcDh%b6p}<
z%9?INsG+zKmlEl!+YQHRt58q}MohJlW&vDXYALlX@7&-SY?w>uwUyHi>BnQ`$unE0
zy)LLKq-5mV8&nfWzWdNHWpe0t2MHgmLa=0HE5>iwx=mN}e|p)(j%s$)s#l=+_J<Bz
z?8}4sPzbO-^>j=D2^aHQ_2&XrNCR4PvxA+YABTU^A7AH;;+>1<G;WEPULSbg!JbX5
zlElEz@nhj4G-<(Wtb&@BPCTCE-Ql)T7xyMH$wQ2NFUP@p)qsbQaQNt%LY<KOIyL<c
z@#eOQE6=BbY0@W*G~j0IhxKyP*8``48&8}ZeFBa#jh~kbjvDXa4vDFg@YEh>1j#kS
zRZ9Uip^>wJ2*`#h>(kW#-}l@Ivl0UmMJrxolxyxe5-;p}$LSBM&}r1zqw=9&y}xFZ
zXAlj1YxP(TbVgb<3&Bch1ufRcw0qedUY3ePa(AQ_Z&R_O^k90?cF_(WdV`x3yLb$B
zIkn`qW@<;^0o{8Ps>`M;QQ3Ke0#-PR&~0{I>(%|OQ0}k&j~|E9BB|c=3jQ>HtW5Sw
zCj~a9_aPY$UlM<v@gS<+ORo4Hqiaj0+BF5>obmjA&~E$eNDOBO2x#kUGpRORy|iqn
z^@XyPD^zt}#Tu{(o#_&?ow78d@jx6u*X}d+|AO*?jzp!f?7w6tN`K#{>ISqF8@l%q
z#?1eGB|?+@a0`=s)=R*)GbJg-l1xXxm+)SL!|L|(8>B___(+c%`_)NHAN!7HOC5n3
z_1rbIvgd}UNZm0e1HsRx#;dmG;r_x$4Zm?P;(cNJNx6*jc|n;*tqOH$cJ8tM=P(!i
zX>HGv>=XxS@AC-5j;Y{@9tuZ5CTg`*o*tKjeBgYV8mc}4+mqv<4JJk~(q9<lS^L5)
zX)Pam&D{U4?*FfQ4*W9`E=<>j<nZjbD(5v`_N5tzTdq_Y&HC;h+*rj!!l2s{?sprG
ze(KGZYU$RJmOR#mZRyu|mX#_9Z2YiZrKc}Vu9RBINu2xg)qNuKd3SCEA4kjE`G{Qe
zer4hQz-VFsQ?qp*AaHL*xX*i+9%(u~k%*{P^}|Wyz+kBKMll3e0-BNvFn_&YlKKDl
zEhMLk(qa+S1$K)KZ1V|%z*m6<IDX#kkUM_9QnV5i5&nbHV2WA0adj&$JR12(Zdpcz
zsPIjtpLHebElHa5wHBI`wpM(@XSeG)uF7T_^QuO935Qx>wM3!{7znfJwl>Kw*(lyq
ze5qoIlTk!v{j$~TzVbU>A6*<!c0DtRW7S-28Av?-V%`;Tx2cE9GoxCou1K^*j^k{w
z;Nw4M8z}I=xvZ~xlHCmDe+M)?`Ae)pFoN=XYskoGbz*Agy*#iWs~LT-odr778VQr4
z1V`&^78m$xm5?`kSvmlh*~9Qe_&_r&_%42O=HhT2-VD(P+JJkEa;hD(*shqW=NMm5
zWzvU1>SWt;?z6{_#!LQPzfQRo-=E4YAN=H5UO$<xj;PbCyCtIdwCuw_jwp=Z=*u9c
zdfwq`g&CI45G?{X@V@J~1}v0n{K3O9*fc#o<jsbKoIl!8lyEV;0s}pVVS)UAj$zN|
z*FW&JG<gVUBfkN!@C-AF{pegc4>|Hl(SU?6tk93zRoQ$iF!f7$YPo%@C)~OW2afvB
z5pUZxjLGVpRCKTIQ-t~BhU@x_o0uj<SZLKaul<I(p^gv|%19I;Es3Yot0Edo_<jDo
zOoPw)H{Kq{=RBAXsXs`0eb1Np%+$4V%;$NRFMR3i7Pfd7Z4Zc23woI^a1r^C4!zwv
zYPPz%gyN~)`NgS9`e1+D>6NKj>Zs3rWnoBI|5@4~_+GJ*(w_~@q1BNuB|cjO^1q!V
zfb+db*1Ikw${Y)|7&pV5@GqUilwg>19ZH{fgPpGUKlv1Ln=spv4#-#TI$BuKuvd2L
zZ~pPmy7qPd3L#2FH<>NhA_v^6_&K>|UbI3izSpRWq9C8P<rTgss^q8BIsa0@wk`M@
zwfHx7rx2b=yL2Z1&HSZZUhk;q4LY&!eH~~AEYzkTTPrkzIofGG`UZ1rp5$I)gd{<?
zH)~aI5iU3#zhQmi4!@#Qt6pS<|I(^!FS)-=t6phEaMRvXkLz13uH2%B0*SK*Z+WKe
zHEgW;AgCEa_L>UXGg0=>{#Ua^ZHyuVXcY)uqoc<A|24}PXb!|NyUd6o=C_vPLhGP6
zCTX{w4<}VZ(qrkt@vu@&=S1#(J^}JEi`y}qrn#}GF-MDbdE!*xm>hB=+GT=?J36%D
zt17f;&k2$rJFZR37ji<TtT;;9h7HSWBK83!#qA8i1i|5M+gO~NK+E88ANctoHwp65
z-Yrq{NGnh?W{BVCcF@Ih95~+E%4LeKvx<ghfIj(U*D*_`Iyb@@)kNZ#FR1S|?+$oc
z{}8n&Ht1W)$K&5NUglE|(huk`p>eDibnwa*9DlCfo-$mvQ@S20B^(7D{=v$cNH{F}
zPEvA{KfM*E-K)eC>#N~6I%8b3%9s4s6?+`gBR>Cp7;hA8v8C1Z>E3Q`v18h-7=<&k
z$TYv=*Zqg&=C$QwU5&SpTh89{RXN5QHcYT@N-eOIHZUEq+6dK)7=3S&$^OSc0k!{;
z!d(K8VRe=5X<T@jMqcu?_?83YczYcI?Rq=P)XY0)#vkuSzl%%P!JYS8&JBmm34!{m
z{qK$`+CJJ4Ck7tf)ZTS4$6x94!EP|53&@9=qJ4L3y+Y#9^x5e=RXVtscc!1eX=ZP`
zeTNF?t1o!3B+OvFm>+v^GiW+lAU&XjMb0^*2OPV7G9OAXC~Df;(D0xa?kfs*zL}QI
z^xlylw+c7g@Ul>kj4*R+aq^#q=>18V0dZww3{ySq%mA$;jKQQ*pISS^-pEImam7I0
z*&GLDC(i$tK91oUyKj+c-QoGLXj{@N@XhuAG@bt%yLi!eA6cC5A2g9iT<S^*aTz2X
z;UIQdJjwWU`r1|mPq%1zj^N`w<ID`GSS!i`<fjpN(-4BuggU7UDW`O<-_&0G-o?T?
z)~n?7KU@_{7>|69#o5-@bn`&sqjS8pk~_w)QHf~Dk8j&Bf;b_Puc5~aK<3L(6|3*k
zxegMYTM41k-^M;<bf|GEo%el!h#d2ESeI?n?AJX|RqqxHCA?m3()29J@Nl$CE%BvX
zyg$|0{b`?`M)Uha!^2ZLg_n?Hz6#(PDXK1uNG#pF!E?Kn&y(Fr`NHV=&(VD(yXoNR
z8<_5<|3A0<`Nxl+z<?IYrUaCBrF?B8nHxRUpN0bYHpx#v#ZsLBiZHmr-i(UvxGdQC
zs5sa(p@&1IoyoO_U*jC`x@}eLD<i(%{VH{{Ox@0*Wp_Phlu=lXvIBP8Y7Jy`-D1yC
zSDlK)+T#{E1E$JghSbDs{Ah7~Kl-p~2Z-F)I}qE|35upyRR6_%waK1MG`6azU2{F{
zwz;Smqf#5hYF1m_>h@a6Qey}5jUp<sv#kwP>c{4NkJ<yO5rGYhN}-VB26gC7-0j*o
zbfIxgnWPiF;u@pdf9G`k03L}XL-S;RMm>|67I9@&`g>w1AI7)z9wfSyFrev!6L|_x
zLZ}&q0*ikJ9|}EpxDwTPfi|_K`P>M?XpY$z3|+d;x_!-(ZKaa3FEJEYA3~KmtT24N
z(}*U2&nf%qObUCcN~Jc%WpYv|z{9AOY0=KiluZ|Esg-@tIIqGO9%B1f%@H=H{^G?*
zc+{5f*4mMn!ZPJf8uhb-w0b{ToN2VfNIP$YCSKm)v&F`RQ~b{hD|&TbNXSe4F6$m9
zfe~EFx!COL0OxWe-A(wPOh-#hmTN8NV@6Y3Sz@X&rR~02$<72}8&vk#FV^zx#$&eU
zRIkwYGcxWFgU#?mR`lDZ2V5^9^K>KLvA5(tFJkz!{Fzl=E@x%MD;a{qQEf7mQ=tA~
z_S?UaL%P6MM|BR3*9i-!k9t<!GOIztdR<7NDH&!=qVIJP#8dl$)F50KHowRUnkU7Y
zOgGSPXRC->iUvR^=MHm}+&%lN8VL7bYE&9Tl(yKB?Eb7$YrnHI>%sX(`L9UlPbKy0
zT8n$hOZxD$A2YCVAB((m{A9-c0nS{4ACY8J5dIImL5?4s`j#8oUNDz%`&K#i`CkoQ
z%3w6@*kxt{Tq;X|0=6mNf!hCD5vZUA-8itJhiDEAIAr2i*PRzFE&E|DOsQv55at%k
z2n+hrNAxcaLD|vltHY&9JT1OqjX@CSD^bdR(vhMIoe&R+_)NpUt0?~CE6j(nG*(^D
zVm-6vmJ0HzLiyrWk!rF3EV4oPHDW|A=k1GXhH4;0M=oTTVsRR8uubLHq{*T9y;O|>
z3QnUByGknB%m()JUy^gy2AqsC86HfH-STX-$N9DcQ_Xj4QtZDYpT&x4vDz-NYOEMy
zIW>IUgLQlyep70hVp>5Gv&%U?IRdf_Fe&@5&^0V-aJs>J`ASIBe6~>j>C9wU=il$L
zlF?YM)t0Os#~2egAKG;Ck|P<RRte4Q&Jt7OZBKFk8#~R)hF95Wdn~CCOa!9&QY~&A
zlO0c4!4kdq|5<I4Xq^IYfomB%RxmaI*IMdL*2e&PN+w{15B&E@K4n$Id0)+kSn0*b
zD`_u==V+R8AWQ$XIOA~e!VEosuR$<;`naO-E7?9t_!Eos9rFALoetK~e=E*a@cpIQ
z2blF*KMCGilv1bIR(ACVc&I=7Zht=q@M|lfUPb6&2m3yO`fS4EV`TA+n_&1rn3@yA
z|GQ3<@D>KJ@G^c7TxW3cJD;qD=gVh8O%}*54l}-&miX5{d@KCwT55^i@%ViYi=%vB
zTU|C0aJ^+{2nozIU9w@wYD`JDzsL1*=@}Im?%z2FtY*}wR~=%J#1HjI`0vGTuZW7&
zueuRZlKk?^?b;vXz5BkKf~Xfjy)K{sR-yu8B%A-<o|WZtbD7I;1#%+3St(gr>Wb#1
zwGPs4hI0h8_4Nk<XoRoBQtw1qL?550NL6zm4EgVmPN9L~|2>w*BN}S<I#0bq@K(I@
ziEUi0WW?%U`TPsJe=>UkxOP{0xEbGUq5JGHBLR04CrtQ<LGZ8TU(CjJPU{$!GsQkt
z!$U6ry{r*jsYWID_NQ~i{+J6Oc9rK#`6P4sexEd*&t17A$33pzc2UyRwPgEEAjiLT
zjsBj{Nf19EM-FuDnvU<r^Klz;Q$BIgzWtD1=qQTz2@Rq^NbZ+Uk6(%{e<x?fMI1F6
zRrT*e0$LGZYVez?S)~@(eOXVeF&i1rEYMS*{m)WNL4;aaO_i2bmk?m2dI-6XUm1C_
zk@6(h`mZdWN5yiSD_Lx70ZhXGet>9-JSw}fg&6x?-z&3@r{vP>O<h^&5nt`P*$my9
z5LMDwvuerb?IH-hMlUKRlE0?CAC`08DQttXxSsw)8rP>~&NoH2LUo75g6Y$5Fa>Ir
zwM+fxwR~7QtMeD^i|hZuDtOfO%n)SGTxP~wnFpQiN1j!v_<C2uyxJ&LGW4{*8kuF|
zH_*1<ME&Ylhro5S`*6$e!k;Po2lqhcCw^u)N{P@m>h;}>Az*&}q2bn=1NOt3`f-Ky
zvb2g3<p}C#NVcxaC8^pGdN^qJasw_o5LVUCyId`j7b=t&Z>;$AZ4*lv|3)E%d(bPf
zATm%Rxj0M@Lr0711C$>vHa^luaXkKm(m)DZ+rL^+3I+dO6?(Pxk8f_-g2SambD}5W
zvZfEG^5Z24B=%594|KS(p4-E5g0qp3LA064P4_Uo4taB*&Hea?=TSk2pXYY-&vl*t
z1AIub&lBfl1vEObpjo#~gYaQr&_Dyp7MG!!wtawZdc;-W{kkz#1eo*wlI6~_{@Z?J
z<Z&82V&L3>XcBt<!|9JzztSKCq>#<e@8llZ;im@TqlGd~KiaA4kQ?1Zrn0n^$upxB
zoLwG^I)n&xLk1Qrz93F0T|T6j$W?0Yv5Wdp6*EumSn=ukWDn2?nOCSF1Npwd^ixtq
zDY39qDymx@b6R%?EXKP^|Jr|QRjX=)bQ^uDyjUXl*MZI#G^ZKdVl#&W>SukSV~Ia2
z;xFbs>8jR6s4w^U77L1=y2+}uK{L)s3k81pxrOqr!{i{D1s+Q(EB*HIN^x~U5FP#l
z5=og@O=8^VtE9d5TfsQXe>cz^3=61T@W@uf{l+8CQVdh}Td_zbL=s8{!C1R)n9p{c
z>;0xPpRxjB1lu-?F$(mS@>+_1m8)zf6u2oYa;jp1zlS9j126D<a%i-k236f(qxQO#
z$8{AkW7A2O%Bt#cNXYqrlh$ZZ{IP%YW$5322Q$n&J?>2XI&aAgV`tKCL?@$(i$~^R
zr~C41Yz}&DA`T`6&tKl&Q)JthEnji^)?jADG6!RLRF&ENklvt3IrmGy$TRNj3#C7@
zs{OKGeOXLoyhE_z(Z5b{5auA#P@qLY^Ih}haEJxAJ<sEwpX8V=XUszQ8}9h}S~8qF
zCO!^?a4F$e>}J23jnbY7_maW!q!i;=aFA3MNx{ZnqY{eoh%=u%rBx!?{vE1G4BXPd
znw^<pnmN#n+^8yjy1}E!-|v9P>wJUDZ#_z<<HvP1%_fIp*S-9G!`J?hrz$24@)+Sz
z_&;Od4TPrrJHdEd_*fux`;D^Fs0+hmAJQ>ET#@%0N0Ff<Z`(i<uxlw$P%aw}WqTuc
zKQKnEQa<=-zBIt1dFv0V7ifXaW4l(w80sLr{^|7X;3ASeUzM5xm*nvKL@HHkb?Wam
zv-pvCK_E}yU5V087@pvf9iCih+i15~qdatY$gAFJ#Q`0vnw19%)$EdKm<c93+qUH>
z<Y24wP|U;gho-#&-%NZmu{j5r*`h1NCyKA^q--)o!i_w{b(bNq_f~K2>PgU89dqy3
zS!yB~32h!mw=N<)w=Xlx`ZH@UNf7U<NN~&|cFS(RG9I1zpC}|fHJ<L5v7H_FkgRa+
z?i(w<Rp)e(jqQ{!nH}~8izRT4>{Y2f+d%~-=%xU?>K<K=I<Wn;<=6J=Wm9S~lraV!
z2Itu3rBbDyY$*6%jLx2tRObdUU#yX(qN(pN_%W}74FP##Nxm?TNumk1hIFsW;75vd
zp(vjIs5;GzSh(;c2?xHU8l8|JZcJdLr~R~cAnA%zUF75Oo~}{?olv)f3?p~prcueE
zh~fIl%;oNFPmhP^-K8ZyLExrlFX5bae1;Ii!Q5Rt_s?rTnG`w%B6u;3PURNtvFX|4
zfoXNBr9}`>qZPUJN0ktBd)4#tc5}to$MdK9`K;IOzRwfuR>jr)ZRA}K>i|+jGUMcX
z->2E1?-*!xNKo?)ZK8sAD#mayPt>dLb^xT6wa(hVZh{i}H*82$;FRm?s6|bUAC+jt
zW48MEy%8Sq>*chTd~M%aGJhk?PEk;cbbW!vwp>EObKwi-49wFp&#2}$T|#z5xd22@
zm1x+#PrD@d>z~V@=1{+KmCTB1x0D6nLc#NC^Y&W?m0c#K#lF27u^UovTILti9GCv8
z+y!l78qTFnDjy%2)^_i~v*fDElQN<KbWKi3<S<ht+4UziVpzXKaCy40<@TcV=|XW4
z2uJ^NQ|~}%h2}{ATfx|wBHU^aOfe11+g8I4BAQg^{ByGcRD+<yYc>w)+Nr_!t&w6B
zp+OIwsVf0Z+i6oM9XDAqEIvP*I7z_XNbbzAAfkg6yl}b>&}L>fR}T*|-XN`OTF(wo
z?U^2_UgDJrV#eS0x$}vJXg|mNWwK&H_h^?i4OO=XS>+WPu+C8_OG4oUCCznq`M#QK
zsEC$DtU%8jVQ1<nh9rNvW@|?Qd9PeGqDARr^wei*TIz5dN@=R_;|9O^;Fkam0W-T#
z@5J8eVY8!e8Y^(K{{ZxdU~=Ha1&UTo6CigMF%Zu?<K)NgyXscE=yRV6g(@Tp9he$-
zRrgR^Mz2I!MUi=uX@zXR;?p0vlb`-pYeZ#sZtq1OQOuYgYRuG?)tRE!zE)+fp}vt8
z^KJa`!XdbXIYTu2W&zXyb@JjhndUp`?kDILIE~h~?<I8Y>kY7BF_DIWoSx!T6?}KY
z6+14};5%(lnjm(ilgNov?Y7+s*Z>W_3Ztb?H_$PIp@a;x;nPR)q40QunAkS)IE&Oe
z^cz!Sss>4xsf)r7Z9Xi?Hrr78W;qUi3QqI)tfF{<ZV#*vk2bZQ`kb94jK9XhO$I3E
zM$3K6b)3$n`O#aowzqePhBs-0HG&x?5zKm~rI!M)+_+|Urt^%1R58EJY!xG-{&k4O
zFmXXl4Uxqpw82^z++M1eYy_dF`~RA1HJFW-)ITHS8Rrinxesy@ZpWzTcnfX6#c;_!
zHsnZ9s!g(7^Cr}4goY-zL161lJ&mWC+f>P_@829we@Sy$0`D5^8ss3B9!?T`3^V0{
zb9$|!w(G1s#EnOKXHvz`@Z}M0N9G|^<91mbU!B{o&bh{kk^F$nb-q<)8N8d2d7BPC
z<&AEj!$wEx5fj8dVxOrwK>KcrorfFr?5l6Udl%TTqIDINSX&8liCo?jnOu8GwC8<J
zd;T^B7K*P6iRMiIEBTi$nzrmJsg@bd{4pkFiB_Gwk;?Hu=)GsKAF?cEGQBTD`Hvto
zBWTPC$@0AQ-1<?*^J#(~r*<rg@|X*AO>fD}z8C19OcAtvH{GVsOp(4N+hZ7)9vHz=
zvr8!6FF=|tYF!e;Z*XeX%r+~RSvo-2jA^ITIcJ}%x!}PbGZJD@HD4dq%SbL=C8Nvz
z>uOS<CFR@MnipAv!fPHBd#D)upDUmJ3*<WWSYE?7T>tPCHQ&6j&8l_+BLjEYMbum=
zO&gv=laTwfyf~8oCe6#PTv#<iOGe84SWoVw^hfrGbmt-xi^gxJ*3---5%WB{#P4F0
zNo{YmSgyTcrq8&)nV?xN>3H((Oo`*L`1mG!<~PuD;mqB$3FYNgWNLd2XkRLXaMs{r
z2YP@X!5%IfAI<=m<`sM%#Ys_ffv?d7_~1=K+ZScCvER=-!Z-zd9wy{VR@TmGzz=1P
zS9-)t&dv=os)GR@1*2uv$Z3^)c$O$l8)ClvM@?HmEq3tm1gY|y*xLglMxqgyEkaw}
zJ~kXa<bmw8X8Gi=x&^Fh$hq?QftW*OACrfue0X9RV<J;@rtGH*Q`ciwn3U@;+{$lE
z%T0IBrN>x0`XWH?$s<csk)Zhp`rO`|{a)Ocr_z91s$uh!Y*4oMvnqS_@BWVny$j1u
zp*5~-_n{wKbyy<XBEeMgRIqTWd+1YcmIk(~1oxTCdw?r2^A8mS4<y;?nfey2b0%XS
zyF#Y(HW6!bvGKcl@?-*YhZF`_;rfsv#JIh4#dIAr_3mYJWbuE})X`on(&ylG^m@(E
z=q>Ydmc%FU$7bsGFE_cph9XG~_~Enr>sskOc&w<)m^&RsPNEsaw9^XAql;<;N-}TK
zG|u?M<a0&Jkw>%ub9(kRRSGo)eZp2Kt_Qad&y=>9SsELQPdOG?iR?<e!2`Z0>URU9
z-k$f+<lmexgAWF+&Hjv4N$$`kcvF9mZNI3qm=ou5fPPZ`xVx*O-rKNvcauZM`4$P8
zieLL2c#+e7xV+UJb-iBFDFzV|vAMDoGiT-I=K{r5dFS1DR!TY10|7>w3*J-x?!5Wr
z!|9x>wWq9+1UjBAGKN!&P1}i03Hf8p%A=DHL{_I5SK*$?+8WJdET+#=x<x(AiFWTm
z7lAhgVyd-k9_j1nV_H@+`U$bEZXnDE=qzK7JaxRuH@Y~Ur84@20l}YbE`CQ?QLF4k
zjBs(;^@vryh0TiUQiiAtYlVzf*<x?YrA*(rN_u{YHuqXR%<7l3zE&$_OZw};-veL{
zytkEOIMGHMltf{d!i${mkL2IEHL0oK;3MzgOYUmZPNgsRkqOyQZM)t<pdmeMcX&F7
zz(-~BXv?M6<-N0R#-!?nQ}6Cl*Pt5*#DPGK2j_iS%yN5Qjf;$k9rCf+TV<FMg9buy
zlN1eTJw?B142S*~os#>dr8Vp36IR1^72`jf&torKLv<3=C+qvIFOpycpN#$`U~~!N
zgpD0sSvk8!_Wg|kP751Xkn_W^j-0%-4UCL(w&fQbO7$uR)i!)X6LY2r+ahu1kn?#}
z2Isdst;c!`oUU6N7K!C)?K0jg?^PMbZZ<R;-@gqFEjdPJ9l*8un5Di(-S{~b&(vyr
zG@TC&^@i{rfG&$;tp6$U4+<fTZnH}$Gj8Ow{Q>a9fGjlhYbe(A;Aa(^)ijL<P%vWB
z6#yGi{MPI$zK_E#YwNPPGG_dRY=|%Poar>D@vyOWVpO8PrnI<A2$q;^^W9=Bd;>Gz
zoxh#JT9VXJKn(kq#)oW_`397>>r7wdL?_xns9VaWL&!iRBMh4}XBE;<BgWuN2jX<9
zRG~sqyVcrvndRQb(H*>}bhl`hsXL=4(tjXaO#AXlJFz0#`9TF9p(?yoI0&|2eSYdp
zkON#!n=Xk&BB&!L^x(pC)VP^8l|}kuq)1<}5@#|tEKRmtEdlk$PRp)yLxJ#^lN72B
zOZE(&Nv<kw{(PX2faU;a<Cl~DcrCoxWBV6#&7H(og>MY0$#)VQEA&0Uct!83?K%%$
zn@ZLw*E$tew4U=Up%qQF#^3%aEHr9gL`guQqM_?!)Bk$YI=WM672+bRNWzyMtv)F-
zyh~}cb^3OEr;e>G@|V%Jj!?WgX}u+oVCXodmtX^1bF7O$jL|)#uFtqR5P7Yq!8n2&
z{=8LvmwS~XQ2w!zDSm3CzP10V@;*8@&D31)#kg3)kioKJVa#dmBtn4^UD1ML6<I>D
zypAsE?RlI*fd{#QJm_FTG}VHfY^lts^Cs=chSH14_V`&GCV{u->28%SEFV~bF5H=t
z&yV}2u)u+hZAaRL2t$<Ue9Dq{p*e}C;VYd5X?^Gc-LEXL>Cn|y30A;-rD2cB#qSBH
zSxs|QxDVJbz4_Q+9CW)c;pd8-xEKAibZL^}b9s{90BfC`8jU_FTkkWJqc5$4hnJ(*
zTNgX%>subx(WW%DV49dGV^bAj3O_x{zGy+m9p`#tLnxKW)aKTB-URj@N&)$~3d+9f
z-&0*T_bRf9?U#U2>O!P7cNvKl*|$z;58zcCgPc=r#q$6|YO43m_A!RT8)*O><I>=L
zlaiW~Ze#HRFIXt4*vnSnJjHtvw})k4iE=omcVB|0?V`6h>SxbVbob8Ke4edBkqLBY
z03Jewb@@5ie+!lmZg7YuN$k78^=*7Z8Z9U;^!rA#ywxV|>sY;cP=+A+j&mKcy3B|)
z=D{Del#K5;D0~{cNw2VhXIAb9p80TX8cR-M+dH&e)TqeVmsj?qHV*p^&?SJemor*7
zh|r~#VRv#)Yt}GZI=3$`oR~mf@HBARiR}qj1PM^Rim;#?<<>n__cF|+RfBBHx6<ih
zk-#sm=35zI+1t#gA=Lo|zgaB?oJ?hP)5H}>Trt0pPtxsHoPfP>L0Wmfi&pr1`(!dQ
z+%)tMI@ZC<Agmb%dsQN5`if-FE@t~+>!{40L};?qFztOEAugu!d7jKUyS`d4t%z4g
zT5>zgndA!U4CR;3bz#Cf(H|m4(2AtPx2}C9J3*D{K;?Rvk)|P>B_Mt)NI;{FI4mz%
zm6S;(&>uxg&&W3UWQ0^jB+MPeyp4l@_9=zQ-$gZqBzK@B;~Za9(0)dfw+~7)+%nr`
zb}xP?&+kRV6>377tWTtWs=YDU#EBx8QRbanI`LsF)To#6QLocTsP_GKM3zvdsGs2k
zG#Mu%T#%m|>lzghGPNx8g+bhAK!A;{;(xs~99o)I-Q%%s@!QHAKIcR3?p+OeqC?kW
z$ZMmkL>yWnnY?gAxff3sNR?h|R^1DFH4bLTta*qg*XQMb>7y*0{G8A6j*S@wMZRUY
zw+ocf)?&&-P~jL?ohBxgsr~_CNO&E}=n2Kco5Y*+JBAO@w9;)5%P2XFsM;BD5e}j<
z+miB(&1GtJ-Gsu&#BC;I*Tzwr(bEnfbpo;@dz-vlg+B-nFk~@Md8bQOdh;KafH}#p
zE4R`tbxUY_tEN?uh-LfdWIb(72p%mG*f&((LovX7+1Dse8$rda7jlXN{g6p~wh{QR
z{ig%)=)@-&+AXCoMzJ#u*#(u*_PzVLGtL#EcnlR!_j>MaU$?}Kc8To>S1~}<eig}D
z?5bkb>BYXjk2A#s7t``>?WoBWmU<TkNNYF#{8L?OQPHDLYVWhK9UdL3fYfzxF(uys
z37-IN_bH1FKJJXSeko`8kYR%b;n~Q(cZX&~@al5<9OUSw4zi~XxyR26`kLQMEYxR~
z_0MLL^Njs>%L7LYQeP?cOju8me4kUdL0KH2C!z=e4-E`3lLX|psky(7ZfL>NTM*pF
zIAvwIbbTLW<weu>L*6mAN5^fYezs<_trOMCVUTSyV77r0gb2PP?h-aujORyCp@Y&H
za1fvms<|=jzDm*ke#R>M;%YF!un9nvIyy~2i5}SwENZ~+aw)USIK_o<=5%KQn|{$W
zNtP`9!Td`st66S?0BV5gb%#q2$tAp2qaPPdLXadNvSUH}fVk6{cVU&{rh(O_+3#cp
zlDlb&pQ5GLpX%9vA`V6oKPm_(N&Xb{53l#zQtQcnwrx7_XU7Q??zJzCqDU_}{}SR^
zDswgQ*j)09)^54b!`;tfm~b?_Nr;J-jz;d8n{Sl^gc*bsYB)IHZA6{|w{BYsh5B9s
z+F~W9<$xy+y|Vhw5fmK$O>NSs#mTYOIo%5~Gio}@HnLdf8{t--lUSlVU$I=SBjtIv
zLv;k9<SI79nOw-}M>{|ecng$VSw>^N95RHrFllBkA=@GFsn%{=m?rQq-d8OQ==IPh
z?X1(MpjDLa&IQm#@Mi}%7G+IptoOT;I;oW6CvzYNKM`6)`PSruwIxqe&L4ie5%iz7
z?~EgY59hXTJbA8}*zpSZGl!e-slKa?&aklG<ijYD2rSvv7js|VI=*MPzS*GDO7LPS
zu)dqGcNQIR=GQF^vpqknYc^<-F$rU=uVlg`e;F6b=V!F36VKP)@~E%<6rlLB_J%Ow
z5X@jzaG3FL^!CVO2N1m=ur1Bv(w57h_*#|B=Sas)b$+eIgh;3j%Qx2V5DMJiDx(G%
zvp^IS7JeUTgRFToRGJlcMflQbcy?$|MIEouR8!bju3%xXi>;fY8f2)dJ>LX}7xWE%
z3md`$H`muRqd4)y0<q+t2zmMQUT_1Q8h4Dg@25T#8K&zfT?;N9!5aNNr#<{)PVF|c
z@KU`xEwxfDT6*=;sI9#k&$^NQa9T@KJ6pZ>?}}icwpESlRl*DWR0-o{611$($v+P7
zvAocg-t#=GX?hG~t10I*K4mG?1$1>51vTee^EsfPTKh#ctrB?x%D6thOhxa!LGsa!
z3@OIzJ_a^KX0+}AOgU!QkEkb|Z~2^K?WiuRA6<tRhG<mEjPlT>*sSJg32c8E;28(3
zr78D+V?!HN36vmD5dTo#SeX=DNmp1>7M30+TY$l|6Q+7;Odd3hzYxw*gSE49co?zv
zCe!M26IHNmv1l$Hg{XENfii_ryICcn2o<J|JMoGbD>1^SkwaLr**Nun!`jT~*Q(p@
zB&8ok|4S`|gfOu1*$KKJ+bPR%Xw~0dyqAA<!*j<`?HXC0CGi?HRmOaukgLgTpF3d*
zdi8RZj_!(>87st)kV6jo2lDe+#FUF7{n-q&<_qL&b6dB1-a--XF_Nt~?eb`_w3;Dv
zf~2{e-3<cr>D*Xzu?xEG@a|nir?oMLDyeBhe^+Ca8;y!hvDT)VW-hvf;UMz)*82H&
zKVpapc_Fh|n=NOk!v_4_Fim_qbM;til)w9+bw`{V71Y=YjF_$SBnoVxTW$=C@MK+!
z5M_x>?T7un19~Y}`Wa`f2bMs2pqllvFjkAzc4DKi+F~LnP0u{YJMlih?s{<!(NaQ4
z0mfN6(P%uu>-o0}L%RVi)Okmvm%0%^@_oF)mal8SKJbP&jV#0&;jKS@$HBp&=Y}?v
z0MegVhYhT<LHVFxnPo}be|o0KG=UWGtqu*N)IjkHU+aV}55t#rh%>!gk6|iJyq@y=
zR22gHe^>yKIOY1Eh0a<h#A_J~Lkru-KP_!}l>rz?KnXiFB4)LjD%iCO@kXd()aNPd
zEwAmPmApSY?RAB}=Gs&%)iG?HY=0aev$0mGVE5kJ+cU|&?R@JddtNQME;&Z|=uehv
zd#h4YfARNB`4b&ZNLoTuwS^y5g0lCe^2VYYCMMJV)MVd<wGMMct5|=5&-I{ahxYa6
z)}FW#PaxY&E@ak}xIG;aq%Q*GMwo$XV>afOPI|T&5BjQGE1Wqm5eJ4KVLJ+PQ$GD^
zC-tkg@o)R8Pc(ylLO92V8W-Ni6pnJ6CNG0EIja~7zwtm7Y_KlYo*Ktg!Hv4>YE_#^
zzIzL2PBimSC7a4wZSWZIWgPpPMhp=b(-10FazJywPK*?r;>%7^4bwdqq4;*>3aA?z
z{<m%jZScuEtWbLqXaCid$waA7YW<`pvVgy~B6D0>DbBD>HQ4938xxIqjc|+VXvD~f
zpw5CfbN>3Du7{->y3ehRUQCx?B{p#?$h<Pe-?A&z-4el>-?ZCg-{-_cAkgO#4O7*N
zy<OsEcs0E+tZO2QUG7mplYuiMP|-i(yS0_PeYb`)`Yxr;Zbr-V;x{S4ESVChXrrP_
z9%wt%-fqc=D}~7XB_npqcbb7h?wS1`v36f}n{CO?BQ48}Ol2V?(f7&~9@(l_Rtu)S
zJa3%7nTG9!q$N?Y%qKq-+1CDys;b3C_l7suvrtkWPYh_AEAW*pPDT-tbfjC?NJ;E1
zIxDab7a5X>Clh42CHxV2OytO9R-WB~RJG$%uIZyV4do*f9r2~D|Kig*g58dz?R5cj
zZ7-)7ab>xiM@+cDL4yAL;#gS{Xm&KXsy7A&sGdn+&?Eb^7D5Se3=YlKuD8kF=G0D$
z(}fy9*fBa6R{YEas}f!C{Hl!0!2QWY-2~Y<k3`g%a=$nmIM7wcKcim}X1bJIgt_<s
zWKLjI>tXIO(llvr7hZaGwhUvl@h9fOLs4Qt>Q;%i4u{!bTY0Z_vcP_L>oz8dvqR?o
ztUmSbCSPjb#dCg!xmri<rub9)=igmwa#cto((`@Tg_tAdL^-inP!SPmn0r<@u{tYj
z7dNIwc@1FgxJI~Sq|JzbdYr$<W1{`g?-g)nbdj1=hrl9Yf7^APEmk(?ST#3Ol`V83
z51)J$F4Ku<vwO24&<^VRxPksxdI*5~sbg(hJ`ejg;3bWC90m^1%oGe$=^bEjTls6%
zovRGwu(`jPCRIRY#lJ&&{4m_yCZyj@(EOmbonP7tty(#VtQ~w-AAiS_pTzT)qb>Sc
zSJD(jR`R4pBW;=}fTJ_o)lV9i9TB1Mo>*O5y~QRK#-~qiOo7(7xy$M93Zq7f|F?AB
zg<j%ufI8@#l`zYBnAzb%-FXhqcIaT~7Z_VldMvI1Xas5Hmv^HZ#-_Xu;8&l(cY=VI
z9V=XzL$6%9#H<nFBhtDQooZdmT1U;TD`AC3SRzvmHW&eeM#WC<a_X&PkqO2ZHo`D3
zN%~o|(Z&m~LR}Jr4e=Wz8KMA0UYzvrdnR$k$!r{3bq~I|=6DM~x4a#B0KbbeJrK6m
zN2xk=U~(%tG<}qc_0IbZ;wWeh<}6-;#QlcpGdwlc1e{sY98wQ^6?cSRpDZ)7wY-Sg
ztR)P&5)0zl8u80w!GcPq=if=UDVjBG2NqO#=ojC1SB!WEN;%RL*Yab{dZ#`*$^=7>
zN)zMrYI}ov1?L7AtJMz+#q!!S%E->m?;x|3I|*^$TTGQe{Ax5%sUQ7C&IcE8;!<NB
zd2=~R<_3pV=}qUWx2kPUjWmk{OXf`4#kX7HE^JwWdL*5EteW>Z$zj5P-|c0$bvs$-
zQ|_}X%0|gx%%fZFR7H!H4tDPXPv*1&r>A4<8IabP?G-@K^V;6!$4<_dRv0Kp8BxcN
z4{Rb9Co=vwt?34iLI5YB0t*uQ?EcfGe!2e2LTse0&wUE9&8D8AiAF@dad34-yi{{H
z4P`+Qk`X1`S6UQrBXk-5$@5spU?sM9lz<+}T0{dQbzY65UK`-#%qC|KbJ{2i=A0~W
zC76k=i7m~gt1(y?Nsf%aOkkc<WnV2jxn5#UFvT_TOj!q~%X2%U!_g%4rCY+uuU<(O
z&y&=QabZpgw)@~28DUeF<WOKJcgj=(KTeuO{FJ2-?<fS|zt1WYP6uI+oKF6@%o}9j
z3}1R(FX|-~>t*MG`xi47CG+l{KZ!8)<BLb?fpG%EzO%Qv%k|;C^+Zm7N?xM`bw{s|
zxn^LxM>dzKX5mLvfs5XQ3Y{vYgbIx#WKqp_?;swNI$4^6cmZ+_dFWB*&!+EzJ+5w6
z>zzzP@v%SrI#Q;G)ce%SWp};JpuW>TI6iRZr#YIf>4~cBmyMjQCAv+lTnSDIsbR*x
zDBKfMNG0Y*ateRcEA$SNJWe4rNpB-5m7ihy{!VCXUWz<4?5M#1{c`W#B?al{mC=X1
zc}yx{+Sc~}s!<PNP9jAsF$a+n8fKTK?@>;bs54tm)gv3h2Ud%R;Ye!v%Mjc>QeaKt
zgy~@nVmN$G9KlVTANS@0eoS^deV8kr6|c*<5yv)P_qD?|B$=megpK~E*?#JN81{%x
zUv<H13#4vc_s~hZG>+8NUI;j;yG5MnbfA_KA+WmR38D?2e#P=kpKqG<uR1JNXvX-7
zZt&uASfIcd>4BkD8$vNz)=*yF6H(~;vBsMTF@9L}Itx;c%K%LsXloI-!<jw(huh03
zBfLPii-=@)cRL`4rt^qI?Vp1Qmp&yfzsd$A%!OeyPF79qBdwO8w9i}~=%2BRzCYa5
z#;)w00CnTwEZ)ES)x!OeU44QgUANw0^e{=5jEG3RMdhu_D21*rnQ_bZp;aPnpe9V#
zSB!q`A}?D}zD0~i-!}YaUq~j*2Ees%RFL&o7_uw7-5ALbXo(3Mtp4kAL<x&yz+JG2
z!l!#Bcj1mbwP(^V)LDj&|6Vbr<DaUL!86RExFit(-(DT%QlE!t{F7b!lS!r5h<fZI
z1r4fjPLrDab=f=P*iQx};_Q@ZuKNqB*Alx^g^@DpysFG72A+sF?bT3=YjOoPxH-Ff
zGQQ<kmInyv;54ld1Uwpau@0!(C7!${K`x{TTPfSYzv8;cq#}@^bq?bUT{Ov^hcGSF
z;aW7-OP5Mt_0LQSUtY6`qAHO`gh*?Y`&f6C>cCow-L#%`BeEIyBk67c08~u?*E;=8
zYPB(J&)i-a^Zw68P38k6?6wzEesJO=Ntu`TBY<*?0=R>-d}?y2*snYQ+N(>#a*KN+
zfL0j;KLYfoglO`QdtOhc10>7<%c92pM@E5k=YwV0E}P*Cw5l^mST*%XmppUPmc*Bw
zy{tpZeLu!S5*2mehwq2d82{J*d=>ypktW=LhY3P6|9LQkj@JL~kayA^8!eglJXjmE
z-^{=>QYo>8-bCM0kM5$FIN9jLh~coNjS3yVo6;@_iBBVy|M<}QDxUho>blC|@0uD5
zPW?CluJGlzR}eGkO2PyS4&fj${44FR$i12|3As7zv5%~&fy~Pk_T#Ta*;o_j5je0G
z&H7|6*l2r^=M9QDGr3P=(@c0lQ9&Fx705LzV`F+6G%c^xEd&q-n<)wakVs4G*)Tot
zA>VPUas<zIQp~R&F=zNc^E<>N$i-!4Gvp+Y=(ei`X+7^#@wS%Tg4AIE|7d{{?+S3y
zj)$)n?JLfg%u;QC0o<1JvkriVv4sji7gs8jrm`R@9MYaeJOR6OA+Hwle;)aP#=0|R
zhIZRqJj-l4YJc*uzw{Td(1I~?Wo^NU$Hm=CZq3IhGg9ln7}Ld0JmM8--X9u{HY)C8
z`=$8P`n6J)H3%kc6q%Y_wDNgGR~XyXOH{^2X080cWMqeIxln#0;M2WteJlBGoV%|&
z5FrSaC+7zaxEn9<is;<AqtmRfT0v5(eqT+TtE4+`bBTWfjD$jOR&Qg;cj#-WK-H08
zdJZWQzryvQhzjm}R+fLu28}&aW!@Kvhu!6pJPb<jcfLlwxR3t@&^~=ycTNHBWwend
zC5Ie5*vLzk$q+s1{flXUhvot5C+h+l-<A~JkW2j0RxMGzi_>m$ig$l6$6#I3+-Pj%
z)GEUO0?TL|;l+=CedE5OAO+WmPIY*}wqs(lhGk-dQMCvv#byFct#Wv;vg{03Z-E80
z<9Z+O3~(0b68pi0D#YJS6-^Lv7k+zMH7^wJ`!#216;(K!;U}clrK(o-u}v+Qo%ww;
zlkP#>Px@r~b3vbPSOM2;f&tFps1l$8|87p<c|a)sV_BF^_1iJw7X-D73dQE?r!gwW
zNEh2YKunQ!5Vut<w*(G6EB3f4l5_lk4;HI?Y&P=so%Kt{54>mTH>dHt*=@FnZm4?s
z@I5p!bpmN5Qym&uY^<x=0v(3kHMyZ_(z>Mkam`GzpcH|grc7F{bGNGtP!jTidHlAl
zW(s?XP-2mSbD%|;Vz?#K!A?on?;ZfaqHNmqq2!veB{WO|WO{lfz6o|_m`>;bxy92X
zAQdCLJ;U}fWX7ay1{aF)BzR#BUI2xsq;3cR;pA+U?Y?FRcv%@%EZwkm1d|(_6Yh9^
zv~JX5HGg)_XoUQ&s*<L9Ti5C;361shkw7KvT1#{sCcQsDs-lW=@wp%6p_=xxeV(Dz
z(eJZmx<)T9c+bxDBhCyRkG+T$qw)_zuL?MghczUOFzrG>Y8XVP@<9eAg4isb&vmlI
ztV}aDmCY*Q=?;ykBuxZw?{J|8;z68;Hb!yvXj~rV#!JVyhrjm|qr9*#SNG5T1-tZB
zi|KE(pqNHY-ueJnUo(w@rX4DF`sIoHxv<Ht<v8UGA;0!kz+5$d*QhlGM9zgso{|*+
zA1dIt3~;$9aIJRSooCRzd-3?(O7%!R5_R380f@;MN#D7A%6myFxwN9|5ELT1*Kbf%
z5+m!*01C<Q8xrp<FGoYtfMvHu*@gNMhV5T?1D{zcRseg*6iY3i&}X%t{P=JOR@1i4
zZ(ya`sIackYkO9l#uYnm_vk$UxE4&?Ab=$#^mux>zD)CZ2F)d6-3LSMHBCqmcnnDG
zp4Pn1B^3?+Jbx33Ou#8~dv#b6Y3R!eaSfiats3n4hrniS{?~cu6~JjyqaR?N<98G^
zAPu0{+4;`%^O@Sq-29aEbPw&ECZtj9+j3YxWoyWHK(GS=Ajo-Mts;R-HZ>y`9$)o7
zo0YfA?cKcIu}u?g2LeKKyTS*HCb6>b7adSLxV?fG`FomHW<I^BzbQEWtpbpH?%6eQ
zMS-^spFYP2Yy6{rm?;l?jK?ZJMa1Vaep*FmR?f~$!`k2UPjXb?{e}$MQIfV&48K|z
zjEh&QguJR8b*>7}AM%}H&Bt8H$KRxOk9ub5ywijC%|X$jSqV2C9`hPU-NGhU9<OzS
zsyRSP<@KCGEP;sSi({8@j+LT(KT&OwOwksQ=P2D)hnQq}dUzJilEM=&gQkWXj?I#*
zoN7i^!q4Ivy;_5wGE$KXDxxv}01Ob5RiEpby3V~H&-`6N0K0p3(u4ZO%55W*+Ovd2
z5MZ7=b;DB+2EZahJE92PJ2U|>6X)%gySa`>N&wq<?5YDnym|(h``%7v4g<IvtjYng
z(`RySn&)1z|H;WH$D9s1fRD?6{Lt@*1U>N_`Q%!5i4{ge<nz--75rlWu=c!MDrngK
z1rA7)457VB?RMRBKSo}0r#trJoi%hkjQBO0JcbZ^eqw4|gHC@0NU1nU(j#M+01J3x
zOO&7;pdtI82^V?ZpAMMrmo=aS-nqZS$nZWJVl#u_`c*#jeb0X9Mp~URI&?Oi0}N+R
zn@W~1=mzM0WB1?4Bch(c=W;w-SZ%rh0X`8(&JNGgb=2$Qi95`Tm763h5ki4sPOAWx
z`o%C5lw)@w{G-Lf6M$5P8$Ja9quYc%I<DMLx}H$m6thVGkEpARs;Y~&f^;L&(nv{n
zx6<8G(%pR}q`SMjyStl9cL+#Jch@`ky*J+9Gw!(KoVEArwdREUzU}o3z_Ch!Kv9i;
zOAgZD^D=X!`Cco7oBQypkx(C9tKgfGZUdZ;S$vi*FqfL+Ae}*!1DqWC?0wyRIM_eT
zWBxSs!2e};HaDdtGr{Y}0!s^>9kObzpd8D{Z_igWM42Axe>2`h`%B}hKr8j@c-c?Z
zc?S(#<K#q>!|qZ$s@}ZR5@bYW{zt6Dat^#(>&o#(QzOOv+g}-10E7(Ks48NB!Y!+U
zkA~M*Q>PV41N2sYrI%<gY7l_mN+(Moc>y4aC_5kKDz^bB#7LHfoDmI^^mwv_?sx6U
znXa4gbSblQbNvN+D1z=x`pNJXWtyY72o-wONY}{#)acV$pup^=it@9L=e-eb@h%}^
zs8J9P5M1${;(^jJ4<`8siM-n08o`^`;3#@ffk;&^*T<c2;dq~cgRqED4``}2nZPQe
z2+1&!K(U-88)HbQw^$fw>6Yw5Q+&Nh>~z(;>cgmNrf3x~7}x`o{VP(;!ucuFfe(sr
ze^r_80{<JLLF(pjGyPiRa?oJKqCGrT6?6B2v(23|Dd`E3kxjx@GaJfrg`2G^Hkt+c
z7B=}w-|xOduRGkGUbh@*$YPWoWf)~M?^$fiJK8J^)4$&D=Vxw7Wa@zsV~bOb21dr_
zztXa-8#zp{<?l7@qj#azzacQcTonqygOsz?Vmcd<K`Pn+%s6OH9L^L63lQn8S#{53
z695fYFKBSnt9gaQ(q2Eg0w+9ry`X!F>>~OEAOZK_f8T5L`r{3|{f1L3gwqn7VLQQl
z8Aj;ox@43%9Dr|K6sea)<%f#266P==@Y+V){)X*+YyJ}enRBe9?CS&o@}b%bCN;rL
zA}Cy<fh4>VlPu@p_I5x?c4{a1V*y-lrI*L`*Mp5Z^`#j&VfD6mh;V)ceqV#~j1}Hr
zeG{<}gbT(gK!CtNX+J=4`r8lFjk)*Hj|t8Z_=HA|Ff5;C0K2YqPv&aRpPA5URsr;v
zu1De9RZDNwIA9OFT6AzEgEK-UPA<R<w^(+J?W4r3`s$~;uMcXKCgkJi8nwosKldAi
z{2D{dI7|=u^)JojLKkNvXL<Kc+i0Q4PM~`u87omo^!)i~s-#7QcxgL5%Fcd!Q~?$v
z))JzC0^a&d*t=y`$)+(~X{%&`@6q~kinN#5Q_lQRO{b9k%mQO&opwP+*L!t`#m9zf
zveji#wKK)`*NIphnuCZ+H+i|0!x&v@`ZzHGI)b);!yN!|9{_-eZDUAwzLR>puRXuz
za6*E)M%O@xbXI{RZh+}2x(R&!A^YXZ8T7DU*iOXHRLmE!X$3eCkPh|Y5B0oG%E>rt
zrR^kxh$)B64NkvCfN+68=a_xfQAyj{a!LuVmyg6<P(0KgEl8dN$qi{@Y7XF`x7y4s
zMDiT%R1NZldp{syefFnYBG4dGPnPlO9TeFXBL~iim8jfRSI=)d&vX1<wd$VFpRjIz
zEgJ7ui!7pgp1tSmRO`^I2}+&F4nylB7EfXR!`nlXg~r2#O|VPS`((j+8|I6{>2#pn
z9@^j|9^wWLTLA!}ou0_Mk$P}I)7^S-lzuu&FryN;E9)<+#G`st^a1hu5w!rW-=JZ)
z6%+)}F>te<3wpx&2j?LZ|7+};wd3TV{T<&Jb30hEjr=aB!8Dn==VIr)lNAQ>4+{!m
z(7FR7Q!wT~J0=YGx53d|9vI;Go+v`w%WG`QB~pkXNl<_mN7f^T@xh+APcLZ-Xv^L>
zB=}F;TCr2MLXPZb+4Ep3Y}x&@Wb6plNDfKUY*Y|%6aeC!p)BsxrKC_4vwm`L&>^oM
z=2lDqm$UrkNRCM|`j;@|i+~`#Poj-BozL?}2)l>O?F3A$3?+>pp(60Do4RX-KoX&q
z#MbJxmtj(Wx<45v{Sw&6AS^M}M9SO828R)d3XL8^!%qDL;Ilabudps-ab2dqVng>a
zV?=Nb5=&zCYJ>LkxvU}y4RCfXK7n%X33f+WP#k{W_XEFZF?ea=4Ae_47$oUqd~G(e
ze0hVwi^ggnL%<Z1Ns)20xb)e3X<LdLuC{)&S!m=x9QcsG``v!X$i~p!{BYEx@zJRB
z_dRC*q;y^pRLUJ!)Sbr{nxUpX8jPya$zA5|PKvFN?y2$SRUrSEtYF33vu`oRaY;#_
zZ5tJoQbncEDu$ZWq&1J1d_73C6NaQX;y~$<P7@)t<8vV%NM6%MYpIefw0i^3KR?LO
z)9W7l<Y%hyStL|h2R!TfgkU+9TkLYW=3O<=wxyfQtcChYlWbhC*r!o%t^(khdE6{f
zS{@v~p?+qp&-unnZzT=JqmxnxoB>;g!FDL6WdqHCEz=$43Snhh#}B|18|%kTgz5E#
zveY^If5^@pIAt;D0_5I<<f+o?Z8z^B2hNU9j91}@VUakziaNDF*5H5g6zQRK-p^I;
zq~EU3R9C26`cGme{`$EGw--BG3|WE7pi+S;t-*JRiEu;jP-0F)rZ)AZ_*PgS;*(no
zlFg#qlflKnneT^CjGvR$X**c&(<kJ_sz;xnr0@NUY?AEvuz&K$9sD|U!%`p&<Z%(D
z8DkkLXjDm)H<Ci?Wr+P0k-FjX;+Dr~*KQ|aCV1w{sUN`KV?7i_GBCRWwAK1A6T!9X
zo{wK|{#@+Y^znNog$u|A`IILQ0@{pW{0U2g@s_d9A`K_xPGVFBbl*U4Bs#&UG>|~2
zNs)lAZ<+Rf;SEC)<S)(Gb&#%p1<}6uqY)sbG$X<46|pLe2?Cck`zbM6(9?~9fKF^&
zieR@-GRIP<TWkeG^);g6P{l0f{HZSHRo~0x>g~{tB%?2j<{fp4w{UdY3Xg3xGlK{7
zIG@X>X7W_bSHxqQ1TJ$rBYc7dvs9t!!);%~sUt4tt8EO!7g(Z^QPdhf_KQreVLEi1
z^}b`RegZMtyBDsM0S*N+USXK<swvWtHh>`Eo1d}oQ%*?dEo#6Nt_dhR`S}cMF#N}E
zBjVtfTmD_AP&{^x6Z@p6CwB`Ai+qpAJC*Xw`c#S9Ma{AdGc6ez8ADWYhc<w}WB|XJ
z@2IL5SY*@jQBjqtWD7D$VnHSv-3!pM1>(=Z3^h7tbQloOo^zx6`)}~}tyC{Z$E=>J
z!8UUpyfi#MOr?Yk3(TvETK`o6oc&Yu)C$rdT404BWXZ<wmGRZ-{Mn`T_~UXG{bUg?
z0_mE3njy~AF#k%l>e1o_IS3VpeeDLvtG($Kk$T4!kOd;%3zclW5`2?t)zf{mI}ySm
zS7JtZt$KKYbY}W1l=v}6yPzWebe0A>qp+%0{<8>GtIO%h*ULvHH}{xS0Ke5`(Pj^N
zIv4&9ngT9VU4mtN$D)z5Rk)W)sM8MZE@zjJWw2V(l%GSt53YL?wg~Xs_j3356J96C
z?*op3`VbjT3IaqpeKOz^*ABMHUE|&YM{z;)s^*LVp9@gp++Y{vyB!aBsz2eq-Lu`~
zF$8{9UiYAc_S^*6*QF`3;a}ka2v4?utpYedj*+4-Lt{B|W0lq)ha8Ziu==UPERhQ&
zKQUPru{u>-ZanIa%;IOnIUoNVNgd3L%W+AT!52k$wo1I%+q>`pCT{0;ldFIZRfCBd
zw9{Dx?0i_{4=SygOQPFbbKwc1ttUI_q@^6O52C1BPtFu!D@YJ<#_E>cP2?34gJB-j
z4LIB@0L~zTS*>Cz_Mc04Amr?5H$2S}@`d{1rLPA!>U0aF9g^!E9`)$EoUJ#@7O@zA
z6iTsq3xCor{Tn-AA(KCg8m$tBnJVjFw&(w_#k9&K@OIo?)K0sVUgdjVSiI4OP?YqO
z?am&z1X&+f1S%Q!(Z+PlcS_P-78S5JWY~gF!;)E~?LIUH5;|7#^P63e<Fa_V>;JAH
zQbzV~uy;5~pucbCtzwN+H$G7Nd)t+V(O528T{gq+o8LPxGK-*3H(L_dwEM?*{S))!
zLFJ7}!&ze-^r=^o@J3*1%&7oQ;`zh)xEe=f=1?<#jZLg<8y>%9k|n@ud8JaCR&TYS
zO5ycf{~(>fWH2D9t)0%Ws&$&tdP<VcJwIf4ZO>zTl=K@en51Hz<Vw}q78<!%T37Xk
z*1<Fvgu#Z1p$(1Em3IjcP(=e%lgx#2a(vfuqv<?qfg(dd6sX<Cne=-2hMB+iFH!_D
zBrCxqCiH5^LUdcE(*&<>NQ^-vi)qK|a%KF{L;v85Os^L=ZPBVr7LFaA2Fqjs*7%jF
z)o5Lx1h$Urlj=nuB$Q`1>PFJ-2|#b<%Q2trf~RWRzxlxz7WHOR?}dHaJ0tWB0UPD^
zR`H5-8iV-944Dt#DCAJnzXjiDs5IzW>C>9O*vOTI8cT#>h^`(kj82SGXV1bokehyt
zEMB+)#y!d9@C)8wpK7DOhaXgWz0}H{-|42C(<R}iJ`#b7YM@x=1Wm~}_N@0~GDA5h
zC-sxH`LsJfORC!At^^71JG+<)NX0J4-cI@8`c;+G)6K1qc4C=_GCq}lUlATQnOlxL
zd!ZyOhGKUT4J6a4clWqVzqpra%<ZF2Z&z<vsUX{)Rg%SoGgd$mF|lqwR&73gc{E(Q
z*ilf}roGm$d3o^N7KnVN%>Q8w&q}ElV#FnmfJ9Xo^k?}1S~Yt2E5)yP+(>|piZ11T
zZ?p&MiZadCClOy&<Y=}yw(&JK^GVe6^>H2ibbonm+l<K2CSTEZA$iKli?%h+cdNy4
z1Qd_2p6Cf*d)~=71rhFEGyCA~o;*xNdgf7f-d?`Zj!|ZMJ`@WSm3h|XqK~e5y?S_L
zXt|&FGu!?V)JCZrdn+Zc15YiR-$)d|HlCOG9`31D4bhG3o|;ubzt-=ule;EmS_~nl
zLaU*z0C($V`){>22X67{9lB8>2U4YTg}}p}3@@`VMC2h#ftieDKeG~BkOA6kn6GI7
z>)#7BdF0pzs~YMSP2-uWTQ=uv+F(`JrUtrrNeu8q`h~%g-S6CKr^5~A*MdD|wi4pd
zeHCw((kYeU@2f^IohU^eh9m1eD{3T*Y8yems87Cf+(I`5j~SMEs_$xDZuFOmDbr~=
zUM^weXnPSE0|fP6lKMlj4{3qw80}t~Qv>hKsTlN&mPw}WB>R3D+yK(aPKXgc5+3bo
z=X1u3CBVVe{nvQnnj$wexufhz!?<hD+R7~9*ro0_DRZCCy8v<F#hwwrzn^cS9)yre
zF>@9o(P<}tQqcxn1F*QLsl7Bwwrbi=@kaoqfIUEdHbfT5OZrB61GT=DFO_(()%mo;
zuoK2IKIyq2@S=iELX+;iYz7j(ThRGA#x@*M%X3ha`&O<x8@Zmzd{Mqx_wv%7D6Q=H
zUP%}{_c>P;?>bEK$lKL_BX(dF2(v+-XOZV3t38xYcQ<+i4>JrXGu>-~V`}*x{^s&Q
zVCCTZ30;Zfb6BVS1|W0o0Wuz#@n#@rBd0`$fr4Lb`_s%D2;;EvUk}v-a?VW0QiT%!
zI0lq>A8iCmDIPR^hTIp3xlRo{Dhh2F>*r7X;7(Ehqi8O}x43+`_x3lwI>cpFt|y7j
zVe?3gE<wfp;PrP$R$*Mx+T+G0RnHQ_tdM=k)3g#rZx3)-j+G_6hOwgFRL;0YDrpL)
zVXWpl#b+>Q#27$$@>xRg*IoVmF6H=xc~giH`%W0S(Xdf?%Na7~ITh~D&86wVIF+T8
zLnUKZ<K1_zf7%#3LsK2{@)2$uIX02`;oHA_A1dTnSI;!Rq6l}qE{&Cop7HWXku^Q}
z&1K&!!!gpSg35Fm6Y@UQrlC2_`JmEpFWq^bZ^*jo1jMy_X8?WK)0ICghwtj8oc}4U
zLr!$D-f~H}iWwkDI#6w9%3<JcKJOukaF*BuafWtv;3o)vFmq1pL^Wd$4zkdcdA%hj
z#f4#Ggt(&bo#Y78Qn(aVQBwm0IQKLFq1G5RbpT>cA-Za6-$4L?bYJk|N2Y(b3s~L{
zD6;JW_S@ogBX8Mrjn;KsyUz0@+%3@kQFjK0*k|`uav(q&e0P6*Yk)hluNVGBwJZv-
zl;6Ch-Ky>PfnHK^KMRKH$uR)nO$oI2XCRB4VLV>$_jH)vs+`_b0rB*?pDM07*NNM*
z>6qFUkj}3MZDtC>BVf@ZfN;PKMIxkr`KBj54(@IKG)fSI^2geJSqXghsOk?Eh7fMO
zXP=mtk}y`tef9Vnds4lg7uRZ}9jI7C`oCt*Npi%!`tMLnbx&!2GW~kGE=g0B)ctUK
zX<v?4llXgWUn+L6hlB@?V%M8P?x3cC%BC|Uw3ktO+e&jh4Ww?r?=+oVGMI#CTrBEU
z_c++=Mdx4*`qt5TZ>HjMMWtjUFBx*;q`DqUJJXBAWekc-CNwS(!|T}?G$}ejo_9F3
zatI0hHQG2-lST9L?Ev~l`EydYo=&$2s(|!~$DbDf+tXlcAToAKmRE@IZozjkzI+ZL
zoifu_|KO>v`gX7*ZGilePtqoly2zJ++4<>(4W=4t9eVH7*DMaQA%ad(FoKm169SGE
z=$te-{+%R=>IV?_i5c3?e6kjl(s+PF*$Jl1m~0>Jv11H=28xE1r~*$_g05d?^&%>P
zdav?ZgGvyT<XcY7bu|kT8)HE1E><Z$iiAa*VbsL|8J6en=2(db)?^LhgDCY)=|!ck
z{CvG;ixhwo)YE61^9a5h^|$i4ARO|9cfdyH-(eW^n>Z!r+vYZS_DeW+23G(?Z&dDs
zDuANi6(XpzLa+TP!{IVDDfL#X{$s=571-$v`DZVQ$khgJt+Crw4lg_Q3sq|X(&KJz
zu+B}=@7KZ-6OA@R``{4RY$Ts#JG5zLzB%cj6=#lXsiW2F&Ktr?&()tBJBj5V9tu2z
zZAbN-Ux2G=gW+LqS+T2#SNHPZ!zIR8wzVb4A1|TQ5itgf>d#Xe=+FdD<W-iabXrE3
z<g6^h&Ax0~G@8Mu`Eok~W|p#gwq6`a9jcPyh$b{|eze=79D>~%0QF8jo##BcCas&-
zj?F^tdl+S;1R8B7>JIJcx|85c8-LQdSpC$;%pqk`%6qR@4cio~Yv=_%-yV9g=ntMD
zm3!LOF-8OTQ17k>s_&B4?8jZkHO{afN*xbBO74}j$Er^2sE+B7YPVKWTIKsnckB};
z^MJ}mAG~fVpadgw%omJZV#kaf)=6B5e*u7P_Q42n2tL?Zzk+^IZU*OEeDT44v48qx
zFU}b!A}=a>rRD_<!PSd7E@%x$a!b*=bYxuH`ubQ>2x|HHP~^!n!&Cc6lYD$q0=m}m
zP+6V19xE-mk37sVp5T!~Ua>(*H|S?BQwiwAfzzjBDKk?ooUlE4{(;Qu(60AVd$3W<
zUk+yR`h<ajls~%0?*wj3o#jF06ue#75_mzs=DuDX68!30_1LT3siyAw7|yXSfBN$k
zz2nHM{nWF?B%N(^oaeQb+iGE{wMcutx|FbvPvm_nfWLw+5&Qes`$O0gE=L>LWbUuw
zcwCa@nw>g)k59GB20evw^aaw%Id4QP&dKd8GWdLIl<OC%nzJI2yk&>2Nsb-&^CMYF
zr`#W#nPZF|I?go&v9rHbF+=+!RGc3PcjYV@!E+rMPpqk6ciL`%q0M2Gq&1Z;ZWm!_
zEb3TTnzE2qg4W1ktgOlk+}}{=S*syZg-oAW8w<?T)DnA6Le>8gwPK}cBUl{<yfiuP
zD?Ss16=$&Q6A+90Ehfarp{~z>O_eY{oj?7eRMbUM_xg~bdB(b8QQ3|lJ|<bgGXI(9
ztm}P!FzloYrg&G;FK53(GUuT_n0Ka1dt!xD!3PlxVyg-4G;Dm`;Maw8zJt0mBk59n
z`Dz_BG$<(V52W%7GGrCAt>5*Dqn>oMObZe&;WUw{()1b0ODU$2GK?t5V~vLPyZhl_
zB9cOa_mho7C?X>JpQiEACjQh^39Z+^LLBs5PN)UoT;rV&<-RJc7ZAj+xn9cH)bS5i
z1~+QGe(~_!#qP{vw^}Q!=s2=xi<p;S+TgiDywfo8lHdbo0L;moFLi-lNAc}cgyLFN
zymRCOE1me`Vyv8NuE(CMcV`q9)ytyYAa>g*gO`E-!^>CfVpvm|IK%H<YGr#l7emaE
zb|=(<w7!f(rR3A2Dw{mTyfsL>;TbLo=6`XeBb)H%I;u73yf!4*Of$dDak^ub^W1!{
zH+z9hWVFcajDo9O6$+oaq;6EjC9p8VmeJyQ-A}8yMzphbkxAPk+8jLLQ2Uu&p8T5k
zZLm2M;q)_+qc>t1kz?13gVT|f%Wp!tgdIa6?%#HM1P3`pI(Y@s8958X-Ib4e5Qk~n
zp2J25S--7YC?<?s7&>3ZD$$d#gMu#zgxtNJa*32ODdk$=w<zzXvtHp_7$zRqTxLh&
z-5`&Was{$FUg~Y`E;5`C%n*qD5WO6;AI8e>_evQIX1_+91xrSR+<u5ra1-8|Vbe85
zZ-|Z;CR_qQSq^@L`fq=sgFM4q=F{Io!<R{-36jHtAhcLZ$E=-P!skAt9mu(h$9bdA
zZErQdYe|x{A=f*~05}l1koj`>HZ%ewp$H*Wm6+YWhQ<*S!@)s5BS4G^d9&7{82^bD
z?o(?>*n+==N6dsy*20lvlr9dtrM*mv4MQAx4-xo|AfAP-cJjvMsHL>!JjFt*2C4PD
z{b~eU!m|*F!hc45ovOQ<HB8Td(CyG>yY4wNW)9U(HC|YZh3}vf3Iq=-dtQ&cDq;-R
zF6+*%6kztox*|$bkdH>K86%ybJB!=I*s4k9kLm}!zW#iH$K;3YLAgmoT$s!%bV5eB
znF8s#zE!m)eEKV^8fo9SGs@o>Wz56O%K6vJUel1TUNeUCQRumI^st`_0#Guu*kdRc
zAMP*bLKk$iEqL`$=u7lEpSby5`O8~w=&wg`_e!xRo+7^6?l$f_&>x4~Thwp2qz+?z
zkpqgc^!&TY#sx;)E(#m%d6)xFZm-c|A4v9|@@&_iy&{J9<yt}uSdQyYbslPebVGXS
zpCIHd$aJO@4m1B&V`#hcS+274m4&YMz%2J>cUgZHHuAEcikyR9?-YzRIurGU9m<X5
zlWff|pM%=uL3J%`*%?TkTbwe`a&xWy@m-FQR_l(Yzq2HzT?gDPt+&v;C!?;YrIk|o
zRhMf&b%HWuH%D=ZdC~I0KIVDus#i@>n_L@E`M4Ch_0Th%pQk_9ORI3a7Oj)cuv-84
zAZj&LflK@@NPk?G#ZxEmSiPry`}G4rE6kH8vYTP-e5n%Vc7o2Z!>$WiA;^&SQA}U2
zE}lp|Fd23FNH!%ygDczCkJD_E{MzCItrw39Je2=ZnD`{jcQ@H<Zt<w<zb_&-9Xf~F
zajDJbFn~llSD`}b@xa<XX`!CpVY{nwkooE<pDsdZbiB<Jpi8(eH6zY&ztqn<c1Uml
z^gxw(rX8b+rt4x-hc2N)kqrtfaw9nvwS|?W1XDaN`eJ95NDfonx6&$$PyuRM&~YZw
z>+QtcYTeBUh!iZCH@0+5a3IDy=V+5sa39aWsidNtw@-bO{TgMo-!@8<NGq~Z@x1do
zwN6-nk<wY@!sn7`{)t)D3S{mLI-oTHKcYLBlrCL%6yxok6dW+t$2=g=8Gf6{$E$aH
zkuvXn!gkj-e16)yc48s8eVt=);%~R0*a@V>b7D_F`Tf=ZHm0&F2vJ&B)U=?ukGRg#
zXI_+C6@OL9ZX*emP-Mo7dp5D-!swdV4bAa@dW7#llr-7vOjjW5r&ZO%1}eQg(cL6d
zhkgXljmSY0Dna2EK(#0~>oWeD@%{RSh68n);bp(ye0kRFpw=Wk-}9+9^PrB$>y^iU
zf}U0Twc{tj#VOKq+&d*^C0G)$qR0Sd)p7Iry0z9ZDJ7uW?fzX?`!lQie}E|(fooQ;
zGTi`e>2v;@9z=$}tEx=lA0ZBn-#WkTM%JBE7F&7=y0&@iU8I<pP*4y;#B7lCdI{gB
z;r`HRto=g9gB~0-D1an&;A~b^im4w)2&)d_3~rzmplWnZ`g$`&t2Ui*k;EU&Cg1TC
zUResnIa6bZ!UrhJ-iRBUp`Lj+`E)ZA&j)IAk@OvlV_SUPQuEkmkN3yQSdjA#UECIl
zx*qWqtNeE_w-{5`Vr-`ijZON*^C!)xaxF)4Qx&?8)8C1@ZHb>rL9*88i&Cb6g@-n6
zQ)7@5;n+H!5*{yK_KIHH_aZ^Z^`Q)R*$;o<iCiwp)2sNDV-O-F8wsjmcAD+G?P)8y
zEE2N++RCvZ=Kp?()&eV47J0K8+0V?N>>Je~Q%o>Ri?H!PEKG6D_SN5WU&yoQaE@0b
zkAH*Ybn*GAPf8ofccQ%0sMcvk?Q7}$AV}zSZ=tJ#`oZith|}KX<%GU{V5v~<u}){b
zDB4-vf((@vLv^ynv~lKY(yY#T%B1tmt-gE)mp1w8=l+ZP>Cd%NenBP1+eHsK4DA*J
zA_}l1EC4Ub?7>qk>ZUC&EItkGeIWb;sT}vQP~cg@M)IA#C6F0`7RIZ-r+pQO&~n>}
zhX(8V?Zh{2qE*?^M`<&M_NwPWLkMMg5&t0@{m?#|14E1>V04G2g{)&NvASnr;<cn5
zN=w7QJA5|G{K<1s?`!FbcY*wPzAhSiMY@Y`B<&>@$~54kB2)uEIYx0uw5fXvljD1a
zBL%<`dJcUCx0x|a8^5FA1%?E6XI=WPB>nd5bYR$#yS|%Je3B!ihXbpX$*XByN?{!H
zRJcD{IbBy)sO@<ju7K#UT}$<}>+<B0TlI2KG?w6N5JO)bBp7aHS$JfNvbe?y(rvVF
zdDx<`Uc8Q%Q+eIeu7_Iov(>~1_0>C(2n}4h`XiDR^ltV9axXdW#RIl43^n4E729%A
z-(x{Zo7BN)ht7(@SzE6CjWXh1)$QzjIrhSYW08hkjpt>~^xQRT{8$!fJTDq*-kBH_
z2cvg`vMm1Y@U!<128p1D3P~#7g8R+S&sBYUbVBAIGd@$LXp3&d^0XBp>0<UEM=e4^
zRb{=tjWli<jTJ$<lJ`J*x9<na@t)eW>{DC=RYHx*++ee$vztL~*Sj}bRD{+d$srhT
zzw4KJ^i9148O<OpAwjevYbbX=4F#3%UnJM5jPTXlAvJZReq%k)b_2w6^L|TT>MnOc
zV4>UY=G6!vC(gg=<0lD0UP%q_A`xE;ioX+&4n*P?I;U_+ol4`5zFvH(gvz~g5;G~p
z?_}0@X`<6?XmVrZo0Uo;kOZOc3gCA_KO;7qB_)9Zsq+}VE*gBShFvZARVTLlqkYy;
zW4cb7Uc-1FP9+Er1G{o>E}&3H89#%&G0XCd$++b`6`^a=#y!Wq1Lf4<5($Qv1?bG>
z7hdx^|5YRXA3arh%Mv&nfy1n82=p@N0I6W`<-}gwq40K9YXN){N1I=AaA3O76nbw!
zDKPL>WDv=vYSLRL`#W<{v<q2?gd=-ewq#(k1`_t8t?s0OqHsKkEigz!<4z6-*-!k7
zh;N+tQu<kl>kh)P>m9y8p?+P6<wwX}g3mMr=l6|&o3vsm02}8c`1&pD7o*e_aPtvu
zMvHY5B!+5noVCu^>dbGLFJ*h7NU+ix?q!!XrqRrY9@VX*y=<PrP7%eyNhhWls%Xtv
zSQKGIr{6js9u8037Kbe|9Ea$%l#_^*7^Mgp$3~Bu?iH2^E{VUp^U{Rjv5f$&$vmA;
zdb?3LP3X)B(kl5B;13pH0*S42dBH|<^Dl;`w4!OWb!eT?1%CzZ#H<~-P+52%%x9~b
zTQQiv@tdSjmChLAR-~Jx)sExNbF*9=n)-%tKiu}zt9{oD3hVX^pk{<qCt_qb<u!2l
zNN!$P4=3GrYrNP6=NwT0jIEQO#;*nwub34snbTP1LD<u>i~bFbAO6go4z>(I8SXtu
zADE81h{>%fCt8Zlp=11tOPFX!!p|nFI1L!}tQ0i3N7*8Z$I?|*{1QdDT5}ttYF!{4
zs1XE&=sPVxJ$ge&z_6fd)3?@WYhrg**QUW1Yg}L_l;Dq{Z<0!j3A$>?T<-%)bo+3w
z?c_4(n$0wwa81#diK-c;0|VdM-F{Jf07E~!tT&u%A}}y4FcM)uK*N=}sl=+7L(D7t
zO4ZOy6wCZPK06A}>W)wt*rv54;2#tPeH)o>v)RXXz$Rz1<-RhEN+1_SW`GYpai{f5
z>_K$xxGi(R9sc~pe3^ExR1&LQP6nhe+Y^HDc!JLz^VeCFA{FfE7B65*RBQ;`^{VM2
zCf4e+N5xL<I-z%ZuKBJjNoWfkC&Msskj}-{CTXlGz|5APeAaN)=txqst3xFnjRWZB
zTi&EdLhPqe92IB(Caz90G|420I6y2|<#7y4vem?6RajBwA1HNoiN`iAMj=@`hH{j)
ztbl+ocmCJDUXpn;D4Zn;Rf)&y;v>iMP&2v_Z@2Q8Y|6BTu5Klv=aItoR_5#PIV`o-
zq87hs9Bc0#&R`biZ@M@d#`D;r=(VymNeROQ8%qBto6q2P0q1Be83x7+Qe|cVtQeUS
zdxAwXLHxdnOAm$V*Bv)WF4^DRj#tfBm0rT3djum7Od|Qt{kX5UmCQ(Xgbr2%J2an<
zPrWWfEqI?5njj&<{BO|-J+1^md;%T{+eC}^wV6+|tDhZ)r#~M=dbNr1iOuj-8xylr
zb~zFp)tSMuw9{j^KEqv*8qTOC&ha>yy9T^TFJ8|$ST##({Szt4n-=~e{v*;Az_>E*
zI{p|p<o{o4@y=Vk2g!*cg*BACGbdwGIK}^#>klTpag+Fxe(o}TrEUD6g(Y^159U{9
zA^p82o@O5%8y1e5FiM+BopK=6Dmxf@>@SNQIByFfWg0OC*<<*Xppb!uSrTYsczOyS
zs{g`K&`%}=(7xwgB*8dHYyB`mm&T(e>m^8!5qasZ?znngN54E{KK68PzWqCWE~?pK
zcIZA71HQJ&^X7~UwRE1Yyu?gAmU{;y^9sY5OY;(IdqS4yn$>A{Ka-@USd-wP<8~V(
zgwr?ONmP{RYwH3j@7bUC2S*O$1=`GrlwL>$>1;AXTgLiFk-sa9E4x!;0Rcg0E##pt
z%|{+>B^O)5)k@w|NUbCMCndpaVjv2qds3~)cnHo1ghmW!=r6d5ibg!P=>7QsiFxK=
z8;!us>B`y@E9o=)(s+Q^jPR>*BRDsLmvkD27VYt+7j<DDysn;|K(C3F-1rF|mG>%&
z-uZUbc}6o$>^hr-wa6xiI!%uxq7M$N>zJmE@v%sP6ugLdfo(eS)i3<4chl!WSpbWm
zyAOJKI>v~x8Q&tQJ60NY?^CL9o8$a_$^Aa|uy2?+8|h@-9&SI6)GL`+IOsa%kX3{I
zxuABg4!={%Zq*#-ILqw}`EvH|xo2To>cC{B!Aj{i3KqNP#o<<sGI}oo1y62|_0DC}
zFZf`K=)NezGiF{<QwFLAKgqR6_O}?%M1~AL8tdQ9la|NZY(v}+dZqYUysJ2+7^&7q
zDp4vFs;8szqwm>P9-@nRS)2&0R8v`9!ZClxNW3X2gwQYlUt_iNyJ9E__UIqp9%P}C
zFak)t91=wBI&vY6H+Q$kcgnDuQO5fMZamq(m&I2J*Ym@R2jO3Ke;4q^Qob~KK7+2k
zn#14A@}HACEs_NKA-M0?W-9$Wt}c{)JU;crPAN=_?(Ez{O<A-sH&;~CwWoGVLGMSO
zKBeb<b-&(>l`C$w?)ZwFO*h@{rk*S1%yJH8rz;xmZFlD*y5)W~+tTDiHhuLB#w~x3
z_3bYVJ?#?VVDBhdDbu`%Sn=KjryO194f~w55-rC};eD~m+{69EUpW@Hgzyy`T{ia<
z+5<7sJUs+T50L$!-6Mg#JjNAAs;Bc3=4<ZS$T8NV@9RSc_kN$8Xijr43Qv*lx@#>S
zzk8F8oYmSG$IdnAAU;x>-#57+lTN!s%gKqWax*q42@&ya?|}O*%eObiQOiOzHI?0H
z<m2t{G{MY(0nxa7xRNkf<h*GqV{HK|eGrRB(F&SzaOd>BWE|pu_7MUFlHD(Pj3qT!
z(-085AlhFkxIWooBvoZpzkPU106Ayo%g!=V&Q+rS7)O9b6E0oe2mAaT^2n}*&PRgl
z!2OxIBLWxYL~Zx#hdCLJ;!a>a#2gnn@0KFw=vnMjHvi9u{qKKXI-g~<9eR=7Hp0d;
z-1NL3#!)*e={x?4EoYR{w<|yI-tf$_Ob8TKnLaEs8JIOrGZbSCA;PYSh9=M|SZOw5
znWXRQ7fb5FbBQ=+6j6*QCaa4Ym;D^Lu{D@QMZ9FW3)Mmn7j_LN`J)ki$vCsetw`5=
zqsrYK=!3;%FZ=Pu8gw8z$Lpe2|Je4b3a)6^X!jfozwi5<ERujJ8u;ypc85*IE#38(
ziyyu8aRTJiM_YA&UI<)Pi?Qf*%9b1Iih;5H5)o8>QI90&fc^&$xXz|4?1OGEfuf1~
zCeF=W8w-n4P{#b16`&qJi_L%Q2DE4tug|;)r?x*ir}O>QhMf+0haH2xEJ&tk3w6J+
z))CLngj2@<v=KS^U@}phFO?8;s1v>{>@-YcYsNg-(c>&vv*PacdFP7;2!uhVa(HcP
zE7j-cw~Zqq@lQVl(WpK{j!%5gr&SpFPhn0;qCyyF<_Z%J2~%8@_VaKp`#HOkNAl=g
z1{#`Y?tBx%CP<5`;VjqMG&~N<SmxS0+m#q-J=ZuoiqE>U2z}i!GIE^KIv&a$R;kk{
zI)00_r;@N;9=ojO4}=pGcG!(`9ROLxJdq{Lq@;7iC#D{@t$S$1*$IZ$(RSnXEX{lr
z+H9%_3RNEQQbJO)#cdVK{f*!`i3H4fX!5}Gii`Y%-B9b^aJhEj2`cGD+C22>D5GzC
zPbL|vlo=NiPS0}-MG~<T#ayjp3IZ=1pJI=AoGlOK7qq?7ALha@)9y@JJnYv(Iitaq
zEyCIkJ9FlvNlfNzmAl2|qU<)mo4k*fg|NK|m>FI(!E+0pH{ofXUS>)29=&b&vrD=U
zHOsN$H^Beuq@R|QRw^dOa%f`-4b?bOt+;;qcyr~*P2Tv=$@vH}L$XhN*SHeE6&wEN
z3g6i{Lxo%9z<hWii6r_%3%mKPc7jmL&qLaHeTs5lYX3OY<wTd$s<hDxVdfQ!?!{|*
zKa*mjrnA*Ai3GfC+A>GixLUw}+0RfE5fQ<7Uek|TGfLHz2J`3DX~W-qDP)HmA%i1;
zR<qSQ{b8zKKxr`DF=x5XEf!tE%g~830WFl41(W8H@4zmzSf^&x4Y~ipuwK;B`^X2D
zbe{1Ndewc{>h6?JAPY+;maN<!+IEOJ_oRM7M~R5@ME$y#NLTa_lKwi`FBDny`|5LG
z>s+)LQGP|sZlWxxCK-AM#{(L^IcSjZr*!&VFveVuKVrQJF4i4~;SxYFoGr_F4wWL@
zLL;d)sCx}AoihUXR)d{m?K0bMnF@{gzIhBTQOlqf?afyyDOgrqQBauIk&L=B5O~hv
zJMb_)8tlwN-?jZ87J%fxc<ewVOKYOG3txhYk$vJwUMTqEKXXq+BF|#l2iLl=Th-_W
z!h_`-lh(r+h+JT_HeLJMV+OOeEx!?vZgN^SQEi~d<vWHQSh}9L<g#Hb!L4zAAe_E)
zPMN73IkjhpN1XDm=g`6=vz&pU^?*hfk2H3=)A=TmI<i*%W>)*tlk`$N2nvGDYMGS{
zv@KpAvJ6_PG3uAIF;r$3PjCx;x6c$mFS)F@Nlx&5V1XE{HFT?Mv!=YaTR_z*Pg7&5
zctYqA4;QW&xY!zCTcJ}UU5xJFqQGKvhk|ZoJ4qmzhx>e3oPWt(e>Qq)R$hbsNq@}@
z`HN}0b{<X*tu*fZ-xcq+78q3PNqh^-WvI=C+$je<iql93=EF|v?En-jMTgzdslKJ0
z1s%0R({z#6C?#PJ<IOvG<-qO(VA@%kpl(>mU0g4%ka#OPErs^7_)^<dGLj$p5fnZi
z{;?Cq^_(P$?da<3Z=z0Dt#PdsGRB`b6%U||o<tENo!oW>XHtf_Jo%ZF<#)Q#astnF
z87GIK|LY7&(7fOJx5t1>`P|qROW`mJ?KOmG%9YzLwn|l|@eZ^3-&u7<3O-OL>$rjT
zcBCizDBkN#k7^n=kDr4wp71hftk-tx1!*J}+|i7P>qo_?1Bo42wq-wU(()o}Y)%U`
zs7Nh}&s3i6kD-YrbkmnjHM;jBJX0s97ck`0M1776q5Z-LOLpUjT?&b7EXo#ZR4_9B
zailFUdCMw6YHn=MqE|82s0!{dn2!8{gOzb~Te&hn|7-UaZP%q=%Ez$T2h$ctUe#K-
z;$h}Yg?$JaxrF<V1)btHIrR}`1KMvpHE723<)pZ8HI*3juFJAd-CL<>8tx{BAwZt`
zFNDK^vdk!?u(^xAzd)WY+kAg8P__=A$*mF}I|)hRvZSJ>%Ig<zm~~D#JW64_uD3Ec
zXY%c6cZj`9cG5LvdFN(Ze_=xDTgi;6|Joq-c=e1?hu2qdfAL<FQ44Pd_f2j1qx7g2
zJ<3r{o*jM;?ZA~}cEjPu$H&d{Kfb6plFy>W{|r(7w>LfUF(MU4lDn8gL64^T=dd3L
zAe{+~;oqCN?*8D`T#jNh3)qkbeUX5>Hkn2B!{R?3k;#+}l~eYVK97q+foSiw;Evw3
zuN@rc?e^2GYieQ4%ROP!IUagf@Ph-0-TcoOdmoHkbN+nFXjnw>$8R#!NG`$F2rrq!
z*6_W9>TuC;_X?gK8DJ^t%5%*~mdJ0}Z&*Vh9&O93)%>+H49sqrBrDaxzX?u$2`+BS
zE#NDuWlsaM7v<t2vD?3ZqR0{I2#zK7`=2p^0OgP?n&N~&wj;xcK>t5A`+`OzGx*P6
z4ARdmN7O%8R{tR1Bh*)m_=3Z*@HAU$K9wvmAK#6Vh++mKZa(`^i1mkDJ4g*%8%r~S
z4#!H$Qqt*fY04uN*5R6rv`7-B0rmVwDu+!5_f{B72=zBZ;EaKIMg{8ZlfyhFT{&)p
zFV8vS7rGP06hOjPGEkP8#liIpA~{ggv<+x11)E4k28cJ5!pL&a64P~G3aZxOnrQ?e
z3k0GmIu_u1r6bp_ruY4sh8PBv$lAlD;cI5h0^?kCLE`o>H&owmLeP)=1XJ#PuxexJ
z;x79awWDYP*gxn?M9a*AXcZEo=1pKl8L{PvPRJ;7EUUA2ZWh|OmlKIb%_=7n7;CRR
z;l6LScWj1y@ngJ%B;9)xs1w{DF4c%1JWXJr&t^ZXJo2BZe1iMf8YiCZ-=?6_@u@9!
zr89GHM=|X@lv1L@76I||7kr4i$ii?x+EBro#Yfhh#Yt0-6<55^tV-hKB7M~PZH5}&
z`OC5a)kx^&soUx~N9@=&Wm#h~P^BbcjC)D-J&q5Sg|~4&jG9$Hyj!+oq&SH~!v0;!
z_K0^Gx~>uNWV4!BEo`e~Yc<Nl|J7{Pg|n{waL*)|7!UWIpA7I|P_D>A16>yfGebT4
zUn7VmIv7`U(2<DI<~bmbNewmLu{cQF7B;W9w6sWDx<x!V!?T8kQv?Jll|>n4pB1=L
zJns0@UT$qP>)$HK;TFr*swU}VmN)tw|DcD@0H(iE50XtXBt|Iq|0%5UM@U!ejeC`f
zACF;H42ckm75`q>1J3&b%@```m~?)H+lta|TYiwI?N&+DAdd(I$B29wo85ni2^n&Y
zy|GJYs0PmVeV>HM@*~4Pfu*Xms>&ykY<?s$)IgK;ATYh0<jsy2PVn#X5qBmEr)44`
zvGC{hXz;Ckh-0bU>beJZU&>QBti!;hX8*kt5~QonMzhK|<KzYI7eeD5OK56MzyUrW
zKpK&aR`C#s*LuI-q||k+<EdP{zHaCYgvuKH*?tcdV@dDU3mGRJ<F1E4Lmp|i5XXtA
zfi>mC+b5wto;&l~3;n~BsmISeOHNaRAkJ?H8d%Hf8SJPskzpTeXkk)@@-E2x)<5pH
z#&(ifP9C^=bpKwnSn0;TTv;m};q%(?$DR$0;E@$)!A9po2g)OoU*8$xW~jMZ$Fs1i
zV|Da1XBuMsbI1Z@@+N#9AKq6cX*2o~J5MQtQ<lHe5MDt)J9r(Rb%r%sTPgJhpekMa
z!jxptm3QcyPghi(GAyg9{`UW}yNr{#lKL&CqKZRjyc7Y#7(Yk17E%eRMLmZkFE}}-
z+30Y7h{iF$gD5S>+^zJO<%?J<q2DY+jbaBBR?0*2?w5g!9u4(1=2}YpP7siMul{P&
zk%2ouFgbiaGK1WUE3C-Ec?@zy_!*L+lP;^P&bQn{DzXXV--n5D4eaohimX3dJ6(=(
zlmcV>g-JQ0s{dk-8sc9-L6`OmhX%}6;P;MBEBcpeU97S^`G2OB2Hx9|(3tw0bw_=)
zKH*R~9UWez_qHB8RaJyWggF?c5{IXjMVQsd=iTzMyCMy3iLUYTptwdK9}lBTW%A<$
zB18}~iiWC)C@z0l7usO~%xDbl`?x!ZUl=u?!FAciW1?eC*ACVNvozV!WPLFr_{y*v
z1)8L6^ean#xN^El-sK5nW{1yc1!OcRzLS7yRbz(?f)w9;b5#pyU68M?{6<0v*)e3a
za4c;CY`1u%IqLs~R6@iAdI2B}6r9$U28)jekV<qGrr}<fLIEck*7a^P6zPq{#S%om
zUW*yL-9DBTbh>v|Au+s|0l#puv8D#TUiXt;6^O;eef`UFyHv1iJeR)W*c&%NGC~Zd
z7$N?oM;Vg?Im8^1rlbS%A2(oV|8!*}m+&<ki=fiN_}-F%);|!j6JqAjVVSr+t>TMP
z85(73($&al-01O2`l%K^-97LA^^OtZL|SGi!j><SFCC175blZvZC*RD{8$3uy)K1_
z^Zz@75ubM%BCdq-4&JYfy<&l1VK(PyoXk2QAQ83||9vXIk03!QA&&ZI>51R-&Dv}z
zswG%{8e(^fUBu&P^D|u@cU2qa@&s<lbEwJ$=__ea6S`=a#f7GzZKd>0{Jb!Rt76OO
z(S3BP8GJ!q5^%sy&_1%`x|_&}^VK(vbU@LNW21}|7Hw^&uk1aNY2UX1HL!;Av!5&o
z9+doi3FkZ1Mm+6-I>;k<ShVU{Zx!w9a2t0K0$>B}psE)|>E~&CV+xZ&03MgUp@x&x
z24D*&1<)784`b=HTa@`8k7^IPVTqJ)S6wof;~e0I@S>Tp43g^eUjYn(lpMK#-zbgt
z2i=&F&YSgcw7m_rOiH!d%A)nVm@ccq->+C}3<UV>cV9Apo*|m;27axuhci6OU&kI|
z&N3RRxps_n!+yf9p?$LcFi~Txm8O0Yo|vwsO9`Gt;q3`qfw6lQDmDh|TP-XEFC?Ue
zbRPg?fF%OM&7TARvzYH8@OvzgZ~H541j+0F6=u5dyswm)+rJJ<Z*+rbR=9bbPV&;3
zqs>-R*vu`&VBM1DN~dzaxz%&>_cmjn=L8{o6%VT=FuV>!OGE(bb~Bt69&+G-yO=nb
z5ZC_~Ken}U+010Q-mx>e%fsZu1hemt4Fz5>0+XG-KDTLHP=p-A0?|+nP<akVX#=|-
z1|;A}eKeVYJhWt1&@iBDBhoJ=4*q9g;UJ^or0ZM<DjM8%#Au?S{)>*_A^Xvd-%$s!
zvJlex+A~~BBz3f#$M>A1WalN%LwiW%$8qvmczkB>l*0;SFAi`XULL^lAO=@W3c$>j
zu6ee)w0;dsuMV)=SxomYWYnxF3;Id2yF{>pg1a@`x#V^{SfRsfY9s><uLHk9CpAQ=
ziL^_T&9CqKPkeJhT_{+&t?>yHhvsFSi?sjR8Pw=iu6et&{pA{1OlRic_CAB}1>uPr
zfaKb%?enElWbg!Z<ff2RlR9HHtH{9?_lng}G`^O&jnFHtv<5u6L5DD;!)=C3sg7Q_
zr1<6W%`UhYiL@@gQ1rh|q;CvyQRS_lnJFuij#QkE0*Zg)y;MQAfx`kdG&NI=a7SPC
zH6ED3n}xvojJkP(<^M_!##;kRK(bBmz741rDg3*1FCl{aI-2iMb$Cmw-|McZ?tNXG
z2bZPmJgJqbXBV2}C<GwmevnM5h86vt@a-AWX&dXaJrYz2{A<~x1e~5#P>llD1hZ?_
z-$xqbAFC`~o5-Ol5dxSq6;D2E=!%^_yxHiZ0Y5_QhHI#5Sn4D@#0#>IU~!d*l)}Ob
zQFA-Is*S)2KC9M0OXn?$${W>xSF$8W`mB{C{{7dx&ianl)nzRfI<=~Q!cZ^=>9<Jz
zPqx8m;yTgm-_hHtZznZv|9o`?C$KNm)hZyDmCxxI*G)@q{=&~N1}D-f84QHa;6wak
z?Je}37d_0X|2`T3$$8V~)}gVIL7I#E1bvX412voi1L5m}m;7PJ$Su*x%EsCj!3PO|
zu;LuNlESF!>U0@n#+YzZ(~mXk@^_e!f97<qS+c5$ojI|zAN0{;Jl+v77kO4tRr`%H
z5;vp2Z{$r`xmui>uT~gs5E4x*7qfbmH+85zzr1WdcOlJkJaV)BT@<;|q@0p;+tDPn
zTPr9@^j{=R3`b5}^@UFtRx>PIXVY_-;%}nif7criVE!3>hm8CQG7lH)br8`516}8g
zd1ZcCKb(Xe(llGU;@jj&GFc$%f<>yH2g_F@H<8`EWHqipsIw8U8z*ENlc}pl+2R$9
zE$jj9C9PjdYAR*}7c2w;Qrc}^4lu0>!M-4z@HNYC&r(#;l2s~5(s0DA`l?1ap`SfR
zmQ{&K^ZWNBtVg+Zq~UL(+v=h%H(}x|Q?X`@9BB`86c{98|6UWyJBHX+y$2Obz9x9B
zGQs$+T|Op6g5=-jyZQjo1dqxif*@hVYq3(8nQbSD{p&{q*pXGrQ#mx%uzjEB>csC;
z>McyocjYfs@yqb=@MZ-`$IW3m1(Xax#+A{=`7b^DHc(o{=d~vqcDOV6b1R0pSeK{d
zsM6BymMbkP_0xiQN;$p4u9oWK?pjlZ8q1z^h8l$K>$n+}9dKa81hn|Ee+T4GD`h>t
zakYgG={x|Xmw+?PA)+5`hpUqZJ1VxtERUB)bW<p_D$w$QS+eGzhWiN8Kt)s&j}jJ|
z*bL|*7atHO|4TB8$e~6Ald?fqIKU(xL;tRKTQDzpAOfej&=`euy3`lu+DuqZt?`E4
zV(rsQs$;oAT*2hpsFdF?6>%w6b<E|^WZKfzFIb9!$NG%AY@c9C!Z5>9k3Slj|9&ts
z8)DA1w$^+L0(s!%u?lEOYP_in`=`M`=r?tgVd|PN*9%VRp}6RfMcPj#sUFHhn$U>(
zF$k}h0F|GI_?DVQA$Y^H8gu^kVf@*3!IduAY>4$Q#)~BVgTJ285OGy-;-<0QQLe<c
z#|sXK3d9j-kqsgpXekL-hXh<XgkaaCJLfMIpRnrn86swmFYt$+(h2?bU-4>2)leGC
zfl$3WsgqbxBdNwuoK8tLG(QouhIV~g!DP(|%s7Wfm|soe!P19il6uF;i%sj8DcGj#
zYn2`I&)or&Dd^q~`_112Z&&@!Tu4SgpvC-m+b`f|m)aInj@Vq`3emf=z?YkC@ogjK
z#bMbpGUjkHQ)StGHw`#)wLyXW;<b!EqkVR;_X(*`c$|{9(szoXMPBe9O_W6|&M`_f
zm<@P6%Ckn3JT2NPaK??G&C5vjE#c!Ek6;y!TwLP#<(hy0q?lck_xKBChb$V}Hb@y*
zG98`$kW-ubaeVV7%IFrOAbmfhxxksT2I3k^-)p>#sE;$je#JW%4B<^V?AIUInn=4M
zEx^0c%F28;8b(WR)dTwAnqs~CY`#VGWUzmK8UH}&WCwYgsM@)W{a=Jl`l}w?vB^n1
zsOkmJmzl}N&{56x`JXw45PAnE8eT0jwSi>mQ#o30WmWRIu~cm<3x*At_LkS?j^UaP
zO4Y$CAH}UY6#8lW9))T|T0?72DlI{;J&Xn>%vE>jCfz$sdZmyrPj&g*^tDteL-_|e
z&u2#XnM8TmL0LH=Guhs&&qF-g0aJQKT7(k4rY=gb-=04y=sc@WkRh9bJfxYl`DA%a
zJzy4;#WKiKB39iAAFGU$HMWTiHMT2~cv<*TBwav*&aE}{d1LMZKbSm*Dp-d<|JTG9
z{R8#=#~#1^lE0F$V$<BkeVTH_f0uDm7ft+Y60ZE2j*j#@vj%DozS<0SNSv>&KiFBn
zNl%60*on%F(GJj)l}dbMxua^RDVSU|ppew3qte!gaiSJlF_emf&}QbQW5r_NFIe^A
zsF?|zp<&HuibTIP*D^b4$4aE83D2Go@(V-^%+srHEoR8|jG(IY+~=V(n<<$-Gzi&0
zuv;c+_qQfXid7bKo^h-DQO+D?WIV<!-5d59%v;m$@qmAUcUbjKkC<<Zap;kVbi9Bf
z@)FegJ?E{t4&@yp^e$B1E6UT>6+laJVV^Cc2zB|!o9IQY(~db4pdSPn3uRcytG0f5
z(y>&U3+~wDX>sTc)7;f3ZZnh4jcq-cX-h`8)MR-^84QLsEM2H?gkrAAm@H#R@7)sp
zg7B;`-~U=r_sD4YAIjb-u+pvR7Vg-#ZQHhOyW@^+JL%ZyWW}~^+v#+Sj@3yz$-jE<
z{hjZ9_xW$m)w8bFWYw%1HRhNEu&`x;k<<klfYdf_GYKQIN%`)n`Dl7MFQLo^vINYK
z{Q_XhEF#Xo3eQhqeW@^*xJY_>m|@!C{T4(ICURu3Mbv3x8uT&7F}c7MRQfIT*p&eT
zj;T>ePaX+Zc(%wTl9?|XU?nJz6xN%FzarujG^00ZmX|{N*D7j|1WKLK<GTD51xpq<
zWlN825IbR`KkVGX5KpVF>AQ-puz_d!lUe~$DGsm*gh>J3#X6zq(&}n;!y@E;0EyU=
z@=FH49^Zx=0CbQ3Af~@cPgA=BO%2{U994gTURH!=&yV<pQC7uU(jsGpPSgM<T6&>I
zCaYMULZMW)q+CmyNQrfHQ;GnUR)j=MstQ5;($oI>FmCQ}?R3&Qpr1GyUmW#IR9&Fh
z!il6(;Y@m}iqNR55e-W7_~E_9gTc^5dz3DDx4w6MSG?=R?$}|8!Q{S@KFAZfU;r_P
z-{Ro|coZx8_QFDu5D3TfWS6HP<0E}@Amg<31;3A$UpJ5^Uay-N*}q*G=MJYVh0zkd
zBCRbl@x2HM((Bwg|H0J`fCSyl$-5U<m>W;vx+R&f$QywMA(-J8`cQ2VXA3G44BQGS
z5FmTMA1EmgPD+Fw`d{H1r*Gzu+dYeauqD<&&7<T?@|H@K2%08k{csfs79=}mOA<^z
zWeXGJTx5{pXQeMaKF#5LCLu*7mia3rCk6%KA9V@ZVOI0X;yHi5pA*Y@$HLHUwNtq`
zZ~|a)0=C)WT5;kxTOC(>tM()3#K5j=ws>m3aeflU4c3{BmCG?PCX#{tj6m@V>;#29
z@pQ8v<#M_g04k3cjo!LUYo5uVN^@Ic1)bxz-)28EcU-ndBQLdpy(NvML@-_t5qFy+
z6)wo|)i9n0a6V`alnTH-@%-ANU<J??)${Yq&2v7D6Z?(%qBwLv$#^>u56{m=7DMMY
zVA_DR18+1c{S}AuYw0g>fL#VQr!Ytn@j_a%AMuWG&5w(LMB5jBtO%DUG|ULsXsJxf
ze8Jg6jvMZd<M!W|Zj9BFXpXo0e3Ln3+dlR)+h&S{t4CluE)MbN6e7sf!k=pMJy+vi
z1Aq4)X;UWj%#3HaB#(M1czv-Kq#n%4CYxYCUSk@{@rj}$NSA{fS%uhB=-}FkBQxmt
zEIxIm9nI;KQo^?r_7xZo`UU!9S(xbxr58cf#v=6M{^u+BTLZCSXX-qm=^rwLIu@ws
zB^#)p+JR)KH*v^hXkt3_Y+EiQWcKN*YoZkb0zyTS`+U{6avC>w12iHoV|CQKY4P$O
z{qF2&r1n67)jd-FjJnp3<w4HCff7{SJi~O0)}(J2j$#0Z$-A(B6HtglN{aTA^^Jx4
zVgQGXhyu?;$?M_Q0otWRZO#)vbWH6O_GY^|st4B;y$sW~JMe{_g5kVQ2BPfA>=R_=
z(?eGrc|I>wdAxDuv|>zC8P-lKLo9&dUc@&}-TlVS&Ry$6`<@COq5Q4x_yVJ5ccnEJ
zwn|u&7plBf?32qgpKEgqk*o85zcmGq2$H#h_>)xLJjJPY9@3qheQbV@+S8$8DuSSB
zu7szJoKb>qYi_As0Y`kDtJTET?9kk7Zv6e35NpbSlO)pao0CSBRmy3P;;EhUU9bM;
z)&WHD+tvh<YcJ<sKX|U%zcV-Rpe1O}4C=AHR0yL<cM+d-AQ{4^er<q7xi1hTzhgs}
z1GyN-@9fm~lOP!6oT6JX`yL#jWnXcy@h#g<5j^b<ZTK0rau(^pTDoYlbAxx1j0uJs
zeHbK{EzJ(v^;c^G>^J%fB_B6Qk)uZ`MWMa1p{)=@pO9mGZQxAx+YnDimm3W&GD7=|
zHE)`UE|?azUG%AAnaS9p8WAY5BG6wupA`~CUX#r~UgW|85uW-T^Zt$7Dfl$i$Mfpq
zAD?e+Jk7r(WFfYq!T@1X!l&l@JSe5iA!3Cz=p=Jwa9SJ?U#{HFYN_cExT=3f41x&?
zG5~L}tHA%JhsuvBTrdnlUg|Zw3I;1LQ)sje2bKzelUFk}p=n`((P(6#G!R5gN>UVq
zaV{MavUo(rE{hqHwO7gG!%Q7cIWYbdq;K~ID~Dinqi<_*Pc?+8R5PH4`eS_@b14r!
zEPQB`+a5cgik$<&c8@M_BLM<lE)q9r)hPOO^XE%_#fj(aFXEQAu^xZsXbq8=4Ryt|
zRQ2JINS@B#La7T4l03`Qka%s<zfJ`&<TY`lu50?&>O_k}5N%mtiWcM_A{@FHJ1y50
z5QzZuD4YzzWxXW(=3W=wfZQN5RFvVW<N0mMl{b1K7Zk%>A*q|X5p+POOyWC}Wgh`E
z&wT?h_fUp2BZVO{<g0@SqldGNw;`Pz_^A{-nMZHtZdU<w6)zo1%nGJNq%`3Oj(GuP
z?GA<spZw>>12Dc-<^*SUZOhGT?py@@5KT)(u%!8ejJ=?MqJ-ig*ZI^xc&CbxMzPZ|
zbW7kiFD#_tF2B1+ip#L=)1|RDii54wH?pEcW6-sp@vA_xO_Wyao9obf_KO<`ND|0|
zk{s@iqXEIyHTO2m2736^y+{YkkAoeQLX5iT1DuIuSgyzshco(HcWxWo1n*RL+yB!o
zUhs_*K0+bcpNg|<$)`H6;ry0zP&Fy!z+S)M1|<TEX#Cerab({Tj{-<-VP5tr7P=_X
z-uX+X<dNvu`isxCUSx;TBY87lhL5MHF{r^srPYb0j?zomX`-MJcc4nD?0Ci-+B!G2
zpb!91Dx2@pq=Ym^NjF$_A|#Uofxs9X9)o03RK<zZ>&ad|sJ*y%o))eX#mAlA9`Xxi
zbx!~|1At@f(d(;z*TG*WOTl;IYs|M_*PjH`K4kNKtj|h*2CqA28Pfg<2XIIeg){n5
zyEsRYDn;VGU?3QRZX80fi{xHe^VGtFZ}u39aX?gR5^dWTIE}~S7*_Zl0~9%HwC#W3
z4n(pZ&<|%>bmV+#4y*6*&g0!cbdVV$)6jM>hu2dcYhacKuDO^5a1*HKNbmUJsTmW)
zWY=xQfDrm+o%|LM&m)i>T7SP^kNLe5u`Xx^diWS7*VW@XpNuw%h{FGlR07f&>>0gy
zqq~wnI(?NSkrVYq=+;#l8{CwGj}Pu<=tAIBY&VguWpsQS4)jjOfwxW<BVjoaCE475
z#X>!{N|}*T&;XzPff<FIrxO9LLsCSNGdK2(+3|}HyhqrJZjP?gBmSQ!ad3J2ytFgL
znPiU_%*WiO(XwmJz^3Bp_k3?qR>vG~y%W}|20Sjtj}->n+ea3n5}j&YjvWYPxsD-5
z6WQT&Tm_Y~q6SeqZ_-FzRgc$2A?%B0ZaMwZ78UAa<6}<SBIB7BoDc{o{wYPKV1d95
zz(ejv;XgnG{u-caNh=WQmdvtlgu4)Rr3tPvqJfoFgWTzoy_d+51m@3Y)3ejcI8<Aj
zN>X1lJDi(wo(Ig(Rl;++71J=X@Ce1~t`kk*7CzB+OB!aYrLI2((_a&<n+%|#np#XZ
zd=6arjzk?pg<&tD3d>J=Nd^f`ghn|R$CGTxK)GOr?<YBL)%L6mpyYKdAcL&_C0qP)
zi3j_0bQGE6Wou|2#YR}Nx}g8aTb6wYJ^r%YqKl@IF7Z3w6;R-gEP$DC^_TM3Kc275
z6dZESKz^q2g)K22>=eWTngiLx(=apemEcK0ApZUiYLb7!PBx4n9EC~bPqYn$zn@Ub
z8i|+}glAt<kk&3eGoOtf?o;2<7_l+W=}73sglj*(7W+Z`QVY={Ch}$*LLp0Xe`uIa
za!+M0TyvM%w$EruuYMY8Vv(~d;MemNbz4VnDGbIWhWgo*IH$ucjst#?@8>V)o#Bot
z*6_?w*SWVb-u=;5SM2@Sr((v@!xG9O+Ufkb+-5>8uaLhy1)yUY!380R`geVk6I|Fo
z=zahQhNj_=A5j10BQ;2kPfd=N5WuE97pf$E`p`*DdKkV&oQ;_{pC_9qiMpk+gxBpM
zA~P(DTZR~#iJ1fZzwRbtIZSG~R#y&A;D>@>4j#EjR~fC3u`Xbjvv<(#mZXr4QBD|>
z4=Rqzw-jJ1-Hlp1=Lya<B46|krdXLdUCb<w+j;<M*yAoHCl^PPZ)wv0hvW4(Dg&HH
zCDKn<yXrw)%&fFO4X6D=y!lYR1-gM-TL@NxMkDXRE5|5nsT7^a9SvHMHdL!ZZr8hF
z&{F7Fnqk1<qneIkNM)_5kK{*`*{9`pqzLo<l8f(@MT$+d_~FU>UGMb9b%UvE>X$a4
z=9j3Ms@IFBDvPD`S75mG&u;$fGZ%qeHVD_4P|#3@4@snwXGxs5Cqv8^S2ymL*@{+Q
z$Il}-w@=r@IDWW(5Ex%zh}Uj2z7MatU*)F9%cxdcdQ*M>aAbFeLTqh!d9(IH;gvoN
zE2WVcitP-n&h68f>u@vv`7zM;FaY;e`+r9M7Z(^f0STnSYOFu_M98%!U>_|Orr;#7
zlQa-ftC^B4$H6m^Os*t`^EQzf2QSHePQQL4HrD}(J$*4Z)aReP)%Kh<#|2;^TzQQ=
z@kTgNx-_;d#3bhY1+e_b5SN369S|B9k}bzS?WPLE>R-!|M!Y&ZQtdGnz-yV1<1V4g
z6>IQWr{$%5(QARPR_`Dktd_s*jEDHKP}0b#tXe+aAbbOnUUim)ET#xV#^+X1_H;1g
zWA6A(UD?q`QO#h&@EkGzEN}y>H0wWj;s2RnKUk32q7Tow77CDCY-43qP64!HAfWtp
zUNx#XvwqqqmUN-ZYhb3ETZ0VP1!_34LXW+wjaY#JbGX|+<3tPK`(gl7=gQI4{d(*u
zjo7KaX0|!Rq(dz7It<JdbF?3Rmum-HUJbq98;2>*9W1}3e*4$*0%K!LP{ILtp$ZpD
ztAWO7xhxZ6bE$<)eeV-<CQY5sQrcz`8{%V{qORB`Hdg7@8l79+U*$Zw<1Jf=rEs<b
zz5J||r{%)R7=U<JCCd;rRYmr=>6h_bLZrMT$uNp9hZzt18{-s{Ys+RU3EwZf{72Z6
zy+PHCw22y`_fPj_ba2Qs|1!(J9LL`jaKQ-SF~-a;t+TQqYgU{T#e6x)VzhG?1S$+*
zd0)kkSI1=}ck$ayx6s$P*jW`3bDZ>8<5r?<j9Yeb{*EAZ06q|<mg}>5l>-#Yv-ot9
zm;PU4h6bI7{>49)h+vkIwe|gT{WUuL&_Gw5aMrL7JGbtj978NeaUkJpR?L8%A33E~
zziheHe8^f6+*q-Jn~|mUM4P`Z0l(N{gtQ!8EWOJLqnwryCyh8#s<ghT0x?Y*v7Gez
zp7z8@*xAfJ%Jaj%Px>&Y`ZyZTg>ni?S2(q73G}~r;TuX2G7=lx<vxOI5u|y^BfFSc
z5P9Unss}FHDkArFRx!JBig<vdW*;HsJxyK-KaI~MD31)mm_5nl@3y*p7}2!npnLrr
zZrr0cVN=mGufC_eTigM?;Qwp82M1DsLJ(R?B8uh8KC!d4*aU|R;%0!-zMnLOb0+gZ
zUcAw2M*LV7P2(v>Mp~4nxuG}Pq71bpFK`;J4{c(MmqN=HFQ&cb#`S*#G8Rs_y22x=
z<%|9TRsVMdffymoAMSZD_ARt^8n}t(siLiUNp%xYzu<TQH%VKUBhexYYvs!=b6g5)
z1ATn}x+O6?83@BvZh{F6j7}O<-EI}OXk7tw3^by(wThi9Cdp(`eUwbOEq0;gm3u5M
z=Q;Co)1YC6$-TS=pQm|jDEYq)%M08ThRu9%PEop%-?-c7s7dl_BT<tt8DF{*F!noD
zF|8dj1y_*}kfbV_#^Q}shy(Lk--(`tWYUxv7>7aT_-C=Z?h)DykQ|rYK;_IUp(NV;
z_nM`E2JvQ#<g*QZYyP^W(%Efe#f(N7$vwL}?{b!+h+<+2Q}GQ_31XNkC0T|QN}0(r
z6MI|>bs1BJ!t%0P1hW1GN)EcY6%F1!fUg|cwL7>+)CFtDHQ&=bm`ST2LW}-bVxO(P
z;JOYvPqbwb(TI8K*H9ZFK=AQxG$i?~AMNK%n}1ZGl=;~2_Mst)f#3dU0(Wa4n#qW-
z0KM;N6bTh+6dx*jJKlzFReAv4R?bdq=fARnKb-e}yw4Cx;)%%-P@C<FJ?jwR^I)+&
zK0?zMTztnL8|F8-1KdxTXzGL1HSDB3!fwmmkZFK>Lz*x?>4<v8PIdY7q5V-#Hbdqr
zydk-v?9<Lt->_Fk&@lAEB$8+Y=6#QOgpA`(`C4VUVl0=Y2ASA<SOSgHLu2Y=LD!9b
zsG38F*%1eZk>tar*#=gK^-yZMz+zIeaQTdHmH~U19Ok!z8$Ae0ADY!(x0=mvgALJ5
zTCxA|X#d$}Wxn95D3%?(>^-N2_3m3=__{W*u_a_k@)i^tJm4{?Fl(q;R?1j#y3geG
z-KF41ZG6G>cl8ts(L=OK5xiR|s#vVDb*M9zmcme1G;twW1B|TaS#8X*>CAOJeSlDX
zJe;ZAO;;4-c0Q?jCQ*WHH!jOQa`QRP)7iuLhGuv1&da8f#^l5??XrHo+}~l({~TJf
z$kIv~g{JJxj7ZjLbogf8SG#z}GW))ftYX^ph7VJwYLSQ1jXB~=fpx7>P1K#L>g?>5
zA#N>^5xAyk<D6(spF8?AAvlm3m9>#kn9HE!;8jQ_L9dS)fkF2uME#*RWSBKDzkyGk
zhzYUEB$?#w{@rUcF7SMsk!n?~{U=-bt90|%M_B<H*#wifL9qrbDm9NiL>K<7{0mzP
z7nl<ua~uO^)?^7vEsm%E*Iw;gv5vNv4kG5@eLC4pf1__%+LEOl8{BJrNx|saJt~Mv
zK1vUqlH`>&3NB6&(8bix=ELcvjgoq%9o{L8H4wj~`ovjhtUaraHB8u()yx0KoCMiO
z5FeX_qts3p@G2{y($QH%x-n0}k7ZgyRxzF}U{aVl^ID7->vY`G^0kJbAeB$qN?LBT
zbboKTe~@GPv3kO_G;&7D&MFR^fF`X=U<+ULk%0@v&Y4-leEHzK84mGYZ;1miiMG;d
zpHI8}Pj_?@0PP7d-?Lw{{6g?4isq=!*y%+cm*zUhnP3l8GyQELBgYU0Z|=UrTc>Em
zLeytHk^JE^s-`hqL(_BEFM&BD#VL$NZym<#+G?wfa(qZS$iOo4mVq)*vwa|*qs6$A
zu_jK)xW0*_2P0F33?8nyHMos{W}Egm_V>@0`16sC>-!WC)CGdzqi-#dVZ57<_d8oH
zFY~=Z^IjvrmblP}!p$6b0scV7i?6X=rpw9cSUygl<#8~$G_f|mG-0#WCnMZ>oE*UW
z=(jnoK2~j{pO7GzT%Lh)^2ISCa!(dT;76j1E6W;!8s;x1h$7YS|Fv}BP7p>8`eYJr
zew59kHf5L}0X=qO)ju)j)=b=YNx!a{Xiuq^s3YX!SlrE$;m$hD`m}bo?|wT@&dJ>M
z4tz6oQBpON&RmZ+m>>KMSMrZXEDT%a_oAysPWo@FL<UDizLp=qKN<=o+uqd!TK^=C
z0@>%E!SY6kYZ~)Q%}mQ|E<}igo<A>#G3AA(Y75`{HAm6Sql4)8qi%}}VkyS&LrrZK
zP4Ug6NhUot%nQrUSEp@Zjyf#l`A%v2A8z*rjGIJTsHGC);Pn#CN^+-8w&Uk<^wRh%
zS{$@3smR;^9ZjS_hk9mYqAv7O*hbx(@`PDKh)`xG)VDhl@PM68NEXQ2q_og=6f{Cy
z&_E=b9}WK19T=S>cjOP4ALH$0q4aly8NGY%$|RGw*pM^75+Pw}FAnQ;B2Gc|(tejV
zLCF2hAo~xig9^ePfNx*uW%#Sb<hI}@U;ZTMU-!*@ILca-kQ%CJ4p`<}bbwq`4cy?V
z&0e%H`O|(fwL}_9Abag&i{tNRWBM91UK5U;u`HyWeMer}S{+alDb1A4;{gPZ3lw%<
z=g*{as80Win2B+NB7rysNS8w?Sy7X?cYTg(9x>!s0dqh)`~KC)adp5|zL~MX_97e4
zk}%V5e9b7VUH>&pc{(;+V?=d4%@{gb1AWyEb^P_g77DPmyo=+HC1LS6JjpIkg#Qe8
zDUi=pSY?Iq&FbuyZ-s%bl8{FKKMWlhu?LVDi)4ThcL``ASzBf`F(p|o%Vjy0fh-2&
z5UzuXw;20p<clYInHX1^!LkkmCzmtpIOp%iyqNEEo%yJn#YXZB+o&4g?d<LPf7)pA
zc@}G~v^Vqcl@$GR`{;ih?ROI8bfRXe<=ma3MJG$e`Ike!k^)YO?jF-2SetyCFN5Vq
zK_f%ZGs1lJbJ0`E5M-PK4Be@Kd~kBL2M);)h^6(k#0%4lPbpT^uRXivbitp0&>VcV
z@D+`;vf^rdYkSz=3Oaf9)wjFK5f-Fm3{tIP@~V~^ZiJ{-NRItqAN$vdDy%^QOd-=M
z(G1I`GlVoaGJ_=|`}xz#0ftV7LJ(lYYzx$~-{!Yw6Cfui!bo-oiUpCG3~qJVmfUQ~
zu!G4*DTQD!%gxF0;k?|P$3Uv1OiI<z@^bO{MO>W^+T7jw`pCJor4jRT`RQ{3`{Usm
zdHBPZbmI~chsLY14A_=oL;sF|{GftdLvhaH($C2iiP4Dw#A;R4YGM~p;v-4cd3H&q
ztin-&0MJ00&wBPGoANEj;D#{s@NU3d%nYb;0H$n!uM{sv2?MNI`zwNlQ>Bq<jx{(J
z&|1L$$Kmp4;F+Y#5g^V3nwepcCfD=dWg11*`B@CVh(b>8m?xy<XmT<S$F+;Si16U$
z6e^B2Tthl-<bsqj##2$5>uBp;*P+igFw@h-Ls^NNpfdc|(FNrE3V@FdR!O;`y;2nG
z(BNT_p@_X_n9)pL*;;74k16PlaV9g2*?tb^1;S^A?*IB<-~lNYz2A?ck|F-zksCCq
zA6gK;668WG${N$Qya)i>Ml+NeEMsSWjJ+v+xWO^A31bDbVcHxHz_B<!s|@TY_mW~K
z+o$E>n}bjw)(J<L2An1n87F@37?fCM@qdTEK@*aF``RPEF_zKw-#6A@Xgf(>O5HRT
zGVIvagS#&KG)K`668Snze?H`Tx;MZC$6g%lji;Ikg=7ZaUL0&A{(f<Kh|2jd_x&eq
zyQcu>56vWHYK(;{#yK}zsfm1?F*HLNv82}}SgYefbNGJL0*a=1DKJYZlo9y&<;Hw(
zVX!G#ZsE(#)W(bhCF9nM)6K#DKo>}68*{VM6(nPhIpv+?o~H7_zkMdGaGz8L&m*%@
zY^Lc?ET<E*^C{Hl3Kn)T<%*&o(I-YYs|nTdRAZDvYsH|mitl$p<q749aa3wVon|g3
zKxG5cihup%A7(c-1}H?R4$C=C{ivg_h}F+@Q{r?|+j8caRIusp((a*DnxZz^{=lgN
zorz>qunEmkz1Bp9OLUR6`ie1BQMyDXJh?QA;x$i8J1U3pscw{Z58_&ywN~Oq`Ierl
z%27Ym20H5Ce_Lf3u`&<^t*IcJHfEPZNh5=qw4-i@CkZRGnA_=;cx1d?aiap>`MWKy
zx`4GbuLL?j=n@wo`-GZtX%@KF65+1}k<|1&S$>mLSOiIAK5;1F(oO$bnnWH@Hx*ow
zEQGlx5e4<M6VEO)wxOJPC^=?FxusX2N^MJ&mx4r|4z6x-+5}2Mh2x=i83V~*t*$j&
z{b>{51&I4P75W4HKQ-$Xl!Um+`20^j!S<6#{B_&^za3^MLcBCMrLCHpXF2j~7v<`G
zN9mF^qxz|~Tk<g#L@sqH<nL*G;%NC}94tVNAv)HX6>!^<4*DsJqo?6d_Z%k2#E&I)
zk3fr&>;9Jy2a@nP{-jUZ%cat6OjFoMa}lkENv#FW`N!}Usyv4+jP1W^aXbr|$h9cR
zp_FKgi94zPY6b*|xBoviqXB+qhneecm~U;2ld<yIf(Hi4czTvxBwmp2+waV1s%ci%
z6q(aswt5I!8mz`<S>qI>Z46eIH}~BsS|X2cLs;e_!1KBb$u<Kv(=-&O_N^lmRzXPa
zJ2pQbP(X-lR{DC1eW5%7r;_ZoVKoC69pyiB)IX;Pt2nVULL)OCGx1)cC8CJ3*pSY|
zu3vzX(1ucZ6_BH6_L(JhN_r*6LXwup2HO(zuzI{c$-IG_g`FH;-*tKIr<8Y?#QHcf
zMh>U6Bh`ys+Qq5?I5R)rqFHdyz$I<RH<tJ7DRXLPaaK(!*~Zl|NGb6D3{HXF34%wF
zo;JCGlq^GWl+B2N*g2gZjjI|$Gb@G{U1(KIH6CGB8*9ke>9Z7G;0jHXW=dld>@EP3
zUN7<p<x++&X;m!AhwrB3X*pO0%-qbS9&yR&zR#kLTm(epa{4(4RW_?@{m1G8^-PFU
zBQnczA%QNCtt-c4k$-ZDK3ByqUghc+#&MV?M>wvz&kc5%22&O~Aj<@hXkj9Jw6_K?
z{SrQhdO93i$dU@J1WelTu^43r|8BkURaUkC$0=}@$r@I%4e#Eu_%7CnDph>&OX+~m
zRCL=s`+YwTAeN5%&!Lxrf=4nB%DH$0%2#C?nZJZweVkTeXxiZH0YxcTmjtTDhzU)+
zXo=(hbb;k!<o|8>lmsslK<%MrksLP%-SQpplk_)um~sbH&<BLUrQN8jg3V?<H#_Yb
zUd~!~2}lH-YTlMAk6OCZVuvy4<?dz)HxCbuuR57)tOb^VHrQ-(%Ly4}Eo!e#wf+ij
zZf=%EdMW>ednr&sIT1L9d5ev57&2L2PON6Z_ZoL;U;Dk5v2`Ko<+mr5U1?&>Gk`#+
zJXjr0;ypqk#X`(stP&HoxsG~g=_o2ieWz>+j?4`|Te57N{H!*?I?yJ^CY~C>6D{_U
zo=run74%EKS`JzfmYrpf*mUZB_mpgQ^!-+Vh^oR14v9ce3kbMpU2YpB>=8BU*z30O
zIp=NOr*c#l16<X%^t@GgU#wD9Ud|vI^*9>^BIB`~Z|f=?uf*9bo+Gu>dT{@wv-ug6
zud=zxSw_+O7HmU?_bS)NejartD20H%cB1Ju=+dh-dDYw3eK|=bHgZ)3ned&WC|aPx
z*0%Ai_`TC@`rI!~9AEIx;JymKl;yL|ZQ0pp1H2$93vncD<;w6`UTFl}#%~owf>CYH
zip}<Ktjj(A<r}vnE=!7=qzDX0KK+|o8(cNY)sFml<)x@-Stk*(;q`phi=17aLT}u4
z-Kf*(*|L#=R<e|aMT=~5!-<yoepMaWHzF@*^-DKl6(h?27=B*?Jw0O+oyOVYnC2$C
z$Q<}8fLwVNL9hY!G4y>jIR3EAR-$C?ADiQ+*`#F9_XyxcW2|bOvXs*!z31`@bA2lq
z0fI)*Y>S^QxDjzVMJ`-lE-ni;%TBagwe4+nzGVS^UbGDF!gQ9Q@DWyUcHJT+GbEc0
zUenmXD$q%;y{yDAns6Em=i>VGm8vT!R96tOYR0YKk=YDy3XKl|b~GCXJA11}2!6MN
zvgxMrYa*{|k%dqD*Jgb=Nk^@0?e=T50hFIOzMU@!O6A1)9G_NLj|Aa{4EMg-4Wn8T
zPXK!f&*9yh44cOR0O8}RRjnlK(6!gUrdn1otm#*tdJ1l>HP!*H-c<ONcM9%P&Fp9C
zEUfqZvrFUw`Zb}Kjphhuv1R5txmj8#8MdE!Jb{G?+t6KS^~*O9m47BMGvt93{Z`y-
z3#xi~6#YOa^VA`lIqBkI5X+nd=wt1AaRH(LY~A26IW9GleER+MarWe}D9pXg@s;#?
z-Uc?GIJ++|iN=Zaw*H5XHbXU6s~q=vTCCP95n11=G}iZR59}otZ;=hVe$LGWS>}KY
zdhl!!^tmUcuXy9i2d8ZGR7=D(cfX-}omS0zb@1wHOg2#MM^CaN7-D8)2~;UV`C@T0
zc{8iMb(g>|GD}_g6jk=Poqnr$KI~o4oo%+c`})y#<Ge?#ETtAV`ZJ)Sf`~_gq4(9+
zFP^>f-o1v1Uw``7m<8hvp@rjHU6joki;$|><F7jJw^pkpD%+-39d#U3Cg^(%aL`bk
ziZHCRpVDkKg6?3~6{DJ?SXH=UI2u*KB6=#6m=rm%N`gTk9P)gbrgnZBrc~+la?86t
zQ-Ao<&+4TeWBMkv=j4sV%8KB@=Idt>0p%O3jLtBP3gUVFK4Xa%N806!Y?DzMM%0}x
zPUIS7Z+uPVK8yDrS!&HM^<Kbt(_7nCx%&$q4vh$_vjCTs8#|tPkxdLe_d7k>qTpk5
z)~^-zcst4j49^^^-kUYfXO1~_jTHp^qLn8Ojw&(Mv^D|yz0)yH=M7X#9aMLIt$-R4
z1VSk_PO6KV@P#IcEwVumUU`L&F$$a0tKO_E?Z>mPE<WHkw&%<7rCVjVWeoD4NP12B
z1-x-7$KJzL7MI5agsO0<E&+|~3yqd9EJ7-Bmpth;hki4=l%wxq!q6s=pT39{e+(RZ
zX7!J|d{QH#w}3Ew(5{F^tH2dgQ*Rs~YLUo}$TglMiYA*dCTc7qA4xudy>053&LdZ<
zz;1{=mKbhCEBMk)<mDG{P329kmjcW~CtFG}ZtQ-5>4q-6GvG?51wrFApC<_#1ND2y
zSn>7Jgi3^ZVx8xYQLx!fp<3hh%8)`Ks&rbsZoZkwU?8uGy}A2CtR>~bJPZohOWOW^
z@MwS^bKLyhvT>rbsn|L~7qA-P^y(*ias7UE>LNdFOO9IYc6j%q`<{Xobkh_MAer?3
zoOL+y(Jfu=cjO^hlASJCvjU`kaJYX*TRQmm9<va+<vXfk^YfMp_Vxw*P!#!O5Lz7B
zvW!I%Ni^%hfAemm@aY1vF;IXMfv&2_iGrp2w>eHi6SU}X6@AnVd3!LwJ@Z$p@nqm(
zy4E|zfutmT*G>RX1ZcMiOz%!`--1|BqoITdFD|tosrNTdA)7fA9}gAdEZ7xMPAfhg
zlua#~G$IyrRGwJPUTiKMZQb{UC#fwbmcNz-H4$p@F<f__HbeOml7pQ=RRE$~)CWVi
zKc5+<+Zfz58A9{h<>IUL6cJ!?9j=5_;Bkk#Cv0hO#AjExIBv_sP4*VI)acnjAoJ5V
z*^^OLf;@z1P$B%>92+bOiC5`gn_HAnL$qd&3ba-jbmtE}<CZZ&$POZ-JRG{anjZAv
zU#sR?X^19O4VTaQc7{uUMA4YY4vWXSZ&2YrMs46=#kSt=kR-_UxLXt!$rhqF7)jIQ
z`NW=E>i2M76QPBMf*LY<QG91#INZExJ*trXsa?d(svN`(Ok=Ym-GxtZL}~JN#bS~+
zOSYp#r;@hW9zmSmR4w#nL}lqQW?8eLHhE=46r0yx$YvALZ>QnlW)7l#9ttWUS0QHU
zN**rPqddMj2Il*4g^yl#n%s-pDziF5W>@J9r`<}w!z0OoK$tsMq1$P)_YYU2HyN!_
zfJRD*B!|i-mqNDOs$+Q^(?>0eOG00x$-V0t(Kl<_OWljO4vPm-E&<QI;oj89$(kAW
zFa_N3`9^5CPLHp7N2~88Ey+|lT<i<po??_;A@{MQw`V-fht&`k*}<)r?*y=UDT5yV
z`J9E;6M~E;nhrUT2>H@6&9e*Mog19xE3Jmt0|m47)`QC4{v`Kvh^4^ISUB4qz>MHQ
zE$}MehlFp<`5jwXNE)HU8>#phSwOh_gQ3W3m$Vfr+j%-ECMIbV<(w@3o7<$k=lPXT
z97W%XpkI2$Hw1V}{NG*-tTs>krgz!ShZ%@L{brVP9yng*3nONH({}%(1;DG#g_v!+
zCipG)y(`%Un<uk})Os-dDAha5e~A)&u*_&x`9o6hE_YpeHjMJ(p?oQeD&Sk3l>S>J
zOq0r}Wd|453AdeO$kmMZZPCu{BVChvpIm*msCeOSnt~i`)4~WU^qRQI*g^MFporM1
z&U=xK;m`bu_^VAx?;XwsHrUyIhWo+LdLh|_sL@yH{ZIpqw>l^Fe1(eK9gKlXpXBe&
z3GUvU;_n3j7TR#;5Nb)3XQlu(?FAM7>95GL*)z5gO}Z1=L~dn)%A9Pna%rjI*l>f{
zFrWUhLttLi%rlIV1FYP}DTvF8vezcu7Ng2X$pI4@#M}lzbIlk2P)!t_a1agE>#vrQ
zoHBscMXS7PxvXI|si866hk?V0@+hdh@)08Uc*^-$`;6PhllaDaV!!KO>rMVMB{s+k
zuQ!nLY6h;Grxh-fl8#NRhaMgd8nYk1HMq^2P@fHQW7HM4iH&+Nb?MIHUVD{>wC>sa
zfIur?WF9e|n5YXx$lK2Q4dmg-$iEC2tUghmx~xKy;^g%n7}%W6f7kl<_@1FRTJvbx
zJgD-WDKT4dE#n$=+@!-$yKg31%$jP!IO9IAwq4~szg@2S*Lm2B_YsU1+R?*{Z~yFP
z<NVEWhXV(xN|;cA0la{A;RkweX@!q#rX^(D3?DJ8bDQRSk7Hz-+pk<30#K){hbKg3
z{p@4c;WG@j%MIWCQhSt&-cGvR`iqW7&}!6Mf_`UuFCi^O<|37H4BYM~6OtNgz3rPe
zzm#t-t8XM48_%4d56dB`ZnI0Xf`|{Nko8Kb&BS|b&K4KOE+2q&ya@F=%Sb0<@^i-K
zm0RX{+B54Slo6c71U%n*R5G5a?YxAPt;x@Z69_p8B<YyB;$#e*P)rF&D+>PB%Q}Fi
zwbpz1s{5Rf-w~qV_(E<I(0KB@a+RPGa(*U4E&jtX%xzFUBhbC;POc(VS`uEol;9PO
z!?n~S+uU#H#Z&I`R~4W3BSqS7(Z%$!{(v2{y?G&FuS~kGL(W+gJL^SD?gqqc)$ZoS
zmknvKr#KiURXlgdJh<y<mr0VM#}c_a^75n@-gu#Fc#b?yDCR{^1;L-n?T_`@OBEmb
zTEaag!^0`30`bLGRQ_ASYqFuE9i><Ilo5HgxdD~I-JUyvb)Q7`6T1u7DOe#uiQh_n
zccCud&M@o^9^1U{9EIY^!ypqfOSsms>(5ch(*h8SVlV8^m$RfC)hqMchV_aCzyCOa
zQy<L8w3#;Js&Kn=RBKdhmq8#Eg%O!Ngl?>F!Wk;_Q&P1TPwV!dq_J5*Ij&%N^%o6T
zJ)gRV0^dH9s!?$ia_)|5;LU2tHOLc^nccstQ1S7bqUy}_H`n{!$#mYP(zJ7afb_1s
zjA#RU@SLve{j@3;fGi@3?5ieI6XhO+U>a({togogb(!#GC)nWir2CMg;x#tGNJJ=}
zK(>(t4eaV6k8RhZC)n!+wGt(j#LNwt$c}2o6_RM2N^BNxyu#Gi{3_c6O8PSGDBW;|
zrS{oDq3+8#LwIfc!Qfn?$+*MlV@4=RDM+$brMy&O07Dc&4nl<D`l4`PxBL02rg<g{
zB<t+Er(zXX*0`RGRHEhnvA?Q<=d9MYNM^kwGYWHZ!tZ!PJgdjkUIyaH#9EV|@iwE$
zj;arNLETAQqe)E}znk_0429E3{7$Aq?k~S0G$nd!f70PRy>@{cV?BVl2`)EbQ|wUe
z_hDd+B`LDI7o<X8Vo?NeE!aRIsPOsUYC)Le*p)lt)>^6<u$;h#n=C$Q@#T8Efam}Y
zKOax(l<tV{*ziFPs~Wi257z!}RO-y-#NZx~N)zF6KgtmYtG#hiif^)*OPsekUc4&k
zUzgf?JTHucW#*VpVF_~Y%yHUVPO?ZLEezj)jH$tEpx35!7tMXHrxP1zJs93lWmD>s
z<cQy<p+4($zcn}~n@j}Z%TRo~4xsZ?y|_Q!{4<LFU02EnB2WJmGFQ}o2T=hpmas7A
z-KEE)y90~8#9Ox|BHYt<H26V)SzNO(Ht$>DZ;8t(orvl7&n0n;vFTPKBf{WgRLDO>
z8sOK3W#jlx8g0@W-wVz_4+2{=$o0Ftx{t|rZa|(IEN;j&IS0k=AMlh^Yrp%l`YF~w
z_PJt=%TR+}E9Z)Yc9OJ;2sT&y21PDZ^9u1ZdkCHra_}ENA2NUwD)Z$#VO57jmk`*f
zYe~h}grsvO6%ZTTgdq2vU*}?B*o=dDjEvS!BwL6>dpNqdzFOD-1=HLw%TEdp-X3Ya
z%4>@0o2<#aZ1<tQIyD7B(IJC155D%4jI&<oNP(x~*du1Y5po0z{tB|gt#*mLihXQ8
z@RAa$$}H$@6!I=_zbA0|nEE~BCY}~FRx_VH*Y}ural!kY_~kPD=7w&3(8D8N|JrmS
z>Damf{ssofuRyPT_J>?79wHF=bYF}<xSCdFjTuH;OHd>`NlD0Qh0m%nPBqD0%t|Cf
zN&Qba{0D1igI4^D>L4u>dGw%?ryfk>G!DGXS4d_}A^B;Mf28Z2t>St3b@}D^YK0K>
zn}?7l6Cr|Q9g2%!86+}}rd)`q=M6iPe<b9s*lEef=haOhRO~-)@UfQ<S5;XeF<6>-
zjO-6#^sz;R?jJ<R{Drw&y;mu2Yu{7g7ZeKnLkO15*9E;k>IH$*Ysa%PhuaYw{~xp7
zxE53jF?cO(-6>b^Bno>70BdVD!FM4W7>11<39t;~Pf^UzWml&Lv|RJ|Jn|a-wKLaC
zHYAROp$38;`GR}11Ls2W=2Px|+uQZSaY%VxP9Fi*uPD8DRv%^KL^({I$Jy*9%bEVG
z3TkExp)3ak%%6XmH$RRWEv7U`VF2<?c7@&(nLZDofIW_1ebjirwfshBNDNyPyjPR;
z0I&_9+3(*yozeI<heVX4@byT=ZM}ZW%8)gaV`duVOkv67e~sl5pM6AZz6ldbvi~4Q
zszI<hiNDhP_ViMhb=~8L>Ms&E^8kHIYg=HQ0i9v`@;In<`mkaX^^-srjP4#Kk!#SB
zKoo9)NY*d{i6@vOVDs}e1QH`SvL`k-X;ZCUQQGz!hF`o;uDySP%#Z^2iAx6pXEK!W
z<ihA@@1^XTbYkf#o$HM$FJ)3BPDpEtgsMVu%lP6~3uvGy{@KEml3}G`@9DwV>CisX
zJLvKq#RmT#<Z``#`%bs(y&%zI=xIUH;*zV)xyUy_`BD0p*&Q*$#O!6}3OMN>8~tP&
z3=dF=gVj$)pBm+GnVToT<v|eO4*Ot+Fx{OAWS;m3<}$C;?b(r^!YQNgAa{Fyl=OOj
zi#!=SUYFk~=L8A)khu>51$FNWgHonL(K0yj;!Wu?9+`SW_xhMB5EP7y40TxszHd+5
zw8pJ33gK#wP;HP#1=U*P&%tX;OyL0gg}72*mzX&)kBd#vyWPRolYr^t?n!+T)mw7$
z{#5r?nSj+#h~up--&WNP)=Ros-=j-T-IVsZDdD%M5D~NAZ-!fTgV!yA8cpBQ8PH6{
zMZ6n+y^r5SumB@6wysfTjJN6DcV&CSU$x4!HV1g@Hmvqb_1U^$vwCN>mdQAYFN@=d
zzQ>nehFb3%+ZOl7;ns_lmDH4_7B)O%9EBDQ&I*F~O{uzG?fe21i_H)ivOhW2Nwnsd
zv@}=EOPIo*BTD6z29SeUho4SdOgpxn)%_fpN-!u42pxQS(>st^`F$qToKDRj8!?|?
z3*^_pz7ey;_<OeLc1xOnc^&EMqA3gVr|(Pfv(0}&@Y>&&3C(=a<F|<Yg~}QhK|r8N
zoLgY_wb=y1X7Q_Q$0t>*9}Zdtm2Hu(ZQLEd+R&|R(-ziO=AZ3Z{NCVyr1oGmRuctm
zO*JLci~x=@FxW5BTMk8pohr1abgiuI#osSuoyI%fxHCTEDDGpBjA@Qm6E|+RpNT6X
ze*(>jZn1dwZT`7)HJ7@0UjHtI<#ipK>k~~GR7bayeSh0=G_GebSI3A0nP6s3OEr*4
z@CZ*awF?o>F^akU4554X6Gw~i9L_`_xxAf5UF@>}^>13o6}~}qQu%o{raH%uJJhTe
zk8HYx{@WL;E6q;-%Y-cQKBiZ+NOj%kT?_|87f`$wdtW(*o(nb>H6ay`<LUweThn2A
zBlbh@(j<4}AEqlTwnn|=&a&}IalDAdB15-A`AT2_p$?rohe=IZ7f1w3WM=Fyc5WNC
zQ$17_yjdf`pOheeKDN0%*uLNfFn2fPuBdE^Fo9o6mJ0q@gH-wiA1~kMihE^xm|?gk
zA2V^~JCa)gSRwf>Z|H*0^7_T4V&~VQ$2P~0YeZ;K@I0wx#1Bp{Z{#4c^W|ZPDlLnZ
zIqL#WwnDQvRj!>Ohy>!n9q(P%=9hV|esX~~t4|2tD4YzxOLcEw`Jcnx;^wqG_`UK(
zg+`6tHg0;AYu{c{f}N3B3Th0y-CuEReB!Glj3UxUTyd+&j1lS;YTxs9Uq<gvXgy|8
z<1-Ki&&jQ_Fjg>V-O5Vcp2M$l949$-wV3Er;7X@!KQ<|*vc|IQ9?*K7md&p10e8W_
zhwhsxb>-&pY)*MXkI_N-(Ya7gQ_=5TPQ+$hphJF9c;sGWUv4PEU72-vuUqYujL)g~
z1c+A${K%WLZgpxCUsvHWZ*$}|!1E%LIUxWCrg}WOgIAxnJ<?Fy9ai2$ISiJ#u5%3D
zOYfSntOcr*cy4xQD^ow5`O6{UvCCG3TuO24CzIGqfS!}2H7UFtW`$B;M5vEjXlv=S
zqk7{dU_68jaK!k$eY{O`x5IwL6M5InZs1M9K=%Wo+I6<)d6meTiNQC59kt!O$EEvu
zZ{`O~>)y^C@Zk!tP3yQ}uFH=g%Eaj-^jiHle;`^<$nTN<amr^iqm@g<j!Sj*gKTO9
zrRSFlhzZ7z@aA9geJ-7u(4s&0y3o8%mlv|)76pBybUpWBC}VuUC2fhiMY^8@@4Dni
zQFvz6TA5$bS_-;hl@#BFv3Ia_!tH=s29~}C>n6c1ikmwpdPjqmW|9wN9N1iUqceZ7
zydw(+1c2h3CoIn_bZPIGhns_iU6Wh)<O;iS)+GkNw`gl2wLdp&Gut~@&PGKkG~#||
z#&rI8vlve$?h`f!d&?s5#k4B`>EW{TET8kSTl^ZaO|OkdO<NTr6&^v)_PmnZiZzCc
z7JlU$%A-M6=YaH91XPn8@$DW-&CcNKe-Zb5<}x|B9G$cNrDWnL<mv{mV<~&`W;QBG
zs>N@fSuc%*d7pxt<sLDOHX_d@BW`-&<n#K&*4I39yeWJ|z=oo>%oKE#)9NMZ8^-yv
z*Ep*g9Oj47!*1$P!>+cFZw{UnroRW-2{>4fR*jG$164wW!oiJ7&78=P7Pbz6ONTgt
zDfHst;$g&yY3_JOh}c+b>q)@FW<HU|#~KOFk<g{bzdv8UVQR<(46$n4LiBF(X|ep{
zwK`S$Gco`g;hXg$)GZ-{M4%PI%IN0J0ba_w4!YW0OH~Guu5bI7jjjWfR{ymxAnuu;
z64=12tXhw5@E&-e*{irLL>HU<9`0rI9Sh69Y+84>7Bk-xNOiKF6ZWo4rQzs!j#v2~
zY;0K|c%i>U@g_6DVkHy0<F9eA#D!a_W=O?lizrS+2j0CEEsa0~+$UKWmSkfJ6zMt>
z)+newxg^i6)>%WQc|(7-pj=#Wo4lQkh`d^~zb7zWNoRLf8AZ6qhk=`}6_7s9uwRsk
zYYIZ5veVU-<{az<2IGCgflu~)_R7fcxd$5XNS{L`-v*TgN6UDAy;Cxo-cA_Y9oRpE
z&*J#=Ym0q%f+l|5ZN|i0S#YSQJjh3-q&$s0w)y2F9!##sT)1^@4j-wLXQ_@4IdYmY
z^abyyY2)zl3}9yhg1!O98mL9oj%pag3e=+OI%eNWS<?ovtI_{zz_it6oF@VGg5|k5
zy~nB%%*#PQ?B^$*<n|Pe4uR9sV!43QQ-g9xy9W1CEw@d@`toVoXfl&{4i4J*MT@!V
zcnoJ~Fl6*+*2#41cH`VfU^u1Y*Q+jzXS5#MD+#(Jhj8`zn8;()h@{aBm~1RT;nE)-
zR(C~EORgOWyAt6>4|tJnpTE~lMRtrbG;#ZIfLAS}V=xQMdd?f)LHsrqG8SgI;N=;`
zur|n{V%Z+sk~zPng6nb!_S&mi+z4;Lbs-es{*J#tzbM)w5!M2Pflia9^L_81y(eZ~
zjxXbL7O*uG>u<Doh3GSK&k`YP$9EyIB_R#5wVCl2YmkL+n}pQ3OFr9<y+!8gw$6`W
zYxlwx`dz5{-M@?EF_Qk=1u43Ml8<TF5?D%Mvq{*$7cj5+fx!_8&^OyALlaJ8AW4|7
zi{nfz)#vWtN8G8q#t&JwLGvoJn?bp`<`(;G^bnobQO<ON1Tbzn9t&Vf3Y!+S8&FP2
z-$>)ii$}i^6oX3g(9@0_prEgfItS29y(7Ql-yfIfRPq=-TLDJ8ehFRC#RwwTUe`$g
zi)L+g77ujZe*I<s$SDvve4m%l-(uMo&!!nC`@4vf?L=2w7!EYLxJhjjcHFSOlYmJ@
zpedpR^LqPCp3Oah<Ywrh7B)UtkCAq4Y>rK)tzhD11Xz8!&aJXw-WE7}CB)H<<mSpg
zfG>Fh-)E@`J5{ne$NlahM&OXS^czbKnz9ap#EzindVRKhQSmJWS7^tHp%t@fs?Gah
z^K7;CUDCki%`FX8X1$@GVmx|B0SXdGylse;!d~0ZA9$faPfg4*W>(9h!F*zlVQs>0
z2wNNhGQe8I)kW=mSuU{jzNnjq`=L?RElaHDqcfT7po)IYLje`ogj;>PEoW?~ZK;j(
zb}F^T&1>S#y0r+-G>tq*%u>Y0=-_KTwI;BPs|sp@@WVC<r(s$~ZaH4@foWW(_l;$5
zv^DhGm)1XQctVFKbcT8Pq*P-ns=HZG8ISp!3uF=Y8z`XO^cf6Up#OTMmr+fj36F*!
z$p3~uZ~qYjQOe?J-|ua5-Pdr94V#vGgliiX7ABH6d{ytDq~EusEtVm{koA2VgIoqy
z?tp<=MO#rjww{R|!4G&x!Dz{LEUbjACWqVJ|4k(Q9zx~_+4B0#8Q^T9OUtjc86`i`
zVJcR7QM&>}O#nDhZIou-r3%-A5q0g6H@k2XS=){%Lfpa3F#{CZX-^%EZq+_82_jX8
zp{Lf%sLXF|OrafxUQDayqrasUiWDS^f=}7B`Oxt4T$^fK8W9UlgT=~;5Ockl?FSl?
zai#q%kWJ7Zw_L*bsiM9ww|5!nWt*jAoQx|N)WUe}crS(Jxi7jNsYY~|Jp1o$6BEnN
zY6_$hI{xHnLKo>Vkl)Gc;{_a;gpX2O5F0zM5fTuzv<p111?RCADIFVlbbA9|JHg8>
z1gF^_RZ>3o-`8)x5`3*-6Z%+3O^GC(h>?qmrB`Dq^Wp55OLH1S%S)A5VG8q%t|HMe
zk!2g^UJ_+7hb!#{5^zr`d81cPhMSC1DC&Vl>vHKlVkO!Z$eSn$ROFj5xe8)s9cVkp
zX(b9c-IY_4NJx0xBg)lz(+5hs&8Cf<aKctc?`+JiyoyB|Gxu|NjG9~NMhDD_`R$zw
ztb+K8g~zntyL_}t<@>e*i=eHe^o$6o1u^{T0|1m3M|}}I7JMbX7XNg9F2v>Yv;LVE
z6Ey1^Yv1@4wM<Qv`W7I*NJFtn<vqRogV8QG`@8$>pyDotWpHakcAG4>=|(!<Nhj<D
z<euf^ZRrx^#u`{CI#mj2se*WhLQ$>{%2W#1&kSq#+O4jsO!uy^c;cx#OMFmF4M+UW
z#!DPx4*OEh6|W7<L(eD{{fMxaE$?6xYwP_lN_~3J<}9LQ_WnT}2$d9e@i(5;X}o<i
z#zM@++NuP?;5Y+SQC;>{bC-!CI{ekb@2&Jcs<kMQaUw5zWp}=gj$}$(ZGj4y9iP=O
ztIUp4W4?|njQ_+d#^IlwP)PF%3S~S&S7KwLwVrMCAz?AciQtyetMq**Jxf<*w|MM|
zdWof(M&Iv>#1w1!vY|iLAdKb2<P~Qq|Jq)$m~%Zvj=(RHr=A51aSNoie=2@rj94(X
z8C7!t3fdPnOXz+U)}Bzlyp^-I<(b6gc82v54D;E6#}$~?*lu<U@#*QV25Ok|?8tyw
zcgX6+rmqWcpiG5cu=_O$g<TxT7=w;AdgJa&U3hbTNfD#X`mKZCx;TOiAgD+7St>dN
z8&@NarDx-GpPMO*33#$F5c(OuF20D1S9-aBnHN<qPpn$UskFvx4ajlE?-by(K`iPa
z#Da_;ds<dJ+fT*hq;Jz=C~aPuK#>hXTagGJJuP72tLR^Xs(am?J4K`kZ*eSX9!KU}
zY^s@m1#$rV<J1tu0cO)e`@>)h)11b<9hs1w(VT?qvYl0wVV9wCR9_E5PBRo8IA^eX
zCVv3mdntbM4TFY=m@;@>s=kLeM5XWexw;lu%mjYr;=bHlTVUObq@z)3_Qsl9>-1C6
z2D2I@vV2IODbIwhnrWrsx6^XV5yx`<je-Z)G!NTH30J~ytX~y;#hm=kA;JBVIy_CR
zL7_+*iK`C3n1F4@4>zIa{7kkM<46pWGCHis<0dsFw{IWk!B>@fj-yQC&wU1q^lf?T
z<N3deJ5GY(-1_r*57mGoQp)6w1h>moMQlqPoyfjl`odg+Z+qIjdGFNfkEgMnkD|-9
zP|-rEk*H0b?yIy64gY_Xy=72cO}8$Z5Hv_|cXtTx?(VSg;7)LN3GVLhPH?vcL4&&l
zcY-^dmG}Mjx09T@Rp(aCV$DDF96kCOKDzr76>^zZE`UF>Jep!}K65v$7}PC}z1;5R
z=IkyV;~<#BK)69>*uLkLYqL|)w^3V93{&6pRkR%@lkUEh<}R_tk4GFarZ}}|B?uyh
z_9qKdZoOL~=LyDORimtXTFSZS+qq049NIT<408a#fEzQyYD{oA?8}6bb^l;HIju)S
z*lGdDDhdV)Peg2r<1%NCi{&!&u=?&Bj->`x%U-MW!E&pZVtx!w`SA0-2bQVESanIC
z_l3RYmzE#OYDH2$=`;XAHA};)lOJzQi)d`f<6x#K?DXK?)^fQQ!8&30R-mkv7r^G0
zdnq5{LFg2UX0S}l)dVx*G~5o(rcu~LX;Vy;n5Q+DWBY6X9+0Qa)L+&oWaDtLpmPXP
z6qJ>v`+b<~EH1V<Jd<xhIlH}Z@5|EfIx4YhTI`r#yfNCdTGmXBFcH@x^%@(tm&s@u
zHa)cwJ?ObTaQo5WDnArSr6H1zAWq;BVo#7N-&nhBhc;h;uFB{$)|ggsda5N*(tFv&
zn3ZREsC_tXnouszv@ct7h~|wrKy%!ljn(qYVFqr0i=QR=z*Cate)aJ>KHR&Xj!i5I
z&}B6+^iqL#adi!j!wBhSi~O3kw;0->49c#a28X7d9}ZgcvnBB`-(MTz45N-VXMe0j
zt%U|>WAKmy#odn2JuTqe;9|!&J>MfVCXBZ;KD3xuj^MjY)Y2!yknDOY%(|oFv7d89
z<%$lEMFZW-RC^r}s;#y;4Rw-18#gk1S248AsiR@?LA?>2*LXidnXUHvyzBtlEFS3U
z1Py1Qx!l4ATmCRmUVKv-T$-?En3a#r5h2m~zJp7{U9Y2&kZxfYb#UoCN1s?_SJgdO
zf)1cs*j;<+xnOk3E5q>-M&?Ynq=J+|E~ZXIu*^#4T%ZF`YVE*hK@k}ToDeP-59&3$
zquw_@f9T~d{0O+Z8iK4&+%GKTFa6oy0jdW9;a-^IDQe4iqY6ec1d){J)DPOu#pQNe
zuiB)o*tE!_=yA;IZ2YwPVo^rksiRDN{V?`rtepB~s~^d5lCAoC5bZ1Ah*pEM88WRf
zgl`m(1C2(hlYYlbH+hf~7P1vI%6X3ZRjMQF!y*w&JFo6uh4y^+S5>}2FcNt~;W!kI
zLJ>PduU@dybZ3rPpkn8bGeOTxd#)Cb#C(mUYDYSzq6O)9K^dOI`}f5&Vqie*<RDAu
z2zM`x(rMNPZVYYFhsAc{AQx<*`fm7?g@wz7bNH`U<Vy~Qc391(y^2c0D*ek92h0cS
z)m?%go==EccMr=CqLyunO|!j&#o!49^Ti_yY;>Mq<4{6<A9p%!V{h;saMO;80|)GP
zhL0d@t2-XBsjD!_>0urzSmN(b-T-Bd4funCh3o`gxRURwY$xCy)0vpqt*PzPcRT`Y
z@Ps)LCAh$769hr6_*OxdF1c}$BtaQdC#QLyNtHVvD(?m=?z)Hd4pvILg`VA1jg+v`
zMU&j5@9lN)KU&|=<J#bR@YdM8k7-gNBp$ZJJ5YV;zQ`Uc3THc%7qxI<%f^A);o_~B
zb1XCAxjs4n9=4t!ft2DtWO=F5B1E^L*O+C&&o~fNY@l|0&w^HhNflfhPs_yWYQ(16
z^<r3NKc+Bj2*6$14|J*zG1S69JVQS)-8=veHiA1>Z<XdIKEBWhaeV5jlj=$yyPl7t
zMCvn7mgM)kt*;cZ+tg78+->%=&$lRp31WQd1D7yVpL;^XPCaAR4i+_OI@q|-8$Gb6
zT}ifZ&Wto?D_eNRDsviyF5`DiI`PPij6I@7Z)<$IiU4#fRLZGrwSKT-$IzcF1hSr`
zR#QaLFLOSUOrt~DgFT{0&H$-qmy`~Y*q7D%`HyFs52VXpf66rMZlaiA8A|$VLr9CY
zvwtQ+*BtrU*+-j=_Q7?}Q0~c1?=<ew8mU0VMygPAEpGx3z%P9gjHQh-H78)a3&-En
zB(hjA4fYQBL$%e@W+ftY*QM2pL}RqM#i_jWVmU9e6|;g-Hp<{#rE(jB*VUSb=2Pgd
zP{0HHen-=nDGv+NiTT${+iTJ8XB@Au?yK3%!1)eQZ8Ews0Kyn`v0S>8kI%;2;Z$af
z=N5gUljW{;9*lKA9ZPx()HJ)XHJOgYsGr(a^eid{sr^%~UgCEI%v)fRx>$ZUq**}6
zp-x|m!}gGfE2wvF>r5Vwsn2f;KUH~BPJO3Rfd?~}_r+kLU%v!Us}!e)Ij4xwQva;(
zhoE8kxDNk;7E4;(rGhb&)8Y7yHLf#(YKLy+V;l*4qJ<X?TFK{+c$%z&bTRG9vWkZy
zK^D4shr{{S2(&M;&J&NrUvJ$%yWe6Dm*xd<s2*SYIDY<S*0DRO+Yr*8jAK=OLZ0{Z
zwgF%6n+bc`q_iqzyP){oL{VRuYE--EjL?*h3aT6lSA!4A4wV`wl5A_$R>Ts(euP1|
zMCx_E0bX2Vw%r;tlebg;8IMVn2mRUAnrRI%p2p#Syr0B>ogl4y*S^$nhID%yvIPGz
z8F~4=s=1^nHh4bjhw2o4*4q=;zK|}(O07<E-TVlb)Cz}N4X$>3Fuc`9jgy%LZP{<F
zDzbR=#m_$|<7ExAug01pW)z4y&W~b)s`D&XB1NC&30Cr)2Uk(2RHG1RTn_Rr*n0(3
z2(q_z*g8njS=r&bvR%K(WPxdRKE|u$cp7rGnpbH~Si$emYx+sCbc~~xNSqM5ex4;|
zkZq>+Fgt-;;(au{=5uYM*AqB-uenz>>FBwvbltj^(@AJj%rj74MpY*GG3|_rE&5)3
z<{*G9eN{lzLhSvqS}}rcilD~}uF2Ri>LAtObMQEB^ind)BU|eHY*mXM<=Za&+RvJ&
zQ{q=1vx3*4T`Tj{*I0Ib7l~DpXbfJxp7PwC#<_soSor#xh1H_@wX%ghh$X%sXq&fU
z=))JurLtsN>yn~}&Q2>-3l)?o1jkvo4Os>{U%j)tovL(gp=M1nVYi<;HATFl63sXj
zeCRJt7l9w6+wzczQfkqB2;>PSN6j(`ro}ic6}tGGCfm$f+m04GTo}BbSDTJwI%CHr
z@&E&2Xy$h=>xzC)5MO<8)1H_6L$5|`yCxg0wW!F*f)3})#piV#@Diy|?sm3q8YBhB
zwOjV}7`h6qr(XD7GEjEKH5@+4kC}k3dlIW$YRX?~u$W$Pa~ONNL&(q!S1kV?Vd-Rh
z*jbR@v`HNpj5u=qMd(MMhDkKA50<zB><25hnsge!EHe9a#yjkxIB>R?JIq;yUJO{`
zCsWcbV>{1fWY$Xhi?*>(4e0YG##&C@K3B=xU}!kyIMcx3mir-CMqB*XihFJQ8i!pE
zmCC6vO9{4I@7S|M#Mws+w>;(~%C5$OAp&Ld2?{OdeM<7JT~~{QSh@E3`(U!B8r)Wt
zRW8X}O3Y?<uFrkLrhYV-(v;$eqDyn`jOuB>o}Vi=2t3Z6PbhXg`XdEr*cP0i=;fEG
zKQq+$wuSLgE*mpKs8=#eA)V-P_}|dRiDN-pUU>I&i&s6GAkMb$NUt)WlS`Lf&qxKU
zI*FYKw7e|0?H`xse=@BDPK($X{0N6&CIJ+G#&K&O;=LSKZEhdmWF14OPB+hRes<N6
zbz6Jd%2#pg?z%okN0+%{;IR`qHbH~g{dyqg>Q+6`RH~y7l7=#ow&DanAd>*wu%520
zq^i%4gN!9B!^gAg=@(2edp=&-W}9ZWp-bk$n_!*^T6s7meoY@|IgfN_86Sp*A&3ql
zv8X3eszOa1>eUzgXBWASr24%f^Ufx_AJ5_53dcUI<$PsDPy}j17DQ;zS~7Gb3KgI9
zxGIZ?E{fpVk=_)qI`GZ%+x(20xY&4G|BaMK0qktSr|k9~S*1pbhPpKG?k>7mU5h=C
zvwY2R-p7MIlXur<8da+&;@~Gn%oWNQ+=si5JOdO3UY9%bDm4NE`tPe34>-jQy||A(
zytwj3(u^mvGS^&pRF!F$tBDJ2x;zl+blW)!aN>()a&P&bVs!B@h_AbN7!!ZoXxS8o
zcD>47?oPl`;jE)<(O7ymG&ed=YF7}qFT7SP)@!q4b?8^j;Z_8hXs36SdQ}M@oz@S`
zzK17DT8xhDg{d9IkL-i(&8=b8a*fn1|GC8>xpMVRRLwGgL^>u!&Pq?LoWDy@R@H;k
zX!6pbIC`=ZqR(vas|)V@0%wgq@#N3Pk_62yYM=XHA`Z8*^_L+2?@?H11HABOF=0bX
zEEh!7%WgF<tjlI0LG=;zDYexUH#Rv9*(C%3?q{7!*m>^jU`?-e1p{n`;7+$Ilmt3;
zfeNOF-My_BWB&4zCcuMOEQZBIY&CS|N>f&pt)3LrY>Szq=itnB{l&AlO6L&@7t^Hs
zWk2zdBrBQyM8<^KdYqlNGgV$?JQUk>D}$~2^p`VbcA(DJW&>0M{txu8iOzCfU*zz{
zGQa{S=QW~3H~M>%YfJc>TqH!}7Yj+Kkt;Q(Ew8D(@iJ7;IOF=yg!fbn0OqXL^qvol
z>)#!?m&w}`b`3{xG;sm^U!+*tg2ULbbLLr?ANnlMvy{Mo2$Iblr``J@8ykDE9`+fM
z`dw1{e|`?>Qf@)GRXP__-)9~4SFFXD@tB09Q^BvR==s)AvkGafu6ClWsjU-@OJ^xV
z#^<vOev<J-esaI1MVBJlnC4{9QcUntl&nu#Rb}g4&AxVa|G-x;*T3>{$H!4gG@(^?
z(SCOX<J!_yAPYH6MTog+9BLQ>XR*e;(p<Aa4gPY$y~gN=!G!-Jf419F1QT=7XB%xa
zt8z{2$Hs~i@?DOFd2cWJ{MYt#Tb&cmhU?E=G?3pf(0a_Folm@eo_aW%C(}R746D+V
zs;`fX8ptwqro1nceaBI$)1)R^V$D1eM36wK7)M`*aYy!Jrc{~5^fcoq@q>CdFfv^s
zaX7K`vlNkLm)*Nc-TE}=(-kbmxuFt`T4dF7O;vtY&ka2k95yqFO0BO2mDCnCD|hEA
z`I@X{3b}doO)h8nnysEKib3~g+A};mb=K)@CVb(66ml5~e1!^I<bDnGQMjB!u;}!R
zBY_0lW9i9htkz<QGh%OPRjPE`($uOoWuZP0$kADR6;tW-bSqQj{mhHY;~Inhibkzp
zC-|0Z!QQLlDVxtD*kmjW^~8RANbqF2ky$4-KW{@Wi^rVrLn9^+lRWu@z)IkEM1$04
zXzC1*VxKH%(jaf2!s9ZG$D0%o3650UthbooHOCeyR}<~rBkyG0!(Q${+JEiEIO4{*
zxR;49PC7)tH#sax+jSD*C8tib_NnGHrX;!MRD2Fsli%{8WfD#A((Ozc&*ZKQzw{rv
zpV?e6O;{M1rjF1#$(uFK7|EaW`BqpYu%pm5bcqm9{J~1~I_skx#c{0HsA^4uE(I0V
z0K6_Kzx+9Mf~>4LXRfmYcd^Y7llx|=Bs~7BuzZ)X9!A&F%=yw#ypraLwub0f5tl&m
zO~pKWK31g<=VejJz$=YX6xhIw|B1)J)eD_LEqVSmUF-`fNwGFWm~vL{&Wz(8D%pdL
z0x{Y;LE(g{2fdTmjv|sH#?0eU=razU9&;!z^9&kcj4&Nq_oRLcY;sXO1;TVFucc1s
zyovJBgsS57R{8z}V`s1irO<n_7~$vccy-akU6muXEN*XwP@{Am@kD^7eFP)(`*Ue_
zFOo4h`3(GyjuvhHpOCC%_3_HaNcY?>Cq-vU`6G8m55eq^Vgb+l^X!;HPXp?D1E?bl
zyQzEG`BBM^-;bQnmrQx^>}C&DJ;NTZ4n^5Nv;zpDarmR~J@<*ca3A!1uXDIhbGU6f
z#%OWqQ=HV4b+bL62#W5EE4TLad~!jzX8SpxEE$i@4JKco3P<x?)$n<H55Y=>q)Y30
zK2X&P44U6$EWYij5QBHWJ#lebJ6&xnk^ORWC`;UYk#HT>Tp$e909<}-rEOYlG=%cf
z?huoGIL?p0KJOKUHSeBPKiK;Dda9_ban`;iN3B^PF;vQII{qDsz)QmRgBOL!5OsM`
zr}xbyMeA{=mq)2vy4qnfpj^BFm_yR>ysKs6HKx^6&|z^{&B|)C5W@G&p)k=S{G|ji
zvb$@(Sf*Rl(iEUD&%5xCwr5u30O|bvSf4Ib-FyU_0)TT|bE?U+d|ViSa?9y+MAy^_
z%Gq7jf!{<&|9plg>xE+>bCM2T$JNHnBrmnUVKfGcBH$$df*F7!f6HA?+{C0bTyBF<
zUv6$Rcnj(Cwecaj$(2=^cI$d952my|AN$pKyFXn5cQv+?U%|+TFWC0mP-t=Dg`Sv%
zY1D~&=kWw|l@TYwoj9R4zk|EH1Ejs6IJkofV;u9_wd2hcO@gR9hNy(;u`#iYM^FPO
z=EioXq&4lw1Xc`3+6||lZX0HxD^mM?LS=sVhdj2DY11pj_6C)Dwdr3?ZkH+(i(qjR
zI3F+Mg4eN9bI~G_brWNWr`ciO^npq{bA`$n!^sQ;c>LZxdDu~RtrhB@$De;9k*F;9
z7|?046uYdur`zw1<BfjBy*^$G;QDGS&%WZQY;=`anDqp4G0koJJb^kAL9IcX#%PXw
z!vEPf42@2zP%5#=WGs!dN_ehX{`<UQzIdr#Ed2HA6sEe(iHL>a?TQly@6AxY*fdde
z%M91&+f@gK>(j;fhnq9`FVXmudv5RE_BCw|NGptCH^?YXmE`E8Hv)6LtyWuEBeA&2
zNvo}w^;K3>SUXJ@&lr=1;ifi1HBwL>shGEaYDzMVws*ZZK9L-p(94aG9DbniAxMbG
zS{QSM3yOL_X4FS$1!r=OtnoZs>FzFSjs~BE9tzQNGEJCL2%$BTdJeNqt&l+N=#v&!
zCW|kJw<?O$)y41`#mFv`1d`^;9XQHKtYJFL0(=YY`{vhEfE<GL30)|xtJ|ZiO+{?Z
z_T`j@v0_C_qdjtDK}kLhf7n;8S~t_aB<OAA*A)|~JUjX)yZf-6B7L<sHM&a{`91Ag
zdx+UeW%Y35)mCjO{@_p!?Pk$S6O~p+bL+ur8q-lYdQX7x{q;-RnPqLneB0gj^n}^w
zw&Yin6KspcJP6Pwf~r!qM>+F49w$4=r7m5a{jr*U{j?E+B(1Mmk0HfEa#>8NMH6X~
zT8&n@)5Y(UKaQ7~M;HR1B$`${%h@{GZTUf7nP?Y%CWCCH9-SW3Ce$T|T7iDo$iq~A
zz&iu1vz+^L3WCXm(&_yYWZ+VhrF_$>J&tO%Ze*ECsgykEs?4i?W%<Ka&ME8R1S%GR
zP_vAsCTkq>6rCLBB&s~^qRLEt6Qo&knTOS|VA(0gP~$pZ`5vOH{rph{;-pOVtO0Bv
z(>-HvO?vCSvc7SNAf_s@Iex%8Sa1F)TgAv}R#-YRPU|I&VqskWn1~ZQ^K73#`YW0H
zSgnZM*{DqWWO9Y@MucVxr^l(M`!u9(eetgKdU>YY?6|!JNzkQ5a<jI@lEKG@UCk&@
zQC3vl3eWk95A_IySE%3uZ@>iz$DqMgF`8t5CcDM@8?)$l;CxnB)RxsuYr9FaERiW&
zFmyG%Z8n|2cNk-8y9^z>Tx(M*luD)l$s&yIxKd;+#mG!ffZdz?iCacAocD2t|9X1l
z;i?vGl>P`$`_`%;Y@tpr$nz{SSEX5j$ojQc`ZZ6U|8cY=4fy(0zh<`a<*c(9@*1aP
zs65Sa&$?;4?d${Vh{gvET94~%b@P2Fzk`H12hY(?(5c5C&>C*8943%q&F5wc>zBZI
zeY`UVEE6jAx_aD~&Qs=zJY=m)x+fjm#g;Q&;EA&uzlDm2yU1o11@>l(MHdNKcr{v9
zwQ7dik?c=E_#86PB7+9iB1`eQGS{~t)4Jrc20mCG&1l-q&bpggYeD6IYX-Xkojv^;
ziE?YcG*kM(aq<G&Dd8{fKi3ar5)LuGF$Aw2jS4@;t}myOy#y@}i*XDL^_T8M7)T_Y
zA${<faZ`&vKPj(Zg<Q?dt5#=FU`w*uRpaP+M7+dd|2a6@25Xls%l{3u(PuEAW+B#!
zY;!Uscss1gF}P2uOR>|y=f#6l!nzCB^!6W1M`lB?!UlIJJYI65?*a4luvwDfB(@zi
zfVzSMaPbH?NgCQ6>7pullZ9w3=CmyLC%X<HmVEklX?DAJQmp;%s3fn)6-(CC2NLm=
z!N{33t=U<Fr;L|72f+{xlR)uIKCiGW_uXt3lWjAdsNzH}7!w>etIr@)nv(y6gStw0
zwRK7U#w8B9%u%YN;(=;%LV~}9s@O(3d#xk1Slj+#e=AzJpD90zPK#}N`K(=5p6|Q>
zeQv3oDj`^(%?rqa$2sWq)oM-XlE;G$5zka4`F!SkE`hf|b=OlF`gdxzijw^O=9i?g
zwDgmSbpC9Fa#<MU_zYcJzoq=_$RB<S8Ya-SquxA(NsD%|I)=`yh32{-+f@XozzH3Q
z#L;dOj4W=yuN|c=KHLiKD%<STN01|=s;O`eR9CWT$O2?-Ce9Xtx6I}}AE|s@wBV{W
zq&m5Gz(nsFZ%u}AM*t&y0|rBp1J3-Cgioa~U?pjWUazY|_%u$mp~oYuNs_yA7bAQU
zyl-p2-Zotfwh8-~9H+DppFVei%WEv#elu6_ExuH1-bQo##}Hk)*@BuZ%C=J<M=fRJ
zr#>;S(bop$SQW7chqq@4=zPI`^)zZ#Q;N#%9%S-A9Hr{5o!8(PxMgH(Jx{ackF3^M
z9pf~YM<v=}cggU$4vX8{w&nR>jWWXS7dmCR>qnpXn;C980PUpBm{ko7;!(J&$|8H_
z<hXRscJX5Uy%@y^7F-m?#unIg)v_j}QB03EBexIc%Z)uZ6fadphGFr~m<y_VoduB%
z|1#ACP6fT6iJQL8a<r<5WlS2BnMim`4fPfW?C8s?ZG3n|h0I3H(y`xbL_fD-)|V8E
zjcyWXUjb~SA&WMZVkBTe1siK`L|3IL%jD?rbaOi5*}UX>Stflw4bmufrZK1#KRS)u
z(heTlfPXf43j8#Gx@t0eeK<GyY)=C{C$IA}n`WW1C@Z-52Z^{vPsHV;jx!)cA2<=o
zVxYp<8gV(CKyR3l*LK=2U43qB5{Or$0StBNGWv8BBMUzJqpxSEk<sDuKm!fwc7h`7
z`{r7q#aP2ryJAmhcjF$f`xRsUSMTQ&cC<pLnXlna3SuXY<^>ac_cL|lX|Xu2EP3DW
zu;eSh7Of|`nudhX2G{BXm3g!pEGom#5pq0c##4^wDwP{&OJ&Q|$dA~PsM1jAh;tfV
z_6LDSWbRa36-`sYs)zaiaFRB{=TJGs*jd|XK1D~?JS~~jrikjD%0J)|0z(`L+|Y;o
z1vJ8qFo80Cpz*zyhZy=89KpTfMseL{LopB8mYCRFMsbmUkYRM+>1vO44X1yp{f-pT
zq;5|uadZS8(>)w)zz_4VF!!Y{9|ANQHEo8Oi8cj$kCw}AMIlXfou@$LLSS^0nAQ1s
zreDKI#6yKaT&(G>Mym`!t7o*TA~l(d9v5k_SLN1b^}1EB-DGhg8+c$a*Dx0xiD{G8
z%1Nn2%3?7gt2bQYtufvIt!uho9x88Lv%#uR?m5|Fwn9`i9CdO4<l*EJn2u+aLevXj
zO@SG#ay4AHG+5LJj-|677`nV-VN|qD*(D>hQ!pol7_W$@rt~K<@fVt`<dJ@Rq%e=P
z4%99f>p}R(0)dRs|2$KEzM_m<bN6BrIS4Rg1<yNPPj!+{3G9@;#Mbn492J@!nhaNZ
z?HV6fMV`YC!@=tp9ZbZVU2l#7*w<TTt<R0iDk3V*4JLpO4^QEsh8MEr{Z+cfjpTLj
z!aniHkjn0{OTPf9(N<T}5qZAXQBV96{pB0$NjdQ>*f#Z7LAu5Xe=G`Jj|d3nEViXq
z)^HV(W!2|jcexJQyc!Z!xt=4p-bq)ti;SpOMVMo+oG>dS%yVq53c5MG)9vPuM#kj~
zi$IYN%FN^vby$kPa-5E2M}mz{q*2dJv%urn9XBUFi#p&6^0PCis8>pSw4y{C0psRq
z4Mb9sSrE)kbrhFr(I9uY^2arU)|r<#vMD<p2(HqRmgph1V<z$vCHsY)|2{EB;Jx6?
zH(6ahrk;~B$Hm6J*dUiPliNx1q<$xG=ljY><&XiT#6e+DRAEo6F|(;d0k!rypvqz6
zntiG{+dEH#y*`u6IS*7Kvcy^QvU_6SUw-Jf3;+p0sa7(*CgagmX+0pxB@nKQXtmbx
zi`&chAAKx_CWQXOqcZ(|e*H@G3FgY?>zy5%8y3ZLFT<JK>`sRZin7Y^w8%ULM*DJE
z=*ok_r?9X(83<*aGU|CrkEo9Jy=N#+yvNFYknklzOK*IqSMD$O6ExK$Q9##(Hy*%)
z%^1ASma9+SKdqlt%`?C@nqwF5_%(B;=Bm)flf>MI-fV;G!~DjEfB1nF=^LpJq`!bS
zEKoq1cFP5fx?8^oPYbK=0hyQJ_vp0x${uFu)gOxHS;DJZzDw!wZ;5dRMGd<2b>`z#
zwW+}hkEOHbx6QVG66SYhP?*{E(M`4-a(Fe(`cymG`mV@L2(JQ^wMe4X5rRLgADY&d
zM>(z#p_E&0v@YayAR(D1m(P@n=DkRvpFZ9UZ+L@>?=(Q+20De|@JUZPdFr4>7V2y5
zv=3x(%_S{<6z(<2s@ou*yQT?FgBT`kK!%0@uFc{%=Fyq+gKaA1QsGC02ha4R%7e#G
zeO4p(q*~?;&dX)9<ug$-d&I*(9Vb1`TE+L+)!IVXY-ThF<WrdjXg!V>J~jw;Yd5R`
zxTm-yi{6{y?lkI864z&3`n|(6eRml#q-4}DI}EplG-A}Fz{Jn05_<p<clt;kPLINg
zwVwr7(s+H#??yo89j0};t}w;B@UM^mpT7c0WHGBPd%d=oLd>T8857`XQjd^s^>3I9
zy&O!GbD>r~*PQRrs8RYId({saM)L?w@IT^WO|y)l9QqDq6MTtQm^9vTWUE%Zd5R&L
zBSsnw{@xFJweGf;xr;i0lrOd@R#&Or5ci^akz7?Q6cl!qJ-_xn9Vt+q=O@sQ<!SlT
zSH~WMhk00r;Os^p{Nu)xdjb`ajM&zakmj3{<)h;EJ~H{pt2AKg^`gem=1jG%UMt`p
zH%sHr<NO|Df3J4Staj<+)nR!R0)r4N1|2DSC&zgaxbX<&9A`R<Q`k83OL|$qn4D}H
z%VeyXCy%JCC9ey;Qs9<D59&La8vXv*f7mwyN0cNAm!A5zc2oq(nXqlHm)h=GWhL!3
zxau*`|9@rkA5gvpLqIZt#D7sEz+N=U2z{Vr3D+#{`zD}V2WgAx+L0EwxR|>u(AZ*F
z)PTyKY(uqhmu}l3Dx0n?1N1+CXWJZG)p<evur<MNRvrc}O_d@9vYCa{s%2?wSt`nJ
z3EUlPG~Zcgr<%GjIv-;;yxWO)58Lu`SuYR&+&}l>Q=6ft^;!F#4fg#rBeh;9*!AhG
z)`>qrh;I0`Eh>S!EU&gzXDP7?_j3^252}!SRh*B?HEmI%>g5f+8WolcIYg_jUixX&
z7>)1EqkwD_H^-~OE-Snte6M%PtFL=mZb|fN26GiH4ra4usw%YxqI7wzmP;~P*}NW6
z<Rwn4y(r@3bw62iUf(qM2}ygUVVtiw+X>f{9IhL&R$i4-WKS6yXQW^{a23HaiWz^3
zCYFvxVy9&e)Ieu5ODaYjp=A_8FrL?xK*P@p0panxaJ9m}0n7i`3W07yL}A7)gQpWd
zfCzKG)+xT5CgCfY<)+gR<eEDy@9h<{h5PPxD^7c}=Q5kMb=y~mJvnU0GaZXo<72){
z$FWcg_$pmqk5s2IWlLM@#kv7ceDCfy^R<#Etn<~|(l)C`mLOtFKvw77P21UFX~^7D
zh~WqJB$Am{3)&Q{gS&G>i^xX3h~g@ONOCvpS}1(?nBbQ)Jl>NAy>)Nur3yU}-Y?O(
zMT0Nr9C!-t$5Y^Bn05Ll1>ffO>t=v+RXXLxt##i)*^oN9^pC5IwQel!Updi8q>ZSU
z48)B<WupuzB!g5GoW+J+6|D+SJIfaw;Nko6fPVt-|B5CD;?QXfK@#0l5(5jY<;tuw
z0cgi|v|f+~%i~_X{IqX*b-~9i;P->+Vv;o7CU0I|_HDPrx%zaP+R+kUjMpY|b|fua
zUZ<1D`Du9zO_E0wSz2&9jb`5mJtwl~y-N1VV&Z6Cgndl3N|TevyKJA2#j0XzHrah`
z)sP}t0$W`#H#n<q^MrV{7&dmt3yQ0Q(rqsJFens(*=*VJ>b=QMbnFh#bu};Nt>$8B
z+_ngKtS&^X_K|~(!X(QB`M+dpd<Y~{oF7R0nJC!mEXPV4HSRa(p4cO1(K4XkBEI?U
z2@xXHisEt8@rhI)VY|<0XKl7Sai8v@W-Ut{top#i(qtD|SefSE_*EGn+i@`zmlKqC
z*q2u3Y|x#HB@s7YzNwV*gsB+ZsS684la{2CK%-H~Q6iI?YRu#|>kEdL65&p-c_5*-
z_aYP50FF|Y7A31GAn6CaFZ`}aCSbGPx#~>Ul!A5u#w5ODSv9icFrPf6#PsRQQS3dI
zrOSfEhpiD#1_EfszVncfILPN+tl7bmWRaQpsM+BP-12ZQp_QBk#zy&G<Oa+6>7;Ts
zI*hp(%z9^A@C91WT5kht5xPJ0hrV$4K*DGaXcx5#w*01XmOf6d_*3D6mt~vt$xIu%
zJswCy_;o%#9DP4D;B{DB5g6eDtQ7G8Y(rLVnKeDy6?noqpOX2g7K%y4qY!Q7YBJOc
zI%s-KrVA>0J#LX-zs0WzT2rxM;Dogv7Ha_8q#vlrGox(@c`o5<u56#cxN>|>+#n6G
zhddJisgdsdi0qVXSEnSj|8>>`uzvC){m)qd|41b+j4Se}Bi&)!QxF_=n%Bz!#??Z8
zv^l%pT^B~k>lByQ%MJ#NMX!5&0_HibU{p&9@USg>Gn77Ve2m+L!h6sWe$%2qcw8sU
z9?}4S%7HI0Nb3Mb-d1F+Cdb!2gaIPJ@ds+yf3g4Xi!0Fv=(MgH>RA_epRTz!%ahgH
z^?b>A@*vK1XL$<QERhwHO_baDQ-*UoxAMtx3KzqzO1uw+(=GSD#pZpYF0w29wYgAt
zJ$Z;D{<NFC{u;X?3eK`46&aqNV;O7|toD1UP~ZNBLJ%T<N(sQ2^fDX_%a|R^4$fSh
zYPMN_$GbYTtXA?=Cd+Rda_V|`DDStvPfrnaf4N^?PN{5ZBQ;Rl>JYfYbgd>z3OY?|
z_A%(wuvyIdqG1v)ngA-n!K5FjB>_0^H;DB>K=~e|ObPa<mqSRDgZ?}b{~)Ww0snpe
zAazAFHyfGj;Csf*7_DhC{cZ9KOPLlDI~g0Qju7IA$bwZQC|1@F-5S_9qY=EP2TjH7
z9j$de({SEv<(K1P-21SpDW9f%W(tHN>taRj|D^POF%@L%^;6@ho~Gzo;!$o}1hdoQ
z9Y8xyJELLP_YLzmi~57}!UyGRBk-<3cl^FV^l^J|k32wlSnYbF`t$+p9GRnqp+?#%
z3t4ru^8L*ppx%(^CQh-#T7*~8cVQi5o7xB*m9Hh?W2d-bronvRLw{kT^r5>yDqc5O
zgy6)SEZ=OOIJu{Td>B(^fnJhu))}eT)_u><r5e!bfh|tK9Ca{h9sZRWVwiQ9L#_wq
zH*Mi3BTgv8xb*_l)eSqgE#hVKeQ$SLo2j<&%y7dYU~~7^6b5W-BRtWo3vB&}Qy9TO
z%PO<+vz2OzyiikXqLJ};&GY7M6Sx&PGuyTIyDGZ&^p@-C+>8nMhm{QB;(C+DvtutC
z1y%}6MH8})kSSr>%Z4vywU@oIG0fKuU!;7lns})&)`OHv^9?c#giDK4fi~-PcC8Gc
z)*yvW163y3uJ1^{QywAOEy!p{(czOikG?jxNxJC}z{ie3kumz|l-nU2M`i4rW&%Kx
z;eCj)lKr@IO4va+xw!~0)T^P%<Kt4~fm|FKhsOosN!nxWO{+>cPW-4xGwg3jilGJ1
zgEm=#IMX|92y&_CaJyg0nHU>@p=cTNGCgq!DB}c#GtnFjys4Fu8ec>(NPUMBVvL|4
zV@+1$@SyczURyM;By|s*Q|5sDT`K$n5krVl>~Pj>NB<d?d;33RZ?oKH)=t2e?HbVy
zR}^5p?PsFmH01^jX+@aC=_}~W;YY&#l6Ru4JHNQo`bzS|lJ$p)6IcP)29X<li{ohh
zW0iIs;lJdLdYK;mm)s3u+W0t!#sH1oZb%Txm`2=48vHkkT#Zg|cNjd7RF4P{Co+bK
z3H~?M1nIGM<e`I?;5#s#q1{S%FH3^?=Z-<h1`iAggF;!dV7u!H9QlMOK>-eQA?BTk
z6(%uxEBQ8`%HZ^oCmx35+;wj$j4yjHl5uCx@f@XAo_Z^K&Z)J<z4#ASNwof16B<)(
zEwk%uGVo{FVnIjOITpjI*ZKI8w#nc5ewQ_Jq79~A+V5KTk$DM8$6{fXB1yy~=Ii>&
z3Sj=VD0&o2c7g$Rjv6mZm!}l4l9D9kFd}fTj~MHTyVrG}a!1u`Wmb4=bJa=D6Zb4-
zK4%WhQ&y}Zb2K_oRo*odWOCaHgqt+jKH^)ZwFG^!|6LdrVYY{|NcJ2Qr2{i(1U2F$
zDr(%@c@x<w>rk=Wj*z4%V&1H~c*uaENW-23w5aW!_M0?zhpEzqydO%_F+wnvh+>xG
zuP4?m2h?*TazolE*tXT4rTr~O`S+e|OGQHCS|`08Z|>Gz6VT=HS7e})UPXeaoASVR
za1?8S?<nQ{3>@8GO}IQZ^--lWK;rkCz?p(^O2C-tUK8o8mB-e9pr07RK?Q_GXgfm;
zAd3rpUZ-QMy~D|FC?r<@!W0`^esfy<Y7jRn4=+b(bhplbW|;Fx{`A2h6)__|bpzX>
zjJkf?RHY~4K8v$8-Ff`p*M65uf=U%6efHO-B9}*{`a!@1=}^<fI@5euQ@N@8dJ5)|
z&p8CYGs|3tQ0r!;WmZRr?SciAgQu#tOdD9oXbB?&acf{*dS)ZeS0EZOMI$40Vo52s
z9F!eKNC6ju>}P^XnzA~V7PQ*`Hr=d+q-~gmD>K#m%LT}))@<Mrz9lTQ5~iMh5u{$d
zxPd#N$awb~Cx#Zll^~d%k@Hed6a-o72jWgs{kaYNLJQOXT@g@5^liMrkS_@JN@;Z7
zR3Y%Z9@y%?)}TH>(jtb|Kh=-jbd6Z$DUVO3#9f?Pqx0hqoo=N4HjPCF5R}9F&6gA*
z(?=SW5Ka9ylWP>p5`Qgsj)Eg*938I&*4y?eH}yivhUy?M+W_m40xjX`M!EH;`_z@Z
zeJv%9%s>P<#ykzWKY;Z6OokE4C@!}@%I~Zr-0&9|k{P`e`Xu1Jb=)hwOkB52l$vNS
zU}bj1!?Z<2hzpyWdKSRoL-)-+g~cFFp<g2H1x63$SH3J`G;lsu*=gu6Pf$V^jL095
zgHwlNdmq_}nl&nKZmG#~*&<n6ojMt__&C144!KiJbeD?7;C2P`hs^&|^LU09fj03A
zfm?)cehSum-`$qIM%U}P^?tL8v_g)@i9F`bTHTL00H+J-1J=Ez_-Qfe12ykczlzMG
zCDf!bg7$H};T~}-EgMO~Z=gkd<3}q(D8#tcDa_(v2SF+@WH%`_M;Axf$;2sXLWWmy
zg_sMn$kA%<5kVaklMbLl>?Kl{J?Q71DE%L6Ve|=%GxK4beP+>#GVvDe?7nDvJ@U;R
z+qZNOowyR5tGR9tgSi*9F(>^DZ*`JY>FVQJ)A7OJ`<WgmrJ`$VZb{wg`<XoWHr0Rq
z<P1Ul1}PAca@}mbqx$|5%mINLv1e-)KK|59g`tU|cL?lkSb$lk@`bg9WQh-cASVon
z1?wT7w<knfzenP|1Nwmq)BashLGNfH=p=$H;ctgd%sca$UsjfklI+F023#7}1cuUL
z0dAMH8rTMa7}5S%h5ncjzZGZq2vL!29U}qS`Y)v3JMXKRJs4tsH&CG1Ic5=h+tHyO
zvze%cFx{jy0@U&wr9yUzJ<udy_rm#rzZ1AJK$*CiU`Hoig^k6#C{R~JQp@tNw>mFi
z*=ZN+DCY!fK@D@k4i;_aiF9A#8@|ROQfP__N{;8o)>Tg9!%&utdnu&i`8PHDzhFg-
z_uaxaaZd6KpaP_ihCKbG&p4-xwQag5iY1TpUiv7kyM!DQj(`5J^X$CpiYK9&bUWRa
zjr=NuBk1s!9!$7i(H6?PKH-S@<>MsyPLw;2FNbt^DXHY^X8${fKl$bdj`Wi>#V%b5
zbTHICkRw0b<d}luNS3v~{!M(uMVFJ+)F8!K(=n*YMEt!$DlY~AE>Bs9{vuvP=Hg{o
z`otsdYGObl7y1v}`1;C&^MI;H>S{=15g$Jzn-LaZ1y1cwhI%Z0-ECC+ceur0iwRac
zniYPlu4};y`hXuX#-AcWNd1;9<=i^t);t;@%Tk|@Nxv^3P@lie$B<F%A>AeA-enAO
zTlv{Q|Jwpu#=Xtw#AMA6|2Nd$B8Es3It3RTJCox336ql!Jw-?o2|}cZ^T;4?i%qG<
z<F2&pdDL0*FnV4b4Yg(4=`i~5g1iDGjBdxWVOj6E5J>}S$tiwz;UK2}U8H|<D=#QD
zv{dA6bg}CT(%dwc%1dee^qk;?k`u_5@jMw%9lP7rR6frMwiXBV*`Xa)ia38V>X(y?
zP6*O?%}sSUfCKnW9x(CU;`J@6oz14~gGt?snphpnDNC(!(cNO#<DjujjLt!c=d1K$
zo)SrDmG@$&C0|8jGgGAEuH?ZX#QvhK6A>C^v{`nMF6;@Y0xFs*@0NcR4b6PjCe?ia
zQ77}%(YdYtbUnRZPR0v5vEnKxicRppS&e^R2uYA?kVY4H7vb}_gY~dOQ38iLho9i*
zVjIPg>CKN6A7-<7Xt(DRw$qXvVjrnG-v`Q)i#w*)IJ_?cQMguQ2DcLxmKKj4`U`vo
z+WJtxIe;MkZG3nO)f0h}yjmq;^F#(FOp1S_zUyG56FL$5S+X7DK+EugF-A{3&Jr*#
zdRlxZg~$d9P(qs#OO%~ze?buWm;4N1lm8u|OZb2(f-^hIIWH3<y&)9};N`nnJe}zL
zn%#m-@BNURWKAZ&ZamLZAFthKPjAmZutjTy49aoX5h)ZO8thPnrjQoJkv@mB%5Z%6
zli-+-(EW&`3zCZ`;Uds6&<Lj=?fENwPU%npO1)&UC&l7A-=<9$8^&eG=BqNoSLDy{
zVABIZk(@U4Olhmey(BUDKb$atNBKK}VuTAu4<cF38HWT3oU}Ipj^g&)UHmLzL)_=s
z#>6$}Z`10FtmB?!^A-P$+d%mLN^vbng;fWYE~i?pWhO(v>%pNA3|P}qLGM8)+r=QY
zDI?b@OGHj)3WSH1M6QdoB=_RN-On_-6Md1=KMXbsMkZ32sa7GmZytG|xV{#ugJzN3
zEOxz$EAW{*f^+^0aR<_b#l^e#<3M&NU*7sPsr#iG3R=&62Ba}KLE?HCQ?V`{K^Zz)
z3|Z330Yk$Mwyn~^!pdgOv*7cH?2)xV)cEL@+s+`C<8w)Y?DHnsXnM#niqIHR@>J4i
zlt{dY{|)*7K_?U3+cV9`J9>&WK8HS_Ub_?7ny&XWL;6(m9X@Fh(6v9w6_Xt3(bRDF
zM2yJ3x5}7x?jSv(DaW_F_Gn@~fAq1Rsk%Qe86z6MziwaO4*f6X^9j5z+$Ltgg*)^j
z9k1q5TIIRUeVhF?RhR`uN4m6R>k|bIU1{P3M%RBP5Lo0n+Hotpnf>Wq?I>Yviun1y
zAg%Q1n;i5%HSSw=aFxJCh{?PiqIxnN)*W#o(7`G%_md`OIQB?{Eu!_m2u}%`l0P!t
z)bdI-+}v%)0Wy2Xjei?l@mME)!2;<!IOI?_)L(S>!@aTiD=Y9>me5Jc!~}V)!fS7t
z`J67TfmnXf{v#phzawk7VJ9@hK6>JXreE4%PTWb>4FA84`%|R5E;#k4vzXcLw~=Pp
z`uG<vY7B_YQ>!VJ7@mly4(ILUvI%eUu|#qwRGz}^zh(Um*f+UfLAPW4Pe?_xU49-P
zyu|lH-r`UF%m_+)g;tyAswPKgtR!AAQV^dG?!IZ1$vO{k3<MLaGmuKFD97DV;dhW8
zWbYFPApNOB1%k;DiBlkW(AJlX_M;#(M~<IiZ&1b0k-Hm^8G8B`3~`bBkQ#pXG5>vU
zCPO4jfgqLxXD<OmX_6!F%<vhPBC&XidWvOCdZ08WK3BBaT4yzQptMmkp~T~#){BO!
zvrE1n%eN#NK+-|?Cpo3qL=tfXtQ;%;Pb1QQzT%r95U3AS6=aEj*HE7T0|De%m`!<c
zQ>qmm?p?<Zw>{sn2}@7Fk{Xm>5?lmH7WsAT31QNJFvFA@k3ZrF@h4)aKf&0o4%X<8
z<?&{cwswmU1unu)qJrUkjvP&^0B-YoKE2}(eO-%rZfcX<IC$#3zV&!VgYC4g)9sw5
zowmR3Gx0euMl@l6-CcJd_MhVt5`p7FFjwK_0faEq6Ndud8RCvwOkE35H%dI7+L{hD
z-PyAbfQmJRTNEcbRx8F{@ef1Jh$EZ180Iwif+5DSjIr<j(vbAvdGAe*kwohIqrznb
z7=c8!ovxL#zXm*>?YbNOHTkjsf0HL%1*x!Ud-qV2kFz}Dd-a@Ic6_-um!u}+Xk1yb
zFffO}wOTPBxw}B|HLUfw->_vEehfd}eS4rF5J)8hXTV~opjj8k6H1*{Ap9rpjtdqz
z2#ai}Zfm5K!p{Cd32meT=E`e46YHl3i1nrEq3!6#?Dco~5n+4ZKJu=Jn2b@DLCj1Y
z>E|;-cBzN$Omo&VHghQ>%|W`JS6w5@cR+h|Km&qaRJ;h{MW#{Q=kpzGL6W~TBUY5J
z3mr9HD<KN@X7h7+9}C`3qZ9IJ<BE26>bBq=Vc1%kar)dON#gfzU3pst38dPa$7G{_
znd7(=0q6V3hOUkz7zDc&NZ_YKhE&=W&DMz6TQTGLDo^d5YV$L%cn_*3I5RrQ4a>L?
zq0V?2Wcmvl)TF=YN%iv$V{8++z_Ic{8VdZvVFR_rc%3YRZbhd91bXDxS*r16UCh_r
zc7E$f&=R7JudlDa@|pp~2=MPN{#L_;elt|5h-0{ez*}x9arw`^gfaAnn;nWF#z0@P
zT_gj50S9)2YgZn;^beALCL)d$zu)3Lki--~y&b_e>0IZ#Us)er<IlD;Dc${iVifTM
z$YB&==Zo<d>4Y)&FdE>@4b?_*B5#IBTmsowgz86q?hAxJcoDz?0xm37fGn5t0|}7<
z5hl25k{9@g++(CakOznQ{;J#%#v?%^jWPk&k(cq-&lpjT_$=ZPyK|&VdLaK4lYh)j
zTqa1UgDLANh2KAuzQ-kyyC2qD!^|5&_Mp?2NZKzTJy-TNh8<*;Y=-uLV*XR-`^iZC
zipac$Si+f>I@hhm&dF#pFB03@KZY2Gc2E)}k)@a#l!xo!^w%v!D1iO>bwXj}8nn>`
z<q#7^pmbHSNGWPDF3jDq)*5C%(;yORrmqHh@2(kXR~=q?gg2N0z>$yR?>HtGh65y&
ztRnT4hI@~zrl@*MmsEP3BRByXNekhK1^|CI^2XMM20_~JF=(>C*O$ew1f+WqCTWN7
zzFjB&igzTt)jKbMgh{C+Nipw2jA44r)QG$4#;Duz1ZXdTu!Vo&mWk9a!=_z|f08yG
z=XR9o0;kV+2f}s?Vkwc`;vq8NiY!K!C-|-KH{<wDUg!B%?OVimPJ0^e$#DVavkvE!
zceeX97%cyGto-A2{|g8k=w{^66_o@w;|OkcA5s`}IgvcTk|TaY(Z{zf3cx6=c@u2z
zRD{`)>zvUMkq-g55!LyW_z<t~UOWE4zvd{=4eOVp%+#Th<ZL|PVxOfGCNFZnf(thl
zD&V<wynemUj^9F_;Fh}oF(%;L33?!Zqbs*s`#a{Jmgo(%E2ubqcAebLg-OfMnGdV>
z<ARd!<A5;<Ws(i}CXU`~m2lVFZ>+f>dZPV6^a%fd(jy=wAf5sWXGJiwOOOEs_Dqm|
zcR<w&TBC?@@pGXn7-L;>>||US)TK~<vR`vTS$CU({!<gb0W%lq&WMAVq>Z!j+>|o%
z8j{olJC7{Z07$IMwVCPsJ4iZi1nglb4e>vN%$v`E|6ha1bfb<=HD?x7^6|xznYY0Y
z3PXn^2E}Op1pgDJ|A`ntZE(kN-xN*0<>u7-BCT*T%V+VZba|7MX_rzbGU)l;oUM!F
zfa-Z@G)V`B#ktK_Q>QBJ8j{7+Tt1gckt`lJ5hZP==+r7HOJ6O-L8Y-ge+Xr>i8bD@
z*2^Yotfr8eTu#HaFZRa6N?#CkuI^Kri>H#TwTOpz$I_$e&pd+0_3DlpG>cw(mFMZp
z2nK{7?M_$RmTC=Qtru#toR3%J_VDtIe{HN#*Rjj2vcFDC{Hp(hfM^zjPAQ?)<p?hh
z<K)}ZeZBc=u#-vb)BVMyvDbrgqtzm7_@tqC&2^!I6w%>qeRU(Z`xSH~4*yaG2@;h3
z4`zpOV}#@&*zMGG*l#_}`pM12n~Fcz8SOH~WdGJ*8}IxOdq%(9Ag_rWFd6T^ct9z)
z*zXV@^4V>Id;R>ueKoHKOEPXJHj;EwqB(2PxEC>cf4OJTGwO=}vd|8YZoRyDq%<AJ
z{ZU+!jojLabAvXP%1yJ0Yl_MM2y1mZDV?YUv<<5<jwG{J1A+(GxqE2U_?=IeByFD_
z^}fo(g#Mr^MjnMDs571TwOujBIO9W8gGZ;~U?XDBaWi&6f`3qnZ2C>>T^295Ik4gY
zsmP0=&7aGqRb|iTd}k18FZS)<Ao+KS-bf*cqj6Njv_3EXS69lyl-XehTs|*6blP_m
zCrX<N17V3JYL#4EuRTzZ)8*Bj0_F1+_D1eccXpa}MzJUNPDk_mo>2;|h;SCuZWuZ<
zgd()d9j5G+dQHJ$Xbgg^mNVp0JZ+aZ9-%>P0|<GU*7?0Mr-ON-J{FcyGUYiO2}*g|
zsZ+-Lp@UhuL=3#rUl8!FR32-$2F+|zHq^`2bf`7IQfBgcB)vR2=t_9C-5$Sp8<!7`
zyh}=BF)tc46nM2X>#VC4TT7(UN#b(euQ*||S(2D8l8-7O$$}F}UYw4HQVi{jKgRoJ
z)?&}tc_YH}{sre@7$Wj7i{>jp{42AkZC)2*0*}oyLk#!$wD$N4i)2f!UM3^Y|D2ch
zJ|$A~s~L(a<JJ&Olt_4DMIIngN)-eK{Ha)DT9u9$VE9+NOR@T}L)G%>_17B?G)e{E
z)8-TWhsO<%{goDn-TSW`8{VE*2OdPKw`VSiX~=FZX>|a9Y<4RlW!^AFkK2>NTmJXP
zmm6LI4f?=m1b&Pu*TeX}FCQj{6xXNW=huZqXHX|}c^{@qCi}+n)b-r(j3;7sCj1|F
z)8(y;t<r*c@j+P?DDwHhev9x95-d7(1mJvDh<J~WuwF~f$3HFHTSN)ew}WIOai8W#
zTb&Nmaa}u@ESJ8zp>(|VEMKkO>P=~)T_=_pK{N8UUK8nZN0KZDcfP8HXaKFxxpe!2
zeJaz9Co6P2a;ifw24s1+eDH<$X5CFPK&^gTKvLOZnbZev>$N%n=)%Q3GzK+of_cSQ
z-$)$x*+FJg+5Cp1dGZP`!-{rwN;R~0_Cy49ds#{chn`krISfN`0+(VNl0Qo>0))~i
zHIa<WAx2jc_0LfLmiE_OPt*^(l^DQj@JJS)7u+qz+-S~OO})r;aFHxo>N2av3$n)R
z3FQ+4K6{Pq<@}<sB5?zJ(}~Q&6;68^KL%U(=A307&`}4~T`z%Iu1}nxJ~RxSD&loM
zwaL%w1vVVrlNS6XrRkwkpmdewf0AE*u%Oa1ae(Kay!0EDB?R?l>P!sfEq*nRFOl9m
zwJ;s_pJ{PWx0tI4((JP&qSLDlOrn35uEcX*ncXj>^jP~iO@EG%Iv9lq%Q-Op-eGUN
z^0LteUPLwsRl>{u@QO-rj=tV<dB}3HEb`#!kd-Fl*wIZppZJ+0tU_lQVWw48OS5|J
zOSx`k@Qv|Ibf1jfN8LS8nivJNV|W4rRLa5#F_zPh`8yv10lhuCyGhTrh8bXm+Njy7
zRr7Ha0iQ>J0nRPV{kAn@i5e*wWAW^JZvG3m#|<u>LiorBf^+zjrbWD|Loir<(0++{
z))Agv9ja(NZVSG>fZm|@sS^N3hraJDHMoHbrFPJ6HVO4n6G4|Z#!4e<6$-KRT~@x{
zz-dt$l@cpC2wt~~f;BppyvUdbJWoc?TDORjiJ}Nr%jUGAB@x-4ZS%5sw(YXnOL>@b
zsZ1X&)+?NhQVf5<Zh-|tKN6u{s4Uwp%qNSryfmVVQ}joL!Eb#=FZx?y$J9diM=(kU
zwgn4p063Wc4_R*=7FD#i4+}^r(j|?cbVzq7(k0y?F?31ifQTq5-QC^YARPk?Fm!jr
z(D~b*@4TnJf9B%4m|1J>^{n;eeLwqXJ`2s<>*^>I(tiEB_kk;zRauZ_y1C$udZC^I
zTkmp~nYGne1$*ns8nniG+qJLkBs^@Ne0o&C=hpfAqKx{IbfC(&wZzEyv<RO&1Dx^u
z)$X9(5njV-!Jm>T=lttC<20T~&%~M6x7r_NS<cJzY-klY%H$$2Nz0KUK#A=Qzv;en
z1j*6JxC^*P*!=g=LBQ_Ee(sGk9GX^Tw4%*rV$y~XN}c2w>0<@-4A1_tD;oZKy)X$t
zBLkH5C7}~n&x=~3h6LNWR`dF$&56q#AbnRyT&R*;)cZv*q9r+B|Lb5q(~w7RlkG@y
zJx56B>l^Y@9c$uu3hJcKPLiCE(euWNrkE^8=G2LMYG-`WdeDG^lSQBq;L-9bp&mzK
z{I8`T{^3{tjrdAHIg1!w=3<X~jOvQ9a+u^p?>EAbPq}jOnRyDjpSf!lH2@;zUp4mv
z0epYWzGnITuPXq6&USmwl~M(WmEAUF)h)&{P@Nxl*l8@5TD0Gox$5vBt~5QWsY-XN
zBFEb2q&B+}2h~OB*4brVO@^nYwB7IFd2Vh#S#?&JM+{j^m+UeIGqFF^+b)Q2A#-D#
z4<~ZYt<}8Kfru0As;bc+i7`99W__dd(`;Y_+UaHbw;U{{f=jPoN4<FUr+Ds)n~88d
z{<t-2%$Lh{G4WR4E5FQXkd4M-0wVgh##ilM4(p0MRWrP>Mv#UOo0)fpxk=AyM9lL#
zlWu2J@Tk^>2mFXAknUzAe;(5gI5YcAswyfLW2slF?r*g&4`z4IhRX9e%m(+`UG_Dk
zt{cp+Sl1YGQ<8Y?OQ$awU#tAs2Y7u%oc4ip!yUG3F0kGwAxR>0N&)AcjcNSN12nBN
z;by3!$C~wGVb^dJ+Xj$8T}70}O~YKGA^q#WMa7Bbr)dK0)}Hg_3FKePsXnt={4u;>
zUw!blfu?eqp1(qV6ya;Ke^$Qy-%_u5eNXJ9#fb!=6AfpdZQiP?6KwWmO+iE>@)o@=
zKcB9>D^TrYRjWUeXll%rBPt9#Njau>+8&f3!vMvHrwe^xwh7Gth1aJVwl_63no?Te
zxE^A8(ycUcFS<3>i(y@;bs9BUYt2@qUmVVp%wt=X#zA6$Dr#7>gH<bTuEbI#e7ghX
z`qHITW4VsPn47geS9>TOM#4P~+UG6F77xOlQ(sNsbzEcfw6cn%mMAzj)5Jc$wj_G7
zt%acY9F5OVK=}orbvtN)y<l$i_{SZ>#w*ZoXCPozk)JO&Y>l}*T6$9^XKZ0Bx{wCW
z5&U{hMZVCU>}tD=>q`RReBqDp^1yBFRd_U_d_jI#j?9^TS(2f1Rp%ScqgEyFF<9>V
zcCp!<&UU^gT!ZBSdg`?&Q@eimZC15Fy^lhz!U4x>wvBWofs55jkk3*n!)1SZ&&!LG
zTQDbh$=m8;Z>q*>iZMyht?U-TtGrd2aQJYpmI(lFD_(hbeScBo(+n3F8wk($eYmya
zQBhqC18z;xtO%IaD}G`DjET#jo`)D)t{1?lQJA^hTxX*vt~*5u#*}K_4u>^@Y@4uA
zV;qurO+L0v<rexRzEm$ziA`z>JJjW65Q*&MJmveWF=aSj0uCqw+X_wnvbENCW+!0K
z(VH(fsPn_5n4v3U$|lK6Hi|=|il$Y{XtL4)xo~e*nGNyWvb8MfTg|O26-H{TZij9Q
zxxf?6AI*d?Jnr|)CC-=Y5i>8R@$Nw<t5U}*kN3zIiZRTi#E7Z23xlykyZiPcwV*&U
zEYioY+cCw=>C*W^hBSiRI^APTeuxr}jh>Qy>xIrI-;z*hzS8)NBh7_fOdvW@-qE5L
z^ffm({{NL%fiN8=0{a~18RpE}_Hcr+jLd0$H?DQ0o{XuW0o?&9J~HUAr^tOoByYaR
zPuY{wRCLOJlH49mt35<sHoDvq{Vm`^Db@(z456>Kg?f^l_RQD#j#T}0N@2GibZ1F8
zb?h_H+}r+@#^32;KJ7fEt~nm9BvR<RVrMhoW6~Es-v0Dp@A+^6`^7srxVJklMX4@&
z?>6<?^L!@~peZc1dO?TS+Dq<k=d8;=ybp0ag;`I2vwM9`Pv9_fe)Lm^a5p5A4Npl)
zDa8396-)J!4B^K3arl=d<7m%5*r%rm!d<^_Mf<=dwE9gufVQ*{re42uOBeniviQ7u
zRJbfdAS}sJRK$IKSDqmucPK_)LG6JqyhA4J^XkuHO+%kF-@8M)R-_#D@vXw}7CRWa
z_+#NTuUxWWDx`=_(!L#z0ytH&5@2$UrrdlmfHn*hxj7eZO?(#bB->Ip*O&h49pR`(
zxwb@aS;{sfRTKTfKI<1AI1e`Y16eA(U!;S-DNI6KQMl<U^JCyk!Nzaif{0xf^ryA9
z+v1=>yt7ZviQN*v-wKhpNb#VVzCe687?WLW=kvRX-XDv>3CALhM8CH+DgQZV^B?2c
z+IrDXi)`(k8q6liXI5@kUKC!xieP2-n#i^W?ZK`#vjvb?diA)X>6gP96)d6h(a*{a
zhd<6#eCa0Z;b7Iv5JT|1-OYEY(RShXdd^_`B9w$%R_feQ%@BwTChFKH)36cmMW#!a
zF}QXzx5;}r?C2$ITihTfPg&uMcXT=WYKVx${$eUp3G8Bo*=>}UwU0xof>^PP+QFBH
z%Tjb|XkI1fYavge>TkDhRISEul|?aOU<O&+ZR|TA*%Co7o{9pW;g@O%gtxvAE-8=e
z?^VOy=j-j$aUqJ0?D-ZCD}j&c-g{sAJhd{KAHw&^A@ix%%k$;)W?q9{8{>Dvu~J|D
zY2Nz_p65LZ1Z%LNKW2?CBfA%Ux)8vqeck12=z3x6{NX|Rhr~SR9=#{L*yd)?Q=h#~
zph8ojb@7YnMV)^9P=Q&{QPUavUf<Y2dw9-lbRSfi+pPZM6p8Z<cR)dl=Wr|?*5c{d
z(>Qv7ecrki`P|7LC=cLlWmQ`jGrZr|XflNHw3L;c-GiU*C>Na|!XUSLo7s=Y?N4nw
zm}ZgTZ;LfbN%UQ30p4cEvsOaKL?EoqPxn=+7SVzFBcaL*lD&<42JvJt5PBcTq-pgX
zWUMP@`-^r=qBMPGKR9{VifANN5<HqFKVM&>iKz3XD0?Y-kH<z)-P$mRy5sBEChvkm
zUpU2^a71xLe^a{OWjLT$N@TxG@U%M-q0_dydcVvp*&WD`dz)Q6afZ4cR<Q5L1?!p#
zhq?|=h5Vn}l(F;HhLl_K#?m<vzft-W&;QCZ>cshkVwUQ6A)3u{OPaf*>w1JeuB5MU
z%#!=1h)%(DI)_RG0@B6E_fxWn0XaXIE&Ie=ESNY5U`xX{a*r4pyQSBEfIphF-Tl5i
zn9FM`rpV?VB7*9&34d&!bkkJ4ndG2M_0qS+$MVo?{#tp{;@WC752D5Vh~|8}B>ai_
zZX;UhXLg@~_o)O+utK^>s>sv5Q`6ZXQ>_?i7{5@znWy#csQHb{>I*beGeolCahVq&
z$y<+&`14sowuva@YKwH8phy}cFzFr3!&Og^W$$-(N%p;o`N!5_W<MlsX<S5N>aI}a
zA2xgG+kbdN5ji1;9aQ@`*ugm1Lu9N3|KZn&CE@kwyAG78WT)9}pZK@d*bbri3`1ub
zHOq@(l#30%xjGI$wq0)Hb*|yy=XYlTnuS{u3I!QDxc<m7XR$@lIE>C7@IIGCUbe3L
zFBF6K@v8pc0?*4YdV=FstW6X$#8GL8-m+;orIZy*SK>N<JVa@8gSgIBcqZ;YI^gSF
z%wbGPO62ZzJPHrybMHCU+ocoXv8t5hh%9BjCKtvJtz%HGdKJs8tDHVx>w|ZwIj%0G
zpKm;+qgJg*bKy<IlESN=UjG=+<Yrf-QH(&qrkpfcG*Y9=@~y>b9%bHwu{hOnxLG_-
z)i+l4{yZXNo~H<dfCtJ@%dc93A5p5hSj+aZEU4Bsu+?a~MxCzpvnZ@HS#(B%sOpKi
z?2L<6@v!+aH(kp2!}e$(>vpBxriw6)zqV$PM#$MFQ-%bu?e`~YGzaIzNZ;#K)TW2a
z4xNvZX%~@158L$B%it${^Q+@!LzXWp^n0ElfR{!`2$PLv%=O(_`Y;sFmfsT+kd;^K
zyPg0v^r8fMe8@!8DNWCETTNyFd=k~bmjo6AQSZ21545;1w_o86CiAj6>bATW-d0NH
zQHZbB?GER?S=-@LY<4^5fvvCg^DiCvA&ZAsCG$Jw>6E?uD$ZH0jD<R!p`0!08U3s*
znP}9o8WeVT_j~+FF;yUu<@{ha`fKqOiek%($Q^mwb&~y55y4c6c638Ti#AeyHQ=0_
zWYt0VgTv-cr=`LR3i5B@7w5YBDk611`X`?U7hc(zj8wt*d@OIjQ<4wd3*1^;K^u9^
zRAC;4RRrheOS`IcwnN*)iE=))llg0VoPna0fO}P#muCN7G{`2*hU2EX<j3s+Ly<_e
zYXRhYn00)#YVzvVsW0p1=l#N|g884a1(0><UTaEE_o85Zub%G6Eq{~!m8)4b%L4a9
z%eOhTH@TmceaIfQZLC**YgafZ7patD5-=&t`WW&_3SPsV=0O5ZTQva^7OuXvOP;`S
zi}A61AZ|D7E|PE5(6%TKfN%iix+5_zbj+9G6N!GG7yPxh-rIdl!ybxC&JVciM?o+|
zi(xSgJn}UCX}1s2j@}`yW#~}n70qyaJsd~#S`U2t=LN~d;T@OPAjEPD=HU|E?6JsL
z1j`Au%Wl#E4>BfTcwRr9Q}@z^Q{;jdypZ*Mh5{yUqtZ;T8(pU+uscKBEew5zmJ8x=
zSLwZW%736<9cCIz`p7utJ?za;wtYF~Uja4c+-=^1dUYJyaJPT>ToSq*uy>?LUJvN9
zjTwT6--qaze4;YRTvay2d>8KBbT=M<KF6(RF;dlo^KCYlal(%VKQx&&o5SGklUwcU
zv+tG5W5l(ezU!}%CNbHyuo)jTFjqgAO=@yEF1Xe4?wrod-577Mckk`d4oFY$u+c<N
zUcAl)4X56QtSjK7=L(fp7c?afMDtRrmuUzZBRvb3o^NwZO=}x~NnQwCSnhT;PH#D+
z$Yw}{5bEfy=F?4D-*=)?h7N!xa%5_ZIuV<$*FqQ~k|?}xHshg0hTb?|`m!LT_AMWX
z^zj?R7bwB^AHa9>%abI7)zk-k0X^>t?SXDRGG;?@xpZmn-+sIz{@5~|6ba;g^Lcjn
z6j8A#a(-Zt?p?sNVyb8fLj>H8<h?ErDnZ2x{d?orr|T|D4UX&1lm;G~1SCT44$}Mv
zid)$cA`>^>%rcU1DeiF6+z0m;-Ihz;C~MP5IYFTe;lwuw$*Yv;v7(Q!8GFxnp;Gp}
z*rR@j+Gr1V%TEC5ZZ-r%546(Z@2Lznfhmoy1KDevrnO)uM5Pn38luM}mawD%IIVp$
z$oJ^=_I0FNkni=h!8G&yx}sI4d$`zoD!BBQ#BdKhZ(K>#yNt%Mbo(G&(D_iRwX7xZ
zY-`9qZ3_~3!$~{gmVV!NDjbjA2XFjy+493Iz1S|hs|OJp!XE+6<7V2)eiEj1Upr~P
zaEc*1*xoT|p3GhjQ){;rd;WA@`ljYOV%N2Y41O)u#Duyer7-WDN5(I1M!7V5(`PT5
zAqqnFrLQRdo)5chTO%|cZL#s=9!cU#lk~m_=VpRZptf^^{8)pLQBN^EP<FWV`n8^a
zhech_jcBzhwebGEBxFCR|Cx)BCPJL8HiLzf)$h%8<7d8-a_{RZwtpZ!jfd69OJSnY
z)Tq29a<VCM=}YrB+-Av2t96jgq;|eqXHzXjv63}N(CXa`#%Gg(EnWV8q_(f+4Chx_
zzeG*XF7qi5!yamohhOUN=6OAS!H>A<zqj*Uu~cQQ=3Gg}U1DI?V_vViM{d(?-`}Yu
zT7u%Ju3iRCmakz6!{e6TOkiX4clpB**Z&x9dFgv_F5Zlxujb)L*nTqmLafJ&uA8D*
zWVr946Qy5di8JL|@KYfF5AQF*sqzQOB7^!&$Jb{KW>6Bi$G`-^unF0B+=k0J>yc0(
z{@6o%&q*_gfKG2aS2GS4GUF7gwVjW1@AMR`3?2H4PgL$do$(>S0s4EJIZ61W1L=H1
zjxF$~ncmNywx`Fdb~S*1!@@WFLgHc{Mn`xZOo;I*?Yo+tM;9r@YvY)Ay6E4o7TwZy
z1aDwy2tzufyA95}6X!tuU@<;g_Uc%2@Ed+Tj?x+if);+YNyo*R^Blm%wg9;v3O!!0
z>zuzL8fsvcT62sse7ygV*;9tOfpe&~&v|wSU}gxeqxgu<%_~cmF9N9laFnHsW|P#n
ze1E(=2N#3}(}&0D)Ez4#p)8S7$2odD>REWmxING$M*9e*%jwb0FFU}pag2%6i}k8m
zg-`xi@6{6ElkhJe1MNi@z8;GfNCepd|Gw)o-VAdSm8@U5$|<!LB6KS_M%Ta9BYzWD
z`5}3<bw}XBhlVNVb0Is@`Rhm!u@QDv5&B1VMB~J6<o}G$rFjtviea>A!HpXcvo#J!
z__fnJgxs~|MLHeVAoB5U!<Qb#w>|KDDfs}o7%0Ic$}`Ei8oOLTXbGB!lWv;|SI{@L
zjyOt|3pE<Cs-hdm^W-zT$;e3`0)lqhDpu<h_IH&ohEA#^oC<4n{Mx=idH$$A)7EM_
z3J;pfIt#MsiMn}Xt2c4@wP|N94zx6ZT&>=2J_h2JsL@#Loh(rxvKlMFNOi7s#MPWA
zJ$A8TRG`plbD$_SXcJQ^TrFUysl*;=?{G2(=iT2Uu^67Arm9fmDM=h=07cRG;(|Q)
zxcoNQ(uZa6tzoyCXq^R2U7@q2D8gfqzC5+sZpu){v;dmHf6;uY=+mvDX=`a%t}Lh1
z#`oHhAj0-19*>er@N=4%n3S)AGpDl}35cxE|2(!{W+i<w5iZX!C81-E2x3t+QH`+(
zGF9qe)N-tep09CSms}HV{xhyi_9jm0*Pj%=s1Ud14GWI6qdsbK(X*J&bnv5gh+Q%-
zs>EmO)E1^~KvT*Zf*-g~=d8$(`yxNrFMJItd%E2(hZ(<CQujV;+;-O0JLZPzWe+)g
zA_)PtdR|PpXzlZadnB13FSYIhS@8+$+K0<|d!3zide*WafE2IyQAy+`$F92~<f6Z=
znqDhcmOwuS`O^`q62azAzOwW{4qro`!&+EPMV;NEfPNgrNd#S8NFfFfJqV9Zak6ik
zAr5d)rp7^Jhka0`WpB8`T0tXVA1vGLn-6*R#<Nj#b8;+xkP-KjCKCV3uQ>B`kzCtN
zGxWJ2P)K<HLFtWIWtfl8^=eQUwYxJ_$MG(BI3*{Lh_y@bQKL*Jnf8%OzMax5ac-{0
z#r&ad<RV4bNpk8=@Zn;cd9KZcM!i5S%=4U5nxIGxCii;b=ISY%h_YQl3fJl8#CdkA
zejn1A7!6iYeWR(0^Nz~x$b(y5b-X^s-D>9>zp4v<%@ofPB=@DdmGUu@J$La2g!Yly
zpw`*nfFr{ZetGK@LsJXo)X$_I+T*s&)t@QKiZ)jyDQ?4K{wybgpX0d)hpSw46NAf*
z{Hu1q@mt{q$-Fr_yF#YnNK;~daN=Q6S&nvR2+_Gn`m9Ru1y-_{`zP`?QP_;HGt@r>
z8SNCq6GRC*$9n$!`6Sy?BL6#uV~!g>(=F>)K0~jcYcVGaUci3u63_FLs-l;%<<J>E
ze3H`HRNFT>#r&?zTc*$eow72>fh}<`E>(aMfveWf8+A8%Ybb8$+vSQ8?+e3J+5e9G
zy&lQS75enZJ%eB89weE@GZ3lh&Dq^vvF!PzdVV0zyK^Di@Fsj~Z|O<0T45=41)j;4
z2=NfEXoP}uJD;w?aaS0VZpJaSm`Sf5`fhs}TFA;{zjkLxIlo=du2mcidh&?lDb@W#
zxSmY5bmMq}e!SCj<Uzuyl&x*Q3azlzt-j}_Y{{F}pEVURd~aSg7kKzy-*=Hp-~Kwu
z@N_0AjE@YT6&JraT<a6F^(i7Ux^DV}zfZGxT9D|hJwK(Lb&Rkv&h|?J$8a^SLGvl8
zv?GhR;qT=>8Gq^jxwB?s00+9GfQXbFHwxGYGl4E%e-9xBK&lv}$35%ck5Wh#h_!3l
zrF9y7EoGXjjEJa2IZ|j)+~P&2#Jgd^NmDt~4SnyyNJkeQWn4MPda4)$WCvi%Mt7Ho
zPziU&?W<*Qx!bc%hUgT&mm&EHXLAO2xbbG}!FWzas{>j}VKBdSQQy&zuR}sw{1KJd
zH~%IMANrNQ{4nb6W6~_5MD3dBkEBspB74{OEiv*3(0Nd()u}g>SfD6^=CR?G)B*AC
z&2~C(_7y+_mLnH*&B?Z!6Qm<tboWl^nbI`*;u)Y_BV}M73BG3c?I_6h%~=smo358t
zU@)(=*zMxCQjp!=r$0%2KNA{GQ7j^u_sBD7bGg!{Ujyo)CQ!dOB+%DL431|M4@-9Y
zoCPzj4!u~(&`CeHt+jkvKF}j$X}5=(<8glC^u#I3#8iAiQL4IyciK4V)u8~YxizSr
zU7lwXwkpdVNLOYSa-1YYSKf_fwVREcbKT8OUM}`^_ByVm+bNh!`Hknabu89mH&=@F
zsJe~Ouu7p*=TN6($WG;ZI%hN9#^xY;bJs;9{v%0rZ8w->7d*>p**?Ys<W?9E2rW1&
zrMo{8Kbc*}4D`L}h6e>C26tTJ7$)%MN%mn<e2&xu-ZiFl!M3#({hVw=y?tTYenLkA
z2o`-Cw+yp9!ie(ELxM9n2$$;PR(k-dCc*vL!$@CwvT<VVf_--Tczc5rg;KoDB(r<B
z!Ch9KPQsd#cXYRPY#`l|?fuY|AtuDtd(^Ojf3Sm<+j4w71%<=%{wH?jFnzn`3vWD0
zFsXY{Ucz({Y=$qF5<TBes6&Y_m{q89<#JHfje-4Kfu&6w(r02_+IQ6Od36nRxhj4)
zVzU21<btU!GMrq5%<0O>06Z$)(ov;fC7D1__o;C<c4W}w$LsD_EuRwj*{x@*a?_{>
zwt*;B$!*a^^OG{+FFR!%<Gv{rvK04QP_5Mz^&l~Ey6>&!AFqiZN?(hV=?GWj*HYzx
zPPLbmJIH?%r#)2JP-Ceo<_$Uxrx{;(8}81T1$95<3=ih~!%-{@gQV~|PLiYh8Q@+O
z17YXfcV7C6U^7YKg|;`hjs~zY{V>%(#;dvU20#hW5y0hgs*=AV;p&fzsC^ZV^qg<+
zdKn@t7Tx=lLEZf=(wj_TXx~J?+?R~_?9$D-Z#ms5MRtH%(e>RQ2c3H37Yfz0LVmm-
zh)Z2@AAJ_y->!t2TlB1XAfVbjrgQl=FvJn(^UvAN*^2^F1#xZRxnLh}<J#A$6#L>;
z588`(FX9gk%e$OB&^_gv6e7lQFPE=xF$&B}cZ>K80gd*Ad^aw};+P_%RS{|jWNrqh
zF4&*?a7<gQIqAYNDK9-Xu8;{~Z8s|}`n1(gsGZE!5$|tN5e?8xjWa{p-v)lpBUd0%
zYSq)HM@QWK=trblKW`S5x@s5{rlxYZ^G*S_$e%#rd8+_FreyQ^#MUYreB{2vKbYL^
zSLO-{w>=*Rr-jV@(Ye@f(l5$!&EVQwC5;C%PxAy&RoPM~ZfVG<W+6@kf?0Q%wI<(D
zMZdCZ3u}CGjca3TyNz!1V-JX+#VcQRF2{AALuL1CY^eA{e{(AFZc#EthQWiq%6?5O
zPgRykuL)_bu}hSj8D|vEqLC0U1teA2gskYo5V84L5-|^IOLTr@Nu4BxXc`~I&)=)-
z_l3Ni-l6!ier}muQNT+jQ=INB2n@A4UKrXe7X;-y=^zUfrz-clZ(tyHMY{;>0BP`F
zPhHWqwo3z0hDwJH9DCPa62fU8E#Df{k0`7y3V2x2(;aPBnp_^^kumhCe&9d#v~3a0
zk2fV~=L;TYa3ozIq)Y3vd>ih^>AECT^2dsTv)OrP?2Qwhax=Ui{hfnGYkrur@ig?x
zP_8=`t=e<<qj2d2eUGu$Lx?VPo$Zx+<R~x6?3PJs$hY(ta_U^sP_<D4@JN1Tx5%{W
zfk!o7zNt?{ecWs{({-Z(ql=XJx_3*u96{0adobD>#Mt^%%{Yo^)v_f{rJZf}ZbJ5y
zb?(vH@V<|Lqw$@>o|F(xECbQKa#65O(1>)4(0AxInbfc@vRXH7weZ%Y+wWNp-TE;~
zKm$RZQ^k2m#?hiAdXr6jCuT(Ur+<z~SrPHfIGWR3F){A`9cS7f^ap`=ghNXnH_Go8
zkn<$@V+DPg>3?bs;j`*=c{j~h@wFsc@~@Pxg{l29?n9p<{RIp871t1M@xX4AdcO(R
zNI&*;M$?Aza30)@H#un*zV8fm!z^CRC^VQ%1S1?zKcPJIQSbC}4_P)gRj#?r9M~1D
zRo32`yLm5E_3C!Uj1|U9-mFUns7AZzSAAm$v;lAO4iYgD<0D4!%Uf63r5M4?v&%{z
z8%+8zg;}EbPY^FoY151?b2f(psLLYFeKz1fo|)BF$E~hwHLD8zda-)JC%lcuK{Gc}
z7FtVbN34C<t?V{_YlNn;z!Rd~>nty5*aa^+Jc$_(qVS||`FWFq%&$nM-fv8C%xZOr
zrF0V-mmpqmx0prH+4vsueyLk^?<T^Hx~!@g%i;fe0VwC=aNCWik?>d-XGgh{kE9`?
zOt2Fu2%AjsLFaB0jTSflFt41h{0_#gmoryFMTVb1T#B)xAh|IgdxmLEd<c)#poG?N
z6k!p%M|lnrO%G-R5`nI9q--)G`rK(eZWY<gm8-zid8F}zUjBWWcBR9)Hg$=7ekrKV
z5Z%5b6>C%g@!DNlLdiqWG5{%%r-}~YlEEvF9q2<~<H7D9etvnlWa)bREh)`KZIPL5
zrd_Ih{|uJSxf5#k!KylA2+8^r9*mepJKuS0gfe9=o=(ZA@@t)N+4N&@TsV*yJ*+8q
z(nz1}xb0ae{6^jLt&1vtRoY*3DrN|Qcd3~0!afrQTEEY-^5J^4o@k;;RaUL;#kl*P
zr$9!ITZtXPQjf!;eWM*HU98ZMpq1mExbsc>R3(qUd;}E#QrlI_h0(-3e(KEqkd@~2
zBYfI2RI)8z%H)uvZnnw{0Oap`6zi*HbMXyieW@`u`=k1LF~_*)n=wLseX#NP0h8JZ
zVJoSUAajEDoylQ-YD6X9>?{?Vw4W%9k2>_J*ZT@b-)Voj@C&@INo?8rC_`JdHyP?$
zn*IXyO3Dz*KJ(EyqC~`D#6UDYRNB5y*m>-xk52^5*XzL=O~~La+ny{^MLA75bCxUF
z>-6{q^-C1Qam^Qm(HZK6J|4<I<u5i(^Ls#o<fobTag=1lhYowhW#8)`I?t}^xvZzP
zO5#cB4T|(8U1haKDeKV;r)#0^=7Sc6YO`a7k>i5`sU{!j-nls5voHHf&)3;FFj{TR
zOJo9>XH&}7o0KG!#E%ywJo!bntXV}ZkstSt5*sI3Js(h)#LcIi--NqY<hk3FUVNw2
zb?cRP)bdW}eKXVOQmq4_>xgn|TWE50aaZ4h8^0S&=$q#)=Zz>uoeq3VomQ-lgB10(
zpqnhW`M6wp(EZUg@aQ3UX|P|UUaZl?9Ac9#6*1j6T^L!JN2CK|sh(^6O64DDHCcdD
zTbIObowU7pYsu0FWlt<kHmxrJa|v1tiWZXdmy%L`s^-kA(Sg}kUqVND2<Ze#H)iox
zuDlJ9oTLN3cwR{uNL8oI-Ap7Txu5sHfphwc_LU?z%)k<^7u-eTOGM*h=*ics8=M{B
zIF?FPX7DyojcY6eaYLU8b+{DEzM~HKH-j>*r07(yY@#qS^)QDQ+qmezaVgR&h%Lpj
zkwB;`CN%QLaxl)t(R+V16qO~?a+66wDSd^3rw8vuBAuvmJ9U)Lv4((cj8bWB5%&1G
zIpUO(&LHFZWo@-)tpLV3e6+PZ9DDfu#f70zoh12mpKUS>w;ZDzsvk_qR_KbvY$V9y
zJQ5rT^mVN^plR)|s-;*@IP|b3qbb#{oZ)-rQ4>DDbuqf8`%{_FyQ`V<%r1Pk+MF&;
zU<Lpxw0fCv;ghjk0CidAU%3ACefI4Ni=iKhZI{SWw)DykS}mrqk7q327N<sT!%Tpr
zyo+JU8eqY!MHeKswX?S|$@s)ttj%?D+~+GLV}Wi&a>sEVM+^MAnx$km=v2|3=gpno
zY)>ZB$Bb5<Wi$lgeCxY$vBj`yGudKF!&jZ5qImASR*Gg*w5%=RiOUR2kayNK>I}6<
z4DEe<rO{eV-UNL|rznDwFC#oT&u-YKBXp;$dQaJF$vTMDMURa~ESHZC{|K6S%1m$4
z48|0%Sqzfmo+@r63I`6x$>0S?&ITbrAR(lqQ8f+Ijj<;UY^-BvU-1D59qfRPtuQOM
zkpNU@hDY3m95X3h^rggVAPU`TG>aqejVq{a3ssY`eKs~$6_6JRi4bO`EI{VBPTNSx
z-+5gKT9oYl@`tAUutynf)q2F?Ln}?<TxqdRsUJOvd#TQnJnVi?pR+h2X(B;b3KQ-j
zR0n#833w36m6&Ap+VCvex_9v`FON>9TNZPz$T{x{?QI1vXbrYQ@s5R>%wcsuZ?AiE
zJQt~g6!x>qNAQ(D5Dpq4SPUnygCaz)SCANWd2SUJ+aE93RGCfgfDS{+mt>o!IY9L!
zT2)OYnpOb-nDjQ$qjR<2pM`vhV~v0rf?I8yfkfFPb(Z595M%LTW{aFjBKPJY35`tr
zLelI)KMn#~F%~Zzx!9+E9BK{|P<Sxa6@du)=s@pp;J=9Ow*S;Al3BsZN*`+G*7%~t
z0QgLy<B;6BVg1lSIYW0ajUAJEv6)aVlI&Z~iHV*MnWZvJOTye0k138z?ly~+bizCv
zK22wNcZITHJBYPk)-TxsaWCck_&c;Jd2-#6&AhW^?X1|lp$Mwgz&h=$pG+E<l3qGP
zr_N7W<NDKQz3fj3b!X)(SZdt+C`-|y@aev&+#x(E(V+aPp>L$OYK7WC4Wh1vznWOD
zgR+OyIKWt(cW7DQe_`7alb(SQ(uBF);XbiVk@Q)1#$Bpl0!K4u3b4hKh)$hFxb}C6
zgxa`8?s82*ud^njUIn=&@0&vXZIQ`b$W)$!5Gwk%!aKq^K5pCj#5uPY@{!fk1H3Jo
zi}x8#{3Jz0w02XO%^pcK{qB`(Ug_?MC>XwJ!G!2#r)Kz!7TVAdw|#+h5((UhQf0T2
zK8)h{B#FIAdn*cEEDhG10G?9q!s;`6cKDW8`lM=Xi5XD#R}wC77#O~_oz&c_yvWcw
zL;?MIW^dZrMH0p757bH{_+AF%DMhDnnqz9a8FDdu_+Mv=2TiPW281ztUe20}XGyw$
zaW~2D0Yvz>-jJCcCy(UPku?IKB61Cs{09U9^hR!~V8A|!&d{yPu&Qz?j{O2_`<BSV
zxvEntTez6hoC4>95+Q=<-2o?O@}0$}jl{$~zd-S=5tnLr0#*y+^)4O^lIIde*_cZY
zQHOl$r8==~_h)kC112fF6ds`-L<&oXXHT=uSSR$sJbvqJ*q+C&^wO371>WC&l4B!S
z8Y6l21*1t<Dyui?mlQbT2=;s{$e^ZI_e7UHCP%#4N^MAP9Rj+GAAY@B-sZP+bpyFw
z@)E5q$$P*@cvHK-4xfKb5^yPMemWaslZ$11A)cKY(4^JTM+r{Ju^aVR!b2u}JPm2i
zZntTy>n2Coeq{Wz72C3(*>=PxdLA!SnWp}m=uu=|f4BZ)tkp!;gYA(^>Zftz+?>SS
z@w{zP!>K{m>$McQh^v~%<{T&rbDC&hsqEb-7Oi$8f4nwJ4fH|yZEy8irS3}mrxHwv
zXyTY^A%L)-$T*!6(LN`lcY8hbxxP`<cb(97e%H6YFWqbG?KzPRmNVsBpP;bFZOPEs
z;8-OmC40SQJy(0B1an2O3~YDlNTmJuL@0@cHQ1V{Uj8jz6z0HWoe6@Uw4GBLhW~Sa
zwBxCm6Ub*Civu+KAe%8nH5`ANH}4Oj>?)nF%=w#r#Rm)vehbYWV`#Um5NX#rq{VO+
z%cTK*p|*JM%xBE`zwTtTaM!p+1)}t}bIPZYo&3O<v+z4uqPv}yf!EtDnU<Hf=GHxu
zT6<Mb@xd3k8V}~1b(bg}OBP_I?Kf+`b<aa2YDru^1(Di4ny21CTs;~$il)EnlvW@3
zoDW@7Lx^w=Kh#Y>&vow4oxVsbd)SCD1Pvx_hUEOzet?H^?hgcpl{@b@I4nWz1X#=#
zLsF<KS76!`*L&ZojBKl;%)ic?uP;ZjDz#d)8>KmF2=DTru#8tV(SORd;?D8y9$I8e
zAk}zafrB63tmImy>n{tJ;aOJaGG}z39W|_DCh|FE9h&7JL=$s@`Uhi~Hi2Yp)WhA?
zJcSB?PJb^<3~weP<+h3mr4XK5bi+NIuaD<<+L~F>1-g+*1X!r%$wxK<06w#LeOdsD
z77e%~a|h@|tTFQ=-WJ-8mP!>Lw~k+6&|4bGdD*7=T+U`eGKGs%6f`p@pQ%>p0+!PT
zy9}rTsx-UWl1i(s1C_mTOg#IAhDxEEjcB`-6QG_E12hM_*7Mz+$eotMvdXA(SnaB^
zo##mu@o6g2tsmX8h318|x&o<)9N?0w<jE6{TNl=&?4Gxnl(hEuhLi6*MYQ?c&6%@k
zRb*gbJ_1>-I#}kCIFhHp(;P8~g7-mar$V7_1KFAHVFI~*K>Om!oKt`CR+7K`1D<xP
zcjm*@M=y9BZ}&ZfuegkKW#Y|#lgjDo`mc1B)NY&e3iHiQ3MAY2yTR51(%hVsn^8CI
zGZf9S@=EJ+$+b?~{PPX2u{&(!6Hapb?Q%Nt<s!s1E^Ib7Uda2@&lc0cQ<!Y}ZSHNU
zj4OI@d&k`~f<rcLz(T*SxSf-;?QV*-quSr{YMxb>bSY>>p|DPMX(K;sH$MILTVqZS
z<QWg<J{4}PTPLqeyAoypyp_0GV;#p9_W&xZ`bx{^dQr<OeLC@?{pVbpSu{i_`&O<=
zsjrp6O(Y7t2AW}T+<81_iR}E-mIZ!1KD*7$1+L%X78j{cXjC6U_8yhyPvA1jQ_5TB
zdXXd{OA04LdrR>1gevTjAdaQ(?{ykSQN#7Oq0WHkc%RIP?M^%(7iz%e8MJbK>Y4s1
z+Zk%^As4ly9RQDRi?)y6kk8lm_dn`ymPw^KJ_Qs<ZvilgMbP-ub=#FJxG_(GE?+un
zN%P?$KGehZ_l<%FrJ#+tSJLhfSkQaNFBELvkZL{bbp&;^A6SeKVUm!GsS(E1(QNGV
znp1#0tXiL9QRn8Cc&*~&S}R2GY=?Zi+=FI{?`yKjseFXDJ`Fx=Twh(<;yq_~b%BVr
zUO#Hr>ny$hFe>H*-4)`$U~3vS(4D{9K5m!)N{RWFU`*zYJK<tCKRx*JEmR?Z#vk!5
z3D<;?HY80r+Mu6ow#lU!2o{D>9J$=HVQ4X$bZPBdN!B*y`F=!$IRVzwC6&U}20j<+
zy9<rgJ~zucK}A;f)sr@kc|i&Q!0h1OOn^*<{Puj;#PAVz1C&aTSQ|22CYHVkm{uG2
z1fMN9L1wcegwB3i*uP)oS^=Q`s-!2X_O?<!H})hJl<$rFFlIa;yZ4T_3j##?25`5O
zB{?J;#or2Wt7k4}8v|LGHVo)3oO{|(ngiFyqA3iXY)k@qyM~O%uB`w~)Pd!Y?RSkk
zbFm>K?Joj0G4Xy5L~;fZ+kx|ZZp<f<RVA_Z*TH=Hm(bhes8NR7aZ<LyQY;ZOFtJ+4
zb8k{EODjV~WbUyGSj+6!?$ikWps1F1-aUSghO75i%f=6832iBd`!dIJA2>tXr}=-i
zGdqqV!$sgjr&~`iBsQzI4iDI7lek(H&o|q5*#>CaL?@mqm~Yq3Z;pn3*_Fei%!URC
zU<Sw0$HfE3^Q%db6z_+2;gd_LHt;a0uH^(8m4mE58rFnqa(feX3%TMA|63$Pv>Y8V
zIyGNwcf&+spCZAC;45l@jkB<L&-vwhuLv(_6XJSDn%gWJOZx+#{<-L7`)CqvdZ>r`
zk8_`~l7oh&WZ{uriM*>0i|WD6CIY!=J-Hy8$BX%hJdvw}rLVub^-@ABw|GwiycTKN
zA!)0a$Ihd>V+mlMl3GJO+7{l4e7b-w89D83ihR%XZEfP((^!`1kuu1o$}(%!$yIvP
z^FNpei!_FzU|mT}@2*#x0<TX<%%__BU)?d-LRb>+0?6LCUd?>N8>5h!!z;3el~s9O
z?7a<ip4kBK2@-T*Sei14pNt*!OjFM>(EDtFPUg(ALm|j?4-u(TF)Mw+XJY@_y1bS4
zZ}IK0b+a`O<>ILQ$+z*i?JmljqV*<9j#9*1OQ+6;fkraaA*fZrgL~y~zSSiP_!W=L
zF~>-Lr<BWt$65=*+U<o85)y#hivqOo!X>Vd9b(UtLTjyUZGAdsCPs~A#@|Y{0>_5h
z{!=fhy)^Jm?;lGjO(=c1&(Dc?=1dOA;X|(<c)Jr-p{L^%W+WR)qT61?j|<rd0cMH@
z54@|XIFN?!snqpb-~RLa6p*Jw*uhnTyQb^qmP~}R&ZGXso%K!p$ntD)+%4-^R`lW1
z*<$?V^6vH14?SAVW#MMG!F{&#-=g3LW#^a3=1{{wp`^m{AaC~3d+!uy%%Jnf#G72`
zWW@3-zTNh^)nQ2AfSeD7wCm3&BE03wr`}s71P6yF5j<0`**L61<Jpqm#Di&^o5%6z
zTtgrQSr;7X4^&+NTntZUao^-X>A@$i{Wgk6@%)IjR`2B7nvEqU47d_ik&e~~`fazQ
z#-|E{6B}DG6Df3>>+BWl*<ND_@%KNJUM90$$ea#E)GOx85^+Soj_2xDINM}<J7522
z?nP#+VS<u+o5e2`l{!5${swS_4SPF*s3Y}}n#2O!l40NA4_oB&t3Hpp;isr}u{Yys
zh7b|gke!O`7@ky4MKGyhg%Qqdqfas5Z$RlRunP_X@`SA(VM8kt@J-2pwAH%UQay-<
zrS*Z~ss?xZEk3(2r%OWms6-v0Ufv>5rVle5;4^8+7ipH;1--QLllOAoeGe&FAmO&!
z7_H57`f2%oVAi>zVA>6ur%+eMfQ*vL(b-~s%#vy@PlP*DZ5}~h<auJW(qW&mZz*Wu
z1(;Bbjd%5H8Fk5{5}IXt{LNN{n7NZncAa)jI{~aJ8MZa115s+R7?%{giEM)RLc7b`
z1dOR5Uk|6xJoY;ArZ4@Bgq%mKqVj_5>^RL~iky(GGX43*M*0ATbPA6NKoPMze{PbO
z;CJ1~xW9w^_`P2)&K^N7>^TS)|L6fqZLav9=rnxOGo+ykL89FuILO<Si(@tSl0IIl
zWHEZiI%93t=bew4u&av0H56_umx^=p*O*~+ax8Cwu>8+~Ry%P^S=vsmK&3DF22?cL
zD33TL7WB0HydyA#pgte<qGf(m6_1{+?^9CJiz3~7Udz9yiCbKYHis!>)E{bnB1jFo
zp4c-B*@*2_%G<wy?i<gpqWgLZTQ?Zc<@#wiOecCG6RvDCRG>@Y^uI*l4ARCn<P7MK
zVvogQS0OU44D~=MBdJ8hq40ZIyI6Hl9`czfW$tT@msL-H#52S%)MG{K`k>lD4cutD
zdT)y@qZ{a}pmV!hUDJ{E=R?jG{jM4&=eX}=AZa2!iryu3&eYrIOD~fR$d-M%#|<=y
zJdDJjAw0(xd*(lkhbFWO-dcRZcl+Arna_bpXk4kP_5+Ic77hFTi)$GN-vh+7(C+~?
zUT<rtA%0?N=wu=dhG+Nn)GN07o&!Dc^)VQrn`>dg`s7$Txk3I5Qkh0s^^$QJ&Uk2i
zUZ2`m@tiD@3HXWBu#k;Fy^^G@wFWbePvslGXNYK2eqvkb-#t2p5ys2c3ST8zj$?=L
zyKR#DzeRkm5cPWp;hPzPHs4R+o8MzQ+zgeX?m^OdWl6D2w31dS9%Vi^nqQZX^v@oP
zkxUO|5xF0E4ru;4>^Yigv|l2R^w05f><|fvlph_2j-QdX7~{W3O!ZT&C@(g6xLxO^
zwU}N~oY5<?L1s{^NjR7}D^G0jXuY?lwST<1W7Gb{exMWa^3Ct64&YT;o5}WVm5Fg|
zhG}0xqtt(=d;ZQSued*Qr0w{}7*w9&BQs$Pbt1JPFkJ`FC<yHF-1`SU*2EFRnFB}D
z^MrHJuk*Uwta2k(v5`!j(SeK|Z#Odsl`;Ku5buTFaj&8wYQOu<S!_pk>mz<2OkrF(
zwl6dA6NkzIw}OG@Q7YIKYvzdT(=-2mJSr_h58FY!|J%tq<f<<n%!gPb1b|roA>04@
zkXEEhMj8HiFpq0oxpBfrfsA<0@p7gg=PCPBGpdan=06^V>i^rmXNcp}zZH-`;}b$c
zbbrP44_W>DLkxs&y6&g_(?{<kGtlax`=LwB&p;A^^vxRhyTz5?;pm6IN9$kHQzbpG
za_o>#X82Qn^oB4b4@+`Vl<7mXAEp1#r}4~1q&h)Vod5XxGk*)b{w)Mf+cNC-t{^Su
zIT0%5o0jJah&*0@p8Cg*5av?@{%cKQTrWR~0pqj$DL(_o@5Pdx6ygNNS0FzXWvub)
zaNVZ*uZO@cMa02<58XmPW%BvilXZcFHx5x4dus%jypKRTq^MZr|9j;A{nVeT#pJEp
zUTvd!6;29;ZGZX5yw!*(^PEGEYE3lnji^ySGH1(31Hym)1UT83_&;S7YE#Q|S1I}A
zMpPq-{7(oSe2==C<17pG`>|es?c`F6%leOL{!Tbfg+1|GzAaC(TPnc(6)Lbn+UPe3
z;;gSRM`X$Wb5DWY?b4&l@k<oJGt}&EF)K8vBl>xrUiq8y{l>T1N6t>9f3N=^f0>4h
z^&@bWQW)xT=0`Tjoxk{W57GF?GIs8;PyhVSI^Lk?Fc{^zZSGt5U*dnF$`JeWBp-P1
z_lD@z&hUQ=7g$IXp0ra3b0fMF*}p{oZ{a`lKcN53iokj6W7?OOKe|efeJU#Vk4@{Y
zOf1CvpG`|Z&ynk39!`(k`{%L#FF{aY*N8PC4_7%oMF0@af%OPc94-=KoPIR_gL_W=
z7^#0ePDYUg?SCCVU@iB^6D&q~M5A_w*4)yBq<7`=DSX;Zt_sq4eDJ5A73su?vxnw%
zQ?&nBm#V(R%m3Ltsui?9e80{;VdeGw6Z^)*?&KIzmJp671tjw(3`&v7C;U4!)1P90
zg1&$B?f8ujk`{DS{_i#T@8C$oC_tFHeBcom&sdKDGk|)F<HJwdIzskhiBpFv1*|c#
zIV=A6=Xr9qjcEU~G0x~4zsdMH4w5bT&bgcrO(H~>xQ!yJzI6X+Y8~K8*gAg?_hsga
zuxo!5fYDWKjfj)@Prfvr!7{L7ic-G$$FQKuXb1i0*zW<)CDoE#qeSZmDlo|k&F8wW
z!p-g6mu%_l2f(@AL%#NqZ6$t(-B0iDOc}LXYN6qCI7OumGetC2e5jF{tyt~$Ml|Yv
zB>k~V$pv4AJxhw#EGNSB|FGRiy((NR!W*s+kTP=s6JG_C`L;h_`eG4t0f%xvWbXge
z^Ci9(2cy??vQAKZ$85xRO`ie`L^RVxu^*T3hl=v&Oli-Q?9lP)(PQfO!Ns6k)S;9X
z&(wWER|nTaFAdbuV0;E@py&~+R;r`Us8&EF=yntXplJqyoQ2tH*U3|uAt=zC>$PhS
zf#w{KYBs<>8MW;L{yDTEldjcXY0@Vfk+!(#G|P&^VbPCVO^!n#`OJR>dFKmZ3jsgQ
zPagk@T^#WaK=F7I!&|h;-lHd{=ZB7O7NMCk`M)~+5=Vfmm@(8?&&fNx&<Nr)WBj4!
z>Ghi*W;IihDOjTFRk=IV*tRwPUR>k(2ms-KrzCWmQ)9pU;cOdntOncmdAt`jJz4Pw
zY3-Ja^mUujaf);0r@A)1qU7lkx&4L=_dx{N&euf;6EMv>@h*FZv|LZ1^PIe9Rr~;>
zF&+Djj-t=a@!#qijSBk+ksa5*jVk$#MP$PbR_d!wVjo2F?w(f{@+sRTs}dN%pq@S$
zyry|u+UBY6j$7buFV58DPftfhpAZwdEQ4E4d-pkv#M<%UpvwV=m*e**-B+%B_VV&}
zH^4nZi!-|n^1u7vONotw_(FJ?n$IGRpf{0#t5~NtNj{N7{UtuV1tq7*V~%{fh<@A6
zmi256gGMkR3oRg|NL~9@1wa<&@CEP_5-w@8a&PDj6_Z8O0%yuMGo8ks5TYSuqBQ%(
zmR8hgH6cB$@2^O{b~?mn82nR3{gy%e!Z`~j#L69dYiEbIiueT%$6p;4qCo6Kdy6^n
z)`BopbIgN7z#<N)i&r;oOY>^wIXNzRY#(NcziOQa*t;75iJG^Y-7sdq{MbSXK-4Z{
zj_5Uh4dk`X%kSp?lpX!>bPrcbJc`^R{qc8lF3m*r|5XUs;fTKwsvSzmU1T*@n)c`V
z1BnbQAnANKbU@IR&8*+VW%LN7pauZW-<w!Q^(uJTCctf&tFvWdYkALS<SVSz;_f*9
zB}HfJ&o8{ZzByXXPmXB^%k84G9O^}Cv3pa+^YEegCzfPh`?wYl_~6r{TjXS^t`bnL
zU=n@2&Mq-*AKfMq824@U+@7r(ierfeC?pC15qLeiZ+3hic(HBQk-)|HYP8GVWSkSE
z)LQa&-%yb{)1iZ`LcS|B5bwOv<uAo-XTjc|M_;B|GK?e(o~d4_($i!!Q?WGp;KuK9
zW|~30)_NJoqPub29zW|nr&<A!N%N$PlyBe=<SNqvTx*IGYG2f;EZ+yXtsuFm>%vS~
zJdnXlygh&q5xesmws}uvd_WrK8KWveQI2ObWCiH(7<zu$|6^^?KKc9EcZ3>%?4s|K
zc8=4eB|dg@6LY60Dk>h^9JgK>RCRLDMWD1wM)(ft*8oJ=eMFRDu8v&cvANoPqX2zH
z4<AwIoeb~$(>_;BuGX}tybmn^-*cv0NqDOJeByR?0a#wk_&{-Ivq7up;Ps33cR*Nj
z_6cTpcG8WNY<d1wK-*@l_!#Q5@o=^56v6*1P1v&^0G?X8>FUkvt*t5cHy^iHBTB}m
zGGFQ=iMD!PaR~2j-I9q;jS`zr#$fe%n^s%ew@$-qWmR&NvqN%~jzxIHw!vorJT{V7
zKBDbv$qV)rGg+cN)OrcLYIvivk21b907a%RoHxNpot3v;K=f{*n#1*=?}+{Bd!6c&
z>D=y0C(_w!kcsI=e<TA6U$e7^wDZq06sgwv)Ahd13z%Uvz|{d@dr~d=(*M+}|1y@?
z1c<+sgA3djR7G=826=iOnWAYG>&jK*`|rts*U1CLuA~Ou>0f&RvjDnW&=Q(g>mz*D
z-;Im6PRcg*Y#Qjf!pghoEEi>zXkfT4+q|9THF7dar0CHMa5V=u2GXye57m556Y?-!
z>FE60OKjdB!q)N@NKq9iRmj6Fj!S(ZS48@`9JvYsrm7-|QE#>K%((ct?GD^6=W4WN
z<E1Yen~$2LXcZIi-)rR&L3@a5jsW~RI2bm)q$h4bLe0D6UJVR|UI<6;ZBR(ALnzNY
zJlA=7s8(V01`o|^>^X0r>}ppal7V=D86aaOnF@K%?a|cvx}o93<-{`y#JK-)`2g1{
zlKD565n<Q+I%$LnqePU!6x*YP$qU7=gC5JOqV!|B0uDL>3XNaip)|*_>f`cdFDoAs
z<cYsZ)zs5VQ3`*2K$WcqjT}}2nt2e&l2DiG=rfTE)Wp^=Q?LM}s=95ierTz#TYA-_
zAc-?HGitHfEt;vkMbGo{!0rbLYuzlD#ibg=0Hj#E57?;ojkdevSf;WT`82ObZNU^3
zPRp@_PE?BX_7X@NN(x{p>=DH&2W;z?8Ar-38Jmg<S*<dXQG9>2a7~hT?W*#9CnvYN
zRfFU&M9m?UXv2#)&-bQs#(OYEQof2WI{A2B)poyKMDl$>t}~a}eF2L6VL7pxiE6t@
z>2<F>PGQw#8PS|6{zF^5J&S`%Ot99*qjc8;fDT^$1_+V!)B<Ww9e)0gJ+@S3+h9nh
z(=w3%?|4pF&e4iRI^(L->RHQ@-K}tU=_4THf%*SajTnd|P?_7oNSY;YYlv%knSOJR
z{anp#8yEQwF$qr--+-g=R*cgU(kA-Wt^biFqS)!~h1G0TtS$`DY@GUK)<4{vU<(y*
zc-rh1n`Fx7a|UuxD=VLxZk(6z<bhL`;H8K$@-kIqTP~iJyxsRfk{7bj*xp0Lpfj1z
zBAX}#eroL+QLR#ANQbZYhPgp@g(*C*mDAx?hP88+r%ak<uJDVUaVQ-GnTW>$;`4YD
zFS0$_zS3n1(VwhPzVDA@>w_fMQ!PDD@gC&2eVntlZ`jnWZ5ySFxN6h60*Zw_+x>}9
zI;GjOO@&2R1B`Eb!O3T|US>k^Vi;0(!++5Nv|l0rf9$<wSd`oQ1*`}NBB6+g2qF^F
z-7TUth;(;%3PYm;qJkhf3<%QQLx-SrcPj$J(9$Kmdpv;Wf6lqyukVNV_eHrTp4rcS
zcHH;6*IK*IW1Am>Yts(4@d|`oe)XQq()BU@&N#q$%7~gZo9>VxuCpF>)Y2V4L^Ha+
zz7{0vV`qPrLHN?OLy`=YrH<!bKX=7^PdI*7Ae<V^e7i3sUKGCMiMe-mog}EdTeOed
zR6dCHAtcVl>j-;1L^e>zGL(Jt2oi-X1c6c*D8!hv>u~>?O&L}NWsqH^h8<=n9I6QO
z>DmCu{9LqN8DVqP<ztznt$u3~j`>Tw1@JeJ^|}}G6Lp4P91|PII~OB3OgrpDy>=(z
zu7+N_zEaDq?l)QF7lPB8OKDXd#{tXV0@ARbINZ8>8BcmyV=!4l=7jOy%95vfsPImZ
z_Q*F+_wQfo8<kGjh34aPb+5P#3$oO1g~ReYTl3enIt?%AdH$?`w4Ce<?3MO^eu*<#
zE&mW<*N;JliBE3r@zW&?Of|mrM~J-s1h>kX{drO;Rh7XXq&&8)n~86GQi3ndvkDC}
z7g`+uJ$FQ9AQYPD*PFL7JZ7-8(LaI+c{O5jy&e274Qj*X&7AM28rTstw>f1(B`&-p
z7h2S2A0;B0yedY;`M~k#m$#Gg9Hz2P{l~#19BJ(~@JU<z^c#{t@n?B2Hja#_?}h_2
zDu@257kGruWwZ0&`ZjO($l6M@t<~{tR&L9bzXm{;`*gULdw+$R<x~xWeU=`uNs+V9
z&(pShrNIv^j!Q3I^BPWy)`HvqBzNpz>X44^QvJ2{Lgk6ebREo@*US;hyiQ=gSr&`Q
z6)|4Dk}mE$`j5nqAc)5A!zEMtYX)M)291HODJLFL$R8%E1+r_YS{~?~Km`$J&$gLP
zGQW@}F86^^qi@9}#gD=aFI#lDe@dn+ZFdNJ;Zkml`?9*BVmEda-(0+#T~8}tRNQW4
zwkkE$t3OS>>a$U;=e{+0u9XKy$ChTLw8gK@MW_U>WeCY<b7Bt3GWLt|RK$$^Ip91`
zSDD$4*jt8jasm~^>rzcJ`x|qU_wRafsya(_h(h~u<hlnl#OfKtt~LMTMkv+34P4~#
z+Og&o<S@8p@-UQb9BLh7_oEZW(Tw*D%1P(o=tKMD@iwDV-dZ&+v8ZEL;-Xhbx|tHN
z@u2#8wNQq6-66{g>CO=v1C^uQ5pm{a)BlmM$5QwOeF;cp4b)r*f{{3}Dz{*wA5NV1
z*ADd<at|w6#T=nKg5$MbP~|-BFQ!rsrBCc6YAl$L@RNaO3b8~F?yhS%H)J*f?&*sC
zSEnw%VZPbJ;vXkYvvq49Hbjo6y?ZHx8B{F=$b>yx=&o&5?UZcVPSwZkmh<S;dSa|G
zTm0YD?;<*-E=9So#tSxcMLC4)24<(T$h{F$a_+)s3gNW7c*uCG`I5HRHlW*ztcIDZ
z4vc^$!is&HMzJ@qiHdWO{w^(K#PhbI$3bj5HS=nDP1G~>%>~vLP?;47^qgW)$ubTw
z@mOyPE~jz|+c)m|2D2QLj{wzEwr@I|1gNvlcH=!#T_DSa&A<XAaI!t4qHC$lbAP%B
zsAY=z&2kp1Z9yHtaWlp2^WjzO73HRq{#xb9hxtj3Ph6I!Puw+ttsPx^I`u6`TS&yk
zf8_XntT%$nePc<t*hjijj{PRM^ng5PLU78F?k#jnw?AF>Bh<L3u)Lgie=(aS)d``s
zLPqYrU_i(l7io;<elqUHx@iSs)KT)GN~;1{_=_p&Kx&`kBiEBR9F~~zS9KMJK+rVb
zD^eDNy%+%%@96yC7yMy<C`-5I73oNSQsUS+W3Cpkf0>jK+-MO84mh-{wGsBOeEAQN
z`>WIPTvkIL_BT%?2bqq4?drjCOP@?EkNRDDms$BB_WyuR;I@KT{bto#--KP>-oe7z
zlDy4(<<{N?>Fab8mzSOPqhH@0j-a>5k1Zap`4G2W!WWD&94z4(3P=!4gs2)0_*WXH
z7Ekv4#H5X#orJ88+Yz=?wZ>py&Z}Lt94BS&$>rCb?iI?(wjdXL-ZQy-*EIGy<-Rg_
z(jD5mT-KOm{`@YB=@&T?7dLMfDAMD3jAt5MS>d!E!P?*I?@oCVnxK^Qa3)N;>egqU
zU8{kG8RNAap^+}ZO-4fJH+yxI;auO){{b0nU3oMMH?X_FXrOd*p*LTDOz@>)Wu>XA
zZ3r<-6d*Ts=040%_mDXOr_Hj;?SAtK&d#@`C;X~lA2@?dIX=Fa=<uVtQfR=oA~izW
z;Y;LkbYUZ|R!R8~`SAA`LYjAA>~i2M=cu;|Zu(Ne2XuXRC!F#j6STZB522M9XjFK2
zM%MByHA>8{^<wY+f@9*|ZW&bL*%XP-JN#k&k@Ne#5?EgKMi$lZu&6pXBW(6F4rvRJ
z)iMO)QFpoQyu|(hI;uXZ_a%;P-LH34b1qz6Vgb5gBpkJosWK-~Kmbf9MgH&DqZREM
z57jeLnE;Il8m^+1v<5;iYV=;En0Uqt)uE9WbZIs1)eM$+qzR<}3|kFL5}!TVWFc5F
zNE=^)Pt$>*H{|H}&@MUq(M@nz?czY@{jsW!(Gs_T6}O2f<9F;Z9P4i%FZNZb-G#br
zY1u&y5=2^tr#<hxZ_Y<r#p&G#rYNq=_Z3`ylx{L<&aRqC%zzA_P)u-TpUdXJd9-?8
z&tfX4Lfdt8E?MmE<WQ~_!(GqyTDic!;tnl)kiD6%R=t}a<1?8k$EL~PR0JT6E%D9r
zh2)S~powPBHkp@y5H993=6ZWX&trGhYHfYUXJzZH1udDO`_C`L(4<PZl&tJSA&^qn
z>wFNyS?C!MSS{BPJ}}SG87)r4=3O*1?~2#!(6(;xe4VIbO&}LwQ~Bi!EX<<6_P;k$
zN_PFU1~xCg&9@dGmkyQ?DVcIL;wwd!Zn2vbz(g*B)UHwt6Zej>$Hhr&d@K8<aG5w>
z4bQ2QV@NEnGdSwJ3sGMDNoWXlCNjhf=@Q3nW2@KYj_~UFCdLkYEX{b@rw;KKXn_w*
zSf$I-Xta+65O3eZ7kplq@yx>-Sox%BdmvK*lS2b|UA)6?@>*~j1>Q~4b>7|W#ofYd
zPJ%UV)&jBo<}8&T#*mxcA`yNx<@0qG_Bk@qhjX1gPsZJ+O44I%kKo{NA8EL)ju)Ek
zvHQrAzX6oLLx$@Zl#Y^V+#h%{QvHghBAoqqdcOXUi{l-|tsS)r6kB7@4YaNFH-OVt
zNsYS>2V+Vesc{bIzsGE=+<mST$7M&)pQt81zWFO5!rOGa$>(_V1JyVn+on9}Uflo-
zA1z-r(PihCEvmU%WBbF-K^es`LHEy^C6<%YQH&bl_Pix&JSK!VSw<j}pM_6*momKI
z-|gSUz?qkUat{aNxplr-0b~`fh6)5)S^rq6)!fhKyODu+R}B~4DfL}Sp2Y2NLV4D9
zsSqwLX?T;>%SAFK2U`|WT~7bF(F=Z(#61pH!Poq-AY)CU8Z!YF6rH59GJ+ADsdHc&
zE)p_U)fxrXhoDn2B~U*BhwW0&wM7;a)~t;bKI68X2(#{?O1-jZ43ZZ$w*0oTYRn!(
zBcn<8E+u;Cd&JkbWM&>cI+k|5nVX&LRzr-?p+UNC{w3=w%XGZPfuwX{t(L@%dJNbh
z@(^G^9g58>!tnMSGMjYNIiW;)46*u1HV$-`8td^gE)_V7PGt$5o(6#X7;oPgOv<Y)
zdO(VTEQvsTEL&A&_=SDV05AZ~%M*`ML?2!5DEaabHx9`vzZP%ek!z11WkGh|ONLoL
zYQ`z>&LMV%{_DZ-RNyLMWEfa6Ce5m!y8c`t>B^(!FxktG5bT?4Pt*Jg<e<lL*9l~>
z^5pQI%jdJX$&by8IW0CpXs*1tvw5XLpGNo&{NcZP_zgkOo^Nb2E-81@RX&D9!*AAo
zDXpdn9MctTB{`TA;8w%bqj+Bz8HX~>mVvA6*e3y(tn<70>#wk6(MNgVu@i(=-(-1C
zlA?|e<7ku2#tP~;BP|3aE*BTQ%olB8%MZhOm5;%7TFm>iHTx-JKT@feH34QTsQgRg
z!HK@cYd>}tCNYlu$7!iRkjoMrBBQ?V05ny8Yov}H472`zOAY@3t-<wLqR_61AbnVK
zlbxdZKmlpwG=!^H^OZXB5*qpQ%R$zD8A}E?Gx)H>F_gaF`oEhI3Yj2)p*>|o`Z#kl
zDZD*LD*oIx!RrebixmeR1pL=~g=pv<lw}s~tp5zHKy&;Q(XnD)CO;<mulIt8DD-a@
z%C!gl6S_qG@C!=Odd3@EZU5|h)O(L|Ky!j@G|8|2>DBYUC~jOtGfm2Pih2IZpFu!j
z2*#C!b^nI`zn&?$ZW5@f;z+z@|F8G1F%S?IDt!IZR57d@4-`c==Gs}n{t_`!u^FTG
zX10y!KA+<(Rx+o?pJ<x$sjsgFRT+Kvi_^}dyK;k0N%;y9y`k<)tT(9-zDS*Q4h27|
zd1h6c1AjH)5lmE8_RS3z-G>06we<*_b4)w|XT>^hEnMUCUXE${LdKKN3$VZ!P0h_!
z?vj7H>QOZ4pao02gqy!R!7qcbCn+*jIx^}ywRA<dH#l9D&w0W3j<B<&e0-2oXvE*L
zG*QrmpM0k;_yrO5Bt?VB^nFas#10AmUH%7`@s^8)+9-FD{`S26IB^JAWjO8;pMA~#
z#sjUgYQS5VP+eJg-&kZfO^#;reME5p`|P1$iG!zPF!Dh8?3IVaJ(0}q(fJR6Pcobs
zQ2Nt>nucWyN9p?6S41fm!C;cmiP)?^?VdbQkO!q2evx*?N|T?jgAC*K?zf%I0@PEN
zd<*(v!2CV&=`}v9iUybf$hVL|pPbKA5^QH*rK1hTHI>f?5|$lk*Y`=`0ld?%_!IOP
z#Eca)0#MQvD51F3Z$4rx`qR@C1d0@9^`Ai1_w@5c?|r*8(ijZ*h1!dr4rbDy&o$9o
zSHSRUe4HeGI=%?1ee+&r5*{tZoA6(az&-swYSNT|Ps(Id%$)|o6z%9>nWYEdAbfWi
z`}oI?AH_M$6SvO4K;ek$7kRA>s?&an6h#$zoRRE1vAfHot(GxQ2M+`p&sq|Ony~Cc
z(b;DeA582I^eSUrTCQ6y27CoRdYF?h+yB%s9(@9RXm0J2K=S(s{j8Y@2np{~OMfU*
zD72eSus-HgzWb*s6R7#F6{2|ebWHQ6iUK!D>x9NYytdv?Pvm10ub$pMY9gmR26Mx*
zq$T8ZY8c#8EHVH5=;SgU>kSUZ+b^WgJNg<8SPnkl{?IJ;yQ3-kFq};~Kw)51>KLhW
z6Peq&dA^8f+y@`Eny6qnz2O%R6f+dBX>If*UAm|1XZZJ@X9S-#x%(GY0F>8auy4>S
zw+t<;Cy5)Va%BBk?Fi^lYg{U|JKkTnl`Q&E)DJEE{u4Yt@1vM_-fP4d3LW?V^qKKX
z&}TV{h=j989gZ5QHhlBUIKiP0|Fl31H6*UTwmy9&Y#R+MCdHAw-plGkYOije-~B&V
zJist$feD0qWt5lyc)x2ec<t=j`ihRA7BOhrN6OP{+SB_@R2W%DmGjQC2t*Pg{v=ip
ziNW$)Nk)A($|5iv=cKV>K=4BuvDUHjX9Y`^0#Avvl)L-&@5dy{P25Ao?h+Cj+C8uE
zaQn{%KWl)`@xt+3{%kyd7M2!gFtK9gyKw(}{?9M`@0(x-{eRO#elfCjMwrvUZ}IUC
zUKgYQPRea9S)kDxcseEj3|0^&G@xB0Vuf-d38id4c36z(=_G~$>@JSjkE8j8+u1I5
zwh{uc?=}Xdsif&}-sD5PC_dbLF^(EMRFH_8`hWjN6r{tl_#C*deB;0_*m!lKqRUos
zP2L>=OE48He1En@{24C<LA-uJSTXL9m#HS|sf3J9Q-JwAfq-59SHO1>U7n7BO`Kg}
zKPA28V*?v*8HkiRtNnNp&#7t<-HCcvh?(yUg#zw69vvv|sSm$zJ6}l7+9+y_{pb;X
z@s{QF^e3_XjUDc8@6w08`hM_7>w08<pnJx>fHGc?6+X1ig4Ssi&$AmgNd^bEGJ&in
z3e<xt5bPXJlOJJMY_w%BGr6sdQBQmA=0Z?GcKdAWvlLLb0mUVCWbY5D-8<O-(TktJ
zn!4Z0-@rzzK3^@+{Hw@p)Ha$KU*^+e;>%tq;8zaNJ3u0i*I$(r#N^X0v}>wSpJO>_
z$?mx)sTKMX=VSvr1~?kY)2rqfcTak5GHuL+1ek!DjF<=q$-k!~h}n`2CFg-ufEh3r
z6u5217;7NAe5nzb&6Hlx=RuKHI}k{;s*v{5s6zC0Vz&uZWT?n7;5^B{71#OOQ~Evo
zgY^9}77VzbuZJjQDm_$4y-dD9iK>Yzh`_=Pi}{7x;>k_Bs+<JBe2(?psM(!*ujjqb
z_oa$lgdE{?3_yqXAWN6pnD1l&(8vxSF|&YXJ`QsR3n*8!WhZoDM_WF{|5u*{+52T+
z#qc$-r!!?MXU<SP^K|n!k}vrE<kWcy6)g2ZvCAT}_6K+d&w$1sXL+Qs5p#$Auyz9f
zd@nm2$H{6G^k}9)Z;@r*&29!%N^9}6bkneJF{p6|`;lHP8e^IP?6#Hjbti{x8((b~
zxvpr!)25tGYs6)U#X$iD6kb8AknjPNf^~*+Wf*_ll&48Du^P;xcHfwN4+^ub(>^SO
zIzbevxsvZG9gp{kM;L*JNCW`L?294YHlsyfbQKg9<IO=$JUUq-q%F~hIgDB+swJ3^
zcEXX4dT}V%YEfMa1f*t=NhYl_WdNUBLca5Dej(#6&;t%@(aR=VwPp$KQAi>+EzS|R
z;g>5`OIMlX$|z|6`N%{mtkIJx^||#$eFUyPgG6=4^Yy1hr)6D?Kf7sg5?+k4?c@PJ
za&(hU3ku{{8URFE7+MD9_81~M$k;DH$7=<;JX+9iY1+>XF7brYa4NbC>%iMVIl+bJ
zn=0H^$o>0E;<@GG?w@>hHsh)lh=eMe^-jbKGX%gF+ki`jbtt1ctDYv@7MYN%Q5*%a
zT^yj>7%>WM1%j|tqh?Ynvo3AhS^zn;0l2|PbyT+e9prNaFCyMamP{`kRMwaH=uNvy
z$Q;3hleS)dysLX#w0bd%!E*yC52C5LNHtxa$HX*z>DfN6YsZfyYc51+zqxca?avpf
zu<xkksE&Ry-ULWoBwY$REH2`{lQ?*Ip{v+q8mMR(e|(jbyw2D!2-5M0P~qFO0NLES
z=>QaJ6Y4Yy38)$?N!tfH2H<#9R?{_sc8|t!zJpHu)zwG<m5tJ>r$sX;e*B0#Qfkr9
z{cR8|z*LEz>|ChAX*8ooTMjw@y>EPLUv6`n>-!sUc=?+ET;HJ>&<Gw*c^?Y7uQxR5
zzFU>L{;zfuxS~BJWR=0+H@_M;>9J&^^yx7!iO>NPa$^6c#o(gmIB6#~77>fC_Q5u3
z*bBH~(nGLvJ!nl7sS`@C=>@C<x?x?&TjxdRi0YFD$j;to_pXc*cj@I4Vy!^D;dWrA
zmm(7l++Q}c<wA>}%%ae=Xi!;9ze>ihZD{CtsI9rg>p0s^lc8EqKFkkPbdnaMMK33u
z`*D*)=oSpI8v{ev=@50BE%!r%`4`e^Cc&Jvd1ah%4`k<Ih(w>Etz@bmo$WI(0GV6Y
z4@Qi1Qh|Ni@t4tmqC^+`SP6q(--|_BtX^$&er2*)mG><sGMm?uAWgHhU&*rr%$wBb
z!W9wxwCclop|Ml?gcFSXJR^Y3F$;6M?yt+gs|KQGDq-QN&i;zcT%}r1_bT99??7tZ
z@7^A71EB7rzK%66`)~RP#g;YAW^BT*QgB;^a+jWpc4wlV(PE#%i)=c$CGxN_VFrIo
z)&j7u@6_@qj^)B#H;{gN{R+i4#|Dkz_%Rmvf-6$#P`vM+z_)6Gzv=7OHbA_gyB%ZI
zH>;#kpzjCMvH??{Tg2z@o8(`y*Yhi2E8?&#$O8K=2{Tzny2h(%&X=Tu+sbx?cj6*u
zKn1nQy+)~AIs6%aVI7b9ym8NzHa|St7Pyc`^(%->@|jGdfZ|D@GRP31s{`si07!~*
zK8PeA4`HcYz|4wYvIs3?sok3xC0Yrdp9D&Txm7$e{wA>b#P^sb@;SXKhR*5)+RS&s
zdYt5Fk65(ItiuKQKd3=q7Iwvh*=n?W-Tzuc39wjxZ`e{U@>u}$aK|^1)C@3{|0utf
znJ+mp-<_DaY?P}NJz|yXv3=XNHYVm)uL>J%CGc*oTe#Ge53rY{YF2`X2I_*UGqrx<
z>{5(Y7au|!-jSoxI_%IDKf45sAu;=lt<!7X;q4FXPoa?U8_e2GHQfK+QCoD;uCY-)
zyQDT2(kvjW1Z^M@j(sY}?zXDUqnLJ)gVs0d>8{LbC0I0U>dCdIj=-|LwTcOoXC_D`
z1_QbP0*mK!Do27`dhA}DhiITh+CaADU{<7Ug(6|nK%sJG6aV5JBf3F{xi+F!RXH8-
zESd6a58~YC<C7U6i?5*pm+L4PI>P!vus>Qc=zY9z791jwu<XL?cfRJFg-GA;6I{E<
zG3V@W6idR{{^omPgQs%s!D72_BTWDu^qM<J43~9Xf!l!Np1q-dr_fJ5!=<6z<3M(k
zI{gO!RWERm$Ac%K<Sx6v2mupfM`X761Ynh|Wj5opv1SP_kX(!P9M={8oz%?=3zl+V
z$~n=MJ^w6*>|a|dmVjT-?Qjxv+rl@u6EcUl@fw}cTn&alYbf5c^OZtuJF13VRgUbJ
zmvJxj7d7eoG4hT~V4{6ty%pHXR~#N=uh~C4aq2qGuj`7m%Cj)NdBOZa4Mc=G(VJfa
zRsBJffO5rC;e!PuQc)-T@IQIO8Kh8fBPhc+_KMl#9$6qxQ7C%>!NYC;+L<M7Q7^0Z
z)fwfUz~4%>#{Ytip$vp8Z4CjJC$xq$pEb)J(gKzDiqC`5U$~@0?U(OX+o`rMQ=S}7
zV>mXG!CS%BXyXn0v77)|l`CWXkG)V3oswBUEr*1J6XyowC%4$OKn=w9hWv-=!XLP`
zB*)|JP@en}^Ipnt6&<__I=_JAr>ZJj$74+==^;i1GEJ*GFg&HyO>=X;GgXsoddiXC
z2Riiw(A?bG0Y`FB?(g8sUm=Iz`i-C#-&iHHM?G)!HP-JM!iL*NZOgyYSPbP<6ff28
zu1-F&9N=x7>|Snqa@T8i3KR=HHu_}50m4JS$_5Kq&V^5*pq}#PBSK&Y721(_l3x95
z2jV(&0#fFEv-f?eGF8paNm$(fe#~}$L9tsR1jYS;B_@mn;pU}CsnuHzMYG0ecM}EO
z!%5yfkB$cdQSL^tcTpFcojd@3X{7+_>DX$ie2ii&YE-%A#(N(i{aC_*QfZ2fOxS(g
z20kv}vS44cAhQH`LKoe1i}6M7+~;@j`DoLZg1rHZw5370O(MV+Fv|R7p*wFGwfCaq
z-RCs`I-A-D&J%$zfU4MBn$&-;h|cx0t>^Jr11C;Hk^TqIP2gAcu+q6g@9SIW1O6N~
zx77(pu;Y(LM>s7FF_|)#HybYwbi>4BkB_$ixeTzi9KnxEfjwaPSIxz0Ky&KM5#?ta
z^^MI#I{-mSOTAwJH8=>(5yf1MJ_)!Z;My?@(L4s#loPt0e}&N$9q5#<l4-*l0Y;6l
zsO39A@`LM-QGAUN=P{jq0tgU*9Ba5OMT(G`nc3l*FK~=*VW~T^o@c3gTn6B>a(f!G
z!FpX#N{LO-e`_+3@xJWx1bn)y1c^sBCUtWBOI{-a<QB2_($!i)&g6MhpvNCTbKu~!
zp)@%Lz#0j7rW^8isO7JY0|>)dDvj_`_Io}qNt<<s(tQpDT@gYDWI=|3y7R3OT7Y0h
z50sB>-1y1jPk>4uM{8Q-L|Z?=w^c=$hUT%e;RzUIt)L!6&F%VWVfF-tU5L68qfq}t
zECy9$8wHJYa;V|3iJQ_QP{W)CB?MmqR87@ywf1{&=3nb_u+#N7(S2Kz4lK*e5Zls+
zk$opu-rm+>1X2FYT%(UG@lIV1_<)+!DtB4B>C2bkot%E+f9H<I3Vs>4!jU#{`mfBc
zGj6_?u&o3;#0KEdK>6Be+828L)EaXD^R;_@5|r$Nv<VW<k-qaKCP!2mw{@$m!bedS
zk%&6815|c<s&7|lxU3e73iV7}r7Fr54Zcooe6VGg>bbwMLjrI^I)0x~kUW40G#+T8
z$t*x9T%`|a!zJcP+HN}8RGS}6v@X!U109g^u%6^fYgmW!$M;0%`y$2ol}9%9vRWM?
z=JV69(c6zCDD6(bAd9+o|MBQIb!i12KsW45S77NKWJXa;{LF6vu;y)U7solBu$LjM
zUGSi|_h4@<Tb3$NA(Xwe=Z8*}u&JtBJV7q!)6I$TGMfmHmq~Kl9S_TP`6vO}1s$-v
z<qo-ir$nf&_Hb3peJ=9p22iyI=Vi3M0&RViEeaShE1%XTVoS401-3`vb_ylj7~Owr
z0%6!_PbV8Yma=O)on>ytW%_ZJnG^MVkGaij^c(e&yzwzmBN>D4d|~lxAr8t?VSi>R
zKTjtkMO)c*jWHx|XWrtU6K0(_s8WUf*TsL8|9-ED^$eo*9ob^H&pYreIRhZWA__GB
z_2j~Z^WXg2r}8gc<jBXg_>Z^zGEn%}_T7sY{+0fKi&q1{uljb%KU;|!G|9RE<{I!p
zzi>W+{&s<Nfaq;nhCTk%zVp9=JOBdr^yJ!w^H=_Mf&bm$|DNFAhQnV&<bOl-e{=9(
zg90pW|36q{9y!-919OGQxpok-rHP}$-^a1sHm|IIla+Iu|6b)g?;^@)6v>xN)pT4+
zQFWZ!yvi(#EX@Ltnr-wxF)~@``R=$giYPbX%5C0?pEvlgDn$^ZUl3l*KDSEs+A7@+
z=G9wN(K@c~MHT-qpMP*A24mWuf3^=h>PvI8%-WQKR3tsoicG(UEKg_SddD}N*5LCv
z=q#<nGQR8=v#i+Kk@thlZ2~z}q>!k)(QtXK>QH_RsgveTD|>4#p}Xyo9~#E&n3Yzg
z%1E70Vyur%T-9CNU>Z5*NRU;HJpt#SmRW;@c#^ydfFiaOTs;!_<bvj_a23^jU22q`
z;{$d7yGTY2rM&VPX-FM#g=x*vC}v-on!x(o9*No<{g#<QEld>01HpK>-pD59xWGoM
z4^ks4aP+46)X{AcVb2uE@ZMg8V*>^v-KwXh=6MVa`SWiVD`vxGY*zSPD(Q3*fnoTf
zaBb_gJ0jlNrd{#(x&`~yxb3Fmwacywd5>A7SGoLJf$L$%m}GDhqwt#|RSF-!he|z1
zeT;fjN8#hu0OqA-V`B>!a3gPx<w&1xY4G*WvAMU3ila~g?C4Y96EVOGkxA<UE;hS-
zpH9SVfvZe+p{M}Bi~JaMt2=6i_r5iXYAhGJO}Te>y7fvBQ$tzC6lS|%TAC&0ssN6o
zoNJF(aC@ge&M;}$f$@8X|NQWye#2*_+J`2Y8cTQh@{hkb4ry$sj#-qZYQM}<Dl#T1
z9(j7LH9FrHl=#I97#TI+oRua;T~QH_uc}s&abXp^DWVI0aJ6+{*`s5W(~j2~WMtt$
z&@qzL0o|>N2ThuXw^yWk9pY`wL+w)3zkt$Q%JZKy+zQ~7yYNn}a(e@wL|uV6I84B;
zjZi^w_4<O{y466&J>Zef(a6mb;g10*v&z}6DN>1&z>3FYye!vts)WYhCck7VaN~C$
zeZT)vtZ3$oj8x$awGC^BRxyw|wS8~AJPQi(jsq#7P&Mrdht1a!Amb=^%J*phTdX39
zD&Sp61cDf~S9oN$-CJuSJ+%Vj99-)2clrtAc<z)9<>qrVGCPiDc>+i#xe<+&t5O|B
zbVL!r81;_bc$GN}7wwxo>GpTVV}-jpjJ`To>D3+Yv)fKQC*{mmUExHI{KQ0sox<*;
zr={Fme&MNY(#XC!n|wCf6OhyxpBzs*eybPedv0IX6zjA3H;#3m8mff~u%<ed?4h*u
zo;lM8;&=jju^eWxJcl_NA}=~$oJ@U>0a}HC*gC3E+!zZlpro=(NUDP`a_gi@tMs~8
zR5t>hSAn0l_de0ik>905lc{R=vgQwXYXcYJi!I2>JTk^-zJwS923;53ZjE_wvJyDp
zp?ANeq<Juk32M^dzdtXu7re*y&3Q<}Y&7XDz*V9ExCn4<pV8^KDjsQ*hY)|2Jnb)0
zeMAaA0Ngo*?kVfij4mI%VX0pC7d-J4fg(QRu*h=TS-t^J&e+aW-aH?Eu)P#Awc9O1
z+yb)mfU+FLB!Ap`OCiAPqF_*EjFy9P_d4C9w(mlfr|w<(z@+uGEh?J|6c0+(cpWI^
z0YUK|WOunptcZX`hV4Aw^`ijMG4-Xvs@-SYifLlSqEO6sP6b};+savLYl2#lfDLD?
zYN2g|U_uUNhYAgq*+57*%|DVvIrODhjxpq#b*FT%e-FGn?g?r(k!f;3X0q_LynzjY
z21G%13o`Jkwc18AuCC87LnNb_bvk}RIt$)=%3nLo6BjQr8{+5|WGXBy6h>4F+#Vqj
zd|tq5JJE#6RD;+eL0R~t)D3IjKlXv)9SQ0f;};Tc-r_B&izPS-{MeR8gL3MdSSHrC
zPx8XV?c&pV@VKEY+6jNH3NJ}TVP$20>(Rg_$W=N0Y7n!ZLc<fQR+B?+w`Dxd55nv?
z;=wH!I<hC$0OG;3{QM!o1C`47{ll^>(g!HBqUDKFIoGu@^3Q`0{LhzYf~*S>$F%q1
z2921=0i>yb!XN<4CbZ**Dzd>YfE}2tQ{`&Q<?Ql!vShdW74DKvCBRgKYZ{jut{#XZ
z_zri**JhIf$)!L&K+Ccq&7yzav}FdJqbbF?UUR|I8qCJxY#mE{k&|3NT%qaV8o}he
z1l#RiTTXQNN`exVP3p(uMR=~1s=@k^2en?18Dc1<#1)z2qy5RH^uYI!LJGpal@26;
z7T4TAGa%Jwys0~EHyo@n(b%l=8`x1~e2z_>$u%dn`=*u1)R7*c$7rZUpJE&BWyp<4
zKxvjPwdArXSPmnxtT1Sl-jpdwMQ>N?mO2MaDLO$CBrlfH$T6Iwu`<8dH|JMC@(QWk
zM!IYd6sxwt7D@i5z<yoTrrr$Dp>j4dv9Q&2R92-sk9;EU9|pBMi%>n6!8uo-!=0vj
zgX!9uNl%eqTM=5vqh^W3xaP<mp#E(Gsy?fm6d4R$R;tke+h_v>$`!s9BH|1;tp<M#
zImIO-0cS-HOBT2{AaKgC*jPiVEW%`H*@srj#%+1TK0>Vzlzo6&U=$rmBMs7YYgJf;
z?fN&dbo!ec`zVC~Q<dkwV}Ha_Sk>LErv)o>Qww!3hEl}?mpTy!amf8$UrsykQgGPH
zr;TorlaV|86RL>i_6XWgg{NeW<24X`Qsa<N5m2qEHh;Cm{hp(XcQOZUtm8S&)}s!9
z{B5lqmMCbr{!Rh?i8GXuoE$I3bm-JGG8WK}3k$6}PK2UbYip_k>ah6!WRra=zV~9q
z?76K+S~|JhR`2kT;bH4UK1E>l%OUPSIcN*L`_sIbz(SlTG@LAf1LkJBhQw0A<gf@Q
zZyL)=@0@kET7Ho@Kg`Pubr#s9PN`)il1TNd+)|IiTG~Zo+;Aj44EUEu0D<UU4&MG!
zeq9^PZHlJYlp1{m1=86$KmkN&_63_8+0zb$t8u|^cdPa}eNm@$xIKM!xC#;d8hST+
zMo@DsLJm@5p&&3Re7M|yl}sMWpvDYfP3R>5$?@SDFuOxdN=Wg^b&M-FSjDCs`f|q!
z^ZLW7WoFY8P1~18>tb|GF{}%6<Y62uNA~jjAuP7mG_lOqZgs~8RwQhc2KTNC6#)1Y
z+54&Lmta#<(?|uf1Q8F<jbB>-z3&sKQ`k*;Is(a78p7%Gbm=(!m(~2ftaqh<z1sH&
zX9$z8=wrZq5qJr(-bwlQ_pKBlfks_1Y>j#EkOPvm%hT2F#V}Sq+DSWrp~}JzGM)G*
zr@?vErf3>0qtSSgTV11b6S4u;;0UUMMoQ4R_ogU9Fe5<iam6??Pv<WFEni^4=O6F1
zT2W*<C%q3C=@UnO*Ck%xU~3d;hF+Mm*x7QM_F@PHeD3i53A9ML6*jN=etCh;0l;fr
z%*vjend0l~vz*oCj0^_Om26Uwg&7=_%4)*C@$C-k$k<Kn7<U9?|M#3@n=Gf9N$<nl
z%pB~|-(yDkqk5r|(vLSBOkdwO26nK-4{^kb+{Hax<tg3(hCpgE8!%podp$vtr~+Zv
zanm8)eGE!+vCyFxm^mnJ0?EyNU!kd5ufVIgG46J&cNzQns+}oMfM9Y6CN6u46;wo>
z0u1@@)ycoghhh$T@6Va7QBRiWRw=CMu6jELAMN9ee20xWNyGJgU{*Kj%bUsiVzn#u
z-z^pNcMBhW?u-MX?y4E{YaEx~x}mfwKk*{A6L7w?XbF#$;MGi2a;>+ejA?a`I)71K
zD+8y8xxr04H8*}X|CmLU`GLXZ9AS(L$NS&mJeKrF>x$Q=rSmW9oB(Bl{={1It}-9{
zA8v+m0-#vk$Z>g)wsX@FjTG1%O5JmtPqYM<gg{l*He?5u8}6|0dLfz5(#x|obRAo%
zUH9fdQR1k$qB~~x#q`DI&uazUd6=JX^VBwNnOpr9zyn*Q5fA>@@T$iZj&qY9Ih-}k
z4=3Z7>b8f*cdmCG1CY2$z`*Oluv=cL$<nZhNGo+U;xg`S3cKo`9^rx>6w3DzhEs>U
z%}3KP!B&iR&Xf1|19hBm58UB%?I%(A!q4?=Yqq%|dw_}`^YT_)3!ucA{G9oc<~FU3
za+h0Pm$l>ji#6SfqnxAMxpkCh$YIT0)8@K766a~!^#}eojz!)7!d)LhHg#^#=g+s9
z`z_&C!wtDLJJy=Do{?2|AG~K!dxLyGq&nqp=KQfA=_m`Kt2sHom8r^PfR(bF%<pgn
zB8|=p%hd_>sZEIxnw_q`ik?0Q1etn|CdjRHd9sQ}hnbADsu#h}Uw8rp5uF^&?^`2i
z+X3+D*(D%g!RDCvUSkcEaZJ>-z1AB7I}GuNR%~3tPjHya>uW2W-PMoxj1oxZ4}z>G
z%I_6teeptN8rF1*snWP~&&vFNNqqVGHaliOM5~N4@)R=jGrtxz;v3u5?%d7<o1Ef^
z8%naMTr^>Y?l4*b4+kjM#4Dpkf@YAKRBiXaIH3;|rac))_5i^wMhD>QTcAlilVvIE
z+pz`cXC$b)^~qw@)yodl4Kb73f2+S(%-WED@scTE(>rG8H1hNt^+%GG1}cNoPFEIT
zKxxH}gFmtA&HS(?kXf=PqgNu6IYIT4@-!>il{X}tek5c3k5Oa}=X)1$qqxj_>dAy5
z4H(365=392?&Epu8p@Ppww=_dy9~N!?{7jY-_-hQn;|xz(NHt$@?Y^TVEGdPRh9-=
zolWX}#T=2T(fcJDpaI4$VFrC!DppkwXI|m9?!M~Pj|IBWGW%tnp%M#@;z|Rt^w%5v
zh-aPEN)D^FJPrrQ^mcc|AUv>3`0!3I_Jqrq_N^(-m>KkTAX~7eiKx>B>w5GoH_)!h
zILhLii}sI}5J%x%8wj2gpG=e8f8=~CEl&v$7}1?-v|ZVc0kcJ9G$}l3iebdjg6qnT
zFcPK^=mvZ^(GL5ptm?}E;bL|lai}qj(gW-xHRF7dDO<H%!>ByEsKys)2og-V)yr&O
z-Vt=B7#AVLKTmcaRf;xYbf96hSHI2h<LvCu?C+dv<j!@9viR6BUJUAa--oJX8OBj%
z9$?Ji%_!s{h+Mra?YTY3<G5PkvXbe#GS-g6aux4G=T`NV=Og6K^G$tZuz+@-Y%O>K
zWFbO<=JM4ji}gG}d9@X`GyFLtQRH>V4bcs-%+=B(wttVNv#dW>Lc(3YbGTO5y3lJ^
z5zzx#+5@(cBkkQVf#xy;a1OzWcXxt9>(RbXP#$I6sFvp2qa~;kgwMT(rmIkYs`M?F
zeP$vlEW1PCWc+($;L4GyTpZ{7G&w>Ke#?Tm-}K#jHBs8VVZQdQHN)}ZH~O(G1d!AE
z2jG@o+3VUMON+c(rpbS`AE}Xc!nV?%9<32u817{;hJDAJymQI=_5&#IPr}W(cqV@n
zV73w6&Ro@zS?l@p3&NJaqG=#Au`(UlR3He~$BJnk<nuwz^EGA)n$1*29oY6@RPAwG
z*^@>nzY?hHbvCvNIsG*{GoIF}9U4**?`lZ3&xzl>%wu=AX(_?2o<>(TKOll{>yR3n
zz>VTVT&e-)+7I@T>33J?VC^e|YSUq$goxf2m(<*6nG%UpR?~Mt@##t3eUT&9@vS}x
zpMI4Eem(d|B|H`sO`tTti`NvU)C)?hmNEQhqYVLv2B$+F#GNfPXx9cC!P$tb&ZD3p
zZUd?3z3f~nGRcYcY22xMJ7Q-gA8uh6$_}YN>Mb<7+?ycvy&PGfge!~$18?W!;yx%_
z%S_iQKt(m=1)_(+!FwY6z-VEG3!Hm&-@&1Ih0A5;7bx1bqf6Hk!<wc@&HE!6@+;C_
zGC6^=9@M?%O6=iULAI0aM0qcIis`u1!IN}(n5@28sOM&<+C0wZd&SAdUKPg&?_BX1
z$-<MxvPH*xl31j2HA`jlQ%#dy0Q!{H5zjYSZTfnLzu#<_BG&fy1+Tft=u0{@t!%ho
zg^t$6*}V>A>9oq?ahohC7KXG0D*OhhUb24^^|*yGu4|Ed43ecEn$v&<HKeyxXYnj2
zwsF~KC%#KB4caBLJ8p-am|ij!jY{K1sjy}{p$eAq4ryLDba0)frzYR8s|y1A%)fR3
z0xmSZ`$#F2d}r6eIo$E26Ose!{bf9{J_WLn))!6%vWb~;P}kK@UfY9ert%*MQ9F39
z7Cfe2(-5D6EDC9jQi!3HhND~|*xE*~tZR+u(-+ss`<p<8+$=ypj#(`)-g#wA4ioQ=
zH3FmG2&8egVM+)b$n5(ka`o1)Iud>rFBl*4`wW*m+-(PpG){2lQzFm`TwZPqi4%kP
zP1*w=MUV}}eH*c|z3`-4Xj4{?P!gKd`mqcJZ;0ayna@ketXD1<wRaxh7mJk3mqi-f
zu!f|Tb;;w)rccE4)dk`04$5811@4zoJkxh<ZaT)8E+<BWFiWf75Es!x;S`FA;)t<o
zR8j0bvponAcdmhG!P2{;gsbmvG~yiMqm-ve2C9&<cbMVMdF;3!T$V?KGsv~TT9-RV
zua?J1tQ*sl{Um>TE;^n39dcr`xI2ws3b2(T!BZHXyvuDJQ@uBX<M>T<#{NApW&{YI
z%7h?57NS8Bd`dR?1genFX!lVmuvU0?f+M+sZY^z754jE5UYrxU!<y@ESNBWR9f<Y4
z7JnF{jE!aON_RG<AZz@A{@%m7E+CzA*mPSO>cl-Nzs$k=p8Rn`iJFJttFE_hfT1u-
zB>(G@W#yGc0CAb3<;cmc6;1d3aMiv9W>pZDpLC==3KnVyf#GbT+|vD-*ymX1f#Dds
z^Zd?@H1}@cF6haj<4hzu$@$<rD8eSpfb7XF&^S*EKGf0vffd`c9IwWC5f;0~-wOe!
zgQQBnPX-v{yf5Ldm6vnmBit#FP7dJp_TLLV)&i(j$Ln}56F_O8`BucAQStRCKS`_x
zm`Y0lnvwDDs!oyjFOQ#Hsq={<RV(R(4@P#R@rlW<YXJfphjLj=j(Xt)Ub9^2k|PLV
zTgXv%omW}33k@}*R7WzK(?(o0G(%@?bw`d4HL_JdQwmrOGa5}5&3@!P!vV2gRER#p
z=m62{Jz$jKxPtp>Gls8`Rlu!Q1#sEE$-7SHYN^Gt-gEHZXSJiv`isjf8g+%&4=_3D
zc*J2GOL0>s5+;XbKAkKHhR?b>G|sy0f?oj<ifKacv(?*dn%dF+3_X!+=`!HVMcvr6
zKNF)|N1-a3RMGSRPXOnCJ_B(jJwwz<q&D}v^8ziF@g=_?Xk(7snr`yN!dY%1U|@6(
zW%+I0$WTnms+kzdh4yV0Y2%<$^WRk;3LF&Qqzu3h<B;WGTJmUWnVVH9aYII9#j=|P
z=K(O1TCvPp0z_l^clgWoc9y5!>qgJ<pKUi6&@`wBA|!S@*T?1KdBwKApsKsSmk#3+
z(NV|9Wu~&Vk@#Nt%)y^;#8MDA2z9VGywN(3GV?@Rl}v2bihz2f1>~@kKd4R{iQ4i(
zX|;HH+;!m0S?;swM`z?l*-ZgA8=QbKMU1l>y5P4(08Bf{U;iGlsGCey`VF@NRR$kG
zu22X}B&Hze`PvqY5?d6ixSv_YwcPLnc;@Kg@@V6ulUTGaxwA(2$zBH+mg<=}(|S=V
zd{qA#zLT`GI!fe@-+bo3cmeGxO6l>MH1WwPZP2d=*od0~M*!g3Yvj28?YM{Kk<_0C
z7Z8Hdu&dm|muJsJ0P6;wW{0ZNiMQ%k*|i;dt+JefTs4*&miF!Q#(cyu^zV{-e14US
zY9H;tzwiZ$_QMGyBy6E4DWGY#i)_8<C#^zT7fb*(eNabNv`ZD=#U6jlGfDO7@w;$s
zHa2#n180z7lRo>U4rDfAX`OKubMr?VAs~qEouobIh{a3$`i^G4;5}zqpc6b$F9;Hf
zd*8?wh<o=Q2F}f^_HNVSw>cpIt25p!Ft~pA?iz$0x&jQhbhy>i28TYXfrU(oY&lCa
zH?I0%(P}kf+G%$(v-Xu%%$Z{SQR)S8_D@Bl?&haACK)1njP{ZW=%E~ejx1QfTaYPQ
zI=Tpe>d{j*hb=t@jnsgjigfJEscZpvhnVsJk?wU;(xufuOec03Uvkq}>P}QXfExG|
zhUiyrKG08`TmOD3c1IRPTo9S>bXrpbMlpOqyN+@lSS=j4t&#)8*?XZPJL+XC7CSRI
zEG<VO$6+WUJ)q$itvHpxefS&WLJiMUFg&eCt(DI>14T*{dQ&eb27B)Za^&9jVOFOA
zyU<2O;*MigngkBu#oB<$6e=_fxS#A6GmrMabc{!m@xVfC0ONhMaB<)-`4cdVkOUAk
zIu}jo8DtoHKWrR3CiY&eMg<H|j%ts5AZ}>75-!5tN7P|2MJY%PrlTpcRjrB8OENx|
z`(G(x9;jTJzG<_hs>QJQY#X6Od?Qnuspx?w264&9pa&&o^kS+S=npBVL?2=q`>iML
z_Hf9CLtn-~tGv25wGka1v9V6V5zVAi@g~Qf6~A_*HUM#?LWP85M~O%OCMhYccwoY6
zf>t4=xTB-16rq{YuV)GZa+okd$>Z((xgzUPcKDmlh1vZ8OkDPw8s`i%Q`58~MBPc`
zMEo7Crb*X@9x<R_Us=u9ENx?y{6?M;M#66$({#+z;sz3^{h1IJ*<eC>Ua>I%tZ$?S
z;<cuS5UZ7MjMxIZpA@~5<7A;@c6N4Sz=c*)R(8%2WpWaN?1T$@9Y~IYip7&C=HvoR
zAS$2=j7J<wi!==k|KdGcof>GtG~JuR<~r4J_)!q|_y(u-UAWxA7?DSVloP6Sb8~z4
z?3r=bl3n>BA+0Xc{{H?(8$&-e+s_5*L>76NCgAGf;0gjFA-n0aIvf#KBbLcwHV%B+
zX5n=ejT6n}cD>0G6$q65-KssBdu_P<><Nfc%F}frHm^uotA3_IXJ0eqaUwwWM5|Nf
z?AksmySpkhi!@7k{|p#fk+YBAp$*%`N%xZYQi@}2X)iy{_q-*{akm$it5w!w=W|G^
z0qQuZPA+V@&V*+!2%?HOtVkclI&%6mVNJt>k2S@dWc)Ywuun?KQALDbhoPP6rk4yn
z@(iV=Wy9&7CAbBc5Opv0bk%jo-1|W*n{k7&zo@sjmwgC3r8AyOYi8yhCf@cQpfJO9
zbs0FV`Y?#K^>02dIGkFMAl6x)jMU&TiyF_jO$T7eMiL=K&Mn4%D^0N5p4g)~jA`Yh
zr8uS3><@`}VzzIM$-@Mo7rxyO71Zp{O`++(Z6|uRC1LRc;)>X=bOyoc5{+IZ>b%vv
z|2gY+(Qwc9T3>1ir`^<qmvvdOsHh4u)aU5aLRMTL?E5P{zRhGN-J{^;iHiOkp|4+u
z6UR@PHU=hs*Udv5^V`G$AkN=<x^_}1?;^uWs%b!=hauouukL^NaD&flLD6j*TCo>y
zbg`HTXd~LAS#}fh*z=vrgmx!xNIAZGJ?0ExUiY;cH`tHvHc&p16I}zqds(`dtxE=S
zf@eA$Ko-!=u^;jXufstbcq^(H0m$|C`BgiWOU6w>#S>n7v5T@^k%%)zG<qFa>;g{6
zo{FC?c3A8eaTzV>83gX!;HvVNVQCw@Z}g=wL3d7`S0GqQil*MV|1FQSfq_9qKM!wn
zbxj?hG9#`!#4qG2yLV5zL8mN!d=2FphH*Hi9C`Fn?bkJva~#@r!5AWFMHVo7nL+hb
z+9}M%)x#F{d`4>3$*ePBZfaUcU1Gkv_fu+JF?)s_fBM+EfjBh_OZT0FMz38^`h&Nx
z!E9WRAbWjJF60qI$?r2JL9DAkFH$@#IG;1H|6PRmHQwmJ)*hiki-Px&5gqf6kcg&B
z+D?M?DFRJVf({HdHP=GMPBn|71X!Gw&Rc33K;VF$!#!4<UB~hL*Cl}U*vNN3fI3G?
z*(tC<CTvT02e|6?BvSQb6B1dy{h3T(xgXEJ6QIW^Uaee`Z*6OHY=3*Aw=Rpn(4)BK
zX^99Gp2kfW#i_o?w+-chlnJT)*zw0<W>lMxg4#I-nCvv^9d9UC?2jxvR1GHB0pZ5G
zNf$Iv{0}%$$l!;xL9R==@NyI9J=4Tm75vSdu7MitGbK3|9T=4NwktEvbghrF>RX<E
zGTx3WT{UYTvMJi@r*>>-f>%;iTBc#X=e8B(PU#Wauj^<Ixw)_Xi;as*<$yn1ek^6q
z(aC8guWB%OPei+*esXQB6l$K&1}$lhk>huE94YwjI&95Sxku@C64EUa4N|DeLoO3c
zm}ileaWuy=sJo}G)^?iLD+ZdYM#_tLWpEx(-*MJ79fVIygOVA8SD8wN8aO{Ct1?yD
zL~{-!{;wVHg5O7CeM!@vI!gL8L*oV-`&r3Ya~71}qspS+TzBOdAKX(&96?ppOQN(t
zq-A%&zd}A<<PrkiHFehIu+u!5^jNd4II7%UYFk+<)rwc4=K8hyDb%<-VKO{E-f+jI
zwkT9Y*Lb7$l~EjF>5)Qq2`7B^z-4afTY^3N(y)roZrMs3+-d44E5K?BlC~?oyBgK5
zW}=x#AaIsvDxqz$;$#j>n4FEATj(Xk5osA2UoYmq!?PIB)h~v%?mP(<&i|^f;SxFM
zUS4ehGRvt+$Nkrc>TJiTsHnCHp83kTCjyP^E+%qvpgPO%Hd5_2<<LI(p%?oEsF^1X
zM@L6(YYk}x4i_jfi9(lZ^UO7(2Y{JdrS?~@vz8>ITGC7Wr1Y#M_Gqc8)P3a+gd8Hn
z0Fb$zLdn3vZv6Shr-+rMOI+q~5O>qj(Pc&>*78`7`UE<PW-e7auPUu7+ODoT9s<L_
z4`2^zxYMscW)X0?JzPN~(y3dZn~BF~N-%LVqXL88*ttA2&or}<mdj;jDEDEoQPm)9
zd}YgfGY#bNGW2DWkg0jN&A4gt`Lseq39;*C(t=MLtyqT^82>#qE{-!e&vCBlz$-Z>
zc!yzUIjh?Ywd`GG88k?X%YqhXt9k72SF>}pUyfjp|272{^i+k!PlR)csFQdY+!B^!
z1FX{sl?A3!YTB&pbIiIERPcgx^H#^??Z(OtJ~3*R^gx0H&jM(QtF5zvzvC*@KfLmO
zGc%M<63(*A4!R`OUrKj}fJkie3LrX5SGuizUmbsgCs)1x*@$r0%s3|uCcuF2H(-#=
z4RaY91qwnE`TXin;_9XFA%rl^GJGz3%)87u7(##Vo*0e%(aS134v!<SU6xcumU-aY
z<yRMX@n<WM2z|^Bd*`Hj0WePTwd@ix&Rx3==)exosK@a3OsVN}<-^UpobXWGPrwu2
z{D6U_%G$xffqiZtA)(e?Lf0CLSRO?r5aLRYZnd@Nk62f%fLa!FC4nE!%1<ua3EthK
z_|f8}67|mlYt<`L;vD$035)@-?+M(<^={h4gAnJ%fmZUYl0g;W>EmXRi68vVTUpt8
zuDe{HYL>x?_qws{bM6`&qe{I*QvLn??U4qTPq)3#TA)Pt{g<}|*=fJ-iG6Ir?3jr=
z_`d2_H3vx7b1w)FTJmY-*duRonuq1+7OO^i{d{?cS%5JepHJtufKa}*hr^<>`}Sbn
z=%nL#e7sK4!jI57z-(q~e)8`2TtcFdSs7F$p#voL%y+9#Y6Xbnn9*2ICU>bgIG&Yx
zp47y9EM}&8gFP#ZT!?=6U2%6M2>1Fjoy?x;h6??hjc^Po{+v<vjF{;byK&Ig%5eA1
zXnc_)#UYhq`gE<ZtEUZr@wUEj`uXQHDNgjWEqy&-G^zOWr?fOV=;5x|#qz`1R(wfE
z>7wx^>A<H6!p`QYaUEViaMOv0CL`ZL@D~bXNm+}VT}BY|a?s^f2RmB62Ei4vc~HY;
zeOmR}L|*>g#LkIr<gSRi;#>{jAUz=b8X5uQEixw;FUf`$0lT&kZ~8Pqa93K*O@a~S
z8=P4NJk$fdoOFU`ac0rZSy10_=}<z==8eNEWA5O0w%^hZPaNDPysIWonnl`%n6&7H
zWNABn7LqQ{fh951L4D32<F2Hxu5Jb7If9$PEjdbH%*keJVRQB+aRLjxEv+`RTUd)y
zL}>GB@0W{~()^s8eKO5$CB%9;%FSTAizx$u9L#a5;*)1ruWJ7<zO#HPiRoiI1sV1V
zjUwbU8d!&mdK~l);tl6&t*kv!f%s^JcGy6(nT82yA*s93H<`kXmxk7;MC=sA1&bOI
zuMrWMc-R7{sdwvhUs5Q)K^<ng|2?Fj6<`oVns&wk&)@0SJ9n~WUIzz*W4;BX4)Inb
zE?G?THL}>Se6E}bwK_|WwlHpmlN_vt-8{|AMK7RVxw0W!pX0uH(}0wffq}sZ&0njN
z_Cgbva8X8vBnYCO8CAqxS;&e-c`_!(wK<ZXK6*-V(BbcYCRk9Pj*fxi`r4yU;<$v@
z!x#6vCeC~>KvLEN@^G|Yn9qgJ#!-r>fq~x*BC@cBg<EEl`VS?`{G|WD9eX#i_QGUg
zr1!zn;H+T}3#1&2<yBKNqWlZ9Ah1B=XHmAW$RvD07k;UW{tX5OMzZ*fWCKGO+zno0
zLCV5J7y-jx!10GC5By>2e=A2vyU7~z_HE?stT8aq63n~u>@VvJKYOAckz2?oC%(pY
zcU@jKfGk52EFI<C0x9FAZgzQutV;{k`O2+hy6zIKVYYW7&n1JD>J$_gi%Uv4rKF@B
zMqQFseg*p4a{UZNi+=Tc&WNI8FWimbM85Wl8_vb-+A4<Z+K!f5si9lEc>JtXZS?rp
z;Un5(1!-Hrv73GI_)F$lUjpE^6b<(_Yro#{c&U}yv149o--TE_o_nIID*`hpXCq(H
z7g!@};**QJpJ-rZq9O-@X<#HssjA+bhKlWMhD8)NqIW2T_hZFij8-L`<2j-_7`Lta
zd|;n)fHgghdYT{mFBx}RTjsj0;q6X`-z${pBP{c89hlwD8EM|pi*EFE&(U2GrUE|b
zj8SPnJ5wcOR6DLF@QD8bPbzUZCF^A&Q7#KT4IS;t4eV$pE<Og@zsZUO?r7jH5=;)r
zvYg_PZdqitB<{BxMrW2`v1x|6O5>Pj7@0(;!-B%M-T@nRsX&88mOXBDS8c8o*3<WH
zUHlag0UV#)7(jE1is4XQ)1RH!so3bap3^@*Z^}jVMXGPRzOnM_`QnnCNR|Vt(+QVR
z<%{}qws&*5{}T#^r3Ly};Ny#xApMl^^b?@c#*e+nrJvR)v1}RRdK}3=7#?yuZR&{%
zrZW%7+IwW9slUZe#KV-zMW!_-IaS9>khj(k6wekzaE(eFaE++=cx%hFx{-0c)g@h(
zyfaG|q8=4a7xOflLmeyEJ%xG<cDRq-Vh?>TtT@Z!Vf~Ug#u)+xZiD6<+*d<c`2!UV
zO`PU6#_aL-@AQAQH0yf7bnbyp_H;$cH-ZNv(JTUP)*O)*!+A3H%C9xg5jU(maNlX~
zMtMoz12vUH;`JYSB*bTvJ`!z8*K|h!-u5}(T+y$iqf<#;ox(xxN2*sKGwy*k`B@f?
zMWHBy=8Y2r=%~=!i!58`z3FrDkj$#iY3T%eqA(8)%ALm+O+yQh8W<RIslgpShZeEW
zCF|`ja#XR?2z8)snY#auuti63M%L61VWc~_cuANyiHTcZt*Jt9!(CpPmYK)icvzaA
zbsF>lEFS#0#FHnV{-3t4JRIt`dm}`pi1Z?i5-n49+DPA!Eku#*vL=!>OEPUzN?FHF
z7+FWwkgY<Dbtb!pB#b3HQNw$t%;@)fzy0Bw%hineJj;2WbD#U%H&xb!4N>Lkv<cDq
zg~Q9MB+s!|#nn1ZOWu$%ar;AKDvH9ws1AQLzxF9#jBNLpy{K!57Ukb}7=$s?gl87H
znXS{~p-Wkwr&A=zAgd><JWX+pG{qw;ybj0(l+vOQ$3Dsod|<)rP!~udFKRNXAD1(M
zwC{Tp==MEYOFREs*0BdvK$P(b07d3roS!IoI^}ZyPTzdIgUzWm%b}PPO+a4nmu6e9
zBcPl)rj4qyCQD97=y5CT-JRoosWeD_pYdBeid)0)a;J_cJzI3id#RI4mJ5w14!Y2k
zSz5&@qvHPNYL=>7nDk?N<R*bP7>g_K^{A@{h2U=e66GO8XCj{u6MDwjD1$bkN;&@h
z3^u&Te6@Qv)Y*iu%3;D{{@yc_P1(i8fz+LUdM<kA9t|F3jH-J5O8@z#pfTFw`f})b
zWaQz)QmaQEJYd?{DQ#NnKDE!W$8B5ZF#afYybwba37@{h$?w)5iG4dmO^tG%%|d6M
zYn?11R^NV7xO^!v1Rch^y(yWEI_rw6Tcue^J!}3Ao@Kw%c6N%?kMKYC_*ReUe&QSd
z6+s)I1cs=nnEiM91xN#pws25skh)%%r3j~~X?@?`9a&kdAXrmQ9TR%SYX{k1(C0gS
zJ*T=>-+58{qKA@f`RdID>tocl#q#N%Vs(XYT5<OlHOF=p5S>Rtgh|PtJATW&a)Owz
zvG~0{Js{0_EA{#4P(53etg19)%`ZPam~r8$@&Q_%`cs;sQ?pi^_ISr+s(Z|KymUp0
zo3nyrugA`~CFJQF!BI<D3JLXpeY-<j;gcHY_qZ}x-n0)4SB~AMd~yk2)|j@9>Y9@%
zL<xIO{B(7VG&1!aQ{li43BlL;s%vPZB${KvRiK5jWqWvptWx+bX6hKRUtr+i5huts
z?y=@raMil{C*xsJLwzpkewkp?Jl!a4E8+hkg)8vMlgOc=j^X5|hYlW$xVL#p<7V5L
zgC4V~%_FTzx+AWt4Gr6IFZLCV8VZJ-pdq2`(+P?nfFXIVA#OdFqC>6hI)Frqm)E<Y
z=-A>5?V=8_vIc5ZJODaYbZ|jdzpaZLb^H(^OnYU`xe0qsLzvwn?>9T9s#!|SNjV?D
z>TD^RcwWxKmul6IdcIO(2h8kPH@upp^MIo58<odd#wEI7IKgKKgtaiqi~CZD`@{ci
z@x&AKe5ZPadNn2DMzRcj-+ri(4YwQN1SpeIVu#B{AV5bdn$fA3=;*km)s)U$eEKq@
zjDKWfnfS6O8CPWyMhPiobW(`y^~4>|t_FA<F%;_UU(qb8D4yu5Ml`xl5lw!3Jwj5_
z(i0vQ_7S*;VqlFr;}uVJEn@FsC=J2*sZv)p9m9esy99l{e%gG5pQnk?5oWjS@Ob7=
z^8|8q+w5e5t!i_mgM+)tS#F>Xg+Y<<2_8zJhXnaRBMYwLxv{qf16`o~Rqeus3*pws
zX}goQCs`1PogDP}^A0VML{F_(^A&Rj*F%1}8>I@1w!}WM4?l2(a8eD2`rMbtYtDCS
zPQmc!N2K9Wr|0LdsODIghJzF(M_aV=KE3duplx2@k^HUqMy0#R+L0HK6XT%A`ylT{
zf(1{cnO_M{v=;y(jHP3zsJHKp0c2;nhRWT6URaxCBzcgRziS*gd_p+J)Z3uq4w>^{
zV}pCJk5p4ns(K`@CCsVvl-bL{XFKhyj))vQqpu)~Gm<u6Rtps=sm_D`!iHT2#usvy
zx`2%~lp1Lo0<r>^G1>`EV?Z^z<u!oX9BVz6ze)dwKoB(qZwv+?i<dzq64>0AiyYcI
zLuRVx4{fquw6;e$w(H$MC-(TC)(k7)5RKCF#)gzLooORz23+oucI+u|sh0FHE`~yD
zQI=`>6#%du8Lop0Ggj7oF<FqT3R3^}+}pb<ZkK^O2NAhvpxpM-GH8a+#R7z;3N7>d
zMMcl)XJ4_7H*1$MDRq-*A<SKoJ$x9)B@YI-kc}(o>g$UD1{n!5vij~%T<X3K4mP@z
zR~ACw2kgKBX|*XWH#gV#_#Y<dUjqxbiwwqhvgR1q2(JJOr<nZ96)WU|j6J>romJg=
zd~4c%^8@bqn|(Z(Afju_V>bE(0+MLRhQmN^(v{UR30fz&1(pQ%NLbzn*2Y<pfp79T
z%aBRoV~xP3q(;xC^5)mt+57~u=67)8Xlp-l7z4B?_0{>b)AeZyephC~g7{DBgKCX}
z>o0@Km2ltrwsU}(V?U;+#b3#pfV`tos$z9z+@)^v8FPbx&xC}Y%J^4``)SBI0WYQa
zTZ62eN^|l1sA<v0&S1I7#nS6u>wfo6Oo46p3^Q(`u(aJ_K|t1P$}w1GUf<_ww;SQS
zTp)AMSTtBnxDIP3R7;kpHAgN&^FsqHjj=h7QuPslWxq;+)r1|k5G;#7+NZ@0&w2ZZ
z3kg-vKgtBedJeSaW!ziiU3P^o+87nsy)cIU0n2;Vyut(ln`pP~a%{s*@$zMZsZ@u#
zzn4`w<2y<74*Plg-<*`F?e9;;OAj<B)GPOwi<B0sO(iYiQ?}BNN-;ni_)=wAaA!Rk
zXzYis)&>E!C#JN{A+(Jy3`hgVQZaW{=Mr4<IsFMqF<`op1LWV9J)Mf5z%oQRz{s0$
zpOw>Ueza})c}`V&d5yFpAYUR-*na^mg_c-?KN0kAr^*X-S0gKbrSildw{GAn0p`O{
zR(`XjJYk|CzP`SGb~HIyzf^0ywfKga>n|{~djV6c20~4#(97d8S=dP_8#a}I*o~3O
zvpt3+Z)$bn?<Y1z<!(b43QB!)OxBt<Yad#564F+=XJvww=cUUtlFwdh_30kE{ZPK+
zxsi#Gp3j5s6jT;O2SZ9p255{A`+yJga_(Mxm`x*EC@?S(gJv$4){!BUECCPR3a9}t
z?UxLq+K(0bGdBU5vBRY}2%<9-8$W`3^U%oYwGxs&#=R8?=30{FrU81_@GAw-g4MS`
zj05G5=%4+rE%GAHO9^Yg&c*xAs+E8pZ=a=ToLfj)7fSxt>T(^odn?gH(C<gmXsorD
zmls8sqwOj<^>R$I8eF+@P3$V|=--GNKe$-R{0%jq+*0F{ZFS7bd1%->#1=u4iCOb5
z@C+*_`iR|rsBrkX+C9sadUuh|Vl^MMy><pj3|%fLZWm4P-3#~0yfmC6a5;w-|I=IM
zi5=ZzS%JT|L&0u%R~hV%rc)L~No@II^ypYjPqIdUvcBdCqzh1HzgxsLR%WDd{`9%$
zU(^TmGKwCGMA?b!`IchEP(tc`84@4=eb`Zj&F$DISQdzY`1@=5#y`TG8yN_^nm)+x
zL7$&O|M~O7VQkmMaiVp_U2C4;J>%7>a_y!z-r6y5Tk`67y))@CoU!e~?s#%B(OW}$
z`rG-QeHsDAls)`CSHovDNUAy4aJjQ`b$>}o2@nO7Gp)6vrR)37&Q<8vJlO0;6ra3+
zdA~nkyL`u2?SM=A;chok86loP>7bXIa)*ZTH+DM;LGk6H`{BRH479Os-*Vri3Yp|;
zR9wA0UR1g~CRxZD(LG+iG_Qb*-|;~|fajVRlE3uToCoP~q_+G**mdC1k}1&sXrDQl
z1Gr?q;w1GJfJRnKHevBTr<V9!B+0oIG>g?eJc>wPFmn;0j*z9lRB%@A_O7BiH0d}$
z^VoSPC0BBBaiPxwraN2KPu8j+FB;8x0eez&#~Tpzz9lB~ZxQOCj>4>t_3PH-ZNf8`
zoiW0q*xJXQe5c>V<!f#o7jJwlk9#XOLnQn}-iT5h#x*nyRj!e-cI;}R{cCdxYe;WR
zLf7l7H7AAf%_f+UjIrbJLxXo4!Rwt{MLx)Pzu&fbvg>tn*_G7h2N>7rWhoLF801J0
z4o8iSp=IsGq#WnAioHd^0RwW}Z(kc%wMP8g`n|>U?x^{&W8ciM!<GpCDKdkJ>AiEj
z;?PtUXcV6CYe>||4^%&#Ohx;!8u*&cZZaC@PqbBTU;9+j>h_=sjFY0;Wo6LAQz@w9
z{Hq|Is@+!70jKEE6Xv1KlNfFgo+=3F+R&$@O{M}<^p8`#?>6uFwyU%-*xuc3;oOpc
za3iL>P9$S#_%@eJz+0Ht%#7L9V}8&|S6{Q+?7CAn=h*l(ZY(6?HRv6)<1melnla%3
z@s%z2*x>PatFBxN%n#J2&5cqWSTi%y?3*`l)a!n^D~>o5mV4%t?W_FhMRYLot<vO`
z&Pv&>|3UMwZb)s?F5^GgS;_=#n2bE$G+mD();AeMwkaAq-nI7LF(qH#lJR|Y;kK6O
zr%Gr)Y#f2pjeDw9-K+&qG?n!VF!h5oZZX$TIS-sXC_A9M$W1HPUaaB(MX}FEJ;1l8
z;MR=g%q}=wAVj~e`IXncT>o%~pi_^|3_TAIkIP7$XK8>t8ng1^|D5E%_bcT%2ZD~=
z)#Toeh)rc``5x)tS9dgxme0q_dL>u~%Y0Y_XR#OW-X+VEK!4jBRITu!m!TfqVev@&
zG`WC>*IxVR<=iS8Wzm(+b_p5#ZlI`_x(0Xu!)uIB3gWdZotVX?LdkY9%om6oPNuv0
zro)|}iwC@*o?`VDfXDqD<lvNvUL*X3%q-CV3;&)e|K&P<(R<{0eqHy!OtU^>qO>P$
z;v}LhBI|j9#isLoWyXG(EblS4UZP+@yH9sYORFu@-pTI#a{_)pEWAdO0vf*pr~kTP
zg>MPc_zl>oU^8v5nQH_HT}#Aac%*C|Exwt>0DV-qAk7dC%%LznEeZMp(C)<nr(F4-
zcBhGFTvUK2wk`aC%qtrLr1i=p+X-r`fU$pTH!#~}vP&<(dvU7Y3=Xn`ARkxAs<WJF
z5Lt9?M3qn^A}stU2cJHd0scQDB06bjFVsEdv&}>TVa9dN>VId1-i*Oww>Uw?>CU*6
zoO#D&<OpsFds03x&*gSuWk+3sXA}`9a$5yKfTPD&zvxqT&c&#(FiLB0RLddYwJ8bs
zPM`4thqA+Q{e=#ZK|E5mj7_?Fda0nCBx#Qqo}1w&R^F*Jyy*gGG4Z`5xUT_U`!Ub(
zEfBDK?Dtkpl-M~CuJvIG>jqrYXhhVa)i@z7I6V|=OP;)OClu5Yf1aq>Xv(97{i<Co
zWkOLsdD&A(LT~fLoZpu`82u5hxYEmlvx4OTM2%3QQ3A*4{9^A7+#`;Cn%MNF7`Z3R
zwQtpYyn%4P*=9l2tXk5@1H7N1FLyWk=N<*$E&*91{)$)f1Zd$r1T@)7TpWQv&e&`>
zqSfbCXoq!k?D3adxkm5Ot!jczP~qrUf|PAD7u$qa=wgvkiAyT<qp;a5G{1bgcgp@x
zN9kWTKEN;cqg0w-%wC94S03{i$S|3TD4ULpKP^@~H5ErmlB%VqTm|zTn=O~emI!_1
zul2u1tH)EmzLDzFsQA%sRln?#T_%X+nY4%4a2l=`5~1_sk6+ZqP#n(z7l-}<%vMG_
zL{8Bek;!kekUDY}Kod?J&pWTTE!f~$X#3?fd4-UZ>qIIgo{`!KDKk6h^Q@gZ4`;@V
z11Ev-6a5owRNRAYNhb{#2}JciTeZl-%*N8dUv|aBqYM_uh4qA_6AKq#7~+36v(_qa
zGJTzXWdBzbsZbz3{k?dhtzpljP-CNVTXAMw!QE1J|F{qR+0!>|X6NQ8F2l#0GoNvH
z(#7RO@Qj9qhwonz+Ca}}!PT9ErPn{oGVAAf+0M`~#OIvTCzjC66@DjDDzAH!K3^M=
zAt+KXPuGZU3$%CTd9ezI@9AEYN1_G6^;e3ww%m8G(lqOCsIyV4Co&YLMKM=-_qn`Y
z9>R7B!!fL`rWNm1CXu}})!JLs{&=oYYH_waPMYo<waiA%-YJk8%MD7ZM;a$6cE<1G
zOX)W;P<=vg@>wneC1F-AQS2Yu#=2Tbo(oFke@Mzc?Dh9ssl{u-qZC;(YrI#T0?$t$
zlJttS{b`$5DQtX~vxzzT4_o~-N?@wFhHlpn3;o}xft>mf<kV7`MGNKDA}s$8N^o7#
zF-_vS4&AI$vg-8}n-+H#{o6-y2(#a$m-^`>gNP`1OI_}|N-e_v1`TOH9^IwAT>tLt
zo9`Jbbc@-X*(i7X{r_gns<H|izsc*mbTx%;aM=I)1O%Gt7q>Xh_t$w2Q9Dd^UeM{c
zdm5QP{iWhf+vIfg230pgSEqgq^uJ8V%0ez#{1w9PY9xYH;2_y<a-t$T{d*`ixS>>c
z0@R2MVYjEsSR>dEF#w1lg0LxOeE-k4rVHBZ6Jw_eObE90rhM9anYmm2(ad!dX(+*#
zue9Gj=Ymh1nEvt}YUWo1p`bE2IQaZS(w}xC7RG#kzq)JqDdU|Cru2Nmg#Mb*GsEE<
zcdAcX6nGYo*X0z?G?6(#g-_jgwNl=4D3M;$J7gxGws3zr(^qDP02FR@Z8s<9+<S+5
z{`D`C7~)TUR@h$>zQq}_m$6_o*!|6qBmsILV$RLMmiB@=+5Uo*5kBcW;GbT^e{`@;
z*4g3D1Mk(X@~i8a>U*U0Xh6jwQFD`(tWIq!j%C#%k+lA1ohb^~x(lw04P#<A7k96C
zW98-k;Q5HVOxJfv0gheG#nCxmyS6n9%z`)eoFaMak0a*#kn2P0fvII>WnD0H{r-od
zp~wgjxIQ_jeacwZisj8&G1f5U+O28f>wlD8oW7E&u|U~paYBMEInuC-D7NEwQxj<2
zvqgZ87&(XSy$xPCSTXt4fxu_aWY3E8c#}{<v~=c&S{0T)e{j&UyWFQZy_8%-)Setz
zU;Iiz{$#E8smtV?{SS)$NtcGfNq#}&ukZby<p)^~3lTIhhnQO42&Wex=F%yq->VQM
z4waD9mCqUduT!RXwZ>Z&85sU33W=b_tm=c5@{8=r!-qAt3o2-~B9Gl+e)YS)qxgu$
zE?0AnE)^;%pVhaR(VsNnDQ|eU#7~f1Uw$l3C}vhP$@v9b1Lf?X8v`7F!v}_wJpK#|
zqp6}n%pwrXPKGC;QFp{vGtO|@GHH^ZQ`aRuBZFwGdF507W6p|TX0?|W`Q*tH*G)E1
z9z;3FYyTcWMZ_Z}X&nq)H?flEPf#RjK}T&ca&c1z=B&7kjtVwU(Enp9b>%3^vr1pC
z(j3pM9JoPzYY10T;r;t-e(h6S6VlPuwQMGJL`d<hUpb-FXXmdOYGTp@%Mh(K-4bhk
zh$Ftf*`Rg{`pdGPJ+;VnKVI=3b0ac%^<6?jf*9oLA!xMSs>J~L9O_8jy32y<?vFTJ
zD3l>vGm$}e*bB}@Eh6__=B^cs!mN+9;zw3SVRMXnPcNnYA|x)((L0(_rAdk|<qgwv
z)A$pu5qL&7$u-z&QuDfLlCAbz8yXt+J{5Y|<8aryc}n5w-i&r>TK>r5hw^7?L_S?T
ztLPI$3ZR-yuqZvItIkvPA{2102cmy2B%aZ)-=_SZF&ggnL&M)Zs?w@NjC$li-H5Sq
ztnNh_?F1^^nVV@Lxh-Gcn2UClFi@;H5EG}k);}2>F51QS&14g7s7pc_B2v<ij#pCa
zAACQBF4N-SkVEo%utBh+C>-zURDu;Xh~0ucLh7^LsBWMJb`KO64cs~RiJkfc#)*K3
zycGOv)!R|j?w>9x9iftfl$a)j*MzRz&Y($_DWz1cZRY!uqVjw%Hk}UssVQqI<@{rQ
F_rL6HbISk#

literal 0
HcmV?d00001

diff --git a/docs/images/prowler-app/import-findings/import-findings-dialog.png b/docs/images/prowler-app/import-findings/import-findings-dialog.png
new file mode 100644
index 0000000000000000000000000000000000000000..66fdd44b30b5760821d3ec193a43ca0b5d67c8f2
GIT binary patch
literal 172689
zcmZ6z1ymbf)IEx8ad(Ql7YMG!gS)#!A-GE^5*&)VTPaqYqABjQI1~#~iiP6Pm;S!*
zz5jbJYt5QT)@03|eb3oP?wyI(0xIEPQDPw=AmFGdE9f8~pb8-%AopUR!GG~*5|4!M
z5J5UhatMtx)W`5IZuUkh4jLK=9Pncd1QbL{1k``0z&9yGs{iNsEg~BN@_)Z0At1y$
zBcS~6IY9XS-zOEm{rk`V?2$^4{_itTg-VeB?_=cNf2S_FpVGm1nD3O0K?n$>%>On-
z6&<Dv1Oyob6$M$n0L0Ti%oTe@-*a<Gyg7}<%{ietb);#gl88Y}e6Js7<=RBCCEtGG
zYY1&8<%KNscBxR8@rzi*GO<|fr3TRKrh+Noa3s_u3TQ^Da|;V<h)i!>{1!VmJ^W<u
zcwVQk@A|!IR%{kIxTfyQ%dZZXbCAm)sq<V`=yb3if&~mAbmA0A3-?IJ!R<?J0{XL4
zZ#<h5to-dEc_K2G$Sw8$)x*d*72AjRjWR(3zIEqoGbjn00*EXFC;|ilOc~p|8&L)x
zMs*ot!-VFaXjbZ|2`$V6Cqv!$-hBoG>_|yg(ce=n)plN-=oQlK^;(k&MRNLDbvzx{
z8Ou`dZ=im8NTBiRJy4&V?uD+>R!K@Z()Y)2M6}r*>1}^0KqTz3LsE~x)Kj4M=VubH
zv#bAUm)ye0Eju7Yy6SB?c{z1Y`MTe4Aa0OmoLQb`shXUU!d+TRwsqzYuhyF;DtF2c
zZj!X`&W23PQBxlR@$Ox661k-;GlY`_G0n(nTj_rIPCJZ3ka7@+tdOFaQ+s66QQgw@
zy$D&2FFrzrzK*dl*0EZ4eO`6mGhYiqKStDae5aJUPF#4RTM(778QWT7d~QNsLOlmb
zPBHzBvWozEy$I~sq#QL_o0#sQnN3aE1$|eGo%8uTn}}o9IfYSdev6;e0&a>O+IN15
zlNx_NyU&!`<CHGpx1g4~6yU8_DOS)fXL{x;R3u_aR<TTo!COOAJB7dJTZbD@>^LQZ
zofm<MT7r$c>->cfUDV&}Q<0nswIe_r)LK-;$s}b+)PSK5ykq;RAh~Rd*kpthF_38{
zia<DgG(`6tn>H#?HfFA%@-}k6<u!laD;4hKU2J!O1u^fBk3or!=IDne(3kf>d<(5=
z%te6aQne^6_v;4KX))<5WIg2WeGRqgt-T#6SJQW0(b{~_wBUwja7dBKOX~C&H?ntH
zvwsW`8fw${E>xu71U7JMSpb)^_+9$CusN45ca}TuD9dJyLz*=>8W=SJpZlG6)g>KO
zPNS>%YKY={waWjn<0c7(Z46-LMa1Bhs7d^A{(_GuV#wcGB&XV!SbbO*H#?t0QdZkM
zjpTRIwS^U-|LJ`saLWZYI0VE0$*e+qcH9f)YD;|^FXpSAl=i{A{L-1D^PqdHD&8w;
z8KHs4ayhhy=S!fYhNo=n*Gdc-{t~q<pQTetTplt3_pTJ%dags8h9|sWa7H;a_kOUq
z)5%zu16}CSWoX7ER|X%^0*Yci$;W1R8N;O4<{aw~$266fv`f6n6nO>8{I!<gXePDp
z@);4|M622cf2mTKu6-uTAykbj!bT=L#JOe_B(Y)^(=LX^^XKYQpuuq4=%K?t`uHn#
zLG#aIjjY{wlPwadD*B{)2E!;E%mZp=I)vHv7}2!SYngI_?`dtO(e}U|0uNW9j9)={
zq+j(dkV~AgPxRF9d~2tp-OEah4+X|b*X9e*pYeOYMIYEWY)jN+yIU#@1L%tL*NR8>
zckO3Z6Z!snPdIMFU5Z#aB3r#HJ-wbSnv{29NtQo~bV2KthWrlq@*hDQxB5QZf(|0b
z*j>5LnqDUFKSendPBO*1D1l5i<gZB4v#@hRL9dhR+w#EwE+I-+oK1kvBv_m4jVMTR
zsmiL%A#oau$rqW35}@)CDXbAm!^h2O5qVn6M_Hbq4+qj=wyYsxT6E5|oJ&;SiX7iS
z4j=#I_#d99oh2$=iEGXW9L?U@=1LRoo;{{+o8HyM6I)w?b%qTail@Dkc@&SP9dV!h
zU2oWt1${nQ^Z>bx+e3VA8rMBYZ@0sX=WQ`!FJ(X^8xuSeOOw7Bt=-Ze?s}K*gdA3v
zRm0mSJY;j!?9s<gD3Q9hwpC;4`j0pz<$j3BM`W9=2);HfW#PchbdIoL;z%sT`PPM(
zou6&CJTcd05J(eI#a^SUy|Y{`it{yQ0q2i^>+R+(F*>c^HCq`~V;53w37|UYcXuDe
z78l_C<K+N^I^D%nE`0L$_ic{+$jRn%%7$6M4IaADTq1g&ZL^`DR~4{oX<5hO@e=U5
zzm@@+<B?JpH*17?sNnTH<gGc1cQ0#~5Kc2qzTga!cU%Q%6s3#oDt(Go4f+UbEK5p(
z{%|b$>GKQ3z7m&xTIz3byVLntJ)sr|&|X$OaaHh6vgL3r+BczHboq>l57eqI!-sn{
z96O<UC~t&|O!mX>OsyzwO%S67MNAM#?U)E!4=ie0arsSBobe;}E{Z=h*gO*p$J!&4
z(xkH6ySG>`!6mh&`HHR|gNDgsx5VsL*J5d%(CTY=HP6;cn{Ruqk5VNGM7g@xS)%r=
z*z3068^rKAZD~2ij&f9YMqym&L@w>^T_r}uyC^Ysu%g>9UG)_A>-Q{uRGacqrioKR
z{rH$8i29xdaZv?TQ+OdWh~r`-&6xtA3-u4I;PSBo1zb%6@2+L}grm?9y;Sw$cUY&B
zx1W(R1R&{6P}?Utzl01vf}rit9I^+Znmi)tV{nwdLH4U#faIsaTD`YXIGw&gZ9Lz<
z;GXc0xkSF^6}_|<0as6NdtMz}Q`65xejq8hX+xb>;&;gG_PQCN_BTA^7yDFA(|~BS
zG)*%{@(CP7Brh0eQv=LmD<yMg5}->PW>3om{AFjnX*Pei8!|+HmcRE^gPJhk5vc-&
z?K8!TQN7M#cerf>f9B_)4)bC}9a3MJ{cAn6O71lTWoVm^&h6*U;G_u^ExB>6$zQMk
zJY`G7j-_*{EPXgwY6Ge{qPxV%-c0uHM#;s~3h_A2ST@NtSoGx^wS=(pdv1j^hpv-)
z&Hm_t$m2<3cr%PPSoHK5wJ%~_jt%3*_vF*PtcK10=xUaPOdU-6lTP|u@Spf^_uUHF
zwofO`-|VMgaa**w`8fRA^p8iU>$G$&+|<u4bfYLX?zO8m>T*dkY7glOxGRkvX@@E$
zoNc!2OI(d5d(o}WlqrHCb#Hp&?I-<6Z#Vr@R(_0(OTP%JsP_SY?Q@045BN%lI4%@?
z?A%q}@7l&{d)ax&%6}55Tgh>OW^CV*yVN%+#C#wSO+KfJ{24$_#Fi>^`iHusi3eZ#
zbH&%kufELduI|b>=EWpBWPw3}b#18CDio=-QAyVm`BiAo7DQp&TK8<MWG*k&1+WBr
zQ6&J3Y0_KNAe38FTTGmoDy(nfGBp`1?~yJbXXSiA9x?<`Tg##gR4`k9iktmnXvsml
zI&XQg4my7xk&TrEa#@J!zSDbq_7&#mH6JLg6I;0M8~mFUS7N`py#3ebE_Jg|2&C{C
zSM*M~*)OH<tvgw<e^sY1tjbS1S7Xw3Fe+v@b(EI#X2sQ#-!rTS7L6xC9~O3xx(l_m
z*mkwv>J6O6!=quoS^Z1@8r=WztBR_T#Lz6LD6DSxSvWscW=TWB&h3c&j{}JqZMYfr
zDD|sLicBkh9=vi4e08fdHqRnkMN*gQlKuA|e)1=uW79Tua>5fAMx?pNw;Mw}b}OOh
zM2qHZeA1c~TsJ;5q>>tgwX*yR?4E1Dy2rP7p|S@IqPa(72L+mvv&^IKJ`l<VQqL1*
zOq3`%7bef()@BAh)*5#C*Aya?PS{jEpkBq(!VbaDcv5Dk&4*IE4T4{pX+4U1g)G}I
zdm1b_lLHqPA>1OHPPi}$12WJo-)Ny6DPxKRRK;exTT&c{%c4br`m%Ema`x+nkgWLc
z-i(wI-R;uWW$^Fd2&1NfC#N~*s*4QV8Qec7)3ft9U%Dht{_rbkDD!{Yz2bX$O64!Q
zg8K20r*%y+uP=HgKUP;OoXw!*3`AhcoXIAqtbd$u?&~lz?E478%vk@E%jkRQ*r2DW
z@s1-i%?jBTu-IFEhP|^KW*n#mlQ`H&c4Tub*&hP|9!z{}eEj0FWb8{CIFmRgJbJM8
z`C)_Tboe5|nzmbh>kiH3_j&hgn>WN%w5{5wZ7|j5hI`e!!B}aaS=c;)o0HS<6Dc}v
z(9&JO)5D+7dDYbCZf>W&-rsBRyVq%h!OxW9JG>u@Xt9$W04{q3qsid3+l@X&x9%NE
zug6dM5V+rrcxa@7`jPR-ut|CFd(OLLPrYDYccJ+nPJngCze#(SEju^)o`fPInsFZP
zyXHOXV$B}s$Ro7Vx^?2TVV!Rp8<7!|)nrZ_+>fKSDz-A`aL_3lQY^J{6!8)!2ib&B
zi1_0s@)r5i-X~7Kl2#C~Qcn(Mlp*!E{+CV%5Jhaw4uR>m(&Nys`{*<bWo7@Wr?((1
zsn)3~@&(z;nBWL6qzfgXpRD2ax9ihRj71i#*B-Xnk<Vz(h>bVB3e(Z}!pr*BF}6(p
zvuP;#+PvY+!FEdT(W&4_R*wgj>8j80_ub?wzQCvWSyJr0eyXnJujmQW`Hdw0Z!8%N
zKO>9Ku9}$==HuVGZ?nuikNb}*_66tlYp`QSE78L2ni~U$1W(`C_V_oH8z*Ocz1=$J
zXC%7y+~x`M`*AEs>Ur=h@=*ciFV~Uy;&GTZDi!GC0jD``-LtDUkkYqGl>M*p5h4{H
z-Iwvd<JB6x_p6%UMn#0fS+5QA8;LYUcK|l`K=Gv6<yPbfC(O5fgT~#dLdSG1%G41_
zKgRK>El6ngyi*^Yr@W!wb#_Wn&X4L5#b&qC5khA}DDYZg>@9+~XQJuKA=an!XV*JL
zwC7gU6S+CIb+HGljS1zZNHe0(<ozdWxcy<1<FbuqRq9auI}$;5`S)YaPJK9{;_m}A
zgsVLMyyUz+*Ay`W+1KaPPHn6|DbMnTh2@G7_cWSIZ&`M}OEYR+r`_9|<heWU%mGNP
zo{m+E(S<oxMbs4gpVw1aXlg38Qhqu7@cg~8^Jy3K4Kj5(?x6G{IV0|I|NUsG3<8EE
zeC$ciUv4mGB^5?BzfX^uo8$%fZ&dl&UBX(hXLVvp+#~UW8FV~dB&V6G58i*5)=Lvb
zq{2C5T|M}Tj{E5@Ilb?JSEhlIql3c2g*IC-o1OkB^-n04<(=^NH!kbD!S-OdLGeW%
z(_8g))U^jGADw$Wgh>+Iu}!~FuuyunA<~&epHhV<O;GQL*LD?{#P5^cCJ5snhGCQ!
zVieLORB3etNw<~%x!&~OSQB?y&+1|o@V998-tauAt2$bKO47Jb4>#2f_Xce^xBoul
z_CKyhcuXc1&GSXCU!EZ~&$l%0e{2-LuKMw^X$oEQGijdebU!$Gv-kXI`i^Frx7@!E
zuIIuRyp{e*n&C6ZWv_W&G^Y44Bnoof2WBcZnR@ubx>nM5m0ctXo|PT;FIKcbq3;sD
z<4}G6S;y_BcV=;tC)Cm9+Z+xrd2<HZi1^MYPdaINPM)>ge`(|D=RJcogw~vpwe+G-
z$^134hNVU+1(OR4fa!GoWf-CaV&V#2)wE_EL866lFG&g8UCfhanunoAt(H{^vHvZq
z3gR{qxCKLRg)MnI`r5Za{=b}ork010<FTpot24ewlU}>y4c<Hv%OvUJRbB%PBGc#W
z*=$!Y9^;mfjoTu3)6qwB@mr5|7QZd~k9!2r#x(ZX=}XMZx*Z$}S|OIveD#jGcYc6Q
z-%+i-)puv*PK>dm_?(Vs-xTKG2s1A60Fpr=&j183L3kulFJVAx4-UFB1n43h1)aBr
zo%6@A5z|2r3ybub6FvhO#n$L6=F!CLH6~SjH9nY!CxmM4&f(Vs3WCm5{j4|aj_jM{
z)#PyH2}^xX0OI>vI5z+sK|8%UYJz#J?9lgFJo%hw+<DKG?Wd0e&(n0}ZN0R;f5X)3
zw<<iC9{}!__6p+Px7=sH#Z0HX9P#!!)fS7~W^?6p{@^hZiai>9?8rAa9mNw0&jcMR
z<wrR*^Rf<D9GoQ8bs)<|+X~|coC+F~b$n$z5u=+4A$HuqAU8OeTF+s-Zl<t45kPnZ
zoarJMZ^U5o{p(*45*!87Vepb`VV?)3xPNx6A<<e{md38+!B29P5NM*$3<5^I(xU$~
zRMq`5)F=Xx<ORL)*PU4x_3(C4_6zLN=a+p{5W573UmNp4L!Jq)%c=E$g@vu6PN(d3
z_LIKU+z=l|<IRw;XP>u~ZObpVxZThE@LRoe`n6eI{uq*r*1tTAC$&QPZqQiTiRPAO
z<1>kqFV&=9Ua;I3S1zWRMla`?dzfzbl7<0I^-7&c2JzQZsiDpTD~FWwtRH+^dq)hh
zDZf!pGX))yM>;;(y<b_F4<A@Il&13dPv!X{Rggl@sjOqNRUSJXr*3z;u}Mx~+7n3g
zqI6jHd_zviw(N^-<&7OpztjZqfaH`808ian<8ki9+*duXJe)9<-N)i*S6_dz@eKc?
zG)Hq)Q*y5bE0^@&@B{g$6t&_xD@xz%Uk6SbcGJ1P0PUAu?<czYRh-+;SNLJByH~vr
zmo%*@5?jtOeNJn>dl}NZu(4#Nktb9^&&u03(%wGjH^JRgw?#dFUxG*7#m_hBMxUUV
z%Y}JE?jn)R@#^B<4<GuLsB~72nzT=%HCLP(w5_MSFNP9CiwpUF*!HCjkNP3`P2|)g
z4voqS3{klrZSVZ5Eyn5iZ*+5HBqG1w=3bP^^;W51o1cHTZxm(uGFvz=Em+Az{G})#
zQ?B}uer$j`j(tscIs5OQihx6V?nAeeE{@!Lm`;YO_vEBH`;L1q$_G*Tx98lhOL&Jq
z?<{)*RABzE55xYL`mVMd%*>}CCMD<FKp*;U^ff+x;_^FV2$!ij^qt-GPcEJ@TisE@
zHEr>6hGkaQm#qH&nY=EXLgi;Jcw2wEm(eOd>Az;oW&SlI&}1WUeFKl>_rjCR98glT
zym1{Q53B!v0u{Gr*^7UtaiYOi8Sp#|RPA@Se3@dZr|w<rb`?)Acs5QcPo$P=Cu(9m
zbfy4(H|&k7YX7?D{80aEbYmgFw*H?s|FiW|l&M=rUpKmsE&6>a_3o<MmtR}Lk`vyN
zy3^BI*^>@^rW+SK=Nvr@9p`)^c_X^<8~?4?JV0De)|y;<s+88eJovP)c*U_l8am?=
z982q45U?9ROTa39$ZRtkic8)x_PKc555}9%F*DVVM18el3t6!L9rd#}5C*ZO`^&^1
zz7=&T3Ud6lY5J|&puvRkhi4A#H5DnB85?czsqScKh`&eoPTpl|bV@)0yyW<EXY`xP
zEkxq%E(4-l^n!G`<oJ{gb)M^D<?j&gzj_(y6V!D6R|ZkPbh0KFz16op@H@Ubuz@E5
zC)HT1c=?Sxo?<)JlkuW?i90O#Z&fW`rgpb{@a+uk<@j$7C9nj&172~wQG(6t7PI+S
zMNWlo03Pas!Ck(u_8k7{{J(ynB0k@C|B_djmwn&1e4yR4TP0&Omd78k@LY>94*FHl
zWjOoH3uE)!n!p5mJR8=tEkYDZ2G_gLf};YOIxC?>HU}-<kP3G7iO*`D5?7+llP8-a
zG#%Sq@CvGu9eBnieA=(wVA8r?b6B1tj5;-~fv6j74uU{zZvO;>QDJ1lF{6qaJFr!a
zG#Cp!ZR{uH%&Qhy{@t8n^h4slv+q9d7C7y9^~Uo$^RS)UU+8%`F%M7rVR@wcTNM}6
z1S`w(S-S<72UexOuw}eupXpzstc-TYnT@bt4wqm~UeXl6zH)O3yRy{FU3L6)f3L-c
z@93xL6pBq=gVPqB)4w^xkn}1xcFWt%Rt-0iurJROli@7MVmIvNHy?W%Nj1aPU=Z$n
zk@!#3i<Pc^rmTMJ<<?DBrJd(rgGX9En7$a^5#t1x$Adc)k<z4FsT+2c52=68c2o*`
z2TW!i%2L3HIK&v)<QXjK(D0@H>+<qN4iX*(&0_yuV?$$s!DQ|&<@Jj@biyJ23Z^?)
z--z827?1T=w3ZY8{&`J-&WaI}R8U@fSiOHRtNLLQBp`Y`Qwu%CKg~mbATkOV4|Gf@
zPj)SeaQn)`UA&a}H}^9Qo+KMj&xPBiR_k}m+wBf>v!EBvd{(yN4T%^)__YY%vgb;F
z;Dq;IFOmBWfahvRx#;N_YvSzmX$@FC4m|UmCVIwR9mm`X8TbOPXk2esTsQub8Co!r
z@>)>p&1JrA?0N8RuA%6kMMM{&BzqIH7X9{b63x_^n`c6<p;<_BV36Ke-%B1RBn+Ka
zz{RwC5oohLI(1q<vux(uywY_a^xV?tO(t~M$>BctDJVMfCgpdvROiTAJQdwH&Nua)
z<e+5SJ#igsej(vq0VoSoLSm{=V2Gp>Ux2?VMyA*A?|9<pyKP}%)Ux9!-CI<{SVZL7
zdAAMTpCz9KjZSvwJJFcZ&|m8mM5Ea<byHGZJzVtDUcvNXf(IL~Y%8mx?7qRY=Mg*$
zR|;qb8ohlRq@yUjVV>?^g~J9{rHM_?I^ClV81baJJf6Sf?2cB4%a4Vb^9H{33jWpI
z2z=bw&dYqJ4YiBCvxoVfW6#`MkEWoign)SO>vs?T?)!L6e)b?Pr=!Yq|Jon8dwErr
z%7LAJQvVxN{&WKmo3rnq-rPQRcovi2{Y1VMk>Vk8{Cgq&Rx<<W;{-GVL1K0nuxAL@
z&z-~clzUjm==8d;(qSWibZl=7^XpRz8u84f_Cg=)M3A?=I-j2dRe-g|JKqY1^7iXq
zurJ8?g$7Jr;|j9vr>3*Ge#;DMn|@;7Y3#;b5-xT1gP=%Y*0`bu|6-5sxy2ut0k<sg
zC2I;sPN6J4R;@uZ${R_(OjnOU0lyAg*o0h~Hm>SZWbS-Zi(OCtMA?zNBv4YHwcn%x
z-DYqhL^aY#_h!)Eu5haV`X^f<e}V>wAk&{CJ&A5N#f_g@?d``G?5CGU4C9piCD_{C
z`+CY#*_Fhb-b`QBLtAn<!Yd1QnSb+|3d2ZXzt`J?9*wsWvxUz*?>2so$1xO9<l{C<
zChvJ9OTMM4*6l}BpSX1V7`<3=mOgtY=&ncv=(V4O(f<uOB`P3DV2MBciWcpUiJ8g2
zjfrfx7)@XD48Eb?-Jw@y;_DEY{M0ygUvxFz8UIRwF<zMOwX-to5H!r93IMewX9eh9
zwbc1FiZuhoiRpr-3EHsooRv*UxwEQ-)?EG&qVf2amL(3QN!KqGoaDv4NSIzK;(D%L
ziL%-9<V6V%^4VR4h(uhJqDKlqn_{ibCQt|oYXZAc@rio!=<zLjbNEOC%X$F?<vBu8
z<Vg%`GIl(ZG_=CoFqpa|*|6w%@1djq*=Z|Vt4*u0Nn+M_Jy+s*?7S>Ua%F9UUUn7B
zE3=a_#TTS>>FT9K)qG<=$rp*y8-@?b?kH#b#j)l?f=JH$7ZT?a<84Kg;$+ny#YU%5
ztWaFcT?WebEZ!mQ#JuXn3!c4#+ML+vfHjGeYX-R~<i#=a4+8_Miejx3_tnQIYuCD5
zAP(*gEc=w@%0_cOT$$9<->0G~<c3Qsd93z%8SX)<(`?6Wn10aN<^zuZk+v6r6V?oR
z^kI80_%+>OzN38AL^FS+7{*d3S8cSLGsiHPk~}T*&8!YtrU^>9wgQ#YIK`0c%Ertj
z{~zjCwoHyn7C`+OO;!QNSdO7a?gRx?jnT4+c{4?52KZHUR!dG=f872o8*}l#F3U=(
z^k`Q7*bcWTE&BbTW%kN7UjWemz?$uFVYa$7bx#x?%4*!lhbW@qQ%Ub+Bz^vHdP-ID
za3$3$l*bA4WeH>!HUSE=Z71%@zA4Ql_a@dA6a($xb{uPNih_ximyDWS-gTGgNI;Ip
zZEwvO&OctPttw?)mDHgd{=t@vKz>vh$^U9rQa8YaTp~r|<qK_fp~x2<)v|ouG!)p1
zihFUz=um9u@Hn}g!7!MnbUyoyrw(ZrOPpe99HqqT${QkUm?-aXCWtpNrGO-mLLb0e
zI95QDfY(!naYZT=n1;`n3+I~4d!Lu>o?msGg?=YK_O3Y}p9~N(R5Tj@1e+nwM?;&n
z%n0Tlb%rW&3(ffm7zkxX3+OGf!s-SDSLznta0>Tc>`=KI!x-(ooTK!F5}c5U(p@BX
zq{Cq?YJl^n)f(f}>@*$i?>`cz){HcAz9`6=&9yafacO+F19Z*tIk98Y-h)-c5_MWs
zq|AG%AH4GUXyDhUy-;|$cfhJd9|ZldvpC^@He-8pWo4eoMNWgKE>n`Fd4s7nV9qBb
zS|1`g45pXLo6N&z2di_d&XbqnwCyhi{gifud8+}o|9=P+;Rs}m;0V;YH1zF6z+-$)
zwFz|h*lJ-RI$q-f`n?4YUaq;x<ZCT^fvMq*zL-^!gRnNRFXo}smARbVASJm9pBSyE
zB8rPK4U-0@yh;Mq5mztUuD6!OS6$M46Q43I1ssp@n)`w9BIrSuOXEFAyOo}ouClD|
z6G`ru<^(?1xQLpPW205ky!tT@owSz$9a6a~vYe;83cC!SyZ`{qR#=!u)J;OlhV`$6
zAY^a&XP2|UOkiU1cENl^sHXFZmDENW=03gFa6;7k$t5(PoZvU7fXET(mxiY*4q;zH
z%(ny*O}cNBSf39aEF9PmbET;O$X8dj9=Kv&|K!H|m;j$xh^GFv66lgbgJ+J;XrfGc
zi$QnQEnSl&RX*H-u{Cm7CY`$QYNnaT>yA&yqSc&0;}-A~LJ9%>+#!MFLHHtdFfzYB
z#6gAb5Xv#NDKI!wJC`y)&Ss)kV+stiMWF+gYc3U5dZ$LY4yfysG?HMm=EyT5%X|S@
zjkI0xy9WUB_#^Np-;y^GL(-lUS)_&8b224wp8}F>F{y=V={hsQ!*Yi%WiJYZD5^!j
z&DvspH=sj)HBRYSnY5T*wIF?MAQpOIk0+oV{R&I^HjZ={i<t+}{(#?pr&f`LT>fGp
z>(K=7>Cn!?f*qPIP4w}(*DW)_r5$KCgR2;8((>SgI_-Qflp;(r98t-ZzRxRs->fo-
z!u|W`!;?|cCOR%v3f{)Jbcg!R9eq`>R9*;s$|Xptwte|VX6PvC^8ngg3j-b17kqP4
zc7-?5ky1G__!(eNj$SL9MID1P9pWM}XB1lu+7<Tls*D#HKW{xTXtFqdBEUjeRq>4}
zCy%S`<?E~l+S-!iySsBI9;s**)Q4eJZTfLjrz_j^D5V8<L_g@LN`N2w<eV6^P(%kK
zG<8vYyG<e5{}_gtRVGHtrlO+OW&euZxs?~5g_rE3DjF$7mM5TSSJcQ1v<(k|Ii<R<
zpp1%X6VGo9GYl<Qs`B(kUtrvH)x@xG#j#U*QY^Jl%se_)4o7q$_LUE+`pH^w5ss#w
zUMcz2eu&4Z$j@x4U8hcaFwL(CEZUUcofdJdFnK`GHS>SHF-a+3jD8+~ow-kg{BD3a
z28(HEGiTtMfX(+(Ha(spnp=k$^F^!N8bV^}d4H8!CUaovIx#vd0y26Yh8oiX*`ewh
z5=~GU9r2mkz0*{^#*|jVk4mIMG-@nLt$4jVw|`<4&Gl+)*%YVCrtS{`juJhwBW8;Q
zmr0&thdFqaC`1i50I3D{Q0#KIj0tymEv6?|GJ=YQ)xC?v3B<>8;9|5^B&9pQzpG}`
z@v>f&Bzrnsd3Ts7jXf?xhv)By{cA_z;8e><M$lVTk4AeAg{vOHJYh=DTl=M?2F&?}
zq^ic4sTda+TLgo&_AG`f#pXfPVxP8j7ezXPw0(q_a*Sv!Sb-!AwsP5{@rdt#5^($5
z!+SgqNX$GAy@8}e3jA`t1Uh&aob59D2YWLy8cxYa5BIa5c4o-JNd<WC1Lmf&kS6KX
zOMoc5yXsk0d5tCGoI(TYn9&O6cH@QxS9`M4h^Ygw%%8}$!ym=A&C-q}jS*Vk6vD8O
zVn2wCz&bS%3BQ>jh<_YMRTwe<ud3ohs^ktRr~~7hy~kj!TcR0C;KBcRACN&N+$RsC
zML;z3q5B*7F_z$u+2vu$LSAg_l?CKS{Mc&g3ZI$|?Y|JbNIea4V5x25Q(l5(g`jds
z(=Jh`15r~2rKJ?Ud~IGZfsPyTSvfvHGqDp63qZLr_u11emJTat;nj_A|4KWyWEmB3
z8K&qe#GZ^VlIbx1VhCHom-fdJgyV1Q@zuKsySTEHzXcP+u|Y+5Ag$H0Vfnz%Hop}1
zPqplFm}_y_oW!!clc5ZP>1KN5OeaxlMGPOMv0ZS-tE0b{veM0-87#lGExIpN_=zrT
z4pa7ObHAim?@d}4=%RTP@x#int=Sv)K?z`~uyu#&EhstU13k)_v^KcLSlIGyC$7=f
zae0SU%%HaFCT&-^lfe-<F7xizFg8iLh5LCsw!~<4_aIV5%^Dsrpu!BUxj}0&r{Wh!
z*~Lr5?fHVjAOfVP*V<$jS0r^$Mp_^?o1jF+yXMjm2Epy8R6Yqn;=S*=`ZD#21D`)>
z_U{7oNei@W(l=wRlhF8eCk$fYQl}`pdOH-=dp02H&k`K6>^`oj7Ex|*ix@K7hoSM&
zthRRtG+DP1QYDb$+hX~^mDHIO7PS{@I~Q0JTbRx<Qej*HjgKqjG`nQ294?}wqIuxb
zBK<gNrV}LfuQng);6xc$L*9e%glWxLHxPhJ0@7xs>dQ~f^Ylf0-M`*9`gDXo#*80l
z03e3|dEJ7i1UcTF@?gbILN#t4aTQc%-z?GAcmCE8^89BBvs$o0*q>^NS8m3oF0f+h
zz!j}oyl`9r#y}&jX;i|Ve+)6T*d%6^kpD9sA?j)V)DMC`=m>oYsy^6|yoqjsW*<^t
zo}Ll8;(&%pW__j$r6}KLR7~32_?r{%cgfjZkLQ=c3gX#Sg=58JOWvp46O~n+DexOB
z^DuP{??MfXw5xa%B_vd^4Yytg;vGdBKLz%8WyE41Z#W6;kIGaE;b9;2C43@EYnAu1
zh8j>?&h7ufveLPiFXQ>P&u(<@RpNl4Y*xk-X2w?kCJ-7kaymYco_m}t5{iFebQ4Hk
zta;>ey12qF6IJST6ssO`L;=0?#vkjW9wPur6)VmGIT&hNL*jp5QXAwP^Jg8i3oYz^
zyuH4lokMRug1x|4B*_*6=j}#|Bh{UQa1}Kxc)Sc0ethF`U7bBJc*W*qLdu&}b!rF3
z$486nrq8H$Iv9=0lO<TRWg3bGD;aLzT}@%u60+7D=kl88LabNp19#2j42izx6XkCD
zt5A*sSj1BmyvcQC>2DXTb5dJ%H8|*NTgzC~jUuZ!-%Gqw!8WpZ9q4<8WCQ{Hy-zQ~
zJ}z)-*`JlE6qdw3=t}rRlJcc_?82MF4<7Bo)JmYVwv70z*o-o^jOup>qYS9Ac8ev;
zX>>$&s=%Uq`qF@J+rwUBP*uYV(Wh=M%>uO})!V}HPduepp)5v$NXAk`GW4mS_(*!`
z)_Aw;bTQxw7wGNbMl6{#)NShYU`NSd<O+8*I0Ccj&h~FtdJ*Po$Xv_btSl~YRxZQr
zrjaNKK2DbhI&SPvVx;oP&|M5x5@NL2ZqbbD08~d=n(zg7D_=CnD81W!tqeyVWeVD6
z&6*-{eo2rbBym{7xYdKGTSrWwQ?HS8L*Nru#<%obnH>~wZh5THh1a~;wH3e&v0wBB
zH+n{CRcf}h9(FNYpWpS0`486b7HpfT%)WQynQ|EA4U?=qHa^+{Z~2#b`LS{Inz;;P
z<@FY|sMCgvvL^^0V;hB0>+m%(acgIw6QwkM-CdkTt;J_8InH6_C>Nc|eDh1Vl(Uwx
zS={x={*6Fx%T;8JgNaW5uSG7Kx)nV-M4$&*?!I2SnEFWrwr2}y2STZ96Xa0wKVb5I
z)`{K}vpVOd&cv*~x))4EUi7Z95nxX<5c=`fzO=?27b1zOG0EzwrmHQ~8h05hZ(hRQ
z7obQJp5@H9vjnmT@GE||3@W?snqv(1$vccs0?JU$Qwx4%^0w{fKFwh#&PoLU3i1G?
zZ_W<xmdqHdx$*#jaSSF96RVDnqp^dBQFE1=OOSybgzH?Z7u^Su>!Dy<LS;7kA2|@-
zu#Xeh)R~979dJC~cI75Z+u=fU_a2_2B)bU6zF5_Og(}IKYW6g<g6bJl0(a)WpDZ|W
zh0>CHo5o5gnTQVI#X+;!+0v*M-K+MF6NHKO0Ue3K$*AY^1Y?&f1w46JT$*?nc4;hL
znIkGc?x_r#j?)W@NR0U>If*~dnEy<WJ`_<}fYIlpx8`1gEh_~j(GR+gJ`sUi<+XPz
z4P4=t%!#H1(q_s?xI~vXuVL?tgLAWReJh4MgKgDeAtH%WIU7m4TD~}3OsAl-T*~t9
z^(M1-xl-1<@RfOHl-1t}mwup~R$qMO=lDKcjyR53Y*Ax76>4U$DACVP>M<nl-60i+
z3I=mXu}Ehts0|6AFc_mGUJHOPpQis#Uv&|rRRrD=YZetJCbDp;G?86wZh0p}CePP}
zAI`S~$-9o>l15v)WGzM_!j%jN@F{#}3($U`KFW|f?UK!OL(NzTu@RXtA981iz+{}*
zP2hJJoB?99raml&?uZT@;1Joh)Qr)jiDMLtr7;d;iI@Wy1sFJ;0%LZ*cVU~%A3hzv
zHKDZwSqXE#Tuw$hQxHo=`gj4kW^lW|G(56@oPnoMocKy00~6!I$LLa?l}wAVvSjIB
zKIDMg93ootQm>Cif4_=;kmSW6{3Jt|XTY;BoJO_DeED+0z<~O#Q~9#Ri)D@>)th9_
z+w9k1Qv@^k!xBO5WdqThhJZz805@ZLS(YJ&MPW|_N$5<tMa6+^dN?;D9Lu0Hg_HN>
zmah%msaU@1spdyPLppdZrhL?2g|jUw=BI;=mzw>V*e=;q?tjjcP%1oZsM%jezVf#i
zX+55nEOkB*jKn_R81yrmFF~+nVk2M0AYzM(c+?Fc5Liqg$IWC)OBH+lrpV94d20wu
zG%s@ABS@GjhWj&LuUP&-g7i&3nX_@~zQtsm<*AF63EG6~yeU4RR`scMmCiAb)74P5
zt-zgpDbGd)uhSrf*63DR$w>82E_{~=qUMhUkC@G^tRKW#C7^P21&uHT2VX->v!k=P
zn^*!xV(Pc}F)8SRk+Ou!U+UN>EuQhy6=b0Ar{4WACNmh}XRfxF*IBv38mw={tiQAE
z2c%`8s+@gEyn{5NRoR#HlJ@yB{3E58SoJrmh6TB=IvSi2NParD$^SC)GX%j8Mquf^
z^|(t84WU<VL{YXgnAJcc>lTlCeqg+a60qM1YTlWFr@12p%FQQnx^WWSXAv1StROiD
z^1$SQ=@=4k^+)HfRN{_-*Ae1*sc@Ca$NR^J`DDWX;e(aXF_vLSt+b`TWE{IXS>-1>
zv*KmdewjhSop^fY5%D`7gr55ZVE*kL{Ra`U-CXtkf`N)-#z^c%<^`|5i9!T4>O4We
zGk6nUrVvG^L8~RLR<M()PNg7~d|EhoC;?El;iEp5VEPk(fJQ?ZLiacw(?&gZ)o2eF
z762bNvW81n50D97fsMTVl#ZSEQ|R%Nm@e@<Rc@EcIGO_C^yGmqgi|PE^HRYrgs-7X
zCRGbFd8}aqvpMhpEzq?31c-r*RVgSXHU2Nv<iphZY@r@rG5QBpzA<MCG1q#5V!?i+
zKWEXNnFcQ%iOfi<)0V7aclLfd#)nJU+rw^{*AF0S{`6r<08ds_rm$sHskWsD&IBLh
zahQw_v6m{hTV>p)GH^&fB@k|+gfg}FXNyt|fe{7jm`MW_Mc6j5ZqE15-AnCAjYdJ7
zxKi+0-3ZJI7MZT@*C~~>m;0(J)T!jm#U$pqPuODS1`C%myxxH-w<jB@bt`Zkp{GH=
z4)M1e;PrE+H-Dn>o)kYA**VoxSJzWz#m?)M5llZrXHtA!y|inPu#&XTB!M!6Y$Zas
zb9_a^8zu^(FM=o}W2$q|y|4O+UEwaNs)T6BLdLG*_Tk?|RBAE8_la1p7BQ5JIwpRg
zO{N>^HN_3@iI1`Ba8$(@Y8EbB&T5W8VIVk+^bo4t3$QsZkgWgpmnnHxT)18Amg%g*
z{bYAqxt%VR7*gN^;f_b54gU{`*n7c?0n{HwEZemFCYgA)xIdemtQq*&e-q`ptE5QR
z$RDuHBvgDmjN$%oN{oX^<_jf*toBzUff%L_Dv9ZKUuSE=wX0_dC9%^Pva{Vj&xDpF
zh@Xp~FYwckcgSx4pMfb9g?Fgpz;Xv>vKeHcx9QIj6>QK7b`SPf7k9cNje3=vLljnq
z*$W42jNfSQhR4DsVoBk8I3b*7Y)@-#`gO=Fl|+Tc6-x6zQ%yOHGR*>ct;xNH?M4E=
zM<3>K7!Ft6XZo8K?FDhrujT&3VxF2HahUzr=hYl&^B<P~&*&(quW)pgtmYf^f9LVl
zW;KsgLy8;)()fD@jZsCsir5U<uNwF5y?6l8%~~;h_RT3srSXrVKN6MADCbNSWzU=a
zpDEJ_5yaDv=^Y4T5iN@8HT9!xOp$D%PhfF#50!y->NMi+ftEoU(>yili^)(iG^VZ}
z={sZ{)HytU8V+!up@w%2M?Td0RF#Z_B^kTIWNNU*ow3ZY5GDLhIzN_Oo6^G#rRGH_
zFqzCed~1)Q%{##jxW>Y_nob?A)j2eD0D(DTA7fnDsg9c5zQ5Nt?3jGiRVulw)oYg_
z^gVhzkHgZZ{sfjVzdE8QA?q1PAEfCSAP%14JwGNdIb0o!u-x!|*S&&MYfmfY^)K|1
zWi154ptGYb`mYK^Ux$IoPIiHL4A~55;6gEnN|t9*(!a{tN`}hR&R5i|-Dka{kgZ&K
zyNofY7;|hfm!5fP%MbvjOpXYYNF=(ABKVmy$OlCJrSG-|Ci!4#K#%!x#3_CJ-13Ou
zettCB;`A#0^!w_2-BW&v^W$Bm*;ZLP+Ez+9IS0+~+#t49o`1)h?I6m5voH+IG=Zd<
zhm=h#!3Cec_I-1FYkg@eEtbtPJFpT|vRnx3TwzVkboY?+*udPk+8dcl<k2F0YvdM9
zGzltUK_aK?cTMnDZ6nS7!JwGLg3{e`g~QT={{)t-67tEZLXNb!KvF~VFPJmC!VH*M
z{FYMW$c=fC^Sz|4ne#Km<3H=gz>#Mr6B@0(Hr3K54O}4Z`W7i7-n7DQ`{R4XW-LT%
zVIQt7@_7=m;70N79WQ@qqZ_C&eHh4qPRU~9peL(iGnBK{TrdESib_&S2z%uZ1#h<0
z)JtlvNthi9Fnsh6sHjJQeS4M{^CYFwOGzm=^I&s}^gc07C*DgGiEU?FI74Xv7|Im(
zJNPp8i6{onkTrzkAPUO%F$|k`LQWGtR#M^C&AQ(j>Q#F1z>-!8qQfP#tx9em)`CDZ
zw5^d=Q2f;bAyumu-R|viIXx1F;grp`KTswO({F&SOcWdGh3X}-%C8A3+Wd0gh$0mT
zy0v|x_wLyJpTJVxlxsQvAbIzR{nCOz%5f;>etH!6LjWPg7)O<==gMUNNBq!gX-<<(
zrnl^3>xhi;X(_LFE{L>Uv@&s3FY}C?wCC{p-GpX_t(6;%%daWlfL<Dmx%%X>6EWt;
zVlEkdM8c;o9Cs8}YbT0>fU0<zsnNgAy9(s41ng{b3fKbOWmh=uyVar>ybnhlbBHJ3
zlpc>zd7JFsjbct$7DfDr2k?XN|Ai-EXw67ZlwY;Fx8%4Zr<~`eg59sS3;Tbp`8O$P
za41CG%8aJz*EA?#iijLvLuGvo%Ci4ZJXXV2?ivo1rx=`zO;<^d#(Yl{XUy<ExbP&+
zIL*;lD$UR5O%0lMlEw(occ}lOoU=5EqVFea7WP@qFk28^(V<Us`Qh>yf`r2xKJ(KF
z+cZ;FG{;z*AuRm~R1GVvT5PG~gxm{79^WaM>$uII&9;W+N3dT6`ET2{sAD1ZF;X3-
zRkeUn?clh<`=hb_A4)dQp%mWFfPIV{84sk=$=Ho<&Z}Y^FX7R`aan!c#^#w7cHje9
zcqW!!z{F7i*y8#s{nz)vhOQ-=e(LIY8p(dNCqi3crmVmt^?tb7c*U?4?nbeM@GF~N
zm-6}@gNR8*e5bn0gdUqZt1DC4bC+{%t!T|Nu*MU;quqeHI2#T+8RPEs6<8nm=djX8
z2y+JpFyC`=qa`!3^ty?*0*Xpv8d0X{^Gf4$YJqno;p!x9mt|yM2fPPqH0Tv+hd~8A
z9@iU``#b!Tk;l8jc3J*Tiq`I2JfxOibWP^2P1$rv!#Z<vcPWveR4X`jIZ_?gQS66;
znMvXOO-8Iw^tsx8Y18bji0kUA0$n%=dOz_$7+UEV5yDp;SfGSt(^!0q-2_l|yCs|6
zD;P#P;7@CDT1+7KBc(RJ7dE&aA~WLYEXOTh2@MEagd`Q2CP_(HykRrnn6Pa&<-~He
z)qZ`?Q8)xAgh0jk?jIqrmc$%iMdzCxujM~>RZ3=*P80VHU9wv^;4jQbgYP}?Rtr4V
zK+@6auXrR&i5CiGNz&t<1gd;F?!qXii`fli-bSz@W4M#58y5h7${0r4;6ug~8Zud*
zuw_+o%o~nkczJ6r3P}<fI>Nd%$V7s|-aJ%(Yf$0xT+R)G8;Z@9wwOJtM*l}teMB~Q
ze%%>0qYb@FXqSK$Kk|Hpe90^~ACJ6OXcrE+l|(oSbCb3Ou-P^mhDJhR7KAXq^s&?q
zN%JsES9O$hv1OLkOugR?oQlBei{wGdWDI{?O35$+4oI032&ahQA4S0bhoZ620FT9Q
ziAC$i4;KOY-3#A7^^$gcv1t<iL6T7Amw=TQR!>rggdaMnHhJbmMk=D;Ta_m?+LY6k
zlgmOCW)acVN}<SCI>nf$!-CvSp=bAw0)b@^A1w``r5GC+Pse+P!>G0F7-FRU{dTt^
zQ6~pgp0xTC1-K3YLY|Ojkf?|L5<_44Uij_*0z%S0B`sQS<1at-6Gnyun)rVMnrK*K
zXLow|6j759Y&NCtm4pDoIYrY~&tK<j)`O8xjC{5<O5~=)V9AtJ(4D9_6wZiJ_mJGd
z_bop88J~kRCE$m^bf!Zc+5H0<vV%<~1o_z-Q#5_)lvfg@#Q(vD>51@y{Mho9&bMP5
z1>TUz$|!LT42Z{0pazv-kcXonLW*G}m;1(qtF|dC(m(Hxgh#8YG@c0teE0cD43xXO
z*Y>?t3=g(HC&=M8oh|&?+UD1|t5L|O4f-6d8+;A+jH2~dSOT5b@8y<4U65IKYjf?}
zC|_+A1|g+t?&;#O6Axq#O%wW&R`10}p3wYb$SXuo`~?DMh)3!lLmZvuQCe_@mVMw1
z>6hcB7~-muwX!t#nscJL+Ils2E&*j_iN3a!aUso<_Duz%gL4HebP0a*b6Hp=Evs?3
zTSR&}C;XbI4G%G?nUls@r(E#IudSHnx(Go#r!YgZ#`nvgD7g#}_)4JmEkdNyN39XB
zK4@F^Trh6z8u)sE>$RhoSRPePQF)RgRb0XO#ZDONYx`^-sr23dTn<TlpR{Pv=Q4fY
zHw*4^0DAK&MIbKoM8e=&4Ht2<FFQ>D9Nu*a7s`L|(Ebm+QyUg{U?e|<)vs}9qmaFK
zjPR9vLgH~%KCJ`KBU?m0$a3_j!oG-)t<-E~ksl6<Eou1~em>BfaaRqZeaKB?kIt0X
z*vB2sK>iMDYj#53>tyqP!jkJI?7o}Bwz8`InJgB!d$R-3Ama@JzB#!FI4JSqcO{%$
z`@+y9oJA7Ln2*fk^uX<0lOWp`!wYI0w5dw?t|uS<3QX4HqL{C1rH-~C=1oaz%DE(<
z-o|uKM~{N&n>R<IN2t+Xi%FdP*@lTkE%q=r*g(FdG35#EM;(N!xr7FYnOR}Y;w#Kg
zq}7{kYsVlpMFb~oQxJ=O^Jf5E9|Bqy)|u!JlU-bi>f>F-*<-GNfCdiTV;cin@VW_s
z5mh~=eF<C^4)FE)<JvFmXZVe#^qTWrj#8{If9Ou3e6x-C#8_<IoFtz_-FONYO{hc%
zW*@810VZPY<4@!^P#xFP#QxeUh?59`u*Nlh4n@Dv%8FrN6AhQ%IY6cGi$Ee2u%^`(
zX<$YScf{9~Q7ppONaRK=o#jYc@R6MLxhy;M$&!#T_*mz|&zYj={%OaQ3XCNmf2<?%
z2UVjk3ZG2ydt3PmQr1`mkJN+{jDjW0<?P{I^DPe8)lJa5vn|@nhHEsOwe<FV;}c*c
zncU~y<~uChE-U9vu6r(`nh2R?^lKYCGVbJrg@|Y%rHPK?r}2ngz?w1~l={klpdxs9
zt{KRcIchSnzOHaf6#rxDkSjEx!CR&~09;6Ifby@&b)q9a02lNwMSc7-?yy`K7AdcO
zLlxzktx>~@KG#|ZlI_AkR<YXOoVE+Cy3{l*6YnQH!a&XaZ_+P01ktZt2$f~6Ntx`^
ziHhNCLrXH?xE^Mb*@2|Y9|V3PqUCW_*d?>DAS4_*G0vm0><&rn7*gvL9oxw9M*Xi)
zxbJkSlW_(~Io1x_eneh?m~K>PMKxeFBu&Wio9h0CKeidBCYUgU?|wO1pwtw=zAN-`
zj&9iIz=kE1<v|hwwB$(d-6;gND$}I-8G>|<X@-ELcq-5t0bQ}f<!*fh;P#HfD|TTd
zXza_rTnlzdVt~~kGbU?%#!N+dK(a8Qdx@ZMVn!I`^+6gBEu66b5sMAdqDi0TvcuL=
z+!WnPHuK&ITWwR<yC2`mhO}&aAjlkWtKY6k2sy^eYYM2{)yrU?CMD%`cmozr83=gQ
zc>opQDl!O2V_}HxsJNqHx+oZkv7F-XLnl!`!xDpX^Rm=RWWiUrV__bFBe||xu?Lca
zWDuD#nd39!nUsQ)gz1?}$#dhlZ{CMTDhF18(ZArMWnrGxAP{%N913VO)C4X$4e#ki
zFO1apl5~9e;0ezWh}o6dizcF2^sVFCF{)-6jkF^;faaLbQd|a8A0^#sBQKq-CTGgS
zB}|;=QA?H2x!J?eM~dR7A0d>B!3dFduU?n`%Bj%YF`CJ=T==e})vvuF&K=ocJaIw|
zhS5jmnDX0L=Qd@;>b5OEp|L326khNWs?5&I1Ra!<4i5+n(ggb+dPE%Z|A+49&|W4S
zUEMgR>oVonFU<|24&T`z$nY@4&BBJI(5A>2iaTgi8K-TS=0JzfSprTmSd(}FbBm<B
zG`C%)`Uj|CJ<;n3jc6m0;Zy8{a^TTNKfU4^UNk*WW-+s0D^sjb>6-trB7+{u<<lzq
z8$;?&?*Nf0t$0L*GkTsDM&$&F_Wfzdq+?NT%_dJ|dTsO15f<P7NCytUa##$mC4`%H
z`0J)B;`IYLJzR0N*Nn{AbW-&sd{H$LkO<rfrV7N*AQXy;Rag(U{slRj_7ee4FpRj-
z2ond|=RK#GkN=CXZIYllF#GZDCIMNQNir?}PLI?+vX<myaxIDOcI@Lut?FB@Tt=)i
zeX!<5s&0_fKWs9^H7_v??5`;mJgJW$e5ra`)fUstLIYPhJU}?GRBQe^w+gU+AeYO3
z!1Tzwa}bGzcEGg%Aye1<xZyvlN>E-K^|C_4ihydw;*N{hOs+aPRT@tHsp$&WQzeo{
z0m~2ImAL|cjlloB3*fczxi{Umg*Adgdi>P4>KZm|_1YSrCUP4jUmlFO(zdA#0tUg2
z^pp^-$|C^U{?$0m6lCF4F?iCmgaq$fq-C>mU?N)SD-AboY#aLA5+IS7ni%4wb+@QC
zNEDlrw0uIf+vwwHS^JNRPf3a~r6XKseL<hrKEM0brF?aYi%96W;5gJNd2bXwl2x4|
z4xF-K8KA<KCwoTt74bU7uM4T}`Wy}4j-S%BppskIAM+ech91O~!UOqwICQ8<M`ekM
z`M{{AD4dNTgGHv!jB0<w?}H?I&MjZ|9*D9@&-|OO8HUwK^GHJE_UbVT)7BPd=L+WT
z9Dym5@jAVrj2}}jWm}pGv#i6Xc5aZ05Gjy-k;JAJao%pR0&^gZPNBU%N#_!W?n}Wk
z)$1;rCS;Y({xZ}YFc}fn*QC3hlhzOz1N=VX*=8zc6^Rcq3DsVt2FN2f=`Vlgo=n(B
z_zt9A*bu*uTSccIqZSBu>r=W(oY%zrzv%kPxG2}HZ#o3&l$P$6?nWAwW&n{!x?$+<
zP`VrGZV(ud?(XjHoOj&&InQ(U@w}hrH=pixt^BXJ)>RxsI4Hi0)l4RA)3qyFG?Qf)
z!hxv>9~kE{<|vbyDCCi;1S34FJ8K%bu6p<u3%ALfZGeE=MvqCi=!Fzr7o3fl<2@6~
zxKrHdgr`={|LJ&-q87DeG&_6H9YmQH7{Q}hYX8E!s~D43F2+IgZ4l4C!k-1wc)c1S
z|19s2lD2m-apG?<B>!qOKN{cmX+^pX(I?+lh8QOL9S^Ons>8|#bvR=i$2L_!+f?eS
zQl8R8_gw$$sD1bd>^Wv><mow?EM)PBSQc-+x5tSDT%HUs@y;zqNk`LeG)6_W_<XJE
zYG64do1UG=%`od?QQjO$N%g8V<UVDYgaD{{F6^QZpJz@PDc>u3sYr}z&5EsGK@5^g
zy|OH+OFwxF%#>9TauA|FcP`lBo3{u%jP+n>+nyLhC-APm&YJYZr1fPlU?|AlvB9eZ
zxOa+%$&xiAL0qu3BRx9;qnCKip){fYPa7sZ_Ms_g2*Ja(`dxMh5Il4;B-v;K_XU?z
z@i~K&%E+}xMLD)wpo+)n5*ivd2#4j3DrpWq)NF!Y5RsOA*ikt0lyavttF1RnF$Ivb
ztEfmNQgwV%N?PhYb>(7toFYv!gxGR3<q1)?V6)RrUN+~g1&}_MnlHohge8uT{=9`=
zuo?lZe1heyMR-alLGi^G8nqpCYL^1TGj;-`xwkF~%2{2sT-!bV9dxgx4|b3>Fek7H
zXe)I>U=G-Ihw^BSK8qN=-6lN1Ub0$6%4V?%D9|hKUPQr*q<Y=2z-x3B+Z~QXf=L9K
zWhRgDVGxHyW3?jC<}wSSgTiGl7cfxk&+FAWmvkH8X~dN{@@*?BE=|qU$??;W7HBXF
zWY6k>kQGPDCLJA>&gYvZIheYG`i`d#+Lrtw%kW5N*RQTB=?=nAPBIY|lZ{G5T+ZR!
zPNdmdH_pIjR$!R82LY*iOYpal?1}eVXO805858h^>g(g5vJ52ULJ9<vj9f^happeE
zkwTKpDLAWJ(%aoP7EbLq!)AVzY_H`ge)f9i+Fs9sa482^wB=}G-&?feCSKtXizf^f
z{VXFeLSIt0kVlV;n_!C0{Urz6##&qWoS-Y?cP}@*^1+omYkPQ*(S;PtcOYZzgA0M?
ztIBZcS}As1Y&K~Fo-cKI%=nz|`=xuR1~{i+bpu30@Qp4pkk5nzL!}b@&0a-e=bN?-
zsCJQMVIGYV!Af$y>IWBxX2%hz=|+9@&d$y$k>(D9F69+_7K?pP?Si2{m+&EHOX~H>
zXs9X5QTtcmN%myaLl2oKjY#o6pP_qm?oQb`bZTNVfoS#hiNr!f&{u0Fzb*rml(}#e
z2>XU+%~?#0M*ABhlE|2RW?+Kl4lyNsH?UmgumfaT>&pW}q!N711`yDS%UJ4U#qiAw
zN<D01LlCG3yfHb8&QMSao&sZFf=Y0vlhg>RnWaN?1e-qCBPLtKU)eRq^GtSoopOud
zkDJRdM?o9gt3urH(X-0sOr!m%oE|#)xce=|v4Dh&^Dp__9KQlL?4w=jDp&e~Eabj1
zbUO9-0}$(IAEIhxwGZPX{4T97FebmoW-eqzr$Stn$OY}%voKqSkuA#+Gj#P+oEOk8
z9zb4`M7Ik}ruKB!CV=jMS2f%SPuzTYO5lX!axx1tGRL9pAw?=yP}|IH%n^h`M<X>G
z4K!su0-6JXIg?SJ$YEuPfvVV0KONeWmd7vh34?~^xP64Bw~HIgxE(D&->5Lqo2Bpw
z3-BC)Fs$tqKrj)QbBbEbUj{)#SR9zVZWCyiaJY168-Zh7Jwm0*6mKz&$&-92E)PBy
zFjQc?I*52)(N!^H3Pg4lM(*ldf*a5g&88D)-zeBUQH_WJ7UyBfMMfLFx`_cAc%#8+
z8^BXtUVgM4QwlVb;_&%x7(R0*qW%K>mlLzl%zzp+gG*Hn39{UivLY|by_w!pL)7xD
z&^Ch&Ba^46v>79s8(q}VfctD{GkV*kT2l4|{j_1&HrrGe109ODlwTy#5UVeaKNT>n
z(y86D?&>G<+u!uTJt5z*mOpu+I!L;O7n@0qBUEzeMZ~=L{Gy5@Bn4r85puOX>jb_)
zGoN^*-zSGF@o2}QlE;RpK*xg!{JvLcwVX5+p+He-oeJmuO%x6T9fWBuKz*EWh6g_y
zHerJXAitY-km}HppG`**{f?0)LQAax6FjOa9%T>%b`*0g;@g@i1Hn`jOhP(J+ay}b
z)srtJ7m<D?-h8+0B}nru*mQ|Lt1zWYyn6}rBEjSL#|^}#bgl*+-z&cx1zZi%#><+x
z;=E6|&iX0l|Imb3-+202FSFaMHW#-a>Y}lTkk`;8ID1<@emx^xd$+M8<OflS%_@IK
zS>(JCB-w`-!sleRg;LZVf)jmvJaJ9&bDhl~q?Ukph@#hu=1kmR;sc3`Zb&B-A+*GX
zim!BH@hd8lDr|fPOv7q=nwVst)wj$wnrgS(%(Z?v@UL^AbRuF-)?~M039R?gZ!oyn
z%v9d9_WC}OPG8SQNDF9ZqmoC5r`XjXGHcXuEM2P1qR3XRc*#DFjHQ#rP13by%{%!Y
zngq0o=CYa$@IswKH#=hYdpIY76mH=ogwVTd_W0}sTMnDw1|66%J;IS9DQLr-SusfJ
z`b79pWLSB&Bo_YS@r!xcUJ4eUx+H*fTiB5Am^avjcI&rahQ6yA#-wD4;i%$L8guYs
znNvykE##JZpx=<P&4f0=wxB0x&j04z0Mtd0-V_{ENSdTsQ_3`SYOp+)m*;@Goz8F7
zW6H+S9pkdGc=n{jv$=v-6!r9BdH!%wXUon>=Ajb1lz`7W3KN{X!rb@2^oi>F1VHH1
z^=wYe@0D?r1%%zUV~_|!I%K{NNO#Of2jMnqc6{NL<kVvRH1s{`^x~2(NK_ND5mDEO
zI_Pf*xXem%KO;JivWxVM?@2QzKyTTpa(domZOg?&r3PC-k^d|?9IKxhD~s%xV^TP&
zf(e$w;bdH!qK*wu*88BA&M5*1^@M;L`w2D}8m^e-7ir8e{Wsplp$!<wOlh~+yLz>t
zuqt9d5*BSN(J%3k?jh1*8_4FT28zPv^V?NF1^RQfECjhFeOUI(TuEc>F*4LpF7pJI
z8G}PHSbv1;OEk0CTjJX`sf+L0)8Wz$x`(+qgHRV+3yljo1@aQ7cu-j`r7h6R%3n2>
za*bdDg|mxSe;qkmll?lPY|#m)H|fH3M2uUvdIk-#?A@Sq%w4iFS?e{Ee1{2=4fpLP
zHu}I>?PTmAPd)OkrV;8ETEbQ(vTRF(?Ym#2dan>1JNY{h<f85xa$`6ar2OH%lN-hG
z%VUguNVXbf4;?}8P4myH8-u~$q(;^m9W|a(=w;rYIpyMTQ)BqlGC*8Sqsb0z<L9v}
zvBAkwm)obwFB8259t>Ys-!#{;o72GyXU{vqz8?q}BV>DLz$2c$QqYvNABk!%+G#Au
z*~8fmrRqhBp?KYdB$BDB>jMGK>t;04JJ-S#v=?yrER@g}wh%=OqZo4$xzwS;!;Yfq
z@m!T_F_>)g7eahJAs)5z5vDUNSIF;m*86w_^9|JRZ>Z?aFbD+la$AGvPVwVva&nk9
z4y8R{Fv!aWXt|;7hK&)IRH<unj$=OmpnHv1455&o_Vv;9t?#RM?$sKY%BEf2nW*HG
z$?LeB%VeJ_cl9+71Zl%fUGgE`@y*HHTWuMxZH(jjG*!*4!%o8t-Juh=))WS#sKG|o
z9?8zn&qz}urq3IolVe~7=;qhW1!g5a>&5=XWg2h<!2^|aPbRO$<<stR+?Lh{t)gD-
z6n|z9^efV_iBLPJ7S^QGy1VA_3@A8RqLcU(pEXLF*V<7g+?_iaSPDd`7iwEGzxk@g
z8;Hv_O!P?v@hFfIpYu^`QM)n8JXc~Kq2rS@gJ8=bJG6u#tn`JCaj&{ymWQ+<bUADg
z6v13`-mRJX=48<G%jRb4qd4-EKt~p)y$F&ohp?4If|4a!htwDIgo%*~avL%KN?uc^
z6*9OKCN7C|ZGVWVUyzO!bMH_cks7oYZXQZACPC*xOv$P@Yuju_$m)c?%%`WMTw;O0
z+u51CP<2gXr2q5CT4yV=X^iMvTzE2^iWrU1ZoH`rJ%s_1?7af5<RJuU!Pq(uQ!#W}
zcVfsK)$i1<SjlHu>ox|&<s4|Nre(kV=`4ZVGnD;AHX)H)ZmzrPHDi;V%xL5Q93LTE
zCYn<pBWKDO;L~LO{<(#O9z_bv+Ea|94bcs~vgWnfw_B*&YZh#px)S{MuP+ZxMnpBB
z(f1K=NW(?5{1Wg!j7{07Ip2Aa0grMYboMhxj&6m%`UZ=Tsy(5pDRAAhgPKI<4MqjP
zPsu6Jc!I%@$!(;u7IKLA^BE%+N68sFzjVfkGVKe(ze*$c4t|pv!!?F|Jsjyv<JVn{
z<ujswyNmdP=<5-c!AkTpe6$j0sB(%!(ATef8J+rm2!`YzqJGM=r!81#$%}K(Opq9B
zp<RfRY~|;3-iYd-o>=N4<k!kaulVwRDPXeT2PMovlQp;mnB6B|qo%sZn?OS)B;?fJ
zH{pC3V`6|T*fEYHVHL#>4%`~fD&)lc@J(fiOXLG(0IoroL!7H~q906<YmcunNq<DJ
zt>|n|4$KlfDs<2CEOl9fFmBA{7u`jSeD3RFS}?cjmojQ>pCPx31M&W!CX*&B70aM#
zD>d#ui?3rl0JqqvpBa7#=GpMa421^Y#PnMcvgPA?&5SPViE$De@L8wIM-JXJ02bpa
zUMXq!%tq*O9fs?a=l^&-;6vgmQYXU`2E6s{QrG^qI+l=N!0J@vf9-smL!U(7;nN7E
zmr$oxpJhZNuFKWL9yl-JYB1VRNt}{G^2w}4AT4z`!)R#zfjx(Q+3F5xBnEu~69fmj
zC`qrfW~NCv>!1MF)Hf5myOb~|f{jFJ02ahDad4NO4=1O#la1dcXBG1|nxk<s!w+Xb
zoYs8b(D3B}n%Rp0@#Jv+NpOQCPn~99)e`PkNqG@{KlBESv;9u?4_NuHT-_)41x`Wm
z73c&b?cAp`(rO6sI1uAg^KQinS53)Dj)2C%&w4KsDad?{$Jt`A$SN3izmr+VvW&-A
zyUZLlOruP(WBW`np78aZl}L6Hlm@g!7h8mM{x#m)+6YTtNQ%S0y~|Gh`UV7dKyCnj
zQj<ZgWq8Ibs?~ldD;)eBQ<x?8Jiee4$N!!#kcP$P#}(|60<8A(tnKVB{;6o$fXXXV
zC^_A!+5*EIOlsDkkGGzah){7QE@T7k+*X#9^uEO}1AKby@m!|!5f1E})DPu6=HcF>
zClhL&7~xQD$o(8~gnC+cKyh~HatK3nAPkix$7gFP`j%e90`iQ4jH2K}&pM^s7_O^j
zlq`FSoavMns1@(VzB3(&PfW}b%RY+ZuL+m@_BPT@wZSsg`nvvrB>omE=4+<X#hZFS
zL)?#vVy3~*f-BXZF!TgrWlJs&cVD>$G0W?7?3J(NJF(~x$w^e~AS+(_%Q4|D7!@cK
zZNl$uRL0aMhbPn9c_^VRoRIo@yxOmcFfJHvUA+%564Y~ZzC~%77DzAruG0y9^9a-V
z<)_}ju=>w2%{SOd95AjZ&kH~2QK*}8-^bJ1u&%%w@zOY%;D^z`539VdX!!VB^i_x_
zmUV}h(JnEclE<YK%}L0Mn;{W`-4~`|;?zd6Kip(RX!e7t%38@~W&LlIHRfgvgk<Ol
z0i>Ue{C$$3^svI~n>URLaMA5^cek>RPcTypV}u7~O&*52M`^J(_Iqmt1eZcH_5~Fi
z>(ka?3IfzkzA~9_()>?I1Iu<m^+)!2iuke`tJBS1N+uHhMXDyfspGl-v>ZJh#~5l|
zo`+68+1LcW2YJQE$7}j{O8*JKir9fa?Tu;%5}a(wiJYRS0%wz0lMl^B+$kL0ndb$a
z5I%wX4lNfo=I!9q*gC1<so1R}4LPYOe#=8`SvS2&vrXRI<&cPaM!bK$fJ%E|i13g9
zp!(A&m%cU&3F3W)T(IcG&c%h;8x|r{NHts(=44a}K1@2+m^CY_5s6Ja6Ws=V1s0}@
z^tIg1FBS|%gp}+meVgzr*xm&;XM@?i`}uwW*&iPgXknn^?&K6L-)KkD@r^Te?IaUJ
z$>y23*tYzxukF!s2xptG*fxJoJ%P98iT_{<=_-cRUct7I_J*0YL@&>|2ufWMN^ne?
zk~#~=BBAq;>KRhp+{o`1Yjjz4JFc7#uAdH|H*iAJuvx=BoG6>)Gx8Osp2|Qv?fKf@
z(D`2m{3Bo>NidXClwtf(tX^J%FXWE+zmdAdz2A=Z#opN9V4EcG&0NzqEw?}w>H(Ei
zMt_Xm?o1Xr4I0fRcFMzWfr!N=tdzI1CW=Tp@+KEENa5%nKKIA1pB~~v$jqbTkL*YC
zPKk!>87;UUNHp4UerQ;sXSSQ;+;khsV&<))a626c6bzpq6S@W7VUezi`AjZCgX~}B
z6BtyDDkdYNiu^puksrVryS%wro8}8r=a6}Rt4ftcU~Ya@zb7QxjPhn`g3w{D9buTq
zM7NDj86Jk}<8>ZHyd`e_ap>0K&AW*QsIRo0NLOYcRcg#{QU$bJ!>I}`3jW%AUE(JQ
zsvBAXu4mzc1$2*rAC{jux*dj4Mo-WzO9=ZJ;t2Bxyi;YN#$H#ZdMA}(nzz>KIun0z
zS$66f^DaT{eSRpY4TM~X+9<v>^gd(_2a!)-QM>Ynvaj~7g#*F@4qMF$Jls^$&GXEl
z;`t^#-?XTSJEq;)x$0bz8rc4_rK=EobfU%1g^7pR20B*fWsfsX$EOScaCLNhv?QEI
zS*dMA#eT#vESWHv?N9^)MAhx~codw<SIRE;6#{I}9Sp;&JIs^Gq}5F=@2k^$^gT`~
zZ?rq~kJ=aAt4yxnR9VdGfx>VZd#dvXL2=aYd;H*0)CP^bA-MeSsjc6;3Lt+J_<TtO
zoI?;vT}78%z->m0_0~p%dM=>?C#@1o?u#aNlRG;dfEBuvHXDz3@+Ud!&r*s_G!+N*
zin~@>^iVlCN$Cqs-Eh#B{AH2Y1x8B7cLPmYt_R<v^=!LXv*?$7Tz?0%B^?%%31fpV
z>P3Q%o9i2${ybs+XmfNk6|3>Rm^zT#MgKt+2KHR*y~f6YWd+vk(-VUo=wo7Nnc_O<
z_25fh!H3T*J;&&6cLy@}%{3BgAEgv!m^eMf(mmBFRP3|eoJN_alW9o5wC$B~I+_OW
zonhfaqLh5c%TGv|o#M7zc4~vkM4klcd<`#AQS2rh!9#yut;S-yeB)e(j4?|1fS~Gp
zO+s65yTkqKf}{W3(~s01=7z6$E=$1FImq&k9e`*<n8#_G%N1*mfV1Gzn{LGaB%cl1
z0tN+-iP-D2)&0fxFwd_~VIO~d3g@<T!9H{bu+E$|CC*hEu7=vg>s?<mf&%f=S%J>$
zZo|zxEEb`kA5XgCSKaNb2rB*6Bx_g!G7Lc<r{LgF4Q!mn`U6d-geq!BLcAwL8?-^~
z-03sY31?wUW=8nwwkT%&E|)t+4Z|m}&5jZBz_9RS*I&`X7j_$=eIj-A#=`AiuEH2u
za5eOtn(jc{8li{fk5WG((f_((^^Y^uVa$1h`$GDN8&$2AT$6aO#wfL`SzGr^HwsOk
zWp!Q8;ma;RAf9Z*H_`Pm)@I>MK-rhjTfi9od`c~NNE3%pIVMyAi5O%5iWoVrR7{Yn
zMl5jI35N^%9IE+BU3Rt$q(D4Fn{HdpyC0yg4WR8f>$-$6BZHB}d}U~RHG3WZZyo(N
zg*A|c+gb&CTV1O3jmwbDKDi9>a^2Tmk)@q4?{u6-kE$LwhAZ!E5Lb-(sma3rTF)u)
zy2;uSb6C$%*ER*ps|RNv!_w5xEV?u_`q4PEtHWfwiBGmtyxAiemOd>F9`U0QXS(AX
zlbUD63ggSCRlwuOypPy@CvsHd?D#OFV}mJj-;WNOH%;ezc-6F$c$@q`X7qm~N>Gz`
z<h)q+iAV|V%h84{y8w7zT}BDm;IH0~+Qi|%TZX5*do#f!LI>h{tgbI7L$>b`KTn{M
zM~mob*-dz}hN|gAyz|>%v4_b(s(irB%0m!~@H+lP9#B-!hs7DoT>FsKL|*9`AL+((
zqULRf_RG_5o2=EGNB7><^(=r9c;<f^aycUO{<Qb;A42{8$G4c$_Q<X;JYLDYV9urk
zR=UdOVVmas+Qu{R>c`#<OhS|FDL^KO3MD^lC#FZ)e1X$H4t6-uOW2%5rX^}Cc{$ke
z2z7a$B1BphUh!xHTajJe{+&$#f`?4axWFO>K4<sXAlakaISPOw!*&T<2H~AeyPW6a
zVxb)cCn{~U(SKOFK_{HC;icB7=g&RFK;xv{v`6*x?Fz5hqdxy5DLRL$C>=8~`XWB6
z*M&v<NL*(rqW!)*i^7?;QQr~EuJrwv8ww^D2qFSdQdahch_Vbj$E~hLoPU9a*shfM
zU-~zwS%HBu9e1?e#ZR@9?M&^9o?d={KX?L7Gp4+juruli8D3*0eHMRcyIo;yzuNZ3
z72!MVdxm|h{hOBYC>^W6Xt7hR@wU%8n;lx*jhl%@N#T!(^6JYwAz0`CmX&3`!qiMX
zeGb7Gc%q44VfIJt**PPwf9L~CTnFMa-@Re-KH9YeJhwJJ-z;`ToYVb1%KMim{#%7Q
z6EHPfoO#Z>R`1HrqY=~ZHzz@+BDdyPuWrN>nr!=+>$7mCiQ`J>EclI*<OGZ2XNkqu
zE8J>Fsmmzwxt$0|9vhojAZvYP*wuHsTK5U>?YM~AYKZy6lhr;N6W;-@dEl=BaB~iF
z8*>iN`WsUkZAwQCr!N;Op64i;xTb06ZR5h==zqqDzbJb`O0(^n1ic5`l#FK`+B7P8
zKGbAlbXdG3;NJ}Dhxk=+N;pd4Pd_BKedg<?vw(pikwIMz-LYw`9;Jr(W4teIcV(QO
zric|7kaY|@uXA*WoH1W@WYIVY7};^T$Yi{f)?^V9A_{w`tAOEsgrbd|Nj>gjH|i>Y
zn|q8qsqdEQgm0Ua!xVY+GllJrV*j9!jU0yPW?s4VX}bcK=-m<Jmd2RKeX%!2qOLQ$
zd%%r2j%OR;Tc+lsnT{ut{^Fc0`fvOjP>yH4WWy_GW|=bXrlytdyX(gS-7d~hoLZFz
z>waM9ljG^}R(419UKa6n{HcVmGJ;ViU#NG#hbIHCwpRx|pAT2w;xTJejfjAW&u_hN
zd5paq7nBKaP5wj8eUPUV4Io>LdbC7@B#zo2-K$R9A0vT|*CPTp*cY>7s(@kb<#yd!
zo$F^;+zIUu_q`Om<22Q7QNrh{Q|1&YZG_IBF@oOA404V3y}(sNwxM&v;1ELU9qe}O
zHJOSUgL1TKO#1Urmf4<OrygL6m(g8eYEmz*gR-K**O{OHphkfix~aGM%+CQ7m;b&8
z8j+alci6KV719ZOdc%J(s1-30uJQnEePzyULA@WNE~Pq&30wPNFE!HaCP>1RKpI>u
z=qPUQ4E33k!K@21F`JHj`O1WI5z_#73^dDV;%&;V&L18@Vc&>ZZe9kyi53dZ!_XRf
zI!=5Zk)51P1+ar3%mM6I=M;Z9cpqc~%*Knb!5+%!BMd|vK?T8^kX!_fsUyJn21aR4
z(LU;QDJ(Cd4}Vs*4OQ2NE_Yv;HKjJVYCH%}vNc*)I+aZixE3BSc1*nZQp!H3O6%Sf
z5cD1Q9i3nunk51_HIz+&$Cdz`)%y`1V#>zkKlG>*&Ino8VR#he583;J#<z8*sv5s>
zxO=jlyCSg~9j>HpUut!X2Bj7TKHwuq5D2K8f$(He!H|IAmB?Q_ftOVo3qbDntVV0d
zDsXV<*)W@7-d=DKPA4RUW${ptc>W&E7i<jNLWk<_NTvr|^eeEKM5&yC|BS+NNV*=!
z)0?#1+q0uKjqBQWht>^i_g}xK?UXo7G(yP9Jlc1V)~>FwC7B^sD{+;FNQp`SO+I~i
z{K)A?B)cg=?n|Y9v-!#`WlVlns9s1;G7Z!Z9~R(#=kYK|fp=7B_LO?%q5y1q1uJ@C
zV{$P&w0_h``-e=R!hJl|)SnfHDbYmab?x^9jTVI#D~F;>R8R6-e{&_Cf?3f^buttq
zy5WQ&tmUih2@jU}hm@$hIcZ3xwFQ-43azuZWckzG5oE!*fL?j7I^deW%JcqWydv5A
znh{{@wCntbCxpT#e@i}VyqoDgVirj=Yca=qEAh$X9;E^bL$BLb)@}x-((qxyVegh3
z@tACw<e+GpRlSn=buwC7wtxU{Anj=JWAFNu;E5>h3iQmlARg}+iS7xF!ewOcYfOh1
zy1@$f`(mRGuUq`Te9Ps2^pDBbKanV#uL9iGf<pQDmbPN~d?nzdF2Cs=_iXuknC<M;
zI)8PfV~(RUQe0I3vXHkQ)de{^Ovrs+vMp(q?W`8eh<9wLEbd0Y{;$OQpz#xNyY3hf
zn5zU@5$mlzhs?*kxvI}Hi}Ymdzjv+uQ~aX#F!t6ovt}36vsU)ULC^LT?8lZ<1VXBo
zmVGHJTG%0&BcFwkdE>Ut%Sujur{tyU(s~k~21z1MQl<K`GSnTrNJL47h3w<gomU#e
zCMv?KI#dltNWMjU{Naqt>UPd39SnHtG6fY7RcI*w*K-fSZM{(}pWb?3zP$AY?QvV*
z^1$+=*X!`Ip2-Y}u$p&k`)F+~5+c)p;+|6Krd>3C?sr9)q67I3G!`uHS4iZExgug|
z21|K)ElW~+!U1;^<EzF^zY!jxsb@68oBx9P*?bLP?8|6otuA=bx86i;Y&Yx#RD99X
zwws+}vEi=YtQsMDR@p$x+JhjF>{<G*YgmU97yrF!0Si$KYnQRvS15HhT=#Cf9i5VU
zeP6!58V7@ZL?Sz^?0x?W1S9te*<ImYR(M@sx?`V0^5Z|4E(W)iq6mc7D_`Hzj@tMF
z@JO-z<e*4YPG?be9J5}E88FyOxIY%XX*?m1<ItVvwX&Da3IF3g!JM!OsmFLH_L8O1
zk|^yQdlT{SXW#sjzo}qfCD?&78cF5*!RayTy%H`hP?&!6#qROAA$izy=s)EC8%_pd
z#8|#-a*k)M`<@$P0`O0<)Nru=O~h~{Ev2AOQmoSR2%6YRZW0mc@n!FxU}W$J4!?k-
zTKJG*(xei#Cr6miH9-IE1P-5AM3Mr<4pEn`%K%Z=?-=p!s7=i3Wm<8g1$;luSNMB)
z?hgPfg%xAjFq~@hrfhpFCF<Y{AUwrV(;<?moWbJQI@YiZH(+o(Rt%0Q^i?&_vVTrF
zArk-NFqDyDIeNNgU!FbJDE&~4M&Ij!0JC<?p{njQPKQssHyIEV9fj8ZoIbgubn$zZ
z;6G6qj^f(lYKB&KF*nIK&Bv4}-N6(~J%*3#&fyh=zt^F{{rp+VKEJCF(`xwott^Gf
zi>#prWkQ0u&v}TPf8P?0VLS8?NXiR41{~L5a;<Imd_5Zm0l}6d?5F?Dyv8BQtyKQ|
zfEV<N$Uoa5CSALe!h`yG>J71sc+y#zj1+qX@5x2pqw-qFQd9c84OIS`L(jU|2ua{I
zK>Ka2i~=fbD1BG!Ini<`x-$QILToVE)0#j}#+=}PIh_HviX~rNeRn;2gK4?-a2@MX
z+zO`!^Ve8|GLk(Q`(vHjQCWNEU-_O#_@7`IMWXCP=LCLb%jhxARb9{LVuvc!utMcr
ze&C_vU)g!x@fyMTyrJ)oxF681(*abrJ1lEBn@kp7Yh?Z7(^(iWkOMXq#9IoK00cF%
zn`et|xXY_ITk^Hz)u%B$H&ITN)w{DdNJw{Uqpk*R3|5wumhge_$o9cnUooW2g2QFm
z0U54O>N58a{mMYiuPd5_e|*FTSrfU4J6(HIOF-t`L)pi5%Qac8=WdjkG1ifBwVIpx
zF@wu5P`><X$vJ$LS;^uH5$OEBQOH|nN-|lC@z;P)Z)-Qt-$`A82XT-5PIsV$T7GBa
zd%2_{2f!OGQ}JLskw0t|vX3LeM|-lLJ45$Swc`k4r)8Gqf!$M5Wy8!^rF8*p#f`a4
z3#P<;0&x4G8zftH@`!wsyGLvY_%WOfc8?(8n_+=KOr#`KA<QI)p4OkEuitZPka}NL
zQ5NFsySC5OTOX!Dt^5g{*nCTnesQPkF7_vCAF3i609sNk^&J$63(#yLNp~`30x>H`
zalc@jM$uVLHZngvWMS_n@kZ?|VS^r689?SdHb)Lu2Ke{7;H0+PXnqr}r!JJyNcQf}
ze<qR&Sx_(*)`c_f^i=b+mCu%|I14nMnijA#DO~~CsI-v7P4NoAg%<n}gYPFiA<w&V
z+ZjBb2KshiuG6D_ZM?{sA&M3dY8&4?pOLy+9jn@rvk}$q9)OgDdi~J})0?(7P-^j3
z{#(R*gIrXXu6x+e4Jb+UV*XL#dtGPO*j!ZCEag{MkHOOL5Ubi+w|9Ig=~PQ4>y$je
z9D(wwoI(5uYSXNoPNnigt6Wz1q|KH!eI-hZ5Y5isSY&W?5Wo(Uzu}8W8p00x{~Xrd
zns(OpB7erS*m!=n_CZ?{KpFg_Tc;-2QdW2(bYz~Q$=G>M42r^wbT)7?^*JX9afjm7
zSI4PIO#j^ZNkVs*!;UOCi@wigC}TEjdjzeoNnOvfbJ>4aJ8m^e|I^w3_IqEjR4fJS
zb{J*y+i7NI2i9Nt&z|7j&b*Om{LmVUcg(4jM&efsSM#p*r-d;WJAoR5prgaj0rfyz
zO%77%TS@hH1N_>9$f|T&H2$@$*ld8V18$I5{m=j6RN*mHEL)Sg$vpMKD3)!kQ$G<&
zds_J;Cn!Nd7K{Kqf%pz0cv)FM*f!=U0^;E|6Krlx@HUl-0Gj1w(+jJrHLs>ap7pdd
zmogKeUbhs`Q3!z!!Hp-)fH{5#qW@x$A0$P~&$qOd%kQ@ql#v{~<cT7@A}z}!H|yXl
z)|t!8>JYR&*$yE`L`Wks07mHlEPX9-!<WN9*^^a@-x7&R#3%#0AoODkBSKZ&7$&+Q
z_L`FtoD~7u><r9Vo_a|ayt8hmSfSGS(~-0J<{%Z-WoSQs)0>Krk*WG#Sj5*OGk}-m
z)3$-!h<AiQWl(B_E2>~1Ov28a0-Ihy`2AzcNoy;l+tI0iI2(OYd9T5f-;e0=_cr2x
zkJ31jYn9z-*cTmR8b^039b<MDWrZ_9&dsYjhAA~y5f4R40Au0wbQoRk;rFN**g|L1
zV2lcwAJShk$>iTCq7JxMErwL$;}PMY5Mfrnyq7cBuw#)=a+nJYPd=(IUv^2QH(Rkk
zG*O_n3jZT5P!WXIig>yd0f)zqD0^;TZ!E69d{5jl6*`>XaH{ZFHXF)(p3e*$WMw@K
z{xq$vT=u*JlVB;)mc%<NUPU|Gekppg;ndIlOi3Z8sXMsP?WqYxk>Q4ljYKsjVop-W
z%s2MZ#h}R-Fejy{^P4ec1))S`pdry!-ZVwCtQO}iqfEmB7K)iteNGPBzT<{_f{ph7
zjG=74Vwf?3a#~pd?N>%LjtWu0zZhiwI^MF!*`tKgVVJlA#ngH=Dl-RR{075rOA@m9
zbc;Bgv(#A{TS8@x9uYn$@>^<=%DyCT5pPPaUk<5mg!5&uAU^MrU-}_g!|ZG0>GGDS
zp|A7yrfF`Z!+$7xQG}0Yj+$_CvHn<2f!0vMJ9$rj_1^p$cZ=gfqx41R3f$d=^P3~f
zwU;{13>cq$M_wo+!4}>+0RdP3w0$Lwnpbh%{wBzh+aO>S$0h*`4wwV$+mRjH!|NPy
zknX^eW|a|0_P!pny&Url?GLp#&_?=Ik^G3m-4d4E4*00t|EcVHYJoNXlm&28SJ@sk
zGdrXAeQDQr=FVCKr!J&EcweY`G;)7?BdYaLyJ`r00{vA6D8vNwgsOPuyywEDoW!^<
z`R<slZ=ZDns5khXh3w18iU(x0-oNyJmVy5pdWwmFsx8vefs_<KSPIqM90o0Pm>ivu
zx!|?aDE+V`{z%jC8O$!Abo?8-?OSLR5WjgYNZg2m?K<g~^U2>Zn_~R+!1~s=cwf#D
zj_Mik{q2w>dL67*wQ>KiZdi0djN{PP|5s%Em*g#|*BC5jG=~zJRQ~$tXtdYyoCsPA
zybCi)>rBI1<qTD&U1b{@%=azFtBff1cm+T2ZQ>VJv}ZGa)>dGA4RgG2eGqSoju$qW
z$`Y?F@8Q^kO((%6OqA~Il#s<wKlt1r5&_balTOn=1C+YBsF#!OvwhRTz}fY43_x-;
zP~|tnN6RJ3DIRBQZmNJ~_SQ?_+;ug7?a^M#ILntTfKWpKl_fUl<)8^WxyGOR;)Mov
z<i>6M)Pq4=aB@a<ECJ5~I9<NlC9GrCy!n#qZ4OdEk^B0ebwfzsf*M*!RUM|dIEnDP
zXjA(!U^Zy}i1Z7q{yH9a3oh?Sfy6q7__(fzZQWtvFY`r{v2G87z#rs&*2ji2_DVPp
z47d9VJZuqs>o+;>IBAm9u?_#?>Ho^qR~$JBAfmw$3>f+lTcD#}pv|a0rAcRj!vH(J
z=tyrR2U<(BP^t|;-^faLq{Kh&eb^||>j-qMA9L(8f59CT|5+iIc)}Cs@!wJnYq$~}
z*aOQWg$>RoMb0`4^m6BCXssJ0Ek?60X~Pe3+=bBNQmDRx1ncCUbf6B;9)}s<eVzs9
zGy;bl>#9@PgK_TbYk!v-&9&c6)c>XVFL&8Vj+`U{mFJh>Eu&ul@fn7N&~)be+K8&`
zk)?@O8A%~+I|3UajZ~S@#QU{mUR__Mz|J+ROzh@b1+fFHu!YP`-`HSr@l=!&^_biy
z2ZfyY5h6*So4cN_v@X^zNw$2Vq^khGIov<&FAEjMgk2pttou@^KlyR$gX*Nsy5(*o
zytN8*=lX<JO;+FR>CfzR6u9TTFl)OVN9p^cXqcbw-K?EJCNX@Cj;49MBw%4OmH-ZB
z$_uNsLk!zacN+IBDF$3+>L5`Ar>`0^lWwC5G4O7E;}>N#WUKEo%h&dM6T9(1{IKK2
zh6bwB`o*ss0ockotB)rxpzq8&+Sc4;kPb!&?_L%x$ff;~<b2H^eTMjzC8UG<ubvYm
z*VY3mTvLjvMLgs?)J-qOg-1Hk%?2&M*XrhI%w-<|tCVNAc;D;38g5Ne4E{-`dxiA0
zW^B!Pleqo3>rcqm4xE&T>?7&0*Z)j_Hk^El^3DkdJb?+|n(_5rfwrP}Tf6VhwBxhP
zgcoL`-F8@R)Ghp2>!=UuB^n*hl$AMnvI)Yp994(k^?5(ho?odeVZKjfv4*EZ`Tl4%
zrvrI5X-MbbwC#R)L+I44LbKK^*7eL6v1f7R=G}SnsAn^GL7u<R&74H3PD45Me%yN&
z!oJ)$!jJRbm>rPo$B}5KjhkraPrE`IzkpBwFeF=STU^eM=W4i|)1T5^Jm@Nebt(P6
z*RDkch#g1`^9m7w-f^mEwIr?TMRK<kh(vXN(`WUFpkj+ZGszevxkcGDZ@m-ONmNRD
zDUStZ4r09-qVM(eIS<~4R{ESY=;tBy$Tx~B^3t!Y15Wq6=!a)CF(-h#S+Hb1&s=@Z
za9x3HUQ-=PxEU3GJhD5t>5rq{IJWWbD@vkY#N&amqR*QNk4cjpJ>0YH<+Y93usL5}
zA~RrR!hK3rCNey^+Hg39djoytVdfLr-|I^L<sbKG))-7mRI6S2+5jSm<wCfnoy?xh
z>C(!K5vVLWFLLN-{@q1(xI$#Im+Ne3va@HIV{oFj22_?Tklw1$(uwzgAHcS`EXK>=
z!e?0==Zt^`ilWkLp5wgKv;pk;ke{f}P~P-l@ypgS6S65H)EnGU7%G9rm)Ee04zzt}
zv_9XU7C#sVyifhCHMRu7X~5=^=WoN<B|Da&5ym0)e<u9~7(RHM(`?t01@7YN*3)j&
z6(wc5oX)H^k!+nLk#@jfd&TAF%G{TPf=tDl2Bvxtkb0rEU)elG@{X6**BD+gV&Iyp
z$emGZ#K=U{>^#D$FstR+Sbl6|PkSt)nu11D+~E3PdIRvX4bZ7yy)FksF3mQ0FY@Et
zpG{#aCDEA(UyVs@v<$EI3O-+*qTDxdbX=F&L@L@W)_?ST+60roEP6lYo;O7Uw<xE<
zZT)2Fc0s(iX%0Ph%C22>Ed6WUWcO#h(kuUfYe`hLbB4i@V3q=_Z^{7iSMep$3?>7|
z1&TZngw)|V(Z4qGtIllXx>A2CViN1alw%{LGQXb|9<`RXNh<)yp1}nx=wCs$*Vy^>
z60RsK`6N`(Sej#&yZzOS-jXg|(#J^kXzoOrwGhgvB#i43m)5p>j}$PkoqqaVjmWe5
z`8QT?tu*@q&K{oj^VfFU-!zH}N*a{CANn^4M_q$>&$9e`@H@`n?G~*YK9Zn^|GP7g
zhZ!>}m@vlUp1!we2%PqN$edvEu{A91lw_FJyV8Z~rrq27MO&0b$jJE8|C0rtqnaNu
zQpgG06=qs`dGs<{<OovG3x`LjOa;O4u={Qx{~{Y=2UN@MyX!fQONqbm<Rw0h=h}Eb
zF6M%RaPa&7dK&0|U^D~FMd*OYV~q$&GP+x{8Xos{eDVb@2au~W58Tgfd}}|ef_!2Y
zaVc=bYWxKVDfc3X<j*5O+I019dHnWxT$8v}F%m4bbK6WNCgWuS@XO1w@%gEfb$h#!
zUIsj$amYA)50IF2dEHVWkBT`s*;N|+d+hKPgfl{kt=hblv_5B;jm!GN+L#N{Qoz<%
z<&+Jid@>48L0cAM!a_Y@{Yq=AUybr!m{wze8j)j$hVsoCBU|ZRA?GqvID-`|A9PET
ze??^<BjBFFZh%vXkg?+`?mY-m<Zd>16BdnEwDqLpMZ<2%t}oOdjbBsO<+v`lqmOQp
z%yrH8oS^A42^JlP6?~i+-Y4{O{@c^zbS%}%rQL6Gf}%$S9j;u6$h>MF<2$P$ucobB
zJa(*B|5gEsCHq0<T(Uy9{`dO)7v4kceIdAv8exa!ElO#VPinW|m(@%RmnAzH%d|t$
zmy%nXr`~Ys^RIK2V!r@ztJT{lu``1#9SWW|oSB%j0PnWJ2-jPW70Me3;<M|R?C@^B
zyDAi+hAi!80`9s1WuA84>%YBOwDCSSyG&S1U41e+e?IkA_S};Izb{>In*O!xx^^_u
zvieMFcQq~(t=s{wSYa)1?0V)2o+;CzT><-|NAx}K*t8qBRyYe^?<+@pPwQrIT7$P+
zR+*_#uA4V57<(R9!5Rm)wcNYEK5FPwuiUoZMlComnA4s=%yx(gp35m?A-;1EeMuUN
z<XNF>2QHXzgaaOO=76I@%sTb{5TEqn>E!gKocAfDTgJ1Z<;4BGCNq8Y?6Ez@8z1{&
z!F)Fz)F*sX_35?(xXrk+3VvSI*;NBMjr~N7ej)w#6b}`59m(_c4d~i`(wi-XNG;*%
zv5>?0`Fcj=4%QCxcHd#4_T$6}d$fo&@%bEO&w4N!1sbmbc&9i75XM;1XmnKwJHopu
zv#~4EQNkVc&p`tdNFBxC_7#X64x-YOyb7wnUIG0o$(0)SEYVAypLyrg8eIFa4zEdd
ze&x{D_it(GN0|)DPSBJTa&8hFRz4Jp9|`*SPS<HlLp2w(fX~LgNeSHtQvufOn#z-d
zfR|V2(cmj(=ARXwph3`V`%T?UQ^$QOn11D~mnUlUxshI6_%L}CXViVBriT`MuWpnW
z1&C<B7+?fVLSCt8oO_GnO7^_h*E6C>QG9s4Ur==Ood=w;$6(QZ7RZVNzNpBwd@b;>
zm)oP~vO+I>IX@bPtt?nPU4VAd0S2D$dcTPD$Oxl8RweSZ?<;O7zifeVEoVwqX=v&%
zEC*Jt+H;=2H?(Rk0UwXCj}LnIb~9+VAaANwc)x7Xf=<CNIz780VEFSV{8rI)Qft6<
ziN-4}g_egDK*;ssY{S9>TE^|tZW!6i8KT$l=4Ew==eQJpbToxP!EwzfUjuy*i7=^q
zFQEv|sMm-?Z=Zc%8l~y;RpIdJl4rB)fO;l_@MZESWIAEBZ5lwL>oomwBU!O(>7(oS
zj@p;1jz<BC@Y##Rg%*9Xhq2XH_qW2}$Cef9mGdZ<`eq2u@c3cd><$?)itK1Dp57Hw
zT>pe?_z~7g_cv|<M(j~;G^C1q19ZW6=h5N6QJ1)WMV#*o{~0@CNUBY{mI(JkVuv{E
z?uEe0y%M`O5Ui*7LNEbnJM~h05vC)B;5%diPrrZ5!6#+ca>*X2=#F^Wx4Cnz!2_Ri
zVGpPt{RJ#~pPgI0&voa=MBWEmBENtff(P%N&ly6lbb`NzwIXn4<ZlK~5E{7ed?57@
zKL&7fi%;NGc~Z`>nygmA-=d=qrikX*P7cA6LmBYojUj$EnXlf?6`xLgIUY<0DG=^a
z1QWk~dGIGA20bC#c>TDWDimJU8A?c361x6yzK-sl*HFaCk@svf-X*nBTj8DCkVM}y
zU^M=?a;vccOP1u8@_}e&;hVA|u=QRw4IOx9Qwmbxlf?@*7P}bY^cHj<sQvQG&i0_V
zB7@F^Kj_0EQ^x{uFFQDt6?p!>4MM<DZzK^&qvPh(Xcw2!{j=V@pwr{9%}cQB{(FE)
zI+=~fB3an&I}qOhzKJg5r&24R@qTKq_!j`Xdhf*pPpg>clxxZqUhb1X@#@_U4~Puh
zpQ#z1Jkk66F+uPwj&H}TpcqqT-u6F6ZA8hT&la$j*i~dx7T(()`v^Z7e6@oeL}5}q
zrjFA7J}y-JDq~X1&xiLI8HXdGIvN6-<agWZoivxJPr2|D%5ybJF&dYdqJn0rGQU6O
zinu>EYF>=_qdOzeXVS$3m}fJ;$1C&R2qE93%(j1edZ+-q7cyVwJ-w-|Ez`f{0_e0u
z`r}iEmX98gSE9DnGrTG~?gl$>DqKN~v?*V7J0QbL8|5u0DQ1f;_u6L~?GM}(nOFX;
zTazhdca|Q8AAwGdgNfCwi&Ng{r#?c8v>g-Wy;t*}fFC=8NrAFWs4F8j85mEpms{CP
z(#`tOHZO3#Os=<WD-fxLZf2YXjO+-c7CK(vUls5?XYif}U<*7NrS(J}wr$KtiL|SK
zk9aRERIG0g94JhqsEB@EUJWl4+%7IFzi4h*^F!&OO`)wG6*+C4$s~v&+0L|#Il6<~
zE&0Dj3!5BNqa$1eyAZ!p7<9%yz~j);$<|o3;(U3a)QQXPTQCEu^I+E+td-QFlc@Gs
z50CIz0DMs3XoF?gloJca7d<hAA|VKBORd1p<alUFq!l@)s#^SN2@>`=rGB|!eaZQ#
z8&?26H3#7T_*90)v+NjuSC-iJ!OHC6c;(9b=Vd1A)@<Z(;?n{1*7cF8h{x11=kRK6
zLVe!y@=Q6VvcP`Njt%;YRaXyUYQ^wiN2*!-mPXF%(@sOJ(xCVRr1B*r4ph7^DllWP
z&UD;B-q;9V1T247?s^_Y_bTG9KNZC*-@>-7HoH6bz6;(tHEWj_-0oM#0_W4O>9hT~
zo%>8Ga#07##At?E5B0!aQ#5tIz+0;%fvx4%F9pSKC>tPd4V*$y&@lL%`E=KZ?d7Tb
z>+SYAr0%wNIOaX(IsIZ6E#Te*c^@m233!#uNi)<h0>}cVD^0J5Mn<Xwo-LesSAZuD
zU<Rr}uXjhxH_N8}u8^)jCGcS~Ga~HBORDR9ErevKQU5t*R)OyRX%`&LdleJ8*$6Rf
zm)_Qlo7zIfD<0)vkOsZh0qZ?2B+$E%olg}CYPB9)+gN8<2#XO{f`Q^0vjCgNZV@=#
ztZVkx(f^aNuQ^4hWp}><;w%ON3N}xrL3@1h1}78@%HzWo_)v5;1ZHG&M5@-O6l{c9
z#P=dTPI3s|;KX-M;mbNqx)iEHJbK3-r5pjlj)rdcHsJ5Bwm17j0;%HZPuWS-?-Oe?
ze(AP2mqD5osje@VnY4CfKEnUn1yKHSKiapcEb{!g!2@`DO92+%yx1P>+eH`fJULa0
zQocFzydMP908bSiycgA-1#XudK!f@ZSav6FyV0+TEsB_gg$wUnqQN)$ti|fN#{#SO
zeb|7{FP)F8tS>8fI)S^~%5~2-Hf>gU8eoB}3mNB?WkF{5;c1PABWIFdWbE!@-G;Uu
zM{~GV4kwUwoanhs@ma=ng#WN~yvfFUS71X<+5N&b?`hzgGvgffynn|g@}L4Dvy{-M
zG`F4T9-`C=!@)wd?f1fl4<J@gG0#Jh7l|~l8@}IZ^B&FEE&E0sNa50QhogL!N2D@;
zW1-pU$K6H8^Wq*E+Kcy1IjnA2O1Qp?Xs2J6?6;Nh*BD}OaG0e?&X}qn!jRs|V@rj>
z!x52(6dB;7%mIni@+kFUR$`+ZaWL*3F7!=IoePhTj!ur+Q%^l?Oyg2hQ#q68hm%v6
zv}#OLlR3VSJgP}G*!;i(in%s+ZK`Khf)6Fog=N9mNo6_>84!3#^@4XOb(e%`07n2V
z?eq6fCkjlGWr}iWcWo0M>W|$Q90%J=FC4?H6r4U2#6~z}51|Dvlo84p5A%h&qn8q@
zPZRE_N%OIOBwU9<se<w4y(8gTT*N#eykmIo#qUE3DdPml3{CF#jE0#a*UocAHyT3)
z*;g!YE@#Xlho)|?a-$=DdZ^qS)|w-5sP|L8x!1*v)XjW_Ymbj(3Mn~E@iARAP1JZj
zIv-5r*YHmZ+qCbS91|dhK<Re?y(CD#Z?|7f7)WIB&)1q`Umwh?r(0w;go|>2Rnw`;
z6aEpC+zHEj(611P2_y0vWALe4eLM$*sx?<}@o-qdv*k-X8xMRC$M8X~_3GrROwebU
z+0=Xt^kS^&ctP+dB>zH&gE@qoT+AwobN9|DT1zt6MSflZ25P!qb0$jm@}pE`VX95D
zDuTMW0fWJ>(0?+L7&=kCA49{eTsrYkJGVRv5d6^O!EwxXs?64e?x3@oJgBQFIL>|W
z4#dx%;U+DSHcI?eGuX)VSuW<xtY%;8a{j3^0y>eP3Fne9e@YEsNs{5P0V$43@Mp_7
zgEdZGf$;XgxA)!_Zm2ebF`}Q4Gpy${AVO}{%}jY`U2qIra?#iRsMJ&K_AzMGZnJly
z>N9w+X0MrTVpt`~&F@*rbU4h5z9IP}YiAgR^2fC^i(a*)H$(LL@DJrVm#d{pA$eNx
z1&VJ-jeJcY?Ph@@QCXN*e{>xngdp0Q;L1Gg%oRb-=9_43h21)QtLOX$5-!rfwGa6u
zW<UrwWhW9FOa#>5KcZGhjTwy1coD;-g$toc;T}6UFn+PvK|%I1sU+~I2UvD-A?z_B
zz`GUcx%>;kC@&tS*SHJq*+?xIp@;45hR;M9G4P>HZdc9$3pe&#nKZ0rh0-Lhv4;1x
zS{#>b0-imxOb3Viu+4jy=}{Wx+WS;kRWhc&Fz|a^n5EMBD2m@{D!Arn)%!QGpLJ?X
z%7nv*t_a|I`mw6gG?+)xS>N|LxEivsQ!sx7h)D-ycNZc@D|j`p`H4TMyB+N`SLhNp
z@mL1DjV64#I`j*f(J0l#jK$BWng|?9;r>B+(<^CEFdO{3a9F2)Y^r$D>{m>-<8Hc(
zYA6<USL&L>zYObd`@%=M6EKCm(wlrg<6!?xEd1h}G+$8W$wObeEvm4^H;4`w$A$L9
z26_6*j)LnMl2Q2*hkfp$Q<;A5dq=qJ;Pz8Dj5-%_$>a*D)Lu-xOxK($v^spd(VewZ
zJdiT6p~9J*%h3Fe<KXH3GCtmPziP8D=hXPsEYx{n^n~>cE`?F*D?BCw)vtK647z6D
zP^tx5qZS>!AHIm21x0@3^!QZnNONuo2u33@W-G8I(LB)4HBq!+9q4O)e#Z>{3_qMA
zBm>uZzykXzaPX4vpHhy1NZB7E<?*b$kILv@e^LuaB@U`~evu$F(t5R66mzb@3uAi7
z1O4(Y?PS4fRpHK~LJ~T^-O$10EgK{_l_;X?h0U9-<w#Q4?!{c{dk3SDhOyDQoGfXt
zB%AI`N7+Gfn1NrOg9K~hJ8s^<mWt9;uvErsk&J|s`Ytt%h7>uDnWREfTRAU()WQ&U
z*kW_f=_<fZ{#kc)<Z!s&0$k=V`MAmPa5brH)u1e@GyOxOuzggR(NAwUSG&$)o_qAm
zzZCXwz2%3~9VO92IY{VRA9Md&o;gU{ubFCM-4w&SmQc=6R?(pqZOsyr?8>ma-~2|*
z450$RZ|QHERxEYi?5n<Jl)Pa$bam?fP}pxqkqJWdwcj2PU|<1ciw6vS#a!0PPZx+7
z+`)8OP^8+o-yWpLy}&k}62_M-%Erp%ed{B;wBCP|5;Pb9$UM6+&OBYHW9$l$|HdG*
z6=?dQ^aH!#;Kfsg*CUcxk$fT(1!b4_{WiXFeMgy^O0_Zl!(F^Gz4u&3eo2}L;s1K}
z-wOB^^UMWpzoK5&ax)W~HHtz%O%}34@%fMt@c-!g3a+@iWm_yrf)m^t4+IIGK;s%5
zf@^}iyN2NI(n#a(?hxFAyIXK*TpM1W`|iEteB+(>1A27rz1NymHEULt_phS0Pri9Z
zKgaovl+0PT?QBb<TJo35>@;5`8Jxd7H@{HXu#+9iHz@6h_T|!>F}#E4-Bk$sB#P(n
zfz7T>CoYDii2qSCK6{G;pNS}}0M@F}Cs6C!jG?vVU4(W)7~MgPiT_cZV-!;ky!29+
z#KgaH5`2w*P8&LoCFq`|z2U{Ch8t)Onl31IIri$;Py5y@aro;UYc?i1W!TU@`aiFc
z6_V~aogSK2)0Rfq4Vj)$kz#z!SIc?MMzqESEZeci$Ml@oP0Tb<>?Tm?lS1`yx9y)>
zd2#fekB#pNU{ACu%a!cOkGsaxlwysPkvvGPq&Sr;fngeaF4AnjB`Wqs!BWrHLmVuK
z==lzx1G!8D$x`8krrPwzk~r{d)q|sh&$WN%waI5e*!q<Z8AF&UUvD2Mshbtuh4afQ
zOBEL*=9rQgb&{Eaajw;CT^|77x}LY+wQfBgAH+qI(}=UR9^{4s|NOh#{fQ&}9$`3R
z=V<?S{WLVps@h^cne^-I-j?e$p8uFbQPkQ&s)3Unm&xCL3P+nWOmn9Xx0BxiW%n^w
z#=OwxmpE;K-R9;(R&gNLnA&!faEGVHl)zm*hYhmqpj0#ozVhuU?*`Fjq2enywYyBn
zEqSr!Tq*Jw7laO)b)pi5hKY+Ep}A=2=imC^Ek-+v9p9|2y+ikCx_zhpKkUvGhW+8Q
z4aYmdK<Mzts!kcR44js`LVfzBK?v^4MF=H^>2Lna3U)iZ0ZsRw&MHdZdz`%?5GQOS
zSG&Sm>+Io_l*P4<-Bd=))j?ET+?{_ZjAx?6ZBM>ov|H?~edG`{{kI6@C(b7+z$IZu
zSjI=H1lT+_I>SmZ>Yr{i&Gr(f_QGfc<%VOF%CP1aWfvyl9^XyU>@(Vh_ba^EFYAQL
z&Z-;sw1)^1VJ#xpu9~UmF`+?@e=rdc#0-2vBPlVu)Gv!hdL_P4WMn)MT!oC!Q?Yj&
zey?b`2Z&-6(lpqz9&*2)ov|rwFi3g0hR)YJ(qRccikN;m!{ozx*DJ~Ftew(^Jy=bF
zUM>}TYOV<EIl}c*zD)gY`m|{Shl;W<vc_m5>eKPERaL>=x>uHM`-LRmRe9a6Z!(Kr
zN78`bZ42EnMdj|x(|Hl00hzelhEGiSOsk8P<#N46b1JZk@fX}-fH9TR_z`zuZN~7w
zIZ-&8?=e3k4vS<Nm^9K(q8vUnfa{L;?=PBqXXRk1^ab~uNd_?~0uLb#PrrXTIdLoZ
zCsRIM)R67p&NPx@(*X{y4mG-=eW-LAiW~^2eNKNtW^b`NTdtS(v!-fIMi0t4C*lK*
zPCr(LR@<&NJJegwjf6gT2Ov+eG_8sj$fit<l&Y0UMx-zoI2a91FS}Unscc$RT8PT0
zaZMS|itJ1APYJy~=PCF+03EiGVC!H?Z)A&(XG>tcoQgRmGleSt&u@?{ZV*7H@JA8w
z@G6(LsqC|rdi-M5^s#@06d!{+A1$d_w3|a6!>?L3^uKBt_%zg$Ezlh3rwKu?@q8|a
z2mj?&i6=V?B;NH<4!|YPn@xZ(W|6xEd>*e+Mc0(HGTOQB=~{Q9`5QbxP+r~g|EtGj
zCXq4W@UEb12387@xv6XoPvf<-EykSoTWzih1`7W8$GL+L!;h)mwC9v~YKRtc2gHXN
z)V#jwPjz43axWo!vu#0s>>Ba2SuTFE-t=kBl3E69d)&vbm(FGbxakXtH5^pksD8j(
zjIlb;u>zMKc<p?J*N|aC5b$&^5(z*aHED)O*2%)U*7D3AfhJ6jyF)mh)iyehe^<^w
z*sV|2o>5DLD^;y`$R8Jvu^Vcg^ZpoJRMRTY%JRD<7MLrF5y7~<Q}yyz0HceZe-!iJ
z1C#N)MpEF*7I(colJY^XC;2&JeOR>X6a5~2s|cQKJMY#%lYEAJ@o@#jv<bX?PWqty
ztFk#)A<*ZG<L;+jfA@_hzbu-Z7S9`|v`<^ImP?oF6~3L`58{CA`Afx7t}pIZ*XG;M
z@A5ylnExGpb*X=TDSVJyD)@yI{^JZhKC5Y5y5wjra4BaAOARV%+gi5J#MwOLJqA?G
zYHu1A&@4iD2*nb<#sn;WsWaZpKASVH&x8Tf8(KowdzyF-4f-;YR_g~xSb!gKZCuw2
zhorG1sezX(pi=;=St*Ov<a_N5V5n0Edo!!~{XHx?tQl-2x`YCWId<u^+udslMq~q1
z^wht0DWpp_g%vCSvQBYx$D3NJT>3g=U0vd}TsMEiw^nL#k_dXI7NoEN<GgN9MA+IP
z?N;9?Js~0_KzF6S#y9G3KY>FqyfRx|>eka|OIi0h|2KgBS3E$3W6w^GaS=37`opY}
zD`+lk&_d}XRB8iOA;Nw@GIpFZ#wrZaw~VU%?rC;}l6+{Dfpn4y(q2%GA)*{afp_2L
z?r03twZ&AC%)(as+v1N%r`+OkW$F`mctPp+EaK9qa--kj8NRn}C2vxl_yE1zDDu>p
zFGw+<uw>fNpid?X2qmBF67s))t7zgZyW2ZD4J(vp`Q^5{9HX9(-l5WF2~rt;zGbh_
z*?+6u>Ri(K0W#S9N5JbkyVgYJTgso9X;K==N%0!H57K{JVJmKvLkvWFLojISgq77Z
z`B@={8&#Ct#eVqmcslP-HoAmF-^(tt{}p<<r)gE$TrM-4C|(X#8Y2E@h~yv)=ydvS
z^)lf7=e!^Q+_7%mYC8&YXXiL`vF5|OYaA!7?!5hbsYS)B6V2(^54;q>a+eLXL5`7+
zD`@>pxVWA{aS}zY=#w{}!u!G-xQ-bSvH35^&Q<Q+NHWQ!urOlmee*)|v*Se&TN!*)
z@-@NAe0~h1t*&2_^|znUK+Y`UJJa!kT{Z^kJYFa{8yalqP%`t^{&2#gT#4}M?f?|?
z(PWl--(F<Vz$4@Qe>Ikts1%^~u_RBvKI~@=f1<&*q5iJWQfpGu+$>1SYn#}o>yBL@
zOmtL-Bj9zLE7-%SnZ^3Sy)$p0X%|PL<5wtl%!JxUjcJ*S{hOD`risCSe;@fY2)$B~
zNo$rHhrSbQb>J_@s*eo$-$>SSphq@Pq?M$a<S5cLMdtp<H$3vlj!P|39lmywn`nwO
ztpqxlfoK**jhQp~Di47AZmsX0IbHCGMu`Pfz6qdYj0fFVCRii=nyCxCD4h7t7%``J
z4eGi*DUwH6S9ZQ$n=8)CXB=`tXX&$>RMsZ}Lm?$3p2w&2E*mzxf{`TjJ&35Qc5oHb
z$!bdiWbmJPDnJ<ZXQlmam@b;f+55kjxA}!;b2S?EhkVTm!trUz9gT;PCYkpHNRP{d
zO~-}HMsCPlYNH^1oKWbm&BAZP&tFOXIKDMdJ{5KHPFY1%xL%(+V8Gx)+6)QX#=AOH
zrqlG4&+{CLg$nLgFVTItoUOOu6uW>CJ?Q)1J^yfUo4g3~T@xAFm-;hb>t6Tfoje6l
zuytY#_vxR{d993*u2K7dl1A#;O_C8~CPV0%eXc^m*Z0nerRyL;mkr6Nh<AH2($+kS
zvwx}o3$LzG>upw&eKQ3E_yjLefAIU8Qh%PjGo+k+i_dh_zkA`bpeJSEeeq^*Jbgil
z=Q4`-|FH-g3rSawhb7HLZAOUd-A5JR3Nob*CLQrwV-0sNnH2nj`qOA;i^aUq%36Ig
zItY&Siy|_*VAG+)YM<cm8;s+PvA{<&C_Mu$-b&m$@;mvLP|Xkf*8gSPv()#K#hTgD
zxenDjbr$)DB#rsJH}42X0D_DAxUy5SNv!g3-oBqSp6!k#o;hqg@BCKu{Lgp*TM6lt
z9(R`fG5W2dbP-pp*zw+AwZ43-9<k-pr_XN{y@Uql%L@c_0Rx4<d8&0VY3~vG|K!k(
ze0LF|FBJ%JMYuEV?p`lfBdhL?Z}`2x&VgVN_Io&iq2x5c#sVf-z=4jYuu<yixADvs
zYt1B%>3;GPT=P7xAWH%weECQ43eZP|WPH*e8Ytzp*Ok%6N~%92>lZg4Q2nyaDvg&d
z;7a4le1nnRr8q*e4)P?UMkY4<FLq#)*#G8uUb!NTyV&cFp+KWBA=l^WRyl@Zt;AtR
zlH*f+0x;#DD10CG^R6YQEbRq$SnF@d3?|T;IcBGkCv+vO$F-Le?h#)3wuwjk-1z9U
z<)Y~JU!o`tSi?8$-anJiKBA<st(nk83eTdB5mH##EU%gsH+jx6^?u3vgisRtI}DHE
zAPR@(pchLpn}pj^1ypNNYz?a2t}EAd?DV>0U9L5GClBHX`a1@ekKOP4$I1PTN=pH6
zkN6VHxXBD;5okK#`kW*z0Ys5w6fc0(UPbyRkpvd@%VRfN`+@N(TK86~Z_-Jz#zE>1
zjossQvq1zi^PC(;Wj1-K5xL^uVYJuvgISh@RzyFs|E$R7Z-2z=QMQC#gCouHWR8FH
zO0jd;zsaUZzwMP4`iX+sBKaLhlXAc|)#a)ArYxt!@ox^jaDe<Mo|Wc&KjG{x^EW-r
zj%u!MvlTFQGs|apHfcxq{vE&mm$A`8^e+c$%sL^}Y;Cfk&;kW_&RzC)Aki579aO$s
zsVa~|c*w;f8?z4=qg;~T4!vB>L=k)==L_PR#6A?~;vu(&@81K4e<K&k;0b3mQ_5QP
zEI4?3By6AepIIZTal`BuDzu{nh15<WJIyR~Xy5`(k0MFBHUNE?ofQ1g^pr{WsMi2_
zJF#ND-Z&v@<fH*SLJXph5aNFj5dXtAC5!xi%9v7<e+>j0;2gJffj`=t6c=FBI1x$C
z`8qL6p896>2WM`~ix;sa*)*M%6kQyY#5Z7+7{r5(Xe27%1!PeZhL0QnBQpH2R1FY@
z3Rz{h*yOxMK7ek|mVdPtbF%Q-CXBv-{~#Q&4qK#CgII+k^*TW3%(yMoe8UsC%uV({
zW2iLD@E>1uq;M{_J$nVl{j`&S*=8wk^5noD6C$;z@dly>DGvftE@hr%^NZ`_j1439
zk&p4nKRpjb<3(aFN%{e22&9D6Jji|OE0XMl?EiKo{+D;lCr4P{kFB(9#g*|<5^x}~
z@Rx`1;rK~4ZbmN@5B`|NZ@(1~-l0{pL#G9M+F#pgi+&&UQ#!UmZAfp<Gj7Ui20P0B
zN2`6QVozF(y;qw4B3!SEc-w^D%Df48`ijkkwlkmGLBvQqK{Vi414O^RhFg^wgyMwl
z9og&se~tq$3|^fOYpz$DFjqcY_SrNeOcpA$hU55Ox59x3zDJ^(sw-ju5N`^Fsfz~X
zUxVqK)yg-90*zIkq+>)Z?*c2#{@<?zb3I%LhXO_Qf03@qM5{lcQrsDG(+32Rme+T#
ztNTdDJk#Q)@xUS5d5e=AcMmLfyV`QSATBK-UrN#9I{o=)M)1EWdVDA>`LYGHbFDcb
zR(cwRH8MogG}5!!Tr>dit*;w;OG=naF9?(DEw|%D)sHvI^JABKW*5O2%Cpg;Tn*U9
zR{!K-{`*Q$V~1K|5+zmVFrIT`SjIcYx9W<<!$s)S`8rykp;|lBHAq#x7~Y3v=~wmE
zVEp8fz?AV}YjpOw{cdz3d`!yi2iHRRTR&%d<$F#qY@(+;;ga%)7|~gYUgm##*8e^g
zv2Rhuxd|g>KDVy7shrAuXmxd&o+tAMe+wN)R@4oVNJu7&tW-qfudim$^I7Q$1f|ZA
zUUJ>m@|myty+hJnonaMcPITh=Pqz+^1{)p5$=K+jy~z`@enS&$iP}uhrT31HI+nz(
zKFbc-a8Mxz^dc{VYJJShMg>}ozUJvG9M(DgunaReokcg|ALRLe7b5`GFoPLj24m_)
z+da+e`h#^s$AcHY#9){EI<iw$Tzn44;53QLTGTSInoE1U9&{~W(aQ2QB=n+GfuB*W
zX21Q2Q`jw01jRwK(#UL8suX`n_)q`y6DRa7yq%MRM#D2+c&U^>p=*$AyjR>?9(v+j
zV;)LoQBIKb!Sd}@l<*1M@i_oWni$)Crgg8BSuZf%o79-O8~q>e;3D;JCov2Pt3SdM
z?0v|ZC#xZ*tPjJ(f%TWltyK1&TcZ8sPw&^N=QpsoN>90$=Fk@sBb|;zel~C~8J;Cx
z8EvUHzLsNzw)C|_zdiac8K_(MH-sjf{yj~1{peaPKj%pQpFV{!1m}ZhwRC=*vixqx
zxZ=&sjx-{Nle6d&GsBR=sg9)^^N{Pv_$puHZQd`wneA-F9Tv8v;O4U)OOK=9EsgQ@
zGr7jPey!?%wLj%r9J7;A9Z~g?+uBOjhYaLZZIcfitjMTFE!xTLkK!3{%uwc+hZtI8
z$@-NWvHVB8i2O;4G`3$o@1)Pmherd;&h7sKPRgS)5o>0^8MV&4rSSpzuNB}<uLT~d
zikGzvo;2%lGK_1r->cYcb|i*g@3X)CZ6s<v7VQI2&V|)E@-~0As^MT#ow=aG#cfa-
zc=(V1Y7zN+y`yc+YyVRYmjVNM;J6New_z2>*Op6*Xe;qlrr{&iX!01Nfvkhp_b6HG
z#>FNQiINK9#-K{li_*Qsu(Et&@Bn+|*yVC*Y1XQu)SvP88U4t{DdTUjac_WG2c-Ea
zX~OJgYzJ$4WO#Z`Be<BdfA`G)3&XU?@F6XAaq|w?jn#|tEWA$U?`~d<+t{b0jFO_b
zYn-TfMiSJFBhqbhtRgxrhfNo;KIMI>b1)^_8DXxfD197;0tH&eQD9>A&eWIOVa@vp
z1}mfg3wn@u{!Ul>MVI(YQ#F1sg)YbQ(>Vbs+;dBPI!E8=g-*Eq;mGoTMZy0JlmCu{
z`wMO(2F)Kt3d1-5V(j0#s~NuGGV<D}oCFpQ#5=QSu*(W(HDKFTOb`(Ij$<lF8Xftw
zx=TQq8=e?9Ipq$OvQ+wvNVZ|Yh-#~x)>2ZI?>!|HmS9A$jkuk)s214@Fg6)qP(L~y
z6AbcAz13CgqRRA`*Q$3JCD3j)R<55zq}ixn!bpVHpVWKK$!NEkx_m$3>-sKIs#Vrl
zB2e_gFM)!2Qnc3Qie_kr0lmvgk)S9nMFeRzXuGsli+|<w-2EV*$-x-QqfM+<Y>!jw
z;$g$2l25cZVes?zWJ!MIWmU%M?^wP-o12bW-S`ApfPbztmo<q=FZeAXqs%M#vj{A`
z%a-4^8{Q65jzT#=XoRuR^gyeZFSl3~+7~Dlx(_He8>U?X7+`ky`DXd!`N|wvrq_(W
zu*>>EH5KgV@IkFqMSfJL(Hc#_+wY@?uhzKs?9<_k^T8z5(M(;sJH5^PF0O~t@#V*Z
z_N$4M1()^JrQpIR4EH$8g^ut6zh}V?=)ANTF)ZBF!tm!X8C4DnPeR==*?2uCRa}da
zkWz1_ggt_U$!HSZ!~+x3iR;-S6?kx4iw%5tFVG!^BW;EB$*msrJ@*4whck8~+=x8O
zSiyKQl1}lp&`MMsE*fdIcO%nb>iue#cv(P7;nMV#_)6TtEv~rvc65z2j|2fXLRRJ@
z>%4`#GJ=rhD)D0RMT4{AF-kt9o-yG~j>lq+A*^eqL~&z3fAzPoVt>%2^+w6NBxbGP
z&L>k*8N9R(B%F8}DNGW9%Nt>wG?UTfh02_@Hyd?kSUwN^3|wcYQ~q~Kb;lukT6M>E
zxjNeGA~3p3o>;U_d{||+vNun)N`!__J~ns@jg6jO@zH;s?8{i(XH^#w!FAt#0p};Z
zI~6LCOHhG)I?r@EjlNS59_p1D3TB}bi}Y|5>4Nh4S<K7;#_@PsZX=e<r`X6s(bloM
z!KkpbNoJ)@pyz&vVqnxm0sUUk7oQ_z`73g_#@wEuh;X6Y<33Gd0n29f<e`8zoi(Wj
z%Y}l6E7Jt<B(p&dwcgCNr^Sd57Eq3|{SFgWxL}SebkK<u&c-hGGV!r|l_uo#xXd>b
zohgehcNf}Tnth2IJh+}2FZ#*pn<)x?x-IMt$@DWowgl9$M+$3GZ-%>|TTfg>+;#od
z-k<ukB5SB~P}99w3X1EKoYp_Y0-ug>6ip0)k}8o~lU!7kJdb-Y38^pIZBH_Z6`i$s
zVN5R^J@L~mv;a!Z_g>r5Yu#gis`r#{YDe+5R->l?O>EO~OW=#?$>8kfkrgcn4cGSW
zOt0RspJOYhMGAK!Rg=fUGa&XUu++dgEYGIJX}^#Vxl1&&&2?dDtn2k9eg0jQ6n4y@
zB3TNb465DeevodLe*mg1Q^oXJ#q#86@A~YJ+#<KzE&A7i)8&S5>b>tG*muN*NMM6=
zX|5FCV*PNx{|tpfCxjY3$KD?6dL&7j{=&BL6*IC_y5o2}nTg@LFrbG@GX$nEoh2N0
zDa>64IKoZL!YXbuPKD2xcnKhpmQRAq?7lrs*U<dK*}vVc;08hHiEzoz-j6)s@n-lR
z)X!@%zPcgl=}n0XxJJ}ce=`0^_J7@u<ouKUGJ#R3pa+gMrtgesM8$H&PL=IHB6n|~
z(eqFf^L*-1EUAY)!V<K67KC}BFyoXc!7$7o0zga2o~eRO&U%(LujJ9Q8q{L8j6h?+
zQ;nk7Q>&=x<+tsN=O4;7iyXRTlqeRl4BSu%OCoMcSkzc8D*D07$6v*anh=C7a*d?3
z&LRx8wgW>;j}<-V?Ry7L=p2<6K@q_Dd0Un>kE*JZDooCu(uXOTDCYGZQH7SunpwM^
zXpIhNy6N)vd}u)`ItS&vZFE|UsBd>Or)tK8+iH}xQma9fRR_%Olh)Wyww@08+xeQ~
zI_>nBW>tkJ`?hI@wAUc&=UywREiT@wEr(ygVnnTC6@z(iuuB@*GGbh)$ton0?6diY
zHMhG8B<kPH6$W+TXI3t4TFPS{mMcLtQqhw-d6MQjwm*NX9uA&&!JLfg+gu3c;~=6%
z>2=>R-cI(oKoicH7W8wdhF3Z71!{(mt03RgiPMKBKx}&<(BpFY%l>X2=LB%3>}};f
z0({ZaRLpTKrv|GBi(V?8MjV4DP$DXwE5SxC^O>^)vRW715#of#pWf6Q#V2q}i_hju
zh2i7#er<i*^FfEYGPuSOmK4|v!#O$8^dBivDfLfzTBLcrM=lkE=cWJ1%C89bI)DUv
za-j4sU&U@;_rfVXykEo&YYj=EBlhQ#fa@EoXY5j1_;YH}f4O18W``#m=d?eZP$+=u
z+q5b1pt=DcKNfhmi>F7KvsHx=1*my>?`4ijd`%{>_Jnq*mC7ll;MsaEJi7OjMSHz6
z4%DRp4Wh91VuSM8giD$t5W^<SUMX(8GrXp-0oJ!xvFLefjiYV~|Dx&sSZ9;ohHgxM
zxz*44Ew&&=;IbO{2h76%L(7e0TFWp?KY#9Hij{F8h#Z26K@BQtN*b0EAn_hUr6u%t
z?xMsIKV3HEm5D7<Oqc8M0@?yNm48;S3F5P@26u31j_BEoP+86vhXMck{TG;gO5yq=
zK_18g=lE@Oe05pW2cd55n%4g>QftZP4-=k&$Q}O4pL`@{hdH2F*|=CqGInePfA+qm
z#pW~;jlDlUMqz<8KcUoCv+cT#ZHE1h%UyPq-EC#!VJba4Rd4r3T!PU{Ys|O2br8BM
zw#?6SBiNGkEg;&9H9n-!mnYn%N*!{TM@m^oM8$N}WR4RJ+`;!_cGAg|NoHa}#Qq(C
z?C*yS**(vb(pzxD?TfE{OZ~`k%PJ9@*!8k3JL+d31E}22jHVC}HInQS5i=lV46A3N
zwjX)k_-i???>$_Q$nQpBF=|@VMU9)BH1{4}F7^|MT{ekH10U>LaFF5su<Lj@N1ggE
zxfE1j*i(nNPA+}5Kf!r(CS0B9xW^<-jP!lE%`FBv|2mp}Cs*_QXb5WXh4LN#C}wlx
z3pV?aREi2v{gwR=+JD1iC41OI5w-XY!{RJME1n36QTN*_O+kNiI$fy1;xYZ2$6beE
z24PBWuK_7_vi(GT1&_zHqI1q~A|2#Jyq*1E()5`=v@Fu2pR}hCa}7|F%`w5zN>RvZ
zyh&sT1I4*GUMCbJoXFGmBB|ZH$t%y0+?q0^tNz(%nXQp_lVr=|q4%{jdEvI}Ti6N?
znh{$Tk(+difkVM_`);kavqWa3k@0hlH;7<J)DMGj>@_Ny66;hktR{LNxzR$C{_HEQ
zyUaEy&<kHA96}c8R+k>wSgO{Q%G$h%u*`IJj^Bg1dam$wEd-!^4XzB{uW>It-RLq9
zjA3i3NB%*nz8F=I!|!%xZz-C*Ls6`KO07k>Kmre*uhe4+b8<Ig{G}6<McPkAhJ{9!
zGQ{-e55Iwa!j(8&9a@%8sUB8`AW{aCK_@jnwvN#WHbw6ub@$PiU!KT7??>OuOY(fm
zZ|W04HY+drmIzj~-c5ix0wd>(o;R076Xd)TnAXa1db&-^E*uCCY89SwJo8&&<$hq<
ze$eaYxK_oZ1ji?$0k#vZdUOBdn(_q`*GR#nG9~};Ff(n|Ess{KeT56}tdCs*<Ga0A
zv+f^N>Ql)EiJVZCif_9yQh53A#6m#&bx%{rE|bR^6Rgm>w}VFywVFsaoKL4)CXq)g
z-2AM1t<0IQeuUbCBFa}Y`rJLAyKxO?mprTfx{wcw>+RZ|Oa8vA-5*~jDs*7=LRs_)
zy*f`Ow&e|{M=yuydxidc<&7!S))0U_OgQc;z&gSAWc`qd<qey<@BcV0(45<oCG-sq
zer#$-T%=#Q;T097ZxJaq?kBw*tD>VeH#==9v#cm56N?3t^?>P$3pe~(rRz9KE_#!H
z(|Z`OHDiW(T7_F#paM9)46)_g>hTQ?4Y73qGh~t&%Z4}Myk4S6E|`2?Gn-KJC#Npw
z`TKAeF*#Z}|ETr&`U!;(6^bDXRY4~;Odb{GkSHt{;+WJc3n!8X7kMEKIRSKN_{ymu
z<$P)7qp2rik@Y$D(C_j0)9;{%D|YlGmw5u+w7Uc8I!eb+l<~A-or1p3Y?_~9^obym
z$JuO;k5gm;vC1W-0Hhnd&9mIs#djBCIH9{&7nC#A%0@^R+M?k`27l~D@d9CD&g<N1
zlTpT`<$XIRv#IR;r_r#wWJXM3Z%hIsR5T;Y+j8Pd&DZlkZ8|fsP-CdvZG(a?1?za!
zLAPsbP8*OPa@NJqB#MVq*yeovwE)SZLJ_dt`FP1max-v@v(6aXc0WC8{`-n}^qN#(
zD?mF8PPZA{+$fFmrh7Ly@#hJ*d{uAADw{*D`HcMI_mdUpnQ@lA&Qy7ED9k*6wrV8Y
z!y65QS~^ZOucw#Ch{Es=5|~mfpe%h-mQAooo~Q1|0Mh{dH0am0iwq+8bcc4^%cBi5
z)7U=KzW=Bt=$SPJDBd-mP9t%>07)iICmN6+T{(}JeZs--@L8F^HeX=qcRExE;AI9&
z84X6})||KFujjjB8WzYlQ8+^}#v5vK-gZ4d<9V74MI6mue_IPd&AruqHRB?NUJ<R&
zquie7bs{2%!8S{A6O(OvEHr%c(lM;FY&e>&Q+y5efe1I>dS0?Gx0yBFp7_-p>1ab%
zfMTSs3~!~}1Dd?5xiLsCN%W|48_T$EQnD}t3+L(xFW>p5(_}%@d2E&D8WaU6e7%J{
zpqSG!jAi=>xsu0&w0z2yx)Ll{vff+x`-#X{<OJ-6iTdsoyjB?^&P)P;(l)`Vgvzc9
zf)V0Ip&h}CUzZ(jQc}PLH9g)ecaZ%=$KAJgHBo5##RoGEA{j5&y-nBgkWU)4nVq`i
z8x9&DThIMnmm|=UUZ3LoXY0HOT`ZptLomyb$Ib@Ls{%l_b!H0@Y#oJRjjdM%+FiC4
zuF;59Mzh&{C*pT)ONUy1yF))LUzMylS+v2>X1p#sK~Do@U>!Ab#|wC7BjTq2Wq5(h
zg6S?^oek$ZpmX0WRPCMOov%t~`&8sS`ER3}r585wXNtg~H13awp!K!A^B;Qnf^r&2
z_IAe4=p3h1;i6430o5hJk&is`nzJ%h*7mfo5>s^cpT0)HQ3h3rydSq5{R0YkH}(Nt
zfR#nwk;+hOq2{-iM?F%NQ35me2c*kA{uIe*55;&8Ds1P`!))#N)dZWgqR<nt!S*Vf
zAzkF!<#<YphEoJgg}{jm9JGB;`=<^HZbH{}?3HgC3d^D96sb0(Mn9*B4FVkMlU=q#
z>N&8ARZ3NfNuXyT!IV`H%wL0eL#68z=&|co(}0*)&l`_qFt$(NAfd04-Fo|1WHo;?
zOkjcKY;%S_DZ6&>ZzIm=x#%z-#3U3w{jDgAWNfnUvA<>GK!7is<3);lfedq-DIpfd
z^vQWY<UXtcf@=l|fLzyTeevPTy0Y%1paSg%PN1lAVY^uG9xEYEZrpd$c8}G<@Fb?u
zn(U#m02D0Pu4JMaP1dLmCLxkn{O*}vRy~?q600YBsV{=|l)o{{hP9f(9KYZOQpM9~
z+kdQjQc*2GBpUc8-jqf_dADu~6{9L!)WOv5z2%^p8;Qn20CiQRMuM&NvalRPbUg$>
z#bbv1^+sYcw?`s;@#w4Mmg|;9qw6WtLy?`q-qsZ?g1xH#qp(B=3M;q*xZvcQJ>3fJ
zx%6BeY++`iA%$xplyF+luFO6suW)Untp^v!%!*>?yF1`o{R+7&>y?t_z?+aoitCww
zBTb}J)xkb+simSiOa6R`8a39}{7ZuywfOnro%GY_JGSpaxI<hLrrRFjLOvq^x{XP2
z2O#oQ^R{iC@Z`<Y%b)?SzUX3sW>=OW6jP;9OMnovs%E4zy!~zO2lub^Kp$&msjNgy
z=z3#m``rw5ms36tbidy1F46;T*P}QWX?jb&A=`7;H`FvRC9vI(IUrC;J^)jrUG3ey
zS#IAdB;XQ8O6wlMtecfbDh|LH8GVFo_15~i(;If}Z{@AyQ)IP_m0EiE9!w^-07Gy2
zQcKh(Sbc~qV_Lz@lsCgw?4=7O(F>LO6_|VO-3?K6peTN9e<GSiD`Ms2Cn4S;NUd}O
z;qm#Gf}*Xts69L0SkOI7XcC$G{Fc{CDRPuC9BrLL*hYYn(7l`&z5o3nhc|FA4nn=X
zb~lLEF7<^SAx!l58rh0R<=K+HMyVc}2ao^90YZ2;Bj!$?KH0XCkV3!SImrZh<#s-+
z%7xWf=gxz_pZma8(fOnuIcd>$)uOq!@9X5=qdMb}4(#*MG(k2=0MbcWyN*)s)IV~U
zZid&VtxmS0W8TJeeNo1dbI050&=^4S`%`{+4Tgy7v>M0JhEyY6Jd)ZKdYya4lJImU
z^F`35R&`v)cUulQ<Lm#D)@icMh4*<1rIU}~CVoEX>!ZYTamNcrq3y<67K9>OCcLuS
zMQ5LPLS;N{f1nZM%Ji<3dR2863UxLFTVtm2wE3s$yCo#1@|w{L2xV9OsOqyy*JJCz
z5CN=vZ6M<K)GL#_{EN-m#qw0`bM&p7)s1CkP<)XM2r@fz-Wta4L?<0}+`>n)6P9}~
ziRl&eH?(*GaJ#vrbY6-)t0kwh_2qVYwCY<CCYFW1AAoazB3<6)m^*vfFbrbFHS`@J
zw6E5LGdVpkJ08;f=FtBXQMHG=Osy>%*w10t6bQI|Mu-a-UY4nu*d7fqz&5&Z`!Zi$
zUmk`Uebr1fTAibFx86wcP2ll5L6%7h(@V|Wq!QabQ}yo`-(Qoe!((D<Ng$s;;4cAZ
zxKG-KD!~OEko<2YaxLf`fGc(fr}Xb_Nl>F86b%?jP~f)klqCnNz+>jwb%CWJ(`ce3
z*FA9KksA7xj47E$C06^G>-v?#S~w#2YQ?%i>jW#D-p^ZJB%m0x?w^Fg*!r7*UqIlr
zNa*oQ?<qe{GCYku4$j<Q6nUP<X)*!$^bRdXKNfgo65DCZHFzhqs2?AYxh$0ZCNv(L
z(^FR80@!0~uMUKGdMUXFkestcIw9pE_y?xEcLz^oT$HtU3CnD~K|lcB9Ny`2{Y@Q7
zu2Pk-mRE@qgzh5Nj6LH$;7YNfvQ_S*bWta_rzHD$R2opG@wzqkA?rB(Mtoj^XB$bO
z7U+k%PLPkwr)-LvF>ff=_@W#>8Q<xe`z%zbT!$E#4w>wq$B>HAgoFSuuRY77S60(;
zl#bu{>p+8}(AN8~HtZBCn~ovHw;fl9Qs+||cwO01r1P?lI64@sPIjcF8n2d~a<PBh
z(L#Na^S<5-_BV(<?)Exd7rOHlr>MD03b78!VBZ5`j>3QcnDNVGGMN+dR;+J_+Iqaj
zwYx79+e;>Ncm1&vcU;+}g=-MRd3T|9bDaePfMX{wvT>K{=@PJB)0#umE$QF&Htkf;
zy2me)<0t-Z=dj#mn2>$1-!AY@=pjBhEZcvPa_Ok8TMp~8e1Loe@{}FnF8M>^_gqx^
zNQHpl!-3EH;rIW729&HASKnWM$DY-Yc#o=l6t{yMU-$KMkGA)C&aymjNF^hmbk3V)
z1$X?>+UHV23to?SCFw5YygW1qB9^84ZdvvC-6na52M@#H{wDL_DZLLW%z|+;L>^@(
zIm{8p0TJwX)99#aji!qPt)0JK%xi4_d~QtAZP!sdy}z?~k(m>MYDs=;MI1)5d&Dw{
z)j03uj;Hr#*N+Dsu+y`p=3jfYqA+4L-IDXSAtQPbV!AsNuePDtb!8EZx)ZQzXM42T
z5a_3+LVhffOp_ZjI<9%%U_2^@4^IqIw#$Bez1Kscw=e^6Qib~9h{yqwSatMIo-D3!
z%@+?yN>xirnFnzv-1;0<#JweZuslw%9-Sv_bNv{&v6S6aB@?QJ=#$fajd@>QNMRV$
zUjr^LXNQHpCMA`r#z?x%*79=OmCR|;-_~--7KII)$Jl0~$>zWsu7>W&Aqbfaw=IZ*
z6M}P@g$kg294^hC=bJvZ!<!V&(8SU?wj5V-e&RIH%kg^;%pSZa?Zbr2KN&RDznZYD
z{qITz)rvK>uAWs}ulLjkeV&BaP6sFg6kUB(&(4e5nXt%#(gvv0djWUr$#bNrG2(L6
z71JtPL9-RIQY}JO^?03E&fuge<aD@;?09{w%eU`8e28#;yS-6$eHF7YgR--pjMob6
z$s=4>-GBn+vFCb=_iWroptgAy$JaAX(zOVIL30MRG`s;Pi162q?(2sF2^YC0p#Zoz
z2>Q>aD#31}+xfAd(xgZZv#(1<TpW0g#|srnvO^;4AFztev*=0%+OrR5J1ZnjsVOIn
ztjFPNDbNzmA+sXDtU25pDmKi-35uIqI0|r=LZ%#mz@b8Iq%gg-1jw7!>?X3@!Q-ri
z1PXh!p>UU8UjbBmx}7rxXfWmyu6HkLG`@0n>@I$!)z1Y^HfEaC>36}J^Dw7L@kgCR
zsu<>XMlI)Y18;j(Fn$GWNdSiAXn|Lsl4}N8fe06lyIM6a@V8+u>7Q)(!)+vlm;Ii%
zG;8|%v7^QUG3))mn?iJ@N|{4XA+uXkgT@4v4>KL$MB_$JoI0~R+Y3jhNZO^@4r<$0
zdwj!*%|#dS4;Y%k8%DFGUcG%p-J_DUC+CrS=Nm7d)yg}Gr5AKp<W`>MN(C=ZVHfb?
zDcf(OXm?aNgSTyq{?rZsj}cS=g`8>2t5f4{kedVV;lA^9rY-$1JjF|7Uvs5KSDfla
z62Se!OEnHO)R!!<NOG`J)tP_(dKXo&U!(f_l?XlyNBXYCwbhAE5Gy2g?#Ggc`d45h
zf<pm~U!O$ko+xc@^l{{3lGg%u>7n~dkhtDm<eN2`pJ5Y=Zj$Nhn$!r&a?jh}w1R(<
zZH-3Ce+(NdBjK8*{}TZAnx8&?heyNwBx1RI0-I0!;?GRR=}9YKzp;k%#LWa!qprrn
z1+vztYG+jv^x@;K4|D<hyzThisiM7}<b4{7qqo?@1%bEbUZVo(*!D;z8K`_ljp$6J
z$nt?(pf`%&_87wjSm%s6b-h;_E0RSlg@yIKFHCAjLe9Hr{5C@t2ERzd1U1s~X}Wd?
zGh@Uv4PQl1<rHNZKfLIHJv!aHy|*ej6-^gf+Z&mZvl^<3X@o>Ji#u>I5a<~oOda>r
zX|+gC9Y+GBH`{id>~iiAChh@-Lab$h0&1tXL3O1e-bex>J-g)MmRw)`#xDs!WUEPR
zA~uAq`LbJFb9S&lt9h2s^iGqad)AzgP&BT!3Q1(iKZ6H+KIyyPu9m(@s<tA1I`@Tk
z4LACc^Yfq6nJ)xWn!MuaFPmBfLo`)nMS9W3kufThk$^`(rpwyru062>%_p6p*IMA{
zn*ChQi(CyjYKtSb1Y`B3%N|ml*l?z;=FUY1e2Yei?&H=|B%ws9uFp0d{`FH_=d*Wv
zL0Tb5IjQUQ?4$N4p&flJ!eErE6VQzDtpv|q-oiP9P-nn3&)}u*<Z;*yQ5iyPG}#wX
zw(xWHI#^T4E;p|JHTT#vD^~)>1mf`3=!DSpw+=8i*jubOqTy-|w9%2oL^|xke5|%&
z8;QSBVd|AHiZ%p+*t|`26mtHcC-QRb6{&rL&&Jj2Y$+v%BE;Y;Ym;Pn&$1xrKGGxm
z+Ll%L^<2E|lyWta|Eue}iASCa+dQ7T)k-LVa6k<#mAgBIeOGp9$D7*cJGyrT<`2~=
zDgdszcMT&+ochkkF5CASHI{o1{yzN?x33m#8@(p?Kn$EA(+!3lvN@4O(WEBrt&!&`
z+)6d@zoZRAssd*8l>W|i<6>Qbob0!DsmtcIj4~$$JiN4eY>gV$#8_2B1?nAY+v8lm
zq1pv>5gfjNUtHzX2nx+#x%*$tr6KlpX_L8RPnH#$;4OJ~t?`esdraMRh;iaL#*%ab
zXo2mPpxssN8bz>{xUw2snh%K@Id2w#gk3~Q#PGWlxZPt-l{@K>A^F=4p;vNAmwyl9
zZ30_o0VVx7-~=u7`sp0CadNI+kRwIM-8Q#eGD`bC_OPkNX*LJ;n;00)w(d?Rn>=kS
zOkX(`2{dR^FsGE4qgPdeZJ}h^cCDxumT#yULiMiMY>M0~Ni$4G6sOie>!vTq9k_=z
znVL8ZkL@Lz)~c^pnAUE2491YBXf<m<2<1iXagyHG1Uto+jU>>TRc6TaH7Q~bYA!F!
zFh9M4hi4O>qsXmvJ6}r?eD4)g*xP9c@K5B``TX<X>UIo@Sp!tbDvdBdkanaT+Uq)w
zKp#XU!>`b&67m16Jk{HK<q+NR5DQ^u{LrYSRMM;&9PNV_m%O}+_`x8~!*6@hYWZU*
zBIh*zBQ`3k>{HyynN(sGt~(VYf*d#ydi4n1y>nAyo(QUD?RO6Ekcv~U($A?V{`4)>
zA-_GAZAO4*+<5Kp))(K-P}3LzpPB`>>6X?Mw$BUaW*x>C2*x1#_V=1?JUbp_teYXx
z_L(BUJFm#)8=MK=a@FRF2bbBFod8FZFlyclJvE&Zy(kuMef-f%{EMQ6eb?2kH%Q=s
zBYyF!-lN6w^DjPnyc5!U6_rO@Pkt7E-OH7a-+CT_UN}ZtnD!MV0ZTBw<BI#6@{3RV
z_K^*E_NG?Bumb+h^OWIQMqGJQ@;k@jLlGWUHS37)L3tdj{hwT@aMco!xBdrcIfKM8
z=C8v1P_0+1|EMoL-dHs_o`@XK|CkO4q-?S*0jYKTOBk8?k#wkIqq<AG*^R7y<|v}0
z_0w=SMUX^9$}Ii4I^R}Jpg?Bq^=<mF9X9F6U|Kb8gToFzHLe#vjxG#NTfgZ>$dH%W
zs!<9(l1BXGR=3!C-YDKr$g~;O!RAo^s>hjFrPDMZBlp)RtU_i#qNA*uu}g-tP%-K0
zSWi2z@tV3<JlDGAEywqtwAHVgtf-*X_<Q&Zcm(5gfMxY_rQ=-WUIeTHS~&Z~*U+O*
z#x7Ktz!mMunkorfUtIn0J`7J?BKpA#DJLQ@%uf&p&^@9vD~FRzQkH+cNp?5kkBG7h
zb*NO39DckBv-<2gYyW_vQ%SHxJc?XngLrG>ZL*j?t1sU80+STX(DR1b&^`*@<XeD7
zfYp9od~zfE{)kW32J6oZ)sj6bdOl1_0Ha8o_4@9{7c_R)M%$(QQ=#I8ty|4EuIve~
zcN>$7W2^(IGLQS0eDC6=hbw2++F<nVgb_oumiiaP6R}d<UzGxj>&+}dOua>|lp@)i
z#FnmI?oeNq2~HSvez#(tcr$xPv(=K@m?sP&X+sjV*m=CU1eI1-C-8pkm5oHkARXR!
z8=f}l=b;WNAZ!AakBnA5MP<M0EA2f_$Zvz3hUvJkwJsO2$Z=#4Q*$aK42)*w3E5fy
zzVc|ih)}FoM^)L#EUZmtR1><eh*)Fdu0%VZ&g!pF@~1iM8waFpIBoIGm4YGO8D$&k
zOFiJN4_*@PZ@Sn$GoGRD(5R+RpH({?aGnm*RErYxaMniwu7KJQu9Lk)VI+u)B`1}H
z@&W0B$YPJRT|-aOLmr)O8PKg@IVrZp^SQLvHIu!f2lN#to#a*sZb25sD|9l139dD}
zh^J&P95}Ei$BoF-+}zC0m+A)9v63%}jc@<zCmjk+@Ew!E2>L-DpT@(Q^_hKG8xaR{
zN@u~|>9ur<?ee8d0o;?PA>#@Y4m{ClVGkZE=gC!Yev^<c=KhljlCbUn%mTPOPk0Js
z^57&c1G@7#pWkrlG58XNEQFxEZ8ygZqdNy!8_5F@%|b&nm@;v@I=}Nj^1A(DZi&fa
zy1InvOw2|tA(*RKEf_zOz?uB6<`Sjgk>9oRA<IHc9Y7|H5~cveS?s4yDwYf(DO^x0
z7hsz`cTJxODAwd7AcFL^gsOvteJhRKC{1PmK1{lZiSd_srj8Hwy(};u9LlU!n#d?(
zG{?HD_Li~^);y9JXgaJ?kR+`uRPzjl@!)3e*P*`&VgzsV(TfAKu_r=1)W)YT{9brY
zK3dQxlzJSspiGDt)w@lsr=rR;Kuz}+lZEMGH(VK)E3i+TK}ne`z?qxjQvofd)dbVP
zLYTAef;nrSueT1iHLr{atW<|xycH+QjGcZL@dqbkW^GBj?t=Q}?f26k1AXFq@qU@G
z5Uytd9&n85fhAsVHfR)##*daCb7)p80brCLk+#@u^&2GIq9^Q7R;p59sC?|$LRgB{
zq7^CQvV&Pr!@`D>`eW|+pxuDidAr036#9W1TgN$r?ia41qVn^W8|}b}8TBNw{>j$f
zdj?6s6zcag8wzxWsbqUE5fL~}57NrDX}Oa;j}d_%-%A({-XM!|QVnc}BYieuL14R$
z*wPa#F5JN&!Nq_KeT}rRJS5Wos9gJ=h0r+m8x!NMDooo`%olmjtPV8t_%1GDDtYma
zZ8p4`vLL<Q@6|x1T)IX{ugp^-96vz<P<tI0WY>I1;90vrQ;Y6p<0G);L=1rwlBwZ(
zFZ4Nru<Mh!dH5p}JX_-aP@LFMqS8`fR#5+X+?H{EN%mLzWR{YSkGwXzY<V<n292uX
zCL5w{{q#2wh4vPYQS6+Ox+(EYoB5xe9n`tQ%j%)E_I`zTx(Zu#@2UpvRphG_^f-6@
zRp%IxtV97Hke-TR+9g^pHoSbg=?pDmFT0VQr5U;$53Q&)>efa87iWru;c%Vaib~vB
z7Wnt!J;cY*?#ppaWoahgO%~tvjT5Xs7GM2lYE4*NTMv@{@ZxV8Ma}UMH(8=;Y&A<^
znB~1EHWkHGvk1?@-HIxQY1U%0$f-j}2aVcy0#2<u;A+B-(1Q}Pa;vU*CGS-sM_G!k
z2joQD(KA`Nu(<c?J%?|R4+vg6yUF>G0|$Qg`m{g&{lZ2}o>V6*b%o*ruboG`$(7^`
zN7aU+uQv*aB(YD<yQ+JX!fTCSTzB5iOkr#6d>--X^s8+LW_di(m%joJYvJBV2_lKk
zz=Ue7T+gLBMe!1p9O9Rx!b+h|DPhx<H&S)2jW8zSj<I-9gd}e<8D(mz%5qY(GqQbm
znuH{W__Ud`mp^&K$@H=P?^fGYkpIL;#{>=zG&h2kuHC+0aFwX;uHIKTdZknG?s^$%
zK~@dv(>}U94Yj9#?qvO}$md*F$>9Hq^|(X#{TbZ9ov0vDC}IVCQV684w4O{5;vpf-
zmsl|)<Y~qZYgB8x)QVVjiI8#JYqWdk!Kd%3C9e_qm#$|=zTk9)^H%@c{-YxEms;6^
zJ{8WSRb2TtS5t8#RwjB?RGIGt;$nw=xHkD6UU!zGLH6tUOE>ob@p|i(M}=>=DBx6e
zH05@Y(j;c1jjs4#aFBT6WFBkhigG@y0aap`nUe~^<nSWVWjcHHlE`Ly*M-(dRJgqO
zPVh+j!|{7dkEb=mT>CFkUT%@8%*K%tNC?VkgOFYEYR3FD5YEKb7O_06>)V*u*R~SJ
ztC0SqKLiCH?(!U_2+3=b>iW?(ky%@3A4jcvH}ZJt+#0G&)_K~KpXHama^9-J8f5Em
ze9EDjTxxaqAU;vF8-F2h_~kw&%da$y`anJ|mzWI~8>-DRGlSHFnH;*Qae#L#C(&mt
zVHp@!a9VQN&Z1ghe0qhB(^6y2IfcgNE-YwdQ9Pqx^ytM);d+EtezK$(@!)$6i`fR<
zlz@;hwS9_<weSi)?7&ghA1g^J1suk%XREdhmLJNf+m9}Cu`Omp7mURn1BCy6WsNv*
z5b$!f*sfL<qNx8hhFEs4FXSB9gx_~19yztFF`MM&Mo9pFF}uE?uDR)j!uH-O^nAPa
zhX}!1H2=pnSh`R*eaubSH3#Xz@jH(srprqA0sBOcMEDxOlw6(~NF(*jc1u?2x-mHR
z0m3R@8SJrm@@<2mm4R|?Z_oND-4M=sQb`C>#$W>B9mn2jRe2K1l#xtnHAsS$+lj_%
zTd<P6#>D6@0)Fv4Axj2ZibQWQa#SUbUA!2)_!#<|L#3<B)>>4r+QT~_dP<dUL+c?u
zM5c0G4P%!|dbmKApu~D*LW{F#)bT{ZO$}PcVzPy%*>EIL>m42Xr%W-a%=o0}v&#tW
zHx9g7&uR6szc+IhzNVXLFf~JXM^`w}$Th>(RP&9A>)_%9o-xbxf`NRsZmzLeUgnE<
z$~gYiR81l!+Ebwxom^s7X_j&)Ooh;*XxYq6ElHzRt}8E|RRy@i>-V(;6sd_`ySdB$
zjwq^6y)Q+39Q$xP5m@QrWIE#qqDYzR$8~MX-zb_^U`?(?1C3r+zkj)4@Zv8;01HTL
zl1I|Tsu;*W19Sh>Zlp}7aTAN5cGytFdkssX2ARy3=)ekILoW{@=ja8$y*A&8?PaB-
z4!QK@6QL#i4#1R6!@wvQ4tpCPw7--Dnh>k2)YD(_`OaDQsDE_}y-CqT&cMMgs{u?`
zfZd2*qeysfmLtnNHQ#pp==EgOncMOe&o^=BT%r5F(6qFaR9>qE+DO=w$oD!CvQDyG
zXi<6cP0M`nv8F4V(Aa2mCy>8)Z10rjAK*OB9m^K}VbJEtCQ9e71`R&?w2k*9mCTxX
z!NJ*%{X|^4s}@p9xjO+nY6J3VBm2*j3sM$d^V&at5pv9NHWA;;O38_>pEmctyW_zE
zisJ{~vFcYB=MN;oyrhgGa~4sPI>nKu7KcJ?DpQio<SlEdzzaGmLJpOcWvs*55x}}s
z<b2P9YLjV2XQfiLPH7Vx;@MDhvZ`~roZB>SSW<wKR`cO&O6!y-?Eo@3LS$Q%R)0|{
zLZbcTdxs>FFjBYEJ2Vl#;C2o<$yRO|lZ+qJeBQHd)b7HPa9Lpn-j-h*bC7rErqAqs
z#w)wxj!balIg1n>I*jp!X6Ifs*F1rADW5`)2V&NWo-h-QnNUmYx<KaGBERACMF}Vr
zVM`wK(sfpCi}QpY9*WNQ7(;W5o&*>WXAedlyg{0lv)herJ#~7Sc1!JA5$4u=NkMd7
z;hL@mTw$UBiA}9AB;Bp0AIWEJuOck&6AK1DKj^9RQjI_)2yowr1ynx&h(fzsT_UDP
zZ`$yP$$0)=;#p6T4C%`hpb0?ldhNz^)M^ANL--yq)3eOC-4b?RzMFFR?so4ujO0@m
zFd;d3O1k^}PG4Z|_PPt|t}@5jWO$44W7zO21$pAmPcoYKfQ09gyi|QHt-ZqK0iO%f
zpJI{#A?c6z^-1F~snu-_Z|B!(D6H$b6__36v2jIID@mT3Z~ww+69AjXRWQST>-;a#
zvPnv-%Q?**9>zH(I8V{oHV#KWIrIu^o$@1^Lu}v#1_{%-fKM9{FQPsfb%*uM!^P(p
zo~xFhL&I)sGt2d8i=2*QnvcHI=tqy@Sl@_^J)yprJN!e_A0mF`87{G^Ov#;_y<=ao
zW`;^I={6VpW2+>++^sEK_TzOfJl^_EU3+0{M0LQbF>2LGLsc^z;A5GPwW7E2A?Idg
zP{sd4*H;GBxisAZ0Rq9@JwR}GcY?cHaCdii4Z$|<4#8c5ySuvtcMo?b$KIUp+{%ws
zQT6QU>FHk6)6>1?XTco(*a)(BY0<&$Xzv|VhR7y#kHWe)-4JQ}rV;zkVwW}3%e0CB
z9BqlWhNFGL#C-?je8$i4UG<z+_?9M|I(h`R#wYg&21_jRhEzkbz?@5~sZZYU_O)%u
z81qI@66`kH+`0pnitB64IuqYBV>~bL4wt31xvH4>#T>iUc9#4(vFS%&YO#dzhM*S~
z0TY-vN$gBhBNcpCLM#RKr2U7Fy<N3$i_=rAT}8Pvw6u6qzga2n2v)@q11rz^c|~$5
zZ-4wsDc-jezQ>l{pVDzY*w{C_JB{4cVlmeiu!(s|UUE5>I`8R<F*;tHf2bli9chf&
z<uwP{c{*#)X;{ZLihv_SP{V%;B*Yi^tXJ(<)K|V-i-vD3JJ@_ahRgBHqRI2vwcQ^x
zi4x<KmFq)5>RJNlb_3UZv4?KoMCpA!SFV}~$@}_Qbf*=VDGt0V)WBD6(0S8*b?U*Q
z0L8~yMZSH`);|?QD)Bv)1^1QJ27Yu1mNua66_T4xjXJfQ%BQiLD{r^lB@}v-P@wg+
zUK`m)u7pe8&nkBI@kdCW^==#p!lFfmm1t!LL$E!tRH-D-?<I4NIFWDl%&qyZ{q2q#
ze@BT*sZ0#_QUbnfQSR~Bj;{A-Kk$)9NZIzLl;PpjhE}2QgQV0_&KeVAL;xF0hqCc#
z8m}^%$ju@!W1hE~ywh<#1jRA;<qnz5+^M29TnFn%L0Z`-;&$6_&qdc_RL@gce#EBA
z!ATm^z<TTPjz_;!6a#R{^Qu7f_~*9-r~JB}FS)l}Ad)Y^9T@_GfVvRqx%2s8@u_!#
zy#v6K-i>HgBj!tB2LUn|y`QJ2+rkHTr+d?fE@04i<C){oQ!N|0`jPL4ENcM9`{bR?
zA3Z-J2m!V}8%>wTz8D87Kj;R+4vDG^?IP6#Gtp2IE%cv2-s|zHwaS6bLFs^17KqMk
zNd|<#qX>|VB|i0&y&*w7tZd^JXN|G|)}AUepwo{*B6w-1$tHPZ$sp1-Zl(Xcb9y`s
zu`yywZ{`+2s5=tJ%)Ph%Rs%k~rR(-0O{rcT*)tK|69V?f#vl?gO@^cgQM|Y7v~vfV
zA?8d6GjdHL4uecQ-_Uv@!>I^P`z=|~Y&V?mARps#P!U|&!+T;lP#M(}#-31H$NL0M
zoxo#{cd?FSbNBOd;4Go}(U&!U)LEZ?{dJjGePB`-NI{T#=yj4HFlB*1kG)RfvN9V^
zi@4m;iGx9h^c3DI*}FCfYzbg3rM-Hd_*A?i;y3MNn=R-{X`&@Lu(tZ0w+RoTFW^!_
zrU$e4EUR3T?W05Lx_#=s*L@r=-NGKY^TwmjY9n-%_Y;q~-BG#%d?`gcK+jX%jP2Am
zy(((3v|H4?6s)hEXX*Ts3h1;`Uon4t(t2Z)NAAu`!XWpp@Vpx3PGg>&QAMc?eR<Au
z`L-~dWyM66hbeZ={f=ZfsV(@O=jUc9_7Q<72er4KU{G6U->L4!B-)l2JK)FuSO$F3
z#KbI$GT@{)ZerYV6wikosd$X%75v!x;jnM1a6D_^0GfNUnRiLXRR=B(MSyxzdDwCE
z@v%5`?*4H&fD}|;rQ)(L{3XB|S;z67A%ZV9)=ijMIf1_E=iMq6BL8mFgI1e4DbMV-
z-KI3B;He~dOdNjU<J5&gKipbALE9^>*X^Mg5+%9JeHwNs+aak$V!@bp%QQ)POW5Fv
zGXupyGUm7LvwV!Vp&z!#4QE*F%6&d<)La7yT_lod#Ncprsa`kCAQVvfx&-dIZwG{C
zfNvH<#Z_iA0j}p#yAOMbDhCI*sq{Z$IChi3d$<s9-j~N26uppWGtP(>^W`dR{Rn70
zoNMBV^1c%a6AO{ihW1HD3}}=$yV!!5c}-ahhK`_A%v5uRABmIm0d|j+h(9R}uPDor
z)hTJC*t+?eHpfJGY>&F|#>R{8rq{{}TZqjVS%Fbh+zr$5$O7Nl3b>Fu4|hNCQ@LJ&
z5qjU`S2Zis>iJb-x~Kl#OUB{u0qDzNKS8MYga?#|7m@EbWjO3XK41lPEab%}5p-a^
z0o^w$3;{&`j1MEW2pek?<d!rO<wqp`d8=9DV+#G5-p}o6wcSVPfkdG?BG10yqSzOY
za!tL0*#&IEFVq)rq`+;5lFqcur|Z*k3F-nv-v5ZT)fS7`pG`}dK1>`*f+dD5AQ%-r
z;MaWf#6x2x@N}Nmx4zjOvI|4nMn1#VmFjSrmr3kc6sgw!tHg!1@kKb#^ctgwwH+ZA
zodzHq!|mCjiFO@zUeJD(!RlDyN)b#$bsln7Oa}MeG;m}drQ-|u=8M&`#W+Z-Be!;>
z&<%C(Es<BI`_!!Wviml_e>Bo|-U~^LJZaU*FnOjA$sOpAvyS*FP4sHuOD3NU-xCX^
zdgZ@Vd17sn?i#GR51B|N^?M-xxbC1iueR%}R4i^;u<n)$BjCJ#3BO$!b+Vlb<E2h}
zO?_`;(^w3#iEuaxZ)NuF+3k{j%>dO8n!tQI{1MJmK6*49t#pF$;u2!;Se?&g&e6Tu
z#YGW$#d4*XA6WM3e!Ofm_1gZTQJ?+e;le}a@bWV3$)LwVsJQSRFWdtLa|3^ouHLZg
zE>l8{^m2=zfy@b-PJf0H!jOc0J#CT63E6W1>OKZ!Z)b7q3hl&_+8d0l)XL<jIxlcu
z^7HBB*!D(t3SgT`1DTF>gC19r&8>kK*wyxci7c(1wPnh2+tu1Ji)UZs4gN?kNu@%K
zB9Hqt1P$T+m6KE|ku!{7As%=%1%EpkpCZ|NIX{Lck^&{MMLLSc_t?z07N$Zy9y%1w
zb1;LT3l0MUO0T~_RZvoefg?`jdg8|pLZO@|&hXG=wXEW<g=oXX#6vHQ7Ah6nc|u?=
ztsD6&P7?9e5h@U_6`ixr!xx<{{QXkdb<qC!s}(H|wIz_zGa(I^zk!$ugC<!FVcjR@
z{ip6DhzDGJ`E)Mc55&tdQ?0hBDPhou7@1yDJk3sXWb-OsDWst&b>!q=yLy&E<cM)T
zp)W*n{O+_PX*)r~O&tBM->Lg9#=EZM>Vm>x`r!J;{nz&<yj<2L);(|Xahw>2eQ{5h
zngTk%%LDj)DsTzh^B0Uk<HcI@4roGsSQuu8lktW@1RAu&fVCMYNVZUSTwuO!EasT2
zlUtnCFkb`1XiwYLR$HdFf;y16>ElpS+%9)Ma#R3eCvvI2iAyp*r4z#S`eZsl$H$2N
zWVH=PeJT~raPKFF$obXFfl$>k*P_{V(dNwe=skN+V3R{lYYYSaQk|8EL4PY21N^oT
z-RU<SeXXC@#SHcEL&h6OLHm4thka2;ffznwSau6z!9R<{9^k8MhRa~zD`#fJ4135W
zsG>hXbxW>T33k%78Y&Lg%Ol8-Zh{ud+C*U!@z@J=5`Gg>1Xhf}O-Q;LFR#A3Yj5_S
z#dw5dAQ=`du|j5Ksy)UW1=CpKpH0bo^aal=@4J3{$a96RHdZ!0r1jRs#qcx9%H5BT
zG4miO<=h08i9pRC-maWDeVu;W`gnaR%BKgc0C<)w*0_n7$$pN!!|aVv)~cB#(M=NY
zv6Uq%HsR6f(Qn-h>POM$LgKzJSGaHNekt>w{<L!ASq-y^g_`kv&x29Hv~&f$c805K
zJCo6<w+zGeXw(H-KvFEQ+_mlA%Zuw9j&kO?_QSWvhTStL&kp?uo<e4^&QG-FY3dwM
zn*6)vi9ywQh8|}EwOSIjTG9#|;@P6Bn};utWXR!`O;<a1^8~6Yi;hbL0}1Bqfg^BX
z=z*p-g1HZSteA#cp_n_`ne0@~U0vz{2@KhQJ~~j8huETz*-vFimByB*tA}x{r&Re_
z@BR5YpN`TT#)!aQ7lF@RoNo*zTP{28uRK2-wh$D4i~}9NMVFlJi0kJFoL7aYVn#%g
zYOr1uyhr-3+Ql0mS{6yVa2~r%nV5R$v$I_Hre!G1DEwh;R2FBh678lzjECVZg=&r=
z1*fK7ov3RJF=13Dbo@<tLP=;6pwJMJ%(Wxmz3cK=zc*r<qwC1xu0neYU^R7%3~Rq`
zOY@Z*IUX&NCHB?2U!(Ogh(Sxu^>mL;jvpDKvEfUIF16K`4lQ-Y8*-Uv$y7G0^I9)|
zbAn++$q1-BALz5Ox}!N^VNF$g^%oRyv_$i*l;Hj3)v3j-PfmmRET%oFXA(7>yq>yJ
zbdD>xa0VTXjRY|7TKRwIXNuO57pFwKdhzvM;u#tjYU5|56N0*&tx@nOo*0%7o%_Q|
z)?HM8`|g3aX3*R7d9jO_A2CPCptvj(|6sv8$1_M`DjrTU?&e8QV-YVS#>7tkViiH(
zYITVv+R)V1EA1(}TdFdZn{EEvM}!P4SD66ZZWgdbvqWSD(TmRr9YMCztTt=Hnmq)^
z;be#XtH4%Pbh^-niHs2p9vOF_Y3<JhD{|EHf<fN%u6?z(>ZzwTzNymgjOz}`?HiK9
z*nf!WJV!FfpAy6OSRmNlYbYvMX4iH?oHNHlNHcG`nsA)bx17F7p{fI>e^Mh)!wmMz
zzpp|ncDEWY0b`$oW|2w_8EEp1b5!1XVp6$oi-^tg-ZO4Zd;!zP!ZlpT;`M@oj@wmJ
zMz)@?9+>&#^a*C0^{n-vPyyZ&6pvjQ_J#R+ruRzIcAY`OC#cPo!<2yqRP<7TWn__L
zIcdFr(1gT-LHRO+5?$_RYSNUqokX|v>HtsdZV{;!Hwn+xmdrz7KfJ?{>Cu1D84yO0
zY;a{mbK{X!^qG|geC@rlD?yXt7AditLR9Z|il&;a2qXp=3NnEqt77R)I18EP*loLt
zMkme5(b)}h(Iv6tY_EMr3B$1F|L%{@A>94cxBpL%bSwZ$@8c!cnGf+@oX7@6O`x99
z0uvgvWP(fB2`T$OZS4Fd#IXQ}XH$*@Q;t-nHo(PKoF~%)3;T}j7!oj6w$IXWxf;3<
zU<RR1m7h)ZpYf5iWjNL(h~zCIR}$G-_f(LE|NgCSVjz+q=&0o-P8;q|-)<jnBlJz3
zb<kzg=(hwp^x%iimgrLZkFFF#@Cj`snI@$`5<t|){?VpSC`sbWk)`V(aZr__h@EPW
zc<U-pFXnPPbzQVltl`<bGh_Z`7nEUY4tBY#=<z6%jBS*xo`nrPX!u^-G`Mu{N*tV?
zP=PJK{-!vBOLOcm(w0U6y~EEU*HUNX#UY{CUKI-#_w8>-?vT3i6JIh9MWB{?|A!;#
za|r)A1qr#OLdRPf9;yDzJmg(ou%STXFM6U!*m(Jm?BUDPalqD1v4b~d*x$qvKVd<C
z)A>u2d8}YR%a^Y9NAtPP+LLJ8cN8d{KYc_B-3NP!TnE-d5)lq#Wcpwacro1!T;0Xv
z!~MmD2xKJ4Ju*~MCJDs5=QL1+??M_{HDZsKy)c_kcUsHuEEjG`D!7}gc9y2*Vq2C}
zj0v}+K9cnJ!1WQF&JdF%WZVnxi5Y-71GqgwQeY56K7eO{FVuqP#Cl8Pq01{0oJ}#j
zaQ5-&|7<2FgdwrLK0tCe8TkMQDoi3%m%sb`lBdnf`zQZ}xC1!-JY)*$z|Ii6svv{Q
zIAB3q>M0rzDikZ)xggG07MOX*E!-fEEjvOnpT7XbLyp4g19slZ0UvMCpX+}27Xyr+
zBR}Enz=&gK+S6Z@6o%l>j%?jpv&MoJmO}#U)?eS3t~NS-FhUJ59VNe|1ab=cE1kDq
zLDPK(ViKuJ|8W73B50BV>q~#f(RLD<g+IGd7I`Mr=**!lbz;G(y~C3Zms{~x@W*_m
zd<is4l`=KTl#%-X?9Dfn2Tv0(aU{$fp|vWZ<D%0pfMqeC2?ag_5*c|KgtWdOXab~V
ztlf&?8)?o2bCV%qYSJE<3M@d0OPY{GVVk434#(SouETMb6`O+z6HOFJ-Cj_ueW#xB
zUlbFByNLA7GJVFpdu6N+(m&U;N?l(O_{v`2$8u>g>Ii?qW8>k(D05vqh}k0f?kN@2
zoq@OjY&L7^R<`k6tm#5AOHjw43Hfpj7JuHz>`9w;v(j;kPwAXaMeaA>t2vjjj3%S)
za6PPO>~1^>nHidCfG#Q$#co8t9BbHM16PVtjH5MN{?tSI4;K8*QUGNB;in|>ZDNBW
zEk#9T9ADujKN_`oNJ?F}J<@R_)wUlb1w1UQnfxSEb2-x)N+BUfqti(n<JiY7e+FLN
zp!Y8x%$q6JapR_CY&&w2xL6Biq{f?iL^#_+(<vYp9)1CeGz|@Z)ZXLN<mMhl0jggl
z<cwe#<}5yg?b$#Y9o3}VWB;FmQN;LW(wZc<ERAqPNpnCIVt=(emMNj(dJ9_Iif4y~
zK)@lm?sbQEvQ$N~U1A&^2eyxvm1<*6yXCQy@St3(lE3bqD(OS;!X-ot0^|_-%=M-x
zuz*RFLE?UJLBt~5YZ>UdG#S+6e?i0FBuKxc>3IuEzBZBKYd?iZ(85$pR&(NdJ6!Yx
z?C&p}mf?~fel~chMocN*MLt=rNirVKAWcluC2^47_e5egz1kaf6v!6*qUkD?NUbiR
z8qnkR(G5OEb|8fmF>gP^gLW6i=e&{I@c{8;r7k`ip97mnN3J$rY#tsAHCv{5#91cH
znbm5@^zH4p8fMLc#5SLke4)1pVN5%L$<Hfp_R|m$bQ4QU?FL+UPy5Nv6?_9uqO_c6
ztye|-eqg}HWauRlZnalrciA5v3Uqr9>@bLc@AjAs_QY3_Q=WSeeiN|`MONNs)PZ=_
zcsLG4<Guf>|HBZFy>RbQo~RWWa20P>wCpsd_h55*72UlT(0qu2;h2F#KGAp$Gp)uq
z*pC)xx*8APgx>Bj+>W)Lcfr(oI@wN-vJDG?qhLSu;ZSONXL#K%DxH<ME7e<a(CAJQ
z67s87>d-*X1iXbe-*xI;OEErSwpr5}%1TG-78}^+_AgR;7`VTgH>)+>BvvnYRc(~}
zq~J{adNt0MTdrCEUF7}d(s8q~lAM?)CFlaD%c&NS;1l0ZE{e2Q+;oW>%`#k{fgQ_9
z(V?m71tOFn+hX0Cv4WuCcP6#J{op-1=tvaW?vC#8TwsPd3GYcT$M@ns&j+b|qkW$j
zG~y4F59az558stbdlW9E5I*8Pzy5flJ6UOBGL8&~9v@7FSaf?l+(Xp?Qc@HHIdhd7
zZHch?elTs8yS?9IJwZKyUbSrkGCwFx7f2iN=bbaAb*msYlS+Ka8t28K6PG@_3+2Ez
zF1OEk3$Bo~5;1GvPlRRh=CO2hAz3Fm=07Qfs!_p`nI2i*2H~f2n3hR%6d~LjNm?DP
z`nI^N>pB9NFNc!oGEw_4&s54aCbvW)OmCK09QD?{#aO6R%d&t^5l-$V&9e@SrE`g8
zWO8F&YH>@)CP!hjOeHpTcV7TIA)zJPYM|}E8Wt-kwQISlpQSlm%D+Iu9e7j~l7Cj_
z0y0)4?!JaQr$O6Oe1FtkZFU0Isp4lzqSF<O66;L?nY$C#@`3!ZiOu1t6oLtq$~k<A
zubUb!jd}nSz@BW`y&HLO_mQo&b%szrAx5Egh(9dra^HV>BcdtzROAMXxJ%i`#(NxB
ziCAC0AJ-_WOV#<Jj2T3U+4JZ+A@^La=UHn0Z9#LDnsj&HxZN1-I|dS{REOkKnM`Dm
zXkHYoz{k^>RJl~%?nm%&31sC&X*JnTCh2;A^s!zo2{-E{p!)Cxw+NxGrm}}dr$Vhn
z7OME(i|f21&1x!IW$?Nauj1iqpZvL)*<=h?gWji|Ght_URKLk%vn$AKzCzpoexx|T
zjUyBxJFLCnWB8H%RpTc^AJ8-??Wd(N(dE{%p(0$1H|{97IMXm!4F5^rlPFB6GXIgs
zG<kYyM8v>qNT3a-l9L?naSVK$Js~ljB<G<p(_1jA(o7HnVzWqg;i%d^fl{f-9*xuc
zx$*rqI`o+|lfI(v_;=U-+Y@HHE^zfURaXvt4&0`+=W)IU^FU*3q@b5$hcU7j9e_&n
z%UDQ532(~H!%<~NwA-1~tSGE!dS=-dM)Gvt8f@NghjeS~w!fl;KS`PX=fBS}{I+{T
zVc&=?t}*0C`e76twp4W|DL3uhj@1nFY+OZkh`_E^obFb?kjrLB-M4M$k~39dkPb{U
z?heV%mdwH?-9~DeV2+_UReRi73n{AVxaAXi;h-cYnT$um5?BxtdcC>0n3!pZtu?q3
z*xE@?rgs<}y~=j;=#_bCs5}X9^Dfa_o04T#$M_Fb9!Bw(Rm4LJzjbhEp{Ts6wlK<z
zha|<=HA$NhH4BPLGT(v~=1-+bWgYCWT&#h%8TEI}hH_SHmcpWR)fsR=$%v3nWyuBd
z0#5iezcAz;GC@sBBv47(pSJ>^7N8a|HXaUcUy4Ctvtqvxwsz!)96rH_;9;U`zt>lX
z5QyZj-$L;4IbEy~qwN+GzSZUhm%PlJ80nn0@_9qEzv{&j#c%5rB=}P2u_2*MB(Dmf
z3BtvxE*pgSPZ(B51MLu(9<j38%kMMB4V*sJa6Pi2q~Sv7FeGF{n#A=1wxyDX_4h?p
zW;={=h=rrmXnYArqalNCJ8zcR$I!Kh{<e&ylM>!DGtWVt1ISEatK=QNWlvR`b*GGn
ztwXD&s10}Ib^5Nv>3RPZ%GI$69T&=6&ja|Z?yfEn4NQT2kj#hsnbJI(Rsa@MxA)91
z`uVW+=g|M5_J8D$or1Dlu8$%EJ|nR@l@l}<BNzl@gbX-^UI$(|Oem{r=O1=X-AZ>+
zIfjJVx7)1qF4cG-pdlL`I(5BaZl{<wCMQ;k&A;+_ibAK=63>@N%-h1y`QQ(NmU9(!
zM=36yFcg-5=}L0G+JJ?$sO-(0i4Q$$3J?#b_Jy|%Pj$NuPhSZ=vC!PaDlxjUr_8k%
zpOL`&7p?E#+kLSg$X+8W%BETyGv3THb&JY5hnbwcym#M6t1l`Gq5b2X9-0k_9;!KZ
zh~WfY_u2V)K4JD=T^UJ}1@C}eREHDULO)3xk$~^xU5~s_+_+8RzXGosgDIOFN_qI;
z79H2zAR@8QO<uzePJslE@ji%yaU>y7iApKo=h_rRwZ(Lr>~|^VvEmOF_~M>oa#kpU
z4&=!PnLoG?Uq2rbTjR>uiFEG4kW`#h|0K@%o0#tJ(0WG9cmE4?WAMekD024&W;R$@
zn9=(Ea3&ug8l}R*hb%5C)rzuHSPv=eFma)5_HVptn?L#WC#vTvbuk2tbH2J(=>sB5
z-^4pd|G0|LqOACiL8qgInK#A=tZWCe>Y`;7r)S#rVRezzuxq<78ePg#A-*M-Ny{RQ
zNSXjLh+i-I<Bq9)wi$4A+oH?HT2oIF1(zSu)pO*LLKc-_b1yUI@FwV4@`V>{2*EvB
zp;4gj|1Xr^fCds~Rcvc5X3M|5nUb6q5b+F8hrL=bUundQxeZhm5_a%vJ}dy<O(sx&
zAu)lc0a6;QC>>pDD9JV`;RXQ{G4qDD=XdL`m}4*)(eK6Xj#|0L#j>*LSC9gWJRdG0
zc{a(#x|alI?2dD>GQPeRN(8+_%K?VaVFx={s_z@1BxZI17Co02;yB9bfI4%9;lzd^
z(n~cm-D<;+%J2DV!btZ?1KS=Q&pSb1%#`}^6VpPnF_ay`5aFA>F1iS@UStGQ<L<Ot
zL5$k|@r1u440^C%Jy6h@Q#s#+WzFL!jS(TGJs;bgPc%wu-I%mL+y)B|Q6wtpt`@~T
zcPrS&ItPRBq$GLVlqlB%Arg;%(e!MMr`aI~=-^Y)C(DPrRazcffzZ{KSBaxa!pCu8
zf#c}<vNF`WqQJZ7P__D~wht%MYdnw6VH)3;9vExzOc!eHND`2cmXw>Xr-p@lE+r2R
zCUYHueDLANinY!s*p!;Axudq^)etb~;t$h|NuBGi)6&;KuIVAZ89E|*E-of<<RuV}
zNFIT<f~@#;ohLN;@j)Sm9RI?|Kt4Dg^+OlZ{(d`TJ?M_A=ToMmKiSIuZLsgb;2m`O
zIUJU{4nQIiUSweBQ5aFRy4iGnq+#~P=NZvnZGmN-Sc4-{VL&qei9B60v&-*#+rd$_
z+K9=NM5gfKlCk-2jJb)g7ya*=R0}^-sFbnKR<8SEGn<Mp=%QH3qQv!{#ENopIUmbW
z8rtI5zOfl>?YdIP&+mApO$?$_DZE5sHHuAnPuzHx!{M-pIdnrV7K57)WWbFFqIwV6
zqkS)$s$8A<EUe+)5E|9N{ztx}QZcXNZ$i^Ka9r2aCEzSv*3>pD^wp}zjseT__01A%
z=IUk+37JkE5L(~51^;vT<q3T`jJpc!P3fBl%N5~99%>d#9H$T=jNK>Miy_FbGTYOA
z@dAX?csy877McP|lqv*)R2;G}sNjn7-u%@0Yi%Y7<vMNQbCrYVMX+a(JMB-WnkB&2
zQROnVK}3jFe!pkO>j5NA>Q>(Vm{%q0J8MBTor+chd6$?8KBFPS$1^^UTEeGMHr)tc
zZYPpuBmwVeOI}LpZgv3iz+|q^t28iJD*!TO548!(zKfaM)ju0nuQ8FYNaN^k`NSTw
z0(=s*_)~YVl2U8|6l5N9=oqj#Zt63s<U!2tuyXzWxFs;JUWIoX2Vl^b{wz`-W{6u;
z7G+C(b1mvd&Ro8n^oSRJ!z%1zS-DVrc3W3Y4Lw_p$4|sSC31RYg~O=Iv{g4*oi$Bj
zH3Gq&^nYOvn5)P~!sOL2t9^~5MG#w$0UuS58WrYiaw_>GYYK)=4mT-8ZoyvSgi3F<
zkdecrQgznSa2rL#p1C`a5D)BeBOK^ew5NC&L}@PCOe70@hlqG^Tr*ZM?T|(raFs0b
zBe>!H($9m`VV&E~Ia0tUBCBA_?T^M>9Ku{7@C4|R?J+n*H){GEZ5yzMo!<iV%$Rm(
z3bO$ZVVKt@>2Bz|Tx^*K(@0AlJ_PB=_xA}o*AvWZ{@z&M+!ZiDUxRbrK<Z#`ZGH!#
z#Q2@q_}4xZD+;9tk9o3!bP1izMOKu;+?-rIn}Fhvxl%<_>$#GClMM=!gP@b{44skO
z=f!@KM>8bM70l1QSoZeS4k_h1FhCl;+|V#WAjV7N0wZQ;6^j9XuIFQ6d`M2a`kAj9
z0$AG*VFIq3)zsNFbJFIs75x9+z7e^>b21gVW^Dma<Opxbhev55f>WWb*GHewE46II
z`-cJdM^VO+YMLleGhm;Dk?G&rcD%6!+yreQ|JT+8D%$x5%rE0j|6n6~@r`f0NCF5Z
zCI||3=S3`D+St92sk^UlX&x`wr2D1EX;o6Nze9}MDXZ##Fz^C-I*~!?90ceb#y*Vt
zyZQqz^srPvfiogP-8sWuCL0Md!Nh3LjXwlh(tZxAgmy{)PXnSNM0|<le#BM>6+1Pc
zhBBP?f9c5~<#5U+WDf8=Qd>qJqh0=n3xWB`ylfc(<@#Z!ebw~wwC2-~iwps8ybUhX
zvOlwvzi-2Y6j1jpceR-X{dE>&xct?TS98|PxKUo~ZFL0m5&0Ad)mDHwKkiUtPw?tD
z6rYr^qh&iXZtR-8%|czYZ1wa111^A!@}L<gknXf6PSoI-HkH~Ev+nAL3OzEWkeD<c
z!Mw^Lg?!E)EtYHM4+abt{~zkwDQLfg{e{VSaq`yVCuCFj59PF4^qeSM*=Bqh3I#J<
zh~FAxH~IUoM4dfzcQD>Z!v)=Gq&>~nhnbK4XV@=}1l~FV*ES+Bx?yX&TxmQ4h$hF-
zo6C6Oek(_f>b7rAjcV^a1AJnnRn#i7!hg7G(`w^zDQx>wtQE>?bgG-3B5uD$Z^?h2
zW`WTRp&L|Bm}F?Y#;fhSYQMoc8g6<y+mCkJrnVnVv8gW9%}F*+R4!D8nG|$%K;JJ2
zk9%#0|A*@6!7ju)hjAx|wU`Ssgl!D3S@aoWshGh0gb7&%nL1tMOX!C#FwriKTefR>
zIt_^N)oNt^+jt4VfDuX6_6nz9_EV&*J=kfvc(h^G(<wdKvmmv==)F;e2~QOgAR`q{
zMdXaoFyRw&*-`J@-+|@7WaBR(+K3Xm7+cK4=C!n8hDyVavOPC!TZM%_5?dLGNY#fi
zMPA8BQdK4+0~o4b(|J|Pa-BGGIv-=EKcDeE%02@#e&Hpml^-82(=C<;&8EGXcjha7
z$~U#rzoz*#?hGeo(l!?r_^Ujv05OP0ol%y{qzU!|W|Ce^(r40PxiDm-I=d&I+p#w?
z(KW5FXF73?E|lb&iI(b#hLW_H0g+V@tQ&7&LyeIM`3292YJH_cz<C3=K%5V<$(XM~
zk`qM{^dfP(c4J%KYud+^>p#roPXozaQm4y|T}+&T|BOwHJ8Y`gQe4(9xz}BcC!bH<
z*5`Q^8tu{-zkX`-F#o_71V-E2s0+-@9zJ!Hc6XPK4h-C0ddW6XpxRROy>xXT6`t;w
zy{6vZbpW5?OpqujEgg1TmbI~|^dd<9@Jj2{<+lcEp+oM)gfk&WQrs@bYGC+=;Jc1Y
zQAZ%4{751%B883qGh4b2d*DPl=(y^TW2jxKJQ*h-jCIY}7VE6N(x&qrBsoAV-7fm@
zDATO3uW!hIFB%WQc*T7r00f*61Qd!N1Psv^1YCnOOAiu)<v@F*^PtG>Iwi(s4e7dq
z-yFpcd_4}uvRV4;))8waK+Z#~*4-fM`()9BkU(>|PaVgYTX9E6$6Q5tj#JiLlhUNH
zKKTzw;Wjs+qGn$F`#WuUdf~Y6%WPSH9P1qq+fny)*;#Yj+@3p(vS2*r#qZl+Qg0q)
zeR?UL_t@I1OBC#6Fz{SjIUWzThu~K|&a{nR9=V40AF0ZJ*a`XnCUN-3tjG0d7<6jp
z!nDiK>KX)Y+nA=ijFzE&5w81ZjP}jO>%E4ywTD};r;E`tp)RlDGR5~Z`H(O8rv(B6
znPb?qA7*Lf?s8;ph-w5`a7yGvLgWpi0=#0@T!M(oGiFZOPkRS=#H_5Q%-^mljefl>
zkq|xkw(Ne?&yiuT6H$$YI~tZk<R0G7of(a6u~0~7l)s|ukr@I4xj2%+Y89;Rz11z{
z^Ge;{DV=)C3VfHlVX?(UHt1Vu3K~1R-~UX7e-ldSHPz>8Puh6C0&j1@03$UB27?O}
z5lA))XgO`|K3-ORXqRKhwByKgnO4#bnN<hS^+4Yw$<<6*=Y#`(GzbbpKDvln`-1~8
zn4J&|=~=?%MzRKb=_zvWgcvsF+_PC2#hfFPCnp)0c-yDTG+jy;n;i1$2|0eQ{NF~v
zFNQ3a)xA{L02oa@V;fH58v(xhw+uUyX5@UfxLa1W7$>*1$^59!RfJ<EG>a5$#gNym
zcp73(ES<?lXUe)tinc70g*M7C+JPdnwY~jCRwa+DMn~;v3zwb#yA+9T!znsBam^!L
zwfY_C)8C{16u{3B>cjbFFir&nFq6y%q%d)2g$Do$B5T~_IMMUgBPxw|Qd8QkW_jw7
zp#btpCE7c<U}1=+^xK@JQ*zwSEVk|N=dO>H(*lY~TQM@yi{m3D1=4V0`U&un_|%nQ
zO(x@~mv;JiQ}q8#7C3CI1=u^^*yQ3ogEqxjK}7KvJeD<=^LrM5#1TO>v$63#mNfHR
zz)?qY!u|NNh3a*b-xfJye((Kh$cHvEB~~T`3;jDieYgfz;uFT<Lfy==InQA=D=Uy%
z*NY3Rns*MrPmvpGqO3B7$z*?UXQ2ME9p}+l)SA;h$oXb@Vk!_;vS=~*R0(Y$QdG%E
zRim&RUdX_^{B{C6Ob{ASp8di3M8&#h=JkW}aklAFOM5%03Bwt%XEyb4+Jt!(9*yW9
zKL#pujC5jp+5iYTW-@LIhoWbgdABI0yXh?nE-$wp(GZBH8T=0Z#$tR7cqg7$E*iOj
z@@IcG^A^H+3~IFl*PPW61l$E(#7f&YzkuPdS%}AXE-WN#hxjB-=RZZq8NW6iMYzlc
z2A2iYCBQrLjHMQH2r$XO5I5}dT}BCgqT-SmvGcj2<dWT>E_scThB_1<(2shGQ0w}s
zsn96n23HrCm=u>8hG;*aZ@4(a^)mj2MZbn5yaHcwdDmuepq*PZc!xL1#smSD{RF2?
z|7G&R0wTM)PBSuu8ly^0iH3aPH4rxP0HHUP9PviSw4L01?=wH8PozYCyw(;S4iCF)
zpu_Wo&~lpg=r9KR|5`lI2oU3d?AacXYcyY0T%tmy9aSz+*VGjca%%cuZD3@xqO-y@
z(#t1pytx6DDKua=WfaXZHO8ZME9>oE-wE(;)NJ8?(~>Vg3D{{%&{M@^k*7{2#*4Q6
z_7otde0J=}D^9y*8!x7)T=~pV2X9k@s#WZSi1%{RV0hWYVmPKaqC7hM2p#&~y7UT^
zl{5}-YCN`Azu~L)OW&#ZJ)}+B30cj;4>Tb4_2?#*Jo3K=1@Q~Pcb|xi<Ti9Z#)bYM
zzhT*?I7i7e$c5XyJ^>Nmz%hvrxKad+2~#_>%=@ghMECxHWk%MX81bE)B~zm6o1ItW
zny;A%{(|+IdeMgWN-`ChZdJj=!C}T~skUxRb%6idfFIuZ0lQjKH#hkJ3dM$xPsXUd
z<vY(4Ef%S351LLA0D)q>vo)(3n6{Cny^eXPXan*I&#(H&1rvJoetSMFsg;Wvd}<I(
z?2f(tM44s5qdVok;L^yyIVXr;BeY{zOYj+2u8r}EV{YC2kfyH1X{`zuAn6P6AOH>q
zE^WQ1(VE`%J};99cz^Kz?QbIfT;_>vaKR4A5ZYvi*z_%vFQ5EBVrp;z?D5BaAwM*J
zQj;gM1}lGlps?0tTw4oAqr!t>Aq@oodq@1k3gN+kEQk((#bzT#+)=a+xVG*-5^2;-
z<t}`5eZ0{?tftYU#3)7Y!6AbQhnZ&sEdrkPAF`%tAl&J7j+jm_1AFsPMRY+jiCgNQ
z=Lkft)_1W6eh4XB7u?#Da9KQ2vhDE{y|HKfp5?k+?!XOnXK{<8T0o3sK!C&5rw=NE
ze{9Zw`d|~$SHnU3{<$0|fEX@E2dzg(!={4ZStV)a-F&rO_S1Du<4QPBktd0D(IPIT
zUXt|9$Ee54Vr0frW_2?YtGc~M_^1oHkelGVxdKOf&ycRe=1Eh?`Rkfic?)kR%1dn4
ziLd-34yR$SZ3jB#ud4?YCAz7l6o^H5In~LFS$C!lE&+Y5Nj3LW8+9=Tzj^CVIe`!J
zzQ2~iQ+abfk7`~QQnuAyv4wcvfzkaif7SWsP9>r23TmcFX;!?f5aq`34vMwz*0mY$
zp>*s<$`USk*@mCWiFUpTwT;0h>HyBef`Bu6Ayn2blRDFT;P;&$h;cH6U!9I#;8w4_
za_>gV=9PBd)kOta6FUkN#x&<2=_uU<Lzurn#i5j~H{0Bd-r-Qx*T}GGe-jNp{~AQ>
zWEt+jO>B2*SICgj9DQHA;I3kUt$Xy+Fz4@a)-Wd#x>W3h+J!C~7YW#{iWT}l69oaU
z<|nMd7L*9ipOHonZe9xZjPRLVlS;>!B=?a;8L`rIG{(zB_K-0!V^0+Q?mABTe|~~r
z0bJj;Fe)3G?@Ys@zHZ6;_5&Tq==&nEOD;eDd+o9Krb>rC_7}vZYY-z>UoWYvK?ww9
z9CvJdoz-BS!{6Qi1EU|1F&u4?M|b_2R{hHOEcH;c4K5{xwL%0RJ50u-rBX04ely|2
zs_T+lf(>+LFa|RU>-(aI<|7kG<;y`EUevm70$PGZ!+cpiLqm_p^eK|xTv5&x42QMM
z<r(MTjH))1J?SmjD22zAyM{J_f@2;}ofY0FH>|7>PAX1E@aP<cT>jOrc<XRzu@y}E
zSm>+MX*sMGm;xjuD9T?u$)5<EC+zFe8Jx8oSY);IktLS(LDx#O@k$E|XDlC6QW+Y+
zP_NZkVD3MKa{KiGr{Mtrrxl*R85(tudN*jU$DZ`tp7+aX6~R5%DZH4DkRr6Q>#HyU
zMOL-5A6KBUc1?=nlj`S?O~p6qP^Cdep1)kNpBCl7Y2ZpxE{i|CEv>#Y91Gu_{s{q6
z-Q7M?kQn8^J06~x-r<x{^tfh&C1vcHI|emCTtzr@t7SLup@-pwn>WIg0uC$%o%zlD
zxRi9MM0qZAAE%Gk{l?wkP^PZ58aF$8Lzsrr|HgbjcOEId!Oy#6z539AZ$I2C4_2#1
zZ?8wM=eF3@!6@MP`Ps^HQ;rY%R-4IP<w>w(ziYiKnnYS0EC-zgaSa#_>x{`CSHu3;
z!-E|J{IUNH06?LHNf5iatYM{vYZeo&7fiar;#!n~c9_2uj10=;H#Z*XNX>?nMP-Uj
zNF}^UClw}qEXQvX6)fmqutf3-M?#Pm_ziXtKQQ|dx1)$&QD__ruEVk?Vf#6rae|L_
z`rW__OB1^5(a`n?cSgL*#q+8&IEga-7F7O(VKd;uFnBR>MM*9FaA(1QB>ea&f(*)Z
zB&l^|Lbj_nCukMlx``8#8*-RVkWc^R!<*kR7zE6X7_qwrIG>#$H3ba`!xM5}w=DDo
zj7~hm{cLGJFwyD&e#8D*NQ21@d*^4<B+_1RX71KzZT>@y-}ZzLAAUK?3{z9Si;&HZ
zuAjD5UtO>(Ho9qn>UU-l->UQOIoBiyyQ70InFO5&LTGKGlnwqd>b&a3$)6KsL`CaO
zdQp#m4<OzN>U9U-M3cXH@q)Pc(2V0gU*>jnHyXL-{LGSrg<kIXJSS=)pGz3Q#k_0r
zm61U_u1t&o^e--eTzjTZPU0j0mx=&_oLI|TG|31PjThmojH&;lM0hZ>Hj;u_SuV`_
z-0?kE)=JR2?tahPl$p<<qZ0%3u52!{Y~A_R>C|v~+Ctln$w+&4je<D;{uvNIDddAJ
zm$MO5O1vKKHV<B&qNu{O!hIGVCwo_?^hwz>yCMVORJwAts;MeH*ZUZ&`oPoQT+J^B
zQLWiAWqW9jCN+FZLDBmly~cRSO_2tz9N93OHAm!<Jl>zIMFL_)zlzeMiWObY7G)8O
zr4(9Lznqbsoo(*c6!y1O@$Cd2*72ayX-yy3pi^cq^_i*r3Oup)m=ys^s>O}S4F%@1
zJC2sE#+rO`v90`<?rE#?Qp44?kAp{e{;U6*AZHxE##y-84T=?PjhQkt!3P?!NW&Yi
z*h&`W(sJ47*2Zwp502b)+4S;IzYFoxP8t28ecqng!WHb|6xCq!PaKzBjHNf=y?SJ{
zAa(2g3&S5sI$KPB^ub0f3lUPKa?WBfb6tj=iWe?lp-xc!+aZ4*vWti&{FbENHfu2*
zBQY{IQOJQmy@{ApHGfme(i)qFyt*-FW!sd!i3Xu>RhF|m6d(E`OzquRSwMwvO}s4z
zOdc><6Yc%(nQkOs?Y5g+Q&#fY+)XU?IURP)<EZkEVsvfbq^;FDD`$h<rc^#JxQJ=U
zA+ffaLD5e`d~Px+(H@J*qQHNz3zl`!t57r&7k3hL`PSq&4Dq`~SpeoR40`x|bf2QW
z`2*h=AfY2Q_O6C=`H)5o)$tL6k<6nTn8pNW%=&EH8MwnS{pR13HuUEwTN7aVBup0k
zhQu7o*1<K-P-Y@c+*+n#-X^+6)OVlJg2bQaUn@x1*<voX_Qq6kk>K`OibFQt2<6Bk
z&)R?qui(Z)tJWLv2~Rg2_@D`A6db}UL%XOM^luA!VEQXydtL_yY;SERxXiK79z>4F
zPc(%Lz9eSE*4tcTkb{DcvYWB4ssx18ecLT)$=A1rf`uO&jVi}{_Z#x;1pG2hAugeb
zk^bb`-l1S@%Wg0$hE$nlF~VZ$^c>eOO%(g`kue>XUc2-WHJeA8xO~~Q8q_7aW*4~x
z|1ucFP?@ZvvmEv7(yG4CBBi<OiZkNDApXXTT34%-9as<ed}Sg3LUO-n<c)Oh4ug>0
z5UBS)C~si^gLk9!7>WEnspR?>-3x#U*GA~*-xdxyfh-{?<_CDJCXJnUcwGc+ILP7`
zbI|DEI2tKoU~UcT82Uu%mp5Oe{w>}gxR%6U#gdJRCW~Pz+HqAyA(!1>>gNDQE7nq}
zZ$+&!k0i0*Jp={cE9dCy>I7Rp0si}<`*nk}T5Gx72j((@w#64z5x6&X7a-`@)_zii
zgJC`qS*Ai?sH?A$p751|2B1W#21+9aH5@)aJGzxe@2Vl#(<)fQMg{Ewvt(*Z*+~DA
zkk$|Q_9<5g5NWMd-g@o}w@Gx4fCHosyyM8Gf4F#?DQV|>9tc6h2}g{QdGw=kAvcIz
zE6MutKl$V;*nXz{x0(p&!ChTOZ_Yn?K7%je#fN68<4-?!$eiF8Rj1(onHBr(8$U2a
z)3UmmdGmL^AQ*u68+^NIPx&9yl!gV>T#>{+^@b-zYXZXu>Ku>z-%k;>ew|bK!)ZFe
z`udsRwTQL+K(qoX46iRJ7j(UvV)D@_VeE09xj+1kFJGntgtGkXS2paKLxIp)egu_&
z^~nf4M4yrq2%QCqrjWlGyKg6|A21ET^%e?H=MuOkeMKbJXKL16fQ?=R@ev*znYi=I
zRbc0oB^1~rjU^?Ec2)6O(eI)G=P5!wvBPB)KN~I#uM3Q8W!d!Y>(ON<sMCZ%$0djx
zgo&dd+4)(2U*}(L@(mo>RZKQ(Q15BkHD9qdo0ZtwV}6lfTgGi^$(yR@6G#BsTal&T
zw@YB?PK>yL$HA66AjiU@6vgIbUa}~cP)%nVY)>*Kh^0=N`-Y$Z-jQPrC#n87?E{A-
z6a~Y3hz4L4GUbf+xbjUZwSt?oL6}dEa!typv*{ENX-c9v0=!61ydk}y5ACUXgF{ps
z6w;gjg)rtoE~>@~vPuWWYwN{8(>cRB!=?f=CE$mWG*U-XCCw7jE99TBD^<xvM#3FO
zwq^F~{Ed0Cg4znWNZFkN=QIce=y5CZ1b+t0lrIy|zo}+|0~~l{K4a&aSfA&R*&m%o
z4Jvoej@whvWjY3dI`Plk_D-?S=>9fbaGT6i$|)E+w)qk<_%8`R6UL6ZbRM@+nT+SW
zKMl@lNGX(;>Qez9%~{{(xS&f}<{}?6Ap31xU;t?N8RV=a1s6Ti-}lpy8@i2u&Z|D_
ziS9I74f{}>B{sIk?w5||OI_g-u}}Z<ECKLDTJ1fpB_L+X#rf|a;njrQAf=Wi;v|dQ
z(XqYp%f5j^m6#ZjZ8QUPX#u=uTV@*}f0+RA(1!|UlIa!QwBZkvPRSWfqV08~y!XAd
zk~K-|vX~u^3-@cN0ghjGitkvFm2w4IM$adW#yHwenHK5zd4ANIm?OonD{7u!x^F;2
zpk}+SlI#a#{77TovN>o!PpU;>9#`4*ALBic+AbRLG24YD>%23cw!)B~mJI&mAPP)L
zIEPV%T@HtMCxd{QF+-qIcYXf8V2AMb1D`<D<}-z7u_f<Nx%#ZeNf!bK{IB?)KLkl!
zV&qz1X=fh-qqRG=m*Fp!f`V)Km{_$1flLF&#xg{tTLgPCq2ANM_xbdb+BiUcMG@F^
zym-Rt!VWi#2VoOp?T0A+WvqlUV8~djP($p?Hx@AR(=qSdey!|;8@TKIaVrDDIs1kR
z)Jz!|fQSnZEJ1N>`jAPr4cx3ej05Q$gmg}K2@Yemqt<PT;Fln%fKJjREz9}VndT%_
zmfiifyEWa0j22Py>G31|E#g0f%}VrLvx;an*B<(TW?$^P)IzqG_T?>w@sXw#yg-ez
ze@exA%J)y-i5=hFfwZI+f~5QcLPK9)D*EPv9vWr|!t&E@o|qQ8`M2%A0zJZ(pBSE`
zy{+-J%%Qhx482jK(WnR@1O^2trlU_~h^sPk(6Gp=TjKECqR09Jk0wOHDohW<lPf4r
zn><!W_i=vxIb8ZzY#abY>|SSP$g}IyB@KS#2%1_o9!PLy={zgBr5EL<VKZ&8lY0_D
zvbl*e$)E@$Fn3QbCZ~%1bdEJwxL;QG5jobhSbX&Rd-?b%|B_-`_+Nib7sz5-=ir(?
z8f(nu`ZnC{Pv&Az9?8c0&(V#_l-S%J=Wi(Y8$l75FXf^}BoiUkF?q+d+v;>)4iVGO
zxN;F~MNQVbB>wIPn%#?3)VGNVN|O(2l1y`4pZk8Ut0Ob0i+dB->PpaNM$7!F=O2p7
za{c8t>~&5+x-X8TAyl=tZDW23am#bY%}fwBIx=x8fH*87Tthtn5vLwkc_Hx71n}87
zVjlWCA7C$><?eD_GtOJs_2?c4m^GrJv<Le&yCA}!xt?5vVsY>ZuyAHTl-J?Pg>_37
z2NJ46k{<&!WBCPKLOe1JlXbbDZC!W55VYM$;2+^bZGvy6xVr3&Woeb;AF4tWPvGBn
z8Sf*-##+&bp;56h)NZLX5e$IV!!6RT!_jzqr<+W%|A5);OHM-2XF&Rw8*q?hjr!2G
z9NQ}G&GhkM1YdT^KEo=<3H}9Fj!>XxxFQ)2>qOm{@u|hsR~uDzCrAK%P4+S&!aD`i
zckqT=l^jlev66p$;a3Z7I^=d!dsS<d#rFpW@wY(bT}CH&wOD_Cwzu~FY--B24PF2)
zeYz2efbvhc>$eBhx&bjRHe(5oSNHe6!2blDSF}h<aD$o2gvYzf%^Q2t(cOlgx2bC3
z6<CT_@n!xh2fwDpO<oMW<L5_tLi{;<KVAKBWVM$&J>wAKmz`Ei>23Epsk2tX)gR*3
z{y_Z>R8-2UJ4}>&@)BBWJ3-X)fPNVBg3+Xn<t53)rhfs!XV%@rCMl-;Rb4>)B*tIr
zVgavxi23}at=MV2;&Jxky}0u$T;~^nwp{qSc43*-QJIC0K2cuF(pLLKwGm5treFfE
za5<Sb7?Va3h(cj&u8BbrT3B2bHO1=d2>U0({v8vJB8u;7GX%M;8G9Cvp@K5!>aRgZ
zmNHeC1?peHsE&w1RsOA*zrRVBAcQL?fg3GQ?5FGSX4>V}J63q0lHp&UT{L^<R=OK>
ztA~PxE4PQ$rx~@3f|>i<S%8BRj{man<PM;HbGP`N&>+X|#i9+$X-H8}_0<j}d>=#}
zFb*Vpr&FD~MpVwX+gj)tTG$BvhuF!)=k0fG>njf9Wcyb)m9JcCe+uUWO|4$Na`5vq
zj~jd<kDERRuK)`-Sz3Szn@&QgGl^f907mo4p9tmG(!Be~-;&&M5oN=guQ2#frg3w9
zIkp$%h*|hQQ{_wqM$!H7UQf8PM=^MstTxt}@z;N9Pdv`IX9R|}@oRzD?jiPHM+Luo
zsJt5)oXp-@a6f8bgA%lPX%<JEF|~POAFaIRRujYb)Z`f63hkHvM{8TOUxE<Ifq)6<
z7aU>d6iE8p{As(GU=ObAR>vQ)y_xHC#7QT<R<i(j3JlIJU^y~~6sw&)^x^)pjT<Ot
zWTw?->+3zzB+sGItv?X*=PUwA2uF#TaBd8Tl5L+UB@#vqUzrUGZe+aNTcQrDtAe#J
zOa0iH<tOE4KYG4Vvg$RQksD}sZZ>8!u*o+%wm+>t&O00O$cpD4FRwhd&REXww*4ty
z7!nkfaWf>LdGq`G;9vHT)Cp|RT@h-(66Qa<9z76nyR6cym${W?EAR<scylWh9>lMd
z&XOo&1`Y<SY1{Q@H=9ELCH{^dzY@dr&BvU*MU%|!jLSbz8BgXXx{GG!kgs7y@OEL{
zj=xKe@5eP8kq-z>VL(9fHy+_Pga1Q$z-hjh-Z-uquQ=TLEJ+KWurF#phf4N8H%x^1
zU_7hF_CK_kIBcTRHO6)hT(eYyN%wUoM%vz7M4CHmescG4?uQ)yweVT=;O~te%VUbU
z`Lb*1qqm{{P%|MFxa-~Mkof&lT#56Ju+bQkakDlRQ{9&pIJI|mWX9&viCltYx9YCM
zKWwk}Y|8d568n<_zz{Kkv61UH4FCkDl-AF974Z#d*cS{f`q|j%%J#>SP8IF!>8S6*
z8?eH?5I=SMKl#A#?CW-opM7gXhVC1Nj&8;^O0`$(nNt*^7={M?1Q|^_rN%PUPmuSa
z5&0*iKq#gE-ktp3LyLEMeuMEB8TsC>EnmZ#>F~>{4lKcdC8#bSgr?57UcPq>NSJA6
zWF~O66KXQT%jn#ZHRdJq4cV~cejE5h2=9K+2mFQ0J2Cu9RuXY3G+`+ZLNnG8HRPuC
zsZcLMzo+&7ip&XNLCaGHnXl;c^l1XJu&89PBSQFR_=0+-smlKs5B~VtzDk9p`wJY{
z(&#f(OFT!hlpZ5#K106skaq$C+19#S;fnKi04%g|6#&`702FijfF#SJ`mYR9k))oZ
zW3A_^ht}B6U&8oBB8qRXa`y4+TbA5_nr1T0YRv5*)o8kepaX~}SOsb*EQ)71{cd^g
zqEGBx)>X7yZziEu{hirNLartnKR^NTCd&Z2^{(xV6`Ap7lHpG$my7vn?vcFdv0L6Q
zkx#3vmzcGyz60nOmHz4G)&;Uu8M?);Gmmg1wEM-dsOf)C)Ncpc^Yv++=`r?Ci1`Hd
z6TK-|C)P0v*o}aHMDQD2EI&3qH5+jFu<2zlla!LYXhmlHMe0s?Q0kO`EuUw*;ECwO
zU+0*4Qk4-!Oy*;P_Hw_}{F+{-1C1%Nj>a(#*4dvw{@05A8lE2)Jda4aXEN5xpxURI
zf#*WP93^1Y_&87p=Vnp6-hPDxz)7&qVO?OwZ8|d6*!saGKK;$nQ;)*%T)`CY(f%3*
zSP0ygP7buyFf!NVa0gTuOn2q0w0}&FA52x(OS!l1XTY(QhVskaep&(W3{zb(`sMM&
z@d|T#XR^)s7?o<rtw+kCGu(}paXJz&Tp?}MN|b<iRSK4P7uu`U-aaxQMMm*kcIm~<
z`g1eL=zQe(W1_}T+Z!4;0*l@3Y-JgbvRo`G73`l?Cb4c{$jqf8WA7tX_-3~bfiZ2G
zuxjle8wD2eS0HC&KcHNb)o7puH#Ns)gV``R5V6kK+oG<!$&sCtPU|60V$p2FiwHs*
zLXmZXfZW6>_5acJ)^Sbu-}|^ADyXEO0umA;ARy8pr8JE07L+cDAss3RNcTvI(I5_(
zG%5|F225g1LArA^zt@cW?R|f~zyJ2wW3RoQea^Ygb*|@2Wzw=XAU#>PCSl{f;%*N+
zi#b8ZTRBKqqzd=RIVUMut^8QD8qdN~Tb?z?YlU8cWIWv2|LqM0N{tdK$TX~c_@a?|
z!`S8BVCe6lSRoh(_+(f`u-Je-J=1{eL?K@Cw`@tGB2!~S=^rqQ$@T8b%-GhkiY4wA
z=0-h$&G+&)Hi}!#N71RCh#&2Rv`hLOy2H#r;q$r8-Q$yxZ~~M8ZEGCHR&Iqly$Vjf
zbAOBhBPSJ~ujuBIO2t8%UrwA0oewIu9i3rC!fborMyf)>W(C7x^-tSxsPLg{N}b~Z
zMbVdg8~5A>!dot_ur2H*bJ$F{CG4NqDgzl}l}^A*@W`vH<0b|gdk_h+3r!soT=k_3
zG-OI*A|S`{o@+J4Mk=<Gbz=g#Ju2h2KTJjobcbG5(@Mjrf`|W?IN+sF=Z8v+494+-
z$&1;?T)J4ZF6$&c`n5WPO3C!SMwQ&U*$Yz2%e!Mfp1(wr!g;oF$*o@;O8}{J`Ce%?
z+npG7Q&dM`Fi<z9lH3iB@vpC4t6T0}Sh(G0T`biWplpJkTj`J(O?RITt2uL`Rq)h*
zKh_-3TniA~d$Z0Su2ku1#Ks?!r-1bX9Y*%M40Myyc&p{0V;0POC2cBdm&7O95evM!
z=C>9e%xu?{WiQq)+!`nLh=MJ<7*--xxE_n>v`p2Ar^$m*;-Lw$YSopNjz8v^jHbeq
zk-F;wGZ8+B{YUJO(95eg`NZL?@SMEJs~H%}J4s{qQRnO`j4D6u1Xg>!G(jQbS-hh%
z1gf8CcFCoI4VvZDK3qgB3Px#*Ic1f_5+UnthZDfsVem}wF$rsp=wRu#H_e5nLmjpI
z{TGtVZ}9)Jj<})wpz`ek&kKJJWbezH3cU%$EWb9K)D&U5_fk<*N>OL$(OP}K1EvZ6
zTv{VuO=A6_+mIsLQ62w!r`Oy=A3qnDfm&`nci?8>sQtT7G?^B+GqDf(22krpW~uWM
z-#0^BhuNRog+{JvpM7}N{+4>Km#?2+&3h=Gu9ELPIrq~DsTet`+-woBjl8o6_oojU
zkSA@jAfYU)<`SyL=VFe24wX8`#=OYOQK}#2yBWl$Os^>IIiItPC{6Jy?Y>o9@WHM0
zjcq}F^tgZo8;g=sZxvH>eBH{h52ru9F~#Is9+%`Hp;3SNnL&AhU{n=yrP|6SV3vUa
zO0##io|oYru#q5PImbDSlq);D!RhKWKxgnYYx56dBIqG`O!kXU7uH==R4uz}WmH%}
zUY^kzS5JTEe>%zWWVKA)5F=J6b-Pv$7D~4uBKOVv#63HEvm`O;K!L_wdHvdhOQiIf
z#bV|aS=fYvn;@NljZc>l)hOecH>ua+!Sai?NCXjEy1BJ#y5r&DVXvhF!JM=IQ5p@C
zb^4|a%wf!x?QAa1SrCo^r|}_7sQvh~*LnMPXQCyiR3$MMxdN!+Drq@w{2}ne&ql*b
zWeMxVJf8(t+Lzp%mWD1$%?>CC!MA)KNq>esGEHocUagExjN4zKbmn}!H|d;vN5I6_
zDw$fWJv>%0$Iap$)jfGO6|7%%EQErPtyKLh=R5bOy$Kh+dkaTbs>CYPgqaE)z0)E`
zCvCFm#3KD%%U7LisUEPZ(xWZ!tV@_H`6K(EAwNd8H_QZ5>s1xV3^055ewuNd*gKO~
z%W(28lQI%LR?zhl^bj3;*47(;?;cUEZsDqFK=!o@ATz<$E*T@ouzCz^Nb{xkFQ1U`
z>6<{Y*@=_B7~7OzfhSof3!bdblz#^uRn6)Yti$+u8`WH|yyW=9_g=8bm{MQzfX~<Z
zJX*WOYbGlKPV8a*FjFWr1p}Ta1B>_KZNHI!ICRgTZWy=;xD$wi8fPW0)58YR{SO!W
z4$z($$MVKK$d&-z%0zR&vH!s=w7D5`%d#iarXUaFP>^M$SeRqXt@?^P)T*Ozl$)K*
z$hB?oM7P)BR`w#MY(%fa(LFzYPX#jNafHaLmz!1Pyt6juOmesGMN4_3Z9%dp#`yxG
zJD)eB*aS<@pAXa!7mIa()-Q50Wje{q04785iTCIlPefAwrH<bHTN9O$lkPI0vXWX<
zfre4Fb)%!6MIkaG1KQN3`WSBSqI$2!!|JOuXB60ZkKCZ(A*5IUIVwSk;NXS%z^EL>
zQ6jITE)p)>h|>lIq7fxwzoCggR=r9I7g&}F#ugpAtyoDQy;pa>zD%?~Tpe%hIo{jC
zh}77rT@ymkq}WDD9NNt994=Rsknt5T%|b7m1)z7qq6c4A<fI!_y(+S69S&RzPNgU2
z8A@H2k|{;JXA|{Or!wi;F7qc_K(j3A(r)BBy(5&*KlGl`PR%~sn-C<aM*3kEp73s~
zdxfQSGoTWlbFzpc8%hL^GzK#>66F&1^n<nnse}uRzCVXkF_q+Wd)Gv#@e)Clz%T|g
zX=Hf1iEeMHstK0vy}hSlrFQH)Fi3skF`8dwSzWu-Bmic=oUr9{x4^0KE03zSv<>uS
z&CRK|?}pj0z1fWAfp_8kiGBVI2fzI9h#}7w2~A~_Ja`CuG5DM+ZHwT*bBDJhfyb8P
zg*qf9{cc5vh_JO?1}JevY>hW`{A<&RH0&%eqntJd{54|~E^dRGWohLNR2LoFv{BqF
zqGc7kFsbMV#yVGw)8lpg=>6hq9vwNbqdavSW`MV6FTb<&<D!WjbJo%i(~>@H=K5}t
zb%j`c`g#UUq#~z{pwbL@sUg19#b*QX8Fro^!v-7(xFk{MojUdD6mp~WiJ`pzxJp1I
zgY(rE81chD4$IRXIn-$N3OW0?0Fd&a&61bL5)9db-g#^N5GlUns}{yPep5lKJ#p^V
zxUfP8>rsHy>Ej6oP2JW!Pltd{Y!;6_!V3oFGuEznu{ZIixy#CM4ue$JALN^Z9;W2w
zFq7sh>M?roO*+dO)^&~PpxxHyIu2H+z_}j!A~oZ|ejJmGUP7dz{JZJw^Ym7{1X13G
zJ>Q<Z@nLzXYxy5K70ye(9YpK&@smNW>s)WDoLCx<X~WlpbPvF?N1I@_iUG{_2)oJ&
z=kq)Kj!rdsqIrYWTs7a2x810`Lsfcx2|^KnOn`hG$%19&vj?e^Hzyb+$swN(SbRvb
z`%;uLI=E6}ZyeR1@xb%5oFRA>wc~(2E%C4%a{9pcB$ujs@C7y_7s_JddiGttYlz<m
zQSNCF&+j-1GOXY$;}`#W!}5ah{6&&C)1~*HXL-CZ=P2lKV#@Q$eR%=FpLr;HUXS-d
zH5&p|>KKuJd<_?{2?GJ!0fX|xKVb|mo{-Wdyk}C^%lm9O31q-q#3~kY_RwJ`)w4C$
z>NNO*RnW;T&q*duQE=K!>BocKS~o<%$qz}y*ZpCL|D`?qo`s?vSk_6Y1$Mh=(hx26
zC@!ta=x~4kBkb|v$`}m2VjQ3xvGMWdVDhM4=(5UawE?e)&4tGmQaAftFq-IbW9zPj
z_Y#$zO77s$&Fo!%HlLL{;^SV%%g>^|g1ku<<MPp=7rJ@tH`TCH<K^wueRJ=IVfI7L
zYK&Od22AM7Y|inFm719s3x-|JeDA`CMrTcCtb8+PEg4#dGI_<GHTLXWz1sT#kmWDt
z=w>G{WO3Oyu&umZ{NK1vih=-;VOZlgqLfBHt3s4p7xi<&rz{Swc2a=?aR|<~0nFZ>
zd+@aVN$`=Q>Y%s}DW~M+?#U*<`ia(e>+M5R04LI+9)`#kqcU0l99g2X`^C1L@a;IL
z0Ln0awLs^K0IN@gqjQsEzv=}Baj%e6a7l)zga&J|y8-WZE47vdbXDt-jR^Z^4SQq5
zcW%dDZK2jjQ{j<8Ec8)hzHA_UUcOg>`cCyD=j)FSerSk8t41s<9Jjwc2ft)uqZoJE
z%0-0I<Z;)B#WGKfi_To}2K7UqBL&>%ZZT`b|DOyN?tIx&%I;WWGR@dq#aQc}ZAJ^e
zw^w?0?@DydHz+8r`(Qg7VrEi3-B8iL*0~bDRy%LXhV5jIb|=uvVp2^KBo#f`kx%v7
zo*Uc$%u&fvNO3U6;?i<Ch8Jo}E5BN``B)<fR$A!g-Apa{q%KwXb9j(jU2jT;Rry0c
zVFAa6WocTfhB0O`L-F@VQ;!A52oW!P$~HtMROd(EIvt6ZZ>MTujj`yOiuS`NzEflK
zYu|{Fy{`z2Y+Lx0tQ=y+h4%(v9K7KAj^yl2&#?!jAYO>Df88^Sg87nC8AKB`-t%nf
z$XL=}N6+8u{T#uAN8ft+=vVC(J=HwDOnMzjCG@#r&KOg-^+v7WAK^$fp(}Gdcg?ox
zdo#s58a7_@@bh>Nnx$P!&RS@EI$CD3{3ZvDMqAk|gh5Mwbl#(S<_=nZA#peuEr|0Y
zdup^Pr&)vul#WPvbjTtGbqmtK5st_VQ72T!Ewcf~_7$h8OKKTU?(nmsO(I;MPVSUe
zphXIgns@;>S?OkainZ*ZeDD3-=tZ|CkMiMX6(z>Swh=mN9c;Z{!;rlT1}9cKz5aZa
z!-u&GD)qOAswPNM*2oTBy5vgtCY_jzJq`71)>?`906<uT&!>+Z3YT}aP1EEE$X3XY
z7sSgm`tP|MC^b(Ze2}2k`(?%2>TG!JwjZBW%C#uTPwAdhTDR_o4>inZ)^naSdET}T
z)MC7Wk<4jj9%{P{g|Q_vb5-xn<;ZrV>ZtiZU?c^CG<9b|N1RK}J}zmsTiu))4S*a%
z8e5iUroo37VT+43NQc!kgqUllLG{w&91sq=c2B;TiL|nKfFP^A>~;kl7u-IBe4SD4
zsB~l}+a~q#Nyvn%cow)v0_m1aC0J7Ms^oEf$kXVIaBjSTw+A<$iSanz6cG0`@))2Z
ztS3o?&3CWY_Q+Y+#3(&EE_A}EzFs%5bey_<d&Cl+@o0+Etk|!td|hPygTE)n4p0?$
zp!=Xg()L0%F-5?-eC+hwb+zXt*O<RiceEbfb@}od6Wi2c8EXH>7XQXO;+Qs4Iv$QL
zz)<DUi|AP6G^}x%NuNCFi)U1PqM~;GCp~5m>xat*V38&~x4s$rc^UOJjB{JAZKx-2
zR!Yi!)Yrp$&-HTNlPEDKIG>sIIQwjY+G?r)q=hw%k!nZvW%Fh`ZSQ!s=kRd9PDs_;
zqOqge2Vzc^Y*<5SSikCQ6yMn0R&KFG-*GG2*EXoe^!N3Fo(A8YhL-%Fc>1i@b&NLm
zU-k!lXIDt#aJAe#-VqTQvyb5TheLuqThyg1a8_EbF`tplKu9R8-r)@CBx>I7Lz==3
zTq32I#<7ZR4y#*%Dj-kQkKWdnu|r@!t9X1*USlpx!{F8sKSJxVO9`N0V}0KO#dC>5
zZv^YpF2&wv_y@DZ4U$a~4o8BNLAtzY1t*_fXk%5a%ICC-ii}LXw93CNY3ftvwefBV
z6abz4>L|2#(8lBMM88`opPH{6?MZ;37Oc~<{k-<(v}F!42eB{b6$8Ij(b+gy-$j{O
zliU(ER~1|3=QC%P5kNHL*;WfWqU%PEy<U8E`1<ja$h_nMoBFs<OS!XcE{Wf$V`N+X
zb518aKgBdAPF4yY>=?Rbl}))T)zE(+yqcFq)_(8S*JhLowlquR{{0S{f{L!N7ouUG
z`XG1g^zsVXA6@*fM+S7z<0rgTD>|^={2i20oZ8@iupZzn+se)7v!}w><K*Aq(@zhx
zoR8XSm)w0jRqIwzd%V?y03;0@m-`?1`JGrrN48H^y0zXF<x{CUm`m#|gHKMY80fuE
zX&n}?2U8P4^H#`Wpp;HB%M-@qwH+$-yaoQZ%LN$+d^?@{*U(}J{(2IbBK~THLT`vI
z!?8(y@Y&Wt3k~<<>=3CR&3A{Zr2cQavn7HQ>m_ER=)^MAPU24WNa=5RFo{M!7a}cY
znAPR#u<`4q69Wq~oY8l3T@4Zki|z%UShl#=cM-FD;F}my0t#E*2a6{sd>PGlEKd+J
zayKM<;|vDdnim9eq8(}cWZ=c7kq7bz>*{(HB&h!j)-94N%$SH7G7KuQDRU?rMxwOz
zCO8~1i-@_etl8CKtK4(#PL~t3T}KBdtqW4HyTo5j>PdKtigxeptrSs;#y?;>0mq;B
z{+fL6gh0RKfmPoV)h;?N<BxZ1+qIm$Y-|#d%=Wg>tC?$mzgpe=C%36#0?5+`HQxJZ
z?~PJ>JWUwMOZ@VOi=0eU<#VlZr(^;1C9eY#b_1$9teQ{8HWVz!1J_<RA4*8horF6V
z^T9uQnt+6&oe5tt#l&I~)oV2WLxqzHrO^NIw01C*k`Hex%<>{+b8cmLd#EqxB7s%1
zpTWRnK(;F<c=d(pl4wJ@71*TZ--R20a9upYs<4(Qz_fFgBeEV)xlY{4j;!ap0*RlQ
znfvzDMmCZf3Drw?`yF-u+p6JutxbM&43uX@700616ATp<5jJGE+1t5pTL8V<=4;)V
zz~an3{yT{MeVF|mt88<E2l=*7yKh=j7TKbPSy<Jw9}V1M5Yr#DbXIe2^Ri&0u0NyL
zjt}{RN&oxJTaOuwt?~r~)-hJSLEYJ(j)l`nl}VlLomRz#C3K&7c#_)N=$`w|a*bdm
z#DFgOE4pDO<W}h4{}m&QW0|r}$zK;65PKH(>@rN4zpYZSKFiswGbM=H%5^W07s>Gh
zK6<QeGc98eqI?Iwpi!2)2+G%#Jy(F$oQMKy&?nR>OJ_*5*{=u&fBZKc_D4iZ2=OxA
z%S(qxThCq;k1m-|?egjTV0TY~+$ppH9i^_oeTH}XT?qOpCzVSh;;1y)_?UWiE<@rI
zNo}uRK(xxe{{QJZBN<=N(A4?%1(;(2mC&lc0CI&Q`fz7Fb<jlj_6k!cC&$)hX+FDW
z-T(DBe`c3(miP&w3gp8_YUm5~)b1Cp#hM;Gx`~dy<3lTZ>d;pl+Lku2vkf?OI6lY6
zbETRfsi^^n-Hjk5L|25$Kp7_DKm2c+za3F2z(VaZhJ!(?vaYzveVQVbpFL($OGFlI
z6(Uc9{A+V)GQWSZY2h|*TaXHD{FF53rm?qg-zFSo3OQ%GNeJrJezK}PcL`_x9w?c+
zxH!pieYuBg@-C4!A*2yaRbVx_)-Ch90hD1afGj{SGV9cRp6~vBbN~G>3`uBOc-oBP
zRKpk!)v)>!LTm-p0L|LpdK%rLmAOUfwo=(48gg=oYR1+2nXSk*{b1$c6&Ke!lQ``2
zY_fEZjuDM$85oEe{K{ikRk#A&UAWvE#+JE|9<Y<kAh7O@s_z8^2M~N&2P$qekwQs5
z;?v~O_pQ^PhqyIaA!yuAc2UU{tbQBA1rj6oj6V)6&fRF<f9>@x=u+HT+}=McP|A*g
zgR*yxzMip&jqaA%g2)WnFMAdffX|lY`{AHns7V9-<9NHDhrx$*Zw+nlzwweGg(u*k
zXRf%Ue9LrNn3;gPVdIf}N|H#w_b7~loWFUmx+0aDZzU>0&;&g8Ob&aY$c^yf40Zo~
z$%8Jn-YQ%0roY<ZEKk5<`tIHy1m1kI8nxip%iEEHYM2w4<8t;=uFdl|V|l@0;yx%_
zbQ!YlJ1-U~1Ih<5fG$D^3DF<OFHlN@P}`wq%4j#by7FbN?B+Ge-*X&GxP!%}B{v_>
z&UJHE@ZT`=eJ-NJqsdGO909JNZ@U!%eg?e_vq?s8Wj-f2?c~oXn;pi@pa4x{M8E$Y
z-~0;;i_gdXXUA&gCv7kO@fu@p;Lj2w;!GrA@Pe(1{v-L-q^&<FZ4i+{x=Vb{d&*}X
z04SR}FTU<&HCk%Wmk*?qTkd|)8q|%CN34FH-}@v4q&P_N(R-M7HQ(uLJ?%@Rw@@aY
zCI^$^`z6hXoNhq40oh$fiS_7wJn;Q%^RUQg-?QmUkr2q}US0b3wJ<f^JmYTiB@CGj
z8y;B5na%Hz8&}#P1X1Q`97eSXHEl-9AtTS`oKM?p%h?eDXV?H|iIYXOqa-#UTYmR?
z5TNam^68UwN0CWA_#iyBu29kyhq1M}(mMmhyQtgu0am=FZ<_{y1?UrW2V0q$1-!Pt
zv<H*ZzCfnxD*vth`}p1PNs*vWz{Z>)v?*)VYnZ0Oxwa3+edQKs7|uQ(1e~p(iO^oE
z4N=?>K3aigXgStB|3WMz+yMwCx{U&E-maSeR=m^Z7ItS5iTJ{B>cU2&t?_RBtwLJJ
z!ZpDRuesE|@*Y1wzrJzbFJHb`ot>WaL85W7M!FS{ELl`ZBb|W4Cnsy&=xD1C!g6$~
z7yATI##)|b-GIblYI!+#M-=9C53cHFCm-w7LFbtc6RR5k3bT%em$b|<M+tup^EdkN
zG%WU9BcOCscXCNkdp@|`4#-dR>0{iHpeUF8j8a-wlpaWI6e^=6Pw$mCSQjx)Ze(BW
zG+tE%O`YvYPD83mqQ{=folJVoXUvfX>_0{mhxUms-^<OYO02pX+^(}MWQU|iUxKXp
zE|<YYmmB3GnKC5<n!JFWyjr!o+t#&l&@VEdZppI8ZVO+pUvH|1CI~Oo4t%s_W{u3S
z_XK@^OwE?=5`2xQOiNa5>UjrUlWcWYlpt1f=#H2-c=E?A3zUMX`eJeBrIDlNvm?oQ
zdT`H?U;Rw6Pd}*cOrYFps9h3^321g(TGhhN*Emj0TEsTZA}#5+Z-%CV)o&Pq+)#XU
zdPCyO*S(>;J|2L+OA41!%_}F<*d<QgQWrtmIzX54ZDw+{JxUatWyXv+l}J)z-Tn%s
zXezZF7fjX7#@|N*k#?&xKy$1|egk;m4a7(qz<~^UMI;<-mE||Kw8UYbrkZ@uJL|p|
z<R^6*U|7X`%q^Oy_@*kpt1W-i>(doebBVKq{$xkJQ?-CYt@+~)$<s>M8dT;Q(NiS~
zNJB6bTG_OfSi#S5x)ItVMkaQF^h7?m(+6{8D*s}0&L^6+*9OK!WH80@WcoFa@4MRN
z^7?K;MMl3L%nXZMqZ|4bBlVaQr|lYeBSPWc?wv3#LpF6()iqy_!}YUMXL+0Wm;$=a
zYUyryi7j%#qg`<wtgPgfUqK$elAcZjUq@MSIQws>Man#JKJ3<O(yZJJ#~LPBhK<-Q
z^PEoeyd|I%ij0a9U0pV8{Bd|V@R*c3%*;@4v%12sZ15(h;=QfQ5Q-ITIs96<WMZQ5
z&O1`S&f|&ZlQdQPIQ@^b4K|Z)>S-eYBvqADD)U~baS;^DeDQ2s@(f8WBml-G)Fzyp
z8*@ysGT4wcXU|*~qT;E%<9@$2w?5H$Cu;2B8oC~#*L<jBO{dh1o<2LQIIFWbPbYrK
zf05yAlOcl_DFDKrekTpk=boEo`3~yuzR|StdP|(8(xl(5amVaz*KF2<uW@#A-q<UA
z@^lK@G;ch5a#B?wju7!bL}ocv<-SPZzkmPRF|=X7ji-E3ufIyLd5C+t?9PdXG#0hl
z!C*ExT#Yha26FS?UXtqm@KIxV>c1Ib<}P?+Yi?P8dX08!<6<tjSZf#~KN7G9%W{<1
zEmBKtb97D{F9bD<AI@C<hjr6;XCOa79gFQR&3^B>?sOE)s}bArn?9R;jp*)YWu8GN
z@4*PuAM}U*$~Nw8D$V$I%35PLxQ!P)$L@|RKN<thpcj~B3RZt0MUQ%u%2BFNZ+5bz
z*M#z=-R?@*C{$1jQyj5?hAWrGpDXmAyepDrm3|kY*SMrJ2OxV6uTzRXP;jyyE81)+
zQ)IA=HZGg2b6nAwa;13G_CAs26iAO(AM`XI_s~4ourIQ^h5PT&wP}wEpNs=wS|>iF
z7?@~S=4Mo~D(Oa~a+ECS9PE5ZZY-^{Ljd_J^m*XbmpPX7P9DyS^cNM~NVq*%YFK)O
zgEI(2#lhOdY1ap;6QcZ7TItdA5w#=kHm71O?@|e3Rvb7+1)S(%eC|e`e%ZNgMImQq
zd)BGZ7+<%v+;p%9Z+2`tJ6R94<$nM6wD27!(T-P(ijwMZJL{~W!OF#h*}KofL@fV^
zRhD+yATDO=uE3$+uwmX|WJ2IlGK)DUMeUSxshRlJA9v|4eNZ`2i9QjauO>_JaSh1w
z^oaie2uYpif`H7u90LFy576U>OS#6&#AW9d6^DP&^pc$r$JX|Hyt)i;5TuF?gjN9>
zc5Ip;ElGhB<5i_rt+<$dgtI?VWbafSY1+J7=1eW?&d#p1XvuJt!mOZhSL<ndj?&o)
z<_vAbHB>oDIKuygRhF1zT1#u1RgRdLII#fFe!S|CMCrpOpt9?#e~iYQWbox1Fs0>O
zN9P^0J^W6zW_xf{=ImE;jd#xKuDALljBP>2T&d+@f#gY-2q}dh+IzQ&$`M*Lr$lpw
zhzp{5PugG*1{vqbq)C%g)QAWl*WsT7rndQJ*i^XSaFs1<WxV;q9^0pVy7d>KUSGe^
zTV<Xd&x;LuhU+H`6cLKb9*ihcNKjQ56KcxB*e`2f)0o^6S>F1cESvGDX;h$+d=NhU
zAD7$fPz@L!uP){8f+^AN1gX_23?%9Va5eh-8rfr&u!*#I`w&z^`!Q1TM5{I<kAxp;
z!6C+~s{9rhjT1}=TJae9RU2d0?Ivl8_wmU~kIM^9gEu*BYcGfGdY|$`*MY+@oqf9w
zI<MZ$g}5VIPA}}za`3oqh8`;{pRQe1nnt->qA;+OH?QAoylJelKtaV?#WD2tB=?mt
zCk48(qhw;xD;FbQIpUn1DI!~A21p!7Wl(6(Hp}R+o{%hwY+eh@z&{4cr{Bn!14Rsb
z7)C9a5|d6IPAwrw@Y+JEM6N3hDpOqS>(xTU%SYIs5K;^mzNxep57N5}Yjj?dDZW*R
z$dH1xI6kM6l9e?`{#k>T7BHBSVvmAGX@<2OL25}h-%K#7_}NSc3Byf-9C5;Pcgki8
z1um4lzJvA7btWRB;H}=vCQz1js$C{1F3-WI$|xdaXZ2iFpU+#8oUU?0i^|6gcn2zd
z08Mu?ob7jPK_V&08kq`4_m93^lGJws4ceOqfwYQevs$yfrxk1Qvd-_aOHS?p+Xqd~
zk9H%1QaJIy9_4`yan1X4=D5Gi@aGAVKQ2bL-7quW)0-*TMA4)u!O`HfgTZM3A8%sM
zHb~FD$yAsE9&ev;{bcb35)w>NUj;2mYkiE2^Qcgg8u3osT0U71Xg11QgA<6N?d#@M
zMHg8*rk3a$sYaH{5yc*KRFR8!B7wUr6Zz>*0jIm-tBky5X{FvyVT%8^^9(M~wtD;M
zy4BVLE)5m1O}KBu4^=p}{9Vzr3;epz?}SZ3ipy9wjgX`0U7>33qIPY2`8x9Htb<<b
zbPTC%q&(;l5ht~L!iA)PAJQQyomj<hjC29GnFaJCM_7r3C~An}@bTMIb;j>QJh)TA
zEqfQ7$WrbtWRB!}mw#?&f@M=Dwv%JV@8a<x3n_qhsQ|&zQmwsl90hKgKgeeH*hhf{
zF^yt}l5q`=F28A&cWLlso4jOS<wi@04#=)Xt+81Z2fq@QWnaoi1FXYHb|tl(thC|+
z9lH}%A$F#I;JX9Nd)h$-e#bjqPGMo;kc1brRD9??mZgvPsz!4>9aZ3OkIFnYie*K@
z7$6~QP&@M3hV4Gi^?QvT%eu_uaM7Xw(4eCrJI4?RBDyYg!SJ(M!re!ap;;;Hv0v*|
zf|xFt@FJ_FF-tvkYD972cdjZ?yrMeM&tM5}1Uz?kYoC*Q))#Nx{eT@(=HW8i4exY<
z5(tOEl_;_rEK3$Fg%qC_Uw`ZYn$Cv?)^{0oAR@MnPGzY0W>%Utj7-m19e@#qXO3PP
zfmAC|6fpq!o)=H3gf2f+uh*TEBj+n<q(6s=5$&VbOdK8uZc~9rHL>1v0*D=5ao@^V
zS%WnP)^q)rcYJd45V;K&(1|1mmkZ{zwf5b0sDnQsMmCHPh(+tc4~Gq=X1IPqb&Ldf
zvh-d;&_T*)&3T>N>v!(^KTFVSB#$CEC;L?Cn+x+d?LPE~VMn;JyJya5t=NfX$4D32
zq(M}&+p9Wq%Z#=~;iJ}0ejL+kgNDP%s=bMLbDl{oTDws<6FdNp7j)hXw{mJ~s;FBk
zhI$6<?P)|?Qu5w=Q=8K@N%x8M>FJzM^JblfL{j!b21%JsfA$XGZT0EtYaV2stXR+5
zSr|F{c3&W+d%^6(`cy~0;37y!Ph|Ztd~JwmWOaGcrz|tt-y?VKLZsp_IPNZw6~%hu
zPUzcgYgrT(@5&uekJFtC)jZ@=XjzlAr?up9OONpja)J_BLJno~mmzB=vMHR4o*Z{w
z>!#Lo_0qK|t<*Iom(+?3u1h<{|H+0(H4!G9y{dET0K2(3EHMxsxZ>IW4u-oZ2F4>H
z+~s+M`G_>3BXFT@(UZ7wErN7G<iK#3Y{d1%3DV+<qL%U&7QDQv9X+5uthE*q&}Yi6
z2`<^ExlqREC{Dt9@&KoasmKtg+S%(u^>aouj2A6#3cOzZl3~aIJ;|;_ZQ(iD4QHav
zoW<cyN2^@(bF~=AA$QYSi0alzWTsmWfnS9ItUatW!KK_sGq%pqN=k9i%@C!bh@5M*
zsCaeXQ~WW}_uVy6#p(x8f8yFai{?NI%b?z{U}JA<_SDT<hY@)glj#7ga8vU~Zhcrh
z)@x_#rJ?_$*<j7;$h9gz=L7GV@2kt`b$>X_I2c}z)z2x4W140Cc=2TLi&5x5LJi^a
zE#&+F@c9JDkr_Q)-}nvt0c6(-n>)NP13Wpcu<Gl^15h4{a7w?tUCxsDr8?jyL-cGR
zhfx2~s#DW6;)+jcp#<ppE=-y!XLJ`SC$|fQgs%2fq|+h_?WLLC8mVbbH(Jij2_2G5
zgubGv5dK<d(!4zNMyQ#6aY}S*dCGh0f#{ym<rc17UT*-p=&m>L@$={zKGIEq(h}Vp
zL{srM4yGE8w$OfBuGYZ<dB{&^(BYJ&gV;B0n<{%F*S43&AoKPku`pBV_nBrC5Tugr
z_*W$}LWnJzeCH2w=z0)+SgOz0k%vaP!2)E3OfCnr&4u0HDe=h^;sZU=qRrJjU&eEY
zUrrX)hJz1JvCZoauJ7ImI-cIH)UL-KhJ{Tbf>`ivBYPM>^_xU+mzp?<$VQp~k#u{c
zd4kIwJYB730g$nVo?-J=pV+#J%D_%|C57rTtEB2~cRgx2bUF9XrJ$z{g?8ozGt;3P
z3Nce2<S(Jqb&hspctT#wwO(uR<Iy=$f5p#Vr`sZWl9#HrxPOQY$VrY9%Gn3l2`%G7
z1y$`2qy5@(G3?UFv<5$$RDv+H|MIKiDDVb2H>281ozEgcD15+PJ~OJZ_bFU(XfwQ3
zx`{wG^irZTE5<$-nkET&Y{VnRjfCjziw%CZix(UNDetf|r2=7Hm7F<Hz-dpcj^m+A
zr4jBhTGfO-ME@#_;wH4w+r)t=&y1><!F-DN5Kb$lTLa_a{yeAB_z<YQl8QU3!WRg^
zsPEd?Df#dz?$tiZ67(3P3H1-wiit$*7?^Z$4rKx)w~^$Yd5XyfeDi}xZ_e+2uPJkO
zY?w}-eBh7zJZB5H6H>HEx>;~nsX1@<(&Uda+}7D$(R@|Lc~gl|tI8@N&qi_eP8o3_
zi>kz4WwbyY)_7BYSyMMc!AToh-&eX4Pq>!cATi~M@uRxepiKTESE6LX7Ci3ZA-4MP
z2A}gzg`oQokRYMuE%lM2wP8&hTH$18u(^Tn#d`n2gX$s_5Y?KRv^e2vW{I>NE)T!E
z>hhbI|4sQDkRRp`*LRbZk=^n_k?fRF#w?<x_3Oot!cvR90Ziv&l{p8P=WHWX(%2L}
zU?h#dVsCb2=&ZY7SrLgj==1ai7+9*JT?X~s?z!Ywybo{}0zkcyjBpW0!<oyTPNrX-
z>4);v|7Za?GlV~MN0FA6pH1Ir{wT`1Rr~6Ro^}G+${LLcI%bVmR;I42UOFai-e2-)
zte@m<j9<Pr)^jzae3mHZ&ib5GzwaC$;$S|@%;~dFS-LH0!(P*pPQ{jKvGAVh_Nd0~
zb?(VE?+mKM)v!^Jd)vs8y_ab6*A;Y3cRjU!HA6U)X`Q>R2Y7mZ{H+b3+N>%GSu%~T
zPhv036r^vHTDQ`T_L-dV4VW0t9L0|8W?Ks?WhML}kTPNj$oRL#{q=tx%0y%_A9rvr
z?--*jPrnj`saydBig&!@B?N$dN+&pnELDkq_*4&w{I^)cqH$4Hk3H*Bu;9kQCsKd)
zN-^)+M{i!r3EJ^RMf<H--Zr#r>iijmisoKtIp=>gfe{?PFqOu#=DX&WwQVIUdYxHF
zNptWO&MmZGl3e%d=QG_bgGzN?-34k-0ve4EubAxzZ#o4|o9^!vNSa(Pqm(Z8P<a^#
zbqqM&&Z?+AZe^3GwBV!SvK>$vat8}(>Ml1*EF1K@LV&xo<jwh)QB8Z*TM3J(=F?rd
zM>ZbbV?Cz7qJ=T<sH%owA;n{l0+Z!a|29t3?~M)@FJ4S%CF6MD=F4Q|G_-F&ld+VC
zVT$Z9@kBpcYs8x7cCJ*#jf(Da^K9TkfTm_H!??%fwGhE30JDO&%AHgycqB$ip1zo`
z#Tpq(DKpyKa7Ra&oo*!~A4yC8N#Q<?k(#A_bdk6fKrCBQfXI#H;^@#1r$DI&0+y>@
zD5iu!FaW{clojz7S{%5;Mggz7;to@^SGPkl?6Q-Cav(BSLDj?Uf)tUa*gBL*ux)kV
z{9e&6S2KVFKyYBA>S&MIscUZZC}tQcZMdzmh{II9zR*s6yCr`R?WwegIbFqwrd1y=
z$V<BB9P{t$4+cPzxOq7`+wYznBqnBie7bNW;WZzT5rv@u*D=6u6H@bA(n7dpZr{pX
zL{NCK_{)HRwZ=zr9kZ1L7uLb-)xfD`Uv}$-Js3xy*aCU@!2}zSAGknMezk+^3|Jcj
z<Y~{~<611!0Lpl68vy8s$EpqOuh|jdvl0pPzi8)6U+i=`S#k!+Ckq#{uh_{yLYbY;
znu(@?*n>fe*tE4otGHM9h`Pod$I*-mt2VV4)~j5cC%mJyPp@U|zlty09P)-)6x)a%
zyqNNuPb^t5O%7ZH8G35vjCLn-W;le|QY0l7%*$C;>`IR$x3jG)&YS^tPW=bWL9K?e
z>>Lja`)dJ-?Mva<hI#R*^(~!#uL180#mX2z!#h&=)oXChiiV-%j)3D(%iPQn01Vrl
z%UJidKEO&nIzBx)N_!xWeLs$3xM#Zm`33~w8;E^A9nmveB`m62lVe=Q9^k+(trK+s
zQYmD4Z_zgFyjE9@IHN82AlrwF?(-g>ljfuA+xeALqh@7{%`>H;rw23fIRi@K-ffRe
zd;s9Yng5wyY*e_mTkgnYHw7n))yGF^X+XW&vJqzKjS|I)@um`v#MY(eKjgcehH+3D
z7#@F9ZeF}N$*|vYDLs0krin`D&O2b0^cs~XT85cZv`_7pdx{`z%2dMcOtDO`yys`O
zDW=mae2x-Glr+tflb5F(+%Uo%>H?WOf=3`nl;-*QbhjwxJ{yC;rF=Zf3-<=0u{NyN
z8BP}DBU?@VisJ=ihK9k_D2E|Gj-a8mU}#$XGxzmHQlJzv=?(i6{j8-O0L+3jZT0(@
z;LlO%8Eeq%g|!@hRP2uttl$XFX3wIeyBE-^Vgb+eYo0e#*5==qznp9Y!yL}MPI@%J
zAVyhMj-hGB0PbhdUe?(`R@!QJ*yYiW9QXiti79HgNYy*j{cIT?hqINcxP;Mi<N*H9
zfSAm@+lw|E`Kw6sX*{5ed?_*qLrI=@S6+6N-TMIvuNJ+T_hNn&SuUZpvu0jA({vS4
zbdK~gYh!Qo4BfiRXwtB9W2>aB?4mx;SvjG8MWi>1KVNG)ydIosq#Nr+5kI-0E+kpx
z9A+E-NLw2sWXqS>d{p1;cDy?$FFraR7yb%Bcg6`j(kRh|0>ssLs>X`PReQ76l1By@
zx|We-sOQ<5XS4m+{2XB_-V%YkjmnG*Qv>{NXt>a%%i}NLB`ScwnR#9a?b^d7*MrBe
zbi?$;JGTH1np)8!knE``kfRw%?w$`1A8})poU~o9E3}yeK*$kQ{@i+FsanlG(pHs#
z?2QRZg?fm6>ZKDB9my-UwX0M0;dfDUQd4;t?vqSg5fa%{A=-?^nnekpaQu<=N}<K*
zt95K10h~)X2jpkUR?7O?UC??OZ|a@ku&$yabt=EZr#i;ibpDDKZ?PhevHp8%aL_I9
zqmp9N`8XxPkH#bVoiu~AWlL<2&P&MpeSkPgcI*2s@@Xw=H6DN}N|$)d3am2)suc;f
z`nCm}^sfYY6I2C-2uck0&BCX=ODZ~bD*PMmy}vgv6_=zlQM_aE7l@x++=L9><5dcN
zG_I&o7(S4|MbULElcfvXg0g6c($;uFQ9<=R<*DY*G$8$-o=;pAah%~fHTGT&1Ow-W
zvHIGH!sC(@W4^M+s#&O43r~bIK>F6?^p#|q_opKs3l;2=Qi+!=egTd^aQL~TbJtmI
zCt0`juB>Q`cPbm8m#6b>ca?-NzAzZUqofrSEa&;ihg)@?tnTY$FgEgQ*8Q2Q50AzP
zl>%(yvX`kgt}Q0W0YWkallf(*RfpKxz0+;8{SeDD+Ea<+_BZ(oXYtz2@7HxOy^OuF
zmr;Tg#omRFW@~7Z%8jzu+FTi)kREq*mptG{VPy2rYxfmIa0h(JsT%hME{7%&(#1}H
zx40e6^t{-P?^e#-%Cl}SDhJiy!IUjo%tju2CxS(m)J|MccIkk1on+8I*45wRcuO0e
zc<ApahloFShn$b-HnLh)3pNw}*<+#<TXt74Oy{r)LMc8UndeXqgh;I>o`!H4ma^5G
ztcvE5mXqUtXR@2MBOmHeRAI$xy78G*pa2xxVxE9b_0+vT*fAdAKDmv=x4{a5e^5+?
zw}FCD8m+Sceot#1pAL}sMt1T$n@Rl^9?u?U0pQcDB?%*0NT8taVW+&rv`j#8L#qnN
z@6O*Pb3no1n}ObL1@lV;OJwH7UUb67!BUsV2NFy?+1yrdmMvx)N@~UWL#9g*-c{6Z
z>mMIwo$jz%qx(o6y(-}%8wlYx)YI1T6Bsd4L^f6vUH#SEa7CPR%}e)%6L2gy0N3b>
zWUDZ)P7M&-xc%O7LeRRydewq^Q?s7A8Rw#Tte2Rb6vK>M#YP)<1m5%lS(KY=ms20;
zYWd@AKCR>MFX`JL3yPc6spB`DfkNUGl4&XeMs<CBan>v@8;DU9->qET`Hw!ye#EF;
zv!ZcbJGbK{*{&;2mE@Rj5a|>73i4r17k_&{{&MukSN2BxaZbcP%h)MH1Hl#k!@2ac
zgsI~KMrmU<klN8_#xSeM?SqjD|7ZTkGYmI6Y#;KL=v8n#zhQbJww70@vipuWcDQK`
z=IlE|+b8$<Iab!^ms=8)N9caAK&!YrvbcKvdt-x+UvVl|#+NA}gXsy;g7>EKobs=%
z_)QajgC12Gf#Ar~aa7Zs@6)%?H2Z7UHJ=kT0ARP;u!yW>6Hq^+P(@1fw=Ry9F)*Mr
zOp0P;3Nb)Bouj~GbV!Bl0q8Mf2LTzM+rt+rzpK1#n1gUKL5&qg_0UM&0Ri0My#PF$
z%a{9q`9zFZf{T~t=cX>*0#Gl}cq!e2&z^HO-*6B8zgU-y>d8ROvB^W@-zE1yPqTk$
z5I>PK8Nd=N=LT{8@z(zP6DbowP{Cu<h5TP^v%knFofLS27rKXR%&!pO6TYwaI(PG*
zGRmL73W5?{C9QC(<NhiCS``m8NNf=a<f8x6;%pEBpj;*<PP&7w?!vFb`RoI?@Sy2J
z9g&9rzm20MWVETl6E*p#cJRNWfFK9Vpxb2Og&=JrTmku^B^N@w5=s5{>o0?Fcyd(0
z@@P3bARKrJkB~ANXys-*W%Pd=c@CeL2+&}1)DQVN93K<{+2;*zQ91mZ5%SklzC?^R
zhZeu9#Q*yK&&N(CK;`LP)MdfHxBLI7Nx*D00c*jpGUj)^`d<V8`{UEtb7}a`o@>7+
z!q*`Hcs`d23;s1+QauDXeVNIN#JH)oxdglqtX`n@54YgYG)Scpy?yK8dGF@Jx;>25
z9Ty@o(g5QxKO<}Ve}4RX4P{3XxU$)(){tK}VN(o@1;ueY{>2;kxs;^%2wvzph8T`6
z-!C>`c-OwiJKMm^tn@T8(BDhRfRDq#2S==-d!J<WA>Eel??smJ6XuVq2c~6_1s*Al
zSSsD*hQQgUn%TirUI`y=+kmsBsJ!wD|McL03;RuM%eQZnH;r=H2`Lk#l5`q_nMh}J
z*P!X4&%2vdz-uj<V3kdIS?<4A!Jiq~xE;d<Iv><#{YI3j#QM`<ht=mn#Vq#Lcs%U0
zZH`hkw$O$whwouKa9B{H$Kf{o!MPC2<^W<7i2J9}#dWga{U+bu=dfdgT9f+xNjL07
z2R1v$iRzaW$6phholDp&W+yEi;AhJF5+$(BwX&lnx?{Rz^jU~6-78j^&U>9_#BaUA
zT7C5jxN)d`gc_eXqp)`RLvbw`Q?53=xi0Bqjj8>2Z4F7WWeeh!+n=rw8<z(#be4~A
zl6<I<){`C~nGdyN)PDEHkzUj;yKW>wP2kJAoYKfS(H_E}4N@bytL<0+JF%U_cvB*7
zeA+}b;TIDbCkY^HW5+FiO$fn)=tDuBRO(@uSD0u*S<a*Kf=5Ca8y$u<+mnmSCqeK0
zL2$oy&o?x;!(SMcibs8w(%CFVj?ZPJyX5CwCti5#@ZUGxB@1#i5(?eEqmaB&hW_XR
z3WHq5govlca=us^|Drzfn2G~#RN+4Jrp>#$$K;h{;e;_dBFImsm`YnX_!YU$oBr1!
zh>K%dP9;x*T)X5halt8zgVbN!sUX^+QUX>~w;!J$+7MLfAAFk{pE=XE5QauX@J7AB
z`|E%JG!<^rn`W@Oz0aq{N7zaub|^on&RxB1E7Z0n$LJ@mMPqh-ef=tt{~##Ll=(0c
zBF8XT2CxhNtd!py5GWS{s0Uil0c%%#v5@LKUZXu*M$RsInfvD&>+YM;71ZHo+xm%R
zUtV=^BkgUh>{;GJsql#~9c3wUCjT9lKq)OigU9hQZ6Z$R&-gOr*u3iD8vmaqF4af0
zv$KOMjrasq#28p@PPaizIQO$W0H%u7r{G)!Q2)_m+Mm_ja+R1^=SL!s>z^mj5nNU}
z2Vz$~KXGhBaMmNFeELK=l+5N7xS%o{h{^Zz-E;=gt-sVx2o=A9oV_D(m9YpQX0Ziq
z>)8W66OXdm!zFt}gxN6#=6dGQ<owu{P)fA#4@;}Xp&3Mfz^U^5@sM(}H9)HP-sI8w
z)8+(CU(>I&$OlN8fQ;%e<AWcMv(W@YW{+WLdh5J^)yulh1>0{^Qcd`FnmJ1iV$qwQ
zez7za-nP8H(e$O^Wc7yVs`Et6$WP8XK##%c&Zh$WB`wuc&t{(@=d<vEV{E`#h{$GZ
zd~bUsZSUUd1ft3B$hRl%*OA%Ab|26+-B;E1c_U{4Vj1$9q3dH7kpKRb$i0s^lTMnC
zDu^Rd)uNfs_BR0y7_m1k03`t<Y%#Y0Tr#j*V)g`=$4?6jBg$Qz2d-UeI#{umbe1^X
zjOabVVt_Ku3CysRPq$X4om1oPb+^4SPJ}piQp+vlfBP$j0iXSiC%bzr!_?S^1ortc
z8q(7L39SYZOaVZg2#ULI!E(;C`6z?gio?=jB|F3WlzBU`!gtKw6MIwk`C)!n7tyv*
zz&2B>ilp!_)fU{L7gP!;2AP8@OQ40!HiEAsmHsgRj3)T<41QIx%6_0yrWZhmbTECA
zCyN2kx2n0VoSmIPsRH(+DUQJS{)qqA)_6!RHPDN+ne7@aRX*^t2rK*jm&)IEkZPX7
zlK>THwzJpnem!`VKTXi_0dRdLEbS!S(2trI7D5OxCV#dog=mBO7N0ugWuRoxO6j{r
zXR|)HUFFfqJ^=)(SL8u2mK6tiZy<2IFyIN%&=!DcxFYO>Mbj>emMveo!R;=1N=;8+
zZj==9^DhU+aK_A2@LWU1?Ewh=gyAZUWoMui9ez+S^y$Z_da8(Wrt9ctQ6bUf-@DX{
z?Y;krXvb^Wh^Ug~?&lpK6SHQ2KeX!~mk4L`7_aVN@tC6t!nwyO(UMs{<+U-wSs|i~
z5$yA?sekZi?(iSp?G60)N4-NAUuf#ZOXO4+Tb6?o>si2BU%CkLmd^^4+r~F(w{3(_
z+qh)pAA3$F6vRJO3CK%0aaSe#;ImJHSIPNL&WP!48#K+Yb<tlIy3>*(U?oHJ>m-mO
z!z+ud^;o_R@HvqU0OM$jYY#|nwRJVmCZ!>O<>*ZP;17rLP3XDxkDD$kutfd#dlx~R
zpe)#go_+2hy)<7ve`V<^fnoi-2`B$Y7XioT!Ec?2Y#5R6l2(@cIly^6GY75<em<*!
zSX*=2Ua`({p4x#5O%T6qkF1~YvPORP`Pn3!pJrH&A&voW3UpE!a|x)kCp3P{$9eJk
zSXA7JU%Jegv;UjjW}XfEOa_6UZDaH#;BMRz>r2>zH|?$?0**UKd(V?TG!F@N=I7Lt
zXz$GsLv7ACuKOk9T=!Hl%>A1`=YI&dRd<`|7O|61`oX(K_&mff34qrvNJ(F#y2mNR
z0RH2hl4Z28Nj#4gaWQZ9LfD&H<LXk6yy}o|pm_lR*2)Xu+VET<rC+LUxV0F=iC<V!
zOH)qp7Lk-4Hk#5xhGhA3kjpY}r1txc`vP>K`+$nNfIPiOzXOgy>xY#C#1Yn(mvAS|
zKk5s(zaxt~2eDO9Uu93?l7@+2UHC1&0~{Scq5{DW%<92q+g%x(H~$hx0$9s^n&xAa
zcjqQT=l)|t{&Xuw58o?BE^I*Mc+JkA-fvsrnkR?xrCLwM^fcRqIzSXJZ;;sU&yRnd
z>~u1?AnuY^T5yS%deD-&4dQsz4#gXxOt!%qm~9YwfxH|-IR9%u{?GQQOW`v!Pta9d
zJUqI*K*v1`Id^DN9?C;J<0cNMMT$ily^{EUHBqXG=!fZJKt5x0O0xDk|BS5ke+zZ~
zc}i-O=>F`(WoAmapXQG8b0M0h#;^6!jh{A}@(f&Yg#&az;ecXB(?1UYqpI$J50L)c
zZ{euam2`=oyz=n2Nn`g@M<K?#uHnFzC-`NUmep(gti{z%XHTxjMh!ow)e(;_W3}&o
z>Hr1gv}pWZoO}K&g8i$<VPrRNrKc&>^V5U`PL;*0ZtmV*WfCijY;T2Po`zbPase`g
zrt;+jVEAT7(SY&u|A_(p9%`Cv-!iHIr&WqEP)aG9G}!7~z`tXh{|)T9pcV4Y%<R;-
zxU|N1ElmH%y#G8FYpzM9*&UJbKgcf6?ixB5x$*p8j_+ShFC&+F8PQ(hmxeD3<3kT=
zPFps{L!93qKo*&D;ZKQxaO;Ebf4pV|+<IWEi|m&mFubDRPzH_^;T6(DN>IOMjPa4a
z_K9Z(d;5ICCf?_V|7u*e)=&4}m|<akS({+<Ad>I~Ll1!=$LR(o=F8GV&RW9u(&zO5
zdiS{Q{Oo)iOUw;hN@-XM*38-~F}a`&CU?R4&q4Lm7yz{Rm*>{sj@`Ue8YuOaz*Tbg
zq1^QhWP*RMr3rJD+dy>>67WM*QKk7~<>c9Be>aXYx&<eCUI5eqYCW6}Um?eLjFrEE
zc|@_mOULQ-tYb4y;2A{_?+-5J|5E_{<|Qr?5Qe;q489g)6`PU3ZaMU2=$#Yl{Nxn-
z{F@iM?a(fJ+sRqk#azW!?SJ1j1Q^y}io4xMPBi|MJJ$(auMl&-Q8C(@;Iye}dnW2A
zgy*k2A&$TEC&T~GSRep3+!_Pd;g^Agt=j~*ZCr)^7=vG9_1FB?-i`qj#po*qg<b}}
z`|JC^K2kFV-WfS&%<GIY>3bQX_%bGTm;Av~C9*P=IR==^lRK++?RNndb_k8f-&^S%
z04V~N5+LhWliZHUxj2$y1AS}jz|A@?4+Q)Id!2Db?<9r?0cu(jIC%#MdH+6D7=?a@
z;x!~Y*x7cgs|XrA%FfbAg@Ui~2=;mM#qE6=f+X-J|HZqJ5<_!x0e?02=f?pWz~oUO
z7jgwI)0w1wXP?`+@o3=Q=YfPF|Ib5f6@)Kek^c9Qb3tGVg#!}_kFuN$2e%2&ZXsDY
zVS#kl@@Fg&5ptQ&p1$kVcYecvY*!YIQxOcOGLfUD1&XWn+YKSqbd0@!$KO&UKMOJ{
zz0u<WB2^MZ@w+63k^<Zs&Hkd7m6vq|w{pZ$5lec!iA8zqvFy@XSQ&DU#=ONri9c)k
zpT;p3{6t%ZU3)_Sv`s;y1JqQq?+pM7s+mFiAq^msg6~o^epN&azY@~_EC3)?ErV~{
zzziLfmx1R}_SYV080R~D0<a3GX!fyoUU=HiEXdzO4n&3uZ_d%kKQiAQbLfUYKDvO&
zE?Q%MxzT9!!Te>#6W(VvD`xh@IJH1+6`B9)>jJJ*+;8Q?Ap6SK*Gq&xl&_*--^^l&
zrN?z9-g%VctpdW|$-wQnm&9Kac`9%Jua5*lQ`9F`hb=2)tn7b^oTOgh+u(gSpnCUo
zKFafpN#FK^2Aa<eSLRrkTc1v46ncKi<5jTT(dh4ZRbE-|^~l`zI>77a4-(nF4v}Tc
zdUid-HH7-+!|qA=-bFWzBP#W1-Pp3dgXGTK5pNH@?UDEw+p|*-``$)R<79oaRlEHk
ziE2Wyc{;kfBcPgMF2u|aZhTtB_7K&ue;y-<7H^!BKiiUXTRrn_^ewx#pO`U=3#0+S
z0tYO?E)an$fEH=d__3@$&e+S>_#sZ!^16Xk+G3C4I=?`->~$o?V}&n&di*r3MWZ9*
zsp;k*L+a}u`ZfE}{e_PQSv<`>#;1+Sz7=rD!A3`xbLPQev@qfr1C)y^NN+bJH=^!I
z&P)yz?yXLl+_sT8t(dZ~>b>Q%ly#JIg_8iG`t1hItqZsVk45Dt6a5R2v;QnU_z*y`
zD1#`e#(va?!$Z}z`UXYP>Q*f(DAxx%oJ@m>!R7NrkMe&4EU#HMHrz5Tr%tPv&$p?F
zpvB83j@yj51$hoSltKMFeLg`xLlGF;)5QYjzIk?@05hYtmuY7k@vhB6X3zIOrvDML
zVAR3SIOrQoH7)SAe7$rP!9@v$JPKvzx99dy3Zehb@0?Y2WPd-3D-CIQzHG$l8||+<
zDgZ#@p5Ol1+(_2G8h}JdE@RP~*4y>#e%%g+LJsZnq$#u38P=*2_K9BmBJ*kGnQ>k_
z#W%#X`kS$pdSJ?eDeCi9=6$z1tm)v8^8HW$A7SqpU1zub4JT>RxUucVjcwaj8}1lQ
zV>GsHTaAsjv2EKn-`(~;|8uuJ&v?h!V~=Zp$d$Dwep74Bi7`0O_mpqNw6PJV^jOhw
zSiK!S^<v^uF!a_C+*}9qm;3FdjSQT|V_wvSu35UAeB@C(!TR>-`O%G>K9V2DA5wtH
zhB??qz)?9_-%>OYZS?3z@mPC$e6W|t|Hq{)a%k>5qZ8_oq<Y;4>Wi=&?jBs+CB3>&
z13dL9B_5X|)$4uqj1{*9CmeSsyccNOp6!?T)#eYcw(M|)No-b*W|C6MZxw1J>n^w9
z*~H3)em2cR3{3c8ZPH%Pl<A;Ye?PJ+gI||y)=A%QH^3Wt?NKTo2h0tUEK-ITSinsJ
z_#6I7<DOF3EcThi(?703W&oR`3}767J+*GL#&_D{OU{Yln*toA8OU*e2fF`qts?zB
zWH`r-ouVH2wY#KD2Gh9JSI4#6Ud_{qQM5O)12uN<4gw*JD=l9Fb1+ien;jA%k6ZeX
z?pp*ca;`D>Eb@}tH&L6<#<<OAT7e_awbH^OiVunwJ5qB7zvDj)p64kYp850XZKYbb
zztB}XZ_sX;OW+S`H4Ng`-l7(SK%Quskg~GH)EIVDiKUx|Yd1_LmeUQK7#}>y#BWU|
z+YHr6;QcTNzziI)qDaw*Q&9mi^G0a}v2c}pDMb!PAmP3MXJWxXvbELNPBS9u%Zq=~
z;WdJ23E!JD!4fOWDvzCVsbNRT$u~17XrI1i+*ZUV!3!vDsLIHuQ;v8_e~Oz_0B^wJ
zG;6R00>@{56!82jymVfj^QVBWHBr7ZyBBz$Hwo`vGFsWZVm98MJZB`OwSFo!EF(Rr
zbIUj<Te$7$p2ft`AI1P9^77?hChd5L-XtU4e5BYUo_PR+?!$5NB8~hEjd>czP{q*A
z*sZy6ZmDtOURthm#BxzlVA51jP|#e`)ZA3yvaLoCQQv%Dv~#N(k?T_Trjq$d^*#yV
zg_c&^wzzq|3Ez1&<+AMM35m1C+I4~{E?Bp6@}aE#4#EB`>?EuFxZ5)qkIO!??I|f@
zT<-YUuCTb8&XZ^9eytrPXwFQ3l(xla!@z!q&(mA?w$EMmik9G!iF2b0c$>wo@^KJ$
z@0I6;PRa4t3eV)Ws~ZASr}XI|Kem<_tGhTk&HcO8T(0M{dXf~EBUfJ8nbwDm;d5uL
zuY<}-__zIf<E?u4D9P!V^(AL0;QSyzK44I{WF%n13QNo2-ntNY&P88!i%-Q!nSi0=
zyUcp?Y*MBxP1Tv{TYA8iL!<?g7w~SLNH}w%%(hC^G<^8#>z}X5^npHfyOW@}H(x$e
zF!vNKAYSj<hpouF35pqiicTsu8!}%OBzWnEtvNp&ATiqx^3}P#cv+b-J)&(NjU6;J
zs@@(daC~`A*u{9>tm9uQ8EH@U*rRXTNEzG|r5@3dB6xgo75R3#1NLe24wQmv<+Q|e
zId*U}kzK&;yQ^ma?{!|-I_XswcL4N?z|U>L5k<NUCTsgxp>8|patR7u!e1*G^|=+(
zB$|^k!JifPg<Y-$G*mOCXn&%@MoHciTgB}569AvDTv=cs_tC{_00Scg0V79Ne@XMS
zUF7_Dbaknvw=9mad`h=}jAOH}LWf?)9k5Iv?dOKg8RY3&_7Krt;CXv$zIU_Ikl1$l
zz$ewhN0G4X<>9hJ(I%dEjE`0u4mUE$y;Gc0=E~c!YwmePeMw=hBjWi0oV}j*atWP`
zSu#x3a(Z7s)>YveF)`exUbC<5@=|b|8?Bz*xiu$toK@j*j<F}V;sE1*ucjv>_nhfs
z=A`gg^|Iu7Yh7b=mlVI~`FKY^rq}X-JAc|*p>gxb7r({%y!f)UA1bkvm4%U-+q%{M
z(zvx$IVPm<uyZo1*M38MKT%(iU*Wm0W_l8jQDy=gpCMTPe6NRt4Y3FYiU<OVC?3Yo
z6%Mh$kUyylB7~X{tc;0|95l!=eSXfaE24geC+2><kXX5?jUxISp2DUuL*GEdGc+Er
zS6cY$=ih^PSwL|+++gh0Na-33xfzChA5fd1e>_tI?01s3wyZ&3J{sJNc0*bhJaOs0
z`Lv7i@~Ab*=UPYh@xjEyXZmSph2y;CWxG3|O@!cnk)&q5G^7+OdZzWDe%Dp+nMsWN
za6KDmMMkad&L_Ut3r}nJ<IBZsP7kMyPo97gbldeCIn#>Sf(!SIQgXbNb3R^~k;hX9
zP6mfbg$F6mGs~X#0)odk?rV-#pVILbTa$F1&xu@aPTZ5|TJLs(Vv=Xt9_n`wJnuj&
z+qYGvtZw2>@SK;KK2{toJ0q@n-+<!jdbj{W+!u-^y5))d0xmErvK`&m2d3BLCSoQo
z{UTbuSgqYUP49Z^dBy0<+aq}IUs&Z|N;T~7Mp`naSMFW_7fJ|Rj153a|M+-alSUd%
zGf8Qkxt18|o{!t5M`5j8Y1b+*@F{tU_e0CbqB=;L?DpWwkeIB+T`Ps<Pve?;MClu)
z8?Z4`TqmZl+FvBDj>3WSXKp~bUB#T_C1l)!ww}#A&ucaffiyk1?3PmNnz%1tuC-^C
zjqnKExIae#HX_=VIs+0S>9sXvhFi}kBXFXV>P{~w!QD41c*O~xz8R=aVVPSi$^y#W
zpIj|jF0b0}KgSH(Q+0L4@ZECqT%77m(+q#jBGR<$?y52U&M9TM#i6Diq}hhWW#`*=
zozQME<@(~d!}pT@>Fs!aQ~-E{nN~$;xvTE|P{x;Yt(idhlL4j=#F8UUCo--hV+3wj
zO7MNsTA&oAClBic6J-SVv2nND21jAyfO(tKpYX*E3_6NE6P$~=c7g3~86*dd8E9&A
zp^aa6_vj{a@o!~mAfYnTrG}4w5fb*f1LxaAWQLl612cVew^?buNk+nL`9<>HSdfw4
zhYdFRe0sOXvdhk=dW|5y`d8f5=T8|;X}qUJ&7F2<x;G@8PgOG<Hx+?~@8#$2&Y|K8
zN<3X@QKcqTU@{Ut?#bBHvyH~=2PXJnEb5N#?m<3|6<6amPKekI(^YU^330ME&9qtG
z_Ej^q(?yp@tXxzK4-UTeN?o=&pQTF?^#JIxJ}q7!%B41SQ6D^}N&*}9LIFSO;G$v(
z$e!}v(76n%@OAza&g6(ZNl7~Zt&`?+xS{E07z7L8B^R?&=<qskWe@CKwC8P!yn-y$
zAIN;p|K8XoINf76Wx7C~W;~c_X8dlZHH^;Xs2Q-_H&BW=+;)C7J$~r<l#`JsnRlPi
z-LjS^>on88<2hD)@+h;j?5aSc^1_<_aU86&#W}D$BFseu`xw$6owFL)+UquB**$ly
z@u552ulG}k>J&=8)ys8D)!0(5(agy6uGKoYwR(~Ar3E;jqd==C?`^#!Vg}$?&HMJQ
zFZ<0e%Mk{J$?=+bgz|#B|Ap(Vl<__v3wNvT<Vnd(`%LsTCvq~nfCrMGqHlDM1lQNV
z>omk1q|6Nt24?0Jv%r<~?u`IdAWo;rWGd24#G4S*@;W|WoQ#K^Jh(UQxqA|Z<51WF
zM!8CjwzSgkDj|xjhb7>@ECyBjL#C%>`3>Yj4}ImB;u|>1?{5l7Sdi&lPP#}v_+HDy
zkQR)t6Uu$cVxG}YGl<Z+o54Znp>Yd^1N>({KACa+F3!|tR^*E0VG2}{y>9E>uUe53
zk|^q+AiViM3RbHG(GF8!KZozT8&rX(<<W{rR_X*V$ph!qb^)(in{)WLG7lXRI6;6B
z0`vS^Nv2IZ7oOq;+BWcMwtMC@J#rc!(dM9K9zNrHbTA<hJkGCBLpa*ZP%AcW<UHUQ
zKJVqM=U&VYj{ew34x}R&OV68`PpLJR%mr;qbPb-yBNgOn?H6+qW5XC3vHrYFJd|->
zKc&f@%8SLEu3FG@ud9F)5j29<AU1JGUp;t~RH~q=1`Sj|Gn?q+3Qf#9^F{xu_R)0p
zVh?i#&wT3W<TAWGW&r;J0o>**zjom&K5Dn*ESR4>1OW#OU7cjIR5%BS==WUkWj(wc
z(F+zGIz8J`WHs7|xJPt-cdg?*>JG=Rkrj2MLe>q%o1=fTpOk%^ZY4G0g-1W;aTcT~
z+9k2;pyAf<d~MY8$X(-@@~Mg&lH21la{74>GZ5;hJZl4+D(o}8=u9<~BK4YQQ%FD>
zCy7g~7f@QlUToV>FLEn&!14|9p%$XNfHUku1Z~4`Qe)GL`~2MdF0uR})tKK*`_TR3
z<uf0WR5eb5qw7)X$Eh+|G>X2%^FtEHxdb4JDLO`cJZW2f<)ND4St~Ak-B==2;hZtN
z<Dos{xlcBQmF*GcpO7JNA;+7yH`X0+VzciQzju1RA9N^dbfmu)T)m6%Y!2DFgU~LB
zv2y!yxo6m&$fRA;?KsNiu|UVI6(!(C-{$xoEyt1I`je8vFGq|&^Aq?xQ7gQM!1xXO
zsrLkNkdH5Am}4$hU9fS}GE(Nvo?BhckQcYxxyU9|k{99_yuWs}8P;)eaFW+|h7!M!
zmmVG0o5JI1tAx4a{_1i#!c!Nw=A-|`;aoubhW5o8>q7cd(I>u_&8^F0zT04H#lzxy
z_dwpu#(>?CV;<R;qxzSM30;S?UB~?@>$~0pQy_#hv+Us{$^Z|p92cxKTcSLT)jLc?
zE6uPoy0Tj5s-+hn1Do~C2%S7Xc^2qb4mb~Eq%OJ-ygV|)(`pK0v>)r(pPOPZa}!`N
z$sO697ln-+x+r;CHN5bd>RT+@MHn=TUi#GARNWoD9Axa)w_Sp}pO=%^-{GvBpnc`}
zfq%fyrVl@i!6m9Pb{}I1JM~9M#h_NkdhxBTC1nm3Qfaxpyrh_}^?eS@gtiMKwLLVc
z+k|V)3_-n(cH35XVp@)!7ISoZzZr?edP-1_Bz>|A12zk#NGRB!!uwwOkk<KT$1}p}
zX;e?^-LS`$%;mz%GdIu6Zd%PjoJk=!lLSRY+h^I<Q%>qJ6BI4a9t_h5*eURQog2T1
z7dZFLj}e*$Sr?@v8W$e?BixUc^N*J#%<Rn4J9-z!nyv$`w6?snI|Vn7%}dJn7fA%}
z3CE8Ga-+2E=MwvSCwU0ZN3EAJu5Hrve3jwhc(WoQa$Fg@59xBFEnQO+EjL!KZF}Hn
z^v}mBdn7M4>9U$t-m2-%@g5J<^rJBcRyhft_aH+$HL2y!2LYyidplZfsqDO>e2@1p
zR;T7S`S*LfCOX$HE(g|b@eWY0AL`nLQ&>yQBUz68Z&02dt=pqKwycly%G2pwF2qC>
zZ(FGM@-jR!99kclhxD3~%RLSPIuGa7G|EQ;d6Y6-PPOv=Ks|p6tfnlXu`!8pb$kFU
z<RuCsB&dR8ZftS{LYPGVxqOtdFj$O>NOta;&OtVom3xigk`_gw&1BQXn2Ekh4azXA
zyGXL8M%vXp5BYpLR5%NzJBsO6FNKGY50i__%@|z05loGnQxZ?v*qG29j-SX6*QgiE
z3+NVD?~bM)U6!vrWs9R<k9DMS*pG$rNnzY|el<B;yz=ynXuHXiW98v#@uYA+&Z)>l
zc-bH!PU6UrZQjK`*g&I!#anq;&ln%T@mO_7b$Mx}f595U))cSs*m*&e+Ax`5v3~h<
zuwhx_I1pmLpyxiSB_oD#oaOl(hO_&fc#l)+(4Do#tybLIWAMJg&zXFK@1;Ae^Q>V&
zN{*Yqg8MEo?s6k{b;|mI<=_m+AU58tzHqzqbG?_-v`bh|2OP96z8t4~a?ci{$61E^
z5xy4@Y%aTw2dJBWOba1dhrxs!s(X6>&B&w)HGzdsYpIQ(lEIor;+7`yh=Qx&X*yB{
z?-@cm-C2@OX3@v{!iPp%D%|k+xAyjRV<HBevv1%|3T43fNKiTkP_U8&eWIeSItfsJ
zIhQtIBr7j+_sx23vFVRr>vucCX=MTeBaY`Ja6FwL-Pa7P&t;6~=Wi@sy?7t8)F%8-
zJbn5n!aVDTq~p3QhORC>d2KkBp6J`H*@7-FuH`&qtzIszHF;fd@Ohj*x7}>DXSREs
z+;uWBKlQg+(vS0b+-g$G%9b|4J`6C)y==Q<K=FBQdKl`c^&8!PJ8AR7Z@w5{-nh@Z
zIcK6Xjb^D`?}Ka?$atA8Q`Mh7Afd2pTzNiUG8vsfaG!X<{D(+%z*<y9kZrd?Ikxsb
z$?6@fW`;h%i~-bqLA=s4->gWSvCF73by31NcqZR<fceS_vjG2@`;)f|K0!e_ZOoKL
z3Ndhcizq!>*SG~<*F${2+tdf8gm6JUz4n=xVk^+Tid)zRiS9yJMf_E%NWZ{!I+p18
z=pH%|B)ac${znzq%i|*ue&{g79?3Wd#Ba}#u8Pc*t(S@<p1!{n9jjbt>3L>Egg+|d
zRUBc&6GW_0{y?!rfy{c(_*o%4__!ul(;X?2O5=m8H^W&FQnGn-7jo!K{Pm-}QHC@j
zd4rrVCpYY#XO#L_k1$e8$7;YUP~RVji;go`gkj^;$>YD%=Z>{%nZ67sn7U*)jpRxr
zozy#zM=N#mW|46=d_<9vlj%*yym7mJ6hZ&a`}M=h^iC=7`m03wUz$4!Jdt);0*mwZ
zE@{ML?0kQQ_Z(E@WYbgbR`OQ$by6tlVTG`SUvy*+pR{JQBMRp?O)m0m9dQ*&2)82<
zE40ZD`YS?X6IK76`}wO9I9X)$vX~|cI^-2TU1K`QnQe*v`K_0e!F~y{WKJEL9&|jF
zc@7y7S-X4G=bOB|3a!UfWG@-zPWrp2SE)z~$_{6Ta%T<1hI2E539~(Rs!=d*eB1X&
zYzxRuuunS5NJmsXCWX7s7R^e#McqtHO6ZI%3uM<)%!X;8&!gH%8;w(Z5ltCr4;uvM
zZ1U)4Up5!>!!pW<I!-=a@mPnst3&(@s{rO;C>uRLA}xww+x1(d`LlHtK}gR_^yi)}
zFP)T9Iqjj19#PYU3%;PKRFrD&1*Q?dgw+d3h<{uhMY7cl1j#AVSR6@yT>hex(?e;l
zB#lMt=-B3`m?Vn|8-8vrVv7-~(He29>swOh0jXwFmr8M$;Fnb5^Ypx>80AHVE#*0k
zII<<?Mro)JGCrP&@Ug*QU41-R4sIbbS(;$a>S3DQtbVhzP?SvV&f=RS9;V5sV5eg`
z;yn&$)2oi$^=S#J!?f%^rq0l5j#>w%^#XOqm7!-`%j>?f;yq1YJzcUllGt=u@uQow
zrvbuBo)9Xz(Xi4Yrt;tt`yV#|(S&JrLP8g12V-OReKo^E|3nzSjO?%Px5&K`<3tc_
zO7ca$+y(lzk0~<`g7xfPi&|J0ZElJ@&g!!Sse?6BH@u$SFx(RgvBBcFO(weMRad66
zPV;_gh6+&?sk&oAWMgyyRf>_8RCJ0Gtv=~yyo00#ku8yLV(H4xnzT}8d?rgF&48wH
zsk|YN5;x&)B~m_$5tKgZWyshB!VBj2vVp@V*_5`)u6sp{Xf4(JbLDbHfr}@XbAmG#
z3_MDxYPr1Q`O0%&fQRx*2-d#Z>IKkpMQlqplmXuvGaQhx*L70hJd|9kde!vl=9Whk
z?;ls<|Mn_O{>6C6NHrxv*Nw_<!NID-VEhN@+8q<Mh(ml!NqJ<}2cX#&W|uRPoPTuK
zLzZgj^0t1MzA^EuA5XR5MGQnhORkJgg4jo9;*e^wcuI^!k?JY9OG+H$pfxr?@6tVO
z(QYk*s@__&qT->DRlpc%8OUB5w2NZIMGiotMS+$vw&x$5My(d478LuCKI#}OZWByu
zYSa({lTt#g+q#wK9hc}kceRd+h9ILQH8t=p;at+TFk0L~He*U|NiIA{+UTRSuFgb3
z2y5!#CimU|%Cwz(h4k?WNn1!`1P18;?exD7{K{ZJ_6PF4B^;FnA0LKR33hq2S(!LP
z&ZGIDeXeL>Y8oDXGnlHOkg~_2nqQtkUTCLGD%Qnl``mX!y5AVvB`sqfAw$3gp$p~#
zkldsb`F5Tt9&A-k3%S$E-sPEx(KUV^ghh246bso|{i>FfbOaL*%2?4wgT`@%g0Yg=
zR3j1b`6x9v-Lm$HuWN9qN<6$@(l4PTMEETRbyA}o%?N_U<ltL*R0RIaDE`g_ifpGP
z)kFVJXbr#eQ2!)Ie(LisA{awYWK@cX)hN;90_kA3c=;ZcgIx{lfg-O`-JDI9-mTI_
zQH>BOOlu5Ym;24NCYS;#-_d5y4J|F+8Eyv?-Lc$cu2WsX4q?XlSIuuq4a&!`;`HG`
z90hb73lA_48cI4?u@^KW#Y4epkZ@=sj4>hH@Mc;iPlim(nLNY|LtLQ8@9!RBZ{Du)
z{V7~Pk|&CRNMKyt3pb0^g0I%>TJWy5@DUOfzIPO*L8zBfAVqwV{Hnr7@&=6x-#VTu
zFt^y#oM@n$v9&9Xy|%8$!b#Va{dgjLi=CstS`;!w-`N#I0^<x}nzWPgs;Ij7;POC$
z4fA+11!R=<O`m}l%|OQMrd+Z|hcGEv+_#`VDfDk@iTm+4hl_-TO6|ug6UI667f;eR
zVvH6Nr`U05ghVA+UVP<X=pX!CvIMObKUOA1b5$pmWMXfu>=fkuzS2PLwBS&8obC<k
zx{x37$S9mWI07=_DhB(l-?-~Lc`&xI8lxXcirPU|xL+~Je?<-is)im^V;KIx9_OJ=
z9-Rp*WSqk<EDY>8SU<_pSyx3(WKfVM^Z|Ev!)zenMc%TG_(Z1f!4SQRMx4U3SE}9o
z!Kf)YNF%fSF7%r5{IwT=4T6D8iEK%G4}Ohw__k7Vlt#8*YJ*siAtgp?&(t;$@ulWD
z;^h;f*Xd>vFXEB07(o(yvZ&~EkEuWFKOWYv5FYrADE{7Xv$DhF=!T!{DVt>9p*qJ$
z!gcShbnq)jNur=8sI~acpv@TS5{g$cAwKRdZ$f;H-Oc-7%Rqdv^OwWjnM(y$A2@4y
zXq!8q<ENMl#TkR=!u`zJDzeI4(M|T$QyrO|kac~CPKGk;vt9Joc=#Sl;6i%1T^;Y4
zKO~)lMSU}z@q2-YTCvXqxNFvAQ<3MWHo&A{LwDZsnldA({JCD>yzyVTAVH}2rPyEv
zVFZ4g`BX}vSUs5RRO=S0>&x?{(v=C@n^;fJNt{uwDeO9jczu1+3NB`l8|rK=e8!eo
zkCTj1xL1bvrAniX=^^6Y=;2%!93`JjpEKkb2<js2DsZT1P$rnnLt%Ti^s2Jce9<gn
zU`swSF$h%;qo`SdJ@Wdwc`ap|>fo#jYGw)0|0VjLKY(wV#=+sTehY$IAFK}QJ2hHU
z5TdqB%Is^@uOlXS!>mQhLVs8=p2dhJT2Mx|<>!SgL%Y4BGPLy26)LJG7?Y6ZXq}Qz
znZ8GPom`qaFQwD$8^L{{fZJd|t5k6$pfS&Cv}bY7(DgVnxPQD)bO<TJ%}x1HfKBE?
zT8U2o&h;#kTR@wgD*8)+Ft@(*^W?tn`t+RyfVkP{s&?h&b9aQK>l8fvP(9c;Yq^CI
zJtX))_mC?C!ZD8cjbT-}n?ev()KfW$QvPIOgV{De(W~!4_!<@964m>7R*<D!7=n^U
z&$d8+n3|p4YZ5PaoJCp5oWeJKZlRW4)nFbS%vId?9rFX5Q?^^R7Aa9cF!Lwu0>UF1
zCi5~AVdCpKTVmcl9aZ7+y30rCWL~v*$vQG-F67z$%$qxnVBt<*Ys4$vVwT^o<)Zuc
z1O++}2hW6cS*fdixSdL7F%JR)`TxoCuZPT#j%1bupl58<G>KJ8v7N|ZSKSM*&p2TM
zEZdEmln~9j6<OLW={r0M3+arfRP{1lb2G{2spWU#C#I9F5wB?=J{UUiu?gsmKsTrN
z)E$i*M@=r0Pk#w{Db=T7a@J@r+}SBYT?o%<Iesrd<9Fh$dFwViv8F%gx~CD9h=&0!
z*Y)ke*n!X0yXhv7-FNvEE7_u=uhJ~82TkO{84(tW6QTUO*w0YpcaV}NeaFl!r+}<a
z7|8-!T`lWZ30({qJm+00*|8`X)j$($i02tdVG^8_EHVr)J6n)AkQ7@N;=B8%vPSDr
z2e@oY)y~5nZ}sV+f$=BF1a<G>jNsn!>50fsed8!S2W;sj-t1Ye4^gW-bxuZ#qy}u^
z3RzO5m|X(=Ta*j~_TNU50Yq;^_Ma63Wp$6}WgY2TiFxZlAHhLUpb1+o^eZ|j{#-PG
z9_)E9{W=(F3_wbVoXkvCWxhn2H|4ax-ryOnfbJL9f@*o>IR8v(UU1(cf0lGtINCrQ
zpEyxz+U^_!Q-&il$i3AvCbn1`{rR}QEv~YI^-nqcVMe4u3~XXt3;OE6tySi8Izo)N
z2unnKPTYa%*jpQtt!`{hj5E=g>noT00R4}r`cFCuSOz1c^eXKR)|d<G{w`gS-Sxh-
zW>&14-Pl?^sV-qxf_^P_yW3?*xMgRqWVeJIkh&PbQC%;gHesvAi%eUz?h(P}+Ss?`
z2aCZrwN<Nce<`o46R`59#6|Lfb#Ieia`;30f>s#$rV4M3B4v9)fCdkiUbhJ}nM9*I
zy|G1l{hwX{?ZbV=abPFTNs0_iSxJgtwoA6&M4S#W@DbADcjwuiM;mD#reqo#8n!}P
zbwK`3axYfmcZ}!iI3g%~v1a>Z9uL=+(2V14Y3Kn9xQG%%G27xITq2)Wl8-Zd>3a~2
zk!;>a%lWvGF>e^xxq-<k8wC>tdCOZYN>ox2dtv@b>zY?yV`Dz5n82B?M~Jd*2CJ2h
z1*l5;Q=31|ecO6FM)eC-bLK$`t;4ama_5RHitQJTG@xtF(mgk0wHv{HXPLEE<*u$W
zcxTq|`e%yx-<l~;5;=v*K+TmlUU}x!ZJrlkDuRos%#Q4+nvG9THHv)Wd%^4$L&5xN
z8Hy%UHis*E4{o;@F>g%E_wB?@Zx3w-mHV|_rYQixd-i_;$$#0*PXM}7nQxuPn{vh?
z@{uOl-mPM^N_2IUfhrt7X7yC=`v*QHXx5A#mT0FT_t~04suudw=z%7()Qr;FqLG<W
z4XH<gzgz|#@afV<=};!RiM-)=JVzX?lMou|S|IK0rOx@}Cq+d!nQ52zf)yFIfnC-H
z$N0(I5R(-n4RqfwM+4XQNtKjJj|GjRHT9>mNvk72K>aD2^J%~vZY>T73_iC`r72$k
z@=>Echsgz~=7zNb@Wh)b-kBP%X6cE!-&#1BnP%~TeRIgco~zYTI?d3=a(!xQjNC^T
zmg2uAW5gnOWKdl^`iuQ3mmpw`gsWWLmt}(@?3U|>DfXY)pIWM{V__a56hGK?C$^cQ
zG@;9VGyz~wEZy1p>J0<h<pY<$xe*^>#@tP=5&bD2!00_~oRxJ9z#tM+XSrHn1;(uv
zbBlWUqg-y1saFr}b7|!GjRW#X65vnjC5VqDOy{bmxPe@rc+*rUJfKN#f^r<4?LjMv
zYAFCL&HXG=|NDEKw8LQ0SHvf{5WmLaWe~j+J5I*zyoaKYkhklbLe%6T(LTD=n5&3n
zIVo=!u}ZLj1pdd&B>Qh1H!;*%Sgi|~j>P~UxG!UwZQ=N$;vs`@ez&7vBiv3Ols|!I
z0&{41NEF`Sze6sF7Y)?uY*o>%Dyu{mF$);hC;rH!*bC|Sd&w?I3uKu|N*GUX8AuK-
zYy2&$C{|O0B7Ri0ys9ANWW^(YsCVP53EvSZwDv{0ko&JgVjXV6LQCZqz%T!B0qrrp
zqM~}{->qL`!>V!>;u(zJ?0bdt#ygKsB0&#ve-d9(dzS2$`rd7=QGe{3Ct@p1#=Fj|
z(srDU{1=%B6FYWy1rFBUYn>d-;PORKrUY9X#l)5n+r3g-n9qBSHY6ESo-5Nw$tR|e
zK<VWGY;-}n!vQmbs;0FW;5HH>-HzdpJ>VduDMZvk`#ZRRA_5}{TI|f7K&t^e=zRMy
zN{_d#OpSJ`l*DO*>Av~0Q_1#SDY>(T+|TBS?M5*ug&<yuz-q)ciswIBm49=SKl2Hy
zbD*`;d`n19>9|kqV}P>h0ko0sKJ*aC%IHpiDLe+;?t7G$YullMesDRZix0q9^*=ef
ze{pG4<o!_cKqvbKqt3ovR*xgio|dU3yC|0l4C%%b)L`0Ho-6z%iYs8>>8R1*)ygpG
z>vihz6~*-m^e)X<aojG0KQ{^D_3lRu_zizUgAf#df}93h`PMm7+Olfe<5~R^Wf6Q$
z03@COzq@~a5If_8qM`9y<gNH4cceZks6Y7n%g3)t{@lpn8)`>~m1Oz}*uKTOXVe`z
z`L%zM>2;1*)Lp9yZ7EY?WP~}d3jCocEBCTZ1kT?}8YWxi^1m!&_KO-DuEmXJ<xIAd
zb@2j($W~~*HocGlh~5nMwngCkXVI>=cb;iU$^#TiMS?mNxL^N^RR0Ng(!iNRjaUj#
zL*6FM8<ssi3h2av*ctD&K#yIIZr&`^q`&JbK)?H{)J>g#CBb=83{`XYbWtQZ;39Pu
z9*%ET<c<mX$6LL)QC2Grl+Ma5qRm2r<7wI0{3<Cu8dk_r-0dDr^rW6*VP=zSo<rkD
zC(Sss8D-~9-*-}RlD%L=*}!&=;S`UGiB6XU3;rs2{!8&=p+ZBs^GP9zQa=0V`j)})
zp&*S;qu@mnj(1ZjMC@7PMve++7h!!Wc&8Amq)?hfV)mPe{d|)&;X6*3Q9A>h%oT7)
z&hL=;Qq*Wh0%VrkFrOq-6<k21l>w%6LP}kThS7+DFN{6bNu4XG3-{ogN^#k*<l+Ca
zRFM>5Z3dz%{oEo`yXI9k(Y02W;Esfm@Sv8^L-E7oEL+Vp#C)1{82<5&H6o)mx9Mro
zSy^}gLvlg9R1temW^0W&UMWS^jz+|9_iLW9^o<%{`WnOPf$OB`bt4dY48T1o`%reV
zqjfQ}PZnmYIN-GQURwSC>%w_Xfr^2oQFFid-G}1?(-!uP+H>2?xH(Zvf!oe0A{9_q
zfZe5ZeO&7T5l<$r@#AygisD>jJgkFYC~W{7<R5gL5B_0|>VkXdG4ZMETqV#As-};I
zSs!jMuf_B&6(JP8CJ{w5vXYXi<rf>lHE$qxwYLLt|3WAJFp%z2vs6L|usNjB<k3Mx
zUX#eEK+iT|RJD_+Nz{PmOiwwuE`HRmZ><q$lRf2fDsWwZpXZEzGhU-_z}<QR+v2c<
zODxnh<oisY8o|h_r$pL=vlTjtC!oy`W3__ULxovip&%p7KiIbT8jr$`Eti^&eX>8L
zynfe^4~0?u>lD<#_o<K6q0WNN3Y@pGJ^wXJN-qQojK~!rItr$+0eyM{(T?}7Ed>k@
z7mo+^77pRxfB5T}GX})YAZ_j>FuAZ5IXU0(Nb!P%rK_(Ew#;te$5yIl;Y@iLtCkVv
zR$u>aJNcUtF|nLWbp%a=eR}+5y6USWBt1n+4kbw>`YK~5CBL7+B(4X{RD>R*1kkGx
zqKUI8N(jcJG1=%6H0OG0J?^g8OINcwTZaZuANO+(mmcNK;f($zxyC4%csu|OcJ@*0
zx*Xbz@SZ{q^ww+5I?sGmjbGv+YQEel=6OhEiPU{fC<niBl!b+yRe2&3IFfc=NZXFh
zD{!a$NfLuZ_D_J?bpq;y;7Y$+j@kFf^Ccp>lPH{zU&Z$rJp?Bvt;35v@+Q5y3n6Zl
zoAv)69vYz-_&ZfA8Iz>`CFOR_38|pcZaDxsV@XzJzP+Q_iQ+RVq`jn>7p6Xa2mJTq
z|9_9HeCV>~L7hGCR$8ruGGWq~-j(iq)L~ZAKq8}Ea(mvkJIdurP7=~Esj*wrw*sml
zh?-wX@c&>W@Q_g*2{7KOIMP2KD!5av)7gawtzCFdg8#ZEDoJ=oouTeE+0_XK!^E5;
zHg?XeXP<!LGZ^BnJeFI`P4Bx#@jHiq7HOftD8r+al+#|y%^6aiI4aS(@ET{dPAUWi
zne3G3SORb24R`d+o>G$6L0CDy>}+JqsqniM{*B<hT%aoqnbvtU<LY6Cl0xbAL9M0V
zp@{Y$dM|OKD<%rzh$ByYjpdb*4mLb@*6Txei97!m_8&3}Y@4vYCBI(V&p_T#E=)Lw
zpZutrl)T0|$Cg(fL_az1&dinQ`iLJ>50rUQ3~%ti_VgJGTr<&+$?;_nt|{MdF>lOh
zQ%lr1cP*bbk|qml9dCz&3ql|2H3@-jyYPrmk2x9vKb$K=a_0^GLOcn{K{X4M`EQC1
z0%j@qBjI!%9@P^VB~>aKRW^wuT#wNzvV>hePKL-c6J5@CRI0;})u)Fc)ZBGBXlk~r
zsI)kI!lnPuLArlgrb4720<Q!A=F&%^2T`07FF9J%a!DT`S%RJM;S}y8#V%e4eliQ=
z*#ou5K&I@N!pb=1_IzZgJZetRn`P63x2U1d6KqGPSp>fW86g>%CD(Ky3v1|9VWSCi
zk*O+8g{dhW;bf~5keD!^z!4UFKd-|LMFQ@Q7+GfYtE`E{tDR60WLi`;Iwy`<fg|{&
z`~;)AdwKx+>%z?eA-8{ki6Xf?RUE*@MKhF18gH}!t^?|dyE|MpyFM_VZ)TkQJHuRk
zZ<>|pyQ1OIPJ)oy`fs6a;g7-Fbpkl&x^?ytWg6A-{s9<Uby}<Jzq9N!2RJ&tuH=la
zD@vJm<2-JGz4N%gfuIgRaqQJHx+;p@`?N_kB%pU<0PSi{+<+%Ad11o;7>_T41U$4|
zXJ72xV2-ptng7;X=0Z3EpT~lO#q$~LBGpIi4=y&6ypNzY&M&arapintj_qouh(aOi
z{3cUnxT_kcNF~umefaGgK$+z?+!?dNqgWAfKpij-M<Cx)0i+Qg0v8d8YxS}71^Q@5
z$9q9bz?<KV@Ms^nlk`^uSh{QVoEYaC^6OoLgI!up6s%Hjesu82(LrxU3sO?Vjff*m
z8D!2Rvx}r8)A@Gm1S5kYb&v4B%!w`ZtN{$Z!Kr#qnPh3@`%+O$KlrboKZ_8G=|S*7
z%b<X<y1-OA(JC6mCa-U<82ji*;cH)GUmwnyV(C;FLcqTn?q3E~|08nf<pEA)@DJ=k
z)jnhpJ@#QF1Ig*>pyWsZN}!IJV0o{-Xw>@@6zOxNVKT3a=81EgInb^IcJD%p^IKY;
z;F{%geC)W$*$rpBin!?xPWidpTif|o*OXha9xG0dM|DVK{@y=mE&+|p!6>O!*CO27
z+S+LV7psc6%J8X%*qmsEk13hQeVlRRiB`l6O=5OMcYHpwMoMw2{|LS#^RVR2*Fb2Q
zZUaHKJt#cRa}mPs<{AH$?V|<VtTPmpyM0b4*x%{@9@VQ%OE2rWO*hAFd|kSf0Z22=
zMZaiSiqDSpeK?sWea^@T_H`oVDikt2O{Y(j-^cRu>I+g}{PqWirACg-6QJn+1f&k4
zReYvXmIz9DW|WRuH70rZ{Ya8=kTGqvd*o!x%Pkq&SaiyG8J>t8)fUyhHkh(6NrM~A
zniwG>mE5^Kl7_l2dn&-*RceSQK0beOSQm_2b(P_Ju}Xoa0TjN}X(E^(bd7!})>3|{
zpT%H?W-4Qkew!g>QP`f$H)CfQa=Er(tDuHWZe1}u#g;AYS+B|JizLjT8R#+#2%7ml
z#~{zoa6@?6m6bWnuGhF{2(bgEJHur)20f|@0q!<6uL1;rGmyYT8D3rj>l1@VuRb?5
z!PxJv@+POJ_iK=H*wk-9BPd}RfsnsKVQeZYNH%;ExHI>@w>wy{AznPxmmKoFpd*AY
zK=_)uqh7g0Ym7ckpJ^&Qq|D9k9Gs{63|h195mmFrsS(&{>ba*MIFx(JMw5u1vPgOG
z-iN|r6ae)*=LpGczCt97wm8G$a`0-$-fW23q5!%ui<B&yIO=!jS8G(_#HpA4(62-!
zjSWbdg}B$A-#zC+pRHWIt(8|)I<#BfVN9DCc87ydseOA)=r~`L{_?@@{fn+<4FH-J
zlQ-%9;Q{BHR-+wDnYOd05Z(&VeHYEiflRvx9;wU8%5olVbqD3JS#u;hcC|UGWt*!|
z{66yO;MlYwKpPFRVe`cu3p-iPe7e-qsr}B_{xb3wzszx;NKFKk?&z%Tlu@<a)BKdO
zKZULRu;nJQBpU>ydL_Z(j?Fe})Tq@4IKs4woNJZ&<4y$e69)IROl9vRaH2=SX6j&N
zqOp=9&P0mu&^%S5FO4FgoDFE7GLcXy?u;aP){=vw5XaL_p+Z|*2VeN-TJA*V$)i(H
zP*9Yq;tI9tw3wK7hI#s^!(D&lE3iX4Ne6ZH?e_-*E0;U00~cfCrlIUfv^R`0P2#T)
z`aavfCimVb;g#U&BK^qEJ>xA9f(&885{wEQMy=m~H*Q1}p^q6%U=~@4_|no%9O#lv
zRilh}_Ex0@UQHX?6PIa)T4Dd1+q<w?<Dxb>+w<|VU0sIn^5Dc=)eHOgl>n`t*CNX8
zph-KR>$HU6*{Dn18~JtckY%N~88NgLx*_dmHIotcAwTi6vSJD8q#?Uv3E_uYdx4lE
zcC@T~@5gF5Ki<&IV00Nt$yi_FyL4gp?J;9xh$wK7dGDXj%fAa&|2*@vf}bZUF^%jb
zLJvg(?^JaontUhdLLl=Pu!)d%$0k~a%3d2YQ$n?RE%&FogMiNme$KBnBxQ;6UHJT|
z#c89K5txF2Fd#R00=|r0s9@c{CgkdEZz3hVikXKmb-auOf;C<Vg`!0)y|ofJ=+qzR
z2mGlBc84X@&m9+b#Bx+RE3Le({xQVf%=;0lA0ls6#6KUb72zA=Y{!WgI+;iCM41%O
zP?&b^o!gt9F!QFNSCo|4LjSHUKl77q;GCAFi>7Dy4ld$kx4s=gmv03GnL1^0uH<-y
zpl>v<Q&LZ-iJr>u#Y;fT`jtsO<Nj`PfyCo4hXUYonJI4t$mi>_=F3?+<Y!bT?;A3h
zGsc7^*TInE7}}P`qGz;7kJB|!P<;?HPI-63O3KJLLk*hMJ#ybqq`c{g>?f??zIjsL
zX&$une&iJ)hwkfoL!_Ows9DF!HL%|ul%H`gDij>Ob}3<=KyJMJTk)RSv+j{9)y)JT
zCX_7N^sxDzX1T<)=!poJC1^>s-YCfo;j48$KE~_c)JA?Vg7Q9fB-f<yOAJCURgO|7
zOy(glZTGlFDp674kf_q7!GQ;S5xB?@epQGpcb`_iE`pmh$)k4f^DcY`@alh1krGMV
znI`34otunCrPif&CL>3J<<_@fE7o;l!3Y{l*j#tM)!elPU1pqU^cB8QKXtGAXKR_Y
zDJtUN=E=7}t+1sGwZSS^zuvKNI(Wy1sznv-r%}u|QCwP%uJ*SmG!lNXJ~;;A^Fe+E
zy8dCRzc>~Gr?gMA&xE3%nK@CZUE!w=Fxi!4zQ)Rj0F!~ZGZw+S{}L2ZDj32_MkXo9
z=vd3AmY7wvWL)==*JqiL=|PCkB8J86=v7(2bpGp=KO8pT&sb;xF149*-XSkI4m9|c
zfc$YmWo>*joD9T0jxW&{0UTa{gkUv1hrjP+{|wDy-60#-TA7ewH_2a${6m+;!3_;;
z<}i7WpW~uZ;ZWn931$%yLdoA-wG(F*-LB`(`xQ~C!O54X`+g=4?AMtrmbQ9>{5Kt5
zql~hPhUNkbeP18V%JVQ~gNuiD=FJd3zR?pBWb)<j&5<tHH8vYO34;S&qe%adcF4xP
z?UGJJ3LFUk*Sfq=p?kZRt14ZC%P9-vfpf`;gT(zgGUS!AFa-%jgLO0V#f`&IrXxq0
z>Bv6?NV~u)UXZbLArB)RiXz5gqD9nF#iaQBj~K!WoH-nxq$rrQG)ha-0SMF7HZg8N
zXdu{oq@#1tLxH3VSIs03GIGt`c$E)CfB1qwb#xxMu*E8dW`_Vq#kV0`By8`=BR|ja
z<WgptIz)Q8PcR^8PVxO*hGUAVk=@70|3-QL+2*^z&)p0kNL8YIS<cPkbi#;gYN_0x
za%5syMamA?Wq_CjB1q_W%!8QCIGsaiK=j;Ig)%GtHPTx=^FEdU^H8%tO6Wg_asLgK
zxk4Sgm37e{B?bG|Ad;Z_uSn}>bBQLEBRyp_<+DQg@1bRM(y_BC+D`xtJ9{!85b763
z%aDX|=I@pPD%<9uaep&4A8C{w{U=iyneWtj@S6MIbfXRy%rN+fR4YRfW+lN)6XxAL
z_iryeWbz99uSFTk5xy84K8i)USKz#_lxdPN01AURP#BsS?LBPr)4_4fiKy?aJ-nCR
zcp?)O0%4r>uIT?kH~<l7m_dhlF)=jtg@koz`Kll%5hZ3gp}u4|MXbv1cc`z%X=|f9
zj=6*+Q0CGA(J%YREbC7pvvNpXI%9SBjP2?5$+(CABXjy$1N@w$JL2%u=IeXczQDz}
z=P!0;m4FV{DD%%_X=;S!gvd+fny_=$pVynwvy8wMY72pRrN7A)3{D&-K?2S7rdPAC
zdpkUvna*%ngEh`~{Is0plefdidh_%wEN}Krg=#IzX?r)#rPy%s%7`rN{{gA<$@~Ek
zM>2g!z79gW-|IZMs-a{*3Nob+h_(bEtyBlD<G<_Ebd5Fgz*%{Kq9qA5egpFQe^|a4
z{@h9c>4yNd7FF4gujtmr5F3qvn>@pesvbv+N0uWa(!uYVHXviZSTj4syqNpqmo`3L
zbaZz}>-1Mr2e@BNs2Y3e<!{=)=uVb};5zFoMU;c1Z~}Pey(_J;W(!oU_yG#%;ei!I
zf&)<5wr?~4D&_;_l^sYV0TSpQrnQ=L-OlQxspth)B|FZnCB*x8^}8~5+<v~sEvKPQ
z1SD<NNL@VdQ8lRponp<JE%&T_YeYar{wDj6TN|`^A=F!hvA%9zVpdp<UKMk~aiW{W
z$Rev|79es7Y(eyCzQ!qCahTE%)Z)t<XDq@1EP<M*2RNj^U5;Eq!tq(A=r0>qK%!mD
z`{C2-mNl@&@L#v4wRSaZ0$-#J@qA<l!mpIfqmc_!h9>;@K<I2K<;fJg=nnW>-+}HD
zB47_woAM@;baQ~qLn?w(rV%$nb*O$md+JclwMdFG3k!@gS1-(oUg!}vh^inW8WKlO
z$TuEI_~Sg14bETUk*NZtAqP;<kh;vbm@9O4$JVFJHd{fn{I?6?PU#ifw}$lmR<VK6
z3}yxxSRk<7+MadbH{9<`e*rBhA^-&p)3shg%na@oN0Ut=JoJ!_0yjKy<RO_7po|cC
zGo^*M@%$E>xF(d4Dgx_&06!rilrXlrD6+$8_kS0&L|vqc99*$nPexTuhS(laeN}B%
zw#m|e93WeA#R}DeFot>_XldgAu2((K(`&8n?A5c3g2;%}Sa<9oR9Q($i2wFb&Rq4*
z=xPTDaMq)uTG5`lm4Ef=AKnK)j#tv2X>wv>=7xcR{pBtaHjjOvv9WQ@UO@IG)O&~g
z084qrx8GZY3yTO}O5X_*xPZa8P34fOdvb9L<bMy;-Be?_JWw1umlR$P$bPSv&E4kz
zLz^TQEt`8@5j!{9jOha#TU#~HA|n3oYkf`yku$_x9a+s}qMNO^COBHEPU#koM(GLw
ziC~D6BK;s{{$J^tZjCl0BhtGnWCnIUa3DZVPF|+<;8Pr6GdpJp!X6x#7NlRQ8&E6F
z><W>Soq?+P1EMy=LFAlPfisMo0SnV*jTh}GxK=lFNtVe{2fk_(x0voI$@kG8iIN5J
zZS~((C-DBDY4?p;2ySQu%@0MS{T7)t_xud1+3Hezg)=)C`t6U+@E=2+f(LTwYZc3+
zu#Vlb8=Gt5^%_WRAxq4TVOPXWv@p?oXBx5l(EKnas@8tI%Exj%nz2Ju;93SO#R*o<
zxG<afW8>z231R}I9#D2$N6#raw}(~M9In?EoDZqhQG<i{JT$+l8b2NMsiHl;(5X6D
z7aW+Gfd$aMI50~V$NB0vfA*(D0c;!t{f5J(pxHB|uJ1HE*BWlGku*gShiH2ddz_88
z_e@d+badKKN`*Ank$&e5KLyGv19$|Pll0ga*?1yj^cNo%UFrg7Ep1_A#6|(F_kxHF
z(BS0EOwJL4p}w+bVOSRLtEIyrT(YhSeUp;C-xVpx1z>eoLxDRbaYQE}eHQq6-RZxM
zSO-yu0W`i+=B5{aFz_mjiaABfhhg$b<=2CZ@75-G$}0Ca#B+-~e2qzIv%cMdqhKqV
zAq<)1F_Q6mp#Io{Oj)yLW+DQ}dLHp#hlUUnKq4reEXJb9#?^nUTq!TEe|BDBwhA^*
zTys11gFn2XQKl3p7p)Jl4C<(rNxcq>sL%od+9$ou2d3fc?9Th{-RFtHi+ShM-+=>;
zqyrM-4D(f&GT0q{ir6);-7BRBcn>2HLguWw{ToXA;tDIlBy8A^x?WA*;)#B_Bg!5z
zs4HDR^npBV&i5J?gO>Fx{O!MwQUISv$-z0TLXk}2uq0-kNt88<LW}VHOtlNyB_st+
zon{J|zH7_)=VKd`E@25S&ak0S3jw7S_sw2>q}ctTNeSf((H5V#g)6taxsHwwGdFi?
z8<F}S7`lrI#@)SI`8wDX{G5k;r2Yo<L=YgKh42bBU%Tuuy6S!Z8!@#E1wp1J1JT;v
z7Ed%d;1SL~`7JidGo8>;MsGke_xLmqv$gI#dFCJa)y!AW_Jisq<FgFWUoNH#YZS4h
zxL_t4<ZT%b=8`0N^FUv5UPyP``Wojec`&gU-<$jJDM;^U0g)+j^Nrgd=QMsmsd?gb
z6lMq)PxOayav>#Irv`CR{^Zfg8x<HJ;=R>yDl<>xCWU~9AvQ&pzZ+6?!yo|yYchER
z^CtxT>SN|JLAKvy*`CHL9MfDFn+b@o%Q$hWR0aUC57-z~vgE00MTW#-v*VLk*vh*?
zMirNUq9i5Ne40XBv3T!sU*q^;OiSvOCtQ>=?p^yA{`dt)un@xin!Yg+VBf&-7Qd1|
z?5H!*=(RzZxIvfrx2Ps{%fr<4C-Grp%0(|Clc4%E%cPi5IOiaywEL1Vb#d|FlUVQ9
z5J(~hML}B~U6cAVc?~7X<9RSH|J9LSrPU6i&z1f@#MdHp-7S)`RL~H1lGF1!ss>iw
zIgNX)ld;p8$<jH*prCoa`EAb=1(X7VXDQo@PflI~KB{*zG1^j*jz1IzzRKU_FWcqC
zN`z<{iYYM*nmaCOG$;+7;KKE0Yflg&ee7%(nm-~Q`>l~tzjycbXGOsY@Dm}X?IyfQ
z0L>kBcBX)UFdMPKm6u<o&a0k3*G$L+hKVz+KwT-13_RMaO=f<ikk3G|F}7%*l2t^$
zP$(|iQR<sNZOza4&a3QV)gbf2mY^57+^`?Z^*jSs$%X%yC#($JiSw}-C}GqF4*6Lp
zS(1=A`z{m>dBEG8GZFX9dGi9;6PJA?s-u~N(V=SluSt(Zz7Pl~>!U{e?biYOn~o>G
zi?)FwRjjMX)s=Yr?%J@7$BboLpF5dlWj{zWB3={F-yaLX!ZcAL%aK(yW5I3N=v=Yk
zm++uU)$ZJXZay)!l;)Zb^@~ma{_fxgqcYHnW2kbD`V=nK%dpj4p%ps{cefwF-H-ce
zbOG;s52g(F8Wlhum_G`0qGpRcCYZH*kmVP=JggqJv$6&K%QGGY1t*5Xnb6)ZV`UBB
zw748rQmi0F1#qbzWQq!KB=R3n@<N@DF=E}n6Di1?mmvi5%a@L6@5#ZZvzF7#@FdFR
zU=0FxGR>RxH|6*d`~X|p6(V4Wq(=GTG;~_eWxi&kC4DbwC2`=ITPm&b#jiETm{U<u
zNha@g5%+1>nn5Tzej*GusxY@C$#Oq@;Ul?ZIa#(A?|L3`eCoq{0kpsWfi#dD8gUG^
z(Z0pe2UOwY;`>zylH@JJ-DaCA(dX{?Zqir+_>=YTvXWxhI(=*0zo+DO$Oz;L7#&+p
zf^j>o@*flXeE&z;5aT*poG(nLOXn0)1n~dy>o^lX&nGh0e~$g8gxvqe%eFBga}<7~
z+X{PE5s@eDiY%?aYP{>D5$UN*R`_we3lNPq4dt+@aB7`Ph0JP4i==&yv~+nsz*}4R
zE0XS|_Oh~_U3k2M-OY{hH$7f-w%_di!0BW|fXDtNgPelm99xyRy`trulk@4aniemD
z?-`2c>C#{LeiZXRt|nn3NW=%DuE4n@MhX^gwGU&4<f=L3v_aIQMZul-Ln`mZApu~h
z99ey9CgXQWSc-&wpg2<}FgB>dsKf|J5=;DnmL8<_o&bC0>{tKD?>T>FK|w-!+r5is
zo102zGqCk&CL}>iglsA%Lab>$Wa=u<(d0d-lS#TWFLLtHbYCFk&(#1UE$(;=BZ;}T
zXcw}qLqelyLq#|W5@xI<1vt(O{V0@Vm+zZ&p*P#uF$SSXf}!Ltl_t5gPa4T-f{ZzD
ze6W7t#=9Rq+})a<?^8^#4>_`y)7;J#T{du5WD&S+5?Bl-Xa|GZ>sya@(uxZ*o{Nxz
z+ViB;Mp<SSS8uPLPF5sbZ;l;~jWCpylxiGTtTbzO4W;aXS@<e)r(<H92^s5b=L^{?
zGvJVOk(HNco$`W)UlkgF92mEMsG727@z8Ln$x5y&6;1ME*i@l})OxTJ*4u?rB7xcC
zQ@K|<cFhUfpF&WQqemMIqFXJIUm@X}4`-4i$O!m&i-UvlX4}2mqhN7g6#ONg{91^Z
zn3%b2Eo+v_R8udFc0k7$IKl4mRzdU2`>43VgZ=%gbv)cukqXZzt=*KBN0_iMJV%DN
z^48WBA6KSSW_Fb8R<qS<SZ`I{3crYr+_X7DrrGtIPDeigrv}s$20tbr?(Ny$Iy&BL
zvLQPCN`pjlg5uxx2Wv7aiNp*l_I@P0k`(k3jjp{`z<J8x<CSDqF-4G#(bJr)(X*+1
z78${mcG;=9v_$^@=z7QSJhyIbxN&3Kwyh=&8XJw1#<tU_jcwa@8rzNSq_J&(SJzs5
zfBSh>-~73c{JQ2GbIdt(j&qQ|i}BOx{^65}M3nN|ul1=02WU&b1sLwaGV%!n^czU=
z!$t!pvc@{D8yY-kt)XQ+vR?Krna|tEVg>1p1%-wCeVCb6dq~K*|J+Sek_j(pd>Or|
z&tTW^Vf7mm1w~zLD=WQ{ribAX9z;6sahgU;-YM|?kt?SlzfJ9rAFcvBkW-oY)OW->
zmZpD4?h}%rJw3DeGsit6BXIn;3z0Z6$<8lZk#9+=<vgR@2g}w29ySPwj3j5rEr2#m
zy}o#qPaqHy<Qoh`sLh|gT^tVqRkz*^Vc}j@0XLg5Qn832XO9(q`1w}845KEs;jTUw
zV+Ouy$HkiX?nrC*+r>gU?72~|M%eX4$yHT!M*hr{6i0#EHk~@t;Mi+^JN>dRO>N7W
z!NI7qBY4x@{-J%xy<SK1`RTk3ocp_E%!IAIguCq~<Ffj)Uj7EPK%2<bYKx1Sl`F=v
z1SNeHf}K7F6yj;2a3I2c@p*YFzek0sM@(PHG9j<C^2o@l(ZQ`15zQ){E9BY!KCx8X
z3-81BP7Y!u!2HWN6+=E8Y|?WHqU5aJ>KeQsi9SbvcjF88bS!rNccOX%1Kf24tFoxB
z_jttB(xBj*K2B(=Tg_;3EA)>tGl8pP4<;!vl$5S9b-5&u)~|&k)w=@}Psz<Te`zlJ
z9p%j5j0bgTf;KjpTRqp;b>hZjTz6}sPp3}^cA&AL^aH^yxYn-UKP!`QWAfba#X4;D
z_s4e03B1rX@8{4Kb#!zT(`S~w0{q4IV<Fqg*|))4K)L5&dHofqZI_)hv?olJ$6e>^
z1vl-3`$b<OuhVVc!=A3l^Ty@s*;+xIa?4@KJl9j`WsJk!hbU`rpr|T(x8l$ebYwpe
zVCC|3ORs-6*-~zJ0X)zLOBT9}C`}G019Nh+=c^uPE-A9Hdu>vc?T_^l$5st5r90#G
z^J^lWo;R-sAh#PEfrMGPVu-w#Yp@^MUN46$k)a3k*TmSEnLm#6-=SG8oU2W<Rx}=#
z9QmIt&eZ}V(Ni+MUfNYdbft>wH{%Rv3qzIr?ON!1z}j^$X&$>6J>8Z&zP-4(5^nu%
zBmg({T>P`@W$Z|tXv~xYdJuJTL>>pD*C&{gHh%+3wx-IP9qcWOX+AT>wdKDw-<iD$
zQd6njo5LO}g)@?&X?yc)Ao$sDPa>-a8t=o`L5Z>pf+XOrtzhq&M1-Zpaf-vW`I^iA
zolzW<a-ae*4$*uk$iWlQM9ihHD-Mj7;>H0mh0jqY+Q8hNr2<2W)Sbm#Of6extF=~%
zWA#VpnmaP5mfl)+-Mi+@>X;lp1D2xmvH@U@`Vi-r!9dKm4S1V;U_!n2NCw|R-Zztm
z8u*NxgU|Q)YPGwH76r89bMTB1v|VPDtUX2-e}`LHZP4dx$m9o)swZeS<Z*F4oXOmt
zlZm0-v9AO)LGirtI@O4+_tdW&B0Gl(=aSV`^4TclIgidVKOynDc6C8{BQ<Ol>|P*=
zorP*4yi#pym<toKJ75CPMPj(=IHO+aMw=01_03ifXA3D{q09gFvNR<1mVe09>G#nL
z1P(K_XprH4o`7Yv%mZ$rKZC&Tr-4YqTH`Cb%ZoIJIWG76?u?y*;iQx9T3R>m8g19)
zYbi#46MC23#SCEZR5q){)s$2vKrr^>fnvAurA*yH1oVPMYWDuVQO&w-J>{cDv2s~*
zh^2R5h!Rc$|JhpGv_{QnI1VCv%?#P2uI{>z`1?%8gi*o*?Uo;*Mw_s`HCLh$W3^+=
zf@G0<Kqse8M2F3~&QT}1&aD-utodcl@o1{<kJ1#cOFD^+m%-sSm*WL}`el;>=a@K?
z)tZrX7q9P0{@RVN{kS$(;>MR@KdqK^km>d`g1_k0jQc;uB>D^7%%D176=Z&ukMTsB
z+2{!@w}Ln(e<mdrs7^?`S}Q%(??4rcxM!?%8Q%OmaY@7oe&{_fa-)`?PuqZ!qa&&$
z?yyMu+di;JO=dO>S~`kN+bCck=l>KWRDmp|RkLI}1=r@$A(JpJ*otN-e-JmdmlKot
zaFm0Z7wB2N-cFSK{-(emv&+dqbfCZAY(3+b=UA8%Uc}!|2p2d|fOm_&)})V7FHLJU
z8deR$_NOf~q&Q=3a@bQ{sxgXH>tAU_q@aZ0cI)#nZAMK=Yut3V0m{85<eOY>Lr;=x
z-f!t72dXb(zkXO5k~7(~-QdfzX4vg>PDer9+mh%|jPr0k95Mjy6Nr@3l^w6fdy@h1
zN9BfvO4%3s0AozAR579JF9s7rMOoRU;WF-r2J_kCxl4~bUr9dN+Ynlv6W4B!m;iD%
z^+*?N0ZQ8BRQ@abu5Vu~REwUJon`Ht6Pqe^-+BTT8%M6fZJup}j0Z1wHbX0`WLx%(
zj=lU}eu?b9+<7+~tp3X1*II!#lBIZRL-lG_fcnR^PX8om@R%DimiLU{k;mWph^v@P
z9+TwI$MI=%J$DU-GZ`Bw{LPztowc>1jN;EO?_Jbm-)IM6e;P5a;8Xy-iXf>kVNy*X
z@#}g+^?psNHZOy@kpa+~*ngQ=L4@~w=bij>mXdcvyT=^k_gkJAj7{4r*K-Z8c&m=n
zsb#{3F@C+nNj4oX0{gVO4}9gCE|sw(bxxPr9I>%C-`z3jipFj0j8+5)-3+yrSf*e2
zj*ciZTxTSVYfgaMpux&vCE(h>9RMF5yq2iz)g?Ky#8Q*Q&Ah)F8;3~de!p?HOjDLg
z`+4rOf^D~h`iUTc*C5aRIho7G_Bo=rYsY@9`$=(OhI+?EQ}bE74JSFPXRrJ}cKrvq
zmbaNmm_mO3&jpTIY3zZ#&7u@}B4Tn>uW|#<Yo&xT2K6y2V<PfsYfY|18rWW)wR%Hi
zX_=vKax**%KbfM9;`@y~_98m#GURT<ZN&mCPQXhThci}N>Ma8PMqBt=LZ8D)WN_aB
zhnLEJ6=}l$i2flz#pFEQ^Y+0jl5|!^PL4f|X)F-_!rmeSeQ<dGq&v8=svBBZ2_{qZ
z)aB=WyXVa;9N%!ffeU84%do3ln9K0xO#=Pv@T6NmE#aX7ri*?Y>NLcfT!|`&m3vpa
z<^7P<#_Dj_>M|JH`w(26iZM-utiOvtjx-?CDDTsk5I@+>zx}*(TliLjrh~2n{BcMd
zRrj{m=X)lmvd({{<NoXlcF!B#?NOw+DCUPBd_f+*II`pOJCIN8#!3V%^;tf4j}_bB
zSq-L?cZ`I4$==TgM@J3DCJdU+l09o7{=lI1ingT`rzEoELFgYUrLve$(itMHaI0%A
z%rHb5Lqn{nGSq1kj%Vrzdx<U>Wtm}R5s3CMG|!eB-9Vw?4*K#|(XmB431KZ2;I>&?
z7trH0dvrTiyTSmM5ducR{2k>Jg7W3WqmPWmAu0M&DP$knh0RElO#3%|SI*$1jgF}5
zSF_eBjOEIvmeZXLAF3o<B8%L4WS8<YQjob)aoFED-0mvOoQZovA^^+yJL{Mv>4WI!
zwiBONhIm%)3ZQp__*qI>Sw&@)(iS|6>(h8j-qMI#HUc;y8MODN+qlhsawt4QhlPhf
z2q4v;nw*j`kNY?!R)IyYjNhLV&!IXWHfu6g{B1LM{NF`FY@x>|d?I57B5avbrXY0_
zOe5sL2lM)P7&f(EhP%>&EYqb!Erf>ON$5ExOiWTbvRcYtMF|pgXD&Y&X8Gw}8m`;@
z_EoX{N(@PoOIL9IraH(<hdy5miR8Z(t|t5H>qNsj@N+)xID};@3N^mcW3_xPOga^l
z(Pj_K^ZplM2KJ!T58yFNAA|d-i6C$U4xs;N5w<Qe^SMpN@WdwCo>zEd<K=<`oR5o0
zkJ^*?TPh5U3&IQwa1s953ApdQLFYZa<~yAsb@FV%z1VsL<<x`khE4IN6#?X|xn|$$
zXh6VFQ=aRGF6)&<(TOk<MA^CHW;|nY<&*QV1@ZsEN?6JMno%0hDy?uYN8JH>{?!VT
zdC@aqWw|bkx3um%i88FPjSxjW+?vWc_Q@RQ!cnC4fG~CYL)%Kiw%<h>_blqqChM=Q
zA7X)##M|UMEiPwOsT|LSFV5UvD*^{*0t0gYWP>JTI)NCKZ-%4Z?;#<VO%B~gjVT;o
z?<5(UiM3Xtra=8f)Z9E})!w1j*aULacy=@2os;uM>>4Jxdc{-h>w9sbYqO1V$%?L0
z=5mktGdr&wiBOd5-zp=xhx`kioRP3Wz$DGinh0E$r9!Rxr`s4S>#9_2I#fNZY=ztK
zHwakVlGZ}YtDdedbvBE+V@U3FPQFsMvz;*3F=VOBmeg*pqp~ZUgu}BX6*;v__OlDK
z#M&{QbxFzPyW8=d;m?!Di%zf04K_ar$zKodWXV)vApXu3G!bX9>?&ioq@Y$wigc|}
zSm2j&4pWZ4EnTV2qvvsrwz6ow<(ChHIF$~^Wm>;A=M9g()TgM@4yNv+JQ?IEb!Bz8
zQ!@((FVZcDbx;=LO04?mD*r<P3E(E65RPjT+?KQH)N4jGP^<~x_uK$DQ2@$0iMw|0
zZ1JgpzQyw?App$wKF`{v8@RlO(z2Qv-UQtC3!WDAnl7Jhr>=h+x(dm!qaMD^p`LmX
zEetmEtz^$CmCdSYkh<%bv2s}*+cBTn{c7B<LdW>;#)lc_<v8}fCjrAHB%^1_7|Axh
zIxc@6rE#Ryd0q7Fr9E+BQp(OCT5T#FuikF%3;$1Zia38_bQcoukKn3+FWji4x~Wxq
zd<f%}Z#A=5B1cxvwXF5c=_NIf9cW7Ix$4{<n#8*Az0fvprjOI856Plf9F$I>-U>=l
zrZSI9w4{tdy8f<y2z~;0wHcXj-8D8bCd~Zsdj@@|>$-G??@%pyTP@DR;^3eGJi+C`
z8sApz-Q0G!``Yb~JGCda4{y((mRcXkml|vu;;-ux<7!s{hkj`ZF$UFgIHA1ec79tV
zW#0IE^?T0Nd9o+tafH_M?&03zlhX1w0m856A2xJfWe-0%A7hp4c=D8MIMJM}wrGwN
zrO_JyK;V#HY;}wM)mE5o{qh*t8*|;%J0!=zmwQz=Jyvtew8PK7H!d&~jX4<faK2U`
z@iSZaDHwG}>prW{rFE;VH~1P1>UIhUV!49N|3R4#B7+cE{0vz-mPVIhk>bfn-3*LS
z+dPQM!>l6@qp5u?Vwu1k8p_(4j*fGTvc;-AT%v$KYk@?6IE|^Yk(TCSPHp1)o$Irs
zwmdM3(6XYY{HrC$*O|D=Vb8gFE5e3tG-G=km9nEXxNm4k;;{?hXZj9>$VR+SwJ{mM
zBO73UX?d}kugX9EYo+Q-8);9WNv8L!sN>D-{IuJiwjnudgXJO_isdqXavtXK888C~
zXU2BQ$<>wEEwPjHJ@(hD{oJD<lMnXmOu9BKv4|S(*OO4GBzmtvt|gr$xpCdC|D{#G
zj~d{o^t#_7tb|>an^hoca@|d)41Vfl;OFO8t?_ucR63>s`iFl%8>SARO*jTL+@)k_
z3#HYXf$VU@@!;+;kx=nXFN$J46X5I>Z~!FQjZr3ZNp8CIsi?Iv5XM3I&Q7j*rL|s@
zNW~piS$)aM6UK9+-A@2MCsm>?Z<#!Dd54!2nl&~<+**Xdf61mb#sd`o@2mVk(ph_c
z+PKB>I|%?#r?<@=OS^!lMJ?5uB*tSs1Bxfa>ul*H;9SvQvu;k#8%bc5b~9MZcyf6?
zjcdBv?2(Fqx;b5!>3(SEzMuVMrC=qH>8cN;><S|}$mZ0VmKm-3S>)L`I6kevoX+=U
zf8gaGel0vmHu<!F+R{Oek`XR-V%1PkP_W<r)K2=?%sgo-u(ud{G`A|o2vpj&<M%1Y
zFWdGqmdo!3%7aY&^dFj1-~VM1fN?WL;VL@@I@8p<0^ex9m@$as6e)MI^#0}-i=4Br
zM@hznpBh=zpW9=prhE{J?$uJxxhw%1P#Yo(#!zo+RZvqkw1;KYy`u|6Tc4>B!3*i!
zpuMsi8Y-7Gr*smZDnI%U1c~HsS1(!YGbdkjj1={*6HNm;H$(lG&V{*AbCPJfj|J>#
z9G<>xnY8Pze%+s6|6Dn;F}pO(FrGbci~T!Gc#ZmNXR%d|bi8WYld+A`uvBgP1^>Z^
zaIGbJ`Krdo25@2ufzh3sweXR6*j5YQr)f)%GUSX+TGGxPGC?b(ym8#`*&a(Py~=YR
zdDkDBlZZ9bjfMijn1yAP3HaT)P=s|J$2~`0dQX}%rwqHHr9apPtwa3SS#y|$M!@`i
z%oF|K1e)uOF~m06Uc0rrby}~ph%YfUN2A_PoSf_w$;F$N-Qjm}(rlzKy6yNz=ck3d
zpVDXY*yM|Sc2wM4E4Y{y+gDaf=}n<;u7^mtX<}UAcl=EGNk4d!l<3p5*e$=5EkHfn
zz6kcYr+ytD+vcJX)@GxRY0#1!mqo%)si|mt+X4tN5M>JJPTVR(`aR%jaL|7`%f?}C
z+p3YBiJ}x_oU<^KxWvD8N0GC`+o=%1k^Noys6+kbhf2xP7I-hh%*M@4Y%CJuP2`Uz
zOVcd3iGVzN8-(g?MsZTdT~ZW;+P~Juf}W}Y-PaQ+)<;l~TOxxpG&&;9i6;~<j*ato
z-5N{IXCSU7Ct)PcZ1P;IZ_&?~g(-SMxPEskE&<rC;4HE%gSoV^>Tb|XTKWhY1KJN+
zg@a#gDzYO;l&3WMIr?r2objJS{0f=)om3fbEV(|$2j@XcvsV;I&Z4FixF>OTbk`I;
zuSR+GJcG$jC{sz#Ev@Hr)fe0&54hC*S55BseTM>VMbQIBt+AO{JIS5q0*N}^?i17w
zwd-{ZaxP<ntrYpqC*+R&Al@>&k(EGbHlq*9kNm9EM({!ztOW;3eU~>H)Ych!o2NsN
zbr8`F$4l&@+WJRl#jJiO6`(SVrv(-CARSqlv?(zBq9xZsnM(2Io6{zuD5-R?+S;2v
zkhHgk;$vtCA#{gzOkZ1flU{`PDXP(0yJ^=WgZ(T7W$TG79g>k*r9*EG6|)<r=0*Lt
zauj?7R7r>4xP~+_ZgByJi$&E+G6hOtE{jC1X+3rX{*fCwyTa&|21^ww7|G01VPq;S
z90C5nD@9ob&~&=h-+oxF;^4e-?`23OYPnP2+;I}@D>5V=_}`Bn_x=wTz+NV1;5@%1
z>XyDlCA9y*{!|Vb*({2BmZ&l5lNsm4zRgEG0%|2nkJCo>&v`qp65NSx)2b}B?xa%=
zYdfV-BK;SQQJE@vm$r!jC2-7hZHjss9eN-%Ju-_vtZcPx`Wt0U7D@3S^yJAX^h7sG
zwZNWzG#PsEK!(^rnR?drraVDmQ2q&db#FRq;?4%jXc<OLeo6=4_9^w@nzDf5q&a0w
zMyv%?+3==nbQ-#yOeS^AkK5PG*05LGWJ%tFBHP|EXC91FOc13!SZ$J9l{PlgTg-CN
zJu}mp@<WSXXO7*^WgUv@R+67$qocUfXB|8h_NU`ij;sESA&tWDO|@xH29jnmf;T1^
zo*deqqwKOQu_lH91Y@2jEz-m)!*h(=@hEjo1PpA}P&$j`=;NzcUa@GDqAXdNKul_w
zU@qlj7oV?($ynvl;Swi4M$S#yUK2nHb(LWvVjp87)%<hh=Z6#>Am7yo#+zr&oNFhF
zsM34YNs=%*Ubas`n{3u#u+an%u0f$r3Pq3bX_Jv#)N<4FTfS~vr*QYhzpE!`e5LG8
z{UG;z=@Xm$LuZb7Gvh;HA`LOrTVtJCBKpQwoGELq_&y4a-{*{ONStI>aNAN5AMB;{
z9jghJ{@-b^){Q*7N*1Zu6P!(JocCG(LqZ=$*-7btwopBK;b8vr3fFxPn&F=kDG@Fx
zW~krpF1_Y{=j$P{(+`!5wui&d9ZSutKdf;1FM3hyJmwjW1RE<9G1I+Y9~>WcK2LnL
z%UWfh*O9tgaY|gRV;69%qNSG<QlyWD=pJzv{7^iF8q*mHqm*`NmAH9<O&LDJ##>9F
zoQ!r(33y?{${2w#@rfZKgo$8AhilZv4k6?lY^9+E3Gcn-Xw-*(ZYn1?J3l^q06d{1
z-PSb0er6j{6P!|HT#2F1!X(j6Wr1|#2+~Ssp%c8+1s3)~mv!dfV(;$g+E{k(b)0e@
z-!2uIa~(8BkUZ^Tnq76}H}uu-yD1wqrS|%QPghCxOQDFj;(Qj9Sqnq`=qNw=KLA8r
zKu>i<z&+-1z?zF%j>07uT?3ZD&$+rdza^YP5>1s*A@*YIMLwMW#b%lkcS2DbdAi16
z3}l1<Rny9%hfd?N>rU|;3Ldt3o%iNucD}owfahGJqNqdPU#K>4JoCJpyf)-7W@Y6U
z#?4p|%-0WQ&~8acV9=JVH6G6~5R2sI!C`cjPCbixdw=+x|3GP0rRdwt+)gtW8x@XN
z;-X{qv6hwIjF*!JB_3TT1ivuo&ON}y*dEzKCqV~IlOoQdIU<B?JCv1emC_hL)RXx)
zlf=M5L!gn_GB`SdYHWUAE;>!n3tu7QHg;y(37UWo(mJ-s+3*XiavHCUQFS6EB?WEk
z9>rPsffCn)8rqON1H?tH6q#ly2_rZC*NvT9)+?!*`p@@hs>ZMa81HdO=%m&^*x4#3
z@nw*cAtgxcxJW&gOPQ`WG=2L5fvh_lO>=`iSxBw;4(Z>0h)hA90r0r{DwXc&@Q8>?
zpCv}<QY$DFRLeC)SM}G08II=4EyRtRR|(xNB`!jnwd+jotnHG5T`<z<he#*lLSvxG
ziC-cDlC2~nguR1U!dtJ^HK}J~a;xR&7?rYh^KQ*Q#5+reyfEPM2A{Pw$W6^8>j&gU
z(O!odZ5xaZFT;xApvL$!X9t@2U4jTakH{L&ePay5PV9x2QJ`rPs=Rwg?8U@@l38y^
zvA&dFrCqnv#*4j^rH%XSVC)=@O2|SMldNUVp7ANX+JoT7q3UMbc6I-}4B@-r@s9!e
z9I%Rex|zYq-qWW`KFR&o$VW>^E~(E#5dT!X{#TQHfIf)Z`Gn*v>5=Sg;$f;t^h5?t
zjW!JE<aAz_d!8Nxxs3WIhk=MF!vY(nws>qfYlGCFRe45|1`e|dvBO&BPAl0rc1pOW
z#@iS;4Qm~A%U5qV=k#w*-&||oPpa{&A0)VB@+wz(+BGz!y2a!r1ieVFG~P6(qEd>!
zz)*_GDSMmAV+?N^<+D&3E(9gP^Ejzy-dxC;{$!)(L$p=THcAbiS*QID%9`&o^DL-1
zo%I>2;{RVg5LW-L0A_<*H|<~yu*#Y)k&Xd@v+B$KK2^MlmU>c3-C>fFp)%e}c^gw7
zA|?c>10lm3n~uAQV6%#c2Zdu3Hzyipl%^=zA&lo`uZ~LN#T#pdCl@UUEC1?^QR3HJ
ziWir@ciwbTl;+jTg{^_fE}7F#F~7(@bV-e=+pOt`2an^)!hgo1cp2}8llqEaPhrfO
z$n!hz!r;%$I2(4Z%jApwmXt90Z&Hvf&-dpNJI>g6Wt9deC+LBRLETR#?x6}p(gXxj
zp)vAV2@B;tI6tUd$k=gr9f*kip^T!@_GE~h;(GKGHd{*=GW^xBY-Af-M&lloFP6gk
zPZN8;@R0OZT)-^C4#KwSujQ!ip3tkdX`4}^oIIg<CwR1o<4JAXbjcddJwr>qI)?{a
z@mc5|oKp4?WaofWvb~Iomh8BQJ$|cKGa$P%gB}1!uT|Gjz{+mWPCj2_Y=we@`EUK%
zC(}D)EmkrqbzF5`wu(5|GPr?%xvwH(aM&HO%W&C*h)gtyUw}7IAFfhp?SzTl6gg7_
zP{$EJVit7mQ{<j8jNDZ?ogzbK@}7EaFvGtwao6U!zefy*u>g42U<b4$<aL@)V<+fZ
z66##=>vu@$mLgJD92TAYh0r;)Q=>Jurx(ccyIFcb-v!dkerL3mRiC2pj@)Yfs4jxt
zaHVu31CsDf+#Yi_tmt)DT1L~pvUY}vnK?S2d*Q#D1OR%F6Sg@nB7j8#@hqSF1BG$r
zYzRNA!|6(s@?nJ>ngYIohB}(2x`seJWDNjBbK9?+AJhu8WtUNoy#&YWfl0O7?@U8W
zZfdK4h~GR<FRpbj9r_@a<=zF|ImG%{&QI1<;L*Wlx58l1ow-Dis5I;@;vrXfPQ9PA
zMngAnsUGk3#pBD(uPn&eTVFvf^|w{w??F%f65SyaFzlWi(4%a+?;1>^D`L5K4(7xY
zl+YuvRY!~`g_s9}9(B1Uh1j$o?~{^r!~fMkm;zllt@b@OK7Yw<*IHV$!MfV|p(;zI
zR8^(Yv%kp`?8UJU@Qnd%u)<`r?;h#CYQ@%)Au9Gg2Gp0!71`%bfPhY_XbYTV$<YP_
zHR)cEz}d_hQ%09hPzeZRSvo}GiJ58bBq~+JuFR=hUr30X=Hn;OSlL?|=3?T$i>7=i
zkA$g}oC`5~<#uZ3TGg6ypteG7*JS1Gnf6VnDtL?k?4o28eJ?6htd}03qrN0FJ!~!^
zTdmc8l$CUW6LVaRAc0aV9|~2<ESpXfQ@iPS^H@p2#(k*L^Ai0mdSxEJ($HJfOX)R2
zw7{7gB2jhykRun1o$mA-x=TR7(Sz;!U+AF;4sh49Nrs)0(u#uVajx&qCrhF(>z<f0
zaw;b6R;$h7Kx?y^o}LeYE5WgwdXU8tnBy}uJRwh<;@(Ra0}7NNFMFRmBm)s6as2ul
z4TWH1_(N8sSxUO^4VBCXELiA1?uF;DC}n3*4wzj^N4utxqlB-LxYdc1ar6~ZXFFF(
z=O>nEQnBqXa(@(!-lJtie$$lCk+`T%b0psm;iW9DBJDqvON@X_h2iX5RZ`B-M3GRf
zjyy5TfFwCRH4&wIW{+P)l33WhqAdDap~oh6{F6E+Wij87-;1*4rk!T8Ziq{Cx<G-)
zSdBSV)PWC`)SSVe>=YLbYuo<2uATKKMEsCxIIDkQ)Zzqr!`a99j_7DGLVF97mxrVg
zGVY+;uEuyxB}dARj*fCQt-Zj~-EJ3W<{1;tLs+;hqACCi2HNDIJ0R%)CT>iyJA5q#
z2{yk#q0cFesd<?u+uiB9cx#uLr~j>LScycT$u3PYwHNLuvq$7`icmZHla8|h@5j~g
z@X!}h{&5R^ZT$ihyV9g4v&=N>?<jX#<KqBKSY>>=+vLOZpmy(vByAFc7`$)W)&K|H
zEuX`;W|vU7q6yl}?4cJ+VOtB9mnG$nWTOR_LUON$Ueiw8yj@sIcHV;-pobb8NUjkY
zn?bg+|2HQ=kgU%D7T=s{VU5d~&g0PIjSTV0dPC-E+a5vl!>*=j*Ea~qRi}A%me|<X
znQ5hEUHKWy<sab$?)x9@`V5qmBw@csC$q83kzHvjC1Ui;${Wd#V9Y3&8O<I)Wk?*Z
zkzP9K+Z%t5O!_|9G#p%Wxx7&C`K{SGD9<?4R1+oBEc=(={R{$9Ni*%CMSi1`BpGk1
z)c(ta(_5VzMeX!$l^W!0)mN~Q5H(p{_eb!H>`(E&3?)IH!my}L7Vx#|h;m8?8%r5E
z-BEpg98_Ma_mQQElttH)KMT{AITmGJ&fHnbYg%(oJZJ=zm@>j3#fpDp6%iTPh0_ye
zR$5FrQBvG>m`wjG$VCEo4V#qR84&RD18@ZrCFcMzsz#fRzvHQ*Wq+#P!fd14Kfy13
zgwN}lD?H3HD;$?oQGH~8B=5fEfVrG(+f1oLX0ExSa6{7jTj58~1sVHk_aL+gxgem6
zd$URtuY1d`k@(}DTY<YKT5wCq*|F%Dtt1R3V|nb@=%bN;d>9{%ELCD-<z<qIMM86P
z^L9t{#@gf;g+AJJ7L*Qdva`^_>93aBC>;hzvy&4{>paxO+!P3qK$kftz0TK~hzvi3
zfAabN6o7mYC^`*b2@L9#uosz7up-)=7Jrm$1`E_0kLGYY?8#>@hz>;HW%slunhKJz
z$(zMMeWD;W2f;o}WuuR;Uia_WQdXDGT*bX}Iv*1XE2WG)>5l1OVaV_5T6EkNf5cra
zh=r08v!Gz~rAx&jtpo6k*%b4?6q0_;k?ErNWj9g3_3@hA;^AQ7&6Hsu{@3N>@$XDZ
z3Li8Gm1P)+z$blW!z2hzQH*&&DXlMyW-B#?;S~@t?0Tq&uAs%+GTPg$N_~Btx~c-#
zuA-QwgsElCFF70@&Ch{^MeEgg-t7EEXECky{Y82=W!uy0z=auNE5<e!;88Tu_X{t^
zuJN8WZZUb&0$@3wi>d;gR!d~YDkgQ{Ipu@ISpO+Bkl*d*IkA!xN!7`|OIUSH+Px`o
zBYFBH{&)d2+{FjVpa~wIxonjgX1<_6=v*?~4sFXZlQ~7RJ<uxFqTAKX``}duBnp3r
zArzRNJT#zsDoOAwFjZEd<7Q(Q_VWHnul<9s$qkG>EHZL3baRHEj2-?MuMzw|(4LV0
zi@c}qvnksrY*|{E?y&OHFk=1r4LM9oL{m?36JVow{9elzBJ2VKg`nxxFEKHcpfV4#
zZQ@MfaNuRR@`(0B1re`gAlo^=yD!C}ByK{v)~q0IyDi@MaXO6Vw|vlZBq~03iGw4v
zd(XV(gy=2FPv(k6PSuX{Nwq42{|`&}|DKy6xa)D}?{<7gNd-dEl5p<Yt%Q+G!*Z}3
zX<`>-z2agGbDnsg)Rp&TRCxR!`xH7(U_n!VeFOz<T}ca#pEy1^rTBm+uEEwy1`u>L
zCP%0e3NL<6#?vThFUGcbhLw68(7Amno+Nowb=vALEdTzEt;C<^KM&`3|2EXSiv<u?
z))yXCtFnW67JKc0f~B7ggI%t;`%vq7cGr#K<`Ew7for8BLS;0A<HsWtKH7*|BgRhb
z4GdDwqAqfbqucIF+#RyS&~!rv){ECdOSV(5)T|5_tK)5e4x6K~Q-!$26}k^gj7koc
zMwMJ(Q0<MjA|9{H0oeV5jg1Wq*LSi1KvDk(#!rFrPy0&Ci7abkwRPG)N$l7@cVv2e
zNKIDd54Ccma1E~Zgp`Dbj4uU+w)<30DnHp+5d-fZ+tWhgOM-PMvxjQg<ci2*AB>{g
z6*hFt<&mw4_RWUjpt!e7ObVtLbEI@OSlk*zaM1eDv=V|Ae6|_0qP=}3a-=R@EiJ=1
zI%*`+lpFp3>iF3tyYBJ@IXpSZuZX!~m(vHe`mdB090e0AzYNeW@2C|9A3?w`lpBZ;
z?0IJbcgux8KQr*{_MQb_0H=;7RT0Bd-e#T5!ph>}IS#RdAD*REhFq`dE!)_wpx}Nj
z9&-d*B`>8ecj@v_-e@ZD#IA-r(2S9D&w_GV;qVl>VTGQeqx{%jO=8y@hP#i+B$r<b
zLxW8deu|!T<(Ft#s%%PuI#}<U-o|3ezX=<CWl6F!M%bcZBHJ|OH4IhBr?wZ1=fDR%
z%$>vK6nFBPlnM4#q1gpL4Jcl{o24&9(6p||*e^fH9<oCVMP~Vdvjz=Mv$<iD`~|`#
z)>|_*%n-xcIDo5HI-H&P<!#a9%%&xrR=diYh|vLwm0A%lr-+Vb&(w&vc{zLM)?;;g
z^=MS{tndMGjgZ-5t(9%MlK;ed`NVSQhvD!~?#URs;E!bJ;>>%l)5qZshg$ET1W&Y!
zKw<VyHICN6lusUS8#-vxV2?H5<q4r7L5P4T2>!=U))0)ctBiUyEu%HxHdWdv4kJkF
zV)W|f^7tK|;>%M6jT1+cVoGcsD=UjSlf5TJQOfdGDQmQ(iT`e|l&`I;P)0ok#PG$y
z;1KGJNS~8O(}ZLdF%LybJQ2!~MsaPD?jqX1KPrf3S^?@xudYDcLW0{&t`n;%iL_Iz
z_yv641y9wYd;ETcINw-W$)NUEtTM&=p>zx#bFQpVZDl04wyiZ&OYifiR0N`_s1r}H
zn(U^zyaK4b09yw(>CdPNLB?i|EuOWt7Z-N^4jy`XNEw8z`g@<;gF$nAsEA;K{^JL{
z_?^ztmu!AUv`S)H8pF?qJzASP$She>yB;h^Ln@!<`+dS84H@iuSc*I;$EY9#z@DCF
z?yrkWY!1=b5zcB9l%V2p_CIgE^cQU@2Q80kqz`E~ElHSC%yxdcBsQK3J>H@6ncBmr
zP7pR&qz}{+pY4l=M~o~gJ{R?69N>0SL`fkIPqRh-w}7(BKwZlNA#{V3wJsTILOuM~
z%<)we#3Y~|aBrE_9A{;%`;8)O_9*?HCt*OFOl6J9hIkG%w1yJs4qgmPOZmNZ;06PB
zw+-#l%SrLTT*P!(^nxOSjj<8vN-yydBGbZ|OgeFaEct(k<DdVo6F?s|&SnmjAbfXp
zSuq@IY)D#2ahDv14%K6q>1Ymk3>f+cS52dwC6?~Kr|dNI$f>Vcl-9m)iJi!!AD8tv
z-eB@4YH@?Xirj3Cc(}0+2n`Zq8#XyA*ttHKMxHocbXa)@6Y{Ua0KP8B1ha3^W-#z;
zhn5)avYu&?iL>PLJ@y2FJu<cqg-LuONGhD7G3>mAX+-$!UFW2wIRj*$kEJQXBNvCQ
zOSX<#m?XC`FRy3Gjc&8s)fhE?#JfN4&@bPoeU8`uULK+P*rE?_%YGKUxrPFVNz4G@
z_s;alQwf!6X{M+P1Szw*Syr0aIp-i#{l1VUkulfa;dL4M;6}lZ_Jh&%<kr$4j=^uB
z6t{dN<}pZey5jNL6q)hv>K28=V@Ch?u>yMk4G^x)n=cr)V@oA6YnXWv&3GxF(5D3g
zdn9ZfmeR0_a1dO0mX{Qo^z0ZP@lO;#M=cuQ0MYWLCQn#qAn*?~?ic;Qa~!s&HVdW_
zsYP=QUd`(<7|?9Mr&Dh&121s=<7eM1fOwWSxU7Gsb|13nQO<qRuHmiu!XRehmlGk{
z6sScpMFexNO5{D|jFQr0a<%q8VZBK>Rd1@Ae!&(zcBAVrAvbc^jwAJaL7(KF9Ko-K
z4h)R^fs!(uP-zRrDE^1r6$JW`Dy#Cw`D6`!i`7mBtMs}-!dZ;NalHQ1e1TpVHzuh|
zu5YlAaSN+53epf&tVu4dlpj7h+c*LuZD}GXyGA`^G$+C8vzp`xc022_LTpcNAfnjU
z&lP;*5e?TUf0FKd)!*AZ3LRg@qiw%GhHxRUN9dBpBAz3H2tll%%65BHKH~oVpn(2e
z<mElZ!#yf}gdW8^UQI|tVE`ZOf(!z77Xe-jKWu$VWsO(xym!`qHAj1xY?7hevLWCE
z1_ow6n&R}(KSlCi56NFzHbDh(j)PcvbDnaxT^!rlwizm$z?)#V%cVw&=0x|C-LS@1
z)67w~mp@0Jt%~FrE*@Njr6z=QUzWVbnv(6JGm!*lfu=LbA5KY=W5^3&?Jv~KEpghj
z5$71n_~UIcK%bZgdeGWK7&+8W)%wHn5s4XKl#2!5hENA)7Z$L(C^z1bB_ZLtJ!gja
zW@RtlXM#!E8d-+C$7<Ybsy|Ku*+ZZPYgL||8zmHd;k0aQM2m35_@h|GKs>_>D<8VQ
zV3=&~YAoX97a1r-5EFbWw90)VIYp+-^+k6uDIz0^iB`cIJvE%mf9nl47>$S?T_Xy~
zPClss!C&#079mM#iaFhq`w*7J(7dn6&c?P4qiXvvgY?@xnJd1lJOP9m+P+&F2J?`T
zV5ug)3NM)*dX5wR5f{EYR02ze>X+XAqZ=a_i7Q!>v`AFP&U=b=U!%|qf%gfG+t#As
zl0m9D79l*y!KMkI4NLsa$4QTdR|5*`!wel$Fv2{4GzfmVKJ7nxEcjb@OUt4vjfMjJ
zXQZ;xoEU!6qp{detJOZO5QUHppTx}yf|6hxW#75t%Ovh&r)1N7gzXAw16iEVdh-1&
z(%HHCiQdMOX1m#JdRYMrms9769uMS?k}diK;%QY_c|&udvB7S6;2P41v4bYb%K?V9
zifI@5D;&}o1slUlo)u5#mPSlSlZ*{I1DYb%^I0fteYJ`?3ah|~&0~*0eWF!kG=sko
zF7En|x4%dMq_tqV@!~MZw|(wPHqhzhC(Bs=DI__j4$fC<K^(4_XvP43UyJC8G7f8R
zVM{>{Hr%(|Uz!CZppd7cGm?%nT`a)2s42HsNdpm!Wm4CIk1IPiFzf}G|7hIbOM!UG
z1kSs<mhZJyRj8}?H~k|<^6eVCdA+~xz!%^S96`;7NZPotz*w>E?;9jfkZ}<uIjZ?J
ze+lYxC7Q!d^z~q$!6L&d__3nvd6HjrB*VFC4NLs;XO&SE)SW)C;Hz|0n=hd=5U2yo
zio#4{4n$$PYfWlClwghuYtG6iDfTfEVujxH7+;rv622{$@Uwa5s4`GUrOCjzd7N%B
zzdO}7zt|){OtG-3LKXY7+b~n`PG@+79bad8gFRz@^8trFvW2rD!~VUSU1Q~4ZWy8R
z-Q?W|5*so};JhN<Q`{g1`Q~Le-JX5_OP))K`zha?0^>k`EP0;#3y8b`XcC>$*C~nr
z@XP-3(y~54T-T?y|0s==SgK96SXZPHO%Jt)I*{i(#{I1#_gL_JRmMUwR54*m5xDxN
zT-PYjqvj9}crNwZN7t%CjVRhm$gF=IUfwFEj;ks@m#bj8PMfN#SqvH~>3=zczdzb7
z|L(KNW<8$H^hSO9e0MX45%%5`gTG>l14Dj>4bq|zw*IU5y`1SK_fE+H63tEzU>i7I
z3yF6|AFNNnsgSWn!i1Tmw^oam<pi#j4c*s05tUkk(*O8^jl!(B*c{==>Q1}m_B2x%
zVSD6iz1MOW>)c<X%AU+(dT#wxSR~tZiN)Et_Wc7nY6<}syW`g|sG_sRkoR#|1t{9A
zB*t0H(yVyssvF*yAKo?{>Ma*xobLD$F_t8A|M<-pm|ykFH9NF97TlGktm^YQbX!8m
zQpD)MEl2<RmV0o1<PxUFp)!%BfR`Wgqfnp>G}uL=5nTgzD(matp!v-^xB{DpX#%SN
zI|8N@$kLc7JoO;H`D--VDrA?lh5X5@nkjszQ@c@*i{VMX=MR5`6KA9)-hif9Jmz0l
zV#apKiKBMm7;=a<LX%d-i+#h4W7xk(lr7;X%{FY9T;ljXUWnru2XFp06ABds>@8<s
z%5l`k=&zmcsBSEuuen~avokSe5qLcFHaP>v{11MQd?l#sXu!O+EBxNc=x&*XT!LM;
zYkrh;x(xR>A>$p~@Kc%RVWmM4+rtF7PaGrLbn&Y&T;irArj>BgmA#Yv6Ab1nB|U-$
zN%ou12jkv(vKf5E9M-KGK=omsOS@0?kLn8wajpShxp=+=U%AnWHpfmm+!$5Cn<vBx
zZ+(pJ?@o>oT5JdhIFm;+K+89#z@pwbYcQAxLbl=pV3TVv1dyn0#$05;;hxj4sKE`R
zz9eBZhp`iIe-(eZrxXY>Z@)P?D~>N!9ndgR`s4Ry0h<h8Ia~Fs9#^M_o3YG7CZXD)
z1X>UkUCEjVWY=q8f30_2X>MRYfz)4#DZ-#y6atTe&4}zKj)kCcX=1)GSTH!7X0rZk
z9YI>h?b7feF!DLF5vY#8VXXGcXA}|rLC{1naSHEjm<KG_=>8J;SZJVyG|hlwg$y8S
z5E==omXuY^n%mh?HnsL=NFNJe|MFOVJ$}a7nZf<`Uny<%hKZFy=Yx*N?Lx$oTC96a
za+pV{VP3BgUlmRknzR85PRW-R?>9m!?cPs++I43xsH;`Lys2w>z`W%c?9)=rDsf^B
zZ=M$B7fvh)CLFcCJ+xWsBo(gM_E-RCbVI7qHgKE9%vJFsfI<NZ`C34lYj}sohZ=5{
zVV}_S6uJJEImxOHWaW8o?m64j%}C?_=<dCucUrKta`fyOZ`P+=b+;E7x(w!P;S7Q6
z{e;+NahTR~wAnlh_=G9RZ+&#Jg#HyDy?-Jc^3xpH_wV1|7ESwDm}J*6a3;exmxz^r
zrh_zTIs8lv)CTJqB<(Bk(HJ_VHl)Cr=G&pG_Sn2<uD6)SJZ!eGQMQ<`_-tU1Yko90
z3XQw?hgeDw?Yy+}<xZgNwBs#$aLD`V?5%L=^+2@&VbKlEIZ&%TKU(@7LS?kWcPdlc
ztu-`55Z{s%9KmWD>ci_T;_ToJq(bJ&Fp?<YqBve4-sFZ*ePQq?1eWCXf0oqZvQFUi
z>z7ykMM&uk1TKTBN#J;ioWN>KRW$w|9$66(0hkrf@$ZMxVjbANZ<S|nh&N*`Hcd{w
zvLe;I+n4m=hM=~tR%y6?*<IpYXx|H=U~yJ)HYM3&y9NWGT^F-yCs?6n;1*raC!B)S
zQRHEzVN&!zfG*HU)EVBzy@O*5F#9R7dy1+1wIZU+d~}$hO-S2ygS<wORf)X#4>r5A
z9JG-|iIVkgCvg2UW5@G1O(;t?7wF<CakO^>^Zi;)VW-s0w&^Ix7WPtlb3GKFCc`1g
z?D)vpCL8Q{8s4LfQcZICNj9+(C0fWnTvl29!gR}9K$E9k<OfUk9b_7{ol&VrCEzKK
zO=(ngFkOmzyw62!IsSiSBw9i5N2EPdxhYt6T{jjlv&_I%5&VtPZk1o!w=DFn-&wD4
z3OcZe))0R-ua2aiP=b~T8y@vVQ!1)813VWOy~Cxf^V|irbH@Mkb$<yN&nNB=N)AI)
zJBKd<ZMppeJE6r=bj5#2iF679yqh35oZe4_v!k5r$T$7VBW-0PhT8qrVc`mipIAY-
z+A%mF<G$$S>4juNH>8;K(yL&@D09sbpr&9Y*=aQ7P^K7($E)vPRh;zrXjE{sBJ9OO
zMnnsQ$beMGtg=R72f<CliD|32K5<iUFt%;OIIX#r&gLiT6n}WKY~gX=woNQo{^QFs
zfv(nMUjK;r_Vfl4`Pj_mp32?+Zt#JXH9CU13uSMFCBkK7g(2J+)b=ZU8n$0H%R884
zIGHIUXPOc+uo(EzRtemXzU=_sVB8$FfV0aFNot^%Sqo}DDT|%!md-KEq>IAek2nJK
zx~SOj4$c*lq=&6X!FV>th<0ZE>)F}N;nkeTi9m?8@4awAx$++^9U86evX!pV`s3{#
zNiKd>&^BSmo4{<wsxF30jak0do3pKYf4YtvZvG_IJAw-DtIeTOPDQ5vFKmMj+G=Nb
z@!;YtG~28DpA7ClfvMhqA!CcKxuDYP+rg<gNfVsX+jPEnO>r!fA%kOfw1wfo6U>|V
zEzY>u?$xso7o3L)sWy?8YaVA-H&>Z2rAr;&x?c#*{-E+eEKXfzyFqfZu(hrL_~`g5
zt=E@Vhne2zkzU)(+IJMKHDRdywa#f-$%1^^cgB6OpG|=CCI+Rz-ccAVbBPd#B*Qhn
zwEmjU{52Ou>KhD7%HROksAgWU@yvVtp88cBdHB)yo6hfx&GU|>$==)LA+<Q;3+6HX
z&uVe48`V9p7&GKqjYs5jb8`Xg)noAE3#%OZZS<!<ycrZNpf2lISwKTohy4A@NGzpX
z3E|r|)M5R+&Mj%^fjj3$yiwYIa{U(gDEKDuFKtFE4+?}59zhN1r$jf9o!MBBp#Zmx
z6m1*0b<@rWU6d5dp{nm26YOj)gr7=@Mv_&8@z5#}h!m}{{*h<X)o!T`-z~k<YCWfj
zbBl{-vDe*o<&36HyXt}*j_7}<5(UwcEMc_3=4I|y@2WH)BQLuzA+<PPuJ;5K#SjQD
zNg<BDr5agoAN{pHo_Q>-pPk}8Xn}!-6pC!kGJRiG$N>!vXTUX+$MX7;>(uy#oQ)Z7
zOQ9=tmRW0=8)Q~*(}c@yNo0<KB!G*G01)L06B0HMmGrODGIS_<z8poC#_v^xS-KqG
zEA!v2Ovfy+(NIGE%T!Gq!RV1(Mev@glzy%Z7ka_dX@1;}6;Mijy{_n(keP3Q9;e$9
z885@9G^Id_oNrKP-kHTVOWF+bk@)0>#&VQSTJui5KlvF~(+sfOdg$(=&@$V`X_w{i
zf{fEl`2|z9h`DZ9^YDz8eo&D3sY&YqE7kgYrFpB%)-6)2unlr_TqYk4J6z5PZhq2^
zm(J^YNZ|82$N3R|`qy%aVA!;M0gjrYBb!E1pkeRicYLD21%*H$FV|zxtmC?&-m#Hf
zVS&1)-XENy&MP}1O_Wh-QM>uGgmjXrZ_^7uA4()>4J%MJ$g+s{dd}p_y?=PV<9kNH
zvPDH8xvxZQEJZ*UL85y1NX}E#<RLNl3SI2KBiRiI?q`eSCb7}izd~@;T(2=2=Jh<^
z`FPfLSKv<g3hM?mB+0f}{^6CHfQ5mBhc6!fby^>eTY1uY47CMR2NT_aVCP=WFo*Rg
zJN=RqOp9=#iF*$;3Pj#FizP=(^`}obaccKq38Lf*V)m)~UlzWA)Bsfh+&L{Q_b&zq
zg0#}6B%iltY#>C~azCA6G3+MzSTbGkwlbF#$iN^A(@|h9oc`~s^{qC`_c^=0$txQ-
zOGG*VW&%Oa%c0EKALW@vC(8}wONL_qcAR_*sDR0(JoTr~@a8=Mp|hfx+9_FWX4AZf
zDvg?>N98+qk#QD_jcq-KILl7o#5@8)6({R0G1^?yqan#L0v`vOqO}HilYR{O7z)P@
z?AGH7bK=B>aF6&=1Q_xuy4vvugmQBd;ie!Do*@ksrEpM-yuV0V;qnP;(gPekgNTLH
z`^&6S4juU5(bCxfSO)3q0nR)Cc`579h_+Pg(!f*Yoyqg{Ue7U<r~Lx)vqMBg1li+Y
z#2=!Zc65MKLb>tKzCR2b#)deP^9-+EZ-b=X@Peh@@&Tsae#dPx_2(AfhsEdWrMd&F
z8-$hY-4i1LyFm9;d-zhTTsh}Jk+b^<R5BQG|M{wm`>ACzoPO6ZNVA4K&%Gi#!31XN
zjD9Ti0G)+>vfdEXl)+?2tf<i<8l*PG4Si>D!*9WF*%1m1OKix*y^7$GR=}&mkQ5|+
z6~|h-x>##c3d^aLGZxsp`&fU3+K{gaB1!p&2M@>s*-)-u9$?g?qa+i0UlP-eaH;a6
zPS;ytk~#-6___L{vZ0E@&sSVv-Eag4P$#?(Gt66!5lGLC0baUoH5>!e->x;!3_zX-
zERgH}F7W&B1x~VCr3_-}Gj|!ZfCa_jQjh@NW!d#<*a7RTy({mdz3bZUrl{1ckZbnD
z%EMLen~!WJ2mfQ_erKnknE>b?f~<F9Ag!rzXIQ*WkIIfvi_yY?GhVLM<7=L}#oAGW
zD-brc0&a)kP*ZK?2PyT#q%FdjLap7<DbRVl7IUtxpJ)oyNSI<2R_M)^xoNPYEX6}|
z?LPT$U~=%lIw_K~DX?$(n$nj8X{IpiQfzyD9|{&fSLqDE0%|cKC+||5L^vOi^&b=<
za~5zj6NnW>=mq7mj?j<@ItsH52Ypvk3CASO6*R?i)4;xVv{eo9n+Sed#RfIm(5n>8
zJb3OS&~Q&s%nF2}NSb&?CH5e~O-NCmXkrmt6iIJ#ft=YG65aN6v7h9vTd}I5uHr?r
zclu@w3cX(!BhrT!S-3U3|HGEd0cR-7um?{JzJdX+t!mP2;=AnRpdJ>{Mio&?^y-|M
zcn}17vGu-G$j6|8?Jf|JpAe|gK$M~SQ1M|hODE01Rqef)#&Fd2GP3!}5^qRP9`<B7
zhcH*e7CNO`cw*zg$O#ub+c~B!0O*Q8_*K`C0iy^tn<V$LdJxKV!@HRHR<Q9%5Ls|A
z>GAcd9m<1hDof~EE?~#kNXuAOd6z0P4;4mM5CyL(DEwJ=7xLg9CiUb4v(O1XC6RjP
z>5;feHGIfG5fV2>P4;9y)&i}(lF)R9?P3Pki8vJbGBQZA-nW%+Tx?XoZ?2)^yJ-6^
zks1A`WHf4P^_H)ouA5y=KE^aLqAa;%AT$Eka0EuBG$dWNJxuh-t+(Hh>SbOr-h7JU
zkY*;>2@IF&j9;c54KvFHNf{v*6(pe)h$;jpT{KoI0)KpmX~JQlW2D<+xyoS?dmu|!
zumuj_r|9<E%clFjyhH7mowX7r23<;1v?xJYL<u&k3)i2vQCfQu1#D`x@>E~H<kk<j
zMzB+`G0S%o1LYT3`9moxpB{shNQC|Y5D^-2SdmZ$>OyiCH*j}~;^2}CA;w|{9TzfR
z|MT=2mb#}=+gzEK+Nlh_0a*oUrO6*4@>9yso(13MGAKmPdDI>Nhsu`-eelT(CZ<eN
z@ngVgCfYJs%l8u|mEEGGELNN`AD*vGK`|r8;$myR%+sKyL86s9r4ML|^TOmr{4CX=
zPlk^3`u!+`ozoZ*5G@C6s|DW=f}_HrkA9;<WARIpuIBO)Z>kck+mEr=uul{tO3R}N
z(7t@vH&GquXXYFCppA@NfLqX%|85D^xzdwJgSnR)LZno5?C#9*d`XwcAopOf5O^7{
zeL&sTIr))r*!}d#ivqBgVOzkQh^Cz5xg~jJPkD1U;HbJHLurOa{J!SlSM(=mp+)(~
zUWqGHF}wY=jM6ee5RuJy=)@C{sbrWbu9}qEW~XFh)|<-SBzG0a@=JP8Q6zaYO)Q2C
zgDoV@y`OFlg@j)=7XXnXniw}7)4~V(g^Zoqkl;)!8n0`6GZr`MJ;wOD+!FjG`ZQli
z=jmss47KOYx}cQmbKEa!7$0MA`99a<{v}*U+Nisi$zM^H#ZdI3?Ar@E3;32$P){m{
zWl2S>G-Ey}Uz>_zMx+PDmNo$KN`gS|D@Ta<qbP|F*za~OD93;{fFN|p`DD+hO&Eq@
zhlugim?lMRD9S?b15(EPe@M9#Pz7*&0@)MSXwHO~!3aGKt)H(IQE=1o94=XnAM+0R
zu!9^q2Z|ps|39j}`9H45`8u{Ywr$&NY^SkpHpa%bZCj0Pn~l*}P1|St{=PmxJb%H?
z&Ye4R?%<r_?LZYS8#d0a<nfY-BxO+cwoU|j8WtI0kZbjTsw$!|4W~w_9a5*N#WZ=Y
zk{9yJU7J{%xuv-HQheN;;lMvPum9)f8S}&)FJwuvaJK=7uR_}z2~o3h*1ovjsk!b0
zzIVH_vY6AH%0y9@VB}N{|MROX7@|YOB_Q?VD|T2e5pX;OjL44>E4j(pVsTWB;Re2E
z`Lw)@qQ}w2H(0F|u~wm>mDZ*fY@AI|^#z1lNy~yRI+e1N$9AP<HHhRGl(q8gY4pqH
zqUHF@jxcM7b7HC+0Q_KM$n~%kr27NWA(|Bij!Fx(q^|Vo0x-JBm~t&2a)xry2;nUD
zj2E4qzYdyD&Mfs}wWokCm>dcmkn);a!&%Vy73LY&@TKJNcI%k@7T=!z;DI!6ynm5`
zX18jg)#0hFvdK^1^NDzog?4!!H%!LT#_T`)!&7|>XWZgzwDM_~mGb*;KIISJ%d=e9
z{d#6Goo5!GF8c1TXQMuH_!Lc8&5P5sljeRr3I*q)$NjjRF0wlrtyZs61&Ioejmj51
zcU9D7@<HOON5|!&Ya=n6xiOYF7SlV;De9!|Uz)jD)|gW2){58k$RS=`n3-$0fQvb9
zHJRoA)J?+JvGSO1FarUw#{djHg+~UGA*FTyUQc<G^YA$7b9R_622NGcSDZc{4OOt>
zJEUbnr+Z&N-XHpc&fcU})RsGFQ6*3vabFLl0%K?&5&tH#s{23@c~is(sszw*&FZnH
zi5}twiaj$j3qyF+v{TCxWm)^}7OW}%MOPpcnd!97$2YeivoOkdBa!9Vf7}9GP7>H{
z!IiQd|FMQk((Km9PY37XQ(T6ytU}AL><1Vmv(9G2zI*hKQ|!CtF{PSSD1AeIx=~o7
z?{CRXii4s5!y_o<s+C{MUna!kFXFLSJTLLCx*2VgAE`A_)j4yIS#ckInva)bNj9mF
zt<<KAPECIE#y0<6iwl3-(tWbt1Va4p!thL*gmzH)0P64}9Bw6J@2yJ$eEjMRF&fsf
zQp-%w14M4ZVGD0^Z_-RCb``*V796^1HrVvOD^!ZBaj@+o)k*6Q<^r%+!HA#1fMf~x
zNR?c;Xa_q|i^HX2d6$i@x>cX4vH=HcQVYi@lZ}`Kli1Kk=aQfc^NF|&xr8OztQs<h
ze@}Q*S0`rKbV-Sh4_f~2l$>LYYvj|pZ=}0>qt(@EwJNcWLlU53Tp>=$U!F;BAtxPf
zrm}KQm<K(<&Wuo^>oC?B2V-<RYglx#YDdkBAjY4nhe!b|&#G5TLz=J3NAZHEWc}e=
zfyiMbu7D{i!%C-(U5Ra|rX+t$4$k;A>7+-uJ(Tk{`^vhw-g|<!OO~3&vsw(Jwne2z
zse~BAtO2g(>7tAjLYMl*i$JzZEg+Xq9x)GAA$P@Rx6BBWwhYW8Ki!o)?-A3w^m8?-
z{lR>d&MAoZxs7j*<{~v&y%EZa!2BEg@|b*x<vS4rf>s_v7r%r%jE3yGF2#jCLr`X}
zx-lp+^WqfWM4zuPRKz(x51Xx`AQeBV8@*Izl#wPmBZ<Oq;i$`!p{qf8SRJ-U5M!s5
z8smr0K}6WO4k01n8?fEFIZz-r;aI<CR9Mo6soNR1%>H-}mr|WJ?Y5lG?o2YEt;>Il
zK9L6uQxK0b`b(dax+ThUKfjpd#yMGadT$y}jZ(d(blu!zsI&Amo(i=#fxDcg<rlf?
z)<pq8Cd5ih1#Rj9hi1x@3YPUiB8>ZV7qQeB`W)-(xl}>?A-e&(Aeur*jy9%vSSLHw
zRW&F^hT25iK-KQjI724H?^hS~#AC6ast8fBKv;2e#pbH)%u<^LPc~tf*0c9)nc4CJ
zB-uuokk7A)pbP@PsYwYw)FlB@XkXLL8q}e!5)T<1w{oqscW~aa6HLazO>EudEO<O!
zf%a@Kz9KMa&r8u_3E*_+RFyoF7Bmn7HVG6Rr;Tv??W|8jV^gMfF9?b&iSC$7Pwq%E
zZrSbRi35qlnZgba|Lk2-GrtiCkrUG|)N_~P^Jtu=C{lLs1S;m^IO;^jj}8W3qg9Vi
zt~x2ssOA#trPq7#z?KXd*YsU7ulj;+#{$YFqC&Y?b9n<c=hO<V2U@PnlrYa-pnY!>
zD_KYx=C$$+W+(OXa9|Hpv(+1!_qfkLKKl`C8;8c!$w<F1{!7Q=j&o>qqQQBH$>%CZ
z^ctQ1C2k0F;M3!{l;TB7;c;mZ0Aq2$C>fDa8p6pK9vgQE9zEt9r!8t05RHsEdM@5r
zt)5YZsk=0nf8!)&06>ycN}c@dW&UtHfrVPs_(rik)bU|R!FQ8g6eoqlpxG=i+Q%Vl
z6}tL02StVh!8PC3^?~l+h($C4RP(Ix%4e&qc~}{Kf-H~!as%}c>Y_BuXB^qX)J(}C
zfT8EGak+OA3xT=uP7Fk$s+UD-Hpy^5)P8ccKdezU!98F)%jUjdwZr33;PPFpFzZCp
zmPCbWIY41UAQLyhEB4Uj3%M9-n+kiUNEu{lh*l2C*;vVc&v#e8tT023Kde+;xVELX
zy4Y(bP{e4~#ATdtcR->Mi{fsUB>~mtyGpPVgSnDlwuM)yOWDC5GTKvXN~9uaXDhjo
z)ScVK^5h(3C9CmuFNSlpAeT-jfm|9rLQ3E%CsXAdKL=rsr#@s8ulO(Xr;XztAk0p2
zox4U!Nb)cA_^L7N_=x6<DbgX3$s7uVOyY7Pn#VBX#mj5m%Wc%INhbR%?<^4diSjaj
zL%mK%efgO^Y4fTO;NIa&waVCf{@lFCnES0<A~y8ZxbyzbTp#pJE=aHPw0pGZ5U_9v
zWj{JnonqG(N}5EJieqaeD)8yBNR_pjwBS3e^@}+Yvv6Q;b!VvvZlMgnYlwwED*_j$
zUUUFnF?VQ0BHjdl&Kpe@pukG30k0TJhbca?p}@u$GU;p<Y`;h~>@rCY0=wSVg;efM
zx>b{}nCNDo4+n#gloX_)Hef$Eq0PVKienoh@u%9vx0pbwj#=adEFao3k2Ecx{`c^O
zYDM>6B~c@H5SVHQ>Na#d9@rWO(JoNt5V=?iiEb?x-X~|+_xMw%opcr(FU@~kBBlKc
z0o*JUs`kca)G?O?Bv}_5+VrN|6@r3)1!WB*5M=ubBs2xFFOqunQv4w;bBjX=S+XKa
z2X-WK7Y>$86UcsJ+yCru3Z*AT4+t^O*`OpYOLsA0)FJe}2irUXX*yD$@mex-A>v~j
zcGhOTxJYwdO`01`2@-kY&m0z|Mx+OTqM}j<eEHspE$?F|oF)v5qDDzr12sa{)7j|U
z2VC*4<GFBt8DKm{r0*ncoF9yZT%#myG^au*swlKxJYuQQ-5czN59$KAyc<i1TN|GT
z({Nr984@ag-<JY~F2@hNozId)@)7AQ=y+px16@*m_etmL!f0j6oz-kwSP|lqC^+Eg
z&)~fWlV^QEZB{9CoOed{=6EV<ie{`aSB?$dLobY<!4LFwU)4g;V<xT;!enPjy@P7D
zG~Z3C$lT<|C4blGQ+<LV994rcOwM{=4qjHXM8fz+D+-=3l0>U&${<t%u(iBRv@w54
z{}PB0#>b8<YhCPIDzPBnKfE8dFfsB5XIZJ{yc{bYjh3TTbH0qO5P?`n??Ox-BEpXM
z8D0G*`2<Y4u~jr5R;iBim(Cg0F)wu2^a;6nP_HIOOHSu>=V1!|&Q~m?B0Ov^Wnu(W
z)XNvFFhQ~;7O2939#RYPH3%Q&2jf13*Unb80n;AFKuY=y>iwV51qo*{$?IxkcEsgU
zLOC!!kXfl5<_Ic5XOfg(Qa8v)K@E)id&i058TJ>YJ~h~X0iyMV<E9oIbdF>(ENrXD
zZ;Q-(V>#~3rvx;Dv&7}khSsDlg=<nZ1(lNHXkb0;(4qefnPp`=MX_?JJs{`XaC^)o
zsm8;>JwZ^?m;T^*A|_i(-DK%rzuBabQj~w5&&;vee9&3rHGHI%>!UqT0KarOm@#R9
z45z6CNGpjN#0IcRK7`(XS!D3WOsRtn_>;$?U=&j~E+{zd%Yd(yCkvHFrXB<#I8UZp
zJc3=N$W0lin4aW@ItSjOBX5|8z)4vI<VbSo^<8Yn|9RV6s5VH{gQ*rz30g7Z$Y5Mx
z>i)sYqU#_7rCe*Dk}bROGbx76<o;lk!ab%XW<R@>2DuWGXdy~sg;0_4lCwr9C4mno
z^5^IcIp6WUFK_PgT{9CxBWB^8K6WK;2PT}pfz@>`cv>FMAQ~OY2!mq7fvSOppe%cf
zx2?1Obga}64m9n68%{?mEjguz+0VCE<6;dFNPvXX%|B=RmPkT7%8CPq#mIn>RKuzC
z8myip8!A-?<;3BbY{JXl=NmwdF{ljN4pA>m?dYh{dT6h^V&z6^4^zPE3r7*-7+XyY
zvHq?WKv#xyi4|8<5#2^iy+9Y~nA)T%jsx-AHYF1e7#>2s>1?}~P+)eQ^z3yG2d+{U
zKQseJ*dQ7k>|tKD7i?L5&y!EPZe?ru-_9jsx7SUL4I)>=3W8j6^#PEhN!5!-GO#=8
ze${U1j47%HjkO#W@z54M5U&UQj|)JKAR!(L1?gS(_GxO@87bp9@;ux+;;_U<C0slj
zmxPKrQU&ie^W2w}aBdn&ZG@ismAhK_Fgq2fxI$XV#)<4fYR-kM*fH|y1y{D|{i)Cr
z*F#SxPAJ`OgMf()jXY>iC1JY;$5f4rh!1FTEf?j0U8S?DFlL6K<`sVz^QpMp6{~9C
z3NXrJQBjTgyAj>%wN-1a<8j%^xaAzJ0FHR~QzQ$6s$bT=*<^76vz_ntfUq&~8!Ar(
zi~0V-g322sKt0Sqs@<1u7EsUb`43<Z&==zr>n1`fkV(a|$c#v~NmN2P+Kof(7RyJN
z!D_xp+9zkb487zZ)22Ek<O_<clOJzG$!?HQMXLDQ<UOCq(dJH)iGmvKXh9IEDeYj^
z*ecHW!Rn0=OSR>sawjqeY4zH7N(vTzpje?OYl&+%OC}Wu8JZfW0L1u83Af2gMq)MI
z1<Os^14+}{=zu7}Vvj^!zXw9pa;Ah@4>;jmupkSwxR48oR3(?$inod2ZnfzV-D8-)
zMGPC62asFlY}6`2{KAdP_6y_wXlGvtYibFFoQ{^LR?kg#Y%WcYXbxLswEa+!L9bYx
zi8?}`Xb1H&!m2^-A?3>4M<2eJF+3Gv?O*AIlNOODY0cVql7be37msI9q&^j~R?UFy
zA}p*LB}(DB#41rmVXBfb>s}oiWW^%%tS@BIoJy9^_?ZhMHuG;VCfSi3cu^zpmX+Aq
z(At$FaBOO(ZlDA*_0OB}Zm_E_=1;&ZMN>eZsR`j?9g5a>A>ZYNRcNy^(Ps65(&Lpc
z*4Yts;AyG#?R~XToLRQ<<Tr}KppWcAAOdDUBqv)wwpE2HAM|69%^g%v=!?>3PbkQ>
zAX`sRaQ#YRz1mxjP_#5^`LQ0YJNPBaA)tMyq>82D*k-PSeS{N_msPG&y3HO%{_`>Y
z3k)@<st9JL`-Crg5C2a|Whf2}#MuxA4bw1Ox+WXs&lzIGWNbrPm#s|@>{ng^1;RvI
zu9ahJexFaonY4V%dg<cU{G!-#k{MQoc5<;qC1JCNW(7seBb>9s@zZ|*gb)Nk3=b9*
z<5ZL=+!0RYQ>7EHQT7BJexmTRr9EpfXX&o_(ID{<Xt~$&<Gu4sm4!h2e)(r|lbeMl
zVTc-xIe%F%rbm5&7`lK>3Ejd%7&TL8Jl34%lIq@t$<7^E)^W-?&^Q94P}e#9ODq}%
z7k8uzU51{?SXj$H`0u@*pC}Asmox>On8o5~I{4vL5eshG9Krn*!@;RN#*|-jhdUu>
zSH``decXZK-}7+?eN|;@AgCl9?*T?_ekcw4+wS5P?~;3$-D34Jq&M$9`MBV)Ru$KJ
zB?G#Xu!ul$p`?^lWgMJOon)<QR!gfdS}u`|>_EX%NC<)4%(PP7$ks_pkh>sRBp2x<
z?_SPlQ7R~U+Uaoyk0sH15Ka6Az~`kV$#30p``k!syErQJlebuiEC6CXc7%E?w#oFK
zm4dUC<}Iqd<0~>5NrkT38K;IEuM@>FEHA@{pfYiMnxM8C3&K+^M6OxAm6R;hsR8;~
z5PWyM7rqoXUXR!19uegc-IZbiERCqHfCXM-ZdP2~xsC_B8#rRc1ZHE9vd@lMNt76V
zu{Z^b(MI7lN;sRGSpWhjZxOKgP}1EGcbx~5dOl1Cp86ab3-JZ5Jdt9|Mh$bDNZg{c
zMYQ8Q`EbJo3uDOCEB6AxFK6GbaZTv$>Dn%K`LW;z{u`E9G`Bjv2I_>77q$_<xTrv?
zx>SOm>>K`<7pdR_tOG)VLD=K)LZ0wmaKEG?<Sp4HK!|t6&)q>u#zxJx9O0jeLCv01
z?8ba0c>1c%my$=vm{}0mcXUWu_*8RCEd`wZ!MI6K@L@Hu`2TwQzNG5J&4=)cm|#*g
z#B)gM)vd&&hz5XObcF?Q`iOEdYy>{j+|;*Llo4IY;Mh%_LVb52-&3n@e5&xEoe?NX
zo>)0rbMp^`6hm<BAt9sG*OGW~w-|Mh8$^gY7gdmdmsX~tC~C+vkpJ?aHRkZTI>3vc
zpTew}NkVlXQ0xyujJkZLyHYJU+nP^rM!FU{duc5OeUfL0_YU&0L$e;JqqB2;$;GmS
zmUTaZRNk}<ZjPnf%dt=g&1lUUU0y`RQ>vKa0q+Ds5jWt;r@ZsgvTzn~o?B`Y=*KfD
zbcUcw9kf%hBdGbYGR&L|@;TZCp#PMTn{CaNjY8aH@y^<u#*VD_?-&d$TE(sE-`1SB
zOitH{V{q?nX0^Cu4b0QZRe|>UQ{|tuN9@UZD|Mqb$C_?9qEsK+N0dc!x(Oe>+~8AN
zbkjj6v5xjq)71cAikmrt@jwNtxos-19L2%d1R@bjq2m!2=3j(^yH`+6mmnkAGD@wB
z2VVp%B56u2lOl%aQvbAm12*eUS%7REO(ty7=R16cH|7B3(598ZXK3~1*4nh<zj%Oc
zwbA5p_Fm0%28_HCil@sHrCY6UDJBGB(_PcM<I&|OYsSJSB<XlDs9e#mUiRuE_GIV7
z6^F!x`MT3zX%>uc%_3iGrU&;~nJF{aYURahEDX@GV=*3xT$$Uh=<L$x3Y44kcfm2^
z4}k`D7!0vPcZdXaJMXupcp%GD=y0T!|8N(Y`Gw4qiatqlO3*EEPKZ;<#HL}CNK_(u
zVW0at3(jmJh0M^$c$*SG!JD*T<lqLKi7nop(@(g_n5JT&LfsJHD)5JSZ{!ctx$dfP
z9bY~#wA+;W(rUn$Sz%TNtgR^xJgdB@h^B?90aNP5m_cTDc!IakPc?&Lnm~WK`PTZ!
zDP|VJ>HE$cu6r<e7CzV7+_OTkI;^5OzrokNpf1UgekEvMS`gaH_Rs8iKu3Dyho#%*
zVKXYm`+|P$1(8O`wq`Gs(x!(fqCSGLYvMm?J$<V?25^g^iE5Wq45OPTm5yku5;CI^
zX(<Eb%HY%{%HxecUj_#)9gei!a}pgf+j^2zkZ=Dh;)M`W`{-#4b$LPaw0?}8Uxuni
z<W38F?hJ&pE<&U%y-yhGDs?@`T|D9yplc6y;wVKU(Eph{0xcaeyihaYaw)n&<UYRl
z#)$O2k!|AbIMxqjxt^KzkKx_v1C8mR^Em5>sUn-i@GtSW3|!LV&U78v=l?olLbv36
zjGp6#!m9R`rhsE+91(Kd7|-AcPj&)B4LdZ{N~;iCxl9x$W_xHe?H~Q7^e$c?h#Ccf
z0{W!cM={7E3n4cvw{uzy4c5X|vxx7GSP!=f__hVDRPQ_(avkerEj14c=Nvb4dSmD_
zOG<F|*ol?OCeM0Z_FTSta&^~h9(Wv>7)qMW7EMy2Y@zf8NnKXSBa?a76S!M=?nsD5
zf<>e>P<Y1>YXQVeYgcfIhRb&J3a{SUi0MW?yr$7tXyQRj60xP}c(WmSh!MEm*~elR
zWBKq(u;zb~>sWs<j?zSVI%&$*ZFj9iK?qfYz4F#-L=;ZGs})Cv)^oOg$)lnUMV$Ze
z=LDbGav2OcNwl(8obN74D){#b9?)=``=;uYppz2dk58K)%mNTIE$k7hvTnjLFu7rH
zoUpfv6|C7kWHcxCG2QKz8~LE3_M$9lVY6ZMX`wv8;>Xt548G_c4V3!2xV~Q0uU==U
zD;CIh%i5dv#+O4#@Dl|>?=iTKq75Y32zDa0x{q{YD)9f{)p-W+-RAx7D6;H^zip;K
z&?pmKBm?OLrx%Q&TT02W-nxL(BR8m70h>HdbPEEh2XqDMGaGXsV(aMiycmC+5vC#F
zzR4kE5px;6=o%b0VsR(aVHKNm`a;g#ts-iM`(kl(Q-2UES|1%GeuvPB;pd~6HXjV0
zYozj}$S(4=#<wrRpd6ErTV^wusng0~b870a=*T=q;GRy3Ezs$fb!5l#EKOJgI~3%o
zTu7sE$z;6;^U$8pw&fx7w+t^BWk8dwbU!A85*JdEYo}>~;CAE1?ZQ{w%ZN^qO#L!k
zyP~^3;(RFdt$y<)$lx#pelshth)e1!UOIm+sVXSAz&`Op_4vks6F;)F6+8=L9YBz|
z8$2z0&7eW*#OcRb1e`LR_|X92B%#WLSj<z5R~=bCh)pkM+PlL0Uw{<rd&={@_Qp^)
zZIEPm59xx2LVH{>t_qDE4vR?F9;AM2^^FqHw-dd&1Y?k^2SP-RDC~bZ<da)H3NchG
zD<ptFVez$ci|w^5MK|9y$Tah7@{wa{B$}Qn0aXvq3|<>}jv4vWG#rM_7h&h$hO^5(
zWXzEM&ve><rYjo!#*HjX1<z8WV@aJmWG!lZHdUt;GbzF0w-AllcySg7Pz^5tzrrJ_
z-x_;|&4EU|(wq{{3!EF`RI;%d_!VnmygikT4g&J-<817595YPEc76*q`4)g2IPG|N
ziXRHg(S3Ga6QlDZv$4(nQ{Dq9)YkbsHo$0K9_u;hA$kP9nmRFd^F`G5xwA}Y0(WdS
zbaHtt>0L_9#`Hux7yMbsjQr<!O0$qM1;b`Jv7WuQV%t^V$POYq7U!MF4|CrYZvkzA
z(jqzw$#V1KaOgSqb`y#KdW`|jY@z%G$ud=lBW=jxRDlTMB92P5KJ-}?Ax`A>^Fywr
zm7A?SF;Pi)CL!HIzo^Az!J-@~e>RN(@+|?NBGTO9k64@4wyHC^aONIf4I^|^Up44k
z>5Eo>sY)!xV{(N4EnfDwBhpS}by4cLaqyhdqcsdqCM5y4@iMP~KO5j3Th5ac(O`8c
zT#BG@G5Y6oWL_RJ_0lneLoC6pWS0nY+{OXjF}yk7(rT56p|LS|R(Oo;8MeWDs=yr9
zCI&7V7;#PsxsZYnjpUKcs^Jq{=94vy-DdqMALt%g%$VO|70L=Z1sjq?Q&+*XwZ(>}
zG`~!YyO4%?iQh^Q_kN<4mN7kWSDhMwbhFoJp?TeURfEHoJTVZz>Yumq#Z#Ba|NQW8
z+F|sXtRw`OIoVaO5&c%3k|<Ym80dn@BIi1t<C4nvMy{e6-%j+dF5HyJRu#{pgjY-r
z`Q#eZTbayCQNSiVC)6*NDaNCZDi_0{mouGN(fJqFwySt<xaf>MWx3j|`uVlOsyB5b
z)Kl|>uj~|B-*BhA8@d`$gq2FfZ;l;lmOaz2rS7K_F{>yX+7X=3it0!%##KaNs4!}<
z@oZhPGYOdS&L4-vAYbC;rR~ppQPwo-1d`wQWGW!I4|;<YlJMQm$P+m^%i<<lJM%XN
zu2Br6g^c(8@D-E8sON+T1s~R-w{!V>vKT8Hp*<xNBsnzD6hoQ+^Jx=*#I&>B#bC2O
zOfW)qA|v)#)7Is}d!4d@AvO0j+oej&&O)}vL@`W8`jPi7HV*mi)VFVAs^;6`!M$Wn
zL0{aH$P_2guj3o;QMnH$MHOJ$>{9KLO0g?|3x*sEXQA*k*F@{J8&KXvwHJC`l=p7&
zO3?NL`=0Dlwli2?t5R%|EWgY|A<x{Rxvfd$gtLP(H4Q}C4doZ>Bitg!9}UP(q4+Q{
zv3F4;Dq@#V(|2l$SZSpwBa5w|-a-+UOX89cQ%{*m^)^dGsc@1<(#A;VG>2<ZzGbjZ
zJarvV3z=Cl_0lOJCV8~HxM|Xr$-@&NGhzj$t$BDQJ-_2y|I?GSPS9^U(v;v*2PXE_
zqgHv8b;hUnuNf3t;dWY#XP#qgsdWPQKKwGLVB7~9u?k6m4i}9byf6s{Lh9R<HqlEm
zJl-OO<}hj{q}0f_=b|*qY`5|}nR6t3BqvE96^yv-L)KV&AxF&Ok<O}Mz6klQRqzWi
z^;w^u^xcPp>M9mx{%@vN<Xu&GCZ99t&WyUq3P;RWI0H@j%!f<j7AETge$BXYd9cv5
z>Vu*B!I;q1s-o1LZF6mM+BwHz8uhv(^UoOZ8v^xNP4IUDI_mAWvPYol8^T87G6TD!
z?GBbvRtg=+$5T<rbGM1Eyt<w_C4h_zN(JkqQmL$ouM|dBK5YvB3SlK_Hq6&bNuZ1R
zu?JGd;o4FtaVslIaBOFD^-kg%O)oP>&cqUOO|5sAM>hORjkB?x>$E0~!mmzmT_gs=
zamH6Qn*W9rXAQZshmzpS>-_*4UD7tbTk_*<pm4*L>qx!xY^-9?ei7!0T3(z%UWqz5
zf$ODYxm;Y&&`(=-s$)hM6EtiB9CTeX%rB}N);H{_@hPDC@o+qV@m&eGoE!2AZ!ZEv
zmsq0_JrWK?T*_aH&8%0N&Zt{^I-6I4LL^+;zty6Bv;SQgxqxqbNe)&b7oXY%{Wdoo
zaV1$QhC=<REpY#vI*+s;{Lls$#oRLicV&OS*6`_U0WDW~0IM}trjhd?^q1#X8SESp
z@J|<%{`Of?qXUjzPKPbdHrrJn)n^c!-|AeRz%uoZ-&N`r)zFAI)uS;uRqt-6)e<r&
zGG@J~XRDhg?C}B;b?D^j%fQhp>JG;EIQDqNY^mO%rdd}O4-kr6fJDgbxAG+&>6WNe
zJlZ0(qQ6a!>!GAp^O$7ha2H8iYX!aFN1%BKxc!6;dKNW}=hAs9&w~>1B*?-*_$?9L
zR~8{hh1x|tg^xki@PP*nKrkaTJPvnZBMuiK`-Q^hM`jBtcZEV;@$LK8?&at6)wVz9
z@!Bmf<%)3d$X3hzAF(*3gjR+_3Y)dt>AyNHmUZ3tV+5KcZ$6K4JcKlyTqH-vHg3N`
z+aTCid0u-}FfcIWG0Ghd>J(;<DXv~S9ymWZ^x<dg^gAk>l2m6S?z6;l7yagP`7W6c
zf-OL5B$q8j0$5(Fr=&AAJ-40eb-F#=+Z?g4=}h`7h%CK@(lT3*^xI2jb!+g3BQTpK
z<8b`9?WXJf5{R%OOs?6w;m3KNOuzo&?I?)ypFmOT7mPSPs)kjcb=q!A3ZOz_XKG~`
zzgL`7_YfaHRwG%30Au#b#<XJ86B_ny3J5=8a{79y9P~^oO7F(P3`#mpyC>6ds&bF5
zBQ6VOZYIfv;UX;}85Sm66RTzM1m^pmU!hjH&GFGlGvHy?OM_^)5h-$L3O?KTJ)d-@
zxoxnooI3dSjGnF6bC%?5<};V^+a<M;Rp%>u#Fl8LQb$gAeB4$8UUwT#=L-r*xMN>^
zb>gDkeqQYV)&gzX3huWjV+&23&zQ!i9^!h{xzLvv?keTaGcGPKPLq~mB?YJ!@*$|i
z-=9h@%a)5FiJ?(q44-8u35&?{(zP9Do6xbh&Xv(-Tq+!$?LhwfyKMjdZfMUXwPKn*
zh3ibWKu_o`@1$@}i8@|+ieM4Y4gbW<f0lKYPbN<0oDlzC&UX*_QtSg~;XH-;oDul0
z$Yu8N6g4-gUa>;Z@V)+JFuM1cCcdU@I=v>1LA%Q1YOU(R8S&w0G-mZUAyDFX;Qrr!
zd;$Wy@WN0Ng`}YkvdPiJ7Bu?rO<}M^PQu<nOxc`Pi4P9XKsQj6;B3__L8$(&-Gi}0
zxj@UQ?-{$cceg?*SFi{~LRqa<%d1_d+aisOj4ahrBJ#E{d?_RHS%km-SnY|`W+_Yg
z6|sTy7}K`&kZbH<a5>bN++f*&Z86zXwU7q$fH*-2-Mu9Q&N3>5Yza?<B=+fDXI$<A
znS@b3g&i`r*s!`KDaXwn#aKc~PKR^yJ_R|>OqT8LG7gmgMB$sVxXGnB9g`Pg%?CCI
z-nvb)-Qv*_7Wg=$h=G>pP-&8n-P2SV21|05#3J7eexJ*TXpAQmoG<Wu+P7>yOj<tA
z3H+>d`u3Qks^+%W>tlP<-DZ20UPshp9f}^<Z1$25ny1qELg7Ak$A!=&{$`Cf6N@#K
zw(ip8x8yt+&x?pFkR4CS!7+4C%HC5-KJNY4oc~s>G;+GSW~N{A{s=lG5DWRdr>)}i
zx;1F?owa?wXji7-IoT}ROyBgX$>B=jMTUZxr@U(PtugaWj4n<AXH=8fqK*Oewk(^i
zmkN19@%sxW++h~EYTmlE$K|S!*OBCt4n3Hq`ZTOCl+TEHgOK?~jTb4$l|kc@lF5l0
z9&X;AP`cjJc7ifid?<jQZh7*;H4@dA$+s<&Y_A<OZb9)gZyI09>>_{$#_ScN{Nag6
zxBXr(U((FVv+UDdQ7FP!CAasJ44GAV5Fdn+wW++opDt&DU*g{IGqt)cC96I%2UM(n
z{aeFE0UdB!4@`QEV0%E0dJr93Sv;ZePLah{CSnIa3j_*><(vi$SylVb0dNn@4+^bj
zb5wll4Q#R8PG1j^r(M(<t@(V1@3>XSL2|QCz>_J>8h#d}kL#9s(Uew^GMGauzUd66
z7?nA&Q;_0HN~*E)clXK~GOb{_5i0rgA;jF%>Z-=2`-voq%Y)$Gz#k?vf^C~eZEzpQ
z4u|RoS%rRwR6?+%S~*spwnT}`<larG%pelI*^|&?;QT`G(~>-e+jRvXTaQan$vq3w
zg*gmIb~cxfAzND}fjHP@vqGA#h9BH|ulL>dc8AXvr8g699OHTGaa9}7t@y-+TTlkG
zZPXPmK3J<c(10m8ZR+uW+lO$gq42NjKvkJ_($U;;$mo@YfGBh`3~NF;l6^kA8c8uk
zZWj@G;9+W&XyPzFWtFV(`plD$*6D_hX1Ara)KI;;&1D&QY;T@lAq4lid$3d*e&DF~
zy1CvMUW&;8jFs1fGreXJ-GQkFRZ$kMW@_sF^Dw7!C;RpJphY7aX?8Yn5N&pWz;)dv
zv-g)ZNiI7VjQ-4z_p<`^d68FxnSMWjw$mOs%ZzT9tHnB^c|4Io`QEo*OwWS_dp~b8
ztFyR3q+PFneyu*7Obal*4HW`tlqzWo{MA63))ndndjpcEd0sn3AO(jVcR+7l!1s@1
zl7hJ8nn`IQzpt&$XkR~4z9r3`pI7>#8yP)<w9u$~j`k$Io)6Z)@A(wX2mWsO>t*Tc
zOiVe||7Sr0eQq!mb`|yS$=7Z+WUd;mf(pm(3rpFh*{kLq6c&2li?R&zzHa<&tQgX)
zfNh5kujB;&pS}-2<emk*^UL<;uL`siXm-?LD%_K|0Y~Pq-gw?e%0^-~Y)L*>bsg1i
z+O_9jo{oBbfA)E;7KnVh5r^sZn|6Vu9|`!I#*o=If8UlXUJj!QM`_D!pA`i5cfV}e
zl{omjEaD^<_Fvuhl<1!xkMXh;yzegCvh1jR^;>jP1ytQ4s`;fVvmlhhuKkdN*(*(K
zb;CTE6G3U;fT<B}942OLn!6~hVe=>$k+eL#v|6d-d|m?kLsu^3Ov`hwED}Sn3)yU<
zXYtbSrECv-jdGnyusTQ^xmc)rm_6~r^X|8gnQJKE2EjVpl`A-0agNqkgtwUb9G-8g
z?)gee`Q}VT`p3X~akTNlL7I&+d6rDjVa)yc+$^C=^9C!r)0fT2az4NAHi*Y)A7ygr
z?Pk)2V23#9j71oN_uia(?HDoCa>#Z%lEg=nDM&L%*8;TTf5~P&|HZOcs2+dRD#FO~
z-9mSFbw-zC<?B%0^9AT?@>qYCO*f`P{R|t|O@yXEE<v7b@fTRHGf2$}m~MBFRk81L
z1h3QAMY-A3*Fl)v2fCNgAs>W&7!p)jB=r7~B(oY)obhg64C2oZ(acu`7veT>CaX>6
znyCTS8|p8c7zGd|k1S?F3_cZwKVGisJE?bw4smdukTViqMUs4@^!-zlfAv;1jU=1D
z@BcV^`M{u8li(5X;YQ!v^jl0;{P<C18T#zxH>xlggCSd2u4QI>z4zB;xj-!ii5<;4
zQQv`pTWzA8H#@omH-+VmVjpFOL}JH25`~5A#6L(8I+BttL(1CF^HjU}${)rT^m-8S
z<;twHJT83Vn?|{yH}S~kW~9o2yDP|cQbYGx39F_TZBM9)s8Jvlhs+$Rgit!vxY%vf
z-PqaqPDDmEDWTt(^G+d*4sJPDeviXH8fBPZ5K|G(k`Cp>OL=IjIp&Zr8}j#WTY5?i
zkd~HOI0JgZKwU4zFvUBHn)yAptv~$CkY}+ANv($8>#o<z<NR>+m`EU4$7?<iLo8Ev
zh>}298~rO<$+WAEPh<^$lkpNdKr)BBuVT;pSn+KKa~HoC$#L;EvXs2v*>W(%ZAFG8
zptMJ(AT-h07b@BP!{Mgj+eek}@3!@z;m1oi9bF!z4%`x_A3>9By{qptSsd`Oez#pX
z-tEajB_(D_3F`+`a)A&i6~-sz^_T{*H7|*gO3{74U$y}(vJkCy#!@7g@HVC(P#{Z0
za`lIPXyl6OX1i8-FeY=U2C||5G<%L-*<clad_X^sB)F96G6?$F=QwVCwWguJ`eo>5
zUA>UlDPtV!8bh`}0EvIpsYND_b+F>=MraM<e&Ao_g}+#xyMFqm%R^F#SbO~Y`yy!X
zq68yF>3~Aek<C}a(I9{35OcmupQm#+E_QZ>aG<F_Tym7J!oBC4$Zs1!t#E*Dz~{Zp
z;u}*0+f5|fD2^7HvO##ww1G|^C^x)%w2ttFJ|3oN8)@b61VVuLfTw|4lBZ|+J!%fY
z<ID#XVD5u_72EgR9xGUFLsnDY-VR|^1v3w>Bkzd`31cy4q81I+U==#Vesdug>U@_S
z`j31em{_IoS1aW};SlvjsA1|zSd#Ovvkll~go+rzhmt5l=*v+s!lmaB=9q3fdR6j;
z+HrzxQ>=XW;VxhsyhozyE%c{->aaDMLKJh>6w}!tk{ug5q5DIIIU8nC+F_hY^rxYc
zkvb_Xh!oV3;yXxOvA7he-v!_4X0%}U&R$dj>UN`vC?AmN65|zn?O^=9wGaR9e6i$m
z|JwtAi%=fBzuQYhF!Zjmo4|2>)OA%;yGrEm`|!+PVKazp)Oo=aS)E&G=E%b}djqma
zi^C%=Q}+DIp665jVk-hu0cwuG#})NF$vsfotiOZ3VflU(P5bUHu#^60`s*jeY)Lb&
z<DgNCW!#=7OaGf7CI0=(!&>bY;{3u6OlM~Z0AQVp@!Knp?GNV6uR|?=LK;SI{r6vq
z3o9q;-bPgMIQ>B40vRAsH1^d{cHkm}C1gndqsjQ;qw4EleqYCO$G;Hn{9yAjBioA}
zWDzy9C02R;Z$~jfF8Z7e<>EuX%5xmmc=o(0C=Fk$LBB74^Jy>BYRGxml<<w1hI%j%
z<(LaYo|kwd5G;9D#^mHDQIb<E79bDbjhZsPLo69v`<LTpvu@x02LVyMOws=K-KmHF
zw{w1-#b{`!VG)FmMyoWwyUZY*gCs<f;TCg`%^s@;eu(h}q1Rm;O%pY)Y-U4Pm);O=
zuhxVq;bY9UWzi~I-~ZeB3!*hvA-(F^T`226ZJhit#mQsf$J)hFub_+>%ndt$D$S&6
z<$oOlw_otVkD-@=e5FVfIAzr9q6M)sWMVlBty5!UN6ql#&zk2r3}S}aIF=|vGn=;J
z?%|g6jxO|8hs=iwg0UobUD<ibuq-Yzpk@qCaeQ{&c3-Wy$UgKU&eQp$CR^RFhIk7e
z*p4DHcNR*#X6^qK2BAM>lE3fswse&KcUehauRqkZy#k0Ma7IhDzZRoY)3NDB1E~~z
z=RzehO^b{=@m+R5p3&EEDKGNBon9!hb5z^^^}RpISouIEDDG%Gu2wP7<yreyge1&@
zZZ=*@LoEW*sJ!N7^X{yE0$oLG@E8OJ5U%ys!KS|bE*d9Aj%83_0|!x-QDQ1v+Uolk
z%|G7ts`s`LPfuww0N`gI*V~i5HX`7K44yNY10y7F^%~{(y5|v(06NIP<IqXzz9Ed`
zA>6yO%bEr)8e=1e5Ud1}0o!plok2X7Moy!{%=3qFkw0wzKyCp@Z<W&tRm{}oRl5f;
zj?yoS5LldCB1Em@Ar1f}Z?`)xF94POgH;5xst7uMZWP_|<$GWG*?C+G4o}y##^aMk
zW;)hCwuot5rONro{G;nYi-oxOd1D-9fev3#%Mx*$l3Cfn(ynWERyC&!Hy7jz`Fs=%
ziGO!trpJk`84rUs=Yw6>3bqo^4)BDfPqEy>I{{&J^bXW?0O%|qU8pgBiq!pHHUv~b
zb|Sq0|L4oV8hAJVmvGlHU@;u0>QSp9-mzhofz+z4K;3)OBBSQ(=jWNT{Kq0n8&zX9
zasf+}g}1j(0Q}^@3<S8)>-ZV}xbmLK6BcFJ0|K=GTM-Z%;FrlNk>_l&+xk*H+UGod
zKe2heojp!w<B5jh?M-k`N-1VF%rw$Dgc9?Oo1A*LxFbcT?IVLYPFTkf?%oBE4T72j
zZHj|u(Hk-Go>=FYeN}`QZJCXuJbqV8u)p3;Jq?|q9gW^Gv{b19*;}sSh=wVzU8qKT
zPsb#GSRZ`IDEqYYy^K=dmR~qbj6f%<vx_At&SmFGW`IWoZOfx6B}U!`&w#8HC|LeZ
zHLe=#@{ROP?;y5;j&&A;R^Fso68!8n=#rFazgNpzHAj83W&j{t=X5p{v^J7zbi~-C
z4TKl>vbD-8$LBTdAuY?GW%a>2Cm~c@ww%!lRj;V(5B_oC#8S;J%nxyfSh0GMGJXL4
zZBk}|lYFoC=Z``lPiUiZI?xT>%IqYii6hyPl*WV?oXz$5C>#O*&c-y|nXy{~nOuhP
zn9=q}_ZPvYyhee<V~5frRg@AjG?QPZn*q|1`8qOIXdm8`|Glyjy%0ETdPq)4>ba)Y
zMizr3<^6qx01glph2~kq_d+)TzW%V&BpDJ-kw1$GD;F<JCoKm)8FlQ$RETl@9x8m}
z3qSyk8=15;b^cWqK+#&TB><7j@wo2i-+PhYG&?hlZ~pRz*ts0vQx<aBB*u$Yz-3b{
zaiZ8dn0jQinZ_Ep&TSd%Gl^mzrx+U4K$@FUj<5=rrh{i5N_g1_HJ0<za=qS>q0qpN
z;TuV(9pNq_RB|iUZ6ektpolZc_iV^V+vm&GM*4@(^R5i*koj_dFr&}M$AUktj|S@g
z@zu<cUu=bmICW4Nyq^))yAm<SHT!baI9cx30t}BH)z<HYkGn7PM?Y+9^n_c^$AC}@
zLQ3lGQo)n;1FgDel|@-~fw)T8OsqBn79X|eXEVT(%cuL^@4va|Oh3NW0kLNt+$Mfm
z(#t6f$GWhCDTyLU>d(#zxquOPDvcITFAlzlM{^FzQDE1ZYkv@L!}mbu$pe_;Tyc@J
zak*mLyu<-LCCs%YsV6PLV+vxKr`#bL2jtQ*|4OPl((Dy&Bq~X8MnNyZ@7hTHz@I^9
z_Mo#(COteKy55CTCT~0x?BA|<JHinR*OjGs{G^_$SttxwcTDFx9|!68-b>Au`!iW}
zR&vF0M#xdy6$dBmKF|fo{0KGtdhkuLEWz9fy??ree`9+aetqJ@dP>0gqK2ZqITyl<
zn#Y$Jb<Zdm<BF*ze42KAXG-F`*up81fH|R>sU7I+r2Z5N|G0gS?(R=bOFhjJfdk+7
z>$XQVp{PnCZ!%$izLjZx&~^*N=j>^8RO*t*W*bz)fHQ2n&=|AEGq+UhvD4jt!+2@K
zjtozws1MpjF;X=i`y92MTESE0eQO>#RHs4wEBy3j2lDPMn{L^v67LR`Q{nVw_|K%o
zd(C~`nBu#m`{e?S&SS{^?1nN1V0?kct>BR|{Du;fhLp~9v&TqKRgAzpf23Gpl?)$0
z-Q~p?!;ay8#B=CYG`79SQiw8gUInyUhD_x4z10O5_v=>$H-cNN&Zxzu<-|g85Ut<^
zGh1YugJW>U>;cmr&w#vPBV%YrZKbF9<4V;s5%HVWMJ1^Xf=TNlc)PFOZ($G}U&X$z
z&glC}igGp3BQvkO9@+o4n7Kl!AYO~(NSJ#4$Z2|w`;E_SZD!+A7%2$Dnh;z(o=T`>
zgjzL{<4)S$(DQZ&uP?yxCr$vd9Sszlv>|J-02KTZM-%^UM1kAcR_zMV&V*RUpP615
z@mbGXi6NcpPRnJ&T6){c^buj7H691{*m9z>;ZOMdMeoBD!?WX){R)Tx1tOooSA{5C
z@>ErJ;42tI;?FR1p>*C~N;F5({t7_DFWF_A?4xuSyEd=xv^IAzk?AN>peM3`Igpl>
zIWuy`LL%VrtVYTHjC&yREFGC33BR-XsK>96(<hoIy!PAPW;gQF=EH~rGTeG&=Ahd6
zh9*fD`VrwQE5$iCC^6*a6o|0X=thcdSPioX0+n)R`sNxy9#FA~EJmY|)92uPoMjg&
z0-gKI+?Z$bD5yT2`>Z5QP7IQ=39>7wk~3vMCNIY5)qgK~cFjpTM1S`4Zt+GJ?iZAz
zad?WcNt9`&Z&9=s?$zuWR!^`&r+pdrOi?5d`FXt21jO>MAQP)7K(3<u@f@>$T%8I%
zKq4>L->JCbITzxNb$tc)fw_k*vheMNqFzvtZ>ety-Q$uTfM%%JElxx2@^>a{8DU>`
zj;<29A4+aNUYNwO>#wc$3y1u3j6d(2wEzxA>bjwq!-@m$>8jfudqKP)p7E~(Dfw<=
za@`Cw8tO4ld{kM8<I8PtHY(nEr|+}~zXX3>x7bdf&fecHz8s|f(DvVv@b9THbH?(q
z=aUh07Hfk$2~U^mfE}7ekiV1!CqX#i;COa8O<~HyTL%DgaR2Uv$E+^I@?Bn69dFLB
z{P4#aCF1n#*#y@f+*5`C&?sPCGvsF~iMv9GqwK`+&|5>!Tj``$@k^GBvQsBG<rjH5
zX`$5epM-D3etheE$${~@MjmY2S`h=0z+U4<%2da-72vN~b)sFXPvXo);Jaf{==Uzv
zAixw=7fer!W5zId-E!ay4re@0kdA*yBn{FVh1Wbgd*J^$sOx_lN-qxSfW5-_4(<Ij
zzwgrg*NeIT;@o=^Prl5H!&1Oq+0%&EcLJf%$7;KJV4bUd(a{&FobARYp8m!Y4Zmmd
z{#*+s0k(*x@)JWO7PO%>;Kc)9FO&>Utcf#g*7=gd8>6(s_2rNHdZ&Q+8pvNX819H}
zjuu7{4Cs#tXmbK$dw71pc@Vop59dna+wb@qBG@H1QSm!@@2>dMK(byi`WoZ!Tz1rB
z0@KtDj&Ijl=kJ+su`{5Vfl6MFD^=!Yl59eRnw?g|t?204YJcA^{zn9-y018X$6dEU
z{3eY1pQjxwkf_3y+(Whs0R(?YKNp83Y1<2e$D!<Zo29(u{XrC@R0Te&4T)Pv=<Zh}
z80s_zONW*>0xp!K#iEZ`12|wNgMsH*LLsH^N!b**;TiDxAw76^Kc`wR3a3jyZ)IT}
z)|fbByrKF#rOt>CXnz{a?m1yy-)!o>u9)aT8q3g-n!_0Nx`=MCE13_0<2KWlVE-6m
zr!G0g^L@2E8K_n_iW*#hoyAo<jybDZT#Z?sSn9Gh|D(Xg?j{?jbkS#SsTryY+K0qW
zv5QCd=s+7SModyLKgAOcMHr?SPJM=@2u-W!hnAaY@Kmmy>p6beUQHg2@o+nOjAp2h
zO3v?gCD@^_MO6EHH;npJ-+eVFu*%rUB%m7fw7PCkgUxJEsnsxsGgKRTrlQm<OXX<i
z5yHz|FZ^*nPm~F2pWrgfQYWYD?McPpNKG~bzC{MA?0>#=0OY0}^l31RI@Q$ojrPIA
z<2=q9)H6gMv@>c;sq4*GX^eRGoGE$}VgIyXGT;gbhpuQeWAwrvBHuFkWA$nNvU}Z$
z!|P+NlxOKv2skF#R|$N54I~jNVRvlAA|@%E2GL(Y0jIfqJ05{eICW|_xR&<0VHx~4
zzb|W)rkOf+mVDloYcOO=xX3dMJato_R>lN8uNQKR+3SV>yp_!Tap>5^-o4$gvUWO{
zPQqr?0WIcx<m<KgD!Ok|av$d0Dz_GdM>AMd4C>D=ThLJkxCpDoSk|8b+P>;|-qSvL
z>LB&CESlg1_|lM}NCtmk4RmCg4O&^gxYO~kdFU&^*2yc|Ey<zTfZw%bl|{pSQn9JJ
z5s7g;&s*G3GSZNCVYc8elspcB-w4-vDUEZH#<0u8M5iz^+H#ZY@qsRKhU@<bx0F{c
zy3MPW$e-3U=}umq@$xNC&2&1PZ)?UeGcJp3*Gh1?-_Rdffz~i^lvwi*IVxENi|Me3
zG?uBm<!dPZz9O>pl@bSjx^O{j{V;*J+TMSUA1cKV7I}c86vPoXbz<w~@^@ie1a`m$
zz8yxwTQ&5(Wb1Vr7wJLP@Ur<l<$d=RKYT>@a@?=~fQ4Ow(Sh#9#_;iGJTx43`u=WN
z9Jn5jq5!*Pv0!+A$<Q$5@Pt?lg*En&(P-<0SUWY01w41>6MTJ~s;Q6Gx;An8fgNb~
zf$pz63u=qH%I=vC;!HB?cWXF=^WJTyWxnZm*`^I?hP{!O_G0CF6Y#!_Haj0eJdb?+
zown8Pki!qjQYhAob(UWv9GaG10~VuJ48?M}xOUX>-RFzYpSbT)7}=c&4@oi=H6Vqm
zN};<5Ujv_L1{)U(N^FC=P7nD9?ki>CcO63*;E2@CYRT)4SHTB_R)r&M{M!;)tQ+0k
zNXE&*_PE2;G^lUHS`~|b=<p*!%oWQ_*!ducA9-Ft$ZF5O4ed1bG{_BNTlmA8JQ(<G
zKg_2YZ0xCbwWb6I|1i@r(&ZOnK1uYWt<Xpy@!e<$i-_-Qo>#F$9_HVpN0yZcL>@^q
zP-_~sipMC>@Q`5HYEXa9C5=%S#7Omx#KZh^NgcCiqyrBPJj+sQfcFg|dIT?xQ7(Fb
zrprKTNmjoT;XuE?iPO=8`t^+xWl;8)l+SNS^(dii(^I*|?4bsF`~c=dnwje2yWxJc
zRbA`3AcTucX_h_SLS(@NW7Sh@bYz5{P~tB&%0KsN33WW0qra~ysl%+ig>2dqVpAOE
z;<LP;Y^Una)~xgf?9(Y#h77MQ7*HKH`s>1(ErtVHtlp656%vph&kN`8Wb3y2>@q$U
zQU7WRJuM8YJ|Jilnu;R^HcxTu?7nVS1XkQ-<=ltBSAp^YPa@%O=~UWm@R~#Bz8}fw
zG>(zm^CEu@Qm+-(t!_D5aU-oH{=lRJBnX$Mi$7ohY}SqZ9G(E<(y|I${mV+<Mz@WE
zN3QuAw|*MP@|)^H0EIpmEugg0gdcxdtq6JTL)NI!>?PK3-vhp`J<=cScn>41a@A|~
z9Ys%@^gRD|xjt8Y#-L0t@IC@o=6xapCHP!E!#++}0`ckwa#8pjbehONY}%AQ$DsDN
zo%+f=1G?;rF*=O7t~l;`S7eBND5Jqs^3Mj3VeUXmKbvpYB!9qw%TDL?YiGnd@4r$C
zK6ASN{(&v_373;FfCq}`TKsxZUL_gWx3)EsG7xjhEyy$<m1M7{A1!eA0S&)am2lU+
zeMm4?7!K24@i;6cfvUYsLPimXN6(tF{d=G;w5rEi^mb>!qNks?FKJg*$qM>Kz^DD}
zp?92p2i8O~gEC<fn=)Qi!3=_Pe9>fW3fs#bW^;Ar7b6)0nF^dg(Afl~En==Psq$QV
z2eSmQoxx|&j8lY6#e*hZQK)o&+dVuCuv&Q=P3ybhPAubCSu3V`d7Gu?mT43_O4h|Q
z=j{h~T%78#)vwo#VNK^li?ba5Fj!AfWyXJ6k@UXfL7}UbjFVMv|9T}+5qZlXsnmDu
zmpWwX^zQNSU&Zg2h0(S+n(Fl0b}F13A`a#${eytvur5K43Q&5(zVRN^3~Crg=&~Ly
zO%E2&ErO;V`SyPGbx_`>K7seZR@IPo&<iBfbZ{53^?5(8+E!lVAZ?6AHRg;gc>K6D
z&7!?b7F<4kI2^f3^6jr*n}BCdzoUF$|NjF)LB75NiNukSVRgaz>!X#31NZ>r@iB$B
zwZHo6Yw9#S)6u$s9!C!yR=@c9&*AOh*Fy4nZDPFer9b=Ow)YoadQt6z=bL7gBk*?j
zpF+a%y6bOH_)Jj!+)3=a3zFQ={^9p(5LWJ#N$?$lH;Mn-zx`O<0Jq&^G7=Na+7EKV
zd4(&1apmTwP48tqi>fs`IHtdS>M3<KB&RoQ*w8hva6Y~Bc1GeBeBi3jpZ(+~>dvoy
zE#eTL*L(KtQ7^psJS00)k4MN7j9HhS*6Df1gbT<#9T`&Vo#-kPI!nep=OS;OGE(nE
z0nZbRGuNHOGuc3TSKz85^Pj-PIayUSHO+r#;W+~$3*pTp71;AvFj)wuA&WLui--fu
zn8`ZZ+`C6B2UeZ30}Qyfe;zy=bAIbt-kN67>P$&yYL)n(eM3{Hre>AlFg7&vDfCJY
z3t=p}aMbb)pF@S=m0^m`QWG`De{nUwya#XdoiTGJ+@5;?-eNxSw&~)Y6Rr4ipgC~6
z@+^2k58kegw=d@=@i?Rzdf+X|b7s$pZp}UeFRD2Rw;JPf6|+hf>;UwiH+P<z2CMrH
z9N4c;pFEY-)mS$GZ_%CwS{?@-lg|y!@@j<ZG8i11s^-Bh)YBs$#}p=BakVP7Oo7Dn
zy!rDWDLN3vnWqsIFVC)Tpg+3R9C;o-bTHB*&$he1r4_!cXg0)(t7FeXLKNo}zVL@q
za2)Vio0zCQ2npTO?H5_;zJ?d&X|vLwZbrQ{jfwy!SF{z0n(s#B&euj-G8LG+WKC3m
za5p@fg<3d&v#FQ?*)3SMB4TrR&-OrA^|;_Mm8*(Wl9(~k%WOIuFlRvIXuNsk05|Y&
zHk&d>4<}c#<S7stvgq-kTh>+%tUB4StF_N$PG+L;RgZE;LKA5e9MT0%*mH6h3vn#E
za5VM|pF@S=m0^m`sy;w+0_0V5Ni#K}lJNv<aPP>gBNzkOnwzT&QWBh14s~_oT4hu{
z;Y)_5*~4h~+d8kE&^*9NXf|6BBm3$SnuftKGHt#=RSHy-z|`YWRaDwv4WG_JbOuBg
z!J9`ea0CCgvMIAPVHuOhyU5VHM=J+bor=N?vW=U}#2|`RXEy0JbBv{qQI6emjudo3
zDmjOCL6h!1c|R@0vFO6l7vZtwjApCR`EN#0OoBQN-OV|5AAnra4EZ>8wPu<Qr?0)O
zBd?BN?Bl4Srw&s4@;6fH3m{(!&U8fnBhwy2`pi=yi=)3W&+<0u>o`MGR;<Y~v{h<a
zc1(J?f6jdC%c-YHA%mNxQ`M@Z|9)q2a#vS%bnck5k(`C<42T?pSC1U<Qr|D+aGe^m
zDRcCQn6f*RimwuHR!*!smC~Y)&iKqs&TZz%v6qsWb!d)0a}t^cIyfiU-v9>8o@ura
zM<3%JHML+>azvOxF$tnn+CxdA)pgh7OChdpbRUN-nNmCQ>?j~dFph%q45NcZHy$QJ
zjD7q9$yahS=C145^&4H>bLiXgG0)>FYUL>tbUkHggAPE*)vkcoLtiE+b$shkD*iW`
z%G2JijtK49mhR~+TxUS6ki2>20DJvzV#&cWX4B?q(sicGqGn~xqG#j5+JSXP8<zF;
zfw!5bUjS6}%uFO&l+3Iz5PQ#cjdVdm6DbuO>V{@}DSDx2nBvsKis2Pau@p?ZmO<+`
zn&~d_`rx-Y#C3o~O{lSZf+e_j<k=Anfp8!uI$%x5@r2N@@R`1Fsw2UPbo@ma3$~G)
z>A8>>geaJ&jMR$)!6@MUFik&mT7Q4&&tQ}Yl1N=DrT-556{oH!{YGU(cNTU55FXzJ
z%|?y|2A*K~e7%2%6^KxxiA9?&HoHTKNLpR1_eiB2E;DKbRJ-v7$rk{b`k9iMO}o|H
z6tB<rf`lfz#YxCI<b85&7`BCW`k419xdkf+x--2p%(YZnItOH{f#4EnXu=6V>!#^&
z`j)eG<k=BSxmfDxtpi8jen&5UVO2$PQ>z(|P}lj5RD0=_&nyM=ViRTal#zN-Kr1k7
z_AIqx#WKB1`uyaRtzegbEKVI7Qi~TYgr5a!=B$}&|Net&@4kKN-~o66-gr70sa@vP
z>vs9HQ6PVmY|!|9;(u%Ty}3Q=j+V<eX}@scLUj)OU>O@5Ra-Z2Ng5RGISV}>XePWM
z^1%lmgkyS^dg1x!)u*3+TEvLemhUwi2G85@WvDBbFOM|C7lH2DwF_R9d7$eb*acrz
zYVqR5YQ?$ds(JI~so~*acuD6WwRPJzbsAod+N8oh+u;gcB%&vw*c7=utQ}Z)<T9+^
ze%3TKK7Cq(hiP?Y!Z@|l#AIfjqislNqPj>g=kPCRN{!1T-PJ>zqhFpXo^|yMpA!|+
zE7Kem#x9L39O61a=5(TH;t|^5-jQbwgWf#oV+f+==6LXa1xR0TRhi(#$kLJejTX@-
zOUY6;FZM}yfaM7x^^-+`_LN__a)r9%_M2EyZ{EBO5|iD>*UT9+)IImyp_VOM(#A{L
zjEsz`H{N(hZTi#uEPrB5Qy{4}t&eM~^xsq0_({AFB2F^0*~4>=jT^62H{5W8>hJH5
zAkLgQV@_x~4c`p5{(|*t$<n0}zl~R3=_H|P_S&uJl4VQPLk~Tyrca;V)p!aLkx%~m
z*Xpa?yR%QO+C8xEU3cB3)}4QT45P*7)?05?Z@%@Gdh5+MV{PGXvd>=FqO&`c7R$Rw
zD+gAcN^4Ok!05agiOWw@GP7uPW;~fWHg8ak&lynTL-2h!2D+XaQ-jCh^XPD$;dc4<
zG2$5W$f7Bcuc`Y-)cEPqF2A~hkkHhoIiDB-`x_z$t7oe%M6&3@k<T-H4i)r@g*aiD
zBoS46h}<;gmzIM{Ufbz@4&(F)ZD8rpvqLBY=|G#c07%cnB#A|xz96eQ!HHDj(Q0ab
zqt;#~>t~kYd0NOw<S8Td6)WIiD$dAA3KU0y#|r)=S5z)ux<oy2?_Fxf3`{a)A5VjW
z1L~%mu2u8q&rvVD__`V&8!2`rt+@(hE1YZYts(vQ(wn0Wa43;?2$kBH2FKsm?!H^C
zTD6Lf<5U7V*!CSe)z#NrtENt!s<v#|Oy`?nN%xxUeD2DX>gx|Zq^3-1B?Jx~IuxzS
zT(Dq)nm>Pjl;nK;vB%Y~pL|k%zH?`?b9-+JtRR2%vB#p-nOJq~*irS>o;_+B)GvjE
zEn?qv<Be))>J;_z%dcc&gi^`=6TlLlW$a86?_RAOSaouyNgY7=BA~u0Q#-E9Br`S0
z==?!7x&~H!PEYGOpw6Pv(J5-mj<c%oSP!2YOot@y>elzy*vT=~S3aSMVitTA7@GCq
zOzuw$ku17!H1-T%K!xEMO|cYAzm`Gkw>Hz=;%&iibICJg<i@V`)0DXV?d=_U)=)^M
z`atX@aN092f`1|67i@JTH??%>sQpK-J<DfOfvk~8T1@Os+JkgL0@-q^K<AC#j;7X(
z8F)JxXHIvAgNcO49)3U#47664p#`qsJbLt)I&t!pTDV|-lmyW|FTQAl!qu8Dzx<l6
zlFtGK%8gC|uw_&HZ=xjxqg!avGpHL(m%{DR_uhN2!dtnqeE9zRY8w1QVBNa-s=+ph
za~b%6M<99lkN@xgqozWV16M-Y6u#F9FLUP3QI9<Gi0U60P{)rSS3mpN&lGaf<s3+A
zKKjU`YWD2e>JdnK{<r_}-_`J$C{3bGqR%^SzrCHz99OTs{<?bWjW=MCSc@61GQaQs
z`_;K{8~W8(U!%T++t_z(-;wAa!VdfEpDjGQgA-Z2d$n?4)yat-b%Kn|npgo{Hkpa5
zGe?$BRby)~kvE}d->E(|J_`FYU`F@D=bSz@eA$qi@*!N}9;r8}Il;2NQDCglM7jlE
z3x?+ULJY~Xg-8}%I1zh>FQCHo%rwWDid`C6IOKJZ1&3xC4Vbc*ah2-pI55X>DY6aP
z)j}X;Pm`vtM%IP!iB+)x06+jqL_t)XBsm*2RVt?%pPN+Ye&;Zih1fM!f#k|bQxwx-
z6-K=L%fJ3ioji3iUe&cdKAyZq>gua5Pb4!BA3ma<e&)Go<rH@A>l;wF-FBn8_@WCs
zSeIP9LB09LyXx%lnNFQ-gm;dY^*7J|IN5w}`e)_Z!^SJFh?1Fjd-)&#_^jH#?NfE<
z*S?l?<6MezfTQq_h*KlgCo@r$OD?@EN@n8r&r``vyf`|z|A6|%FMgr^`mg_54Ga#d
zRp+i$+u(Va@iGto`Lbcd2B;cWAAI<sdIJ)g@p9tiNm$+aYxUhHz8fV*Z@l5g;1Zhb
zGX(aKvpd8kwBGja)yjcYCu<FY>DUj6#+j{WXSzscj?J0UPG&-cAnD-F5!HVH5|-`N
ziDTezY$@2_%0-yq!xv3cQ{RK{nS#}e!D!`?2qU41EO4?Gd_5SNJ;u=>XbX|B3zh=u
zTLyN&J;N7}Vrs!8igM{L1th|3(ql~xK-=kl4x{o2O<?KRyM{y09<(9^6p%?=jA{hQ
zy5N%}XFyY;aa7WC*ku5d{tLpTm?f~vjIr*^OI+rWodGM7biq}XM<5wFp1Pe}x95E>
zh1<>J<>go2=p-|-9uuH1y!e`0fBu@zt)c_4%4**HxoYp;z45M-YFm$FC_!iaEvtrG
zXi8KQHG0_xw>tms>EEeiu$ozyemIef#)2u!d|0742VU57_Uu`;8=oNwWzphA@J!of
zY6{#Yj>lU1HtcEBrbV||FIu!norGi_zE}ru<IXC0%;L&LEco&rTqUW?jF~gkqJ@j1
z-JPH9Y$Ywg=PIzDIcE;MZ0E50>Z{%A>}mUdVBiaUupBvZL><-~QyLuvUdN6eRkOh-
z-o~F!XkK>NrSP0mNY=o2-5alEuMj^At2*C)`)zf{9d|@4IhVn0=)1rAD)P<!g@1A9
zpK}h3!(v$3I;ajn(sdtj9ELHX6imS4*vx`eycpMh=z9dTBo)vGpUJx7+!bmryz~gi
z5Bu(cIhVh}HYF&@Q8^>;9<3c%cPuAJ0KNOBwQe<ck<7$!M$gB8oVN5F*gmZKcPHn6
zKRidXf7e+x2Gt`QAgMVpu11y)s=*z}f1YY-`ruX-d=}*x(CmjkeP_lppX(jj55V^+
z{($?j;r4mcAoQKpuLfX${6z9x3bDs#!1Fz!k2*f0`tTW_8KrM(>yDIBSYg_at4y&B
z0<UQUs_z8wZm;@oHSm9rfq!N~6P+NDf)jm1GoNNJ_OKMmvKv)F&+s`k&?}aLIn^?l
z_{|`yQMH!|kcMn=1JHr$eh$Ob&<N=P-oR9Qcj#F|YR?X#HDt3s>k%aH!mzGHXIh1<
zF`V>MB}<f^tE0?>o(oz6Do`N)3{AYq<t8%``nl&{fmN6jPQLh}l}wqafwOFQUgq)R
zC*V1E^E%b>KAp-Q*$DYa%lrFOo%A8AQ=JMQee{v~?DNmm_{hWsHC%RE6S(5C%U~7b
zrE2fKed=dF`H8yqw%gRj7hjaX+p&GSdJ>*5iRJwD>!TOr;4?Af1>au&o8SHhZUvp-
zh3!*@rmBbGmTxS-f94tW@y8!W+xTnwiWTbq`|gkS|I2^*ztp<*7btwW4kk=>!6f32
z2>Z8cY&1Jjp>4B1KltDSNKkHVC4UR1&}mrlIvW6nrePALUD~qhgzOhze4&n?IH6m+
zK0p5CV|C}9cSiNt$0nh<;lc}B`nI3<shyw>ue|!IdK+Fklo!TaNXX_rTlMqLKUaTz
z_SxLTbL0nruYeW6*TajZ;{UY5w$YIhg>&zvmtIn*PoHkn%45=Q_VnT1tF;5`j-HgN
z7<Ooia+S;+p9?Pl($CD?GpYts$;^0U{re$1xdIZJvmp7n2-0~wy8i((a_*2CTLv~$
zW8al$A*r}~SPg#BZ9lqVsv2Dh-*J$1oc7vrHFDlGHL|jmD#V-G`wow(DSw95ppdv6
zSq!(uuLIkGHmh;?{@OjFrhJ-Ol@2E_XRmAjGx)P%)wgFD60u-Ar~TL+{CWf2!7rhW
z`=TRAwhpg>@2<szYT_Y2ag~hQhRJJaHo{K|151%CyHO?e3|~Nl>6vMchjQ$2F5nSp
z6E^_Vhp7=Ka?kJuRJ3Og!D;9M?~|)Z3!*=(jUF!~(?8WR$oHldF@5GENQ)>S3N%fD
z)=PX^tWTV1-D=)HI7Ka9vKW#f7ppaER>Q5Aa|*-4<iO{jPyD2BNypBJfyqo<{Sd8y
z7#mZE4jw7Q4YASm{ixeR;hz3`Q%^EetD-+cQKw!WJK@=k@noheHn0Fu-F(Z<Q8M%R
zv14jaY!&pHwQJRywQJP*7hIt3hi66N3vh6?CI0BL7Hl54{{g+r`W%Pjdo8><{BC&B
z5hgQnWhP>eLIM+y`!(y<sr&A`50+K&uU@uo*`hw!^u9vf^2#72XYmC=SoXnc$mk-e
z?Fv_^;%Y}Md8<&PM)-xRG*7ml6N<@NZn^EYTOq-FAFRrR#0wN$6^V(+G5FrYRg<^e
zd~@`y&Me%ikT`zq@y9zaio)dY9#|nd0*Od0E8)dRfBn7hb=tcy;4s6)_MPw+cb&|{
z)wlTOcYM47-j07MB)`A;t#7rT--^d&^~JkaYX{aHs~6Fi$En3@1B>2fj+EkWG#_0!
zfi<|-{Ev*mk58$o@19XpKRgqCXT(DsSq;g|^C01<lbL#`U?1zTJ-5J$$Kh2&tz>3w
zb;<a=el@xTZg<C@3);y{-Hv}Smk+cOjCsJ2{2aL)o;QlgOx+I?q6^?{=9dhqaaiq1
zE#vULID9cAMwdVz@I9d%6@hAp!tuX@spvgor)L*aD9_q@hA$X9rXEalbc{;tZUscb
zZQ=&tc`&t>%o*%RUr*jOEV8U8Fh}~hhKUPPk2qNunEG#`>u6ozr4`G=lxdcyjMR$)
zVJLu!OZ~QBWP}OL_3PKE+i$xmQIBo=Avy4eXJ1qY4<5u_a+x|6-yFPH-EsTPiHnnW
z-~Cfi&(EZOuaN_<!7%G@Newi>WiP1dNjb05AozHcq{7vgKZoZ@ehEo5Ecim5>#n;_
zU3lR|>iX+%fa4o(e}-fES74)W9iI!gH{TAcI`LL*Olr=VJ69cr+q)?x@(c+}EH~YB
zv)Zv^hk6cH5uRwTf}Aybmbw>Ka4v@zA+3Xi=ejj(yKV<J`XOj{?KM|N2}4XAZvS*!
z0&+Ioj<3s6c(b{w;4R*`f_)CGmgJP_@EDIPue>Vi@;<C8edT3b3E5gXhDp_%Z@Nis
z+_(|O;zG6Qz4sEUKl>n|@$f?rM{jJ$<m1!7`<?piv(KVrW*@wC4WA2o{{s(1$>O{3
zxkvr4fBGjiIy~H>*VbqC>ecFN?Psy#IJ^NbJ;Fx`;4QHIfN|xOSE^fXxfK$>=YZW^
z>X*O#B_}*5wuGT9=f}!{Ri|=11MNLNwUvm^qGw8GcJ-MyvCgpXWGgA(WfQCDhug<t
zxnxumACc&#La^F0D)9WxLAXVI;MkZNoehaYc;S#*FsR0$eFRo(Vq2oL|2U2=8B_xw
zol%1aN8pxoNK~$ZIOh+j(N)kNZ!O<H3b(mK-?M-Vc;k4hJmw?e`JR2-&t(5)!xg0v
zR{v(;1GwX0KY~eIOs?Xs^OsChQ{IIYp0Snq32w2Skqg?ZJjeP}|5o4`Yh!MrbaENS
z6fMWxLQ9J-InFbyJ;P`EoTy}aXPV=z#V(C4`moCh0-yad1ul&6?TY>I-^IZJ_)>y8
z?s{ySM_NpL71yDz7RHZn(=7#ly!u788RL9L^^SfQuW+tdyQr0^@H@-R%<vYlv9Zx;
z70DQ^f;c;JHhRVtt}2lt3iPT1GvQ)AURJDFrdF?B6;<JCs(4wnXrcP%Up}Iq`TcY1
z(@%HAn=-fm_HVxni?I6P?dEVH5W^aU+gRUycawVa&G$0<xvb1Nop9-*7Oe384D_nf
zj)vE}JV^)B;kbSVZVA`POpM~_k)v>%@*g2td7fIhaA6eKKS44~Co{1E-x&V%Gf%6(
z|GU4B+Lyw!BTWg-r01xcIswnt{LNEOC2lJ}e(bpV9o)wL*Wdeh(LYNTEm=ZOXl6NS
zxk~)TXKY@1)zwf3FZ}u7{jPt$OrH+Pf_6bYOa&8~OMvIl5F{oT<@|MPBWpabc=7q?
z)o^=dC063IGoOFqdH7zO8a)T}6eKO<<@)Qck5*t}LiSg`{uPYj7oBE&1i;RnJ3+_a
zsz)DtEP83t4cA|<UWQx8^#vd%OdtIE*Q2EFQQ(h{7l=QvbL{_b@4f%!D6%}!sO$Z`
z@&*ZcKu8D)CkF^2yoa84v-8=V`Ru;k&+dP;@0a;}-kW(n+uhSJxNc~m0pW!tWI@Oy
zBwe{HbG@tk&Nr)~Dk>|pGBPsKRvdk<GAlFUm~TWyRh~L=4)NIg?OxVQ&rw^pZe>f!
zdEMR9U6I4JBrv2C$>CI&t|UOIle&%x?>R$J#Hu7lXM#tbzkSANcgB<&&iD>tMP`EG
z=rn8jky0g)0}|XCZqe(ZF*dQ0zR$EbTJ3VQ{T%N<J2jjmr{gucM>leVQ>^9m44arm
z{oucy%CY8S#JAY5>B=OV>>)qHB62IzVWyKXvE|$3{2PytQ<0;>4+}YRZZ@B%X9$W2
zWpJ3b=GgRX@>yKAIazt<;&BGD=F%S#oSA4(l7o<CraJ?V+wL9f@s0vm3SIml3-+MO
zuj++s;s5W`IG@ULn|QbI?Fm7GU<9^hw6=G!_O=e|p~z8M(OB7tHvU}Yu+BNM$3>n+
zNPT&CWi4@ok0u93qKl6v;xBDkac=T4<}mmfYu=}P<fG58#4`)H^wM^Q(giw6-qWq9
zozyv><z9`$c^43bG-(>GA4%xz1O0H)#yTxkCMPG@_}HlRH%$*1h71B(LZH2)t-{%e
zhip6q+@y#7>(_6R<6|~GG?$~A@FU`mN4Hb7Prs0R%^8t4asr5sOtcypxWWGV;U`oW
z<EnEf$*cDDg1<BE*Cp8{x>+)p_bei<c^X6lk-HG9Fpte7{6L2YYivWlb?c_1vvO=?
z)QYO?q#`tM=KXl=n2k%}Wu87W-K76OeVlS+4pR<Y6e~gmC@=8i$edqv6Tt5aM?`?W
z_|l6M?9gBpH~NZlRN6^&Okyj(7x5@gtYv<vrM2KV#rijwiZWfiaIvEM3^`)nfB*f8
zYy8F9wQH@@BS()`I5YWu9M7CN!%m+*P3b^ZuqC%GDLFH7Z#8Y{=Q&Y7_~3&IXD03!
zXol_Gw~w7af8P3o^E3+bF`Vk^C<#&Oq^@HMdgcp$wJJ@;XU3|VbiwY-wA#S22coD)
zRYH*-o~ELSa#mW=lp-^FPc@$<2jpFac4(g)u8sz6x@ps4gn|~vY5d9Q$jC9uotd0<
z10p%$&?K6sVn2;e4$TotBT;l_@_slrlk;>ExjX4YJl{pn7#{Txr@D)vlN#Ll8PK5#
zH88nrJUV&Y1_whN0R^xWx^QW-#|T8Yr~=8L8uP2rp!~m2Wx<(CDKkmWStB_zJ3G5s
zM`!s#%1e9xr9b<QO(5Z8?sx$w+!sHnvf|vd&=TMZ=G+7~+lQfrpK)?pFhua5-*rtG
zdL`|eDIy$yUERHGY-E@Xj|^E+oJ!10Cxbx35J1$_mtXE-vuW$$oY{S>iK2Es`0&$;
z%HzwH-A=jS9xv>OApH^L^x%W{vE94B@NLa(lJP5w^1O8E3j5o~pOy01`F&se7Mzj}
z{CiBY)HS0cJsvutvi~w$QlhpHIMEPwIX+5}Mh?Vx9SqiR=uH;4FeBQ}PRNnzMW|-(
zMne=e2%1e*w_T~WiB;WDtmvheU$(Z|!;$(nMK+=^kev{n$f?m*sE1z{kIj^l12paP
zi{nLd6!IT)o_^|Ss+j&Q`<@CYO-)uiSVVa!1k_90{6WZfS&LAyekE<&=lMc;TSQ!f
z;G{f91*a;h3@oBHk<&9ODoYMgqLL7$P9YkRT-M?<qLY@6&P+5!U?P?hL^vwa3^@c#
zL=Hqp60W0t&Y|X4j-0AhBhDQM4s3J6HQEJUsuffrf24|I;WpL{iY8?pWOrxLSy|E1
z_JX&erju(61&1^^G$8~E3IN*Vdfm1+ukY6$SUQ2D(8Y;Ot!oj8s3G2`bf3-n%tf~}
z5geIb1qf={!ygFv`c$he?(y$te!j2p^-X<g_R`AhzBsCUq`mt1yDxrlW!1R}MEs1q
zJA!;hh%Mrq9hMeOZvg)05Y^21x%f`;GS%yy)Yj3-@Had(ND(aF(H&m$%zcAE+z6mh
z#QyIN)>Px{*`L_wpMS$1eRON7-Qq<HOXqGUzxzM0)2$rq>gr%~$zi%-!`+1f6!f9H
zfO2ZS_~J9{Pp`kj1|@RYxyeZL^<*x`epbvhqpwl-NFehkB#ekVXdtV_Sh1Ln6UtM?
zXh81pt7s!DK<L!e)W}|X@da9A3Wb2)d;dMw-+xJHQ9d0TA1gT;d%L^Y`SLBtv+iQ<
z%!yJZaK~m<7cY=A@;l0ni9DHo<hb3n>j}1F$77_|MRxw@^VU{-RHEm^zk76a6?TT;
z`jeC&b1Q8Lccbnu)Nv<25jmX^O<T%UTFeuQVoZnxEt7a&z8b|@B$AbcD0PYgve;!b
zkRMKr(iEQwos@HRW>Vt@%4wO0KaKK9GKz9!W5nDi<>3@8Qp1?jGZ%f^uySt}8lio;
z2k#l|=*q8F<mnjM4Buo2f0x(LL9h`8g+Q7dnqY;=UPB3w+u&e`BcK45LKiMg_85VP
z8md4#sKy*CG${P<v$@EbcNN(s>AZ=4E$!*<D{Yl<(rsd5k`iN2P$2=ze=$A9umv<f
z<Giqy`b$DvYOiqOy2vT;QtuMJp-w(Bb$#oxXZT|j2-SqE7sxix&a@qbBEwPrvx%ZI
znwk)qS%}WCckQ4Di5A*|HaK{bA})%_`0b6%YlA?B5IBA2oaNBu-y`}^t-OH}@aNql
zj(8Q}>(>XY3g}0V9cQn-{G3(k9ME)jc2K0}M)uK1pJoWDvMI@QSeEsZcTb6Z%y|g`
z{$?m$2;(FYAvG0`L<1Ee^nC>Z3C~i2oZGPNn&{(?KW4{|pK!H@7v@0&6g=`GUJS^d
z=hCYm?n4)BuSWqM<RV4%`w}YXgTKvNwos9^t5%-V%T)cGQ+pfb@)M{_C}PAfQ`{Lp
zEgjL0J2X*Q9)$dv1yTXG*j2+J66s1plsaiZBpobr_~C)lH-LgTGc5);>3hQL!uM$u
z;%V@3Xj;X8s2!;F_?VRjhmDrUD^Ep+8n9K|Ml-F#)40&y)=dA)mKxEQZN>MiTNJ0L
z%_w1Bw7cmb6%iuR=+Fc^fLOhN;EqKew|O&j1Oj|Q*1*#altLFf3$ND^i11Ls=Oj{4
z7>M(39?C?1yNwc<_w~+plsiqyw8xOcZhVvqgz*I|S@VaxRE4F~(Ux#8+DF$1Mv{uz
zAJB}0QxdpRGy53v8~VqJbM|#~Q_qb_LezFs&)@YK`hkRs0!>V_iHX8iH54>yYi(z(
z^nlPn`87pqqHXB2X3wLCh8t{bbVR)6dY&n`T&*-W(t?1WxBC!9a!%29&Bo#bP6Jiq
zMLxRGQFn)?9fxs>+B){*3ASbP1EpJw7A`2A2RjM>-DUs$3#M<Bz5R@IlzOF1RwOV&
zi1-&DM%Y>&y2&a6gtz(=Pdv$1tXye<^wrm2vx5g~N1LO-5dtDw=*P-#iqP~T9-*n4
z^Y<9#62)H+72R1%j?9Hr;T_fEJ1K`L3N!us*S}`}-@pDVyLRoGrHUBY`sEj2Sa~u_
zI@Z97|9FJ9qs8dh!q)W~ol1<uIf+EFk`Sd%;eeE2t~m-IV$GBX+v7p6R%9kOuYoF(
z=T{UQnp4YKSQ9xo8z%XaGjCNm<|yB09u>#wn7cV$aAwl2h9L@IDmKlv)6=$tLsN|6
zY@+ruq-8dAIY0f+(Dx)1DYDk|VeY@Eq16zznMdt`Iq9FH2<yrxj~aco-2x)QBCCyW
zW*I2}rqIPNd=ZGKp^}1hpItCT(IrXLPFpy8d#ZEkV9U%1ZR;Evb8;4ND}21^6uS7u
zi7%hdOPgPALECeK!N&(qKE#R-cpjg5KDgFnQ*o@g{o#xm=dR`Gq_z{|6qw?qHln{r
z#)hrGc5-aCb#z&kL&df|w02?Z+$iPO^decfL_R5nPBg)sM}UCJ+=5#7-?x!1T3mK2
ze*gWCv>ozvmBw@D%qlrEaTArw`GfOfdPu+TzI#f2u#@8b_dllB{1dTst1AC29`xx^
z#j$O<SGZ^5=UBLsqTsGN6Qa;9g)$<6GZG=v;6t10cdm4IsfG>sPU_ce+lS#Jk37P7
z0iEx@+t0osho%?hDaX*o3m4e3Wy`Fn$y)7a(-wAA0tcP{`R7_qJ@4JRHONrp2Y;VX
zVYPcVZDfx;{D}2^V)K^G?A>?XwRj9tIvY+o+A(s4Z%g-q70-=2i=yZoX*>S(l!PON
z3)OV=p{}|_B_T?k)OAdA&xt9PqoRR2r~zBSFVQ?)K+d|h88&rS8*4f;${H$CB9J6<
z0FKi=I5R;_m&-qxHj+bd3hk-Q<g#Yga-Hr8{qa3~nyy<!-`#W6-fOhI?iZLz{7))R
z&u=Le^5H$E;g~Ic!Dtxrmew>#*q}4@$uDSTjTa}hZ<{CX-imMo%uyBr1xyvX$ZEse
zMIeHUayTkT_t^!@gzbBQgC5aba&u-PB6DEiii<N-)Xk^y=&H~~lqhqKFN0x!A(YXh
z+y+L6YdF^IY&{s3(TnGdkC}LkN0Y!(MH6bB2No0_gHehQzkdCyV`b-VDj0;dEDWjz
zm+HMR^fWx>5l|gB-j9F2@Ygu1Qgd??yM5`B(%+_y<d~$b<dxLGHr~6w;!^)5l<O>f
z%1zKN3X#X^RVye8X?aC^yl81@Wp~}V#=4G&5B%XlpYyS9X#9_VCV3q-ij0_*I0N{3
z#42P}TqJNtB1C$GqS8j`d!p^3<-rFYu(oo;xWh+|uunhTEp6x7vuCWfvuDqyt?IYA
z_Ph6<@{cq>RTbB9?N++cPCGl0RzoD1fuc<NzTI1j%A7sBkoyzuP^1l2=s}AXEwYYo
zU)`~_9BZhZQ2m^L-(N))&)ulKqn$mvV~167zM&X-@7C7Ob<CsCNlA!Or_fDFtbp;d
zGto^)ndnU3x8*eLd>Sjx*Pa}ky1#=>t!iU=+KQg<qx3bmwXzAi#^@Z>aFraYmr+fq
zKr{4XgjL-fFDdGAYE2uP>29(demG9vL0&~G8j>8LXQxV$oyG2<AM&eO*bF%#SyKbU
z*7wOJt!!pV(ZNdf*%}AD(^KUJ3G;!%4-nv&U(^zYLlandycs-hhmK|{1tb%+c(sCb
zpBgB1ss0#@b^>9Wxl?535ap%2HF(22H)cs)1>+UEl*IWsNtRO+igUwp42Q&r$8aRn
zGgoo^_<4r#;3jz;V>5Y%@>JbqBSSnlRap@@HQU-NA709LlXd0=uiyL0vQED?e(~^X
zuU|uTjz69_Rnd9={CVt^7oTQJC?{P9ZHvV5$tNFUcid6=V0`G%_oaT<E?*^Q{|)Qm
znma0=d3q=1+}vhuuUteCoEtW*W51;8=5y!HsdxxK_T$MCAL$bZfW^-pelE=~6%8GX
zPKDknQc{FCG_~b~I6109Q;8TuE5GD>ClWW^k03m#*dA8auV2r$Zrf&YIez>&``d>f
z`r*h99X?X}VRF~5T@3mA?F2{XJsUPymw%w@<b@wz?5*5izxLW|?7#ny|G{2<`4!4F
zTri-*401%Gm=WlbkV6x%4<9~^16#gqIXP|bv(D}RHBj{CuV}ma|NLM7i|u&qG2!+M
zJ9GL}DWB%!kMClgLZKm{A*KG<LXq|Nu~$h~USLSPuX3(3k5uIN?~`23{M!;ukD1Xz
z>LoX6ew>*WkLelKa%hC*cn~rLFXk7LV{&a9n_Ab-rk2x%mg1^H(U(n>JJU`L=f_#Y
zg@ThaKbM@C8`{~}wr=Z)*C5<SJ1^2YBl^h^N&d>IHLYxN3pr{Zq-TNU#dU@Jlg$*3
z%BCbF!fE>h*?p_vJ(wn^rv2w-FS~r)he8$0Qe|I{+m(&Ys{#T(LG#&M73GM;)KE`B
z1D{>^Oh&gT311+ba%SGRd7bjtRWD+4x^XMGRT8}vx=3)XXu_SEzQ6oca0%lDHy*rw
zVCF*=@t1hBCEW*bzM6{T$UBBJo}7E^M<<h=lnMz3L~BmdmX>ZRVkQ!{pHEFu;j%g_
z6eK$wB39-+83+tq8({nP9i#`_!oxeXTD*86d+DWxB?axyl|A3?XQxh;9igaS`pNFE
z*z?csDi!rZpL^EdZT*!P*-rZVFSG9s79QTMTV^5^5i&s7rb>7(BY`>+AxaoUqM3>i
zm(T9it5>tfAAj7k6-9849s7YTrS0Rj=p02?iq*dH`TW&aU$Vy@+ern=X0c!W>R0UZ
z-Mgs*dB3%Ott1)S$YF{#4EZ*{me|T}mw)EWX)E$^{`~oD=g!C3L8^FuZQvSfqFmf?
zmTn+tX>V`g`@_i-Cn~z{-@lK|pEuvyPXFkmk5V4*R(9g#3EF;smD<fvHTSvX#N5FU
zVG25b{=9YMZfQh-zVXKEWY@15qBvi9<yEWV`l*vAtu!HB-Cb<+Lz^v!Eo?kW+u(0f
zZqcBmGR#UceGBs4K}oGlbpmAMTx%E}WBJbNZRft7nH(Id2HtphgyrW`ROUi*)pZt}
z`qphcEK^?0=AR~6?z($4V-rPs(xwpVPY%NtS}6EhL6y`S`X^b_Id5ksS4Z2Cw!XI<
z9AOiP673V7_Gz1WBO+5r3sILc@{l*P`6xYOtY~F<%BLBkLsLQ>Oau<FM03+b0fC4x
zjz~-m02DM(=z{5rZcz~){OuIXnJIEp06?LOC{gA-xsFX}&qqJJh08cMWoC)4Hherq
ze&LO+C?!$nPB1trr~nNL2Mtmrx!tLW*Vidsh9QGMS`hf^>pk>9dyDPZv5oR%3J(|#
z27Lbc*X+9khpO&epoi+;|KUyc>@&OA9Ll#@K@RW30|$?=&%W40PbKtZQrF}FPF>>>
zf$@<+9+@EDprPOo|4!<=v!4zs5Y+fQhJ%k&XJ;pS;e{8im-ZiBcpDu5_y7IBsc>Iq
zpu~X#2dPj`uN9#<kBalW^6IN%7wa63!MEOelij#+qw1d5g+m7qu{-a)i!E5NfNh|y
z>-a;?;no(~LMp7W-|gRDS@;KxX<*)e|2->09=SeI5gmUM6BCw`wONQLMKtFLic&3q
zhc9S$<?<Ew_FHdRcFmhNkD~0KWb_{uR~@&CxuF#>J9Fj?`|!gL3Y`M{uQJR^;vy5I
zq+K>T2^i-F>3!qi&<tWI@@6*lQ<NqCkSi0F$!X4`^11Aq1gB;0=Lv>t=QGWek(UY#
zHH_t5x0yHoG|un`f_Z|8*0ttuhpeO1e+?*L^qKp8-e-oKwaw(LMNy-fjz)&pIphv?
zpxliq)?AC{RE{+sr$|%Uz!I`U6HwGxaUGO5m%I>Az*M1&mljU<BNF2zx_C`N1BEV_
z(dZU7b#``Bg+U4}7YN(T)gv<nMx|43iI4ZGLYI;_A18cy6Mn<-(L3y>90bVmft^pa
zMCT^Dn&?fR04g;X$Cfh)Z;ZJF-N%LV7qE5rl%vUH_+P$!$!d1!kV^$rCurOl3y{I7
ziS6edT|K4Nc-ZKmH4X*M3>gH{g24Ab9HVXH*V+2@YZ;=7`uciGTf>pN>cYi-svvxX
zA~VkvOmcY7+@uHpKmPG8Dl~KtTexTeMH0=S2%%Q1J$S%rdilyVDmrwk%qJ}XY0=XG
zG%b7$lbQ%b3VWo&YMSkI6WYO<89G^ld`gi}%kH?ezxE?>H$`P$ym*0a*|L>>gem8-
z1P??_e(~j(rF@ot_@eD3g^>N9fBQG~(B{o-6K(5;BeR{-Y=N*AqN@3xJ>Re&kNs#}
zEB#lTK8PrNiyV?$w{D>|`5wy&*+M)(=#RDf(@#I4?d4~11(&Pn?Af#IKi+tQZP~iD
zQ~;@!qCG)~Zr!{0TPt!iPX*qBkhAn499{Y<2~z6hqCov!o*5ZqIdY`W6z3ig(E3vd
zZA0hP%Kgqlybp2|`G`MIQbu|PHc>82iRH}FyZXPfcOXZg<Y@7Tz%~zcJ#JSUVXi1S
zQ6j=QA~7D5KtT(IE@8cS8Y%C~y!neNY(xPd<jf406hKhuqGCgN=~C$(RiB8!D4Js&
zoKcOdtej}a-%YFE{`Mc-Zb@JN-S7TIx~*)(uC88s;3zz-@IC`q`>7(M{5BKb&m0W`
zUI_FpTxm7AcJZ87Q-Ak`4}KKznLWFYerTLzLqo%KEJQc>W5_6ixrYj7wb6FV8*F;A
zko(Fn51ICJ7cI4#-RM6h(_C{K0XWT^4Lbz{A|H;(1^NahG7VJ(CE)8tTYDRuMO(lp
zDP;^IGN%Gm26r;2v#X2EqAlVR6d`%->Q$>SP{knDzzqd^di!Rvp6+fd_vf{1S1GLx
zBHL?ps$h<FxSRF#_D}?V6T=Trw+3%jY{R!TmwqX)fiz3!hDw5zIyuX)m#Yqt<vQEh
z^nzXs0j<u=m@suPQB4#2VQ6xDu^8xuN!ENy?K@Jn@Jg>h$Pt>=;vKI5HK&!$v9Y;W
zKtKUBg)S;+^EW}fL#kk`LKoP`?N!0btq-CzMat*%^srQ2U_)%9=bT&PWAqfdsOT#G
zDpk3Rsc;Lc4+jJMePF1lj)~w@1TM60;`qx5(LYD-5u!2?amk}DWwb$?_3H~!orv)4
zFGg(2_VsEvOwpK#p2+3O+jToSx@b$fdR{8y)b~Q&+;>F4?_1T839}rS{r!c=W|t;X
zmj~&=8Gq>_O(3Sr==5qE%W%aa)YlkAs-cQ7{a+J&;UhN2mh_9G{o*C1b2pQQhlUvb
z9LWPaL{MI*h)(>K$)i)bp>;MmI7sWTzFi~!q}!D7`%+1mQYXKfWvjglWHZB~tZBHF
zO=;eGo-OcnSySx=h{&Od(RW+EipEJa(FH?x_$Yv;&_xxm2t_%nh>D>tEp2R)q8%=r
z|GCtrohp(pSg?o^QLkiIuU?`p1%(gK87f|ZyeZ>jW9$YVu*r!iLwsh#ULDjxzh-oF
zc2%&#w#+=~r-Nowa_`lv*RWZAeQcZ(c@NO9pvR6KqjNDTq<Zuka}DgSwQE^RaVy5r
zqem>fN;+`>I3T4Pawm-qjcoOrHP$vhB<Q|%>lXWo^446uRQ=_NBhgK{f!5q{XH5YJ
zw?FXR{!$xkC0Tp-IvU<-cJRP~(slhO91w6WgM#Gh$QLx9{_^ze_C>1Pc<JIrHdLI4
zLG<7b&ITH*JMX%SwG_88{_y=#Hb!$>7lHp=$~R=$L3x#K(HGFmlqeo!h5SXesJW?`
zEm*jaEvCON`ZXR-GbEY6K5(6W91t<9#ijZlstnH|U1SJ}-I0vmPKy>TX2`{aoKwi-
zbd}y4Xy;{<osax$8GFlfN1iV#fF5M7TgN>Z!KsPu>ir-7)uW}q+gM{qX`Xjbq$Z~}
za%c|G`ZgoE-tvC@$mcwN9rS1%q(Ko3r@zWLm-@)O&B9ST#as<&DIUCn>ah)BY=V6a
zS)^L33RC;|_k}~0jg`z%#V)}2NgbFdtF0njNtjY6745Rq#{;tbz#z+YR;G$eqwyYQ
z`Z6g;&){sl$Wcow@M>o!6pF~92~jY{V=0qp0#1fR1QbA1=pst=a~`3nDz$FEeTB7s
zV03h(!lBvK)onTS&|xt-J)LNh66apLbe{589cNP>4jSGcvm5pXrPlV23Kr9pV`gM*
zq~e<Di-)&A%<jGS-crsl&gX%L9%6s}>t7kF9F~b&lVd%E*^^H_#TG3pZ-YO5`gEm3
zlXon4<5xV7b7#+C&ph`WB_A*6*h8oL@4ug&pd39&#*M_|cA863WXOACEtvM3!s`l$
zW?MVkN{Pd#2-k2Ont}o}GjjCrA;NjnefNtu*m_EWK26S?Pe1;c9sBWE#XXf5UE~bk
z^~4huV|AAD2kCNXBKP4_Pd&|+ELl>e-pI%Z`}3dQwH$#}H|YYLxkygmK|d;RT61T?
zA^qczKeA6g`IsEd++EFE$Q@U#TxnIilxcm29Oa@zGe-{EC!W~FR;*ZA)qQyQLDK6J
z_Vdr0x2;x5a=XCaP;U46^}^@te0om=p)2HIKg<p?9K#?~K5uXDq=ew*uOG;nHA1<n
zl0YRVm_}vl%}E*th8l;X&ROyGgdgi1j;xs<+pxwa*!KuVs;R0lkH=--Mkk<yl1WPV
zDRt6{P^20t2~+B%6{FNKlYxv<9OSN0nu2+i&$4N<RmMy|_JCjW9$nw>ot>G`r~E|W
zM?2-VFiUAkQ<hjC9Tjj@=%R{cgraJw=&r@+Xd!Y9Ia69%3R@wYsT$brOO~?v^X8M&
zYac}mx@?KWbO!4p@!2h0;<u!a?KX!da%bwGEt|KnO`A4Z4x@ty4_Xcy6dk&I-8##$
z`y4qGUw{4esx7K3SFB*W9)Fy*k|Pi~bNVQ<Q;IkU92A#Mh|+uErI#!x7ZP}X_uY3^
z)a-%<3)#kv8_D^++UkjFhIT?<(A9wfaz3AObZqAF>revd;YS`}>j-N^+8!eO`};4l
zrp9KrWa(0>@^~lPNf^Ufc=*U+Wo?%)Th4aw+(~2ARy9_3CxeQUrGcVoUw-)&D=|Er
zm#7?xC`RNRTC-{uTSz|;y!6t`R+9EBS1woBF>lUXa%R3jQKN0_JVi`nyhevd7%EHN
zy?#Br<BmJ5?a1%F_m_%(vM<h2V)v1e+8>&0*4$w^&Ed@Egk<@^49-kA%}<^@Y3Yae
zA)+<m#K(K%tvBCf7ir9rONDu!qk%5eGQex6xnKJYX+_Lx-fC{g3~O4ukXECmwIeYO
zO}nl-UfbV$I(Ql$1_6VBLBMf|j|>*4&zH!A`xX?bwyMHve?0rPISCz<O;W;8sgqWi
zBGo`im{KRL7-f@L5!b;{*4UI|)3Yj5$7R#z<X9E4LsP<V%m?MwPlA7Dn<xOM&_xx#
z2u0OU5n5Cdwq#!Fzfih}?dZLf@EXpvdF0G&Yi%W`+C%KCuRf{Tc6$5rm23t5UB5m+
zRZaI*_zp0ItEH91xSpUGkiD|`I7KuCrM{kCE7}o!KBbC<;#O2d#=ZL5YnJ2Y;qBYm
zpI-k{N!-fiD=cRYF2K?DHB~eGumA1;D%_WK6mlS3-q#O4_>kqy9HMQ@fB3`it;k6T
z`01ygsIuZka*(}bIW@7x{pX*5F32wa-_uk0z`%7>LKMmUcO0=*H0MoCP1bgONc#&#
zFv2!Y$4~so251g#r3#XW)>L(9F1vjhd*<0^Ew)FG9%bKr{Wbf?fBL6_7>BX4J6U8L
zoQoGPvYeS?l$PNQa()jEm2(aK@Wc1)sVARe%a$)^chPotyF+sw*#>7O9EKl#_+cr9
z!s)YT*zuDm*ekER%9c~#*_70M;Kp?hkM!}(PiGna+z8vqH*LDlx{bNS>CQXvvgQ{e
zL*IMvy^2W8g9i_=M<3l`*|T-qHun0T{zUI<KA|~>v>pBEp9{sfF+^z!4$WrzVWqLL
z(J=};6a@@ZgMdN6Adp4`{4C$0*cZD3zO0H|TUCMKeAN2FDvZWTW+`E))JeO^k!qnN
zOsSK0oKnZoCv5raBdmdP#pnCVyV25MvrjW4HmUYgeGCpwz~!;TNi>NV#gvFs0FKXI
zk0H?kfP!{9#5(ZcMpxe&rKmIf^^=ox{rZh;A?5i))aKf|*0BQz%Xt_P0<~)8Dwd;&
zwYlW@?CqP)Zjw_<Bo3*&G_iHzyt%cl;^GA5wbW4o7?F+*<SZSaNXDZSRVPxO95kPO
z{u%q_-~G~x)LgW1Q7IA)k$%V@`0?NV#(q3;oWU_C<Em|=%C9|rz1G(DTa>SGlpJ6s
zKM)6oICXY(TFxTq181oiIfrZ5=6jYR?+_^mXO!Kc$s;tKl6Z?7muoMBj6Qf8sIuZL
zTA6a}2I)IR6&z&<xjwsToBRwVBfmjWyi=5u)QOf-v~LqRY@ny;%;ar<AO|G2!S@kn
zJyh)$l@<LG#%i3#YBz0<K0yw`29hU3n8Uqf19FSrym`Z_4vBtF4$h@ZZ?{+?8d7v-
z;vyV^-;+}l4$a$dFSN577yrBMw%e>TL<igR!6GsjW4&_aDz@bIrAiJ>QI^v=<`3Qj
z=g*(Fa(41IT(3ii4plfa`TgCyKV@h$m-2J2qHXObPMzepQhDs5A2$&7Jew+s`X#I%
zNCDv*vF`QRUKEJ&M{Z*{GC4I-zT@f9+7Y(AtvMP53<3s$x<J6s7syZnNsJ<%R>q>K
zs!-wku%}@uYM^YE5{^opw4)iB7RrK@J8H)&RSczIt8O$y`7|46rc)ECS#3e8Mk(qo
z=Nufs=CRyKG~wLLQA9uyIK^(FWSR4b#K@>pyA3IN`0xSC$%DLqbLTA}$7U;=Kw%Y3
zU5a?a_Ul=c`!PQ~#fEA)pseP#rIqfsP{9<Drs$zx2Q4i+nD%`04Vxxsf}Ji=zPz)P
zR}jvqrAwET9GbB4_rL!=Ir(nbyU=TlX61-3A;;Zj$`dK(+JvL)+_`gXH${e8e9#3%
zz$_t05w`rop>_QD@xpc6|A@SVLlgN<n<y>76yeROo1A|jM0eJrYKsf4;lO;5^hI9L
zg0q$p|7rF;IT*kE;tR@cS)I2NJ!j9F&9+fAEAmJ}e-QFuBCqHkij1`5HBoesx)qn1
zB$?=s2;G8x93*fq@W)v#LZO>~|KlHPIGZYa!}d-0-^Vsk@fSE|Il*c5`4^wF^R{SM
zI5_jgt=cFi<wTRk>vqR<GmYC1Km0&lW?b`Y4h|N^5IJsj6CB@&8pT-c{r1}m_B@ZS
z-C52Xp{Nv`py<DZ-bZP6Xu_HK?6c2NG^E;Zne*o_WZ1TkJgLr3O>y3G1f7r5Q{xp5
z%@+Exq>%i>xxKk+5HJWB1Tv3+{1O^66p2wp%FfudRTV7vwNA?Rq%~49O%=ydq(r<Z
zD68*RZDm2q9sO#Ut@cu|xi><jW^Ri1b)`6`W-<oUD=aDU9GW65m;fHjo<tLoqdDgY
zC<3S0jZ2k1LJY`b^b3vR{GS{d7cTs46*7U(3J>!?pF3Of;qBl5t>w@hBxfHA_tYY8
zE4SUPZ4>2C6lv0fuh`b@yn}K9^1PSVu3d9$#&8b~&BcomNw>#pCzms@Fmd4Mc>1ZQ
ztbTAXUb<Y!p}2^mT;Y&}V;Ea@2YEGb>V~S)AUM$wDe6Q6*9wuZ*piBTi=s|qgk~2-
zd*VJK4PnbQikNjOFas$wMJMFu&6}x6&wW-DDk4D<g@>)l_t5reL^ys*MQZHSNkw;F
zc=1K69qwJYaDh!yWaI+MwYZw{NFti=?YG{naNPA@xM;~hR2&K)p@O?e%g9j%XC^SK
z&I4)3h0i9D17nw}s=+(A<Gmhy@IiJT6<q?s8G4<@U?JH69bcrvJztPh6Va5Mutojs
znX~LZDr&ThA~nCF$WFV%7byxrz*3}1azgLjTj@v?@8cZN&>+kO-Gt~&%pXL7_6s;6
zVzZ^C#d35`Ot`z#u*DuUXU-hmszu5Vk(qF2B8TM(inxZeR+iulUcGt^IltSj2+w`{
z_R4m3Y=^b2jo$T~8k!JM?4?ibIn8;Qqd~wRU=T<J0$xjAWJV-L5nmR^rgad(8T}Yj
zHcJ^x<&M7QSgpp9YM?AkxnnKUvwu$tHi<@*Q!_U<!5U`wu<3+WK$oy0#_{%cW<oi&
zFb!>H0Yc>^P@5LnWTc3#VmB2GBNXMT9tvobJd_Tt28GB=IJ!!NZuIbd{o2*iC7Bb<
zcB`vPV>n$z$`>R1#A|-fyNiW$(9gb2SmZTGPDnT{xRX%4=XKseRf=~$w!><+fB$~=
z<yT*poQbWpt@Op0UuFvzEMRx8y^DP-M94u_1FZo=x5~K~?XnQDI68{T$nC6Cum#bY
zyjnK4)UP6EA{<nlhN)^Yay6bKCzca6lJj^YIrOmI{xEGfo}mayL@h2NHC+Wmlx?u3
zJC;Ve8|iLXy1Tn$>6Gq}?pUNdq(h`Tr5i*#C6$J|e)rz}1Mlpad1B@{GbfrRZl$*C
z+1Yz=BFVt}lqc=>%<o%tr)yjrS@6?|^L(9JC|Ref&+qkNHK6^!Vl?^t6(Z5ufZgDA
zd+@txwR_JRQ*}7&i|f=t)JE3UjQ6?k)C74<nB2BifyCR28ZKoRmj{@{%cc8OXYEm8
zuQwFjxzPq{_Z0E?OYf~1Gt;evq3e`0nt5|n;Qu91+8(AJ!>CyUvDUaNlTww=l?`b5
z$#B4srQ)Rk)h;Mr6YfqGm$5cYtpRB+qp;hbDZkp)cMvOJ1Ee@s^eyHl$ixkII={|>
zrp9s*XyjRd8IUIc&Kbk3mV^-d)Yj{rvv@#;8~epF7al)nmVP+;fL~lWKzlNMfhzkI
z^e53(bjxy%w=Lyc7;c8dKv7pHbKTe?LV#;Q^`H89wr9&oj+iU7;C+U?@`wrzdQ%Uj
za<@_g22{=846qXU?bo3f``nYJ-)4veH}r$>50;!_*Iw!3!I;buCgVcN7{$)3Q1%BI
z^9lCdM!ImSjd>{5SaCOMn7JWL^c(B~kAPt~S#qj(rm;>%X`BiIBbdvNZ4!9)DGlfX
z46QAAcQRVb5tBORV;%bOL{5zxj75D&0)O5ve0rOUaeBp~>V^x$%J%Lk{333=2Z}nA
z<5**dI9lCh+{O9DC8dDekX-fSF`XbEmR}T%WX$g~$_jdLs;eMX>WxeA^Vm{<R6qzK
zMoc1U+(a45rt2c;XHPzgB&a$@!$=Ct!Gj?T3#*bmMH4$E2b_F)H;5@_wzdDg+qdy&
z+zT;5@!Q{v4Ox{bMJ@g#c}2E(5bQMb6suEbZ~+QLav)jG)%W+OUF2(x;m02>8SgP_
zJLLfj&_g%MZILK|P&GJ2?FmJo2dR1vLmWKfb-6O}8a;WiQI9gly3fzR=sH8piX+~?
zpL?IX=5_qI1(j#Ul8{~a={gZqI{6jRPT*2nlg?Moji3H*h&V+YR>?7}ha;KtN#b4*
zYDjd<2I7XI%JR*V6^6Cv1I$sQ4-u+cg5nMbUFRgGH?|}!XEYfKQ3AhJu`>lxaY_4Y
zKgS9`_-*5puCMC7afG!a-;WW18%nQy#Pwbl2Kb!7TW;Cegw~*ot=bH4#(2W$@<`a(
zTq+~9$awL9h3)<ZAmd(P!F|~(tC}{&9y#p9A>*&A#c_Xk#+Dc@9BcClQar%8URH8p
z-iLBK<rlA(#vJFTvzA9ZP6SI=kNpBv?48-6+G{;*+FUq9)*2Gre$DgpFe+fEu#H5K
z`tiFiQ6l0))wr-@`G7b&`bQT6X;?G1%ZceQ4@DaPYuxKE=K?nbVVgI6?xLFlD^7TC
zzjP0h+ADYe)TMIaymojAOsML+F3yw>2vJ?fXnoxHru$pRVZzG=;7LsS!N#TcwGB@_
zjwG7FZV)-K@90Z#qPx*Y+R^>Na}sHyby96RW}U9Xz+aN0z7K#6Nem%=>0ffv5e#<Q
zFOSPuSowH@hPo#bDI_DorNWsi5y$*Mv9N-CH9fo6D0Ezjj%f5WW3c=FzP@~<-T4ry
zq7mEkE6iW0)Np<0eh?82{dMGLf(gC|F8)uyW`Xr;LPfbx5OEoEP)hr6<U~gPx|I}5
z*Y`Jw^k!>v@S=$_X<$bh4#t4(7yp^K7U`m*64}J{;W^&RHK*Y?Jnfao$RCV+HN@ur
zVkE_dF35)Tf-;>VD;jwp9iD{+`tC2b91o_P%E)1UmvW;JGdvMsI012P>yA_cPR|Su
z1j{U*m9#(p+!5BkL;9-v$Dd7DKdKoA28WuDHQENT4EaL^In$|t0?u4cA2hd22jP5-
z`0n;;tfn0DIZ&^t8n`SvLn5O#4%8MV?U@v;#C@W*{-e#KiC?*?uDx)6mlmc{ox)7V
zMV&qp_vVg{yEwl+;m(T7BB7qg^-yxu^TAK-OAT5Maer-c3ZOJW3}7V8ErF|cf+{DH
zDHBV_lzLW@MCBW|rNxn;XN1mEgv>Ass6(=)tJFypsR<2(4p{bx#V4PBPrxgIQ+I;j
z=-P7E_Qq>pMD$u`DL(FjBq>rf)FcYcPfxW9JMhgN!;!iq3-!C<I*}(Z3<1P155AOH
zl<So1cNGOQI-bAS8kAqzF5hxqpW1t^SKR{;K>{P0E<(oS9nQU0-6J|yxWF(R_nA$<
z^9m0!Ebn+$20`wxbG(jXixTQFkdfJ`2OUz^IU=~RzK=I}6Sk{;AuE5Q$=ljGeiZO!
zy`KExQ!s>4H#!pA4p`7$WB^@eQite6;rhu)xEBB3>|79Re_z?yur)p{`CdWAT0XW?
z@x^b%-G(X^XGR>D)#lS;II|Z$o)}FQ5aXrxMcV1WhninN-S~B_qQLz2aH@=9j`{p6
z`Aci{lfYB3s>)3BezJFodeX7di(JU@)TAzofbm5@l&s8ZUdzQBq?NAi=KDIeg*o{=
zjj()5>#B;2968MHC104SQ32FoRXx@i<k|D#N_lyGZSvETO|u~%!s&b!vaOA(Ddjuc
z71YNlTr5CO7K1xdks(!vMiUoSCY*Zl4Rbv<g8XHvQ!#eELcU}uySs8aJd+O^e7hD$
z#=md?ulXq`@e13##*(K0w4}mG^3cPIB*Elq*;0v-!ucyF&O8Ss=FG7yMfzgFr~NR1
zRq>RWPid>CI*vP+qw~#9EEJlefXdGUxE-sWi{6PKORp*sv-!SP0#8rTwncTcpA3Lz
za1Xh~inthn$eLUuNi>q844*?d29vRjCgda}EC<H8q=a@{f;!2O#~lWXnw}#nxEm`D
zlb1zJ{3QB5njfe9FouoFtC~6p(Z`>!sqdnsnzKln;z@D|7fsx+iVA1zhy=v^g0DLu
z0zs0vR1ghtpP#IF3lacoa9LKB-n?V)13Vs2?hjs#(!-wOTRcCJMtBo?h@2%V4qhiW
z>X5BjS*gy%hxPUOiHGG!<D^SS3F4<(%U)0SK|s3e9cjt&rlaoHCf)JGKe(}<z{SEf
zsCaH}0)OE^WurPSK(U_ZnJ(NdLG3?n5;R9%ao>jvOi#<=wjm^u2GyyJ(;-C5SA>NA
zn+#@_Q5JAdhj&!<GI_ZtvJakHst<*bJjV(U&b_5g8{1Tv`D?B&LMR1NJcfy7XSvOj
zTT}RSu24aOn)<g-vC9$EI2#v!R)<3mNU&s4G+1)ysp)#dG@*4)nS_pE47)FQ)$_CI
zy&AmgA9N2A*HaRWaI8ZoNLwv41*0@(<#`nHPxRIJB_Jh-*x21hD+TWHfxZaK@c&jc
zC`QjnnaAJXU-2FhA;Ku!6EDSIG3#RmQmdoZ>!VgxzE`mw@QbjKg&Uey&x|VKWJ&Bx
zn(MZ?KOZ>L1Y<gsC}XxWC38XhN@b>?w~r|kwt~?eyO?1LkBI_yZLFv>8>PN5St%3>
zBgS3UASJOzA5&WW8x{)2^=725`t>Ga+jk4zq$^x&s3hk&G*)e60+)FKpDQX2oQN?U
zaLK$E{fUrk31G|KXHqW#^v-HxRC)OJdjB&EoMVy35hpC-cSEBM=uM(TNfqKA=4Co6
z_5k1a29-2y0aV7?89C>2CeGMLFyVw75cbo;p`a*b<be`e#-w+HbEkEX&Z3MsEAvft
z;1O@r+H}z)gxJue-I76Oc$mTqC7_o-X5S^ae$9HO68OM_D-!m~VBxt&=|kr-nj|Oh
zx<7_>mSnm&`lV+;5Q^TG2+5lo^R!6nAWTPof%wr<Iv1m3CieSOCq&cIZ2yzkK~1iu
zw8KE>C~1I2UQ5A>0nT-b0Eg#ia8AZg^LgiH-q%N6Y!I3km%{h39(0v-X^Hfz7sA^F
zDFZ=<ysG#*ciD?%nfll!afpXG6iKBRk4uTl2JX)FG@^veF{Ya=4p~^>*c0$Xb05xi
zkE<=@hjvM{A+;gtVL2Ux`v#t;Z+Z=pWFruYA}k(?gAIh7WDX1Y3(Uoa`MB{6{A80Z
zlL&Dv<}HDONXi=TZ$Vn_JqdLb^z-o5^&tBFweQ_}zVI0Gy)71x?lo5^ZJNE1u?Fg`
zb=}jHE;Pbv1Pu4INYc83_J(bmL;DjMHMP7k`(0i&+0UOF@)Z-M?*{)Y*#6K1oxhtq
zi4(AC6NLBw5smBfbhjH=8_!=`u@mB^*Ls9-zcx;O=&R?sdS;G~cji#jy9h~-gw^iK
z9vtG?N=e&(Xd8=`*B$FbjMk+-pdR*i(BD-FkzYSGWoCsQfu+F*VOu+uD_r_~?anI}
zrC)`x7?f2k{7511^Rg8W;z_Kxj?1-;x&G3&RB_D-H`ZUo?zy_?dPYAFs8u>LN|T2t
z76_|<&)pm}uQut~8IR1A@)(Truc^+lJijL3<FNqYFcd(9QITt>sw4_gpn-IWN$5>&
zi6+a7^Um60UmenuQFjgSfn^^Q^uu7p$8zl3atKoPe@=!$5j*@GVy<)w++{&6R(l~Y
zn%LW^C~3->SY`6Lv&_`m7~?^vVOO(d6jmy6qDWrK(fA9du>nK1j$$*-(Qq8nXrw?v
zAsko3NDu8QFj>?*jwIY03ShWhKU|ZKz0=uA9ciZRWlG^>(K{ZLVt>nk>i`#4Dxrd|
z4<cYh$b|a*7IH`TMw1LNrW3Sw_Qz5N&qt;wilOf3y?{H)^RTmw>o#Xu0BB@-c`<Dw
zpNTpB#F^TCG}*J+*+Oks>&eXM)oAk9x?%}tP>#Rdt<4#c6QC*-oCpz<lUY@53Vu5Z
zw!zWN@as<=z4m4@gO!}4p#K)#CgU+$>icfu4oA6;JJXqBAwjVjE#+~s-m2q9j*Hu*
zn;<(^3>lHjcRrE9e15CyW0(@X3ZdZ*_&GA)&X+0HA<3xYi<xS~n+@|mvX3{#-pEkB
zLXE&<#d}M7{xn+mMt5??J3=WY;rM~YDir)Hfaom9pKs#xnz;AJ#`?id5Iz4YuR1Q1
zd-&U9z7G>~?FR940IQ$?c}LQAS4-LBc@7sh{!AyAz;ma^5$9BRjbnY2*z0p|S{|v(
zDko^YWqhK}FXfOo>4Ej9@^+5i`0E${-_|i--XKjktqj!*9~{_3d6gLvAta3fAe2gX
zO5Oo^<v_Z%?`XXE0Vi2AXX{Xf%$$Kt$F?HaO9J=Cm)i@TGLjD_r#ik7vYL@(>*Xmz
zLj@g2KYF2+?W8%R`z|z_M{-T6KugcCQg<^!cLLMov{mxip(>GzA!l&R0B(D7n<N{<
z+m;Mo<E2S^C}^W69JJlk-7@`1r5)Cz7iYk-_jk+3e~mG2^~w8kg@<~XrE7A_VIbst
z5)}_mR({^DSMQN*ub9IDTtwRM>-;1xr@g}#t838t8-#>vQv9iX<FD!V_K9y#_K_Q{
z_K33!sK&18?YEbch<1;6G2^<$59;G(jm7QUrJ5>z^C81AH%KE0hN3P%Ywt#HZx}rI
z^XfbX;s)vuu^)mP3@A-8TqN^s-|vbKTDs&hI)kztwkNaLZ1Z@xYz5c^Jb-&{^ru02
zQ#kutk(#IiVm`uc%>&E$as2*Zccs5-zh!_(16Xm#$}ev8*RYtva>K#Pb1u9GUq8D}
zId8P(*BLbqXoR*OJVm(e<MkGNI<;?$Iqa1aNw+bFRJ_iyn65nTjU5%+Z*WgO2NV=m
zd<lqSHEKzoc^LZASl!-x^@56fv1(Js-yjsH4hkUFPW-XJ1{LggDY6_~wNB~4f%#xc
zF0J$Rqm1qEBH;oZXetd&;W#RYf{y<gElFNpyHn#lU<c;#dW%~}4i-vKE+xr3tk(4H
zM)$mRB}f8mB$B~s8zFJ%-xTO`YbJyx$wa@DojXW`y{n$D*%p*^>M{t@ZDW3V`}+R$
zKI?r8yG%~Sn<l5st90&YitWWK_yJN>Mg|tXaA>{BDHP^f9{?k9s_ZDrux*XiBCova
zUNTq#y!OYnPE4a~?I{zafr_aoP#`K=>(KE5R*fl7<g@{k>XeTOXynpx*n~ynto?8|
zdOEbZuFi+YQ6W?@aa)@$SKlz)D3U&?+wJeYcWTi<1*=4iO{UQYTiMQlJv&6C9^YkF
zt29O13qKKZGHP8%sqz2G9s316Y6=+8`TH+r?uLxOJm+;Ue>r-;Nz(BoiR&r6LPvr`
z!`mq{Er*yop2I%DkT-;t8Xer=TcpA7&S-(kQ_TE`Z`Ku3lHTr$)!LQDlp^+ex8QWP
z%!>O#!0FndjOljg_U-wSYoEVm!F2l>)&H&YsP22(`-AHHP<=`>R*Gpr7e6@1rRQ2k
zn}+s*BAUkCpx6u(th4HnWWg@{^AJL5sBs4r^JBP+zJ;Ou?E9j<-*-_Fw72hS48-W+
zjYA<NC$=OHzEhVjJvDE_(jMk>-W(#MrN3yq*kJs*&$FyFqvYf-Td##{u-@(8{+CMJ
zd+O>5Nji&)oQ`De-^>gi?<_k*QE&=jGu;5-QS$!xmf>9BJ$*qFFA)yztsi7u4WWCm
zNyYc_Rg)Qy#NEJ9w;XKnt%yjVPCo;?)bAl%JMb3L#u`LG?#;A)<IBor#b!>jTW&Ge
zSB=tIoY*<=?ECEx(ROfM-tVn3$Q!=Nq`k;z6!Gi2HNq^ep&u$f^CUZ$1$fN5>d-|}
zWps`!+t$-kQ_`g#{BFf0=HG+1KAi=I-Xk0)7{a;5<_yH9!Rmx6GZ^m-9r(F*hA@6|
z`M?P&UZcSzB3)goB=V(sb7)UEK(o2wBWlat4@Tjq4_X&HHE}LakV-*Q;e*m6|78zd
zTAUeSYSrpYQ$G@EXI$x5i;yFsdq=UE=Z4liJzC@c3#tkC*Mdk!&VmAS92`rXmIDY~
zwH7q6oiUBaBgvNx`ZVYl4VrSba(4iMY&A<Fzel{}PF!;e_`E%giZxu|qIWnwx=+R;
zi6;9T_d!qkMF!+CadYxcyj?y2Y_2Hqiz<SeabTWr>U(bfA=V6zbjDD2Qh$#j3DK>T
z<VESE7{CfH{M<tOTEo_3c2tL?NUY~cuAbX)0#Wp9ys@YHN{5s<<<WBB$ELkkKbB%|
zd40k6GntyhMcTezuW{h?Ge=0tEtk8609M;r@9nao)5hRN9ccgaxCC056n13b-+))I
zDl@=klD}y(scyXytClhS=n0HF$>H%6gTR%V9Aae1L`vWHil@eYo0|LuKL4H~(39r5
zNp&^GDAA9tSi4nN#2!n?BPe=a(=;MK`_J;aUChmQsDmuy5t|e)Z}r9<tYT{pGRPx&
z<N*u*L2C<lN*b0f3QlhovU=<c3NNyU={}`LV$8VqaA*7dh6tx|EwAhtmH_a{Qb-uQ
z4k2$e7AvtWc>jS##B5rqIF?06^inMlnOv?nv=!L;v7rGE7WB#`*{)%<9`a?>Wzju`
zn@*!m4}ubdG4dY2oY*)OMhWc~Tzi5jfogmhP7sJDH-;Q?XfR%hQ18y^M1&d@4ZK!3
zww)M}B%(*H(3xs76Lg3JLTa`bawEkFO=^%Us+%IK6eCg@Q5j6wx!x{@Pa;)|hFQgs
zJ0ws@5j-kF#GwGNp4!r42q|RMOb%9OQM=4rTkz3ja27R}OVCGhT$qtYE`#RliYkNh
zamB>ndB)1et13Px-@9W7MA8AeWz~a%Nbu12c_bsOAPl$z=kLQKBqeQ5A;@vm3hb(h
zDU@+NcQm2sZM%c9($B$b=uGKc>df@jeI3o+gK<hgI96~aj@GeElo@@Sx2lA$d$M~R
zH6qfD$=`YW*S|9ull{EH{6J^f&LnuJtjm&%KZAo(nR|&FSmz9AO6)QU-5$6i{GY3H
zseiB>rV{XI_<#4eiBn&+kiZ0@mVENr{`DG(G+Z^#XkXiXm)!YIQ-+c)M!xg|li#`M
zem9h)a%>VZvJpK_D`=sn^Xzpk&_h4`VDTgO2cqx8GIkjMEltk2kWE>Iumsg^=+H)G
z8kleCarch0JB{k*fH5oU%?zRH?Bg|hd=LyW`r;Z+(l<K__#&+mt-cIWMTf!sE2Qc5
z3Ej=%7<hwx=8mP4&rlSQ3nYp+8kLBa_9D`j`0%5UAg9r<StmQEV&PO$g-%w~_?mZF
ztwX%(DKdnFG_ETcynb~`pyM_bBKg~9ENm2hhRY`)vO-!Pf_hFCBhw0-Iq~-e9bY!l
zhFb)I$a9)+871z{#dcVpZu6t{1+P3LL9nnZ=UK2l_z2}gRqkNLEGhm_%X!u70((P2
zBsU=;l1vKv3#<%6g6q1wpo7~W*X<e&p)zYge$GxfH$0?i9w8K$YNy4hVm4kOgUep4
zEH?Ekc5KAQGO%bit(&|*m-PayIeBHX_n74zUGl7We(PSALX;PRxkyePb~IfS(Bd(}
zDRY9)+)4ovibGsi`_=+*QpCg!BR{nwIe7CvTpyDt)q+jMBLE@y8XEq}r|S02dlE+I
zGlYw8?&pat!qGnwB*@PL+iIz(d}I@lbqfL3VRPygE2JJ3?=|ZXaO^hg2<7;%Ft{*N
zaYNX7mOQddaQb0fY4=jVdX$68n*e`VAL$kKxbi5?t>l0F0SdVNtSC6f3*C%w>>5Pr
zz>*@(&buH`GMQp~)I>SrfS8&spC*iPl5~l<B&-)kgtm>Kq7=gx``oP6Ac|j%=I(5S
z1R>EunI0L|0w>`z2O3WB0-d8b+-%%83`|TNe(qmL$ET;}?Fcm`PgCjeFeENuL@+Xu
zz65c;mCy6y*YLCwCJg*ueAgF&ya*C&l7c1`)qP*-RzKXY2E9SysgZthaw1-*=^8(0
zX2>Q^)dWPTsU2q2Y2hJ#=^+w@H+xOaSFTUBmBf3b=*q%Wf_Swrt8PQolLW9iUxhIs
zX9aQGDmMxZzuM7k!xWumxR=2w53K;Vv@dO@bu1l~tOtZVD$S19wKNYrG*Pk;(b8O~
zZm!AmQg@b0iHdS|*!uMGX6CSy=x?H)oz=mZ>4Nm$z9%dvE$nf5Px+ZhV4zm59bO(+
zg_`&zrXkRGfH96FH>j$lF5GK2mu{ZDEVHkG5@IL?1<av9Em9%$fIVFq0$zSxZqkdH
z*d-#-XYu^}a@QTlM*C70y-rKBTFy~%6oo38st`J%%(20I$!NOxw1@OmJ1R`g?shaN
zn~-`5wIuo4=!v)1Tprt?qTSBfKZkY1S|QepQkk8`2_aAxf0ToDxtnh2SA!k*cJ2mP
zq{C0F6=LqKOT_cF?24)nMYJN6X!Zf!LDRw81}V`3d`MOpp`QY<)ro+xTCA%Yk%=nS
z)1#d{tT6omJ7E~FdY-b3%i(f$ivCbRX3LE6L=80s9tC*ewZ<XxO-3)f0lC-%gW_1R
zj?+#rD0Wy+^e|r~3tFwrmD*S)${&;!HnDNW37X9jF}txZguW=VV-uR0BM2jNjIcHe
zh`J*!G3(rET+QtjUui()9nnE%J4|`G*$l>f^a!C^)M{T<v5GKqp_fp%7pY1$-EKLI
zbLm10k+|tX1+(r}0<rUSLg5fkYl#OuZ_~mwAXfp`u|(RpUn-4KI3o%yTiD7kgE~J%
zV4#Q!9RWj@*vv&uU>lIuukY<XI<#V^4s8XxlErTd&LpJ|j#jj^svgvP`*)~z6NsB%
zJ4H9z7kF<~CSDyYi21%YyDd!|BDf2I4_h(dP9NpP5rY(j(T;=66h#aK(b)@N@igfH
zB%vd;YDXx<o;@+jHR55gUdza)yuR}Nj7to7zE-2yJRO?9XCvmYCp&;RJP)U>x=`Z(
z0Q3G2umv={A6;F{?M`8jgdh=eqHn`We>{*Y%W}sOWEX2o_ahg__yxS6YTQgt)aaea
z7%XJqL)O>Vt7*_NG|0?`nNGB)JdG-wi{_y9seBio+wXyBVR_g#uA9jz-CsVyc@bGG
zpH`pXAf@(M;$%x?hzNchD%bw!)w2**L*de$bcb{lqbAE(!Oah@b_2e#w8q7;g7JS=
zxu6Q6zadBq%FK~f`#T;UE`rVdYM7p49EQ@OZT|Rg_$!q*&W$M;*u<bi_GuQ^1u=C%
z#@hCr^wLy~t^6)H#~jV_DViNk>$IiGn_q2YbV-;uGBof|ZOJ}aUzN1N$V?9=LA`J$
z@$Yd5VU12`1jL`P-<+<K!!-Z-b3Bo@f2W>2n$8vF1sQ;Le*Omo$*%9W#8td{OZ0jx
zkH=<^$$s_^)yBCw^%}ETt)O+O#Lf%y&~;1dX;mCzdp|6mT5nTnnvRddG>+H@L`3?A
zj>NC6%_HS>qgco-)0-(JopuoF#IZ!5F!o9RT%Mv$%Cfaylj!<)MDAVu&|k>hDxreW
zQChVI@c3le5_TQssg2y=d2}3fDc;&yST`AxTqr5`oGhnu#O+VNu%Q;AjKhnGOYD%B
zwpyi%3V(mmk32n60au>EX#>9GlGvtcYO;v&jF;c~HM4FZGaoqq-rLJ7lhNt1j^6C&
z7mz~epnFcH!w1pJ-dS5(;yBVBS!;Tr)=9J0=PD_wumf#!VZ`eJIm8H|04(+-VahPW
zG_UfM6?-E&a%~<&dTTydDO|hnFkTpVCwe@nG{R~}Y8=X}9`<r&#B@Y)PI^U{yGDwN
zlS(_08U>=z0`dk_Yb=GFUdtj-mC)Z#p#*HM$>=&9SJsxMzmcFgrxSkjVddeVAD5&!
z9rmRwR|W1JD=mMoS(N!Xz`@Nu7R5OF^}jui0fvKhSz@U^{LPDtQxJXWo+EATLpgl0
zxFvq2N97)NmrW=x(xQNtk>;ckk;X|>Y!nr-&T-_byPbQc0lw-COIt}PUh1?37j;G$
zY#334KVZxPm$j&^%R46h^!(gr?CXib?=9o5Y~pco3I{~`_H}+i0qn!du)eXe2JHvi
zPwS;UYW+X%#)%+FFf}T*flo>0hS{yL)+wkEzP!(pAUia@jw!)niKXGH4^4|=(wqE0
zNbtYj83M>!@Gz8P=9-eDAp4N5JTpz6JPOaW0ume)ulP#p0~9^S=lj`B<1V9*vXT6P
z`pkIyc15fwiTm4Ijh&s@N^qys<FV@OSo!1N&&4{c2BM<86C;)U`d>7R;OLvp;74a&
zkrG4vB9Iczzws{~#6(-S=#P}q_u^N=Bw3mv%>R7?5&kbeYiwG77EFkAAovV_e8rDI
z1!YL#?6$B}|2k#uH=aisx50){PD6o%fgx`2k7Pn&v%tSBasyoeTGu4u1#|Oq8GDVJ
zGtTN8u|5`A^saA-SmkZVOH+K5rN4?{F2-p}XvSdx%5rh9`Y{Pc9Z%X%{18eE=*HPw
zK09tfVj5=&lfY8a3BJ`9)89)80G)b|M1VT<4FZ*eK(6p)D}87IYZn!6=eh7Y6zs5K
zu1l(h_Ii-8!ta7$DB6+;!EmW<EXqX+9XVA;j<<$#Y||Y`LD2x+B~-n?XEC))%Z*-X
z-uJsW%%%}<E}1_Gn>}HV#a!Pacd=?Mw!ilcmxD{id8)+dWuKd~uIaP*)=V1%I-g>}
zSH5JO4wxhlGlU+e`wf2Y3m9fVcBtvtX-PMCEo3QvHhf}@L0G5b<A72-D?X!RSUme@
z0IK$q66cYN)Nl@NgTI=bB|cjbWZp5XHv!&0^^|_x{ZuC`3<>)t3NbhRTX6v5pC;Gw
zai>*n#By8n2MxRMjd;Z(Mj7jH@d-fXnU5*SNFJuf&r3jEGCbKW1d5Hz3aRt;|A#`?
z(BAGJ6ul5ANL%VLlq;bqS|QZdHCnmU7RjcZzE!XSH2|;~vQ@U^X^(VWxZgtn<1p6c
z$gVLYXXOZO_vRrZ4u{TK3^k)1WlUh3pc%L{?MbMOcv$i2JpKkk`W1hrQgghhN7dSe
z>kHs#Qs$^@u>TOus+8W4e3Fg?fdnf%6iw^TnhcS_zwqIB#RsB-l%wgipbHHM_U$g1
z71AJv=(Et3nlJ=AGR>5SY<cx%LE#Bc%@!6R;2X)il?oUJ{UC9K+*hJ))WeQwChJwv
zmllF1#{*WiWC5jtNC|KM?3loEHH_AD&J_EzhtMBz{7B4J)arfQG6m171jqd63!P+F
zp8}jsA;Ds;TUwOvH**Utg<kkMsk4*W2n8seXBg7Xx_{pJZ1g&XgoecaE!+Z}49&`L
zOn&-KB)-eSZ9W~XXhjUUyIRcjH*etLWjniX-Zh=&gswOPR+Ve0<<86VR{mo_7t+Br
zo!KeV>34nLV>pyj+=!n?DQoj9N=V@apT}FQsC|Yp$X+et_$mN1f2F{;561CP>V>}+
zXF8aTmu+P)waAqV*oVZ4)Zo)j6|@;TOPCq@HAU>2mL1{bdv43(&`2VIEio#$KH!x5
zu^4ViIWx^fzt3<0fluz-_>7QB2=}n{-$mLT&T6GQJ@13kD@}-%sBc(8k(A3tvO^yI
zI-!7G-H`?r_hNAbKHVqrX(|GH-!ftwtg>(I^6N#h_Qip}65)g76>0K@EhOn8ZX)UX
zYUlf?7}Al|BnIG=4cvK?3C&hJ2B=U|czRtDQIKK^<F-oRR+TgJoQuDBx&KB;*$RNo
zA;r2~hY-DDP@vbmn3w`JDCv<4b1)OtD&o9-TW3DhO-c51U=cZ}OQNQ!vCp7s+Q<Am
z4RW3IurP<_A+d^B*vhuwxXNlDYt^i$G#0P+_7|PK8Jk^&s5Zt7*qI5ygL3g)8Jnn2
z7$dqzvls6Jb(Fw$WwP+Sa%X?B!EdE#-ms=<p|&s~hGgd6a4)rte|rwSutG~i?C@X5
z%1gZ~TW2UCRt$1;7$86fi-gaz&){0xXaBR}3&aZYp&pW4HJlJf(^bnx(|PQ1o5t*9
z#v<rY86UN&G%iX9+=j}>UKwS`{8da!TjK>>4^2|&ihD(pLZNZbdF8G7se8{bHSYC3
z#$xjsbeJ_@pCjp5`4Xi;2Cn!t4B0M)P%{R+d)=)(GnXxZ+ekS+(*SpF00>+C!Il!e
z*>eyGn~Bc68@bvp#bx5<r8tV4`Y@L2RBqVyv{wObhtA@;^98^|qZC?B5qmFDRP_7~
z&Y<(AB2H=Tf;mjYhXa>OlECiJEXeb*%Gegf;(&wdc(0zNr&{=s#;6PTM3~s7TWTdK
z7-7xu*Q<+SZ^FDET7NKKph<=EapXFv15wjv8)ne{!@~xF$TCI<2Eq?kqP#%u=}M&h
znbIQDq(3&X4DH_|4xepKq<0J@Na-M#TdZ$5gE0?_MyqRLMcH(CKh0qUHw3*?yi15g
zpQG~4jdWU_8Aj#m8Otnc0@I)zv<^UedXvlRu3F|}47bJ~1}afs3<4%zP$KOa9_VE>
zS>x=?u~BAnESb<-JqL%R(n%F}BMrujkTW=-*2SPK1|{c-AdbmNVeBXBTkexYELDR|
zPrOH6(J2`Lm(fA-6VEKeth^A2zyweL$KBB4(v;}8fFjd=EJ*z58K%-xvriC6vLwVu
zH`7xr*M~yHH4s)<OgPYjKq>3dz-Oa{nFd}8=u0{UL)Hn1DS#!xlaK$I0-FUfCE8%E
z=tJ-6H=e$h)Car0X4T><XY{kA0)z&hhS^B}Fs&4B`R0+_wOAL48H0KD1;`WRki;*}
zT|$!oLxY0{Vn-eM!8G?(xX!0_gnWXN#zi{=oX}DwxaQeKl5&2RC{FJ6qkQkEBFQfd
zpjL*GNcqZa+o(>q%0QkOG~fup1rA1lo1;$h(d=qjs1#q6<z|kX#`-L#4xynRCOrhX
zraw1~HRbi|2jLl&J>M&HJbhV&BrGjrXi<KP8h(Tc<?^(k;`&2jO{5NGSTUJg#yv#V
z%QnH0A;UQP6h^pIZu_aQ<hZJ`z--B!@FI3}uK?_lMqcR_4ivn5CH8yx)~_S6(e#GP
zLzq4k(R7QWA$IS{F?a;z_>Xo(HS#%tnV(P4wuX`;N@+Y;Nh~Ww7O;u1E8ynEAr-4Z
zeGm1+Yznxc&|QaN9y1m9{JXtRxt3ehJKWYUVW}C6<*=x|t2uwYqQq0_^mVp7yf`Bz
zKYYBnRTmnRli^c0a8#E;O_OW*5dkoDeRcr*`ZifBbM9cA&qjP8%vKZSwit|2<w34#
zvJG&moJ3xR>PY&Pu^`{A9j0|{54S?HMYBzBvMKGItGC|T^!Z9-d@~86I}ze`?S=-9
zSK<ro+&;7eRECC3;nvJ;ZE_-6!G@OhU`;)JnSczBXo%#Ll`<z9&!$!I08Q9g;*JxR
zn#6E#&ZBF>%Kv3iK)5p?$sK2>MPp^Zpb;gb&5JBD54_o*3>{isgptF^GoZ4%q?N<d
z&xrJ<v?GU66gA{`?1%EmwSs%-Tl0$dr?B4dI&p3v{?7Yf8CqXT+$JG@!=_ngR0PIg
zKbkYXXzHh0wnP8yXZd38mGXFA8I!A=XA)@pF-VW%%%R>WlAVX0#d_pTDE9M?oB`b$
zi?;`7SqR-MPvaaks}^+GZTC>?ik$=!i?oyUU;L}X-a85k44M@|dswEDq%_h^G7s+m
zzAO(Ew*e{UZrju;ugAd6)2IJJvo?ty;0AaH3DT?hgHY@(_Yr5FoSD%(JqNXZ<tW#r
za=@*V<gz2e;!Pkbo$JZ}|Hq+B$zW!Lm7P2#^4Ps_r%?LC0D5uFQO&yS%bxNmFuNgf
zg0z0F)}9{CiY;^CfBQB9G%3<pt-RoV#PDEkmN_M{(9hW@-gE(Sl!dVo3b%DfO*!I{
zu@Nequu}6Z=WHguCVOr7DDfI892@gK$>+XUJU;o!hxlnaq{c*X(67`z%{+N?m=a~l
z5w_QbSi?fBMF7P2IMO>`iqfff?t)YnC?=0jtt=;^rz>3`DVUv%xDD$Z3#XR1%@!)&
zHVr!_C`QVUEn<Ls-dqk0Z-6&H!7}eAU&n5m42eG?ImqXmcHZBio&0Fr$@bobp&&nb
MX%%3-q*>Vi015l_vj6}9

literal 0
HcmV?d00001

diff --git a/docs/user-guide/providers/image/getting-started-image.mdx b/docs/user-guide/providers/image/getting-started-image.mdx
index bb1c294af5..d3d74ddba1 100644
--- a/docs/user-guide/providers/image/getting-started-image.mdx
+++ b/docs/user-guide/providers/image/getting-started-image.mdx
@@ -311,7 +311,7 @@ Skipping TLS verification disables certificate validation for registry connectio
 
 #### On-Premises Registries and Private Networks
 
-<VersionBadge version="5.42.0" />
+<VersionBadge version="5.41.0" />
 
 By default, Prowler rejects registry-provided URLs (token endpoints, pagination links) that resolve to non-public addresses, as an SSRF defense. On-premises registries live on private networks by definition, so to scan them declare the trusted ranges explicitly:
 
diff --git a/docs/user-guide/tutorials/prowler-app-rbac.mdx b/docs/user-guide/tutorials/prowler-app-rbac.mdx
index f00a852f19..f589245b06 100644
--- a/docs/user-guide/tutorials/prowler-app-rbac.mdx
+++ b/docs/user-guide/tutorials/prowler-app-rbac.mdx
@@ -261,7 +261,7 @@ To grant all administrative permissions, select the **Grant all admin permission
 
 The following permissions are available exclusively in **Prowler Cloud**:
 
-**Manage Ingestions:** Submit and manage findings ingestion jobs via the API. Required to upload OCSF scan results using the `--push-to-cloud` CLI flag or the ingestion endpoints. See [Import Findings](/user-guide/tutorials/prowler-import-findings) for details.
+**Manage Ingestions:** Submit and manage findings ingestion jobs. Required to upload OCSF scan results from the Scans page, with the `--push-to-cloud` CLI flag or through the ingestion endpoints. See [Import Findings](/user-guide/tutorials/prowler-import-findings) for details.
 
 **Manage Billing:** Access and manage billing settings, subscription plans, and payment methods.
 
diff --git a/docs/user-guide/tutorials/prowler-import-findings.mdx b/docs/user-guide/tutorials/prowler-import-findings.mdx
index 0a55878988..253fa0d895 100644
--- a/docs/user-guide/tutorials/prowler-import-findings.mdx
+++ b/docs/user-guide/tutorials/prowler-import-findings.mdx
@@ -1,7 +1,7 @@
 ---
 title: 'Import Findings'
 sidebarTitle: 'Import Findings'
-description: 'Upload OCSF scan results to Prowler Cloud from external sources or the CLI'
+description: 'Upload OCSF scan results to Prowler Cloud from the UI, the CLI or the API'
 ---
 
 import { VersionBadge } from "/snippets/version-badge.mdx"
@@ -9,7 +9,7 @@ import { SubscriptionBanner } from "/snippets/subscription-banner.mdx"
 
 <VersionBadge version="5.19.0" />
 
-Findings Ingestion enables uploading OCSF (Open Cybersecurity Schema Framework) scan results to Prowler Cloud. This feature supports importing findings from Prowler CLI output files that use the [Detection Finding](https://schema.ocsf.io/classes/detection_finding) class.
+Findings Ingestion enables uploading OCSF (Open Cybersecurity Schema Framework) scan results to Prowler Cloud. This feature supports importing findings from Prowler CLI output files that use the [Detection Finding](https://schema.ocsf.io/classes/detection_finding) class. Reports can be imported from the Scans page in the Prowler Cloud UI, pushed by the CLI with `--push-to-cloud`, or submitted through the API.
 
 <SubscriptionBanner />
 
@@ -132,10 +132,32 @@ Only **Detection Finding** (`class_uid: 2004`) records are accepted. Other OCSF
 
 ## Required Permissions
 
-The **Manage Ingestions** RBAC permission controls access to the ingestion endpoints. Without this permission, findings cannot be submitted via the API or `--push-to-cloud`.
+The **Manage Ingestions** RBAC permission controls access to the ingestion endpoints. Without this permission, findings cannot be submitted from the Scans page, via the API or with `--push-to-cloud`.
 
 For more information about RBAC permissions, refer to the [Prowler Cloud RBAC documentation](/user-guide/tutorials/prowler-app-rbac).
 
+## Using the UI
+
+<VersionBadge version="5.41.0" />
+
+The Scans page imports a Prowler OCSF report from the browser, with no CLI or API key involved. The import runs as a regular ingestion job, so the [status values](#ingestion-status-values), the [billing impact](#billing-impact) and the [errors endpoint](#get-ingestion-errors) apply as they do for the CLI and the API.
+
+1. Go to **Scans** and click **Import Findings**. The button is shown only to roles with the **Manage Ingestions** permission.
+
+    ![Import Findings button on the Scans page](/images/prowler-app/import-findings/import-findings-button.png)
+
+2. Drag a `.ocsf.json` report onto the drop area, or click **Select File** to pick one. The dialog takes one file per import. A file whose name does not end in `.ocsf.json`, or an empty file, is rejected before the upload starts.
+
+    ![Import findings dialog with the drag-and-drop area](/images/prowler-app/import-findings/import-findings-dialog.png)
+
+3. Click **Start import**. The dialog uploads the report, creates the ingestion job and follows its status until the job finishes. On completion it reports the total number of records, how many were processed and how many were invalid.
+
+Closing the dialog while an import is running does not cancel the job. When the job completes in the background, a notification confirms it and the imported findings appear in Scans.
+
+If the upload is rejected or the job fails, the dialog shows the reason and a **Retry import** button that sends the same file again. A failed job also shows the progress it reported before failing. A different file can be selected instead of retrying. If the status check fails after the upload was accepted, **Retry status** resumes tracking the same job without uploading the file again.
+
+Invalid records are counted in the summary but not listed in the dialog. To see why each one was rejected, [list the ingestion jobs](#list-ingestion-jobs) through the API and query the [errors endpoint](#get-ingestion-errors) for that job.
+
 ## Using the CLI
 
 The `--push-to-cloud` flag uploads scan results directly to Prowler Cloud after a scan completes. This approach automates the ingestion process without manual file uploads.

From 9621bdfb9cbb56dbe7bde04c38004591cde16e5a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Thu, 3 Sep 2026 10:15:49 +0200
Subject: [PATCH 27/77] fix(tests): isolate provider mock in agentcore passrole
 (#12724)

---
 ...iam_policy_passrole_to_bedrock_agentcore_restricted_test.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tests/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/iam_policy_passrole_to_bedrock_agentcore_restricted_test.py b/tests/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/iam_policy_passrole_to_bedrock_agentcore_restricted_test.py
index 04962eade6..1e3f1eb362 100644
--- a/tests/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/iam_policy_passrole_to_bedrock_agentcore_restricted_test.py
+++ b/tests/providers/aws/services/iam/iam_policy_passrole_to_bedrock_agentcore_restricted/iam_policy_passrole_to_bedrock_agentcore_restricted_test.py
@@ -105,7 +105,8 @@ def _run(policies: list, scan_unused_services: bool = True):
     iam_client = mock.MagicMock()
     iam_client.policies = {policy.arn: policy for policy in policies}
     iam_client.region = AWS_REGION_US_EAST_1
-    iam_client.provider.scan_unused_services = scan_unused_services
+    # Own mock: other test files set MagicMock.provider at class level to a real AwsProvider.
+    iam_client.provider = mock.MagicMock(scan_unused_services=scan_unused_services)
 
     aws_provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
 

From 36514534cb9f976144bd922f4bb45c13ed669402 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Thu, 3 Sep 2026 10:17:14 +0200
Subject: [PATCH 28/77] chore(trivy): suppress CVE-2026-84304 in embedded grpc
 (#12720)

---
 .grype.yaml       | 10 ++++++++++
 .trivyignore.yaml | 16 ++++++++++++++++
 2 files changed, 26 insertions(+)

diff --git a/.grype.yaml b/.grype.yaml
index 8fe74513c9..17a3c8474b 100644
--- a/.grype.yaml
+++ b/.grype.yaml
@@ -17,6 +17,16 @@ ignore:
   - vulnerability: CVE-2026-71556
     package:
       name: github.com/go-git/go-git/v5
+  # CVE-2026-84304 is the same temporary exception documented in .trivyignore.yaml:
+  # Trivy 0.74.0 still embeds grpc 1.82.1, while the 1.83.1 fix is not in any release.
+  # Prowler only runs `trivy image` / `trivy fs`, never client/server mode, so no gRPC
+  # endpoint exists in the image. Pinned to the embedded version so the rule stops
+  # matching on its own once Trivy bumps grpc. Remove with the Trivy exception by 2026-10-15.
+  # https://github.com/aquasecurity/trivy/pull/11176
+  - vulnerability: CVE-2026-84304
+    package:
+      name: google.golang.org/grpc
+      version: v1.82.1
   - vulnerability: CVE-2026-56852
     package:
       name: golang.org/x/text
diff --git a/.trivyignore.yaml b/.trivyignore.yaml
index b78162ecc4..24f7e77b65 100644
--- a/.trivyignore.yaml
+++ b/.trivyignore.yaml
@@ -148,6 +148,22 @@ vulnerabilities:
       - "pkg:golang/github.com/go-git/go-git/v5"
     expired_at: 2026-09-15
 
+  # CVE-2026-84304 is a DoS in grpc-go <= 1.83.0: a peer fragments a gRPC stream into
+  # millions of tiny HTTP/2 DATA frames until the receiver runs out of heap. Fixed in
+  # 1.83.1 (published 2026-09-01). Trivy 0.74.0, the latest published release and the
+  # version the images ship, pins 1.82.1 as an indirect dependency:
+  # https://github.com/aquasecurity/trivy/blob/v0.74.0/go.mod
+  # Upstream bump still open: https://github.com/aquasecurity/trivy/pull/11176
+  # Trivy only speaks gRPC in client/server mode (`trivy server`, `--server`). Prowler
+  # invokes it exclusively as `trivy image` and `trivy fs` on a local path, so no gRPC
+  # listener or connection ever exists in the image and the affected path is not
+  # reachable. Remove this temporary suppression as soon as a Trivy release pins
+  # grpc >= 1.83.1.
+  - id: CVE-2026-84304
+    purls:
+      - "pkg:golang/google.golang.org/grpc"
+    expired_at: 2026-10-15
+
   - id: CVE-2026-56852
     purls:
       - "pkg:golang/golang.org/x/text"

From 80075015741ad4c8bf25242110f47bdb16471480 Mon Sep 17 00:00:00 2001
From: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com>
Date: Thu, 3 Sep 2026 10:23:24 +0200
Subject: [PATCH 29/77] fix(ui): avoid missing selector in scan tour (#12705)

---
 .../view-first-scan-tour-selector.fixed.md    |  1 +
 ui/components/scans/scans-page-shell.test.tsx | 57 +++++++++++++++++
 ui/components/scans/scans-page-shell.tsx      |  9 +--
 .../tours/__tests__/use-driver-tour.test.tsx  | 63 ++++++++++++++++++-
 .../__tests__/view-first-scan.tour.test.ts    | 13 ++++
 ui/lib/tours/tour-types.ts                    |  3 +
 ui/lib/tours/use-driver-tour.ts               |  7 ++-
 ui/lib/tours/view-first-scan.tour.ts          |  6 +-
 ui/scripts/check-tour-alignment.mjs           | 42 ++++++++-----
 ui/scripts/check-tour-alignment.test.ts       | 37 +++++++++++
 10 files changed, 214 insertions(+), 24 deletions(-)
 create mode 100644 ui/changelog.d/view-first-scan-tour-selector.fixed.md
 create mode 100644 ui/scripts/check-tour-alignment.test.ts

diff --git a/ui/changelog.d/view-first-scan-tour-selector.fixed.md b/ui/changelog.d/view-first-scan-tour-selector.fixed.md
new file mode 100644
index 0000000000..13f56ac446
--- /dev/null
+++ b/ui/changelog.d/view-first-scan-tour-selector.fixed.md
@@ -0,0 +1 @@
+Scan Jobs onboarding tour no longer targets an unmounted In Progress row from other tabs
diff --git a/ui/components/scans/scans-page-shell.test.tsx b/ui/components/scans/scans-page-shell.test.tsx
index b702f2cdf7..8d67c0d9da 100644
--- a/ui/components/scans/scans-page-shell.test.tsx
+++ b/ui/components/scans/scans-page-shell.test.tsx
@@ -2,6 +2,7 @@ import { render, screen } from "@testing-library/react";
 import userEvent from "@testing-library/user-event";
 import { afterEach, describe, expect, it, vi } from "vitest";
 
+import type { OnboardingFlow } from "@/lib/onboarding";
 import { useScansStore } from "@/store";
 import { ProviderProps } from "@/types";
 
@@ -115,6 +116,18 @@ vi.mock("@/components/onboarding", () => ({
   PageReady: () => <div data-testid="page-ready" />,
 }));
 
+interface OnboardingTriggerProps {
+  flow: OnboardingFlow;
+}
+
+const getTriggeredTourTargets = () => {
+  const triggerProps = onboardingTriggerSpy.mock.calls.at(-1)?.[0] as
+    | OnboardingTriggerProps
+    | undefined;
+
+  return triggerProps?.flow.tour.steps.map((step) => step.target);
+};
+
 const providers: ProviderProps[] = [
   {
     id: "provider-1",
@@ -594,6 +607,50 @@ describe("ScansPageShell", () => {
     expect(screen.getByTestId("onboarding-trigger")).toBeInTheDocument();
   });
 
+  it("uses only mounted tour targets when an active scan exists on the completed tab", () => {
+    // Given
+    vi.stubEnv("UI_CLOUD_ENABLED", "false");
+    searchParamsValue.current = "tab=completed";
+
+    // When
+    render(
+      <ScansPageShell
+        providers={providers}
+        hasManageScansPermission
+        activeScanCount={1}
+      >
+        <div>Scans table</div>
+      </ScansPageShell>,
+    );
+
+    // Then
+    expect(getTriggeredTourTargets()).toEqual([undefined, "launch", "tabs"]);
+  });
+
+  it("targets the running scan when its row is mounted on the in progress tab", () => {
+    // Given
+    vi.stubEnv("UI_CLOUD_ENABLED", "false");
+    searchParamsValue.current = "tab=active";
+
+    // When
+    render(
+      <ScansPageShell
+        providers={providers}
+        hasManageScansPermission
+        activeScanCount={1}
+      >
+        <div>Scans table</div>
+      </ScansPageShell>,
+    );
+
+    // Then
+    expect(getTriggeredTourTargets()).toEqual([
+      undefined,
+      "in-progress",
+      "launch",
+    ]);
+  });
+
   it("suppresses the view-first-scan tour when no provider is connected, since Launch Scan is disabled", () => {
     vi.stubEnv("UI_CLOUD_ENABLED", "false");
 
diff --git a/ui/components/scans/scans-page-shell.tsx b/ui/components/scans/scans-page-shell.tsx
index 6af2c436fd..1575c026fc 100644
--- a/ui/components/scans/scans-page-shell.tsx
+++ b/ui/components/scans/scans-page-shell.tsx
@@ -80,9 +80,10 @@ export function ScansPageShell({
   const launchDisabled = !hasManageScansPermission || !hasConnectedProviders;
   const launchOpen =
     !launchDisabled && (isLaunchScanModalOpen || urlLaunchOpen);
-  // When a scan is already running, the tour highlights its row (anchored in
-  // ScanJobsTable); otherwise it falls back to the Launch Scan button + tabs.
-  const hasInProgressScan = activeScanCount > 0;
+  // ScanJobsTable only mounts the in-progress row anchor on the active tab.
+  // Other tabs use the fallback tour so every target exists in the current DOM.
+  const hasVisibleInProgressScan =
+    activeScanCount > 0 && filters.activeTab === SCAN_JOBS_TAB.ACTIVE;
 
   const getTabLabel = (tab: ScanJobsTab) => {
     const label = SCAN_TAB_LABELS[tab];
@@ -122,7 +123,7 @@ export function ScansPageShell({
           <OnboardingTrigger
             flow={{
               ...viewFirstScanFlow,
-              tour: buildViewFirstScanTour(hasInProgressScan),
+              tour: buildViewFirstScanTour(hasVisibleInProgressScan),
             }}
           />
         </Suspense>
diff --git a/ui/lib/tours/__tests__/use-driver-tour.test.tsx b/ui/lib/tours/__tests__/use-driver-tour.test.tsx
index f9a523d80c..dd928b2d62 100644
--- a/ui/lib/tours/__tests__/use-driver-tour.test.tsx
+++ b/ui/lib/tours/__tests__/use-driver-tour.test.tsx
@@ -1,5 +1,5 @@
 import { render } from "@testing-library/react";
-import { describe, expect, it, vi } from "vitest";
+import { afterEach, describe, expect, it, vi } from "vitest";
 
 import { addProviderTour } from "../add-provider.tour";
 import type { TourCompletionRecord } from "../tour-types";
@@ -94,3 +94,64 @@ describe("adaptStep autoAdvance", () => {
     expect(driveStep.popover?.showButtons).toBeUndefined();
   });
 });
+
+describe("adaptStep selector fallback", () => {
+  afterEach(() => {
+    document.body.replaceChildren();
+  });
+
+  it("uses the fallback target when the primary target disappears", () => {
+    // Given
+    const fallbackElement = document.createElement("div");
+    fallbackElement.dataset.tourId = "view-first-scan-tabs";
+    document.body.append(fallbackElement);
+    const driveStep = adaptStep("view-first-scan", {
+      target: "in-progress",
+      fallbackTarget: "tabs",
+      title: "Your scan is running",
+    });
+
+    // When
+    const resolvedElement = (driveStep.element as () => Element)();
+
+    // Then
+    expect(resolvedElement).toBe(fallbackElement);
+  });
+
+  it("keeps the primary target when both targets exist", () => {
+    // Given
+    const primaryElement = document.createElement("div");
+    primaryElement.dataset.tourId = "view-first-scan-in-progress";
+    const fallbackElement = document.createElement("div");
+    fallbackElement.dataset.tourId = "view-first-scan-tabs";
+    document.body.append(primaryElement, fallbackElement);
+    const driveStep = adaptStep("view-first-scan", {
+      target: "in-progress",
+      fallbackTarget: "tabs",
+      title: "Your scan is running",
+    });
+
+    // When
+    const resolvedElement = (driveStep.element as () => Element)();
+
+    // Then
+    expect(resolvedElement).toBe(primaryElement);
+  });
+
+  it("still reports configuration drift when both targets are missing", () => {
+    // Given
+    const driveStep = adaptStep("view-first-scan", {
+      target: "in-progress",
+      fallbackTarget: "tabs",
+      title: "Your scan is running",
+    });
+
+    // When
+    const resolveElement = () => (driveStep.element as () => Element)();
+
+    // Then
+    expect(resolveElement).toThrow(
+      'Tour "view-first-scan" references missing selector: [data-tour-id="view-first-scan-in-progress"]',
+    );
+  });
+});
diff --git a/ui/lib/tours/__tests__/view-first-scan.tour.test.ts b/ui/lib/tours/__tests__/view-first-scan.tour.test.ts
index 8fead9fd33..2f161d87db 100644
--- a/ui/lib/tours/__tests__/view-first-scan.tour.test.ts
+++ b/ui/lib/tours/__tests__/view-first-scan.tour.test.ts
@@ -72,6 +72,19 @@ describe("buildViewFirstScanTour with a running scan", () => {
     expect(tour.version).toBe(viewFirstScanTour.version);
   });
 
+  it("falls back to the stable tabs anchor if the running row disappears", () => {
+    // Given
+    const runningScanStep = tour.steps.find(
+      (step) => step.target === "in-progress",
+    );
+
+    // When
+    const fallbackTarget = runningScanStep?.fallbackTarget;
+
+    // Then
+    expect(fallbackTarget).toBe("tabs");
+  });
+
   it("never targets an element outside the allowed anchor set", () => {
     for (const target of definedTargets(tour)) {
       expect(ALLOWED_TARGETS).toContain(target);
diff --git a/ui/lib/tours/tour-types.ts b/ui/lib/tours/tour-types.ts
index d443f21489..ff0d97a646 100644
--- a/ui/lib/tours/tour-types.ts
+++ b/ui/lib/tours/tour-types.ts
@@ -45,6 +45,9 @@ export interface TourCompletionRecord {
 // Modal step omits `target`; anchored step provides the `data-tour-id` value (no brackets).
 export interface TourStep<TTarget extends string = string> {
   target?: TTarget;
+  // Optional stable anchor used when a volatile primary target disappears before
+  // driver.js resolves the step (for example, a running scan row that completes).
+  fallbackTarget?: TTarget;
   title?: string;
   description?: string;
   side?: TourStepSide;
diff --git a/ui/lib/tours/use-driver-tour.ts b/ui/lib/tours/use-driver-tour.ts
index a0ab78523b..d7228cd303 100644
--- a/ui/lib/tours/use-driver-tour.ts
+++ b/ui/lib/tours/use-driver-tour.ts
@@ -172,11 +172,16 @@ export function adaptStep<TTarget extends string>(
 
   if (step.target) {
     const selector = toSelector(`${tourId}-${step.target}`);
+    const fallbackSelector = step.fallbackTarget
+      ? toSelector(`${tourId}-${step.fallbackTarget}`)
+      : undefined;
     driveStep.element = () => {
       if (typeof document === "undefined") {
         throw new Error("Tour element resolved without a DOM");
       }
-      const found = document.querySelector(selector);
+      const found =
+        document.querySelector(selector) ??
+        (fallbackSelector ? document.querySelector(fallbackSelector) : null);
       if (!found) {
         throw new Error(
           `Tour "${tourId}" references missing selector: ${selector}`,
diff --git a/ui/lib/tours/view-first-scan.tour.ts b/ui/lib/tours/view-first-scan.tour.ts
index c6b5a00d8d..f8ee778ac1 100644
--- a/ui/lib/tours/view-first-scan.tour.ts
+++ b/ui/lib/tours/view-first-scan.tour.ts
@@ -33,9 +33,8 @@ const INTRO_STEP = {
 /**
  * Builds the tour for the scans page. When a scan is already running we anchor the
  * In Progress row first (and mention the other tabs in copy); otherwise we fall back
- * to highlighting Launch Scan and the tabs. Gating on `hasInProgressScan` keeps the
- * tour from anchoring to a missing row — the same guard pattern the findings tour
- * uses for an empty table.
+ * to highlighting Launch Scan and the tabs. The volatile row step itself falls back
+ * to the stable tabs anchor if the scan completes while the tour is open.
  */
 export function buildViewFirstScanTour(
   hasInProgressScan: boolean,
@@ -49,6 +48,7 @@ export function buildViewFirstScanTour(
         INTRO_STEP,
         {
           target: "in-progress",
+          fallbackTarget: "tabs",
           side: TOUR_STEP_SIDES.BOTTOM,
           align: TOUR_STEP_ALIGNMENTS.START,
           title: "Your scan is running",
diff --git a/ui/scripts/check-tour-alignment.mjs b/ui/scripts/check-tour-alignment.mjs
index 12863fd303..77de2bd9b1 100644
--- a/ui/scripts/check-tour-alignment.mjs
+++ b/ui/scripts/check-tour-alignment.mjs
@@ -1,9 +1,10 @@
 #!/usr/bin/env node
-// Tour alignment check (syntactic). Extracts `data-tour-id` values from every
-// `ui/lib/tours/*.tour.ts` and verifies a matching attribute exists under `ui/`,
-// in either the JSX form (`data-tour-id="..."`) or the object-property form
-// (`"data-tour-id": "..."`) used for dynamically-spread anchors. Two directions:
-//   - Tour → DOM: fails on any tour `target` with no matching attribute.
+// Tour alignment check (syntactic). Extracts primary and fallback `data-tour-id`
+// values from every `ui/lib/tours/*.tour.ts` and verifies a matching attribute
+// exists under `ui/`, in either the JSX form (`data-tour-id="..."`) or the
+// object-property form (`"data-tour-id": "..."`) used for dynamically-spread
+// anchors. Two directions:
+//   - Tour → DOM: fails on any `target` or `fallbackTarget` without an attribute.
 //   - DOM → tour: warns on any `data-tour-id` not referenced by any tour
 //     (does not fail — staged anchors during multi-PR rollouts are OK).
 // Complements the semantic `prowler-tour` skill for CI/local runs without
@@ -41,7 +42,18 @@ async function findTourFiles(dir) {
 }
 
 const TOUR_ID_PATTERN = /\bid\s*:\s*["']([a-z0-9-]+)["']/m;
-const TARGET_PATTERN = /\btarget\s*:\s*["']([a-z0-9-]+)["']/g;
+const TARGET_PATTERN =
+  /\b(?:target|fallbackTarget)\s*:\s*["']([a-z0-9-]+)["']/g;
+
+/**
+ * Extracts every primary and fallback target declared by a tour.
+ *
+ * @param {string} source
+ * @returns {string[]}
+ */
+export function extractTourTargets(source) {
+  return Array.from(source.matchAll(TARGET_PATTERN), (match) => match[1]);
+}
 
 async function parseTour(filePath) {
   const source = await readFile(filePath, "utf8");
@@ -53,10 +65,7 @@ async function parseTour(filePath) {
   }
   const tourId = idMatch[1];
 
-  const targets = [];
-  for (const match of source.matchAll(TARGET_PATTERN)) {
-    targets.push(match[1]);
-  }
+  const targets = extractTourTargets(source);
 
   return {
     file: relative(UI_DIR, filePath),
@@ -155,7 +164,7 @@ async function main() {
   if (tourOrphans.length === 0) {
     const referenced = tours.reduce((sum, t) => sum + t.selectors.length, 0);
     console.log(
-      `✓ Tour alignment OK — ${tours.length} tour(s), ${referenced} anchored step(s).`,
+      `✓ Tour alignment OK — ${tours.length} tour(s), ${referenced} anchor reference(s).`,
     );
     return;
   }
@@ -172,7 +181,10 @@ async function main() {
   process.exit(1);
 }
 
-main().catch((err) => {
-  console.error(err.stack || err.message);
-  process.exit(1);
-});
+const entryPoint = process.argv[1];
+if (entryPoint && resolve(entryPoint) === fileURLToPath(import.meta.url)) {
+  main().catch((err) => {
+    console.error(err.stack || err.message);
+    process.exit(1);
+  });
+}
diff --git a/ui/scripts/check-tour-alignment.test.ts b/ui/scripts/check-tour-alignment.test.ts
new file mode 100644
index 0000000000..680dddd5a0
--- /dev/null
+++ b/ui/scripts/check-tour-alignment.test.ts
@@ -0,0 +1,37 @@
+import { describe, expect, it } from "vitest";
+
+import { extractTourTargets } from "./check-tour-alignment.mjs";
+
+describe("tour target extraction", () => {
+  it("should include primary and fallback targets", () => {
+    // Given
+    const source = `
+      {
+        target: "volatile-row",
+        fallbackTarget: "stable-tabs",
+      }
+    `;
+
+    // When
+    const targets = extractTourTargets(source);
+
+    // Then
+    expect(targets).toEqual(["volatile-row", "stable-tabs"]);
+  });
+
+  it("should include a target used only as a fallback", () => {
+    // Given
+    const source = `
+      {
+        fallbackTarget: "fallback-only-anchor",
+        title: "Fallback-only step",
+      }
+    `;
+
+    // When
+    const targets = extractTourTargets(source);
+
+    // Then
+    expect(targets).toEqual(["fallback-only-anchor"]);
+  });
+});

From 9ed07de61020b82b2eeb0ddabfadeafbeb9adf78 Mon Sep 17 00:00:00 2001
From: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com>
Date: Thu, 3 Sep 2026 10:36:47 +0200
Subject: [PATCH 30/77] feat(ui): separate PostHog hosts and enable Toolbar in
 development (#12582)

---
 .../posthog-toolbar-localhost.added.md        |  1 +
 .../saml/saml-config-form.test.tsx            |  3 +-
 ui/components/survey/feedback-survey.test.tsx | 57 +++++++++++-
 ui/components/survey/feedback-survey.tsx      | 12 ++-
 .../survey/runtime-feedback-survey.tsx        | 65 ++++++++++---
 ui/lib/csp.ts                                 | 67 ++++++++++++--
 ui/lib/env.test.ts                            |  2 +
 ui/lib/get-runtime-config.client.test.ts      |  8 +-
 ui/lib/integrations.test.ts                   | 15 +++
 ui/lib/integrations.ts                        |  2 +-
 ui/lib/posthog-hosts.test.ts                  | 29 ++++++
 ui/lib/posthog-hosts.ts                       | 22 +++++
 ui/lib/posthog-toolbar.ts                     | 11 +++
 ui/lib/runtime-config.shared.ts               |  9 +-
 ui/lib/runtime-config.test.ts                 | 74 +++++++++++++++
 ui/lib/runtime-config.ts                      |  3 +-
 ui/next.config.test.ts                        | 91 ++++++++++++++++++-
 ui/proxy.ts                                   |  4 +-
 .../runtime-config/runtime-config-page.ts     |  3 +-
 ui/types/env.d.ts                             |  1 +
 20 files changed, 432 insertions(+), 47 deletions(-)
 create mode 100644 ui/changelog.d/posthog-toolbar-localhost.added.md
 create mode 100644 ui/lib/posthog-hosts.test.ts
 create mode 100644 ui/lib/posthog-hosts.ts
 create mode 100644 ui/lib/posthog-toolbar.ts
 create mode 100644 ui/lib/runtime-config.test.ts

diff --git a/ui/changelog.d/posthog-toolbar-localhost.added.md b/ui/changelog.d/posthog-toolbar-localhost.added.md
new file mode 100644
index 0000000000..a2aa815a1c
--- /dev/null
+++ b/ui/changelog.d/posthog-toolbar-localhost.added.md
@@ -0,0 +1 @@
+PostHog Toolbar support in development with separate ingestion and app hosts
diff --git a/ui/components/integrations/saml/saml-config-form.test.tsx b/ui/components/integrations/saml/saml-config-form.test.tsx
index a067d8b2d2..4949a9b255 100644
--- a/ui/components/integrations/saml/saml-config-form.test.tsx
+++ b/ui/components/integrations/saml/saml-config-form.test.tsx
@@ -53,7 +53,8 @@ const runtimeConfig: RuntimePublicConfig = {
   apiDocsUrl: null,
   posthogEnabled: false,
   posthogKey: null,
-  posthogHost: null,
+  posthogIngestionHost: null,
+  posthogUiHost: null,
   reoDevClientId: null,
   cloudEnabled: false,
   cloudBillingEnabled: false,
diff --git a/ui/components/survey/feedback-survey.test.tsx b/ui/components/survey/feedback-survey.test.tsx
index 436307e0e5..b837beb8b4 100644
--- a/ui/components/survey/feedback-survey.test.tsx
+++ b/ui/components/survey/feedback-survey.test.tsx
@@ -10,6 +10,12 @@ import { clampSidePanelWidth } from "@/lib/ui-layout";
 
 type SurveyCallback = (surveys: Survey[]) => void;
 
+interface PostHogInitConfig {
+  api_host?: string;
+  loaded?: (client: unknown) => void;
+  ui_host?: string;
+}
+
 const mocks = vi.hoisted(() => ({
   isCloud: vi.fn(),
   useRuntimeConfig: vi.fn(),
@@ -100,13 +106,15 @@ describe("FeedbackSurvey", () => {
     mocks.loaded = false;
     mocks.pathname = "/";
     mocks.isPushViewport = false;
+    vi.stubEnv("NODE_ENV", "development");
     localStorage.clear();
     mocks.isCloud.mockReturnValue(true);
     mocks.useRuntimeConfig.mockReturnValue({
       cloudEnabled: true,
       posthogEnabled: true,
       posthogKey: POSTHOG_KEY,
-      posthogHost: "https://eu.posthog.com",
+      posthogIngestionHost: "https://us.i.posthog.com",
+      posthogUiHost: "https://us.posthog.com",
     });
     provideSurveys([SURVEY_FIXTURE]);
   });
@@ -115,6 +123,7 @@ describe("FeedbackSurvey", () => {
     vi.restoreAllMocks();
     vi.unstubAllEnvs();
     vi.unstubAllGlobals();
+    Reflect.deleteProperty(window, "posthog");
   });
 
   it("renders an accessible icon-only circular feedback trigger", async () => {
@@ -443,8 +452,8 @@ describe("FeedbackSurvey", () => {
     await waitFor(() => expect(mocks.init).toHaveBeenCalledTimes(1));
     expect(mocks.init.mock.calls[0][0]).toBe(POSTHOG_KEY);
     expect(mocks.init.mock.calls[0][1]).toMatchObject({
-      api_host: "https://eu.posthog.com",
-      ui_host: "https://eu.posthog.com",
+      api_host: "https://us.i.posthog.com",
+      ui_host: "https://us.posthog.com",
       autocapture: false,
       capture_pageview: false,
       capture_pageleave: false,
@@ -452,6 +461,40 @@ describe("FeedbackSurvey", () => {
     await waitFor(() => expect(mocks.onSurveysLoaded).toHaveBeenCalled());
   });
 
+  it("exposes the initialized PostHog client for the development Toolbar", async () => {
+    // Given
+    await renderSurvey();
+    await waitFor(() => expect(mocks.init).toHaveBeenCalledOnce());
+    const config = mocks.init.mock.calls[0]?.[1] as
+      | PostHogInitConfig
+      | undefined;
+    const { default: posthogClient } = await import("posthog-js");
+
+    // When
+    config?.loaded?.(posthogClient);
+
+    // Then
+    expect(config?.loaded).toBeTypeOf("function");
+    expect(Reflect.get(window, "posthog")).toBe(posthogClient);
+  });
+
+  it("keeps the initialized PostHog client off window in production", async () => {
+    // Given
+    vi.stubEnv("NODE_ENV", "production");
+    await renderSurvey();
+    await waitFor(() => expect(mocks.init).toHaveBeenCalledOnce());
+    const config = mocks.init.mock.calls[0]?.[1] as
+      | PostHogInitConfig
+      | undefined;
+    const { default: posthogClient } = await import("posthog-js");
+
+    // When
+    config?.loaded?.(posthogClient);
+
+    // Then
+    expect(Reflect.has(window, "posthog")).toBe(false);
+  });
+
   it("consumes the already-initialized Cloud instance without re-initializing", async () => {
     // Given - on Prowler Cloud the singleton is already initialized
     // (app/providers.tsx), so __loaded is true.
@@ -464,6 +507,8 @@ describe("FeedbackSurvey", () => {
     // the trigger renders.
     await waitFor(() => expect(mocks.onSurveysLoaded).toHaveBeenCalled());
     expect(mocks.init).not.toHaveBeenCalled();
+    const { default: posthogClient } = await import("posthog-js");
+    expect(Reflect.get(window, "posthog")).toBe(posthogClient);
     expect(
       await screen.findByRole("button", { name: "Give feedback" }),
     ).toBeVisible();
@@ -476,7 +521,8 @@ describe("FeedbackSurvey", () => {
       cloudEnabled: false,
       posthogEnabled: false,
       posthogKey: null,
-      posthogHost: null,
+      posthogIngestionHost: null,
+      posthogUiHost: null,
     });
 
     // When
@@ -496,7 +542,8 @@ describe("FeedbackSurvey", () => {
       cloudEnabled: true,
       posthogEnabled: false,
       posthogKey: POSTHOG_KEY,
-      posthogHost: "https://eu.posthog.com",
+      posthogIngestionHost: "https://eu.i.posthog.com",
+      posthogUiHost: "https://eu.posthog.com",
     });
 
     // When
diff --git a/ui/components/survey/feedback-survey.tsx b/ui/components/survey/feedback-survey.tsx
index eff7cd1b56..645c266d3b 100644
--- a/ui/components/survey/feedback-survey.tsx
+++ b/ui/components/survey/feedback-survey.tsx
@@ -8,16 +8,20 @@ import { isCloud } from "@/lib/shared/env";
 const RuntimeFeedbackSurvey = lazy(() => import("./runtime-feedback-survey"));
 
 export function FeedbackSurvey() {
-  const { posthogEnabled, posthogKey, posthogHost } = useRuntimeConfig();
+  const { posthogEnabled, posthogKey, posthogIngestionHost, posthogUiHost } =
+    useRuntimeConfig();
 
-  if (!isCloud() || !posthogEnabled || !posthogKey || !posthogHost) return null;
+  if (!isCloud() || !posthogEnabled || !posthogKey || !posthogIngestionHost) {
+    return null;
+  }
 
   return (
     <Suspense fallback={null}>
       <RuntimeFeedbackSurvey
-        key={`${posthogKey}:${posthogHost}`}
+        key={`${posthogKey}:${posthogIngestionHost}:${posthogUiHost}`}
         posthogKey={posthogKey}
-        posthogHost={posthogHost}
+        posthogIngestionHost={posthogIngestionHost}
+        posthogUiHost={posthogUiHost}
       />
     </Suspense>
   );
diff --git a/ui/components/survey/runtime-feedback-survey.tsx b/ui/components/survey/runtime-feedback-survey.tsx
index 49c9d0ceb6..3e7db575af 100644
--- a/ui/components/survey/runtime-feedback-survey.tsx
+++ b/ui/components/survey/runtime-feedback-survey.tsx
@@ -4,7 +4,7 @@ import { MessageSquareText } from "lucide-react";
 import { usePathname } from "next/navigation";
 import posthogClient from "posthog-js";
 import type { Survey } from "posthog-js";
-import { useEffect, useState } from "react";
+import { useState } from "react";
 
 import { Button } from "@/components/shadcn/button/button";
 import {
@@ -16,6 +16,8 @@ import { useMediaQuery } from "@/hooks/use-media-query";
 import { useMountEffect } from "@/hooks/use-mount-effect";
 import { useStore } from "@/hooks/use-store";
 import { isLighthouseChatRoute } from "@/lib/lighthouse-routes";
+import { resolvePosthogUiHost } from "@/lib/posthog-hosts";
+import { exposePosthogForToolbar } from "@/lib/posthog-toolbar";
 import {
   clampSidePanelWidth,
   SIDE_PANEL_PUSH_MEDIA_QUERY,
@@ -36,18 +38,23 @@ const SURVEY_EVENT = {
 
 interface RuntimeFeedbackSurveyProps {
   posthogKey: string;
-  posthogHost: string;
+  posthogIngestionHost: string;
+  posthogUiHost: string | null;
+}
+
+interface VisibleFeedbackSurveyProps extends RuntimeFeedbackSurveyProps {
+  isPushViewport: boolean;
+  sidePanelResizing: boolean | undefined;
+  sidePanelVisible: boolean;
+  sidePanelWidth: number | undefined;
 }
 
 export default function RuntimeFeedbackSurvey({
   posthogKey,
-  posthogHost,
+  posthogIngestionHost,
+  posthogUiHost,
 }: RuntimeFeedbackSurveyProps) {
   const pathname = usePathname();
-  const [survey, setSurvey] = useState<Survey | null>(null);
-  const [open, setOpen] = useState(false);
-  const [response, setResponse] = useState("");
-  const [submitted, setSubmitted] = useState(false);
   const sidePanelOpen = useStore(useSidePanelStore, (state) => state.isOpen);
   const sidePanelWidth = useStore(useSidePanelStore, (state) => state.width);
   const sidePanelResizing = useStore(
@@ -58,14 +65,47 @@ export default function RuntimeFeedbackSurvey({
   const sidePanelVisible =
     Boolean(sidePanelOpen) && !isLighthouseChatRoute(pathname);
 
+  // Reset the open survey by unmounting it while an overlay panel is visible.
+  if (sidePanelVisible && !isPushViewport) return null;
+
+  return (
+    <VisibleFeedbackSurvey
+      posthogKey={posthogKey}
+      posthogIngestionHost={posthogIngestionHost}
+      posthogUiHost={posthogUiHost}
+      isPushViewport={isPushViewport}
+      sidePanelResizing={sidePanelResizing}
+      sidePanelVisible={sidePanelVisible}
+      sidePanelWidth={sidePanelWidth}
+    />
+  );
+}
+
+function VisibleFeedbackSurvey({
+  posthogKey,
+  posthogIngestionHost,
+  posthogUiHost,
+  isPushViewport,
+  sidePanelResizing,
+  sidePanelVisible,
+  sidePanelWidth,
+}: VisibleFeedbackSurveyProps) {
+  const [survey, setSurvey] = useState<Survey | null>(null);
+  const [open, setOpen] = useState(false);
+  const [response, setResponse] = useState("");
+  const [submitted, setSubmitted] = useState(false);
+
   useMountEffect(() => {
-    if (!posthogClient.__loaded) {
+    if (posthogClient.__loaded) {
+      exposePosthogForToolbar(posthogClient);
+    } else {
       posthogClient.init(posthogKey, {
-        api_host: posthogHost,
-        ui_host: posthogHost,
+        api_host: posthogIngestionHost,
+        ui_host: resolvePosthogUiHost(posthogIngestionHost, posthogUiHost),
         autocapture: false,
         capture_pageview: false,
         capture_pageleave: false,
+        loaded: exposePosthogForToolbar,
       });
     }
 
@@ -78,13 +118,8 @@ export default function RuntimeFeedbackSurvey({
     });
   });
 
-  useEffect(() => {
-    if (sidePanelVisible && !isPushViewport) setOpen(false);
-  }, [sidePanelVisible, isPushViewport]);
-
   const question = survey?.questions?.[0];
   if (!survey || question?.type !== "open") return null;
-  if (sidePanelVisible && !isPushViewport) return null;
 
   const questionId = question.id ?? "";
   const appearance = survey.appearance;
diff --git a/ui/lib/csp.ts b/ui/lib/csp.ts
index 617fe913e3..77a41c2e3c 100644
--- a/ui/lib/csp.ts
+++ b/ui/lib/csp.ts
@@ -1,30 +1,77 @@
+import { resolvePosthogUiHost } from "@/lib/posthog-hosts";
+
 const POSTHOG_CSP_SOURCE = "https://*.posthog.com";
 
 interface CspOptions {
   cloudEnabled: boolean;
   posthogEnabled: boolean;
   posthogKey: string | null;
-  posthogHost: string | null;
+  posthogIngestionHost: string | null;
+  posthogUiHost: string | null;
+  posthogToolbarEnabled: boolean;
 }
 
+const getPosthogToolbarUiSource = (
+  ingestionHost: string,
+  configuredUiHost: string | null,
+): string => {
+  try {
+    const resolvedUiHost = resolvePosthogUiHost(
+      ingestionHost,
+      configuredUiHost,
+    );
+    const url = new URL(resolvedUiHost);
+    const isHttp = url.protocol === "http:" || url.protocol === "https:";
+    const coveredByCloudWildcard =
+      url.protocol === "https:" && url.hostname.endsWith(".posthog.com");
+
+    return isHttp && !coveredByCloudWildcard ? ` ${url.origin}` : "";
+  } catch {
+    return "";
+  }
+};
+
 export function getCspHeader({
   cloudEnabled,
   posthogEnabled,
   posthogKey,
-  posthogHost,
+  posthogIngestionHost,
+  posthogUiHost,
+  posthogToolbarEnabled,
 }: CspOptions): string {
   const allowPosthog =
-    cloudEnabled && posthogEnabled && Boolean(posthogKey && posthogHost);
+    cloudEnabled &&
+    posthogEnabled &&
+    Boolean(posthogKey && posthogIngestionHost);
   const posthogSource = allowPosthog ? ` ${POSTHOG_CSP_SOURCE}` : "";
+  const allowPosthogToolbar = allowPosthog && posthogToolbarEnabled;
+  const toolbarUiSource =
+    allowPosthogToolbar && posthogIngestionHost
+      ? getPosthogToolbarUiSource(posthogIngestionHost, posthogUiHost)
+      : "";
+  const toolbarPosthogSource = allowPosthogToolbar
+    ? ` ${POSTHOG_CSP_SOURCE}${toolbarUiSource}`
+    : "";
+  const toolbarWorkerSource = allowPosthogToolbar
+    ? "worker-src 'self' blob: data:;"
+    : "";
+  const toolbarMediaSource = allowPosthogToolbar
+    ? `media-src 'self' ${POSTHOG_CSP_SOURCE}${toolbarUiSource};`
+    : "";
+  const frameAncestors = allowPosthogToolbar
+    ? `'self' ${POSTHOG_CSP_SOURCE}${toolbarUiSource}`
+    : "'none'";
 
   return `
   default-src 'self';
-  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://www.googletagmanager.com https://browser.sentry-cdn.com${posthogSource};
-  connect-src 'self' https://api.iconify.design https://api.simplesvg.com https://api.unisvg.com https://js.stripe.com https://www.googletagmanager.com https://*.sentry.io https://*.ingest.sentry.io${posthogSource};
-  img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com${posthogSource};
-  font-src 'self';
-  style-src 'self' 'unsafe-inline';
-  frame-src 'self' https://js.stripe.com https://www.googletagmanager.com${posthogSource};
-  frame-ancestors 'none';
+  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://www.googletagmanager.com https://browser.sentry-cdn.com${posthogSource}${toolbarUiSource};
+  connect-src 'self' https://api.iconify.design https://api.simplesvg.com https://api.unisvg.com https://js.stripe.com https://www.googletagmanager.com https://*.sentry.io https://*.ingest.sentry.io${posthogSource}${toolbarUiSource};
+  img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com${posthogSource}${toolbarUiSource};
+  font-src 'self'${toolbarPosthogSource};
+  style-src 'self' 'unsafe-inline'${toolbarPosthogSource};
+  ${toolbarMediaSource}
+  ${toolbarWorkerSource}
+  frame-src 'self' https://js.stripe.com https://www.googletagmanager.com${posthogSource}${toolbarUiSource};
+  frame-ancestors ${frameAncestors};
 `.replace(/\n/g, "");
 }
diff --git a/ui/lib/env.test.ts b/ui/lib/env.test.ts
index ee916e6b12..32465d81a7 100644
--- a/ui/lib/env.test.ts
+++ b/ui/lib/env.test.ts
@@ -62,6 +62,7 @@ describe("lib/env gated integration validation", () => {
     "POSTHOG_KEY",
     "UI_POSTHOG_HOST",
     "POSTHOG_HOST",
+    "UI_POSTHOG_UI_HOST",
     "CLOUD_BILLING_ENABLED",
   ] as const;
 
@@ -189,6 +190,7 @@ describe("lib/env billing and Stripe boot warnings", () => {
     "POSTHOG_KEY",
     "UI_POSTHOG_HOST",
     "POSTHOG_HOST",
+    "UI_POSTHOG_UI_HOST",
     "UI_CLOUD_STRIPE_PUBLISHABLE_KEY",
     "NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY",
     "UI_CLOUD_STRIPE_PUBLISHABLE_KEY_V2",
diff --git a/ui/lib/get-runtime-config.client.test.ts b/ui/lib/get-runtime-config.client.test.ts
index 7da677b1d5..2c0362cb40 100644
--- a/ui/lib/get-runtime-config.client.test.ts
+++ b/ui/lib/get-runtime-config.client.test.ts
@@ -55,7 +55,8 @@ describe("getRuntimeConfigClient", () => {
       JSON.stringify({
         posthogEnabled: true,
         posthogKey: "phc_key",
-        posthogHost: "https://eu.i.posthog.com",
+        posthogIngestionHost: "https://eu.i.posthog.com",
+        posthogUiHost: "https://eu.posthog.com",
       }),
     );
     const { getRuntimeConfigClient } = await import(
@@ -68,6 +69,8 @@ describe("getRuntimeConfigClient", () => {
     // Then
     expect(config.posthogEnabled).toBe(true);
     expect(config.posthogKey).toBe("phc_key");
+    expect(config.posthogIngestionHost).toBe("https://eu.i.posthog.com");
+    expect(config.posthogUiHost).toBe("https://eu.posthog.com");
   });
 
   it("falls back to an all-null config when the island is absent", async () => {
@@ -139,8 +142,9 @@ describe("getRuntimeConfigClient", () => {
         "cloudEnabled",
         "googleTagManagerId",
         "posthogEnabled",
-        "posthogHost",
+        "posthogIngestionHost",
         "posthogKey",
+        "posthogUiHost",
         "reoDevClientId",
         "sentryDsn",
         "sentryEnvironment",
diff --git a/ui/lib/integrations.test.ts b/ui/lib/integrations.test.ts
index 0832b418e3..fd25289139 100644
--- a/ui/lib/integrations.test.ts
+++ b/ui/lib/integrations.test.ts
@@ -24,6 +24,7 @@ const GATED_ENV_VARS = [
   "POSTHOG_KEY",
   "UI_POSTHOG_HOST",
   "POSTHOG_HOST",
+  "UI_POSTHOG_UI_HOST",
 ] as const;
 
 beforeEach(() => {
@@ -274,6 +275,20 @@ describe("isGatedIntegrationEnabled", () => {
 });
 
 describe("warnGatedIntegrationsMisconfig", () => {
+  it("warns when the optional PostHog app host is set while disabled", () => {
+    // Given
+    const warn = vi.spyOn(console, "warn").mockImplementation(() => {});
+    vi.stubEnv("UI_POSTHOG_UI_HOST", "https://eu.posthog.com");
+
+    // When
+    warnGatedIntegrationsMisconfig();
+
+    // Then
+    expect(warn).toHaveBeenCalledWith(
+      expect.stringContaining("UI_POSTHOG_UI_HOST"),
+    );
+  });
+
   it("warns when a config value is set but its enable flag is not 'true'", () => {
     // Given
     const warn = vi.spyOn(console, "warn").mockImplementation(() => {});
diff --git a/ui/lib/integrations.ts b/ui/lib/integrations.ts
index 07d3886bad..a7408e9ea2 100644
--- a/ui/lib/integrations.ts
+++ b/ui/lib/integrations.ts
@@ -54,7 +54,7 @@ export const GATED_INTEGRATIONS: Record<string, GatedIntegration> = {
       { key: "UI_POSTHOG_KEY", legacy: "POSTHOG_KEY" },
       { key: "UI_POSTHOG_HOST", legacy: "POSTHOG_HOST" },
     ],
-    optional: [],
+    optional: [{ key: "UI_POSTHOG_UI_HOST" }],
   },
 } as const satisfies Record<string, GatedIntegration>;
 
diff --git a/ui/lib/posthog-hosts.test.ts b/ui/lib/posthog-hosts.test.ts
new file mode 100644
index 0000000000..036ab80a81
--- /dev/null
+++ b/ui/lib/posthog-hosts.test.ts
@@ -0,0 +1,29 @@
+import { describe, expect, it } from "vitest";
+
+import { resolvePosthogUiHost } from "./posthog-hosts";
+
+describe("resolvePosthogUiHost", () => {
+  it("prefers an explicitly configured app host", () => {
+    // Given
+    const ingestionHost = "https://eu.i.posthog.com";
+    const uiHost = "https://posthog.example.com/";
+
+    // When / Then
+    expect(resolvePosthogUiHost(ingestionHost, uiHost)).toBe(
+      "https://posthog.example.com",
+    );
+  });
+
+  it.each([
+    ["https://eu.i.posthog.com", "https://eu.posthog.com"],
+    ["https://us.i.posthog.com/", "https://us.posthog.com"],
+  ])("derives the Cloud app host from %s", (ingestionHost, expected) => {
+    expect(resolvePosthogUiHost(ingestionHost, null)).toBe(expected);
+  });
+
+  it("uses the ingestion host for a self-hosted instance", () => {
+    expect(
+      resolvePosthogUiHost("https://posthog.internal.example/", null),
+    ).toBe("https://posthog.internal.example");
+  });
+});
diff --git a/ui/lib/posthog-hosts.ts b/ui/lib/posthog-hosts.ts
new file mode 100644
index 0000000000..2da15a5b5d
--- /dev/null
+++ b/ui/lib/posthog-hosts.ts
@@ -0,0 +1,22 @@
+const POSTHOG_CLOUD_INGESTION_HOST = /^(eu|us)\.i\.posthog\.com$/i;
+
+const stripTrailingSlash = (host: string): string => host.replace(/\/+$/, "");
+
+export function resolvePosthogUiHost(
+  ingestionHost: string,
+  configuredUiHost: string | null,
+): string {
+  if (configuredUiHost) return stripTrailingSlash(configuredUiHost);
+
+  const normalizedIngestionHost = stripTrailingSlash(ingestionHost);
+
+  try {
+    const url = new URL(normalizedIngestionHost);
+    const match = url.hostname.match(POSTHOG_CLOUD_INGESTION_HOST);
+    if (match) return `${url.protocol}//${match[1]}.posthog.com`;
+  } catch {
+    // Keep the configured value so posthog-js reports the invalid host.
+  }
+
+  return normalizedIngestionHost;
+}
diff --git a/ui/lib/posthog-toolbar.ts b/ui/lib/posthog-toolbar.ts
new file mode 100644
index 0000000000..e112a77c36
--- /dev/null
+++ b/ui/lib/posthog-toolbar.ts
@@ -0,0 +1,11 @@
+import type { PostHogInterface } from "posthog-js";
+
+declare global {
+  interface Window {
+    posthog?: PostHogInterface;
+  }
+}
+
+export function exposePosthogForToolbar(client: PostHogInterface): void {
+  if (process.env.NODE_ENV === "development") window.posthog = client;
+}
diff --git a/ui/lib/runtime-config.shared.ts b/ui/lib/runtime-config.shared.ts
index 3a36534bc0..db1318fb21 100644
--- a/ui/lib/runtime-config.shared.ts
+++ b/ui/lib/runtime-config.shared.ts
@@ -8,7 +8,8 @@ export interface RuntimePublicConfig {
   apiDocsUrl: string | null;
   posthogEnabled: boolean;
   posthogKey: string | null;
-  posthogHost: string | null;
+  posthogIngestionHost: string | null;
+  posthogUiHost: string | null;
   reoDevClientId: string | null; // reserved
   cloudEnabled: boolean;
   cloudBillingEnabled: boolean;
@@ -27,7 +28,8 @@ export const EMPTY_RUNTIME_PUBLIC_CONFIG: RuntimePublicConfig = {
   apiDocsUrl: null,
   posthogEnabled: false,
   posthogKey: null,
-  posthogHost: null,
+  posthogIngestionHost: null,
+  posthogUiHost: null,
   reoDevClientId: null,
   cloudEnabled: false,
   cloudBillingEnabled: false,
@@ -46,7 +48,8 @@ const pickConfig = (
   apiDocsUrl: parsed.apiDocsUrl ?? null,
   posthogEnabled: parsed.posthogEnabled ?? false,
   posthogKey: parsed.posthogKey ?? null,
-  posthogHost: parsed.posthogHost ?? null,
+  posthogIngestionHost: parsed.posthogIngestionHost ?? null,
+  posthogUiHost: parsed.posthogUiHost ?? null,
   reoDevClientId: parsed.reoDevClientId ?? null,
   cloudEnabled: parsed.cloudEnabled ?? false,
   cloudBillingEnabled: parsed.cloudBillingEnabled ?? false,
diff --git a/ui/lib/runtime-config.test.ts b/ui/lib/runtime-config.test.ts
new file mode 100644
index 0000000000..412cc1e185
--- /dev/null
+++ b/ui/lib/runtime-config.test.ts
@@ -0,0 +1,74 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+vi.mock("server-only", () => ({}));
+vi.mock("next/server", () => ({ connection: () => Promise.resolve() }));
+
+const POSTHOG_ENV_VARS = [
+  "UI_POSTHOG_ENABLED",
+  "UI_POSTHOG_KEY",
+  "POSTHOG_KEY",
+  "UI_POSTHOG_HOST",
+  "POSTHOG_HOST",
+  "UI_POSTHOG_UI_HOST",
+] as const;
+
+const importFresh = async () => {
+  vi.resetModules();
+  return import("./runtime-config");
+};
+
+describe("getRuntimePublicConfig PostHog hosts", () => {
+  beforeEach(() => {
+    for (const key of POSTHOG_ENV_VARS) vi.stubEnv(key, undefined);
+  });
+
+  afterEach(() => {
+    vi.unstubAllEnvs();
+  });
+
+  it("returns separate ingestion and app hosts when PostHog is enabled", async () => {
+    // Given
+    vi.stubEnv("UI_POSTHOG_ENABLED", "true");
+    vi.stubEnv("UI_POSTHOG_KEY", "phc_key");
+    vi.stubEnv("UI_POSTHOG_HOST", "https://us.i.posthog.com");
+    vi.stubEnv("UI_POSTHOG_UI_HOST", "https://us.posthog.com");
+
+    // When
+    const { getRuntimePublicConfig } = await importFresh();
+    const config = await getRuntimePublicConfig();
+
+    // Then
+    expect(config.posthogIngestionHost).toBe("https://us.i.posthog.com");
+    expect(config.posthogUiHost).toBe("https://us.posthog.com");
+  });
+
+  it("keeps legacy PostHog config working without an explicit app host", async () => {
+    // Given
+    vi.stubEnv("POSTHOG_KEY", "phc_key");
+    vi.stubEnv("POSTHOG_HOST", "https://posthog.internal.example");
+
+    // When
+    const { getRuntimePublicConfig } = await importFresh();
+    const config = await getRuntimePublicConfig();
+
+    // Then
+    expect(config.posthogIngestionHost).toBe(
+      "https://posthog.internal.example",
+    );
+    expect(config.posthogUiHost).toBeNull();
+  });
+
+  it("returns null hosts when PostHog is disabled", async () => {
+    // Given
+    vi.stubEnv("UI_POSTHOG_HOST", "https://eu.i.posthog.com");
+    vi.stubEnv("UI_POSTHOG_UI_HOST", "https://eu.posthog.com");
+
+    // When
+    const { getRuntimePublicConfig } = await importFresh();
+    const config = await getRuntimePublicConfig();
+
+    // Then
+    expect(config.posthogIngestionHost).toBeNull();
+    expect(config.posthogUiHost).toBeNull();
+  });
+});
diff --git a/ui/lib/runtime-config.ts b/ui/lib/runtime-config.ts
index 52635c44c8..29d38ca952 100644
--- a/ui/lib/runtime-config.ts
+++ b/ui/lib/runtime-config.ts
@@ -43,11 +43,12 @@ export async function getRuntimePublicConfig(): Promise<RuntimePublicConfig> {
       "UI_POSTHOG_KEY",
       "POSTHOG_KEY",
     ),
-    posthogHost: readGatedEnv(
+    posthogIngestionHost: readGatedEnv(
       "UI_POSTHOG_ENABLED",
       "UI_POSTHOG_HOST",
       "POSTHOG_HOST",
     ),
+    posthogUiHost: readGatedEnv("UI_POSTHOG_ENABLED", "UI_POSTHOG_UI_HOST"),
     reoDevClientId: readEnv("REO_DEV_CLIENT_ID"),
     cloudEnabled: readBoolEnv("UI_CLOUD_ENABLED"),
     // Install-level selector "legacy" | "metronome" | "false"; the client only
diff --git a/ui/next.config.test.ts b/ui/next.config.test.ts
index a0f39bbdcb..2154ea88f9 100644
--- a/ui/next.config.test.ts
+++ b/ui/next.config.test.ts
@@ -16,7 +16,9 @@ const ENABLED_POSTHOG_CONFIG = {
   cloudEnabled: true,
   posthogEnabled: true,
   posthogKey: "phc_key",
-  posthogHost: "https://eu.posthog.com",
+  posthogIngestionHost: "https://eu.i.posthog.com",
+  posthogUiHost: null,
+  posthogToolbarEnabled: false,
 };
 
 const BASELINE_CSP = {
@@ -85,7 +87,9 @@ describe("PostHog Content Security Policy", () => {
         cloudEnabled: false,
         posthogEnabled: false,
         posthogKey: null,
-        posthogHost: null,
+        posthogIngestionHost: null,
+        posthogUiHost: null,
+        posthogToolbarEnabled: false,
       }),
     );
 
@@ -104,14 +108,95 @@ describe("PostHog Content Security Policy", () => {
     expect(csp["img-src"]).toContain(POSTHOG_WILDCARD);
     expect(csp["frame-src"]).toContain(POSTHOG_WILDCARD);
     expect(csp["font-src"]).not.toContain(POSTHOG_WILDCARD);
+    expect(csp["style-src"]).not.toContain(POSTHOG_WILDCARD);
+    expect(csp["media-src"]).toBeUndefined();
+    expect(csp["worker-src"]).toBeUndefined();
+    expect(csp["frame-ancestors"]).toEqual(["'none'"]);
     expect(csp["default-src"]).not.toContain(POSTHOG_WILDCARD);
   });
 
+  it("adds Toolbar permissions for a fully enabled Cloud development request", () => {
+    // Given
+    const toolbarConfig = {
+      ...ENABLED_POSTHOG_CONFIG,
+      posthogToolbarEnabled: true,
+    };
+
+    // When
+    const csp = parseCsp(getCspHeader(toolbarConfig));
+
+    // Then
+    expect(csp["style-src"]).toContain(POSTHOG_WILDCARD);
+    expect(csp["font-src"]).toContain(POSTHOG_WILDCARD);
+    expect(csp["media-src"]).toContain(POSTHOG_WILDCARD);
+    expect(csp["worker-src"]).toEqual(["'self'", "blob:", "data:"]);
+    expect(csp["frame-ancestors"]).toEqual(["'self'", POSTHOG_WILDCARD]);
+  });
+
+  it("allows the resolved UI origin for a self-hosted Toolbar", () => {
+    // Given
+    const selfHostedUiOrigin = "https://posthog.internal.example";
+    const toolbarConfig = {
+      ...ENABLED_POSTHOG_CONFIG,
+      posthogIngestionHost: `${selfHostedUiOrigin}/ingest`,
+      posthogUiHost: `${selfHostedUiOrigin}/app/`,
+      posthogToolbarEnabled: true,
+    };
+
+    // When
+    const csp = parseCsp(getCspHeader(toolbarConfig));
+
+    // Then
+    expect(csp["script-src"]).toContain(selfHostedUiOrigin);
+    expect(csp["connect-src"]).toContain(selfHostedUiOrigin);
+    expect(csp["img-src"]).toContain(selfHostedUiOrigin);
+    expect(csp["style-src"]).toContain(selfHostedUiOrigin);
+    expect(csp["font-src"]).toContain(selfHostedUiOrigin);
+    expect(csp["media-src"]).toContain(selfHostedUiOrigin);
+    expect(csp["frame-src"]).toContain(selfHostedUiOrigin);
+    expect(csp["frame-ancestors"]).toContain(selfHostedUiOrigin);
+  });
+
+  it("does not add a non-HTTP PostHog UI host to the CSP", () => {
+    // Given
+    const unsafeUiHost = "data:text/plain,toolbar";
+    const toolbarConfig = {
+      ...ENABLED_POSTHOG_CONFIG,
+      posthogUiHost: unsafeUiHost,
+      posthogToolbarEnabled: true,
+    };
+
+    // When
+    const csp = parseCsp(getCspHeader(toolbarConfig));
+
+    // Then
+    expect(Object.values(csp).flat()).not.toContain(unsafeUiHost);
+    expect(Object.values(csp).flat()).not.toContain("null");
+  });
+
+  it("keeps Toolbar permissions closed when PostHog is not fully enabled", () => {
+    // Given
+    const toolbarConfig = {
+      ...ENABLED_POSTHOG_CONFIG,
+      posthogEnabled: false,
+      posthogToolbarEnabled: true,
+    };
+
+    // When
+    const csp = parseCsp(getCspHeader(toolbarConfig));
+
+    // Then
+    expect(Object.values(csp).flat()).not.toContain(POSTHOG_WILDCARD);
+    expect(csp["media-src"]).toBeUndefined();
+    expect(csp["worker-src"]).toBeUndefined();
+    expect(csp["frame-ancestors"]).toEqual(["'none'"]);
+  });
+
   it.each([
     ["Cloud is disabled", { cloudEnabled: false }],
     ["PostHog is disabled", { posthogEnabled: false }],
     ["the key is missing", { posthogKey: null }],
-    ["the host is missing", { posthogHost: null }],
+    ["the host is missing", { posthogIngestionHost: null }],
   ])("omits PostHog permissions when %s", (_case, override) => {
     // Given
     const config = { ...ENABLED_POSTHOG_CONFIG, ...override };
diff --git a/ui/proxy.ts b/ui/proxy.ts
index 2e6b330b17..137d108579 100644
--- a/ui/proxy.ts
+++ b/ui/proxy.ts
@@ -41,11 +41,13 @@ const withSecurityHeaders = (response: NextResponse): NextResponse => {
         "UI_POSTHOG_KEY",
         "POSTHOG_KEY",
       ),
-      posthogHost: readGatedEnv(
+      posthogIngestionHost: readGatedEnv(
         "UI_POSTHOG_ENABLED",
         "UI_POSTHOG_HOST",
         "POSTHOG_HOST",
       ),
+      posthogUiHost: readGatedEnv("UI_POSTHOG_ENABLED", "UI_POSTHOG_UI_HOST"),
+      posthogToolbarEnabled: process.env.NODE_ENV === "development",
     }),
   );
   return response;
diff --git a/ui/tests/runtime-config/runtime-config-page.ts b/ui/tests/runtime-config/runtime-config-page.ts
index b05f754ee0..35d66672c3 100644
--- a/ui/tests/runtime-config/runtime-config-page.ts
+++ b/ui/tests/runtime-config/runtime-config-page.ts
@@ -18,7 +18,8 @@ export const RUNTIME_CONFIG_KEYS = [
   "apiDocsUrl",
   "posthogEnabled",
   "posthogKey",
-  "posthogHost",
+  "posthogIngestionHost",
+  "posthogUiHost",
   "reoDevClientId",
   "cloudBillingEnabled",
   "cloudEnabled",
diff --git a/ui/types/env.d.ts b/ui/types/env.d.ts
index 8b5a1ce039..6815cb962d 100644
--- a/ui/types/env.d.ts
+++ b/ui/types/env.d.ts
@@ -64,6 +64,7 @@ declare global {
       /** @deprecated use UI_POSTHOG_HOST */
       POSTHOG_HOST?: string;
       UI_POSTHOG_HOST?: string;
+      UI_POSTHOG_UI_HOST?: string;
       // TODO Reserved runtime public config (registered now; no UI consumer yet)
       REO_DEV_CLIENT_ID?: string;
 

From 12faeb9aa2ce799db21b3af59584dc439f1f23dd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Thu, 3 Sep 2026 11:09:13 +0200
Subject: [PATCH 31/77] chore(trivy): suppress fast-uri CVEs from Teams SPDX
 manifest (#12727)

---
 .trivyignore.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.trivyignore.yaml b/.trivyignore.yaml
index 24f7e77b65..23fd083b46 100644
--- a/.trivyignore.yaml
+++ b/.trivyignore.yaml
@@ -113,6 +113,18 @@ vulnerabilities:
     purls:
       - "pkg:npm/fast-uri"
     expired_at: 2027-01-31
+  - id: CVE-2026-75899
+    purls:
+      - "pkg:npm/fast-uri"
+    expired_at: 2027-01-31
+  - id: CVE-2026-75975
+    purls:
+      - "pkg:npm/fast-uri"
+    expired_at: 2027-01-31
+  - id: CVE-2026-76172
+    purls:
+      - "pkg:npm/fast-uri"
+    expired_at: 2027-01-31
   - id: CVE-2026-69192
     purls:
       - "pkg:npm/ip-address"

From ab51d0954366d978a8bfa6df1bcea8322f7b09e4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Thu, 3 Sep 2026 12:20:33 +0200
Subject: [PATCH 32/77] fix(tests): isolate mock class attrs leaking across
 tests (#12728)

---
 tests/conftest.py                             | 21 ++++++++++
 ...ore_workload_access_token_wildcard_test.py |  2 +-
 .../inspector2_active_findings_exist_test.py  | 18 ++++-----
 .../inspector2_is_enabled_test.py             | 38 +++++++++----------
 ...d_sensitive_data_discovery_enabled_test.py |  6 +--
 .../macie_is_enabled/macie_is_enabled_test.py | 20 +++++-----
 ...etworkfirewall_deletion_protection_test.py |  6 +--
 .../networkfirewall_in_all_vpc_test.py        | 28 +++++++-------
 .../networkfirewall_logging_enabled_test.py   |  6 +--
 .../networkfirewall_multi_az_test.py          |  6 +--
 ..._default_action_fragmented_packets_test.py |  8 ++--
 ...policy_default_action_full_packets_test.py |  8 ++--
 ...ewall_policy_rule_group_associated_test.py | 10 ++---
 13 files changed, 99 insertions(+), 78 deletions(-)
 create mode 100644 tests/conftest.py

diff --git a/tests/conftest.py b/tests/conftest.py
new file mode 100644
index 0000000000..590a5928c0
--- /dev/null
+++ b/tests/conftest.py
@@ -0,0 +1,21 @@
+from unittest import mock
+
+import pytest
+
+_MOCK_CLASSES = (
+    mock.Mock,
+    mock.MagicMock,
+    mock.AsyncMock,
+    mock.NonCallableMock,
+    mock.NonCallableMagicMock,
+)
+_MOCK_CLASS_BASELINE = {cls: frozenset(vars(cls)) for cls in _MOCK_CLASSES}
+
+
+@pytest.fixture(autouse=True)
+def _reset_mock_class_attributes():
+    """Drop attributes a test sets on the mock classes themselves (`c = mock.MagicMock; c.provider = ...`), so they cannot leak into other tests' instances."""
+    yield
+    for cls, baseline in _MOCK_CLASS_BASELINE.items():
+        for name in set(vars(cls)) - baseline:
+            delattr(cls, name)
diff --git a/tests/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/iam_policy_no_agentcore_workload_access_token_wildcard_test.py b/tests/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/iam_policy_no_agentcore_workload_access_token_wildcard_test.py
index 79a677eb0e..f3cb9156e0 100644
--- a/tests/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/iam_policy_no_agentcore_workload_access_token_wildcard_test.py
+++ b/tests/providers/aws/services/iam/iam_policy_no_agentcore_workload_access_token_wildcard/iam_policy_no_agentcore_workload_access_token_wildcard_test.py
@@ -48,7 +48,7 @@ def _run(policies: list, scan_unused_services: bool = True):
     iam_client = mock.MagicMock()
     iam_client.policies = {policy.arn: policy for policy in policies}
     iam_client.region = AWS_REGION_US_EAST_1
-    iam_client.provider.scan_unused_services = scan_unused_services
+    iam_client.provider = mock.MagicMock(scan_unused_services=scan_unused_services)
 
     aws_provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
 
diff --git a/tests/providers/aws/services/inspector2/inspector2_active_findings_exist/inspector2_active_findings_exist_test.py b/tests/providers/aws/services/inspector2/inspector2_active_findings_exist/inspector2_active_findings_exist_test.py
index a489700e86..8d2e014c99 100644
--- a/tests/providers/aws/services/inspector2/inspector2_active_findings_exist/inspector2_active_findings_exist_test.py
+++ b/tests/providers/aws/services/inspector2/inspector2_active_findings_exist/inspector2_active_findings_exist_test.py
@@ -15,7 +15,7 @@ FINDING_ARN = (
 class Test_inspector2_active_findings_exist:
     def test_enabled_no_finding(self):
         # Mock the inspector2 client
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
 
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
@@ -69,7 +69,7 @@ class Test_inspector2_active_findings_exist:
 
     def test_enabled_with_no_active_finding(self):
         # Mock the inspector2 client
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
 
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
@@ -123,7 +123,7 @@ class Test_inspector2_active_findings_exist:
 
     def test_enabled_with_active_finding(self):
         # Mock the inspector2 client
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
 
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
@@ -176,7 +176,7 @@ class Test_inspector2_active_findings_exist:
 
     def test_enabled_with_none_finding(self):
         # Mock the inspector2 client
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
 
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
@@ -219,14 +219,14 @@ class Test_inspector2_active_findings_exist:
 
     def test_inspector2_disabled_ignoring(self):
         # Mock the inspector2 client
-        inspector2_client = mock.MagicMock
-        awslambda_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
+        awslambda_client = mock.MagicMock()
         awslambda_client.functions = {}
-        ecr_client = mock.MagicMock
+        ecr_client = mock.MagicMock()
         ecr_client.registries = {}
-        ecr_client.registries[AWS_REGION_EU_WEST_1] = mock.MagicMock
+        ecr_client.registries[AWS_REGION_EU_WEST_1] = mock.MagicMock()
         ecr_client.registries[AWS_REGION_EU_WEST_1].repositories = []
-        ec2_client = mock.MagicMock
+        ec2_client = mock.MagicMock()
         ec2_client.instances = []
         ec2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         ecr_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
diff --git a/tests/providers/aws/services/inspector2/inspector2_is_enabled/inspector2_is_enabled_test.py b/tests/providers/aws/services/inspector2/inspector2_is_enabled/inspector2_is_enabled_test.py
index 66eb2ceaa3..7383f312c1 100644
--- a/tests/providers/aws/services/inspector2/inspector2_is_enabled/inspector2_is_enabled_test.py
+++ b/tests/providers/aws/services/inspector2/inspector2_is_enabled/inspector2_is_enabled_test.py
@@ -75,10 +75,10 @@ class Test_inspector2_is_enabled:
 
     def test_inspector2_disabled(self):
         # Mock the inspector2 client
-        inspector2_client = mock.MagicMock
-        awslambda_client = mock.MagicMock
-        ecr_client = mock.MagicMock
-        ec2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
+        awslambda_client = mock.MagicMock()
+        ecr_client = mock.MagicMock()
+        ec2_client = mock.MagicMock()
         ec2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         ecr_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         awslambda_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
@@ -133,7 +133,7 @@ class Test_inspector2_is_enabled:
 
     def test_all_enabled(self):
         # Mock the inspector2 client
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
         inspector2_client.audited_account_arn = (
@@ -235,7 +235,7 @@ class Test_inspector2_is_enabled:
                 assert result[0].region == AWS_REGION_EU_WEST_1
 
     def test_ec2_disabled(self):
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
         inspector2_client.audited_account_arn = (
@@ -286,7 +286,7 @@ class Test_inspector2_is_enabled:
                 assert result[0].region == AWS_REGION_EU_WEST_1
 
     def test_ecr_disabled(self):
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
         inspector2_client.audited_account_arn = (
@@ -337,7 +337,7 @@ class Test_inspector2_is_enabled:
                 assert result[0].region == AWS_REGION_EU_WEST_1
 
     def test_lambda_disabled(self):
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
         inspector2_client.audited_account_arn = (
@@ -388,7 +388,7 @@ class Test_inspector2_is_enabled:
                 assert result[0].region == AWS_REGION_EU_WEST_1
 
     def test_lambda_code_disabled(self):
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
         inspector2_client.audited_account_arn = (
@@ -439,7 +439,7 @@ class Test_inspector2_is_enabled:
                 assert result[0].region == AWS_REGION_EU_WEST_1
 
     def test_ec2_ecr_disabled(self):
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
         inspector2_client.audited_account_arn = (
@@ -490,7 +490,7 @@ class Test_inspector2_is_enabled:
                 assert result[0].region == AWS_REGION_EU_WEST_1
 
     def test_ec2_lambda_disabled(self):
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
         inspector2_client.audited_account_arn = (
@@ -541,7 +541,7 @@ class Test_inspector2_is_enabled:
                 assert result[0].region == AWS_REGION_EU_WEST_1
 
     def test_ec2_lambda_code_disabled(self):
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
         inspector2_client.audited_account_arn = (
@@ -592,7 +592,7 @@ class Test_inspector2_is_enabled:
                 assert result[0].region == AWS_REGION_EU_WEST_1
 
     def test_ecr_lambda_disabled(self):
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
         inspector2_client.audited_account_arn = (
@@ -643,7 +643,7 @@ class Test_inspector2_is_enabled:
                 assert result[0].region == AWS_REGION_EU_WEST_1
 
     def test_ecr_lambda_code_disabled(self):
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
         inspector2_client.audited_account_arn = (
@@ -694,7 +694,7 @@ class Test_inspector2_is_enabled:
                 assert result[0].region == AWS_REGION_EU_WEST_1
 
     def test_lambda_lambda_code_disabled(self):
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
         inspector2_client.audited_account_arn = (
@@ -745,7 +745,7 @@ class Test_inspector2_is_enabled:
                 assert result[0].region == AWS_REGION_EU_WEST_1
 
     def test_ec2_ecr_lambda_disabled(self):
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
         inspector2_client.audited_account_arn = (
@@ -796,7 +796,7 @@ class Test_inspector2_is_enabled:
                 assert result[0].region == AWS_REGION_EU_WEST_1
 
     def test_ec2_ecr_lambda_code_disabled(self):
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
         inspector2_client.audited_account_arn = (
@@ -847,7 +847,7 @@ class Test_inspector2_is_enabled:
                 assert result[0].region == AWS_REGION_EU_WEST_1
 
     def test_ec2_lambda_lambda_code_disabled(self):
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
         inspector2_client.audited_account_arn = (
@@ -898,7 +898,7 @@ class Test_inspector2_is_enabled:
                 assert result[0].region == AWS_REGION_EU_WEST_1
 
     def test_ecr_lambda_lambda_code_disabled(self):
-        inspector2_client = mock.MagicMock
+        inspector2_client = mock.MagicMock()
         inspector2_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2_client.audited_account = AWS_ACCOUNT_NUMBER
         inspector2_client.audited_account_arn = (
diff --git a/tests/providers/aws/services/macie/macie_automated_sensitive_data_discovery_enabled/macie_automated_sensitive_data_discovery_enabled_test.py b/tests/providers/aws/services/macie/macie_automated_sensitive_data_discovery_enabled/macie_automated_sensitive_data_discovery_enabled_test.py
index d196c39242..f8f3d82527 100644
--- a/tests/providers/aws/services/macie/macie_automated_sensitive_data_discovery_enabled/macie_automated_sensitive_data_discovery_enabled_test.py
+++ b/tests/providers/aws/services/macie/macie_automated_sensitive_data_discovery_enabled/macie_automated_sensitive_data_discovery_enabled_test.py
@@ -13,7 +13,7 @@ from tests.providers.aws.utils import (
 class Test_macie_automated_sensitive_data_discovery_enabled:
     @mock_aws
     def test_macie_disabled(self):
-        macie_client = mock.MagicMock
+        macie_client = mock.MagicMock()
         macie_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         macie_client.audited_account = AWS_ACCOUNT_NUMBER
         macie_client.audited_account_arn = f"arn:aws:iam::{AWS_ACCOUNT_NUMBER}:root"
@@ -56,7 +56,7 @@ class Test_macie_automated_sensitive_data_discovery_enabled:
 
     @mock_aws
     def test_macie_enabled_automated_discovery_disabled(self):
-        macie_client = mock.MagicMock
+        macie_client = mock.MagicMock()
         macie_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         macie_client.audited_account = AWS_ACCOUNT_NUMBER
         macie_client.audited_account_arn = f"arn:aws:iam::{AWS_ACCOUNT_NUMBER}:root"
@@ -109,7 +109,7 @@ class Test_macie_automated_sensitive_data_discovery_enabled:
 
     @mock_aws
     def test_macie_enabled_automated_discovery_enabled(self):
-        macie_client = mock.MagicMock
+        macie_client = mock.MagicMock()
         macie_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         macie_client.audited_account = AWS_ACCOUNT_NUMBER
         macie_client.audited_account_arn = f"arn:aws:iam::{AWS_ACCOUNT_NUMBER}:root"
diff --git a/tests/providers/aws/services/macie/macie_is_enabled/macie_is_enabled_test.py b/tests/providers/aws/services/macie/macie_is_enabled/macie_is_enabled_test.py
index bf0339391a..0654f88023 100644
--- a/tests/providers/aws/services/macie/macie_is_enabled/macie_is_enabled_test.py
+++ b/tests/providers/aws/services/macie/macie_is_enabled/macie_is_enabled_test.py
@@ -14,12 +14,12 @@ from tests.providers.aws.utils import (
 class Test_macie_is_enabled:
     @mock_aws
     def test_macie_disabled(self):
-        s3_client = mock.MagicMock
+        s3_client = mock.MagicMock()
         s3_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         s3_client.buckets = {}
         s3_client.regions_with_buckets = []
 
-        macie_client = mock.MagicMock
+        macie_client = mock.MagicMock()
         macie_client.provider = set_mocked_aws_provider(
             [AWS_REGION_EU_WEST_1], create_default_organization=False
         )
@@ -74,12 +74,12 @@ class Test_macie_is_enabled:
 
     @mock_aws
     def test_macie_enabled(self):
-        s3_client = mock.MagicMock
+        s3_client = mock.MagicMock()
         s3_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         s3_client.buckets = {}
         s3_client.regions_with_buckets = []
 
-        macie_client = mock.MagicMock
+        macie_client = mock.MagicMock()
         macie_client.provider = set_mocked_aws_provider(
             [AWS_REGION_EU_WEST_1], create_default_organization=False
         )
@@ -134,12 +134,12 @@ class Test_macie_is_enabled:
 
     @mock_aws
     def test_macie_suspended_ignored(self):
-        s3_client = mock.MagicMock
+        s3_client = mock.MagicMock()
         s3_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         s3_client.buckets = {}
         s3_client.regions_with_buckets = []
 
-        macie_client = mock.MagicMock
+        macie_client = mock.MagicMock()
         macie_client.provider = set_mocked_aws_provider(
             [AWS_REGION_EU_WEST_1], create_default_organization=False
         )
@@ -189,7 +189,7 @@ class Test_macie_is_enabled:
 
     @mock_aws
     def test_macie_suspended_ignored_with_buckets(self):
-        s3_client = mock.MagicMock
+        s3_client = mock.MagicMock()
         s3_client.regions_with_buckets = [AWS_REGION_EU_WEST_1]
         s3_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         s3_client.buckets = [
@@ -200,7 +200,7 @@ class Test_macie_is_enabled:
             )
         ]
 
-        macie_client = mock.MagicMock
+        macie_client = mock.MagicMock()
         macie_client.provider = set_mocked_aws_provider(
             [AWS_REGION_EU_WEST_1], create_default_organization=False
         )
@@ -258,10 +258,10 @@ class Test_macie_is_enabled:
 
     @mock_aws
     def test_macie_suspended(self):
-        s3_client = mock.MagicMock
+        s3_client = mock.MagicMock()
         s3_client.provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
 
-        macie_client = mock.MagicMock
+        macie_client = mock.MagicMock()
         macie_client.provider = set_mocked_aws_provider(
             [AWS_REGION_EU_WEST_1], create_default_organization=False
         )
diff --git a/tests/providers/aws/services/networkfirewall/networkfirewall_deletion_protection/networkfirewall_deletion_protection_test.py b/tests/providers/aws/services/networkfirewall/networkfirewall_deletion_protection/networkfirewall_deletion_protection_test.py
index 1ca85fe987..4ff0835ed0 100644
--- a/tests/providers/aws/services/networkfirewall/networkfirewall_deletion_protection/networkfirewall_deletion_protection_test.py
+++ b/tests/providers/aws/services/networkfirewall/networkfirewall_deletion_protection/networkfirewall_deletion_protection_test.py
@@ -14,7 +14,7 @@ POLICY_ARN = "arn:aws:network-firewall:us-east-1:123456789012:firewall-policy/my
 
 class Test_networkfirewall_deletion_protection:
     def test_no_networkfirewall(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -42,7 +42,7 @@ class Test_networkfirewall_deletion_protection:
                 assert len(result) == 0
 
     def test_networkfirewall_deletion_protection_disabled(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -89,7 +89,7 @@ class Test_networkfirewall_deletion_protection:
                 assert result[0].resource_arn == FIREWALL_ARN
 
     def test_networkfirewall_deletion_protection_enabled(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
diff --git a/tests/providers/aws/services/networkfirewall/networkfirewall_in_all_vpc/networkfirewall_in_all_vpc_test.py b/tests/providers/aws/services/networkfirewall/networkfirewall_in_all_vpc/networkfirewall_in_all_vpc_test.py
index 18193b4f17..dfcd664e3d 100644
--- a/tests/providers/aws/services/networkfirewall/networkfirewall_in_all_vpc/networkfirewall_in_all_vpc_test.py
+++ b/tests/providers/aws/services/networkfirewall/networkfirewall_in_all_vpc/networkfirewall_in_all_vpc_test.py
@@ -15,13 +15,13 @@ POLICY_ARN = "arn:aws:network-firewall:us-east-1:123456789012:firewall-policy/my
 
 class Test_networkfirewall_in_all_vpc:
     def test_no_vpcs(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
         networkfirewall_client.region = AWS_REGION_US_EAST_1
         networkfirewall_client.network_firewalls = {}
-        vpc_client = mock.MagicMock
+        vpc_client = mock.MagicMock()
         vpc_client.provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
         vpc_client.region = AWS_REGION_US_EAST_1
         vpc_client.vpcs = {}
@@ -51,7 +51,7 @@ class Test_networkfirewall_in_all_vpc:
                     assert len(result) == 0
 
     def test_vpcs_with_firewall_all(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -68,7 +68,7 @@ class Test_networkfirewall_in_all_vpc:
                 deletion_protection=True,
             )
         }
-        vpc_client = mock.MagicMock
+        vpc_client = mock.MagicMock()
         vpc_client.provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
         vpc_client.region = AWS_REGION_US_EAST_1
         vpc_client.vpcs = {
@@ -134,13 +134,13 @@ class Test_networkfirewall_in_all_vpc:
                     assert result[0].resource_arn == "arn_test"
 
     def test_vpcs_without_firewall(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
         networkfirewall_client.region = AWS_REGION_US_EAST_1
         networkfirewall_client.network_firewalls = {}
-        vpc_client = mock.MagicMock
+        vpc_client = mock.MagicMock()
         vpc_client.provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
         vpc_client.region = AWS_REGION_US_EAST_1
         vpc_client.vpcs = {
@@ -206,14 +206,14 @@ class Test_networkfirewall_in_all_vpc:
                     assert result[0].resource_arn == "arn_test"
 
     def test_vpcs_with_name_without_firewall(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
         networkfirewall_client.region = AWS_REGION_US_EAST_1
         networkfirewall_client.network_firewalls = {}
 
-        vpc_client = mock.MagicMock
+        vpc_client = mock.MagicMock()
         vpc_client.provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
         vpc_client.region = AWS_REGION_US_EAST_1
         vpc_client.vpcs = {
@@ -279,7 +279,7 @@ class Test_networkfirewall_in_all_vpc:
                     assert result[0].resource_arn == "arn_test"
 
     def test_vpcs_with_and_without_firewall(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -296,7 +296,7 @@ class Test_networkfirewall_in_all_vpc:
                 deletion_protection=True,
             )
         }
-        vpc_client = mock.MagicMock
+        vpc_client = mock.MagicMock()
         vpc_client.provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
         vpc_client.region = AWS_REGION_US_EAST_1
         vpc_client.vpcs = {
@@ -400,13 +400,13 @@ class Test_networkfirewall_in_all_vpc:
                             assert r.resource_arn == "arn_test"
 
     def test_vpcs_without_firewall_ignoring(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
         networkfirewall_client.region = AWS_REGION_US_EAST_1
         networkfirewall_client.network_firewalls = {}
-        vpc_client = mock.MagicMock
+        vpc_client = mock.MagicMock()
         vpc_client.provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
         vpc_client.region = AWS_REGION_US_EAST_1
         vpc_client.vpcs = {
@@ -464,13 +464,13 @@ class Test_networkfirewall_in_all_vpc:
                     assert len(result) == 0
 
     def test_vpcs_without_firewall_ignoring_vpc_in_use(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
         networkfirewall_client.region = AWS_REGION_US_EAST_1
         networkfirewall_client.network_firewalls = {}
-        vpc_client = mock.MagicMock
+        vpc_client = mock.MagicMock()
         vpc_client.provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
         vpc_client.region = AWS_REGION_US_EAST_1
         vpc_client.vpcs = {
diff --git a/tests/providers/aws/services/networkfirewall/networkfirewall_logging_enabled/networkfirewall_logging_enabled_test.py b/tests/providers/aws/services/networkfirewall/networkfirewall_logging_enabled/networkfirewall_logging_enabled_test.py
index 79add91c63..8bc3c6cf6f 100644
--- a/tests/providers/aws/services/networkfirewall/networkfirewall_logging_enabled/networkfirewall_logging_enabled_test.py
+++ b/tests/providers/aws/services/networkfirewall/networkfirewall_logging_enabled/networkfirewall_logging_enabled_test.py
@@ -17,7 +17,7 @@ POLICY_ARN = "arn:aws:network-firewall:us-east-1:123456789012:firewall-policy/my
 
 class Test_networkfirewall_logging_enabled:
     def test_no_networkfirewall(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -45,7 +45,7 @@ class Test_networkfirewall_logging_enabled:
                 assert len(result) == 0
 
     def test_networkfirewall_logging_disabled(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -93,7 +93,7 @@ class Test_networkfirewall_logging_enabled:
                 assert result[0].resource_arn == FIREWALL_ARN
 
     def test_networkfirewall_logging_enabled(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
diff --git a/tests/providers/aws/services/networkfirewall/networkfirewall_multi_az/networkfirewall_multi_az_test.py b/tests/providers/aws/services/networkfirewall/networkfirewall_multi_az/networkfirewall_multi_az_test.py
index 6e0d5f6750..49239d1282 100644
--- a/tests/providers/aws/services/networkfirewall/networkfirewall_multi_az/networkfirewall_multi_az_test.py
+++ b/tests/providers/aws/services/networkfirewall/networkfirewall_multi_az/networkfirewall_multi_az_test.py
@@ -16,7 +16,7 @@ POLICY_ARN = "arn:aws:network-firewall:us-east-1:123456789012:firewall-policy/my
 
 class Test_networkfirewall_multi_az:
     def test_no_networkfirewall(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -44,7 +44,7 @@ class Test_networkfirewall_multi_az:
                 assert len(result) == 0
 
     def test_networkfirewall_multi_az_disabled(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -97,7 +97,7 @@ class Test_networkfirewall_multi_az:
                 assert result[0].resource_arn == FIREWALL_ARN
 
     def test_networkfirewall_multi_az_enabled(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
diff --git a/tests/providers/aws/services/networkfirewall/networkfirewall_policy_default_action_fragmented_packets/networkfirewall_policy_default_action_fragmented_packets_test.py b/tests/providers/aws/services/networkfirewall/networkfirewall_policy_default_action_fragmented_packets/networkfirewall_policy_default_action_fragmented_packets_test.py
index cc7c8a17b1..beda353374 100644
--- a/tests/providers/aws/services/networkfirewall/networkfirewall_policy_default_action_fragmented_packets/networkfirewall_policy_default_action_fragmented_packets_test.py
+++ b/tests/providers/aws/services/networkfirewall/networkfirewall_policy_default_action_fragmented_packets/networkfirewall_policy_default_action_fragmented_packets_test.py
@@ -14,7 +14,7 @@ POLICY_ARN = "arn:aws:network-firewall:us-east-1:123456789012:firewall-policy/my
 
 class Test_networkfirewall_policy_default_action_fragmented_packets:
     def test_no_networkfirewall(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -42,7 +42,7 @@ class Test_networkfirewall_policy_default_action_fragmented_packets:
                 assert len(result) == 0
 
     def test_networkfirewall_default_stateless_action_drop(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -90,7 +90,7 @@ class Test_networkfirewall_policy_default_action_fragmented_packets:
                 assert result[0].resource_arn == FIREWALL_ARN
 
     def test_networkfirewall_default_stateless_action_forward(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -139,7 +139,7 @@ class Test_networkfirewall_policy_default_action_fragmented_packets:
                 assert result[0].resource_arn == FIREWALL_ARN
 
     def test_networkfirewall_default_stateless_action_pass(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
diff --git a/tests/providers/aws/services/networkfirewall/networkfirewall_policy_default_action_full_packets/networkfirewall_policy_default_action_full_packets_test.py b/tests/providers/aws/services/networkfirewall/networkfirewall_policy_default_action_full_packets/networkfirewall_policy_default_action_full_packets_test.py
index 9388458eb6..d2a6cb5301 100644
--- a/tests/providers/aws/services/networkfirewall/networkfirewall_policy_default_action_full_packets/networkfirewall_policy_default_action_full_packets_test.py
+++ b/tests/providers/aws/services/networkfirewall/networkfirewall_policy_default_action_full_packets/networkfirewall_policy_default_action_full_packets_test.py
@@ -14,7 +14,7 @@ POLICY_ARN = "arn:aws:network-firewall:us-east-1:123456789012:firewall-policy/my
 
 class Test_networkfirewall_policy_default_action_full_packets:
     def test_no_networkfirewall(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -42,7 +42,7 @@ class Test_networkfirewall_policy_default_action_full_packets:
                 assert len(result) == 0
 
     def test_networkfirewall_policy_default_action_drop(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -90,7 +90,7 @@ class Test_networkfirewall_policy_default_action_full_packets:
                 assert result[0].resource_arn == FIREWALL_ARN
 
     def test_networkfirewall_policy_default_action_forward(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -139,7 +139,7 @@ class Test_networkfirewall_policy_default_action_full_packets:
                 assert result[0].resource_arn == FIREWALL_ARN
 
     def test_networkfirewall_policy_default_action_pass(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
diff --git a/tests/providers/aws/services/networkfirewall/networkfirewall_policy_rule_group_associated/networkfirewall_policy_rule_group_associated_test.py b/tests/providers/aws/services/networkfirewall/networkfirewall_policy_rule_group_associated/networkfirewall_policy_rule_group_associated_test.py
index 1340e4b938..7ea7d46ef0 100644
--- a/tests/providers/aws/services/networkfirewall/networkfirewall_policy_rule_group_associated/networkfirewall_policy_rule_group_associated_test.py
+++ b/tests/providers/aws/services/networkfirewall/networkfirewall_policy_rule_group_associated/networkfirewall_policy_rule_group_associated_test.py
@@ -14,7 +14,7 @@ POLICY_ARN = "arn:aws:network-firewall:us-east-1:123456789012:firewall-policy/my
 
 class Test_networkfirewall_policy_rule_group_associated:
     def test_no_networkfirewall(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -42,7 +42,7 @@ class Test_networkfirewall_policy_rule_group_associated:
                 assert len(result) == 0
 
     def test_networkfirewall_policy_stateless_rule_group_associated(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -92,7 +92,7 @@ class Test_networkfirewall_policy_rule_group_associated:
                 assert result[0].resource_arn == FIREWALL_ARN
 
     def test_networkfirewall_policy_stateful_rule_group_associated(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -142,7 +142,7 @@ class Test_networkfirewall_policy_rule_group_associated:
                 assert result[0].resource_arn == FIREWALL_ARN
 
     def test_networkfirewall_policy_both_rule_groups_associated(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )
@@ -196,7 +196,7 @@ class Test_networkfirewall_policy_rule_group_associated:
                 assert result[0].resource_arn == FIREWALL_ARN
 
     def test_networkfirewall_policy_no_rule_groups_associated(self):
-        networkfirewall_client = mock.MagicMock
+        networkfirewall_client = mock.MagicMock()
         networkfirewall_client.provider = set_mocked_aws_provider(
             [AWS_REGION_US_EAST_1]
         )

From 8f35fff255d189d1f4658c85b8bd0f5fefb48398 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Thu, 3 Sep 2026 13:39:12 +0200
Subject: [PATCH 33/77] fix(compliance): remove duplicate ids and stale check
 refs (#12717)

---
 .../compliance-catalog-integrity.fixed.md     |   1 +
 ...threatscore-azure-gcp-data-errors.fixed.md |   1 +
 .../aws_account_security_onboarding_aws.json  |  13 +-
 ...aws_foundational_technical_review_aws.json |   1 -
 ...itected_framework_security_pillar_aws.json |   5 -
 prowler/compliance/aws/c5_aws.json            |  20 +-
 prowler/compliance/aws/cis_5.0_aws.json       |   2 +-
 prowler/compliance/aws/cisa_aws.json          |  22 +--
 .../aws/fedramp_20x_ksi_low_aws.json          |  56 ++----
 .../aws/fedramp_low_revision_4_aws.json       |  20 +-
 .../aws/fedramp_moderate_revision_4_aws.json  |  84 +-------
 prowler/compliance/aws/ffiec_aws.json         |  26 +--
 prowler/compliance/aws/gdpr_aws.json          |  11 --
 .../aws/gxp_21_cfr_part_11_aws.json           |  19 --
 .../compliance/aws/gxp_eu_annex_11_aws.json   |  22 ---
 prowler/compliance/aws/hipaa_aws.json         |  42 ----
 prowler/compliance/aws/iso27001_2022_aws.json |  28 +--
 .../compliance/aws/kisa_isms_p_2023_aws.json  |   3 -
 .../aws/kisa_isms_p_2023_korean_aws.json      |   3 -
 prowler/compliance/aws/nis2_aws.json          |   1 -
 .../aws/nist_800_171_revision_2_aws.json      |  37 +---
 .../aws/nist_800_53_revision_4_aws.json       |  28 +--
 .../aws/nist_800_53_revision_5_aws.json       | 181 +-----------------
 prowler/compliance/aws/nist_csf_1.1_aws.json  |  43 +----
 prowler/compliance/aws/pci_3.2.1_aws.json     |  59 +++---
 .../aws/rbi_cyber_security_framework_aws.json |   4 +-
 prowler/compliance/aws/soc2_aws.json          |   2 -
 prowler/compliance/azure/c5_azure.json        |  21 +-
 .../compliance/azure/ens_rd2022_azure.json    |   4 +-
 .../azure/fedramp_20x_ksi_low_azure.json      | 152 +++++----------
 .../compliance/azure/iso27001_2022_azure.json |   9 +-
 .../compliance/azure/mitre_attack_azure.json  |   3 -
 prowler/compliance/azure/nis2_azure.json      |   1 -
 .../azure/prowler_threatscore_azure.json      |  36 ++--
 prowler/compliance/gcp/ens_rd2022_gcp.json    |   2 +-
 prowler/compliance/gcp/hipaa_gcp.json         |  90 ++++-----
 prowler/compliance/gcp/iso27001_2022_gcp.json |   3 +-
 prowler/compliance/gcp/nis2_gcp.json          |   1 -
 .../gcp/prowler_threatscore_gcp.json          |   2 +-
 prowler/compliance/gcp/soc2_gcp.json          |   3 +-
 prowler/compliance/github/cis_1.0_github.json |  21 --
 .../kubernetes/iso27001_2022_kubernetes.json  |   1 -
 prowler/compliance/m365/cis_4.0_m365.json     |   4 +-
 .../compliance/m365/iso27001_2022_m365.json   |  10 +-
 .../compliance_catalog_integrity_test.py      |  64 +++++++
 45 files changed, 288 insertions(+), 873 deletions(-)
 create mode 100644 prowler/changelog.d/compliance-catalog-integrity.fixed.md
 create mode 100644 prowler/changelog.d/threatscore-azure-gcp-data-errors.fixed.md
 create mode 100644 tests/lib/check/compliance_catalog_integrity_test.py

diff --git a/prowler/changelog.d/compliance-catalog-integrity.fixed.md b/prowler/changelog.d/compliance-catalog-integrity.fixed.md
new file mode 100644
index 0000000000..1bfcf0462c
--- /dev/null
+++ b/prowler/changelog.d/compliance-catalog-integrity.fixed.md
@@ -0,0 +1 @@
+Duplicate requirement ids, checks listed twice in a requirement and references to non-existent checks across compliance frameworks, now guarded by a catalog integrity test
diff --git a/prowler/changelog.d/threatscore-azure-gcp-data-errors.fixed.md b/prowler/changelog.d/threatscore-azure-gcp-data-errors.fixed.md
new file mode 100644
index 0000000000..0fb7547adb
--- /dev/null
+++ b/prowler/changelog.d/threatscore-azure-gcp-data-errors.fixed.md
@@ -0,0 +1 @@
+Duplicate requirement `3.2.1` in ProwlerThreatScore for Azure (SQL auditing retention is now `3.2.4`) and doubled check id in requirement `1.2.1` of ProwlerThreatScore for GCP
diff --git a/prowler/compliance/aws/aws_account_security_onboarding_aws.json b/prowler/compliance/aws/aws_account_security_onboarding_aws.json
index 1910bac223..1b6568005e 100644
--- a/prowler/compliance/aws/aws_account_security_onboarding_aws.json
+++ b/prowler/compliance/aws/aws_account_security_onboarding_aws.json
@@ -277,7 +277,6 @@
         }
       ],
       "Checks": [
-        "guardduty_is_enabled",
         "guardduty_is_enabled"
       ],
       "ConfigRequirements": [
@@ -497,7 +496,7 @@
       "Checks": []
     },
     {
-      "Id": "Create Cost Anomaly Detection monitors to alert spending anomalies",
+      "Id": "Create Cost Anomaly Detection monitors to alert spending anomalies (Prod)",
       "Description": "Develop monitoring systems for detecting cost anomalies and generating alerts for irregular spending patterns.",
       "Attributes": [
         {
@@ -510,7 +509,7 @@
       "Checks": []
     },
     {
-      "Id": "Create Cost Anomaly Detection monitors to alert spending anomalies",
+      "Id": "Create Cost Anomaly Detection monitors to alert spending anomalies (QA)",
       "Description": "Establish monitoring systems for cost anomaly detection to promptly notify about unusual spending patterns.",
       "Attributes": [
         {
@@ -618,7 +617,7 @@
       ]
     },
     {
-      "Id": "Export scan results as metrics in centralized collector",
+      "Id": "Export scan results as metrics in centralized collector (EC2)",
       "Description": "Export scan results as metrics to a centralized collector.",
       "Attributes": [
         {
@@ -667,7 +666,7 @@
       ]
     },
     {
-      "Id": "Export scan results as metrics in centralized collector",
+      "Id": "Export scan results as metrics in centralized collector (ECR)",
       "Description": "Generate metric data from scan results and store it in a centralized collector.",
       "Attributes": [
         {
@@ -1189,7 +1188,7 @@
       ]
     },
     {
-      "Id": "Export metrics in centralized collector",
+      "Id": "Export metrics in centralized collector (Shield Advanced)",
       "Description": "Exporting metrics to a centralized collector for data aggregation and analysis.",
       "Attributes": [
         {
@@ -1367,7 +1366,7 @@
       "Checks": []
     },
     {
-      "Id": "Export metrics in centralized collector",
+      "Id": "Export metrics in centralized collector (WAFv2)",
       "Description": "Exporting metrics to a centralized collector for comprehensive data aggregation.",
       "Attributes": [
         {
diff --git a/prowler/compliance/aws/aws_foundational_technical_review_aws.json b/prowler/compliance/aws/aws_foundational_technical_review_aws.json
index 9d8e3cfdc8..d910a5aec7 100644
--- a/prowler/compliance/aws/aws_foundational_technical_review_aws.json
+++ b/prowler/compliance/aws/aws_foundational_technical_review_aws.json
@@ -334,7 +334,6 @@
         "iam_role_cross_service_confused_deputy_prevention",
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
-        "iam_root_hardware_mfa_enabled",
         "iam_user_hardware_mfa_enabled",
         "iam_user_mfa_enabled_console_access",
         "iam_administrator_access_with_mfa"
diff --git a/prowler/compliance/aws/aws_well_architected_framework_security_pillar_aws.json b/prowler/compliance/aws/aws_well_architected_framework_security_pillar_aws.json
index 41458eea5b..12a59a6b06 100644
--- a/prowler/compliance/aws/aws_well_architected_framework_security_pillar_aws.json
+++ b/prowler/compliance/aws/aws_well_architected_framework_security_pillar_aws.json
@@ -472,11 +472,9 @@
         "emr_cluster_publicly_accesible",
         "glacier_vaults_policy_public_access",
         "awslambda_function_not_publicly_accessible",
-        "awslambda_function_not_publicly_accessible",
         "rds_instance_no_public_access",
         "rds_snapshots_public_access",
         "kms_key_not_publicly_accessible",
-        "opensearch_service_domains_not_publicly_accessible",
         "redshift_cluster_public_access",
         "s3_account_level_public_access_blocks",
         "s3_bucket_public_access",
@@ -493,7 +491,6 @@
         "eks_cluster_not_publicly_accessible",
         "elb_internet_facing",
         "elbv2_internet_facing",
-        "s3_account_level_public_access_blocks",
         "sns_topics_not_publicly_accessible",
         "sqs_queues_not_publicly_accessible",
         "ssm_documents_set_as_public",
@@ -553,7 +550,6 @@
         "awslambda_function_invoke_api_operations_cloudtrail_logging_enabled",
         "cloudfront_distributions_logging_enabled",
         "cloudtrail_bedrock_logging_enabled",
-        "cloudtrail_cloudwatch_logging_enabled",
         "cloudtrail_logs_s3_bucket_access_logging_enabled",
         "directoryservice_directory_log_forwarding_enabled",
         "eks_control_plane_logging_all_types_enabled",
@@ -771,7 +767,6 @@
         "ec2_securitygroup_not_used",
         "ec2_securitygroup_with_many_ingress_egress_rules",
         "elbv2_desync_mitigation_mode",
-        "elbv2_desync_mitigation_mode",
         "route53_domains_privacy_protection_enabled",
         "route53_domains_transferlock_enabled",
         "shield_advanced_protection_in_associated_elastic_ips",
diff --git a/prowler/compliance/aws/c5_aws.json b/prowler/compliance/aws/c5_aws.json
index ce26e241e3..46b4ee0ed1 100644
--- a/prowler/compliance/aws/c5_aws.json
+++ b/prowler/compliance/aws/c5_aws.json
@@ -268,7 +268,6 @@
         "iam_role_administratoraccess_policy",
         "iam_aws_attached_policy_no_administrative_privileges",
         "iam_customer_unattached_policy_no_administrative_privileges",
-        "iam_role_administratoraccess_policy",
         "iam_user_administrator_access_policy",
         "organizations_delegated_administrators",
         "cloudwatch_changes_to_network_route_tables_alarm_configured",
@@ -1936,9 +1935,7 @@
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "cloudwatch_changes_to_network_gateways_alarm_configured",
         "cloudwatch_changes_to_network_route_tables_alarm_configured",
-        "cloudwatch_changes_to_vpcs_alarm_configured",
-        "cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled",
-        "cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_changes_enabled"
+        "cloudwatch_changes_to_vpcs_alarm_configured"
       ]
     },
     {
@@ -3866,7 +3863,6 @@
         }
       ],
       "Checks": [
-        "acm_certificates_transparency_logs_enabled",
         "acm_certificates_transparency_logs_enabled",
         "apigateway_restapi_logging_enabled",
         "apigatewayv2_api_access_logging_enabled",
@@ -3945,7 +3941,6 @@
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
         "iam_user_hardware_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
         "s3_bucket_no_mfa_delete"
       ]
     },
@@ -5219,8 +5214,6 @@
         "iam_customer_unattached_policy_no_administrative_privileges",
         "iam_group_administrator_access_policy",
         "iam_inline_policy_no_administrative_privileges",
-        "iam_policy_cloudshell_admin_not_attached",
-        "iam_role_administratoraccess_policy",
         "iam_user_administrator_access_policy",
         "organizations_delegated_administrators",
         "rds_cluster_default_admin",
@@ -5291,8 +5284,6 @@
         "iam_customer_unattached_policy_no_administrative_privileges",
         "iam_group_administrator_access_policy",
         "iam_inline_policy_no_administrative_privileges",
-        "iam_policy_cloudshell_admin_not_attached",
-        "iam_role_administratoraccess_policy",
         "iam_user_administrator_access_policy",
         "organizations_delegated_administrators",
         "rds_cluster_default_admin",
@@ -6357,8 +6348,7 @@
       ],
       "Checks": [
         "cognito_user_pool_blocks_compromised_credentials_sign_in_attempts",
-        "cognito_user_pool_blocks_potential_malicious_sign_in_attempts",
-        "cognito_user_pool_blocks_compromised_credentials_sign_in_attempts"
+        "cognito_user_pool_blocks_potential_malicious_sign_in_attempts"
       ]
     },
     {
@@ -6670,7 +6660,6 @@
         "sagemaker_training_jobs_intercontainer_encryption_enabled",
         "sagemaker_training_jobs_volume_and_output_encryption_enabled",
         "sns_topics_kms_encryption_at_rest_enabled",
-        "sqs_queues_server_side_encryption_enabled",
         "storagegateway_fileshare_encryption_enabled",
         "transfer_server_in_transit_encryption_enabled",
         "workspaces_volume_encryption_enabled"
@@ -7696,13 +7685,11 @@
         "dynamodb_accelerator_cluster_in_transit_encryption_enabled",
         "transfer_server_in_transit_encryption_enabled",
         "dms_endpoint_redis_in_transit_encryption_enabled",
-        "dynamodb_accelerator_cluster_in_transit_encryption_enabled",
         "ec2_transitgateway_auto_accept_vpc_attachments",
         "elasticache_redis_cluster_in_transit_encryption_enabled",
         "kafka_cluster_in_transit_encryption_enabled",
         "kafka_connector_in_transit_encryption_enabled",
-        "redshift_cluster_in_transit_encryption_enabled",
-        "transfer_server_in_transit_encryption_enabled"
+        "redshift_cluster_in_transit_encryption_enabled"
       ]
     },
     {
@@ -10967,7 +10954,6 @@
         "kms_cmk_not_multi_region",
         "cloudfront_distributions_geo_restrictions_enabled",
         "cloudtrail_multi_region_enabled_logging_management_events",
-        "kms_cmk_not_multi_region",
         "organizations_scp_check_deny_regions",
         "s3_multi_region_access_point_public_access_block"
       ]
diff --git a/prowler/compliance/aws/cis_5.0_aws.json b/prowler/compliance/aws/cis_5.0_aws.json
index 0c8d46e170..d0c7320fc5 100644
--- a/prowler/compliance/aws/cis_5.0_aws.json
+++ b/prowler/compliance/aws/cis_5.0_aws.json
@@ -204,7 +204,7 @@
       ]
     },
     {
-      "Id": "1.1",
+      "Id": "1.10",
       "Description": "Do not create access keys during initial setup for IAM users with a console password",
       "Checks": [
         "iam_user_no_setup_initial_access_key"
diff --git a/prowler/compliance/aws/cisa_aws.json b/prowler/compliance/aws/cisa_aws.json
index 27b06a1ea4..c3e7b427f0 100644
--- a/prowler/compliance/aws/cisa_aws.json
+++ b/prowler/compliance/aws/cisa_aws.json
@@ -58,14 +58,12 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_kms_encryption_enabled",
         "cloudtrail_log_file_validation_enabled",
         "codebuild_project_user_controlled_buildspec",
         "dynamodb_accelerator_cluster_encryption_enabled",
         "dynamodb_tables_kms_cmk_encryption_enabled",
         "dynamodb_tables_pitr_enabled",
-        "dynamodb_tables_pitr_enabled",
         "ec2_ebs_volume_encryption",
         "ec2_ebs_public_snapshot",
         "ec2_ebs_default_encryption",
@@ -85,7 +83,6 @@
         "iam_password_policy_minimum_length_14",
         "iam_password_policy_lowercase",
         "iam_password_policy_number",
-        "iam_password_policy_number",
         "iam_password_policy_symbol",
         "iam_password_policy_uppercase",
         "iam_no_custom_policy_permissive_role_assumption",
@@ -97,23 +94,18 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "kms_cmk_rotation_enabled",
         "awslambda_function_not_publicly_accessible",
-        "awslambda_function_not_publicly_accessible",
-        "cloudwatch_log_group_kms_encryption_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
         "rds_instance_enhanced_monitoring_enabled",
         "rds_instance_backup_enabled",
         "rds_instance_deletion_protection",
         "rds_instance_storage_encrypted",
-        "rds_instance_backup_enabled",
         "rds_instance_integration_cloudwatch_logs",
         "rds_instance_multi_az",
         "rds_instance_no_public_access",
-        "rds_instance_storage_encrypted",
         "rds_snapshots_public_access",
         "redshift_cluster_automated_snapshot",
         "redshift_cluster_audit_logging",
@@ -125,7 +117,6 @@
         "s3_bucket_policy_public_write_access",
         "s3_bucket_object_versioning",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_training_jobs_volume_and_output_encryption_enabled",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "sagemaker_notebook_instance_encryption_enabled",
@@ -222,7 +213,6 @@
         "iam_password_policy_minimum_length_14",
         "iam_password_policy_lowercase",
         "iam_password_policy_number",
-        "iam_password_policy_number",
         "iam_password_policy_symbol",
         "iam_password_policy_uppercase"
       ]
@@ -246,7 +236,6 @@
         "ec2_ebs_default_encryption",
         "opensearch_service_domains_encryption_at_rest_enabled",
         "rds_instance_storage_encrypted",
-        "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging",
         "s3_bucket_default_encryption",
         "sagemaker_training_jobs_volume_and_output_encryption_enabled",
@@ -273,7 +262,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_changes_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
         "dynamodb_tables_kms_cmk_encryption_enabled",
@@ -289,18 +277,14 @@
         "opensearch_service_domains_cloudwatch_logging_enabled",
         "opensearch_service_domains_node_to_node_encryption_enabled",
         "awslambda_function_not_publicly_accessible",
-        "awslambda_function_not_publicly_accessible",
-        "cloudwatch_log_group_kms_encryption_enabled",
         "rds_instance_storage_encrypted",
         "rds_instance_integration_cloudwatch_logs",
         "rds_instance_no_public_access",
         "rds_snapshots_public_access",
-        "rds_snapshots_public_access",
         "redshift_cluster_audit_logging",
         "redshift_cluster_public_access",
         "s3_bucket_default_encryption",
         "s3_bucket_secure_transport_policy",
-        "redshift_cluster_public_access",
         "s3_bucket_server_access_logging_enabled",
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
@@ -349,7 +333,6 @@
         "elbv2_deletion_protection",
         "rds_instance_backup_enabled",
         "rds_instance_deletion_protection",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -409,11 +392,9 @@
         }
       ],
       "Checks": [
-        "dynamodb_tables_pitr_enabled",
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -432,8 +413,7 @@
       "Checks": [
         "iam_user_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
-        "iam_user_hardware_mfa_enabled"
+        "iam_user_mfa_enabled_console_access"
       ]
     },
     {
diff --git a/prowler/compliance/aws/fedramp_20x_ksi_low_aws.json b/prowler/compliance/aws/fedramp_20x_ksi_low_aws.json
index ebc7d696c9..178f07d3a5 100644
--- a/prowler/compliance/aws/fedramp_20x_ksi_low_aws.json
+++ b/prowler/compliance/aws/fedramp_20x_ksi_low_aws.json
@@ -34,9 +34,7 @@
         "config_recorder_all_regions_enabled",
         "ec2_instance_managed_by_ssm",
         "ec2_instance_older_than_specific_days",
-        "ssm_managed_compliant_patching",
-        "ssm_managed_instance_compliance_association_compliant",
-        "ssm_managed_instance_compliance_patch_compliant"
+        "ssm_managed_compliant_patching"
       ],
       "ConfigRequirements": [
         {
@@ -63,7 +61,7 @@
         "autoscaling_group_multiple_instance_types",
         "autoscaling_group_capacity_rebalance_enabled",
         "dynamodb_tables_pitr_enabled",
-        "dynamodb_tables_deletion_protection_enabled",
+        "dynamodb_table_deletion_protection_enabled",
         "ec2_instance_imdsv2_enabled",
         "ec2_networkacl_allow_ingress_any_port",
         "ec2_securitygroup_default_restrict_traffic",
@@ -73,13 +71,12 @@
         "eks_cluster_private_nodes_enabled",
         "eks_cluster_uses_a_supported_version",
         "elb_cross_zone_load_balancing_enabled",
-        "elbv2_alb_multi_az_scheme",
+        "elbv2_is_in_multiple_az",
         "elbv2_waf_acl_attached",
         "rds_instance_multi_az",
         "rds_cluster_multi_az",
-        "vpc_subnet_auto_assign_public_ip_disabled",
-        "vpc_default_security_group_restricts_traffic",
-        "vpc_peering_connection_routing_tables_with_least_privilege",
+        "vpc_subnet_no_public_ip_by_default",
+        "vpc_peering_routing_tables_with_least_privilege",
         "ec2_confidential_workload_host_imdsv2_not_enforced"
       ]
     },
@@ -143,11 +140,9 @@
         "guardduty_centrally_managed",
         "guardduty_ec2_malware_protection_enabled",
         "guardduty_eks_audit_log_enabled",
-        "guardduty_eks_protection_enabled",
         "guardduty_eks_runtime_monitoring_enabled",
         "guardduty_is_enabled",
         "guardduty_lambda_protection_enabled",
-        "guardduty_malware_protection_enabled",
         "guardduty_no_high_severity_findings",
         "guardduty_rds_protection_enabled",
         "guardduty_s3_protection_enabled",
@@ -193,7 +188,7 @@
         "cloudwatch_log_group_kms_encryption_enabled",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "ecs_cluster_container_insights_enabled",
-        "eks_cluster_control_plane_audit_logging_enabled",
+        "eks_control_plane_logging_all_types_enabled",
         "elb_logging_enabled",
         "elbv2_logging_enabled",
         "inspector2_is_enabled",
@@ -227,8 +222,7 @@
         "organizations_delegated_administrators",
         "organizations_scp_check_deny_regions",
         "organizations_tags_policies_enabled_and_attached",
-        "resourceexplorer_indexes_found",
-        "ssm_managed_instance_compliance_association_compliant",
+        "resourceexplorer2_indexes_found",
         "trustedadvisor_premium_support_plan_subscribed"
       ],
       "ConfigRequirements": [
@@ -257,15 +251,12 @@
         "backup_vaults_exist",
         "backup_vaults_encrypted",
         "backup_recovery_point_encrypted",
-        "backup_recovery_point_manual_deletion_disabled",
-        "backup_recovery_point_minimum_retention_days",
         "dlm_ebs_snapshot_lifecycle_policy_exists",
         "dynamodb_tables_pitr_enabled",
-        "dynamodb_tables_deletion_protection_enabled",
+        "dynamodb_table_deletion_protection_enabled",
         "efs_have_backup_enabled",
-        "fsx_file_system_copy_tags_to_backups",
+        "fsx_file_system_copy_tags_to_backups_enabled",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_retention_policy",
         "rds_instance_deletion_protection",
         "rds_cluster_deletion_protection",
         "rds_snapshots_encrypted",
@@ -287,33 +278,28 @@
         "acm_certificates_expiration_check",
         "apigateway_restapi_cache_encrypted",
         "cloudtrail_kms_encryption_enabled",
-        "dax_cluster_encryption_enabled",
-        "dynamodb_table_encryption_enabled",
-        "dynamodb_table_encryption_uses_cmks",
-        "ebs_volume_encryption_enabled",
+        "dynamodb_accelerator_cluster_encryption_enabled",
+        "dynamodb_tables_kms_cmk_encryption_enabled",
+        "ec2_ebs_volume_encryption",
         "ec2_ebs_default_encryption",
-        "ec2_instance_ebs_optimized",
         "efs_encryption_at_rest_enabled",
-        "eks_cluster_envelope_encryption_enabled",
-        "elasticache_redis_cluster_encryption_at_rest_enabled",
-        "elasticache_redis_cluster_encryption_at_transit_enabled",
+        "eks_cluster_kms_cmk_encryption_in_secrets_enabled",
+        "elasticache_redis_cluster_rest_encryption_enabled",
+        "elasticache_redis_cluster_in_transit_encryption_enabled",
         "elbv2_ssl_listeners",
-        "fsx_file_system_encryption_at_rest_enabled",
         "kinesis_stream_encrypted_at_rest",
         "kms_cmk_rotation_enabled",
-        "kms_cmk_not_scheduled_for_deletion",
+        "kms_cmk_not_deleted_unintentionally",
         "kms_key_not_publicly_accessible",
         "rds_instance_storage_encrypted",
-        "rds_instance_storage_encrypted_with_cmk",
         "rds_cluster_storage_encrypted",
-        "redshift_cluster_encryption_at_rest",
-        "redshift_cluster_encryption_in_transit",
-        "s3_bucket_server_side_encryption_enabled",
+        "redshift_cluster_encrypted_at_rest",
+        "redshift_cluster_in_transit_encryption_enabled",
         "s3_bucket_default_encryption",
         "s3_bucket_secure_transport_policy",
         "sagemaker_notebook_instance_encryption_enabled",
         "sns_topics_kms_encryption_at_rest_enabled",
-        "sqs_queue_server_side_encryption_enabled",
+        "sqs_queues_server_side_encryption_enabled",
         "kms_key_enclave_attestation_not_enforced"
       ]
     },
@@ -332,7 +318,7 @@
         "ecr_registry_scan_images_on_push_enabled",
         "ecr_repositories_lifecycle_policy_enabled",
         "ecr_repositories_not_publicly_accessible",
-        "ecr_repositories_scan_on_push_enabled",
+        "ecr_repositories_scan_images_on_push_enabled",
         "ecr_repositories_scan_vulnerabilities_in_latest_image",
         "ecr_repositories_tag_immutability",
         "inspector2_active_findings_exist",
@@ -382,7 +368,7 @@
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "config_recorder_all_regions_enabled",
         "inspector2_is_enabled",
-        "resourceexplorer_indexes_found"
+        "resourceexplorer2_indexes_found"
       ],
       "ConfigRequirements": [
         {
diff --git a/prowler/compliance/aws/fedramp_low_revision_4_aws.json b/prowler/compliance/aws/fedramp_low_revision_4_aws.json
index 059de69675..63382aa174 100644
--- a/prowler/compliance/aws/fedramp_low_revision_4_aws.json
+++ b/prowler/compliance/aws/fedramp_low_revision_4_aws.json
@@ -21,7 +21,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_log_file_validation_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "opensearch_service_domains_cloudwatch_logging_enabled",
@@ -127,8 +126,7 @@
         "securityhub_enabled",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ],
       "ConfigRequirements": [
         {
@@ -161,7 +159,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_log_file_validation_enabled",
         "elbv2_logging_enabled",
         "rds_instance_integration_cloudwatch_logs",
@@ -226,7 +223,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "ec2_instance_imdsv2_enabled",
         "elbv2_waf_acl_attached",
@@ -276,13 +272,11 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ssm_managed_compliant_patching",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -299,7 +293,6 @@
       "Checks": [
         "ec2_instance_managed_by_ssm",
         "guardduty_is_enabled",
-        "ssm_managed_compliant_patching",
         "ssm_managed_compliant_patching"
       ],
       "ConfigRequirements": [
@@ -323,11 +316,9 @@
         }
       ],
       "Checks": [
-        "dynamodb_tables_pitr_enabled",
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -344,13 +335,11 @@
         }
       ],
       "Checks": [
-        "dynamodb_tables_pitr_enabled",
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
         "elbv2_deletion_protection",
         "rds_instance_backup_enabled",
         "rds_instance_multi_az",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -371,7 +360,6 @@
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
         "iam_no_root_access_key",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -482,12 +470,10 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
diff --git a/prowler/compliance/aws/fedramp_moderate_revision_4_aws.json b/prowler/compliance/aws/fedramp_moderate_revision_4_aws.json
index 06f81ea08d..3474986c1a 100644
--- a/prowler/compliance/aws/fedramp_moderate_revision_4_aws.json
+++ b/prowler/compliance/aws/fedramp_moderate_revision_4_aws.json
@@ -29,7 +29,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_role_access_not_stale_to_bedrock",
         "iam_user_access_not_stale_to_bedrock",
         "iam_user_access_not_stale_to_sagemaker",
@@ -68,7 +67,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "cloudwatch_changes_to_network_gateways_alarm_configured",
@@ -149,7 +147,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_role_access_not_stale_to_bedrock",
         "iam_user_access_not_stale_to_bedrock",
         "iam_user_access_not_stale_to_sagemaker",
@@ -174,7 +171,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "opensearch_service_domains_cloudwatch_logging_enabled",
         "guardduty_is_enabled",
@@ -220,7 +216,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_role_access_not_stale_to_bedrock",
         "iam_user_access_not_stale_to_bedrock",
         "iam_user_access_not_stale_to_sagemaker",
@@ -312,7 +307,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_confidential_workload_host_imdsv2_not_enforced",
         "kms_key_enclave_attestation_not_enforced"
@@ -345,7 +339,6 @@
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
         "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_confidential_workload_host_public_ip"
       ]
     },
@@ -426,7 +419,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_confidential_workload_host_imdsv2_not_enforced",
         "kms_key_enclave_attestation_bypassable_path"
@@ -457,13 +449,11 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "securityhub_enabled",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ],
       "ConfigRequirements": [
         {
@@ -521,10 +511,8 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_networkacl_allow_ingress_any_port"
       ]
     },
@@ -545,7 +533,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_bedrock_logging_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
@@ -572,7 +559,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -599,7 +585,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "cloudwatch_changes_to_network_gateways_alarm_configured",
@@ -723,7 +708,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_bedrock_logging_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
@@ -750,7 +734,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "cloudwatch_changes_to_network_gateways_alarm_configured",
         "cloudwatch_changes_to_network_route_tables_alarm_configured",
@@ -804,13 +787,11 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ssm_managed_compliant_patching",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -863,7 +844,6 @@
       "Checks": [
         "ec2_instance_managed_by_ssm",
         "guardduty_is_enabled",
-        "ssm_managed_compliant_patching",
         "ssm_managed_compliant_patching"
       ],
       "ConfigRequirements": [
@@ -888,11 +868,9 @@
         }
       ],
       "Checks": [
-        "dynamodb_tables_pitr_enabled",
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -909,13 +887,11 @@
         }
       ],
       "Checks": [
-        "dynamodb_tables_pitr_enabled",
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
         "elbv2_deletion_protection",
         "rds_instance_backup_enabled",
         "rds_instance_multi_az",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -935,7 +911,6 @@
       "Checks": [
         "iam_root_mfa_enabled",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_root_hardware_mfa_enabled"
       ]
     },
@@ -954,7 +929,6 @@
       "Checks": [
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -1056,42 +1030,6 @@
         }
       ]
     },
-    {
-      "Id": "ir-4-1",
-      "Name": "IR-4(1) Automated Incident Handling Processes",
-      "Description": "The organization employs automated mechanisms to support the incident handling process.",
-      "Attributes": [
-        {
-          "ItemId": "ir-4-1",
-          "Section": "Incident Response (IR)",
-          "SubSection": "Incident Handling (IR-4)",
-          "Service": "aws"
-        }
-      ],
-      "Checks": [
-        "cloudwatch_changes_to_network_acls_alarm_configured",
-        "cloudwatch_changes_to_network_gateways_alarm_configured",
-        "cloudwatch_changes_to_network_route_tables_alarm_configured",
-        "cloudwatch_changes_to_vpcs_alarm_configured",
-        "guardduty_is_enabled",
-        "guardduty_no_high_severity_findings",
-        "securityhub_enabled"
-      ],
-      "ConfigRequirements": [
-        {
-          "Check": "guardduty_is_enabled",
-          "ConfigKey": "mute_non_default_regions",
-          "Operator": "eq",
-          "Value": false
-        },
-        {
-          "Check": "securityhub_enabled",
-          "ConfigKey": "mute_non_default_regions",
-          "Operator": "eq",
-          "Value": false
-        }
-      ]
-    },
     {
       "Id": "ir-6-1",
       "Name": "IR-6(1) Automated Reporting",
@@ -1266,12 +1204,10 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -1326,12 +1262,10 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
         "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_confidential_workload_host_public_ip"
       ]
     },
@@ -1362,12 +1296,10 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
         "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_confidential_workload_host_public_ip"
       ]
     },
@@ -1485,15 +1417,12 @@
       "Checks": [
         "cloudtrail_kms_encryption_enabled",
         "ec2_ebs_volume_encryption",
-        "ec2_ebs_volume_encryption",
         "efs_encryption_at_rest_enabled",
         "opensearch_service_domains_encryption_at_rest_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
         "rds_instance_storage_encrypted",
-        "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging",
         "s3_bucket_default_encryption",
-        "s3_bucket_default_encryption",
         "sagemaker_notebook_instance_encryption_enabled",
         "sns_topics_kms_encryption_at_rest_enabled",
         "kms_key_enclave_debug_attestation_detected"
@@ -1513,7 +1442,6 @@
       ],
       "Checks": [
         "ec2_instance_managed_by_ssm",
-        "ssm_managed_compliant_patching",
         "ssm_managed_compliant_patching"
       ]
     },
@@ -1557,7 +1485,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "guardduty_is_enabled",
         "redshift_cluster_audit_logging",
         "securityhub_enabled"
@@ -1593,7 +1520,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "cloudwatch_changes_to_network_gateways_alarm_configured",
         "cloudwatch_changes_to_network_route_tables_alarm_configured",
@@ -1636,7 +1562,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "cloudwatch_changes_to_network_gateways_alarm_configured",
         "cloudwatch_changes_to_network_route_tables_alarm_configured",
@@ -1677,7 +1602,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "cloudwatch_changes_to_network_gateways_alarm_configured",
         "cloudwatch_changes_to_network_route_tables_alarm_configured",
@@ -1790,10 +1714,8 @@
       "Checks": [
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "dynamodb_tables_pitr_enabled",
-        "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
diff --git a/prowler/compliance/aws/ffiec_aws.json b/prowler/compliance/aws/ffiec_aws.json
index f9e72adf0e..156b26fe80 100644
--- a/prowler/compliance/aws/ffiec_aws.json
+++ b/prowler/compliance/aws/ffiec_aws.json
@@ -60,7 +60,6 @@
         }
       ],
       "Checks": [
-        "rds_instance_backup_enabled",
         "rds_instance_backup_enabled",
         "rds_instance_multi_az",
         "redshift_cluster_automated_snapshot"
@@ -115,7 +114,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "elbv2_logging_enabled",
@@ -145,7 +143,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -365,7 +362,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -392,7 +388,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -437,7 +432,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -571,8 +565,7 @@
       ],
       "Checks": [
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -716,7 +709,6 @@
         "iam_password_policy_minimum_length_14",
         "iam_password_policy_lowercase",
         "iam_password_policy_number",
-        "iam_password_policy_number",
         "iam_password_policy_symbol",
         "iam_password_policy_uppercase",
         "iam_aws_attached_policy_no_administrative_privileges",
@@ -726,7 +718,6 @@
         "iam_root_mfa_enabled",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused"
       ]
@@ -747,7 +738,6 @@
         "iam_password_policy_minimum_length_14",
         "iam_password_policy_lowercase",
         "iam_password_policy_number",
-        "iam_password_policy_number",
         "iam_password_policy_symbol",
         "iam_password_policy_uppercase"
       ]
@@ -795,12 +785,10 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -820,8 +808,7 @@
         "elbv2_waf_acl_attached",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -859,7 +846,6 @@
       ],
       "Checks": [
         "ec2_instance_managed_by_ssm",
-        "ssm_managed_compliant_patching",
         "ssm_managed_compliant_patching"
       ]
     },
@@ -879,7 +865,6 @@
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
         "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_confidential_workload_host_vsock_proxy_exposed"
       ]
     },
@@ -933,8 +918,7 @@
       "Checks": [
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -1002,7 +986,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "cloudwatch_changes_to_network_gateways_alarm_configured",
@@ -1066,7 +1049,6 @@
         "rds_instance_backup_enabled",
         "rds_instance_deletion_protection",
         "rds_instance_multi_az",
-        "rds_instance_backup_enabled",
         "s3_bucket_object_versioning"
       ]
     }
diff --git a/prowler/compliance/aws/gdpr_aws.json b/prowler/compliance/aws/gdpr_aws.json
index 1eae6ec040..3a6a1ae668 100644
--- a/prowler/compliance/aws/gdpr_aws.json
+++ b/prowler/compliance/aws/gdpr_aws.json
@@ -30,12 +30,6 @@
         "iam_password_policy_symbol",
         "iam_password_policy_uppercase",
         "iam_password_policy_reuse_24",
-        "iam_password_policy_minimum_length_14",
-        "iam_password_policy_lowercase",
-        "iam_password_policy_number",
-        "iam_password_policy_number",
-        "iam_password_policy_symbol",
-        "iam_password_policy_uppercase",
         "iam_aws_attached_policy_no_administrative_privileges",
         "iam_customer_attached_policy_no_administrative_privileges",
         "iam_inline_policy_no_administrative_privileges",
@@ -85,7 +79,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudtrail_kms_encryption_enabled",
         "config_recorder_all_regions_enabled",
@@ -122,8 +115,6 @@
         "cloudtrail_log_file_validation_enabled",
         "dynamodb_accelerator_cluster_encryption_enabled",
         "dynamodb_tables_kms_cmk_encryption_enabled",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
-        "ec2_ebs_volume_encryption",
         "ec2_ebs_volume_encryption",
         "efs_encryption_at_rest_enabled",
         "elb_ssl_listeners",
@@ -133,11 +124,9 @@
         "rds_instance_storage_encrypted",
         "rds_instance_backup_enabled",
         "rds_instance_integration_cloudwatch_logs",
-        "rds_instance_storage_encrypted",
         "redshift_cluster_automated_snapshot",
         "redshift_cluster_audit_logging",
         "s3_bucket_default_encryption",
-        "s3_bucket_default_encryption",
         "s3_bucket_secure_transport_policy",
         "sagemaker_notebook_instance_encryption_enabled",
         "sns_topics_kms_encryption_at_rest_enabled",
diff --git a/prowler/compliance/aws/gxp_21_cfr_part_11_aws.json b/prowler/compliance/aws/gxp_21_cfr_part_11_aws.json
index f4bae0b9d6..f89678fb27 100644
--- a/prowler/compliance/aws/gxp_21_cfr_part_11_aws.json
+++ b/prowler/compliance/aws/gxp_21_cfr_part_11_aws.json
@@ -24,11 +24,9 @@
         "elbv2_deletion_protection",
         "rds_instance_backup_enabled",
         "rds_instance_deletion_protection",
-        "rds_instance_backup_enabled",
         "rds_instance_multi_az",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning",
-        "ssm_managed_compliant_patching",
         "ssm_managed_compliant_patching"
       ]
     },
@@ -47,7 +45,6 @@
         "cloudtrail_kms_encryption_enabled",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "rds_instance_storage_encrypted",
-        "rds_instance_storage_encrypted",
         "rds_snapshots_public_access",
         "redshift_cluster_audit_logging",
         "redshift_cluster_public_access",
@@ -80,7 +77,6 @@
         "iam_password_policy_minimum_length_14",
         "iam_password_policy_lowercase",
         "iam_password_policy_number",
-        "iam_password_policy_number",
         "iam_password_policy_symbol",
         "iam_password_policy_uppercase",
         "iam_policy_attached_only_to_group_or_roles",
@@ -92,7 +88,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "awslambda_function_not_publicly_accessible",
@@ -103,13 +98,11 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "secretsmanager_automatic_rotation_enabled",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
         "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_confidential_workload_host_imdsv2_not_enforced",
         "ec2_confidential_workload_host_public_ip"
       ]
@@ -130,7 +123,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "elbv2_logging_enabled",
@@ -168,7 +160,6 @@
         "iam_password_policy_minimum_length_14",
         "iam_password_policy_lowercase",
         "iam_password_policy_number",
-        "iam_password_policy_number",
         "iam_password_policy_symbol",
         "iam_password_policy_uppercase",
         "iam_policy_attached_only_to_group_or_roles",
@@ -180,7 +171,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "awslambda_function_not_publicly_accessible",
@@ -191,13 +181,11 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "secretsmanager_automatic_rotation_enabled",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
         "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_confidential_workload_host_imdsv2_not_enforced",
         "ec2_confidential_workload_host_public_ip"
       ]
@@ -215,7 +203,6 @@
       ],
       "Checks": [
         "ec2_instance_managed_by_ssm",
-        "ssm_managed_compliant_patching",
         "ssm_managed_compliant_patching"
       ]
     },
@@ -246,7 +233,6 @@
         "s3_bucket_policy_public_write_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_networkacl_allow_ingress_any_port"
       ]
     },
@@ -280,10 +266,8 @@
         "kms_cmk_rotation_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
         "rds_instance_storage_encrypted",
-        "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging",
         "s3_bucket_default_encryption",
-        "s3_bucket_default_encryption",
         "s3_bucket_secure_transport_policy",
         "sagemaker_notebook_instance_encryption_enabled",
         "sns_topics_kms_encryption_at_rest_enabled"
@@ -304,14 +288,12 @@
         "iam_password_policy_minimum_length_14",
         "iam_password_policy_lowercase",
         "iam_password_policy_number",
-        "iam_password_policy_number",
         "iam_password_policy_symbol",
         "iam_password_policy_uppercase",
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -330,7 +312,6 @@
         "iam_password_policy_minimum_length_14",
         "iam_password_policy_lowercase",
         "iam_password_policy_number",
-        "iam_password_policy_number",
         "iam_password_policy_symbol",
         "iam_password_policy_uppercase",
         "iam_rotate_access_key_90_days",
diff --git a/prowler/compliance/aws/gxp_eu_annex_11_aws.json b/prowler/compliance/aws/gxp_eu_annex_11_aws.json
index fdca6d1747..2b4f17632b 100644
--- a/prowler/compliance/aws/gxp_eu_annex_11_aws.json
+++ b/prowler/compliance/aws/gxp_eu_annex_11_aws.json
@@ -41,12 +41,9 @@
         }
       ],
       "Checks": [
-        "dynamodb_tables_pitr_enabled",
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -66,7 +63,6 @@
         "cloudtrail_kms_encryption_enabled",
         "dynamodb_accelerator_cluster_encryption_enabled",
         "dynamodb_tables_kms_cmk_encryption_enabled",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
         "dynamodb_tables_pitr_enabled",
         "ec2_ebs_volume_encryption",
         "ec2_ebs_default_encryption",
@@ -76,12 +72,9 @@
         "cloudwatch_log_group_kms_encryption_enabled",
         "rds_instance_backup_enabled",
         "rds_instance_storage_encrypted",
-        "rds_instance_backup_enabled",
-        "rds_instance_storage_encrypted",
         "redshift_cluster_automated_snapshot",
         "redshift_cluster_audit_logging",
         "s3_bucket_default_encryption",
-        "s3_bucket_default_encryption",
         "s3_bucket_object_versioning",
         "sagemaker_notebook_instance_encryption_enabled",
         "sns_topics_kms_encryption_at_rest_enabled"
@@ -101,10 +94,7 @@
       "Checks": [
         "rds_instance_backup_enabled",
         "dynamodb_tables_pitr_enabled",
-        "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
-        "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -192,12 +182,8 @@
         }
       ],
       "Checks": [
-        "dynamodb_tables_pitr_enabled",
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
-        "efs_have_backup_enabled",
-        "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
@@ -215,12 +201,8 @@
         }
       ],
       "Checks": [
-        "dynamodb_tables_pitr_enabled",
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
-        "efs_have_backup_enabled",
-        "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
@@ -299,12 +281,8 @@
         }
       ],
       "Checks": [
-        "dynamodb_tables_pitr_enabled",
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
-        "efs_have_backup_enabled",
-        "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
diff --git a/prowler/compliance/aws/hipaa_aws.json b/prowler/compliance/aws/hipaa_aws.json
index f2cf10c666..01de916ec6 100644
--- a/prowler/compliance/aws/hipaa_aws.json
+++ b/prowler/compliance/aws/hipaa_aws.json
@@ -70,7 +70,6 @@
         "rds_instance_backup_enabled",
         "rds_instance_storage_encrypted",
         "rds_instance_multi_az",
-        "rds_instance_storage_encrypted",
         "rds_snapshots_public_access",
         "redshift_cluster_audit_logging",
         "redshift_cluster_public_access",
@@ -85,7 +84,6 @@
         "sns_topics_kms_encryption_at_rest_enabled",
         "ec2_networkacl_allow_ingress_any_port",
         "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_confidential_workload_host_public_ip"
       ]
     },
@@ -106,7 +104,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudtrail_kms_encryption_enabled",
         "cloudtrail_log_file_validation_enabled",
@@ -179,14 +176,12 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
         "guardduty_is_enabled",
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "redshift_cluster_audit_logging",
         "s3_bucket_server_access_logging_enabled",
         "securityhub_enabled",
@@ -276,8 +271,6 @@
         "cloudtrail_kms_encryption_enabled",
         "dynamodb_accelerator_cluster_encryption_enabled",
         "dynamodb_tables_kms_cmk_encryption_enabled",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
-        "ec2_ebs_volume_encryption",
         "ec2_ebs_volume_encryption",
         "ec2_ebs_default_encryption",
         "efs_encryption_at_rest_enabled",
@@ -289,11 +282,9 @@
         "rds_instance_storage_encrypted",
         "rds_instance_backup_enabled",
         "rds_instance_integration_cloudwatch_logs",
-        "rds_instance_storage_encrypted",
         "redshift_cluster_automated_snapshot",
         "redshift_cluster_audit_logging",
         "s3_bucket_default_encryption",
-        "s3_bucket_default_encryption",
         "sagemaker_notebook_instance_encryption_enabled",
         "sns_topics_kms_encryption_at_rest_enabled"
       ]
@@ -353,7 +344,6 @@
       ],
       "Checks": [
         "ec2_instance_managed_by_ssm",
-        "ssm_managed_compliant_patching",
         "ssm_managed_compliant_patching"
       ]
     },
@@ -463,7 +453,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -502,14 +491,10 @@
         }
       ],
       "Checks": [
-        "dynamodb_tables_pitr_enabled",
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
-        "efs_have_backup_enabled",
-        "rds_instance_backup_enabled",
         "rds_instance_backup_enabled",
         "rds_instance_multi_az",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -526,14 +511,10 @@
         }
       ],
       "Checks": [
-        "dynamodb_tables_pitr_enabled",
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
-        "efs_have_backup_enabled",
-        "rds_instance_backup_enabled",
         "rds_instance_backup_enabled",
         "rds_instance_multi_az",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -550,14 +531,10 @@
         }
       ],
       "Checks": [
-        "dynamodb_tables_pitr_enabled",
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
-        "efs_have_backup_enabled",
-        "rds_instance_backup_enabled",
         "rds_instance_backup_enabled",
         "rds_instance_multi_az",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -574,14 +551,10 @@
         }
       ],
       "Checks": [
-        "dynamodb_tables_pitr_enabled",
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
-        "efs_have_backup_enabled",
-        "rds_instance_backup_enabled",
         "rds_instance_backup_enabled",
         "rds_instance_multi_az",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -642,7 +615,6 @@
         "redshift_cluster_public_access",
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_confidential_workload_host_public_ip",
         "ec2_confidential_workload_host_imdsv2_not_enforced",
@@ -679,12 +651,8 @@
         }
       ],
       "Checks": [
-        "dynamodb_tables_pitr_enabled",
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
-        "efs_have_backup_enabled",
-        "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
@@ -705,7 +673,6 @@
         "cloudtrail_kms_encryption_enabled",
         "dynamodb_accelerator_cluster_encryption_enabled",
         "dynamodb_tables_kms_cmk_encryption_enabled",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
         "ec2_ebs_volume_encryption",
         "ec2_ebs_default_encryption",
         "efs_encryption_at_rest_enabled",
@@ -714,10 +681,8 @@
         "kms_cmk_rotation_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
         "rds_instance_storage_encrypted",
-        "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging",
         "s3_bucket_default_encryption",
-        "s3_bucket_default_encryption",
         "s3_bucket_secure_transport_policy",
         "sagemaker_notebook_instance_encryption_enabled",
         "sns_topics_kms_encryption_at_rest_enabled",
@@ -741,7 +706,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudtrail_log_file_validation_enabled",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
@@ -828,7 +792,6 @@
         "iam_password_policy_reuse_24",
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -852,7 +815,6 @@
         "s3_bucket_secure_transport_policy",
         "ec2_networkacl_allow_ingress_any_port",
         "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_confidential_workload_host_unrestricted_ingress",
         "ec2_confidential_workload_host_vsock_proxy_exposed"
       ]
@@ -872,7 +834,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elb_ssl_listeners",
         "guardduty_is_enabled",
@@ -910,7 +871,6 @@
         "cloudtrail_kms_encryption_enabled",
         "dynamodb_accelerator_cluster_encryption_enabled",
         "dynamodb_tables_kms_cmk_encryption_enabled",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
         "ec2_ebs_volume_encryption",
         "ec2_ebs_default_encryption",
         "efs_encryption_at_rest_enabled",
@@ -919,10 +879,8 @@
         "opensearch_service_domains_encryption_at_rest_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
         "rds_instance_storage_encrypted",
-        "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging",
         "s3_bucket_default_encryption",
-        "s3_bucket_default_encryption",
         "s3_bucket_secure_transport_policy",
         "sagemaker_notebook_instance_encryption_enabled",
         "sns_topics_kms_encryption_at_rest_enabled"
diff --git a/prowler/compliance/aws/iso27001_2022_aws.json b/prowler/compliance/aws/iso27001_2022_aws.json
index d245053375..8f41e65e83 100644
--- a/prowler/compliance/aws/iso27001_2022_aws.json
+++ b/prowler/compliance/aws/iso27001_2022_aws.json
@@ -259,16 +259,7 @@
         "iam_rotate_access_key_90_days",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
-        "iam_no_root_access_key",
-        "iam_password_policy_expires_passwords_within_90_days_or_less",
-        "iam_password_policy_reuse_24",
-        "iam_password_policy_minimum_length_14",
-        "iam_password_policy_number",
-        "iam_password_policy_symbol",
-        "iam_password_policy_lowercase",
-        "iam_password_policy_uppercase",
-        "iam_user_mfa_enabled_console_access",
-        "iam_rotate_access_key_90_days"
+        "iam_no_root_access_key"
       ]
     },
     {
@@ -997,11 +988,9 @@
         "emr_cluster_publicly_accesible",
         "glacier_vaults_policy_public_access",
         "awslambda_function_not_publicly_accessible",
-        "awslambda_function_not_publicly_accessible",
         "rds_instance_no_public_access",
         "rds_snapshots_public_access",
         "kms_key_not_publicly_accessible",
-        "opensearch_service_domains_not_publicly_accessible",
         "redshift_cluster_public_access",
         "s3_account_level_public_access_blocks",
         "s3_bucket_public_access",
@@ -1018,7 +1007,6 @@
         "eks_cluster_not_publicly_accessible",
         "elb_internet_facing",
         "elbv2_internet_facing",
-        "s3_account_level_public_access_blocks",
         "sns_topics_not_publicly_accessible",
         "sqs_queues_not_publicly_accessible",
         "ssm_documents_set_as_public",
@@ -1091,11 +1079,10 @@
         }
       ],
       "Checks": [
-        "codebuild_project_artifact_encryption",
-        "codebuild_project_envvar_awscred_check",
+        "codebuild_project_no_secrets_in_variables",
         "codebuild_project_logging_enabled",
         "codebuild_project_older_90_days",
-        "codebuild_project_source_repo_url_check",
+        "codebuild_project_source_repo_url_no_sensitive_credentials",
         "codebuild_project_user_controlled_buildspec"
       ]
     },
@@ -1378,7 +1365,6 @@
         "apigateway_restapi_logging_enabled",
         "apigatewayv2_api_access_logging_enabled",
         "appsync_field_level_logging_enabled",
-        "athena_workgroup_logging_enabled",
         "awslambda_function_invoke_api_operations_cloudtrail_logging_enabled",
         "bedrock_model_invocation_logging_enabled",
         "bedrock_model_invocation_logs_encryption_enabled",
@@ -1631,7 +1617,6 @@
         "ec2_securitygroup_from_launch_wizard",
         "ec2_securitygroup_not_used",
         "ec2_securitygroup_with_many_ingress_egress_rules",
-        "ec2_transitgateway_auto_accept_vpc_attachments",
         "ec2_confidential_workload_host_imdsv2_not_enforced",
         "ec2_confidential_workload_host_public_ip",
         "ec2_confidential_workload_host_unrestricted_ingress",
@@ -1730,7 +1715,6 @@
         "ec2_securitygroup_from_launch_wizard",
         "ec2_securitygroup_not_used",
         "ec2_securitygroup_with_many_ingress_egress_rules",
-        "ec2_transitgateway_auto_accept_vpc_attachments",
         "ec2_confidential_workload_host_imdsv2_not_enforced",
         "ec2_confidential_workload_host_public_ip",
         "ec2_confidential_workload_host_unrestricted_ingress"
@@ -1828,7 +1812,6 @@
         "ec2_securitygroup_from_launch_wizard",
         "ec2_securitygroup_not_used",
         "ec2_securitygroup_with_many_ingress_egress_rules",
-        "ec2_transitgateway_auto_accept_vpc_attachments",
         "ec2_confidential_workload_host_imdsv2_not_enforced",
         "ec2_confidential_workload_host_public_ip",
         "ec2_confidential_workload_host_unrestricted_ingress"
@@ -1847,7 +1830,7 @@
         }
       ],
       "Checks": [
-        "vpc_default_security_group_closed",
+        "ec2_securitygroup_default_restrict_traffic",
         "vpc_flow_logs_enabled",
         "securityhub_enabled"
       ],
@@ -1931,9 +1914,6 @@
         "storagegateway_fileshare_encryption_enabled",
         "transfer_server_in_transit_encryption_enabled",
         "workspaces_volume_encryption_enabled",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
-        "eks_cluster_kms_cmk_encryption_in_secrets_enabled",
-        "kafka_cluster_encryption_at_rest_uses_cmk",
         "kms_cmk_are_used",
         "kms_cmk_not_deleted_unintentionally",
         "kms_cmk_not_multi_region",
diff --git a/prowler/compliance/aws/kisa_isms_p_2023_aws.json b/prowler/compliance/aws/kisa_isms_p_2023_aws.json
index 78b76a5b9b..b15d98c635 100644
--- a/prowler/compliance/aws/kisa_isms_p_2023_aws.json
+++ b/prowler/compliance/aws/kisa_isms_p_2023_aws.json
@@ -2603,7 +2603,6 @@
         "cloudwatch_changes_to_network_gateways_alarm_configured",
         "cloudwatch_changes_to_network_route_tables_alarm_configured",
         "cloudwatch_changes_to_vpcs_alarm_configured",
-        "cloudwatch_log_group_no_critical_pii_in_logs",
         "cloudwatch_log_group_no_secrets_in_logs",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "codebuild_project_logging_enabled",
@@ -2793,7 +2792,6 @@
         "cloudwatch_changes_to_vpcs_alarm_configured",
         "cloudwatch_cross_account_sharing_disabled",
         "cloudwatch_log_group_kms_encryption_enabled",
-        "cloudwatch_log_group_no_critical_pii_in_logs",
         "cloudwatch_log_group_no_secrets_in_logs",
         "cloudwatch_log_group_not_publicly_accessible",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
@@ -2991,7 +2989,6 @@
         "cloudwatch_changes_to_vpcs_alarm_configured",
         "cloudwatch_cross_account_sharing_disabled",
         "cloudwatch_log_group_kms_encryption_enabled",
-        "cloudwatch_log_group_no_critical_pii_in_logs",
         "cloudwatch_log_group_no_secrets_in_logs",
         "cloudwatch_log_group_not_publicly_accessible",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
diff --git a/prowler/compliance/aws/kisa_isms_p_2023_korean_aws.json b/prowler/compliance/aws/kisa_isms_p_2023_korean_aws.json
index 668b6d0c21..e9a871b85c 100644
--- a/prowler/compliance/aws/kisa_isms_p_2023_korean_aws.json
+++ b/prowler/compliance/aws/kisa_isms_p_2023_korean_aws.json
@@ -2606,7 +2606,6 @@
         "cloudwatch_changes_to_network_gateways_alarm_configured",
         "cloudwatch_changes_to_network_route_tables_alarm_configured",
         "cloudwatch_changes_to_vpcs_alarm_configured",
-        "cloudwatch_log_group_no_critical_pii_in_logs",
         "cloudwatch_log_group_no_secrets_in_logs",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "codebuild_project_logging_enabled",
@@ -2796,7 +2795,6 @@
         "cloudwatch_changes_to_vpcs_alarm_configured",
         "cloudwatch_cross_account_sharing_disabled",
         "cloudwatch_log_group_kms_encryption_enabled",
-        "cloudwatch_log_group_no_critical_pii_in_logs",
         "cloudwatch_log_group_no_secrets_in_logs",
         "cloudwatch_log_group_not_publicly_accessible",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
@@ -2994,7 +2992,6 @@
         "cloudwatch_changes_to_vpcs_alarm_configured",
         "cloudwatch_cross_account_sharing_disabled",
         "cloudwatch_log_group_kms_encryption_enabled",
-        "cloudwatch_log_group_no_critical_pii_in_logs",
         "cloudwatch_log_group_no_secrets_in_logs",
         "cloudwatch_log_group_not_publicly_accessible",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
diff --git a/prowler/compliance/aws/nis2_aws.json b/prowler/compliance/aws/nis2_aws.json
index 995c9a6dac..f1f8f28daa 100644
--- a/prowler/compliance/aws/nis2_aws.json
+++ b/prowler/compliance/aws/nis2_aws.json
@@ -326,7 +326,6 @@
         "cloudwatch_changes_to_vpcs_alarm_configured",
         "cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled",
         "cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_changes_enabled",
-        "cloudwatch_log_metric_filter_aws_organizations_changes",
         "cloudwatch_log_metric_filter_for_s3_bucket_policy_changes",
         "cloudwatch_log_metric_filter_policy_changes",
         "cloudwatch_log_metric_filter_security_group_changes"
diff --git a/prowler/compliance/aws/nist_800_171_revision_2_aws.json b/prowler/compliance/aws/nist_800_171_revision_2_aws.json
index ae7b9998b3..80992b7b75 100644
--- a/prowler/compliance/aws/nist_800_171_revision_2_aws.json
+++ b/prowler/compliance/aws/nist_800_171_revision_2_aws.json
@@ -29,7 +29,6 @@
         "iam_root_mfa_enabled",
         "iam_no_root_access_key",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_role_access_not_stale_to_bedrock",
         "iam_user_access_not_stale_to_bedrock",
         "iam_user_access_not_stale_to_sagemaker",
@@ -46,8 +45,7 @@
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -74,7 +72,6 @@
         "iam_root_mfa_enabled",
         "iam_no_root_access_key",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_role_access_not_stale_to_bedrock",
         "iam_user_access_not_stale_to_bedrock",
         "iam_user_access_not_stale_to_sagemaker",
@@ -91,8 +88,7 @@
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -122,8 +118,7 @@
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -223,7 +218,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
         "guardduty_is_enabled",
@@ -286,8 +280,7 @@
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -305,8 +298,7 @@
         "s3_account_level_public_access_blocks",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -325,7 +317,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "elbv2_logging_enabled",
@@ -367,7 +358,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "guardduty_is_enabled",
         "rds_instance_integration_cloudwatch_logs",
@@ -398,7 +388,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "rds_instance_integration_cloudwatch_logs",
         "s3_bucket_server_access_logging_enabled",
@@ -571,7 +560,6 @@
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
         "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_confidential_workload_host_vsock_proxy_exposed"
       ]
     },
@@ -604,7 +592,6 @@
       ],
       "Checks": [
         "iam_root_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -622,7 +609,6 @@
       "Checks": [
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -928,7 +914,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_log_file_validation_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -944,8 +929,7 @@
         "securityhub_enabled",
         "vpc_flow_logs_enabled",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ],
       "ConfigRequirements": [
         {
@@ -988,7 +972,6 @@
         "rds_instance_integration_cloudwatch_logs",
         "rds_instance_multi_az",
         "rds_instance_no_public_access",
-        "rds_instance_backup_enabled",
         "redshift_cluster_public_access",
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
@@ -1060,7 +1043,6 @@
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
         "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_confidential_workload_host_public_ip"
       ]
     },
@@ -1077,8 +1059,7 @@
       ],
       "Checks": [
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -1155,7 +1136,6 @@
       "Checks": [
         "cloudtrail_kms_encryption_enabled",
         "dynamodb_tables_kms_cmk_encryption_enabled",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
         "ec2_ebs_volume_encryption",
         "efs_encryption_at_rest_enabled",
         "opensearch_service_domains_encryption_at_rest_enabled",
@@ -1212,7 +1192,6 @@
         "ec2_instance_managed_by_ssm",
         "guardduty_is_enabled",
         "securityhub_enabled",
-        "ssm_managed_compliant_patching",
         "ssm_managed_compliant_patching"
       ],
       "ConfigRequirements": [
@@ -1300,7 +1279,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
         "guardduty_is_enabled",
@@ -1340,7 +1318,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
         "guardduty_is_enabled",
diff --git a/prowler/compliance/aws/nist_800_53_revision_4_aws.json b/prowler/compliance/aws/nist_800_53_revision_4_aws.json
index 8bd36a3910..c776806957 100644
--- a/prowler/compliance/aws/nist_800_53_revision_4_aws.json
+++ b/prowler/compliance/aws/nist_800_53_revision_4_aws.json
@@ -108,7 +108,6 @@
         }
       ],
       "Checks": [
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
@@ -239,8 +238,7 @@
         "redshift_cluster_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "s3_bucket_public_access",
-        "s3_bucket_policy_public_write_access",
-        "s3_bucket_public_access"
+        "s3_bucket_policy_public_write_access"
       ]
     },
     {
@@ -266,12 +264,10 @@
         "redshift_cluster_public_access",
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -340,7 +336,6 @@
         "redshift_cluster_public_access",
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured"
       ]
     },
@@ -425,7 +420,6 @@
         "redshift_cluster_public_access",
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured"
       ]
     },
@@ -445,7 +439,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -471,7 +464,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -633,7 +625,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -746,7 +737,6 @@
       ],
       "Checks": [
         "ec2_instance_managed_by_ssm",
-        "ssm_managed_compliant_patching",
         "ssm_managed_compliant_patching"
       ]
     },
@@ -764,7 +754,6 @@
       "Checks": [
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
-        "rds_instance_backup_enabled",
         "rds_instance_backup_enabled"
       ]
     },
@@ -784,7 +773,6 @@
         "efs_have_backup_enabled",
         "elbv2_deletion_protection",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "rds_instance_multi_az",
         "s3_bucket_object_versioning"
       ]
@@ -804,7 +792,6 @@
       "Checks": [
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -821,7 +808,6 @@
         }
       ],
       "Checks": [
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -840,7 +826,6 @@
       "Checks": [
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -1101,8 +1086,7 @@
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -1135,8 +1119,7 @@
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -1237,7 +1220,6 @@
         "opensearch_service_domains_encryption_at_rest_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
         "rds_instance_storage_encrypted",
-        "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging",
         "s3_bucket_default_encryption",
         "sagemaker_notebook_instance_encryption_enabled",
@@ -1258,7 +1240,6 @@
       ],
       "Checks": [
         "ec2_instance_managed_by_ssm",
-        "ssm_managed_compliant_patching",
         "ssm_managed_compliant_patching"
       ]
     },
@@ -1513,7 +1494,6 @@
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "s3_bucket_object_versioning"
       ]
     }
diff --git a/prowler/compliance/aws/nist_800_53_revision_5_aws.json b/prowler/compliance/aws/nist_800_53_revision_5_aws.json
index 13a0e0772c..8471d77f1c 100644
--- a/prowler/compliance/aws/nist_800_53_revision_5_aws.json
+++ b/prowler/compliance/aws/nist_800_53_revision_5_aws.json
@@ -28,7 +28,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_role_access_not_stale_to_bedrock",
         "iam_user_access_not_stale_to_bedrock",
         "iam_user_access_not_stale_to_sagemaker",
@@ -162,7 +161,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "rds_instance_integration_cloudwatch_logs",
         "redshift_cluster_audit_logging",
@@ -201,7 +199,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured"
       ]
     },
@@ -336,7 +333,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_confidential_workload_host_imdsv2_not_enforced",
         "kms_key_enclave_attestation_not_enforced"
@@ -357,7 +353,6 @@
       "Checks": [
         "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
         "rds_instance_integration_cloudwatch_logs",
@@ -380,7 +375,6 @@
       "Checks": [
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -408,7 +402,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -439,7 +432,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -470,7 +462,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -501,7 +492,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -532,7 +522,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -563,7 +552,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -594,7 +582,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -625,7 +612,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -655,7 +641,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -686,7 +671,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -710,7 +694,6 @@
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_rotate_access_key_90_days",
         "iam_no_root_access_key",
         "iam_root_mfa_enabled",
@@ -748,7 +731,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -779,7 +761,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -810,7 +791,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -848,7 +828,6 @@
         "redshift_cluster_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured"
       ]
     },
@@ -876,7 +855,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_role_access_not_stale_to_bedrock",
         "iam_user_access_not_stale_to_bedrock",
         "iam_user_access_not_stale_to_sagemaker",
@@ -901,7 +879,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "rds_instance_integration_cloudwatch_logs",
         "redshift_cluster_audit_logging",
@@ -933,7 +910,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -988,7 +964,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -1019,7 +994,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -1050,7 +1024,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -1100,11 +1073,9 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_confidential_workload_host_public_ip"
       ]
     },
@@ -1144,7 +1115,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -1178,7 +1148,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -1238,7 +1207,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_confidential_workload_host_imdsv2_not_enforced",
         "kms_key_enclave_attestation_bypassable_path"
@@ -1298,7 +1266,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "rds_instance_integration_cloudwatch_logs",
         "redshift_cluster_audit_logging",
@@ -1340,7 +1307,6 @@
         "iam_password_policy_minimum_length_14",
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -1361,7 +1327,6 @@
         "iam_password_policy_minimum_length_14",
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -1405,12 +1370,10 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -1437,12 +1400,10 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -1488,10 +1449,8 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_networkacl_allow_ingress_any_port"
       ]
     },
@@ -1519,12 +1478,10 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -1551,12 +1508,10 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -1582,7 +1537,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -1624,7 +1578,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_bedrock_logging_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
@@ -1677,7 +1630,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -1704,7 +1656,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -1731,7 +1682,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -1758,7 +1708,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -1785,7 +1734,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -1812,7 +1760,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -1890,7 +1837,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "elbv2_logging_enabled",
@@ -1918,7 +1864,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "elbv2_logging_enabled",
@@ -1982,7 +1927,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "elbv2_logging_enabled",
@@ -2010,7 +1954,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "elbv2_logging_enabled",
@@ -2054,7 +1997,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -2120,7 +2062,6 @@
         "opensearch_service_domains_node_to_node_encryption_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
         "rds_instance_storage_encrypted",
-        "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging",
         "s3_bucket_default_encryption",
         "s3_bucket_secure_transport_policy",
@@ -2160,7 +2101,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "elbv2_logging_enabled",
@@ -2219,7 +2159,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_bedrock_logging_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
@@ -2247,7 +2186,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_bedrock_logging_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
@@ -2275,7 +2213,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "elbv2_logging_enabled",
@@ -2303,7 +2240,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "elbv2_logging_enabled",
@@ -2331,7 +2267,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "cloudwatch_changes_to_network_gateways_alarm_configured",
@@ -2380,7 +2315,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -2407,7 +2341,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "cloudwatch_changes_to_network_gateways_alarm_configured",
@@ -2456,7 +2389,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "cloudwatch_changes_to_network_gateways_alarm_configured",
@@ -2505,7 +2437,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -2633,7 +2564,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "cloudwatch_changes_to_network_gateways_alarm_configured",
@@ -2882,7 +2812,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -2906,7 +2835,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -3045,7 +2973,6 @@
       "Checks": [
         "ec2_instance_managed_by_ssm",
         "guardduty_is_enabled",
-        "ssm_managed_compliant_patching",
         "ssm_managed_compliant_patching"
       ],
       "ConfigRequirements": [
@@ -3317,7 +3244,6 @@
         "efs_have_backup_enabled",
         "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
-        "rds_instance_backup_enabled",
         "dynamodb_tables_pitr_enabled",
         "s3_bucket_object_versioning"
       ]
@@ -3432,7 +3358,6 @@
         "elbv2_deletion_protection",
         "rds_instance_backup_enabled",
         "rds_instance_deletion_protection",
-        "rds_instance_backup_enabled",
         "rds_instance_multi_az",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning",
@@ -3470,7 +3395,6 @@
       "Checks": [
         "efs_have_backup_enabled",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -3490,7 +3414,6 @@
       "Checks": [
         "efs_have_backup_enabled",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -3511,7 +3434,6 @@
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "rds_instance_multi_az",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
@@ -3533,7 +3455,6 @@
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "redshift_cluster_automatic_upgrades",
         "s3_bucket_object_versioning"
@@ -3555,7 +3476,6 @@
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "redshift_cluster_automatic_upgrades",
         "s3_bucket_object_versioning"
@@ -3577,7 +3497,6 @@
         "efs_have_backup_enabled",
         "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
-        "rds_instance_backup_enabled",
         "dynamodb_tables_pitr_enabled",
         "redshift_cluster_automatic_upgrades",
         "s3_bucket_object_versioning"
@@ -3603,10 +3522,8 @@
         "opensearch_service_domains_encryption_at_rest_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
         "rds_instance_storage_encrypted",
-        "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging",
         "s3_bucket_default_encryption",
-        "s3_bucket_default_encryption",
         "sagemaker_notebook_instance_encryption_enabled",
         "sns_topics_kms_encryption_at_rest_enabled"
       ]
@@ -3625,7 +3542,6 @@
       ],
       "Checks": [
         "rds_instance_storage_encrypted",
-        "s3_bucket_default_encryption",
         "s3_bucket_default_encryption"
       ]
     },
@@ -3644,7 +3560,6 @@
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "rds_instance_multi_az",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning",
@@ -3667,7 +3582,6 @@
         "dynamodb_tables_pitr_enabled",
         "efs_have_backup_enabled",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -3702,7 +3616,6 @@
       "Checks": [
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -3721,7 +3634,6 @@
       "Checks": [
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -3740,7 +3652,6 @@
       "Checks": [
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -3760,7 +3671,6 @@
       "Checks": [
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -3779,7 +3689,6 @@
       "Checks": [
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -3800,7 +3709,6 @@
         "cloudtrail_multi_region_enabled",
         "apigateway_restapi_logging_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
         "elbv2_logging_enabled",
@@ -4040,23 +3948,6 @@
         "iam_password_policy_minimum_length_14"
       ]
     },
-    {
-      "Id": "ia_5_1_h",
-      "Name": "IA-5(1)(h)",
-      "Description": "For password-based authentication: (h) Enforce the following composition and complexity rules: [Assignment: organization-defined composition and complexity rules].",
-      "Attributes": [
-        {
-          "ItemId": "ia_5_1_h",
-          "Section": "Identification and Authentication (IA)",
-          "SubSection": "Authenticator Management (IA-5)",
-          "SubGroup": "IA-5(1) Password-Based Authentication",
-          "Service": "iam"
-        }
-      ],
-      "Checks": [
-        "iam_password_policy_minimum_length_14"
-      ]
-    },
     {
       "Id": "ia_5_8",
       "Name": "IA-5(8) Multiple System Accounts",
@@ -4173,7 +4064,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -4214,7 +4104,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured"
       ]
     },
@@ -4302,7 +4191,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "cloudwatch_changes_to_network_gateways_alarm_configured",
@@ -4351,7 +4239,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "cloudwatch_changes_to_network_gateways_alarm_configured",
@@ -4459,7 +4346,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_changes_to_network_acls_alarm_configured",
         "cloudwatch_changes_to_network_gateways_alarm_configured",
@@ -4844,7 +4730,6 @@
         "rds_instance_backup_enabled",
         "rds_instance_deletion_protection",
         "rds_instance_multi_az",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "redshift_cluster_automatic_upgrades",
         "s3_bucket_object_versioning"
@@ -4987,7 +4872,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured"
       ]
     },
@@ -5015,7 +4899,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_confidential_workload_host_public_ip"
       ]
@@ -5078,7 +4961,6 @@
         "s3_bucket_secure_transport_policy",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_confidential_workload_host_unrestricted_ingress"
       ]
     },
@@ -5105,12 +4987,10 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -5138,7 +5018,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured"
       ]
     },
@@ -5160,7 +5039,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -5193,12 +5071,10 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
         "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_confidential_workload_host_public_ip"
       ]
     },
@@ -5230,8 +5106,7 @@
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -5262,8 +5137,7 @@
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -5290,7 +5164,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured"
       ]
     },
@@ -5318,12 +5191,10 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -5351,12 +5222,10 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -5382,7 +5251,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
@@ -5412,7 +5280,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
@@ -5442,7 +5309,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
@@ -5472,7 +5338,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
@@ -5503,12 +5368,10 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
         "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port",
         "ec2_confidential_workload_host_unrestricted_ingress"
       ]
     },
@@ -5536,7 +5399,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured"
       ]
     },
@@ -5564,12 +5426,10 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -5657,10 +5517,8 @@
         "opensearch_service_domains_node_to_node_encryption_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
         "rds_instance_storage_encrypted",
-        "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging",
         "s3_bucket_default_encryption",
-        "s3_bucket_default_encryption",
         "s3_bucket_secure_transport_policy",
         "sagemaker_notebook_instance_encryption_enabled",
         "sns_topics_kms_encryption_at_rest_enabled"
@@ -5690,10 +5548,8 @@
         "opensearch_service_domains_node_to_node_encryption_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
         "rds_instance_storage_encrypted",
-        "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging",
         "s3_bucket_default_encryption",
-        "s3_bucket_default_encryption",
         "s3_bucket_secure_transport_policy",
         "sagemaker_notebook_instance_encryption_enabled",
         "sns_topics_kms_encryption_at_rest_enabled"
@@ -5792,10 +5648,8 @@
         "opensearch_service_domains_node_to_node_encryption_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
         "rds_instance_storage_encrypted",
-        "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging",
         "s3_bucket_default_encryption",
-        "s3_bucket_default_encryption",
         "s3_bucket_secure_transport_policy",
         "sagemaker_notebook_instance_encryption_enabled",
         "sns_topics_kms_encryption_at_rest_enabled"
@@ -5879,7 +5733,6 @@
         "iam_no_root_access_key",
         "iam_rotate_access_key_90_days",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_accesskey_unused",
         "iam_user_console_access_unused",
         "secretsmanager_automatic_rotation_enabled"
@@ -5932,7 +5785,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured"
       ]
     },
@@ -5957,10 +5809,8 @@
         "opensearch_service_domains_encryption_at_rest_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
         "rds_instance_storage_encrypted",
-        "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging",
         "s3_bucket_default_encryption",
-        "s3_bucket_default_encryption",
         "sagemaker_notebook_instance_encryption_enabled",
         "sns_topics_kms_encryption_at_rest_enabled",
         "kms_key_enclave_attestation_not_enforced",
@@ -6080,7 +5930,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "rds_instance_integration_cloudwatch_logs",
         "redshift_cluster_audit_logging",
@@ -6189,7 +6038,6 @@
       ],
       "Checks": [
         "ec2_instance_managed_by_ssm",
-        "ssm_managed_compliant_patching",
         "ssm_managed_compliant_patching"
       ]
     },
@@ -6235,7 +6083,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "rds_instance_integration_cloudwatch_logs",
         "redshift_cluster_audit_logging",
@@ -6419,7 +6266,6 @@
       "Checks": [
         "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
         "guardduty_is_enabled",
@@ -6621,7 +6467,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "elbv2_logging_enabled",
@@ -6648,7 +6493,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "rds_instance_integration_cloudwatch_logs",
         "redshift_cluster_audit_logging",
@@ -6823,7 +6667,6 @@
         "cloudtrail_multi_region_enabled",
         "apigateway_restapi_logging_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
         "elbv2_logging_enabled",
@@ -6868,7 +6711,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "rds_instance_integration_cloudwatch_logs",
         "redshift_cluster_audit_logging",
@@ -6908,7 +6750,6 @@
         "rds_instance_backup_enabled",
         "rds_instance_deletion_protection",
         "rds_instance_multi_az",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -6934,10 +6775,8 @@
         "opensearch_service_domains_encryption_at_rest_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
         "rds_instance_storage_encrypted",
-        "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging",
         "s3_bucket_default_encryption",
-        "s3_bucket_default_encryption",
         "sagemaker_notebook_instance_encryption_enabled"
       ]
     }
diff --git a/prowler/compliance/aws/nist_csf_1.1_aws.json b/prowler/compliance/aws/nist_csf_1.1_aws.json
index 9921efce56..4d0be48a04 100644
--- a/prowler/compliance/aws/nist_csf_1.1_aws.json
+++ b/prowler/compliance/aws/nist_csf_1.1_aws.json
@@ -20,7 +20,6 @@
       "Checks": [
         "apigateway_restapi_logging_enabled",
         "cloudtrail_multi_region_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -29,8 +28,7 @@
         "ec2_securitygroup_default_restrict_traffic",
         "vpc_flow_logs_enabled",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -81,7 +79,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -106,7 +103,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
         "guardduty_is_enabled",
@@ -165,7 +161,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
         "guardduty_is_enabled",
@@ -259,7 +254,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "guardduty_is_enabled",
         "s3_bucket_server_access_logging_enabled",
         "securityhub_enabled"
@@ -365,7 +359,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "guardduty_is_enabled",
         "s3_bucket_server_access_logging_enabled",
         "securityhub_enabled"
@@ -402,7 +395,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
         "guardduty_is_enabled",
@@ -537,7 +529,6 @@
       "Checks": [
         "apigateway_restapi_logging_enabled",
         "cloudtrail_multi_region_enabled",
-        "cloudtrail_multi_region_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
         "redshift_cluster_audit_logging",
@@ -838,7 +829,6 @@
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
         "iam_user_mfa_enabled_console_access",
-        "iam_user_mfa_enabled_console_access",
         "awslambda_function_not_publicly_accessible",
         "awslambda_function_url_public",
         "rds_instance_no_public_access",
@@ -850,8 +840,7 @@
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -908,8 +897,7 @@
         "sagemaker_notebook_instance_without_direct_internet_access_configured",
         "ec2_securitygroup_default_restrict_traffic",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -925,7 +913,6 @@
         }
       ],
       "Checks": [
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_multi_region_enabled",
         "redshift_cluster_audit_logging",
         "s3_bucket_server_access_logging_enabled"
@@ -946,7 +933,6 @@
       "Checks": [
         "iam_root_hardware_mfa_enabled",
         "iam_root_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
         "iam_user_mfa_enabled_console_access"
       ]
     },
@@ -1047,7 +1033,6 @@
         "cloudtrail_multi_region_enabled",
         "cloudtrail_s3_dataevents_read_enabled",
         "cloudtrail_s3_dataevents_write_enabled",
-        "cloudtrail_multi_region_enabled",
         "ec2_ebs_public_snapshot",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -1247,7 +1232,6 @@
         "s3_bucket_public_access",
         "s3_bucket_policy_public_write_access",
         "s3_account_level_public_access_blocks",
-        "s3_bucket_public_access",
         "sagemaker_notebook_instance_without_direct_internet_access_configured"
       ]
     },
@@ -1265,13 +1249,10 @@
       ],
       "Checks": [
         "dynamodb_tables_pitr_enabled",
-        "dynamodb_tables_pitr_enabled",
-        "efs_have_backup_enabled",
         "efs_have_backup_enabled",
         "elbv2_deletion_protection",
         "rds_instance_backup_enabled",
         "rds_instance_multi_az",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -1291,7 +1272,6 @@
       "Checks": [
         "config_recorder_all_regions_enabled",
         "ec2_instance_managed_by_ssm",
-        "ssm_managed_compliant_patching",
         "ssm_managed_compliant_patching"
       ],
       "ConfigRequirements": [
@@ -1316,7 +1296,6 @@
         }
       ],
       "Checks": [
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_multi_region_enabled"
       ]
     },
@@ -1335,7 +1314,6 @@
       "Checks": [
         "apigateway_restapi_logging_enabled",
         "cloudtrail_multi_region_enabled",
-        "cloudtrail_multi_region_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "elbv2_logging_enabled",
         "elb_logging_enabled",
@@ -1386,8 +1364,7 @@
         "rds_instance_no_public_access",
         "redshift_cluster_public_access",
         "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
-        "ec2_networkacl_allow_ingress_any_port"
+        "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22"
       ]
     },
     {
@@ -1410,12 +1387,12 @@
       ]
     },
     {
-      "Id": "rp_1",
+      "Id": "rc_rp_1",
       "Name": "RC.RP-1",
       "Description": "Recovery plan is executed during or after a cybersecurity incident.",
       "Attributes": [
         {
-          "ItemId": "rp_1",
+          "ItemId": "rc_rp_1",
           "Section": "Recover (RC)",
           "SubSection": "Recovery Planning (RC.RP)",
           "Service": "aws"
@@ -1423,14 +1400,10 @@
       ],
       "Checks": [
         "dynamodb_tables_pitr_enabled",
-        "dynamodb_tables_pitr_enabled",
-        "efs_have_backup_enabled",
         "efs_have_backup_enabled",
         "elbv2_deletion_protection",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "rds_instance_multi_az",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
@@ -1481,14 +1454,10 @@
       ],
       "Checks": [
         "dynamodb_tables_pitr_enabled",
-        "dynamodb_tables_pitr_enabled",
-        "efs_have_backup_enabled",
         "efs_have_backup_enabled",
         "elbv2_deletion_protection",
         "rds_instance_backup_enabled",
-        "rds_instance_backup_enabled",
         "rds_instance_multi_az",
-        "rds_instance_backup_enabled",
         "redshift_cluster_automated_snapshot",
         "s3_bucket_object_versioning"
       ]
diff --git a/prowler/compliance/aws/pci_3.2.1_aws.json b/prowler/compliance/aws/pci_3.2.1_aws.json
index 85fef0b3e5..d5fc0ccf23 100644
--- a/prowler/compliance/aws/pci_3.2.1_aws.json
+++ b/prowler/compliance/aws/pci_3.2.1_aws.json
@@ -277,7 +277,7 @@
       "Checks": [
         "ec2_ebs_public_snapshot",
         "rds_instance_no_public_access",
-        "eks_endpoints_not_publicly_accessible",
+        "eks_cluster_not_publicly_accessible",
         "bedrock_vpc_endpoints_configured",
         "vpc_endpoint_for_ec2_enabled",
         "s3_account_level_public_access_blocks",
@@ -474,7 +474,7 @@
         "s3_bucket_cross_region_replication",
         "ec2_ebs_public_snapshot",
         "rds_instance_no_public_access",
-        "eks_endpoints_not_publicly_accessible",
+        "eks_cluster_not_publicly_accessible",
         "vpc_endpoint_for_ec2_enabled",
         "s3_account_level_public_access_blocks",
         "awslambda_function_not_publicly_accessible",
@@ -506,7 +506,7 @@
       "Checks": [
         "ec2_ebs_public_snapshot",
         "rds_instance_no_public_access",
-        "eks_endpoints_not_publicly_accessible",
+        "eks_cluster_not_publicly_accessible",
         "vpc_endpoint_for_ec2_enabled",
         "s3_account_level_public_access_blocks",
         "awslambda_function_not_publicly_accessible",
@@ -742,7 +742,7 @@
         "elbv2_logging_enabled",
         "apigateway_restapi_logging_enabled",
         "cloudtrail_multi_region_enabled",
-        "wafv2_web_acl_logging_enabled",
+        "wafv2_webacl_logging_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "s3_bucket_lifecycle_enabled"
       ],
@@ -763,7 +763,7 @@
         "elbv2_logging_enabled",
         "apigateway_restapi_logging_enabled",
         "cloudtrail_multi_region_enabled",
-        "wafv2_web_acl_logging_enabled",
+        "wafv2_webacl_logging_enabled",
         "cloudtrail_cloudwatch_logging_enabled"
       ],
       "Attributes": [
@@ -794,7 +794,7 @@
       "Name": "Render PAN unreadable anywhere it is stored (including on portable digital media, backup media, and in logs) by using approaches like one-way hashes based on strong cryptography, truncation etc",
       "Description": "The following approaches should be used to render PAN unreadable anywhere it is stored: One-way hashes based on strong cryptography, (hash must be of the entire PAN), truncation (hashing cannot be used to replace the truncated segment of PAN), index tokens and pads (pads must be securely stored) and strong cryptography with associated key-management processes and procedures. Note: It is a relatively trivial effort for a malicious individual to reconstruct original PAN data if they have access to both the truncated and hashed version of a PAN. Where hashed and truncated versions of the same PAN are present in an entity's environment, additional controls must be in place to ensure that the hashed and truncated versions cannot be correlated to reconstruct the original PAN. PANs stored in primary storage (databases, or flat files such as text files spreadsheets) as well as non-primary storage (backup, audit logs, exception or troubleshooting logs) must all be protected. One-way hash functions based on strong cryptography can be used to render cardholder data unreadable. Hash functions are appropriate when there is no need to retrieve the original number (one-way hashes are irreversible). It is recommended, but not currently a requirement, that an additional, random input value be added to the cardholder data prior to hashing to reduce the feasibility of an attacker comparing the data against (and deriving the PAN from) tables of pre- computed hash values. The intent of truncation is to permanently remove a segment of PAN data so that only a portion (generally not to exceed the first six and last four digits) of the PAN is stored. An index token is a cryptographic token that replaces the PAN based on a given index for an unpredictable value. A one-time pad is a system in which a randomly generated private key is used only once to encrypt a message that is then decrypted using a matching one-time pad and key. The intent of strong cryptography (as defined in the PCI DSS and PA-DSS Glossary of Terms, Abbreviations, and Acronyms) is that the encryption be based on an industry-tested and accepted algorithm (not a proprietary or `home- grown` algorithm) with strong cryptographic keys. By correlating hashed and truncated versions of a given PAN, a malicious individual may easily derive the original PAN value. Controls that prevent the correlation of this data will help ensure that the original PAN remains unreadable.",
       "Checks": [
-        "dynamodb_table_encryption_enabled",
+        "dynamodb_tables_kms_cmk_encryption_enabled",
         "cloudtrail_kms_encryption_enabled",
         "sagemaker_notebook_instance_encryption_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
@@ -807,7 +807,6 @@
         "opensearch_service_domains_encryption_at_rest_enabled",
         "sns_topics_kms_encryption_at_rest_enabled",
         "dynamodb_accelerator_cluster_encryption_enabled",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
         "ec2_ebs_volume_encryption",
         "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging",
@@ -816,7 +815,7 @@
         "elbv2_logging_enabled",
         "apigateway_restapi_logging_enabled",
         "cloudtrail_multi_region_enabled",
-        "wafv2_web_acl_logging_enabled",
+        "wafv2_webacl_logging_enabled",
         "cloudtrail_cloudwatch_logging_enabled"
       ],
       "Attributes": [
@@ -832,7 +831,7 @@
       "Name": "If disk encryption is used (rather than file- or column-level database encryption), logical access must be managed separately and independently of native operating system authentication and access control mechanisms (for example, by not using local user account databases or general network login credentials)",
       "Description": "Decryption keys must not be associated with user accounts. Note: This requirement applies in addition to all other PCI DSS encryption and key- management requirements. PANs stored in primary storage (databases, or flat files such as text files spreadsheets) as well as non-primary storage (backup, audit logs, exception or troubleshooting logs) must all be protected. One-way hash functions based on strong cryptography can be used to render cardholder data unreadable. Hash functions are appropriate when there is no need to retrieve the original number (one-way hashes are irreversible). It is recommended, but not currently a requirement, that an additional, random input value be added to the cardholder data prior to hashing to reduce the feasibility of an attacker comparing the data against (and deriving the PAN from) tables of pre- computed hash values. The intent of truncation is to permanently remove a segment of PAN data so that only a portion (generally not to exceed the first six and last four digits) of the PAN is stored. An index token is a cryptographic token that replaces the PAN based on a given index for an unpredictable value. A one-time pad is a system in which a randomly generated private key is used only once to encrypt a message that is then decrypted using a matching one-time pad and key. The intent of strong cryptography (as defined in the PCI DSS and PA-DSS Glossary of Terms, Abbreviations, and Acronyms) is that the encryption be based on an industry-tested and accepted algorithm (not a proprietary or `home-grown` algorithm) with strong cryptographic keys. By correlating hashed and truncated versions of a given PAN, a malicious individual may easily derive the original PAN value. Controls that prevent the correlation of this data will help ensure that the original PAN remains unreadable.",
       "Checks": [
-        "dynamodb_table_encryption_enabled",
+        "dynamodb_tables_kms_cmk_encryption_enabled",
         "cloudtrail_kms_encryption_enabled",
         "sagemaker_notebook_instance_encryption_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
@@ -845,7 +844,6 @@
         "opensearch_service_domains_encryption_at_rest_enabled",
         "sns_topics_kms_encryption_at_rest_enabled",
         "dynamodb_accelerator_cluster_encryption_enabled",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
         "ec2_ebs_volume_encryption",
         "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging"
@@ -863,7 +861,7 @@
       "Name": "If disk encryption is used, inspect the configuration and observe the authentication process to verify that logical access to encrypted file systems is implemented via a mechanism that is separate from the native operating system's authentication mechanism (for example, not using local user account databases or general network login credentials)",
       "Description": "The intent of this requirement is to address the acceptability of disk-level encryption for rendering cardholder data unreadable. Disk-level encryption encrypts the entire disk/partition on a computer and automatically decrypts the information when an authorized user requests it. Many disk- encryption solutions intercept operating system read/write operations and carry out the appropriate cryptographic transformations without any special action by the user other than supplying a password or pass phrase upon system startup or at the beginning of a session. Based on these characteristics of disk-level encryption, to be compliant with this requirement, the method cannot: 1) Use the same user account authenticator as the operating system, or 2) Use a decryption key that is associated with or derived from the system's local user account database or general network login credentials. Full disk encryption helps to protect data in the event of physical loss of a disk and therefore may be appropriate for portable devices that store cardholder data.",
       "Checks": [
-        "dynamodb_table_encryption_enabled",
+        "dynamodb_tables_kms_cmk_encryption_enabled",
         "cloudtrail_kms_encryption_enabled",
         "sagemaker_notebook_instance_encryption_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
@@ -876,7 +874,6 @@
         "opensearch_service_domains_encryption_at_rest_enabled",
         "sns_topics_kms_encryption_at_rest_enabled",
         "dynamodb_accelerator_cluster_encryption_enabled",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
         "ec2_ebs_volume_encryption",
         "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging"
@@ -894,7 +891,7 @@
       "Name": "Examine the configurations and observe the processes to verify that cardholder data on removable media is encrypted wherever stored",
       "Description": "Note: If disk encryption is not used to encrypt removable media, the data stored on this media will need to be rendered unreadable through some other method. The intent of this requirement is to address the acceptability of disk-level encryption for rendering cardholder data unreadable. Disk-level encryption encrypts the entire disk/partition on a computer and automatically decrypts the information when an authorized user requests it. Many disk- encryption solutions intercept operating system read/write operations and carry out the appropriate cryptographic transformations without any special action by the user other than supplying a password or pass phrase upon system startup or at the beginning of a session. Based on these characteristics of disk-level encryption, to be compliant with this requirement, the method cannot: 1) Use the same user account authenticator as the operating system, or 2) Use a decryption key that is associated with or derived from the system's local user account database or general network login credentials. Full disk encryption helps to protect data in the event of physical loss of a disk and therefore may be appropriate for portable devices that store cardholder data.",
       "Checks": [
-        "dynamodb_table_encryption_enabled",
+        "dynamodb_tables_kms_cmk_encryption_enabled",
         "cloudtrail_kms_encryption_enabled",
         "sagemaker_notebook_instance_encryption_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
@@ -907,7 +904,6 @@
         "opensearch_service_domains_encryption_at_rest_enabled",
         "sns_topics_kms_encryption_at_rest_enabled",
         "dynamodb_accelerator_cluster_encryption_enabled",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
         "ec2_ebs_volume_encryption",
         "rds_instance_storage_encrypted",
         "redshift_cluster_audit_logging"
@@ -925,7 +921,7 @@
       "Name": "Examine documentation about the system used to protect the PAN, including the vendor, type of system/process, and the encryption algorithms (if applicable) to verify that the PAN is rendered unreadable using methods like truncation,one-way hashes based on strong cryptography etc",
       "Description": "Verify documentation about the system used to protect the PAN, including the vendor, type of system/process, and the encryption algorithms (if applicable) to verify that the PAN is rendered unreadable using any of the following methods: One-way hashes based on strong cryptography, truncation, index tokens and pads with the pads being securely stored, strong cryptography, with associated key-management processes and procedures. PANs stored in primary storage (databases, or flat files such as text files spreadsheets) as well as non-primary storage (backup, audit logs, exception or troubleshooting logs) must all be protected. One-way hash functions based on strong cryptography can be used to render cardholder data unreadable. Hash functions are appropriate when there is no need to retrieve the original number (one-way hashes are irreversible). It is recommended, but not currently a requirement, that an additional, random input value be added to the cardholder data prior to hashing to reduce the feasibility of an attacker comparing the data against (and deriving the PAN from) tables of pre- computed hash values. The intent of truncation is to permanently remove a segment of PAN data so that only a portion (generally not to exceed the first six and last four digits) of the PAN is stored. An index token is a cryptographic token that replaces the PAN based on a given index for an unpredictable value. A one-time pad is a system in which a randomly generated private key is used only once to encrypt a message that is then decrypted using a matching one-time pad and key. The intent of strong cryptography (as defined in the PCI DSS and PA-DSS Glossary of Terms, Abbreviations, and Acronyms) is that the encryption be based on an industry-tested and accepted algorithm (not a proprietary or `home-grown` algorithm) with strong cryptographic keys. By correlating hashed and truncated versions of a given PAN, a malicious individual may easily derive the original PAN value. Controls that prevent the correlation of this data will help ensure that the original PAN remains unreadable.",
       "Checks": [
-        "dynamodb_table_encryption_enabled",
+        "dynamodb_tables_kms_cmk_encryption_enabled",
         "cloudtrail_kms_encryption_enabled",
         "sagemaker_notebook_instance_encryption_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
@@ -933,7 +929,6 @@
         "opensearch_service_domains_audit_logging_enabled",
         "eks_cluster_kms_cmk_encryption_in_secrets_enabled",
         "rds_snapshots_encrypted",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
         "s3_bucket_default_encryption",
         "efs_encryption_at_rest_enabled",
         "ec2_ebs_default_encryption",
@@ -957,7 +952,7 @@
       "Name": "Examine several tables or files from a sample of data repositories to verify the PAN is rendered unreadable (that is, not stored in plain-text)",
       "Description": "PANs stored in primary storage (databases, or flat files such as text files spreadsheets) as well as non-primary storage (backup, audit logs, exception or troubleshooting logs) must all be protected. One-way hash functions based on strong cryptography can be used to render cardholder data unreadable. Hash functions are appropriate when there is no need to retrieve the original number (one-way hashes are irreversible). It is recommended, but not currently a requirement, that an additional, random input value be added to the cardholder data prior to hashing to reduce the feasibility of an attacker comparing the data against (and deriving the PAN from) tables of pre- computed hash values. The intent of truncation is to permanently remove a segment of PAN data so that only a portion (generally not to exceed the first six and last four digits) of the PAN is stored. An index token is a cryptographic token that replaces the PAN based on a given index for an unpredictable value. A one-time pad is a system in which a randomly generated private key is used only once to encrypt a message that is then decrypted using a matching one-time pad and key. The intent of strong cryptography (as defined in the PCI DSS and PA-DSS Glossary of Terms, Abbreviations, and Acronyms) is that the encryption be based on an industry-tested and accepted algorithm (not a proprietary or `home- grown` algorithm) with strong cryptographic keys. By correlating hashed and truncated versions of a given PAN, a malicious individual may easily derive the original PAN value. Controls that prevent the correlation of this data will help ensure that the original PAN remains unreadable.",
       "Checks": [
-        "dynamodb_table_encryption_enabled",
+        "dynamodb_tables_kms_cmk_encryption_enabled",
         "cloudtrail_kms_encryption_enabled",
         "sagemaker_notebook_instance_encryption_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
@@ -965,7 +960,6 @@
         "opensearch_service_domains_audit_logging_enabled",
         "eks_cluster_kms_cmk_encryption_in_secrets_enabled",
         "rds_snapshots_encrypted",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
         "s3_bucket_default_encryption",
         "efs_encryption_at_rest_enabled",
         "ec2_ebs_default_encryption",
@@ -997,7 +991,7 @@
         "apigateway_restapi_logging_enabled",
         "s3_bucket_default_encryption",
         "cloudtrail_multi_region_enabled",
-        "wafv2_web_acl_logging_enabled",
+        "wafv2_webacl_logging_enabled",
         "cloudtrail_cloudwatch_logging_enabled"
       ],
       "Attributes": [
@@ -1084,7 +1078,7 @@
       "Description": "Following should be used to safeguard sensitive cardholder data during transmission over open, public networks: only trusted keys and certificates are accepted, the protocol in use only supports secure versions or configurations and the encryption strength is appropriate for the encryption methodology in use. Examples of open, public networks include but are not limited to the Internet, wireless technologies, including 802.11 and Bluetooth, cellular technologies, for example, Global System for Mobile communications (GSM), Code division multiple access (CDMA), general Packet Radio Service (GPRS) and satellite communications. Sensitive information must be encrypted during transmission over public networks, because it is easy and common for a malicious individual to intercept and/or divert data while in transit. Secure transmission of cardholder data requires using trusted keys/certificates, a secure protocol for transport, and proper encryption strength to encrypt cardholder data. Connection requests from systems that do not support the required encryption strength, and that would result in an insecure connection, should not be accepted. Note that some protocol implementations (such as SSL, SSH v1.0, and early TLS) have known vulnerabilities that an attacker can use to gain control of the affected system. Whichever security protocol is used, ensure it is configured to use only secure versions and configurations to prevent use of an insecure connection—for example, by using only trusted certificates and supporting only strong encryption (not supporting weaker, insecure protocols or methods). Verifying that certificates are trusted (for example, have not expired and are issued from a trusted source) helps ensure the integrity of the secure connection. Generally, the web page URL should begin with `HTTPS` and/or the web browser display a padlock icon somewhere in the window of the browser. Many TLS certificate vendors also provide a highly visible verification seal— sometimes referred to as a “security seal,” `secure site seal,` or “secure trust seal”)—which may provide the ability to click on the seal to reveal information about the website. Refer to industry standards and best practices for information on strong cryptography and secure protocols (e.g., NIST SP 800-52 and SP 800-57, OWASP, etc.) Note: SSL/early TLS is not considered strong cryptography and may not be used as a security control, except by POS POI terminals that are verified as not being susceptible to known exploits and the termination points to which they connect as defined in Appendix A2.",
       "Checks": [
         "acm_certificates_expiration_check",
-        "s3_bucket_enforces_ssl",
+        "s3_bucket_secure_transport_policy",
         "elbv2_ssl_listeners",
         "opensearch_service_domains_node_to_node_encryption_enabled",
         "elb_ssl_listeners",
@@ -1110,7 +1104,7 @@
         "cloudfront_distributions_using_deprecated_ssl_protocols",
         "acm_certificates_expiration_check",
         "cloudfront_distributions_origin_traffic_encrypted",
-        "s3_bucket_enforces_ssl",
+        "s3_bucket_secure_transport_policy",
         "elbv2_ssl_listeners",
         "opensearch_service_domains_node_to_node_encryption_enabled",
         "elb_ssl_listeners"
@@ -1178,7 +1172,7 @@
         "cloudfront_distributions_using_deprecated_ssl_protocols",
         "acm_certificates_expiration_check",
         "cloudfront_distributions_origin_traffic_encrypted",
-        "s3_bucket_enforces_ssl",
+        "s3_bucket_secure_transport_policy",
         "elbv2_ssl_listeners",
         "opensearch_service_domains_node_to_node_encryption_enabled",
         "elb_ssl_listeners"
@@ -1497,7 +1491,7 @@
       "Checks": [
         "ec2_ebs_public_snapshot",
         "rds_instance_no_public_access",
-        "eks_endpoints_not_publicly_accessible",
+        "eks_cluster_not_publicly_accessible",
         "s3_account_level_public_access_blocks",
         "awslambda_function_not_publicly_accessible",
         "emr_cluster_master_nodes_no_public_ip",
@@ -1528,7 +1522,7 @@
       "Checks": [
         "ec2_ebs_public_snapshot",
         "rds_instance_no_public_access",
-        "eks_endpoints_not_publicly_accessible",
+        "eks_cluster_not_publicly_accessible",
         "s3_account_level_public_access_blocks",
         "awslambda_function_not_publicly_accessible",
         "emr_cluster_master_nodes_no_public_ip",
@@ -1637,7 +1631,7 @@
         "iam_password_policy_reuse_24",
         "codebuild_project_no_secrets_in_variables",
         "codebuild_project_source_repo_url_no_sensitive_credentials",
-        "s3_bucket_enforces_ssl",
+        "s3_bucket_secure_transport_policy",
         "elbv2_ssl_listeners",
         "opensearch_service_domains_node_to_node_encryption_enabled",
         "elb_ssl_listeners",
@@ -1652,11 +1646,10 @@
         "eks_cluster_kms_cmk_encryption_in_secrets_enabled",
         "rds_snapshots_encrypted",
         "dynamodb_accelerator_cluster_encryption_enabled",
-        "dynamodb_table_encryption_enabled",
+        "dynamodb_tables_kms_cmk_encryption_enabled",
         "cloudtrail_kms_encryption_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
         "sns_topics_kms_encryption_at_rest_enabled",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
         "redshift_cluster_audit_logging"
       ],
       "Attributes": [
@@ -1674,7 +1667,7 @@
       "Checks": [
         "codebuild_project_no_secrets_in_variables",
         "codebuild_project_source_repo_url_no_sensitive_credentials",
-        "s3_bucket_enforces_ssl",
+        "s3_bucket_secure_transport_policy",
         "elbv2_ssl_listeners",
         "opensearch_service_domains_node_to_node_encryption_enabled",
         "elb_ssl_listeners",
@@ -1689,11 +1682,10 @@
         "eks_cluster_kms_cmk_encryption_in_secrets_enabled",
         "rds_snapshots_encrypted",
         "dynamodb_accelerator_cluster_encryption_enabled",
-        "dynamodb_table_encryption_enabled",
+        "dynamodb_tables_kms_cmk_encryption_enabled",
         "cloudtrail_kms_encryption_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
         "sns_topics_kms_encryption_at_rest_enabled",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
         "redshift_cluster_audit_logging"
       ],
       "Attributes": [
@@ -1723,12 +1715,11 @@
         "eks_cluster_kms_cmk_encryption_in_secrets_enabled",
         "rds_snapshots_encrypted",
         "dynamodb_accelerator_cluster_encryption_enabled",
-        "dynamodb_table_encryption_enabled",
+        "dynamodb_tables_kms_cmk_encryption_enabled",
         "cloudtrail_kms_encryption_enabled",
         "cloudwatch_log_group_kms_encryption_enabled",
-        "s3_bucket_enforces_ssl",
+        "s3_bucket_secure_transport_policy",
         "sns_topics_kms_encryption_at_rest_enabled",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
         "redshift_cluster_audit_logging"
       ],
       "Attributes": [
@@ -2118,7 +2109,7 @@
         "cloudwatch_log_group_retention_policy_specific_days_enabled",
         "apigateway_restapi_logging_enabled",
         "cloudtrail_multi_region_enabled",
-        "wafv2_web_acl_logging_enabled",
+        "wafv2_webacl_logging_enabled",
         "cloudtrail_cloudwatch_logging_enabled",
         "vpc_flow_logs_enabled",
         "redshift_cluster_audit_logging"
diff --git a/prowler/compliance/aws/rbi_cyber_security_framework_aws.json b/prowler/compliance/aws/rbi_cyber_security_framework_aws.json
index 554b40cdad..b44511a206 100644
--- a/prowler/compliance/aws/rbi_cyber_security_framework_aws.json
+++ b/prowler/compliance/aws/rbi_cyber_security_framework_aws.json
@@ -109,9 +109,7 @@
         "guardduty_no_high_severity_findings",
         "rds_instance_minor_version_upgrade_enabled",
         "redshift_cluster_automatic_upgrades",
-        "ssm_managed_compliant_patching",
-        "ssm_managed_compliant_patching",
-        "rds_instance_minor_version_upgrade_enabled"
+        "ssm_managed_compliant_patching"
       ]
     },
     {
diff --git a/prowler/compliance/aws/soc2_aws.json b/prowler/compliance/aws/soc2_aws.json
index 0e8c9f70ae..6cd6d31e08 100644
--- a/prowler/compliance/aws/soc2_aws.json
+++ b/prowler/compliance/aws/soc2_aws.json
@@ -643,8 +643,6 @@
         "ec2_client_vpn_endpoint_connection_logging_enabled",
         "ecs_task_definitions_logging_enabled",
         "elasticbeanstalk_environment_cloudwatch_logging_enabled",
-        "elb_logging_enabled",
-        "elbv2_logging_enabled",
         "glue_etl_jobs_logging_enabled",
         "mq_broker_logging_enabled",
         "networkfirewall_logging_enabled",
diff --git a/prowler/compliance/azure/c5_azure.json b/prowler/compliance/azure/c5_azure.json
index 6fff7a3691..37963e9f99 100644
--- a/prowler/compliance/azure/c5_azure.json
+++ b/prowler/compliance/azure/c5_azure.json
@@ -3157,8 +3157,6 @@
         "app_http_logs_enabled",
         "defender_auto_provisioning_log_analytics_agent_vms_on",
         "keyvault_logging_enabled",
-        "monitor_storage_account_with_activity_logs_cmk_encrypted",
-        "monitor_storage_account_with_activity_logs_is_private",
         "mysql_flexible_server_audit_log_connection_activated",
         "mysql_flexible_server_audit_log_enabled",
         "network_flow_log_captured_sent",
@@ -5780,13 +5778,11 @@
         "sqlserver_tde_encrypted_with_cmk",
         "sqlserver_tde_encryption_enabled",
         "vm_ensure_unattached_disks_encrypted_with_cmk",
-        "entra_conditional_access_policy_require_mfa_for_management_app",
+        "entra_conditional_access_policy_require_mfa_for_management_api",
         "app_minimum_tls_version_12",
         "mysql_flexible_server_minimum_tls_version_12",
         "sqlserver_recommended_minimal_tls_version",
-        "storage_ensure_minimum_tls_version_12",
-        "sqlserver_tde_encrypted_with_cmk",
-        "sqlserver_tde_encryption_enabled"
+        "storage_ensure_minimum_tls_version_12"
       ],
       "ConfigRequirements": [
         {
@@ -5818,13 +5814,11 @@
         "sqlserver_tde_encrypted_with_cmk",
         "sqlserver_tde_encryption_enabled",
         "vm_ensure_unattached_disks_encrypted_with_cmk",
-        "entra_conditional_access_policy_require_mfa_for_management_app",
+        "entra_conditional_access_policy_require_mfa_for_management_api",
         "app_minimum_tls_version_12",
         "mysql_flexible_server_minimum_tls_version_12",
         "sqlserver_recommended_minimal_tls_version",
-        "storage_ensure_minimum_tls_version_12",
-        "sqlserver_tde_encrypted_with_cmk",
-        "sqlserver_tde_encryption_enabled"
+        "storage_ensure_minimum_tls_version_12"
       ],
       "ConfigRequirements": [
         {
@@ -6577,7 +6571,6 @@
         "sqlserver_tde_encryption_enabled",
         "app_minimum_tls_version_12",
         "mysql_flexible_server_minimum_tls_version_12",
-        "sqlserver_recommended_minimal_tls_version",
         "storage_ensure_minimum_tls_version_12"
       ],
       "ConfigRequirements": [
@@ -7077,7 +7070,6 @@
         "app_http_logs_enabled",
         "defender_auto_provisioning_log_analytics_agent_vms_on",
         "keyvault_logging_enabled",
-        "monitor_storage_account_with_activity_logs_cmk_encrypted",
         "monitor_storage_account_with_activity_logs_is_private",
         "mysql_flexible_server_audit_log_connection_activated",
         "mysql_flexible_server_audit_log_enabled",
@@ -7920,8 +7912,6 @@
         "app_http_logs_enabled",
         "defender_auto_provisioning_log_analytics_agent_vms_on",
         "keyvault_logging_enabled",
-        "monitor_storage_account_with_activity_logs_cmk_encrypted",
-        "monitor_storage_account_with_activity_logs_is_private",
         "mysql_flexible_server_audit_log_connection_activated",
         "mysql_flexible_server_audit_log_enabled",
         "network_flow_log_captured_sent",
@@ -7953,8 +7943,6 @@
         "app_http_logs_enabled",
         "defender_auto_provisioning_log_analytics_agent_vms_on",
         "keyvault_logging_enabled",
-        "monitor_storage_account_with_activity_logs_cmk_encrypted",
-        "monitor_storage_account_with_activity_logs_is_private",
         "mysql_flexible_server_audit_log_connection_activated",
         "mysql_flexible_server_audit_log_enabled",
         "network_flow_log_captured_sent",
@@ -8991,7 +8979,6 @@
         "app_http_logs_enabled",
         "defender_auto_provisioning_log_analytics_agent_vms_on",
         "keyvault_logging_enabled",
-        "monitor_storage_account_with_activity_logs_cmk_encrypted",
         "mysql_flexible_server_audit_log_connection_activated",
         "mysql_flexible_server_audit_log_enabled",
         "network_flow_log_captured_sent",
diff --git a/prowler/compliance/azure/ens_rd2022_azure.json b/prowler/compliance/azure/ens_rd2022_azure.json
index 5078c6567e..aafabfa75a 100644
--- a/prowler/compliance/azure/ens_rd2022_azure.json
+++ b/prowler/compliance/azure/ens_rd2022_azure.json
@@ -642,7 +642,7 @@
         }
       ],
       "Checks": [
-        " app_http_logs_enabled"
+        "app_http_logs_enabled"
       ]
     },
     {
@@ -1185,7 +1185,7 @@
       ]
     },
     {
-      "Id": "op.mon.3.az.nw.1",
+      "Id": "op.mon.3.az.nw.2",
       "Description": "Vigilancia",
       "Attributes": [
         {
diff --git a/prowler/compliance/azure/fedramp_20x_ksi_low_azure.json b/prowler/compliance/azure/fedramp_20x_ksi_low_azure.json
index 655f649abe..3e5ea9d956 100644
--- a/prowler/compliance/azure/fedramp_20x_ksi_low_azure.json
+++ b/prowler/compliance/azure/fedramp_20x_ksi_low_azure.json
@@ -17,26 +17,18 @@
         }
       ],
       "Checks": [
-        "monitor_activity_log_alert_cmk_delete",
-        "monitor_activity_log_alert_create_policy_assignment",
-        "monitor_activity_log_alert_create_update_delete_network_sg",
-        "monitor_activity_log_alert_create_update_delete_network_sg_rule",
-        "monitor_activity_log_alert_create_update_delete_sql_server_fw_rule",
-        "monitor_activity_log_alert_create_update_nsg",
-        "monitor_activity_log_alert_create_update_public_ip_address",
-        "monitor_activity_log_alert_create_update_security_solution",
-        "monitor_activity_log_alert_delete_nsg",
-        "monitor_activity_log_alert_delete_policy_assignment",
-        "monitor_activity_log_alert_delete_public_ip_address",
-        "monitor_activity_log_alert_delete_security_solution",
-        "monitor_log_profile_all_categories",
-        "monitor_log_profile_all_regions",
-        "vm_agent_installed",
-        "vm_antimalware_solution_installed",
-        "vm_endpoint_protection_installed",
-        "vm_guest_configuration_installed",
-        "vm_guest_configuration_with_no_managed_identity",
-        "vm_guest_configuration_with_user_identity"
+        "monitor_alert_create_policy_assignment",
+        "monitor_alert_create_update_sqlserver_fr",
+        "monitor_alert_delete_sqlserver_fr",
+        "monitor_alert_create_update_nsg",
+        "monitor_alert_create_update_public_ip_address_rule",
+        "monitor_alert_create_update_security_solution",
+        "monitor_alert_delete_nsg",
+        "monitor_alert_delete_policy_assignment",
+        "monitor_alert_delete_public_ip_address_rule",
+        "monitor_alert_delete_security_solution",
+        "monitor_diagnostic_setting_with_appropriate_categories",
+        "defender_assessments_vm_endpoint_protection_installed"
       ]
     },
     {
@@ -64,17 +56,11 @@
         "keyvault_access_only_through_private_endpoints",
         "keyvault_private_endpoints",
         "network_bastion_host_exists",
-        "network_flow_logs_enabled",
-        "network_security_group_not_empty",
-        "network_sg_ssh_access_restricted",
-        "network_sg_rdp_access_restricted",
-        "network_sg_open_all_ports_to_any_source",
+        "network_flow_log_captured_sent",
+        "network_ssh_internet_access_restricted",
+        "network_rdp_internet_access_restricted",
         "network_watcher_enabled",
-        "postgresql_flexible_server_public_network_access_disabled",
-        "sqlserver_public_network_access_disabled",
-        "storage_default_network_access_rule_set_to_deny",
-        "vm_availability_zones_enabled",
-        "vm_availability_set_deployed"
+        "storage_default_network_access_rule_is_denied"
       ]
     },
     {
@@ -111,8 +97,7 @@
         "app_function_identity_is_configured",
         "app_function_identity_without_admin_privileges",
         "app_ensure_auth_is_set_up",
-        "app_register_with_identity",
-        "vm_managed_identity_enabled"
+        "app_register_with_identity"
       ]
     },
     {
@@ -167,24 +152,16 @@
         "defender_auto_provisioning_log_analytics_agent_vms_on",
         "defender_auto_provisioning_vulnerabilty_assessments_machines_on",
         "keyvault_logging_enabled",
-        "monitor_activity_log_retention_policy_set",
-        "monitor_diagnostic_logs_categories",
-        "monitor_diagnostic_setting_deployed_for_all_resources",
-        "monitor_diagnostic_settings_captures_proper_categories",
-        "monitor_log_profile_all_categories",
-        "monitor_log_profile_all_regions",
-        "monitor_log_profile_captures_all_activities",
-        "monitor_log_profile_retention_policy_at_least_365",
-        "network_flow_logs_enabled",
-        "network_flow_log_retention_policy_at_least_90",
+        "monitor_diagnostic_setting_with_appropriate_categories",
+        "monitor_diagnostic_settings_exists",
+        "network_flow_log_captured_sent",
+        "network_flow_log_more_than_90_days",
         "network_watcher_enabled",
-        "postgresql_flexible_server_audit_logs_enabled",
-        "postgresql_flexible_server_log_checkpoints_enabled",
-        "postgresql_flexible_server_log_connections_enabled",
-        "postgresql_flexible_server_log_disconnections_enabled",
-        "sqlserver_auditing_on",
-        "sqlserver_auditing_retention_90_days",
-        "storage_storage_account_logging_queue_read_write_delete_enabled"
+        "postgresql_flexible_server_log_checkpoints_on",
+        "postgresql_flexible_server_log_connections_on",
+        "postgresql_flexible_server_log_disconnections_on",
+        "sqlserver_auditing_enabled",
+        "sqlserver_auditing_retention_90_days"
       ]
     },
     {
@@ -199,21 +176,13 @@
         }
       ],
       "Checks": [
-        "policy_ensure_asc_for_aks_is_enabled",
-        "policy_ensure_asc_for_app_services_is_enabled",
-        "policy_ensure_asc_for_azure_sql_is_enabled",
-        "policy_ensure_asc_for_key_vault_is_enabled",
-        "policy_ensure_asc_for_servers_is_enabled",
-        "policy_ensure_asc_for_sql_servers_is_enabled",
-        "policy_ensure_asc_for_storage_is_enabled",
-        "policy_ensure_allowed_extensions_are_installed",
-        "policy_ensure_allowed_locations_is_enabled",
-        "policy_ensure_allowed_resource_types_is_enabled",
-        "policy_ensure_audit_diagnostic_log_enabled_for_all_services",
-        "policy_ensure_not_allowed_resource_types_is_enabled",
-        "vm_guest_configuration_installed",
-        "vm_guest_configuration_with_no_managed_identity",
-        "vm_guest_configuration_with_user_identity"
+        "defender_ensure_defender_for_containers_is_on",
+        "defender_ensure_defender_for_app_services_is_on",
+        "defender_ensure_defender_for_azure_sql_databases_is_on",
+        "defender_ensure_defender_for_keyvault_is_on",
+        "defender_ensure_defender_for_server_is_on",
+        "defender_ensure_defender_for_sql_servers_is_on",
+        "defender_ensure_defender_for_storage_is_on"
       ]
     },
     {
@@ -229,18 +198,10 @@
       ],
       "Checks": [
         "mysql_flexible_server_geo_redundant_backup_enabled",
-        "mysql_flexible_server_retain_backup_35_days",
         "postgresql_flexible_server_geo_redundant_backup_enabled",
-        "postgresql_flexible_server_backup_retention_period_35_days",
-        "recovery_services_vault_uses_private_link",
-        "recovery_services_vault_uses_private_link_for_backup",
-        "sqlserver_database_long_term_geo_redundant_backup",
-        "sqlserver_database_retention_policy_exceeds_90_days",
-        "storage_default_storage_account_encrypted_with_cmk_not_stored_in_storage_account",
         "storage_geo_redundant_enabled",
         "storage_infrastructure_encryption_is_enabled",
-        "storage_soft_delete_containers_enabled",
-        "storage_soft_delete_enabled",
+        "storage_ensure_soft_delete_is_enabled",
         "vm_backup_enabled",
         "vm_sufficient_daily_backup_retention_period"
       ]
@@ -266,26 +227,18 @@
         "keyvault_key_expiration_set_in_non_rbac",
         "keyvault_key_rotation_enabled",
         "keyvault_non_rbac_secret_expiration_set",
-        "mysql_flexible_server_encrypted_at_rest_using_cmk",
-        "mysql_flexible_server_encrypted_in_transit",
-        "mysql_flexible_server_minimum_tls_version_tls12",
-        "postgresql_flexible_server_encrypted_at_rest_using_cmk",
-        "postgresql_flexible_server_encrypted_in_transit",
-        "postgresql_flexible_server_minimum_tls_version_tls12",
-        "sqlserver_advanced_data_security_enabled",
-        "sqlserver_database_encryption_with_cmk",
-        "sqlserver_database_tde_encryption_enabled",
-        "sqlserver_minimum_tls_version_12",
-        "storage_secure_transfer_required_enabled",
-        "storage_default_storage_account_encrypted_with_cmk",
+        "mysql_flexible_server_ssl_connection_enabled",
+        "mysql_flexible_server_minimum_tls_version_12",
+        "postgresql_flexible_server_enforce_ssl_enabled",
+        "defender_ensure_defender_for_sql_servers_is_on",
+        "sqlserver_tde_encrypted_with_cmk",
+        "sqlserver_tde_encryption_enabled",
+        "sqlserver_recommended_minimal_tls_version",
+        "storage_secure_transfer_required_is_enabled",
+        "storage_ensure_encryption_with_customer_managed_keys",
         "storage_infrastructure_encryption_is_enabled",
-        "storage_storage_account_encrypted_with_cmk",
-        "storage_storage_account_minimum_tls_version_tls12",
-        "vm_encrypted_at_host",
-        "vm_data_disks_encrypted_with_cmk",
-        "vm_managed_disks_encrypted_with_cmk",
-        "vm_os_disk_are_encrypted_with_cmk",
-        "vm_temporary_disks_and_cache_encrypted"
+        "storage_ensure_minimum_tls_version_12",
+        "vm_ensure_attached_disks_encrypted_with_cmk"
       ]
     },
     {
@@ -307,11 +260,7 @@
         "defender_container_images_resolved_vulnerabilities",
         "defender_container_images_scan_enabled",
         "defender_ensure_system_updates_are_applied",
-        "vm_agent_installed",
-        "vm_antimalware_solution_installed",
-        "vm_endpoint_protection_installed",
-        "vm_os_update_system_updates",
-        "vm_security_patch_assessment"
+        "defender_assessments_vm_endpoint_protection_installed"
       ]
     },
     {
@@ -332,8 +281,7 @@
         "entra_user_with_vm_access_has_mfa",
         "iam_custom_role_has_permissions_to_administer_resource_locks",
         "iam_role_user_access_admin_restricted",
-        "app_function_identity_is_configured",
-        "vm_managed_identity_enabled"
+        "app_function_identity_is_configured"
       ]
     },
     {
@@ -348,10 +296,8 @@
         }
       ],
       "Checks": [
-        "monitor_log_profile_all_categories",
-        "monitor_log_profile_all_regions",
-        "monitor_log_profile_captures_all_activities",
-        "monitor_diagnostic_setting_deployed_for_all_resources",
+        "monitor_diagnostic_setting_with_appropriate_categories",
+        "monitor_diagnostic_settings_exists",
         "network_watcher_enabled"
       ]
     }
diff --git a/prowler/compliance/azure/iso27001_2022_azure.json b/prowler/compliance/azure/iso27001_2022_azure.json
index 23392533de..edd2612c4e 100644
--- a/prowler/compliance/azure/iso27001_2022_azure.json
+++ b/prowler/compliance/azure/iso27001_2022_azure.json
@@ -1056,7 +1056,9 @@
         "entra_policy_guest_invite_only_for_admin_roles",
         "entra_policy_guest_users_access_restrictions",
         "entra_policy_restricts_user_consent_for_apps",
-        "entra_policy_user_consent_for_verified_apps storage_blob_public_access_level_is_disabled storage_ensure_azure_services_are_trusted_to_access_is_enabled"
+        "entra_policy_user_consent_for_verified_apps",
+        "storage_blob_public_access_level_is_disabled",
+        "storage_ensure_azure_services_are_trusted_to_access_is_enabled"
       ]
     },
     {
@@ -1106,8 +1108,9 @@
       ],
       "Checks": [
         "entra_authentication_methods_policy_strong_auth_enforced",
-        "entra_conditional_access_policy_require_mfa_for_management_app",
-        "entra_non_privileged_user_has_mfa entra_privileged_user_has_mfa",
+        "entra_conditional_access_policy_require_mfa_for_management_api",
+        "entra_non_privileged_user_has_mfa",
+        "entra_privileged_user_has_mfa",
         "entra_user_with_vm_access_has_mfa",
         "app_minimum_tls_version_12",
         "sqlserver_tde_encryption_enabled",
diff --git a/prowler/compliance/azure/mitre_attack_azure.json b/prowler/compliance/azure/mitre_attack_azure.json
index 8b338da534..10d24b67fd 100644
--- a/prowler/compliance/azure/mitre_attack_azure.json
+++ b/prowler/compliance/azure/mitre_attack_azure.json
@@ -29,7 +29,6 @@
         "app_ensure_php_version_is_latest",
         "app_ensure_python_version_is_latest",
         "defender_assessments_vm_endpoint_protection_installed",
-        "defender_assessments_vm_endpoint_protection_installed",
         "defender_auto_provisioning_log_analytics_agent_vms_on",
         "defender_auto_provisioning_vulnerabilty_assessments_machines_on",
         "defender_container_images_resolved_vulnerabilities",
@@ -1601,8 +1600,6 @@
         "mysql_flexible_server_minimum_tls_version_12",
         "mysql_flexible_server_ssl_connection_enabled",
         "postgresql_flexible_server_enforce_ssl_enabled",
-        "sqlserver_tde_encrypted_with_cmk",
-        "sqlserver_tde_encryption_enabled",
         "storage_blob_public_access_level_is_disabled",
         "storage_ensure_azure_services_are_trusted_to_access_is_enabled",
         "storage_ensure_encryption_with_customer_managed_keys",
diff --git a/prowler/compliance/azure/nis2_azure.json b/prowler/compliance/azure/nis2_azure.json
index 0ae814fad7..229eea5093 100644
--- a/prowler/compliance/azure/nis2_azure.json
+++ b/prowler/compliance/azure/nis2_azure.json
@@ -1565,7 +1565,6 @@
         "containerregistry_uses_private_link",
         "cosmosdb_account_use_private_endpoints",
         "keyvault_private_endpoints",
-        "monitor_storage_account_with_activity_logs_is_private",
         "storage_ensure_private_endpoints_in_storage_accounts"
       ],
       "Attributes": [
diff --git a/prowler/compliance/azure/prowler_threatscore_azure.json b/prowler/compliance/azure/prowler_threatscore_azure.json
index a030bb845b..60ba4ca57f 100644
--- a/prowler/compliance/azure/prowler_threatscore_azure.json
+++ b/prowler/compliance/azure/prowler_threatscore_azure.json
@@ -743,24 +743,6 @@
         }
       ]
     },
-    {
-      "Id": "3.2.1",
-      "Description": "Ensure that 'Auditing' Retention is 'greater than 90 days'",
-      "Checks": [
-        "sqlserver_auditing_retention_90_days"
-      ],
-      "Attributes": [
-        {
-          "Title": "Auditing' Retention is 'greater than 90 days'",
-          "Section": "3. Logging and Monitoring",
-          "SubSection": "3.2 Retention",
-          "AttributeDescription": "Configure SQL Server Audit Retention to retain logs for more than 90 days to ensure long-term visibility into database activity and security events.",
-          "AdditionalInformation": "Maintaining audit logs for over 90 days helps detect anomalies, security breaches, and unauthorized access. Longer retention periods allow organizations to analyze historical data, support compliance requirements, and strengthen forensic investigations.",
-          "LevelOfRisk": 3,
-          "Weight": 10
-        }
-      ]
-    },
     {
       "Id": "3.2.1",
       "Description": "Ensure that Network Watcher flow log retention period is '0 or at least 90 days'",
@@ -815,6 +797,24 @@
         }
       ]
     },
+    {
+      "Id": "3.2.4",
+      "Description": "Ensure that 'Auditing' Retention is 'greater than 90 days'",
+      "Checks": [
+        "sqlserver_auditing_retention_90_days"
+      ],
+      "Attributes": [
+        {
+          "Title": "Auditing' Retention is 'greater than 90 days'",
+          "Section": "3. Logging and Monitoring",
+          "SubSection": "3.2 Retention",
+          "AttributeDescription": "Configure SQL Server Audit Retention to retain logs for more than 90 days to ensure long-term visibility into database activity and security events.",
+          "AdditionalInformation": "Maintaining audit logs for over 90 days helps detect anomalies, security breaches, and unauthorized access. Longer retention periods allow organizations to analyze historical data, support compliance requirements, and strengthen forensic investigations.",
+          "LevelOfRisk": 3,
+          "Weight": 10
+        }
+      ]
+    },
     {
       "Id": "3.3.1",
       "Description": "Ensure that 'Auditing' is set to 'On' ",
diff --git a/prowler/compliance/gcp/ens_rd2022_gcp.json b/prowler/compliance/gcp/ens_rd2022_gcp.json
index 8315123f79..be64300eb7 100644
--- a/prowler/compliance/gcp/ens_rd2022_gcp.json
+++ b/prowler/compliance/gcp/ens_rd2022_gcp.json
@@ -1692,7 +1692,7 @@
       ]
     },
     {
-      "Id": "mp.com.4.gcp.vpc.1",
+      "Id": "mp.com.4.gcp.vpc.2",
       "Description": "Separación de flujos de información en la red",
       "Attributes": [
         {
diff --git a/prowler/compliance/gcp/hipaa_gcp.json b/prowler/compliance/gcp/hipaa_gcp.json
index 37d9838e59..707834cfb1 100644
--- a/prowler/compliance/gcp/hipaa_gcp.json
+++ b/prowler/compliance/gcp/hipaa_gcp.json
@@ -18,8 +18,7 @@
       ],
       "Checks": [
         "iam_cloud_asset_inventory_enabled",
-        "securitycenter_security_health_analytics_enabled",
-        "essentialcontacts_security_contacts_configured"
+        "iam_organization_essential_contacts_configured"
       ]
     },
     {
@@ -34,23 +33,20 @@
         }
       ],
       "Checks": [
-        "cloudstorage_bucket_encryption",
         "cloudstorage_bucket_public_access",
-        "cloudstorage_bucket_uniform_access",
-        "cloudsql_instance_automatic_backups_enabled",
-        "cloudsql_instance_encryption_enabled",
+        "cloudstorage_bucket_uniform_bucket_level_access",
+        "cloudsql_instance_automated_backups",
+        "cloudsql_instance_cmek_encryption_enabled",
         "cloudsql_instance_public_access",
         "compute_instance_public_ip",
-        "compute_disk_encryption_enabled",
-        "compute_firewall_rdp_access_from_internet_restricted",
-        "compute_firewall_ssh_access_from_internet_restricted",
-        "compute_network_legacy_network_not_used",
-        "gke_cluster_master_authorized_networks_enabled",
-        "gke_cluster_private_cluster_enabled",
+        "compute_instance_encryption_with_csek_enabled",
+        "compute_firewall_rdp_access_from_the_internet_allowed",
+        "compute_firewall_ssh_access_from_the_internet_allowed",
+        "compute_network_not_legacy",
         "iam_sa_no_administrative_privileges",
         "iam_no_service_roles_at_project_level",
         "bigquery_dataset_public_access",
-        "bigquery_dataset_cmek_encryption",
+        "bigquery_dataset_cmk_encryption",
         "kms_key_rotation_enabled",
         "gemini_api_disabled"
       ]
@@ -148,8 +144,7 @@
         }
       ],
       "Checks": [
-        "securitycenter_security_health_analytics_enabled",
-        "essentialcontacts_security_contacts_configured",
+        "iam_organization_essential_contacts_configured",
         "logging_sink_created"
       ]
     },
@@ -165,9 +160,7 @@
         }
       ],
       "Checks": [
-        "cloudsql_instance_automatic_backups_enabled",
-        "compute_disk_snapshot_encryption_enabled",
-        "gke_cluster_stackdriver_logging_enabled"
+        "cloudsql_instance_automated_backups"
       ]
     },
     {
@@ -182,9 +175,8 @@
         }
       ],
       "Checks": [
-        "cloudsql_instance_automatic_backups_enabled",
-        "cloudstorage_bucket_object_versioning",
-        "compute_disk_snapshot_encryption_enabled"
+        "cloudsql_instance_automated_backups",
+        "cloudstorage_bucket_versioning_enabled"
       ]
     },
     {
@@ -199,9 +191,8 @@
         }
       ],
       "Checks": [
-        "cloudsql_instance_automatic_backups_enabled",
-        "cloudsql_instance_point_in_time_recovery_enabled",
-        "cloudstorage_bucket_object_versioning"
+        "cloudsql_instance_automated_backups",
+        "cloudstorage_bucket_versioning_enabled"
       ]
     },
     {
@@ -247,9 +238,8 @@
       ],
       "Checks": [
         "compute_instance_public_ip",
-        "compute_firewall_rdp_access_from_internet_restricted",
-        "compute_firewall_ssh_access_from_internet_restricted",
-        "gke_cluster_private_cluster_enabled"
+        "compute_firewall_rdp_access_from_the_internet_allowed",
+        "compute_firewall_ssh_access_from_the_internet_allowed"
       ]
     },
     {
@@ -264,9 +254,7 @@
         }
       ],
       "Checks": [
-        "compute_disk_encryption_enabled",
-        "compute_disk_snapshot_encryption_enabled",
-        "cloudstorage_bucket_encryption"
+        "compute_instance_encryption_with_csek_enabled"
       ]
     },
     {
@@ -285,11 +273,10 @@
         "iam_no_service_roles_at_project_level",
         "iam_account_access_approval_enabled",
         "cloudstorage_bucket_public_access",
-        "cloudstorage_bucket_uniform_access",
+        "cloudstorage_bucket_uniform_bucket_level_access",
         "cloudsql_instance_public_access",
         "bigquery_dataset_public_access",
-        "compute_instance_public_ip",
-        "gke_cluster_private_cluster_enabled"
+        "compute_instance_public_ip"
       ]
     },
     {
@@ -320,11 +307,9 @@
         }
       ],
       "Checks": [
-        "cloudstorage_bucket_encryption",
-        "cloudsql_instance_encryption_enabled",
-        "compute_disk_encryption_enabled",
-        "compute_disk_snapshot_encryption_enabled",
-        "bigquery_dataset_cmek_encryption",
+        "cloudsql_instance_cmek_encryption_enabled",
+        "compute_instance_encryption_with_csek_enabled",
+        "bigquery_dataset_cmk_encryption",
         "kms_key_rotation_enabled"
       ]
     },
@@ -348,8 +333,7 @@
         "logging_log_metric_filter_and_alert_for_vpc_network_route_changes_enabled",
         "logging_log_metric_filter_and_alert_for_vpc_firewall_rule_changes_enabled",
         "logging_log_metric_filter_and_alert_for_bucket_permission_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_sql_instance_configuration_changes_enabled",
-        "gke_cluster_stackdriver_logging_enabled"
+        "logging_log_metric_filter_and_alert_for_sql_instance_configuration_changes_enabled"
       ]
     },
     {
@@ -364,9 +348,8 @@
         }
       ],
       "Checks": [
-        "cloudstorage_bucket_object_versioning",
-        "cloudsql_instance_automatic_backups_enabled",
-        "cloudsql_instance_point_in_time_recovery_enabled",
+        "cloudstorage_bucket_versioning_enabled",
+        "cloudsql_instance_automated_backups",
         "kms_key_rotation_enabled"
       ]
     },
@@ -398,11 +381,9 @@
         }
       ],
       "Checks": [
-        "cloudstorage_bucket_encryption",
-        "compute_firewall_rdp_access_from_internet_restricted",
-        "compute_firewall_ssh_access_from_internet_restricted",
-        "cloudsql_instance_ssl_required",
-        "gke_cluster_master_authorized_networks_enabled"
+        "compute_firewall_rdp_access_from_the_internet_allowed",
+        "compute_firewall_ssh_access_from_the_internet_allowed",
+        "cloudsql_instance_ssl_connections"
       ]
     },
     {
@@ -417,8 +398,8 @@
         }
       ],
       "Checks": [
-        "cloudstorage_bucket_object_versioning",
-        "cloudsql_instance_automatic_backups_enabled",
+        "cloudstorage_bucket_versioning_enabled",
+        "cloudsql_instance_automated_backups",
         "logging_sink_created"
       ]
     },
@@ -434,12 +415,11 @@
         }
       ],
       "Checks": [
-        "cloudstorage_bucket_encryption",
-        "cloudsql_instance_encryption_enabled",
-        "compute_disk_encryption_enabled",
-        "bigquery_dataset_cmek_encryption",
+        "cloudsql_instance_cmek_encryption_enabled",
+        "compute_instance_encryption_with_csek_enabled",
+        "bigquery_dataset_cmk_encryption",
         "kms_key_rotation_enabled",
-        "cloudsql_instance_ssl_required"
+        "cloudsql_instance_ssl_connections"
       ]
     }
   ]
diff --git a/prowler/compliance/gcp/iso27001_2022_gcp.json b/prowler/compliance/gcp/iso27001_2022_gcp.json
index 9b814e7769..c43afcc810 100644
--- a/prowler/compliance/gcp/iso27001_2022_gcp.json
+++ b/prowler/compliance/gcp/iso27001_2022_gcp.json
@@ -247,8 +247,7 @@
       "Checks": [
         "iam_sa_user_managed_key_rotate_90_days",
         "kms_key_rotation_enabled",
-        "apikeys_key_rotated_in_90_days",
-        "kms_key_rotation_enabled"
+        "apikeys_key_rotated_in_90_days"
       ]
     },
     {
diff --git a/prowler/compliance/gcp/nis2_gcp.json b/prowler/compliance/gcp/nis2_gcp.json
index 14d5477dc0..ba6fb849c3 100644
--- a/prowler/compliance/gcp/nis2_gcp.json
+++ b/prowler/compliance/gcp/nis2_gcp.json
@@ -889,7 +889,6 @@
         "dns_dnssec_disabled",
         "dns_rsasha1_in_use_to_key_sign_in_dnssec",
         "dns_rsasha1_in_use_to_zone_sign_in_dnssec",
-        "bigquery_dataset_cmk_encryption",
         "bigquery_table_cmk_encryption",
         "compute_instance_encryption_with_csek_enabled",
         "dataproc_encrypted_with_cmks_disabled"
diff --git a/prowler/compliance/gcp/prowler_threatscore_gcp.json b/prowler/compliance/gcp/prowler_threatscore_gcp.json
index 923a1acfc2..5d8fb7de62 100644
--- a/prowler/compliance/gcp/prowler_threatscore_gcp.json
+++ b/prowler/compliance/gcp/prowler_threatscore_gcp.json
@@ -63,7 +63,7 @@
       "Id": "1.2.1",
       "Description": "Ensure That There Are Only GCP-Managed Service Account Keys for Each Service Account",
       "Checks": [
-        "iam_sa_no_user_managed_keysiam_sa_no_user_managed_keys"
+        "iam_sa_no_user_managed_keys"
       ],
       "Attributes": [
         {
diff --git a/prowler/compliance/gcp/soc2_gcp.json b/prowler/compliance/gcp/soc2_gcp.json
index 8450967e29..4d093162f7 100644
--- a/prowler/compliance/gcp/soc2_gcp.json
+++ b/prowler/compliance/gcp/soc2_gcp.json
@@ -568,8 +568,7 @@
         "cloudstorage_bucket_uniform_bucket_level_access",
         "bigquery_dataset_cmk_encryption",
         "bigquery_table_cmk_encryption",
-        "compute_instance_confidential_computing_enabled",
-        "pubsub_topic_encryption_with_cmk"
+        "compute_instance_confidential_computing_enabled"
       ]
     },
     {
diff --git a/prowler/compliance/github/cis_1.0_github.json b/prowler/compliance/github/cis_1.0_github.json
index 2a60df6bcd..308a241bc6 100644
--- a/prowler/compliance/github/cis_1.0_github.json
+++ b/prowler/compliance/github/cis_1.0_github.json
@@ -1688,27 +1688,6 @@
         }
       ]
     },
-    {
-      "Id": "2.4.1",
-      "Description": "Sign all artifacts in all releases with user or organization keys.",
-      "Checks": [],
-      "Attributes": [
-        {
-          "Section": "2 Build Pipelines",
-          "Subsection": "2.4 Pipeline Integrity",
-          "Profile": "Level 2",
-          "AssessmentStatus": "Manual",
-          "Description": "Sign all artifacts in all releases with user or organization keys.",
-          "RationaleStatement": "Signing artifacts is used to validate both their integrity and security. Organizations signal that artifacts may be trusted and they themselves produced them by ensuring that every artifact is properly signed. The presence of this signature also makes potentially malicious activity far more difficult.",
-          "ImpactStatement": "",
-          "RemediationProcedure": "For every artifact in every release, verify that all are properly signed.",
-          "AuditProcedure": "Ensure every artifact in every release is signed.",
-          "AdditionalInformation": "",
-          "References": "",
-          "DefaultValue": ""
-        }
-      ]
-    },
     {
       "Id": "2.4.2",
       "Description": "External dependencies may be public packages needed in the pipeline, or perhaps the public image being used for the build worker. Lock these external dependencies in every build pipeline.",
diff --git a/prowler/compliance/kubernetes/iso27001_2022_kubernetes.json b/prowler/compliance/kubernetes/iso27001_2022_kubernetes.json
index 73f1b1266b..131fa9d683 100644
--- a/prowler/compliance/kubernetes/iso27001_2022_kubernetes.json
+++ b/prowler/compliance/kubernetes/iso27001_2022_kubernetes.json
@@ -1132,7 +1132,6 @@
         "etcd_no_auto_tls",
         "etcd_no_peer_auto_tls",
         "etcd_peer_tls_config",
-        "etcd_tls_encryption",
         "kubelet_tls_cert_and_key"
       ]
     },
diff --git a/prowler/compliance/m365/cis_4.0_m365.json b/prowler/compliance/m365/cis_4.0_m365.json
index 5ca427d0aa..7647bad3eb 100644
--- a/prowler/compliance/m365/cis_4.0_m365.json
+++ b/prowler/compliance/m365/cis_4.0_m365.json
@@ -9,7 +9,7 @@
       "Id": "1.1.1",
       "Description": "Administrative accounts are special privileged accounts that could have varying levels of access to data, users, and settings. Regular user accounts should never be utilized for administrative tasks and care should be taken, in the case of a hybrid environment, to keep Administrative accounts separated from on-prem accounts. Administrative accounts should not have applications assigned so that they have no access to potentially vulnerable services (EX. email, Teams, SharePoint, etc.) and only access to perform tasks as needed for administrative purposes.Ensure administrative accounts are not `On-premises sync enabled`.",
       "Checks": [
-        "entra_admin_account_cloud_only"
+        "entra_admin_users_cloud_only"
       ],
       "Attributes": [
         {
@@ -1357,7 +1357,7 @@
       "Id": "5.2.2.8",
       "Description": "When a Conditional Access policy targets the Microsoft Admin Portals cloud app, the policy is enforced for tokens issued to application IDs of the following Microsoft administrative portals:- Azure portal- Exchange admin center- Microsoft 365 admin center- Microsoft 365 Defender portal- Microsoft Entra admin center- Microsoft Intune admin center- Microsoft Purview compliance portal- Power Platform admin center- SharePoint admin center- Microsoft Teams admin center`Microsoft Admin Portals` should be restricted to specific pre-determined administrative roles.",
       "Checks": [
-        "entra_admin_portals_role_limited_access"
+        "entra_admin_portals_access_restriction"
       ],
       "Attributes": [
         {
diff --git a/prowler/compliance/m365/iso27001_2022_m365.json b/prowler/compliance/m365/iso27001_2022_m365.json
index 238002d0b6..e7bf650ac7 100644
--- a/prowler/compliance/m365/iso27001_2022_m365.json
+++ b/prowler/compliance/m365/iso27001_2022_m365.json
@@ -51,13 +51,10 @@
         "admincenter_users_between_two_and_four_global_admins",
         "defender_antispam_outbound_policy_configured",
         "entra_admin_consent_workflow_enabled",
-        "entra_admin_portals_access_restriction",
         "entra_admin_users_cloud_only",
-        "entra_admin_users_mfa_enabled",
         "entra_admin_users_phishing_resistant_mfa_enabled",
         "entra_admin_users_sign_in_frequency_enabled",
-        "entra_policy_ensure_default_user_cannot_create_tenants",
-        "entra_policy_guest_invite_only_for_admin_roles"
+        "entra_policy_ensure_default_user_cannot_create_tenants"
       ]
     },
     {
@@ -119,7 +116,7 @@
         "defender_safelinks_policy_enabled",
         "defender_zap_for_teams_enabled",
         "defenderxdr_endpoint_privileged_user_exposed_credentials",
-        "defender_identity_health_issues_no_open",
+        "defenderidentity_health_issues_no_open",
         "entra_admin_users_phishing_resistant_mfa_enabled",
         "entra_conditional_access_policy_block_elevated_insider_risk",
         "entra_conditional_access_policy_block_o365_elevated_insider_risk",
@@ -186,7 +183,6 @@
         "sharepoint_guest_sharing_restricted",
         "sharepoint_modern_authentication_required",
         "sharepoint_onedrive_sync_restricted_unmanaged_devices",
-        "teams_external_file_sharing_restricted",
         "teams_external_file_sharing_restricted"
       ]
     },
@@ -780,7 +776,7 @@
         "defender_malware_policy_comprehensive_attachments_filter_applied",
         "defender_malware_policy_notifications_internal_users_malware_enabled",
         "defenderxdr_endpoint_privileged_user_exposed_credentials",
-        "defender_identity_health_issues_no_open"
+        "defenderidentity_health_issues_no_open"
       ]
     },
     {
diff --git a/tests/lib/check/compliance_catalog_integrity_test.py b/tests/lib/check/compliance_catalog_integrity_test.py
new file mode 100644
index 0000000000..565cb1c916
--- /dev/null
+++ b/tests/lib/check/compliance_catalog_integrity_test.py
@@ -0,0 +1,64 @@
+import os
+from functools import lru_cache
+
+import pytest
+
+from prowler.lib.check.compliance_models import load_compliance_framework_universal
+from prowler.lib.check.utils import recover_checks_from_provider
+
+COMPLIANCE_DIR = os.path.normpath(
+    os.path.join(os.path.dirname(__file__), "..", "..", "..", "prowler", "compliance")
+)
+
+
+def _compliance_jsons() -> list[str]:
+    paths = []
+    for root, _, files in os.walk(COMPLIANCE_DIR):
+        paths.extend(os.path.join(root, f) for f in files if f.endswith(".json"))
+    return sorted(paths)
+
+
+@lru_cache
+def _check_ids(provider: str) -> frozenset[str]:
+    return frozenset(name for name, _ in recover_checks_from_provider(provider))
+
+
+@pytest.mark.parametrize("json_path", _compliance_jsons(), ids=os.path.basename)
+class TestComplianceCatalogIntegrity:
+    def test_requirement_ids_are_unique(self, json_path):
+        framework = load_compliance_framework_universal(json_path)
+        assert framework is not None, f"Failed to load {json_path}"
+
+        ids = [requirement.id for requirement in framework.requirements]
+        duplicated = sorted({rid for rid in ids if ids.count(rid) > 1})
+        assert not duplicated, f"Duplicated requirement ids: {duplicated}"
+
+    def test_requirements_do_not_repeat_checks(self, json_path):
+        framework = load_compliance_framework_universal(json_path)
+        assert framework is not None, f"Failed to load {json_path}"
+
+        repeated = sorted(
+            {
+                (requirement.id, provider, check)
+                for requirement in framework.requirements
+                for provider, checks in requirement.checks.items()
+                for check in checks
+                if checks.count(check) > 1
+            }
+        )
+        assert not repeated, f"Checks listed twice in a requirement: {repeated}"
+
+    def test_referenced_checks_exist_for_provider(self, json_path):
+        framework = load_compliance_framework_universal(json_path)
+        assert framework is not None, f"Failed to load {json_path}"
+
+        unknown = sorted(
+            {
+                (provider, check)
+                for requirement in framework.requirements
+                for provider, checks in requirement.checks.items()
+                for check in checks
+                if check not in _check_ids(provider)
+            }
+        )
+        assert not unknown, f"Checks that do not exist for their provider: {unknown}"

From 90fc815d3c06391601132cbb2472ad568ac30d41 Mon Sep 17 00:00:00 2001
From: Prowler Bot <bot@prowler.com>
Date: Thu, 3 Sep 2026 14:23:50 +0200
Subject: [PATCH 34/77] chore(release): Bump versions to v5.42.0 (#12713)

Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
Co-authored-by: pedrooot <pedromarting3@gmail.com>
---
 .env                                              | 2 +-
 api/pyproject.toml                                | 2 +-
 api/src/backend/api/specs/v1.yaml                 | 2 +-
 api/uv.lock                                       | 2 +-
 docs/getting-started/installation/prowler-app.mdx | 4 ++--
 prowler/config/config.py                          | 2 +-
 pyproject.toml                                    | 2 +-
 uv.lock                                           | 2 +-
 8 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.env b/.env
index f1bf980b5b..018b25a8a9 100644
--- a/.env
+++ b/.env
@@ -158,7 +158,7 @@ SENTRY_RELEASE=local
 # REO_DEV_CLIENT_ID=
 
 #### Prowler release version ####
-NEXT_PUBLIC_PROWLER_RELEASE_VERSION=v5.41.0
+NEXT_PUBLIC_PROWLER_RELEASE_VERSION=v5.42.0
 
 # Social login credentials
 SOCIAL_GOOGLE_OAUTH_CALLBACK_URL="${AUTH_URL}/api/auth/callback/google"
diff --git a/api/pyproject.toml b/api/pyproject.toml
index 1987534a30..f9af7f04be 100644
--- a/api/pyproject.toml
+++ b/api/pyproject.toml
@@ -71,7 +71,7 @@ name = "prowler-api"
 package-mode = false
 # Needed for the SDK compatibility
 requires-python = ">=3.11,<3.13"
-version = "1.42.0"
+version = "1.43.0"
 
 # Shared ruff baseline (kept in sync with mcp_server/pyproject.toml).
 # target-version tracks this project's lowest supported Python.
diff --git a/api/src/backend/api/specs/v1.yaml b/api/src/backend/api/specs/v1.yaml
index 9c321bdf13..4b5cebdb2e 100644
--- a/api/src/backend/api/specs/v1.yaml
+++ b/api/src/backend/api/specs/v1.yaml
@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: Prowler API
-  version: 1.42.0
+  version: 1.43.0
   description: |-
     Prowler API specification.
 
diff --git a/api/uv.lock b/api/uv.lock
index f412da19a6..bfaad1f98a 100644
--- a/api/uv.lock
+++ b/api/uv.lock
@@ -4938,7 +4938,7 @@ dependencies = [
 
 [[package]]
 name = "prowler-api"
-version = "1.42.0"
+version = "1.43.0"
 source = { virtual = "." }
 dependencies = [
     { name = "cartography" },
diff --git a/docs/getting-started/installation/prowler-app.mdx b/docs/getting-started/installation/prowler-app.mdx
index 0d1703eb89..e9ec980e09 100644
--- a/docs/getting-started/installation/prowler-app.mdx
+++ b/docs/getting-started/installation/prowler-app.mdx
@@ -128,8 +128,8 @@ To update the environment file:
 Edit the `.env` file and change version values:
 
 ```env
-PROWLER_UI_VERSION="5.40.0"
-PROWLER_API_VERSION="5.40.0"
+PROWLER_UI_VERSION="5.41.0"
+PROWLER_API_VERSION="5.41.0"
 ```
 
 <Note>
diff --git a/prowler/config/config.py b/prowler/config/config.py
index 1c0ae406cc..f1aa774ce2 100644
--- a/prowler/config/config.py
+++ b/prowler/config/config.py
@@ -52,7 +52,7 @@ class _MutableTimestamp:
 
 timestamp = _MutableTimestamp(datetime.today())
 timestamp_utc = _MutableTimestamp(datetime.now(timezone.utc))
-prowler_version = "5.41.0"
+prowler_version = "5.42.0"
 html_logo_url = "https://github.com/prowler-cloud/prowler/"
 square_logo_img = "https://raw.githubusercontent.com/prowler-cloud/prowler/dc7d2d5aeb92fdf12e8604f42ef6472cd3e8e889/docs/img/prowler-logo-black.png"
 aws_logo = "https://user-images.githubusercontent.com/38561120/235953920-3e3fba08-0795-41dc-b480-9bea57db9f2e.png"
diff --git a/pyproject.toml b/pyproject.toml
index 12c599420d..cabf2740f7 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -143,7 +143,7 @@ maintainers = [{name = "Prowler Engineering", email = "engineering@prowler.com"}
 name = "prowler"
 readme = "README.md"
 requires-python = ">=3.10,<3.14"
-version = "5.41.0"
+version = "5.42.0"
 
 [project.scripts]
 prowler = "prowler.__main__:prowler"
diff --git a/uv.lock b/uv.lock
index ea51810322..fe04be07b8 100644
--- a/uv.lock
+++ b/uv.lock
@@ -3752,7 +3752,7 @@ wheels = [
 
 [[package]]
 name = "prowler"
-version = "5.41.0"
+version = "5.42.0"
 source = { editable = "." }
 dependencies = [
     { name = "alibabacloud-actiontrail20200706" },

From 6827eef3478330f59e5031bb254a2ba81da24ab5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Fri, 4 Sep 2026 09:12:15 +0200
Subject: [PATCH 35/77] fix(ci): don't fail setup-python-uv on empty grep match
 (#12737)

---
 .github/actions/setup-python-uv/action.yml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/.github/actions/setup-python-uv/action.yml b/.github/actions/setup-python-uv/action.yml
index d3293004a9..4dba54e7f4 100644
--- a/.github/actions/setup-python-uv/action.yml
+++ b/.github/actions/setup-python-uv/action.yml
@@ -46,6 +46,17 @@ runs:
       env:
         GITHUB_TOKEN: ${{ github.token }}
       run: |
+        if grep -q "prowler-cloud/prowler" uv.lock; then
+          :
+        else
+          status=$?
+          if [ "$status" -ne 1 ]; then
+            echo "::error::grep failed reading uv.lock (exit code $status)."
+            exit "$status"
+          fi
+          echo "No prowler-cloud/prowler entry in uv.lock, nothing to update."
+          exit 0
+        fi
         LATEST_COMMIT=$(curl -sf --retry 3 --retry-all-errors --retry-delay 2 --retry-max-time 60 \
           -H "Authorization: Bearer ${GITHUB_TOKEN}" \
           -H "Accept: application/vnd.github+json" \
@@ -66,6 +77,17 @@ runs:
       env:
         GITHUB_TOKEN: ${{ github.token }}
       run: |
+        if grep -q "prowler-cloud/prowler" uv.lock; then
+          :
+        else
+          status=$?
+          if [ "$status" -ne 1 ]; then
+            echo "::error::grep failed reading uv.lock (exit code $status)."
+            exit "$status"
+          fi
+          echo "No prowler-cloud/prowler entry in uv.lock, nothing to update."
+          exit 0
+        fi
         LATEST_COMMIT=$(curl -sf --retry 3 --retry-all-errors --retry-delay 2 --retry-max-time 60 \
           -H "Authorization: Bearer ${GITHUB_TOKEN}" \
           -H "Accept: application/vnd.github+json" \

From 1746e1052bff108f7ded981f46a0c31e2f2edbe9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Fri, 4 Sep 2026 10:09:17 +0200
Subject: [PATCH 36/77] fix(ci): suppress unfixed x/crypto CVEs from Trivy
 binary (#12740)

---
 .grype.yaml       | 13 +++++++++++++
 .trivyignore.yaml | 21 +++++++++++++++++++++
 2 files changed, 34 insertions(+)

diff --git a/.grype.yaml b/.grype.yaml
index 17a3c8474b..38517d7af5 100644
--- a/.grype.yaml
+++ b/.grype.yaml
@@ -27,6 +27,19 @@ ignore:
     package:
       name: google.golang.org/grpc
       version: v1.82.1
+  # CVE-2026-56855 / CVE-2026-78662 are the same temporary exception documented in
+  # .trivyignore.yaml: Trivy 0.74.0 still embeds golang.org/x/crypto v0.55.0, while the
+  # 0.56.0 fix (published 2026-09-02) hasn't reached any Trivy release, or even Trivy
+  # main, yet. Pinned to the embedded version so the rule stops matching on its own once
+  # Trivy bumps it. Remove with the Trivy exception by 2026-10-15.
+  - vulnerability: CVE-2026-56855
+    package:
+      name: golang.org/x/crypto
+      version: v0.55.0
+  - vulnerability: CVE-2026-78662
+    package:
+      name: golang.org/x/crypto
+      version: v0.55.0
   - vulnerability: CVE-2026-56852
     package:
       name: golang.org/x/text
diff --git a/.trivyignore.yaml b/.trivyignore.yaml
index 23fd083b46..28c3b7f0a9 100644
--- a/.trivyignore.yaml
+++ b/.trivyignore.yaml
@@ -176,6 +176,27 @@ vulnerabilities:
       - "pkg:golang/google.golang.org/grpc"
     expired_at: 2026-10-15
 
+  # CVE-2026-56855 and CVE-2026-78662 are DoS deadlocks in x/crypto/ssh: a malicious peer
+  # can flood or misuse channel messages (RFC 4254) to block the whole connection.
+  # Fixed in golang.org/x/crypto v0.56.0 (published 2026-09-02). Trivy 0.74.0, the latest
+  # published release and the version the images ship, still pins v0.55.0, and Trivy main
+  # has not bumped it either:
+  # https://github.com/aquasecurity/trivy/blob/v0.74.0/go.mod
+  # x/crypto/ssh is pulled in transitively through go-git's ssh transport, the same
+  # dependency chain as the CVE-2026-71556 entry above. Prowler invokes Trivy only with
+  # `fs` on an existing local path or with `image`; it never asks Trivy to clone over SSH
+  # or to run `trivy server`, so no SSH connection -- as client or server -- ever exists in
+  # the image and the affected code path is not reachable. Remove this temporary
+  # suppression as soon as a fixed Trivy release is available.
+  - id: CVE-2026-56855
+    purls:
+      - "pkg:golang/golang.org/x/crypto@v0.55.0"
+    expired_at: 2026-10-15
+  - id: CVE-2026-78662
+    purls:
+      - "pkg:golang/golang.org/x/crypto@v0.55.0"
+    expired_at: 2026-10-15
+
   - id: CVE-2026-56852
     purls:
       - "pkg:golang/golang.org/x/text"

From 8bdb597921fcc4abf0514ecbcbccbdcddb288cab Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Fri, 4 Sep 2026 11:13:25 +0200
Subject: [PATCH 37/77] perf(api): speed up compliance overview ingestion
 (#12738)

---
 ...ompliance-overviews-ingest-perf.changed.md |   1 +
 api/src/backend/tasks/jobs/scan.py            |  93 +++---
 api/src/backend/tasks/tests/test_scan.py      | 295 ++++++++++++++----
 3 files changed, 287 insertions(+), 102 deletions(-)
 create mode 100644 api/changelog.d/compliance-overviews-ingest-perf.changed.md

diff --git a/api/changelog.d/compliance-overviews-ingest-perf.changed.md b/api/changelog.d/compliance-overviews-ingest-perf.changed.md
new file mode 100644
index 0000000000..6e833d184e
--- /dev/null
+++ b/api/changelog.d/compliance-overviews-ingest-perf.changed.md
@@ -0,0 +1 @@
+Speed up compliance overview ingestion by reading ThreatScore mappings from the compliance template instead of each finding, generating time-ordered `uuid7` row ids and grouping inserted rows by framework and requirement
diff --git a/api/src/backend/tasks/jobs/scan.py b/api/src/backend/tasks/jobs/scan.py
index 0a8db605c0..8b57ebeecd 100644
--- a/api/src/backend/tasks/jobs/scan.py
+++ b/api/src/backend/tasks/jobs/scan.py
@@ -5,7 +5,6 @@ import json
 import random
 import re
 import time
-import uuid
 from collections import defaultdict
 from collections.abc import Callable, Iterable
 from datetime import UTC, datetime
@@ -73,6 +72,7 @@ from tasks.jobs.queries import (
     COMPLIANCE_UPSERT_TENANT_SUMMARY_SQL,
 )
 from tasks.utils import CustomEncoder, batched
+from uuid6 import uuid7
 
 logger = get_task_logger(__name__)
 
@@ -1756,32 +1756,27 @@ def aggregate_findings(tenant_id: str, scan_id: str):
 
 
 def _aggregate_findings_by_region(
-    tenant_id: str, scan_id: str, modeled_threatscore_compliance_id: str
+    tenant_id: str,
+    scan_id: str,
+    normalized_threatscore_id: str,
+    threatscore_requirements_by_check: dict[str, list[str]],
 ) -> tuple[dict, dict]:
     """
     Aggregate findings by region using streaming, column-scoped ORM reads.
 
     Reads only the consumed columns as tuples via ``values_list`` and streams
     them with ``.iterator()``, using the denormalized ``resource_regions`` array
-    instead of ``prefetch_related("resources")``. ``resource_regions`` mirrors the
-    regions of a finding's related resources, so it yields the same per-region
-    tally without joining the resource table.
-
-    Args:
-        tenant_id: Tenant UUID
-        scan_id: Scan UUID
-        modeled_threatscore_compliance_id: ID for ThreatScore compliance framework
+    instead of ``prefetch_related("resources")``. ThreatScore requirement ids
+    are resolved per ``check_id`` from ``threatscore_requirements_by_check``.
 
     Returns:
         tuple: (check_status_by_region, findings_count_by_compliance)
             - check_status_by_region: {region: {check_id: status}}
-            - findings_count_by_compliance: {region: {normalized_id: {requirement_id: {total, pass}}}}
+            - findings_count_by_compliance: {region: {normalized_threatscore_id: {requirement_id: {total, pass}}}}
     """
     check_status_by_region: dict = {}
     findings_count_by_compliance: dict = {}
 
-    normalized_id = re.sub(r"[^a-z0-9]", "", modeled_threatscore_compliance_id.lower())
-
     with rls_transaction(tenant_id, using=READ_REPLICA_ALIAS):
         findings = (
             Finding.all_objects.filter(
@@ -1790,14 +1785,12 @@ def _aggregate_findings_by_region(
                 muted=False,
                 status__in=["PASS", "FAIL"],
             )
-            .values_list("check_id", "status", "resource_regions", "compliance")
+            .values_list("check_id", "status", "resource_regions")
             .iterator(chunk_size=DJANGO_FINDINGS_BATCH_SIZE)
         )
 
-        for check_id, status, resource_regions, compliance in findings:
-            threatscore_requirements = (compliance or {}).get(
-                modeled_threatscore_compliance_id
-            )
+        for check_id, status, resource_regions in findings:
+            threatscore_requirements = threatscore_requirements_by_check.get(check_id)
 
             for region in resource_regions or ():
                 # Priority: FAIL > any other status
@@ -1809,7 +1802,7 @@ def _aggregate_findings_by_region(
                 if threatscore_requirements:
                     compliance_key = findings_count_by_compliance.setdefault(
                         region, {}
-                    ).setdefault(normalized_id, {})
+                    ).setdefault(normalized_threatscore_id, {})
 
                     for requirement_id in threatscore_requirements:
                         requirement_stats = compliance_key.setdefault(
@@ -1848,15 +1841,28 @@ def create_compliance_requirements(tenant_id: str, scan_id: str):
         compliance_template = PROWLER_COMPLIANCE_OVERVIEW_TEMPLATE[
             provider_instance.provider
         ]
-        modeled_threatscore_compliance_id = "ProwlerThreatScore-1.0"
+        normalized_threatscore_id = _normalized_compliance_key(
+            "ProwlerThreatScore", "1.0"
+        )
 
         requirement_lookup: dict[str, list[tuple[str, str]]] = {}
+        threatscore_requirements_by_check: dict[str, list[str]] = {}
         for compliance_id, compliance in compliance_template.items():
+            is_threatscore = (
+                _normalized_compliance_key(
+                    compliance["framework"], compliance["version"]
+                )
+                == normalized_threatscore_id
+            )
             for requirement_id, requirement in compliance["requirements"].items():
                 for check_id in requirement["checks"].keys():
                     requirement_lookup.setdefault(check_id, []).append(
                         (compliance_id, requirement_id)
                     )
+                    if is_threatscore:
+                        threatscore_requirements_by_check.setdefault(
+                            check_id, []
+                        ).append(requirement_id)
 
         regions = []
         requirements_created = 0
@@ -1869,7 +1875,10 @@ def create_compliance_requirements(tenant_id: str, scan_id: str):
             # Aggregate findings by region using SQL for optimal performance
             check_status_by_region, findings_count_by_compliance = (
                 _aggregate_findings_by_region(
-                    tenant_id, scan_id, modeled_threatscore_compliance_id
+                    tenant_id,
+                    scan_id,
+                    normalized_threatscore_id,
+                    threatscore_requirements_by_check,
                 )
             )
 
@@ -1934,23 +1943,35 @@ def create_compliance_requirements(tenant_id: str, scan_id: str):
             # Yield rows lazily (consumed batch-by-batch by COPY) so peak memory
             # stays bounded; tally requirement_statuses in the same pass. The
             # ORM fallback re-iterates from scratch, so the tally resets first.
+            # Region is the innermost loop so consecutive rows share the leading
+            # columns of the table's secondary indexes.
             def _iter_compliance_requirement_rows():
                 requirement_statuses.clear()
-                for region in regions:
-                    region_stats = region_requirement_stats.get(region, {})
-                    region_findings = findings_count_by_compliance.get(region, {})
-                    for (
-                        compliance_id,
-                        framework,
-                        version,
-                        modeled_compliance_id,
-                        requirements,
-                    ) in compliance_plan:
-                        compliance_stats = region_stats.get(compliance_id, {})
-                        compliance_findings = region_findings.get(
-                            modeled_compliance_id, {}
+                for (
+                    compliance_id,
+                    framework,
+                    version,
+                    modeled_compliance_id,
+                    requirements,
+                ) in compliance_plan:
+                    stats_by_region = [
+                        (
+                            region,
+                            region_requirement_stats.get(region, {}).get(
+                                compliance_id, {}
+                            ),
+                            findings_count_by_compliance.get(region, {}).get(
+                                modeled_compliance_id, {}
+                            ),
                         )
-                        for requirement_id, description, total_checks in requirements:
+                        for region in regions
+                    ]
+                    for requirement_id, description, total_checks in requirements:
+                        for (
+                            region,
+                            compliance_stats,
+                            compliance_findings,
+                        ) in stats_by_region:
                             stats = compliance_stats.get(requirement_id)
                             if stats:
                                 passed_checks = stats["passed_checks"]
@@ -1981,7 +2002,7 @@ def create_compliance_requirements(tenant_id: str, scan_id: str):
                                 requirement_statuses[key]["pass_count"] += 1
 
                             yield {
-                                "id": uuid.uuid4(),
+                                "id": uuid7(),
                                 "tenant_id": tenant_id_str,
                                 "inserted_at": utc_datetime_now,
                                 "compliance_id": compliance_id,
diff --git a/api/src/backend/tasks/tests/test_scan.py b/api/src/backend/tasks/tests/test_scan.py
index 8027588398..0cee24351e 100644
--- a/api/src/backend/tasks/tests/test_scan.py
+++ b/api/src/backend/tasks/tests/test_scan.py
@@ -1,6 +1,5 @@
 import csv
 import json
-import re
 import uuid
 from collections.abc import MutableMapping
 from contextlib import contextmanager
@@ -10,6 +9,7 @@ from unittest.mock import MagicMock, patch
 
 import pytest
 from api.db_router import MainRouter
+from api.db_utils import rls_transaction
 from api.exceptions import ProviderConnectionError, ProviderDeletedException
 from api.models import (
     Finding,
@@ -2795,6 +2795,167 @@ class TestCreateComplianceRequirements:
 
         assert count_after_first > 0
         assert count_after_second == count_after_first
+        with rls_transaction(tenant_id):
+            row_versions = {
+                row_id.version
+                for row_id in ComplianceRequirementOverview.objects.filter(
+                    scan_id=scan_id
+                ).values_list("id", flat=True)
+            }
+        assert row_versions == {7}
+
+    def test_create_compliance_requirements_threatscore_counts_from_template(
+        self,
+        tenants_fixture,
+        scans_fixture,
+        aws_provider,
+        findings_fixture,
+    ):
+        """ThreatScore finding counts are derived from the template mapping,
+        not from each finding's stored ``compliance`` payload."""
+        from api.models import ComplianceRequirementOverview
+
+        with patch(
+            "tasks.jobs.scan.PROWLER_COMPLIANCE_OVERVIEW_TEMPLATE"
+        ) as mock_compliance_template:
+            tenant_id = str(tenants_fixture[0].id)
+            scan_id = str(scans_fixture[0].id)
+
+            mock_compliance_template.__getitem__.return_value = {
+                "prowler_threatscore_aws": {
+                    "framework": "ProwlerThreatScore",
+                    "version": "1.0",
+                    "requirements": {
+                        "1.1.1": {
+                            "description": "ThreatScore requirement",
+                            "checks": {"test_check_id": None},
+                        },
+                        "1.1.2": {
+                            "description": "Unrelated requirement",
+                            "checks": {"other_check_id": None},
+                        },
+                    },
+                },
+                "other_framework": {
+                    "framework": "Other",
+                    "version": "2.0",
+                    "requirements": {
+                        "a": {
+                            "description": "Same check, other framework",
+                            "checks": {"test_check_id": None},
+                        },
+                    },
+                },
+            }
+
+            create_compliance_requirements(tenant_id, scan_id)
+
+        with rls_transaction(tenant_id):
+            counted = sum(
+                len(finding.resource_regions or [])
+                for finding in Finding.all_objects.filter(
+                    scan_id=scan_id,
+                    muted=False,
+                    status__in=["PASS", "FAIL"],
+                    check_id="test_check_id",
+                )
+            )
+            rows = list(
+                ComplianceRequirementOverview.objects.filter(
+                    scan_id=scan_id
+                ).values_list("compliance_id", "requirement_id", "total_findings")
+            )
+        assert counted > 0
+        assert (
+            sum(
+                total
+                for compliance_id, requirement_id, total in rows
+                if (compliance_id, requirement_id)
+                == ("prowler_threatscore_aws", "1.1.1")
+            )
+            == counted
+        )
+        assert all(
+            total == 0
+            for compliance_id, requirement_id, total in rows
+            if (compliance_id, requirement_id) == ("prowler_threatscore_aws", "1.1.2")
+        )
+        assert all(
+            total == 0
+            for compliance_id, _, total in rows
+            if compliance_id == "other_framework"
+        )
+
+    def test_create_compliance_requirements_rows_across_regions_and_frameworks(
+        self,
+        tenants_fixture,
+        scans_fixture,
+        aws_provider,
+    ):
+        from api.models import ComplianceRequirementOverview
+
+        tenant_id = str(tenants_fixture[0].id)
+        scan_id = str(scans_fixture[0].id)
+        check_status_by_region = {
+            "us-east-1": {"check_a": "FAIL", "check_b": "PASS"},
+            "eu-west-1": {"check_a": "PASS"},
+        }
+        template = {
+            "fw_one": {
+                "framework": "One",
+                "version": "1",
+                "requirements": {
+                    "r1": {"description": "a", "checks": {"check_a": None}},
+                    "r2": {
+                        "description": "a+b",
+                        "checks": {"check_a": None, "check_b": None},
+                    },
+                },
+            },
+            "fw_two": {
+                "framework": "Two",
+                "version": "2",
+                "requirements": {
+                    "m1": {"description": "manual", "checks": {}},
+                },
+            },
+        }
+
+        with (
+            patch(
+                "tasks.jobs.scan.PROWLER_COMPLIANCE_OVERVIEW_TEMPLATE"
+            ) as mock_compliance_template,
+            patch(
+                "tasks.jobs.scan._aggregate_findings_by_region",
+                return_value=(check_status_by_region, {}),
+            ),
+        ):
+            mock_compliance_template.__getitem__.return_value = template
+            result = create_compliance_requirements(tenant_id, scan_id)
+
+        assert result["requirements_created"] == 6
+        with rls_transaction(tenant_id):
+            rows = set(
+                ComplianceRequirementOverview.objects.filter(
+                    scan_id=scan_id
+                ).values_list(
+                    "compliance_id",
+                    "requirement_id",
+                    "region",
+                    "requirement_status",
+                    "passed_checks",
+                    "failed_checks",
+                    "total_checks",
+                )
+            )
+        assert rows == {
+            ("fw_one", "r1", "us-east-1", "FAIL", 0, 1, 1),
+            ("fw_one", "r1", "eu-west-1", "PASS", 1, 0, 1),
+            ("fw_one", "r2", "us-east-1", "FAIL", 1, 1, 2),
+            ("fw_one", "r2", "eu-west-1", "PASS", 1, 0, 2),
+            ("fw_two", "m1", "us-east-1", "MANUAL", 0, 0, 0),
+            ("fw_two", "m1", "eu-west-1", "MANUAL", 0, 0, 0),
+        }
 
     def test_create_compliance_requirements_kubernetes_provider(
         self,
@@ -4723,17 +4884,11 @@ class TestAggregateFindingsByRegion:
         """Test function returns correct data structure."""
         tenant_id = str(uuid.uuid4())
         scan_id = str(uuid.uuid4())
-        modeled_threatscore_compliance_id = "ProwlerThreatScore-1.0"
+        normalized_id = "prowlerthreatscore10"
 
-        # (check_id, status, resource_regions, compliance) tuples
-        finding_rows = [
-            (
-                "check1",
-                "FAIL",
-                ["us-east-1"],
-                {modeled_threatscore_compliance_id: ["req1", "req2"]},
-            )
-        ]
+        # (check_id, status, resource_regions) tuples
+        finding_rows = [("check1", "FAIL", ["us-east-1"])]
+        threatscore_by_check = {"check1": ["req1", "req2"]}
 
         mock_queryset = MagicMock()
         mock_queryset.values_list.return_value = mock_queryset
@@ -4747,13 +4902,16 @@ class TestAggregateFindingsByRegion:
 
         check_status_by_region, findings_count_by_compliance = (
             _aggregate_findings_by_region(
-                tenant_id, scan_id, modeled_threatscore_compliance_id
+                tenant_id,
+                scan_id,
+                normalized_id,
+                threatscore_by_check,
             )
         )
 
         # Streaming query contract: column-scoped values_list + iterator
         mock_queryset.values_list.assert_called_once_with(
-            "check_id", "status", "resource_regions", "compliance"
+            "check_id", "status", "resource_regions"
         )
         mock_queryset.iterator.assert_called_once()
 
@@ -4774,13 +4932,14 @@ class TestAggregateFindingsByRegion:
         """Test that FAIL status takes priority over other statuses."""
         tenant_id = str(uuid.uuid4())
         scan_id = str(uuid.uuid4())
-        modeled_threatscore_compliance_id = "ProwlerThreatScore-1.0"
+        normalized_id = "prowlerthreatscore10"
 
         # Same check/region: PASS first, then FAIL — FAIL must win
         finding_rows = [
-            ("check1", "PASS", ["us-east-1"], {}),
-            ("check1", "FAIL", ["us-east-1"], {}),
+            ("check1", "PASS", ["us-east-1"]),
+            ("check1", "FAIL", ["us-east-1"]),
         ]
+        threatscore_by_check = {}
 
         mock_queryset = MagicMock()
         mock_queryset.values_list.return_value = mock_queryset
@@ -4793,12 +4952,15 @@ class TestAggregateFindingsByRegion:
         mock_findings_filter.return_value = mock_queryset
 
         check_status_by_region, _ = _aggregate_findings_by_region(
-            tenant_id, scan_id, modeled_threatscore_compliance_id
+            tenant_id,
+            scan_id,
+            normalized_id,
+            threatscore_by_check,
         )
 
         # Streaming query contract: column-scoped values_list + iterator
         mock_queryset.values_list.assert_called_once_with(
-            "check_id", "status", "resource_regions", "compliance"
+            "check_id", "status", "resource_regions"
         )
         mock_queryset.iterator.assert_called_once()
 
@@ -4813,8 +4975,9 @@ class TestAggregateFindingsByRegion:
         """Test that muted findings are filtered out (muted=False in query)."""
         tenant_id = str(uuid.uuid4())
         scan_id = str(uuid.uuid4())
-        modeled_threatscore_compliance_id = "ProwlerThreatScore-1.0"
+        normalized_id = "prowlerthreatscore10"
 
+        threatscore_by_check = {}
         mock_queryset = MagicMock()
         mock_queryset.values_list.return_value = mock_queryset
         mock_queryset.iterator.return_value = []
@@ -4826,12 +4989,15 @@ class TestAggregateFindingsByRegion:
         mock_findings_filter.return_value = mock_queryset
 
         _aggregate_findings_by_region(
-            tenant_id, scan_id, modeled_threatscore_compliance_id
+            tenant_id,
+            scan_id,
+            normalized_id,
+            threatscore_by_check,
         )
 
         # Streaming query contract: column-scoped values_list + iterator
         mock_queryset.values_list.assert_called_once_with(
-            "check_id", "status", "resource_regions", "compliance"
+            "check_id", "status", "resource_regions"
         )
         mock_queryset.iterator.assert_called_once()
 
@@ -4851,23 +5017,14 @@ class TestAggregateFindingsByRegion:
         """Test that ThreatScore compliance counts are processed correctly."""
         tenant_id = str(uuid.uuid4())
         scan_id = str(uuid.uuid4())
-        modeled_threatscore_compliance_id = "ProwlerThreatScore-1.0"
+        normalized_id = "prowlerthreatscore10"
 
         # PASS and FAIL findings mapped to the same ThreatScore requirement
         finding_rows = [
-            (
-                "check1",
-                "PASS",
-                ["us-east-1"],
-                {modeled_threatscore_compliance_id: ["req1"]},
-            ),
-            (
-                "check2",
-                "FAIL",
-                ["us-east-1"],
-                {modeled_threatscore_compliance_id: ["req1"]},
-            ),
+            ("check1", "PASS", ["us-east-1"]),
+            ("check2", "FAIL", ["us-east-1"]),
         ]
+        threatscore_by_check = {"check1": ["req1"], "check2": ["req1"]}
 
         mock_queryset = MagicMock()
         mock_queryset.values_list.return_value = mock_queryset
@@ -4880,19 +5037,19 @@ class TestAggregateFindingsByRegion:
         mock_findings_filter.return_value = mock_queryset
 
         _, findings_count_by_compliance = _aggregate_findings_by_region(
-            tenant_id, scan_id, modeled_threatscore_compliance_id
+            tenant_id,
+            scan_id,
+            normalized_id,
+            threatscore_by_check,
         )
 
         # Streaming query contract: column-scoped values_list + iterator
         mock_queryset.values_list.assert_called_once_with(
-            "check_id", "status", "resource_regions", "compliance"
+            "check_id", "status", "resource_regions"
         )
         mock_queryset.iterator.assert_called_once()
 
         # Verify compliance counts
-        normalized_id = re.sub(
-            r"[^a-z0-9]", "", modeled_threatscore_compliance_id.lower()
-        )
         assert "us-east-1" in findings_count_by_compliance
         assert normalized_id in findings_count_by_compliance["us-east-1"]
         assert "req1" in findings_count_by_compliance["us-east-1"][normalized_id]
@@ -4909,13 +5066,14 @@ class TestAggregateFindingsByRegion:
         """Test aggregation across multiple regions."""
         tenant_id = str(uuid.uuid4())
         scan_id = str(uuid.uuid4())
-        modeled_threatscore_compliance_id = "ProwlerThreatScore-1.0"
+        normalized_id = "prowlerthreatscore10"
 
         # One finding per region
         finding_rows = [
-            ("check1", "FAIL", ["us-east-1"], {}),
-            ("check1", "PASS", ["us-west-2"], {}),
+            ("check1", "FAIL", ["us-east-1"]),
+            ("check1", "PASS", ["us-west-2"]),
         ]
+        threatscore_by_check = {}
 
         mock_queryset = MagicMock()
         mock_queryset.values_list.return_value = mock_queryset
@@ -4928,12 +5086,15 @@ class TestAggregateFindingsByRegion:
         mock_findings_filter.return_value = mock_queryset
 
         check_status_by_region, _ = _aggregate_findings_by_region(
-            tenant_id, scan_id, modeled_threatscore_compliance_id
+            tenant_id,
+            scan_id,
+            normalized_id,
+            threatscore_by_check,
         )
 
         # Streaming query contract: column-scoped values_list + iterator
         mock_queryset.values_list.assert_called_once_with(
-            "check_id", "status", "resource_regions", "compliance"
+            "check_id", "status", "resource_regions"
         )
         mock_queryset.iterator.assert_called_once()
 
@@ -4951,16 +5112,10 @@ class TestAggregateFindingsByRegion:
         """A finding with multiple resource_regions is tallied in every region."""
         tenant_id = str(uuid.uuid4())
         scan_id = str(uuid.uuid4())
-        modeled_threatscore_compliance_id = "ProwlerThreatScore-1.0"
+        normalized_id = "prowlerthreatscore10"
 
-        finding_rows = [
-            (
-                "check1",
-                "FAIL",
-                ["us-east-1", "eu-west-1"],
-                {modeled_threatscore_compliance_id: ["req1"]},
-            )
-        ]
+        finding_rows = [("check1", "FAIL", ["us-east-1", "eu-west-1"])]
+        threatscore_by_check = {"check1": ["req1"]}
 
         mock_queryset = MagicMock()
         mock_queryset.values_list.return_value = mock_queryset
@@ -4974,19 +5129,19 @@ class TestAggregateFindingsByRegion:
 
         check_status_by_region, findings_count_by_compliance = (
             _aggregate_findings_by_region(
-                tenant_id, scan_id, modeled_threatscore_compliance_id
+                tenant_id,
+                scan_id,
+                normalized_id,
+                threatscore_by_check,
             )
         )
 
         # Streaming query contract: column-scoped values_list + iterator
         mock_queryset.values_list.assert_called_once_with(
-            "check_id", "status", "resource_regions", "compliance"
+            "check_id", "status", "resource_regions"
         )
         mock_queryset.iterator.assert_called_once()
 
-        normalized_id = re.sub(
-            r"[^a-z0-9]", "", modeled_threatscore_compliance_id.lower()
-        )
         for region in ("us-east-1", "eu-west-1"):
             assert check_status_by_region[region]["check1"] == "FAIL"
             req_stats = findings_count_by_compliance[region][normalized_id]["req1"]
@@ -5000,12 +5155,13 @@ class TestAggregateFindingsByRegion:
         """A finding with no denormalized regions contributes nothing."""
         tenant_id = str(uuid.uuid4())
         scan_id = str(uuid.uuid4())
-        modeled_threatscore_compliance_id = "ProwlerThreatScore-1.0"
+        normalized_id = "prowlerthreatscore10"
 
         finding_rows = [
-            ("check1", "FAIL", [], {modeled_threatscore_compliance_id: ["req1"]}),
-            ("check2", "PASS", None, {}),
+            ("check1", "FAIL", []),
+            ("check2", "PASS", None),
         ]
+        threatscore_by_check = {"check1": ["req1"]}
 
         mock_queryset = MagicMock()
         mock_queryset.values_list.return_value = mock_queryset
@@ -5019,13 +5175,16 @@ class TestAggregateFindingsByRegion:
 
         check_status_by_region, findings_count_by_compliance = (
             _aggregate_findings_by_region(
-                tenant_id, scan_id, modeled_threatscore_compliance_id
+                tenant_id,
+                scan_id,
+                normalized_id,
+                threatscore_by_check,
             )
         )
 
         # Streaming query contract: column-scoped values_list + iterator
         mock_queryset.values_list.assert_called_once_with(
-            "check_id", "status", "resource_regions", "compliance"
+            "check_id", "status", "resource_regions"
         )
         mock_queryset.iterator.assert_called_once()
 
@@ -5040,8 +5199,9 @@ class TestAggregateFindingsByRegion:
         """Test with no findings - should return empty dicts."""
         tenant_id = str(uuid.uuid4())
         scan_id = str(uuid.uuid4())
-        modeled_threatscore_compliance_id = "ProwlerThreatScore-1.0"
+        normalized_id = "prowlerthreatscore10"
 
+        threatscore_by_check = {}
         mock_queryset = MagicMock()
         mock_queryset.values_list.return_value = mock_queryset
         mock_queryset.iterator.return_value = []
@@ -5054,13 +5214,16 @@ class TestAggregateFindingsByRegion:
 
         check_status_by_region, findings_count_by_compliance = (
             _aggregate_findings_by_region(
-                tenant_id, scan_id, modeled_threatscore_compliance_id
+                tenant_id,
+                scan_id,
+                normalized_id,
+                threatscore_by_check,
             )
         )
 
         # Streaming query contract: column-scoped values_list + iterator
         mock_queryset.values_list.assert_called_once_with(
-            "check_id", "status", "resource_regions", "compliance"
+            "check_id", "status", "resource_regions"
         )
         mock_queryset.iterator.assert_called_once()
 

From 1edcf6e5ded84545c8a61166865b33dae2d1aa27 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Fri, 4 Sep 2026 15:51:09 +0200
Subject: [PATCH 38/77] fix(jira): fix connection check timeout (#12742)

Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
---
 ...nection-test-parallel-issue-types.fixed.md |   1 +
 ...ue-types-permission-gap-log-level.fixed.md |   1 +
 prowler/lib/outputs/jira/jira.py              |  57 ++++--
 tests/lib/outputs/jira/jira_test.py           | 175 ++++++++++++++++++
 ui/actions/integrations/index.ts              |   2 +-
 ui/actions/integrations/integrations.test.ts  |  64 +++++++
 ui/actions/integrations/integrations.ts       | 155 +++-------------
 ...tegration-connection-poll-timeout.fixed.md |   1 +
 ...ntegration-connection-task-handler.test.ts |  64 +++++++
 .../integration-connection-task-handler.ts    |  42 +++++
 .../jira/jira-integrations-manager.tsx        |  13 +-
 .../s3/s3-integrations-manager.tsx            |  13 +-
 .../security-hub-integrations-manager.tsx     |  13 +-
 .../slack/slack-integration-manager.test.tsx  |   4 +-
 .../slack/slack-integration-manager.tsx       |   4 +-
 ui/components/shared/task-polling-watcher.tsx |  10 +-
 .../test-connection-helper.test.ts            | 125 +++++++++++++
 ui/lib/integrations/test-connection-helper.ts |  92 +++++----
 ui/lib/integrations/test-connection-result.ts |  23 +++
 ui/types/integrations.ts                      |  28 +++
 20 files changed, 681 insertions(+), 206 deletions(-)
 create mode 100644 prowler/changelog.d/jira-connection-test-parallel-issue-types.fixed.md
 create mode 100644 prowler/changelog.d/jira-issue-types-permission-gap-log-level.fixed.md
 create mode 100644 ui/actions/integrations/integrations.test.ts
 create mode 100644 ui/changelog.d/integration-connection-poll-timeout.fixed.md
 create mode 100644 ui/components/integrations/integration-connection-task-handler.test.ts
 create mode 100644 ui/components/integrations/integration-connection-task-handler.ts
 create mode 100644 ui/lib/integrations/test-connection-helper.test.ts
 create mode 100644 ui/lib/integrations/test-connection-result.ts

diff --git a/prowler/changelog.d/jira-connection-test-parallel-issue-types.fixed.md b/prowler/changelog.d/jira-connection-test-parallel-issue-types.fixed.md
new file mode 100644
index 0000000000..85d3bad72a
--- /dev/null
+++ b/prowler/changelog.d/jira-connection-test-parallel-issue-types.fixed.md
@@ -0,0 +1 @@
+`Jira.test_connection()` now fetches each project's issue types concurrently instead of one request at a time, so accounts with many Jira projects no longer take tens of seconds (unbounded, scaling with the project count) to verify the connection
diff --git a/prowler/changelog.d/jira-issue-types-permission-gap-log-level.fixed.md b/prowler/changelog.d/jira-issue-types-permission-gap-log-level.fixed.md
new file mode 100644
index 0000000000..0d0a1f5477
--- /dev/null
+++ b/prowler/changelog.d/jira-issue-types-permission-gap-log-level.fixed.md
@@ -0,0 +1 @@
+Jira connection checks no longer log an error when a single project has no issue types visible to the integration user (typically a missing "create issue" permission on that project), a case the caller already treats as non-fatal
diff --git a/prowler/lib/outputs/jira/jira.py b/prowler/lib/outputs/jira/jira.py
index 1ddeb8cf3f..a6100b54e1 100644
--- a/prowler/lib/outputs/jira/jira.py
+++ b/prowler/lib/outputs/jira/jira.py
@@ -3,8 +3,10 @@ import hashlib
 import os
 import re
 from collections.abc import Mapping
+from concurrent.futures import ThreadPoolExecutor, as_completed
 from dataclasses import dataclass
 from datetime import datetime, timedelta
+from threading import Lock
 from typing import Dict, List, Optional
 
 import requests
@@ -416,6 +418,7 @@ class Jira:
         api_token: str = None,
         domain: str = None,
     ):
+        self._token_lock = Lock()
         self._redirect_uri = redirect_uri
         self._client_id = client_id
         self._client_secret = client_secret
@@ -1017,11 +1020,15 @@ class Jira:
             if self._using_basic_auth:
                 return self._access_token
 
-            if self.auth_expiration and datetime.now() < datetime.fromisoformat(
-                self.auth_expiration
-            ):
+            if self._access_token_is_valid():
                 return self._access_token
-            else:
+
+            # Atlassian rotates refresh tokens, so two concurrent refreshes with
+            # the same one would invalidate each other. Re-check under the lock
+            # in case another thread refreshed while we waited for it.
+            with self._token_lock:
+                if self._access_token_is_valid():
+                    return self._access_token
                 return self.refresh_access_token()
         except JiraRefreshTokenError as refresh_error:
             raise refresh_error
@@ -1034,6 +1041,12 @@ class Jira:
                 file=os.path.basename(__file__),
             )
 
+    def _access_token_is_valid(self) -> bool:
+        """Return whether the current OAuth access token has not expired."""
+        return bool(self.auth_expiration) and datetime.now() < datetime.fromisoformat(
+            self.auth_expiration
+        )
+
     def refresh_access_token(self) -> str:
         """Refresh the access token
 
@@ -1128,15 +1141,21 @@ class Jira:
             projects = jira.get_projects()
 
             issue_types = {}
-            for project_key in projects:
-                try:
-                    issue_types[project_key] = jira.get_available_issue_types(
-                        project_key
-                    )
-                except Exception as e:
-                    logger.warning(
-                        f"Failed to get issue types for project {project_key}: {e}"
-                    )
+            with ThreadPoolExecutor(max_workers=10) as executor:
+                future_to_project = {
+                    executor.submit(
+                        jira.get_available_issue_types, project_key
+                    ): project_key
+                    for project_key in projects
+                }
+                for future in as_completed(future_to_project):
+                    project_key = future_to_project[future]
+                    try:
+                        issue_types[project_key] = future.result()
+                    except Exception as e:
+                        logger.warning(
+                            f"Failed to get issue types for project {project_key}: {e}"
+                        )
 
             return JiraConnection(
                 is_connected=True, projects=projects, issue_types=issue_types
@@ -1296,7 +1315,10 @@ class Jira:
 
             if response.status_code == 200:
                 if len(response.json()["projects"]) == 0:
-                    logger.error("No projects found")
+                    # Expected per-project condition (e.g. the integration user lacks
+                    # "create issue" rights on this specific project) — the caller in
+                    # test_connection() already treats this as non-fatal, so this isn't
+                    # an error worth alerting on.
                     raise JiraNoProjectsError(
                         message="No projects found in Jira",
                         file=os.path.basename(__file__),
@@ -1316,6 +1338,13 @@ class Jira:
             raise refresh_error
         except JiraRefreshTokenResponseError as response_error:
             raise response_error
+        except JiraNoProjectsError as no_projects_error:
+            # Expected per-project condition; the caller decides whether to log it.
+            raise JiraGetAvailableIssueTypesError(
+                message="Failed to get available issue types",
+                file=os.path.basename(__file__),
+                original_exception=no_projects_error,
+            )
         except Exception as e:
             logger.error(f"Failed to get available issue types: {e}")
             raise JiraGetAvailableIssueTypesError(
diff --git a/tests/lib/outputs/jira/jira_test.py b/tests/lib/outputs/jira/jira_test.py
index 2b8ac90512..7c5877dc50 100644
--- a/tests/lib/outputs/jira/jira_test.py
+++ b/tests/lib/outputs/jira/jira_test.py
@@ -1,7 +1,11 @@
 import base64
 import hashlib
+from concurrent.futures import ThreadPoolExecutor
 from dataclasses import FrozenInstanceError
 from datetime import datetime, timedelta
+from logging import ERROR, WARNING
+from threading import Barrier
+from time import sleep
 from types import SimpleNamespace
 from typing import List, Optional
 from unittest.mock import MagicMock, PropertyMock, patch
@@ -453,6 +457,36 @@ class TestJiraIntegration:
         assert access_token == "new_access_token"
         mock_refresh_access_token.assert_called_once()
 
+    def test_get_access_token_concurrent_refresh_happens_once(self):
+        self.jira_integration.auth_expiration = (
+            datetime.now() - timedelta(seconds=1)
+        ).isoformat()
+        refresh_calls = []
+        # All 5 pass the expiry check together, so without a lock every one of
+        # them would refresh.
+        barrier = Barrier(5, timeout=5)
+
+        def fake_refresh():
+            refresh_calls.append(1)
+            # Keep the token expired while the other threads check it.
+            sleep(0.2)
+            self.jira_integration._access_token = "refreshed_token"
+            self.jira_integration.auth_expiration = (
+                datetime.now() + timedelta(hours=1)
+            ).isoformat()
+            return "refreshed_token"
+
+        def get_token(_):
+            barrier.wait()
+            return self.jira_integration.get_access_token()
+
+        with patch.object(Jira, "refresh_access_token", side_effect=fake_refresh):
+            with ThreadPoolExecutor(max_workers=5) as executor:
+                tokens = list(executor.map(get_token, range(5)))
+
+        assert tokens == ["refreshed_token"] * 5
+        assert len(refresh_calls) == 1
+
     @freeze_time(TEST_DATETIME)
     @patch("prowler.lib.outputs.jira.jira.requests.post")
     @patch.object(Jira, "get_cloud_id", return_value="test_cloud_id")
@@ -749,6 +783,77 @@ class TestJiraIntegration:
                 domain=self.domain,
             )
 
+    @patch.object(Jira, "get_auth", return_value=None)
+    @patch.object(
+        Jira,
+        "get_projects",
+        return_value={"PROJ1": "Project One", "PROJ2": "Project Two"},
+    )
+    def test_test_connection_partial_issue_types_failure(
+        self, mock_get_projects, mock_get_auth, caplog
+    ):
+        # To disable vulture
+        mock_get_projects = mock_get_projects
+        mock_get_auth = mock_get_auth
+        caplog.set_level(WARNING)
+
+        def fake_issue_types(project_key):
+            if project_key == "PROJ2":
+                raise JiraGetAvailableIssueTypesError("no create permission")
+            return ["Task"]
+
+        with patch.object(
+            Jira, "get_available_issue_types", side_effect=fake_issue_types
+        ):
+            connection = Jira.test_connection(
+                redirect_uri=self.redirect_uri,
+                client_id=self.client_id,
+                client_secret=self.client_secret,
+            )
+
+        assert connection.is_connected
+        assert connection.error is None
+        assert connection.issue_types == {"PROJ1": ["Task"]}
+        assert any(
+            record.levelno == WARNING
+            and "Failed to get issue types for project PROJ2" in record.message
+            for record in caplog.records
+        )
+        assert not any(record.levelno >= ERROR for record in caplog.records)
+
+    @patch.object(Jira, "get_auth", return_value=None)
+    @patch.object(
+        Jira,
+        "get_projects",
+        return_value={f"PROJ{i}": f"Project {i}" for i in range(5)},
+    )
+    def test_test_connection_fetches_issue_types_concurrently(
+        self, mock_get_projects, mock_get_auth
+    ):
+        # To disable vulture
+        mock_get_projects = mock_get_projects
+        mock_get_auth = mock_get_auth
+
+        # Every call blocks until all 5 arrive; a sequential fetch would time out
+        # at the barrier and surface as a per-project failure instead of a result.
+        barrier = Barrier(5, timeout=5)
+
+        def fake_issue_types(project_key):
+            barrier.wait()
+            return [project_key]
+
+        with patch.object(
+            Jira, "get_available_issue_types", side_effect=fake_issue_types
+        ):
+            connection = Jira.test_connection(
+                redirect_uri=self.redirect_uri,
+                client_id=self.client_id,
+                client_secret=self.client_secret,
+            )
+
+        assert connection.is_connected
+        assert connection.issue_types == {f"PROJ{i}": [f"PROJ{i}"] for i in range(5)}
+
     @patch.object(Jira, "get_auth", return_value=None)
     @patch.object(
         Jira, "get_projects", side_effect=JiraNoProjectsError("No projects found")
@@ -998,6 +1103,76 @@ class TestJiraIntegration:
         with pytest.raises(JiraGetAvailableIssueTypesError):
             self.jira_integration.get_available_issue_types(project_key="TEST")
 
+    @patch.object(Jira, "get_access_token", return_value="valid_access_token")
+    @patch.object(
+        Jira, "cloud_id", new_callable=PropertyMock, return_value="test_cloud_id"
+    )
+    @patch("prowler.lib.outputs.jira.jira.requests.get")
+    def test_get_available_issue_types_no_projects_does_not_log(
+        self, mock_get, mock_cloud_id, mock_get_access_token, caplog
+    ):
+        # To disable vulture
+        mock_cloud_id = mock_cloud_id
+        mock_get_access_token = mock_get_access_token
+        caplog.set_level(WARNING)
+
+        mock_response = MagicMock()
+        mock_response.status_code = 200
+        mock_response.json.return_value = {"projects": []}
+        mock_get.return_value = mock_response
+
+        with pytest.raises(JiraGetAvailableIssueTypesError):
+            self.jira_integration.get_available_issue_types(project_key="TEST")
+
+        assert not any(record.levelno >= WARNING for record in caplog.records)
+
+    @patch.object(Jira, "get_auth", return_value=None)
+    @patch.object(
+        Jira,
+        "get_projects",
+        return_value={"TEST": "Test Project"},
+    )
+    @patch.object(Jira, "get_access_token", return_value="valid_access_token")
+    @patch.object(
+        Jira, "cloud_id", new_callable=PropertyMock, return_value="test_cloud_id"
+    )
+    @patch("prowler.lib.outputs.jira.jira.requests.get")
+    def test_test_connection_empty_issue_types_logs_one_warning(
+        self,
+        mock_get,
+        mock_cloud_id,
+        mock_get_access_token,
+        mock_get_projects,
+        mock_get_auth,
+        caplog,
+    ):
+        # To disable vulture
+        mock_cloud_id = mock_cloud_id
+        mock_get_access_token = mock_get_access_token
+        mock_get_projects = mock_get_projects
+        mock_get_auth = mock_get_auth
+        caplog.set_level(WARNING)
+
+        mock_response = MagicMock()
+        mock_response.status_code = 200
+        mock_response.json.return_value = {"projects": []}
+        mock_get.return_value = mock_response
+
+        connection = Jira.test_connection(
+            redirect_uri=self.redirect_uri,
+            client_id=self.client_id,
+            client_secret=self.client_secret,
+        )
+
+        warnings = [
+            record
+            for record in caplog.records
+            if record.levelno == WARNING and "project TEST" in record.message
+        ]
+        assert connection.is_connected
+        assert len(warnings) == 1
+        assert not any(record.levelno >= ERROR for record in caplog.records)
+
     @patch.object(Jira, "get_access_token", return_value="valid_access_token")
     @patch.object(
         Jira, "cloud_id", new_callable=PropertyMock, return_value="test_cloud_id"
diff --git a/ui/actions/integrations/index.ts b/ui/actions/integrations/index.ts
index 1e05de036c..6ce0b274e4 100644
--- a/ui/actions/integrations/index.ts
+++ b/ui/actions/integrations/index.ts
@@ -2,7 +2,7 @@ export {
   createIntegration,
   deleteIntegration,
   getIntegrations,
-  pollConnectionTestStatus,
+  revalidateIntegrationConnectionPages,
   testIntegrationConnection,
   updateIntegration,
 } from "./integrations";
diff --git a/ui/actions/integrations/integrations.test.ts b/ui/actions/integrations/integrations.test.ts
new file mode 100644
index 0000000000..f65def1442
--- /dev/null
+++ b/ui/actions/integrations/integrations.test.ts
@@ -0,0 +1,64 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const { fetchMock, revalidatePathMock } = vi.hoisted(() => ({
+  fetchMock: vi.fn(),
+  revalidatePathMock: vi.fn(),
+}));
+
+vi.mock("next/cache", () => ({
+  revalidatePath: revalidatePathMock,
+}));
+
+vi.mock("@/lib", () => ({
+  apiBaseUrl: "https://api.example.com/api/v1",
+  getAuthHeaders: vi.fn().mockResolvedValue({ Authorization: "Bearer token" }),
+  parseStringify: (value: unknown) => JSON.parse(JSON.stringify(value)),
+}));
+
+vi.mock("@/lib/server-actions-helper", () => ({
+  handleApiError: () => ({ error: "An error occurred" }),
+  handleApiResponse: vi.fn(),
+}));
+
+import {
+  revalidateIntegrationConnectionPages,
+  testIntegrationConnection,
+} from "./integrations";
+
+describe("testIntegrationConnection", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    vi.stubGlobal("fetch", fetchMock);
+    fetchMock.mockResolvedValue(
+      new Response(JSON.stringify({ data: { id: "task-1", type: "tasks" } }), {
+        status: 202,
+      }),
+    );
+  });
+
+  it("returns the task immediately for shared background tracking", async () => {
+    // When
+    const response = await testIntegrationConnection("jira-1");
+
+    // Then
+    expect(response).toEqual({
+      success: true,
+      message: "Connection test started. It may take some time to complete.",
+      taskId: "task-1",
+      data: { data: { id: "task-1", type: "tasks" } },
+    });
+  });
+
+  it("revalidates every integration page through one shared action", async () => {
+    // When
+    await revalidateIntegrationConnectionPages();
+
+    // Then
+    expect(revalidatePathMock.mock.calls).toEqual([
+      ["/integrations/amazon-s3"],
+      ["/integrations/aws-security-hub"],
+      ["/integrations/jira"],
+      ["/integrations/slack"],
+    ]);
+  });
+});
diff --git a/ui/actions/integrations/integrations.ts b/ui/actions/integrations/integrations.ts
index 4ac6300a3c..e90a4de502 100644
--- a/ui/actions/integrations/integrations.ts
+++ b/ui/actions/integrations/integrations.ts
@@ -2,25 +2,19 @@
 
 import { revalidatePath } from "next/cache";
 
-import { pollTaskUntilSettled } from "@/actions/task/poll";
 import { apiBaseUrl, getAuthHeaders, parseStringify } from "@/lib";
 import { handleApiError, handleApiResponse } from "@/lib/server-actions-helper";
-import { IntegrationType } from "@/types/integrations";
-import type { TaskState } from "@/types/tasks";
+import type {
+  IntegrationConnectionTestResponse,
+  IntegrationType,
+} from "@/types/integrations";
 
-type TaskStartResponse = {
-  data: { id: string; type: "tasks" };
-};
-
-type TestConnectionResponse = {
-  success: boolean;
-  message?: string;
-  taskId?: string;
-  data?: TaskStartResponse;
-  error?: string;
-  /** The id of the channel a channel-level failure named, when it named one. */
-  failedChannelId?: string | null;
-};
+const INTEGRATION_CONNECTION_PATHS = [
+  "/integrations/amazon-s3",
+  "/integrations/aws-security-hub",
+  "/integrations/jira",
+  "/integrations/slack",
+] as const;
 
 export const getIntegrations = async (searchParams?: URLSearchParams) => {
   const headers = await getAuthHeaders({ contentType: false });
@@ -266,59 +260,9 @@ export const deleteIntegration = async (
   }
 };
 
-type ConnectionTaskResult = {
-  connected?: boolean;
-  error?: string | null;
-  // The failing channel's id, or null when the failure names no channel.
-  channel?: string | null;
-};
-
-type PollConnectionResult =
-  | {
-      success: true;
-      message: string;
-      taskState: TaskState;
-      result: ConnectionTaskResult | undefined;
-    }
-  | {
-      success: false;
-      message: string;
-      taskState?: TaskState;
-      result?: ConnectionTaskResult;
-    }
-  | { error: string };
-
-const pollTaskUntilComplete = async (
-  taskId: string,
-): Promise<PollConnectionResult> => {
-  const settled = await pollTaskUntilSettled<ConnectionTaskResult>(taskId, {
-    maxAttempts: 20,
-    delayMs: 3000,
-  });
-
-  if (!settled.ok) {
-    return { error: settled.error };
-  }
-
-  const taskState = settled.state;
-  const result = settled.result;
-
-  const isSuccessful =
-    taskState === "completed" &&
-    result?.connected === true &&
-    result?.error === null;
-
-  const message = isSuccessful
-    ? "Connection test completed successfully."
-    : result?.error || "Connection test failed.";
-
-  return { success: isSuccessful, message, taskState, result };
-};
-
 export const testIntegrationConnection = async (
   id: string,
-  waitForCompletion = true,
-): Promise<TestConnectionResponse> => {
+): Promise<IntegrationConnectionTestResponse> => {
   const headers = await getAuthHeaders({ contentType: true });
   const url = new URL(`${apiBaseUrl}/integrations/${id}/connection`);
 
@@ -330,43 +274,13 @@ export const testIntegrationConnection = async (
       const taskId = data?.data?.id;
 
       if (taskId) {
-        // If waitForCompletion is false, return immediately with task started status
-        if (!waitForCompletion) {
-          return {
-            success: true,
-            message:
-              "Connection test started. It may take some time to complete.",
-            taskId,
-            data: parseStringify(data),
-          };
-        }
-
-        // Poll the task until completion
-        const pollResult = await pollTaskUntilComplete(taskId);
-
-        revalidatePath("/integrations/amazon-s3");
-        revalidatePath("/integrations/aws-security-hub");
-        revalidatePath("/integrations/jira");
-        revalidatePath("/integrations/slack");
-
-        if ("error" in pollResult) {
-          return { success: false, error: pollResult.error };
-        }
-
-        if (pollResult.success) {
-          return {
-            success: true,
-            message:
-              pollResult.message || "Connection test completed successfully!",
-            data: parseStringify(data),
-          };
-        } else {
-          return {
-            success: false,
-            error: pollResult.message || "Connection test failed.",
-            failedChannelId: pollResult.result?.channel ?? null,
-          };
-        }
+        return {
+          success: true,
+          message:
+            "Connection test started. It may take some time to complete.",
+          taskId,
+          data: parseStringify(data),
+        };
       } else {
         return {
           success: false,
@@ -386,35 +300,8 @@ export const testIntegrationConnection = async (
   }
 };
 
-export const pollConnectionTestStatus = async (
-  taskId: string,
-): Promise<TestConnectionResponse> => {
-  try {
-    const pollResult = await pollTaskUntilComplete(taskId);
-
-    revalidatePath("/integrations/amazon-s3");
-    revalidatePath("/integrations/aws-security-hub");
-    revalidatePath("/integrations/jira");
-    revalidatePath("/integrations/slack");
-
-    if ("error" in pollResult) {
-      return { success: false, error: pollResult.error };
-    }
-
-    if (pollResult.success) {
-      return {
-        success: true,
-        message:
-          pollResult.message || "Connection test completed successfully!",
-      };
-    } else {
-      return {
-        success: false,
-        error: pollResult.message || "Connection test failed.",
-        failedChannelId: pollResult.result?.channel ?? null,
-      };
-    }
-  } catch (_error) {
-    return { success: false, error: "Failed to check connection test status." };
+export const revalidateIntegrationConnectionPages = async (): Promise<void> => {
+  for (const path of INTEGRATION_CONNECTION_PATHS) {
+    revalidatePath(path);
   }
 };
diff --git a/ui/changelog.d/integration-connection-poll-timeout.fixed.md b/ui/changelog.d/integration-connection-poll-timeout.fixed.md
new file mode 100644
index 0000000000..629eef9a45
--- /dev/null
+++ b/ui/changelog.d/integration-connection-poll-timeout.fixed.md
@@ -0,0 +1 @@
+Integration connection test polling now waits up to ~3 minutes instead of ~57 seconds before giving up, so it no longer reports a false failure on slower checks (e.g. Jira accounts with many projects) that were still going to succeed
diff --git a/ui/components/integrations/integration-connection-task-handler.test.ts b/ui/components/integrations/integration-connection-task-handler.test.ts
new file mode 100644
index 0000000000..cce2174501
--- /dev/null
+++ b/ui/components/integrations/integration-connection-task-handler.test.ts
@@ -0,0 +1,64 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const { revalidateIntegrationConnectionPagesMock, toastMock } = vi.hoisted(
+  () => ({
+    revalidateIntegrationConnectionPagesMock: vi.fn(),
+    toastMock: vi.fn(),
+  }),
+);
+
+vi.mock("@/actions/integrations", () => ({
+  revalidateIntegrationConnectionPages:
+    revalidateIntegrationConnectionPagesMock,
+}));
+
+vi.mock("@/components/shadcn/toast", () => ({
+  toast: toastMock,
+}));
+
+import { integrationConnectionTaskHandler } from "./integration-connection-task-handler";
+
+const task = {
+  taskId: "task-1",
+  kind: "integration-connection-test",
+  status: "ready" as const,
+  meta: { integrationId: "jira-1" },
+  startedAt: 1,
+};
+
+describe("integration connection task handler", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    revalidateIntegrationConnectionPagesMock.mockResolvedValue(undefined);
+  });
+
+  it("revalidates integrations and reports a resumed success", () => {
+    // When
+    integrationConnectionTaskHandler.onReady({
+      ...task,
+      result: { connected: true, error: null },
+    });
+
+    // Then
+    expect(revalidateIntegrationConnectionPagesMock).toHaveBeenCalledOnce();
+    expect(toastMock).toHaveBeenCalledWith({
+      title: "Connection test successful!",
+      description: "Connection test completed successfully.",
+    });
+  });
+
+  it("reports a resumed backend failure", () => {
+    // When
+    integrationConnectionTaskHandler.onReady({
+      ...task,
+      result: { connected: false, error: "Missing permission" },
+    });
+
+    // Then
+    expect(toastMock).toHaveBeenCalledWith({
+      variant: "destructive",
+      title: "Connection test failed",
+      description: "Missing permission",
+    });
+  });
+});
diff --git a/ui/components/integrations/integration-connection-task-handler.ts b/ui/components/integrations/integration-connection-task-handler.ts
new file mode 100644
index 0000000000..2b9de9c58f
--- /dev/null
+++ b/ui/components/integrations/integration-connection-task-handler.ts
@@ -0,0 +1,42 @@
+"use client";
+
+import { revalidateIntegrationConnectionPages } from "@/actions/integrations";
+import { toast } from "@/components/shadcn/toast";
+import { evaluateIntegrationConnectionTask } from "@/lib/integrations/test-connection-result";
+import type { TaskKindHandler } from "@/store/task-watcher/store";
+import type { IntegrationConnectionTaskResult } from "@/types/integrations";
+
+const refreshIntegrationPages = (): void => {
+  void revalidateIntegrationConnectionPages().catch(() => undefined);
+};
+
+export const integrationConnectionTaskHandler: TaskKindHandler = {
+  onReady: (task) => {
+    refreshIntegrationPages();
+    const result = evaluateIntegrationConnectionTask(
+      task.result as IntegrationConnectionTaskResult | undefined,
+    );
+
+    if (result.success) {
+      toast({
+        title: "Connection test successful!",
+        description: result.message,
+      });
+      return;
+    }
+
+    toast({
+      variant: "destructive",
+      title: "Connection test failed",
+      description: result.error,
+    });
+  },
+  onError: (task) => {
+    refreshIntegrationPages();
+    toast({
+      variant: "destructive",
+      title: "Connection test failed",
+      description: task.error || "The connection test failed unexpectedly.",
+    });
+  },
+};
diff --git a/ui/components/integrations/jira/jira-integrations-manager.tsx b/ui/components/integrations/jira/jira-integrations-manager.tsx
index e63b17dac3..6939173d9c 100644
--- a/ui/components/integrations/jira/jira-integrations-manager.tsx
+++ b/ui/components/integrations/jira/jira-integrations-manager.tsx
@@ -4,11 +4,7 @@ import { format } from "date-fns";
 import { PlusIcon, Trash2Icon } from "lucide-react";
 import { useState } from "react";
 
-import {
-  deleteIntegration,
-  testIntegrationConnection,
-  updateIntegration,
-} from "@/actions/integrations";
+import { deleteIntegration, updateIntegration } from "@/actions/integrations";
 import { JiraIcon } from "@/components/icons/services/IconServices";
 import {
   IntegrationActionButtons,
@@ -24,7 +20,10 @@ import {
 } from "@/components/shadcn";
 import { Modal } from "@/components/shadcn/modal";
 import { DataTablePagination } from "@/components/shadcn/table/data-table-pagination";
-import { triggerTestConnectionWithDelay } from "@/lib/integrations/test-connection-helper";
+import {
+  executeIntegrationConnectionTest,
+  triggerTestConnectionWithDelay,
+} from "@/lib/integrations/test-connection-helper";
 import { MetaDataProps } from "@/types";
 import { IntegrationProps } from "@/types/integrations";
 
@@ -98,7 +97,7 @@ export const JiraIntegrationsManager = ({
   const handleTestConnection = async (id: string) => {
     setIsTesting(id);
     try {
-      const result = await testIntegrationConnection(id);
+      const result = await executeIntegrationConnectionTest(id);
 
       if (result.success) {
         toast({
diff --git a/ui/components/integrations/s3/s3-integrations-manager.tsx b/ui/components/integrations/s3/s3-integrations-manager.tsx
index 03ec525abc..bfdae3a3ca 100644
--- a/ui/components/integrations/s3/s3-integrations-manager.tsx
+++ b/ui/components/integrations/s3/s3-integrations-manager.tsx
@@ -4,11 +4,7 @@ import { format } from "date-fns";
 import { PlusIcon, Trash2Icon } from "lucide-react";
 import { useState } from "react";
 
-import {
-  deleteIntegration,
-  testIntegrationConnection,
-  updateIntegration,
-} from "@/actions/integrations";
+import { deleteIntegration, updateIntegration } from "@/actions/integrations";
 import { AmazonS3Icon } from "@/components/icons/services/IconServices";
 import {
   IntegrationActionButtons,
@@ -24,7 +20,10 @@ import {
 } from "@/components/shadcn";
 import { Modal } from "@/components/shadcn/modal";
 import { DataTablePagination } from "@/components/shadcn/table/data-table-pagination";
-import { triggerTestConnectionWithDelay } from "@/lib/integrations/test-connection-helper";
+import {
+  executeIntegrationConnectionTest,
+  triggerTestConnectionWithDelay,
+} from "@/lib/integrations/test-connection-helper";
 import { MetaDataProps } from "@/types";
 import { IntegrationProps } from "@/types/integrations";
 import { ProviderProps } from "@/types/providers";
@@ -112,7 +111,7 @@ export const S3IntegrationsManager = ({
   const handleTestConnection = async (id: string) => {
     setIsTesting(id);
     try {
-      const result = await testIntegrationConnection(id);
+      const result = await executeIntegrationConnectionTest(id);
 
       if (result.success) {
         toast({
diff --git a/ui/components/integrations/security-hub/security-hub-integrations-manager.tsx b/ui/components/integrations/security-hub/security-hub-integrations-manager.tsx
index c0c5f9f02e..b06b0bee90 100644
--- a/ui/components/integrations/security-hub/security-hub-integrations-manager.tsx
+++ b/ui/components/integrations/security-hub/security-hub-integrations-manager.tsx
@@ -4,11 +4,7 @@ import { format } from "date-fns";
 import { PlusIcon, Trash2Icon } from "lucide-react";
 import { useState } from "react";
 
-import {
-  deleteIntegration,
-  testIntegrationConnection,
-  updateIntegration,
-} from "@/actions/integrations";
+import { deleteIntegration, updateIntegration } from "@/actions/integrations";
 import { AWSSecurityHubIcon } from "@/components/icons/services/IconServices";
 import {
   IntegrationActionButtons,
@@ -25,7 +21,10 @@ import {
 } from "@/components/shadcn";
 import { Modal } from "@/components/shadcn/modal";
 import { DataTablePagination } from "@/components/shadcn/table/data-table-pagination";
-import { triggerTestConnectionWithDelay } from "@/lib/integrations/test-connection-helper";
+import {
+  executeIntegrationConnectionTest,
+  triggerTestConnectionWithDelay,
+} from "@/lib/integrations/test-connection-helper";
 import { MetaDataProps } from "@/types";
 import { IntegrationProps } from "@/types/integrations";
 import { ProviderProps } from "@/types/providers";
@@ -114,7 +113,7 @@ export const SecurityHubIntegrationsManager = ({
   const handleTestConnection = async (id: string) => {
     setIsTesting(id);
     try {
-      const result = await testIntegrationConnection(id);
+      const result = await executeIntegrationConnectionTest(id);
 
       if (result.success) {
         toast({
diff --git a/ui/components/integrations/slack/slack-integration-manager.test.tsx b/ui/components/integrations/slack/slack-integration-manager.test.tsx
index 57ed73973c..c792afa600 100644
--- a/ui/components/integrations/slack/slack-integration-manager.test.tsx
+++ b/ui/components/integrations/slack/slack-integration-manager.test.tsx
@@ -17,8 +17,8 @@ vi.mock("@/actions/integrations/slack", () => ({
   setSlackAuthorizedChannels: vi.fn(),
 }));
 
-vi.mock("@/actions/integrations/integrations", () => ({
-  testIntegrationConnection: vi.fn(),
+vi.mock("@/lib/integrations/test-connection-helper", () => ({
+  executeIntegrationConnectionTest: vi.fn(),
 }));
 
 /**
diff --git a/ui/components/integrations/slack/slack-integration-manager.tsx b/ui/components/integrations/slack/slack-integration-manager.tsx
index fdbfbcc502..40d220a97c 100644
--- a/ui/components/integrations/slack/slack-integration-manager.tsx
+++ b/ui/components/integrations/slack/slack-integration-manager.tsx
@@ -4,7 +4,6 @@ import { format, isValid, parseISO } from "date-fns";
 import { TestTube, Unplug } from "lucide-react";
 import { type ReactNode, useEffect, useState } from "react";
 
-import { testIntegrationConnection } from "@/actions/integrations/integrations";
 import {
   disconnectSlackIntegration,
   getSlackAuthorizeUrl,
@@ -37,6 +36,7 @@ import {
   slackErrorMessage,
 } from "@/lib/integrations/slack-errors";
 import type { SlackTokenErrorCode } from "@/lib/integrations/slack-errors";
+import { executeIntegrationConnectionTest } from "@/lib/integrations/test-connection-helper";
 import type {
   IntegrationProps,
   SlackAuthorizedChannel,
@@ -492,7 +492,7 @@ export const SlackIntegrationManager = ({
 
     setIsTesting(true);
     try {
-      const result = await testIntegrationConnection(id);
+      const result = await executeIntegrationConnectionTest(id);
 
       if (result.success) {
         provedCredentialAlive();
diff --git a/ui/components/shared/task-polling-watcher.tsx b/ui/components/shared/task-polling-watcher.tsx
index b551a3fe36..6cbd2fd4d8 100644
--- a/ui/components/shared/task-polling-watcher.tsx
+++ b/ui/components/shared/task-polling-watcher.tsx
@@ -9,12 +9,16 @@ import {
   crossProviderPdfHandler,
 } from "@/app/(prowler)/compliance/_lib/cross-provider-pdf";
 import { jiraDispatchTaskHandler } from "@/components/findings/jira-dispatch-task-handler";
+import { integrationConnectionTaskHandler } from "@/components/integrations/integration-connection-task-handler";
 import { useMountEffect } from "@/hooks/use-mount-effect";
 import {
   registerTaskKindHandler,
   resumePendingTasks,
 } from "@/store/task-watcher/store";
-import { JIRA_DISPATCH_TASK_KIND } from "@/types/integrations";
+import {
+  INTEGRATION_CONNECTION_TASK_KIND,
+  JIRA_DISPATCH_TASK_KIND,
+} from "@/types/integrations";
 
 // Kind registrations happen at module scope, before any task can settle in
 // this tab. Adding a new watched task kind (integration tests, scan exports,
@@ -22,6 +26,10 @@ import { JIRA_DISPATCH_TASK_KIND } from "@/types/integrations";
 registerTaskKindHandler(CROSS_PROVIDER_PDF_TASK_KIND, crossProviderPdfHandler);
 registerTaskKindHandler(CROSS_ACCOUNT_PDF_TASK_KIND, crossAccountPdfHandler);
 registerTaskKindHandler(JIRA_DISPATCH_TASK_KIND, jiraDispatchTaskHandler);
+registerTaskKindHandler(
+  INTEGRATION_CONNECTION_TASK_KIND,
+  integrationConnectionTaskHandler,
+);
 
 /**
  * Mounted once in the app layout (next to `Toaster`): resumes polling any
diff --git a/ui/lib/integrations/test-connection-helper.test.ts b/ui/lib/integrations/test-connection-helper.test.ts
new file mode 100644
index 0000000000..3dfb95ce63
--- /dev/null
+++ b/ui/lib/integrations/test-connection-helper.test.ts
@@ -0,0 +1,125 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const {
+  revalidateIntegrationConnectionPagesMock,
+  testIntegrationConnectionMock,
+  trackAndPollTaskMock,
+} = vi.hoisted(() => ({
+  revalidateIntegrationConnectionPagesMock: vi.fn(),
+  testIntegrationConnectionMock: vi.fn(),
+  trackAndPollTaskMock: vi.fn(),
+}));
+
+vi.mock("@/actions/integrations", () => ({
+  revalidateIntegrationConnectionPages:
+    revalidateIntegrationConnectionPagesMock,
+  testIntegrationConnection: testIntegrationConnectionMock,
+}));
+
+vi.mock("@/store/task-watcher/store", () => ({
+  TASK_WATCHER_STATUS: { READY: "ready", ERROR: "error" },
+  trackAndPollTask: trackAndPollTaskMock,
+}));
+
+import {
+  executeIntegrationConnectionTest,
+  runTestConnection,
+} from "./test-connection-helper";
+
+describe("integration connection test helper", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    revalidateIntegrationConnectionPagesMock.mockResolvedValue(undefined);
+    testIntegrationConnectionMock.mockResolvedValue({
+      success: true,
+      taskId: "task-1",
+    });
+    trackAndPollTaskMock.mockResolvedValue({
+      status: "ready",
+      result: { connected: true, error: null },
+    });
+  });
+
+  it("tracks a started test through the shared task watcher", async () => {
+    // Given
+    const onStarted = vi.fn();
+
+    // When
+    const result = await executeIntegrationConnectionTest("jira-1", onStarted);
+
+    // Then
+    expect(onStarted).toHaveBeenCalledOnce();
+    expect(trackAndPollTaskMock).toHaveBeenCalledWith({
+      taskId: "task-1",
+      kind: "integration-connection-test",
+      meta: { integrationId: "jira-1" },
+      notifyHandler: false,
+    });
+    expect(revalidateIntegrationConnectionPagesMock).toHaveBeenCalledOnce();
+    expect(result).toEqual({
+      success: true,
+      message: "Connection test completed successfully.",
+    });
+  });
+
+  it("preserves the backend connection failure details", async () => {
+    // Given
+    trackAndPollTaskMock.mockResolvedValue({
+      status: "ready",
+      result: {
+        connected: false,
+        error: "Channel unavailable",
+        channel: "C123",
+      },
+    });
+
+    // When
+    const result = await executeIntegrationConnectionTest("slack-1");
+
+    // Then
+    expect(result).toEqual({
+      success: false,
+      error: "Channel unavailable",
+      failedChannelId: "C123",
+    });
+  });
+
+  it("surfaces task watcher failures", async () => {
+    // Given
+    trackAndPollTaskMock.mockResolvedValue({
+      status: "error",
+      error: "The task is taking too long. Try again later.",
+    });
+
+    // When
+    const result = await executeIntegrationConnectionTest("jira-1");
+
+    // Then
+    expect(result).toEqual({
+      success: false,
+      error: "The task is taking too long. Try again later.",
+    });
+  });
+
+  it("completes once when the task cannot be started", async () => {
+    // Given
+    const onComplete = vi.fn();
+    const onError = vi.fn();
+    testIntegrationConnectionMock.mockResolvedValue({
+      success: false,
+      error: "Could not start",
+    });
+
+    // When
+    await runTestConnection({
+      integrationId: "jira-1",
+      integrationType: "jira",
+      onComplete,
+      onError,
+    });
+
+    // Then
+    expect(onError).toHaveBeenCalledWith("Could not start");
+    expect(onComplete).toHaveBeenCalledOnce();
+  });
+});
diff --git a/ui/lib/integrations/test-connection-helper.ts b/ui/lib/integrations/test-connection-helper.ts
index b2785db66f..45def22eb1 100644
--- a/ui/lib/integrations/test-connection-helper.ts
+++ b/ui/lib/integrations/test-connection-helper.ts
@@ -1,7 +1,18 @@
 import {
-  pollConnectionTestStatus,
+  revalidateIntegrationConnectionPages,
   testIntegrationConnection,
 } from "@/actions/integrations";
+import type { useToast } from "@/components/shadcn/toast/use-toast";
+import { evaluateIntegrationConnectionTask } from "@/lib/integrations/test-connection-result";
+import {
+  TASK_WATCHER_STATUS,
+  trackAndPollTask,
+} from "@/store/task-watcher/store";
+import {
+  INTEGRATION_CONNECTION_TASK_KIND,
+  type IntegrationConnectionTaskResult,
+  type IntegrationConnectionTestResponse,
+} from "@/types/integrations";
 
 // Integration configuration type
 export interface IntegrationMessages {
@@ -58,6 +69,47 @@ interface TestConnectionOptions {
   onComplete?: () => void;
 }
 
+export const executeIntegrationConnectionTest = async (
+  integrationId: string,
+  onStarted?: () => void,
+): Promise<IntegrationConnectionTestResponse> => {
+  const started = await testIntegrationConnection(integrationId);
+
+  if (!started.success) {
+    return {
+      success: false,
+      error: started.error || "Connection test could not be started.",
+    };
+  }
+
+  if (!started.taskId) {
+    return {
+      success: false,
+      error: "Failed to start connection test. No task ID received.",
+    };
+  }
+
+  onStarted?.();
+
+  const tracked = await trackAndPollTask<IntegrationConnectionTaskResult>({
+    taskId: started.taskId,
+    kind: INTEGRATION_CONNECTION_TASK_KIND,
+    meta: { integrationId },
+    notifyHandler: false,
+  });
+
+  await revalidateIntegrationConnectionPages();
+
+  if (tracked.status !== TASK_WATCHER_STATUS.READY) {
+    return {
+      success: false,
+      error: tracked.error || "Failed to track the connection test.",
+    };
+  }
+
+  return evaluateIntegrationConnectionTask(tracked.result);
+};
+
 export const runTestConnection = async ({
   integrationId,
   integrationType,
@@ -67,44 +119,22 @@ export const runTestConnection = async ({
   onComplete,
 }: TestConnectionOptions) => {
   try {
-    // Start the test without waiting for completion
-    const result = await testIntegrationConnection(integrationId, false);
+    const result = await executeIntegrationConnectionTest(
+      integrationId,
+      onStart,
+    );
 
-    if (!result || (!result.success && !result.error)) {
-      onError?.("Connection test could not be started. Please try again.");
-      onComplete?.();
-      return;
-    }
-
-    if (result.error) {
-      onError?.(result.error);
-      onComplete?.();
-      return;
-    }
-
-    if (!result.taskId) {
-      onError?.("Failed to start connection test. No task ID received.");
-      onComplete?.();
-      return;
-    }
-
-    // Notify that test has started
-    onStart?.();
-
-    // Poll for the test completion
-    const pollResult = await pollConnectionTestStatus(result.taskId);
-
-    if (pollResult.success) {
+    if (result.success) {
       const config = INTEGRATION_CONFIG[integrationType];
       const defaultMessage =
         config?.successMessage ||
         `Successfully connected to ${integrationType}.`;
-      onSuccess?.(pollResult.message || defaultMessage);
+      onSuccess?.(result.message || defaultMessage);
     } else {
       const config = INTEGRATION_CONFIG[integrationType];
       const defaultError =
         config?.errorMessage || `Failed to connect to ${integrationType}.`;
-      onError?.(pollResult.error || defaultError);
+      onError?.(result.error || defaultError);
     }
   } catch (_error) {
     onError?.(
@@ -119,7 +149,7 @@ export const triggerTestConnectionWithDelay = (
   integrationId: string | undefined,
   shouldTestConnection: boolean | undefined,
   integrationType: string,
-  toast: any,
+  toast: ReturnType<typeof useToast>["toast"],
   delay = 200,
   onComplete?: () => void,
 ) => {
diff --git a/ui/lib/integrations/test-connection-result.ts b/ui/lib/integrations/test-connection-result.ts
new file mode 100644
index 0000000000..47f45d8a3f
--- /dev/null
+++ b/ui/lib/integrations/test-connection-result.ts
@@ -0,0 +1,23 @@
+import type {
+  IntegrationConnectionTaskResult,
+  IntegrationConnectionTestResponse,
+} from "@/types/integrations";
+
+export const evaluateIntegrationConnectionTask = (
+  result: IntegrationConnectionTaskResult | undefined,
+): IntegrationConnectionTestResponse => {
+  const isSuccessful = result?.connected === true && result.error === null;
+
+  if (isSuccessful) {
+    return {
+      success: true,
+      message: "Connection test completed successfully.",
+    };
+  }
+
+  return {
+    success: false,
+    error: result?.error || "Connection test failed.",
+    failedChannelId: result?.channel ?? null,
+  };
+};
diff --git a/ui/types/integrations.ts b/ui/types/integrations.ts
index 74a66526a6..0e1dbe7b10 100644
--- a/ui/types/integrations.ts
+++ b/ui/types/integrations.ts
@@ -12,6 +12,34 @@ export const INTEGRATION_TYPE = {
 export type IntegrationType =
   (typeof INTEGRATION_TYPE)[keyof typeof INTEGRATION_TYPE];
 
+export const INTEGRATION_CONNECTION_TASK_KIND = "integration-connection-test";
+
+export interface IntegrationConnectionTaskResource {
+  id: string;
+  type: "tasks";
+}
+
+export interface IntegrationConnectionTaskDocument {
+  data: IntegrationConnectionTaskResource;
+}
+
+export interface IntegrationConnectionTaskResult {
+  connected?: boolean;
+  error?: string | null;
+  /** The failing channel id, or null when the failure names no channel. */
+  channel?: string | null;
+}
+
+export interface IntegrationConnectionTestResponse {
+  success: boolean;
+  message?: string;
+  taskId?: string;
+  data?: IntegrationConnectionTaskDocument;
+  error?: string;
+  /** The failing channel id, or null when the failure names no channel. */
+  failedChannelId?: string | null;
+}
+
 export const JIRA_DISPATCH_MODE = {
   INDIVIDUAL: "individual",
   GROUPED: "grouped",

From 623dc3125ab0b82f3b9371229b8ce10f8034a69e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9sar=20Arroba?=
 <19954079+cesararroba@users.noreply.github.com>
Date: Mon, 7 Sep 2026 19:11:56 +0200
Subject: [PATCH 39/77] chore(codeowners): consolidate retired teams under
 engineering (#12755)

---
 .github/CODEOWNERS | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index ed97ff5a1a..dc1e714b47 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -1,23 +1,23 @@
 # SDK
-/* @prowler-cloud/detection-remediation
-/prowler/ @prowler-cloud/detection-remediation
-/tests/ @prowler-cloud/detection-remediation
-/dashboard/ @prowler-cloud/detection-remediation
-/docs/ @prowler-cloud/detection-remediation
-/examples/ @prowler-cloud/detection-remediation
-/util/ @prowler-cloud/detection-remediation
-/contrib/ @prowler-cloud/detection-remediation
-/permissions/ @prowler-cloud/detection-remediation
-/codecov.yml @prowler-cloud/detection-remediation @prowler-cloud/api
+/* @prowler-cloud/engineering
+/prowler/ @prowler-cloud/engineering
+/tests/ @prowler-cloud/engineering
+/dashboard/ @prowler-cloud/engineering
+/docs/ @prowler-cloud/engineering
+/examples/ @prowler-cloud/engineering
+/util/ @prowler-cloud/engineering
+/contrib/ @prowler-cloud/engineering
+/permissions/ @prowler-cloud/engineering
+/codecov.yml @prowler-cloud/engineering
 
 # API
-/api/ @prowler-cloud/api
+/api/ @prowler-cloud/engineering
 
 # UI
-/ui/ @prowler-cloud/ui
+/ui/ @prowler-cloud/engineering
 
 # AI
-/mcp_server/ @prowler-cloud/detection-remediation
+/mcp_server/ @prowler-cloud/engineering
 
 # Platform
 /.github/ @prowler-cloud/platform

From 2769cb98766c25902aacc803c2583a50b31f7f8e Mon Sep 17 00:00:00 2001
From: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com>
Date: Tue, 8 Sep 2026 11:42:09 +0200
Subject: [PATCH 40/77] fix(ui): patch dependency vulnerabilities flagged by
 dependabot and pnpm audit (#12758)

---
 ...pendabot-audit-vulnerabilities.security.md |   1 +
 ui/dependency-log.json                        |  16 +-
 ui/package.json                               |   6 +-
 ui/pnpm-lock.yaml                             | 464 ++++++++++--------
 ui/pnpm-workspace.yaml                        |  68 ++-
 5 files changed, 332 insertions(+), 223 deletions(-)
 create mode 100644 ui/changelog.d/dependabot-audit-vulnerabilities.security.md

diff --git a/ui/changelog.d/dependabot-audit-vulnerabilities.security.md b/ui/changelog.d/dependabot-audit-vulnerabilities.security.md
new file mode 100644
index 0000000000..9d030097f0
--- /dev/null
+++ b/ui/changelog.d/dependabot-audit-vulnerabilities.security.md
@@ -0,0 +1 @@
+`nanoid` to 5.1.16, `js-yaml` to 4.3.1 and `postcss` to 8.5.23, plus transitive `hono`, `@hono/node-server`, `browserslist`, `qs`, `dompurify`, `brace-expansion`, `fast-uri`, `ip-address`, `mermaid`, `body-parser` and `@humanfs/node` to patched versions, resolving 40 npm audit advisories (21 high, 15 moderate, 4 low)
diff --git a/ui/dependency-log.json b/ui/dependency-log.json
index ee2d398248..556b50cdbb 100644
--- a/ui/dependency-log.json
+++ b/ui/dependency-log.json
@@ -442,10 +442,10 @@
   {
     "section": "dependencies",
     "name": "js-yaml",
-    "from": "4.1.1",
-    "to": "4.3.0",
+    "from": "4.3.0",
+    "to": "4.3.1",
     "strategy": "installed",
-    "generatedAt": "2026-07-16T15:29:57.887Z"
+    "generatedAt": "2026-09-08T07:45:48.316Z"
   },
   {
     "section": "dependencies",
@@ -491,9 +491,9 @@
     "section": "dependencies",
     "name": "nanoid",
     "from": "5.1.6",
-    "to": "5.1.6",
+    "to": "5.1.16",
     "strategy": "installed",
-    "generatedAt": "2025-12-10T11:34:11.122Z"
+    "generatedAt": "2026-09-08T07:45:48.316Z"
   },
   {
     "section": "dependencies",
@@ -930,10 +930,10 @@
   {
     "section": "devDependencies",
     "name": "postcss",
-    "from": "8.4.38",
-    "to": "8.5.14",
+    "from": "8.5.14",
+    "to": "8.5.23",
     "strategy": "installed",
-    "generatedAt": "2026-05-14T10:09:04.901Z"
+    "generatedAt": "2026-09-08T07:45:48.316Z"
   },
   {
     "section": "devDependencies",
diff --git a/ui/package.json b/ui/package.json
index 05bef52188..8101c117f5 100644
--- a/ui/package.json
+++ b/ui/package.json
@@ -90,13 +90,13 @@
     "driver.js": "1.4.0",
     "framer-motion": "11.18.2",
     "import-in-the-middle": "3.3.1",
-    "js-yaml": "4.3.0",
+    "js-yaml": "4.3.1",
     "jwt-decode": "4.0.0",
     "langchain": "1.4.0",
     "lucide-react": "0.543.0",
     "marked": "15.0.12",
     "modern-screenshot": "4.7.0",
-    "nanoid": "5.1.6",
+    "nanoid": "5.1.16",
     "next": "16.2.11",
     "next-auth": "5.0.0-beta.32",
     "next-themes": "0.2.1",
@@ -153,7 +153,7 @@
     "jsdom": "27.4.0",
     "knip": "6.3.1",
     "msw": "2.13.4",
-    "postcss": "8.5.14",
+    "postcss": "8.5.23",
     "prettier": "3.6.2",
     "prettier-plugin-packagejson": "2.5.22",
     "prettier-plugin-tailwindcss": "0.6.14",
diff --git a/ui/pnpm-lock.yaml b/ui/pnpm-lock.yaml
index 6941491765..01200c3e6d 100644
--- a/ui/pnpm-lock.yaml
+++ b/ui/pnpm-lock.yaml
@@ -14,19 +14,19 @@ overrides:
   lodash: 4.18.1
   sharp: 0.35.3
   lodash-es: 4.18.1
-  hono: 4.12.28
-  '@hono/node-server': 1.19.14
+  hono: 4.12.34
+  '@hono/node-server': 1.19.17
   '@isaacs/brace-expansion': 5.0.1
   fast-xml-parser: 5.8.0
   serialize-javascript: 7.0.5
-  postcss: 8.5.14
+  postcss: 8.5.23
   esbuild: 0.28.1
   rollup@>=4: 4.59.0
   vite@>=7 <8: 7.3.5
   ws@>=8 <9: 8.21.0
   es-module-lexer: 2.3.0
   '@babel/core': 7.29.7
-  browserslist: 4.28.2
+  browserslist: 4.28.7
   caniuse-lite: 1.0.30001792
   baseline-browser-mapping: 2.10.29
   minimatch@<4: 3.1.4
@@ -34,10 +34,18 @@ overrides:
   minimatch@>=10: 10.2.3
   ajv@<7: 6.14.0
   ajv@>=8: 8.18.0
-  qs: 6.15.2
+  qs: 6.16.0
   express-rate-limit: 8.5.1
   uuid: 11.1.1
-  dompurify: 3.4.11
+  dompurify: 3.4.13
+  brace-expansion@<2: 1.1.18
+  brace-expansion@>=5: 5.0.9
+  fast-uri: 3.1.6
+  ip-address: 10.3.1
+  mermaid: 11.16.1
+  body-parser: 2.3.0
+  '@humanfs/node': 0.16.8
+  js-yaml: 4.3.1
 
 importers:
 
@@ -159,7 +167,7 @@ importers:
         version: 3.26.0(react@19.2.7)
       '@sentry/nextjs':
         specifier: 10.65.0
-        version: 10.65.0(@opentelemetry/core@2.9.0(@opentelemetry/api@1.9.1))(@opentelemetry/sdk-trace-base@2.9.0(@opentelemetry/api@1.9.1))(next@16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.14))
+        version: 10.65.0(@opentelemetry/core@2.9.0(@opentelemetry/api@1.9.1))(@opentelemetry/sdk-trace-base@2.9.0(@opentelemetry/api@1.9.1))(next@16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.23))
       '@tailwindcss/postcss':
         specifier: 4.1.18
         version: 4.1.18
@@ -209,8 +217,8 @@ importers:
         specifier: 3.3.1
         version: 3.3.1
       js-yaml:
-        specifier: 4.3.0
-        version: 4.3.0
+        specifier: 4.3.1
+        version: 4.3.1
       jwt-decode:
         specifier: 4.0.0
         version: 4.0.0
@@ -227,8 +235,8 @@ importers:
         specifier: 4.7.0
         version: 4.7.0
       nanoid:
-        specifier: 5.1.6
-        version: 5.1.6
+        specifier: 5.1.16
+        version: 5.1.16
       next:
         specifier: 16.2.11
         version: 16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
@@ -334,13 +342,13 @@ importers:
         version: 1.0.5
       '@vitejs/plugin-react':
         specifier: 5.1.2
-        version: 5.1.2(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))
+        version: 5.1.2(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))
       '@vitest/browser':
         specifier: 4.1.10
-        version: 4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))(vitest@4.1.10)
+        version: 4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))(vitest@4.1.10)
       '@vitest/browser-playwright':
         specifier: 4.1.10
-        version: 4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(playwright@1.56.1)(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))(vitest@4.1.10)
+        version: 4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(playwright@1.56.1)(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))(vitest@4.1.10)
       '@vitest/coverage-v8':
         specifier: 4.1.10
         version: 4.1.10(@vitest/browser@4.1.10)(vitest@4.1.10)
@@ -393,8 +401,8 @@ importers:
         specifier: 2.13.4
         version: 2.13.4(@types/node@24.10.8)(typescript@5.5.4)
       postcss:
-        specifier: 8.5.14
-        version: 8.5.14
+        specifier: 8.5.23
+        version: 8.5.23
       prettier:
         specifier: 3.6.2
         version: 3.6.2
@@ -415,7 +423,7 @@ importers:
         version: 8.59.3(eslint@9.39.2(jiti@2.7.0))(typescript@5.5.4)
       vitest:
         specifier: 4.1.10
-        version: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.10.8)(@vitest/browser-playwright@4.1.10)(@vitest/coverage-v8@4.1.10)(jsdom@27.4.0)(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))
+        version: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.10.8)(@vitest/browser-playwright@4.1.10)(@vitest/coverage-v8@4.1.10)(jsdom@27.4.0)(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))
       vitest-browser-react:
         specifier: 2.0.4
         version: 2.0.4(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(vitest@4.1.10)
@@ -742,8 +750,8 @@ packages:
   '@blazediff/core@1.9.1':
     resolution: {integrity: sha512-ehg3jIkYKulZh+8om/O25vkvSsXXwC+skXmyA87FFx6A/45eqOkZsBltMw/TVteb0mloiGT8oGRTcjRAz66zaA==}
 
-  '@braintree/sanitize-url@7.1.1':
-    resolution: {integrity: sha512-i1L7noDNxtFyL5DmZafWy1wRVhGehQmzZaz1HiN5e7iylJMSZR7ekOV7NsIqa5qBldlLrsKv4HbgFUVlQrz8Mw==}
+  '@braintree/sanitize-url@7.1.2':
+    resolution: {integrity: sha512-jigsZK+sMF/cuiB7sERuo9V7N9jx+dhmHHnQyDSVdpZwVutaBu7WvNYqMDLSgFgfB30n452TP3vjDAvFC973mA==}
 
   '@cfworker/json-schema@4.1.1':
     resolution: {integrity: sha512-gAmrUZSGtKc3AiBL71iNWxDsyUC5uMaKKGdvzYsBoTW/xi42JQHl7eKV2OYzCUqvc+D2RCcf7EXY2iCyFIk6og==}
@@ -757,8 +765,8 @@ packages:
   '@codemirror/commands@6.10.3':
     resolution: {integrity: sha512-JFRiqhKu+bvSkDLI+rUhJwSxQxYb759W5GBezE8Uc8mHLqC9aV/9aTC7yJSqCtB3F00pylrLCwnyS91Ap5ej4Q==}
 
-  '@codemirror/commands@6.10.4':
-    resolution: {integrity: sha512-Ryk9y9T0FFVF0cUGhAknveAyUOl/A1qReTFi+qPKtOh2Z9F4AUBz3XOrYD4ZEgZirdugVzHvd/2/Wcwy5OliTg==}
+  '@codemirror/commands@6.11.0':
+    resolution: {integrity: sha512-/K4Rl5BN0OtTiPWmJCdqODu38XnDMsDxKY5rgrPnCkutPTJf2wVbkoixLfealF5Kwse/s8P8M5jAiURiwSwnFA==}
 
   '@codemirror/language@6.12.2':
     resolution: {integrity: sha512-jEPmz2nGGDxhRTg3lTpzmIyGKxz3Gp3SJES4b0nAuE5SWQoKdT5GoQ69cwMmFd+wvFUhYirtDTr0/DRHpQAyWg==}
@@ -772,8 +780,8 @@ packages:
   '@codemirror/state@6.6.0':
     resolution: {integrity: sha512-4nbvra5R5EtiCzr9BTHiTLc+MLXK2QGiAVYMyi8PkQd3SR+6ixar/Q/01Fa21TBIDOZXgeWV4WppsQolSreAPQ==}
 
-  '@codemirror/state@6.7.1':
-    resolution: {integrity: sha512-9QzNDgE4EYDnAHfrTlR2lwiPciiOymLtwKK+8yHQzCc7GXhAP9xdEbEJFy2IWB1j9UGUl9BsgMmTo/ImA02T7A==}
+  '@codemirror/state@6.7.2':
+    resolution: {integrity: sha512-U3RiPX62Wl/Gx4ftQ7UxLlloSfsFTQqKa+7vFBYteZGCzkp6oBqcsD7iSwniWRGobCAmDcwZSY+Six3+3ztdfg==}
 
   '@codemirror/theme-one-dark@6.1.3':
     resolution: {integrity: sha512-NzBdIvEJmx6fjeremiGp3t/okrLPYT0d9orIc7AFun8oZcRk58aejkqhv6spnz4MLAevrKNPMQYXEWMg4s+sKA==}
@@ -1055,23 +1063,27 @@ packages:
   '@floating-ui/utils@0.2.10':
     resolution: {integrity: sha512-aGTxbpbg8/b5JfU1HXSrbH3wXZuLPJcNEcZQFMxLs3oSzgtVu6nFPkbbGGUvBcUjKV2YyB9Wxxabo+HEH9tcRQ==}
 
-  '@hono/node-server@1.19.14':
-    resolution: {integrity: sha512-GwtvgtXxnWsucXvbQXkRgqksiH2Qed37H9xHZocE5sA3N8O8O8/8FA3uclQXxXVzc9XBZuEOMK7+r02FmSpHtw==}
+  '@hono/node-server@1.19.17':
+    resolution: {integrity: sha512-dSneS5qhiauZWGDCeK4o695Xd9nUNjviSZCMQrj10eetr8Uln1ucn6bbphOM6UynAMMtNIzZNSpL9vnASJwrPQ==}
     engines: {node: '>=18.14.1'}
     peerDependencies:
-      hono: 4.12.28
+      hono: 4.12.34
 
   '@hookform/resolvers@5.2.2':
     resolution: {integrity: sha512-A/IxlMLShx3KjV/HeTcTfaMxdwy690+L/ZADoeaTltLx+CVuzkeVIPuybK3jrRfw7YZnmdKsVVHAlEPIAEUNlA==}
     peerDependencies:
       react-hook-form: ^7.55.0
 
-  '@humanfs/core@0.19.1':
-    resolution: {integrity: sha512-5DyQ4+1JEUzejeK1JGICcideyfUbGixgS9jNgex5nqkW+cY7WZhxBigmieN5Qnw9ZosSNVC9KQKyb+GUaGyKUA==}
+  '@humanfs/core@0.19.2':
+    resolution: {integrity: sha512-UhXNm+CFMWcbChXywFwkmhqjs3PRCmcSa/hfBgLIb7oQ5HNb1wS0icWsGtSAUNgefHeI+eBrA8I1fxmbHsGdvA==}
     engines: {node: '>=18.18.0'}
 
-  '@humanfs/node@0.16.7':
-    resolution: {integrity: sha512-/zUx+yOsIrG4Y43Eh2peDeKCxlRt/gET6aHfaKpuq267qXdYDFViVHfMaLyygZOnl0kGWxFIgsBy8QFuTLUXEQ==}
+  '@humanfs/node@0.16.8':
+    resolution: {integrity: sha512-gE1eQNZ3R++kTzFUpdGlpmy8kDZD/MLyHqDwqjkVQI0JMdI1D51sy1H958PNXYkM2rAac7e5/CnIKZrHtPh3BQ==}
+    engines: {node: '>=18.18.0'}
+
+  '@humanfs/types@0.15.0':
+    resolution: {integrity: sha512-ZZ1w0aoQkwuUuC7Yf+7sdeaNfqQiiLcSRbfI08oAxqLtpXQr9AIVX7Ay7HLDuiLYAaFPu8oBYNq/QIi9URHJ3Q==}
     engines: {node: '>=18.18.0'}
 
   '@humanwhocodes/module-importer@1.0.1':
@@ -1381,11 +1393,11 @@ packages:
   '@marijn/find-cluster-break@1.0.2':
     resolution: {integrity: sha512-l0h88YhZFyKdXIFNfSWpyjStDjGHwZ/U7iobcK1cQQD8sejsONdQtTVU+1wVN1PBw40PiiHB1vA5S7VTfQiP9g==}
 
-  '@marijn/find-cluster-break@1.0.3':
-    resolution: {integrity: sha512-FY+MKLBoTsLNJF/eLWaOsXGdz6uh3Iu1axjPf6TUq92IYumcTcXWHoS747JARLkcdlJ/Waiaxc5wQfFO8jC6NA==}
+  '@marijn/find-cluster-break@1.0.4':
+    resolution: {integrity: sha512-Wy0V7+SGUjnF9/TkiM1hKVDPj7jKXduPNboMVtHTA8dySMURWqfg/JZ9E2Sq8JgSJmkl7k7Qe9FLeMSrSraWmQ==}
 
-  '@mermaid-js/parser@1.1.1':
-    resolution: {integrity: sha512-VuHdsYMK1bT6X2JbcAaWAhugTRvRBRyuZgd+c22swUeI9g/ntaxF7CY7dYarhZovofCbUNO0G7JesfmNtjYOCw==}
+  '@mermaid-js/parser@1.2.1':
+    resolution: {integrity: sha512-n12NohV3mrUyUL2o93IgG/ifeW9FTyeJn3zDxkhwa8MJ9Fxg3HQMlA3RiGmD/3UnJvheztkjjQAjA2T4LmUcpw==}
 
   '@modelcontextprotocol/sdk@1.26.0':
     resolution: {integrity: sha512-Y5RmPncpiDtTXDbLKswIJzTqu2hyBKxTNsgKqKclDbhIgg1wgtf1fRuvxgTnRfcnxtvvgbIEcqUOzZrJ6iSReg==}
@@ -3735,8 +3747,8 @@ packages:
     engines: {node: '>=0.4.0'}
     hasBin: true
 
-  acorn@8.17.0:
-    resolution: {integrity: sha512-xRQbDb9BnwDafYNn6Vwl839DYVjqXYb1XVGtWAZ1kcDc6iwAL4hg3B1dZlRiuENFeO2H53gFG3in621AdERVAg==}
+  acorn@8.18.0:
+    resolution: {integrity: sha512-lGq+9yr1/GuAWaVYIHRjvvySG5/4VfKIvC8EWxStPdcDh/Ka7FG3twP6v4d5BkravUilhIAsG4Qj83t02LWUPQ==}
     engines: {node: '>=0.4.0'}
     hasBin: true
 
@@ -3889,26 +3901,26 @@ packages:
   bidi-js@1.0.3:
     resolution: {integrity: sha512-RKshQI1R3YQ+n9YJz2QQ147P66ELpa1FQEg20Dk8oW9t2KgLbpDLLp9aGZ7y8WHSshDknG0bknqGw5/tyCs5tw==}
 
-  body-parser@2.2.2:
-    resolution: {integrity: sha512-oP5VkATKlNwcgvxi0vM0p/D3n2C3EReYVX+DNYs5TjZFn/oQt2j+4sVJtSMr18pdRr8wjTcBl6LoV+FUwzPmNA==}
+  body-parser@2.3.0:
+    resolution: {integrity: sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==}
     engines: {node: '>=18'}
 
   bowser@2.14.1:
     resolution: {integrity: sha512-tzPjzCxygAKWFOJP011oxFHs57HzIhOEracIgAePE4pqB3LikALKnSzUyU4MGs9/iCEUuHlAJTjTc5M+u7YEGg==}
 
-  brace-expansion@1.1.13:
-    resolution: {integrity: sha512-9ZLprWS6EENmhEOpjCYW2c8VkmOvckIJZfkr7rBW6dObmfgJ/L1GpSYW5Hpo9lDz4D1+n0Ckz8rU7FwHDQiG/w==}
+  brace-expansion@1.1.18:
+    resolution: {integrity: sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==}
 
-  brace-expansion@5.0.6:
-    resolution: {integrity: sha512-kLpxurY4Z4r9sgMsyG0Z9uzsBlgiU/EFKhj/h91/8yHu0edo7XuixOIH3VcJ8kkxs6/jPzoI6U9Vj3WqbMQ94g==}
-    engines: {node: 18 || 20 || >=22}
+  brace-expansion@5.0.9:
+    resolution: {integrity: sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==}
+    engines: {node: 20 || >=22}
 
   braces@3.0.3:
     resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
     engines: {node: '>=8'}
 
-  browserslist@4.28.2:
-    resolution: {integrity: sha512-48xSriZYYg+8qXna9kwqjIVzuQxi+KYWp2+5nCYnYKPTr0LvD89Jqk2Or5ogxz0NUMfIjhh2lIUX/LyX9B4oIg==}
+  browserslist@4.28.7:
+    resolution: {integrity: sha512-JxV13hNrFxqjOc8alRbq9dK1MM79NEXYpma2B2J4wAtpWS5zIEIKqWPGCl7N4o7Uc7B7itylh7SuDujATRyyTw==}
     engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7}
     hasBin: true
 
@@ -4044,6 +4056,10 @@ packages:
     resolution: {integrity: sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==}
     engines: {node: '>= 0.6'}
 
+  content-type@2.1.0:
+    resolution: {integrity: sha512-mj7UPXE0jaqaOsukNZRUEfEi2AcL7C/vwmwcHV0O97eO1E1pxBZuyjlZrx5seTaNBg1U6+o35wpa35Qfcc+7ag==}
+    engines: {node: '>=18'}
+
   convert-source-map@2.0.0:
     resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
 
@@ -4114,8 +4130,8 @@ packages:
     peerDependencies:
       cytoscape: ^3.2.0
 
-  cytoscape@3.33.1:
-    resolution: {integrity: sha512-iJc4TwyANnOGR1OmWhsS9ayRS3s+XQ185FmuHObThD+5AeJCakAAbWv8KimMTt08xCCLNgneQwFp+JRJOr9qGQ==}
+  cytoscape@3.34.2:
+    resolution: {integrity: sha512-Cm2jaj1X/PBNlzV9yH8zcfGOxO7U+CJ/+mxSBVPSchLaugdp4jtlGx5qaHtPRZ6tgiZ5P+o1XoRfJA+ba6KM3g==}
     engines: {node: '>=0.10'}
 
   d3-array@2.12.1:
@@ -4285,8 +4301,8 @@ packages:
   date-fns@4.1.0:
     resolution: {integrity: sha512-Ukq0owbQXxa/U3EGtsdVBkR1w7KOQ5gIBqdH2hkvknzZPYvBxb/aa6E8L7tmjFtkwZBu3UXBbjIgPo/Ez4xaNg==}
 
-  dayjs@1.11.19:
-    resolution: {integrity: sha512-t5EcLVS6QPBNqM2z8fakk/NKel+Xzshgt8FFKAn+qwlD1pzZWxh0nVCrvFK7ZDb6XucZeF9z8C7CBWTRIVApAw==}
+  dayjs@1.11.23:
+    resolution: {integrity: sha512-QDTCU0M0MxR3hQfnlDJfwekQiaanm1ubOD231u73WBckQ/fsamwRLiE2GBz6D3a/xF1NgfiDLJjXBa1hYOYTtQ==}
 
   debug@4.4.3:
     resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==}
@@ -4363,8 +4379,8 @@ packages:
   dom-helpers@5.2.1:
     resolution: {integrity: sha512-nRCa7CK3VTrM2NmGkIy4cbK7IZlgBE/PYMn55rrXefr5xXDP0LdtfPnblFDoVdcAfslJ7or6iqAUnx0CCGIWQA==}
 
-  dompurify@3.4.11:
-    resolution: {integrity: sha512-zhlUV12GsaRzMsf9q5M254YhA4+VuF0fG+QFqu6aYpoGlKtz+w8//jBcGVYBgQkR5GHjUomejY84AV+/uPbWdw==}
+  dompurify@3.4.13:
+    resolution: {integrity: sha512-2vmYIoqjze2d+kakP8S/nS5shfsl587kzwEjcGlTdiksUVgFHnFCsLYDVj/JNqJVOQZGSYBTmuycv0PodwmnMQ==}
 
   dotenv-expand@12.0.3:
     resolution: {integrity: sha512-uc47g4b+4k/M/SeaW1y4OApx+mtLWl92l5LMPP0GNXctZqELk+YGgOPIIC5elYmUH4OuoK3JLhuRUYegeySiFA==}
@@ -4388,8 +4404,8 @@ packages:
   ee-first@1.1.1:
     resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==}
 
-  electron-to-chromium@1.5.354:
-    resolution: {integrity: sha512-JaBHwWcfIdmSAfWM5l3uwjGd431j8YEMikZ+K/2nXVuBqJKyZ0f+2h4n4JY5AyNiZmnY9qQr2RU3v9DxDmHMNg==}
+  electron-to-chromium@1.5.418:
+    resolution: {integrity: sha512-UzS26r3AEbG5wSoGVpJKqwHIU9zwQN7LHdVIThDrJpS0I5KdlXFMEb8543fhc9dVnIIAST6ar8rhwa00AL5MlA==}
 
   emoji-regex@8.0.0:
     resolution: {integrity: sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==}
@@ -4405,8 +4421,8 @@ packages:
     resolution: {integrity: sha512-xe9vQb5kReirPUxgQrXA3ihgbCqssmTiM7cOZ+Gzu+VeGWgpV98lLZvp0dl4yriyAePcewxGUs9UpKD8PET9KQ==}
     engines: {node: '>=10.13.0'}
 
-  enhanced-resolve@5.24.2:
-    resolution: {integrity: sha512-rpsZEGT1jFuve6QlpyRp9ckQ+kN61hvF9BzCPyMdaKTm8UJce96KBn3sorXOFXlzjPrs3Vc4T1NsSroZ3PxlFw==}
+  enhanced-resolve@5.24.5:
+    resolution: {integrity: sha512-L1l8TNvomm6UVW5B253AGxQagSQr+vGwhMlrrfRS2qmhx46AMpMVJKQYLvWYbysTMY8VoicOvzHzoHMbyzB+4A==}
     engines: {node: '>=10.13.0'}
 
   entities@6.0.1:
@@ -4666,8 +4682,8 @@ packages:
   fast-string-width@3.0.2:
     resolution: {integrity: sha512-gX8LrtNEI5hq8DVUfRQMbr5lpaS4nMIWV+7XEbXk2b8kiQIizgnlr12B4dA3ZEx3308ze0O4Q1R+cHts8kyUJg==}
 
-  fast-uri@3.1.2:
-    resolution: {integrity: sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==}
+  fast-uri@3.1.6:
+    resolution: {integrity: sha512-7Ical1vFEMr0onbVzEDIreM22I4khW+fzyQPwvAFWBp1iwdshSZRsL4jjRvPG9JP1uiqMHRto+YU6R2/CzDz5Q==}
 
   fast-wrap-ansi@0.2.0:
     resolution: {integrity: sha512-rLV8JHxTyhVmFYhBJuMujcrHqOT2cnO5Zxj37qROj23CP39GXubJRBUFF0z8KFK77Uc0SukZUf7JZhsVEQ6n8w==}
@@ -4929,8 +4945,8 @@ packages:
   hermes-parser@0.25.1:
     resolution: {integrity: sha512-6pEjquH3rqaI6cYAXYPcz9MS4rY6R4ngRgrgfDshRptUZIc3lw0MCIJIGDj9++mfySOuPTHB4nrSW99BCvOPIA==}
 
-  hono@4.12.28:
-    resolution: {integrity: sha512-YwUvVpSF7m1yOblFPrU3Hbo8XhPheBoiyfGuII6z19LnOr6JpDnyyp7LFNrfV56wS8tpvtBFGRISHN02pDdLOA==}
+  hono@4.12.34:
+    resolution: {integrity: sha512-GqXJqY/xJkJmuloTrnV1ZEXG3fqte+VjkUqoRNZXcrUidiUOP4fMSIHHY4tsqZBK++kVyWmt/AAfSUuy57/eSA==}
     engines: {node: '>=16.9.0'}
 
   html-encoding-sniffer@6.0.0:
@@ -5014,8 +5030,8 @@ packages:
     resolution: {integrity: sha512-5Hh7Y1wQbvY5ooGgPbDaL5iYLAPzMTUrjMulskHLH6wnv/A+1q5rgEaiuqEjB+oxGXIVZs1FF+R/KPN3ZSQYYg==}
     engines: {node: '>=12'}
 
-  ip-address@10.2.0:
-    resolution: {integrity: sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==}
+  ip-address@10.3.1:
+    resolution: {integrity: sha512-1e9d3kb97NHJTIJDZW9rKqW2h6+dFa50Dy0fpPSMQp2ADje5gvKsXmdiK6dwY5t76TaTt5+P5N1Y/LoToIxP6g==}
     engines: {node: '>= 12'}
 
   ipaddr.js@1.9.1:
@@ -5207,8 +5223,8 @@ packages:
   js-tokens@4.0.0:
     resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
 
-  js-yaml@4.3.0:
-    resolution: {integrity: sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==}
+  js-yaml@4.3.1:
+    resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==}
     hasBin: true
 
   jsdom@27.4.0:
@@ -5263,6 +5279,10 @@ packages:
     resolution: {integrity: sha512-aeQoDkuRWSqQN6nSvVCEFvfXdqo1OQiCmmW1kc9xSdjutPv7BGO7pqY9sQRJpMOGrEdfDgF2TfRXe5eUAD2Waw==}
     hasBin: true
 
+  katex@0.16.47:
+    resolution: {integrity: sha512-Eeo8Ys1doU1z+x8AZsPpQu+p/QcZBI5PeOo7QGQdy2x2m0MU/hYagBbGOmXwr5KVbEfVuWv9LpnQWeehogurjg==}
+    hasBin: true
+
   keyv@4.5.4:
     resolution: {integrity: sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw==}
 
@@ -5539,8 +5559,8 @@ packages:
     resolution: {integrity: sha512-Sz8FzjzI0kN13GK/6MVEsVzMZEPvOhnmmI1lU5+/1cGOiK3QUahntrNNtdVeihrO7t9JpoH75iMNXg6R6uWflQ==}
     engines: {node: '>=18.0.0'}
 
-  mermaid@11.15.0:
-    resolution: {integrity: sha512-pTMbcf3rWdtLiYGpmoTjHEpeY8seiy6sR+9nD7LOs8KfUbHE4lOUAprTRqRAcWSQ6MQpdX+YEsxShtGsINtPtw==}
+  mermaid@11.16.1:
+    resolution: {integrity: sha512-TQsq6u22fAn3rek5VOubrhKPo1g5hwC3FXUN9hiyupTckcYiGuuKGkNQrKYwGJkXUxZdojwRG46gsSCFZMDp4g==}
 
   micromark-core-commonmark@2.0.3:
     resolution: {integrity: sha512-RDBrHEMSxVFLg6xvnXmb1Ayr2WzLAWjeSATAoxwKYJV94TeNavgoIdA0a9ytzDSVzBy2YKFK+emCPOEibLeCrg==}
@@ -5740,13 +5760,13 @@ packages:
     resolution: {integrity: sha512-dkEJPVvun4FryqBmZ5KhDo0K9iDXAwn08tMLDinNdRBNPcYEDiWYysLcc6k3mjTMlbP9KyylvRpd4wFtwrT9rw==}
     engines: {node: ^20.17.0 || >=22.9.0}
 
-  nanoid@3.3.12:
-    resolution: {integrity: sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ==}
+  nanoid@3.3.18:
+    resolution: {integrity: sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==}
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
     hasBin: true
 
-  nanoid@5.1.6:
-    resolution: {integrity: sha512-c7+7RQ+dMB5dPwwCp4ee1/iV/q2P6aK1mTZcfr1BTuVlyW9hJYiMPybJCcnBlQtuSmTIWNeazm/zqNoZSSElBg==}
+  nanoid@5.1.16:
+    resolution: {integrity: sha512-kVrnsrJqMR8+oLJnGEmSWw9BivK5mt7H3FZatVRjrc5wGqFYuBxX1yG7+A7Gi5AefkX6t/oCkizcQgpu0cY1dQ==}
     engines: {node: ^18 || >=20}
     hasBin: true
 
@@ -5818,8 +5838,9 @@ packages:
       encoding:
         optional: true
 
-  node-releases@2.0.44:
-    resolution: {integrity: sha512-5WUyunoPMsvvEhS8AxHtRzP+oA8UCkJ7YRxatWKjngndhDGLiqEVAQKWjFAiAiuL8zMRGzGSJxFnLetoa43qGQ==}
+  node-releases@2.0.54:
+    resolution: {integrity: sha512-YHs7BmmcsdAI5Ozuf8JZo6PT0mv2GIWC9vMfvUC3dp65M8hn7Ux8CPL+2oBI7juNuj9d0ndhTcznq2ODBps9cQ==}
+    engines: {node: '>=18'}
 
   oauth4webapi@3.8.3:
     resolution: {integrity: sha512-pQ5BsX3QRTgnt5HxgHwgunIRaDXBdkT23tf8dfzmtTIL2LTpdmxgbpbBm0VgFWAIDlezQvQCTgnVIUmHupXHxw==}
@@ -5996,6 +6017,10 @@ packages:
     resolution: {integrity: sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==}
     engines: {node: '>=12'}
 
+  picomatch@4.0.7:
+    resolution: {integrity: sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==}
+    engines: {node: '>=12'}
+
   pkce-challenge@5.0.1:
     resolution: {integrity: sha512-wQ0b/W4Fr01qtpHlqSqspcj3EhBvimsdh0KlHhH8HRZnMsEa0ea2fTULOXOS9ccQr3om+GcGRk4e+isrZWV8qQ==}
     engines: {node: '>=16.20.0'}
@@ -6031,8 +6056,8 @@ packages:
     resolution: {integrity: sha512-IQ7TZdoaqbT+LCpShg46jnZVlhWD2w6iQYAcYXfHARZ7X1t/UGhhceQDs5X0cGqKvYlHNOuv7Oa1xmb0oQuA3w==}
     engines: {node: '>=4'}
 
-  postcss@8.5.14:
-    resolution: {integrity: sha512-SoSL4+OSEtR99LHFZQiJLkT59C5B1amGO1NzTwj7TT1qCUgUO6hxOvzkOYxD+vMrXBM3XJIKzokoERdqQq/Zmg==}
+  postcss@8.5.23:
+    resolution: {integrity: sha512-g50586zr4bZmwFiTlflMu8E0bDTb5I5gertgwAKmsdUlTQIhZtunzUlD1WSzwcVWPoAVpsrA6vlfCD7oXvRwgg==}
     engines: {node: ^10 || ^12 || >=14}
 
   posthog-js@1.407.2:
@@ -6157,8 +6182,8 @@ packages:
     resolution: {integrity: sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==}
     engines: {node: '>=6'}
 
-  qs@6.15.2:
-    resolution: {integrity: sha512-Rzq0KEyX/w/tEybncDgdkZrJgVUsUMk3xjh3t5bv3S1HTAtg+uOYt72+ZfwiQwKdysThkTBdL/rTi6HDmX9Ddw==}
+  qs@6.16.0:
+    resolution: {integrity: sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==}
     engines: {node: '>=0.6'}
 
   query-selector-shadow-dom@1.0.1:
@@ -6490,6 +6515,10 @@ packages:
     resolution: {integrity: sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==}
     engines: {node: '>= 0.4'}
 
+  side-channel-list@1.0.1:
+    resolution: {integrity: sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==}
+    engines: {node: '>= 0.4'}
+
   side-channel-map@1.0.1:
     resolution: {integrity: sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==}
     engines: {node: '>= 0.4'}
@@ -6502,6 +6531,10 @@ packages:
     resolution: {integrity: sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==}
     engines: {node: '>= 0.4'}
 
+  side-channel@1.1.1:
+    resolution: {integrity: sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==}
+    engines: {node: '>= 0.4'}
+
   siginfo@2.0.0:
     resolution: {integrity: sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==}
 
@@ -6725,8 +6758,8 @@ packages:
       uglify-js:
         optional: true
 
-  terser@5.49.0:
-    resolution: {integrity: sha512-SNiDnXyHSrxVcIOtVbULzcTmniUiwcV7Nwdyj1twVubeTmbjoa8p69KKDpfkdoOavuM4/GRm1+ykI8qqnavHoA==}
+  terser@5.51.2:
+    resolution: {integrity: sha512-bWnjSNscmuI+GJze6ZupnHP8G/cTcsJF+bXCeQknk2SHQsgbNJnLrqiH9jZ2W4STPVXH2mDKKRX3iwPhc9Cn/Q==}
     engines: {node: '>=10'}
     hasBin: true
 
@@ -6824,6 +6857,10 @@ packages:
     resolution: {integrity: sha512-OZs6gsjF4vMp32qrCbiVSkrFmXtG/AZhY3t0iAMrMBiAZyV9oALtXO8hsrHbMXF9x6L3grlFuwW2oAz7cav+Gw==}
     engines: {node: '>= 0.6'}
 
+  type-is@2.1.0:
+    resolution: {integrity: sha512-faYHw0anBbc/kWF3zFTEnxSFOAGUX9GFbOBthvDdLsIlEoWOFOtS0zgCiQYwIskL9iGXZL3kAXD8OoZ4GmMATA==}
+    engines: {node: '>= 18'}
+
   typed-array-buffer@1.0.3:
     resolution: {integrity: sha512-nAYYwfY3qnzX30IkA6AQZjVbtK6duGontcQm1WSG1MD94YLqK0515GNApXkoxKOWMusVssAHWLh9SeaoefYFGw==}
     engines: {node: '>= 0.4'}
@@ -6904,7 +6941,7 @@ packages:
     resolution: {integrity: sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w==}
     hasBin: true
     peerDependencies:
-      browserslist: 4.28.2
+      browserslist: 4.28.7
 
   uri-js@4.4.1:
     resolution: {integrity: sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==}
@@ -7894,7 +7931,7 @@ snapshots:
     dependencies:
       '@babel/compat-data': 7.29.7
       '@babel/helper-validator-option': 7.29.7
-      browserslist: 4.28.2
+      browserslist: 4.28.7
       lru-cache: 5.1.1
       semver: 6.3.1
 
@@ -7972,7 +8009,7 @@ snapshots:
 
   '@blazediff/core@1.9.1': {}
 
-  '@braintree/sanitize-url@7.1.1': {}
+  '@braintree/sanitize-url@7.1.2': {}
 
   '@cfworker/json-schema@4.1.1': {}
 
@@ -7992,10 +8029,10 @@ snapshots:
       '@codemirror/view': 6.40.0
       '@lezer/common': 1.5.2
 
-  '@codemirror/commands@6.10.4':
+  '@codemirror/commands@6.11.0':
     dependencies:
       '@codemirror/language': 6.12.2
-      '@codemirror/state': 6.7.1
+      '@codemirror/state': 6.7.2
       '@codemirror/view': 6.40.0
       '@lezer/common': 1.5.2
 
@@ -8024,9 +8061,9 @@ snapshots:
     dependencies:
       '@marijn/find-cluster-break': 1.0.2
 
-  '@codemirror/state@6.7.1':
+  '@codemirror/state@6.7.2':
     dependencies:
-      '@marijn/find-cluster-break': 1.0.3
+      '@marijn/find-cluster-break': 1.0.4
 
   '@codemirror/theme-one-dark@6.1.3':
     dependencies:
@@ -8202,7 +8239,7 @@ snapshots:
       globals: 14.0.0
       ignore: 5.3.2
       import-fresh: 3.3.1
-      js-yaml: 4.3.0
+      js-yaml: 4.3.1
       minimatch: 3.1.4
       strip-json-comments: 3.1.1
     transitivePeerDependencies:
@@ -8245,22 +8282,27 @@ snapshots:
 
   '@floating-ui/utils@0.2.10': {}
 
-  '@hono/node-server@1.19.14(hono@4.12.28)':
+  '@hono/node-server@1.19.17(hono@4.12.34)':
     dependencies:
-      hono: 4.12.28
+      hono: 4.12.34
 
   '@hookform/resolvers@5.2.2(react-hook-form@7.62.0(react@19.2.7))':
     dependencies:
       '@standard-schema/utils': 0.3.0
       react-hook-form: 7.62.0(react@19.2.7)
 
-  '@humanfs/core@0.19.1': {}
-
-  '@humanfs/node@0.16.7':
+  '@humanfs/core@0.19.2':
     dependencies:
-      '@humanfs/core': 0.19.1
+      '@humanfs/types': 0.15.0
+
+  '@humanfs/node@0.16.8':
+    dependencies:
+      '@humanfs/core': 0.19.2
+      '@humanfs/types': 0.15.0
       '@humanwhocodes/retry': 0.4.3
 
+  '@humanfs/types@0.15.0': {}
+
   '@humanwhocodes/module-importer@1.0.1': {}
 
   '@humanwhocodes/retry@0.4.3': {}
@@ -8545,15 +8587,15 @@ snapshots:
 
   '@marijn/find-cluster-break@1.0.2': {}
 
-  '@marijn/find-cluster-break@1.0.3': {}
+  '@marijn/find-cluster-break@1.0.4': {}
 
-  '@mermaid-js/parser@1.1.1':
+  '@mermaid-js/parser@1.2.1':
     dependencies:
       '@chevrotain/types': 11.1.2
 
   '@modelcontextprotocol/sdk@1.26.0(@cfworker/json-schema@4.1.1)(zod@4.4.3)':
     dependencies:
-      '@hono/node-server': 1.19.14(hono@4.12.28)
+      '@hono/node-server': 1.19.17(hono@4.12.34)
       ajv: 8.18.0
       ajv-formats: 3.0.1(ajv@8.18.0)
       content-type: 1.0.5
@@ -8563,7 +8605,7 @@ snapshots:
       eventsource-parser: 3.1.0
       express: 5.2.1
       express-rate-limit: 8.5.1(express@5.2.1)
-      hono: 4.12.28
+      hono: 4.12.34
       jose: 6.1.3
       json-schema-typed: 8.0.2
       pkce-challenge: 5.0.1
@@ -9729,7 +9771,7 @@ snapshots:
       - encoding
       - supports-color
 
-  '@sentry/bundler-plugins@10.65.0(rollup@4.59.0)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.14))':
+  '@sentry/bundler-plugins@10.65.0(rollup@4.59.0)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.23))':
     dependencies:
       '@babel/core': 7.29.7
       '@sentry/cli': 2.58.6
@@ -9740,7 +9782,7 @@ snapshots:
       magic-string: 0.30.21
     optionalDependencies:
       rollup: 4.59.0
-      webpack: 5.104.1(lightningcss@1.30.2)(postcss@8.5.14)
+      webpack: 5.104.1(lightningcss@1.30.2)(postcss@8.5.23)
     transitivePeerDependencies:
       - encoding
       - supports-color
@@ -9799,7 +9841,7 @@ snapshots:
     dependencies:
       '@sentry/core': 10.65.0
 
-  '@sentry/nextjs@10.65.0(@opentelemetry/core@2.9.0(@opentelemetry/api@1.9.1))(@opentelemetry/sdk-trace-base@2.9.0(@opentelemetry/api@1.9.1))(next@16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.14))':
+  '@sentry/nextjs@10.65.0(@opentelemetry/core@2.9.0(@opentelemetry/api@1.9.1))(@opentelemetry/sdk-trace-base@2.9.0(@opentelemetry/api@1.9.1))(next@16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.23))':
     dependencies:
       '@opentelemetry/api': 1.9.1
       '@rollup/plugin-commonjs': 28.0.1(rollup@4.59.0)
@@ -9811,7 +9853,7 @@ snapshots:
       '@sentry/opentelemetry': 10.65.0(@opentelemetry/api@1.9.1)(@opentelemetry/core@2.9.0(@opentelemetry/api@1.9.1))(@opentelemetry/sdk-trace-base@2.9.0(@opentelemetry/api@1.9.1))
       '@sentry/react': 10.65.0(react@19.2.7)
       '@sentry/vercel-edge': 10.65.0
-      '@sentry/webpack-plugin': 5.4.0(rollup@4.59.0)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.14))
+      '@sentry/webpack-plugin': 5.4.0(rollup@4.59.0)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.23))
       next: 16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       rollup: 4.59.0
       stacktrace-parser: 0.1.11
@@ -9893,10 +9935,10 @@ snapshots:
       '@opentelemetry/api': 1.9.1
       '@sentry/core': 10.65.0
 
-  '@sentry/webpack-plugin@5.4.0(rollup@4.59.0)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.14))':
+  '@sentry/webpack-plugin@5.4.0(rollup@4.59.0)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.23))':
     dependencies:
-      '@sentry/bundler-plugins': 10.65.0(rollup@4.59.0)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.14))
-      webpack: 5.104.1(lightningcss@1.30.2)(postcss@8.5.14)
+      '@sentry/bundler-plugins': 10.65.0(rollup@4.59.0)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.23))
+      webpack: 5.104.1(lightningcss@1.30.2)(postcss@8.5.23)
     transitivePeerDependencies:
       - encoding
       - rollup
@@ -10217,7 +10259,7 @@ snapshots:
       '@alloc/quick-lru': 5.2.0
       '@tailwindcss/node': 4.1.18
       '@tailwindcss/oxide': 4.1.18
-      postcss: 8.5.14
+      postcss: 8.5.23
       tailwindcss: 4.1.18
 
   '@tailwindcss/typography@0.5.16(tailwindcss@4.1.18)':
@@ -10695,7 +10737,7 @@ snapshots:
 
   '@vercel/oidc@3.2.0': {}
 
-  '@vitejs/plugin-react@5.1.2(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))':
+  '@vitejs/plugin-react@5.1.2(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))':
     dependencies:
       '@babel/core': 7.29.7
       '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.7)
@@ -10703,33 +10745,33 @@ snapshots:
       '@rolldown/pluginutils': 1.0.0-beta.53
       '@types/babel__core': 7.20.5
       react-refresh: 0.18.0
-      vite: 7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0)
+      vite: 7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0)
     transitivePeerDependencies:
       - supports-color
 
-  '@vitest/browser-playwright@4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(playwright@1.56.1)(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))(vitest@4.1.10)':
+  '@vitest/browser-playwright@4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(playwright@1.56.1)(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))(vitest@4.1.10)':
     dependencies:
-      '@vitest/browser': 4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))(vitest@4.1.10)
-      '@vitest/mocker': 4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))
+      '@vitest/browser': 4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))(vitest@4.1.10)
+      '@vitest/mocker': 4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))
       playwright: 1.56.1
       tinyrainbow: 3.1.0
-      vitest: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.10.8)(@vitest/browser-playwright@4.1.10)(@vitest/coverage-v8@4.1.10)(jsdom@27.4.0)(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))
+      vitest: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.10.8)(@vitest/browser-playwright@4.1.10)(@vitest/coverage-v8@4.1.10)(jsdom@27.4.0)(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))
     transitivePeerDependencies:
       - bufferutil
       - msw
       - utf-8-validate
       - vite
 
-  '@vitest/browser@4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))(vitest@4.1.10)':
+  '@vitest/browser@4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))(vitest@4.1.10)':
     dependencies:
       '@blazediff/core': 1.9.1
-      '@vitest/mocker': 4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))
+      '@vitest/mocker': 4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))
       '@vitest/utils': 4.1.10
       magic-string: 0.30.21
       pngjs: 7.0.0
       sirv: 3.0.2
       tinyrainbow: 3.1.0
-      vitest: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.10.8)(@vitest/browser-playwright@4.1.10)(@vitest/coverage-v8@4.1.10)(jsdom@27.4.0)(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))
+      vitest: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.10.8)(@vitest/browser-playwright@4.1.10)(@vitest/coverage-v8@4.1.10)(jsdom@27.4.0)(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))
       ws: 8.21.0
     transitivePeerDependencies:
       - bufferutil
@@ -10749,9 +10791,9 @@ snapshots:
       obug: 2.1.1
       std-env: 4.1.0
       tinyrainbow: 3.1.0
-      vitest: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.10.8)(@vitest/browser-playwright@4.1.10)(@vitest/coverage-v8@4.1.10)(jsdom@27.4.0)(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))
+      vitest: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.10.8)(@vitest/browser-playwright@4.1.10)(@vitest/coverage-v8@4.1.10)(jsdom@27.4.0)(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))
     optionalDependencies:
-      '@vitest/browser': 4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))(vitest@4.1.10)
+      '@vitest/browser': 4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))(vitest@4.1.10)
 
   '@vitest/expect@4.1.10':
     dependencies:
@@ -10762,14 +10804,14 @@ snapshots:
       chai: 6.2.2
       tinyrainbow: 3.1.0
 
-  '@vitest/mocker@4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))':
+  '@vitest/mocker@4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))':
     dependencies:
       '@vitest/spy': 4.1.10
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
       msw: 2.13.4(@types/node@24.10.8)(typescript@5.5.4)
-      vite: 7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0)
+      vite: 7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0)
 
   '@vitest/pretty-format@4.1.10':
     dependencies:
@@ -10903,9 +10945,9 @@ snapshots:
       mime-types: 3.0.2
       negotiator: 1.0.0
 
-  acorn-import-phases@1.0.4(acorn@8.17.0):
+  acorn-import-phases@1.0.4(acorn@8.18.0):
     dependencies:
-      acorn: 8.17.0
+      acorn: 8.18.0
 
   acorn-jsx@5.3.2(acorn@8.16.0):
     dependencies:
@@ -10913,7 +10955,7 @@ snapshots:
 
   acorn@8.16.0: {}
 
-  acorn@8.17.0: {}
+  acorn@8.18.0: {}
 
   agent-base@6.0.2:
     dependencies:
@@ -10954,7 +10996,7 @@ snapshots:
   ajv@8.18.0:
     dependencies:
       fast-deep-equal: 3.1.3
-      fast-uri: 3.1.2
+      fast-uri: 3.1.6
       json-schema-traverse: 1.0.0
       require-from-string: 2.0.2
 
@@ -11075,28 +11117,28 @@ snapshots:
     dependencies:
       require-from-string: 2.0.2
 
-  body-parser@2.2.2:
+  body-parser@2.3.0:
     dependencies:
       bytes: 3.1.2
-      content-type: 1.0.5
+      content-type: 2.1.0
       debug: 4.4.3
       http-errors: 2.0.1
       iconv-lite: 0.7.2
       on-finished: 2.4.1
-      qs: 6.15.2
+      qs: 6.16.0
       raw-body: 3.0.2
-      type-is: 2.0.1
+      type-is: 2.1.0
     transitivePeerDependencies:
       - supports-color
 
   bowser@2.14.1: {}
 
-  brace-expansion@1.1.13:
+  brace-expansion@1.1.18:
     dependencies:
       balanced-match: 1.0.2
       concat-map: 0.0.1
 
-  brace-expansion@5.0.6:
+  brace-expansion@5.0.9:
     dependencies:
       balanced-match: 4.0.4
 
@@ -11104,13 +11146,13 @@ snapshots:
     dependencies:
       fill-range: 7.1.1
 
-  browserslist@4.28.2:
+  browserslist@4.28.7:
     dependencies:
       baseline-browser-mapping: 2.10.29
       caniuse-lite: 1.0.30001792
-      electron-to-chromium: 1.5.354
-      node-releases: 2.0.44
-      update-browserslist-db: 1.2.3(browserslist@4.28.2)
+      electron-to-chromium: 1.5.418
+      node-releases: 2.0.54
+      update-browserslist-db: 1.2.3(browserslist@4.28.7)
 
   buffer-from@1.1.2: {}
 
@@ -11193,7 +11235,7 @@ snapshots:
   codemirror@6.0.2:
     dependencies:
       '@codemirror/autocomplete': 6.20.1
-      '@codemirror/commands': 6.10.4
+      '@codemirror/commands': 6.11.0
       '@codemirror/language': 6.12.2
       '@codemirror/lint': 6.9.5
       '@codemirror/search': 6.6.0
@@ -11226,6 +11268,8 @@ snapshots:
 
   content-type@1.0.5: {}
 
+  content-type@2.1.0: {}
+
   convert-source-map@2.0.0: {}
 
   cookie-signature@1.2.2: {}
@@ -11283,17 +11327,17 @@ snapshots:
 
   csstype@3.2.3: {}
 
-  cytoscape-cose-bilkent@4.1.0(cytoscape@3.33.1):
+  cytoscape-cose-bilkent@4.1.0(cytoscape@3.34.2):
     dependencies:
       cose-base: 1.0.3
-      cytoscape: 3.33.1
+      cytoscape: 3.34.2
 
-  cytoscape-fcose@2.2.0(cytoscape@3.33.1):
+  cytoscape-fcose@2.2.0(cytoscape@3.34.2):
     dependencies:
       cose-base: 2.2.0
-      cytoscape: 3.33.1
+      cytoscape: 3.34.2
 
-  cytoscape@3.33.1: {}
+  cytoscape@3.34.2: {}
 
   d3-array@2.12.1:
     dependencies:
@@ -11496,7 +11540,7 @@ snapshots:
 
   date-fns@4.1.0: {}
 
-  dayjs@1.11.19: {}
+  dayjs@1.11.23: {}
 
   debug@4.4.3:
     dependencies:
@@ -11559,7 +11603,7 @@ snapshots:
       '@babel/runtime': 7.28.6
       csstype: 3.2.3
 
-  dompurify@3.4.11:
+  dompurify@3.4.13:
     optionalDependencies:
       '@types/trusted-types': 2.0.7
 
@@ -11581,7 +11625,7 @@ snapshots:
 
   ee-first@1.1.1: {}
 
-  electron-to-chromium@1.5.354: {}
+  electron-to-chromium@1.5.418: {}
 
   emoji-regex@8.0.0: {}
 
@@ -11594,7 +11638,7 @@ snapshots:
       graceful-fs: 4.2.11
       tapable: 2.3.3
 
-  enhanced-resolve@5.24.2:
+  enhanced-resolve@5.24.5:
     dependencies:
       graceful-fs: 4.2.11
       tapable: 2.3.3
@@ -11869,7 +11913,7 @@ snapshots:
       '@eslint/eslintrc': 3.3.3
       '@eslint/js': 9.39.2
       '@eslint/plugin-kit': 0.4.1
-      '@humanfs/node': 0.16.7
+      '@humanfs/node': 0.16.8
       '@humanwhocodes/module-importer': 1.0.1
       '@humanwhocodes/retry': 0.4.3
       '@types/estree': 1.0.9
@@ -11947,12 +11991,12 @@ snapshots:
   express-rate-limit@8.5.1(express@5.2.1):
     dependencies:
       express: 5.2.1
-      ip-address: 10.2.0
+      ip-address: 10.3.1
 
   express@5.2.1:
     dependencies:
       accepts: 2.0.0
-      body-parser: 2.2.2
+      body-parser: 2.3.0
       content-disposition: 1.0.1
       content-type: 1.0.5
       cookie: 0.7.2
@@ -11971,7 +12015,7 @@ snapshots:
       once: 1.4.0
       parseurl: 1.3.3
       proxy-addr: 2.0.7
-      qs: 6.15.2
+      qs: 6.16.0
       range-parser: 1.2.1
       router: 2.2.0
       send: 1.2.1
@@ -12017,7 +12061,7 @@ snapshots:
     dependencies:
       fast-string-truncated-width: 3.0.3
 
-  fast-uri@3.1.2: {}
+  fast-uri@3.1.6: {}
 
   fast-wrap-ansi@0.2.0:
     dependencies:
@@ -12048,6 +12092,10 @@ snapshots:
     optionalDependencies:
       picomatch: 4.0.5
 
+  fdir@6.5.0(picomatch@4.0.7):
+    optionalDependencies:
+      picomatch: 4.0.7
+
   fflate@0.4.9: {}
 
   file-entry-cache@8.0.0:
@@ -12349,7 +12397,7 @@ snapshots:
     dependencies:
       hermes-estree: 0.25.1
 
-  hono@4.12.28: {}
+  hono@4.12.34: {}
 
   html-encoding-sniffer@6.0.0:
     dependencies:
@@ -12435,7 +12483,7 @@ snapshots:
 
   internmap@2.0.3: {}
 
-  ip-address@10.2.0: {}
+  ip-address@10.3.1: {}
 
   ipaddr.js@1.9.1: {}
 
@@ -12624,7 +12672,7 @@ snapshots:
 
   js-tokens@4.0.0: {}
 
-  js-yaml@4.3.0:
+  js-yaml@4.3.1:
     dependencies:
       argparse: 2.0.1
 
@@ -12687,6 +12735,10 @@ snapshots:
     dependencies:
       commander: 8.3.0
 
+  katex@0.16.47:
+    dependencies:
+      commander: 8.3.0
+
   keyv@4.5.4:
     dependencies:
       json-buffer: 3.0.1
@@ -13043,23 +13095,23 @@ snapshots:
 
   meriyah@6.1.4: {}
 
-  mermaid@11.15.0:
+  mermaid@11.16.1:
     dependencies:
-      '@braintree/sanitize-url': 7.1.1
+      '@braintree/sanitize-url': 7.1.2
       '@iconify/utils': 3.1.0
-      '@mermaid-js/parser': 1.1.1
+      '@mermaid-js/parser': 1.2.1
       '@types/d3': 7.4.3
       '@upsetjs/venn.js': 2.0.0
-      cytoscape: 3.33.1
-      cytoscape-cose-bilkent: 4.1.0(cytoscape@3.33.1)
-      cytoscape-fcose: 2.2.0(cytoscape@3.33.1)
+      cytoscape: 3.34.2
+      cytoscape-cose-bilkent: 4.1.0(cytoscape@3.34.2)
+      cytoscape-fcose: 2.2.0(cytoscape@3.34.2)
       d3: 7.9.0
       d3-sankey: 0.12.3
       dagre-d3-es: 7.0.14
-      dayjs: 1.11.19
-      dompurify: 3.4.11
+      dayjs: 1.11.23
+      dompurify: 3.4.13
       es-toolkit: 1.46.1
-      katex: 0.16.27
+      katex: 0.16.47
       khroma: 2.1.0
       marked: 16.4.2
       roughjs: 4.6.6
@@ -13321,15 +13373,15 @@ snapshots:
 
   minimatch@10.2.3:
     dependencies:
-      brace-expansion: 5.0.6
+      brace-expansion: 5.0.9
 
   minimatch@3.1.4:
     dependencies:
-      brace-expansion: 1.1.13
+      brace-expansion: 1.1.18
 
   minimatch@9.0.7:
     dependencies:
-      brace-expansion: 5.0.6
+      brace-expansion: 5.0.9
 
   minimist@1.2.8: {}
 
@@ -13337,7 +13389,7 @@ snapshots:
 
   mlly@1.8.0:
     dependencies:
-      acorn: 8.16.0
+      acorn: 8.18.0
       pathe: 2.0.3
       pkg-types: 1.3.1
       ufo: 1.6.3
@@ -13385,9 +13437,9 @@ snapshots:
 
   mute-stream@3.0.0: {}
 
-  nanoid@3.3.12: {}
+  nanoid@3.3.18: {}
 
-  nanoid@5.1.6: {}
+  nanoid@5.1.16: {}
 
   napi-postinstall@0.3.4: {}
 
@@ -13415,7 +13467,7 @@ snapshots:
       '@swc/helpers': 0.5.15
       baseline-browser-mapping: 2.10.29
       caniuse-lite: 1.0.30001792
-      postcss: 8.5.14
+      postcss: 8.5.23
       react: 19.2.7
       react-dom: 19.2.7(react@19.2.7)
       styled-jsx: 5.1.6(@babel/core@7.29.7)(react@19.2.7)
@@ -13441,7 +13493,7 @@ snapshots:
     dependencies:
       whatwg-url: 5.0.0
 
-  node-releases@2.0.44: {}
+  node-releases@2.0.54: {}
 
   oauth4webapi@3.8.3: {}
 
@@ -13660,6 +13712,8 @@ snapshots:
 
   picomatch@4.0.5: {}
 
+  picomatch@4.0.7: {}
+
   pkce-challenge@5.0.1: {}
 
   pkg-types@1.3.1:
@@ -13692,9 +13746,9 @@ snapshots:
       cssesc: 3.0.0
       util-deprecate: 1.0.2
 
-  postcss@8.5.14:
+  postcss@8.5.23:
     dependencies:
-      nanoid: 3.3.12
+      nanoid: 3.3.18
       picocolors: 1.1.1
       source-map-js: 1.2.1
 
@@ -13704,7 +13758,7 @@ snapshots:
       '@posthog/core': 1.45.1
       '@posthog/types': 1.398.0
       core-js: 3.49.0
-      dompurify: 3.4.11
+      dompurify: 3.4.13
       fflate: 0.4.9
       preact: 10.29.7(preact-render-to-string@6.5.11(preact@10.24.3))
       query-selector-shadow-dom: 1.0.1
@@ -13761,9 +13815,10 @@ snapshots:
 
   punycode@2.3.1: {}
 
-  qs@6.15.2:
+  qs@6.16.0:
     dependencies:
-      side-channel: 1.1.0
+      es-define-property: 1.0.1
+      side-channel: 1.1.1
 
   query-selector-shadow-dom@1.0.1: {}
 
@@ -14240,6 +14295,11 @@ snapshots:
       es-errors: 1.3.0
       object-inspect: 1.13.4
 
+  side-channel-list@1.0.1:
+    dependencies:
+      es-errors: 1.3.0
+      object-inspect: 1.13.4
+
   side-channel-map@1.0.1:
     dependencies:
       call-bound: 1.0.4
@@ -14263,6 +14323,14 @@ snapshots:
       side-channel-map: 1.0.1
       side-channel-weakmap: 1.0.2
 
+  side-channel@1.1.1:
+    dependencies:
+      es-errors: 1.3.0
+      object-inspect: 1.13.4
+      side-channel-list: 1.0.1
+      side-channel-map: 1.0.1
+      side-channel-weakmap: 1.0.2
+
   siginfo@2.0.0: {}
 
   signal-exit@4.1.0: {}
@@ -14324,7 +14392,7 @@ snapshots:
       katex: 0.16.27
       lucide-react: 0.542.0(react@19.2.7)
       marked: 16.4.2
-      mermaid: 11.15.0
+      mermaid: 11.16.1
       react: 19.2.7
       rehype-harden: 1.1.7
       rehype-katex: 7.0.1
@@ -14472,21 +14540,21 @@ snapshots:
 
   tapable@2.3.3: {}
 
-  terser-webpack-plugin@5.6.1(lightningcss@1.30.2)(postcss@8.5.14)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.14)):
+  terser-webpack-plugin@5.6.1(lightningcss@1.30.2)(postcss@8.5.23)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.23)):
     dependencies:
       '@jridgewell/trace-mapping': 0.3.31
       jest-worker: 27.5.1
       schema-utils: 4.3.3
-      terser: 5.49.0
-      webpack: 5.104.1(lightningcss@1.30.2)(postcss@8.5.14)
+      terser: 5.51.2
+      webpack: 5.104.1(lightningcss@1.30.2)(postcss@8.5.23)
     optionalDependencies:
       lightningcss: 1.30.2
-      postcss: 8.5.14
+      postcss: 8.5.23
 
-  terser@5.49.0:
+  terser@5.51.2:
     dependencies:
       '@jridgewell/source-map': 0.3.11
-      acorn: 8.17.0
+      acorn: 8.18.0
       commander: 2.20.3
       source-map-support: 0.5.21
 
@@ -14563,6 +14631,12 @@ snapshots:
       media-typer: 1.1.0
       mime-types: 3.0.2
 
+  type-is@2.1.0:
+    dependencies:
+      content-type: 2.1.0
+      media-typer: 1.1.0
+      mime-types: 3.0.2
+
   typed-array-buffer@1.0.3:
     dependencies:
       call-bound: 1.0.4
@@ -14696,9 +14770,9 @@ snapshots:
 
   until-async@3.0.2: {}
 
-  update-browserslist-db@1.2.3(browserslist@4.28.2):
+  update-browserslist-db@1.2.3(browserslist@4.28.7):
     dependencies:
-      browserslist: 4.28.2
+      browserslist: 4.28.7
       escalade: 3.2.0
       picocolors: 1.1.1
 
@@ -14767,12 +14841,12 @@ snapshots:
       d3-time: 3.1.0
       d3-timer: 3.0.1
 
-  vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0):
+  vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0):
     dependencies:
       esbuild: 0.28.1
-      fdir: 6.5.0(picomatch@4.0.5)
-      picomatch: 4.0.5
-      postcss: 8.5.14
+      fdir: 6.5.0(picomatch@4.0.7)
+      picomatch: 4.0.7
+      postcss: 8.5.23
       rollup: 4.59.0
       tinyglobby: 0.2.17
     optionalDependencies:
@@ -14780,22 +14854,22 @@ snapshots:
       fsevents: 2.3.3
       jiti: 2.7.0
       lightningcss: 1.30.2
-      terser: 5.49.0
+      terser: 5.51.2
       yaml: 2.9.0
 
   vitest-browser-react@2.0.4(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(vitest@4.1.10):
     dependencies:
       react: 19.2.7
       react-dom: 19.2.7(react@19.2.7)
-      vitest: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.10.8)(@vitest/browser-playwright@4.1.10)(@vitest/coverage-v8@4.1.10)(jsdom@27.4.0)(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))
+      vitest: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.10.8)(@vitest/browser-playwright@4.1.10)(@vitest/coverage-v8@4.1.10)(jsdom@27.4.0)(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))
     optionalDependencies:
       '@types/react': 19.2.17
       '@types/react-dom': 19.2.3(@types/react@19.2.17)
 
-  vitest@4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.10.8)(@vitest/browser-playwright@4.1.10)(@vitest/coverage-v8@4.1.10)(jsdom@27.4.0)(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0)):
+  vitest@4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.10.8)(@vitest/browser-playwright@4.1.10)(@vitest/coverage-v8@4.1.10)(jsdom@27.4.0)(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0)):
     dependencies:
       '@vitest/expect': 4.1.10
-      '@vitest/mocker': 4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))
+      '@vitest/mocker': 4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))
       '@vitest/pretty-format': 4.1.10
       '@vitest/runner': 4.1.10
       '@vitest/snapshot': 4.1.10
@@ -14812,12 +14886,12 @@ snapshots:
       tinyexec: 1.1.2
       tinyglobby: 0.2.17
       tinyrainbow: 3.1.0
-      vite: 7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0)
+      vite: 7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@opentelemetry/api': 1.9.1
       '@types/node': 24.10.8
-      '@vitest/browser-playwright': 4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(playwright@1.56.1)(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.49.0)(yaml@2.9.0))(vitest@4.1.10)
+      '@vitest/browser-playwright': 4.1.10(msw@2.13.4(@types/node@24.10.8)(typescript@5.5.4))(playwright@1.56.1)(vite@7.3.5(@types/node@24.10.8)(jiti@2.7.0)(lightningcss@1.30.2)(terser@5.51.2)(yaml@2.9.0))(vitest@4.1.10)
       '@vitest/coverage-v8': 4.1.10(@vitest/browser@4.1.10)(vitest@4.1.10)
       jsdom: 27.4.0
     transitivePeerDependencies:
@@ -14845,7 +14919,7 @@ snapshots:
 
   webpack-sources@3.5.1: {}
 
-  webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.14):
+  webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.23):
     dependencies:
       '@types/eslint-scope': 3.7.7
       '@types/estree': 1.0.9
@@ -14853,11 +14927,11 @@ snapshots:
       '@webassemblyjs/ast': 1.14.1
       '@webassemblyjs/wasm-edit': 1.14.1
       '@webassemblyjs/wasm-parser': 1.14.1
-      acorn: 8.17.0
-      acorn-import-phases: 1.0.4(acorn@8.17.0)
-      browserslist: 4.28.2
+      acorn: 8.18.0
+      acorn-import-phases: 1.0.4(acorn@8.18.0)
+      browserslist: 4.28.7
       chrome-trace-event: 1.0.4
-      enhanced-resolve: 5.24.2
+      enhanced-resolve: 5.24.5
       es-module-lexer: 2.3.0
       eslint-scope: 5.1.1
       events: 3.3.0
@@ -14869,7 +14943,7 @@ snapshots:
       neo-async: 2.6.2
       schema-utils: 4.3.3
       tapable: 2.3.3
-      terser-webpack-plugin: 5.6.1(lightningcss@1.30.2)(postcss@8.5.14)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.14))
+      terser-webpack-plugin: 5.6.1(lightningcss@1.30.2)(postcss@8.5.23)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.23))
       watchpack: 2.5.2
       webpack-sources: 3.5.1
     transitivePeerDependencies:
diff --git a/ui/pnpm-workspace.yaml b/ui/pnpm-workspace.yaml
index cd3f7d25f2..a1bf7c3015 100644
--- a/ui/pnpm-workspace.yaml
+++ b/ui/pnpm-workspace.yaml
@@ -21,18 +21,20 @@ overrides:
   # sharp 0.33.x/0.34.x carry GHSA-f88m-g3jw-g9cj; next pulls 0.34.5 transitively.
   "sharp": "0.35.3"
   "lodash-es": "4.18.1"
-  # GHSA-88fw-hqm2-52qc (CORS reflects any Origin with credentials) + 4 moderate
-  # advisories (serve-static path traversal, Lambda Set-Cookie merge, body-limit
-  # bypass, Lambda@Edge repeated-header loss), all fixed in 4.12.25, plus
-  # CVE-2026-59896 (hono/jsx SSR context leak across concurrent requests; in NVD
-  # but not yet in the npm audit feed), fixed in 4.12.27. Not 4.12.29: it is
-  # still inside StepSecurity's 7-day npm cooldown gate.
-  "hono": "4.12.28"
-  "@hono/node-server": "1.19.14"
+  # GHSA-88fw-hqm2-52qc (CORS reflects any Origin with credentials), CVE-2026-59896
+  # (hono/jsx SSR context leak) and the 4.12.34 batch: CORS ReDoS via
+  # Access-Control-Request-Headers, `memo()` SSR output retained across requests,
+  # Language middleware algorithmic DoS, Proxy Helper keeping `Connection` headers.
+  # Node adapter 1.19.17 fixes serve-static path traversal via `%5C` on Windows
+  # (1.19.15 was published without provenance and trips `trustPolicy: no-downgrade`).
+  "hono": "4.12.34"
+  "@hono/node-server": "1.19.17"
   "@isaacs/brace-expansion": "5.0.1"
   "fast-xml-parser": "5.8.0"
   "serialize-javascript": "7.0.5"
-  "postcss": "8.5.14"
+  # GHSA-6g55-p6wh-862q (sourceMappingURL path traversal reads arbitrary .map files)
+  # and its incomplete-fix follow-up when `from` is unset, both closed in 8.5.23.
+  "postcss": "8.5.23"
   "esbuild": "0.28.1"
   "rollup@>=4": "4.59.0"
   # GHSA-fx2h-pf6j-xcff (server.fs.deny bypass on Windows alternate paths, high) +
@@ -52,10 +54,11 @@ overrides:
   # fixed in 7.29.1. An override instead of `pnpm update` so the rest of the
   # babel/browserslist subtree keeps its existing lockfile resolutions.
   "@babel/core": "7.29.7"
-  # Ephemeral cooldown pins: the @babel/helper-compilation-targets refresh pulls
-  # browserslist-ecosystem releases newer than StepSecurity's 7-day npm cooldown.
-  # Safe to drop after 2026-07-20.
-  "browserslist": "4.28.2"
+  # browserslist 4.28.7 fixes unbounded query-result cache growth (OOM) and an
+  # uncaught crash / prototype write from untrusted browserslist-stats.json.
+  # caniuse-lite and baseline-browser-mapping stay pinned so the babel subtree
+  # does not float past StepSecurity's 7-day npm cooldown gate.
+  "browserslist": "4.28.7"
   "caniuse-lite": "1.0.30001792"
   "baseline-browser-mapping": "2.10.29"
   "minimatch@<4": "3.1.4"
@@ -63,7 +66,9 @@ overrides:
   "minimatch@>=10": "10.2.3"
   "ajv@<7": "6.14.0"
   "ajv@>=8": "8.18.0"
-  "qs": "6.15.2"
+  # 6.16.0 fixes the bracket-key comma array-limit bypass and DoS via an
+  # attacker-controlled isBuffer.
+  "qs": "6.16.0"
   # 8.2.2 dropped provenance attestation; 8.3.1+ restored it. Pinned to skip 8.2.2
   # under `trustPolicy: no-downgrade`.
   "express-rate-limit": "8.5.1"
@@ -73,9 +78,38 @@ overrides:
   # but the override unifies the tree on a patched version.
   "uuid": "11.1.1"
   # GHSA-vxr8-fq34-vvx9 (+ several related XSS sanitization bypasses): DOMPurify < 3.4.9,
-  # pulled in transitively via streamdown > mermaid (which wants ^3.3.1). Bumped to 3.4.11
-  # for GHSA-cmwh-pvxp-8882 (permanent ALLOWED_ATTR pollution via setConfig()).
-  "dompurify": "3.4.11"
+  # pulled in transitively via streamdown > mermaid and posthog-js. 3.4.11 closed
+  # GHSA-cmwh-pvxp-8882 (permanent ALLOWED_ATTR pollution via setConfig()); 3.4.13
+  # also closes the CUSTOM_ELEMENT_HANDLING afterSanitizeElements bypass and the
+  # IN_PLACE hook removal that left a detached subtree executable.
+  "dompurify": "3.4.13"
+
+  # Advisories flagged by `pnpm audit` on 2026-09-08. Every pin below is the
+  # oldest patched release and was published more than 7 days before that date,
+  # so it clears StepSecurity's npm cooldown gate.
+  # brace-expansion: three DoS advisories (exponential `{}` expansion, unbounded
+  # expansion length OOM, unbounded intermediate arrays bypassing the
+  # CVE-2026-14257 mitigation). 1.x via eslint > minimatch, 5.x via @sentry > glob.
+  "brace-expansion@<2": "1.1.18"
+  "brace-expansion@>=5": "5.0.9"
+  # fast-uri (via ajv): host confusion through backslash authority delimiters,
+  # failed IDN canonicalization and percent-encoded scheme normalization, plus SSRF
+  # via malformed IPv6 normalization and repeated hostname percent-decoding.
+  "fast-uri": "3.1.6"
+  # ip-address (via express-rate-limit): SSRF / trust-boundary bypasses from
+  # leading-zero octets, CIDR suffixes and IPv4-mapped / NAT64 misclassification.
+  "ip-address": "10.3.1"
+  # mermaid (via streamdown): prototype pollution in config APIs and Architecture
+  # diagrams, CSS injection into sibling elements, XY Chart infinite loop and
+  # radar diagram DoS.
+  "mermaid": "11.16.1"
+  # body-parser (via express): invalid `limit` silently disabled size enforcement.
+  "body-parser": "2.3.0"
+  # @humanfs/node (via eslint): recursive copy followed symlinks outside the tree.
+  "@humanfs/node": "0.16.8"
+  # js-yaml: quadratic CPU in `!!omap` resolution (CVE-2026-59870 not backported
+  # to 4.3.0). Direct dep is already 4.3.1; the override lifts eslint's copy too.
+  "js-yaml": "4.3.1"
 
 # --- Level 1: Minimum Release Age ---
 # Packages must be published for at least 1 day before they can be installed.

From 806be2d061b78dcdd4e3f09a9c1e0fb5f0724c9a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9sar=20Arroba?=
 <19954079+cesararroba@users.noreply.github.com>
Date: Tue, 8 Sep 2026 11:58:06 +0200
Subject: [PATCH 41/77] chore(ci): bump agilepathway/label-checker to v1.6.66
 (#12760)

---
 .github/workflows/backport.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
index 8563f43038..0c6ef3ad96 100644
--- a/.github/workflows/backport.yml
+++ b/.github/workflows/backport.yml
@@ -39,7 +39,7 @@ jobs:
 
       - name: Check labels
         id: label_check
-        uses: agilepathway/label-checker@c3d16ad512e7cea5961df85ff2486bb774caf3c5 # v1.6.65
+        uses: agilepathway/label-checker@c324842522fbd012e4f590afe3b4e591301322ed # v1.6.66
         with:
           allow_failure: true
           prefix_mode: true

From 9cab9b8653634d30f7e290d6947e858c92f129c2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9sar=20Arroba?=
 <19954079+cesararroba@users.noreply.github.com>
Date: Wed, 9 Sep 2026 14:30:22 +0200
Subject: [PATCH 42/77] fix(ci): suppress grpc xDS DoS CVE from the Trivy
 binary (#12777)

---
 .grype.yaml       | 11 +++++++++++
 .trivyignore.yaml | 19 +++++++++++++++++++
 2 files changed, 30 insertions(+)

diff --git a/.grype.yaml b/.grype.yaml
index 38517d7af5..26fec99bdd 100644
--- a/.grype.yaml
+++ b/.grype.yaml
@@ -27,6 +27,17 @@ ignore:
     package:
       name: google.golang.org/grpc
       version: v1.82.1
+  # CVE-2026-84445 is the same temporary exception documented in .trivyignore.yaml:
+  # Trivy 0.74.0 still embeds grpc 1.82.1, while the 1.82.2 / 1.83.2 fix is not in any
+  # release. The panic needs a gRPC server built with `xds.NewGRPCServer()`; Prowler only
+  # runs `trivy image` / `trivy fs`, so the image serves no gRPC at all. Pinned to the
+  # embedded version so the rule stops matching on its own once Trivy bumps grpc. Remove
+  # with the Trivy exception by 2026-10-15.
+  # https://github.com/advisories/GHSA-2v4p-qf9q-27wj
+  - vulnerability: CVE-2026-84445
+    package:
+      name: google.golang.org/grpc
+      version: v1.82.1
   # CVE-2026-56855 / CVE-2026-78662 are the same temporary exception documented in
   # .trivyignore.yaml: Trivy 0.74.0 still embeds golang.org/x/crypto v0.55.0, while the
   # 0.56.0 fix (published 2026-09-02) hasn't reached any Trivy release, or even Trivy
diff --git a/.trivyignore.yaml b/.trivyignore.yaml
index 28c3b7f0a9..715c7b625e 100644
--- a/.trivyignore.yaml
+++ b/.trivyignore.yaml
@@ -176,6 +176,25 @@ vulnerabilities:
       - "pkg:golang/google.golang.org/grpc"
     expired_at: 2026-10-15
 
+  # CVE-2026-84445 is a DoS in grpc-go servers built with `xds.NewGRPCServer()`: a request
+  # carrying neither `:authority` nor `Host` reaches the xDS routing interceptor, which
+  # indexes an empty slice of authorities and panics. The per-RPC goroutine does not
+  # recover, so the whole server process dies. Fixed in 1.82.2 and 1.83.2 (published
+  # 2026-09-08). Trivy 0.74.0, the latest published release and the version the images
+  # ship, pins 1.82.1 as an indirect dependency:
+  # https://github.com/aquasecurity/trivy/blob/v0.74.0/go.mod
+  # Trivy main already carries 1.83.2, but no published release includes it yet.
+  # The reachability argument is the one made for CVE-2026-84304 above, only narrower:
+  # this panic needs an xDS-managed gRPC server. Prowler invokes Trivy exclusively as
+  # `trivy image` and `trivy fs` on a local path, never `trivy server`, so the image runs
+  # no gRPC server at all, xDS or otherwise. Remove this temporary suppression as soon as
+  # a Trivy release pins grpc >= 1.83.2.
+  # https://github.com/advisories/GHSA-2v4p-qf9q-27wj
+  - id: CVE-2026-84445
+    purls:
+      - "pkg:golang/google.golang.org/grpc@v1.82.1"
+    expired_at: 2026-10-15
+
   # CVE-2026-56855 and CVE-2026-78662 are DoS deadlocks in x/crypto/ssh: a malicious peer
   # can flood or misuse channel messages (RFC 4254) to block the whole connection.
   # Fixed in golang.org/x/crypto v0.56.0 (published 2026-09-02). Trivy 0.74.0, the latest

From bbf5e1fa9fc13c12476525f5230489ca823dfd49 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Wed, 9 Sep 2026 15:58:35 +0100
Subject: [PATCH 43/77] fix(tests): isolate secretsmanager policy test (#12782)

---
 .../secretsmanager_has_restrictive_resource_policy_test.py  | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/tests/providers/aws/services/secretsmanager/secretsmanager_has_restrictive_resource_policy/secretsmanager_has_restrictive_resource_policy_test.py b/tests/providers/aws/services/secretsmanager/secretsmanager_has_restrictive_resource_policy/secretsmanager_has_restrictive_resource_policy_test.py
index 5482fcbbcc..cdf45e446e 100644
--- a/tests/providers/aws/services/secretsmanager/secretsmanager_has_restrictive_resource_policy/secretsmanager_has_restrictive_resource_policy_test.py
+++ b/tests/providers/aws/services/secretsmanager/secretsmanager_has_restrictive_resource_policy/secretsmanager_has_restrictive_resource_policy_test.py
@@ -103,12 +103,6 @@ class TestSecretsManagerHasRestrictiveResourcePolicy:
         with mock_aws():
             aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
 
-            from prowler.providers.aws.services.secretsmanager.secretsmanager_has_restrictive_resource_policy.secretsmanager_has_restrictive_resource_policy import (
-                secretsmanager_client,
-            )
-
-            secretsmanager_client.secrets.clear()
-
             with (
                 mock.patch(
                     "prowler.providers.common.provider.Provider.get_global_provider",

From c71f226e5c90acdb41be6e7d0335f87468809eed Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9sar=20Arroba?=
 <19954079+cesararroba@users.noreply.github.com>
Date: Wed, 9 Sep 2026 17:00:50 +0200
Subject: [PATCH 44/77] fix(image): honour TRIVY_CACHE_DIR when it is set
 (#12773)

Co-authored-by: pedrooot <pedromarting3@gmail.com>
---
 .../providers/image/getting-started-image.mdx | 23 +++++++++++++
 .../trivy-cache-dir-configurable.fixed.md     |  1 +
 prowler/providers/image/image_provider.py     | 13 +++++---
 tests/providers/image/image_provider_test.py  | 33 +++++++++++++++++++
 4 files changed, 66 insertions(+), 4 deletions(-)
 create mode 100644 prowler/changelog.d/trivy-cache-dir-configurable.fixed.md

diff --git a/docs/user-guide/providers/image/getting-started-image.mdx b/docs/user-guide/providers/image/getting-started-image.mdx
index d3d74ddba1..6b5d30b72e 100644
--- a/docs/user-guide/providers/image/getting-started-image.mdx
+++ b/docs/user-guide/providers/image/getting-started-image.mdx
@@ -96,6 +96,29 @@ Install Trivy using one of the following methods:
 
 For additional installation methods, see the [Trivy installation guide](https://trivy.dev/latest/getting-started/installation/).
 
+### Vulnerability Database Cache
+
+<VersionBadge version="5.42.0" />
+
+Trivy keeps its vulnerability database in a cache directory. By default Prowler gives it a temporary one and removes it when the scan ends, so the database is downloaded again for every scan.
+
+Set `TRIVY_CACHE_DIR` to a directory that persists and the database is downloaded once and reused:
+
+```bash
+export TRIVY_CACHE_DIR="$HOME/.cache/trivy"
+prowler image --image <image>
+```
+
+Prowler never deletes a directory you supply. Trivy still creates and updates its cache and database files inside it.
+
+<Note>
+A host with no internet access needs a pre-populated vulnerability database in a persistent directory, with `TRIVY_CACHE_DIR` pointing at it. Populate the directory on a machine that does have access and copy it across.
+
+Trivy tries to refresh the database when it considers it stale, and that download fails without network access. Set `TRIVY_SKIP_DB_UPDATE=true` (and `TRIVY_SKIP_JAVA_DB_UPDATE=true` if Java scanning is enabled) so it uses the supplied database as is.
+
+The database ages. A scan run against an old one reports only the vulnerabilities known when it was built, and nothing in the output says so, so keep track of when it was last refreshed.
+</Note>
+
 
 ### Supported Scanners
 
diff --git a/prowler/changelog.d/trivy-cache-dir-configurable.fixed.md b/prowler/changelog.d/trivy-cache-dir-configurable.fixed.md
new file mode 100644
index 0000000000..fd2f0ca117
--- /dev/null
+++ b/prowler/changelog.d/trivy-cache-dir-configurable.fixed.md
@@ -0,0 +1 @@
+The Image provider now uses the directory named by `TRIVY_CACHE_DIR` when one is set, instead of a fresh temporary directory it deletes afterwards, so a deployment can supply a vulnerability database it already holds and one with network access stops re-downloading the database for every image it scans
diff --git a/prowler/providers/image/image_provider.py b/prowler/providers/image/image_provider.py
index 97a014d9f1..2709003bf1 100644
--- a/prowler/providers/image/image_provider.py
+++ b/prowler/providers/image/image_provider.py
@@ -115,10 +115,15 @@ class ImageProvider(Provider):
         self._session = None
         self._identity = "prowler"
         self._listing_only = False
-        self._trivy_cache_dir_obj = tempfile.TemporaryDirectory(
-            prefix="prowler-trivy-cache-"
-        )
-        self._trivy_cache_dir = self._trivy_cache_dir_obj.name
+        # A supplied cache dir is never deleted: it may hold a DB we cannot refetch
+        configured_cache_dir = os.environ.get("TRIVY_CACHE_DIR", "").strip()
+        if configured_cache_dir:
+            self._trivy_cache_dir = configured_cache_dir
+        else:
+            self._trivy_cache_dir_obj = tempfile.TemporaryDirectory(
+                prefix="prowler-trivy-cache-"
+            )
+            self._trivy_cache_dir = self._trivy_cache_dir_obj.name
 
         # Registry authentication (follows IaC pattern: explicit params, env vars internal)
         self.registry_username = registry_username or os.environ.get(
diff --git a/tests/providers/image/image_provider_test.py b/tests/providers/image/image_provider_test.py
index cb3bbf2899..94c6a7181b 100644
--- a/tests/providers/image/image_provider_test.py
+++ b/tests/providers/image/image_provider_test.py
@@ -50,6 +50,11 @@ def _make_provider(**kwargs):
     return ImageProvider(**defaults)
 
 
+@pytest.fixture(autouse=True)
+def _no_configured_cache_dir(monkeypatch):
+    monkeypatch.delenv("TRIVY_CACHE_DIR", raising=False)
+
+
 class TestImageProvider:
     def test_image_provider(self):
         """Test default initialization."""
@@ -999,6 +1004,34 @@ class TestCleanup:
         provider.cleanup()
         provider.cleanup()
 
+    def test_configured_cache_dir_is_used(self, monkeypatch, tmp_path):
+        """A deployment that supplies a cache directory gets that one."""
+        monkeypatch.setenv("TRIVY_CACHE_DIR", str(tmp_path))
+
+        provider = _make_provider()
+
+        assert provider._trivy_cache_dir == str(tmp_path)
+
+    def test_configured_cache_dir_survives_cleanup(self, monkeypatch, tmp_path):
+        """A supplied directory is not the provider's to delete: it holds a
+        database the deployment may have no way to fetch again."""
+        monkeypatch.setenv("TRIVY_CACHE_DIR", str(tmp_path))
+        provider = _make_provider()
+
+        provider.cleanup()
+
+        assert os.path.isdir(str(tmp_path))
+
+    def test_unset_cache_dir_keeps_the_temporary_one(self, monkeypatch):
+        """Without one configured, nothing changes for existing deployments."""
+        monkeypatch.delenv("TRIVY_CACHE_DIR", raising=False)
+
+        provider = _make_provider()
+
+        assert os.path.isdir(provider._trivy_cache_dir)
+        provider.cleanup()
+        assert not os.path.isdir(provider._trivy_cache_dir)
+
     def test_cleanup_removes_trivy_cache_dir(self):
         """Test that cleanup removes the temporary Trivy cache directory."""
         provider = _make_provider()

From 6f6ae88a66b1808060f45effa22b09247b6ba3a8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9sar=20Arroba?=
 <19954079+cesararroba@users.noreply.github.com>
Date: Wed, 9 Sep 2026 17:11:43 +0200
Subject: [PATCH 45/77] fix(ui): patch the Next.js and sharp image-handling
 vulnerabilities (#12778)

Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
---
 .../next-image-optimization-rce.security.md   |   1 +
 .../sharp-libheif-vulnerabilities.security.md |   1 +
 ui/dependency-log.json                        |  12 +-
 ui/package.json                               |   4 +-
 ui/pnpm-lock.yaml                             | 385 +++++++++---------
 ui/pnpm-workspace.yaml                        |   6 +-
 6 files changed, 207 insertions(+), 202 deletions(-)
 create mode 100644 ui/changelog.d/next-image-optimization-rce.security.md
 create mode 100644 ui/changelog.d/sharp-libheif-vulnerabilities.security.md

diff --git a/ui/changelog.d/next-image-optimization-rce.security.md b/ui/changelog.d/next-image-optimization-rce.security.md
new file mode 100644
index 0000000000..5000fa95f8
--- /dev/null
+++ b/ui/changelog.d/next-image-optimization-rce.security.md
@@ -0,0 +1 @@
+`next` to 16.3.3, patching an unauthenticated remote code execution in the Image Optimization API when AVIF files are used (GHSA-2xp9-vwfh-vxw4)
diff --git a/ui/changelog.d/sharp-libheif-vulnerabilities.security.md b/ui/changelog.d/sharp-libheif-vulnerabilities.security.md
new file mode 100644
index 0000000000..75296b55dc
--- /dev/null
+++ b/ui/changelog.d/sharp-libheif-vulnerabilities.security.md
@@ -0,0 +1 @@
+`sharp` to 0.35.4, patching two libheif vulnerabilities reachable through image decoding (GHSA-rgj7-g3m4-5g8c)
diff --git a/ui/dependency-log.json b/ui/dependency-log.json
index 556b50cdbb..af0cf7a367 100644
--- a/ui/dependency-log.json
+++ b/ui/dependency-log.json
@@ -498,10 +498,10 @@
   {
     "section": "dependencies",
     "name": "next",
-    "from": "16.2.9",
-    "to": "16.2.11",
+    "from": "16.2.11",
+    "to": "16.3.3",
     "strategy": "installed",
-    "generatedAt": "2026-07-24T08:32:45.227Z"
+    "generatedAt": "2026-09-09T12:23:05.642Z"
   },
   {
     "section": "dependencies",
@@ -594,10 +594,10 @@
   {
     "section": "dependencies",
     "name": "sharp",
-    "from": "0.33.5",
-    "to": "0.35.3",
+    "from": "0.35.3",
+    "to": "0.35.4",
     "strategy": "installed",
-    "generatedAt": "2026-08-11T11:35:35.609Z"
+    "generatedAt": "2026-09-09T12:39:08.649Z"
   },
   {
     "section": "dependencies",
diff --git a/ui/package.json b/ui/package.json
index 8101c117f5..9afd17df19 100644
--- a/ui/package.json
+++ b/ui/package.json
@@ -97,7 +97,7 @@
     "marked": "15.0.12",
     "modern-screenshot": "4.7.0",
     "nanoid": "5.1.16",
-    "next": "16.2.11",
+    "next": "16.3.3",
     "next-auth": "5.0.0-beta.32",
     "next-themes": "0.2.1",
     "posthog-js": "1.407.2",
@@ -109,7 +109,7 @@
     "recharts": "2.15.4",
     "require-in-the-middle": "8.0.1",
     "server-only": "0.0.1",
-    "sharp": "0.35.3",
+    "sharp": "0.35.4",
     "streamdown": "1.6.10",
     "tailwind-merge": "3.3.1",
     "tailwindcss-animate": "1.0.7",
diff --git a/ui/pnpm-lock.yaml b/ui/pnpm-lock.yaml
index 01200c3e6d..6ae1c07bdf 100644
--- a/ui/pnpm-lock.yaml
+++ b/ui/pnpm-lock.yaml
@@ -12,7 +12,7 @@ overrides:
   '@react-aria/visually-hidden>react': 19.2.7
   '@react-aria/interactions>react': 19.2.7
   lodash: 4.18.1
-  sharp: 0.35.3
+  sharp: 0.35.4
   lodash-es: 4.18.1
   hono: 4.12.34
   '@hono/node-server': 1.19.17
@@ -92,7 +92,7 @@ importers:
         version: 1.2.3
       '@next/third-parties':
         specifier: 16.2.9
-        version: 16.2.9(next@16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)
+        version: 16.2.9(next@16.3.3(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-alert-dialog':
         specifier: 1.1.14
         version: 1.1.14(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
@@ -167,7 +167,7 @@ importers:
         version: 3.26.0(react@19.2.7)
       '@sentry/nextjs':
         specifier: 10.65.0
-        version: 10.65.0(@opentelemetry/core@2.9.0(@opentelemetry/api@1.9.1))(@opentelemetry/sdk-trace-base@2.9.0(@opentelemetry/api@1.9.1))(next@16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.23))
+        version: 10.65.0(@opentelemetry/core@2.9.0(@opentelemetry/api@1.9.1))(@opentelemetry/sdk-trace-base@2.9.0(@opentelemetry/api@1.9.1))(next@16.3.3(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.23))
       '@tailwindcss/postcss':
         specifier: 4.1.18
         version: 4.1.18
@@ -238,14 +238,14 @@ importers:
         specifier: 5.1.16
         version: 5.1.16
       next:
-        specifier: 16.2.11
-        version: 16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+        specifier: 16.3.3
+        version: 16.3.3(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       next-auth:
         specifier: 5.0.0-beta.32
-        version: 5.0.0-beta.32(next@16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)
+        version: 5.0.0-beta.32(next@16.3.3(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)
       next-themes:
         specifier: 0.2.1
-        version: 0.2.1(next@16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+        version: 0.2.1(next@16.3.3(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       posthog-js:
         specifier: 1.407.2
         version: 1.407.2(preact-render-to-string@6.5.11(preact@10.24.3))
@@ -274,8 +274,8 @@ importers:
         specifier: 0.0.1
         version: 0.0.1
       sharp:
-        specifier: 0.35.3
-        version: 0.35.3(@types/node@24.10.8)
+        specifier: 0.35.4
+        version: 0.35.4(@types/node@24.10.8)
       streamdown:
         specifier: 1.6.10
         version: 1.6.10(@types/mdast@4.0.4)(micromark-util-types@2.0.2)(micromark@4.0.2)(react@19.2.7)
@@ -780,8 +780,8 @@ packages:
   '@codemirror/state@6.6.0':
     resolution: {integrity: sha512-4nbvra5R5EtiCzr9BTHiTLc+MLXK2QGiAVYMyi8PkQd3SR+6ixar/Q/01Fa21TBIDOZXgeWV4WppsQolSreAPQ==}
 
-  '@codemirror/state@6.7.2':
-    resolution: {integrity: sha512-U3RiPX62Wl/Gx4ftQ7UxLlloSfsFTQqKa+7vFBYteZGCzkp6oBqcsD7iSwniWRGobCAmDcwZSY+Six3+3ztdfg==}
+  '@codemirror/state@6.7.4':
+    resolution: {integrity: sha512-QhQIVRY+xHZDxwOSFrJ1eUMapJBUID3IdeAjf7dHO7zBUzSkyooHiodnalz5MG3iHzwixKMlAAyn7244y537EA==}
 
   '@codemirror/theme-one-dark@6.1.3':
     resolution: {integrity: sha512-NzBdIvEJmx6fjeremiGp3t/okrLPYT0d9orIc7AFun8oZcRk58aejkqhv6spnz4MLAevrKNPMQYXEWMg4s+sKA==}
@@ -1109,160 +1109,160 @@ packages:
     resolution: {integrity: sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==}
     engines: {node: '>=18'}
 
-  '@img/sharp-darwin-arm64@0.35.3':
-    resolution: {integrity: sha512-RMnFX7YQsMoh7lWfcM4NEHHymBX/rLuKNPVM84XE9ONPcaSCDgE7CHIHpSgPcO2xcRthgBy1HfNO319mwhIAkg==}
+  '@img/sharp-darwin-arm64@0.35.4':
+    resolution: {integrity: sha512-Uhfl4V4lhP2nbUVF9+hyH1+luj86f1gUFeo8ALYxFoULoU+G87D43BfeMP8XHsk9boxAnCY/bf2EHwhA7MuGsA==}
     engines: {node: '>=20.9.0'}
     cpu: [arm64]
     os: [darwin]
 
-  '@img/sharp-darwin-x64@0.35.3':
-    resolution: {integrity: sha512-Xo+5uFBtLN0BKqieTxiFzFPQAUlBbbH5iBKyRX/z1JrbnYsHTfKJnUfL8+p2TPXr1pXqao4eeL4Rl144uDpK9w==}
+  '@img/sharp-darwin-x64@0.35.4':
+    resolution: {integrity: sha512-hWniXY3bG5qKpkKrAwPe4y+VTPmf086YQAnkxWh7uA1YrlRouWGa0M0Mxj3ZjnXFkv7/TD1bTy9lGUK26vRvWw==}
     engines: {node: '>=20.9.0'}
     cpu: [x64]
     os: [darwin]
 
-  '@img/sharp-freebsd-wasm32@0.35.3':
-    resolution: {integrity: sha512-lUxcqWIj2wMQ9BrwNjngcr1gWUr5xgaGThBRqPPalIC2n67Cqj1uPh8NnA/ZhAg8hUbKl+kVHKwgUIwe6ZYPrg==}
+  '@img/sharp-freebsd-wasm32@0.35.4':
+    resolution: {integrity: sha512-lIsKw/BU+kjB4eZjxrYrZmwOJYi3Ajrv66iAlBmUPyKc3HpnloevB1g3wxGD9P/5BbQ1brBGl65VRRrCvQDEqA==}
     engines: {node: '>=20.9.0'}
     os: [freebsd]
 
-  '@img/sharp-libvips-darwin-arm64@1.3.2':
-    resolution: {integrity: sha512-9J6ypZFpQBj4YnePGoq/S38w6nz+vqg5WZLrLGY4YuSemdMq47GMLBPO42MzwdGwpg/agZ7xzZcFHa48xlywfg==}
+  '@img/sharp-libvips-darwin-arm64@1.3.3':
+    resolution: {integrity: sha512-suTBPTDGrI9WodccaDdwZItTSaBYASlBk1NSfElSHrUfzu3szG6lvIF58+WiFvnfzuK8ZBFS5zE00PxqxnRiPg==}
     cpu: [arm64]
     os: [darwin]
 
-  '@img/sharp-libvips-darwin-x64@1.3.2':
-    resolution: {integrity: sha512-m2pW1n6cns9VaubNwsZ+c3CRYjxNQWgJ5gPlnL1nbBcpkBvFm6SCFN5o0psFHI8w9n11NKhFkeEDns98tiqbEw==}
+  '@img/sharp-libvips-darwin-x64@1.3.3':
+    resolution: {integrity: sha512-FVJZ5mITMobmXIz/hPDTw0EintTW5H3WfrxwLqEqjiIihlu+hVRyGrFQ60xl0Lxn7Bt3zdpevPaQi0HEzqz9fw==}
     cpu: [x64]
     os: [darwin]
 
-  '@img/sharp-libvips-linux-arm64@1.3.2':
-    resolution: {integrity: sha512-dqVSFynCox4C/J8kT16V7SIFAns0IjgLwkvYT7p8LQVmJ5OS5b6tI9IGflxTeuBS//zXeFIUbwt5dwxyZ17cnA==}
+  '@img/sharp-libvips-linux-arm64@1.3.3':
+    resolution: {integrity: sha512-0DaL0A6Xu6sQSQFwe4iVCrKWU2cCTItnRsYsCdxAMm9NF6twAA9BKnoqy4hqz4+azQ0JHuA26qiUKsf1XJ/v5A==}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linux-arm@1.3.2':
-    resolution: {integrity: sha512-1eMLzy92I4J6rmi4mAT8yC3HxOtniyGELlzGbNMLLeqe052ahFQ0h6LFq+lh5DsDIdYViIDst08abvSbcEdLXQ==}
+  '@img/sharp-libvips-linux-arm@1.3.3':
+    resolution: {integrity: sha512-3rbU4vqXXc3hY/OiXdl52xZvT0F1yEngWfvqudtPJg/KkyiaQw2DRsFrNzpmLvfavbwOq3qXn36GP8obHRULQA==}
     cpu: [arm]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linux-ppc64@1.3.2':
-    resolution: {integrity: sha512-3z0NHDxD6n5I9gc05U1eW1AyRm+Gznzq3naMrthPNqE6oYykcogW0l/jfpJdjYnuNl8R7yI9pNbE1XiUeyq0Aw==}
+  '@img/sharp-libvips-linux-ppc64@1.3.3':
+    resolution: {integrity: sha512-cdn1OvUBwsXhbC0zSzJnNzf5MZ/mTrobawDvNXBTxe8VtqKAm0sRuEY2Evzovb/w9JMk4TvRxqt1mekSuJz64w==}
     cpu: [ppc64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linux-riscv64@1.3.2':
-    resolution: {integrity: sha512-bsb4rI+NldGOsXuej2r8OdSS8+zXDVaCWxyWrcv6kneTOlgAHtZABRzBBCwdsPiD90J4myNJuHpg6kA20ImW/w==}
+  '@img/sharp-libvips-linux-riscv64@1.3.3':
+    resolution: {integrity: sha512-HjPVx7yKz+0lqdhDlTw1tt90wamBoxhiXpvl1XZpJLiHH4RCJ5yDTqH+VlYPv2fwFs89JFw4c1IexYOcQUi4IQ==}
     cpu: [riscv64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linux-s390x@1.3.2':
-    resolution: {integrity: sha512-/ABshyj8gCpyIrNXnHn4LorDJ0HHm1VhXPBlxZ8zAtfVPAaSafXPGn+sUSIRiwaSBy0mmFjSjiXI5mkcwdChKQ==}
+  '@img/sharp-libvips-linux-s390x@1.3.3':
+    resolution: {integrity: sha512-neWLh+3yCNThxnfy3c4BbVBeGgt9aftno+XbT56iK28RgeDs3UOFWviLWlUu0bArYVYJaFDK+RRohbicUNCm8Q==}
     cpu: [s390x]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linux-x64@1.3.2':
-    resolution: {integrity: sha512-ITPEtgffGJ0S6G9dRyw/366tJQqFRcHWPHhC+Stpg3Z8AEMrDrTr2lhdz4f/Y/HMbRh//7Z5mBzEpVdi62Oc3w==}
+  '@img/sharp-libvips-linux-x64@1.3.3':
+    resolution: {integrity: sha512-4vKmvAst9nrowcqquKFAyZJUDolUaIp8uRiN0mWFguJ1IplC9/pitXtlnnlU4aa/eJw3J7i67V+pwUL+wZGdsA==}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linuxmusl-arm64@1.3.2':
-    resolution: {integrity: sha512-zE9EdiUzUmg5mDT5a1rk5fYJ6GWPloTwWBYDS14naqHsL+EaMpDj1AWnpLgh3u0YCORv2Tt50wrcrpYqkP97Kw==}
+  '@img/sharp-libvips-linuxmusl-arm64@1.3.3':
+    resolution: {integrity: sha512-Y9kQaLMuNoB0bPYOOdcZMaseNrFpPodIWWMrx+CZyydf2xn68j9WYc6sWWRrDwNkzCQjKYfc68L7jKjGlHMibw==}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@img/sharp-libvips-linuxmusl-x64@1.3.2':
-    resolution: {integrity: sha512-m0lrLiUt+lBYnCFr8qV/65yMR4E/c7/wf78I5eKTdkEakFAlZ9QlzEM3QIhhAwVeUhLAHLcCq7a7Vszq/oFNZQ==}
+  '@img/sharp-libvips-linuxmusl-x64@1.3.3':
+    resolution: {integrity: sha512-fj8Mv0HHfD1Rr+4I68+3agJynxDWtBFgicTbSOb9Bke6pIwzGcJ+RX/yHjmiEGFMCavY/dxvem7MyNaJF+wDiw==}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@img/sharp-linux-arm64@0.35.3':
-    resolution: {integrity: sha512-QgKDspHPnrU+GQ55XPhGwyhC8acLVOOSyAvo1oVfFmrIXLkDNmGWzAfDZ4xK8oSA1qBQrALcHX0G5UZni/SuFQ==}
+  '@img/sharp-linux-arm64@0.35.4':
+    resolution: {integrity: sha512-De4jpEnAU8Hd5oT0j1G3uL4ZvTuipVMn7YC6vPaJhy6/7EwEae0SVAoBrUMYQbkLGDm85taVWwuPc1a44LTzCQ==}
     engines: {node: '>=20.9.0'}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linux-arm@0.35.3':
-    resolution: {integrity: sha512-affVWCTLooy8TSxbDx2qkzuDeaWLNVBA+P//FNBirHsXpP2fuBhk5AuboYUnrDnzoXes8GFjpTx0SBFOCRg+FA==}
+  '@img/sharp-linux-arm@0.35.4':
+    resolution: {integrity: sha512-7OAS8gI0EReKGVN2HssHlM6umJgxF5VI3xN0p9FA91p/YO+ou5hiNghLdZ5BEHztwaaK5+bLKRf8x/o2L2nk9A==}
     engines: {node: '>=20.9.0'}
     cpu: [arm]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linux-ppc64@0.35.3':
-    resolution: {integrity: sha512-sMd8rDxmpLOwv/7N44klFjOD5DUO7FLdjiXDI0hoxYaf7Ar262dQIEkosE98bps+5HPLtp/EvNqeqQtOycP/IA==}
+  '@img/sharp-linux-ppc64@0.35.4':
+    resolution: {integrity: sha512-2oYZJeIl4kCcMGk4ouZVjnkCtFrpQFlNEtJ6GbxzhHQchwH0NH/qEb9ykmOl29dqwMq+JhFdZn+1ak2FKhI9fQ==}
     engines: {node: '>=20.9.0'}
     cpu: [ppc64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linux-riscv64@0.35.3':
-    resolution: {integrity: sha512-0Eob78yjlYPfL5vMNWAW55l3R9Y6BQS/gOfe0ZcP9mEz9ohhKSt4im1hayiknXgf8AWrFqMvJcKIdmLmEe7yeQ==}
+  '@img/sharp-linux-riscv64@0.35.4':
+    resolution: {integrity: sha512-cPbNChoRURAWdebDIHSenxRpgEdy7JkPydSnUxRm9VvKD7m0/xVaR/8Fzlu81pk5nHEvHH87UZUA7cTtwnbJSA==}
     engines: {node: '>=20.9.0'}
     cpu: [riscv64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linux-s390x@0.35.3':
-    resolution: {integrity: sha512-KgAxQ0DxpNOq1rG2t5cgTgShJFGSuU7XO45cqC+1NVOuZnP6tlgZRuSYOfNupGkHID0o3cJOsw4DVeJpMovcGw==}
+  '@img/sharp-linux-s390x@0.35.4':
+    resolution: {integrity: sha512-RY0JFY8Fd6RonCBtHz+DvadaPkXDSI1AUn6yWL9TipqkZ1vY8w8evqdgyDFnkm4/K1ve1TvZiaePP5oSd4+WVQ==}
     engines: {node: '>=20.9.0'}
     cpu: [s390x]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linux-x64@0.35.3':
-    resolution: {integrity: sha512-8pqvxubL2PGdhlPy6GLqzDYMUjyRmKAwKHYKixpdJYBUK7PJ0C029XdsnpFIdgRZG68fZiGdHVWcKPvtiPB4cA==}
+  '@img/sharp-linux-x64@0.35.4':
+    resolution: {integrity: sha512-9qvvEAuk8k89TfWUoX2htWjbAMX8p+NxCppjpcg5k6xMsjhBQPTsoIh36h9Qde4WRuGpJeYnOjdosDn/cnv+OA==}
     engines: {node: '>=20.9.0'}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linuxmusl-arm64@0.35.3':
-    resolution: {integrity: sha512-Vz0iQjzzcSX3HCbfwFfCSG/9SCIqyO0mH2sXyiHaAYfBk0cRsCWXRyQYX0ovCK/PAQBbTzQ0dsPQHh5MAFL59w==}
+  '@img/sharp-linuxmusl-arm64@0.35.4':
+    resolution: {integrity: sha512-KB5jxpfWQTr0nc3xdHtWChdbifHrBGsd2SM62Eyxrl8afikm+f5qGBU75SJIZBT/S1MC8XyacdlXBMSWq6OURA==}
     engines: {node: '>=20.9.0'}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@img/sharp-linuxmusl-x64@0.35.3':
-    resolution: {integrity: sha512-6O1NPKcDVj9QEdg7Hx549EX8U0rp6yXQERqru6yRN7fGBn32UvIRJUlWnk+8xDCiG76hXVBbX82NZ/ZKr0euIg==}
+  '@img/sharp-linuxmusl-x64@0.35.4':
+    resolution: {integrity: sha512-f+eZJZIQNEEd26RPSW+76chwOf1XtA2Y/O+5ocVyLliHkeih3e+jhLVBdNTd2rS3IbNXK8+ug93Vf5ZXtF5Lxg==}
     engines: {node: '>=20.9.0'}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@img/sharp-wasm32@0.35.3':
-    resolution: {integrity: sha512-cZ0XkcYGpHZkqW6iCkqTcmUC0CD9DhD5d/qeZlZkfRBn6GnHniZXLUo5+9xw8Iv76YE6LQFN9YNBlKREcCG76w==}
+  '@img/sharp-wasm32@0.35.4':
+    resolution: {integrity: sha512-zQnl4Kwp7Q6NHsENtU2T/00Zi+w3AQNwz3+UaTyVBy2FpXrzXzGjndpK61onhZjRtRpQXxCTeqw19bVyXOh7jA==}
     engines: {node: '>=20.9.0'}
 
-  '@img/sharp-webcontainers-wasm32@0.35.3':
-    resolution: {integrity: sha512-2rnq7bX3NzeR2T4YWgz8qiG4h3TSdMe+vN1iQXpJleSJ3SM5zQ8Fy2SyyXAWlbxpEZ2Y+Z4u1BePgJEYbSy80Q==}
+  '@img/sharp-webcontainers-wasm32@0.35.4':
+    resolution: {integrity: sha512-ESfNkywmCfPNyaZjxooddJQiQ+l/nTpGEOGthxiLnIHXC/CmcBixnfwUleX9mCz9ovrUUvKMap/pm8RYbzfwaA==}
     engines: {node: '>=20.9.0'}
     cpu: [wasm32]
 
-  '@img/sharp-win32-arm64@0.35.3':
-    resolution: {integrity: sha512-4bPwFdMbeC4JQ8L8LOyWp6nsHcboP5fxkp6iPOXz2Vg49R42TuMs2whkJ5OAP4/Ul035qOzy0AecOF9VOscn4w==}
+  '@img/sharp-win32-arm64@0.35.4':
+    resolution: {integrity: sha512-iNdlBX9gLVvqe2I3uIJSIKTq6wckP/DYxZtcqxm09x5Gi24DnFBmPAWZmr60ZyYMG0xlzo6goG3670ar+RXvRw==}
     engines: {node: '>=20.9.0'}
     cpu: [arm64]
     os: [win32]
 
-  '@img/sharp-win32-ia32@0.35.3':
-    resolution: {integrity: sha512-r53mXsBN6lFUDiST764SvgwUdHAqM4rPAiDzAmf4fLoB6X/rkfyTrLCg6+g17wJJiCmB3JYgHuUldCWUIRFSXw==}
+  '@img/sharp-win32-ia32@0.35.4':
+    resolution: {integrity: sha512-kqRsbaa5CS6KHlpxnN7WhE6vAAugXyZButpRdvDWetlv6Qv4N9WTcrWzF7tXfB9T7MsoadqdI8hmwLq6UlLvtw==}
     engines: {node: ^20.9.0}
     cpu: [ia32]
     os: [win32]
 
-  '@img/sharp-win32-x64@0.35.3':
-    resolution: {integrity: sha512-D4y1vNeZrIIJCN+uHaWVtH86B+aCrdMYYjicy9pXHvbGZeGYLLSd3wdVuC37FxVXlU1ARsk84eKWfWMXGYEqvA==}
+  '@img/sharp-win32-x64@0.35.4':
+    resolution: {integrity: sha512-XtmnYhBcrORsJ4XJngyzr/EWP0hRZLAZRFaApdKuviyqF78+ylxh2y06ZmtULAMOnObJ3ucpN0AcwSWnMowTRg==}
     engines: {node: '>=20.9.0'}
     cpu: [x64]
     os: [win32]
@@ -1422,60 +1422,60 @@ packages:
   '@ndaidong/bellajs@12.0.1':
     resolution: {integrity: sha512-1iY42uiHz0cxNMbde7O3zVN+ZX1viOOUOBRt6ht6lkRZbSjwOnFV34Zv4URp3hGzEe6L9Byk7BOq/41H0PzAOQ==}
 
-  '@next/env@16.2.11':
-    resolution: {integrity: sha512-0do5A3BJ2gxWr0ZCMcD6BhW+e595jyxdTl3rXTS6lOtD8ektMiW6CO+EPwt1Eca1DBnm90r/7GdiKWBKxH++DA==}
+  '@next/env@16.3.3':
+    resolution: {integrity: sha512-U2eYQRwXj+dsqxV79zFqExDdatnNY/ZWc2nsJU1p/OgT7fd3dXwlF6OjYaFQCfMoeTA19PWq+wVmYgimVA+V+g==}
 
   '@next/eslint-plugin-next@16.2.9':
     resolution: {integrity: sha512-UZi8+YT/MLgTC9nrrn2Xd4lBYv1B7lVmtWHfPcthAI5Tt/C1LuDe6DfmtCtJ+WQod3ksY4VrKSvk3oMVAnL7qw==}
 
-  '@next/swc-darwin-arm64@16.2.11':
-    resolution: {integrity: sha512-wryL4pjKmDwGv2ox6+GZDFxvmtSRLqApBR8kL1j4+vhB7Z5vJC/zAnXpiR9Xkfzl0AS8WLMnsuGV/UKI67/rrw==}
+  '@next/swc-darwin-arm64@16.3.3':
+    resolution: {integrity: sha512-8Hiv32QJPwdV6KYJ8meR9SBA061tQqnIKTJDocvOXlEQqib0xMFpzArosuffFUUc0sslbh7QQ8a3Yey1QV8EIw==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [darwin]
 
-  '@next/swc-darwin-x64@16.2.11':
-    resolution: {integrity: sha512-aZl2j4f/fLyjQvOhv0Oe9UaMAQHolYpKhctsoYzplSumKJKPUmgjcf6545aBtysLTcu994TREd0+pSgNE4ohmg==}
+  '@next/swc-darwin-x64@16.3.3':
+    resolution: {integrity: sha512-A1lgKgwVchRYmSe467zdwhxT9040dd8lH+o65sL5Jet8fjB4kegw/rDyPIpYVRb6jAqwXFOJpjIXJLxQKLiE3A==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [darwin]
 
-  '@next/swc-linux-arm64-gnu@16.2.11':
-    resolution: {integrity: sha512-5jEriyEnH/LWFy27L2ZG0XaLlyEJIjhsImEsiS9P563PKEVp2BVups/xfOucIrsvVntp11oNcZwjHvaDPYVB5g==}
+  '@next/swc-linux-arm64-gnu@16.3.3':
+    resolution: {integrity: sha512-bf0FIssMFueU2dm7vQEWWxk0c8UjKTdW0yzuh0sQsD8pf1+KCLDdaqhYZNMYGmXwEOiHAUzgBKudovIlcvvBjg==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@next/swc-linux-arm64-musl@16.2.11':
-    resolution: {integrity: sha512-eIjcpx2fnnFSSkZDbTxy74KnokUXDjfoLClpWelfgHLf621aTqswhwXQ7GkD5K5rplrS6LZ/Bj+mVuvzluBOEg==}
+  '@next/swc-linux-arm64-musl@16.3.3':
+    resolution: {integrity: sha512-W7viwCk9JY/cAkdz/A273rd5bb3RgT/IHwR7Upv90tunjBWNtAAhGhoecHh+teRNRSinuAFmE+l7fwZ4YKkrXg==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@next/swc-linux-x64-gnu@16.2.11':
-    resolution: {integrity: sha512-8WgzpaWMs46qJT9kiV47cje86L0x/Mu9t8/Gwj+pnbgW3rETVfCnaScPjlYUwNScpOozdcIMHWmAvuZJUonR2w==}
+  '@next/swc-linux-x64-gnu@16.3.3':
+    resolution: {integrity: sha512-0W46zw1N3ODpI6n0GeivHvvob1pooozgZVqy65k0mh4/7vr+FbY9+WpHzNVXjHipJf/A3FDheBG19H1s5A25rA==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@next/swc-linux-x64-musl@16.2.11':
-    resolution: {integrity: sha512-I3UgPds7G4ZYnTb/H+5GBGuUT2DhAk6j0mL6A4s63RjFs74wB2hOWP0vaxsK+3NJraExt3eYEPQ/UtT0x/64Nw==}
+  '@next/swc-linux-x64-musl@16.3.3':
+    resolution: {integrity: sha512-H4mBso8ZTMBPtdT0PN0pBx2ayTvQuTuvS6qT13d77yVFJXAPCxkyIhLTmdMaGTJs0krQYI/qpzdHijCeihXhbg==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@next/swc-win32-arm64-msvc@16.2.11':
-    resolution: {integrity: sha512-n89CjtcThnjrwgJMAiI5xbqwLY51zvwC9tSlArmVndAJLYVl9T9UAdlkXTmZvE++idoXe8KdglQlhNRdUp1c6g==}
+  '@next/swc-win32-arm64-msvc@16.3.3':
+    resolution: {integrity: sha512-cTMUJpcEGmeywofCUfhR+rSsoE33+rVPnPEYNTNdLNlsOeEg/vktOsKUSTb28vUGqD2jkm4Zaskcwn7OCI6FQg==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [win32]
 
-  '@next/swc-win32-x64-msvc@16.2.11':
-    resolution: {integrity: sha512-md8CLNggS1Dx9pUgApzps5uAf+N8GN9xywzmNx9vHAWo94HtBwCCqkSnhIrdfQe83Dhz8Lfo/20Nb1Zxal092w==}
+  '@next/swc-win32-x64-msvc@16.3.3':
+    resolution: {integrity: sha512-2VR4cTBzHXaBjnGsuH6GyJjENzQOmHeAh11uY1iUhjm3j5dEUrVJuUj+VL78jaGi/Dik8xS76zEj18BsFhlVZQ==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [win32]
@@ -3065,12 +3065,12 @@ packages:
   '@standard-schema/utils@0.3.0':
     resolution: {integrity: sha512-e7Mew686owMaPJVNNLs55PUvgz371nKgwsc4vxE49zsODpJEnxgxRo2y/OKrqueavXgZNMDVj3DdHFlaSAeU8g==}
 
-  '@swc/helpers@0.5.15':
-    resolution: {integrity: sha512-JQ5TuMi45Owi4/BIMAJBoSQoOJu12oOk/gADqlcUL9JEdHB8vyjUSsxqeNXnmXHjYKMi2WcYtezGEEhqUI/E2g==}
-
   '@swc/helpers@0.5.18':
     resolution: {integrity: sha512-TXTnIcNJQEKwThMMqBXsZ4VGAza6bvN4pa41Rkqoio6QBKMvo+5lexeTMScGCIxtzgQJzElcvIltani+adC5PQ==}
 
+  '@swc/helpers@0.5.23':
+    resolution: {integrity: sha512-5lSsMOTXURePglDfvuAQUqkGek9Hg2kksOYay2m0+XR++b2NWYL/4sWyuvVBIs8oKnJaxkdi9whaL/sqN13afw==}
+
   '@tailwindcss/node@4.1.18':
     resolution: {integrity: sha512-DoR7U1P7iYhw16qJ49fgXUlry1t4CpXeErJHnQ44JgTSKMaZUdf17cfn5mHchfJ4KRBZRFA/Coo+MUF5+gOaCQ==}
 
@@ -4573,6 +4573,7 @@ packages:
   eslint@9.39.2:
     resolution: {integrity: sha512-LEyamqS7W5HB3ujJyvi0HQK/dtVINZvd5mAAp9eT5S/ujByGjiZLCzPcHVzuXbpJDJF/cxwHlfceVUDZ2lnSTw==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    deprecated: This version is no longer supported. Please see https://eslint.org/version-support for other options.
     hasBin: true
     peerDependencies:
       jiti: '*'
@@ -5808,8 +5809,8 @@ packages:
       react: '*'
       react-dom: '*'
 
-  next@16.2.11:
-    resolution: {integrity: sha512-B339zaqbyK8cmxhoAvLrcwoabwCP1wz21zSzfqxqXAemTu2BXnH7tQnfcglKv1vnMUIDBc+Hth7XODQriTZiRQ==}
+  next@16.3.3:
+    resolution: {integrity: sha512-tuRTx1nQ/yVw83cwJBo9F+njGUgMn3UHQycreWHB8XsStvvAh1AthbI8/4IpKnFaF58F+iSiHejYOlMQ/eq83g==}
     engines: {node: '>=20.9.0'}
     hasBin: true
     peerDependencies:
@@ -6491,8 +6492,8 @@ packages:
   setprototypeof@1.2.0:
     resolution: {integrity: sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==}
 
-  sharp@0.35.3:
-    resolution: {integrity: sha512-ej0zVHuZGHCiABXcNxeYhpRnPNPAcvbG8RMdBAhDAxLKkCRVSpK3Iyu7qbqw3JMzoj0REeM6f3tJLtVwl0023Q==}
+  sharp@0.35.4:
+    resolution: {integrity: sha512-n++8XWcj+jCOr2IOl7h8LbKnGBDY4aPbmprMONBNFdn0ImXqpGVv5zliDs0V9HbmbCQLpbuo2ej9rAoOQTvMDA==}
     engines: {node: '>=20.9.0'}
     peerDependencies:
       '@types/node': '*'
@@ -8032,7 +8033,7 @@ snapshots:
   '@codemirror/commands@6.11.0':
     dependencies:
       '@codemirror/language': 6.12.2
-      '@codemirror/state': 6.7.2
+      '@codemirror/state': 6.7.4
       '@codemirror/view': 6.40.0
       '@lezer/common': 1.5.2
 
@@ -8061,7 +8062,7 @@ snapshots:
     dependencies:
       '@marijn/find-cluster-break': 1.0.2
 
-  '@codemirror/state@6.7.2':
+  '@codemirror/state@6.7.4':
     dependencies:
       '@marijn/find-cluster-break': 1.0.4
 
@@ -8322,108 +8323,108 @@ snapshots:
 
   '@img/colour@1.1.0': {}
 
-  '@img/sharp-darwin-arm64@0.35.3':
+  '@img/sharp-darwin-arm64@0.35.4':
     optionalDependencies:
-      '@img/sharp-libvips-darwin-arm64': 1.3.2
+      '@img/sharp-libvips-darwin-arm64': 1.3.3
     optional: true
 
-  '@img/sharp-darwin-x64@0.35.3':
+  '@img/sharp-darwin-x64@0.35.4':
     optionalDependencies:
-      '@img/sharp-libvips-darwin-x64': 1.3.2
+      '@img/sharp-libvips-darwin-x64': 1.3.3
     optional: true
 
-  '@img/sharp-freebsd-wasm32@0.35.3':
+  '@img/sharp-freebsd-wasm32@0.35.4':
     dependencies:
-      '@img/sharp-wasm32': 0.35.3
+      '@img/sharp-wasm32': 0.35.4
     optional: true
 
-  '@img/sharp-libvips-darwin-arm64@1.3.2':
+  '@img/sharp-libvips-darwin-arm64@1.3.3':
     optional: true
 
-  '@img/sharp-libvips-darwin-x64@1.3.2':
+  '@img/sharp-libvips-darwin-x64@1.3.3':
     optional: true
 
-  '@img/sharp-libvips-linux-arm64@1.3.2':
+  '@img/sharp-libvips-linux-arm64@1.3.3':
     optional: true
 
-  '@img/sharp-libvips-linux-arm@1.3.2':
+  '@img/sharp-libvips-linux-arm@1.3.3':
     optional: true
 
-  '@img/sharp-libvips-linux-ppc64@1.3.2':
+  '@img/sharp-libvips-linux-ppc64@1.3.3':
     optional: true
 
-  '@img/sharp-libvips-linux-riscv64@1.3.2':
+  '@img/sharp-libvips-linux-riscv64@1.3.3':
     optional: true
 
-  '@img/sharp-libvips-linux-s390x@1.3.2':
+  '@img/sharp-libvips-linux-s390x@1.3.3':
     optional: true
 
-  '@img/sharp-libvips-linux-x64@1.3.2':
+  '@img/sharp-libvips-linux-x64@1.3.3':
     optional: true
 
-  '@img/sharp-libvips-linuxmusl-arm64@1.3.2':
+  '@img/sharp-libvips-linuxmusl-arm64@1.3.3':
     optional: true
 
-  '@img/sharp-libvips-linuxmusl-x64@1.3.2':
+  '@img/sharp-libvips-linuxmusl-x64@1.3.3':
     optional: true
 
-  '@img/sharp-linux-arm64@0.35.3':
+  '@img/sharp-linux-arm64@0.35.4':
     optionalDependencies:
-      '@img/sharp-libvips-linux-arm64': 1.3.2
+      '@img/sharp-libvips-linux-arm64': 1.3.3
     optional: true
 
-  '@img/sharp-linux-arm@0.35.3':
+  '@img/sharp-linux-arm@0.35.4':
     optionalDependencies:
-      '@img/sharp-libvips-linux-arm': 1.3.2
+      '@img/sharp-libvips-linux-arm': 1.3.3
     optional: true
 
-  '@img/sharp-linux-ppc64@0.35.3':
+  '@img/sharp-linux-ppc64@0.35.4':
     optionalDependencies:
-      '@img/sharp-libvips-linux-ppc64': 1.3.2
+      '@img/sharp-libvips-linux-ppc64': 1.3.3
     optional: true
 
-  '@img/sharp-linux-riscv64@0.35.3':
+  '@img/sharp-linux-riscv64@0.35.4':
     optionalDependencies:
-      '@img/sharp-libvips-linux-riscv64': 1.3.2
+      '@img/sharp-libvips-linux-riscv64': 1.3.3
     optional: true
 
-  '@img/sharp-linux-s390x@0.35.3':
+  '@img/sharp-linux-s390x@0.35.4':
     optionalDependencies:
-      '@img/sharp-libvips-linux-s390x': 1.3.2
+      '@img/sharp-libvips-linux-s390x': 1.3.3
     optional: true
 
-  '@img/sharp-linux-x64@0.35.3':
+  '@img/sharp-linux-x64@0.35.4':
     optionalDependencies:
-      '@img/sharp-libvips-linux-x64': 1.3.2
+      '@img/sharp-libvips-linux-x64': 1.3.3
     optional: true
 
-  '@img/sharp-linuxmusl-arm64@0.35.3':
+  '@img/sharp-linuxmusl-arm64@0.35.4':
     optionalDependencies:
-      '@img/sharp-libvips-linuxmusl-arm64': 1.3.2
+      '@img/sharp-libvips-linuxmusl-arm64': 1.3.3
     optional: true
 
-  '@img/sharp-linuxmusl-x64@0.35.3':
+  '@img/sharp-linuxmusl-x64@0.35.4':
     optionalDependencies:
-      '@img/sharp-libvips-linuxmusl-x64': 1.3.2
+      '@img/sharp-libvips-linuxmusl-x64': 1.3.3
     optional: true
 
-  '@img/sharp-wasm32@0.35.3':
+  '@img/sharp-wasm32@0.35.4':
     dependencies:
       '@emnapi/runtime': 1.11.3
     optional: true
 
-  '@img/sharp-webcontainers-wasm32@0.35.3':
+  '@img/sharp-webcontainers-wasm32@0.35.4':
     dependencies:
-      '@img/sharp-wasm32': 0.35.3
+      '@img/sharp-wasm32': 0.35.4
     optional: true
 
-  '@img/sharp-win32-arm64@0.35.3':
+  '@img/sharp-win32-arm64@0.35.4':
     optional: true
 
-  '@img/sharp-win32-ia32@0.35.3':
+  '@img/sharp-win32-ia32@0.35.4':
     optional: true
 
-  '@img/sharp-win32-x64@0.35.3':
+  '@img/sharp-win32-x64@0.35.4':
     optional: true
 
   '@inquirer/ansi@2.0.5': {}
@@ -8642,39 +8643,39 @@ snapshots:
 
   '@ndaidong/bellajs@12.0.1': {}
 
-  '@next/env@16.2.11': {}
+  '@next/env@16.3.3': {}
 
   '@next/eslint-plugin-next@16.2.9':
     dependencies:
       fast-glob: 3.3.1
 
-  '@next/swc-darwin-arm64@16.2.11':
+  '@next/swc-darwin-arm64@16.3.3':
     optional: true
 
-  '@next/swc-darwin-x64@16.2.11':
+  '@next/swc-darwin-x64@16.3.3':
     optional: true
 
-  '@next/swc-linux-arm64-gnu@16.2.11':
+  '@next/swc-linux-arm64-gnu@16.3.3':
     optional: true
 
-  '@next/swc-linux-arm64-musl@16.2.11':
+  '@next/swc-linux-arm64-musl@16.3.3':
     optional: true
 
-  '@next/swc-linux-x64-gnu@16.2.11':
+  '@next/swc-linux-x64-gnu@16.3.3':
     optional: true
 
-  '@next/swc-linux-x64-musl@16.2.11':
+  '@next/swc-linux-x64-musl@16.3.3':
     optional: true
 
-  '@next/swc-win32-arm64-msvc@16.2.11':
+  '@next/swc-win32-arm64-msvc@16.3.3':
     optional: true
 
-  '@next/swc-win32-x64-msvc@16.2.11':
+  '@next/swc-win32-x64-msvc@16.3.3':
     optional: true
 
-  '@next/third-parties@16.2.9(next@16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)':
+  '@next/third-parties@16.2.9(next@16.3.3(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)':
     dependencies:
-      next: 16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      next: 16.3.3(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
       third-party-capital: 1.0.20
 
@@ -9598,7 +9599,7 @@ snapshots:
 
   '@react-aria/ssr@3.9.10(react@19.2.7)':
     dependencies:
-      '@swc/helpers': 0.5.18
+      '@swc/helpers': 0.5.23
       react: 19.2.7
 
   '@react-aria/ssr@3.9.4(react@19.2.7)':
@@ -9629,7 +9630,7 @@ snapshots:
 
   '@react-stately/flags@3.1.2':
     dependencies:
-      '@swc/helpers': 0.5.18
+      '@swc/helpers': 0.5.23
 
   '@react-stately/utils@3.10.8(react@19.2.7)':
     dependencies:
@@ -9638,7 +9639,7 @@ snapshots:
 
   '@react-stately/utils@3.11.0(react@19.2.7)':
     dependencies:
-      '@swc/helpers': 0.5.18
+      '@swc/helpers': 0.5.23
       react: 19.2.7
 
   '@react-types/shared@3.26.0(react@19.2.7)':
@@ -9841,7 +9842,7 @@ snapshots:
     dependencies:
       '@sentry/core': 10.65.0
 
-  '@sentry/nextjs@10.65.0(@opentelemetry/core@2.9.0(@opentelemetry/api@1.9.1))(@opentelemetry/sdk-trace-base@2.9.0(@opentelemetry/api@1.9.1))(next@16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.23))':
+  '@sentry/nextjs@10.65.0(@opentelemetry/core@2.9.0(@opentelemetry/api@1.9.1))(@opentelemetry/sdk-trace-base@2.9.0(@opentelemetry/api@1.9.1))(next@16.3.3(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.23))':
     dependencies:
       '@opentelemetry/api': 1.9.1
       '@rollup/plugin-commonjs': 28.0.1(rollup@4.59.0)
@@ -9854,7 +9855,7 @@ snapshots:
       '@sentry/react': 10.65.0(react@19.2.7)
       '@sentry/vercel-edge': 10.65.0
       '@sentry/webpack-plugin': 5.4.0(rollup@4.59.0)(webpack@5.104.1(lightningcss@1.30.2)(postcss@8.5.23))
-      next: 16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      next: 16.3.3(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       rollup: 4.59.0
       stacktrace-parser: 0.1.11
     transitivePeerDependencies:
@@ -10185,11 +10186,11 @@ snapshots:
 
   '@standard-schema/utils@0.3.0': {}
 
-  '@swc/helpers@0.5.15':
+  '@swc/helpers@0.5.18':
     dependencies:
       tslib: 2.8.1
 
-  '@swc/helpers@0.5.18':
+  '@swc/helpers@0.5.23':
     dependencies:
       tslib: 2.8.1
 
@@ -10608,7 +10609,7 @@ snapshots:
       '@typescript-eslint/visitor-keys': 8.59.3
       debug: 4.4.3
       minimatch: 10.2.3
-      semver: 7.8.0
+      semver: 7.8.5
       tinyglobby: 0.2.17
       ts-api-utils: 2.5.0(typescript@5.5.4)
       typescript: 5.5.4
@@ -12519,7 +12520,7 @@ snapshots:
 
   is-bun-module@2.0.0:
     dependencies:
-      semver: 7.8.0
+      semver: 7.8.5
 
   is-callable@1.2.7: {}
 
@@ -12908,7 +12909,7 @@ snapshots:
 
   make-dir@4.0.0:
     dependencies:
-      semver: 7.8.0
+      semver: 7.8.5
 
   markdown-table@3.0.4: {}
 
@@ -13449,22 +13450,22 @@ snapshots:
 
   neo-async@2.6.2: {}
 
-  next-auth@5.0.0-beta.32(next@16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7):
+  next-auth@5.0.0-beta.32(next@16.3.3(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7):
     dependencies:
       '@auth/core': 0.41.3
-      next: 16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      next: 16.3.3(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
 
-  next-themes@0.2.1(next@16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
+  next-themes@0.2.1(next@16.3.3(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
-      next: 16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      next: 16.3.3(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
       react-dom: 19.2.7(react@19.2.7)
 
-  next@16.2.11(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
+  next@16.3.3(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(@playwright/test@1.56.1)(@types/node@24.10.8)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
-      '@next/env': 16.2.11
-      '@swc/helpers': 0.5.15
+      '@next/env': 16.3.3
+      '@swc/helpers': 0.5.23
       baseline-browser-mapping: 2.10.29
       caniuse-lite: 1.0.30001792
       postcss: 8.5.23
@@ -13472,18 +13473,18 @@ snapshots:
       react-dom: 19.2.7(react@19.2.7)
       styled-jsx: 5.1.6(@babel/core@7.29.7)(react@19.2.7)
     optionalDependencies:
-      '@next/swc-darwin-arm64': 16.2.11
-      '@next/swc-darwin-x64': 16.2.11
-      '@next/swc-linux-arm64-gnu': 16.2.11
-      '@next/swc-linux-arm64-musl': 16.2.11
-      '@next/swc-linux-x64-gnu': 16.2.11
-      '@next/swc-linux-x64-musl': 16.2.11
-      '@next/swc-win32-arm64-msvc': 16.2.11
-      '@next/swc-win32-x64-msvc': 16.2.11
+      '@next/swc-darwin-arm64': 16.3.3
+      '@next/swc-darwin-x64': 16.3.3
+      '@next/swc-linux-arm64-gnu': 16.3.3
+      '@next/swc-linux-arm64-musl': 16.3.3
+      '@next/swc-linux-x64-gnu': 16.3.3
+      '@next/swc-linux-x64-musl': 16.3.3
+      '@next/swc-win32-arm64-msvc': 16.3.3
+      '@next/swc-win32-x64-msvc': 16.3.3
       '@opentelemetry/api': 1.9.1
       '@playwright/test': 1.56.1
       babel-plugin-react-compiler: 1.0.0
-      sharp: 0.35.3(@types/node@24.10.8)
+      sharp: 0.35.4(@types/node@24.10.8)
     transitivePeerDependencies:
       - '@babel/core'
       - '@types/node'
@@ -14240,37 +14241,37 @@ snapshots:
 
   setprototypeof@1.2.0: {}
 
-  sharp@0.35.3(@types/node@24.10.8):
+  sharp@0.35.4(@types/node@24.10.8):
     dependencies:
       '@img/colour': 1.1.0
       detect-libc: 2.1.2
       semver: 7.8.5
     optionalDependencies:
-      '@img/sharp-darwin-arm64': 0.35.3
-      '@img/sharp-darwin-x64': 0.35.3
-      '@img/sharp-freebsd-wasm32': 0.35.3
-      '@img/sharp-libvips-darwin-arm64': 1.3.2
-      '@img/sharp-libvips-darwin-x64': 1.3.2
-      '@img/sharp-libvips-linux-arm': 1.3.2
-      '@img/sharp-libvips-linux-arm64': 1.3.2
-      '@img/sharp-libvips-linux-ppc64': 1.3.2
-      '@img/sharp-libvips-linux-riscv64': 1.3.2
-      '@img/sharp-libvips-linux-s390x': 1.3.2
-      '@img/sharp-libvips-linux-x64': 1.3.2
-      '@img/sharp-libvips-linuxmusl-arm64': 1.3.2
-      '@img/sharp-libvips-linuxmusl-x64': 1.3.2
-      '@img/sharp-linux-arm': 0.35.3
-      '@img/sharp-linux-arm64': 0.35.3
-      '@img/sharp-linux-ppc64': 0.35.3
-      '@img/sharp-linux-riscv64': 0.35.3
-      '@img/sharp-linux-s390x': 0.35.3
-      '@img/sharp-linux-x64': 0.35.3
-      '@img/sharp-linuxmusl-arm64': 0.35.3
-      '@img/sharp-linuxmusl-x64': 0.35.3
-      '@img/sharp-webcontainers-wasm32': 0.35.3
-      '@img/sharp-win32-arm64': 0.35.3
-      '@img/sharp-win32-ia32': 0.35.3
-      '@img/sharp-win32-x64': 0.35.3
+      '@img/sharp-darwin-arm64': 0.35.4
+      '@img/sharp-darwin-x64': 0.35.4
+      '@img/sharp-freebsd-wasm32': 0.35.4
+      '@img/sharp-libvips-darwin-arm64': 1.3.3
+      '@img/sharp-libvips-darwin-x64': 1.3.3
+      '@img/sharp-libvips-linux-arm': 1.3.3
+      '@img/sharp-libvips-linux-arm64': 1.3.3
+      '@img/sharp-libvips-linux-ppc64': 1.3.3
+      '@img/sharp-libvips-linux-riscv64': 1.3.3
+      '@img/sharp-libvips-linux-s390x': 1.3.3
+      '@img/sharp-libvips-linux-x64': 1.3.3
+      '@img/sharp-libvips-linuxmusl-arm64': 1.3.3
+      '@img/sharp-libvips-linuxmusl-x64': 1.3.3
+      '@img/sharp-linux-arm': 0.35.4
+      '@img/sharp-linux-arm64': 0.35.4
+      '@img/sharp-linux-ppc64': 0.35.4
+      '@img/sharp-linux-riscv64': 0.35.4
+      '@img/sharp-linux-s390x': 0.35.4
+      '@img/sharp-linux-x64': 0.35.4
+      '@img/sharp-linuxmusl-arm64': 0.35.4
+      '@img/sharp-linuxmusl-x64': 0.35.4
+      '@img/sharp-webcontainers-wasm32': 0.35.4
+      '@img/sharp-win32-arm64': 0.35.4
+      '@img/sharp-win32-ia32': 0.35.4
+      '@img/sharp-win32-x64': 0.35.4
       '@types/node': 24.10.8
 
   shebang-command@2.0.0:
@@ -14351,7 +14352,7 @@ snapshots:
       detect-newline: 4.0.1
       git-hooks-list: 4.2.1
       is-plain-obj: 4.1.0
-      semver: 7.8.0
+      semver: 7.8.5
       sort-object-keys: 2.1.0
       tinyglobby: 0.2.17
 
diff --git a/ui/pnpm-workspace.yaml b/ui/pnpm-workspace.yaml
index a1bf7c3015..fbc178ce5a 100644
--- a/ui/pnpm-workspace.yaml
+++ b/ui/pnpm-workspace.yaml
@@ -18,8 +18,10 @@ overrides:
   "@react-aria/visually-hidden>react": "19.2.7"
   "@react-aria/interactions>react": "19.2.7"
   "lodash": "4.18.1"
-  # sharp 0.33.x/0.34.x carry GHSA-f88m-g3jw-g9cj; next pulls 0.34.5 transitively.
-  "sharp": "0.35.3"
+  # Next.js 16.3.3 requests sharp ^0.35.3; resolve 0.35.4 to fix
+  # GHSA-rgj7-g3m4-5g8c (libheif). This override controls resolution;
+  # keep it aligned with the direct dependency in package.json.
+  "sharp": "0.35.4"
   "lodash-es": "4.18.1"
   # GHSA-88fw-hqm2-52qc (CORS reflects any Origin with credentials), CVE-2026-59896
   # (hono/jsx SSR context leak) and the 4.12.34 batch: CORS ReDoS via

From 1e8454a3cb7645b5d7bed1e96e0393a44728cf96 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9sar=20Arroba?=
 <19954079+cesararroba@users.noreply.github.com>
Date: Wed, 9 Sep 2026 17:21:27 +0200
Subject: [PATCH 46/77] fix(mcp): patch the six high libuuid CVEs in the
 container image (#12780)

---
 mcp_server/Dockerfile                                     | 5 ++++-
 mcp_server/changelog.d/mcp-image-libuuid-cves.security.md | 1 +
 2 files changed, 5 insertions(+), 1 deletion(-)
 create mode 100644 mcp_server/changelog.d/mcp-image-libuuid-cves.security.md

diff --git a/mcp_server/Dockerfile b/mcp_server/Dockerfile
index a2ba13ff6c..7dad9e1303 100644
--- a/mcp_server/Dockerfile
+++ b/mcp_server/Dockerfile
@@ -32,6 +32,8 @@ LABEL maintainer="https://github.com/prowler-cloud"
 # High CVEs fixed in Alpine 3.23 but not yet in the pinned base image:
 #   sqlite-libs 3.53.4-r0  CVE-2026-11822, CVE-2026-11824  (image ships 3.51.2-r0)
 #   libcrypto3/libssl3 3.5.8-r0  CVE-2026-14456            (image ships 3.5.7-r0)
+#   libuuid 2.41.6-r1  CVE-2026-53612, -53613, -53614, -76642, -78408, -78410
+#     (image ships 2.41.4-r0; -78408 is the one that needs -r1 rather than -r0)
 # The base image pins python 3.13.14, which has not been rebuilt since those
 # packages were published, so the upgrade is taken here rather than by moving
 # the pin -- the newest published python:3.13-alpine3.23 carries the same
@@ -43,7 +45,8 @@ LABEL maintainer="https://github.com/prowler-cloud"
 RUN apk add --no-cache --upgrade \
     "sqlite-libs>=3.53.4-r0" \
     "libcrypto3>=3.5.8-r0" \
-    "libssl3>=3.5.8-r0"
+    "libssl3>=3.5.8-r0" \
+    "libuuid>=2.41.6-r1"
 
 # Create non-root user for security
 # Using specific UID/GID for consistency across environments
diff --git a/mcp_server/changelog.d/mcp-image-libuuid-cves.security.md b/mcp_server/changelog.d/mcp-image-libuuid-cves.security.md
new file mode 100644
index 0000000000..602458c777
--- /dev/null
+++ b/mcp_server/changelog.d/mcp-image-libuuid-cves.security.md
@@ -0,0 +1 @@
+`libuuid` upgraded to 2.41.6-r1 in the container image, patching CVE-2026-53612, CVE-2026-53613, CVE-2026-53614, CVE-2026-76642, CVE-2026-78408 and CVE-2026-78410

From 369f8528373918a4d91b7974fc0cff0ac7e9da84 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9sar=20Arroba?=
 <19954079+cesararroba@users.noreply.github.com>
Date: Wed, 9 Sep 2026 18:07:22 +0200
Subject: [PATCH 47/77] fix(aws): lead the partition bootstrap regions with the
 configured region (#12764)

Co-authored-by: pedrooot <pedromarting3@gmail.com>
---
 .../providers/aws/regions-and-partitions.mdx  |  18 ++
 ...-region-honours-configured-region.fixed.md |   1 +
 prowler/providers/aws/aws_provider.py         |  49 +++-
 tests/providers/aws/aws_provider_test.py      | 247 +++++++++++++++++-
 tests/providers/aws/utils.py                  |   1 +
 5 files changed, 303 insertions(+), 13 deletions(-)
 create mode 100644 prowler/changelog.d/aws-partition-bootstrap-region-honours-configured-region.fixed.md

diff --git a/docs/user-guide/providers/aws/regions-and-partitions.mdx b/docs/user-guide/providers/aws/regions-and-partitions.mdx
index 8556ccc74e..bf88aafc2f 100644
--- a/docs/user-guide/providers/aws/regions-and-partitions.mdx
+++ b/docs/user-guide/providers/aws/regions-and-partitions.mdx
@@ -21,10 +21,28 @@ When scanning the China (`aws-cn`), European Sovereign Cloud (`aws-eusc`) or Gov
 
 - Specify the regions to audit within that partition using the `-f/--region` flag.
 
+- Declare the partition with the `PROWLER_AWS_PARTITION` environment variable, set to `aws`, `aws-cn`, `aws-eusc` or `aws-us-gov`.
+
 <Note>
 Refer to: https://boto3.amazonaws.com/v1/documentation/api/latest/guide/credentials.html#configuring-credentials for more information about the AWS credential configuration.
 
 </Note>
+### Declaring the Partition
+
+`PROWLER_AWS_PARTITION` tells Prowler which partition the scan runs against, without relying on a region being configured:
+
+```bash
+export PROWLER_AWS_PARTITION="aws-us-gov"
+```
+
+It matters most where nothing else says. Resolving an identity means calling STS before anything is known about the credentials, and with no region configured Prowler would otherwise start from the commercial endpoints. Declaring the partition makes that first call go to the right place, which is the difference between a scan that starts and one that fails on an endpoint the credentials cannot use.
+
+A region configured for the session still wins when it belongs to the declared partition, so a deployment in `us-gov-west-1` is not sent to `us-gov-east-1`. A region belonging to a different partition is ignored, since a partition that has been declared explicitly is the more deliberate statement of the two.
+
+<Note>
+Set it wherever the scan runs. For deployments that scan from containers, that means the environment of the containers doing the scanning, not only the one accepting the request.
+</Note>
+
 ### Scanning Specific Regions
 
 To scan a particular AWS region with Prowler, use:
diff --git a/prowler/changelog.d/aws-partition-bootstrap-region-honours-configured-region.fixed.md b/prowler/changelog.d/aws-partition-bootstrap-region-honours-configured-region.fixed.md
new file mode 100644
index 0000000000..93a6c8d7b1
--- /dev/null
+++ b/prowler/changelog.d/aws-partition-bootstrap-region-honours-configured-region.fixed.md
@@ -0,0 +1 @@
+Bootstrap STS calls now use the session region when `PROWLER_AWS_PARTITION` is set and the region belongs to that partition, instead of always going to the partition's global STS region, which a deployment reached only through its own region's VPC endpoints cannot route to
diff --git a/prowler/providers/aws/aws_provider.py b/prowler/providers/aws/aws_provider.py
index d6b24c748c..d0ca3b98ee 100644
--- a/prowler/providers/aws/aws_provider.py
+++ b/prowler/providers/aws/aws_provider.py
@@ -576,8 +576,15 @@ class AwsProvider(Provider):
     ) -> str:
         excluded_regions = set(excluded_regions or ())
         session_region = session.region_name
+        env_partition_regions = get_env_partition_regions(session_region)
         if session_region and session_region not in excluded_regions:
-            return session_region
+            if not env_partition_regions or session_region in env_partition_regions:
+                return session_region
+        if env_partition_regions:
+            for region in env_partition_regions:
+                if region not in excluded_regions:
+                    return region
+            return env_partition_regions[0]
 
         for region in AwsProvider.get_bootstrap_region_candidates(session_region):
             if region not in excluded_regions:
@@ -673,7 +680,7 @@ class AwsProvider(Provider):
                 session = Session(**session_arguments)
                 session._session.set_default_client_config(session_config)
                 sts_region = (
-                    get_env_partition_bootstrap_region()
+                    get_env_partition_bootstrap_region(session.region_name)
                     or session.region_name
                     or AWS_STS_GLOBAL_ENDPOINT_REGION
                 )
@@ -1420,12 +1427,6 @@ class AwsProvider(Provider):
             Connection(is_connected=True, Error=None))
         """
         try:
-            if aws_region is None:
-                aws_region = (
-                    get_env_partition_bootstrap_region()
-                    or AWS_STS_GLOBAL_ENDPOINT_REGION
-                )
-
             session = AwsProvider.setup_session(
                 mfa=mfa_enabled,
                 profile=profile,
@@ -1434,6 +1435,12 @@ class AwsProvider(Provider):
                 aws_session_token=aws_session_token,
             )
 
+            if aws_region is None:
+                aws_region = (
+                    get_env_partition_bootstrap_region(session.region_name)
+                    or AWS_STS_GLOBAL_ENDPOINT_REGION
+                )
+
             if role_arn:
                 session_duration = validate_session_duration(session_duration)
                 role_session_name = validate_role_session_name(role_session_name)
@@ -1759,11 +1766,18 @@ def get_botocore_partition_regions() -> dict:
     return partition_regions
 
 
-def get_env_partition_regions() -> Optional[list]:
+def get_env_partition_regions(
+    session_region: Optional[str] = None,
+) -> Optional[list]:
     """
     Get the bootstrap region candidates for the partition set in the
     PROWLER_AWS_PARTITION environment variable.
 
+    Args:
+        session_region (Optional[str]): The region of the AWS session. It leads
+            the candidates when it belongs to the partition and is ignored
+            otherwise.
+
     Returns:
         Optional[list]: The regions of the configured partition, preferred
             bootstrap region first, or None when the environment variable is
@@ -1782,14 +1796,25 @@ def get_env_partition_regions() -> Optional[list]:
         raise AWSInvalidPartitionError(
             message=f"Invalid partition: {raw_partition} set in PROWLER_AWS_PARTITION. Valid partitions: {', '.join(sorted(partition_regions))}"
         )
+
+    # A deployment reached only through its own region's endpoints has no route
+    # to the partition's global STS region, so the session region goes first
+    if session_region in regions:
+        regions = [session_region] + [r for r in regions if r != session_region]
     return regions
 
 
-def get_env_partition_bootstrap_region() -> Optional[str]:
+def get_env_partition_bootstrap_region(
+    session_region: Optional[str] = None,
+) -> Optional[str]:
     """
     Get the STS bootstrap region for the partition set in the
     PROWLER_AWS_PARTITION environment variable.
 
+    Args:
+        session_region (Optional[str]): The region of the AWS session, preferred
+            when it belongs to the partition.
+
     Returns:
         Optional[str]: The preferred bootstrap region of the configured
             partition, or None when the environment variable is not set.
@@ -1797,7 +1822,7 @@ def get_env_partition_bootstrap_region() -> Optional[str]:
     Raises:
         AWSInvalidPartitionError: If the value is not a partition known to botocore.
     """
-    regions = get_env_partition_regions()
+    regions = get_env_partition_regions(session_region)
     return regions[0] if regions else None
 
 
@@ -1833,7 +1858,7 @@ def get_aws_region_for_sts(
             if region not in excluded_regions:
                 return region
 
-    env_partition_regions = get_env_partition_regions()
+    env_partition_regions = get_env_partition_regions(session_region)
     if env_partition_regions:
         # The configured partition constrains the whole fallback chain: prefer
         # a non-excluded region, but never leave the partition
diff --git a/tests/providers/aws/aws_provider_test.py b/tests/providers/aws/aws_provider_test.py
index 4bdb438b99..7ce61b6862 100644
--- a/tests/providers/aws/aws_provider_test.py
+++ b/tests/providers/aws/aws_provider_test.py
@@ -16,7 +16,12 @@ from moto import mock_aws
 from pytest import raises
 from tzlocal import get_localzone
 
-from prowler.providers.aws.aws_provider import AwsProvider, get_aws_region_for_sts
+from prowler.providers.aws.aws_provider import (
+    AwsProvider,
+    get_aws_region_for_sts,
+    get_env_partition_bootstrap_region,
+    get_env_partition_regions,
+)
 from prowler.providers.aws.config import (
     AWS_STS_GLOBAL_ENDPOINT_REGION,
     BOTO3_USER_AGENT_EXTRA,
@@ -56,6 +61,7 @@ from tests.providers.aws.utils import (
     AWS_REGION_EU_WEST_1,
     AWS_REGION_EUSC_DE_EAST_1,
     AWS_REGION_GOV_CLOUD_US_EAST_1,
+    AWS_REGION_GOV_CLOUD_US_WEST_1,
     AWS_REGION_ISO_GLOBAL,
     AWS_REGION_US_EAST_1,
     AWS_REGION_US_EAST_2,
@@ -2447,6 +2453,245 @@ aws:
                 == AWS_REGION_GOV_CLOUD_US_EAST_1
             )
 
+    def test_get_env_partition_regions_leads_with_session_region(self):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+            clear=False,
+        ):
+            regions = get_env_partition_regions(AWS_REGION_GOV_CLOUD_US_WEST_1)
+
+            assert regions[0] == AWS_REGION_GOV_CLOUD_US_WEST_1
+            assert set(regions) == set(get_env_partition_regions())
+
+    def test_get_env_partition_regions_ignores_session_region_outside_partition(
+        self,
+    ):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+            clear=False,
+        ):
+            regions = get_env_partition_regions(AWS_REGION_EU_WEST_1)
+
+            assert regions[0] == AWS_REGION_GOV_CLOUD_US_EAST_1
+            assert AWS_REGION_EU_WEST_1 not in regions
+
+    def test_get_env_partition_bootstrap_region_prefers_session_region(self):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+            clear=False,
+        ):
+            assert (
+                get_env_partition_bootstrap_region(AWS_REGION_GOV_CLOUD_US_WEST_1)
+                == AWS_REGION_GOV_CLOUD_US_WEST_1
+            )
+
+    def test_get_env_partition_bootstrap_region_without_session_region(self):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+            clear=False,
+        ):
+            assert (
+                get_env_partition_bootstrap_region() == AWS_REGION_GOV_CLOUD_US_EAST_1
+            )
+
+    def test_get_env_partition_bootstrap_region_without_partition(self):
+        with mock.patch.dict(os.environ, {"PROWLER_AWS_PARTITION": ""}, clear=False):
+            assert (
+                get_env_partition_bootstrap_region(AWS_REGION_GOV_CLOUD_US_WEST_1)
+                is None
+            )
+
+    def test_get_aws_region_for_sts_env_partition_prefers_session_region(self):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+            clear=False,
+        ):
+            assert (
+                get_aws_region_for_sts(AWS_REGION_GOV_CLOUD_US_WEST_1, None)
+                == AWS_REGION_GOV_CLOUD_US_WEST_1
+            )
+
+    def test_get_profile_region_env_partition_keeps_session_region_inside_partition(
+        self,
+    ):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+            clear=False,
+        ):
+            aws_session = session.Session(region_name=AWS_REGION_GOV_CLOUD_US_WEST_1)
+
+            assert (
+                AwsProvider.get_profile_region(aws_session)
+                == AWS_REGION_GOV_CLOUD_US_WEST_1
+            )
+
+    def test_get_profile_region_env_partition_ignores_session_region_outside_partition(
+        self,
+    ):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+            clear=False,
+        ):
+            aws_session = session.Session(region_name=AWS_REGION_US_EAST_1)
+
+            assert (
+                AwsProvider.get_profile_region(aws_session)
+                == AWS_REGION_GOV_CLOUD_US_EAST_1
+            )
+
+    def test_get_profile_region_env_partition_excluded_session_region_stays_in_partition(
+        self,
+    ):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+            clear=False,
+        ):
+            aws_session = session.Session(region_name=AWS_REGION_GOV_CLOUD_US_WEST_1)
+
+            assert (
+                AwsProvider.get_profile_region(
+                    aws_session, {AWS_REGION_GOV_CLOUD_US_WEST_1}
+                )
+                == AWS_REGION_GOV_CLOUD_US_EAST_1
+            )
+
+    def test_get_profile_region_env_partition_all_regions_excluded_stays_in_partition(
+        self,
+    ):
+        with mock.patch.dict(
+            os.environ,
+            {"PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION},
+            clear=False,
+        ):
+            aws_session = session.Session(region_name=AWS_REGION_GOV_CLOUD_US_WEST_1)
+            gov_cloud_regions = set(get_env_partition_regions())
+
+            assert (
+                AwsProvider.get_profile_region(aws_session, gov_cloud_regions)
+                == AWS_REGION_GOV_CLOUD_US_WEST_1
+            )
+
+    @mock_aws
+    def test_test_connection_env_partition_prefers_session_region(self):
+        with (
+            mock.patch.dict(
+                os.environ,
+                {
+                    "PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION,
+                    "AWS_DEFAULT_REGION": AWS_REGION_GOV_CLOUD_US_WEST_1,
+                },
+                clear=False,
+            ),
+            mock.patch.object(
+                AwsProvider,
+                "validate_credentials",
+                return_value=AWSCallerIdentity(
+                    user_id="test-user-id",
+                    account=AWS_ACCOUNT_NUMBER,
+                    arn=ARN(AWS_GOV_CLOUD_ACCOUNT_ARN),
+                    region=AWS_REGION_GOV_CLOUD_US_WEST_1,
+                ),
+            ) as mock_validate_credentials,
+        ):
+            connection = AwsProvider.test_connection(
+                aws_access_key_id="test-access-key",
+                aws_secret_access_key="test-secret-key",
+                raise_on_exception=False,
+            )
+
+            assert connection.is_connected
+            assert (
+                mock_validate_credentials.call_args.args[1]
+                == AWS_REGION_GOV_CLOUD_US_WEST_1
+            )
+
+    @mock_aws
+    def test_test_connection_role_env_partition_prefers_session_region(self):
+        with (
+            mock.patch.dict(
+                os.environ,
+                {
+                    "PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION,
+                    "AWS_DEFAULT_REGION": AWS_REGION_GOV_CLOUD_US_WEST_1,
+                },
+                clear=False,
+            ),
+            mock.patch.object(
+                AwsProvider,
+                "assume_role",
+                return_value=AWSCredentials(
+                    aws_access_key_id="assumed-access-key",
+                    aws_secret_access_key="assumed-secret-key",
+                    aws_session_token="assumed-session-token",
+                    expiration=datetime.now(),
+                ),
+            ) as mock_assume_role,
+            mock.patch.object(
+                AwsProvider,
+                "validate_credentials",
+                return_value=AWSCallerIdentity(
+                    user_id="test-user-id",
+                    account=AWS_ACCOUNT_NUMBER,
+                    arn=ARN(AWS_GOV_CLOUD_ACCOUNT_ARN),
+                    region=AWS_REGION_GOV_CLOUD_US_WEST_1,
+                ),
+            ),
+        ):
+            connection = AwsProvider.test_connection(
+                role_arn=f"arn:{AWS_GOV_CLOUD_PARTITION}:iam::{AWS_ACCOUNT_NUMBER}:role/test-role",
+                aws_access_key_id="test-access-key",
+                aws_secret_access_key="test-secret-key",
+                raise_on_exception=False,
+            )
+
+            assert connection.is_connected
+            assumed_role_info = mock_assume_role.call_args.args[1]
+            assert assumed_role_info.sts_region == AWS_REGION_GOV_CLOUD_US_WEST_1
+
+    @mock_aws
+    def test_setup_session_mfa_env_partition_prefers_session_region(self):
+        with (
+            mock.patch.dict(
+                os.environ,
+                {
+                    "PROWLER_AWS_PARTITION": AWS_GOV_CLOUD_PARTITION,
+                    "AWS_DEFAULT_REGION": AWS_REGION_GOV_CLOUD_US_WEST_1,
+                },
+                clear=False,
+            ),
+            mock.patch.object(
+                AwsProvider,
+                "input_role_mfa_token_and_code",
+                return_value=AWSMFAInfo(
+                    arn=f"arn:{AWS_GOV_CLOUD_PARTITION}:iam::{AWS_ACCOUNT_NUMBER}:mfa/test",
+                    totp="123456",
+                ),
+            ),
+            mock.patch.object(
+                AwsProvider,
+                "create_sts_session",
+                side_effect=AwsProvider.create_sts_session,
+            ) as mock_create_sts_session,
+        ):
+            AwsProvider.setup_session(
+                mfa=True,
+                aws_access_key_id="test-access-key",
+                aws_secret_access_key="test-secret-key",
+            )
+
+            assert (
+                mock_create_sts_session.call_args.args[1]
+                == AWS_REGION_GOV_CLOUD_US_WEST_1
+            )
+
     @mock_aws
     def test_test_connection_env_partition_mismatch(self):
         with (
diff --git a/tests/providers/aws/utils.py b/tests/providers/aws/utils.py
index 90e2a98e85..b19efd3eec 100644
--- a/tests/providers/aws/utils.py
+++ b/tests/providers/aws/utils.py
@@ -51,6 +51,7 @@ AWS_REGION_CN_NORTH_1 = "cn-north-1"
 
 # Gov Cloud Regions
 AWS_REGION_GOV_CLOUD_US_EAST_1 = "us-gov-east-1"
+AWS_REGION_GOV_CLOUD_US_WEST_1 = "us-gov-west-1"
 
 # Iso Regions
 AWS_REGION_ISO_GLOBAL = "aws-iso-global"

From 8270979ec889c5551338814da92a271b108a0be2 Mon Sep 17 00:00:00 2001
From: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com>
Date: Wed, 9 Sep 2026 23:05:09 +0200
Subject: [PATCH 48/77] fix(ui): align scan filters and actions (#12781)

---
 ui/changelog.d/scans-filter-actions.fixed.md  |   1 +
 ui/components/scans/import-findings-modal.tsx |   5 +-
 ui/components/scans/scans-filter-bar.tsx      |  54 ++++++++++--------
 ui/components/scans/scans-page-shell.test.tsx |  31 ++++++----
 ui/components/scans/scans-page-shell.tsx      |  36 ++++++------
 .../scans/evidence/scans-controls-desktop.png | Bin 0 -> 28212 bytes
 .../scans/evidence/scans-controls-mobile.png  | Bin 0 -> 24134 bytes
 .../scans/evidence/scans-controls-tablet.png  | Bin 0 -> 23298 bytes
 ui/tests/scans/scans-page.ts                  |   4 +-
 ui/tests/scans/scans.md                       |   3 +-
 10 files changed, 73 insertions(+), 61 deletions(-)
 create mode 100644 ui/changelog.d/scans-filter-actions.fixed.md
 create mode 100644 ui/tests/scans/evidence/scans-controls-desktop.png
 create mode 100644 ui/tests/scans/evidence/scans-controls-mobile.png
 create mode 100644 ui/tests/scans/evidence/scans-controls-tablet.png

diff --git a/ui/changelog.d/scans-filter-actions.fixed.md b/ui/changelog.d/scans-filter-actions.fixed.md
new file mode 100644
index 0000000000..3220d59a8e
--- /dev/null
+++ b/ui/changelog.d/scans-filter-actions.fixed.md
@@ -0,0 +1 @@
+Scans page filter widths and action button styling, with Launch Scan and Import Findings grouped beside the tabs and sized consistently with Configure Mutelist
diff --git a/ui/components/scans/import-findings-modal.tsx b/ui/components/scans/import-findings-modal.tsx
index c367829ea2..2016a50641 100644
--- a/ui/components/scans/import-findings-modal.tsx
+++ b/ui/components/scans/import-findings-modal.tsx
@@ -223,10 +223,9 @@ export function ImportFindingsModal() {
     <>
       <Button
         type="button"
-        size="lg"
-        variant="secondary"
+        variant="outline"
         onClick={() => handleOpenChange(true)}
-        className="w-full md:w-auto"
+        className="w-full sm:w-auto"
       >
         Import Findings
       </Button>
diff --git a/ui/components/scans/scans-filter-bar.tsx b/ui/components/scans/scans-filter-bar.tsx
index de4539651f..f46a29c07a 100644
--- a/ui/components/scans/scans-filter-bar.tsx
+++ b/ui/components/scans/scans-filter-bar.tsx
@@ -31,7 +31,7 @@ interface ScansFilterBarProps {
   onScanStatusChange: (value: string) => void;
 }
 
-const filterItemClass = "w-full md:w-[calc(50%-0.375rem)] xl:w-60";
+const filterItemClass = "w-full sm:max-w-[240px] sm:min-w-[180px] sm:flex-1";
 
 export function ScansFilterBar({
   providers,
@@ -67,33 +67,37 @@ export function ScansFilterBar({
       </div>
 
       {showScheduleTypeFilter && (
-        <Select value={scheduleType} onValueChange={onScheduleTypeChange}>
-          <SelectTrigger aria-label="All Types" className={filterItemClass}>
-            <SelectValue placeholder="All Types" />
-          </SelectTrigger>
-          <SelectContent>
-            {triggerFilterOptions.map((option) => (
-              <SelectItem key={option.value} value={option.value}>
-                {option.label}
-              </SelectItem>
-            ))}
-          </SelectContent>
-        </Select>
+        <div className={filterItemClass}>
+          <Select value={scheduleType} onValueChange={onScheduleTypeChange}>
+            <SelectTrigger aria-label="All Types">
+              <SelectValue placeholder="All Types" />
+            </SelectTrigger>
+            <SelectContent>
+              {triggerFilterOptions.map((option) => (
+                <SelectItem key={option.value} value={option.value}>
+                  {option.label}
+                </SelectItem>
+              ))}
+            </SelectContent>
+          </Select>
+        </div>
       )}
 
       {showStatusFilter && (
-        <Select value={scanStatus} onValueChange={onScanStatusChange}>
-          <SelectTrigger aria-label="All Statuses" className={filterItemClass}>
-            <SelectValue placeholder="All Statuses" />
-          </SelectTrigger>
-          <SelectContent>
-            {statusFilterOptions.map((option) => (
-              <SelectItem key={option.value} value={option.value}>
-                {option.label}
-              </SelectItem>
-            ))}
-          </SelectContent>
-        </Select>
+        <div className={filterItemClass}>
+          <Select value={scanStatus} onValueChange={onScanStatusChange}>
+            <SelectTrigger aria-label="All Statuses">
+              <SelectValue placeholder="All Statuses" />
+            </SelectTrigger>
+            <SelectContent>
+              {statusFilterOptions.map((option) => (
+                <SelectItem key={option.value} value={option.value}>
+                  {option.label}
+                </SelectItem>
+              ))}
+            </SelectContent>
+          </Select>
+        </div>
       )}
     </>
   );
diff --git a/ui/components/scans/scans-page-shell.test.tsx b/ui/components/scans/scans-page-shell.test.tsx
index 8d67c0d9da..6809cf087b 100644
--- a/ui/components/scans/scans-page-shell.test.tsx
+++ b/ui/components/scans/scans-page-shell.test.tsx
@@ -336,26 +336,35 @@ describe("ScansPageShell", () => {
     expect(screen.queryByRole("alert")).not.toBeInTheDocument();
   });
 
-  it("keeps launch scan with filters and mutelist with tabs", () => {
-    vi.stubEnv("UI_CLOUD_ENABLED", "false");
+  it("keeps launch scan, import findings, and mutelist with tabs", () => {
+    // Given
+    vi.stubEnv("UI_CLOUD_ENABLED", "true");
 
+    // When
     render(
-      <ScansPageShell providers={providers} hasManageScansPermission>
+      <ScansPageShell
+        providers={providers}
+        hasManageScansPermission
+        hasManageIngestionsPermission
+      >
         <div>Scans table</div>
       </ScansPageShell>,
     );
 
-    expect(
-      screen.getByRole("group", { name: /scan filters and actions/i }),
-    ).toContainElement(screen.getByRole("button", { name: /launch scan/i }));
-    expect(
-      screen.getByRole("group", { name: /scan filters and actions/i }),
-    ).not.toContainElement(
-      screen.getByRole("link", { name: /configure mutelist/i }),
+    // Then
+    const tabs = screen.getByRole("group", { name: /scan tabs/i });
+    expect(tabs).toContainElement(
+      screen.getByRole("button", { name: /launch scan/i }),
     );
-    expect(screen.getByRole("group", { name: /scan tabs/i })).toContainElement(
+    expect(tabs).toContainElement(
+      screen.getByRole("button", { name: /import findings/i }),
+    );
+    expect(tabs).toContainElement(
       screen.getByRole("link", { name: /configure mutelist/i }),
     );
+    expect(
+      screen.getByRole("group", { name: /scan filters/i }),
+    ).toContainElement(screen.getByText("Shared scan filters"));
   });
 
   it("shows the active scans count in the in progress tab", () => {
diff --git a/ui/components/scans/scans-page-shell.tsx b/ui/components/scans/scans-page-shell.tsx
index 1575c026fc..fc597c95bf 100644
--- a/ui/components/scans/scans-page-shell.tsx
+++ b/ui/components/scans/scans-page-shell.tsx
@@ -135,8 +135,8 @@ export function ScansPageShell({
       )}
       <div
         role="group"
-        aria-label="Scan filters and actions"
-        className="flex flex-wrap items-center gap-3"
+        aria-label="Scan filters"
+        className="flex flex-wrap items-center gap-4"
       >
         <ScansFilterBar
           providers={providers}
@@ -148,20 +148,6 @@ export function ScansPageShell({
           onScheduleTypeChange={filters.setScheduleType}
           onScanStatusChange={filters.setScanStatus}
         />
-
-        <Button
-          type="button"
-          size="lg"
-          onClick={() => handleLaunchOpenChange(true)}
-          disabled={launchDisabled}
-          className="w-full md:w-auto"
-          data-tour-id="view-first-scan-launch"
-        >
-          Launch Scan
-        </Button>
-        {isCloudEnvironment && hasManageIngestionsPermission && (
-          <ImportFindingsModal />
-        )}
       </div>
 
       {isCloudEnvironment && <CliImportBanner />}
@@ -174,10 +160,10 @@ export function ScansPageShell({
         <div
           role="group"
           aria-label="Scan tabs"
-          className="flex flex-col gap-3 sm:flex-row sm:items-center sm:justify-between"
+          className="flex flex-wrap items-center justify-between gap-3"
         >
           <TabsList
-            className="overflow-x-auto"
+            className="w-full overflow-x-auto sm:w-auto"
             data-tour-id="view-first-scan-tabs"
           >
             {Object.values(SCAN_JOBS_TAB).map((tab) => (
@@ -186,7 +172,19 @@ export function ScansPageShell({
               </TabsTrigger>
             ))}
           </TabsList>
-          <div className="shrink-0">
+          <div className="ml-auto flex w-full flex-wrap items-center gap-3 sm:w-auto">
+            <Button
+              type="button"
+              onClick={() => handleLaunchOpenChange(true)}
+              disabled={launchDisabled}
+              className="w-full sm:w-auto"
+              data-tour-id="view-first-scan-launch"
+            >
+              Launch Scan
+            </Button>
+            {isCloudEnvironment && hasManageIngestionsPermission && (
+              <ImportFindingsModal />
+            )}
             <MutedFindingsConfigButton />
           </div>
         </div>
diff --git a/ui/tests/scans/evidence/scans-controls-desktop.png b/ui/tests/scans/evidence/scans-controls-desktop.png
new file mode 100644
index 0000000000000000000000000000000000000000..d7c7733db37014a5ff2cc7d71882454ccad40e04
GIT binary patch
literal 28212
zcmeIacUV)~)-N1IP!Uvw(2>0XDWOO)Q~^r@(hVe`1yHJlUR4lK+#&=CQW82yPk|u4
zs30P}NeNwguS)M+_VMg}%6;GOyZ1itecpS{<KhqIT3K_<F~=O^H^*3Gtaa3PGzz$=
zsivU@IB^01IC1<3I2r`p2GE_NrK3GXM@LI{`ZV1c`iu1RXV22JoWH<uk&T6&osET+
zm6PWRFDDm2H!JHeV!!YU3W<P3IC#Y+#f2rW2#W~+PUOVt)2Hdr&@<E1GYfOFati-%
zA4eYnOlM9|Xy4GB-~*gwIzhv9;^;Gg`<Tg-G$(%N_m6|-nAOuK&;0(Y&PBipnv*B!
z=ugv~Iz>xE`}?d;(ww4YqPxWME4-5#$SS3eh>FH_o#wj<yYChuea+)peg_+WYKDyL
zEq8(2mYxM?u6zQ^1r}C+KPJa{JkDQ^KZg22j*j;DH)*D0d7V5(cRU{L@8cXF$3ro}
z^gEbY_##sCe?4_cs`?vH`sV#-v~H1|V=_kr00x?4=9y@i0IGnUyMLqkuhcrZ!+gV>
z?t;GB{F9JP-0)Zb&zmQ1ojZ^v+ou%4vZzinn;2Ta)%AhgEdLI*1VmB$fG`W7sta8b
zw+H2PLUyS>cyssU5kQADV7J6#Uu>#<koN4x|LgrL;a$DYQhFl>;`k0S9u`^@E5A4c
zI5(+t;t{*D1{ZNvXu#0dYmd2)_RPQA%>Q}ib`12)=>p8v(bl1x5yP$i-J2}G0Io({
zqaD4sA>f?dkYaDP)Vrv6kL8zt?)k5_=KsI^Pw6N>;y8HBLyWvSpzaIaGw8ef6i^BI
z!uITWcSJ=BpI_#~Qj2`$r*{MY?WX?E=8n6zF>1Fl>78|_%ARMjcS-O5Ex=Ep_yZ{Z
z19(4qIJUK$Qu}Z|^F)B_-htluyN$b2)yrqB3CZ&JtTOQG{OomEpeaN()A?sOl~<tE
z0I^m7nk#kmvCFFkNx0XAtm;=8KQ`2Adyy|=Li4`1oW4%ih3EKHP-oDo*d@p57P8&=
zB$&UorDJN8`nZ>SIpCR}*6eOWG?KPr>J@U~#WW6g*Fa@NEDWu@Y~_)GCJE)#_6EIC
z_$X`Ib9;&>D{GFs2Qz2CRH(tQ;o9}#8()4OXl5*kd+2aoiX?qoL?j~}n=Z8cUBjrn
zsMU`pxRAm=`Wd;~9Q48bqj2@(C<SE$UlPP<fiLyYiWdRo#xXjEg{<;RT7t$2wL5|m
zW_L1^)hB5eggdBb)lIb=G#}46Rj=oHo;OPOScC0G0g+?vZFFzW>FN%bC4_CKP1Gtm
zzdAgfa-lTHMTO$AIu*5*V8#ND5!LyGjkHm#2Sa5htf;1m!B{v1Wnj@j|IxEKAbmeB
zr_m>LeyT}bT}$9@cfgV~sa_zM6t-t_*tDSMmeFG*ad%iW_sbW<W@V6~dcM7RBiALt
z>-@3AP}6wA(vt=P?Hvh;ekuRLPFd25b@>+qg#|7fQf8zexr^73jZaW9#;{tCjXSZ@
zRK%V{LHgpZfOXHFD(tM3)xucDk%)owy#)F<Cgug+8<vg|9|j~?r(476iapyycwee;
zG{oZW{iz%>D@flLk+~w2qP(m)qey<U!1Va{O_+F`%8h$8D(93x`9gI%LB^~jy3+;5
z8~m^)LU0POCvm7R7GQ09cnmSyxd(UOTwOW>1Z3?a4+(bxSC@GMi2H{Aq`Pce7pl4s
zMXL}r+?Pj#G(#qW=oB@q-KAckEhz{T)5Td1gV|4cLaXgUi_)ljMC^*FNWbwpDQov{
zLkzFr^(OhVgo=Zqj~*YL6z)e}vi@2!h}^B~zT&v?nqU9=Q0rxLM#ChxwwZ0V?#l3-
z5a>Nqiczg|nYq0&f>vf}wV@|{cv?<Tjg;ooV)h74lSpIp!CD12fOd{(eL%q{4_<rS
zZpf%Ka#EBhkmApNzqNhkHfOqkbY#4y{JgaP3JWeYLA$r(PN?D-mI3OLQ|3TjJo$<(
zP9};fSCIk57JzuCr8Z!&#=AWYeJOl0bbJ)hD~m|Wscww%r2h@`f-s)D(OyL*McK*T
zL%f<>H>NOhs$gEC6vCN%e-sTUnp|24DI38^TsJ70Z6AI7ZSRro+Wd@kLPWXl0hgT6
zRnbfdM|POjKDD)N!_Uk=FPGe(Lx0ict2nhMzPID6@caW(f6x;!lcHSdWk-`q=<SPt
zuIld%I=}gL*8)T)xCgi1C3*?s@D}c27zZ=Z&u(A<*j3w=={+D;K(+V==Z1Q;R5H*C
z2qxz7imrqNW&lHIz{p$`u!_V&dr-BqK7tvc(gSD@YF0K>F)LKfKVjsJ)$^f?jj-#k
zAL}*5uxe6a+K47{ARiA6$d4T{d1yR&5Tx}ADD`#9MoIKnTQRIT*Ru#r>;h65$Y${_
z_WUEpY%%Fu+6g6t=n<oV-*S@+PNCHk;?kR|Noy2^p(DV_-I$Jz2;rP_Ud`;ez2{m*
zL2t7BDvde2eTV91?oi=+#-VwPH$0v?mgc-{Qqs}sRLBK(b`9D_a?Foq`;J1b-Xhv-
z7!=A6X071XLHY(7>O5+CU&kZ!J?!ImMVRbRQq{q^8!?PNAD+Sj*96^tvbNyC`909v
z`*kWLkOGLapNn}??cQfZEi80Z8&wgZbv?Y{Tn{XrbO~F6?}=V(8+<-zKFgi2HZz^R
zAqdK?Nl9e9!J3%#!A*|qJG36-{gq??f(ow-!>}J}W~y0eMYclNK?0fZf=8e!42#Ct
z)zy<q6_~gQ!DU%huYpg83DSIDX)#|tnp!e24Kac_MV?C;e%g5<+___y!{9BJBneKc
zA#FAN9{!g3SQWz5alK$9lC_=>Zj$B)aj_0-v-$w9mD2XQTJHA|{iY;FFfZRkzQ+{Y
zh;MQ2{HnSB@^>iX-Yws0;I%6+NJ~3CNH$fzCIY+WKoijcAz&gEBx|{z$CpuZxRbw0
zo^Z2>?7!(!>h{79JEwIMBNzb|cohzu-oQ!rV(vXEpPX8z-llbGYj;aePdQKTgR!gU
zj?EH@pVDSy>7o5I)c7~hL>jBoUDd|;mKZ`M1(o6HSpa2JKkNeKxZlALMvC(mDMec+
zTB@Cl@0H(vL@B*}(?V>WFn75&(^tUpPV6_VWtO-zI=y&}FLiz?ifuueA5GcRN}`oX
z&Mz?`8S|k(NNu>e^H~wSp0LonnxfpDcbqb_h-Lj0c=QG+<QUmMgy9TL_z?!QwaWDg
zJ$mMjs0%#Du)fRzwCbEoVfE+Uw&SyEqc!>m1o$@rf$6Wao5KrUVOuSPtYX9AaSg&f
zKY>W~*gPcI1_zb_LZ{X5#rFafW@Q&r(ib+Wgx<WX#H|^$T8MuL(c{X1`U1HUv5;0|
zd0#OJQ$~hw*sOa*Z*dcf`{td1n*;G%SLt>KjQP=Em9Adai9lb!kM^TQDMEShjp**E
z0SPGtykYjui}iMgDPObr>0(lBIcxyO9Ord;qA_8ygh+AgcXlcHM9}~xXl{hWk)P-L
zvkRVU&$|o!&mdkEz3RRNwGWyzwkxZ4N;rR>Vq#Y!G|~E;Dv9!o-*^W9$5lL$;!`*z
zhO^i4%JjR|^f`ia5y(xQhQqswt26+PZ^p~a10d%J{f3g=hv3L|A}1CBfoxNXrl&uD
zq~ROc+I6XQnSXI2z-8}1ZoG8k*3*Ba{^RUVe^CEvRhi#m_II;g0+(SL`W=ES#{YhJ
zD&&`<>MKtqtGLm2mH{ByeZ)L<2dw+zUh|X0CQefyl*n8T5b3Z19!P2@MmqBpXn(yT
zlT0EKIro`U<Q6`C<l*m3n*Zwg*67z#YAs9*SgLWwfz6cbimnIH->K)ti-}IrT-L<!
zz#2VE5;469(how5f7esKHYY}o@BIKY4HQK%#{v8Hbaep>o^en5a(2#%*Uf;n(ki=$
zTrPr}C=p~a33cU)h`uz9Ko1Z6!|U1Mf==aHrk4@=77ojXX!M@xFA=L^qAbmP&3p>X
z&k^W!na90AU2FMZnyT(8f33Syet3Mf8Mn8Bsr$Pg<px3z0^ZeB2dOCUi_6gqjW#X_
z>J?a*%V;7gDmgxuTrgOY)?CL4IVr`(#RYMY_Ag`WP4;yGfL-Zqu~i>aMbsQ<(e-1T
z3VtISZ<0;r-@eRf-x+tg4@X+I8w<2b%GEWSdoFDHq)E{;y-blZsCQGHMaO|^WtBj~
zG#k=_!M4?}UAsZIVpjpXJsT>#6xm%jup5dK$iGo#zvy7y2HzGG*^p}v+l<+^vaP(g
zIR)I57c)?346L9xmU<FgIW(QA#CAY({nWV<&F0Wj6lvxR1nXslyzR=#LyX1_Tf3B<
z-^2I%`fE>NO{pU*(WSwn3q)gJmcr#7u4=eCf8hY}xeR+f7`#wFlwoX&XGKb{A=G{H
z>jpDB@mXhyNrtAd=R%H&GUIrNwPsyf7FzIwlQuK0%9C<KDr#X~l)~HyGgRu)u!(T<
z7<xZXvO3X!AZ@m|#Sq&XG~*J#AWlUiMRlw@yL4-<3bUW+TfT0@6wAPx+urZbu>Yx~
zCn_hG4NR8tj}{f&Y7{XSOt2LKZSg7Ry*)r=1oH)F&Pw(NHyFv{?qqD)Illr%x@z_L
z&Q7_(BY^3_vc+6@t0Cfl-JfwX4<RifbKYXteDMN-U8iv0KJB{^lS1|hgWnCwhLco9
z;B)a+4`F+!IoIs0w+Q3B?q2jml`M@i??xHV=r$ixR))hj-6tb?=K!AJnh(idoz?e(
zMht<Fx5%#oxEwP_N1Q?nVyD!El`Z@ZrO3ox<s73jhLnZvV74X_N^7sLcV!e%9L(1d
z&S!Gry4HqPOA7Kdxt%s^mW7jIrCf<r3Cx~>+xr{6pbE8|x8>ZM^Xir%f@fRXjE7c}
zug8^4i90?<X!zxon-R%Nj)Ce8Z*vU9LdAk7br}()SFJNBgu?6bU(O!^3~)Q*w{e>$
zrnH`JeN#?ND@I#<>Ba~HJyDKJ^D~yV`6?1H+a@kl)R*BX5Mg#Hf3hZ5uc%S96P{GG
zY-?-FZcF~=qr~IzT^>L)+mu+?IOjO$kwMO{IcdFX+LLUIPJxGyJ_2WJTKife$>k|Q
zXR+SJAY=U7ZXd0OG||_@i^YRDg(vbfcr--I&UAb$HzDL(E*=4<1?55a1IJxo)9uYg
z7En#2S!ayNteN?y;}~ygiYCE+68dm84L6JRU;>htsu5nq)IW9QFO3oRha$NTwXS<}
zmyIPsPv@$eU9!{Bd#R*=Ly$sVmNHr}T>FKNiZ4ghqi8Gp>7L(9->|pmIu2lR54Wza
z*H4p4PwAk4c)ceN{{T?HpI-0Z1<$g15UMvBX{7%6L-VDZ_JNw)_x<I&+ddz{owmtT
z@+vxsz8b%y5Phv=z09D?2$a)1?@+9iVjwW2WF1$bX{U@Z&<Ae|skrpMc&ezLsYI=q
zyZ83C3mKDUB<dWg*&|URtC=_r+8@k4cdkCe&_rB;mo_N57Ga?NAfy1^Z91OpW8Z0P
z2+s2Xm7YS9grr6DHxm<2^vp@`<QuQDnufKZW1xP-vf*DGaAy2SBNW!xi$5O{b!vJ>
zZ27U?W$i(Ce93iEMrH31rJK50a+8132q}Vx;vw!rbR?>p?HUD?*x+{YbO5nwAD`N^
zCoUdXA;0KeGW9UWHv*PJB4*=Wg?M@7%NV7w2^ZQhQZ!~=G;nZF@4nUhJ=p`+xH*vS
zz(W}s83q}|wlWX4csmhrV%<j9cyhhOv%C}0H}*{0Pkcd7tXPkv{_Q$vSEjUbz9?d-
zz2;QCl1bvbF1ouVJJFtV>aJd9CCPzU;rL!sUA-(Ff5-85z>^d{{ov{O8d{q?5Yb(K
zj&VkaKq=Ak5XZ^x?Qs{aN?%{M4y&f9kB8Tq5@C(lLRFE~${G#JX8I>ll=O7su{%+n
z<n+v*!{C}rgxwPz2vlvHxJ+G<e?;>EZX=%Q?A5Q+q-iV`HF*SJEBG89zz``e4gDyl
z8OyH^F`Th_SuDk0j&i&NpF+awqw)16D^X%^vQwe{ucI;~rCNPGT%FHd+VdKZ<rX-x
zu4dL_V4N4HXX@3YXir>l_vd;d8}wl%uAuTvp<9>%n3GzET729)OhWD&RP|HJc^^e;
zeXXP{7=o|8)^JF+wcjBJR;1y!ON78>Ygbjywzw%JeWJ{n?7j<w;J{ZMOy&eoC_+!V
zNlFxqc~$DhA4b8otUCp!%-LaUVz^}pZ#D=EY1(tdZ!>n%q+*!l<`{V_=r_PXK`*Fm
z;c4mMFJBy4{By<m{i-&qhNli=_o-fY0S%=GhY8<JcT;az4E`DN11yGAj!|TrasYqx
zXUI=SosFkZ(amR8<jO7Yh)Zf%FkG$YjO$Bj3abM86#MHKq#8+&2uTOwhhyk{9B2{o
z2Rh!_9`n`-FCC-gG_+?(B(z%9shQT@Z*NcES<m(<H4|e!<Fw%h*P?am)G(>-scSSy
zthGq+N;Uic+!(JtJ?&98VjmDB>o9%68D?P>SSynlEBYogimf4ZsSRzAA25))X==8#
zBZF6PF$}2GAO0nel4*^Mo%Ee_p@nf{+tFDJEmqv!y?MOuiS+;J9{Tw|+3Ze#>DR-{
z8YOw>q*oe^IkhcmAoP@_slB?vO+k${8Vm*ed`PflE2KA<5F9H)+_kRgUnoEe8VotD
zezoxMyPaCpqXQP}C=X3iN{_ls4@Gsis(XMYT0`ppSlB=R)A%(GWfgxF``+h15#+^k
zxtPaOBMGd+y*Q0Pk_0agfuBfzdCG+}nKI;YW!<ypWDE?aW@fmQ9+vJ6Rdw;kQ%C>~
z)}!NWiN9z7T=?AHAF)5++}_KP`2gSuDf-XY|Hi-vX2d|Q@qM1@Einz+th1tHFSaKP
zl$dv5rQ><Xyhf6zD4pr#^xe+E&M`fmd!#}OBBguTPdmzWDbjXMByj_wbEkJSai_|h
z6)<->dIh<V8CcC&Ndbl2%dOB5HLB?A2YJMj*PM%F-v__1*0L<9y@|*F_EzeZX>ODV
z-&mP~)S=7CVMaHrd;}T{^I9<X2m&ZA>y5bUr<UM5N6PSBE=`&P!K21z+>6-}VWWtO
z7`hoj`u9sv#7vKIr;V=efNeuvZd<$Fn~@P^Z8*>isDlyu9M<L;IZmlHFe#;K8zALV
z<en<EY3o>F9iQUIa3v4EMs94JMNuNv#rmn-{Jd=Bg<`jAglo-!jfs0?y{uN<VD9eM
z^cpQw8k_8RwCM}bhfWYAq8Nc=a3_0_1hXX+yDZwDUPuSIw+m$!X0}CA>KV>P&AFI7
zwjufHt3Dg;NfL=z3NfKf9|sQ#1Ks3i(Syjb*M?wHrRlr_TG-w)JO1mnFYU<LHA!q%
z1fru9%;e_@-xDUb2fDicsR}<D|F?F)e;Vd5rza1q%p8|>?Uc<!SD-y99hx*M$zuu3
zR)o+ORt9t=C2&LXqSyTX(}q(%eiF^9&I!-;GW+e8x?InmxSXO@&_0+o+BN5GyyrP|
z@`ieL=VIaJT-mi<Gra#-IlybCx%GEq2NlkYDls-Gr8*x4{)LFpNIyq7o;SDsaGAUe
z>8a|Vr%_28OJYvX4h^)5It_ZK&~z*q^!}^k=W6~H{X>auJ|EbILvvNrqUrpUYh(rM
zVQlnuS&VRRhY01q1?tX;*Jsv$$c65&a=Ua=`G;Jp|0=grPs9HzT>Bq#JMjzuUxmy0
zL-<ec{0kAGv!NsPaldc%Q8pY3$qh(jq4R^*C<>|Tv7M?HJdg19z$y0~hoS6%bGrv#
zh2;u~8$MS*u$crvg&B5zgB*3RX%fINZBD{sFQ0FIFL{;bmw#n_`adxbh9*YDTZPB*
z>ppqq%qB+w$gyNXgFJPy$r5L=+T5hY8IW)Ov70IhVB6STuyglNm|wT>ktjOE+~ru`
zV(3fYfuKY=W5KX~3S`SF&v26N#=o*c{h!zeM>Hq-p8FbjcEiG5u=p_eF2@EN!)y}I
zbrdsqtOBCH4ZdY{92njMTwU1cX`7t(pw3pVo7o?*ypfq(=E#>-3@$s~=h5kfsF3A)
z^SlOzr~g(c_rIW(GQwcw$Ej(Dj`_+-9fyO9Z)D~rI64#+AC(CzNV<~?6N$_9$h?M+
z|IzLOIFaI9)HB4sBXYk^P~tpp#nBPEC7MWx-IoIE$iT<6Eu*A(r9aa43Q~AP1A@C&
zusSG3<Pm@=dql4JYnO6n@)eFx(QK&rGSA#Ye!WTsu<M-ZzFNu?_btzMd--TP`nzWC
z=&{by?J$+?Noq}|%Xdz{@4xrV7>6Z_-1KTBztkKVzqU6KWq2M}_1S)_{^~>R&8QGH
z*UbNDQ0@<3Wd?MAj`>rzKXvG*t^5F@pP29yZ-4G9KljhScTRp{!arbw-H;QwWK&v`
z;2N^<+{S8<AL!RGP0CVb(53+zTx$cWF+x7?e*{Rs0h}nAqW>nxA^v^0s9VD1QD5RP
zX_T^44nz3cW;m6@4sG8Z0fu#s0P)H1cpDA34^ZU82S)(aw6`=HVID(amZFKr^(lfN
zlA}KjUnM4MM1S6=&w`;9g0SkMt=4vL(bl~LnOFlTL%F7Wqy-gL%x#OM5Z7NH`=+W0
zQfOe>#4^n{W-6?^Q&gXn{6MC-^f${=UcA6bORMoai2(osuj{Shzj;dYOG4X_6!xpq
z6W^=v)cu~!x)PuKh>I&b=*}RYos>CMdvYu5`Yc3Ha{uY+GRsJNE^e_WkxFqn+K7N(
zuAlUYSB!^4iP`Zi<~9+SA^(g&=%3E2+mc#w;GWKBLJ?xqy~gr}P9HO8tp!CeFeaPW
z_n)h5!G^)etLBy*R!{Vhn)On1fn-#y#D@pQA>ob8msT(6*KKF~<$7DMAbm>2<kJ)L
zMk6ekMx$wEg@MUxgH@V_|IicvZ@756?AORN+uC!8RRvcEgCsb_^7=_5`{{TDMtEqB
z35XyhHY9FGFwiFJU1fB`jtJ%IpeC~;LR%Lk&a5OLU<Q+DwZX{ajFN-;!KCU=Dv`Zv
zKl%ue@+EyId*A;JU{&!cfNl`SJMB<)FgdbAByu^!1L7!0fUT&2>1;~<D&p|_Zn@!p
z$6)~Ueu@i$TvVahXXRifit4lRb!#=Z@$eUE4gdU6oJfgobP2>)3=d>|q!<lFR)8Vy
z<AgGg1trrOZnsYX>EJ_E_MFv{64Km5KN`+~#QOA9cfqTW7AP`pue|rdV=`Ox7KT&f
z5n5EslHh=P<xAq8M3X>PFG~~C<@^bhym#ET#-+TDer5O14ZS=9T!Zar904}UN;BUS
z@!P+NAIkI14K)=Y%5*eMr%}$tjs}-kZ20;GrD_;}1(uTI)zwAas#|BY4QLNBnlbc6
z9;m1))=x#Vm9tbJuu2T5Gw?x&1uDb7zf=ewj3?CzZLJQ(-E{EE?bQ{7LQ}^glM1T9
zm!rNtn!w86&o$tEJWUyN$|(9?_cT%<|JHP;qWUx>&oHeV!KMK706QE3U^?h3s_7hv
z&pOgh@iHA7-x1)qL_TFNUzpeYcI;v$s^9pEfy0%tNi=vFQOkXt?oRCcwa3NelZuLK
zld8fIU}g-<^QgT&&N1ekUskUpzI=0;$Hwy<x3u>9=%YKhc`6)^sJRda95<>8c|g|T
zEC%&aoju;Vk0%!_%=9D<6mz!fe4-EwO0v>4^o=hW&PXV<L*UR|Q0kt6dk&F|A*H3R
z!XaU5cizt>wAkhm()>kUsaOUu9c-Z!j=>}#fN^|`k;jG6*i3iFl*_^T4n9qLXj<i(
zwv_uARup^r2oQK5wda>F{@!)q6!L*n3}nnAF1a8Fz3A3fgOs;g0^=%>InI{djj@wH
zAgi`;xS=0{dDg$nj7&5;_l6h|%FHTzza<P&YkHhULV3lL=bfnXtt$L$DTe~aB>pq_
zom734r(ol$h^|T{U-|REhTvWm?c)dD+n@!|(k2-}&977xGROd9U$k0N+*>|}tUyq1
z)lE4yNbdc*vc08_HP^h{xK7L3HbieI5K#q1>?S)sl<R~;3SA?+WUb>mWTBSi4j@y*
zWDh15@1I3Qs9ifw1AG=RrtrDqo1N1Ndj{voSta5!tj4kHR+&#8frE2B-Xh$=KrfOn
z#xWx!D5xUR$ey@vZ>7QXYg{K(;yfHhMRA9a8Q4sGTgW8{J!$=t5wNub&4>`=b;1re
z1)>e+<2z1Q2fc@<=23`waaVHUIzKRjfy1A-_<S$cF5oLiN@91mcRu~<)L|~)Ua}YM
z^d{M-oJ2TQZv>FV**HTjpXahdpVcCjtdEwwUo<ekj9X_ctw<6U3QLru-!L})RE!C)
zb**hE%VOum{jLS!PLP#|JfAz077h`T&|S2&VC7dKYi)dqU5Olcsn%;oE)L;GN?}I$
z=~R&7NGVJQonpOAOw7}!v=HP2do+mafkPSn0b`Cyh@>w9=#i9{LN#|}wkSQRbVb1P
za>Tk3qBV$P+6v)C;sf__HZPzpm?u2jkSgXJjVu0DrZc&EI%Npi4^*O3XKtIJSS1xP
zV=<qlfKi!8*L;^!4L+FcrOy$R+OKhVlbed;K>K|vnID)ZuoIPlVPQl*OJXR_4NfJW
zcjug4V(FGPgxWcVY1YFsbd$B2IAdo(X%mTy{wC#Nx@WDklND0k3yg-st)h~EY%B)S
znD4HsPbitBNHESLC8)@K@0*3oXZ7ySbwKr3eo?lTZXpNCasrKHh}X_){w^bTq;xL#
zhB`=rGk?5n9&R{2U$dA})Fb?0mb4^2-bB=A?bZsHRwU*+Q=D|P1NOtX^vI(mOOp^*
z#Tfo9sP}cgv~f)3fnE7BuB-9x4k^=jo+%gCR52V@Z5rNuYL{!;v3~s3{^3OPb*_}2
zypa`N#>NsYFx2C|wW|<~DYt~<g`}owg?>^$uodD^DNI}vaT0YQHfz#JM?|mNE6O}K
zBzH7n%0Q&OUPe^ylit0YX8L9`89ZCYD}=>{kW9>Q6;Kq|W;kP6-Zv5cxwf5<W-EvZ
zU=AN6IU#<l)$ilat%CP_<uh!S`N|Rx_fTRjCbpF+>EB=6@;$RUvfl{XzIz1NjkTnX
zP;k*?Jp;4ruir6DlPi0;`|=bI?TGG}6|f9(ih}!6p2%73T5TG{?spb307|ouOFTF(
zgI>;u!r+MC{J+`Rc#6RA;0VPBsp_HuaUc>{6`#1x7yCqu7iF@izKkpOl0kH<_{8xD
z<kcv&&6pW6aW9nXAgD;*ICQ+ANO1kPmNJ-Z1bc2y2C=Oke%^h0|2srNnskcP95Oew
z_!<A8kFsSMrmf?BeVFOJptr3^QbPO7QW`sAlWcca<=KVh_K>;w>AcgqjDzulaUt6~
z;q1#eC`?LfZO52u<m90T(^6+}PEO8}k8iSTDNrWuQ#F7~E$B6hNFaJM(x7h%=m1#{
zi~&1z#zQjV4U3I(Jl+~A9o)&)aiZpA#vcK=TSEl$-YY$KS0*QZMoms5%)Q`S#Ch#h
zYb?65VzHc}UaX1_#`fki$FZ3tQ^a4neNwvpvftxEOTm37yr!0oI<wTZrqUZZodVUl
z+MjE|Yr7*?pIM+wVOjbp5p<g8dQl4j?(AM{_*@<2pcg^oAfAgoGbrB5LDO@mt9t`g
zW=UMvOWkc6^Z?l;6{0%rVGUcmvE@8iZ`JGY32>JTv;33$F*}|Zba3n|L(ga=rnsmS
zGss1OX;P4F8+UM+NvN~v5kOZID}XX|?s}Ac+no7U=e1>~z8P1PpuAN=++ngy3mG$Z
z`%;&f$5+mxhRINdb{G(0cp+JI<H|(56V0v8<pEh|TU)U`W$wq{wmrB)@zW}n*KK%t
zrvviV?UwR*Up=9WpbM|)Jh4}2(0LOm0$kIPaK!q^nHIXi(U$K=7;Q^&EYZ=$p385l
z`I70Ha-IDxm4MI|!!%GSQvR?GVu-#&HZ$ZwP>Us;t&%bA#$|l>D%Y!-4L|07K+0C;
z3TcqCd`eF%rW){|8e%<u4eb@DLOw&R_6|5pbzp`q%>clo<fs1)KHT38iN}iw60!1#
zOX^Bggg08Kp7;L6i?TjV1PA-<%=9FpaeSg!Q}EZTr+R`b+Yi;=o_H4{SYBtG7G65e
z`uOUhZBfAR?PJfLGooa&YA3$q2=MsA;RCcf*AbvmZ?Aop%G;_su>m+8(G38|4rTX7
z%W*I-YAH=y?hS0Tp${JrvNFtI!+p{DT`1zUvT^Oc;YN7{qhYK!JtpNEO8I44t><SQ
zurB*?g@d8uxLe3mX1B})vINgT@|_7SIV4JH?|M{;?1p+$+<bG->`ggN<BEc@k^V{S
zwL&kOnySJ^_Ce}pZ^eR*ii<jRc;}q5hntW2!^FNCyRIy*s{P&(oAbf>xBr=HMA!$|
zj1~E+Y3ivVd)xWumjQN>@|~^JnDdA20#+{Y$9+Es{3+6ZQpKN2^V2MTBF+DV&_B)M
zr&;_oi+=;Ncqb<awqdM*?lI{$CRa}9dn8sx@)3z_h?o*_vFM%wol6P^vg(z(mkdkO
zlLGmK8ku?RHQlPrWSDehu)I|rBtEye*MP@g|IYvX(ezOx6(gASJ(6$y-A_Iqh%(E>
zIn0U4zq|PVRFei&5tQ}vY3I1n_9N5lk4Qc(4`r$(rEbXT-k#zGM9KDw#^-1-v2T_)
zQMKJ#q4f!)Mj<KHp{9U~zfa>t)J-VN0`^f~tw1AwhGZEW+>=JeA-wqbj$c}}mC!Sb
z?5K0NDf>Jj<<r<<qH9}CiX5*qI~xt~uCxPzBy1gqgXK6!$~Lt=AWSPrL7_UDDMx@H
zsZ;q!fM-{yb|Ws;AD*g;nTHqyd@*vZqWmG)C*g1hqwZQ1xg|K6Dmyrmj>^j)uqiha
zi>lV32iu}HmA~<q<JG`T(^f|S{a@*lkC{y2$*Ry2==C-zcY52_WG_@J>4<em>>0x<
zc2LY+?y&=sF_CGN1@xN2)&x@05=J;3UEb~+a|+GpK_abP7Q);SjO2*V!OMwqQ)i&i
z>bqyEaSm@t6+?64o7;GFQ@QaeDZVt(;VB5(vZ9!jt-z=)Z2;FgwS?4S#)YHzxI+Wq
zFh#Z>0j?edL$p-)t2Tdy++f8!(6+7in>l58=GO+QKs}7=NNarMO(EeQQzDQI31N(g
zk^)W5ZGmiJn5(C|ApJ9866?_XWQeC)(`&KVERJ~$Aq8?*>Z!6?y#~M0=h|gBTId7(
z!Y|1scr<6@96H@-{#T!RezpUNV~#h#K*%-tMkFLRi{LTH{9T(nr$%WmG3B_wG+LM>
zGG~vr4Kb!QK+T$yk}JSX)I$P+PV&E8Q_pwJT6A1dft%{@MC-+sY?Yhp=`j}~9oc9-
zlG?&*fs#57feTw3pVz^!jRMxMt_Y2YDW6XhO6N|3XseDz1dtLU>d=W6G8?Lf-sIx@
z@XwGVfV%P_qcz*{vz5oNO4aAawB4%1aF>LPUi2A>^`3IH(cp{QJOXzq3hfS$sVZu2
zQZXF6q2G5%zRk%;0J?&6gn;*i5#H*Yz<J&kkX+kubkd2fOCH0ht!?mYv)cz#YTJJ!
z@5xU$<(*oh0|k2Bz8_g&ot^Cv5fI0>29{)Rs_(W)2|lK(^|#yq<R<A%k3^hbWDmJu
zP=c-Ejwr05S8d7yX4p5wcW<Qiu9c|H3L$SiJ}aPw_-CK+(Vm-L7q)O*GdH172pk1_
zjJweBs<36aS9z*E;E#F!?XFui90~~oGw;j27QT3^^>nC+`iX50ywKBskR7Sb)*os<
z1=S16i(5TJ7?D;Tghid$PU-OBc1XF??jXxvp=uZ`KxTz`GVkC{no!343&>2?3&UCG
zkVIGim|d6dA<AS2YJy$Cmov}Tq`S5a#l+B!Wj{cD#u+5FAt3v2e|fVv6rg(iIKEze
zsmk@GUHJUU(Eao6yws8MZ9B7Ea8HQHL|IqG>28C1#3fML43ys^c1ddqT0acE|Kq;0
zPdv%0<SLJEC-#0*x*lNYKXJzU(IMray+$xTkV3*!vXYaHMdsN1K>`j4Q)bkprD#ll
zXky6Dv+#eozj-mbVPO-QYauktS_o0A@ESAvY^i|Y!jv1N&<a&rU)DDoCq>RV85wJx
z0|~n8aCJmfK*C7n6!V89q4$gqKSr&)xcL3RY%k?SW^%RXdxLi6l8CO_Q*UedBU-h4
zo2DG?bNxt|6ap~zc47U-!)3`IGmfu}^!4-7;jwlA>RiVLAwg-=A4miu8JP+Fg=Xs?
zDL=hH4HEG~=JWZifj}gy@1LuWa}Q8$AXp^+rs-Dyak1G55jLKDB_84|FQk}P&QRpY
z*!?;^YIsXRwc{@4<zc|s5n$E+7sKTrtiJlSe`5FDmW;S}XxOm2I{FPc*Vna8^O2dL
zvuL1IAi7p3TjT@Ru;bf|B1+I2w}+Mne8E8gCj#P!7}g4r;ybwGyI4?cwA~q;$bX=y
zdafm=QE3|9s3eBm0YxSe<}wUr<;S7ZZN5~_A-`D4Tamv`|E~*f7wvtHqJzQ*?m)$P
zOu(04`O{<3YYL>;^!Unk#I2kQLqAw${~<e*$u?ax_vF!CQ64@jTv|x`_?1}BhQS~S
zk3>RGR#6Xm>DIZW<cb<k{8#U1_6vLt+}msMi%hNR#cpVlgt+@v)glJ&f1v0OQ2i$r
zG#y+;ueiM(a)HC8bsS5Nv#j2v`>gJxv03tYlTYDef6>&xYM^^3cXCB*l*iO5PkqJq
zQ*&BZkRtK@2qsvW6^25e+-`5G$51R&PkY@3Z;yIq?RdOdxKqvqhqRF@KVJVwN}5gf
z1ky|<DXas2V+$(atPRAXM+sFdaPiz75#O?oPAcrKiiuA&!N@!u&EHAKKQ&{qUJUbB
zX}OX4!yMdx==RK5l=~ZU39?b$EgK(Cx-K(@BlVWDK(%3yi$Nz|ZS&*E)pF7hZ5Wdq
zbT{@2?&`4R5x~bk)Bf)77_Ruiq?)$a!6rSEgijD8q|n1ZM}jHFu(HuA)%G|q?l(BJ
zod<$^4MRms!BAzk+0suc>C#*^UYW9*tJC4^NrCb7c1Y7y0`9dGd&`C)9|;T=R3H)=
z^Msc-O)nc7pe)qg2=BTK43r5tMr-<I+PJbTXK(iV7^|G=OLul;9;ui26XS=b>Q8M6
zebnNg^7qX1_!=lEfigVR{d`%{i<35$Om0;2(<vC39ui4HTn{~GD$toeg_KcEVnX$l
zj)y+Gk~|1(<ML9wYfPA3)-b&WU!T*CZY8OGngLTR?_&gl>n4`!X>f|hJaLIz6w7-p
zhKt!MXP3o<^MDu4L>AB;rKfL`pXb!6m6w6;=lUzYokjr}p^vi%=6Xn%S(ED#{*CkW
zKH1HvypV345J4-E<IiK*o^6>#sTi#-@Hh57pvXEnRf|WjcK1>%6$!*#hNO^$_^>c#
z+YI5{jeK1%1j>sOcmxp1DzDX|1uH$UCsLOk_;D*9iR%#e@?`{~J2*ug3I^Ngh*~>=
zAzw-$)pJ}_!sPZ?o65FcaZipnT7-BFqy>j%P!Vpm$_Oq{dJ<tuEj`N$_k|2o=+a+X
zfJ*kGgPw%mnJ6*n(rz{&anH@hZ#EGZ#BxZM<5=_O#lDgX(O{fpwZO&hR&Hs(vc3(q
zchiYY*P4=;p`ErJ`Ss7*Q7r+3Eh^iM{{4;$5+RqhY^=W@Oci~pqw0Ewt$}%W`TT8%
z-nNzBT8RIA$UnKsEpe`T`ayqO?3&dlbWI9#qOo(N$xKqKl?^8CbXO~L%qd^)6p{pe
z=n6!ts3MF_ZEUI|ziqUzSBBT0`!nWk;QhBFZ~bpizAp%Pg(bZpy<gxmr@BmHJ&piG
zGM>#LBZjr3F2@nR{#y1-I(i<WjcD5`Zz5HxJ~Owq1OE2Up5PVJ-ZxDH=K?a{#}MCD
z$m&byGFb>_<<DbYxgWbv$|hxdlHwxnqF0xS<4g_BvW(+sdDJ<24f!W9M689$HGld@
zvCts2pgbvUU)RzO@pTyy9ifjH5*5k}-IupXYO_+&K~$endD?W2R=|q`W`~L`sfmc@
zP$|YQbUlb~<OSWThf3grq!l&T<Ya*L+>+gTIGi`x#x8@?$1$ogI$VfAKtFIRsmEx6
zKJ}I_yriVGx=-hki511XN-8tvd%nWFrto=I2@m@oLop`{A31I&y-S9OhC(r%!3R5t
zBWVu!2%;^i?)$A;;ozemo0+4vtakQ?$>}>LqRyRPjL4=mPL2c{nd~5FT*s|kI0R9{
z0;w4c%F%D_m%ATnJ0QXG`YsG<!xOi~d8Sud7$lG$(Rm|@b%w$&B<p=P=ydz$lcIMf
z?mlx48Ocb+3QhZKSuLB*^f$uQiZP)?$q0j0@D6BR!1`5Wnw_-zw>*brQn-JWvEM?j
z*Zz%N3_XaR`%R-(XpU1x*=^jl^}DTtdbb_J*!NAg%T$2Ppi+YbLHb<yp3$hdEaz$c
z&K~&W9!R28bP6t~=xyENg^A09V1c!Zns6g3Z(?xljGYzPq6Js#5au!J=k$q^`3)V?
zr9G1qaGXH(@IA|4`E>%HWwczp6qzZRv_$X`BOcdbsFY5h?kMNA$F@d4X1lCzUCdMW
z)xe)@<7eHSLyC_HBqQsnaloNV1p-zbCX3t^-{A%`*9k`e8M7n6ir^8T_09uIDg7C1
zOi(2yUIfU!d0Qs77vup-lPJE;)aEfn@gXN3=kh5a(&<R!Bf!)VApcB=-4P(>@Uw96
zaDgr;&Rs1{!Ex?MvACtedUvOC@wL_IdyzhbN>bWbE>KGEep*x~6|R3LFC*FLGBL<g
z4@u#@#w0ILCy{D_))bMzvAouBFE<z@^6IF&h7>m6saG(WE|0x8Wy$}zOJDhnvsW=I
zDmo|LL7b9IGJPSFq`7S>=0+wCO_?)#Ni}zD+KIGUkqMaWJD4;i+$x;Dm!!m-qA;y7
z9l;%`#ow{q?yk^O_HMX}Hze<aO0Q*PqeCiw?F!>L3u&`Qz%YDWud5rGb2^`WM$ig@
z7%uRAt1T&+<bwGM<C|Q<a+dQv_5?Du)7bebF|p@{>z8xJk`Js=e&&Aa5}3*YjubJl
z7gN)E^@<|~`>@rm=W#Zfm_2sQCnRl*`Si51X=3tJO=8s(Yd=bQw5*(&g#8uZJB^rV
zoD^I|z7WTeSPStP+jMO+^C@rHG!@@q<5V=BoAA7gG&j@Hj^H1d$!}>vt7Gi$2MG@u
za7!vMcv0QHz2|{1jTJX0@MQ(GkL)C~W<6A(7*833n>I-w+|)tiq!ixZy$Sv$uZM%e
z){*#Jd{(pP7f@!PNbX{m6Z{p@RsxGfA(+hHH(;w3zJXKj=n}o6u9%rZd4RWxS%$Z{
zMJ@?SzoTu@bu^&eZ@r~CKt!7wh-<G9oY^(!fT&mxhnef$-R=65UfQcIll7=@Ly1a%
zcO9eZi@yQxzxgi?l}--~zpUD`imKWq?h?!5T~evgb*m^+X!yRg(1wA#yx!C*+i^A-
zakx75*v%`o(8s0`-JA=DN9VpFsB4K9nqbP(93(#oPQ9oY-{Y3`U0e!GwL`??C!^u>
zIp}~8S@b)WT1kh;-*<Q{DS_DhRxh(F*O$@vLdBfi)BGPi8Yc&wYFMY&WyH2y$+M33
z`gTZmS6v!k(%I!-iVKf@rMx`0!-YrWmv*!|-!-4YVjfYLsI4%?5(VyBc=&G!6wrWL
zZD=u_AsgB{yyn;_pWs&k8GNxyIV*@wZRAhglml)F$-V1)_|Wu$#W_na9+@<UZHVP(
zD&(OSgTkRu$(K&BQEuilV7OuFnJ%jP8p$_iT*}#>^vVqr5TLZ}YU~o@!v#f9NPF&B
zDjh;)5a#aLR9K@K9Lv|-7XN+YLy9;g=0#S;&8Tb0_nGBGa|zKz8quj<F^z;xV^DTp
zphULA%szIp2u{H~_^NZVUYeYVu8X}xZlma-_iKdhIk=??@O1U`Gm!2uCVmTFgTAU?
zx46Hm#%A}la&;&}t<VLOUPB8*GscSPS^G&c&L)B*J~Xi0i`aZzkrnvW49{$mcd<)>
zO7Zg68@A_MCr1F;6t6%L$a1eNcHiDpA9rPie|^!ZD4cGUftn$k1XC=0_PT?7y?{_H
zkWhLSJ~h@>b31-UZju!HCd4+Jh;fL|Qk9o~F@I1q;$YRpb<i#_Cn65VvCgB7k=Iev
zd>?>SYd}hETovt>i0Pb?C@8_LtYXlwqKkT0zf(C;+&idOVaXxiMp}*o0dw>A=BPM`
z<-OV6p-)v2q8i+k8An-pMx^6HSF|68%M8wv1jn*7vhj{XEnA;^mE^u+vgJPdwZb;w
z22wJ56UWt$g~2woh=D1O^=I&wH}CZ8?cb!6vx4xM#=K|dJ$)!=7ZK1}=2Iv)b8978
zEvlATlq{wq#;#qNTe@LUvbN0<lt<MrO3i@aF5ypUn7oRRzqT<D63DmL!3>jO@9XPP
z>vlMPNi0{JiFxR^xZ1j<*>Y_IrXVheGVhgud95QrdDjtOpk`NOgScvVn1NvH^t#2j
zW^gNX9jrbze*`$bW9g8)=lP1;e($>AuYU%p8h+fTzdW?J&)qal8aA~l88f^Yi4-!h
zUvEu{DBtG-HuMUzk4|lSScR;ODJ`Ir>!mhi%CS~f9!Mx0S-M#4e>Ny%^TcpLKAuFB
zF6g?f+czgN));(Ms!<2hFlD2KKQ1)+04}a-b+;8Fzbs7QdQ#H3t05gKo?F_2FELt0
z4mVs$E$jLsozxo9`MJ9_j!C9t=}BxU5YjrWeIX&q6h5QeModC&cM5?T%F0867%hCz
zIu@rSRtH6wjm>;=^C<W`<HRI8O|_<}AR*Ab@?1psX@`ow)c6Tpw_HwCiHT!Le3Q5F
z{6wmwM9krpS61@cQb__Kh~`Af);xcOc_tyWi!r$|3V-L<62Y)jEJy;bEesc2uh0iZ
z^ntne13HO`vG*{pB9xf3b8~Yu6mlf}6IS*S8C?GT4k(Iw_4;ksoS-!OF){)BIHDD=
zc4yKvc%=x7azpu*tv%~JV1b(w{kV43<JWGA*S*Le+}3<Rl0U6__$y4(-{EbwtGUyo
zd;XKr3d)a5ZC)TMKMiO;vMd#lLTKY$LfUde@{kQV&K#`>Xte^)V8DHLCSKkKqhRf*
zKlVwA0(ba^GGN&pP2&tnwHjpTRO=l}4s%aaqOFzM8YN(km$u25c6uhJgtT`B-|v(^
z{9rsV4IA-VgXOrQD6`EM25iVZ#wS;8W(LVyU+qO%!$rkQuSb^-<X)Tt7T{x^m6ot}
z-_8W_qZU;Y<I2g2We3H*fvIb^7eE#@Gu_%tzq%!`k-mju<=>6unHTbzwst;9!<gb6
zCPFwP^1I4m!PHtwZLfRpKR)c|LKm8^nvc-w^a%xh#~ISo$G}Y|A_kPu6Ja@)Bp*Tu
z-`Gppvq8C95s?aVJj(6-vpL3BoIV(noxx)7sPMb8nfH-!g>q~}!~09pviUG6?M1(`
z6orb4-1e|#Qj!H%4^qJzWwL=nG%h3H(E3pq4*od_?f6pt0xrgqw5dB=&3firP4zS7
zO_QFv4iSZ-2tS061m}m3URvh5cY7xB&-9|Y;U2A879cocAWm5s=`aP45asvwQ;H3%
z=3Hcwgw&Yug5!o<+&gSDwO*JQ=uSO(o6)AG+}uVQaz#kqxM=9Nnf{$;H|jO=U^C$J
z!}(ugDlVhLYmNYuowpQuca8wZg{6%dPrdTgG+Ylkhu8gOM&$>>WiXe_gp^LZmiMQu
zZgcNT9RZN+zB=>GweRx^-0cEeC+zsk6*65FWnK0q5|-M>T-!FMXC@X^9u=EWWJB<#
z$Mawb4U)*lb&y8Ovg9S+vkbV$bV8@sxU4c9kw_JLG|ANQNrXM((rBdCaiEESF-dAO
zfk)#%QuE%c@(f+8JPYy+kvBiRXlEy(Q06N&tq7(BRvgUo-)yX~UjWUnU<qZNU0@5*
z*jbZ^<H98LXSn+lHfB7B?Cx%}*DXC45+O5*`BdatAhu>YG?*t_u)uP|B`rXBH2d8M
z!SNEpI0qb&)2Ux<2SGfM&<4UtGsU6dwag6XWbb}~-PQ7|u%;$6yg@}Lm!y3KpS#39
z<z(#`<bT3|PN4<m3W1pUyhT7q?Ok&;55S=LOQlLmcgA==S*^6ybL;gl0}I=)ul2w+
zz_&eYBUa1XBEV>O(m0W*aL{o23(G^{S%R}6NE8~G?0~;5J7&No{@qnKt~l|saIH2I
z#hHFOn?&kHXu~cvQ?W`OF4V`ok(-0Xb2!#AUbT{G>J?>~S$^N-K3BN*juh0NeQlvP
zWNkSCk&uwlno#{s-Zk{)X{<uZQoT8MUxM15sdUE(YQ1}5=kTReqe=YZOpLc}78-md
ztYOMB>r4&;j$$4<4PVcV&>>|vp|xWh36GlM_ipl@aL!a$Ig@e&lM6*#zA|RB$Tu`u
z5Nh7eDVMt$?Ua>oG@+SDitH=C^hIqWGt1-wb%<5u`Ei|OgkNa*`|+4X%6oHn%*^9R
z;(D<m?V*SL<=MFS;NVvf=$>$JaB$iDtz@4jQc!tecdIDskO{Ub8eta1F>p|Z{(K?r
zgYe`OHcDu<GMVf6bLl10SKbgX%|QNpsLgakEn^Q7Y__6{7E#a5d@|~bnHN|teeVOX
zwgEr*VLX`%Cofum)BgOh2Heyeu$`#yo8$*&fqMaq^*e7La$msx2qIPaSmD|YNI@Nb
zOGAEY@RS-kD$aE)`~8JXf-rHhAIu6F;?fh7_00``6~E8RMFI)oH6r@vk?HcXSNB*5
zjr*}Nf+Xh{t`|Wd^+GYiXd0drM*K}nfG`=Zpi)O)TMI@*k3TcUQjF98HYBdyJ~o7n
zQG}W^8N`{bz-u2LOi~{@;H+Sx62Pc5+pJ41GY5$tk9+$uW6Pf}WTn`qdznp7z^tuH
zF^L(3EK*3E9FI?iPU~n~H90myAnaIR%xt1Kx2;i?#s_MHOZldKB~3m#8AkT#h$vUh
zCT~##{c=){JNmd@`qZ&@e116i9w7r)_sp|_w5m0WqAz13j={ry0+V%ljZ<;HEVic>
zp~Ts;*zJf3j%$4Wb|+i){e?FxNHl!?;kE9^$}XjF)7)#t%{+c-a>etZoH-qaQiv<<
z^(c2MEGSlxKIr)ofG|T<?WFdji5$AMj!$UfbR%3lrsw^ILsIe-WQy1BW7CrxJ@O)-
zMN1nZR6;^S?Z3+4W%H`bMt?(id4aKER4-=T*}jN;8=rSzVoP^@9P{OS*E<j9dAG9X
zk$8C3<Isb-U0kLB;M706^IE*ymkuq6Omo}>D#T2y?J?k-DDCpty|OD_Y3b@DH8Rsq
zn1AL>_at1_Wt?KX(Z2b1nR%+I{2g<Lwsyed*n=zS&mSFvrczKx0EhFVe{1bnEmvi!
zPN{A@7#&u{l-u>H4%C$W*-+7|IE+049KT&a{m=TVEbLkx8XUtXmT_X6jQ8_6$WaQ)
z^eRJ`IWzYfHh-e(F7EKghqYNm^6_23&n84EyD=Shh0ihE`XjIn*L8o#U>GNPtK$9B
zf1dY$;rWuviv#hl$q&V1k0FgoE>^hi4JJ8-`?YS!^7r#Y2t$^hSW4bQl%94u?eUIb
zcG%`uGx5guLC7PCBS5zCJ9w}B=Qh3kfLG<Ty(9hI&KD*mZhCEPdU3t1zma0Ca0ED8
zn7G})dG&kDFBN-xiec6JHVqP$hi&Pu+p`x6E{w@~q;RR!9!gKLSp?X@%2fZL!^?AG
z^X9%_o5zG*UsW9{aA9R}UhecCRE}9tX;A&GzwL?R9@}>FYcs!tB(>2$sXXyK-GBO9
zf<k*(%JK774)=3;RfU8h-ap7(z&_pk<&fD<;d|kNLvJ>BSX$bXl3n65;!JXe)J=g$
zd4+7s$KO5X3E-dFCsk6XB<>==F4M<D4c2g6E!~jnT)jX(K7Z&PF@uZi2dW)|yH9Mx
zo4dGkd{NZuRuoLTJCZ}$aXrK^i2{Z1zm+_ZO-y;E1PM_0uVMENKExip0?_$OE-@YO
z>@nOQ;NMl+lmu{W*A%I*KU|c0`5=6DrSBuaZsL3gZ^y{nI-WGu^eU_4Z0Y|#iJT7T
z0(efeD~<`s%!?JICmkQ-<XpXvr=nMLr1{_0D&Ul7ZPMR(7sYWV&lI~I24?|iRDbXo
z^n*cm0K@(d9@&2|cn=`+{RfX$e_=5HDWLrakN1BtSoeR2#7sN4j``XCRnR?5NT5)6
m^?#uS{3P{L0zW12QvyFF@KXXmCGb-MKPB+rD}f6~{r>~WUuY2k

literal 0
HcmV?d00001

diff --git a/ui/tests/scans/evidence/scans-controls-mobile.png b/ui/tests/scans/evidence/scans-controls-mobile.png
new file mode 100644
index 0000000000000000000000000000000000000000..a5308650527cd2ed91fa4733c0bb2efe26306afd
GIT binary patch
literal 24134
zcmeFZ2~<<bw>KI^P!Y5dBFZ2wlM)662?z+N5N5=fgfK;vNeS~51O$|B5rPQ@WH1P5
zfDjT0GK3)rh|IGLVIGuuMrHwlN4MR5yYKto_kHiJyWU#gy8n~4l9N+ayLQ#yRlD|Y
zSDn3{z0ZK340QB$00#~L00;IzfW3Zz7J%arI|utA4i0vX!-qMJaQ?)}dGshJ-|-V%
zKk@UOKF!Z}>Xd-6gouEkn9!+HKg;|qCV5^8By~na_LA&{OA;5PF8oI1z~RG(IgfDi
za&q!s5I7}p;s5ou_W{6jgpKP!DBA&1z(Jk^Y&-|{ssO_KOddSQ_8Y%{UTpiU9z1;H
zz|sBWTR#B~upK;j_`osFLx<Q7v;WqtgKUS`dH6U^o|A`1xAPtb@{3-FBJSCyww+Q?
zyzSxj<Yi2U7$GO`@(s_oO5V9gz*;s@`5z^eLw>1P+NUUR;E(Ii>i(d}v7dICXTQ%5
zvaug#V`Kk=qXP$d*r07Ef#+_&J;ci=Do@C{Uh(yw#}jsisP-?HZ|wB}xY+hvz{AD^
z&;%^M`46K1`*-ZilGg)HU)2}PSw7!_^uuiO*0CSCxWce9`d)pek1iQx^W@sG@AF7r
zO?e#*Ej&5?&8>rb05wEaYZEk)I&y#F0w18fh2?R1h3`JP=+!2c9q>Q8^zc?^4IRhe
z%QdEUHJ{=fN8ih2St)HT!FTV%AO9{E{*4pqojbGT)R*i#mD6jQ{);njY=3$EQ$6&m
z`-fV68N7}>&Ir*!3lSB5lBV7SS`9W@4XTu=;f!Bc&P|MYk#|b>qDxO*wGoDP78_C6
zTy*?BM+aHpoFuN_h2fUza>KOM{2*A2)!EqCOI@_`Dcp*fxii_NO?oHWZDdnubx|>s
z8uDs=)6NOH=p~pXhJapmkQ-1s&<*HyvpA88Att1HSxBd)7c`4sW>wzY_<*gwOUn*D
z?K(WEC6J=67)3O=GNTx@$QKhqGwN>Bi%|W7=YqIBFLLP}JNTTRcsYfo%uI#gb3q~_
z@@r6N{jILLo@CL>9HMm4bL$*=&pC+9s^+ze7CLx}foh+n1*}!g^+a008_#ONWNKtj
zJhhN}`$Oje$7Rggkn8paX>=$_S!TC3NJNtxwXK{iXQAoGXwx$H%pbTgEeUt_g2ObF
z)Dg_OuyJijwbIUGQ?@+Woz_){Jjl#NTDp|5una*9x(8^tN8t5&5P~ZO-&uW0w)&ax
ztlqvyTE2ag9qSMGj<jhnjZzXf3ec5@ohn2?`+Y^<0Dmqjc~HI8s@F#=jheh}G@0oV
zOO4edW*a@SvI>izLnWnMvGVrZbWS5vi_I6{FIiW_PqrF->y?wjqN(I#d9EKoPaOT*
z`dQ)cm>Um@EEAN}iL4F{@gTvkUD{Q&e>qAI#5oqQ1{Z$%)c@9;N=E37LbSW!5Y!AM
zfpD$rP|Qz_##dj!b-s~t4c$4@Aq<#5=#1|%^^b$P5CqCl{3la}_07r8i77BHB=<KL
z<LxCjz}VuOuATN^k7vBmWxrT%=<n1VF#1uo^?*h)Y=gc_z4ez;K4JJu(ij%`AJv){
z%%YANokUh1TdE;r&VNmD%es?gokPU{e=%P5(sOi~c26h2LzriGcB6eY$oeIi`paHY
znQI8+u<p+ZYr)Bo$7*8C#F;_wcV_1bS=CS(V4=Q*6Tg$7#LYZlP}ls8k4uBVu85n@
zD(<D{AmD9%qRuhkQ{U2)h~BXXmeUY6s{%+3F9!B(-b@Ez1|^e~q%}esJ&K!ePh~Td
z1*^C{X{qSOV}w@MD$Iqby9tG{zUt>AbzGQ+mS<ybTRSZv(dcc<p9#w{(tM4gjiM^N
zc?fh0*q07UcrpFc;o#2cpom-3fw8d_C?SlBrDsW(dL5+;0q<z2(JoQW0h=WiUdVIg
zrt43+>8HWHF+HpIy3+gXVx~bi`+P6MU|e9tH+5k=Yb_A~Shc_TYHGE>ySN?E^W}+R
zpzN%P48w$~yRJ^`NK;VHkw)|<haSZjuvAM*I9?QNrg~57y8ECCl0xtoh~3nhS|tv#
zHeOGVnx#lp8$hr$X&Q3EQ&z0N5GLp}BL|PFKKOkyCo9?<))}9^qTGmEkE_5DH-G6*
zMfQBoF`AU*oRYGuUKZW-A-<fmUd?EGnl`K_*Zs;-oH+nOC+qXxOE<qm>y<Adl-*U^
zFs85Xoaqo&rj-v%x&4IfzMU&=<f*=_oJ+y$Ix%1zXn8!^r9bkOUVfpGOs4$=6~AVS
zD>O`#HR6S-(hE{JZuY9(ua*g`i@`yR;l?Ev@sgZ=%j4DvuWSmv$V38SwP-F83#o4P
zTtvW5AD>*P_sttnv^5n>EOW{%L}Zv{fujwL)qwb}#3g;KmL#Z?r7O2K{C@h!1o@wb
z#YtGRtm0CuiP#8HSuB2Cj+15FfYkxaO)2I<7J0P%+Np;dQx%OX^TLZD?r;;JU2h1;
z@6m4l5=^Jvat%WmOe?Y)?~dsg=<Mm~A9I4$g&_ck&j)f8E<|rXzw$b9RbZHDvT%v>
z?(Y>J+%0!;UNCO)FXeBEU}*LluxTWHq4C;MA{e$X4yqcWF3A})_Z?7o$ZzY;sUUxE
zuAPg=G}ToBFL)-WADVAYf4aQ-UgrDi)WK`I$!TBiPo`gMZU36L((&f#fwMtzPm_}p
z*)$D5wzl4UEdFm2|IrsJn$?9}paoNK`1&j(m?U+4zpoOK5;?&3wp5->oq{XGq7=c&
z73wCO>(&nq;o1ra$~TT8-KobLS%eMV2l;*N&D)>vPWf@(0R`RgdH(bwQ1hJXhfMaQ
z8*$j=7m2p#469A*ZoZQ~aQ{WxNcz}$v%1?$uw~v%&JX5eQV%mWk9H~Wy@!AQb@t%9
ze-rsH`o#5yPdw|TYr0OUP_L-x=Sa8Yri`&$^4ETs$+4}Sm^_9uc&5rkL9%KOV0Yoz
z_Op(eptWJvwb~z2`(J;nXx0>Vi7x1Xr}s5Mlax{QrvZBm`%(BWWA(Qcl+^={NKJ$M
zh7Nl)%^aaBp1nmlj}t5B5R3b&)?u6(S?uWgi=$?M)P)4#mNfh;tX>E=ck->U(c0X=
z7{qJ|Jvxr|`!vOUw!Hhn_n3A|l%ParYE<~57f(aan6@rDdlMCMFY*<<xlLW3IhF4N
z?HfK}50l~5t54}RerTsJ=IIwBlw6Mh3~c9A3;Ban3~Ins#>TG*?Mflgx?rh9OF{R&
zPvA(yxl@+9{`X?(q0Hl5<{brbsJg1~zPc=JSAlv4t;Dab?|SNn;F_?oY(<+YNFOa3
z0VPuLueKIzTSr}2PH)gy_9N1EK6IOcLA|~UV9QV*MvJHIq}84IH<+{_>=bHq711@c
z1%ppR7RcCcp_{mut8@BhxPYFluF9jl)sQvG)2H*9f^RnX2kcWb%5S%s%PFoFo&nj1
z2bf93*v#8jB#AP5Kn$Pv)^g`j<S45I*F0#of_9_!GQ6!!v0|xi&4!k<ZHrD%IM}W4
zy}KA(&<eS#G^2+m8xX5WY0k%KG4d75)JNkGgq4ych!*;@8&h^*O%b!AFWi!w8@s8F
zY9}V=IHOtQ^t2ceNm|ch(szM~3Eg{z>_%CK+Xe;Owww4a`?ds%Qre1V2Su6SG)OFA
zajuQX>_1(uY3c8(I+MqgBbZvxcN3YEarzsQ#SyEijzhS%QhfDQI-Jlzn}mrD4yx{4
zcg99tna|Y+3T8EB#uDfh1AEBL#{6MwSjp9l63ho>)v~cJtlC9;BubqB=2{xY(=bNN
zaoavJU(a)<w15+f>t3N>xvR5t=#!o|316Z9ah@C9Kbl2Y1G{VSwQHOzeJ8)*z=c4H
z&Z_ZMI-LGYCJs#_C;CoCnhr6J>JF_IWl3LlGzraih+3>fR@Vldg`G_>S#)<4DvW6`
zzPjpC*vj<@{I!+MtV`@{^-#QgIrhK?6N9@>>Vp7<Wx)-^Gmf?tz1cy*0qmRyD@yaE
zj!lA4ydR7^l!S7;8HIF|MO|ezr(;#k1dUBhj88)N<VC3|7M*LwNMJSQ<(vO%uyJj3
z6@0tMmwU%C8Rn+D2N1Y0l;v5-r3CVW1!uDX4wPG|y*BMcP3;=1%bjuxy_lZ02as`D
zPNnT4+_pD)g~JWWpUfVhGv>FhZh}w-EPI4g;z+0d9)M6n$YAj76Y=l<<jCGPjHVT|
zAzQh*k>5TsFlt}$<CVcLX#h{(PfkJ8nnji2^~2Y*wo`XU0puU7UR)3{$=L1=MqD^H
zX0^5c>EW`P)2PX7{PNs#`pY8+2vO88>Eo1ognP$wCzrdO9ks}D6Rm)-QvA+f6FPGS
zL>CCMcpih~)|9<g%b{aH3r&tqkw8?MG~SZ0_#arf<>nT*+u-?))5iN9N8ST`B7?ng
z>1k2I4opXPT`{DvDQUE@8+(5FVCsLRD*vnJW!iNYZ4ZZwVKlTi8y4k;Mg2HW?tWR_
zN-p(XyY&M>c>X(lVC2s613^gn9X)^v9U%Mw5PqNswE(*x0K(<pu?P7NXa1)acH2SQ
zB6a$(=8`NYhX{60#-%PaT`=$=HTd%M|HF9s%g|zv*in+M+_g=O)fGEkLk5i_DtL~6
zXiu5|`fHN?HSa}@vK#sOncr-vGmj99E10vhA*&%GA&~xw0px#|^B3<!j(_kgQQ4({
zRhGjzYN>8_q%#r;yLi!oR_f6;JaaK4AldvR_Cp~`9y{p%zCD-9dB1<0kfmGN<eHB|
zXfMT=xc3Aur27}5WKJD%S@VD!vb(hFTU7Ve)Wb5Xtr;b^-o5vQ_>el@el>HPLm(6}
zVF?n(kTR)Ba-u|xkHrRw<_<xVTp<{ZTZ)Zczf230$<snz*lEZ4JbkV;_m0x9qB%XF
z*)O4jg`1yhC~e&0<S4u<PNbw-!e*ueyn0)-rO5Ud9?MZVL5v^wZnQ}PF!{QD(ZEE8
zH?l7QH^NbjXb0Ort(z>gQRCCUWZd7VmK0r^qBJOx6={%hk+C7o00(Bh(Azu(#M%?=
z2}0q$R0fn-(hW4OJ8U}D5(yugA)HdJqXdW5vLLz=T9#rqkHVTxV~eQrK~>d_IedAa
zb^xW00;+E>%sRR_np~YP(ui4j(#Yo;MAfvhp$;f7s@+I8T(x*+IG10*IW?No&>u6D
zvjEY_rIM3O6(o8~!>Ltk#gGI&7f%x{e`8QeN<nSPafU{Rc((p+Oh+-17=MqNT`@I>
z$<93fa#PKJQ8{qC&12C-FgDn>{6umneJ7zcPFCc7-_+a8VhdM3?`V*c3RNmu@GN!E
zPTP|tI+74nS%&s*)lJJwYl))Qave>XcC+xarv~2E%$e&-lp@TBThIr-Uo!G3$Y2fj
zC_XK07E3o!`-M86zsl#K-BoI;r1DPwY*+#T+SjxD^P@MPBD_yY`?MM=MoEiW5p&x*
z3J7ZoW#XQN`Tk%S6iX>`L0Iu0l3uVl8W6gJaLH?L4AQd{3WuV@*LX^!l+E!=FurQ}
zo-+Ft!S}$}Qczl(VXAWCSrW5Xwy6N#zc}aFQCGLt7NyKlEP~Ypx>oB-su}H^Z{OyY
zh%k~`y~)Jm$s}So2cv*J)!wMB43fA6<^c*~(-ZE$KAsk*lbvIsHY-aUYjn8cFley)
zY#){4Ql1-r|71NN0R;LvkjcpFxDmsv^G-#W&mb&AESd{iq(Z~aRn$+a(NpwYq`m0v
zZZBWvnxAjm-N>zq40eu^Re<!!7{rU+)<(|SK8ukTE4Fez37<A4)TYMP7A&U7yh(ox
z3A%S)@2)LzedhDPDT(Fz>Pu`Cr&UWm+4Y5Q$ex9l`KL(^lBop3NXdJ9Bc+jeAvu4Q
z0LHBfORv0v2UC-kxk;o~OSO{wxKuHWy;>=8GTrB8m(xUa*Pu6^i1r^82_5Esn;kIW
zoE;)-WeaENFg)Tcg=Z%b(g7L6bKR&D@AV}XhLJurB2iDA(R%sv7A=HHiuqP>9$d75
z`X>2VRs3HWipKnY^uorG2QHs7Sujwl2Z`ha5~Z)fjqAwgB(Ao1m<X*dYe=Pdszlm+
z&Vmn6-hj@<68(Or;FgR9W3p{K*wN%wxWdAzfTv76mdcFP`#B3;me^XMrb9kW7yR0n
zurcEH)zKkhNHlaM4Spg{??J+|`@HVh&y*xkecmDX^5%}?2pN}JI5RI+V(4Dnm@QoZ
z&dA9rtm{fA{KT2^Cm<$t^G`#`e(Cpi90+#b3N#ri*~++P-94X`SYO<VByF}~(zh?1
z{``-YD$sp7OVXTX7QiRrouye$sRR$t6bl?Wh+Es_L-jwh{{7E^KWFme=g)sD*s4Y~
z)Z}OkVzO5u2jhR_YfUdgSM|(@&YN{sQ1L9!^9jNwn)_?B`~O50G6ClQ#2uvf9pHZ;
z6PzE|ll}obguMGVk^iDk946DR<IK%wes$u>!b{RG)NFpADMS3>-2(QZpy4cDJ4#%x
zZS*OUvUx+&BPHkWM*EPFz4N?rvwse6Q+SSMFQD=dT*2-KsGtXk{DC~={D2+Ie?EBi
z2R2dj1DLRTd}R3t@Nnh_bP)v*`!|Vy_Jt>JW=&>_k1BX-qMkSIP{5;IdlS)D>F2+7
zZB?P_YD)J9Px>n2&%sk(6sVEDh}wa_`OBkV6B6Wj{9t93W|XC5N@c{rNCta=jFS)B
z)xO%O1hbVY_SJ32#!e|kZ{$XW=U9^%ChS)Ubwd>(p3c@g%`Mu9$WwF;)AU5ZikTX+
zL<m}&VxgF6YeBPq2!R{Pf6Tt;ad+XD)cOJcojY;jEw{ScI$(`)5vNDJ?5fL^T~#y6
zn-1%<70`+7E>VU_FItgzwz(k%L}nBsK+POPwWbhMphOyVy@{@^-P0<0<yD;P1XJ1a
zQM)t;wiDHh$%9v(Y<7=Q)>5;+e9lu8j5DR7#1Q<zE^Sme_CUwa3t3VN)+we%)Q++|
z%Us|mm@yRLo=Rz|n!c?fZYO`yQJ_#b5NSI?8Vw=6M6tY2b*GpTEuY3pM`!GtYc)_R
zEhLwS5%X~Bm(e5At@x`vZ9_Xzk9}VJeb)NV_Z)$tmXG+c<`)%PGYV7o060E3(_+g|
zLEzPl^6tl{0mF3R7HPEHYOrKd+%a$^e@E9IAXaJfHewF|D%|-Vj;~7Vcp#$)hOh6O
zeH0^?hR&rjT9(k_dw{yZy3W3^eJZ6|mMUsf;BxQefqVa3NRY$S+HQ&N7(J?Qs#n%t
z{G~}iJl?ccR8$QS+%U(>^{9dD8a|EdhNMvOUEcygukI3cjL$NiDn<1LqnjvWy9N}e
zH^)kUZV$k1;qkGbrxJnU3|<JO8KG;m<2yRJROlDxn9a)XQ%2c_w~a}k$CKcuBjb-A
zjJX~gGdW}M=I}j7jyP!EjeJW;7J?D;QfccMlBKUG#lK`#l<Mr7`z^D28-by*FlSKh
zYLqT(H)MWJZY*}t(zG|0Bw$(zyVWy*kI46TK_Rr^Yb4w7uDjd|<;)}k3*7Rov=ec=
zvl<CQ=<3v^QDc>z<lCv|alb@ca`6B$RA3(>U0Gf1O<gC<^1-w)>~$<i!1QCZ2{mh8
zBy_C;$zosxDF0c8|NMWj{TDsCu5ARW09*F(0lK{ADJ^H1%U4eDdzu;G_@7qN<4=*?
z<@@k^dG=+wz<>u={e&4y=`Ff`7(ZCUt;ZLae|OA(c;znv$G-pWnE&v~(*XNn<ljAW
z=<hy##x+3s54Zk@Pk#&WKf3hr7GDjWkiVL%mDz19cVrAbO6|15Y%OW;LiGL+*nvmk
zFYeTwIH@!DD10Sm2vw%NeBj2vL-qfkw<sv@GURC~E)bb$G$RiZQfv|L1V(a~y+>%q
z1AqRZ<bTHN)Bai>Qci!KJfr|O5xOMbZYV~0ZVLl?Qa^`1yX$D;#aSxSp)T^S-Xnyp
z_C7P+-cF{P(AbYrkcSCVYe}T}6<4<G1NqaTVfrbUeizGG!CNtTUDt4WYd#9g>*$hh
zVV7Of#NfdC(5w$`qxk}vfgBpqr`!z`kJ6=Nn}Y3Qlr94y1NaIhI>2X2X*StwcCB3Z
zO-WhI3ar^$wlv&CFclI26wJhHvrLP77*uQ#4L)wa;FY=|e1Xw3;{sgoBW_%D*y=ME
zLxVNEx=)RU_&xgI_&GmWHygh8vNO6*P96cTn|kwfwbf}n07ac(P~(fC{XkyNIhEQJ
z<z5$<)oAX(u**}cD1=hXEH4;&*k<3=;}05q3_sX0Hb47*aAOftTYA;id<XwsBS@fR
z-A#ivHNJrD;BL=t^$6)#5>B+rZ*?}Q#hidwcr3g0vHua<`9sJ5@xy^4_al9aw6t8G
zI#6FB#Be}fb12Z4y6@z({d5wpC9Al69V)mVB$U2WOWqF>PEqU!WHyfZ2m=v5GB2)M
zumaVRLohfac`M~F4CTctF1G)z<^P{Cat_u2k<LPQ99dK@w$YQlq;Ji2u~y(!Px41x
z8N;6uRFlzT%B|eid@ijp?PC(L0^v{&LuCwXy^@^o7jJGN=dln<V%8yUtlhv<fI0k(
zFU_aD;%?|L5~%&obWl7d6P4*4quPYnwq$T;-?(_`c28!`EyuLCGF-N&X6@SbN?cov
zf+Kng^Q_F~5EeK%ss!oR_W1Zt+x7w$uGHRVx#8!cv?HEH!L!G-wKVvh9;&v?ad*wV
zODm;NOV(q(iLjJ{SNZZZue^>ix5Xqfh?9vWSM!eO%&O{pAZ;=jmLp`TJRuY1$7+*0
zk~y_Xj}6`1`xRZ={I`CkBlX2%UC{Wp$cXBtzM{|6qI=^CS*rTB36N2jt{vCLN<&LF
z`*b4O@+qja9i&ZQAY!;YX&9<xt(+RnEg5k3c}9o&+1QpiRf7_tOOlakrH<pV8EbmG
zwRslaWZeP@bcxs33i+<Sv^%e?=i;~z7H1)rhhdgbEkoedu4!_pf1z&1uRe-cI*v(+
z7$v1QLyW(j*LwU94f)5PLoZhhjjwuj)a~z;sGCra*xxJRNg_N}Q{|Rv3#hs^<V}6D
zJk8DPJ~!gZV+G``HdnffO|sU^x(aX0kKI9~`Z~JutN4s#Y8XmNN}B?m%c8(*fA`w{
z2q6Ep;>_;1REzdX%7(0v=1tabKmM2g8$jXTLE!(^fcSBfC6_g9Nes>=kU4KXh1J^k
zj{mh2$Hw<VJ=in`9kYt$mv2`-H?k6z9_s0dm_VvP<=1S`M28H9y!WfHQ5gX05wR%H
zDR@S4$99ZWIcvEGfTqtXe_8Uo-)Fvfp@r`aa}(^owZEM0blj?~r#<T`+)Xj*x~g$e
zW?O#<`daF`&ocVU+J4xC(y<m9jXaU%wxg4r`S8&l^Y!TWDOYZX%>D;i5lOm;#qbtR
z)9mZF_j&W@{dC;Z*t`ECs$p!U!6;u72+H}r`kTwozZe|L{)^^+Fj_gX+?t;_e&*v#
ze(S$T{*BFN)#J&IY7Lj4UXUyMi{{_hJQ2~T(eC^5KIg4}+4{30{IP+l|8D&M50Z~0
zbgivP)FcLP#xOb&ioBWN7iDKI)gG2yT?YAebp1->WQwlAF6E#uf0V!jRPuk*Y(du-
z*|r{0!y*yJH^$R(;U(2pz+tBtAaWio=F%Sdjkvf6P*L7N`+wEU%^qDCx8BfQSvLg)
z+FEUhnPDeEpTokj)C7?O1ZxP)EyG9M`C_O83ADe*>@!)#K~l0^d-yqEoX;(0sxE%A
z)EAtA&8T|3zkPMhf>H#M)3~c~(4VSGgrE_yW{!fc_2;Ie>o(UUC9ml7246d=n&eR1
zr+S7bUUXI($;IzEI$NPvow?6+EZXn0vun~BG3W5i>Hq{dx+Q+`#yNSnTYyQf+s0zH
zPa~srU7dJ=)*p@olE`>+3=i6I;wispUA3!b(_<qe_bAET$A=|rHslwbgeG!$tSIp*
zm@kD*hkpV9><l3YF76}?$KGRQ&UhS@wk|hv#`ckksX?v$bO_BVUT%<L9v*pHQld&I
z4Y#D18H2a&2(XF=1sy&KI4ouR=(e<kZT#v`w<KrsW1(yN-0nA5{Fb4NXPJ^pGY*`T
zu?t@bt&o26sM$7F5(I8t7Nw8LroI=uY*kz;oE_>WDB0C{gH{?}*QJs%gYvd!ka=Di
z?g6}pgU5RJ07bv%Zy5zee~k&$eCYHu+hoaa^f~&|M3%tAyPj@aot?Ns1I-bq^6z8A
zYZ<d2b{oncZWkkW+P?3^ga($8=<QRp_i$O>Szh;I=4%nY(h0N1JzGr&`-sy<vEQVe
zvgWDIoa4B9=@huG94I1mC*4`?&PM*une2}CS#{YgDibw)t)?IyIyGe#9?=HoK~TzE
zW}m%gMKlCdbBmWUfN42!FkMHTb=(t-0LoW3zE4q(gd<H^iwZ45&Na<h#|97Y0k9W#
z>op5ThGIiL;m9FQo}~)~vd&Sdt-8`gY>}vKi0I6G@A$I7QwgKa=mLL7VWF(r!^-|P
z@fWwHKvtl(X3v}7Ejc?#n<;R(=}tT-;bRRMEBY#8sYA!9l1P1TGI^@A;h1HXE7Laz
zc<Nb!0j6OG?r+jNiofzDlx6g2QlP}8AgW{dd5B(A^|1uKX_1VRrFXF7aFjiyv$ybj
zHJG{wK)9t+!lU#vrvgq}MeLr$gst_CL;CZ&Y;!lg?CoNVGvf*gl<s0ApQq#)d@w}#
zz945?B`!D8Y7a1(B0T7uq;8*UCA*%0%C(s6FY$@_B;#Ixxg%#@6iGusp-3)`cIm2|
zhlUV~2doU!8k$eyFL8WJajrWVB@UJ58AS+|l4)nBKFCniV8_1Jd<q-3@9LglD1#b^
zMN}$CL_%Ay(=MVE?0bfm54|cC;Ss(X*=?Hfk=Av8<(G#=TDq3~rbt+sX-!}6NeN0c
z(mWE!%Vkw$iyeKI+!>G57<M*v3lhABZA!3j!0d0wG&cofuFT%c6OvyhHVjIeD$Aqo
zIz82a@<aRL3kGZN>h?J?e5Buc0~O?LY-*a6#Sk8*U&f7)!er|F6(8e?B*JX+cfAU#
zXq)VcguX|;lAbs|ajCzz2SeA^DPFdTD0Is}IwIW|7W6FKQk!bxxlC_4Ckd}u2XPaB
z(NX+ygoEIv;i7JlK&FN(Yb{UJ$c))g;$cHA+yrH>T<Kf*O&$*O5@hH4%Oq!PHIf7p
zBh)j1@-pkMLDYzj?XSN+7Z{Oj?{(=k_3sY^dv{fnZ5l71eeRtd$&mx3V>szLBs$AP
z-Z=H;i%;FR4Y|P@7G~|*dJf(M!(U?f5y-=$&Xw$aNnW7&G+5Kition<fe#z?{U#s{
zU1<U@cUV|>h-;-Q=vH?(yt^r?%V_#eI2F4n>PNU5W-G{h?7l<%XeExse;m8$x9P^z
z={q_}BT}E{8pJ@MI^#rbC!V&^tWXW(1SQEz4nbo&ecJk3e?Ufi$iv=#Og18>lx9Zx
zj^wh6z}|b30UrR(#IJYW+!WYI#Y2{hc@J5SzpEo|dnXbUEP9iA2D%G@{h5Oev~l<v
zk(U331#gD0MzX{>io(K@a(h6cd0K|hTm4$79^_bGH6{8m1Bx{7_x(mIIn+P?0bj2#
zeAxR@CTOCPYek+~g5VLD<F;R8Tnt}g-j^1+=sdPk?uJ{Rhef*rjkA5wH&<z1F^v~v
z5Wd;l8Ie3XEU;y}O`zC{WC=A(KG@8~8<?+<B5P7)I%tVPumR88<m52KjS%vl``c!f
z?!6CXszJb9F>U7kVz+ZT9eLBE59yFq8z@DyY9e_Kqp%QjsY(0;tISwsv7WIZYy?*7
z735*jtuo|omcBp(v$Ybf^61;exGu5$s%k1eZu2~cjT`U!H&^`>)3DjKaoc4@PrZhG
zFP0Ex3|)&I&4F6e@=g!~$vIlO5Ts+=DTKj`0+N-l7?s#HH<*(VxxeKk<^IezC_a`1
z!Kc+t6Ht*4C`F{~WXG0(H1B1&20G);)~`<Xp7ib%_kEjmH@R*&ydu)z^6aLt`GSWA
zBPhr^#nUCK8EVyIE_Ae~tM*s|+oWeP9z!jFctHggEkJ$-mInPZ-tAAGr`oFv+<ZRA
znpyQE(K)GQK9vq5WllR?_D}8UuNsfF>wvO1qrKu<${5nX7UZlAvu89iv*!GR{n#8f
zP;wUsdx{`~Vk?AQw#Wt3C(F!}rc#@AFXuQ}By=BkHoBVRcJ6G#9-t~l#OK6%ybWuZ
z9`llB0z+MWQNry&E5iuppk}|lPHUHb-`SEL%S7Ioz@S-`?5?NpeGfO41ws{@T7osR
zXL2A=IO4(gJT=3&1~~c5@D2#4isg5G1T^Ej;&6!6vmvt`d8Y}@)GS&Ck^Xk2vu;`<
zNT3C?*87B~<-Gx#PR*K?g=tsI^RGHsT}aS-ZrXJlK5LtMSj8u30D24udIHKH@%L4O
zN)VN#-}j`zcu|qad^g9e46GA+v9j?=UgxwR+Hv^M+Q$8=RhAbruP^lLL^#>zp$9&W
z1;UbSY$K^H)Ji9!Ki1-kt@rAhd{q}r!=5mYoT2JvyQU!hN8%-0r6knxZKnAqdQv{7
zrBbN|`e^|OY^@r*S9ue*vu`lLz&v}YsVB-{yRt-CtdH3Q=`wDhl_IXrct-1)ixIQw
zC2};vyvY}mSi!vZKm@}C8So^aPyKDB?a86s`lkivQnE3^6E^ojg9r2ECAraPNvXnM
z+`2z@8^OdWMtw0v@TRAc?Qf*`#869#Dll~5uiTjh1y{tJ3l;57n2VY4R(pQIrZ1a}
z1=_n5$0)S)(j65kV*%fdtnjs#B89*!&E8E_%|(_M$J?c-qBe3Rsib^FR$A$-vuiN~
zRBWln5;c`30E@DBt&l=`CEczq8|jjzWJCF+d0~8^eV=WpDl>U}@LP<B)dd?1dwf8O
z=_?_^y^Il2D)r0yNO@CSxneI@tm}L%tFyB@S$Sr({DkSKNBA@O8Zk1oax*!*Es?nR
zamP}Yots3QHOmZ9HMRVV*R9*M^EAi>7tM;=j*z8ul;^5aI#eH?1ev=;>GYj#7VeQ3
z>O>bKYg}_hi}|_t08b)-eNmupL@mO{#V~;~Ny@8nJraL0@sf7$jI<j9mrc`eM`t8u
zRkTpxwGLxO%ID-gD6dt>qMDH{Pfz<mJTA+yDa7qgmhA!R^Y#E9M?)QM?*RrjhBuXh
z7tURU?*u!3iz8>JFN(<80UmAK{cRc4@15-WV!+PimCWL+h)JhzbJ{l&iAeC#4Y0Xg
zYwVfYTze8-v##IUP_u(_1_CuYt*$;xImon;B$B(oZx?s-K8!!094IsNyeKFzIah7k
zVb#8JWo{>$@pUtW{(Lj{8|#SVVp>95+=<q_b=|)*UVPRp?0vQO5&BnN-}dII#%Ghg
z+hS$0ZaP+)8m+zjl@oa8S?4nFjiV)hQX~u;DyPVaB;TKl__CslI-z7O@b=K)YM#Hs
zm(BH{y1(jx{8sU^gp0UaA+B5IrDxo~Z)@89Rfp)eM{V6&&2cr9>;Hml!Xu3bvu`IF
zN8vvw{Kbs$Uv-p;DEfR_v0tM8Wc(L1_`m9~K0#ES^80s#|4@bh9tmH*yCj1w7S6$k
zT!B7XFi-J3zib=#_2+$Q*E<&lf%g@SW7a3o+oOU{hMa;!G=+i@OJ#X6nBu_T`k$i1
zA@Y}bgROSUE6~(0_74C{YQL%cf4atS2sBl)YRKbn&kxi$n|{H%8QnVm^WUES?e+|!
z6RfBn>M9Xg_%yE;oBq7k)pvyB0!RI_h~D<0R|UmZEE~PBT1Ja0)fP{cQ!9mpy;_y)
z`f%uX8g`$caAYTjkB}LKE}n@eiGnHAaRe$XER2SI6_L_ym+#yBK(cOTcD*P#P6+&N
zm=+nwb<Aewja@eseyd&(lwvk0?h=y#g*JKGV6h26%{>5@%~9Juz(MQEEyBs#-9zQi
z)<k6<t5ge4#1N`#HFT-qOtcLhF%Xu7Q0gD{LS4-1voA);L|5o@f*nv8^{--uGS8i2
znrim|3g<YI_WiG9VKUQDyc+{6c6ry*;CR0Jk~7}vb=McX8kCM2x_0S+I#2=<Xvg>R
zRy`D<*3SpkVR<EO$Q|j_9-`8UzFfV1UGYT|%PyzbY=XWDw*ms5pD|@}(z05jhTXy)
zGHEd{v`&IVOBdieWa&IK)$LqHr~x|sZX&hb#xrN$T8!WhKd4~72l%?bnetcd{rT+6
z9^fsfC?G%2OwKp9Vb(<~4KKs9EKRHdBR!>GQ{uP6XFwIv9&f1yUHbaghhDD9(~sk|
zD{e^uZ}cZx5#*q`smCOxLYXA$`DF;(X||Wn-cjJ^Mt8<_NPetqBS&W)9o}Xp#Ztj|
z5`U(rd~m~<74SF=3fF>|n2Q_qp`WSeX!2DwG=a-wbAvC*KUP3rph`_Uq8-A`*<n^w
zcc@9K;0D$nz#GnX`fsWNnD=Ld97A_C>KY<sm2glEzKn2jC#&2PkBXq-TF*JvH!<k@
zUI>~ZmW7swS{0$mW83OFB<E;;XA3`}Gc;p3-zS)A?jW~z=991*Cu%Venvo;VG7fX`
z*Y(ZqS!EJOw$yNtAtLeByf($@XCy|3RSoueSIGqvPB+sR8)MC%okWvqK5;_4O-XNM
zB4f7NOItBV;)^}3cx|{zEp2Zs1em3~g`NGfbeE5>Sg^Wxj9g=o2ErD+L6RnRZMC_J
z=k?nZSGrQ#kAa1S>!lsANr_TXuNZngRuhaSBYADY>48T@pM79ygg#=c|BNJ8br9OE
z;%fC%;0Wnhn!1aH(&s4*#wWh6TbbQRDLdOiFpgadddD$$ZWeLE$;6gg{$Pz=9X3u!
zR?SFOMa#dOnV7wNXkg4rqsez(tgYt(UCGI%LiXiyXE&=%m6DOgl^9N=;&4|TQZHmJ
z<rvRUi{=!iccYEHu(6zI%%=_*ZJ<k6dT3H*Ds0?qfJ)2Z(P(}O2HP7;+qr<XKNV<K
zObfCoV{2dDyL@ymLDxEvh|v=IXsjZUO23j$O|gf2F@z|c-c6oNAX;*@r(~TJ@66EB
zc$(_bFEvfJ&tM(*UNsJ|hcCsNBIG@EFLq*DB@dfxnZvkFUgtJyt32O|i-bFsbq=Jc
zz+N^?I5gTu+R~Zvdw_KJ{^xNHmd7JVx}-kytHJs%it_ts3w1V$k-K5Z;e|4n=`WZQ
zIhyZ-&%c{@ztakn&B(yd1sKP>Rn11owi{Zl6lXf;z^`rjk@nAo*hX)WK2yrPwFH%+
zF^!nz@tm$XMmJ1ELogg@aWu3tsAB5`X}Nw^L6v%nx@gw7P76NdmApGaH$%~*tSof}
za&lnp*Lp;8`#mI&RGasTK?Ds$?>IQj{@-SklUcJx_Acz@%%O<R!9hW(Gp1qL(Y9u5
z5FHhSuc*33(dH#tDQ{_$c?QuEiF%!<z^RJg>_&=>Vl(j80*XPLQ8E#sRLLt;(pF2(
zW$MBPs6j6Sv;d55uih0>Xql8xwnez#IC0I9JtRsMcOj4d-16S125u3HMxW_?W4p+h
zbGD>7aHxW+K0gu$tQES{W0Dqwq1oT}7VvlBZF?E1OQE12cofuP4M88fi)WwVldC;v
zvLkXzl+I!TTT0j0Z)p@{bjqL{Ix^{IeP!ORS43Zn(`f_;b5Oc}OIR<W9kd=6e;2><
zCB$vzz!Y=V_FS%``l7DljW$b6Y)G|5kD!yimQ><Z1(_Bs5KR)LpC(D3wNkQ)b!{u*
zidJfKPYnsd=IPC~7JbrT60Sofgz!;^wz9gdE*barNS;0$oHw1;*OAg~h!S7UVYS2b
ziO#Lg?^2JfI+;;Qc#i@#*{q}JBptnakffJ*FnYashO#lg6xULMbjv&ey$-pql`0_R
z;e*SMJK{}F!k$TOn{pwfh(uWP-|s87H=Xmct3Xhb)r8o|mDgr0EE*C;>>*v_kEo%O
zH=EDkb6|)m!pEZ0aDxbelr;jcu!}RsWktfJZ`A6Wh^0F%<B_1KcZbTX$d(5x;r*|K
zVb`Tbn2fK*dj0MAo9mtGr{II5avI7bhf};YI)oGSR^`->x1rT=O!AIt!&ZHUIRbpq
z-ZTqGQ;;r^u+yt0F?v)mBb4;lt0}vZC3}Dt<2``Ii#C)i-%s^G?m(2{ZIH@b=zV!Q
zd|>~S2!cyjrPZ@|hQ9CpQj4e*A^rP%fXY3<4W5&&dw^%Vzg`F%%D)ME<*h?fah`s}
zkhM`+?QB<PC@#<3je1Ba1ChS$qZ%gXNYU*q_-(!H)FiXB8KL<mrgRbXkp%JT!ME0E
z11Y%}z8CtQ#jySi5o2BV@VrL7S`~|l;`qDcHe$ZyD*vAbX3;WCDRadxOO!gikn_H3
z%+~_5Q6#Lmp_Djh8#l8FemQG4Gb5VO1c6F}<ZBsDEaAxh_oLz~dU$;a!qkRSvCy~`
zYSP*|v#Za!1ZyZk54CK1sVMuX-e=BK$x;y2Ta)QTtg?Mg#37Im>nAEMefa28Chemg
zky3C4J?1n139fsUJ8^YR+onJrJBGH&ULtrb`Oc{_L0feWkKVC5b)`EFm*#?0hS8(>
zqb5k0NuT|UWJJD^2xZMR*DsEHy#F~a?!h!SuG^5P4{>d3T#h1xp4FbpO##PKBCRxB
z1sV$-R@7q~10gl|SpSEEe89Lk7))Gmy?D+GEI=3`_T0lN^VM=4e~V|*HM;YtiKPX-
zU^{sC_M<&Oc*VZ4B912^ysWa(v~IqAab?V|;fm^dF(vaa74!{F8)5cLJ5XAPRMs5X
z1^(O=Er${+qKcOKimDwNev-Ly!^bd_2%71;FhvzMR$!j~qDPRA>5(J3R$sEN>J-nS
z#-=e8I$O3vzx+xkAnHTsOIpC-%bmr-u&a40^8I40#=@XwV`Rv=BY?_lf48%LyZ>wQ
z5+XF<;E<k@mY)yU-z^=G;Xg#rhuhB(s8vBJ);Yd&o*+Txr>M)Tt<1_#H{}p5GA2>+
z@jDK-^RhyMwSOjD1x+WD1G~;Xsm5gnne73j_5h}M?$M9*S6lZ7?@gTrdbf6H%$~S5
z;$pj8yJ@nO@9y^3v#&IA(5nqI|HHgaBC(nc!K{>D9{%}^+hEq6${aXP&yHhI6Z@7m
z5rUcJHlm`(W!tVqYdj3w**{0}z~&GA7gbSdn3G4<hX7ese{1RAZp+$mKb22wCB+Kb
zt-08I-XL?^BAe)*DIRM!w~|)c0%YazJr}az@{AW9I?sEORfZ=#w^$yCZ6g*UNv^+d
zG7oktqUn9&XD5?Dw#An_wja8Zwhj+VZME9`BIvo9&@XslmR5U*BY)$Q#^!zij@xnZ
zP2h5J=K2LePd8`h6neJsLxGOrYun@d(KT>-*^`ZipuC<pF7>53xp?M#pMOF3NulI=
zO@r#pQumWA_0<z)u(e1wi-0MSN9nWbSdM{zSNVTp$2M#Tc2q$S@93>yt7ChBrjCnB
z5l^E^SCMEH%FHW<Z48t4Eb;2}tk&>(_#U9|Mx&wiz;eKALZPy2lybGCpwFH4oaSwQ
zbN;V4s(q8>c9OReeMTU_Dv$cH&j;GpukC9*+p5s_Z<^Oz9!5s&SnmNMC+7gi-Jbt#
zC;$Z9JZU=^!qmW8oNmraZovZ{vnn*2(IZ)<ESBkQsjb+kV-qOMT)V#*Fq3>MD=KCo
z=r{%xKVpWd#5!O}4jq*X#c@p80%6e*7S#3qwcc3;c~e8<j6>0W0$5rmg;wn2{#_~R
z;f;LXL{}8f?QWdL+P&UFOGa0v5V*`$1GOKc{tEL!iHD4XTZUCDeC_M=8rizYIw@-<
z=haamU|vtrd-!2d-qwMJ)eKoKWukbV?-#kHni*eA!#D<1jk$6+yyQ?{nM-xPy72J*
zFB2$~8nxGj<$F5)Z3$D_=k{$@XRQ%FlppjN@5Lwt?W!re*2=963b35sBW~Hz8R0rp
zz2-1|<325;$?u*1qj<GPVdYI3?|oHh*=_R*g$iXH8rygJ>V`6{M70Bisf()nFn5a~
z@~!H1!=RGRDc0_>K;V$sWJY&-H<7>4CesOjRypfx$}jRJ_mi_HPjqY`3z`0XioY0;
zN;{A&%d9nzn)(bWLK7KRU#4r5zzRgW`UhZ&EWAPEUhiNM_TEsjFOdi<ES7?u<3)dF
zA@9wAX~|v<)JBJd+XZEOKD!Una0}=?z|k|$T2@A%z39uw*TQ_-bo(d^K1zLM%{V;$
zRYSLYb7d2S8WFnxk``!%^lM?NgQnrO?#=^Li}y(G7x#=nOtht37lkqiyERU>Fu)>}
zouc=h$ICp*C3D{~PW;}ME+a^A>}<25lhI6(L=q0lkT3MFrBbP7c5sOGIo-ov32A*B
z;6_6_T%m5}C`BN4#<ku~Um(kCh*s*3s8F_@SRS)byln6}pUFa|@#wmx7nX$(E=;o`
ztt_ea;s`4b^t~KvvRk5(+sR9ySMkZMBUiSylp>fuR9~wzFqikYjP<W=C)*=$cI}@g
zEp0Nk@1L>aN)%WKcPbx}lKlilN!ewRn{U@6ZxV7bk~@fMg!}fT6+dpJwt?7jJw{|~
zL3?ed`2?dxmaRW?l3brOjzAV8{pZ#M?elI>FDwd(n9UTu?ibE^AdUum#0(}_W+vJ7
zNY;m&+>e-R9Z#qOH2%Yc2nP&q?*a1T_QTe?yCaw1;Y$~G_D81S#vWjQr?JNwTULKw
z@VxG#$VFkm@x`vk`vdLp`_(&ZhN-5U(pg-%M_~Ds^^48Eo5ZqwD`-$<#nbiYj)8js
z$iUjWfyq>-ZvLE0UP5I)P6W%yY&I~=H=<x&e_pYg+;PJDm)bjLyf-?ACQUwFRhV8(
zFKtPFQ&UyuFkRE4I<<b`s?V1=lR)(a?;W;ExumUtf$1%ds)TgGE3+v*Z<e}4QR=H3
z#T~0BxR?Rci(ctdf+t;HJCD*MZT=NqXMLte9-gU=Jt6$izGK)VAW`$$*T(d+qz%=e
zCpnV;uJZrHj`cCwNxcZq7j8XYpfBd-dq&I-I$DT`bQ)O90Yf$URMi7=9Y;u{;W#&9
z)S*4VXUDjN(vKT=w)z=%tQeD?T!VT0%BCc{wR1KRCj3FII|@vBQRc)Iy9$7?h}~}{
zMFM+N0%EGnXFNj-2?mSGq#K)`65q`EMoGSVx>%(&8C=d2ozS~txg>dr*?at^+x=#@
zD!YmGM_u3b9~axH{3FM~@fTyiC+Ymi7k?~P>qp@;zvnx7SI+!@Itjrg(J1Ard2@j*
zYxCGZ0(ja^*JbXjSD+=7e=Ft>V2wQn*}lIxw%7yQ&d;T8!G~w9XAa#xc;PpB{c*AR
zv<VBOl}_orV9|KX+>!m$j&@!Hxcjct7IRSL?_HbxTuS`F#M;@Z1ak?~=&ASaw>rmW
z(=3X?jt<N6!<GA!t~D_t^ceoM6y$B6C3|RvXJNCkOe-z>O{P=dm^K==4_#VY%#ua!
z#iR<jn0V(;`-po-%XgQIplrQfV+o8?h)!$OJphl=*5k&TW8HdZP!dCH_wsA?y#n91
zWKsw`D=8LZEEaAEl+xxC$92id{pYj=OJ4}Zu=!(~&D?CVOJv#Q;?no?mFAh9PC44u
zWeT4MGxCQNe=+nn)c4k5PNpjQ0<n1p=V{p3D3VfB&G;Lm{TG#ul&~Ay^<fjPQk*vK
zOm)d#^iGz|0xsy$y#}Pz2GuM_3^TIW)}qnD+)1h~!|%8Z-8|K>N>Zz#^Y`;^6!Q05
zbHf+)6UBr&1I%!?1dLqu;P(yzoM;>Mn2AsEDuy!@(VtRc548=5xvkNSgf>uE-P%3W
z1bIjW($Ai(-aeR0bEXiV*wE76!w1iHl~;M{<w%=Fl-uZrYUC#CE8=@C2Nh5fj1E(U
zD5nrBYj!PSwr*x(N*}hflFOr#75X#gqPHwpYR>+?<+BqAxHnf;0}PeMG|KccMVV?M
zJT~i}C36`Zd*+E|MwC8!UeqJw?es8-Wz3Fn&fdKYyo96A<#;~)?JZ@4h1~Je$o@H`
ztVWR|+qr;q8O8N?2q1Ev#WZ4zTK0&a&AGj0sxz+m%_BH(6=9kiG7W8oR7Yi^pKrsU
zn5_@dS|u?o_;A+qc7s_IGs%+KpBsZX?#yuF3+qidMMEgrWI+(Fa&T=0S5(um2QezC
zS(rIg9W^UPouS!Pd}?pPp}b8&ml0)fL{}f}3E_*fE*(iU#J{j`_0&g~!UtuW(-LvI
z3Xa>Z4JbQn;!aUv5GX0{l<N$i=dH3sg>X@3?1~A##J8)&oVEuT9bb8Jv$S!+wFp{m
z;++S#L_e@EO6yV?j=>)pq->}l!dBrJ?n=b|R%eA*1Nd3-&ROn}dT<%~sGQ%ow3sC&
z4m|>uD(?Sn79>dpBU?i`QNGIUdUC6#gZxoP)J|uzI)O5jEEj3&Z3}#F2HOC(t1f~T
zqRBz0lGO~GMcYwlKT+pT7j)!~vr%LfK1|ETnbsq;WMYm<N{eYe6{XtHaZn55bm-VE
zRZIQMTr)ZP+o;^oV(=L;&;^Hi8v-2-0?8dILp6kDOn`8COw7xU>CkA2hFHQ^F~^Z7
z%Z3?!ouwHe&5|TBpTY5pt6}K7e~#$ieoxR=(UGg?cZ@YekW(y?DU&TC2LSN<Nt;tJ
zdVU1xQSVhd>-;PUte+@EN9_=5DgzrV!6yFGq~!V|@^=nTxBCrlA7U-Zhg9lIlcmZJ
zyiVv{PWXCCF8-f6%$Rqzek7gwk<VuO$?+eB@BdDTJ>q{diO5{JG#TuCBAMGQ8x7h=
z>A1#*T4RTw@I`4Lo%F^%w;J$2q;@Fhx;TYeGZJ2ka5tGqg}j`miB=^mX##oY*!a&Y
z=S>ujD0l^EI0cD+h_gIb-#oXO_3ioVp;qE>_$7XsXaCG$l`HgnQrM4t(FZ*1Jby1N
z_9LGWd*gox2@8D!5K5WTpb;8(8*E?IQ6sQ&oRB-=ee%;ecCNWQMbzN$Ao<5X8u%~2
zkAbq&jCUEkX^!@Y)r|74^3G!}$MRv;`ME4KJ=297jMB0Ryzym3G&>roUF|EWCXY&Y
z>y?R}ae`4?wp61mC8KgdQw!}drD^z7FLk0_@>s|RN_J01<{YfkhvVts^qc_FiP;4$
zC`gLJG<*|&h7X^p2Fe>xV?j1ym>uG#TLwe*i(5M%wx2I1w_9Ug_%i)vHX**)k)ID?
z&O(&%_*h|6krs}-_<k7=v;7k)Kz!(=KC#g><>W&PI@~FdLXB7F5gKfKwj#D*p90@P
zq`muuY!*K?^){AH*L&BkXJb=ZH-NDzx|`(eA>OfbjxjWn(_ub6ds5o|Eb_8drul?x
zF3n<IyOKjR#d5qtqsmB_t=%zSSAW{|>xYI|ok%>|x7ebW6o81dp}JO6OCCjpYywJ(
zx*r(Nbf8R}+qN1dhQK!cgFwrfs0>71gb-!ErNRT^dKBMu)HSeSp%ZE<CTEIf&K%b1
z+Y&%O(?F~Hih1~>#SlC#+89y^J1Sj8F<EQwC6Gos1=<*xVG$Yp;i9kdU7Xs!X?HQ?
zJ!w#IH(GL0%F%p~U-xZR`5l?AfM1nMwiA*Ju%Tr~1ab?^Z_Dri5iK_NvWfv!Sqob3
zg`J(Xh@f|RFM&C?t!^jzot@EW+sX{sN2rUD4owIkjL*2pnHV@Q6iS+gqCe3PY$EI<
zYPaD9qiVyE_R_<B1v+A|Lk@YbSryE9Q8^Gf3p&UdYl(l|nZ`9WcrGi1D&B2$Pj4o`
zUe}KWbEtG^qfaYta4S%p`8rnzSKH4IFz8_6m)xNSes8@^0-y+L28g7_#pC-VQ)_@Y
zZdOoekzH^sM!kk=aV4Fcgs`>4OAzYjY#}DVtNk7(q9ceYU$2saSS{z+LFjc}S6~bu
z)Ir?K$C~S?T1*cZDo8C7-Q4(`aI>xWj&o^~i-nXhH}4AH1`)eCB~e_7xJ>dsda~G>
z6MdNvp_9IA^@tXl<Gc`&qN=I?;BDJBqF+i2in_JIY86b4Ve!!pUc`ol(;_f_36r;^
z?k=EUpqzd9)Z6hT19-*&6xUft=xU_0Jhe-cu7K}!(O%=wD(+Pk3%)5lNM9sls*BK}
zewxv!kK|x7pcYiT>xDA!WkI>e8*pqj>7|n4^TMqMS!)U=yqRm^2jTKF*c?NwYZs)V
zu85=pJ0X?%VBwX*;NWfUi?p;@z5Y8}wXoENjnCr<R(B9++{l;CVhd`!GofU$Fpn^u
zsj1uf$r;-9p)@6$5t<IopVK9c;`6hNJo+i4I?=`RANLoWHl(*i9Im|61bD(xtUQ#^
z@~u3KNek_go5KW)+2r_I;D_znR8_LtHOL*PLku5Te=(}#n<(AN6EuW<@Uo*4-q*0L
zL4Vb=Z1FzR*y9}nZfNjwjm!CVu6g3c|7#x&v({}6echyX^q^sYftL03rM~Shsas+-
zRMzjjeC5iuHJfcWUOp~-f34E0je={EBb&FadY#;+*?8#eop)N5+3Gt&17p_~N4zuL
zVmd|Gesjr{k6I6Qoz0#Y1@zsj%HYcRi}qgC$O#GKjgp=ecELH)+4{kXoQzjlo$|nw
zzYdF?x^B6ud#g=++_~_+S68<By@{Cqy2UeV{lci(OY^g}pRDW;lwCDXS?Z4Pvt`;(
zLvOIjp59sN>suQ0@of5r+nR}svY)J4JuBi`<b&+X$2_i{?7Oa~(VJ(Hv_o|ITGpjo
zzMGZ4%3donJ>$J_^nI3KE4Q5+x9*kzZuTwH3kR<7T(q5c$HL9gyI0><+;c7bTlnu>
zmkEJKPR-7Z4m{_f;Bi-GqP@hu<622wE4!*Li<sWkx!mnGG2`j8_PxT<uhjQ?mMzLP
zzIo%=BqKA+ejmYdW0~l-t9RJr1h3~U|God8pNjIjyZ+zn|IATHYT&|MbTg(}z4q9&
z{OsgouD`u5MJ%7B5|X^Z^<LME<(~qK98nqooT-DPiICzNdQezYX?@6Bi6gf*ZV#=y
m6I%aozSz1{SC=Al`BhhdBWjx@o;qNys73`xW(ctVzX<^F$n_-v

literal 0
HcmV?d00001

diff --git a/ui/tests/scans/evidence/scans-controls-tablet.png b/ui/tests/scans/evidence/scans-controls-tablet.png
new file mode 100644
index 0000000000000000000000000000000000000000..36b6013b8ee97d75a8c8ade92aa20709fbbf5e05
GIT binary patch
literal 23298
zcmeFZ2UwF^vnU)3_J$BpitbG(Gz9_z0u};>YDhxpC{;oc5<uyetwIpo1PBtE1QJMq
zV1NJt0hKOIO6Wy;2kFv(_P0Oxx%WBWJ<mP&+<Wf#Kli+Op1hN_*36nUGi%n$%)8#b
zuDx%7bGq74ZNPy80KkF$4`8nsa2s&sFvk&&!$*#A965UQ$gvaWPMkP?`~>%zv!~AS
za$mT>%gw{XCn$QEk6&1ThvygRUxdZPB|(xGFUwq!k+>o%At~_(kpoAM9zAjF1lNfZ
zToQadd=mfeYwsg~^Vk9Up<9Oz2muaq9yr8#V6PG&xX<LF1An^!f4>gxb9?mI!2`$l
ztBubA4jejo@bC$aqeo61*>AW%tb>0v;5^U$Yt&ILo~t)u2xLpE(0#k;HlVzs=hH|A
zuP_Fil6Fi1taR(Pv56NsH%|m^`|SCr{LkM-N&7VU{_O4#T0gHpY3|o4aPCX(;Gv@j
zISw5@^k;(u2hShkjO6+iW_;hX<!Z`d;LT6pg`N&^aLeNr8H);gJ%CgDEe~=Y;sj^{
zHtzl;`JZt=<jZx}TI}pC?b(3P<(PgoKdyJD&OMxAT2TUr!+kRIn?KyWa-f{f_K91^
zfqUp}8jCkR9@#BH_BahlbfQc2x2g^S_&4WJ&dHBct!Q%!3*4sw|0(E_+pV1fzq4hN
zk}4y6EvqIiH<nfpJUiRglZ9dS0(nI>e>uS7^5(hv`)GGe#zb8#nMm;!S`oTj`p-P5
ze-UZD5@Vyd%FJ|*XxKBp+2Y$^HteNP$F++U$hOJm{Y4nila7Xc;^hggDa}~dl*tHV
za;g?MtUtw_-uc@AVSlRZ2taxDZ(7s-Q)L$bgMVs`?{6x5ckfW}pIUSIo5r6$`OiVu
z47)p3dV*;-V(sNOPMv{F-o0`YY$;^~mj)G^pFu!o40F!`y3*{Nok@`yVb`hTG-}c_
zC%ll~np2#{Kh;S7hjJXF;*GS)CXYK4b7g}uD}gT!yp9_neh_Kd`Z2Up2`VwD>W0*l
zzfE!e^|R^iyUan{+ao&_Q>&WUkA~l&j?N#m&q%s<&n}IiBYdHnf*wQGah|<Vb^QWz
zXxr)4ti0ttYQ%z+WVhK#1$)e5pZ;q^Gnz4(QR2sXvi#BeTE#Kw%ejJ{!VaYrDW|Nb
ze36rr=%q#Uhnb{U&5Qx^x6RsU6OQ7M3)!6~8>K++D1l{WeC_^y)l+xa2qS1%q0AHC
zkE#|OM=O1Z@o89dDRO#2qlf~#!f^c~uEstyonVH=uBMo$9<$YTmKe#XSbv<BWyR-M
zhSM_ZlwPux3KXq(Z+dd&6YHhNs=+*!(=H45YWZ~_0)at*bCtwvU)P0X5>t7n_4`UV
z4X$5)B4-*dcsJTRzaT$7$*1qK?)r@}oU$h5GD89BZn^yp185(en;Cr=vwNp#JF3^)
zY4Q3-z;?dx8aBC}aQQ>eWJ(sx+@0Gi3Z$e$lT7BnMC%vP!jOc<<AdHQ9GD{Pp8ekF
z$eU3{SGhAeWsl=~vj>O*Wnu2%G6oY1$La0U*NF8TU-+xMi}_A$IFWVktjS1q3)^Zn
zzs3R;T)dEig>gVY-I1!^Q#M&E;k1%&SugG;zv^x@)jpKA(%jNm8=6$rJq=&<tcb05
zkO3pVG-J{z)Vf~?eyHj?tbQ8=DQ^|;b0GS(UWZ_*Y5d6?pRgCKJg2H`D}`a5v1S5Z
z%+Yk;8f;3;=6PPE>xD~w(+!DN1kJ`=s?u+P!SAK!^+~z0V^;EWp*q?jd5sLdhE9>5
z4>N^vN>6X#lczX?@IfN>(R+Y9VJlIKhd?<~@Syne^XJj!WP?rj?K?O6vo>#+rEQ=4
zjhHueW;5#hE$$wc_%*<zqTc7|S#i|8mz3O#y9n(X;nasMGzIqr*<PjvrN2a>`E6$S
zcj>n#INdm@ZsXU*?4A{i^M&B&I&BlyfwJzeS?y=82=0_0Hr=>tS7PIdl`*!8lNx&3
zu_30ND(Z!%t>su?$EOso@*eHN*ZY*T1jL$I02%YHt6tFycy28h8!{ynFZR4=?nCWp
z!x?>k_<eoIVMR>i{SqCZORu0*zmAZ|{G&z}UO6Z#g)1TI)O}ig|G27hh1F>_Cs!bt
z6Q*}Je;z{<Qh5#WL1!bhm+5-#M~<m(AAKTst!(Jd7eCc5nW)kR?|P*Fw{UZ|WlS9&
zOR?OZekrOUSc)(kErIvQ%J+;k8#1Dsy=3Z>l}Yw-f%hDqyGsj)ilvh?!p`;&a=?i_
zzWh2u1rAs*;%m!N>0YM%gaMhqlrrLwWv*AnVZ~uAq!vnh(V{6jZkZ6m^81+f=kk3Z
zXw0d|!a0K`MYZ7uMy9nd$?A6Vci@s=X?&G9xKq&V!Gd=n?zYw`a(ia6&x_sZ>PZA;
zuFXz#-37o)f<Ya-tUbWA@sQ!%cBaMV#2$cpBf}kmt=N29-s}AGC-i_5;IpsD=|0I<
zS+VB03>v?6J9O9%<1LWMFY0R4yBvcD4?Y&StCr>YX|~At*$7;;Dn?SrThE-ykn)PT
z2ld+M6zL`CthGFs&b_bZws6jt(8KRRe0(o#bOWR?9FsAIw4L3Un>_T}QM-`Gs+CHa
zY=_f=Wwg1|Y8Pb-ZyJd(RFxSbE_qtrlXPD><F~E%!?t~<{eL6qr9MClbX45U$BSSx
z%h2F%d)A6W(~)aRSwDQrhWzyc@?*X(BCob}sOMvJrwt^}UmxU$>nUQ!QkyavO4RHZ
zS2#w_4`0Z5ATiT1Fx{R?7>+iUzDp~S5uaVbbkT4b8AmUjrVP3CeeFbi?QsW2D`M26
zkT><$D;qC)ql7@>*6d%R&JNh-i+1Q4d?GNlX(p<1QzuCDJH@^ZOc*>l;nYVTQ~x8a
z?L(F2!+N78dWbyLq&V+K2m|9al2pDhI-S(lrVJuEvN)~ZLtJ@v&0W=mhIRdl_njcI
z|Kz~f8@-!eBlXY-9an^P{>&l#kwFp0rEC;ziK7>lij9MdrHj3meb}T!Hv_}dHEa`n
z{1cem?;-Bl0jn_SmBoUiQj~DTQYA4nR#{j9r5WNEeFD(s&Qp1YsXEy!*y5J$#K&}o
zigUl-?MO0nm}wSX6cZ?|adaEdQ?DwB4e05FtN&`n`qLRcjRpWtt`huT01G09;JRxt
z6QL|FSCewlI$u_-lYE##($FLCTNcjt$*9ma-RwHf*IJE8q|f80Hvk-Z<x8&z&4Z4?
zWv%uA(T<yK-*3I;H`*17UzO23I=2U?ga?t+zX8-N^**h-g&i{U6k)=2dv-3V#%0&7
zWUQcW(Jj}e7_`x@IKMhioul|JH(u5CJ~P$3WiN1*p%&>`A9E>vYY)a^bCT}~NT?q=
zbkF6I1hd^pR$7;@M;Dq&n=<JaNkHuHTy#<+1@j;ngA&Z7O7HlkK$&48zJVF5i*84M
zZ5KWDd$zSdZ<t*{iMV5b+<3;3V@hM6A4f>J#vXU&b-b(H?mum%Bc$E2nweY2)p4Uw
z&Cff|eJ<b9q%~ocs=q6$G`76dGSS_1#1xEvKQ@nV0d~-uJzsXp>Iqs#H@nI;$BWbU
zjnu8j;m;ZT$9K7U(hx@yaYja}b@1-Gj=&a>HfkBeE9=npVSD4i4c^%T{}=NNXE#JH
zqA47eX-23{SEbP_jk4YWvVAun?Mm!VR{NjO1MVAtqkMYnRois1`9hWcp`f9a&E$@f
z#k;EX<Fq-GtowrF>(WpT%5kZo7aJ3BHLhh?VMmThPCHxu#HaA@<G+#%$)A&mpOB8_
za4TxxW}MhauSjDD96C*l=gg^7Sqa($oCNskoOqP!-TLX?%Rv-S>;1lXW3sHWTw_%A
zk(<5D(<f_=(euqc0(kiRfk*>El2{!a_7LYgl@4{V;whb^^+lRzB-GNI)0RArX1Cgn
zS2=ym?Q_Q>ilycZsuvGg(x&)wKaXO28G=NSIB{i_bZq6~P`tZn_8XwFjmta=joz~O
zC2~nxio0H@UPy&242e!v^z8&2+F#c?u&{cq{N&x?Eg6|-#n)yr1!Ir0{3BsmG-`Ux
z>rfvoL(w#;P$JKk-!kg!Kok(x(rZ_7hN;mek^?pNX=4%jE;^8M>LzE`a<aYyj<&>H
zYd)*zq?aga6>)*<EV<Nqj6hwzvnw8E?nTil5Ji{7ZP>?6xxwp;?p4Z^*{XV_7OB#E
zjc)328@RCT?BWk`PKGw%B3hg0uH88L(5V=9`xB3FfgYUSWm*=2uR6Fr!N`t+!rSB0
z2Oh=p&&iEeHwM(rRie7SG4v<IbSEY48<&JurofV2<)rkNe6ayHeLmDfMLUMzh|N3k
zr&YhKT1$qHYp)(yDC${wSaGd}pFOw`T^J%YLp1|ZR4#4sS0QwS^LwaKiWh3YN^{NB
zI}G<Lxr|sMO^qF))Gr&&ykej~UEK3JPR)KKnLAfl$OH^jgelFT?c*eu$G()&CTw6<
z9!a`5)<CYFbXa`S*aXt}{iWs#(Sc@<3cf3SbIVo^#o4-5&RIlr=dLWD=mng9>qP|<
z3QonhGdW@L$-Yg_UnvlKN6W`xFQnmnl!}SeP_hiy9$;z$iCzUVl0dj2gVTghCo|s9
z3GKSeIvFl(;Js<9UII@5P@|QQa;WBcdEMYN$R_m1(-_nWwcKDZ^f=h2m9nE8B=U=U
zN8qo6#zDut0xo1zq}|*zE8#V#b3^ORK$@HEaNt}x7uj;u1+z+RGWoONt)m6-k&-jA
z`PP!M(TEP!YE<ryks6I0lZS97=?)s8M6p1OR-HQc^liBp+c(iA-4nQ8tJC^nq3*~B
z9dg&@J^jvZ#){TYUr#tNjj<aydw=Fc3bVB<Gt>DV)vTl7nQEM564O{E1Gi!&(33Iu
zYB{#8`6;y@TdW87q*k_~`kZ^_coDZNwFaSFA}y9l{g>RI*Wb7_6S62HS`v$T%WzX?
z7k1kb*w9mNyxy0JyJq=!jT*|>x_H4m8A^NxHP>vDFAV91Ik+NL3e`w93%VH@J<bFX
zC+^JFa7@F(*4K@12Nr(tp6l7Y`*Hn66~ZUeo7A;=qSvdnG*`MjvC+H|q63~@lO_1e
z_cA$876o4%+8+h`vucT;nwyWCE=84vCZvdHtK`@@zg?>W-N{UH*&#P#(U(=8s29KC
zt9)B>q#&8oxb1GsP_5*p7}tP&s^+=1Vii6%#2r0`E>$Yjh*k-@C?x~*<`FYTj}RV6
z3JMy4!LBi0?e*0v=3Qx#iZMW5ut7%LD9*R`Z*B_!@OgWi+c>vxTODV*8GpDw{!+Ys
zYVdaLj+OK3X3OLEN1ehJAyRWKL$lH~ZKl6k4otY>8GC@<D0X`?ipupGaNu7yGkP!7
z3YW4U&Lr=W52mnS&1a`=_W*8`i+_Rd-0p!~tgNr*SA~E`<b07SQ3T#8wW_cc>*K}Z
zf~cckkvlz}+Sc$i+;?O3I?uNDnHPfm3fWMxL`$2hLU9n2sE<-;sZ)u{lmi0%<xX8A
zG(OH9Bo$cxLd6H%=_%@|vh3%fbU3GHLgnQp7eAO7p88(JaasmHWF?4nnTQy=EvQFr
zspolCXuzwZCyvEVro+a6Ijf&l!(6{~R?aB9r1W9zN%r+Td1X&`eB%2%eYx&;UPJD*
ziL46x2vv6E7uo4+H5eJ0xs>*F5T3Qyl)u5DgcUhkKn{Fb*~r%B6!{7GryG~nVG&tp
zvOah6>DG=E*~oG8p1Q?)K-S30LX$QVcI9n~@?KpPq)`^1&!4j`R)Yvelx12|h$x05
z6m(fgJzNXnryikAo2{2kop^t=^&0l#{jrn^@4Kk3$$m%k-!ja*r+cN{&8+9H4Ta9x
z*REh(tx8Y6Up{kwQ5vPk!}YEJ1!`&QO^7nCq;)_*&BD1R69hk1!9ac^b%0+?1idr#
zyEY%w;1Sb&{s)HcD}<Yk&^50m``cUgg;0qqEGeWCX*m&TC{<CAMt7qZ)EW8egDv!6
zNC&d{1F;OeX@`<FONa#vp^{@&CBNM}`>4W{@X{~gbWkkM&6_&5WYc+{4g07!1TDNy
zscA!u$Ovo_$66iNdqpq8P}YCDs<5zD9|)$msUPmxh?!EeM`pBWGx_m_lJQecgsQ2o
z#}^Jw`ssf0m-h$^EVc!i`#YQwv{r53xLn;XTr@seps1gK2c;sh-KoUoUvJU(0QR(R
z1KO5ygbi`MlM>W15)tiJqaM<K!kL=q_0Se%pX=JlrPz}m(rF2r>DBG&2^DjbmNYu3
zjvXF>Ahpvol|eh?{aBsqHZLyaT{@vYIMn6JocXSg?4uhC8<DFZZ!dzUq4+z>zB@fC
z5^1jCZ2)i6Ht$?5iG!7;zS^Hkh>|^kMB{4uw-@qbgB#ipvo#M(KF!|)3`>?9x7|Kv
z4C@@0a+7Jzj`rC=U+BTTqC*9IH}%$?*5Vfa+?4_RvvrO=cH!w`I1uUG1`kp`z_UCo
zt>8k;oOB2q*??@ZwQomHk^&aY<F<u{Ex<J=hxz=Ze&aH_Uhqh(nl`?I3pW$9A<f|)
ze?3(At#}IJ5+rT$Lf^y1)GwDHs5$jz#XXFxgC*JR@i35_{;j%r!7^e)?^vB&oe^RM
z$$o7DF1HXt*R3Z>J0on|W0X`a6jxWzGL1`HZ|mk*%S2#knUSh%IRmBl{3|l|=jOez
zxlT^w8n?91jrIkvYIl`VYy`5k|4_{vq`Nz^JGD^y_Z>|AS&c?0hMdXx#C<JLrumsK
zZP575u!-`G=-Rc)aaJ#EI?k=tDkEUW#xtu(RH+muvY9WF{>orqG46iSM#hfizIV?)
zuDbTD-sXuc-`LV13<WMA^7&>jH=c&*b*DswxiiUp!WbI^pavR*9Zfp(cfSSz9HM<P
z%^bDX7{oreesAIjMnp{R0kRVfje29-sb8L`^+7_jeM+tqPMxh$!UgN*mLXb*>C}YU
zjCO;By5zy+!+?X#iK)RKq<tqw#{UJrgZ<fq^2}OC)95&sJz4so1imKu#3sGyL1ovp
z(1>Y!9W9~-BW~jF6ZpjRu-}fHLvm2k&79UXv-PRbgEw^k4)Oh2aYN*vsfj2VT}%-%
z^u`2<x&_7NHkTXy`hz%}U=e4)3rvesY4VB6oo*JXpFfy*J970r>q8TU7C3tEKnbb<
zfeGjY(;+hutzV^#I~P4g;M(}=!T3T*<7R9|tPOcKZ=tRB@RK)xhrpZG^%^_ZpWHdN
z`X}`KpRq{;x^&JCuB?L5QkXY#jpa*cU|q<5q|H3z%2;k~knv}R3S87bIc?O)q*80^
z^|vFVTNa0+#)~g3*-$gWwqW}5W1^Uf%Rp&oX|wT=OguACm*f3EwE_HVV+^5Xgv8Mz
zXI4rHft$W(N9YE&!Jj`e%2O7Ch=tQ#p>NOi$MB57@Dow_L31w@HiH2@K0RoZxO`>k
z8i^+PL$al#_=xmFTfGx>KM>2l^g$^{_@Acr%lU)qe}_7!{H3>6mJa+P{C8-7G5N##
z{<)d}b2Pu4H6$>?ZH!YndDl`veW|ui28P*DDXp4Da^_;tE&Waq>&pa)MjNM<{u2Cm
zXC&9wyFzk}IlrinactL~Qi12l#P5fU4jJ7g&%x)pn!qQl*&0LFzd8QDQ*v+zQm!oy
zHIn12rnp1g!y;9edh_Na{_@`cabVv;n>4kLyRbtN@5FPh{rco#pGGo#voi?9;qh-!
z=aEqA_{bi|w%`&Ul<@BR^@qK?$p)JpyAt>Q4Xl4}mGb;$BkGPzIq=F~k%JpuA20a+
z$h>IonvHY;rEA6P0lGrfB?Z^63Y6cUf7?^LMUeT}l|1@ISF9=s$G*<Jq$B+Jw+tP)
z`r|?sPLu0BtQDr}*YBs)gXtAZD5#s4D<K!JD_+{5BV`xKDM%`B@qrQob;*6=uicBx
zRWs%uzQR!n$J6XvrYH&WB9ScB7=dIA?LhbU8g9>_EX6E4^Gut^5QKi-mz?|U-?kb&
zyS|rF1|Lx>kW(jl{0)XXV`K&mrm0et7NkijEqo<Pq`n1SbM=UL(O|~pl>3>`7Gph_
zqWP&7gjaK0P+(B3GOXmmko>w^!Piy|VvF^RKP(>!T;Xg6OTn;O;q&?}oIWI3UoWo%
z10DC(3>+^pdO)-6d|toTP%DGGy?*je3b!Fv{9HQ9V180~W4CzP7!p#a=uvaD$geZ(
zy@UVcj3S7Rhw0sf+vu5xtX03UOPGu&g%-L16~-;w9E0vV4ym0tC$e#9^Uz)^(JCfT
zaSpFV(4MTHl3TIvk1$MzZ9O`^-XW7M@s4@-wrf@=^?q8at80XQ46oBlB+O@mxa`(-
zB$4MBqmOQRnJhf-39~h)rpDlPYwEb&GE93(qqbrMoFgrRnyhm()BW4v+0OeHXCxe1
zeRLSac%v0Z;qc}k!A6D$DnyF-Bl&Q2^vbM$girV9(#`Hlv=_ldM&|ak1lw)a%D|dc
z`hH@WZ*0=AG!8iR*s#3qF67WfcW-^p`qN<S6yG%Q@n~zCoyeq-K{uA>$g)4`g!%*~
zMbuXzJE0tHqxtks5tgx1a)jxR%2z1lNG<~5o@_or&~}&jwppd~gj{NB&$2YRAUWn8
z0K8&gm=pBoLfx-uk>4NCXhJ1=X!{RaDh1zTg4|LhR@`RpMhA<NtDMcU$r|R@&GniI
zZ&H&rti+e*K0}tKoT;P?hf+NIlOWj26_M>`ps(N3;)=)8{A8w)bqWn<r2qT*u^{`_
zBx1t>xBASMpv~YHbSs3~6B4(345qNCJwU%i!o?K3QcG84aX*Q!YaR}?WyQHcCLoZm
z@&|&lV(-o0GoR+8j>;H<GE8d6b;MJ&ngV$p7)^*hz`A@6Hx#DGRH#$edP8s)p!*N7
zGGlz%h}S21_5kT^LCkX8g(ExVQ!9hn4~Jj=_iX)#e*G2qg98R2ot+WS+ah~y_yR^B
z88$^v9R!%R(@GS#n0zrP$7G*(D2{O5%sitK7!~Q`ypHDZ`2TD5!NHZyhaH8Bw*dpl
zcHW5OuaPBYeA{D>w3~jLx^m+`B+&m$$bwQ55^kQ=J=1O&R-;ata%p3P2%?d%7!-lB
zrzW-6$2&I)x=ZY0`b&|R^gY0wkx@n4MFaSyxWH|d&Y5%1O$*n7<-V{*ZN|fSsi39Q
z;pk5T^O0$f9S1hQjQ=bPw;k*=*%{NRl6?B;PV04^^$rv`EZEaxJ?1jE3(xLw;Q~lQ
zQvYPJcI3ChvRqb{#TIVxL&lHPpTu?VS+y#@;V4~=Y5Ylvud2K#d+W;^9Q@!P-N`Iu
z(SK5s=#bf|dN_axFn-JH6)ybgVW0!{C#8R3^J7Vx^QDviGg8E#l>TCg!qG2$=exzA
zndMJPu%9fEugFgE={)<d!Tp!!V2l4{mj5;9{(TO`O1lTN2LP)dlJF`JS!um9$1#Jo
zo^TeY0=YjH8SCA&0839M*c+PA^@wuWyky>l)(a&Y4w;=$-SU!ZOmzrRwmv8*Kt_#L
zhXY)Xc(=c19OxK+GXWmlwjZ2<<5l}$+vEG8x!3VKXut28pXrP1n4Im@^(}>y1mXh_
zZN&v-VPIIDIqElu)S5(lvHZ?a+^QV##cfb^R;cus9M`F8up*MTr7N@jQ3VB^*pg(U
z?Lre$Zh|fb(g$xM#+XgT$42d@Ms1p|dck1uY+9oF$@de6xfTXifpe>cevWOeDzqu2
zn7e^?o@3u;%NhN_N_Y$$p$(HBGMcKt-gC|GX{_1@ZhUEjJ<*KyVJZq4ykc~Ouf)hm
z;A^Y1ytc?|tw^FFdJh2QPxAGi?b3NEb-&PhYMO?u<Ko<yq_{9~p<9U7h*jP0Z$Z&<
zI?jQY8^<HfM~(8p29)>I&$N)TM-w9(jx0K8M>B~g5MP`%A1c{H>%u!=^czo~T54@=
zmd;z9)s(4N2U7{Bt@tL1ou%_J;o*D>#A0-@ikx;oWrswI$T@9fAl-Va$B!cd#Uz@8
zm=dGit?_Wp{Fk&j*UW-|-={-K>9}inRdSfR@>T21cx)rra#(D;cfu(F5_a|Vj-8Q_
zkI&n<28X$YZF$=Yl(Ws<c5;jPBVl_pQ9Di=mFR}l>PZxdDGJgJxZA6$Un7;~avp+(
z+pf_2!<rc=`TpH?sF{;D5cK7P<?rAKe+(-3S^^uh3ZhXypUkd~aJ3O^N<x(-F4w3n
zJL2+0^?PFt%`Vbj^F7kuSzO(GxXVLih<7fx*e<>l=%IXi@Qea6R4{0*KhK2W+K~|S
z>_#0?PPvO>J2XQ?PR|(jYe+@3j+mvSG?LSkBFr`$<K$NKZo{~&#NxY6+gF0eOL2o;
zY@ufhw`K5B4*I!T5#-@yc?G?jQwmA(sxX+}X_Phx(h$DD=jWeiV9MYhSq@vYcro_$
zHBMpzpS{>dzcc;-yd)I`L1}KnMfKZ~6;xf-y<U6;x6|lEL&=aD=5F#DO4JItDyySs
z6yoO9+9t1(j+gLOnkv2?V=S(2$#QBRtvm77Wa1LhSYAae$*=RyYcvVOXt`5`Kq3s}
z^lZI|3DPHMA)%`?Y@rW#LgQZQy>IN!<lR;f=myqy7Ch)1geds9>)3~cHqnf;3Xm{%
zl>waJOeCZ8>f`E6OB_omH4;<b8P}t1Qqe&>mPVsLwYfg8Q>P#9(*b5>88$0<fxPBw
z#}>g>Kr8(-DR!I|Jg;*iWF_DDxG=Mt9UDHJdE9mFvDa#U$+d@P&(qRVwby^6Ns|5D
z7Rw%dvz1;ddmLG;8#k-JY?v69-w=Ps>b?tbrNnZrIvaX{ZkM<Ws|}0Cu8yJy<W}+u
zQk?VqCQwzz9W0g*lQB8BrFU+?4H2u_^Fur%j@`zX4_$PqEDU#zXvD6>$k)j$n_RA7
zBgRyM7CTd~T1#s=U22HX9pHrV#89Um(6Sau;9hlJSwdA$Jg@U<JUe^%!W^^DUMg+v
zPIx_(){aE%yuf8<o$s9ya!Jb7!|0|ps&q%~0o>cg(?7IUMUYFJ)g?`wMbN2%(g_ju
zPCc*GuGrEriQU!yyGe~!q0tkcend1vu!Zdg4&F|ePen59GPFlm{Ub9%M!Uj@=_*zp
zrTw`oZzy&^mLok$Q485DHcqeCvz?vL^eV!Yxsc2B$lhA*UlBS|M0%sVOC%CAQyV9h
zy}APA_KuNn3$8As;?v9@tYCydASa@1C1SIkb+7Z{PVj@}*zZoEM&qt)rm}Bn=@d8N
z9~<nsa9jqC*02(l>}ckNZ|N2#)|=S~TesU;R0`RDuw4wdrC9C(TDKb4ZGXrYHS>$O
z!5wt&W)_Tg3iIuVP9j}6gP8Cw7*1xf6R8oQ0yYsjX~ah{%XEU;B%Achu})X>R#a~l
z?fM(OZ~T$Bvc0{<n(`RykQB0`M%qYIPY65M<y(Jf^wFEl>5Tm0fGZrMx!7mfdn>Rw
zxeNrt8~rfIdg)jvjf!-A9ru?Ee9hgQ2;JIotWZh>(1mYK&H$!>EzY$r%Zn+nOng{Y
z;bG_XgH_ZJy9rHd-->wr_Az&ZgUZ5SnYyMUHS>H%!Vtz!k1GxdlyQTje?_zK`W<Ol
znwOAR$3#m~@O`6mcjddi@dR<!tcx&4inSvKuKy8BcE9`-l#WB=nEnF4!!<<TgkhGY
z62b~~*iCvN_W71HM>=jq%F#<->#1|Bj2MHTK#0{%*SJ+I<eaR(Y19_H*iND1Qak0g
z9c}rJSjYjnJ=L4-%~e$TX5wMNYfk*A`ZVMPy#EW~i_-3h7T1>4$iTw}+3>}s*~Dj^
z^RC}jP=<o54r+OXDPs2Pq2C`2pY)e0q~RniH~9HTV5=q;NlvFj$I5bZHJr$lMu#yZ
zziCUw_$^JShJ8Tf4J1EG$1__~yQQ4_Z;k3mVOG5Irs|W05%;USnk?-MHps|Eg^R0O
zDw_$KUKAG|U1VdktDm&L^>}GtBSwhEL{TxCMiq}tpeMmTrLDCL<*>LnD@)A~BoJd6
z=_A?E?3wPhtp1%{$AP>pg1_K4_hPa#2tQTIr7YJ@T}>{MMXc26cT~tPBC|8Lt4i;q
zm2b|~JF;z{O4RAy&ZC-U9Rfc4&lRZ{LI<!~Y`c}jcgc&Kqx9~{baHcHd_ohcfZfqi
zj3*w|AZLu3E^8rLCMGt+X^$EO%bHKLvZq=*G<-GX7l^cm+!-5)5nCEx6(SoGre_j~
zkS7ZxUUZMIvG{+aeD-)hZYRAPw`)HI?2MkkN4+oY&qkrMO(vy!vg5)ip-eB#BQn7P
zrcnEQl%J5AJv|sV{G%_wH$7!1`_xK)ps&4qFWSm*TO-%F!vP}D7%O4Lu$-VdbTVp<
zvLN(;?8;6TzjRI-x~ZjYxah+QD<9L_;eO=`Md9`8l%PgZT%cJ`=lRb*7fP6>Z^$lQ
zJvqG!oP7OBQKfPaB?`N?F^81#F2fWwGCW!*5D$aFd}Dx0AiuA(sYRLeLWsA_t(#_t
zujZOb{AhQ1+p#^aqC|O6&d?XIfM=P&!PnUKSCmAsQ@saeb!o-YTKe(CmAR|o&tDjD
zDK_i|Id)tU#hM_md^{T2_rLH*`amHEEveve)-#>k(DT8S%z>y>#BQ^7prDl)M33aP
zVD6(53EGswjAtY<WwQrT@Hg^%u0T%Mcf~U^lQm+k1687F_V#&YcZOXJFypV$<KdeT
zMNwKcQ`_6yQ#jkK_0;`s-2L)zQ<^^(pN5qa_;=6jd(}4=D|q)GS6hFxNf_B4$=`YV
z?ojpgAKd@(ha0>9BwMw?E>lIAkt9AyHs3;fE;mj!8#d<3LpHvIPngig_oHqax_-Nt
z1Htf1C1vxb@f0yLK-=ifM6v9p**(C4x~*m}OZD#Eqi!()d8x{6Rc}vg7!CN7hUS~U
z3nYJ7hg9?@e^Wv(HN99_+z-V^ttU+u`R8pP6<<(q@mP2Iae5yuCGfgg#+ViYf`D|D
z<^6D83R>>xJ?j(v<gacH&N5W&%aWu&{-ZkA%(29iQ^O5Ml7A9C^OFO9(1z2k&Bu8M
zL8S3`?tj4cAqN}jNgE>`uUrk3v+lZjUpEU2U;0PA{0BKWkp5FrhknZ7$d@v+um6KV
z9mvfgc*&)QUEvG(DMS@b-}$gtC7K`qC&v44^wz;LAH^bJwJcKlO}nuZ1D&waN1-l1
zdHPE)JXaQlTSdia;xi}8B}~?e!)HF|d;ylyQ~egscm69m%e?&{-d7xf`=4maWBWZB
zGp!2RPO<2jR;Djr{yTL&%YQXcv#`&B^%;|yOD`U}WDJy4;+)44VNL`nP)Vrt3oCGJ
z_otfwGBmN*W~-sHB#rm~$QTs<kg3JLZ7BbS;Qo>A{hw3QfA#k5f0M!gKPySwg|U}=
zfahs@fRSovGM;|faDsnsrH<L!&NR#0jkcoO7++BS($Oayh0w0D*CW;Te3-0e^0nJo
zhuxic!(}MQbdP(xmCXf2CP)Cza=rgwSo8jOp&Zl(^GE{WXotv)(!rH_Ye6EA-vQ@-
zQa>(+R=zDVfd)n5n|Ev`f7QBi@MqPZ_v6ma<Cz%|Nd!r;BpqQh0XLM&mk+fe3Db|R
zcxXmUgyzbBTycp~)M@`*wFR@ry-Eq@@E4WNwU&cxcd~C~rN2OGhCv`GkYA^*6Fb>#
zMWu<hl#sF%B)1uEdM)aemY-*U_Xb~0X~ou<W<roQW5Hv0!)QXI>TsF0O}w4Qn_#(!
za$(c;qTqn^<u|n*>hqTeCATNK-r0yZGKzG{V{2?8v;6xs%itR|qb`@$&n`soVrTEl
zMU8j$2@lqf<orY#SpvWDf3^N4SY=Iuw{F?hopWJqvGXU2=U*&rai1LBC{RAOzVu_}
zC(5<$aJzw_ou%ZaKpe+XKrjDq{u=>qnumVOA4?RTJ!`^LKse~j*)TY#X&!9EvM~Z`
zgyjCcnLj2cLOauvZRmxtcF_DPJn?1-W>3cHsZU?%`9h6ZSq6zOhJ@hQHs)^no4M0q
z1K%d&)d2BTK8B|dZlv@1#L}G<yycIA@zACZwaLyGQ$Y`e?F_=v;)4XX(&m?*gn?$i
zK~8Gp?0WX1*x^RZ?LR@jzm=cAry&1-q~KP5ln^Kt)*b9nJGO&E$qCV9AFw2We&QEu
zC{>ZgdaL8qJphTsP(&=%_KOv^%wSUCYso|(k*MmbacpF{U#v(_eBQXBy<yt)!LoGa
zyn(_>G}d2zCII?W!SeU%zk%9+mcKpK@PDg7gWw3Z%!X)9n6Lz6`)=5{#6;+TF$k%S
zs~7K%qU~`ZqlQ^6``beYtv~0<Q8$a{y>M#rAQ&v7pAYY3Ly^LftWpeya;Gdi*{A>2
zdGFP?^b=v0?b(z_fh_}dmH=HpvZXcx6{r`PQ9m7(-0~_!x~*GE_?hp$#N5x_!^ERf
zal(QPqm7(?8*T4ae1`bFVrhEl`~ELe6|btSn-~ent4p*r1+|;l<1+I!o;P3RV8?3r
zv|j7KlnxP;%8ykSMYFI*s5B!S<5Xe%v-*?MLKIWmuu!isf@^p-vOXS7aR?33r=a4W
z&N$#+tgt&aY^-VdUp?v2OO+T>xr{(0Cm$^{S=o&5-j{B2nqHtoS=otDt0N2}siLB!
zjwzK(bTmi^4D23ba$+>S-eyM^o>Djdf{ZNa(J`*)PmJa3lqQ;iuzvEOK*wsnN}f$L
zO$tH)MnpJ|5-56!w-jEthPI?V7^fJlSdKz$ra(@39-%np+;1OaVvO%jqok1f$Tu;O
z4RzM9A>l;#*2WNO9(zkE67pO;(v<orUrCZY?Cjvxtj$*ERM7SlsHJNmeV|DVO{5`@
zg8OQLNyMb%*E%$Ep}&|HO+;R+eO$n5av~*c*L@u{d-Kw>M5aSk%^N<?kdHvsHr^r&
zL5X9HX5vN~L3p=1)XYUVKUsm`dO^0dT@r>w-qu>LlZI6wg&3`>;JT?K9FtcOv62us
z3Q^*sJ!=*WSk31w({*!;ZjNk>S#)ZOD}<o-6_K1VkZV`0dtnTZMz0c}6e8NOeKC5~
z98C)qwr{P2U(Yk3g%-NEo^W-57`+rJR7zrf+0=on5}<fpE3kgicxoQjs_=R|-l<)l
zj3u1mE4&Fa@-9MMwNEQ-^Tai<6-P0t!f2XXJ+wQAnyx*o{$PYq{ky?Zu7!6$Hln+F
z(efd03c*}eO<|(hIqbKI2n&bJuj>WMopA7XRy|%iQsq+k7EB;?rndY`@g-3grfPDm
z$@9@&h1U<c2(Ngn#|VDr{PN??&cf26jc<YrZvttJSdtSjhpVjJNGr012-Yr_-sDv(
z*&Q={eroEfK+C6B9y`<=m+@yRAWDm63q1~IKA6qdL0gr|RmoGBeoxRG7TwZ3FJ!t0
z2#KBDzVlmV+P9HY^s6;I{s;BnD;2mM{Sr!Kgy1G<;^yGY$Z}7X$0Lu_5?HIL)ZF>o
zCllR@MD3<UlC-xwn)ycCb<*`PE!KH4pSqsqoUjdZSQ`j8Cti$KFy8|ZR}6h}s4yh&
zjOykGgC~>D^wn#RPW1_T6@C06jGIt|8-I1)p3n-ZM5%BoqD!P%YqWEyoNu`c5ckZ;
zb^hD)(FmwVX1@F*8Ow7IQe&DR?k^v(b);ZlGQt|1J3M5(Q_aWQho!Fy5Ppm#vBFSd
zUJP|kGvPgeas#W-)^Pz^q7>DCO)nRTux1?QA+Fi>RxvxKUj)pV-(fGN8S7VSwY8d%
zM%k8;NFVy=mm)(v_yw~Fr-+x2+s?Hb!z&~F<j%h@1|lC>2N*AVzq|a(Ll67Rq9QYg
za6<K@o#cLEz--jiF@j9@GJ2y8#zw+EbPLUm*Ms$%zZK90)U34fvuKr>0i={P!tt1|
zji<gtg)P}#xK8^TXOI}Qnb79*hUb3f9^hzK_|?N;1{`8!_s-R;O*`gH0B1v0WXN2E
zdn5I0grxYX#a4C&xZvxL5fbYz0(MiRcGL|lqc(J>Z#J(Lqjr6%4v0!PRezL&uSxWM
z1w1IPvl~6XAH8K;IQbWa@`8subrr3|Q!QU(gqWyAm{LsQCo8ShJWtfjX;FdIrLVm<
zD44MK1Oo;X-X8E3Vr8S$Ac_T!Uc5mUoG&Bo@sVA`;U2Y0UT6@C<w=wd?@qhQEW_=_
zN1~iMESMg3E-9%F#iCVSK0Tl*8r9;aWvvxlfZpb%Fq(L_wXU(3G^U@|bL7auZ%LHG
zbEX!dGctrtzY=0=Kr-^~8Um>#35#M9Wf1x?0_}~Bjdl1-4+GL8@arCwr$C{Xq&r<W
z)@VD16m*noUS#+l(I<`4hdHqtJsEwD*{N($i<z)}qLcQQDFsaCr7?t$FH1?zYz&2_
zbXvKfyV!P4aZ9PFM9wB;{o2#Jgy88tz|CW!PP;iP=SafLPfEIaF-f^8gq4zh;kYcf
zBg{$=gha~~Gn496j}w}`mijKY&$Z6Q`}F*?M^cU>q^wk|nSzgylmH#l>fX>s#m>lR
zl(eE;zBhO)<Ho;E^<+@*N0=u^uf%7nbc^j9EVh7NrPcGI`dh8VtLZ_wXTc}<X;)YQ
zW0`e7z$nx*q@Np!MArG{>BnBr1r~k54Nn)VPOFyV$>e8o5w5k<FBfG|;CT$i5ZQ_W
zxpq<89R}nIHp93JN*oSN-RmGF;wGj*sX|!ben<o!gYACbIc2cWbMH$RIm@j&ckp2Z
zF&$xscEBh>G0kF=Oq6sCFIY<pqF*QBVP(r!FI2^Wj?|b@C)>Yd<krURpQ?~3J&}YT
zjfXoICkR2LJCA6NnS*?1z(s?%Rpkw`T#yls@(3$#%gs~Wo^A!>6Xa<ev!%*>`iuR`
zRA_C4HmQ1D6O35lpTaJ`rYciy17tVVD(kcv@;HlxcJ5g$+mdY;sV<Yyt)et%jp;Wz
z9fc@pgD=Vy$ryMcv1O1u#9ClnDbkl1$HLZwrJ=87z|8aY*uoBV;bJ`u#Z{ikn#x4o
z+#t=az|rS#e?IJCX`2Kxf5|{g4a)wO(U}SoU>h9uQYls$*Myeh`u4LIE1RVbhuh(|
zMW!t41b$~kj-`|1VYSqFp9lMiG<nUpxpf9kOjG-GB3~#vg#dMWI*%3k0@0>9?k{*E
zh&m-wJkWHQ=$!h@vESvv<^5AM`Z3<-aCH$Ax|<QPA83c^E=>DW*@-?e&2IptCy_vY
z$C58$SppN8Npxg4Ly0!Ke*||}0sHOH=|8qB8qvEaf*ZFMeo%tntt(V$K1*H>+S-*&
zo>XrbL1ixO0WR+WgmRiw!-w{rsLjjomB@lZM$DP4mp~LlfGF#u$1ue0c;o7wGl~$m
z;nzJ#pelp&b;8S*k$mkF6IZY4R)DYNohBFKC?Mxvn7|y~Br|?e*4O@}=)@^Iy|v3l
zz3zouuFh)wRT}ujMf!skq)VrsI#3H?S-kt%-4^FDO-UFR4%+P{SbPpoEU0H9k*7QG
z7MAa;kWfV#C^46=Z<(K47xZBda6i?*#-~KxVVX$etARR`9V}<~`7*}UF<S2K`kfCA
zb+~vBdxxPb^K-HbjEiS`oc1%kPVy3$Pv&W9(`Ym~-H9Y$s$bsok}<ZY3}j&L#%6Eh
zDX-+WPa7gc?IL}IXfz6Ro%%@4;PTmI`oi|EMM2Z~EM^SYqy465p{V+azR1=5Z3~BV
zqnV3%8ZGbvuJnjQ{clCn-y6sMtvFf-tvFchm0VP7s+of7C3YhW-p=BY-4@L5nT$eo
zT+OGymx-IRLm3E?)9~Wj&~}qI9Ja(PO)KY;VLqrNPfx+-gL~;F`*Q|w2E<xPM@dKB
z>x;a6cBXf^h5U4J6};(p(!oIHGjRfZ2-GWTpsFLNhta~O_BJL3OvaxI0xo*@d<v0?
z_O!fcm)Cx4qRuPu1Y4Xx33};`c0;VDO-6s=w~Z-JjmyQVG;tkQW<bK4FiN?^DJ?1c
z)eP_b*_&p5FDG6-yn2IJ+-7vsvPMr&$SElaCtKs?L}=Gq9q*4<Y~r@9tf5$M2F4Y<
z4#>Zz-G&VGdSsCp(DW>hfEY2!)Y;sB?L!N~C;>;s?^K5s-5_}r@nyu804kn>`WzkE
zvg@a;;F7<LaKX&9Zn9!!-CsTHnL*N9z_dBT-qo@K^eA38_{SsZMi(2ttGr5uViYsK
zjl6F4b-=Jx)#=nR{yEWV3W4NI`z0&gCljQ;AJjfV1EtD$6IXKNUHRjQL6@Aa@8;Fy
zd~e&Pnq9tWN2R0{w`UJII$XcfmYSwhMTipUmkA@1#LUvoNp7mrzlJ_wAXD6VeoPCw
zI0T%B+-*EA9Qk2xKN;cF*y?F&@!Y&##*jOp@PxCOeMWXn52w`Qj;404I+aKmRyFJB
zE71zXqdQJXDjm5a>MqC-DybVNkDh3aJ6=CI5oUM_u4K3e7!T@JwX4v4;j|o7wJW&?
z*q?ddn}^J{2N}V*;7tyV%<q~@k^vpgh+w{Q<DetXWY{)(2l``wH>vF>cJX6FWtVJq
zL3L&QT=kZEX`X>FUPC5-v6K_WiRqbet5;7?ObUPU_$Il6`+{GR-^B^<+*O&D=^BzV
z^Sitv+NmubyLE>;RdhLrs(bWP==%@9qnh%)@|5ThSGEMpQ)YX>&uo7~se^Xwd13L8
zL)pAHknStnp{kpiIsWqHOH#^QlCN!KOR-`duH8y(6i3&xY*A?RLA|&0^LNNQ(psmZ
z7{Rda_m14p;OMfw^xh4Sw|kaX6H5(cKewA)=Ljf*p^*I<4%s=BXGC(it)>-TTiy$S
zL<>!pC{94E5<YtRB%OT7d%~O}Fpz>9^K==!?Mh2*pi;GIg)LfWCM(l2G;Mr5gT?=r
z|CvaU)%)CGwSF3bu#_DcEt90(0lnl7(R#>}5f+bBqFd)JKOB;6lyP{u6Uam%Y+blr
z1m!=eSs1{g-{8TKK*e~{#2-fiMiZ*NHIFUk@qNqOZa1zi0GWQva3l&fj1o|+#_4W3
z`PBnP&-xVHOFbAa?=1&`U;3q6tJmAq_s_g_4P<0vQmybb@mrGJ_0LIB=k9Mg*c>@;
zCg_pvsvl@I>}6jYLStm+TV^-gP6>f1IvmeDW%7=FkAeo0C|OCJQ0WNVMe6|-({UAQ
zS_V;N(~9HF*{g?5QT%2LG3PW$po^_eT2)%uNKPN248has&%&5Z{pgIBbM_9%j+j+1
zMR~)Oq?D}IR<zhloZ44wZ!PN=6ZNR)?k7iBma}cPs#|uy<fJ7PNLkP>^{`T0F%Ry9
zbc_+Au=P+NjK*?RnC<(uwRiE%k)pDfkMhpmEykM&x2eQffyM{YwuiB+eAlqQxoYaE
zKbw2Zv>Y!tn`>fL<}Wkymvr8(U7d#*h+xfE^&|ht$YCX5vCn<!iuvA%WpnBF-@7H<
z!QMb`JSzukJuVWq@u6o7q4ib2EnXC99G$@1_bsPLzF@|IT+q_i)?Pd%vS99fQPt_p
zGbV0bDw0>EWfwPYTKxTmp2cr8w^J#Jxq9~Rm?F59Izb~?b>=SFAmo+BOF2Z*e7%)j
zMw-iHN<r^0=Ju@HP{ancXWa9BF=Du{FUE^F2GPQRobu0@yC2QrW&-OxKA2J^CPyd%
zF}X&<?~sYK$rd1kwk*~O5{74ed&sllhB7Zc5&8?>+}VmN`EaO+JHj&0CCZkxnlu%9
z?dJRYeV#U_3oMxOH=(!nPP^etbF>$)q*@({oMbdKbjpajKghN$kktvdb7{B`#$)Ba
z5`DGzTUKIgF7bM9IPbKU{wB&vHRHl>-hJ(Rfc-7_?C>qsd2}#)53uI(^he63o8}Dv
zkEq}8?kFX%hHpdbMO1^%c&v(vRZ<`3Bt0I{^>uVbY+m=i{k94NxkPAGcF5E0Nhgzw
zTWaUUN0l&6qjOlj*OZNi8fsH4hh*T6^-F@eMr_uy;Tcb$?1joukL+}!X~*&VuF=y2
zs)@~Lrsx|eu-L8HG5Gxov#3W!uqL3WNq;+$I=SdIC^JzLc=G!4aCuf+OTA9Z>N(%^
zV_iP6r)(jGEeHc?m&0&X)!!Zp8cr|;7*G<eUumLHuFL#e+nL@4Bnr2+aA^iYc)GgE
zd1KUN0%5|86prE5fi~%Piq>)Jeh{|h(>Dk;8M=9Ru{wJ3))ZRt@${>!A#8$yAkn?v
z-G-@i^attsRZMngMn^H*GY$W&I8Nj%b~s2c-U>fDYQltJCRd+kA{rFJoSh$hFU3)s
zL&;eYNl6i^vF$ezHRExa$;=4!SR0<S;-#m|5vz<ahPah<%{$9fOCefeP3uZ{UqMo3
zl#<XSjkIZ?BUUBTyI9Tl*)S#O1cR-I6bu08nG9U!A8!dqN!WcwKLBGb`{Ge+q9u=x
znLa$zu2p2)hIIui<1EO2CWbX2`6P({uVD}_a??s;VZ75F&h8&#!4j^XmJbVb;~gNw
zY6dQoG!g8(7%Var`({FgZxl^&Yn?zCkY^n}?Z|u?bANT>Zja0g-pIOhe+{|*J`K?r
zYQ6EeLx^!PjYV@J(nw;J%_q-}Y+9Hrye1J11YiciE0&=fMfuBbR$`5k<L|fL3vl8X
z&c#(nf7dzHSdvR-db_3ThR|BUcSa&%=G`zm{g?q99ZGb1D^U87BleoaJ$hP+naiY8
zN>&j>UAk4u1}G1<*C!|<9+B}vBsWO2>|2k{BabY0L{B5YYcySSW+0?FoEA6hdiRqu
zP^c6ZhMy>O^ykXCKUoxe?tUMq&Wl;M)FfS#Ub<H-pK0b$1~oKBw_Qj2HRR3fy5c+S
zU7-XgDfnm62x0>vUNm<^klO@QqUBDFdlPA;I2ZeR{|!qHL^WIQr}5BF$S*l2uBgm2
z49g7*x2Np0I(?iGCR31jd2Lp02HUStPv+IgQ+-XxGP|mjs^9O-*mK7Kfv0qem6gM6
zSw1AvZ2j9QkK|KVEv~Q$&q_T{isozmFykl~%53XUhFUf$i?pICz91$Rp*4O@ABZ!%
zU*1PYdO%e>V8}Kp)47bPRIFE?B^w6pUVS?F&G2OQd{x(%=Ull^NjFKbsF;z7C!6oQ
z9)F&Go*{_0M9$pN<NfzwZ^FWDch?omK!^0Pw|zN2xZ72#R=^c(TML?E=8$Xz?JRsT
znJC5=P|(e}!kw4<ZB1P<(<$&$ra)%$nrZk}UyxgX$o;Ng3sLOu`G@7kru}x1h?G#H
zlqyxFdVC?&Dk>MzEc?6EV3AaK4uecwe8?VS<j#1~s4-K5@}MzFX4M2~3~OFZl8P~B
zrR&z{eCm~u?uzh_r_zrL7847)&7f*OLM=q$LKxC$SnC>1MFBE7t~eVYbGP@`f;6vA
zKWBVxy^L#njCA<yokTMCS6K_eB)kf}E2Au%xzGn{?fbPDF3(@3kK{fFtATlBnNj@X
zjJp%}10bZnmSTwxF$;yB!^#oIGet`J(;TcKs&3UM6l|KJXB_+mg*kzy-6k4t86i`O
z3h<M>-!}O#9rzskRu-|`Y1!(X@iYe;1I(3z>$GUq6|2hjl;LL^l@c5CUaA?$Y|eSL
zFXT68vY_Uhe&~YY6J7nO8*#&t0`2vp21;V+u-IFYABR7{-OBIH$dsuCtUTg(gXrdk
z`FjV6Ia|r%lx0M)$lA~r{DJCoojc;Y)xqTBAuhZ7Ie$CN)@R320N|fN-T(Ice9g92
zxzn)Lof;vC5NOUaS6KRqViq@Hv-jEUN388Q-E5?JxK*2d>2XqjiD7)yTZOHST_fet
zgucvbO6V8c;0JMgfDDgs^C~LOHOrGnmmfzM-fLc%*tk9*tfX0-`rH0#U~7SEYX4ID
zlSD|v?sNp#F7xp}MpoFOT{GHb4^=!b8XZ5iyBi$UIE+D=N;=cIDsH0at&DCRSe0~u
zt@k9o{o;84h4x`XSn>kb<@FQ4<?R7bo5!@E3Xwe*<rHAtZL}-@&3h;R82!<&mp@sr
z>v6}1Nw<Py;8LJpAvPnNoUq!Y{4SQaQ+wc<;N*NJmoY*IrYF6h@`!A}D@*OCJRBf~
z4r*_&-K+7?>go>mV^Z-_Qz?Esv@9e%5#gj#F}iKDGR<I!pATIf-V(Vi7-Z(T5F9jN
zG<um}=|4EgYTGz&|Djy6dgRjXW!vW?IrXyY3k!Wy+s~Kk-}rB>s|Np)YZN`=`6l=*
z<K|-LSnQ?s^?9$|n;Q-_r8`@Rn!lTgfAK7;DSy@VZa<Cl6J<MhWMFrvDY;fUYV2B{
z-C)J+-Tma#Pn5q{;DIhBxL;iuT9eRF{R>4?x@f(;9Gkv$Qsn>JPd{^s?;n1P{CxZ)
zB<^MEr1Pn5Zu?e=*1DYN{u2cp4;R0-J6vzguJg9@+jz=t{CdBCUmP=2Ytt+-{TnNe
zgjfIvepkIxS+Q!G=kkfCo}W~ndah`_)vEPYvzGNNx2)PH{Hrt~Vq$FZ%Y%Z8wO%ex
z@m*U4obb6~+^ICnWAmfClk}~M7yWI!ADJQWdUCbx<r=n~=9}-DADF3^*~kZBW<$i?
zXd^IDG+f2!O4r`to@C*yV|PV=eGdK4aPv>p&Z(k;C+_@b*mNc9-x2MpLcx2L=b5iJ
zj_Lb7Wv8-<>~x^Bzb=oQ=PT;6al7lfFI96op8Q=9!D98~-uaUIjO%>geE0pJ<~=LH
z8N!r;h)*0SfwHY}PqKqegZ3t0{K^-$E~BH@_4P?X`!DjL#<$jnD=B?m9MyaNoq`r}
V5i!ah4S~@R7!3hzAz=UiCIF!hxzzvw

literal 0
HcmV?d00001

diff --git a/ui/tests/scans/scans-page.ts b/ui/tests/scans/scans-page.ts
index 667aaaed85..e75c2d3508 100644
--- a/ui/tests/scans/scans-page.ts
+++ b/ui/tests/scans/scans-page.ts
@@ -27,10 +27,10 @@ export class ScansPage extends BasePage {
     // The sidebar exposes its own icon-button labeled "Launch Scan"
     // (aria-label, wrapped in a Tooltip), so scoping by accessible name
     // alone hits a strict-mode duplicate. Scope to the page-shell's
-    // filters-and-actions group, which only contains the visible-text
+    // tabs-and-actions group, which only contains the visible-text
     // Launch Scan button.
     this.launchScanButton = page
-      .getByRole("group", { name: /scan filters and actions/i })
+      .getByRole("group", { name: /scan tabs/i })
       .getByRole("button", { name: /^Launch Scan$/i });
     this.launchScanDialog = page.getByRole("dialog");
     // The modal renders the providers picker as the shared MultiSelect-based
diff --git a/ui/tests/scans/scans.md b/ui/tests/scans/scans.md
index 5baef3a42d..c2dae769ce 100644
--- a/ui/tests/scans/scans.md
+++ b/ui/tests/scans/scans.md
@@ -27,7 +27,7 @@
 ### Flow Steps
 
 1. Navigate to Scans page
-2. Click "Launch Scan" to open the launch scan modal
+2. Click "Launch Scan" beside the scan tabs to open the launch scan modal
 3. Open the Cloud Account selector and choose the entry whose text contains E2E_AWS_PROVIDER_ACCOUNT_ID
 4. Optionally fill Scan Note
 5. Click "Launch Scan" in the modal
@@ -46,6 +46,7 @@
 
 - Scans page loads correctly
 - Launch Scan modal opens correctly
+- The page-level "Launch Scan" button is located in the "Scan tabs" group, distinct from the sidebar action
 - Cloud Account select is available and lists the configured provider UID
 - "Launch Scan" button is rendered and enabled when form is valid
 - Success toast message: "The scan was launched successfully."

From 865eebe7fbd0de32d91856b897588e0c74439ff4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Thu, 10 Sep 2026 07:21:27 +0100
Subject: [PATCH 49/77] fix(aws): configurable boto3 timeouts, 10s connect
 default (#12774)

---
 .../basic-usage/prowler-cli.mdx               | 14 +++
 .../providers/aws/boto3-configuration.mdx     | 29 +++++-
 ...s-boto3-connect-timeout-default.changed.md |  1 +
 .../changelog.d/aws-boto3-timeouts.added.md   |  1 +
 .../aws-retries-max-attempts-zero.fixed.md    |  1 +
 prowler/providers/aws/aws_provider.py         | 39 +++++---
 prowler/providers/aws/config.py               | 27 +++++-
 .../providers/aws/exceptions/exceptions.py    | 13 +++
 .../providers/aws/lib/arguments/arguments.py  | 23 ++++-
 .../aws/lib/session/aws_set_up_session.py     |  8 +-
 prowler/providers/common/provider.py          |  2 +
 tests/lib/cli/parser_test.py                  | 29 ++++++
 tests/providers/aws/aws_provider_test.py      | 88 +++++++++++++++++++
 13 files changed, 258 insertions(+), 17 deletions(-)
 create mode 100644 prowler/changelog.d/aws-boto3-connect-timeout-default.changed.md
 create mode 100644 prowler/changelog.d/aws-boto3-timeouts.added.md
 create mode 100644 prowler/changelog.d/aws-retries-max-attempts-zero.fixed.md

diff --git a/docs/getting-started/basic-usage/prowler-cli.mdx b/docs/getting-started/basic-usage/prowler-cli.mdx
index ebf3c6515e..d64bef0b77 100644
--- a/docs/getting-started/basic-usage/prowler-cli.mdx
+++ b/docs/getting-started/basic-usage/prowler-cli.mdx
@@ -2,6 +2,8 @@
 title: 'Basic Usage'
 ---
 
+import { VersionBadge } from "/snippets/version-badge.mdx"
+
 ## Running Prowler
 
 Running Prowler requires specifying the provider (e.g. `aws`, `gcp`, `azure`, `kubernetes`, `m365`, `github`, `iac` or `mongodbatlas`):
@@ -91,6 +93,18 @@ By default, `prowler` will scan all AWS regions.
 </Note>
 See more details about AWS Authentication in the [Authentication Section](/user-guide/providers/aws/authentication) section.
 
+- **AWS Retrier and Timeout Configuration**
+
+    <VersionBadge version="5.42.0" />
+
+    Tune the Boto3 standard retrier and the endpoint timeouts when AWS throttles the scan or when some endpoints are unreachable from the network Prowler runs in:
+
+    ```console
+    prowler aws --aws-retries-max-attempts 5 --aws-connect-timeout 5 --aws-read-timeout 30
+    ```
+
+    See the [Boto3 configuration](/user-guide/providers/aws/boto3-configuration) page for defaults and environment variables.
+
 ## Azure
 
 Azure requires specifying the auth method:
diff --git a/docs/user-guide/providers/aws/boto3-configuration.mdx b/docs/user-guide/providers/aws/boto3-configuration.mdx
index 83d01d5e80..d4e348b2b7 100644
--- a/docs/user-guide/providers/aws/boto3-configuration.mdx
+++ b/docs/user-guide/providers/aws/boto3-configuration.mdx
@@ -1,14 +1,39 @@
 ---
-title: "Boto3 Retrier Configuration in Prowler"
+title: "Boto3 Retrier and Timeout Configuration in Prowler"
 ---
 
+import { VersionBadge } from "/snippets/version-badge.mdx"
+
 Prowler's AWS Provider leverages Boto3's [Standard](https://boto3.amazonaws.com/v1/documentation/api/latest/guide/retries.html) retry mode to automatically retry client calls to AWS services when encountering errors or exceptions.
 
+## Timeout Configuration
+
+<VersionBadge version="5.42.0" />
+
+Every AWS API call is bounded by two timeouts:
+
+- Connect timeout: seconds to wait to establish a connection (TCP, proxy tunnel and TLS handshake) to the AWS endpoint. Prowler's default is 10 seconds, configurable via `--aws-connect-timeout 5`.
+- Read timeout: seconds to wait for a response once connected. Prowler's default is 60 seconds, configurable via `--aws-read-timeout 30`.
+
+Both timeouts can also be set through environment variables, which is the way to tune them in Prowler Cloud and other deployments without a CLI:
+
+```console
+export PROWLER_AWS_BOTO3_CONNECT_TIMEOUT=5
+export PROWLER_AWS_BOTO3_READ_TIMEOUT=30
+```
+
+CLI flags take precedence over the environment variables. Prowler sets both timeouts explicitly, so `AWS_DEFAULTS_MODE` and a `connect_timeout` in `~/.aws/config` are ignored; use the flag or the environment variable instead.
+
+<Note>
+Boto3 defaults both timeouts to 60 seconds. In networks with restricted egress (for example VPC endpoints for a subset of services, GovCloud or private deployments), every AWS service without a reachable endpoint used to cost up to 4 attempts × 60 seconds (the first call plus the 3 retries) for each region. Prowler lowers the connect timeout to 10 seconds so unreachable endpoints fail fast; lower it further together with `--aws-retries-max-attempts 0`, which disables retries and leaves a single attempt per call, if a scan still spends most of its time waiting on unreachable services.
+
+</Note>
+
 ## Retry Behavior Overview
 
 Boto3's Standard retry mode includes the following mechanisms:
 
-- Maximum Retry Attempts: Default value set to 3, configurable via the `--aws-retries-max-attempts 5` argument.
+- Maximum Retry Attempts: Default value set to 3, configurable via the `--aws-retries-max-attempts 5` argument. `0` disables retries.
 
 - Expanded Error Handling: Retries occur for a comprehensive set of errors.
 
diff --git a/prowler/changelog.d/aws-boto3-connect-timeout-default.changed.md b/prowler/changelog.d/aws-boto3-connect-timeout-default.changed.md
new file mode 100644
index 0000000000..a204443b2a
--- /dev/null
+++ b/prowler/changelog.d/aws-boto3-connect-timeout-default.changed.md
@@ -0,0 +1 @@
+AWS provider default Boto3 connect timeout lowered from 60 to 10 seconds, so scans in restricted-egress networks (VPC endpoints for a subset of services, GovCloud, private deployments) no longer spend 4 minutes per region on every service whose endpoint is unreachable
diff --git a/prowler/changelog.d/aws-boto3-timeouts.added.md b/prowler/changelog.d/aws-boto3-timeouts.added.md
new file mode 100644
index 0000000000..df5d6e4f2b
--- /dev/null
+++ b/prowler/changelog.d/aws-boto3-timeouts.added.md
@@ -0,0 +1 @@
+`--aws-connect-timeout` and `--aws-read-timeout` CLI flags, plus `PROWLER_AWS_BOTO3_CONNECT_TIMEOUT` and `PROWLER_AWS_BOTO3_READ_TIMEOUT` environment variables, to bound how long each AWS API call waits for an endpoint
diff --git a/prowler/changelog.d/aws-retries-max-attempts-zero.fixed.md b/prowler/changelog.d/aws-retries-max-attempts-zero.fixed.md
new file mode 100644
index 0000000000..8eb2ad9e07
--- /dev/null
+++ b/prowler/changelog.d/aws-retries-max-attempts-zero.fixed.md
@@ -0,0 +1 @@
+`--aws-retries-max-attempts 0` now disables Boto3 retries instead of being silently ignored in favour of the default of 3
diff --git a/prowler/providers/aws/aws_provider.py b/prowler/providers/aws/aws_provider.py
index d0ca3b98ee..07e3ecab89 100644
--- a/prowler/providers/aws/aws_provider.py
+++ b/prowler/providers/aws/aws_provider.py
@@ -126,6 +126,8 @@ class AwsProvider(Provider):
         aws_access_key_id: str = None,
         aws_secret_access_key: str = None,
         aws_session_token: Optional[str] = None,
+        connect_timeout: Optional[int] = None,
+        read_timeout: Optional[int] = None,
     ):
         """
         Initializes the AWS provider.
@@ -155,6 +157,8 @@ class AwsProvider(Provider):
             - aws_access_key_id: The AWS access key ID.
             - aws_secret_access_key: The AWS secret access key.
             - aws_session_token: The AWS session token, optional.
+            - connect_timeout: Seconds to wait to establish a connection to an AWS endpoint.
+            - read_timeout: Seconds to wait for a response from an AWS endpoint.
 
         Raises:
             - ArgumentTypeError: If the input MFA ARN is invalid.
@@ -229,7 +233,9 @@ class AwsProvider(Provider):
 
         # TODO: Use AwsSetUpSession ?????
         # Configure the initial AWS Session using the local credentials: profile or environment variables
-        session_config = self.set_session_config(retries_max_attempts)
+        session_config = self.set_session_config(
+            retries_max_attempts, connect_timeout, read_timeout
+        )
         aws_session = self.setup_session(
             mfa=mfa,
             profile=profile,
@@ -1165,26 +1171,35 @@ class AwsProvider(Provider):
         return AWSMFAInfo(arn=mfa_ARN, totp=mfa_TOTP)
 
     @staticmethod
-    def set_session_config(retries_max_attempts: int) -> Config:
+    def set_session_config(
+        retries_max_attempts: int,
+        connect_timeout: Optional[int] = None,
+        read_timeout: Optional[int] = None,
+    ) -> Config:
         """
-        set_session_config returns a botocore Config object with the Prowler user agent and the default retrier configuration if nothing is passed as argument
+        set_session_config returns a botocore Config object with the Prowler user agent and the default retrier and timeout configuration if nothing is passed as argument
 
         Args:
             - retries_max_attempts: The maximum number of retries for the standard retrier config
+            - connect_timeout: Seconds to wait to establish a connection to an AWS endpoint
+            - read_timeout: Seconds to wait for a response from an AWS endpoint
 
         Returns:
             - Config: The botocore Config object
         """
         default_session_config = get_default_session_config()
-        if retries_max_attempts:
-            default_session_config = default_session_config.merge(
-                Config(
-                    retries={
-                        "max_attempts": retries_max_attempts,
-                        "mode": "standard",
-                    },
-                )
-            )
+        overrides = {}
+        if retries_max_attempts is not None:
+            overrides["retries"] = {
+                "max_attempts": retries_max_attempts,
+                "mode": "standard",
+            }
+        if connect_timeout:
+            overrides["connect_timeout"] = connect_timeout
+        if read_timeout:
+            overrides["read_timeout"] = read_timeout
+        if overrides:
+            default_session_config = default_session_config.merge(Config(**overrides))
 
         return default_session_config
 
diff --git a/prowler/providers/aws/config.py b/prowler/providers/aws/config.py
index ea55d1a314..ed2ca503d0 100644
--- a/prowler/providers/aws/config.py
+++ b/prowler/providers/aws/config.py
@@ -2,14 +2,39 @@ import os
 
 from botocore.config import Config
 
+from prowler.providers.aws.exceptions.exceptions import AWSInvalidBoto3TimeoutError
+
 AWS_STS_GLOBAL_ENDPOINT_REGION = "us-east-1"
 AWS_REGION_US_EAST_1 = "us-east-1"
 BOTO3_USER_AGENT_EXTRA = os.getenv("PROWLER_AWS_BOTO3_USER_AGENT_EXTRA", "APN_1826889")
+BOTO3_RETRIES_MAX_ATTEMPTS = 3
+# botocore defaults both to 60s
+BOTO3_CONNECT_TIMEOUT = 10
+BOTO3_READ_TIMEOUT = 60
 ROLE_SESSION_NAME = "ProwlerAssessmentSession"
 
 
+def get_boto3_timeout_from_env(name: str, default: int) -> int:
+    """Positive integer seconds read from the environment, or default when unset."""
+    raw = os.getenv(name, "").strip()
+    if not raw:
+        return default
+    if not raw.isdecimal() or int(raw) == 0:
+        raise AWSInvalidBoto3TimeoutError(
+            file=os.path.basename(__file__),
+            message=f"{name} must be a positive integer number of seconds, got {raw!r}",
+        )
+    return int(raw)
+
+
 def get_default_session_config() -> Config:
     return Config(
         user_agent_extra=BOTO3_USER_AGENT_EXTRA,
-        retries={"max_attempts": 3, "mode": "standard"},
+        retries={"max_attempts": BOTO3_RETRIES_MAX_ATTEMPTS, "mode": "standard"},
+        connect_timeout=get_boto3_timeout_from_env(
+            "PROWLER_AWS_BOTO3_CONNECT_TIMEOUT", BOTO3_CONNECT_TIMEOUT
+        ),
+        read_timeout=get_boto3_timeout_from_env(
+            "PROWLER_AWS_BOTO3_READ_TIMEOUT", BOTO3_READ_TIMEOUT
+        ),
     )
diff --git a/prowler/providers/aws/exceptions/exceptions.py b/prowler/providers/aws/exceptions/exceptions.py
index 4ea3d5e177..089e0d99c7 100644
--- a/prowler/providers/aws/exceptions/exceptions.py
+++ b/prowler/providers/aws/exceptions/exceptions.py
@@ -78,6 +78,10 @@ class AWSBaseException(ProwlerException):
             "message": "The provided AWS partition is invalid",
             "remediation": "Check the provided AWS partition and ensure it is valid.",
         },
+        (1918, "AWSInvalidBoto3TimeoutError"): {
+            "message": "The Boto3 timeout configured through the environment is invalid",
+            "remediation": "Set PROWLER_AWS_BOTO3_CONNECT_TIMEOUT and PROWLER_AWS_BOTO3_READ_TIMEOUT to a positive integer number of seconds.",
+        },
     }
 
     def __init__(self, code, file=None, original_exception=None, message=None):
@@ -231,3 +235,12 @@ class AWSInvalidPartitionError(AWSBaseException):
         super().__init__(
             1917, file=file, original_exception=original_exception, message=message
         )
+
+
+class AWSInvalidBoto3TimeoutError(AWSBaseException):
+    """Boto3 timeout configured through the environment is not a positive integer."""
+
+    def __init__(self, file=None, original_exception=None, message=None):
+        super().__init__(
+            1918, file=file, original_exception=original_exception, message=message
+        )
diff --git a/prowler/providers/aws/lib/arguments/arguments.py b/prowler/providers/aws/lib/arguments/arguments.py
index 2d1632422b..84f3b4adfa 100644
--- a/prowler/providers/aws/lib/arguments/arguments.py
+++ b/prowler/providers/aws/lib/arguments/arguments.py
@@ -156,7 +156,21 @@ def init_parser(self):
         nargs="?",
         default=None,
         type=int,
-        help="Set the maximum attemps for the Boto3 standard retrier config (Default: 3)",
+        help="Set the maximum retries for the Boto3 standard retrier config, 0 disables retries (Default: 3)",
+    )
+    boto3_config_subparser.add_argument(
+        "--aws-connect-timeout",
+        nargs="?",
+        default=None,
+        type=validate_timeout,
+        help="Seconds to wait to establish a connection (TCP, proxy tunnel and TLS) to an AWS endpoint before retrying (Default: 10)",
+    )
+    boto3_config_subparser.add_argument(
+        "--aws-read-timeout",
+        nargs="?",
+        default=None,
+        type=validate_timeout,
+        help="Seconds to wait for a response from an AWS endpoint before retrying (Default: 60)",
     )
 
     # Scan Unused Services
@@ -190,6 +204,13 @@ def validate_session_duration(session_duration: int) -> int:
         return duration
 
 
+def validate_timeout(value: str) -> int:
+    """validate_timeout validates that the input is a whole number of seconds greater than zero"""
+    if not value.isdecimal() or int(value) == 0:
+        raise ArgumentTypeError(f"{value} is not a positive integer")
+    return int(value)
+
+
 def validate_role_session_name(session_name) -> str:
     """
     Validates that the role session name is valid.
diff --git a/prowler/providers/aws/lib/session/aws_set_up_session.py b/prowler/providers/aws/lib/session/aws_set_up_session.py
index 3189400040..8f0b4130ca 100644
--- a/prowler/providers/aws/lib/session/aws_set_up_session.py
+++ b/prowler/providers/aws/lib/session/aws_set_up_session.py
@@ -42,6 +42,8 @@ class AwsSetUpSession:
         aws_session_token: Optional[str] = None,
         retries_max_attempts: int = 3,
         regions: set = set(),
+        connect_timeout: Optional[int] = None,
+        read_timeout: Optional[int] = None,
     ) -> None:
         """
         The constructor for the AwsSetUpSession class.
@@ -58,6 +60,8 @@ class AwsSetUpSession:
         - aws_session_token: The AWS session token, optional.
         - retries_max_attempts: The maximum number of retries for the AWS client.
         - regions: A set of regions to audit.
+        - connect_timeout: Seconds to wait to establish a connection to an AWS endpoint.
+        - read_timeout: Seconds to wait for a response from an AWS endpoint.
 
         Returns:
 
@@ -73,7 +77,9 @@ class AwsSetUpSession:
             aws_access_key_id=aws_access_key_id,
             aws_secret_access_key=aws_secret_access_key,
         )
-        session_config = AwsProvider.set_session_config(retries_max_attempts)
+        session_config = AwsProvider.set_session_config(
+            retries_max_attempts, connect_timeout, read_timeout
+        )
         aws_session = AwsProvider.setup_session(
             mfa=mfa,
             profile=profile,
diff --git a/prowler/providers/common/provider.py b/prowler/providers/common/provider.py
index 2e81bad121..7e23b8de7f 100644
--- a/prowler/providers/common/provider.py
+++ b/prowler/providers/common/provider.py
@@ -382,6 +382,8 @@ class Provider(ABC):
                     )
                     provider_class(
                         retries_max_attempts=arguments.aws_retries_max_attempts,
+                        connect_timeout=arguments.aws_connect_timeout,
+                        read_timeout=arguments.aws_read_timeout,
                         role_arn=arguments.role,
                         session_duration=arguments.session_duration,
                         external_id=arguments.external_id,
diff --git a/tests/lib/cli/parser_test.py b/tests/lib/cli/parser_test.py
index da16f437b5..a811186b3b 100644
--- a/tests/lib/cli/parser_test.py
+++ b/tests/lib/cli/parser_test.py
@@ -1152,6 +1152,35 @@ class Test_Parser:
         parsed = self.parser.parse(command)
         assert parsed.aws_retries_max_attempts == int(max_retries)
 
+    def test_aws_parser_retries_max_attempts_zero(self):
+        command = [prowler_command, "--aws-retries-max-attempts", "0"]
+        parsed = self.parser.parse(command)
+        assert parsed.aws_retries_max_attempts == 0
+
+    def test_aws_parser_timeouts_default_to_none(self):
+        parsed = self.parser.parse([prowler_command])
+        assert parsed.aws_connect_timeout is None
+        assert parsed.aws_read_timeout is None
+
+    @pytest.mark.parametrize(
+        "argument, attribute",
+        [
+            ("--aws-connect-timeout", "aws_connect_timeout"),
+            ("--aws-read-timeout", "aws_read_timeout"),
+        ],
+    )
+    def test_aws_parser_timeouts(self, argument, attribute):
+        timeout = "5"
+        command = [prowler_command, argument, timeout]
+        parsed = self.parser.parse(command)
+        assert getattr(parsed, attribute) == int(timeout)
+
+    @pytest.mark.parametrize("value", ["0", "-1", "abc"])
+    def test_aws_parser_connect_timeout_rejects_non_positive(self, value):
+        command = [prowler_command, "--aws-connect-timeout", value]
+        with pytest.raises(SystemExit):
+            self.parser.parse(command)
+
     def test_aws_parser_scan_unused_services(self):
         argument = "--scan-unused-services"
         command = [prowler_command, argument]
diff --git a/tests/providers/aws/aws_provider_test.py b/tests/providers/aws/aws_provider_test.py
index 7ce61b6862..cd8bb4f049 100644
--- a/tests/providers/aws/aws_provider_test.py
+++ b/tests/providers/aws/aws_provider_test.py
@@ -24,19 +24,24 @@ from prowler.providers.aws.aws_provider import (
 )
 from prowler.providers.aws.config import (
     AWS_STS_GLOBAL_ENDPOINT_REGION,
+    BOTO3_CONNECT_TIMEOUT,
+    BOTO3_READ_TIMEOUT,
     BOTO3_USER_AGENT_EXTRA,
     ROLE_SESSION_NAME,
+    get_boto3_timeout_from_env,
     get_default_session_config,
 )
 from prowler.providers.aws.exceptions.exceptions import (
     AWSArgumentTypeValidationError,
     AWSIAMRoleARNInvalidResourceTypeError,
+    AWSInvalidBoto3TimeoutError,
     AWSInvalidPartitionError,
     AWSInvalidProviderIdError,
     AWSNoCredentialsError,
 )
 from prowler.providers.aws.lib.arn.models import ARN
 from prowler.providers.aws.lib.mutelist.mutelist import AWSMutelist
+from prowler.providers.aws.lib.session.aws_set_up_session import AwsSetUpSession
 from prowler.providers.aws.models import (
     AWSAssumeRoleInfo,
     AWSCallerIdentity,
@@ -2735,6 +2740,8 @@ aws:
 
         assert session_config.user_agent_extra == BOTO3_USER_AGENT_EXTRA
         assert session_config.retries == {"max_attempts": 3, "mode": "standard"}
+        assert session_config.connect_timeout == BOTO3_CONNECT_TIMEOUT
+        assert session_config.read_timeout == BOTO3_READ_TIMEOUT
 
     @mock_aws
     def test_set_session_config_10_max_attempts(self):
@@ -2743,12 +2750,93 @@ aws:
 
         assert session_config.user_agent_extra == BOTO3_USER_AGENT_EXTRA
         assert session_config.retries == {"max_attempts": 10, "mode": "standard"}
+        assert session_config.connect_timeout == BOTO3_CONNECT_TIMEOUT
+        assert session_config.read_timeout == BOTO3_READ_TIMEOUT
+
+    def test_set_session_config_0_max_attempts_disables_retries(self):
+        session_config = AwsProvider.set_session_config(0)
+
+        assert session_config.retries == {"max_attempts": 0, "mode": "standard"}
+
+    @mock_aws
+    def test_aws_provider_0_max_attempts_reaches_clients(self):
+        aws_provider = AwsProvider(retries_max_attempts=0)
+        client = aws_provider.session.current_session.client(
+            "ec2", region_name=AWS_REGION_US_EAST_1
+        )
+
+        # botocore rewrites max_attempts into total_max_attempts (retries + 1)
+        assert client.meta.config.retries["total_max_attempts"] == 1
+
+    def test_set_session_config_timeouts(self):
+        session_config = AwsProvider.set_session_config(
+            None, connect_timeout=2, read_timeout=15
+        )
+
+        assert session_config.retries == {"max_attempts": 3, "mode": "standard"}
+        assert session_config.connect_timeout == 2
+        assert session_config.read_timeout == 15
+
+    @mock_aws
+    def test_aws_provider_timeouts_reach_session_config(self):
+        aws_provider = AwsProvider(connect_timeout=2, read_timeout=15)
+
+        assert aws_provider.session.session_config.connect_timeout == 2
+        assert aws_provider.session.session_config.read_timeout == 15
+
+    @mock_aws
+    def test_aws_set_up_session_forwards_timeouts(self):
+        aws_session = AwsSetUpSession(
+            aws_access_key_id="testing",
+            aws_secret_access_key="testing",
+            connect_timeout=2,
+            read_timeout=15,
+        )
+
+        assert aws_session._session.session_config.connect_timeout == 2
+        assert aws_session._session.session_config.read_timeout == 15
 
     def test_get_default_session_config(self):
         config = get_default_session_config()
 
         assert config.user_agent_extra == BOTO3_USER_AGENT_EXTRA
         assert config.retries == {"max_attempts": 3, "mode": "standard"}
+        assert config.connect_timeout == BOTO3_CONNECT_TIMEOUT
+        assert config.read_timeout == BOTO3_READ_TIMEOUT
+
+    def test_get_default_session_config_timeouts_from_env(self):
+        with mock.patch.dict(
+            os.environ,
+            {
+                "PROWLER_AWS_BOTO3_CONNECT_TIMEOUT": "3",
+                "PROWLER_AWS_BOTO3_READ_TIMEOUT": "20",
+            },
+        ):
+            config = get_default_session_config()
+
+        assert config.connect_timeout == 3
+        assert config.read_timeout == 20
+
+    def test_set_session_config_argument_overrides_env_timeouts(self):
+        with mock.patch.dict(os.environ, {"PROWLER_AWS_BOTO3_CONNECT_TIMEOUT": "3"}):
+            config = AwsProvider.set_session_config(None, connect_timeout=7)
+
+        assert config.connect_timeout == 7
+
+    @pytest.mark.parametrize("raw", ["0", "-5", "ten", "1.5"])
+    def test_get_boto3_timeout_from_env_rejects_non_positive_integers(self, raw):
+        with mock.patch.dict(os.environ, {"PROWLER_AWS_BOTO3_CONNECT_TIMEOUT": raw}):
+            with raises(
+                AWSInvalidBoto3TimeoutError, match="PROWLER_AWS_BOTO3_CONNECT_TIMEOUT"
+            ):
+                get_boto3_timeout_from_env("PROWLER_AWS_BOTO3_CONNECT_TIMEOUT", 10)
+
+    def test_get_boto3_timeout_from_env_blank_falls_back_to_default(self):
+        with mock.patch.dict(os.environ, {"PROWLER_AWS_BOTO3_CONNECT_TIMEOUT": "  "}):
+            assert (
+                get_boto3_timeout_from_env("PROWLER_AWS_BOTO3_CONNECT_TIMEOUT", 10)
+                == 10
+            )
 
     @mock_aws
     @patch(

From f9c02da90a41f5b00a06c61b7fbfa6006ed4c33b Mon Sep 17 00:00:00 2001
From: StylusFrost <43682773+StylusFrost@users.noreply.github.com>
Date: Thu, 10 Sep 2026 17:15:13 +0200
Subject: [PATCH 50/77] feat(aws): support the ISO partitions for region
 resolution and scanning (#12759)

Co-authored-by: pedrooot <pedromarting3@gmail.com>
---
 .../sdk-refresh-aws-services-regions.yml      |    5 +-
 .../changelog.d/aws-iso-partitions.added.md   |    1 +
 .../changelog.d/aws-iso-partitions.fixed.md   |    1 +
 .../aws-regional-clients-empty-dict.fixed.md  |    1 +
 ...service-regions-unknown-partition.fixed.md |    1 +
 prowler/providers/aws/aws_provider.py         |   27 +-
 .../providers/aws/aws_regions_by_service.json | 2621 +++++++++++++++++
 tests/providers/aws/aws_provider_test.py      |  119 +-
 tests/providers/aws/utils.py                  |    5 +-
 util/update_aws_services_regions.py           |  364 ++-
 10 files changed, 3045 insertions(+), 100 deletions(-)
 create mode 100644 prowler/changelog.d/aws-iso-partitions.added.md
 create mode 100644 prowler/changelog.d/aws-iso-partitions.fixed.md
 create mode 100644 prowler/changelog.d/aws-regional-clients-empty-dict.fixed.md
 create mode 100644 prowler/changelog.d/aws-service-regions-unknown-partition.fixed.md

diff --git a/.github/workflows/sdk-refresh-aws-services-regions.yml b/.github/workflows/sdk-refresh-aws-services-regions.yml
index 5a38858247..075852c6a6 100644
--- a/.github/workflows/sdk-refresh-aws-services-regions.yml
+++ b/.github/workflows/sdk-refresh-aws-services-regions.yml
@@ -44,7 +44,10 @@ jobs:
           cache: 'pip'
 
       - name: Install dependencies
-        run: pip install boto3
+        # Pinned to the versions in pyproject.toml: the ISO partitions region
+        # data comes from the endpoints.json bundled with botocore, so the
+        # botocore version is itself a data source and must be deterministic
+        run: pip install boto3==1.40.61 botocore==1.40.61
 
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@d979d5b3a71173a29b74b5b88418bfda9437d885 # v6.1.1
diff --git a/prowler/changelog.d/aws-iso-partitions.added.md b/prowler/changelog.d/aws-iso-partitions.added.md
new file mode 100644
index 0000000000..41282ea353
--- /dev/null
+++ b/prowler/changelog.d/aws-iso-partitions.added.md
@@ -0,0 +1 @@
+AWS ISO partitions (`aws-iso`, `aws-iso-b`, `aws-iso-e` and `aws-iso-f`) to the AWS service region matrix, generated from the endpoints data bundled with botocore
diff --git a/prowler/changelog.d/aws-iso-partitions.fixed.md b/prowler/changelog.d/aws-iso-partitions.fixed.md
new file mode 100644
index 0000000000..c3424d51ba
--- /dev/null
+++ b/prowler/changelog.d/aws-iso-partitions.fixed.md
@@ -0,0 +1 @@
+`AwsProvider.get_global_region()` now returns a real region for each ISO partition instead of the `aws-iso-global` pseudo endpoint, which collapsed the four partitions into one answer
diff --git a/prowler/changelog.d/aws-regional-clients-empty-dict.fixed.md b/prowler/changelog.d/aws-regional-clients-empty-dict.fixed.md
new file mode 100644
index 0000000000..bd5f7798ac
--- /dev/null
+++ b/prowler/changelog.d/aws-regional-clients-empty-dict.fixed.md
@@ -0,0 +1 @@
+`AwsProvider.generate_regional_clients()` now returns an empty dict instead of `None` when the regional clients cannot be built, a failure that surfaced later as `AttributeError: 'NoneType' object has no attribute 'values'`
diff --git a/prowler/changelog.d/aws-service-regions-unknown-partition.fixed.md b/prowler/changelog.d/aws-service-regions-unknown-partition.fixed.md
new file mode 100644
index 0000000000..881ce2c94b
--- /dev/null
+++ b/prowler/changelog.d/aws-service-regions-unknown-partition.fixed.md
@@ -0,0 +1 @@
+`AwsProvider.get_available_aws_service_regions()` now returns an empty set for an unknown service or partition instead of raising `KeyError`, so a service unavailable in the audited partition is skipped
diff --git a/prowler/providers/aws/aws_provider.py b/prowler/providers/aws/aws_provider.py
index 07e3ecab89..e204318593 100644
--- a/prowler/providers/aws/aws_provider.py
+++ b/prowler/providers/aws/aws_provider.py
@@ -921,6 +921,9 @@ class AwsProvider(Provider):
             logger.error(
                 f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
             )
+            # Return an empty dict, as promised by the signature, so the service
+            # is simply not scanned instead of the callers failing later on a None
+            return {}
 
     @staticmethod
     def get_available_aws_service_regions(
@@ -936,9 +939,13 @@ class AwsProvider(Provider):
 
         Returns:
             - A set of strings representing the available regions for the given service and partition.
+              A service or a partition not present in the regions file yields an empty set, the same
+              outcome as a service explicitly recorded as unavailable in the partition.
         """
         data = read_aws_regions_file()
-        json_regions = set(data["services"][service]["regions"][partition])
+        json_regions = set(
+            data["services"].get(service, {}).get("regions", {}).get(partition, [])
+        )
         if audited_regions:
             # Get common regions between input and json
             regions = json_regions.intersection(audited_regions)
@@ -1145,16 +1152,14 @@ class AwsProvider(Provider):
         Example:
             global_region = get_global_region()a
         """
-        global_region = "us-east-1"
-        if self._identity.partition == "aws-cn":
-            global_region = "cn-north-1"
-        elif self._identity.partition == "aws-eusc":
-            global_region = "eusc-de-east-1"
-        elif self._identity.partition == "aws-us-gov":
-            global_region = "us-gov-east-1"
-        elif "aws-iso" in self._identity.partition:
-            global_region = "aws-iso-global"
-        return global_region
+        # The first region of the partition is the one of its global STS endpoint,
+        # which is always a real region, never a pseudo endpoint like "aws-iso-global"
+        partition_regions = get_botocore_partition_regions().get(
+            self._identity.partition
+        )
+        if partition_regions:
+            return partition_regions[0]
+        return "us-east-1"
 
     @staticmethod
     def input_role_mfa_token_and_code() -> AWSMFAInfo:
diff --git a/prowler/providers/aws/aws_regions_by_service.json b/prowler/providers/aws/aws_regions_by_service.json
index bd66643d27..bb51556b78 100644
--- a/prowler/providers/aws/aws_regions_by_service.json
+++ b/prowler/providers/aws/aws_regions_by_service.json
@@ -10,6 +10,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -58,6 +62,15 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -102,6 +115,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -150,6 +167,15 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -201,6 +227,15 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -221,6 +256,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -238,6 +277,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -268,6 +311,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -292,6 +339,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -323,6 +374,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -351,6 +406,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -379,6 +438,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -427,6 +490,17 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -461,6 +535,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -510,6 +588,17 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -561,6 +650,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -612,6 +716,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -640,6 +759,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -659,6 +782,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -693,6 +820,21 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -737,6 +879,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -750,6 +896,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -787,6 +937,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -807,6 +961,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -834,6 +992,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -880,6 +1042,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -923,6 +1089,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -974,6 +1144,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -1022,6 +1207,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -1073,6 +1262,19 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -1097,6 +1299,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1118,6 +1324,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1166,6 +1376,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -1217,6 +1431,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -1232,6 +1461,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1250,6 +1483,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1298,6 +1535,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -1319,6 +1560,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1337,6 +1582,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1385,6 +1634,18 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -1418,6 +1679,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -1469,6 +1734,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -1484,6 +1764,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1496,6 +1780,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1506,6 +1794,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1550,6 +1842,12 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -1576,6 +1874,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -1606,6 +1908,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1626,6 +1932,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -1657,6 +1967,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -1670,6 +1984,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1680,6 +1998,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1694,6 +2016,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1711,6 +2037,18 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-south-1"
+        ],
         "aws-us-gov": []
       }
     },
@@ -1754,6 +2092,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1781,6 +2123,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -1812,6 +2158,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -1826,6 +2176,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1845,6 +2199,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1866,6 +2224,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -1880,6 +2242,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1899,6 +2265,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1919,6 +2289,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1939,6 +2313,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -1970,6 +2348,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -2018,6 +2400,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -2039,6 +2436,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -2071,6 +2472,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -2104,6 +2509,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -2155,6 +2564,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -2204,6 +2628,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -2245,6 +2673,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -2267,6 +2699,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -2307,6 +2743,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -2358,6 +2798,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -2385,6 +2840,15 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": []
       }
     },
@@ -2433,6 +2897,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -2458,6 +2937,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -2501,6 +2984,18 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -2515,6 +3010,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -2552,6 +3051,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -2581,6 +3084,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1"
         ]
@@ -2631,6 +3138,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -2653,6 +3175,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -2672,6 +3198,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -2714,6 +3244,13 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -2743,6 +3280,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1"
         ]
@@ -2772,6 +3313,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -2782,6 +3327,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -2827,6 +3376,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -2877,6 +3430,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -2925,6 +3482,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -2948,6 +3509,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -2969,6 +3534,15 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -2987,6 +3561,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -3031,6 +3609,15 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -3060,6 +3647,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -3108,6 +3699,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -3130,6 +3736,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -3151,6 +3761,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -3170,6 +3784,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -3189,6 +3807,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -3201,6 +3823,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -3220,6 +3846,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -3267,6 +3897,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -3315,6 +3949,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -3330,6 +3968,14 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-south-1"
+        ],
         "aws-us-gov": []
       }
     },
@@ -3344,6 +3990,16 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [
+          "us-isof-south-1"
+        ],
         "aws-us-gov": []
       }
     },
@@ -3363,6 +4019,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -3394,6 +4054,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -3416,6 +4080,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -3430,6 +4098,12 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -3478,6 +4152,15 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -3509,6 +4192,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -3536,6 +4223,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -3555,6 +4246,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -3585,6 +4280,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -3598,6 +4297,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -3623,6 +4326,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -3671,6 +4378,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -3690,6 +4412,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -3738,6 +4464,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -3789,6 +4530,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -3836,6 +4592,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -3884,6 +4655,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -3935,6 +4710,20 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -3967,6 +4756,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -4015,6 +4808,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4066,6 +4874,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4117,6 +4940,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4168,6 +5006,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4219,6 +5072,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4233,6 +5101,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -4281,6 +5153,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4332,6 +5219,20 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4383,6 +5284,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4429,6 +5345,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4480,6 +5400,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4527,6 +5462,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4578,6 +5517,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4629,6 +5583,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4646,6 +5615,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -4694,6 +5667,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4736,6 +5724,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4787,6 +5779,12 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4811,6 +5809,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -4859,6 +5861,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4910,6 +5927,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4961,6 +5982,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -4995,6 +6031,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -5043,6 +6083,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -5065,6 +6109,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -5084,6 +6132,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -5098,6 +6150,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -5146,6 +6202,20 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -5182,6 +6252,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -5231,6 +6305,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -5253,6 +6331,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -5272,6 +6354,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -5287,6 +6373,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -5317,6 +6407,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -5365,6 +6459,18 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -5416,6 +6522,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -5467,6 +6577,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -5518,6 +6632,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -5569,6 +6687,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -5607,6 +6729,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -5641,6 +6767,15 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -5687,6 +6822,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -5735,6 +6874,19 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -5757,6 +6909,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -5785,6 +6941,10 @@
           "cn-north-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -5809,6 +6969,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -5857,6 +7021,17 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -5876,6 +7051,14 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -5927,6 +7110,19 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -5978,6 +7174,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6029,6 +7229,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6080,6 +7284,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6104,6 +7312,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6152,6 +7364,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6200,6 +7416,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6239,6 +7459,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -6249,6 +7473,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -6284,6 +7512,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6322,6 +7554,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6358,6 +7594,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6373,6 +7613,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -6386,6 +7630,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -6418,6 +7666,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6456,6 +7708,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6471,6 +7727,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -6506,6 +7766,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6531,6 +7795,10 @@
           "cn-north-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -6541,6 +7809,10 @@
         "aws": [],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -6561,6 +7833,10 @@
           "cn-north-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -6579,6 +7855,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -6595,6 +7875,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -6611,6 +7895,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -6627,6 +7915,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -6675,6 +7967,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6724,6 +8020,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6746,6 +8046,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -6766,6 +8070,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -6814,6 +8122,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6865,6 +8188,14 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6899,6 +8230,12 @@
           "cn-north-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -6950,6 +8287,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -7001,6 +8353,19 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -7052,6 +8417,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -7100,6 +8480,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -7142,6 +8526,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -7165,6 +8553,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -7187,6 +8579,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -7237,6 +8633,20 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -7285,6 +8695,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -7330,6 +8744,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -7361,6 +8779,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7409,6 +8831,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -7424,6 +8861,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7451,6 +8892,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7481,6 +8926,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -7495,6 +8944,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7526,6 +8979,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7557,6 +9014,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7572,6 +9033,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -7584,6 +9049,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7615,6 +9084,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -7666,6 +9139,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -7681,6 +9158,12 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7691,6 +9174,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7705,6 +9192,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7715,6 +9206,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7750,6 +9245,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -7785,6 +9284,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7817,6 +9320,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -7848,6 +9355,14 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7875,6 +9390,14 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7904,6 +9427,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7934,6 +9461,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7952,6 +9483,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7970,6 +9505,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -7999,6 +9538,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8013,6 +9556,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8044,6 +9591,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -8088,6 +9639,12 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -8107,6 +9664,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8150,6 +9711,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -8179,6 +9744,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8195,6 +9764,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8211,6 +9784,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8223,6 +9800,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8271,6 +9852,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -8284,6 +9869,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8327,6 +9916,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8368,6 +9961,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8411,6 +10008,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -8448,6 +10060,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8496,6 +10112,14 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -8525,6 +10149,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8568,6 +10196,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -8608,6 +10240,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8651,6 +10287,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8663,6 +10303,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8673,6 +10317,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8721,6 +10369,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -8765,6 +10428,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -8795,6 +10462,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8814,6 +10485,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8862,6 +10537,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -8896,6 +10586,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -8917,6 +10611,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8935,6 +10633,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -8983,6 +10685,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -9012,6 +10729,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -9050,6 +10771,14 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -9063,6 +10792,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -9073,6 +10806,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -9083,6 +10820,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -9108,6 +10849,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -9153,6 +10898,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -9197,6 +10946,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -9225,6 +10978,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -9248,6 +11005,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -9296,6 +11057,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -9320,6 +11096,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -9337,6 +11117,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -9352,6 +11136,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -9394,6 +11182,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -9435,6 +11227,15 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": []
       }
     },
@@ -9472,6 +11273,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -9490,6 +11295,18 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-south-1"
+        ],
         "aws-us-gov": []
       }
     },
@@ -9538,6 +11355,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -9561,6 +11382,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -9572,6 +11397,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -9585,6 +11414,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -9596,6 +11429,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -9633,6 +11470,13 @@
           "cn-north-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -9684,6 +11528,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -9735,6 +11594,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -9786,6 +11660,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -9812,6 +11701,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -9822,6 +11715,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -9870,6 +11767,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -9921,6 +11833,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -9971,6 +11887,15 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10001,6 +11926,13 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -10019,6 +11951,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -10048,6 +11984,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10097,6 +12037,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10148,6 +12092,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10199,6 +12158,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10250,6 +12224,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10290,6 +12268,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10341,6 +12323,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10392,6 +12389,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10431,6 +12432,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -10441,6 +12446,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -10451,6 +12460,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -10497,6 +12510,15 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10548,6 +12570,20 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10566,6 +12602,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -10609,6 +12649,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10660,6 +12704,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10706,6 +12765,15 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10741,6 +12809,14 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10789,6 +12865,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10840,6 +12920,17 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10880,6 +12971,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -10890,6 +12985,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -10931,6 +13030,17 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": []
       }
     },
@@ -10979,6 +13089,17 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -10990,6 +13111,10 @@
         "aws": [],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -11035,6 +13160,15 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11086,6 +13220,20 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11126,6 +13274,15 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11146,6 +13303,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -11194,6 +13355,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11231,6 +13407,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -11279,6 +13459,15 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11308,6 +13497,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11341,6 +13534,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11392,6 +13589,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11437,6 +13649,12 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11478,6 +13696,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11529,6 +13751,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11570,6 +13807,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11611,6 +13852,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11655,6 +13900,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -11689,6 +13938,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11740,6 +13993,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11755,6 +14012,10 @@
           "cn-north-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -11772,6 +14033,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -11798,6 +14063,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -11830,6 +14099,15 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11857,6 +14135,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -11905,6 +14187,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -11951,6 +14248,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -11999,6 +14300,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -12050,6 +14366,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -12078,6 +14409,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -12103,6 +14438,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -12128,6 +14467,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -12165,6 +14508,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -12213,6 +14560,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -12264,6 +14615,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -12315,6 +14681,15 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -12366,6 +14741,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -12417,6 +14807,16 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -12432,6 +14832,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -12443,6 +14847,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -12491,6 +14899,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -12542,6 +14965,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -12557,6 +14995,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -12580,6 +15022,15 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -12599,6 +15050,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -12616,6 +15071,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -12650,6 +15109,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -12667,6 +15130,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -12686,6 +15153,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -12707,6 +15178,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -12739,6 +15214,15 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -12790,6 +15274,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -12841,6 +15329,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -12869,6 +15361,15 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -12919,6 +15420,14 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -12932,6 +15441,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -12959,6 +15472,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -13008,6 +15525,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -13044,6 +15565,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -13064,6 +15589,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -13112,6 +15641,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -13154,6 +15687,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -13199,6 +15736,10 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -13250,6 +15791,14 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -13293,6 +15842,10 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -13344,6 +15897,14 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -13374,6 +15935,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -13404,6 +15969,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -13426,6 +15995,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-west-1"
         ]
@@ -13447,6 +16020,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -13462,6 +16039,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -13474,6 +16055,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -13486,6 +16071,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -13514,6 +16103,15 @@
           "cn-northwest-1"
         ],
         "aws-eusc": [],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1"
+        ],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
@@ -13532,6 +16130,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -13551,6 +16153,10 @@
         ],
         "aws-cn": [],
         "aws-eusc": [],
+        "aws-iso": [],
+        "aws-iso-b": [],
+        "aws-iso-e": [],
+        "aws-iso-f": [],
         "aws-us-gov": []
       }
     },
@@ -13599,6 +16205,21 @@
         "aws-eusc": [
           "eusc-de-east-1"
         ],
+        "aws-iso": [
+          "us-iso-east-1",
+          "us-iso-west-1"
+        ],
+        "aws-iso-b": [
+          "us-isob-east-1",
+          "us-isob-west-1"
+        ],
+        "aws-iso-e": [
+          "eu-isoe-west-1"
+        ],
+        "aws-iso-f": [
+          "us-isof-east-1",
+          "us-isof-south-1"
+        ],
         "aws-us-gov": [
           "us-gov-east-1",
           "us-gov-west-1"
diff --git a/tests/providers/aws/aws_provider_test.py b/tests/providers/aws/aws_provider_test.py
index cd8bb4f049..f899706453 100644
--- a/tests/providers/aws/aws_provider_test.py
+++ b/tests/providers/aws/aws_provider_test.py
@@ -59,6 +59,7 @@ from tests.providers.aws.utils import (
     AWS_EUSC_PARTITION,
     AWS_GOV_CLOUD_ACCOUNT_ARN,
     AWS_GOV_CLOUD_PARTITION,
+    AWS_ISO_B_PARTITION,
     AWS_ISO_PARTITION,
     AWS_REGION_CN_NORTH_1,
     AWS_REGION_CN_NORTHWEST_1,
@@ -67,7 +68,9 @@ from tests.providers.aws.utils import (
     AWS_REGION_EUSC_DE_EAST_1,
     AWS_REGION_GOV_CLOUD_US_EAST_1,
     AWS_REGION_GOV_CLOUD_US_WEST_1,
-    AWS_REGION_ISO_GLOBAL,
+    AWS_REGION_ISO_B_EAST_1,
+    AWS_REGION_ISO_EAST_1,
+    AWS_REGION_ISO_WEST_1,
     AWS_REGION_US_EAST_1,
     AWS_REGION_US_EAST_2,
     EXAMPLE_AMI_ID,
@@ -1192,6 +1195,13 @@ aws:
             == AWS_REGION_EU_WEST_1
         )
 
+    @mock_aws
+    def test_aws_get_global_region(self):
+        aws_provider = AwsProvider()
+        aws_provider._identity.partition = AWS_COMMERCIAL_PARTITION
+
+        assert aws_provider.get_global_region() == AWS_REGION_US_EAST_1
+
     @mock_aws
     def test_aws_gov_get_global_region(self):
         aws_provider = AwsProvider()
@@ -1211,7 +1221,21 @@ aws:
         aws_provider = AwsProvider()
         aws_provider._identity.partition = AWS_ISO_PARTITION
 
-        assert aws_provider.get_global_region() == AWS_REGION_ISO_GLOBAL
+        assert aws_provider.get_global_region() == AWS_REGION_ISO_EAST_1
+
+    @mock_aws
+    def test_aws_iso_b_get_global_region(self):
+        aws_provider = AwsProvider()
+        aws_provider._identity.partition = AWS_ISO_B_PARTITION
+
+        assert aws_provider.get_global_region() == AWS_REGION_ISO_B_EAST_1
+
+    @mock_aws
+    def test_get_global_region_for_an_unknown_partition(self):
+        aws_provider = AwsProvider()
+        aws_provider._identity.partition = "aws-unknown"
+
+        assert aws_provider.get_global_region() == AWS_REGION_US_EAST_1
 
     @mock_aws
     def test_aws_eusc_get_global_region(self):
@@ -1299,6 +1323,88 @@ aws:
                 len(aws_provider.get_available_aws_service_regions("ec2", "aws")) == 17
             )
 
+    @mock_aws
+    def test_get_available_aws_service_regions_commercial_and_gov_cloud(self):
+        aws_provider = AwsProvider()
+
+        assert AWS_REGION_US_EAST_1 in aws_provider.get_available_aws_service_regions(
+            "ec2", AWS_COMMERCIAL_PARTITION
+        )
+        assert (
+            AWS_REGION_GOV_CLOUD_US_EAST_1
+            in aws_provider.get_available_aws_service_regions(
+                "ec2", AWS_GOV_CLOUD_PARTITION
+            )
+        )
+        # A service recorded as unavailable in the partition yields an empty set
+        assert (
+            aws_provider.get_available_aws_service_regions(
+                "bedrock-agent", AWS_CHINA_PARTITION
+            )
+            == set()
+        )
+
+    @mock_aws
+    def test_get_available_aws_service_regions_iso_partitions(self):
+        aws_provider = AwsProvider()
+
+        assert aws_provider.get_available_aws_service_regions(
+            "ec2", AWS_ISO_PARTITION
+        ) == {
+            AWS_REGION_ISO_EAST_1,
+            AWS_REGION_ISO_WEST_1,
+        }
+        assert aws_provider.get_available_aws_service_regions(
+            "guardduty", AWS_ISO_B_PARTITION
+        ) == {AWS_REGION_ISO_B_EAST_1}
+        # Every service carries every ISO partition, empty when not available
+        assert (
+            aws_provider.get_available_aws_service_regions(
+                "bedrock", AWS_ISO_B_PARTITION
+            )
+            == set()
+        )
+
+    @mock_aws
+    def test_get_available_aws_service_regions_unknown_partition(self):
+        aws_provider = AwsProvider()
+
+        assert (
+            aws_provider.get_available_aws_service_regions("ec2", "aws-unknown")
+            == set()
+        )
+
+    @mock_aws
+    def test_get_available_aws_service_regions_unknown_service(self):
+        aws_provider = AwsProvider()
+
+        assert (
+            aws_provider.get_available_aws_service_regions(
+                "unknown-service", AWS_COMMERCIAL_PARTITION
+            )
+            == set()
+        )
+
+    @mock_aws
+    def test_generate_regional_clients_service_not_in_partition(self):
+        aws_provider = AwsProvider()
+        aws_provider._identity.partition = AWS_ISO_PARTITION
+
+        response = aws_provider.generate_regional_clients("bedrock")
+
+        assert response == {}
+
+    @mock_aws
+    def test_generate_regional_clients_returns_empty_dict_on_error(self):
+        aws_provider = AwsProvider()
+
+        with patch.object(
+            AwsProvider,
+            "get_available_aws_service_regions",
+            side_effect=Exception("boom"),
+        ):
+            assert aws_provider.generate_regional_clients("ec2") == {}
+
     @mock_aws
     def test_get_tagged_resources(self):
         ec2_client = client("ec2", region_name=AWS_REGION_EU_CENTRAL_1)
@@ -2065,7 +2171,8 @@ aws:
         assert not recovered_regions
 
     def test_get_regions_all_count(self):
-        assert len(AwsProvider.get_regions(partition=None)) == 39
+        # 34 aws + 2 aws-cn + 2 aws-us-gov + 1 aws-eusc + 7 ISO regions
+        assert len(AwsProvider.get_regions(partition=None)) == 46
 
     def test_get_regions_cn_count(self):
         assert len(AwsProvider.get_regions("aws-cn")) == 2
@@ -2073,6 +2180,12 @@ aws:
     def test_get_regions_aws_count(self):
         assert len(AwsProvider.get_regions(partition="aws")) == 34
 
+    def test_get_regions_iso_count(self):
+        assert AwsProvider.get_regions(AWS_ISO_PARTITION) == {
+            AWS_REGION_ISO_EAST_1,
+            AWS_REGION_ISO_WEST_1,
+        }
+
     def test_get_all_regions(self):
         with patch(
             "prowler.providers.aws.aws_provider.read_aws_regions_file",
diff --git a/tests/providers/aws/utils.py b/tests/providers/aws/utils.py
index b19efd3eec..c0cbff1c10 100644
--- a/tests/providers/aws/utils.py
+++ b/tests/providers/aws/utils.py
@@ -21,6 +21,7 @@ AWS_GOV_CLOUD_PARTITION = "aws-us-gov"
 AWS_CHINA_PARTITION = "aws-cn"
 AWS_EUSC_PARTITION = "aws-eusc"
 AWS_ISO_PARTITION = "aws-iso"
+AWS_ISO_B_PARTITION = "aws-iso-b"
 
 # Root AWS Account
 AWS_ACCOUNT_NUMBER = "123456789012"
@@ -54,7 +55,9 @@ AWS_REGION_GOV_CLOUD_US_EAST_1 = "us-gov-east-1"
 AWS_REGION_GOV_CLOUD_US_WEST_1 = "us-gov-west-1"
 
 # Iso Regions
-AWS_REGION_ISO_GLOBAL = "aws-iso-global"
+AWS_REGION_ISO_EAST_1 = "us-iso-east-1"
+AWS_REGION_ISO_WEST_1 = "us-iso-west-1"
+AWS_REGION_ISO_B_EAST_1 = "us-isob-east-1"
 
 # European Sovereign Cloud Regions
 AWS_REGION_EUSC_DE_EAST_1 = "eusc-de-east-1"
diff --git a/util/update_aws_services_regions.py b/util/update_aws_services_regions.py
index 40be038723..d3043f50db 100644
--- a/util/update_aws_services_regions.py
+++ b/util/update_aws_services_regions.py
@@ -4,6 +4,7 @@ import os
 import sys
 
 import boto3
+from botocore.session import Session as BotocoreSession
 
 # Logging config
 logging.basicConfig(
@@ -13,91 +14,286 @@ logging.basicConfig(
     level=logging.INFO,
 )
 
-regions_by_service = {"services": {}}
+# AWS partitions that the SSM global-infrastructure parameters do not publish.
+# Their availability comes from the endpoints.json bundled with botocore, which
+# is offline data and needs neither credentials nor network access.
+ISO_PARTITIONS = ("aws-iso", "aws-iso-b", "aws-iso-e", "aws-iso-f")
 
-logging.info("Recovering AWS Regions by Service")
-client = boto3.client("ssm", region_name="us-east-1")
-get_parameters_by_path_paginator = client.get_paginator("get_parameters_by_path")
-# Get all AWS Available Services
-for page in get_parameters_by_path_paginator.paginate(
-    Path="/aws/service/global-infrastructure/services"
-):
-    for service in page["Parameters"]:
-        regions_by_service["services"][service["Value"]] = {}
-        # Get all AWS Regions for the specific service
-        regions = {"aws": [], "aws-cn": [], "aws-eusc": [], "aws-us-gov": []}
-        for page in get_parameters_by_path_paginator.paginate(
-            Path="/aws/service/global-infrastructure/services/"
-            + service["Value"]
-            + "/regions"
-        ):
-            for region in page["Parameters"]:
-                if "cn" in region["Value"]:
-                    regions["aws-cn"].append(region["Value"])
-                elif "eusc" in region["Value"]:
-                    regions["aws-eusc"].append(region["Value"])
-                elif "gov" in region["Value"]:
-                    regions["aws-us-gov"].append(region["Value"])
-                else:
-                    regions["aws"].append(region["Value"])
-                # Sort regions per partition
-                regions["aws"] = sorted(regions["aws"])
-                regions["aws-cn"] = sorted(regions["aws-cn"])
-                regions["aws-eusc"] = sorted(regions["aws-eusc"])
-                regions["aws-us-gov"] = sorted(regions["aws-us-gov"])
-        regions_by_service["services"][service["Value"]]["regions"] = regions
+# Cost Explorer: botocore keys it by its endpoint prefix "ce", while the matrix
+# (and the boto3 client name) calls it "costexplorer". Explicit rename override,
+# since no boto3 service model resolves the "ce" prefix.
+ISO_ENDPOINT_PREFIX_RENAMES = {"ce": "costexplorer"}
 
-# Include the regions for the subservices and the services not present
-logging.info("Updating subservices and the services not present in the original matrix")
-# macie2 --> macie
-regions_by_service["services"]["macie2"] = regions_by_service["services"]["macie"]
-# bedrock-agent is not in SSM, and has different availability than bedrock
-# See: https://docs.aws.amazon.com/bedrock/latest/userguide/agents-supported.html
-regions_by_service["services"]["bedrock-agent"] = {
-    "regions": {
-        "aws": [
-            "ap-northeast-1",
-            "ap-northeast-2",
-            "ap-south-1",
-            "ap-southeast-1",
-            "ap-southeast-2",
-            "ca-central-1",
-            "eu-central-1",
-            "eu-central-2",
-            "eu-west-1",
-            "eu-west-2",
-            "eu-west-3",
-            "sa-east-1",
-            "us-east-1",
-            "us-west-2",
-        ],
-        "aws-cn": [],
-        "aws-eusc": [],
-        "aws-us-gov": [
-            "us-gov-west-1",
-        ],
+# "transcribestreaming" is the streaming endpoint of Amazon Transcribe. The
+# "transcribe" prefix is already present in the same partitions with the same
+# regions, so mapping it would only duplicate data. Ignoring it is a deliberate
+# decision, not a resolution failure.
+ISO_IGNORED_ENDPOINT_PREFIXES = {"transcribestreaming"}
+
+# A service whose only endpoint in a partition is the partition-wide pseudo
+# endpoint (for example "aws-iso-global") gets every region of that partition,
+# matching how the matrix already records iam, organizations, route53 and
+# support for aws and aws-us-gov. Cost Explorer is the exception: the matrix
+# records it as a single-region service (aws: us-east-1, aws-cn: cn-northwest-1),
+# so it only gets the region declared in the endpoint's credentialScope.
+ISO_SINGLE_REGION_PARTITION_GLOBAL_SERVICES = {"costexplorer"}
+
+
+def get_regions_by_service_from_ssm() -> dict:
+    """Get the AWS services and their regions for the partitions published in
+    the SSM global-infrastructure parameters: aws, aws-cn, aws-eusc and
+    aws-us-gov.
+
+    Returns:
+        dict: The AWS regions matrix, keyed by service name.
+    """
+    regions_by_service = {"services": {}}
+
+    logging.info("Recovering AWS Regions by Service")
+    client = boto3.client("ssm", region_name="us-east-1")
+    get_parameters_by_path_paginator = client.get_paginator("get_parameters_by_path")
+    # Get all AWS Available Services
+    for page in get_parameters_by_path_paginator.paginate(
+        Path="/aws/service/global-infrastructure/services"
+    ):
+        for service in page["Parameters"]:
+            regions_by_service["services"][service["Value"]] = {}
+            # Get all AWS Regions for the specific service
+            regions = {
+                "aws": [],
+                "aws-cn": [],
+                "aws-eusc": [],
+                "aws-us-gov": [],
+                "aws-iso": [],
+                "aws-iso-b": [],
+                "aws-iso-e": [],
+                "aws-iso-f": [],
+            }
+            for page in get_parameters_by_path_paginator.paginate(
+                Path="/aws/service/global-infrastructure/services/"
+                + service["Value"]
+                + "/regions"
+            ):
+                for region in page["Parameters"]:
+                    if "cn" in region["Value"]:
+                        regions["aws-cn"].append(region["Value"])
+                    elif "eusc" in region["Value"]:
+                        regions["aws-eusc"].append(region["Value"])
+                    elif "gov" in region["Value"]:
+                        regions["aws-us-gov"].append(region["Value"])
+                    else:
+                        regions["aws"].append(region["Value"])
+                    # Sort regions per partition
+                    regions["aws"] = sorted(regions["aws"])
+                    regions["aws-cn"] = sorted(regions["aws-cn"])
+                    regions["aws-eusc"] = sorted(regions["aws-eusc"])
+                    regions["aws-us-gov"] = sorted(regions["aws-us-gov"])
+            regions_by_service["services"][service["Value"]]["regions"] = regions
+
+    return regions_by_service
+
+
+def add_subservices_and_missing_services(regions_by_service: dict) -> None:
+    """Include the regions for the subservices and the services not present in
+    the original matrix."""
+    logging.info(
+        "Updating subservices and the services not present in the original matrix"
+    )
+    # macie2 --> macie
+    regions_by_service["services"]["macie2"] = regions_by_service["services"]["macie"]
+    # bedrock-agent is not in SSM, and has different availability than bedrock
+    # See: https://docs.aws.amazon.com/bedrock/latest/userguide/agents-supported.html
+    regions_by_service["services"]["bedrock-agent"] = {
+        "regions": {
+            "aws": [
+                "ap-northeast-1",
+                "ap-northeast-2",
+                "ap-south-1",
+                "ap-southeast-1",
+                "ap-southeast-2",
+                "ca-central-1",
+                "eu-central-1",
+                "eu-central-2",
+                "eu-west-1",
+                "eu-west-2",
+                "eu-west-3",
+                "sa-east-1",
+                "us-east-1",
+                "us-west-2",
+            ],
+            "aws-cn": [],
+            "aws-eusc": [],
+            "aws-us-gov": [
+                "us-gov-west-1",
+            ],
+        }
     }
-}
-# cognito --> cognito-idp
-regions_by_service["services"]["cognito"] = regions_by_service["services"][
-    "cognito-idp"
-]
-# opensearch --> es
-regions_by_service["services"]["opensearch"] = regions_by_service["services"]["es"]
-# elbv2 --> elb
-regions_by_service["services"]["elbv2"] = regions_by_service["services"]["elb"]
-# wafv2 --> waf
-regions_by_service["services"]["wafv2"] = regions_by_service["services"]["waf"]
-# wellarchitected --> wellarchitectedtool
-regions_by_service["services"]["wellarchitected"] = regions_by_service["services"][
-    "wellarchitectedtool"
-]
-# sesv2 --> ses
-regions_by_service["services"]["sesv2"] = regions_by_service["services"]["ses"]
+    # cognito --> cognito-idp
+    regions_by_service["services"]["cognito"] = regions_by_service["services"][
+        "cognito-idp"
+    ]
+    # opensearch --> es
+    regions_by_service["services"]["opensearch"] = regions_by_service["services"]["es"]
+    # elbv2 --> elb
+    regions_by_service["services"]["elbv2"] = regions_by_service["services"]["elb"]
+    # wafv2 --> waf
+    regions_by_service["services"]["wafv2"] = regions_by_service["services"]["waf"]
+    # wellarchitected --> wellarchitectedtool
+    regions_by_service["services"]["wellarchitected"] = regions_by_service["services"][
+        "wellarchitectedtool"
+    ]
+    # sesv2 --> ses
+    regions_by_service["services"]["sesv2"] = regions_by_service["services"]["ses"]
 
-# Write to file
-parsed_matrix_regions_aws = f"{os.path.dirname(os.path.realpath(__name__))}/prowler/providers/aws/aws_regions_by_service.json"
-logging.info(f"Writing {parsed_matrix_regions_aws}")
-with open(parsed_matrix_regions_aws, "w") as outfile:
-    json.dump(regions_by_service, outfile, indent=2, sort_keys=True)
-    outfile.write("\n")
+
+def get_endpoint_prefix_to_services() -> dict:
+    """Map every botocore endpoint prefix to the set of boto3 service (client)
+    names using it.
+
+    botocore's endpoints.json keys services by endpoint prefix, while the matrix
+    keys them by the boto3/SSM service name. The mapping is derived from the SDK
+    itself instead of being hand-written, so it stays correct as the SDK evolves
+    (monitoring -> cloudwatch, elasticloadbalancing -> elb and elbv2, states ->
+    stepfunctions, api.ecr -> ecr, ...).
+
+    Returns:
+        dict: A dictionary mapping each endpoint prefix to a set of service names.
+    """
+    session = BotocoreSession()
+    endpoint_prefix_to_services = {}
+    for service_name in session.get_available_services():
+        endpoint_prefix = session.get_service_model(service_name).endpoint_prefix
+        endpoint_prefix_to_services.setdefault(endpoint_prefix, set()).add(service_name)
+    return endpoint_prefix_to_services
+
+
+def resolve_matrix_services(
+    endpoint_prefix: str, endpoint_prefix_to_services: dict, services: dict
+) -> set:
+    """Resolve a botocore endpoint prefix to the matrix service names it stands
+    for.
+
+    Args:
+        - endpoint_prefix: The botocore endpoint prefix.
+        - endpoint_prefix_to_services: The map returned by get_endpoint_prefix_to_services.
+        - services: The services of the AWS regions matrix.
+
+    Returns:
+        set: The matrix service names, empty when the prefix does not resolve.
+    """
+    renamed_service = ISO_ENDPOINT_PREFIX_RENAMES.get(endpoint_prefix)
+    if renamed_service:
+        return {renamed_service} & set(services)
+
+    service_names = endpoint_prefix_to_services.get(endpoint_prefix, set()) & set(
+        services
+    )
+    if not service_names and endpoint_prefix in services:
+        service_names = {endpoint_prefix}
+    return service_names
+
+
+def get_partition_global_service_regions(
+    service_names: set, service_data: dict, partition_regions: list
+) -> list:
+    """Get the regions of a service whose only endpoint in the partition is the
+    partition-wide pseudo endpoint (for example "aws-iso-global"), which is not
+    a region and must never be recorded as one.
+
+    Returns:
+        list: Every region of the partition, or only the credentialScope region
+            for the services the matrix records as single-region ones.
+    """
+    partition_endpoint = service_data.get("partitionEndpoint")
+    credential_scope_region = (
+        service_data.get("endpoints", {})
+        .get(partition_endpoint, {})
+        .get("credentialScope", {})
+        .get("region")
+    )
+    if service_names & ISO_SINGLE_REGION_PARTITION_GLOBAL_SERVICES:
+        if credential_scope_region in partition_regions:
+            return [credential_scope_region]
+        return []
+    return list(partition_regions)
+
+
+def add_iso_partitions_regions(regions_by_service: dict) -> None:
+    """Fill the aws-iso, aws-iso-b, aws-iso-e and aws-iso-f regions of every
+    service from the endpoints.json bundled with botocore.
+
+    It runs after the subservices and the services not present in the original
+    matrix have been added, so it sees the final set of services: the aliases
+    sharing a single dict and the hand-written bedrock-agent entry all get their
+    ISO partition keys.
+
+    Raises:
+        ValueError: If an endpoint prefix present in an ISO partition does not
+            resolve to a matrix service and is not explicitly ignored.
+    """
+    logging.info("Updating the ISO partitions regions from the botocore endpoints")
+    services = regions_by_service["services"]
+    endpoints_data = BotocoreSession().get_data("endpoints")
+    endpoint_prefix_to_services = get_endpoint_prefix_to_services()
+
+    # Every service carries every partition key, so the matrix stays rectangular
+    # even for the services with no presence at all in the ISO partitions.
+    for service in services.values():
+        for partition in ISO_PARTITIONS:
+            service["regions"].setdefault(partition, [])
+
+    for partition_data in endpoints_data["partitions"]:
+        partition = partition_data["partition"]
+        if partition not in ISO_PARTITIONS:
+            continue
+        partition_regions = sorted(partition_data.get("regions", {}))
+        for endpoint_prefix, service_data in partition_data.get("services", {}).items():
+            if endpoint_prefix in ISO_IGNORED_ENDPOINT_PREFIXES:
+                continue
+            service_names = resolve_matrix_services(
+                endpoint_prefix, endpoint_prefix_to_services, services
+            )
+            if not service_names:
+                raise ValueError(
+                    f"The botocore endpoint prefix '{endpoint_prefix}', present in the "
+                    f"'{partition}' partition, does not resolve to any service of the "
+                    "AWS regions matrix. Dropping it silently would leave the service "
+                    "out of the scans, so either add the prefix to "
+                    "ISO_ENDPOINT_PREFIX_RENAMES with the matrix service name it "
+                    "corresponds to, or add it to ISO_IGNORED_ENDPOINT_PREFIXES if it "
+                    "must not be mapped."
+                )
+            # Keep only the endpoints that are real regions of the partition,
+            # which drops the fips-* and the partition-wide pseudo endpoints.
+            regions = sorted(
+                set(service_data.get("endpoints", {})) & set(partition_regions)
+            )
+            if not regions:
+                regions = get_partition_global_service_regions(
+                    service_names, service_data, partition_regions
+                )
+            for service_name in service_names:
+                services[service_name]["regions"][partition] = list(regions)
+
+
+def write_regions_by_service(regions_by_service: dict) -> None:
+    """Write the AWS regions matrix to the file read by the AWS provider."""
+    repository_root = os.path.dirname(os.path.dirname(os.path.realpath(__file__)))
+    parsed_matrix_regions_aws = (
+        f"{repository_root}/prowler/providers/aws/aws_regions_by_service.json"
+    )
+    logging.info(f"Writing {parsed_matrix_regions_aws}")
+    with open(parsed_matrix_regions_aws, "w") as outfile:
+        json.dump(regions_by_service, outfile, indent=2, sort_keys=True)
+        outfile.write("\n")
+
+
+def main() -> None:
+    regions_by_service = get_regions_by_service_from_ssm()
+    add_subservices_and_missing_services(regions_by_service)
+    add_iso_partitions_regions(regions_by_service)
+    write_regions_by_service(regions_by_service)
+
+
+if __name__ == "__main__":
+    main()

From b378f1579869ed3f20fddb1712aa81610ab2d9e9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Fri, 11 Sep 2026 08:37:20 +0200
Subject: [PATCH 51/77] fix(aws): guard checks reading iam roles when unlisted
 (#12785)

---
 .../aws-checks-roles-unlisted.fixed.md        |  1 +
 ...oject_uses_allowed_github_organizations.py |  2 +-
 ...rvice_trust_restricts_source_to_account.py |  2 +-
 ...e_profile_restricts_session_permissions.py |  4 +-
 ..._uses_allowed_github_organizations_test.py | 55 ++++++++++++++++++-
 ..._trust_restricts_source_to_account_test.py |  4 ++
 ...file_restricts_session_permissions_test.py | 13 +++++
 7 files changed, 77 insertions(+), 4 deletions(-)
 create mode 100644 prowler/changelog.d/aws-checks-roles-unlisted.fixed.md

diff --git a/prowler/changelog.d/aws-checks-roles-unlisted.fixed.md b/prowler/changelog.d/aws-checks-roles-unlisted.fixed.md
new file mode 100644
index 0000000000..dc24ad1b49
--- /dev/null
+++ b/prowler/changelog.d/aws-checks-roles-unlisted.fixed.md
@@ -0,0 +1 @@
+`rolesanywhere_profile_restricts_session_permissions`, `iam_role_service_trust_restricts_source_to_account` and `codebuild_project_uses_allowed_github_organizations` crashing with `TypeError` when `iam:ListRoles` is denied
diff --git a/prowler/providers/aws/services/codebuild/codebuild_project_uses_allowed_github_organizations/codebuild_project_uses_allowed_github_organizations.py b/prowler/providers/aws/services/codebuild/codebuild_project_uses_allowed_github_organizations/codebuild_project_uses_allowed_github_organizations.py
index 750a5a6fdd..11bb9a8b00 100644
--- a/prowler/providers/aws/services/codebuild/codebuild_project_uses_allowed_github_organizations/codebuild_project_uses_allowed_github_organizations.py
+++ b/prowler/providers/aws/services/codebuild/codebuild_project_uses_allowed_github_organizations/codebuild_project_uses_allowed_github_organizations.py
@@ -23,7 +23,7 @@ class codebuild_project_uses_allowed_github_organizations(Check):
                 project_role = next(
                     (
                         role
-                        for role in iam_client.roles
+                        for role in iam_client.roles or []
                         if role.arn == project.service_role_arn
                     ),
                     None,
diff --git a/prowler/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account.py b/prowler/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account.py
index 795f39a458..07aa4ac073 100644
--- a/prowler/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account.py
+++ b/prowler/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account.py
@@ -377,7 +377,7 @@ class iam_role_service_trust_restricts_source_to_account(Check):
         status. The sibling token-wildcard check carries the same note, for the same reason.
         """
         findings = []
-        for role in iam_client.roles:
+        for role in iam_client.roles or []:
             # Service-linked roles are excluded: their trust relationship is managed by
             # the service and cannot be edited, so a finding would not be actionable.
             if "aws-service-role" in role.arn:
diff --git a/prowler/providers/aws/services/rolesanywhere/rolesanywhere_profile_restricts_session_permissions/rolesanywhere_profile_restricts_session_permissions.py b/prowler/providers/aws/services/rolesanywhere/rolesanywhere_profile_restricts_session_permissions/rolesanywhere_profile_restricts_session_permissions.py
index 5138b74ff3..2960518a67 100644
--- a/prowler/providers/aws/services/rolesanywhere/rolesanywhere_profile_restricts_session_permissions/rolesanywhere_profile_restricts_session_permissions.py
+++ b/prowler/providers/aws/services/rolesanywhere/rolesanywhere_profile_restricts_session_permissions/rolesanywhere_profile_restricts_session_permissions.py
@@ -205,7 +205,9 @@ class rolesanywhere_profile_restricts_session_permissions(Check):
             not administrative, and disabled profiles.
         """
         findings = []
-        roles_by_arn = {role.arn: role for role in iam_client.roles}
+        # iam:ListRoles denied leaves roles as None: every referenced role is
+        # then unknown and the profile falls through to MANUAL.
+        roles_by_arn = {role.arn: role for role in (iam_client.roles or [])}
         for profile in rolesanywhere_client.profiles.values():
             report = Check_Report_AWS(metadata=self.metadata(), resource=profile)
             role_statuses = {
diff --git a/tests/providers/aws/services/codebuild/codebuild_project_uses_allowed_github_organizations/codebuild_project_uses_allowed_github_organizations_test.py b/tests/providers/aws/services/codebuild/codebuild_project_uses_allowed_github_organizations/codebuild_project_uses_allowed_github_organizations_test.py
index bdabea03fa..0ac90d50d2 100644
--- a/tests/providers/aws/services/codebuild/codebuild_project_uses_allowed_github_organizations/codebuild_project_uses_allowed_github_organizations_test.py
+++ b/tests/providers/aws/services/codebuild/codebuild_project_uses_allowed_github_organizations/codebuild_project_uses_allowed_github_organizations_test.py
@@ -1,4 +1,4 @@
-from unittest.mock import patch
+from unittest.mock import MagicMock, patch
 
 from boto3 import client
 from moto import mock_aws
@@ -182,6 +182,59 @@ class Test_codebuild_project_uses_allowed_github_organizations:
             )
             assert result[0].region == AWS_REGION_EU_WEST_1
 
+    @mock_aws
+    def test_project_github_with_unlisted_roles(self):
+        # iam:ListRoles denied leaves iam_client.roles as None.
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        codebuild_client = client("codebuild", region_name=AWS_REGION_EU_WEST_1)
+        codebuild_client.create_project(
+            name="test-project-github-unlisted-roles",
+            source={
+                "type": "GITHUB",
+                "location": "https://github.com/allowed-org/repo",
+            },
+            artifacts={"type": "NO_ARTIFACTS"},
+            environment={
+                "type": "LINUX_CONTAINER",
+                "image": "aws/codebuild/standard:4.0",
+                "computeType": "BUILD_GENERAL1_SMALL",
+                "environmentVariables": [],
+            },
+            serviceRole=f"arn:aws:iam::{AWS_ACCOUNT_NUMBER}:role/codebuild-test-role",
+        )
+
+        from prowler.providers.aws.services.codebuild.codebuild_service import Codebuild
+
+        iam_client = MagicMock()
+        iam_client.roles = None
+
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=aws_provider,
+            ),
+            patch(
+                "prowler.providers.aws.services.codebuild.codebuild_project_uses_allowed_github_organizations.codebuild_project_uses_allowed_github_organizations.codebuild_client",
+                new=Codebuild(aws_provider),
+            ),
+            patch(
+                "prowler.providers.aws.services.codebuild.codebuild_project_uses_allowed_github_organizations.codebuild_project_uses_allowed_github_organizations.iam_client",
+                new=iam_client,
+            ),
+            patch(
+                "prowler.providers.aws.services.codebuild.codebuild_project_uses_allowed_github_organizations.codebuild_project_uses_allowed_github_organizations.codebuild_client.audit_config",
+                {"codebuild_github_allowed_organizations": ["allowed-org"]},
+            ),
+        ):
+            from prowler.providers.aws.services.codebuild.codebuild_project_uses_allowed_github_organizations.codebuild_project_uses_allowed_github_organizations import (
+                codebuild_project_uses_allowed_github_organizations,
+            )
+
+            assert (
+                len(codebuild_project_uses_allowed_github_organizations().execute())
+                == 0
+            )
+
     @mock_aws
     def test_project_github_no_codebuild_trusted_principal(self):
         aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
diff --git a/tests/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account_test.py b/tests/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account_test.py
index e01bdb36ba..66e96c571d 100644
--- a/tests/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account_test.py
+++ b/tests/providers/aws/services/iam/iam_role_service_trust_restricts_source_to_account/iam_role_service_trust_restricts_source_to_account_test.py
@@ -93,6 +93,10 @@ class Test_iam_role_service_trust_restricts_source_to_account:
         """An account with no roles produces no reports at all."""
         assert len(_run([])) == 0
 
+    def test_unlisted_roles_produce_no_reports(self):
+        # iam:ListRoles denied leaves iam_client.roles as None.
+        assert len(_run(None)) == 0
+
     def test_service_linked_role_skipped(self):
         """A service-linked role is excluded even when its trust policy would FAIL.
 
diff --git a/tests/providers/aws/services/rolesanywhere/rolesanywhere_profile_restricts_session_permissions/rolesanywhere_profile_restricts_session_permissions_test.py b/tests/providers/aws/services/rolesanywhere/rolesanywhere_profile_restricts_session_permissions/rolesanywhere_profile_restricts_session_permissions_test.py
index 09cdb3ae8d..230523239d 100644
--- a/tests/providers/aws/services/rolesanywhere/rolesanywhere_profile_restricts_session_permissions/rolesanywhere_profile_restricts_session_permissions_test.py
+++ b/tests/providers/aws/services/rolesanywhere/rolesanywhere_profile_restricts_session_permissions/rolesanywhere_profile_restricts_session_permissions_test.py
@@ -472,6 +472,19 @@ class Test_rolesanywhere_profile_restricts_session_permissions:
             assert result[0].status == "MANUAL"
             assert "could not be evaluated" in result[0].status_extended
 
+    def test_unscoped_profile_with_unlisted_roles_is_manual(self):
+        # iam:ListRoles denied leaves iam_client.roles as None.
+        patches = _patched(
+            _build_client({PROFILE_ARN: _profile(role_arns=[ADMIN_ROLE_ARN])})
+        )
+        patches[-1].new.roles = None
+        with _enter(patches):
+            result = _run()
+            assert len(result) == 1
+            assert result[0].status == "MANUAL"
+            assert ADMIN_ROLE_ARN in result[0].status_extended
+            assert "could not be evaluated" in result[0].status_extended
+
     def test_unscoped_profile_without_roles_passes(self):
         with _enter(_patched(_build_client({PROFILE_ARN: _profile(role_arns=[])}))):
             result = _run()

From 4727da7ca71a87be629a888184705eb3f2e4324e Mon Sep 17 00:00:00 2001
From: Prowler Bot <bot@prowler.com>
Date: Fri, 11 Sep 2026 10:21:17 +0200
Subject: [PATCH 52/77] chore(changelog): v5.42.0 (#12794)

Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
---
 api/CHANGELOG.md                              |  8 ++++++
 ...ompliance-overviews-ingest-perf.changed.md |  1 -
 mcp_server/CHANGELOG.md                       |  8 ++++++
 .../mcp-image-libuuid-cves.security.md        |  1 -
 prowler/CHANGELOG.md                          | 27 +++++++++++++++++++
 ...s-boto3-connect-timeout-default.changed.md |  1 -
 .../changelog.d/aws-boto3-timeouts.added.md   |  1 -
 .../aws-checks-roles-unlisted.fixed.md        |  1 -
 .../changelog.d/aws-iso-partitions.added.md   |  1 -
 .../changelog.d/aws-iso-partitions.fixed.md   |  1 -
 ...-region-honours-configured-region.fixed.md |  1 -
 .../aws-regional-clients-empty-dict.fixed.md  |  1 -
 .../aws-retries-max-attempts-zero.fixed.md    |  1 -
 ...service-regions-unknown-partition.fixed.md |  1 -
 .../compliance-catalog-integrity.fixed.md     |  1 -
 ...nection-test-parallel-issue-types.fixed.md |  1 -
 ...ue-types-permission-gap-log-level.fixed.md |  1 -
 ...threatscore-azure-gcp-data-errors.fixed.md |  1 -
 .../trivy-cache-dir-configurable.fixed.md     |  1 -
 ui/CHANGELOG.md                               | 20 ++++++++++++++
 ...pendabot-audit-vulnerabilities.security.md |  1 -
 ...tegration-connection-poll-timeout.fixed.md |  1 -
 .../next-image-optimization-rce.security.md   |  1 -
 .../posthog-toolbar-localhost.added.md        |  1 -
 ui/changelog.d/scans-filter-actions.fixed.md  |  1 -
 .../sharp-libheif-vulnerabilities.security.md |  1 -
 .../view-first-scan-tour-selector.fixed.md    |  1 -
 27 files changed, 63 insertions(+), 23 deletions(-)
 delete mode 100644 api/changelog.d/compliance-overviews-ingest-perf.changed.md
 delete mode 100644 mcp_server/changelog.d/mcp-image-libuuid-cves.security.md
 delete mode 100644 prowler/changelog.d/aws-boto3-connect-timeout-default.changed.md
 delete mode 100644 prowler/changelog.d/aws-boto3-timeouts.added.md
 delete mode 100644 prowler/changelog.d/aws-checks-roles-unlisted.fixed.md
 delete mode 100644 prowler/changelog.d/aws-iso-partitions.added.md
 delete mode 100644 prowler/changelog.d/aws-iso-partitions.fixed.md
 delete mode 100644 prowler/changelog.d/aws-partition-bootstrap-region-honours-configured-region.fixed.md
 delete mode 100644 prowler/changelog.d/aws-regional-clients-empty-dict.fixed.md
 delete mode 100644 prowler/changelog.d/aws-retries-max-attempts-zero.fixed.md
 delete mode 100644 prowler/changelog.d/aws-service-regions-unknown-partition.fixed.md
 delete mode 100644 prowler/changelog.d/compliance-catalog-integrity.fixed.md
 delete mode 100644 prowler/changelog.d/jira-connection-test-parallel-issue-types.fixed.md
 delete mode 100644 prowler/changelog.d/jira-issue-types-permission-gap-log-level.fixed.md
 delete mode 100644 prowler/changelog.d/threatscore-azure-gcp-data-errors.fixed.md
 delete mode 100644 prowler/changelog.d/trivy-cache-dir-configurable.fixed.md
 delete mode 100644 ui/changelog.d/dependabot-audit-vulnerabilities.security.md
 delete mode 100644 ui/changelog.d/integration-connection-poll-timeout.fixed.md
 delete mode 100644 ui/changelog.d/next-image-optimization-rce.security.md
 delete mode 100644 ui/changelog.d/posthog-toolbar-localhost.added.md
 delete mode 100644 ui/changelog.d/scans-filter-actions.fixed.md
 delete mode 100644 ui/changelog.d/sharp-libheif-vulnerabilities.security.md
 delete mode 100644 ui/changelog.d/view-first-scan-tour-selector.fixed.md

diff --git a/api/CHANGELOG.md b/api/CHANGELOG.md
index 0ab4c9bfe1..318cd30d4f 100644
--- a/api/CHANGELOG.md
+++ b/api/CHANGELOG.md
@@ -4,6 +4,14 @@ All notable changes to the **Prowler API** are documented in this file.
 
 <!-- changelog: release notes start -->
 
+## [1.43.0] (Prowler v5.42.0)
+
+### 🔄 Changed
+
+- Speed up compliance overview ingestion by reading ThreatScore mappings from the compliance template instead of each finding, generating time-ordered `uuid7` row ids and grouping inserted rows by framework and requirement [(#12738)](https://github.com/prowler-cloud/prowler/pull/12738)
+
+---
+
 ## [1.42.0] (Prowler v5.41.0)
 
 ### 🚀 Added
diff --git a/api/changelog.d/compliance-overviews-ingest-perf.changed.md b/api/changelog.d/compliance-overviews-ingest-perf.changed.md
deleted file mode 100644
index 6e833d184e..0000000000
--- a/api/changelog.d/compliance-overviews-ingest-perf.changed.md
+++ /dev/null
@@ -1 +0,0 @@
-Speed up compliance overview ingestion by reading ThreatScore mappings from the compliance template instead of each finding, generating time-ordered `uuid7` row ids and grouping inserted rows by framework and requirement
diff --git a/mcp_server/CHANGELOG.md b/mcp_server/CHANGELOG.md
index 4c6c858d28..80bdabd28a 100644
--- a/mcp_server/CHANGELOG.md
+++ b/mcp_server/CHANGELOG.md
@@ -4,6 +4,14 @@ All notable changes to the **Prowler MCP Server** are documented in this file.
 
 <!-- changelog: release notes start -->
 
+## [0.12.1] (Prowler v5.42.0)
+
+### 🔐 Security
+
+- `libuuid` upgraded to 2.41.6-r1 in the container image, patching CVE-2026-53612, CVE-2026-53613, CVE-2026-53614, CVE-2026-76642, CVE-2026-78408 and CVE-2026-78410 [(#12780)](https://github.com/prowler-cloud/prowler/pull/12780)
+
+---
+
 ## [0.12.0] (Prowler v5.41.0)
 
 ### 🚀 Added
diff --git a/mcp_server/changelog.d/mcp-image-libuuid-cves.security.md b/mcp_server/changelog.d/mcp-image-libuuid-cves.security.md
deleted file mode 100644
index 602458c777..0000000000
--- a/mcp_server/changelog.d/mcp-image-libuuid-cves.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`libuuid` upgraded to 2.41.6-r1 in the container image, patching CVE-2026-53612, CVE-2026-53613, CVE-2026-53614, CVE-2026-76642, CVE-2026-78408 and CVE-2026-78410
diff --git a/prowler/CHANGELOG.md b/prowler/CHANGELOG.md
index 4161d195b8..7232bd41a0 100644
--- a/prowler/CHANGELOG.md
+++ b/prowler/CHANGELOG.md
@@ -4,6 +4,33 @@ All notable changes to the **Prowler SDK** are documented in this file.
 
 <!-- changelog: release notes start -->
 
+## [5.42.0] (Prowler v5.42.0)
+
+### 🚀 Added
+
+- AWS ISO partitions (`aws-iso`, `aws-iso-b`, `aws-iso-e` and `aws-iso-f`) to the AWS service region matrix, generated from the endpoints data bundled with botocore [(#12759)](https://github.com/prowler-cloud/prowler/pull/12759)
+- `--aws-connect-timeout` and `--aws-read-timeout` CLI flags, plus `PROWLER_AWS_BOTO3_CONNECT_TIMEOUT` and `PROWLER_AWS_BOTO3_READ_TIMEOUT` environment variables, to bound how long each AWS API call waits for an endpoint [(#12774)](https://github.com/prowler-cloud/prowler/pull/12774)
+
+### 🔄 Changed
+
+- AWS provider default Boto3 connect timeout lowered from 60 to 10 seconds, so scans in restricted-egress networks (VPC endpoints for a subset of services, GovCloud, private deployments) no longer spend 4 minutes per region on every service whose endpoint is unreachable [(#12774)](https://github.com/prowler-cloud/prowler/pull/12774)
+
+### 🐞 Fixed
+
+- Duplicate requirement ids, checks listed twice in a requirement and references to non-existent checks across compliance frameworks, now guarded by a catalog integrity test [(#12717)](https://github.com/prowler-cloud/prowler/pull/12717)
+- Duplicate requirement `3.2.1` in ProwlerThreatScore for Azure (SQL auditing retention is now `3.2.4`) and doubled check id in requirement `1.2.1` of ProwlerThreatScore for GCP [(#12717)](https://github.com/prowler-cloud/prowler/pull/12717)
+- Jira connection checks no longer log an error when a single project has no issue types visible to the integration user (typically a missing "create issue" permission on that project), a case the caller already treats as non-fatal [(#12742)](https://github.com/prowler-cloud/prowler/pull/12742)
+- `Jira.test_connection()` now fetches each project's issue types concurrently instead of one request at a time, so accounts with many Jira projects no longer take tens of seconds (unbounded, scaling with the project count) to verify the connection [(#12742)](https://github.com/prowler-cloud/prowler/pull/12742)
+- `AwsProvider.get_available_aws_service_regions()` now returns an empty set for an unknown service or partition instead of raising `KeyError`, so a service unavailable in the audited partition is skipped [(#12759)](https://github.com/prowler-cloud/prowler/pull/12759)
+- `AwsProvider.generate_regional_clients()` now returns an empty dict instead of `None` when the regional clients cannot be built, a failure that surfaced later as `AttributeError: 'NoneType' object has no attribute 'values'` [(#12759)](https://github.com/prowler-cloud/prowler/pull/12759)
+- `AwsProvider.get_global_region()` now returns a real region for each ISO partition instead of the `aws-iso-global` pseudo endpoint, which collapsed the four partitions into one answer [(#12759)](https://github.com/prowler-cloud/prowler/pull/12759)
+- Bootstrap STS calls now use the session region when `PROWLER_AWS_PARTITION` is set and the region belongs to that partition, instead of always going to the partition's global STS region, which a deployment reached only through its own region's VPC endpoints cannot route to [(#12764)](https://github.com/prowler-cloud/prowler/pull/12764)
+- The Image provider now uses the directory named by `TRIVY_CACHE_DIR` when one is set, instead of a fresh temporary directory it deletes afterwards, so a deployment can supply a vulnerability database it already holds and one with network access stops re-downloading the database for every image it scans [(#12773)](https://github.com/prowler-cloud/prowler/pull/12773)
+- `--aws-retries-max-attempts 0` now disables Boto3 retries instead of being silently ignored in favour of the default of 3 [(#12774)](https://github.com/prowler-cloud/prowler/pull/12774)
+- `rolesanywhere_profile_restricts_session_permissions`, `iam_role_service_trust_restricts_source_to_account` and `codebuild_project_uses_allowed_github_organizations` crashing with `TypeError` when `iam:ListRoles` is denied [(#12785)](https://github.com/prowler-cloud/prowler/pull/12785)
+
+---
+
 ## [5.41.0] (Prowler v5.41.0)
 
 ### 🚀 Added
diff --git a/prowler/changelog.d/aws-boto3-connect-timeout-default.changed.md b/prowler/changelog.d/aws-boto3-connect-timeout-default.changed.md
deleted file mode 100644
index a204443b2a..0000000000
--- a/prowler/changelog.d/aws-boto3-connect-timeout-default.changed.md
+++ /dev/null
@@ -1 +0,0 @@
-AWS provider default Boto3 connect timeout lowered from 60 to 10 seconds, so scans in restricted-egress networks (VPC endpoints for a subset of services, GovCloud, private deployments) no longer spend 4 minutes per region on every service whose endpoint is unreachable
diff --git a/prowler/changelog.d/aws-boto3-timeouts.added.md b/prowler/changelog.d/aws-boto3-timeouts.added.md
deleted file mode 100644
index df5d6e4f2b..0000000000
--- a/prowler/changelog.d/aws-boto3-timeouts.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`--aws-connect-timeout` and `--aws-read-timeout` CLI flags, plus `PROWLER_AWS_BOTO3_CONNECT_TIMEOUT` and `PROWLER_AWS_BOTO3_READ_TIMEOUT` environment variables, to bound how long each AWS API call waits for an endpoint
diff --git a/prowler/changelog.d/aws-checks-roles-unlisted.fixed.md b/prowler/changelog.d/aws-checks-roles-unlisted.fixed.md
deleted file mode 100644
index dc24ad1b49..0000000000
--- a/prowler/changelog.d/aws-checks-roles-unlisted.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-`rolesanywhere_profile_restricts_session_permissions`, `iam_role_service_trust_restricts_source_to_account` and `codebuild_project_uses_allowed_github_organizations` crashing with `TypeError` when `iam:ListRoles` is denied
diff --git a/prowler/changelog.d/aws-iso-partitions.added.md b/prowler/changelog.d/aws-iso-partitions.added.md
deleted file mode 100644
index 41282ea353..0000000000
--- a/prowler/changelog.d/aws-iso-partitions.added.md
+++ /dev/null
@@ -1 +0,0 @@
-AWS ISO partitions (`aws-iso`, `aws-iso-b`, `aws-iso-e` and `aws-iso-f`) to the AWS service region matrix, generated from the endpoints data bundled with botocore
diff --git a/prowler/changelog.d/aws-iso-partitions.fixed.md b/prowler/changelog.d/aws-iso-partitions.fixed.md
deleted file mode 100644
index c3424d51ba..0000000000
--- a/prowler/changelog.d/aws-iso-partitions.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-`AwsProvider.get_global_region()` now returns a real region for each ISO partition instead of the `aws-iso-global` pseudo endpoint, which collapsed the four partitions into one answer
diff --git a/prowler/changelog.d/aws-partition-bootstrap-region-honours-configured-region.fixed.md b/prowler/changelog.d/aws-partition-bootstrap-region-honours-configured-region.fixed.md
deleted file mode 100644
index 93a6c8d7b1..0000000000
--- a/prowler/changelog.d/aws-partition-bootstrap-region-honours-configured-region.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Bootstrap STS calls now use the session region when `PROWLER_AWS_PARTITION` is set and the region belongs to that partition, instead of always going to the partition's global STS region, which a deployment reached only through its own region's VPC endpoints cannot route to
diff --git a/prowler/changelog.d/aws-regional-clients-empty-dict.fixed.md b/prowler/changelog.d/aws-regional-clients-empty-dict.fixed.md
deleted file mode 100644
index bd5f7798ac..0000000000
--- a/prowler/changelog.d/aws-regional-clients-empty-dict.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-`AwsProvider.generate_regional_clients()` now returns an empty dict instead of `None` when the regional clients cannot be built, a failure that surfaced later as `AttributeError: 'NoneType' object has no attribute 'values'`
diff --git a/prowler/changelog.d/aws-retries-max-attempts-zero.fixed.md b/prowler/changelog.d/aws-retries-max-attempts-zero.fixed.md
deleted file mode 100644
index 8eb2ad9e07..0000000000
--- a/prowler/changelog.d/aws-retries-max-attempts-zero.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-`--aws-retries-max-attempts 0` now disables Boto3 retries instead of being silently ignored in favour of the default of 3
diff --git a/prowler/changelog.d/aws-service-regions-unknown-partition.fixed.md b/prowler/changelog.d/aws-service-regions-unknown-partition.fixed.md
deleted file mode 100644
index 881ce2c94b..0000000000
--- a/prowler/changelog.d/aws-service-regions-unknown-partition.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-`AwsProvider.get_available_aws_service_regions()` now returns an empty set for an unknown service or partition instead of raising `KeyError`, so a service unavailable in the audited partition is skipped
diff --git a/prowler/changelog.d/compliance-catalog-integrity.fixed.md b/prowler/changelog.d/compliance-catalog-integrity.fixed.md
deleted file mode 100644
index 1bfcf0462c..0000000000
--- a/prowler/changelog.d/compliance-catalog-integrity.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Duplicate requirement ids, checks listed twice in a requirement and references to non-existent checks across compliance frameworks, now guarded by a catalog integrity test
diff --git a/prowler/changelog.d/jira-connection-test-parallel-issue-types.fixed.md b/prowler/changelog.d/jira-connection-test-parallel-issue-types.fixed.md
deleted file mode 100644
index 85d3bad72a..0000000000
--- a/prowler/changelog.d/jira-connection-test-parallel-issue-types.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-`Jira.test_connection()` now fetches each project's issue types concurrently instead of one request at a time, so accounts with many Jira projects no longer take tens of seconds (unbounded, scaling with the project count) to verify the connection
diff --git a/prowler/changelog.d/jira-issue-types-permission-gap-log-level.fixed.md b/prowler/changelog.d/jira-issue-types-permission-gap-log-level.fixed.md
deleted file mode 100644
index 0d0a1f5477..0000000000
--- a/prowler/changelog.d/jira-issue-types-permission-gap-log-level.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Jira connection checks no longer log an error when a single project has no issue types visible to the integration user (typically a missing "create issue" permission on that project), a case the caller already treats as non-fatal
diff --git a/prowler/changelog.d/threatscore-azure-gcp-data-errors.fixed.md b/prowler/changelog.d/threatscore-azure-gcp-data-errors.fixed.md
deleted file mode 100644
index 0fb7547adb..0000000000
--- a/prowler/changelog.d/threatscore-azure-gcp-data-errors.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Duplicate requirement `3.2.1` in ProwlerThreatScore for Azure (SQL auditing retention is now `3.2.4`) and doubled check id in requirement `1.2.1` of ProwlerThreatScore for GCP
diff --git a/prowler/changelog.d/trivy-cache-dir-configurable.fixed.md b/prowler/changelog.d/trivy-cache-dir-configurable.fixed.md
deleted file mode 100644
index fd2f0ca117..0000000000
--- a/prowler/changelog.d/trivy-cache-dir-configurable.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-The Image provider now uses the directory named by `TRIVY_CACHE_DIR` when one is set, instead of a fresh temporary directory it deletes afterwards, so a deployment can supply a vulnerability database it already holds and one with network access stops re-downloading the database for every image it scans
diff --git a/ui/CHANGELOG.md b/ui/CHANGELOG.md
index eeadba64b8..8687ddde54 100644
--- a/ui/CHANGELOG.md
+++ b/ui/CHANGELOG.md
@@ -4,6 +4,26 @@ All notable changes to the **Prowler UI** are documented in this file.
 
 <!-- changelog: release notes start -->
 
+## [1.42.0] (Prowler v5.42.0)
+
+### 🚀 Added
+
+- PostHog Toolbar support in development with separate ingestion and app hosts [(#12582)](https://github.com/prowler-cloud/prowler/pull/12582)
+
+### 🐞 Fixed
+
+- Scan Jobs onboarding tour no longer targets an unmounted In Progress row from other tabs [(#12705)](https://github.com/prowler-cloud/prowler/pull/12705)
+- Integration connection test polling now waits up to ~3 minutes instead of ~57 seconds before giving up, so it no longer reports a false failure on slower checks (e.g. Jira accounts with many projects) that were still going to succeed [(#12742)](https://github.com/prowler-cloud/prowler/pull/12742)
+- Scans page filter widths and action button styling, with Launch Scan and Import Findings grouped beside the tabs and sized consistently with Configure Mutelist [(#12781)](https://github.com/prowler-cloud/prowler/pull/12781)
+
+### 🔐 Security
+
+- `nanoid` to 5.1.16, `js-yaml` to 4.3.1 and `postcss` to 8.5.23, plus transitive `hono`, `@hono/node-server`, `browserslist`, `qs`, `dompurify`, `brace-expansion`, `fast-uri`, `ip-address`, `mermaid`, `body-parser` and `@humanfs/node` to patched versions, resolving 40 npm audit advisories (21 high, 15 moderate, 4 low) [(#12758)](https://github.com/prowler-cloud/prowler/pull/12758)
+- `next` to 16.3.3, patching an unauthenticated remote code execution in the Image Optimization API when AVIF files are used (GHSA-2xp9-vwfh-vxw4) [(#12778)](https://github.com/prowler-cloud/prowler/pull/12778)
+- `sharp` to 0.35.4, patching two libheif vulnerabilities reachable through image decoding (GHSA-rgj7-g3m4-5g8c) [(#12778)](https://github.com/prowler-cloud/prowler/pull/12778)
+
+---
+
 ## [1.41.0] (Prowler v5.41.0)
 
 ### 🚀 Added
diff --git a/ui/changelog.d/dependabot-audit-vulnerabilities.security.md b/ui/changelog.d/dependabot-audit-vulnerabilities.security.md
deleted file mode 100644
index 9d030097f0..0000000000
--- a/ui/changelog.d/dependabot-audit-vulnerabilities.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`nanoid` to 5.1.16, `js-yaml` to 4.3.1 and `postcss` to 8.5.23, plus transitive `hono`, `@hono/node-server`, `browserslist`, `qs`, `dompurify`, `brace-expansion`, `fast-uri`, `ip-address`, `mermaid`, `body-parser` and `@humanfs/node` to patched versions, resolving 40 npm audit advisories (21 high, 15 moderate, 4 low)
diff --git a/ui/changelog.d/integration-connection-poll-timeout.fixed.md b/ui/changelog.d/integration-connection-poll-timeout.fixed.md
deleted file mode 100644
index 629eef9a45..0000000000
--- a/ui/changelog.d/integration-connection-poll-timeout.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Integration connection test polling now waits up to ~3 minutes instead of ~57 seconds before giving up, so it no longer reports a false failure on slower checks (e.g. Jira accounts with many projects) that were still going to succeed
diff --git a/ui/changelog.d/next-image-optimization-rce.security.md b/ui/changelog.d/next-image-optimization-rce.security.md
deleted file mode 100644
index 5000fa95f8..0000000000
--- a/ui/changelog.d/next-image-optimization-rce.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`next` to 16.3.3, patching an unauthenticated remote code execution in the Image Optimization API when AVIF files are used (GHSA-2xp9-vwfh-vxw4)
diff --git a/ui/changelog.d/posthog-toolbar-localhost.added.md b/ui/changelog.d/posthog-toolbar-localhost.added.md
deleted file mode 100644
index a2aa815a1c..0000000000
--- a/ui/changelog.d/posthog-toolbar-localhost.added.md
+++ /dev/null
@@ -1 +0,0 @@
-PostHog Toolbar support in development with separate ingestion and app hosts
diff --git a/ui/changelog.d/scans-filter-actions.fixed.md b/ui/changelog.d/scans-filter-actions.fixed.md
deleted file mode 100644
index 3220d59a8e..0000000000
--- a/ui/changelog.d/scans-filter-actions.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Scans page filter widths and action button styling, with Launch Scan and Import Findings grouped beside the tabs and sized consistently with Configure Mutelist
diff --git a/ui/changelog.d/sharp-libheif-vulnerabilities.security.md b/ui/changelog.d/sharp-libheif-vulnerabilities.security.md
deleted file mode 100644
index 75296b55dc..0000000000
--- a/ui/changelog.d/sharp-libheif-vulnerabilities.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`sharp` to 0.35.4, patching two libheif vulnerabilities reachable through image decoding (GHSA-rgj7-g3m4-5g8c)
diff --git a/ui/changelog.d/view-first-scan-tour-selector.fixed.md b/ui/changelog.d/view-first-scan-tour-selector.fixed.md
deleted file mode 100644
index 13f56ac446..0000000000
--- a/ui/changelog.d/view-first-scan-tour-selector.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Scan Jobs onboarding tour no longer targets an unmounted In Progress row from other tabs

From c08cb65d8480fae1f37216824d84a1cfc3503d2e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Fri, 11 Sep 2026 12:11:44 +0200
Subject: [PATCH 53/77] chore(changelog): v5.42.0 highlights (#12795)

Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
---
 docs/changelog.mdx | 56 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 56 insertions(+)

diff --git a/docs/changelog.mdx b/docs/changelog.mdx
index 40df5cb9df..db0bb4409c 100644
--- a/docs/changelog.mdx
+++ b/docs/changelog.mdx
@@ -4,6 +4,62 @@ description: "New features and improvements in each Prowler release"
 rss: true
 ---
 
+<Update label="v5.42.0" description="September 11, 2026">
+  ### ☁️ AWS — ISO Partitions
+
+  Prowler now resolves regions and services for the AWS ISO partitions (`aws-iso`, `aws-iso-b`, `aws-iso-e` and `aws-iso-f`) the same way it does for the commercial, China, European Sovereign Cloud and GovCloud partitions. The region matrix is filled from the endpoint metadata bundled with botocore, which needs no credentials or network access, so it covers partitions that are air-gapped from the internet. Scanning them no longer requires a hand-edited `aws_regions_by_service.json`: ISO regions such as `us-isob-east-1` are accepted by `--region` and `--excluded-region`.
+
+  Deployments that declare `PROWLER_AWS_PARTITION` also keep their bootstrap STS calls in the configured region when it belongs to that partition. An install in `us-gov-west-1` that reaches AWS only through its own VPC endpoints is no longer sent to `us-gov-east-1`, where the connection check and the scan used to time out.
+
+  Read more in the [AWS Regions and Partitions documentation](https://docs.prowler.com/user-guide/providers/aws/regions-and-partitions).
+
+  ### ⏱️ AWS — Configurable Timeouts for Restricted Networks
+
+  Scans from networks with restricted egress (VPC endpoints for only some services, GovCloud or private deployments) could take hours: Boto3 waits 60 seconds to connect by default and retries connection errors, so every service without a reachable endpoint cost up to four 60-second attempts in every region. Prowler now lowers the default connect timeout to 10 seconds, keeps the read timeout at 60 seconds, and exposes both through `--aws-connect-timeout` and `--aws-read-timeout`, or through the `PROWLER_AWS_BOTO3_CONNECT_TIMEOUT` and `PROWLER_AWS_BOTO3_READ_TIMEOUT` environment variables for deployments without a CLI. `--aws-retries-max-attempts 0` now disables retries instead of silently falling back to three, leaving a single attempt per call.
+
+  Read more in the [Boto3 configuration documentation](https://docs.prowler.com/user-guide/providers/aws/boto3-configuration).
+
+  ### 🐳 Image Provider — Reusable Vulnerability Database
+
+  The Image provider now honors `TRIVY_CACHE_DIR`. When the variable names a directory, Trivy keeps its vulnerability database there and Prowler leaves the directory in place after the scan, so the database is downloaded once instead of on every scan. Hosts without internet access can now scan images by pointing `TRIVY_CACHE_DIR` at a pre-populated database and setting `TRIVY_SKIP_DB_UPDATE=true`. Without the variable, the temporary cache is created and removed as before.
+
+  Read more in the [Image provider documentation](https://docs.prowler.com/user-guide/providers/image/getting-started-image#vulnerability-database-cache).
+
+  ### 🎫 Jira Integration — Faster Connection Test
+
+  Testing a Jira integration no longer reports a false failure on accounts with many projects. The connection test fetched the issue types of every project one request at a time, which could outlast the wait in the UI even when the check was about to succeed. Issue types are now fetched concurrently, a project whose issue types the integration user cannot see is no longer logged as an error, and the Integrations page keeps following the connection test instead of giving up after about a minute.
+
+  Read more in the [Jira integration documentation](https://docs.prowler.com/user-guide/tutorials/prowler-app-jira-integration).
+
+  ### 📚 Compliance — Catalog Integrity Fixes
+
+  A new integrity test runs over every compliance framework, asserting unique requirement IDs, no check listed twice within a requirement, and that every referenced check exists for its provider. The fixes it drove span 42 frameworks across AWS, Azure, GCP, GitHub, Kubernetes and Microsoft 365:
+
+  - **Duplicate requirement IDs:** identical copies are removed, and distinct requirements that shared an ID get their own, such as `1.10` in CIS AWS 5.0 and `rc_rp_1` for RC.RP-1 in NIST CSF 1.1. In Prowler ThreatScore for Azure, SQL auditing retention moves from `3.2.1` to `3.2.4`, and requirement `1.2.1` of Prowler ThreatScore for GCP now points to `iam_sa_no_user_managed_keys`.
+  - **Stale check references:** checks that no longer exist are replaced with their current name when there is a direct equivalent, or removed so the requirement reports as manual. Most of these were in the FedRAMP 20x KSI frameworks.
+
+  Renamed requirement IDs appear as new requirements for scans run after the upgrade.
+
+  The compliance overview task that runs after every scan is also faster: ThreatScore mappings are read once from the compliance template instead of from every finding, and rows are inserted with time-ordered `uuid7` IDs grouped by framework and requirement.
+
+  Read more in the [Compliance documentation](https://docs.prowler.com/user-guide/compliance/tutorials/compliance).
+
+  ### 🔍 Checks
+
+  `rolesanywhere_profile_restricts_session_permissions`, `iam_role_service_trust_restricts_source_to_account` and `codebuild_project_uses_allowed_github_organizations` no longer crash with `TypeError` when the scanning role is denied `iam:ListRoles`, which dropped every finding of those checks for the account. Without the role inventory, an enabled IAM Roles Anywhere profile without session scoping reports `MANUAL`, and CodeBuild projects whose service role cannot be resolved are skipped.
+
+  Explore all AWS checks at [Prowler Hub](https://hub.prowler.com/check?provider=aws).
+
+  ### 🔐 Security Updates
+
+  - `next` upgraded to 16.3.3 in the UI, patching unauthenticated remote code execution through AVIF image optimization ([GHSA-2xp9-vwfh-vxw4](https://github.com/advisories/GHSA-2xp9-vwfh-vxw4)) and on Windows-hosted servers ([GHSA-p293-qw3h-jr36](https://github.com/advisories/GHSA-p293-qw3h-jr36)).
+  - `sharp` upgraded to 0.35.4 in the UI, patching libheif image-decoding vulnerabilities ([GHSA-rgj7-g3m4-5g8c](https://github.com/advisories/GHSA-rgj7-g3m4-5g8c)).
+  - `nanoid`, `js-yaml` and `postcss`, plus eleven transitive UI dependencies, upgraded to patched versions, resolving 40 npm audit advisories (21 high, 15 moderate, 4 low).
+  - `libuuid` upgraded to 2.41.6-r1 in the MCP Server image, patching CVE-2026-53612, CVE-2026-53613, CVE-2026-53614, CVE-2026-76642, CVE-2026-78408 and CVE-2026-78410.
+
+  See the [full release notes on GitHub](https://github.com/prowler-cloud/prowler/releases/tag/5.42.0) for the complete list of changes.
+</Update>
+
 <Update label="v5.41.0" description="September 2, 2026">
   ### 📥 Scans — Import Findings from the Browser
 

From 282fe5b46b96e5bcb7a22d0faca6519acffa3978 Mon Sep 17 00:00:00 2001
From: Prowler Bot <bot@prowler.com>
Date: Fri, 11 Sep 2026 13:23:08 +0200
Subject: [PATCH 54/77] chore(release): Bump versions to v5.43.0 (#12797)

Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>
---
 .env                                              | 2 +-
 api/pyproject.toml                                | 2 +-
 api/src/backend/api/specs/v1.yaml                 | 2 +-
 api/uv.lock                                       | 2 +-
 docs/getting-started/installation/prowler-app.mdx | 4 ++--
 prowler/config/config.py                          | 2 +-
 pyproject.toml                                    | 2 +-
 uv.lock                                           | 2 +-
 8 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.env b/.env
index 018b25a8a9..721d25f4bf 100644
--- a/.env
+++ b/.env
@@ -158,7 +158,7 @@ SENTRY_RELEASE=local
 # REO_DEV_CLIENT_ID=
 
 #### Prowler release version ####
-NEXT_PUBLIC_PROWLER_RELEASE_VERSION=v5.42.0
+NEXT_PUBLIC_PROWLER_RELEASE_VERSION=v5.43.0
 
 # Social login credentials
 SOCIAL_GOOGLE_OAUTH_CALLBACK_URL="${AUTH_URL}/api/auth/callback/google"
diff --git a/api/pyproject.toml b/api/pyproject.toml
index f9af7f04be..00b50e8300 100644
--- a/api/pyproject.toml
+++ b/api/pyproject.toml
@@ -71,7 +71,7 @@ name = "prowler-api"
 package-mode = false
 # Needed for the SDK compatibility
 requires-python = ">=3.11,<3.13"
-version = "1.43.0"
+version = "1.44.0"
 
 # Shared ruff baseline (kept in sync with mcp_server/pyproject.toml).
 # target-version tracks this project's lowest supported Python.
diff --git a/api/src/backend/api/specs/v1.yaml b/api/src/backend/api/specs/v1.yaml
index 4b5cebdb2e..ab57f94702 100644
--- a/api/src/backend/api/specs/v1.yaml
+++ b/api/src/backend/api/specs/v1.yaml
@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: Prowler API
-  version: 1.43.0
+  version: 1.44.0
   description: |-
     Prowler API specification.
 
diff --git a/api/uv.lock b/api/uv.lock
index bfaad1f98a..a835e2f223 100644
--- a/api/uv.lock
+++ b/api/uv.lock
@@ -4938,7 +4938,7 @@ dependencies = [
 
 [[package]]
 name = "prowler-api"
-version = "1.43.0"
+version = "1.44.0"
 source = { virtual = "." }
 dependencies = [
     { name = "cartography" },
diff --git a/docs/getting-started/installation/prowler-app.mdx b/docs/getting-started/installation/prowler-app.mdx
index e9ec980e09..b27b7142d2 100644
--- a/docs/getting-started/installation/prowler-app.mdx
+++ b/docs/getting-started/installation/prowler-app.mdx
@@ -128,8 +128,8 @@ To update the environment file:
 Edit the `.env` file and change version values:
 
 ```env
-PROWLER_UI_VERSION="5.41.0"
-PROWLER_API_VERSION="5.41.0"
+PROWLER_UI_VERSION="5.42.0"
+PROWLER_API_VERSION="5.42.0"
 ```
 
 <Note>
diff --git a/prowler/config/config.py b/prowler/config/config.py
index f1aa774ce2..21929b5099 100644
--- a/prowler/config/config.py
+++ b/prowler/config/config.py
@@ -52,7 +52,7 @@ class _MutableTimestamp:
 
 timestamp = _MutableTimestamp(datetime.today())
 timestamp_utc = _MutableTimestamp(datetime.now(timezone.utc))
-prowler_version = "5.42.0"
+prowler_version = "5.43.0"
 html_logo_url = "https://github.com/prowler-cloud/prowler/"
 square_logo_img = "https://raw.githubusercontent.com/prowler-cloud/prowler/dc7d2d5aeb92fdf12e8604f42ef6472cd3e8e889/docs/img/prowler-logo-black.png"
 aws_logo = "https://user-images.githubusercontent.com/38561120/235953920-3e3fba08-0795-41dc-b480-9bea57db9f2e.png"
diff --git a/pyproject.toml b/pyproject.toml
index cabf2740f7..8e49417f09 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -143,7 +143,7 @@ maintainers = [{name = "Prowler Engineering", email = "engineering@prowler.com"}
 name = "prowler"
 readme = "README.md"
 requires-python = ">=3.10,<3.14"
-version = "5.42.0"
+version = "5.43.0"
 
 [project.scripts]
 prowler = "prowler.__main__:prowler"
diff --git a/uv.lock b/uv.lock
index fe04be07b8..ca1afd8346 100644
--- a/uv.lock
+++ b/uv.lock
@@ -3752,7 +3752,7 @@ wheels = [
 
 [[package]]
 name = "prowler"
-version = "5.42.0"
+version = "5.43.0"
 source = { editable = "." }
 dependencies = [
     { name = "alibabacloud-actiontrail20200706" },

From ba258a5346eddd1afd753deee6c2d884c13cf5f3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Mon, 14 Sep 2026 11:01:15 +0200
Subject: [PATCH 55/77] fix(container): patch high Debian CVEs in SDK and API
 (#12804)

---
 Dockerfile                                        | 15 ++++++++++-----
 api/Dockerfile                                    | 15 ++++++++++-----
 api/changelog.d/api-image-debian-cves.security.md |  1 +
 .../changelog.d/sdk-image-debian-cves.security.md |  1 +
 4 files changed, 22 insertions(+), 10 deletions(-)
 create mode 100644 api/changelog.d/api-image-debian-cves.security.md
 create mode 100644 prowler/changelog.d/sdk-image-debian-cves.security.md

diff --git a/Dockerfile b/Dockerfile
index fdc85831de..559b39c9eb 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -22,20 +22,25 @@ ARG POWERSHELL_SHA256_ARM64=2503b71da3e83635592b092df59a0aca4c3606b4d9b068217bb0
 ARG ZIZMOR_SHA256_AMD64=a8000f3c683319a523d3b20df0e75457ba591f049cfcbfa98966631b56733c03
 ARG ZIZMOR_SHA256_ARM64=d66e37ef8a375fb07939c630ebf9709a6e0f20242bdc3faf672a7ed97e0b768d
 
-# High CVEs fixed in Debian trixie-security but not yet in the pinned base image:
+# High CVEs fixed in Debian trixie but not yet in the pinned base image:
 #   openssl/libssl3t64/openssl-provider-legacy 3.5.7-1~deb13u2  CVE-2026-14456,
 #   -14457, -18798, -54874, -63072, -63073, -63074, -63075, -63076, -75803
-#   (image ships 3.5.6-1~deb13u2)
+#   libsqlite3-0 3.46.1-7+deb13u2  CVE-2026-11822, -11824
+#   gzip 1.13-1+deb13u1  CVE-2026-41992
+#   perl-base 5.40.1-6+deb13u1  CVE-2026-42497, -48962, -57432
+#   libssh2-1t64 1.11.1-1+deb13u2  CVE-2026-58050
+#   libpcre2-8-0 10.46-1~deb13u2  CVE-2026-86145, -89161
 # Taken as a targeted --only-upgrade rather than by moving the digest: the newest
-# published python:3.12-slim-trixie carries the same vulnerable version. The three
-# packages are all built from openssl and are flagged separately, so all are named.
-# Drop them once the base image ships 3.5.7-1~deb13u2 or later.
+# published python:3.12-slim-trixie carries the same vulnerable versions. The three
+# openssl packages are flagged separately, so all are named.
+# Drop each one once the base image ships its fixed version.
 # hadolint ignore=DL3008
 RUN apt-get update && apt-get install -y --no-install-recommends \
     wget libicu76 libunwind8 libssl3 libcurl4 ca-certificates apt-transport-https gnupg \
     build-essential pkg-config libzstd-dev zlib1g-dev \
     && apt-get install -y --no-install-recommends --only-upgrade \
        util-linux libssl3t64 openssl openssl-provider-legacy \
+       libsqlite3-0 gzip perl-base libssh2-1t64 libpcre2-8-0 \
     && rm -rf /var/lib/apt/lists/*
 
 # Install PowerShell
diff --git a/api/Dockerfile b/api/Dockerfile
index 6866494bb4..ce5bccbb2c 100644
--- a/api/Dockerfile
+++ b/api/Dockerfile
@@ -21,14 +21,18 @@ ARG POWERSHELL_SHA256_ARM64=2503b71da3e83635592b092df59a0aca4c3606b4d9b068217bb0
 ARG ZIZMOR_SHA256_AMD64=a8000f3c683319a523d3b20df0e75457ba591f049cfcbfa98966631b56733c03
 ARG ZIZMOR_SHA256_ARM64=d66e37ef8a375fb07939c630ebf9709a6e0f20242bdc3faf672a7ed97e0b768d
 
-# High CVEs fixed in Debian trixie-security but not yet in the pinned base image:
+# High CVEs fixed in Debian trixie but not yet in the pinned base image:
 #   openssl/libssl3t64/openssl-provider-legacy 3.5.7-1~deb13u2  CVE-2026-14456,
 #   -14457, -18798, -54874, -63072, -63073, -63074, -63075, -63076, -75803
-#   (image ships 3.5.6-1~deb13u2)
+#   libsqlite3-0 3.46.1-7+deb13u2  CVE-2026-11822, -11824
+#   gzip 1.13-1+deb13u1  CVE-2026-41992
+#   perl-base 5.40.1-6+deb13u1  CVE-2026-42497, -48962, -57432
+#   libssh2-1t64 1.11.1-1+deb13u2  CVE-2026-58050
+#   libpcre2-8-0 10.46-1~deb13u2  CVE-2026-86145, -89161
 # Taken as a targeted --only-upgrade rather than by moving the digest: the newest
-# published python:3.12-slim-trixie carries the same vulnerable version. The three
-# packages are all built from openssl and are flagged separately, so all are named.
-# Drop them once the base image ships 3.5.7-1~deb13u2 or later.
+# published python:3.12-slim-trixie carries the same vulnerable versions. The three
+# openssl packages are flagged separately, so all are named.
+# Drop each one once the base image ships its fixed version.
 # hadolint ignore=DL3008
 RUN apt-get update && apt-get install -y --no-install-recommends \
     wget \
@@ -46,6 +50,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     python3-dev \
     && apt-get install -y --no-install-recommends --only-upgrade \
        util-linux libssl3t64 openssl openssl-provider-legacy \
+       libsqlite3-0 gzip perl-base libssh2-1t64 libpcre2-8-0 \
     && rm -rf /var/lib/apt/lists/*
 
 # Install PowerShell
diff --git a/api/changelog.d/api-image-debian-cves.security.md b/api/changelog.d/api-image-debian-cves.security.md
new file mode 100644
index 0000000000..2d8b0403ad
--- /dev/null
+++ b/api/changelog.d/api-image-debian-cves.security.md
@@ -0,0 +1 @@
+`libsqlite3-0`, `gzip`, `perl-base` and `libpcre2-8-0` upgraded in the API container image, patching high Debian CVEs
diff --git a/prowler/changelog.d/sdk-image-debian-cves.security.md b/prowler/changelog.d/sdk-image-debian-cves.security.md
new file mode 100644
index 0000000000..50bd4186f3
--- /dev/null
+++ b/prowler/changelog.d/sdk-image-debian-cves.security.md
@@ -0,0 +1 @@
+`libsqlite3-0`, `gzip`, `perl-base`, `libssh2-1t64` and `libpcre2-8-0` upgraded in the SDK container image, patching nine high Debian CVEs

From 8b265a83140d78f342a887359478d1dc9702246e Mon Sep 17 00:00:00 2001
From: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com>
Date: Mon, 14 Sep 2026 11:18:31 +0200
Subject: [PATCH 56/77] fix(ui): defer billing onboarding and add AWS button
 styling (#12803)

---
 .../aws-marketplace-button.added.md           |   1 +
 .../defer-onboarding-on-billing.fixed.md      |   1 +
 .../__tests__/onboarding-gate.test.tsx        |  52 ++++++++++++++++++
 ui/components/onboarding/onboarding-gate.tsx  |   7 ++-
 ui/components/shadcn/button/button.tsx        |   2 +
 ui/styles/globals.css                         |   3 +
 .../aws-marketplace-button-desktop.png        | Bin 0 -> 12676 bytes
 .../aws-marketplace-button-mobile.png         | Bin 0 -> 10992 bytes
 .../aws-marketplace-button-tablet.png         | Bin 0 -> 11292 bytes
 9 files changed, 65 insertions(+), 1 deletion(-)
 create mode 100644 ui/changelog.d/aws-marketplace-button.added.md
 create mode 100644 ui/changelog.d/defer-onboarding-on-billing.fixed.md
 create mode 100644 ui/tests/onboarding/evidence/aws-marketplace-button-desktop.png
 create mode 100644 ui/tests/onboarding/evidence/aws-marketplace-button-mobile.png
 create mode 100644 ui/tests/onboarding/evidence/aws-marketplace-button-tablet.png

diff --git a/ui/changelog.d/aws-marketplace-button.added.md b/ui/changelog.d/aws-marketplace-button.added.md
new file mode 100644
index 0000000000..235112967f
--- /dev/null
+++ b/ui/changelog.d/aws-marketplace-button.added.md
@@ -0,0 +1 @@
+AWS Marketplace button variant with outlined styling for light and dark themes
diff --git a/ui/changelog.d/defer-onboarding-on-billing.fixed.md b/ui/changelog.d/defer-onboarding-on-billing.fixed.md
new file mode 100644
index 0000000000..5afcc36bcc
--- /dev/null
+++ b/ui/changelog.d/defer-onboarding-on-billing.fixed.md
@@ -0,0 +1 @@
+Automatic onboarding stays hidden on billing pages and remains available after leaving billing
diff --git a/ui/components/onboarding/__tests__/onboarding-gate.test.tsx b/ui/components/onboarding/__tests__/onboarding-gate.test.tsx
index 4198ba5846..9a5f7cf88e 100644
--- a/ui/components/onboarding/__tests__/onboarding-gate.test.tsx
+++ b/ui/components/onboarding/__tests__/onboarding-gate.test.tsx
@@ -9,9 +9,11 @@ import { OnboardingGate } from "../onboarding-gate";
 
 const pushMock = vi.fn();
 const armMock = vi.fn();
+const pathnameMock = vi.fn();
 
 vi.mock("next/navigation", () => ({
   useRouter: () => ({ push: pushMock, replace: vi.fn() }),
+  usePathname: () => pathnameMock(),
 }));
 
 vi.mock("@/store/onboarding-checkpoint", () => ({
@@ -30,12 +32,62 @@ describe("OnboardingGate", () => {
     window.localStorage.clear();
     pushMock.mockClear();
     armMock.mockClear();
+    pathnameMock.mockReturnValue("/");
   });
 
   afterEach(() => {
     vi.restoreAllMocks();
   });
 
+  it.each(["/billing", "/billing/", "/billing/checkout"])(
+    "defers onboarding on %s without resolving it",
+    (pathname) => {
+      // Given
+      pathnameMock.mockReturnValue(pathname);
+
+      // When
+      render(<OnboardingGate hasProviders={false} />);
+
+      // Then
+      expect(
+        screen.queryByRole("button", { name: /get started/i }),
+      ).not.toBeInTheDocument();
+      expect(localStorageAdapter.get(addProviderTourId)).toBeNull();
+      expect(armMock).not.toHaveBeenCalled();
+      expect(pushMock).not.toHaveBeenCalled();
+    },
+  );
+
+  it("offers onboarding after leaving billing without remounting the gate", async () => {
+    // Given
+    pathnameMock.mockReturnValue("/billing");
+    const { rerender } = render(<OnboardingGate hasProviders={false} />);
+
+    // When
+    pathnameMock.mockReturnValue("/");
+    rerender(<OnboardingGate hasProviders={false} />);
+
+    // Then
+    expect(
+      await screen.findByRole("button", { name: /get started/i }),
+    ).toBeInTheDocument();
+    expect(localStorageAdapter.get(addProviderTourId)).toBeNull();
+    expect(armMock).not.toHaveBeenCalled();
+  });
+
+  it("does not suppress onboarding on a route that only shares the billing prefix", async () => {
+    // Given
+    pathnameMock.mockReturnValue("/billing-settings");
+
+    // When
+    render(<OnboardingGate hasProviders={false} />);
+
+    // Then
+    expect(
+      await screen.findByRole("button", { name: /get started/i }),
+    ).toBeInTheDocument();
+  });
+
   describe("when the user has no providers and no completion record", () => {
     it("shows the Welcome modal", async () => {
       render(<OnboardingGate hasProviders={false} />);
diff --git a/ui/components/onboarding/onboarding-gate.tsx b/ui/components/onboarding/onboarding-gate.tsx
index 0161bffef4..f32d411938 100644
--- a/ui/components/onboarding/onboarding-gate.tsx
+++ b/ui/components/onboarding/onboarding-gate.tsx
@@ -1,6 +1,6 @@
 "use client";
 
-import { useRouter } from "next/navigation";
+import { usePathname, useRouter } from "next/navigation";
 import { useState } from "react";
 
 import { getOrderedFlows, shouldStartOnboarding } from "@/lib/onboarding";
@@ -20,6 +20,10 @@ interface OnboardingGateProps {
 // via useSyncExternalStore — server renders nothing, no hydration mismatch.
 export function OnboardingGate({ hasProviders }: OnboardingGateProps) {
   const router = useRouter();
+  const pathname = usePathname();
+  // Billing must stay usable before onboarding; leaving it keeps the gate eligible.
+  const isBillingRoute =
+    pathname === "/billing" || pathname?.startsWith("/billing/");
 
   // Gate forces only the first flow (`add-provider`); remaining flows come via checkpoint/replay.
   const flow = getOrderedFlows()[0] ?? null;
@@ -32,6 +36,7 @@ export function OnboardingGate({ hasProviders }: OnboardingGateProps) {
 
   const activeFlow =
     flow &&
+    !isBillingRoute &&
     !resolvedThisSession &&
     shouldStartOnboarding({ hasProviders, completionRecord })
       ? flow
diff --git a/ui/components/shadcn/button/button.tsx b/ui/components/shadcn/button/button.tsx
index f34347507b..bc37c08bc9 100644
--- a/ui/components/shadcn/button/button.tsx
+++ b/ui/components/shadcn/button/button.tsx
@@ -19,6 +19,8 @@ const buttonVariants = cva(
           "border border-transparent bg-bg-fail text-white hover:bg-bg-fail/90 active:bg-bg-fail/80 focus-visible:ring-bg-fail/50",
         outline:
           "border border-border-neutral-secondary bg-bg-neutral-secondary hover:bg-bg-neutral-tertiary active:bg-border-neutral-tertiary text-text-neutral-primary focus-visible:ring-border-neutral-tertiary/50",
+        "aws-marketplace":
+          "border-2 border-button-aws-marketplace bg-transparent text-button-aws-marketplace font-semibold hover:bg-button-aws-marketplace/5 active:bg-button-aws-marketplace/10 focus-visible:ring-button-aws-marketplace",
         ghost:
           "border border-transparent text-text-neutral-primary hover:bg-bg-neutral-tertiary active:bg-border-neutral-secondary focus-visible:ring-border-neutral-secondary/50",
         link: "text-button-tertiary underline-offset-4 hover:text-button-tertiary-hover disabled:bg-transparent",
diff --git a/ui/styles/globals.css b/ui/styles/globals.css
index d879b452d2..c8f60e2992 100644
--- a/ui/styles/globals.css
+++ b/ui/styles/globals.css
@@ -92,6 +92,7 @@
   --bg-button-tertiary-hover: var(--color-blue-500);
   --bg-button-tertiary-active: var(--color-indigo-600);
   --bg-button-disabled: var(--color-neutral-300);
+  --button-aws-marketplace: #232f3e;
 
   /* Radar Map */
   --bg-radar-map: #b51c8033;
@@ -218,6 +219,7 @@
   --bg-button-tertiary-hover: var(--color-blue-400);
   --bg-button-tertiary-active: var(--color-blue-600);
   --bg-button-disabled: var(--color-neutral-700);
+  --button-aws-marketplace: var(--color-white);
 
   /* Neutral Map */
   --bg-neutral-map: var(--color-gray-800);
@@ -330,6 +332,7 @@
   --color-button-tertiary-hover: var(--bg-button-tertiary-hover);
   --color-button-tertiary-active: var(--bg-button-tertiary-active);
   --color-button-disabled: var(--bg-button-disabled);
+  --color-button-aws-marketplace: var(--button-aws-marketplace);
 
   /* Input Colors */
   --color-bg-input-primary: var(--bg-input-primary);
diff --git a/ui/tests/onboarding/evidence/aws-marketplace-button-desktop.png b/ui/tests/onboarding/evidence/aws-marketplace-button-desktop.png
new file mode 100644
index 0000000000000000000000000000000000000000..ddfac1e755a83a4ceb9be7926e1ff18a4b3ccae0
GIT binary patch
literal 12676
zcmdUWXH=72*Jcm}QOcu;NEZPSX^&K?K~ZT^q<1V7>C!t`9y&+|r6eFVbO;?nM5Ie6
zv_JqUfzYG`NJz-syzlp|HQ!n@^J`|!%%7axN$%vFefHV=+Sj!ct*4{LaE1K}2n1r#
zP=BHi0#Sblo)a%$03MeR&6yz3Um%Sqj|}~@x8`YswXr-sd(78@Cd3|%nAW^`;^I{B
zR%>9vDc0Q8$SBsBw&H%peOIH#7j@Dx(?Q`;fAK!sin?~K=1%W*0>zW(^Rm5EF#;w`
zZnFuPpYnnP?KEQ<dyYvvUPFD5FJDTifZy!>;=&FL@9FtesDbhBU%BV6GG87!f06Fu
zTVVKp@q!dEyu3hl{>i^TfEa+`i^_W%V0eD}|IOQYThkp$ewS!yc1*T$s4^+nF+Jqw
zP>uqatSBfXq%j*FdjmI#H(RF0ivDR2T+MXK5Vx5uvl1p({__tS`5am{Yd4U-Gtyq~
zw9p<Bq`P>w*xAF#CGSakq8@#{YoIx`(z>Gb*W&v6mmMc3ld7kKS&cuZ#~ZX`1tIqw
zwg}q^Pp9&~;WbRA_Fc_or(A6PzGL3MzwP+&;Y0d$$`6~$cinyH)s;g(<=-VG>kAaq
zg4qgl8JOja5nM7hy}ap`hX(u5kN`BGCCA>`Po&mi7}61Xdf12r$pkzEfy~lWU%&pA
zF30X4xIOQuQZGQuBe$L<iY9;blbZ^B^=he<i#fzxmtWQ$6IlNCX^2d~V$Dl%h^Ng+
z2a#d7sBnt*I7`B@++O3mIG(M|etRu-Q?K5s%e^SheY7npy<u@NzaG~haTG^*cS5_%
zFfLeSlOU%5Eyg2)dtQDRg0HaWTkh5+oTO-!a)n6qn^b1cg6}E_0yF0%t_5|_24B7T
ztLm%w@1L+z>CBR&IGgss8WWSjA%7W1o@&8>s(icH?oDIy5f>-jmm?OPJ#m3phUFm(
zd9v@lyLXQ^Vc-gDxZ~zs_rbQX6EYR(w(~$aFK4nh{!m0GM}8UZTI>-aXd#V4M>6qD
zp%uu-w;WPvAxsG)g2$#3DPwifk#p8@Z7ZX_!l=XY^ttY`&Cz^8Dapz5dE4x{rACXO
zg5FJ6)LJt)g2pPYt-K@7d8(2r*vG%Kd%HsUu#UK$68yoAg6(_&)ry<^wR}nqQXxtR
zs|<f_9VvC_{<RRF(tVAKD(GlqTRW@KLTTidneP_;2%13&*SB43=ge<g1|bm+d_&GQ
zbir(R%i^Q4Nh~L+yET*Tto1@+X@#yEes7#xNGrW^cBfVAQ$Xa$gkRZsweHjH@s+C3
zkuVH_<KzqkN^E~lH`3_V^^1g(cO^Xti#CkKYv?Al1fqxae5?_^`6%i};?@Wn-LN3~
z2Jqho!@lcdrtO|NxTK$)fv<;my~1wEk?@2tQk&hU##eNq_F5k85uh4ReBk*BuI^0*
ziRQ`36N{W=9p_YbrxLW7)9x$fu|_wZ63Zg^x2S0uEks?nTUt9M#jM)Dv1Z}loP35p
zEM(u0tMTw4<~vP#Z=#FUP^B!Js0vi=)8(tIccdg`+?y>fCp6u1<b0K^udhEAleVeg
zw_z|;4>53aAf!B-aw8wI7RCiq48E$J-6S=;tW_O2wKU$dY#Y-GvCeSvD~%<SVqs39
zgrMC|dx6N*Zo3zQ7C!pA{7CpPnXF63pc~!63;0#G2y@3_R@%Pn6Ynx>mfH=lW=jW!
zP7|)yPSZfFYdOtk3;GuN-qa)Sv_1n<B-GaY#4HTB?}_InXBFQ#(S^!oc&_0&8v3uM
zn%wv5Csm+*&QI;$9-T3~!m|F6b$H;hZC__Zg0e$xVBpal;X@T;hIEoZoy$BSR=ik%
zU-6H53;tHF^+}Z%_bpNK53MTL*@k3jO5Xz>T~6hFJ~C#MM?1B3Wm~(<W;Z%MK4sX@
zIycZ_j-!tIPe0n&1~jOD%UJiA%mjDCv`M>>ZkSnoU8t}(Fbg9*sY815{{9wBglNwW
zC{$sL0(wG8jtwH(gMV=b8>UxL3izO{&-+atFMOC|_11%EL0*KIps;rqXnov?3p@gR
z&?%crK@cdR?zvo4^|k>8-PUDNuN!%>#qgbpYndwDDsl<TTBWxgyVMcRE!_0BFJ?!H
z7RD{aubb_Ctb!Ox3Ch+|64Pi|hKrX#Y#em9XUKAnha3-Gju3|Y(ZRioXV%;1s45eM
zWvs^E+)t+4z814rzo>Z~zDPzF@H*eygx$2Rv@}cGji<fVPFcDbqExXi3}a&q^zs#R
zBn5;tA9HRr%18Za-F09L*`!7pw3#MtTV!O2@7~$AYCZN1ZTIU>f(`pPQO224fLJ2l
z@j#a<Bh~rN@E!L71Fj&K>Gga8sC@w;Z}E*Wa(}?t=3!V%@D+1*+H0DDp+yI=Fvhn@
zX_j!$(0FzuR6)T?o;!jvaJZm9w1KKzg&sJp{Q9a2|0x}9116o6p%nLxhaqwmZz5&P
zXAh4Jwj(waTw>Iy{dT*MH%0YLwKXFQ;$NxKYLi^*l(R6D*|HEML{aCPZNG`^@9mCO
zU)rKsaOhmnSX6B6F2*@`>xrXK+g>2W<Bi(tP>z=NQSee)cx<{>K0ako%%<Jxc_A+R
z;+CaN-sAf`P|x*|q**-VIlhwBW?g<6TUD?GAKdM0u+krTxAEf|AyEBj`!IOdFyr>_
z_f(BH%*?w52jsp*Y+4fjB4{zm{`AUWUrJtJ;Ldn!5G+|>B}`k|(dS;C$E`Z~r5t6D
z`M0Bikihk0;*L7EUX8-yncl`ThE3SBT~<o5pJog@WoBy7T-l;6HLJi{NY)z3UGX)K
zXV#zOA2lH@tt!-Fm6bljRiWBEkr2OOW^D1TK$$?~*ew#-WPek}pI|JSWj<K#J;Sb~
zG(f*OC1SW?w(nfJVJ329jo<i3$ULIL0x7+E%d9U7`dQbVcY*S7;0vD}k1B=X(IhUv
z#%A3w<hV1=a2%c<9E@J`SQachI%Go@KYx?C>Xlkrytg>&-TUjl(f}kHBLp1~gz8L6
zK(}hz{*0BuiX8R^8<FZLupM%%yX4S?)X-aYLPSIB>+n2>>6l7`)`+c`^<7GK^HtWM
zs);cH)B@{iTaj+R!N8OeG&Q7wO#5-%<}nSpDy#_t0!@R_wCi%nd2p~E%Eo3r0Lfnj
z?J|>c@ejLIcY`1`P}S*FOE##0`hUyjjxMOY+Zd{_%dLHna;){hv_4B3PdZF_VZ3>p
zlCQPeMEU;esixrz<dB12MJ5VQ*+Qk@$|ivLn0ml5JXIt9a=GRu5}tS3qD-l4XNMK3
z(22qAgC*UzT6x+jzMnaDx?4%UG~OGNx=_o;zz<m#cBnI477zZAbXFo;XfKWmA>Wua
zXg_-a8R!!_&AZJ5yNlCG#Nj(aELN>*&1qpbd6cV_c<;IZ8I&v#ri8~D6ze!Unl=Pi
zI2l%$?|J^b1{;B1Wf<dIgdqHe30xizJbx;@F|ttZ_-@6qV&=PRSq2`c+jV%Nw$S8>
zpDkhPhH>}(u4S*09TKrpv<Pb%Mt&)^i@V{yI)7Q|T6IqtqFp)pvg%_UXZv5-XM^J4
z`GxQ=M3jHPCWie;)0~{Ss=8<0@C-jyW}#)hg%=hy5v5q!#A~D=CAs;^QjY&#IoYX}
zJhh|M*qux3_UHCk?jC#}RGdpV+N5hGO^O^tgm;l`KA8f=rB)+EJg&E;uOQQ4CryJO
ztap2%VOs$&k7(lza3ZwyJC8zt_l`1e1cynS1lYY(q5}CB%sf=l>cC@d)=C;|qwKX)
zoPP~w1>gc+pZzGjUTxTF&mc?w0DuVf4Ri6>2B##&P!*(3e+%B?Ix};jTj^c2lK)Li
zQm4&AUFZwGVIr(@O!$*psLURR=o?NhczwYB&N?nWt3l(!xCzW7pGFAFbFlPhy^J>*
z&41gtEIqh#{mU2A<)^0K41_=Ep02^Il^|gbKNEp~Vm6ODf}LK%GdQzOmRVRp53K`b
zOEj*B?9R(xRWjBqJ?%a)61QqGhtrFR6Z}08aLv`2G~w2@z7#YrdL_dfK$l~Q$J+zZ
zJe%ZDCdji9bqNF8lUL9|EfW!Ph02E&FKU~F&y`lKEiK1H{AOv57nUp#th}TuU77D&
zflE=QsE4j*u$*l~_UY*8NMu2<)?CvT#+{?1HDm+bqxDHMpP{c=qi}^Vu<JMW0DX87
zdYvg^ll+0{bJB^Hoo0robg=Jge_B#w<=dnmj(F!j1!_tBnH|P!rE6^{r%Zcu&C4OI
z>X@>(Xcw5;3~x{A(#(H)@NA#yiBE)0Q%PZme?ZPu<Y)F1+`E~laV^}4PKVXO61_gy
za`)ZcXZ`Sj7NsLoDrtxIwg5Z*Gfqy<w%PjR-k_D-swckq)_9V$s1eR1q-H8V8Qf9V
z4rU{@Nt_>M#W9!QuMhf~0@Lceu#8jr?j^n%V#C3H;!dQqp4Tj#aED<`gSHn-Y@uQi
zQ~F=pqJ6DK19!pXY|b9t9C>(Xr!g6mik~RbX4h=Hsu1=HRf<n;kafe@bKW>z`Z5gN
zoOqP{A)QJzQ`UM5p~>z%<>oXyt?Hv`UtwOaUwVM;PaE$l{1u^X5q26f>T5#*b$%^<
z`ucZHDpOJnES-u)7-O?kP{6;OXtwN6m&5Lre61GD7i|nZ+;0KDmL`{0@WYb@v|KR1
zH(TFiv`sJfs2;W+%94Ke83Yz%5lJ$?SKF0Vb)iz}Eq=6H<4ma&32LdAtPwX0lRe}M
z>db};<CGmqdAIrb4F{gr1`^MVpqTks7SY$13?bD)BWJ2YJY@;2Q}my74|5Vz`Pl{}
z@EtEC9msh)WrEW4I>UkZpk|Zk-(7XcI~xryGh_RV2^`?3p~Iuc>S>0^vX;0oYf3P1
zvZ}pg7)QGIu7l5{EY9?Y4#)}c2u8MCMuF6O<!7uJln}vCIqkvQ;PA3(Tl#)xWu(nh
zH`^$?%vH?~Nl6)68DguJxIHSeO)3(oxvn=wA`g-ve}c)r4u7l2HnV2h>Aw7d7^^oy
z8+Q-fV-Hcn7ccRFfjFj5fa8)Db_{%raGyq*5BVzZh|lv7MRrlF#~9)K>H{{VfTu~{
z!sAoA=u@yi#-1<L)Ob|UbMv0k!7ybBBbSvzjCX^}Uw)`dzxn#IZP+iHWSk;)2tpYE
zSv8Hk>F#^o6^q+WU3S=+(-7y&WMT0E@0O<AXHOG1d3I^NGcv(!UO?gR?p>9kY_^u8
zm2x%%3&j}?@U{3mtw#H@Ys=zi*<kXFL))0m$6*<y&hT-A{Gxuw*_6aGbP8;v3j%Fr
zi&EFEq}d5io~^p<gEx(Nz(zt+pJPWTJ*cV_5dkG3OIUvyXQx}me{un#ax8RCPKt$J
zPEVmBrwm5h;Rj(GhrbL;w^vfFLM_vwz4IJ%To>=K?6f0Vo!J)Gj5Q#S!|6lP3T{Gh
zzx0i##^H)M0v3`^3gIJmXSs)!$a8U3yz#>*2Gn_LwCEd=<h)qhC93^C5q+cv-1ms|
z`%eb53OzmcV=7td;+lguVmu^>-Q*{D|LEV2O1Lge)y8tjD&P8ad;Hc?ub`Vxc+&5#
z9kpp;lPXvTcV=Of7{Q1VZL>Qi(y4xhHT3zZ#fnf|%II<E;a}Z(mo+~weHn_&ZV(S4
z9AL-MQ{T#Cd#<tWLhzO`?Z$p`tG%zXf2E76Di|h@GHuP{5H9#Fxr2(Bo^M)>p-D@T
z_zn)COItGzijUNa9oklUZpt?H6HD?^7mV`HJ@Y)~SBEvwkA(fQ$nKCU)T_8q7nGAJ
zwCg%b3YB+37d4}1+6!)#XY|j}ci!h8P@d1L@VLBI@#PjGr{i0dJ>hFB0D6c7e5xU>
zigN_tT>(6|T%D>w=>o&9YCm=`O&H<1{Dmp<cw-*XwmE<ObmZ0UDX~29w;x2Y8UNBM
zSLH+3RfkdmEq*26t%4_YsrlJy3L3BpOFKEW1V{-`;%o1q{q&GpIeUDCK;gN$VOBf!
zF#uV@Vp`*rgUasaU8D;7c(})+->^0B7qxW_RcRHnzDc&CUlyZb^sg~Vz#1w1eqBI%
ze;a()_77hQ58F_9ct*SImDjr%>W#MaGLxO+ZMZ{co%eimN@^&w<^&Nq*sTE#;}3Fk
z+F$9@BTq4fd}$iO^^Vdf|K#BgeROo6RXkfDi0^uotji&RkReCRg{gL^jS;`a2w=+a
z4V2F)92By55d&*qA|4B#JF?}uBSQxn@1*h{FApEnx^Q0Er&D0IB`J6up7{tIs?rG@
z6)K)oJqqzd%-4qdY)qL3R~W%Fl|5e`+*|;v4Ka)MqqRYceVdbRZFCEsvt-z87?Ga-
zO8={*PQQU6O#i{EOLTNJG0I`U=hZ%J$P76&j%^M>6Q$5PIve4|OYVrfX73JZ-ODu0
z+Rwb2&y4>G58o_KNeObEaC}i6<t!kpOCICy_IjyiR;dBmcUf?czg1D`#4BL29ECHN
zp4Ydk=~UZEP%SYkYthtVy(1=O+BD%bBp)$~deftw954YdQI)gvQ@=kMeuZ_v+Hf+>
z#$njR`4$g!q!#a0OVKNMvYK9@(9_-R$o98?uY%K1+0-{>Zdr}ps#kL525|Z-`tk8u
z!M3_8@YK!)%Dcz?PuUh)%BGUX8}1tx&x*T0UI-GjNaYcJh5+jfiagzWR5cGyudza>
z&w^!~k4SR_tNX@ym#KDi<AQd^{NIF%<@`}T+XOAB+VE=NXXLE_4Qp7SJM}RJOb$PL
z6He;S^TREm43Xz)@Oi~~`FAhNC^y7!Ym8RWdu!w_imHcviXYQuD(BI>hqn*$kFXb#
z+hm1|a4TNXen8^}yQvE~?0X-C%}Kisvlfs}zBspxxuh-eqf~LSCIoF5>$ShdB5bS|
z-o4%4N@U<PMwqkErFJi0u6p{^aScJ}{>~GcU3lM@Z-H<!Q;gVO9Z(=`PpvIzmASUH
zFotfgu4ol4a47S-ho%IT<$xE+d6z`Z!5M$?Q1B+pt%_5lCpY%df%WEtib^=5%fYzT
zCw+4nZp*g?P+2{#_HUTunwpyHaDLGZYNtZpH1%jVqcY=UQ<(AApQU9t>CB0e9eYyL
zs@aN3C?O?+*k+3@4k**v*G{b0-z^r=_B9`?n%p$5z?c>WzA2j;%eQbKH|YYQ1E-o4
z#38+z``J^Hn+hh$Sj{HkJyFcu?lj&)m`dp>M1l9WJA_Rt4Rne43FxZY7bjGy`k+ym
z1!QAdhsW$tx6XC^u{-h<)Aas*2sigmM`Qw}`R!MX_%7V(MsJv3Q}~uM3jdawJ#g*i
zhzvmxCYH~aEFN{@ate?~96gp+&4EVJW5hGtl>>?TbMW%b#rOln@m}i@ZbkqVU>&%0
zCO6wo@kp2dHgNyW=G3}z!4p@-s*g`z$u`msMT}w#-N@EEutIH#9XF&;QMYC3s}W*>
zhkA6HY$QNR!LcH@2s@@_@ON9Y2op)&m>KBjAe(xDZ0$@^j=dc7Tn00E4EyzHo_=|8
z8D<kdC0Xggqk1P*gjb|qm3p-j;0Z>Ui`!P{prN^ic`M6Z@z};QQmnhc6LYKhr&S)I
z`+Ew+hdy6tzCdzvv_ci|lBhG!F;lYb4S?&i`$~M5Q)(m}s%T%3PK9&2ZCq98UvuXT
zxP|g3Gy)!`zIeKUmGcxnxK;J$n_=ZvY1m=yngp6{;C5sk(aLJz)Wy08`b^bW<wqd|
zvN=)t0G~ydDcXD1{cFQ!GiCp^TAQSCJBa8dYW>h)Vd3vHO|Ql8uf7T@l0NR;0ue4P
z4>p49<X?BVJG^%)z?1uWv35@96~U94yDC~j6DJn$fXYyO1wE2q2`MXhjdO2y`6p7%
zYFW{^Q?QOUjLLncE!ra$zTa6VK3Se!OnF|Ff=$kBTxc-re$gz%rdyRa>$!<KI)fGA
zKh}k&rgb9n+i4EN_73QH*fS;zJU*#DQYL;4!HSy(?$&%ZX2_{&t7x=YC$#-@9hF{E
zO7pnwf$jHMqXYba?Y(5jbKH>j2obN;ZSzZdAnMX`L7RzkRtCHH{1mazUcbQ5A)>)t
zfJ`Rrprb<=G9qtCum$d)nL#r!!jz1A)*>&l^00i4V^yhvX)_xr3o-gvf4T>z-LBc&
zeDDb1EMzM!Y!z=k5FopzD%}gvJ={&RZ#F-H%yYyEcxn8j#X2lw?XPQHwcC&e5SeC(
zXRus=6d7z%o)OheHAdRA9Uy#C8r!Zc%d1OK{C`~zsOg4#75D@YQf;CQ5hL({i2AFm
zg6w6XgxbDhf_G0tpzbjDu*RwdG!^w3puf1PS2133JS}yFYLf=qm1eDkQoHZZ%om{a
zq1J5YxQP1&qmWvUatpsewu0Z8rKx|-w{W1|CLxX2W1^##d~k>HS&gN}u(yhms%z1)
zv0&dV+vhGW8)Jn9GTFGxDeLPTY6&^LS%L`{6<FpWxM@{#lsMI_d(eJ!<#0B`Ri=b@
zW#&T5Wuk0a*5wAif<pagt1pe|tQ}UF<@~J2(#oCWq3S2$v9;58!mp+YEoV<sC2c71
zaC;oNm`XSH6ZTiNogvi+tV2+yDuDd=_@bu?u!Z|a-GV<&V3wmz5{~%IJ7Uiw{>iS?
z>ku#)_T^+@5oK8&FsVEzkua#X00VGUtoc{{Lhg)3XT=}77=eIBJArYz<(Tx@<DPqb
zP!pOdX3%>zo%Aas>NfrVl3Cy`!9wl;S$o_0KlGXD6Mamz12@AQssyOKETw_>NTP8c
z{-wpdyi5yR{(q&@{8urlx6-aCzeh)8&$`}j^YbTKCN;~p0xFeBqi_DBfQr-b7E|I?
ze3T~K>;!r*($D+g!Ha>5z@C%5NvRB3!7bz}1N7ve^HiyItt}k`sJ8OYpQw;Wv{SCr
z@?jtRHjM`{VeY1@n!0a+y9Es*-aUuzS>VkF=jQI`fZ<{N1vR<>N*aMQiK~4PIx>E>
zqbb@@7m%IgJq}d{P~z%z`vvmMPxrGgjkc4A?zjn99@Y0SqeTpL$SGnpKM3om)}BWN
zs{M;2;X}G-YynnU82iGL<_{0nx;Vmx9wF~7Zd|91%m{J>y)XZf&aw_Hv|l&<OkuLg
zAczJOiwI(pdb{HDcW>n02q@8RT0#Xmf%TDX)FheGfu2FNNp~NfOmCSjoG-n@o{G3$
z!z^k6_B;C($^iP4t8eG*hN=GIg$Atk5)OX{m=LucmLmmHxl$XD8ec#I>b>rAGq=%Y
zezd{I3s}xa7j8Q~7%<<9Svld$iyfWy&PG!pkWla13z=kg&~2^inOkp*=Z5GWyaKMI
zUHGYP5A>!AUpv<+%~<~TD}lCCTNW=zcz4sB$s}rBD8o4Dwq$dv$I;=t-HE)Mpb95I
zdvtuK{`~obONUUS*W<W&$({8*gEeyVbL#hDCdXpKaUt$s><zxwBwYk4-Z--O5E}5O
zcRRGTaFkNG!-X(!HiDH<sn}mp_6+XI)JFb-2)6EEfBbNGo(1Tji63)}bB(r}Eoa7T
zLS!=6=@%FH9}oxqdLkfl4rqBPmbai@iLJfcKfdRxI<3%buzg4B$|%(CB}KSI*?JXF
zf&SbMq94HsPdTM0aTGX!n8ICxZJ7(^(VSGEm$nI1v%_FLH-*6ZG0-CKi>%xAau-0~
zd%2nJ7&?^aljs+D^|Nm4<kErEqp!jM`~FW<*i*!HUhWsboZl?}HbOtJXvl8%OuuLR
zb9D5@KyZeb4dSK`LVc;{ijwijG}IqE1RH@fGR`uuTAg|F0)h?phnRY2VH`ZgU>}@V
z{U_?nm+5a$ZDE&e_X7{(W0NupU(6ErEakj3mmfb_0YdE|77@HU+h<U0Cx@SRUL8s^
z00d&Qt5obVGKcduw2WL2j?`;O-iJ}fgY1r9UDoC<fhqF4+q~2?_-!^HCF1FZml6);
zHZyVX>~QeNir7ovb3vA}`Z!(0M!}wR!!h{54#EN5nAAPN;~;9?uvW-D9P;<;sOM)A
zK^Ug-uyGMqqT@nCp_Db((ODi}kKkvnRa6l{5E=#_2}*0PD~1N@bK9}3Q-Qwo#q)CZ
z-l(vU;+7~mUZfJQcOQRzzqYE4(0(Jb{<(2$5&G)9yh)k9#%#VaF}OSX5*=NmbV{gA
zlc98I)@}tm9ygJSRtjP&>2qywHS7exgwA1FSok)~*nOOgPD48MHHIr$EF<V~d||7W
zn&LKyy=6KZM<6I)<yGM`@P0d`d3|NX<Wz^WqJ;7~SQBjy*{)!M>`aRDAI8-UM}%v&
zQWE|6#I4dJNLH~emG;~Zy;Gm>DEw6}{%$a$Vk}=1$;!7oRFy9GYTs|{Xr@M3MDexX
zOT8zyD+!XJ=<2RgHNxV5asehg?8jXbRY)jI+;*cBuOD*+2vW<#?J=<ly3Mn+OgsvK
zicdbeW7+~%W)gBPCk@F<&#xHk*DB_0(W|TOq(KJJq!pQyx1NFN_gl5tu*|%9=KCX`
zlM!df<y+ujaKKzv6=JUXLo1L`YX7<*CDB#tV^Ks_48kQK+YkFKBxagkDMhD^CHmhF
z1BjKe&#|!?M|quU0Kb$xKl)<UB7|H>F<hS!Mf*Y&!t$K#OhP`SSqb;j$C{KU9YI29
zCp?dM<deUAX?oeG>1YBw0aj_}XxS1hy}!?bFS&XxiIq=$<0{);hrgPd8eIoc)Rb6!
zj7u#;_?zwTxBBA#AcwdL^45fQ^^FDWqla3L_)T(JmC@FZ8$>McoVJtugpf&UR?V)M
zg1ou@e%avKgIMZF*8}u?y;tPUFt~yWh@by};-A-q9>@rhb;usZi|wBz2pPP!TE$16
zt*;Jzo9BPG8n~ew9g`&07(*iVSNl^v#MlDOJ@H-hA5M+1z#^D<lz79J*iof7#EqXo
z37@X1noDU9)h_6;pKh#Q3#3dz6U>yuh{EJRjnm#5X5-Djm^m74yUZQ^>)kLlR{M6@
ztYTIIIWx6#QjVs&cRw+5AK@4H;)y=a4R5pCNbeD+)Sr@Va@FQ%J<&UT_U=q<x#?>>
z)$XJM$9S}&xQEU8QM^pW{`K1cTsQu7ar?n;`%I&W$yZK^*Kree6>A!rnqz2JsLS0(
zXIbLUpFjI6?Ab29mZliEn)g;ryl>o{s|YMWyfMkO*Qhk7k#b736cjTls++@9(^LL7
zZ|uVst=h5|KOQc*hL&jdT{d=<DzVUl(|^J=3CR6!ohs#JGiMKNy+HQeMJ3a!n3!B;
zn`kVi+}(|SqgLNoUf~~d@^)GH5>SK65B>P?d=&5*C90mT9!mQ=*iQo^mYYCn@0pdD
zm^*A!uD)a+uM`|i&ZxlLe!AHfaNs{t=34)2O`H8pYBS+dtcfO<`OVOc{j{9cV@w+h
zpI`mk-+6W_9Ulp+lMjOS<?zWnb2Tk~XWv*dSNXlkk!@vuXYDT?iy2)vC(7?`Ybz_P
zOxAyl{b#GC-udluL~!q{@(avU>xm}uq6nKPPQqHQ4i~zAVe=EQZg))WrvKVpK!(H+
zkZyXfUmoeT)PJGuNh*-4HPg9dbvsPC*$6++%v&7q<-0R&eBm&1xqU+9Q=9=rzC}k{
zHoBB5D5b|;s@w*PL*1ji4*{ZNK--fV%}SPX`=PZ&(q{iQnoa3y4-lH2`mSei)ykFh
z0D;?M;lttz)npoE1nYvEQE|J<8u&c9E|5-}eR3e3^p~0$&qmVJ!_Z$*TQhJd6Ec@O
z8Ej(>X!y1)7vI{(Fm;E>5zsbnT|d>yM)*2cl%bZ`Lb`(Y%1M*PLc=V}!?3+8%c|xw
z_zAT2aX0vu2EXfk+uoSbX8nr604gdb#+a;IuVc5?7T`6oeLRkh_y-bFW8tt}CDITV
zn*M|EQ}@|M&a0(s`iwSp-uR$ST3LKKa!@>AT|MMD6KAb4c3)+)YagT3+ROO<xZh{9
z(FH&{)rS3|W#$HB4d-#>O1Da9Hz!;m3<hZ3J~ASfg;-CqLcw6bs`)EFwl_ZoYIT?<
z7ZzZrh{$_NfEI!K5U{_Jj;oTgjhL05)3@>;u<zrwz>To<r&a72&rAyeTEL+k3UpnF
zTac#{o7n%2vv!`cFNkTD^gFxmSR!1!-eS(^YT4v%<YJl4P9r+!yuh_Hw`lD)NvlGs
z@``)`&_`v0;x>g2X7RhlapNG6%FW-o&+^Z_beeORU;mJ@C|Q97`!vQ`N--vs0NFA2
zM(8i6#E4*)AO?Sf`|Y1-+oTRr?X%#U%*-4i%SC%zoRrT61qE6rm3QYglJC?#7++3$
zgLX|~kWB`?kBsHz^uMehF-w<%v}kZbl$!e0XMZ9<2XYiLNRAYFy1}lP8<XdAc=|rV
zs`sm;nu}#{{e2c%rY$Sn-fzGc-y`m*bc(e}Hz7$t;sN<4e7gMK_h}v7%0)?|KPGTa
z{TpD2@d99?kDI!#II?xF(iE;i{XX)E>&J<;%ODURfK+ni>r&7*_QUy?85Z*r;}cvy
z)&*tpfk1Iv4^)8DJ&72Q9P>Yzud#g#qDaha^>(YV*YYM0CeeVtf7;s9{HK55lbYKx
zS~UJl+-G+k)nB3clmR4>@&wD`ECZYMVjd<+7HLnoL;`qGCH)nW$~=x6Y=?mkNP$lL
zG`0h_f;y$L?x;`$?@dveU!>vMw{D&s2LCxUJ6onoY_{xw7!=s#hZ_--eC7r;q}?8<
zJ_f2GGinYE0ERUso_EjvU#)Tyt>Eq-9!0j9RN@bq6hmYH2>NS9zk6o96JZePyHj5Z
z>`_6-d3^%E^e+r8Gt`vdqx<z3E5QIdvzl*JlsrPb%G9>&es&%7M{nBw5^=SIukmy{
z{TcSNYi7V?nO<ca4d|;7|6zH8&G%%MO}i<wrRhnWBQsF&=~s_msVh~=2y8ov;w487
zfzGtA=Oe$!lS$#R4Hc>eA86i-bOPX#o?gD-nOh=+igaoV=i}gU?2S;DQ3ITbskR5S
zjqn6gLi3|Qnm>BL_R2h(MGRg8ft~@L1OV{WhOZ7v3?T07^>q6G_KUsSkA1r3`-ef?
zck1bWU(5u(PyJtQMD>F3wckiSUfv}lo}+YoaWRoE(g30uP;2L<r=+2wVNz+C@+|32
zxKxVUToW5BD^%7UV%hA;eoE<<sIqDWx)V*SU!HBv5KO2+-^18nfS4AVy_T|M2<$<e
zTwENol{Pi6101z3935Hn#fOpu-`*t<X#n1!{n00RX(z)6N0fNGN^8W%WW|@GZHqJ!
zv&TTjq`bQLb~@H&rdH#1`fRmfzPM%6`Z8QnS-IW3zW;jBK!&(*nj;Wazcc=o`${}J
zJ3CX#F?aU#m<NLhTBx)-<yR3Dn2(N%GNd8`t%U9Et*WZS8V%`$GD8p7k=zE{@$rIi
z+ScY&ej(Bc6@%ZL8p{YK?4!D3P1K%RiJMld9IP=IFrqJCZC%7R3d$3o0gA!q1k4(y
ze+h;3+wD+|{5;<tf=1O_zW&Vx%;Wv1%deo8mf6x;BA=t95nh7l%gK^;*U)|UXYWnV
z;{r{qa?>Ory91qCP(`-;<VTMpKYdD=Z}N}?>`O;ScX~_<mG?2W$@~R?*>qn#uHJ57
zvX8zS+v2%8n<<@TN7J`n`;RM{1ZekKl%>udYHFsRU0oWd>!T^9KzvcT#C~*77ou3o
zYqWIX(*7p7SSKe5U2B&!KkuwwLl`R*#$mGMyqcO)VHS;nd5;rBZQ9R%cWGUZ!mDYN
z?#$MAZlj|Qu;MAVLP-8^!>`!kgO0ams?ukQwBdYeI_lvHfB$(IenpIykuxdOvF_~>
z+jUR-fpjjwM?qBVM?%WV*3zCUy|1<a6};e|H?VsH(4W8i(}Zu_H`F7R8T+KsBm8#r
z4zPTNFw>8<XZPrO<dPkq#@=k`pZpCZ;O6+47))KCte6-fK%jo0qBOvy+|>I1I6#~L
z!4@QPd8Aq`uzL^+hI;&bx;=|ZPEP*#DM3pUpsN_JT=^WU^>(faGg+a4GG%nYCSMOL
zeCVpU{&$eC8Y(fd!ffc3L$H{1z^3tYpchjLpu5Y=_8VgsaWyj{ae15oE#q)4_m$u4
zH_IgQu|~dW&7IGmXX5zM6L`P^Pk(>rvTzt!s}7?q<*Vsxy17k{SQTP*a@t~U2-P{E
z?$V8Pr*hu(eFVR_3N+OfzQ|QkULMylI_*tj)^|KQEEo1!PfQ%wFG+987SwgqKwZ0*
z!5!A-4?yWLNf1a6SQx9mAw<&Q#kX*r<LpGI6XegISV5g^`4D1unRD|%MwO;6Og}-Z
zcj&8Rv10Hrgu2-aOV5;0Eh1_imO25?5VPW7W-g1FVY%OQE5ocP4t{Zcaq*2rXIE?n
zkirFCwLJf-Z&cbuL&JUf^5tZDuA4V20e>-lcaw2C>Ey&;WBBvu&-y`b3+-v_3oeRO
z-uch){Ii<T^7rnY;7}!=tNl_=h9*QMrFpNFUVvbmj%Lmi6SJ#ZDdEZkm+BW@k%05R
zfeAM{p`K_CblatiTJ+B&BIbN>6Ks7WKw~V2bg4L5+PS4~zmPXJ?MH(-o7wq+AvMaa
zquRrI&k2I(U+k}@%~|wsk1e#1zn7Y8@-Sd9ZovJ@lGQEEumtdNGAL&fLF^Q;&`Or^
z)f^=rZU3BW_HsPg4QQBh_6!nv2e-c}GpBw5#4Q%_ZZRoULa7)9Q+LzBV!XL`YyqkV
zG}rkTBj88><NoNEK-CXa+j9V#Lj9Mj|KCZOcyj42=ucvacH-=Ra0D$t>hNr}?Fx(;
z0dZfMIqAKt-rD$YqJX*%AV7eu!51%Hq$8+GeUi~<uO_2BmdKFg@)_vO=C(~RxnpR}
zt?1dh;O6MPGhOu60dXZg_CB@BTGIN~GHb5Wu(smn@E4gEaIVTHmqBI`WSX}R0!gU>
zVPfN;#RY+SYz@%o>k@OGW+SX<-(I`r-5a!O4yJq`cOWFts;qemEpKfsVPLAQziu@@
zdVii`Fw{~YTZVrzLyM2^1BUoN(J%fI4zdE+zdwI2|5wuL(mFs0?p&1z$Q%8{!F(5f
zX^=`f@ZtGy0r@^04FF4a!}j1FhX!z$z(fAKcbyvE9ZpB5S3niQ?2$Aee?3^Ow5+?S
zWpi>FaCJCSenFJ-pw11o1&>|;n%=2r{_bB(I;01zF?fH(-18dI7GMf}w@raoDh38n
zuH%OwCV#1Y`CBUn&11~};>%VYw^opmJVn}D<GTzxJyf8~)fEna8|3A91{_LT0U2c`
zZ-D;8uVZG)RQ-fnfbHjL@Y|)Dxz&I7g-jgq9alX#CGF$v4Yb*VR^EByfVMwQx$J@p
zfMy(aU`B2bewRUm7v#Et6Hdi){vQF-5Jwdg(5P>wRb&~h*Dp%@DHw=fY4<I>rvHqV
z0bS>MwC_c9WxQ*fQ{o{mL|f{6S&y8C0fWr!-~N&MnOmXeXAla|Fd4ZOIX(80X+UN`
z+sD%~ld4(3h(kHEUPBC^-X9XO|7!6!dtOAp1Z*;>_Wu8)e+M{Y0#ZC>d)-<am?h1*
bfv7>YN2L+VmcC-=6W4gE^Q7|e%a8vJY%F(p

literal 0
HcmV?d00001

diff --git a/ui/tests/onboarding/evidence/aws-marketplace-button-mobile.png b/ui/tests/onboarding/evidence/aws-marketplace-button-mobile.png
new file mode 100644
index 0000000000000000000000000000000000000000..b0009e3b42bac2e7e4e92868619615683cdc59e2
GIT binary patch
literal 10992
zcmd6Nbx>7dyD!bA*$9Xr-3<cLwaHC)3!)%McQ>07kOrkwQc@(OrKAK&r8}jOhWq-(
z+<VU4J9Fope-1M+dlqZfUTeM2`~2#O(oj>t!zRZ@LPElWE6QpiAt8r@Un&R+ID$OQ
zn2Cf$hy<6F*73^R%fj*^mb>a5bPBu1M;Jp02^C=)G*S$Yu~@J}xN?Iq2iI%Z-jr9!
z%65~O92p6VMVV+yJ0&oVF}OUSeJnpBi!TR*A>wJyj{>)icFaapy3l;96TJh~v&AL_
z<|ik`Z(DEu&2-hTAutFp2DLPVwpR*Hhaf{^j3RtNn9Kl+l-5Xu&|*mcPdUgK)<-7c
z=cS{Q%u!`jzmw&;ph=y=qWNN>#alum4V{;se)Xu2dRox$`geovWEtb&>}Px5%k{KL
zh4q1y>x<PmOYgq7ln<EIlGmSD4$OHj`e%uH;^X628aFtosf~P>yl*l88vfAC?`W>c
zHD8Kcz=q#_N2m2wZ_Fb&9PTsx<)F>DKpwCDU1H+#PI(n}M&te6wPX9O2Qimvi;&ya
zXt~FXzf-eXwiqk6daKWwY2dB9;oad^0{sdDTHKevKE1}Hcq(iDJzM<mS5;G(<TEO#
zin(sYWSn(#IS^8<HY^5&!uy{LRoMNkeaK~^k&};M_K{<?V7yp;&}BGXpsu#|bW$me
z>mw;9{^LfcWtd^Ok#rEEh?PRnVS-U6Sb6iORgV8^tf1`OoO2(gS-@qHDXRF+)W-}X
zL@%Y7mxkGLM=<J4X?0Y0cXwnY#IRDUXy9nIuZJ4L<^Gp#mGrK81Adlg1eLgt-|g9S
zt(fnhJ<S4ntgk}OE3%iz>zYCydj|D3lZcPFkDj0j($1AIsb}x0iPu2Y(H%zdixhHo
zO10v||GaDKy1TvBz5G1upuLVs<t1f?M-h%dl*nzXDz2=q9<^HzrZ%cKPtcottAl4d
zm@H3Y!4+Ket83dDWjyIT>e9&ZJBDvZ5S_ms&F$Qu{~~$0mh^^%y;)n`u1`CS!|y>v
zI&-!c%uJT0c;HZ5rz!CM4xfT9Rdf9<rD)ml&E?6_ebZ)ksNJ`8<uoo@)9C1EQMWC^
z0h?iT9MZ@xjXW6oJXZ6`h^Sn`i@lke6gFL=!o#KP=?X)>^WCW5Ub2a0`c+iK#A_N+
z5EQCdqno|D?>fR994aZ693RH(tkhefhEh@u?z?)#boBI=c>E;+w^xlBoeEMV=z^;D
zVb&!!lV$llVyB}rWqW=c2ttBoDBNc`?4d*Ba-d<^+?<K-{Q!Ga$&)Uw^?sH#wDk4e
z-Q7{6lZ|0Z<ObGt!lL5hL6kLl((1l}6!!9uG~SS{cx9Lpj;2bv-bYz;jkgrdh^?w1
z0qA4ZbpGwb<*ypwlu21SRDIVH6iz1-ladIGX==g{ye?LXujqXy>(w#a7M9s*)T?$J
zTaM)U!|K>P5n^LQ@A)Q+x7fmQnmvA(+0e{cn;$N9vIK(7Q`<=(aY4h+PdvP`mP`5R
zv)`r5Cf@-r%371_<_rHq^cq_H<-MPEWLBfC`aO&Hcb<=F-V)os@b|+}?CwByH^6&I
zEQIa-XY`54T;(%SO)`h3by8W~Ei5A`rv3K&+p27Sr1qQRXtBfd#Xz$v1vQPSzV7bl
z&Y;5k)63PDgI4J?7jAZR@wmkNiiM=SjnuM4!fd}UqafX1eh*yRm$*IEUQ<bsk#($*
zsMI>8UW}xnQgWmg_tEiYw4ePv-{M`zA<EF?Oxu-}u-+R>aWLCJV0JUEF3D;8oQG1x
zE#A_kfNYIiGN6Ur|7#Ct`|+nwpMrvr45J)9=bPPmN!iQ-bWcy8hVK;iE?=c8AsCLd
z)x{Yp`ikg(>!~|dnYEjqjU!LO^NL=6&ylP;zIxt;z)~y{Eo{gu20f*rBKW7w3%x2+
z&WZ}siEd#TG<3VgHt`W=6)4;4+=D&zM?cL1Z*^aVXa<pN&&T(@<;GbI>1S@m+kEJW
z;!ZFs&3u2H*3Mz{Ns$ZY$+JXAMz+=R%EQAWiAi-W7MuA&x$q*VQ`y+;)|PdG<c{9}
zMMg7vnY#J%DEeeB#}eC*GquU$4<A0i9>+*u@pEfLUiz?AYZ`D6nNUM7AYXy%-IEsm
zYJEjr@)k|O)Bq#orRS)s8%A0usI)N8m+fhY@v>8hPYu|it-j|2auE!IF@`Bc=w*8X
z-8d+P5-HmZGf`!l+j*c@8SAbz?@g4BR~Xju9OGSgb85n~GwgnSf|K$LMfg^YY8~+S
zl4XCrI&^juhc%qJgFd>t=d%S1Dj)UccN$1$Rf?;IwFlf5QgzBWmn!6fWmZn*fI6T$
zJCD+vm*)K-P6IWn(4exN(*MM#Nd5SopkubOIMI}5M|8q^oWxas(fOMLD0vxyEpZ1P
zY1a=QT`bj`o0IQho52-(zv>5zsIb^^mR;`99B{SbPRr31^2~-zqi+)tEb=K<L+@xg
ztfVKOlPRXOU##Hhrn2UJP|X<V0hsWD!StEMlPtvbJCp8*SY}44i$1%Y-9q^O9Su0V
z<Pv^D2>8{SL&&R?_u>~zp+0FQ3vH*JLe>heaSCU21x+^ca!s7Bq0L;zpK;G!Z|SWc
zub|X>-QS*nolRR0!+FRi4wHm-c9wR=>Q8mB2I0v>Cn$XtH>(dy8vWwwC_WJ15#4Pl
zN067X6F&w^<9a45fryA0L}}^qIos)sK0P_nmM_8(hwhXiBm0G-V&Ha|V&IV%{t03E
zzPLyoP&05YJwJ+<DIzeYVt~yuhpL7-g5ltGIH410)ZpO1`?29o7a<8rk%C7}O^uNI
z*KoYSDk{rJp|^5VUnP4wVGf6QWe!WdAL72VIN>kPq_Swj8X%bumd|E5;7-^&mE?<W
zT3lfQ6M~4-Iwcow(-s4JNK<fhxx@Sq{AG)8a$6`|LUXh0`4YiW1}_(!+K!KpP0qGz
zBN&Tu8d1AZn#c^pl~&UAp22PoS|lon-=cCLGc~wvYnjg@r7#5ls<#z&42wr2jl`Mv
z=1^DFAf6&)l+T*XADHg=Y)&MEbtpCV)=1jsy$Y;U>9MH81SIXT2O96~MuwwCkkNK;
z94hoO2!j3<hhE`r_iJend8({8O3$Cw@>ui})?@9<9~*~1T3v{L{~jxjpbxU$ZNv8K
z3Sc>SUpD~wq0%)KZj!eV<1E}*Xf0RM6Ag}Lnq+O)`=TipNRl^)sA`lUwKqFG2jZRx
zgpfgIeBj+l4%<CV1+vDb|8lKt9caSx{T%E#BSt=0PnC(Dr0=NVN03%xyKr5!`(Jz1
z<G1k`cEpmy@eJiZtNSn#$+C1cYpv6rLO9FS6F#`laDO7e2(?9_Mdg>vL8jqgR>m88
zMzS85w>f|X3q7<psf?Q-pwoE&J7h2^C8dafX6HnV1V5?gL?(whxUQ_2Dwm0Z;}n6j
zX4;6kPdEyx7xKSy({&ijmqVuLVwHK~+Z_p2>|2o_@Kl*+PHtnd(ldEqLfiQbfspPt
zuM~QHW#e@I)I@sNS2lEiNFgku-s87XedKeElryNQdeDBUD5*nE<I<#pP|-l2r#G=r
zOa%k{TeINH6I8|mg*ZJ+6T&C@J4l)2nLh8=!XGKubet8>c?os6$Uu^sXT?s2_{z{R
zBhV8g&=`J5S*tGOo43v!Qr}-hXrayB%%7$_FF*7_6rr5Yd*)QgB9*9%PfHUO2YsnI
z(W|!D%uH5}$CG9<NIjdt9U<`x*gQKKv=&-D9Kt@8OG!u_aAddWUQVNxb-65U#w&>;
z?-Fsmtp9+o>X7eP6r>~U)jcAW2+sV0!B(g>BkHO1U1ulmvEmZez)$lL*KRJO61fPO
zLzlgq@c1FuN5w)&X`7CL*BKnU>MkY70qYE_p9`qQwCY|tZ<lw{cwHNGyXVBm=N3P&
zCeboFU+}FebC&!V^iI<-ZAU9$l_runnaZ4fjxE7$)G=s;pkmw5Agv^t<URWOhi!c^
zkK}FaG(n`alGVhmCvI!~2{)f%A?n-E3W#7(nyC*w4JnF>VFw>&O=_`<%DQ0hI1)i2
zbdlH0wToOKtG@GvZ#(b#DV50XTbuidQf+){;kl&8nLgZoYH*kPPHKT9V*+a8X1L?*
z=iy~-Nc@%j*(e6;B!21#0)nRPcMxS+p2iK0QmP79Bw@-)iT(EgcV#pR%t}YDhriDz
z(v(*DN<kEh_y|PxRrAmz7432Mh#wtgI5cBf-ZqJao%E+yPe=#$V?=rDPKh&7%7zVW
zOIe$IwlnN5gHU7*V<lv<ExJ!XD~nlXfIKpJzK0@GNfh>cf3B&%DyU#<yf{uwN__Sm
zbv%Q=iP^b9ULHRCZrAeROg!IZm}Z$N9wW|R>?FNyj41oZ3D;;M8x7<cCiq46sUKeD
zMMgkewz($U!64n$$cUQWwT<Ph8#$Bs?6=-WBa-);{d7OH8l__?1l6ct!MbVZ<nf!?
zt8oMzKBA&0YrjMYK;<`jG+8$pl`<csqAL^GkwHt8QuF);cq&3@N@862j#!^K2*p-=
zxVJRZhv)GwuaROYqdVmzNakruD|S*acY?Ug4^4|C=um&(yz4n$AJn}ZQ=m>UwAn*{
z8QArvv<9n<^)^G!fYUd!)7MWMu<~wNn#IEJ{+vje$W2U{LjFj~l+o$sjGN~;%E<{H
zZVpOud4+@A?b2yyLRbTE+53dB<ZS4i@$DA2fMh6mZn7)QY4JI<nCra@@qXmpOUabA
zySwXyGmrQ~y-*>kTjD5Kjw4E(yt>s&v%(#O7vIFPFg_&|Np(y?s`5?fL3n1RGBb{^
zzCN2nd*g3<e7ViD2z_kDVPYhhTD^i-;1ja3y4U^LU4e)%dGd2k$9Yd`EACT~=C~qr
zPt;3kIPt6wbHlLT<dt#V>X{Fl=&n~j`vT+=eiz=QhM_%iVFpsLMmYADp7V^1jA(yW
z_g>S_4)bp&CzhB-$S{t_m?|G{o8$`Et!%{6U0hyDCp*(@Z*Q}igzS_qL+j~TplwVh
zv5l~`3OURPujuL#F`~fHK9n75?=|R|Y8V0`b?roRh0sEa^HB;mA(>@>w~MmQI!RG4
zr@|eGA3r9X$0AClC}Jn>?pcnIbvhX4o{E<eX!bm)+&E|q%~m6-#JC`CmcT$m`zwbA
z921HEC_or^Xp4HP>6#u!h6S|uM5gTLEolqrl}JiLp2_2IF}Ezycl)!gM$4qS+MA$Q
zj%^yd1Bu|eIfAd5mo9~5rXD4rH<gneab18hQj?x;L2wVTFPp)9D*3zvX&K{*@um|;
zJeEIKSNq)=w{G~FxeoN6(q)L~R+#zpak=yXc1hnTbFXWP@f&<8(-al@;!>FJ3ez7&
zB8R3cxhl!Q51~+g_o9_bt_X=Gg@1bi;@<w5Gv3gpjnaX}Xc6WZXfM5rYd}28b%<Gb
z0%gSFOINA5LW@WDXL)ofidqkg*l;ODCd^%s#6n6+SOhA{vx%J-^zx=lj=vH}Rs=BP
z_Huuvp5d7jk1(?g)m=sGo<tD}2tBU-dO|9s4{&p0RdjAvMn+~`h4JXxHGhwE-bwM*
zOU>`AxvGXi6ez(RJYiou>6*s#WH3|gl+@J1%R`hRCbhJ+d3EwP3o|t{XmTQ5^D*@r
zW6{ykS%XQZc=~a;TXM~Wg%%DEodm3N-$FM@YuXp6FEs<sx~`ho`NIlEuY=Ti*Fr`O
zBp&ZqN1^UBi?kvW+#zPqFtO0rILuqgd_!zs4m##Fp*qCy=x;sg(j}qyBJPfA6#jbM
zK|*lfvn~+JLwX0XBlt|41wD(QV1P^9z0nc*;pe0?fAADzES?l$vhtkrL$)Yt74jm4
zj=cLxq#O2y{L*QjA?_u8%7$3YI3<jOu!4j~2lHpoI_>H%N_y9~&eG69j7`M@m4GvB
z3q?`)9W?d!=i-d$8Wjvt#4&XY&==%4lhXgTN|rkXlL^PALS*oN2&*s9cN4x-{%fe9
z3jX_q|B{yySj(_|@V@CT;{i-%RXwS2X=w>4mhNs@XVr^~i<Y~qU2kvi<02_U{7Pre
zi7$LGmGjH(pV^*+MY&Z8;6uELjdc%bXQ3@DIbl}RD%C0~q<Y5pvhQsX6;zAE+$RIL
zJx`UjfV2e4Q9V=0`DmpF$mVB_PPBr8o}D4+$Irem#R@Kr23iX6^Pd8_neo*A%FNNv
zk4ZHhkq)-Tvs$U;(L9+rvExXSJeBuP9zA;W?2Cskr`>!r$?on!OE&NiIzurnab`sI
zMi&J(UP)rn24Z{MjoL4^`JedSUM{ryX7Ilbfq|a}hxx}6;@-!Fe(=4kvt6Lumuka+
zta{jmpnbZjuNZ>$fJr4=?C12f=W1{4F=vbjA*CNVCFSpce_qrF4rH{pWr>Q1$7df=
zYj94nT9(n_27&l#e5Hbu>!~2q+eduzt^4AV5?5RFRzOaCG0iiirKSCRnnbuFY?oAM
zRBr=US1@p_kbfi{pOcg0$Ii>q4jz*whKx7gtUbV{{Pgq`-11;rx8z|5Y8lmT^5@Y-
z8ERr;ga^-DYI=Iv)MFqLjNS>mGEG=4bp+QEiH0G}UD2FvhJ{@>8W+`J{W&4_!N!wi
zx^YzEWu)hOKTjt0&HQhU`h<mrOQshmVxWR&f7}?{+`gB%tPdn4B=obG$52NT;>a49
zo0}hNZ%zCtQr3)&i#zyPS6oqH)-LfxfrW<4_o(Ng<vJj;W9@-~h6~^ip!Z=UZF!dG
z*KkPF-OL6fWt~Pe0DRx$Z_EuqEW2*1^(%pbnSZ@@akQ$)OiPiKn26%uKQN%>gSK==
zTx|~)Tc-(}Nl{5-Cd|npSq>bbf4nN%y&*>Tg9S<~ng}I^LQTML|FCL*FsVn6M4_uM
z&Iuq-&+lSK@9n{!(NkCc%4riA1}vO1AAVb9uu@cAYVcpRmddf@0t*4x_GzxQIllW%
zK*tbQUjh#+yoSe6K0YNi^$$QhZlHxfE>+NrfHL<H9w+(dLhU6N0vC_QN5p9f>B+Ee
znU44Am;$hH3gXg*)qlzJ6b<xi4Wc|PHE!U7v8{EbyzTed%u40BY{%M)=g}4R+@JfU
zzcuyII7h;NXQDLpc%>)0>SGQfemB%U@w5|@I#a?Q=&i}B)<3_1p_D*!b>4nIU!?pn
z#-`MrCz~<gU{4B)D1!ETmn-5K7RJQjnlpBt3CA0#l8yjZfNlL{gMs!yti@=qbcu8x
zEDZZF>Z!wAr0OVR;rICiX4<u@m$Q+^ii-Uk!x@t+-0e3Z#O}|ZKOg^~n!=8T9D)WJ
zT+~ddz9(W-y12T^7Iu|qtR5d9PjCzmEwD<a^4+WPT=2#W1Adm2n+4-1j8$vLw#$u~
znwJEWB5MZ++`D<UrKP3P($YJaDjvUoP3Fr*!_JZjU9xJ1l|%TR*iLcONA~ZIh#tru
z7VY^RuYDUB$)mJURm7O1?jP9939Mv8MM2qbT*Z&T^{g^&wLmsx){W}Go25gOxvc!M
zAA-rSyG#v`QF9x5>d+B{9QGSLlE_OduGgnqW9ni@2-guIW@f925>2pOH3Ys!5a??s
zA=ddPD-2z?M)N?$jSCJ9568ZF)3xEkOGgJIB`jcMWZbq@l7_3PRf2+^V;7(>M)717
z67mAB?Z2+S$>)H*<{2;9t9aAqe@#eADeThiO^Id;Hbvw+8ZOAVjz8E`qMrLEpzk#{
z3cc4HAn3Lh_c;~vIkkqtLR{VwZz26!Y!AE#TEDiguBz$pibp9hL=nO&@$O8CXuD}x
z;0VIdTm~o%HzZLO!V6LQA9pY^u`3A;1LM!Zq9h$%zWeSJ@MMV)@%ivquU^^M*l20}
z0LAS2`xm2FFJ2cPzvF_Kh)A>5_iP+ej>zcfS+MQo<-=(Z#Hu&9w=ytTettd%0oBdf
zw3&K3|LgPp`7Ts11}6&M7iey7*MEKo1O&uM-dzB?TdIH{e*L_Q$KoAd4EYB<)QI;u
z1kc;k_ycY(d=FYZXR6IJ1RY5M3@HNV{pE`n8^9m493VDlXGDCAsg8_^nX9vk1K+E?
z#LsD1YXP?1=15lE^kwz9GVBhrZ(?oDa!U_uLB3F8Wo0GnspYM*C{8<_GIr!NX*>k}
z9SMSv8>x+`r4Y0V%&$&eOm-)Uxyb;yU^~i$u$HKbiV8q5zP!Q!eJ=K~unRyJcD)Kh
z1fgTTX{!$&Iln=xPklA&EEBRU2u*r=uwapC$X_EaaWbmy|9I?9eQdD%Ne7`d#lWTB
z;I`}fYyz5WnnPo!wreLAEz`?_%aa=8{}z(}BUJJFGnp8eSzTQX!UoVk#c61yK=Gvj
zOhF(J@7}!w>xmW0d({VjHIgZ8Gr=MasUdhb`HuG`;^U0<-G-8uiHV7Y1p_u{6~@)i
zJ3$Mp!I6frid7E-VgO(^jzSPW`snCLQ&Y1`;!QgP{GNrA(;mRkO^p(4kB)(X;ptOg
z4}Pe7HB2t<^Qk)O1sA-Z`s1@NdIpYB`Bcys+!~CRA9{cr_cKMGZKItn%I|aaiogz(
z_A_c-h;tNs_$zWIC8FNxL+VR<X~+@MkH*5h_u)~&87eQYFD`g;R3n*#N=;k5G)WPZ
zfA4ri8C-RRR^=(z$O6-U$d}&T#Za)m8_5#YuQV}C1=W(1lvD?>2804Q-^Xh$2Pqs|
zc)`ts$i&AV5EtOKCww$$^SjigC<Q2OU_ge=u3stUyn=>JDe6(7_wg493qYH!naPz#
z1*SE4mEbsT*xwFVrmOt>;r!NEfkGHI$*b?#Sy@?}iqO6}s9@X3Eamgw^})1hTb{(@
z<3Vl(1qB>}q|8jeLCywHCIAKgf?iJG-6gmsCbi6&M(0)Pz#GlRbG(rZ!Gi_g1Cn2%
z`lIQ<M26TpIq{HAS3YAG*c}Fu#!3{k#>MZ3MPRRDBK!RLX(ebkGYWEs$zQ>!n7QHj
zL~xTARVhd4b8DV}Gmx3~rVH2x++A8xQ|ADpvlYHWOZ4D@wzhWr?H}Xh=_)g7a`K(s
zU3P5v{oSpld4D`@ZMDyt&5h%)Po*ZwU1)2laffla3M}2dy(91WFeAJ-hTc1Jj%16^
zf@%W@As?TQ%UCLO2y!C#-@obs&HHFnpC|yf_(e`ag7eM<s~0cJs&;bRW8oj5Lu!-m
zoSQ!3<EyzCl_4m_C|1n~PrtbEG8Ye|nLa;1?|Y%7ggvm@7e|1LYiEP3Pzv7j#a3x?
zc47#fH*j&FFw;gS<bk4mWy%W$4PHg8{hG)YK<Xltyo@gh<~#QZlk;c}Hnj@(+pZnV
zy+a6P-H_J7<-WGQiHvOAt^7hnL<E#QqoQVbqR!)>ye{&j#6)~5vB)0aHg&y(<pF@M
z_GZNd0S@fZ>-2;6dn%^bV*r9->;6*hz+kSk9;2J2@x!Zd0=8$qnA?_y84e3XFBFy+
zBc_=p;;vBw*n!x?Cf#p|j77vsxx^X|yzB`F4C`JAdr~Akyerr|{+9R9)Jxi+9f?+8
zE8BPfa@Xws4N8bmKPkCFda38ZLP;=R<o#dUI`slr91mW9fYQs;)M_t~vgT_fzCm?j
zX?EYmP$+%T^Tyz2DU<-)^uD~Rt?M43*UCMRV;mK@_;YymC~nIjbNt(FKva;}S9|<t
z)-ghb#xlrm1nlq0fyj@wwY3^vXOsG%!&dGTtLK;k!{ze1m4-&V47JTf39Wy#zNz;*
zpy~0uxkRQUnW7wBO<#V0p4Bj@dC>!6F~pe)X_pLfA^YhN-}l^{+IlwKvW{;dqOY#G
zkrQ_R76p<tNZHimO%wKeL46nY<)J#tr7#1EfA8dKGgX1bDRbF+zTj$LCc$wBo`fwW
z`1Egvx}wy)S=Iu=v<vP@S*9SjQOrvN880s(7pX3#dXR-08oXyUzr{!3PB~d?FcQ<e
z{Xs92%SI7wm*=bKuG|ja*OAoHT3brfe;m})6-vf$O*mwr6f}X4l}UNzt9h{;LA~a6
zxm(qa--jKXm`sobGN_e%(C2C{L57i>loX2W%TTDX{RG?f)xkpR1%ab-Bl*t+afF{#
zxT()JW2=_Dg$A|Xn>~TIkoR^IG?!r>Yo{oP_`|69={}^z63qf~e(TX<b?TqFF@kVt
zSfWlv(6n}YfWJ9oP!EZ4P}7QJCe&Z`lB02`r7?5h6x>hOMM5x<UhXI7Re9opH15E=
z8*kP}B2TVY?;<IP3~JW_5&m7@aUo8cu+~d92cUQ|UCSK6F}i)C0A!bN&KxR1Y=HxJ
zEB&nKQc8lxTKl(9K%Bus)WM^(=4K(n%EW|mZ~2B<M8pR)d3^XvCX5UT2|M=hTtI4?
zS%Bf+^kR8#<69DQkqSh)Jz1qg(Am_Gjl6{f7l9@CPRKdG`p4m+bGiXPzz=S2f)qf)
zIw}Ki&-9x<;Qs6;u_v0!gd4^$&w_gKTIt4ONp`Duadpiz3n4aSfy+?{EPn(^?vn@<
z`;bsRfZ)jy1l0J&7zqziL|)JS@Fkk+kQ5^}AHE#nrfdV&eG`tIXyBcnVbsvuHrps2
zDKEI9<`=&KlPXz#px<aJW6s$NyK~WHBLS@Y46Z0CQL#9;fb1NEfXc#fb&O&NPu9s+
zp>^la*&gb`B3_kB6l$zBnPwf^sfvV0`I3+qy<ivZ&^u3KLYx70q;-WzrYt3vzu4Qe
zS4tE_p+*y7Y-JPT`1b8vh}WZDB_irCXY%n^o#=?<;nVH$QiX1oEk@`{>>+?}NR!Bh
z5>YDyObqd@*D{~s+v2`fyAr_Ihp$b3jH-N<g)1p45>6H1h7hhG7dpdb`0(0-G6)Ys
zxR<#2g;b9_M`mUW&X$O1*Wyq^LkzKY)53oLp!ek+Q%(d>@on*G)>HdmA?P^32OCIJ
zC33Ovc$y#yYXRI}h@-c!PeD!&>zZYwu7QN_)esqgUmC;=CX8@)c)*weZs1+?Pfqac
zR)e2*jlAQ6{P-s?FK>3_bc-Sw#n|}za~7~GtpEOi2HjBb|C8GSc4>DZf&{bcET}@Q
zh8CD%^0;mc{hb4VMf!JCfE173u7`a=Bj1#>$!WO@j1qkM#4inL(n|+V{?WKWIurw|
z&FGjs{%#Dg5zs(ndFi^jXjI0=#sHGmoueo9m?Xwa8h!EL#0G9t;XfEh(a$=og3(fK
z<}b%eJvZVG{Z=^arUl?%qCD(mX^k(eKbYq;nET<~CrA>3Je?+1nLPdVJF><+)|<G<
zNI>zv$0sKv?w|hRFzZl-u!jHV$(0Y1tMYcmz?(>6*Z)%MwmtNI+}pe9A-8GrprY1P
zg(1b6p<#p^ZK+P_n<~ejEiJ3SHJI3~${V(sv`OYL+?lD_0}cSzimFCp%iD0g47WY6
za#Po%m7?V2Gf@vanMdhAzIaL!1GuHdhI@I%?M&K&$&b|JWIUf+floin_1m?Ilo**R
zFD^IzL%bd&GjO99e8wc8Iy^cm)yUIYAJBDZ6UJQ_Pvu<9k_?pK<C7WrO0#w)13%W{
zGHHx|cVTAeFwM31AtMBYcsTG7MOy2`M4f!usK`judfRC^<b?S)|83hThFq#$M8tW8
zZu#4)D(;>0eO2Qxf9^Ny^~&{5vVFr-IF0d_X9rTutSl{s_L?;dn10WCvTFAN2cpiY
z^pJU1^ARE8)~fbOni>AgT{%%<Nyq6^sPFkcRIj(#?-DznLRJN!l)P%j)89K&_CY=j
z8Hergq*t6qpX6_c1wCzMs(D-37<{S&q@+$>4I7nB0g{g?-gN~gaKM;{<Mt2BQ~%4$
z$+oj8MT85X_$Na0UwPgqdL;zdHV?^W$}GMOp7&p!QG7!=g0aA5Glde^alndA?k<lk
zNv;T8XqW5x*ST8RsEue&0D+DjwX;6h{!a4#c5ZI9q*P08eGuJ^?dhLYx#*37N3B{t
z#E1Qd_x%Y&>Jsm<igDMMmOL)F^+o+IM(3L965EaGBOAJWp}`F+>^Nlp<GTcuS506d
z=I+k@`VS=}?`Qjc-`*a_MBu$Y_LSXpC4J)0A6e2C#h(X;#1QK1QdCc;CzVX7Qp#iQ
zN!ayZD8^SWTn>J`|5axtir^5px4JeK!C6VsNbFySdK&hB6K1l69nX8(5~c|_%;7eN
zT35avmqHl9;p{%ATcKOH?2pCMpH-TmTO^;l3DxS<2I(X?9T88i%R%Ck%lNEDAnd}7
z`bjc()}0R|wUpkVB{Mi;dQ-23Ye+#nmb<+B!>&p!2Wc94*!4K1@kJTdNDI9{6&mEr
z!b=svu`n4lOzgx$$@W;ggzDrHFhEsn=<nI@QIM4r@T<Ya(r>bCG64a@jr>C^uOa>^
z##t)x-e-coDlBoWsN?9-6N@!GK@$%Ri{Ua|Gtmm|Vl{tjG_;kD;MRD82^yzRJ7l}J
z9e88!-8`1WOF!m1gIqe88u1~FBzoJP?kbdlR$2G6o#ZF53et0J{;wtP8Y#AalXCu=
z0DJE!mu3Nbe0BkcNNTho`XP5`0$j!9XtzqCV&|TqQ?D{+a6}>`7mt<#g};%nT;D7k
zt=jtpqgzkF=0dt|4Pm$a2#!y6gT*dmOX&B}to^t<N~~2iX8-rEGgOH(-9c&xD6HMF
zJyzlNgX*rOwl!%+rr2eMj8$Y>$D%TwezD6sTVLF!kd9uN4kPzL;~+exktn`5{09lo
zI#I^ULUr+ey5NSej>9)pP=XhG2aLQ<^!j~<aoy_-nrZ>Nt0?YG-*g2VYUi!cj$V*8
z{$G3p9?irb<KtmxC}RJITuMxick(_~27V_RZ8xgoYT`d+m6nPM?i~R+f8<-D{~))1
z004Y7oE`>qbK}>IBBThG?yS)GYcS%fzKe*eYhZMCb_O;f3x`P~4?qk~PF0{ONg|;u
z0^8I*|AL+Bv76x(2A-F_F+c?2fM!mERx@AGB9|y-U;woHR}h>~5faisXs5Azr{llN
z-}OH@N`D9k_J^Mxf1p|l!++3j|GC5d{|pQw>=TpUzuyM_)c;o5PvJ_cs(4sfP$2G6
z!wF6vJ~hu^09Me?>+$!9csk^NX>sajIJmeb^)@NMkflL*JuoyhTwY%O;_;ivLjyJ=
z3kGC>@It%>2m^qdGKN}Gf}7j%&)&~2roEfjzktam!wMn|LB|CS2yIW+XZzU?g@ql^
zpRK+P)mWm;$hpP<iejRoO0|pM0*Au(`38^2yOvlV20Pq2hQqirozf@nI}>1j&%(k2
z0#kHGyBh<<Zu5K2J(xVeHm)&DL~?-xH^ca|-J?6cDp|!N)XRdInHgZEEqI6%QKh%u
z0+~qL(z5*_BmRv-vE!HDPe<|@3KdZwgwuY_G@szHCleYn@k09E=8bo|4;(6BQ2<Bc
z?;In9RxW91XlP<$qOg#m+twrY{0o9R^zUj=e_{M@ugQOD-1CMSjH}+?lZ3_NfDagd
ci76^l&h$4mjoGFqa0Cf1rzTqodmi$?0LVv)Q2+n{

literal 0
HcmV?d00001

diff --git a/ui/tests/onboarding/evidence/aws-marketplace-button-tablet.png b/ui/tests/onboarding/evidence/aws-marketplace-button-tablet.png
new file mode 100644
index 0000000000000000000000000000000000000000..30a2839c77c9a291b7572227f3fa602ba51f6ce1
GIT binary patch
literal 11292
zcmdU#XH-*N)aNfnKon4EB2tu&0xC^F+9QbcmVneK(h-o}q=<^rr8nsyH6Xo2h>FrX
zgpv?Y>0P7;NapaoGqYyiuk)^1>-};UD~sIRyU#v*|Np;z!u532=xDFdLJ&l!{!qmL
zf+)bB5P^mqT+_%K<RIt*q^_b2^Zl@fKl=iP!IQSy=p)wTXx=@!sCr51%_n;$#@c#=
z(GGb946Xf9ZM{N$U~!&7ig3NXvrS3emBb&y7$YI&gid-5NY%vfg6hk6)tfld>IcQ5
zjx_bFp8r%dW$#Chf9{`}YVug@f4=Dxv^XV~L<d1ioiHiz5ZCTQ;8}A2dtD7NiD?<G
ztui-m^wit+rSEnq5{FJoG?Ih|6iF}UyAj_jquHg2J4K4STnFD7btRm!qxCa>i<#7%
zzF$t33lenv7t-vW1swjJ-=7YsbRI9(pKV^PSRE<Sb#!#>Nfv2v#_bKMafv+o^t1J7
zL(cb4ju0GI@66>lcQLp-_4ZR*TH0eFU4=vI{0Grf_;267z2yp;;O&Z*o<7Lje4!T2
zqZTvuyp0ag^eud30b64iD-(n?ts|Ul2D{>P6;F0{mPfR|L|u_A)y|M|EVpbSRG>EQ
zbbXAq$CSeNH)pbc?mQ-7xk3u=U4=r+<AuagKAU6oqxD{TmGH8$Uu|#k2uW4yOSrM@
zy>*-&4!o<VsOX+unPp2eDgXmF*3P;&S)UZm<fFy=_4COdE=bAEGlzhw4BDM|8k-g$
zxR07S0U`UPt4~;-L8DP+Ds@lVsDi_GSI1Y?wd3a&7wxRAC%jwyck5keTv~6x=~3ef
zgmoDRU2~jgbo=#&wUtO%t(OlvKFGcQHa%pr&S|_$AiKPM3~9zLVgEROg|J#_JO{to
zN+KRHrg18P`)1#<(HO{*UmY!Z8Z#q(d<-f5NrJPc#z$x>8i3G{4zo#Hb_YLSF_<64
zYl^z9lZcz7J-ZQ#k>TMf3p1fA+uqb%Tz{rq8Px^plhlVc_B%^M6x8$*9kU-i`nNV8
zAPxR3?+UXVuh}WqNJ{Zmc&(0=86neeJ^3b7^dY`;=dpph*35O$=B4YHvfi!PZ3^!5
z-Hy~n&6=Z$I9D_tU8Zw;+=#Bdj+%k<>aNl*ZIgGUWs7;h@9*KwCuq`<;u~JM`K6)!
zmBa47zLU8G-BE83opgz=tFhQRr=v4jn}M4F3ug0+iloEwqiF`dHF^$NUIqEo9kS>1
zn9BX<3W|{M=R0SW=-8#!z&A!!FvD=9n-6KP0o~;7@89f%vlPj0?IfJ5qVtLtv1o=x
z_x5VZsfI6(8tP)Cy#j;bMM)ZZ8~Q882C*SBoYHvD1gDNx76|%-G~y>)$_m&hfi06_
zMX^;+-)0a8?=v*j%YHJCYfmyueD63`&Q@0&!y$(aYYjzN>FVppISWorgk@E^;F~w}
zX&<dz!J&gm8+a6aKykIarg!VPst_`sFr<-Yh^IVF<ywb?JCj2+lCV(1P;AiLK>hPy
z-?T5r%I{5#=qk3j&a{GmD&`v0HC4b=NpaLX{z@)=QahqEl2;2~XLO$U^ki+KYNOH=
z0}|Ep`PVZp5mtH0&-*0Di%%9ZT(M_}^J2lv(=8~LvgrJIdxw#a+L8FbRil`LDUSgM
zV%uAW)tCNfsp+piYJJg!Nb?9f>_M!YSxIu#>8tel1riVDCE{2gu-Rf<`OQUM#N@_Q
zz8Ztay?*(9^IcsB?b_GtxCYWHg7g=Kn4gVRtQR{jDa!g=REa=O>kM>t4dG=x7QkNY
zK7s#GJyFkSC|GuhQ1JEF-6dbQokaOmDg@|rL5E;z9kMsxuv*$rHM#`_wT>BWuNs!_
zj>}oKMkuuV@B6G{3q@QTO6yZ;KbWRxDrcLC%$yVrdJkFz@=mcrfwu=emf6<rFs)*Q
zdlTqn;$hV#KXj|RJXy|EQWy6UC|pzP&rx2h^}btHxR@)nNPMw|WIevZ0(>^Md}|vd
zA=*2Fen388uhx0}$+>gq-ZF4)^wW&wj&eR8D>q4qkGB$VG?sIn{``SPx|DF^@Kp{d
zW3~*Ovgz2V?WO$KX}1mz?_aXdCK7)#gk~uQx0($Iy6{Cy+wTwN-VfUUj`x|tgFGl!
z9@KC(Hg|iInRovk{lgl&0jap5hq6XLVtVzaWj8->*UEc+G5i>A!6@HzvOhzbw9B5{
z`sTQl%7M|$8?TVo+zb_Za-o(spgVKp=gNo%aXk2BTvM#YdQ*7*v>0W|dPQV<fFfIz
z9n>8C1Dl#IB9-B2=;W*xb@_?LLVZ#6kmz$1T3A=`P2(ACn1U*C2&;{#e>Mqz2q}2s
zXvLG;m@-xl-@3UXGR)Yt%@RmU?e9_dC}6*hK@k==tU`RXRHs%bfs9h161VG@;A>o~
z?y(FyoNo*^MR_CZORp#%cIk2kA8$>t?R+Nq3Zj;J)Tj9D&lMCFE{h|&7X`lV--z3#
z3~^66rhV`ITl7RQ^QK9)N`QQTw4-2c-YX~EYzzBrd2vDGEYa~T*>dsP$Hph}y7#tT
zXB6i@-kfgfh-PoF8{k~u*!7w@Q%)&jTH7gAYFt^-9J)nif5Up|7MCP?MLLKu<ao3_
z<-dxovSC*AUh2FU5Qcrlps+L?YkOJ3{=K$hY3p}w#o;{F$as1gH=*wDF&Bq!PxGZV
zW(Dq<C{j;EL^?Ymk9)4(BOPzMjl_n3riI%-JE{ymahmG>Fs;VncJg(zu$bw|^{!!U
z7<s_f4_56-!*?c4?lx09Pp_Xexm9xKTy`9ZB{>Y0{ZZ_#s)bvaWj|L{Z#daKxwc|J
zUj+-?5--fcqJRFAB5E;JRKa_;6*2Q%p6uuMhe41*@O!6NHt}{9+G{S|13`P@<HVyG
z(gxOBQ1@tWeI3ty!-$EAsqua~2UWr5(q6?LekJMCy5jLKh82+rQ|k3N=0KO$L)#zR
zI8+?B$k=*$@Sj&)2W3qAWlh1Msqq@S?_w1QoyZ4MTlZ!E6jP{XhE%o^N*$Sr*@?xY
zZNE3BeP^Rrq^s7u5(H2?`MWSgDy@{T@Pv@C?-EVHY~Poc6uZvTBFgN)en*P!9XZ{E
zch<t|!ZaK<_?*rL9_>l;Esa-ZI~QLXD}~>HpG%i;_)Y(7L*<^=mF6e2{?uaVV|V!;
zj4@(8OZCL2FGG5~YA|}lAbHr)ex&J~T-w9wJK_4us%H1MOyPnJ3bJ|G!NkJ_Uuzqi
z!$51pk6J??d;0rD9h$KbQT`&{&5i>8RkYIn)Obh12S@n_9M1Qd*Gpj~ze%x!Qn&f^
z+N+tx7!P@ikxKdNmD+aKW%6~i6&$rvZz-=Xh)(CDEwAPtRNTobOAu0DEvfsuYdU3U
zf41;N(4`mXOXj+eppQDelCW>%#Xec8iPDfe5ptZhE_f{6n=Dzc(tw<A(X!{vO}=sN
z!j-ChlK%1ZHN=0L-qp>Oj;ry8Kf*S7*nO5H<oR3crs}@V>uQf?cQ#AYQqybD5c~Y+
zpS9y|O5up5#xjcI8<n4}t|K-qpm^K9^dAZui0@v<gHI&)j_>#!Dl^Ks>U4<vj7Qh#
z#}D3CXII8ZigffnPDtRmH^;wHS4NZT`b%H8U}>+N-L*LPX$F_%&OcgbN5?_2&$xC!
z%)aKu@m9wkrisYm)4sbqj@abPTXUMR;jm9qk#?OfcTBd-r+=N^#}SJNSeHbGNf870
z@kJY|a<{jhm|>&#cycT5lbj6@Q8JvaExXC96-hwY>1OEQ&G@vX5fvJx9@=6?>~jt1
z6Xa@_WL!e2RkkLVric+;5`;Ol7f8N??WLm8+#D)}m({Yt4@ZKd4RvHxW!i}7ks2rb
zl-Ctzr6RQ@#T@?<CKIajmvcII+qj5>3YqMhcGtNq4FCRHG`{{@H0Ge49t3e1E;K5c
zb4LrPMz15{(I(2z)Ath{^EHK|HF4b7xQdxu)mpLEy4|`(A(zPH$!?$YOq9PRp9n{m
z7p1|W#o2a6>S-0)ha1*am2-}orXI#Whsfc`a5)lCe3%qFHKCFZhUVsLo4-%W?#iCs
zBR?>v9W>f~8zqRk`R<RLB$KGNmFL|ZG$EE#9$PnXcQ(p^vp96*?|hGI(>#mZd!s_~
z6b<~)5c5iJl_v8eY$~l*L=-JG)}HuG*hb`Ty9Gw?oYtIUg6wagxyJEu>1d}TJC5Wt
z$gG|Y+Ev0Al%hjIGr?xc_}9KvGX(3l38;V2h~kj-)QbT!+Xr?7zG)X)35!!Tdo&QA
zon5JwPYOX3cPsG-JR6l8-$4+c4X7iO5C7^uInOTDTUS?8!{eA={5ap@69+AF@Ns_l
zURK4IiVDgjr61h;+5}eg!5g!GV7DKTl|Ai<iDVHO9)5PHY@*CC+K-=S2xQa#L|<T?
z6A=?`9kW`2>eqo8rw6k+WqYp{!me0x6;54{OBSqPMZ6e_zP$T()ZVOQpVylh{~+&s
z1fh<ukZpV{WjCG^-r!<^`7k=kv|lOe*{sQ&+Ub46!GZXALh54G_L34id_8hL<*L?P
z%58I;myS$VOLey5w_fy%rb6MAmUNvpNv{}{MwGr-F0b(PP4mWE!XKCNE0zhNTR@K;
zwk`Z7bm<1=g&K~AxCJ9M{GR>Z9G6DuLU+mH{q8-~){e%_GO7kVSbyh?Bhk?|ba>+F
z2pa1T#2at?Sy5Wm(KFz%^zlmU>*?8k+rOj_6xZiHtP?)*``cH=`+Xcec;O^Zml%S%
zIbkRtM&-LwQgke~U!}M<AB&0Z;dl!~=c0xlaSN_nE0fjeCSFneDuK&i;bdndp0iMF
zOY~$Z71?;0F>~C`a5Z@bzrd=<q;R~ri@J%4If~FC&vSehM7x7>zZtybbG_&!r618Y
zkvN--_Su{+R#a7uE)KO(PgG!+bld@UtFgI6H=8u98M5LT0Cu$nK|dG91w#i^?C9E_
zzBDLVcW=kDg<K-N<n@8uqj}o5C|*Y_>IcK8+&UQ03HD2ax%wSmq{KqXNKyVvCJKjh
z3B}<X)SY?eFSdTT9F|fS|E%1&Mryo#^qCJHUmhAtj&9DckjIJS!G5t6@(ET;L=GlQ
zdyZ(^W%+%?5;s$1+$w3xZ~i9T>&#JpWsa+)I`kZLKf}x+=Y%OOv{dx^@`Lj;Mr{E*
zLn7{5n5n7!;7{7$VbX|p2}!xPKjqOEGgQ{NGpxCOZbvOVNrkLau?An+E>xx3x7LwZ
z%ylmuZtylSV?)PPBJNV=j9OY;+^_gFMgCrmTU#n6`uSmm+_6eTrFHqhUTpC3Q?GFX
z*DcapD=WM=&bb0P{IUKIv$5}W9-jZj0?dCQtb{jA4+CGgSS|nWc(H_d!v1tjE*<zU
zq#W`*ozk=C7=KDFcC_gHgOmJ(j7#`SV~h6*VYhAoPUAGySk?OC)bSEabO}a|muz+A
ze0G>NdY!ZXCd>V@8LzPL-l^p$7)M8PjG6jF23C5AEcUsAd6Z$kg-?8pdd2IH=vI(l
z*r;xnja>p_-mK2i<~QBu;O$<^B%P`S;EFv)EWAV_xKd$hH61lI{jxXqsIP-!zJQfI
zn5?SuPX_*cQl<HyoeM37M7c704OAGgiDPoRdpOrszGpM7cyzUmQ0<wu55jtf0`R8s
z-xbbJE16xcUmR34!)*oRKa&}0edSi<#M4NgI)-@bXSO@^awgcT!|P3Ge6gJGOlu&)
zT7j^X&nTcX+I~2aO&o1-MJT4D+)FgsX`fX5SwI_hPuBkuEw}m1pguLA8@f5}h7^Dj
z^9#=8n7OuK)|KGoU44BPM4Ro!fqk{`=G?)})}spa)ug@?<-~z|+ghWHhvPo_b?sa`
zrTJ^8x@woDWaL+z8mAk=GU@SgjeDyB%wh$o&L}gb;TqIzp2j&sL^-EC@-wN1z3_aA
z&>Pv!De=;38<f|vzFxjstdX-;A(IbFs#NQpXy+reK;`|+>*L`2S9h6!F@)th-G9Am
z2@8ufOAwD+HE7;D!)kuZb^0F1oaY}83t`8JOYeTai#(%o)<4*1Z6bHk-9&Go+H={U
zZ$YPVgyraXd!SA$(EZsj70r?R$E*es{MzY)<STEOn3<bm1Z-|fznhki8xEP~54^H_
zwrZR=>i0g@zGrg=jZoV+_()n(Q*_^inVP1@CtJP?ZhGj|c9>a%$Oum3gX`^BA^hf<
z1EJ&E_4s5IZ87njeNt_`sdT{atU{3-k{b5r2JMG-)O+RsJI>ssj0U+&YFh(a_4jiz
z?}RH3&TujcT|D%AsNc>dWqo~INT_7I-QWS+t;ZoKOP%Y-Pn7tl)$L-k+YJm1T95FX
z&FSyGJ}auYE<c=&&yJbgGhxy`=6UPScD%VmD3c5BBV|f*kk`F#WKA8)9(}dYerA;q
z=Y;!Scy$&rQ*2ym8A#X(UqN^j4VJ~s=jGb&1uI(=lKZSQ+IqZo#9XS?8jmb^x;LMK
zaJlqY%|x|@<;^A1v*VeQ4W9}m#U7j8hg@87TxT-roQSDM-$ze)_l`7>oq3U>?tF~M
zkZ&)~y%F|m)ERbtXyO4(;YNk!+J5W4d>}OCQL?uj8hON<+NsCemw%}ov8JyuvJicx
zYO%ruKD;Opx4+sr#t3!myOY1~K1;kdM(PvG?w;LfERJ}y&bT#@7}IitkhhE_w6n>T
zHyRe{to(^+d5zA}lq>>{8_#?^`}e5enOOsIS+l}_lm2CeTN|CUN+xHeqneRXvRu_<
zU|URJ`K+$nI?e^vXVIss-{#G`OjBTB1Y-z|QOEuy?gosSUEGb&*Et@lzjDX=-ONa?
z*bW}$(_l<>2Qker%4aW`7j|#8LXr5Or<RWSvge%HXJ5C`NQ){fRlsrZ+_`Vgv6i0C
z57(~|F{{5RDT(3IWa^Q(22K>qAH<sUPfg5x5RKmAPx<|+*<kk_|D)a2#js@5c(HRC
zPc2$uPnS<S<@or8h(_f%1oeren3!&6)Sf^<KIbLAuVjvGVRR_q6`!iHthRm38wJ*M
z{Uc}&97O0jvi?r-_3DMK8PB@S=2cN-QA-)^dyZO55LRH^woWw|j30f*$Z};28PG4Y
zD0rjXtU<>ngK<yQ5J6z3Pb9}|EjFL+PV}FG`3~x9cNk-Ae{(8ht`(a`#_Y&`n-tsF
zX!ybuvKAYk<umP9N>@yia^SdnIV~%z;`v8bb}zQoN5Y&-9Qve4|2Ly{ux`1$&}5dQ
zuhd*OO=|`Bs-wdnM(XKm3l+r*%`MM92@uvaNtB9_%IszrK0df%IP6&jIBZM6z7ccH
z&dwfPog+pgqYQ9B!Ut9smSoT0Sw;`IGz%Heu<oDLSDR~E%qo+%Alqu$pT03~Vx_3q
zsxn<kISz71^$o3(pv5ylZ@E9jlgu6imP@AgFUw7s%l@YHUIfuPm35aTz(E0m{&{m-
z34*vim&gHr{%^o~0pBgu$&{tzymyy}Ctou~6vRgo(sOg3{_HndZFA<#8L%fTn%oP?
zE<8@snp~QwntgYX2hhDd^#uO;g#}TQYU|ndXevm!VxcdisIbt+#>T><PqGqCBy`5{
z7$Z$>AWDNY&zE@j9udOcHW2924#RUriYLpp4kHf%th=|qRErwX(M2h&Lv`$<{euuq
z!JKhO7z0<(dfm9Kot>EF=LtyZ5r8uy0s?k`6EY|q<d9vs1=ljbUy4ghYx3W9q=2q{
z3?1wNX0nqf_Ub*~_hPS=26=19N2{KyCA|Ppw?Ehm`UImEzIk(Pw1jc?Wr&ix?U^Np
z;Dffgt^|bduQL?TJ3Wqv%sIe&xvz|tP$@m;MUoe6O4r!-ISv<ulR+;`+}zyIK__>m
zIcZ`F;2~k>*{T87TOKK5hrXnM<SGSEc*<~~&}$AwUjf&hTUfXPDV<;EtV@u9$ax%$
zLpO#Cd*b;t&qLf{-mzHqE6~fh+S^KMv7AU)NqNN$I%vjwjrXO}uMRyjNNMRp2$&uG
z7hGYIUz4-4vNAK}AAbo+Ok|>fY)XoY1;xa~Ks>=ZQz^YM>f-Gh%2&Gq*T4>!S3T_j
zP<0gg5?+`&fNYp{j4!?E9S^nE|D?*9nwkQ<RPsUe6-kHTf<n!d6`}J`BHj8|14F~g
zriFC5&CiBDcD<=_Nl7;GZy`!b4JC^A$dhuDnuXG`3e#%qaIz3aJ`oY;?nEI#3%R6S
zranDs(~7?k5~6h03ewQk&6e}2xPou?;yHotZY92C5wk3R08meYB<H)++g%tS2ZmoN
zE=z2fA;dj5GuB&qVPb<u=?CL?NaFDq2!9HTAtjkA6gNtaTyKlA>Rd0qcZGS=o%}4a
zMAr4en5!~Y?EGwCgOc+#j+0$KfdtjoLPH{=ZzxkhA%oW-vj2TOOK^Sp%d7|>0<g4o
z>-XQ%JLBrtGkvBf8(g!60y5=%6xM4;Kq0OHDH!Yza^Q}*IPih8&e+;Y^M^npj*N_8
zQUUb@aB*}AQ)c{%ip~gW3Wvc8P)M@|kPeYowio(v&0b|!<o$Q-v9%=umdJL%J|CgH
z*SBUnTqmo4Kv1Yaquool=I;%O|Fi)LyQVASKG#XXaPOAYcN)WX7EyEGji$wgg$4Sn
zcRztA6l*>BT~^uZzuB^1?=-#vq;`Y)+WlRiT7admYd?|{<jVkQ@S|~b6ov;cQK9`X
zR*`tH-Y`?q4%oD=>@x3<OvK5G@i~^8z#zOb!xDB^lUnk~*;+;7QDVPu-s09<BEO$D
z0cf?bpvOY*Az+@u#uYF2@jgdYIZ<G$A!b&;28=c=fOvcedR?VS%|{uXSJVvk(W{l{
zX(`)*EF=#2YaB|7D*OZ~iwQ~$8cn@p(_J&5P?pjZOd?A2fR`BrDi`R0HV7gQgI?d+
z0#IQ+^qlAtu3^)}F4Lw+!eLmYfgPj}_yu7J$JI*5V8U{dU3TE!G!3)qT5pE5>li-6
zrMXMw`Dn3z`kklk=NS*v$mN1T%)J^uebQS86CNM1+XG)mDD|aFj%05%&eF3Z$_27t
z7-YHu>}#ase&VSB9xsi_e8<Kj@DW(RVHJ41XIWx?k>P&wmHJzcd4`yc&7WL{i~bNp
zhG20GuExuPJUp|2(FIvrPJ`qC+x;<(k|1Nm8QDEnCZ=Z-pOk$RNyi@WSEKe5pK>pS
z(Q$dLjOwG5Us0XvV)EBmFx(i>E~w6{g@LhGilu*-h@KZy-*e*OVp$;2AEQxvmP60F
z?>p*dNFh}tSsZJhO&Y-2j*0<P!Tz)nN)bdAUoU(l<ucVcfidDrcBxy~vwH+`gcC2U
zGx^<PKFOH)=dB{_KK==<x~VUizlgRTSZV9$YBqohS{<&^0+`}6eDiLynTtMGS{W}H
z6#5D*K(3WKiFg91l$}pB^xPK<KGa;^Mg#BC+ycO_X8_K*A+58MJ;`9|yv8*!-Z>q&
zoiYkA#=?fr9QOM#X$ZqhYXkN-K;39g!)U_I&CA<?DxU&XS~?KSnZORJMmwKQxr)8)
zM~mZ-#_~IZ_rdrhHB*fde%s)eh7Y{4c`jaaG*uyx02qt*+}pg-p^srA+sD6I(S!cj
zLa@nn&+sOtuPI%JlyWYF=<zcl_yORv>1Hz1Xxi?VbC&#3q!Hy5dsW7uLHL)1%haPT
z_4U($>u=)_i^Q)CK|k+AhxU7oTiC_WjT~wOAJ1}mIn_jRG|rC5P9PKk%|v8KIcr((
ztO6+SdYvc26NfaD#;q5od^}$emY0f@D(M*zRk@~KCLMI_YsOfuyMi`=lrDTiJV?`1
z(DRyGDXTQH|MaqrpIP(G)$MtjztaJmlj7~cq@$TK`vOq`cB2;q^7|iLKs~)8e|#FB
zdS^3GOaSdI3wJxJu|is)j2cRL(|n8eCM02x^p_6%T!UtHYXi-?WeKaqlcU{;Q*y1X
zuC6}hzIJwRCCaeH4)DKqY#qC-r~T>}Qmkdi0HuWUpoVDZ$uD##3(FQ|`Im;DXO!yr
z_V(LL7r6b_Vy$AUvs&->7SBPTgptMiMLHae%kKV1>kXK@fD<rq$XZiG48&m7k8geg
zJpnZbiX<}n5jv=4W30j=;Lp#mKstDNVDB}!&uj2qlT+oeUg00Hz`SLO&wBA!J!5?s
zOdQWsK^J%_xf8>=NCzEY@}zfDP*k+OEyUg3-P7sqLe%BkRzrEJ`mdgH`u-#v=M=Zq
zTD!BqHu>~^cz6LHs|L&`JackE0B-ends~})qh;Tck*yp_=v%%B>L9+!qlkYR;7k9N
z0fnR9eg`>pZxyfgbz_xUI^0EXtV5B=s+>FooohNh7XX5z>DQSY=M4;Btu+KG{{#IK
z-{jN*FEi?k3Dm!2u(be`C+r9e(u}@72n4gd8uf2RVOn#eK5&HA9ASu$E<FhBtTn@>
zD&UlB83nXbe=645Y$ppVS)jb5k7}lgDo95l>HDh0r#aZ|Ybkf@m|0i|no=E9E|HN|
zr;bOFxWy3AB8TfMs%V}V8iPXIJCbtr=|OWfE`Ri^`Tfl|%x0qL;&w3{liPG9`$(If
zWa8u#fiNq?Vt*!c>1f>IZ;saJ#!C`<FE55%ped~sWS)$Oi@1G`Ra8RBj|U=SzN{D)
zp)>*dR}5Xi-Wr>{zr->%q&HR!ktw}^g@n*XDG#3N*HHG5gHp<zt5xU7h3mPga`N)7
zGs@_9{-2HYHZ(s!pVleHc^MKE@Mg94QG<lDxamW6{-cM7AMX{M2x&ui<G?zv#cu9x
z;BgkqN9<M?BrXUlmqQLdPlIvpKn84#Cqh5J54xzyaY?qvaAcJ4P;lFaJ|e4j_wW!G
z7sp(dbQ~>EPe>NExUx@82XPD4Qfq2!!w1GeBQ8OS+xB*Lci-u{e};x8@h25G<DqKr
zleRE6=x!D4wGN^GUk#E&@jg6?y1T!h^VVY}4UGu0kZKqVmY9-~l8|7?B9EZt=GF`4
z41sd29t)hMq%{tu`u{B64Kb8v{{H^n-g_Zr6u^=LO;wnem-qSe=MNt~_-!w+LCmIn
z3B3O*MIi^x8W1Nr&m}zyNFdo;p<&v;Oue*vLY@2o3)by_hAs7;pL<XcF<sK>^k$&h
zg5wUP)6x^r9>r#2V#4o7qokBWDFIDl2g2ysAH-Z$2Q&2RLR8V0Z|8xe2dbW3>RGD#
zCGrbkz0NBwFE0Z-1%KN4{#pSSB#?Dy@L+2evjn<(bvwnyQ~CDW<niR>B>(WXDuGN-
zw03()wDT&CgRIy$^m524%Etj0N&(G(-w0j%55XpSOGKlAjg5^8>ef|Oe(93XXqSKP
zJPp0*YZ~CBz{>rntH2WaOxUer{rm^`X1W->Tyrp~73i0%GVb4}D`6!Dv+aEnEseej
zGCH82mYLLy^=IPtH}JE%q$@qo26OZ=rI>mby!)S@K<OPM^FX=Bbq*f>m6nS~hCmgX
zKDrxx_}6FDD75L|x3c5CqqWN(9|*fBpikR3TN(;JJ%6cq;&jvF=NDygc%)|_n>eJl
zdLH^|76ZM`x$D2P6h^mt!??m6<(=8=wVLUn(=2>nGx@U@kWgT(g^dK%@jVkIH{}l?
zI<~h-HaL0zf^0wAaZ!tAAxP*_$x#<o4(N~8*5{v%l^0%F;W2Bdu<!qHPka2{3Bh8t
z)*%wCr6U3G<%Rx}fj1K10LY8^q{%wR%z~ItY2pYm(do;(qt3XjplQEAr_o}+pI^w5
zB6kLK#=j>f>LlGTK0KJ+HUD}B623&G%<~S^Xy@xZUOEa*_1~fiS*K%DA-imRzD>_q
zdaK7GJw7YQ|E+lcQr`07hY^%^hIi>@j(fg(+eHPQYlFEpW~PxW$iyHClDa_Vz2`q|
zFlFO^vdh#HY!|b$OLT6l-W16V*w5mS%PL&9K<zD!E|-_W(FgI*S4y0nDImSu7eX$m
z0FC=88pP^o1YSCX^#2aKkuJF!&3q#n913dsxQ1(JX!ISabqLPByH&y=SMQ|J;_m{h
z(-%&^GoJ=jQNLxxxGldLh94h9SY9~G*k1axz}wN00gs)OawY&n-!AgPDTWM!ala^0
zy-*_EEw#5fv#3j&ONa%U5BJ%xr$-c}QMK@jf!JcBS@jWp<dVCvHk5DN78dPX@*vQ9
zLq9`0I1i0Y=-GL$$et$F&s0{1Gt?;&fBuu(%&vOC<(z7nF}iXBR%`piZ*lK76cP~%
zz2<ft%!zY;hO5VfU0OvpEEK;jvp~^n$gHqB&9o-SB57$q0>fFjvN(J`JGgbeAi;6G
z++>7HBJkkP6WrbBKSRQ|M|2QV@Tsb=_CRj&-zo0wx7GC@zjSa-04jb+qeSz;v`$BM
z@x!!ZvH0qrU-xMRHgv%@fcx1Jc2a<@iBI<4C@HFU#*}I&3B#QUX$mLI%mJ{g2GHN&
zr3SD>{P6)-B<$^3R~0SXwjPKqwlR$NeUQlyItc@FB_r4L<jSS|s6sy1iBGM5+eTow
z|NE=7%w84fpofJT2qwf@qDhTqY<iJuq+!xSCN%)v%Rc1^t&kf&yd-aK@pxsi`ps2%
z*i?REu_*f3ALCnV&$x{Fn^F=aaVDqUS+^4I^gg*HG@-c-9Aw(w46a-O`61qa7v(l<
zyJ8{^h0wlM9;A5>c7xyv*xfMI^yA}YAnP5h{|3v}*!K70tLF{9f=jkFEi8mFy;&ze
z9R5VIis^~L^B-s@zF+&1>5S>Xe)@I4uiQG{rTlQ)ZUb94f>^-Tl>wWg8|;X!ZPHL!
zQ3=@YV@q$fA9{fj6ft6$tg-VM?S`P%mUttK?r)m2a{fF#JZ%tPv01}3D4==#V<m>J
zi~Z|vVrj(;cHnqLQkh0mP9A5g(|B-DXqy3_y2Z1OVTNyoIXPdxvq|hp-i|s?!_@rc
z50WV(sF(FsKz)(~I!4}&>u(Z6Y*hHPD+Dp0vj9Aa+mq&BYV?0zLD7te0NS!OFyQ|x
znowfO{*NRJ!v3Z!l=ET2;ywO<me^Ct6tIgiHl!r~&(#;88Q_xcN<N6XtV~7zJk+5f
zKQs0UnD1dWI-%lsp}u_fH>9Pd#l;Py!IXb-aS<4{c1X#@U`Kx-1$ok&dYcCv0OVx=
zjS-k;vWK99h(DXSb=rO+2GwT{|8?)4Q2fr$&f3}<83k2AK><(&nyRX*etv#3GBP$p
z+o}*bIo}c)4J1tE9j}!0{F(}w!pKr`|JPjA&nW@7=Q91di46KaxS=nnPQiUEo+Tt%
z#4I^E*%pFs*9MI03_~<gU?>q98d_d{6A+(Ve7<))Ks~TK>cb_5MJ6@2fNFdP8BpHX
z*oZ&}fpRVZh2}=6#{=|Q@bRNCRbQ4o4uWFX6kZ&Fd2L55mn%g1U|3jb7+9D<G&oyz
z^!rC79rPs?pdldcR(gH`Pj)`!%fkhSKZH$r>(2L}p|gmXUWRDo*U#5!j>g38P*7?Q
zH-EW_30lFF?E`*w^U<fr|1!028g<#=v2;G%-P-Ell7`6nyT~2_?;HrUwJ{<P-VjAi
zenAHu+X83)x-ES0pzns3XjM?2fFo2U9MfPXXY1xxMchWXck!9?TvU2f#F6RkgI#tQ
zFXG7YeuZTN04lLpd9Z4S6bx<&I<ZBwrvrcxWFZkwz$1gBLpKBk^#)k&K2wkx*Mqf#
zxI+$Z!~ScQ?Eih~NemD~B6Z1ju|g0;bt>X1AhqG?+t0hmxxgoox~h&!#XpZj{|8uD
B*2(|?

literal 0
HcmV?d00001


From 1b228d590b5faa92d9e0bbbab7d6c2c38d3cfeda Mon Sep 17 00:00:00 2001
From: Ethan Troy <63926014+ethanolivertroy@users.noreply.github.com>
Date: Mon, 14 Sep 2026 05:53:19 -0400
Subject: [PATCH 57/77] feat(compliance): replace FedRAMP 20x pilot KSI with
 Consolidated Rules 2026.06.24.01 (#11701)

Co-authored-by: Ethan Troy <ethanolivertroy@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: pedrooot <pedromarting3@gmail.com>
---
 .../compliance/fedramp_20x_ksi_low_aws.py     |   46 -
 .../compliance/fedramp_20x_ksi_low_azure.py   |   46 -
 .../compliance/fedramp_20x_ksi_low_gcp.py     |   46 -
 .../changelog.d/fedramp-20x-ksi-2026.added.md |    1 +
 .../fedramp-20x-ksi-low-pilot.removed.md      |    1 +
 .../aws/fedramp_20x_ksi_low_aws.json          |  383 ---
 .../azure/fedramp_20x_ksi_low_azure.json      |  305 ---
 prowler/compliance/fedramp_20x_ksi_2026.json  | 2284 +++++++++++++++++
 .../gcp/fedramp_20x_ksi_low_gcp.json          |  294 ---
 9 files changed, 2286 insertions(+), 1120 deletions(-)
 delete mode 100644 dashboard/compliance/fedramp_20x_ksi_low_aws.py
 delete mode 100644 dashboard/compliance/fedramp_20x_ksi_low_azure.py
 delete mode 100644 dashboard/compliance/fedramp_20x_ksi_low_gcp.py
 create mode 100644 prowler/changelog.d/fedramp-20x-ksi-2026.added.md
 create mode 100644 prowler/changelog.d/fedramp-20x-ksi-low-pilot.removed.md
 delete mode 100644 prowler/compliance/aws/fedramp_20x_ksi_low_aws.json
 delete mode 100644 prowler/compliance/azure/fedramp_20x_ksi_low_azure.json
 create mode 100644 prowler/compliance/fedramp_20x_ksi_2026.json
 delete mode 100644 prowler/compliance/gcp/fedramp_20x_ksi_low_gcp.json

diff --git a/dashboard/compliance/fedramp_20x_ksi_low_aws.py b/dashboard/compliance/fedramp_20x_ksi_low_aws.py
deleted file mode 100644
index 5ca220301f..0000000000
--- a/dashboard/compliance/fedramp_20x_ksi_low_aws.py
+++ /dev/null
@@ -1,46 +0,0 @@
-import warnings
-
-from dashboard.common_methods import get_section_containers_cis
-
-warnings.filterwarnings("ignore")
-
-
-def get_table(data):
-    aux = data[
-        [
-            "REQUIREMENTS_ID",
-            "REQUIREMENTS_DESCRIPTION",
-            "REQUIREMENTS_ATTRIBUTES_SECTION",
-            "CHECKID",
-            "STATUS",
-            "REGION",
-            "ACCOUNTID",
-            "RESOURCEID",
-        ]
-    ].copy()
-
-    # Shorten the long FedRAMP KSI descriptions for better display
-    ksi_short_names = {
-        "A secure cloud service offering will protect user data, control access, and apply zero trust principles": "Identity and Access Management",
-        "A secure cloud service offering will use cloud native architecture and design principles to enforce and enhance the Confidentiality, Integrity and Availability of the system": "Cloud Native Architecture",
-        "A secure cloud service provider will ensure that all system changes are properly documented and configuration baselines are updated accordingly": "Change Management",
-        "A secure cloud service provider will continuously educate their employees on cybersecurity measures, testing them regularly": "Cybersecurity Education",
-        "A secure cloud service offering will document, report, and analyze security incidents to ensure regulatory compliance and continuous security improvement": "Incident Reporting",
-        "A secure cloud service offering will monitor, log, and audit all important events, activity, and changes": "Monitoring, Logging, and Auditing",
-        "A secure cloud service offering will have intentional, organized, universal guidance for how every information resource, including personnel, is secured": "Policy and Inventory",
-        "A secure cloud service offering will define, maintain, and test incident response plan(s) and recovery capabilities to ensure minimal service disruption and data loss": "Recovery Planning",
-        "A secure cloud service offering will follow FedRAMP encryption policies, continuously verify information resource integrity, and restrict access to third-party information resources": "Service Configuration",
-        "A secure cloud service offering will understand, monitor, and manage supply chain risks from third-party information resources": "Third-Party Information Resources",
-    }
-
-    # Replace long descriptions with short names - use contains for partial matching
-    if not aux.empty:
-        for long_desc, short_name in ksi_short_names.items():
-            mask = aux["REQUIREMENTS_DESCRIPTION"].str.contains(
-                long_desc, na=False, regex=False
-            )
-            aux.loc[mask, "REQUIREMENTS_DESCRIPTION"] = short_name
-
-    return get_section_containers_cis(
-        aux, "REQUIREMENTS_ID", "REQUIREMENTS_ATTRIBUTES_SECTION"
-    )
diff --git a/dashboard/compliance/fedramp_20x_ksi_low_azure.py b/dashboard/compliance/fedramp_20x_ksi_low_azure.py
deleted file mode 100644
index 5ca220301f..0000000000
--- a/dashboard/compliance/fedramp_20x_ksi_low_azure.py
+++ /dev/null
@@ -1,46 +0,0 @@
-import warnings
-
-from dashboard.common_methods import get_section_containers_cis
-
-warnings.filterwarnings("ignore")
-
-
-def get_table(data):
-    aux = data[
-        [
-            "REQUIREMENTS_ID",
-            "REQUIREMENTS_DESCRIPTION",
-            "REQUIREMENTS_ATTRIBUTES_SECTION",
-            "CHECKID",
-            "STATUS",
-            "REGION",
-            "ACCOUNTID",
-            "RESOURCEID",
-        ]
-    ].copy()
-
-    # Shorten the long FedRAMP KSI descriptions for better display
-    ksi_short_names = {
-        "A secure cloud service offering will protect user data, control access, and apply zero trust principles": "Identity and Access Management",
-        "A secure cloud service offering will use cloud native architecture and design principles to enforce and enhance the Confidentiality, Integrity and Availability of the system": "Cloud Native Architecture",
-        "A secure cloud service provider will ensure that all system changes are properly documented and configuration baselines are updated accordingly": "Change Management",
-        "A secure cloud service provider will continuously educate their employees on cybersecurity measures, testing them regularly": "Cybersecurity Education",
-        "A secure cloud service offering will document, report, and analyze security incidents to ensure regulatory compliance and continuous security improvement": "Incident Reporting",
-        "A secure cloud service offering will monitor, log, and audit all important events, activity, and changes": "Monitoring, Logging, and Auditing",
-        "A secure cloud service offering will have intentional, organized, universal guidance for how every information resource, including personnel, is secured": "Policy and Inventory",
-        "A secure cloud service offering will define, maintain, and test incident response plan(s) and recovery capabilities to ensure minimal service disruption and data loss": "Recovery Planning",
-        "A secure cloud service offering will follow FedRAMP encryption policies, continuously verify information resource integrity, and restrict access to third-party information resources": "Service Configuration",
-        "A secure cloud service offering will understand, monitor, and manage supply chain risks from third-party information resources": "Third-Party Information Resources",
-    }
-
-    # Replace long descriptions with short names - use contains for partial matching
-    if not aux.empty:
-        for long_desc, short_name in ksi_short_names.items():
-            mask = aux["REQUIREMENTS_DESCRIPTION"].str.contains(
-                long_desc, na=False, regex=False
-            )
-            aux.loc[mask, "REQUIREMENTS_DESCRIPTION"] = short_name
-
-    return get_section_containers_cis(
-        aux, "REQUIREMENTS_ID", "REQUIREMENTS_ATTRIBUTES_SECTION"
-    )
diff --git a/dashboard/compliance/fedramp_20x_ksi_low_gcp.py b/dashboard/compliance/fedramp_20x_ksi_low_gcp.py
deleted file mode 100644
index 5ca220301f..0000000000
--- a/dashboard/compliance/fedramp_20x_ksi_low_gcp.py
+++ /dev/null
@@ -1,46 +0,0 @@
-import warnings
-
-from dashboard.common_methods import get_section_containers_cis
-
-warnings.filterwarnings("ignore")
-
-
-def get_table(data):
-    aux = data[
-        [
-            "REQUIREMENTS_ID",
-            "REQUIREMENTS_DESCRIPTION",
-            "REQUIREMENTS_ATTRIBUTES_SECTION",
-            "CHECKID",
-            "STATUS",
-            "REGION",
-            "ACCOUNTID",
-            "RESOURCEID",
-        ]
-    ].copy()
-
-    # Shorten the long FedRAMP KSI descriptions for better display
-    ksi_short_names = {
-        "A secure cloud service offering will protect user data, control access, and apply zero trust principles": "Identity and Access Management",
-        "A secure cloud service offering will use cloud native architecture and design principles to enforce and enhance the Confidentiality, Integrity and Availability of the system": "Cloud Native Architecture",
-        "A secure cloud service provider will ensure that all system changes are properly documented and configuration baselines are updated accordingly": "Change Management",
-        "A secure cloud service provider will continuously educate their employees on cybersecurity measures, testing them regularly": "Cybersecurity Education",
-        "A secure cloud service offering will document, report, and analyze security incidents to ensure regulatory compliance and continuous security improvement": "Incident Reporting",
-        "A secure cloud service offering will monitor, log, and audit all important events, activity, and changes": "Monitoring, Logging, and Auditing",
-        "A secure cloud service offering will have intentional, organized, universal guidance for how every information resource, including personnel, is secured": "Policy and Inventory",
-        "A secure cloud service offering will define, maintain, and test incident response plan(s) and recovery capabilities to ensure minimal service disruption and data loss": "Recovery Planning",
-        "A secure cloud service offering will follow FedRAMP encryption policies, continuously verify information resource integrity, and restrict access to third-party information resources": "Service Configuration",
-        "A secure cloud service offering will understand, monitor, and manage supply chain risks from third-party information resources": "Third-Party Information Resources",
-    }
-
-    # Replace long descriptions with short names - use contains for partial matching
-    if not aux.empty:
-        for long_desc, short_name in ksi_short_names.items():
-            mask = aux["REQUIREMENTS_DESCRIPTION"].str.contains(
-                long_desc, na=False, regex=False
-            )
-            aux.loc[mask, "REQUIREMENTS_DESCRIPTION"] = short_name
-
-    return get_section_containers_cis(
-        aux, "REQUIREMENTS_ID", "REQUIREMENTS_ATTRIBUTES_SECTION"
-    )
diff --git a/prowler/changelog.d/fedramp-20x-ksi-2026.added.md b/prowler/changelog.d/fedramp-20x-ksi-2026.added.md
new file mode 100644
index 0000000000..5fae5bb4a2
--- /dev/null
+++ b/prowler/changelog.d/fedramp-20x-ksi-2026.added.md
@@ -0,0 +1 @@
+`FedRAMP-20x-KSI` universal compliance framework (`fedramp_20x_ksi_2026`) with the 46 Key Security Indicators from the FedRAMP Consolidated Rules 2026 mapped for AWS, Azure, GCP, Kubernetes and M365
diff --git a/prowler/changelog.d/fedramp-20x-ksi-low-pilot.removed.md b/prowler/changelog.d/fedramp-20x-ksi-low-pilot.removed.md
new file mode 100644
index 0000000000..fdca7d54e5
--- /dev/null
+++ b/prowler/changelog.d/fedramp-20x-ksi-low-pilot.removed.md
@@ -0,0 +1 @@
+`fedramp_20x_ksi_low_aws`, `fedramp_20x_ksi_low_azure` and `fedramp_20x_ksi_low_gcp` FedRAMP 20x Phase One pilot frameworks, superseded by `fedramp_20x_ksi_2026`
diff --git a/prowler/compliance/aws/fedramp_20x_ksi_low_aws.json b/prowler/compliance/aws/fedramp_20x_ksi_low_aws.json
deleted file mode 100644
index 178f07d3a5..0000000000
--- a/prowler/compliance/aws/fedramp_20x_ksi_low_aws.json
+++ /dev/null
@@ -1,383 +0,0 @@
-{
-  "Framework": "FedRAMP-20x-KSI-Low",
-  "Name": "FedRAMP 20x Key Security Indicators (KSIs) - Low Impact Level v25.05C",
-  "Version": "25.05C",
-  "Provider": "AWS",
-  "Description": "FedRAMP 20x Key Security Indicators (KSIs) Low Impact Level represent core security indicators for cloud service providers, focusing on automation, continuous monitoring, and cloud-native security principles per FedRAMP 20x Phase One pilot requirements for Low impact systems.",
-  "Requirements": [
-    {
-      "Id": "ksi-cmt",
-      "Name": "KSI-CMT: Change Management",
-      "Description": "A secure cloud service provider will ensure that all system changes are properly documented and configuration baselines are updated accordingly",
-      "Attributes": [
-        {
-          "ItemId": "ksi-cmt",
-          "Section": "Change Management",
-          "Service": "aws"
-        }
-      ],
-      "Checks": [
-        "cloudtrail_multi_region_enabled",
-        "cloudtrail_log_file_validation_enabled",
-        "cloudtrail_s3_dataevents_read_enabled",
-        "cloudtrail_s3_dataevents_write_enabled",
-        "cloudwatch_changes_to_network_acls_alarm_configured",
-        "cloudwatch_changes_to_network_gateways_alarm_configured",
-        "cloudwatch_changes_to_network_route_tables_alarm_configured",
-        "cloudwatch_changes_to_vpcs_alarm_configured",
-        "cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled",
-        "cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_changes_enabled",
-        "cloudwatch_log_metric_filter_aws_organizations_changes",
-        "cloudwatch_log_metric_filter_for_s3_bucket_policy_changes",
-        "cloudwatch_log_metric_filter_policy_changes",
-        "cloudwatch_log_metric_filter_security_group_changes",
-        "config_recorder_all_regions_enabled",
-        "ec2_instance_managed_by_ssm",
-        "ec2_instance_older_than_specific_days",
-        "ssm_managed_compliant_patching"
-      ],
-      "ConfigRequirements": [
-        {
-          "Check": "config_recorder_all_regions_enabled",
-          "ConfigKey": "mute_non_default_regions",
-          "Operator": "eq",
-          "Value": false
-        }
-      ]
-    },
-    {
-      "Id": "ksi-cna",
-      "Name": "KSI-CNA: Cloud Native Architecture",
-      "Description": "A secure cloud service offering will use cloud native architecture and design principles to enforce and enhance the Confidentiality, Integrity and Availability of the system",
-      "Attributes": [
-        {
-          "ItemId": "ksi-cna",
-          "Section": "Cloud Native Architecture",
-          "Service": "aws"
-        }
-      ],
-      "Checks": [
-        "autoscaling_group_multiple_az",
-        "autoscaling_group_multiple_instance_types",
-        "autoscaling_group_capacity_rebalance_enabled",
-        "dynamodb_tables_pitr_enabled",
-        "dynamodb_table_deletion_protection_enabled",
-        "ec2_instance_imdsv2_enabled",
-        "ec2_networkacl_allow_ingress_any_port",
-        "ec2_securitygroup_default_restrict_traffic",
-        "ec2_securitygroup_allow_ingress_from_internet_to_any_port",
-        "eks_cluster_network_policy_enabled",
-        "eks_cluster_not_publicly_accessible",
-        "eks_cluster_private_nodes_enabled",
-        "eks_cluster_uses_a_supported_version",
-        "elb_cross_zone_load_balancing_enabled",
-        "elbv2_is_in_multiple_az",
-        "elbv2_waf_acl_attached",
-        "rds_instance_multi_az",
-        "rds_cluster_multi_az",
-        "vpc_subnet_no_public_ip_by_default",
-        "vpc_peering_routing_tables_with_least_privilege",
-        "ec2_confidential_workload_host_imdsv2_not_enforced"
-      ]
-    },
-    {
-      "Id": "ksi-iam",
-      "Name": "KSI-IAM: Identity and Access Management",
-      "Description": "A secure cloud service offering will protect user data, control access, and apply zero trust principles",
-      "Attributes": [
-        {
-          "ItemId": "ksi-iam",
-          "Section": "Identity and Access Management",
-          "Service": "aws"
-        }
-      ],
-      "Checks": [
-        "iam_inline_policy_no_wildcard_marketplace_subscribe",
-        "iam_policy_no_wildcard_marketplace_subscribe",
-        "iam_administrator_access_with_mfa",
-        "iam_aws_attached_policy_no_administrative_privileges",
-        "iam_customer_attached_policy_no_administrative_privileges",
-        "iam_inline_policy_no_administrative_privileges",
-        "iam_no_custom_policy_permissive_role_assumption",
-        "iam_no_root_access_key",
-        "iam_password_policy_expires_passwords_within_90_days_or_less",
-        "iam_password_policy_lowercase",
-        "iam_password_policy_minimum_length_14",
-        "iam_password_policy_number",
-        "iam_password_policy_reuse_24",
-        "iam_password_policy_symbol",
-        "iam_password_policy_uppercase",
-        "iam_policy_attached_only_to_group_or_roles",
-        "iam_policy_no_full_access_to_cloudtrail",
-        "iam_policy_no_full_access_to_kms",
-        "iam_root_hardware_mfa_enabled",
-        "iam_root_mfa_enabled",
-        "iam_rotate_access_key_90_days",
-        "iam_role_access_not_stale_to_bedrock",
-        "iam_user_access_not_stale_to_bedrock",
-        "iam_user_access_not_stale_to_sagemaker",
-        "iam_user_accesskey_unused",
-        "iam_user_console_access_unused",
-        "iam_user_hardware_mfa_enabled",
-        "iam_user_mfa_enabled_console_access",
-        "iam_user_two_active_access_key",
-        "organizations_scp_check_deny_regions",
-        "organizations_opt_out_ai_services_policy"
-      ]
-    },
-    {
-      "Id": "ksi-inr",
-      "Name": "KSI-INR: Incident Response",
-      "Description": "A secure cloud service offering will respond to incidents according to FedRAMP requirements and cloud service provider policies",
-      "Attributes": [
-        {
-          "ItemId": "ksi-inr",
-          "Section": "Incident Response",
-          "Service": "aws"
-        }
-      ],
-      "Checks": [
-        "guardduty_centrally_managed",
-        "guardduty_ec2_malware_protection_enabled",
-        "guardduty_eks_audit_log_enabled",
-        "guardduty_eks_runtime_monitoring_enabled",
-        "guardduty_is_enabled",
-        "guardduty_lambda_protection_enabled",
-        "guardduty_no_high_severity_findings",
-        "guardduty_rds_protection_enabled",
-        "guardduty_s3_protection_enabled",
-        "inspector2_is_enabled",
-        "inspector2_active_findings_exist",
-        "securityhub_enabled",
-        "sns_topics_kms_encryption_at_rest_enabled"
-      ],
-      "ConfigRequirements": [
-        {
-          "Check": "guardduty_is_enabled",
-          "ConfigKey": "mute_non_default_regions",
-          "Operator": "eq",
-          "Value": false
-        },
-        {
-          "Check": "securityhub_enabled",
-          "ConfigKey": "mute_non_default_regions",
-          "Operator": "eq",
-          "Value": false
-        }
-      ]
-    },
-    {
-      "Id": "ksi-mla",
-      "Name": "KSI-MLA: Monitoring, Logging, and Auditing",
-      "Description": "A secure cloud service offering will monitor, log, and audit all important events, activity, and changes",
-      "Attributes": [
-        {
-          "ItemId": "ksi-mla",
-          "Section": "Monitoring, Logging, and Auditing",
-          "Service": "aws"
-        }
-      ],
-      "Checks": [
-        "apigateway_restapi_logging_enabled",
-        "cloudtrail_cloudwatch_logging_enabled",
-        "cloudtrail_kms_encryption_enabled",
-        "cloudtrail_log_file_validation_enabled",
-        "cloudtrail_multi_region_enabled",
-        "cloudtrail_s3_dataevents_read_enabled",
-        "cloudtrail_s3_dataevents_write_enabled",
-        "cloudwatch_log_group_kms_encryption_enabled",
-        "cloudwatch_log_group_retention_policy_specific_days_enabled",
-        "ecs_cluster_container_insights_enabled",
-        "eks_control_plane_logging_all_types_enabled",
-        "elb_logging_enabled",
-        "elbv2_logging_enabled",
-        "inspector2_is_enabled",
-        "opensearch_service_domains_cloudwatch_logging_enabled",
-        "rds_instance_enhanced_monitoring_enabled",
-        "rds_instance_integration_cloudwatch_logs",
-        "redshift_cluster_audit_logging",
-        "s3_bucket_server_access_logging_enabled",
-        "vpc_flow_logs_enabled",
-        "wafv2_webacl_logging_enabled",
-        "kms_key_enclave_debug_attestation_detected",
-        "kms_key_enclave_attestation_unknown_image"
-      ]
-    },
-    {
-      "Id": "ksi-piy",
-      "Name": "KSI-PIY: Policy and Inventory",
-      "Description": "A secure cloud service offering will have intentional, organized, universal guidance for how every information resource, including personnel, is secured",
-      "Attributes": [
-        {
-          "ItemId": "ksi-piy",
-          "Section": "Policy and Inventory",
-          "Service": "aws"
-        }
-      ],
-      "Checks": [
-        "config_recorder_all_regions_enabled",
-        "config_recorder_using_aws_service_role",
-        "ec2_instance_managed_by_ssm",
-        "organizations_account_part_of_organizations",
-        "organizations_delegated_administrators",
-        "organizations_scp_check_deny_regions",
-        "organizations_tags_policies_enabled_and_attached",
-        "resourceexplorer2_indexes_found",
-        "trustedadvisor_premium_support_plan_subscribed"
-      ],
-      "ConfigRequirements": [
-        {
-          "Check": "config_recorder_all_regions_enabled",
-          "ConfigKey": "mute_non_default_regions",
-          "Operator": "eq",
-          "Value": false
-        }
-      ]
-    },
-    {
-      "Id": "ksi-rpl",
-      "Name": "KSI-RPL: Recovery Planning",
-      "Description": "A secure cloud service offering will define, maintain, and test incident response plan(s) and recovery capabilities to ensure minimal service disruption and data loss",
-      "Attributes": [
-        {
-          "ItemId": "ksi-rpl",
-          "Section": "Recovery Planning",
-          "Service": "aws"
-        }
-      ],
-      "Checks": [
-        "backup_plans_exist",
-        "backup_reportplans_exist",
-        "backup_vaults_exist",
-        "backup_vaults_encrypted",
-        "backup_recovery_point_encrypted",
-        "dlm_ebs_snapshot_lifecycle_policy_exists",
-        "dynamodb_tables_pitr_enabled",
-        "dynamodb_table_deletion_protection_enabled",
-        "efs_have_backup_enabled",
-        "fsx_file_system_copy_tags_to_backups_enabled",
-        "rds_instance_backup_enabled",
-        "rds_instance_deletion_protection",
-        "rds_cluster_deletion_protection",
-        "rds_snapshots_encrypted",
-        "redshift_cluster_automated_snapshot"
-      ]
-    },
-    {
-      "Id": "ksi-svc",
-      "Name": "KSI-SVC: Service Configuration",
-      "Description": "A secure cloud service offering will follow FedRAMP encryption policies, continuously verify information resource integrity, and restrict access to third-party information resources",
-      "Attributes": [
-        {
-          "ItemId": "ksi-svc",
-          "Section": "Service Configuration",
-          "Service": "aws"
-        }
-      ],
-      "Checks": [
-        "acm_certificates_expiration_check",
-        "apigateway_restapi_cache_encrypted",
-        "cloudtrail_kms_encryption_enabled",
-        "dynamodb_accelerator_cluster_encryption_enabled",
-        "dynamodb_tables_kms_cmk_encryption_enabled",
-        "ec2_ebs_volume_encryption",
-        "ec2_ebs_default_encryption",
-        "efs_encryption_at_rest_enabled",
-        "eks_cluster_kms_cmk_encryption_in_secrets_enabled",
-        "elasticache_redis_cluster_rest_encryption_enabled",
-        "elasticache_redis_cluster_in_transit_encryption_enabled",
-        "elbv2_ssl_listeners",
-        "kinesis_stream_encrypted_at_rest",
-        "kms_cmk_rotation_enabled",
-        "kms_cmk_not_deleted_unintentionally",
-        "kms_key_not_publicly_accessible",
-        "rds_instance_storage_encrypted",
-        "rds_cluster_storage_encrypted",
-        "redshift_cluster_encrypted_at_rest",
-        "redshift_cluster_in_transit_encryption_enabled",
-        "s3_bucket_default_encryption",
-        "s3_bucket_secure_transport_policy",
-        "sagemaker_notebook_instance_encryption_enabled",
-        "sns_topics_kms_encryption_at_rest_enabled",
-        "sqs_queues_server_side_encryption_enabled",
-        "kms_key_enclave_attestation_not_enforced"
-      ]
-    },
-    {
-      "Id": "ksi-tpr",
-      "Name": "KSI-TPR: Third-Party Information Resources",
-      "Description": "A secure cloud service offering will understand, monitor, and manage supply chain risks from third-party information resources",
-      "Attributes": [
-        {
-          "ItemId": "ksi-tpr",
-          "Section": "Third-Party Information Resources",
-          "Service": "aws"
-        }
-      ],
-      "Checks": [
-        "ecr_registry_scan_images_on_push_enabled",
-        "ecr_repositories_lifecycle_policy_enabled",
-        "ecr_repositories_not_publicly_accessible",
-        "ecr_repositories_scan_images_on_push_enabled",
-        "ecr_repositories_scan_vulnerabilities_in_latest_image",
-        "ecr_repositories_tag_immutability",
-        "inspector2_active_findings_exist",
-        "inspector2_is_enabled",
-        "awslambda_function_using_supported_runtimes",
-        "ssm_managed_compliant_patching",
-        "trustedadvisor_premium_support_plan_subscribed",
-        "guardduty_no_high_severity_findings"
-      ]
-    },
-    {
-      "Id": "ksi-iam-07",
-      "Name": "KSI-IAM-07: Account Lifecycle Management",
-      "Description": "Securely manage the lifecycle and privileges of all accounts, roles, and groups",
-      "Attributes": [
-        {
-          "ItemId": "ksi-iam-07",
-          "Section": "Identity and Access Management",
-          "Service": "aws"
-        }
-      ],
-      "Checks": [
-        "iam_no_root_access_key",
-        "iam_policy_attached_only_to_group_or_roles",
-        "iam_rotate_access_key_90_days",
-        "iam_role_access_not_stale_to_bedrock",
-        "iam_user_access_not_stale_to_bedrock",
-        "iam_user_access_not_stale_to_sagemaker",
-        "iam_user_accesskey_unused",
-        "iam_user_console_access_unused",
-        "organizations_delegated_administrators"
-      ]
-    },
-    {
-      "Id": "ksi-mla-07",
-      "Name": "KSI-MLA-07: Monitoring and Logging Inventory",
-      "Description": "Maintain a list of information resources and event types that will be monitored, logged, and audited",
-      "Attributes": [
-        {
-          "ItemId": "ksi-mla-07",
-          "Section": "Monitoring, Logging, and Auditing",
-          "Service": "aws"
-        }
-      ],
-      "Checks": [
-        "cloudtrail_multi_region_enabled",
-        "cloudwatch_log_group_retention_policy_specific_days_enabled",
-        "config_recorder_all_regions_enabled",
-        "inspector2_is_enabled",
-        "resourceexplorer2_indexes_found"
-      ],
-      "ConfigRequirements": [
-        {
-          "Check": "config_recorder_all_regions_enabled",
-          "ConfigKey": "mute_non_default_regions",
-          "Operator": "eq",
-          "Value": false
-        }
-      ]
-    }
-  ]
-}
diff --git a/prowler/compliance/azure/fedramp_20x_ksi_low_azure.json b/prowler/compliance/azure/fedramp_20x_ksi_low_azure.json
deleted file mode 100644
index 3e5ea9d956..0000000000
--- a/prowler/compliance/azure/fedramp_20x_ksi_low_azure.json
+++ /dev/null
@@ -1,305 +0,0 @@
-{
-  "Framework": "FedRAMP-20x-KSI-Low",
-  "Name": "FedRAMP 20x Key Security Indicators (KSIs) - Low Impact Level v25.05C",
-  "Version": "25.05C",
-  "Provider": "Azure",
-  "Description": "FedRAMP 20x Key Security Indicators (KSIs) Low Impact Level represent core security indicators for cloud service providers, focusing on automation, continuous monitoring, and cloud-native security principles per FedRAMP 20x Phase One pilot requirements for Low impact systems.",
-  "Requirements": [
-    {
-      "Id": "ksi-cmt",
-      "Name": "KSI-CMT: Change Management",
-      "Description": "A secure cloud service provider will ensure that all system changes are properly documented and configuration baselines are updated accordingly",
-      "Attributes": [
-        {
-          "ItemId": "ksi-cmt",
-          "Section": "Change Management",
-          "Service": "azure"
-        }
-      ],
-      "Checks": [
-        "monitor_alert_create_policy_assignment",
-        "monitor_alert_create_update_sqlserver_fr",
-        "monitor_alert_delete_sqlserver_fr",
-        "monitor_alert_create_update_nsg",
-        "monitor_alert_create_update_public_ip_address_rule",
-        "monitor_alert_create_update_security_solution",
-        "monitor_alert_delete_nsg",
-        "monitor_alert_delete_policy_assignment",
-        "monitor_alert_delete_public_ip_address_rule",
-        "monitor_alert_delete_security_solution",
-        "monitor_diagnostic_setting_with_appropriate_categories",
-        "defender_assessments_vm_endpoint_protection_installed"
-      ]
-    },
-    {
-      "Id": "ksi-cna",
-      "Name": "KSI-CNA: Cloud Native Architecture",
-      "Description": "A secure cloud service offering will use cloud native architecture and design principles to enforce and enhance the Confidentiality, Integrity and Availability of the system",
-      "Attributes": [
-        {
-          "ItemId": "ksi-cna",
-          "Section": "Cloud Native Architecture",
-          "Service": "azure"
-        }
-      ],
-      "Checks": [
-        "aks_clusters_created_with_private_nodes",
-        "aks_clusters_public_access_disabled",
-        "aks_network_policy_enabled",
-        "app_function_vnet_integration_enabled",
-        "app_function_not_publicly_accessible",
-        "containerregistry_not_publicly_accessible",
-        "containerregistry_uses_private_link",
-        "cosmosdb_account_use_private_endpoints",
-        "cosmosdb_account_firewall_use_selected_networks",
-        "databricks_workspace_vnet_injection_enabled",
-        "keyvault_access_only_through_private_endpoints",
-        "keyvault_private_endpoints",
-        "network_bastion_host_exists",
-        "network_flow_log_captured_sent",
-        "network_ssh_internet_access_restricted",
-        "network_rdp_internet_access_restricted",
-        "network_watcher_enabled",
-        "storage_default_network_access_rule_is_denied"
-      ]
-    },
-    {
-      "Id": "ksi-iam",
-      "Name": "KSI-IAM: Identity and Access Management",
-      "Description": "A secure cloud service offering will protect user data, control access, and apply zero trust principles",
-      "Attributes": [
-        {
-          "ItemId": "ksi-iam",
-          "Section": "Identity and Access Management",
-          "Service": "azure"
-        }
-      ],
-      "Checks": [
-        "entra_conditional_access_policy_require_mfa_for_management_api",
-        "entra_global_admin_in_less_than_five_users",
-        "entra_non_privileged_user_has_mfa",
-        "entra_policy_default_users_cannot_create_security_groups",
-        "entra_policy_ensure_default_user_cannot_create_apps",
-        "entra_policy_ensure_default_user_cannot_create_tenants",
-        "entra_policy_guest_invite_only_for_admin_roles",
-        "entra_policy_guest_users_access_restrictions",
-        "entra_policy_restricts_user_consent_for_apps",
-        "entra_policy_user_consent_for_verified_apps",
-        "entra_privileged_user_has_mfa",
-        "entra_security_defaults_enabled",
-        "entra_trusted_named_locations_exists",
-        "entra_user_with_vm_access_has_mfa",
-        "entra_users_cannot_create_microsoft_365_groups",
-        "iam_custom_role_has_permissions_to_administer_resource_locks",
-        "iam_role_user_access_admin_restricted",
-        "iam_subscription_roles_owner_custom_not_created",
-        "keyvault_rbac_enabled",
-        "app_function_identity_is_configured",
-        "app_function_identity_without_admin_privileges",
-        "app_ensure_auth_is_set_up",
-        "app_register_with_identity"
-      ]
-    },
-    {
-      "Id": "ksi-inr",
-      "Name": "KSI-INR: Incident Response",
-      "Description": "A secure cloud service offering will respond to incidents according to FedRAMP requirements and cloud service provider policies",
-      "Attributes": [
-        {
-          "ItemId": "ksi-inr",
-          "Section": "Incident Response",
-          "Service": "azure"
-        }
-      ],
-      "Checks": [
-        "defender_attack_path_notifications_properly_configured",
-        "defender_ensure_notify_alerts_severity_is_high",
-        "defender_ensure_notify_emails_to_owners",
-        "defender_additional_email_configured_with_a_security_contact",
-        "defender_container_images_resolved_vulnerabilities",
-        "defender_container_images_scan_enabled",
-        "defender_ensure_defender_for_app_services_is_on",
-        "defender_ensure_defender_for_arm_is_on",
-        "defender_ensure_defender_for_azure_sql_databases_is_on",
-        "defender_ensure_defender_for_containers_is_on",
-        "defender_ensure_defender_for_cosmosdb_is_on",
-        "defender_ensure_defender_for_databases_is_on",
-        "defender_ensure_defender_for_dns_is_on",
-        "defender_ensure_defender_for_keyvault_is_on",
-        "defender_ensure_defender_for_os_relational_databases_is_on",
-        "defender_ensure_defender_for_server_is_on",
-        "defender_ensure_defender_for_sql_servers_is_on",
-        "defender_ensure_defender_for_storage_is_on",
-        "defender_ensure_iot_hub_defender_is_on",
-        "defender_ensure_wdatp_is_enabled"
-      ]
-    },
-    {
-      "Id": "ksi-mla",
-      "Name": "KSI-MLA: Monitoring, Logging, and Auditing",
-      "Description": "A secure cloud service offering will monitor, log, and audit all important events, activity, and changes",
-      "Attributes": [
-        {
-          "ItemId": "ksi-mla",
-          "Section": "Monitoring, Logging, and Auditing",
-          "Service": "azure"
-        }
-      ],
-      "Checks": [
-        "app_function_application_insights_enabled",
-        "app_http_logs_enabled",
-        "appinsights_ensure_is_configured",
-        "defender_auto_provisioning_log_analytics_agent_vms_on",
-        "defender_auto_provisioning_vulnerabilty_assessments_machines_on",
-        "keyvault_logging_enabled",
-        "monitor_diagnostic_setting_with_appropriate_categories",
-        "monitor_diagnostic_settings_exists",
-        "network_flow_log_captured_sent",
-        "network_flow_log_more_than_90_days",
-        "network_watcher_enabled",
-        "postgresql_flexible_server_log_checkpoints_on",
-        "postgresql_flexible_server_log_connections_on",
-        "postgresql_flexible_server_log_disconnections_on",
-        "sqlserver_auditing_enabled",
-        "sqlserver_auditing_retention_90_days"
-      ]
-    },
-    {
-      "Id": "ksi-piy",
-      "Name": "KSI-PIY: Policy and Inventory",
-      "Description": "A secure cloud service offering will have intentional, organized, universal guidance for how every information resource, including personnel, is secured",
-      "Attributes": [
-        {
-          "ItemId": "ksi-piy",
-          "Section": "Policy and Inventory",
-          "Service": "azure"
-        }
-      ],
-      "Checks": [
-        "defender_ensure_defender_for_containers_is_on",
-        "defender_ensure_defender_for_app_services_is_on",
-        "defender_ensure_defender_for_azure_sql_databases_is_on",
-        "defender_ensure_defender_for_keyvault_is_on",
-        "defender_ensure_defender_for_server_is_on",
-        "defender_ensure_defender_for_sql_servers_is_on",
-        "defender_ensure_defender_for_storage_is_on"
-      ]
-    },
-    {
-      "Id": "ksi-rpl",
-      "Name": "KSI-RPL: Recovery Planning",
-      "Description": "A secure cloud service offering will define, maintain, and test incident response plan(s) and recovery capabilities to ensure minimal service disruption and data loss",
-      "Attributes": [
-        {
-          "ItemId": "ksi-rpl",
-          "Section": "Recovery Planning",
-          "Service": "azure"
-        }
-      ],
-      "Checks": [
-        "mysql_flexible_server_geo_redundant_backup_enabled",
-        "postgresql_flexible_server_geo_redundant_backup_enabled",
-        "storage_geo_redundant_enabled",
-        "storage_infrastructure_encryption_is_enabled",
-        "storage_ensure_soft_delete_is_enabled",
-        "vm_backup_enabled",
-        "vm_sufficient_daily_backup_retention_period"
-      ]
-    },
-    {
-      "Id": "ksi-svc",
-      "Name": "KSI-SVC: Service Configuration",
-      "Description": "A secure cloud service offering will follow FedRAMP encryption policies, continuously verify information resource integrity, and restrict access to third-party information resources",
-      "Attributes": [
-        {
-          "ItemId": "ksi-svc",
-          "Section": "Service Configuration",
-          "Service": "azure"
-        }
-      ],
-      "Checks": [
-        "app_client_certificates_on",
-        "app_ensure_http_is_redirected_to_https",
-        "app_minimum_tls_version_12",
-        "containerregistry_admin_user_disabled",
-        "cosmosdb_account_use_aad_and_rbac",
-        "databricks_workspace_cmk_encryption_enabled",
-        "keyvault_key_expiration_set_in_non_rbac",
-        "keyvault_key_rotation_enabled",
-        "keyvault_non_rbac_secret_expiration_set",
-        "mysql_flexible_server_ssl_connection_enabled",
-        "mysql_flexible_server_minimum_tls_version_12",
-        "postgresql_flexible_server_enforce_ssl_enabled",
-        "defender_ensure_defender_for_sql_servers_is_on",
-        "sqlserver_tde_encrypted_with_cmk",
-        "sqlserver_tde_encryption_enabled",
-        "sqlserver_recommended_minimal_tls_version",
-        "storage_secure_transfer_required_is_enabled",
-        "storage_ensure_encryption_with_customer_managed_keys",
-        "storage_infrastructure_encryption_is_enabled",
-        "storage_ensure_minimum_tls_version_12",
-        "vm_ensure_attached_disks_encrypted_with_cmk"
-      ]
-    },
-    {
-      "Id": "ksi-tpr",
-      "Name": "KSI-TPR: Third-Party Information Resources",
-      "Description": "A secure cloud service offering will understand, monitor, and manage supply chain risks from third-party information resources",
-      "Attributes": [
-        {
-          "ItemId": "ksi-tpr",
-          "Section": "Third-Party Information Resources",
-          "Service": "azure"
-        }
-      ],
-      "Checks": [
-        "app_ensure_java_version_is_latest",
-        "app_ensure_php_version_is_latest",
-        "app_ensure_python_version_is_latest",
-        "app_function_latest_runtime_version",
-        "defender_container_images_resolved_vulnerabilities",
-        "defender_container_images_scan_enabled",
-        "defender_ensure_system_updates_are_applied",
-        "defender_assessments_vm_endpoint_protection_installed"
-      ]
-    },
-    {
-      "Id": "ksi-iam-07",
-      "Name": "KSI-IAM-07: Account Lifecycle Management",
-      "Description": "Securely manage the lifecycle and privileges of all accounts, roles, and groups",
-      "Attributes": [
-        {
-          "ItemId": "ksi-iam-07",
-          "Section": "Identity and Access Management",
-          "Service": "azure"
-        }
-      ],
-      "Checks": [
-        "entra_non_privileged_user_has_mfa",
-        "entra_privileged_user_has_mfa",
-        "entra_user_with_recent_sign_in",
-        "entra_user_with_vm_access_has_mfa",
-        "iam_custom_role_has_permissions_to_administer_resource_locks",
-        "iam_role_user_access_admin_restricted",
-        "app_function_identity_is_configured"
-      ]
-    },
-    {
-      "Id": "ksi-mla-07",
-      "Name": "KSI-MLA-07: Monitoring and Logging Inventory",
-      "Description": "Maintain a list of information resources and event types that will be monitored, logged, and audited",
-      "Attributes": [
-        {
-          "ItemId": "ksi-mla-07",
-          "Section": "Monitoring, Logging, and Auditing",
-          "Service": "azure"
-        }
-      ],
-      "Checks": [
-        "monitor_diagnostic_setting_with_appropriate_categories",
-        "monitor_diagnostic_settings_exists",
-        "network_watcher_enabled"
-      ]
-    }
-  ]
-}
diff --git a/prowler/compliance/fedramp_20x_ksi_2026.json b/prowler/compliance/fedramp_20x_ksi_2026.json
new file mode 100644
index 0000000000..b893675faf
--- /dev/null
+++ b/prowler/compliance/fedramp_20x_ksi_2026.json
@@ -0,0 +1,2284 @@
+{
+  "framework": "FedRAMP-20x-KSI",
+  "name": "FedRAMP 20x Key Security Indicators (KSI) 2026",
+  "version": "2026.07.14.01",
+  "description": "FedRAMP 20x Key Security Indicators (KSIs) from the FedRAMP Consolidated Rules for 2026 (release 2026.07.14.01, https://github.com/FedRAMP/rules). KSIs are outcome-oriented indicators that cloud service providers must demonstrate through automation and continuous monitoring; they do not replace the FedRAMP Rules (FRR) program obligations. Class A authorizations mandate a subset of seven KSIs via FRC-CLA-MFR; Classes B and C apply the full catalog within the Minimum Assessment Scope, with five indicators optional on Class B and required on Class C.",
+  "icon": "fedramp",
+  "attributes_metadata": [
+    {
+      "key": "Theme",
+      "label": "Theme",
+      "type": "str",
+      "required": true,
+      "enum": [
+        "KSI-CED: Cybersecurity Education",
+        "KSI-CMT: Change Management",
+        "KSI-CNA: Cloud Native Architecture",
+        "KSI-IAM: Identity and Access Management",
+        "KSI-INR: Incident Response",
+        "KSI-MLA: Monitoring, Logging, and Auditing",
+        "KSI-PIY: Policy and Inventory",
+        "KSI-RPL: Recovery Planning",
+        "KSI-SCR: Supply Chain Risk",
+        "KSI-SVC: Service Configuration"
+      ]
+    },
+    {
+      "key": "NISTControls",
+      "label": "NIST SP 800-53 Controls",
+      "type": "str"
+    },
+    {
+      "key": "ClassApplicability",
+      "label": "Class Applicability",
+      "type": "str",
+      "required": true,
+      "enum": [
+        "Required for Classes B and C",
+        "Optional for Class B, required for Class C"
+      ]
+    }
+  ],
+  "outputs": {
+    "table_config": {
+      "group_by": "Theme"
+    },
+    "pdf_config": {
+      "language": "en",
+      "primary_color": "#1B3A5C",
+      "secondary_color": "#2E6DA4",
+      "bg_color": "#F0F4FA",
+      "group_by_field": "Theme",
+      "sections": [
+        "KSI-CED: Cybersecurity Education",
+        "KSI-CMT: Change Management",
+        "KSI-CNA: Cloud Native Architecture",
+        "KSI-IAM: Identity and Access Management",
+        "KSI-INR: Incident Response",
+        "KSI-MLA: Monitoring, Logging, and Auditing",
+        "KSI-PIY: Policy and Inventory",
+        "KSI-RPL: Recovery Planning",
+        "KSI-SCR: Supply Chain Risk",
+        "KSI-SVC: Service Configuration"
+      ],
+      "section_short_names": {
+        "KSI-CED: Cybersecurity Education": "KSI-CED",
+        "KSI-CMT: Change Management": "KSI-CMT",
+        "KSI-CNA: Cloud Native Architecture": "KSI-CNA",
+        "KSI-IAM: Identity and Access Management": "KSI-IAM",
+        "KSI-INR: Incident Response": "KSI-INR",
+        "KSI-MLA: Monitoring, Logging, and Auditing": "KSI-MLA",
+        "KSI-PIY: Policy and Inventory": "KSI-PIY",
+        "KSI-RPL: Recovery Planning": "KSI-RPL",
+        "KSI-SCR: Supply Chain Risk": "KSI-SCR",
+        "KSI-SVC: Service Configuration": "KSI-SVC"
+      },
+      "charts": [
+        {
+          "id": "theme_compliance",
+          "type": "horizontal_bar",
+          "group_by": "Theme",
+          "title": "Compliance Score by KSI Theme",
+          "y_label": "Theme",
+          "x_label": "Compliance %",
+          "value_source": "compliance_percent",
+          "color_mode": "by_value"
+        }
+      ],
+      "filter": {
+        "only_failed": true,
+        "include_manual": false
+      }
+    }
+  },
+  "requirements": [
+    {
+      "id": "KSI-CED-RAT",
+      "name": "Reviewing All Training",
+      "description": "The effectiveness of relevant cybersecurity education and training is persistently reviewed, including at least general training for all employees, role-specific training for employees in high risk roles, training for development and engineering staff on secure software delivery, and training for staff involved with incident response or disaster recovery.",
+      "attributes": {
+        "Theme": "KSI-CED: Cybersecurity Education",
+        "NISTControls": "CP-3, IR-2, PS-6, AT-2, AT-2.2, AT-2.3, AT-3.5, AT-4, IR-2.3, AT-3, SR-11.1",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-CMT-LMC",
+      "name": "Logging Changes",
+      "description": "Modifications to the cloud service offering are logged and monitored.",
+      "attributes": {
+        "Theme": "KSI-CMT: Change Management",
+        "NISTControls": "AU-2, CM-3, CM-3.2, CM-4.2, CM-6, CM-8.3, MA-2",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "cloudtrail_cloudwatch_logging_enabled",
+          "cloudtrail_multi_region_enabled",
+          "cloudtrail_multi_region_enabled_logging_management_events",
+          "cloudtrail_s3_dataevents_write_enabled",
+          "cloudwatch_changes_to_network_acls_alarm_configured",
+          "cloudwatch_changes_to_network_gateways_alarm_configured",
+          "cloudwatch_changes_to_network_route_tables_alarm_configured",
+          "cloudwatch_changes_to_vpcs_alarm_configured",
+          "cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled",
+          "cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_changes_enabled",
+          "cloudwatch_log_metric_filter_aws_organizations_changes",
+          "cloudwatch_log_metric_filter_disable_or_scheduled_deletion_of_kms_cmk",
+          "cloudwatch_log_metric_filter_for_s3_bucket_policy_changes",
+          "cloudwatch_log_metric_filter_policy_changes",
+          "cloudwatch_log_metric_filter_security_group_changes",
+          "config_recorder_all_regions_enabled"
+        ],
+        "azure": [
+          "monitor_alert_create_policy_assignment",
+          "monitor_alert_create_update_nsg",
+          "monitor_alert_create_update_public_ip_address_rule",
+          "monitor_alert_create_update_security_solution",
+          "monitor_alert_create_update_sqlserver_fr",
+          "monitor_alert_delete_nsg",
+          "monitor_alert_delete_policy_assignment",
+          "monitor_alert_delete_public_ip_address_rule",
+          "monitor_alert_delete_security_solution",
+          "monitor_alert_delete_sqlserver_fr",
+          "monitor_diagnostic_setting_with_appropriate_categories",
+          "monitor_diagnostic_settings_exists"
+        ],
+        "gcp": [
+          "iam_audit_logs_enabled",
+          "logging_log_metric_filter_and_alert_for_audit_configuration_changes_enabled",
+          "logging_log_metric_filter_and_alert_for_bucket_permission_changes_enabled",
+          "logging_log_metric_filter_and_alert_for_compute_configuration_changes_enabled",
+          "logging_log_metric_filter_and_alert_for_custom_role_changes_enabled",
+          "logging_log_metric_filter_and_alert_for_project_ownership_changes_enabled",
+          "logging_log_metric_filter_and_alert_for_sql_instance_configuration_changes_enabled",
+          "logging_log_metric_filter_and_alert_for_vpc_firewall_rule_changes_enabled",
+          "logging_log_metric_filter_and_alert_for_vpc_network_changes_enabled",
+          "logging_log_metric_filter_and_alert_for_vpc_network_route_changes_enabled"
+        ],
+        "kubernetes": [
+          "apiserver_audit_log_path_set"
+        ],
+        "m365": [
+          "exchange_organization_mailbox_auditing_enabled",
+          "exchange_user_mailbox_auditing_enabled",
+          "purview_audit_log_search_enabled"
+        ]
+      },
+      "config_requirements": [
+        {
+          "Check": "exchange_user_mailbox_auditing_enabled",
+          "ConfigKey": "audit_log_age",
+          "Operator": "gte",
+          "Value": 90,
+          "Provider": "m365"
+        },
+        {
+          "Check": "config_recorder_all_regions_enabled",
+          "ConfigKey": "mute_non_default_regions",
+          "Operator": "eq",
+          "Value": false,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "KSI-CMT-RMV",
+      "name": "Redeploying vs Modifying",
+      "description": "Changes to machine-based information resources are executed through the redeployment of version controlled resources rather than direct modification wherever reasonable.",
+      "attributes": {
+        "Theme": "KSI-CMT: Change Management",
+        "NISTControls": "CM-2, CM-3, CM-5, CM-6, CM-7, CM-8.1, SI-3",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "autoscaling_group_using_ec2_launch_template",
+          "ecs_task_definitions_containers_readonly_access"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [
+          "apiserver_always_pull_images_plugin",
+          "core_image_tag_fixed",
+          "core_readonly_root_filesystem_enabled"
+        ],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-CMT-RVP",
+      "name": "Reviewing Change Procedures",
+      "description": "The effectiveness of documented change management procedures is persistently reviewed.",
+      "attributes": {
+        "Theme": "KSI-CMT: Change Management",
+        "NISTControls": "CM-3, CM-3.2, CM-3.4, CM-5, CM-7.1, CM-9",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-CMT-VTD",
+      "name": "Validating Throughout Deployment",
+      "description": "Persistent testing and validation of changes throughout deployment is automated.",
+      "attributes": {
+        "Theme": "KSI-CMT: Change Management",
+        "NISTControls": "CM-3, CM-3.2, CM-4.2, SI-2",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-CNA-DFP",
+      "name": "Defining Functionality and Privileges",
+      "description": "The functionality and privileges for infrastructure and services are strictly defined.",
+      "attributes": {
+        "Theme": "KSI-CNA: Cloud Native Architecture",
+        "NISTControls": "CM-2, SI-3",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "ec2_instance_imdsv2_enabled",
+          "ecs_task_definitions_host_namespace_not_shared",
+          "ecs_task_definitions_host_networking_mode_users",
+          "ecs_task_definitions_no_privileged_containers",
+          "organizations_scp_check_deny_regions",
+          "sagemaker_notebook_instance_root_access_disabled"
+        ],
+        "azure": [],
+        "gcp": [
+          "cloudstorage_bucket_uniform_bucket_level_access"
+        ],
+        "kubernetes": [
+          "apiserver_auth_mode_include_node",
+          "apiserver_auth_mode_include_rbac",
+          "apiserver_auth_mode_not_always_allow",
+          "apiserver_namespace_lifecycle_plugin",
+          "apiserver_node_restriction_plugin",
+          "apiserver_security_context_deny_plugin",
+          "apiserver_service_account_plugin"
+        ],
+        "m365": [
+          "entra_admin_portals_access_restriction",
+          "entra_all_apps_conditional_access_coverage",
+          "entra_conditional_access_policy_app_enforced_restrictions",
+          "entra_conditional_access_policy_approved_client_app_required_for_mobile",
+          "entra_conditional_access_policy_device_code_flow_blocked",
+          "entra_managed_device_required_for_authentication"
+        ]
+      }
+    },
+    {
+      "id": "KSI-CNA-EIS",
+      "name": "Enforcing Intended State",
+      "description": "Automated services are used to persistently assess the security of all machine-based information resources and automatically enforce their intended operational state.",
+      "attributes": {
+        "Theme": "KSI-CNA: Cloud Native Architecture",
+        "NISTControls": "CA-2.1, CA-7.1",
+        "ClassApplicability": "Optional for Class B, required for Class C"
+      },
+      "checks": {
+        "aws": [
+          "config_delegated_admin_and_org_aggregator_all_regions",
+          "config_recorder_all_regions_enabled",
+          "securityhub_enabled",
+          "ssm_managed_compliant_patching"
+        ],
+        "azure": [
+          "defender_ensure_defender_cspm_is_on",
+          "policy_ensure_asc_enforcement_enabled"
+        ],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "config_recorder_all_regions_enabled",
+          "ConfigKey": "mute_non_default_regions",
+          "Operator": "eq",
+          "Value": false,
+          "Provider": "aws"
+        },
+        {
+          "Check": "securityhub_enabled",
+          "ConfigKey": "mute_non_default_regions",
+          "Operator": "eq",
+          "Value": false,
+          "Provider": "aws"
+        },
+        {
+          "Check": "config_delegated_admin_and_org_aggregator_all_regions",
+          "ConfigKey": "mute_non_default_regions",
+          "Operator": "eq",
+          "Value": false,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "KSI-CNA-IBP",
+      "name": "Implementing Best Practices",
+      "description": "The use and configuration of third-party machine-based information resources is persistently compared against the original provider's best practices and guidance.",
+      "attributes": {
+        "Theme": "KSI-CNA: Cloud Native Architecture",
+        "NISTControls": "AC-17.3, CM-2, PL-10",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "awslambda_function_using_supported_runtimes",
+          "ec2_instance_with_outdated_ami",
+          "ecs_service_fargate_latest_platform_version",
+          "eks_cluster_uses_a_supported_version",
+          "kafka_cluster_uses_latest_version",
+          "opensearch_service_domains_updated_to_the_latest_service_software_version",
+          "rds_instance_deprecated_engine_version",
+          "wellarchitected_workload_no_high_or_medium_risks"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": [
+          "defender_strict_preset_security_policy_enabled"
+        ]
+      },
+      "config_requirements": [
+        {
+          "Check": "awslambda_function_using_supported_runtimes",
+          "ConfigKey": "obsolete_lambda_runtimes",
+          "Operator": "superset",
+          "Value": [
+            "java8",
+            "go1.x",
+            "provided",
+            "python3.6",
+            "python2.7",
+            "python3.7",
+            "python3.8",
+            "nodejs4.3",
+            "nodejs4.3-edge",
+            "nodejs6.10",
+            "nodejs",
+            "nodejs8.10",
+            "nodejs10.x",
+            "nodejs12.x",
+            "nodejs14.x",
+            "nodejs16.x",
+            "dotnet5.0",
+            "dotnet6",
+            "dotnet7",
+            "dotnetcore1.0",
+            "dotnetcore2.0",
+            "dotnetcore2.1",
+            "dotnetcore3.1",
+            "ruby2.5",
+            "ruby2.7"
+          ],
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "KSI-CNA-MAT",
+      "name": "Minimizing Attack Surface",
+      "description": "Machine-based information resources are persistently reviewed to ensure they have a minimal attack surface and that lateral movement is minimized if compromised.",
+      "attributes": {
+        "Theme": "KSI-CNA: Cloud Native Architecture",
+        "NISTControls": "AC-17.3, AC-18.1, AC-18.3, AC-20.1, CA-9, SC-7.3, SC-7.4, SC-7.5, SC-7.8, SC-8, SC-10, SI-10, SI-11, SI-16",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "apigateway_restapi_public",
+          "appstream_fleet_default_internet_access_disabled",
+          "autoscaling_group_launch_configuration_no_public_ip",
+          "awslambda_function_not_publicly_accessible",
+          "awslambda_function_url_public",
+          "codebuild_project_not_publicly_accessible",
+          "dms_instance_no_public_access",
+          "ec2_instance_internet_facing_with_instance_profile",
+          "ec2_instance_public_ip",
+          "ec2_instance_uses_single_eni",
+          "ec2_launch_template_no_public_ip",
+          "ecs_service_no_assign_public_ip",
+          "ecs_task_set_no_assign_public_ip",
+          "efs_mount_target_not_publicly_accessible",
+          "eks_cluster_not_publicly_accessible",
+          "eks_cluster_private_nodes_enabled",
+          "elasticache_cluster_uses_public_subnet",
+          "elb_internet_facing",
+          "elbv2_internet_facing",
+          "emr_cluster_account_public_block_enabled",
+          "emr_cluster_master_nodes_no_public_ip",
+          "emr_cluster_publicly_accesible",
+          "kafka_cluster_is_public",
+          "lightsail_database_public",
+          "lightsail_instance_public",
+          "mq_broker_not_publicly_accessible",
+          "neptune_cluster_uses_public_subnet",
+          "opensearch_service_domains_not_publicly_accessible",
+          "rds_instance_no_public_access",
+          "redshift_cluster_public_access",
+          "sagemaker_models_network_isolation_enabled",
+          "sagemaker_notebook_instance_without_direct_internet_access_configured",
+          "sagemaker_training_jobs_network_isolation_enabled",
+          "vpc_peering_routing_tables_with_least_privilege",
+          "vpc_subnet_no_public_ip_by_default"
+        ],
+        "azure": [
+          "aisearch_service_not_publicly_accessible",
+          "aks_clusters_created_with_private_nodes",
+          "aks_clusters_public_access_disabled",
+          "app_function_ftps_deployment_disabled",
+          "app_function_not_publicly_accessible",
+          "containerregistry_not_publicly_accessible",
+          "cosmosdb_account_public_network_access_disabled",
+          "databricks_workspace_no_public_ip_enabled",
+          "databricks_workspace_public_network_access_disabled",
+          "postgresql_flexible_server_allow_access_services_disabled",
+          "sqlserver_unrestricted_inbound_access",
+          "storage_account_public_network_access_disabled",
+          "storage_default_network_access_rule_is_denied"
+        ],
+        "gcp": [
+          "cloudfunction_function_not_publicly_accessible",
+          "cloudsql_instance_private_ip_assignment",
+          "cloudsql_instance_public_access",
+          "cloudsql_instance_public_ip",
+          "cloudsql_instance_sqlserver_cross_db_ownership_chaining_flag",
+          "cloudsql_instance_sqlserver_external_scripts_enabled_flag",
+          "cloudsql_instance_sqlserver_remote_access_flag",
+          "compute_instance_block_project_wide_ssh_keys_disabled",
+          "compute_instance_ip_forwarding_is_enabled",
+          "compute_instance_public_ip",
+          "compute_instance_single_network_interface"
+        ],
+        "kubernetes": [
+          "apiserver_anonymous_requests",
+          "apiserver_disable_profiling",
+          "apiserver_no_always_admit_plugin",
+          "controllermanager_disable_profiling",
+          "core_minimize_admission_windows_hostprocess_containers",
+          "core_minimize_allowPrivilegeEscalation_containers",
+          "core_minimize_containers_added_capabilities",
+          "core_minimize_containers_capabilities_assigned",
+          "core_minimize_hostpath_volume_mounts",
+          "core_minimize_net_raw_capability_admission",
+          "core_minimize_privileged_containers",
+          "core_minimize_root_containers_admission",
+          "kubelet_disable_read_only_port",
+          "scheduler_profiling"
+        ],
+        "m365": [
+          "entra_device_registration_laps_enabled",
+          "exchange_roles_assignment_policy_addins_disabled",
+          "sharepoint_onedrive_sync_restricted_unmanaged_devices",
+          "teams_email_sending_to_channel_disabled",
+          "teams_external_file_sharing_restricted",
+          "teams_external_users_cannot_start_conversations",
+          "teams_meeting_anonymous_user_join_disabled",
+          "teams_meeting_anonymous_user_start_disabled",
+          "teams_meeting_chat_anonymous_users_disabled",
+          "teams_meeting_dial_in_lobby_bypass_disabled",
+          "teams_meeting_external_chat_disabled",
+          "teams_meeting_external_control_disabled",
+          "teams_meeting_external_lobby_bypass_disabled",
+          "teams_meeting_presenters_restricted",
+          "teams_meeting_recording_disabled",
+          "teams_unmanaged_communication_disabled"
+        ]
+      }
+    },
+    {
+      "id": "KSI-CNA-OFA",
+      "name": "Optimizing for Availability",
+      "description": "Machine-based information resources are persistently reviewed to ensure they are appropriately optimized for high availability and rapid recovery.",
+      "attributes": {
+        "Theme": "KSI-CNA: Cloud Native Architecture",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "autoscaling_group_capacity_rebalance_enabled",
+          "autoscaling_group_elb_health_check_enabled",
+          "autoscaling_group_multiple_az",
+          "autoscaling_group_multiple_instance_types",
+          "awslambda_function_vpc_multi_az",
+          "cloudfront_distributions_multiple_origin_failover_configured",
+          "directconnect_connection_redundancy",
+          "directconnect_virtual_interface_redundancy",
+          "dms_instance_multi_az_enabled",
+          "documentdb_cluster_multi_az_enabled",
+          "dynamodb_accelerator_cluster_multi_az",
+          "dynamodb_table_autoscaling_enabled",
+          "dynamodb_table_deletion_protection_enabled",
+          "dynamodb_tables_pitr_enabled",
+          "efs_multi_az_enabled",
+          "elasticache_redis_cluster_automatic_failover_enabled",
+          "elasticache_redis_cluster_multi_az_enabled",
+          "elb_cross_zone_load_balancing_enabled",
+          "elb_is_in_multiple_az",
+          "elbv2_cross_zone_load_balancing_enabled",
+          "elbv2_is_in_multiple_az",
+          "eventbridge_global_endpoint_event_replication_enabled",
+          "fsx_windows_file_system_multi_az_enabled",
+          "mq_broker_active_deployment_mode",
+          "mq_broker_cluster_deployment_mode",
+          "neptune_cluster_multi_az",
+          "networkfirewall_multi_az",
+          "opensearch_service_domains_fault_tolerant_data_nodes",
+          "opensearch_service_domains_fault_tolerant_master_nodes",
+          "rds_cluster_multi_az",
+          "rds_instance_multi_az",
+          "redshift_cluster_multi_az_enabled",
+          "sagemaker_endpoint_config_prod_variant_instances",
+          "storagegateway_gateway_fault_tolerant",
+          "vpc_endpoint_multi_az_enabled",
+          "vpc_subnet_different_az",
+          "vpc_vpn_connection_tunnels_up"
+        ],
+        "azure": [
+          "cosmosdb_account_automatic_failover_enabled",
+          "mysql_flexible_server_high_availability_enabled",
+          "postgresql_flexible_server_high_availability_enabled",
+          "vm_backup_enabled",
+          "vm_scaleset_associated_with_load_balancer"
+        ],
+        "gcp": [
+          "cloudsql_instance_high_availability_enabled",
+          "compute_instance_automatic_restart_enabled",
+          "compute_instance_group_autohealing_enabled",
+          "compute_instance_group_load_balancer_attached",
+          "compute_instance_group_multiple_zones",
+          "compute_instance_on_host_maintenance_migrate",
+          "compute_instance_preemptible_vm_disabled"
+        ],
+        "kubernetes": [
+          "core_liveness_probe_configured",
+          "core_readiness_probe_configured"
+        ],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "awslambda_function_vpc_multi_az",
+          "ConfigKey": "lambda_min_azs",
+          "Operator": "gte",
+          "Value": 2,
+          "Provider": "aws"
+        },
+        {
+          "Check": "elb_is_in_multiple_az",
+          "ConfigKey": "elb_min_azs",
+          "Operator": "gte",
+          "Value": 2,
+          "Provider": "aws"
+        },
+        {
+          "Check": "compute_instance_group_multiple_zones",
+          "ConfigKey": "mig_min_zones",
+          "Operator": "gte",
+          "Value": 2,
+          "Provider": "gcp"
+        }
+      ]
+    },
+    {
+      "id": "KSI-CNA-RNT",
+      "name": "Restricting Network Traffic",
+      "description": "Machine-based information resources are persistently reviewed to ensure they are appropriately configured to limit inbound and outbound network traffic.",
+      "attributes": {
+        "Theme": "KSI-CNA: Cloud Native Architecture",
+        "NISTControls": "AC-17.3, CA-9, CM-7.1, SC-7.5, SI-8",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "ec2_networkacl_allow_ingress_any_port",
+          "ec2_networkacl_allow_ingress_tcp_port_22",
+          "ec2_networkacl_allow_ingress_tcp_port_3389",
+          "ec2_securitygroup_allow_ingress_from_internet_to_all_ports",
+          "ec2_securitygroup_allow_ingress_from_internet_to_any_port",
+          "ec2_securitygroup_allow_ingress_from_internet_to_any_port_from_ip",
+          "ec2_securitygroup_allow_ingress_from_internet_to_high_risk_tcp_ports",
+          "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22",
+          "ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_3389",
+          "ec2_securitygroup_allow_wide_open_public_ipv4",
+          "ec2_securitygroup_default_restrict_traffic"
+        ],
+        "azure": [
+          "network_http_internet_access_restricted",
+          "network_rdp_internet_access_restricted",
+          "network_ssh_internet_access_restricted",
+          "network_udp_internet_access_restricted"
+        ],
+        "gcp": [
+          "compute_firewall_rdp_access_from_the_internet_allowed",
+          "compute_firewall_ssh_access_from_the_internet_allowed",
+          "compute_network_default_in_use"
+        ],
+        "kubernetes": [
+          "apiserver_deny_service_external_ips",
+          "controllermanager_bind_address",
+          "core_minimize_admission_hostport_containers",
+          "core_minimize_hostNetwork_containers",
+          "scheduler_bind_address"
+        ],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "ec2_securitygroup_allow_ingress_from_internet_to_any_port",
+          "ConfigKey": "ec2_allowed_interface_types",
+          "Operator": "subset",
+          "Value": [
+            "api_gateway_managed",
+            "vpc_endpoint"
+          ],
+          "Provider": "aws"
+        },
+        {
+          "Check": "ec2_securitygroup_allow_ingress_from_internet_to_any_port",
+          "ConfigKey": "ec2_allowed_instance_owners",
+          "Operator": "subset",
+          "Value": [
+            "amazon-elb"
+          ],
+          "Provider": "aws"
+        },
+        {
+          "Check": "ec2_securitygroup_allow_ingress_from_internet_to_high_risk_tcp_ports",
+          "ConfigKey": "ec2_high_risk_ports",
+          "Operator": "superset",
+          "Value": [
+            25,
+            110,
+            135,
+            143,
+            445,
+            3000,
+            4333,
+            5000,
+            5500,
+            8080,
+            8088
+          ],
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "KSI-CNA-RVP",
+      "name": "Reviewing Protections",
+      "description": "The effectiveness of protection against denial of service attacks and other unwanted activity for machine-based information resources is persistently reviewed.",
+      "attributes": {
+        "Theme": "KSI-CNA: Cloud Native Architecture",
+        "NISTControls": "SC-5, SI-8, SI-8.2",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "apigateway_restapi_waf_acl_attached",
+          "cloudfront_distributions_using_waf",
+          "cognito_user_pool_waf_acl_attached",
+          "elb_desync_mitigation_mode",
+          "elbv2_desync_mitigation_mode",
+          "elbv2_waf_acl_attached",
+          "fms_policy_compliant",
+          "shield_advanced_protection_in_associated_elastic_ips",
+          "shield_advanced_protection_in_classic_load_balancers",
+          "shield_advanced_protection_in_cloudfront_distributions",
+          "shield_advanced_protection_in_global_accelerators",
+          "shield_advanced_protection_in_internet_facing_load_balancers",
+          "shield_advanced_protection_in_route53_hosted_zones",
+          "waf_global_rule_with_conditions",
+          "waf_global_rulegroup_not_empty",
+          "waf_global_webacl_with_rules",
+          "waf_regional_rule_with_conditions",
+          "waf_regional_rulegroup_not_empty",
+          "waf_regional_webacl_with_rules",
+          "wafv2_webacl_with_rules"
+        ],
+        "azure": [
+          "network_vnet_ddos_protection_enabled",
+          "postgresql_flexible_server_connection_throttling_on"
+        ],
+        "gcp": [],
+        "kubernetes": [
+          "apiserver_event_rate_limit",
+          "apiserver_request_timeout_set",
+          "core_cpu_limits_set",
+          "core_memory_limits_set",
+          "kubelet_streaming_connection_timeout"
+        ],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-CNA-ULN",
+      "name": "Using Logical Networking",
+      "description": "Logical networking and related capabilities are used and persistently reviewed to enforce traffic flow controls.",
+      "attributes": {
+        "Theme": "KSI-CNA: Cloud Native Architecture",
+        "NISTControls": "AC-12, AC-17.3, CA-9, SC-4, SC-7, SC-7.7, SC-8, SC-10",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "eks_cluster_network_policy_enabled",
+          "eks_cluster_vpc_cni_network_policy_enforced",
+          "networkfirewall_in_all_vpc",
+          "networkfirewall_policy_default_action_fragmented_packets",
+          "networkfirewall_policy_default_action_full_packets",
+          "networkfirewall_policy_rule_group_associated",
+          "vpc_endpoint_connections_trust_boundaries",
+          "vpc_endpoint_services_allowed_principals_trust_boundaries",
+          "vpc_subnet_separate_private_public"
+        ],
+        "azure": [
+          "aks_network_policy_enabled",
+          "network_bastion_host_exists",
+          "network_subnet_nsg_associated"
+        ],
+        "gcp": [
+          "cloudfunction_function_inside_vpc",
+          "cloudstorage_uses_vpc_service_controls"
+        ],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-IAM-AAM",
+      "name": "Automating Account Management",
+      "description": "The lifecycle and privileges of all accounts, roles, and groups are securely managed using automation.",
+      "attributes": {
+        "Theme": "KSI-IAM: Identity and Access Management",
+        "NISTControls": "AC-2.2, AC-2.3, AC-2.13, AC-6.7, IA-4.4, IA-12, IA-12.2, IA-12.3, IA-12.5",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "iam_no_root_access_key",
+          "iam_root_credentials_management_enabled",
+          "iam_user_accesskey_unused",
+          "iam_user_console_access_unused",
+          "iam_user_no_setup_initial_access_key",
+          "organizations_delegated_administrators"
+        ],
+        "azure": [
+          "entra_user_with_recent_sign_in"
+        ],
+        "gcp": [
+          "iam_service_account_unused"
+        ],
+        "kubernetes": [],
+        "m365": [
+          "entra_dynamic_group_for_guests_created"
+        ]
+      },
+      "config_requirements": [
+        {
+          "Check": "iam_user_accesskey_unused",
+          "ConfigKey": "max_unused_access_keys_days",
+          "Operator": "lte",
+          "Value": 45,
+          "Provider": "aws"
+        },
+        {
+          "Check": "iam_user_console_access_unused",
+          "ConfigKey": "max_console_access_days",
+          "Operator": "lte",
+          "Value": 45,
+          "Provider": "aws"
+        },
+        {
+          "Check": "iam_service_account_unused",
+          "ConfigKey": "max_unused_account_days",
+          "Operator": "lte",
+          "Value": 180,
+          "Provider": "gcp"
+        }
+      ]
+    },
+    {
+      "id": "KSI-IAM-APM",
+      "name": "Adopting Passwordless Methods",
+      "description": "Secure passwordless methods are used for user authentication and authorization when feasible, otherwise strong passwords with phishing-resistant MFA is used.",
+      "attributes": {
+        "Theme": "KSI-IAM: Identity and Access Management",
+        "NISTControls": "AC-3, IA-5.1, IA-5.2, IA-5.6, IA-6, AC-2, IA-2, IA-2.1, IA-2.2, IA-2.8, IA-5, IA-8, SC-23",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "cognito_user_pool_password_policy_lowercase",
+          "cognito_user_pool_password_policy_minimum_length_14",
+          "cognito_user_pool_password_policy_number",
+          "cognito_user_pool_password_policy_symbol",
+          "cognito_user_pool_password_policy_uppercase",
+          "iam_password_policy_lowercase",
+          "iam_password_policy_minimum_length_14",
+          "iam_password_policy_number",
+          "iam_password_policy_reuse_24",
+          "iam_password_policy_symbol",
+          "iam_password_policy_uppercase",
+          "iam_root_hardware_mfa_enabled",
+          "iam_user_hardware_mfa_enabled"
+        ],
+        "azure": [
+          "vm_linux_enforce_ssh_authentication"
+        ],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": [
+          "entra_admin_users_phishing_resistant_mfa_enabled",
+          "entra_break_glass_account_fido2_security_key_registered",
+          "entra_password_protection_custom_banned_list_enforced",
+          "entra_password_protection_on_premises_enforced"
+        ]
+      }
+    },
+    {
+      "id": "KSI-IAM-ELP",
+      "name": "Ensuring Least Privilege",
+      "description": "Identity and access management measures are used and persistently reviewed to ensure each user or device can only access the resources they need.",
+      "attributes": {
+        "Theme": "KSI-IAM: Identity and Access Management",
+        "NISTControls": "AC-2.5, AC-2.6, AC-3, AC-4, AC-6, AC-12, AC-14, AC-17, AC-17.1, AC-17.2, AC-17.3, AC-20, AC-20.1, CM-2.7, CM-9, IA-2, IA-3, IA-4, IA-4.4, IA-5.2, IA-5.6, IA-11, PS-2, PS-3, PS-4, PS-5, PS-6, SC-4, SC-20, SC-21, SC-22, SC-23, SC-39, SI-3",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "accessanalyzer_enabled",
+          "accessanalyzer_enabled_without_findings",
+          "bedrock_agent_role_least_privilege",
+          "bedrock_agent_role_not_shared_across_agents",
+          "efs_access_point_enforce_root_directory",
+          "efs_access_point_enforce_user_identity",
+          "iam_role_access_not_stale_to_bedrock",
+          "iam_user_access_not_stale_to_bedrock",
+          "iam_user_access_not_stale_to_sagemaker",
+          "opensearch_service_domains_access_control_enabled"
+        ],
+        "azure": [
+          "aks_cluster_rbac_enabled",
+          "entra_policy_default_users_cannot_create_security_groups",
+          "entra_policy_ensure_default_user_cannot_create_apps",
+          "entra_policy_ensure_default_user_cannot_create_tenants",
+          "entra_policy_guest_invite_only_for_admin_roles",
+          "entra_policy_guest_users_access_restrictions",
+          "entra_policy_restricts_user_consent_for_apps",
+          "entra_policy_user_consent_for_verified_apps",
+          "entra_users_cannot_create_microsoft_365_groups",
+          "keyvault_rbac_enabled"
+        ],
+        "gcp": [
+          "compute_instance_default_service_account_in_use",
+          "compute_instance_default_service_account_in_use_with_full_api_access"
+        ],
+        "kubernetes": [
+          "kubelet_authorization_mode",
+          "rbac_cluster_admin_usage",
+          "rbac_minimize_csr_approval_access",
+          "rbac_minimize_node_proxy_subresource_access",
+          "rbac_minimize_pod_creation_access",
+          "rbac_minimize_pv_creation_access",
+          "rbac_minimize_secret_access",
+          "rbac_minimize_service_account_token_creation",
+          "rbac_minimize_webhook_config_access",
+          "rbac_minimize_wildcard_use_roles"
+        ],
+        "m365": [
+          "admincenter_users_admins_reduced_license_footprint",
+          "admincenter_users_between_two_and_four_global_admins",
+          "entra_access_review_guest_users_configured",
+          "entra_access_review_privileged_roles_configured",
+          "entra_admin_users_cloud_only",
+          "entra_conditional_access_policy_groups_management_restricted",
+          "entra_device_registration_global_admins_not_local_admins",
+          "entra_device_registration_registering_user_not_local_admin",
+          "entra_policy_default_user_cannot_create_m365_groups",
+          "entra_policy_default_user_cannot_create_security_groups",
+          "entra_policy_guest_invite_only_for_admin_roles",
+          "entra_policy_guest_users_access_restrictions"
+        ]
+      },
+      "config_requirements": [
+        {
+          "Check": "iam_user_access_not_stale_to_bedrock",
+          "ConfigKey": "max_unused_bedrock_access_days",
+          "Operator": "lte",
+          "Value": 60,
+          "Provider": "aws"
+        },
+        {
+          "Check": "iam_role_access_not_stale_to_bedrock",
+          "ConfigKey": "max_unused_bedrock_access_days",
+          "Operator": "lte",
+          "Value": 60,
+          "Provider": "aws"
+        },
+        {
+          "Check": "iam_user_access_not_stale_to_sagemaker",
+          "ConfigKey": "max_unused_sagemaker_access_days",
+          "Operator": "lte",
+          "Value": 90,
+          "Provider": "aws"
+        },
+        {
+          "Check": "accessanalyzer_enabled",
+          "ConfigKey": "mute_non_default_regions",
+          "Operator": "eq",
+          "Value": false,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "KSI-IAM-JIT",
+      "name": "Authorizing Just-in-Time",
+      "description": "A least-privileged, role and attribute-based, and just-in-time security authorization model is used and persistently reviewed for all user and non-user accounts and services.",
+      "attributes": {
+        "Theme": "KSI-IAM: Identity and Access Management",
+        "NISTControls": "AC-2, AC-2.1, AC-2.2, AC-2.3, AC-2.4, AC-2.6, AC-3, AC-4, AC-5, AC-6, AC-6.1, AC-6.2, AC-6.5, AC-6.7, AC-6.9, AC-6.10, AC-7, AC-20.1, AC-17, AU-9.4, CM-5, CM-7, CM-7.2, CM-7.5, CM-9, IA-4, IA-4.4, IA-7, PS-2, PS-3, PS-4, PS-5, PS-6, PS-9, RA-5.5, SC-2, SC-23, SC-39",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "bedrock_api_key_no_administrative_privileges",
+          "bedrock_full_access_policy_attached",
+          "iam_aws_attached_policy_no_administrative_privileges",
+          "iam_customer_attached_policy_no_administrative_privileges",
+          "iam_customer_unattached_policy_no_administrative_privileges",
+          "iam_group_administrator_access_policy",
+          "iam_inline_policy_allows_privilege_escalation",
+          "iam_inline_policy_no_administrative_privileges",
+          "iam_inline_policy_no_wildcard_marketplace_subscribe",
+          "iam_no_custom_policy_permissive_role_assumption",
+          "iam_policy_allows_privilege_escalation",
+          "iam_policy_attached_only_to_group_or_roles",
+          "iam_policy_cloudshell_admin_not_attached",
+          "iam_policy_no_agentcore_workload_access_token_wildcard",
+          "iam_policy_no_full_access_to_cloudtrail",
+          "iam_policy_no_full_access_to_kms",
+          "iam_policy_no_wildcard_marketplace_subscribe",
+          "iam_policy_passrole_to_bedrock_agentcore_restricted",
+          "iam_role_administratoraccess_policy",
+          "iam_role_cross_service_confused_deputy_prevention",
+          "iam_role_service_trust_restricts_source_to_account",
+          "iam_user_administrator_access_policy",
+          "iam_user_with_temporary_credentials",
+          "rolesanywhere_profile_restricts_session_permissions"
+        ],
+        "azure": [
+          "app_function_identity_without_admin_privileges",
+          "entra_global_admin_in_less_than_five_users",
+          "iam_custom_role_has_permissions_to_administer_resource_locks",
+          "iam_role_user_access_admin_restricted",
+          "iam_subscription_roles_owner_custom_not_created",
+          "vm_jit_access_enabled"
+        ],
+        "gcp": [
+          "iam_no_service_roles_at_project_level",
+          "iam_role_kms_enforce_separation_of_duties",
+          "iam_role_sa_enforce_separation_of_duties",
+          "iam_sa_no_administrative_privileges"
+        ],
+        "kubernetes": [],
+        "m365": [
+          "entra_admin_users_sign_in_frequency_enabled",
+          "entra_intune_enrollment_sign_in_frequency_every_time",
+          "entra_pim_global_administrator_approval_required",
+          "entra_pim_privileged_role_administrator_approval_required",
+          "entra_service_principal_privileged_role_no_owners"
+        ]
+      }
+    },
+    {
+      "id": "KSI-IAM-SNU",
+      "name": "Securing Non-User Authentication",
+      "description": "Appropriately secure authentication methods are used and persistently reviewed for non-user accounts and services.",
+      "attributes": {
+        "Theme": "KSI-IAM: Identity and Access Management",
+        "NISTControls": "AC-2, AC-2.2, AC-4, AC-6.5, IA-3, IA-5.2, RA-5.5",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "apigateway_restapi_authorizers_enabled",
+          "apigatewayv2_api_authorizers_enabled",
+          "appsync_graphql_api_no_api_key_authentication",
+          "bedrock_api_key_no_long_term_credentials",
+          "dms_endpoint_neptune_iam_authorization_enabled",
+          "ec2_instance_profile_attached",
+          "elasticache_redis_replication_group_auth_enabled",
+          "iam_rotate_access_key_90_days",
+          "iam_user_two_active_access_key",
+          "kafka_cluster_unrestricted_access_disabled",
+          "neptune_cluster_iam_authentication_enabled",
+          "rds_cluster_iam_authentication_enabled",
+          "rds_instance_iam_authentication_enabled"
+        ],
+        "azure": [
+          "aks_cluster_local_accounts_disabled",
+          "app_function_identity_is_configured",
+          "app_register_with_identity",
+          "cosmosdb_account_use_aad_and_rbac",
+          "storage_account_key_access_disabled",
+          "storage_default_to_entra_authorization_enabled"
+        ],
+        "gcp": [
+          "apikeys_api_restrictions_configured",
+          "apikeys_key_exists",
+          "apikeys_key_rotated_in_90_days",
+          "iam_sa_no_user_managed_keys",
+          "iam_sa_user_managed_key_rotate_90_days",
+          "iam_sa_user_managed_key_unused",
+          "iam_workload_identity_pool_provider_attribute_condition"
+        ],
+        "kubernetes": [
+          "apiserver_kubelet_cert_auth",
+          "apiserver_kubelet_tls_auth",
+          "apiserver_no_token_auth_file",
+          "apiserver_service_account_key_file_set",
+          "apiserver_service_account_lookup_true",
+          "controllermanager_service_account_credentials",
+          "controllermanager_service_account_private_key_file",
+          "kubelet_client_ca_file_set"
+        ],
+        "m365": [
+          "entra_app_registration_client_secret_unused",
+          "entra_default_app_management_policy_enabled",
+          "entra_service_principal_no_secrets_for_permanent_tier0_roles",
+          "exchange_shared_mailbox_sign_in_disabled"
+        ]
+      },
+      "config_requirements": [
+        {
+          "Check": "iam_sa_user_managed_key_unused",
+          "ConfigKey": "max_unused_account_days",
+          "Operator": "lte",
+          "Value": 180,
+          "Provider": "gcp"
+        }
+      ]
+    },
+    {
+      "id": "KSI-IAM-SUS",
+      "name": "Responding to Suspicious Activity",
+      "description": "Accounts with privileged access are disabled or otherwise secured in response to suspicious activity.",
+      "attributes": {
+        "Theme": "KSI-IAM: Identity and Access Management",
+        "NISTControls": "AC-2, AC-2.1, AC-2.3, AC-2.13, AC-7, PS-4, PS-8",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "cognito_user_pool_advanced_security_enabled",
+          "cognito_user_pool_blocks_compromised_credentials_sign_in_attempts",
+          "cognito_user_pool_blocks_potential_malicious_sign_in_attempts"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": [
+          "entra_conditional_access_policy_block_elevated_insider_risk",
+          "entra_conditional_access_policy_block_high_medium_sign_in_risk",
+          "entra_conditional_access_policy_block_o365_elevated_insider_risk",
+          "entra_identity_protection_sign_in_risk_enabled",
+          "entra_identity_protection_user_risk_enabled",
+          "entra_password_protection_lockout_duration_configured",
+          "entra_password_protection_lockout_threshold_limited"
+        ]
+      },
+      "config_requirements": []
+    },
+    {
+      "id": "KSI-INR-AAR",
+      "name": "Generating After Action Reports",
+      "description": "Incident after action reports are generated and lessons learned are persistently incorporated.",
+      "attributes": {
+        "Theme": "KSI-INR: Incident Response",
+        "NISTControls": "IR-3, IR-4, IR-4.1, IR-8",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-INR-RIR",
+      "name": "Reviewing Incident Response Procedures",
+      "description": "The effectiveness of documented incident response procedures is persistently reviewed.",
+      "attributes": {
+        "Theme": "KSI-INR: Incident Response",
+        "NISTControls": "IR-4, IR-4.1, IR-6, IR-6.1, IR-6.3, IR-7, IR-7.1, IR-8, IR-8.1, SI-4.5",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": []
+    },
+    {
+      "id": "KSI-INR-RPI",
+      "name": "Reviewing Past Incidents",
+      "description": "Past incidents are persistently reviewed for patterns or vulnerabilities that were not previously apparent or identified.",
+      "attributes": {
+        "Theme": "KSI-INR: Incident Response",
+        "NISTControls": "IR-3, IR-4, IR-4.1, IR-5, IR-8",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-MLA-ALA",
+      "name": "Authorizing Log Access",
+      "description": "A least-privileged, role and attribute-based, and just-in-time access authorization model is used and persistently reviewed for access to log data based on organizationally defined data sensitivity.",
+      "attributes": {
+        "Theme": "KSI-MLA: Monitoring, Logging, and Auditing",
+        "NISTControls": "SI-11",
+        "ClassApplicability": "Optional for Class B, required for Class C"
+      },
+      "checks": {
+        "aws": [
+          "cloudtrail_logs_s3_bucket_is_not_publicly_accessible",
+          "cloudwatch_cross_account_sharing_disabled",
+          "cloudwatch_log_group_not_publicly_accessible",
+          "iam_inline_policy_no_full_access_to_cloudtrail"
+        ],
+        "azure": [
+          "monitor_storage_account_with_activity_logs_is_private"
+        ],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-MLA-EVC",
+      "name": "Evaluating Configurations",
+      "description": "The configuration of machine-based information resources, especially infrastructure as code, is persistently evaluated and tested.",
+      "attributes": {
+        "Theme": "KSI-MLA: Monitoring, Logging, and Auditing",
+        "NISTControls": "CA-7, CM-2, CM-6, SI-7.7",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "config_recorder_all_regions_enabled"
+        ],
+        "azure": [
+          "sqlserver_va_periodic_recurring_scans_enabled",
+          "sqlserver_vulnerability_assessment_enabled"
+        ],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "config_recorder_all_regions_enabled",
+          "ConfigKey": "mute_non_default_regions",
+          "Operator": "eq",
+          "Value": false,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "KSI-MLA-LET",
+      "name": "Logging Event Types",
+      "description": "A list of information resources and event types that will be logged, monitored, and audited is maintained and persistently reviewed to ensure these activities occur.",
+      "attributes": {
+        "Theme": "KSI-MLA: Monitoring, Logging, and Auditing",
+        "NISTControls": "AC-2.4, AC-6.9, AC-17.1, AC-20.1, AU-2, AU-7.1, AU-12, SI-4.4, SI-4.5, SI-7.7",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "apigateway_restapi_logging_enabled",
+          "apigatewayv2_api_access_logging_enabled",
+          "appsync_field_level_logging_enabled",
+          "athena_workgroup_logging_enabled",
+          "awslambda_function_invoke_api_operations_cloudtrail_logging_enabled",
+          "bedrock_model_invocation_logging_enabled",
+          "cloudfront_distributions_logging_enabled",
+          "cloudtrail_bedrock_logging_enabled",
+          "cloudtrail_logs_s3_bucket_access_logging_enabled",
+          "cloudtrail_multi_region_enabled_logging_management_events",
+          "cloudtrail_s3_dataevents_read_enabled",
+          "cloudtrail_s3_dataevents_write_enabled",
+          "codebuild_project_logging_enabled",
+          "config_recorder_all_regions_enabled",
+          "datasync_task_logging_enabled",
+          "directoryservice_directory_log_forwarding_enabled",
+          "dms_replication_task_source_logging_enabled",
+          "dms_replication_task_target_logging_enabled",
+          "documentdb_cluster_cloudwatch_log_export",
+          "ec2_client_vpn_endpoint_connection_logging_enabled",
+          "ecs_cluster_container_insights_enabled",
+          "ecs_task_definitions_logging_enabled",
+          "eks_control_plane_logging_all_types_enabled",
+          "elasticbeanstalk_environment_cloudwatch_logging_enabled",
+          "elb_logging_enabled",
+          "elbv2_logging_enabled",
+          "glue_etl_jobs_logging_enabled",
+          "mq_broker_logging_enabled",
+          "neptune_cluster_integration_cloudwatch_logs",
+          "networkfirewall_logging_enabled",
+          "opensearch_service_domains_audit_logging_enabled",
+          "opensearch_service_domains_cloudwatch_logging_enabled",
+          "rds_cluster_integration_cloudwatch_logs",
+          "rds_instance_enhanced_monitoring_enabled",
+          "rds_instance_integration_cloudwatch_logs",
+          "redshift_cluster_audit_logging",
+          "route53_public_hosted_zones_cloudwatch_logging_enabled",
+          "s3_bucket_server_access_logging_enabled",
+          "stepfunctions_statemachine_logging_enabled",
+          "vpc_flow_logs_enabled",
+          "waf_global_webacl_logging_enabled",
+          "waf_regional_webacl_logging_enabled",
+          "wafv2_webacl_logging_enabled"
+        ],
+        "azure": [
+          "aks_cluster_azure_monitor_enabled",
+          "app_function_application_insights_enabled",
+          "app_http_logs_enabled",
+          "appinsights_ensure_is_configured",
+          "defender_auto_provisioning_log_analytics_agent_vms_on",
+          "monitor_diagnostic_setting_with_appropriate_categories",
+          "monitor_diagnostic_settings_exists",
+          "mysql_flexible_server_audit_log_connection_activated",
+          "mysql_flexible_server_audit_log_enabled",
+          "network_flow_log_captured_sent",
+          "network_flow_log_more_than_90_days",
+          "network_watcher_enabled",
+          "postgresql_flexible_server_log_checkpoints_on",
+          "postgresql_flexible_server_log_connections_on",
+          "postgresql_flexible_server_log_disconnections_on",
+          "sqlserver_auditing_enabled",
+          "sqlserver_auditing_retention_90_days"
+        ],
+        "gcp": [
+          "cloudsql_instance_postgres_enable_pgaudit_flag",
+          "cloudsql_instance_postgres_log_connections_flag",
+          "cloudsql_instance_postgres_log_disconnections_flag",
+          "cloudsql_instance_postgres_log_error_verbosity_flag",
+          "cloudsql_instance_postgres_log_min_duration_statement_flag",
+          "cloudsql_instance_postgres_log_min_error_statement_flag",
+          "cloudsql_instance_postgres_log_min_messages_flag",
+          "cloudsql_instance_postgres_log_statement_flag",
+          "cloudsql_instance_sqlserver_trace_flag",
+          "cloudstorage_audit_logs_enabled",
+          "cloudstorage_bucket_logging_enabled",
+          "compute_loadbalancer_logging_enabled",
+          "compute_network_dns_logging_enabled",
+          "compute_subnet_flow_logs_enabled",
+          "iam_audit_logs_enabled",
+          "logging_sink_created"
+        ],
+        "kubernetes": [
+          "apiserver_audit_log_path_set"
+        ],
+        "m365": [
+          "exchange_mailbox_audit_bypass_disabled",
+          "exchange_organization_mailbox_auditing_enabled",
+          "exchange_user_mailbox_auditing_enabled"
+        ]
+      },
+      "config_requirements": [
+        {
+          "Check": "config_recorder_all_regions_enabled",
+          "ConfigKey": "mute_non_default_regions",
+          "Operator": "eq",
+          "Value": false,
+          "Provider": "aws"
+        },
+        {
+          "Check": "eks_control_plane_logging_all_types_enabled",
+          "ConfigKey": "eks_required_log_types",
+          "Operator": "superset",
+          "Value": [
+            "api",
+            "audit",
+            "authenticator",
+            "controllerManager",
+            "scheduler"
+          ],
+          "Provider": "aws"
+        },
+        {
+          "Check": "exchange_user_mailbox_auditing_enabled",
+          "ConfigKey": "audit_log_age",
+          "Operator": "gte",
+          "Value": 90,
+          "Provider": "m365"
+        }
+      ]
+    },
+    {
+      "id": "KSI-MLA-OSM",
+      "name": "Operating SIEM Capability",
+      "description": "A Security Information and Event Management (SIEM) or similar system(s) is used and persistently reviewed for centralized, tamper-resistant logging of events, activities, and changes.",
+      "attributes": {
+        "Theme": "KSI-MLA: Monitoring, Logging, and Auditing",
+        "NISTControls": "AC-17.1, AC-20.1, AU-2, AU-3, AU-3.1, AU-4, AU-5, AU-6.1, AU-6.3, AU-7, AU-7.1, AU-8, AU-9, AU-11, IR-4.1, SI-4.2, SI-4.4, SI-7.7",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "cloudtrail_bucket_requires_mfa_delete",
+          "cloudtrail_cloudwatch_logging_enabled",
+          "cloudtrail_kms_encryption_enabled",
+          "cloudtrail_log_file_validation_enabled",
+          "cloudtrail_multi_region_enabled",
+          "cloudwatch_log_group_kms_encryption_enabled",
+          "cloudwatch_log_group_retention_policy_specific_days_enabled"
+        ],
+        "azure": [
+          "monitor_diagnostic_settings_exists"
+        ],
+        "gcp": [
+          "cloudstorage_bucket_log_retention_policy_lock",
+          "iam_audit_logs_enabled",
+          "logging_sink_created"
+        ],
+        "kubernetes": [
+          "apiserver_audit_log_maxage_set",
+          "apiserver_audit_log_maxbackup_set",
+          "apiserver_audit_log_maxsize_set",
+          "apiserver_audit_log_path_set"
+        ],
+        "m365": [
+          "purview_audit_log_search_enabled"
+        ]
+      },
+      "config_requirements": [
+        {
+          "Check": "apiserver_audit_log_maxage_set",
+          "ConfigKey": "audit_log_maxage",
+          "Operator": "gte",
+          "Value": 30,
+          "Provider": "kubernetes"
+        },
+        {
+          "Check": "apiserver_audit_log_maxbackup_set",
+          "ConfigKey": "audit_log_maxbackup",
+          "Operator": "gte",
+          "Value": 10,
+          "Provider": "kubernetes"
+        },
+        {
+          "Check": "apiserver_audit_log_maxsize_set",
+          "ConfigKey": "audit_log_maxsize",
+          "Operator": "gte",
+          "Value": 100,
+          "Provider": "kubernetes"
+        },
+        {
+          "Check": "cloudwatch_log_group_retention_policy_specific_days_enabled",
+          "ConfigKey": "log_group_retention_days",
+          "Operator": "gte",
+          "Value": 365,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "KSI-MLA-RVL",
+      "name": "Reviewing Logs",
+      "description": "Logs are persistently reviewed and audited.",
+      "attributes": {
+        "Theme": "KSI-MLA: Monitoring, Logging, and Auditing",
+        "NISTControls": "AC-2.4, AC-6.9, AU-2, AU-6, AU-6.1, SI-4, SI-4.4",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-PIY-GIV",
+      "name": "Generating Inventories",
+      "description": "Authoritative sources are used to automatically generate real-time inventories of all information resources when needed.",
+      "attributes": {
+        "Theme": "KSI-PIY: Policy and Inventory",
+        "NISTControls": "CM-2.2, CM-7.5, CM-8, CM-8.1, CM-12, CM-12.1, CP-2.8",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "config_delegated_admin_and_org_aggregator_all_regions",
+          "config_recorder_all_regions_enabled",
+          "resourceexplorer2_indexes_found"
+        ],
+        "azure": [],
+        "gcp": [
+          "iam_cloud_asset_inventory_enabled"
+        ],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "config_recorder_all_regions_enabled",
+          "ConfigKey": "mute_non_default_regions",
+          "Operator": "eq",
+          "Value": false,
+          "Provider": "aws"
+        },
+        {
+          "Check": "config_delegated_admin_and_org_aggregator_all_regions",
+          "ConfigKey": "mute_non_default_regions",
+          "Operator": "eq",
+          "Value": false,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "KSI-PIY-RES",
+      "name": "Reviewing Executive Support",
+      "description": "Executive support for achieving the provider's security goals is persistently reviewed and demonstrated.",
+      "attributes": {
+        "Theme": "KSI-PIY: Policy and Inventory",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-PIY-RIS",
+      "name": "Reviewing Investments in Security",
+      "description": "The effectiveness of the provider's investments in achieving security goals is persistently reviewed.",
+      "attributes": {
+        "Theme": "KSI-PIY: Policy and Inventory",
+        "NISTControls": "AC-5, CA-2, CP-2.1, CP-4.1, IR-3.2, PM-3, SA-2, SA-3, SR-2.1",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-PIY-RSD",
+      "name": "Reviewing Security in the SDLC",
+      "description": "The effectiveness of building security and privacy considerations into the Software Development Lifecycle and aligning with CISA Secure By Design principles is persistently reviewed.",
+      "attributes": {
+        "Theme": "KSI-PIY: Policy and Inventory",
+        "NISTControls": "AC-5, AU-3.3, CM-3.4, PL-8, PM-7, SA-3, SA-8, SC-4, SC-18, SI-10, SI-11, SI-16",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-PIY-RVD",
+      "name": "Reviewing Vulnerability Disclosures",
+      "description": "The effectiveness of the provider's vulnerability disclosure program is persistently reviewed.",
+      "attributes": {
+        "Theme": "KSI-PIY: Policy and Inventory",
+        "NISTControls": "RA-5.11",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-RPL-ABO",
+      "name": "Aligning Backups with Objectives",
+      "description": "The alignment of machine-based information resource backups with defined recovery objectives is persistently reviewed.",
+      "attributes": {
+        "Theme": "KSI-RPL: Recovery Planning",
+        "NISTControls": "CM-2.3, CP-6, CP-9, CP-10, CP-10.2, SI-12",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "dlm_ebs_snapshot_lifecycle_policy_exists",
+          "documentdb_cluster_backup_enabled",
+          "dynamodb_table_protected_by_backup_plan",
+          "dynamodb_tables_pitr_enabled",
+          "ec2_ebs_volume_protected_by_backup_plan",
+          "ec2_ebs_volume_snapshots_exists",
+          "efs_have_backup_enabled",
+          "elasticache_redis_cluster_backup_enabled",
+          "lightsail_instance_automated_snapshots",
+          "neptune_cluster_backup_enabled",
+          "rds_cluster_backtrack_enabled",
+          "rds_cluster_protected_by_backup_plan",
+          "rds_instance_backup_enabled",
+          "rds_instance_protected_by_backup_plan",
+          "redshift_cluster_automated_snapshot",
+          "s3_bucket_cross_region_replication",
+          "s3_bucket_object_versioning"
+        ],
+        "azure": [
+          "cosmosdb_account_backup_policy_continuous",
+          "keyvault_recoverable",
+          "mysql_flexible_server_geo_redundant_backup_enabled",
+          "postgresql_flexible_server_geo_redundant_backup_enabled",
+          "recovery_vault_backup_policy_retention_adequate",
+          "recovery_vault_has_protected_items",
+          "storage_blob_versioning_is_enabled",
+          "storage_ensure_file_shares_soft_delete_is_enabled",
+          "storage_ensure_soft_delete_is_enabled",
+          "storage_geo_redundant_enabled",
+          "vm_backup_enabled",
+          "vm_sufficient_daily_backup_retention_period"
+        ],
+        "gcp": [
+          "cloudsql_instance_automated_backups",
+          "cloudstorage_bucket_soft_delete_enabled",
+          "cloudstorage_bucket_sufficient_retention_period",
+          "cloudstorage_bucket_versioning_enabled"
+        ],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "vm_sufficient_daily_backup_retention_period",
+          "ConfigKey": "vm_backup_min_daily_retention_days",
+          "Operator": "gte",
+          "Value": 7,
+          "Provider": "azure"
+        },
+        {
+          "Check": "documentdb_cluster_backup_enabled",
+          "ConfigKey": "minimum_backup_retention_period",
+          "Operator": "gte",
+          "Value": 7,
+          "Provider": "aws"
+        },
+        {
+          "Check": "neptune_cluster_backup_enabled",
+          "ConfigKey": "minimum_backup_retention_period",
+          "Operator": "gte",
+          "Value": 7,
+          "Provider": "aws"
+        },
+        {
+          "Check": "elasticache_redis_cluster_backup_enabled",
+          "ConfigKey": "minimum_snapshot_retention_period",
+          "Operator": "gte",
+          "Value": 7,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "KSI-RPL-ARP",
+      "name": "Aligning Recovery Plan",
+      "description": "The alignment of recovery plans with defined recovery objectives is persistently reviewed.",
+      "attributes": {
+        "Theme": "KSI-RPL: Recovery Planning",
+        "NISTControls": "CP-2, CP-2.1, CP-2.3, CP-4.1, CP-6, CP-6.1, CP-6.3, CP-7, CP-7.1, CP-7.2, CP-7.3, CP-8, CP-8.1, CP-8.2, CP-10, CP-10.2",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "backup_plans_exist",
+          "backup_reportplans_exist",
+          "backup_vaults_exist"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": []
+    },
+    {
+      "id": "KSI-RPL-RRO",
+      "name": "Reviewing Recovery Objectives",
+      "description": "The desired Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) are defined and persistently reviewed for alignment with the provider's business needs and capabilities.",
+      "attributes": {
+        "Theme": "KSI-RPL: Recovery Planning",
+        "NISTControls": "CP-2.3, CP-10",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-RPL-TRC",
+      "name": "Testing Recovery Capabilities",
+      "description": "The capability to recover from incidents and contingencies aligned with defined recovery objectives is persistently tested.",
+      "attributes": {
+        "Theme": "KSI-RPL: Recovery Planning",
+        "NISTControls": "CP-2.1, CP-2.3, CP-4, CP-4.1, CP-6, CP-6.1, CP-9.1, CP-10, IR-3, IR-3.2",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "drs_job_exist"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "drs_job_exist",
+          "ConfigKey": "mute_non_default_regions",
+          "Operator": "eq",
+          "Value": false,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "KSI-SCR-MIT",
+      "name": "Mitigating Supply Chain Risk",
+      "description": "Persistently identify, review, and mitigate potential supply chain risks.",
+      "attributes": {
+        "Theme": "KSI-SCR: Supply Chain Risk",
+        "NISTControls": "AC-20, RA-3.1, SA-9, SA-10, SA-11, SA-15.3, SA-22, SI-7.1, SR-5, SR-6, CA-7.4, SC-18",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "awslambda_function_using_cross_account_layers",
+          "codeartifact_packages_external_public_publishing_disabled",
+          "codebuild_project_user_controlled_buildspec",
+          "codebuild_project_uses_allowed_github_organizations",
+          "ecr_registry_enhanced_scanning_enabled",
+          "ecr_registry_scan_images_on_push_enabled",
+          "ecr_repositories_not_publicly_accessible",
+          "ecr_repositories_scan_vulnerabilities_in_latest_image",
+          "ecr_repositories_tag_immutability",
+          "s3_bucket_shadow_resource_vulnerability"
+        ],
+        "azure": [
+          "defender_container_images_resolved_vulnerabilities",
+          "defender_container_images_scan_enabled"
+        ],
+        "gcp": [
+          "artifacts_container_analysis_enabled",
+          "gcr_container_scanning_enabled"
+        ],
+        "kubernetes": [
+          "apiserver_always_pull_images_plugin"
+        ],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "ecr_repositories_scan_vulnerabilities_in_latest_image",
+          "ConfigKey": "ecr_repository_vulnerability_minimum_severity",
+          "Operator": "in",
+          "Value": [
+            "MEDIUM"
+          ],
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "KSI-SCR-MON",
+      "name": "Monitoring Supply Chain Risk",
+      "description": "Third party software information resources are automatically monitored for upstream vulnerabilities using mechanisms that may include contractual notification requirements or active monitoring services.",
+      "attributes": {
+        "Theme": "KSI-SCR: Supply Chain Risk",
+        "NISTControls": "AC-20, CA-3, IR-6.3, PS-7, RA-5, SA-9, SI-5, SR-5, SR-6, SR-8",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "awslambda_function_using_supported_runtimes",
+          "ecr_registry_enhanced_scanning_enabled",
+          "inspector2_active_findings_exist",
+          "inspector2_is_enabled",
+          "ssm_managed_compliant_patching"
+        ],
+        "azure": [
+          "app_ensure_java_version_is_latest",
+          "app_ensure_php_version_is_latest",
+          "app_ensure_python_version_is_latest",
+          "app_function_latest_runtime_version",
+          "defender_ensure_system_updates_are_applied"
+        ],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "awslambda_function_using_supported_runtimes",
+          "ConfigKey": "obsolete_lambda_runtimes",
+          "Operator": "superset",
+          "Value": [
+            "java8",
+            "go1.x",
+            "provided",
+            "python3.6",
+            "python2.7",
+            "python3.7",
+            "python3.8",
+            "nodejs4.3",
+            "nodejs4.3-edge",
+            "nodejs6.10",
+            "nodejs",
+            "nodejs8.10",
+            "nodejs10.x",
+            "nodejs12.x",
+            "nodejs14.x",
+            "nodejs16.x",
+            "dotnet5.0",
+            "dotnet6",
+            "dotnet7",
+            "dotnetcore1.0",
+            "dotnetcore2.0",
+            "dotnetcore2.1",
+            "dotnetcore3.1",
+            "ruby2.5",
+            "ruby2.7"
+          ],
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "KSI-SVC-ACM",
+      "name": "Automating Configuration Management",
+      "description": "The configuration of machine-based information resources is managed using automation and persistently reviewed for drift.",
+      "attributes": {
+        "Theme": "KSI-SVC: Service Configuration",
+        "NISTControls": "AC-2.4, CM-2, CM-2.2, CM-2.3, CM-6, CM-7.1, PL-9, PL-10, SA-5, SI-5, SR-10",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "config_recorder_all_regions_enabled",
+          "ec2_instance_managed_by_ssm",
+          "ssm_managed_compliant_patching"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "config_recorder_all_regions_enabled",
+          "ConfigKey": "mute_non_default_regions",
+          "Operator": "eq",
+          "Value": false,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "KSI-SVC-ASM",
+      "name": "Automating Secret Management",
+      "description": "Management, protection, and regular rotation of digital keys, certificates, and other secrets is automated and persistently reviewed.",
+      "attributes": {
+        "Theme": "KSI-SVC: Service Configuration",
+        "NISTControls": "AC-17.2, IA-5.2, IA-5.6, SC-12, SC-17",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "acm_certificates_expiration_check",
+          "amplify_app_no_secrets_in_environment",
+          "apigateway_restapi_no_secrets_in_stage_variables",
+          "awslambda_function_no_secrets_in_code",
+          "awslambda_function_no_secrets_in_variables",
+          "awslambda_layer_no_secrets_in_content",
+          "batch_job_definition_no_secrets",
+          "cloudformation_stack_outputs_find_secrets",
+          "cloudwatch_log_group_no_secrets_in_logs",
+          "codebuild_project_no_secrets_in_variables",
+          "codebuild_project_source_repo_url_no_sensitive_credentials",
+          "codecommit_repository_no_secrets",
+          "datapipeline_pipeline_no_secrets_in_definition",
+          "directoryservice_ldap_certificate_expiration",
+          "ec2_instance_secrets_user_data",
+          "ec2_launch_template_no_secrets",
+          "ecr_repository_image_no_secrets",
+          "ecs_task_definitions_no_environment_secrets",
+          "elasticbeanstalk_environment_no_secrets_in_configuration",
+          "glue_catalog_connection_no_secrets",
+          "glue_etl_jobs_no_secrets_in_arguments",
+          "iam_no_expired_server_certificates_stored",
+          "kms_cmk_rotation_enabled",
+          "kms_key_not_publicly_accessible",
+          "rds_instance_certificate_expiration",
+          "sagemaker_notebook_instance_no_secrets",
+          "secretsmanager_automatic_rotation_enabled",
+          "secretsmanager_has_restrictive_resource_policy",
+          "secretsmanager_not_publicly_accessible",
+          "secretsmanager_secret_rotated_periodically",
+          "secretsmanager_secret_unused",
+          "ssm_document_secrets",
+          "stepfunctions_statemachine_no_secrets_in_definition"
+        ],
+        "azure": [
+          "entra_app_registration_credential_not_expired",
+          "keyvault_key_expiration_set_in_non_rbac",
+          "keyvault_key_rotation_enabled",
+          "keyvault_non_rbac_secret_expiration_set",
+          "keyvault_rbac_key_expiration_set",
+          "keyvault_rbac_secret_expiration_set",
+          "storage_key_rotation_90_days"
+        ],
+        "gcp": [
+          "kms_key_not_publicly_accessible",
+          "kms_key_rotation_enabled",
+          "kms_key_rotation_max_90_days",
+          "secretmanager_secret_not_publicly_accessible",
+          "secretmanager_secret_rotation_enabled"
+        ],
+        "kubernetes": [
+          "apiserver_encryption_provider_config_set",
+          "apiserver_service_account_key_file_set",
+          "controllermanager_rotate_kubelet_server_cert",
+          "controllermanager_service_account_private_key_file",
+          "kubelet_rotate_certificates"
+        ],
+        "m365": [
+          "entra_policy_default_user_cannot_read_bitlocker_keys"
+        ]
+      },
+      "config_requirements": [
+        {
+          "Check": "acm_certificates_expiration_check",
+          "ConfigKey": "days_to_expire_threshold",
+          "Operator": "gte",
+          "Value": 7,
+          "Provider": "aws"
+        },
+        {
+          "Check": "secretsmanager_secret_unused",
+          "ConfigKey": "max_days_secret_unused",
+          "Operator": "lte",
+          "Value": 90,
+          "Provider": "aws"
+        },
+        {
+          "Check": "secretsmanager_secret_rotated_periodically",
+          "ConfigKey": "max_days_secret_unrotated",
+          "Operator": "lte",
+          "Value": 90,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "KSI-SVC-EIS",
+      "name": "Evaluating and Improving Security",
+      "description": "Information resources are persistently evaluated for opportunities to improve security and those improvements are persistently made.",
+      "attributes": {
+        "Theme": "KSI-SVC: Service Configuration",
+        "NISTControls": "CM-7.1, CM-12.1, MA-2, PL-8, SC-7, SC-39, SI-2.2, SI-4, SR-10",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "trustedadvisor_errors_and_warnings"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": []
+    },
+    {
+      "id": "KSI-SVC-PRR",
+      "name": "Preventing Residual Risk",
+      "description": "Plans, procedures, and the state of information resources are persistently reviewed after making changes to limit and remove unwanted residual elements that would likely negatively affect the confidentiality, integrity, or availability of federal customer data.",
+      "attributes": {
+        "Theme": "KSI-SVC: Service Configuration",
+        "NISTControls": "SC-4",
+        "ClassApplicability": "Optional for Class B, required for Class C"
+      },
+      "checks": {
+        "aws": [
+          "cloudfront_distributions_s3_origin_non_existent_bucket",
+          "ec2_elastic_ip_unassigned",
+          "lightsail_static_ip_unused",
+          "route53_dangling_ip_subdomain_takeover"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-SVC-RUD",
+      "name": "Removing Unwanted Data",
+      "description": "Unwanted federal customer data is removed promptly when requested by an agency in alignment with customer agreements, including from backups if appropriate; this typically applies when a customer spills information or when a customer seeks to remove information from a service due to a change in usage.",
+      "attributes": {
+        "Theme": "KSI-SVC: Service Configuration",
+        "NISTControls": "SI-12.3, SI-18.4",
+        "ClassApplicability": "Optional for Class B, required for Class C"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "KSI-SVC-SIN",
+      "name": "Securing Information",
+      "description": "Information is encrypted or otherwise secured from unwanted access or modification.",
+      "attributes": {
+        "Theme": "KSI-SVC: Service Configuration",
+        "NISTControls": "AC-1, AC-17.2, CP-9.8, SC-8, SC-8.1, SC-13, SC-20, SC-21, SC-22, SC-23, SC-28, SC-28.1",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "apigateway_restapi_cache_encrypted",
+          "athena_workgroup_encryption",
+          "awslambda_function_env_vars_not_encrypted_with_cmk",
+          "backup_recovery_point_encrypted",
+          "backup_vaults_encrypted",
+          "bedrock_custom_model_encrypted_with_cmk",
+          "bedrock_knowledge_base_encrypted_with_cmk",
+          "bedrock_prompt_encrypted_with_cmk",
+          "cloudfront_distributions_field_level_encryption_enabled",
+          "cloudfront_distributions_https_enabled",
+          "cloudfront_distributions_origin_traffic_encrypted",
+          "cloudfront_distributions_s3_origin_access_control",
+          "cloudfront_distributions_using_deprecated_ssl_protocols",
+          "codebuild_report_group_export_encrypted",
+          "dms_endpoint_redis_in_transit_encryption_enabled",
+          "dms_endpoint_ssl_enabled",
+          "documentdb_cluster_public_snapshot",
+          "documentdb_cluster_storage_encrypted",
+          "dynamodb_accelerator_cluster_encryption_enabled",
+          "dynamodb_accelerator_cluster_in_transit_encryption_enabled",
+          "dynamodb_table_cross_account_access",
+          "dynamodb_tables_kms_cmk_encryption_enabled",
+          "ec2_ami_account_block_public_access",
+          "ec2_ami_public",
+          "ec2_ebs_default_encryption",
+          "ec2_ebs_public_snapshot",
+          "ec2_ebs_snapshot_account_block_public_access",
+          "ec2_ebs_snapshots_encrypted",
+          "ec2_ebs_volume_encryption",
+          "efs_encryption_at_rest_enabled",
+          "efs_not_publicly_accessible",
+          "eks_cluster_kms_cmk_encryption_in_secrets_enabled",
+          "elasticache_redis_cluster_in_transit_encryption_enabled",
+          "elasticache_redis_cluster_rest_encryption_enabled",
+          "elb_insecure_ssl_ciphers",
+          "elb_ssl_listeners",
+          "elbv2_insecure_ssl_ciphers",
+          "elbv2_nlb_tls_termination_enabled",
+          "elbv2_ssl_listeners",
+          "eventbridge_bus_cross_account_access",
+          "eventbridge_bus_exposed",
+          "firehose_stream_encrypted_at_rest",
+          "glacier_vaults_policy_public_access",
+          "glue_data_catalogs_metadata_encryption_enabled",
+          "glue_data_catalogs_not_publicly_accessible",
+          "glue_database_connections_ssl_enabled",
+          "glue_development_endpoints_job_bookmark_encryption_enabled",
+          "glue_development_endpoints_s3_encryption_enabled",
+          "glue_etl_jobs_amazon_s3_encryption_enabled",
+          "glue_etl_jobs_job_bookmark_encryption_enabled",
+          "glue_ml_transform_encrypted_at_rest",
+          "kafka_cluster_encryption_at_rest_uses_cmk",
+          "kafka_cluster_in_transit_encryption_enabled",
+          "kafka_connector_in_transit_encryption_enabled",
+          "kinesis_stream_encrypted_at_rest",
+          "memorydb_cluster_in_transit_encryption_enabled",
+          "neptune_cluster_public_snapshot",
+          "neptune_cluster_snapshot_encrypted",
+          "neptune_cluster_storage_encrypted",
+          "opensearch_service_domains_encryption_at_rest_enabled",
+          "opensearch_service_domains_https_communications_enforced",
+          "opensearch_service_domains_node_to_node_encryption_enabled",
+          "rds_cluster_storage_encrypted",
+          "rds_instance_storage_encrypted",
+          "rds_instance_transport_encrypted",
+          "rds_snapshots_encrypted",
+          "rds_snapshots_public_access",
+          "redshift_cluster_encrypted_at_rest",
+          "redshift_cluster_in_transit_encryption_enabled",
+          "s3_access_point_public_access_block",
+          "s3_account_level_public_access_blocks",
+          "s3_bucket_acl_prohibited",
+          "s3_bucket_cross_account_access",
+          "s3_bucket_kms_encryption",
+          "s3_bucket_level_public_access_block",
+          "s3_bucket_no_mfa_delete",
+          "s3_bucket_object_lock",
+          "s3_bucket_object_public",
+          "s3_bucket_policy_public_write_access",
+          "s3_bucket_public_access",
+          "s3_bucket_public_list_acl",
+          "s3_bucket_public_write_acl",
+          "s3_bucket_secure_transport_policy",
+          "s3_multi_region_access_point_public_access_block",
+          "sagemaker_endpoint_config_kms_encryption_enabled",
+          "sagemaker_notebook_instance_encryption_enabled",
+          "sagemaker_training_jobs_intercontainer_encryption_enabled",
+          "sagemaker_training_jobs_volume_and_output_encryption_enabled",
+          "sns_subscription_not_using_http_endpoints",
+          "sns_topics_not_publicly_accessible",
+          "sqs_queues_not_publicly_accessible",
+          "sqs_queues_server_side_encryption_enabled",
+          "ssm_documents_set_as_public",
+          "stepfunctions_statemachine_encrypted_with_cmk",
+          "storagegateway_fileshare_encryption_enabled",
+          "transfer_server_in_transit_encryption_enabled",
+          "workspaces_volume_encryption_enabled"
+        ],
+        "azure": [
+          "app_client_certificates_on",
+          "app_ensure_auth_is_set_up",
+          "app_ensure_http_is_redirected_to_https",
+          "app_ftp_deployment_disabled",
+          "app_function_ensure_http_is_redirected_to_https",
+          "app_minimum_tls_version_12",
+          "cosmosdb_account_minimum_tls_version",
+          "databricks_workspace_cmk_encryption_enabled",
+          "monitor_storage_account_with_activity_logs_cmk_encrypted",
+          "mysql_flexible_server_minimum_tls_version_12",
+          "mysql_flexible_server_ssl_connection_enabled",
+          "postgresql_flexible_server_enforce_ssl_enabled",
+          "sqlserver_recommended_minimal_tls_version",
+          "sqlserver_tde_encrypted_with_cmk",
+          "sqlserver_tde_encryption_enabled",
+          "storage_blob_public_access_level_is_disabled",
+          "storage_ensure_encryption_with_customer_managed_keys",
+          "storage_ensure_minimum_tls_version_12",
+          "storage_infrastructure_encryption_is_enabled",
+          "storage_secure_transfer_required_is_enabled",
+          "storage_smb_channel_encryption_with_secure_algorithm",
+          "vm_ensure_attached_disks_encrypted_with_cmk",
+          "vm_ensure_unattached_disks_encrypted_with_cmk"
+        ],
+        "gcp": [
+          "bigquery_dataset_cmk_encryption",
+          "bigquery_dataset_public_access",
+          "bigquery_table_cmk_encryption",
+          "cloudsql_instance_cmek_encryption_enabled",
+          "cloudsql_instance_ssl_connections",
+          "cloudstorage_bucket_public_access",
+          "compute_image_not_publicly_shared",
+          "compute_instance_confidential_computing_enabled",
+          "compute_instance_encryption_with_csek_enabled",
+          "dataproc_encrypted_with_cmks_disabled"
+        ],
+        "kubernetes": [
+          "apiserver_encryption_provider_config_set",
+          "apiserver_etcd_tls_config",
+          "apiserver_tls_config",
+          "etcd_peer_tls_config",
+          "etcd_tls_encryption",
+          "kubelet_tls_cert_and_key",
+          "rbac_minimize_secret_access"
+        ],
+        "m365": [
+          "exchange_organization_modern_authentication_enabled",
+          "exchange_transport_config_smtp_auth_disabled",
+          "sharepoint_modern_authentication_required"
+        ]
+      },
+      "config_requirements": [
+        {
+          "Check": "sqlserver_recommended_minimal_tls_version",
+          "ConfigKey": "recommended_minimal_tls_versions",
+          "Operator": "subset",
+          "Value": [
+            "1.2",
+            "1.3"
+          ],
+          "Provider": "azure"
+        },
+        {
+          "Check": "storage_smb_channel_encryption_with_secure_algorithm",
+          "ConfigKey": "recommended_smb_channel_encryption_algorithms",
+          "Operator": "subset",
+          "Value": [
+            "AES-256-GCM"
+          ],
+          "Provider": "azure"
+        }
+      ]
+    },
+    {
+      "id": "KSI-SVC-VCM",
+      "name": "Validating Communications",
+      "description": "The authenticity and integrity of communications between machine-based information resources is persistently validated using automation.",
+      "attributes": {
+        "Theme": "KSI-SVC: Service Configuration",
+        "NISTControls": "SC-23, SI-7.1",
+        "ClassApplicability": "Optional for Class B, required for Class C"
+      },
+      "checks": {
+        "aws": [
+          "apigateway_restapi_client_certificate_enabled",
+          "kafka_cluster_mutual_tls_authentication_enabled",
+          "ses_identity_dkim_enabled"
+        ],
+        "azure": [
+          "app_client_certificates_on"
+        ],
+        "gcp": [
+          "dns_dnssec_disabled"
+        ],
+        "kubernetes": [
+          "apiserver_client_ca_file_set",
+          "apiserver_etcd_tls_config",
+          "apiserver_kubelet_cert_auth",
+          "apiserver_kubelet_tls_auth",
+          "etcd_client_cert_auth",
+          "etcd_no_auto_tls",
+          "etcd_no_peer_auto_tls",
+          "etcd_peer_client_cert_auth",
+          "etcd_peer_tls_config",
+          "kubelet_client_ca_file_set"
+        ],
+        "m365": [
+          "defender_domain_dkim_enabled",
+          "defender_domain_dmarc_records_published",
+          "exchange_organization_reject_direct_send_enabled"
+        ]
+      }
+    },
+    {
+      "id": "KSI-SVC-VRI",
+      "name": "Validating Resource Integrity",
+      "description": "Use cryptographic methods to validate the integrity of machine-based information resources.",
+      "attributes": {
+        "Theme": "KSI-SVC: Service Configuration",
+        "NISTControls": "CM-2.2, CM-8.3, SC-13, SC-23, SI-7, SI-7.1, SR-10",
+        "ClassApplicability": "Required for Classes B and C"
+      },
+      "checks": {
+        "aws": [
+          "cloudtrail_log_file_validation_enabled",
+          "kms_key_enclave_attestation_bypassable_path",
+          "kms_key_enclave_attestation_no_deployment_binding",
+          "kms_key_enclave_attestation_not_enforced",
+          "kms_key_enclave_attestation_pcr_mismatch",
+          "kms_key_enclave_attestation_unknown_image",
+          "kms_key_enclave_debug_attestation_detected"
+        ],
+        "azure": [
+          "vm_trusted_launch_enabled"
+        ],
+        "gcp": [
+          "compute_instance_shielded_vm_enabled",
+          "dns_dnssec_disabled",
+          "dns_rsasha1_in_use_to_key_sign_in_dnssec",
+          "dns_rsasha1_in_use_to_zone_sign_in_dnssec"
+        ],
+        "kubernetes": [
+          "apiserver_etcd_cafile_set",
+          "controllermanager_root_ca_file_set",
+          "etcd_client_cert_auth",
+          "etcd_peer_client_cert_auth"
+        ],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "kms_key_enclave_debug_attestation_detected",
+          "ConfigKey": "enclave_debug_lookback_window_hours",
+          "Operator": "gte",
+          "Value": 2160,
+          "Provider": "aws"
+        },
+        {
+          "Check": "kms_key_enclave_debug_attestation_detected",
+          "ConfigKey": "enclave_debug_max_events",
+          "Operator": "gte",
+          "Value": 5000,
+          "Provider": "aws"
+        },
+        {
+          "Check": "kms_key_enclave_attestation_unknown_image",
+          "ConfigKey": "enclave_unknown_image_lookback_window_hours",
+          "Operator": "gte",
+          "Value": 2160,
+          "Provider": "aws"
+        },
+        {
+          "Check": "kms_key_enclave_attestation_unknown_image",
+          "ConfigKey": "enclave_unknown_image_max_events",
+          "Operator": "gte",
+          "Value": 5000,
+          "Provider": "aws"
+        }
+      ]
+    }
+  ]
+}
diff --git a/prowler/compliance/gcp/fedramp_20x_ksi_low_gcp.json b/prowler/compliance/gcp/fedramp_20x_ksi_low_gcp.json
deleted file mode 100644
index 5638b0c51e..0000000000
--- a/prowler/compliance/gcp/fedramp_20x_ksi_low_gcp.json
+++ /dev/null
@@ -1,294 +0,0 @@
-{
-  "Framework": "FedRAMP-20x-KSI-Low",
-  "Name": "FedRAMP 20x Key Security Indicators (KSIs) - Low Impact Level v25.05C",
-  "Version": "25.05C",
-  "Provider": "GCP",
-  "Description": "FedRAMP 20x Key Security Indicators (KSIs) Low Impact Level represent core security indicators for cloud service providers, focusing on automation, continuous monitoring, and cloud-native security principles per FedRAMP 20x Phase One pilot requirements for Low impact systems.",
-  "Requirements": [
-    {
-      "Id": "ksi-cmt",
-      "Name": "KSI-CMT: Change Management",
-      "Description": "A secure cloud service provider will ensure that all system changes are properly documented and configuration baselines are updated accordingly",
-      "Attributes": [
-        {
-          "ItemId": "ksi-cmt",
-          "Section": "Change Management",
-          "Service": "gcp"
-        }
-      ],
-      "Checks": [
-        "iam_audit_logs_enabled",
-        "iam_cloud_asset_inventory_enabled",
-        "logging_log_metric_filter_and_alert_for_audit_configuration_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_bucket_permission_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_custom_role_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_project_ownership_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_sql_instance_configuration_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_vpc_firewall_rule_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_vpc_network_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_vpc_network_route_changes_enabled",
-        "compute_instance_serial_ports_in_use",
-        "compute_project_os_login_enabled"
-      ]
-    },
-    {
-      "Id": "ksi-cna",
-      "Name": "KSI-CNA: Cloud Native Architecture",
-      "Description": "A secure cloud service offering will use cloud native architecture and design principles to enforce and enhance the Confidentiality, Integrity and Availability of the system",
-      "Attributes": [
-        {
-          "ItemId": "ksi-cna",
-          "Section": "Cloud Native Architecture",
-          "Service": "gcp"
-        }
-      ],
-      "Checks": [
-        "cloudsql_instance_private_ip_assignment",
-        "cloudsql_instance_public_access",
-        "cloudsql_instance_public_ip",
-        "cloudstorage_bucket_uniform_bucket_level_access",
-        "compute_firewall_rdp_access_from_the_internet_allowed",
-        "compute_firewall_ssh_access_from_the_internet_allowed",
-        "compute_instance_block_project_wide_ssh_keys_disabled",
-        "compute_instance_confidential_computing_enabled",
-        "compute_instance_ip_forwarding_is_enabled",
-        "compute_instance_public_ip",
-        "compute_instance_shielded_vm_enabled",
-        "compute_loadbalancer_logging_enabled",
-        "compute_network_default_in_use",
-        "compute_network_dns_logging_enabled",
-        "compute_network_not_legacy",
-        "compute_subnet_flow_logs_enabled",
-        "gke_cluster_no_default_service_account"
-      ]
-    },
-    {
-      "Id": "ksi-iam",
-      "Name": "KSI-IAM: Identity and Access Management",
-      "Description": "A secure cloud service offering will protect user data, control access, and apply zero trust principles",
-      "Attributes": [
-        {
-          "ItemId": "ksi-iam",
-          "Section": "Identity and Access Management",
-          "Service": "gcp"
-        }
-      ],
-      "Checks": [
-        "apikeys_api_restrictions_configured",
-        "apikeys_key_exists",
-        "apikeys_key_rotated_in_90_days",
-        "compute_instance_default_service_account_in_use",
-        "compute_instance_default_service_account_in_use_with_full_api_access",
-        "iam_no_service_roles_at_project_level",
-        "iam_role_kms_enforce_separation_of_duties",
-        "iam_role_sa_enforce_separation_of_duties",
-        "iam_sa_no_administrative_privileges",
-        "iam_sa_no_user_managed_keys",
-        "iam_sa_user_managed_key_rotate_90_days",
-        "iam_sa_user_managed_key_unused",
-        "iam_service_account_unused"
-      ]
-    },
-    {
-      "Id": "ksi-inr",
-      "Name": "KSI-INR: Incident Response",
-      "Description": "A secure cloud service offering will respond to incidents according to FedRAMP requirements and cloud service provider policies",
-      "Attributes": [
-        {
-          "ItemId": "ksi-inr",
-          "Section": "Incident Response",
-          "Service": "gcp"
-        }
-      ],
-      "Checks": [
-        "iam_organization_essential_contacts_configured",
-        "iam_account_access_approval_enabled",
-        "logging_log_metric_filter_and_alert_for_audit_configuration_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_bucket_permission_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_custom_role_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_project_ownership_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_sql_instance_configuration_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_vpc_firewall_rule_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_vpc_network_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_vpc_network_route_changes_enabled"
-      ]
-    },
-    {
-      "Id": "ksi-mla",
-      "Name": "KSI-MLA: Monitoring, Logging, and Auditing",
-      "Description": "A secure cloud service offering will monitor, log, and audit all important events, activity, and changes",
-      "Attributes": [
-        {
-          "ItemId": "ksi-mla",
-          "Section": "Monitoring, Logging, and Auditing",
-          "Service": "gcp"
-        }
-      ],
-      "Checks": [
-        "cloudsql_instance_postgres_enable_pgaudit_flag",
-        "cloudsql_instance_postgres_log_connections_flag",
-        "cloudsql_instance_postgres_log_disconnections_flag",
-        "cloudsql_instance_postgres_log_error_verbosity_flag",
-        "cloudsql_instance_postgres_log_min_duration_statement_flag",
-        "cloudsql_instance_postgres_log_min_error_statement_flag",
-        "cloudsql_instance_postgres_log_min_messages_flag",
-        "cloudsql_instance_postgres_log_statement_flag",
-        "cloudsql_instance_sqlserver_trace_flag",
-        "cloudstorage_bucket_log_retention_policy_lock",
-        "compute_loadbalancer_logging_enabled",
-        "compute_network_dns_logging_enabled",
-        "compute_subnet_flow_logs_enabled",
-        "iam_audit_logs_enabled",
-        "logging_log_metric_filter_and_alert_for_audit_configuration_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_bucket_permission_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_custom_role_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_project_ownership_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_sql_instance_configuration_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_vpc_firewall_rule_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_vpc_network_changes_enabled",
-        "logging_log_metric_filter_and_alert_for_vpc_network_route_changes_enabled",
-        "logging_sink_created"
-      ]
-    },
-    {
-      "Id": "ksi-piy",
-      "Name": "KSI-PIY: Policy and Inventory",
-      "Description": "A secure cloud service offering will have intentional, organized, universal guidance for how every information resource, including personnel, is secured",
-      "Attributes": [
-        {
-          "ItemId": "ksi-piy",
-          "Section": "Policy and Inventory",
-          "Service": "gcp"
-        }
-      ],
-      "Checks": [
-        "iam_cloud_asset_inventory_enabled",
-        "iam_organization_essential_contacts_configured",
-        "iam_audit_logs_enabled",
-        "compute_project_os_login_enabled",
-        "compute_instance_serial_ports_in_use",
-        "compute_instance_block_project_wide_ssh_keys_disabled",
-        "logging_sink_created"
-      ]
-    },
-    {
-      "Id": "ksi-rpl",
-      "Name": "KSI-RPL: Recovery Planning",
-      "Description": "A secure cloud service offering will define, maintain, and test incident response plan(s) and recovery capabilities to ensure minimal service disruption and data loss",
-      "Attributes": [
-        {
-          "ItemId": "ksi-rpl",
-          "Section": "Recovery Planning",
-          "Service": "gcp"
-        }
-      ],
-      "Checks": [
-        "cloudsql_instance_automated_backups",
-        "cloudstorage_bucket_log_retention_policy_lock",
-        "cloudstorage_bucket_versioning_enabled",
-        "cloudstorage_bucket_lifecycle_management_enabled"
-      ]
-    },
-    {
-      "Id": "ksi-svc",
-      "Name": "KSI-SVC: Service Configuration",
-      "Description": "A secure cloud service offering will follow FedRAMP encryption policies, continuously verify information resource integrity, and restrict access to third-party information resources",
-      "Attributes": [
-        {
-          "ItemId": "ksi-svc",
-          "Section": "Service Configuration",
-          "Service": "gcp"
-        }
-      ],
-      "Checks": [
-        "bigquery_dataset_cmk_encryption",
-        "bigquery_table_cmk_encryption",
-        "cloudsql_instance_mysql_local_infile_flag",
-        "cloudsql_instance_mysql_skip_show_database_flag",
-        "cloudsql_instance_postgres_enable_pgaudit_flag",
-        "cloudsql_instance_postgres_log_connections_flag",
-        "cloudsql_instance_postgres_log_disconnections_flag",
-        "cloudsql_instance_postgres_log_error_verbosity_flag",
-        "cloudsql_instance_postgres_log_min_duration_statement_flag",
-        "cloudsql_instance_postgres_log_min_error_statement_flag",
-        "cloudsql_instance_postgres_log_min_messages_flag",
-        "cloudsql_instance_postgres_log_statement_flag",
-        "cloudsql_instance_sqlserver_contained_database_authentication_flag",
-        "cloudsql_instance_sqlserver_cross_db_ownership_chaining_flag",
-        "cloudsql_instance_sqlserver_external_scripts_enabled_flag",
-        "cloudsql_instance_sqlserver_remote_access_flag",
-        "cloudsql_instance_sqlserver_trace_flag",
-        "cloudsql_instance_sqlserver_user_connections_flag",
-        "cloudsql_instance_sqlserver_user_options_flag",
-        "cloudsql_instance_ssl_connections",
-        "compute_instance_encryption_with_csek_enabled",
-        "compute_instance_shielded_vm_enabled",
-        "dataproc_encrypted_with_cmks_disabled",
-        "dns_dnssec_disabled",
-        "dns_rsasha1_in_use_to_key_sign_in_dnssec",
-        "dns_rsasha1_in_use_to_zone_sign_in_dnssec",
-        "kms_key_not_publicly_accessible",
-        "kms_key_rotation_enabled"
-      ]
-    },
-    {
-      "Id": "ksi-tpr",
-      "Name": "KSI-TPR: Third-Party Information Resources",
-      "Description": "A secure cloud service offering will understand, monitor, and manage supply chain risks from third-party information resources",
-      "Attributes": [
-        {
-          "ItemId": "ksi-tpr",
-          "Section": "Third-Party Information Resources",
-          "Service": "gcp"
-        }
-      ],
-      "Checks": [
-        "artifacts_container_analysis_enabled",
-        "gcr_container_scanning_enabled",
-        "compute_public_address_shodan",
-        "cloudsql_instance_automated_backups",
-        "iam_sa_user_managed_key_rotate_90_days",
-        "iam_service_account_unused",
-        "gemini_api_disabled"
-      ]
-    },
-    {
-      "Id": "ksi-iam-07",
-      "Name": "KSI-IAM-07: Account Lifecycle Management",
-      "Description": "Securely manage the lifecycle and privileges of all accounts, roles, and groups",
-      "Attributes": [
-        {
-          "ItemId": "ksi-iam-07",
-          "Section": "Identity and Access Management",
-          "Service": "gcp"
-        }
-      ],
-      "Checks": [
-        "apikeys_key_rotated_in_90_days",
-        "iam_sa_user_managed_key_rotate_90_days",
-        "iam_sa_user_managed_key_unused",
-        "iam_service_account_unused",
-        "compute_instance_default_service_account_in_use"
-      ]
-    },
-    {
-      "Id": "ksi-mla-07",
-      "Name": "KSI-MLA-07: Monitoring and Logging Inventory",
-      "Description": "Maintain a list of information resources and event types that will be monitored, logged, and audited",
-      "Attributes": [
-        {
-          "ItemId": "ksi-mla-07",
-          "Section": "Monitoring, Logging, and Auditing",
-          "Service": "gcp"
-        }
-      ],
-      "Checks": [
-        "iam_audit_logs_enabled",
-        "iam_cloud_asset_inventory_enabled",
-        "logging_sink_created",
-        "compute_subnet_flow_logs_enabled",
-        "compute_network_dns_logging_enabled"
-      ]
-    }
-  ]
-}

From 3860cd3dceab27381c0e56595e367e39ddc2ef7e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Mon, 14 Sep 2026 16:35:05 +0200
Subject: [PATCH 58/77] feat(compliance): FedRAMP 20x Class C FRR + AWS checks
 (#12808)

---
 README.md                                     |   10 +-
 contrib/k8s/helm/prowler-api/values.yaml      |    8 +
 docs/developer-guide/configurable-checks.mdx  |    2 +
 .../cli/tutorials/configuration_file.mdx      |   10 +
 permissions/prowler-additions-policy.json     |    1 +
 .../cloudformation/prowler-scan-role.yml      |    2 +
 .../aws-inspector2-fips-checks.added.md       |    1 +
 .../fedramp-20x-frr-class-c-2026.added.md     |    1 +
 .../fedramp_20x_frr_class_c_2026.json         | 2970 +++++++++++++++++
 prowler/config/config.yaml                    |    8 +
 prowler/config/schema/aws.py                  |   14 +
 .../__init__.py                               |    0
 ...v2_listener_fips_tls_enabled.metadata.json |   43 +
 .../elbv2_listener_fips_tls_enabled.py        |   35 +
 .../__init__.py                               |    0
 ...findings_kev_within_due_date.metadata.json |   42 +
 ...or2_active_findings_kev_within_due_date.py |   66 +
 .../__init__.py                               |    0
 ...wn_exploited_vulnerabilities.metadata.json |   43 +
 ...ings_no_known_exploited_vulnerabilities.py |   57 +
 .../__init__.py                               |    0
 ...tive_findings_within_max_age.metadata.json |   43 +
 ...spector2_active_findings_within_max_age.py |   51 +
 .../__init__.py                               |    0
 ...r2_coverage_recently_scanned.metadata.json |   43 +
 .../inspector2_coverage_recently_scanned.py   |   57 +
 .../__init__.py                               |    0
 ..._coverage_scan_status_active.metadata.json |   42 +
 .../inspector2_coverage_scan_status_active.py |   46 +
 .../services/inspector2/inspector2_service.py |  201 ++
 .../aws/services/inspector2/lib/__init__.py   |    0
 .../inspector2/lib/vulnerabilities.py         |    8 +
 .../__init__.py                               |    0
 ...fips_security_policy_enabled.metadata.json |   42 +
 ...fer_server_fips_security_policy_enabled.py |   38 +
 tests/config/config_test.py                   |    2 +
 tests/config/fixtures/config.yaml             |    8 +
 .../elbv2_listener_fips_tls_enabled_test.py   |  156 +
 ...ctive_findings_kev_within_due_date_test.py |  136 +
 ...no_known_exploited_vulnerabilities_test.py |  149 +
 ...or2_active_findings_within_max_age_test.py |  140 +
 ...spector2_coverage_recently_scanned_test.py |  170 +
 ...ector2_coverage_scan_status_active_test.py |  132 +
 .../inspector2/inspector2_service_test.py     |  220 +-
 ...erver_fips_security_policy_enabled_test.py |  111 +
 45 files changed, 5100 insertions(+), 8 deletions(-)
 create mode 100644 prowler/changelog.d/aws-inspector2-fips-checks.added.md
 create mode 100644 prowler/changelog.d/fedramp-20x-frr-class-c-2026.added.md
 create mode 100644 prowler/compliance/fedramp_20x_frr_class_c_2026.json
 create mode 100644 prowler/providers/aws/services/elbv2/elbv2_listener_fips_tls_enabled/__init__.py
 create mode 100644 prowler/providers/aws/services/elbv2/elbv2_listener_fips_tls_enabled/elbv2_listener_fips_tls_enabled.metadata.json
 create mode 100644 prowler/providers/aws/services/elbv2/elbv2_listener_fips_tls_enabled/elbv2_listener_fips_tls_enabled.py
 create mode 100644 prowler/providers/aws/services/inspector2/inspector2_active_findings_kev_within_due_date/__init__.py
 create mode 100644 prowler/providers/aws/services/inspector2/inspector2_active_findings_kev_within_due_date/inspector2_active_findings_kev_within_due_date.metadata.json
 create mode 100644 prowler/providers/aws/services/inspector2/inspector2_active_findings_kev_within_due_date/inspector2_active_findings_kev_within_due_date.py
 create mode 100644 prowler/providers/aws/services/inspector2/inspector2_active_findings_no_known_exploited_vulnerabilities/__init__.py
 create mode 100644 prowler/providers/aws/services/inspector2/inspector2_active_findings_no_known_exploited_vulnerabilities/inspector2_active_findings_no_known_exploited_vulnerabilities.metadata.json
 create mode 100644 prowler/providers/aws/services/inspector2/inspector2_active_findings_no_known_exploited_vulnerabilities/inspector2_active_findings_no_known_exploited_vulnerabilities.py
 create mode 100644 prowler/providers/aws/services/inspector2/inspector2_active_findings_within_max_age/__init__.py
 create mode 100644 prowler/providers/aws/services/inspector2/inspector2_active_findings_within_max_age/inspector2_active_findings_within_max_age.metadata.json
 create mode 100644 prowler/providers/aws/services/inspector2/inspector2_active_findings_within_max_age/inspector2_active_findings_within_max_age.py
 create mode 100644 prowler/providers/aws/services/inspector2/inspector2_coverage_recently_scanned/__init__.py
 create mode 100644 prowler/providers/aws/services/inspector2/inspector2_coverage_recently_scanned/inspector2_coverage_recently_scanned.metadata.json
 create mode 100644 prowler/providers/aws/services/inspector2/inspector2_coverage_recently_scanned/inspector2_coverage_recently_scanned.py
 create mode 100644 prowler/providers/aws/services/inspector2/inspector2_coverage_scan_status_active/__init__.py
 create mode 100644 prowler/providers/aws/services/inspector2/inspector2_coverage_scan_status_active/inspector2_coverage_scan_status_active.metadata.json
 create mode 100644 prowler/providers/aws/services/inspector2/inspector2_coverage_scan_status_active/inspector2_coverage_scan_status_active.py
 create mode 100644 prowler/providers/aws/services/inspector2/lib/__init__.py
 create mode 100644 prowler/providers/aws/services/inspector2/lib/vulnerabilities.py
 create mode 100644 prowler/providers/aws/services/transfer/transfer_server_fips_security_policy_enabled/__init__.py
 create mode 100644 prowler/providers/aws/services/transfer/transfer_server_fips_security_policy_enabled/transfer_server_fips_security_policy_enabled.metadata.json
 create mode 100644 prowler/providers/aws/services/transfer/transfer_server_fips_security_policy_enabled/transfer_server_fips_security_policy_enabled.py
 create mode 100644 tests/providers/aws/services/elbv2/elbv2_listener_fips_tls_enabled/elbv2_listener_fips_tls_enabled_test.py
 create mode 100644 tests/providers/aws/services/inspector2/inspector2_active_findings_kev_within_due_date/inspector2_active_findings_kev_within_due_date_test.py
 create mode 100644 tests/providers/aws/services/inspector2/inspector2_active_findings_no_known_exploited_vulnerabilities/inspector2_active_findings_no_known_exploited_vulnerabilities_test.py
 create mode 100644 tests/providers/aws/services/inspector2/inspector2_active_findings_within_max_age/inspector2_active_findings_within_max_age_test.py
 create mode 100644 tests/providers/aws/services/inspector2/inspector2_coverage_recently_scanned/inspector2_coverage_recently_scanned_test.py
 create mode 100644 tests/providers/aws/services/inspector2/inspector2_coverage_scan_status_active/inspector2_coverage_scan_status_active_test.py
 create mode 100644 tests/providers/aws/services/transfer/transfer_server_fips_security_policy_enabled/transfer_server_fips_security_policy_enabled_test.py

diff --git a/README.md b/README.md
index ad69260cb0..2851101f05 100644
--- a/README.md
+++ b/README.md
@@ -126,12 +126,12 @@ Every AWS provider scan will enqueue an Attack Paths ingestion job automatically
 
 | Provider | Checks | Services | [Compliance Frameworks](https://docs.prowler.com/user-guide/compliance/tutorials/compliance) | [Categories](https://docs.prowler.com/user-guide/cli/tutorials/misc#categories) | Support | Interface |
 |---|---|---|---|---|---|---|
-| AWS | 639 | 86 | 47 | 19 | Official | UI, API, CLI |
-| Azure | 191 | 22 | 21 | 16 | Official | UI, API, CLI |
-| GCP | 109 | 20 | 19 | 12 | Official | UI, API, CLI |
-| Kubernetes | 92 | 7 | 8 | 11 | Official | UI, API, CLI |
+| AWS | 662 | 86 | 50 | 19 | Official | UI, API, CLI |
+| Azure | 191 | 22 | 25 | 16 | Official | UI, API, CLI |
+| GCP | 110 | 20 | 22 | 12 | Official | UI, API, CLI |
+| Kubernetes | 92 | 7 | 11 | 11 | Official | UI, API, CLI |
 | GitHub | 24 | 3 | 2 | 5 | Official | UI, API, CLI |
-| M365 | 143 | 10 | 6 | 10 | Official | UI, API, CLI |
+| M365 | 144 | 10 | 9 | 10 | Official | UI, API, CLI |
 | OCI | 52 | 14 | 5 | 10 | Official | UI, API, CLI |
 | Alibaba Cloud | 63 | 9 | 6 | 9 | Official | UI, API, CLI |
 | Cloudflare | 29 | 3 | 2 | 5 | Official | UI, API, CLI |
diff --git a/contrib/k8s/helm/prowler-api/values.yaml b/contrib/k8s/helm/prowler-api/values.yaml
index a6074c7852..5332f9d2eb 100644
--- a/contrib/k8s/helm/prowler-api/values.yaml
+++ b/contrib/k8s/helm/prowler-api/values.yaml
@@ -212,6 +212,14 @@ mainConfig:
     # MEDIUM
     ecr_repository_vulnerability_minimum_severity: "MEDIUM"
 
+    # AWS Inspector2
+    # aws.inspector2_coverage_recently_scanned
+    # Maximum days since Inspector2 last scanned an actively covered resource
+    inspector2_max_days_since_last_scan: 3
+    # aws.inspector2_active_findings_within_max_age
+    # Maximum days an Inspector2 finding can stay active since it was first observed
+    inspector2_active_finding_max_age_days: 192
+
     # AWS Trusted Advisor
     # aws.trustedadvisor_premium_support_plan_subscribed
     verify_premium_support_plans: True
diff --git a/docs/developer-guide/configurable-checks.mdx b/docs/developer-guide/configurable-checks.mdx
index 04a31a8cde..c44f82c5aa 100644
--- a/docs/developer-guide/configurable-checks.mdx
+++ b/docs/developer-guide/configurable-checks.mdx
@@ -154,6 +154,8 @@ Only fields with a numeric range, a fixed value set, or a length cap are listed.
 | `max_days_secret_unused` | `7..365` days | |
 | `max_days_secret_unrotated` | `1..180` days | NIST IA-5: rotate quarterly; CIS ≤90 |
 | `min_kinesis_stream_retention_hours` | `24..8760` h | 1 day .. 1 year |
+| `inspector2_max_days_since_last_scan` | `1..90` days | |
+| `inspector2_active_finding_max_age_days` | `1..365` days | Default `192` matches the FedRAMP 20x rule that marks vulnerabilities still open after 192 days as accepted |
 | `shodan_api_key` | ≤512 chars | |
 
 ### Azure
diff --git a/docs/user-guide/cli/tutorials/configuration_file.mdx b/docs/user-guide/cli/tutorials/configuration_file.mdx
index ac21f5bc6c..a1c14e6626 100644
--- a/docs/user-guide/cli/tutorials/configuration_file.mdx
+++ b/docs/user-guide/cli/tutorials/configuration_file.mdx
@@ -91,6 +91,8 @@ The following list includes all the AWS checks with configurable variables that
 | `iam_user_access_not_stale_to_sagemaker`                               | `max_unused_sagemaker_access_days`                | Integer         | `90`                                                                                                                                 |
 | `iam_user_accesskey_unused`                                            | `max_unused_access_keys_days`                     | Integer         | `45`                                                                                                                                 |
 | `iam_user_console_access_unused`                                       | `max_console_access_days`                         | Integer         | `45`                                                                                                                                 |
+| `inspector2_active_findings_within_max_age`                            | `inspector2_active_finding_max_age_days`          | Integer         | `192`                                                                                                                                |
+| `inspector2_coverage_recently_scanned`                                 | `inspector2_max_days_since_last_scan`             | Integer         | `3`                                                                                                                                  |
 | `kinesis_stream_data_retention_period`                                 | `min_kinesis_stream_retention_hours`              | Integer         | `168`                                                                                                                                |
 | `neptune_cluster_backup_enabled`                                       | `minimum_backup_retention_period`                 | Integer         | `7`                                                                                                                                  |
 | `opensearch_service_domains_not_publicly_accessible`                   | `trusted_ips`                                     | List of Strings | `[]`                                                                                                                                 |
@@ -490,6 +492,14 @@ aws:
   # MEDIUM
   ecr_repository_vulnerability_minimum_severity: "MEDIUM"
 
+  # AWS Inspector2
+  # aws.inspector2_coverage_recently_scanned
+  # Maximum days since Inspector2 last scanned an actively covered resource
+  inspector2_max_days_since_last_scan: 3
+  # aws.inspector2_active_findings_within_max_age
+  # Maximum days an Inspector2 finding can stay active since it was first observed
+  inspector2_active_finding_max_age_days: 192
+
   # AWS Trusted Advisor
   # aws.trustedadvisor_premium_support_plan_subscribed
   verify_premium_support_plans: True
diff --git a/permissions/prowler-additions-policy.json b/permissions/prowler-additions-policy.json
index 25ea46b09d..be17979d2e 100644
--- a/permissions/prowler-additions-policy.json
+++ b/permissions/prowler-additions-policy.json
@@ -38,6 +38,7 @@
         "glue:GetSecurityConfiguration*",
         "glue:SearchTables",
         "glue:GetMLTransforms",
+        "inspector2:BatchGetFindingDetails",
         "lambda:GetFunction*",
         "lambda:GetLayerVersion",
         "logs:FilterLogEvents",
diff --git a/permissions/templates/cloudformation/prowler-scan-role.yml b/permissions/templates/cloudformation/prowler-scan-role.yml
index d04c8f25d6..d31dea9846 100644
--- a/permissions/templates/cloudformation/prowler-scan-role.yml
+++ b/permissions/templates/cloudformation/prowler-scan-role.yml
@@ -210,6 +210,7 @@ Resources:
                   - "glue:GetSecurityConfiguration*"
                   - "glue:SearchTables"
                   - "glue:GetMLTransforms"
+                  - "inspector2:BatchGetFindingDetails"
                   - "lambda:GetFunction*"
                   - "logs:FilterLogEvents"
                   - "lightsail:GetRelationalDatabases"
@@ -479,6 +480,7 @@ Resources:
                           - "glue:GetSecurityConfiguration*"
                           - "glue:SearchTables"
                           - "glue:GetMLTransforms"
+                          - "inspector2:BatchGetFindingDetails"
                           - "lambda:GetFunction*"
                           - "logs:FilterLogEvents"
                           - "lightsail:GetRelationalDatabases"
diff --git a/prowler/changelog.d/aws-inspector2-fips-checks.added.md b/prowler/changelog.d/aws-inspector2-fips-checks.added.md
new file mode 100644
index 0000000000..40c36f8062
--- /dev/null
+++ b/prowler/changelog.d/aws-inspector2-fips-checks.added.md
@@ -0,0 +1 @@
+`inspector2_coverage_scan_status_active`, `inspector2_coverage_recently_scanned`, `inspector2_active_findings_no_known_exploited_vulnerabilities`, `inspector2_active_findings_kev_within_due_date`, `inspector2_active_findings_within_max_age`, `elbv2_listener_fips_tls_enabled` and `transfer_server_fips_security_policy_enabled` checks for AWS provider, covering FedRAMP 20x Class C vulnerability detection, CISA KEV remediation and FIPS cryptography rules; the KEV checks require `inspector2:BatchGetFindingDetails`, now in the Prowler additions policy
diff --git a/prowler/changelog.d/fedramp-20x-frr-class-c-2026.added.md b/prowler/changelog.d/fedramp-20x-frr-class-c-2026.added.md
new file mode 100644
index 0000000000..147ad052f3
--- /dev/null
+++ b/prowler/changelog.d/fedramp-20x-frr-class-c-2026.added.md
@@ -0,0 +1 @@
+`FedRAMP-20x-FRR-Class-C` universal compliance framework (`fedramp_20x_frr_class_c_2026`) with the 158 provider rules of the FedRAMP 20x Class C ruleset from the FedRAMP Consolidated Rules 2026 for AWS, Azure, GCP, Kubernetes and M365
diff --git a/prowler/compliance/fedramp_20x_frr_class_c_2026.json b/prowler/compliance/fedramp_20x_frr_class_c_2026.json
new file mode 100644
index 0000000000..f4db7f37bd
--- /dev/null
+++ b/prowler/compliance/fedramp_20x_frr_class_c_2026.json
@@ -0,0 +1,2970 @@
+{
+  "framework": "FedRAMP-20x-FRR-Class-C",
+  "name": "FedRAMP 20x Class C Rules (FRR) 2026",
+  "version": "2026.09.13.02",
+  "description": "FedRAMP Rules (FRR) that cloud service providers must follow for a FedRAMP 20x Class C Certification, from the FedRAMP Consolidated Rules for 2026 (release 2026.09.13.02, https://github.com/FedRAMP/rules). Covers the 158 provider rules of the 15 rulesets on the 20x Class C reference page; rules that only bind FedRAMP, agencies, assessors or advisors are excluded, and class-varying rules use their Class C statement. Most rules are program and process obligations that need manual evidence. The Key Security Indicators of the same ruleset are in the fedramp_20x_ksi_2026 framework.",
+  "icon": "fedramp",
+  "attributes_metadata": [
+    {
+      "key": "Ruleset",
+      "label": "Ruleset",
+      "type": "str",
+      "required": true,
+      "enum": [
+        "AFC: Addressing FedRAMP Communication",
+        "CCM: Collaborative Continuous Monitoring",
+        "CDS: Certification Data Sharing",
+        "CMU: Cryptographic Module Use",
+        "CPO: Certification Package Overview",
+        "FRC: FedRAMP Certification",
+        "IEC: Incident Evaluation and Communication",
+        "IVV: Independent Verification and Validation",
+        "MAS: Minimum Assessment Scope",
+        "MKT: Marketplace Listing",
+        "SCG: Secure Configuration Guide",
+        "SCN: Significant Change Notification",
+        "SDR: Security Decision Record",
+        "VDR: Vulnerability Detection and Response",
+        "VER: Vulnerability Evaluation and Reporting"
+      ]
+    },
+    {
+      "key": "Subset",
+      "label": "Subset",
+      "type": "str",
+      "required": true
+    },
+    {
+      "key": "Force",
+      "label": "Force",
+      "type": "str",
+      "required": true,
+      "enum": [
+        "MUST",
+        "MUST NOT",
+        "SHOULD",
+        "SHOULD NOT",
+        "MAY"
+      ]
+    }
+  ],
+  "outputs": {
+    "table_config": {
+      "group_by": "Ruleset"
+    },
+    "pdf_config": {
+      "language": "en",
+      "primary_color": "#1B3A5C",
+      "secondary_color": "#2E6DA4",
+      "bg_color": "#F0F4FA",
+      "group_by_field": "Ruleset",
+      "sections": [
+        "AFC: Addressing FedRAMP Communication",
+        "CCM: Collaborative Continuous Monitoring",
+        "CDS: Certification Data Sharing",
+        "CMU: Cryptographic Module Use",
+        "CPO: Certification Package Overview",
+        "FRC: FedRAMP Certification",
+        "IEC: Incident Evaluation and Communication",
+        "IVV: Independent Verification and Validation",
+        "MAS: Minimum Assessment Scope",
+        "MKT: Marketplace Listing",
+        "SCG: Secure Configuration Guide",
+        "SCN: Significant Change Notification",
+        "SDR: Security Decision Record",
+        "VDR: Vulnerability Detection and Response",
+        "VER: Vulnerability Evaluation and Reporting"
+      ],
+      "section_short_names": {
+        "AFC: Addressing FedRAMP Communication": "AFC",
+        "CCM: Collaborative Continuous Monitoring": "CCM",
+        "CDS: Certification Data Sharing": "CDS",
+        "CMU: Cryptographic Module Use": "CMU",
+        "CPO: Certification Package Overview": "CPO",
+        "FRC: FedRAMP Certification": "FRC",
+        "IEC: Incident Evaluation and Communication": "IEC",
+        "IVV: Independent Verification and Validation": "IVV",
+        "MAS: Minimum Assessment Scope": "MAS",
+        "MKT: Marketplace Listing": "MKT",
+        "SCG: Secure Configuration Guide": "SCG",
+        "SCN: Significant Change Notification": "SCN",
+        "SDR: Security Decision Record": "SDR",
+        "VDR: Vulnerability Detection and Response": "VDR",
+        "VER: Vulnerability Evaluation and Reporting": "VER"
+      },
+      "charts": [
+        {
+          "id": "ruleset_compliance",
+          "type": "horizontal_bar",
+          "group_by": "Ruleset",
+          "title": "Compliance Score by FRR Ruleset",
+          "y_label": "Ruleset",
+          "x_label": "Compliance %",
+          "value_source": "compliance_percent",
+          "color_mode": "by_value"
+        }
+      ],
+      "filter": {
+        "only_failed": true,
+        "include_manual": false
+      }
+    }
+  },
+  "requirements": [
+    {
+      "id": "AFC-CSO-INB",
+      "name": "Maintain a FedRAMP Security Inbox",
+      "description": "Providers MUST establish and maintain an email address to receive messages from FedRAMP; this inbox is a FedRAMP Security Inbox (FSI).",
+      "attributes": {
+        "Ruleset": "AFC: Addressing FedRAMP Communication",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "AFC-CSO-NOC",
+      "name": "Notification of Changes",
+      "description": "Providers MUST immediately notify FedRAMP of any changes to the email address for their FedRAMP Security Inbox.",
+      "attributes": {
+        "Ruleset": "AFC: Addressing FedRAMP Communication",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "AFC-CSO-TFG",
+      "name": "Trust @fedramp.gov and @gsa.gov",
+      "description": "Providers MUST treat any email originating from an @fedramp.gov or @gsa.gov email address as if it was sent from FedRAMP by default; if such a message is confirmed to originate from someone other than FedRAMP then the FedRAMP Security Inbox rules no longer apply.",
+      "attributes": {
+        "Ruleset": "AFC: Addressing FedRAMP Communication",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "AFC-CSO-RCV",
+      "name": "Receive Email Without Disruption",
+      "description": "Providers MUST receive and react to email messages from FedRAMP without disruption and without requiring additional actions from FedRAMP.",
+      "attributes": {
+        "Ruleset": "AFC: Addressing FedRAMP Communication",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "AFC-CSO-CRA",
+      "name": "Complete Required Actions",
+      "description": "Providers MUST complete the required actions in Emergency or Emergency Test designated messages sent by FedRAMP within the timeframe included in the message.",
+      "attributes": {
+        "Ruleset": "AFC: Addressing FedRAMP Communication",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "AFC-CSO-EMR",
+      "name": "Emergency Message Routing",
+      "description": "Providers MUST route Emergency designated messages sent by FedRAMP to a senior security official for their awareness.",
+      "attributes": {
+        "Ruleset": "AFC: Addressing FedRAMP Communication",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "AFC-CSO-IMA",
+      "name": "Important Message Actions",
+      "description": "Providers SHOULD complete the required actions in Important designated messages sent by FedRAMP within the timeframe specified in the message.",
+      "attributes": {
+        "Ruleset": "AFC: Addressing FedRAMP Communication",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "AFC-CSO-ACK",
+      "name": "Acknowledge Receipt",
+      "description": "Providers SHOULD promptly and automatically acknowledge the receipt of messages received from FedRAMP in their FedRAMP Security Inbox.",
+      "attributes": {
+        "Ruleset": "AFC: Addressing FedRAMP Communication",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-OCR-AVL",
+      "name": "Report Availability",
+      "description": "Providers MUST supply an Ongoing Certification Report to all necessary parties every 3 months, covering the entire period since the previous summary, in a consistent format that is human readable; this report MUST include high-level summaries of at least the following information (if applicable): Changes to FedRAMP Certification Data; Planned changes to FedRAMP Certification Data during at least the next 3 months; Accepted vulnerabilities; Transformative changes; Updated recommendations or best practices for security, configuration, usage, or similar aspects of the cloud service offering; A list of all agencies that are directly using the product; FedRAMP Reportable Incidents or an attestation that no such incidents occurred; Lessons learned and changes planned or made as a result of FedRAMP Reportable Incidents (if such occurred)",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "OCR: Ongoing Certification Reports",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-OCR-NRD",
+      "name": "Next Report Date",
+      "description": "Providers MUST supply the target date for their next Ongoing Certification Report with other public FedRAMP Certification Data.",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "OCR: Ongoing Certification Reports",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-OCR-FBM",
+      "name": "Feedback Mechanism",
+      "description": "Providers MUST supply an asynchronous mechanism for all necessary parties to provide feedback or ask questions about each Ongoing Certification Report.",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "OCR: Ongoing Certification Reports",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-OCR-AFS",
+      "name": "Anonymized Feedback Summary",
+      "description": "Providers MUST supply an anonymized and desensitized summary of the feedback, questions, and answers about each Ongoing Certification Report as an addendum to the Ongoing Certification Report OR in the next Ongoing Certification Report.",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "OCR: Ongoing Certification Reports",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-OCR-LSI",
+      "name": "Limit Sensitive Information",
+      "description": "Providers MUST NOT irresponsibly disclose sensitive information in an Ongoing Certification Report that would likely have an adverse effect on the cloud service offering.",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "OCR: Ongoing Certification Reports",
+        "Force": "MUST NOT"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-OCR-SOR",
+      "name": "Spread Out Reports",
+      "description": "Providers SHOULD establish a regular 3 month cycle for Ongoing Certification Reports that is spread out from the beginning, middle, or end of each quarter.",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "OCR: Ongoing Certification Reports",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-OCR-RPS",
+      "name": "Responsible Public Certification Report Sharing",
+      "description": "Providers MAY responsibly supply some or all of the information an Ongoing Certification Report to the public or other parties if the provider determines doing so will NOT likely have an adverse effect on the cloud service offering.",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "OCR: Ongoing Certification Reports",
+        "Force": "MAY"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-QTR-MTG",
+      "name": "Quarterly Review Meeting",
+      "description": "Providers with Class C Certifications MUST host a synchronous Quarterly Review every 3 months, open to all necessary parties, to review aspects of the most recent Ongoing Certification Reports that the provider determines are of the most relevance to agencies.",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "QTR: Quarterly Reviews",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-QTR-REG",
+      "name": "Meeting Registration Info",
+      "description": "Providers MUST supply either a registration link or a downloadable calendar file with meeting information for Quarterly Reviews to all necessary parties.",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "QTR: Quarterly Reviews",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-QTR-NRD",
+      "name": "Next Review Date",
+      "description": "Providers MUST publicly supply the target date for their next Quarterly Review with other public FedRAMP Certification Data.",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "QTR: Quarterly Reviews",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-QTR-NID",
+      "name": "No Irresponsible Disclosure",
+      "description": "Providers MUST NOT irresponsibly disclose sensitive information in a Quarterly Review that would likely have an adverse effect on the cloud service offering.",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "QTR: Quarterly Reviews",
+        "Force": "MUST NOT"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-QTR-SAR",
+      "name": "Schedule Around Reports",
+      "description": "Providers SHOULD regularly schedule Quarterly Reviews to occur at least 3 business days after releasing an Ongoing Certification Report AND within 10 business days of such release.",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "QTR: Quarterly Reviews",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-QTR-ACT",
+      "name": "Additional Content",
+      "description": "Providers SHOULD supply additional information in Quarterly Reviews that the provider determines is of interest, use, or otherwise relevant to agencies.",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "QTR: Quarterly Reviews",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-QTR-RTR",
+      "name": "Record/Transcribe Reviews",
+      "description": "Providers SHOULD record or transcribe Quarterly Reviews and supply them to all necessary parties.",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "QTR: Quarterly Reviews",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-QTR-RTP",
+      "name": "Restrict Third Parties",
+      "description": "Providers SHOULD NOT invite third parties to attend Quarterly Reviews intended for agencies unless they have specific relevance.",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "QTR: Quarterly Reviews",
+        "Force": "SHOULD NOT"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-QTR-SRR",
+      "name": "Share Recordings Responsibly",
+      "description": "Providers MAY responsibly supply recordings or transcriptions of Quarterly Reviews to the public or other parties ONLY if the provider removes all agency information (comments, questions, names, etc.) AND determines doing so will NOT likely have an adverse effect on the cloud service offering.",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "QTR: Quarterly Reviews",
+        "Force": "MAY"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CCM-QTR-SCR",
+      "name": "Share Content Responsibly",
+      "description": "Providers MAY responsibly supply content prepared for a Quarterly Review to the public or other parties if the provider determines doing so will NOT likely have an adverse effect on the cloud service offering.",
+      "attributes": {
+        "Ruleset": "CCM: Collaborative Continuous Monitoring",
+        "Subset": "QTR: Quarterly Reviews",
+        "Force": "MAY"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-CSO-PUB",
+      "name": "Public Information",
+      "description": "Providers MUST publicly share up-to-date information about the cloud service offering in both human-readable and JSON formats, including at least the following information that is available and applicable: FedRAMP ID; Service Model; Deployment Model; Business Category; UEI Number; Sales Contact Information; Security Contact Information; Product Website Link; Link to Product Logo; Overall Service Description; Detailed list of specific services and their security categories (see CDS-CSO-SVC (Public Service List) (Service List)); Link to Secure Configuration Guidance; Overview of documentation supplied by the provider for the cloud service offering; Link to Trust Center landing page that includes instructions on accessing information in the trust center; Next Ongoing Certification Report date (see CCM-OCR-NRD (Next Report Date)); Current FedRAMP Recognized independent assessment service",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-CSO-SVC",
+      "name": "Public Service List",
+      "description": "Providers MUST publicly share a detailed list of specific services and their security categories that are included in the cloud service offering using clear feature or service names that align with standard public marketing materials; this list MUST be complete enough for a potential customer to determine which services are and are not included in the FedRAMP Minimum Assessment Scope without requesting access to underlying FedRAMP Certification Data.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-CSO-FID",
+      "name": "Always Include FedRAMP ID",
+      "description": "Providers MUST always include the FedRAMP ID of the related cloud service offering in all FedRAMP Certification Data once assigned, including all reports, notifications, and other communication that results from FedRAMP rules.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-CSO-FRC",
+      "name": "FedRAMP Certification Reports",
+      "description": "Providers MUST include FedRAMP Certification Reports with their FedRAMP Certification Data without inappropriate modifications, and make such reports available within 2 weeks of receiving the materials from FedRAMP.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-CSO-AVR",
+      "name": "Availability Reporting",
+      "description": "Providers with Class C Certifications MUST maintain a web service, available to all necessary parties, that indicates current and historical availability of core services within the cloud service offering over at least the past 30 days, including availability incidents, in both human-readable and machine-readable formats; this service MUST be available even if the primary cloud service offering is unavailable.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-CSO-UTC",
+      "name": "Use Trust Centers",
+      "description": "Providers MUST use a FedRAMP-compatible trust center to store and share FedRAMP Certification Data with all necessary parties.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-CSO-CBF",
+      "name": "Consistency Between Formats",
+      "description": "Providers MUST use automation to ensure information remains consistent between human-readable and machine-readable formats when FedRAMP Certification Data is provided in both formats.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-CSO-RIS",
+      "name": "Responsible Information Sharing",
+      "description": "Providers MUST provide sufficient information in FedRAMP Certification Data to support agency authorization decisions but SHOULD NOT include sensitive information that would likely enable a threat actor to gain unauthorized access, cause harm, disrupt operations, or otherwise have a negative adverse impact on the cloud service offering.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-CSO-IRP",
+      "name": "Include Relevant Policies",
+      "description": "Providers MUST supply all relevant policies and procedures in the FedRAMP Certification Data, including a human-readable and machine-readable reference that explains at least the following about each included policy and procedure: Name of policy or procedure; Name of file, document, web page, etc.; Brief summary of policy or procedure; Word count of document; Current version; Date of last update; Related FedRAMP Practices (if applicable)",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-CSO-HAD",
+      "name": "Historical FedRAMP Certification Data",
+      "description": "Providers MUST supply snapshots of FedRAMP Certification Data aligned to Ongoing Certification Reports to all necessary parties; these snapshots MUST be available for the duration of FedRAMP Certification.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-CSO-PSM",
+      "name": "Per-Service Certification Materials",
+      "description": "Providers with Class C Certifications MAY supply per-service FedRAMP Certification materials.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MAY"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-CSO-RPS",
+      "name": "Responsible Public Package Sharing",
+      "description": "Providers MAY responsibly share some or all of the information in a FedRAMP Certification Package publicly or with other parties if the provider determines doing so will NOT likely have an adverse effect on the cloud service offering.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MAY"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-TRC-USH",
+      "name": "Uninterrupted Sharing",
+      "description": "Trust centers MUST share FedRAMP Certification Data with all necessary parties without interruption.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "TRC: FedRAMP-Compatible Trust Centers",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-TRC-PAC",
+      "name": "Programmatic Access",
+      "description": "Trust centers MUST provide documented programmatic access to all FedRAMP Certification Data, including programmatic access to human-readable materials.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "TRC: FedRAMP-Compatible Trust Centers",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-TRC-AAI",
+      "name": "Agency Access Inventory",
+      "description": "Trust centers MUST maintain an inventory and history of federal agency users or systems with access to FedRAMP Certification Data and MUST make this information available to FedRAMP upon request.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "TRC: FedRAMP-Compatible Trust Centers",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-TRC-ACL",
+      "name": "Access Logging",
+      "description": "Trust centers MUST log access to FedRAMP Certification Data and store summaries of access for at least six months; such information, as it pertains to specific parties, SHOULD be made available upon request by those parties.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "TRC: FedRAMP-Compatible Trust Centers",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-TRC-HMR",
+      "name": "Human and Machine-Readable Certification Data",
+      "description": "Trust centers SHOULD make FedRAMP Certification Data available to view and download in both human-readable and machine-readable formats.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "TRC: FedRAMP-Compatible Trust Centers",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-TRC-SSM",
+      "name": "Self-Service Access Management",
+      "description": "Trust centers SHOULD include features that encourage all necessary parties to provision and manage access to FedRAMP Certification Data for their users and services directly.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "TRC: FedRAMP-Compatible Trust Centers",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-UTC-AAD",
+      "name": "Agency Access Denial",
+      "description": "Providers MUST notify FedRAMP within 5 business days of denying an agency access request for FedRAMP Certification Data.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "UTC: Using a Trust Center",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CDS-UTC-AGA",
+      "name": "Agency Access",
+      "description": "Providers SHOULD supply access to the FedRAMP Certification Package with agencies upon request.",
+      "attributes": {
+        "Ruleset": "CDS: Certification Data Sharing",
+        "Subset": "UTC: Using a Trust Center",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CMU-CSO-CMD",
+      "name": "Cryptographic Module Documentation",
+      "description": "Providers MUST document the cryptographic modules used in each service (or groups of services that use the same modules) where cryptographic services are used to protect federal customer data, including whether these modules are validated under the NIST Cryptographic Module Validation Program or are update streams of such modules.",
+      "attributes": {
+        "Ruleset": "CMU: Cryptographic Module Use",
+        "Subset": "CSO: Cloud Service Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CMU-CSO-UVM",
+      "name": "Using Validated Cryptographic Modules",
+      "description": "Providers with Class C Certifications SHOULD use cryptographic modules or update streams of cryptographic modules with active validations under the NIST Cryptographic Module Validation Program when using cryptographic services to protect federal customer data.",
+      "attributes": {
+        "Ruleset": "CMU: Cryptographic Module Use",
+        "Subset": "CSO: Cloud Service Provider Responsibilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [
+          "elbv2_listener_fips_tls_enabled",
+          "transfer_server_fips_security_policy_enabled"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CMU-CSO-CAT",
+      "name": "Configuration of Agency Tenants",
+      "description": "Providers SHOULD configure agency tenants by default to use cryptographic services that use cryptographic modules or update streams of cryptographic modules with active validations under the NIST Cryptographic Module Validation Program when such modules are available.",
+      "attributes": {
+        "Ruleset": "CMU: Cryptographic Module Use",
+        "Subset": "CSO: Cloud Service Provider Responsibilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CPO-CSO-OVR",
+      "name": "Overview of the Cloud Service Offering",
+      "description": "Providers MUST supply a Certification Package Overview within their FedRAMP Certification Package, in both human-readable and JSON formats, that includes at least all of the information required by the following rules: Certification Package Overview: CPO-CSO-MTD (Certification Package Overview Metadata); Certification Data Sharing: CDS-CSO-PUB (Public Information); Certification Data Sharing: CDS-CSO-SVC (Public Service List); Certification Data Sharing: CDS-CSO-IRP (Include Relevant Policies); Minimum Assessment Scope: MAS-CSO-IIR (Identify Information Resources); Minimum Assessment Scope: MAS-CSO-FLO (Information Flows and Security Categories); Minimum Assessment Scope: MAS-CSO-TPR (Third-Party Information Resources); Using Cryptographic Modules: CMU-CSO-CMD (Cryptographic Module Documentation); Independent Verification and Validation: IVV-CSO-ICP (Inclusion in Certification Package)",
+      "attributes": {
+        "Ruleset": "CPO: Certification Package Overview",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CPO-CSO-MTD",
+      "name": "Certification Package Overview Metadata",
+      "description": "Providers MUST also include the following basic metadata in their Certification Package Overview: Name, title, and contact information of official that is responsible and accountable for the FedRAMP Certification Package; Version; Date and time of last update; Source of update",
+      "attributes": {
+        "Ruleset": "CPO: Certification Package Overview",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CPO-CSO-OSA",
+      "name": "Overall Summary of Assessment in Certification Package",
+      "description": "Providers seeking Class C Certification MUST also include the overall summary of their FedRAMP independent assessment, supplied by the assessor per IVV-IAS-OSA (Overall Summary of Assessment), in their Certification Package Overview.",
+      "attributes": {
+        "Ruleset": "CPO: Certification Package Overview",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "CPO-CSX-CPM",
+      "name": "Certification Package Maintenance for 20x",
+      "description": "Providers with 20x Class C Certifications MUST persistently maintain their FedRAMP Certification Package to ensure it is up to date and complete at least once every 2 weeks.",
+      "attributes": {
+        "Ruleset": "CPO: Certification Package Overview",
+        "Subset": "CSX: 20x-Specific Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "FRC-CSO-FCP",
+      "name": "FedRAMP Certification Profile",
+      "description": "Providers MUST identify a target FedRAMP Certification Profile and apply all relevant FedRAMP Practices to the cloud service offering.",
+      "attributes": {
+        "Ruleset": "FRC: FedRAMP Certification",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "FRC-CSO-PKG",
+      "name": "FedRAMP Certification Package",
+      "description": "Providers seeking a Certification MUST supply a complete FedRAMP Certification Package to FedRAMP for initial certification; the FedRAMP Certification Package MUST include at least the following information: Information about the Cloud Service Offering following CPO-CSO-OVR (Overview of the Cloud Service Offering); Implementation, Validation, and Assessment information for each relevant FedRAMP requirement/control/ksi as defined in SDR-CSO-FRR (FedRAMP Rules); A real or example Ongoing Certification Report following CCM-OCR-AVL (Report Availability)",
+      "attributes": {
+        "Ruleset": "FRC: FedRAMP Certification",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "FRC-CSO-JSN",
+      "name": "FedRAMP JSON Schemas",
+      "description": "Providers MUST supply machine-readable information in JSON documents that are valid against the corresponding JSON schema when a rule contains a FedRAMP JSON schema, UNLESS otherwise specified in the rule.",
+      "attributes": {
+        "Ruleset": "FRC: FedRAMP Certification",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "FRC-CSO-MRA",
+      "name": "Maintain Responsibility and Accountability",
+      "description": "Providers MUST maintain responsibility and accountability for the accuracy and completeness of all information in the FedRAMP Certification Package, especially when they engage a third party (such as an independent assessor, advisory service, or external tools) to supply information on their behalf.",
+      "attributes": {
+        "Ruleset": "FRC: FedRAMP Certification",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "FRC-CSO-POP",
+      "name": "Pick One Program Certification Type",
+      "description": "Providers MUST NOT seek both FedRAMP Rev5 Program Certification and FedRAMP 20x Program Certification for the same cloud service offering; pick one type.",
+      "attributes": {
+        "Ruleset": "FRC: FedRAMP Certification",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST NOT"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "FRC-APP-MLF",
+      "name": "Marketplace Listing First",
+      "description": "Providers MUST be listed in the FedRAMP Marketplace before applying for FedRAMP Certification, including: FedRAMP Marketplace: MKT-CSO-MLR (Marketplace Listing Requirements); FedRAMP Marketplace: MKT-CSO-PML (Provider Marketplace Listing Requests); FedRAMP Marketplace: MKT-IIP-AGU (Agency Use Cases); FedRAMP Marketplace: MKT-IIP-DCP (Demonstrating Continuous Progress)",
+      "attributes": {
+        "Ruleset": "FRC: FedRAMP Certification",
+        "Subset": "APP: Applying for FedRAMP Certification",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "FRC-APP-AFC",
+      "name": "Applying for FedRAMP Certification",
+      "description": "Providers MUST complete the FedRAMP Certification Application Form in full to request an initial assessment by FedRAMP.",
+      "attributes": {
+        "Ruleset": "FRC: FedRAMP Certification",
+        "Subset": "APP: Applying for FedRAMP Certification",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "FRC-APP-FCP",
+      "name": "Fresh FedRAMP Certification Package",
+      "description": "Providers MUST supply a fresh initial FedRAMP Certification Package that shows the current status of the cloud service offering as verified and validated by the provider within the previous 7 days.",
+      "attributes": {
+        "Ruleset": "FRC: FedRAMP Certification",
+        "Subset": "APP: Applying for FedRAMP Certification",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "FRC-APP-FIA",
+      "name": "Fresh Independent Assessment",
+      "description": "Providers seeking Class C Certification MUST supply a fresh initial FedRAMP independent assessment that was completed by a FedRAMP Recognized independent assessment service within the previous 3 months.",
+      "attributes": {
+        "Ruleset": "FRC: FedRAMP Certification",
+        "Subset": "APP: Applying for FedRAMP Certification",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "FRC-APP-NTP",
+      "name": "No Third-Party Applicants",
+      "description": "Providers MUST NOT use a third party to apply for a FedRAMP Certification on their behalf; this includes independent assessment services.",
+      "attributes": {
+        "Ruleset": "FRC: FedRAMP Certification",
+        "Subset": "APP: Applying for FedRAMP Certification",
+        "Force": "MUST NOT"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "FRC-APP-USA",
+      "name": "Updating Stale Assessments",
+      "description": "Providers MAY freshen a stale initial independent verification and validation assessment by having a FedRAMP Recognized independent assessment service review any changes between the original assessment and the current status of the cloud service offering in place of a full re-assessment, UNLESS the stale assessment is more than 9 months old.",
+      "attributes": {
+        "Ruleset": "FRC: FedRAMP Certification",
+        "Subset": "APP: Applying for FedRAMP Certification",
+        "Force": "MAY"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "FRC-CSX-VVK",
+      "name": "Automated Verification and Validation of Key Security Indicators",
+      "description": "Providers seeking 20x Class C Certification MUST implement automated methods to persistently verify and validate the accuracy and completeness of Key Security Indicators with at least 2 automated methods for each Key Security Indicator.",
+      "attributes": {
+        "Ruleset": "FRC: FedRAMP Certification",
+        "Subset": "CSX: 20x-Specific Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "FRC-CSX-MOT",
+      "name": "Metrics Over Time for Key Security Indicators",
+      "description": "Providers seeking 20x Class C Certification MUST supply historical metrics including status from persistent validation over at least the past 6 months for all Key Security Indicators.",
+      "attributes": {
+        "Ruleset": "FRC: FedRAMP Certification",
+        "Subset": "CSX: 20x-Specific Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "FRC-CSX-VVR",
+      "name": "Automated Verification and Validation of FedRAMP Rules",
+      "description": "Providers seeking 20x Class C Certification SHOULD implement automated methods to persistently verify and validate the accuracy and completeness of the Security Decision Record for FedRAMP rules when applicable.",
+      "attributes": {
+        "Ruleset": "FRC: FedRAMP Certification",
+        "Subset": "CSX: 20x-Specific Provider Responsibilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "FRC-CSX-MAS",
+      "name": "Application within MAS",
+      "description": "Providers SHOULD apply ALL Key Security Indicators to ALL aspects of their cloud service offering that are within the FedRAMP Minimum Assessment Scope.",
+      "attributes": {
+        "Ruleset": "FRC: FedRAMP Certification",
+        "Subset": "CSX: 20x-Specific Provider Responsibilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "IEC-CSO-EFR",
+      "name": "Evaluate FedRAMP Reportability",
+      "description": "Providers MUST promptly evaluate incidents to determine if they affect confidentiality or integrity of federal customer data or are likely to affect confidentiality or integrity of federal customer data; such incidents are FedRAMP Reportable Incidents and must be reported following the FedRAMP Incident Evaluation and Communication rules.",
+      "attributes": {
+        "Ruleset": "IEC: Incident Evaluation and Communication",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "IEC-CSO-DPR",
+      "name": "Default PAIN Rating",
+      "description": "Providers MUST treat FedRAMP Reportable Incidents as if they have a Potential Agency Impact N-rating (PAIN) of 5 UNLESS they promptly estimate the PAIN rating following the rule in IEC-CSO-EFI (Estimate Federal Impact).",
+      "attributes": {
+        "Ruleset": "IEC: Incident Evaluation and Communication",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "IEC-CSO-IIR",
+      "name": "Initial Incident Report",
+      "description": "Providers with Class C Certifications MUST responsibly notify all affected parties after identifying FedRAMP Reportable Incidents by providing an Initial Incident Report with as much of the following information that is available at the time of reporting and/or the current relevant status for each item: Contact information for the federal incident response coordinator.; Provider's internally assigned tracking identifier; Description of the incident; Timeline of the incident, including start time, time and source of detection, time of completed FedRAMP Reportable Incident evaluation, and other major incident milestones determined by the provider; Historically and currently estimated Potential Agency Impact N-rating (PAIN) of the incident, including an explanation of the evaluation following the requirements in IEC-CSO-EFI (Estimate Federal Impact) (if applicable); Functional impact to federal agency customers (include impact to confidentiality and/or integrity and the impacted federal customer data types); Estimated recovery plan, milestones, and timelines; List of likely affected customer agencies; N1 Initial Incident Report: 1 bizdays; N2 Initial Incident Report: 24 hours; N3 Initial Incident Report: 1 hours; N4 Initial Incident Report: 1 hours; N5 Initial Incident Report: 1 hours",
+      "attributes": {
+        "Ruleset": "IEC: Incident Evaluation and Communication",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "IEC-CSO-OIR",
+      "name": "Ongoing Incident Reports",
+      "description": "Providers with Class C Certifications MUST responsibly notify all affected parties of ongoing activity as new information becomes available during incident response for FedRAMP Reportable Incidents, including updates (or lack of updates) to all previously reported information and as much of the following additional information that is available and/or the current relevant status for each item: Observed incident activity; Indicators of compromise; Related Common Vulnerabilities and Exposures (CVE) identifier, if applicable; Root cause; Response and recovery activities; N1 Ongoing Incident Report: 1 bizdays; N2 Ongoing Incident Report: 24 hours; N3 Ongoing Incident Report: 6 hours; N4 Ongoing Incident Report: 6 hours; N5 Ongoing Incident Report: 6 hours",
+      "attributes": {
+        "Ruleset": "IEC: Incident Evaluation and Communication",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "IEC-CSO-FIR",
+      "name": "Final Incident Report",
+      "description": "Providers with Class C Certifications MUST responsibly notify all affected parties by providing a Final Incident Report once the incident has been resolved and recovery is complete, including final updates to all previously reported information. N1 Final Incident Report: 1 bizdays; N2 Final Incident Report: 1 bizdays; N3 Final Incident Report: 6 hours; N4 Final Incident Report: 6 hours; N5 Final Incident Report: 6 hours",
+      "attributes": {
+        "Ruleset": "IEC: Incident Evaluation and Communication",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "IEC-CSO-EFI",
+      "name": "Estimate Federal Impact",
+      "description": "Providers SHOULD promptly estimate the likely adverse impact of an incident on agency customers to assign a Potential Agency Impact N-rating; this step is called Incident Rating. N1 for a likely minimal customer effect on 1 or more agencies.; N2 for a likely narrow customer effect on 1 or more agencies.; N3 for a likely disruptive customer effect on 1 agency.; N4 for a likely debilitating customer effect on 1 agency or a likely disruptive customer effect on more than 1 agency.; N5 for a likely debilitating customer effect on more than 1 agency.",
+      "attributes": {
+        "Ruleset": "IEC: Incident Evaluation and Communication",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "IEC-CSO-AIR",
+      "name": "Automated Incident Reporting",
+      "description": "Providers SHOULD use automation to minimize human intervention in the process of reporting FedRAMP Reportable Incidents to all affected parties.",
+      "attributes": {
+        "Ruleset": "IEC: Incident Evaluation and Communication",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "IVV-CSO-FIA",
+      "name": "FedRAMP Independent Assessments",
+      "description": "Providers with Class C Certifications MUST persistently complete an independent verification and validation assessment of all applicable FedRAMP rules with a FedRAMP Recognized independent assessment service OR FedRAMP at least once per year; this is a FedRAMP independent assessment.",
+      "attributes": {
+        "Ruleset": "IVV: Independent Verification and Validation",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "IVV-CSO-SEI",
+      "name": "Supply Evidence of Implementation",
+      "description": "Providers MUST supply evidence to all necessary assessors of the implementation of the measures that have been documented to meet FedRAMP Practices; this evidence is the result of verification.",
+      "attributes": {
+        "Ruleset": "IVV: Independent Verification and Validation",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "IVV-CSO-SEE",
+      "name": "Supply Evidence of Effectiveness",
+      "description": "Providers MUST supply evidence to all necessary assessors of the effectiveness of the measures that have been implemented to meet FedRAMP Practices; this evidence is the result of validation.",
+      "attributes": {
+        "Ruleset": "IVV: Independent Verification and Validation",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "IVV-CSO-ICP",
+      "name": "Inclusion in Certification Package",
+      "description": "Providers MUST supply the results of FedRAMP independent assessments in their FedRAMP Certification Package without inappropriate modification.",
+      "attributes": {
+        "Ruleset": "IVV: Independent Verification and Validation",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "IVV-CSO-DUS",
+      "name": "Document Use of Representative Samples",
+      "description": "Providers MUST document and explain the use of representative samples during verification and validation when using representative samples as allowed by IVV-CSO-USR (Use Representative Samples).",
+      "attributes": {
+        "Ruleset": "IVV: Independent Verification and Validation",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "IVV-CSO-STE",
+      "name": "Supply Technical Explanations",
+      "description": "Providers SHOULD supply all necessary assessors with technical explanations, demonstrations, and other relevant supporting information about the technical capabilities they employ to address FedRAMP rules; this SHOULD be supplied as necessary to ensure the assessor can effectively complete verification and validation.",
+      "attributes": {
+        "Ruleset": "IVV: Independent Verification and Validation",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "IVV-CSO-USR",
+      "name": "Use Representative Samples",
+      "description": "Providers MAY use representative samples as appropriate during verification and validation.",
+      "attributes": {
+        "Ruleset": "IVV: Independent Verification and Validation",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MAY"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "IVV-CSO-RAA",
+      "name": "Receiving Assessor Advice",
+      "description": "Providers MAY ask for and accept advice from their assessor during assessment regarding techniques and procedures that will improve their security posture or the effectiveness, clarity, and accuracy of their verification, validation and reporting procedures, UNLESS doing so is likely to compromise the objectivity and integrity of the assessment.",
+      "attributes": {
+        "Ruleset": "IVV: Independent Verification and Validation",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MAY"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "IVV-CSX-AIA",
+      "name": "Annual Independent Assessments for 20x",
+      "description": "Providers with 20x Class C Certifications MUST include all Key Security Indicators in a FedRAMP independent assessment at least once per year.",
+      "attributes": {
+        "Ruleset": "IVV: Independent Verification and Validation",
+        "Subset": "CSX: 20x-Specific Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "MAS-CSO-IIR",
+      "name": "Identify Information Resources",
+      "description": "Providers MUST identify a set of information resources to assess for FedRAMP Certification that includes all information resources that are likely to handle federal customer data or likely to impact the confidentiality, integrity, or availability of federal customer data handled by the cloud service offering; this set of information resources is the cloud service offering.",
+      "attributes": {
+        "Ruleset": "MAS: Minimum Assessment Scope",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [
+          "config_recorder_all_regions_enabled",
+          "resourceexplorer2_indexes_found"
+        ],
+        "azure": [],
+        "gcp": [
+          "iam_cloud_asset_inventory_enabled"
+        ],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "config_recorder_all_regions_enabled",
+          "ConfigKey": "mute_non_default_regions",
+          "Operator": "eq",
+          "Value": false,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "MAS-CSO-FLO",
+      "name": "Information Flows and Security Categories",
+      "description": "Providers MUST clearly identify, document, and explain information flows and security categories for ALL information resources or sets of information resources in the cloud service offering.",
+      "attributes": {
+        "Ruleset": "MAS: Minimum Assessment Scope",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "MAS-CSO-TPR",
+      "name": "Third-Party Information Resources",
+      "description": "Providers MUST address the potential impact to federal customer data from third-party information resources used by the cloud service offering, ONLY IF MAS-CSO-IIR (Identify Information Resources) APPLIES, by documenting the following information about each applicable third-party information resource: General usage and configuration; Explanation or justification for use; Mitigation measures in place to reduce the potential impact to federal customer data; Compensating controls in place to reduce the potential impact to federal customer data",
+      "attributes": {
+        "Ruleset": "MAS: Minimum Assessment Scope",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "MAS-CSO-MDI",
+      "name": "Metadata Inclusion",
+      "description": "Providers MUST include metadata (including metadata about federal customer data) in the Minimum Assessment Scope ONLY IF MAS-CSO-IIR (Identify Information Resources) APPLIES.",
+      "attributes": {
+        "Ruleset": "MAS: Minimum Assessment Scope",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "MAS-CSO-SUP",
+      "name": "Supplemental Information",
+      "description": "Providers MAY include additional materials about other information resources that are not part of the cloud service offering in a FedRAMP Certification Package supplement; these resources will not be FedRAMP Certified and MUST be clearly marked and separated from the cloud service offering.",
+      "attributes": {
+        "Ruleset": "MAS: Minimum Assessment Scope",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MAY"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "MKT-CSO-MLR",
+      "name": "Marketplace Listing Requirements",
+      "description": "Providers MUST address at least these FedRAMP rules to apply for a new FedRAMP Marketplace listing OR to request updates to an existing listing: Certification Data Sharing: CDS-CSO-PUB (Public Information)",
+      "attributes": {
+        "Ruleset": "MKT: Marketplace Listing",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "MKT-CSO-PML",
+      "name": "Provider Marketplace Listing Requests",
+      "description": "Providers MUST notify FedRAMP using the FedRAMP Marketplace Providing Listing Request Form to request a listing in the FedRAMP Marketplace.",
+      "attributes": {
+        "Ruleset": "MKT: Marketplace Listing",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "MKT-IIP-AGU",
+      "name": "Agency Use Cases",
+      "description": "Providers MUST demonstrate that a cloud service offering is intended for one of the following use cases: Direct Use: The product will be used directly by agency customers for integration into a federal information system that falls within the scope of 44 USC § 3506 and will receive an agency Authorization to Operate.; Indirect Use: The product will be included as a third-party information resource in other cloud service offerings that are directly used by agency customers.",
+      "attributes": {
+        "Ruleset": "MKT: Marketplace Listing",
+        "Subset": "IIP: Provider Responsibilities for Initial Implementation Phase Listings",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "MKT-IIP-DCP",
+      "name": "Demonstrating Continuous Progress",
+      "description": "Providers MUST demonstrate continuous progress towards a FedRAMP Certification, documented in their Trust Center or website and updated at least quarterly; progress is measured by the provider against documented goals and milestones.",
+      "attributes": {
+        "Ruleset": "MKT: Marketplace Listing",
+        "Subset": "IIP: Provider Responsibilities for Initial Implementation Phase Listings",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "MKT-IIP-DLA",
+      "name": "Deadline for Assessment",
+      "description": "Providers MUST demonstrate that an assessment for a FedRAMP Certification Class B, C, or D has been scheduled within 2 years of initial listing in the Initial Implementation Phase.",
+      "attributes": {
+        "Ruleset": "MKT: Marketplace Listing",
+        "Subset": "IIP: Provider Responsibilities for Initial Implementation Phase Listings",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCG-CSO-RSC",
+      "name": "Recommended Secure Configuration",
+      "description": "Providers MUST create, maintain, and make available recommendations for securely configuring their cloud services (the Secure Configuration Guide) that includes at least the following information: Required: Instructions on how to securely access, configure, operate, and decommission top-level administrative accounts that control enterprise access to the entire cloud service offering.; Required: Explanations of security-related settings that can be operated only by top-level administrative accounts and their security implications.; Recommended: Explanations of security-related settings that can be operated only by privileged accounts and their security implications.",
+      "attributes": {
+        "Ruleset": "SCG: Secure Configuration Guide",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCG-CSO-AUP",
+      "name": "Use Instructions",
+      "description": "Providers MUST include instructions in the FedRAMP Certification Package that explain how to obtain and use the Secure Configuration Guide.",
+      "attributes": {
+        "Ruleset": "SCG: Secure Configuration Guide",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCG-CSO-PUB",
+      "name": "Public Secure Configuration Guidance",
+      "description": "Providers SHOULD make the Secure Configuration Guide available publicly.",
+      "attributes": {
+        "Ruleset": "SCG: Secure Configuration Guide",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCG-CSO-SDF",
+      "name": "Secure Defaults",
+      "description": "Providers SHOULD set all settings to their recommended secure defaults for top-level administrative accounts and privileged accounts when initially provisioned.",
+      "attributes": {
+        "Ruleset": "SCG: Secure Configuration Guide",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCG-ENH-CMP",
+      "name": "Comparison Capability",
+      "description": "Providers SHOULD offer the capability to compare all current settings for top-level administrative accounts and privileged accounts to the recommended secure defaults.",
+      "attributes": {
+        "Ruleset": "SCG: Secure Configuration Guide",
+        "Subset": "ENH: Enhanced Capabilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCG-ENH-EXP",
+      "name": "Export Capability",
+      "description": "Providers SHOULD offer the capability to export all security settings in a machine-readable format.",
+      "attributes": {
+        "Ruleset": "SCG: Secure Configuration Guide",
+        "Subset": "ENH: Enhanced Capabilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCG-ENH-API",
+      "name": "API Capability",
+      "description": "Providers SHOULD offer the capability to view and adjust security settings via an API or similar capability.",
+      "attributes": {
+        "Ruleset": "SCG: Secure Configuration Guide",
+        "Subset": "ENH: Enhanced Capabilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCG-ENH-MRG",
+      "name": "Machine-Readable Guidance",
+      "description": "Providers SHOULD also provide the Secure Configuration Guide in a machine-readable format that can be used by customers or third-party tools to compare against current settings.",
+      "attributes": {
+        "Ruleset": "SCG: Secure Configuration Guide",
+        "Subset": "ENH: Enhanced Capabilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCG-ENH-VRH",
+      "name": "Versioning and Release History",
+      "description": "Providers SHOULD provide versioning and a release history for recommended secure default settings for top-level administrative accounts and privileged accounts as they are adjusted over time.",
+      "attributes": {
+        "Ruleset": "SCG: Secure Configuration Guide",
+        "Subset": "ENH: Enhanced Capabilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCN-CSO-EVA",
+      "name": "Evaluate Changes",
+      "description": "Providers MUST evaluate all potential significant changes to determine the type of significant change and follow the appropriate Significant Change Notification rules. Is it a significant change? --> Continue evaluation and follow the Significant Change Notification rules.; If it is, is it an FedRAMP Certification class change? --> This requires a new assessment and cannot be done under the Significant Change Notification rules.; If it is not, is it a routine recurring change? --> Follow the Routine Recurring Change rules (SCN-RTR Routine Recurring Changes).; If it is not, is it a transformative change? --> Follow the Transformative Change rules (SCN-TRF Transformative Changes).; If it is not, then it is an adaptive change --> Follow the Adaptive Change rules (SCN-ADP Adaptive Changes).",
+      "attributes": {
+        "Ruleset": "SCN: Significant Change Notification",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCN-CSO-MAR",
+      "name": "Maintain Audit Records",
+      "description": "Providers MUST maintain auditable records of the significant change evaluation activities required by SCN-CSO-EVA (Evaluate Changes) and make them available to FedRAMP as requested.",
+      "attributes": {
+        "Ruleset": "SCN: Significant Change Notification",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCN-CSO-INF",
+      "name": "Required Information",
+      "description": "Providers MUST include at least the following information in Significant Change Notifications: Service Offering FedRAMP ID; Assessor Name (if applicable); Related Vulnerability (if applicable); Significant Change type and explanation of categorization; Short description of change; Reason for change; Summary of customer impact, including changes to services and customer configuration responsibilities; Plan and timeline for the change, including for the verification, assessment, and/or validation of impacted Key Security Indicators or Rev5 Controls; Copy of the business or security impact analysis; Name and title of approver",
+      "attributes": {
+        "Ruleset": "SCN: Significant Change Notification",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCN-CSO-HIS",
+      "name": "Historical Notifications",
+      "description": "Providers MUST keep 12 months of historical Significant Change Notifications available with their FedRAMP Certification Data.",
+      "attributes": {
+        "Ruleset": "SCN: Significant Change Notification",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCN-CSO-HRM",
+      "name": "Human and Machine-Readable Notifications",
+      "description": "Providers MUST make ALL Significant Change Notifications and related audit records available in human-readable and JSON formats.",
+      "attributes": {
+        "Ruleset": "SCN: Significant Change Notification",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCN-CSO-ARI",
+      "name": "Additional Relevant Information",
+      "description": "Providers MAY include additional relevant information in Significant Change Notifications.",
+      "attributes": {
+        "Ruleset": "SCN: Significant Change Notification",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MAY"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCN-CSO-NOM",
+      "name": "Notification Mechanisms",
+      "description": "Providers MAY notify necessary parties in a variety of ways as long as the mechanism for notification is clearly documented in the FedRAMP Certification Package and easily accessible.",
+      "attributes": {
+        "Ruleset": "SCN: Significant Change Notification",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MAY"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCN-CSO-EMG",
+      "name": "Emergency Changes",
+      "description": "Providers MAY execute significant changes (including transformative changes) during an emergency or incident without following the Significant Change Notification rules in advance. In such emergencies, providers MUST follow all relevant procedures, notify all necessary parties, retroactively provide all Significant Change Notification materials, and complete appropriate assessment after the incident.",
+      "attributes": {
+        "Ruleset": "SCN: Significant Change Notification",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MAY"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCN-ADP-NTF",
+      "name": "Notification Requirements",
+      "description": "Providers MUST notify all necessary parties within 10 business days after finishing adaptive changes, also including the following information: Summary of any new risks identified and/or vulnerabilities resulting from the change (if applicable)",
+      "attributes": {
+        "Ruleset": "SCN: Significant Change Notification",
+        "Subset": "ADP: Adaptive Changes",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCN-RTR-NNR",
+      "name": "No Notification Requirements",
+      "description": "Providers SHOULD NOT make formal Significant Change Notifications for routine recurring changes; this type of change is exempted from notification requirements.",
+      "attributes": {
+        "Ruleset": "SCN: Significant Change Notification",
+        "Subset": "RTR: Routine Recurring Changes",
+        "Force": "SHOULD NOT"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCN-TRF-NIP",
+      "name": "Notification of Initial Plans",
+      "description": "Providers MUST notify all necessary parties of initial plans for transformative changes at least 30 business days before starting transformative changes, including a summary of any likely security impacts or changes in risk.",
+      "attributes": {
+        "Ruleset": "SCN: Significant Change Notification",
+        "Subset": "TRF: Transformative Changes",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCN-TRF-NFP",
+      "name": "Notification of Final Plans",
+      "description": "Providers MUST notify all necessary parties of final plans for transformative changes at least 10 business days before starting transformative changes, including updates to all previously sent information.",
+      "attributes": {
+        "Ruleset": "SCN: Significant Change Notification",
+        "Subset": "TRF: Transformative Changes",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCN-TRF-NAF",
+      "name": "Notification After Finishing",
+      "description": "Providers MUST notify all necessary parties within 5 business days after finishing transformative changes, including updates to all previously sent information.",
+      "attributes": {
+        "Ruleset": "SCN: Significant Change Notification",
+        "Subset": "TRF: Transformative Changes",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCN-TRF-NAV",
+      "name": "Notification After Verification",
+      "description": "Providers MUST notify all necessary parties within 5 business days after completing the verification, assessment, and/or validation of transformative changes, also including the following information: Updates to all previously sent information; Summary of any new risks identified and/or vulnerabilities resulting from the change (if applicable); Copy of the security assessment report (if applicable)",
+      "attributes": {
+        "Ruleset": "SCN: Significant Change Notification",
+        "Subset": "TRF: Transformative Changes",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCN-TRF-UPD",
+      "name": "Update Documentation",
+      "description": "Providers MUST publish updated service documentation and other materials to reflect transformative changes within 30 business days after finishing transformative changes.",
+      "attributes": {
+        "Ruleset": "SCN: Significant Change Notification",
+        "Subset": "TRF: Transformative Changes",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SCN-TRF-TPR",
+      "name": "Third-Party Review",
+      "description": "Providers SHOULD engage a third-party assessor to review the scope and impact of the planned change before starting transformative changes if human validation is necessary; such reviews SHOULD be limited to security decisions that require human validation.",
+      "attributes": {
+        "Ruleset": "SCN: Significant Change Notification",
+        "Subset": "TRF: Transformative Changes",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SDR-CSO-FRR",
+      "name": "FedRAMP Rules",
+      "description": "Providers MUST supply a Security Decision Record, in both human-readable and JSON formats, that includes at least all of the following information for each applicable FedRAMP rule: Explanation of how the rule is followed, or an explanation of the reason and resulting risk to customers for not following the rule.; Verification that the implementation is appropriate for the rule, or that the reason for not implementing is accepted by a senior official.; Validation that the implementation is in place and working as intended, or that the reason for not implementing is accepted by a senior official.; Independent verification.; Independent validation.; Any responses or clarifications to the comments in the independent verification or validation.; Rule-specific artifacts (if applicable).",
+      "attributes": {
+        "Ruleset": "SDR: Security Decision Record",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SDR-CSO-MTD",
+      "name": "Security Decision Record Metadata",
+      "description": "Providers MUST also include the following basic metadata in their Security Decision Record: Version; Date and time of last update; Source of update",
+      "attributes": {
+        "Ruleset": "SDR: Security Decision Record",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SDR-CSX-KSI",
+      "name": "Key Security Indicators",
+      "description": "Providers MUST also include short and simple high-level summaries of at least the following for each applicable Key Security Indicator: Explanation of measures (and their objectives) that demonstrate the Key Security Indicator, or an explanation of the reason and resulting risk to customers for not having measures available for that Key Security Indicator.; Explanation of the cycle for any measures that are implemented persistently (if applicable).; Verification that the measures demonstrate the Key Security Indicator, or that the reason for not having them is accepted.; Verification that the automation in place is accurate and sufficient to demonstrate appropriate measures for the Key Security Indicator, or that automation is not necessary for each measure.; Validation that the measures are accurately produced and are in place and working as intended, or that the reason for not having them is valid.",
+      "attributes": {
+        "Ruleset": "SDR: Security Decision Record",
+        "Subset": "CSX: 20x-Specific Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "SDR-CSX-KMT",
+      "name": "Key Security Indicator Metrics",
+      "description": "Providers with 20x Class C Certifications MUST also include historical metrics in their Security Decision Record, supplying at least the following information for each applicable Key Security Indicator: Summary of each metric over the past 30 days; Summary of metric up to the past year (where available); All daily metric data up to the past year (where available)",
+      "attributes": {
+        "Ruleset": "SDR: Security Decision Record",
+        "Subset": "CSX: 20x-Specific Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VDR-CSO-DET",
+      "name": "Vulnerability Detection",
+      "description": "Providers MUST systematically, persistently, and promptly discover and identify vulnerabilities within their cloud service offering using appropriate techniques such as assessment, scanning, threat intelligence, vulnerability disclosure mechanisms, bug bounties, penetration testing, incident response, automated control testing, supply chain monitoring, and other relevant capabilities; this process is called vulnerability detection. Vulnerability detection includes persistently verifying and validating that information resources and processes are operating as intended and documented for FedRAMP Practices.",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [
+          "ecr_registry_enhanced_scanning_enabled",
+          "ecr_registry_scan_images_on_push_enabled",
+          "inspector2_is_enabled",
+          "securityhub_enabled"
+        ],
+        "azure": [
+          "defender_auto_provisioning_vulnerabilty_assessments_machines_on",
+          "defender_container_images_scan_enabled",
+          "defender_ensure_defender_cspm_is_on",
+          "sqlserver_va_periodic_recurring_scans_enabled"
+        ],
+        "gcp": [
+          "gcr_container_scanning_enabled"
+        ],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "securityhub_enabled",
+          "ConfigKey": "mute_non_default_regions",
+          "Operator": "eq",
+          "Value": false,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "VDR-CSO-RES",
+      "name": "Vulnerability Response",
+      "description": "Providers MUST systematically, persistently, and promptly track, evaluate, monitor, mitigate, remediate, assess exploitation of, report, and otherwise manage all detected vulnerabilities within their cloud service offering; this process is called vulnerability response.",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [
+          "ecr_repositories_scan_vulnerabilities_in_latest_image",
+          "inspector2_active_findings_exist"
+        ],
+        "azure": [
+          "defender_container_images_resolved_vulnerabilities"
+        ],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "ecr_repositories_scan_vulnerabilities_in_latest_image",
+          "ConfigKey": "ecr_repository_vulnerability_minimum_severity",
+          "Operator": "eq",
+          "Value": "MEDIUM",
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "VDR-CSO-FAV",
+      "name": "Failures Are Vulnerabilities",
+      "description": "Providers MUST treat problems or failures with their vulnerability detection and response processes as vulnerabilities.",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [
+          "inspector2_coverage_scan_status_active"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VDR-CSO-DFR",
+      "name": "Design For Resilience",
+      "description": "Providers SHOULD make design and architecture decisions for their cloud service offering that mitigate the risk of vulnerabilities by default AND decrease the risk and complexity of vulnerability detection and response.",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VDR-CSO-ADT",
+      "name": "Automate Detection",
+      "description": "Providers SHOULD use automated services to improve and streamline vulnerability detection and response.",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [
+          "ecr_registry_enhanced_scanning_enabled",
+          "ecr_registry_scan_images_on_push_enabled",
+          "inspector2_is_enabled"
+        ],
+        "azure": [
+          "defender_auto_provisioning_vulnerabilty_assessments_machines_on",
+          "defender_container_images_scan_enabled",
+          "sqlserver_va_periodic_recurring_scans_enabled"
+        ],
+        "gcp": [
+          "gcr_container_scanning_enabled"
+        ],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VDR-CSO-DAC",
+      "name": "Detect After Changes",
+      "description": "Providers SHOULD automatically perform vulnerability detection on representative samples of new or significantly changed information resources.",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [
+          "ecr_registry_scan_images_on_push_enabled",
+          "inspector2_is_enabled"
+        ],
+        "azure": [
+          "defender_container_images_scan_enabled"
+        ],
+        "gcp": [
+          "gcr_container_scanning_enabled"
+        ],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VDR-CSO-MSP",
+      "name": "Maintain Security",
+      "description": "Providers SHOULD NOT weaken the security of information resources to facilitate vulnerability scanning, detection, or assessment activities.",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "SHOULD NOT"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VDR-CSO-AKE",
+      "name": "Avoid KEVs",
+      "description": "Providers SHOULD NOT deploy or otherwise activate new machine-based information resources with Known Exploited Vulnerabilities.",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "SHOULD NOT"
+      },
+      "checks": {
+        "aws": [
+          "inspector2_active_findings_no_known_exploited_vulnerabilities"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VDR-CSO-SIR",
+      "name": "Sampling",
+      "description": "Providers MAY sample effectively identical information resources, especially machine-based information resources, when performing vulnerability detection UNLESS doing so would decrease the efficiency or effectiveness of vulnerability detection.",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "CSO: General Provider Responsibilities",
+        "Force": "MAY"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VDR-TFR-NMV",
+      "name": "Non-Machine Verification and Validation",
+      "description": "Providers MUST verify and validate the status of non-machine-based information resources at least once every 3 months.",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "TFR: Timeframes",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VDR-TFR-PDD",
+      "name": "Persistent Drift Detection",
+      "description": "Providers with Class C Certifications SHOULD persistently perform vulnerability detection on all information resources that are likely to drift, at least once every 14 days.",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "TFR: Timeframes",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [
+          "inspector2_coverage_recently_scanned",
+          "inspector2_is_enabled",
+          "securityhub_enabled"
+        ],
+        "azure": [
+          "defender_ensure_defender_cspm_is_on"
+        ],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "inspector2_coverage_recently_scanned",
+          "ConfigKey": "inspector2_max_days_since_last_scan",
+          "Operator": "lte",
+          "Value": 14,
+          "Provider": "aws"
+        },
+        {
+          "Check": "securityhub_enabled",
+          "ConfigKey": "mute_non_default_regions",
+          "Operator": "eq",
+          "Value": false,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "VDR-TFR-PCD",
+      "name": "Persistently Complete Detection",
+      "description": "Providers with Class C Certifications SHOULD persistently perform vulnerability detection on all information resources that are NOT likely to drift, at least once every month.",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "TFR: Timeframes",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [
+          "inspector2_coverage_recently_scanned"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "inspector2_coverage_recently_scanned",
+          "ConfigKey": "inspector2_max_days_since_last_scan",
+          "Operator": "lte",
+          "Value": 30,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "VDR-TFR-PVR",
+      "name": "Mitigation and Remediation Expectations",
+      "description": "Providers with Class C Certifications SHOULD partially mitigate vulnerabilities, fully mitigate vulnerabilities, or remediate vulnerabilities to a lower Potential Agency Impact N-rating within the timeframes from evaluation shown below, factoring for the current Potential Agency Impact N-rating as defined in VER-EVA-EPA (Estimate Potential Agency Impact), internet reachability, and likely exploitability: N2 Internet-Reachable Vulnerability + Likely Exploitable Vulnerability: 48 days; N2 Not Internet-Reachable Vulnerability + Likely Exploitable Vulnerability: 128 days; N2 Not Likely Exploitable Vulnerability: 192 days; N3 Internet-Reachable Vulnerability + Likely Exploitable Vulnerability: 16 days; N3 Not Internet-Reachable Vulnerability + Likely Exploitable Vulnerability: 32 days; N3 Not Likely Exploitable Vulnerability: 128 days; N4 Internet-Reachable Vulnerability + Likely Exploitable Vulnerability: 4 days; N4 Not Internet-Reachable Vulnerability + Likely Exploitable Vulnerability: 8 days; N4 Not Likely Exploitable Vulnerability: 64 days; N5 Internet-Reachable Vulnerability + Likely Exploitable Vulnerability: 2 days; N5 Not Internet-Reachable Vulnerability + Likely Exploitable Vulnerability: 4 days; N5 Not Likely Exploitable Vulnerability: 16 days",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "TFR: Timeframes",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VDR-TFR-RMN",
+      "name": "Remaining Vulnerabilities",
+      "description": "Providers SHOULD mitigate or remediate remaining vulnerabilities during routine operations as determined necessary by the provider.",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "TFR: Timeframes",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [
+          "ssm_managed_compliant_patching"
+        ],
+        "azure": [
+          "defender_ensure_system_updates_are_applied"
+        ],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VDR-TFR-KEV",
+      "name": "Remediate KEVs",
+      "description": "Providers SHOULD remediate Known Exploited Vulnerabilities according to the due dates in the CISA Known Exploited Vulnerabilities Catalog (even if the vulnerability has been fully mitigated) as required by CISA Binding Operational Directive (BOD) 26-04 or any successor guidance from CISA.",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "TFR: Timeframes",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [
+          "inspector2_active_findings_kev_within_due_date"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VDR-TFR-PSD",
+      "name": "Persistent Sample Detection",
+      "description": "Providers with Class C Certifications SHOULD persistently perform vulnerability detection on representative samples of similar machine-based information resources, at least once every 3 days.",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "TFR: Timeframes",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [
+          "inspector2_coverage_recently_scanned"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "inspector2_coverage_recently_scanned",
+          "ConfigKey": "inspector2_max_days_since_last_scan",
+          "Operator": "lte",
+          "Value": 3,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "VDR-TFR-MVX",
+      "name": "Persistent Machine Verification and Validation for 20x",
+      "description": "Providers of FedRAMP 20x Class C offerings MUST verify and validate the status of machine-based information resources at least once every 3 days.",
+      "attributes": {
+        "Ruleset": "VDR: Vulnerability Detection and Response",
+        "Subset": "TFR: Timeframes",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [
+          "config_recorder_all_regions_enabled",
+          "inspector2_coverage_recently_scanned",
+          "securityhub_enabled"
+        ],
+        "azure": [
+          "defender_ensure_defender_cspm_is_on"
+        ],
+        "gcp": [
+          "iam_cloud_asset_inventory_enabled"
+        ],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "inspector2_coverage_recently_scanned",
+          "ConfigKey": "inspector2_max_days_since_last_scan",
+          "Operator": "lte",
+          "Value": 3,
+          "Provider": "aws"
+        },
+        {
+          "Check": "config_recorder_all_regions_enabled",
+          "ConfigKey": "mute_non_default_regions",
+          "Operator": "eq",
+          "Value": false,
+          "Provider": "aws"
+        },
+        {
+          "Check": "securityhub_enabled",
+          "ConfigKey": "mute_non_default_regions",
+          "Operator": "eq",
+          "Value": false,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "VER-EVA-ELX",
+      "name": "Evaluate Exploitability",
+      "description": "Providers MUST evaluate detected vulnerabilities, considering the context of the cloud service offering, to determine if they are likely exploitable vulnerabilities.",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "EVA: Evaluation",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [
+          "inspector2_is_enabled"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-EVA-EIR",
+      "name": "Evaluate Internet-Reachability",
+      "description": "Providers MUST evaluate detected vulnerabilities, considering the context of the cloud service offering, to determine if they are internet-reachable vulnerabilities.",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "EVA: Evaluation",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [
+          "inspector2_is_enabled"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-EVA-EPA",
+      "name": "Estimate Potential Agency Impact",
+      "description": "Providers MUST evaluate detected vulnerabilities, considering the context of the cloud service offering, to estimate the potential agency impact of exploitation on government customers AND assign one of the following Potential Agency Impact N-ratings (PAIN): N1: Exploitation could be expected to have minimal customer effects on one or more agencies that use the cloud service offering.; N2: Exploitation could be expected to have narrow customer effects on one or more agencies that use the cloud service offering.; N3: Exploitation could be expected to have a disruptive customer effect on one agency that uses the cloud service offering.; N4: Exploitation could be expected to have a debilitating customer effect on one agency that uses the cloud service offering OR a disruptive customer effect on more than one federal agency that uses the cloud service offering.; N5: Exploitation could be expected to have a debilitating customer effect on more than one agency that uses the cloud service offering.",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "EVA: Evaluation",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-EVA-AIA",
+      "name": "Assume It's Automatable",
+      "description": "Providers MUST assume the exploitation of vulnerabilities can be automated UNLESS they have evidence proving otherwise.",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "EVA: Evaluation",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-EVA-GRV",
+      "name": "Group Vulnerabilities",
+      "description": "Providers SHOULD evaluate detected vulnerabilities, considering the context of the cloud service offering, to identify logical groupings of affected information resources that may improve the efficiency and effectiveness of vulnerability response by consolidating further activity; FedRAMP Vulnerability Detection and Response rules are then applied to these consolidated groupings of vulnerabilities instead of each individual detected instance.",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "EVA: Evaluation",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-EVA-EFP",
+      "name": "Evaluate False Positives",
+      "description": "Providers SHOULD evaluate detected vulnerabilities, considering the context of the cloud service offering, to determine if they are false positive vulnerabilities.",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "EVA: Evaluation",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-EVA-EFA",
+      "name": "Evaluation Factors",
+      "description": "Providers SHOULD consider at least the following factors when considering the context of the cloud service offering to evaluate detected vulnerabilities: Criticality: How important are the systems or information that might be impacted by the vulnerability?; Reachability: How might a threat actor reach the vulnerability and how likely is that?; Exploitability: How easy is it for a threat actor to exploit the vulnerability and how likely is that?; Detectability: How easy is it for a threat actor to become aware of the vulnerability and how likely is that?; Prevalence: How much of the cloud service offering is affected by the vulnerability?; Privilege: How much privileged authority or access is granted or can be gained from exploiting the vulnerability?; Proximate Vulnerabilities: How does this vulnerability interact with previously detected vulnerabilities, especially partially or fully mitigated vulnerabilities?; Known Threats: How might already known threats leverage the vulnerability and how likely is that?",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "EVA: Evaluation",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-RPT-PER",
+      "name": "Persistent Reporting",
+      "description": "Providers MUST report vulnerability detection and response activity (including persistent verification and validation) to all necessary parties persistently, summarizing ALL activity since the previous report; these reports are FedRAMP Certification Data and are subject to FedRAMP Certification Data Sharing rules.",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "RPT: Reporting",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-RPT-VDT",
+      "name": "Vulnerability Details",
+      "description": "Providers MUST include the following information (if applicable) on detected vulnerabilities when reporting on vulnerability detection and response activity, UNLESS it is an accepted vulnerability: Provider's internally assigned tracking identifier; Time and source of the detection; Time of completed evaluation; Is it an internet-reachable vulnerability or not?; Is it a likely exploitable vulnerability or not?; Historically and currently estimated Potential Agency Impact N-rating of exploitation; Time and Potential Agency Impact N-rating of each completed and evaluated reduction in Potential Agency Impact N-rating; Estimated time and target Potential Agency Impact N-rating of next reduction in Potential Agency Impact N-rating; Is it currently or is it likely to become an overdue vulnerability or not? If so, explain.; Any supplementary information the provider responsibly determines will help federal agencies assess or mitigate the risk to their federal customer data within the cloud service offering resulting from the vulnerability; Final disposition of the vulnerability",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "RPT: Reporting",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-RPT-AVI",
+      "name": "Accepted Vulnerability Info",
+      "description": "Providers MUST include the following information on accepted vulnerabilities when reporting on vulnerability detection and response activity: Provider's internally assigned tracking identifier; Time and source of the detection; Time of completed evaluation; Is it an internet-reachable vulnerability or not?; Is it a likely exploitable vulnerability or not?; Currently estimated Potential Agency Impact N-rating; Explanation of why this is an accepted vulnerability; Any supplementary information the provider determines will responsibly help federal agencies assess or mitigate the risk to their federal customer data within the cloud service offering resulting from the accepted vulnerability",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "RPT: Reporting",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-RPT-NID",
+      "name": "Responsible Disclosure",
+      "description": "Providers MUST NOT irresponsibly disclose specific sensitive information about vulnerabilities that would likely lead to exploitation, but MUST disclose sufficient information for informed risk-based decision-making to all necessary parties.",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "RPT: Reporting",
+        "Force": "MUST NOT"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-RPT-HLO",
+      "name": "High-Level Overviews",
+      "description": "Providers SHOULD include high-level overviews of ALL vulnerability detection and response activities conducted during this period for the cloud service offering; this includes vulnerability disclosure programs, bug bounty programs, penetration testing, assessments, etc.",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "RPT: Reporting",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-RPT-RPD",
+      "name": "Responsible Public Disclosure",
+      "description": "Providers MAY responsibly disclose vulnerabilities publicly or with other parties if the provider determines doing so will NOT likely lead to exploitation.",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "RPT: Reporting",
+        "Force": "MAY"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-TFR-MHR",
+      "name": "Monthly Activity Report",
+      "description": "Providers MUST report vulnerability detection and response activity to all necessary parties in a consistent format that is human readable at least monthly.",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "TFR: Timeframes",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-TFR-MAV",
+      "name": "Mark Accepted Vulnerabilities",
+      "description": "Providers MUST categorize any vulnerability that is not or will not be fully mitigated or remediated within 192 days of evaluation as an accepted vulnerability.",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "TFR: Timeframes",
+        "Force": "MUST"
+      },
+      "checks": {
+        "aws": [
+          "inspector2_active_findings_within_max_age"
+        ],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      },
+      "config_requirements": [
+        {
+          "Check": "inspector2_active_findings_within_max_age",
+          "ConfigKey": "inspector2_active_finding_max_age_days",
+          "Operator": "lte",
+          "Value": 192,
+          "Provider": "aws"
+        }
+      ]
+    },
+    {
+      "id": "VER-TFR-MRH",
+      "name": "Historical Activity",
+      "description": "Providers with Class C Certifications SHOULD make all recent historical vulnerability detection and response activity available in JSON format for automated retrieval by all necessary parties (e.g. using an API service or similar); this information SHOULD be updated persistently, at least once every 14 days.",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "TFR: Timeframes",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-TFR-EVU",
+      "name": "Evaluate Vulnerabilities Quickly",
+      "description": "Providers with Class C Certifications SHOULD evaluate ALL vulnerabilities as required by VER-EVA (Evaluation) within 5 days of detection.",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "TFR: Timeframes",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-TFR-IRI",
+      "name": "Internet-Reachable Incidents",
+      "description": "Providers with Class C Certifications SHOULD treat internet-reachable likely exploitable vulnerabilities where Potential Agency Impact N-rating > 3 as a FedRAMP Reportable Incident until they are partially mitigated vulnerabilities at N3 or below.",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "TFR: Timeframes",
+        "Force": "SHOULD"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    },
+    {
+      "id": "VER-TFR-NRI",
+      "name": "Non-Internet-Reachable Incidents",
+      "description": "Providers with Class C Certifications MAY treat likely exploitable vulnerabilities that are NOT internet-reachable where Potential Agency Impact N-rating = 5 as a FedRAMP Reportable Incident until they are partially mitigated vulnerabilities at N4 or below.",
+      "attributes": {
+        "Ruleset": "VER: Vulnerability Evaluation and Reporting",
+        "Subset": "TFR: Timeframes",
+        "Force": "MAY"
+      },
+      "checks": {
+        "aws": [],
+        "azure": [],
+        "gcp": [],
+        "kubernetes": [],
+        "m365": []
+      }
+    }
+  ]
+}
diff --git a/prowler/config/config.yaml b/prowler/config/config.yaml
index 46127c9699..0c7551d634 100644
--- a/prowler/config/config.yaml
+++ b/prowler/config/config.yaml
@@ -190,6 +190,14 @@ aws:
   # MEDIUM
   ecr_repository_vulnerability_minimum_severity: "MEDIUM"
 
+  # AWS Inspector2
+  # aws.inspector2_coverage_recently_scanned
+  # Maximum days since Inspector2 last scanned an actively covered resource
+  inspector2_max_days_since_last_scan: 3
+  # aws.inspector2_active_findings_within_max_age
+  # Maximum days an Inspector2 finding can stay active since it was first observed
+  inspector2_active_finding_max_age_days: 192
+
   # AWS Trusted Advisor
   # aws.trustedadvisor_premium_support_plan_subscribed
   verify_premium_support_plans: True
diff --git a/prowler/config/schema/aws.py b/prowler/config/schema/aws.py
index 75fa5f73c0..c46d848650 100644
--- a/prowler/config/schema/aws.py
+++ b/prowler/config/schema/aws.py
@@ -333,6 +333,20 @@ class AWSProviderConfig(ProviderConfigBase):
         description="Highest severity tolerated for ECR images.",
     )
 
+    # --- Inspector2 -------------------------------------------------------
+    inspector2_max_days_since_last_scan: Optional[int] = Field(
+        default=None,
+        ge=1,
+        le=90,
+        description="Days since Inspector2 last scanned a covered resource. Range: 1..90.",
+    )
+    inspector2_active_finding_max_age_days: Optional[int] = Field(
+        default=None,
+        ge=1,
+        le=365,
+        description="Days an Inspector2 finding can stay active since first observed. Range: 1..365.",
+    )
+
     # --- Trusted Advisor --------------------------------------------------
     verify_premium_support_plans: Optional[bool] = None
 
diff --git a/prowler/providers/aws/services/elbv2/elbv2_listener_fips_tls_enabled/__init__.py b/prowler/providers/aws/services/elbv2/elbv2_listener_fips_tls_enabled/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/elbv2/elbv2_listener_fips_tls_enabled/elbv2_listener_fips_tls_enabled.metadata.json b/prowler/providers/aws/services/elbv2/elbv2_listener_fips_tls_enabled/elbv2_listener_fips_tls_enabled.metadata.json
new file mode 100644
index 0000000000..9e321f7c54
--- /dev/null
+++ b/prowler/providers/aws/services/elbv2/elbv2_listener_fips_tls_enabled/elbv2_listener_fips_tls_enabled.metadata.json
@@ -0,0 +1,43 @@
+{
+  "Provider": "aws",
+  "CheckID": "elbv2_listener_fips_tls_enabled",
+  "CheckTitle": "ELBv2 HTTPS/TLS listeners use a FIPS TLS security policy",
+  "CheckType": [
+    "Software and Configuration Checks/AWS Security Best Practices"
+  ],
+  "ServiceName": "elbv2",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "",
+  "Severity": "low",
+  "ResourceType": "AwsElbv2LoadBalancer",
+  "ResourceGroup": "network",
+  "Description": "**ELBv2 HTTPS and TLS listeners** are assessed for use of a **FIPS** TLS security policy (`ELBSecurityPolicy-*-FIPS-*`). FIPS policies terminate TLS with the AWS-LC FIPS validated cryptographic module.",
+  "Risk": "Listeners without a FIPS policy terminate TLS with cryptographic modules that are not FIPS 140 validated, which does not meet requirements to protect federal or regulated data with **NIST CMVP validated cryptography**.",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://docs.aws.amazon.com/elasticloadbalancing/latest/application/describe-ssl-policies.html",
+    "https://docs.aws.amazon.com/elasticloadbalancing/latest/network/describe-ssl-policies.html",
+    "https://aws.amazon.com/compliance/fips/"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "aws elbv2 modify-listener --listener-arn <listener_arn> --ssl-policy ELBSecurityPolicy-TLS13-1-2-FIPS-2023-04",
+      "NativeIaC": "```yaml\nResources:\n  <example_resource_name>:\n    Type: AWS::ElasticLoadBalancingV2::Listener\n    Properties:\n      LoadBalancerArn: <example_resource_arn>\n      Protocol: HTTPS\n      Port: 443\n      DefaultActions:\n        - Type: forward\n          TargetGroupArn: <example_resource_arn>\n      Certificates:\n        - CertificateArn: <example_certificate_arn>\n      SslPolicy: ELBSecurityPolicy-TLS13-1-2-FIPS-2023-04  # FIX: uses a FIPS TLS policy\n```",
+      "Other": "1. In the AWS Console, go to EC2 > Load Balancers\n2. Select the load balancer and open the Listeners tab\n3. Select each HTTPS/TLS listener and choose Edit\n4. Set Security policy to a FIPS policy such as ELBSecurityPolicy-TLS13-1-2-FIPS-2023-04\n5. Save changes",
+      "Terraform": "```hcl\nresource \"aws_lb_listener\" \"<example_resource_name>\" {\n  load_balancer_arn = \"<example_resource_arn>\"\n  port              = 443\n  protocol          = \"HTTPS\"\n  ssl_policy        = \"ELBSecurityPolicy-TLS13-1-2-FIPS-2023-04\" # FIX: FIPS TLS policy\n  certificate_arn   = \"<example_certificate_arn>\"\n\n  default_action {\n    type             = \"forward\"\n    target_group_arn = \"<example_resource_arn>\"\n  }\n}\n```"
+    },
+    "Recommendation": {
+      "Text": "Use a **FIPS** TLS security policy, such as `ELBSecurityPolicy-TLS13-1-2-FIPS-2023-04`, on every HTTPS and TLS listener that carries federal or regulated data.",
+      "Url": "https://hub.prowler.com/check/elbv2_listener_fips_tls_enabled"
+    }
+  },
+  "Categories": [
+    "encryption"
+  ],
+  "DependsOn": [],
+  "RelatedTo": [
+    "elbv2_insecure_ssl_ciphers",
+    "elbv2_listener_pqc_tls_enabled"
+  ],
+  "Notes": ""
+}
diff --git a/prowler/providers/aws/services/elbv2/elbv2_listener_fips_tls_enabled/elbv2_listener_fips_tls_enabled.py b/prowler/providers/aws/services/elbv2/elbv2_listener_fips_tls_enabled/elbv2_listener_fips_tls_enabled.py
new file mode 100644
index 0000000000..3a9d07f4ba
--- /dev/null
+++ b/prowler/providers/aws/services/elbv2/elbv2_listener_fips_tls_enabled/elbv2_listener_fips_tls_enabled.py
@@ -0,0 +1,35 @@
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.elbv2.elbv2_client import elbv2_client
+
+
+class elbv2_listener_fips_tls_enabled(Check):
+    """Ensure every ELBv2 HTTPS or TLS listener uses a FIPS TLS security policy."""
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Report whether each load balancer terminates HTTPS/TLS with a FIPS policy."""
+        findings = []
+        for lb in elbv2_client.loadbalancersv2.values():
+            if lb.listener_discovery_failed:
+                continue
+            report = Check_Report_AWS(metadata=self.metadata(), resource=lb)
+            tls_listeners = {
+                listener_arn: listener
+                for listener_arn, listener in lb.listeners.items()
+                if listener.protocol in ("HTTPS", "TLS")
+            }
+            non_fips_listeners = [
+                f"{listener.protocol}:{listener.port} ({listener_arn}) uses {listener.ssl_policy or '<none>'}"
+                for listener_arn, listener in tls_listeners.items()
+                if "FIPS" not in (listener.ssl_policy or "").split("-")
+            ]
+            if not tls_listeners:
+                report.status = "PASS"
+                report.status_extended = f"ELBv2 {lb.name} has no HTTPS/TLS listeners."
+            elif non_fips_listeners:
+                report.status = "FAIL"
+                report.status_extended = f"ELBv2 {lb.name} has HTTPS/TLS listeners without a FIPS TLS security policy: {', '.join(non_fips_listeners)}."
+            else:
+                report.status = "PASS"
+                report.status_extended = f"ELBv2 {lb.name} has all HTTPS/TLS listeners using a FIPS TLS security policy."
+            findings.append(report)
+        return findings
diff --git a/prowler/providers/aws/services/inspector2/inspector2_active_findings_kev_within_due_date/__init__.py b/prowler/providers/aws/services/inspector2/inspector2_active_findings_kev_within_due_date/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/inspector2/inspector2_active_findings_kev_within_due_date/inspector2_active_findings_kev_within_due_date.metadata.json b/prowler/providers/aws/services/inspector2/inspector2_active_findings_kev_within_due_date/inspector2_active_findings_kev_within_due_date.metadata.json
new file mode 100644
index 0000000000..3795a96fae
--- /dev/null
+++ b/prowler/providers/aws/services/inspector2/inspector2_active_findings_kev_within_due_date/inspector2_active_findings_kev_within_due_date.metadata.json
@@ -0,0 +1,42 @@
+{
+  "Provider": "aws",
+  "CheckID": "inspector2_active_findings_kev_within_due_date",
+  "CheckTitle": "Inspector2 has no active findings for CISA Known Exploited Vulnerabilities past their remediation due date",
+  "CheckType": [
+    "Software and Configuration Checks/Vulnerabilities/CVE",
+    "Software and Configuration Checks/AWS Security Best Practices"
+  ],
+  "ServiceName": "inspector2",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "",
+  "Severity": "critical",
+  "ResourceType": "Other",
+  "ResourceGroup": "security",
+  "Description": "**Amazon Inspector** active findings for **CISA Known Exploited Vulnerabilities** are compared with the remediation due date (`dateDue`) that CISA assigns to each entry of the KEV catalog. Findings that are still active after that date are reported.\n\nThe result is reported per Region where Inspector is enabled.",
+  "Risk": "CISA due dates reflect **active exploitation**. Missing them keeps exploited vulnerabilities open beyond the window CISA sets for federal agencies and shows that vulnerability response is not keeping pace with real threats.",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
+    "https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchGetFindingDetails.html"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "",
+      "NativeIaC": "",
+      "Other": "1. In the AWS Console, open Amazon Inspector > Findings\n2. Filter by Vulnerability ID for each overdue CVE reported by this check\n3. Patch or upgrade the affected packages, rebuild container images or update Lambda runtimes\n4. If a fix is not available, apply the mitigations listed in the CISA catalog entry\n5. Confirm the findings move to Closed",
+      "Terraform": ""
+    },
+    "Recommendation": {
+      "Text": "Track every KEV finding against its **CISA due date** and remediate before it passes. When no fix exists yet, apply the vendor or CISA mitigations and document the residual risk.",
+      "Url": "https://hub.prowler.com/check/inspector2_active_findings_kev_within_due_date"
+    }
+  },
+  "Categories": [
+    "vulnerabilities"
+  ],
+  "DependsOn": [],
+  "RelatedTo": [
+    "inspector2_active_findings_no_known_exploited_vulnerabilities"
+  ],
+  "Notes": ""
+}
diff --git a/prowler/providers/aws/services/inspector2/inspector2_active_findings_kev_within_due_date/inspector2_active_findings_kev_within_due_date.py b/prowler/providers/aws/services/inspector2/inspector2_active_findings_kev_within_due_date/inspector2_active_findings_kev_within_due_date.py
new file mode 100644
index 0000000000..e0ec8ddd30
--- /dev/null
+++ b/prowler/providers/aws/services/inspector2/inspector2_active_findings_kev_within_due_date/inspector2_active_findings_kev_within_due_date.py
@@ -0,0 +1,66 @@
+from datetime import datetime, timezone
+
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.inspector2.inspector2_client import (
+    inspector2_client,
+)
+from prowler.providers.aws.services.inspector2.lib.vulnerabilities import (
+    summarize_vulnerabilities,
+)
+
+
+class inspector2_active_findings_kev_within_due_date(Check):
+    """Ensure active Inspector2 findings for CISA KEVs are not past their CISA due date."""
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Report, per Region, whether any CISA KEV finding is past its remediation due date."""
+        findings = []
+        now = datetime.now(timezone.utc)
+        known_exploited = inspector2_client.known_exploited_vulnerabilities
+        lookup_failed = inspector2_client.vulnerability_lookup_failed
+        for inspector in inspector2_client.inspectors:
+            if inspector.status != "ENABLED":
+                continue
+            report = Check_Report_AWS(metadata=self.metadata(), resource=inspector)
+            if inspector.findings is None:
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"Inspector2 findings could not be retrieved in region {inspector.region}; "
+                    "verify the inspector2:ListFindings permission."
+                )
+                findings.append(report)
+                continue
+            vulnerability_ids = {
+                finding.vulnerability_id
+                for finding in inspector.findings
+                if finding.vulnerability_id
+            }
+            overdue = sorted(
+                f"{vulnerability_id} (due {known_exploited[vulnerability_id].date_due.date().isoformat()})"
+                for vulnerability_id in known_exploited.keys() & vulnerability_ids
+                if known_exploited[vulnerability_id].date_due
+                and known_exploited[vulnerability_id].date_due < now
+            )
+            unverified_ids = sorted(vulnerability_ids & lookup_failed)
+            if overdue:
+                report.status = "FAIL"
+                report.status_extended = (
+                    f"Inspector2 has active findings in region {inspector.region} for CISA "
+                    "Known Exploited Vulnerabilities past their remediation due date: "
+                    f"{summarize_vulnerabilities(overdue)}."
+                )
+            elif unverified_ids:
+                report.status = "MANUAL"
+                report.status_extended = (
+                    "Inspector2 could not verify the CISA Known Exploited Vulnerabilities status of "
+                    f"{summarize_vulnerabilities(unverified_ids)} in region {inspector.region}; "
+                    "verify the inspector2:BatchGetFindingDetails permission."
+                )
+            else:
+                report.status = "PASS"
+                report.status_extended = (
+                    f"Inspector2 has no active findings in region {inspector.region} for CISA "
+                    "Known Exploited Vulnerabilities past their remediation due date."
+                )
+            findings.append(report)
+        return findings
diff --git a/prowler/providers/aws/services/inspector2/inspector2_active_findings_no_known_exploited_vulnerabilities/__init__.py b/prowler/providers/aws/services/inspector2/inspector2_active_findings_no_known_exploited_vulnerabilities/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/inspector2/inspector2_active_findings_no_known_exploited_vulnerabilities/inspector2_active_findings_no_known_exploited_vulnerabilities.metadata.json b/prowler/providers/aws/services/inspector2/inspector2_active_findings_no_known_exploited_vulnerabilities/inspector2_active_findings_no_known_exploited_vulnerabilities.metadata.json
new file mode 100644
index 0000000000..5072ebd6a6
--- /dev/null
+++ b/prowler/providers/aws/services/inspector2/inspector2_active_findings_no_known_exploited_vulnerabilities/inspector2_active_findings_no_known_exploited_vulnerabilities.metadata.json
@@ -0,0 +1,43 @@
+{
+  "Provider": "aws",
+  "CheckID": "inspector2_active_findings_no_known_exploited_vulnerabilities",
+  "CheckTitle": "Inspector2 has no active findings for CISA Known Exploited Vulnerabilities",
+  "CheckType": [
+    "Software and Configuration Checks/Vulnerabilities/CVE",
+    "Software and Configuration Checks/AWS Security Best Practices"
+  ],
+  "ServiceName": "inspector2",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "",
+  "Severity": "high",
+  "ResourceType": "Other",
+  "ResourceGroup": "security",
+  "Description": "**Amazon Inspector** active findings are cross-referenced with the **CISA Known Exploited Vulnerabilities (KEV)** catalog, using the CISA data that Inspector returns in the finding details (`BatchGetFindingDetails`) of each CVE.\n\nThe result is reported per Region where Inspector is enabled.",
+  "Risk": "KEV entries are vulnerabilities **confirmed as exploited in the wild**. Workloads carrying them are prime targets for initial access and ransomware, enabling remote code execution, data exfiltration and lateral movement.",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
+    "https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchGetFindingDetails.html"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "",
+      "NativeIaC": "",
+      "Other": "1. In the AWS Console, open Amazon Inspector > Findings\n2. Filter by Vulnerability ID for each CVE reported by this check\n3. Patch or upgrade the affected packages, rebuild container images or update Lambda runtimes\n4. Confirm the findings move to Closed",
+      "Terraform": ""
+    },
+    "Recommendation": {
+      "Text": "Remediate KEV findings before any other vulnerability: patch or upgrade the affected packages, rebuild and redeploy container images, and stop deploying new resources that carry **known exploited vulnerabilities**.",
+      "Url": "https://hub.prowler.com/check/inspector2_active_findings_no_known_exploited_vulnerabilities"
+    }
+  },
+  "Categories": [
+    "vulnerabilities"
+  ],
+  "DependsOn": [],
+  "RelatedTo": [
+    "inspector2_active_findings_exist",
+    "inspector2_active_findings_kev_within_due_date"
+  ],
+  "Notes": ""
+}
diff --git a/prowler/providers/aws/services/inspector2/inspector2_active_findings_no_known_exploited_vulnerabilities/inspector2_active_findings_no_known_exploited_vulnerabilities.py b/prowler/providers/aws/services/inspector2/inspector2_active_findings_no_known_exploited_vulnerabilities/inspector2_active_findings_no_known_exploited_vulnerabilities.py
new file mode 100644
index 0000000000..e483205cb1
--- /dev/null
+++ b/prowler/providers/aws/services/inspector2/inspector2_active_findings_no_known_exploited_vulnerabilities/inspector2_active_findings_no_known_exploited_vulnerabilities.py
@@ -0,0 +1,57 @@
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.inspector2.inspector2_client import (
+    inspector2_client,
+)
+from prowler.providers.aws.services.inspector2.lib.vulnerabilities import (
+    summarize_vulnerabilities,
+)
+
+
+class inspector2_active_findings_no_known_exploited_vulnerabilities(Check):
+    """Ensure no active Inspector2 finding is a CISA Known Exploited Vulnerability."""
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Report, per Region, whether any active finding is a CISA Known Exploited Vulnerability."""
+        findings = []
+        known_exploited = inspector2_client.known_exploited_vulnerabilities
+        lookup_failed = inspector2_client.vulnerability_lookup_failed
+        for inspector in inspector2_client.inspectors:
+            if inspector.status != "ENABLED":
+                continue
+            report = Check_Report_AWS(metadata=self.metadata(), resource=inspector)
+            if inspector.findings is None:
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"Inspector2 findings could not be retrieved in region {inspector.region}; "
+                    "verify the inspector2:ListFindings permission."
+                )
+                findings.append(report)
+                continue
+            vulnerability_ids = {
+                finding.vulnerability_id
+                for finding in inspector.findings
+                if finding.vulnerability_id
+            }
+            kev_ids = sorted(known_exploited.keys() & vulnerability_ids)
+            unverified_ids = sorted(vulnerability_ids & lookup_failed)
+            if kev_ids:
+                report.status = "FAIL"
+                report.status_extended = (
+                    f"Inspector2 has active findings in region {inspector.region} for CISA "
+                    f"Known Exploited Vulnerabilities: {summarize_vulnerabilities(kev_ids)}."
+                )
+            elif unverified_ids:
+                report.status = "MANUAL"
+                report.status_extended = (
+                    "Inspector2 could not verify the CISA Known Exploited Vulnerabilities status of "
+                    f"{summarize_vulnerabilities(unverified_ids)} in region {inspector.region}; "
+                    "verify the inspector2:BatchGetFindingDetails permission."
+                )
+            else:
+                report.status = "PASS"
+                report.status_extended = (
+                    f"Inspector2 has no active findings in region {inspector.region} for CISA "
+                    "Known Exploited Vulnerabilities."
+                )
+            findings.append(report)
+        return findings
diff --git a/prowler/providers/aws/services/inspector2/inspector2_active_findings_within_max_age/__init__.py b/prowler/providers/aws/services/inspector2/inspector2_active_findings_within_max_age/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/inspector2/inspector2_active_findings_within_max_age/inspector2_active_findings_within_max_age.metadata.json b/prowler/providers/aws/services/inspector2/inspector2_active_findings_within_max_age/inspector2_active_findings_within_max_age.metadata.json
new file mode 100644
index 0000000000..7846da4f05
--- /dev/null
+++ b/prowler/providers/aws/services/inspector2/inspector2_active_findings_within_max_age/inspector2_active_findings_within_max_age.metadata.json
@@ -0,0 +1,43 @@
+{
+  "Provider": "aws",
+  "CheckID": "inspector2_active_findings_within_max_age",
+  "CheckTitle": "Inspector2 has no active findings older than the configured maximum age",
+  "CheckType": [
+    "Software and Configuration Checks/Vulnerabilities/CVE",
+    "Software and Configuration Checks/Patch Management",
+    "Software and Configuration Checks/AWS Security Best Practices"
+  ],
+  "ServiceName": "inspector2",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "",
+  "Severity": "medium",
+  "ResourceType": "Other",
+  "ResourceGroup": "security",
+  "Description": "**Amazon Inspector** active findings are evaluated against the configurable `inspector2_active_finding_max_age_days` threshold (192 days by default), using the time since each finding was first observed (`firstObservedAt`). Suppressed and closed findings are not active and are not evaluated.\n\nThe result is reported per Region where Inspector is enabled.",
+  "Risk": "Findings left open for months show that **vulnerability response** is not keeping up. Long-lived vulnerabilities give attackers time to discover and exploit them, and a backlog that is neither fixed nor formally accepted hides real risk from decision makers.",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://docs.aws.amazon.com/inspector/latest/user/findings-understanding.html",
+    "https://docs.aws.amazon.com/inspector/latest/user/findings-managing-supression-rules.html"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "",
+      "NativeIaC": "",
+      "Other": "1. In the Amazon Inspector console, open Findings and filter by Finding status = Active\n2. Remediate the findings first observed longest ago\n3. For vulnerabilities you formally accept, choose Suppression rules in the navigation pane and create a rule so they stop counting as active",
+      "Terraform": ""
+    },
+    "Recommendation": {
+      "Text": "Remediate findings within your vulnerability response timeframes. Vulnerabilities you decide not to fix should be formally **accepted** and suppressed with a documented justification instead of staying active indefinitely.",
+      "Url": "https://hub.prowler.com/check/inspector2_active_findings_within_max_age"
+    }
+  },
+  "Categories": [
+    "vulnerabilities"
+  ],
+  "DependsOn": [],
+  "RelatedTo": [
+    "inspector2_active_findings_exist"
+  ],
+  "Notes": ""
+}
diff --git a/prowler/providers/aws/services/inspector2/inspector2_active_findings_within_max_age/inspector2_active_findings_within_max_age.py b/prowler/providers/aws/services/inspector2/inspector2_active_findings_within_max_age/inspector2_active_findings_within_max_age.py
new file mode 100644
index 0000000000..220ee3c9cd
--- /dev/null
+++ b/prowler/providers/aws/services/inspector2/inspector2_active_findings_within_max_age/inspector2_active_findings_within_max_age.py
@@ -0,0 +1,51 @@
+from datetime import datetime, timedelta, timezone
+
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.inspector2.inspector2_client import (
+    inspector2_client,
+)
+
+
+class inspector2_active_findings_within_max_age(Check):
+    """Ensure no Inspector2 finding stays active longer than the configured days."""
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Report, per Region, whether any active finding is older than the allowed days."""
+        findings = []
+        max_age_days = inspector2_client.audit_config.get(
+            "inspector2_active_finding_max_age_days", 192
+        )
+        max_age = timedelta(days=max_age_days)
+        now = datetime.now(timezone.utc)
+        for inspector in inspector2_client.inspectors:
+            if inspector.status != "ENABLED":
+                continue
+            report = Check_Report_AWS(metadata=self.metadata(), resource=inspector)
+            if inspector.findings is None:
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"Inspector2 findings could not be retrieved in region {inspector.region}; "
+                    "verify the inspector2:ListFindings permission."
+                )
+                findings.append(report)
+                continue
+            stale_ages = [
+                now - finding.first_observed_at
+                for finding in inspector.findings
+                if finding.first_observed_at
+                and now - finding.first_observed_at > max_age
+            ]
+            if stale_ages:
+                report.status = "FAIL"
+                report.status_extended = (
+                    f"Inspector2 has {len(stale_ages)} active findings in region {inspector.region} "
+                    f"first observed more than {max_age_days} days ago, the oldest {max(stale_ages).days} days ago."
+                )
+            else:
+                report.status = "PASS"
+                report.status_extended = (
+                    f"Inspector2 has no active findings in region {inspector.region} "
+                    f"first observed more than {max_age_days} days ago."
+                )
+            findings.append(report)
+        return findings
diff --git a/prowler/providers/aws/services/inspector2/inspector2_coverage_recently_scanned/__init__.py b/prowler/providers/aws/services/inspector2/inspector2_coverage_recently_scanned/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/inspector2/inspector2_coverage_recently_scanned/inspector2_coverage_recently_scanned.metadata.json b/prowler/providers/aws/services/inspector2/inspector2_coverage_recently_scanned/inspector2_coverage_recently_scanned.metadata.json
new file mode 100644
index 0000000000..8fc174f17f
--- /dev/null
+++ b/prowler/providers/aws/services/inspector2/inspector2_coverage_recently_scanned/inspector2_coverage_recently_scanned.metadata.json
@@ -0,0 +1,43 @@
+{
+  "Provider": "aws",
+  "CheckID": "inspector2_coverage_recently_scanned",
+  "CheckTitle": "Inspector2 covered resource was scanned within the configured number of days",
+  "CheckType": [
+    "Software and Configuration Checks/Vulnerabilities/CVE",
+    "Software and Configuration Checks/AWS Security Best Practices"
+  ],
+  "ServiceName": "inspector2",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "",
+  "Severity": "medium",
+  "ResourceType": "Other",
+  "ResourceGroup": "security",
+  "Description": "**Amazon Inspector** coverage is evaluated for every actively monitored resource. The time since the resource was last scanned (`lastScannedAt`) is compared with the configurable `inspector2_max_days_since_last_scan` threshold (3 days by default).\n\nResources still pending their first scan are not evaluated.",
+  "Risk": "Stale scans leave **newly published CVEs** and configuration **drift** undetected. A resource that has not been rescanned for weeks can keep running exploitable packages long after a fix is available.",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://docs.aws.amazon.com/inspector/latest/user/assessing-coverage.html",
+    "https://docs.aws.amazon.com/inspector/latest/user/scanning-ecr.html"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "",
+      "NativeIaC": "",
+      "Other": "1. In the Amazon Inspector console, choose Account management and review the Last scanned at value in the Instances, Container images and Lambda functions tabs\n2. For EC2 instances, confirm the SSM Agent is healthy or, under General settings > EC2 scanning settings, set the scan mode to hybrid\n3. For ECR images, increase the Amazon ECR re-scan duration in the Amazon Inspector settings\n4. Confirm the resources are rescanned",
+      "Terraform": ""
+    },
+    "Recommendation": {
+      "Text": "Keep continuous scanning healthy: use **hybrid** EC2 scanning so instances without a working SSM agent are still scanned, set a long ECR **rescan duration** for images in use, and investigate every resource whose last scan is older than the allowed window.",
+      "Url": "https://hub.prowler.com/check/inspector2_coverage_recently_scanned"
+    }
+  },
+  "Categories": [
+    "vulnerabilities"
+  ],
+  "DependsOn": [],
+  "RelatedTo": [
+    "inspector2_is_enabled",
+    "inspector2_coverage_scan_status_active"
+  ],
+  "Notes": ""
+}
diff --git a/prowler/providers/aws/services/inspector2/inspector2_coverage_recently_scanned/inspector2_coverage_recently_scanned.py b/prowler/providers/aws/services/inspector2/inspector2_coverage_recently_scanned/inspector2_coverage_recently_scanned.py
new file mode 100644
index 0000000000..0e5a3bf6fd
--- /dev/null
+++ b/prowler/providers/aws/services/inspector2/inspector2_coverage_recently_scanned/inspector2_coverage_recently_scanned.py
@@ -0,0 +1,57 @@
+from datetime import datetime, timedelta, timezone
+
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.inspector2.inspector2_client import (
+    inspector2_client,
+)
+
+PENDING_SCAN_REASONS = {
+    "PENDING_INITIAL_SCAN",
+    "PENDING_REVIVAL_SCAN",
+    "SCAN_IN_PROGRESS",
+}
+
+
+class inspector2_coverage_recently_scanned(Check):
+    """Ensure Inspector2 scanned every actively covered resource within the configured days."""
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Report whether each actively covered resource was scanned within the allowed days."""
+        findings = []
+        max_days = inspector2_client.audit_config.get(
+            "inspector2_max_days_since_last_scan", 3
+        )
+        max_elapsed = timedelta(days=max_days)
+        now = datetime.now(timezone.utc)
+        for inspector in inspector2_client.inspectors:
+            if inspector.status != "ENABLED":
+                continue
+            if inspector.coverage is None:
+                report = Check_Report_AWS(metadata=self.metadata(), resource=inspector)
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"Inspector2 coverage could not be retrieved in region {inspector.region}; "
+                    "verify the inspector2:ListCoverage permission."
+                )
+                findings.append(report)
+                continue
+            for resource in inspector.coverage:
+                if resource.scan_status_code != "ACTIVE":
+                    continue
+                if (
+                    resource.last_scanned_at is None
+                    and resource.scan_status_reason in PENDING_SCAN_REASONS
+                ):
+                    continue
+                report = Check_Report_AWS(metadata=self.metadata(), resource=resource)
+                if resource.last_scanned_at is None:
+                    report.status = "FAIL"
+                    report.status_extended = f"{resource.resource_type} {resource.id} has no recorded Inspector2 scan."
+                elif now - resource.last_scanned_at > max_elapsed:
+                    report.status = "FAIL"
+                    report.status_extended = f"{resource.resource_type} {resource.id} was last scanned by Inspector2 more than {max_days} days ago."
+                else:
+                    report.status = "PASS"
+                    report.status_extended = f"{resource.resource_type} {resource.id} was last scanned by Inspector2 within the last {max_days} days."
+                findings.append(report)
+        return findings
diff --git a/prowler/providers/aws/services/inspector2/inspector2_coverage_scan_status_active/__init__.py b/prowler/providers/aws/services/inspector2/inspector2_coverage_scan_status_active/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/inspector2/inspector2_coverage_scan_status_active/inspector2_coverage_scan_status_active.metadata.json b/prowler/providers/aws/services/inspector2/inspector2_coverage_scan_status_active/inspector2_coverage_scan_status_active.metadata.json
new file mode 100644
index 0000000000..0488e5097f
--- /dev/null
+++ b/prowler/providers/aws/services/inspector2/inspector2_coverage_scan_status_active/inspector2_coverage_scan_status_active.metadata.json
@@ -0,0 +1,42 @@
+{
+  "Provider": "aws",
+  "CheckID": "inspector2_coverage_scan_status_active",
+  "CheckTitle": "Inspector2 covered resource is actively scanned",
+  "CheckType": [
+    "Software and Configuration Checks/Vulnerabilities/CVE",
+    "Software and Configuration Checks/AWS Security Best Practices"
+  ],
+  "ServiceName": "inspector2",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "",
+  "Severity": "medium",
+  "ResourceType": "Other",
+  "ResourceGroup": "security",
+  "Description": "**Amazon Inspector** coverage is evaluated for every resource it tracks (EC2 instances, ECR images and repositories, Lambda functions). A resource whose scan status is `INACTIVE`, for example because of `UNMANAGED_EC2_INSTANCE`, `NO_INVENTORY`, `UNSUPPORTED_OS` or `ACCESS_DENIED`, is not being scanned for vulnerabilities.\n\nStopped, terminated, tag-excluded and aged-out resources are not evaluated.",
+  "Risk": "Resources that Inspector cannot scan silently fall out of **vulnerability detection**. New CVEs affecting those workloads are never reported, so exploitable software can stay deployed while the account still appears covered.",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://docs.aws.amazon.com/inspector/latest/user/assessing-coverage.html",
+    "https://docs.aws.amazon.com/inspector/latest/user/scanning-ec2.html"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "",
+      "NativeIaC": "",
+      "Other": "1. In the Amazon Inspector console, choose Account management\n2. Open the Instances, Container images or Lambda functions tab and review the resources that are not actively scanned\n3. Fix the reported cause: register EC2 instances with Systems Manager or set the EC2 scan mode to hybrid, use supported operating systems and runtimes, and grant access to the required encryption keys\n4. Confirm the resource is actively scanned",
+      "Terraform": ""
+    },
+    "Recommendation": {
+      "Text": "Resolve the reason reported in each inactive resource's scan status so Inspector can scan every in-scope workload. Register EC2 instances with **Systems Manager** or enable **hybrid scanning**, keep operating systems and runtimes supported, and treat scanning gaps as vulnerabilities to track.",
+      "Url": "https://hub.prowler.com/check/inspector2_coverage_scan_status_active"
+    }
+  },
+  "Categories": [
+    "vulnerabilities"
+  ],
+  "DependsOn": [],
+  "RelatedTo": [
+    "inspector2_is_enabled"
+  ],
+  "Notes": ""
+}
diff --git a/prowler/providers/aws/services/inspector2/inspector2_coverage_scan_status_active/inspector2_coverage_scan_status_active.py b/prowler/providers/aws/services/inspector2/inspector2_coverage_scan_status_active/inspector2_coverage_scan_status_active.py
new file mode 100644
index 0000000000..c1cd63cc02
--- /dev/null
+++ b/prowler/providers/aws/services/inspector2/inspector2_coverage_scan_status_active/inspector2_coverage_scan_status_active.py
@@ -0,0 +1,46 @@
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.inspector2.inspector2_client import (
+    inspector2_client,
+)
+
+NOT_APPLICABLE_SCAN_REASONS = {
+    "EC2_INSTANCE_STOPPED",
+    "EXCLUDED_BY_TAG",
+    "NO_RESOURCES_FOUND",
+    "PENDING_DISABLE",
+    "RESOURCE_TERMINATED",
+    "SCAN_ELIGIBILITY_EXPIRED",
+}
+
+
+class inspector2_coverage_scan_status_active(Check):
+    """Ensure Inspector2 is actively scanning every covered resource."""
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Report whether Inspector2 is actively scanning each covered resource."""
+        findings = []
+        for inspector in inspector2_client.inspectors:
+            if inspector.status != "ENABLED":
+                continue
+            if inspector.coverage is None:
+                report = Check_Report_AWS(metadata=self.metadata(), resource=inspector)
+                report.status = "MANUAL"
+                report.status_extended = (
+                    f"Inspector2 coverage could not be retrieved in region {inspector.region}; "
+                    "verify the inspector2:ListCoverage permission."
+                )
+                findings.append(report)
+                continue
+            for resource in inspector.coverage:
+                if resource.scan_status_reason in NOT_APPLICABLE_SCAN_REASONS:
+                    continue
+                report = Check_Report_AWS(metadata=self.metadata(), resource=resource)
+                if resource.scan_status_code == "ACTIVE":
+                    report.status = "PASS"
+                    report.status_extended = f"Inspector2 is actively scanning {resource.resource_type} {resource.id}."
+                else:
+                    report.status = "FAIL"
+                    reason = resource.scan_status_reason or "no reason reported"
+                    report.status_extended = f"Inspector2 is not scanning {resource.resource_type} {resource.id}: {reason}."
+                findings.append(report)
+        return findings
diff --git a/prowler/providers/aws/services/inspector2/inspector2_service.py b/prowler/providers/aws/services/inspector2/inspector2_service.py
index cc6dac7413..6acf186a66 100644
--- a/prowler/providers/aws/services/inspector2/inspector2_service.py
+++ b/prowler/providers/aws/services/inspector2/inspector2_service.py
@@ -1,16 +1,33 @@
+from datetime import datetime
+from typing import Optional
+
 from pydantic.v1 import BaseModel
 
 from prowler.lib.logger import logger
+from prowler.lib.scan_filters.scan_filters import is_resource_filtered
 from prowler.providers.aws.lib.service.service import AWSService
 
+FINDING_DETAILS_BATCH_SIZE = 10
+
 
 class Inspector2(AWSService):
     def __init__(self, provider):
         # Call AWSService's __init__
         super().__init__(__class__.__name__, provider)
         self.inspectors = []
+        self.known_exploited_vulnerabilities = {}
+        self.vulnerability_lookup_failed = set()
         self.__threading_call__(self._batch_get_account_status)
         self.__threading_call__(self._list_active_findings, self.inspectors)
+        enabled_inspectors = [
+            inspector for inspector in self.inspectors if inspector.status == "ENABLED"
+        ]
+        self.__threading_call__(self._list_findings, enabled_inspectors)
+        self.__threading_call__(self._list_coverage, enabled_inspectors)
+        self.__threading_call__(
+            self._batch_get_finding_details,
+            self._get_finding_detail_batches(enabled_inspectors),
+        )
 
     def _batch_get_account_status(self, regional_client):
         # We use this function to check if inspector2 is enabled
@@ -59,6 +76,188 @@ class Inspector2(AWSService):
                 f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
             )
 
+    def _list_findings(self, inspector):
+        """Store the active findings of the audited account for an enabled Region."""
+        logger.info("Inspector2 - Listing active findings details...")
+        try:
+            paginator = self.regional_clients[inspector.region].get_paginator(
+                "list_findings"
+            )
+            findings = []
+            for page in paginator.paginate(
+                filterCriteria={
+                    "awsAccountId": [
+                        {"comparison": "EQUALS", "value": self.audited_account},
+                    ],
+                    "findingStatus": [{"comparison": "EQUALS", "value": "ACTIVE"}],
+                },
+                PaginationConfig={"PageSize": 100},
+            ):
+                for finding in page.get("findings", []):
+                    findings.append(
+                        Finding(
+                            arn=finding.get("findingArn", ""),
+                            type=finding.get("type", ""),
+                            severity=finding.get("severity", ""),
+                            first_observed_at=finding.get("firstObservedAt"),
+                            vulnerability_id=finding.get(
+                                "packageVulnerabilityDetails", {}
+                            ).get("vulnerabilityId"),
+                            resource_ids=[
+                                resource["id"]
+                                for resource in finding.get("resources", [])
+                                if resource.get("id")
+                            ],
+                        )
+                    )
+            inspector.findings = findings
+        except Exception as error:
+            logger.error(
+                f"{inspector.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
+            )
+
+    def _list_coverage(self, inspector):
+        """Store the resources Inspector2 covers in an enabled Region, respecting audit resources."""
+        logger.info("Inspector2 - Listing coverage...")
+        try:
+            paginator = self.regional_clients[inspector.region].get_paginator(
+                "list_coverage"
+            )
+            coverage = []
+            for page in paginator.paginate(
+                filterCriteria={
+                    "accountId": [
+                        {"comparison": "EQUALS", "value": self.audited_account},
+                    ],
+                },
+                PaginationConfig={"PageSize": 200},
+            ):
+                for covered_resource in page.get("coveredResources", []):
+                    resource_id = covered_resource.get("resourceId", "")
+                    resource_type = covered_resource.get("resourceType", "")
+                    scan_status = covered_resource.get("scanStatus", {})
+                    arn = self._get_covered_resource_arn(
+                        resource_type, resource_id, inspector.region
+                    )
+                    if self.audit_resources and not is_resource_filtered(
+                        arn, self.audit_resources
+                    ):
+                        continue
+                    coverage.append(
+                        CoveredResource(
+                            id=resource_id,
+                            arn=arn,
+                            region=inspector.region,
+                            resource_type=resource_type,
+                            scan_type=covered_resource.get("scanType", ""),
+                            scan_status_code=scan_status.get("statusCode", ""),
+                            scan_status_reason=scan_status.get("reason", ""),
+                            last_scanned_at=covered_resource.get("lastScannedAt"),
+                        )
+                    )
+            inspector.coverage = coverage
+        except Exception as error:
+            logger.error(
+                f"{inspector.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
+            )
+
+    def _get_covered_resource_arn(self, resource_type, resource_id, region):
+        """Return the ARN of a covered resource, building it for EC2 instance IDs."""
+        if resource_type == "AWS_EC2_INSTANCE" and not resource_id.startswith("arn:"):
+            return f"arn:{self.audited_partition}:ec2:{region}:{self.audited_account}:instance/{resource_id}"
+        return resource_id
+
+    @staticmethod
+    def _get_finding_detail_batches(inspectors):
+        """Group one active finding per CVE into finding details batches per Region."""
+        representatives = {}
+        for inspector in inspectors:
+            for finding in inspector.findings or []:
+                if finding.vulnerability_id and finding.vulnerability_id.startswith(
+                    "CVE-"
+                ):
+                    representatives.setdefault(
+                        finding.vulnerability_id, (inspector.region, finding.arn)
+                    )
+        findings_by_region = {}
+        for vulnerability_id, (region, finding_arn) in representatives.items():
+            findings_by_region.setdefault(region, []).append(
+                (finding_arn, vulnerability_id)
+            )
+        return [
+            (region, findings[index : index + FINDING_DETAILS_BATCH_SIZE])
+            for region, findings in findings_by_region.items()
+            for index in range(0, len(findings), FINDING_DETAILS_BATCH_SIZE)
+        ]
+
+    def _batch_get_finding_details(self, batch):
+        """Record the CISA KEV data of the CVEs in a batch, flagging failed lookups."""
+        region, findings = batch
+        vulnerability_ids = dict(findings)
+        logger.info("Inspector2 - Getting finding details...")
+        try:
+            response = self.regional_clients[region].batch_get_finding_details(
+                findingArns=list(vulnerability_ids)
+            )
+            for detail in response.get("findingDetails", []):
+                vulnerability_id = vulnerability_ids.get(detail.get("findingArn"))
+                cisa_data = detail.get("cisaData")
+                if vulnerability_id and cisa_data:
+                    self.known_exploited_vulnerabilities[vulnerability_id] = (
+                        KnownExploitedVulnerability(
+                            id=vulnerability_id,
+                            date_added=cisa_data.get("dateAdded"),
+                            date_due=cisa_data.get("dateDue"),
+                        )
+                    )
+            for detail_error in response.get("errors", []):
+                # Inspector has no intelligence for the CVE, so it cannot be a KEV
+                if detail_error.get("errorCode") == "FINDING_DETAILS_NOT_FOUND":
+                    continue
+                vulnerability_id = vulnerability_ids.get(detail_error.get("findingArn"))
+                if vulnerability_id:
+                    self.vulnerability_lookup_failed.add(vulnerability_id)
+                    logger.error(
+                        f"{region} -- {detail_error.get('errorCode')} getting finding details for {vulnerability_id}: {detail_error.get('errorMessage')}"
+                    )
+        except Exception as error:
+            self.vulnerability_lookup_failed.update(vulnerability_ids.values())
+            logger.error(
+                f"{region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
+            )
+
+
+class Finding(BaseModel):
+    """Active Inspector2 finding."""
+
+    arn: str
+    type: str
+    severity: str
+    first_observed_at: Optional[datetime]
+    vulnerability_id: Optional[str]
+    resource_ids: list[str] = []
+
+
+class CoveredResource(BaseModel):
+    """Resource tracked by Inspector2 coverage."""
+
+    id: str
+    arn: str
+    region: str
+    resource_type: str
+    scan_type: str
+    scan_status_code: str
+    scan_status_reason: str
+    last_scanned_at: Optional[datetime]
+
+
+class KnownExploitedVulnerability(BaseModel):
+    """CISA Known Exploited Vulnerability data of a CVE."""
+
+    id: str
+    date_added: Optional[datetime]
+    date_due: Optional[datetime]
+
 
 class Inspector(BaseModel):
     id: str
@@ -70,3 +269,5 @@ class Inspector(BaseModel):
     lambda_status: str
     lambda_code_status: str
     active_findings: bool = None
+    findings: Optional[list[Finding]] = None
+    coverage: Optional[list[CoveredResource]] = None
diff --git a/prowler/providers/aws/services/inspector2/lib/__init__.py b/prowler/providers/aws/services/inspector2/lib/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/inspector2/lib/vulnerabilities.py b/prowler/providers/aws/services/inspector2/lib/vulnerabilities.py
new file mode 100644
index 0000000000..7544f0de4d
--- /dev/null
+++ b/prowler/providers/aws/services/inspector2/lib/vulnerabilities.py
@@ -0,0 +1,8 @@
+MAX_LISTED_VULNERABILITIES = 10
+
+
+def summarize_vulnerabilities(vulnerabilities: list[str]) -> str:
+    """Join vulnerability identifiers, truncating long lists."""
+    listed = ", ".join(vulnerabilities[:MAX_LISTED_VULNERABILITIES])
+    remaining = len(vulnerabilities) - MAX_LISTED_VULNERABILITIES
+    return f"{listed} and {remaining} more" if remaining > 0 else listed
diff --git a/prowler/providers/aws/services/transfer/transfer_server_fips_security_policy_enabled/__init__.py b/prowler/providers/aws/services/transfer/transfer_server_fips_security_policy_enabled/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/transfer/transfer_server_fips_security_policy_enabled/transfer_server_fips_security_policy_enabled.metadata.json b/prowler/providers/aws/services/transfer/transfer_server_fips_security_policy_enabled/transfer_server_fips_security_policy_enabled.metadata.json
new file mode 100644
index 0000000000..c1d8b48e20
--- /dev/null
+++ b/prowler/providers/aws/services/transfer/transfer_server_fips_security_policy_enabled/transfer_server_fips_security_policy_enabled.metadata.json
@@ -0,0 +1,42 @@
+{
+  "Provider": "aws",
+  "CheckID": "transfer_server_fips_security_policy_enabled",
+  "CheckTitle": "AWS Transfer Family server uses a FIPS security policy",
+  "CheckType": [
+    "Software and Configuration Checks/AWS Security Best Practices"
+  ],
+  "ServiceName": "transfer",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "",
+  "Severity": "low",
+  "ResourceType": "AwsTransferServer",
+  "ResourceGroup": "network",
+  "Description": "**AWS Transfer Family servers** (SFTP, FTPS, AS2) are assessed for use of a **FIPS** security policy (`TransferSecurityPolicy-FIPS-*`, flagged `Fips: true` by AWS), which limits file-transfer sessions to the FIPS-enabled set of SSH and TLS algorithms.",
+  "Risk": "Servers without a FIPS security policy can negotiate algorithms outside the FIPS-enabled set, which does not meet requirements to protect federal or regulated files and credentials with **NIST CMVP validated cryptography**.",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://docs.aws.amazon.com/transfer/latest/userguide/security-policies.html",
+    "https://aws.amazon.com/compliance/fips/"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "aws transfer update-server --server-id <server_id> --security-policy-name TransferSecurityPolicy-FIPS-2025-03",
+      "NativeIaC": "```yaml\nResources:\n  <example_resource_name>:\n    Type: AWS::Transfer::Server\n    Properties:\n      Protocols:\n        - SFTP\n      SecurityPolicyName: TransferSecurityPolicy-FIPS-2025-03  # FIX: FIPS security policy\n```",
+      "Other": "1. In the AWS Console, go to AWS Transfer Family > Servers\n2. Select the server and choose Edit on the Additional details panel\n3. Set Cryptographic algorithm options (Security policy) to a FIPS policy such as TransferSecurityPolicy-FIPS-2025-03\n4. Save the changes",
+      "Terraform": "```hcl\nresource \"aws_transfer_server\" \"<example_resource_name>\" {\n  protocols            = [\"SFTP\"]\n  security_policy_name = \"TransferSecurityPolicy-FIPS-2025-03\" # FIX: FIPS security policy\n}\n```"
+    },
+    "Recommendation": {
+      "Text": "Use a **FIPS** security policy, such as `TransferSecurityPolicy-FIPS-2025-03`, on every Transfer Family server that exchanges federal or regulated data.",
+      "Url": "https://hub.prowler.com/check/transfer_server_fips_security_policy_enabled"
+    }
+  },
+  "Categories": [
+    "encryption"
+  ],
+  "DependsOn": [],
+  "RelatedTo": [
+    "transfer_server_in_transit_encryption_enabled",
+    "transfer_server_pqc_ssh_kex_enabled"
+  ],
+  "Notes": ""
+}
diff --git a/prowler/providers/aws/services/transfer/transfer_server_fips_security_policy_enabled/transfer_server_fips_security_policy_enabled.py b/prowler/providers/aws/services/transfer/transfer_server_fips_security_policy_enabled/transfer_server_fips_security_policy_enabled.py
new file mode 100644
index 0000000000..99d86097ba
--- /dev/null
+++ b/prowler/providers/aws/services/transfer/transfer_server_fips_security_policy_enabled/transfer_server_fips_security_policy_enabled.py
@@ -0,0 +1,38 @@
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.transfer.transfer_client import transfer_client
+
+
+class transfer_server_fips_security_policy_enabled(Check):
+    """Ensure every AWS Transfer Family server uses a FIPS security policy."""
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Report whether each Transfer Family server uses a FIPS security policy."""
+        findings = []
+        unretrieved_servers = []
+        for server in transfer_client.servers.values():
+            policy = server.security_policy_name
+            if not policy:
+                unretrieved_servers.append(server.id)
+                continue
+            report = Check_Report_AWS(metadata=self.metadata(), resource=server)
+            if "FIPS" in policy.split("-"):
+                report.status = "PASS"
+                report.status_extended = (
+                    f"Transfer Server {server.id} uses FIPS security policy {policy}."
+                )
+            else:
+                report.status = "FAIL"
+                report.status_extended = f"Transfer Server {server.id} uses security policy {policy}, which is not a FIPS security policy."
+            findings.append(report)
+        if unretrieved_servers:
+            report = Check_Report_AWS(metadata=self.metadata(), resource={})
+            report.resource_id = transfer_client.audited_account
+            report.resource_arn = transfer_client.audited_account_arn
+            report.region = transfer_client.region
+            report.status = "MANUAL"
+            report.status_extended = (
+                "Transfer Server security policies could not be retrieved for "
+                f"{', '.join(unretrieved_servers)}; verify the transfer:DescribeServer permission."
+            )
+            findings.append(report)
+        return findings
diff --git a/tests/config/config_test.py b/tests/config/config_test.py
index fbff8ade29..4d469ef009 100644
--- a/tests/config/config_test.py
+++ b/tests/config/config_test.py
@@ -138,6 +138,8 @@ config_aws = {
     "organizations_enabled_regions": [],
     "organizations_trusted_delegated_administrators": [],
     "ecr_repository_vulnerability_minimum_severity": "MEDIUM",
+    "inspector2_max_days_since_last_scan": 3,
+    "inspector2_active_finding_max_age_days": 192,
     "verify_premium_support_plans": True,
     "threat_detection_privilege_escalation_threshold": 0.2,
     "threat_detection_privilege_escalation_minutes": 1440,
diff --git a/tests/config/fixtures/config.yaml b/tests/config/fixtures/config.yaml
index a64e497544..8b02ba2d43 100644
--- a/tests/config/fixtures/config.yaml
+++ b/tests/config/fixtures/config.yaml
@@ -139,6 +139,14 @@ aws:
   # MEDIUM
   ecr_repository_vulnerability_minimum_severity: "MEDIUM"
 
+  # AWS Inspector2
+  # aws.inspector2_coverage_recently_scanned
+  # Maximum days since Inspector2 last scanned an actively covered resource
+  inspector2_max_days_since_last_scan: 3
+  # aws.inspector2_active_findings_within_max_age
+  # Maximum days an Inspector2 finding can stay active since it was first observed
+  inspector2_active_finding_max_age_days: 192
+
   # AWS Trusted Advisor
   # aws.trustedadvisor_premium_support_plan_subscribed
   verify_premium_support_plans: True
diff --git a/tests/providers/aws/services/elbv2/elbv2_listener_fips_tls_enabled/elbv2_listener_fips_tls_enabled_test.py b/tests/providers/aws/services/elbv2/elbv2_listener_fips_tls_enabled/elbv2_listener_fips_tls_enabled_test.py
new file mode 100644
index 0000000000..ee1afde340
--- /dev/null
+++ b/tests/providers/aws/services/elbv2/elbv2_listener_fips_tls_enabled/elbv2_listener_fips_tls_enabled_test.py
@@ -0,0 +1,156 @@
+from unittest import mock
+
+from boto3 import client, resource
+from moto import mock_aws
+
+from tests.providers.aws.utils import (
+    AWS_REGION_EU_WEST_1,
+    AWS_REGION_US_EAST_1,
+    set_mocked_aws_provider,
+)
+
+CHECK_MODULE = "prowler.providers.aws.services.elbv2.elbv2_listener_fips_tls_enabled.elbv2_listener_fips_tls_enabled"
+FIPS_POLICY = "ELBSecurityPolicy-TLS13-1-2-FIPS-2023-04"
+NON_FIPS_POLICY = "ELBSecurityPolicy-TLS13-1-2-2021-06"
+
+
+def create_application_load_balancer():
+    conn = client("elbv2", region_name=AWS_REGION_EU_WEST_1)
+    ec2 = resource("ec2", region_name=AWS_REGION_EU_WEST_1)
+    security_group = ec2.create_security_group(
+        GroupName="a-security-group", Description="First One"
+    )
+    vpc = ec2.create_vpc(CidrBlock="172.28.7.0/24", InstanceTenancy="default")
+    subnet1 = ec2.create_subnet(
+        VpcId=vpc.id,
+        CidrBlock="172.28.7.192/26",
+        AvailabilityZone=f"{AWS_REGION_EU_WEST_1}a",
+    )
+    subnet2 = ec2.create_subnet(
+        VpcId=vpc.id,
+        CidrBlock="172.28.7.0/26",
+        AvailabilityZone=f"{AWS_REGION_EU_WEST_1}b",
+    )
+    lb = conn.create_load_balancer(
+        Name="my-lb",
+        Subnets=[subnet1.id, subnet2.id],
+        SecurityGroups=[security_group.id],
+        Scheme="internal",
+        Type="application",
+    )["LoadBalancers"][0]
+    target_group_arn = conn.create_target_group(
+        Name="a-target", Protocol="HTTP", Port=8080, VpcId=vpc.id
+    )["TargetGroups"][0]["TargetGroupArn"]
+    return conn, lb, target_group_arn
+
+
+def create_listener(conn, lb, target_group_arn, protocol, port, ssl_policy=None):
+    listener_args = {
+        "LoadBalancerArn": lb["LoadBalancerArn"],
+        "Protocol": protocol,
+        "Port": port,
+        "DefaultActions": [{"Type": "forward", "TargetGroupArn": target_group_arn}],
+    }
+    if ssl_policy:
+        listener_args["SslPolicy"] = ssl_policy
+    return conn.create_listener(**listener_args)["Listeners"][0]
+
+
+def execute_check(service=None):
+    from prowler.providers.aws.services.elbv2.elbv2_service import ELBv2
+
+    aws_provider = set_mocked_aws_provider(
+        [AWS_REGION_EU_WEST_1, AWS_REGION_US_EAST_1],
+        create_default_organization=False,
+    )
+    with (
+        mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=aws_provider,
+        ),
+        mock.patch(f"{CHECK_MODULE}.elbv2_client", new=service or ELBv2(aws_provider)),
+    ):
+        from prowler.providers.aws.services.elbv2.elbv2_listener_fips_tls_enabled.elbv2_listener_fips_tls_enabled import (
+            elbv2_listener_fips_tls_enabled,
+        )
+
+        return elbv2_listener_fips_tls_enabled().execute()
+
+
+class Test_elbv2_listener_fips_tls_enabled:
+    @mock_aws
+    def test_no_load_balancers(self):
+        assert execute_check() == []
+
+    @mock_aws
+    def test_http_listener_only(self):
+        conn, lb, target_group_arn = create_application_load_balancer()
+        create_listener(conn, lb, target_group_arn, "HTTP", 80)
+
+        result = execute_check()
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+        assert result[0].status_extended == "ELBv2 my-lb has no HTTPS/TLS listeners."
+
+    @mock_aws
+    def test_fips_policy(self):
+        conn, lb, target_group_arn = create_application_load_balancer()
+        create_listener(conn, lb, target_group_arn, "HTTPS", 443, FIPS_POLICY)
+
+        result = execute_check()
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+        assert (
+            result[0].status_extended
+            == "ELBv2 my-lb has all HTTPS/TLS listeners using a FIPS TLS security policy."
+        )
+        assert result[0].resource_id == "my-lb"
+        assert result[0].resource_arn == lb["LoadBalancerArn"]
+        assert result[0].region == AWS_REGION_EU_WEST_1
+
+    @mock_aws
+    def test_non_fips_policy(self):
+        conn, lb, target_group_arn = create_application_load_balancer()
+        listener = create_listener(
+            conn, lb, target_group_arn, "HTTPS", 443, NON_FIPS_POLICY
+        )
+
+        result = execute_check()
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert (
+            result[0].status_extended
+            == f"ELBv2 my-lb has HTTPS/TLS listeners without a FIPS TLS security policy: HTTPS:443 ({listener['ListenerArn']}) uses {NON_FIPS_POLICY}."
+        )
+
+    @mock_aws
+    def test_mixed_listeners(self):
+        conn, lb, target_group_arn = create_application_load_balancer()
+        create_listener(conn, lb, target_group_arn, "HTTPS", 443, FIPS_POLICY)
+        create_listener(conn, lb, target_group_arn, "HTTPS", 8443, NON_FIPS_POLICY)
+
+        result = execute_check()
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert NON_FIPS_POLICY in result[0].status_extended
+        assert FIPS_POLICY not in result[0].status_extended
+
+    @mock_aws
+    def test_listener_discovery_failed(self):
+        from prowler.providers.aws.services.elbv2.elbv2_service import ELBv2
+
+        conn, lb, target_group_arn = create_application_load_balancer()
+        create_listener(conn, lb, target_group_arn, "HTTPS", 443, NON_FIPS_POLICY)
+        service = ELBv2(
+            set_mocked_aws_provider(
+                [AWS_REGION_EU_WEST_1, AWS_REGION_US_EAST_1],
+                create_default_organization=False,
+            )
+        )
+        service.loadbalancersv2[lb["LoadBalancerArn"]].listener_discovery_failed = True
+
+        assert execute_check(service) == []
diff --git a/tests/providers/aws/services/inspector2/inspector2_active_findings_kev_within_due_date/inspector2_active_findings_kev_within_due_date_test.py b/tests/providers/aws/services/inspector2/inspector2_active_findings_kev_within_due_date/inspector2_active_findings_kev_within_due_date_test.py
new file mode 100644
index 0000000000..bf57b346c2
--- /dev/null
+++ b/tests/providers/aws/services/inspector2/inspector2_active_findings_kev_within_due_date/inspector2_active_findings_kev_within_due_date_test.py
@@ -0,0 +1,136 @@
+from datetime import datetime, timedelta, timezone
+from unittest import mock
+
+from prowler.providers.aws.services.inspector2.inspector2_service import (
+    Finding,
+    Inspector,
+    KnownExploitedVulnerability,
+)
+from tests.providers.aws.utils import (
+    AWS_ACCOUNT_NUMBER,
+    AWS_REGION_EU_WEST_1,
+    set_mocked_aws_provider,
+)
+
+INSPECTOR_ARN = (
+    f"arn:aws:inspector2:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:inspector2"
+)
+FINDING_ARN = f"arn:aws:inspector2:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:finding/0e436649379db5f327e3cf5bb4421d76"
+KEV_ID = "CVE-2024-3400"
+CHECK_MODULE = "prowler.providers.aws.services.inspector2.inspector2_active_findings_kev_within_due_date.inspector2_active_findings_kev_within_due_date"
+
+
+def build_inspector(findings=None, status="ENABLED"):
+    return Inspector(
+        id="Inspector2",
+        arn=INSPECTOR_ARN,
+        region=AWS_REGION_EU_WEST_1,
+        status=status,
+        ec2_status="ENABLED",
+        ecr_status="ENABLED",
+        lambda_status="ENABLED",
+        lambda_code_status="ENABLED",
+        findings=findings,
+    )
+
+
+def build_finding(vulnerability_id=KEV_ID):
+    return Finding(
+        arn=FINDING_ARN,
+        type="PACKAGE_VULNERABILITY",
+        severity="CRITICAL",
+        first_observed_at=datetime.now(timezone.utc),
+        vulnerability_id=vulnerability_id,
+        resource_ids=["i-0123456789abcdef0"],
+    )
+
+
+def build_kev(date_due):
+    return KnownExploitedVulnerability(
+        id=KEV_ID,
+        date_added=datetime(2024, 4, 12, tzinfo=timezone.utc),
+        date_due=date_due,
+    )
+
+
+def execute_check(inspectors, known_exploited=None, lookup_failed=None):
+    inspector2_client = mock.MagicMock()
+    inspector2_client.inspectors = inspectors
+    inspector2_client.known_exploited_vulnerabilities = known_exploited or {}
+    inspector2_client.vulnerability_lookup_failed = lookup_failed or set()
+    with (
+        mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=set_mocked_aws_provider([AWS_REGION_EU_WEST_1]),
+        ),
+        mock.patch(f"{CHECK_MODULE}.inspector2_client", new=inspector2_client),
+    ):
+        from prowler.providers.aws.services.inspector2.inspector2_active_findings_kev_within_due_date.inspector2_active_findings_kev_within_due_date import (
+            inspector2_active_findings_kev_within_due_date,
+        )
+
+        return inspector2_active_findings_kev_within_due_date().execute()
+
+
+class Test_inspector2_active_findings_kev_within_due_date:
+    def test_no_resources(self):
+        assert execute_check([]) == []
+
+    def test_inspector_disabled(self):
+        assert execute_check([build_inspector(findings=[], status="DISABLED")]) == []
+
+    def test_kev_past_due_date(self):
+        result = execute_check(
+            [build_inspector(findings=[build_finding()])],
+            known_exploited={
+                KEV_ID: build_kev(datetime(2024, 4, 19, tzinfo=timezone.utc))
+            },
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert (
+            result[0].status_extended
+            == f"Inspector2 has active findings in region {AWS_REGION_EU_WEST_1} for CISA Known Exploited Vulnerabilities past their remediation due date: {KEV_ID} (due 2024-04-19)."
+        )
+        assert result[0].resource_id == "Inspector2"
+        assert result[0].resource_arn == INSPECTOR_ARN
+        assert result[0].region == AWS_REGION_EU_WEST_1
+
+    def test_kev_within_due_date(self):
+        result = execute_check(
+            [build_inspector(findings=[build_finding()])],
+            known_exploited={
+                KEV_ID: build_kev(datetime.now(timezone.utc) + timedelta(days=7))
+            },
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+        assert (
+            result[0].status_extended
+            == f"Inspector2 has no active findings in region {AWS_REGION_EU_WEST_1} for CISA Known Exploited Vulnerabilities past their remediation due date."
+        )
+
+    def test_no_kev_findings(self):
+        result = execute_check(
+            [build_inspector(findings=[build_finding("CVE-2022-40897")])]
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+
+    def test_kev_status_not_verified(self):
+        result = execute_check(
+            [build_inspector(findings=[build_finding()])],
+            lookup_failed={KEV_ID},
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+
+    def test_findings_not_retrieved(self):
+        result = execute_check([build_inspector(findings=None)])
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
diff --git a/tests/providers/aws/services/inspector2/inspector2_active_findings_no_known_exploited_vulnerabilities/inspector2_active_findings_no_known_exploited_vulnerabilities_test.py b/tests/providers/aws/services/inspector2/inspector2_active_findings_no_known_exploited_vulnerabilities/inspector2_active_findings_no_known_exploited_vulnerabilities_test.py
new file mode 100644
index 0000000000..288e7224ea
--- /dev/null
+++ b/tests/providers/aws/services/inspector2/inspector2_active_findings_no_known_exploited_vulnerabilities/inspector2_active_findings_no_known_exploited_vulnerabilities_test.py
@@ -0,0 +1,149 @@
+from datetime import datetime, timezone
+from unittest import mock
+
+from prowler.providers.aws.services.inspector2.inspector2_service import (
+    Finding,
+    Inspector,
+    KnownExploitedVulnerability,
+)
+from tests.providers.aws.utils import (
+    AWS_ACCOUNT_NUMBER,
+    AWS_REGION_EU_WEST_1,
+    set_mocked_aws_provider,
+)
+
+INSPECTOR_ARN = (
+    f"arn:aws:inspector2:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:inspector2"
+)
+FINDING_ARN = f"arn:aws:inspector2:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:finding/0e436649379db5f327e3cf5bb4421d76"
+KEV_ID = "CVE-2024-3400"
+CHECK_MODULE = "prowler.providers.aws.services.inspector2.inspector2_active_findings_no_known_exploited_vulnerabilities.inspector2_active_findings_no_known_exploited_vulnerabilities"
+
+
+def build_inspector(findings=None, status="ENABLED"):
+    return Inspector(
+        id="Inspector2",
+        arn=INSPECTOR_ARN,
+        region=AWS_REGION_EU_WEST_1,
+        status=status,
+        ec2_status="ENABLED",
+        ecr_status="ENABLED",
+        lambda_status="ENABLED",
+        lambda_code_status="ENABLED",
+        findings=findings,
+    )
+
+
+def build_finding(vulnerability_id):
+    return Finding(
+        arn=FINDING_ARN,
+        type="PACKAGE_VULNERABILITY",
+        severity="CRITICAL",
+        first_observed_at=datetime.now(timezone.utc),
+        vulnerability_id=vulnerability_id,
+        resource_ids=["i-0123456789abcdef0"],
+    )
+
+
+def build_kev(vulnerability_id):
+    return KnownExploitedVulnerability(
+        id=vulnerability_id,
+        date_added=datetime(2024, 4, 12, tzinfo=timezone.utc),
+        date_due=datetime(2024, 4, 19, tzinfo=timezone.utc),
+    )
+
+
+def execute_check(inspectors, known_exploited=None, lookup_failed=None):
+    inspector2_client = mock.MagicMock()
+    inspector2_client.inspectors = inspectors
+    inspector2_client.known_exploited_vulnerabilities = known_exploited or {}
+    inspector2_client.vulnerability_lookup_failed = lookup_failed or set()
+    with (
+        mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=set_mocked_aws_provider([AWS_REGION_EU_WEST_1]),
+        ),
+        mock.patch(f"{CHECK_MODULE}.inspector2_client", new=inspector2_client),
+    ):
+        from prowler.providers.aws.services.inspector2.inspector2_active_findings_no_known_exploited_vulnerabilities.inspector2_active_findings_no_known_exploited_vulnerabilities import (
+            inspector2_active_findings_no_known_exploited_vulnerabilities,
+        )
+
+        return inspector2_active_findings_no_known_exploited_vulnerabilities().execute()
+
+
+class Test_inspector2_active_findings_no_known_exploited_vulnerabilities:
+    def test_no_resources(self):
+        assert execute_check([]) == []
+
+    def test_inspector_disabled(self):
+        assert execute_check([build_inspector(findings=[], status="DISABLED")]) == []
+
+    def test_no_kev_findings(self):
+        result = execute_check(
+            [build_inspector(findings=[build_finding("CVE-2022-40897")])]
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+        assert (
+            result[0].status_extended
+            == f"Inspector2 has no active findings in region {AWS_REGION_EU_WEST_1} for CISA Known Exploited Vulnerabilities."
+        )
+        assert result[0].resource_id == "Inspector2"
+        assert result[0].resource_arn == INSPECTOR_ARN
+        assert result[0].region == AWS_REGION_EU_WEST_1
+
+    def test_kev_finding(self):
+        result = execute_check(
+            [
+                build_inspector(
+                    findings=[build_finding(KEV_ID), build_finding("CVE-2022-40897")]
+                )
+            ],
+            known_exploited={KEV_ID: build_kev(KEV_ID)},
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert (
+            result[0].status_extended
+            == f"Inspector2 has active findings in region {AWS_REGION_EU_WEST_1} for CISA Known Exploited Vulnerabilities: {KEV_ID}."
+        )
+
+    def test_many_kev_findings_are_truncated(self):
+        vulnerability_ids = [f"CVE-2024-{number:04d}" for number in range(1, 13)]
+        result = execute_check(
+            [
+                build_inspector(
+                    findings=[build_finding(vid) for vid in vulnerability_ids]
+                )
+            ],
+            known_exploited={vid: build_kev(vid) for vid in vulnerability_ids},
+        )
+
+        assert result[0].status == "FAIL"
+        assert result[0].status_extended.endswith("CVE-2024-0010 and 2 more.")
+
+    def test_kev_status_not_verified(self):
+        result = execute_check(
+            [build_inspector(findings=[build_finding(KEV_ID)])],
+            lookup_failed={KEV_ID},
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert (
+            result[0].status_extended
+            == f"Inspector2 could not verify the CISA Known Exploited Vulnerabilities status of {KEV_ID} in region {AWS_REGION_EU_WEST_1}; verify the inspector2:BatchGetFindingDetails permission."
+        )
+
+    def test_findings_not_retrieved(self):
+        result = execute_check([build_inspector(findings=None)])
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert (
+            result[0].status_extended
+            == f"Inspector2 findings could not be retrieved in region {AWS_REGION_EU_WEST_1}; verify the inspector2:ListFindings permission."
+        )
diff --git a/tests/providers/aws/services/inspector2/inspector2_active_findings_within_max_age/inspector2_active_findings_within_max_age_test.py b/tests/providers/aws/services/inspector2/inspector2_active_findings_within_max_age/inspector2_active_findings_within_max_age_test.py
new file mode 100644
index 0000000000..8b847c9014
--- /dev/null
+++ b/tests/providers/aws/services/inspector2/inspector2_active_findings_within_max_age/inspector2_active_findings_within_max_age_test.py
@@ -0,0 +1,140 @@
+from datetime import datetime, timedelta, timezone
+from unittest import mock
+
+from prowler.providers.aws.services.inspector2.inspector2_service import (
+    Finding,
+    Inspector,
+)
+from tests.providers.aws.utils import (
+    AWS_ACCOUNT_NUMBER,
+    AWS_REGION_EU_WEST_1,
+    set_mocked_aws_provider,
+)
+
+INSPECTOR_ARN = (
+    f"arn:aws:inspector2:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:inspector2"
+)
+FINDING_ARN = f"arn:aws:inspector2:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:finding/0e436649379db5f327e3cf5bb4421d76"
+CHECK_MODULE = "prowler.providers.aws.services.inspector2.inspector2_active_findings_within_max_age.inspector2_active_findings_within_max_age"
+
+
+def build_inspector(findings=None, status="ENABLED"):
+    return Inspector(
+        id="Inspector2",
+        arn=INSPECTOR_ARN,
+        region=AWS_REGION_EU_WEST_1,
+        status=status,
+        ec2_status="ENABLED",
+        ecr_status="ENABLED",
+        lambda_status="ENABLED",
+        lambda_code_status="ENABLED",
+        findings=findings,
+    )
+
+
+def build_finding(age_days):
+    first_observed_at = (
+        datetime.now(timezone.utc) - timedelta(days=age_days, hours=1)
+        if age_days is not None
+        else None
+    )
+    return Finding(
+        arn=FINDING_ARN,
+        type="PACKAGE_VULNERABILITY",
+        severity="HIGH",
+        first_observed_at=first_observed_at,
+        vulnerability_id="CVE-2022-40897",
+        resource_ids=["i-0123456789abcdef0"],
+    )
+
+
+def execute_check(inspectors, audit_config=None):
+    inspector2_client = mock.MagicMock()
+    inspector2_client.inspectors = inspectors
+    inspector2_client.audit_config = audit_config or {}
+    with (
+        mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=set_mocked_aws_provider([AWS_REGION_EU_WEST_1]),
+        ),
+        mock.patch(f"{CHECK_MODULE}.inspector2_client", new=inspector2_client),
+    ):
+        from prowler.providers.aws.services.inspector2.inspector2_active_findings_within_max_age.inspector2_active_findings_within_max_age import (
+            inspector2_active_findings_within_max_age,
+        )
+
+        return inspector2_active_findings_within_max_age().execute()
+
+
+class Test_inspector2_active_findings_within_max_age:
+    def test_no_resources(self):
+        assert execute_check([]) == []
+
+    def test_inspector_disabled(self):
+        assert execute_check([build_inspector(findings=[], status="DISABLED")]) == []
+
+    def test_no_active_findings(self):
+        result = execute_check([build_inspector(findings=[])])
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+        assert (
+            result[0].status_extended
+            == f"Inspector2 has no active findings in region {AWS_REGION_EU_WEST_1} first observed more than 192 days ago."
+        )
+        assert result[0].resource_id == "Inspector2"
+        assert result[0].resource_arn == INSPECTOR_ARN
+        assert result[0].region == AWS_REGION_EU_WEST_1
+
+    def test_recent_findings(self):
+        result = execute_check([build_inspector(findings=[build_finding(30)])])
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+
+    def test_stale_findings(self):
+        result = execute_check(
+            [
+                build_inspector(
+                    findings=[
+                        build_finding(30),
+                        build_finding(200),
+                        build_finding(400),
+                    ]
+                )
+            ]
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert (
+            result[0].status_extended
+            == f"Inspector2 has 2 active findings in region {AWS_REGION_EU_WEST_1} first observed more than 192 days ago, the oldest 400 days ago."
+        )
+
+    def test_finding_just_over_max_age(self):
+        result = execute_check([build_inspector(findings=[build_finding(192)])])
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+
+    def test_custom_max_age(self):
+        result = execute_check(
+            [build_inspector(findings=[build_finding(30)])],
+            audit_config={"inspector2_active_finding_max_age_days": 14},
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+
+    def test_finding_without_first_observed_date_is_ignored(self):
+        result = execute_check([build_inspector(findings=[build_finding(None)])])
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+
+    def test_findings_not_retrieved(self):
+        result = execute_check([build_inspector(findings=None)])
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
diff --git a/tests/providers/aws/services/inspector2/inspector2_coverage_recently_scanned/inspector2_coverage_recently_scanned_test.py b/tests/providers/aws/services/inspector2/inspector2_coverage_recently_scanned/inspector2_coverage_recently_scanned_test.py
new file mode 100644
index 0000000000..64d757feb2
--- /dev/null
+++ b/tests/providers/aws/services/inspector2/inspector2_coverage_recently_scanned/inspector2_coverage_recently_scanned_test.py
@@ -0,0 +1,170 @@
+from datetime import datetime, timedelta, timezone
+from unittest import mock
+
+from prowler.providers.aws.services.inspector2.inspector2_service import (
+    CoveredResource,
+    Inspector,
+)
+from tests.providers.aws.utils import (
+    AWS_ACCOUNT_NUMBER,
+    AWS_REGION_EU_WEST_1,
+    set_mocked_aws_provider,
+)
+
+INSPECTOR_ARN = (
+    f"arn:aws:inspector2:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:inspector2"
+)
+INSTANCE_ID = "i-0123456789abcdef0"
+INSTANCE_ARN = (
+    f"arn:aws:ec2:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:instance/{INSTANCE_ID}"
+)
+CHECK_MODULE = "prowler.providers.aws.services.inspector2.inspector2_coverage_recently_scanned.inspector2_coverage_recently_scanned"
+
+
+def build_inspector(coverage=None, status="ENABLED"):
+    return Inspector(
+        id="Inspector2",
+        arn=INSPECTOR_ARN,
+        region=AWS_REGION_EU_WEST_1,
+        status=status,
+        ec2_status="ENABLED",
+        ecr_status="ENABLED",
+        lambda_status="ENABLED",
+        lambda_code_status="ENABLED",
+        coverage=coverage,
+    )
+
+
+def build_instance(
+    days_since_scan=None, scan_status_code="ACTIVE", scan_status_reason="SUCCESSFUL"
+):
+    last_scanned_at = (
+        datetime.now(timezone.utc) - timedelta(days=days_since_scan, hours=1)
+        if days_since_scan is not None
+        else None
+    )
+    return CoveredResource(
+        id=INSTANCE_ID,
+        arn=INSTANCE_ARN,
+        region=AWS_REGION_EU_WEST_1,
+        resource_type="AWS_EC2_INSTANCE",
+        scan_type="PACKAGE",
+        scan_status_code=scan_status_code,
+        scan_status_reason=scan_status_reason,
+        last_scanned_at=last_scanned_at,
+    )
+
+
+def execute_check(inspectors, audit_config=None):
+    inspector2_client = mock.MagicMock()
+    inspector2_client.inspectors = inspectors
+    inspector2_client.audit_config = audit_config or {}
+    with (
+        mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=set_mocked_aws_provider([AWS_REGION_EU_WEST_1]),
+        ),
+        mock.patch(f"{CHECK_MODULE}.inspector2_client", new=inspector2_client),
+    ):
+        from prowler.providers.aws.services.inspector2.inspector2_coverage_recently_scanned.inspector2_coverage_recently_scanned import (
+            inspector2_coverage_recently_scanned,
+        )
+
+        return inspector2_coverage_recently_scanned().execute()
+
+
+class Test_inspector2_coverage_recently_scanned:
+    def test_no_resources(self):
+        assert execute_check([]) == []
+
+    def test_inspector_disabled(self):
+        assert execute_check([build_inspector(status="DISABLED", coverage=[])]) == []
+
+    def test_recently_scanned_resource(self):
+        result = execute_check([build_inspector(coverage=[build_instance(1)])])
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+        assert (
+            result[0].status_extended
+            == f"AWS_EC2_INSTANCE {INSTANCE_ID} was last scanned by Inspector2 within the last 3 days."
+        )
+        assert result[0].resource_id == INSTANCE_ID
+        assert result[0].resource_arn == INSTANCE_ARN
+        assert result[0].region == AWS_REGION_EU_WEST_1
+
+    def test_stale_resource(self):
+        result = execute_check([build_inspector(coverage=[build_instance(10)])])
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert (
+            result[0].status_extended
+            == f"AWS_EC2_INSTANCE {INSTANCE_ID} was last scanned by Inspector2 more than 3 days ago."
+        )
+
+    def test_resource_scanned_just_over_max_days(self):
+        result = execute_check([build_inspector(coverage=[build_instance(3)])])
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+
+    def test_custom_max_days(self):
+        result = execute_check(
+            [build_inspector(coverage=[build_instance(10)])],
+            audit_config={"inspector2_max_days_since_last_scan": 14},
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+
+    def test_resource_without_recorded_scan(self):
+        result = execute_check([build_inspector(coverage=[build_instance(None)])])
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert (
+            result[0].status_extended
+            == f"AWS_EC2_INSTANCE {INSTANCE_ID} has no recorded Inspector2 scan."
+        )
+
+    def test_pending_initial_scan_is_skipped(self):
+        assert (
+            execute_check(
+                [
+                    build_inspector(
+                        coverage=[
+                            build_instance(
+                                None, scan_status_reason="PENDING_INITIAL_SCAN"
+                            )
+                        ]
+                    )
+                ]
+            )
+            == []
+        )
+
+    def test_inactive_resource_is_skipped(self):
+        assert (
+            execute_check(
+                [
+                    build_inspector(
+                        coverage=[
+                            build_instance(
+                                10,
+                                scan_status_code="INACTIVE",
+                                scan_status_reason="NO_INVENTORY",
+                            )
+                        ]
+                    )
+                ]
+            )
+            == []
+        )
+
+    def test_coverage_not_retrieved(self):
+        result = execute_check([build_inspector(coverage=None)])
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert result[0].resource_arn == INSPECTOR_ARN
diff --git a/tests/providers/aws/services/inspector2/inspector2_coverage_scan_status_active/inspector2_coverage_scan_status_active_test.py b/tests/providers/aws/services/inspector2/inspector2_coverage_scan_status_active/inspector2_coverage_scan_status_active_test.py
new file mode 100644
index 0000000000..1ce2e21c4a
--- /dev/null
+++ b/tests/providers/aws/services/inspector2/inspector2_coverage_scan_status_active/inspector2_coverage_scan_status_active_test.py
@@ -0,0 +1,132 @@
+from datetime import datetime, timezone
+from unittest import mock
+
+from prowler.providers.aws.services.inspector2.inspector2_service import (
+    CoveredResource,
+    Inspector,
+)
+from tests.providers.aws.utils import (
+    AWS_ACCOUNT_NUMBER,
+    AWS_REGION_EU_WEST_1,
+    set_mocked_aws_provider,
+)
+
+INSPECTOR_ARN = (
+    f"arn:aws:inspector2:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:inspector2"
+)
+INSTANCE_ID = "i-0123456789abcdef0"
+INSTANCE_ARN = (
+    f"arn:aws:ec2:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:instance/{INSTANCE_ID}"
+)
+CHECK_MODULE = "prowler.providers.aws.services.inspector2.inspector2_coverage_scan_status_active.inspector2_coverage_scan_status_active"
+
+
+def build_inspector(status="ENABLED", coverage=None):
+    return Inspector(
+        id="Inspector2",
+        arn=INSPECTOR_ARN,
+        region=AWS_REGION_EU_WEST_1,
+        status=status,
+        ec2_status="ENABLED",
+        ecr_status="ENABLED",
+        lambda_status="ENABLED",
+        lambda_code_status="ENABLED",
+        coverage=coverage,
+    )
+
+
+def build_instance(scan_status_code, scan_status_reason):
+    return CoveredResource(
+        id=INSTANCE_ID,
+        arn=INSTANCE_ARN,
+        region=AWS_REGION_EU_WEST_1,
+        resource_type="AWS_EC2_INSTANCE",
+        scan_type="PACKAGE",
+        scan_status_code=scan_status_code,
+        scan_status_reason=scan_status_reason,
+        last_scanned_at=datetime.now(timezone.utc),
+    )
+
+
+def execute_check(inspectors):
+    inspector2_client = mock.MagicMock()
+    inspector2_client.inspectors = inspectors
+    inspector2_client.audit_config = {}
+    with (
+        mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=set_mocked_aws_provider([AWS_REGION_EU_WEST_1]),
+        ),
+        mock.patch(f"{CHECK_MODULE}.inspector2_client", new=inspector2_client),
+    ):
+        from prowler.providers.aws.services.inspector2.inspector2_coverage_scan_status_active.inspector2_coverage_scan_status_active import (
+            inspector2_coverage_scan_status_active,
+        )
+
+        return inspector2_coverage_scan_status_active().execute()
+
+
+class Test_inspector2_coverage_scan_status_active:
+    def test_no_resources(self):
+        assert execute_check([]) == []
+
+    def test_inspector_disabled(self):
+        assert execute_check([build_inspector(status="DISABLED", coverage=[])]) == []
+
+    def test_no_covered_resources(self):
+        assert execute_check([build_inspector(coverage=[])]) == []
+
+    def test_active_resource(self):
+        result = execute_check(
+            [build_inspector(coverage=[build_instance("ACTIVE", "SUCCESSFUL")])]
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+        assert (
+            result[0].status_extended
+            == f"Inspector2 is actively scanning AWS_EC2_INSTANCE {INSTANCE_ID}."
+        )
+        assert result[0].resource_id == INSTANCE_ID
+        assert result[0].resource_arn == INSTANCE_ARN
+        assert result[0].region == AWS_REGION_EU_WEST_1
+
+    def test_inactive_resource(self):
+        result = execute_check(
+            [
+                build_inspector(
+                    coverage=[build_instance("INACTIVE", "UNMANAGED_EC2_INSTANCE")]
+                )
+            ]
+        )
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert (
+            result[0].status_extended
+            == f"Inspector2 is not scanning AWS_EC2_INSTANCE {INSTANCE_ID}: UNMANAGED_EC2_INSTANCE."
+        )
+        assert result[0].resource_id == INSTANCE_ID
+
+    def test_not_applicable_resource_is_skipped(self):
+        assert (
+            execute_check(
+                [
+                    build_inspector(
+                        coverage=[build_instance("INACTIVE", "EC2_INSTANCE_STOPPED")]
+                    )
+                ]
+            )
+            == []
+        )
+
+    def test_coverage_not_retrieved(self):
+        result = execute_check([build_inspector(coverage=None)])
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert (
+            result[0].status_extended
+            == f"Inspector2 coverage could not be retrieved in region {AWS_REGION_EU_WEST_1}; verify the inspector2:ListCoverage permission."
+        )
+        assert result[0].resource_arn == INSPECTOR_ARN
diff --git a/tests/providers/aws/services/inspector2/inspector2_service_test.py b/tests/providers/aws/services/inspector2/inspector2_service_test.py
index c84797eacd..7695e889eb 100644
--- a/tests/providers/aws/services/inspector2/inspector2_service_test.py
+++ b/tests/providers/aws/services/inspector2/inspector2_service_test.py
@@ -1,18 +1,30 @@
-from datetime import datetime
+from datetime import datetime, timezone
 from unittest.mock import patch
 
 import botocore
+from botocore.exceptions import ClientError
 
-from prowler.providers.aws.services.inspector2.inspector2_service import Inspector2
+from prowler.providers.aws.services.inspector2.inspector2_service import (
+    Finding,
+    Inspector,
+    Inspector2,
+)
 from tests.providers.aws.utils import (
     AWS_ACCOUNT_NUMBER,
     AWS_REGION_EU_WEST_1,
+    AWS_REGION_US_EAST_1,
     set_mocked_aws_provider,
 )
 
 FINDING_ARN = (
     "arn:aws:inspector2:us-east-1:123456789012:finding/0e436649379db5f327e3cf5bb4421d76"
 )
+VULNERABILITY_ID = "CVE-2022-40897"
+INSTANCE_ID = "i-0123456789abcdef0"
+FIRST_OBSERVED_AT = datetime(2024, 1, 1, tzinfo=timezone.utc)
+LAST_SCANNED_AT = datetime(2024, 6, 1, tzinfo=timezone.utc)
+KEV_DATE_ADDED = datetime(2024, 4, 12, tzinfo=timezone.utc)
+KEV_DATE_DUE = datetime(2024, 5, 3, tzinfo=timezone.utc)
 
 # Mocking Calls
 make_api_call = botocore.client.BaseClient._make_api_call
@@ -64,16 +76,83 @@ def mock_make_api_call(self, operation_name, kwargs):
                     "description": "Finding Description",
                     "severity": "MEDIUM",
                     "status": "ACTIVE",
-                    "title": "CVE-2022-40897 - setuptools",
+                    "title": f"{VULNERABILITY_ID} - setuptools",
                     "type": "PACKAGE_VULNERABILITY",
+                    "firstObservedAt": FIRST_OBSERVED_AT,
                     "updatedAt": datetime(2024, 1, 1),
+                    "packageVulnerabilityDetails": {
+                        "vulnerabilityId": VULNERABILITY_ID
+                    },
+                    "resources": [{"id": INSTANCE_ID, "type": "AWS_EC2_INSTANCE"}],
                 }
             ]
         }
+    if operation_name == "ListCoverage":
+        return {
+            "coveredResources": [
+                {
+                    "resourceId": INSTANCE_ID,
+                    "resourceType": "AWS_EC2_INSTANCE",
+                    "accountId": AWS_ACCOUNT_NUMBER,
+                    "scanType": "PACKAGE",
+                    "scanStatus": {"statusCode": "ACTIVE", "reason": "SUCCESSFUL"},
+                    "lastScannedAt": LAST_SCANNED_AT,
+                }
+            ]
+        }
+    if operation_name == "BatchGetFindingDetails":
+        return {
+            "findingDetails": [
+                {
+                    "findingArn": FINDING_ARN,
+                    "cisaData": {
+                        "dateAdded": KEV_DATE_ADDED,
+                        "dateDue": KEV_DATE_DUE,
+                    },
+                }
+            ],
+            "errors": [],
+        }
 
     return make_api_call(self, operation_name, kwargs)
 
 
+def mock_make_api_call_finding_details_denied(self, operation_name, kwargs):
+    if operation_name == "BatchGetFindingDetails":
+        raise ClientError(
+            {"Error": {"Code": "AccessDeniedException", "Message": "denied"}},
+            operation_name,
+        )
+    return mock_make_api_call(self, operation_name, kwargs)
+
+
+def mock_finding_details_error(error_code):
+    def _mock(self, operation_name, kwargs):
+        if operation_name == "BatchGetFindingDetails":
+            return {
+                "findingDetails": [],
+                "errors": [
+                    {
+                        "findingArn": FINDING_ARN,
+                        "errorCode": error_code,
+                        "errorMessage": "error",
+                    }
+                ],
+            }
+        return mock_make_api_call(self, operation_name, kwargs)
+
+    return _mock
+
+
+def mock_make_api_call_list_denied(self, operation_name, kwargs):
+    if operation_name in ("ListFindings", "ListCoverage"):
+        raise ClientError(
+            {"Error": {"Code": "AccessDeniedException", "Message": "denied"}},
+            operation_name,
+        )
+    return mock_make_api_call(self, operation_name, kwargs)
+
+
 def mock_generate_regional_clients(provider, service):
     regional_client = provider._session.current_session.client(
         service, region_name=AWS_REGION_EU_WEST_1
@@ -82,6 +161,29 @@ def mock_generate_regional_clients(provider, service):
     return {AWS_REGION_EU_WEST_1: regional_client}
 
 
+def build_inspector(region, vulnerability_ids):
+    return Inspector(
+        id="Inspector2",
+        arn=f"arn:aws:inspector2:{region}:{AWS_ACCOUNT_NUMBER}:inspector2",
+        region=region,
+        status="ENABLED",
+        ec2_status="ENABLED",
+        ecr_status="ENABLED",
+        lambda_status="ENABLED",
+        lambda_code_status="ENABLED",
+        findings=[
+            Finding(
+                arn=f"arn:aws:inspector2:{region}:{AWS_ACCOUNT_NUMBER}:finding/{index}",
+                type="PACKAGE_VULNERABILITY",
+                severity="HIGH",
+                first_observed_at=FIRST_OBSERVED_AT,
+                vulnerability_id=vulnerability_id,
+            )
+            for index, vulnerability_id in enumerate(vulnerability_ids)
+        ],
+    )
+
+
 # Patch every AWS call using Boto3 and generate_regional_clients to have 1 client
 @patch("botocore.client.BaseClient._make_api_call", new=mock_make_api_call)
 @patch(
@@ -118,3 +220,115 @@ class Test_Inspector2_Service:
         aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
         inspector2 = Inspector2(aws_provider)
         assert inspector2.inspectors[0].active_findings
+
+    def test_list_findings(self):
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        inspector2 = Inspector2(aws_provider)
+        findings = inspector2.inspectors[0].findings
+        assert len(findings) == 1
+        assert findings[0].arn == FINDING_ARN
+        assert findings[0].type == "PACKAGE_VULNERABILITY"
+        assert findings[0].severity == "MEDIUM"
+        assert findings[0].first_observed_at == FIRST_OBSERVED_AT
+        assert findings[0].vulnerability_id == VULNERABILITY_ID
+        assert findings[0].resource_ids == [INSTANCE_ID]
+
+    def test_list_coverage(self):
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        inspector2 = Inspector2(aws_provider)
+        coverage = inspector2.inspectors[0].coverage
+        assert len(coverage) == 1
+        assert coverage[0].id == INSTANCE_ID
+        assert (
+            coverage[0].arn
+            == f"arn:aws:ec2:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:instance/{INSTANCE_ID}"
+        )
+        assert coverage[0].region == AWS_REGION_EU_WEST_1
+        assert coverage[0].resource_type == "AWS_EC2_INSTANCE"
+        assert coverage[0].scan_type == "PACKAGE"
+        assert coverage[0].scan_status_code == "ACTIVE"
+        assert coverage[0].scan_status_reason == "SUCCESSFUL"
+        assert coverage[0].last_scanned_at == LAST_SCANNED_AT
+
+    def test_list_coverage_keeps_audited_resources(self):
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        aws_provider._audit_resources = [
+            f"arn:aws:ec2:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:instance/{INSTANCE_ID}"
+        ]
+        inspector2 = Inspector2(aws_provider)
+        assert len(inspector2.inspectors[0].coverage) == 1
+
+    def test_list_coverage_skips_non_audited_resources(self):
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        aws_provider._audit_resources = [
+            f"arn:aws:ec2:{AWS_REGION_EU_WEST_1}:{AWS_ACCOUNT_NUMBER}:instance/i-0fedcba9876543210"
+        ]
+        inspector2 = Inspector2(aws_provider)
+        assert inspector2.inspectors[0].coverage == []
+
+    def test_batch_get_finding_details(self):
+        aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+        inspector2 = Inspector2(aws_provider)
+        known_exploited = inspector2.known_exploited_vulnerabilities[VULNERABILITY_ID]
+        assert known_exploited.id == VULNERABILITY_ID
+        assert known_exploited.date_added == KEV_DATE_ADDED
+        assert known_exploited.date_due == KEV_DATE_DUE
+        assert inspector2.vulnerability_lookup_failed == set()
+
+    def test_batch_get_finding_details_denied(self):
+        with patch(
+            "botocore.client.BaseClient._make_api_call",
+            new=mock_make_api_call_finding_details_denied,
+        ):
+            aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+            inspector2 = Inspector2(aws_provider)
+        assert inspector2.known_exploited_vulnerabilities == {}
+        assert inspector2.vulnerability_lookup_failed == {VULNERABILITY_ID}
+
+    def test_finding_details_not_found_is_not_a_lookup_failure(self):
+        with patch(
+            "botocore.client.BaseClient._make_api_call",
+            new=mock_finding_details_error("FINDING_DETAILS_NOT_FOUND"),
+        ):
+            aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+            inspector2 = Inspector2(aws_provider)
+        assert inspector2.known_exploited_vulnerabilities == {}
+        assert inspector2.vulnerability_lookup_failed == set()
+
+    def test_finding_details_error_is_a_lookup_failure(self):
+        with patch(
+            "botocore.client.BaseClient._make_api_call",
+            new=mock_finding_details_error("INTERNAL_ERROR"),
+        ):
+            aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+            inspector2 = Inspector2(aws_provider)
+        assert inspector2.known_exploited_vulnerabilities == {}
+        assert inspector2.vulnerability_lookup_failed == {VULNERABILITY_ID}
+
+    def test_list_findings_and_coverage_denied(self):
+        with patch(
+            "botocore.client.BaseClient._make_api_call",
+            new=mock_make_api_call_list_denied,
+        ):
+            aws_provider = set_mocked_aws_provider([AWS_REGION_EU_WEST_1])
+            inspector2 = Inspector2(aws_provider)
+        assert inspector2.inspectors[0].findings is None
+        assert inspector2.inspectors[0].coverage is None
+        assert inspector2.known_exploited_vulnerabilities == {}
+
+    def test_finding_detail_batches_use_one_finding_per_cve(self):
+        vulnerability_ids = [f"CVE-2024-{number:04d}" for number in range(25)]
+        batches = Inspector2._get_finding_detail_batches(
+            [
+                build_inspector(
+                    AWS_REGION_EU_WEST_1,
+                    vulnerability_ids + vulnerability_ids[:5] + ["GHSA-xxxx-yyyy-zzzz"],
+                ),
+                build_inspector(AWS_REGION_US_EAST_1, vulnerability_ids[:3]),
+            ]
+        )
+        assert [region for region, _ in batches] == [AWS_REGION_EU_WEST_1] * 3
+        assert [len(findings) for _, findings in batches] == [10, 10, 5]
+        assert sorted(cve for _, findings in batches for _, cve in findings) == sorted(
+            vulnerability_ids
+        )
diff --git a/tests/providers/aws/services/transfer/transfer_server_fips_security_policy_enabled/transfer_server_fips_security_policy_enabled_test.py b/tests/providers/aws/services/transfer/transfer_server_fips_security_policy_enabled/transfer_server_fips_security_policy_enabled_test.py
new file mode 100644
index 0000000000..c60add1918
--- /dev/null
+++ b/tests/providers/aws/services/transfer/transfer_server_fips_security_policy_enabled/transfer_server_fips_security_policy_enabled_test.py
@@ -0,0 +1,111 @@
+from unittest import mock
+from unittest.mock import patch
+
+import botocore
+from moto import mock_aws
+
+from tests.providers.aws.utils import (
+    AWS_ACCOUNT_NUMBER,
+    AWS_REGION_US_EAST_1,
+    set_mocked_aws_provider,
+)
+
+SERVER_ID = "s-01234567890abcdef"
+SERVER_ARN = (
+    f"arn:aws:transfer:{AWS_REGION_US_EAST_1}:{AWS_ACCOUNT_NUMBER}:server/{SERVER_ID}"
+)
+CHECK_MODULE = "prowler.providers.aws.services.transfer.transfer_server_fips_security_policy_enabled.transfer_server_fips_security_policy_enabled"
+
+make_api_call = botocore.client.BaseClient._make_api_call
+
+
+def mock_server_with_policy(security_policy_name):
+    def _mock(self, operation_name, kwarg):
+        if operation_name == "ListServers":
+            return {"Servers": [{"Arn": SERVER_ARN, "ServerId": SERVER_ID}]}
+        if operation_name == "DescribeServer":
+            return {
+                "Server": {
+                    "Arn": SERVER_ARN,
+                    "ServerId": SERVER_ID,
+                    "Protocols": ["SFTP"],
+                    "SecurityPolicyName": security_policy_name,
+                }
+            }
+        return make_api_call(self, operation_name, kwarg)
+
+    return _mock
+
+
+def execute_check():
+    from prowler.providers.aws.services.transfer.transfer_service import Transfer
+
+    aws_provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
+    with (
+        mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=aws_provider,
+        ),
+        mock.patch(f"{CHECK_MODULE}.transfer_client", new=Transfer(aws_provider)),
+    ):
+        from prowler.providers.aws.services.transfer.transfer_server_fips_security_policy_enabled.transfer_server_fips_security_policy_enabled import (
+            transfer_server_fips_security_policy_enabled,
+        )
+
+        return transfer_server_fips_security_policy_enabled().execute()
+
+
+class Test_transfer_server_fips_security_policy_enabled:
+    @mock_aws
+    def test_no_servers(self):
+        assert execute_check() == []
+
+    @patch(
+        "botocore.client.BaseClient._make_api_call",
+        new=mock_server_with_policy("TransferSecurityPolicy-FIPS-2025-03"),
+    )
+    @mock_aws
+    def test_fips_policy(self):
+        result = execute_check()
+
+        assert len(result) == 1
+        assert result[0].status == "PASS"
+        assert (
+            result[0].status_extended
+            == f"Transfer Server {SERVER_ID} uses FIPS security policy TransferSecurityPolicy-FIPS-2025-03."
+        )
+        assert result[0].resource_id == SERVER_ID
+        assert result[0].resource_arn == SERVER_ARN
+        assert result[0].region == AWS_REGION_US_EAST_1
+
+    @patch(
+        "botocore.client.BaseClient._make_api_call",
+        new=mock_server_with_policy("TransferSecurityPolicy-2024-01"),
+    )
+    @mock_aws
+    def test_non_fips_policy(self):
+        result = execute_check()
+
+        assert len(result) == 1
+        assert result[0].status == "FAIL"
+        assert (
+            result[0].status_extended
+            == f"Transfer Server {SERVER_ID} uses security policy TransferSecurityPolicy-2024-01, which is not a FIPS security policy."
+        )
+
+    @patch(
+        "botocore.client.BaseClient._make_api_call",
+        new=mock_server_with_policy(""),
+    )
+    @mock_aws
+    def test_policy_not_retrieved(self):
+        result = execute_check()
+
+        assert len(result) == 1
+        assert result[0].status == "MANUAL"
+        assert (
+            result[0].status_extended
+            == f"Transfer Server security policies could not be retrieved for {SERVER_ID}; verify the transfer:DescribeServer permission."
+        )
+        assert result[0].resource_id == AWS_ACCOUNT_NUMBER
+        assert result[0].region == AWS_REGION_US_EAST_1

From 682353e054fe98c0a4c57ae6baa2947e40654c7b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Tue, 15 Sep 2026 09:44:32 +0200
Subject: [PATCH 59/77] fix(container): bump PowerShell to 7.5.11 in SDK and
 API (#12811)

---
 .trivyignore.yaml                             | 30 -------------------
 Dockerfile                                    |  6 ++--
 api/Dockerfile                                |  6 ++--
 ...pi-image-powershell-dotnet-cve.security.md |  1 +
 ...dk-image-powershell-dotnet-cve.security.md |  1 +
 5 files changed, 8 insertions(+), 36 deletions(-)
 create mode 100644 api/changelog.d/api-image-powershell-dotnet-cve.security.md
 create mode 100644 prowler/changelog.d/sdk-image-powershell-dotnet-cve.security.md

diff --git a/.trivyignore.yaml b/.trivyignore.yaml
index 715c7b625e..efac339352 100644
--- a/.trivyignore.yaml
+++ b/.trivyignore.yaml
@@ -130,36 +130,6 @@ vulnerabilities:
       - "pkg:npm/ip-address"
     expired_at: 2027-01-31
 
-  # CVE-2026-62901 is a DoS in System.Net.WebSockets (unchecked input for loop condition,
-  # CWE-606), fixed in .NET 9.0.19 / 10.0.11 (published 2026-08-11). The vulnerable runtime
-  # ships inside the PowerShell tarball the Dockerfile pins: 7.5.9 is the latest 7.5.x and
-  # bundles .NET 9.0.18; 7.6.4 bundles .NET 10.0.x < 10.0.11, so no published PowerShell
-  # release contains the fix yet. Prowler only invokes pwsh locally to run M365 module
-  # cmdlets; the image does not accept inbound WebSocket connections, so the DoS path is
-  # not reachable from the network. Remove this temporary suppression as soon as a
-  # PowerShell release shipping .NET 9.0.19+ is available.
-  - id: CVE-2026-62901
-    purls:
-      - "pkg:nuget/Microsoft.NETCore.App.Runtime.linux-x64"
-      - "pkg:nuget/Microsoft.NETCore.App.Runtime.linux-arm64"
-    expired_at: 2026-09-15
-
-  # Modules compiled into the Trivy binary the images ship. The binary is pinned by version
-  # and verified by checksum in the Dockerfile; only a rebuild by its vendor moves these.
-  # CVE-2026-71556 affects go-git worktree operations that can follow symlinks outside a
-  # cloned repository. Trivy 0.73.0, the latest published release and the version the
-  # images ship, still pins that vulnerable version:
-  # https://github.com/aquasecurity/trivy/blob/v0.73.0/go.mod#L46
-  # Trivy main already contains the 5.19.2 fix, but no published release includes it yet:
-  # https://github.com/aquasecurity/trivy/commit/a2edba9a03987ba0d2ebc8212c1a9a1e6979497b
-  # Prowler invokes Trivy only with `fs` on an existing local path or with `image`; it does
-  # not ask Trivy to clone or mutate a Git worktree, so the affected path is not reachable.
-  # Remove this temporary suppression as soon as a fixed Trivy release is available.
-  - id: CVE-2026-71556
-    purls:
-      - "pkg:golang/github.com/go-git/go-git/v5"
-    expired_at: 2026-09-15
-
   # CVE-2026-84304 is a DoS in grpc-go <= 1.83.0: a peer fragments a gRPC stream into
   # millions of tiny HTTP/2 DATA frames until the receiver runs out of heap. Fixed in
   # 1.83.1 (published 2026-09-01). Trivy 0.74.0, the latest published release and the
diff --git a/Dockerfile b/Dockerfile
index 559b39c9eb..dc62fd64a6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -3,7 +3,7 @@ FROM python:3.12.13-slim-trixie@sha256:57cd7c3a7a273101a6485ba99423ee56815788280
 LABEL maintainer="https://github.com/prowler-cloud/prowler"
 LABEL org.opencontainers.image.source="https://github.com/prowler-cloud/prowler"
 
-ARG POWERSHELL_VERSION=7.5.9
+ARG POWERSHELL_VERSION=7.5.11
 ENV POWERSHELL_VERSION=${POWERSHELL_VERSION}
 # Opt out of PowerShell telemetry (Application Insights -> dc.services.visualstudio.com)
 ENV POWERSHELL_TELEMETRY_OPTOUT=1
@@ -17,8 +17,8 @@ ENV ZIZMOR_VERSION=${ZIZMOR_VERSION}
 # Pinned here, not fetched with the artefact: a compromised release ships its own checksum.
 ARG TRIVY_SHA256_AMD64=2ae6fe3ee734b7fdf11335663e18c75ea12dccc76062f09f164a3b0f8be4371a
 ARG TRIVY_SHA256_ARM64=b94ce1976bbf3c15b514b605ee88be7c6d94a29be2302847ff01cb794d47aad5
-ARG POWERSHELL_SHA256_AMD64=492ff26bb958336bf61e597ce19e07648b4003bd2a08659e02f0e3e0446ebfe0
-ARG POWERSHELL_SHA256_ARM64=2503b71da3e83635592b092df59a0aca4c3606b4d9b068217bb00be989cb0d56
+ARG POWERSHELL_SHA256_AMD64=82a8b13d92b0f3ae48e56cf2f3f7961679371736ca90145ca71617c2913ba9d8
+ARG POWERSHELL_SHA256_ARM64=830ebda118c731ece3fa7e6b7e8573a21346387cbbca5b2f5e3b9bfe24f96672
 ARG ZIZMOR_SHA256_AMD64=a8000f3c683319a523d3b20df0e75457ba591f049cfcbfa98966631b56733c03
 ARG ZIZMOR_SHA256_ARM64=d66e37ef8a375fb07939c630ebf9709a6e0f20242bdc3faf672a7ed97e0b768d
 
diff --git a/api/Dockerfile b/api/Dockerfile
index ce5bccbb2c..2262bd00d6 100644
--- a/api/Dockerfile
+++ b/api/Dockerfile
@@ -2,7 +2,7 @@ FROM python:3.12.13-slim-trixie@sha256:57cd7c3a7a273101a6485ba99423ee56815788280
 
 LABEL maintainer="https://github.com/prowler-cloud/api"
 
-ARG POWERSHELL_VERSION=7.5.9
+ARG POWERSHELL_VERSION=7.5.11
 ENV POWERSHELL_VERSION=${POWERSHELL_VERSION}
 # Opt out of PowerShell telemetry (Application Insights -> dc.services.visualstudio.com)
 ENV POWERSHELL_TELEMETRY_OPTOUT=1
@@ -16,8 +16,8 @@ ENV ZIZMOR_VERSION=${ZIZMOR_VERSION}
 # Pinned here, not fetched with the artefact: a compromised release ships its own checksum.
 ARG TRIVY_SHA256_AMD64=2ae6fe3ee734b7fdf11335663e18c75ea12dccc76062f09f164a3b0f8be4371a
 ARG TRIVY_SHA256_ARM64=b94ce1976bbf3c15b514b605ee88be7c6d94a29be2302847ff01cb794d47aad5
-ARG POWERSHELL_SHA256_AMD64=492ff26bb958336bf61e597ce19e07648b4003bd2a08659e02f0e3e0446ebfe0
-ARG POWERSHELL_SHA256_ARM64=2503b71da3e83635592b092df59a0aca4c3606b4d9b068217bb00be989cb0d56
+ARG POWERSHELL_SHA256_AMD64=82a8b13d92b0f3ae48e56cf2f3f7961679371736ca90145ca71617c2913ba9d8
+ARG POWERSHELL_SHA256_ARM64=830ebda118c731ece3fa7e6b7e8573a21346387cbbca5b2f5e3b9bfe24f96672
 ARG ZIZMOR_SHA256_AMD64=a8000f3c683319a523d3b20df0e75457ba591f049cfcbfa98966631b56733c03
 ARG ZIZMOR_SHA256_ARM64=d66e37ef8a375fb07939c630ebf9709a6e0f20242bdc3faf672a7ed97e0b768d
 
diff --git a/api/changelog.d/api-image-powershell-dotnet-cve.security.md b/api/changelog.d/api-image-powershell-dotnet-cve.security.md
new file mode 100644
index 0000000000..28b91a32a0
--- /dev/null
+++ b/api/changelog.d/api-image-powershell-dotnet-cve.security.md
@@ -0,0 +1 @@
+PowerShell from 7.5.9 to 7.5.11 in the API container image, bundling .NET runtime 9.0.20 and patching CVE-2026-62901
diff --git a/prowler/changelog.d/sdk-image-powershell-dotnet-cve.security.md b/prowler/changelog.d/sdk-image-powershell-dotnet-cve.security.md
new file mode 100644
index 0000000000..370aa37289
--- /dev/null
+++ b/prowler/changelog.d/sdk-image-powershell-dotnet-cve.security.md
@@ -0,0 +1 @@
+PowerShell from 7.5.9 to 7.5.11 in the SDK container image, bundling .NET runtime 9.0.20 and patching CVE-2026-62901

From 61ef44a03bb8842bf82e88e25e55931c24a8729d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Tue, 15 Sep 2026 09:56:50 +0200
Subject: [PATCH 60/77] fix(m365): skip defender preset policies without rules
 (#12809)

---
 ...5-defender-preset-policy-keyerror.fixed.md |  1 +
 ...defender_antiphishing_policy_configured.py |  6 ++
 ...ispam_policy_inbound_no_allowed_domains.py |  6 ++
 ...olicy_common_attachments_filter_enabled.py |  6 ++
 ...omprehensive_attachments_filter_applied.py |  6 ++
 ...ications_internal_users_malware_enabled.py |  6 ++
 ...der_antiphishing_policy_configured_test.py | 83 +++++++++++++++++++
 ..._policy_inbound_no_allowed_domains_test.py | 62 ++++++++++++++
 ..._common_attachments_filter_enabled_test.py | 74 +++++++++++++++++
 ...hensive_attachments_filter_applied_test.py | 74 +++++++++++++++++
 ...ons_internal_users_malware_enabled_test.py | 76 +++++++++++++++++
 11 files changed, 400 insertions(+)
 create mode 100644 prowler/changelog.d/m365-defender-preset-policy-keyerror.fixed.md

diff --git a/prowler/changelog.d/m365-defender-preset-policy-keyerror.fixed.md b/prowler/changelog.d/m365-defender-preset-policy-keyerror.fixed.md
new file mode 100644
index 0000000000..2a50037e84
--- /dev/null
+++ b/prowler/changelog.d/m365-defender-preset-policy-keyerror.fixed.md
@@ -0,0 +1 @@
+`KeyError` in M365 Defender malware, anti-phishing and inbound anti-spam checks when the tenant has Standard or Strict preset security policies
diff --git a/prowler/providers/m365/services/defender/defender_antiphishing_policy_configured/defender_antiphishing_policy_configured.py b/prowler/providers/m365/services/defender/defender_antiphishing_policy_configured/defender_antiphishing_policy_configured.py
index 61727b9d3c..5c467f941a 100644
--- a/prowler/providers/m365/services/defender/defender_antiphishing_policy_configured/defender_antiphishing_policy_configured.py
+++ b/prowler/providers/m365/services/defender/defender_antiphishing_policy_configured/defender_antiphishing_policy_configured.py
@@ -55,6 +55,12 @@ class defender_antiphishing_policy_configured(Check):
                     policy_name,
                     policy,
                 ) in defender_client.antiphishing_policies.items():
+                    # Preset security policies are scoped by protection policy rules, not filter rules
+                    if (
+                        not policy.default
+                        and policy.name not in defender_client.antiphishing_rules
+                    ):
+                        continue
                     report = CheckReportM365(
                         metadata=self.metadata(),
                         resource=policy,
diff --git a/prowler/providers/m365/services/defender/defender_antispam_policy_inbound_no_allowed_domains/defender_antispam_policy_inbound_no_allowed_domains.py b/prowler/providers/m365/services/defender/defender_antispam_policy_inbound_no_allowed_domains/defender_antispam_policy_inbound_no_allowed_domains.py
index 67b6643e9e..56616258e0 100644
--- a/prowler/providers/m365/services/defender/defender_antispam_policy_inbound_no_allowed_domains/defender_antispam_policy_inbound_no_allowed_domains.py
+++ b/prowler/providers/m365/services/defender/defender_antispam_policy_inbound_no_allowed_domains/defender_antispam_policy_inbound_no_allowed_domains.py
@@ -51,6 +51,12 @@ class defender_antispam_policy_inbound_no_allowed_domains(Check):
                 default_policy_well_configured = False
 
                 for policy in defender_client.inbound_spam_policies:
+                    # Preset security policies are scoped by protection policy rules, not filter rules
+                    if (
+                        not policy.default
+                        and policy.identity not in defender_client.inbound_spam_rules
+                    ):
+                        continue
                     report = CheckReportM365(
                         metadata=self.metadata(),
                         resource=policy,
diff --git a/prowler/providers/m365/services/defender/defender_malware_policy_common_attachments_filter_enabled/defender_malware_policy_common_attachments_filter_enabled.py b/prowler/providers/m365/services/defender/defender_malware_policy_common_attachments_filter_enabled/defender_malware_policy_common_attachments_filter_enabled.py
index a0b817cda3..d9a7080295 100644
--- a/prowler/providers/m365/services/defender/defender_malware_policy_common_attachments_filter_enabled/defender_malware_policy_common_attachments_filter_enabled.py
+++ b/prowler/providers/m365/services/defender/defender_malware_policy_common_attachments_filter_enabled/defender_malware_policy_common_attachments_filter_enabled.py
@@ -51,6 +51,12 @@ class defender_malware_policy_common_attachments_filter_enabled(Check):
                 default_policy_well_configured = False
 
                 for policy in defender_client.malware_policies:
+                    # Preset security policies are scoped by protection policy rules, not filter rules
+                    if (
+                        not policy.is_default
+                        and policy.identity not in defender_client.malware_rules
+                    ):
+                        continue
                     report = CheckReportM365(
                         metadata=self.metadata(),
                         resource=policy,
diff --git a/prowler/providers/m365/services/defender/defender_malware_policy_comprehensive_attachments_filter_applied/defender_malware_policy_comprehensive_attachments_filter_applied.py b/prowler/providers/m365/services/defender/defender_malware_policy_comprehensive_attachments_filter_applied/defender_malware_policy_comprehensive_attachments_filter_applied.py
index 87aa4ab50e..808ece11b9 100644
--- a/prowler/providers/m365/services/defender/defender_malware_policy_comprehensive_attachments_filter_applied/defender_malware_policy_comprehensive_attachments_filter_applied.py
+++ b/prowler/providers/m365/services/defender/defender_malware_policy_comprehensive_attachments_filter_applied/defender_malware_policy_comprehensive_attachments_filter_applied.py
@@ -114,6 +114,12 @@ class defender_malware_policy_comprehensive_attachments_filter_applied(Check):
                 default_policy_well_configured = False
 
                 for policy in defender_client.malware_policies:
+                    # Preset security policies are scoped by protection policy rules, not filter rules
+                    if (
+                        not policy.is_default
+                        and policy.identity not in defender_client.malware_rules
+                    ):
+                        continue
                     report = CheckReportM365(
                         metadata=self.metadata(),
                         resource=policy,
diff --git a/prowler/providers/m365/services/defender/defender_malware_policy_notifications_internal_users_malware_enabled/defender_malware_policy_notifications_internal_users_malware_enabled.py b/prowler/providers/m365/services/defender/defender_malware_policy_notifications_internal_users_malware_enabled/defender_malware_policy_notifications_internal_users_malware_enabled.py
index 735cc6b9e9..ab5efc8efe 100644
--- a/prowler/providers/m365/services/defender/defender_malware_policy_notifications_internal_users_malware_enabled/defender_malware_policy_notifications_internal_users_malware_enabled.py
+++ b/prowler/providers/m365/services/defender/defender_malware_policy_notifications_internal_users_malware_enabled/defender_malware_policy_notifications_internal_users_malware_enabled.py
@@ -51,6 +51,12 @@ class defender_malware_policy_notifications_internal_users_malware_enabled(Check
                 default_policy_well_configured = False
 
                 for policy in defender_client.malware_policies:
+                    # Preset security policies are scoped by protection policy rules, not filter rules
+                    if (
+                        not policy.is_default
+                        and policy.identity not in defender_client.malware_rules
+                    ):
+                        continue
                     report = CheckReportM365(
                         metadata=self.metadata(),
                         resource=policy,
diff --git a/tests/providers/m365/services/defender/defender_antiphishing_policy_configured/defender_antiphishing_policy_configured_test.py b/tests/providers/m365/services/defender/defender_antiphishing_policy_configured/defender_antiphishing_policy_configured_test.py
index 8610e96769..984fa648df 100644
--- a/tests/providers/m365/services/defender/defender_antiphishing_policy_configured/defender_antiphishing_policy_configured_test.py
+++ b/tests/providers/m365/services/defender/defender_antiphishing_policy_configured/defender_antiphishing_policy_configured_test.py
@@ -521,3 +521,86 @@ class Test_defender_antiphishing_policy_configured:
             check = defender_antiphishing_policy_configured()
             result = check.execute()
             assert len(result) == 0
+
+    def test_preset_policy_without_rule_is_skipped(self):
+        defender_client = mock.MagicMock()
+        defender_client.audited_tenant = "audited_tenant"
+        defender_client.audited_domain = DOMAIN
+        defender_client.audit_config = {}
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_m365_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.m365.lib.powershell.m365_powershell.M365PowerShell.connect_exchange_online"
+            ),
+            mock.patch(
+                "prowler.providers.m365.services.defender.defender_antiphishing_policy_configured.defender_antiphishing_policy_configured.defender_client",
+                new=defender_client,
+            ),
+        ):
+            from prowler.providers.m365.services.defender.defender_antiphishing_policy_configured.defender_antiphishing_policy_configured import (
+                defender_antiphishing_policy_configured,
+            )
+            from prowler.providers.m365.services.defender.defender_service import (
+                AntiphishingPolicy,
+                AntiphishingRule,
+            )
+
+            defender_client.antiphishing_policies = {
+                "Default": AntiphishingPolicy(
+                    name="Default",
+                    spoof_intelligence=True,
+                    spoof_intelligence_action="Quarantine",
+                    dmarc_reject_action="Quarantine",
+                    dmarc_quarantine_action="Quarantine",
+                    safety_tips=True,
+                    unauthenticated_sender_action=True,
+                    show_tag=True,
+                    honor_dmarc_policy=True,
+                    default=True,
+                ),
+                "Standard Preset Security Policy1663355404982": AntiphishingPolicy(
+                    name="Standard Preset Security Policy1663355404982",
+                    spoof_intelligence=True,
+                    spoof_intelligence_action="Quarantine",
+                    dmarc_reject_action="Quarantine",
+                    dmarc_quarantine_action="Quarantine",
+                    safety_tips=True,
+                    unauthenticated_sender_action=True,
+                    show_tag=True,
+                    honor_dmarc_policy=True,
+                    default=False,
+                ),
+                "Custom1": AntiphishingPolicy(
+                    name="Custom1",
+                    spoof_intelligence=True,
+                    spoof_intelligence_action="Quarantine",
+                    dmarc_reject_action="Quarantine",
+                    dmarc_quarantine_action="Quarantine",
+                    safety_tips=True,
+                    unauthenticated_sender_action=True,
+                    show_tag=True,
+                    honor_dmarc_policy=True,
+                    default=False,
+                ),
+            }
+            defender_client.antiphishing_rules = {
+                "Custom1": AntiphishingRule(
+                    state="Enabled",
+                    priority=1,
+                    users=["user1@example.com"],
+                    groups=None,
+                    domains=None,
+                )
+            }
+
+            check = defender_antiphishing_policy_configured()
+            result = check.execute()
+
+            assert len(result) == 2
+            assert "Standard Preset Security Policy1663355404982" not in [
+                finding.resource_id for finding in result
+            ]
diff --git a/tests/providers/m365/services/defender/defender_antispam_policy_inbound_no_allowed_domains/defender_antispam_policy_inbound_no_allowed_domains_test.py b/tests/providers/m365/services/defender/defender_antispam_policy_inbound_no_allowed_domains/defender_antispam_policy_inbound_no_allowed_domains_test.py
index 625fc8ded3..4e0a5482a1 100644
--- a/tests/providers/m365/services/defender/defender_antispam_policy_inbound_no_allowed_domains/defender_antispam_policy_inbound_no_allowed_domains_test.py
+++ b/tests/providers/m365/services/defender/defender_antispam_policy_inbound_no_allowed_domains/defender_antispam_policy_inbound_no_allowed_domains_test.py
@@ -410,3 +410,65 @@ class Test_defender_antispam_policy_inbound_no_allowed_domains:
             check = defender_antispam_policy_inbound_no_allowed_domains()
             result = check.execute()
             assert len(result) == 0
+
+    def test_preset_policy_without_rule_is_skipped(self):
+        defender_client = mock.MagicMock()
+        defender_client.audited_tenant = "audited_tenant"
+        defender_client.audited_domain = DOMAIN
+        defender_client.audit_config = {}
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_m365_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.m365.lib.powershell.m365_powershell.M365PowerShell.connect_exchange_online"
+            ),
+            mock.patch(
+                "prowler.providers.m365.services.defender.defender_antispam_policy_inbound_no_allowed_domains.defender_antispam_policy_inbound_no_allowed_domains.defender_client",
+                new=defender_client,
+            ),
+        ):
+            from prowler.providers.m365.services.defender.defender_antispam_policy_inbound_no_allowed_domains.defender_antispam_policy_inbound_no_allowed_domains import (
+                defender_antispam_policy_inbound_no_allowed_domains,
+            )
+            from prowler.providers.m365.services.defender.defender_service import (
+                DefenderInboundSpamPolicy,
+                InboundSpamRule,
+            )
+
+            defender_client.inbound_spam_policies = [
+                DefenderInboundSpamPolicy(
+                    identity="Default",
+                    allowed_sender_domains=[],
+                    default=True,
+                ),
+                DefenderInboundSpamPolicy(
+                    identity="Standard Preset Security Policy1663355404982",
+                    allowed_sender_domains=[],
+                    default=False,
+                ),
+                DefenderInboundSpamPolicy(
+                    identity="Custom1",
+                    allowed_sender_domains=[],
+                    default=False,
+                ),
+            ]
+            defender_client.inbound_spam_rules = {
+                "Custom1": InboundSpamRule(
+                    state="Enabled",
+                    priority=1,
+                    users=["user1@example.com"],
+                    groups=None,
+                    domains=None,
+                )
+            }
+
+            check = defender_antispam_policy_inbound_no_allowed_domains()
+            result = check.execute()
+
+            assert len(result) == 2
+            assert "Standard Preset Security Policy1663355404982" not in [
+                finding.resource_id for finding in result
+            ]
diff --git a/tests/providers/m365/services/defender/defender_malware_policy_common_attachments_filter_enabled/defender_malware_policy_common_attachments_filter_enabled_test.py b/tests/providers/m365/services/defender/defender_malware_policy_common_attachments_filter_enabled/defender_malware_policy_common_attachments_filter_enabled_test.py
index adb62b213d..f2b9fdb402 100644
--- a/tests/providers/m365/services/defender/defender_malware_policy_common_attachments_filter_enabled/defender_malware_policy_common_attachments_filter_enabled_test.py
+++ b/tests/providers/m365/services/defender/defender_malware_policy_common_attachments_filter_enabled/defender_malware_policy_common_attachments_filter_enabled_test.py
@@ -442,3 +442,77 @@ class Test_defender_malware_policy_common_attachments_filter_enabled:
             check = defender_malware_policy_common_attachments_filter_enabled()
             result = check.execute()
             assert len(result) == 0
+
+    def test_preset_policy_without_rule_is_skipped(self):
+        defender_client = mock.MagicMock()
+        defender_client.audited_tenant = "audited_tenant"
+        defender_client.audited_domain = DOMAIN
+        defender_client.audit_config = {}
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_m365_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.m365.lib.powershell.m365_powershell.M365PowerShell.connect_exchange_online"
+            ),
+            mock.patch(
+                "prowler.providers.m365.services.defender.defender_malware_policy_common_attachments_filter_enabled.defender_malware_policy_common_attachments_filter_enabled.defender_client",
+                new=defender_client,
+            ),
+        ):
+            from prowler.providers.m365.services.defender.defender_malware_policy_common_attachments_filter_enabled.defender_malware_policy_common_attachments_filter_enabled import (
+                defender_malware_policy_common_attachments_filter_enabled,
+            )
+            from prowler.providers.m365.services.defender.defender_service import (
+                MalwarePolicy,
+                MalwareRule,
+            )
+
+            defender_client.audit_config = {
+                "recommended_blocked_file_types": ["exe", "bat"]
+            }
+            defender_client.malware_policies = [
+                MalwarePolicy(
+                    identity="Default",
+                    enable_file_filter=True,
+                    enable_internal_sender_admin_notifications=True,
+                    internal_sender_admin_address="admin@example.com",
+                    file_types=["exe", "bat"],
+                    is_default=True,
+                ),
+                MalwarePolicy(
+                    identity="Standard Preset Security Policy1663355404982",
+                    enable_file_filter=True,
+                    enable_internal_sender_admin_notifications=True,
+                    internal_sender_admin_address="admin@example.com",
+                    file_types=["exe", "bat"],
+                    is_default=False,
+                ),
+                MalwarePolicy(
+                    identity="Custom1",
+                    enable_file_filter=True,
+                    enable_internal_sender_admin_notifications=True,
+                    internal_sender_admin_address="admin@example.com",
+                    file_types=["exe", "bat"],
+                    is_default=False,
+                ),
+            ]
+            defender_client.malware_rules = {
+                "Custom1": MalwareRule(
+                    state="Enabled",
+                    priority=1,
+                    users=["user1@example.com"],
+                    groups=None,
+                    domains=None,
+                )
+            }
+
+            check = defender_malware_policy_common_attachments_filter_enabled()
+            result = check.execute()
+
+            assert len(result) == 2
+            assert "Standard Preset Security Policy1663355404982" not in [
+                finding.resource_id for finding in result
+            ]
diff --git a/tests/providers/m365/services/defender/defender_malware_policy_comprehensive_attachments_filter_applied/defender_malware_policy_comprehensive_attachments_filter_applied_test.py b/tests/providers/m365/services/defender/defender_malware_policy_comprehensive_attachments_filter_applied/defender_malware_policy_comprehensive_attachments_filter_applied_test.py
index 682f86c768..7a9cfbbd90 100644
--- a/tests/providers/m365/services/defender/defender_malware_policy_comprehensive_attachments_filter_applied/defender_malware_policy_comprehensive_attachments_filter_applied_test.py
+++ b/tests/providers/m365/services/defender/defender_malware_policy_comprehensive_attachments_filter_applied/defender_malware_policy_comprehensive_attachments_filter_applied_test.py
@@ -452,3 +452,77 @@ class Test_defender_malware_policy_comprehensive_attachments_filter_applied:
             check = defender_malware_policy_comprehensive_attachments_filter_applied()
             result = check.execute()
             assert len(result) == 0
+
+    def test_preset_policy_without_rule_is_skipped(self):
+        defender_client = mock.MagicMock()
+        defender_client.audited_tenant = "audited_tenant"
+        defender_client.audited_domain = DOMAIN
+        defender_client.audit_config = {}
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_m365_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.m365.lib.powershell.m365_powershell.M365PowerShell.connect_exchange_online"
+            ),
+            mock.patch(
+                "prowler.providers.m365.services.defender.defender_malware_policy_comprehensive_attachments_filter_applied.defender_malware_policy_comprehensive_attachments_filter_applied.defender_client",
+                new=defender_client,
+            ),
+        ):
+            from prowler.providers.m365.services.defender.defender_malware_policy_comprehensive_attachments_filter_applied.defender_malware_policy_comprehensive_attachments_filter_applied import (
+                defender_malware_policy_comprehensive_attachments_filter_applied,
+            )
+            from prowler.providers.m365.services.defender.defender_service import (
+                MalwarePolicy,
+                MalwareRule,
+            )
+
+            defender_client.audit_config = {
+                "recommended_blocked_file_types": ["exe", "bat"]
+            }
+            defender_client.malware_policies = [
+                MalwarePolicy(
+                    identity="Default",
+                    enable_file_filter=True,
+                    enable_internal_sender_admin_notifications=True,
+                    internal_sender_admin_address="admin@example.com",
+                    file_types=["exe", "bat"],
+                    is_default=True,
+                ),
+                MalwarePolicy(
+                    identity="Standard Preset Security Policy1663355404982",
+                    enable_file_filter=True,
+                    enable_internal_sender_admin_notifications=True,
+                    internal_sender_admin_address="admin@example.com",
+                    file_types=["exe", "bat"],
+                    is_default=False,
+                ),
+                MalwarePolicy(
+                    identity="Custom1",
+                    enable_file_filter=True,
+                    enable_internal_sender_admin_notifications=True,
+                    internal_sender_admin_address="admin@example.com",
+                    file_types=["exe", "bat"],
+                    is_default=False,
+                ),
+            ]
+            defender_client.malware_rules = {
+                "Custom1": MalwareRule(
+                    state="Enabled",
+                    priority=1,
+                    users=["user1@example.com"],
+                    groups=None,
+                    domains=None,
+                )
+            }
+
+            check = defender_malware_policy_comprehensive_attachments_filter_applied()
+            result = check.execute()
+
+            assert len(result) == 2
+            assert "Standard Preset Security Policy1663355404982" not in [
+                finding.resource_id for finding in result
+            ]
diff --git a/tests/providers/m365/services/defender/defender_malware_policy_notifications_internal_users_malware_enabled/defender_malware_policy_notifications_internal_users_malware_enabled_test.py b/tests/providers/m365/services/defender/defender_malware_policy_notifications_internal_users_malware_enabled/defender_malware_policy_notifications_internal_users_malware_enabled_test.py
index 16fe656c2b..7764da21e4 100644
--- a/tests/providers/m365/services/defender/defender_malware_policy_notifications_internal_users_malware_enabled/defender_malware_policy_notifications_internal_users_malware_enabled_test.py
+++ b/tests/providers/m365/services/defender/defender_malware_policy_notifications_internal_users_malware_enabled/defender_malware_policy_notifications_internal_users_malware_enabled_test.py
@@ -456,3 +456,79 @@ class Test_defender_malware_policy_notifications_internal_users_malware_enabled:
             )
             result = check.execute()
             assert len(result) == 0
+
+    def test_preset_policy_without_rule_is_skipped(self):
+        defender_client = mock.MagicMock()
+        defender_client.audited_tenant = "audited_tenant"
+        defender_client.audited_domain = DOMAIN
+        defender_client.audit_config = {}
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_m365_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.m365.lib.powershell.m365_powershell.M365PowerShell.connect_exchange_online"
+            ),
+            mock.patch(
+                "prowler.providers.m365.services.defender.defender_malware_policy_notifications_internal_users_malware_enabled.defender_malware_policy_notifications_internal_users_malware_enabled.defender_client",
+                new=defender_client,
+            ),
+        ):
+            from prowler.providers.m365.services.defender.defender_malware_policy_notifications_internal_users_malware_enabled.defender_malware_policy_notifications_internal_users_malware_enabled import (
+                defender_malware_policy_notifications_internal_users_malware_enabled,
+            )
+            from prowler.providers.m365.services.defender.defender_service import (
+                MalwarePolicy,
+                MalwareRule,
+            )
+
+            defender_client.audit_config = {
+                "recommended_blocked_file_types": ["exe", "bat"]
+            }
+            defender_client.malware_policies = [
+                MalwarePolicy(
+                    identity="Default",
+                    enable_file_filter=True,
+                    enable_internal_sender_admin_notifications=True,
+                    internal_sender_admin_address="admin@example.com",
+                    file_types=["exe", "bat"],
+                    is_default=True,
+                ),
+                MalwarePolicy(
+                    identity="Standard Preset Security Policy1663355404982",
+                    enable_file_filter=True,
+                    enable_internal_sender_admin_notifications=True,
+                    internal_sender_admin_address="admin@example.com",
+                    file_types=["exe", "bat"],
+                    is_default=False,
+                ),
+                MalwarePolicy(
+                    identity="Custom1",
+                    enable_file_filter=True,
+                    enable_internal_sender_admin_notifications=True,
+                    internal_sender_admin_address="admin@example.com",
+                    file_types=["exe", "bat"],
+                    is_default=False,
+                ),
+            ]
+            defender_client.malware_rules = {
+                "Custom1": MalwareRule(
+                    state="Enabled",
+                    priority=1,
+                    users=["user1@example.com"],
+                    groups=None,
+                    domains=None,
+                )
+            }
+
+            check = (
+                defender_malware_policy_notifications_internal_users_malware_enabled()
+            )
+            result = check.execute()
+
+            assert len(result) == 2
+            assert "Standard Preset Security Policy1663355404982" not in [
+                finding.resource_id for finding in result
+            ]

From c0fdd5bdf37d6cd82f23b434af62a035ee3e64b8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Tue, 15 Sep 2026 11:07:31 +0200
Subject: [PATCH 61/77] fix(ui): add FedRAMP 20x cross-provider mappers
 (#12810)

Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
---
 ...ramp-20x-cross-provider-breakdown.fixed.md |   1 +
 .../fedramp-20x-details.tsx                   |  89 +++++++++
 ui/lib/compliance/c5.tsx                      |  10 +-
 ui/lib/compliance/cis-controls.tsx            |  10 +-
 ui/lib/compliance/{cmmc.tsx => cmmc.ts}       |  70 +------
 ui/lib/compliance/commons.tsx                 |  11 +-
 ui/lib/compliance/compliance-mapper.test.ts   |  11 ++
 ui/lib/compliance/compliance-mapper.ts        |  30 +++
 .../compliance-report-types.test.ts           |   2 +
 ui/lib/compliance/compliance-report-types.ts  |   5 +-
 ui/lib/compliance/csa.tsx                     |  10 +-
 ui/lib/compliance/cyber-essentials.tsx        |  10 +-
 ui/lib/compliance/dora.tsx                    |  10 +-
 ui/lib/compliance/fedramp-20x.test.ts         | 183 ++++++++++++++++++
 ui/lib/compliance/fedramp-20x.ts              | 110 +++++++++++
 ui/lib/compliance/grouped-accordion.tsx       |  55 ++++++
 ui/lib/compliance/okta-idaas-stig.tsx         |   8 +-
 ui/types/compliance.ts                        |  16 ++
 18 files changed, 526 insertions(+), 115 deletions(-)
 create mode 100644 ui/changelog.d/fedramp-20x-cross-provider-breakdown.fixed.md
 create mode 100644 ui/components/compliance/compliance-custom-details/fedramp-20x-details.tsx
 rename ui/lib/compliance/{cmmc.tsx => cmmc.ts} (56%)
 create mode 100644 ui/lib/compliance/fedramp-20x.test.ts
 create mode 100644 ui/lib/compliance/fedramp-20x.ts
 create mode 100644 ui/lib/compliance/grouped-accordion.tsx

diff --git a/ui/changelog.d/fedramp-20x-cross-provider-breakdown.fixed.md b/ui/changelog.d/fedramp-20x-cross-provider-breakdown.fixed.md
new file mode 100644
index 0000000000..dc7c71ce1b
--- /dev/null
+++ b/ui/changelog.d/fedramp-20x-cross-provider-breakdown.fixed.md
@@ -0,0 +1 @@
+Per-provider breakdown and OCSF download for FedRAMP 20x KSI and Class C FRR in the cross-provider compliance view
diff --git a/ui/components/compliance/compliance-custom-details/fedramp-20x-details.tsx b/ui/components/compliance/compliance-custom-details/fedramp-20x-details.tsx
new file mode 100644
index 0000000000..31f684a33b
--- /dev/null
+++ b/ui/components/compliance/compliance-custom-details/fedramp-20x-details.tsx
@@ -0,0 +1,89 @@
+import { Requirement } from "@/types/compliance";
+
+import {
+  ComplianceBadge,
+  ComplianceBadgeContainer,
+  ComplianceDetailContainer,
+  ComplianceDetailSection,
+  ComplianceDetailText,
+} from "./shared-components";
+
+interface FedRAMP20xDetailsProps {
+  requirement: Requirement;
+}
+
+const DescriptionSection = ({ requirement }: FedRAMP20xDetailsProps) =>
+  requirement.description ? (
+    <ComplianceDetailSection title="Description">
+      <ComplianceDetailText>{requirement.description}</ComplianceDetailText>
+    </ComplianceDetailSection>
+  ) : null;
+
+export const FedRAMP20xKSICustomDetails = ({
+  requirement,
+}: FedRAMP20xDetailsProps) => {
+  return (
+    <ComplianceDetailContainer>
+      <DescriptionSection requirement={requirement} />
+
+      <ComplianceBadgeContainer>
+        {requirement.theme && (
+          <ComplianceBadge
+            label="Theme"
+            value={requirement.theme as string}
+            variant="tag"
+          />
+        )}
+        {requirement.class_applicability && (
+          <ComplianceBadge
+            label="Class Applicability"
+            value={requirement.class_applicability as string}
+            variant="tag"
+          />
+        )}
+      </ComplianceBadgeContainer>
+
+      {requirement.nist_controls && (
+        <ComplianceDetailSection title="NIST SP 800-53 Controls">
+          <ComplianceDetailText>
+            {requirement.nist_controls as string}
+          </ComplianceDetailText>
+        </ComplianceDetailSection>
+      )}
+    </ComplianceDetailContainer>
+  );
+};
+
+export const FedRAMP20xFRRCustomDetails = ({
+  requirement,
+}: FedRAMP20xDetailsProps) => {
+  return (
+    <ComplianceDetailContainer>
+      <DescriptionSection requirement={requirement} />
+
+      <ComplianceBadgeContainer>
+        {requirement.ruleset && (
+          <ComplianceBadge
+            label="Ruleset"
+            value={requirement.ruleset as string}
+            variant="tag"
+          />
+        )}
+        {requirement.subset && (
+          <ComplianceBadge
+            label="Subset"
+            value={requirement.subset as string}
+            variant="tag"
+          />
+        )}
+        {requirement.force && (
+          <ComplianceBadge
+            label="Force"
+            value={requirement.force as string}
+            variant="tag"
+          />
+        )}
+      </ComplianceBadgeContainer>
+    </ComplianceDetailContainer>
+  );
+};
diff --git a/ui/lib/compliance/c5.tsx b/ui/lib/compliance/c5.tsx
index 4839df3d66..c39a2dd538 100644
--- a/ui/lib/compliance/c5.tsx
+++ b/ui/lib/compliance/c5.tsx
@@ -3,13 +3,12 @@ import { ComplianceAccordionRequirementTitle } from "@/components/compliance/com
 import { ComplianceAccordionTitle } from "@/components/compliance/compliance-accordion/compliance-accordion-title";
 import { AccordionItemProps } from "@/components/shadcn/accordion/Accordion";
 import { FindingStatus } from "@/components/shadcn/table/status-finding-badge";
-import {
+import type {
   AttributesData,
   C5AttributesMetadata,
   Control,
   Framework,
   Requirement,
-  REQUIREMENT_STATUS,
   RequirementsData,
   RequirementStatus,
 } from "@/types/compliance";
@@ -20,14 +19,9 @@ import {
   findOrCreateCategory,
   findOrCreateControl,
   findOrCreateFramework,
+  getStatusCounters,
 } from "./commons";
 
-const getStatusCounters = (status: RequirementStatus) => ({
-  pass: status === REQUIREMENT_STATUS.PASS ? 1 : 0,
-  fail: status === REQUIREMENT_STATUS.FAIL ? 1 : 0,
-  manual: status === REQUIREMENT_STATUS.MANUAL ? 1 : 0,
-});
-
 export const mapComplianceData = (
   attributesData: AttributesData,
   requirementsData: RequirementsData,
diff --git a/ui/lib/compliance/cis-controls.tsx b/ui/lib/compliance/cis-controls.tsx
index 7a7f283fc6..a1fab412e1 100644
--- a/ui/lib/compliance/cis-controls.tsx
+++ b/ui/lib/compliance/cis-controls.tsx
@@ -3,12 +3,11 @@ import { ComplianceAccordionRequirementTitle } from "@/components/compliance/com
 import { ComplianceAccordionTitle } from "@/components/compliance/compliance-accordion/compliance-accordion-title";
 import { AccordionItemProps } from "@/components/shadcn/accordion/Accordion";
 import { FindingStatus } from "@/components/shadcn/table/status-finding-badge";
-import {
+import type {
   AttributesData,
   CISControlsAttributesMetadata,
   Framework,
   Requirement,
-  REQUIREMENT_STATUS,
   RequirementsData,
   RequirementStatus,
 } from "@/types/compliance";
@@ -19,14 +18,9 @@ import {
   findOrCreateCategory,
   findOrCreateControl,
   findOrCreateFramework,
+  getStatusCounters,
 } from "./commons";
 
-const getStatusCounters = (status: RequirementStatus) => ({
-  pass: status === REQUIREMENT_STATUS.PASS ? 1 : 0,
-  fail: status === REQUIREMENT_STATUS.FAIL ? 1 : 0,
-  manual: status === REQUIREMENT_STATUS.MANUAL ? 1 : 0,
-});
-
 // Sort the 18 CIS Controls by their leading number ("1. ...", "2. ...", ...,
 // "18. ...") so the accordion always reads in canonical control order
 // regardless of how the API returns the sections.
diff --git a/ui/lib/compliance/cmmc.tsx b/ui/lib/compliance/cmmc.ts
similarity index 56%
rename from ui/lib/compliance/cmmc.tsx
rename to ui/lib/compliance/cmmc.ts
index 557c28b95c..748d0ed39c 100644
--- a/ui/lib/compliance/cmmc.tsx
+++ b/ui/lib/compliance/cmmc.ts
@@ -1,14 +1,8 @@
-import { ClientAccordionContent } from "@/components/compliance/compliance-accordion/client-accordion-content";
-import { ComplianceAccordionRequirementTitle } from "@/components/compliance/compliance-accordion/compliance-accordion-requeriment-title";
-import { ComplianceAccordionTitle } from "@/components/compliance/compliance-accordion/compliance-accordion-title";
-import { AccordionItemProps } from "@/components/shadcn/accordion/Accordion";
-import { FindingStatus } from "@/components/shadcn/table/status-finding-badge";
-import {
+import type {
   AttributesData,
   CMMCAttributesMetadata,
   Framework,
   Requirement,
-  REQUIREMENT_STATUS,
   RequirementsData,
   RequirementStatus,
 } from "@/types/compliance";
@@ -19,8 +13,11 @@ import {
   findOrCreateCategory,
   findOrCreateControl,
   findOrCreateFramework,
+  getStatusCounters,
 } from "./commons";
 
+export { toGroupedAccordionItems as toAccordionItems } from "./grouped-accordion";
+
 // Canonical NIST SP 800-171 family order for the 14 CMMC domains, so the
 // accordion always reads in the same order regardless of the API response.
 export const CMMC_DOMAIN_ORDER: readonly string[] = [
@@ -40,12 +37,6 @@ export const CMMC_DOMAIN_ORDER: readonly string[] = [
   "System and Information Integrity",
 ];
 
-const getStatusCounters = (status: RequirementStatus) => ({
-  pass: status === REQUIREMENT_STATUS.PASS ? 1 : 0,
-  fail: status === REQUIREMENT_STATUS.FAIL ? 1 : 0,
-  manual: status === REQUIREMENT_STATUS.MANUAL ? 1 : 0,
-});
-
 export const mapComplianceData = (
   attributesData: AttributesData,
   requirementsData: RequirementsData,
@@ -109,56 +100,3 @@ export const mapComplianceData = (
 
   return frameworks;
 };
-
-export const toAccordionItems = (
-  data: Framework[],
-  scanId: string | undefined,
-): AccordionItemProps[] => {
-  const safeId = scanId || "";
-
-  return data.flatMap((framework) =>
-    framework.categories.map((category) => ({
-      key: `${framework.name}-${category.name}`,
-      title: (
-        <ComplianceAccordionTitle
-          label={category.name}
-          pass={category.pass}
-          fail={category.fail}
-          manual={category.manual}
-          isParentLevel={true}
-        />
-      ),
-      content: "",
-      // Domain → requirements (flat, no intermediate "control" level).
-      // Keys are derived from the requirement name (which starts with the
-      // unique CMMC id, e.g. "AC.L1-b.1.i") instead of the array index, so
-      // expanded state stays attached to the right requirement even if the
-      // list is reordered or filtered.
-      items: category.controls.flatMap((control) =>
-        control.requirements.map((requirement) => ({
-          key: `${framework.name}-${category.name}-${requirement.name}`,
-          title: (
-            <ComplianceAccordionRequirementTitle
-              type=""
-              name={requirement.name}
-              status={requirement.status as FindingStatus}
-              invalidConfig={requirement.invalid_config}
-            />
-          ),
-          content: (
-            <ClientAccordionContent
-              key={`content-${framework.name}-${category.name}-${requirement.name}`}
-              requirement={requirement}
-              scanId={safeId}
-              framework={framework.name}
-              disableFindings={
-                requirement.check_ids.length === 0 && requirement.manual === 0
-              }
-            />
-          ),
-          items: [],
-        })),
-      ),
-    })),
-  );
-};
diff --git a/ui/lib/compliance/commons.tsx b/ui/lib/compliance/commons.tsx
index 24a7b8407c..15b315be4d 100644
--- a/ui/lib/compliance/commons.tsx
+++ b/ui/lib/compliance/commons.tsx
@@ -7,6 +7,7 @@ import {
   REQUIREMENT_STATUS,
   RequirementItemData,
   RequirementsData,
+  RequirementsTotals,
   RequirementStatus,
   TOP_FAILED_DATA_TYPE,
   TopFailedDataType,
@@ -66,7 +67,7 @@ const incrementFailedCount = (
 };
 
 export const updateCounters = (
-  target: { pass: number; fail: number; manual: number },
+  target: RequirementsTotals,
   status: RequirementStatus,
 ) => {
   if (status === REQUIREMENT_STATUS.MANUAL) {
@@ -78,6 +79,14 @@ export const updateCounters = (
   }
 };
 
+export const getStatusCounters = (
+  status: RequirementStatus,
+): RequirementsTotals => {
+  const counters: RequirementsTotals = { pass: 0, fail: 0, manual: 0 };
+  updateCounters(counters, status);
+  return counters;
+};
+
 export const getTopFailedSections = (
   mappedData: Framework[],
 ): TopFailedResult => {
diff --git a/ui/lib/compliance/compliance-mapper.test.ts b/ui/lib/compliance/compliance-mapper.test.ts
index c7ce69040e..be7ba8074c 100644
--- a/ui/lib/compliance/compliance-mapper.test.ts
+++ b/ui/lib/compliance/compliance-mapper.test.ts
@@ -54,6 +54,13 @@ vi.mock(
   "@/components/compliance/compliance-custom-details/ens-details",
   () => ({ ENSCustomDetails: stubFactory("ENSStub") }),
 );
+vi.mock(
+  "@/components/compliance/compliance-custom-details/fedramp-20x-details",
+  () => ({
+    FedRAMP20xFRRCustomDetails: stubFactory("FedRAMP20xFRRStub"),
+    FedRAMP20xKSICustomDetails: stubFactory("FedRAMP20xKSIStub"),
+  }),
+);
 vi.mock(
   "@/components/compliance/compliance-custom-details/generic-details",
   () => ({ GenericCustomDetails: stubFactory("GenericStub") }),
@@ -159,6 +166,8 @@ describe("getComplianceMapper", () => {
       { framework: "CMMC", expected: "CMMCStub" },
       { framework: "Okta-IDaaS-STIG", expected: "OktaIDaaSStigStub" },
       { framework: "Cyber-Essentials", expected: "CyberEssentialsStub" },
+      { framework: "FedRAMP-20x-KSI", expected: "FedRAMP20xKSIStub" },
+      { framework: "FedRAMP-20x-FRR-Class-C", expected: "FedRAMP20xFRRStub" },
     ];
 
     for (const { framework, expected } of wiring) {
@@ -206,6 +215,8 @@ describe("getComplianceMapper", () => {
       "CMMC",
       "Okta-IDaaS-STIG",
       "Cyber-Essentials",
+      "FedRAMP-20x-KSI",
+      "FedRAMP-20x-FRR-Class-C",
     ]) {
       const mapper = getComplianceMapper(framework);
       expect(Object.keys(mapper).sort(), framework).toEqual(expectedKeys);
diff --git a/ui/lib/compliance/compliance-mapper.ts b/ui/lib/compliance/compliance-mapper.ts
index 80b3558aeb..d80a980485 100644
--- a/ui/lib/compliance/compliance-mapper.ts
+++ b/ui/lib/compliance/compliance-mapper.ts
@@ -11,6 +11,10 @@ import { CSACustomDetails } from "@/components/compliance/compliance-custom-deta
 import { CyberEssentialsCustomDetails } from "@/components/compliance/compliance-custom-details/cyber-essentials-details";
 import { DORACustomDetails } from "@/components/compliance/compliance-custom-details/dora-details";
 import { ENSCustomDetails } from "@/components/compliance/compliance-custom-details/ens-details";
+import {
+  FedRAMP20xFRRCustomDetails,
+  FedRAMP20xKSICustomDetails,
+} from "@/components/compliance/compliance-custom-details/fedramp-20x-details";
 import { GenericCustomDetails } from "@/components/compliance/compliance-custom-details/generic-details";
 import { ISOCustomDetails } from "@/components/compliance/compliance-custom-details/iso-details";
 import { KISACustomDetails } from "@/components/compliance/compliance-custom-details/kisa-details";
@@ -72,6 +76,11 @@ import {
   mapComplianceData as mapENSComplianceData,
   toAccordionItems as toENSAccordionItems,
 } from "./ens";
+import {
+  mapFRRComplianceData as mapFedRAMP20xFRRComplianceData,
+  mapKSIComplianceData as mapFedRAMP20xKSIComplianceData,
+  toAccordionItems as toFedRAMP20xAccordionItems,
+} from "./fedramp-20x";
 import {
   mapComplianceData as mapGenericComplianceData,
   toAccordionItems as toGenericAccordionItems,
@@ -296,6 +305,27 @@ const getComplianceMappers = (): Record<string, ComplianceMapper> => ({
     getDetailsComponent: (requirement: Requirement) =>
       createElement(CMMCCustomDetails, { requirement }),
   },
+  // Universal frameworks must compose requirement names as `${id} - ${name}`
+  // (see `composeRequirementName`); the generic mapper does not, so they need
+  // a dedicated entry for the cross-provider breakdown to render.
+  "FedRAMP-20x-KSI": {
+    mapComplianceData: mapFedRAMP20xKSIComplianceData,
+    toAccordionItems: toFedRAMP20xAccordionItems,
+    getTopFailedSections,
+    calculateCategoryHeatmapData: (data: Framework[]) =>
+      calculateCategoryHeatmapData(data),
+    getDetailsComponent: (requirement: Requirement) =>
+      createElement(FedRAMP20xKSICustomDetails, { requirement }),
+  },
+  "FedRAMP-20x-FRR-Class-C": {
+    mapComplianceData: mapFedRAMP20xFRRComplianceData,
+    toAccordionItems: toFedRAMP20xAccordionItems,
+    getTopFailedSections,
+    calculateCategoryHeatmapData: (data: Framework[]) =>
+      calculateCategoryHeatmapData(data),
+    getDetailsComponent: (requirement: Requirement) =>
+      createElement(FedRAMP20xFRRCustomDetails, { requirement }),
+  },
 });
 
 /**
diff --git a/ui/lib/compliance/compliance-report-types.test.ts b/ui/lib/compliance/compliance-report-types.test.ts
index 8a431d9748..59b26beed3 100644
--- a/ui/lib/compliance/compliance-report-types.test.ts
+++ b/ui/lib/compliance/compliance-report-types.test.ts
@@ -41,6 +41,8 @@ describe("isOcsfSupported", () => {
     expect(isOcsfSupported("csa_ccm_4.0")).toBe(true);
     expect(isOcsfSupported("cis_controls_8.1")).toBe(true);
     expect(isOcsfSupported("cmmc_2.0")).toBe(true);
+    expect(isOcsfSupported("fedramp_20x_ksi_2026")).toBe(true);
+    expect(isOcsfSupported("fedramp_20x_frr_class_c_2026")).toBe(true);
   });
 
   it("returns false for legacy/per-provider frameworks without OCSF output", () => {
diff --git a/ui/lib/compliance/compliance-report-types.ts b/ui/lib/compliance/compliance-report-types.ts
index 68ef3072de..2553df013d 100644
--- a/ui/lib/compliance/compliance-report-types.ts
+++ b/ui/lib/compliance/compliance-report-types.ts
@@ -167,7 +167,8 @@ export const pickLatestCisPerProvider = (
  * Only universal compliance frameworks that declare an ``outputs`` block in
  * their schema (see ``prowler/compliance/<name>.json``) produce a dedicated
  * OCSF artifact during scan output generation. Today that is DORA,
- * CSA CCM 4.0, CIS Controls 8.1 and CMMC 2.0. Any other framework only
+ * CSA CCM 4.0, CIS Controls 8.1, CMMC 2.0 and FedRAMP 20x (KSI and Class C
+ * FRR). Any other framework only
  * offers CSV (and, for the curated list above, PDF).
  *
  * Keep this Set in lock-step with the backend: ``get_prowler_provider_compliance``
@@ -182,6 +183,8 @@ const OCSF_SUPPORTED_COMPLIANCE_IDS: ReadonlySet<string> = new Set([
   "csa_ccm_4.0",
   "cis_controls_8.1",
   "cmmc_2.0",
+  "fedramp_20x_ksi_2026",
+  "fedramp_20x_frr_class_c_2026",
 ]);
 
 export const isOcsfSupported = (complianceId: string | undefined): boolean =>
diff --git a/ui/lib/compliance/csa.tsx b/ui/lib/compliance/csa.tsx
index 3bb601de0c..c38136b19f 100644
--- a/ui/lib/compliance/csa.tsx
+++ b/ui/lib/compliance/csa.tsx
@@ -4,12 +4,11 @@ import { ComplianceAccordionTitle } from "@/components/compliance/compliance-acc
 import { ComplianceBadgeVariant } from "@/components/compliance/compliance-custom-details/shared-components";
 import { AccordionItemProps } from "@/components/shadcn/accordion/Accordion";
 import { FindingStatus } from "@/components/shadcn/table/status-finding-badge";
-import {
+import type {
   AttributesData,
   CSAAttributesMetadata,
   Framework,
   Requirement,
-  REQUIREMENT_STATUS,
   RequirementsData,
   RequirementStatus,
 } from "@/types/compliance";
@@ -20,6 +19,7 @@ import {
   findOrCreateCategory,
   findOrCreateControl,
   findOrCreateFramework,
+  getStatusCounters,
 } from "./commons";
 
 export interface CSAMappingSection {
@@ -36,12 +36,6 @@ export const CSA_MAPPING_SECTIONS: CSAMappingSection[] = [
   },
 ];
 
-const getStatusCounters = (status: RequirementStatus) => ({
-  pass: status === REQUIREMENT_STATUS.PASS ? 1 : 0,
-  fail: status === REQUIREMENT_STATUS.FAIL ? 1 : 0,
-  manual: status === REQUIREMENT_STATUS.MANUAL ? 1 : 0,
-});
-
 export const mapComplianceData = (
   attributesData: AttributesData,
   requirementsData: RequirementsData,
diff --git a/ui/lib/compliance/cyber-essentials.tsx b/ui/lib/compliance/cyber-essentials.tsx
index aee4d8c5db..ebdd73209d 100644
--- a/ui/lib/compliance/cyber-essentials.tsx
+++ b/ui/lib/compliance/cyber-essentials.tsx
@@ -3,12 +3,11 @@ import { ComplianceAccordionRequirementTitle } from "@/components/compliance/com
 import { ComplianceAccordionTitle } from "@/components/compliance/compliance-accordion/compliance-accordion-title";
 import { AccordionItemProps } from "@/components/shadcn/accordion/Accordion";
 import { FindingStatus } from "@/components/shadcn/table/status-finding-badge";
-import {
+import type {
   AttributesData,
   CyberEssentialsAttributesMetadata,
   Framework,
   Requirement,
-  REQUIREMENT_STATUS,
   RequirementsData,
   RequirementStatus,
 } from "@/types/compliance";
@@ -19,6 +18,7 @@ import {
   findOrCreateCategory,
   findOrCreateControl,
   findOrCreateFramework,
+  getStatusCounters,
 } from "./commons";
 
 // Display order for the five Cyber Essentials control themes in the accordion
@@ -33,12 +33,6 @@ export const CYBER_ESSENTIALS_THEME_ORDER: readonly string[] = [
   "Malware Protection",
 ];
 
-const getStatusCounters = (status: RequirementStatus) => ({
-  pass: status === REQUIREMENT_STATUS.PASS ? 1 : 0,
-  fail: status === REQUIREMENT_STATUS.FAIL ? 1 : 0,
-  manual: status === REQUIREMENT_STATUS.MANUAL ? 1 : 0,
-});
-
 export const mapComplianceData = (
   attributesData: AttributesData,
   requirementsData: RequirementsData,
diff --git a/ui/lib/compliance/dora.tsx b/ui/lib/compliance/dora.tsx
index 8ac364f29f..7fc6bba26c 100644
--- a/ui/lib/compliance/dora.tsx
+++ b/ui/lib/compliance/dora.tsx
@@ -3,12 +3,11 @@ import { ComplianceAccordionRequirementTitle } from "@/components/compliance/com
 import { ComplianceAccordionTitle } from "@/components/compliance/compliance-accordion/compliance-accordion-title";
 import { AccordionItemProps } from "@/components/shadcn/accordion/Accordion";
 import { FindingStatus } from "@/components/shadcn/table/status-finding-badge";
-import {
+import type {
   AttributesData,
   DORAAttributesMetadata,
   Framework,
   Requirement,
-  REQUIREMENT_STATUS,
   RequirementsData,
   RequirementStatus,
 } from "@/types/compliance";
@@ -19,6 +18,7 @@ import {
   findOrCreateCategory,
   findOrCreateControl,
   findOrCreateFramework,
+  getStatusCounters,
 } from "./commons";
 
 // Display order for DORA pillars in the accordion and any grouped chart. The
@@ -33,12 +33,6 @@ export const DORA_PILLAR_ORDER: readonly string[] = [
   "Information Sharing",
 ];
 
-const getStatusCounters = (status: RequirementStatus) => ({
-  pass: status === REQUIREMENT_STATUS.PASS ? 1 : 0,
-  fail: status === REQUIREMENT_STATUS.FAIL ? 1 : 0,
-  manual: status === REQUIREMENT_STATUS.MANUAL ? 1 : 0,
-});
-
 export const mapComplianceData = (
   attributesData: AttributesData,
   requirementsData: RequirementsData,
diff --git a/ui/lib/compliance/fedramp-20x.test.ts b/ui/lib/compliance/fedramp-20x.test.ts
new file mode 100644
index 0000000000..21d40c69bc
--- /dev/null
+++ b/ui/lib/compliance/fedramp-20x.test.ts
@@ -0,0 +1,183 @@
+import { describe, expect, it, vi } from "vitest";
+
+vi.mock(
+  "@/components/compliance/compliance-accordion/client-accordion-content",
+  () => ({ ClientAccordionContent: () => null }),
+);
+vi.mock(
+  "@/components/compliance/compliance-accordion/compliance-accordion-requeriment-title",
+  () => ({ ComplianceAccordionRequirementTitle: () => null }),
+);
+vi.mock(
+  "@/components/compliance/compliance-accordion/compliance-accordion-title",
+  () => ({ ComplianceAccordionTitle: () => null }),
+);
+
+import {
+  buildRequirementExtrasMap,
+  crossProviderToMapperInput,
+} from "@/app/(prowler)/compliance/_lib/cross-provider-adapter";
+import type { CrossProviderOverviewAttributes } from "@/app/(prowler)/compliance/_types";
+import { Framework, Requirement } from "@/types/compliance";
+
+import {
+  mapFRRComplianceData,
+  mapKSIComplianceData,
+  toAccordionItems,
+} from "./fedramp-20x";
+
+type OverviewRequirement =
+  CrossProviderOverviewAttributes["requirements"][number];
+
+const buildOverview = (
+  framework: string,
+  requirements: Array<Pick<OverviewRequirement, "id" | "name" | "attributes">>,
+): CrossProviderOverviewAttributes =>
+  ({
+    framework,
+    version: "2026",
+    description: "",
+    providers: ["aws"],
+    compatible_providers: ["aws"],
+    scan_ids_by_provider: {},
+    requirements: requirements.map((requirement) => ({
+      ...requirement,
+      description: "Requirement text.",
+      status: "PASS",
+      providers: { aws: "PASS" },
+      check_ids_by_provider: { aws: ["check_one"] },
+    })),
+  }) as unknown as CrossProviderOverviewAttributes;
+
+const mapOverview = (
+  overview: CrossProviderOverviewAttributes,
+  mapper: typeof mapKSIComplianceData,
+): Framework[] => {
+  const { attributesData, requirementsData } =
+    crossProviderToMapperInput(overview);
+  return mapper(attributesData, requirementsData);
+};
+
+const allRequirements = (frameworks: Framework[]): Requirement[] =>
+  frameworks.flatMap((framework) =>
+    framework.categories.flatMap((category) =>
+      category.controls.flatMap((control) => control.requirements),
+    ),
+  );
+
+const KSI_OVERVIEW = buildOverview("FedRAMP-20x-KSI", [
+  {
+    id: "KSI-SVC-VRI",
+    name: "Validating Resource Integrity",
+    attributes: {
+      Theme: "KSI-SVC: Service Configuration",
+      NISTControls: "SC-13",
+      ClassApplicability: "Required for Classes B and C",
+    },
+  },
+  {
+    id: "KSI-CED-RAT",
+    name: "Reviewing All Training",
+    attributes: {
+      Theme: "KSI-CED: Cybersecurity Education",
+      NISTControls: null,
+      ClassApplicability: "Required for Classes B and C",
+    },
+  },
+]);
+
+const FRR_OVERVIEW = buildOverview("FedRAMP-20x-FRR-Class-C", [
+  {
+    id: "CMU-CSO-UVM",
+    name: "Using Validated Cryptographic Modules",
+    attributes: {
+      Ruleset: "CMU: Cryptographic Module Use",
+      Subset: "CSO: Cloud Service Provider Responsibilities",
+      Force: "MUST",
+    },
+  },
+  {
+    id: "AFC-CSO-INB",
+    name: "Maintain a FedRAMP Security Inbox",
+    attributes: {
+      Ruleset: "AFC: Addressing FedRAMP Communication",
+      Subset: "CSO: General Provider Responsibilities",
+      Force: "MUST",
+    },
+  },
+]);
+
+describe.each([
+  { label: "KSI", overview: KSI_OVERVIEW, mapper: mapKSIComplianceData },
+  {
+    label: "FRR Class C",
+    overview: FRR_OVERVIEW,
+    mapper: mapFRRComplianceData,
+  },
+])("FedRAMP 20x $label cross-provider join", ({ overview, mapper }) => {
+  it("names every requirement with a key of the per-provider breakdown", () => {
+    const extras = buildRequirementExtrasMap(overview);
+    const names = allRequirements(mapOverview(overview, mapper)).map(
+      (requirement) => requirement.name,
+    );
+
+    expect(names).toHaveLength(overview.requirements.length);
+    for (const name of names) {
+      expect(extras.has(name), name).toBe(true);
+    }
+  });
+});
+
+describe("mapKSIComplianceData", () => {
+  it("groups by Theme in catalog order and exposes KSI attributes", () => {
+    const [framework] = mapOverview(KSI_OVERVIEW, mapKSIComplianceData);
+
+    expect(framework.categories.map((category) => category.name)).toEqual([
+      "KSI-CED: Cybersecurity Education",
+      "KSI-SVC: Service Configuration",
+    ]);
+
+    const [svc] = framework.categories[1].controls[0].requirements;
+    expect(svc.name).toBe("KSI-SVC-VRI - Validating Resource Integrity");
+    expect(svc.theme).toBe("KSI-SVC: Service Configuration");
+    expect(svc.nist_controls).toBe("SC-13");
+    expect(svc.class_applicability).toBe("Required for Classes B and C");
+
+    const [ced] = framework.categories[0].controls[0].requirements;
+    expect(ced.nist_controls).toBeUndefined();
+  });
+});
+
+describe("mapFRRComplianceData", () => {
+  it("groups by Ruleset in catalog order and exposes FRR attributes", () => {
+    const [framework] = mapOverview(FRR_OVERVIEW, mapFRRComplianceData);
+
+    expect(framework.categories.map((category) => category.name)).toEqual([
+      "AFC: Addressing FedRAMP Communication",
+      "CMU: Cryptographic Module Use",
+    ]);
+
+    const [cmu] = framework.categories[1].controls[0].requirements;
+    expect(cmu.ruleset).toBe("CMU: Cryptographic Module Use");
+    expect(cmu.subset).toBe("CSO: Cloud Service Provider Responsibilities");
+    expect(cmu.force).toBe("MUST");
+    expect(framework.pass).toBe(2);
+  });
+});
+
+describe("toAccordionItems (FedRAMP 20x)", () => {
+  it("keys requirement leaves by name instead of position", () => {
+    const items = toAccordionItems(
+      mapOverview(FRR_OVERVIEW, mapFRRComplianceData),
+      "scan-1",
+    );
+
+    expect(items.map((item) => item.key)).toEqual([
+      "FedRAMP-20x-FRR-Class-C-AFC: Addressing FedRAMP Communication",
+      "FedRAMP-20x-FRR-Class-C-CMU: Cryptographic Module Use",
+    ]);
+    expect(items[1].items?.[0]?.key).toBe(
+      "FedRAMP-20x-FRR-Class-C-CMU: Cryptographic Module Use-CMU-CSO-UVM - Using Validated Cryptographic Modules",
+    );
+  });
+});
diff --git a/ui/lib/compliance/fedramp-20x.ts b/ui/lib/compliance/fedramp-20x.ts
new file mode 100644
index 0000000000..fd7d9fb1a3
--- /dev/null
+++ b/ui/lib/compliance/fedramp-20x.ts
@@ -0,0 +1,110 @@
+import type {
+  AttributesData,
+  FedRAMP20xFRRAttributesMetadata,
+  FedRAMP20xKSIAttributesMetadata,
+  Framework,
+  Requirement,
+  RequirementsData,
+  RequirementStatus,
+} from "@/types/compliance";
+
+import {
+  calculateFrameworkCounters,
+  createRequirementsMap,
+  findOrCreateCategory,
+  findOrCreateControl,
+  findOrCreateFramework,
+  getStatusCounters,
+} from "./commons";
+
+export { toGroupedAccordionItems as toAccordionItems } from "./grouped-accordion";
+
+type RequirementFields = Record<string, string | undefined>;
+
+const mapByGroup = <TMetadata>(
+  attributesData: AttributesData,
+  requirementsData: RequirementsData,
+  getGroup: (attrs: TMetadata) => string,
+  getFields: (attrs: TMetadata) => RequirementFields,
+): Framework[] => {
+  const attributes = attributesData?.data || [];
+  const requirementsMap = createRequirementsMap(requirementsData);
+  const frameworks: Framework[] = [];
+
+  for (const attributeItem of attributes) {
+    const id = attributeItem.id;
+    const metadataArray = attributeItem.attributes?.attributes
+      ?.metadata as unknown as TMetadata[];
+    const attrs = metadataArray?.[0];
+    if (!attrs) continue;
+
+    const requirementData = requirementsMap.get(id);
+    if (!requirementData) continue;
+
+    const categoryName = getGroup(attrs);
+    const requirementName = attributeItem.attributes.name || "";
+    const status = (requirementData.attributes.status ||
+      "") as RequirementStatus;
+
+    const framework = findOrCreateFramework(
+      frameworks,
+      attributeItem.attributes.framework,
+    );
+    const category = findOrCreateCategory(framework.categories, categoryName);
+    const control = findOrCreateControl(category.controls, categoryName);
+
+    // The name must match `composeRequirementName` in the cross-provider
+    // adapter, or the per-provider breakdown cannot be joined.
+    const requirement: Requirement = {
+      ...getFields(attrs),
+      name: requirementName ? `${id} - ${requirementName}` : id,
+      description: attributeItem.attributes.description,
+      status,
+      check_ids: attributeItem.attributes.attributes.check_ids || [],
+      invalid_config: requirementData.attributes.invalid_config || false,
+      ...getStatusCounters(status),
+    };
+
+    control.requirements.push(requirement);
+  }
+
+  // Theme and Ruleset names start with their catalog code, so alphabetical
+  // order is the catalog order.
+  for (const framework of frameworks) {
+    framework.categories.sort((a, b) => a.name.localeCompare(b.name));
+  }
+
+  calculateFrameworkCounters(frameworks);
+
+  return frameworks;
+};
+
+export const mapKSIComplianceData = (
+  attributesData: AttributesData,
+  requirementsData: RequirementsData,
+): Framework[] =>
+  mapByGroup<FedRAMP20xKSIAttributesMetadata>(
+    attributesData,
+    requirementsData,
+    (attrs) => attrs.Theme,
+    (attrs) => ({
+      theme: attrs.Theme,
+      nist_controls: attrs.NISTControls || undefined,
+      class_applicability: attrs.ClassApplicability,
+    }),
+  );
+
+export const mapFRRComplianceData = (
+  attributesData: AttributesData,
+  requirementsData: RequirementsData,
+): Framework[] =>
+  mapByGroup<FedRAMP20xFRRAttributesMetadata>(
+    attributesData,
+    requirementsData,
+    (attrs) => attrs.Ruleset,
+    (attrs) => ({
+      ruleset: attrs.Ruleset,
+      subset: attrs.Subset,
+      force: attrs.Force,
+    }),
+  );
diff --git a/ui/lib/compliance/grouped-accordion.tsx b/ui/lib/compliance/grouped-accordion.tsx
new file mode 100644
index 0000000000..cea6651079
--- /dev/null
+++ b/ui/lib/compliance/grouped-accordion.tsx
@@ -0,0 +1,55 @@
+import { ClientAccordionContent } from "@/components/compliance/compliance-accordion/client-accordion-content";
+import { ComplianceAccordionRequirementTitle } from "@/components/compliance/compliance-accordion/compliance-accordion-requeriment-title";
+import { ComplianceAccordionTitle } from "@/components/compliance/compliance-accordion/compliance-accordion-title";
+import type { AccordionItemProps } from "@/components/shadcn/accordion/Accordion";
+import type { FindingStatus } from "@/components/shadcn/table/status-finding-badge";
+import type { Framework } from "@/types/compliance";
+
+/** Category → requirement accordion, with stable keys across reordering. */
+export const toGroupedAccordionItems = (
+  data: Framework[],
+  scanId: string | undefined,
+): AccordionItemProps[] => {
+  const safeId = scanId || "";
+
+  return data.flatMap((framework) =>
+    framework.categories.map((category) => ({
+      key: `${framework.name}-${category.name}`,
+      title: (
+        <ComplianceAccordionTitle
+          label={category.name}
+          pass={category.pass}
+          fail={category.fail}
+          manual={category.manual}
+          isParentLevel={true}
+        />
+      ),
+      content: "",
+      items: category.controls.flatMap((control) =>
+        control.requirements.map((requirement) => ({
+          key: `${framework.name}-${category.name}-${requirement.name}`,
+          title: (
+            <ComplianceAccordionRequirementTitle
+              type=""
+              name={requirement.name}
+              status={requirement.status as FindingStatus}
+              invalidConfig={requirement.invalid_config}
+            />
+          ),
+          content: (
+            <ClientAccordionContent
+              key={`content-${framework.name}-${category.name}-${requirement.name}`}
+              requirement={requirement}
+              scanId={safeId}
+              framework={framework.name}
+              disableFindings={
+                requirement.check_ids.length === 0 && requirement.manual === 0
+              }
+            />
+          ),
+          items: [],
+        })),
+      ),
+    })),
+  );
+};
diff --git a/ui/lib/compliance/okta-idaas-stig.tsx b/ui/lib/compliance/okta-idaas-stig.tsx
index 8603c33711..3d8b797b8a 100644
--- a/ui/lib/compliance/okta-idaas-stig.tsx
+++ b/ui/lib/compliance/okta-idaas-stig.tsx
@@ -10,7 +10,6 @@ import {
   isOktaIDaaSStigAttributesMetadata,
   OktaIDaaSStigRequirement,
   Requirement,
-  REQUIREMENT_STATUS,
   RequirementsData,
   RequirementStatus,
 } from "@/types/compliance";
@@ -21,14 +20,9 @@ import {
   findOrCreateCategory,
   findOrCreateControl,
   findOrCreateFramework,
+  getStatusCounters,
 } from "./commons";
 
-const getStatusCounters = (status: RequirementStatus) => ({
-  pass: status === REQUIREMENT_STATUS.PASS ? 1 : 0,
-  fail: status === REQUIREMENT_STATUS.FAIL ? 1 : 0,
-  manual: status === REQUIREMENT_STATUS.MANUAL ? 1 : 0,
-});
-
 export const mapComplianceData = (
   attributesData: AttributesData,
   requirementsData: RequirementsData,
diff --git a/ui/types/compliance.ts b/ui/types/compliance.ts
index be7462f549..e7f27a8e09 100644
--- a/ui/types/compliance.ts
+++ b/ui/types/compliance.ts
@@ -474,6 +474,20 @@ export interface CMMCAttributesMetadata {
   SourceRequirement: string;
 }
 
+// FedRAMP 20x KSI (`prowler/compliance/fedramp_20x_ksi_2026.json`), grouped by Theme.
+export interface FedRAMP20xKSIAttributesMetadata {
+  Theme: string;
+  NISTControls?: string | null;
+  ClassApplicability: string;
+}
+
+// FedRAMP 20x Class C FRR (`prowler/compliance/fedramp_20x_frr_class_c_2026.json`), grouped by Ruleset.
+export interface FedRAMP20xFRRAttributesMetadata {
+  Ruleset: string;
+  Subset: string;
+  Force: string;
+}
+
 export interface AttributesItemData {
   type: "compliance-requirements-attributes";
   id: string;
@@ -501,6 +515,8 @@ export interface AttributesItemData {
         | CISControlsAttributesMetadata[]
         | CyberEssentialsAttributesMetadata[]
         | CMMCAttributesMetadata[]
+        | FedRAMP20xKSIAttributesMetadata[]
+        | FedRAMP20xFRRAttributesMetadata[]
         | GenericAttributesMetadata[];
       check_ids: string[];
       // MITRE structure

From 757cd44ecbc306137723163881e9b3703ac9dbf2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9sar=20Arroba?=
 <19954079+cesararroba@users.noreply.github.com>
Date: Wed, 16 Sep 2026 09:24:41 +0200
Subject: [PATCH 62/77] fix(aws): try the rest of the partition when the
 bootstrap region is unreachable (#12799)

Co-authored-by: pedrooot <pedromarting3@gmail.com>
---
 .../providers/aws/regions-and-partitions.mdx  |   2 +
 ...rap-falls-back-to-the-next-region.fixed.md |   1 +
 prowler/providers/aws/aws_provider.py         | 150 ++++++-
 tests/providers/aws/aws_provider_test.py      | 408 ++++++++++++++++++
 4 files changed, 548 insertions(+), 13 deletions(-)
 create mode 100644 prowler/changelog.d/aws-partition-bootstrap-falls-back-to-the-next-region.fixed.md

diff --git a/docs/user-guide/providers/aws/regions-and-partitions.mdx b/docs/user-guide/providers/aws/regions-and-partitions.mdx
index bf88aafc2f..369f581826 100644
--- a/docs/user-guide/providers/aws/regions-and-partitions.mdx
+++ b/docs/user-guide/providers/aws/regions-and-partitions.mdx
@@ -39,6 +39,8 @@ It matters most where nothing else says. Resolving an identity means calling STS
 
 A region configured for the session still wins when it belongs to the declared partition, so a deployment in `us-gov-west-1` is not sent to `us-gov-east-1`. A region belonging to a different partition is ignored, since a partition that has been declared explicitly is the more deliberate statement of the two.
 
+When no configured region says which one to prefer, the first region of the partition is tried, and up to two more follow if it cannot be reached. A network that routes to only one region of its partition therefore works without having to declare which one that is. Only a connection failure moves on to the next region: a credential error is reported from the first, since it would be the same everywhere. A region excluded from the scan is tried last, so it is avoided whenever another region of the partition answers.
+
 <Note>
 Set it wherever the scan runs. For deployments that scan from containers, that means the environment of the containers doing the scanning, not only the one accepting the request.
 </Note>
diff --git a/prowler/changelog.d/aws-partition-bootstrap-falls-back-to-the-next-region.fixed.md b/prowler/changelog.d/aws-partition-bootstrap-falls-back-to-the-next-region.fixed.md
new file mode 100644
index 0000000000..4bd9c855d1
--- /dev/null
+++ b/prowler/changelog.d/aws-partition-bootstrap-falls-back-to-the-next-region.fixed.md
@@ -0,0 +1 @@
+Bootstrap STS calls now try up to two more regions of the partition declared in `PROWLER_AWS_PARTITION` when the first one cannot be reached, so a deployment that routes to only one region of its partition no longer fails on an endpoint it has no path to. This covers validating credentials, assuming a role and getting an MFA session token
diff --git a/prowler/providers/aws/aws_provider.py b/prowler/providers/aws/aws_provider.py
index e204318593..784daf0caa 100644
--- a/prowler/providers/aws/aws_provider.py
+++ b/prowler/providers/aws/aws_provider.py
@@ -3,12 +3,19 @@ import pathlib
 from datetime import datetime
 from functools import lru_cache
 from re import fullmatch
-from typing import Optional
+from typing import Any, Callable, Optional
 
 from boto3.session import Session
 from botocore.config import Config
 from botocore.credentials import RefreshableCredentials
-from botocore.exceptions import ClientError, NoCredentialsError, ProfileNotFound
+from botocore.exceptions import (
+    ClientError,
+    ConnectTimeoutError,
+    EndpointConnectionError,
+    NoCredentialsError,
+    ProfileNotFound,
+    ReadTimeoutError,
+)
 from botocore.session import Session as BotocoreSession
 from colorama import Fore, Style
 from pytz import utc
@@ -263,7 +270,10 @@ class AwsProvider(Provider):
         caller_identity = self.validate_credentials(
             session=self.session.current_session,
             aws_region=sts_region,
+            excluded_regions=excluded_regions,
         )
+        # Later STS calls go where validation got an answer, not where it timed out
+        sts_region = caller_identity.region
 
         logger.info("Credentials validated")
         ########
@@ -690,8 +700,6 @@ class AwsProvider(Provider):
                     or session.region_name
                     or AWS_STS_GLOBAL_ENDPOINT_REGION
                 )
-                sts_client = AwsProvider.create_sts_session(session, sts_region)
-
                 # TODO: pass values from the input
                 mfa_info = AwsProvider.input_role_mfa_token_and_code()
                 # TODO: validate MFA ARN here
@@ -699,8 +707,12 @@ class AwsProvider(Provider):
                     "SerialNumber": mfa_info.arn,
                     "TokenCode": mfa_info.totp,
                 }
-                session_credentials = sts_client.get_session_token(
-                    **get_session_token_arguments
+                _, session_credentials = AwsProvider.sts_call_with_partition_failover(
+                    session,
+                    sts_region,
+                    lambda sts_client: sts_client.get_session_token(
+                        **get_session_token_arguments
+                    ),
                 )
                 mfa_session = Session(
                     aws_access_key_id=session_credentials["Credentials"]["AccessKeyId"],
@@ -1244,10 +1256,11 @@ class AwsProvider(Provider):
                 mfa_info = AwsProvider.input_role_mfa_token_and_code()
                 assume_role_arguments["SerialNumber"] = mfa_info.arn
                 assume_role_arguments["TokenCode"] = mfa_info.totp
-            sts_client = AwsProvider.create_sts_session(
-                session, assumed_role_info.sts_region
+            _, assumed_credentials = AwsProvider.sts_call_with_partition_failover(
+                session,
+                assumed_role_info.sts_region,
+                lambda sts_client: sts_client.assume_role(**assume_role_arguments),
             )
-            assumed_credentials = sts_client.assume_role(**assume_role_arguments)
             # Convert the UTC datetime object to your local timezone
             credentials_expiration_local_time = (
                 assumed_credentials["Credentials"]["Expiration"]
@@ -1326,30 +1339,98 @@ class AwsProvider(Provider):
             )
             raise error
 
+    @staticmethod
+    def sts_call_with_partition_failover(
+        session: Session,
+        aws_region: str,
+        operation: Callable[[Any], Any],
+        excluded_regions: set[str] | None = None,
+    ) -> tuple[str, Any]:
+        """
+        Run a bootstrap STS call, moving on when a region cannot be reached.
+
+        Bootstrap calls happen before anything is known about the credentials, so
+        the region they go to is a guess whenever none was configured. On a network
+        that routes to only one region of its partition that guess is fatal, and the
+        remaining regions of the partition declared in PROWLER_AWS_PARTITION are the
+        ones worth trying.
+
+        Args:
+            session (Session): The AWS session object.
+            aws_region (str): The region to try first.
+            operation (Callable[[Any], Any]): Receives an STS client and performs
+                the call.
+            excluded_regions (set[str] | None): Regions excluded from the scan,
+                tried after the rest of the partition.
+
+        Returns:
+            tuple[str, Any]: The region that answered and whatever the operation
+                returned.
+
+        Raises:
+            Exception: Whatever the operation raises, or the last connection error
+                when no region could be reached.
+        """
+        *fallback_regions, last_region = get_partition_bootstrap_candidates(
+            aws_region, session.region_name, excluded_regions
+        )
+
+        for candidate_region in fallback_regions:
+            try:
+                sts_client = AwsProvider.create_sts_session(session, candidate_region)
+                return candidate_region, operation(sts_client)
+            # The credentials are not at fault, so the next region is worth trying
+            except (
+                EndpointConnectionError,
+                ConnectTimeoutError,
+                ReadTimeoutError,
+            ) as unreachable:
+                logger.warning(
+                    f"{unreachable.__class__.__name__}[{unreachable.__traceback__.tb_lineno}]: {unreachable}"
+                )
+
+        # Nothing is left to try after the last region, so its error is the answer
+        sts_client = AwsProvider.create_sts_session(session, last_region)
+        return last_region, operation(sts_client)
+
     @staticmethod
     def validate_credentials(
         session: Session,
         aws_region: str,
+        excluded_regions: set[str] | None = None,
     ) -> AWSCallerIdentity:
         """
         Validates the AWS credentials using the provided session and AWS region.
+
+        When the region cannot be reached, the remaining regions of the partition
+        declared in PROWLER_AWS_PARTITION are tried before giving up. A credential
+        error is returned from the first region instead, since it would be the same
+        everywhere.
+
         Args:
             session (Session): The AWS session object.
             aws_region (str): The AWS region to validate the credentials.
+            excluded_regions (set[str] | None): Regions excluded from the scan,
+                tried after the rest of the partition.
         Returns:
-            AWSCallerIdentity: An object containing the caller identity information.
+            AWSCallerIdentity: An object containing the caller identity information,
+                including the region that answered.
         Raises:
             Exception: If an error occurs during the validation process.
         """
         try:
-            sts_client = AwsProvider.create_sts_session(session, aws_region)
-            caller_identity = sts_client.get_caller_identity()
+            sts_region, caller_identity = AwsProvider.sts_call_with_partition_failover(
+                session,
+                aws_region,
+                lambda sts_client: sts_client.get_caller_identity(),
+                excluded_regions,
+            )
             # Include the region where the caller_identity has validated the credentials
             return AWSCallerIdentity(
                 user_id=caller_identity.get("UserId"),
                 account=caller_identity.get("Account"),
                 arn=ARN(caller_identity.get("Arn")),
-                region=aws_region,
+                region=sts_region,
             )
         except ClientError as client_error:
             logger.error(
@@ -1846,6 +1927,49 @@ def get_env_partition_bootstrap_region(
     return regions[0] if regions else None
 
 
+# An unreachable endpoint costs a connection timeout, so a partition with many
+# regions is not walked in full
+MAX_STS_BOOTSTRAP_ATTEMPTS = 3
+
+
+def get_partition_bootstrap_candidates(
+    aws_region: str,
+    session_region: Optional[str] = None,
+    excluded_regions: set[str] | None = None,
+) -> list:
+    """
+    Get the STS bootstrap regions to try, in order, starting with the chosen one.
+
+    A deployment reached only through its own region's endpoints has no route to
+    the rest of its partition, and which region that is cannot be known from the
+    environment alone: a container may carry a region belonging to no partition
+    it scans. Offering the remaining regions of the declared partition lets the
+    bootstrap succeed without anything having to declare the right one.
+
+    Args:
+        aws_region (str): The region already chosen for the bootstrap call.
+        session_region (Optional[str]): The region of the AWS session.
+        excluded_regions (set[str] | None): Regions excluded from the scan. They
+            go after the rest of the partition, so the bootstrap avoids them
+            whenever another region answers and still has them as a last resort.
+
+    Returns:
+        list: The regions to try, preferred first, capped at
+            MAX_STS_BOOTSTRAP_ATTEMPTS.
+    """
+    excluded_regions = set(excluded_regions or ())
+    partition_regions = get_env_partition_regions(session_region) or []
+    # sorted() is stable, so the partition order survives on each side of the split
+    ordered_regions = sorted(
+        partition_regions, key=lambda region: region in excluded_regions
+    )
+    candidates = [aws_region]
+    for region in ordered_regions:
+        if region not in candidates:
+            candidates.append(region)
+    return candidates[:MAX_STS_BOOTSTRAP_ATTEMPTS]
+
+
 # TODO: This can be moved to another class since it doesn't need self
 def get_aws_region_for_sts(
     session_region: str,
diff --git a/tests/providers/aws/aws_provider_test.py b/tests/providers/aws/aws_provider_test.py
index f899706453..2d759f362a 100644
--- a/tests/providers/aws/aws_provider_test.py
+++ b/tests/providers/aws/aws_provider_test.py
@@ -17,10 +17,12 @@ from pytest import raises
 from tzlocal import get_localzone
 
 from prowler.providers.aws.aws_provider import (
+    MAX_STS_BOOTSTRAP_ATTEMPTS,
     AwsProvider,
     get_aws_region_for_sts,
     get_env_partition_bootstrap_region,
     get_env_partition_regions,
+    get_partition_bootstrap_candidates,
 )
 from prowler.providers.aws.config import (
     AWS_STS_GLOBAL_ENDPOINT_REGION,
@@ -32,6 +34,7 @@ from prowler.providers.aws.config import (
     get_default_session_config,
 )
 from prowler.providers.aws.exceptions.exceptions import (
+    AWSAccessKeyIDInvalidError,
     AWSArgumentTypeValidationError,
     AWSIAMRoleARNInvalidResourceTypeError,
     AWSInvalidBoto3TimeoutError,
@@ -1583,6 +1586,411 @@ aws:
         assert get_caller_identity.arn.resource == "test-user"
         assert get_caller_identity.arn.resource_type == "user"
 
+    def test_get_partition_bootstrap_candidates_adds_the_rest_of_the_partition(
+        self, monkeypatch
+    ):
+        monkeypatch.setenv("PROWLER_AWS_PARTITION", AWS_GOV_CLOUD_PARTITION)
+
+        assert get_partition_bootstrap_candidates(
+            AWS_REGION_GOV_CLOUD_US_EAST_1, AWS_REGION_US_EAST_1
+        ) == [AWS_REGION_GOV_CLOUD_US_EAST_1, AWS_REGION_GOV_CLOUD_US_WEST_1]
+
+    def test_get_partition_bootstrap_candidates_without_partition_offers_one_region(
+        self, monkeypatch
+    ):
+        monkeypatch.delenv("PROWLER_AWS_PARTITION", raising=False)
+
+        assert get_partition_bootstrap_candidates(AWS_REGION_EU_WEST_1) == [
+            AWS_REGION_EU_WEST_1
+        ]
+
+    def test_get_partition_bootstrap_candidates_is_capped(self, monkeypatch):
+        monkeypatch.setenv("PROWLER_AWS_PARTITION", AWS_COMMERCIAL_PARTITION)
+
+        candidates = get_partition_bootstrap_candidates(
+            AWS_REGION_EU_WEST_1, AWS_REGION_EU_WEST_1
+        )
+
+        assert len(candidates) == MAX_STS_BOOTSTRAP_ATTEMPTS
+        assert candidates[0] == AWS_REGION_EU_WEST_1
+
+    def test_get_partition_bootstrap_candidates_tries_excluded_regions_last(
+        self, monkeypatch
+    ):
+        monkeypatch.setenv("PROWLER_AWS_PARTITION", AWS_COMMERCIAL_PARTITION)
+        partition_regions = get_env_partition_regions(AWS_REGION_EU_WEST_1)
+        excluded_regions = set(partition_regions[1:3])
+
+        candidates = get_partition_bootstrap_candidates(
+            AWS_REGION_EU_WEST_1, AWS_REGION_EU_WEST_1, excluded_regions
+        )
+
+        assert candidates == [AWS_REGION_EU_WEST_1, *partition_regions[3:5]]
+
+    def test_get_partition_bootstrap_candidates_keeps_excluded_regions_as_a_last_resort(
+        self, monkeypatch
+    ):
+        monkeypatch.setenv("PROWLER_AWS_PARTITION", AWS_GOV_CLOUD_PARTITION)
+
+        assert get_partition_bootstrap_candidates(
+            AWS_REGION_GOV_CLOUD_US_EAST_1,
+            AWS_REGION_US_EAST_1,
+            {AWS_REGION_GOV_CLOUD_US_EAST_1, AWS_REGION_GOV_CLOUD_US_WEST_1},
+        ) == [AWS_REGION_GOV_CLOUD_US_EAST_1, AWS_REGION_GOV_CLOUD_US_WEST_1]
+
+    def test_validate_credentials_falls_back_to_the_next_partition_region(
+        self, monkeypatch
+    ):
+        monkeypatch.setenv("PROWLER_AWS_PARTITION", AWS_GOV_CLOUD_PARTITION)
+        # A container may carry a region that belongs to no partition it scans
+        current_session = session.Session(region_name=AWS_REGION_US_EAST_1)
+        attempted_regions = []
+
+        def create_sts_session(session, aws_region):
+            attempted_regions.append(aws_region)
+            if aws_region == AWS_REGION_GOV_CLOUD_US_EAST_1:
+                raise botocore.exceptions.EndpointConnectionError(
+                    endpoint_url=f"https://sts.{aws_region}.amazonaws.com"
+                )
+            sts_client = mock.MagicMock()
+            sts_client.get_caller_identity.return_value = {
+                "UserId": "test-user-id",
+                "Account": AWS_ACCOUNT_NUMBER,
+                "Arn": AWS_GOV_CLOUD_ACCOUNT_ARN,
+            }
+            return sts_client
+
+        with patch(
+            "prowler.providers.aws.aws_provider.AwsProvider.create_sts_session",
+            new=create_sts_session,
+        ):
+            caller_identity = AwsProvider.validate_credentials(
+                session=current_session, aws_region=AWS_REGION_GOV_CLOUD_US_EAST_1
+            )
+
+        assert attempted_regions == [
+            AWS_REGION_GOV_CLOUD_US_EAST_1,
+            AWS_REGION_GOV_CLOUD_US_WEST_1,
+        ]
+        assert caller_identity.region == AWS_REGION_GOV_CLOUD_US_WEST_1
+
+    def test_validate_credentials_falls_back_when_a_region_does_not_answer(
+        self, monkeypatch
+    ):
+        monkeypatch.setenv("PROWLER_AWS_PARTITION", AWS_GOV_CLOUD_PARTITION)
+        current_session = session.Session(region_name=AWS_REGION_US_EAST_1)
+        attempted_regions = []
+
+        # The connection is accepted but nothing comes back before the read timeout
+        def create_sts_session(session, aws_region):
+            attempted_regions.append(aws_region)
+            if aws_region == AWS_REGION_GOV_CLOUD_US_EAST_1:
+                raise botocore.exceptions.ReadTimeoutError(
+                    endpoint_url=f"https://sts.{aws_region}.amazonaws.com"
+                )
+            sts_client = mock.MagicMock()
+            sts_client.get_caller_identity.return_value = {
+                "UserId": "test-user-id",
+                "Account": AWS_ACCOUNT_NUMBER,
+                "Arn": AWS_GOV_CLOUD_ACCOUNT_ARN,
+            }
+            return sts_client
+
+        with patch(
+            "prowler.providers.aws.aws_provider.AwsProvider.create_sts_session",
+            new=create_sts_session,
+        ):
+            caller_identity = AwsProvider.validate_credentials(
+                session=current_session, aws_region=AWS_REGION_GOV_CLOUD_US_EAST_1
+            )
+
+        assert attempted_regions == [
+            AWS_REGION_GOV_CLOUD_US_EAST_1,
+            AWS_REGION_GOV_CLOUD_US_WEST_1,
+        ]
+        assert caller_identity.region == AWS_REGION_GOV_CLOUD_US_WEST_1
+
+    def test_validate_credentials_raises_when_no_partition_region_answers(
+        self, monkeypatch
+    ):
+        monkeypatch.setenv("PROWLER_AWS_PARTITION", AWS_GOV_CLOUD_PARTITION)
+        current_session = session.Session(region_name=AWS_REGION_US_EAST_1)
+        attempted_regions = []
+
+        def create_sts_session(session, aws_region):
+            attempted_regions.append(aws_region)
+            raise botocore.exceptions.EndpointConnectionError(
+                endpoint_url=f"https://sts.{aws_region}.amazonaws.com"
+            )
+
+        with patch(
+            "prowler.providers.aws.aws_provider.AwsProvider.create_sts_session",
+            new=create_sts_session,
+        ):
+            with raises(botocore.exceptions.EndpointConnectionError):
+                AwsProvider.validate_credentials(
+                    session=current_session, aws_region=AWS_REGION_GOV_CLOUD_US_EAST_1
+                )
+
+        assert attempted_regions == [
+            AWS_REGION_GOV_CLOUD_US_EAST_1,
+            AWS_REGION_GOV_CLOUD_US_WEST_1,
+        ]
+
+    def test_validate_credentials_avoids_an_excluded_region_when_failing_over(
+        self, monkeypatch
+    ):
+        monkeypatch.setenv("PROWLER_AWS_PARTITION", AWS_COMMERCIAL_PARTITION)
+        current_session = session.Session(region_name=AWS_REGION_EU_WEST_1)
+        partition_regions = get_env_partition_regions(AWS_REGION_EU_WEST_1)
+        excluded_region, answering_region = partition_regions[1:3]
+        attempted_regions = []
+
+        def create_sts_session(session, aws_region):
+            attempted_regions.append(aws_region)
+            if aws_region == AWS_REGION_EU_WEST_1:
+                raise botocore.exceptions.EndpointConnectionError(
+                    endpoint_url=f"https://sts.{aws_region}.amazonaws.com"
+                )
+            sts_client = mock.MagicMock()
+            sts_client.get_caller_identity.return_value = {
+                "UserId": "test-user-id",
+                "Account": AWS_ACCOUNT_NUMBER,
+                "Arn": AWS_ACCOUNT_ARN,
+            }
+            return sts_client
+
+        with patch(
+            "prowler.providers.aws.aws_provider.AwsProvider.create_sts_session",
+            new=create_sts_session,
+        ):
+            caller_identity = AwsProvider.validate_credentials(
+                session=current_session,
+                aws_region=AWS_REGION_EU_WEST_1,
+                excluded_regions={excluded_region},
+            )
+
+        assert attempted_regions == [AWS_REGION_EU_WEST_1, answering_region]
+        assert caller_identity.region == answering_region
+
+    def test_validate_credentials_does_not_retry_a_credential_error(self, monkeypatch):
+        monkeypatch.setenv("PROWLER_AWS_PARTITION", AWS_GOV_CLOUD_PARTITION)
+        current_session = session.Session(region_name=AWS_REGION_US_EAST_1)
+        attempted_regions = []
+
+        def create_sts_session(session, aws_region):
+            attempted_regions.append(aws_region)
+            sts_client = mock.MagicMock()
+            sts_client.get_caller_identity.side_effect = (
+                botocore.exceptions.ClientError(
+                    {"Error": {"Code": "InvalidClientTokenId", "Message": "invalid"}},
+                    "GetCallerIdentity",
+                )
+            )
+            return sts_client
+
+        with patch(
+            "prowler.providers.aws.aws_provider.AwsProvider.create_sts_session",
+            new=create_sts_session,
+        ):
+            with raises(AWSAccessKeyIDInvalidError):
+                AwsProvider.validate_credentials(
+                    session=current_session, aws_region=AWS_REGION_GOV_CLOUD_US_EAST_1
+                )
+
+        assert attempted_regions == [AWS_REGION_GOV_CLOUD_US_EAST_1]
+
+    def test_assume_role_falls_back_to_the_next_partition_region(self, monkeypatch):
+        monkeypatch.setenv("PROWLER_AWS_PARTITION", AWS_GOV_CLOUD_PARTITION)
+        current_session = session.Session(region_name=AWS_REGION_US_EAST_1)
+        attempted_regions = []
+
+        def create_sts_session(session, aws_region):
+            attempted_regions.append(aws_region)
+            if aws_region == AWS_REGION_GOV_CLOUD_US_EAST_1:
+                raise botocore.exceptions.EndpointConnectionError(
+                    endpoint_url=f"https://sts.{aws_region}.amazonaws.com"
+                )
+            sts_client = mock.MagicMock()
+            sts_client.assume_role.return_value = {
+                "Credentials": {
+                    "AccessKeyId": "AKIAIOSFODNN7EXAMPLE",
+                    "SecretAccessKey": "secret",
+                    "SessionToken": "token",
+                    "Expiration": datetime.now() + timedelta(seconds=3600),
+                }
+            }
+            return sts_client
+
+        assumed_role_info = AWSAssumeRoleInfo(
+            role_arn=ARN(
+                arn=f"arn:{AWS_GOV_CLOUD_PARTITION}:iam::{AWS_ACCOUNT_NUMBER}:role/test-role"
+            ),
+            session_duration=3600,
+            external_id=None,
+            mfa_enabled=False,
+            role_session_name=ROLE_SESSION_NAME,
+            sts_region=AWS_REGION_GOV_CLOUD_US_EAST_1,
+        )
+
+        with patch(
+            "prowler.providers.aws.aws_provider.AwsProvider.create_sts_session",
+            new=create_sts_session,
+        ):
+            credentials = AwsProvider.assume_role(current_session, assumed_role_info)
+
+        assert attempted_regions == [
+            AWS_REGION_GOV_CLOUD_US_EAST_1,
+            AWS_REGION_GOV_CLOUD_US_WEST_1,
+        ]
+        assert isinstance(credentials, AWSCredentials)
+        assert credentials.aws_access_key_id == "AKIAIOSFODNN7EXAMPLE"
+
+    def test_setup_session_mfa_falls_back_to_the_next_partition_region(
+        self, monkeypatch
+    ):
+        monkeypatch.setenv("PROWLER_AWS_PARTITION", AWS_GOV_CLOUD_PARTITION)
+        monkeypatch.setenv("AWS_DEFAULT_REGION", AWS_REGION_US_EAST_1)
+        attempted_regions = []
+
+        def create_sts_session(session, aws_region):
+            attempted_regions.append(aws_region)
+            if aws_region == AWS_REGION_GOV_CLOUD_US_EAST_1:
+                raise botocore.exceptions.EndpointConnectionError(
+                    endpoint_url=f"https://sts.{aws_region}.amazonaws.com"
+                )
+            sts_client = mock.MagicMock()
+            sts_client.get_session_token.return_value = {
+                "Credentials": {
+                    "AccessKeyId": "AKIAIOSFODNN7EXAMPLE",
+                    "SecretAccessKey": "secret",
+                    "SessionToken": "token",
+                }
+            }
+            return sts_client
+
+        with (
+            patch(
+                "prowler.providers.aws.aws_provider.AwsProvider.input_role_mfa_token_and_code",
+                return_value=AWSMFAInfo(
+                    arn=f"arn:{AWS_GOV_CLOUD_PARTITION}:iam::{AWS_ACCOUNT_NUMBER}:mfa/test",
+                    totp="123456",
+                ),
+            ),
+            patch(
+                "prowler.providers.aws.aws_provider.AwsProvider.create_sts_session",
+                new=create_sts_session,
+            ),
+        ):
+            mfa_session = AwsProvider.setup_session(
+                mfa=True,
+                aws_access_key_id="test-access-key",
+                aws_secret_access_key="test-secret-key",
+            )
+
+        assert attempted_regions == [
+            AWS_REGION_GOV_CLOUD_US_EAST_1,
+            AWS_REGION_GOV_CLOUD_US_WEST_1,
+        ]
+        assert mfa_session.get_credentials().access_key == "AKIAIOSFODNN7EXAMPLE"
+        assert mfa_session.get_credentials().token == "token"
+
+    @mock_aws
+    def test_aws_provider_hands_excluded_regions_to_credential_validation(
+        self, monkeypatch
+    ):
+        monkeypatch.setenv("PROWLER_AWS_PARTITION", AWS_GOV_CLOUD_PARTITION)
+        monkeypatch.setenv("AWS_DEFAULT_REGION", AWS_REGION_US_EAST_1)
+        handed = []
+
+        class Validated(Exception):
+            pass
+
+        # Stops at the validation: what it was handed is all this checks
+        def validate_credentials(session, aws_region, excluded_regions=None):
+            handed.append((aws_region, set(excluded_regions or ())))
+            raise Validated
+
+        with patch(
+            "prowler.providers.aws.aws_provider.AwsProvider.validate_credentials",
+            side_effect=validate_credentials,
+        ):
+            with raises(Validated):
+                AwsProvider(excluded_regions={AWS_REGION_GOV_CLOUD_US_EAST_1})
+
+        assert handed == [
+            (AWS_REGION_GOV_CLOUD_US_WEST_1, {AWS_REGION_GOV_CLOUD_US_EAST_1})
+        ]
+
+    @mock_aws
+    def test_aws_provider_assumes_the_role_where_validation_got_an_answer(
+        self, monkeypatch
+    ):
+        monkeypatch.setenv("PROWLER_AWS_PARTITION", AWS_GOV_CLOUD_PARTITION)
+        # Out of the partition, so the first candidate is botocore's, not this one
+        monkeypatch.setenv("AWS_DEFAULT_REGION", AWS_REGION_US_EAST_1)
+        role_arn = (
+            f"arn:{AWS_GOV_CLOUD_PARTITION}:iam::{AWS_ACCOUNT_NUMBER}:role/test-role"
+        )
+        answered = AWSCallerIdentity(
+            user_id="test-user-id",
+            account=AWS_ACCOUNT_NUMBER,
+            arn=ARN(AWS_GOV_CLOUD_ACCOUNT_ARN),
+            region=AWS_REGION_GOV_CLOUD_US_WEST_1,
+        )
+
+        with patch(
+            "prowler.providers.aws.aws_provider.AwsProvider.validate_credentials",
+            return_value=answered,
+        ):
+            aws_provider = AwsProvider(role_arn=role_arn, session_duration=900)
+
+        assert (
+            aws_provider._assumed_role_configuration.info.sts_region
+            == AWS_REGION_GOV_CLOUD_US_WEST_1
+        )
+
+    @mock_aws
+    def test_aws_provider_assumes_the_organizations_role_where_validation_got_an_answer(
+        self, monkeypatch
+    ):
+        monkeypatch.setenv("PROWLER_AWS_PARTITION", AWS_GOV_CLOUD_PARTITION)
+        monkeypatch.setenv("AWS_DEFAULT_REGION", AWS_REGION_US_EAST_1)
+        organizations_role_arn = f"arn:{AWS_GOV_CLOUD_PARTITION}:iam::{AWS_ACCOUNT_NUMBER}:role/organizations-role"
+        answered = AWSCallerIdentity(
+            user_id="test-user-id",
+            account=AWS_ACCOUNT_NUMBER,
+            arn=ARN(AWS_GOV_CLOUD_ACCOUNT_ARN),
+            region=AWS_REGION_GOV_CLOUD_US_WEST_1,
+        )
+        sts_regions = []
+
+        class RoleAssumed(Exception):
+            pass
+
+        # Stops at the assumption: the region it was handed is all this checks
+        def assume_role(session, assumed_role_info):
+            sts_regions.append(assumed_role_info.sts_region)
+            raise RoleAssumed
+
+        with (
+            patch(
+                "prowler.providers.aws.aws_provider.AwsProvider.validate_credentials",
+                return_value=answered,
+            ),
+            patch(
+                "prowler.providers.aws.aws_provider.AwsProvider.assume_role",
+                side_effect=assume_role,
+            ),
+        ):
+            with raises(RoleAssumed):
+                AwsProvider(
+                    organizations_role_arn=organizations_role_arn,
+                    session_duration=900,
+                )
+
+        assert sts_regions == [AWS_REGION_GOV_CLOUD_US_WEST_1]
+
     @mock_aws
     def test_test_connection_with_env_credentials(self, monkeypatch):
         # Create a mock IAM user

From 75c22df63b2107f04c6d80de325147feec375149 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9sar=20Arroba?=
 <19954079+cesararroba@users.noreply.github.com>
Date: Wed, 16 Sep 2026 09:25:08 +0200
Subject: [PATCH 63/77] fix(azure): use the selected cloud endpoints in
 Defender and Key Vault (#12813)

---
 ...ign-cloud-defender-keyvault-hosts.fixed.md |  1 +
 .../providers/azure/lib/service/service.py    |  1 +
 prowler/providers/azure/models.py             |  4 +-
 .../services/defender/defender_service.py     | 13 ++-
 .../services/keyvault/keyvault_service.py     | 27 +++++-
 .../azure/lib/service/azure_service_test.py   | 16 ++++
 .../defender/defender_service_test.py         | 51 +++++++++++
 .../keyvault/keyvault_service_test.py         | 84 +++++++++++++++++++
 8 files changed, 190 insertions(+), 7 deletions(-)
 create mode 100644 prowler/changelog.d/azure-sovereign-cloud-defender-keyvault-hosts.fixed.md

diff --git a/prowler/changelog.d/azure-sovereign-cloud-defender-keyvault-hosts.fixed.md b/prowler/changelog.d/azure-sovereign-cloud-defender-keyvault-hosts.fixed.md
new file mode 100644
index 0000000000..99ef3354e0
--- /dev/null
+++ b/prowler/changelog.d/azure-sovereign-cloud-defender-keyvault-hosts.fixed.md
@@ -0,0 +1 @@
+Azure Defender security contacts and Key Vault key rotation policies now use the endpoints of the selected cloud (`--azure-region`) instead of the hardcoded `management.azure.com` and `vault.azure.net` hosts, so both work on `AzureUSGovernment` and `AzureChinaCloud`
diff --git a/prowler/providers/azure/lib/service/service.py b/prowler/providers/azure/lib/service/service.py
index 9d63639e94..9647723173 100644
--- a/prowler/providers/azure/lib/service/service.py
+++ b/prowler/providers/azure/lib/service/service.py
@@ -27,6 +27,7 @@ class AzureService:
         )
 
         self.subscriptions = provider.identity.subscriptions
+        self.region_config = provider.region_config
         self.resource_groups = provider.resource_groups
         self.locations = provider.locations
         self.audit_config = provider.audit_config
diff --git a/prowler/providers/azure/models.py b/prowler/providers/azure/models.py
index 62d03db365..5df80afab6 100644
--- a/prowler/providers/azure/models.py
+++ b/prowler/providers/azure/models.py
@@ -18,8 +18,8 @@ class AzureIdentityInfo(BaseModel):
 class AzureRegionConfig(BaseModel):
     name: str = ""
     authority: Optional[str] = None
-    base_url: str = ""
-    credential_scopes: list = []
+    base_url: str = "https://management.azure.com"
+    credential_scopes: list = ["https://management.azure.com/.default"]
     graph_host: str = "https://graph.microsoft.com"
     graph_scope: str = "https://graph.microsoft.com/.default"
     logs_endpoint: str = "https://api.loganalytics.io"
diff --git a/prowler/providers/azure/services/defender/defender_service.py b/prowler/providers/azure/services/defender/defender_service.py
index d68d88dc22..17777843e4 100644
--- a/prowler/providers/azure/services/defender/defender_service.py
+++ b/prowler/providers/azure/services/defender/defender_service.py
@@ -12,7 +12,16 @@ from prowler.providers.azure.lib.service.service import AzureService
 
 
 class Defender(AzureService):
+    """Microsoft Defender for Cloud service: pricings, settings, assessments,
+    security contacts, IoT solutions and JIT policies per subscription."""
+
     def __init__(self, provider: AzureProvider):
+        """Collect the Defender configuration of every audited subscription.
+
+        Args:
+            provider: Azure provider supplying the session, subscriptions and
+                the region config whose endpoints are used for every call.
+        """
         super().__init__(SecurityCenter, provider)
 
         self.pricings = self._get_pricings()
@@ -21,7 +30,7 @@ class Defender(AzureService):
         self.settings = self._get_settings()
         self.security_contact_configurations = self._get_security_contacts(
             token=provider.session.get_token(
-                "https://management.azure.com/.default"
+                *self.region_config.credential_scopes
             ).token
         )
         self.iot_security_solutions = self._get_iot_security_solutions()
@@ -168,7 +177,7 @@ class Defender(AzureService):
         security_contacts = {}
         for subscription_id, display_name in self.subscriptions.items():
             try:
-                url = f"https://management.azure.com/subscriptions/{subscription_id}/providers/Microsoft.Security/securityContacts?api-version=2023-12-01-preview"
+                url = f"{self.region_config.base_url}/subscriptions/{subscription_id}/providers/Microsoft.Security/securityContacts?api-version=2023-12-01-preview"
                 headers = {
                     "Authorization": f"Bearer {token}",
                     "Content-Type": "application/json",
diff --git a/prowler/providers/azure/services/keyvault/keyvault_service.py b/prowler/providers/azure/services/keyvault/keyvault_service.py
index e5b2e76427..5e79412f4b 100644
--- a/prowler/providers/azure/services/keyvault/keyvault_service.py
+++ b/prowler/providers/azure/services/keyvault/keyvault_service.py
@@ -83,6 +83,7 @@ class KeyVault(AzureService):
                     subscription,
                     resource_group,
                     keyvault_name,
+                    getattr(keyvault_properties, "vault_uri", ""),
                     provider,
                 )
                 secrets_future = executor.submit(
@@ -150,7 +151,22 @@ class KeyVault(AzureService):
             )
             return None
 
-    def _get_keys(self, subscription, resource_group, keyvault_name, provider):
+    def _get_keys(
+        self, subscription, resource_group, keyvault_name, vault_uri, provider
+    ):
+        """Get the keys of a Key Vault, enriched with their rotation policies.
+
+        Args:
+            subscription: Subscription ID the vault belongs to.
+            resource_group: Resource group name of the vault.
+            keyvault_name: Vault name, used for the management API and logs.
+            vault_uri: Data-plane URI of the vault as returned by ARM, valid in
+                any Azure cloud. When empty, rotation policies are skipped.
+            provider: Azure provider whose session authenticates the KeyClient.
+
+        Returns:
+            A list of Key objects; rotation_policy is set when it could be read.
+        """
         logger.info(f"KeyVault - Getting keys for {keyvault_name}...")
         keys = []
         keys_dict = {}
@@ -179,10 +195,15 @@ class KeyVault(AzureService):
                 f"Subscription ID: {subscription} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
             )
 
+        if not vault_uri:
+            logger.warning(
+                f"KeyVault {keyvault_name} in {subscription} -- has no vault URI, skipping key rotation policies"
+            )
+            return keys
+
         try:
             key_client = KeyClient(
-                vault_url=f"https://{keyvault_name}.vault.azure.net/",
-                # TODO: review the following line
+                vault_url=vault_uri,
                 credential=provider.session,
             )
             properties = list(key_client.list_properties_of_keys())
diff --git a/tests/providers/azure/lib/service/azure_service_test.py b/tests/providers/azure/lib/service/azure_service_test.py
index 9360be85ea..49042dc476 100644
--- a/tests/providers/azure/lib/service/azure_service_test.py
+++ b/tests/providers/azure/lib/service/azure_service_test.py
@@ -106,3 +106,19 @@ class TestAzureServiceSovereignClouds:
         service.__set_clients__(identity, session, logs_service, region_config)
 
         logs_service.assert_called_once_with(credential=session, endpoint=logs_endpoint)
+
+
+class TestAzureServiceRegionConfig:
+    def test_init_keeps_provider_region_config(self):
+        region_config = AzureRegionConfig(
+            name="AzureUSGovernment",
+            base_url="https://management.usgovcloudapi.net",
+            credential_scopes=["https://management.usgovcloudapi.net/.default"],
+        )
+        provider = MagicMock()
+        provider.region_config = region_config
+
+        with patch.object(AzureService, "__set_clients__", return_value={}):
+            service = AzureService(MagicMock(), provider)
+
+        assert service.region_config is region_config
diff --git a/tests/providers/azure/services/defender/defender_service_test.py b/tests/providers/azure/services/defender/defender_service_test.py
index b50ddd26c9..d9cdb149ab 100644
--- a/tests/providers/azure/services/defender/defender_service_test.py
+++ b/tests/providers/azure/services/defender/defender_service_test.py
@@ -1,6 +1,7 @@
 from datetime import timedelta
 from unittest.mock import MagicMock, patch
 
+from prowler.providers.azure.models import AzureRegionConfig
 from prowler.providers.azure.services.defender.defender_service import (
     Assesment,
     AutoProvisioningSetting,
@@ -618,3 +619,53 @@ class Test_Defender_get_jit_policies:
         mock_client.jit_network_access_policies.list_by_resource_group.assert_called_once_with(
             resource_group_name="RG"
         )
+
+
+US_GOV_REGION_CONFIG = AzureRegionConfig(
+    name="AzureUSGovernment",
+    base_url="https://management.usgovcloudapi.net",
+    credential_scopes=["https://management.usgovcloudapi.net/.default"],
+)
+
+
+class Test_Defender_get_security_contacts_sovereign_cloud:
+    def _defender(self, provider):
+        with (
+            patch(DEFENDER_INIT_PATCHES[0], return_value={}),
+            patch(DEFENDER_INIT_PATCHES[1], return_value={}),
+            patch(DEFENDER_INIT_PATCHES[2], return_value={}),
+            patch(DEFENDER_INIT_PATCHES[3], return_value={}),
+            patch(DEFENDER_INIT_PATCHES[4], return_value={}),
+            patch(DEFENDER_INIT_PATCHES[5], return_value={}),
+            patch(DEFENDER_INIT_PATCHES[6], return_value={}),
+        ):
+            return Defender(provider)
+
+    def test_init_requests_token_for_cloud_scope(self):
+        provider = set_mocked_azure_provider(azure_region_config=US_GOV_REGION_CONFIG)
+
+        self._defender(provider)
+
+        provider.session.get_token.assert_called_once_with(
+            "https://management.usgovcloudapi.net/.default"
+        )
+
+    def test_get_security_contacts_uses_cloud_management_host(self):
+        provider = set_mocked_azure_provider(azure_region_config=US_GOV_REGION_CONFIG)
+        defender = self._defender(provider)
+
+        response = MagicMock()
+        response.json.return_value = {"value": []}
+        with patch(
+            "prowler.providers.azure.services.defender.defender_service.requests.get",
+            return_value=response,
+        ) as mock_get:
+            result = defender._get_security_contacts(token="token")
+
+        assert result == {AZURE_SUBSCRIPTION_ID: {}}
+        mock_get.assert_called_once()
+        url = mock_get.call_args.args[0]
+        assert url.startswith(
+            f"https://management.usgovcloudapi.net/subscriptions/{AZURE_SUBSCRIPTION_ID}/"
+        )
+        assert "management.azure.com" not in url
diff --git a/tests/providers/azure/services/keyvault/keyvault_service_test.py b/tests/providers/azure/services/keyvault/keyvault_service_test.py
index e43b7a9fff..d52d292af3 100644
--- a/tests/providers/azure/services/keyvault/keyvault_service_test.py
+++ b/tests/providers/azure/services/keyvault/keyvault_service_test.py
@@ -470,3 +470,87 @@ class Test_KeyVault_get_key_vaults:
         mock_client.vaults.list_by_resource_group.assert_called_once_with(
             resource_group_name="MyRG"
         )
+
+
+class Test_KeyVault_get_keys:
+    def test_get_keys_builds_key_client_from_vault_uri(self):
+        mock_client = MagicMock()
+        mock_client.keys.list.return_value = []
+
+        mock_provider = MagicMock()
+        mock_provider.identity = MagicMock()
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.azure.services.monitor.monitor_service.Monitor",
+                new=MagicMock(),
+            ),
+            patch(
+                "prowler.providers.azure.services.keyvault.keyvault_service.KeyVault._get_key_vaults",
+                return_value={},
+            ),
+        ):
+            from prowler.providers.azure.services.keyvault.keyvault_service import (
+                KeyVault,
+            )
+
+            keyvault = KeyVault(set_mocked_azure_provider())
+
+        keyvault.clients = {AZURE_SUBSCRIPTION_ID: mock_client}
+        provider = set_mocked_azure_provider()
+        vault_uri = "https://my-vault.vault.usgovcloudapi.net/"
+
+        with patch(
+            "prowler.providers.azure.services.keyvault.keyvault_service.KeyClient"
+        ) as mock_key_client_cls:
+            mock_key_client_cls.return_value.list_properties_of_keys.return_value = []
+            keys = keyvault._get_keys(
+                AZURE_SUBSCRIPTION_ID, RESOURCE_GROUP, "my-vault", vault_uri, provider
+            )
+
+        assert keys == []
+        mock_key_client_cls.assert_called_once_with(
+            vault_url=vault_uri, credential=provider.session
+        )
+
+    def test_get_keys_without_vault_uri_skips_rotation_policies(self):
+        mock_client = MagicMock()
+        mock_client.keys.list.return_value = []
+
+        mock_provider = MagicMock()
+        mock_provider.identity = MagicMock()
+        with (
+            patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=mock_provider,
+            ),
+            patch(
+                "prowler.providers.azure.services.monitor.monitor_service.Monitor",
+                new=MagicMock(),
+            ),
+            patch(
+                "prowler.providers.azure.services.keyvault.keyvault_service.KeyVault._get_key_vaults",
+                return_value={},
+            ),
+        ):
+            from prowler.providers.azure.services.keyvault.keyvault_service import (
+                KeyVault,
+            )
+
+            keyvault = KeyVault(set_mocked_azure_provider())
+
+        keyvault.clients = {AZURE_SUBSCRIPTION_ID: mock_client}
+        provider = set_mocked_azure_provider()
+
+        with patch(
+            "prowler.providers.azure.services.keyvault.keyvault_service.KeyClient"
+        ) as mock_key_client_cls:
+            keys = keyvault._get_keys(
+                AZURE_SUBSCRIPTION_ID, RESOURCE_GROUP, "my-vault", "", provider
+            )
+
+        assert keys == []
+        mock_key_client_cls.assert_not_called()

From 974f4251dd50175578e005249da3be33d9f63a58 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9sar=20Arroba?=
 <19954079+cesararroba@users.noreply.github.com>
Date: Wed, 16 Sep 2026 10:29:50 +0200
Subject: [PATCH 64/77] chore(trivy): suppress fast-uri CVE-2026-75931 from
 Teams SPDX manifest (#12823)

---
 .trivyignore.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.trivyignore.yaml b/.trivyignore.yaml
index efac339352..f572065625 100644
--- a/.trivyignore.yaml
+++ b/.trivyignore.yaml
@@ -125,6 +125,10 @@ vulnerabilities:
     purls:
       - "pkg:npm/fast-uri"
     expired_at: 2027-01-31
+  - id: CVE-2026-75931
+    purls:
+      - "pkg:npm/fast-uri"
+    expired_at: 2027-01-31
   - id: CVE-2026-69192
     purls:
       - "pkg:npm/ip-address"

From 2198ba2d84fb0dd3e85b8e705fbd6901cd3443c0 Mon Sep 17 00:00:00 2001
From: Alan Buscaglia <gentlemanprogramming@gmail.com>
Date: Wed, 16 Sep 2026 12:21:25 +0200
Subject: [PATCH 65/77] feat(ui): complete Registry provider onboarding for
 Private Cloud (#12494)

Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
---
 .github/test-impact.yml                       |   11 +
 .github/workflows/ui-e2e-tests-v2.yml         |   85 +-
 .../developer-guide/environment-variables.mdx |   10 +
 ui/Dockerfile                                 |    2 +
 ui/actions/auth/auth.test.ts                  |   28 +-
 ui/actions/auth/auth.ts                       |   69 +-
 .../dynamic-provider-credentials.test.ts      |  180 ++
 .../providers/dynamic-provider-credentials.ts |  115 +
 ui/actions/providers/index.ts                 |    1 +
 .../provider-schemas.adapter.test.ts          |   83 +
 .../providers/provider-schemas.adapter.ts     |   38 +
 ui/actions/providers/provider-schemas.test.ts |  138 ++
 ui/actions/providers/provider-schemas.ts      |   61 +
 .../providers/registry-provider.test.ts       |  113 +
 ui/actions/providers/registry-provider.ts     |   57 +
 ui/actions/registry/registry.adapter.test.ts  |  696 ++++++
 ui/actions/registry/registry.adapter.ts       |  441 ++++
 ui/actions/registry/registry.test.ts          | 1138 +++++++++
 ui/actions/registry/registry.ts               |  578 +++++
 ui/actions/roles/roles.test.ts                |   31 +
 ui/actions/roles/roles.ts                     |    4 +
 ui/app/(prowler)/layout.tsx                   |   17 +-
 ui/app/(prowler)/registry/page.tsx            |   26 +
 ui/auth.config.test.ts                        |   21 +
 ui/auth.config.ts                             |    1 +
 .../registry-private-cloud.added.md           |    1 +
 .../app-sidebar/app-sidebar-content.test.tsx  |   28 +
 .../app-sidebar/app-sidebar-content.tsx       |    4 +
 .../layout/app-sidebar/navigation-config.ts   |   15 +
 .../providers/radio-group-provider.test.tsx   |  134 +
 .../providers/radio-group-provider.tsx        |  207 +-
 .../providers/table/column-providers.tsx      |    2 +-
 .../table/data-table-row-actions.test.tsx     |   20 +-
 .../table/data-table-row-actions.tsx          |    4 +-
 .../wizard/provider-wizard-modal.test.tsx     |  230 ++
 .../wizard/provider-wizard-modal.tsx          |   11 +-
 .../providers/wizard/steps/connect-step.tsx   |    1 +
 .../wizard/steps/credentials-step.test.tsx    |    3 +
 .../wizard/steps/credentials-step.tsx         |   20 +-
 .../steps/dynamic-credentials-step.test.tsx   |  365 +++
 .../wizard/steps/dynamic-credentials-step.tsx |  336 +++
 .../providers/wizard/steps/footer-controls.ts |    1 +
 .../forms/connect-account-form.test.tsx       |   84 +
 .../workflow/forms/connect-account-form.tsx   |  131 +-
 .../provider-credential-fields.test.tsx       |  136 ++
 .../workflow/provider-credential-fields.tsx   |  152 ++
 .../registry/registry-access-dialog.tsx       |  162 ++
 ...egistry-artifact-card.integration.test.tsx |  236 ++
 .../registry/registry-artifact-card.tsx       |  410 ++++
 .../registry/registry-artifact-grid.tsx       |   51 +
 .../registry-artifact-task-handler.test.tsx   |  187 ++
 .../registry-artifact-task-handler.ts         |   37 +
 .../registry/registry-credential-banner.tsx   |   64 +
 .../registry-credential-task-handler.test.ts  |  112 +
 .../registry-credential-task-handler.ts       |   16 +
 .../registry-explorer.integration.test.tsx    | 2170 +++++++++++++++++
 .../registry/registry-explorer.model.test.ts  |  273 +++
 .../registry/registry-explorer.model.ts       |  153 ++
 ui/components/registry/registry-explorer.tsx  |  741 ++++++
 .../registry/registry-remove-dialog.tsx       |   94 +
 ui/components/registry/registry-toolbar.tsx   |  156 ++
 .../registry/use-registry-refresh.ts          |   97 +
 .../workflow/forms/add-role-form.test.tsx     |   22 +
 .../roles/workflow/forms/add-role-form.tsx    |    2 +
 .../workflow/forms/edit-role-form.test.tsx    |   22 +
 .../roles/workflow/forms/edit-role-form.tsx   |    4 +
 ui/components/shadcn/toast/Toast.tsx          |    2 +-
 .../shadcn/toast/Toaster.integration.test.tsx |   66 +
 ui/components/shadcn/toast/Toaster.test.tsx   |    3 +-
 ui/components/shared/task-polling-watcher.tsx |   12 +
 ui/hooks/use-auth.ts                          |    1 +
 ui/lib/auth/current-user.test.ts              |  146 ++
 ui/lib/auth/current-user.ts                   |  102 +
 ui/lib/csp.ts                                 |    4 +-
 ui/lib/helper.ts                              |    5 +
 ui/lib/permissions.test.ts                    |   29 +
 ui/lib/permissions.ts                         |    5 +
 .../fixtures/openai-credential-schema.json    |   24 +
 .../fixtures/template-credential-schema.json  |   49 +
 .../provider-credential-schema.test.ts        |  266 ++
 .../provider-credential-schema.ts             |  258 ++
 .../provider-credential-values.test.ts        |  136 ++
 .../provider-credential-values.ts             |   85 +
 ui/lib/provider-helpers.test.ts               |   36 +
 ui/lib/provider-helpers.ts                    |   11 +-
 ui/lib/registry/access.server.test.ts         |  177 ++
 ui/lib/registry/access.server.ts              |   61 +
 ui/lib/registry/access.test.ts                |   18 +
 ui/lib/registry/access.ts                     |   19 +
 ui/lib/registry/artifact-execution.test.ts    |  186 ++
 ui/lib/registry/artifact-execution.ts         |  122 +
 ui/lib/registry/artifact-notifications.tsx    |   45 +
 ui/lib/registry/artifacts.ts                  |    8 +
 ui/lib/registry/credential-execution.test.ts  |  311 +++
 ui/lib/registry/credential-execution.ts       |   63 +
 ui/lib/registry/credential-result.ts          |  142 ++
 ui/lib/registry/credential-task.test.ts       |   20 +
 ui/lib/registry/credential-task.ts            |   47 +
 ui/lib/registry/presentation.test.ts          |   43 +
 ui/lib/registry/presentation.ts               |   33 +
 ui/lib/registry/provider-options.test.ts      |  120 +
 ui/lib/registry/provider-options.ts           |   56 +
 ui/lib/role-permissions.ts                    |    1 +
 ui/next.config.js                             |    2 +
 ui/next.config.test.ts                        |   11 +
 ui/package.json                               |    1 +
 ui/playwright.base.ts                         |   24 +
 ui/playwright.config.ts                       |   29 +-
 ui/playwright.registry.config.ts              |   93 +
 ui/proxy.registry.test.ts                     |   38 +
 ui/proxy.test.ts                              |    3 +
 ui/proxy.ts                                   |   17 +-
 ui/store/task-watcher/store.test.ts           |  174 ++
 ui/store/task-watcher/store.ts                |  117 +-
 ui/store/ui/store-initializer.test.tsx        |   36 +
 ui/store/ui/store-initializer.tsx             |   12 +-
 ui/store/ui/store.ts                          |   11 +
 ui/tests/providers/providers-page.ts          |    9 +
 ui/tests/providers/providers.md               |   13 +-
 ui/tests/providers/providers.spec.ts          |    3 +-
 ui/tests/registry/add-provider-tour-report.md |   16 +
 ui/tests/registry/controlled-registry-api.mts |  852 +++++++
 .../registry/controlled-registry-fixture.ts   |   89 +
 .../registry-catalog-desktop-dark.png         |  Bin 0 -> 133227 bytes
 .../registry-catalog-desktop-light.png        |  Bin 0 -> 136335 bytes
 .../evidence/registry-catalog-mobile-dark.png |  Bin 0 -> 163686 bytes
 .../registry-catalog-tablet-light.png         |  Bin 0 -> 82812 bytes
 .../registry-provider-credentials.png         |  Bin 0 -> 84649 bytes
 .../registry-provider-scan-completed.png      |  Bin 0 -> 103799 bytes
 .../evidence/registry-provider-selector.png   |  Bin 0 -> 103904 bytes
 ui/tests/registry/registry-page.ts            |  310 +++
 ui/tests/registry/registry.md                 |  114 +
 ui/tests/registry/registry.spec.ts            |  492 ++++
 ui/tests/registry/validation.md               |   69 +
 ui/tests/setups/manage-registry.auth.setup.ts |   30 +
 ui/types/dynamic-provider-form.test.ts        |   28 +
 ui/types/env.d.ts                             |    2 +
 ui/types/formSchemas.test.ts                  |   25 +
 ui/types/formSchemas.ts                       |   24 +-
 ui/types/provider-schema.ts                   |   33 +
 ui/types/registry.ts                          |  290 +++
 ui/types/users.ts                             |    2 +
 ui/vitest.config.ts                           |    6 +-
 ui/vitest.integration.setup.ts                |    4 +
 144 files changed, 16218 insertions(+), 311 deletions(-)
 create mode 100644 ui/actions/providers/dynamic-provider-credentials.test.ts
 create mode 100644 ui/actions/providers/dynamic-provider-credentials.ts
 create mode 100644 ui/actions/providers/provider-schemas.adapter.test.ts
 create mode 100644 ui/actions/providers/provider-schemas.adapter.ts
 create mode 100644 ui/actions/providers/provider-schemas.test.ts
 create mode 100644 ui/actions/providers/provider-schemas.ts
 create mode 100644 ui/actions/providers/registry-provider.test.ts
 create mode 100644 ui/actions/providers/registry-provider.ts
 create mode 100644 ui/actions/registry/registry.adapter.test.ts
 create mode 100644 ui/actions/registry/registry.adapter.ts
 create mode 100644 ui/actions/registry/registry.test.ts
 create mode 100644 ui/actions/registry/registry.ts
 create mode 100644 ui/app/(prowler)/registry/page.tsx
 create mode 100644 ui/changelog.d/registry-private-cloud.added.md
 create mode 100644 ui/components/providers/radio-group-provider.test.tsx
 create mode 100644 ui/components/providers/wizard/provider-wizard-modal.test.tsx
 create mode 100644 ui/components/providers/wizard/steps/dynamic-credentials-step.test.tsx
 create mode 100644 ui/components/providers/wizard/steps/dynamic-credentials-step.tsx
 create mode 100644 ui/components/providers/workflow/forms/connect-account-form.test.tsx
 create mode 100644 ui/components/providers/workflow/provider-credential-fields.test.tsx
 create mode 100644 ui/components/providers/workflow/provider-credential-fields.tsx
 create mode 100644 ui/components/registry/registry-access-dialog.tsx
 create mode 100644 ui/components/registry/registry-artifact-card.integration.test.tsx
 create mode 100644 ui/components/registry/registry-artifact-card.tsx
 create mode 100644 ui/components/registry/registry-artifact-grid.tsx
 create mode 100644 ui/components/registry/registry-artifact-task-handler.test.tsx
 create mode 100644 ui/components/registry/registry-artifact-task-handler.ts
 create mode 100644 ui/components/registry/registry-credential-banner.tsx
 create mode 100644 ui/components/registry/registry-credential-task-handler.test.ts
 create mode 100644 ui/components/registry/registry-credential-task-handler.ts
 create mode 100644 ui/components/registry/registry-explorer.integration.test.tsx
 create mode 100644 ui/components/registry/registry-explorer.model.test.ts
 create mode 100644 ui/components/registry/registry-explorer.model.ts
 create mode 100644 ui/components/registry/registry-explorer.tsx
 create mode 100644 ui/components/registry/registry-remove-dialog.tsx
 create mode 100644 ui/components/registry/registry-toolbar.tsx
 create mode 100644 ui/components/registry/use-registry-refresh.ts
 create mode 100644 ui/components/shadcn/toast/Toaster.integration.test.tsx
 create mode 100644 ui/lib/auth/current-user.test.ts
 create mode 100644 ui/lib/auth/current-user.ts
 create mode 100644 ui/lib/provider-credentials/fixtures/openai-credential-schema.json
 create mode 100644 ui/lib/provider-credentials/fixtures/template-credential-schema.json
 create mode 100644 ui/lib/provider-credentials/provider-credential-schema.test.ts
 create mode 100644 ui/lib/provider-credentials/provider-credential-schema.ts
 create mode 100644 ui/lib/provider-credentials/provider-credential-values.test.ts
 create mode 100644 ui/lib/provider-credentials/provider-credential-values.ts
 create mode 100644 ui/lib/provider-helpers.test.ts
 create mode 100644 ui/lib/registry/access.server.test.ts
 create mode 100644 ui/lib/registry/access.server.ts
 create mode 100644 ui/lib/registry/access.test.ts
 create mode 100644 ui/lib/registry/access.ts
 create mode 100644 ui/lib/registry/artifact-execution.test.ts
 create mode 100644 ui/lib/registry/artifact-execution.ts
 create mode 100644 ui/lib/registry/artifact-notifications.tsx
 create mode 100644 ui/lib/registry/artifacts.ts
 create mode 100644 ui/lib/registry/credential-execution.test.ts
 create mode 100644 ui/lib/registry/credential-execution.ts
 create mode 100644 ui/lib/registry/credential-result.ts
 create mode 100644 ui/lib/registry/credential-task.test.ts
 create mode 100644 ui/lib/registry/credential-task.ts
 create mode 100644 ui/lib/registry/presentation.test.ts
 create mode 100644 ui/lib/registry/presentation.ts
 create mode 100644 ui/lib/registry/provider-options.test.ts
 create mode 100644 ui/lib/registry/provider-options.ts
 create mode 100644 ui/playwright.base.ts
 create mode 100644 ui/playwright.registry.config.ts
 create mode 100644 ui/proxy.registry.test.ts
 create mode 100644 ui/store/ui/store-initializer.test.tsx
 create mode 100644 ui/tests/registry/add-provider-tour-report.md
 create mode 100644 ui/tests/registry/controlled-registry-api.mts
 create mode 100644 ui/tests/registry/controlled-registry-fixture.ts
 create mode 100644 ui/tests/registry/evidence/registry-catalog-desktop-dark.png
 create mode 100644 ui/tests/registry/evidence/registry-catalog-desktop-light.png
 create mode 100644 ui/tests/registry/evidence/registry-catalog-mobile-dark.png
 create mode 100644 ui/tests/registry/evidence/registry-catalog-tablet-light.png
 create mode 100644 ui/tests/registry/evidence/registry-provider-credentials.png
 create mode 100644 ui/tests/registry/evidence/registry-provider-scan-completed.png
 create mode 100644 ui/tests/registry/evidence/registry-provider-selector.png
 create mode 100644 ui/tests/registry/registry-page.ts
 create mode 100644 ui/tests/registry/registry.md
 create mode 100644 ui/tests/registry/registry.spec.ts
 create mode 100644 ui/tests/registry/validation.md
 create mode 100644 ui/tests/setups/manage-registry.auth.setup.ts
 create mode 100644 ui/types/dynamic-provider-form.test.ts
 create mode 100644 ui/types/provider-schema.ts
 create mode 100644 ui/types/registry.ts

diff --git a/.github/test-impact.yml b/.github/test-impact.yml
index 874e9eba50..67c106d58b 100644
--- a/.github/test-impact.yml
+++ b/.github/test-impact.yml
@@ -451,6 +451,17 @@ modules:
     e2e:
       - ui/tests/home/**
 
+  - name: ui-registry
+    match:
+      - ui/actions/registry/**
+      - ui/app/**/registry/**
+      - ui/components/registry/**
+      - ui/lib/registry/**
+      - ui/tests/registry/**
+    tests: []
+    e2e:
+      - ui/tests/registry/**
+
   - name: ui-shadcn
     match:
       - ui/components/shadcn/**
diff --git a/.github/workflows/ui-e2e-tests-v2.yml b/.github/workflows/ui-e2e-tests-v2.yml
index 2a384597c3..2bf6db8a5a 100644
--- a/.github/workflows/ui-e2e-tests-v2.yml
+++ b/.github/workflows/ui-e2e-tests-v2.yml
@@ -10,12 +10,12 @@ on:
       - master
       - "v5.*"
     paths:
-      - '.github/workflows/ui-e2e-tests-v2.yml'
-      - '.github/test-impact.yml'
-      - 'ui/**'
-      - 'api/**'  # API changes can affect UI E2E
-      - '!ui/CHANGELOG.md'
-      - '!api/CHANGELOG.md'
+      - ".github/workflows/ui-e2e-tests-v2.yml"
+      - ".github/test-impact.yml"
+      - "ui/**"
+      - "api/**" # API changes can affect UI E2E
+      - "!ui/CHANGELOG.md"
+      - "!api/CHANGELOG.md"
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -40,11 +40,11 @@ jobs:
       (needs.impact-analysis.outputs.has-ui-e2e == 'true' || needs.impact-analysis.outputs.run-all == 'true')
     runs-on: ubuntu-latest
     env:
-      AUTH_SECRET: 'fallback-ci-secret-for-testing'
+      AUTH_SECRET: "fallback-ci-secret-for-testing"
       AUTH_TRUST_HOST: true
-      NEXTAUTH_URL: 'http://localhost:3000'
-      AUTH_URL: 'http://localhost:3000'
-      UI_API_BASE_URL: 'http://localhost:8080/api/v1'
+      NEXTAUTH_URL: "http://localhost:3000"
+      AUTH_URL: "http://localhost:3000"
+      UI_API_BASE_URL: "http://localhost:8080/api/v1"
       E2E_ADMIN_USER: ${{ secrets.E2E_ADMIN_USER }}
       E2E_ADMIN_PASSWORD: ${{ secrets.E2E_ADMIN_PASSWORD }}
       E2E_AWS_PROVIDER_ACCOUNT_ID: ${{ secrets.E2E_AWS_PROVIDER_ACCOUNT_ID }}
@@ -60,7 +60,7 @@ jobs:
       E2E_M365_SECRET_ID: ${{ secrets.E2E_M365_SECRET_ID }}
       E2E_M365_TENANT_ID: ${{ secrets.E2E_M365_TENANT_ID }}
       E2E_M365_CERTIFICATE_CONTENT: ${{ secrets.E2E_M365_CERTIFICATE_CONTENT }}
-      E2E_KUBERNETES_CONTEXT: 'kind-kind'
+      E2E_KUBERNETES_CONTEXT: "kind-kind"
       E2E_KUBERNETES_KUBECONFIG_PATH: /home/runner/.kube/config
       E2E_GCP_BASE64_SERVICE_ACCOUNT_KEY: ${{ secrets.E2E_GCP_BASE64_SERVICE_ACCOUNT_KEY }}
       E2E_GCP_PROJECT_ID: ${{ secrets.E2E_GCP_PROJECT_ID }}
@@ -292,7 +292,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
-          node-version-file: 'ui/.nvmrc'
+          node-version-file: "ui/.nvmrc"
 
       - name: Setup pnpm
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0
@@ -337,60 +337,59 @@ jobs:
         if: steps.playwright-cache.outputs.cache-hit != 'true'
         run: pnpm run test:e2e:install
 
-      - name: Run E2E tests
+      - name: Run standard E2E tests
+        id: standard-e2e
         working-directory: ./ui
         run: |
           if [[ "${RUN_ALL_TESTS}" == "true" ]]; then
-            echo "Running ALL E2E tests..."
+            echo "Running all standard E2E tests..."
             pnpm run test:e2e
           else
-            echo "Running targeted E2E tests: ${E2E_TEST_PATHS}"
-            # Convert glob patterns to playwright test paths
-            # e.g., "ui/tests/providers/**" -> "tests/providers"
+            echo "Running targeted standard E2E tests: ${E2E_TEST_PATHS}"
             TEST_PATHS="${E2E_TEST_PATHS}"
-            # Remove ui/ prefix and convert ** to empty (playwright handles recursion)
             TEST_PATHS=$(echo "$TEST_PATHS" | sed 's|ui/||g' | sed 's|\*\*||g' | tr ' ' '\n' | sort -u)
-            # Drop auth setup helpers (not runnable test suites)
-            TEST_PATHS=$(echo "$TEST_PATHS" | grep -v '^tests/setups/')
-            # Safety net: if bare "tests/" appears (from broad patterns like ui/tests/**),
-            # expand to specific subdirs to avoid Playwright discovering setup files
+            TEST_PATHS=$(echo "$TEST_PATHS" | grep -vE '^tests/(setups|registry)/' || true)
+
             if echo "$TEST_PATHS" | grep -qx 'tests/'; then
-              echo "Expanding bare 'tests/' to specific subdirs (excluding setups)..."
               SPECIFIC_DIRS=""
               for dir in tests/*/; do
-                [[ "$dir" == "tests/setups/" ]] && continue
+                [[ "$dir" == "tests/setups/" || "$dir" == "tests/registry/" ]] && continue
                 SPECIFIC_DIRS="${SPECIFIC_DIRS}${dir}"$'\n'
               done
-              # Replace "tests/" with specific dirs, keep other paths
-              TEST_PATHS=$(echo "$TEST_PATHS" | grep -vx 'tests/')
+              TEST_PATHS=$(echo "$TEST_PATHS" | grep -vx 'tests/' || true)
               TEST_PATHS="${TEST_PATHS}"$'\n'"${SPECIFIC_DIRS}"
               TEST_PATHS=$(echo "$TEST_PATHS" | grep -v '^$' | sort -u)
             fi
-            if [[ -z "$TEST_PATHS" ]]; then
-              echo "No runnable E2E test paths after filtering setups"
-              exit 0
-            fi
-            # Filter out directories that don't contain any test files
+
             VALID_PATHS=""
-            while IFS= read -r p; do
-              [[ -z "$p" ]] && continue
-              if find "$p" -name '*.spec.ts' -o -name '*.test.ts' 2>/dev/null | head -1 | grep -q .; then
-                VALID_PATHS="${VALID_PATHS}${p}"$'\n'
+            while IFS= read -r path; do
+              [[ -z "$path" ]] && continue
+              if find "$path" -name '*.spec.ts' -o -name '*.test.ts' 2>/dev/null | head -1 | grep -q .; then
+                VALID_PATHS="${VALID_PATHS}${path}"$'\n'
               else
-                echo "Skipping empty test directory: $p"
+                echo "Skipping empty test directory: $path"
               fi
             done <<< "$TEST_PATHS"
             VALID_PATHS=$(echo "$VALID_PATHS" | grep -v '^$' || true)
-            if [[ -z "$VALID_PATHS" ]]; then
-              echo "No test files found in any resolved paths — skipping E2E"
-              exit 0
+
+            if [[ -n "$VALID_PATHS" ]]; then
+              TEST_PATHS=$(echo "$VALID_PATHS" | tr '\n' ' ')
+              echo "Resolved standard test paths: $TEST_PATHS"
+              read -ra test_paths <<< "$TEST_PATHS"
+              pnpm exec playwright test "${test_paths[@]}"
+            else
+              echo "No standard E2E test paths selected."
             fi
-            TEST_PATHS=$(echo "$VALID_PATHS" | tr '\n' ' ')
-            echo "Resolved test paths: $TEST_PATHS"
-            read -ra test_paths <<< "$TEST_PATHS"
-            pnpm exec playwright test "${test_paths[@]}"
           fi
 
+      - name: Run Registry fixture E2E tests
+        if: |
+          !cancelled() &&
+          (steps.standard-e2e.outcome == 'success' || steps.standard-e2e.outcome == 'failure') &&
+          (env.RUN_ALL_TESTS == 'true' || contains(format(' {0} ', env.E2E_TEST_PATHS), ' ui/tests/registry/'))
+        working-directory: ./ui
+        run: pnpm run test:e2e:registry
+
       - name: Upload test reports
         uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         if: failure()
diff --git a/docs/developer-guide/environment-variables.mdx b/docs/developer-guide/environment-variables.mdx
index e2bec0f94b..a6ba5c9d54 100644
--- a/docs/developer-guide/environment-variables.mdx
+++ b/docs/developer-guide/environment-variables.mdx
@@ -40,6 +40,16 @@ The former build-time variables map to the new runtime variables as follows:
 
 `UI_CLOUD_ENABLED` is a plain runtime boolean flag that enables Prowler Cloud behavior when set to the exact string `"true"` and defaults to off; unlike the other renamed variables it has no legacy fallback, so `NEXT_PUBLIC_IS_CLOUD_ENV` is no longer read.
 
+## Registry UI Rollout and Rollback
+
+`UI_REGISTRY_ENABLED` is an optional runtime flag for Prowler Cloud and Private Cloud. Registry is eligible only when both `UI_CLOUD_ENABLED` and `UI_REGISTRY_ENABLED` are the exact string `"true"` and the current user has the backend-authorized `manage_registry` permission. Unset, `"false"`, or malformed values fail closed. The flag defaults to off and is not a replacement for backend authorization. Registry access is independent of billing; Private Cloud can use it with `CLOUD_BILLING_ENABLED=false`.
+
+Roll out Registry only after the Registry backend dependency is deployed, intended roles have `manage_registry`, and acceptance with real credentials has exercised installation, provider account creation, credentials, connection, and scan launch. Deploy the UI with `UI_REGISTRY_ENABLED` unset or `"false"`; set it to `"true"` only in the prepared process environment, then restart or otherwise apply the environment update required by the platform. A Registry key must belong to the configured Registry environment; a production key does not authenticate against a development Registry.
+
+The catalog displays all artifacts, including built-ins and packages containing only checks or compliance frameworks. Only external provider artifacts support Add. After confirmed installation, open Providers and select the option labeled Registry to configure an account. Creating accounts and running scans also require the corresponding provider and scan permissions. Removing an artifact keeps existing provider accounts, but future connections or scans can fail until the artifact is installed again.
+
+To roll back, set `UI_REGISTRY_ENABLED=false` or remove it and apply the environment update. Proxy, page, and action checks deny on their next request. Navigation refreshes from server-authorized access when the page is requested again. Rollback does not delete Registry credentials, tenant artifact records, or provider accounts.
+
 The build-time-only Sentry variables used for source-map upload — `SENTRY_ORG`, `SENTRY_PROJECT`, `SENTRY_AUTH_TOKEN`, and `SENTRY_RELEASE` — keep their names, as they are not part of Prowler Local Server's runtime configuration.
 
 ## Enabling Third-Party Integrations
diff --git a/ui/Dockerfile b/ui/Dockerfile
index a7ff72e65f..278c8b8602 100644
--- a/ui/Dockerfile
+++ b/ui/Dockerfile
@@ -100,6 +100,8 @@ ENV HOSTNAME="0.0.0.0"
 #   - required: UI_API_BASE_URL, AUTH_URL, AUTH_SECRET (missing ⇒ fail fast at boot)
 #   - optional: UI_API_DOCS_URL
 #   - optional: UI_CLOUD_ENABLED ("true" only in Prowler Cloud deployments)
+#   - optional: UI_REGISTRY_ENABLED ("true" only after the Registry dependency,
+#     Cloud role grant, and controlled acceptance are ready; unset/false hides Registry)
 #   - gated integrations (load only when *_ENABLED="true"; the value is then
 #     required or boot fails). Their legacy names (NEXT_PUBLIC_SENTRY_*,
 #     NEXT_PUBLIC_GOOGLE_TAG_MANAGER_ID, POSTHOG_KEY/HOST) still work:
diff --git a/ui/actions/auth/auth.test.ts b/ui/actions/auth/auth.test.ts
index 1f20392bb8..adf04ebcf1 100644
--- a/ui/actions/auth/auth.test.ts
+++ b/ui/actions/auth/auth.test.ts
@@ -23,7 +23,7 @@ vi.mock("@/lib/sentry-breadcrumbs", () => ({
 
 import { createNewUser, getUserByMe } from "./auth";
 
-const userMeResponse = (roleAttributes: Record<string, boolean>) => ({
+const userMeResponse = (roleAttributes: Record<string, unknown>) => ({
   data: {
     type: "users",
     id: "019b1234-5678-7abc-9def-0123456789ab",
@@ -43,7 +43,7 @@ const userMeResponse = (roleAttributes: Record<string, boolean>) => ({
   ],
 });
 
-const mockUserMe = (roleAttributes: Record<string, boolean>) => {
+const mockUserMe = (roleAttributes: Record<string, unknown>) => {
   fetchMock.mockResolvedValue(
     new Response(JSON.stringify(userMeResponse(roleAttributes)), {
       status: 200,
@@ -178,6 +178,30 @@ describe("auth actions", () => {
     expect(result.permissions.manage_users).toBe(true);
   });
 
+  it("should carry an exact manage_registry permission into the session", async () => {
+    // Given
+    mockUserMe({ manage_registry: true });
+
+    // When
+    const result = await getUserByMe("access-token");
+
+    // Then
+    expect(result.permissions.manage_registry).toBe(true);
+  });
+
+  it.each([undefined, "true", "TRUE", 1])(
+    "should deny a malformed manage_registry value of %j",
+    async (manageRegistry) => {
+      // Given
+      mockUserMe({ manage_registry: manageRegistry });
+
+      // When
+      const result = await getUserByMe("access-token");
+
+      // Then
+      expect(result.permissions.manage_registry).toBe(false);
+    },
+  );
   it("should forward an abort signal when loading the current user", async () => {
     // Given
     mockUserMe({ manage_users: true });
diff --git a/ui/actions/auth/auth.ts b/ui/actions/auth/auth.ts
index 6d275bbf92..0cd5df4d94 100644
--- a/ui/actions/auth/auth.ts
+++ b/ui/actions/auth/auth.ts
@@ -4,7 +4,7 @@ import { AuthError } from "next-auth";
 
 import { signIn, signOut } from "@/auth.config";
 import { apiBaseUrl } from "@/lib";
-import { UserMeError } from "@/lib/auth-errors";
+import { fetchCurrentUser } from "@/lib/auth/current-user";
 import { addAuthEvent } from "@/lib/sentry-breadcrumbs";
 import type { UtmParams } from "@/lib/utm";
 import type { SignInFormData, SignUpFormData } from "@/types";
@@ -145,66 +145,15 @@ export const getUserByMe = async (
   accessToken: string,
   signal?: AbortSignal,
 ) => {
-  const url = new URL(`${apiBaseUrl}/users/me?include=roles`);
+  const currentUser = await fetchCurrentUser(accessToken, { signal });
 
-  try {
-    const response = await fetch(url.toString(), {
-      method: "GET",
-      headers: {
-        Accept: "application/vnd.api+json",
-        Authorization: `Bearer ${accessToken}`,
-      },
-      signal,
-    });
-
-    if (!response.ok) {
-      const errorMessage =
-        response.status === 401
-          ? "Invalid or expired token"
-          : response.status === 403
-            ? "Access denied"
-            : response.status === 404
-              ? "User not found"
-              : "Unable to load user";
-      throw new UserMeError(errorMessage, response.status);
-    }
-
-    const parsedResponse = await response.json();
-
-    const userRole = parsedResponse.included?.find(
-      (item: any) => item.type === "roles",
-    );
-
-    const permissions = {
-      manage_users: userRole.attributes.manage_users || false,
-      manage_account: userRole.attributes.manage_account || false,
-      manage_providers: userRole.attributes.manage_providers || false,
-      manage_scans: userRole.attributes.manage_scans || false,
-      manage_ingestions: userRole.attributes.manage_ingestions || false,
-      manage_integrations: userRole.attributes.manage_integrations || false,
-      manage_billing: userRole.attributes.manage_billing || false,
-      manage_alerts: userRole.attributes.manage_alerts || false,
-      manage_lighthouse_ai_configuration:
-        userRole.attributes.manage_lighthouse_ai_configuration || false,
-      unlimited_visibility: userRole.attributes.unlimited_visibility || false,
-    };
-
-    return {
-      name: parsedResponse.data.attributes.name,
-      email: parsedResponse.data.attributes.email,
-      company: parsedResponse.data.attributes.company_name,
-      dateJoined: parsedResponse.data.attributes.date_joined,
-      permissions,
-    };
-  } catch (error: unknown) {
-    if (error instanceof UserMeError) throw error;
-
-    throw new UserMeError(
-      error instanceof Error
-        ? error.message
-        : "Network error or server unreachable",
-    );
-  }
+  return {
+    name: currentUser.name,
+    email: currentUser.email,
+    company: currentUser.company,
+    dateJoined: currentUser.dateJoined,
+    permissions: currentUser.permissions,
+  };
 };
 
 export async function logOut() {
diff --git a/ui/actions/providers/dynamic-provider-credentials.test.ts b/ui/actions/providers/dynamic-provider-credentials.test.ts
new file mode 100644
index 0000000000..f8ab619bc8
--- /dev/null
+++ b/ui/actions/providers/dynamic-provider-credentials.test.ts
@@ -0,0 +1,180 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+import openaiSchema from "@/lib/provider-credentials/fixtures/openai-credential-schema.json";
+import templateSchema from "@/lib/provider-credentials/fixtures/template-credential-schema.json";
+const { fetchMock, getProviderSchemas, getAuthHeaders, revalidatePath } =
+  vi.hoisted(() => ({
+    fetchMock: vi.fn(),
+    getProviderSchemas: vi.fn(),
+    getAuthHeaders: vi.fn(),
+    revalidatePath: vi.fn(),
+  }));
+vi.mock("@/lib", () => ({
+  apiBaseUrl: "https://api.test/api/v1",
+  getAuthHeaders,
+}));
+vi.mock("next/cache", () => ({ revalidatePath }));
+vi.mock("./provider-schemas", () => ({ getProviderSchemas }));
+
+import { saveDynamicProviderCredentials } from "./dynamic-provider-credentials";
+
+const input = {
+  providerId: "account",
+  secretType: "api_key",
+  secret: { token: "private-value" },
+};
+const response = (body: unknown, status = 200) =>
+  new Response(JSON.stringify(body), { status });
+const account = (secretId: string | null = null) => ({
+  data: {
+    id: "account",
+    attributes: { provider: "acme" },
+    relationships: { secret: { data: secretId ? { id: secretId } : null } },
+  },
+});
+
+describe("dynamic provider credential actions", () => {
+  beforeEach(() => {
+    vi.stubGlobal("fetch", fetchMock);
+    fetchMock.mockReset();
+    getAuthHeaders.mockResolvedValue({ Authorization: "Bearer test" });
+    getProviderSchemas.mockResolvedValue({
+      status: "success",
+      providerType: "acme",
+      secretTypes: {
+        api_key: {
+          type: "object",
+          description: openaiSchema.description,
+          properties: {
+            token: { type: "string", format: "password", writeOnly: true },
+          },
+          required: ["token"],
+        },
+      },
+    });
+  });
+  it("validates the account's current schema and sends JSON credentials without the builtin mapping", async () => {
+    fetchMock
+      .mockResolvedValueOnce(response(account()))
+      .mockResolvedValueOnce(response({ data: { id: "saved" } }, 201));
+    expect(await saveDynamicProviderCredentials(input)).toEqual({
+      status: "saved",
+      secretId: "saved",
+    });
+    expect(getProviderSchemas).toHaveBeenCalledWith("acme");
+    const [url, request] = fetchMock.mock.calls[1];
+    expect(url).toBe("https://api.test/api/v1/providers/secrets");
+    expect(JSON.parse(request.body).data).toEqual({
+      type: "provider-secrets",
+      attributes: {
+        secret_type: "api_key",
+        secret: { token: "private-value" },
+      },
+      relationships: {
+        provider: { data: { id: "account", type: "providers" } },
+      },
+    });
+  });
+  it("updates the authoritative existing secret, including after a retry", async () => {
+    fetchMock
+      .mockResolvedValueOnce(response(account("existing")))
+      .mockResolvedValueOnce(response({ data: { id: "existing" } }));
+    expect((await saveDynamicProviderCredentials(input)).status).toBe("saved");
+    expect(
+      fetchMock.mock.calls[1][0].endsWith("/providers/secrets/existing"),
+    ).toBe(true);
+    expect(fetchMock.mock.calls[1][1].method).toBe("PATCH");
+  });
+  it("validates and sends Template credentials with their JSON types", async () => {
+    // Given
+    const templateAccount = account();
+    templateAccount.data.attributes.provider = "template";
+    getProviderSchemas.mockResolvedValue({
+      status: "success",
+      providerType: "template",
+      secretTypes: { static: templateSchema },
+    });
+    fetchMock
+      .mockResolvedValueOnce(response(templateAccount))
+      .mockResolvedValueOnce(response({ data: { id: "saved" } }, 201));
+    const secret = {
+      api_url: "https://api.example.test",
+      api_key: "fixture-key-not-a-secret",
+      verify_tls: false,
+      timeout_seconds: 60,
+    };
+
+    // When / Then
+    expect(
+      await saveDynamicProviderCredentials({
+        ...input,
+        secretType: "static",
+        secret,
+      }),
+    ).toEqual({
+      status: "saved",
+      secretId: "saved",
+    });
+    expect(JSON.parse(fetchMock.mock.calls[1][1].body).data.attributes).toEqual(
+      {
+        secret_type: "static",
+        secret,
+      },
+    );
+
+    // Server-side validation also rejects requests that bypass the form.
+    fetchMock.mockReset().mockResolvedValueOnce(response(templateAccount));
+    expect(
+      await saveDynamicProviderCredentials({
+        ...input,
+        secretType: "static",
+        secret: { ...secret, timeout_seconds: 301 },
+      }),
+    ).toMatchObject({
+      status: "invalid",
+      errors: { timeout_seconds: expect.any(String) },
+    });
+    expect(fetchMock).toHaveBeenCalledTimes(1);
+  });
+  it.each([
+    { ...input, secretType: "invented" },
+    { ...input, secret: { token: "" } },
+    { ...input, secret: { token: "x", unknown: "hidden" } },
+  ])("does not write invalid credentials", async (values) => {
+    fetchMock.mockResolvedValueOnce(response(account()));
+    expect((await saveDynamicProviderCredentials(values)).status).not.toBe(
+      "saved",
+    );
+    expect(fetchMock).toHaveBeenCalledTimes(1);
+  });
+  it("fails closed for an absent schema, revoked permission, and malformed accounts", async () => {
+    getProviderSchemas.mockResolvedValue({
+      status: "success",
+      providerType: "acme",
+      secretTypes: {},
+    });
+    fetchMock.mockResolvedValueOnce(response(account()));
+    expect((await saveDynamicProviderCredentials(input)).status).toBe(
+      "schema_unavailable",
+    );
+    fetchMock.mockResolvedValueOnce(response({}, 403));
+    expect((await saveDynamicProviderCredentials(input)).status).toBe(
+      "access_denied",
+    );
+    fetchMock.mockResolvedValueOnce(response({}));
+    expect((await saveDynamicProviderCredentials(input)).status).toBe("error");
+    expect(fetchMock.mock.calls.every(([, options]) => !options.method)).toBe(
+      true,
+    );
+  });
+  it("does not echo a rejected secret in errors", async () => {
+    fetchMock
+      .mockResolvedValueOnce(response(account()))
+      .mockResolvedValueOnce(
+        response({ errors: [{ detail: "private-value invalid" }] }, 400),
+      );
+    expect(
+      JSON.stringify(await saveDynamicProviderCredentials(input)),
+    ).not.toContain("private-value");
+  });
+});
diff --git a/ui/actions/providers/dynamic-provider-credentials.ts b/ui/actions/providers/dynamic-provider-credentials.ts
new file mode 100644
index 0000000000..79975fa2e7
--- /dev/null
+++ b/ui/actions/providers/dynamic-provider-credentials.ts
@@ -0,0 +1,115 @@
+"use server";
+
+import { revalidatePath } from "next/cache";
+import { z } from "zod";
+
+import { apiBaseUrl, getAuthHeaders } from "@/lib";
+import { parseRegistryCredentialSchema } from "@/lib/provider-credentials/provider-credential-schema";
+import { validateCredentialValues } from "@/lib/provider-credentials/provider-credential-values";
+import { isKnownProviderType } from "@/types/providers";
+
+import { getProviderSchemas } from "./provider-schemas";
+
+const resourceId = z.string().regex(/^[a-zA-Z0-9_-]{1,100}$/);
+const inputSchema = z.object({
+  providerId: resourceId,
+  secretType: z.string().min(1),
+  secret: z.unknown(),
+});
+const accountSchema = z.object({
+  data: z.object({
+    id: resourceId,
+    attributes: z.object({ provider: z.string() }),
+    relationships: z.object({
+      secret: z.object({ data: z.object({ id: resourceId }).nullable() }),
+    }),
+  }),
+});
+
+export type DynamicCredentialsResult =
+  | { status: "saved"; secretId: string }
+  | { status: "invalid"; errors: Record<string, string> }
+  | { status: "access_denied" | "schema_unavailable" | "error" };
+
+export async function saveDynamicProviderCredentials(
+  input: unknown,
+): Promise<DynamicCredentialsResult> {
+  const parsed = inputSchema.safeParse(input);
+  if (!parsed.success)
+    return {
+      status: "invalid",
+      errors: { _form: "Check the provider and credential fields." },
+    };
+  const { providerId, secretType, secret } = parsed.data;
+  try {
+    const headers = await getAuthHeaders({ contentType: true });
+    const accountResponse = await fetch(
+      `${apiBaseUrl}/providers/${encodeURIComponent(providerId)}`,
+      { headers, cache: "no-store" },
+    );
+    if (accountResponse.status === 401 || accountResponse.status === 403)
+      return { status: "access_denied" };
+    if (!accountResponse.ok) return { status: "error" };
+    const account = accountSchema.safeParse(await accountResponse.json());
+    if (
+      !account.success ||
+      account.data.data.id !== providerId ||
+      isKnownProviderType(account.data.data.attributes.provider)
+    )
+      return { status: "error" };
+    const schemas = await getProviderSchemas(
+      account.data.data.attributes.provider,
+    );
+    if (schemas.status === "access_denied") return { status: "access_denied" };
+    if (
+      schemas.status !== "success" ||
+      !Object.hasOwn(schemas.secretTypes, secretType)
+    )
+      return { status: "schema_unavailable" };
+    const schema = parseRegistryCredentialSchema(
+      schemas.secretTypes[secretType],
+    );
+    if (!schema) return { status: "schema_unavailable" };
+    const validated = validateCredentialValues(schema, secret);
+    if (!validated.valid)
+      return { status: "invalid", errors: validated.errors };
+
+    // Read the relationship again on every save so retries update a secret that
+    // was already created, including after a lost response.
+    const secretId = account.data.data.relationships.secret.data?.id;
+    const response = await fetch(
+      `${apiBaseUrl}/providers/secrets${secretId ? `/${encodeURIComponent(secretId)}` : ""}`,
+      {
+        method: secretId ? "PATCH" : "POST",
+        headers,
+        cache: "no-store",
+        body: JSON.stringify({
+          data: {
+            type: "provider-secrets",
+            ...(secretId
+              ? { id: secretId }
+              : {
+                  relationships: {
+                    provider: { data: { id: providerId, type: "providers" } },
+                  },
+                }),
+            attributes: { secret_type: secretType, secret: validated.secret },
+          },
+        }),
+      },
+    );
+    if (response.status === 401 || response.status === 403)
+      return { status: "access_denied" };
+    // API validation details may echo credential values. Keep them out of both
+    // client errors and application logs.
+    if (!response.ok) return { status: "error" };
+    const saved = z
+      .object({ data: z.object({ id: resourceId }) })
+      .safeParse(await response.json());
+    if (!saved.success) return { status: "error" };
+    revalidatePath("/providers");
+    return { status: "saved", secretId: saved.data.data.id };
+  } catch {
+    return { status: "error" };
+  }
+}
diff --git a/ui/actions/providers/index.ts b/ui/actions/providers/index.ts
index 5532383f5f..d3580b7346 100644
--- a/ui/actions/providers/index.ts
+++ b/ui/actions/providers/index.ts
@@ -1 +1,2 @@
+export * from "./provider-schemas";
 export * from "./providers";
diff --git a/ui/actions/providers/provider-schemas.adapter.test.ts b/ui/actions/providers/provider-schemas.adapter.test.ts
new file mode 100644
index 0000000000..32c5e95fce
--- /dev/null
+++ b/ui/actions/providers/provider-schemas.adapter.test.ts
@@ -0,0 +1,83 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  adaptProviderSchemas,
+  normalizeProviderType,
+} from "./provider-schemas.adapter";
+
+describe("provider schemas adapter", () => {
+  it("adapts a matching provider schema resource without interpreting schema keywords", () => {
+    // Given
+    const payload = {
+      data: {
+        type: "provider-schemas",
+        id: "acme",
+        attributes: {
+          secret_types: {
+            credentials: {
+              type: "object",
+              properties: { access_key: { type: "string" } },
+            },
+          },
+        },
+      },
+    };
+
+    // When
+    const result = adaptProviderSchemas(payload, "acme");
+
+    // Then
+    expect(result).toEqual({
+      status: "success",
+      providerType: "acme",
+      secretTypes: payload.data.attributes.secret_types,
+    });
+  });
+
+  it.each([
+    ["null", null],
+    ["string scalar", "secret"],
+    ["number scalar", 1],
+    ["boolean scalar", true],
+  ])("rejects %s secret_types values", (_description, secretType) => {
+    // Given
+    const payload = {
+      data: {
+        type: "provider-schemas",
+        id: "acme",
+        attributes: { secret_types: { credentials: secretType } },
+      },
+    };
+
+    // When
+    const result = adaptProviderSchemas(payload, "acme");
+
+    // Then
+    expect(result).toBeNull();
+  });
+
+  it("rejects malformed or contradictory documents without reading schema keywords", () => {
+    // Given
+    const document = {
+      data: {
+        type: "provider-schemas",
+        id: "aws",
+        attributes: { secret_types: {} },
+      },
+    };
+
+    // When
+    const results = [
+      { ...document, errors: [] },
+      { data: { ...document.data, id: "aws " } },
+      { data: { ...document.data, type: "providers" } },
+      { data: { ...document.data, attributes: { secret_types: { key: [] } } } },
+    ].map((payload) => adaptProviderSchemas(payload, "aws"));
+
+    // Then
+    expect(results).toEqual([null, null, null, null]);
+    expect(normalizeProviderType(" AWS ")).toBe("aws");
+    expect(normalizeProviderType(" ")).toBeNull();
+    expect(normalizeProviderType("a".repeat(51))).toBeNull();
+  });
+});
diff --git a/ui/actions/providers/provider-schemas.adapter.ts b/ui/actions/providers/provider-schemas.adapter.ts
new file mode 100644
index 0000000000..9187afcf8f
--- /dev/null
+++ b/ui/actions/providers/provider-schemas.adapter.ts
@@ -0,0 +1,38 @@
+import { z } from "zod";
+
+import {
+  PROVIDER_SCHEMA_STATUS,
+  type ProviderSchemasSuccessResult,
+} from "@/types/provider-schema";
+
+const providerTypeSchema = z.string().trim().toLowerCase().min(1).max(50);
+const providerSchemasDocumentSchema = z.strictObject({
+  data: z.strictObject({
+    type: z.literal("provider-schemas"),
+    id: z.string().min(1).max(50),
+    attributes: z.strictObject({
+      secret_types: z.record(z.string(), z.record(z.string(), z.unknown())),
+    }),
+  }),
+});
+
+export function normalizeProviderType(value: unknown): string | null {
+  const parsed = providerTypeSchema.safeParse(value);
+  return parsed.success ? parsed.data : null;
+}
+
+export function adaptProviderSchemas(
+  payload: unknown,
+  normalizedProviderType: string,
+): ProviderSchemasSuccessResult | null {
+  const parsed = providerSchemasDocumentSchema.safeParse(payload);
+  if (!parsed.success || parsed.data.data.id !== normalizedProviderType) {
+    return null;
+  }
+
+  return {
+    status: PROVIDER_SCHEMA_STATUS.SUCCESS,
+    providerType: parsed.data.data.id,
+    secretTypes: parsed.data.data.attributes.secret_types,
+  };
+}
diff --git a/ui/actions/providers/provider-schemas.test.ts b/ui/actions/providers/provider-schemas.test.ts
new file mode 100644
index 0000000000..0f6ead52f6
--- /dev/null
+++ b/ui/actions/providers/provider-schemas.test.ts
@@ -0,0 +1,138 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const { authMock, fetchMock } = vi.hoisted(() => ({
+  authMock: vi.fn(),
+  fetchMock: vi.fn(),
+}));
+
+vi.mock("@/auth.config", () => ({ auth: authMock }));
+vi.mock("@/lib", () => ({ apiBaseUrl: "https://api.test/api/v1" }));
+
+import { getProviderSchemas } from "./provider-schemas";
+
+const schemaResponse = (providerType = "acme") =>
+  new Response(
+    JSON.stringify({
+      data: {
+        type: "provider-schemas",
+        id: providerType,
+        attributes: { secret_types: {} },
+      },
+    }),
+    { status: 200 },
+  );
+
+describe("getProviderSchemas", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    vi.stubGlobal("fetch", fetchMock);
+    authMock.mockResolvedValue({ accessToken: "access-token" });
+    fetchMock.mockResolvedValue(schemaResponse());
+  });
+
+  it("requests the normalized provider schema with authenticated JSON:API headers", async () => {
+    // When
+    const result = await getProviderSchemas(" ACME ");
+
+    // Then
+    expect(result).toEqual({
+      status: "success",
+      providerType: "acme",
+      secretTypes: {},
+    });
+    expect(fetchMock).toHaveBeenCalledWith(
+      "https://api.test/api/v1/provider-schemas/acme",
+      {
+        cache: "no-store",
+        headers: {
+          Accept: "application/vnd.api+json",
+          Authorization: "Bearer access-token",
+        },
+      },
+    );
+  });
+
+  it("does not fetch invalid input and encodes a normalized path segment", async () => {
+    // Given
+    fetchMock.mockResolvedValueOnce(schemaResponse("acme/team"));
+
+    // When
+    const invalid = await Promise.all([
+      getProviderSchemas(" "),
+      getProviderSchemas("a".repeat(51)),
+    ]);
+    const encoded = await getProviderSchemas(" ACME/TEAM ");
+
+    // Then
+    expect(invalid).toEqual([{ status: "error" }, { status: "error" }]);
+    expect(encoded).toMatchObject({
+      status: "success",
+      providerType: "acme/team",
+    });
+    expect(fetchMock).toHaveBeenCalledOnce();
+    expect(fetchMock).toHaveBeenCalledWith(
+      "https://api.test/api/v1/provider-schemas/acme%2Fteam",
+      expect.any(Object),
+    );
+  });
+
+  it("denies an unauthenticated request without fetching", async () => {
+    // Given
+    authMock.mockResolvedValue({});
+
+    // When
+    const result = await getProviderSchemas("acme");
+
+    // Then
+    expect(result).toEqual({ status: "access_denied" });
+    expect(fetchMock).not.toHaveBeenCalled();
+  });
+
+  it.each([
+    [401, { status: "access_denied" }],
+    [403, { status: "access_denied" }],
+    [404, { status: "not_found" }],
+    [409, { status: "unavailable" }],
+    [500, { status: "error" }],
+  ])("maps HTTP %i to a safe result", async (status, expected) => {
+    // Given
+    fetchMock.mockResolvedValueOnce(
+      new Response(JSON.stringify({ errors: [{ detail: "private detail" }] }), {
+        status,
+      }),
+    );
+
+    // When
+    const result = await getProviderSchemas("acme");
+
+    // Then
+    expect(result).toEqual(expected);
+    expect(JSON.stringify(result)).not.toContain("private detail");
+  });
+
+  it("returns a generic safe error when fetch rejects", async () => {
+    // Given
+    const rejection = new Error("connection detail must not leak");
+    fetchMock.mockRejectedValueOnce(rejection);
+
+    // When
+    const result = await getProviderSchemas("acme");
+
+    // Then
+    expect(result).toEqual({ status: "error" });
+    expect(JSON.stringify(result)).not.toContain(rejection.message);
+  });
+
+  it("distinguishes a malformed success document from a transport failure", async () => {
+    // Given
+    fetchMock.mockResolvedValueOnce(
+      new Response(JSON.stringify({ errors: [] })),
+    );
+
+    // When
+    const result = await getProviderSchemas("acme");
+
+    // Then
+    expect(result).toEqual({ status: "malformed" });
+  });
+});
diff --git a/ui/actions/providers/provider-schemas.ts b/ui/actions/providers/provider-schemas.ts
new file mode 100644
index 0000000000..afdf0868d2
--- /dev/null
+++ b/ui/actions/providers/provider-schemas.ts
@@ -0,0 +1,61 @@
+"use server";
+
+import { auth } from "@/auth.config";
+import { apiBaseUrl } from "@/lib";
+import {
+  PROVIDER_SCHEMA_STATUS,
+  type ProviderSchemasResult,
+} from "@/types/provider-schema";
+
+import {
+  adaptProviderSchemas,
+  normalizeProviderType,
+} from "./provider-schemas.adapter";
+
+export async function getProviderSchemas(
+  providerType: unknown,
+): Promise<ProviderSchemasResult> {
+  const normalizedProviderType = normalizeProviderType(providerType);
+  if (!normalizedProviderType) return { status: PROVIDER_SCHEMA_STATUS.ERROR };
+
+  let accessToken: string | undefined;
+  try {
+    accessToken = (await auth())?.accessToken?.trim();
+  } catch {
+    return { status: PROVIDER_SCHEMA_STATUS.ERROR };
+  }
+  if (!accessToken) return { status: PROVIDER_SCHEMA_STATUS.ACCESS_DENIED };
+
+  let response: Response;
+  try {
+    response = await fetch(
+      `${apiBaseUrl}/provider-schemas/${encodeURIComponent(normalizedProviderType)}`,
+      {
+        cache: "no-store",
+        headers: {
+          Accept: "application/vnd.api+json",
+          Authorization: `Bearer ${accessToken}`,
+        },
+      },
+    );
+  } catch {
+    return { status: PROVIDER_SCHEMA_STATUS.ERROR };
+  }
+
+  if (response.status === 401 || response.status === 403) {
+    return { status: PROVIDER_SCHEMA_STATUS.ACCESS_DENIED };
+  }
+  if (response.status === 404) {
+    return { status: PROVIDER_SCHEMA_STATUS.NOT_FOUND };
+  }
+  if (response.status === 409) {
+    return { status: PROVIDER_SCHEMA_STATUS.UNAVAILABLE };
+  }
+  if (!response.ok) return { status: PROVIDER_SCHEMA_STATUS.ERROR };
+
+  const schema = adaptProviderSchemas(
+    await response.json().catch(() => undefined),
+    normalizedProviderType,
+  );
+  return schema ?? { status: PROVIDER_SCHEMA_STATUS.MALFORMED };
+}
diff --git a/ui/actions/providers/registry-provider.test.ts b/ui/actions/providers/registry-provider.test.ts
new file mode 100644
index 0000000000..188cf43357
--- /dev/null
+++ b/ui/actions/providers/registry-provider.test.ts
@@ -0,0 +1,113 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const {
+  getInstalledRegistryProviderOptions,
+  addProvider,
+  getProviders,
+  updateProvider,
+} = vi.hoisted(() => ({
+  getInstalledRegistryProviderOptions: vi.fn(),
+  addProvider: vi.fn(),
+  getProviders: vi.fn(),
+  updateProvider: vi.fn(),
+}));
+vi.mock("@/actions/registry/registry", () => ({
+  getInstalledRegistryProviderOptions,
+}));
+vi.mock("./providers", () => ({ addProvider, getProviders, updateProvider }));
+
+import { addRegistryProvider } from "./registry-provider";
+
+const formData = (alias = "Test") => {
+  const form = new FormData();
+  form.set("providerType", "acme");
+  form.set("providerUid", "account");
+  form.set("providerAlias", alias);
+  return form;
+};
+describe("Registry provider account creation", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    getInstalledRegistryProviderOptions.mockResolvedValue({
+      status: "ready",
+      options: [{ type: "acme", label: "Acme" }],
+    });
+    getProviders.mockResolvedValue({ data: [] });
+  });
+  it("refuses removed artifacts and revoked permission before creating an account", async () => {
+    getInstalledRegistryProviderOptions
+      .mockResolvedValueOnce({ status: "access_denied" })
+      .mockResolvedValueOnce({ status: "ready", options: [] });
+    expect((await addRegistryProvider(formData()))?.errors).toBeDefined();
+    expect((await addRegistryProvider(formData()))?.errors).toBeDefined();
+    expect(addProvider).not.toHaveBeenCalled();
+  });
+  it("reuses a previously created account after a failed credential attempt or lost response", async () => {
+    const existing = {
+      id: "existing",
+      attributes: { provider: "acme", uid: "account", alias: "Test" },
+    };
+    getProviders.mockResolvedValue({ data: [existing] });
+    expect(await addRegistryProvider(formData())).toEqual({ data: existing });
+    expect(addProvider).not.toHaveBeenCalled();
+    expect(updateProvider).not.toHaveBeenCalled();
+  });
+  it.each(["Test", "", " Edited "])(
+    "saves alias %j before resuming credentials for an existing account",
+    async (alias) => {
+      // Given
+      const existing = {
+        id: "existing",
+        attributes: { provider: "acme", uid: "account", alias: "Original" },
+      };
+      const updated = {
+        ...existing,
+        attributes: { ...existing.attributes, alias: alias.trim() },
+      };
+      getProviders.mockResolvedValue({ data: [existing] });
+      updateProvider.mockResolvedValue({ data: updated });
+
+      // When
+      const result = await addRegistryProvider(formData(alias));
+
+      // Then
+      expect(result).toEqual({ data: updated });
+      expect(Object.fromEntries(updateProvider.mock.calls[0][0])).toEqual({
+        providerId: "existing",
+        providerAlias: alias.trim(),
+      });
+      expect(addProvider).not.toHaveBeenCalled();
+    },
+  );
+  it("keeps alias update failures visible instead of resuming with stale details", async () => {
+    // Given
+    const failure = {
+      errors: [
+        {
+          detail: "Alias is invalid",
+          source: { pointer: "/data/attributes/alias" },
+        },
+      ],
+    };
+    getProviders.mockResolvedValue({
+      data: [
+        {
+          id: "existing",
+          attributes: { provider: "acme", uid: "account", alias: "Original" },
+        },
+      ],
+    });
+    updateProvider.mockResolvedValue(failure);
+
+    // When / Then
+    await expect(addRegistryProvider(formData())).resolves.toEqual(failure);
+    expect(addProvider).not.toHaveBeenCalled();
+  });
+  it("creates a validated installed provider account", async () => {
+    addProvider.mockResolvedValue({ data: { id: "new" } });
+    expect(await addRegistryProvider(formData())).toEqual({
+      data: { id: "new" },
+    });
+    expect(addProvider).toHaveBeenCalledOnce();
+  });
+});
diff --git a/ui/actions/providers/registry-provider.ts b/ui/actions/providers/registry-provider.ts
new file mode 100644
index 0000000000..68fa43ce40
--- /dev/null
+++ b/ui/actions/providers/registry-provider.ts
@@ -0,0 +1,57 @@
+"use server";
+
+import { getInstalledRegistryProviderOptions } from "@/actions/registry/registry";
+import { ProviderCredentialFields } from "@/lib/provider-credentials/provider-credential-fields";
+import { createAddProviderFormSchema } from "@/types/formSchemas";
+import { isKnownProviderType } from "@/types/providers";
+
+import { addProvider, getProviders, updateProvider } from "./providers";
+
+export async function addRegistryProvider(formData: FormData) {
+  const unavailable = {
+    errors: [
+      {
+        detail:
+          "This Registry provider is no longer available. Check your permissions and installed artifacts, then try again.",
+        source: { pointer: "/data/attributes/provider" },
+      },
+    ],
+  };
+  try {
+    const discovery = await getInstalledRegistryProviderOptions();
+    if (discovery.status !== "ready") return unavailable;
+    const values = createAddProviderFormSchema(
+      discovery.options.map((option) => option.type),
+    ).safeParse(Object.fromEntries(formData));
+    if (!values.success || isKnownProviderType(values.data.providerType))
+      return unavailable;
+    const { providerType, providerUid } = values.data;
+    const existing = await getProviders({
+      filters: { "filter[provider]": providerType, "filter[uid]": providerUid },
+      pageSize: 100,
+    });
+    // A previous request may have created the account before its response was
+    // lost. Reuse that identity when returning to the credential step.
+    if (!existing?.data) return unavailable;
+    const account = existing.data.find(
+      (provider) =>
+        provider.attributes.provider === providerType &&
+        provider.attributes.uid === providerUid,
+    );
+    if (account) {
+      const alias = values.data.providerAlias.trim();
+      if ((account.attributes.alias ?? "") === alias) return { data: account };
+      const update = new FormData();
+      update.set(ProviderCredentialFields.PROVIDER_ID, account.id);
+      update.set(ProviderCredentialFields.PROVIDER_ALIAS, alias);
+      return await updateProvider(update);
+    }
+    const validated = new FormData();
+    Object.entries(values.data).forEach(([key, value]) => {
+      if (value !== undefined) validated.set(key, value);
+    });
+    return await addProvider(validated);
+  } catch {
+    return unavailable;
+  }
+}
diff --git a/ui/actions/registry/registry.adapter.test.ts b/ui/actions/registry/registry.adapter.test.ts
new file mode 100644
index 0000000000..dc35be5060
--- /dev/null
+++ b/ui/actions/registry/registry.adapter.test.ts
@@ -0,0 +1,696 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  REGISTRY_ENDPOINT,
+  REGISTRY_FAILURE,
+  REGISTRY_SUBMISSION,
+} from "@/types/registry";
+
+import {
+  adaptRegistryCredentialStatus,
+  adaptRegistryTenantArtifacts,
+  classifyRegistryFailure,
+  collectCompleteRegistryCatalog,
+  parseRegistryArtifactSubmission,
+} from "./registry.adapter";
+
+const credentialPayload = {
+  data: {
+    attributes: {
+      configured: true,
+      is_valid: true,
+      scopes: ["catalog:read"],
+      last_validated_at: "2026-03-20T12:00:00Z",
+      validation_status: "valid",
+      validation_pending: false,
+      key: "registry-secret-value",
+      masked_key: "reg_***",
+      pending_key: "queued-secret",
+      arbitrary_backend_detail: "do not expose",
+    },
+  },
+};
+
+const activeCredential = adaptRegistryCredentialStatus(credentialPayload);
+const jsonError = (status: number, code: string) =>
+  new Response(
+    JSON.stringify({ errors: [{ code, detail: "private detail" }] }),
+    {
+      status,
+    },
+  );
+
+describe("Registry adapter", () => {
+  it("reads the resolved installed version separately from the requested spec", () => {
+    // Given / When
+    const artifacts = adaptRegistryTenantArtifacts({
+      data: [
+        {
+          type: "registry-artifacts",
+          id: "template",
+          attributes: {
+            version_spec: "latest",
+            resolved_version: " 1.0.0 ",
+          },
+        },
+      ],
+    });
+    // Then
+    expect(artifacts).toEqual([
+      expect.objectContaining({
+        normalizedName: "template",
+        versionSpec: "latest",
+        resolvedVersion: "1.0.0",
+      }),
+    ]);
+  });
+
+  it.each([undefined, null, "", "   "])(
+    "accepts an unknown resolved version %j",
+    (resolvedVersion) => {
+      // Given / When
+      const artifacts = adaptRegistryTenantArtifacts({
+        data: [
+          {
+            type: "registry-artifacts",
+            id: "template",
+            attributes: {
+              version_spec: "latest",
+              resolved_version: resolvedVersion,
+            },
+          },
+        ],
+      });
+      // Then
+      expect(artifacts).toMatchObject([{ resolvedVersion: undefined }]);
+    },
+  );
+
+  it("maps only documented non-secret credential status fields", () => {
+    // Given
+    const malformedPayload = { data: { attributes: { configured: true } } };
+
+    // When
+    const status = adaptRegistryCredentialStatus(credentialPayload);
+
+    // Then
+    expect(status).toEqual({
+      configured: true,
+      isValid: true,
+      scopes: ["catalog:read"],
+      lastValidatedAt: "2026-03-20T12:00:00Z",
+      validationStatus: "valid",
+      validationPending: false,
+    });
+    expect(adaptRegistryCredentialStatus(malformedPayload)).toBeNull();
+  });
+
+  it("normalizes an absent credential status with nullable validation fields", () => {
+    // Given
+    const absentCredentialPayload = {
+      data: {
+        attributes: {
+          configured: false,
+          is_valid: false,
+          scopes: [],
+          last_validated_at: null,
+          validation_status: null,
+          validation_pending: false,
+        },
+      },
+    };
+
+    // When
+    const status = adaptRegistryCredentialStatus(absentCredentialPayload);
+
+    // Then
+    expect(status).toEqual({
+      configured: false,
+      isValid: false,
+      scopes: [],
+      lastValidatedAt: undefined,
+      validationStatus: undefined,
+      validationPending: false,
+    });
+  });
+
+  it("accepts only a matching artifact 202 task and fixed Content-Location path", async () => {
+    // Given
+    const response = new Response(
+      JSON.stringify({ data: { type: "tasks", id: "task-123" } }),
+      {
+        status: 202,
+        headers: { "Content-Location": "/api/v1/tasks/task-123" },
+      },
+    );
+
+    // When
+    const result = await parseRegistryArtifactSubmission(response);
+
+    // Then
+    expect(result).toEqual({
+      status: REGISTRY_SUBMISSION.PENDING,
+      taskId: "task-123",
+    });
+  });
+
+  it("rejects a non-202 response or a mismatched task location", async () => {
+    // Given
+    const task = JSON.stringify({ data: { type: "tasks", id: "task-123" } });
+    const wrongStatus = new Response(task, { status: 201 });
+    const wrongLocation = new Response(task, {
+      status: 202,
+      headers: { "Content-Location": "/api/v1/tasks/other" },
+    });
+
+    // When
+    const results = await Promise.all([
+      parseRegistryArtifactSubmission(wrongStatus),
+      parseRegistryArtifactSubmission(wrongLocation),
+    ]);
+
+    // Then
+    expect(results).toEqual([
+      { status: REGISTRY_SUBMISSION.ERROR },
+      { status: REGISTRY_SUBMISSION.ERROR },
+    ]);
+  });
+
+  it("classifies every Registry 401 or 403 as access denied first", async () => {
+    // Given
+    const responses = [
+      [401, REGISTRY_ENDPOINT.CREDENTIAL],
+      [403, REGISTRY_ENDPOINT.MUTATION],
+      [403, REGISTRY_ENDPOINT.PROVIDERS],
+    ] as const;
+
+    // When
+    const results = await Promise.all(
+      responses.map(([status, endpoint]) =>
+        classifyRegistryFailure(
+          jsonError(status, "registry_key_rejected"),
+          endpoint,
+          activeCredential,
+        ),
+      ),
+    );
+
+    // Then
+    expect(results).toEqual([
+      { status: REGISTRY_FAILURE.ACCESS_DENIED },
+      { status: REGISTRY_FAILURE.ACCESS_DENIED },
+      { status: REGISTRY_FAILURE.ACCESS_DENIED },
+    ]);
+  });
+
+  it("maps only a 409 with an authoritative no-active credential to onboarding", async () => {
+    // Given
+    const noCredential = adaptRegistryCredentialStatus({
+      data: {
+        attributes: {
+          configured: false,
+          is_valid: false,
+          scopes: [],
+          validation_pending: false,
+        },
+      },
+    });
+
+    // When
+    const results = await Promise.all(
+      [noCredential, null].map((credential) =>
+        classifyRegistryFailure(
+          new Response(null, { status: 409 }),
+          REGISTRY_ENDPOINT.AVAILABLE_ARTIFACTS,
+          credential,
+        ),
+      ),
+    );
+
+    // Then
+    expect(results).toEqual([
+      { status: REGISTRY_FAILURE.ONBOARDING },
+      { status: REGISTRY_FAILURE.ERROR },
+    ]);
+  });
+
+  it("maps only exact documented 502 and 503 status-code pairs", async () => {
+    // Given
+    const rejected = jsonError(502, "registry_key_rejected");
+    const unavailable = jsonError(503, "registry_unavailable");
+
+    // When
+    const results = await Promise.all([
+      classifyRegistryFailure(
+        rejected,
+        REGISTRY_ENDPOINT.PROVIDERS,
+        activeCredential,
+      ),
+      classifyRegistryFailure(
+        unavailable,
+        REGISTRY_ENDPOINT.AVAILABLE_ARTIFACTS,
+        activeCredential,
+      ),
+    ]);
+
+    // Then
+    expect(results).toEqual([
+      { status: REGISTRY_FAILURE.RECONNECT },
+      { status: REGISTRY_FAILURE.UNAVAILABLE },
+    ]);
+  });
+
+  it("keeps wrong, malformed, and unrelated failures generic", async () => {
+    // Given
+    const malformed = new Response("<html>key=private</html>", { status: 503 });
+
+    // When
+    const results = await Promise.all([
+      classifyRegistryFailure(
+        jsonError(502, "other_error"),
+        REGISTRY_ENDPOINT.PROVIDERS,
+        activeCredential,
+      ),
+      classifyRegistryFailure(
+        jsonError(502, "registry_unavailable"),
+        REGISTRY_ENDPOINT.PROVIDERS,
+        activeCredential,
+      ),
+      classifyRegistryFailure(
+        malformed,
+        REGISTRY_ENDPOINT.PROVIDERS,
+        activeCredential,
+      ),
+    ]);
+
+    // Then
+    expect(results).toEqual([
+      { status: REGISTRY_FAILURE.ERROR },
+      { status: REGISTRY_FAILURE.ERROR },
+      { status: REGISTRY_FAILURE.ERROR },
+    ]);
+  });
+
+  it("degrades a non-terminal empty first catalog page", async () => {
+    // Given
+    const document = (page: number) => ({
+      data: [],
+      meta: { pagination: { page, pages: 2, count: 0 } },
+    });
+
+    // When
+    const result = await collectCompleteRegistryCatalog(async (page) =>
+      document(page),
+    );
+
+    // Then
+    expect(result).toEqual({
+      status: "incomplete",
+      reason: "invalid_page",
+      collectedCount: 0,
+    });
+  });
+
+  it("accepts a terminal empty first catalog page", async () => {
+    // Given
+    const document = {
+      data: [],
+      meta: { pagination: { page: 1, pages: 1, count: 0 } },
+    };
+
+    // When
+    const result = await collectCompleteRegistryCatalog(async () => document);
+
+    // Then
+    expect(result).toEqual({ status: "complete", artifacts: [] });
+  });
+
+  it("maps the flat owner attributes tolerantly", async () => {
+    // Given
+    const document = {
+      data: [
+        {
+          type: "registry-artifacts",
+          id: "core",
+          attributes: {
+            owner_name: "Prowler",
+            owner_slug: "prowler",
+            owner_type: "organization",
+            owner_logo_url: "https://cdn.example/prowler.png",
+          },
+        },
+        {
+          type: "registry-artifacts",
+          id: "plain-owner",
+          attributes: {
+            owner_name: "Ada",
+            owner_slug: "ada",
+            owner_type: "user",
+            owner_logo_url: null,
+          },
+        },
+        {
+          type: "registry-artifacts",
+          id: "ownerless",
+          attributes: { owner_name: "   ", owner_logo_url: "   " },
+        },
+      ],
+      meta: { pagination: { page: 1, pages: 1, count: 3 } },
+    };
+
+    // When
+    const result = await collectCompleteRegistryCatalog(async () => document);
+
+    // Then
+    expect(result).toMatchObject({
+      status: "complete",
+      artifacts: [
+        {
+          normalizedName: "core",
+          owners: [
+            {
+              type: "organization",
+              name: "Prowler",
+              logoUrl: "https://cdn.example/prowler.png",
+            },
+          ],
+        },
+        {
+          normalizedName: "ownerless",
+          owners: [],
+        },
+        {
+          normalizedName: "plain-owner",
+          owners: [{ type: "user", name: "Ada", logoUrl: undefined }],
+        },
+      ],
+    });
+  });
+
+  it("defaults omitted built-in status and maps explicit built-ins", async () => {
+    // Given
+    const document = {
+      data: [
+        { type: "registry-artifacts", id: "installable", attributes: {} },
+        {
+          type: "registry-artifacts",
+          id: "built-in",
+          attributes: { is_builtin: true },
+        },
+      ],
+      meta: { pagination: { page: 1, pages: 1, count: 2 } },
+    };
+
+    // When
+    const result = await collectCompleteRegistryCatalog(async () => document);
+
+    // Then
+    expect(result).toMatchObject({
+      status: "complete",
+      artifacts: [
+        { normalizedName: "built-in", isBuiltin: true },
+        { normalizedName: "installable", isBuiltin: false },
+      ],
+    });
+  });
+
+  it("rejects malformed built-in values and preserves built-in duplicates", async () => {
+    // Given
+    const document = (data: unknown[]) => ({
+      data,
+      meta: { pagination: { page: 1, pages: 1, count: data.length } },
+    });
+    const resource = (id: string, isBuiltin: unknown) => ({
+      type: "registry-artifacts",
+      id,
+      attributes: { is_builtin: isBuiltin },
+    });
+
+    // When
+    const explicitFalse = await collectCompleteRegistryCatalog(async () =>
+      document([resource("installable", false)]),
+    );
+    const malformed = await Promise.all(
+      [null, "true", 1].map((isBuiltin) =>
+        collectCompleteRegistryCatalog(async () =>
+          document([resource("malformed", isBuiltin)]),
+        ),
+      ),
+    );
+    const duplicate = await collectCompleteRegistryCatalog(async (page) => ({
+      data: [resource("built-in", page === 2)],
+      meta: { pagination: { page, pages: 2, count: 2 } },
+    }));
+
+    // Then
+    expect(explicitFalse).toMatchObject({
+      status: "complete",
+      artifacts: [{ normalizedName: "installable", isBuiltin: false }],
+    });
+    expect(malformed).toEqual([
+      { status: "incomplete", reason: "invalid_resource", collectedCount: 1 },
+      { status: "incomplete", reason: "invalid_resource", collectedCount: 1 },
+      { status: "incomplete", reason: "invalid_resource", collectedCount: 1 },
+    ]);
+    expect(duplicate).toMatchObject({
+      status: "complete",
+      artifacts: [{ normalizedName: "built-in", isBuiltin: true }],
+    });
+  });
+
+  it("preserves artifact counts, including zero, without inventing missing counts", async () => {
+    // Given
+    const resources = [
+      { id: "aws", attributes: { check_count: 645, compliance_count: 45 } },
+      { id: "openai", attributes: { check_count: 2, compliance_count: 0 } },
+      { id: "missing", attributes: {} },
+      {
+        id: "unknown",
+        attributes: { check_count: null, compliance_count: null },
+      },
+      { id: "aws", attributes: { check_count: 645 } },
+    ].map((resource) => ({
+      type: "registry-available-artifacts",
+      ...resource,
+    }));
+
+    // When
+    const result = await collectCompleteRegistryCatalog(async () => ({
+      data: resources,
+      meta: { pagination: { page: 1, pages: 1, count: resources.length } },
+    }));
+
+    // Then
+    expect(result).toMatchObject({
+      status: "complete",
+      artifacts: [
+        { normalizedName: "aws", checkCount: 645, complianceCount: 45 },
+        {
+          normalizedName: "missing",
+          checkCount: undefined,
+          complianceCount: undefined,
+        },
+        { normalizedName: "openai", checkCount: 2, complianceCount: 0 },
+        {
+          normalizedName: "unknown",
+          checkCount: undefined,
+          complianceCount: undefined,
+        },
+      ],
+    });
+  });
+
+  it("preserves the declared provider when merging complementary catalog entries", async () => {
+    // Given
+    const fetchPage = async (page: number) => ({
+      data: [
+        {
+          type: "registry-artifacts",
+          id: "external-package",
+          attributes:
+            page === 1
+              ? { providers: ["aaa"], has_checks: true }
+              : { providers: ["zzz"], has_provider: true },
+        },
+      ],
+      meta: { pagination: { page, pages: 2, count: 2 } },
+    });
+
+    // When
+    const result = await collectCompleteRegistryCatalog(fetchPage);
+
+    // Then
+    expect(result).toMatchObject({
+      status: "complete",
+      artifacts: [
+        { hasProvider: true, providerSlug: "zzz", providers: ["aaa", "zzz"] },
+      ],
+    });
+  });
+
+  it("rejects duplicate catalog entries with conflicting declared providers", async () => {
+    // Given
+    const fetchPage = async (page: number) => ({
+      data: [
+        {
+          type: "registry-artifacts",
+          id: "external-package",
+          attributes: {
+            has_provider: true,
+            providers: [page === 1 ? "aaa" : "zzz"],
+          },
+        },
+      ],
+      meta: { pagination: { page, pages: 2, count: 2 } },
+    });
+
+    // When / Then
+    await expect(
+      collectCompleteRegistryCatalog(fetchPage),
+    ).resolves.toMatchObject({
+      status: "incomplete",
+      reason: "conflicting_duplicate",
+    });
+  });
+
+  it("traverses, merges, and degrades unsafe catalog data", async () => {
+    // Given
+
+    const resource = (
+      id: string,
+      attributes: Record<string, unknown> = {},
+    ) => ({ type: "registry-artifacts", id, attributes });
+
+    const document = (
+      page: number,
+      pages: number,
+      count: number,
+      data: unknown[],
+    ) => ({ data, meta: { pagination: { page, pages, count } } });
+    const requests: Array<[number, string | null, string | null]> = [];
+
+    // When
+
+    const complete = await collectCompleteRegistryCatalog(
+      async (page, query) => {
+        requests.push([
+          page,
+          query.get("page[number]"),
+          query.get("page[size]"),
+        ]);
+        return page === 1
+          ? document(1, 2, 3, [
+              resource("core", {
+                name: "Core",
+                providers: ["AWS"],
+                is_verified: true,
+                version_count: 1,
+                total_downloads: 2,
+                owner_name: "Prowler",
+                owner_type: "organization",
+              }),
+              resource("zeta"),
+            ])
+          : document(2, 2, 3, [
+              resource("core", {
+                description: "Registry core",
+                latest_version: "2.0.0",
+                providers: ["gcp"],
+                is_official: true,
+                has_checks: true,
+                version_count: 3,
+                total_downloads: 8,
+              }),
+            ]);
+      },
+    );
+
+    const limits = await Promise.all(
+      [999, 1000, 1001].map(async (pages) => {
+        let requests = 0;
+        const result = await collectCompleteRegistryCatalog(async (page) => {
+          requests += 1;
+          return document(page, pages, pages, [resource(`item-${page}`)]);
+        });
+        return [pages, requests, result] as const;
+      }),
+    );
+
+    const failures = await Promise.all([
+      collectCompleteRegistryCatalog(async () => ({ data: {}, meta: {} })),
+      collectCompleteRegistryCatalog(async () =>
+        document(1, 1, 2, [resource("one")]),
+      ),
+      collectCompleteRegistryCatalog(async (page) =>
+        document(page === 1 ? 1 : 1, 2, 2, [resource(`item-${page}`)]),
+      ),
+      collectCompleteRegistryCatalog(async (page) =>
+        document(page, page === 1 ? 2 : 3, 2, [resource(`item-${page}`)]),
+      ),
+      collectCompleteRegistryCatalog(async () =>
+        document(1, 1, 1, [resource("")]),
+      ),
+      collectCompleteRegistryCatalog(async (page) =>
+        document(page, 2, 2, [
+          resource("duplicate", { name: page === 1 ? "One" : "Two" }),
+        ]),
+      ),
+      collectCompleteRegistryCatalog(async (page) => {
+        if (page === 2) throw new Error("offline");
+        return document(1, 2, 2, [resource("first")]);
+      }),
+    ]);
+
+    // Then
+    expect(requests).toEqual([
+      [1, "1", "100"],
+      [2, "2", "100"],
+    ]);
+
+    expect(complete).toMatchObject({
+      status: "complete",
+      artifacts: [
+        {
+          normalizedName: "core",
+          name: "Core",
+          description: "Registry core",
+          latestVersion: "2.0.0",
+          providers: ["aws", "gcp"],
+          isVerified: true,
+          isOfficial: true,
+          hasChecks: true,
+          versionCount: 3,
+          totalDownloads: 8,
+          owners: [{ type: "organization", name: "Prowler" }],
+        },
+        { normalizedName: "zeta" },
+      ],
+    });
+    expect(limits.map(([pages, requests]) => [pages, requests])).toEqual([
+      [999, 999],
+      [1000, 1000],
+      [1001, 1],
+    ]);
+    expect(limits[2]?.[2]).toEqual({
+      status: "incomplete",
+      reason: "guard_exhausted",
+      collectedCount: 1,
+    });
+    expect(
+      failures.map((result) =>
+        result.status === "incomplete" ? result.reason : undefined,
+      ),
+    ).toEqual([
+      "invalid_page",
+      "count_mismatch",
+      "invalid_page",
+      "invalid_page",
+      "invalid_resource",
+      "conflicting_duplicate",
+      "page_failed",
+    ]);
+    failures.forEach((result) =>
+      expect(result).not.toHaveProperty("artifacts"),
+    );
+  });
+});
diff --git a/ui/actions/registry/registry.adapter.ts b/ui/actions/registry/registry.adapter.ts
new file mode 100644
index 0000000000..46bd08d8e0
--- /dev/null
+++ b/ui/actions/registry/registry.adapter.ts
@@ -0,0 +1,441 @@
+import { z } from "zod";
+
+import { isActiveRegistryCredential } from "@/lib/registry/credential-task";
+import {
+  REGISTRY_CATALOG,
+  REGISTRY_CATALOG_INCOMPLETE_REASON,
+  REGISTRY_ENDPOINT,
+  REGISTRY_FAILURE,
+  REGISTRY_MUTATION,
+  REGISTRY_SUBMISSION,
+  type RegistryCatalogArtifact,
+  type RegistryCatalogResult,
+  type RegistryCredentialStatus,
+  type RegistryTaskSubmissionResult,
+  type RegistryEndpoint,
+  type RegistryFailureResult,
+  type RegistryMutationResult,
+  type RegistryTenantArtifact,
+} from "@/types/registry";
+
+const REGISTRY_TASK_PATH_PREFIX = "/api/v1/tasks/";
+const REGISTRY_ERROR_CODE = {
+  KEY_REJECTED: "registry_key_rejected",
+  UNAVAILABLE: "registry_unavailable",
+} as const;
+const REGISTRY_MUTATION_REFUSAL_COPY = {
+  no_installable_version: "No available version can be added.",
+  registry_artifact_not_found: "This artifact is no longer available.",
+  version_not_found: "This version is not available.",
+  version_not_processed: "This version is not ready to add yet.",
+  version_not_verified: "This version is not verified and cannot be added.",
+  version_yanked: "This version is no longer available.",
+} as const;
+const registryDiscoveryEndpoints = new Set<RegistryEndpoint>([
+  REGISTRY_ENDPOINT.PROVIDERS,
+  REGISTRY_ENDPOINT.AVAILABLE_ARTIFACTS,
+]);
+
+const credentialStatusSchema = z.object({
+  data: z.object({
+    attributes: z.object({
+      configured: z.boolean(),
+      is_valid: z.boolean(),
+      scopes: z.array(z.string()),
+      last_validated_at: z.string().nullish(),
+      validation_status: z.string().nullish(),
+      validation_pending: z.boolean(),
+    }),
+  }),
+});
+
+const taskSubmissionSchema = z.object({
+  data: z.object({
+    type: z.literal("tasks"),
+    id: z.string().min(1),
+  }),
+});
+
+const registryCollectionSchema = z.object({ data: z.array(z.unknown()) });
+const tenantArtifactsSchema = z.object({
+  data: z.array(
+    z.object({
+      type: z.string().trim().min(1),
+      id: z.string().trim().min(1),
+      attributes: z.object({
+        version_spec: z.string().trim().min(1),
+        resolved_version: z.string().trim().nullish(),
+        inserted_at: z.string().optional(),
+        updated_at: z.string().optional(),
+      }),
+    }),
+  ),
+});
+
+const errorDocumentSchema = z.object({
+  errors: z.array(z.object({ code: z.string().min(1) })).min(1),
+});
+
+export function adaptRegistryCredentialStatus(
+  payload: unknown,
+): RegistryCredentialStatus | null {
+  const parsed = credentialStatusSchema.safeParse(payload);
+  if (!parsed.success) return null;
+
+  const { attributes } = parsed.data.data;
+  return {
+    configured: attributes.configured,
+    isValid: attributes.is_valid,
+    scopes: attributes.scopes,
+    lastValidatedAt: attributes.last_validated_at ?? undefined,
+    validationStatus: attributes.validation_status ?? undefined,
+    validationPending: attributes.validation_pending,
+  };
+}
+
+export function adaptRegistryTenantArtifacts(
+  payload: unknown,
+): RegistryTenantArtifact[] | null {
+  const parsed = tenantArtifactsSchema.safeParse(payload);
+  if (!parsed.success) return null;
+
+  return parsed.data.data.map(({ attributes, id }) => ({
+    normalizedName: id,
+    versionSpec: attributes.version_spec,
+    resolvedVersion: attributes.resolved_version || undefined,
+    insertedAt: attributes.inserted_at,
+    updatedAt: attributes.updated_at,
+  }));
+}
+
+export function isRegistryCollection(payload: unknown) {
+  return registryCollectionSchema.safeParse(payload).success;
+}
+
+export class RegistryCatalogPageError extends Error {
+  constructor(readonly failure: RegistryFailureResult) {
+    super("Registry catalog page request failed");
+  }
+}
+
+export const parseRegistryCredentialSubmission = (
+  response: Response,
+): Promise<RegistryTaskSubmissionResult> =>
+  parseRegistryTaskSubmission(response);
+
+export const parseRegistryArtifactSubmission = (
+  response: Response,
+): Promise<RegistryTaskSubmissionResult> =>
+  parseRegistryTaskSubmission(response);
+
+async function parseRegistryTaskSubmission(
+  response: Response,
+): Promise<RegistryTaskSubmissionResult> {
+  if (response.status !== 202) return { status: REGISTRY_SUBMISSION.ERROR };
+
+  const parsed = taskSubmissionSchema.safeParse(
+    await response.json().catch(() => undefined),
+  );
+  const taskId = parsed.success ? parsed.data.data.id : undefined;
+  const location = response.headers.get("Content-Location");
+  if (
+    !taskId ||
+    location !== `${REGISTRY_TASK_PATH_PREFIX}${encodeURIComponent(taskId)}`
+  ) {
+    return { status: REGISTRY_SUBMISSION.ERROR };
+  }
+
+  return { status: REGISTRY_SUBMISSION.PENDING, taskId };
+}
+
+export async function classifyRegistryMutationRefusal(
+  response: Response,
+): Promise<Extract<RegistryMutationResult, { status: "refused" }> | null> {
+  const code = await getRegistryErrorCode(response);
+  const message = code
+    ? REGISTRY_MUTATION_REFUSAL_COPY[
+        code as keyof typeof REGISTRY_MUTATION_REFUSAL_COPY
+      ]
+    : undefined;
+  return message ? { status: REGISTRY_MUTATION.REFUSED, message } : null;
+}
+
+export async function classifyRegistryFailure(
+  response: Response,
+  endpoint: RegistryEndpoint,
+  credentialStatus: RegistryCredentialStatus | null,
+): Promise<RegistryFailureResult> {
+  if (response.status === 401 || response.status === 403) {
+    return { status: REGISTRY_FAILURE.ACCESS_DENIED };
+  }
+
+  if (!isRegistryDiscoveryEndpoint(endpoint)) {
+    return { status: REGISTRY_FAILURE.ERROR };
+  }
+
+  if (
+    response.status === 409 &&
+    credentialStatus !== null &&
+    !isActiveRegistryCredential(credentialStatus)
+  ) {
+    return { status: REGISTRY_FAILURE.ONBOARDING };
+  }
+
+  const code = await getRegistryErrorCode(response);
+  if (response.status === 502 && code === REGISTRY_ERROR_CODE.KEY_REJECTED) {
+    return { status: REGISTRY_FAILURE.RECONNECT };
+  }
+  if (response.status === 503 && code === REGISTRY_ERROR_CODE.UNAVAILABLE) {
+    return { status: REGISTRY_FAILURE.UNAVAILABLE };
+  }
+
+  return { status: REGISTRY_FAILURE.ERROR };
+}
+
+function isRegistryDiscoveryEndpoint(endpoint: RegistryEndpoint) {
+  return registryDiscoveryEndpoints.has(endpoint);
+}
+
+async function getRegistryErrorCode(response: Response) {
+  const parsed = errorDocumentSchema.safeParse(
+    await response
+      .clone()
+      .json()
+      .catch(() => undefined),
+  );
+  return parsed.success ? parsed.data.errors[0]?.code : undefined;
+}
+
+const REGISTRY_CATALOG_PAGE_SIZE = 100;
+const REGISTRY_CATALOG_MAX_PAGES = 1000;
+const safeInteger = z.number().int().nonnegative().safe();
+const catalogPageSchema = z.object({
+  data: z.array(z.unknown()),
+  meta: z.object({
+    pagination: z.object({
+      page: safeInteger,
+      pages: safeInteger,
+      count: safeInteger,
+    }),
+  }),
+});
+const catalogAttributesSchema = z.object({
+  name: z.string().optional(),
+  description: z.string().optional(),
+  latest_version: z.string().optional(),
+  providers: z.array(z.string().trim().min(1)).optional(),
+  owner_name: z.string().optional(),
+  owner_type: z.string().optional(),
+  owner_logo_url: z.string().nullable().optional(),
+  is_verified: z.boolean().optional(),
+  is_official: z.boolean().optional(),
+  is_builtin: z.boolean().optional(),
+  is_meta: z.boolean().optional(),
+  has_provider: z.boolean().optional(),
+  has_checks: z.boolean().optional(),
+  has_compliance: z.boolean().optional(),
+  check_count: safeInteger.nullish(),
+  compliance_count: safeInteger.nullish(),
+  version_count: safeInteger.optional(),
+  total_downloads: safeInteger.optional(),
+});
+const catalogResourceSchema = z.object({
+  type: z.string().trim().min(1),
+  id: z.string().trim().min(1),
+  attributes: catalogAttributesSchema,
+});
+type RegistryCatalogPageFetcher = (
+  page: number,
+  searchParams: URLSearchParams,
+) => Promise<unknown>;
+
+export async function collectCompleteRegistryCatalog(
+  fetchPage: RegistryCatalogPageFetcher,
+): Promise<RegistryCatalogResult> {
+  const resources: unknown[] = [];
+  let expectedPages: number | undefined;
+  let expectedCount: number | undefined;
+  for (let page = 1; ; page += 1) {
+    let payload: unknown;
+    try {
+      payload = await fetchPage(
+        page,
+        new URLSearchParams({
+          "page[number]": String(page),
+          "page[size]": String(REGISTRY_CATALOG_PAGE_SIZE),
+        }),
+      );
+    } catch (error) {
+      if (error instanceof RegistryCatalogPageError) throw error;
+      return incomplete("PAGE_FAILED", resources.length);
+    }
+    const parsed = catalogPageSchema.safeParse(payload);
+    if (!parsed.success) return incomplete("INVALID_PAGE", resources.length);
+    const { count, page: responsePage, pages } = parsed.data.meta.pagination;
+    if (
+      responsePage !== page ||
+      (expectedPages !== undefined &&
+        (pages !== expectedPages || count !== expectedCount))
+    )
+      return incomplete("INVALID_PAGE", resources.length);
+    expectedPages ??= pages;
+    expectedCount ??= count;
+    if (page === 1 && pages > 1 && count === 0 && parsed.data.data.length === 0)
+      return incomplete("INVALID_PAGE", resources.length);
+    if (pages === 0)
+      return page === 1 && count === 0 && parsed.data.data.length === 0
+        ? { status: REGISTRY_CATALOG.COMPLETE, artifacts: [] }
+        : incomplete("INVALID_PAGE", resources.length);
+    resources.push(...parsed.data.data);
+    if (pages > REGISTRY_CATALOG_MAX_PAGES)
+      return incomplete("GUARD_EXHAUSTED", resources.length);
+    if (page === pages) break;
+    if (page > pages) return incomplete("INVALID_PAGE", resources.length);
+  }
+  const merged = mergeCatalogResources(resources);
+  return merged.status === REGISTRY_CATALOG.INCOMPLETE ||
+    resources.length === expectedCount
+    ? merged
+    : incomplete("COUNT_MISMATCH", resources.length);
+}
+
+function mergeCatalogResources(resources: unknown[]): RegistryCatalogResult {
+  const artifacts = new Map<string, RegistryCatalogArtifact>();
+  for (const resource of resources) {
+    const artifact = adaptCatalogArtifact(resource);
+    if (!artifact) return incomplete("INVALID_RESOURCE", resources.length);
+    const prior = artifacts.get(artifact.normalizedName);
+    const next = prior ? mergeArtifacts(prior, artifact) : artifact;
+    if (!next) return incomplete("CONFLICTING_DUPLICATE", resources.length);
+    artifacts.set(next.normalizedName, next);
+  }
+  return {
+    status: REGISTRY_CATALOG.COMPLETE,
+    artifacts: Array.from(artifacts.values()).sort((left, right) =>
+      compare(left.normalizedName, right.normalizedName),
+    ),
+  };
+}
+
+function adaptCatalogArtifact(
+  resource: unknown,
+): RegistryCatalogArtifact | null {
+  const parsed = catalogResourceSchema.safeParse(resource);
+  if (!parsed.success) return null;
+  const { attributes: a, id } = parsed.data;
+  return {
+    normalizedName: id,
+    name: text(a.name),
+    description: text(a.description),
+    latestVersion: text(a.latest_version),
+    providers: unique(
+      a.providers?.map((provider) => provider.toLowerCase()) ?? [],
+    ),
+    ...(a.has_provider === true && a.providers?.[0]
+      ? { providerSlug: a.providers[0].toLowerCase() }
+      : {}),
+    owners: flatOwner(a),
+    isVerified: a.is_verified ?? false,
+    isOfficial: a.is_official ?? false,
+    isBuiltin: a.is_builtin ?? false,
+    isMeta: a.is_meta ?? false,
+    hasProvider: a.has_provider ?? false,
+    hasChecks: a.has_checks ?? false,
+    hasCompliance: a.has_compliance ?? false,
+    checkCount: a.check_count ?? undefined,
+    complianceCount: a.compliance_count ?? undefined,
+    versionCount: a.version_count ?? 0,
+    totalDownloads: a.total_downloads ?? 0,
+  };
+}
+
+function mergeArtifacts(
+  left: RegistryCatalogArtifact,
+  right: RegistryCatalogArtifact,
+): RegistryCatalogArtifact | null {
+  const [name, description, latestVersion, providerSlug] = [
+    mergeText(left.name, right.name),
+    mergeText(left.description, right.description),
+    mergeText(left.latestVersion, right.latestVersion),
+    mergeText(left.providerSlug, right.providerSlug),
+  ];
+  if (
+    [name, description, latestVersion, providerSlug].some(
+      (value) => value === null,
+    )
+  )
+    return null;
+  return {
+    ...left,
+    name: name ?? undefined,
+    description: description ?? undefined,
+    latestVersion: latestVersion ?? undefined,
+    providerSlug: providerSlug ?? undefined,
+    providers: unique([...left.providers, ...right.providers]),
+    owners: uniqueOwners([...left.owners, ...right.owners]),
+    isVerified: left.isVerified || right.isVerified,
+    isOfficial: left.isOfficial || right.isOfficial,
+    isBuiltin: left.isBuiltin || right.isBuiltin,
+    isMeta: left.isMeta || right.isMeta,
+    hasProvider: left.hasProvider || right.hasProvider,
+    hasChecks: left.hasChecks || right.hasChecks,
+    hasCompliance: left.hasCompliance || right.hasCompliance,
+    checkCount: mergeCount(left.checkCount, right.checkCount),
+    complianceCount: mergeCount(left.complianceCount, right.complianceCount),
+    versionCount: Math.max(left.versionCount, right.versionCount),
+    totalDownloads: Math.max(left.totalDownloads, right.totalDownloads),
+  };
+}
+
+function incomplete(
+  reason: keyof typeof REGISTRY_CATALOG_INCOMPLETE_REASON,
+  collectedCount: number,
+): RegistryCatalogResult {
+  return {
+    status: REGISTRY_CATALOG.INCOMPLETE,
+    reason: REGISTRY_CATALOG_INCOMPLETE_REASON[reason],
+    collectedCount,
+  };
+}
+function text(value: string | undefined) {
+  return value?.trim() || undefined;
+}
+function mergeText(left: string | undefined, right: string | undefined) {
+  return left && right && left !== right ? null : (left ?? right);
+}
+function mergeCount(left: number | undefined, right: number | undefined) {
+  if (left === undefined) return right;
+  if (right === undefined) return left;
+  return Math.max(left, right);
+}
+function unique(values: string[]) {
+  return Array.from(new Set(values)).sort(compare);
+}
+function flatOwner(
+  a: z.infer<typeof catalogAttributesSchema>,
+): RegistryCatalogArtifact["owners"] {
+  const name = text(a.owner_name);
+  if (!name) return [];
+  return [
+    {
+      name,
+      type: text(a.owner_type) ?? "",
+      logoUrl: text(a.owner_logo_url ?? undefined),
+    },
+  ];
+}
+function uniqueOwners(owners: RegistryCatalogArtifact["owners"]) {
+  return Array.from(
+    new Map(
+      owners.map((owner) => [`${owner.type}\u0000${owner.name}`, owner]),
+    ).values(),
+  ).sort((left, right) =>
+    compare(
+      `${left.type}\u0000${left.name}`,
+      `${right.type}\u0000${right.name}`,
+    ),
+  );
+}
+function compare(left: string, right: string) {
+  return left < right ? -1 : left > right ? 1 : 0;
+}
diff --git a/ui/actions/registry/registry.test.ts b/ui/actions/registry/registry.test.ts
new file mode 100644
index 0000000000..f81ee78d23
--- /dev/null
+++ b/ui/actions/registry/registry.test.ts
@@ -0,0 +1,1138 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const {
+  authMock,
+  evaluateAccessMock,
+  evaluateProviderAccessMock,
+  fetchMock,
+  pollTaskUntilSettledMock,
+} = vi.hoisted(() => ({
+  authMock: vi.fn(),
+  evaluateAccessMock: vi.fn(),
+  evaluateProviderAccessMock: vi.fn(),
+  fetchMock: vi.fn(),
+  pollTaskUntilSettledMock: vi.fn(),
+}));
+
+vi.mock("@/auth.config", () => ({ auth: authMock }));
+vi.mock("@/lib", () => ({ apiBaseUrl: "https://api.test/api/v1" }));
+vi.mock("@/actions/task/poll", () => ({
+  pollTaskUntilSettled: pollTaskUntilSettledMock,
+}));
+vi.mock("@/lib/registry/access.server", () => ({
+  evaluateRegistryAccess: evaluateAccessMock,
+  evaluateRegistryProviderAccess: evaluateProviderAccessMock,
+}));
+
+import {
+  addRegistryArtifact,
+  confirmRegistryArtifactAddition,
+  disconnectRegistryCredential,
+  getRegistryBootstrap,
+  getInstalledRegistryProviderOptions,
+  refreshRegistryCollections,
+  removeRegistryArtifact,
+  refreshRegistryCredential,
+  submitRegistryCredential,
+} from "./registry";
+
+const activeCredential = {
+  configured: true,
+  isValid: true,
+  scopes: ["catalog:read"],
+  validationPending: false,
+};
+const noCredential = {
+  configured: false,
+  isValid: false,
+  scopes: [],
+  validationPending: false,
+};
+const pendingCredential = {
+  configured: true,
+  isValid: false,
+  scopes: [],
+  validationPending: true,
+};
+
+const jsonResponse = (body: unknown, status = 200) =>
+  new Response(JSON.stringify(body), {
+    status,
+    headers: { "Content-Type": "application/vnd.api+json" },
+  });
+const credentialResponse = (credential = activeCredential) =>
+  jsonResponse({
+    data: {
+      attributes: {
+        configured: credential.configured,
+        is_valid: credential.isValid,
+        scopes: credential.scopes,
+        validation_pending: credential.validationPending,
+      },
+    },
+  });
+const tenantArtifactsResponse = () =>
+  jsonResponse({
+    data: [
+      {
+        type: "registry-artifacts",
+        id: "prowler-aws",
+        attributes: {
+          version_spec: "latest",
+          inserted_at: "2026-03-20T12:00:00Z",
+        },
+      },
+    ],
+  });
+const catalogResponse = () =>
+  jsonResponse({
+    data: [
+      {
+        type: "registry-artifacts",
+        id: "prowler-aws",
+        attributes: { name: "Prowler AWS", providers: ["aws"] },
+      },
+    ],
+    meta: { pagination: { page: 1, pages: 1, count: 1 } },
+  });
+
+beforeEach(() => {
+  vi.stubGlobal("fetch", fetchMock);
+  authMock.mockResolvedValue({ accessToken: "access-token" });
+  evaluateAccessMock.mockResolvedValue({ status: "eligible" });
+  evaluateProviderAccessMock.mockResolvedValue({ status: "eligible" });
+  fetchMock.mockReset();
+  pollTaskUntilSettledMock.mockReset();
+});
+
+function mockRequestDeadlines() {
+  // Native AbortSignal.timeout uses real timers; drive it with the test clock.
+  vi.spyOn(AbortSignal, "timeout").mockImplementation((milliseconds) => {
+    const controller = new AbortController();
+    setTimeout(() => controller.abort(), milliseconds);
+    return controller.signal;
+  });
+}
+
+describe("installed Registry provider discovery", () => {
+  function mockDiscovery({
+    emptyMetadata = false,
+    failedEndpoint,
+    failureStatus = 500,
+  }: {
+    emptyMetadata?: boolean;
+    failedEndpoint?: string;
+    failureStatus?: number;
+  } = {}) {
+    fetchMock.mockImplementation((url: string) => {
+      const endpoint = new URL(url).pathname.split("/").pop();
+      if (endpoint === failedEndpoint) return jsonResponse({}, failureStatus);
+      if (endpoint === "available-artifacts")
+        return jsonResponse({
+          data: [
+            {
+              type: "registry-artifacts",
+              id: "acme-package",
+              attributes: {
+                name: "Acme package",
+                providers: ["acme"],
+                has_provider: true,
+              },
+            },
+          ],
+          meta: { pagination: { page: 1, pages: 1, count: 1 } },
+        });
+      if (endpoint === "artifacts")
+        return jsonResponse({
+          data: [
+            {
+              type: "registry-artifacts",
+              id: "acme-package",
+              attributes: { version_spec: "latest" },
+            },
+          ],
+        });
+      if (endpoint === "providers")
+        return jsonResponse({
+          data: emptyMetadata
+            ? []
+            : [
+                {
+                  id: "acme",
+                  attributes: {
+                    name: "Acme Cloud",
+                    logo_url: "https://media.registry.test/acme.svg",
+                  },
+                },
+              ],
+        });
+      throw new Error(`Unexpected endpoint: ${endpoint}`);
+    });
+  }
+
+  it("joins catalog declarations, installed membership and provider metadata", async () => {
+    mockDiscovery();
+    expect(await getInstalledRegistryProviderOptions()).toEqual({
+      status: "ready",
+      options: [
+        {
+          type: "acme",
+          label: "Acme Cloud",
+          logoUrl: "https://media.registry.test/acme.svg",
+        },
+      ],
+    });
+  });
+
+  it("allows installed-provider discovery without Registry management access", async () => {
+    // Given
+    mockDiscovery({ emptyMetadata: true });
+    evaluateAccessMock.mockResolvedValue({ status: "ineligible" });
+    // When / Then
+    expect(await getInstalledRegistryProviderOptions()).toEqual({
+      status: "ready",
+      options: [{ type: "acme", label: "Acme package" }],
+    });
+    expect(evaluateProviderAccessMock).toHaveBeenCalledWith("access-token");
+    expect(evaluateAccessMock).not.toHaveBeenCalled();
+  });
+
+  it.each(["ineligible", "unknown"])(
+    "denies installed-provider discovery when provider access is %s",
+    async (status) => {
+      // Given
+      evaluateProviderAccessMock.mockResolvedValue({ status });
+      // When / Then
+      expect(await getInstalledRegistryProviderOptions()).toEqual({
+        status: "access_denied",
+      });
+      expect(fetchMock).not.toHaveBeenCalled();
+    },
+  );
+
+  it("uses the declared provider and artifact name when metadata is empty", async () => {
+    mockDiscovery({ emptyMetadata: true });
+    expect(await getInstalledRegistryProviderOptions()).toEqual({
+      status: "ready",
+      options: [{ type: "acme", label: "Acme package" }],
+    });
+  });
+
+  it.each(["available-artifacts", "artifacts", "providers"])(
+    "returns an error when the %s read fails",
+    async (failedEndpoint) => {
+      mockDiscovery({ failedEndpoint });
+      expect(await getInstalledRegistryProviderOptions()).toEqual({
+        status: "error",
+      });
+    },
+  );
+
+  it.each(["available-artifacts", "artifacts", "providers"])(
+    "preserves access denial from the %s read",
+    async (failedEndpoint) => {
+      mockDiscovery({ failedEndpoint, failureStatus: 403 });
+      expect(await getInstalledRegistryProviderOptions()).toEqual({
+        status: "access_denied",
+      });
+    },
+  );
+});
+
+describe("Registry guarded reads", () => {
+  it("recovers when a Registry read stalls", async () => {
+    // Given: the upstream responds only when its request is aborted.
+    vi.useFakeTimers();
+    try {
+      mockRequestDeadlines();
+      fetchMock.mockImplementation(
+        (_url, init?: RequestInit) =>
+          new Promise((_resolve, reject) => {
+            init?.signal?.addEventListener("abort", () =>
+              reject(init.signal?.reason),
+            );
+          }),
+      );
+      const settled = vi.fn();
+
+      // When
+      void refreshRegistryCredential().then(settled);
+      await vi.advanceTimersByTimeAsync(30_000);
+
+      // Then
+      expect(settled).toHaveBeenCalledWith({ status: "error" });
+    } finally {
+      vi.useRealTimers();
+    }
+  });
+
+  it.each([
+    [
+      "credential submission",
+      () => submitRegistryCredential("registry-test-key"),
+    ],
+    ["credential disconnection", disconnectRegistryCredential],
+    [
+      "artifact addition",
+      () => addRegistryArtifact({ normalizedName: "external-package" }),
+    ],
+    ["artifact removal", () => removeRegistryArtifact("external-package")],
+  ])("recovers when %s stalls", async (_name, action) => {
+    // Given: prerequisite reads succeed, but the mutation never responds.
+    vi.useFakeTimers();
+    try {
+      mockRequestDeadlines();
+      fetchMock.mockImplementation((url: string, init?: RequestInit) => {
+        if (init?.method === "POST" || init?.method === "DELETE") {
+          return new Promise((_resolve, reject) => {
+            init.signal?.addEventListener("abort", () =>
+              reject(init.signal?.reason),
+            );
+          });
+        }
+        if (url.includes("available-artifacts")) {
+          return Promise.resolve(
+            jsonResponse({
+              data: [
+                {
+                  type: "registry-artifacts",
+                  id: "external-package",
+                  attributes: { has_provider: true, is_builtin: false },
+                },
+              ],
+              meta: { pagination: { page: 1, pages: 1, count: 1 } },
+            }),
+          );
+        }
+        return Promise.resolve(credentialResponse(noCredential));
+      });
+      const settled = vi.fn();
+
+      // When
+      void action().then(settled);
+      await vi.advanceTimersByTimeAsync(30_000);
+
+      // Then
+      expect(settled).toHaveBeenCalledWith({ status: "error" });
+    } finally {
+      vi.useRealTimers();
+    }
+  });
+
+  it("denies Registry management actions before any Registry endpoint call", async () => {
+    // Given
+    evaluateAccessMock.mockResolvedValue({ status: "ineligible" });
+    const actions = [
+      getRegistryBootstrap,
+      refreshRegistryCredential,
+      refreshRegistryCollections,
+      () => submitRegistryCredential("registry-test-key"),
+      disconnectRegistryCredential,
+    ];
+
+    // When
+    const results = await Promise.all(actions.map((action) => action()));
+
+    // Then
+    expect(results).toEqual(actions.map(() => ({ status: "access_denied" })));
+    expect(evaluateAccessMock).toHaveBeenCalledTimes(actions.length);
+    expect(fetchMock).not.toHaveBeenCalled();
+  });
+
+  it.each(["unknown", "ineligible"])(
+    "does not fetch Registry collections when access is %s",
+    async (status) => {
+      // Given
+      evaluateAccessMock.mockResolvedValue({ status });
+
+      // When
+      const results = await Promise.all([
+        getRegistryBootstrap(),
+        refreshRegistryCredential(),
+        refreshRegistryCollections(),
+      ]);
+
+      // Then
+      expect(results).toEqual([
+        { status: "access_denied" },
+        { status: "access_denied" },
+        { status: status === "unknown" ? "error" : "access_denied" },
+      ]);
+      expect(fetchMock).not.toHaveBeenCalled();
+    },
+  );
+
+  it("bootstraps in credential, tenant-artifact, then complete-catalog order", async () => {
+    // Given
+    fetchMock
+      .mockResolvedValueOnce(credentialResponse())
+      .mockResolvedValueOnce(tenantArtifactsResponse())
+      .mockResolvedValueOnce(catalogResponse());
+
+    // When
+    const result = await getRegistryBootstrap();
+
+    // Then
+    expect(result).toEqual({
+      status: "ready",
+      state: {
+        status: "ready",
+        credential: activeCredential,
+        catalog: {
+          status: "complete",
+          artifacts: [
+            expect.objectContaining({ normalizedName: "prowler-aws" }),
+          ],
+        },
+        tenantArtifacts: [
+          {
+            normalizedName: "prowler-aws",
+            versionSpec: "latest",
+            insertedAt: "2026-03-20T12:00:00Z",
+          },
+        ],
+      },
+    });
+    expect(fetchMock.mock.calls.map(([url]) => url)).toEqual([
+      "https://api.test/api/v1/registry/credential",
+      "https://api.test/api/v1/registry/artifacts",
+      "https://api.test/api/v1/registry/available-artifacts?page%5Bnumber%5D=1&page%5Bsize%5D=100",
+    ]);
+    fetchMock.mock.calls.forEach(([, options]) => {
+      expect(options).toMatchObject({
+        cache: "no-store",
+        headers: {
+          Accept: "application/vnd.api+json",
+          Authorization: "Bearer access-token",
+        },
+      });
+    });
+  });
+
+  it.each([
+    [noCredential, "onboarding"],
+    [pendingCredential, "validation_pending"],
+  ] as const)(
+    "blocks catalog bootstrap as %s credential is authoritative",
+    async (credential, expectedStatus) => {
+      // Given
+      fetchMock
+        .mockResolvedValueOnce(credentialResponse(credential))
+        .mockResolvedValueOnce(tenantArtifactsResponse());
+
+      // When
+      const result = await getRegistryBootstrap();
+
+      // Then
+      expect(result).toEqual({
+        status: "ready",
+        state: {
+          status: expectedStatus,
+          credential,
+          tenantArtifacts: [
+            {
+              normalizedName: "prowler-aws",
+              versionSpec: "latest",
+              insertedAt: "2026-03-20T12:00:00Z",
+            },
+          ],
+        },
+      });
+      expect(fetchMock).toHaveBeenCalledTimes(2);
+    },
+  );
+
+  it("returns only a non-secret status read after a fresh guard", async () => {
+    // Given
+    fetchMock.mockResolvedValueOnce(credentialResponse());
+
+    // When
+    const result = await refreshRegistryCredential();
+
+    // Then
+    expect(result).toEqual({ status: "status", credential: activeCredential });
+    expect(fetchMock).toHaveBeenCalledWith(
+      "https://api.test/api/v1/registry/credential",
+      expect.objectContaining({ cache: "no-store" }),
+    );
+  });
+
+  it("returns fresh complete collections", async () => {
+    // Given
+    fetchMock
+      .mockResolvedValueOnce(catalogResponse())
+      .mockResolvedValueOnce(tenantArtifactsResponse());
+
+    // When
+    const result = await refreshRegistryCollections();
+
+    // Then
+    expect(result).toEqual({
+      status: "complete",
+      catalog: {
+        status: "complete",
+        artifacts: [expect.objectContaining({ normalizedName: "prowler-aws" })],
+      },
+      tenantArtifacts: [
+        {
+          normalizedName: "prowler-aws",
+          versionSpec: "latest",
+          insertedAt: "2026-03-20T12:00:00Z",
+        },
+      ],
+    });
+    expect(evaluateAccessMock).toHaveBeenCalledWith("access-token");
+  });
+
+  it("maps a discovery 409 to onboarding after an authoritative no-credential read", async () => {
+    // Given
+    fetchMock
+      .mockResolvedValueOnce(jsonResponse({ errors: [] }, 409))
+      .mockResolvedValueOnce(credentialResponse(noCredential));
+
+    // When
+    const result = await refreshRegistryCollections();
+
+    // Then
+    expect(result).toEqual({ status: "onboarding" });
+    expect(fetchMock).toHaveBeenCalledTimes(2);
+  });
+
+  it("maps documented read recovery without exposing retained or partial catalog data", async () => {
+    // Given
+    fetchMock.mockResolvedValueOnce(
+      jsonResponse({ errors: [{ code: "registry_key_rejected" }] }, 502),
+    );
+
+    // When
+    const reconnect = await refreshRegistryCollections();
+
+    // Then
+    expect(reconnect).toEqual({ status: "reconnect" });
+
+    // Given
+    fetchMock.mockResolvedValueOnce(
+      jsonResponse({ errors: [{ code: "registry_unavailable" }] }, 503),
+    );
+
+    // When
+    const unavailable = await refreshRegistryCollections();
+
+    // Then
+    expect(unavailable).toEqual({ status: "unavailable" });
+    expect(unavailable).not.toHaveProperty("catalog");
+
+    // Given
+    fetchMock.mockResolvedValueOnce(
+      jsonResponse({ errors: [{ code: "other_failure" }] }, 502),
+    );
+
+    // When
+    const generic = await refreshRegistryCollections();
+
+    // Then
+    expect(generic).toEqual({ status: "error" });
+  });
+
+  it("keeps a transient access check failure retryable when refreshing collections", async () => {
+    // Given: the API cannot answer the permission check during a transient outage.
+    evaluateAccessMock.mockResolvedValueOnce({ status: "unknown" });
+
+    // When / Then: preserve the current page instead of treating the outage as revocation.
+    expect(await refreshRegistryCollections()).toEqual({ status: "error" });
+    expect(fetchMock).not.toHaveBeenCalled();
+  });
+
+  it("maps Registry 401 and 403 to access denial before any recovery classification", async () => {
+    // Given
+    fetchMock.mockResolvedValueOnce(
+      jsonResponse({ errors: [{ code: "registry_key_rejected" }] }, 401),
+    );
+
+    // When
+    const credential = await refreshRegistryCredential();
+
+    // Then
+    expect(credential).toEqual({ status: "access_denied" });
+
+    // Given
+    fetchMock.mockResolvedValueOnce(
+      jsonResponse({ errors: [{ code: "registry_unavailable" }] }, 403),
+    );
+
+    // When
+    const collections = await refreshRegistryCollections();
+
+    // Then
+    expect(collections).toEqual({ status: "access_denied" });
+    expect(fetchMock).toHaveBeenCalledTimes(2);
+  });
+
+  it("rechecks access between separate actions after permission revocation", async () => {
+    // Given
+    evaluateAccessMock
+      .mockResolvedValueOnce({ status: "eligible" })
+      .mockResolvedValueOnce({ status: "ineligible" });
+    fetchMock.mockResolvedValueOnce(credentialResponse());
+
+    // When
+    const first = await refreshRegistryCredential();
+    const second = await refreshRegistryCollections();
+
+    // Then
+    expect(first).toEqual({ status: "status", credential: activeCredential });
+    expect(second).toEqual({ status: "access_denied" });
+    expect(fetchMock).toHaveBeenCalledTimes(1);
+    expect(evaluateAccessMock).toHaveBeenCalledTimes(2);
+  });
+
+  it("returns the accepted validation task immediately without server-side polling", async () => {
+    // Given
+    const key = "  registry-test-key  ";
+    fetchMock
+      .mockResolvedValueOnce(credentialResponse(noCredential))
+      .mockResolvedValueOnce(
+        new Response(
+          JSON.stringify({ data: { type: "tasks", id: "task-123" } }),
+          {
+            status: 202,
+            headers: { "Content-Location": "/api/v1/tasks/task-123" },
+          },
+        ),
+      );
+
+    // When
+    const result = await submitRegistryCredential(key);
+
+    // Then
+    expect(result).toEqual({
+      status: "submitted",
+      taskId: "task-123",
+      priorConfigured: false,
+    });
+    expect(pollTaskUntilSettledMock).not.toHaveBeenCalled();
+    expect(fetchMock).toHaveBeenCalledTimes(2);
+    expect(fetchMock).toHaveBeenNthCalledWith(
+      2,
+      "https://api.test/api/v1/registry/credential",
+      expect.objectContaining({
+        body: JSON.stringify({
+          data: {
+            type: "registry-credentials",
+            attributes: { api_key: key.trim() },
+          },
+        }),
+        cache: "no-store",
+        method: "POST",
+      }),
+    );
+    expect(JSON.stringify(result)).not.toContain(key);
+  });
+
+  it("marks an accepted replacement as superseding a configured credential", async () => {
+    // Given
+    fetchMock
+      .mockResolvedValueOnce(credentialResponse(activeCredential))
+      .mockResolvedValueOnce(
+        new Response(
+          JSON.stringify({ data: { type: "tasks", id: "task-456" } }),
+          {
+            status: 202,
+            headers: { "Content-Location": "/api/v1/tasks/task-456" },
+          },
+        ),
+      );
+
+    // When
+    const result = await submitRegistryCredential("registry-replacement-key");
+
+    // Then
+    expect(result).toEqual({
+      status: "submitted",
+      taskId: "task-456",
+      priorConfigured: true,
+    });
+    expect(pollTaskUntilSettledMock).not.toHaveBeenCalled();
+  });
+
+  it("re-reads credential and preserves authoritative My artifacts after disconnect", async () => {
+    // Given
+    fetchMock
+      .mockResolvedValueOnce(new Response(null, { status: 204 }))
+      .mockResolvedValueOnce(credentialResponse(noCredential))
+      .mockResolvedValueOnce(tenantArtifactsResponse());
+
+    // When
+    const result = await disconnectRegistryCredential();
+
+    // Then
+    expect(result).toEqual({
+      status: "disconnected",
+      credential: noCredential,
+      tenantArtifacts: [
+        {
+          normalizedName: "prowler-aws",
+          versionSpec: "latest",
+          insertedAt: "2026-03-20T12:00:00Z",
+        },
+      ],
+    });
+    expect(fetchMock.mock.calls.map(([url]) => url)).toEqual([
+      "https://api.test/api/v1/registry/credential",
+      "https://api.test/api/v1/registry/credential",
+      "https://api.test/api/v1/registry/artifacts",
+    ]);
+    expect(fetchMock).toHaveBeenNthCalledWith(
+      1,
+      "https://api.test/api/v1/registry/credential",
+      expect.objectContaining({ cache: "no-store", method: "DELETE" }),
+    );
+  });
+
+  it("rejects a task-binding mismatch without returning the key or a task", async () => {
+    // Given
+    const key = "registry-test-key";
+    fetchMock
+      .mockResolvedValueOnce(credentialResponse(noCredential))
+      .mockResolvedValueOnce(
+        new Response(
+          JSON.stringify({ data: { type: "tasks", id: "task-123" } }),
+          {
+            status: 202,
+            headers: { "Content-Location": "/api/v1/tasks/other-task" },
+          },
+        ),
+      );
+
+    // When
+    const result = await submitRegistryCredential(key);
+
+    // Then
+    expect(result).toEqual({ status: "error" });
+    expect(fetchMock).toHaveBeenCalledTimes(2);
+    expect(pollTaskUntilSettledMock).not.toHaveBeenCalled();
+    expect(JSON.stringify(result)).not.toContain(key);
+  });
+
+  it("rejects malformed accepted task data without a task identity", async () => {
+    // Given
+    fetchMock
+      .mockResolvedValueOnce(credentialResponse(noCredential))
+      .mockResolvedValueOnce(
+        new Response(
+          JSON.stringify({ data: { type: "not-a-task", id: "task-123" } }),
+          {
+            status: 202,
+            headers: { "Content-Location": "/api/v1/tasks/task-123" },
+          },
+        ),
+      );
+
+    // When
+    const result = await submitRegistryCredential("registry-test-key");
+
+    // Then
+    expect(result).toEqual({ status: "error" });
+    expect(fetchMock).toHaveBeenCalledTimes(2);
+    expect(result).not.toHaveProperty("taskId");
+  });
+
+  it("preserves an active credential after a rejected replacement", async () => {
+    // Given
+    const key = "registry-replacement-key";
+    fetchMock
+      .mockResolvedValueOnce(credentialResponse(activeCredential))
+      .mockResolvedValueOnce(jsonResponse({ errors: [] }, 500));
+
+    // When
+    const result = await submitRegistryCredential(key);
+
+    // Then
+    expect(result).toEqual({
+      status: "replacement_failed",
+      credential: activeCredential,
+    });
+    expect(fetchMock).toHaveBeenCalledTimes(2);
+    expect(JSON.stringify(result)).not.toContain(key);
+  });
+
+  it("handles action authorization failures safely", async () => {
+    // Given
+    fetchMock
+      .mockResolvedValueOnce(credentialResponse(noCredential))
+      .mockResolvedValueOnce(jsonResponse({ errors: [] }, 401))
+      .mockResolvedValueOnce(jsonResponse({ errors: [] }, 403));
+
+    // When
+    const rejected = await submitRegistryCredential("registry-test-key");
+    const disconnected = await disconnectRegistryCredential();
+
+    // Then
+    expect(rejected).toEqual({ status: "access_denied" });
+    expect(disconnected).toEqual({ status: "access_denied" });
+    expect(fetchMock).toHaveBeenCalledTimes(3);
+  });
+});
+
+const installCatalogMock = vi.fn();
+describe("Registry artifact mutations", () => {
+  beforeEach(() => {
+    installCatalogMock.mockImplementation(() =>
+      jsonResponse({
+        data: [
+          {
+            type: "registry-available-artifacts",
+            id: "later-guard",
+            attributes: {
+              has_provider: true,
+              is_builtin: false,
+              providers: ["acme"],
+            },
+          },
+        ],
+        meta: { pagination: { page: 1, pages: 1, count: 1 } },
+      }),
+    );
+    vi.stubGlobal("fetch", (url: string, options?: RequestInit) =>
+      url.includes("/available-artifacts")
+        ? installCatalogMock(url, options)
+        : fetchMock(url, options),
+    );
+  });
+
+  it.each([
+    { has_provider: true, is_builtin: true },
+    { has_provider: false, is_builtin: false },
+  ])(
+    "refuses ineligible catalog entries before POST: %j",
+    async (attributes) => {
+      // Given
+      installCatalogMock.mockImplementation(() =>
+        jsonResponse({
+          data: [
+            {
+              type: "registry-available-artifacts",
+              id: "later-guard",
+              attributes,
+            },
+          ],
+          meta: { pagination: { page: 1, pages: 1, count: 1 } },
+        }),
+      );
+      // When
+      const result = await addRegistryArtifact({
+        normalizedName: "later-guard",
+      });
+      // Then
+      expect(result).toMatchObject({ status: "refused" });
+      expect(fetchMock).not.toHaveBeenCalled();
+    },
+  );
+
+  it("returns an accepted Add task without reading My artifacts", async () => {
+    // Given
+    fetchMock.mockResolvedValueOnce(
+      new Response(
+        JSON.stringify({ data: { type: "tasks", id: "artifact-task" } }),
+        {
+          status: 202,
+          headers: { "Content-Location": "/api/v1/tasks/artifact-task" },
+        },
+      ),
+    );
+
+    // When
+    const result = await addRegistryArtifact({
+      normalizedName: "later-guard",
+      versionSpec: " 2.0.0 ",
+    });
+
+    // Then
+    expect(result).toEqual({ status: "submitted", taskId: "artifact-task" });
+    expect(fetchMock).toHaveBeenCalledTimes(1);
+    expect(fetchMock).toHaveBeenNthCalledWith(
+      1,
+      "https://api.test/api/v1/registry/artifacts",
+      expect.objectContaining({
+        body: JSON.stringify({
+          data: {
+            type: "registry-artifacts",
+            attributes: {
+              normalized_name: "later-guard",
+              version_spec: "2.0.0",
+            },
+          },
+        }),
+        cache: "no-store",
+        method: "POST",
+      }),
+    );
+  });
+
+  it("defaults Add to latest", async () => {
+    // Given
+    fetchMock.mockResolvedValueOnce(
+      new Response(
+        JSON.stringify({ data: { type: "tasks", id: "artifact-task" } }),
+        {
+          status: 202,
+          headers: { "Content-Location": "/api/v1/tasks/artifact-task" },
+        },
+      ),
+    );
+
+    // When
+    const result = await addRegistryArtifact({ normalizedName: "later-guard" });
+
+    // Then
+    expect(result).toEqual({ status: "submitted", taskId: "artifact-task" });
+    expect(fetchMock).toHaveBeenNthCalledWith(
+      1,
+      "https://api.test/api/v1/registry/artifacts",
+      expect.objectContaining({
+        body: JSON.stringify({
+          data: {
+            type: "registry-artifacts",
+            attributes: {
+              normalized_name: "later-guard",
+              version_spec: "latest",
+            },
+          },
+        }),
+      }),
+    );
+  });
+
+  it("rejects invalid accepted task bindings without reading My artifacts", async () => {
+    // Given
+    const document = JSON.stringify({
+      data: { type: "tasks", id: "artifact-task" },
+    });
+    fetchMock
+      .mockResolvedValueOnce(
+        new Response(JSON.stringify({ data: { type: "tasks" } }), {
+          status: 202,
+          headers: { "Content-Location": "/api/v1/tasks/artifact-task" },
+        }),
+      )
+      .mockResolvedValueOnce(new Response(document, { status: 202 }))
+      .mockResolvedValueOnce(
+        new Response(
+          JSON.stringify({ data: { type: "other", id: "artifact-task" } }),
+          {
+            status: 202,
+            headers: { "Content-Location": "/api/v1/tasks/artifact-task" },
+          },
+        ),
+      )
+      .mockResolvedValueOnce(
+        new Response(document, {
+          status: 202,
+          headers: { "Content-Location": "/api/v1/tasks/other" },
+        }),
+      );
+
+    // When
+    const outcomes = await Promise.all(
+      ["missing-id", "missing-location", "wrong-type", "wrong-location"].map(
+        () => addRegistryArtifact({ normalizedName: "later-guard" }),
+      ),
+    );
+
+    // Then
+    expect(outcomes).toEqual(Array(4).fill({ status: "error" }));
+    expect(fetchMock).toHaveBeenCalledTimes(4);
+  });
+
+  it("keeps a missing Registry credential synchronous", async () => {
+    // Given
+    fetchMock.mockResolvedValueOnce(jsonResponse({ errors: [] }, 409));
+
+    // When
+    const outcome = await addRegistryArtifact({
+      normalizedName: "later-guard",
+    });
+
+    // Then
+    expect(outcome).toEqual({ status: "onboarding" });
+    expect(fetchMock).toHaveBeenCalledOnce();
+  });
+
+  it.each([
+    ["registry_artifact_not_found", "This artifact is no longer available."],
+    ["version_yanked", "This version is no longer available."],
+    [
+      "version_not_verified",
+      "This version is not verified and cannot be added.",
+    ],
+    ["version_not_processed", "This version is not ready to add yet."],
+    ["version_not_found", "This version is not available."],
+    ["no_installable_version", "No available version can be added."],
+  ])("keeps membership unchanged for %s", async (code, message) => {
+    // Given
+    fetchMock.mockResolvedValueOnce(
+      jsonResponse(
+        { errors: [{ code }] },
+        code === "registry_artifact_not_found" ? 404 : 400,
+      ),
+    );
+
+    // When
+    const result = await addRegistryArtifact({
+      normalizedName: "later-guard",
+      versionSpec: "2.0.0",
+    });
+
+    // Then
+    expect(result).toEqual({ status: "refused", message });
+    expect(fetchMock).toHaveBeenCalledTimes(1);
+  });
+
+  it("reports an in-use artifact when Remove returns 409 without refreshing membership", async () => {
+    // Given
+    fetchMock.mockResolvedValueOnce(new Response(null, { status: 409 }));
+
+    // When
+    const result = await removeRegistryArtifact("aws-guard");
+
+    // Then
+    expect(result).toEqual({ status: "in_use" });
+    expect(fetchMock).toHaveBeenCalledTimes(1);
+  });
+
+  it.each([
+    [401, "access_denied"],
+    [403, "access_denied"],
+    [400, "error"],
+    [500, "error"],
+  ])("preserves the Remove failure for HTTP %s", async (status, expected) => {
+    // Given
+    fetchMock.mockResolvedValueOnce(new Response(null, { status }));
+
+    // When
+    const result = await removeRegistryArtifact("aws-guard");
+
+    // Then
+    expect(result).toEqual({ status: expected });
+    expect(fetchMock).toHaveBeenCalledTimes(1);
+  });
+
+  it("reports a Remove network failure without refreshing membership", async () => {
+    // Given
+    fetchMock.mockRejectedValueOnce(new TypeError("Failed to fetch"));
+
+    // When
+    const result = await removeRegistryArtifact("aws-guard");
+
+    // Then
+    expect(result).toEqual({ status: "error" });
+    expect(fetchMock).toHaveBeenCalledTimes(1);
+  });
+
+  it("encodes the deletion identity and confirms Remove after an absent refresh", async () => {
+    // Given
+    fetchMock
+      .mockResolvedValueOnce(new Response(null, { status: 204 }))
+      .mockResolvedValueOnce(jsonResponse({ data: [] }));
+
+    // When
+    const result = await removeRegistryArtifact("guard/with space");
+
+    // Then
+    expect(result).toEqual({ status: "confirmed", tenantArtifacts: [] });
+    expect(fetchMock).toHaveBeenNthCalledWith(
+      1,
+      "https://api.test/api/v1/registry/artifacts/guard%2Fwith%20space",
+      expect.objectContaining({ cache: "no-store", method: "DELETE" }),
+    );
+  });
+
+  it.each(["1.0.0", null, undefined])(
+    "does not confirm an update when the installed version is %j",
+    async (resolvedVersion) => {
+      // Given
+      fetchMock.mockResolvedValueOnce(
+        jsonResponse({
+          data: [
+            {
+              type: "registry-artifacts",
+              id: "template",
+              attributes: {
+                version_spec: "latest",
+                resolved_version: resolvedVersion,
+              },
+            },
+          ],
+        }),
+      );
+      // When
+      const result = await confirmRegistryArtifactAddition("template", "1.1.0");
+      // Then
+      expect(result).toEqual({ status: "refresh_failed" });
+    },
+  );
+
+  it("confirms an update only after reading its resolved target version", async () => {
+    // Given
+    fetchMock.mockResolvedValueOnce(
+      jsonResponse({
+        data: [
+          {
+            type: "registry-artifacts",
+            id: "template",
+            attributes: { version_spec: "latest", resolved_version: "1.1.0" },
+          },
+        ],
+      }),
+    );
+    // When / Then
+    expect(
+      await confirmRegistryArtifactAddition("template", "1.1.0"),
+    ).toMatchObject({
+      status: "confirmed",
+      tenantArtifacts: [
+        { normalizedName: "template", resolvedVersion: "1.1.0" },
+      ],
+    });
+  });
+
+  it.each([
+    [
+      "Add",
+      () => addRegistryArtifact({ normalizedName: "later-guard" }),
+      { data: [] },
+      { status: "error" },
+      1,
+    ],
+    [
+      "Remove",
+      () => removeRegistryArtifact("later-guard"),
+      {
+        data: [
+          {
+            type: "registry-artifacts",
+            id: "later-guard",
+            attributes: { version_spec: "latest" },
+          },
+        ],
+      },
+      { status: "refresh_failed" },
+      2,
+    ],
+  ])(
+    "keeps membership unchanged when %s refresh contradicts acceptance",
+    async (_name, mutate, refreshedArtifacts, expected, calls) => {
+      // Given
+      fetchMock
+        .mockResolvedValueOnce(new Response(null, { status: 204 }))
+        .mockResolvedValueOnce(jsonResponse(refreshedArtifacts));
+
+      // When
+      const result = await mutate();
+
+      // Then
+      expect(result).toEqual(expected);
+      expect(fetchMock).toHaveBeenCalledTimes(calls);
+    },
+  );
+});
diff --git a/ui/actions/registry/registry.ts b/ui/actions/registry/registry.ts
new file mode 100644
index 0000000000..a67c83e57f
--- /dev/null
+++ b/ui/actions/registry/registry.ts
@@ -0,0 +1,578 @@
+"use server";
+
+import { z } from "zod";
+
+import { auth } from "@/auth.config";
+import { apiBaseUrl } from "@/lib";
+import { REGISTRY_ACCESS } from "@/lib/registry/access";
+import {
+  evaluateRegistryAccess,
+  evaluateRegistryProviderAccess,
+} from "@/lib/registry/access.server";
+import { isRegistryArtifactInstallable } from "@/lib/registry/artifacts";
+import { isActiveRegistryCredential } from "@/lib/registry/credential-task";
+import {
+  buildRegistryProviderOptions,
+  type RegistryProviderOption,
+} from "@/lib/registry/provider-options";
+import {
+  REGISTRY_ARTIFACT_ACTION,
+  REGISTRY_ARTIFACT_REMOVAL,
+  REGISTRY_BOOTSTRAP_STATE,
+  REGISTRY_CATALOG,
+  REGISTRY_CREDENTIAL_ACTION,
+  REGISTRY_CREDENTIAL_READ,
+  REGISTRY_ENDPOINT,
+  REGISTRY_FAILURE,
+  REGISTRY_SUBMISSION,
+  type RegistryAddArtifactInput,
+  type RegistryArtifactRemovalResult,
+  type RegistryBootstrapResult,
+  type RegistryBootstrapState,
+  type RegistryCollectionsResult,
+  type RegistryCredentialActionResult,
+  type RegistryCredentialReadResult,
+  type RegistryCredentialStatus,
+  type RegistryCredentialSubmitResult,
+  type RegistryFailureResult,
+  type RegistryMutationResult,
+} from "@/types/registry";
+
+import {
+  adaptRegistryCredentialStatus,
+  adaptRegistryTenantArtifacts,
+  classifyRegistryFailure,
+  classifyRegistryMutationRefusal,
+  collectCompleteRegistryCatalog,
+  isRegistryCollection,
+  parseRegistryArtifactSubmission,
+  parseRegistryCredentialSubmission,
+  RegistryCatalogPageError,
+} from "./registry.adapter";
+
+const REGISTRY_REQUEST_TIMEOUT_MS = 15_000;
+
+async function getRegistryAccess(): Promise<string | null> {
+  const accessToken = (await auth())?.accessToken;
+  const access = await evaluateRegistryAccess(accessToken);
+  return access.status === REGISTRY_ACCESS.ELIGIBLE && accessToken?.trim()
+    ? accessToken
+    : null;
+}
+
+async function readRegistryResponse(
+  accessToken: string,
+  resource: string,
+  endpoint: (typeof REGISTRY_ENDPOINT)[keyof typeof REGISTRY_ENDPOINT],
+  credential: RegistryCredentialStatus | null = null,
+  searchParams?: URLSearchParams,
+): Promise<Response | RegistryFailureResult> {
+  const url = new URL(`${apiBaseUrl}/registry/${resource}`);
+  if (searchParams) url.search = searchParams.toString();
+
+  let response: Response;
+  try {
+    response = await fetch(url.toString(), {
+      cache: "no-store",
+      signal: AbortSignal.timeout(REGISTRY_REQUEST_TIMEOUT_MS),
+      headers: {
+        Accept: "application/vnd.api+json",
+        Authorization: `Bearer ${accessToken}`,
+      },
+    });
+  } catch {
+    return { status: REGISTRY_FAILURE.ERROR };
+  }
+  if (response.ok) return response;
+
+  return endpoint === REGISTRY_ENDPOINT.PROVIDERS ||
+    endpoint === REGISTRY_ENDPOINT.AVAILABLE_ARTIFACTS
+    ? classifyDiscoveryFailure(response, endpoint, accessToken, credential)
+    : classifyRegistryFailure(response, endpoint, credential);
+}
+
+async function readRegistryCredential(accessToken: string) {
+  const result = await readRegistryResponse(
+    accessToken,
+    "credential",
+    REGISTRY_ENDPOINT.CREDENTIAL,
+  );
+  if (!(result instanceof Response)) return result;
+
+  const credential = adaptRegistryCredentialStatus(
+    await result.json().catch(() => undefined),
+  );
+  return credential
+    ? { status: REGISTRY_CREDENTIAL_READ.STATUS, credential }
+    : { status: REGISTRY_FAILURE.ERROR };
+}
+
+async function readRegistryTenantArtifacts(accessToken: string) {
+  const result = await readRegistryResponse(
+    accessToken,
+    "artifacts",
+    REGISTRY_ENDPOINT.MUTATION,
+  );
+  if (!(result instanceof Response)) return result;
+
+  const tenantArtifacts = adaptRegistryTenantArtifacts(
+    await result.json().catch(() => undefined),
+  );
+  return tenantArtifacts
+    ? { status: "ready" as const, tenantArtifacts }
+    : { status: REGISTRY_FAILURE.ERROR };
+}
+
+async function classifyDiscoveryFailure(
+  response: Response,
+  endpoint:
+    | typeof REGISTRY_ENDPOINT.PROVIDERS
+    | typeof REGISTRY_ENDPOINT.AVAILABLE_ARTIFACTS,
+  accessToken: string,
+  credential: RegistryCredentialStatus | null,
+) {
+  if (response.status === 409 && credential === null) {
+    const currentCredential = await readRegistryCredential(accessToken);
+    if (currentCredential.status === REGISTRY_FAILURE.ACCESS_DENIED) {
+      return currentCredential;
+    }
+    credential =
+      currentCredential.status === REGISTRY_CREDENTIAL_READ.STATUS
+        ? currentCredential.credential
+        : null;
+  }
+  return classifyRegistryFailure(response, endpoint, credential);
+}
+
+async function readRegistryProviders(
+  accessToken: string,
+  credential: RegistryCredentialStatus | null,
+) {
+  const result = await readRegistryResponse(
+    accessToken,
+    "providers",
+    REGISTRY_ENDPOINT.PROVIDERS,
+    credential,
+  );
+  if (!(result instanceof Response)) return result;
+  const payload = await result.json().catch(() => undefined);
+  const metadata = z
+    .object({
+      data: z.array(
+        z.object({
+          id: z.string(),
+          attributes: z
+            .object({
+              name: z.string().optional(),
+              logo_url: z.string().nullable().optional(),
+            })
+            .optional(),
+        }),
+      ),
+    })
+    .safeParse(payload);
+  return isRegistryCollection(payload)
+    ? {
+        status: "ready" as const,
+        providers: metadata.success
+          ? metadata.data.data.map((provider) => ({
+              type: provider.id,
+              label: provider.attributes?.name || provider.id,
+              ...(provider.attributes?.logo_url
+                ? { logoUrl: provider.attributes.logo_url }
+                : {}),
+            }))
+          : [],
+      }
+    : { status: REGISTRY_FAILURE.ERROR };
+}
+
+export async function getInstalledRegistryProviderOptions(): Promise<
+  | { status: "ready"; options: RegistryProviderOption[] }
+  | { status: "access_denied" | "error" }
+> {
+  const access = (await auth())?.accessToken;
+  const permission = await evaluateRegistryProviderAccess(access);
+  if (!access || permission.status !== REGISTRY_ACCESS.ELIGIBLE)
+    return { status: "access_denied" };
+  const [catalog, installed, providers] = await Promise.all([
+    readCompleteRegistryCatalog(access, null),
+    readRegistryTenantArtifacts(access),
+    readRegistryProviders(access, null),
+  ]);
+  if (
+    [catalog.status, installed.status, providers.status].some(
+      (status) => status === REGISTRY_FAILURE.ACCESS_DENIED,
+    )
+  )
+    return { status: "access_denied" };
+  if (
+    catalog.status !== REGISTRY_CATALOG.COMPLETE ||
+    installed.status !== "ready" ||
+    providers.status !== "ready"
+  )
+    return { status: "error" };
+  return {
+    status: "ready",
+    options: buildRegistryProviderOptions(
+      catalog.artifacts,
+      installed.tenantArtifacts,
+      providers.providers,
+    ),
+  };
+}
+
+async function readCompleteRegistryCatalog(
+  accessToken: string,
+  credential: RegistryCredentialStatus | null,
+) {
+  try {
+    return await collectCompleteRegistryCatalog(async (_page, searchParams) => {
+      const result = await readRegistryResponse(
+        accessToken,
+        "available-artifacts",
+        REGISTRY_ENDPOINT.AVAILABLE_ARTIFACTS,
+        credential,
+        searchParams,
+      );
+      if (!(result instanceof Response))
+        throw new RegistryCatalogPageError(result);
+      return result.json();
+    });
+  } catch (error) {
+    return error instanceof RegistryCatalogPageError
+      ? error.failure
+      : { status: REGISTRY_FAILURE.ERROR };
+  }
+}
+
+async function confirmRegistryMutation(
+  accessToken: string,
+  normalizedName: string,
+  shouldBePresent: boolean,
+  expectedVersion?: string,
+): Promise<RegistryMutationResult> {
+  const tenantArtifacts = await readRegistryTenantArtifacts(accessToken);
+  if (tenantArtifacts.status === REGISTRY_FAILURE.ACCESS_DENIED)
+    return tenantArtifacts;
+  if (
+    tenantArtifacts.status !== "ready" ||
+    tenantArtifacts.tenantArtifacts.some(
+      (artifact) => artifact.normalizedName === normalizedName,
+    ) !== shouldBePresent ||
+    (expectedVersion !== undefined &&
+      tenantArtifacts.tenantArtifacts.find(
+        (artifact) => artifact.normalizedName === normalizedName,
+      )?.resolvedVersion !== expectedVersion.trim())
+  ) {
+    return { status: "refresh_failed" };
+  }
+  return {
+    status: "confirmed",
+    tenantArtifacts: tenantArtifacts.tenantArtifacts,
+  };
+}
+
+function bootstrapReady(
+  state: RegistryBootstrapState,
+): RegistryBootstrapResult {
+  return { status: REGISTRY_BOOTSTRAP_STATE.READY, state };
+}
+
+function bootstrapFailure(
+  failure: RegistryFailureResult,
+): RegistryBootstrapResult {
+  if (failure.status === REGISTRY_FAILURE.ACCESS_DENIED) {
+    return { status: REGISTRY_FAILURE.ACCESS_DENIED };
+  }
+  return bootstrapReady({
+    status:
+      failure.status === REGISTRY_FAILURE.ONBOARDING
+        ? REGISTRY_BOOTSTRAP_STATE.ERROR
+        : failure.status,
+  });
+}
+
+export async function getRegistryBootstrap(): Promise<RegistryBootstrapResult> {
+  const access = await getRegistryAccess();
+  if (!access) return { status: REGISTRY_FAILURE.ACCESS_DENIED };
+
+  const credentialRead = await readRegistryCredential(access);
+  if (credentialRead.status !== REGISTRY_CREDENTIAL_READ.STATUS) {
+    return bootstrapFailure(credentialRead);
+  }
+  const tenantArtifactsRead = await readRegistryTenantArtifacts(access);
+  if (tenantArtifactsRead.status !== "ready") {
+    return bootstrapFailure(tenantArtifactsRead);
+  }
+
+  const { credential } = credentialRead;
+  const { tenantArtifacts } = tenantArtifactsRead;
+  if (!isActiveRegistryCredential(credential)) {
+    return bootstrapReady({
+      status: credential.validationPending
+        ? REGISTRY_BOOTSTRAP_STATE.VALIDATION_PENDING
+        : REGISTRY_BOOTSTRAP_STATE.ONBOARDING,
+      credential,
+      tenantArtifacts,
+    });
+  }
+
+  const catalog = await readCompleteRegistryCatalog(access, credential);
+  if (catalog.status === REGISTRY_FAILURE.ACCESS_DENIED) {
+    return { status: REGISTRY_FAILURE.ACCESS_DENIED };
+  }
+  if (catalog.status === REGISTRY_CATALOG.INCOMPLETE) {
+    return bootstrapReady({
+      status: REGISTRY_BOOTSTRAP_STATE.INCOMPLETE,
+      catalog,
+    });
+  }
+  if (catalog.status !== REGISTRY_CATALOG.COMPLETE) {
+    return bootstrapFailure(catalog);
+  }
+
+  return bootstrapReady({
+    status: REGISTRY_BOOTSTRAP_STATE.READY,
+    credential,
+    catalog,
+    tenantArtifacts,
+  });
+}
+
+export async function refreshRegistryCredential(): Promise<RegistryCredentialReadResult> {
+  const access = await getRegistryAccess();
+  if (!access) return { status: REGISTRY_FAILURE.ACCESS_DENIED };
+  return readRegistryCredential(access);
+}
+
+export async function refreshRegistryCollections(): Promise<RegistryCollectionsResult> {
+  const access = (await auth())?.accessToken;
+  const permission = await evaluateRegistryAccess(access);
+  if (permission.status === REGISTRY_ACCESS.UNKNOWN)
+    return { status: REGISTRY_FAILURE.ERROR };
+  if (permission.status !== REGISTRY_ACCESS.ELIGIBLE || !access?.trim())
+    return { status: REGISTRY_FAILURE.ACCESS_DENIED };
+
+  const catalog = await readCompleteRegistryCatalog(access, null);
+  if (catalog.status !== REGISTRY_CATALOG.COMPLETE) return catalog;
+  const tenantArtifactsRead = await readRegistryTenantArtifacts(access);
+  return tenantArtifactsRead.status === "ready"
+    ? {
+        status: REGISTRY_CATALOG.COMPLETE,
+        catalog,
+        tenantArtifacts: tenantArtifactsRead.tenantArtifacts,
+      }
+    : tenantArtifactsRead;
+}
+
+export async function addRegistryArtifact({
+  normalizedName,
+  versionSpec,
+}: RegistryAddArtifactInput): Promise<RegistryMutationResult> {
+  const access = await getRegistryAccess();
+  if (!access) return { status: REGISTRY_FAILURE.ACCESS_DENIED } as const;
+  if (
+    typeof normalizedName !== "string" ||
+    !normalizedName.trim() ||
+    (versionSpec !== undefined && typeof versionSpec !== "string")
+  )
+    return { status: REGISTRY_FAILURE.ERROR };
+  const catalog = await readCompleteRegistryCatalog(access, null);
+  if (catalog.status !== REGISTRY_CATALOG.COMPLETE) {
+    return catalog.status === REGISTRY_CATALOG.INCOMPLETE
+      ? { status: REGISTRY_FAILURE.ERROR }
+      : catalog;
+  }
+  const artifact = catalog.artifacts.find(
+    (entry) => entry.normalizedName === normalizedName,
+  );
+  if (!artifact || !isRegistryArtifactInstallable(artifact))
+    return {
+      status: "refused",
+      message: "Only external provider artifacts can be added.",
+    };
+  const selectedVersion = versionSpec?.trim() || "latest";
+
+  let response: Response;
+  try {
+    response = await fetch(`${apiBaseUrl}/registry/artifacts`, {
+      method: "POST",
+      cache: "no-store",
+      signal: AbortSignal.timeout(REGISTRY_REQUEST_TIMEOUT_MS),
+      headers: {
+        Accept: "application/vnd.api+json",
+        "Content-Type": "application/vnd.api+json",
+        Authorization: `Bearer ${access}`,
+      },
+      body: JSON.stringify({
+        data: {
+          type: "registry-artifacts",
+          attributes: {
+            normalized_name: normalizedName,
+            version_spec: selectedVersion,
+          },
+        },
+      }),
+    });
+  } catch {
+    return { status: REGISTRY_FAILURE.ERROR } as const;
+  }
+  if (response.status === 401 || response.status === 403) {
+    return { status: REGISTRY_FAILURE.ACCESS_DENIED } as const;
+  }
+  if (response.status === 409) {
+    return { status: REGISTRY_FAILURE.ONBOARDING };
+  }
+  if (!response.ok) {
+    return (
+      (await classifyRegistryMutationRefusal(response)) ?? {
+        status: REGISTRY_FAILURE.ERROR,
+      }
+    );
+  }
+
+  const submission = await parseRegistryArtifactSubmission(response);
+  return submission.status === REGISTRY_SUBMISSION.PENDING
+    ? { status: REGISTRY_ARTIFACT_ACTION.SUBMITTED, taskId: submission.taskId }
+    : { status: REGISTRY_FAILURE.ERROR };
+}
+
+export async function confirmRegistryArtifactAddition(
+  normalizedName: string,
+  expectedVersion?: string,
+): Promise<RegistryMutationResult> {
+  const access = await getRegistryAccess();
+  if (!access) return { status: REGISTRY_FAILURE.ACCESS_DENIED };
+  if (
+    expectedVersion !== undefined &&
+    (typeof expectedVersion !== "string" || !expectedVersion.trim())
+  ) {
+    return { status: REGISTRY_FAILURE.ERROR };
+  }
+  return confirmRegistryMutation(access, normalizedName, true, expectedVersion);
+}
+
+export async function removeRegistryArtifact(
+  normalizedName: string,
+): Promise<RegistryArtifactRemovalResult> {
+  const access = await getRegistryAccess();
+  if (!access) return { status: REGISTRY_FAILURE.ACCESS_DENIED };
+
+  let response: Response;
+  try {
+    response = await fetch(
+      `${apiBaseUrl}/registry/artifacts/${encodeURIComponent(normalizedName)}`,
+      {
+        method: "DELETE",
+        cache: "no-store",
+        signal: AbortSignal.timeout(REGISTRY_REQUEST_TIMEOUT_MS),
+        headers: {
+          Accept: "application/vnd.api+json",
+          Authorization: `Bearer ${access}`,
+        },
+      },
+    );
+  } catch {
+    return { status: REGISTRY_FAILURE.ERROR };
+  }
+  if (response.status === 401 || response.status === 403) {
+    return { status: REGISTRY_FAILURE.ACCESS_DENIED };
+  }
+  if (response.status === 409) {
+    return { status: REGISTRY_ARTIFACT_REMOVAL.IN_USE };
+  }
+  if (!response.ok) return { status: REGISTRY_FAILURE.ERROR };
+
+  return confirmRegistryMutation(access, normalizedName, false);
+}
+
+export async function submitRegistryCredential(
+  key: string,
+): Promise<RegistryCredentialSubmitResult> {
+  const access = await getRegistryAccess();
+  if (!access) return { status: REGISTRY_FAILURE.ACCESS_DENIED };
+
+  const priorCredential = await readRegistryCredential(access);
+  if (priorCredential.status !== REGISTRY_CREDENTIAL_READ.STATUS) {
+    return priorCredential;
+  }
+
+  let response: Response;
+  try {
+    response = await fetch(`${apiBaseUrl}/registry/credential`, {
+      method: "POST",
+      cache: "no-store",
+      signal: AbortSignal.timeout(REGISTRY_REQUEST_TIMEOUT_MS),
+      headers: {
+        Accept: "application/vnd.api+json",
+        "Content-Type": "application/vnd.api+json",
+        Authorization: `Bearer ${access}`,
+      },
+      body: JSON.stringify({
+        data: {
+          type: "registry-credentials",
+          attributes: { api_key: key.trim() },
+        },
+      }),
+    });
+  } catch {
+    return { status: REGISTRY_FAILURE.ERROR };
+  }
+  if (response.status === 401 || response.status === 403) {
+    return { status: REGISTRY_FAILURE.ACCESS_DENIED };
+  }
+
+  // The task settles client-side through the task watcher; this action only
+  // hands back the verified task identity so the caller can watch it.
+  const submission = await parseRegistryCredentialSubmission(response);
+  if (submission.status !== REGISTRY_SUBMISSION.PENDING) {
+    return priorCredential.credential.configured
+      ? {
+          status: REGISTRY_CREDENTIAL_ACTION.REPLACEMENT_FAILED,
+          credential: priorCredential.credential,
+        }
+      : { status: REGISTRY_FAILURE.ERROR };
+  }
+
+  return {
+    status: REGISTRY_CREDENTIAL_ACTION.SUBMITTED,
+    taskId: submission.taskId,
+    priorConfigured: priorCredential.credential.configured,
+  };
+}
+
+export async function disconnectRegistryCredential(): Promise<RegistryCredentialActionResult> {
+  const access = await getRegistryAccess();
+  if (!access) return { status: REGISTRY_FAILURE.ACCESS_DENIED };
+
+  let response: Response;
+  try {
+    response = await fetch(`${apiBaseUrl}/registry/credential`, {
+      method: "DELETE",
+      cache: "no-store",
+      signal: AbortSignal.timeout(REGISTRY_REQUEST_TIMEOUT_MS),
+      headers: {
+        Accept: "application/vnd.api+json",
+        Authorization: `Bearer ${access}`,
+      },
+    });
+  } catch {
+    return { status: REGISTRY_FAILURE.ERROR };
+  }
+  if (response.status === 401 || response.status === 403) {
+    return { status: REGISTRY_FAILURE.ACCESS_DENIED };
+  }
+
+  const credential = await readRegistryCredential(access);
+  const tenantArtifacts = await readRegistryTenantArtifacts(access);
+  if (credential.status !== REGISTRY_CREDENTIAL_READ.STATUS) return credential;
+  if (tenantArtifacts.status !== "ready") return tenantArtifacts;
+  if (!response.ok) return { status: REGISTRY_FAILURE.ERROR };
+
+  return {
+    status: REGISTRY_CREDENTIAL_ACTION.DISCONNECTED,
+    credential: credential.credential,
+    tenantArtifacts: tenantArtifacts.tenantArtifacts,
+  };
+}
diff --git a/ui/actions/roles/roles.test.ts b/ui/actions/roles/roles.test.ts
index 3b253cce58..6c79579b99 100644
--- a/ui/actions/roles/roles.test.ts
+++ b/ui/actions/roles/roles.test.ts
@@ -50,6 +50,7 @@ const makeRoleFormData = () => {
   formData.set("manage_scans", "false");
   formData.set("manage_alerts", "true");
   formData.set("manage_lighthouse_ai_configuration", "true");
+  formData.set("manage_registry", "true");
   formData.set("unlimited_visibility", "false");
   return formData;
 };
@@ -73,6 +74,36 @@ describe("role actions", () => {
     vi.unstubAllEnvs();
   });
 
+  it("includes manage_registry when creating and updating a role in Prowler Cloud", async () => {
+    // Given
+    vi.stubEnv("UI_CLOUD_ENABLED", "true");
+
+    // When
+    await addRole(makeRoleFormData());
+    const createAttributes = lastRequestBody().data.attributes;
+    await updateRole(makeRoleFormData(), "role-1");
+    const updateAttributes = lastRequestBody().data.attributes;
+
+    // Then
+    expect(createAttributes.manage_registry).toBe(true);
+    expect(updateAttributes.manage_registry).toBe(true);
+  });
+
+  it("omits manage_registry when creating and updating a role outside Prowler Cloud", async () => {
+    // Given
+    vi.stubEnv("UI_CLOUD_ENABLED", "false");
+
+    // When
+    await addRole(makeRoleFormData());
+    const createAttributes = lastRequestBody().data.attributes;
+    await updateRole(makeRoleFormData(), "role-1");
+    const updateAttributes = lastRequestBody().data.attributes;
+
+    // Then
+    expect(createAttributes).not.toHaveProperty("manage_registry");
+    expect(updateAttributes).not.toHaveProperty("manage_registry");
+  });
+
   it("includes manage_alerts when creating a role in Prowler Cloud", async () => {
     // Given
     vi.stubEnv("UI_CLOUD_ENABLED", "true");
diff --git a/ui/actions/roles/roles.ts b/ui/actions/roles/roles.ts
index 972d6d12e8..00302165e9 100644
--- a/ui/actions/roles/roles.ts
+++ b/ui/actions/roles/roles.ts
@@ -116,6 +116,8 @@ export const addRole = async (formData: FormData) => {
       formData.get("manage_alerts") === "true";
     payload.data.attributes.manage_lighthouse_ai_configuration =
       formData.get("manage_lighthouse_ai_configuration") === "true";
+    payload.data.attributes.manage_registry =
+      formData.get("manage_registry") === "true";
   }
 
   // Add provider groups relationships only if there are items
@@ -175,6 +177,8 @@ export const updateRole = async (formData: FormData, roleId: string) => {
       formData.get("manage_alerts") === "true";
     payload.data.attributes.manage_lighthouse_ai_configuration =
       formData.get("manage_lighthouse_ai_configuration") === "true";
+    payload.data.attributes.manage_registry =
+      formData.get("manage_registry") === "true";
   }
 
   // Add provider groups relationships only if there are items
diff --git a/ui/app/(prowler)/layout.tsx b/ui/app/(prowler)/layout.tsx
index 4d0d06e092..a753c99c1a 100644
--- a/ui/app/(prowler)/layout.tsx
+++ b/ui/app/(prowler)/layout.tsx
@@ -6,6 +6,7 @@ import { ReactNode, Suspense } from "react";
 
 import { getProviders } from "@/actions/providers";
 import { getScansByState } from "@/actions/scans/scans";
+import { auth } from "@/auth.config";
 import MainLayout from "@/components/layout/main-layout/main-layout";
 import {
   OnboardingCheckpointWatcher,
@@ -20,6 +21,8 @@ import { GlobalSidePanel } from "@/components/side-panel";
 import { FeedbackSurvey } from "@/components/survey/feedback-survey";
 import { fontMono, fontSans } from "@/config/fonts";
 import { siteConfig } from "@/config/site";
+import { REGISTRY_ACCESS } from "@/lib/registry/access";
+import { evaluateRegistryAccess } from "@/lib/registry/access.server";
 import { isCloud } from "@/lib/shared/env";
 import { cn } from "@/lib/utils";
 import { StoreInitializer } from "@/store/ui/store-initializer";
@@ -56,6 +59,13 @@ export default async function RootLayout({
   // Skip Cloud-only onboarding fetches and orchestrators in OSS.
   const cloudEnabled = isCloud();
 
+  // One-time server-side Registry gate per request: only an ELIGIBLE answer
+  // shows the sidebar entry; UNKNOWN and INELIGIBLE both hide it. Started
+  // here so it resolves in parallel with the Cloud onboarding fetches.
+  const registryAccessPromise = auth().then((session) =>
+    evaluateRegistryAccess(session?.accessToken),
+  );
+
   // Fail-open: unknown scan state is treated as "has data" so the banner never blocks
   // progression on a fetch error.
   let hasCompletedScan = true;
@@ -78,6 +88,9 @@ export default async function RootLayout({
       : undefined;
   }
 
+  const registryEligible =
+    (await registryAccessPromise).status === REGISTRY_ACCESS.ELIGIBLE;
+
   return (
     <html suppressHydrationWarning lang="en">
       <head>
@@ -98,7 +111,9 @@ export default async function RootLayout({
             <NavigationProgress />
           </Suspense>
           {/* Store uses boolean; gate receives tri-state to fail open on fetch errors. */}
-          <StoreInitializer values={{ hasProviders: hasProviders ?? false }} />
+          <StoreInitializer
+            values={{ hasProviders: hasProviders ?? false, registryEligible }}
+          />
           {cloudEnabled && (
             <>
               <OnboardingGate hasProviders={hasProviders} />
diff --git a/ui/app/(prowler)/registry/page.tsx b/ui/app/(prowler)/registry/page.tsx
new file mode 100644
index 0000000000..d5e3ab63de
--- /dev/null
+++ b/ui/app/(prowler)/registry/page.tsx
@@ -0,0 +1,26 @@
+import { redirect } from "next/navigation";
+
+import { getRegistryBootstrap } from "@/actions/registry/registry";
+import { RegistryExplorer } from "@/components/registry/registry-explorer";
+import { ContentLayout } from "@/components/shadcn/content-layout/content-layout";
+import { getRegistryPresentation } from "@/lib/registry/presentation";
+import { readEnv } from "@/lib/runtime-env";
+import { REGISTRY_FAILURE } from "@/types/registry";
+
+export const dynamic = "force-dynamic";
+
+export default async function RegistryPage() {
+  const bootstrap = await getRegistryBootstrap();
+  if (bootstrap.status === REGISTRY_FAILURE.ACCESS_DENIED) redirect("/profile");
+
+  return (
+    <ContentLayout title="Registry" icon="lucide:package">
+      <RegistryExplorer
+        initialState={bootstrap.state}
+        registryKeyUrl={
+          getRegistryPresentation(readEnv("UI_REGISTRY_URL")).keyUrl
+        }
+      />
+    </ContentLayout>
+  );
+}
diff --git a/ui/auth.config.test.ts b/ui/auth.config.test.ts
index 5815f31496..0bb714cc93 100644
--- a/ui/auth.config.test.ts
+++ b/ui/auth.config.test.ts
@@ -39,6 +39,7 @@ const RESTRICTED_PERMISSIONS: RolePermissionAttributes = {
   manage_integrations: false,
   manage_billing: false,
   manage_alerts: false,
+  manage_registry: false,
   manage_lighthouse_ai_configuration: false,
   unlimited_visibility: false,
 };
@@ -46,6 +47,7 @@ const RESTRICTED_PERMISSIONS: RolePermissionAttributes = {
 const ELEVATED_PERMISSIONS: RolePermissionAttributes = {
   ...RESTRICTED_PERMISSIONS,
   manage_users: true,
+  manage_registry: true,
   manage_scans: true,
 };
 
@@ -174,6 +176,25 @@ describe("authConfig JWT callback", () => {
     });
   });
 
+  it("should default manage_registry to false when a sign-in user omits it", async () => {
+    // Given
+    const jwtCallback = authConfig.callbacks?.jwt;
+    if (!jwtCallback) throw new Error("JWT callback is not configured");
+
+    // When
+    const result = await jwtCallback({
+      token: {},
+      account: {} as Parameters<typeof jwtCallback>[0]["account"],
+      user: {
+        accessToken: "access-token",
+        refreshToken: "refresh-token",
+      } as Parameters<typeof jwtCallback>[0]["user"],
+    });
+
+    // Then
+    expect(result.user?.permissions.manage_registry).toBe(false);
+  });
+
   it("should report a tenant switch failure while preserving the current session", async () => {
     // Given
     vi.spyOn(console, "warn").mockImplementation(() => undefined);
diff --git a/ui/auth.config.ts b/ui/auth.config.ts
index c741534d24..f3ba8bbe18 100644
--- a/ui/auth.config.ts
+++ b/ui/auth.config.ts
@@ -61,6 +61,7 @@ const DEFAULT_PERMISSIONS: RolePermissionAttributes = {
   manage_billing: false,
   manage_alerts: false,
   manage_lighthouse_ai_configuration: false,
+  manage_registry: false,
   unlimited_visibility: false,
 };
 
diff --git a/ui/changelog.d/registry-private-cloud.added.md b/ui/changelog.d/registry-private-cloud.added.md
new file mode 100644
index 0000000000..0f5b9fb6d3
--- /dev/null
+++ b/ui/changelog.d/registry-private-cloud.added.md
@@ -0,0 +1 @@
+Registry marketplace and external provider onboarding for Private Cloud, with permission-based access independent of billing, confirmed artifact installation, schema-driven credentials, connection checks, and scan launch
diff --git a/ui/components/layout/app-sidebar/app-sidebar-content.test.tsx b/ui/components/layout/app-sidebar/app-sidebar-content.test.tsx
index 911068b1cc..8e33a31b86 100644
--- a/ui/components/layout/app-sidebar/app-sidebar-content.test.tsx
+++ b/ui/components/layout/app-sidebar/app-sidebar-content.test.tsx
@@ -2,6 +2,7 @@ import { render, screen } from "@testing-library/react";
 import userEvent from "@testing-library/user-event";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
+import { useUIStore } from "@/store/ui/store";
 import { CLOUD_UPGRADE_FEATURE } from "@/types/cloud-upgrade";
 
 import { AppSidebarContent } from "./app-sidebar-content";
@@ -57,6 +58,7 @@ describe("AppSidebarContent", () => {
     openCloudUpgradeMock.mockClear();
     openLaunchScanModalMock.mockClear();
     useAppSidebarMode.setState({ mode: APP_SIDEBAR_MODE.BROWSE });
+    useUIStore.setState({ registryEligible: false });
   });
 
   afterEach(() => {
@@ -89,6 +91,32 @@ describe("AppSidebarContent", () => {
     expect(screen.getAllByText("Cloud").length).toBeGreaterThan(0);
   });
 
+  it("shows Registry navigation when the server marked this request eligible", () => {
+    // Given
+    vi.stubEnv("UI_CLOUD_ENABLED", "true");
+    useUIStore.setState({ registryEligible: true });
+
+    // When
+    render(<AppSidebarContent />);
+
+    // Then
+    expect(screen.getByRole("link", { name: /Registry/ })).toHaveAttribute(
+      "href",
+      "/registry",
+    );
+  });
+
+  it("hides Registry navigation without a server eligibility decision", () => {
+    // Given / When
+    vi.stubEnv("UI_CLOUD_ENABLED", "true");
+    render(<AppSidebarContent />);
+
+    // Then
+    expect(
+      screen.queryByRole("link", { name: /Registry/ }),
+    ).not.toBeInTheDocument();
+  });
+
   it("keeps the existing Lighthouse chat sidebar in Cloud Chat mode", () => {
     // Given
     vi.stubEnv("UI_CLOUD_ENABLED", "true");
diff --git a/ui/components/layout/app-sidebar/app-sidebar-content.tsx b/ui/components/layout/app-sidebar/app-sidebar-content.tsx
index 8d5e869793..f157e2f7ae 100644
--- a/ui/components/layout/app-sidebar/app-sidebar-content.tsx
+++ b/ui/components/layout/app-sidebar/app-sidebar-content.tsx
@@ -8,6 +8,7 @@ import { ProwlerBrand } from "@/components/icons";
 import { useAuth } from "@/hooks";
 import { useRuntimeConfig } from "@/hooks/use-runtime-config";
 import { isCloud } from "@/lib/shared/env";
+import { useUIStore } from "@/store/ui/store";
 
 import { useAppSidebarMode } from "./app-sidebar-mode-store";
 import { AppSidebarModeToggle } from "./app-sidebar-mode-toggle";
@@ -24,6 +25,8 @@ interface AppSidebarContentProps {
 export function AppSidebarContent({ onSelect }: AppSidebarContentProps) {
   const pathname = usePathname();
   const { permissions } = useAuth();
+  // One-time server decision per request, seeded by the root layout.
+  const registryEligible = useUIStore((state) => state.registryEligible);
   const { apiDocsUrl, cloudBillingEnabled } = useRuntimeConfig();
   const mode = useAppSidebarMode((state) => state.mode);
   const isCloudEnvironment = isCloud();
@@ -31,6 +34,7 @@ export function AppSidebarContent({ onSelect }: AppSidebarContentProps) {
     pathname,
     apiDocsUrl,
     cloudBillingEnabled,
+    registryEligible,
     permissions,
   });
   const showChat = isCloudEnvironment && mode === APP_SIDEBAR_MODE.CHAT;
diff --git a/ui/components/layout/app-sidebar/navigation-config.ts b/ui/components/layout/app-sidebar/navigation-config.ts
index 05ff31abae..aa0904d3b9 100644
--- a/ui/components/layout/app-sidebar/navigation-config.ts
+++ b/ui/components/layout/app-sidebar/navigation-config.ts
@@ -5,6 +5,7 @@ import {
   GitBranch,
   LayoutGrid,
   MessageCircleQuestion,
+  Package,
   Settings,
   ShieldCheck,
   SquareChartGantt,
@@ -32,6 +33,7 @@ interface NavigationConfigOptions {
   pathname: string;
   apiDocsUrl?: string | null;
   cloudBillingEnabled?: boolean;
+  registryEligible?: boolean;
   permissions?: RolePermissionAttributes;
 }
 
@@ -108,6 +110,7 @@ export function getNavigationConfig({
   pathname,
   apiDocsUrl = null,
   cloudBillingEnabled = false,
+  registryEligible = false,
   permissions,
 }: NavigationConfigOptions): NavigationSection[] {
   const isCloudEnvironment = isCloud();
@@ -180,6 +183,18 @@ export function getNavigationConfig({
           icon: Warehouse,
           active: isRouteActive(pathname, "/resources"),
         },
+        ...(registryEligible
+          ? [
+              {
+                kind: NAVIGATION_ITEM_KIND.LINK,
+                href: "/registry",
+                label: "Registry",
+                icon: Package,
+                active: isRouteActive(pathname, "/registry"),
+                highlight: true,
+              } as const,
+            ]
+          : []),
       ],
     },
     {
diff --git a/ui/components/providers/radio-group-provider.test.tsx b/ui/components/providers/radio-group-provider.test.tsx
new file mode 100644
index 0000000000..34987d5a41
--- /dev/null
+++ b/ui/components/providers/radio-group-provider.test.tsx
@@ -0,0 +1,134 @@
+import { render, screen } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { useForm } from "react-hook-form";
+import { describe, expect, it } from "vitest";
+
+import type { RegistryProviderOption } from "@/lib/registry/provider-options";
+import type { AddProviderFormValues } from "@/types/formSchemas";
+
+import { RadioGroupProvider } from "./radio-group-provider";
+
+function Selector({
+  registryOptions = [{ type: "acme", label: "Acme Cloud" }],
+}: {
+  registryOptions?: RegistryProviderOption[];
+}) {
+  const form = useForm<AddProviderFormValues>();
+  return (
+    <RadioGroupProvider
+      control={form.control}
+      isInvalid={false}
+      registryOptions={registryOptions}
+    />
+  );
+}
+
+describe("provider selector", () => {
+  it("preserves selected provider across tabs and supports searching by type", async () => {
+    // Given
+    const user = userEvent.setup();
+    render(
+      <Selector
+        registryOptions={[{ type: "acme_slug", label: "Acme Cloud" }]}
+      />,
+    );
+    expect(screen.getByRole("tab", { name: "All providers" })).toHaveAttribute(
+      "aria-selected",
+      "true",
+    );
+    await user.click(
+      screen.getByRole("option", { name: /Amazon Web Services/ }),
+    );
+
+    // When
+    await user.click(screen.getByRole("tab", { name: "Registry" }));
+    await user.type(
+      screen.getByRole("textbox", { name: "Search providers" }),
+      " ACME_SLUG ",
+    );
+
+    // Then
+    expect(
+      screen.getByRole("option", { name: /Acme Cloud Registry/ }),
+    ).toBeVisible();
+
+    // When
+    await user.click(screen.getByRole("button", { name: "Clear search" }));
+    await user.click(screen.getByRole("tab", { name: "All providers" }));
+
+    // Then
+    expect(
+      screen.getByRole("option", { name: /Amazon Web Services/ }),
+    ).toHaveAttribute("aria-selected", "true");
+  });
+
+  it("keeps both tabs available when no Registry providers are installed", async () => {
+    // Given
+    const user = userEvent.setup();
+    const { rerender } = render(<Selector registryOptions={[]} />);
+
+    // When
+    await user.click(screen.getByRole("tab", { name: "Registry" }));
+
+    // Then
+    expect(screen.getByText("No Registry providers available.")).toBeVisible();
+    expect(screen.getByRole("tab", { name: "All providers" })).toBeEnabled();
+
+    // When / Then: discovery can refresh the installed options.
+    rerender(<Selector />);
+    expect(
+      screen.getByRole("option", { name: /Acme Cloud Registry/ }),
+    ).toBeVisible();
+    rerender(<Selector registryOptions={[]} />);
+    expect(screen.queryByRole("option")).not.toBeInTheDocument();
+    expect(screen.getByText("No Registry providers available.")).toBeVisible();
+  });
+
+  it("filters Registry providers and preserves search across tabs", async () => {
+    // Given
+    const user = userEvent.setup();
+    render(<Selector />);
+
+    // When
+    await user.click(screen.getByRole("tab", { name: "Registry" }));
+
+    // Then
+    expect(
+      screen.getByRole("option", { name: /Acme Cloud Registry/ }),
+    ).toBeVisible();
+    expect(
+      screen.queryByRole("option", { name: /Amazon Web Services/ }),
+    ).not.toBeInTheDocument();
+
+    // When
+    await user.type(
+      screen.getByRole("textbox", { name: "Search providers" }),
+      "amazon",
+    );
+    expect(
+      screen.getByText('No providers found matching "amazon"'),
+    ).toBeVisible();
+    await user.click(screen.getByRole("tab", { name: "All providers" }));
+
+    // Then
+    expect(
+      screen.getByRole("textbox", { name: "Search providers" }),
+    ).toHaveValue("amazon");
+    expect(
+      screen.getByRole("option", { name: /Amazon Web Services/ }),
+    ).toBeVisible();
+    expect(
+      screen.queryByRole("option", { name: /Acme Cloud Registry/ }),
+    ).not.toBeInTheDocument();
+  });
+
+  it("adds Registry-labelled providers alongside the incorporated options", () => {
+    render(<Selector />);
+    expect(
+      screen.getByRole("option", { name: /Acme Cloud Registry/ }),
+    ).toBeVisible();
+    expect(
+      screen.getByRole("option", { name: /Amazon Web Services/ }),
+    ).toBeVisible();
+  });
+});
diff --git a/ui/components/providers/radio-group-provider.tsx b/ui/components/providers/radio-group-provider.tsx
index de8d941f3a..0da4bf2d83 100644
--- a/ui/components/providers/radio-group-provider.tsx
+++ b/ui/components/providers/radio-group-provider.tsx
@@ -2,117 +2,38 @@
 
 import { FC, useState } from "react";
 import { Control, Controller } from "react-hook-form";
-import { z } from "zod";
-
-import { SearchInput } from "@/components/shadcn";
-import { FormMessage } from "@/components/shadcn/form";
-import { cn } from "@/lib/utils";
-import { addProviderFormSchema } from "@/types";
 
 import {
-  AlibabaCloudProviderBadge,
-  AWSProviderBadge,
-  AzureProviderBadge,
-  CloudflareProviderBadge,
-  GCPProviderBadge,
-  GitHubProviderBadge,
-  GoogleWorkspaceProviderBadge,
-  IacProviderBadge,
-  ImageProviderBadge,
-  KS8ProviderBadge,
-  M365ProviderBadge,
-  MongoDBAtlasProviderBadge,
-  OktaProviderBadge,
-  OpenStackProviderBadge,
-  OracleCloudProviderBadge,
-  VercelProviderBadge,
-} from "../icons/providers-badge";
+  ProviderTypeIcon,
+  PROVIDER_TYPE_DATA,
+} from "@/components/icons/providers-badge/provider-type-icon";
+import { Badge, SearchInput } from "@/components/shadcn";
+import {
+  Avatar,
+  AvatarFallback,
+  AvatarImage,
+} from "@/components/shadcn/avatar";
+import { FormMessage } from "@/components/shadcn/form";
+import {
+  Tabs,
+  TabsContent,
+  TabsList,
+  TabsTrigger,
+} from "@/components/shadcn/tabs/tabs";
+import type { RegistryProviderOption } from "@/lib/registry/provider-options";
+import { cn } from "@/lib/utils";
+import type { AddProviderFormValues } from "@/types/formSchemas";
 
-const PROVIDERS = [
-  {
-    value: "aws",
-    label: "Amazon Web Services",
-    badge: AWSProviderBadge,
-  },
-  {
-    value: "gcp",
-    label: "Google Cloud Platform",
-    badge: GCPProviderBadge,
-  },
-  {
-    value: "azure",
-    label: "Microsoft Azure",
-    badge: AzureProviderBadge,
-  },
-  {
-    value: "m365",
-    label: "Microsoft 365",
-    badge: M365ProviderBadge,
-  },
-  {
-    value: "mongodbatlas",
-    label: "MongoDB Atlas",
-    badge: MongoDBAtlasProviderBadge,
-  },
-  {
-    value: "kubernetes",
-    label: "Kubernetes",
-    badge: KS8ProviderBadge,
-  },
-  {
-    value: "github",
-    label: "GitHub",
-    badge: GitHubProviderBadge,
-  },
-  {
-    value: "googleworkspace",
-    label: "Google Workspace",
-    badge: GoogleWorkspaceProviderBadge,
-  },
-  {
-    value: "iac",
-    label: "Infrastructure as Code",
-    badge: IacProviderBadge,
-  },
-  {
-    value: "image",
-    label: "Container Registry",
-    badge: ImageProviderBadge,
-  },
-  {
-    value: "oraclecloud",
-    label: "Oracle Cloud Infrastructure",
-    badge: OracleCloudProviderBadge,
-  },
-  {
-    value: "alibabacloud",
-    label: "Alibaba Cloud",
-    badge: AlibabaCloudProviderBadge,
-  },
-  {
-    value: "cloudflare",
-    label: "Cloudflare",
-    badge: CloudflareProviderBadge,
-  },
-  {
-    value: "openstack",
-    label: "OpenStack",
-    badge: OpenStackProviderBadge,
-  },
-  {
-    value: "vercel",
-    label: "Vercel",
-    badge: VercelProviderBadge,
-  },
-  {
-    value: "okta",
-    label: "Okta",
-    badge: OktaProviderBadge,
-  },
-] as const;
+const PROVIDERS = Object.entries(PROVIDER_TYPE_DATA).map(
+  ([value, { label }]) => ({ value, label }),
+);
+
+const PROVIDER_TAB = { ALL: "all", REGISTRY: "registry" } as const;
+type ProviderTab = (typeof PROVIDER_TAB)[keyof typeof PROVIDER_TAB];
 
 interface RadioGroupProviderProps {
-  control: Control<z.infer<typeof addProviderFormSchema>>;
+  control: Control<AddProviderFormValues>;
+  registryOptions?: RegistryProviderOption[];
   isInvalid: boolean;
   errorMessage?: string;
 }
@@ -121,25 +42,53 @@ export const RadioGroupProvider: FC<RadioGroupProviderProps> = ({
   control,
   isInvalid,
   errorMessage,
+  registryOptions = [],
 }) => {
   const [searchTerm, setSearchTerm] = useState("");
+  const [activeTab, setActiveTab] = useState<ProviderTab>(PROVIDER_TAB.ALL);
 
+  const options = [
+    ...PROVIDERS.map((provider) => ({
+      value: provider.value as string,
+      label: provider.label as string,
+      registry: false,
+      logoUrl: undefined as string | undefined,
+    })),
+    ...registryOptions.map((provider) => ({
+      value: provider.type,
+      label: provider.label,
+      registry: true,
+      logoUrl: provider.logoUrl,
+    })),
+  ];
+  const tabProviders =
+    activeTab === PROVIDER_TAB.REGISTRY
+      ? options.filter((provider) => provider.registry)
+      : options;
   const lowerSearch = searchTerm.trim().toLowerCase();
   const filteredProviders = lowerSearch
-    ? PROVIDERS.filter(
+    ? tabProviders.filter(
         (provider) =>
           provider.label.toLowerCase().includes(lowerSearch) ||
           provider.value.toLowerCase().includes(lowerSearch),
       )
-    : PROVIDERS;
+    : tabProviders;
 
   return (
     <Controller
       name="providerType"
       control={control}
       render={({ field }) => (
-        <div className="flex flex-col px-4">
-          <div className="relative z-10 shrink-0 pb-4">
+        <Tabs
+          className="flex flex-col px-4"
+          value={activeTab}
+          onValueChange={(value) => setActiveTab(value as ProviderTab)}
+        >
+          <TabsList aria-label="Provider source">
+            <TabsTrigger value={PROVIDER_TAB.ALL}>All providers</TabsTrigger>
+            <TabsTrigger value={PROVIDER_TAB.REGISTRY}>Registry</TabsTrigger>
+          </TabsList>
+          <div className="relative z-10 shrink-0 py-4">
             <SearchInput
               aria-label="Search providers"
               placeholder="Search providers..."
@@ -149,7 +98,7 @@ export const RadioGroupProvider: FC<RadioGroupProviderProps> = ({
             />
           </div>
 
-          <div className="relative">
+          <TabsContent value={activeTab}>
             <div
               role="listbox"
               aria-label="Select a provider"
@@ -157,7 +106,6 @@ export const RadioGroupProvider: FC<RadioGroupProviderProps> = ({
             >
               {filteredProviders.length > 0 ? (
                 filteredProviders.map((provider) => {
-                  const BadgeComponent = provider.badge;
                   const isSelected = field.value === provider.value;
 
                   return (
@@ -165,6 +113,7 @@ export const RadioGroupProvider: FC<RadioGroupProviderProps> = ({
                       key={provider.value}
                       type="button"
                       role="option"
+                      aria-label={`${provider.label}${provider.registry ? " Registry" : ""}`}
                       aria-selected={isSelected}
                       onClick={() => field.onChange(provider.value)}
                       className={cn(
@@ -183,28 +132,54 @@ export const RadioGroupProvider: FC<RadioGroupProviderProps> = ({
                       </div>
 
                       <div className="flex min-w-0 flex-1 items-center gap-1.5">
-                        <BadgeComponent size={26} />
+                        {provider.registry ? (
+                          <Avatar>
+                            <AvatarImage
+                              src={
+                                provider.logoUrl?.startsWith("https://")
+                                  ? provider.logoUrl
+                                  : undefined
+                              }
+                              alt=""
+                            />
+                            <AvatarFallback>
+                              <ProviderTypeIcon
+                                type={provider.value}
+                                size={26}
+                              />
+                            </AvatarFallback>
+                          </Avatar>
+                        ) : (
+                          <ProviderTypeIcon type={provider.value} size={26} />
+                        )}
                         <span className="text-text-neutral-primary text-sm leading-6">
                           {provider.label}
                         </span>
+                        {provider.registry && (
+                          <Badge variant="tag">Registry</Badge>
+                        )}
                       </div>
                     </button>
                   );
                 })
               ) : (
                 <p className="text-text-neutral-tertiary py-4 text-sm">
-                  No providers found matching &quot;{searchTerm}&quot;
+                  {lowerSearch ? (
+                    <>No providers found matching &quot;{searchTerm}&quot;</>
+                  ) : (
+                    "No Registry providers available."
+                  )}
                 </p>
               )}
             </div>
-          </div>
+          </TabsContent>
 
           {errorMessage && (
             <FormMessage className="text-text-error-primary">
               {errorMessage}
             </FormMessage>
           )}
-        </div>
+        </Tabs>
       )}
     />
   );
diff --git a/ui/components/providers/table/column-providers.tsx b/ui/components/providers/table/column-providers.tsx
index 78c59ac764..548dda2e82 100644
--- a/ui/components/providers/table/column-providers.tsx
+++ b/ui/components/providers/table/column-providers.tsx
@@ -251,7 +251,7 @@ export function getColumnProviders(
               entityId={provider.attributes.uid}
               nameAction={
                 provider.attributes.is_dynamic ? (
-                  <Badge variant="info">Custom</Badge>
+                  <Badge variant="info">Registry</Badge>
                 ) : undefined
               }
             />
diff --git a/ui/components/providers/table/data-table-row-actions.test.tsx b/ui/components/providers/table/data-table-row-actions.test.tsx
index 5fa6f3f409..c65863abd2 100644
--- a/ui/components/providers/table/data-table-row-actions.test.tsx
+++ b/ui/components/providers/table/data-table-row-actions.test.tsx
@@ -1,3 +1,17 @@
+vi.mock("@/actions/providers/registry-provider", () => ({
+  addRegistryProvider: vi.fn(),
+}));
+vi.mock("@/actions/registry/registry", () => ({
+  getInstalledRegistryProviderOptions: vi
+    .fn()
+    .mockResolvedValue({ status: "access_denied" }),
+}));
+vi.mock("@/actions/providers/provider-schemas", () => ({
+  getProviderSchemas: vi.fn(),
+}));
+vi.mock("@/actions/providers/dynamic-provider-credentials", () => ({
+  saveDynamicProviderCredentials: vi.fn(),
+}));
 import { Row } from "@tanstack/react-table";
 import { render, screen } from "@testing-library/react";
 import userEvent from "@testing-library/user-event";
@@ -327,7 +341,7 @@ describe("DataTableRowActions", () => {
     expect(screen.queryByText("Update Credentials")).not.toBeInTheDocument();
   });
 
-  it("allows rename/delete and operational actions for a dynamic provider but hides credential management", async () => {
+  it("allows credential editing and operational actions for a dynamic provider", async () => {
     // Given a dynamic provider outside the configurable set, with the advanced
     // schedule capability enabled (so Edit Scan Schedule can show).
     const user = userEvent.setup();
@@ -354,9 +368,9 @@ describe("DataTableRowActions", () => {
     expect(screen.getByText("Test Connection")).toBeInTheDocument();
     expect(screen.getByText("View Scan Jobs")).toBeInTheDocument();
     expect(screen.getByText("Edit Scan Schedule")).toBeInTheDocument();
-    // ...but credential management is hidden (no bespoke wizard for dynamic types)
+    // Existing dynamic accounts use the same wizard with schema-based credentials.
     expect(screen.queryByText("Add Credentials")).not.toBeInTheDocument();
-    expect(screen.queryByText("Update Credentials")).not.toBeInTheDocument();
+    expect(screen.getByText("Update Credentials")).toBeInTheDocument();
   });
 
   it("navigates to the provider-filtered scan jobs from View Scan Jobs", async () => {
diff --git a/ui/components/providers/table/data-table-row-actions.tsx b/ui/components/providers/table/data-table-row-actions.tsx
index 1866a44f73..bcbbd8e583 100644
--- a/ui/components/providers/table/data-table-row-actions.tsx
+++ b/ui/components/providers/table/data-table-row-actions.tsx
@@ -52,7 +52,6 @@ import {
   OrgFlowType,
 } from "@/types/organizations";
 import { PROVIDER_WIZARD_MODE } from "@/types/provider-wizard";
-import { isConfigurableProvider } from "@/types/providers";
 import {
   isProvidersOrganizationRow,
   PROVIDERS_GROUP_KIND,
@@ -355,8 +354,7 @@ export function DataTableRowActions({
   const provider = isOrganizationRow ? null : rowData;
   const providerId = provider?.id ?? "";
   const providerType = provider?.attributes.provider ?? "";
-  // Only predefined providers can manage credentials from the UI
-  const canManageCredentials = isConfigurableProvider(providerType);
+  const canManageCredentials = Boolean(providerType);
   const providerUid = provider?.attributes.uid ?? "";
   const providerAlias = provider?.attributes.alias ?? null;
   const providerSecretId = provider?.relationships.secret.data?.id ?? null;
diff --git a/ui/components/providers/wizard/provider-wizard-modal.test.tsx b/ui/components/providers/wizard/provider-wizard-modal.test.tsx
new file mode 100644
index 0000000000..40414c3688
--- /dev/null
+++ b/ui/components/providers/wizard/provider-wizard-modal.test.tsx
@@ -0,0 +1,230 @@
+import { act, render, screen, waitFor } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+import { Toaster } from "@/components/shadcn/toast/Toaster";
+import { resetToasts } from "@/components/shadcn/toast/use-toast";
+import { useProviderWizardStore } from "@/store/provider-wizard/store";
+
+import { ProviderWizardModal } from "./provider-wizard-modal";
+
+const { addRegistryProvider, getInstalledRegistryProviderOptions } = vi.hoisted(
+  () => ({
+    addRegistryProvider: vi.fn(),
+    getInstalledRegistryProviderOptions: vi.fn(),
+  }),
+);
+
+vi.mock("next/navigation", () => ({
+  useRouter: () => ({ refresh: vi.fn(), push: vi.fn() }),
+}));
+vi.mock("@/actions/providers/providers", () => ({ addProvider: vi.fn() }));
+vi.mock("@/actions/providers/registry-provider", () => ({
+  addRegistryProvider,
+}));
+vi.mock("@/actions/registry/registry", () => ({
+  getInstalledRegistryProviderOptions,
+}));
+vi.mock(
+  "@/components/providers/workflow/forms",
+  async () => import("../workflow/forms/connect-account-form"),
+);
+vi.mock("@/hooks/use-scroll-hint", () => ({
+  useScrollHint: () => ({ showScrollHint: false }),
+}));
+vi.mock("@/lib/tours/use-driver-tour", () => ({
+  advanceActiveTour: vi.fn(),
+  endActiveTour: vi.fn(),
+}));
+vi.mock("./steps/credentials-step", () => ({
+  CredentialsStep: () => <p>Credential details</p>,
+}));
+vi.mock("./steps/test-connection-step", () => ({
+  TestConnectionStep: () => null,
+}));
+vi.mock("./steps/launch-step", () => ({ LaunchStep: () => null }));
+vi.mock("../organizations/azure-org-setup-form", () => ({
+  AzureOrgSetupForm: () => null,
+}));
+vi.mock("../organizations/gcp-org-setup-form", () => ({
+  GcpOrgSetupForm: () => null,
+}));
+vi.mock("../organizations/org-setup-form", () => ({
+  OrgSetupForm: () => null,
+}));
+vi.mock("../organizations/org-account-selection", () => ({
+  OrgAccountSelection: () => null,
+}));
+vi.mock("../organizations/org-launch-scan", () => ({
+  OrgLaunchScan: () => null,
+}));
+
+const createdAccount = {
+  data: {
+    id: "account",
+    attributes: { provider: "acme", uid: "acme-account", alias: null },
+  },
+};
+
+async function enterAccountDetails() {
+  const user = userEvent.setup();
+  render(
+    <>
+      <ProviderWizardModal open onOpenChange={vi.fn()} />
+      <Toaster />
+    </>,
+  );
+  await user.click(
+    await screen.findByRole("option", { name: "Acme Cloud Registry" }),
+  );
+  await user.type(
+    screen.getByRole("textbox", { name: "Provider UID" }),
+    "acme-account",
+  );
+  await waitFor(() =>
+    expect(screen.getByRole("button", { name: "Next" })).toBeEnabled(),
+  );
+  return user;
+}
+
+describe("provider wizard account creation", () => {
+  beforeEach(() => {
+    useProviderWizardStore.getState().reset();
+    resetToasts();
+    getInstalledRegistryProviderOptions.mockResolvedValue({
+      status: "ready",
+      options: [{ type: "acme", label: "Acme Cloud" }],
+    });
+  });
+
+  it("shows progress, blocks repeat clicks, and advances after creation", async () => {
+    // Given
+    let resolveCreation!: (value: typeof createdAccount) => void;
+    addRegistryProvider.mockImplementationOnce(
+      () =>
+        new Promise((resolve) => {
+          resolveCreation = resolve;
+        }),
+    );
+    const user = await enterAccountDetails();
+
+    // When
+    await user.click(screen.getByRole("button", { name: "Next" }));
+
+    // Then
+    const pending = await screen.findByRole("button", {
+      name: "Creating provider...",
+    });
+    expect(pending).toBeDisabled();
+    expect(pending).toHaveAttribute("aria-busy", "true");
+    expect(screen.getByRole("button", { name: "Back" })).toBeDisabled();
+    await user.dblClick(pending);
+    expect(addRegistryProvider).toHaveBeenCalledOnce();
+
+    // When / Then
+    await act(async () => resolveCreation(createdAccount));
+    expect(await screen.findByText("Credential details")).toBeVisible();
+  });
+
+  it("restores Next after a failed creation and retries the same account", async () => {
+    // Given
+    const failure = { errors: [{ detail: "Creation failed. Try again." }] };
+    let resolveCreation!: (value: typeof failure) => void;
+    addRegistryProvider
+      .mockImplementationOnce(
+        () =>
+          new Promise((resolve) => {
+            resolveCreation = resolve;
+          }),
+      )
+      .mockResolvedValueOnce(createdAccount);
+    const user = await enterAccountDetails();
+
+    // When
+    await user.click(screen.getByRole("button", { name: "Next" }));
+    await screen.findByRole("button", { name: "Creating provider..." });
+    await act(async () => resolveCreation(failure));
+
+    // Then
+    expect(await screen.findByText(failure.errors[0].detail)).toBeVisible();
+    const next = screen.getByRole("button", { name: "Next" });
+    await waitFor(() => expect(next).toBeEnabled());
+    expect(next).not.toHaveAttribute("aria-busy", "true");
+    expect(screen.getByRole("button", { name: "Back" })).toBeEnabled();
+    expect(screen.getByRole("textbox", { name: "Provider UID" })).toHaveValue(
+      "acme-account",
+    );
+
+    // When / Then
+    await user.click(next);
+    expect(await screen.findByText("Credential details")).toBeVisible();
+    expect(addRegistryProvider).toHaveBeenCalledTimes(2);
+    expect(
+      Object.fromEntries(addRegistryProvider.mock.calls[1][0]),
+    ).toMatchObject({ providerType: "acme", providerUid: "acme-account" });
+  });
+
+  it("shows provider conflicts in the account step and allows retrying", async () => {
+    // Given
+    const detail =
+      "The artifact 'acme' is not installed on this deployment yet. Install it again and retry.";
+    addRegistryProvider
+      .mockResolvedValueOnce({
+        errors: [
+          {
+            status: "409",
+            detail,
+            source: { pointer: "/data/attributes/provider" },
+          },
+        ],
+      })
+      .mockResolvedValueOnce(createdAccount);
+    const user = await enterAccountDetails();
+
+    // When
+    await user.click(screen.getByRole("button", { name: "Next" }));
+
+    // Then
+    expect(await screen.findByRole("alert")).toHaveTextContent(detail);
+    expect(screen.getByRole("textbox", { name: "Provider UID" })).toHaveValue(
+      "acme-account",
+    );
+    const next = await screen.findByRole("button", { name: "Next" });
+    await waitFor(() => expect(next).toBeEnabled());
+    expect(screen.getByRole("button", { name: "Back" })).toBeEnabled();
+
+    // When / Then: the provider becomes available and the same account retries.
+    await user.click(next);
+    expect(await screen.findByText("Credential details")).toBeVisible();
+    expect(screen.queryByText(detail)).not.toBeInTheDocument();
+    expect(addRegistryProvider).toHaveBeenCalledTimes(2);
+  });
+
+  it("keeps native providers available during a Registry discovery error and retries", async () => {
+    // Given
+    getInstalledRegistryProviderOptions.mockRejectedValueOnce(
+      new Error("Unavailable"),
+    );
+    const user = userEvent.setup();
+    render(<ProviderWizardModal open onOpenChange={vi.fn()} />);
+    await screen.findByText("Registry providers could not be loaded");
+    expect(
+      screen.getByRole("option", { name: /Amazon Web Services/ }),
+    ).toBeVisible();
+
+    // When
+    await user.click(screen.getByRole("tab", { name: "Registry" }));
+    expect(screen.getByText("No Registry providers available.")).toBeVisible();
+    await user.click(
+      screen.getByRole("button", { name: "Retry Registry providers" }),
+    );
+
+    // Then
+    expect(
+      await screen.findByRole("option", { name: "Acme Cloud Registry" }),
+    ).toBeVisible();
+    expect(
+      screen.queryByText("Registry providers could not be loaded"),
+    ).not.toBeInTheDocument();
+  });
+});
diff --git a/ui/components/providers/wizard/provider-wizard-modal.tsx b/ui/components/providers/wizard/provider-wizard-modal.tsx
index d39a491b17..fab1a4440f 100644
--- a/ui/components/providers/wizard/provider-wizard-modal.tsx
+++ b/ui/components/providers/wizard/provider-wizard-modal.tsx
@@ -1,6 +1,6 @@
 "use client";
 
-import { ExternalLink, Info } from "lucide-react";
+import { ExternalLink, Info, Loader2 } from "lucide-react";
 
 import { AzureOrgSetupForm } from "@/components/providers/organizations/azure-org-setup-form";
 import { GcpOrgSetupForm } from "@/components/providers/organizations/gcp-org-setup-form";
@@ -405,7 +405,11 @@ export function ProviderWizardModal({
                         : "button"
                     }
                     form={resolvedFooterConfig.actionFormId}
-                    disabled={resolvedFooterConfig.actionDisabled}
+                    disabled={
+                      resolvedFooterConfig.actionDisabled ||
+                      resolvedFooterConfig.actionLoading
+                    }
+                    aria-busy={resolvedFooterConfig.actionLoading || undefined}
                     onClick={
                       resolvedFooterConfig.actionType ===
                       WIZARD_FOOTER_ACTION_TYPE.BUTTON
@@ -413,6 +417,9 @@ export function ProviderWizardModal({
                         : undefined
                     }
                   >
+                    {resolvedFooterConfig.actionLoading && (
+                      <Loader2 aria-hidden className="animate-spin" />
+                    )}
                     {resolvedFooterConfig.actionLabel}
                   </Button>
                 )}
diff --git a/ui/components/providers/wizard/steps/connect-step.tsx b/ui/components/providers/wizard/steps/connect-step.tsx
index a26013aba3..649f0d1562 100644
--- a/ui/components/providers/wizard/steps/connect-step.tsx
+++ b/ui/components/providers/wizard/steps/connect-step.tsx
@@ -63,6 +63,7 @@ export function ConnectStep({
       onBack: () => backHandlerRef.current?.(),
       showAction: uiState.showAction,
       actionLabel: uiState.actionLabel,
+      actionLoading: uiState.isLoading,
       actionDisabled: uiState.actionDisabled || uiState.isLoading,
       actionType: WIZARD_FOOTER_ACTION_TYPE.SUBMIT,
       actionFormId: formId,
diff --git a/ui/components/providers/wizard/steps/credentials-step.test.tsx b/ui/components/providers/wizard/steps/credentials-step.test.tsx
index 7f4610b212..8fa035ea33 100644
--- a/ui/components/providers/wizard/steps/credentials-step.test.tsx
+++ b/ui/components/providers/wizard/steps/credentials-step.test.tsx
@@ -1,3 +1,6 @@
+vi.mock("./dynamic-credentials-step", () => ({
+  DynamicCredentialsStep: () => <div>dynamic-credentials-form</div>,
+}));
 import { render, screen } from "@testing-library/react";
 import { beforeEach, describe, expect, it, vi } from "vitest";
 
diff --git a/ui/components/providers/wizard/steps/credentials-step.tsx b/ui/components/providers/wizard/steps/credentials-step.tsx
index 371f356d30..75836a25e3 100644
--- a/ui/components/providers/wizard/steps/credentials-step.tsx
+++ b/ui/components/providers/wizard/steps/credentials-step.tsx
@@ -4,7 +4,7 @@ import { useEffect, useState } from "react";
 
 import { getProviderFormType } from "@/lib/provider-helpers";
 import { useProviderWizardStore } from "@/store/provider-wizard/store";
-import { ProviderType } from "@/types/providers";
+import { isKnownProviderType, ProviderType } from "@/types/providers";
 
 import {
   AddViaCredentialsForm,
@@ -23,6 +23,7 @@ import { SelectViaGitHub } from "../../workflow/forms/select-credentials-type/gi
 import { SelectViaM365 } from "../../workflow/forms/select-credentials-type/m365";
 import { UpdateViaServiceAccountForm } from "../../workflow/forms/update-via-service-account-key-form";
 
+import { DynamicCredentialsStep } from "./dynamic-credentials-step";
 import {
   WIZARD_FOOTER_ACTION_TYPE,
   WizardFooterConfig,
@@ -34,7 +35,22 @@ interface CredentialsStepProps {
   onFooterChange: (config: WizardFooterConfig) => void;
 }
 
-export function CredentialsStep({
+export function CredentialsStep(props: CredentialsStepProps) {
+  const providerId = useProviderWizardStore((state) => state.providerId);
+  const providerType = useProviderWizardStore((state) => state.providerType);
+  if (providerId && providerType && !isKnownProviderType(providerType)) {
+    return (
+      <DynamicCredentialsStep
+        {...props}
+        providerId={providerId}
+        providerType={providerType}
+      />
+    );
+  }
+  return <BuiltinCredentialsStep {...props} />;
+}
+
+function BuiltinCredentialsStep({
   onNext,
   onBack,
   onFooterChange,
diff --git a/ui/components/providers/wizard/steps/dynamic-credentials-step.test.tsx b/ui/components/providers/wizard/steps/dynamic-credentials-step.test.tsx
new file mode 100644
index 0000000000..ce28a075b1
--- /dev/null
+++ b/ui/components/providers/wizard/steps/dynamic-credentials-step.test.tsx
@@ -0,0 +1,365 @@
+import {
+  act,
+  fireEvent,
+  render,
+  screen,
+  waitFor,
+} from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { beforeAll, beforeEach, describe, expect, it, vi } from "vitest";
+
+import openaiSchema from "@/lib/provider-credentials/fixtures/openai-credential-schema.json";
+import templateSchema from "@/lib/provider-credentials/fixtures/template-credential-schema.json";
+import { useProviderWizardStore } from "@/store/provider-wizard/store";
+import type { ProviderSchemasResult } from "@/types/provider-schema";
+
+const { getProviderSchemas, saveDynamicProviderCredentials, toast } =
+  vi.hoisted(() => ({
+    getProviderSchemas: vi.fn(),
+    saveDynamicProviderCredentials: vi.fn(),
+    toast: vi.fn(),
+  }));
+vi.mock("@/actions/providers/provider-schemas", () => ({ getProviderSchemas }));
+vi.mock("@/actions/providers/dynamic-provider-credentials", () => ({
+  saveDynamicProviderCredentials,
+}));
+vi.mock("@/components/shadcn/toast", () => ({ useToast: () => ({ toast }) }));
+
+import { DynamicCredentialsStep } from "./dynamic-credentials-step";
+
+beforeAll(() => {
+  for (const method of [
+    "hasPointerCapture",
+    "setPointerCapture",
+    "releasePointerCapture",
+    "scrollIntoView",
+  ]) {
+    Object.defineProperty(HTMLElement.prototype, method, {
+      configurable: true,
+      value: vi.fn(() => false),
+    });
+  }
+});
+
+const props = {
+  providerId: "account",
+  providerType: "acme",
+  onNext: vi.fn(),
+  onBack: vi.fn(),
+  onFooterChange: vi.fn(),
+};
+const schema = {
+  type: "object",
+  description: openaiSchema.description,
+  properties: {
+    token: {
+      type: "string",
+      title: "API token",
+      format: "password",
+      writeOnly: true,
+    },
+  },
+  required: ["token"],
+};
+
+describe("dynamic credentials in the provider wizard", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    sessionStorage.clear();
+    localStorage.clear();
+    useProviderWizardStore.getState().reset();
+    getProviderSchemas.mockResolvedValue({
+      status: "success",
+      providerType: "acme",
+      secretTypes: { api_key: schema },
+    });
+    saveDynamicProviderCredentials.mockResolvedValue({
+      status: "saved",
+      secretId: "secret",
+    });
+  });
+  it("saves through the dynamic action and never persists entered secrets", async () => {
+    render(<DynamicCredentialsStep {...props} />);
+    const field = await screen.findByLabelText(/API token/);
+    fireEvent.change(field, { target: { value: "only-in-memory" } });
+    expect(JSON.stringify(sessionStorage)).not.toContain("only-in-memory");
+    expect(JSON.stringify(localStorage)).not.toContain("only-in-memory");
+    fireEvent.submit(field.closest("form")!);
+    await waitFor(() => expect(props.onNext).toHaveBeenCalledOnce());
+    expect(saveDynamicProviderCredentials).toHaveBeenCalledWith({
+      providerId: "account",
+      secretType: "api_key",
+      secret: { token: "only-in-memory" },
+    });
+    expect(useProviderWizardStore.getState().secretId).toBe("secret");
+    expect(field).toHaveValue("");
+  });
+  it("masks the OpenAI API key and submits the original credential values", async () => {
+    // Given
+    const user = userEvent.setup();
+    getProviderSchemas.mockResolvedValue({
+      status: "success",
+      providerType: "openai",
+      secretTypes: { api_key: openaiSchema },
+    });
+    render(<DynamicCredentialsStep {...props} providerType="openai" />);
+    const apiKey = await screen.findByLabelText(/Platform Api Key/);
+    const organization = screen.getByLabelText(/Organization Id/);
+    const baseUrl = screen.getByLabelText(/Base Url/);
+
+    // When
+    await user.type(organization, "org-fixture");
+    await user.type(apiKey, "fixture-key-not-a-secret");
+
+    // Then
+    expect(apiKey).toHaveAttribute("type", "password");
+    expect(apiKey).toHaveAttribute("autocomplete", "new-password");
+    expect(organization).toHaveAttribute("type", "text");
+    expect(baseUrl).toHaveAttribute("type", "text");
+    expect(
+      screen.queryByRole("button", { name: /show|reveal/i }),
+    ).not.toBeInTheDocument();
+
+    // When / Then: this form submits from the wizard's external footer.
+    act(() => apiKey.closest("form")!.requestSubmit());
+    await waitFor(() => expect(props.onNext).toHaveBeenCalledOnce());
+    expect(saveDynamicProviderCredentials).toHaveBeenCalledWith({
+      providerId: "account",
+      secretType: "api_key",
+      secret: {
+        organization_id: "org-fixture",
+        platform_api_key: "fixture-key-not-a-secret",
+        base_url: "https://api.openai.com/v1",
+      },
+    });
+  });
+  it("renders and submits the installed Template credential form with typed values", async () => {
+    // Given
+    const user = userEvent.setup();
+    getProviderSchemas.mockResolvedValue({
+      status: "success",
+      providerType: "template",
+      secretTypes: { static: templateSchema },
+    });
+    render(<DynamicCredentialsStep {...props} providerType="template" />);
+    const apiUrl = await screen.findByLabelText(/API URL/);
+    const apiKey = screen.getByLabelText(/API Key/);
+    const verifyTls = screen.getByRole("checkbox", { name: "Verify TLS" });
+    const timeout = screen.getByRole("spinbutton", { name: "Timeout" });
+
+    // Then
+    expect(apiUrl).toHaveAttribute("placeholder", "https://api.acme.com");
+    expect(apiKey).toHaveAttribute("type", "password");
+    expect(screen.getByLabelText("CA Bundle").tagName).toBe("TEXTAREA");
+    expect(verifyTls).toBeChecked();
+    expect(timeout).toHaveValue(30);
+    expect(timeout).toHaveAttribute("min", "1");
+    expect(timeout).toHaveAttribute("max", "300");
+    expect(timeout).toHaveAttribute("step", "1");
+    expect(
+      screen.getByRole("combobox", { name: "Authentication Scheme" }),
+    ).toHaveTextContent("bearer");
+    expect(apiUrl).toHaveValue("");
+
+    // When: false must remain a boolean and numeric input must become a number.
+    await user.type(apiUrl, "https://api.example.test");
+    await user.type(apiKey, "fixture-key-not-a-secret");
+    await user.click(verifyTls);
+    await user.clear(timeout);
+    await user.type(timeout, "60");
+    act(() => apiKey.closest("form")!.requestSubmit());
+
+    // Then
+    await waitFor(() => expect(props.onNext).toHaveBeenCalledOnce());
+    expect(saveDynamicProviderCredentials).toHaveBeenCalledWith({
+      providerId: "account",
+      secretType: "static",
+      secret: {
+        api_url: "https://api.example.test",
+        api_key: "fixture-key-not-a-secret",
+        verify_tls: false,
+        timeout_seconds: 60,
+        auth_scheme: "bearer",
+      },
+    });
+  });
+  it.each<{ result: ProviderSchemasResult; title: string }>([
+    {
+      result: { status: "success", providerType: "acme", secretTypes: {} },
+      title: "Credential form unavailable",
+    },
+    {
+      result: {
+        status: "success",
+        providerType: "acme",
+        secretTypes: {
+          api_key: {
+            type: "object",
+            properties: { nested: { type: "object" } },
+          },
+        },
+      },
+      title: "Credential form not supported",
+    },
+    {
+      result: { status: "access_denied" },
+      title: "Access required",
+    },
+    {
+      result: { status: "unavailable" },
+      title: "Provider installation unavailable",
+    },
+  ])(
+    "explains $title without allowing credential submission",
+    async ({ result, title }) => {
+      getProviderSchemas.mockResolvedValue(result);
+      render(<DynamicCredentialsStep {...props} />);
+      expect(
+        await screen.findByRole("button", { name: "Try again" }),
+      ).toBeVisible();
+      expect(screen.getByRole("alert")).toHaveTextContent(title);
+      expect(screen.queryByLabelText(/API token/)).not.toBeInTheDocument();
+      expect(saveDynamicProviderCredentials).not.toHaveBeenCalled();
+    },
+  );
+  it("explains a loading failure and recovers when retried", async () => {
+    // Given
+    getProviderSchemas.mockRejectedValueOnce(new Error("Network unavailable"));
+    const user = userEvent.setup();
+    render(<DynamicCredentialsStep {...props} />);
+    expect(await screen.findByRole("alert")).toHaveTextContent(
+      "Could not load credential form",
+    );
+    expect(screen.getByRole("alert")).toHaveTextContent(
+      "Check your connection and try again.",
+    );
+    expect(screen.getByRole("link", { name: "Open Registry" })).toHaveAttribute(
+      "href",
+      "/registry",
+    );
+
+    // When
+    await user.click(screen.getByRole("button", { name: "Try again" }));
+
+    // Then
+    expect(await screen.findByLabelText(/API token/)).toBeVisible();
+    expect(screen.queryByRole("alert")).not.toBeInTheDocument();
+  });
+  it("clears credentials when changing providers", async () => {
+    const view = render(<DynamicCredentialsStep {...props} />);
+    fireEvent.change(await screen.findByLabelText(/API token/), {
+      target: { value: "previous-secret" },
+    });
+    view.rerender(
+      <DynamicCredentialsStep
+        {...props}
+        providerId="other"
+        providerType="other"
+      />,
+    );
+    await waitFor(() =>
+      expect(screen.getByLabelText(/API token/)).toHaveValue(""),
+    );
+  });
+  it("clears credentials when switching authentication methods", async () => {
+    getProviderSchemas.mockResolvedValue({
+      status: "success",
+      providerType: "acme",
+      secretTypes: { api_key: schema, personal_token: schema },
+    });
+    render(<DynamicCredentialsStep {...props} />);
+    fireEvent.change(await screen.findByLabelText(/API token/), {
+      target: { value: "previous-method-secret" },
+    });
+    const user = userEvent.setup();
+    await user.click(
+      screen.getByRole("combobox", { name: "Authentication method" }),
+    );
+    await user.click(screen.getByRole("option", { name: "personal token" }));
+    expect(screen.getByLabelText(/API token/)).toHaveValue("");
+    expect(JSON.stringify(sessionStorage)).not.toContain(
+      "previous-method-secret",
+    );
+    expect(JSON.stringify(localStorage)).not.toContain(
+      "previous-method-secret",
+    );
+  });
+  it("rejects double submission and retries a failed save for the same account", async () => {
+    let rejectSave!: (error: Error) => void;
+    saveDynamicProviderCredentials.mockImplementationOnce(
+      () =>
+        new Promise((_resolve, reject) => {
+          rejectSave = reject;
+        }),
+    );
+    render(<DynamicCredentialsStep {...props} />);
+    const field = await screen.findByLabelText(/API token/);
+    fireEvent.change(field, { target: { value: "retry-secret" } });
+    fireEvent.submit(field.closest("form")!);
+    fireEvent.submit(field.closest("form")!);
+    expect(saveDynamicProviderCredentials).toHaveBeenCalledOnce();
+    rejectSave(new Error("Network unavailable"));
+    await screen.findByText(
+      "Could not save the credentials. Check your connection and retry.",
+    );
+    expect(props.onNext).not.toHaveBeenCalled();
+    fireEvent.submit(field.closest("form")!);
+    await waitFor(() => expect(props.onNext).toHaveBeenCalledOnce());
+    expect(saveDynamicProviderCredentials).toHaveBeenCalledTimes(2);
+    expect(saveDynamicProviderCredentials).toHaveBeenLastCalledWith({
+      providerId: "account",
+      secretType: "api_key",
+      secret: { token: "retry-secret" },
+    });
+  });
+  it("keeps other field and form errors visible while editing one credential", async () => {
+    // Given
+    const user = userEvent.setup();
+    getProviderSchemas.mockResolvedValue({
+      status: "success",
+      providerType: "acme",
+      secretTypes: {
+        api_key: {
+          ...schema,
+          properties: {
+            ...schema.properties,
+            project: { type: "string", title: "Project" },
+          },
+          required: ["token", "project"],
+        },
+      },
+    });
+    saveDynamicProviderCredentials.mockResolvedValueOnce({
+      status: "invalid",
+      errors: {
+        token: "Token was rejected",
+        project: "Project is unavailable",
+        _form: "Review the credential fields",
+      },
+    });
+    render(<DynamicCredentialsStep {...props} />);
+    const token = await screen.findByLabelText(/API token/);
+    await user.type(token, "fixture-token");
+    await user.type(screen.getByLabelText(/Project/), "fixture-project");
+    act(() => token.closest("form")!.requestSubmit());
+    expect(await screen.findByText("Token was rejected")).toBeVisible();
+
+    // When
+    await user.type(token, "-edited");
+
+    // Then
+    expect(screen.queryByText("Token was rejected")).not.toBeInTheDocument();
+    expect(screen.getByText("Project is unavailable")).toBeVisible();
+    expect(screen.getByText("Review the credential fields")).toBeVisible();
+
+    // When / Then: submitting again replaces the earlier validation errors.
+    act(() => token.closest("form")!.requestSubmit());
+    await waitFor(() => expect(props.onNext).toHaveBeenCalledOnce());
+    expect(
+      screen.queryByText("Project is unavailable"),
+    ).not.toBeInTheDocument();
+    expect(
+      screen.queryByText("Review the credential fields"),
+    ).not.toBeInTheDocument();
+  });
+});
diff --git a/ui/components/providers/wizard/steps/dynamic-credentials-step.tsx b/ui/components/providers/wizard/steps/dynamic-credentials-step.tsx
new file mode 100644
index 0000000000..35fc5f0daa
--- /dev/null
+++ b/ui/components/providers/wizard/steps/dynamic-credentials-step.tsx
@@ -0,0 +1,336 @@
+"use client";
+
+import { RotateCcw } from "lucide-react";
+import Link from "next/link";
+import { useEffect, useRef, useState } from "react";
+
+import { saveDynamicProviderCredentials } from "@/actions/providers/dynamic-provider-credentials";
+import { getProviderSchemas } from "@/actions/providers/provider-schemas";
+import { RegistryCredentialFields } from "@/components/providers/workflow/provider-credential-fields";
+import { Button } from "@/components/shadcn/button/button";
+import { Field, FieldLabel } from "@/components/shadcn/field/field";
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/shadcn/select/select";
+import { Skeleton } from "@/components/shadcn/skeleton/skeleton";
+import { useToast } from "@/components/shadcn/toast";
+import { StatusAlert } from "@/components/shared/status-alert";
+import {
+  parseRegistryCredentialSchema,
+  type RegistryCredentialSchema,
+} from "@/lib/provider-credentials/provider-credential-schema";
+import {
+  getCredentialDefaults,
+  validateCredentialValues,
+} from "@/lib/provider-credentials/provider-credential-values";
+import { useProviderWizardStore } from "@/store/provider-wizard/store";
+import type { ProviderSchemasResult } from "@/types/provider-schema";
+
+import {
+  WIZARD_FOOTER_ACTION_TYPE,
+  type WizardFooterConfig,
+} from "./footer-controls";
+
+interface DynamicCredentialsStepProps {
+  providerId: string;
+  providerType: string;
+  onNext: () => void;
+  onBack: () => void;
+  onFooterChange: (config: WizardFooterConfig) => void;
+}
+
+function credentialFormError(status: ProviderSchemasResult["status"]) {
+  switch (status) {
+    case "access_denied":
+      return {
+        title: "Access required",
+        description:
+          "Your session may have expired or you may not have permission. Sign in again or contact your administrator.",
+      };
+    case "unavailable":
+      return {
+        title: "Provider installation unavailable",
+        description:
+          "Install this provider's artifact again in Registry, then try again.",
+      };
+    case "not_found":
+      return {
+        title: "Credential form unavailable",
+        description:
+          "This provider does not provide a credential form. Contact its publisher or your administrator.",
+      };
+    case "success":
+    case "malformed":
+      return {
+        title: "Credential form not supported",
+        description:
+          "We could not display this provider's credential form. Contact its publisher or your administrator.",
+      };
+    default:
+      return {
+        title: "Could not load credential form",
+        description: "Check your connection and try again.",
+      };
+  }
+}
+
+function DynamicCredentialForm({
+  providerId,
+  secretType,
+  schema,
+  onNext,
+  onBack,
+  onFooterChange,
+  onLoadingChange,
+}: Omit<DynamicCredentialsStepProps, "providerType"> & {
+  secretType: string;
+  schema: RegistryCredentialSchema;
+  onLoadingChange: (value: boolean) => void;
+}) {
+  const { toast } = useToast();
+  const setSecretId = useProviderWizardStore((state) => state.setSecretId);
+  // Credentials belong only to this form. A new account or authentication
+  // method mounts a fresh instance; no values enter the persisted wizard store.
+  const [values, setValues] = useState(() => getCredentialDefaults(schema));
+  const [errors, setErrors] = useState<Record<string, string>>({});
+  const [saving, setSaving] = useState(false);
+  const inFlight = useRef(false);
+  const mounted = useRef(true);
+  const formId = "provider-wizard-dynamic-credentials-form";
+  const valid = validateCredentialValues(schema, values).valid;
+  useEffect(() => {
+    mounted.current = true;
+    return () => {
+      mounted.current = false;
+    };
+  }, []);
+
+  useEffect(() => {
+    onFooterChange({
+      showBack: true,
+      backLabel: "Back",
+      backDisabled: saving,
+      onBack,
+      showAction: true,
+      actionLabel: "Authenticate",
+      actionDisabled: saving || !valid,
+      actionType: WIZARD_FOOTER_ACTION_TYPE.SUBMIT,
+      actionFormId: formId,
+    });
+  }, [onBack, onFooterChange, saving, valid]);
+
+  return (
+    <form
+      id={formId}
+      onSubmit={async (event) => {
+        event.preventDefault();
+        if (inFlight.current) return;
+        const validation = validateCredentialValues(schema, values);
+        setErrors(validation.errors);
+        if (!validation.valid) return;
+        inFlight.current = true;
+        setSaving(true);
+        onLoadingChange(true);
+        try {
+          const result = await saveDynamicProviderCredentials({
+            providerId,
+            secretType,
+            secret: validation.secret,
+          });
+          if (!mounted.current) return;
+          if (result.status === "saved") {
+            setValues({});
+            setSecretId(result.secretId);
+            toast({
+              title: "Credentials saved",
+              description: "Test the provider connection to continue.",
+            });
+            onNext();
+          } else if (result.status === "invalid") {
+            setErrors(result.errors);
+          } else {
+            const description =
+              result.status === "schema_unavailable"
+                ? "The credential schema is unavailable. Check the installed artifact in Registry and reload the form."
+                : result.status === "access_denied"
+                  ? "You no longer have permission to update these credentials. Contact an administrator."
+                  : "Check your credentials and try again. Your provider account is already created.";
+            setErrors({ _form: description });
+            toast({
+              variant: "destructive",
+              title: "Credentials could not be saved",
+              description,
+            });
+          }
+        } catch {
+          if (mounted.current) {
+            const description =
+              "Could not save the credentials. Check your connection and retry.";
+            setErrors({ _form: description });
+            toast({
+              variant: "destructive",
+              title: "Credentials could not be saved",
+              description,
+            });
+          }
+        } finally {
+          inFlight.current = false;
+          if (mounted.current) {
+            setSaving(false);
+            onLoadingChange(false);
+          }
+        }
+      }}
+    >
+      <fieldset disabled={saving} className="flex flex-col gap-4">
+        {errors._form && (
+          <StatusAlert variant="error" title="Credentials could not be saved">
+            {errors._form}
+          </StatusAlert>
+        )}
+        <RegistryCredentialFields
+          schema={schema}
+          values={values}
+          errors={errors}
+          onChange={(name, value) => {
+            setValues((current) => ({ ...current, [name]: value }));
+            setErrors((current) => {
+              const next = { ...current };
+              delete next[name];
+              return next;
+            });
+          }}
+        />
+      </fieldset>
+    </form>
+  );
+}
+
+function DynamicCredentialsContent(props: DynamicCredentialsStepProps) {
+  const { providerType, onBack, onFooterChange } = props;
+  const [schemas, setSchemas] = useState<ProviderSchemasResult | null>(null);
+  const [selectedMethod, setSelectedMethod] = useState("");
+  const [attempt, setAttempt] = useState(0);
+  const [saving, setSaving] = useState(false);
+  useEffect(() => {
+    let active = true;
+    setSchemas(null);
+    setSelectedMethod("");
+    getProviderSchemas(providerType)
+      .then((result) => {
+        if (active) setSchemas(result);
+      })
+      .catch(() => {
+        if (active) setSchemas({ status: "error" });
+      });
+    return () => {
+      active = false;
+    };
+  }, [providerType, attempt]);
+
+  const methods =
+    schemas?.status === "success" ? Object.keys(schemas.secretTypes) : [];
+  const secretType = selectedMethod || methods[0];
+  const schema =
+    schemas?.status === "success" && secretType
+      ? parseRegistryCredentialSchema(schemas.secretTypes[secretType])
+      : null;
+  useEffect(() => {
+    if (!schema)
+      onFooterChange({
+        showBack: true,
+        backLabel: "Back",
+        onBack,
+        showAction: false,
+        actionLabel: "Authenticate",
+        actionType: WIZARD_FOOTER_ACTION_TYPE.BUTTON,
+      });
+  }, [schema, onBack, onFooterChange]);
+
+  if (!schemas)
+    return (
+      <div
+        role="status"
+        aria-label="Loading credential schema"
+        className="space-y-4"
+      >
+        <Skeleton className="h-10 w-full" />
+        <Skeleton className="h-10 w-full" />
+      </div>
+    );
+
+  const error = credentialFormError(
+    schemas.status === "success" && methods.length === 0
+      ? "not_found"
+      : schemas.status,
+  );
+
+  return (
+    <div className="flex flex-col gap-6">
+      {methods.length > 1 && (
+        <Field>
+          <FieldLabel htmlFor="registry-auth-method">
+            Authentication method
+          </FieldLabel>
+          <Select
+            value={secretType}
+            disabled={saving}
+            onValueChange={setSelectedMethod}
+          >
+            <SelectTrigger id="registry-auth-method">
+              <SelectValue />
+            </SelectTrigger>
+            <SelectContent>
+              {methods.map((method) => (
+                <SelectItem key={method} value={method}>
+                  {method.replaceAll("_", " ")}
+                </SelectItem>
+              ))}
+            </SelectContent>
+          </Select>
+        </Field>
+      )}
+      {schema ? (
+        <DynamicCredentialForm
+          key={`${secretType}/${attempt}`}
+          {...props}
+          secretType={secretType}
+          schema={schema}
+          onLoadingChange={setSaving}
+        />
+      ) : (
+        <div className="space-y-4">
+          <StatusAlert variant="error" title={error.title}>
+            {error.description}
+          </StatusAlert>
+          <div className="flex flex-wrap gap-3">
+            <Button
+              type="button"
+              variant="outline"
+              onClick={() => setAttempt((value) => value + 1)}
+            >
+              <RotateCcw aria-hidden />
+              Try again
+            </Button>
+            <Button variant="link" asChild>
+              <Link href="/registry">Open Registry</Link>
+            </Button>
+          </div>
+        </div>
+      )}
+    </div>
+  );
+}
+
+export function DynamicCredentialsStep(props: DynamicCredentialsStepProps) {
+  return (
+    <DynamicCredentialsContent
+      key={`${props.providerId}/${props.providerType}`}
+      {...props}
+    />
+  );
+}
diff --git a/ui/components/providers/wizard/steps/footer-controls.ts b/ui/components/providers/wizard/steps/footer-controls.ts
index ff41ae8061..7bdd0d5d58 100644
--- a/ui/components/providers/wizard/steps/footer-controls.ts
+++ b/ui/components/providers/wizard/steps/footer-controls.ts
@@ -22,6 +22,7 @@ export interface WizardFooterConfig {
   onSecondaryAction?: () => void;
   showAction: boolean;
   actionLabel: string;
+  actionLoading?: boolean;
   actionDisabled?: boolean;
   actionType: WizardFooterActionType;
   actionFormId?: string;
diff --git a/ui/components/providers/workflow/forms/connect-account-form.test.tsx b/ui/components/providers/workflow/forms/connect-account-form.test.tsx
new file mode 100644
index 0000000000..7e74064f8e
--- /dev/null
+++ b/ui/components/providers/workflow/forms/connect-account-form.test.tsx
@@ -0,0 +1,84 @@
+import { render, screen, waitFor } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const { addProvider, updateProvider, getInstalledRegistryProviderOptions } =
+  vi.hoisted(() => ({
+    addProvider: vi.fn(),
+    updateProvider: vi.fn(),
+    getInstalledRegistryProviderOptions: vi.fn(),
+  }));
+
+vi.mock("next/navigation", () => ({
+  useRouter: () => ({ push: vi.fn() }),
+}));
+vi.mock("@/actions/providers/providers", () => ({
+  addProvider,
+  updateProvider,
+}));
+vi.mock("@/actions/providers/registry-provider", () => ({
+  addRegistryProvider: vi.fn(),
+}));
+vi.mock("@/actions/registry/registry", () => ({
+  getInstalledRegistryProviderOptions,
+}));
+
+import { ConnectAccountForm } from "./connect-account-form";
+
+describe("provider account aliases", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    getInstalledRegistryProviderOptions.mockResolvedValue({
+      status: "access_denied",
+    });
+  });
+
+  it("saves an alias changed after an account was already created", async () => {
+    // Given
+    const onSuccess = vi.fn();
+    const user = userEvent.setup();
+    const account = {
+      id: "existing",
+      attributes: { provider: "github", uid: "octocat", alias: "Original" },
+    };
+    addProvider.mockResolvedValue({ data: account });
+    updateProvider.mockResolvedValue({
+      data: {
+        ...account,
+        attributes: { ...account.attributes, alias: "Edited" },
+      },
+    });
+    render(<ConnectAccountForm onSuccess={onSuccess} />);
+    await user.click(screen.getByRole("option", { name: "GitHub" }));
+    await user.type(
+      screen.getByRole("textbox", { name: "Username/Organization" }),
+      "octocat",
+    );
+    const alias = screen.getByRole("textbox", {
+      name: "Provider alias (optional)",
+    });
+    await user.type(alias, "Original");
+    await user.click(screen.getByRole("button", { name: "Next" }));
+    await waitFor(() => expect(onSuccess).toHaveBeenCalledOnce());
+
+    // When
+    await user.clear(alias);
+    await user.type(alias, "Edited");
+    await user.click(screen.getByRole("button", { name: "Next" }));
+
+    // Then
+    await waitFor(() =>
+      expect(onSuccess).toHaveBeenLastCalledWith({
+        id: "existing",
+        providerType: "github",
+        uid: "octocat",
+        alias: "Edited",
+      }),
+    );
+    expect(addProvider).toHaveBeenCalledOnce();
+    expect(Object.fromEntries(updateProvider.mock.calls[0][0])).toMatchObject({
+      providerId: "existing",
+      providerAlias: "Edited",
+    });
+  });
+});
diff --git a/ui/components/providers/workflow/forms/connect-account-form.tsx b/ui/components/providers/workflow/forms/connect-account-form.tsx
index a46de4871d..2ccd6531ff 100644
--- a/ui/components/providers/workflow/forms/connect-account-form.tsx
+++ b/ui/components/providers/workflow/forms/connect-account-form.tsx
@@ -3,20 +3,25 @@
 import { zodResolver } from "@hookform/resolvers/zod";
 import { ChevronLeftIcon, ChevronRightIcon, Loader2 } from "lucide-react";
 import { useRouter } from "next/navigation";
-import { Dispatch, SetStateAction, useEffect, useState } from "react";
+import { Dispatch, SetStateAction, useEffect, useRef, useState } from "react";
 import { useForm, UseFormReturn } from "react-hook-form";
-import { z } from "zod";
 
-import { addProvider } from "@/actions/providers/providers";
+import { addProvider, updateProvider } from "@/actions/providers/providers";
+import { addRegistryProvider } from "@/actions/providers/registry-provider";
+import { getInstalledRegistryProviderOptions } from "@/actions/registry/registry";
 import { AwsMethodSelector } from "@/components/providers/organizations/aws-method-selector";
 import { AzureMethodSelector } from "@/components/providers/organizations/azure-method-selector";
 import { GcpMethodSelector } from "@/components/providers/organizations/gcp-method-selector";
 import { WizardInputField } from "@/components/providers/workflow/forms/fields";
 import { ProviderTitleDocs } from "@/components/providers/workflow/provider-title-docs";
 import { Button, useToast } from "@/components/shadcn";
+import { Alert, AlertDescription, AlertTitle } from "@/components/shadcn/alert";
 import { Form } from "@/components/shadcn/form";
+import { ProviderCredentialFields } from "@/lib/provider-credentials/provider-credential-fields";
+import type { RegistryProviderOption } from "@/lib/registry/provider-options";
 import {
-  addProviderFormSchema,
+  createAddProviderFormSchema,
+  AddProviderFormValues,
   ApiError,
   KnownProviderType,
   ProviderType,
@@ -26,10 +31,11 @@ import {
   OrgFlowType,
   toOrgFlowType,
 } from "@/types/organizations";
+import { isKnownProviderType } from "@/types/providers";
 
 import { RadioGroupProvider } from "../../radio-group-provider";
 
-export type FormValues = z.infer<typeof addProviderFormSchema>;
+export type FormValues = AddProviderFormValues;
 
 export interface ConnectAccountSuccessData {
   id: string;
@@ -209,7 +215,41 @@ export const ConnectAccountForm = ({
   const [method, setMethod] = useState<"single" | null>(null);
   const router = useRouter();
 
-  const formSchema = addProviderFormSchema;
+  const [registryOptions, setRegistryOptions] = useState<
+    RegistryProviderOption[]
+  >([]);
+  const [registryError, setRegistryError] = useState(false);
+  const [providerError, setProviderError] = useState<string | null>(null);
+  const [discoveryAttempt, setDiscoveryAttempt] = useState(0);
+  const submitting = useRef(false);
+  const createdAccount = useRef<ConnectAccountSuccessData | null>(null);
+
+  useEffect(() => {
+    let active = true;
+    const load = async () => {
+      try {
+        const result = await getInstalledRegistryProviderOptions();
+        if (!active) return;
+        setRegistryOptions(result.status === "ready" ? result.options : []);
+        setRegistryError(result.status === "error");
+      } catch {
+        if (active) {
+          setRegistryOptions([]);
+          setRegistryError(true);
+        }
+      }
+    };
+    void load();
+    window.addEventListener("registry-artifacts-changed", load);
+    return () => {
+      active = false;
+      window.removeEventListener("registry-artifacts-changed", load);
+    };
+  }, [discoveryAttempt]);
+
+  const formSchema = createAddProviderFormSchema(
+    registryOptions.map((option) => option.type),
+  );
 
   const form = useForm<FormValues>({
     resolver: zodResolver(formSchema),
@@ -229,6 +269,22 @@ export const ConnectAccountForm = ({
   const isLoading = form.formState.isSubmitting;
 
   const onSubmitClient = async (values: FormValues) => {
+    if (submitting.current) return;
+    const existingAccount =
+      createdAccount.current?.providerType === values.providerType &&
+      createdAccount.current.uid === values.providerUid
+        ? createdAccount.current
+        : null;
+    if (
+      existingAccount &&
+      (existingAccount.alias ?? "") === (values.providerAlias?.trim() ?? "") &&
+      onSuccess
+    ) {
+      onSuccess(existingAccount);
+      return;
+    }
+    submitting.current = true;
+    setProviderError(null);
     const formValues = { ...values };
 
     const formData = new FormData();
@@ -237,7 +293,20 @@ export const ConnectAccountForm = ({
     );
 
     try {
-      const data = await addProvider(formData);
+      let data;
+      if (existingAccount) {
+        const update = new FormData();
+        update.set(ProviderCredentialFields.PROVIDER_ID, existingAccount.id);
+        update.set(
+          ProviderCredentialFields.PROVIDER_ALIAS,
+          values.providerAlias?.trim() ?? "",
+        );
+        data = await updateProvider(update);
+      } else {
+        data = await (isKnownProviderType(values.providerType)
+          ? addProvider(formData)
+          : addRegistryProvider(formData));
+      }
 
       if (data?.errors && data.errors.length > 0) {
         data.errors.forEach((error: ApiError) => {
@@ -246,10 +315,9 @@ export const ConnectAccountForm = ({
 
           switch (pointer) {
             case "/data/attributes/provider":
-              form.setError("providerType", {
-                type: "server",
-                message: errorMessage,
-              });
+              // Provider selection is hidden here; keep failures visible and
+              // retryable when availability changes without editing the form.
+              setProviderError(errorMessage);
               break;
             case "/data/attributes/uid":
             case "/data/attributes/__all__":
@@ -280,12 +348,13 @@ export const ConnectAccountForm = ({
         } = data.data;
 
         if (onSuccess) {
-          onSuccess({
+          createdAccount.current = {
             id,
             providerType: createdProviderType,
             uid: uid || values.providerUid,
             alias: alias ?? values.providerAlias ?? null,
-          });
+          };
+          onSuccess(createdAccount.current);
           return;
         }
 
@@ -301,10 +370,13 @@ export const ConnectAccountForm = ({
             ? error.message
             : "Something went wrong. Please try again.",
       });
+    } finally {
+      submitting.current = false;
     }
   };
 
   const handleBackStep = () => {
+    setProviderError(null);
     applyBackStep({
       prevStep,
       method,
@@ -327,6 +399,7 @@ export const ConnectAccountForm = ({
 
   useEffect(() => {
     onBackHandlerChange?.(() => {
+      setProviderError(null);
       applyBackStep({
         prevStep,
         method,
@@ -352,7 +425,7 @@ export const ConnectAccountForm = ({
     onUiStateChange?.({
       showBack: prevStep === 2,
       showAction: prevStep === 2 && showUidForm,
-      actionLabel: "Next",
+      actionLabel: isLoading ? "Creating provider..." : "Next",
       actionDisabled: !canSubmit || isLoading,
       isLoading,
     });
@@ -375,7 +448,26 @@ export const ConnectAccountForm = ({
         {/* Step 1: Provider selection */}
         {prevStep === 1 && (
           <div data-tour-id="add-provider-provider-type">
+            {registryError && (
+              <Alert variant="warning">
+                <AlertTitle>Registry providers could not be loaded</AlertTitle>
+                <AlertDescription>
+                  Built-in providers are available. Check the Registry
+                  connection and try again.
+                  <Button
+                    type="button"
+                    variant="outline"
+                    onClick={() =>
+                      setDiscoveryAttempt((attempt) => attempt + 1)
+                    }
+                  >
+                    Retry Registry providers
+                  </Button>
+                </AlertDescription>
+              </Alert>
+            )}
             <RadioGroupProvider
+              registryOptions={registryOptions}
               control={form.control}
               isInvalid={!!form.formState.errors.providerType}
               errorMessage={form.formState.errors.providerType?.message}
@@ -423,6 +515,12 @@ export const ConnectAccountForm = ({
         {prevStep === 2 && showUidForm && (
           <>
             <ProviderTitleDocs providerType={providerType} />
+            {providerError && (
+              <Alert variant="destructive">
+                <AlertTitle>Unable to create provider</AlertTitle>
+                <AlertDescription>{providerError}</AlertDescription>
+              </Alert>
+            )}
             <WizardInputField
               control={form.control}
               name="providerUid"
@@ -465,13 +563,14 @@ export const ConnectAccountForm = ({
                 variant="default"
                 size="lg"
                 disabled={isLoading}
+                aria-busy={isLoading || undefined}
               >
                 {isLoading ? (
-                  <Loader2 className="animate-spin" />
+                  <Loader2 aria-hidden className="animate-spin" />
                 ) : (
                   <ChevronRightIcon size={24} />
                 )}
-                {isLoading ? "Loading" : "Next"}
+                {isLoading ? "Creating provider..." : "Next"}
               </Button>
             )}
           </div>
diff --git a/ui/components/providers/workflow/provider-credential-fields.test.tsx b/ui/components/providers/workflow/provider-credential-fields.test.tsx
new file mode 100644
index 0000000000..6925925f23
--- /dev/null
+++ b/ui/components/providers/workflow/provider-credential-fields.test.tsx
@@ -0,0 +1,136 @@
+import { render, screen } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { beforeAll, describe, expect, it, vi } from "vitest";
+
+import type { RegistryCredentialSchema } from "@/lib/provider-credentials/provider-credential-schema";
+
+import { RegistryCredentialFields } from "./provider-credential-fields";
+
+const schema: RegistryCredentialSchema = {
+  fields: [
+    {
+      name: "api_key",
+      label: "API Key",
+      description: "Issued from the console.",
+      kind: "password",
+      required: true,
+    },
+    {
+      name: "scheme",
+      label: "Scheme",
+      kind: "select",
+      options: ["bearer", "basic"],
+      required: false,
+    },
+    { name: "notes", label: "Notes", kind: "textarea", required: false },
+  ],
+};
+
+beforeAll(() => {
+  for (const name of [
+    "hasPointerCapture",
+    "releasePointerCapture",
+    "scrollIntoView",
+  ]) {
+    Object.defineProperty(HTMLElement.prototype, name, {
+      configurable: true,
+      value: () => false,
+    });
+  }
+});
+
+describe("RegistryCredentialFields", () => {
+  it("renders accessible controlled credential fields and emits changes", async () => {
+    // Given
+    const user = userEvent.setup();
+    const onChange = vi.fn();
+
+    render(
+      <RegistryCredentialFields
+        errors={{ api_key: "A key is required." }}
+        onChange={onChange}
+        schema={schema}
+        values={{ api_key: "", scheme: "bearer", notes: "" }}
+      />,
+    );
+
+    // When
+    await user.type(screen.getByLabelText(/API Key/), "x");
+    await user.click(screen.getByRole("combobox", { name: "Scheme" }));
+    await user.keyboard("{ArrowDown}{Enter}");
+
+    // Then
+    const apiKey = screen.getByLabelText(/API Key/);
+    const description = screen.getByText("Issued from the console.");
+    const error = screen.getByRole("alert");
+    expect(apiKey).toHaveAttribute("type", "password");
+    expect(apiKey).toHaveAttribute("autocomplete", "new-password");
+
+    expect(apiKey).toHaveAttribute(
+      "aria-describedby",
+      `${description.id} ${error.id}`,
+    );
+    expect(apiKey.id).toMatch(/-0-control$/);
+    expect(apiKey).toHaveAttribute("aria-invalid", "true");
+    expect(apiKey).toBeRequired();
+    expect(description.id).toMatch(/-0-description$/);
+    expect(error).toHaveTextContent("A key is required.");
+    expect(error.id).toMatch(/-0-error$/);
+    expect(onChange).toHaveBeenCalledWith("api_key", "x");
+    expect(onChange).toHaveBeenCalledWith("scheme", "basic");
+  });
+
+  it("uses unique index-based IDs for hostile field names and instances", () => {
+    // Given
+
+    const hostileSchema: RegistryCredentialSchema = {
+      fields: [
+        {
+          name: "x-description",
+          label: "First",
+          kind: "text",
+          required: false,
+        },
+        {
+          name: "registry-credential-x",
+          label: "Second",
+          description: "Second description.",
+          kind: "text",
+          required: false,
+        },
+      ],
+    };
+
+    const { container } = render(
+      <>
+        <RegistryCredentialFields
+          errors={{}}
+          onChange={vi.fn()}
+          schema={hostileSchema}
+          values={{}}
+        />
+        <RegistryCredentialFields
+          errors={{}}
+          onChange={vi.fn()}
+          schema={schema}
+          values={{}}
+        />
+        <RegistryCredentialFields
+          errors={{}}
+          onChange={vi.fn()}
+          schema={schema}
+          values={{}}
+        />
+      </>,
+    );
+
+    // When / Then
+    expect(screen.getByLabelText("First").id).toMatch(/-0-control$/);
+
+    expect(screen.getByText("Second description.").id).toMatch(
+      /-1-description$/,
+    );
+    const ids = Array.from(container.querySelectorAll("[id]"), ({ id }) => id);
+    expect(new Set(ids).size).toBe(ids.length);
+  });
+});
diff --git a/ui/components/providers/workflow/provider-credential-fields.tsx b/ui/components/providers/workflow/provider-credential-fields.tsx
new file mode 100644
index 0000000000..157f4a0d7e
--- /dev/null
+++ b/ui/components/providers/workflow/provider-credential-fields.tsx
@@ -0,0 +1,152 @@
+"use client";
+
+import { type ChangeEvent, useId } from "react";
+
+import { Checkbox } from "@/components/shadcn/checkbox/checkbox";
+import { Field, FieldError, FieldLabel } from "@/components/shadcn/field/field";
+import { Input } from "@/components/shadcn/input/input";
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/shadcn/select/select";
+import { Textarea } from "@/components/shadcn/textarea/textarea";
+import type {
+  RegistryCredentialSchema,
+  RegistryCredentialValue,
+} from "@/lib/provider-credentials/provider-credential-schema";
+
+interface RegistryCredentialFieldsProps {
+  readonly errors: Readonly<Record<string, string | undefined>>;
+  readonly onChange: (name: string, value: RegistryCredentialValue) => void;
+  readonly schema: RegistryCredentialSchema;
+  readonly values: Readonly<
+    Record<string, RegistryCredentialValue | undefined>
+  >;
+}
+
+export function RegistryCredentialFields({
+  errors,
+  onChange,
+  schema,
+  values,
+}: RegistryCredentialFieldsProps) {
+  const instanceId = useId();
+
+  return (
+    <div className="flex flex-col gap-4">
+      {schema.fields.map((field, index) => {
+        const error = errors[field.name];
+        const fieldId = `registry-credential-${instanceId}-${index}`;
+        const id = `${fieldId}-control`;
+        const descriptionId = field.description
+          ? `${fieldId}-description`
+          : undefined;
+        const errorId = error ? `${fieldId}-error` : undefined;
+        const describedBy =
+          [descriptionId, errorId].filter(Boolean).join(" ") || undefined;
+        const invalid = error ? true : undefined;
+        const value = values[field.name];
+        const textControlProps = {
+          "aria-describedby": describedBy,
+          "aria-invalid": invalid,
+          id,
+
+          onChange: (
+            event: ChangeEvent<HTMLInputElement | HTMLTextAreaElement>,
+          ) => onChange(field.name, event.target.value),
+          required: field.required,
+          placeholder: field.placeholder,
+          spellCheck: false,
+          value:
+            typeof value === "string" || typeof value === "number" ? value : "",
+        };
+
+        return (
+          <Field key={field.name}>
+            {field.kind === "checkbox" ? (
+              <div className="flex items-center gap-2">
+                <Checkbox
+                  aria-describedby={describedBy}
+                  aria-invalid={invalid}
+                  aria-required={field.required}
+                  checked={value === true}
+                  id={id}
+                  onCheckedChange={(checked) =>
+                    onChange(field.name, checked === true)
+                  }
+                />
+                <FieldLabel htmlFor={id}>
+                  {field.label}
+                  {field.required && <span aria-hidden="true"> *</span>}
+                </FieldLabel>
+              </div>
+            ) : (
+              <FieldLabel htmlFor={id}>
+                {field.label}
+                {field.required && <span aria-hidden="true"> *</span>}
+              </FieldLabel>
+            )}
+            {field.kind === "checkbox" ? null : field.kind === "select" ? (
+              <Select
+                onValueChange={(nextValue) => onChange(field.name, nextValue)}
+                value={typeof value === "string" ? value : ""}
+              >
+                <SelectTrigger
+                  aria-describedby={describedBy}
+                  aria-invalid={invalid}
+                  aria-label={field.label}
+                  aria-required={field.required}
+                  id={id}
+                >
+                  <SelectValue placeholder="Select an option" />
+                </SelectTrigger>
+                <SelectContent>
+                  {field.options?.map((option) => (
+                    <SelectItem key={option} value={option}>
+                      {option}
+                    </SelectItem>
+                  ))}
+                </SelectContent>
+              </Select>
+            ) : field.kind === "textarea" ? (
+              <Textarea autoComplete="off" {...textControlProps} />
+            ) : (
+              <Input
+                autoComplete={
+                  field.kind === "password" ? "new-password" : "off"
+                }
+                type={
+                  field.kind === "integer"
+                    ? "number"
+                    : field.kind === "password"
+                      ? "password"
+                      : "text"
+                }
+                min={field.minimum}
+                max={field.maximum}
+                step={field.kind === "integer" ? 1 : undefined}
+                {...textControlProps}
+              />
+            )}
+            {field.description && (
+              <p
+                className="text-text-neutral-secondary text-sm"
+                id={descriptionId}
+              >
+                {field.description}
+              </p>
+            )}
+            {error && (
+              <FieldError id={errorId} role="alert">
+                {error}
+              </FieldError>
+            )}
+          </Field>
+        );
+      })}
+    </div>
+  );
+}
diff --git a/ui/components/registry/registry-access-dialog.tsx b/ui/components/registry/registry-access-dialog.tsx
new file mode 100644
index 0000000000..882f176f54
--- /dev/null
+++ b/ui/components/registry/registry-access-dialog.tsx
@@ -0,0 +1,162 @@
+"use client";
+
+import { type FormEvent, type RefObject, useEffect, useRef } from "react";
+
+import { Button } from "@/components/shadcn/button/button";
+import { DialogFooter } from "@/components/shadcn/dialog";
+import { Input } from "@/components/shadcn/input/input";
+import { Modal } from "@/components/shadcn/modal/modal";
+
+interface RegistryAccessDialogCommonProps {
+  errorMessage?: string;
+  registryKeyUrl?: string;
+  onOpenChange: (open: boolean) => void;
+  onSubmit: (key: string) => Promise<void>;
+  open: boolean;
+  pending: boolean;
+  returnFocusRef: RefObject<HTMLButtonElement | null>;
+}
+
+type ConnectRegistryAccessDialogProps = RegistryAccessDialogCommonProps & {
+  mode: "connect";
+  onDisconnect?: never;
+};
+
+type ManageRegistryAccessDialogProps = RegistryAccessDialogCommonProps & {
+  mode: "manage";
+  onDisconnect: () => Promise<void>;
+};
+
+type RegistryAccessDialogProps =
+  | ConnectRegistryAccessDialogProps
+  | ManageRegistryAccessDialogProps;
+
+export function RegistryAccessDialog({
+  errorMessage,
+  registryKeyUrl,
+  mode,
+  onDisconnect,
+  onOpenChange,
+  onSubmit,
+  open,
+  pending,
+  returnFocusRef,
+}: RegistryAccessDialogProps) {
+  const formRef = useRef<HTMLFormElement>(null);
+  const keyInputRef = useRef<HTMLInputElement>(null);
+  const wasPendingRef = useRef(pending);
+  const actionLabel = mode === "connect" ? "Connect" : "Replace key";
+
+  // Re-enabling the form after a watched validation settles loses focus from
+  // the disabled input; hand it back so a retry can start from the keyboard.
+  useEffect(() => {
+    if (wasPendingRef.current && !pending) keyInputRef.current?.focus();
+    wasPendingRef.current = pending;
+  }, [pending]);
+
+  async function handleSubmit(event: FormEvent<HTMLFormElement>) {
+    event.preventDefault();
+    if (pending) return;
+    const key = new FormData(event.currentTarget).get("registry-key");
+    if (typeof key !== "string" || key.trim().length === 0) return;
+
+    formRef.current?.reset();
+    await onSubmit(key.trim());
+  }
+
+  return (
+    <Modal
+      description="Your Registry API key links this workspace to the Prowler artifact registry. It is validated asynchronously and never stored by this browser."
+      onOpenAutoFocus={(event) => {
+        event.preventDefault();
+        keyInputRef.current?.focus();
+      }}
+      onCloseAutoFocus={(event) => {
+        event.preventDefault();
+        returnFocusRef.current?.focus();
+      }}
+      onOpenChange={onOpenChange}
+      open={open}
+      size="md"
+      title={
+        mode === "connect"
+          ? "Connect Registry API key"
+          : "Manage Registry access"
+      }
+    >
+      <form
+        className="flex flex-col gap-4"
+        onSubmit={handleSubmit}
+        ref={formRef}
+      >
+        <div className="flex flex-col gap-2">
+          <label className="flex flex-col gap-2 text-sm" htmlFor="registry-key">
+            <span>Registry key</span>
+            <Input
+              aria-describedby={errorMessage ? "registry-key-error" : undefined}
+              autoComplete="new-password"
+              disabled={pending}
+              id="registry-key"
+              name="registry-key"
+              ref={keyInputRef}
+              spellCheck={false}
+              type="password"
+            />
+          </label>
+          {errorMessage && (
+            <p
+              className="text-text-error-primary text-sm"
+              id="registry-key-error"
+              role="alert"
+            >
+              {errorMessage}
+            </p>
+          )}
+          {registryKeyUrl && (
+            <Button
+              asChild
+              className="self-start"
+              size="link-sm"
+              variant="link"
+            >
+              <a
+                href={registryKeyUrl}
+                rel="noopener noreferrer"
+                target="_blank"
+              >
+                Where do I find my key?
+              </a>
+            </Button>
+          )}
+        </div>
+        <DialogFooter
+          className={mode === "manage" ? "sm:justify-between" : undefined}
+        >
+          {mode === "manage" && (
+            <Button
+              disabled={pending}
+              onClick={onDisconnect}
+              type="button"
+              variant="destructive"
+            >
+              Disconnect
+            </Button>
+          )}
+          <div className="flex flex-col-reverse gap-2 sm:flex-row">
+            <Button
+              disabled={pending}
+              onClick={() => onOpenChange(false)}
+              type="button"
+              variant="ghost"
+            >
+              Cancel
+            </Button>
+            <Button disabled={pending} type="submit">
+              {pending ? "Connecting…" : actionLabel}
+            </Button>
+          </div>
+        </DialogFooter>
+      </form>
+    </Modal>
+  );
+}
diff --git a/ui/components/registry/registry-artifact-card.integration.test.tsx b/ui/components/registry/registry-artifact-card.integration.test.tsx
new file mode 100644
index 0000000000..3257f55dce
--- /dev/null
+++ b/ui/components/registry/registry-artifact-card.integration.test.tsx
@@ -0,0 +1,236 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { page, userEvent } from "vitest/browser";
+
+import { render } from "@/__tests__/render-browser";
+
+import {
+  RegistryArtifactCard,
+  RegistryTenantArtifactCard,
+} from "./registry-artifact-card";
+import { RegistryArtifactGrid } from "./registry-artifact-grid";
+import type { RegistryMarketplaceArtifact } from "./registry-explorer.model";
+
+const artifact: RegistryMarketplaceArtifact = {
+  normalizedName: "prowler-provider-aws",
+  name: "AWS security",
+  description: "Security checks and compliance frameworks for AWS resources.",
+  latestVersion: "5.15.0",
+  providers: ["aws"],
+  isVerified: true,
+  isOfficial: true,
+  isBuiltin: true,
+  isMeta: false,
+  hasProvider: true,
+  hasChecks: true,
+  hasCompliance: true,
+  checkCount: 645,
+  complianceCount: 45,
+  versionCount: 1,
+  totalDownloads: 0,
+  owners: [{ name: "Prowler", type: "organization" }],
+  isAdded: false,
+  updateAvailable: false,
+};
+
+describe("Registry card metadata layout", () => {
+  it("keeps Added when the installed version is unknown", async () => {
+    // Given / When
+    const screen = await render(
+      <RegistryArtifactCard
+        artifact={{ ...artifact, isBuiltin: false, isAdded: true }}
+        onAdd={vi.fn()}
+        onRemove={vi.fn()}
+      />,
+    );
+    // Then
+    await expect
+      .element(screen.getByText("Added", { exact: true }))
+      .toBeVisible();
+    await expect
+      .element(screen.getByText("Unknown", { exact: true }))
+      .toBeVisible();
+    await expect
+      .element(screen.getByRole("button", { name: /Update/ }))
+      .not.toBeInTheDocument();
+  });
+  it("offers Update with installed and available versions instead of Added", async () => {
+    // Given
+    const onAdd = vi.fn();
+    const screen = await render(
+      <RegistryArtifactCard
+        artifact={{
+          ...artifact,
+          isBuiltin: false,
+          isAdded: true,
+          resolvedVersion: "1.0.0",
+          updateAvailable: true,
+        }}
+        onAdd={onAdd}
+        onRemove={vi.fn()}
+      />,
+    );
+    // When
+    await screen
+      .getByRole("button", { name: "Update AWS security to 5.15.0" })
+      .click();
+    // Then
+    expect(onAdd).toHaveBeenCalledOnce();
+    await expect
+      .element(screen.getByText("Added", { exact: true }))
+      .not.toBeInTheDocument();
+    await expect
+      .element(screen.getByText("Installed", { exact: true }))
+      .toBeVisible();
+    await expect
+      .element(screen.getByText("1.0.0", { exact: true }))
+      .toBeVisible();
+    await expect
+      .element(screen.getByText("Available", { exact: true }))
+      .toBeVisible();
+  });
+
+  afterEach(async () => {
+    localStorage.removeItem("theme");
+    await page.viewport(1280, 800);
+  });
+
+  it("identifies each provider logo on hover and keyboard focus", async () => {
+    // Given
+    const screen = await render(
+      <RegistryArtifactCard
+        artifact={{ ...artifact, providers: ["aws", "gcp", "template"] }}
+        onAdd={vi.fn()}
+        onRemove={vi.fn()}
+      />,
+    );
+
+    // When / Then: each visible provider uses its own display name.
+    for (const name of ["AWS", "Google Cloud", "Template"]) {
+      const logo = screen.getByRole("img", { name, exact: true });
+      await logo.hover();
+      await expect.element(screen.getByRole("tooltip")).toHaveTextContent(name);
+      await userEvent.keyboard("{Escape}");
+      await expect.element(screen.getByRole("tooltip")).not.toBeInTheDocument();
+    }
+
+    // When / Then: keyboard users can discover the same names.
+    await userEvent.tab();
+    await expect
+      .element(screen.getByRole("img", { name: "AWS", exact: true }))
+      .toHaveFocus();
+    await expect.element(screen.getByRole("tooltip")).toHaveTextContent("AWS");
+    await userEvent.tab();
+    await expect
+      .element(screen.getByRole("img", { name: "Google Cloud", exact: true }))
+      .toHaveFocus();
+    await expect
+      .element(screen.getByRole("tooltip"))
+      .toHaveTextContent("Google Cloud");
+  });
+
+  it.each([
+    { width: 320, theme: "dark" },
+    { width: 768, theme: "dark" },
+    { width: 1440, theme: "dark" },
+    { width: 320, theme: "light" },
+    { width: 1440, theme: "light" },
+  ])(
+    "contains long metadata at $width px in $theme mode",
+    async ({ width, theme }) => {
+      // Given: the real grid includes normal, long, and catalog-less cards.
+      await page.viewport(width, 1000);
+      localStorage.setItem("theme", theme);
+      const longVersion =
+        "2026.123456789.123456789-preview.0123456789abcdef0123456789abcdef";
+      const onAdd = vi.fn();
+      const screen = await render(
+        <main className="p-4">
+          <RegistryArtifactGrid isEmpty={false} emptyMessage="No artifacts">
+            <li>
+              <RegistryArtifactCard
+                artifact={artifact}
+                onAdd={onAdd}
+                onRemove={vi.fn()}
+              />
+            </li>
+            <li>
+              <RegistryArtifactCard
+                artifact={{
+                  ...artifact,
+                  name: "Long metadata",
+                  normalizedName: "long-metadata",
+                  latestVersion: longVersion,
+                  resolvedVersion: `${longVersion}-previous`,
+                  isAdded: true,
+                  updateAvailable: true,
+                  checkCount: Number.MAX_SAFE_INTEGER,
+                  complianceCount: 123456789,
+                  totalDownloads: 9876543210,
+                  isBuiltin: false,
+                  owners: [],
+                }}
+                onAdd={onAdd}
+                onRemove={vi.fn()}
+              />
+            </li>
+            <li>
+              <RegistryTenantArtifactCard
+                normalizedName="Catalog unavailable"
+                resolvedVersion={longVersion}
+                onRemove={vi.fn()}
+              />
+            </li>
+          </RegistryArtifactGrid>
+        </main>,
+      );
+
+      // Then: values stay complete, contained, and grouped in each card's footer.
+      const metadataBlocks = screen.getByRole("group", {
+        name: "Artifact metadata",
+      });
+      await expect.element(metadataBlocks.nth(2)).toBeVisible();
+      await expect
+        .element(
+          metadataBlocks
+            .nth(1)
+            .getByText("9,007,199,254,740,991", { exact: true }),
+        )
+        .toBeVisible();
+      await expect
+        .element(
+          metadataBlocks.nth(1).getByText("9,876,543,210", { exact: true }),
+        )
+        .toBeVisible();
+      await expect
+        .element(metadataBlocks.nth(2).getByText(longVersion, { exact: true }))
+        .toBeVisible();
+      for (const item of screen.getByRole("listitem").elements()) {
+        const card = item.querySelector('[data-slot="card"]')!;
+        const metadata = item.querySelector("dl")!;
+        const bounds = card.getBoundingClientRect();
+        expect(card.scrollWidth).toBeLessThanOrEqual(card.clientWidth);
+        for (const value of Array.from(metadata.querySelectorAll("dt, dd"))) {
+          expect(value.scrollWidth).toBeLessThanOrEqual(value.clientWidth);
+          const range = document.createRange();
+          range.selectNodeContents(value);
+          for (const line of Array.from(range.getClientRects())) {
+            expect(line.left).toBeGreaterThanOrEqual(bounds.left);
+            expect(line.right).toBeLessThanOrEqual(bounds.right);
+          }
+        }
+        const description = item.querySelector("p");
+        expect(metadata.getBoundingClientRect().top).toBeGreaterThan(
+          description!.getBoundingClientRect().bottom,
+        );
+      }
+      expect(document.documentElement.scrollWidth).toBeLessThanOrEqual(width);
+
+      // When / Then: wrapping does not obstruct the card action.
+      await screen
+        .getByRole("button", { name: `Update Long metadata to ${longVersion}` })
+        .click();
+      expect(onAdd).toHaveBeenCalledOnce();
+      await screen.getByRole("main").screenshot();
+    },
+  );
+});
diff --git a/ui/components/registry/registry-artifact-card.tsx b/ui/components/registry/registry-artifact-card.tsx
new file mode 100644
index 0000000000..9bc2ed5283
--- /dev/null
+++ b/ui/components/registry/registry-artifact-card.tsx
@@ -0,0 +1,410 @@
+"use client";
+
+import {
+  BadgeCheck,
+  Check,
+  ClipboardCheck,
+  Download,
+  ListChecks,
+  Package,
+  ShieldCheck,
+  Tag,
+} from "lucide-react";
+
+import { ProviderTypeIcon } from "@/components/icons/providers-badge/provider-type-icon";
+import { ProwlerShort } from "@/components/icons/prowler/ProwlerIcons";
+import {
+  Avatar,
+  AvatarImage,
+  AvatarFallback,
+} from "@/components/shadcn/avatar/avatar";
+import { Badge } from "@/components/shadcn/badge/badge";
+import { Button } from "@/components/shadcn/button/button";
+import { Card } from "@/components/shadcn/card/card";
+import {
+  Tooltip,
+  TooltipContent,
+  TooltipTrigger,
+} from "@/components/shadcn/tooltip";
+import { isRegistryArtifactInstallable } from "@/lib/registry/artifacts";
+import { cn } from "@/lib/utils";
+import { getProviderDisplayName, isKnownProviderType } from "@/types/providers";
+import type { RegistryArtifactOwner } from "@/types/registry";
+
+import {
+  REGISTRY_CAPABILITY_LABELS,
+  type RegistryMarketplaceArtifact,
+} from "./registry-explorer.model";
+
+interface RegistryArtifactCardProps {
+  artifact: RegistryMarketplaceArtifact;
+  pendingAddName?: string;
+  onAdd: () => void;
+  onRemove: (trigger: HTMLButtonElement | null) => void;
+}
+
+function capabilitySummary(artifact: RegistryMarketplaceArtifact) {
+  const labels = [
+    artifact.hasProvider && REGISTRY_CAPABILITY_LABELS.provider,
+    artifact.hasChecks && REGISTRY_CAPABILITY_LABELS.checks,
+    artifact.hasCompliance && REGISTRY_CAPABILITY_LABELS.compliance,
+  ].filter((label) => label !== false);
+  return labels.join(", ");
+}
+
+/**
+ * Maximum provider logos rendered in the footer cluster before collapsing
+ * the remainder into a "+N" overflow badge (registry.dev card reference).
+ */
+const MAX_PROVIDER_LOGOS = 4;
+
+interface RegistryProviderClusterProps {
+  providers: string[];
+}
+
+function RegistryProviderCluster({ providers }: RegistryProviderClusterProps) {
+  if (providers.length === 0) return null;
+
+  const displayNames = providers.map(getProviderDisplayName);
+  const visibleProviders = providers.slice(0, MAX_PROVIDER_LOGOS);
+  const overflowCount = providers.length - visibleProviders.length;
+
+  return (
+    <span className="flex items-center gap-1.5">
+      {/* Icons alone must never be the only carrier of the provider names. */}
+      <span className="sr-only">
+        {providers.length === 1
+          ? `Provider: ${displayNames[0]}`
+          : `Providers: ${displayNames.join(", ")}`}
+      </span>
+      {providers.length > 1 && (
+        <span aria-hidden className="text-text-neutral-secondary text-xs">
+          {providers.length} providers
+        </span>
+      )}
+      <span className="flex items-center gap-1">
+        {visibleProviders.map((provider) => (
+          <Tooltip key={provider} delayDuration={150}>
+            <TooltipTrigger asChild>
+              <span
+                role="img"
+                aria-label={getProviderDisplayName(provider)}
+                tabIndex={0}
+                className="focus-visible:outline-button-primary inline-flex shrink-0 rounded-sm focus-visible:outline-2 focus-visible:outline-offset-2"
+              >
+                {isKnownProviderType(provider) ? (
+                  <ProviderTypeIcon size={16} type={provider} />
+                ) : (
+                  <Badge size="sm" variant="tag">
+                    {getProviderDisplayName(provider)}
+                  </Badge>
+                )}
+              </span>
+            </TooltipTrigger>
+            <TooltipContent side="top">
+              {getProviderDisplayName(provider)}
+            </TooltipContent>
+          </Tooltip>
+        ))}
+      </span>
+      {overflowCount > 0 && (
+        <span aria-hidden className="text-text-neutral-secondary text-xs">
+          +{overflowCount}
+        </span>
+      )}
+    </span>
+  );
+}
+
+interface RegistryOwnerRowProps {
+  isOfficial: boolean;
+  isVerified: boolean;
+  owner?: RegistryArtifactOwner;
+}
+
+function RegistryOwnerRow({
+  isOfficial,
+  isVerified,
+  owner,
+}: RegistryOwnerRowProps) {
+  if (!owner && !isOfficial && !isVerified) return null;
+
+  return (
+    <div className="flex flex-wrap items-center gap-2">
+      {owner &&
+        (owner.name.trim().toLowerCase() === "prowler" ? (
+          <ProwlerShort aria-label="Prowler" role="img" size={20} />
+        ) : (
+          <span className="flex min-w-0 items-center gap-2">
+            <Avatar aria-hidden className="size-5">
+              <AvatarImage alt="" src={owner.logoUrl} />
+              <AvatarFallback>{owner.name.charAt(0)}</AvatarFallback>
+            </Avatar>
+            <span className="text-text-neutral-secondary truncate text-xs">
+              {owner.name}
+            </span>
+          </span>
+        ))}
+      {isOfficial && (
+        <Badge variant="tag">
+          <ShieldCheck aria-hidden />
+          Official
+        </Badge>
+      )}
+      {isVerified && (
+        <Badge variant="success">
+          <BadgeCheck aria-hidden />
+          Verified
+        </Badge>
+      )}
+    </div>
+  );
+}
+
+interface RegistryArtifactMetadataProps {
+  complianceCount?: number;
+  checkCount?: number;
+  version?: string;
+  isAdded?: boolean;
+  availableVersion?: string;
+  downloads?: number;
+}
+
+function RegistryArtifactMetadata({
+  complianceCount,
+  checkCount,
+  version,
+  isAdded,
+  availableVersion,
+  downloads,
+}: RegistryArtifactMetadataProps) {
+  const items = [
+    {
+      label: REGISTRY_CAPABILITY_LABELS.compliance,
+      value: complianceCount,
+      icon: ClipboardCheck,
+    },
+    {
+      label: REGISTRY_CAPABILITY_LABELS.checks,
+      value: checkCount,
+      icon: ListChecks,
+    },
+    { label: isAdded ? "Installed" : "Version", value: version, icon: Tag },
+    { label: "Available", value: availableVersion, icon: Tag },
+    { label: "Downloads", value: downloads, icon: Download },
+  ].filter(({ value }) => value !== undefined && value !== "");
+
+  if (items.length === 0) return null;
+
+  return (
+    <div className="@container">
+      <dl
+        role="group"
+        aria-label="Artifact metadata"
+        className={cn(
+          "border-border-neutral-tertiary grid grid-cols-1 gap-x-4 gap-y-3 border-t pt-3",
+          items.length > 1 && "grid-cols-2",
+          items.length === 3 && "@sm:grid-cols-3",
+          items.length === 4 && "@sm:grid-cols-4",
+          items.length === 5 && "@sm:grid-cols-3",
+        )}
+      >
+        {items.map(({ label, value, icon: Icon }) => (
+          <div key={label} className="min-w-0 space-y-1">
+            <dt className="text-text-neutral-secondary flex items-center gap-1.5 text-xs">
+              <Icon
+                aria-hidden
+                className="text-text-neutral-tertiary size-3.5 shrink-0"
+              />
+              {label}
+            </dt>
+            <dd
+              className={cn(
+                "text-text-neutral-primary text-sm leading-5 font-medium wrap-anywhere tabular-nums",
+                Icon === Tag && "font-mono",
+              )}
+            >
+              {typeof value === "number"
+                ? value.toLocaleString("en-US")
+                : value}
+            </dd>
+          </div>
+        ))}
+      </dl>
+    </div>
+  );
+}
+
+export function RegistryArtifactCard({
+  artifact,
+  pendingAddName,
+  onAdd,
+  onRemove,
+}: RegistryArtifactCardProps) {
+  const displayName = artifact.name ?? artifact.normalizedName;
+  const subtitle = [
+    artifact.providers.map(getProviderDisplayName).join(", "),
+    capabilitySummary(artifact),
+  ]
+    .filter(Boolean)
+    .join(" · ");
+
+  return (
+    <Card className="h-full gap-3" padding="md" variant="inner">
+      <div className="flex items-start gap-3">
+        <span
+          aria-hidden
+          className="bg-bg-neutral-tertiary text-text-neutral-secondary flex size-10 shrink-0 items-center justify-center overflow-hidden rounded-lg"
+        >
+          {/* Artifacts can span several providers, so the header shows a
+              neutral package mark instead of any single provider logo. */}
+          <Package size={26} />
+        </span>
+        <div className="min-w-0">
+          <p className="text-text-neutral-primary truncate text-sm font-semibold">
+            {displayName}
+          </p>
+          {subtitle && (
+            <p className="text-text-neutral-secondary truncate text-xs">
+              {subtitle}
+            </p>
+          )}
+        </div>
+      </div>
+      {artifact.description && (
+        <p className="text-text-neutral-secondary line-clamp-2 text-sm">
+          {artifact.description}
+        </p>
+      )}
+      <div className="mt-auto space-y-3">
+        <RegistryOwnerRow
+          isOfficial={artifact.isOfficial}
+          isVerified={artifact.isVerified}
+          owner={artifact.owners[0]}
+        />
+        <RegistryArtifactMetadata
+          complianceCount={artifact.complianceCount}
+          checkCount={artifact.checkCount}
+          version={
+            artifact.isAdded
+              ? artifact.resolvedVersion || "Unknown"
+              : artifact.latestVersion
+          }
+          isAdded={artifact.isAdded}
+          availableVersion={
+            artifact.isAdded &&
+            artifact.latestVersion !== artifact.resolvedVersion
+              ? artifact.latestVersion
+              : undefined
+          }
+          downloads={artifact.isBuiltin ? undefined : artifact.totalDownloads}
+        />
+        <div className="flex flex-wrap items-center gap-3">
+          <RegistryProviderCluster providers={artifact.providers} />
+          <span className="ml-auto flex flex-wrap items-center justify-end gap-2">
+            {artifact.isBuiltin && (
+              <Badge aria-label="Built in" role="status" variant="tag">
+                Built in
+              </Badge>
+            )}
+            {artifact.isAdded ? (
+              <>
+                {artifact.updateAvailable ? (
+                  <Button
+                    aria-label={`Update ${displayName} to ${artifact.latestVersion}`}
+                    disabled={Boolean(pendingAddName)}
+                    onClick={onAdd}
+                    size="sm"
+                    type="button"
+                  >
+                    {pendingAddName === artifact.normalizedName
+                      ? "Updating…"
+                      : "Update"}
+                  </Button>
+                ) : (
+                  <Badge variant="outline">
+                    <Check aria-hidden />
+                    Added
+                  </Badge>
+                )}
+                <Button
+                  aria-label={`Remove ${displayName}`}
+                  disabled={pendingAddName === artifact.normalizedName}
+                  onClick={(event) => onRemove(event.currentTarget)}
+                  size="sm"
+                  type="button"
+                  variant="outline"
+                >
+                  Remove
+                </Button>
+              </>
+            ) : isRegistryArtifactInstallable(artifact) ? (
+              <Button
+                aria-label={`Add ${displayName}`}
+                disabled={Boolean(pendingAddName)}
+                onClick={onAdd}
+                size="sm"
+                type="button"
+              >
+                {pendingAddName === artifact.normalizedName ? "Adding…" : "Add"}
+              </Button>
+            ) : null}
+          </span>
+        </div>
+      </div>
+    </Card>
+  );
+}
+
+interface RegistryTenantArtifactCardProps {
+  normalizedName: string;
+  onRemove: (trigger: HTMLButtonElement | null) => void;
+  resolvedVersion?: string;
+}
+
+export function RegistryTenantArtifactCard({
+  normalizedName,
+  onRemove,
+  resolvedVersion,
+}: RegistryTenantArtifactCardProps) {
+  return (
+    <Card className="h-full gap-3" padding="md" variant="inner">
+      <div className="flex items-start gap-3">
+        <span
+          aria-hidden
+          className="bg-bg-neutral-tertiary text-text-neutral-secondary flex size-10 shrink-0 items-center justify-center overflow-hidden rounded-lg"
+        >
+          {/* Tenant artifacts carry no provider metadata; the neutral package
+              mark matches the marketplace card header. */}
+          <Package size={26} />
+        </span>
+        <div className="min-w-0">
+          <p className="text-text-neutral-primary truncate text-sm font-semibold">
+            {normalizedName}
+          </p>
+        </div>
+      </div>
+      <p className="text-text-neutral-secondary text-sm">
+        Installed in this workspace. Catalog metadata is not available for this
+        artifact.
+      </p>
+      <div className="mt-auto space-y-3">
+        <RegistryArtifactMetadata
+          isAdded
+          version={resolvedVersion || "Unknown"}
+        />
+        <div className="flex justify-end">
+          <Button
+            aria-label={`Remove ${normalizedName}`}
+            onClick={(event) => onRemove(event.currentTarget)}
+            size="sm"
+            type="button"
+            variant="outline"
+          >
+            Remove
+          </Button>
+        </div>
+      </div>
+    </Card>
+  );
+}
diff --git a/ui/components/registry/registry-artifact-grid.tsx b/ui/components/registry/registry-artifact-grid.tsx
new file mode 100644
index 0000000000..9fb27310a5
--- /dev/null
+++ b/ui/components/registry/registry-artifact-grid.tsx
@@ -0,0 +1,51 @@
+import { PackageSearch } from "lucide-react";
+import type { ReactNode } from "react";
+
+import { Button } from "@/components/shadcn/button/button";
+import { Card, CardContent } from "@/components/shadcn/card/card";
+
+interface RegistryArtifactGridProps {
+  children: ReactNode;
+  emptyMessage: string;
+  isEmpty: boolean;
+  emptyDescription?: string;
+  emptyActionLabel?: string;
+  onReset?: () => void;
+}
+
+export function RegistryArtifactGrid({
+  children,
+  emptyMessage,
+  isEmpty,
+  onReset,
+  emptyDescription = "Try another search or clear your filters to explore the catalog.",
+  emptyActionLabel = "Clear filters",
+}: RegistryArtifactGridProps) {
+  if (isEmpty)
+    return (
+      <Card variant="base">
+        <CardContent className="flex flex-col items-center gap-4 py-12 text-center">
+          <PackageSearch
+            aria-hidden
+            className="text-text-neutral-secondary size-10"
+          />
+          <h2 className="text-text-neutral-primary text-lg font-semibold">
+            {emptyMessage}
+          </h2>
+          <p className="text-text-neutral-secondary max-w-prose text-sm">
+            {emptyDescription}
+          </p>
+          {onReset && (
+            <Button variant="outline" onClick={onReset}>
+              {emptyActionLabel}
+            </Button>
+          )}
+        </CardContent>
+      </Card>
+    );
+  return (
+    <ul className="grid grid-cols-1 gap-4 md:grid-cols-2 xl:grid-cols-3">
+      {children}
+    </ul>
+  );
+}
diff --git a/ui/components/registry/registry-artifact-task-handler.test.tsx b/ui/components/registry/registry-artifact-task-handler.test.tsx
new file mode 100644
index 0000000000..138e656565
--- /dev/null
+++ b/ui/components/registry/registry-artifact-task-handler.test.tsx
@@ -0,0 +1,187 @@
+import { render, screen } from "@testing-library/react";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+import { Toast, ToastProvider, ToastViewport } from "@/components/shadcn/toast";
+import type { WatchedTask } from "@/store/task-watcher/store";
+
+const { confirmRegistryArtifactAddition, toast } = vi.hoisted(() => ({
+  confirmRegistryArtifactAddition: vi.fn(),
+  toast: vi.fn(),
+}));
+vi.mock("@/actions/registry/registry", () => ({
+  addRegistryArtifact: vi.fn(),
+  confirmRegistryArtifactAddition,
+}));
+vi.mock("@/components/shadcn/toast", async (importOriginal) => ({
+  ...(await importOriginal<typeof import("@/components/shadcn/toast")>()),
+  toast,
+}));
+vi.mock("@/store/task-watcher/store", () => ({
+  trackAndPollTask: vi.fn(),
+  TASK_WATCHER_STATUS: { READY: "ready" },
+}));
+
+import { registryArtifactTaskHandler } from "./registry-artifact-task-handler";
+
+const task: WatchedTask = {
+  taskId: "installation-task",
+  kind: "registry-artifact-add",
+  status: "ready",
+  startedAt: Date.now(),
+  meta: { normalizedName: "acme-provider" },
+  result: { installed: true, error: null },
+};
+
+describe("resumed Registry installations", () => {
+  beforeEach(() => vi.clearAllMocks());
+
+  it("resumes an update with its expected version and announces one update", async () => {
+    // Given
+    confirmRegistryArtifactAddition.mockResolvedValue({
+      status: "confirmed",
+      tenantArtifacts: [],
+    });
+    // When
+    await registryArtifactTaskHandler.onReady({
+      ...task,
+      meta: { ...task.meta, operation: "update", expectedVersion: "2.0.0" },
+    });
+    // Then
+    expect(confirmRegistryArtifactAddition).toHaveBeenCalledWith(
+      "acme-provider",
+      "2.0.0",
+    );
+    expect(toast).toHaveBeenCalledOnce();
+    expect(toast).toHaveBeenCalledWith(
+      expect.objectContaining({ title: "Artifact updated" }),
+    );
+  });
+
+  it.each(["refresh_failed", "error"])(
+    "announces an update failure for %s after reload",
+    async (status) => {
+      // Given
+      confirmRegistryArtifactAddition.mockResolvedValue({ status });
+      // When
+      await registryArtifactTaskHandler.onReady({
+        ...task,
+        meta: {
+          ...task.meta,
+          operation: "update",
+          expectedVersion: "2.0.0",
+        },
+      });
+      // Then
+      expect(toast).toHaveBeenCalledOnce();
+      expect(toast).toHaveBeenCalledWith(
+        expect.objectContaining({
+          title: "Artifact could not be updated",
+          variant: "destructive",
+          ...(status === "refresh_failed"
+            ? {
+                description:
+                  "Update could not be confirmed. Refresh Registry before retrying.",
+              }
+            : {}),
+        }),
+      );
+    },
+  );
+
+  it("never confirms an update with missing persisted target metadata", async () => {
+    // Given / When
+    await registryArtifactTaskHandler.onReady({
+      ...task,
+      meta: { ...task.meta, operation: "update" },
+    });
+    // Then
+    expect(confirmRegistryArtifactAddition).not.toHaveBeenCalled();
+    expect(toast).toHaveBeenCalledWith(
+      expect.objectContaining({ title: "Artifact could not be updated" }),
+    );
+  });
+
+  it("waits for membership confirmation before one success notification and selector refresh", async () => {
+    let confirm!: (value: unknown) => void;
+    confirmRegistryArtifactAddition.mockReturnValue(
+      new Promise((resolve) => {
+        confirm = resolve;
+      }),
+    );
+    const listener = vi.fn();
+    window.addEventListener("registry-artifacts-changed", listener);
+    const completion = registryArtifactTaskHandler.onReady(task);
+    expect(confirmRegistryArtifactAddition).toHaveBeenCalledWith(
+      "acme-provider",
+    );
+    expect(toast).not.toHaveBeenCalled();
+    expect(listener).not.toHaveBeenCalled();
+    const tenantArtifacts = {
+      artifacts: [{ normalizedName: "acme-provider" }],
+    };
+    confirm({ status: "confirmed", tenantArtifacts });
+    await completion;
+    expect(toast).toHaveBeenCalledOnce();
+    expect(toast).toHaveBeenCalledWith(
+      expect.objectContaining({ title: "Artifact added" }),
+    );
+    expect(toast.mock.calls[0][0]).not.toHaveProperty("description");
+    render(
+      <ToastProvider>
+        <Toast open>{toast.mock.calls[0][0].action}</Toast>
+        <ToastViewport />
+      </ToastProvider>,
+    );
+    expect(
+      screen.getByRole("link", { name: "Go to Providers" }),
+    ).toHaveAttribute("href", "/providers");
+    expect(listener).toHaveBeenCalledOnce();
+    expect(listener.mock.calls[0][0].detail).toEqual(tenantArtifacts);
+    window.removeEventListener("registry-artifacts-changed", listener);
+  });
+
+  it.each([
+    { installed: false, error: "Installation rejected" },
+    { installed: true, error: "Partial failure" },
+    undefined,
+  ])(
+    "never announces success for unsuccessful task results",
+    async (result) => {
+      await registryArtifactTaskHandler.onReady({ ...task, result });
+      expect(confirmRegistryArtifactAddition).not.toHaveBeenCalled();
+      expect(toast).toHaveBeenCalledOnce();
+      expect(toast).toHaveBeenCalledWith(
+        expect.objectContaining({ variant: "destructive" }),
+      );
+    },
+  );
+
+  it("keeps backend diagnostics out of notifications after reload", async () => {
+    // Given
+    const result = {
+      installed: false,
+      error: "Private diagnostic: /srv/registry/customer",
+    };
+
+    // When
+    await registryArtifactTaskHandler.onReady({ ...task, result });
+
+    // Then
+    expect(toast).toHaveBeenCalledWith(
+      expect.objectContaining({
+        variant: "destructive",
+        description: "The artifact could not be installed.",
+      }),
+    );
+    expect(confirmRegistryArtifactAddition).not.toHaveBeenCalled();
+  });
+
+  it("reports a failed confirmation read without announcing availability", async () => {
+    confirmRegistryArtifactAddition.mockRejectedValue(new Error("Unavailable"));
+    await registryArtifactTaskHandler.onReady(task);
+    expect(toast).toHaveBeenCalledOnce();
+    expect(toast).toHaveBeenCalledWith(
+      expect.objectContaining({ variant: "destructive" }),
+    );
+  });
+});
diff --git a/ui/components/registry/registry-artifact-task-handler.ts b/ui/components/registry/registry-artifact-task-handler.ts
new file mode 100644
index 0000000000..f5f57c1f44
--- /dev/null
+++ b/ui/components/registry/registry-artifact-task-handler.ts
@@ -0,0 +1,37 @@
+"use client";
+
+import { confirmRegistryArtifactTask } from "@/lib/registry/artifact-execution";
+import { notifyRegistryArtifactOutcome } from "@/lib/registry/artifact-notifications";
+import type { TaskKindHandler } from "@/store/task-watcher/store";
+import { REGISTRY_INSTALL_OPERATION } from "@/types/registry";
+
+export const registryArtifactTaskHandler: TaskKindHandler = {
+  onReady: async (task) => {
+    const normalizedName = task.meta.normalizedName;
+    const operation =
+      task.meta.operation === REGISTRY_INSTALL_OPERATION.UPDATE
+        ? REGISTRY_INSTALL_OPERATION.UPDATE
+        : REGISTRY_INSTALL_OPERATION.ADD;
+    const expectedVersion =
+      operation === REGISTRY_INSTALL_OPERATION.UPDATE
+        ? task.meta.expectedVersion?.trim()
+        : undefined;
+    const result =
+      normalizedName &&
+      (operation !== REGISTRY_INSTALL_OPERATION.UPDATE || expectedVersion)
+        ? await confirmRegistryArtifactTask(
+            normalizedName,
+            task.result,
+            expectedVersion,
+          )
+        : { status: "error" as const };
+    notifyRegistryArtifactOutcome(result, operation);
+  },
+  onError: (task) =>
+    notifyRegistryArtifactOutcome(
+      { status: "error" },
+      task.meta.operation === REGISTRY_INSTALL_OPERATION.UPDATE
+        ? REGISTRY_INSTALL_OPERATION.UPDATE
+        : REGISTRY_INSTALL_OPERATION.ADD,
+    ),
+};
diff --git a/ui/components/registry/registry-credential-banner.tsx b/ui/components/registry/registry-credential-banner.tsx
new file mode 100644
index 0000000000..720ae84fcd
--- /dev/null
+++ b/ui/components/registry/registry-credential-banner.tsx
@@ -0,0 +1,64 @@
+import { KeyRound } from "lucide-react";
+import { type Ref } from "react";
+
+import { Button } from "@/components/shadcn/button/button";
+import { Card } from "@/components/shadcn/card/card";
+
+interface RegistryCredentialBannerProps {
+  connectButtonRef?: Ref<HTMLButtonElement>;
+  onConnect: () => void;
+  tenantArtifactCount: number;
+  validationPending: boolean;
+}
+
+export function RegistryCredentialBanner({
+  connectButtonRef,
+  onConnect,
+  tenantArtifactCount,
+  validationPending,
+}: RegistryCredentialBannerProps) {
+  const title = validationPending
+    ? "Registry validation in progress"
+    : "Connect your Registry API key";
+  const copy = validationPending
+    ? "Your Registry key is being validated. Catalog exploration will be available after validation succeeds."
+    : "A Registry API key is required to install artifacts into this workspace.";
+
+  return (
+    <Card aria-live="polite" variant="base">
+      <div className="flex flex-col gap-4 sm:flex-row sm:items-start">
+        <span className="bg-bg-neutral-tertiary text-text-neutral-secondary flex size-10 shrink-0 items-center justify-center rounded-lg">
+          <KeyRound aria-hidden className="size-5" />
+        </span>
+        <div className="space-y-2">
+          <h2 className="text-base font-semibold">{title}</h2>
+          <p className="text-text-neutral-secondary text-sm">{copy}</p>
+          {tenantArtifactCount > 0 && (
+            <p className="text-text-neutral-secondary text-sm">
+              Your {tenantArtifactCount} preserved tenant artifact
+              {tenantArtifactCount === 1 ? "" : "s"} will remain available in My
+              artifacts.
+            </p>
+          )}
+          <div className="flex flex-wrap gap-2 pt-2">
+            {/* Stays enabled while validation is pending: submitting a
+                replacement key supersedes a validation that never settles. */}
+            <Button onClick={onConnect} ref={connectButtonRef} type="button">
+              Connect API key
+            </Button>
+            <Button asChild variant="outline">
+              <a
+                aria-label="Explore Prowler Registry (opens in a new tab)"
+                href="https://registry.prowler.com"
+                rel="noopener noreferrer"
+                target="_blank"
+              >
+                Explore Prowler Registry
+              </a>
+            </Button>
+          </div>
+        </div>
+      </div>
+    </Card>
+  );
+}
diff --git a/ui/components/registry/registry-credential-task-handler.test.ts b/ui/components/registry/registry-credential-task-handler.test.ts
new file mode 100644
index 0000000000..efafbebe8a
--- /dev/null
+++ b/ui/components/registry/registry-credential-task-handler.test.ts
@@ -0,0 +1,112 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+import type { WatchedTask } from "@/store/task-watcher/store";
+
+import { registryCredentialTaskHandler } from "./registry-credential-task-handler";
+
+const {
+  refreshRegistryCollectionsMock,
+  refreshRegistryCredentialMock,
+  toastMock,
+} = vi.hoisted(() => ({
+  refreshRegistryCollectionsMock: vi.fn(),
+  refreshRegistryCredentialMock: vi.fn(),
+  toastMock: vi.fn(),
+}));
+
+vi.mock("@/actions/registry/registry", () => ({
+  refreshRegistryCollections: refreshRegistryCollectionsMock,
+  refreshRegistryCredential: refreshRegistryCredentialMock,
+}));
+
+vi.mock("@/store/task-watcher/store", () => ({
+  TASK_WATCHER_STATUS: { PENDING: "pending", READY: "ready", ERROR: "error" },
+}));
+
+vi.mock("@/components/shadcn/toast", () => ({ toast: toastMock }));
+
+const buildTask = (overrides: Partial<WatchedTask> = {}): WatchedTask => ({
+  taskId: "task-1",
+  kind: "registry-credential-validation",
+  status: "ready",
+  startedAt: Date.now(),
+  meta: {},
+  result: { stored: true, error: null },
+  ...overrides,
+});
+
+describe("registryCredentialTaskHandler", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    refreshRegistryCollectionsMock.mockResolvedValue({
+      status: "complete",
+      catalog: { status: "complete", artifacts: [] },
+      tenantArtifacts: [],
+    });
+    refreshRegistryCredentialMock.mockResolvedValue({ status: "error" });
+  });
+
+  it("announces the connected Registry after a resumed task completes validly", async () => {
+    // Given
+    refreshRegistryCredentialMock.mockResolvedValue({
+      status: "status",
+      credential: {
+        configured: true,
+        isValid: true,
+        scopes: ["catalog:read"],
+        validationPending: false,
+      },
+    });
+
+    // When
+    registryCredentialTaskHandler.onReady(buildTask());
+
+    // Then
+    await vi.waitFor(() =>
+      expect(toastMock).toHaveBeenCalledWith({ title: "Registry connected" }),
+    );
+  });
+
+  it("reports a safe failure when a resumed task settles in error", async () => {
+    // When
+    await registryCredentialTaskHandler.onError(
+      buildTask({ status: "error", error: 'Task ended in state "failed".' }),
+    );
+
+    // Then
+    expect(toastMock).toHaveBeenCalledWith({
+      variant: "destructive",
+      title: "Registry key validation failed",
+      description: "Registry key validation could not be completed. Try again.",
+    });
+    expect(refreshRegistryCredentialMock).toHaveBeenCalledTimes(1);
+  });
+  it("does not announce a rejected replacement as connected", async () => {
+    const refresh = vi.fn();
+    window.addEventListener("registry-credential-changed", refresh);
+    refreshRegistryCredentialMock.mockResolvedValue({
+      status: "status",
+      credential: {
+        configured: true,
+        isValid: true,
+        scopes: [],
+        validationPending: false,
+      },
+    });
+    await registryCredentialTaskHandler.onReady(
+      buildTask({
+        meta: { priorConfigured: "true" },
+        result: { stored: false, error: "Invalid key" },
+      }),
+    );
+    expect(toastMock).toHaveBeenCalledWith(
+      expect.objectContaining({
+        variant: "destructive",
+        description:
+          "Registry key validation failed. Existing access is unchanged.",
+      }),
+    );
+    expect(refresh).toHaveBeenCalledOnce();
+    window.removeEventListener("registry-credential-changed", refresh);
+  });
+});
diff --git a/ui/components/registry/registry-credential-task-handler.ts b/ui/components/registry/registry-credential-task-handler.ts
new file mode 100644
index 0000000000..26151d4d19
--- /dev/null
+++ b/ui/components/registry/registry-credential-task-handler.ts
@@ -0,0 +1,16 @@
+"use client";
+
+import { completeRegistryCredentialValidation } from "@/lib/registry/credential-result";
+import type { TaskKindHandler, WatchedTask } from "@/store/task-watcher/store";
+
+const complete = async (task: WatchedTask) => {
+  await completeRegistryCredentialValidation(
+    task,
+    task.meta.priorConfigured === "true",
+  );
+};
+
+export const registryCredentialTaskHandler: TaskKindHandler = {
+  onReady: complete,
+  onError: complete,
+};
diff --git a/ui/components/registry/registry-explorer.integration.test.tsx b/ui/components/registry/registry-explorer.integration.test.tsx
new file mode 100644
index 0000000000..0d2668a4d8
--- /dev/null
+++ b/ui/components/registry/registry-explorer.integration.test.tsx
@@ -0,0 +1,2170 @@
+import { http, HttpResponse } from "msw";
+import { useRouter } from "next/navigation";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { userEvent } from "vitest/browser";
+
+import { worker } from "@/__tests__/msw/worker";
+import { render } from "@/__tests__/render-browser";
+import type {
+  RegistryArtifactRemovalResult,
+  RegistryBootstrapState,
+} from "@/types/registry";
+
+import { RegistryArtifactCard } from "./registry-artifact-card";
+import { RegistryExplorer } from "./registry-explorer";
+
+vi.mock("next/navigation", async () => {
+  const { useSyncExternalStore } = await import("react");
+  const router = { replace: vi.fn(), push: vi.fn(), refresh: vi.fn() };
+  const subscribe = (callback: () => void) => {
+    window.addEventListener("popstate", callback);
+    return () => window.removeEventListener("popstate", callback);
+  };
+  return {
+    useRouter: () => router,
+    usePathname: () => "/registry",
+    useSearchParams: () =>
+      new URLSearchParams(
+        useSyncExternalStore(
+          subscribe,
+          () => window.location.search,
+          () => "",
+        ),
+      ),
+  };
+});
+const originalReplaceState = window.history.replaceState.bind(window.history);
+
+const {
+  disconnectRegistryCredentialMock,
+  executeRegistryArtifactAdditionMock,
+  refreshRegistryCollectionsMock,
+  refreshRegistryCredentialMock,
+  removeRegistryArtifactMock,
+  submitRegistryCredentialMock,
+  trackAndPollTaskMock,
+} = vi.hoisted(() => ({
+  disconnectRegistryCredentialMock: vi.fn(),
+  executeRegistryArtifactAdditionMock: vi.fn(),
+  refreshRegistryCollectionsMock: vi.fn(),
+  refreshRegistryCredentialMock: vi.fn(),
+  removeRegistryArtifactMock: vi.fn(),
+  submitRegistryCredentialMock: vi.fn(),
+  trackAndPollTaskMock: vi.fn(),
+}));
+
+vi.mock("@/actions/registry/registry", () => ({
+  disconnectRegistryCredential: disconnectRegistryCredentialMock,
+  getRegistryBootstrap: vi.fn(),
+  refreshRegistryCollections: refreshRegistryCollectionsMock,
+  refreshRegistryCredential: refreshRegistryCredentialMock,
+  removeRegistryArtifact: removeRegistryArtifactMock,
+  submitRegistryCredential: submitRegistryCredentialMock,
+}));
+
+// The credential flow watches its validation task through the house task
+// watcher; integration tests drive settlement through this mock the same way
+// `lib/jira-dispatch-execution.test.ts` does.
+vi.mock("@/lib/registry/artifact-execution", () => ({
+  executeRegistryArtifactAddition: executeRegistryArtifactAdditionMock,
+}));
+
+vi.mock("@/store/task-watcher/store", () => ({
+  TASK_WATCHER_STATUS: { PENDING: "pending", READY: "ready", ERROR: "error" },
+  trackAndPollTask: trackAndPollTaskMock,
+  useTaskWatcherStore: (selector: (state: { tasks: {} }) => unknown) =>
+    selector({ tasks: {} }),
+}));
+
+// The integration setup mocks `next/navigation` with a module-level router,
+// so this "hook" is a plain function returning the shared router spies and
+// is safe to call outside a component.
+// eslint-disable-next-line react-hooks/rules-of-hooks
+const registryRouter = useRouter();
+
+const onboardingState: RegistryBootstrapState = {
+  status: "onboarding",
+  credential: {
+    configured: false,
+    isValid: false,
+    scopes: [],
+    validationPending: false,
+  },
+  tenantArtifacts: [],
+};
+
+const validationPendingState: RegistryBootstrapState = {
+  status: "validation_pending",
+  credential: {
+    configured: true,
+    isValid: false,
+    scopes: [],
+    validationPending: true,
+  },
+  tenantArtifacts: [],
+};
+
+const submittedResult = (priorConfigured = false) => ({
+  status: "submitted" as const,
+  taskId: "registry-task-1",
+  priorConfigured,
+});
+
+const readyState: RegistryBootstrapState = {
+  status: "ready",
+  credential: {
+    configured: true,
+    isValid: true,
+    scopes: ["catalog:read"],
+    validationPending: false,
+  },
+  catalog: {
+    status: "complete",
+    artifacts: [
+      {
+        normalizedName: "aws-guard",
+        name: "AWS guard",
+        description: "Already added artifact",
+        latestVersion: "1.2.3",
+        providers: ["aws"],
+        isVerified: true,
+        isOfficial: true,
+        isBuiltin: false,
+        isMeta: false,
+        hasProvider: true,
+        hasChecks: true,
+        hasCompliance: false,
+        versionCount: 2,
+        totalDownloads: 12,
+        owners: [
+          {
+            name: "Prowler",
+            type: "organization",
+            logoUrl: "https://cdn.example/prowler-logo.png",
+          },
+        ],
+      },
+      {
+        normalizedName: "later-guard",
+        name: "Later guard",
+        description: "Artifact collected from a later page",
+        latestVersion: "2.0.0",
+        providers: ["azure"],
+        isVerified: false,
+        isOfficial: false,
+        isBuiltin: false,
+        isMeta: false,
+        hasProvider: true,
+        hasChecks: true,
+        hasCompliance: true,
+        versionCount: 1,
+        totalDownloads: 3,
+        owners: [],
+      },
+      {
+        normalizedName: "cloud-guard",
+        name: "Cloud guard",
+        description: "Multi-provider artifact",
+        latestVersion: "3.0.0",
+        providers: ["aws", "gcp"],
+        isVerified: true,
+        isOfficial: true,
+        isBuiltin: false,
+        isMeta: true,
+        hasProvider: true,
+        hasChecks: true,
+        hasCompliance: true,
+        versionCount: 4,
+        totalDownloads: 42,
+        owners: [{ name: "Registry team", type: "organization" }],
+      },
+    ],
+  },
+  tenantArtifacts: [
+    { normalizedName: "aws-guard", versionSpec: "latest" },
+    {
+      normalizedName: "saved-artifact",
+      versionSpec: "latest",
+      resolvedVersion: "1.0.0",
+    },
+  ],
+};
+
+async function expectRedirectedToProfile() {
+  await expect
+    .poll(() => vi.mocked(registryRouter.replace).mock.calls)
+    .toEqual([["/profile"]]);
+}
+
+const incompleteState: RegistryBootstrapState = {
+  status: "incomplete",
+  catalog: { status: "incomplete", reason: "page_failed", collectedCount: 100 },
+};
+
+function cardFor(name: string) {
+  const card = Array.from(document.querySelectorAll("li")).find((item) =>
+    item.textContent?.includes(name),
+  );
+  if (!card) throw new Error(`Expected a rendered card for ${name}`);
+  return card;
+}
+
+describe("RegistryExplorer", () => {
+  it("refreshes catalog and installed versions when switching tabs", async () => {
+    // Given
+    refreshRegistryCollectionsMock.mockResolvedValue({
+      status: "complete",
+      catalog: readyState.catalog,
+      tenantArtifacts: [
+        {
+          normalizedName: "aws-guard",
+          versionSpec: "latest",
+          resolvedVersion: "1.0.0",
+        },
+      ],
+    });
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    // When
+    await screen.getByRole("tab", { name: /My artifacts/ }).click();
+    // Then
+    await expect
+      .element(
+        screen.getByRole("button", { name: "Update AWS guard to 1.2.3" }),
+      )
+      .toBeVisible();
+    expect(refreshRegistryCollectionsMock).toHaveBeenCalled();
+  });
+
+  it("coalesces manual, tab and focus refreshes while preserving filters", async () => {
+    // Given
+    let resolveRefresh!: (value: unknown) => void;
+    refreshRegistryCollectionsMock.mockReturnValue(
+      new Promise((resolve) => {
+        resolveRefresh = resolve;
+      }),
+    );
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    await screen.getByLabelText("Search artifacts").fill("AWS");
+    // When: the tab change also requests a refresh, sharing any focus read.
+    await screen.getByRole("tab", { name: /My artifacts/ }).click();
+    window.dispatchEvent(new Event("focus"));
+    await screen.getByRole("tab", { name: /All/ }).click();
+    // Then
+    await expect
+      .element(screen.getByRole("button", { name: "Refresh Registry" }))
+      .toBeDisabled();
+    expect(document.body.textContent).toContain("Refreshing…");
+    expect(refreshRegistryCollectionsMock).toHaveBeenCalledOnce();
+    expect(cardFor("AWS guard")).toBeTruthy();
+    resolveRefresh({
+      status: "complete",
+      catalog: {
+        ...readyState.catalog,
+        artifacts: readyState.catalog.artifacts.map((artifact) => ({
+          ...artifact,
+          latestVersion: "2.0.0",
+        })),
+      },
+      tenantArtifacts: [
+        {
+          normalizedName: "aws-guard",
+          versionSpec: "latest",
+          resolvedVersion: "1.2.3",
+        },
+      ],
+    });
+    await expect
+      .element(
+        screen.getByRole("button", { name: "Update AWS guard to 2.0.0" }),
+      )
+      .toBeVisible();
+    await expect
+      .element(screen.getByLabelText("Search artifacts"))
+      .toHaveValue("AWS");
+    await expect
+      .element(screen.getByRole("button", { name: "Refresh Registry" }))
+      .toBeEnabled();
+    expect(document.body.textContent).not.toContain("Later guard");
+  });
+
+  it("loads a newly published artifact from the Refresh button without navigating", async () => {
+    // Given
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    refreshRegistryCollectionsMock.mockResolvedValue({
+      status: "complete",
+      tenantArtifacts: readyState.tenantArtifacts,
+      catalog: {
+        ...readyState.catalog,
+        artifacts: [
+          ...readyState.catalog.artifacts,
+          {
+            ...readyState.catalog.artifacts[0],
+            normalizedName: "new-artifact",
+            name: "New artifact",
+          },
+        ],
+      },
+    });
+    // When
+    await screen.getByRole("button", { name: "Refresh Registry" }).click();
+    // Then
+    await expect
+      .element(screen.getByText("New artifact", { exact: true }))
+      .toBeVisible();
+    expect(window.location.pathname).toBe("/registry");
+    expect(registryRouter.refresh).not.toHaveBeenCalled();
+  });
+
+  it.each(["error", "incomplete"])(
+    "preserves the last complete snapshot after a %s refresh and allows retry",
+    async (status) => {
+      // Given
+      const screen = await render(
+        <RegistryExplorer initialState={readyState} />,
+      );
+      refreshRegistryCollectionsMock.mockResolvedValue({
+        status,
+        reason: "page_failed",
+        collectedCount: 1,
+      });
+      // When
+      await screen.getByRole("button", { name: "Refresh Registry" }).click();
+      // Then
+      await expect
+        .element(screen.getByRole("alert"))
+        .toHaveTextContent("Showing the last available data.");
+      expect(cardFor("AWS guard")).toBeTruthy();
+      expect(cardFor("Later guard")).toBeTruthy();
+      await expect
+        .element(screen.getByRole("button", { name: "Refresh Registry" }))
+        .toBeEnabled();
+      // When / Then
+      refreshRegistryCollectionsMock.mockResolvedValue({
+        status: "complete",
+        catalog: readyState.catalog,
+        tenantArtifacts: [],
+      });
+      await screen.getByRole("button", { name: "Refresh Registry" }).click();
+      await expect
+        .element(screen.getByRole("button", { name: "Add AWS guard" }))
+        .toBeVisible();
+      await expect.element(screen.getByRole("alert")).not.toBeInTheDocument();
+    },
+  );
+
+  it("discards a stale refresh and waits for an update before reading again", async () => {
+    // Given
+    const installed = {
+      normalizedName: "aws-guard",
+      versionSpec: "latest",
+      resolvedVersion: "1.0.0",
+    };
+    let stale!: (value: unknown) => void;
+    let update!: (value: unknown) => void;
+    let fresh!: (value: unknown) => void;
+    refreshRegistryCollectionsMock
+      .mockReturnValueOnce(
+        new Promise((resolve) => {
+          stale = resolve;
+        }),
+      )
+      .mockReturnValueOnce(
+        new Promise((resolve) => {
+          fresh = resolve;
+        }),
+      );
+    executeRegistryArtifactAdditionMock.mockReturnValue(
+      new Promise((resolve) => {
+        update = resolve;
+      }),
+    );
+    const screen = await render(
+      <RegistryExplorer
+        initialState={{ ...readyState, tenantArtifacts: [installed] }}
+      />,
+    );
+    await screen.getByRole("tab", { name: /My artifacts/ }).click();
+    // When
+    await screen
+      .getByRole("button", { name: "Update AWS guard to 1.2.3" })
+      .click();
+    window.dispatchEvent(new Event("focus"));
+    stale({
+      status: "complete",
+      catalog: { status: "complete", artifacts: [] },
+      tenantArtifacts: [],
+    });
+    // Then: old reads cannot erase an in-flight update.
+    await expect
+      .element(
+        screen.getByRole("button", { name: "Update AWS guard to 1.2.3" }),
+      )
+      .toBeDisabled();
+    expect(refreshRegistryCollectionsMock).toHaveBeenCalledOnce();
+    const tenantArtifacts = [{ ...installed, resolvedVersion: "1.2.3" }];
+    update({ status: "confirmed", tenantArtifacts });
+    await expect
+      .element(screen.getByText("Added", { exact: true }))
+      .toBeVisible();
+    await expect
+      .poll(() => refreshRegistryCollectionsMock.mock.calls.length)
+      .toBe(2);
+    fresh({ status: "complete", catalog: readyState.catalog, tenantArtifacts });
+    await expect
+      .element(screen.getByRole("button", { name: "Refresh Registry" }))
+      .toBeEnabled();
+    expect(cardFor("AWS guard").textContent).not.toContain("1.0.0");
+    await expect
+      .element(screen.getByText("Added", { exact: true }))
+      .toBeVisible();
+  });
+
+  it("keeps the list usable when the refresh request rejects", async () => {
+    // Given
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    refreshRegistryCollectionsMock.mockRejectedValue(
+      new Error("Network failure"),
+    );
+    // When
+    await screen.getByRole("button", { name: "Refresh Registry" }).click();
+    // Then
+    await expect
+      .element(screen.getByRole("alert"))
+      .toHaveTextContent("Registry could not be refreshed.");
+    await expect
+      .element(screen.getByRole("button", { name: "Refresh Registry" }))
+      .toBeEnabled();
+    expect(cardFor("AWS guard")).toBeTruthy();
+  });
+
+  it.each(["access_denied", "reconnect", "onboarding"])(
+    "honors %s from a collection refresh",
+    async (status) => {
+      // Given
+      const screen = await render(
+        <RegistryExplorer initialState={readyState} />,
+      );
+      refreshRegistryCollectionsMock.mockResolvedValue({ status });
+      // When
+      await screen.getByRole("button", { name: "Refresh Registry" }).click();
+      // Then
+      if (status === "access_denied") {
+        await expectRedirectedToProfile();
+      } else {
+        await expect
+          .element(
+            screen.getByRole("button", {
+              name: status === "reconnect" ? "Replace key" : "Connect API key",
+            }),
+          )
+          .toBeVisible();
+      }
+    },
+  );
+
+  it("retries a deferred refresh after credential replacement fails", async () => {
+    // Given
+    let stale!: (value: unknown) => void;
+    refreshRegistryCollectionsMock
+      .mockReturnValueOnce(
+        new Promise((resolve) => {
+          stale = resolve;
+        }),
+      )
+      .mockResolvedValue({
+        status: "complete",
+        catalog: readyState.catalog,
+        tenantArtifacts: [],
+      });
+    submitRegistryCredentialMock.mockResolvedValue({
+      status: "replacement_failed",
+    });
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    await screen.getByRole("tab", { name: /My artifacts/ }).click();
+    // When
+    await screen.getByRole("button", { name: "Manage access" }).click();
+    await screen
+      .getByLabelText("Registry key")
+      .fill("synthetic-replacement-key");
+    await screen.getByRole("button", { name: "Replace key" }).click();
+    await expect.element(screen.getByRole("alert")).toBeVisible();
+    stale({
+      status: "complete",
+      catalog: readyState.catalog,
+      tenantArtifacts: readyState.tenantArtifacts,
+    });
+    // Then
+    await expect
+      .poll(() => refreshRegistryCollectionsMock.mock.calls.length)
+      .toBe(2);
+    await screen.getByRole("button", { name: "Close", exact: true }).click();
+    await expect
+      .element(screen.getByText("No artifacts in this workspace yet."))
+      .toBeVisible();
+  });
+
+  it("does not restore a removed artifact from an earlier refresh", async () => {
+    // Given
+    let stale!: (value: unknown) => void;
+    refreshRegistryCollectionsMock
+      .mockReturnValueOnce(
+        new Promise((resolve) => {
+          stale = resolve;
+        }),
+      )
+      .mockResolvedValue({
+        status: "complete",
+        catalog: readyState.catalog,
+        tenantArtifacts: [],
+      });
+    removeRegistryArtifactMock.mockResolvedValue({
+      status: "confirmed",
+      tenantArtifacts: [],
+    });
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    await screen.getByRole("tab", { name: /My artifacts/ }).click();
+    // When
+    await screen.getByRole("button", { name: "Remove AWS guard" }).click();
+    await screen.getByRole("button", { name: "Confirm Remove" }).click();
+    await expect
+      .element(screen.getByText("No artifacts in this workspace yet."))
+      .toBeVisible();
+    stale({
+      status: "complete",
+      catalog: readyState.catalog,
+      tenantArtifacts: readyState.tenantArtifacts,
+    });
+    // Then
+    await expect
+      .element(screen.getByRole("button", { name: "Refresh Registry" }))
+      .toBeEnabled();
+    await expect
+      .element(screen.getByText("No artifacts in this workspace yet."))
+      .toBeVisible();
+    expect(refreshRegistryCollectionsMock).toHaveBeenCalledTimes(2);
+  });
+
+  it("refreshes on returning focus and ignores focus while hidden", async () => {
+    // Given
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    const visibility = vi
+      .spyOn(document, "visibilityState", "get")
+      .mockReturnValue("hidden");
+    refreshRegistryCollectionsMock.mockClear();
+    // When / Then
+    window.dispatchEvent(new Event("focus"));
+    expect(refreshRegistryCollectionsMock).not.toHaveBeenCalled();
+    refreshRegistryCollectionsMock.mockResolvedValue({
+      status: "complete",
+      catalog: readyState.catalog,
+      tenantArtifacts: [
+        {
+          normalizedName: "aws-guard",
+          versionSpec: "latest",
+          resolvedVersion: "1.0.0",
+        },
+      ],
+    });
+    visibility.mockReturnValue("visible");
+    window.dispatchEvent(new Event("focus"));
+    await expect
+      .element(
+        screen.getByRole("button", { name: "Update AWS guard to 1.2.3" }),
+      )
+      .toBeVisible();
+  });
+
+  it.each([
+    [
+      { status: "refused", message: "This version has been withdrawn." },
+      "This version has been withdrawn.",
+    ],
+    [
+      { status: "unavailable" },
+      "The Registry operation could not be completed. Try again.",
+    ],
+    [
+      { status: "refresh_failed" },
+      "Update could not be confirmed. Refresh Registry before retrying.",
+    ],
+  ])(
+    "keeps Update available after %j and allows retry",
+    async (result, message) => {
+      // Given
+      const installed = {
+        normalizedName: "aws-guard",
+        versionSpec: "latest",
+        resolvedVersion: "1.0.0",
+      };
+      executeRegistryArtifactAdditionMock.mockResolvedValue(result);
+      const screen = await render(
+        <RegistryExplorer
+          initialState={{ ...readyState, tenantArtifacts: [installed] }}
+        />,
+      );
+      // When
+      await screen
+        .getByRole("button", { name: "Update AWS guard to 1.2.3" })
+        .click();
+      // Then
+      await expect
+        .element(screen.getByText(message as string, { exact: true }))
+        .toBeVisible();
+      await expect
+        .element(
+          screen.getByRole("button", { name: "Update AWS guard to 1.2.3" }),
+        )
+        .toBeEnabled();
+      expect(cardFor("AWS guard").textContent).toContain("1.0.0");
+      expect(document.body.textContent).not.toContain("Artifact updated");
+      // When / Then: retry can complete normally.
+      executeRegistryArtifactAdditionMock.mockResolvedValue({
+        status: "confirmed",
+        tenantArtifacts: [{ ...installed, resolvedVersion: "1.2.3" }],
+      });
+      await screen
+        .getByRole("button", { name: "Update AWS guard to 1.2.3" })
+        .click();
+      await expect
+        .element(screen.getByText("Added", { exact: true }))
+        .toBeVisible();
+      await expect
+        .element(screen.getByText(message as string, { exact: true }))
+        .not.toBeInTheDocument();
+    },
+  );
+
+  it("updates an installed artifact to the displayed version and returns to Added", async () => {
+    // Given
+    const installed = {
+      normalizedName: "aws-guard",
+      versionSpec: "latest",
+      resolvedVersion: "1.0.0",
+    };
+    let complete!: (value: unknown) => void;
+    executeRegistryArtifactAdditionMock.mockReturnValue(
+      new Promise((resolve) => {
+        complete = resolve;
+      }),
+    );
+    const screen = await render(
+      <RegistryExplorer
+        initialState={{ ...readyState, tenantArtifacts: [installed] }}
+      />,
+    );
+    // When
+    await screen
+      .getByRole("button", { name: "Update AWS guard to 1.2.3" })
+      .click();
+    // Then
+    expect(executeRegistryArtifactAdditionMock).toHaveBeenCalledWith({
+      normalizedName: "aws-guard",
+      versionSpec: "1.2.3",
+      operation: "update",
+    });
+    await expect
+      .element(
+        screen.getByRole("button", { name: "Update AWS guard to 1.2.3" }),
+      )
+      .toBeDisabled();
+    await expect
+      .element(screen.getByRole("button", { name: "Remove AWS guard" }))
+      .toBeDisabled();
+    expect(document.body.textContent).toContain("Updating…");
+    complete({
+      status: "confirmed",
+      tenantArtifacts: [{ ...installed, resolvedVersion: "1.2.3" }],
+    });
+    await expect
+      .element(screen.getByText("Added", { exact: true }))
+      .toBeVisible();
+    await expect
+      .element(screen.getByRole("button", { name: "Remove AWS guard" }))
+      .toBeEnabled();
+    expect(cardFor("AWS guard").textContent).not.toContain("1.0.0");
+  });
+
+  it("offers key replacement when the configured Registry rejects access", async () => {
+    const screen = await render(
+      <RegistryExplorer initialState={{ status: "reconnect" }} />,
+    );
+    await screen.getByRole("button", { name: "Replace key" }).click();
+    await expect.element(screen.getByRole("dialog")).toBeVisible();
+    await expect.element(screen.getByLabelText("Registry key")).toBeEnabled();
+  });
+
+  beforeEach(() => {
+    worker.use(
+      http.get(
+        "https://cdn.example/prowler-logo.png",
+        () =>
+          new HttpResponse(
+            '<svg xmlns="http://www.w3.org/2000/svg" width="20" height="20"><rect width="20" height="20" fill="black"/></svg>',
+            { headers: { "Content-Type": "image/svg+xml" } },
+          ),
+      ),
+      http.get(
+        "https://cdn.example/expired.png",
+        () => new HttpResponse(null, { status: 403 }),
+      ),
+    );
+    originalReplaceState(null, "", "/registry");
+    vi.spyOn(window.history, "replaceState").mockImplementation(
+      (data, unused, url) => {
+        originalReplaceState(data, unused, url);
+        window.dispatchEvent(new PopStateEvent("popstate"));
+      },
+    );
+    disconnectRegistryCredentialMock.mockReset();
+    executeRegistryArtifactAdditionMock.mockReset();
+    refreshRegistryCollectionsMock.mockReset();
+    refreshRegistryCollectionsMock.mockResolvedValue({
+      status: "complete",
+      catalog: readyState.catalog,
+      tenantArtifacts: readyState.tenantArtifacts,
+    });
+    refreshRegistryCredentialMock.mockReset();
+    removeRegistryArtifactMock.mockReset();
+    submitRegistryCredentialMock.mockReset();
+    trackAndPollTaskMock.mockReset();
+    trackAndPollTaskMock.mockResolvedValue({
+      status: "ready",
+      result: { stored: true, error: null },
+    });
+    vi.mocked(registryRouter.replace).mockClear();
+  });
+
+  describe("when Registry access is not connected", () => {
+    it("shows the credential banner instead of a catalog", async () => {
+      // Given / When
+      await render(<RegistryExplorer initialState={onboardingState} />);
+
+      // Then
+      expect(document.body.textContent).toContain(
+        "Connect your Registry API key",
+      );
+      expect(document.body.textContent).toContain(
+        "A Registry API key is required to install artifacts into this workspace.",
+      );
+      expect(document.body.textContent).not.toContain(
+        "preserved tenant artifact",
+      );
+      expect(document.body.textContent).toContain("Explore Prowler Registry");
+      expect(document.body.textContent).not.toContain("Search artifacts");
+    });
+
+    it("lets a replacement key supersede a pending validation from the banner", async () => {
+      // Given: a validation that never settled must not dead-end the user
+      submitRegistryCredentialMock.mockResolvedValue(submittedResult(true));
+      refreshRegistryCredentialMock.mockResolvedValue({
+        status: "status",
+        credential: readyState.credential,
+      });
+      refreshRegistryCollectionsMock.mockResolvedValue({
+        status: "complete",
+        catalog: readyState.catalog,
+        tenantArtifacts: readyState.tenantArtifacts,
+      });
+      const screen = await render(
+        <RegistryExplorer initialState={validationPendingState} />,
+      );
+
+      // Pending validation leaves the form available for a replacement.
+      expect(document.body.textContent).toContain(
+        "Registry validation in progress",
+      );
+      await expect
+        .element(screen.getByRole("button", { name: "Connect API key" }))
+        .toBeEnabled();
+      expect(document.body.textContent).not.toContain("Search artifacts");
+
+      // When
+      await screen.getByRole("button", { name: "Connect API key" }).click();
+      await screen.getByLabelText("Registry key").fill("replacement-key");
+      await screen
+        .getByRole("button", { name: "Connect", exact: true })
+        .click();
+
+      // Then: the replacement POST supersedes the pending validation
+      await expect
+        .poll(() => submitRegistryCredentialMock.mock.calls)
+        .toEqual([["replacement-key"]]);
+      await expect
+        .element(screen.getByRole("button", { name: "Manage access" }))
+        .toBeVisible();
+    });
+  });
+
+  it("moves focus into the access dialog and returns it to Connect API key", async () => {
+    // Given
+    const screen = await render(
+      <RegistryExplorer initialState={onboardingState} />,
+    );
+    const connectButton = screen.getByRole("button", {
+      name: "Connect API key",
+    });
+
+    // When
+    await connectButton.click();
+
+    // Then
+    await expect.element(screen.getByLabelText("Registry key")).toHaveFocus();
+
+    // When
+    await userEvent.keyboard("{Escape}");
+
+    // Then
+    await expect.element(connectButton).toHaveFocus();
+  });
+
+  it("presents the connect dialog with help link and cancel action", async () => {
+    // Given
+    const screen = await render(
+      <RegistryExplorer
+        initialState={onboardingState}
+        registryKeyUrl="https://registry.private.test/keys"
+      />,
+    );
+
+    // When
+    await screen.getByRole("button", { name: "Connect API key" }).click();
+
+    // Then
+    await expect
+      .element(
+        screen.getByRole("heading", { name: "Connect Registry API key" }),
+      )
+      .toBeVisible();
+    await expect
+      .element(screen.getByRole("link", { name: "Where do I find my key?" }))
+      .toHaveAttribute("href", "https://registry.private.test/keys");
+
+    // When
+    await screen.getByRole("button", { name: "Cancel", exact: true }).click();
+
+    // Then
+    await expect
+      .element(screen.getByLabelText("Registry key"))
+      .not.toBeInTheDocument();
+  });
+
+  it("preserves the catalog while a watched replacement keeps the form visible and disabled", async () => {
+    // Given
+    const key = "replacement-key";
+    submitRegistryCredentialMock.mockResolvedValue(submittedResult(true));
+    trackAndPollTaskMock.mockReturnValue(new Promise(() => {}));
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+
+    // Access stays available by its accessible name, without a text label.
+    expect(document.body.textContent).not.toContain("API key connected");
+    expect(
+      document.querySelector('button[aria-label="Manage access"]')?.textContent,
+    ).toBe("");
+
+    // When
+    await screen.getByRole("button", { name: "Manage access" }).click();
+    await screen.getByLabelText("Registry key").fill(key);
+    await screen.getByRole("button", { name: "Replace key" }).click();
+
+    // Then: the form stays visible; submit shows a disabled Connecting… state
+    await expect
+      .element(screen.getByRole("button", { name: "Connecting…" }))
+      .toBeDisabled();
+    await expect.element(screen.getByLabelText("Registry key")).toBeDisabled();
+    await expect.element(screen.getByLabelText("Registry key")).toHaveValue("");
+    await expect
+      .element(screen.getByRole("button", { name: "Disconnect" }))
+      .toBeDisabled();
+    expect(document.body.textContent).toContain("Cloud guard");
+    expect(document.body.innerHTML).not.toContain(key);
+  });
+
+  it("shows the invalid-key error inline below the input and keeps the form retry-capable", async () => {
+    // Given
+    submitRegistryCredentialMock.mockResolvedValue(submittedResult());
+    refreshRegistryCredentialMock.mockResolvedValue({
+      status: "status",
+      credential: onboardingState.credential,
+    });
+    const screen = await render(
+      <RegistryExplorer initialState={onboardingState} />,
+    );
+
+    // When
+    await screen.getByRole("button", { name: "Connect API key" }).click();
+    await screen.getByLabelText("Registry key").fill("bad-key");
+    await screen.getByRole("button", { name: "Connect", exact: true }).click();
+
+    // Then: the error renders inside the dialog, below the input
+    const dialog = document.querySelector('[role="dialog"]');
+    expect(dialog).not.toBeNull();
+    await expect
+      .poll(() => dialog!.querySelector('[role="alert"]')?.textContent)
+      .toContain("This Registry key is invalid. Check it and try again.");
+    const input = screen.getByLabelText("Registry key").element();
+    const alert = dialog!.querySelector('[role="alert"]');
+    expect(
+      input.compareDocumentPosition(alert!) & Node.DOCUMENT_POSITION_FOLLOWING,
+    ).toBeTruthy();
+
+    // Then: the form is re-enabled for a retry with the key cleared
+    await expect
+      .element(screen.getByRole("button", { name: "Connect", exact: true }))
+      .toBeEnabled();
+    await expect.element(screen.getByLabelText("Registry key")).toBeEnabled();
+    await expect.element(screen.getByLabelText("Registry key")).toHaveValue("");
+    await expect.element(screen.getByLabelText("Registry key")).toHaveFocus();
+
+    // When: a retry submits a fresh key through the same form
+    await screen.getByLabelText("Registry key").fill("second-key");
+    await screen.getByRole("button", { name: "Connect", exact: true }).click();
+
+    // Then
+    await expect
+      .poll(() => submitRegistryCredentialMock.mock.calls)
+      .toEqual([["bad-key"], ["second-key"]]);
+  });
+
+  it("keeps a retry-capable form after a watcher failure", async () => {
+    // Given
+    submitRegistryCredentialMock.mockResolvedValue(submittedResult());
+    trackAndPollTaskMock.mockRejectedValue(new Error("watcher crashed"));
+    const screen = await render(
+      <RegistryExplorer initialState={onboardingState} />,
+    );
+
+    // When
+    await screen.getByRole("button", { name: "Connect API key" }).click();
+    await screen.getByLabelText("Registry key").fill("registry-test-key");
+    await screen.getByRole("button", { name: "Connect", exact: true }).click();
+
+    // Then
+    const dialog = document.querySelector('[role="dialog"]');
+    expect(dialog).not.toBeNull();
+    await expect
+      .poll(() => dialog!.querySelector('[role="alert"]')?.textContent)
+      .toContain("Registry key validation could not be completed. Try again.");
+    await expect
+      .element(screen.getByRole("button", { name: "Connect", exact: true }))
+      .toBeEnabled();
+    await expect.element(screen.getByLabelText("Registry key")).toBeEnabled();
+  });
+
+  it("recovers the form with an inline notice when the watch exhausts without settling", async () => {
+    // Given: the watcher gives up while the task is still unsettled (e.g. no
+    // worker consumes the queue) — the tracking result resolves as pending
+    submitRegistryCredentialMock.mockResolvedValue(submittedResult());
+    trackAndPollTaskMock.mockResolvedValue({ status: "pending" });
+    refreshRegistryCredentialMock.mockResolvedValue({
+      status: "status",
+      credential: validationPendingState.credential,
+    });
+    const screen = await render(
+      <RegistryExplorer initialState={onboardingState} />,
+    );
+
+    // When
+    await screen.getByRole("button", { name: "Connect API key" }).click();
+    await screen.getByLabelText("Registry key").fill("stuck-key");
+    await screen.getByRole("button", { name: "Connect", exact: true }).click();
+
+    // Then: the dialog exits Connecting… into a retry-capable form
+    const dialog = document.querySelector('[role="dialog"]');
+    expect(dialog).not.toBeNull();
+    await expect
+      .poll(() => dialog!.querySelector('[role="alert"]')?.textContent)
+      .toContain(
+        "Registry key validation is taking longer than expected. Try again.",
+      );
+    await expect
+      .element(screen.getByRole("button", { name: "Connect", exact: true }))
+      .toBeEnabled();
+    await expect.element(screen.getByLabelText("Registry key")).toBeEnabled();
+    expect(document.body.textContent).toContain(
+      "Registry validation in progress",
+    );
+  });
+
+  it("recovers the form when the submit RPC rejects instead of stranding Connecting", async () => {
+    // Given: the server-action RPC itself rejects (network drop, dev reload)
+    submitRegistryCredentialMock.mockRejectedValue(new Error("rpc dropped"));
+    const screen = await render(
+      <RegistryExplorer initialState={onboardingState} />,
+    );
+
+    // When
+    await screen.getByRole("button", { name: "Connect API key" }).click();
+    await screen.getByLabelText("Registry key").fill("registry-test-key");
+    await screen.getByRole("button", { name: "Connect", exact: true }).click();
+
+    // Then: no stranded Connecting… — the form recovers with an inline error
+    const dialog = document.querySelector('[role="dialog"]');
+    expect(dialog).not.toBeNull();
+    await expect
+      .poll(() => dialog!.querySelector('[role="alert"]')?.textContent)
+      .toContain("Registry key validation could not be completed. Try again.");
+    await expect
+      .element(screen.getByRole("button", { name: "Connect", exact: true }))
+      .toBeEnabled();
+    await expect.element(screen.getByLabelText("Registry key")).toBeEnabled();
+  });
+
+  it("recovers the form when the post-connect collections RPC rejects", async () => {
+    // Given: validation succeeds but the collections server action rejects
+    submitRegistryCredentialMock.mockResolvedValue(submittedResult());
+    refreshRegistryCredentialMock.mockResolvedValue({
+      status: "status",
+      credential: readyState.credential,
+    });
+    refreshRegistryCollectionsMock.mockRejectedValue(new Error("rpc dropped"));
+    const screen = await render(
+      <RegistryExplorer initialState={onboardingState} />,
+    );
+
+    // When
+    await screen.getByRole("button", { name: "Connect API key" }).click();
+    await screen.getByLabelText("Registry key").fill("registry-test-key");
+    await screen.getByRole("button", { name: "Connect", exact: true }).click();
+
+    // Then: no stranded Connecting… — the form recovers with an inline error
+    const dialog = document.querySelector('[role="dialog"]');
+    expect(dialog).not.toBeNull();
+    await expect
+      .poll(() => dialog!.querySelector('[role="alert"]')?.textContent)
+      .toContain("Registry collections could not be loaded. Try again.");
+    await expect
+      .element(screen.getByRole("button", { name: "Connect", exact: true }))
+      .toBeEnabled();
+  });
+
+  it("keeps the dialog open with an inline notice when validation outlasts the watch", async () => {
+    // Given
+    submitRegistryCredentialMock.mockResolvedValue(submittedResult());
+    trackAndPollTaskMock.mockResolvedValue({
+      status: "error",
+      error: "The task expired before it could be tracked to completion.",
+    });
+    refreshRegistryCredentialMock.mockResolvedValue({
+      status: "status",
+      credential: validationPendingState.credential,
+    });
+    const screen = await render(
+      <RegistryExplorer initialState={onboardingState} />,
+    );
+
+    // When
+    await screen.getByRole("button", { name: "Connect API key" }).click();
+    await screen.getByLabelText("Registry key").fill("slow-key");
+    await screen.getByRole("button", { name: "Connect", exact: true }).click();
+
+    // Then: an inline notice keeps the retry path available in the dialog
+    const dialog = document.querySelector('[role="dialog"]');
+    expect(dialog).not.toBeNull();
+    await expect
+      .poll(() => dialog!.querySelector('[role="alert"]')?.textContent)
+      .toContain(
+        "Registry key validation is taking longer than expected. Try again.",
+      );
+    await expect
+      .element(screen.getByRole("button", { name: "Connect", exact: true }))
+      .toBeEnabled();
+    // And the underlying banner reflects the pending validation
+    expect(document.body.textContent).toContain(
+      "Registry validation in progress",
+    );
+  });
+
+  it("trims and resets a write-only key before loading authoritative collections", async () => {
+    // Given
+    const key = "registry-test-key";
+    let resolveSubmission: ((result: unknown) => void) | undefined;
+    submitRegistryCredentialMock.mockImplementation(
+      () =>
+        new Promise((resolve) => {
+          resolveSubmission = resolve;
+        }),
+    );
+    refreshRegistryCredentialMock.mockResolvedValue({
+      status: "status",
+      credential: readyState.credential,
+    });
+    refreshRegistryCollectionsMock.mockResolvedValue({
+      status: "complete",
+      catalog: readyState.catalog,
+      tenantArtifacts: readyState.tenantArtifacts,
+    });
+    const screen = await render(
+      <RegistryExplorer initialState={onboardingState} />,
+    );
+
+    // When
+    await screen.getByRole("button", { name: "Connect API key" }).click();
+    await screen.getByLabelText("Registry key").fill(`  ${key}  `);
+    await screen.getByRole("button", { name: "Connect", exact: true }).click();
+
+    // Then: repeat submission is disabled and the key has left the form.
+    await expect
+      .element(screen.getByRole("button", { name: "Connecting…", exact: true }))
+      .toBeDisabled();
+    await expect
+      .poll(() => submitRegistryCredentialMock.mock.calls)
+      .toEqual([[key]]);
+    await expect.element(screen.getByLabelText("Registry key")).toHaveValue("");
+    expect(document.body.innerHTML).not.toContain(key);
+    expect(window.location.href).not.toContain(key);
+    expect(localStorage.getItem("registry-key")).toBeNull();
+    expect(sessionStorage.getItem("registry-key")).toBeNull();
+
+    // When: the accepted task settles through the watcher
+    resolveSubmission?.(submittedResult());
+
+    // Then: the explorer lands in ready state and announces the connection
+    await expect
+      .element(screen.getByRole("tab", { name: /All/ }))
+      .toBeVisible();
+    await expect
+      .element(screen.getByLabelText("Registry key"))
+      .not.toBeInTheDocument();
+    expect(refreshRegistryCredentialMock).toHaveBeenCalledTimes(1);
+    expect(refreshRegistryCollectionsMock).toHaveBeenCalledTimes(1);
+  });
+
+  describe("when a Registry action loses authorization", () => {
+    it("routes to Profile once when Add is denied", async () => {
+      // Given
+      executeRegistryArtifactAdditionMock.mockResolvedValue({
+        status: "access_denied",
+      });
+      const screen = await render(
+        <RegistryExplorer initialState={readyState} />,
+      );
+
+      // When
+      await screen.getByRole("button", { name: "Add Cloud guard" }).click();
+
+      // Then
+      await expectRedirectedToProfile();
+    });
+
+    it("routes to Profile once when Remove is denied", async () => {
+      // Given
+      removeRegistryArtifactMock.mockResolvedValue({ status: "access_denied" });
+      const screen = await render(
+        <RegistryExplorer initialState={readyState} />,
+      );
+      await screen.getByRole("tab", { name: /My artifacts/ }).click();
+      await screen.getByRole("button", { name: "Remove AWS guard" }).click();
+
+      // When
+      await screen.getByRole("button", { name: "Confirm Remove" }).click();
+
+      // Then
+      await expectRedirectedToProfile();
+    });
+
+    it("routes to Profile once when credential submission is denied", async () => {
+      // Given
+      submitRegistryCredentialMock.mockResolvedValue({
+        status: "access_denied",
+      });
+      const screen = await render(
+        <RegistryExplorer initialState={onboardingState} />,
+      );
+      await screen.getByRole("button", { name: "Connect API key" }).click();
+      await screen.getByLabelText("Registry key").fill("registry-test-key");
+
+      // When
+      await screen
+        .getByRole("button", { name: "Connect", exact: true })
+        .click();
+
+      // Then
+      await expectRedirectedToProfile();
+    });
+
+    it("routes to Profile once when disconnect is denied", async () => {
+      // Given
+      disconnectRegistryCredentialMock.mockResolvedValue({
+        status: "access_denied",
+      });
+      const screen = await render(
+        <RegistryExplorer initialState={readyState} />,
+      );
+      await screen.getByRole("button", { name: "Manage access" }).click();
+
+      // When
+      await screen.getByRole("button", { name: "Disconnect" }).click();
+
+      // Then
+      await expectRedirectedToProfile();
+    });
+
+    it("routes to Profile once when post-connect collection refresh is denied", async () => {
+      // Given
+      submitRegistryCredentialMock.mockResolvedValue(submittedResult());
+      refreshRegistryCredentialMock.mockResolvedValue({
+        status: "status",
+        credential: readyState.credential,
+      });
+      refreshRegistryCollectionsMock.mockResolvedValue({
+        status: "access_denied",
+      });
+      const screen = await render(
+        <RegistryExplorer initialState={onboardingState} />,
+      );
+      await screen.getByRole("button", { name: "Connect API key" }).click();
+      await screen.getByLabelText("Registry key").fill("registry-test-key");
+
+      // When
+      await screen
+        .getByRole("button", { name: "Connect", exact: true })
+        .click();
+
+      // Then
+      await expectRedirectedToProfile();
+    });
+  });
+
+  it("keeps the rendered catalog after a failed credential replacement", async () => {
+    // Given
+    const key = "replacement-key";
+    submitRegistryCredentialMock.mockResolvedValue({
+      status: "replacement_failed",
+      credential: readyState.credential,
+    });
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+
+    // When
+    await screen.getByRole("button", { name: "Manage access" }).click();
+    await screen.getByLabelText("Registry key").fill(key);
+    await screen.getByRole("button", { name: "Replace key" }).click();
+
+    // Then
+    await expect
+      .element(screen.getByRole("dialog"))
+      .toHaveTextContent("Existing access is unchanged");
+    expect(document.body.textContent).toContain("Cloud guard");
+    await expect.element(screen.getByLabelText("Registry key")).toHaveValue("");
+    expect(document.body.innerHTML).not.toContain(key);
+  });
+
+  it("recovers and retries when disconnecting Registry rejects", async () => {
+    // Given
+    disconnectRegistryCredentialMock.mockRejectedValueOnce(
+      new Error("Disconnect transport failed"),
+    );
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    await screen.getByRole("button", { name: "Manage access" }).click();
+
+    // When
+    await screen.getByRole("button", { name: "Disconnect" }).click();
+
+    // Then
+    await expect
+      .element(screen.getByRole("alert"))
+      .toHaveTextContent(
+        "Registry access could not be disconnected. Try again.",
+      );
+    await expect
+      .element(screen.getByRole("button", { name: "Cancel", exact: true }))
+      .toBeEnabled();
+    expect(document.body.textContent).toContain("Cloud guard");
+    expect(document.body.textContent).not.toContain(
+      "Disconnect transport failed",
+    );
+
+    // When: retry succeeds without reopening the dialog.
+    disconnectRegistryCredentialMock.mockResolvedValueOnce({
+      status: "disconnected",
+      credential: onboardingState.credential,
+      tenantArtifacts: readyState.tenantArtifacts,
+    });
+    await screen.getByRole("button", { name: "Disconnect" }).click();
+
+    // Then
+    await expect
+      .element(screen.getByRole("button", { name: "Connect API key" }))
+      .toBeVisible();
+  });
+
+  it("returns to the credential banner after disconnecting Registry access", async () => {
+    // Given
+    disconnectRegistryCredentialMock.mockResolvedValue({
+      status: "disconnected",
+      credential: onboardingState.credential,
+      tenantArtifacts: readyState.tenantArtifacts,
+    });
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+
+    // When
+    await screen.getByRole("button", { name: "Manage access" }).click();
+    await screen.getByRole("button", { name: "Disconnect" }).click();
+
+    // Then
+    await expect
+      .poll(() => document.body.textContent)
+      .toContain("Connect your Registry API key");
+    expect(document.body.textContent).toContain(
+      "Your 2 preserved tenant artifacts will remain available in My artifacts.",
+    );
+  });
+
+  describe("when the complete catalog is ready", () => {
+    it.each([
+      { isBuiltin: true, hasProvider: true },
+      { isBuiltin: false, hasProvider: false },
+    ])("keeps ineligible artifacts visible without Add: %j", async (flags) => {
+      const state: RegistryBootstrapState = {
+        ...readyState,
+        catalog: {
+          ...readyState.catalog,
+          artifacts: [
+            {
+              ...readyState.catalog.artifacts[2],
+              normalizedName: "ineligible",
+              name: "Ineligible artifact",
+              ...flags,
+            },
+          ],
+        },
+        tenantArtifacts: [],
+      };
+      const screen = await render(<RegistryExplorer initialState={state} />);
+      expect(document.body.textContent).toContain("Ineligible artifact");
+      await expect
+        .element(
+          screen.getByRole("button", { name: "Add Ineligible artifact" }),
+        )
+        .not.toBeInTheDocument();
+      expect(executeRegistryArtifactAdditionMock).not.toHaveBeenCalled();
+    });
+
+    it("keeps an authoritative built-in membership removable", async () => {
+      // Given
+      removeRegistryArtifactMock.mockResolvedValue({
+        status: "confirmed",
+        tenantArtifacts: [
+          { normalizedName: "saved-artifact", versionSpec: "1.0.0" },
+        ],
+      });
+      const builtInMemberState: RegistryBootstrapState = {
+        ...readyState,
+        catalog: {
+          ...readyState.catalog,
+          artifacts: readyState.catalog.artifacts.map((artifact) =>
+            artifact.normalizedName === "aws-guard"
+              ? { ...artifact, isBuiltin: true }
+              : artifact,
+          ),
+        },
+      };
+      const screen = await render(
+        <RegistryExplorer initialState={builtInMemberState} />,
+      );
+
+      // Then
+      await expect
+        .element(screen.getByRole("status", { name: "Built in" }))
+        .toBeVisible();
+      expect(document.body.textContent).toContain("Added");
+      const removeButton = screen.getByRole("button", {
+        name: "Remove AWS guard",
+      });
+      await expect.element(removeButton).toBeVisible();
+
+      // When
+      await removeButton.click();
+      await screen.getByRole("button", { name: "Confirm Remove" }).click();
+
+      // Then
+      await expect
+        .poll(() => removeRegistryArtifactMock.mock.calls)
+        .toEqual([["aws-guard"]]);
+    });
+
+    it("switches to authoritative My artifacts and back", async () => {
+      // Given
+      const screen = await render(
+        <RegistryExplorer initialState={readyState} />,
+      );
+
+      await expect
+        .element(screen.getByRole("img", { name: "Prowler", exact: true }))
+        .toBeVisible();
+      await expect
+        .element(screen.getByText("Prowler", { exact: true }))
+        .not.toBeInTheDocument();
+
+      // When
+      await screen.getByRole("tab", { name: /My artifacts/ }).click();
+
+      // Then
+      await expect
+        .poll(() => document.body.textContent)
+        .toContain("saved-artifact");
+      expect(document.body.textContent).toContain("1.0.0");
+      expect(document.body.textContent).not.toContain("Later guard");
+
+      // When
+      await screen.getByRole("tab", { name: /All/ }).click();
+
+      await userEvent.keyboard("{Escape}");
+      // Then
+      await expect
+        .poll(() => document.body.textContent)
+        .toContain("Later guard");
+    });
+
+    it("derives search from all normalized catalog artifacts", async () => {
+      // Given
+      const screen = await render(
+        <RegistryExplorer initialState={readyState} />,
+      );
+
+      // When
+      await screen.getByLabelText("Search artifacts").fill("later");
+
+      // Then
+      await expect
+        .poll(() => document.body.textContent)
+        .toContain("Later guard");
+      await expect
+        .poll(() => document.body.textContent)
+        .not.toContain("Cloud guard");
+      expect(document.body.textContent).toContain("1 artifact");
+    });
+
+    it("filters complete results by provider", async () => {
+      // Given
+      const screen = await render(
+        <RegistryExplorer initialState={readyState} />,
+      );
+
+      // When
+      await screen.getByLabelText("Filter by provider").click();
+
+      // When
+      await screen.getByRole("option", { name: "Azure", exact: true }).click();
+
+      // Then
+      await expect
+        .poll(() => document.body.textContent)
+        .toContain("Later guard");
+      await expect
+        .poll(() => document.body.textContent)
+        .not.toContain("Cloud guard");
+    });
+
+    it("combines capability choices and restores the URL with Clear All", async () => {
+      const screen = await render(
+        <RegistryExplorer initialState={readyState} />,
+      );
+      await screen.getByLabelText("Filter by capability").click();
+      await screen
+        .getByRole("option", { name: "Compliance", exact: true })
+        .click();
+      await userEvent.keyboard("{Escape}");
+      await expect
+        .poll(() => document.body.textContent)
+        .not.toContain("AWS guard");
+      expect(
+        new URLSearchParams(window.location.search).get("filter[capability]"),
+      ).toBe("compliance");
+      await screen.getByRole("button", { name: /Clear/ }).click();
+      await expect.poll(() => document.body.textContent).toContain("AWS guard");
+      expect(window.location.search).toBe("");
+    });
+
+    it("sorts by downloads with name order as the default", async () => {
+      // Given
+      const screen = await render(
+        <RegistryExplorer initialState={readyState} />,
+      );
+      const order = () => {
+        const text = document.body.textContent ?? "";
+        return [
+          text.indexOf("Cloud guard"),
+          text.indexOf("AWS guard"),
+          text.indexOf("Later guard"),
+        ];
+      };
+
+      // Then: default name order puts AWS guard first
+      expect(order()[1]).toBeLessThan(order()[0]);
+
+      // When
+      await screen.getByLabelText("Sort artifacts").click();
+      await screen.getByRole("option", { name: "Most downloaded" }).click();
+
+      // Then: downloads order puts Cloud guard first
+      await expect.poll(() => order()[0] < order()[1]).toBe(true);
+      await expect.poll(() => order()[1] < order()[2]).toBe(true);
+    });
+
+    it("shows a complete empty catalog without degrading controls", async () => {
+      // Given / When
+      const screen = await render(
+        <RegistryExplorer
+          initialState={{
+            ...readyState,
+            catalog: { status: "complete", artifacts: [] },
+            tenantArtifacts: [],
+          }}
+        />,
+      );
+
+      // Then
+      expect(document.body.textContent).toContain(
+        "No Registry artifacts are available.",
+      );
+      await expect
+        .element(screen.getByLabelText("Search artifacts"))
+        .toBeVisible();
+    });
+
+    it("counts logos and pills together toward the four-item cap and overflow", async () => {
+      // Given: six providers alternating known logos and dynamic pills
+      const blendedArtifact = {
+        ...readyState.catalog.artifacts[2],
+        normalizedName: "blended-guard",
+        name: "Blended guard",
+        description: "Artifact spanning logos and pills",
+        latestVersion: "1.0.0",
+        providers: [
+          "aws",
+          "template",
+          "azure",
+          "custom-scan",
+          "gcp",
+          "local_thing",
+        ],
+      };
+
+      // When
+      const screen = await render(
+        <RegistryExplorer
+          initialState={{
+            ...readyState,
+            catalog: { status: "complete", artifacts: [blendedArtifact] },
+            tenantArtifacts: [],
+          }}
+        />,
+      );
+
+      // Then: the cap keeps the first four items of BOTH kinds, so only the
+      // first two pills are visible and two items collapse into "+2".
+      const blendedCard = cardFor("Blended guard");
+      expect(blendedCard.textContent).toContain("6 providers");
+      expect(blendedCard.innerText).toContain("+2");
+      await expect
+        .element(
+          screen.getByRole("listitem").getByText("Template", { exact: true }),
+        )
+        .toBeVisible();
+      await expect
+        .element(
+          screen
+            .getByRole("listitem")
+            .getByText("Custom Scan", { exact: true }),
+        )
+        .toBeVisible();
+      await expect
+        .element(
+          screen
+            .getByRole("listitem")
+            .getByText("Local Thing", { exact: true }),
+        )
+        .not.toBeInTheDocument();
+      // Even collapsed providers remain named for assistive technology.
+      expect(blendedCard.textContent).toContain(
+        "Providers: AWS, Template, Azure, Custom Scan, Google Cloud, Local Thing",
+      );
+    });
+
+    it("groups artifact metadata, preserves zero counts, and hides missing values", async () => {
+      // Given
+      const artifact = {
+        ...readyState.catalog.artifacts[0],
+        isAdded: false,
+        updateAvailable: false,
+        checkCount: 645,
+        complianceCount: 45,
+      };
+      const screen = await render(
+        <RegistryArtifactCard
+          artifact={artifact}
+          onAdd={() => {}}
+          onRemove={() => {}}
+        />,
+      );
+
+      // Then: counts, version, and downloads share one labelled metadata block.
+      const metadata = screen.getByRole("group", { name: "Artifact metadata" });
+      await expect.element(metadata).toBeVisible();
+      for (const label of ["Compliance", "Checks", "Version", "Downloads"]) {
+        await expect
+          .element(metadata.getByText(label, { exact: true }))
+          .toBeVisible();
+      }
+      await expect
+        .element(metadata.getByText("45", { exact: true }))
+        .toBeVisible();
+      await expect
+        .element(metadata.getByText("645", { exact: true }))
+        .toBeVisible();
+      await expect
+        .element(metadata.getByText(artifact.latestVersion!, { exact: true }))
+        .toBeVisible();
+      await expect
+        .element(metadata.getByText("12", { exact: true }))
+        .toBeVisible();
+      await expect
+        .element(screen.getByText("45 Compliance", { exact: true }))
+        .not.toBeInTheDocument();
+
+      // When / Then: zero is a known count for every metric.
+      await screen.rerender(
+        <RegistryArtifactCard
+          artifact={{
+            ...artifact,
+            checkCount: 0,
+            complianceCount: 0,
+            totalDownloads: 0,
+          }}
+          onAdd={() => {}}
+          onRemove={() => {}}
+        />,
+      );
+      expect(metadata.element().querySelectorAll("dd")).toHaveLength(4);
+      expect(
+        Array.from(
+          metadata.element().querySelectorAll("dd"),
+          (value) => value.textContent,
+        ),
+      ).toEqual(["0", "0", artifact.latestVersion, "0"]);
+
+      // When / Then: built-in artifacts keep their metadata without downloads.
+      await screen.rerender(
+        <RegistryArtifactCard
+          artifact={{ ...artifact, isBuiltin: true, totalDownloads: 0 }}
+          onAdd={() => {}}
+          onRemove={() => {}}
+        />,
+      );
+      await expect
+        .element(metadata.getByText("Downloads", { exact: true }))
+        .not.toBeInTheDocument();
+      expect(
+        Array.from(
+          metadata.element().querySelectorAll("dd"),
+          (value) => value.textContent,
+        ),
+      ).toEqual(["45", "645", artifact.latestVersion]);
+
+      // When / Then: older responses have no counts, rather than zero counts.
+      await screen.rerender(
+        <RegistryArtifactCard
+          artifact={{
+            ...artifact,
+            checkCount: undefined,
+            complianceCount: undefined,
+            latestVersion: undefined,
+          }}
+          onAdd={() => {}}
+          onRemove={() => {}}
+        />,
+      );
+      await expect
+        .element(metadata.getByText("Compliance", { exact: true }))
+        .not.toBeInTheDocument();
+      await expect
+        .element(metadata.getByText("Checks", { exact: true }))
+        .not.toBeInTheDocument();
+      await expect
+        .element(metadata.getByText("Version", { exact: true }))
+        .not.toBeInTheDocument();
+      await expect
+        .element(metadata.getByText("Downloads", { exact: true }))
+        .toBeVisible();
+    });
+
+    it("recovers the owner image when a fresh URL replaces an expired one", async () => {
+      const artifact = {
+        ...readyState.catalog.artifacts[0],
+        isAdded: false,
+        updateAvailable: false,
+        owners: [
+          {
+            name: "Registry team",
+            type: "organization",
+            logoUrl: "https://cdn.example/expired.png",
+          },
+        ],
+      };
+      const screen = await render(
+        <RegistryArtifactCard
+          artifact={artifact}
+          onAdd={() => {}}
+          onRemove={() => {}}
+        />,
+      );
+      await expect
+        .element(screen.getByText("R", { exact: true }))
+        .toBeVisible();
+      await screen.rerender(
+        <RegistryArtifactCard
+          artifact={{
+            ...artifact,
+            owners: [
+              {
+                ...artifact.owners[0],
+                logoUrl: "https://cdn.example/prowler-logo.png",
+              },
+            ],
+          }}
+          onAdd={() => {}}
+          onRemove={() => {}}
+        />,
+      );
+      await expect
+        .poll(() =>
+          document.querySelector(
+            'img[src="https://cdn.example/prowler-logo.png"]',
+          ),
+        )
+        .not.toBeNull();
+      expect(document.body.textContent).toContain("Registry team");
+    });
+  });
+
+  it("keeps ordinary Add errors local without redirecting to Profile", async () => {
+    // Given
+    executeRegistryArtifactAdditionMock.mockResolvedValue({ status: "error" });
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+
+    // When
+    await screen.getByRole("button", { name: "Add Cloud guard" }).click();
+
+    // Then
+    await expect
+      .element(screen.getByRole("alert"))
+      .toHaveTextContent("Registry operation could not be completed");
+    await expect
+      .element(screen.getByRole("button", { name: "Add Cloud guard" }))
+      .toBeEnabled();
+    expect(registryRouter.replace).not.toHaveBeenCalled();
+  });
+
+  it("adds the latest version directly from the card once confirmed", async () => {
+    // Given
+    executeRegistryArtifactAdditionMock.mockResolvedValue({
+      status: "confirmed",
+      tenantArtifacts: [
+        { normalizedName: "aws-guard", versionSpec: "latest" },
+        { normalizedName: "saved-artifact", versionSpec: "1.0.0" },
+        { normalizedName: "cloud-guard", versionSpec: "latest" },
+      ],
+    });
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    expect(document.body.textContent).not.toContain("Artifact added");
+
+    // When
+    await screen.getByRole("button", { name: "Add Cloud guard" }).click();
+
+    // Then
+    await expect
+      .poll(() => executeRegistryArtifactAdditionMock.mock.calls)
+      .toEqual([[{ normalizedName: "cloud-guard" }]]);
+    // The confirmed membership now offers Remove instead of Add on the card.
+    await expect
+      .element(screen.getByRole("button", { name: "Remove Cloud guard" }))
+      .toBeVisible();
+    await expect
+      .element(screen.getByRole("tab", { name: /My artifacts/ }))
+      .toHaveTextContent("3");
+  });
+
+  it("keeps membership unchanged when an accepted Add cannot be confirmed", async () => {
+    // Given
+    executeRegistryArtifactAdditionMock.mockResolvedValue({
+      status: "refresh_failed",
+    });
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+
+    // When
+    await screen.getByRole("button", { name: "Add Cloud guard" }).click();
+
+    // Then
+    await expect
+      .poll(() => document.body.textContent)
+      .toContain("Registry membership could not be confirmed");
+    await expect
+      .element(screen.getByRole("button", { name: "Add Cloud guard" }))
+      .toBeEnabled();
+    await expect
+      .element(screen.getByRole("tab", { name: /My artifacts/ }))
+      .toHaveTextContent("2");
+  });
+
+  it("keeps documented Add refusals local without redirecting to Profile", async () => {
+    // Given
+    executeRegistryArtifactAdditionMock.mockResolvedValue({
+      status: "refused",
+      message: "This version is not verified and cannot be added.",
+    });
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+
+    // When
+    await screen.getByRole("button", { name: "Add Cloud guard" }).click();
+
+    // Then
+    await expect
+      .poll(() => document.body.textContent)
+      .toContain("This version is not verified and cannot be added.");
+    await expect
+      .element(screen.getByRole("button", { name: "Add Cloud guard" }))
+      .toBeEnabled();
+    expect(registryRouter.replace).not.toHaveBeenCalled();
+  });
+
+  it("disables all Add buttons while an Add confirmation is pending", async () => {
+    // Given
+    executeRegistryArtifactAdditionMock.mockReturnValue(new Promise(() => {}));
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    const addCloudGuard = screen.getByRole("button", {
+      name: "Add Cloud guard",
+    });
+
+    // When
+    await addCloudGuard.click();
+
+    // Then
+    await expect.element(addCloudGuard).toBeDisabled();
+    await expect.element(addCloudGuard).toHaveTextContent("Adding…");
+    await expect
+      .element(screen.getByRole("button", { name: "Add Later guard" }))
+      .toBeDisabled();
+    expect(executeRegistryArtifactAdditionMock).toHaveBeenCalledTimes(1);
+  });
+
+  it("requires confirmation before Remove and commits only after confirmation", async () => {
+    // Given
+    removeRegistryArtifactMock.mockResolvedValue({
+      status: "confirmed",
+      tenantArtifacts: [
+        { normalizedName: "saved-artifact", versionSpec: "1.0.0" },
+      ],
+    });
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    await screen.getByRole("tab", { name: /My artifacts/ }).click();
+
+    // When
+    await screen.getByRole("button", { name: "Remove AWS guard" }).click();
+
+    // Then
+    await expect
+      .element(screen.getByRole("button", { name: "Confirm Remove" }))
+      .toBeVisible();
+    expect(removeRegistryArtifactMock).not.toHaveBeenCalled();
+
+    // When
+    await screen.getByRole("button", { name: "Cancel" }).click();
+
+    // Then
+    expect(removeRegistryArtifactMock).not.toHaveBeenCalled();
+
+    // When
+    await screen.getByRole("button", { name: "Remove AWS guard" }).click();
+    await screen.getByRole("button", { name: "Confirm Remove" }).click();
+
+    // Then
+    await expect
+      .poll(() => removeRegistryArtifactMock.mock.calls)
+      .toEqual([["aws-guard"]]);
+    await expect
+      .poll(() => document.body.textContent)
+      .toContain("Artifact removed");
+  });
+
+  it("moves focus into Remove confirmation and returns it to the invoking card button", async () => {
+    // Given: the tenant-only artifact carries its own card Remove action
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    await screen.getByRole("tab", { name: /My artifacts/ }).click();
+    const removeButton = screen.getByRole("button", {
+      name: "Remove saved-artifact",
+    });
+
+    // When
+    await removeButton.click();
+
+    // Then
+    await expect
+      .element(screen.getByRole("button", { name: "Cancel" }))
+      .toHaveFocus();
+
+    // When
+    await userEvent.keyboard("{Escape}");
+
+    // Then
+    await expect.element(removeButton).toHaveFocus();
+  });
+
+  it("disables duplicate Remove submission while confirmation is pending", async () => {
+    // Given
+    removeRegistryArtifactMock.mockReturnValue(new Promise(() => {}));
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    await screen.getByRole("tab", { name: /My artifacts/ }).click();
+    await screen.getByRole("button", { name: "Remove AWS guard" }).click();
+
+    // When
+    await screen.getByRole("button", { name: "Confirm Remove" }).click();
+
+    // Then
+    await expect
+      .element(screen.getByRole("button", { name: "Removing artifact" }))
+      .toBeDisabled();
+    expect(removeRegistryArtifactMock).toHaveBeenCalledTimes(1);
+  });
+
+  it("shows an in-use Remove error only inside the dialog with recovery actions", async () => {
+    // Given
+    let resolveRemoval!: (result: RegistryArtifactRemovalResult) => void;
+    removeRegistryArtifactMock.mockReturnValue(
+      new Promise<RegistryArtifactRemovalResult>((resolve) => {
+        resolveRemoval = resolve;
+      }),
+    );
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    await screen.getByRole("tab", { name: /My artifacts/ }).click();
+    await screen.getByRole("button", { name: "Remove AWS guard" }).click();
+
+    // When
+    await screen.getByRole("button", { name: "Confirm Remove" }).click();
+    await expect
+      .element(screen.getByRole("button", { name: "Removing artifact" }))
+      .toBeDisabled();
+    resolveRemoval({ status: "in_use" });
+
+    // Then
+    const dialog = screen.getByRole("dialog", { name: "Remove artifact" });
+    await expect
+      .element(dialog.getByRole("alert"))
+      .toHaveTextContent("Artifact in use");
+    await expect
+      .element(dialog.getByRole("alert"))
+      .toHaveTextContent(
+        "This artifact cannot be removed because one or more providers use it. Review the associated providers before trying again.",
+      );
+    expect(document.querySelectorAll('[role="alert"]')).toHaveLength(1);
+    await expect
+      .element(dialog.getByRole("button", { name: "Confirm Remove" }))
+      .not.toBeInTheDocument();
+    await expect
+      .element(dialog.getByRole("button", { name: "View providers" }))
+      .toBeVisible();
+    await expect
+      .poll(() => dialog.element().contains(document.activeElement))
+      .toBe(true);
+    expect(cardFor("AWS guard").textContent).toContain("Remove");
+    expect(document.body.textContent).not.toContain("Artifact removed");
+    expect(document.body.textContent).not.toContain(
+      "Existing provider accounts will remain",
+    );
+  });
+
+  it("clears the in-use Remove error on close and restores focus before reopening", async () => {
+    // Given
+    removeRegistryArtifactMock.mockResolvedValue({ status: "in_use" });
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    await screen.getByRole("tab", { name: /My artifacts/ }).click();
+    const removeButton = screen.getByRole("button", {
+      name: "Remove AWS guard",
+    });
+    await removeButton.click();
+    await screen.getByRole("button", { name: "Confirm Remove" }).click();
+    const dialog = screen.getByRole("dialog", { name: "Remove artifact" });
+    await expect.element(dialog.getByRole("alert")).toBeVisible();
+
+    // When: use the footer Close action, not the modal's icon button
+    await dialog
+      .getByRole("button", { name: "Close", exact: true })
+      .first()
+      .click();
+
+    // Then
+    await expect.element(dialog).not.toBeInTheDocument();
+    await expect.element(removeButton).toHaveFocus();
+    expect(document.querySelectorAll('[role="alert"]')).toHaveLength(0);
+
+    // When
+    await removeButton.click();
+
+    // Then
+    await expect.element(dialog.getByRole("alert")).not.toBeInTheDocument();
+    await expect
+      .element(dialog.getByRole("button", { name: "Confirm Remove" }))
+      .toBeEnabled();
+
+    // When
+    await dialog.getByRole("button", { name: "Cancel" }).click();
+    await screen.getByRole("button", { name: "Remove saved-artifact" }).click();
+
+    // Then
+    await expect.element(dialog.getByRole("alert")).not.toBeInTheDocument();
+    await expect
+      .element(dialog.getByRole("button", { name: "Confirm Remove" }))
+      .toBeEnabled();
+  });
+
+  it("opens Providers from an in-use Remove error without another deletion", async () => {
+    // Given
+    removeRegistryArtifactMock.mockResolvedValue({ status: "in_use" });
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    await screen.getByRole("tab", { name: /My artifacts/ }).click();
+    await screen.getByRole("button", { name: "Remove AWS guard" }).click();
+    await screen.getByRole("button", { name: "Confirm Remove" }).click();
+
+    // When
+    await screen.getByRole("button", { name: "View providers" }).click();
+
+    // Then
+    expect(registryRouter.push).toHaveBeenCalledWith("/providers");
+    expect(removeRegistryArtifactMock).toHaveBeenCalledTimes(1);
+  });
+
+  it("recovers inside the Remove dialog when the server action rejects", async () => {
+    // Given
+    removeRegistryArtifactMock.mockRejectedValueOnce(
+      new Error("Failed to fetch"),
+    );
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    await screen.getByRole("tab", { name: /My artifacts/ }).click();
+    await screen.getByRole("button", { name: "Remove AWS guard" }).click();
+
+    // When
+    await screen.getByRole("button", { name: "Confirm Remove" }).click();
+
+    // Then
+    const dialog = screen.getByRole("dialog", { name: "Remove artifact" });
+    await expect
+      .element(dialog.getByRole("alert"))
+      .toHaveTextContent(
+        "The Registry operation could not be completed. Try again.",
+      );
+    await expect
+      .element(dialog.getByRole("button", { name: "Confirm Remove" }))
+      .toBeEnabled();
+    await expect
+      .element(dialog.getByRole("button", { name: "Cancel" }))
+      .toBeEnabled();
+    expect(document.querySelectorAll('[role="alert"]')).toHaveLength(1);
+    expect(document.body.textContent).not.toContain("Artifact removed");
+  });
+
+  it("clears a Remove error while retrying and commits only after confirmation", async () => {
+    // Given
+    let resolveRemoval!: (result: RegistryArtifactRemovalResult) => void;
+    removeRegistryArtifactMock
+      .mockResolvedValueOnce({ status: "error" })
+      .mockReturnValueOnce(
+        new Promise<RegistryArtifactRemovalResult>((resolve) => {
+          resolveRemoval = resolve;
+        }),
+      );
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    await screen.getByRole("tab", { name: /My artifacts/ }).click();
+    await screen.getByRole("button", { name: "Remove AWS guard" }).click();
+    await screen.getByRole("button", { name: "Confirm Remove" }).click();
+    const dialog = screen.getByRole("dialog", { name: "Remove artifact" });
+    await expect.element(dialog.getByRole("alert")).toBeVisible();
+    expect(document.querySelectorAll('[role="alert"]')).toHaveLength(1);
+
+    // When
+    await dialog.getByRole("button", { name: "Confirm Remove" }).click();
+
+    // Then
+    await expect.element(dialog.getByRole("alert")).not.toBeInTheDocument();
+    await expect
+      .element(dialog.getByRole("button", { name: "Removing artifact" }))
+      .toBeDisabled();
+    expect(cardFor("AWS guard").textContent).toContain("Remove");
+    expect(document.body.textContent).not.toContain("Artifact removed");
+    expect(removeRegistryArtifactMock).toHaveBeenCalledTimes(2);
+
+    // When
+    await userEvent.keyboard("{Escape}");
+
+    // Then
+    await expect.element(dialog).toBeVisible();
+
+    // When
+    resolveRemoval({
+      status: "confirmed",
+      tenantArtifacts: [
+        { normalizedName: "saved-artifact", versionSpec: "1.0.0" },
+      ],
+    });
+
+    // Then
+    await expect.element(dialog).not.toBeInTheDocument();
+    await expect
+      .element(screen.getByRole("button", { name: "Remove AWS guard" }))
+      .not.toBeInTheDocument();
+    await expect
+      .poll(() => document.body.textContent)
+      .toContain("Artifact removed");
+    expect(document.querySelectorAll('[role="alert"]')).toHaveLength(0);
+  });
+
+  it("keeps My artifacts visible when a Remove refresh cannot confirm absence", async () => {
+    // Given
+    removeRegistryArtifactMock.mockResolvedValue({ status: "refresh_failed" });
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    await screen.getByRole("tab", { name: /My artifacts/ }).click();
+    await screen.getByRole("button", { name: "Remove AWS guard" }).click();
+
+    // When
+    await screen.getByRole("button", { name: "Confirm Remove" }).click();
+
+    // Then
+    const dialog = screen.getByRole("dialog", { name: "Remove artifact" });
+    await expect
+      .element(dialog.getByRole("alert"))
+      .toHaveTextContent("Registry membership could not be confirmed");
+    expect(document.querySelectorAll('[role="alert"]')).toHaveLength(1);
+    await expect
+      .element(screen.getByRole("button", { name: "Confirm Remove" }))
+      .toBeVisible();
+  });
+
+  describe("when complete catalog data is unavailable", () => {
+    it("keeps incomplete catalog controls and metrics hidden while exposing Retry", async () => {
+      // Given / When
+      await render(<RegistryExplorer initialState={incompleteState} />);
+
+      // Then
+      expect(document.body.textContent).toContain(
+        "Registry catalog is incomplete",
+      );
+      expect(document.body.textContent).toContain("Retry");
+      expect(document.body.textContent).not.toContain("Search artifacts");
+    });
+
+    it("labels documented unavailability as stale and leaves generic errors generic", async () => {
+      // Given / When
+      await render(
+        <RegistryExplorer initialState={{ status: "unavailable" }} />,
+      );
+
+      // Then
+      expect(document.body.textContent).toContain("stale or unavailable");
+
+      // Given / When
+      await render(<RegistryExplorer initialState={{ status: "error" }} />);
+
+      // Then
+      expect(document.body.textContent).toContain("unexpected Registry error");
+      expect(document.body.textContent).not.toContain("Reconnect Registry");
+    });
+  });
+});
diff --git a/ui/components/registry/registry-explorer.model.test.ts b/ui/components/registry/registry-explorer.model.test.ts
new file mode 100644
index 0000000000..1bed8de3cb
--- /dev/null
+++ b/ui/components/registry/registry-explorer.model.test.ts
@@ -0,0 +1,273 @@
+import { describe, expect, it } from "vitest";
+
+import type { RegistryCatalogArtifact } from "@/types/registry";
+
+import { buildRegistryMarketplaceModel } from "./registry-explorer.model";
+
+const artifact = (
+  normalizedName: string,
+  overrides: Partial<RegistryCatalogArtifact> = {},
+): RegistryCatalogArtifact => ({
+  normalizedName,
+  name: normalizedName,
+  providers: [],
+  isVerified: false,
+  isOfficial: false,
+  isBuiltin: false,
+  isMeta: false,
+  hasProvider: false,
+  hasChecks: false,
+  hasCompliance: false,
+  versionCount: 0,
+  totalDownloads: 0,
+  owners: [],
+  ...overrides,
+});
+
+describe("Registry marketplace model", () => {
+  it("offers the catalog version for an installed artifact with a different resolved version", () => {
+    // Given
+    const catalog = {
+      status: "complete" as const,
+      artifacts: [
+        artifact("template", { latestVersion: " 1.1.0 ", hasProvider: true }),
+      ],
+    };
+    // When
+    const model = buildRegistryMarketplaceModel(
+      catalog,
+      [
+        {
+          normalizedName: "template",
+          versionSpec: "latest",
+          resolvedVersion: " 1.0.0 ",
+        },
+      ],
+      {},
+      "name",
+    );
+    // Then
+    expect(model).toMatchObject({
+      artifacts: [
+        {
+          isAdded: true,
+          resolvedVersion: "1.0.0",
+          latestVersion: "1.1.0",
+          updateAvailable: true,
+        },
+      ],
+      myArtifacts: [{ catalogArtifact: { updateAvailable: true } }],
+    });
+  });
+
+  it.each([
+    { resolvedVersion: "1.0.0", latestVersion: "1.0.0", expected: false },
+    { resolvedVersion: "2.0.0", latestVersion: "1.0.0", expected: true },
+    { resolvedVersion: undefined, latestVersion: "1.0.0", expected: false },
+    { resolvedVersion: " ", latestVersion: "1.0.0", expected: false },
+    { resolvedVersion: "1.0.0", latestVersion: undefined, expected: false },
+    {
+      resolvedVersion: "1.0.0",
+      latestVersion: "1.1.0",
+      isBuiltin: true,
+      expected: false,
+    },
+    {
+      resolvedVersion: "1.0.0",
+      latestVersion: "1.1.0",
+      hasProvider: false,
+      expected: false,
+    },
+  ])(
+    "compares resolved $resolvedVersion against catalog $latestVersion ($expected)",
+    (example) => {
+      // Given / When
+      const model = buildRegistryMarketplaceModel(
+        {
+          status: "complete",
+          artifacts: [artifact("template", { hasProvider: true, ...example })],
+        },
+        [
+          {
+            normalizedName: "template",
+            versionSpec: "latest",
+            resolvedVersion: example.resolvedVersion,
+          },
+        ],
+        {},
+        "name",
+      );
+      // Then
+      expect(model).toMatchObject({
+        artifacts: [{ updateAvailable: example.expected }],
+      });
+    },
+  );
+
+  it("keeps the full catalog visible with tenant membership merged in", () => {
+    // Given
+
+    const catalog = {
+      status: "complete" as const,
+      artifacts: [
+        artifact("zeta", { providers: ["azure"], hasProvider: true }),
+        artifact("core", { providers: ["aws"], isOfficial: true }),
+        artifact("global", {
+          name: "Global insight",
+          description: "Security checks",
+          providers: ["aws", "gcp"],
+          hasChecks: true,
+          isOfficial: true,
+        }),
+      ],
+    };
+
+    const mine = [
+      { normalizedName: "core", versionSpec: "latest" },
+      { normalizedName: "manual", versionSpec: "1.2.3" },
+    ];
+
+    // When
+    const model = buildRegistryMarketplaceModel(catalog, mine, {}, "name");
+
+    // Then
+
+    expect(model).toMatchObject({
+      isComplete: true,
+      providers: ["aws", "azure", "gcp"],
+    });
+    if (!model.isComplete) throw new Error("expected complete model");
+
+    expect(
+      model.artifacts.map(({ normalizedName, isAdded }) => ({
+        normalizedName,
+        isAdded,
+      })),
+    ).toEqual([
+      { normalizedName: "core", isAdded: true },
+      { normalizedName: "global", isAdded: false },
+      { normalizedName: "zeta", isAdded: false },
+    ]);
+
+    expect(model.myArtifacts).toEqual([
+      {
+        normalizedName: "core",
+        versionSpec: "latest",
+        catalogArtifact: expect.objectContaining({
+          normalizedName: "core",
+          isAdded: true,
+        }),
+      },
+      {
+        normalizedName: "manual",
+        versionSpec: "1.2.3",
+        catalogArtifact: undefined,
+      },
+    ]);
+  });
+
+  it("applies search, provider, and capability filters together", () => {
+    // Given
+
+    const catalog = {
+      status: "complete" as const,
+      artifacts: [
+        artifact("core", { providers: ["aws"] }),
+        artifact("global", {
+          name: "Global insight",
+          description: "Security checks",
+          providers: ["aws", "gcp"],
+          hasChecks: true,
+        }),
+        artifact("zeta", { providers: ["azure"], hasProvider: true }),
+      ],
+    };
+
+    // When
+
+    const model = buildRegistryMarketplaceModel(
+      catalog,
+      [],
+      { search: "security", providers: ["aws"], capabilities: ["checks"] },
+      "name",
+    );
+
+    // Then
+    if (!model.isComplete) throw new Error("expected complete model");
+    expect(model.artifacts.map(({ normalizedName }) => normalizedName)).toEqual(
+      ["global"],
+    );
+  });
+
+  it("unions providers and capabilities within each filter", () => {
+    // Given
+    const catalog = {
+      status: "complete" as const,
+      artifacts: [
+        artifact("aws-checks", { providers: ["aws"], hasChecks: true }),
+        artifact("gcp-provider", { providers: ["gcp"], hasProvider: true }),
+        artifact("azure-checks", { providers: ["azure"], hasChecks: true }),
+      ],
+    };
+    // When
+    const model = buildRegistryMarketplaceModel(
+      catalog,
+      [],
+      { providers: ["aws", "gcp"], capabilities: ["checks", "provider"] },
+      "name",
+    );
+    // Then
+    expect(model).toMatchObject({
+      artifacts: [
+        expect.objectContaining({ normalizedName: "aws-checks" }),
+        expect.objectContaining({ normalizedName: "gcp-provider" }),
+      ],
+    });
+  });
+
+  it("sorts by downloads descending with name as the tiebreak", () => {
+    // Given
+
+    const catalog = {
+      status: "complete" as const,
+      artifacts: [
+        artifact("alpha", { totalDownloads: 5 }),
+        artifact("delta", { totalDownloads: 9 }),
+        artifact("beta", { totalDownloads: 5 }),
+      ],
+    };
+
+    // When
+    const model = buildRegistryMarketplaceModel(catalog, [], {}, "downloads");
+
+    // Then
+    if (!model.isComplete) throw new Error("expected complete model");
+    expect(model.artifacts.map(({ normalizedName }) => normalizedName)).toEqual(
+      ["delta", "alpha", "beta"],
+    );
+  });
+
+  it("keeps incomplete catalogs out of complete-only controls and selectors", () => {
+    // Given
+
+    const catalog = {
+      status: "incomplete" as const,
+      reason: "page_failed" as const,
+      collectedCount: 3,
+    };
+
+    // When
+    const model = buildRegistryMarketplaceModel(
+      catalog,
+      [],
+      { search: "core" },
+      "name",
+    );
+
+    // Then
+
+    expect(model).toEqual({
+      isComplete: false,
+    });
+  });
+});
diff --git a/ui/components/registry/registry-explorer.model.ts b/ui/components/registry/registry-explorer.model.ts
new file mode 100644
index 0000000000..212b114f1e
--- /dev/null
+++ b/ui/components/registry/registry-explorer.model.ts
@@ -0,0 +1,153 @@
+import { isRegistryArtifactInstallable } from "@/lib/registry/artifacts";
+import {
+  REGISTRY_CATALOG,
+  type RegistryCatalogArtifact,
+  type RegistryCatalogResult,
+  type RegistryTenantArtifact,
+} from "@/types/registry";
+
+export const REGISTRY_CATALOG_CAPABILITY = {
+  CHECKS: "checks",
+  COMPLIANCE: "compliance",
+  PROVIDER: "provider",
+} as const;
+
+export type RegistryCatalogCapability =
+  (typeof REGISTRY_CATALOG_CAPABILITY)[keyof typeof REGISTRY_CATALOG_CAPABILITY];
+
+export const REGISTRY_CAPABILITY_LABELS = {
+  checks: "Checks",
+  compliance: "Compliance",
+  provider: "Provider",
+} as const satisfies Record<RegistryCatalogCapability, string>;
+
+export interface RegistryExplorerFilters {
+  search?: string;
+  providers?: string[];
+  capabilities?: RegistryCatalogCapability[];
+}
+
+export const REGISTRY_MARKETPLACE_SORT = {
+  NAME: "name",
+  DOWNLOADS: "downloads",
+} as const;
+
+export type RegistryMarketplaceSort =
+  (typeof REGISTRY_MARKETPLACE_SORT)[keyof typeof REGISTRY_MARKETPLACE_SORT];
+
+export interface RegistryMarketplaceArtifact extends RegistryCatalogArtifact {
+  isAdded: boolean;
+  resolvedVersion?: string;
+  updateAvailable: boolean;
+}
+
+export interface RegistryMarketplaceMyArtifact extends RegistryTenantArtifact {
+  catalogArtifact?: RegistryMarketplaceArtifact;
+}
+
+export interface RegistryMarketplaceIncompleteModel {
+  isComplete: false;
+}
+
+export interface RegistryMarketplaceCompleteModel {
+  isComplete: true;
+  artifacts: RegistryMarketplaceArtifact[];
+  providers: string[];
+  myArtifacts: RegistryMarketplaceMyArtifact[];
+}
+
+export type RegistryMarketplaceModel =
+  | RegistryMarketplaceIncompleteModel
+  | RegistryMarketplaceCompleteModel;
+
+export function buildRegistryMarketplaceModel(
+  catalog: RegistryCatalogResult,
+  myArtifacts: RegistryTenantArtifact[],
+  filters: RegistryExplorerFilters,
+  sort: RegistryMarketplaceSort,
+): RegistryMarketplaceModel {
+  if (catalog.status !== REGISTRY_CATALOG.COMPLETE)
+    return {
+      isComplete: false,
+    };
+  const installedArtifacts = new Map(
+    myArtifacts.map((artifact) => [artifact.normalizedName, artifact]),
+  );
+  const merged = new Map(
+    catalog.artifacts.map((artifact) => {
+      const installed = installedArtifacts.get(artifact.normalizedName);
+      const resolvedVersion = installed?.resolvedVersion?.trim() || undefined;
+      const latestVersion = artifact.latestVersion?.trim() || undefined;
+      return [
+        artifact.normalizedName,
+        {
+          ...artifact,
+          latestVersion,
+          resolvedVersion,
+          isAdded: Boolean(installed),
+          updateAvailable: Boolean(
+            resolvedVersion &&
+              latestVersion &&
+              resolvedVersion !== latestVersion &&
+              isRegistryArtifactInstallable(artifact),
+          ),
+        },
+      ];
+    }),
+  );
+  const artifacts = Array.from(merged.values())
+    .filter((artifact) => matches(artifact, filters))
+    .sort((left, right) =>
+      sort === REGISTRY_MARKETPLACE_SORT.DOWNLOADS
+        ? right.totalDownloads - left.totalDownloads ||
+          compare(left.normalizedName, right.normalizedName)
+        : compare(left.normalizedName, right.normalizedName),
+    );
+  return {
+    isComplete: true,
+    artifacts,
+    providers: Array.from(
+      new Set(catalog.artifacts.flatMap((artifact) => artifact.providers)),
+    ).sort(compare),
+    myArtifacts: myArtifacts
+      .map(({ normalizedName, versionSpec, resolvedVersion }) => ({
+        normalizedName,
+        versionSpec,
+        resolvedVersion: resolvedVersion?.trim() || undefined,
+        catalogArtifact: merged.get(normalizedName),
+      }))
+      .sort((left, right) =>
+        compare(left.normalizedName, right.normalizedName),
+      ),
+  };
+}
+
+function matches(
+  artifact: RegistryCatalogArtifact,
+  filters: RegistryExplorerFilters,
+) {
+  const search = filters.search?.trim().toLowerCase();
+  const providers = (filters.providers ?? []).map((provider) =>
+    provider.trim().toLowerCase(),
+  );
+  const text =
+    `${artifact.normalizedName} ${artifact.name ?? ""} ${artifact.description ?? ""}`.toLowerCase();
+  return (
+    (!search || text.includes(search)) &&
+    (providers.length === 0 ||
+      providers.some((provider) => artifact.providers.includes(provider))) &&
+    (filters.capabilities?.length ? filters.capabilities : [undefined]).some(
+      (capability) =>
+        !capability ||
+        (capability === REGISTRY_CATALOG_CAPABILITY.CHECKS &&
+          artifact.hasChecks) ||
+        (capability === REGISTRY_CATALOG_CAPABILITY.COMPLIANCE &&
+          artifact.hasCompliance) ||
+        (capability === REGISTRY_CATALOG_CAPABILITY.PROVIDER &&
+          artifact.hasProvider),
+    )
+  );
+}
+function compare(left: string, right: string) {
+  return left < right ? -1 : left > right ? 1 : 0;
+}
diff --git a/ui/components/registry/registry-explorer.tsx b/ui/components/registry/registry-explorer.tsx
new file mode 100644
index 0000000000..0c50b7244b
--- /dev/null
+++ b/ui/components/registry/registry-explorer.tsx
@@ -0,0 +1,741 @@
+"use client";
+
+import { RefreshCw, Settings } from "lucide-react";
+import { useRouter, useSearchParams } from "next/navigation";
+import { useEffect, useEffectEvent, useRef, useState } from "react";
+
+import {
+  disconnectRegistryCredential,
+  removeRegistryArtifact,
+} from "@/actions/registry/registry";
+import { Alert, AlertDescription } from "@/components/shadcn/alert";
+import { Badge } from "@/components/shadcn/badge/badge";
+import { Button } from "@/components/shadcn/button/button";
+import {
+  Tabs,
+  TabsContent,
+  TabsList,
+  TabsTrigger,
+} from "@/components/shadcn/tabs/tabs";
+import { toast } from "@/components/shadcn/toast/use-toast";
+import { executeRegistryArtifactAddition } from "@/lib/registry/artifact-execution";
+import { isRegistryArtifactInstallable } from "@/lib/registry/artifacts";
+import { executeRegistryCredentialValidation } from "@/lib/registry/credential-execution";
+import {
+  REGISTRY_CREDENTIAL_CHANGED,
+  credentialOutcomeMessage,
+  type RegistryCredentialValidationOutcome,
+} from "@/lib/registry/credential-result";
+import { useTaskWatcherStore } from "@/store/task-watcher/store";
+import {
+  REGISTRY_ARTIFACT_REMOVAL,
+  REGISTRY_BOOTSTRAP_STATE,
+  REGISTRY_CREDENTIAL_ACTION,
+  REGISTRY_FAILURE,
+  REGISTRY_INSTALL_OPERATION,
+  REGISTRY_MUTATION,
+  type RegistryArtifactRemovalResult,
+  type RegistryBootstrapState,
+  type RegistryMutationResult,
+  type RegistryRemoveDialogError,
+  type RegistryTenantArtifact,
+} from "@/types/registry";
+
+import { RegistryAccessDialog } from "./registry-access-dialog";
+import {
+  RegistryArtifactCard,
+  RegistryTenantArtifactCard,
+} from "./registry-artifact-card";
+import { RegistryArtifactGrid } from "./registry-artifact-grid";
+import { RegistryCredentialBanner } from "./registry-credential-banner";
+import {
+  buildRegistryMarketplaceModel,
+  REGISTRY_MARKETPLACE_SORT,
+  REGISTRY_CATALOG_CAPABILITY,
+  type RegistryCatalogCapability,
+  type RegistryExplorerFilters,
+  type RegistryMarketplaceArtifact,
+  type RegistryMarketplaceSort,
+} from "./registry-explorer.model";
+import { RegistryRemoveDialog } from "./registry-remove-dialog";
+import { RegistryToolbar } from "./registry-toolbar";
+import { useRegistryRefresh } from "./use-registry-refresh";
+
+const PAGE_SUBTITLE =
+  "Explore checks, compliance frameworks, and providers. Add external provider artifacts to connect new providers to your workspace.";
+
+const REGISTRY_TAB = { EXPLORE: "explore", MINE: "mine" } as const;
+type RegistryTab = (typeof REGISTRY_TAB)[keyof typeof REGISTRY_TAB];
+
+const REGISTRY_PENDING_OPERATION = {
+  CREDENTIAL: "credential",
+  REMOVE: "remove",
+} as const;
+type RegistryPendingOperation =
+  (typeof REGISTRY_PENDING_OPERATION)[keyof typeof REGISTRY_PENDING_OPERATION];
+
+const REGISTRY_ACCESS_DIALOG_MODE = {
+  CONNECT: "connect",
+  MANAGE: "manage",
+} as const;
+type RegistryAccessDialogMode =
+  (typeof REGISTRY_ACCESS_DIALOG_MODE)[keyof typeof REGISTRY_ACCESS_DIALOG_MODE];
+
+interface RetryStateProps {
+  title: string;
+  children: string;
+}
+
+function RetryState({ title, children }: RetryStateProps) {
+  return (
+    <section aria-live="polite" className="mx-auto max-w-2xl py-12 text-center">
+      <h1 className="text-xl font-semibold">{title}</h1>
+      <p className="text-text-neutral-secondary mt-3 text-sm">{children}</p>
+      <div className="mt-6">
+        <Button onClick={() => window.location.reload()}>Retry</Button>
+      </div>
+    </section>
+  );
+}
+
+function mutationFailureMessage(result: RegistryMutationResult) {
+  if (result.status === REGISTRY_MUTATION.REFUSED) return result.message;
+  if (result.status === REGISTRY_MUTATION.REFRESH_FAILED) {
+    return "Registry membership could not be confirmed. Try again.";
+  }
+  return "The Registry operation could not be completed. Try again.";
+}
+
+interface RegistryExplorerProps {
+  initialState: RegistryBootstrapState;
+  registryKeyUrl?: string;
+}
+
+export function RegistryExplorer({
+  initialState,
+  registryKeyUrl,
+}: RegistryExplorerProps) {
+  // The API is the sole access authority: a denied action result routes to
+  // Profile once, and the navigation unmounts this component with its state.
+  const router = useRouter();
+  const [state, setState] = useState(initialState);
+  const searchParams = useSearchParams();
+  const filters: RegistryExplorerFilters = {
+    search: searchParams.get("filter[search]") ?? undefined,
+    providers:
+      searchParams.get("filter[provider]")?.split(",").filter(Boolean) ?? [],
+    capabilities: (
+      searchParams.get("filter[capability]")?.split(",") ?? []
+    ).filter((value): value is RegistryCatalogCapability =>
+      Object.values(REGISTRY_CATALOG_CAPABILITY).includes(
+        value as RegistryCatalogCapability,
+      ),
+    ),
+  };
+  const sort =
+    searchParams.get("sort") === REGISTRY_MARKETPLACE_SORT.DOWNLOADS
+      ? REGISTRY_MARKETPLACE_SORT.DOWNLOADS
+      : REGISTRY_MARKETPLACE_SORT.NAME;
+  const activeTab =
+    searchParams.get("tab") === REGISTRY_TAB.MINE
+      ? REGISTRY_TAB.MINE
+      : REGISTRY_TAB.EXPLORE;
+  function updateView(values: Record<string, string | undefined>) {
+    const next = new URLSearchParams(searchParams.toString());
+    Object.entries(values).forEach(([key, value]) =>
+      value ? next.set(key, value) : next.delete(key),
+    );
+    window.history.replaceState(
+      null,
+      "",
+      `/registry${next.size ? `?${next}` : ""}`,
+    );
+  }
+  const setFilters = (next: RegistryExplorerFilters) =>
+    updateView({
+      "filter[search]": next.search,
+      "filter[provider]": next.providers?.join(","),
+      "filter[capability]": next.capabilities?.join(","),
+    });
+  const setSort = (next: RegistryMarketplaceSort) =>
+    updateView({
+      sort: next === REGISTRY_MARKETPLACE_SORT.NAME ? undefined : next,
+    });
+  const setActiveTab = (next: RegistryTab) => {
+    updateView({ tab: next === REGISTRY_TAB.EXPLORE ? undefined : next });
+    if (next !== activeTab) requestRefresh();
+  };
+  const [pendingOperation, setPendingOperation] =
+    useState<RegistryPendingOperation | null>(null);
+  const [localPendingAddName, setPendingAddName] = useState<string>();
+  const watchedTasks = useTaskWatcherStore((store) => store.tasks);
+  const pendingAddName =
+    localPendingAddName ||
+    Object.values(watchedTasks).find(
+      (task) =>
+        task.kind === "registry-artifact-add" && task.status === "pending",
+    )?.meta.normalizedName;
+  const [refreshMessage, setRefreshMessage] = useState<string>();
+  const { isRefreshing, requestRefresh, invalidateRefresh } =
+    useRegistryRefresh({
+      enabled: state.status === REGISTRY_BOOTSTRAP_STATE.READY,
+      mutationPending: Boolean(pendingOperation || pendingAddName),
+      onResult: (result) => {
+        if (result.status === "access_denied") {
+          router.replace("/profile");
+        } else if (result.status === "complete") {
+          setRefreshMessage(undefined);
+          setState((current) =>
+            current.status === "ready"
+              ? {
+                  ...current,
+                  catalog: result.catalog,
+                  tenantArtifacts: result.tenantArtifacts,
+                }
+              : current,
+          );
+        } else if (result.status === "reconnect") {
+          setState({ status: REGISTRY_BOOTSTRAP_STATE.RECONNECT });
+        } else if (result.status === "onboarding") {
+          setState((current) =>
+            current.status === "ready"
+              ? {
+                  status: REGISTRY_BOOTSTRAP_STATE.ONBOARDING,
+                  credential: {
+                    configured: false,
+                    isValid: false,
+                    scopes: [],
+                    validationPending: false,
+                  },
+                  tenantArtifacts: current.tenantArtifacts,
+                }
+              : current,
+          );
+        } else {
+          setRefreshMessage(
+            "Registry could not be refreshed. Showing the last available data. Try again.",
+          );
+        }
+      },
+    });
+  const consumeArtifactsChanged = useEffectEvent(
+    (artifacts: RegistryTenantArtifact[]) => {
+      invalidateRefresh();
+      setState((current) =>
+        current.status === "ready"
+          ? { ...current, tenantArtifacts: artifacts }
+          : current,
+      );
+    },
+  );
+  useEffect(() => {
+    const refresh = (event: Event) => {
+      if (!(event instanceof CustomEvent) || !Array.isArray(event.detail))
+        return;
+      consumeArtifactsChanged(event.detail);
+    };
+    window.addEventListener("registry-artifacts-changed", refresh);
+    return () =>
+      window.removeEventListener("registry-artifacts-changed", refresh);
+  }, []);
+  const [accessDialogMode, setAccessDialogMode] =
+    useState<RegistryAccessDialogMode>();
+  const [removeTarget, setRemoveTarget] = useState<string>();
+  const [removeError, setRemoveError] = useState<RegistryRemoveDialogError>();
+  const [operationMessage, setOperationMessage] = useState<string>();
+  const connectButtonRef = useRef<HTMLButtonElement>(null);
+  const manageButtonRef = useRef<HTMLButtonElement>(null);
+  const removeTriggerRef = useRef<HTMLButtonElement | null>(null);
+  const operationGeneration = useRef(0);
+  const artifactSubmission = useRef(false);
+  const awaitingCredential = useRef(false);
+
+  useEffect(
+    () => () => {
+      operationGeneration.current += 1;
+    },
+    [],
+  );
+
+  const consumeCredentialOutcome = useEffectEvent(
+    (result: RegistryCredentialValidationOutcome) => {
+      if (!awaitingCredential.current) applyCredentialOutcome(result);
+    },
+  );
+  useEffect(() => {
+    const consume = (event: Event) => {
+      if (event instanceof CustomEvent) consumeCredentialOutcome(event.detail);
+    };
+    window.addEventListener(REGISTRY_CREDENTIAL_CHANGED, consume);
+    return () =>
+      window.removeEventListener(REGISTRY_CREDENTIAL_CHANGED, consume);
+  }, []);
+
+  function applyCredentialOutcome(result: RegistryCredentialValidationOutcome) {
+    // A connected outcome already includes fresh collections. A failed
+    // replacement must still resume any read deferred during that mutation.
+    invalidateRefresh(
+      result.status === REGISTRY_CREDENTIAL_ACTION.CONNECTED
+        ? false
+        : undefined,
+    );
+    if (result.status === REGISTRY_FAILURE.ACCESS_DENIED) {
+      router.replace("/profile");
+      return;
+    }
+    setPendingOperation(null);
+    if (result.status === REGISTRY_CREDENTIAL_ACTION.CONNECTED) {
+      setRefreshMessage(undefined);
+      setAccessDialogMode(undefined);
+      setOperationMessage(undefined);
+      setState({
+        status: REGISTRY_BOOTSTRAP_STATE.READY,
+        credential: result.credential,
+        catalog: result.collections.catalog,
+        tenantArtifacts: result.collections.tenantArtifacts,
+      });
+      return;
+    }
+    if (
+      result.status === REGISTRY_CREDENTIAL_ACTION.PENDING ||
+      result.status === REGISTRY_CREDENTIAL_ACTION.INVALID
+    ) {
+      setState((current) =>
+        current.status === REGISTRY_BOOTSTRAP_STATE.ONBOARDING ||
+        current.status === REGISTRY_BOOTSTRAP_STATE.VALIDATION_PENDING
+          ? {
+              status:
+                result.status === REGISTRY_CREDENTIAL_ACTION.PENDING
+                  ? REGISTRY_BOOTSTRAP_STATE.VALIDATION_PENDING
+                  : REGISTRY_BOOTSTRAP_STATE.ONBOARDING,
+              credential: result.credential ?? current.credential,
+              tenantArtifacts: current.tenantArtifacts,
+            }
+          : current,
+      );
+    }
+    setOperationMessage(credentialOutcomeMessage(result));
+  }
+
+  async function handleAdd(artifact: RegistryMarketplaceArtifact) {
+    if (
+      !isRegistryArtifactInstallable(artifact) ||
+      (artifact.isAdded && !artifact.updateAvailable) ||
+      pendingAddName ||
+      pendingOperation ||
+      artifactSubmission.current
+    )
+      return;
+    const { normalizedName } = artifact;
+    invalidateRefresh();
+    artifactSubmission.current = true;
+    const generation = operationGeneration.current;
+    setOperationMessage(undefined);
+    setPendingAddName(normalizedName);
+    const result = await executeRegistryArtifactAddition(
+      artifact.updateAvailable && artifact.latestVersion
+        ? {
+            normalizedName,
+            versionSpec: artifact.latestVersion,
+            operation: REGISTRY_INSTALL_OPERATION.UPDATE,
+          }
+        : { normalizedName },
+    );
+    artifactSubmission.current = false;
+    if (generation !== operationGeneration.current) return;
+    if (result.status === REGISTRY_FAILURE.ACCESS_DENIED)
+      return router.replace("/profile");
+
+    setPendingAddName(undefined);
+    if (result.status !== REGISTRY_MUTATION.CONFIRMED) {
+      setOperationMessage(
+        artifact.updateAvailable &&
+          result.status === REGISTRY_MUTATION.REFRESH_FAILED
+          ? "Update could not be confirmed. Refresh Registry before retrying."
+          : mutationFailureMessage(result),
+      );
+      return;
+    }
+
+    setState((current) =>
+      current.status === REGISTRY_BOOTSTRAP_STATE.READY
+        ? { ...current, tenantArtifacts: result.tenantArtifacts }
+        : current,
+    );
+  }
+
+  async function handleCredentialSubmit(key: string) {
+    invalidateRefresh();
+    const generation = operationGeneration.current;
+    setOperationMessage(undefined);
+    setPendingOperation(REGISTRY_PENDING_OPERATION.CREDENTIAL);
+    awaitingCredential.current = true;
+    const result = await executeRegistryCredentialValidation(key);
+    awaitingCredential.current = false;
+    if (generation !== operationGeneration.current) return;
+    applyCredentialOutcome(result);
+  }
+
+  async function handleDisconnect() {
+    invalidateRefresh();
+    const generation = operationGeneration.current;
+    setOperationMessage(undefined);
+    setPendingOperation(REGISTRY_PENDING_OPERATION.CREDENTIAL);
+    const result = await disconnectRegistryCredential().catch(() => ({
+      status: REGISTRY_FAILURE.ERROR,
+    }));
+    if (generation !== operationGeneration.current) return;
+    if (result.status === REGISTRY_FAILURE.ACCESS_DENIED)
+      return router.replace("/profile");
+
+    setPendingOperation(null);
+    if (result.status !== REGISTRY_CREDENTIAL_ACTION.DISCONNECTED) {
+      setOperationMessage(
+        "Registry access could not be disconnected. Try again.",
+      );
+      return;
+    }
+
+    setAccessDialogMode(undefined);
+    setState({
+      status: REGISTRY_BOOTSTRAP_STATE.ONBOARDING,
+      credential: result.credential,
+      tenantArtifacts: result.tenantArtifacts,
+    });
+  }
+
+  async function handleRemove(normalizedName: string) {
+    if (
+      pendingOperation === REGISTRY_PENDING_OPERATION.REMOVE ||
+      pendingAddName === normalizedName
+    )
+      return;
+    invalidateRefresh();
+    const generation = operationGeneration.current;
+    setOperationMessage(undefined);
+    setRemoveError(undefined);
+    setPendingOperation(REGISTRY_PENDING_OPERATION.REMOVE);
+    let result: RegistryArtifactRemovalResult;
+    try {
+      result = await removeRegistryArtifact(normalizedName);
+    } catch {
+      result = { status: REGISTRY_FAILURE.ERROR };
+    }
+    if (generation !== operationGeneration.current) return;
+    setPendingOperation(null);
+    if (result.status === REGISTRY_FAILURE.ACCESS_DENIED)
+      return router.replace("/profile");
+
+    if (result.status === REGISTRY_ARTIFACT_REMOVAL.IN_USE) {
+      setRemoveError(result);
+      return;
+    }
+    if (result.status !== REGISTRY_MUTATION.CONFIRMED) {
+      setRemoveError({
+        status: REGISTRY_FAILURE.ERROR,
+        message: mutationFailureMessage(result),
+      });
+      return;
+    }
+
+    setRemoveTarget(undefined);
+    setState((current) =>
+      current.status === REGISTRY_BOOTSTRAP_STATE.READY
+        ? { ...current, tenantArtifacts: result.tenantArtifacts }
+        : current,
+    );
+    toast({ title: "Artifact removed" });
+    window.dispatchEvent(
+      new CustomEvent("registry-artifacts-changed", {
+        detail: result.tenantArtifacts,
+      }),
+    );
+  }
+
+  function openRemoveDialog(
+    normalizedName: string,
+    trigger: HTMLButtonElement | null,
+  ) {
+    removeTriggerRef.current = trigger;
+    setRemoveError(undefined);
+    setRemoveTarget(normalizedName);
+  }
+
+  const accessDialogProps = {
+    registryKeyUrl,
+    errorMessage: operationMessage,
+    onOpenChange: (open: boolean) => {
+      if (!open && pendingOperation !== REGISTRY_PENDING_OPERATION.CREDENTIAL) {
+        setAccessDialogMode(undefined);
+      }
+    },
+    onSubmit: handleCredentialSubmit,
+    open: true,
+    pending: pendingOperation === REGISTRY_PENDING_OPERATION.CREDENTIAL,
+    returnFocusRef:
+      accessDialogMode === REGISTRY_ACCESS_DIALOG_MODE.CONNECT
+        ? connectButtonRef
+        : manageButtonRef,
+  };
+  const accessDialog =
+    accessDialogMode === REGISTRY_ACCESS_DIALOG_MODE.CONNECT ? (
+      <RegistryAccessDialog mode="connect" {...accessDialogProps} />
+    ) : accessDialogMode === REGISTRY_ACCESS_DIALOG_MODE.MANAGE ? (
+      <RegistryAccessDialog
+        mode="manage"
+        onDisconnect={handleDisconnect}
+        {...accessDialogProps}
+      />
+    ) : null;
+
+  if (
+    state.status === REGISTRY_BOOTSTRAP_STATE.ONBOARDING ||
+    state.status === REGISTRY_BOOTSTRAP_STATE.VALIDATION_PENDING
+  ) {
+    return (
+      <div className="space-y-6">
+        <p className="text-text-neutral-secondary text-sm">{PAGE_SUBTITLE}</p>
+        {!accessDialogMode && operationMessage && (
+          <Alert variant="error">
+            <AlertDescription>{operationMessage}</AlertDescription>
+          </Alert>
+        )}
+        <RegistryCredentialBanner
+          connectButtonRef={connectButtonRef}
+          onConnect={() =>
+            setAccessDialogMode(REGISTRY_ACCESS_DIALOG_MODE.CONNECT)
+          }
+          tenantArtifactCount={state.tenantArtifacts.length}
+          validationPending={
+            state.status === REGISTRY_BOOTSTRAP_STATE.VALIDATION_PENDING
+          }
+        />
+        {accessDialog}
+      </div>
+    );
+  }
+  if (state.status !== REGISTRY_BOOTSTRAP_STATE.READY) {
+    const messages = {
+      [REGISTRY_BOOTSTRAP_STATE.INCOMPLETE]: [
+        "Registry catalog is incomplete",
+        "Complete catalog controls and metrics are unavailable until every catalog page loads. Retry to load the catalog again.",
+      ],
+      [REGISTRY_BOOTSTRAP_STATE.UNAVAILABLE]: [
+        "Registry is unavailable",
+        "Registry data may be stale or unavailable. Retry when the service is available.",
+      ],
+      [REGISTRY_BOOTSTRAP_STATE.RECONNECT]: [
+        "Reconnect Registry",
+        "Reconnect Registry before exploring artifacts.",
+      ],
+      [REGISTRY_BOOTSTRAP_STATE.ERROR]: [
+        "Registry could not be loaded",
+        "An unexpected Registry error occurred. Retry to load the explorer again.",
+      ],
+    } as const;
+    const [title, message] = messages[state.status];
+    return (
+      <>
+        <RetryState title={title}>{message}</RetryState>
+        {state.status === REGISTRY_BOOTSTRAP_STATE.RECONNECT && (
+          <div className="flex justify-center">
+            <Button
+              onClick={() =>
+                setAccessDialogMode(REGISTRY_ACCESS_DIALOG_MODE.MANAGE)
+              }
+              ref={manageButtonRef}
+              type="button"
+            >
+              Replace key
+            </Button>
+          </div>
+        )}
+        {accessDialog}
+      </>
+    );
+  }
+
+  const model = buildRegistryMarketplaceModel(
+    state.catalog,
+    state.tenantArtifacts,
+    filters,
+    sort,
+  );
+  if (!model.isComplete) {
+    return (
+      <RetryState title="Registry catalog is incomplete">
+        Complete catalog controls and metrics are unavailable.
+      </RetryState>
+    );
+  }
+  return (
+    <div className="space-y-6">
+      <h1 className="sr-only">Registry marketplace</h1>
+      <p className="text-text-neutral-secondary text-sm">{PAGE_SUBTITLE}</p>
+      {refreshMessage && (
+        <Alert variant="warning">
+          <AlertDescription>{refreshMessage}</AlertDescription>
+        </Alert>
+      )}
+      {!accessDialogMode && operationMessage && (
+        <Alert variant="error">
+          <AlertDescription>{operationMessage}</AlertDescription>
+        </Alert>
+      )}
+      <Tabs
+        onValueChange={(value) => setActiveTab(value as RegistryTab)}
+        value={activeTab}
+      >
+        <div className="border-border-neutral-secondary flex flex-wrap items-center justify-between gap-4 border-b">
+          <div className="min-w-52 flex-1">
+            <TabsList>
+              <TabsTrigger
+                adornment={
+                  <Badge size="sm" variant="tag">
+                    {state.catalog.artifacts.length}
+                  </Badge>
+                }
+                value={REGISTRY_TAB.EXPLORE}
+              >
+                All
+              </TabsTrigger>
+              <TabsTrigger
+                adornment={
+                  <Badge size="sm" variant="tag">
+                    {state.tenantArtifacts.length}
+                  </Badge>
+                }
+                value={REGISTRY_TAB.MINE}
+              >
+                My artifacts
+              </TabsTrigger>
+            </TabsList>
+          </div>
+          <div className="ml-auto flex items-center gap-2">
+            <Button
+              aria-label="Refresh Registry"
+              aria-busy={isRefreshing}
+              disabled={
+                isRefreshing || Boolean(pendingOperation || pendingAddName)
+              }
+              onClick={requestRefresh}
+              size="sm"
+              type="button"
+              variant="ghost"
+            >
+              <RefreshCw aria-hidden />
+              {isRefreshing ? "Refreshing…" : "Refresh"}
+            </Button>
+            <Button
+              aria-label="Manage access"
+              title="Manage access"
+              onClick={() =>
+                setAccessDialogMode(REGISTRY_ACCESS_DIALOG_MODE.MANAGE)
+              }
+              ref={manageButtonRef}
+              size="icon"
+              type="button"
+              variant="ghost"
+            >
+              <Settings aria-hidden />
+            </Button>
+          </div>
+        </div>
+        <TabsContent className="space-y-4 pt-4" value={REGISTRY_TAB.EXPLORE}>
+          <RegistryToolbar
+            filters={filters}
+            onFiltersChange={setFilters}
+            onSortChange={setSort}
+            providers={model.providers}
+            resultsCount={model.artifacts.length}
+            sort={sort}
+          />
+          <RegistryArtifactGrid
+            emptyMessage={
+              state.catalog.artifacts.length === 0
+                ? "No Registry artifacts are available."
+                : "No artifacts match the current filters."
+            }
+            emptyDescription={
+              state.catalog.artifacts.length === 0
+                ? "Published artifacts will appear here when the Registry catalog is available."
+                : undefined
+            }
+            emptyActionLabel={
+              state.catalog.artifacts.length === 0
+                ? "Refresh catalog"
+                : undefined
+            }
+            onReset={
+              state.catalog.artifacts.length > 0
+                ? () => setFilters({})
+                : requestRefresh
+            }
+            isEmpty={model.artifacts.length === 0}
+          >
+            {model.artifacts.map((artifact) => (
+              <li key={artifact.normalizedName}>
+                <RegistryArtifactCard
+                  artifact={artifact}
+                  pendingAddName={pendingAddName}
+                  onAdd={() => handleAdd(artifact)}
+                  onRemove={(trigger) =>
+                    openRemoveDialog(artifact.normalizedName, trigger)
+                  }
+                />
+              </li>
+            ))}
+          </RegistryArtifactGrid>
+        </TabsContent>
+        <TabsContent className="space-y-4 pt-4" value={REGISTRY_TAB.MINE}>
+          <RegistryArtifactGrid
+            emptyMessage="No artifacts in this workspace yet."
+            emptyDescription="Explore the catalog to add an external provider to this workspace."
+            emptyActionLabel="Explore artifacts"
+            isEmpty={model.myArtifacts.length === 0}
+            onReset={() => setActiveTab(REGISTRY_TAB.EXPLORE)}
+          >
+            {model.myArtifacts.map((myArtifact) => (
+              <li key={myArtifact.normalizedName}>
+                {myArtifact.catalogArtifact ? (
+                  <RegistryArtifactCard
+                    artifact={myArtifact.catalogArtifact}
+                    pendingAddName={pendingAddName}
+                    onAdd={() => handleAdd(myArtifact.catalogArtifact!)}
+                    onRemove={(trigger) =>
+                      openRemoveDialog(myArtifact.normalizedName, trigger)
+                    }
+                  />
+                ) : (
+                  <RegistryTenantArtifactCard
+                    normalizedName={myArtifact.normalizedName}
+                    onRemove={(trigger) =>
+                      openRemoveDialog(myArtifact.normalizedName, trigger)
+                    }
+                    resolvedVersion={myArtifact.resolvedVersion}
+                  />
+                )}
+              </li>
+            ))}
+          </RegistryArtifactGrid>
+        </TabsContent>
+      </Tabs>
+      {accessDialog}
+      <RegistryRemoveDialog
+        artifactName={removeTarget}
+        error={removeError}
+        isPending={pendingOperation === REGISTRY_PENDING_OPERATION.REMOVE}
+        onConfirm={() => removeTarget && handleRemove(removeTarget)}
+        onOpenChange={(open) => {
+          if (!open && pendingOperation !== REGISTRY_PENDING_OPERATION.REMOVE) {
+            setRemoveError(undefined);
+            setRemoveTarget(undefined);
+          }
+        }}
+        onViewProviders={() => router.push("/providers")}
+        open={removeTarget !== undefined}
+        returnFocusRef={removeTriggerRef}
+      />
+    </div>
+  );
+}
diff --git a/ui/components/registry/registry-remove-dialog.tsx b/ui/components/registry/registry-remove-dialog.tsx
new file mode 100644
index 0000000000..394bc05662
--- /dev/null
+++ b/ui/components/registry/registry-remove-dialog.tsx
@@ -0,0 +1,94 @@
+import { type RefObject, useEffect, useRef } from "react";
+
+import { Alert, AlertDescription, AlertTitle } from "@/components/shadcn/alert";
+import { Button } from "@/components/shadcn/button/button";
+import { Modal } from "@/components/shadcn/modal/modal";
+import {
+  REGISTRY_ARTIFACT_REMOVAL,
+  type RegistryRemoveDialogError,
+} from "@/types/registry";
+
+interface RegistryRemoveDialogProps {
+  artifactName?: string;
+  error?: RegistryRemoveDialogError;
+  isPending: boolean;
+  onConfirm: () => void;
+  onOpenChange: (open: boolean) => void;
+  onViewProviders: () => void;
+  open: boolean;
+  returnFocusRef: RefObject<HTMLButtonElement | null>;
+}
+
+export function RegistryRemoveDialog({
+  artifactName,
+  error,
+  isPending,
+  onConfirm,
+  onOpenChange,
+  onViewProviders,
+  open,
+  returnFocusRef,
+}: RegistryRemoveDialogProps) {
+  const cancelButtonRef = useRef<HTMLButtonElement>(null);
+  const isInUse = error?.status === REGISTRY_ARTIFACT_REMOVAL.IN_USE;
+
+  // Disabling the submit button can lose focus; restore it inside the dialog
+  // when a failure re-enables the actions or replaces them with recovery actions.
+  useEffect(() => {
+    if (open && error) cancelButtonRef.current?.focus();
+  }, [error, open]);
+
+  return (
+    <Modal
+      description={`Remove ${artifactName ?? "this artifact"} from My artifacts. Artifacts used by providers cannot be removed.`}
+      onOpenAutoFocus={(event) => {
+        event.preventDefault();
+        cancelButtonRef.current?.focus();
+      }}
+      onCloseAutoFocus={(event) => {
+        event.preventDefault();
+        returnFocusRef.current?.focus();
+      }}
+      onOpenChange={onOpenChange}
+      open={open}
+      size="sm"
+      title="Remove artifact"
+    >
+      {error && (
+        <Alert variant="error">
+          {isInUse && <AlertTitle>Artifact in use</AlertTitle>}
+          <AlertDescription>
+            {error.status === REGISTRY_ARTIFACT_REMOVAL.IN_USE
+              ? "This artifact cannot be removed because one or more providers use it. Review the associated providers before trying again."
+              : error.message}
+          </AlertDescription>
+        </Alert>
+      )}
+      <div className="flex flex-wrap justify-end gap-2">
+        <Button
+          disabled={isPending}
+          onClick={() => onOpenChange(false)}
+          ref={cancelButtonRef}
+          type="button"
+          variant="outline"
+        >
+          {isInUse ? "Close" : "Cancel"}
+        </Button>
+        {isInUse ? (
+          <Button onClick={onViewProviders} type="button">
+            View providers
+          </Button>
+        ) : (
+          <Button
+            disabled={isPending}
+            onClick={onConfirm}
+            type="button"
+            variant="destructive"
+          >
+            {isPending ? "Removing artifact" : "Confirm Remove"}
+          </Button>
+        )}
+      </div>
+    </Modal>
+  );
+}
diff --git a/ui/components/registry/registry-toolbar.tsx b/ui/components/registry/registry-toolbar.tsx
new file mode 100644
index 0000000000..a4049267cf
--- /dev/null
+++ b/ui/components/registry/registry-toolbar.tsx
@@ -0,0 +1,156 @@
+"use client";
+
+import { ClearFiltersButton } from "@/components/filters/clear-filters-button";
+import { ProviderTypeIcon } from "@/components/icons/providers-badge/provider-type-icon";
+import { SearchInput } from "@/components/shadcn/search-input/search-input";
+import {
+  MultiSelect,
+  MultiSelectContent,
+  MultiSelectItem,
+  MultiSelectSelectAll,
+  MultiSelectSeparator,
+  MultiSelectTrigger,
+  MultiSelectValue,
+} from "@/components/shadcn/select/multiselect";
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/shadcn/select/select";
+import { getProviderDisplayName } from "@/types/providers";
+
+import {
+  REGISTRY_CAPABILITY_LABELS,
+  REGISTRY_CATALOG_CAPABILITY,
+  REGISTRY_MARKETPLACE_SORT,
+  type RegistryCatalogCapability,
+  type RegistryExplorerFilters,
+  type RegistryMarketplaceSort,
+} from "./registry-explorer.model";
+
+interface RegistryToolbarProps {
+  filters: RegistryExplorerFilters;
+  onFiltersChange: (filters: RegistryExplorerFilters) => void;
+  onSortChange: (sort: RegistryMarketplaceSort) => void;
+  providers: string[];
+  resultsCount: number;
+  sort: RegistryMarketplaceSort;
+}
+
+export function RegistryToolbar({
+  filters,
+  onFiltersChange,
+  onSortChange,
+  providers,
+  resultsCount,
+  sort,
+}: RegistryToolbarProps) {
+  const activeCount =
+    Number(Boolean(filters.providers?.length)) +
+    Number(Boolean(filters.capabilities?.length)) +
+    Number(Boolean(filters.search));
+  return (
+    <div className="flex flex-wrap items-center gap-4">
+      <div className="w-full sm:w-64">
+        <SearchInput
+          aria-label="Search artifacts"
+          placeholder="Search artifacts..."
+          value={filters.search ?? ""}
+          onChange={(event) =>
+            onFiltersChange({ ...filters, search: event.target.value })
+          }
+          onClear={() => onFiltersChange({ ...filters, search: undefined })}
+        />
+      </div>
+      <div className="w-full sm:w-56">
+        <MultiSelect
+          values={filters.providers ?? []}
+          onValuesChange={(values) =>
+            onFiltersChange({ ...filters, providers: values })
+          }
+        >
+          <MultiSelectTrigger aria-label="Filter by provider">
+            <MultiSelectValue placeholder="All providers" />
+          </MultiSelectTrigger>
+          <MultiSelectContent
+            search={{
+              placeholder: "Search providers...",
+              emptyMessage: "No providers found.",
+            }}
+          >
+            <MultiSelectSelectAll>Select All</MultiSelectSelectAll>
+            <MultiSelectSeparator />
+            {providers.map((provider) => (
+              <MultiSelectItem
+                key={provider}
+                value={provider}
+                badgeLabel={getProviderDisplayName(provider)}
+              >
+                <ProviderTypeIcon size={20} type={provider} />
+                {getProviderDisplayName(provider)}
+              </MultiSelectItem>
+            ))}
+          </MultiSelectContent>
+        </MultiSelect>
+      </div>
+      <div className="w-full sm:w-52">
+        <MultiSelect
+          values={filters.capabilities ?? []}
+          onValuesChange={(values) =>
+            onFiltersChange({
+              ...filters,
+              capabilities: values as RegistryCatalogCapability[],
+            })
+          }
+        >
+          <MultiSelectTrigger aria-label="Filter by capability">
+            <MultiSelectValue placeholder="All capabilities" />
+          </MultiSelectTrigger>
+          <MultiSelectContent>
+            {Object.values(REGISTRY_CATALOG_CAPABILITY).map((capability) => (
+              <MultiSelectItem key={capability} value={capability}>
+                {REGISTRY_CAPABILITY_LABELS[capability]}
+              </MultiSelectItem>
+            ))}
+          </MultiSelectContent>
+        </MultiSelect>
+      </div>
+      <div className="w-full sm:w-48">
+        <Select
+          value={sort}
+          onValueChange={(value) =>
+            onSortChange(value as RegistryMarketplaceSort)
+          }
+        >
+          <SelectTrigger aria-label="Sort artifacts">
+            <SelectValue />
+          </SelectTrigger>
+          <SelectContent>
+            <SelectItem value={REGISTRY_MARKETPLACE_SORT.NAME}>
+              Name (A–Z)
+            </SelectItem>
+            <SelectItem value={REGISTRY_MARKETPLACE_SORT.DOWNLOADS}>
+              Most downloaded
+            </SelectItem>
+          </SelectContent>
+        </Select>
+      </div>
+      <ClearFiltersButton
+        ariaLabel="Clear filters"
+        showCount
+        pendingCount={activeCount}
+        onClear={() => {
+          onFiltersChange({});
+        }}
+      />
+      <p
+        aria-live="polite"
+        className="text-text-neutral-secondary ml-auto text-sm"
+      >
+        {resultsCount} artifact{resultsCount === 1 ? "" : "s"}
+      </p>
+    </div>
+  );
+}
diff --git a/ui/components/registry/use-registry-refresh.ts b/ui/components/registry/use-registry-refresh.ts
new file mode 100644
index 0000000000..40ecaf3db9
--- /dev/null
+++ b/ui/components/registry/use-registry-refresh.ts
@@ -0,0 +1,97 @@
+"use client";
+
+import { useEffect, useEffectEvent, useRef, useState } from "react";
+
+import { refreshRegistryCollections } from "@/actions/registry/registry";
+import type { RegistryCollectionsResult } from "@/types/registry";
+
+interface RegistryRefreshOptions {
+  enabled: boolean;
+  mutationPending: boolean;
+  onResult: (result: RegistryCollectionsResult) => void;
+}
+
+export function useRegistryRefresh({
+  enabled,
+  mutationPending,
+  onResult,
+}: RegistryRefreshOptions) {
+  const [isRefreshing, setIsRefreshing] = useState(false);
+  const [requestId, setRequestId] = useState(0);
+  const generation = useRef(0);
+  const inFlight = useRef<number | null>(null);
+  const requested = useRef(false);
+  const mounted = useRef(true);
+
+  useEffect(() => {
+    mounted.current = true;
+    return () => {
+      mounted.current = false;
+      generation.current += 1;
+    };
+  }, []);
+
+  function requestRefresh() {
+    // Tab/focus/button events share the current read unless a mutation invalidated it.
+    if (inFlight.current === generation.current) return;
+    requested.current = true;
+    setRequestId((value) => value + 1);
+  }
+
+  function invalidateRefresh(refreshAfter?: boolean) {
+    generation.current += 1;
+    requested.current =
+      refreshAfter ?? (requested.current || inFlight.current !== null);
+    setRequestId((value) => value + 1);
+  }
+
+  const readCollections = useEffectEvent(async () => {
+    if (!enabled) {
+      generation.current += 1;
+      requested.current = false;
+      return;
+    }
+    if (mutationPending) {
+      generation.current += 1;
+      requested.current = requested.current || inFlight.current !== null;
+      return;
+    }
+    if (!requested.current || inFlight.current !== null) return;
+    const currentGeneration = generation.current;
+    inFlight.current = currentGeneration;
+    requested.current = false;
+    setIsRefreshing(true);
+    try {
+      const result = await refreshRegistryCollections().catch(() => ({
+        status: "error" as const,
+      }));
+      if (mounted.current && currentGeneration === generation.current)
+        onResult(result);
+    } finally {
+      inFlight.current = null;
+      if (mounted.current) {
+        setIsRefreshing(false);
+        if (requested.current) setRequestId((value) => value + 1);
+      }
+    }
+  });
+
+  useEffect(() => {
+    void readCollections();
+  }, [enabled, mutationPending, requestId]);
+
+  const refreshOnFocus = useEffectEvent(() => {
+    if (enabled && document.visibilityState === "visible") requestRefresh();
+  });
+  useEffect(() => {
+    const refresh = () => refreshOnFocus();
+    window.addEventListener("focus", refresh);
+    document.addEventListener("visibilitychange", refresh);
+    return () => {
+      window.removeEventListener("focus", refresh);
+      document.removeEventListener("visibilitychange", refresh);
+    };
+  }, []);
+
+  return { isRefreshing, requestRefresh, invalidateRefresh };
+}
diff --git a/ui/components/roles/workflow/forms/add-role-form.test.tsx b/ui/components/roles/workflow/forms/add-role-form.test.tsx
index 5f285c0c35..13026220cf 100644
--- a/ui/components/roles/workflow/forms/add-role-form.test.tsx
+++ b/ui/components/roles/workflow/forms/add-role-form.test.tsx
@@ -68,6 +68,11 @@ vi.mock("@/lib", () => ({
       description:
         "Allows configuring Lighthouse AI, including its provider credentials, default model and business context",
     },
+    {
+      field: "manage_registry",
+      label: "Manage Registry",
+      description: "Allows managing tenant Registry credentials and artifacts",
+    },
     {
       field: "manage_billing",
       label: "Manage Billing",
@@ -147,9 +152,25 @@ describe("AddRoleForm", () => {
     // Then
     expect(screen.queryByText("Manage Alerts")).not.toBeInTheDocument();
     expect(screen.queryByText("Manage Lighthouse AI")).not.toBeInTheDocument();
+    expect(screen.queryByText("Manage Registry")).not.toBeInTheDocument();
     expect(screen.queryByText("Manage Billing")).not.toBeInTheDocument();
   });
 
+  it("submits manage_registry when granted in Prowler Cloud", async () => {
+    // Given
+    vi.stubEnv("UI_CLOUD_ENABLED", "true");
+    const user = userEvent.setup();
+    render(<AddRoleForm groups={[]} />);
+
+    // When
+    await user.type(screen.getByPlaceholderText("Enter role name"), "New role");
+    await user.click(screen.getByRole("checkbox", { name: "Manage Registry" }));
+    await user.click(screen.getByRole("button", { name: "Add Role" }));
+
+    // Then
+    expect(submittedFormData().get("manage_registry")).toBe("true");
+  });
+
   it("submits manage_lighthouse_ai_configuration when granted in Prowler Cloud", async () => {
     // Given
     vi.stubEnv("UI_CLOUD_ENABLED", "true");
@@ -193,6 +214,7 @@ describe("AddRoleForm", () => {
     expect(submittedFormData().has("manage_lighthouse_ai_configuration")).toBe(
       false,
     );
+    expect(submittedFormData().has("manage_registry")).toBe(false);
   });
 
   it("navigates back to roles when cancel is clicked", async () => {
diff --git a/ui/components/roles/workflow/forms/add-role-form.tsx b/ui/components/roles/workflow/forms/add-role-form.tsx
index 19c19e2d48..95031cfa5e 100644
--- a/ui/components/roles/workflow/forms/add-role-form.tsx
+++ b/ui/components/roles/workflow/forms/add-role-form.tsx
@@ -28,6 +28,7 @@ export const AddRoleForm = ({ groups }: { groups: RoleGroupOption[] }) => {
       manage_billing: false,
       manage_alerts: false,
       manage_lighthouse_ai_configuration: false,
+      manage_registry: false,
     }),
   };
 
@@ -56,6 +57,7 @@ export const AddRoleForm = ({ groups }: { groups: RoleGroupOption[] }) => {
         "manage_lighthouse_ai_configuration",
         String(values.manage_lighthouse_ai_configuration),
       );
+      formData.append("manage_registry", String(values.manage_registry));
     }
 
     if (values.groups && values.groups.length > 0) {
diff --git a/ui/components/roles/workflow/forms/edit-role-form.test.tsx b/ui/components/roles/workflow/forms/edit-role-form.test.tsx
index f5ed520ee0..06d0da7b9c 100644
--- a/ui/components/roles/workflow/forms/edit-role-form.test.tsx
+++ b/ui/components/roles/workflow/forms/edit-role-form.test.tsx
@@ -68,6 +68,11 @@ vi.mock("@/lib", () => ({
       description:
         "Allows configuring Lighthouse AI, including its provider credentials, default model and business context",
     },
+    {
+      field: "manage_registry",
+      label: "Manage Registry",
+      description: "Allows managing tenant Registry credentials and artifacts",
+    },
     {
       field: "manage_billing",
       label: "Manage Billing",
@@ -97,9 +102,11 @@ beforeAll(() => {
 
 const roleData = ({
   manageProviders = false,
+  manageRegistry = false,
   unlimitedVisibility = false,
 }: {
   manageProviders?: boolean;
+  manageRegistry?: boolean;
   unlimitedVisibility?: boolean;
 } = {}) => ({
   data: {
@@ -109,6 +116,7 @@ const roleData = ({
       manage_account: false,
       manage_providers: manageProviders,
       manage_integrations: false,
+      manage_registry: manageRegistry,
       manage_scans: false,
       unlimited_visibility: unlimitedVisibility,
       groups: [],
@@ -139,6 +147,19 @@ describe("EditRoleForm", () => {
     vi.unstubAllEnvs();
   });
 
+  it("retains manage_registry when updating a role in Prowler Cloud", async () => {
+    // Given
+    vi.stubEnv("UI_CLOUD_ENABLED", "true");
+    const user = userEvent.setup();
+    renderEditRoleForm({ manageRegistry: true });
+
+    // When
+    await user.click(screen.getByRole("button", { name: "Update Role" }));
+
+    // Then
+    expect(submittedFormData().get("manage_registry")).toBe("true");
+  });
+
   it("submits manage_lighthouse_ai_configuration when granted in Prowler Cloud", async () => {
     // Given
     vi.stubEnv("UI_CLOUD_ENABLED", "true");
@@ -186,6 +207,7 @@ describe("EditRoleForm", () => {
     expect(submittedFormData().has("manage_lighthouse_ai_configuration")).toBe(
       false,
     );
+    expect(submittedFormData().has("manage_registry")).toBe(false);
   });
 
   it("shows the subtle Unlimited Visibility description inside Visibility", () => {
diff --git a/ui/components/roles/workflow/forms/edit-role-form.tsx b/ui/components/roles/workflow/forms/edit-role-form.tsx
index 2621b3c150..27971e26f8 100644
--- a/ui/components/roles/workflow/forms/edit-role-form.tsx
+++ b/ui/components/roles/workflow/forms/edit-role-form.tsx
@@ -35,6 +35,9 @@ export const EditRoleForm = ({
 
   const defaultValues: DefaultValues<RoleFormValues> = {
     ...roleData.data.attributes,
+    ...(isCloudEnvironment && {
+      manage_registry: roleData.data.attributes.manage_registry ?? false,
+    }),
     groups:
       roleData.data.relationships?.provider_groups?.data.map((g) => g.id) || [],
   };
@@ -62,6 +65,7 @@ export const EditRoleForm = ({
         updatedFields.manage_alerts = values.manage_alerts;
         updatedFields.manage_lighthouse_ai_configuration =
           values.manage_lighthouse_ai_configuration;
+        updatedFields.manage_registry = values.manage_registry;
       }
 
       if (
diff --git a/ui/components/shadcn/toast/Toast.tsx b/ui/components/shadcn/toast/Toast.tsx
index bff6da8e31..00171186e7 100644
--- a/ui/components/shadcn/toast/Toast.tsx
+++ b/ui/components/shadcn/toast/Toast.tsx
@@ -108,7 +108,7 @@ const ToastDescription = React.forwardRef<
   <ToastPrimitives.Description
     ref={ref}
     className={cn(
-      "max-h-48 overflow-x-hidden overflow-y-auto text-sm break-all whitespace-pre-wrap opacity-90",
+      "max-h-48 overflow-x-hidden overflow-y-auto text-sm break-normal wrap-anywhere whitespace-pre-wrap opacity-90",
       className,
     )}
     {...props}
diff --git a/ui/components/shadcn/toast/Toaster.integration.test.tsx b/ui/components/shadcn/toast/Toaster.integration.test.tsx
new file mode 100644
index 0000000000..c52edd4212
--- /dev/null
+++ b/ui/components/shadcn/toast/Toaster.integration.test.tsx
@@ -0,0 +1,66 @@
+import { afterEach, describe, expect, it } from "vitest";
+import { page } from "vitest/browser";
+import { render } from "vitest-browser-react";
+
+import { Toaster } from "./Toaster";
+import { toast } from "./use-toast";
+
+const MESSAGE =
+  "Provider connection failed. Check your credentials and try connecting again.";
+const LONG_URL = `https://example.com/${"provider-identifier".repeat(16)}`;
+const DESCRIPTION = `${MESSAGE}\n${LONG_URL}\nExplicit final line`;
+
+describe("toast text wrapping", () => {
+  afterEach(async () => {
+    await page.viewport(1280, 800);
+  });
+
+  it.each([1280, 393])(
+    "preserves words and contains long URLs at %ipx",
+    async (width) => {
+      // Given
+      await page.viewport(width, 800);
+      toast({
+        title: "Connection test failed",
+        description: DESCRIPTION,
+        duration: Infinity,
+      });
+
+      // When
+      const screen = await render(<Toaster />);
+      const description = screen.getByText(DESCRIPTION, { exact: true });
+      await expect.element(description).toBeVisible();
+      const element = description.element();
+      const text = element.firstChild!;
+      const range = document.createRange();
+
+      // Then: regular words fit on one line rather than breaking mid-word.
+      for (const match of Array.from(MESSAGE.matchAll(/\S+/g))) {
+        range.setStart(text, match.index);
+        range.setEnd(text, match.index + match[0].length);
+        expect(Array.from(range.getClientRects()), match[0]).toHaveLength(1);
+      }
+
+      // Long unbroken strings wrap without clipping or horizontal scrolling.
+      range.setStart(text, MESSAGE.length + 1);
+      range.setEnd(text, MESSAGE.length + 1 + LONG_URL.length);
+      const urlLines = Array.from(range.getClientRects());
+      expect(urlLines.length).toBeGreaterThan(1);
+      const bounds = element.getBoundingClientRect();
+      expect(urlLines.every((line) => line.right <= bounds.right + 1)).toBe(
+        true,
+      );
+      expect(element.scrollWidth).toBeLessThanOrEqual(element.clientWidth);
+
+      // Explicit line breaks are preserved and tall descriptions remain scrollable.
+      range.setStart(text, DESCRIPTION.indexOf("Explicit"));
+      range.setEnd(text, DESCRIPTION.length);
+      expect(range.getBoundingClientRect().top).toBeGreaterThan(
+        urlLines.at(-1)!.top,
+      );
+      expect(getComputedStyle(element).overflowY).toBe("auto");
+      expect(element.clientHeight).toBeLessThanOrEqual(192);
+      await page.screenshot();
+    },
+  );
+});
diff --git a/ui/components/shadcn/toast/Toaster.test.tsx b/ui/components/shadcn/toast/Toaster.test.tsx
index 9ca363271d..3939171b2a 100644
--- a/ui/components/shadcn/toast/Toaster.test.tsx
+++ b/ui/components/shadcn/toast/Toaster.test.tsx
@@ -30,7 +30,8 @@ describe("Toaster", () => {
       "max-h-48",
       "overflow-x-hidden",
       "overflow-y-auto",
-      "break-all",
+      "wrap-anywhere",
+      "break-normal",
       "whitespace-pre-wrap",
     );
     expect(description.parentElement).toHaveClass(
diff --git a/ui/components/shared/task-polling-watcher.tsx b/ui/components/shared/task-polling-watcher.tsx
index 6cbd2fd4d8..dd037f1567 100644
--- a/ui/components/shared/task-polling-watcher.tsx
+++ b/ui/components/shared/task-polling-watcher.tsx
@@ -10,7 +10,11 @@ import {
 } from "@/app/(prowler)/compliance/_lib/cross-provider-pdf";
 import { jiraDispatchTaskHandler } from "@/components/findings/jira-dispatch-task-handler";
 import { integrationConnectionTaskHandler } from "@/components/integrations/integration-connection-task-handler";
+import { registryArtifactTaskHandler } from "@/components/registry/registry-artifact-task-handler";
+import { registryCredentialTaskHandler } from "@/components/registry/registry-credential-task-handler";
 import { useMountEffect } from "@/hooks/use-mount-effect";
+import { REGISTRY_ARTIFACT_TASK_KIND } from "@/lib/registry/artifact-execution";
+import { REGISTRY_CREDENTIAL_TASK_KIND } from "@/lib/registry/credential-task";
 import {
   registerTaskKindHandler,
   resumePendingTasks,
@@ -26,6 +30,14 @@ import {
 registerTaskKindHandler(CROSS_PROVIDER_PDF_TASK_KIND, crossProviderPdfHandler);
 registerTaskKindHandler(CROSS_ACCOUNT_PDF_TASK_KIND, crossAccountPdfHandler);
 registerTaskKindHandler(JIRA_DISPATCH_TASK_KIND, jiraDispatchTaskHandler);
+registerTaskKindHandler(
+  REGISTRY_ARTIFACT_TASK_KIND,
+  registryArtifactTaskHandler,
+);
+registerTaskKindHandler(
+  REGISTRY_CREDENTIAL_TASK_KIND,
+  registryCredentialTaskHandler,
+);
 registerTaskKindHandler(
   INTEGRATION_CONNECTION_TASK_KIND,
   integrationConnectionTaskHandler,
diff --git a/ui/hooks/use-auth.ts b/ui/hooks/use-auth.ts
index 4e5d5ea76c..20bc041f25 100644
--- a/ui/hooks/use-auth.ts
+++ b/ui/hooks/use-auth.ts
@@ -16,6 +16,7 @@ export function useAuth() {
     manage_billing: false,
     manage_alerts: false,
     manage_lighthouse_ai_configuration: false,
+    manage_registry: false,
     unlimited_visibility: false,
   };
 
diff --git a/ui/lib/auth/current-user.test.ts b/ui/lib/auth/current-user.test.ts
new file mode 100644
index 0000000000..4236047bf2
--- /dev/null
+++ b/ui/lib/auth/current-user.test.ts
@@ -0,0 +1,146 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const { fetchMock } = vi.hoisted(() => ({ fetchMock: vi.fn() }));
+vi.mock("@/lib", () => ({ apiBaseUrl: "https://api.example.com/api/v1" }));
+
+import { fetchCurrentUser } from "./current-user";
+
+const role = (manage_registry: unknown) => ({
+  type: "roles",
+  id: "role-1",
+  attributes: { manage_registry },
+});
+const document = (roles: unknown) => ({
+  data: {
+    type: "users",
+    id: "user-1",
+    attributes: { name: "Jane", email: "jane@example.com" },
+  },
+  included: roles,
+});
+const reply = (body: unknown, status = 200) =>
+  new Response(JSON.stringify(body), { status });
+
+describe("fetchCurrentUser", () => {
+  beforeEach(() => vi.stubGlobal("fetch", fetchMock));
+
+  it("accepts one current exact-true role without caching", async () => {
+    // Given
+    fetchMock.mockResolvedValue(reply(document([role(true)])));
+    const controller = new AbortController();
+    // When
+    const result = await fetchCurrentUser("access-token", {
+      signal: controller.signal,
+    });
+    // Then
+    expect(result.manageRegistry).toBe(true);
+    expect(fetchMock).toHaveBeenCalledWith(
+      "https://api.example.com/api/v1/users/me?include=roles",
+      expect.objectContaining({ cache: "no-store", signal: controller.signal }),
+    );
+  });
+
+  it.each([
+    [false, false],
+    [undefined, undefined],
+    ["true", undefined],
+  ])(
+    "keeps only exact boolean authority for %j",
+    async (permission, expected) => {
+      // Given
+      fetchMock.mockResolvedValue(reply(document([role(permission)])));
+      // When / Then
+      await expect(fetchCurrentUser("access-token")).resolves.toMatchObject({
+        manageRegistry: expected,
+        permissions: { manage_registry: permission === true },
+      });
+    },
+  );
+
+  it("combines exact-true permissions from every assigned role", async () => {
+    // Given
+    fetchMock.mockResolvedValue(
+      reply(
+        document([
+          {
+            ...role(false),
+            attributes: {
+              manage_providers: true,
+              manage_scans: false,
+              manage_registry: false,
+              manage_users: "true",
+            },
+          },
+          {
+            ...role(true),
+            id: "role-2",
+            attributes: {
+              manage_providers: false,
+              manage_scans: true,
+              manage_registry: true,
+              manage_users: 1,
+            },
+          },
+        ]),
+      ),
+    );
+
+    // When
+    const result = await fetchCurrentUser("access-token");
+
+    // Then
+    expect(result.permissions).toMatchObject({
+      manage_providers: true,
+      manage_scans: true,
+      manage_registry: true,
+      manage_users: false,
+      manage_account: false,
+    });
+    expect(result.manageRegistry).toBe(true);
+  });
+
+  it.each([
+    { assignments: [true, false], expected: true },
+    { assignments: [true, undefined], expected: true },
+    { assignments: [false, false], expected: false },
+    { assignments: [false, undefined], expected: undefined },
+    { assignments: [false, "true"], expected: undefined },
+  ])(
+    "resolves Registry authority across $assignments",
+    async ({ assignments, expected }) => {
+      // Given
+      fetchMock.mockResolvedValue(
+        reply(
+          document(
+            assignments.map((permission, index) => ({
+              ...role(permission),
+              id: `role-${index}`,
+            })),
+          ),
+        ),
+      );
+
+      // When / Then
+      await expect(fetchCurrentUser("access-token")).resolves.toMatchObject({
+        manageRegistry: expected,
+        permissions: { manage_registry: expected === true },
+      });
+    },
+  );
+
+  it.each([
+    [document([]), 200],
+    [{ data: { type: "users" } }, 200],
+    [document([role(true)]), 401],
+    [document([role(true)]), 403],
+    [document([role(true)]), 500],
+  ])(
+    "rejects absent, malformed, or unsuccessful evidence",
+    async (body, status) => {
+      // Given
+      fetchMock.mockResolvedValue(reply(body, status));
+      // When / Then
+      await expect(fetchCurrentUser("access-token")).rejects.toThrow();
+    },
+  );
+});
diff --git a/ui/lib/auth/current-user.ts b/ui/lib/auth/current-user.ts
new file mode 100644
index 0000000000..cc166187e0
--- /dev/null
+++ b/ui/lib/auth/current-user.ts
@@ -0,0 +1,102 @@
+import { z } from "zod";
+
+import { apiBaseUrl } from "@/lib";
+import { UserMeError } from "@/lib/auth-errors";
+import { PERMISSION_KEY, type RolePermissionAttributes } from "@/types/users";
+
+const currentUserDocumentSchema = z.object({
+  data: z.object({
+    type: z.literal("users"),
+    id: z.string().min(1),
+    attributes: z.object({
+      name: z.string(),
+      email: z.string(),
+      company_name: z.string().optional(),
+      date_joined: z.string().optional(),
+    }),
+  }),
+  included: z.array(
+    z.object({
+      type: z.literal("roles"),
+      id: z.string().min(1),
+      attributes: z.record(z.string(), z.unknown()),
+    }),
+  ),
+});
+
+export interface CurrentUser {
+  name: string;
+  email: string;
+  company?: string;
+  dateJoined?: string;
+  permissions: RolePermissionAttributes;
+  manageRegistry: true | false | undefined;
+}
+
+const toPermissions = (
+  roles: readonly Record<string, unknown>[],
+): RolePermissionAttributes =>
+  Object.fromEntries(
+    Object.values(PERMISSION_KEY).map((key) => [
+      key,
+      roles.some((attributes) => attributes[key] === true),
+    ]),
+  ) as RolePermissionAttributes;
+
+export async function fetchCurrentUser(
+  accessToken: string,
+  options: { signal?: AbortSignal } = {},
+): Promise<CurrentUser> {
+  if (!accessToken.trim()) throw new Error("Current user token is required");
+
+  let response: Response;
+  try {
+    response = await fetch(`${apiBaseUrl}/users/me?include=roles`, {
+      method: "GET",
+      cache: "no-store",
+      signal: options.signal,
+      headers: {
+        Accept: "application/vnd.api+json",
+        Authorization: `Bearer ${accessToken}`,
+      },
+    });
+  } catch {
+    throw new UserMeError("Unable to load user");
+  }
+
+  if (!response.ok) {
+    const message =
+      response.status === 401
+        ? "Invalid or expired token"
+        : response.status === 403
+          ? "Access denied"
+          : response.status === 404
+            ? "User not found"
+            : "Unable to load user";
+    throw new UserMeError(message, response.status);
+  }
+
+  const parsed = currentUserDocumentSchema.safeParse(
+    await response.json().catch(() => undefined),
+  );
+  if (!parsed.success) throw new Error("Malformed current user response");
+
+  const roles = parsed.data.included.map((role) => role.attributes);
+  if (roles.length === 0) {
+    throw new Error("Missing current user role");
+  }
+
+  const permissions = toPermissions(roles);
+  return {
+    name: parsed.data.data.attributes.name,
+    email: parsed.data.data.attributes.email,
+    company: parsed.data.data.attributes.company_name,
+    dateJoined: parsed.data.data.attributes.date_joined,
+    permissions,
+    manageRegistry: permissions.manage_registry
+      ? true
+      : roles.every((attributes) => attributes.manage_registry === false)
+        ? false
+        : undefined,
+  };
+}
diff --git a/ui/lib/csp.ts b/ui/lib/csp.ts
index 77a41c2e3c..8f037482e8 100644
--- a/ui/lib/csp.ts
+++ b/ui/lib/csp.ts
@@ -4,6 +4,7 @@ const POSTHOG_CSP_SOURCE = "https://*.posthog.com";
 
 interface CspOptions {
   cloudEnabled: boolean;
+  registryImageOrigins?: string[];
   posthogEnabled: boolean;
   posthogKey: string | null;
   posthogIngestionHost: string | null;
@@ -33,6 +34,7 @@ const getPosthogToolbarUiSource = (
 
 export function getCspHeader({
   cloudEnabled,
+  registryImageOrigins = [],
   posthogEnabled,
   posthogKey,
   posthogIngestionHost,
@@ -66,7 +68,7 @@ export function getCspHeader({
   default-src 'self';
   script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://www.googletagmanager.com https://browser.sentry-cdn.com${posthogSource}${toolbarUiSource};
   connect-src 'self' https://api.iconify.design https://api.simplesvg.com https://api.unisvg.com https://js.stripe.com https://www.googletagmanager.com https://*.sentry.io https://*.ingest.sentry.io${posthogSource}${toolbarUiSource};
-  img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com${posthogSource}${toolbarUiSource};
+  img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com${registryImageOrigins.map((origin) => ` ${origin}`).join("")}${posthogSource}${toolbarUiSource};
   font-src 'self'${toolbarPosthogSource};
   style-src 'self' 'unsafe-inline'${toolbarPosthogSource};
   ${toolbarMediaSource}
diff --git a/ui/lib/helper.ts b/ui/lib/helper.ts
index 35087a00d9..d62ddaf65a 100644
--- a/ui/lib/helper.ts
+++ b/ui/lib/helper.ts
@@ -475,6 +475,11 @@ export const permissionFormFields: PermissionInfo[] = [
     description:
       "Allows configuring Lighthouse AI, including its provider credentials, default model and business context",
   },
+  {
+    field: "manage_registry",
+    label: "Manage Registry",
+    description: "Allows managing tenant Registry credentials and artifacts",
+  },
 
   {
     field: "manage_billing",
diff --git a/ui/lib/permissions.test.ts b/ui/lib/permissions.test.ts
index e9fb55a236..04f9771572 100644
--- a/ui/lib/permissions.test.ts
+++ b/ui/lib/permissions.test.ts
@@ -13,6 +13,7 @@ const attributes = {
   manage_billing: false,
   manage_alerts: true,
   manage_lighthouse_ai_configuration: true,
+  manage_registry: true,
   unlimited_visibility: false,
 } satisfies RolePermissionAttributes;
 
@@ -21,6 +22,34 @@ describe("getRolePermissions", () => {
     vi.unstubAllEnvs();
   });
 
+  it("includes Manage Registry in Prowler Cloud when role attributes provide it", () => {
+    // Given
+    vi.stubEnv("UI_CLOUD_ENABLED", "true");
+
+    // When
+    const permissions = getRolePermissions(attributes);
+
+    // Then
+    expect(permissions).toContainEqual({
+      key: "manage_registry",
+      label: "Manage Registry",
+      enabled: true,
+    });
+  });
+
+  it("hides Manage Registry outside Prowler Cloud", () => {
+    // Given
+    vi.stubEnv("UI_CLOUD_ENABLED", "false");
+
+    // When
+    const permissions = getRolePermissions(attributes);
+
+    // Then
+    expect(
+      permissions.some((permission) => permission.key === "manage_registry"),
+    ).toBe(false);
+  });
+
   it("includes Manage Alerts in Prowler Cloud when role attributes provide it", () => {
     // Given
     vi.stubEnv("UI_CLOUD_ENABLED", "true");
diff --git a/ui/lib/permissions.ts b/ui/lib/permissions.ts
index 8f641814c1..a155296e54 100644
--- a/ui/lib/permissions.ts
+++ b/ui/lib/permissions.ts
@@ -72,6 +72,11 @@ export const getRolePermissions = (attributes: RolePermissionAttributes) => {
             label: "Manage Lighthouse AI",
             enabled: attributes.manage_lighthouse_ai_configuration ?? false,
           },
+          {
+            key: "manage_registry",
+            label: "Manage Registry",
+            enabled: attributes.manage_registry === true,
+          },
         ]
       : []),
     {
diff --git a/ui/lib/provider-credentials/fixtures/openai-credential-schema.json b/ui/lib/provider-credentials/fixtures/openai-credential-schema.json
new file mode 100644
index 0000000000..7b749bbb7d
--- /dev/null
+++ b/ui/lib/provider-credentials/fixtures/openai-credential-schema.json
@@ -0,0 +1,24 @@
+{
+  "description": "Static OpenAI Administration API credentials.\n\nOne pydantic model per secret type the provider accepts. The docstring\ndocuments the secret type; ``Field(description=...)`` documents each field;\nrequired fields have no default, optional ones use a default. Prowler reads\nthis (via ``OpenAIProvider.get_credentials_schema``) to validate the stored\nsecret and to document its shape.\n\nThe two secret fields are ``organization_id`` and ``platform_api_key``.\n``base_url`` is an optional non-secret override kept here so the credential\nshape stays the single source of truth across the light (API/web) and the\nruntime (worker) sides.",
+  "properties": {
+    "organization_id": {
+      "description": "OpenAI organization ID, e.g. org-xxxxxxxxxxxxxxxx",
+      "title": "Organization Id",
+      "type": "string"
+    },
+    "platform_api_key": {
+      "description": "OpenAI platform (Administration) API key used to read organization users and admin API keys",
+      "title": "Platform Api Key",
+      "type": "string"
+    },
+    "base_url": {
+      "default": "https://api.openai.com/v1",
+      "description": "OpenAI API base URL (defaults to https://api.openai.com/v1)",
+      "title": "Base Url",
+      "type": "string"
+    }
+  },
+  "required": ["organization_id", "platform_api_key"],
+  "title": "OpenAIStaticCredentials",
+  "type": "object"
+}
diff --git a/ui/lib/provider-credentials/fixtures/template-credential-schema.json b/ui/lib/provider-credentials/fixtures/template-credential-schema.json
new file mode 100644
index 0000000000..d6d3abcfe2
--- /dev/null
+++ b/ui/lib/provider-credentials/fixtures/template-credential-schema.json
@@ -0,0 +1,49 @@
+{
+  "description": "API key.\n\nLong-lived key issued from the provider's console.",
+  "properties": {
+    "api_url": {
+      "description": "Base URL of the provider API.",
+      "examples": ["https://api.acme.com"],
+      "title": "API URL",
+      "type": "string"
+    },
+    "api_key": {
+      "description": "Key used to authenticate against the provider API.",
+      "format": "password",
+      "title": "API Key",
+      "type": "string",
+      "writeOnly": true
+    },
+    "ca_bundle": {
+      "default": "",
+      "description": "Certificates of a private authority, in PEM format, for an API whose certificate no public authority signed. Leave empty to use public trust.",
+      "title": "CA Bundle",
+      "type": "string",
+      "x-prowler-widget": "textarea"
+    },
+    "verify_tls": {
+      "default": true,
+      "description": "Whether to verify the API's TLS certificate.",
+      "title": "Verify TLS",
+      "type": "boolean"
+    },
+    "timeout_seconds": {
+      "default": 30,
+      "description": "Seconds to wait for the API before giving up.",
+      "maximum": 300,
+      "minimum": 1,
+      "title": "Timeout",
+      "type": "integer"
+    },
+    "auth_scheme": {
+      "description": "How the key is sent on each request.",
+      "enum": ["bearer", "basic"],
+      "title": "Authentication Scheme",
+      "type": "string",
+      "default": "bearer"
+    }
+  },
+  "required": ["api_url", "api_key"],
+  "title": "TemplateStaticCredentials",
+  "type": "object"
+}
diff --git a/ui/lib/provider-credentials/provider-credential-schema.test.ts b/ui/lib/provider-credentials/provider-credential-schema.test.ts
new file mode 100644
index 0000000000..eac0ac044f
--- /dev/null
+++ b/ui/lib/provider-credentials/provider-credential-schema.test.ts
@@ -0,0 +1,266 @@
+import { describe, expect, it } from "vitest";
+
+import openaiSchema from "./fixtures/openai-credential-schema.json";
+import templateSchema from "./fixtures/template-credential-schema.json";
+import {
+  parseRegistryCredentialSchema,
+  REGISTRY_CREDENTIAL_SCHEMA_LIMITS,
+} from "./provider-credential-schema";
+
+const schema = {
+  type: "object",
+  properties: {
+    api_key: {
+      title: "API Key",
+      description: "The key.",
+      type: "string",
+      format: "password",
+      writeOnly: true,
+    },
+    scheme: {
+      title: "Scheme",
+      type: "string",
+      enum: ["bearer", "basic"],
+      default: "bearer",
+    },
+    notes: {
+      title: "Notes",
+      type: "string",
+      "x-prowler-widget": "textarea",
+      default: "",
+    },
+  },
+  required: ["api_key"],
+};
+
+describe("parseRegistryCredentialSchema", () => {
+  it("accepts the installed Template 0.2.5 schema with typed fields and examples", () => {
+    // Given / When
+    const result = parseRegistryCredentialSchema(templateSchema);
+
+    // Then
+    expect(result?.fields.map(({ name, kind }) => [name, kind])).toEqual([
+      ["api_url", "text"],
+      ["api_key", "password"],
+      ["ca_bundle", "textarea"],
+      ["verify_tls", "checkbox"],
+      ["timeout_seconds", "integer"],
+      ["auth_scheme", "select"],
+    ]);
+    expect(result?.fields[0]).toMatchObject({
+      placeholder: "https://api.acme.com",
+      required: true,
+    });
+    expect(result?.fields[3].defaultValue).toBe(true);
+    expect(result?.fields[4]).toMatchObject({
+      defaultValue: 30,
+      minimum: 1,
+      maximum: 300,
+    });
+  });
+  it.each([
+    "api_key",
+    "platform_api_key",
+    "platform-api-key",
+    "apiKey",
+    "platformApiKey",
+    "platformAPIKey",
+    "API_KEY",
+    "apikey",
+  ])("masks the plain API key field %s without schema annotations", (name) => {
+    // Given / When
+    const result = parseRegistryCredentialSchema({
+      type: "object",
+      properties: { [name]: { type: "string" } },
+    });
+
+    // Then
+    expect(result?.fields[0].kind).toBe("password");
+  });
+
+  it("keeps identifiers and explicitly configured widgets unchanged", () => {
+    // Given / When
+    const result = parseRegistryCredentialSchema({
+      type: "object",
+      properties: {
+        api_key_id: { type: "string" },
+        api_key_url: { type: "string" },
+        selected_api_key: { type: "string", enum: ["primary", "secondary"] },
+        multiline_api_key: { type: "string", "x-prowler-widget": "textarea" },
+      },
+    });
+
+    // Then
+    expect(result?.fields.map(({ kind }) => kind)).toEqual([
+      "text",
+      "text",
+      "select",
+      "textarea",
+    ]);
+  });
+
+  it("accepts the installed OpenAI schema with its full description", () => {
+    // Given / When: the materialized OpenAI 0.1.5 schema contains a long docstring.
+    const result = parseRegistryCredentialSchema(openaiSchema);
+
+    // Then
+    expect(result?.fields.map(({ name }) => name)).toEqual([
+      "organization_id",
+      "platform_api_key",
+      "base_url",
+    ]);
+    expect(result?.fields[2].defaultValue).toBe("https://api.openai.com/v1");
+    expect(result?.fields.map(({ kind }) => kind)).toEqual([
+      "text",
+      "password",
+      "text",
+    ]);
+  });
+
+  it("preserves long field descriptions without treating them as input limits", () => {
+    // Given
+    const description = openaiSchema.description;
+
+    // When
+    const result = parseRegistryCredentialSchema({
+      ...schema,
+      properties: { token: { type: "string", description } },
+      required: ["token"],
+    });
+
+    // Then
+    expect(result?.fields[0].description).toBe(description);
+  });
+
+  it("accepts the observed flat credential schema and preserves property order", () => {
+    // Given
+    const result = parseRegistryCredentialSchema(schema);
+
+    // When / Then
+
+    expect(result?.fields.map(({ name, kind }) => [name, kind])).toEqual([
+      ["api_key", "password"],
+      ["scheme", "select"],
+      ["notes", "textarea"],
+    ]);
+
+    expect(result?.fields[0]).toMatchObject({
+      description: "The key.",
+      label: "API Key",
+      required: true,
+    });
+  });
+
+  it.each([
+    ["$ref", { $ref: "#/$defs/credential" }],
+    ["$defs", { $defs: {} }],
+    ["definitions", { definitions: {} }],
+    ["combinators", { anyOf: [] }],
+    ["additional properties", { additionalProperties: true }],
+  ])("rejects risky root keywords: %s", (_name, keyword) => {
+    expect(parseRegistryCredentialSchema({ ...schema, ...keyword })).toBeNull();
+  });
+
+  it.each([
+    ["nested objects", { type: "object", properties: {} }],
+    ["arrays", { type: "array" }],
+    ["nullable unions", { type: ["string", "null"] }],
+    ["unsupported formats", { type: "string", format: "email" }],
+    ["passwords without writeOnly", { type: "string", format: "password" }],
+    ["maps", { type: "string", additionalProperties: true }],
+  ])("rejects unsupported fields: %s", (_name, apiKey) => {
+    expect(
+      parseRegistryCredentialSchema({
+        ...schema,
+        properties: { ...schema.properties, api_key: apiKey },
+      }),
+    ).toBeNull();
+  });
+
+  it.each([
+    { type: "boolean", default: "true" },
+    { type: "boolean", enum: [true] },
+    { type: "integer", default: "30" },
+    { type: "integer", default: 1.5 },
+    { type: "integer", minimum: 1, default: 0 },
+    { type: "integer", maximum: 300, default: 301 },
+    { type: "integer", minimum: 10, maximum: 1 },
+    { type: "integer", minimum: "1" },
+    { type: "integer", maximum: Infinity },
+    { type: "integer", multipleOf: 5 },
+    { type: "string", examples: "not-an-array" },
+    { type: "string", examples: [{ value: "unexpected" }] },
+  ])(
+    "rejects malformed annotations or unsupported constraints: %j",
+    (property) => {
+      expect(
+        parseRegistryCredentialSchema({
+          type: "object",
+          properties: { field: property },
+        }),
+      ).toBeNull();
+    },
+  );
+
+  it.each([
+    [
+      "invalid defaults",
+      { type: "string", enum: ["bearer", "basic"], default: "token" },
+    ],
+    ["duplicate values", { type: "string", enum: ["bearer", "bearer"] }],
+  ])("rejects enum definitions with %s", (_name, scheme) => {
+    expect(
+      parseRegistryCredentialSchema({
+        ...schema,
+        properties: { ...schema.properties, scheme },
+      }),
+    ).toBeNull();
+  });
+
+  it("rejects unsafe names, invalid required fields, and over-limit metadata", () => {
+    // Given
+
+    const fields = Object.fromEntries(
+      Array.from(
+        { length: REGISTRY_CREDENTIAL_SCHEMA_LIMITS.MAX_FIELDS + 1 },
+        (_, index) => [`field${index}`, { type: "string" }],
+      ),
+    );
+
+    const cases = [
+      { ...schema, required: ["missing"] },
+      { ...schema, description: { invalid: "not text" } },
+      {
+        ...schema,
+        properties: { api_key: { type: "string", description: 123 } },
+      },
+      JSON.parse(
+        '{"type":"object","properties":{"__proto__":{"type":"string"}}}',
+      ),
+      { type: "object", properties: fields },
+      {
+        ...schema,
+        properties: {
+          ...schema.properties,
+          notes: {
+            ...schema.properties.notes,
+            title: "a".repeat(
+              REGISTRY_CREDENTIAL_SCHEMA_LIMITS.MAX_TEXT_LENGTH + 1,
+            ),
+          },
+        },
+      },
+    ];
+
+    // When / Then
+
+    expect(cases.map(parseRegistryCredentialSchema)).toEqual([
+      null,
+      null,
+      null,
+      null,
+      null,
+      null,
+    ]);
+  });
+});
diff --git a/ui/lib/provider-credentials/provider-credential-schema.ts b/ui/lib/provider-credentials/provider-credential-schema.ts
new file mode 100644
index 0000000000..ed1e4ee0e7
--- /dev/null
+++ b/ui/lib/provider-credentials/provider-credential-schema.ts
@@ -0,0 +1,258 @@
+const FIELD_KIND = {
+  TEXT: "text",
+  PASSWORD: "password",
+  SELECT: "select",
+  TEXTAREA: "textarea",
+  CHECKBOX: "checkbox",
+  INTEGER: "integer",
+} as const;
+
+export const REGISTRY_CREDENTIAL_SCHEMA_LIMITS = {
+  MAX_FIELDS: 12,
+  MAX_NAME_LENGTH: 50,
+  MAX_TEXT_LENGTH: 200,
+  MAX_ENUM_OPTIONS: 20,
+} as const;
+
+type FieldKind = (typeof FIELD_KIND)[keyof typeof FIELD_KIND];
+export type RegistryCredentialValue = string | boolean | number;
+
+export interface RegistryCredentialField {
+  readonly name: string;
+  readonly label: string;
+  readonly description?: string;
+  readonly kind: FieldKind;
+  readonly options?: readonly string[];
+  readonly required: boolean;
+  readonly defaultValue?: RegistryCredentialValue;
+  readonly placeholder?: string;
+  readonly minimum?: number;
+  readonly maximum?: number;
+}
+
+export interface RegistryCredentialSchema {
+  readonly fields: readonly RegistryCredentialField[];
+}
+
+const ROOT = new Set("type title description properties required".split(" "));
+const FIELD = new Set(
+  "title description type format writeOnly enum default examples x-prowler-widget".split(
+    " ",
+  ),
+);
+const BOOLEAN_FIELD = new Set("title description type default".split(" "));
+const INTEGER_FIELD = new Set(
+  "title description type default minimum maximum".split(" "),
+);
+const FORBIDDEN_NAMES = new Set(["__proto__", "prototype", "constructor"]);
+const FIELD_NAME = /^[A-Za-z][A-Za-z0-9_-]*$/;
+
+// Some installed artifacts expose API keys as plain strings without secret metadata.
+function isApiKeyField(name: string): boolean {
+  const normalizedName = name
+    .replace(/([A-Z]+)([A-Z][a-z])/g, "$1_$2")
+    .replace(/([a-z0-9])([A-Z])/g, "$1_$2")
+    .replace(/-/g, "_")
+    .toLowerCase();
+  return /(?:^|_)api_?key$/.test(normalizedName);
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return (
+    typeof value === "object" &&
+    value !== null &&
+    !Array.isArray(value) &&
+    Object.getPrototypeOf(value) === Object.prototype
+  );
+}
+
+function isText(value: unknown, allowEmpty = false): value is string {
+  return (
+    typeof value === "string" &&
+    value.length <= REGISTRY_CREDENTIAL_SCHEMA_LIMITS.MAX_TEXT_LENGTH &&
+    (allowEmpty || value.length > 0)
+  );
+}
+
+function hasOnly(
+  record: Record<string, unknown>,
+  allowed: Set<string>,
+): boolean {
+  for (const key in record) {
+    if (Object.hasOwn(record, key) && !allowed.has(key)) return false;
+  }
+  return true;
+}
+
+export function parseRegistryCredentialSchema(
+  value: unknown,
+): RegistryCredentialSchema | null {
+  if (!isRecord(value) || !hasOnly(value, ROOT) || value.type !== "object") {
+    return null;
+  }
+  if (
+    (value.title !== undefined && !isText(value.title)) ||
+    (value.description !== undefined && typeof value.description !== "string")
+  ) {
+    return null;
+  }
+
+  const properties = value.properties;
+  if (!isRecord(properties)) return null;
+  const entries: [string, unknown][] = [];
+  for (const name in properties) {
+    if (!Object.hasOwn(properties, name)) continue;
+    if (entries.length === REGISTRY_CREDENTIAL_SCHEMA_LIMITS.MAX_FIELDS)
+      return null;
+    entries.push([name, properties[name]]);
+  }
+
+  const required = value.required ?? [];
+  if (
+    !Array.isArray(required) ||
+    required.length > entries.length ||
+    !required.every((name) => typeof name === "string")
+  ) {
+    return null;
+  }
+  const requiredNames = new Set(required);
+  if (
+    requiredNames.size !== required.length ||
+    required.some((name) => !Object.hasOwn(properties, name))
+  ) {
+    return null;
+  }
+
+  const fields: RegistryCredentialField[] = [];
+  for (const [name, property] of entries) {
+    if (
+      FORBIDDEN_NAMES.has(name) ||
+      !FIELD_NAME.test(name) ||
+      name.length > REGISTRY_CREDENTIAL_SCHEMA_LIMITS.MAX_NAME_LENGTH ||
+      !isRecord(property)
+    ) {
+      return null;
+    }
+
+    const label = property.title ?? name;
+    const description = property.description;
+    if (
+      !isText(label) ||
+      (description !== undefined && typeof description !== "string")
+    ) {
+      return null;
+    }
+    const baseField = {
+      name,
+      label,
+      ...(description ? { description } : {}),
+      required: requiredNames.has(name),
+    };
+    const defaultValue = property.default;
+    if (property.type === "boolean") {
+      if (
+        !hasOnly(property, BOOLEAN_FIELD) ||
+        (defaultValue !== undefined && typeof defaultValue !== "boolean")
+      ) {
+        return null;
+      }
+      fields.push({
+        ...baseField,
+        kind: FIELD_KIND.CHECKBOX,
+        ...(typeof defaultValue === "boolean" ? { defaultValue } : {}),
+      });
+      continue;
+    }
+    if (property.type === "integer") {
+      const { minimum, maximum } = property;
+      if (
+        !hasOnly(property, INTEGER_FIELD) ||
+        (minimum !== undefined && !Number.isSafeInteger(minimum)) ||
+        (maximum !== undefined && !Number.isSafeInteger(maximum)) ||
+        (typeof minimum === "number" &&
+          typeof maximum === "number" &&
+          minimum > maximum) ||
+        (defaultValue !== undefined &&
+          (typeof defaultValue !== "number" ||
+            !Number.isSafeInteger(defaultValue) ||
+            (typeof minimum === "number" && defaultValue < minimum) ||
+            (typeof maximum === "number" && defaultValue > maximum)))
+      ) {
+        return null;
+      }
+      fields.push({
+        ...baseField,
+        kind: FIELD_KIND.INTEGER,
+        ...(typeof minimum === "number" ? { minimum } : {}),
+        ...(typeof maximum === "number" ? { maximum } : {}),
+        ...(typeof defaultValue === "number" ? { defaultValue } : {}),
+      });
+      continue;
+    }
+    if (property.type !== "string" || !hasOnly(property, FIELD)) return null;
+
+    const format = property.format;
+    const widget = property["x-prowler-widget"];
+    const options = property.enum;
+    const examples = property.examples;
+    const password = format === "password" && property.writeOnly === true;
+    if (
+      ((format !== undefined || property.writeOnly !== undefined) &&
+        !password) ||
+      (widget !== undefined && widget !== "textarea") ||
+      (defaultValue !== undefined && !isText(defaultValue, true)) ||
+      (examples !== undefined &&
+        (!Array.isArray(examples) ||
+          examples.length >
+            REGISTRY_CREDENTIAL_SCHEMA_LIMITS.MAX_ENUM_OPTIONS ||
+          !examples.every((example) => isText(example, true))))
+    ) {
+      return null;
+    }
+
+    if (options !== undefined) {
+      if (
+        format !== undefined ||
+        widget !== undefined ||
+        property.writeOnly !== undefined ||
+        !Array.isArray(options) ||
+        options.length === 0 ||
+        options.length > REGISTRY_CREDENTIAL_SCHEMA_LIMITS.MAX_ENUM_OPTIONS ||
+        !options.every((option) => isText(option)) ||
+        new Set(options).size !== options.length ||
+        (defaultValue !== undefined && !options.includes(defaultValue))
+      ) {
+        return null;
+      }
+      fields.push({
+        ...baseField,
+        kind: FIELD_KIND.SELECT,
+        options,
+        ...(typeof defaultValue === "string" ? { defaultValue } : {}),
+      });
+      continue;
+    }
+
+    if (
+      widget !== undefined &&
+      (format !== undefined || property.writeOnly !== undefined)
+    ) {
+      return null;
+    }
+    fields.push({
+      ...baseField,
+      kind: password
+        ? FIELD_KIND.PASSWORD
+        : widget === "textarea"
+          ? FIELD_KIND.TEXTAREA
+          : isApiKeyField(name)
+            ? FIELD_KIND.PASSWORD
+            : FIELD_KIND.TEXT,
+      ...(Array.isArray(examples) && typeof examples[0] === "string"
+        ? { placeholder: examples[0] }
+        : {}),
+      ...(typeof defaultValue === "string" ? { defaultValue } : {}),
+    });
+  }
+  return { fields };
+}
diff --git a/ui/lib/provider-credentials/provider-credential-values.test.ts b/ui/lib/provider-credentials/provider-credential-values.test.ts
new file mode 100644
index 0000000000..8e646c18d6
--- /dev/null
+++ b/ui/lib/provider-credentials/provider-credential-values.test.ts
@@ -0,0 +1,136 @@
+import { describe, expect, it } from "vitest";
+
+import templateSchema from "./fixtures/template-credential-schema.json";
+import { parseRegistryCredentialSchema } from "./provider-credential-schema";
+import {
+  getCredentialDefaults,
+  validateCredentialValues,
+} from "./provider-credential-values";
+
+const schema = parseRegistryCredentialSchema({
+  type: "object",
+  properties: {
+    token: { type: "string", format: "password", writeOnly: true },
+    region: { type: "string", enum: ["eu", "us"], default: "eu" },
+    notes: { type: "string", "x-prowler-widget": "textarea" },
+  },
+  required: ["token"],
+})!;
+
+describe("dynamic credential validation", () => {
+  const template = () => parseRegistryCredentialSchema(templateSchema)!;
+  const templateValues = {
+    api_url: "https://api.example.test",
+    api_key: "fixture-key-not-a-secret",
+    verify_tls: false,
+    timeout_seconds: "60",
+  };
+
+  it("preserves typed Template defaults and submits booleans and integers", () => {
+    // Given / When / Then
+    expect(getCredentialDefaults(template())).toEqual({
+      ca_bundle: "",
+      verify_tls: true,
+      timeout_seconds: 30,
+      auth_scheme: "bearer",
+    });
+    expect(validateCredentialValues(template(), templateValues)).toEqual({
+      valid: true,
+      secret: { ...templateValues, timeout_seconds: 60 },
+      errors: {},
+    });
+  });
+
+  it.each([1, 300, "1", "300"])("accepts timeout boundary %j", (timeout) => {
+    expect(
+      validateCredentialValues(template(), {
+        ...templateValues,
+        timeout_seconds: timeout,
+      }),
+    ).toMatchObject({
+      valid: true,
+      secret: { timeout_seconds: Number(timeout) },
+    });
+  });
+
+  it.each([
+    0,
+    301,
+    1.5,
+    "1.5",
+    " ",
+    "1second",
+    "0x10",
+    true,
+    null,
+    Infinity,
+    NaN,
+  ])("rejects invalid Template timeouts: %j", (timeout) => {
+    expect(
+      validateCredentialValues(template(), {
+        ...templateValues,
+        timeout_seconds: timeout,
+      }),
+    ).toMatchObject({
+      valid: false,
+      errors: { timeout_seconds: expect.any(String) },
+    });
+  });
+
+  it.each(["true", "false", 0, 1, null])(
+    "rejects non-boolean TLS values: %j",
+    (verifyTls) => {
+      expect(
+        validateCredentialValues(template(), {
+          ...templateValues,
+          verify_tls: verifyTls,
+        }),
+      ).toMatchObject({
+        valid: false,
+        errors: { verify_tls: expect.any(String) },
+      });
+    },
+  );
+
+  it("accepts false and zero for required fields without treating them as missing", () => {
+    const requiredSchema = parseRegistryCredentialSchema({
+      type: "object",
+      properties: {
+        enabled: { type: "boolean" },
+        retries: { type: "integer" },
+      },
+      required: ["enabled", "retries"],
+    })!;
+    expect(getCredentialDefaults(requiredSchema)).toEqual({ enabled: false });
+    expect(
+      validateCredentialValues(requiredSchema, { enabled: false, retries: 0 }),
+    ).toEqual({
+      valid: true,
+      secret: { enabled: false, retries: 0 },
+      errors: {},
+    });
+    expect(validateCredentialValues(requiredSchema, {})).toMatchObject({
+      valid: false,
+      errors: { enabled: expect.any(String), retries: expect.any(String) },
+    });
+  });
+  it("uses declared defaults and preserves credential bytes", () => {
+    expect(getCredentialDefaults(schema)).toEqual({ region: "eu" });
+    expect(
+      validateCredentialValues(schema, { token: " secret ", region: "eu" }),
+    ).toEqual({
+      valid: true,
+      secret: { token: " secret ", region: "eu" },
+      errors: {},
+    });
+  });
+  it.each([
+    {},
+    { token: "" },
+    { token: "secret", region: "invalid" },
+    { token: 12 },
+    { token: "secret", extra: "hidden" },
+  ])("rejects invalid or undeclared values: %j", (values) => {
+    expect(validateCredentialValues(schema, values).valid).toBe(false);
+  });
+});
diff --git a/ui/lib/provider-credentials/provider-credential-values.ts b/ui/lib/provider-credentials/provider-credential-values.ts
new file mode 100644
index 0000000000..6673adf9ea
--- /dev/null
+++ b/ui/lib/provider-credentials/provider-credential-values.ts
@@ -0,0 +1,85 @@
+import type {
+  RegistryCredentialSchema,
+  RegistryCredentialValue,
+} from "./provider-credential-schema";
+
+export function getCredentialDefaults(
+  schema: RegistryCredentialSchema,
+): Record<string, RegistryCredentialValue> {
+  return Object.fromEntries(
+    schema.fields.flatMap((field) =>
+      field.defaultValue !== undefined
+        ? [[field.name, field.defaultValue]]
+        : field.kind === "checkbox" && field.required
+          ? [[field.name, false]]
+          : [],
+    ),
+  );
+}
+
+export function validateCredentialValues(
+  schema: RegistryCredentialSchema,
+  values: unknown,
+):
+  | {
+      valid: true;
+      secret: Record<string, RegistryCredentialValue>;
+      errors: Record<string, string>;
+    }
+  | { valid: false; errors: Record<string, string> } {
+  if (!values || typeof values !== "object" || Array.isArray(values))
+    return {
+      valid: false,
+      errors: { _form: "Enter the required credentials." },
+    };
+  const entries = Object.entries(values);
+  if (
+    entries.some(
+      ([name]) => !schema.fields.some((field) => field.name === name),
+    )
+  )
+    return {
+      valid: false,
+      errors: { _form: "The credential fields have changed. Reload the form." },
+    };
+  const fields = new Map(entries);
+  const errors: Record<string, string> = {};
+  const secret: Record<string, RegistryCredentialValue> = {};
+  for (const field of schema.fields) {
+    const value = fields.get(field.name);
+    if (value === undefined || (value === "" && field.kind !== "checkbox")) {
+      if (field.required) errors[field.name] = `${field.label} is required`;
+    } else if (field.kind === "checkbox") {
+      if (typeof value !== "boolean") {
+        errors[field.name] = `Enter a valid ${field.label}`;
+      } else {
+        secret[field.name] = value;
+      }
+    } else if (field.kind === "integer") {
+      const number =
+        typeof value === "string" && /^[+-]?\d+$/.test(value)
+          ? Number(value)
+          : value;
+      if (
+        typeof number !== "number" ||
+        !Number.isSafeInteger(number) ||
+        (field.minimum !== undefined && number < field.minimum) ||
+        (field.maximum !== undefined && number > field.maximum)
+      ) {
+        errors[field.name] = `Enter a valid ${field.label}`;
+      } else {
+        secret[field.name] = number;
+      }
+    } else if (
+      typeof value !== "string" ||
+      (field.options && !field.options.includes(value))
+    ) {
+      errors[field.name] = `Enter a valid ${field.label}`;
+    } else {
+      secret[field.name] = value;
+    }
+  }
+  return Object.keys(errors).length > 0
+    ? { valid: false, errors }
+    : { valid: true, secret, errors };
+}
diff --git a/ui/lib/provider-helpers.test.ts b/ui/lib/provider-helpers.test.ts
new file mode 100644
index 0000000000..8efba9ac80
--- /dev/null
+++ b/ui/lib/provider-helpers.test.ts
@@ -0,0 +1,36 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const { checkConnectionProvider, checkTaskStatus } = vi.hoisted(() => ({
+  checkConnectionProvider: vi.fn(),
+  checkTaskStatus: vi.fn(),
+}));
+vi.mock("@/actions/providers/providers", () => ({ checkConnectionProvider }));
+vi.mock("./helper", () => ({ checkTaskStatus }));
+
+import { testProviderConnection } from "./provider-helpers";
+
+describe("provider connection confirmation", () => {
+  beforeEach(() => {
+    checkConnectionProvider.mockResolvedValue({ data: { id: "task" } });
+  });
+  it.each([undefined, {}, { connected: "true" }, { connected: false }])(
+    "does not advance without explicit connected=true: %j",
+    async (result) => {
+      checkTaskStatus.mockResolvedValue({
+        completed: true,
+        task: { data: { attributes: { result } } },
+      });
+      expect((await testProviderConnection("account")).connected).toBe(false);
+    },
+  );
+  it("advances on an explicitly successful connection", async () => {
+    checkTaskStatus.mockResolvedValue({
+      completed: true,
+      task: { data: { attributes: { result: { connected: true } } } },
+    });
+    expect(await testProviderConnection("account")).toEqual({
+      connected: true,
+      error: null,
+    });
+  });
+});
diff --git a/ui/lib/provider-helpers.ts b/ui/lib/provider-helpers.ts
index 3faf8e2058..329833f384 100644
--- a/ui/lib/provider-helpers.ts
+++ b/ui/lib/provider-helpers.ts
@@ -212,14 +212,15 @@ export async function testProviderConnection(
     };
   }
 
-  // Read from the task the poller already fetched. A completed task with no
-  // readable `connected` counts as connected, as in the batched poller.
+  // Task completion alone does not confirm that the credentials connected.
   const result = taskResult.task?.data?.attributes?.result;
-  const connected =
-    typeof result?.connected === "boolean" ? result.connected : true;
+  const connected = result?.connected === true;
 
   return {
     connected,
-    error: connected ? null : result?.error || "Unknown error",
+    error: connected
+      ? null
+      : result?.error ||
+        "Connection was not confirmed. Test the connection again.",
   };
 }
diff --git a/ui/lib/registry/access.server.test.ts b/ui/lib/registry/access.server.test.ts
new file mode 100644
index 0000000000..1e3d133faa
--- /dev/null
+++ b/ui/lib/registry/access.server.test.ts
@@ -0,0 +1,177 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const { fetchCurrentUserMock } = vi.hoisted(() => ({
+  fetchCurrentUserMock: vi.fn(),
+}));
+vi.mock("server-only", () => ({}));
+vi.mock("@/lib/auth/current-user", () => ({
+  fetchCurrentUser: fetchCurrentUserMock,
+}));
+
+import { REGISTRY_ACCESS } from "./access";
+import {
+  evaluateRegistryAccess,
+  evaluateRegistryProviderAccess,
+} from "./access.server";
+
+describe("Registry provider onboarding access", () => {
+  beforeEach(() => {
+    vi.stubEnv("UI_CLOUD_ENABLED", "true");
+    vi.stubEnv("UI_REGISTRY_ENABLED", "true");
+  });
+
+  it.each([false, undefined])(
+    "allows provider managers without Registry permission (%s)",
+    async (manageRegistry) => {
+      // Given
+      fetchCurrentUserMock.mockResolvedValue({
+        manageRegistry,
+        permissions: { manage_providers: true },
+      });
+      // When / Then
+      await expect(
+        evaluateRegistryProviderAccess("access-token"),
+      ).resolves.toEqual({
+        status: REGISTRY_ACCESS.ELIGIBLE,
+      });
+      await expect(evaluateRegistryAccess("access-token")).resolves.not.toEqual(
+        {
+          status: REGISTRY_ACCESS.ELIGIBLE,
+        },
+      );
+    },
+  );
+
+  it("denies onboarding to a Registry manager without manage_providers", async () => {
+    // Given
+    fetchCurrentUserMock.mockResolvedValue({
+      manageRegistry: true,
+      permissions: { manage_providers: false },
+    });
+    // When / Then
+    await expect(
+      evaluateRegistryProviderAccess("access-token"),
+    ).resolves.toEqual({
+      status: REGISTRY_ACCESS.INELIGIBLE,
+    });
+    await expect(evaluateRegistryAccess("access-token")).resolves.toEqual({
+      status: REGISTRY_ACCESS.ELIGIBLE,
+    });
+  });
+
+  it.each([
+    ["false", "true", "access-token"],
+    ["true", "false", "access-token"],
+    ["true", "true", ""],
+  ])(
+    "requires enabled flags and a token: %j / %j / %j",
+    async (cloud, flag, token) => {
+      // Given
+      vi.stubEnv("UI_CLOUD_ENABLED", cloud);
+      vi.stubEnv("UI_REGISTRY_ENABLED", flag);
+      // When / Then
+      await expect(evaluateRegistryProviderAccess(token)).resolves.toEqual({
+        status: REGISTRY_ACCESS.INELIGIBLE,
+      });
+      expect(fetchCurrentUserMock).not.toHaveBeenCalled();
+    },
+  );
+
+  it("checks current provider permission again after revocation", async () => {
+    // Given
+    fetchCurrentUserMock
+      .mockResolvedValueOnce({ permissions: { manage_providers: true } })
+      .mockResolvedValueOnce({ permissions: { manage_providers: false } });
+    // When / Then
+    await expect(
+      evaluateRegistryProviderAccess("access-token"),
+    ).resolves.toEqual({
+      status: REGISTRY_ACCESS.ELIGIBLE,
+    });
+    await expect(
+      evaluateRegistryProviderAccess("access-token"),
+    ).resolves.toEqual({
+      status: REGISTRY_ACCESS.INELIGIBLE,
+    });
+  });
+});
+
+describe("evaluateRegistryAccess", () => {
+  beforeEach(() => {
+    vi.stubEnv("UI_CLOUD_ENABLED", "true");
+    vi.stubEnv("UI_REGISTRY_ENABLED", "true");
+    fetchCurrentUserMock.mockResolvedValue({ manageRegistry: true });
+  });
+
+  it("allows a fresh exact-true current permission without lease metadata", async () => {
+    // Given / When
+    const result = await evaluateRegistryAccess("access-token");
+    // Then
+    expect(result).toStrictEqual({ status: REGISTRY_ACCESS.ELIGIBLE });
+  });
+
+  it.each([
+    [undefined, "true", "access-token", true, REGISTRY_ACCESS.INELIGIBLE, 0],
+    ["true", "false", "access-token", true, REGISTRY_ACCESS.INELIGIBLE, 0],
+    ["true", "true", "access-token", false, REGISTRY_ACCESS.INELIGIBLE, 1],
+    ["true", "true", "access-token", undefined, REGISTRY_ACCESS.UNKNOWN, 1],
+    ["true", "true", "", true, REGISTRY_ACCESS.INELIGIBLE, 0],
+  ])(
+    "fails closed without trusting stale JWT authority",
+    async (cloud, flag, token, permission, expected, calls) => {
+      // Given
+      vi.stubEnv("UI_CLOUD_ENABLED", cloud);
+      vi.stubEnv("UI_REGISTRY_ENABLED", flag);
+      fetchCurrentUserMock.mockResolvedValue({ manageRegistry: permission });
+      // When / Then
+      await expect(evaluateRegistryAccess(token)).resolves.toMatchObject({
+        status: expected,
+      });
+      expect(fetchCurrentUserMock).toHaveBeenCalledTimes(calls);
+    },
+  );
+
+  it.each([
+    [" true ", "true"],
+    ["true", " true "],
+    ["\ttrue\n", "\ttrue\n"],
+  ])(
+    "accepts whitespace around enabled flags: %j / %j",
+    async (cloud, flag) => {
+      // Given
+      vi.stubEnv("UI_CLOUD_ENABLED", cloud);
+      vi.stubEnv("UI_REGISTRY_ENABLED", flag);
+      // When / Then
+      await expect(evaluateRegistryAccess("access-token")).resolves.toEqual({
+        status: REGISTRY_ACCESS.ELIGIBLE,
+      });
+    },
+  );
+
+  it("returns unknown for malformed, network, abort, and timeout evidence", async () => {
+    // Given
+    fetchCurrentUserMock
+      .mockResolvedValueOnce({ manageRegistry: undefined })
+      .mockRejectedValueOnce(new Error("network"))
+      .mockRejectedValueOnce(new DOMException("aborted", "AbortError"))
+      .mockImplementationOnce(
+        (_token, { signal }) =>
+          new Promise((_, reject) => signal.addEventListener("abort", reject)),
+      );
+    // When / Then
+    const expectUnknown = () =>
+      expect(evaluateRegistryAccess("access-token")).resolves.toMatchObject({
+        status: REGISTRY_ACCESS.UNKNOWN,
+      });
+    await expectUnknown();
+    await expectUnknown();
+    await expectUnknown();
+    vi.useFakeTimers();
+    const result = evaluateRegistryAccess("access-token");
+    await vi.advanceTimersByTimeAsync(5_000);
+    await expect(result).resolves.toMatchObject({
+      status: REGISTRY_ACCESS.UNKNOWN,
+    });
+    vi.useRealTimers();
+  });
+});
diff --git a/ui/lib/registry/access.server.ts b/ui/lib/registry/access.server.ts
new file mode 100644
index 0000000000..ba4cd6ff56
--- /dev/null
+++ b/ui/lib/registry/access.server.ts
@@ -0,0 +1,61 @@
+import "server-only";
+
+import { fetchCurrentUser, type CurrentUser } from "@/lib/auth/current-user";
+import { readBoolEnv } from "@/lib/runtime-env";
+
+import {
+  isRegistryEligible,
+  REGISTRY_ACCESS,
+  type RegistryAccessResult,
+} from "./access";
+
+const CURRENT_USER_TIMEOUT_MS = 5_000;
+
+const hasEnabledProcessFlags = () =>
+  readBoolEnv("UI_CLOUD_ENABLED") && readBoolEnv("UI_REGISTRY_ENABLED");
+
+export async function evaluateRegistryAccess(
+  accessToken?: string | null,
+): Promise<RegistryAccessResult> {
+  return evaluatePermission(accessToken, (user) => user.manageRegistry);
+}
+
+export async function evaluateRegistryProviderAccess(
+  accessToken?: string | null,
+): Promise<RegistryAccessResult> {
+  return evaluatePermission(
+    accessToken,
+    (user) => user.permissions.manage_providers,
+  );
+}
+
+async function evaluatePermission(
+  accessToken: string | null | undefined,
+  readPermission: (user: CurrentUser) => boolean | undefined,
+): Promise<RegistryAccessResult> {
+  if (!hasEnabledProcessFlags() || !accessToken?.trim()) {
+    return { status: REGISTRY_ACCESS.INELIGIBLE };
+  }
+
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), CURRENT_USER_TIMEOUT_MS);
+
+  try {
+    const currentUser = await fetchCurrentUser(accessToken, {
+      signal: controller.signal,
+    });
+    const permission = readPermission(currentUser);
+    if (permission === undefined) {
+      return { status: REGISTRY_ACCESS.UNKNOWN };
+    }
+    return {
+      status: isRegistryEligible(true, true, permission)
+        ? REGISTRY_ACCESS.ELIGIBLE
+        : REGISTRY_ACCESS.INELIGIBLE,
+    };
+  } catch {
+    return { status: REGISTRY_ACCESS.UNKNOWN };
+  } finally {
+    clearTimeout(timeout);
+  }
+}
diff --git a/ui/lib/registry/access.test.ts b/ui/lib/registry/access.test.ts
new file mode 100644
index 0000000000..98213acc07
--- /dev/null
+++ b/ui/lib/registry/access.test.ts
@@ -0,0 +1,18 @@
+import { describe, expect, it } from "vitest";
+
+import { isRegistryEligible } from "./access";
+describe("Registry access", () => {
+  it.each([
+    [true, true, true, true],
+    [false, true, true, false],
+    [true, false, true, false],
+    [true, true, false, false],
+    [true, true, undefined, false],
+    [true, true, "true", false],
+  ])(
+    "allows only exact current authority",
+    (cloud, flag, permission, expected) => {
+      expect(isRegistryEligible(cloud, flag, permission)).toBe(expected);
+    },
+  );
+});
diff --git a/ui/lib/registry/access.ts b/ui/lib/registry/access.ts
new file mode 100644
index 0000000000..13cc07b6d1
--- /dev/null
+++ b/ui/lib/registry/access.ts
@@ -0,0 +1,19 @@
+export const REGISTRY_ACCESS = {
+  ELIGIBLE: "eligible",
+  INELIGIBLE: "ineligible",
+  UNKNOWN: "unknown",
+} as const;
+
+export type RegistryAccessStatus =
+  (typeof REGISTRY_ACCESS)[keyof typeof REGISTRY_ACCESS];
+
+export interface RegistryAccessResult {
+  status: RegistryAccessStatus;
+}
+
+export const isRegistryEligible = (
+  cloudEnabled: unknown,
+  registryEnabled: unknown,
+  manageRegistry: unknown,
+) =>
+  cloudEnabled === true && registryEnabled === true && manageRegistry === true;
diff --git a/ui/lib/registry/artifact-execution.test.ts b/ui/lib/registry/artifact-execution.test.ts
new file mode 100644
index 0000000000..c1ab275c04
--- /dev/null
+++ b/ui/lib/registry/artifact-execution.test.ts
@@ -0,0 +1,186 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+import { executeRegistryArtifactAddition } from "./artifact-execution";
+
+const {
+  addRegistryArtifactMock,
+  confirmRegistryArtifactAdditionMock,
+  trackAndPollTaskMock,
+} = vi.hoisted(() => ({
+  addRegistryArtifactMock: vi.fn(),
+  confirmRegistryArtifactAdditionMock: vi.fn(),
+  trackAndPollTaskMock: vi.fn(),
+}));
+
+vi.mock("@/actions/registry/registry", () => ({
+  addRegistryArtifact: addRegistryArtifactMock,
+  confirmRegistryArtifactAddition: confirmRegistryArtifactAdditionMock,
+}));
+
+vi.mock("@/store/task-watcher/store", () => ({
+  TASK_WATCHER_STATUS: { READY: "ready", ERROR: "error" },
+  trackAndPollTask: trackAndPollTaskMock,
+}));
+
+const artifactInput = { normalizedName: "prowler-aws", versionSpec: "2.0.0" };
+
+describe("executeRegistryArtifactAddition", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    addRegistryArtifactMock.mockResolvedValue({
+      status: "submitted",
+      taskId: "artifact-task",
+    });
+    trackAndPollTaskMock.mockResolvedValue({
+      status: "ready",
+      result: { installed: true, error: null },
+    });
+    confirmRegistryArtifactAdditionMock.mockResolvedValue({
+      status: "confirmed",
+      tenantArtifacts: [],
+    });
+  });
+
+  it("persists an update target and confirms that version after the task completes", async () => {
+    // Given / When
+    await executeRegistryArtifactAddition({
+      ...artifactInput,
+      operation: "update",
+    });
+    // Then
+    expect(trackAndPollTaskMock).toHaveBeenCalledWith(
+      expect.objectContaining({
+        meta: {
+          normalizedName: "prowler-aws",
+          operation: "update",
+          expectedVersion: "2.0.0",
+        },
+      }),
+    );
+    expect(confirmRegistryArtifactAdditionMock).toHaveBeenCalledWith(
+      "prowler-aws",
+      "2.0.0",
+    );
+  });
+
+  it.each([
+    [
+      "This version cannot be installed.",
+      "The artifact could not be installed.",
+    ],
+    [
+      "Private diagnostic: /srv/registry/customer",
+      "The artifact could not be installed.",
+    ],
+    [null, "The artifact could not be installed."],
+    ["", "The artifact could not be installed."],
+    ["   ", "The artifact could not be installed."],
+  ])(
+    "returns a safe task refusal for error %j without confirmation",
+    async (error, message) => {
+      // Given
+      trackAndPollTaskMock.mockResolvedValue({
+        status: "ready",
+        result: { installed: false, error },
+      });
+      // When
+      const outcome = await executeRegistryArtifactAddition(artifactInput);
+      // Then
+      expect(outcome).toEqual({ status: "refused", message });
+      expect(confirmRegistryArtifactAdditionMock).not.toHaveBeenCalled();
+    },
+  );
+
+  it.each([
+    [
+      "an otherwise valid result with an extra field",
+      { installed: true, error: null, reason: "private deployment detail" },
+    ],
+    [
+      "an installed result with an error",
+      { installed: true, error: "unexpected failure" },
+    ],
+  ])("returns error for %s without confirmation", async (_case, result) => {
+    // Given
+    trackAndPollTaskMock.mockResolvedValue({ status: "ready", result });
+    // When
+    const outcome = await executeRegistryArtifactAddition(artifactInput);
+    // Then
+    expect(outcome).toEqual({ status: "error" });
+    expect(confirmRegistryArtifactAdditionMock).not.toHaveBeenCalled();
+  });
+
+  it("maps failed tasks to unavailable without confirmation", async () => {
+    // Given
+    trackAndPollTaskMock.mockResolvedValue({
+      status: "error",
+      error: "failed",
+    });
+    // When
+    const outcome = await executeRegistryArtifactAddition(artifactInput);
+    // Then
+    expect(outcome).toEqual({ status: "unavailable" });
+    expect(confirmRegistryArtifactAdditionMock).not.toHaveBeenCalled();
+  });
+
+  it("uses the error catch when polling throws", async () => {
+    // Given
+    trackAndPollTaskMock.mockRejectedValue(new Error("watcher crashed"));
+    // When
+    const outcome = await executeRegistryArtifactAddition(artifactInput);
+    // Then
+    expect(outcome).toEqual({ status: "error" });
+    expect(confirmRegistryArtifactAdditionMock).not.toHaveBeenCalled();
+  });
+
+  it("does not poll a synchronous 409 onboarding outcome", async () => {
+    // Given
+    addRegistryArtifactMock.mockResolvedValue({ status: "onboarding" });
+    // When
+    const outcome = await executeRegistryArtifactAddition(artifactInput);
+    // Then
+    expect(outcome).toEqual({ status: "onboarding" });
+    expect(confirmRegistryArtifactAdditionMock).not.toHaveBeenCalled();
+    expect(trackAndPollTaskMock).not.toHaveBeenCalled();
+  });
+
+  it("confirms presence after a completed installed task", async () => {
+    // Given
+    // When
+    const outcome = await executeRegistryArtifactAddition(artifactInput);
+    // Then
+    expect(outcome).toEqual({ status: "confirmed", tenantArtifacts: [] });
+    expect(trackAndPollTaskMock).toHaveBeenCalledWith({
+      taskId: "artifact-task",
+      kind: "registry-artifact-add",
+      meta: { normalizedName: "prowler-aws" },
+      notifyHandler: false,
+    });
+    expect(confirmRegistryArtifactAdditionMock).toHaveBeenCalledOnce();
+    expect(confirmRegistryArtifactAdditionMock).toHaveBeenCalledWith(
+      "prowler-aws",
+    );
+  });
+  it("deduplicates concurrent submissions for the same artifact", async () => {
+    await Promise.all([
+      executeRegistryArtifactAddition(artifactInput),
+      executeRegistryArtifactAddition(artifactInput),
+    ]);
+    expect(addRegistryArtifactMock).toHaveBeenCalledOnce();
+    expect(confirmRegistryArtifactAdditionMock).toHaveBeenCalledOnce();
+  });
+
+  it("reports an unconfirmed update if the confirmation request throws", async () => {
+    // Given
+    confirmRegistryArtifactAdditionMock.mockRejectedValue(
+      new Error("Network failure"),
+    );
+    // When
+    const result = await executeRegistryArtifactAddition({
+      ...artifactInput,
+      operation: "update",
+    });
+    // Then
+    expect(result).toEqual({ status: "refresh_failed" });
+  });
+});
diff --git a/ui/lib/registry/artifact-execution.ts b/ui/lib/registry/artifact-execution.ts
new file mode 100644
index 0000000000..6c08f78e02
--- /dev/null
+++ b/ui/lib/registry/artifact-execution.ts
@@ -0,0 +1,122 @@
+import { z } from "zod";
+
+import {
+  addRegistryArtifact,
+  confirmRegistryArtifactAddition,
+} from "@/actions/registry/registry";
+import { notifyRegistryArtifactOutcome } from "@/lib/registry/artifact-notifications";
+import {
+  TASK_WATCHER_STATUS,
+  trackAndPollTask,
+} from "@/store/task-watcher/store";
+import {
+  REGISTRY_ARTIFACT_ACTION,
+  REGISTRY_FAILURE,
+  REGISTRY_INSTALL_OPERATION,
+  REGISTRY_MUTATION,
+  type RegistryArtifactExecutionInput,
+  type RegistryArtifactTaskResult,
+  type RegistryMutationResult,
+} from "@/types/registry";
+
+export const REGISTRY_ARTIFACT_TASK_KIND = "registry-artifact-add";
+
+const artifactTaskResultSchema = z
+  .object({ installed: z.boolean(), error: z.string().nullable() })
+  .strict();
+
+async function runRegistryArtifactAddition(
+  input: RegistryArtifactExecutionInput,
+): Promise<RegistryMutationResult> {
+  const expectedVersion =
+    input.operation === REGISTRY_INSTALL_OPERATION.UPDATE
+      ? input.versionSpec.trim()
+      : undefined;
+  if (expectedVersion === "") return { status: REGISTRY_FAILURE.ERROR };
+  let submitted;
+  try {
+    submitted = await addRegistryArtifact(input);
+  } catch {
+    return { status: REGISTRY_FAILURE.ERROR };
+  }
+  if (submitted.status !== REGISTRY_ARTIFACT_ACTION.SUBMITTED) {
+    return submitted;
+  }
+
+  let tracked;
+  try {
+    tracked = await trackAndPollTask<RegistryArtifactTaskResult>({
+      taskId: submitted.taskId,
+      kind: REGISTRY_ARTIFACT_TASK_KIND,
+      meta: {
+        normalizedName: input.normalizedName,
+        ...(expectedVersion
+          ? { operation: REGISTRY_INSTALL_OPERATION.UPDATE, expectedVersion }
+          : {}),
+      },
+      notifyHandler: false,
+    });
+  } catch {
+    return { status: REGISTRY_FAILURE.ERROR };
+  }
+  if (tracked.status !== TASK_WATCHER_STATUS.READY) {
+    return { status: REGISTRY_FAILURE.UNAVAILABLE };
+  }
+
+  return confirmRegistryArtifactTask(
+    input.normalizedName,
+    tracked.result,
+    expectedVersion,
+  );
+}
+
+export async function confirmRegistryArtifactTask(
+  normalizedName: string,
+  taskResult: unknown,
+  expectedVersion?: string,
+): Promise<RegistryMutationResult> {
+  const result = artifactTaskResultSchema.safeParse(taskResult);
+  if (
+    !result.success ||
+    (result.data.installed && result.data.error !== null)
+  ) {
+    return { status: REGISTRY_FAILURE.ERROR };
+  }
+  if (!result.data.installed) {
+    return {
+      status: REGISTRY_MUTATION.REFUSED,
+      // Task errors are backend diagnostics, not user-facing refusal codes.
+      message: "The artifact could not be installed.",
+    };
+  }
+
+  try {
+    return await (expectedVersion === undefined
+      ? confirmRegistryArtifactAddition(normalizedName)
+      : confirmRegistryArtifactAddition(normalizedName, expectedVersion));
+  } catch {
+    return {
+      status:
+        expectedVersion === undefined
+          ? REGISTRY_FAILURE.ERROR
+          : REGISTRY_MUTATION.REFRESH_FAILED,
+    };
+  }
+}
+
+const installations = new Map<string, Promise<RegistryMutationResult>>();
+
+export function executeRegistryArtifactAddition(
+  input: RegistryArtifactExecutionInput,
+): Promise<RegistryMutationResult> {
+  const pending = installations.get(input.normalizedName);
+  if (pending) return pending;
+  const execution = runRegistryArtifactAddition(input)
+    .then((result) => {
+      notifyRegistryArtifactOutcome(result, input.operation);
+      return result;
+    })
+    .finally(() => installations.delete(input.normalizedName));
+  installations.set(input.normalizedName, execution);
+  return execution;
+}
diff --git a/ui/lib/registry/artifact-notifications.tsx b/ui/lib/registry/artifact-notifications.tsx
new file mode 100644
index 0000000000..5a568ce29e
--- /dev/null
+++ b/ui/lib/registry/artifact-notifications.tsx
@@ -0,0 +1,45 @@
+import Link from "next/link";
+
+import { toast, ToastAction } from "@/components/shadcn/toast";
+import {
+  REGISTRY_INSTALL_OPERATION,
+  type RegistryInstallOperation,
+  type RegistryMutationResult,
+} from "@/types/registry";
+
+export function notifyRegistryArtifactOutcome(
+  result: RegistryMutationResult,
+  operation: RegistryInstallOperation = REGISTRY_INSTALL_OPERATION.ADD,
+): void {
+  const isUpdate = operation === REGISTRY_INSTALL_OPERATION.UPDATE;
+  if (result.status === "confirmed") {
+    toast({
+      title: isUpdate ? "Artifact updated" : "Artifact added",
+      action: (
+        <ToastAction altText="Go to Providers" asChild>
+          <Link href="/providers">Go to Providers</Link>
+        </ToastAction>
+      ),
+    });
+    window.dispatchEvent(
+      new CustomEvent("registry-artifacts-changed", {
+        detail: result.tenantArtifacts,
+      }),
+    );
+  } else {
+    toast({
+      variant: "destructive",
+      title: isUpdate
+        ? "Artifact could not be updated"
+        : "Artifact could not be added",
+      description:
+        result.status === "refused"
+          ? result.message
+          : result.status === "refresh_failed"
+            ? isUpdate
+              ? "Update could not be confirmed. Refresh Registry before retrying."
+              : "Installation could not be confirmed. Refresh Registry before retrying."
+            : "Check the Registry connection and try again.",
+    });
+  }
+}
diff --git a/ui/lib/registry/artifacts.ts b/ui/lib/registry/artifacts.ts
new file mode 100644
index 0000000000..68078ce8b8
--- /dev/null
+++ b/ui/lib/registry/artifacts.ts
@@ -0,0 +1,8 @@
+import type { RegistryCatalogArtifact } from "@/types/registry";
+
+/** Installation eligibility comes from catalog capabilities, never the package name. */
+export function isRegistryArtifactInstallable(
+  artifact: Pick<RegistryCatalogArtifact, "hasProvider" | "isBuiltin">,
+): boolean {
+  return artifact.hasProvider === true && artifact.isBuiltin === false;
+}
diff --git a/ui/lib/registry/credential-execution.test.ts b/ui/lib/registry/credential-execution.test.ts
new file mode 100644
index 0000000000..38163a071f
--- /dev/null
+++ b/ui/lib/registry/credential-execution.test.ts
@@ -0,0 +1,311 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+import type { RegistryCredentialStatus } from "@/types/registry";
+
+import { executeRegistryCredentialValidation } from "./credential-execution";
+import { REGISTRY_CREDENTIAL_TASK_KIND } from "./credential-task";
+
+const {
+  refreshRegistryCollectionsMock,
+  refreshRegistryCredentialMock,
+  submitRegistryCredentialMock,
+  trackAndPollTaskMock,
+} = vi.hoisted(() => ({
+  refreshRegistryCollectionsMock: vi.fn(),
+  refreshRegistryCredentialMock: vi.fn(),
+  submitRegistryCredentialMock: vi.fn(),
+  trackAndPollTaskMock: vi.fn(),
+}));
+
+vi.mock("@/actions/registry/registry", () => ({
+  refreshRegistryCollections: refreshRegistryCollectionsMock,
+  refreshRegistryCredential: refreshRegistryCredentialMock,
+  submitRegistryCredential: submitRegistryCredentialMock,
+}));
+
+vi.mock("@/store/task-watcher/store", () => ({
+  TASK_WATCHER_STATUS: { PENDING: "pending", READY: "ready", ERROR: "error" },
+  trackAndPollTask: trackAndPollTaskMock,
+}));
+
+const activeCredential: RegistryCredentialStatus = {
+  configured: true,
+  isValid: true,
+  scopes: ["catalog:read"],
+  validationPending: false,
+};
+const noCredential: RegistryCredentialStatus = {
+  configured: false,
+  isValid: false,
+  scopes: [],
+  validationPending: false,
+};
+const pendingCredential: RegistryCredentialStatus = {
+  configured: true,
+  isValid: false,
+  scopes: [],
+  validationPending: true,
+};
+
+describe("executeRegistryCredentialValidation", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    refreshRegistryCollectionsMock.mockResolvedValue({
+      status: "complete",
+      catalog: { status: "complete", artifacts: [] },
+      tenantArtifacts: [],
+    });
+    submitRegistryCredentialMock.mockResolvedValue({
+      status: "submitted",
+      taskId: "task-1",
+      priorConfigured: false,
+    });
+    trackAndPollTaskMock.mockResolvedValue({
+      status: "ready",
+      result: { stored: true, error: null },
+    });
+    refreshRegistryCredentialMock.mockResolvedValue({
+      status: "status",
+      credential: activeCredential,
+    });
+  });
+
+  it("connects after the watched task settles and the credential is active", async () => {
+    // Given
+    const key = "registry-test-key";
+
+    // When
+    const outcome = await executeRegistryCredentialValidation(key);
+
+    // Then
+    expect(outcome).toEqual({
+      status: "connected",
+      credential: activeCredential,
+      collections: {
+        status: "complete",
+        catalog: { status: "complete", artifacts: [] },
+        tenantArtifacts: [],
+      },
+    });
+    expect(submitRegistryCredentialMock).toHaveBeenCalledWith(key);
+    expect(refreshRegistryCredentialMock).toHaveBeenCalledTimes(1);
+    expect(refreshRegistryCollectionsMock).toHaveBeenCalledTimes(1);
+    expect(trackAndPollTaskMock).toHaveBeenCalledWith({
+      taskId: "task-1",
+      kind: REGISTRY_CREDENTIAL_TASK_KIND,
+      meta: { priorConfigured: "false" },
+      notifyHandler: false,
+    });
+    // The key must never reach the persisted watcher record.
+    expect(JSON.stringify(trackAndPollTaskMock.mock.calls)).not.toContain(key);
+  });
+
+  it("reports an invalid key when the settled credential is not active", async () => {
+    // Given
+    refreshRegistryCredentialMock.mockResolvedValue({
+      status: "status",
+      credential: noCredential,
+    });
+
+    // When
+    const outcome = await executeRegistryCredentialValidation("bad-key");
+
+    // Then
+    expect(outcome).toEqual({ status: "invalid", credential: noCredential });
+  });
+
+  it("keeps a failed replacement distinct from a first invalid key", async () => {
+    // Given
+    submitRegistryCredentialMock.mockResolvedValue({
+      status: "submitted",
+      taskId: "task-2",
+      priorConfigured: true,
+    });
+    trackAndPollTaskMock.mockResolvedValue({
+      status: "error",
+      error: 'Task ended in state "failed".',
+    });
+    refreshRegistryCredentialMock.mockResolvedValue({
+      status: "status",
+      credential: activeCredential,
+    });
+
+    // When
+    const outcome = await executeRegistryCredentialValidation("replacement");
+
+    // Then
+    expect(outcome).toEqual({ status: "replacement_failed" });
+  });
+
+  it("reports a validation still pending after the watch settles", async () => {
+    // Given
+    trackAndPollTaskMock.mockResolvedValue({
+      status: "error",
+      error: "The task expired before it could be tracked to completion.",
+    });
+    refreshRegistryCredentialMock.mockResolvedValue({
+      status: "status",
+      credential: pendingCredential,
+    });
+
+    // When
+    const outcome = await executeRegistryCredentialValidation("slow-key");
+
+    // Then
+    expect(outcome).toEqual({
+      status: "pending",
+      credential: pendingCredential,
+    });
+  });
+
+  it("passes submit failures through without watching any task", async () => {
+    // Given
+    submitRegistryCredentialMock
+      .mockResolvedValueOnce({ status: "access_denied" })
+      .mockResolvedValueOnce({
+        status: "replacement_failed",
+        credential: activeCredential,
+      })
+      .mockResolvedValueOnce({ status: "error" });
+
+    // When
+    const denied = await executeRegistryCredentialValidation("key");
+    const replacementFailed = await executeRegistryCredentialValidation("key");
+    const failed = await executeRegistryCredentialValidation("key");
+
+    // Then
+    expect(denied).toEqual({ status: "access_denied" });
+    expect(replacementFailed).toEqual({ status: "replacement_failed" });
+    expect(failed).toEqual({ status: "error" });
+    expect(trackAndPollTaskMock).not.toHaveBeenCalled();
+    expect(refreshRegistryCredentialMock).not.toHaveBeenCalled();
+  });
+
+  it("confirms and publishes once when validation finishes after the dialog deadline", async () => {
+    vi.useFakeTimers();
+    const changed = vi.fn();
+    window.addEventListener("registry-credential-changed", changed);
+    try {
+      let finish: (result: unknown) => void = () => {};
+      trackAndPollTaskMock.mockReturnValue(
+        new Promise((resolve) => {
+          finish = resolve;
+        }),
+      );
+      const waiting = executeRegistryCredentialValidation("slow-key");
+      await vi.advanceTimersByTimeAsync(30_000);
+      await expect(waiting).resolves.toEqual({ status: "pending" });
+      expect(refreshRegistryCredentialMock).not.toHaveBeenCalled();
+      finish({ status: "ready", result: { stored: true, error: null } });
+      await vi.advanceTimersByTimeAsync(0);
+      expect(refreshRegistryCredentialMock).toHaveBeenCalledTimes(1);
+      expect(refreshRegistryCollectionsMock).toHaveBeenCalledTimes(1);
+      expect(changed).toHaveBeenCalledTimes(1);
+      expect(changed.mock.calls[0][0].detail.status).toBe("connected");
+    } finally {
+      window.removeEventListener("registry-credential-changed", changed);
+      vi.useRealTimers();
+    }
+  });
+
+  it("publishes the same failure returned to the dialog when collections fail", async () => {
+    const changed = vi.fn();
+    window.addEventListener("registry-credential-changed", changed);
+    try {
+      refreshRegistryCollectionsMock.mockResolvedValue({
+        status: "unavailable",
+      });
+      const result = await executeRegistryCredentialValidation("key");
+      expect(result).toEqual({
+        status: "error",
+        message: "Registry collections could not be loaded. Try again.",
+      });
+      expect(changed).toHaveBeenCalledTimes(1);
+      expect(changed.mock.calls[0][0].detail).toBe(result);
+    } finally {
+      window.removeEventListener("registry-credential-changed", changed);
+    }
+  });
+
+  it.each([false, true])(
+    "does not confirm an unsettled task (priorConfigured: %s)",
+    async (priorConfigured) => {
+      submitRegistryCredentialMock.mockResolvedValue({
+        status: "submitted",
+        taskId: "task-1",
+        priorConfigured,
+      });
+      trackAndPollTaskMock.mockResolvedValue({ status: "pending" });
+      expect(await executeRegistryCredentialValidation("race-key")).toEqual({
+        status: "pending",
+      });
+      expect(refreshRegistryCredentialMock).not.toHaveBeenCalled();
+      expect(refreshRegistryCollectionsMock).not.toHaveBeenCalled();
+    },
+  );
+
+  it("fails safely when the submit RPC rejects", async () => {
+    // Given
+    submitRegistryCredentialMock.mockRejectedValue(new Error("rpc dropped"));
+
+    // When
+    const outcome = await executeRegistryCredentialValidation("key");
+
+    // Then
+    expect(outcome).toEqual({ status: "error" });
+    expect(trackAndPollTaskMock).not.toHaveBeenCalled();
+  });
+
+  it("fails safely when the authoritative re-read RPC rejects", async () => {
+    // Given
+    refreshRegistryCredentialMock.mockRejectedValue(new Error("rpc dropped"));
+
+    // When
+    const outcome = await executeRegistryCredentialValidation("key");
+
+    // Then
+    expect(outcome).toEqual({ status: "error" });
+  });
+
+  it("fails safely when tracking throws before the authoritative re-read", async () => {
+    // Given
+    trackAndPollTaskMock.mockRejectedValue(new Error("watcher crashed"));
+
+    // When
+    const outcome = await executeRegistryCredentialValidation("key");
+
+    // Then
+    expect(outcome).toEqual({ status: "error" });
+    expect(refreshRegistryCredentialMock).not.toHaveBeenCalled();
+  });
+
+  it("propagates authoritative re-read failures after the watch", async () => {
+    // Given
+    refreshRegistryCredentialMock
+      .mockResolvedValueOnce({ status: "access_denied" })
+      .mockResolvedValueOnce({ status: "error" });
+
+    // When
+    const denied = await executeRegistryCredentialValidation("key");
+    const failed = await executeRegistryCredentialValidation("key");
+
+    // Then
+    expect(denied).toEqual({ status: "access_denied" });
+    expect(failed).toEqual({ status: "error" });
+  });
+
+  it("does not report a rejected replacement as connected when the prior key remains active", async () => {
+    submitRegistryCredentialMock.mockResolvedValue({
+      status: "submitted",
+      taskId: "task",
+      priorConfigured: true,
+    });
+    trackAndPollTaskMock.mockResolvedValue({
+      status: "ready",
+      result: { stored: false, error: "Invalid key" },
+    });
+    expect(await executeRegistryCredentialValidation("replacement")).toEqual({
+      status: "replacement_failed",
+    });
+  });
+});
diff --git a/ui/lib/registry/credential-execution.ts b/ui/lib/registry/credential-execution.ts
new file mode 100644
index 0000000000..5a549bce3c
--- /dev/null
+++ b/ui/lib/registry/credential-execution.ts
@@ -0,0 +1,63 @@
+import { submitRegistryCredential } from "@/actions/registry/registry";
+import {
+  completeRegistryCredentialValidation,
+  type RegistryCredentialValidationOutcome,
+} from "@/lib/registry/credential-result";
+import { REGISTRY_CREDENTIAL_TASK_KIND } from "@/lib/registry/credential-task";
+import {
+  TASK_WATCHER_STATUS,
+  trackAndPollTask,
+} from "@/store/task-watcher/store";
+import { REGISTRY_CREDENTIAL_ACTION, REGISTRY_FAILURE } from "@/types/registry";
+
+export const REGISTRY_CREDENTIAL_WATCH_TIMEOUT_MS = 30_000;
+
+/** The live operation owns confirmation. Reloads resume through the kind handler. */
+export async function executeRegistryCredentialValidation(
+  key: string,
+  options: { notifyHandler?: boolean } = {},
+): Promise<RegistryCredentialValidationOutcome> {
+  let timer: ReturnType<typeof setTimeout> | undefined;
+  try {
+    const submitted = await submitRegistryCredential(key);
+    if (
+      submitted.status === REGISTRY_FAILURE.ACCESS_DENIED ||
+      submitted.status === REGISTRY_CREDENTIAL_ACTION.REPLACEMENT_FAILED
+    )
+      return { status: submitted.status };
+    if (submitted.status !== REGISTRY_CREDENTIAL_ACTION.SUBMITTED)
+      return { status: REGISTRY_FAILURE.ERROR };
+
+    // Only non-secret operation context survives reload. Suppression is in-memory
+    // and disappears on reload, when the registered handler takes ownership.
+    const completion = trackAndPollTask({
+      taskId: submitted.taskId,
+      kind: REGISTRY_CREDENTIAL_TASK_KIND,
+      meta: { priorConfigured: String(submitted.priorConfigured) },
+      notifyHandler: false,
+    }).then((tracked) =>
+      tracked.status === TASK_WATCHER_STATUS.PENDING
+        ? ({ status: REGISTRY_CREDENTIAL_ACTION.PENDING } as const)
+        : completeRegistryCredentialValidation(
+            tracked,
+            submitted.priorConfigured,
+            options.notifyHandler ?? true,
+          ),
+    );
+    // Let the dialog recover while completion continues across navigation.
+    // A deadline is not a verdict: only task settlement can confirm the key.
+    const deadline = new Promise<RegistryCredentialValidationOutcome>(
+      (resolve) => {
+        timer = setTimeout(
+          () => resolve({ status: REGISTRY_CREDENTIAL_ACTION.PENDING }),
+          REGISTRY_CREDENTIAL_WATCH_TIMEOUT_MS,
+        );
+      },
+    );
+    return await Promise.race([completion, deadline]);
+  } catch {
+    return { status: REGISTRY_FAILURE.ERROR };
+  } finally {
+    clearTimeout(timer);
+  }
+}
diff --git a/ui/lib/registry/credential-result.ts b/ui/lib/registry/credential-result.ts
new file mode 100644
index 0000000000..cdaf440d6b
--- /dev/null
+++ b/ui/lib/registry/credential-result.ts
@@ -0,0 +1,142 @@
+import {
+  refreshRegistryCredential,
+  refreshRegistryCollections,
+} from "@/actions/registry/registry";
+import { toast } from "@/components/shadcn/toast";
+import {
+  getRegistryCredentialFailureMessage,
+  isActiveRegistryCredential,
+  isRegistryCredentialTaskSuccessful,
+} from "@/lib/registry/credential-task";
+import {
+  TASK_WATCHER_STATUS,
+  type TaskTrackingResult,
+} from "@/store/task-watcher/store";
+import {
+  REGISTRY_CATALOG,
+  REGISTRY_CREDENTIAL_ACTION,
+  REGISTRY_CREDENTIAL_READ,
+  REGISTRY_FAILURE,
+  type RegistryCredentialReadResult,
+  type RegistryCredentialStatus,
+  type RegistryCollectionsResult,
+} from "@/types/registry";
+
+export type RegistryCredentialValidationOutcome =
+  | {
+      status: typeof REGISTRY_CREDENTIAL_ACTION.CONNECTED;
+      collections: Extract<RegistryCollectionsResult, { status: "complete" }>;
+      credential: RegistryCredentialStatus;
+    }
+  | {
+      status: typeof REGISTRY_CREDENTIAL_ACTION.PENDING;
+      credential?: RegistryCredentialStatus;
+    }
+  | {
+      status: typeof REGISTRY_CREDENTIAL_ACTION.INVALID;
+      credential: RegistryCredentialStatus;
+      message?: string;
+    }
+  | { status: typeof REGISTRY_CREDENTIAL_ACTION.REPLACEMENT_FAILED }
+  | { status: typeof REGISTRY_FAILURE.ACCESS_DENIED }
+  | { status: typeof REGISTRY_FAILURE.ERROR; message?: string };
+
+export const REGISTRY_CREDENTIAL_CHANGED = "registry-credential-changed";
+
+async function confirmCredential(
+  tracked: TaskTrackingResult,
+  priorConfigured: boolean,
+): Promise<RegistryCredentialValidationOutcome> {
+  let read: RegistryCredentialReadResult;
+  try {
+    read = await refreshRegistryCredential();
+  } catch {
+    return { status: REGISTRY_FAILURE.ERROR };
+  }
+  if (read.status === REGISTRY_FAILURE.ACCESS_DENIED) {
+    return { status: REGISTRY_FAILURE.ACCESS_DENIED };
+  }
+  if (read.status !== REGISTRY_CREDENTIAL_READ.STATUS) {
+    return { status: REGISTRY_FAILURE.ERROR };
+  }
+
+  const { credential } = read;
+  // Both the submitted task and the authoritative credential must confirm success.
+  if (
+    isActiveRegistryCredential(credential) &&
+    tracked.status === TASK_WATCHER_STATUS.READY &&
+    isRegistryCredentialTaskSuccessful(tracked.result)
+  ) {
+    const collections = await refreshRegistryCollections().catch(() => null);
+    if (collections?.status === REGISTRY_FAILURE.ACCESS_DENIED)
+      return { status: REGISTRY_FAILURE.ACCESS_DENIED };
+    if (collections?.status !== REGISTRY_CATALOG.COMPLETE)
+      return {
+        status: REGISTRY_FAILURE.ERROR,
+        message: "Registry collections could not be loaded. Try again.",
+      };
+    return {
+      status: REGISTRY_CREDENTIAL_ACTION.CONNECTED,
+      credential,
+      collections,
+    };
+  }
+  if (credential.validationPending) {
+    return { status: REGISTRY_CREDENTIAL_ACTION.PENDING, credential };
+  }
+  // An unsettled watch has not judged the key; report it still pending
+  // rather than invalid or a failed replacement.
+  if (tracked.status === TASK_WATCHER_STATUS.PENDING) {
+    return { status: REGISTRY_CREDENTIAL_ACTION.PENDING, credential };
+  }
+  if (priorConfigured) {
+    return { status: REGISTRY_CREDENTIAL_ACTION.REPLACEMENT_FAILED };
+  }
+  const message = getRegistryCredentialFailureMessage(tracked.result);
+  return {
+    status: REGISTRY_CREDENTIAL_ACTION.INVALID,
+    credential,
+    ...(message ? { message } : {}),
+  };
+}
+
+export function credentialOutcomeMessage(
+  result: RegistryCredentialValidationOutcome,
+): string {
+  if (result.status === REGISTRY_CREDENTIAL_ACTION.PENDING)
+    return "Registry key validation is taking longer than expected. Try again.";
+  if (result.status === REGISTRY_CREDENTIAL_ACTION.REPLACEMENT_FAILED)
+    return "Registry key validation failed. Existing access is unchanged.";
+  if (result.status === REGISTRY_CREDENTIAL_ACTION.INVALID)
+    return (
+      result.message ?? "This Registry key is invalid. Check it and try again."
+    );
+  return (
+    (result.status === REGISTRY_FAILURE.ERROR && result.message) ||
+    "Registry key validation could not be completed. Try again."
+  );
+}
+
+/** Shared by the active operation and the watcher after a document reload. */
+export async function completeRegistryCredentialValidation(
+  tracked: TaskTrackingResult,
+  priorConfigured: boolean,
+  notify = true,
+): Promise<RegistryCredentialValidationOutcome> {
+  const outcome = await confirmCredential(tracked, priorConfigured);
+  if (notify) {
+    if (outcome.status === REGISTRY_CREDENTIAL_ACTION.CONNECTED) {
+      toast({ title: "Registry connected" });
+    } else if (outcome.status !== REGISTRY_FAILURE.ACCESS_DENIED) {
+      toast({
+        variant: "destructive",
+        title: "Registry key validation failed",
+        description: credentialOutcomeMessage(outcome),
+      });
+    }
+    window.dispatchEvent(
+      new CustomEvent(REGISTRY_CREDENTIAL_CHANGED, { detail: outcome }),
+    );
+  }
+  return outcome;
+}
diff --git a/ui/lib/registry/credential-task.test.ts b/ui/lib/registry/credential-task.test.ts
new file mode 100644
index 0000000000..cb187853c2
--- /dev/null
+++ b/ui/lib/registry/credential-task.test.ts
@@ -0,0 +1,20 @@
+import { describe, expect, it } from "vitest";
+
+import { getRegistryCredentialFailureMessage } from "./credential-task";
+
+describe("Registry credential rejection feedback", () => {
+  it("explains a wrong-environment key without reflecting server data", () => {
+    const message = getRegistryCredentialFailureMessage({
+      stored: false,
+      error: "Registry rejected the API key (HTTP 401). sensitive-input",
+    });
+    expect(message).toContain("Registry environment");
+    expect(message).toContain("HTTP 401");
+    expect(message).not.toContain("sensitive-input");
+  });
+  it("does not expose arbitrary backend errors", () => {
+    expect(
+      getRegistryCredentialFailureMessage({ error: "sensitive-input" }),
+    ).toBeUndefined();
+  });
+});
diff --git a/ui/lib/registry/credential-task.ts b/ui/lib/registry/credential-task.ts
new file mode 100644
index 0000000000..b7959921cd
--- /dev/null
+++ b/ui/lib/registry/credential-task.ts
@@ -0,0 +1,47 @@
+import type { RegistryCredentialStatus } from "@/types/registry";
+
+/**
+ * Watched-task kind for Registry API key validation. Metadata retains only
+ * whether a credential was already configured; the submitted key is write-only
+ * and must never reach the persisted watcher record.
+ */
+export const REGISTRY_CREDENTIAL_TASK_KIND = "registry-credential-validation";
+
+export const isActiveRegistryCredential = (
+  credential: RegistryCredentialStatus | null,
+) =>
+  Boolean(
+    credential?.configured &&
+      credential.isValid &&
+      !credential.validationPending,
+  );
+
+export const isRegistryCredentialTaskSuccessful = (result: unknown): boolean =>
+  typeof result === "object" &&
+  result !== null &&
+  "stored" in result &&
+  result.stored === true &&
+  "error" in result &&
+  result.error === null;
+
+/** Translate known rejection reasons without reflecting server payloads or secrets. */
+export function getRegistryCredentialFailureMessage(
+  result: unknown,
+): string | undefined {
+  if (
+    typeof result !== "object" ||
+    result === null ||
+    !("error" in result) ||
+    typeof result.error !== "string"
+  )
+    return;
+  const error = result.error.toLowerCase();
+  if (error.includes("http 401"))
+    return "The configured Registry rejected this key (HTTP 401). Check that the key belongs to this Registry environment and is still active.";
+  if (error.includes("organization keys are not supported"))
+    return "Use a customer download key for the official Registry. Organization upload keys cannot connect this workspace.";
+  if (error.includes("download scope"))
+    return "This key needs a download scope. Create a download key in Registry and try again.";
+  if (error.includes("customer accounts disabled"))
+    return "Customer accounts are disabled on the configured Registry. Contact its administrator.";
+}
diff --git a/ui/lib/registry/presentation.test.ts b/ui/lib/registry/presentation.test.ts
new file mode 100644
index 0000000000..847fe1dc99
--- /dev/null
+++ b/ui/lib/registry/presentation.test.ts
@@ -0,0 +1,43 @@
+import { describe, expect, it } from "vitest";
+
+import { getRegistryPresentation } from "./presentation";
+
+describe("Registry presentation configuration", () => {
+  const urlWithCredentials = new URL("https://registry.test");
+  urlWithCredentials.username = "user";
+  urlWithCredentials.password = "pass";
+
+  it("uses the configured Registry and media origins", () => {
+    expect(
+      getRegistryPresentation(
+        "https://registry.private.test/keys",
+        "https://assets.private.test/media/",
+      ),
+    ).toEqual({
+      keyUrl: "https://registry.private.test/keys",
+      imageOrigins: [
+        "https://registry.private.test",
+        "https://assets.private.test",
+      ],
+    });
+  });
+
+  it("does not guess a Registry environment when configuration is missing", () => {
+    expect(getRegistryPresentation()).toEqual({
+      keyUrl: undefined,
+      imageOrigins: [],
+    });
+  });
+
+  it.each([
+    "javascript:alert(1)",
+    urlWithCredentials.href,
+    "https://registry.test; img-src *",
+    "invalid",
+  ])("rejects unsafe configuration: %s", (value) => {
+    expect(getRegistryPresentation(value, value)).toEqual({
+      keyUrl: undefined,
+      imageOrigins: [],
+    });
+  });
+});
diff --git a/ui/lib/registry/presentation.ts b/ui/lib/registry/presentation.ts
new file mode 100644
index 0000000000..91a8ac5656
--- /dev/null
+++ b/ui/lib/registry/presentation.ts
@@ -0,0 +1,33 @@
+/** Accept public HTTP URLs only; never expose URL credentials or CSP syntax. */
+function parsePublicUrl(value?: string | null): URL | undefined {
+  if (!value || /[\s;]/.test(value)) return;
+  try {
+    const url = new URL(value);
+    if (
+      (url.protocol === "https:" || url.protocol === "http:") &&
+      !url.username &&
+      !url.password
+    )
+      return url;
+  } catch {
+    return;
+  }
+}
+
+export function getRegistryPresentation(
+  registryUrl?: string | null,
+  mediaUrl?: string | null,
+) {
+  const registry = parsePublicUrl(registryUrl);
+  const media = parsePublicUrl(mediaUrl);
+  return {
+    keyUrl: registry?.href,
+    imageOrigins: Array.from(
+      new Set(
+        [registry?.origin, media?.origin].filter((origin): origin is string =>
+          Boolean(origin),
+        ),
+      ),
+    ),
+  };
+}
diff --git a/ui/lib/registry/provider-options.test.ts b/ui/lib/registry/provider-options.test.ts
new file mode 100644
index 0000000000..8307d83e9a
--- /dev/null
+++ b/ui/lib/registry/provider-options.test.ts
@@ -0,0 +1,120 @@
+import { describe, expect, it } from "vitest";
+
+import { collectCompleteRegistryCatalog } from "@/actions/registry/registry.adapter";
+import type { RegistryCatalogArtifact } from "@/types/registry";
+
+import { buildRegistryProviderOptions } from "./provider-options";
+
+const provider: RegistryCatalogArtifact = {
+  normalizedName: "acme-package",
+  name: "Acme",
+  providers: ["acme"],
+  providerSlug: "acme",
+  hasProvider: true,
+  isBuiltin: false,
+  isVerified: false,
+  isOfficial: false,
+  isMeta: false,
+  hasChecks: true,
+  hasCompliance: false,
+  versionCount: 1,
+  totalDownloads: 0,
+  owners: [],
+};
+
+describe("installed Registry provider options", () => {
+  it("does not infer a provider from checks targets in merged catalog records", async () => {
+    // Given: only the checks record names a target provider.
+    const catalog = await collectCompleteRegistryCatalog(async () => ({
+      data: [
+        {
+          type: "registry-artifacts",
+          id: "external-package",
+          attributes: { has_provider: true },
+        },
+        {
+          type: "registry-artifacts",
+          id: "external-package",
+          attributes: {
+            has_provider: false,
+            providers: ["target-only"],
+            has_checks: true,
+          },
+        },
+      ],
+      meta: { pagination: { page: 1, pages: 1, count: 2 } },
+    }));
+    expect(catalog.status).toBe("complete");
+    if (catalog.status !== "complete") throw new Error("Incomplete fixture");
+
+    // When / Then: installed membership cannot manufacture a declared type.
+    expect(
+      buildRegistryProviderOptions(
+        catalog.artifacts,
+        [{ normalizedName: "external-package", versionSpec: "latest" }],
+        [],
+      ),
+    ).toEqual([]);
+  });
+
+  it("joins confirmed membership, uses backend slugs and excludes non-providers and built-ins", () => {
+    const catalog = [
+      provider,
+      { ...provider, normalizedName: "other-package", providers: ["acme"] },
+      {
+        ...provider,
+        normalizedName: "checks",
+        hasProvider: false,
+        providers: ["checks"],
+      },
+      {
+        ...provider,
+        normalizedName: "builtin",
+        isBuiltin: true,
+        providers: ["builtin"],
+      },
+      {
+        ...provider,
+        normalizedName: "known",
+        providers: ["aws"],
+        providerSlug: "aws",
+      },
+      {
+        ...provider,
+        normalizedName: "uninstalled",
+        providers: ["uninstalled"],
+      },
+    ];
+    const installed = catalog
+      .slice(0, -1)
+      .map(({ normalizedName }) => ({ normalizedName, versionSpec: "latest" }));
+    expect(
+      buildRegistryProviderOptions(catalog, installed, [
+        {
+          type: "acme",
+          label: "Acme Cloud",
+          logoUrl: "https://media.registry.dev.prowler.com/acme.svg",
+        },
+      ]),
+    ).toEqual([
+      {
+        type: "acme",
+        label: "Acme Cloud",
+        logoUrl: "https://media.registry.dev.prowler.com/acme.svg",
+      },
+    ]);
+    expect(buildRegistryProviderOptions(catalog, [], [])).toEqual([]);
+  });
+  it("uses the declared provider rather than other providers targeted by the package", () => {
+    const catalog = [
+      { ...provider, providerSlug: "zeta", providers: ["acme", "zeta"] },
+    ];
+    expect(
+      buildRegistryProviderOptions(
+        catalog,
+        [{ normalizedName: provider.normalizedName, versionSpec: "latest" }],
+        [],
+      ).map((option) => option.type),
+    ).toEqual(["zeta"]);
+  });
+});
diff --git a/ui/lib/registry/provider-options.ts b/ui/lib/registry/provider-options.ts
new file mode 100644
index 0000000000..820ea0478d
--- /dev/null
+++ b/ui/lib/registry/provider-options.ts
@@ -0,0 +1,56 @@
+import { isKnownProviderType } from "@/types/providers";
+import type {
+  RegistryCatalogArtifact,
+  RegistryTenantArtifact,
+} from "@/types/registry";
+
+import { isRegistryArtifactInstallable } from "./artifacts";
+
+export interface RegistryProviderOption {
+  type: string;
+  label: string;
+  logoUrl?: string;
+}
+
+export function buildRegistryProviderOptions(
+  catalog: RegistryCatalogArtifact[],
+  installed: RegistryTenantArtifact[],
+  metadata: RegistryProviderOption[],
+): RegistryProviderOption[] {
+  const membership = new Set(
+    installed.map((artifact) => artifact.normalizedName),
+  );
+  const providers = new Map(
+    metadata.map((provider) => [provider.type, provider]),
+  );
+  const options = new Map<string, RegistryProviderOption>();
+  for (const artifact of catalog) {
+    if (
+      !membership.has(artifact.normalizedName) ||
+      !isRegistryArtifactInstallable(artifact)
+    )
+      continue;
+    const declaredType = artifact.providerSlug;
+    for (const type of declaredType ? [declaredType] : []) {
+      if (
+        isKnownProviderType(type) ||
+        !/^[a-z][a-z0-9_-]{0,49}$/.test(type) ||
+        options.has(type)
+      )
+        continue;
+      options.set(
+        type,
+        providers.get(type) ?? {
+          type,
+          label: artifact.name || type,
+          ...(artifact.owners[0]?.logoUrl
+            ? { logoUrl: artifact.owners[0].logoUrl }
+            : {}),
+        },
+      );
+    }
+  }
+  return Array.from(options.values()).sort((left, right) =>
+    left.label.localeCompare(right.label),
+  );
+}
diff --git a/ui/lib/role-permissions.ts b/ui/lib/role-permissions.ts
index 0ffba41963..3427e62041 100644
--- a/ui/lib/role-permissions.ts
+++ b/ui/lib/role-permissions.ts
@@ -4,6 +4,7 @@ const hiddenOutsideCloudFields = [
   "manage_billing",
   "manage_alerts",
   "manage_lighthouse_ai_configuration",
+  "manage_registry",
 ];
 
 export const getVisiblePermissionFormFields = (isCloudEnvironment: boolean) =>
diff --git a/ui/next.config.js b/ui/next.config.js
index 67ef650ebb..e9fd63d84b 100644
--- a/ui/next.config.js
+++ b/ui/next.config.js
@@ -8,6 +8,8 @@ const { withSentryConfig } = require("@sentry/nextjs");
 // HTTP Security Headers
 const nextConfig = {
   poweredByHeader: false,
+  // Server Function arguments include write-only credentials.
+  logging: { serverFunctions: false },
   // Dev-only. Lets the dev server accept HMR/asset requests from a tunnel
   // hostname (ngrok/cloudflared), needed when testing the local UI through a
   // public tunnel or from an external device.
diff --git a/ui/next.config.test.ts b/ui/next.config.test.ts
index 2154ea88f9..a464bb3602 100644
--- a/ui/next.config.test.ts
+++ b/ui/next.config.test.ts
@@ -208,3 +208,14 @@ describe("PostHog Content Security Policy", () => {
     expect(Object.values(csp).flat()).not.toContain(POSTHOG_WILDCARD);
   });
 });
+
+it("allows configured private Registry images in the request CSP", () => {
+  const csp = parseCsp(
+    getCspHeader({
+      ...ENABLED_POSTHOG_CONFIG,
+      registryImageOrigins: ["https://media.private.test"],
+    }),
+  );
+  expect(csp["img-src"]).toContain("https://media.private.test");
+  expect(csp["connect-src"]).not.toContain("https://media.private.test");
+});
diff --git a/ui/package.json b/ui/package.json
index 9afd17df19..c0778f307d 100644
--- a/ui/package.json
+++ b/ui/package.json
@@ -25,6 +25,7 @@
     "test:e2e:debug": "playwright test --project=auth --project=sign-up --project=providers --project=invitations --project=scans --project=runtime-config --project=navigation --debug",
     "test:e2e:headed": "playwright test --project=auth --project=sign-up --project=providers --project=invitations --project=scans --project=runtime-config --project=navigation --headed",
     "test:e2e:install": "playwright install",
+    "test:e2e:registry": "E2E_REGISTRY_ACCEPTANCE_MODE=fixture playwright test --config=playwright.registry.config.ts --project=registry --project=registry-flag-off --project=registry-local --project=registry-mobile",
     "test:e2e:report": "playwright show-report",
     "test:e2e:ui": "playwright test --project=auth --project=sign-up --project=providers --project=invitations --project=scans --project=runtime-config --ui",
     "test:integration": "vitest run --project integration",
diff --git a/ui/playwright.base.ts b/ui/playwright.base.ts
new file mode 100644
index 0000000000..e021966f34
--- /dev/null
+++ b/ui/playwright.base.ts
@@ -0,0 +1,24 @@
+import { defineConfig } from "@playwright/test";
+
+export const getBaseConfig = () =>
+  defineConfig({
+    testDir: "./tests",
+    fullyParallel: true,
+    forbidOnly: !!process.env.CI,
+    retries: process.env.CI ? 2 : 0,
+    workers: process.env.CI ? 1 : undefined,
+    reporter: [["list"]],
+    outputDir: "/tmp/playwright-tests",
+    expect: {
+      timeout: 20000,
+    },
+
+    use: {
+      baseURL: process.env.AUTH_URL
+        ? process.env.AUTH_URL
+        : "http://localhost:3000",
+      trace: "off",
+      screenshot: "off",
+      video: "off",
+    },
+  });
diff --git a/ui/playwright.config.ts b/ui/playwright.config.ts
index 2ae3247997..570f519450 100644
--- a/ui/playwright.config.ts
+++ b/ui/playwright.config.ts
@@ -2,32 +2,13 @@ import { defineConfig, devices } from "@playwright/test";
 import fs from "fs";
 import path from "path";
 
+import { getBaseConfig } from "./playwright.base";
+
 const localEnvPath = path.resolve(__dirname, ".env.local");
-if (fs.existsSync(localEnvPath)) {
-  process.loadEnvFile(localEnvPath);
-}
+if (fs.existsSync(localEnvPath)) process.loadEnvFile(localEnvPath);
 
 export default defineConfig({
-  testDir: "./tests",
-  fullyParallel: true,
-  forbidOnly: !!process.env.CI,
-  retries: process.env.CI ? 2 : 0,
-  workers: process.env.CI ? 1 : undefined,
-  reporter: [["list"]],
-  outputDir: "/tmp/playwright-tests",
-  expect: {
-    timeout: 20000,
-  },
-
-  use: {
-    baseURL: process.env.AUTH_URL
-      ? process.env.AUTH_URL
-      : "http://localhost:3000",
-    trace: "off",
-    screenshot: "off",
-    video: "off",
-  },
-
+  ...getBaseConfig(),
   projects: [
     // ===========================================
     // Authentication Setup Projects
@@ -89,6 +70,7 @@ export default defineConfig({
     {
       name: "all.auth.setup",
       testMatch: "**/*.auth.setup.ts",
+      testIgnore: "manage-registry.auth.setup.ts",
     },
 
     // ===========================================
@@ -172,6 +154,7 @@ export default defineConfig({
       E2E_ADMIN_USER: process.env.E2E_ADMIN_USER || "e2e@prowler.com",
       E2E_ADMIN_PASSWORD:
         process.env.E2E_ADMIN_PASSWORD || "Thisisapassword123@",
+      UI_CLOUD_ENABLED: process.env.UI_CLOUD_ENABLED || "false",
     },
   },
 });
diff --git a/ui/playwright.registry.config.ts b/ui/playwright.registry.config.ts
new file mode 100644
index 0000000000..28df0c7d66
--- /dev/null
+++ b/ui/playwright.registry.config.ts
@@ -0,0 +1,93 @@
+import { defineConfig, devices } from "@playwright/test";
+
+import { getBaseConfig } from "./playwright.base";
+
+const registryFixtureApiUrl = "http://127.0.0.1:4300/api/v1";
+const registryFixtureServer = {
+  command:
+    "node --experimental-strip-types tests/registry/controlled-registry-api.mts",
+  reuseExistingServer: false,
+  timeout: 120 * 1000,
+  url: "http://127.0.0.1:4300/health",
+};
+
+const registryFixtureUiServer = (
+  port: number,
+  cloudEnabled: boolean,
+  registryEnabled: boolean,
+) => ({
+  command: `pnpm exec next start --port ${port}`,
+  env: {
+    AUTH_SECRET: "fixture-next-auth-secret-not-a-secret",
+    AUTH_TRUST_HOST: "true",
+    AUTH_URL: `http://127.0.0.1:${port}`,
+    NEXTAUTH_URL: `http://127.0.0.1:${port}`,
+    UI_API_BASE_URL: registryFixtureApiUrl,
+    UI_CLOUD_ENABLED: String(cloudEnabled),
+    UI_REGISTRY_ENABLED: String(registryEnabled),
+    UI_REGISTRY_URL: "https://registry.dev.prowler.com",
+    UI_REGISTRY_MEDIA_URL: "https://media.registry.dev.prowler.com",
+    CLOUD_BILLING_ENABLED: "false",
+  },
+  reuseExistingServer: false,
+  timeout: 120 * 1000,
+  url: `http://127.0.0.1:${port}`,
+});
+
+export default defineConfig({
+  ...getBaseConfig(),
+  workers: 1,
+  projects: [
+    // Registry manager authentication setup
+    // Creates authenticated state for a user with current MANAGE_REGISTRY access
+    {
+      name: "manage-registry.auth.setup",
+      use: { baseURL: "http://127.0.0.1:4301" },
+      testMatch: "manage-registry.auth.setup.ts",
+    },
+
+    // Registry acceptance uses only the self-contained test fixture profile.
+    {
+      name: "registry",
+      use: {
+        ...devices["Desktop Chrome"],
+        baseURL: "http://127.0.0.1:4301",
+      },
+      testMatch: /registry\/.*\.spec\.ts/,
+      dependencies: ["manage-registry.auth.setup"],
+    },
+    {
+      name: "registry-flag-off",
+      use: {
+        ...devices["Desktop Chrome"],
+        baseURL: "http://127.0.0.1:4302",
+      },
+      testMatch: /registry\/.*\.spec\.ts/,
+      dependencies: ["manage-registry.auth.setup"],
+    },
+    {
+      name: "registry-local",
+      use: {
+        ...devices["Desktop Chrome"],
+        baseURL: "http://127.0.0.1:4303",
+      },
+      testMatch: /registry\/.*\.spec\.ts/,
+      dependencies: ["manage-registry.auth.setup"],
+    },
+    {
+      name: "registry-mobile",
+      use: {
+        ...devices["Pixel 5"],
+        baseURL: "http://127.0.0.1:4301",
+      },
+      testMatch: /registry\/.*\.spec\.ts/,
+      dependencies: ["manage-registry.auth.setup"],
+    },
+  ],
+  webServer: [
+    registryFixtureServer,
+    registryFixtureUiServer(4301, true, true),
+    registryFixtureUiServer(4302, true, false),
+    registryFixtureUiServer(4303, false, true),
+  ],
+});
diff --git a/ui/proxy.registry.test.ts b/ui/proxy.registry.test.ts
new file mode 100644
index 0000000000..379d7ff34a
--- /dev/null
+++ b/ui/proxy.registry.test.ts
@@ -0,0 +1,38 @@
+import { describe, expect, it, vi } from "vitest";
+
+const { evaluateAccessMock } = vi.hoisted(() => ({
+  evaluateAccessMock: vi.fn(),
+}));
+vi.mock("@/auth.config", () => ({ auth: (handler: unknown) => handler }));
+vi.mock("@/lib/csp", () => ({ getCspHeader: () => "default-src 'self'" }));
+vi.mock("@/lib/integrations", () => ({
+  GATED_INTEGRATIONS: { posthog: "posthog" },
+  isGatedIntegrationEnabled: () => false,
+  readGatedEnv: () => null,
+}));
+vi.mock("@/lib/registry/access.server", () => ({
+  evaluateRegistryAccess: evaluateAccessMock,
+}));
+vi.mock("@/lib/runtime-env", () => ({ readEnv: () => null }));
+vi.mock("@/lib/shared/env", () => ({ isCloud: () => true }));
+vi.mock("@/lib/utm", () => ({ copyAttributionParams: vi.fn() }));
+
+import proxy from "./proxy";
+
+const request = {
+  auth: { accessToken: "current-token", user: {} },
+  nextUrl: new URL("http://localhost/registry"),
+  url: "http://localhost/registry",
+};
+
+describe("proxy", () => {
+  it("redirects denied direct Registry requests to profile", async () => {
+    // Given / When
+    evaluateAccessMock.mockResolvedValue({ status: "ineligible" });
+    const response = (await proxy(request as never, {} as never)) as Response;
+
+    // Then
+    expect(evaluateAccessMock).toHaveBeenCalledWith("current-token");
+    expect(response.headers.get("location")).toBe("http://localhost/profile");
+  });
+});
diff --git a/ui/proxy.test.ts b/ui/proxy.test.ts
index a63068817e..c0d235cfe9 100644
--- a/ui/proxy.test.ts
+++ b/ui/proxy.test.ts
@@ -1,3 +1,6 @@
+vi.mock("@/lib/registry/access.server", () => ({
+  evaluateRegistryAccess: vi.fn(),
+}));
 import type { NextAuthRequest } from "next-auth";
 import { describe, expect, it, vi } from "vitest";
 
diff --git a/ui/proxy.ts b/ui/proxy.ts
index 137d108579..b26008ddfc 100644
--- a/ui/proxy.ts
+++ b/ui/proxy.ts
@@ -12,6 +12,9 @@ import {
   SLACK_CALLBACK_PATH,
   SLACK_EXPIRED_CALLBACK_URL,
 } from "@/lib/integrations/slack-connect-status";
+import { REGISTRY_ACCESS } from "@/lib/registry/access";
+import { evaluateRegistryAccess } from "@/lib/registry/access.server";
+import { getRegistryPresentation } from "@/lib/registry/presentation";
 import { readEnv } from "@/lib/runtime-env";
 import { isCloud } from "@/lib/shared/env";
 import { copyAttributionParams } from "@/lib/utm";
@@ -35,6 +38,10 @@ const withSecurityHeaders = (response: NextResponse): NextResponse => {
     "Content-Security-Policy",
     getCspHeader({
       cloudEnabled: isCloud(),
+      registryImageOrigins: getRegistryPresentation(
+        readEnv("UI_REGISTRY_URL"),
+        readEnv("UI_REGISTRY_MEDIA_URL"),
+      ).imageOrigins,
       posthogEnabled: isGatedIntegrationEnabled(GATED_INTEGRATIONS.posthog),
       posthogKey: readGatedEnv(
         "UI_POSTHOG_ENABLED",
@@ -57,7 +64,7 @@ const redirect = (url: URL): NextResponse =>
   withSecurityHeaders(NextResponse.redirect(url));
 
 // NextAuth's auth() wrapper - renamed from middleware to proxy
-export default auth((req: NextAuthRequest) => {
+export default auth(async (req: NextAuthRequest) => {
   const { pathname } = req.nextUrl;
 
   const user = req.auth?.user;
@@ -104,6 +111,14 @@ export default auth((req: NextAuthRequest) => {
     return redirect(new URL("/profile", req.url));
   }
 
+  if (
+    (pathname === "/registry" || pathname.startsWith("/registry/")) &&
+    (await evaluateRegistryAccess(req.auth?.accessToken)).status !==
+      REGISTRY_ACCESS.ELIGIBLE
+  ) {
+    return redirect(new URL("/profile", req.url));
+  }
+
   if (user?.permissions) {
     const permissions = user.permissions;
 
diff --git a/ui/store/task-watcher/store.test.ts b/ui/store/task-watcher/store.test.ts
index d260e35357..d9b5fa582c 100644
--- a/ui/store/task-watcher/store.test.ts
+++ b/ui/store/task-watcher/store.test.ts
@@ -23,6 +23,7 @@ describe("task watcher store", () => {
   const onError = vi.fn();
 
   beforeEach(() => {
+    window.dispatchEvent(new PageTransitionEvent("pageshow"));
     vi.clearAllMocks();
     localStorage.clear();
     Object.defineProperty(navigator, "locks", {
@@ -33,6 +34,179 @@ describe("task watcher store", () => {
     registerTaskKindHandler("test-kind", { onReady, onError });
   });
 
+  it.each(["beforeunload", "pagehide"])(
+    "preserves pending work when %s aborts its RPC and resumes on return",
+    async (eventType) => {
+      let rejectPoll!: (error: Error) => void;
+      pollMock.mockImplementationOnce(
+        () =>
+          new Promise((_resolve, reject) => {
+            rejectPoll = reject;
+          }),
+      );
+      const tracking = trackAndPollTask({
+        taskId: "reload-task",
+        kind: "test-kind",
+        meta: {},
+      });
+      await vi.waitFor(() => expect(pollMock).toHaveBeenCalledOnce());
+      window.dispatchEvent(new Event(eventType));
+      rejectPoll(new Error("The document was unloaded"));
+      if (eventType === "beforeunload") {
+        window.dispatchEvent(new PageTransitionEvent("pagehide"));
+      }
+      expect(await tracking).toEqual({ status: TASK_WATCHER_STATUS.PENDING });
+      expect(useTaskWatcherStore.getState().tasks["reload-task"]?.status).toBe(
+        TASK_WATCHER_STATUS.PENDING,
+      );
+      expect(onError).not.toHaveBeenCalled();
+
+      if (eventType === "pagehide") {
+        await flush();
+        expect(pollMock).toHaveBeenCalledOnce();
+        expect(onReady).not.toHaveBeenCalled();
+      }
+
+      pollMock.mockResolvedValue({ ok: true, state: "completed" });
+      window.dispatchEvent(
+        new PageTransitionEvent("pageshow", { persisted: true }),
+      );
+      await vi.waitFor(() => expect(onReady).toHaveBeenCalledOnce());
+    },
+  );
+
+  it("keeps the caller's promise and notifications when beforeunload does not hide the page", async () => {
+    // Given: a download or cancelled navigation leaves this document alive.
+    let rejectPoll!: (error: Error) => void;
+    pollMock
+      .mockImplementationOnce(
+        () =>
+          new Promise((_resolve, reject) => {
+            rejectPoll = reject;
+          }),
+      )
+      .mockResolvedValue({ ok: true, state: "completed" });
+    const tracking = trackAndPollTask({
+      taskId: "download-task",
+      kind: "test-kind",
+      meta: {},
+      notifyHandler: false,
+    });
+    await vi.waitFor(() => expect(pollMock).toHaveBeenCalledOnce());
+
+    // When: only the RPC is interrupted; the caller remains in this document.
+    window.dispatchEvent(new Event("beforeunload"));
+    rejectPoll(new Error("The navigation interrupted the request"));
+    // Then: the original caller receives the final result and owns notification.
+    expect(await tracking).toEqual({ status: TASK_WATCHER_STATUS.READY });
+    expect(onReady).not.toHaveBeenCalled();
+    expect(onError).not.toHaveBeenCalled();
+    expect(useTaskWatcherStore.getState().tasks["download-task"]?.status).toBe(
+      TASK_WATCHER_STATUS.READY,
+    );
+  });
+
+  it("preserves a navigation abort delivered after the visible page has recovered", async () => {
+    // Given
+    let rejectPoll!: (error: Error) => void;
+    pollMock
+      .mockImplementationOnce(
+        () =>
+          new Promise((_resolve, reject) => {
+            rejectPoll = reject;
+          }),
+      )
+      .mockResolvedValue({ ok: true, state: "completed" });
+    const tracking = trackAndPollTask({
+      taskId: "delayed-abort",
+      kind: "test-kind",
+      meta: {},
+    });
+    await vi.waitFor(() => expect(pollMock).toHaveBeenCalledOnce());
+
+    // When: browser RPC cancellation arrives after the unload event's task.
+    window.dispatchEvent(new Event("beforeunload"));
+    await flush();
+    rejectPoll(new Error("The navigation interrupted the request"));
+
+    // Then: the original caller gets the final result, not a provisional failure.
+    expect(await tracking).toEqual({ status: TASK_WATCHER_STATUS.READY });
+    expect(onReady).toHaveBeenCalledOnce();
+    expect(onError).not.toHaveBeenCalled();
+  });
+
+  it("allows new tasks after a download without discarding existing results", async () => {
+    // Given
+    const existingResult = {
+      taskId: "previous-export",
+      kind: "export",
+      status: TASK_WATCHER_STATUS.READY,
+      meta: {},
+      startedAt: Date.now(),
+      result: { downloadUrl: "/download" },
+    };
+    useTaskWatcherStore.getState().upsertTask(existingResult);
+    pollMock.mockResolvedValue({ ok: true, state: "completed" });
+
+    // When: a download starts but leaves the document in place.
+    window.dispatchEvent(new Event("beforeunload"));
+    await flush();
+    const result = await trackAndPollTask({
+      taskId: "after-download",
+      kind: "test-kind",
+      meta: {},
+    });
+
+    // Then
+    expect(result.status).toBe(TASK_WATCHER_STATUS.READY);
+    expect(onReady).toHaveBeenCalledOnce();
+    expect(useTaskWatcherStore.getState().tasks["previous-export"]).toEqual(
+      existingResult,
+    );
+  });
+
+  it("keeps caller ownership when bfcache restores before its RPC rejects", async () => {
+    // Given
+    let rejectPoll!: (error: Error) => void;
+    pollMock
+      .mockImplementationOnce(
+        () =>
+          new Promise((_resolve, reject) => {
+            rejectPoll = reject;
+          }),
+      )
+      .mockResolvedValue({ ok: true, state: "completed" });
+    const tracking = trackAndPollTask({
+      taskId: "bfcache-task",
+      kind: "test-kind",
+      meta: {},
+      notifyHandler: false,
+    });
+    await vi.waitFor(() => expect(pollMock).toHaveBeenCalledOnce());
+
+    // When: the cached document returns before its interrupted RPC rejects.
+    window.dispatchEvent(
+      new PageTransitionEvent("pagehide", { persisted: true }),
+    );
+    window.dispatchEvent(
+      new PageTransitionEvent("pageshow", { persisted: true }),
+    );
+    rejectPoll(new Error("The cached document interrupted the request"));
+
+    // Then
+    expect(await tracking).toEqual({ status: TASK_WATCHER_STATUS.READY });
+    expect(onReady).not.toHaveBeenCalled();
+    window.dispatchEvent(
+      new PageTransitionEvent("pageshow", { persisted: true }),
+    );
+    await flush();
+    expect(onReady).not.toHaveBeenCalled();
+    expect(onError).not.toHaveBeenCalled();
+    expect(useTaskWatcherStore.getState().tasks["bfcache-task"]?.status).toBe(
+      TASK_WATCHER_STATUS.READY,
+    );
+  });
+
   it("tracks a task, polls it to completion and fires onReady once", async () => {
     pollMock.mockResolvedValue({ ok: true, state: "completed" });
 
diff --git a/ui/store/task-watcher/store.ts b/ui/store/task-watcher/store.ts
index e95389872e..4ddf9c22e8 100644
--- a/ui/store/task-watcher/store.ts
+++ b/ui/store/task-watcher/store.ts
@@ -117,12 +117,71 @@ export const useTaskWatcherStore = create<TaskWatcherState>()(
 const activePolls = new Map<string, Promise<TaskTrackingResult<unknown>>>();
 const suppressedHandlers = new Set<string>();
 
+// Navigation aborts outstanding Server Action requests. That is not a backend
+// task failure: keep its persisted identity for the next document to resume.
+let pageSuspended = false;
+let pageHidden = false;
+let navigationGeneration = 0;
+let pageRecoveryTimer: ReturnType<typeof setTimeout> | undefined;
+const pageRecoveryWaiters = new Set<(visible: boolean) => void>();
+
+const resolvePageRecovery = (visible: boolean) => {
+  pageRecoveryWaiters.forEach((resolve) => resolve(visible));
+  pageRecoveryWaiters.clear();
+};
+
+const resumeVisiblePage = () => {
+  clearTimeout(pageRecoveryTimer);
+  // Downloads and cancelled navigation emit beforeunload without pagehide.
+  // Let pagehide confirm navigation before retrying in the surviving document.
+  pageRecoveryTimer = setTimeout(() => {
+    pageRecoveryTimer = undefined;
+    if (pageHidden) return;
+    pageSuspended = false;
+    resolvePageRecovery(true);
+    void resumePendingTaskPolling();
+  }, 0);
+};
+
+const waitForVisiblePage = (): Promise<boolean> => {
+  if (pageHidden) return Promise.resolve(false);
+  return new Promise((resolve) => {
+    pageRecoveryWaiters.add(resolve);
+    resumeVisiblePage();
+  });
+};
+
+if (typeof window !== "undefined") {
+  // Browsers can abort a Server Action before pagehide is dispatched.
+  // Mark the navigation at its start so that abort cannot discard the task.
+  window.addEventListener("beforeunload", () => {
+    navigationGeneration++;
+    pageSuspended = true;
+    resumeVisiblePage();
+  });
+  window.addEventListener("pagehide", () => {
+    navigationGeneration++;
+    clearTimeout(pageRecoveryTimer);
+    pageHidden = true;
+    pageSuspended = true;
+    resolvePageRecovery(false);
+  });
+  window.addEventListener("pageshow", (event) => {
+    clearTimeout(pageRecoveryTimer);
+    pageHidden = false;
+    pageSuspended = false;
+    resolvePageRecovery(true);
+    if (event.persisted) void resumePendingTaskPolling();
+  });
+}
+
 const settleTask = (
   taskId: string,
   status: TaskWatcherStatus,
   error?: string,
   result?: unknown,
 ): TaskTrackingResult => {
+  if (pageSuspended) return { status: TASK_WATCHER_STATUS.PENDING };
   const store = useTaskWatcherStore.getState();
   const currentTask = store.tasks[taskId];
   if (!currentTask || currentTask.status !== TASK_WATCHER_STATUS.PENDING) {
@@ -224,23 +283,37 @@ const pollUntilDone = <R>(taskId: string): Promise<TaskTrackingResult<R>> => {
         return runPollLoop<R>(taskId);
       };
 
-      if (typeof navigator !== "undefined" && navigator.locks) {
-        return await navigator.locks.request(
-          `task-watcher:${taskId}`,
-          runIfPending,
-        );
-      }
+      for (;;) {
+        const pollNavigationGeneration = navigationGeneration;
+        try {
+          const result =
+            typeof navigator !== "undefined" && navigator.locks
+              ? await navigator.locks.request(
+                  `task-watcher:${taskId}`,
+                  runIfPending,
+                )
+              : await runIfPending();
+          if (result.status !== TASK_WATCHER_STATUS.PENDING) return result;
+        } catch {
+          if (
+            !pageSuspended &&
+            navigationGeneration === pollNavigationGeneration
+          ) {
+            return settleTask(
+              taskId,
+              TASK_WATCHER_STATUS.ERROR,
+              "Tracking the task failed unexpectedly. Try again later.",
+            ) as TaskTrackingResult<R>;
+          }
+        }
 
-      return await runIfPending();
-    } catch {
-      // A thrown poll (e.g. the server-action RPC failing on a network drop)
-      // must still settle the task, or it stays PENDING in the persisted
-      // store and blocks the UI until the staleness ceiling.
-      return settleTask(
-        taskId,
-        TASK_WATCHER_STATUS.ERROR,
-        "Tracking the task failed unexpectedly. Try again later.",
-      ) as TaskTrackingResult<R>;
+        // Downloads and cancelled navigation keep the original caller alive.
+        // Retry within its promise so it retains notification ownership and
+        // receives a terminal result. Only a hidden document hands off to resume.
+        if (!(await waitForVisiblePage())) {
+          return { status: TASK_WATCHER_STATUS.PENDING };
+        }
+      }
     } finally {
       activePolls.delete(taskId);
     }
@@ -295,9 +368,6 @@ export const trackAndPollTask = async <R = unknown>({
 export const resumePendingTasks = async (): Promise<void> => {
   const store = useTaskWatcherStore.getState();
   const persistedTasks = Object.values(store.tasks);
-  const pending = persistedTasks.filter(
-    (task) => task.status === TASK_WATCHER_STATUS.PENDING,
-  );
 
   // Settled entries already surfaced in the previous browser session. The
   // server-rendered feature UI resolves durable results again on reload, so
@@ -306,6 +376,13 @@ export const resumePendingTasks = async (): Promise<void> => {
     .filter((task) => task.status !== TASK_WATCHER_STATUS.PENDING)
     .forEach((task) => store.dismissTask(task.taskId));
 
+  await resumePendingTaskPolling();
+};
+
+async function resumePendingTaskPolling(): Promise<void> {
+  const pending = Object.values(useTaskWatcherStore.getState().tasks).filter(
+    (task) => task.status === TASK_WATCHER_STATUS.PENDING,
+  );
   await Promise.all(
     pending.map((task) => {
       if (Date.now() - task.startedAt > STALE_TASK_MS) {
@@ -319,4 +396,4 @@ export const resumePendingTasks = async (): Promise<void> => {
       return pollUntilDone(task.taskId);
     }),
   );
-};
+}
diff --git a/ui/store/ui/store-initializer.test.tsx b/ui/store/ui/store-initializer.test.tsx
new file mode 100644
index 0000000000..01a3545bb9
--- /dev/null
+++ b/ui/store/ui/store-initializer.test.tsx
@@ -0,0 +1,36 @@
+import { render } from "@testing-library/react";
+import { beforeEach, describe, expect, it } from "vitest";
+
+import { useUIStore } from "./store";
+import { StoreInitializer } from "./store-initializer";
+
+describe("StoreInitializer", () => {
+  beforeEach(() => {
+    localStorage.clear();
+    useUIStore.setState({ hasProviders: false, registryEligible: false });
+  });
+
+  it("keeps Registry hidden when the server sends no eligibility decision", () => {
+    // Given / When
+    render(<StoreInitializer values={{ hasProviders: true }} />);
+
+    // Then
+    expect(useUIStore.getState().registryEligible).toBe(false);
+    expect(useUIStore.getState().hasProviders).toBe(true);
+  });
+
+  it("never persists Registry eligibility across sessions", () => {
+    // Given / When
+    render(
+      <StoreInitializer
+        values={{ hasProviders: true, registryEligible: true }}
+      />,
+    );
+
+    // Then
+    expect(useUIStore.getState().registryEligible).toBe(true);
+    const persisted = JSON.parse(localStorage.getItem("ui-store") ?? "{}");
+    expect(persisted.state?.hasProviders).toBe(true);
+    expect(persisted.state).not.toHaveProperty("registryEligible");
+  });
+});
diff --git a/ui/store/ui/store-initializer.tsx b/ui/store/ui/store-initializer.tsx
index d2f1d32965..b86c9934c7 100644
--- a/ui/store/ui/store-initializer.tsx
+++ b/ui/store/ui/store-initializer.tsx
@@ -7,6 +7,7 @@ import { useUIStore } from "@/store/ui/store";
 interface StoreInitializerProps {
   values: {
     hasProviders?: boolean;
+    registryEligible?: boolean;
     // Add more properties here as needed
     // otherProperty?: string;
   };
@@ -14,14 +15,23 @@ interface StoreInitializerProps {
 
 export function StoreInitializer({ values }: StoreInitializerProps) {
   const setHasProviders = useUIStore((state) => state.setHasProviders);
+  const setRegistryEligible = useUIStore((state) => state.setRegistryEligible);
 
   useEffect(() => {
     // Initialize store values from server
     if (values.hasProviders !== undefined) {
       setHasProviders(values.hasProviders);
     }
+    if (values.registryEligible !== undefined) {
+      setRegistryEligible(values.registryEligible);
+    }
     // Add more setters here as needed in the future
-  }, [values.hasProviders, setHasProviders]);
+  }, [
+    values.hasProviders,
+    values.registryEligible,
+    setHasProviders,
+    setRegistryEligible,
+  ]);
 
   return null;
 }
diff --git a/ui/store/ui/store.ts b/ui/store/ui/store.ts
index 50cce2adf8..5aa321e0b1 100644
--- a/ui/store/ui/store.ts
+++ b/ui/store/ui/store.ts
@@ -4,10 +4,12 @@ import { persist } from "zustand/middleware";
 interface UIStoreState {
   isSideMenuOpen: boolean;
   hasProviders: boolean;
+  registryEligible: boolean;
 
   openSideMenu: () => void;
   closeSideMenu: () => void;
   setHasProviders: (value: boolean) => void;
+  setRegistryEligible: (value: boolean) => void;
 }
 
 export const useUIStore = create<UIStoreState>()(
@@ -15,12 +17,21 @@ export const useUIStore = create<UIStoreState>()(
     (set) => ({
       isSideMenuOpen: false,
       hasProviders: false,
+      registryEligible: false,
       openSideMenu: () => set({ isSideMenuOpen: true }),
       closeSideMenu: () => set({ isSideMenuOpen: false }),
       setHasProviders: (value: boolean) => set({ hasProviders: value }),
+      setRegistryEligible: (value: boolean) => set({ registryEligible: value }),
     }),
     {
       name: "ui-store",
+      // Registry eligibility is a per-request server decision; persisting it
+      // would resurface a stale entry on the next session before the server
+      // seed corrects it.
+      partialize: ({ isSideMenuOpen, hasProviders }) => ({
+        isSideMenuOpen,
+        hasProviders,
+      }),
     },
   ),
 );
diff --git a/ui/tests/providers/providers-page.ts b/ui/tests/providers/providers-page.ts
index 070649a4a7..e9bd96cf08 100644
--- a/ui/tests/providers/providers-page.ts
+++ b/ui/tests/providers/providers-page.ts
@@ -719,6 +719,15 @@ export class ProvidersPage extends BasePage {
     await singleSubscriptionOption.click();
   }
 
+  async selectGCPSingleProjectMethod(): Promise<void> {
+    const singleProjectOption = this.page.getByRole("radio", {
+      name: "Add A Single GCP Project",
+      exact: true,
+    });
+    await expect(singleProjectOption).toBeVisible({ timeout: 10000 });
+    await singleProjectOption.click();
+  }
+
   async selectAWSOrganizationsMethod(): Promise<void> {
     await this.page
       .getByRole("radio", {
diff --git a/ui/tests/providers/providers.md b/ui/tests/providers/providers.md
index a2914c2cde..6aacca06da 100644
--- a/ui/tests/providers/providers.md
+++ b/ui/tests/providers/providers.md
@@ -374,12 +374,13 @@
 1. Navigate to providers page
 2. Click "Add Provider" button
 3. Select GCP provider type
-4. Fill provider details (project ID and alias)
-5. Select service account credentials type
-6. Fill GCP service account key credentials
-7. Confirm provider connection without launching a scan
-8. Verify return to Providers page
-9. Verify provider exists in Providers table
+4. Select "Add A Single GCP Project"
+5. Fill provider details (project ID and alias)
+6. Select service account credentials type
+7. Fill GCP service account key credentials
+8. Confirm provider connection without launching a scan
+9. Verify return to Providers page
+10. Verify provider exists in Providers table
 
 ### Expected Result
 
diff --git a/ui/tests/providers/providers.spec.ts b/ui/tests/providers/providers.spec.ts
index 8900f3fd5f..724428df5e 100644
--- a/ui/tests/providers/providers.spec.ts
+++ b/ui/tests/providers/providers.spec.ts
@@ -744,8 +744,9 @@ test.describe("Add Provider", () => {
         await providersPage.clickAddProvider();
         await providersPage.verifyConnectAccountPageLoaded();
 
-        // Select M365 provider
+        // Select GCP provider and the single-project onboarding method
         await providersPage.selectGCPProvider();
+        await providersPage.selectGCPSingleProjectMethod();
 
         // Fill provider details
         await providersPage.fillGCPProviderDetails(gcpProviderData);
diff --git a/ui/tests/registry/add-provider-tour-report.md b/ui/tests/registry/add-provider-tour-report.md
new file mode 100644
index 0000000000..cdc2c172e7
--- /dev/null
+++ b/ui/tests/registry/add-provider-tour-report.md
@@ -0,0 +1,16 @@
+## Tour Alignment Report
+
+**Tour:** `add-provider@v2`
+**Files touched:** ui/components/providers/radio-group-provider.tsx, ui/components/providers/workflow/forms/connect-account-form.tsx, ui/components/providers/wizard/steps/credentials-step.tsx, ui/components/providers/wizard/steps/dynamic-credentials-step.tsx, ui/components/providers/table/data-table-row-actions.tsx
+
+### Drift detected
+
+No drift detected.
+
+### Recommended actions
+
+None required.
+
+### Version bump verdict
+
+- NO bump — The trigger, provider selector, and wizard body retain their existing anchors. Registry adds provider choices within the same account, credentials, connection, and scan sequence described by version 2.
diff --git a/ui/tests/registry/controlled-registry-api.mts b/ui/tests/registry/controlled-registry-api.mts
new file mode 100644
index 0000000000..a35af92d26
--- /dev/null
+++ b/ui/tests/registry/controlled-registry-api.mts
@@ -0,0 +1,852 @@
+import {
+  createServer,
+  type IncomingMessage,
+  type ServerResponse,
+} from "node:http";
+
+const port = 4300;
+const taskId = "fixture-registry-validation-task";
+const artifactTaskId = "fixture-registry-artifact-task";
+const fixtureAccessToken = [
+  base64UrlJson({ alg: "none", typ: "JWT" }),
+  base64UrlJson({
+    exp: 4_102_444_800,
+    sub: "fixture-registry-user",
+    tenant_id: "fixture-registry-tenant",
+  }),
+  "fixture-signature-not-a-secret",
+].join(".");
+
+type CredentialState = "active" | "onboarding" | "pending";
+type DiscoveryMode = "error" | "ready" | "reconnect" | "unavailable";
+
+const fixtureProviderId = "d4e71fb8-c657-4c1b-a6ea-92fe611b3431";
+const fixtureSecretId = "e9d17da5-04d7-447b-a59d-8726794a6d55";
+const fixtureScanId = "9b82e67d-513b-4c41-b981-9e559f920f40";
+const fixtureConnectionTaskId = "2118a6a8-7795-4d70-822a-7256c837fd30";
+
+interface FixtureState {
+  publishedArtifacts: string[];
+  catalogReadCount: number;
+  catalogVersion: string;
+  artifactTaskError: string | null;
+  resolvedVersions: Map<string, string>;
+  holdArtifactTask: boolean;
+  holdCredentialTask: boolean;
+  providerCreated: boolean;
+  providerUid: string;
+  providerAlias: string;
+  secretSaved: boolean;
+  connected: boolean;
+  scanCreated: boolean;
+  connectionReadCount: number;
+  artifactEvents: string[];
+  artifactReadCount: number;
+  artifactSubmissionCount: number;
+  artifactTaskNormalizedName?: string;
+  artifactTaskReadCount: number;
+  artifactTaskVersionSpec?: string;
+  credentialAccepted: boolean;
+  credentialReadCount: number;
+  credentialState: CredentialState;
+  discoveryMode: DiscoveryMode;
+  hasCurrentAuthority: boolean;
+  taskReadCount: number;
+  tenantArtifacts: Map<string, string>;
+}
+
+const initialState = (): FixtureState => ({
+  publishedArtifacts: [],
+  catalogReadCount: 0,
+  catalogVersion: "1.2.3",
+  artifactTaskError: null,
+  resolvedVersions: new Map(),
+  holdArtifactTask: false,
+  holdCredentialTask: false,
+  providerCreated: false,
+  providerUid: "",
+  providerAlias: "",
+  secretSaved: false,
+  connected: false,
+  scanCreated: false,
+  connectionReadCount: 0,
+  artifactEvents: [],
+  artifactReadCount: 0,
+  artifactSubmissionCount: 0,
+  artifactTaskReadCount: 0,
+  credentialAccepted: false,
+  credentialReadCount: 0,
+  credentialState: "onboarding",
+  discoveryMode: "ready",
+  hasCurrentAuthority: true,
+  taskReadCount: 0,
+  tenantArtifacts: new Map(),
+});
+
+let state = initialState();
+
+const catalogPages = [
+  [
+    catalogArtifact("fixture-network-audit", {
+      description: "Synthetic Registry fixture network audit",
+      has_checks: true,
+      has_provider: true,
+      is_builtin: false,
+      is_official: true,
+      is_verified: true,
+      latest_version: "1.2.3",
+      name: "Fixture network audit",
+      owner_logo_url:
+        "https://media.registry.dev.prowler.com/fixture-owner.svg",
+      owner_name: "Prowler Fixtures",
+      owner_slug: "prowler-fixtures",
+      owner_type: "organization",
+      providers: ["fixturecloud"],
+    }),
+    catalogArtifact("fixture-built-in-provider", {
+      description: "Synthetic Registry fixture built-in provider",
+      has_provider: true,
+      is_builtin: true,
+      latest_version: "1.0.0",
+      name: "Fixture built-in provider",
+      providers: ["aws"],
+    }),
+    catalogArtifact("fixture-shared-policy", {
+      description: "Synthetic Registry fixture shared policy",
+      has_compliance: true,
+      latest_version: "2.0.0",
+      name: "Fixture shared policy",
+      owner_name: "Community Fixtures",
+      owner_slug: "community-fixtures",
+      owner_type: "organization",
+      providers: ["aws"],
+    }),
+  ],
+  [
+    catalogArtifact("fixture-shared-policy", {
+      description: "Synthetic Registry fixture shared policy",
+      has_compliance: true,
+      latest_version: "2.0.0",
+      name: "Fixture shared policy",
+      providers: ["gcp"],
+    }),
+  ],
+] as const;
+
+const server = createServer(async (request, response) => {
+  const url = new URL(request.url ?? "/", "http://127.0.0.1");
+
+  try {
+    if (url.pathname.startsWith("/__fixture__/registry/")) {
+      await handleFixtureControl(request, response, url.pathname);
+      return;
+    }
+
+    await handleApiRequest(request, response, url);
+  } catch {
+    sendJson(response, 500, { errors: [{ code: "fixture_request_failed" }] });
+  }
+});
+
+server.listen(port, "127.0.0.1");
+
+async function handleFixtureControl(
+  request: IncomingMessage,
+  response: ServerResponse,
+  pathname: string,
+) {
+  if (
+    request.method !== "POST" &&
+    pathname !== "/__fixture__/registry/snapshot"
+  ) {
+    sendJson(response, 405, { errors: [{ code: "method_not_allowed" }] });
+    return;
+  }
+
+  if (pathname === "/__fixture__/registry/reset") {
+    state = initialState();
+    sendJson(response, 200, { ok: true });
+    return;
+  }
+
+  if (pathname === "/__fixture__/registry/revoke-current-authority") {
+    state.hasCurrentAuthority = false;
+    sendJson(response, 200, { ok: true });
+    return;
+  }
+
+  if (pathname === "/__fixture__/registry/artifact-task-hold") {
+    const body = await readJson(request);
+    state.holdArtifactTask = readStringField(body, "hold") === "true";
+    sendJson(response, 200, { ok: true });
+    return;
+  }
+
+  if (pathname === "/__fixture__/registry/credential-task-hold") {
+    const body = await readJson(request);
+    state.holdCredentialTask = readStringField(body, "hold") === "true";
+    sendJson(response, 200, { ok: true });
+    return;
+  }
+
+  if (pathname === "/__fixture__/registry/catalog-version") {
+    const body = await readJson(request);
+    state.catalogVersion = readStringField(body, "version") || "1.2.3";
+    sendJson(response, 200, { ok: true });
+    return;
+  }
+
+  if (pathname === "/__fixture__/registry/publish-artifact") {
+    const name = readStringField(await readJson(request), "name");
+    if (name && !state.publishedArtifacts.includes(name))
+      state.publishedArtifacts.push(name);
+    sendJson(response, 200, { ok: true });
+    return;
+  }
+
+  if (pathname === "/__fixture__/registry/artifact-task-error") {
+    const body = await readJson(request);
+    state.artifactTaskError = readStringField(body, "error") || null;
+    sendJson(response, 200, { ok: true });
+    return;
+  }
+
+  if (pathname === "/__fixture__/registry/discovery-mode") {
+    const body = await readJson(request);
+    const mode = readStringField(body, "mode");
+    if (!mode || !["error", "reconnect", "unavailable"].includes(mode)) {
+      sendJson(response, 400, { errors: [{ code: "invalid_fixture_mode" }] });
+      return;
+    }
+    state.discoveryMode = mode as Exclude<DiscoveryMode, "ready">;
+    sendJson(response, 200, { ok: true });
+    return;
+  }
+
+  if (pathname === "/__fixture__/registry/snapshot") {
+    sendJson(response, 200, {
+      artifactEvents: state.artifactEvents,
+      catalogReadCount: state.catalogReadCount,
+      artifactReadCount: state.artifactReadCount,
+      artifactSubmissionCount: state.artifactSubmissionCount,
+      artifactTaskReadCount: state.artifactTaskReadCount,
+      artifactTaskVersionSpec: state.artifactTaskVersionSpec,
+      installedVersion: state.resolvedVersions.get("fixture-network-audit"),
+      credentialAccepted: state.credentialAccepted,
+      credentialReadCount: state.credentialReadCount,
+      taskReadCount: state.taskReadCount,
+      providerCreated: state.providerCreated,
+      secretSaved: state.secretSaved,
+      connected: state.connected,
+      scanCreated: state.scanCreated,
+    });
+    return;
+  }
+
+  sendJson(response, 404, { errors: [{ code: "fixture_not_found" }] });
+}
+
+async function handleApiRequest(
+  request: IncomingMessage,
+  response: ServerResponse,
+  url: URL,
+) {
+  const { method } = request;
+  const { pathname } = url;
+
+  if (method === "GET" && pathname === "/health") {
+    sendJson(response, 200, { status: "ready" });
+    return;
+  }
+
+  if (method === "POST" && pathname === "/api/v1/tokens") {
+    sendJson(response, 200, tokenDocument());
+    return;
+  }
+
+  if (method === "POST" && pathname === "/api/v1/tokens/refresh") {
+    sendJson(response, 200, tokenDocument());
+    return;
+  }
+
+  if (method === "GET" && pathname === "/api/v1/users/me") {
+    sendJson(response, 200, currentUserDocument());
+    return;
+  }
+
+  if (method === "GET" && pathname === "/api/v1/provider-groups") {
+    sendJson(response, 200, { data: [] });
+    return;
+  }
+
+  if (
+    method === "GET" &&
+    [
+      "/api/v1/organizations",
+      "/api/v1/scan-configurations",
+      "/api/v1/schedules",
+    ].includes(pathname)
+  ) {
+    sendJson(response, 200, collectionDocument([]));
+    return;
+  }
+  if (method === "GET" && pathname === "/api/v1/providers") {
+    sendJson(
+      response,
+      200,
+      collectionDocument(state.providerCreated ? [providerResource()] : []),
+    );
+    return;
+  }
+  if (method === "POST" && pathname === "/api/v1/providers") {
+    const body = await readJson(request);
+    if (
+      !state.tenantArtifacts.has("fixture-network-audit") ||
+      state.providerCreated ||
+      readNestedString(body, ["data", "attributes", "provider"]) !==
+        "fixturecloud"
+    ) {
+      sendJson(response, 400, {
+        errors: [{ detail: "Provider is unavailable or already exists." }],
+      });
+      return;
+    }
+    state.providerCreated = true;
+    state.providerUid =
+      readNestedString(body, ["data", "attributes", "uid"]) || "";
+    state.providerAlias =
+      readNestedString(body, ["data", "attributes", "alias"]) || "";
+    sendJson(response, 201, { data: providerResource() });
+    return;
+  }
+  if (
+    method === "GET" &&
+    pathname === `/api/v1/providers/${fixtureProviderId}`
+  ) {
+    sendJson(response, 200, { data: providerResource() });
+    return;
+  }
+  if (
+    method === "GET" &&
+    pathname === "/api/v1/provider-schemas/fixturecloud"
+  ) {
+    sendJson(response, 200, {
+      data: {
+        id: "fixturecloud",
+        type: "provider-schemas",
+        attributes: {
+          secret_types: {
+            api_key: {
+              type: "object",
+              properties: {
+                token: {
+                  type: "string",
+                  title: "API token",
+                  format: "password",
+                  writeOnly: true,
+                },
+              },
+              required: ["token"],
+            },
+          },
+        },
+      },
+    });
+    return;
+  }
+  if (
+    (method === "POST" && pathname === "/api/v1/providers/secrets") ||
+    (method === "PATCH" &&
+      pathname === `/api/v1/providers/secrets/${fixtureSecretId}`)
+  ) {
+    const body = await readJson(request);
+    state.secretSaved =
+      readNestedString(body, ["data", "attributes", "secret", "token"]) ===
+        "fixture-provider-token-not-a-secret" &&
+      readNestedString(body, ["data", "attributes", "secret_type"]) ===
+        "api_key";
+    sendJson(
+      response,
+      state.secretSaved ? 201 : 400,
+      state.secretSaved
+        ? { data: { id: fixtureSecretId, type: "provider-secrets" } }
+        : { errors: [{ detail: "Invalid test credentials" }] },
+    );
+    return;
+  }
+  if (
+    method === "POST" &&
+    pathname === `/api/v1/providers/${fixtureProviderId}/connection`
+  ) {
+    state.connectionReadCount = 0;
+    sendJson(response, 202, {
+      data: { id: fixtureConnectionTaskId, type: "tasks" },
+    });
+    return;
+  }
+  if (
+    method === "GET" &&
+    pathname === `/api/v1/tasks/${fixtureConnectionTaskId}`
+  ) {
+    state.connectionReadCount += 1;
+    const complete = state.connectionReadCount >= 2;
+    state.connected = complete && state.secretSaved;
+    sendJson(response, 200, {
+      data: {
+        id: fixtureConnectionTaskId,
+        type: "tasks",
+        attributes: {
+          state: complete ? "completed" : "executing",
+          result: complete ? { connected: state.connected, error: null } : null,
+        },
+      },
+    });
+    return;
+  }
+  if (method === "POST" && pathname === "/api/v1/scans") {
+    if (!state.connected) {
+      sendJson(response, 400, {
+        errors: [{ detail: "Connect the provider first" }],
+      });
+      return;
+    }
+    state.scanCreated = true;
+    sendJson(response, 201, { data: scanResource() });
+    return;
+  }
+  if (method === "GET" && pathname === "/api/v1/scans") {
+    const states = url.searchParams.get("filter[state__in]");
+    const data =
+      state.scanCreated && (!states || states.includes("completed"))
+        ? [scanResource()]
+        : [];
+    sendJson(response, 200, {
+      ...collectionDocument(data),
+      included: state.providerCreated ? [providerResource()] : [],
+    });
+    return;
+  }
+
+  if (method === "GET" && pathname === "/api/v1/registry/credential") {
+    state.credentialReadCount += 1;
+    sendJson(response, 200, credentialDocument());
+    return;
+  }
+
+  if (method === "POST" && pathname === "/api/v1/registry/credential") {
+    const body = await readJson(request);
+    state.credentialAccepted =
+      readNestedString(body, ["data", "attributes", "api_key"]) ===
+      "fixture-registry-key-not-a-secret";
+    if (!state.credentialAccepted) {
+      sendJson(response, 422, { errors: [{ code: "invalid_fixture_key" }] });
+      return;
+    }
+    state.credentialState = "pending";
+    state.taskReadCount = 0;
+    sendJson(
+      response,
+      202,
+      { data: { id: taskId, type: "tasks" } },
+      { "Content-Location": `/api/v1/tasks/${taskId}` },
+    );
+    return;
+  }
+
+  if (method === "DELETE" && pathname === "/api/v1/registry/credential") {
+    state.credentialState = "onboarding";
+    sendJson(response, 204);
+    return;
+  }
+
+  if (method === "GET" && pathname === `/api/v1/tasks/${taskId}`) {
+    state.taskReadCount += 1;
+    const complete = state.taskReadCount >= 2 && !state.holdCredentialTask;
+    if (complete) state.credentialState = "active";
+    sendJson(response, 200, {
+      data: {
+        attributes: {
+          state: complete ? "completed" : "executing",
+          ...(complete ? { result: { stored: true, error: null } } : {}),
+        },
+        id: taskId,
+        type: "tasks",
+      },
+    });
+    return;
+  }
+
+  if (method === "GET" && pathname === "/api/v1/registry/artifacts") {
+    state.artifactReadCount += 1;
+    state.artifactEvents.push("authoritative-read");
+    sendJson(response, 200, tenantArtifactsDocument());
+    return;
+  }
+
+  if (method === "POST" && pathname === "/api/v1/registry/artifacts") {
+    const body = bodyOrEmpty(await readJson(request));
+    const normalizedName = readNestedString(body, [
+      "data",
+      "attributes",
+      "normalized_name",
+    ]);
+    const versionSpec = readNestedString(body, [
+      "data",
+      "attributes",
+      "version_spec",
+    ]);
+    if (
+      !normalizedName ||
+      !versionSpec ||
+      !hasCatalogArtifact(normalizedName)
+    ) {
+      sendJson(response, 404, {
+        errors: [{ code: "registry_artifact_not_found" }],
+      });
+      return;
+    }
+    state.artifactEvents.push("submission");
+    state.artifactSubmissionCount += 1;
+    state.artifactTaskNormalizedName = normalizedName;
+    state.artifactTaskReadCount = 0;
+    state.artifactTaskVersionSpec = versionSpec;
+    sendJson(
+      response,
+      202,
+      {
+        data: {
+          id: `${artifactTaskId}-${state.artifactSubmissionCount}`,
+          type: "tasks",
+        },
+      },
+      {
+        "Content-Location": `/api/v1/tasks/${artifactTaskId}-${state.artifactSubmissionCount}`,
+      },
+    );
+    return;
+  }
+
+  if (
+    method === "GET" &&
+    pathname ===
+      `/api/v1/tasks/${artifactTaskId}-${state.artifactSubmissionCount}`
+  ) {
+    if (!state.artifactTaskNormalizedName || !state.artifactTaskVersionSpec) {
+      sendJson(response, 404, { errors: [{ code: "fixture_task_not_found" }] });
+      return;
+    }
+
+    state.artifactEvents.push("task-poll");
+    state.artifactTaskReadCount += 1;
+    const complete =
+      state.artifactTaskReadCount >= 2 && !state.holdArtifactTask;
+    if (complete && !state.artifactTaskError) {
+      state.tenantArtifacts.set(
+        state.artifactTaskNormalizedName,
+        state.artifactTaskVersionSpec,
+      );
+      state.resolvedVersions.set(
+        state.artifactTaskNormalizedName,
+        state.artifactTaskVersionSpec === "latest"
+          ? state.catalogVersion
+          : state.artifactTaskVersionSpec,
+      );
+    }
+    sendJson(response, 200, {
+      data: {
+        attributes: complete
+          ? {
+              state: "completed",
+              result: {
+                installed: !state.artifactTaskError,
+                error: state.artifactTaskError,
+              },
+            }
+          : { state: "executing" },
+        id: `${artifactTaskId}-${state.artifactSubmissionCount}`,
+        type: "tasks",
+      },
+    });
+    return;
+  }
+
+  if (
+    method === "DELETE" &&
+    pathname.startsWith("/api/v1/registry/artifacts/")
+  ) {
+    const normalizedName = decodeURIComponent(
+      pathname.slice("/api/v1/registry/artifacts/".length),
+    );
+    state.tenantArtifacts.delete(normalizedName);
+    state.resolvedVersions.delete(normalizedName);
+    sendJson(response, 204);
+    return;
+  }
+
+  if (method === "GET" && pathname === "/api/v1/registry/providers") {
+    sendDiscoveryResponse(response);
+    return;
+  }
+
+  if (method === "GET" && pathname === "/api/v1/registry/available-artifacts") {
+    state.catalogReadCount += 1;
+    if (state.discoveryMode !== "ready") {
+      sendDiscoveryResponse(response);
+      return;
+    }
+    const page = Number(url.searchParams.get("page[number]") ?? "1");
+    const data = catalogPages[page - 1];
+    if (!data) {
+      sendJson(response, 400, { errors: [{ code: "invalid_fixture_page" }] });
+      return;
+    }
+    sendJson(response, 200, {
+      data: [
+        ...data.map((artifact) =>
+          artifact.id === "fixture-network-audit"
+            ? {
+                ...artifact,
+                attributes: {
+                  ...artifact.attributes,
+                  latest_version: state.catalogVersion,
+                },
+              }
+            : artifact,
+        ),
+        ...(page === 1
+          ? state.publishedArtifacts.map((name) =>
+              catalogArtifact(name.toLowerCase().replaceAll(" ", "-"), {
+                name,
+                latest_version: "1.0.0",
+                has_checks: true,
+                providers: ["aws"],
+              }),
+            )
+          : []),
+      ],
+      meta: {
+        pagination: {
+          count: 4 + state.publishedArtifacts.length,
+          page,
+          pages: 2,
+        },
+      },
+    });
+    return;
+  }
+
+  sendJson(response, 404, { errors: [{ code: "fixture_route_not_found" }] });
+}
+
+function bodyOrEmpty(body: unknown) {
+  return body ?? {};
+}
+
+function sendDiscoveryResponse(response: ServerResponse) {
+  if (state.discoveryMode === "ready") {
+    sendJson(response, 200, {
+      data: [
+        {
+          id: "fixturecloud",
+          type: "registry-providers",
+          attributes: { name: "Fixture Cloud", logo_url: null },
+        },
+      ],
+    });
+    return;
+  }
+
+  const responseByMode = {
+    error: [500, "fixture_unexpected_failure"],
+    reconnect: [502, "registry_key_rejected"],
+    unavailable: [503, "registry_unavailable"],
+  } as const;
+  const [status, code] = responseByMode[state.discoveryMode];
+  sendJson(response, status, { errors: [{ code }] });
+}
+
+function credentialDocument() {
+  const active = state.credentialState === "active";
+  return {
+    data: {
+      attributes: {
+        configured: active || state.credentialState === "pending",
+        is_valid: active,
+        scopes: active ? ["fixture:registry"] : [],
+        validation_pending: state.credentialState === "pending",
+        validation_status: active ? "valid" : "pending",
+      },
+      type: "registry-credentials",
+    },
+  };
+}
+
+function currentUserDocument() {
+  return {
+    data: {
+      attributes: {
+        company_name: "Fixture Registry Company",
+        date_joined: "2026-01-01T00:00:00Z",
+        email: "registry-fixture-user@example.test",
+        name: "Fixture Registry Manager",
+      },
+      id: "fixture-registry-user",
+      type: "users",
+    },
+    included: [
+      {
+        attributes: {
+          manage_registry: state.hasCurrentAuthority,
+          manage_providers: true,
+          manage_scans: true,
+          unlimited_visibility: true,
+          manage_billing: false,
+        },
+        id: "fixture-registry-role",
+        type: "roles",
+      },
+    ],
+  };
+}
+
+function tenantArtifactsDocument() {
+  return {
+    data: Array.from(state.tenantArtifacts, ([id, versionSpec]) => ({
+      attributes: {
+        inserted_at: "2026-01-01T00:00:00Z",
+        updated_at: "2026-01-01T00:00:00Z",
+        version_spec: versionSpec,
+        resolved_version: state.resolvedVersions.get(id),
+      },
+      id,
+      type: "registry-artifacts",
+    })),
+  };
+}
+
+function tokenDocument() {
+  return {
+    data: {
+      attributes: {
+        access: fixtureAccessToken,
+        refresh: "fixture-refresh-token-not-a-secret",
+      },
+      type: "tokens",
+    },
+  };
+}
+
+function catalogArtifact(id: string, attributes: Record<string, unknown>) {
+  return { attributes, id, type: "registry-artifacts" };
+}
+
+function hasCatalogArtifact(normalizedName: string) {
+  return catalogPages.flat().some((artifact) => artifact.id === normalizedName);
+}
+
+function base64UrlJson(value: Record<string, unknown>) {
+  return Buffer.from(JSON.stringify(value)).toString("base64url");
+}
+
+async function readJson(request: IncomingMessage): Promise<unknown> {
+  const chunks: Buffer[] = [];
+  for await (const chunk of request) chunks.push(Buffer.from(chunk));
+  if (chunks.length === 0) return undefined;
+  return JSON.parse(Buffer.concat(chunks).toString("utf8")) as unknown;
+}
+
+function readStringField(value: unknown, field: string) {
+  return isRecord(value) && typeof value[field] === "string"
+    ? value[field]
+    : undefined;
+}
+
+function readNestedString(value: unknown, path: string[]) {
+  let current = value;
+  for (const segment of path) {
+    if (!isRecord(current)) return undefined;
+    current = current[segment];
+  }
+  return typeof current === "string" ? current : undefined;
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value !== null;
+}
+
+function sendJson(
+  response: ServerResponse,
+  status: number,
+  payload?: unknown,
+  headers: Record<string, string> = {},
+) {
+  response.writeHead(status, {
+    "Cache-Control": "no-store",
+    ...(payload === undefined
+      ? {}
+      : { "Content-Type": "application/vnd.api+json" }),
+    ...headers,
+  });
+  response.end(payload === undefined ? undefined : JSON.stringify(payload));
+}
+
+function collectionDocument(data: unknown[]) {
+  return {
+    data,
+    meta: { pagination: { page: 1, pages: 1, count: data.length } },
+  };
+}
+function providerResource() {
+  return {
+    id: fixtureProviderId,
+    type: "providers",
+    attributes: {
+      provider: "fixturecloud",
+      uid: state.providerUid,
+      alias: state.providerAlias,
+      is_dynamic: true,
+      status: "completed",
+      available: true,
+      resources: state.scanCreated ? 1 : 0,
+      connection: {
+        connected: state.connected,
+        last_checked_at: state.connected ? "2026-01-01T00:00:00Z" : null,
+      },
+      scanner_args: {},
+      inserted_at: "2026-01-01T00:00:00Z",
+      updated_at: "2026-01-01T00:00:00Z",
+    },
+    relationships: {
+      secret: {
+        data: state.secretSaved
+          ? { id: fixtureSecretId, type: "provider-secrets" }
+          : null,
+      },
+      provider_groups: { data: [], meta: { count: 0 } },
+    },
+  };
+}
+function scanResource() {
+  return {
+    id: fixtureScanId,
+    type: "scans",
+    attributes: {
+      name: "Fixture Registry scan",
+      state: "completed",
+      trigger: "manual",
+      progress: 100,
+      unique_resource_count: 1,
+      duration: 1,
+      scanner_args: {},
+      started_at: "2026-01-01T00:00:00Z",
+      inserted_at: "2026-01-01T00:00:00Z",
+      completed_at: "2026-01-01T00:00:01Z",
+      scheduled_at: null,
+      next_scan_at: null,
+    },
+    relationships: {
+      provider: { data: { id: fixtureProviderId, type: "providers" } },
+      task: { data: null },
+    },
+  };
+}
diff --git a/ui/tests/registry/controlled-registry-fixture.ts b/ui/tests/registry/controlled-registry-fixture.ts
new file mode 100644
index 0000000000..f64603dd98
--- /dev/null
+++ b/ui/tests/registry/controlled-registry-fixture.ts
@@ -0,0 +1,89 @@
+const fixtureBaseUrl = "http://127.0.0.1:4300";
+
+export const FIXTURE_REGISTRY_KEY = "fixture-registry-key-not-a-secret";
+
+export const controlledRegistryFixture = {
+  async publishArtifact(name: string) {
+    await request("/__fixture__/registry/publish-artifact", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ name }),
+    });
+  },
+  async publishVersion(version: string) {
+    await request("/__fixture__/registry/catalog-version", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ version }),
+    });
+  },
+  async setArtifactTaskError(error: string | null) {
+    await request("/__fixture__/registry/artifact-task-error", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ error }),
+    });
+  },
+  async holdArtifactTask(hold: boolean) {
+    await request("/__fixture__/registry/artifact-task-hold", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ hold: String(hold) }),
+    });
+  },
+  async holdCredentialTask(hold: boolean) {
+    await request("/__fixture__/registry/credential-task-hold", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ hold: String(hold) }),
+    });
+  },
+  async reset() {
+    await request("/__fixture__/registry/reset", { method: "POST" });
+  },
+  async revokeCurrentAuthority() {
+    await request("/__fixture__/registry/revoke-current-authority", {
+      method: "POST",
+    });
+  },
+  async setDiscoveryMode(mode: "error" | "reconnect" | "unavailable") {
+    await request("/__fixture__/registry/discovery-mode", {
+      body: JSON.stringify({ mode }),
+      headers: { "Content-Type": "application/json" },
+      method: "POST",
+    });
+  },
+  async snapshot() {
+    return request<FixtureSnapshot>("/__fixture__/registry/snapshot");
+  },
+};
+
+interface FixtureSnapshot {
+  catalogReadCount: number;
+  artifactTaskVersionSpec?: string;
+  installedVersion?: string;
+  providerCreated: boolean;
+  secretSaved: boolean;
+  connected: boolean;
+  scanCreated: boolean;
+  artifactEvents: string[];
+  artifactReadCount: number;
+  artifactSubmissionCount: number;
+  artifactTaskReadCount: number;
+  credentialAccepted: boolean;
+  credentialReadCount: number;
+  taskReadCount: number;
+}
+
+async function request<TResponse = undefined>(
+  path: string,
+  init?: RequestInit,
+): Promise<TResponse> {
+  const response = await fetch(`${fixtureBaseUrl}${path}`, init);
+  if (!response.ok) {
+    throw new Error(
+      `Controlled Registry fixture request failed: ${response.status}`,
+    );
+  }
+  return (await response.json()) as TResponse;
+}
diff --git a/ui/tests/registry/evidence/registry-catalog-desktop-dark.png b/ui/tests/registry/evidence/registry-catalog-desktop-dark.png
new file mode 100644
index 0000000000000000000000000000000000000000..52ab982d7a76b7ef692bd6e41dd2114b9a9f5844
GIT binary patch
literal 133227
zcmZ6y1yER9)-)R2Em&{}?!nz1g1ZNIch}(V?gV#tCqQs_cXyX}=9_yne?5w#D5`*S
z_FmGfyH}{3j2HqeHteTQpAaO(g%v)1g2?&w2`msA6!^&^J;={bpO8OE2n#5=W}Ie1
z@T2`9_-zuMugPyYAPCa-pO3qvy0$wT?*IE<Qwbb`hK8oq;iIeV=T7qqHzN3(*E-K?
z=9Bd4>H7M(iw_eq+qkjRY;N59K_DCBl4yiH_Vof*S^<oPmU|jo6h?ZC3Q``av3MQ1
zlovSj37J?fvnC?wp!r8_(g3Eo6oX21o_Ze#qfrB;Mtw?C6Q%$%_&=Yuh_y-{uzLQQ
zKXQbNkzxW6k0A^1B~**+6G^WRDc0E~E#VZg<>MF&7UL<Se4zzVdey<!`l+Mz)uWU0
zk57*%qKa=j<Np4+m{F11ZUK}lJR3xu&}q@2P;B?AfE41riFjRO@wt;C_FYI6Tc<n9
z`#6%_A*znUFU8cYMqfqW`K|taAY>A_JT&&l;KD=I<;Sx;NK6H4GKKxkP}Cy35V#`O
zGs^oP=hC72fiW(SO(<QcP$oIW%Q<p>gwX!~_j!#;w4=xt$n`p17&#iPlq&SFDr|<E
z5R|FIj2Pw++yS|~6gth!9v@!zDVev=dH~h;-{16qy&CFoS3mfM%#s;^uf<x->^ZGd
zTy3PG#c|82@-xnsij)EkS2V#^GHge83(bEjgA9~GUm5j(4{kwZg0z3}R_K%`y*4d5
z7Hcd~&__j;&|LpL{gS3m&~ES3GQ`6)l~xIRALTix=`Z;@<#0(OkwRu-+7tqpAJ}m)
z2fxh|(Fo~S{`)S#*SNdbn!rN&waGCj|ADiwk>g)1&vDI$6~2F#EJ|ewnVhDg+*4fM
z(z>_w(_a&L+)<p9(9f|gQw(g9)X!w^NB?^+{;x!)Fu0!Do6It0!^Rns7UKDNL?!LB
z?!g7z;IxiY>>*zw145?RDXy@gNcU|W!%^dlnr~axLn*+V5dVF}7(OT#zkun67h1BG
zM$+)&*dAL~=aBEeZE{!A+PD!3(GH?=8u)cU@li==-?5ju0_*Gr-?0<qAXlFxqD1}%
zNiFs;DAb3CySI~2936k`29<er@BTayBT6<%6~q7@QGuPD1{ZFj!#;n3suU7TU?Fnm
zWNsvB>ff6pR0k>S?zw1=y=U7>d&i#6E%0#^u404|5k};mia@5~90Oj$lwzGF;Iq|m
z%LKuwj)nX%CCc#MCy3$ul<M2s6YvFwpUq5&-drS&F_zBZa^P5YCr80b!5=%=m7-TC
z$Qva|u%7lOw*RF#x3I90+&lljf8hx=#x5}YOHyyNk{NNNeb5(@6Fdb&M9Co(QPnDl
zntL?W7OkXmeK4f<N-PB?R2mV_z!-GcFaHFoKcNqpeIvj20*HiBjzchWz8t!Acul_Y
z2khcB_mW)TFVcd%z_Tr-saGfcF%rsPC5SStUsS%NFSAEKg5RL)N9*6`;CIExH3%dx
zM@!U0nMD76uHjlaH02!M`1Ewm(9fh=+M9f;(6`sOo<~ogFM*Gn7yg;&3oM4c*49?R
z7CJiX$`N}Wbk}yJIGMfL+5Sb|bd?lDAu4A0z*EKpO(%_dh|D0*=5gwZHl8tEhIw4m
zM(}d1DVpJWFf%==v@_jt_=cHjEv#S5Gn{IiP68S=%OznLl>29A|IcMZ=Zi(3&6T;B
znhu?)R<*ZtZ%v%2hRI0RY}4^yZC74arKT>8XL2Rc>x$k6*RJXi5fQ=i^!4@qIU%*=
zZ!YuyY%MuDI_h#Z?a)$g3XS_UnNm8>AiYrp4ilqsClZS2VCCV$X1&AfW$W#rO1D9g
z*<!Ky`>=vAb7*L2%vKxH1wl)jn6M~vXi9o2Td{VL{*ry6RMKcVwaYjz2fShJ1)q=i
z)yMPZ)lT?ArB;_$I<ia?j5x3P;<r6NGf^JT>&NZ6vXNpXyAMP>b2Gh?OmMnkgCZI8
z<hd@@3tSFd^>8_pgY^z?0zR@cQ!`w*o86<ejy7kiG%4O64123n-{25o-e33r%oLpy
zyz&;O*TLfB5=n5C>_Mye1t3dcL&4(y8y1E}uxPf+wMHjDZw?wQ*T0~m_8FL2T5{V?
z#<boYKb$Na<d-(31lhCMth?`zmN=cvi;9WesHLT(z~ivC%jb)}y*x;Jv~U;0;7;SQ
zUGEJ$9P}DNd3fZJ^LoFxTb>;|tuz)xRch9j%PyP?lb`c?etYSHSh!flFvyshvYU<3
z^J=}TuCLx?ctJ<5_PRKi=4yKJdM;Qqa&{a#e~9a_X?NcVs!=Q=IU|9CX((0hvV8?F
zd&@QW?GAr9p;iV9x^y;dB_BMKBNCo|oK(URRhmex%jJ`0Nb`Wty;yCxljZdin8B|0
zCI)<!+x$13cIgckt9@D>k2pOSk#%(mVkI)d(KS2V-=Z>C7OHf`9F2xz^t9WYA$odO
zRx}Ocwg<HNk(XK=UV;!#B%Wiqhl^$U6!@b}r*o}r#i6HAb5dy1n>N>f{uvhuJ2V=f
zDn+Nx<nuh8Y|LzN*xPNweVKr+@`x6N$L_7N{&er`Y!Li$@;2o4{21D*O5f6BB9rxX
zP(yigbU0ojsZg>|a;3@A?dsMn@_5b_!70sLsmURhLrjY3-)n=myFIi!%x1M#lWlJW
zaqaS6%ke(T;IPMKw+%V$k0t(XX=P<TTTG_2_DQGXx>Tj2HbCh9?FA|BR)Es>ko71?
z!OQjOSov+9*5~zE;#Mp*u8@DnbRiFY3Y8X{?W)<UOQpfQJWnD^tK~eai`!*{Sy55(
z>(Al*-|KCzg)#B*mD(1i#tr7mR4Qm@2p?@|)a!X>ig`Fn#z!NV^eU&vg;G1eqa+Z2
zXovkYg$S$SE5zfk3A!PfA}}^KMkSZ=tT23iydonb`&;L`V3KpKR=O7F-fmzXyCF~G
zn8A(*w}haQXx^g_`}009GB}*BCwqv6zvft<F4cLgw|}5yrf|93*BFQ);d6hV21z|X
z7QN=9*L9mSU*3J0AQ1LRNliOjs&4T-VicC;4-#`ewWB_dtIwu!P@+)0?<uq}l9EW-
z5yG3)KiBP?ua!_-;~Y{Pj7<I^9Xq@;7{~YXV=Q&1%|sUOpl(lrhcT54Qbc~O)d@`A
z;r;b#ToQv$>+s}crNKh=-`?qiYAka7MMEPFzGoc(QR7jDgvKq*2UgXNBM=0}D^|k4
zubG}xIgI16Mz+9ks^R=d5a4m{CvHs6$z^fL%{C9G`l@u?5V4unJmZLjf_U7n9}ne+
zYeP7p5KkX2FTb$cB2Td~j(@Q`hU|NZ_Lk<VM}k2hbvIggmL41&6qZ#>Nw?AIl;kN0
zEIT=R3qGwiA~x%u?%m#O%)GOhOImKL)b0?iFrOP(X~S?a+h|3QfJ+?=4bYnjx*N#I
zOiXW=!7a%Z)_m7lZnF8<`5nF1=5jC`e=rb^>2y46Hkkur*?peH<8i*;p;@WL@%ODk
z21RbrQa)^IwuC5CBMSI}kqFkieE5bbw1VobUTnidI}j}YjD4qiwUHC6>aaSu@kg>$
zN@1#g<WHJ{8GvdeX;sMaRZOPScDi4aJLvj(<MD8w&Ss;-FepdYUOu<vB9zJDU>r)X
z%8i?x4D?V&wxEL(Ra#D$S-rW>_!-xG1P>Ek?x%l}=;ZDBqjg4|ojrn?UXau^)ls~v
zt;U{D@0XUagW|7<#ZV~48%)UK&2Z~X#*r)K+@lqynhZfdLmpy7A>r4nj(5FWZuO~D
zXlQqNzg_SBF&at0`u3yy;bNmqspR@_iul`~R3`F&U~CLu+T(>E*<g^o?%PqnaNPSS
za5OjjV<bY~>KW-7Y7P1qbQ%0|lOP-#+FL4JKa#e*H*~DHuiQ_Ls*yJM*S^_R&&!xv
zmU*Z;{z<Cn3q~Mv*MF?;(QLFtHE40WnSXzK`OE{NE)XPKRSkp7O+BEnI)&zT_+DW5
z(#Qwqjq=7|e<`PlW0A)fbZazEN`#X{2NfA`2m|Hu(jb)-c0rO%tK4cmmL|*$0f%-t
zTZ#9yV>;8?Aa%7Z{59c_XFc$!_wj1S%hR*f=>!84)8*lOEhQx-44wM<`I%0$adc#a
zih%*ex<MoiO}*X}<%{pqN|TLPG`{pdjh_VWD--J|%P;M$DZJ~b^9&ou1<?F9uE=v`
zQ^)My{AYALmPxnSO|8h|VR!^o!LQkk*muS+GI5Bv=W8BYy+4nMRI7A&Y&U(~p}D>L
z>ewWpw1OL18f!e?H>}fsl~sH(%KE+4)8Al{9^uVwwbLhYGR}hcW_t|z<}5rIf#tFF
z${|q~c75}FS9Y>c8TExBZo~5Su*PIOV>(NDc6!?WdUsg0Qmdu1K(R<h7*|Ip>k`qm
zKg1{WeeyHA>nuXn;qIo`xvXk|ULlqh&FGjWo0ZIMaJWMaBdJt_8Bh-1g7i;2yu5hY
zxd+r(ZDyMV&N#n%EGiC$rArepdB0L*uCgr_osDYA;NmSe$?j<qt?LrsL@IFjymPN=
zN=r)vRY|Shbjp0L)Gw*V<H5Q`i`Ra42#J9A_2r@~C@4rzPcJ6`jb7*Va4P>tyWwyg
zlgaqyf#r`Ma*_x*I5=^vkO<iIdVP?^@c+(Enbj2M!lomYR(IU_T>E%)C7+;iiQ6!7
z=gKCBctu3-=o#(#Yhs0{thAQ4r!uviPGW@93Xt|j5-k?Ll{h2=JzTFZ=u8C^rxXP_
z5{C`AWf}>n>!#wYFWHyxk7NF4Cx%sr*ZNmF7gi-%XSz0=SOi!Vncv97ld<qA!j7l%
z7m~(sLUoqf&4jYoy`XJccs%Yknyf3Fm4M*+c<A~lnODduxMf=?SD$NZTGtZ%<W|aq
zH;X`-IZ9+8*5UP`Lo7!Y@3;NUc#-dZi9{A`rqm<3_>dx!|M2^Kv6j>BCebgl)3UtT
zGWE8O$<MUE$1|2)ZZC)HOq7WtPgoA8E4_+XJ?qx!Qn{-1R^|f<!e+}AD%A4_g_!~1
z>EUuB!x%PqvXIU0L}eCC#(X2oh(3~-&1b@D(JLaAtkdk6YWj<CTqHaKmmyDltGB!)
zjm?77VjQ;@sc<AlGLa<~dkAIRh&mP)o$4D-i^IWq5^Z{R_C}FxwmT46jz`mp)T$~~
zI$lrLd&Hs<U)Zd1#c}56=UeParMZ;kO&RbsHCId~vPzr<@b9m#Kw`HCBXNYu`E4mx
z%D<RW#~_vY)zmNyF#sqr9Fv~xpI)9PGH`>#SH*kYb?v%7l{sdAP+(?skR*eRSGmku
zTT@cwc5_#`*0s?kHto077tA!^msj(n2h_pAfvjD#$+{ZO1_J;rx_QDdafot|j8a8e
z_fgybase4#S*|lzFj2~ABCeG@rB?eb&*Dc{Y45~UtXU+}lycpaG&Ia)WWTgpt`}_9
zm7+CT4TpzO$(8&B1O#NWxl_M+XEZfE49Vy3k1Bu9U~n4QMgNn`1gTo3TO}tjg+Qs?
zdj>QKd3pJ#n}c9Fc-5BNT%xHd8cFG~G?r*QuKC6ax|3dEsx3-YDs#|a-&P`qu*f3%
zEIyy3+|0-4%#|Yg%!g*mC;P6OOK(^3Kjj3fHf!zP2lGFLeyb@W5PX}QBI4TG+)19O
zXm#@5+sRZAGg^3fO_aJ!ZTYc2+yNDaM%ACzXu8#la6G#;qE2cgoy{H_68sft<HXYv
zRFNGQ6E6GfogOYX_h$uooOc9*t{5|S_xCMsCm042MFoUx)@!RCo83|_539p(ZcdWa
z$<<qOU)X;_@rwAXE^Q_<PM10uD$1yN09oXIcg*AU?07O?5l<%le6<tY*5(n3&9Yo?
z2Bt62;|~#y%W-|S(uB)l?|ZfPC;4QdYGQPr2ojkL9v*&mbrtw^r>kv|#ml=p(&-Y#
zqNsoXu;f+{U+^~DEkQK)f6A&AjYZ2o*6RC;gH79UV!6()r<PfW$kA78P2(?yF1|WQ
zW2U$f>#@bB(8Gp_m~<TKMefgIJs|W4Nwk{3P)zmoYMjqBT%DS@TYyU%wO<~Fhxg`n
zhgfN(gXn$jtl_k1SF3G$>`t<GP?RhQ?Us7SlzQmYa*GlFJvMfCSEgFJ26W#{_N@At
zks0#n)W|lM3w%Cj8k_a@Hz;^twn-7VqFWs<=hJ>@+#E{ZRuI{j+Fdi<4js4Fmc-4^
z*jn1!JUmNctV4U(kB_eN6yl)dKYe)7WG9j<E3KbDv&RJ&L%&$d;mRxIGCL@qKXrO}
zd|VOd@ma5S+)#h>WeF2ogGPX}SZq{|YmIFUg1_K<W;vhSSLOetiU{U@N7k-XrqtrT
zM<vWWkeR8;X48Z2Ayg=ADsW^39bD;V`aJ>#AK&}_)s4<TOiV1R-_z}62l);W8lys^
z!Tn}mdZW{8>mm>aH6@lX$AXiKE1>fA=0H}CjX%Y7sn#d}5`o016DZh)Qptkj2NT(B
zjEv^1YFn`2E`{oK#(o8#adF|V!$w{Zy(Ra@(jT_^pqh1W52wK5Jl~!ZLwW4B`+ve=
z0xeWD!G(G;NW<?GbX%&^^T~d1Wbfi)Vi#WG`Su9xL2S|2!)PLlN6(-?1jV+@KXN#p
zoXN;f3qTy0UTZ1;4TPA{2<48r`NXwRd$liyOk*q6HMxaGk2h>rL|bUFB0lf<o*!<T
zUJu<+=YFz0ac}H~7(fn|ss|S!0nd=tcZQBA50o&nBmUi{?t}1$P98_}Ml0=1!FE1-
z^>@!#P6k$Mmn@Z{lStPZ*NdBv`_Gva@_7Zx%V@Cp^jTHv9br$ti#_0-x2`qTXKBOn
zWaleQ3*+N5b6mc`PjQ8k9MqV#mJ6L7Uw6mxlvQ-HvbeqJkoUH>1W5kVc%{=>1&~61
zL)Oma`$Q^iiXX&MQkiN{qc(Wjo8H<x4ap(6ew6p6B+Dz3c|G2S^3b)E>b}19L{JBZ
z8F4JU7bMPQGC5(#_TIu|oa6I$c8awu@cdG)Ahsim5`=)8FW1q2Q!I0L`h6Oewj|ll
zz*SV)5AB`M4<k50Pnmwz&9*c!V05}zV=JUv{i6p+#Fa*?l@djAWS04IbpvzrR@bX-
zY!>qj1q6sVL?#3=r3C#DjAHzmBH3Vzci?8{N|gh;2o?Ar>&<4!q|?A%ZZ0;ugj#^4
zo&W&g&{yO{9uMb5$Od$0n~l!3YP~*-g-RaR%TLE{zy&WZE@IN_e1qu0BPS&6?(Y6{
z3RHW<r*46PfdM})P$KPCN4-&?Z6ef$JhNl}cL3Uz-TQOvC0mBjFs4Izzm{x}NWJJ%
ztbR8}bd&d#+qCJkyWJP{v3kM2YyBI9P1EJY?Se>T*i^7@rZZDhB98a=Vq>GX*Pj|A
z4-)<h|1=0E@77ZuPfr!E+U_5{ABJCU({8K?ObLSaf9<#6`M0kNea^F}8krloo1><m
ztIW-fHDbh$*X=GF$rB0d9jwxo_~W~((!3IXkH^`&fr!WHt&mq6Y`Lbj);!{5XLob$
zE<pmCiE{W@uG8_H?eo4>dv$wj>ok|%O>_`3CB2r@??lyLX&jNRMrgyE$2U)}L&h>3
zEKBf!YrGmb8}zF<9@q1*za|xx48xvEoJ65QVGkIXL!0PTW?Q7;#`j_m=(Y9rjK||~
zt-ne*n2KY0Tup5DTuwos@)-_|^LPjs%F=!B7;UUrska>GRkt)WH2l;g7I9cw#EL2|
zTxdrT_Jto*t=4cDV0i?-;WL{~#uAH#DBv#xS2bIrsO*AO;%f||Ayg=t2+YQ?BED20
z&jXXWLI4`(Pm7F-dVkpPNv7BR4_=$f7ZYlU0cQ^B3q}IqBo>M08N5IbM8z(EhI!m?
zLqbE37Hf8Z4jka`4}=sNE^bCj3N(%|!(rto`BJJ(E*Ilp1wrQgRBUWbf<Iva(x|aR
z0W4^T^uO(YNSFU~A)9~=|CY}aCd*D5c0U0Nhw^v95d8NDW!40EXX!6Uh>z6qCk{a#
z1_nD;D~%OuHK6O$J#}<l3<h#lIvv2&aeuN9Z6W@1T#bv`m<eGYgWbOaU4CBVM%433
zV%j&n?8Jh_FJE?}^HQ%-D*1aH3?w4<YPGz<J_!E0QK#EY5RA{&D~F>{8k<e0!*A!N
z&!nt2>xNc|wfaZY^s=gKGJXLjAz_?Aqlc=IAfB9<Kw2LXL=+0Drm=dt-jiZGw=ev9
z;M$RWOwdU2l~!`tH>;!b<24tBBHs}GPhy#F9c%1(APTX;jy?-0!d}pw`8<_wD}3zG
zdS9>tHO?v{lr$nP7pGf&bE4dA3Zrwou*dik+xpAX8JD9e|HXPBW{2}01f#`Lo*OWC
z$3H00gmZAYZ0hXXhqiG^p&XG2K+E>!ns~pza=2b@-kmJ8Q6tqUl_+q!I+rjx?0=tg
z{*y#2pl-UR!BAy2l_wI7ul(J#e|2aRKNdJTtrmMfXnQRVstaJ?%I5P?86&O$wWhdO
z@1Rzz-UNccdcEE4c(w!>YRO1Qs*~`6{&M+aT1}vOsm+CchyrLV{@F>KPRG79_RqIw
z{|v>ic&-yt8j8ebg9v*YuV9>emJ0Ou7QRM){`*S~Bc>colBCZIRi7r9d0;HSIGE0d
z%j0#;!E7!zY4QFu2h~R+LO*$K@h0~a-5_=6Jo>8WR`HNN?+nNP#*8Zhg@%W(uc<L=
zl#Vm{<!q&Z(c|04=XNce&FhuUYz5gy9z}4mREH_yvq?*jmdOCeZtr1xsJZqD@^-TD
zskgU}mSZ(?5NY8cuBGXmylVsF6htvBRK5@vm!(vNc8{#*VX(o~4s#C;rkqBrHQ`dw
zY?Lvr(VC}lG>Xi#?7iM{J>!pbKrkF8T}Va#yarX6Pd#YMG;~Z>ZLs;KDE1sep4Mim
zLZM`x@mN?ygrP8MA`^ZH<>&@5JNikEtO|Ti{03QG3$bcVrBeQQ(e>ecI0;f8$7;3w
zJ%fE}VBlxNZA!|QI|fMrc|iK*1AUjz`_*^*{$c|O@*lS7=|x<f<ENaln}ho9unj-F
z#I*)h7d~$*kEQK*IpisV%iR)eI)sUphz$nJQLrZ#QsE7>qj?IkhPb9++9<f_?b=WT
z7#~Itiw5+3Sm*MG^G)<TYM_M;gte`9Ce|yB#Q%;ym`E?utF!BSX2=(-+NiG4d^ktI
zVdeDZHoA%=4n}%7Td~>95$FO)PPd())^7RLfw>#f141-eSy@%p1)$}i>ZCxp&k14B
zYABVdQ~<~w$kj9!nD#WUCxz=xOgcjvJv0d<Cn2`4Ux~+cI>i|SFZkv%ep1}gCiUI8
zy#$F1$F+i77USr4J=tv3rN5$_t~b#;`8rz^t?Ug5iY67p0gOo+5W!1zCS#+czhp9D
zi3m-)b&<K;foZHvwaRX1u&2WSh+f@JPmr3v#l@7=ka{35%->lk4FSplKqa>M^g8XX
zexMMYJ|8;3tV*S<u-~IRR#uLH2J6E4&AJk;(bg08|6+P*19m3(yAB8G(H#Y<pjVf}
zg2m3W=T7VX*)%X?0(4DOWaM60WJt(jy&0+m!FRm6#O$??myYBML^yGBn+M(ZtI4wM
z_8u}sR$)~g_s(5+tdbu8r<?7aoucpQzuvihUgj$ZHoCaDxU#vO7#Z%uSTEi27!O9I
zn^GA8s*T<GbP?dhY)gRB`dAoP^sePm&&^&?igUC|pw((Eou&1had|)92Q|lT+*93H
zE7?%Rp+!3P;-!d+di|nSZ5Zlmux7lyIr_b-T&)57c?%ojlEbiCSv=TaWJsRss0V2E
zY0PGfwwv7m`g?wSTy1v)A~@}LG(m7AK99R^Qjd564x4obqtOV^Oz`=<;azGrH-Bhq
zYDSg=h{plw{MFUfAMY;{K+j)a$M?qJ7eau6aeI4qs?i_d_Xo)2GXPSmThszz0Rj%g
z@pu-d)b8Wm>)(=*C@1{OvF2ANKBtXpXM_<*Q2`6M>GS*H6k@>1%3PJD#?mPJc)v;4
z`^GF#w2c7{<mO<)B=YBjKLA2Vj{+hcc!l7YW=<OsqG^$tS!?Q8Ynkil(%7C&zD>cn
z%GnI_Nab@9@OmzGSg2m`dT~0Pm&1a~?>t@^fI%VfmS%jF!&6mlA{IlsNmwaQHMDu7
z({2TDg%40Yxmii2lDM5uDW*_MHpV2C8K%|Onw>t@Kayz4o((=~h)<dvSgmV%Mbrc-
z@3ADp(4EM-LaR1j*{oN{Ohr!`;3nX|=S)|Jg|QO6zWyp1qacC}GYWUX$HHS=c&jzW
zkbpQ6@QnK<o!+Zk!nO*`+rWX(4h@;!pDx*o0&NMAO7v{G0YFt+0G#7+*e}=Z%A#<J
z0dO;)&pR#+6#SP@5A0{<KrBy{snW|e5TU<PJw87(&V&o1)xo(G?ynL@-;>DlgrDR5
zx9$2cIo3jn-5%JuXx?=#m`!HNyjeRRdzHJE9A5DGkMpwD)`!7BKVLl(Nf7)e_#6)>
zFE4HH_+3YSviVS}loK8eK6udcWp&vcB`}H2efB5#_TqYfJ`r3MQt9gIil*vr%k6f(
zIK65)dN_4lgYDP%fd$$2a(}MfX^CZ-!RhoFlnA5Ih5{=6_G|{HaihaSEI~-gH7M-z
zI|McX!NlHeCICOYodPI+qRYy5Ajr$#Y)(dBKo-(3?Wq3Xe;@+2coG&9OAom(aD5uF
z7;2s>Y*y_wTh7^P^umSvSupz4&EI4`oiIKrpZ+fw@Jg0s-}X?P&#NxFoXM`#BA*a(
z2<G!)gMiJZr^10QUsJwi5Aamyl#0JHfU>gL697=aCbx)m{GkAkB@aO8&}k%pz60GZ
zZ?jSF-g1pzWDE?*Hd{?QN5|LuvvkS8xIcSr)~jmOKR^Og($fPVLE>mlF_8CmcMBvt
z6+=5Zcsz4weLf>n)zsC&!NU3nmd{lAqJ74}u`o3)W|&9(FU|GjAr~bsks3fuM?tc=
zj_MR}DaMNrW<21H2<?&YBO5kXrYf|7vwmNp*>rw;G()S|Xb7pb0W^!<;rLO>Vt`+3
z2VP<*mN>LiA|kwN-2!o#;`Nm`B{dZw)lOWlxtJUr4!Me}u>WY#-F7w{ICQw(kQGan
z9&v0cp8yyjlszY2-*iZ|QYnzLY`Py7<m7?iErea?$#ubMM$lsz9l;$QN4Vea?tYBZ
zDosp8tmEx6>(4Kdd@`A*YX{?8XIn()`^*(vI=HVex}gqkudjC&H&JK$<KcP9Wqg=8
z%Gs&E0}Of-DA##;g~5NQG#HN|Nxb=tX(*H;+udPa@BNTXz&{rQNJ|JmFs1Y;JT9OZ
zy<Yfy1lW`}rY0t$hadu-1k?#ELI5_E#R5ZuDM#S(<)th;2LOj_z{odUC<V~aZSHqe
z2>@$>UMb=xAT)*Cj@7MW;F=ZY^>WYS{kk|b1PzYu%>wn$ndi%=2L$XGd3WChALUwq
zs?zO(yz*ZPs=Q8Pv1q0CLr|W;(s^<7@Q9D-?bKoz;fEv$z8(nG@hf@*04_W(bKqg3
z9~jidazj8-6_ossZ<dR;XB4h8FdaB^{*ZB6?;lSl?Cs`rI~0Dq;n8zmLcQgAdAMxP
zk&g#J#r8KYW3wq=E$B>9=dN07Su*=UAW&D~;lg&d%KLrE?FH-d&)N<|@?I}i``hSl
zz81SfV`$d?=A+Gky~O>W`EraF$hg55XGzBcpV`N&K~~nm`O)8LPp8Xm$)SmM)L@gS
z)~k5~2eS_5rZ>wgZSI+z{>IM%+e<TCgrsP+8jipy4$!gj<g(r`_f`NypnM=m7JqlK
zK~NtJgG%NLl7dd9WC{RB60gUDY#%@#fDnlQxUJ=7>_*K7bCFx{AyT6e3Je3t;S47c
zi+={X3qJ)jTr5QHsNR4kcX6P4S<Dva;xk&WHUk=JEIi0;<S&zCW}dF{r2%y5ahgVI
zZQu-n0du}WbtBb70=A^NwN<%H$6&5BQ8;JS2;iBhbhI48W~!^d9fAWnP}LX*28D=h
zmp~z3t5UHH{D9<Hh|;#Y6o*@G^`(7DSXhMlWO)nV*ve}N`A@l<tAxj>3`}IuFKisP
zS5pNHATYu!)C)_!Sh?oTOW+QgX*5}_Io)Qz^#0)kgLJl9@T0y5h&Ewn?`+;PPQrN)
zC}?Q-)oLs1VYz}9G0&&x2Kk$PKqlF)q1->!s<c#J3(pf)KMLWkeSLjmf*w>ZRdRd0
z%+1f=0f?zAUTKX}Y*ql{f%^fpc(Gc|*OaH1mv~2Fc6NZ1N0E_{5fv332tyAzOJEQ%
zBV%T+Pl*E{lbERJ=YP)AhP0ve3WpgHK@>O&fQ7qGhj!h+**ivUi~CvEf*u&jkM#CZ
zaeK00a(8?uEL*NoSE<|8sZaCraM9*gx6WArK$N46E`lj)`|&R|iZ<ehpJwXy=OgAj
zT2*NBm%1XuqP%zCl{{5S;r;NS?g8=WgUyRISzWKlzvv#<bh1;~RT%sfpUcDjc@aiy
z5LuZ}w{xIO)vPTBjZV#WHz)V4?SW*~a;dJ&t^-mS7cQBeR6(sl&nxg684Y?&GIsYM
z-#CdGHTX7=re^iA(`}~SsEitOTvJ2CehHVyHphEsFdCn4Yh1L=l}hS+UoI#~#7H8w
z%h|FMz$^lY#28d6kqYAaH$Yz9lX>+2V@wfOIT%ZDx+F@4bd5Is@q^zR)lqOev687g
zeE(<UWRos*#fQ!)0AXBCS9z^p`$axr=+}BD3WgQgtX3cI$|yeEDO?W5&wyf+&E>)>
zfdfbo%M`6zS3`veG7<r;xuDEZ=?~{&e{|u)n5o&Uswa%u-U(z>qZmmg@i$tk)SD0)
z7#ONN+hsGjW=bWP=ytO3+PV*hZ%j<+v@gAPa4<11RN7tZAR|W-sia-qE_bi`$Yn#=
zd41kmohInMrd3~7H>9(MHC;><T8tgfp=(;|7Pq@y+mc$YR_AtP;;C8^75NK?n9%Dm
z+sxee9w};pxdGOU@eFqPA^{;;dU_*%jRCl@IQtFpEXE|s==4ZzLddhFx`V|U1AwAG
zTvE&pKLfr8LhCCO*1z(39vGm#>^=z25UmqPxYv5WwF0TsV72gm7~3bT%ISQp)m^fg
zP@>pRzErLE_WlM1@SUEQIe|6M*Z}+6VY~GeI48nqQMw+Lj8*}=i7CQ(`8+0Bn7v^+
z?WFWhTb=RKC>~Ddea1?ilIzYp&E<!a)RYwVBcHl7Hp|hfW4{cdV$))<j-}ik(eNhS
zR%7(nM63|)1jD-^gj{T0rLZbHcgG_^$2_|L$V;Nu7)Fl6j+ciO=TpbyMfpn6#)gIt
z*Zc2<=5r8aJ43Er2wrWoBBG*na)SSG$lwCE!bLK8h<Mzfl080f2dGEi)40)RBdym+
zTyVHt&Veym&&1>a5LHo*Ml(3zj#oQ8RO1kb`de)Pe63LzE|~?Q%mgKQMjVqXI_t~u
zfzRO;XFF5x-8c3Jt+tn|3n_e|@~gYi*nVVI)c~F8>)SzegC=VqgMEc;E=c>0ZbPh5
z47#+*x;##DmChNHuTAa-pxNuTxc2n)5Rr;wCKDpu#z6clAdBx83H^4~?ey;O+!L+Q
z|D0rD=j7Dp{x<)D<jq-(1CPhm`0@U>vet&ArKL4cL?xfM8vqr}>-C%=a|{`~-xCXZ
zfflp9uu%Yh55Y7Wb<Aq$n^>qEpwZA0=V-M;#QoL2fA@;%J^kQVtK6+`P?%t~-NogV
z1_qH;YN1?@)sRshAJ>A-1{NN68nLMO`&#IR&t*(u;a(a#bu&CHCx<qtOQTB1GZ9e_
ziIup+-H<-2`(IyJHNYr6JD5yZuGgMDH<YEbS#4&&Z;Y;bZg%&~l`a5^>s)gEm`{z}
zP7t6c0bIfz!17wmmv7TAtggOh`vfhNDz{0e&%0;42;tHC2_?Kh>Ncwd!%bP}T^bG@
zzfX4RPTagiD^cqDQO|YbcXU4bXg8a?y?A$wpYdrGX&}V0>U3V4FO;>3>%wmWZX}#W
z@-ZH2GG!&D+1dsRrTD<o_*5SDFRWHeX=^=tgR>=Ckd<_FMNtG6v-KtTn2+K_ZmkH2
zJpYg7u9lU6&&zzV`n`)-G^@*%l#}WiU<m;R{}S{4=i)Y9<-nFt(`UK??cJbjp!+kM
zO@|x?$Y%4hn9u$I^i`X+R=5rhidn!<H8ZmVbTs6X{r&x8jXXf%1T+Ak)5=-T{Cc*d
z-y~}2CK|!<jnmKIBrS|(tyqUjh%n0COIb_-in0!eeQ!kyoNBN74mkuQgw=9KzQn;j
zPBP8KlDyaiZr<&h=}MWVD|=mYXfd%yi(SVub9}D^>&5C-yvvp{-sQ_JrO$f1Fz4mo
z@bBap5yr<2e~27Acr4}+YUxDDL_~lvEmx+_ZNKfRho$;!hk6AmS8KuL1(<Xf2Wk)?
z+56_k5PEq8Y%V?Bc89jq>3R6$CSSO&0U@v(Y6OA^Y~*aFs4KlzOQa?X|92D~a30R?
z34g-Ux`_s)1CXpe28cqPSCP|+aESDBrCS}F-L}gWJ72ZTRL4H(zp)<<9mRwFjsUvp
zozIL3%2D}xyWMF-Nn9Lwa3F=rMof2{vU?WY?($fAxGD{w!!AYaP@=`cyw$3!>jtmh
z%<M={m%*T#n#TR%2*+%xUI1j9%jw~I8Kw!wXDKwR=+999rkD@3x8!&RhcqL`uhlw}
ziI|PBNpNIthw!l4gD~`5>w+{hB}Twhz;Zl$zY<Nr&FV34rEh$q)?((h6=vj2z{@YZ
z17M>LR$7HwgsI?0^O>NKA?UAZcbZL}FIU=z`})mZ7uF}^nR$66RZ7p7S3Azyt^I=o
zD4B<BwwuE<p1O51c%0??Srx?S2?ak;V*m9q5sG7wt8a?m%;I=%rHLvnOZQ)1{W%cL
zT!Dmyx?03ttgp~dwXeQf`mp$rCzhNm=`<Y+W4qX}TLRP_0zQvc^#epwbCs5xOOUDJ
zM&vCNlrlCeWV6v~!#T;4!b{tO_cx5Ql`@1Fl<?nwlE;?oC3cvx*4*z~onBa@dvZX)
zjAgQAreO!_g8wG;YpmR0)cuH$I`NXfYioF~eCj@WTXzolaz#owaC6R$jZ2nwsi|q7
z_bhXwSF?3m?W74g#xSHE)XmQ(h1n~XyE8JPIKt5A`i({FjPDlLv^hFxt;~#+TZJWh
zHE0_H>2=(}p`glwO;toZq+ULmRhS~;+##p2I5cn;2Uj-{k71-J<QTh7^^UKv>-<A_
z0VsW#lL7+q>KJlr*h^^iGBUzvjIO{Ada*!zXHtE0bCOW)o?}eyC(Qe(+0>I^b$6_L
zxa=Q(Kd^tT1G~{8rih3Lj;d_MqlMPcn36Dy1s&sP2Z$&Ux!^+m<3Vwvjzi+#`--sa
zDv})I?2zI94IS~MV4+RqlbIeI8R3ZUxkDGH+OP?gWrIW|cm0^jBMJ*DGg+i6nph|*
zvbVwF4FPd!pZ@));7@HahdsH{8k`BK1x%8KJ^T~FIe(4`JzHQ#*y8LBmg0-|4plQJ
z<;DNkx!(B=^|=BQZpX>HUPQ4IQO;yFast1Sl!0u2E+`Doit@%dBKj;|Qn`CAKliVh
z5BzBb<)|muCRPyY0z`n8I5IByJzAs*cYw`l@Zs3)F2xa5i=yXK?9t<Np76i#1s&I*
zhssXj=cRYc-b0$mdL&@3&Yjz;1Pli8xW#bp+^BK(v5Xi$w`Egw7(@Bl|Mz=^$Ok>S
zFKxEk8=WUV%9Fo4qJmSrL55W_B>sZTbBvnREKv|GDX97!_&2Bwt?I#}>f3BC33-_$
zt4I|;htHEg|B0F&+ix=e^mPyZEh(_{Z>|n)Ky^U{>p&H~vW5y&p^LxpqsL10ljTig
zR3(>4s)=2R4`Z32|Ih9^9mGASgB`3<ka>IF#P~F`O*4>kwNk|JO)*!y@3z!oFtI-X
z7`O#MD(Oc4<pTZ!1x5nqv2~#Y2XcwFm!N)mFsyqO9eW=RCs6Iy70!aG!Y_TN^Tvg+
z3TWt8yH=}J$dTm~LM^L<psb&X4N!ZDL;1H7<XNf96b5LuVR4o;f<3yBZah(skMi|Q
zf9QX0VlINo{DOyyiIElO=QqlpUXfS6__(<F!zcs<HP6?0gz!o})^1Brm}EOmcudlT
zVR&UF{O_p|s{hCP?c^yCBz=?GV}RK2Xs@_*cq|+fCsVwU$x2hoexSLkYHUrFZy3WN
zGJLog=nKZyMZ;N8JIvCoTnR$U-xA{fc4hS2jJrjiF?A*c-_4^b5$g-THRFIBS=iUw
zL;8(ugmjGe{f?2^$(*d8Q1^k{#C+Z@^YsD8lh;iaipGOVi%|%$9Eu$nfs3upvnxJw
zZnt6BR3|VB5i|^}<1QcP<ToZ)bL2Bz&HsDsE=;?!VpIOm8u10nFSmZ{2VRe~V!1Sn
zow{$JC&5Fb(iDPI5f0!K&_VXW=XYV2SVCB2f7BAbYFW4=B|Y&<TBl`J*>I(PFG-}J
z|2#Ov>=H#K#+HgXnjNQ<XkrfGFE6^-?oMGOl2DT1g8&~Hc6Ye2y^9`i=}e;iWJM1B
zH~S=9)F7fFoHiaK*JLtJlJLXVYH1><%wx5M#4LXMq)kb7_(p{zbzI&qoLkfo_)yI#
zV(ewyM4S~TlIv#L*Oyu-<_3Oc6V&f~bFVXvUzjb_mDSQ$f|n$tZZpmrNs&=uD4uOl
z4#hdXmWX?g6ZdJcfBMrvy+N=Vj`%oG&_JhEKYuOl5A_F>lm$c;zu4#R2^s1sUEGTl
zA)nuvxNjgt!is-+B{ZZ(&Zf&(vY)ufRl+RpPjTH~{Rn@<{p6>MiAPtzrCT;ahitIX
zxnK0;k;16nLB&kLZAO?cEd2b;bNon;M}Xw_PEPmM?%6h4+7c6>p0(=6)$r`N2`-P>
zXBsI~h(;`@keFBy&@U#sj?WuN!p2{+l`jR450kX?N0rgZHsbjyvj9(GEFA2|-`uF>
z<wTI*+KKi-$T~utEEo13^w?gwr>@ZjRocovIFEcm`TW8|K}50Iy_x`HNTUu}NCNf6
zxGpI@oq;tA6@v+IX-=Fx2<dhh*;iL7$<R^`P$A2u;Zrc@2gsHD@#!>|5OieTu~8_{
z#_UBT{rbOJ|Kt&i+L5Da!W8c)@1&{plREJn&c!x)Aab-fkTH&_RG_;@^H`oC+q={9
zn@&w3uQJuxFY97G#r4Rm>ky>qkju9ml$WzrmJ@vu{+4g_YJ{Y+7_<T3_87f!OO>_Q
zX-aYyvX-P&18K`ZA>wa@vtj@KYhlo3eB5?aTWImmdHWHQU}(R|Ge<`Hmr~LGWHM`#
z6J2!)hRUTTOyc5VjLUpCT&?<Xwm5{8jppDm+0UGuuW?_}Ay}NyD{d|luq~&S2j)E`
zDbhE}Kt9EEc=&fQ<XSc7fru(^DtCvH!tk)%(QrwpdQ^P8TqJJ$s@sExxeZE8Qd~=1
zEe?{%poP^i$es);EUtvSP;EI=UsvSk*h1ed9hYKRN(|xOn(R+FJr&$7Q20#VAs+ox
z$}w2s?Wsff#Zy_v3gp>$w0l`=5<d_o4f$T4YNYy7_2SD_FR*#gn5h2V9wCTwcc-Z!
z_jPPkoGQKu`<#T0MLO$(*a^$BG+5bBa8&d$c|v&e(_hE}?Qfb-WP9mMKpAT1ej5I+
zQv@$5SUkRT_1hMO0C}+4#&_h$N_(7pLaK#d?Rol0iw)(6ArmPZAvUov`v|PhT~ZCh
zH>L*4ol=zaHe~}c*3&y2G7?q_HOgwa!F%W9B$c1A3`uq<v6Q*YQ#vp6R9*2kk+gMh
zH%kWp@B7Nb;-<b<xN=g!97zo(;k+H!O{@BkKgq)Now5!)<y=c2lf`54D~%RqI|>RO
zm)fZ?@NzTKeG@hlXc;G<Z~CSvvUfJwOQVZFNWb%vSO6nU%;%%$h}u#UYP2O-I(<f+
zV3Lq<NWiDW@h#tM_DyWpcpssOz_<}r-+)(#SL|<=APaMv>4=baEXYdas}Xv0AW9bf
z<SO3iTK#=s<`IUUTAqU0H@moZo3VK#yB$Dmd6LL9ewGta)M?FIXk7VaOkah>W=WAc
zK_egnMt-;MF6CoNs(Opz*k{j~CJ13hD~g5g;>G#dd^B3uS((a^S~X0bLQwbRS+{+}
z@Zn}0j59WA7>!u>7<cjJs=s8hJ7@I{Ck2p=5~zlM*O|n@$~;RAOMk~X=Y?G%YrI!^
zf-Aj^O2$#8-2Y#p6hJ;YG)q;pnjQ!j@ci|BPF@rolUu}{zw!LB?68)rsr^$!kK)gK
zE%4v-4M$yLHc!q$iY`jS3}?Yp{Z>hA5UX>|!fFaAQq_C7BjiKc7Mf6#9U9EVO(m_Z
zlZp(&4RPeyOgVY4hO0wMr%`vdxew?m8Qi%06+}fLxSV~JByO@kQytEgJ&48OGAlXw
z$U#Eh7ycpLOZAlTLOgfxbf)}U(*=+-AHB+oL;SW^V`CWO;kzZe%;k1Z@`wpUt;8cj
z^Ji6!3y-Q!qPnmes0J8gWh8UzbCnH5DaKm(I)2f5u~<Oh5o8+<k7f$QZ<=H+95+S3
zUnzFHKD;3EVDXU>QE?6{FzAaA{e0YL_AXQ;m*fA!Bx3D2LV<3~lJt03oIQchm%(@T
zUJg?poW#4SRQNY5e6SPj5Iq{s@h{L2JpB?V3}S0&j9c%-%_4n7(xgHQm--+;Tc}0r
z&ZjdVOU5GXm(&v|zcw|7++K%!?j?W0D>D|dD4HH+Yk(n*PvzRHqtRI$8etrL@LHta
zXs))cr0O9s(8K}!2Jqj%`*-LBce?duGSTKaYMkhviSEGXs*g2;D%#7!(r7F${r^Bj
z2Q=<<vYdclz#kebP^fGy>3WYl;e4t*MHFWz|GVb@Eroy!OlLZ#2mA%iKv^Wo|9?O<
zxIhdI(*Jg6fPQA^#`r)*1s&%^A=f=TFrfSvPpirL6%Q2^Rh&BBXwqe7o>jBQ|7QrV
zt+R7ueLabK7$6Jn4#k48mRD4~+#Xrz>q|0bWN<i0XL5R7Z5Oh#Hj+ri_AF3gLI8U?
zwzh;=BAJ{{RLZ3Vc-F?okQD-qfxsrpX6+WkX32L*HdT$uoizz~z@lxo(uilFG{}}V
zh(~#{PKw;o?X*HP(gxzW0rT}Id}kA|*VmKN?ML{mw^X|acvSi9wiAwLYK^GBX1+e%
z=(f8q0rnw7Xu!<?IFop$pn?(cN;Dd<fwjMMR)fn;qUx=E70|}aj12K0hs(`ez~koq
z_RK;;l43~7_^7d`-{b!Q_{ahOZLU!8!_kZ^7cO1y%>jMfZIN(j93WILb$UTXBgh)v
zPHRO)MF|DLOKHS$ul?WC(`wX%qWCFS|4FeZcRXUWTCO*0WH}c%Yms8Mm~Yn~kla24
z1U~2y`r++YEU{ewlSZ&^whrOY&%#yW9mch|Se`b(Jq1ktK}OeDP?m`qjUGZbMTWp(
zEl=n3!53fznY_z0gHgT6<Z8;yg!?@(5E}u(873nG@p4zTx3eQO9Wk3P>X_qjfCw0K
zcORx2t=fPwzTSMURjp<lP(r?T1^nlNQW>3g2Jc{CV0LBoj;03yP5&{Hya_N6Az(8D
z;xvVXmzd;^cAjDp9X>uiKCdU?wD;>{C?M551AO@K$bTOFYk&=xLKPMeM&BWVp~QZ9
z2+rpUV%fr{mZlyu;}9N!wtohubAp>vCctj_aKWd)iVGOn*PHF)0kO-&y_45=Qx0Ii
z)#Ljt6kPdkZjWxzsZ~lcrU7~q9OmVL;L}zFm>?iF&sS|6ZfyaNOB-S|RtiWL5n~-5
zNKgpa<@j^$Zg8&XAG^bK!|_F>ptQ8K2NSxFn?3o!wg=H_f4^|PN|o-*`ErBm$^<H+
zGZ2yhU#J(SRH}3|Tf(%yZUczI8h{1*E4b>umUNBR%eeO&BtMf*vu(-u)LOtH(dzNw
z7d?UVjft5VJRLAR_2ni~DIcFM-Pk@(LIcL>845JZ&Dn3`&~k^3R$T4v?LA*Ke1`)m
zWYvK{U#Qf+*xG^-17DL;wx@9Xcn`3RI2hOdgrm%!q0in@rSpW#=Uoe!m9c-yWb>j@
zLE@-Zt+PAqbL(-{HCQbChZ3y1;40R+Soi8DU|GP*U^?)**{A&hzp3DPKPt5M)NZ*1
zI|tFdy!`RjWD1Z~J)^%5XzPofYXH+;2Dh90cE7}^HE?HD+HEl8SDQV3{#o7S2;&(n
zuF(hxK=COXOK&QL<nQ5fE<VWQdf1xGA)Mz<O#-L=GzwffyqJ}x<@dM=;$kqdDBOS>
z!C4uCgieFsl>n2Ey7%Hhq3!i$XfRSUB_D{)p2I1FRDSj%+r(b=#WokdTfsT%|LA7y
zEOHLb>wxoYc+NKt8}{3`Z>DRl2)BNKQ)3cHqC1Mpkq|SwUb}|s_0BX_E9d81b!fjo
z2Ga$@fiF6_Q?s@Tjh0J;?oE0f<1L%5ZstB-De3Eg15q}EeXdZ7ZP0RWWDcOO74}p*
zJ%5TtXDu%+3D`G(0>_EGGybDh*<d~wR97-03^9RTDGBNVHW{(mzyZ!`Iw|KQHr*-3
zZ_#%L|NHRd1!LS5h)rb(vkmU8Zom=^>@*M)p&HMUOpqoMiy?kvVqy7N)wk96JB9zu
zCYV)=kFNYow)vv)62edD3zsvurwNc+Fv*-gbzqaiwn71o{tARGEiD`;^2ISq;955^
z%78893)rK4036LyGrQK={r&xM>douCsn0_L4h9`O1$HN4Df|{Auj3)Kgx89lt*x)c
z<I_#@Wqj$DNzZe5{#(c9hx~k}ar1aSY~%$R+S}n2>Z6QZp%J#^-kWNL20&h&+p?eq
z3_0{T44bXqD<{yXfA;3tk`hapru9_b>O@ez=KF~FVeQ4;MHbf?0bkCC0PTO6?1+<>
zm%PqA)<R5VM0T`rqJzL0d8M9m%UKU^RSPI{EzQl0eDxnM8?Po4s~79auQ6QgixZh#
z6Kii~6Ip8=?d^aLrcfY`5?L=4{Lb{FyBp{kfNTwH+?fB4%DlW4O#nNkR;>i(iDWPk
z1+wC^_rey;5nwUwaKHPs1Gsy8;^ReCF2%u-z^A6B06{m4&4%vPzU)<di@e2p%^gs4
z{OSQkL*HHc(zDBWjFX(a2(U2%p4=9Z@FY~S@6*NWNVNw4askS}qs{~c{kQBS4UWSA
z>7@5&CWV1Gm)+HWsqLY=Li2KRe)n=K0Eg9b`Vh(<uU2%QTUx%=F?F@Y!R2WB3fK;V
z!=S<CbX*KU`2bd1LI4{Fqt2dv3kVvpOmIDx&IT07?$uRLclFE1G95YtFfl7b!+Nh5
zL|6K?28$v;uor;`FvjoJLNCBNscwrs)-f^x0g|>g8E%&Jmc-lr*$N(KJz%_NHq^-z
zmdNuA0e9L2dKTcP@xI#Ta71I-mtL$jQq1P<_>u4P(K)HLY=V&m+GM!|bf^YkgM(hH
z`ICG4=uUY`{yt}b?QoCKH${*`<=z3sI%BK6Qw}!s*~PUt7+DKodjlSqot=>IQ|a6J
z8rPg3znAm*>f71MgGl&$z#1Thk7aOpEY*?%)%f<|0q{Y9O<*0E+wMnn?>x3TSpdEj
zSlQOe8G|^$$<_iKcQ^(uE|>Fnz(%C4txlHiOO;5ki~np7+)o;Z10*h`=bF-i-SsXd
zxop<qT3hh*Q9yt{+wMx^nWM9__tP{n6;-K7IL5F9E?_Km1f=|5C^WR_6MK{IfEVN8
z;bXeZMK;7=h|E0ME*hT)FsCy7;MX<fZzjocYrv6H5Mr1uFF70qoPm$4Ep`8CtF?Po
z5h?rItr}`Jx-J*%napOO@{WmZ7mGCk2mdV{k_i;K-c5S@?VGLttsb6UN^Bh<V9$6Q
z_O62wseq0RRfoe?*<`UGPzWZ7`7nl~%T5`SaTIsOjJ+_H)S?Br{OTN!^bz=Y->J0{
z!OtNl<>cjKW0=}GRM%qbFFpf@QKHi^SS<h1Xg0&izyS18Ba)}mnNGJT9JYPHAO&oN
z`B@4H2|dwsn1X*(%sSzSCyOM<-9W6E>3QGjoqGq$9IP(#BZ%bp@2>~hda_yE>YbjX
z#K^WRTn=YI36aj?w!7RE031sijh2P?^2Nj@A%Hy5<K-(qx!F{XSj^~j!q9~W6gpT~
zSa6TKQ8#Z3=FXRL1VF8P0G9lesX_2K9RV~$Cf|0}?bK$sWBfQ5^h*<<Hvk-<98lWq
zZO7b+>CZQUy#PPqrj&b?>8}}IRkh7Ekf`G1R@O<3h`6Lo9&)EDI@+??wL5zuLIsOS
z2e?w!0f&ZGYr&V9-w~RCYxr$6btV`dYq{CZp!db%>(L+aW*=;1@G1J{urT)Ne6b9e
zKp4m4N%{_tho2j+bJp=>2wRjy?Chq;v%{BRz~&Cxdi_F$rj*eqBsu_&kc^zewsRdX
zH@uXqGbz<vt{_#(ZHDgN9w`bh(RbMGIQIobM&l{APxxWNUB33Sf9sR|m7PtHAc%IM
zlnt0?Fum2cAgbKgmYXi1(S29HBwu%T^UvABy9%eU+j&}A(r_yaJ(K_~9k9Xzh?Kc~
zv0SZ2%hi>AQCRGEHx9h3>(AZe2LFw_O6@i*EG%G8oS~&Bo#7A`xM<j@ObX+xQMe0E
z=d<Obix2cH*C+x$U?bV35^|Q^P<bC%jN+CCnSgTGAI&qve(%Lu>j{A3^?ns!dY8`a
zX|mZEH0-q7dCnI@zX#yerV|1;xfwGGSiMj(UFPNyEPmV%Oe(ETPZ4Dr?wcM1R7+uD
zVSFy<uO9y&Q&%0;Ww&%yknWJ~2I=lj>6S)1q&uZcx{;FZknV1f5TsM2yPNNL@9TR%
z7k{`G@q6OTIWv3q-g9*T*rV7yPB&ni(Wq2Umx;k^_j!bqLtK1*I6uC-v|1kuD`r(K
zc$drozLb7nfreFJpjd%S)fi++*86PX01rR~4vGXe0v=Zfuv9_zcyIVDD_GqQ7uekj
z%p^EF<L3+H@JiK6>&;PLdb*wZ0F}uT{PFIOLeTG1w`F$Y2$D3W{tY^POd41h8i20`
zsW7G3cKT}|E$vM1)4=K)NU#i|IKeU=Qs_SedloVdODMPZ#M_gzBxjaT>-hsffCFkH
z$+=*&RbXr&s@-+Yb6^ufxE*!)ITh>~9Dz|DU@OXA067QHu8j3Zh7%fqtcN5E#A3-d
z@^apImLNF&U-G;|d5s3)bsT!eLdfl)3eKXV)sD)tbvn0GO^`JL)|3TXc3$uY^Tm38
zDLh5e3+lBm+PM;ufXsTXDq-wsuS;LnzzB13azY%w{}bXnS71$nNrmBMfvJ4>o()7I
zGzmm|BH$vf|99^w@%3IqEZHl#Uh9Go70m^t$)0O0T$Cu7=DUfm;A7NQrYwHX0*@`e
z$e-0lW|?0OKjZumhL|d%ea5WFgj`?+w?kZkn$P+gy~sN`h1m$#ODz@ety5lu&2qmJ
z#(Ue$3HK|-ZsQT(A>kJ0DZ;s)!!$cz-f0#4$Ht<N(gwl!@Jl@z4E>p`>>HH6whQib
z+{Wg$(t(+SZ1YaJGLOrWlY0@2C!~Pk1e#oL3|uMNjlG!>(8To5Vw!+iqaGcVrBf|(
zJKsXQdF{6!Qq^^-o%^)BZK<h<FXUZST@8zb6x`wjXhCZ9{V(dA9qE+nEGf2LeTuLI
zrPyfS(0N4eQ`;x&Ti*os3Y@3&!56E=x93<TzJ-8PO2bmlvCzSS;J@wP!4>I=s`ONL
zu;}_iRqKYpSY!>J1sryaj0!i?6}qAn2KJ9>Qg<xf@d)Dz5dOp-<YTWwY|d>%6%vP)
zJ$!Y%;Fj<1QdLNVmNz(G+7crZ@DweWG%I(evKFq}yMxS;Oft&A2L@+4YwdWsrIcAF
zU-7HR$wIojCxn=UM7NRRP#i_7&(=V+Pl*6iD@IT<E9eiJxB$U3+%jHdGff85aS_z$
zYLlZj=H=5PuN$OU{dy{to;j0y_kPgnFDjOG4vwEE4wU-s4=gzOdUQnrcjyqUwjt0_
zHp|UL&HED(!It`scBq*-pmNBQ84T|yDP;+nt>Ke9z1+t#-GDW><N70#=|>=3INKgq
zsMX?q`xYT{aV?*yv{N{tl6iebu~<1jJsnP@N94XJr?pL=6>l`2sMX0o#Gz<trL9Gc
zL$*BBVdWkeV|@G=|K^9E4R&h)sYp@Q`xkmoo%iP(eG!;%HDL%f)x52{{-gjCsexwt
zJK8??Tl#rYN^ZLz+uyy-^<dmj)_laoAbqVmJg+5kyHB3*<(o^bm}k_Sj+SuTJ_ABs
zKadcu!7A8oyvT&QK0T$BMtpJr#jx0EcR37SM$dH+Y>1hhv#0agX@)x?#juT?tSmxn
zh#4V8YCBs%|8Bs5i5qqhqT5@*ZngG%B@dX2wlgI&leuZgzbh&z)^N1gnVu$dp+6VA
zNM>$5g|N@F_^~C6p^BaPB|bvlLZ}$=^)dbW47F1$j@bbq^?<`F0+p+gmh4-TTg97-
z#pIM)Tsb-A)sJiGZ{BLg%y0c0hio<;Ku@2=?U+<o=PV@!gO8D}vV);ks!rfUx|3OK
z_Wg(X1E+RmfLfPhkR!$V%Rur*Z$MKca0sX*48<U30g|ZX?eAqGdlUnghZBGkW4~_U
z+ilONh8$AC>(r6jXVsWS5dLZ8vl8cvo09Gj7?R>pkinL{uR-!C2Ptuf?=zuSoiJ)J
zVtz}n!_S8%AFJt(dmTjh)eW#;_{q1~uIe?4t&^%grmz6sTNg=bd)VG8My5Xg<#A9R
zkqN02A<mlF#=$)6s4E;f)y_E(Y9vw7`-c4uq7vNII-tAE<aQ)%XMdOUR{1qBDR4a9
zpa6H#=5k2uC9LYG^-mz#()~A(#C8djhVFZKG>%;fG$^eVw8W&KFdwKOqSb-wL)m+c
zN)gk<I1jtJ*yEd-;%ZQq(4{oPiyObdqi_$(6Ch+r|4mTY)FkfZ<z>!-#gM+*>Ykev
z$xTjWU8JB}aK|0O7xwLZ6tuz%!I45km;Ij3IoomL@Q~l-!0jed<26vEdF)No%-8S&
zRtV<GbTL%rHv$;Xt&K1KA#-yWGeRwOYC;-^OHC2LFC%UQaUB(UrLcGacxKc^Thc1H
zu|g4$AJ&`b6$b?tr7=161S6hI#Yw#+oE7pm2WqrU0MopbR%y4-5YBOvRlV2;M>c{C
zG@q=eySrME;!DD#)MNu?Z9F7FYHIU~9p)00!5W#w@cXMnKj`)dtjf_8=7_>f5yVU<
z`;rP-F8eA1EUe0J03k6Md;j=ZRN!Q~)O)H<fyglyT|9Y>%!vaeTd<Gm-%Lgb1iYlk
z=r^HkH)~6~YWXha)FP4TpSKW4z8Fg*iYFX#i>-^bt<SR}-*l?Df#W5$So-f8?zX>2
zOI3&X*%FB~%l$mY+Vo)y*DQ&9xeC#&#;~V9ro?1Ko!G^EI;n87cgdQ4t)tu7V5Wo}
z(DH{;S+@Zl9*6TyxA*z9&=keM`JrOS{y<RSBkW=u8+ZESb!gqZyU(l}s4g$E*0&LO
zs)^l~+P%>|%Bz$LWN}a=GX=c6(>m5{5fyqwyoIz(k_@cozt!E*p+o)V<X0~*(^Sh8
zyI_pE`Ok7xD{5B(U>TIfCuvfa^1;g#$nl`T4eW!110lj!?Df*|lqH>@QUknk23lGN
zP@Dtty%OT!#vOa?g$c&<k59x>xRWPqYnNqf5ylZe#+pQ(uDYc!UelAPZXetjvG}i2
z`aj$P$@$DA^L@53#MZd}3r1trW4)y%nWA*6cL~(Hzke5J?t$PsA%j~VrNh0+V0iy+
z`sz@-?)>`14V8$f!R^#{v?465*s?P;9B}6o=rrW(;29A&Ha@7?l53tLAR+02cXrMq
z#*o}&h3=LF2Xg~9@SOCbIQOqF7XcqO@cR%bs0$RbhHmcAexE-AzWo}+IJ)bxK#@w}
z5g^HE!q5Ck-oTQDcB8$!yM%Xq+ZWNo#L&B-TA}lrP+caOVW@U}b4cZOmcmcdO%nRp
z)OM-ydtm3inVTqlIkcSpdN+6CF<mKAx55{WL!p43DGCb-P;Wqm>5~WTBcT2EtP&0g
z2B~wD`z<ni$bi^Rk3xD;il(ro6{tO%fQ<A0O1R^K<N`Cy;d8K`Ul&l^uR#=g-d|;a
zj2P&ojO7^Wx<I9dI39J<oLEfAX9DQ_H^YhV7LrbI<t~q+PD@_UNcKqFUnDZ<Lbbmg
z<+u<BNh9W)H%Kxe_1BTfvm-#tRO+(+>RrV;-40ELfOncZyIi9}TVC)hp;w=hD@y#V
zp`gwHyOh)Frx%cOEG44O=<sR4&mO*$)r#G*%Q#=<!vPzxovH7`%}ai-9H+ZaHWFa%
zfP$LKd_pKPkS~&Q%e2&Qnl7EFF+&6zjR$bhQfMMcL@T}&N-(|yYx((5vFq|z_m3y#
zbxRlO551wWCCAB;kstkD-GUrSBCkgcl8x9YZ-3S{259&|IobL9@Ia@`bZo)yd{awA
z>ZBpK!w|^RFUAFXz`lI2wq|#AfD>73R~(If%8f;A^%o1M+>6oGT~>7uf9^wl&XslR
zko?09qynWzy9y}dv6-@oe6_ad6srt`w~T*}>wgLrI?<78-dr=01-A||wmRb>hnqXE
zn-f23(-+lH<&XlzUif@&jaIWZtfsP5_#KqW9iKP;lsVF5cPYjfwg*tp<+{(S4F1MP
z!41{bG@4a0dl1OlV%$Mg7gyV(sfgZ!H`2f`;OlU^O5yhtwik>FKybfUYf%FhXvsEI
z$M1>MR8}(vKJA`&3(Q9S0Q}c)A7$COo-U3*IiIhya&<!)PoiH0rXyGk4+=e77Z!c#
zd){{!LEH5Ji??2Ce9t~aO?Lu;%%AFhzSX1D$r}&E`MQmEID}C%R<DtVA)pYJs*SK7
zMp=v32Jn;t#@Xn3O?c9SOmgxTn8Kigm29!j_>j&Tphc%v0x4OpM6L0kT^tCodg3`Z
zIZTGx+?blZ@86WBc611`k+G`rUfizZ!?x@2*cm)ee0}bu`D6r{zt-s|I*Jj7f`q(U
zg}DBQ481LNiF4n#cKpmP8I^7aw`N%CxXm!}iFDNo^@tTlDKnFijEwAS!ziC#kN!@t
z$otRRt<yi{r9wj_wRf=JzW??)m5xyBW@qx(i4zi*_U=^v`lS}gaMrnYmGSUB2(TD*
zQusaPK_+q%`Gwz;VV3;k$&u4~x47ahz;=4Bk?v~C&O3_aiM-I))d*{A_6T^r%px#o
zrhw(qj)OTBpX-q|P|ym$^y>+{UI$gGT!kSU8!^To=?YiU)|fU>!gQTiyCCTxvb&wc
ztoKNoWA`M!NL;G38W=Zj_dXB7Y8`DA{7=B>{0W$dQ@4;O2%S_ujWj8z#_zYbnFu9c
z2$x)hP*QoE??45YLjBwGjLfM2bL8jG{<Gb<u<p2Wqhsp(JH2}Af6BB>LSuMN>WZZ`
zI6tfoJ3*4+cmAj8{s`_zqu{&t_V#`ZI4SnJ4!AQfsz0B0|GITCZ>Z^yhF7?M7gRdG
zz7TM<58&}ND;q<@(~jpc72TXY$=D>)7mfFqdo$2B#CBt%t{8BKAVr&n#1~uo&q<+h
zKhNsgxVQGM+}kBP3&CR}o%^|_ZVbvb1pw?t_{w5W8+MP>rMW(1p?uMbh%pXpynWQ&
zvcwu%jhH=QcmfalH{pI0KT6c-NRgf#Np|BP_#>!)`o4deYCTsK#(fNsix8_9?ZV)N
z)TK+#u$28Lg7^dx?KlA<!9I>fB#a`xV~>d$rmIlQucmcK)-P+h#dESP+vx{iy%PfP
zz)pCznL=BAaiU)x&u_YHNm^-1!d+eCOVmogzr}w6ig@dzC3gV<+pq8-e%LPEnXxHl
zvA6g4!9Mu<1~agM6ujC%hDevD6D@<m7{AB6%j>f<pDS7BriD0)h&pS%9^N^<HjfUE
z-`*gTcJr&UTldN|@<XzVCe#Hg(X-7k-svj!avo5;8WZNJ{xM?ketrUBwNrYkd<`Tw
z0E|BYm)28x4~{b+^z_}Ee$S-W;qxO$9De;4!FmlA+h?+F<oB?SvC2u6&GG`kuZ7Qm
z<`w~ePX9hO>ZO(`&_#pge0J&GVm*HbbW3pUHb9Wy2_7pjqq)914Eea|(phS4+RM&o
zBk~mmY2Xz*0LHjjf2X(+L%Sh)JuUs3q00hVe}6QRr)9=*9P;7$g>2TL*6ZK_UPniG
z(=Ze$0xi$WJvD&TstQo10d>KfG^|XF^$!6deI%k#%$2e46`GL{1w1Y~I(%O1w7B#v
zKZ*m?<bp^u9%w}GK@JVj_U_ln(HQ~I$i`!G&Ue{~rr*=~o%c3@B9K`LaMC9xgIuf1
zsQw(SV39*n0Pnd!3V@R!Wi_LRn`+zDI}t%523R-TOg?wg{R=uBM73NAIWB$N{)zaI
zhFE|CDkJmRZ*aBl0?;AzPoJQoG-&_o_3;DftkhV|W;*Y4oakG8m{{k*YIR4e`?9h>
z+fK}@*X{*-^sZzMNZbK<4X}Zfy0;Y)=#DirLJycouJ4eeu>d>~z<{q|b7G3kP-yYP
zRLBP4jRE`d<k2;t$pDgVI!_l#bGpX3CWfZzk1eg>RuvI<0#3bnYZu@D8VKrmr0AMC
zsG6)X<3x!Dt&&$tC*q&b>Y_>M#b1DH1B$Q~AO77=Lo#g+-u}l(Oy&;u2Sm@En2n8T
z!Yq*l)~bucMLaP-vvEBj*apii<K(q5!;9DsE*-()y&`?qjd8N`4F8T2x^yb~Rv5q^
z51^umaR54YvED9U2B*f&HF@?Ay@JFah1l2X3mzQgt}nfzSG{k<7n_~ojr#Aba(a?u
z_Y1#*ZY79yjq)!MAVK^3*^wISRNncyknKs0N_$8|p1xF@`}a47l##jqIAW;+a!Mw)
zxoefs<Lw6M3dlyP@mz_*JF3@durhFr|LsHPv4Xx0KBvt=5d5~|=HSc9S8jwmU&$;D
z4RJ6qs8gsOPHNg?RiIavyK?brR{XHn2#{J4U}0b;DiQ-kU3RX+cZaC4{2V`Vrqcd;
z2Ru}CTkhtnbIY!DQX_2PoYONh)`chf`fvy#KYsl9o=Rr=1rkoC8$h^dhf?wNT%YeQ
zRTjC4Rt_N{AC$9rRM8aC-Ddjp2VuIMp<Yjx*Qsf0X^AwA_WB|4QR#+2g*<en?8_W2
zw<v&)Egrk&ix6b!904LitP*GZyzWcPU{_Z=9MRc~=j>X%aC_gFJX9F<;EpC$sb;M;
zPx^SAqJHxouYBgvj_-XS=UHpBQdC5l{q%~^?LWIT!Knrp8(ApQL!DZ?;dew=)x#FJ
z*)jB}*O0t3_5Bouk<I+5*N1C&_LEJIbs*1i<44lSz3R)g$FQIgLEw4#x#P9yryjJ3
zyFVVDqK|(_Wb%<sOW}lXYdq`u>d+Hx9jE8#WLkA5a-gf;UB-~7Kjkpgr5kD?lz27p
z{GS(mSt!hqJTNc-9CR=IApJy5t#>#Y>l~x|S#)Y~hIq&+$=%8YpS&jZcmzls;qW()
zAqa_E+g5>ST4`Ipg<KUmqr~}R%x9_qh33831Y%!&-}5o_q0xuB4t5N2wF(_~U>Z3w
zbUa&$d|T70j}AHH5K55qL6^-o_pv78+9r4pDz5Gm-OrDjEtF<&<{L4HQ(*-=qEF&N
z9ul$f@W#`*`Hgs*#kikufojRwlPGE@0zqJRqH97^5B1jQ=8J8nl<8LGW4XNpZKKz%
zj3Ou4uY{hsPG%v6zu^xN;)^Zoi;g*xxz}ulUiICxQNhHSxHoML*0{GMd`Tn3m!axP
z==^;8uLmZ02r#A4A*R>k6{_nW+S1S<hlU%GEP9T5Pa7D*0{+tV&ZxTB#VFLWDuvE1
z6J(?J%ZUeVUsSB;@PGLq2WV44Os?L*JGva9mL@HlSnB6MiJi^=*h&v!gMHZVxqp)b
zcj0P@|Hn#3rnu}xPx}}`DUoCfZbF~{sh;aM)ZbqmB!Yb&#ht?x``-tV!xM8kQ(OK^
z*#E=9aH-u|dm$V!g*1F7_K1LVdMiae+%BusR9r1#?WH=(=t?B=1Gr(N^3473?|=`(
zu#W%y%^d&z7ijcZ4_n?I>lOqX6(4n9#DK!*#V3y+(x!_|3N<qD!DyR|FLe|C{oN-R
zvGSa_d|0<5_&tft;6xp$I!cxx=#YB3d78F!_Hr3Ci*aYku134rU>6E_^i9TB|Ig02
zEb?Lee0GBP;g{=;c9m!b{>(dv`9ZlzM^$=Z46^tB?K(afPrK03ov1`O1b0uR)#Zuq
z44!e-6JdZ0EP(w!O?%T3gAI5XAb8z=@9dqccY6t8B>MM(0XB{=gKs-DbSw>}aw1MR
zk8*0P2u!xISDZr3?7iby|C`;(#^H^1a-*<_Pyt<6w-t%Ry@T}cMoGW{&Uh<H<BI~C
z)_RJ8!3S0Ql^D`x+<(+}fB1p7qU$?X&%!nYO_s?tKRd)Lv`j8+(k<MZ?oLYOsKT$T
zH>T@doD6nG)IyFT^$gXhlZ{L`|Nn)Nf(r}z+GNr9j3|$6^s!yf_s)9#$ly3S_)WoU
zt=YGn<<X;xNPeyoZ|P2L2R=M%eHv@&(a0KIQ8&DL!PGcyZ)q*%7Ssf>ynT$|bC_J{
z6EqwVf=AsZWuA7W>9h8u$&<vk-Pn;%(^Q6WK&GO^f90TUr*7R%M=Zhd*wp5^cDATL
z+LLj;a`6OdRO-$Blz989uZ8i)u3jH5_Yv3GTYZJLF^74u3P#*q!1JzbNWYr5r+oN<
ze9kwo8(d4X(8e4ns9!r^HhasnSm;r~yXU*_&Y@9QG9vkYb4>n;*gXByzuY16{aoz!
zu9c1+`7AMDxTC+zLq^Fp`cVuT2xs*^ay?m362d5ihDF{HVq>9>rSwVmb=r72y|o^I
z3=Y2a_T=-fd4FY%A>PJs_xpCE?el#6yml7-90e;I<V(`cu|m3x!l3s1ZZW@48+E6F
zYU_MTg8rG`=dXYuGBRz`N)PjC1-o(W*X_Mxg}Y6N|KZ-;8^#xYSqw`Z>^B|2e-h5s
zLJ9|a39oHqIo1m0sO|9}w-`^>aV{BuS=`3d!FRNTaTa5~KUiGkBhmOA!fZfsz*xf~
zBQf`_QD+4HUpm^Rg5PYwuW@Zgm#OBpS)Vc`j=nREG{L~UmlLR9UD@n!7-x<MFf;fl
z_|>o4@RQ|X`IgLOSHXEg@g&f_xw{%UErIA*JynDZ4)iSNO)58Dm!QHLMnE{@sCaPr
z{WX-aLl)nfgoBd2bvZFH_>HMR%lBoXmb-iY=q2Zo;%!(5iO_MXtc>l7>ohXfxa|s+
zii=)CMdqB7!8t1f>uFFE6_F=6lwU8+#lXOf|ES6dYjbWdP&09WP&8wx&w$i|A~$9k
z)vfdji_I`k6VPd%Wpq8h88k-`{+HJV_7~i^*HMDr^q9goRBtc?V(Ws`x^#|_^x;o$
zu{SR>qZC3BBQaztSQ8eLor4ieMVf>^gx;aTEWTu1K}q|r(($SYuj)&#mh=ruzToSJ
zu`P9&X~elfJtbyyiapP4iOg&PV1_#3Y`%z0W$W8)_xz(TMBlcNle?z3*)B6%gGi{u
z;HR%294AlxC+QEdRGv2j$KzOsu-@0dXVGn8!r&tnO;XyzKb#?j=X}$6d*piN;v`h`
z`v1|?q)bK3k)j0O-ALs|Lka3v2sABt7gU$4eb+L9tFJs4Y2qvAaQd)kkIFIuC*+Is
z7Yjg)OG{B6#u01Mf_wO_wWvm!Oks;%wW;u<nq)ouOUmzBSDa~F0oyCRR$j}X<D+vE
z%F8@-G{n!5wJJ^Hi|f@J+0L<i^K>nkd#cZUQ{KhzWND>L4TMlOD_^#Mng2HbB`pmX
z@5|tC->x*3)UcbIo0OED!NI}o>=$YM>&E|m0ijHm(FZzOPy(9azYhIIh>6%*YP<Q8
zy+xeL?jJH_8)G9W9uU1wgXa;?JQ!0Fy?04ZuJ0kn(T0~}IJ4RsG8yK+R)FB}w-8?E
z(sR!Ci#1%7)K2ZQA9LU(pXpubo}w{Z8)>jdRRYdfVX&~sRORDJZN`2{>|WP;wX_K>
zeUWv<hF&d?BBE<ItY1?F-Mq;TG~d7H<=H}jMfx0$fQ*PFD=SMZ1w|T<gN=(bgoqH1
zVSjb~jQi$|%s&T4VDj`a`E#!yZS3kR!to^?!|y^Wzaih;u{>S&-k*-rmn_E_HK*{H
z1|W9)XgD0f@NWC9`awt8mHLaeaBB5>;raD(lokUg>&sgq)Zu%Pskb4znZcNX`d&8%
z8w&@Ry8N?*uwJ(nLi=fAkO{I$9q!Iq1ZLyxL|-Z`W*VztvUIoC<(yXf6G`gL$0-#|
zZJJiLeS>&r0v-hMJ1i;^1hadqke~D`1!8e<1TtzOi3e9B>+0(A^Xs0m1pOZ<g_Od>
zqWmKVL+!MAp~G`TL`DCGh8-E1FOMKm$CKT`*0^Nlg%$qh<%-p^(hQXV%YupGzBL8B
zU}pWUSHx*{v?kAQ<F|-oa#j^Yw$^5kM<;bB(W~#Gj%39Y9eV;F$}L-Yoi2aIJd-~9
zs_9<YUWGG=;bU$iy5KBuY@8!syYuQ*2z;=%QnMP_)TtX0N!X96&+m6Zyn1r;+}VgW
zJAOknF?^Zjf}-bR>I-3%Te@uKceOrU|3)~b1DlS{itgS1T4xsI5I*GVhuZr3>e^b;
zf9|3i(d59q60-njV)qs)&g7KW`Cj7rHXAGS^pl(K1r!V%G4!UbUgVD0^teG&F)Ax;
z5ftoXH58?U7#vtHlY;)h=thY}H?OEDOW1)GT~V_(m$c(Gwpk4elT7MXK*6rm^9yuO
ztIJNo=;bDDnkQ+8Y(v*Pntw>Dz7!bZm<$J>+woFkbll-?ZbIWqQ2!jZ;JVSdM;a3Z
zt+K=2^(1fho328uGuTatYZz5jZ7j<S(TOn6N0vk6r7m<_F<j`+OsSeb>>2c6Qm8Ex
z4@>ipIV_;-uH%>+CH2UYLEbr!?$N@WamLes(Ur0z7G@#p67~ZT2o3f0?{nzS>R|Y!
zTinfEl6>cKf17_5Z#ZjW_vNhS&T5YDarJ8Ui#*Gsfwe{npiOU9_D)Z~rDaJcPK^!>
z<YHxw5K_(hXSpM7%J@bK&W8o$6a`CeiT@`bgW<h03AbEK$e7~Q|4|ZHP#&@M%f3tK
z=`9zf$IR?ETGM`VNsbR@a&P6rikV}7!L{rvc)bb>CoxnaCl0)UrmfF6vbIJGC&W*U
zYn;=>(?<WBR^Z!t+C997P!p<OQ)1XG=;tm;A|BKi@u)<wvX%<pqIm6qGEdY%twaf}
zO8$<uk1CnK-kFr>A#B_X4V{V}xd~q*a4fyk-LFRUZ?HoA?jbEjhrVUih!l^x=$j5z
zwO6~Sj$MT>diUB9HHQ7zJ+4Ue@5c{j$)7FYvq?W+FTljXX8%B;gW17lm-*Tp8`jDC
z_lJBDMIxeU?>&`XcKyk4l>`IgI4vIc-C4pDX!B0igjg``B-UEj>`4Ce-a(%ALkXR$
zF`dgC?c$D1IHpV?d)pILy;+7R$N`;~&L8xLTRZ2a6+r2?ER#^xFsozE4Gf-8GN}{@
z|9+$tPy9kafaot6VLymlG8m8BC`KN7d4ljT@yq3~Lkm$#-k7Ce8WQJGOp=q-9ih90
zxVRxYnTvXoOM2yedJ~bSI<of!o)F5Tn*NXE(8_^50Z`wgs!60dqwslsj-LW%tY%A~
zhmF6{%~lBC9B@0r{{7(H&p%NxIU;`@R)2x5o>C_jiW!yA5u5(vot*mdF<N2BqVShU
z74S=Tpi325a3gxBqjG)X+aF)&XY5Gqjw+X?<v{t&N^Oug;dJpTJtKX$^ac_Vk`3^)
zm?e?aq<SPG4-N_Z{r&&$K*YPqi}?6jxRSjC$BeTCWH51w?oX?kC&*7Ce;yc*QzlLR
zK$mCKYk}}DF}A0h?rbzR>6Xm7Vj}+NgO!kHT;UI)RPrKvuqT+u=5h;KG%VE|#E0dB
z=AKjINt-H^WhU~?CG=TKt4Rr*a)~;L#s>8m+c1=N3H-Y@@i|pOnfbC(R950{jw5+I
zoVCQ4Z!vr&7id0@#oKbll!PGS7*$p^D8oa3sUEgIM8p_IBClmvY|NRX>C1&H2)F$F
zjV$tQD3GRgBD|8EL*+#8j?Sf*RsbIDxajCV%C$Mwq@pwVZC9Hy(a>_>inS|OfVXkS
z^TXxBfa}!ekgUP&8K&22dpTejM`g4;2za;K?K%Ks?Nn+yy3)RPNpAOdBEVC6ys5Fd
z<Qp!N-9+0x@`~@t7k;y&gyJ6tUtk;R>-E|l^0!N8W43epBF4tvW03x|Wa^{WuI}#n
zvEMVGfXDf<zNY3EGIW0=k?;0Vn}UA(k)T_Zkl!m=1K`DnOvDX0a5lVX_T(QVAt8+=
zeaPcnvD~=+{5bHd@Tkq>`d^P@4L3?0xtSlHZHLwqrN|%-DE$~$+g3c%#z`aP34Wpx
zAZB|CO!|#J4_Ul;ylSZ4)P2hwPlJzB>vzns^Ey`K(#EuS0_J-V%>l0_YK+PibUbo(
zURxdMHfMF-r>`PaFC6gV4jeX0DI2k=<3A<XQ3tw7#Jl|L?I)%<F^4&graCN>;xKVg
zNfr6z_D1eVjJp3jlS2S(J{O9jF+(ujD7GuY+$UAVi6<0s-r9N@*g%Bq;Fv)%@ynF~
z)M#_@=`IwsxT3+rVD2VV;i#b4Zi&1!2SW@=ZVN;4mEM^6uX%yho!@@eCz11qMMSg!
z{#$frTZ*nHbO@->0aiCP!6Y3>d$jRt`RSAX%K#{Zxf;*wO&XP!>z$YD5)#4O4x4~k
z7zM1Bk91pPlHN91T@z9cg(sHsxb8MP^bL~)K>L-w7)m{n&){X$tsgzkU47pAP7feB
zU{^yxKtQt8*=cZ{*><_lso8ElpEgt4;<DfFFk>0%;h-kUkbFGfQt4d!lh@T+pUKw;
z*xX(n33j3*2`#{)Q-O|_<-#;g5FDm}{T{Ft>|TdCW7I5~D2jcq&}wq%?DRA0j|vhR
zz~_$2;)4Bsb-Z}pe`!@ZTlQM+uWCB<DTeOOd7;fePpGa@?9O4l$tFOX_u7V(bz%sU
zNZ1D&9F=<e(H)xKkSh%1e6Y`aXy9;Z^58K2_n<DW90!Nynb73WJ2W>;(>Hcr>fTLJ
z_QohXovl|YAgq5a;HI&Zt%r=IPTPz_hvuHgl-+>6MJ=8nPDcncLx7bb?)y9#K;37J
zMf6KbN<_wi8lF7b`z1MPtXDW$)-Nfy4<$k!T*`oj*!w6I)aLqm1EMjFdXz6A6_PwA
zL@6ARi?n|k;sESIlEa;)sBjIa@TsIsY_U498jzWhRP&o~sSp=Ye6ZmiLa^v(Y%*U5
zU&I)?s|3xxj6^}H9E5~{rwaIXS{H11x6)|LGC$cP2?P`nk5|AR)D`eXL;%f=!{&jj
zzjJn=@O^xLG?5?_4P-ZXJ?d>9h>C0}bLZRN8T4wUl;lKj*GNRm%gaSYL?{)~fE%B$
zUS=kWjg3va%krJq?V0z(js4)n*P|na7N<S29~YVYEm;DdHf0xaMS8gsAoMKNE0L<J
z@K8}<c?J`P;yb+Go$79sNX%Hy5P!U`&;=AQBvS!_6+ru7Wo9ncEJm~9!r-@gxWV~R
zSguq3svCIRKJT2yCzWeu@Y&}mu6OVMtl;<9gbCCKBQ!>m8LO1aG?^##0jTQqwA93E
zCjW;x%FXc4xiyL9@Ew~zl8l-1s4rYJt5U$(Qn#nXKz`r9DKftmHGlWwK+hDH8crj3
z6r&e180y{&&i#D%(698RLR-9u#g;;_et5QxtPAmZ9A>1n<ziVQ?J|*20JXG~9$C<j
z-X=S=ES*D#f^a|D)s3M#1GJRR)Uc+{s+=l$aB2&4BbfTXnJq`W=BRlevh6?BzI-KV
zZ{$Ens)lqWllU?a0jh&5sZ$@em*hPci~<tEJH=2&1lo6@Ca<~#8c0%Onki9kSOqMw
zj58{=;-5ZAL1vYh7QZ?~z<31*p`c=nF=2}g2e-G9O9g|!+;ZLMaC<fmlyTLkr>8zX
zME93OYa1III%S$5)XP4Wsa1ofjR^-pxw(vYn1E9O3K#HKRL?OE15UbcXmyG_*n>I(
z>LMe%k{N*`hLw7ysZ9y+P)9ymt$bfYX`M`?0`-K1&lVa+tCI)w;LNa9#$acsmTNu#
zEoN^jKjQQJ44uYW54s)z9Gi4j^54yV=nF4padlyMgYI}TH<?TJ^oT|4c)6DdIMP8O
zbWWwb4Yv2Uw}&e=*9WPr0B&DyaAlnSD^Cx7QiQ`VlgAGni-zDqCA3}7o%`@EPNr||
zU{{6D69<vLijgvyH%UEuYFeO?C2t;U-vl-Xwu2(0`Bl!luk0e`^+Kc=Db0|FX%p7Z
zQ#wr+8qr%UWY*AeD`EqvtSgrSLX!q;Q9~koP$bgm5x6vrDc99-g0F8{)p;bnqBY!%
zLycXlK9ot)J37#dkT`yttKLaAEp7d*zC)Z%kfJ0lUIZhph`<-CBE0}dO_{B34yiRf
z2pz_X5<*UkWT`JzB2*;gw|Ofj#PpJeoX1&Qu#cwyU@1}-6FW`njH>Y48jf8dInT10
z3~;FA_qtI8K8)~~w3~Zd^&rIdszEsLyWb%=omJ|#ee+$_gNBB_oC^#j_mg;J@Hm-R
z2V;=@Y&L*$1#guTcr;PTXrKx$zh!2Y7H8qqcv}EL3Xgujvo884Qwc4G$_wJ@Br(Uw
zFl!9rR!OpaGm}UM43M7iIqohG9UtbZ8J3%$cpat#!{UPx2^>y3U&gQwC)58ZwCw=>
zA;$O3)?m=eSQ-a#jb#4|vhc?qbdiYvQjFd>A6Xk#ArnaymY^l5Eh6s1)`Osb|4DvE
z!|eJJrPKxndT*~VTZNWKZZgeuBU*!JH{U%_0tN<Otk~YE=8Zb%w-HQHRTn6_;6Ns)
zI&~?+N~2J6q0cwig(=>-b%`R1C(%^ZwcQXKK6xM1qmtrGC1d_#0qUD#Mct1iOnzRG
zRL*0V@gI8gY%*<6$!V3oMlXFPc1Mslv--wPO>v?QNn@OM($|PfQvN|Pb+|yf$7M+t
zBZ?N<A9HbL6hn`Eg*mT;o5oB;omR3dWeCGV#wkZ+nfjwh>jw<Dci!-QpK|F?;R?~X
zNU@B>&$L8-WCzNW70Mqhx0!W*^2;6gjEIQH@5nP#%c$Gz0!#$URKN25YRVR9p`ru6
zke1Vprzw-UoHm-sEp7J~hTXq5Hd^`kt!9h)J>R@`#Y9Jsmr0~!RT^JfUO!G6`?Aum
zHaG#?Y3#BL@u?w8*Pkwmbr=}6>kmLDEX<)K3Q#`?cs&y69&T&Q6z>2dx!!iMe=}xz
z@^s+(xN3cK6R`4s|Dp4zrs_6%eB7xrB(}rG#>TL7&}wi&^a6aw<EIDlh9mw0xs1OS
z7h(!UZReX#)Dxcz)X3qSb1X8y3yz)r%-E8SGvzwpW>BtTsnv82piqw7w42-ucAFGW
zyN60X5w$viCv_1*vt@UO%N0L{4S83+w%Ni}8O~4A&5>;qNL5gT*I9}UaOi4zG~&F=
zQ1w9^mT-IoH3T1=eW5!O6?3AJE`rQSIJKbENfm+#USe1b{-1i)*28r$LC>MIcAwim
zB*vc`7MIWlE7)%;H-5-Zghk5pd+m-Yo=qA9Yy28Vgct^gsvD!nPRQ{Vr&5!HqLQQu
zt2o7_wu2t$I6GzJSHAMm%W}xx<btH|d~Knd(BJ$4tE?ZIegdu{@D98_n1Lt%w6mis
zw|D$Jv#?MA&a`YD*(_$j^i6+w{~8KP2+06gAS*UGn4rk1DgjXuy?%RlmuSc{j=;kl
zh?rn$<x4PNVWrKp!F~UyOd>5NaPJ%Vu1lDyhYMe9rv@?Q|Mr{1%pQ;PzIu_OJ>WpA
z6v{y}2hs77lW+Eh{bDs6vstKp4}?X;r47d`qUFGg33{Us<XK?ihibb>(31O^*Tp@|
zZNu@z`s6PvMMI_{jmq|~U)LoC1^?DKcVw6N_^m$p*=Ba1-=R9Rud%M3tggZQd>!j;
zynFhJ``xZ79UD?UIk62KGIM~6TYLmO`hK!-#Jk*xRF`bGV(}?hVvFA+3LDBof<H9<
zqwMJGD*ZfbH+pdUs`xcoH{HR1?Ref=kkQ6kBajy)h~!DBvPKnR{;+H{(yqF)!k<Se
zI{6wZM-E#IA*UQo`o5e4X~WKZs(+{|p)*8Dx+bzDYEZU-TH_bfSfZbkL*Ji(FYTqd
z9uJCzH|*6c;6lM{AjABnzL_Ah+=waN7#c>F735`h(VMy4VmhAM;yP{<c>>16{4CZ!
zo=PmOYO_7o>nHIK0n>r(jRqbX%<YpabbY;^+f7Ecq~qfs2(FIiAvh!DGkAKoJN+Jk
zwXHRv9R~*NOf;KBT;g$NwAi6yK%!83T<s8|qLLKge*OCOqgLHgmBsm_(ZFwq+jFz=
zg$AoHDJg@PNYZ!Lhb=ab!E)O50A~{hKk)gbH*|LhA_0qUSNC__W^!`!rB-{R2d+N0
z(hy_<S}?<=7C}s0T>Rrwl@Cxd{gaIdUqG827!(3vCuZ}5kiFPB)V{IAE@5SI!^MZ@
zmOB;BIMV4HFg{VMQ<+SnPTY}_>Vw&;lp025(pOBWnw!C@{CsZL#)#~B+S2zQlR6VV
z1R{5s$9@2oJYuxsXDG=J<W?kPa0=lf{o!@GYI{9ILnGIlhZ@Ym-@h~H3$#(~2Dh~V
zH+e5RyDBM92#A0`UF+L3arQ~5fQ*a`O9#XlRxoqOO0}{eoE`k*<b1x|Pez&n4#G^#
z%#-pXm<;hl_ymqO_f{OX-_x63K|lx<Omd~;b9c_^|FRQ{<E@NmSe5(l&2Aod3fb87
zqm}LHTe$|)bW<_ysBFa;P`%>c#eHS!p~$JK7>ATq+A#jH5L045?rVK>mletDjPD^g
z!wyDfW<)5&j~{*Qu&W#1WQLKc7|Np3L2M9;^O4J+#MZ&UP!JxAW%_t}hEyq5?*$+M
z(zqpp?mDzhH+YS>4I7|>uvu;=Bj>^v3(0Kr_(NCN|4H9qyR3}!$?fH9)Ql2TJiL*#
zBs%=PH-v-*1W0}*sVXy(J>A_-da5JC3+l<ol>ZH_GuO^)*|&1$neS1lDP;=RX=zzW
z`<1ubtHpYgMb9NBrqHL-4@cAervudU5adz6VFYe1Cc9ah+w;D%u$UZbG=4+yJ;of(
z;%tY#SS>uolpvBUO?~v^sTn$EE*E1Mjx*~Jih8A%iIEYn%fk&|3%7dTyIhr}MqttZ
zMZwNoMR67vVI!pt<&yV^Y#^A`h&vFabqO;FI3aV)yU2%dLw1}E>$-1;(YU#SLUFT1
zB3M<Pli!#XEKIq3!EH-V$>jV(!GuyFQ|?RDOhYASMR_BA^anCJrJ3>!g^PP*7y4g2
zZJ6!=+0u}b_9AFkp04ZlTJzga>i5P7$`QG~h0Vfo@-jJ3o7fpBjM`GtbS#Ld7D<N5
zD997Z?Z1Ur!qSdjO6#xO#(!ZXFaF2R7<4Igfq`)Lm+}i#101X|)=hGY6xd^Pbgi6#
zV2Rs1ha;(X9h~%2P?Nya(Nw;sth$>PYa%BC{kXj=mBaay)KCCB*~@1P^=riLED6jQ
zC`=h1`_o=g?tGId>)!8anrXC9faO}<3D>RQ<^MrQMiT=ThUCdF{3F3xXms)r0vb9x
zOx)0?^H*kni$WOaAxFED(OU`laxIZl+*3H>S4FeZmPi)I)#1D1W--mNOTx1gT!C%0
zy+ZH@=*-`O1b~3D27&l7Jp8kg8%ihikTTFC<Kg1;i9JtR4I9g0Y*R>dKa~9!{TW=9
zi0h0kv$cD>)WxVA>hznqH5Dc<7DBUE4E|@x7VNC}vebg%<u8=Laqj>+#kBii^=v!Q
zT{(`)E^J}0(C~0JrWkbc^OxH}z82X3#1W(9DSqWvTi1ShEDu`qJZ1l<FdZ8MV%BWq
zp^eZ%pDo*T?F4wO+92wI$Z5%<g?KKOpc%cd_C=+HJdL(?2=bFFXx#TuW0pgE1f+ar
z!KUTW*%t|5+l)cU0+L3=WB1(Lc!mQ6!YqGddl1o}RS@+VhD?gGr~l{ofo;sc2_MpC
znvqJ}_Adj;V*5d37BK0_h%6WMM;aUFc6I{AE-A2SlIZ2B>q%M2rZ6F|_?)hnCqk8O
z?P1E&MM7`pIn7`C1t?r*_w5pEJ%6*pDf6p^d6)W`g^B6K`dIf8A7GI4k&-f##M=1{
zL*=|)LVJAdSXkf&&^WnNLDx@)mX2qvzlYsYmHP*(a?}w91#CQA?f35`2E;;w9a`6A
zaZ2L8^}%N7eCX$Ok~&-}S=?9D9@+~Q;$l^&fS5t-Mx}OufwR>*4KUG!n2}ON!@`1I
zBzBxLsewmCjEtHz`6j(tN%4nPsxy&`1a|`z@j@Ie2VGslc6xu&J-Z(M>2%ZG{vK_6
zR@NG@GX{zsHEfh@ipg!EsG_qWOo<-HJTzyv+?T_wSCB?%hl^o;3dJ1~DTNn}n?dYi
zLPFQ7!Z$Pwkb2`Omf5DN4xCC)?N8Nz{yZBD1!msN(kOu>K&0NT-*kon0}B_b5E>m3
z+2^drf}J|rIWagWWMgg=KeqY|U-D0og%UfclZb{*aSM$__w@EcPDjSXpeXT+XdPBc
z*&-co?(OWbeZ_0deC=<~MzNs$A+UfBB7;p`Jekad;7K@enUjkpR+AF-u$?3wHQHW8
z<dse}(9Tq$Vq#LTVEUuv6G3}@GpXSO_gc*!J7T{zi9jJBAV5jU!@`2Lz5I{anOKgO
zaiP1qlyq8L59pRH4AZ`SE1RnUQvw|*S{4>t?YHzPlob6t<8byhL**7Z?!;JBR9IMK
zBqA($?%{7z!^iw#N||z?3q#XQM0p9cx!Lp`D!khbe$I3DQkdb!$p`NLT+sSzFEoM<
z87pG2R@o`^cQHt9QQc;cck~N~rWU_<a&qz#36JLxSGt-%SX<_5H3VMeS0u_rgSB^1
zlcl{~?RT)uY;0^SY=7q7D%zb?etL0e?62ZrUW9i-G}2wYQMf`3aO!i>gr=WS3`clz
z@PQg#pb7@*IL)gNuA#pNIk3K?E#lU7L?(?LGL{HFTboEAndq13Z*tiBgfStmP!|}E
zt-6&exjWIZ4>g8~kB0}HH8@BO%)WOVeD9z5DNW#H!}fxEr*0jScG^k!W2~|mQ|e?s
z3=|eg26VneMAC4`S-W8VyXt@=p;!S<=TBWW4i5F!yI>nfhw=HTsaF?a+1UnQg-g6I
zQRt7C&o8Y*Lk?pjz{U_$O2`ii(h{lQn|U_bJulSTPu3TT$wNZXEg(U48D4W<MM=)e
zPP~%-WHr~@8%XspSPoo6z@%-9%X`^KxoNL^3oxia8}G|nj6sehi^PG{v9h_vZE#@V
z+`^o{Pp<|EgDngRdmw$xK&l9}*={DT2!#Xjni8p6wloO?gZ%vTzc(;Q6#AK;%eg~|
zfm2FK%Ko6?TkYqlaGCgHD8bsF+t*uUC2zG#nuQa5@F$s-IMmfYOv9yV1V}k-#3(~+
z3CR#YRJ^IB77pN5ST}A(ZB=Lcl8sJ8WNU2PYZ~>J5(IotHiuUT7mcxHsT6TUl`zVG
z&IZk{g<FuN$df0Mpj#Mk5z=HN4Nq1xS4+3qBuQQR-cBR>rBz*Ci5KDN>`+^yScrsV
zE^~$|Lnv!2V~PL2dEaoU-*Ty#1V~L{k@BmnW2^5%F+t~w16bj2;YYHwuzlc$h?6Xs
zs0D-N&eWq9H3PwpdsXRXFUD7E@Chz_c=X-Pzn4keoQt1BnrB~h8H@Rhhdrnqsj!|(
zprWxiU8Gd1<s6qfX(1c#;ZZP&X0b4#_#LuH^4sxFk88k;NS%d&t)cE$@`mQGR6!!?
z_fT21WI6?nx&My67Jh<>+g{5~m1l7kOx1@ZadHR|EZ3EE8xZguPSC~UJe+TJ|G7Do
zdYb5|m5-<{Ej89bQn!^ovu`#O#hKFA<tN@IwKB?4q||Q6znPR2NF}MKfJgw*G!gGc
zO8So#J~$ADx(8JbX$pR=rNjl~r6mT$lM@7z^6a94O&m|7tW3S>>=SAaA_9W?+XqJA
zcN!oGe5|9k6m~Wa4z70{#f$@Kdl!a>nLS;yIBi4QQDWT0wz~^e6sNYArP>B$S-Z5`
zrH5XzkdetSd%~T^(mYLl3%w>Xg7AN(o)JyIiB9yUAfw46tN>rv4Eiq?P*9LBlYjt+
zbmsl*PtFdxpt<;h=t01aob&<n#~j-1Pc}&*-0v9S|9cDXQJPF&B=-x~wEJw6HsLY$
zJ(Ega9q@A6I8@bGE!Rba6jBA=c;D5U{n(1XN4~)4S_3AeI<UfUO>Pfj4Ns4@OHJi)
z)`|^BpJCD8sTRvlMXhY%d<_bgn~;qNQ{!~on7g}8`0BT`(C;H<^ra*p!CaJ^Ik+P@
zq57@TX|foF55Lob*>XS1HI_9F)uGu)(#Q4ITL8?2hey>jabDl=aC%>j0#&oHYE1zc
zs%y2{?2T7nQr%*Eu{(3$ogV@8BNSee!oAT7!p^V$p3<Agfge*fwTj*`wxiQ{ut}cg
zh>sI+({eJIPgT(8+PtWmY}D0;38ZEs#!*<1%q2G?XHtR9P|ksL7TuV}o4;>(+hk-9
zr2MgrE35(>7!)euv~c67O<`dw*A+7yHgR84?SGpmkJ-%D6TrfTjcGNMDAqa54`U(`
z@i!Y@Hs^@nd`D8Cmwe=<^=*HcTH<U}MJ9DJ3AaBI^80t|B)1~{^?7n25SQltDeY@<
zI82^u+m8Rt&UKzTnZDUOUj61sWvj2xM7_Bw=42w(@w6R{@9lB^^XxUeBM%RYAHhQH
ze7lWq2O&Q{5nrp_g=T6T1>SVA=k=7yYT?lc*4r0`LCiHwoLPcKTLGoBgsZLW?gyGi
z6>7TNU;CU})mUxvBAVB^YI5Jd-agLqri)6wH|&JV$~-U1V|Nl-&Q8D$*{F;xwR(E<
zu@S1U)^d`Cnc4oP$oEm;uFD5l7;k;lmd_MW%l|g45^S?nbQ(rBV58r{?Q)T_=`q1x
zq9NG&JP|=PUZLN<&}PLc?)}ZI!~0i#aq;f=kGxk0OFiDiVt3Be64F!j|Bfq$iIa|n
zb%MI2c0@^>`iiquX*NFF-p&t=sGKDxD()sGHv9DGwb}+j;lI;60ldF2_Uhbczpwx5
z*V2A}q}kCWyPIcVYN^#MHnha;=yJ5U9aOmOpIQ@qd5p~QERVffW|(V3z>E4juh1%q
z!I4(c;37|2#cbSiGH<ANGFLqL?PjBJZHUc8js%3XE=Lfh@cnTLFVChu&3c<@h7!rZ
z!7{Fp-N{%X;bWly5!1T#GxJMiLb_J&(6?q|JUXe(P0a!x51LI<b}|%ZqnUL^v+|}?
zX5V${ET_}?U5}ywLHO$EN3#hXj1%ozt<B7Wc7v_+&XUE@*>CjzNJfo%Yas*RO$|XZ
z)-C=lm&G30a<ySfL_$jt_Qs+j7xC{|4--ctt(To(R)LVV)3Tl1Jg%U`@$;wt<0Gb{
z8k%ymSXiuRNZOY#JuYHmy;Cz*dT#B3MGE=?W;J!chnxVXS{4ZbiUo(7Z1|wq7kC`7
zx)1NdZyR3kMqqJ{XV|JXtW^IfG|;dyVDemlHJ8$6&_0_x5Fq(<-@8oU@`cS@vp{u-
z!1G$jn>K-7`>RVijEN01bG7zt#pCKmA3)v3rVPLJl|GrovYGGBJCx#~V4Uxb+=t=e
zTd6)etb09)2Uz2&=D;MPyg@yigOH`h5x*?NAX7&R`}*yaomK5=U%B<BK7+T8RE3G1
zIaR<)LdSY3zEGh=t^ALBjuBOK$MZ?M`+gD_m-7O`mgv|<mnWHC<qblso;!dV+&w(n
zz3=5)zPAog(@3CEJN&!V8B51e;ryQELQAxHJuHnEx*~mMFSXa;YB^gWJESaNi&>i0
zDKWtDQD_Y%e(ZrFB1^#c>q5CkscH0gU4vXOSG_6qcC5uU#coGQ(C4l;uXLnZh3acB
z<I|I@o2Hwah=_=g0ddX!<3RMo?HOwRxPM~)@4(pH6gw*`I#JOcFZc6y&*#h*hFUw$
z)UBIjlGv@3EH%yL>{M>{Ipx5P6Qt`C!&fxFcgRDw>Kxguh^ZtT7GR!4+@>3B1&IVn
z@$2BhXt5E~ca0KNC}&;A5Jh;S?S;u2U<5(x;Y3Uf(jgBQFP1Z{Vz%m#a<&ah1qAU2
zsKN>Vmpblb|K=aQ<d&sHOl^X~8c|L$T+{GXb@ffxCtYi?WQLxPXP8$m^9c*#cEtj=
zD+2CY6${R^F<CfAhBlT-VC)w<K{@Wvm$)IRsoba`K~otdY;P0hgCc)h%?cp}?xTpk
z!wY=3yml}R@4<NDdT*gdDb4zs7MfaV6dynELjr20+DL#v>y%X4g2(Rf_oGdX66Va?
zA7Y+nti)-Zsc?Ckx{1*a7wUiP&y+$V6XA2aOiQtcg^8v5OBNc~N=s+o{p(Q~ml$g`
zj9VL%EHT`Rzf0|Gj#+YcmOXD2rfz+9MRz<4e84D{mIwvChXWIw92eWoI8g^8k~6zV
zNZx5wnl>LnK|!&kz6FU{3!1W-I|_DE4$1ybiA`0~t0{<F`(7X97~ainW4Oowa`F|N
ziSa7au5Qr*uZ*_)?cDnX3PG<6w^RS1iauSww$>CBBcpgktDn}3O#!G}Y;^f~CN)Xp
z`h3UBm5k^=3N?td&h0eugljiDkF&doMoj;A@EUU)?}dw_)rLl8s^`eQv({NU{ZY6r
zpP@cjoE_A3JBLbkaCpF=-$DsogSW?hp6=Lf`(^R0tiVbt{xzV_=R-P!jY9f?QYnY~
z2UIz#nA@T<m2<$>Pep2(0*s=fHQpma(ZUY>j`Nw;d}Qco7@x<5(Ylx>Zx^F?RzKqy
zb(@^dE`~tgxz=`(Lm_j?WF%p^)yGKIdZ`+H09JDB#q;q~R1|kv`NvI%fUCoWfVtkc
zvhb}S@_@P9M3q?Cy~N$8;eXlSQg0;L#l$Dq^C_AfP%ee(EY7w-ej79L`+;MEA}Rts
zeKtM=+#h`g=kro58JH)s(%#+%jXb6KIVq&5sOSjduJXZlGG4m@(fHf7k54X@T%L-T
zMDOqJ<8tAB?PUYjDIsnaaprl+iO0edrT4dyI+!|TiW5JQt)(&VS+_<BACCvy+wQ-A
zIqzs}Y%HCvkWXPDAtw)1Dg8PWn=5HGTXwnjUAL;k^?9Xyu|XBg6qqf~U^7&HZhxdz
zFHYg1n5`mkp@ClJ{D*4<Dg5L>EsAFqiIPL2q1ZdwMMBM`iK#d`KmUC1TAm*IokcR5
zLAT&D!S?zt?4me47G*dr`--`BvXgU0i`!&{_kC!^r{E8UhNxvO#BofoWo2Il_$PSA
z<s){NI8a|Z@bI)>U71Rk+Br^$gOgSZ)9O8fd_>3sdy%QsXCH#LbzZB)0^+X=9}pFu
zX8RW?-}1dBA<3lA%=ZFQ<x^#o*dnbgyIy^Nr|H({(x|>}T}~ptR#j7Tu8^tDQ72d8
zpAqrq`s(U0bmk98|HAT`l<QK5iNX=S&*f?Us%ca97n{;}bfuPwrJybHDK5vOt#UzL
zN(u}{fk=sE1E5G{4X8va@PS28IQ=rX^23zQv;YP&6%1eMuixUf-<XUARNB>bf~p8<
zGMJx9ob1Oiw@yNHmmU#+lP$_n!N0qXl&QZ}>RcWwotW+xF)4I8O0kS2&^qp5f#E1v
zS|Y0&`cqJ|3(T#LSDUOuD)@&TPdAkiv(%&!_c*<o?2Bs{^*L;06mXE1lBDU%oTq;B
zMtuJ}3n|v#Q*u~j$v>JBtla${Q*Rkn<=VDw8+5mHcS<Aaq(iz}x<k5Ax;sR=L+J(q
z>28oN>F%!YT;F@U*7M7ujxpn!XB@E~`vx2Y8DJqNF38GC@kqLMVxuRwuqSz>{I5jz
z;JO#dPm8y4vc)(US3V+ll-vG#9=B@~jb{lE>0VXgHXr#g?H3SXQTj)tdTn+x1Y@n0
z3`WZVK@=g%UB>tMBI4hRB#(w|_(jqPlkB7vL&00Sc_TwZq`)mGRT<e3tvyD+syYs)
z(%(+fZ!+buySCRp8k@r%7Ms3D+{%OjlTT?$xFg?CnLf5tnT`?SaJWjRfBb!CG6*IG
z{}&nd&-ZC`)OcKmhQjY5=8Av$Wni2qvz=MMUOAhM!Ra)?X->xKPazM^0dw(HNlU^b
zC5>t-y8P-l1I^`la*la#vOUIr3d5L%HVMmQdcQ6+kp1FM1N&dtDMPj%p|~H@OGSx`
z+oy6**4|z~O)V7{jA9trG<%wQiJ~ipTsu`Fdj;3w>NOVB)6+ASkrSLh_Cs-E3i(^-
zq3{6*#g9E0^yTphbMq+s4idS55v*Zb%H+ZIX^GdT^*I0iH2E>`T@20MpDHT>S)%{m
z2_Ql~D#X;*at<$C;)F{dlkSnU<R-mKhfx#}U>}z4P;y^>u=!Ey|LS$NJG`%^<+Hhj
zlrlG*8Bd{$@Oj~SG4yZ~U7gpFy%s4vA2>sbL6kQ7^1laH)2Gt<lr~05&D%3OCTWv^
zK!l6?ezK-CGBP5^+$K_(TS<!0sRVU=SH#K!&!RX(3we&sD4wffFs|Qt%)`mh5R61M
zL)W;_zYHy9Q<_Hpru+FL0bysp<(OA38uTccg|<}0pOK7DNmA%MHv~xky|Lw6$3Xh#
z1FUT=8u-xA%1@s_31pmg9Ee+@eXbA=$SHCS0U!3ydP<`tUCwX)shKmnw))otW#p2G
zMxSl#vUO|$B-hjupOEn3e1?Twg;pJ%W9@BLt@^{J|M81}G<uF{WUfn5hP3Gb9PAMT
zN*HBjWd&{w42&Ab_s;)LHEf{1_fF9;0WL&aaEOT201XJPxN$LK>XoeBOd+43;6P1n
z?bNTh+60>Y(@ARMLsa3+Sl@*#{K*6biJRuKV7>1y8R)gLaTIk@6hs5oVPaRCA)?|^
z$TZe#uS#HLou;v!wD57tK7dXwiIC4p>R)7!AF1Y>(rG=&mV#3$=lv3R1O{tsI5;?<
z2~jie7DP)`Y(qDU#7WLpJ=;FxsaB1KWHb{x^}yWlU=l#c4HrG}-tovDTci-Ov|1Jp
z=j?Aki@A)mI`ElWBrJ!Ki3w<KlvuKJntT3TSU_mmkQ8dNdnYC)0WefrnwtH_VIU}V
zI*jtzOTnM=IIHpCFSWQ?kkrM~`W3>YLByk{cIs!U$W42=_|=zZ13kyT3F26S{by^5
zbn%EJPL6o^3N==XmZ=E}=Jo5>1O%xeAt6|JD2d2__f3ot`a3hEg^<LMzP_6qHyOn6
zot>T8h6ZDqP5r2mCUSBMh-OlTNz;c}GPvPt8slNiq1^<s96qLwPyT@0!^jKWjV>ly
zOyJ}ZfVpO`sEAPmZ)9Wyo+Q9jmUb)u-TaUkA>_vQKa+-DdUrQ8@G!{87%5NQ%xajb
zMRlnh!GF^%3RK1?vN}pvsX+dQUcw_a=;@)Q6+vks(&;TSmJDg5n<@HR3&?4Tt(rxy
z4<Pd}MzFFJ-Y@YuX-*HpO%o0%kr*^)1K(3bL<9_}H}JfE^-3x7!}w#|zt9E<8>a)x
zbNE!zAR!jCK+kFn8ij~R0YSeLU5XE<tkQJ`UDS`7KWva*<sU`ub1GPN6iPqF>34%n
zM@2cc#L$^%4-1tC)=rkP;OkG?V?`;#JhLKHoc&v9uRKn+V+m7>D8ZV`iv&f|*;x%i
zD?hZ<gWCfK9FE!wRt~ncs?hMrC<Mf(&1dS3Z8N_IloO8st+f!`H~}7WbY_g=mUo8h
ze*nt?PWbdHGoFzRSBgS{XH1RB{1cIxOL}nk`?Pg&=@{YFv36Jg5DdYFY2>mW=5@Ys
z<r<wB-MQ@*TO&3>d*TT0VQN{lxd024OR?PJ=$pJ56jZQ<^V<cQ(b~c5)cZqB1ho8L
zNppy3!NES&wRX4Dy?Odw(18+6{uTO%Bpma)XgCqm9)*l(59x0>d`m$k$)$GA{!D6%
zeF;vA+&r=kxm}I16{6va+%Z^L3u$O9_h(NwZuScN<x23C2JMi{l@_VIP4}<_8c7(x
zLiqn3EM2);Vu6L_gR=A8C>`JJc7{v+G49u<SQ-qRkQL_@_A>bI4H@tqFiYP!`&0j!
z`9RjO2a_zYMw}+>IE(qxS>$~iTCwep@guBJyZ{Lm`_t2$yi&<AiI4&eHP@9pTpZb|
z#b4cnRFOQ}z{Ndnq^uxqt(1t^z{~lfrqnhIZ0se+*o0_t?hFvw$1>dHBa`=k7Z$~0
zs?sB$LN3dJ?xd<?rNJY&z+%x`?CX;h*Z^{Zr>7@TUf}Q-Py+;z6ubVqBf>(D&i(ux
zZ^s1H*H-m+1qc088uLrjMGVOgpKn_{8nUw$uhPQG?p>edPyYn>Nzu5r3U|w>H8^aM
z$}&(FGbt3g-CADKhVj<9dN(C~m)jDO{a<VmR~%yzI5zR~ozm|EGy!pc#BbNRy-1T#
zOzkHA=2+4+?`$iE7PAFjiRP@s)CXjbx^ssBE>(0ij6C~<usDa^kB_<+!vNBonQsc5
zpG9dFmzIK&3B)Iml@a%MLhQ>lkW<9di$d&`WeDP)8WM~7ZAY5mpS3e-d<`y7q&W#7
zJYLp^grTj)3pM`A=<24;)|>OP^H()BYJ@*pjLLkeS?JYret!9)1MA#b9D=y<A+OW-
z+lIpkX9e5A-!&~+Al!q_EVebaQ(36HyILHZ7cD50Tx5k7$vc)7MPNAr6W;U-{Z~FC
zCChYNT)g1+5~+m>cMV$HTk|8@r+~Z4q!GZNLnx`VUlWd_1N+C|u!!4M<+|lKw|*Iw
zc&ROhg=7#n_@+T4Bar_>PSlN-7JrW{(UJoJ6`6WhWKixgyfM+FPM&0*_cAjoyZuXr
z?rdY8j%|a%X~Ls+GWsr0b5dX$-L9amP9c2Ne7#xcO!TO}`(l}5OH~~NCX@Pa;6mBw
zR{J89E!cGLLXnpZV+rMp%=|}H?i=kC-Jn$^93|+=V%D54m=Sxe2m$#r4hgK`Zwl|1
z(A?z$RB^m9@bGT+B7eOXyLJP1Nx*-$u2S)*B8yU9AF%H1i6TN=fJG%<1ZIQ3zPx^X
zcmO&RZr>-bln60<V5UK-@pN;#4xof!GG8%JL=ZR^@!GGxS5Z-E^}5ZP<TDw-a&^7V
z%E|(EO`m@X=T&?4r^Ol-Y&z4QA2e>ab;8E142RRW4yYGfnSb3-jAJNQ)+;0@KDz#@
zOJNjm5$;;EGb?YR-{!uZGU$@3tx;@dXlc4!);pFmc>Pd++Eo$yyg9Vq6>v?=mEXGx
zkF4eNwDL`a6TjwLtsx5(m*o->*G5nfCqZ2Xk1s`9tZyOH{-Pb0sH|3n`^oI{sd1mm
z$Dtq7h}?uEyar_Jo)aa5zj|yue)Sw+-)Aw-((Y-QPDNmUWVd+Q8mPs`+(jauWzb(<
zghoittpC{E;~eg;^X`8)$VNGNqe%D6ODrZwd)c9sKTq$?G}M({m8R7!wdf|qONjYP
z!@*X#f}H1>$oFB0A=1+QP_zv5qlE-WETJ*7Du)qj4W;vO1AQ#;nhQDv3cT)~o-)m9
zn7YG*1Hf8m2ewJTRu*`{n*8Ys1&*N;lBvMd1{f;7<Kq)K1N+~96Z{q_ML<;{`;DW2
zYRYMAD20rS?8Fs#!+`&WeI297toPI0ko=a&=etXbTt?Fi0^q65&iVMr{37EB^}{fe
zbW-`qfm+ENEhFX5Iv<HCHy8EYB&`1C6t2{DWf&*^jqej0I&n#cRInb!fO@I#<6^A0
zc9P!}tNn#F_2N*+z+9<LF#=~<rqJH?)^v)<0_oe68P{3K50Y=WxN7Sv{bQ`QQSMv3
zWfKI6xLMLy`zxeUiDefqJ&xDiovyXm9mBIRaR9rk&CQE%wa}0_QaQM;^~}xMBpz8M
zE~H{?i2&!$t<m*}uf)DGPL!NUn?tMFR@>Nks!SjlL@Z(N-uzY9`=ODWd3c9Cxenkk
zlpK-exAwo9Oxad~t>JBL8kH*{xnPZ^O4j=&5KlYU=7oo0dmWrWnuz-Ia}ybJnEDc$
z{XSZfrD*LtCc3YkY$7I+0B}l0O<m$Ln8>hwbo2zAECCVtGuPVY=5&!_ZV))S#Kc%(
z>gwu%`S`=lDTOs)SVrNp8Ug@z&HOC^k3H$^KX&2gX59g?AcFo_0l;qo0Z_BvR|lFP
zU^IAL69J5*{Fh(m{{mJ6u3&g&4tSvfj}Z(yH_tY@HMO7mE4I@mYCCggJhw|;_j}ie
z;rfYMk(rClmZaQ_`nAiG_cPO@ySaSHGU`Q&6-E2ncG3K|h-Ra)+YjTq_$g_#ZMzf2
zk3+`!;yu*5cabBe$8f?h2l#zRYEO1Za8wnKr!Dd`FO5i+S}#tns4h2Hh*v6Ws)qH8
za1)@<5Y&UR$-Z2sy0$uAPK^uflRjJy7J|QWu(JCe??bzD*-pNG>PTVQQxd0UZ*aV<
z*{+5qmOmC~aDRz~M;_Y|nC7+e)2MEx^<JT&Vp3)l4Cnv9ee>i2dS<W0z5}FiihqbI
zFNf*o>R_}wiX`gA?D6!`vhw2Ka#i0ea?ht4$=6X7_e6Uz!zmdoVIZ99h)?1ZG;%^w
zAjCaJf)Q_gp;oR3d_$&y)FvIs9w+h>o~p~s%LleP0ug~>w1a~KV8EvjWC4X8F)?uj
zNU_hqUI80V;Fp!9|LX`Cv3xy=qmmieJOfsQpqNoK;fEKC0>=Sb<RDSQ9!z$>90-1}
z1s(A5%FJ|;sKr~v6m5+!12KI113RfREX2XVfeB?Am{3t{iI!qw;zckOMR17l0hA^T
zGeP_a?~+NwSgCOWXrZF)^o7{=f+#iEYbvT(V+LC?XwqY2vh*cfN~h%zFOeQ@OGky2
z^_y0%ubh0nuBC;A`C~(3V-0k4l;~&QvT;!U&F?8$Fb6Nfv6mdi*(59}i1YnJaQNJE
zrb?*sd5QRH=^?bL`Lu%fD$f{Ytu61->R*Z})~v?hpexqM6<?Iv+KV_A%2qqi1A~YK
zfOU6i_=0hG0;0lcu0Dj5nW-t2rC%K#!kb4g-!6dm^HAA<Hq_9nT^0s4Sh`e4M@ORM
z_So(o?($zbw*TbsYjZQLRPMjHUE*)_taT3-v^Dv@(XW3K{9G7){Bs%_MFBQrxlON0
zI5M|+=F8CO!T4~)EN&#>U3A*!fff!_V0q^9<HJ=WB%HZ~))Zc&xWd%jI)~@ee7@BS
z><l6IkJIzAivwylD@GcVbpkVtX(xx_B(WW-^&|*befv*Cuj>#uMiHC;E~^;hFaBg=
zTcmsbY9YA6DD>0B@)$&m9C4<DLlt@@7*X($c%#tSyB%g5I2!4E9Aj~3|3dMHJ(%ZJ
zEOaJ$nJPI~Fr#8@XgC4xK;Tad3{ZE#D*Dh+U0wbE%p$GTi<PK&dFK}vv<23HwGJ@B
zfesS~wG|`K7k+-Yb&Pz-6!ey!y!hw7w3+V;08!5RLcN_R0uIiWP^*Vp`Se-wJtFsv
z;fn7AWy<H6)fdOf^65(hoBirLzc(@GVWN+9is!Oa11&EP2p#yFyfrC)&;MS|SLvo`
z{=L}bh2ipj%9dOqV+=Wrp>vePYYjN39Gq=kBIXb_DHWUMzKOOKc~sTx?51UZ``Kf;
z!HrO`g4Mk}DQub`jlUvAa_uaUKm_Je(DBM4zQ;K-0!hE+it6ve%ERHoje|ne(#@4*
zGOWm+yQj(NLjUxzEX8ZC2;rx;NaPBzPB052|6>`0qR77&#9;$@zZ8?9*h4c449Jq1
z=}=w)kp{5G0rpZUY$gNX*?|CJxzeZ?NGO|{nu3CZG4suO!AS?at@W#n`+<s>gvb8H
z1z7#p2Xn92V(fv3EV%7R_*@ug{ZVohZSCz(fL%LTCYZ-)^SZ49-AC|Fz-<2v_y&cT
zcXUz&A!oX6Z4l3*ARrt~Utf>5x1XF`<?D&iboQ(_tJfL{wO&6xT`Gg9%h&t)Ze%-O
z+}ha9T*unF)o%nxjSD5Jai4R)OL=TY{uuFHavwPN*uT><=-`QqiSzq9eTRgPKwb*9
zdU+udn9xt3`P>FT#g`Av@eZgKpKo2BcXUfTlW;uUv_^t+6K1;SJ+qnV>)5UwDyzXH
zy4&t!O$7zX%%|s)`@enozLkhHk)H}JFJ~Nf(9{Tcym&(dyP_f>+=>*n*%hL(rWXE1
zgxs`I963w86Fbdhgkn&O+~yEpM96EdYL0NK30n2Cw7Z`fz$MAq)fM<`o`YU3kjul8
zfhg|v%U4|}vtZ_x!^_(nut%YrdH@3*28FOFmTZRt9EPtvW9Y%uGBC!?v*{cI*UUfQ
z`1#twfdP6-N@D<@=HCO|pPI$7w}Q-a6kZEak0-3`?2!@1$Lxd1k)%xh8hU~)Z?Msy
z`j3&#VSm6xAL-aGXQQqwWkYmy4#own7Muu_vb7#7VzT&VMmTJj(!XaR(p-I3V6(gn
zYh1sxpF1&bFk8=Ie(ZHR5a^ig;-KXD*!#_0=m9&v&`r?uX5!Ij+b1_e;Af-jdE8Gq
zF)gQ^g{Hw@v$MEG=Z~q|?*{+y$lBLB?JTZ<?8iGKp0{oDZ&=@F7aW(WU3B>ATcxP9
z0s}3PAsdQTFAuTEClRIqVfW2YEO`3F;K5@>Zu6)Y#M+S>Ehuua3GeydfjA3Tk%~>E
z05`z*B(;F4J%ofGArJcoP!=E%$j~1;eo(OeXCs4KgX4IpHBfpQq{;$}JRy=@6V$2R
zQ3rPVI>~VzdnE*aYXKoVTTG9Slk9P}Q<k$$&NJ<fy_cpq#?#`aA3qvdkr3V}dq)y5
ze;8)WA@97kabpXhWw2U^$$B3NFBlOKfe93Zf7at{ssdqPPiBC_&fkpK*jWixaqVLK
zqsJs2dXCwS!f0{@<qgvlk<+)FM(gedJ^Ss__;qn=fLJ=Bt@~V4L_j_k+yr4G^s(??
z1JDFfsI1T69u(uLFSjc_INKj{tgEZPzvRRmzWJCeP$*Lz=A7#6b$Wx6-1HI{0ELji
zlNZ^Zn87Kwe_^CyP_ubb%#S?5qVXO2o5{vRKzcC5&z&mX-BnL`1lIfxruh1s%yHSl
z{CCN|3hr<&?wH?|7vA_QE{?XB!}LmHI{BZ7V9-Oz2^H_uxM$fWg6EE56X2%r%JDw*
zjmn3@D@M5^N=k`3Y&c4XM8e%tF=iR#is=qaSu7qMT1ERWsK*FJ32puT%_V!@_s1ut
zZP;h7o|k0t$WH8q$NIDqTI@fbIW4<8$i>gVti^K0EpgviLC$fCnvY=&Vw)!*OId+P
zvy9H~hAns5OhX3jXyjuN5*8^rNJ;6*`30Gi20z%E8(Z2M*w~>iZL!#8pzY>eqa_NZ
zBJus32Tv;^D=Ip}D~BTzw(ouVCZZ0d6iOD~5+JXxD^io+I*t5k0%q-pp4K#SoZcP`
zdE97gv^C+`{5GSprRLOFU%((EGZ!yC<IVOAcXpdkbX&hZO2*&B4m~tY=?C2RWhUdg
z+64HhkF`7<jLb4q$kXg2^fE<n#~uu7rfLk?HW8+Y<8xHF|7ireYJ}|sG~L;rB<K1I
zQ^u&`FL6K7`}z9#p+eZW-M;-VSrJ7-Kt*AS^oQ#s6jj(&XmD0Yi?uYynD)oPWEqgO
z=3p9$Gi6OEu-)Nj3_JlZM#4DUn2UfpqZKEHqI;t~{eP-+p?PHVpksH6DVfh>-)sX%
zOC&mcNSX+pxfdI27!1|+vSkln^hZtm^lrh_n+o)cr?FH}0i=#2cP{F<L4A+^Cy?Ur
zrH!^RN@bFw5vF8G$oLJWeh4B;M`XExrT!dGzPtVhB7=ZK#4;c%Vd0PV+gS;#y%;BO
z({+(lxKn8&$2KI9&q<Zroa{A<jP4Y&)5^aEwOfjq@5huDgaP)0gp|nAuxsOQ&86rr
zLc3l$jd6xRS@_#WEh#8-Q}Ti~Bsp(VZ!x8}7dM;MUu7Y9U{6pR_=Yf(;af@XLZCp5
zb<sAqV^VM}iM^YyrAX&=f*lJiB8v!W#xiyc=qPRWV3^Ptw3g81@u?70c>edm!K<Ln
zCWp#?+9c)o3yPT_8wucxBu$Vj7L8|Zg4zC@Kq&*{)aFs79jWg<GfhKf?VLq^-Ur=4
zy?Xa=_k&auzcDAZmup>|ULEBUH;yY`#Gj+lYNtH7M56c03b{?pP^oQ<lM=W2IJ}1A
z`@sL|)1#2Gy&Xkz6BKgsT~fn*#9g`zf1i~b#O)q7jDX&25y^Q{{wM-QcNxOz9M=_O
zI^&S0*d(XF!N5P3ZYFW#395$50YQ0kq|HMRw*-_pwMr2~B@6dGh8C1281%zh$VC4q
zk+Jt-O=LyhA*V~EN?l<b1Ne86k^g=HW8n?_`v?&U%M^d}i<a926mnV@G>e>WyPfa}
ziwHCBoZAUSd?seydD8j4pfVuKPHuvn_nhH~i&DlUP&@BAHI(R;QTn3V{?}HQr1sYo
z3$!VM4<3RjdE!Yr?T=NE`W5U(>_nAmh+O#yHrs{e;90QZ!F}5u|Kz_TzZ63b6>6p5
zF7ls!){`1-V@ir;>S&aJk__G&{^#smzigH@k-}CWuFVO`$;0;{SDPn|>&-(GJoRJx
zytNb;qth9*6)Kyk64yjVhpdmn&%@X3=IMz}_a5WFTDhcz<#RaVB^mvP-e_IrEKNe*
zkh*%9i#3q3>$b`15)fz~@~db=+9B#?dXEp6i0GubdJ~1&%|Bj>73H~L9skN{u7QZU
zaprY{4_;t9W|$X%q{gjemgjnL8TjAFck+)*r5E7Q@L2zeLPU5vM?`qE(j=qUk@1E@
zR=rsB@jjZQn0@%Y)4`s@cl4UBfEsh7_Fb;oVM^Q({3P;`&s(9JO!7ZJH8t6xrSt!{
zUSn2ds$gNmuVG{qN_ez3>tZpMvwU7FaN~1X9o%mr%b$@4BI@%ymie@JcwQY&GAg_-
zMIt-^LxhYM9qVGoDp=?u^UHJ1Sgyso)mwM61mGrXWP3voIi3irNHOk3&OvqdmsH~J
zie20Lx0wwWhaH<gpR4KF!69##q~^i=mSncFzB>5C*jYrty@U|=wI?4ed59KF;($7j
z>z|9x1z=*ic=)t>I>NM2wZNB0|K&0lk#1L;!-~tYt1YX<yo-j2Qy<=%GwT*M@1z*R
zDJ)GGvlR*Y%)oUqCd+nAm_petHcw>-$l^Vf{yl~$Cn?O}l`o;_))dqbyOSm?M~3DC
z5wX?k-?`syw7$L%bt+LWt^0I1PjhtCa?kRxdObco?K}_w4|{cRI8nV_Z}&tgd*bZ<
ztX*aP*mFsioh`aiMfz&*a|q7}k~xGOy|J>G;Ncw_I)Z;qES<0^(C!u3+7nX#yL8Ti
z$<`g|v#9Q!iWs{Z6(vs^a0RVrd*w4>QHUJYe=~vZmf1-9;qPYGBb`RRT07WEf|(z$
zD@9CnY8?{q>yM^N6kpeczhP)~*(@nUCDv_rD>kb?8rX&GOyo;{f#kv<M-lNm9sWrS
z+Z<eJbFTMkxho;8vt6vRT0kk1%gktDPJ71^k2f|zr}B))c5x6I4+eXeYHYnhQSVok
z>!=>8?Mm&SDdL=#*4LG0ceAzUE%ua);|0{J;U2b?lDjplz)D<rUK2F*W%8N=jbB#3
z5<@By)1>~pH-K9TWV5|}KMPXbb3$eCr(h(ljF{FIM=>em$Coc(Qp5K%9`AE<$W^}_
z3;p!GKeB<Z$B5auT3V<s7-du$+dXV{MVrpiWCwkmdsGr0US8XUhTYEI=yRMASLaVD
zoZjL<*YV_kABnUXHCHVXC!@~X=JB`}+T8qs+G_eoH*lZNzDaxM@ViXYaqUlcg^j5x
zO45f=ir{Em{*S9okp!*Y&*N?KnY!9_+?L}T{gb^>bA_s9DtH{pVc7IrL$SGfOCDjh
zD&|eLrMxd+wgHg=6sp1x5M{)1L3K{-G(gx?mR6;h-r*tqcUbvC&x@$cc1I-OlB@0R
zOcXnQ-(pg2UPCunr;(l7Is9&Fv#RgfUHtwfJ3BjxK1rm#9ZBW@HbZ;QZnar~+_#CJ
z7S-6_)%!Qk#E}Uy1YD`9sSC8Xnb}_ZgEc88E>0}y(Z$-lp7rzyS^XHcRBLv<=WLbo
zLoS1N8bB*Cl_!DTgF2Gn3-CgnlDe#V&x*(8*5@mOW4Bm^NB=bSc-qarO~7sL_UEEF
zv&~1fR0kR=iawDZ=suf0YAwYO-dx?^R9dI7rPf&+SkbZ?80I09tG+Z)=H^L6eEB-g
zb}vXT0A7XbzZ;Kw<L5FSVTr%TOssbXN`Jb{)h%5-J1QJfKpQBO;j5uxpy9sw@)81>
zv0FBuZ`eJX{$8R|W@u&PdC>(A$Fio@(Z1}nHAN{AH;_mVNyyGdufBiiMpRXkkS9Ez
zDU?swsvXG?TKOq8>4|!DU-)g_--THVD=)sTRNLPz8-Yos=&d9fx9y_B4kJggQsY^B
zr$iO-N-Z|b2Sejus2vV_oK;c2NnC4#FCx5zM&X;sYvQ5Kee=4@%#Zy4kjI7hObp?Z
zKSBb!QA%&TVXxXHcwmX+*in&?0L9Sp)Ucb=;|H3<=AH@l$<C?KzFH}rPKCmxcqAb8
z+}!kI!f|u6`xk*uUe6OqVNYhp-tHDntNUDDoLyX<z6{+czOQD>AB;$U%iMUAN3N<#
zwJ9DCCjHzzJUV)Sxe1s8RL}a1Ikmm~*enNqrv5{ry{CtlmS<<q(G`8ttjNzfkt^g^
z45k38OzaQa5FGpqwo915(;46n_a)I1QQ^_$<^khZR?hSw9p!VGGRI4-AwCSvQ&pi1
zC%PsPupY0O8(C^z%4}pOdwqZDT2b$Na)Ms%d3om?L%cU#tlg}Z{yG?CVt~1!S0<X@
z-C^|Ejx5*2xVjb@5j8qI+(_U>jARfp-u$X!3s`37$;_6b{;yuS6AOKEcy7;A{aD4v
z^Kf&E$z{9JNJK)iQm<ZqEaY=@bGQ7{+3{*<4m7Q2>=qSf6x=SMSic1_n_>`hi!O{k
zzzE~P&E*RIt3dOU6c=}Nj)5i*SYANX7@uIHG#+{0@;Lz&ET7K2Q_T4~%g2?Ux0pRq
zd|nrQmGLyV{$SLodVA#RaET^3cYPeQH{};*q5RzZEc4fUq3s;8!DI&4gVk8seJ*>|
zi>~5$oUN^ABs`b3v+j@(xX3#&Ymm|AX3)`4iM%&Gn#{7&Fm6P=+@jy4ViAIbjOh8W
zAyv<;3sP+Of@>1N7n}Jm!&);br*wq95;PXj9O2=xOma(En(1ujM@&&(9R3!M#RMH@
zYJ+-*Bt(*qF#p9^YN8`f(1}Zsut_`rosG%t4Nzj%^>ms+GLi3^p#y^|yGw1yH<d;U
zHJ0g1?Q6pe^{MqXx;0LrO~^a=x_qwgdrwoN$FDKZ9=gwc#iMYAOcw(u%`CLY1U{s{
zi~ODikRnShuH|4S_ePPJapG~h40X7J-$~2R!s2C4PsChxrhsqHhRb13E!b^KKfMv_
zK#Q70$X%z@vKFu;9GZ3P#nD*Nh0kDzEsF0eu+pcHKkdjQ{$Cx0T_D?A)^U^#OeVMW
zCg<I|wmC<94x5er`=H)3$=HtM5xuW$-t!sWo?^z|LxG{1r5185nB?f`>iK*TgOO*&
zG7F$L?aNR1(Z?K2QhBStIYY24{6o~ZyCexjSN34)tH={XgA-oe?nG2qhu7D?`Bw=7
zsX|HkQVAd2@E+bA#d;i^`9ckjnISKxzDQ4(ymizF8R9R^tKDX(G8)BB2?UZVUpUbQ
zm_LV;Ts&eztpv38{{^Y<5`Y70G^gS%jY5D~0D@HF6^NjKxl@sT`IpFAP8laQ5V9pR
z>u;%WhqUsRSkOe~z({fH`r8lS?rt`a`3VXCpWLCU>+_#~{Q}6PQBj89${CUO)Cwn@
zi+Q-2=MkL}BlyME;8G}}lech%n1gSdgyp39c2iz~d+a~vF6AJZ8N89}4(Z-xECz9?
zpPinP4TUqC(q+s9Nm7>Qj{FSiE|U#hstNLcsuU=Q%J-s*5JWHDz&ip*X^mY{e$7*w
zkAV{s)E+Xj;Vye<1T=C8+3zAJxu^rp3FG>5Cn0YKfa}_SYZ6Bc+|i|GCv-%jMkOe5
z=spB@`(u0LW)(JP^HL$0tTQm>^f9Kr$Z@QlN^qHi6vQh3$@pT7Yl4gHd7RJ;@+q7>
z#+w4g-*C3{7Vpec;BYQbms-_OTKMnqQwN4*$a7FkMRI_#yMN=KoFJWX#SLxpK=obH
zG!Lj@Q%dRPK0+e(N<E~U4|#j|0rE+bs22W`pB70iKDD78OU21y|C{hZfGQYhRM6}f
z&?sCgE+sf++1*sJi>vi_j3xK6==A1E?}+1t15iJ3vmj|1f6ZG|_&>jwk^(^vxh)hz
zCJveO!5Ek7q1kU$mAw41`Z6*sIy#y|+;lHhCk1XN8OAh%e?P7tTC0g+Xx0RzD~w3E
zZqec<dm=^+3Zn|^_=c3QFn17U-2DRrnWos%m=Q6UNkuVc(_H=uU0P~0G|U7%`@uh9
zRaRD_qi2(mwUY?7=2|>HRIOe{>>&OWjE$faDC35@)l~p%j7RSll3*1m_w)vjpCb^P
zsI5Cr^rhmsFx%(8mvo{Lt8qtB1OZD6<T4Q-KDoG@{{J$>Jaz!DWYn6vT&R}^jg0Z}
z*wfQbP!KkR#>KIzsiCnk9`!P><z-?aA1?}v*X3rS(W{rC#*`jy%V-<iIT$=j&<?4X
zv2z$ieTx(-l$7y*${_*JFQksh{^TRaMePOofIqVLV1TC@pfD4@a{v_O^~pk4D2NZY
z`#BCEwC&g1>4%nquaigO=1q<#HD3<CP75xec?alfqfHP{?x3f%%ZqS3?M#P9;*8%X
zbC3o~DsofOakfo=@;9z&dO5qm2b{V=(<6`Ign4|N^^KqnMM}WfSk_|WISn;6aEij*
z{pa-={{Pp<|L64&`@Z^`Cmm6gUKxncW^{6_Hx=`e<(G8S9gNom89@yv#?+hBU2&8?
z*i%w_ZJNP2Q=IE_!TCwPr;f*F+PmAG)b=Ay35q6J!C_GI%b{$GYv0G~e=%Y2jSrrV
zq}cX8GKB3lOu`VUh4LZ3+$1jcQX8V?$B3|oyc+u=I81c+@T%m0c2yCJlH?obb?(o^
zgm7_X8-wa^+1MEA>48hSDLEP0az_WKwn{3||ICPufNbxxlaq7s;+M;d;y3Bq!NuWy
z)Td68yHh8)B&G=_ChG`*E5s7vEzcomveQxt;9>Z5`Uf@-4gN4Ubsa{#qb4JcawYOd
z@I2!tj<|RaC^%qUa1J&lCd%5|zW|e@;?~v?wY5aCaC)PXJy{Ev7B)5nSQp`>A)-#r
z%V?DBr0Q2>%KK;~u}H53i7>iR$gP>ty{~<!wk2djCZh*~W>soX^sp?P7fJ8<DKwSl
z6n+gU9UVWTXV5%6KK@x>hxdD+D>Bstm|!0*Q_cE{iifL1%zxfjMaB4N5jsTl#6z47
zW~ofxZRV9cDEUz4EL;YWro8O&7a4XJA!5oz;i5oRCYNp*+i86&L)UA%$jQI?D2e`F
z^lQj8-Nak!K%f-QqeA@6U!B*{4&HnBHh{D*Q_{;zM?(Y78VcsAFSS1A1NEd$k~0N`
zkxn*Rf50!3V*drAf4*=`&_3o$Eot2Np@&G!&}YU==3eWlVw!=xK$>59fu#*fl2SCt
zL^9}!L8h|p$%!GaIQ;{xzIjk95)pFeaR{XQ?1?8)dS0cSv}+E;wgt#%F7xtkIoS98
zy?`hkNsSQm0uxcbi7}%|l1iy(O|In{wf{kp%7N)nZ%{x}7uL;-RM`u{GQVP^-0Fz8
z!Fg>qF7YI6pXB`i@=i)+vh_&pQr$chOks&bGNKqYOsxg=FD&UhX}cU!1RSMoi4$Kr
z^yhLWEd%odv9f9RW4X&GXUchcuy6NIuAkxF2>tKF#C-UyGoFrhc_%x4h?U{z|2<e5
z-i$fqYtvqFITMqxA9Q)CxjH5eMAR~Sf*_2-#-q;d_lti%jNE@8<~-|SHRcLOzmMU|
z0)yXH_*Ax&mXPL|F&UR#XntY0i9e;g&B?Zy+kk8f)yujX-Z~zck-Pp~SAc84BO(H3
zm@I(Pioxvj_l!(=;a(!3$AZkI<Y^mHIl(rHm99mkir$hJvvnG)#S#}2V<lmTVlf)R
zxy{IE^LCYSvu_1{r0RdOmBz#y{oXPo(1v2U;}Y1?bmKbDl1Iw>^YAm(We_(18py>~
z1LWz&|GE2a4~zJDc)VD<8qF)Rm#p&hQl3pG)Us>B@%!nVlDR^96fn{y^_^em|69pK
z6BX*4d-d*t+vyEo&E$TD%w1M=23M&OVRB<e9&#L4FS1{!(!aS4;Hjr^CuvVeexJ=w
z4~N;!^WJGzE|pO9H@~++TVfkuo{&NDu;Tka_aT}$1*T1ZOJ86Ym1rJT;dOND_Z~B{
zck)_%k{;BSe7unA4Y7;gE=9JK2Il4(O-_wmHoTXIe0c_)roe^ne=0m*R#Q_`(BEO_
z=BBv=W}={N#>ewd&E^Tk7=tfW*aO151K&on=09;+k%-tjQRBguJ|FcPjoQibP9>!R
zx)5DV+;_qxn=cTNPyXv$;J4?)%nT;Z83C$Oz<L%}ftQh~6x{#Tp#8l8cu)de00BNd
zjh&%m&<tppNlAG1S~jB@0_Pk3xkM<aW6%g#q;TY-1x*>M_KDiSoeg+-na@srS1)(i
z9GLIXS(DuA?e8zPU+cjCVqdDIX|mWU1$Z31E(f^i=n$nD$ohQ;!eWwcZ3QsbwP<p&
zaT~)IN86BxrR<OfMm7v;I@FlQU8Emo%9d241wd2(8$jOt>6QURaVb-=qzhr)UcExm
z7K(F35)8}Kp!MwdeB?ug^s0&3iNFh&#W7D)%_Ki)M9}8i8%&n3HkEx?c`hi^xm}6C
zTmSt-^BaSD27qzn;p1cIR@T+gY1K5Orwd5=T3c6XYHG$iWofXg(-aDqELE8>IPFd4
z>NHA2-G<X?R&4;oo$JGeLSnelKY+Yxc&Ak;mtLaR!rPAq9_H3a`a*?)$RRD7U=oYI
z99lr~2WNrrovOB}TsEeo8N(qg^r-;+i9*N|!-~sh9I`j3E<o6?1;Bt?KuNVZkf@CM
z)929xK<y>PU(QSb*7LN8MjOkI4}b<{2&j5GJg!HCUWI^wilV4pZ+p1ZTwh#F2NbLT
zP|?)tw$^Cay$93`D-EB*FJ&Vn0dH)wKvvt7fY{S?=qos(y-lxI+eQ8nssPlhq~zP!
z5RbauFyW=_c>S_T3v5!+>s$8FWip6+_N9Uar>;Ns{5zQuX(q+_yhto(5q5FZB4(BV
zG+?q;Yej+@Z3ZYasECNFfo<OV)n2!+939WWyJ7DBvU7QU>IB^DnM$K;sd&?9Ja#I;
zF^S8lv7RfFOAiv2pZcMRiiK&~Y`Y{58tevjgGr^c*&^3q;)&=eJF9J{GN|tuT5qR)
z-2&8|Rt1P}mjZ%=-!N*R?TN&!bOGA+8zwDdBco1}7m6PND(5lUSekA6k}(J%=8|X?
z{p23`mI2NO45hIx06VHcmOz)A6{)0FL7-w&`=Rl2lzzkYMKTD*+##aMs94Y5cpT;m
zN5)xJ^{&Uu*T*X)?;N0V09yoxrN-*_52+`fs=G(D@i!wQBj?*J2NU_q06s09VDAn*
zKmDMe(RBfk(-JK16dSjLPmT<LaPKnf0t^8h=y_ZYcJgK3Oiu8*?#&f2utm0370hPy
zDe-epER2gdJb9Fc5j!KRPSltQ*T^@U<`J*P$USN4=*kH9-j8Jq%qy;~8JLX_mTRdd
zUsIN9Ip@*NO%)q~Rrbo)-|v;@#g2Rxifn3~5^|Joz3tpcdTPocSoDBA^y%TIo!jnb
zsHnBIHQ1elKOID?I8IdN!6Oj~MoAa&tOL*G52g#CO@mDh_|9%Xt`z=;B`e+(Oty<I
zH98go@q^h&+U?2OYfLu7E;u*ETR_(X3LDnevB$eh|C!Gvi~o3ilk@<tS0n-W57k8A
z1Govmen1^4nke-8=K#zgc%JQ(?jvdMG{b`^6<ASGQAtQZG>C941xF5b(VBJ5X4Hf9
z+sxyi!C=X75uLm2^UDtjqviHYEdb;WRHA!NSD?)g$|;qA6{gck|0cp@FsU7z$Med%
zp$3p5-+lb`BGEfrI56uNR-M$i*6q~ra`{JTDU+8~mbM$vV`<e|vVO6T1sa3*xor0B
z!1a+8aM|?q^hm4xA3>(Ax)u?cpHH=cx*{kqFV8~<hA%$2ft|QEcnKiGZtSCbNQwFV
z6EieAxWJ78s2mL=O<E>a&t~iGNJ0?p=YA2D1KAxAH@LXE0`&*`qMWMwo0;w`Iq;CO
z)q%>0MKxq(B^hv@FN3*-I)gyDuESPGXA!jBNqx_HWAn?oMWcUlqvS;bJaLDMuy6-3
zTLWiksf}92$83OUa&ve0baVScn$z?ah#tVY-UkTV7LQGK@4F$OL<8%2w?Ezt8K2g6
ze0x;CM7NnMKm_gp0I1f7QqDzhTQb<UeSrZZ0Q@vt&FEcX0M1^G?=!^im>YB>ij*Zz
z`|{FlK=4+s+kAUhd))3HoNXxTTNFKNaEdS%tPN|xAgmKrlOY%<Bh5~)=<n@=tm}-d
zCnfA)OL)6;ZvFkyAFcbvxYyH@{`<j?k(Za3TpSz&DeT;_lEA2Gx%DzMD$391rrB|u
z`liTmf7*(}bSR<GG5O+PZe^Z#_Zrp1%4XgP0N~diZW&;ZZX`IP%0z-~fpzQAV&lxi
z?O=ADDBS=O@x$>?_d$usZz?~&e)njMB&h$&d+CcwJw&TrM{d<^`TGZ-#RQ-VsYenE
zG%950%!`4>%+S}$7k6$VK@s>|)<|7-b}O}txm%>KA#MPY3Gmja1SSIsG-1J>$*~kP
z%o-IK2&HPJNhMeky=nI5j$4d?vSxcYAJ&^3M>Y7F%6cg6R=?U5p%9nnm(OF6FvVxt
zrKU*WS^=Kn+W7g&nuuE|tYzShK|Z*t!4V6UZn)U+Nx9&|OQ}~Z1MUCT0+tOQGh3QJ
zhv)3BzYugv4v^L;3JGJHWpaUaajiFW6{2^6tt$%o_#(&e3zJ_FX_jOt!UWOrv#s}0
z%l2vv%A>c?^~uoT$jDKtCwKMpT>7Tz?#|8+y_RntS3yX4!ge4J`$r20c8%OO4k=mL
zLm<JCmX?l+ikea?S1%{7hf5DiWKfTi!)okq{QXWA;OAxlEa)E%wq0)&5rYO_qLkgP
zu^o_t03Q){vj(O&nwL3Z;o$0)+=fXQo}K+#7vFyTL%;0_sG6KCTTF-X=j%JFcbH`J
zG!wF&t~9pp-3n+=fIvDfE^g;zu827}Xmy7CP$&^-$BHS4*08K{PoN%uvOk3)6OB$S
za9K_j0Y%RQ`63VgR9gO|qU96VHg-U5;dC=zNw0yJjyR6Tc$w1XegAuYzR6T}`IyT)
zv8G1U&L{7z*g|GIXVHR&Nivo4>&OiSAHa15_|ZAVN%g)fwFT6`2;bUja2%w=PtH->
zz}pbmP~Q6|?5@Y75Z__v_)3Qrgbrc2=8dn77b#Nk1|BWcvji@?9Lz!_upSG>qb<S4
z5RWDv?jk`VFHtG}vwoiW6!GA#zf<o4ZdNQdA3$^aNS^p05f!Ua5Y0_13Wl+PKxuQL
z)^Zx3+xBOAdZ{F_rClb!dzjC2Fmm-*4hye^y2Aq5du)c8-@mn*oaQd~U4Vp|-{k;~
z3UtcAn@N4auq{hV<Ci7jOS+ECcx$i-YR$Bjro&A@iaMIk*R0>xiifw$=W?(iolAQK
zX7cF*1k4qD!@PlJs-r6}L$cClzDBpj<8UPX8F0c<I|_h~+c1!3A$$zVEDxjOm?}VC
z1+h?@gS)U5T3`87`bV>{2cc$nXj-oQ)K_o5(z(d3{eaF!RtyW1?r<##SvB3vMZDe|
zG)w1m4G#?kNOvk{<-Gj-#|OOr;hgx}t>FcoHlM&8`UJCsSvoZ}Z8moH`zs=yVkK-#
z?Vj##a5s4N#VEp}YOyXaF^7Sz?Qym-UTFjij&<;roWqECc$a}Q948waF}E!}6EOxx
zms@h&Z{Mef{<&(J53;EsjJrGE{@m9`(xE+_C&iASIy<k2fbuj^q^PXra=9l~<KFQd
z4jGx(!-=F@|KPCvr{{LJ&3kES1REw<5`H(RT2p47ih}6eQr!&c2G`NuKi!j9W0e)S
zAOJkujnAyALVz}>ZFPLO@j+NY!hIVdD0mn%m^`ZZV`FE$Wl@ia)sX)&4=j#cop-~4
zyz6z3^K?}T>tFR*F0;rb&;JVO*{0$O1firi95iKRWqEybqYR~epP$n2UKFbmVRrIS
zMiC1PESU;39RrvhAX`n2j6|Kb%CZ!*E`gf>xCtvSeOUTDwb^&`_$A?s982I}Ar61-
zJP1ZcZ)8t^%Gluz^7slc6CBgbX>R6g$tNBJ<UIxN=bKZbHPv{0PRlW^hTW;1!d7LN
zHcTR-7I1}tjjdD@@}%^w;H{5UMyh0~dpi&-t@N^A#!qJRfkhV)f#d=Fks(5b30WgH
zygm*7UchD2acc+=KT(K!B3733&!z69@+SF#&8W1psa6U2N*B(Oa&iUyPHCwrkG?S!
zyq}gD<7b4upB~%~=WFSBs(`qNur3S%FcEXslX#cCy}bj?#-&(@&cQOs*9uym*xO0?
z`iC)*UNz@tH58Kuh|w(2=RX4rsw-H!$zGc2#tUU}bPWauhC4j0Rw#jB3Rx|!Z-^RW
zE8rGWv`$9IuE$z62MA%HDeNLba(aL(PZ!oDe;H-n#<G4RTKB+1k_-+Uc5eum?ILa3
z7nEwDGlVEM@1KzD?|Lmw@$rbzY}VGyhs!opY{~euBEec?_5M~vI?bjFdHv6xv~-I@
zOTofB!Rf+Ab}Jt6EMPUpWn{Ex?n_zpAlj5?y{A#7jhLx>=kRa?e}|kcZ8=|)0&v2!
z&92<Ch2mI`^U79fIOxp3$0|JR?PFRVo$vfuv}!)jKmRz{@JdeaYpfN$vU?)%%NluE
zHZhEB2`w!pRhXZ@<v<{vK4cyLqk;nchXUdd7GI&lY6tQu5aLEg?uVrg>ds+fT?B59
zcLrZiOip@S?#UNkfSEwIi@wWFSUX!BXwE3YIRdm*2@9+J)#>l`U}p)CuCCWwCFkXv
zG+0UL=<3qCkkUp9W22y`H*$1KWC%F6dCtV1GW*;Me}OsTMeniG<KyK$;l6Qvyo&@%
zIC_j#x63`eQd%}PzX>ez>>PTvsr$3d>OOif2e|{AjDU*zOs|pTLr51PjJX>e7hXt7
z*#)`{NB7ru4@<ZcIbsVXs>pP|#%nAb=P42V><`~s@+%sDGsLT5tRG&yINM~HpV!NR
z-mSHmr2q70{Jn+9Y3rBQuu9rV`|o}3F6i<dNmjGw6Re`xeO~x!O;2@f<-milyiuSW
z^5wU~@v^`X6H!b}5)3l_nEM-N7T|%K&{RMt0&s|QJ!DF)p`rcRBG1Q;S<sEmUBw@$
zsHg^33gt;`ani>X%^Lbj;A_w1(|N@n!$2aJa}ImQ{I)OfhmFTKjXUjg=yw@F>i4|b
z{+hW7LOV>g^CmiqIjna4r8q3*qbWj}N@2WwJ3M9gIN&Es(&TUi;^zXXG*&dgENg*e
z@8RJA%4$v6!B1?*D{k|RO+`sb38|p4w%DNv@6<|*rv%C3^mJmYA<)JaK;5q=jIS$y
zu8Z+`OCy)&c5`CT-bENy1I84YA*?(D)D67>9wy+02f!`V(M!Cp{#etnTH0`o2z}7N
zQ~Q>;tO4p#4J4(>QTEIMG(R6Z0-vP@?oMF>Ls}zV!(6a)aHI)%j>J;*Qp*vtuqnaR
zF7r9<Nb2{46sgvH{A{xDMf;D>FMN|E9@gINp^ymrNn6cNCHP@sX=m?9wRl{Pr1Meq
znOb>L?N@;(^_ATWoOWebS1u?hSL9@8uLdUH3O_eiQS3XvSZcaD_+9&^c2BrdxX6wx
z#+O>8&=GM<6X8s+>fQE^lmDrISFU)J-E0>8=JU>W=RR}P4OyR%$viHzG@H%9!Nx|O
z5e*9bo5XM5Fm9+$x<W<tJ3Du5+FJe1fA`3Kr<FCSvzdgr<<698i)&9*ORSXXdN9_d
z5s;8beAjEUZO+UbJ;l6j#HBvx_IJe!V)K}W5pi1Q-m#X^)y*}PHPT<X*4*Z@`mM#|
z7vniaot4#7Z5I7qo!fG@qW|V}@@U1i_0zf*07-0YY=Agf`XwAQ4JVyBc{kC{OraL1
zKY;jJS?w$I`D-!hbS9tjHnqV^bG<Ek*ytB&Ur;a4K%Bs$Tg9jW_96P!g5ptiVTQCI
zxXt6-+r=BZmQy^Pi9ZZfkM(rgvM~J}mqR%}ze$%NJdWJcwjbO&=$C2tDc8B7xmi;q
zqC|IL10?rgM#oq|91iB!n~b8I91Mcg?`VnkHR&jlylT}^Ir7eE!x***%B~!;#t*RK
z)(dr!clBW3erWOS*!Cg3`vVtD2^DBRW1yI-WbYxh8FKN#AuTQK8<&lA=@qCq0B7e2
zUNI2i43NGFSh$#47`k~T%>T)$AG4kk)o;ymf+yg?L8R;SLx~0NG2boaW70{xl*L_a
zA^qp3c7R#P&&#82u-_gbLU=WS{`HXj;&SZ>(nr!>|JhRpeqQc~!s&Q9T@F(0`FycE
z3C@N5i_ACk4B@?n?~RQ&Kr#s$^pX+@qy<Txu~*vf2$4Eoy?PaJtd4Q*?cPgcEB5?w
zJ_?qe0KX{9L|$C6*Htk6WG?|0x#e=3&tsS#F>yIS<9;+&+3yT~&itgHy)-fck(QpA
zo4Z|ZY0l0j138%ibcNYyD;TF)`nh|uHB1o3Z@W;Je#)YsRrlMjToR;cR_9v<6yg!q
zE3KVBG#%yAcv?+|>D469xaF$)b{SZfvr9__%vZ-SX;ANdF7P-F4^|<a^)}DXhk95h
zSw&D(InR-eN-8;@C?+S(<VD53NLURQXIbOxALG9-bgGqC=B<vcwo~*(rT?@zw~TFc
znJEV>>A|i%gB8KoGo{;0Ll2Lz$5nXSeD%CF$BT{1^;Rxi1qH){774j&jhg8<RvcaO
zgPG)E{2{0|7386|q&2be@|h1pUMIvn_B&BT1Y%{*c2j*dQkd1}+vj73XpqQp5Hw8e
zFY%S5Q}j%}`I18r;aex3POd{tQ%JD(P_cTlwr)9HB2sv#-wJhi?^{!Wn_`o~##Xh+
z&CLMh_jRx70J`1s*XQhvjB*iSzn$Z+tk53zq|j^ya_I#4_#en3wnvws*OL^niP2B*
zWqNFvYtFB(I5=&9N`K{O>7G!a>3Dxe0VY2qFc8}L96`Jw%hz>J{Q!^xKtk_W?FJy(
zMZDX0cMad^cdVr;qwDLro%cD-$38c~Hqs>sdL(d9*m!yU1jrsxRH6O#2|!$aY))1s
zXpX&R!L9HwP&QwmueH+CYhymfQlFcA`C)0->K2^4fiEO76gs`J^+DMbx2?9ubokrE
z;y0GQ(+|TEYm%Y>WJ^bT0`xy1Z~&D9caZEv__|1t!MCHbIaec|O@5I!b9F)kt3^#+
zeWtH3<h#H5G5quANmj4j2`Xk;T`$cxmPQG)ub>W~U1z;E5<{0KY+%d0CAlK4EhsBH
z4Aj-GdsDkWihmHTycH!6N;heET-LJ_`7+R-7Ql(VGO+d$O+0w#E2|Nd-TA3^cEiwU
zrVw-|6MU{wYV*p8yy`zWL<7j(!E-*EzqG<ax+8zPT*Ui~H(U>DgdnT59?K%0NojK0
zJ@ev+7yInfe}A#N(B`XeYpiTbIsT!w-mawx=96>F=qBK0j~B|nyr3Zc$@2&|Cf^Qr
z{EpaQ2ERp%Sv0nox~4(j;f~t7KatYK?Id|)_e%>WC*=}RM0qEWf-!hINpnd_T6r%W
zLhcZg<~mU1XnF5F;`2lTg0Q5N6fy>e<kUoOWYlxi6G!J}t6wB96-Aw#RLnJYMvElr
zV=ylM_`KhRy=!`$mLnQYOjPx7I(9sMN)HJk(G=|Rg@wh&C+AS+7>hO0f*6MdkRdo`
zDaWdCu_KC6=MXfS*m!eLQ+up+B!XOFVvLrCib^-z&o-G^AQ**ccxg6C{p<_@lV)UU
zk{#{C?b9Q{qosniU&l+QEpf$&h5EzBWS~oV|Cxjd<Oh@Mz1Lu-?r5#kb5TU2`Y{wZ
zuCl!?Vsz6kR!UqH5^og?=ZcED0&zi$=gjH(_KW!pzlR8=7ds&QzrT81-`QDRI~6`@
z2wPoc>Ci4J)fHTj*qD$&L3%JYa&+ko+Ei2&O69cb&zj1$Yyctdl=t<cK4^wunXd+I
z4<X+@u7C(EDJiM7RnU1K@D|?6K51wDoe|hydU8sVv@y4ISB46>gJEJ~qSKStU0l@B
zBDy4>cxUjtP%;J_=tF>Q;(oq`RhV@o+pYnlvaXO)V;NTQ_Q{|9@$nJZ9abg1Z`ql`
zDU`beVgGcAYIt)jwnH@jhpCX~9trr^E9GLPU+XD<Ot4nJzBPE2t}$`?;c+{j`ZT9!
zsw#&f_*<ych?JRY0vf+SSi$Hw&TyX^x~59wehgmf#s`i-&l0P6YS|!E66S{*I^IH?
zl~#erU;oswM=0rFVpDC-&(E!<iemeW@b!MWLG<fEiQMs;LIG}ccsTO6iLI?1`g_ZJ
zrEgpjC_Zb2rVj=KW2Y(8poj~Lg!>B_Z_t5%!bfJYoir{oX9yH7#>dAEZtq$-fWs50
zpMYC9i$t%}_tU!VgfysRo`PKXN`m2^ivTSU22?_Yyl&v`l2nV8OePCTK^vVMB5;SH
zh};obw@{>Lgcwftr?va#%O_Cr$WD?%L5(bsBi(zSlL;-Y4lMDP`IoC-HM{~$>bExY
z5jad*6StDUCLaK3SUEW{>0IWju+_`;a&g{pju$g$edWXMLkKlCNZ<9jI7dc-*J|{7
ztjNx-sjcyHQ(t{<+kw0e)<hy^bvuEJbO5y%8EtJv#n3bRX!FzS>xEV$Woc;#TQ$+=
zx0aTBmwUgTpD66q8-?85gs8bp?`qy*g*Unn%5mh7an;16Y^qAKRU_MA>GeO$ng9!2
zV;resUwVXZ;CzjapF~Em1f2R$3w163A9G**7G>MDI|c?Ss0<<{3eqJY-5@Ak0@8@m
z-OZqg2na}bcS|=TC?E~e-QC@=m%i_}zx^j{et3>Yj+tTRp6kA@wa!}bZUMA9&eMp_
zSLbAZ|C`F^)@+G@Q7+cQXT>@qyqMvO%gYK;moY6Z3wpgym-~tYJw976oFe5_&~Dr!
zib26k`cDI$)o-~*x3xPz8<&x1^W=9uE_Xd)7`-BU`;M_>ELXZ}2?3owm6=ch;jv+G
zaPY=Z5efOPv#)L!kE9cEjOgdy49gg$QBhIJbEc)yUlqKA9T2XV_1bi(ke*emx3AR?
zpCwa~c06I_-o1&X85q(Ox~+gdi(*xS+eU;iAu&<R*}dv9WEnu^TQHijTD+Pehr`NR
zBJxM}Bb4?pOm*r!afy7WWw}{Lv;~!FYipqgNGZyMZ>AevyQv`ksXda#%L?pv;q`Z6
z#0#L=RIHcFReCYg(-3>Xw;oZ^uKo@r>+kOe%NaHnR$50Ruk-$mBnRYSf@05fub-%E
zoK4nUBr>GrYLqm|LQlF(@uk=8jOyjz1Ru$fxv^<co44a_I=Ee&^Ai6+PTshE+Xd#4
zu&NE@sx=*U$|n4{PW%C?f$huzX^XpY-1d0@QQPc-L2#nd)_0{p4Ffv$)#YVz-_?<_
zfTTzDiTX6bg`S^2$rd1S?tR@2WZ|+*H9gs!^4R<Z#^B@M;1VvLd#w$79k4cnD^_-P
zX^#%M?bo}?R)2Zp*l@Mnd3BUdL))aUw2Mv2(<qDea@gFP`{9eiZu30=(#pI2x3^rU
zbV!g_6CGN1P?r2ByiU6b)^1$;gYkK*kIZES;9QMi(eH1IEP}j<jcF?_DXGwl_rVu7
zv9+!%w$r~XU%p%jAUOj^y6xJqqUFSNmAyuFHIG*9?n7RuoN`uq5*WNA0noEZYDM|z
zjMHbhhcqh7^*h&HPp}S8P<$XX?TEFRo}rRot@Ajct~^`ri$2(J1ssFPcKLmvr8OpG
z_c6DMiMYk92`y0Os+A;LV<$(ItP-2#4{aS|8W9d?JVPx7rw3GMnAo2&i@de9wH?SG
zD;=~l>sQ-4I-;kPIkUg*pLxo};ZJhE?f&d&vE$my^RxZ4V=TbH*FXDZUoC2rj1Iu(
zeY?E7Me50JXu@W?OgH>}Wq+EB+~<(4Cc_+Nl~aVCoz|<*#6K8*#+<b_v%?_cTWmVg
z(8JOx_1s6r$k5R1^R-)U?!(1PgJl~DxA1b}d7WcUtU^LU;Oo&SN@K!!0m(poZo8bQ
z^QU;%Q_WL78#1_TB_UnNaezq!eR|4iPW0jPooLw~fwgM@+c7ZsBi-MWTZlS25yTEE
zXxDdih{`%N`D>__tqa@}I~E_Wu-+Nx)jSb+I<h+C%gdu#URim=92Y~j(JvahNKwkL
zjt=&vWH35^wKM5g?9CqdZolyXd0nMIr*=~vvt4!<WX(OJwMmmAd&{E5fxDORQFp%)
zvga{rGU~!~vupA^ADI;d7XGBNjQ+T;QMGS2R#^j$lQ+(FXk4Ya!|X24lx%1X4aTI_
zbSDbq9oqnhAt5Q5@~~&NxyYZGdvfJOlcRmoez}hYzLd5e(xa2w***v$c<D#bS8A%Z
zOq!N2+Ap~DLiW*e_H5pA8;<HXF3G|*&$M@c!J&^9-W<r`ge%)+YBw4ZdLMOOwkhtC
zd2sL?^AayFFIW7%_4DaR3WX*^%*(XNZKNLRvTxMk5<g>0`2u4}ZaiX-aGt(~lgRiu
zmw}X2$bl3kkg;u(r}mBZ<Xni{%|(y*&-T+155YIk*MKd2EJZB1p7$BldxrY@ltlR-
zMt?VLT_g7=cshD`HqG2+|7{r~>#^GjeKI2*tF+al*l_9Ri~1jiIfwY(y--%(XbRXM
zB_va)QzR<pMWWt&imPtk9lVe^>3ov}c`6#3A}U9<*|%!A?4FTuXj5%4gre+6y@S0z
z@!P$5L*@ECOEF8XlYU04|4)H1UUVy-ynGN24$i}ko-8YDEm<X{2i}5ts;1BlCb?Gm
zCtmnlMmTTqZ?03gUW}ih<BPuF3TI5&djyf@$#DUEVTFBi*TUL5ktM0Re+ATBF9X(R
zunqI>;qEDLXiD&t0PvA;_X-9<xtbgY#CdFPI%Fow`L}lRQhIK!CvcL=b9nMEijX%o
zHr{ZXc>zqfX>+9_(tYszTTc2{T1LmU3SWgsX?S=u*|%BQqhet-3E%iroR9UWSYBQ}
zDIw=Ki!7hZW?DGFrDwlod0sy|+h1FO)mVP(IaQ7@<9Yg*)VnvsKk)6Hopg+@W8T;-
zDvk+ey@NtzEm;TqUAWBgyksxOXwY~k^RnAKnegky4Yh0ExQ8CmkK&vZhOW`KBT4V!
zjcK1&9jJ_Z6VkALka<sfroQm~lC063MarCL>2;6qAV_`j@?~ptv-ej8rMtaXhr$0!
zf<j>;7RvB8x;9V@=-(BFeBGHJCM|7MJU@S)RX3p{p*8u)#DU4x|LKEUs>m(n-ki5D
zVw<mB3tf6Ge)v>MLBZGAl6|u$hf;<F&Tq{!fA6@w^Nc_o8s)sGAR)AFq}E5io+a4}
zH;>FKiMqZ@tXYImq2P@B=T9XLtTOaqYvJvfU5wS{um`=@JJ4yc=NHlI?-JH~lCQCA
z7LtU1;`yXdu6Qvdy6QJ+{^Dz&`j10#VLj~99F<QZs2EU6$m`7$JADRq>Y7$z(fzmg
z2)v!^X{GS|%`6O}J%zJRWdbQ;1P^C?C4})|W|IdC)uFMcm)AwzJGCG2J~UeF>}5h<
z%>d)|YB^nFAx2CF1g`yfGNe%-IQIOlIgb{v%Pf~U!^S;IkoxgEE`Q$~^;@}^y02`?
z$hnzM!*9L+Yf%m-T{4cGF@N%8>*o}ibH!~Np+f6{u!46KJ*42|4moO&=%!uy^GDu%
ztP~*W`lF8Aq%X(FSC(T0@|TrOpG|3FA_Ow^el{V_#U;Y%-XahP6v@q-&7=IUM5fDn
zU`h>@cHNj>P*tA<1W>(qj{a6%?J^~5;rl`_P9F(JBYhO9`g%Oc7*#0~2jU!&ifX&;
zKKgU(b}GKV43+dlk1H)yOV#f?wpy^xXWQD^Mqjc&yeMR{^hgL9UljGe$~w5gIHY~U
z6#g#!{FtDTxrB8o5J$s%mGZ(~4_`_Co}Y=5{Qc;Ui`V}1kPxS%TNYmqHx!9D+mP|u
z#lPu35qU1z+b5s8X+FszPV}3Q5EFy4eLhYabMxR^SXiP*{H4E74Y^!F;!YOM+)!=R
zrbz0Bj;uI*EK*}yF;bW`?5;(9SW{m95Cen!+Ge<%tSs_C9sIxugu9Lsm9oX`=ZGrR
z!dMj@aT{)C)Xw<<3ns=i!4a@N^t7~a<(LZ#x4XOfVd6LfAwVs=2+xq8-_Rs49KRn#
zZAB}dR^C*rM_MVT>Uwlvwm|3a-{|hkeQ}-t%HL;DVLX*MUDf>BmgE>pkVL4MWO;|e
z>gDZO6+OMQfB@xG@z1v>^98S;0yz8d-(OgId~{(wEKjg>=<(%_(fj#tH4$vLFZMA&
zbuzHI`CU9Ti^Ux+FxSEg5OggHTmSEq5UC#8x3Lm~M<f$3F`v78Rfm;J7MQ!m*StFO
zF&0QXI%a*!%UfeMM)CHoAT_m^xA&Gq9_FbSAkau8Qdf7*#+DY1x}ccozH_eN^&Zv}
zzJOs6I{osL!{=!^_Zb`+M-QH#3V#w-TkO8ct*0nYUx@8r-26rxSrHYoK;((>&J-C5
zIRNK}_sq0q6{VyUWb!dZA9?cMEU}%Q)_JFsG&&md=926aBo)kf&_kq(oyTE*n!)#Z
zdG6nN=)lDnYT+WJIYn(KYd5!v45iaYM_%|@JRW~Sy2HL<T_P(dY>>RDtEZ<kDB?~e
z`{jk`wE})B+wFtbkBK^EdA99cL|?v4%*WWiBqQcgD8bA~X8zu%_N2AR^e(si(#C<r
z%~hV;WSEH5D<TM6+pXRw|Ic%sUEJyw#vhYxhCHXLN{RTi82Zo=%{*gXSxBZ8ZiqDa
zaJi+80)w;X&maFUhaHH7-%rWO7gv-8H|~Z!3Z=n!JD!dHcDHjItBD0!a+xSTl7sI_
zKIXRb4cY0!n-(`{4Zf2xvPgutxpdIRU|`-dd)170l>_0U>f#df35*PybBl|wuF3v6
zl)=C}KR=^w#p8-w%8%2;h0leAYhp<=xphr;+6`y&E|rCW5UEVCuVP{&Gv?c7p%0WP
zNW^6#M8jhS1~xLXWV^M`OG`_C{`|prxt&n{N}`pDIunc^iusz{kAI}Q=N=t8z>7xw
zd(qLEI|=W_W|@C%P3U62tEq@qdd<AULv|tZfJMDTPFqy8#MNb-2|?uqgaQykii&-3
zCWeNF>LMCMHeV<F5I`xtvfvSZTeo$yA(P6V-90EM9`Q1a)JN!^2sh?MG5Yn@`_H;W
z6NTLW-2#Y&wm>}$iuI66?I%8e9FjCE%Wfv#`L}Knht9Y{?!qxSl%u-3U%Q#_(g>*k
z=Q#+0SNE=Q6t)~xIMl)j_xT}y(V_o51#y@^eZwLnJ6m5*55D-K)B4O)l>McBi2nck
z^8@v&kd#fgrFWrIlh64W*#4Whx1T6%wkg-$`p+W}=fYW&GIGsfK)wgc<!W%}e#R!W
zoc*2nS0tleo*_ouk(l&9SilTLJU>cWLPFxzEA4MAUkl}|ii?ZMNNZXC^IBB!c^`xV
z%5_n6M#9VMDz3nhEHg0<RZdEAa8Zw0Ht)dNDmC%_`#h++QwW6kUY*<pxtME=0Dc@J
zfA~ZsCF#H=zH)`Xsj10+rC&o@dVQExP07ZB1oJ<CL7*0SPEUhFDcSb>cMPYoo|pgH
zaItBF2>WkeyiT<ev+e?g6O|%;`D-nW+Zg~y*vD+tIxSi5w^dv>!)6>&&xJmbRvf%(
z(*7NH2-%W$i!*!l+hf{&ZmbLc+d5&7LNp8U!y<T%iG@{KQZv1>5*--$gvWRM`0!A@
z#>taemMshq$m<e5+j-ch$V9P>`$uhNGp4e#Xu=tWGqR1p>o6H?x<BHrDiGR@H@NnZ
z;J;V;i1KKqw{nq@7`E#Eo}PC{tor*g;3=`3X&OhP;-|?D*2kjRT#ewHgn^gkx5p}N
z`BCfjYWep1((!A91vu;lZ-0t1YE`fQNzFd9y&hF!Fr|Zw8+vwv<+8hHU9$nAjz(Q>
zhsiF;Jci4=wcA|O6cG1@p&%p#SyQSzAe~*~yl=S#=%L()*S~l48UGHjtj>e~k_@7{
zT6<2GaYu~$Ze#dbM=$J5B^L!t<j2)u2>Jn+qE+p%bmpve-Aj#LtyJf~ALyI?#~z2o
z8!zv@;F_JoUEDpN_Zy+pN=Zps?q>yjFFqoIDq?YALEor9gb?XLiiK2qB`!W(Xv<Q=
z>#}$QuliePD79AY>Bpm6CixoHHr2ew{j0*)v73JVG8w6r5)(W6aW1SbM?gS8uUbsR
zYqSe<1z|$#GY}OW?L7Em;!#=2rJMW$zEkNq4qSYEPW^QlB@^vvy`c8y_PreAW*v#)
z@1UXS&r~?*5_CI?%rPY#pC_lJ1U1y?#Dw|9`4#vc-=4P0?{DzG+KR%Z4U_u-cqj`q
z^Z)&XFNd(0kIhZUcF@>wnonkw`twI7XIFPYM75%j9?ix|%>S0C6%P_KA!8m~k(T&+
z?J;vRJ8$cMZNUzN#}H$0SIP43I451k%i3B-C7#QAzWCFp7a%5tJLmHqk`@O+oF!d}
z@THX%1(y%wS(%x8t9`r>QT?Z-r3FN56X%_!CIfRD8|F;!zk4;UKvPG^P6SyggKarO
z5J6L3VXwZvI#d*Gm-zMT?qI=8-|N1l<YfK!Y146_-3@oB_6w}$jMnG>hEB=%>Yblf
zgp`({&jDcHnxUjqE&lf3WiOyPdx{KgqucoOkw|BnI5HAHC`ewt5>R;L@aF!0o<e#@
z`PRFQaoeMkj88C8j;pl<AdapH0P}RYmF4CC{7M;zj4&z}0dwet#zsev_t$8D--R&Y
ziSKQI+9J&+Dcp|gqhA%=USEUUqVh$6fUQ9tDg#h^p$2g%2@?5S=U0ZRC@Tnb6SK3^
zv$9$)W~=$*%y}wCWB_kwH5<KZYMKinD^u;s?Qe?oaLb0$(yCh}&yVyem8}|lDqlbT
z?{?|V)3T!Q`jeT~Jr<Lf1_l{<c?{uk&n!<t)<9j!WH<Uy(8gnNX-SSP%s4PG5UG%1
zs;=gc1iX`H!#6J5<(5roWNzxosY0&GGyiK1NVh7V-d?027rAG6Sa^6RTY6;V(9i1u
zq5%Y<F)?rjLV=n*=W;s>kBi%1X-CtxS2})NQYT&3f(G2i&hCF#(;vF{7Yyr%7jr~>
ze6?pM*s}7keF6exBwrD68h!fk;T(eSF!13!-rd{Fl{qP_2FarsY@af5T+|Nhs|kW0
z?B>JFCWo@-8)bZaB%t1*`z>k6$jBI|Up@<V8CgX|Rtk#GfBXp8k{mvv(HHs5o*o>L
zCIS~9kY5*jGs*C9BDw9y^YL|_Qd0VwjCUpe1d?HAJ(k_HB0qnl($=_qiHnO10GD_F
zbBn(`!h#y~V(H9}a3Gvcg&B4JvBcPMVGZgg64wioG41;%TS??d&=Hh(Z0qzbhXRGc
zZ+SWkYm=vjhx!_mUfZDa!8)MI?(=bI3%8%gemnE+_EuKQL&;u|Dn%7L^Rt;QVq%$N
zO3wT1BgX2j4zs`I2J%NzQ`62)3eIt+4k3ToQ;6WX0l;6+opu*t0_a8QCVZ8qgWtW`
zHX84E?XPjuY1LXy)gK`z%Ppo(hf7u_s<+Cmn}$GX6xtUDVDH)lI=qfVP+D4AQ4#J{
zMHLlAF)<Y-C4X4{v&sN^f>T3XUDCuv5*Pw;@%yv{8E6C|;V!P)Spz2Hk1Z4&QJk*B
zPN3<4uC=fX&rfG}Wdt=^z6D>|t>gQ<#`5cp41WIpkC?0ugBm2@4t)-^>M$=zuTS-x
z?ADp@h-YVK2M};NjgKC^eVe$#o>Np%5t40n;in-RG6jI1a{gdiYAVF**>6pIPREhI
zGj%PLie@V<wF{}Wnk$_22_iZju9kZT1n;+qh;rirX-vniT^ve(g`D@>vzc($fU2j)
zX6f=8{x#H9*Rz(n=f#Vg(&FM@j*sZ+c3Cd=$)U=334)FxSXo|HHs_68fF|Ib!a}v*
z>pveuJ%Fja)vFa#&5uuxhs4DN1(3dxQK{3OIG5MLwSkbJprni@(3+2qkpMQw4B3qn
z(TS<44R^SsLQ6~cfzeaRJLPw<+)4u5nB>K|YiLNwB9LUK=6L<Ry(yizxVR15Njf59
zK(LHHB&nx)opBe0Jxo~FQr!dPOiAMH>CjMwOG*;J7VUP2Hfw_(dJIpW(7E?>JT;oQ
zN{GvQcnAd2Lnt5p30KVBV@q`LHHXvg8#pXs0|rsR3#Mq;)By6^IzMy9q4?U$HLcft
z|0>5rfx62?kgz8eRebyQX~bQUR#@FWp!^e0ZDECqCL$=P4fEQ+7mpUoLBBvM!i$r5
z3|HC5HwULjMD!+?K_(w)Uu)gQ7-Zg|9$?dE^CCY+^10Gnp%QTSIIeALQ$?c=d|)vl
z!-s7Ns;a6Uq>$YH_loF`16nG$Z{39x+|G{i@gp@g<8CL={kC^cmLn@NpAhOkz(61x
z#KgoDC90-Z24qy+63;Iq+^3Z{k7;SCm3HfY{zSXp(nsii3JZhLEetQMj`&^AXaMct
zC)=rh43|hSC5?iXh6duXni@rms)f(s1<8}#_moSY;v<j|F)=Qjcci|yKvzjlO7~n=
zL4lT}(^}-;qo^kK!Z~hOAdr_8758*1CSVafc7{T?x`ir07Ig_B(A=VRMveugwWolh
z2rD)92l$8~-%@^EEpfTZ@$V7d|N96r6;^7dxPOoMmExd_iyQXx-(B>6F8}=g^-Eap
zLJ27;F%e%LJ%cifsrO1+M#KT)`Z6Q@OYSHe{VPxpA*)?jXyti=fKJYxM@&NEZ=vn@
z>F?qcS2|y2w7feBO(badE~La?Av+ArKa!FkdNRX<g}nYf2nRX}@jn;QmY!puage{&
zFi`aO4Ja-n1fB@~{lKYr;iHgeJ|r+Tz=K~V{<~JGcdy}NP%#PN?Vo?hzJhS)$Nl$~
zVl6PP3wTq{*JkqM=Gm=rkshH=4`ChfIehob%UjRW;8qcnm6OYSooVH8IPh2V<Cdx0
z8jg0`I|dpbrW1pO5%47$Ny*bS`QhQ=o%v3F;EucwHdMrLT&@N#sj8~ZwJINOlSBGw
z*d+uKuUAV~BaY_RDRku-O6}i9jzAu;&aXWQ1se2?4-o=#^|<i%lV2PsTcPE{tL(=f
z@!WNTJt8)(Gltdr{38Y|a!xvKi^&9h7X3ofF1TBVgQmztXWi}r_X}Q2$ta%4KP-A}
zDGe*VnZkxwJj7wZvXPMyjhP?|OOaSG#liBBZ|L)>fX6zp3-5Y^i=z&1m0QdC(_14>
zS&u)_{vwqh`1MJN$@TcQI5yF9gO(6#+m&A3R1?Z8KjN<|TOdvqx4UjWARyp!-lwY@
zVf^r6w+!}w%<b*w=4MVh4$J9Z6jIUaV?|z}m+#%XcV~IP*T?66q-L_{USIZr$x!vt
zQIY--!{X#*SBhn_z<D}@$~50)fJ<icv(av9GNDgs!x;G;CK1Z1VOg=a5vWJ%b(ds?
z#PwE-d2Fi4Vbrj#<-KaqHW^IAUO*HZL){H-mks-k0}_rOx}}A~XZ<I{Qq`^_fdmZC
zJ?BA9A*P}ddEX0*WWEp>I?r*l!E*0EU^7Ux0bkGhn0<}y3Y%1SSJz;{yYwc)PWui1
z)nVP#w6w6b&&@5r*T;(n_$P64eIG1PSfzqSIl#Hf^u*2y>X(;<lP*o3;y4V6zyh&_
z=Wm9o7S8&m>z5iEPSn=?^oxe_E`4{7R(Yd*G}Y{R)yjS?$r&7hjNoh!iXU+Yw~}m}
zyG(p%EWcK==pC~M^yiaPKY>E(sSL}1Bd7q*1_PPnL$_+@jdRdGS7c|J<_|eK*5JA<
zcg)Yfo;*Fe^@2|b)KJ94v5PZmYvW|J2l4u!57q_(Fpo|-zxlATZ;)2Mtv|s>BnZf&
z=4#H9xI7;$@oWF6v|TZ@J<u4-sJ+|Pe!LP}5?5*D?6-Ua0|P_cet9%fT&=<ix9l)g
zf=$!BrXqBIsb`@@Q7!8;6@RX@!x~I{=X73IHyBh7Y<;6zW+vsUP(n_B7VrOeI0cJ-
zr`v8a=E6?1LO(<;K4<b869Qqp<9R(s3#xs+GA=GIfhw!jY`jv+w)nTS9s=Qc2R4qN
zz<~M0tgPiWl_Fv@jz7l7UsZO)=H%)&qUN!WW#jI{ne2AB`2or|I2|LRBK;n6295vu
zHByF(71FA3IRZgqaU($UAw5)0Qh!gfGIcUZ5fRTn7psH!NJtK5n{mKXW%TM!>30h&
zD;p~tA~u)9EgZ_CvCmsL6c6$7#~_0=tYE8PrU@i>j8uM@Q`;GtS>0;XV$^0=GM1>-
zFWZvVpbpk2)~bWnR6&|$C`hhL-iQ|aG;9Gv@f#P%tSl_ni(QGm)5zvdQv_>Ba#9jB
zGq31-trr+GHZS}Pwm|D<I$S;X^90+C<P30K$@czzVy@9jM;2<PK%e37mSnot*0!l%
zzCM261L`fBuAw2ZLo!*M7(V8MEk8d$5Q|U_B2+hj2PXIK@>uPDiOHd3RRjhz&X%7A
z;r>zZEHvQQHyh;sk*a7xj{p*W`G{ztYs<^al5P3+{Z1{dJ;BRgAX-$m5-69~s`@(}
zA<ze#jO1xJI5^nYJkLkQT^Rol7LbwLl%<sGbW|t>1w5=($q)DIhN<H;bE6W2gB8H{
zto@Vfsb$Ntjh<*Dj9mjT=4uahkkE%9C3-c;c-$TxDuP-k{l>im>?dYr8Ch9!4Fj19
z`dL?DZVH>}FddbY>`UL(_ty}zgBHG+0z=P?b|b`s(=Z7<fj=Z>em^)Rd?FKHswd)c
ztO?W!xdR9W?;7#k)PGap!WrAhs8&nI%j?mx9L}gFiUTvQhjP`}m*Z6`g6uOdml#@U
zwpLi{v*&1a9^z5R2Ag%)d&1>QEd#52PnwK*SHcG`FR$OEAd(oXv`gHNEDE0S4o?3Z
z@Nf(E_AoqHrp1m(-N8b~o&H=k1I!X9U0u|kL2AlV1qr$L_k0-X)Qpa%8*VLkJMEuh
zlpGb(4^4gcAm`sN&|T@ji9=y$FfsmDU9ILr_8Gehb-|ZPEt>=~E~D8mKpx0SY?USh
zlci8<KBD*TU6IMrwq}j9MzzC-%I=KV<(V1bXqsy5mtP->@tOxyNLyG~B<PXv?a9fF
z=8yvlocN^1c@K669-GZcLYe#_YdwDaX@)|;hJEmt87~cg6};l8tVqP?^8Uw<56Gfg
z`wh)f^tiCs?R%N&RO7tw=G#DJz~``;@YlvvC)n6nLR~08n?&O=&wM`j2r3m`XB+H0
zcT%0!mU{Fh!rlOjY;BBvV{@aYs?5ShSVH1tGcY;m{{08SbT4T5FzqBGc{r)515c29
z%aEm0T>*_H7I(_Kbbq88r_148Wo)ytQd3YWlRCbzWBz+6yI)Btj(+ag(v?W|oRyV2
zHX_1e_xD?_B4Tbc9#-QA428uHnO(~Iu$EbMJf)xzf*pL5&3I!7l&Wmz!^M_38}+>)
zVV_%Srnn6J@YMY~1Z)ZDca8puc7)^v?1qvkzpqBRrjIMjN2iAM)!9SDG;ox(`_nru
z#&o_;R19RkyB>HuGcyx8mH<r@zw4iET$=Z4SbJlZ-XmpZa_-4_-Z$|k6B;TOuNe+z
zymfNoGUb`Uj$Uv$Vau(2n=Hy;zs}=0Jznd2-AFJhDoVa{JZ`K?q$T|_MyvdEp0C7M
zWi`_X)v_SS=)t1JAFiOOS*t|<uI}T<v)c$+6Iqlu-S)3D<*p-WsF9OYTDA4&sG1A(
zD*TI!$+%xqL^0Iuh?+`xMCJo7ro|>(<4~jz5X$?|6H!$PDo|-}L0A#oLpPG{A8d>P
zNAnFbX1cX}5^v-^xR+oAV#I^9;{y^_qvE%F%k5FDGi!?EsYG#=^@>fe&n(SBHd%Cy
z1CD(HD3(%{;bx@^&&yEG=R4T%AWpY6Rt67Q@E<(JxOk>_`w4Xq0J0lC?_`kaWMApe
z+uEXT%jWg?_;I+@FxL9fy58hy@_gX$kX;nx7e)DLR#7ri(wpQlNA}`go}PO2Pg%)B
zC1fw|m-Nlf&RG{F#i*<er>5pMq>>dHFJZD{dNNMq25xVZTHbWzJj(Iyp_H1L8K)qp
z+@heNVIJpSX@LFSW_7T@Hku82QV!9(ua0^*Q<JEQw~XmCsnvznCvYvD17bMbc*G3o
zYHYSf-~unoqIA_zsj2DSPu)&d&MtI&{($g&1gr?vD%Qgh#selzG7;JUrpf1P!mLDS
ztYBgQwHtKh7rLM=p-MkRm!xQ?l3r7L18NC&K0Zx{q`bVm)-h+`z5&CtwMWr0Qa1U;
z2L3dg%6ccr8xa*$50{hp@8!I=XHTzEnA3{>$<#%io09T6U3wlWqbj@g8`u}(?Z0eS
zl;U}fYYevjz)dJm_Gf;(kC1(}%yf*-;3+PvQ8dGwa!`pz6A&ze+Pc<uN3Wlo8wz%4
zW|pHOWUmv%77RSNc)=AgkiWFC)YGqgsJ{mteetXQ%QyG5EWOjDq*7B;Yieq!+e@P1
zVEUn<|JKB$%}TH<*M4XIj?zP@_|6x*g~f{v>YQz8%S=f%(M}>~wg8r<>{FrcX?6_c
zI}*Fv4Xnb@#bGFk!g5vRJeWB+UcHCguO?&0Uo}$ZDA~{=*#w%@MR#`urVGHx?#>ZO
za=EJKr<QwgA#j%SiI($o;NsJ}9C;TNDS#aeCQfbx4iPGo=q2h$sE{hqW2llxm8AuZ
zsNoECo}evhgA>*16SFmtc|B)lj^anvf!N?vJhyOLl}#cxv+nkL!f1)F2NC;W=rQ_n
z^O}d~<K$!Cn|-p-UETEfdO3s(2K<HR585sbhi;jFdB|?}+H2o5PYW$-4klII4GZJ>
zoFVlA99G>l$v6RgDnj;ymcA7z(6t+MPWDmnb#>WIN6W!Twmdsj?0AcPZ062}y6e_7
zIn?y2q9cUZ*hWu>)N2cW{jqA9rIu_%oc7Azx`{PjY`F6!kPQCBTVv<7KH~r%Tw1+$
zL#Vk+oI8Q|KUkZP$))Ay9*=X}n&zCDaI1FOi-Oy=dE4tt=Ud52*wg-$+OCYdE_S`m
z*_4cBGp+mR>HB~_j#nRxby`DXL%-enyx!4hk%Ys+U^YXJkj-p)yygUsR*#Rh&)g&i
zU~%dE{sy%L2;Z1i3Xzu*1FBIMmyQps4p!j<6=**w$pvYg<!09t>m7zLiEuu*)mpco
z*Wlp&3RR&xN>^g^Uv=P#Qjm-XDNf~R>eVyTvC0yd-c?k@5<UgR6SOkvIWj$@>C!5o
zS(}>m#^KE20*odXlENGuEYuiyR*VOgk4N%ct01^o?&`0$RpkL8tg5-%Y~$Cjdt)lB
z!8raRUo4nXze;{8whgcd!oPP*$FOa5#&tRth3O9Bg(nZLEcV87m4q=Cr4$ErUSAH5
z<goPld8f(k?7Gzv^_6z33SnZ7>bxS`72lcSQmu<~Vs2Y5r`;QSWW1>TRZ#P}f`j;v
z=RgK8xVn57I+y5BZG%j^c8y<`LefE%1v{N)m0fQ6<xJm9)P<WH6i8J)$Gi9<<f%;W
zL}9<uZLa|RP!y|?$#8WfS7sQanw{6gcWYbQu>y|)ZDLlZ;`{(cc5x9b@GzGGKm$Bu
z&B?x;^*7ugKSH*zk61oW)7910y%P;+u{(+9b>*_GKin-Y)~Lz><s!fXwk^~V#@0(o
zfS*80ifz@3N;pggP%qGdGxNUd>GJ2#&`RBF8#dJ~v0ZtvjKzzZs$U(l2G2eE(j_be
zm1YLoDi2*qzCOTh%qybn<c!umEy!5h@VIV9O-()OAgL~Qa<G={?paX4L=S!3Y&@z|
z;U;H3FFn2Kc8WLraNDa`%0y0$)~r~~ZO_$t(8p|)7n=@r01s0~XIVx5{OPBxA^;jO
zUA}^!YcDHwC{OM^<rM@n@4jOYC(!HfUyn2`Xv94*94Yk;Ur<nb)e&3uW+3HJc-nq@
z2l0sc=y$xfHGb{8tnSYbWek$%dmH^$014vIUw2uSo?>=zs3u^w;-EF8$;!I9we_)^
z6l&?9qN+>|TBAz}v(sgGGz#&!_G&)Q#A=Jx1K6LClZ()I4@Nvx(uUnEg3DADZ>Iya
zlE3YM>^6Z+p^q9Nlu+UJ%7v}b870aabKmhWL!7!wE=N{W&YQML_X0R$dqyq|70^+3
zdT~h!aK9axU#FKaF)@d*>Z5*|HA|6G6$W3LWDE~DmLU4uZ7x$$Z8k>pIPcpyIB>9@
zu$hiKHP0J)eD*7^01$6?d1&qQs3;^)Gr4gKr=O7BG|eRBXmyC?xtxlaXXxdE3trn!
z-IZ@Zp3bG&Mwre}L&GOSxnJz*d4KF~VD#d(aQX>TZcFf7kZ_W8-$78_%Rpl?e|`0z
zw}?qzDF}%+4ZJ!OUSmPg;?LO7TdoNAm?u9j$%@xF9VOZ4n?Wg?W|OPh*x#>jud>Ga
z?3s3TAc0Ot4By`BP%vsooQT&cL%B0AU#mu2Rw!eH{_$f0heIcXI~wO7@<Hw3gDJ2S
z8WCYoV!ROA%61En9$MCSURc$50|%@&i}}6|zy}qWZ{&qDYB5vEf$lE>51{v6Ed)YV
z2$TPZT%u3|>^PV*Vz0g&?C#FSxndw3afyg{ocnLH6zR1p=VYl@_#_xUe0b>Cz8pH*
zBMg9?IN`tNw_$Sruw3j4gfSO-vFC8qZOy<99yM|)^^(9ZfJvS9R@od|dY5_}WwIuU
z^alcedVy9zVCf%%=_B>_8VAH0P*qy4kK(JTsRb^<vVgi^`NxN|dou{C8_^PY71yS9
zqa|(wy!%z)FDTTI@aziF=g)mhj3Vp+Zu+)4o$Tl4u0cJJ2aY9f6q7$Jb&!N$${g*}
zp90<s#9VlAaFty<+kuE;PDXZ8((1}ecA}ga6e7SMo$s#^UU3&n%}KhCN7yPZv`4@S
z!?6LRLh$w8s(4Wo1ot8*Pe%4*SlTSie}FE*M+gK`XQgKVj~hVD9e2y|E(!$(l4BYg
z8riSOLY_W!8#%e1T%2R~-0nQ$`IIIT&GxQ8htrY9XnoWXEb=KYAa-S;T}|7_s1fm)
z8-R3s)V7dn6y8nXtDX0TC8VTcqx*85v1RfP`iy%g$JtDcmS<<{Q(;7p)5KnPd$hE@
zx;n`8!=rIk*2YhUXVzMk;{qP>bK4xg@goqWL;r2{wx;KR>+qJ;Lci_#_T(pA_0w*M
z<`TulRD3g<ZLM!@xp(=cib{pVfLYFWxm2-G0$O+22u&~a2h5B5vUDZ;m~wqJ2UdyF
zIwKk|wa2SHgVQBjC&FeEps#E4kFT`9xWr16VJH`eVvzlz@p_XN;GL8tCm(U3K;X^w
z6dU#!_M}-Tls|kam^T9|GmXOcfs^!j8jqf5ph1?}3Xqt_a(^x{?%s))?G+?Iw+6>*
zc`+2NWc2jJ$ArWR9K?*s)(qX(E8y7$Qqjt~N=6Onx<o*}7#Qpg@(dM<zJ2?aCe?Pz
z=ay0?6&1zjcpP${nA>i7Fw+`c%L{g26+rZ7D06BiYUZ|QO?J}mKp`9+9=<VLGSdC7
ziQCQ~IxMVldmUD4dmBNr#|=cnVQA2?@uWK+OhBtwu*$$QFvg=Vw5fLW4OId535FY|
ze5$QIpQpe0_2OkLpK1HH?oc5)K0bbqY+tT%;k)#{&v#bVC#od;_AO^90W&B@p~r6{
z5^f;-aEWB%%E4ayvtvDK^Vem~rof1ZLy=dKlDGd_<`19_z~8X?3Y4+abMx`jA0LD@
zH8=7=a|k`U_7GT1xVb0xHaAtP9lReu{*xdmj2G^#r&mqOK_MA&I9Zo`ytkrNZ7?%8
zR|8=T0RAu#_B{YbE0NiJv|P%7tRVb<uz<1N;xI5pS{6}A$JiX?Wd{UI?5$uSWAqT7
zbw7W4oOi^q>VI$eHp(axsoxeM<~@+FRZy=zp4tjI5*q8H_r4OH?s{`$Fqao+s(?qR
zGa~A&64BDzyX#%WO}=~QHq42D#>UXxe1l=0*u&$aRgH95NQli^l&QG55i~Hc$^jO_
zB4mRURm$BnD27#aD%y@Z&Lr5BD{ct`PiA%g(N9|?ira4Vs_ODQy}lVF_$Xo%^X+eT
z_uL_5mykH~SrC_yVALp`_V=aLT^ZU@zOpiCx$;E#b9V?>jX~k?J6v8K<$bsJ7OQc8
zp?$ds??uQu*e}OjuY>2*w%ihSo0IV~FX%Om#?sb+ld4FyvE4Jt=al_OVK!Q<d-hqX
zQ)`n?;|LSietlS&wROlk92RS<Zhtqm3=Rpeo83_hE9{P>gk34#)Sf3AV~^yffcze%
zkh7)ut!+INMnfkq8-kiiYd6Dw6whUw=5mBd7x2-;18xtKmI-$iz;`2=*C0~kWk773
z9pV1!7-P9js!)TEzqEbE61Qt(+tkmO^WVwS()1{$Rr%dcO`1B!pg~nRkWqrb4oHNh
z^86MQ9Gn?8fi~|1pzE)%qa9#EoehiVtP{Y%Efls3yqdle%Unb;Gc&i)(5RK2&+Pw*
zZ2@x{*%f!Rj2s3BybQ<NdXAS(BcwgI-12>HfC6`2UsXv7-tRUD@Ah_fs%(~Ypx6S-
zeB0a-G$8;uqFru6Vjjt{Yr2-aS!GTR9ew?swZxp9oP6_V=HnmX#vUCVg%L^b3@bv?
zdd$zfancvVcR`T;+!%z(#a|$fxqW%4Xdp|`czpuR?!4c2cz6f_G77d02+Y;l=64@H
z#4lN>*1F)9<hc=YC*Kb7V^*knbaxUpe2k>M4aTo>`;ENpm9zfb5h`kGrt?>aX;O~&
z?ik&ZXQ{6{=kk0=r9(wYsa0lHlMV{74S?l>qmW4B3<xus(J~at#h=olMo;pEn{<c!
z*A5_`q*fy}d)d3n9`gL?*=aw;@V&iD>xa)9<Mbh8ZxnodMwklOt%DI|q?l^Ei`}j5
zdynWFG`u7g>{Qkq&z5yJG{?rBYSsobS(ML59dGsa^?KbQF1A^k7V)L8SbMFYu+}@|
z0xtOeeo7GI%}P*bq9YbdYS7CVS`*mo>jC;5QBq9)uq4(>3o&oqN~NKA@+9%4y>%!1
zqry{`_h$Ii)Xi3NhxC&8k<zhkz;22;LP3&gyw)B)z*}iw;nb(s)WO?Jk>agXbpXn)
ziJIu6xG^Q0`OXGe4kXo)eiH-@b=)TEIyeb1zgYc#fBdO`WmHs1F_JutP9-fPg9prV
zHO}_fgnXncl*z||a~V1fKK!*P{pyz21<-&fDRD2f$HuO)@wn~2>iQsP`i@bCaalYi
zm8$rOnM6j+9w8eEuTzSCXI{4)zjB@`Ss|)$EM?esx!Pq*$f0Ffu@&Z%QVE*g6#lvV
zx=5=+M_A+Db8-^rh+`g*9+bI6>Vky@>@_JVx|Q}TlGzWr?TF}qBPJOYBFZvAqw>t{
z7yE(<a^@k&ceG!7pF(<$^Zshw32ied%$*=}s7~#cuV7?kB&p;2sO5N(KKsm>jyRmo
zno?5qTwG3oR{@g;>}%)m-`@)=X6N^*Mz)t;_O}=fWGge`Gd5}k-@*nB)ko?0#sHF5
z3}aF<GFVza=F*o84GpX8H<A>}fl-t<h^)$haVKu)r<{7bUyg1)*k2uL>gxJdss5K}
z(rpzrV)dELQOX_uh#{d`V%A<`Yw>-g)|A$M57IR+ZtmIeI&MeQ4w&;yzy!YL@$q%w
zAg+bd$i3=rYg=vbO@|X^0_~cu*!o69WKKd`8-_s51e{A;@@!T}gP3)gcW(xB$I8sd
zkPME!i%gKXU_Ox-`kO$l*aRP!SOoO>Lnl)|uY)8YdH$A&@cw#1QW~Xhg5BWe+Xqiv
zDE&!RhI5;ODc6B#fc*BAlY@;YR`YxJ@2_rbFdFPWB-j?E;B)w9?>TU^qkp`+)~Zn>
zlGr?6;{*cfZkpA+p;F_CEofH14lwYqZ!9zc|A-bBK5KBeGCpE`(<q|E=qNt1KL_Mc
zR(o6`mlhA=r-`4F#|2~?{7Q7=9?7nzFt8nuIAErfAxhtcQuWGptUR@Wr=-k6!pTIj
z4hmJheS4a4aD(g;BUBE)+Dv(CJG-Rku8ma(qZyy2kVRaWCD=rR?5D;LYgY5M@-wn&
zdBTkfqS<5NMl844`nYN16Kb<G>^I*Ji|O~bDTQ>&*)(v?tiT8QI`J;hmN4UTEUPmE
zJE=oB!x%OR*X9U4G(WMvzB|cY*bZ|h6UUQNIKzbXCzNW)2Z;hf<<LXMrJ>S#`Y9=;
zqLR|n(-Sfx(s@VIq^g!!^dML5Yn3f83z>qFlB&4)@mwn&kU#o}%>(MT^0cx8HLkjZ
zor?+0sHv5es`t(HAXoVlz}H#=wPe0fVf)O|k#X@8E}Uc%CsR{XYU)hLmg05TbgxSN
zM)NF++zc1;BF?G~B{1K}*8lqT>4A-{?OYnrX%xR#C$&M4tUTZazR}c<_sfpj2+vQj
z=;*_56AVuD?A)nIrAVmxnF|KbTj1LBDuPULV>|Zp{wKQ0ZN)b*h~K<@$m8&=fndHZ
z7Hv?V>v8Q)_#1|I)f?J>qS+q-lL?r|{#X9##-aroICHkIPg>xOANmpY%iVal;BP7s
zo@dbYJ<y^V01vRqEB3R3Of60b8?HyK<4$8x!>w}fUECRh*j^`vf7-nHwCh(774tg?
ze-752S32U2<Cbbv+Eh(hXq5k;QOtI^XC!~!^{75n*e_+o-+nZ{I$;2oH-_?fV^|jp
zG%Dv$$u&`dZ-uY3vKUL|cf<~Rw<W!4oOy}8m~%K-Kt?y9^A5GAt(dL%rYP;6vPYM1
zR3R?yG68|o#V)l#*9yh93E$7<zAL9!%59vSoF*4K`?3l3svdv_gOjr&|1DZH^W;8~
zD(Hh!fzzIkv%N+kg9I*>2vf>aD7pzc*BqzXJM0LlNH<T9diK}2WD!DIS{vQT*U@7^
zMxQ_b^a_~eJ0ZqXHZ)uUz00k9Dz#$kazcy3Bs1we`)^q%<%16$F+6$J-eP*Lj@i4j
z&77bW00xlIi0-goC+4*ailV)ZIOp?p#CQqXtlxn@O-=GNYh7$7f1Gn-lMNS==PR}L
z?5I#X0G|9cW~VEkE&T534e=dI<!}oyfLIqC=2Od~*GDe)_{e512ENLsTegO^HwMHD
zyd^lUfZ!CcN>hGj`y@0wv*Y$_^U3_Y#(bMbLViBK!FQ2>xSDbmJVuSM@P#oNTqLsC
zc)>1DE$yzHK32)M!vpVU%hUwiX4PR~4{BVGf7J+jz{mi$@iKetcBlPal?}eX$`R@K
zb6XAgoAhXxM89L935ww?EMjhOVE+(aEH%pGrdlCjH&sV%O*>kS2#-0vPKb(f0*1<0
zR85VNE@XiCg_ba;Yk#gp_a8Q;s`GoAPwD8s-cqnCwk^iL2*dY@uvs7F!<xE{a3@vx
zxQ90rFif%TbK9q=*lcWm%Hw*nXuwdJecA8P;$j<JU0sIUoSYzAORj}<rzV|E#FRG$
z#hy*E?N#$k52?fZGk}LMVE*Xtr<U1M2FujmkLK1^YkNx?>MbR4R$|+%n*%l~>_3{D
znO0u-+-Z+t^79T~V|(VNr2#scKGt4{9U$lVURF+@=(AV6muWfz4Y%3**S>R$XD0`s
zZgc}+@E~lz6KK}{JdNPBNFmJwivzP*cJm=V(4NL}mszXTx<t;+OA#&(j-V!Go3Ko0
zrl%hwPNgu9I-YB3O+XT7MrNk`S2C{^4lo>n0AP?_jZIG09hZsg2#lXl&odo_Wd%dQ
zzu;y$ECd|SvBvy(snOoW$};G7;5&pMgszfoP7%$;rtmDuYqEnGtipRR;6yDW+yjf#
z48(J!HL0Sa0qgUg<6O_5KTjEl#$A+z-|mxUuYrYi6<Cbz8%g-fMQ)ADt^q~08$L{H
zYc!D75f*;IrVe=zrB;0eW^Mie8$?C1Ij`)6;XY*5g?1d$@FJsFcl!uAjfxZUo9oU2
zkSm&Sbhe&)_#vQ{57}!lQp%f3_}t_*+D*98S5B|%<wI7Z+cOi360triO*A0r5RyCH
z8!)FYD7LY(gE*^h_e&l|eaw2NlxT2-T9m0?y?WS}sZa)~UHHyrX1s+A>oYUS;7ZEA
zPOVgEJ|XCHesX-Ak(q5Rtg4igv9f5R?BL>;F7xQGL|IumU~9c(R>YCd^%x1m70=W-
z*tP8zI_8-RtG6aIK0EDgHymzN6H4~>^_}c5wPK2ujtHPMHYTzano<;+I@pO;J$HOZ
z?$e}OFLaCwYi5pB>9*Ph;>tOEN%NKDahjDypI-s8CgF#Eg-u0H%xF^p-;kM6-2O9L
z+H2RZGpaueXff|eBc9=(5951`!Fo8LE<vS>mwMTqUu_DzMwnj`LJH*+74NZsr4nI>
z#;(|W;*r_+uR0ds55?rAd-FX5?6zQGZt0m!14=mQ#}5C+Y79RrF?H?_FqN2kxhh2+
z%}dfJ`)k>+6N@;;iR0?(9351z3dFsM=MroG^{xra(*Bmh$MFZl4kj0XGRUwGoFIvi
zl9tu3RorN?T_`W&YR`+(Wy+TTcVsGH(z?ul>$t_Ai1QHOkD;Tu;GG(UetpQfIiGG|
zQF^G9tF8o<u}_U<&(c=%%YnQhs~+>wV)LQGP#`W|xh>a4^P6`R>bAzls6S}aTAX!=
zUfEPBaG^d!cD*oqVrXQDD;$A~m^4?4*;DR-qNxWg_O8zMFGWOvT`F+<DGC*sxPtIj
z{~EW=XCfrhW_fn2N55l81HHAhlb%Bk;>h+mR@bR|ax8YDHDWU-^h`s4W+g~$mSZY*
z%*L(w?9cynCwqM|FLOLtC(iYyd7-~hHPa{+!Q{%UjBh$#Z3zN}*O_p5P(4i20fj7_
z3L5K`8s!diAXm)sXrBuxH%*{V|C}dQbNsPN^=jeReQ0jsc2`x4Pdh7mx3Hdrjg!Dz
zZ84=2=nb9ALR(~CvVMHk!6P1r!xSi_S@b1w4!WTkGu+5kt%x~irG1^_uyH;%WIaE`
zJzA@0@8M)nZ(SWjggAe7KgZx9fl^sXP1v_@z&Dyt(RN+!_5;~aVYP)lN>pD7CWPWf
zy1~a)Q5iZvJBf;n)TppB{r#;D`$(8%Z>h(AqV@^|XYKFoBr{AvmgnxuK)h2ZY+GQW
zv&Rf$H$0{4s`?)+;Lo?D`^x#}s_!9M5qT+7T_wIsLU(6A7Y=9B!Ebn<@?;b1V>ox9
zCqIRp3s{_*==JY5OZSae6o9CL#5kjoQsU5y9sOBIXN7E)p9!lh|F7+}b;mI7L1LDM
zP*O&%J9(|V5wnqjfy)B+tY&$J{TEWak5$c99!~M)1x=qUJB3;tUvnbd3ma16BD1sK
z#XS%_YX}Su2H(_FM`b1^POTQ1T2_|P&6``KLmAV)zP>p2WrgsI{_e#h4Ln@wv+JI?
zV~1;Ovl09!^wi)BFMXE=c5{#OTu@+#n;LF!Z@+e3*fv{tS$%s6q7jC9%yxMZR5;sm
zC~t*NiX#0Fz2G(injFwf$f;7y8I&XXByCt2w{RL36-8jnVS)Y*I8-%cWegT1W8f*$
zP*KTVv-F4)QhCjD32R({v0+?*E;1CfY6Vnrf3<RV^;h~)9WlIXM~xnr5VImru5n;m
zf0MiSv8hh8LZ`~*=nwcWV7BQTocYH6Ap($R6t6?e(`&$xnQdHN!3&Dw%#uB7kb?o{
zr7#PY*b9CGw!nZ(vvPWYjd&70;+GJUG9Qm`{TllImYAJ^8X+J?U5~gv6Tr!3AbSDR
zzhQE0*!cR;yAs`2J*Bi4B4;r`zJUM<4zswRpjDVTU8G-jc<69V_St>%ZXEIt>wg7)
z4|}y9V<izHWT$=De$*W@VOj5VK(-C)Vtiz5EH+dSww`4mQ?F2&MA9iFJ#<d7aD=BJ
zG5=x0T)2*)$b2M5?09-8cMWktE>}G;l4N@W)It9=p&`-@_a+et%d2F;cw-G^4d1~o
zayXLkS4Sy-<F9;ZH@iD5Qf0Bd`~vTH*AZa8p8v#|Awr;i47n`Q#p!v@0B_RjpIq^|
z;D4<;2t*4H=n4Pxlh6jbg#Z5k|4+XbyM`baf0^zADGRr6-+uE1mUp&FQP^KN6b~1-
zFHzVFjHnCD=nsPAs>C%}0~wJgsfCJAR=|=hAXTb$@q|$bd74F<ii)`o{Smn?rz|(k
zb3qsY280TgEC}_25?qg*-b+L3Iyx<l;);9WwY~5kT8gMpnu`28JGr8F$N(EuQom?H
z$O`<uo)5tz1s;1&u8JJhnvU_Qee&pRD3R&3xa`@?4>!beYCqJ?(UyukW^SzXvo4J%
zQ--s#vBjaa<v>YfU9oz+N7$)V{@(R?6==b+cpeCQPzQBCofbsO@R^_26GfGRoD$?5
z`WV)`gWf<WdZNw<aB$8>Sc4$BdhP^g?lH-QWWAd6>0xG?RQnr-{pNDZU@-RAiK}8&
zIW@GfLYoL$Q@e!o`&-I=T1SshJ71SyEqU8r@!q;&u$=8=18uc5REBtb85Ym|B8xzX
zk$Mr`PhV-bG+3#)^Zk1ly_)@Zm!%PV0ia@4+*l2bxE#J?guCsp8nP5YnR7hrW@)^F
zQ~brS=kt8*$aS}yJQkbJTEnkg-?wAh_!b#S&2R<1WAq{A{W+>U!&{}oDpWB$tf$hd
zNR;{Ad<=k-1@ezaa?jTIB01i+eZ;U<5o>MFyXIbac`y7%uNEiHxjs$Rrvu0TeUl0h
z`wRDGLt~?C)H#DH2dcZ?G2{`*q#}#(t`0$WXf|qN)RU$Gu;)g3d4HC!%i-^>>)7$D
zqa|KdbirJ)s%3^Oj@z%Jvh(sf=oO1Zr2<W20B@F8CX|BaKiyy2F{)6zPRGa=(y%{0
zFo&Wmcdj(q7l_I5c&8W!&C2b;GswB|$}|k!p@h*IP2M<7S&A$vVMH~ldkk8&E!|80
zJFzE_+?bACubVs`07n(qsD+J{732@i4%-sG48WJ@0hqtcenOA|JM_DAC*N>~TG_@|
z5`OPA2sl3)J(371ciy-}FYOJQ4EweIvtME>O#$&B6CTk(zcm{d`OZZ4(vQ#XG-PwW
zo6@#oMfB!~G1fxI$c=meyZwuUONxuB=*h`#w|keMw1G_8E<VuOa#-#D0;2A@F+}bv
zq_^KimYYx1eek$uJ@;m9oLlD?6;1pJ-85g-7gf=c4z2H&&Xdv?L?6#PiTX(g`D1cU
zo@PT&Y?<oK?e?NebFC{8$2G<)Anwm~bD(J0c~|uRR>SRfw$3kJYC|noVFHYxO1Xh|
zLh<n(0xr&pp02LD;|^R1gZM72^s{$wnO-}9PM|k|+0d&CO+jBTHCq}Z{b7;BY@_zd
zZG<?%az47^yrqKeXpLW?Y@OGHVZ<uZ@RniH<nV*xr^9XxV|g0aY2vf491lTRf0LbQ
zr5{tRM(?cF)vM6V0vf8$xT@XVAzCh;#k;sj+s!UH!8qVwa@5e?62?YG@)~wP2+h$B
z5MYkYG_URCoIF5?<Nj4ux83ntfvdPOR>f$)Vh&1U1A`mn>KYr-5xp~cUQfYF)hDZr
zI^OjL3{Wu}fFy3m=|Sj8mise>{jRlqciO`=isZGhj%9KcH!-0rLn@wrH0kYYlp^9b
ztB1&Ue<D5(`wmH6+)xcA=S=pcHkB1nTY*=vYZ?IV*?!Wx4c(;Ezc{t?{O+f%WPo%s
z87|f|T0m<3N=nMl$0tc?GK_wNRxz(y=cuqfx*wz-ru{iu`jfrd%iYNbwXRjlIdA&&
zAfp#BUYhOU<X&|u<vgNr2#H56ZX8;^D>WN>Za3;+^aH|IOvWnvo?ABVHsdjD5_CnW
zMnQdE<+{@U6<+}iu$pMMu_9&jy0G09?jL7cWK*WeGF;Y;&&RK|#Z_3%$xpFXmX}|}
zaE(N3-<v6;YYoqL*k4_OY0$%z&vl#pO;?VxmE;t0%o;N@jV%u5{!CCvNk&ISL3(yu
z_m&-2yvDC>-0Y5+(l~x|wzW$}#n4eMR6nRYpL#z=sd7^s$Nuz7LX8o01mWom#fHJI
zt}b?~qZ+WQ=fnpNqfYioq{XG9xb?$oe(piw{K0DT$WZ_ZF9h0Qmkd<=skGnNT2lA{
z!Cs#1uxB|!_R3(@fKguyZftv1FJv=COXCB9arYj+U{&n?MT??w#s}KLZQwx^Hikg>
zj*kd=-m8VOJ_{8#4T?skDKlyj;P+*zme9<Z_m(r^_Q7M!wgA8Z;>iC#vU{*{Ek0c)
zt}TYMeWDZ98F%)%FI#_1bt)HVnjFYxFScGZK*mW=MQA9Uz_Ij9=df!`scODm>vsd)
zi>%kj_JDV%UhUK3wtJ(PA=_=${5ODHRh0op-To(iknO}}fy|HT8HkVw_>R&bnl83X
zduTgUCcYAA>Z$IZ*Prv!(d{<)E{s*~O=cbCjXBBF$Hm0_qPN`wHAuduypXbTxH0z8
z$qAS^Aic<*gs&P8>9#!Ut$b<%Czm>#QHd<$(5_)H;N*hl5Eq+qB}Fc|v6w+sDZLu2
zjDx)VJ{7;ML5^xgTXS>ZID?iMr}mG>_$v5yVHO$a-@U~!!j-!Ok%2F$!QLV5AL2D!
z4m1(-#wg68k1Hf6PhTCcF<<Cd1GxF;=YTiQP(VcRMx6uhN~s^7!<{bPXB5qDy8C~)
zI_tPBv#?v^C@Kh|fJg|4N|%6iqkw>Px6<9+5)u;9(%mK9AV?!!(%p^ZOP$+^^L^*M
z|IGYm6yAECz4yJ=y4KMpUlC7zt?-*S{cjLo52JaEg@kTLgW2FWXppOe_mAy{3DR<N
zVJVcY7wUmA(((P{W?eV*d);qWX-{|RSu+GjtL%DmsTH?5Y}Q^GE<}J!@&y^$0qZU|
zsX_gX8#ic#F#~&&SbZmQB5+Q|tE-zOp77c&-Zp=}K8skPUDfMRnQC;8UdAt<5Ipt|
z2*`a;cS#MibU&J~qtnifPOOtOVaG8;=Z5`kFh9UCyV7)$<^V6}2Q3|)-g1C$nFhz8
zPP#6+WX#H(#dK?HOz`Ro0Il%u5n{pssnUG%nHn46%OAplYE|!vPDIw((&?CYqE>iZ
z&+i~3n@?0FRvPuO);v1OE~fiM0&_~I^U=>Y_$WOPpD&M&6i3~A)UKFd1?*2W9L-;b
zkYQ|0Ih%Ex)7<waY|i90Ol11rB+hP!G-2^NyX}o)?Yh{tpmt-_sz6*GP!S`asZzf*
zMf|+K%^8T#?KwHw%;SFb%7Sn9`}e+xtJ8t@=H^s5Do;h}cc*Jys<f5Y+Hd}R6d4~;
zr@!kqUo2rTQaxLVBz5s8qQdY`__MUU-bimWUu>*!nBQ_^*pk}qPWk1L@la+DkaaiA
z4dMF;=BZm^XXma<n9wEK_o0Qc(Y;hU&$C;oo-`mJV0dS1csxE10#S+?M)F3EI;wvy
zL)g;F-hOpPCWy`;03|#!9EST}5ohvpa%<aZ!WcP}A}GKfH0%nDDXlgcW&qtGt;qZ-
zH8nXk^*Nlc&75p(A{yOUwr>)|-7_97G@i}`I4?$gycrY2U%c)(>FZunlJ7y}hMVqS
zz4HkSt3SD;YgY?Rhnyep%;=W4ckWlzo@+-5H<2`X9!FL6N%YW!W<Wr*iF9FMVa?_H
zuU~91Nq#si<bHUXGq=rqZIbc(Rw!3ByPL*!t^88!Z~dOw%DKVjq+*F}j$v|2gPhu0
zUbQj@6d%Rx<&CYaVQ^}rTJ(RUrKgu9!I*E(Q(#KJDQSTurT8nFKB?Nqba4U{%+Jv@
z%YS?fR9xPZtKa)zWxO-2xm8ruSaM~&a+TEC(^IbeTMuwre<qxsbJ({GhqI*xp3z^l
z=oYGH^+r;&cwT@`M)4-n)|eeuE7M=u`w^X3C7;~bhVlA~uD{1J8_VUWMJ_ysaDmps
z2qR-A2KC(t=spR%!58DHDu*PBYl~A|J*`<`(-}s3uRRb?GU#UP+blmLup50AAY_DX
z6V{GV$Ep3B;&@-2?%1H(Ko&9<j$_R`7(3T58h(GQ@Rrb&l?hW0#>B$R4$08HH{?Xt
z2JpfZYm>s|rUHp?g>!QcRMfR(!XhGGobR^jpYtDYRp9fQ*~n-u#Isw&Xu^6d^D3&o
zUOl>SnsT7rIAqgqOo_<S-cRZWcl22+x+eWjseVsP7~)z%MFqlquWgsE{QVDiN2;yw
zG;NmjWSAT*Eu6x*?@_w!P{}M62N&$;kj<gE)`0U7wgcxE33CWjz7-p2L?-MMxxSn`
zu(B%KkW0aU+b6<2M$~5S?(yVwEgb~ZwUDG#Qmznjb4O$r|IGq6i##uws;jG+4YhI$
z3pH|Npn8KVv8wiu76AC(t4CG$FxD6EDl&-pi%bnf7IewyB3v)nOc68ztvU&+5bPsh
zO#qBEAr_W%Pw#Q$S7X*&oNpvF=;YTH+J}ebZX@Z6hN?C3&zlC60;c();n?7=1pF;P
zfdh09ARN9)Xs2<~nkTT}7v$Ta7Ivc}4g{fTfS(`YizIOK?cL$9TT3^8Klk3e9Th5i
z8-{JHt!%LKLuWnSVn)x7jYY?bwv}%>TuhGfb8iek=yV$M`VMaH-uQaHguUVO!>a^)
z8=J$Xo99&$ZU}>6yL5BcmXO`UN<&$u9ZXGTW?O`~!)d>GI>iKUVxsvPDJ`w*)-M2-
zkJsp8ofDpK+AX$Art5`+m$Jj>W}{#ngXJLj4am(VYtn$G3HA>C9xN<Ec|n78j+-|x
zO+I4+pmgO`q3%!HA?ZYX=Ab91m3d26wBuc}SxIbQ)hB#XXuUqsX6xe0qtml^*<0&&
zdE2uRc2Tp9?pfh@qP(l<+_=-Jf_Z>Y=}RJa`h5(BCc{c8auRzrm`!k85>-v>Ux*bA
z4a%PEPX1Vq2oHZ;o%jSv^yaW;c4JB8xjPw1$m{EdI5@90>s?~v<DtOhN6t{Dtcm)|
z{5D^V-HqX#^V8XnZ^4gT_xl*9at0kptG^Z&GV<=>(5;wRVUMN>o72<xb%wjCGrY1|
z`ueWzbH|(ZH=7$91C0+Kj|{S&9=*lRJs=a0r}<@-rqYIn)D`ip+B5C7Z}4P=>F#uG
z$ljX(v#Ew{mxY!bFz60yis}>SBcF=3w6$et=hA5w=fasZ00kcp4^kju6R$n<p5>_j
zO3@|<cLg{$8a|$~?}dkkK4g9Wm2LP_mE+Kd<=pbAA&#FtwN=~}Srb6tjTjj#dgDqt
z9Pw}|>(g9M94ifN^uQT;xw%mAlX5tq>~LsU8l2~hvl<_B(OoXKV;~yxa&rfwU1u(Q
zqD@S4e7#jLS9=qctBrcT^LxQmt4w><Y)44*Lm8?4ZuJrIOTSUo;#4~SrQN8xxu-^Y
zBg{GExIbiCqUk^G*3Hrtm!;Fa*&$m}ONG+4O8<%I5F#Ef3yay<^37Xb#mKka3T4N<
z&+89h0nAta-J8(E%*>o65f>U2MQ6sVa}HmTcotV7IO|2q%Yj4wE%63rqkL?4xrJM;
z<Uxvg;}r~@(tngVha@I&#KC=v+8D^Ylh|{(95!s_e;JQ3CbGK2?L_gG_4fAmdKxJi
z8A{<YPV(1QkZK_XZuDMCL|)#uGfdYrEjYHqW`*y12m2^l8y4Ch;2D9VbyxD0z-45?
z)HRdz;S%g)Ui$_m_upQezI~9Z!u$g+X<nDPu1B^#qjp<WDA-Y{H}m0Wafv{$GNV7v
z#X->6Y|(1Ga_@ioxp2DX^Uq6sqRceeM4tQGXW)v1n2@k1Yw(@lZs$=O;2p~X1RiYl
z#a~V_BR8jNYegy1Wg+3XeyO%zK{0E?CaW{Qkt|0UhIGfrZQWc->dRgWG*QVQ+bwm>
zXNnUHX^IYEM+qN32kS4PO4OqmDlU2J4!%a+GW4lDm@PCvGNLmyHXbTLyK;i5Yfu0J
z!fF|h>1X44tb+%qs-~XU+uPr~=>?l<>(@i8TO~b$w6qCXeHtVA%GACl#tKCj7vr;S
zZBe6DF0C7IEm--0-io-Yuk2Q@1bflFRn1yGT|STNvwP7=jeEEZR>O7GOr`f{NwxZR
zriWuBX?cy3#N#+}jLMDZ?9~l_Wb?W&2V_k7<a64YaJnMoVD1J~JL~m9M@>!QP=VCc
z)a=)KO&30WiH!|<t9!8Lhh4G75DeI0BQy`-KpxS>ntH-*?>dcHPQ5J$Lem21V1GTE
z#BGge4|&`4b<Y=r5Tx9@CoT<}b`_w<PE{FhM&^xaYimK9VhJs+Zy()4f0OHKucp)9
z_j;HRL83o6F!1N43S0F!xufk`zgu?(wL!NbIpjG*5lp2k`{$>Y;Bdfs{i%l6(em(@
z2nWNj(n-;m(XkT%*x72enJHBJfQR=`<htZ!hxeU`xFcdXVUpdA*cA{OoLZ+H!XZi1
z_O1~TU!fOB<2F(T#s>Yc=6Kg7?+|#K0l?sV=*P-J>*H28>*V{%+ame~CMV}4?1s$8
z5g4XFQd^_qSPIkj#C!AH&JJ1=xfLKhv7FfVjITHhR*C8wZl|rQI_<1pI3q0;&L#T|
zM)kx|yaTJ1EZlLB6$zyKjYfa2+is3l?;`ec3oe0ffQ5-!vU6kJ^&V1&sG0e8Z#Z0M
zzkaDfO_#?WpD;L&G%HLTFA=smo+)$tajfR7CQ9ye-+BIK$8g&RpEv*$HP-#g-hwOu
z{bYUU1UTO$Bz3d>kiU~@VJ#xPr&ee1nj{eB@d4eSt6nd4UJHw*YH|mZ(<{BC_qC|)
z!0C-)vTyPfL?9mFMTq_bDq1!StuU>1aOBZF6HrHm0sA%LD6gZSbohfn<PId}iquPc
zbft$4u^vA@nKZ$s7#<wFI;K_A;jm4XJ`o#DM4b>2?;^fpJ`sNss+ALd4g05NWEttH
z)r=6w&Eo{D_7FY78^L<(5k-4Ui~>ukT8K}uoch-~rkKyVft_=Av>c0CuK7HQ#RIW#
zRmxi8cAQV~Ry09HS#_pb^WOP1PbZcUa-l}~!3_6f2paLLGTj*#$oS-3L8!)_rY@R9
zXM9Z#Y1`!2p>FDUNJ~B<+)Rp!?Oe2;2<kh3yW3kjH+g0613d*i{7tBV8_E+@g^&5Y
z^YcwAPUxh!abWLqw9n9N<v8`%ck|`6E6l9Z+j!`x2m$w6+f9i^Wb8A&i+;-PG`Nw#
zVDSYP*Pk?mr$4}VQ~O1h-OXuChBDFXdoI7ZoRu1n^{(`YLox`k3Sn>{w&>$}EUa_y
zhPU*zNGN^i=m+pv59$9*6=j{Qz1h;KODksjIlt$A+iqoN#W=qz?iDkQd%^2MrBIx~
zQB%$evq?jxdMCIm|1oE6Yd5)8G#dn!&A{K-*yyaV&Cbk}7#Q&n&rIaj?m>;)Ysf(F
zSf1%XjF+amBTUX8SvTU4xg}x0F#}xsHEx8<8&+KRXgz}Ir)5JArjaNvrQ9!<A<pl3
zso%w)0{`<GHP!?OhVHLrD~2fDdk4^?HWzV_0%Z4*+2Z4$Twd@%Y!Vcl5J(&XH?|&f
zIEkWPq7{=*?~X*vftuR**AuYCfw@W4A1FFtICKJVGmM$v*ZI;n#IRfAkjlx+j}=UU
zg&_|}tdx?pDaD?EgSFj^N&^RI>t`0*%~&1vMQ;==IEPQCyl&4gO-*&Xjf{MDcBbB7
zvN-pCwpg1S6^%(l@-3(HIYC(=w1f4=vGQ)>po$vwC*LR->+W{GzVh-^l~k=X(>8Yx
zXIZ~;t%R92)2V8KYGW|~L>#U4mtXp+jF-Dk;uu{K^15v_w|2t}fJ_3n9hvW5Ht1F0
zH*avi-toD&io2vJC1s)Y%<~@77s>3#gByTo;QK%smX)pZc_9tDgVf56dH{V6luBJ=
z<MYXH*?u5FLC;HVRn_VFdB_v?TsZf`$>{Ld&3S(T8Q9G%EYVQr1I!|u?TG@J3{mhH
zCF7#fLSIM}d}Fqz&LkZiPJv=8nNY&QWGp%aFA<vI;={>9pm9lS>z5@YUqJGTw1C?@
zkE@|E2<;Xpg<`z~Lh~pH8|?5x`MlB2@KH0fLKvL_hKJ5aC0l>76U%;{7Mn)UI!7nq
z-B5r*J+%T&nwtlces6WnOcJy4Z9xtgzg(SJd(2Vp>?z{C`bK<i4XDYVNvv^?Se%_X
z&js*{ugzJss*rCYb-=y!%merd$=|RwL1-!Z93B;wDeFW)KoDgQBF)Lk$-TRK7$_*g
zK|zEs-#<lW`|IXSfOfU`U{vMZTBmKjzea11J_GoeldbU{?r);f(w0!J1bHjiTEsDE
zufT>Dv@`x8b#-+(m8YbpQr)#EGa7MPm7u<|kQxtJCZX@EWe!C(87p*!<qQhzMX)Fj
zv_3F&{8(ge<%D+xm(AjRsa_9d4M~YlJVbS@`W6b6OEUpeL<-ehl%%A<W8df{)Cboo
ztQaSqJL`e}YBf(&m2N(Pd=g}T{uBW5M9C|Ty=2`LSiJzb@i5BsE_iL=s$4cF?zy}?
zuLNp8nEoq`MgYUrgS(sgh#CBTV8(9Bz|(B}RG?J+?wcQ!w)otOrT}9Pm1QfPvX%%v
z-Q~gZXHqd72De+}6ch$6e$wSecz~OGt*9so=43S#uw7ZApjz9k4+dfWIpMW}_jO@w
z>u~PlB;0wd&gLxtdAc5rYV#pY{2#p_+$QCD6~IO4)PA2@P_PwV^S8Rq@o-kU^)Do_
z^LBb&1c#cpVq&m9&sW|{WV74=LfA+y9^~Mm^Raa54KR!l)H^#;$jGgG7Bj#8G)X*G
z+yYKomUtZFhvq8S`@p(G4eSXrP<#Q<;{ZO?&dxt7=l#2T`U@zxmod?f-^>TXNx^KY
zDg`P8AxmLn@2&z>rT-!-ks4(?Zrl$rfX(<%^$9+A%AQuXu4sC9s2G4qICO@_*3v&O
zs#5auX-x(b%AoO5$A?3^?;amL(Vm5f&(A1iOBKVm9+DP`uMC^vQuFlmtgZ%QB}~H9
zo_^XlSI6VDbAhgeD&QUQfMjiD?_LL27Pv%oYq_D^1wcX5uzjVWk$Y+R-Gd)$55QLp
zWw7H=<AD7rvcyd0K822KwN(aeFZ=I6{YYd@4I-Jp3XkZY_j~RH;wA$bVu~;&fzne}
z(}}NFGSHjWqoCltGi?o$z)=|K=U`&qt^)}$(hLuS(U}{*qAnMw59@)8_J`FYk-(9c
zljC}E%0NroGc^SPzKw_&0#z_txPfC#NbvF<xYYZTQ=+02hB7mUvijyw1O5H0Eq{Di
z`Kb(h-sGUE65Yv-5n}*9RaXxTNW<5SNnb)zLSmxv+5;9gy2{^R#)fcd83$@UjYge!
zGsl!oC@prD{Voq3-3hn|P2RunhhEbFbmTjC82<g@pC$<0x4^}fOKpVE*nO}7HwN0v
zc7B7-(0aGaTxidNsEXd%V5PY`3JMCU$X&^@%1Vg0ZqC%N!d~%scb4`2_hcv&9kh8I
z&Dq;4F<H6$t*k74t*tAP8V1Po^YgZ+djr&pboX$Q0Mwnp33qPul&=Dyh{5y-{Ga4%
zXkQGt{+k8x2vS3s$5=}Sd>qR(_W1>p5Kk*FFNfP`WMN_AoXR73MXLzgTKJ@tROqbj
z-7AbnVj=6VR%P*rDf8#?efRA*0g#uAyzXGoE0?TIFi%3Y95DFD2d(xY?V7*V2|1mv
zuD14eYjZFyK?#+tj12DeXb7+$ynTF7KGi=+R-TyPn4i}K%9|3&0Dy@e0lICu&S#+?
z1fhs5@vfS3DXzdkqw~|c?xAN;Zn=Np(gnX;H28nEB7bl+YCM3WK|Q0Sl8^|7s32H<
zMd{lbRhJ<3pRbgDfHDJTZqz|=nn2)hoKCRR`_2Fbwx@niz=LrCOM`Hz6oUZG-;X5~
zk~?e=W9P8n`30GApk%=N4@AHaiLt*qtMG^Tq^XubgV)TOTasgohTO$Jk0qh`JOAm^
z5blS><UbFo6-a~q`|r9$|Ndv)uc<1Ic*yd2$jt15j|}nH6#_Cc$jHfC(#Z}qPzL7n
zkr<bBWnRe-4Py^IT4r3*Va#};to$@Ikt8ObD)I{rAtC+w^Qb{IBvg!le&QE*Oe+<c
zTxOkDaa|j>S|Dns*vq(cNroH&ldUP)uanZyK%tPB7%Lq2@ngJ)vAD$1QL)XU42F2h
z$fUZ+y1Igo)NQ#J{rEzbPAQ^<V;BehBg?{Ux*1SV6h@_<etO1uC^{e`o~^*o^GasE
z8^d3Y%N{e?;^{vx?JSg%q(IF*!=*f>87pJN*xEnc<F}>xsHo1u&w}jiO?<KLyt6vD
z&_o42JH}Q`t+Z$Btqx81W2nkEC|&^i!>z*=1<#7Hm@JZ#@B0-JCZ>o}Yz}@GmBz=a
zh?~h$5kX?rf8N1lxlp;n+<_kP7d0e-deXN=mZ{KCRe@I<n<%2DmYWnUj2B?$_f~A#
z)ZN7;HdjL(@uphYdjX#TJ@<-aAjthPlo&NR{om*8_&h^K{l}DusKz<#_)<CZ&jd;)
zFM*5{MNSgBd10lO)aMPpx5-<{^EUCXdGfs9xS&s?vEv=Lr(g&Y7tqXD-jtg7?<akM
zS3iib+4&8Xcixe@kX8g%w9@+1ylfKMqGRq?FIG*|dnWC7hNG5)Q&R;-{Sk;7952Mz
zVP+f&z;~7z8IqBbMw+ryQFV#qv%Yscq<!JX6Oo_l)H@z_$PC|sar2RIeX@gmKe;b@
z2iKoS<VclG*)yN_7<hhsccU+FEp6bA4wBSM5d7i6M?^8ENl981d43V0oHG*;|C`J0
zVr#^>D7uI%VRve_%rP$@fQtGXpxME69<e+CjFK6LhP0r0jp!n^H2-Pm!>MZH$|^yy
z1;HLlUO}xacli47%Je?oM7gQu)?RO+ItK(Rm%lfdnogE=ko*obT-0c^fLZ3riDQN9
zrV;;Astl=X(bx%X^v^=otSE~b3Df6ewPX0Kx!}`D6GF4Htf8Tdxuk6SHSk*CuUQ?=
z&pe?D%ZPVeSKm_`tF`>f6?C}ezoyXS(RGWJNox&`t79>!BpjXZ-WXMk3_25cSdJz!
z%D=&jn@-kB7Nt##9aDil6s7lkMA>IbU4`*okgZ&=-F;U+#8<dNkTgmDye%EfhOJN9
zrXL75Stxm);6z1zd7a3A^Bi%04lKAoe6`C@K`@_vPueoxY1!mi-7E_ZqiQpIakVSZ
zpBr7y7Jjcv=C4uaMuvp=KV;pxE%;0#X$o{gySe^OYDGd^^P*#oY8N*ktjwonx}B3D
z)Z)&pvkFy99d<4v3o)jQ3C7AMiW>xw6CS2z4&<{G!~!{(#bhw_Dj1hV>Px2b#3N&2
zp{t*EH;)O~ERQcnpl&fr*f1w&-?A9hXc?=Oi<3oA?1&Y^lQ6rDhm5ID2PdJ|Igh0E
zP{(24@7@5-cH>PK2lCQm(RT`-8GBi>57Ix;SO@7>TfPh<{T<CX=gSm)siQW|`CLgW
zk+=LV!sC!(x%n9!>>d}+{dtExrov=$e;$xV-xCrPgrz$b=BA>RW<z$1nY5d%CQet)
zUNakO5wq3CA(J;xo(oHU{km896ne>j9W3WnA!9sY<8r@xM(29rZ3}B_b1OK@6W9zd
zPxk>9Vh?h*9xa!Cgd^0hL?mCpq&3w$K7I=9DB`hS>5A205LpySJ+@UcAvP33SXroA
zNmn^Ms7nnt*go-e@p{K@N7%@Wo1w*Un0^ZX%^h897SZuROb1&IYjL5ahmfgjVW-|V
zp$2U!m7rzi;3#<I=2qb>5lg!J=tXyQFWCKhQl5_z^SIO*Icq1ko~Gbj!e&*k-1<ij
zmNSg6UpG3;RJkd9A?j}=Z<VT>t-`}s_;BF>)%NYrn|bSwEVf66;xp0krpAuw=rLcA
zkQAHsgw6F4F@#>N_CEP}jD!2o-*Ug?K&xm<WI(3Va6S{2hB2sK1o3G4Deutu<cpQa
z78M=kqw^(Ae)QlJn%(W%CC%k`RP8H9C3Iblg;y^XS2FJ8mKZKOnEU3H)*RIN*UNv6
zzZI9!Y1Fx2xbii<>0Zvut4P8K$3z^0q9&?KXK`UiLl%Jq*5XpeZfT?HS)G59$A3P`
zYSJ{_t^?AOdjQ~Lc;;ze@G(E|9ndY{ps+PCtp+x9qmvov1v@|5cAVb97sP@yyn(``
z-8LTYlvH<>UEZiEML|l6be04mv|RIltf_H=Zvc<e;oH7M^|Um%LbY<Cbc+Gn4#v^v
zx(W*O3Ga7jEA5BZ24IsFOu#x11*P;FT$B5K6%azX`rS9$`WZ*+HtManBG()R@(KzN
zY+EI>+c4p=UXe5242O@^hYJE_oK`LUAAZop#xUo}iI}{6E5uLBpkd<iJa6NZJWPq?
z3gbCUy*lz^nbBb*AFn=j3+9l{j|d3H(xopG6ri=1M^M)37_Zo-Rfs<}l^paF4h|Jq
z%^@E*W?Hbkyo@*`cD+h1=<!LD&&BOmr4`qBn(SN|yx4}8z^3bVE^#Ry_e$-h`Gh$u
zGXsx;kTm>mb;|Y+%(>l{?gnTQ?39^wty)Z9t)k`y7MOlzVJn=^{uQ+RD_RaGx@n`M
zcvQ4bjNL@rk+r&PDddE|bu?Oketk=bX1Boe#V+cpzW<i|v)%0s1DvnT1YWO2!t6B!
z^YGKVWN>RAwDM%_(NRf9=rCf|eGxVytHtc;PEHz1pfRLs47qiK?>>N+{(Q1aQTZCI
zQS@c+!>%bUtuu6W0J#AN!Xj{Te*5sFKvLOy2*QL0&PR--XnBfb{S=k@mGZDef-dD7
zoB%r7{G3I?%phJ}u*6xG<P^{*ataEjvn|7;=`~;jf`STeqJQ%;6!qZF09#UjXSK!r
zGZ@G_IMuHXs<N1KIFG8lq<-~kX)W|MsFp=C85?^aybNLZB+8YvhhNI!cu>`tL`+KY
zCDc}%k<sCV9lYHxR~LqdYY*8Yo@ZqrOd<)F8$|*k?&6ZSNV(jP#r#L6`nY~x*S)k`
zx35;EY51E`%Gi);ASQu@gL8H8$h-q>zASd4h?)|AxJX-Otjc<ff3{JW%jNKJU{N24
zV~-=O7gq=`snFLneN#zpB>hz#Dry~t`<R@Z=X)p#Eva2+Zpk~w@ae#FTlCgGo0&C&
zGBIMZZ`n2)7tL=H?J0d<?&^%H`#i3Ds|}yw&YnG`ZrV2=O;mbul0Y)l#vN4@32lrk
z=bQH)5k$3p_V?c3eT2z1S6=tZoGW-px=yQ+bng>q0o9LGCWmO-ct0%^yt=odJ@G_$
z;)dF9d8qOI<5#p26W~aS?q97-hNDE0hAX^$w|mzWw%vNLub(;uo-W-71Eou-*fc}C
zi}_$qv7Tdhy%d}BC9`Q}M#1GpYw6n8wKj3E=xZV7KE_$hkD#H`(tJAJKHnrl|2LoV
znC=gtW4SxZ!VvX=-_Lpn=!6xF3a&JFg?`~>6%!Ma`vkuiT1#P`tly`8fkWiBF}x3;
z9p#3L3p`p9%7+ggRB4UZ9dE15)L#32HtXo_Mn?AMv0a{a)<me53NaT|Hm0&eu6HC?
zVIlKcAz?xY`dJ>I95-xg&sRU9THBhbPLXYA0off+u=E-Y9|VOJJX`lM&`?dw6m)<g
zsVL8NVgLPcY`AT@^sLUPc#OTZs1;dw*n8sB>#h+U$08hMqT#SFn@!ARr;>6p^sjCe
z)nM-`Jf`|c?ae~Qm~ewH^j}-374`C_x}oj!DEqSa_pPxO7WI3-E<oCi?zNIZc5p@T
zTtS81S*5unYYLak+9-?@tYTHD6_td9-mn<Y)JZRrkxLR?_mzD3kX0aQI$5FYkQypY
zYq{C=R#Niq15ToiwE^wvX<}A`em+@QCa90mF@tX5k`l~l1%+O{Uw$U6pZ41xjN1dE
z9bi6V`O^=Gh$Qkl?6xUU7*IvKilxUxUgKduVbuEdecCxVfAX7`hUYq97Hu0Aslv{>
zqvwcupCL{*N$y(M?2bxnXk0B*OGe#Gy6M#wDH{#eXo-~|4e5qDJBQQj=R5>s^h0A~
z1+!H*krnO}UkD4IpM*?HODRZ5_&sD*WF)11t?{#mkf*az3+o2u7XM$nq*Cfp8TyQU
zG>^xm)PB(W;B^)2Ty0ZLohI|={N(lF?lq*Cn)MS|MK`F~zJo<HQkF}z+lGUOGNVrQ
zMlj6BpVos19HxJL$Nl>#^F=l1A-z(=k~4pBQBg>24S*R4Db=C3+-`e<*ZnwR5Jo9E
zvSV)q1=(M`SUUTi1#Zvu^cO(Bxl4b3*trM;h3F!w&_Rgn0IsO_pu4}{Vkvt72$J<i
z&bI3%nu~F8JRg=Cn;X1w!wp<eVUdvqYSp6K6Sk#MU$)yI_h&kwC59T@-|p{sDqR?#
zS%v;qBvASkDF2c5Ua|=sLR08$e??Lg;Ev?G?OvtjpFO5gDg9~Hn~FRnzJVWt&v3d_
zJnei;nD+fnH*$a%fU^rUYv1tmr)c|*HYIUW1U~!Pt<EG+BpP{GYrFm>?k`G<@K_3#
z?<9mtLxg;Fo6jRkIEzyJQDVmF7ZQHfx_dW2o9S%Kl(I?t$h8}L52cL&y)5n5C5?g-
z{%$7?Ew-b!sewqbCH_0v09Wy4AC?I!Xc96_-`nKDXK?$?aAVFMsHT74(-oWoiMyj+
z=sQFtBoZOnkl8Z{8mH*nw{V=^86uz2R)!4Gv*&Jg*L#U#<fP<|T&|=g`IVI?z}77&
zkR&H11?H?NcygBS71;O09^E<KJqJ9-uYn&d(WX7MHnvuEu06*S72DUqaEp6oDS(9G
z``;{JD#h#0$=0;{$&42W4BSf?Wub9Fj%N#Ja4bkj*zM}<<^|Hi&NSyj#YX`oR4S*1
zmCUTHIQvqEHK%&TS?Sq^{lctlDgM>2jKv;R`#zTI^->m5(EwSpkeRX%j_=>^`O7{A
zV{W$<ISWgnePbwjuu4xNI|Dnr?)m{bk@*Zuwx(}fE!@v*^F~8wU7kI2Yj8Ld5)fFZ
zM5dz3d(nQ&KaLs;FFKX-ik~V3(?QZZ<AJcr?Ol%hZH=>Ul*3r_+s?AL9`B3IPfrRw
zd@$>N^T`fMT@xdj!Je7QSxoO%i;!xIXs=GRmXhS7(E#Enjxin2PFd5{KF_0{eaQVj
zSs_Wuj?G6LeuMAE#Z~3)Idkp*kDCMYH7TpVAvGK;hM^ZDnq7L%%ZD{fhM`OSoR*TA
zCC$mXxuA9Q9Av;;4nn^925`?LC%xQoiw+GH5f|5WoWeyIK*-xupk<(7x_4|*H}>=Z
zmfi~O$%!xhFHxzbJhUeQTS-Vhut(?Q=VL#9+y_649Uaw9=iJe7dwzZv`FYk7pNde0
z-sPv1UG-Moj)<rL#)8n8AGq;@nEBPu=(C$nv)IadPi-{jo)^8=kh)<N)@Y{E$%>4k
z@$Gdwnj=b7#8BavcjB_n$I{R0-{;+?@cI*s@S^^EX7LnbA+axdz>tzMd~!gDNoH{&
zu}9D61@x}S*bJaQd-C<v)aLnQQ0KDn=evj5GI_yC(Y{q^#Jsl;H#h-uLx-*O&AwxV
z{dEIq94Gv40dYsr#2LjYAGCRK_ppP+>y1i{K!1pL?sDtO+wO~_{BWm>)kde46AcVh
z`WHBCEnmK>KYhN=`jP02p7)P_@-(pN@0p2XXy}tg7MhcB#~3CVT<ox=)9kWz3R88j
z_)_&s`=7ctX)Wt(c<C?RWWKl{Yj{rlgoH5R^Fuz$vU%lWp_1efGGZ0)8*CnpxBi`y
zu&xj6rp4E0kYBE_=d7cU@S5AF|3pKTms`6dNXl-?eN*9heNA2lCJy(1pSh0ye79`R
zAJ*B}$dUOo1ta5t&Tn}^g9xeP-|5a5{q<ruUh@ixQwJHf+p$N#?R*2h>CpoCY}Ql-
zk#q2m@I|{jzLkim2t`$B^7B9A80L)r{5CT)$H^s3^sS!z0|eV)$_tr&4<!!)59l$1
z$5Y-HN=~U`pIRzaNh1$+%X*g35R53DOY{{vvq^d_vi3GqLZ$RF10RTW9*r1{nqw0a
zMB_>p{c5SIDjSw@Wqp9mj2#jAC_-+nD6Hh*q_4=@;gw0ni*Q-WCtsA5IYlJHBV7+j
z9-<~Sepo~IX!b<<`v!!~r)MNIm8Ik4TJt^GA>+jx-v)bmsgY1cDOveEimYrZTIzPu
z;<AXPCGW2hEng$nlGl=_?(<U#Jfl?~xTf~G4Wp{T;fTS1M^#;Ik?Yvq$+$ss0wp#!
zo?9Vbc@KgKJTSfg`E7i7QMkW@G`8rU$3##OV|EI>d`XUUp&5FI?cKW#O6uQ<&u|_;
zUR_@9{PTwVd7!Ee+-A#FEOOf%y(X3fL#r__FYkX-Z>ekuvGC6aLM`3h!Z|*h|8gM#
z0->|12ge1`5O5>~tz7wIB)#TLN4A2LR6pG4828f+{`u)hbJWd9!k`4Qn*1^_GRjR(
zeha26tVAxy8sKh8CjF%}V`vaD3A0&{ld3D_I=oR9U0huLn;2dk1#DP~f@#gxvU=>>
zhv&}D(0ZcxGmf>rsVM~zIRL#RWHx%$T}!K4frpO|S*0Sg=?O6Ny#sis?M7g_&bY%9
z?0=sMcFr@D2W7@%W|xQ{5ECFIK<dK+lo+e^!PaVP{h>)t`*;wg-r*?`F`NAA|M6oH
zu$0g!3mOFAJHN17>p@b)${N5f|Bvuzfd%KK|4|2_dr>Vfih=cVuIUG-y~@!p@AvVu
z9T+dKLI;VG*ygC|*0#9}`^j!CIw42=zr#yDWvSB}_aT2uomY<?2)f(^Oh#`FQOjlj
zN*DRV0;+S}EO$MZfVP)rK;Tq6MkC+Dfj!{BBzX2@zCEX;^dE#@p$46-K$TG_R4dHP
zw1b=*#PMPqKt{N6^EU8wEI<~*$6uC6C|L;@?C&=i&VGo@1{RSAI5;c-aDWe);R=Zu
zrsd~nOje`$cu<u&RblE3ricH=vk^`{ytjpSXIv>7UfN{)>^)8X!y2ShPoadduo9pY
zd*Xt@QVxDnlbz4grR}0%;oKND1VIn>$Csc>!h#CE<*v?75FdXJ=Y)faCfNj-k{}iU
zVm!#tPpQ&u8ya?bT^uBb;QfHli9hZkHuf8HTbnNX^}(2h=OEj-T}})^El7cC<^QjV
zm7x+RVF2;!?}uo8Gls=*p*lGk*~&Dhc@s8W4L{1g&mRxRhK86J7@B@n;dFmqTU!JF
z4>5<$_o+IuzQlU)8G#jI5;%Bx1Y=R5q1Db~KHbMh#=im{bypn%{ND(0+3>VLnUTKh
zwQr^(tsVGyZtv)5zVONqrb=iR@AmJDg5vJoObiSmOFKL8j%<UJfX(;e-{&Q@@d(O&
zuzT;`J?*oWfz61>+qY;$TpqPfo~LJLc(`&}j*p3m+z@5upeDi28GskXfK3IRE4EjV
z`c3@*mcTTYj6x3&ZTM9zGEjV&CMwNqEf+rly{bU7abWt=5ST&#>$7u57UuJChy12@
zR=!4k*p=J)vG~gjrz3pG(S4}SEGlx}j;)Uzkq9uekZo`|6L5z}czqogr2xM%$YDQE
zD^rz}(0~(uTN@Mm26SAGL-fTE0oSElEe;%z;6(yK%3A|2cPm?0HiIv%0Cf8IQs!Gv
z(`c;Wzh>$BR73R%QG)MCuwLRJ<JQ)OxYK^-b9=l-uzp`VgAeBXb@lb+@1(E-?V7F#
zCZ0ljt-KWUy58z8pPQS5CU8=*C{eL)2j|9&(+)`E{b+9H;+}<y&#9{Um)0x!fVHyU
zo$39`kO!g>h{;ex47N{n{8!)r0ptF};W`sMTNR6woqAB?8f-W9;Lf9~qXT%M|DG!4
zb4qeq>oyOg#TqeDk>W7Eee52xwnIkTVY<0r=t<MjOhbdp{!|yLa$qdrPw^G}9Oc&y
z(asXM7y*X+dAYSe1qV={8M+{#SC~yZX=)}lxH?PQc<Dhq?j{@{d*Ujqs;0~bQkUTx
z00$>U4V2de>`XfYM3Rul<*+NVyHUOMXwwb=cg1CDD?3*vkl6u<8MJ<I{d*Ip5SI(2
zDzBJUa@8sd3oyHzW}3~DW1rW(X^^MnANF1_8F=oX!Nb^a>R?$61TW;F<)tN{<uW>a
zYn^Ml2_XNL18B|2g_JEeF=UIdV!*UnP*8wHbQSs8=`I;)mLLD3YxXi*3d9)zbkj1>
z^-q7`;*A{dJ4R;-!j5-g`78qNU=dHko%9L|gB?|F{jnL~$r~pkw_+<%F4~_Wd<h>b
z6aDQ@*)x|W!62%FV+Z^~C=(xR1jrAl<NzE!JUoPhHh7hS^p@#snohmEAn~ow`B{Jn
z3PhC21G?$&(_-S|16%f=>zerJ6Ehn5p-u*dseA|eiBb}MzBe`$Wjx_^8}8Y@f?VBW
zdW}?AYh<C%FOk=s$8gXa)|&rTm8As!q*2T;AKs}qO#=$@coUt*N0tf#0aTFJ?DGWV
z_BUuQf-vCV5Yu0OT_9uVK#me}mcJ=-6{V=M=<|}F(LQhQN-i5-itzqb)sft?W&uvE
zNYR3>{4$x`%x+N$C^2Kh9)_EO?%z+?{grL~#QJ*J2YwQfeM^`+=c9#1g-T1wD2!1R
zWy;ZU9CF|EkP&J9_QLBfyKJFCXk`4LgEEM3AUKQ*3<R~b96oh#tjbQ(eO1%splFfa
zCUl8*@LOD>S8j|MOo&vS*%T#%q8efekx%~3aiYGFE)Y<u(Q%M^dM@j7dB9HlT7|y=
zzB?400T(!r;3s>?NJtmd1$yQNdd9|U?V~4riHePne-Iwq;Y@nrx=2Wom)+9dx~%8H
z0vJDJWS^=kHU%WmFW!lXSzFa5#Qh9&iAY+G4a;;>>Q6exZCLa3Lq#BP18>e@Ja~LT
zOUfZ3B*LE&@atR{vr(AT?Xz5=96w9<GD-2r4>^|p_-*o{s~wrm5F&u5(ij~d_DOFU
zvCqKZZ)q9&FvY(v1xrS$_)Ao%JiJR#L?<^OKgJY%_wa3Sh?Z^)VB{c32S7nUj3m9T
z05(j%Mkx<FrHJJ0`|B%imT0<wZV~BEq*2}A3QS5&Bq1fOet#7|H}^h@9&QEc??ui2
zdIAogbOS$c@0LqvdjPeCcQYL5K9UPta3}VpRFv@I84e+Sm`{^j<dvUF1!2%W-Hw2@
zkfsu&F0Z=Yx1F6jaqYYLi<{!3gc3!AtgMe>j&$Z5UXG2uzDXzR=N)NQCHUuSb0xD;
z(?-R??5fdt_t5c#c1g@cPN!Iq6?Ydk7+Ynra*jU9b>`fuPL5JjtX_*&L9ZO#EdBF~
zyR-Fa{d~Rb=v49=#V+f94_~(j5*6F5qaq_0_bkIY!^%1aoLFBBf{TT--<FGH-=2-S
ze@`Y87e7DQoX)a85sjn{={dsB&|NACu4T|4O)pFDUpjrd15{*oYs9Ieb*7HGnuv(y
zfaiMtOB1C^o9@g<G$BH01P1QgfgNu+-gK{(zDMFyN{{9hWPL?2`p!T2o~2{&l>rE0
zeCva?l0}<#imp6$mzZlw+n@EMKLNR&5y|5s)y$EZJG`n&uCda5@V6DYz{3=4ZC?72
zQ}0*u^)=OXI?3q~^qTVkZ}Y5#w3rbf07)+{T!e#h57q{}W}__5M|&`c9YR*`qFr2E
zs#Ya7@ZXOi=CN4BOiUy)+Q85EgW{#lxsR?43<H*ymd?jYKyHeA^fNN=zLn_hDac9s
zF>hATt2dAsv&hRwj!-{_XZ38ab2RcQ*6iyu5>h;i<%Yd{`pTrKEuL%7(ALH3+CkYX
ztc;@x+kKVKA}mM3^}HtSUH9QaO2)=x(E2qqU5o!JI|(}3dQ#EOkCmkLZX<o6$9F1U
z)W&l2UjFUo`|N=G6&nMcvU;VQX8S{;D|vqYV%SYZM3F?jpZ{+b5E;2`Vzx6s&%X{!
z6sY%Hk1~FyVd5Xexg)c)J8CaZfN4~d%^lhvfcy;TIdU$a85XmtH)>bV{`sdiFoV|}
zk)Bo5hdRR8&7P+~(?3!$xBELE)W85^7l-p~&;fS=0BB`3D^Sn;YIvPq5v5RxC4{lN
zqoY59IS&W<^Z=nQe4qHu=UeW_xJ+H1)YdKEKJL~Nee$hKU@{KdtHEb^>A1A=0B1?J
z+}aC*)r!Fuoe^vO4UY<9MZp=vbJK(OA#x9|rnPLLoJMVNs2$eg`&E5PhW)90;v&~+
zGSlGWORfHL<zZjGS=q{4V)eXEmq%oqfy1vZCB$cmi_g~yzjxh*H@54~J;l-SOieHI
z(+ldaJKRpO_Up0TKVk4WIOs^Qrr)y1)k1R+0lZK?1!;8^i6dbpeqZl&thdbNvmsK+
zsi{-xmN%m~XJ32iJbDGEH6_ZGC7W9H^WX?LWgy_9hg^OXJ%nV7?W+>u{kE=vGL}M>
zdKO9s1`0O6WoaFqmec)k92%vc_3BjyDD@fs<9eAC9+0=OIV=j5($Y$$^i0cDN#>`Z
zQlOcwR~2@OiDA*Yz^w<3*<ej^lPP+%P@~LY{@vJ}ota&i*jG$h)seZ(!6B0U!!+&F
z%Rh8i%;l>C0|OPdonRxWR;g!M<o3MQrt(*bp<pD{?N_ZvtB6o-y)uI#>(M}e>{kz6
za3;ISB@%1;f8|>*3LWY7eElBzT#a#LV72ebh5qVC7D7asnQj|E3l6t)>|HwSr|s&J
zp4Ll<Glj|C+$Odxz362hn8Z=AR#oZQHfmH)xwtM0`^|3oT1C2{yPUS?I>ykfmYtc$
zKl0(9@Hz(qfoPXhBIa<}s$_?as@uph0wUB=^qP^sx%-B-IIUMMAmzM8XeP~z+g)@U
z9e<^NpVS0krV_m;PZD+tm5LFSC))ScRx^s;HGbn91>#(ad`43i#>{xH)5V;SlNE0L
zLK<&1Z{2u>_~$2G)vk*d=_t=B_Q!Wy;h&V!u-so=I{E1kFl&AJJfz#H7Q!VtnJLd+
zc_S2)|3>g1Sk#{;?g+gzfpU?o;DnQ{nWM>g2ngV6G4$`$Y>(1TDia~!x)n&kS)+M<
z13o%%vVkXw$!;qf=B2uEF$nfXANP^L!G#%_k(jSvaj~#|pnlKJg#NUlb>^1Tq`gDh
z$>aNLW7eIiF=El?>6QNeB7hMW5z&$)$v=LQ^6l;9Xb(Etp_9$#aJ8%|N9xa5mQ>2%
z-V@Eb!@ZMhwF12%dQCU=`!Li}7ZO_OC}t`f{^&){S!SNFT>&>*VqQlcHnzivBf;B9
z?x~U&&N5~Aqwh}fQ>K6U4Z5u+R4Ip=-+Yn&;)s(uqb$8F!tA_l>aff^{g+3-m2Dp7
zy5W$jt}7w>Vpo13XdKBlotIBdfe0X*B~Hxbbc^}?wkn$8c&_dJ81NzOFRh15r+tDQ
zq!ceMwbmI?y12Z&&y`c-b(PK$uQAK+J=FWo>+_fF6iYK+Sq#Pdg&~RK(-vp?yZ(xa
zySHL)ARWM#!Nuj>yZeh~{bw3SDtfe&hX?ydwPwcRuBQudAe`1Z55Czf%TZxo?)bwh
z)a3kre74E2uTFEyJLwsjZSAd8*^&Agj~+jL2@e1^9bMH=(L94=%SDCNG8MIAf%3Qa
z5~IG20kwyHi$}(3Dvni-`Wt0<WjLZP7i&z03rf(_gh1R5Cl5L~UlYRuRg%Njh{emv
z4FxsV@X(kRtlyr$-Fp1|&I>~(?KdQgs()WI?PaB>dk3QJhQs9ap5&^~`+2+Qh~aC3
z4NA(odGp8!>}oEZ%eI7FUKeOLNS=E;dPGG<0SHKI!+?Z-Ph~MEI$RA{j!x==uI}*A
zs2$^;+Wn<{wY=^lVfLfS^uv?YU94s|sb}2mf}U<*Q_l&FI6L|smlzfs6G}pPeyyo3
zf`_Ld1b!7MMpT}+s+%m^ko>v^+}TuJT+!~GLMHL}itUM6iz*3}jjyRfM99KQ(o}O#
zO-FL^O*FV0^^T~TQsyDoW>vlGHg@FiJ68Lv%0cyx{%5yo{E_Z!K?<b3=x}K%@xbnN
z%fx{J25`^rJN&kry;|(*5}lZcjig%lMRo*9eV*~ufp=%Dl9N;|o-PD@58vj#G`ZUE
zPP`qbu<nWd)I6lVtFefQp}yT7Oti53d#k|LcvGRL#q_n7T3x<NjvH52Y3Xyp2Rv?v
zm)q!MOM9V<mFAq?otHH!VMgEG?Y7iP96pRvQ-X8<U}?R3qTKzmgPM{OW#{uN*4>5e
z?H;S1sk%JK8%1X#lS@3|{LuUr&dZjvM#HaC(UhZWfZ3AnFAJwcsJs+<_@$dAT4_M3
z+NCMRTG390aH1~s@x!$Dx9l~cjc?;*_aX2kq-(@CSDuM+yB>Fqja}~zFaa1SGCch9
z`0|eU`cyGQ;TZ)NwhC1ga}JDKMk{BC%gVZ#%~}YQz3wY^MU^kv@4DLBlvSN)Ih|}Y
z!{>{&f`}FSY8KyIzf?Xl-uNTfXgDV-H1_y%`3_xQrGBHE_VTcN#9{gKdftqd1Gjlu
ztp)dn>z`eIb<;!`NIrru-%i4;s+xboZf8l|kpMGn(zzL^uU@YmxW%TOZFn6Q-kj`c
zB~b~8<3Sk}oL6Czz-wWhCzbN79-P^|Rs}#HuoZs?J+5?L8TGc<=q39AEv^&S=;2j1
zu4a94^_-Dy$(ZyKO8aDri}!0D*=jh}5%5~QM<(31X1OoKoO`@J5DGk;gg{Rfoi_&e
z@w%eNGG%$><(El6>#3L4KElLQC^sVIz`$1X;v>OuWS=QzV(vDiptx|yexd)E6&5a`
zAl#|aKELnZuQB2&>FKjFl!Nzg^L!~%%~F6EM^>Lo3FtchX$m98y1aY*S}ysyPJ#*n
z?CjG(Thbm#J@cge$5o<IN=Bb)an@BnG@7-wWm2u&)kSrH8URJ&ofl%LP`;F@Ds8@5
zK{z$FJy}szGlR7h5gM9;2z3^d=Y!ihxkNk-B}q(dRL%RVCsCS38Vx_iD*%Kr%2H^3
z7LWk@^7>kPIt{MA03^cO+QO>C=2IjL44vmes@*u5Aw;~T)mp@J=RfmxD?u4a;%GSc
z3Yq==nCRI(I6of_E^lHJib+bI96Fu!^?HGZ&1t#O%-MGb{I-=(c7Z~=85RyU)KKkA
z&2n~$p;`A+Hbc~1P0{qFmX;Pnrl=_^w#QglC#Rj(w&gP12ltScZa(fXu-8(~*lFCU
z%Kuf7qTbzkBYJlvh9z0FNZ|&HJ#o*}2d-ktbo=iiiVdE~)F)<_X4fOmX`>43Lx|tZ
ztN~u%82`qs{6HTRx)FSVK9~s+_ABOi0St34F1M>dsYks12>}73R4^^Lgvtd7CELrF
z*V&?3d6gL&Ue)Yq&!>{YY?F}L%Ag{q6@4)3eDW(6X4nhT7gTEof^USFO_fe$-&@?o
z(!SGvet>G#r|BpnA|@y#2&Gsqp|Wx!fqm<!!86>oWribxshBpIP^&-{W&H4AD7}V5
znTZ(!Dp)KX;XIB*r}3J%<4|_}y}gjUJcQy{j4N8I*w|ZTTw#L5$H$GOJrCkD7Xe$c
zc}0wH2)+=ftVKb4EHm|bq-if9X9Xd*(_1M`h$%{;`A|KC?X75O-QLkzf3EFhM@Q0l
zFATL3K<KP8{Z=wT0^Ri2?`XybWx~O6F?dzmQ8?|pPRgZw)+Mf%TBo5-m!i2m=0FXe
zsJ~@fiA=%cElx6*&47rh>ooPeQ4{srD`Ix`aX7R$Mc5M9^+%jK%n)f*Xgz1Wtf_xq
z56vpK*h`~aHV#`$SBv_6A5G;wdk3-s&to{%QPMK7uSM0Cr9NS8rVuWuX{fP`Oqxkb
z<+-&H7ssN^eYKs~-4{(f$WWlJZ{*%b*qB-q6cr?bAUaxZOEZ_OGY;IMN=wDwI*f=!
z{<E#ZMYRCuwDB%c9(=$sYNsxG$_s-qD1V4!HYXw=pyttkQckluT5wLf$5c)au|+NI
z#e*_Bvo96lSrYEoS3xsT)LAic{1a6;Mm)C-;~0Avtfk&Qy2(B7-y`lQ{yk^W_bM=8
zK#G23+YO0gDEJ9y>H7gAQJbxP#BtEQs~aErn~+^+0)TljFlA^BTUCS@dD8f8wyT$F
zU$~=VN=F}4y3m9Gd>3kly>o{2bU0b}tiOL;6mF%B>uo=HMoOZ<FT&2UK~C+lw4~E?
zd+AHi3aS=P{Hq2Nrq4@1Rjgu9_YKytGG1UC1j-{(@DHL|y}qQ^PnbEs;^D73j&N%W
zKhJ#A+G)7gR$=_j;TEg9j7sjv%-Q;+zFvA36x4q!x%me+^qlK0!O`Poy@zlT;2&B7
z-#27%PWR?tLux-bSmJc7sF@wMP{`sqMhZegLO@oxZ#~Eew6`obSa~8fw6}up3%r7<
zr>0P6C3~T@<d@>fKT%`1?FQMi(2Oen2@0C#1E#mCnM)x+8yoF$(-R7iNRAxdWEG*k
z&&W;-XE<S-<~H7kK^LYH(X|-O&CNaU2oQH%GAr>n>h7IVYP^$1QD_0dC)`p?`6ZZ}
zVO*%!N=o<at+-g0$Bp1Yq1URMEUC#q^8ezaB!@AhAZtljSahV8F4~`(O%Y_g^q!-u
zOQE3HUmEqI>xtaXv$gh$Uu1Q@uvlFuevXZWVeS0(q&*rc0+T2aOgkcIgJhv8<4PRA
zG>&^X3>(8`G}SYjiA8;8Qp)n%@qH$@No5v?a_<X*40AwE${?g6Lg|YJ1xd`t_$(&x
zON?6o;;s)!)YyG3(43m44F%mw839do?BUf}(mK=^lNhwLi2b3C%f;eSL6Wb-Z>Byg
zM!jhB786O2ERyrNq@<F|r3#IS$Nn9311W;A%JXLOi%0NeQDsb~OAHs=df;$IL{v0A
zwQ~>kAzpeAR6^-TkIZ0^7f{RftG{$-=`Pa3PZt+pEa-Y4720;s)Vo$h==^PZn~o^8
zZbV-6Fv28L^idRIRTHW{1Ya;S2uTal`=V(JDfd&;(r&}u`@$y=P{xazkU1ZQ(~+4v
z2e>*GHx-MsT<){R&pNrE;%rPe$X<hO>f42koPtO&f1e{B79m1Iyt1O<L(iHYvHzd(
znqxyj<|`N-Wt_&wR#fQdS=s!$0|Ppl!4L{ZT3ZFGfr{cV+2kE$58kkU`gk2x(oHAn
zG!g}Qc7oB8I?9PkN=jZaY$9ch-`~i|%%sCTXNm@2MPhuI)%1=^h4uN-E<G(Nn14J?
zRz*cbmTkXO(0{z5p{J5((Lq9TOjoT<C~EI6tGnQ^^xnn#`El=C@EPB)luux<e}E+N
zhF?zqEAu8Rn(J<C`|{WS-1ahDM`N0T8uG%`@gL(;bIbCdP<su^goR^iEj(*@(Yi8k
zXpAKF^IZtdprLwFr06VBog<5-aUxEqFcjB<$&`YrgfLxvs^1u%bj;Y=ZR%tG2`JIj
ztgW!zVS*K)?*FRG!Wxf%E}N_HrxK*+S|$*Gbev(KAPv)Mn6H3p9V3R_n_{LOUKK%q
z&k~=Kw{pFmj454ZF;j{@|A~h5bT@1<4I4A9%=W0!_jaj_kg6mvGYKQ<jhkSQ_E6F+
zoGRkTjEl%eqt=yK#A;M)=o7sU*Mo=5($5%cfKMLpIfQ?usJIS?kr7_$iqzl36zLDd
z*pW-+M`%ihscDKL($aKPKYd}c>=*q2cc=CQmD<&%fR5Y+MW6If^D5uEmizQa4XB3j
z6ZCD6&ohvlPH$Spm^s4@NwW~??oePZ496tKBi!hL0i0X=b+(t;n4VF2-Zz=&2-mqR
zCLg8<p@x5g1MWF%FNu`}%VUoSTHD)5+aM;yP<Tq@*5s__Q&Qp?hI%P4qi}U~W^1H{
z26Ok0punHPuNBAQXBsC?iNa)L^55vDXWe<y*jbzX;(2%^#oyD{x!uUH2ZV?jd473e
z4SsR?0xe6P3r}Y?K~b%DqBc@C4?bnwg3qJ#t;FTG#RbLa=-ZbQ6pCZ=48zeQQXg6=
zmi0~Y-7VtX4f^FPvsvBpvHvl+UD^3F%wp~@!CaWai=sqI)bm~jza<)@N<r)g0LtNh
zPogFzRaU{D7l1#&FgVCK&cn>5|3AgVSq3+sfKFOt)jHa<Jr5>fP$z`U@xCWf@bE}T
zX!!q`<UepkZaqC!`rm!VS=oO*0WLsRe;WiHVP_7Bog{YaPoIR?oy4#p3DbmhMPq5n
zfQlLbx?8e0MF+LCZp*=4Py&!5^1;xtfbHh-V|aLLFr%A=MG=sBaD3<oEQji3UPXl>
zhm8TJZr2N2C|--BK1?-nq^f`{I#kl6L>F6{3JMOlNY%hTqNAJoC49Xw1-ReC+>hpe
zbv8>trUb@hE=L;>U@HJYDlX0*s@{e4R*F_zq?((W8f3GMu~(AOB22;UR82oVfyfUZ
zB6MQstaUlv+aIMBMs<AYF-StSp|6*D3qE5ClHvXU|Fh2j=OyTQq=8)@&~r1zi^Kt1
zQ#H1-4<;V8`LJ`?nds}58v}q0+_@!c*4EahGgD>qc`E>J%BYN{pVU&Kp&*r!4S)W;
zQ88Nyj@d}qwE;Eq5bBKz;h*@sSsJCw9*UWu&<Avo^&&vdAZqpd8t63zJiUIr(RdXK
zSBftNasMopeC|@i1?*3glanEZ59xZly}27exP+m{kPQloKWO8e930Nh?rd%sI?G*+
zREDTkN~%fw2TqVz{0#ZZj?PP`{Cen@g$xxm+92kd7C|MtYv$m1bpcY;P<2^U)M$4!
z5ird&4<XJ<Y26;2K*VDM@kU<@=mD64v>2S<+G(K|xB@CcL6I6Nfprm3Jzb7sbCQ^t
z2ZHcb63I~_=0=BaLwY{d^XCNk_$>#>e}5nR{u<RBrwXHf3KKdQxw}J?9d^ir7~S{p
z`J}xd#a`-3soB7F3BBs+jWC}7%3_KD;jF<8J&Db7aJ=*}j02LO59MG9;zrOxO=D|g
z1M(@5khXs9hd?kNYCnR4jEOnz-l(WJ!Dmt?0?1c!NlCC~dzO?iDmH*=u0VkQqrD=P
z`0&sW(4?Uva2iUGy~X@Ke@^0dz8~4&=&nfxaJ%OaS7djvX!P`a_J5dr>!2*xsC^Uz
zP!v=oq(wGL2q=w|s5DA9f`W8+gNk%_cQ;74ba!`m!%Np$==YsDfBgPCGiS~_d-m)t
z_}25>_r2D&u4q&OXFH9q1zr)buSIbrgq{rsc=pR+kaL}b-WIIO<zVNFjr2ED$^jXi
zd8h)AToaycw>g8J*hJR!4)7t7ky%UcTMs4+4}*h{Bw;*ET><CaJ9IcZ*?$30XgGtW
z{uDSV*WL;Oe(5sE-9W|-q>N4&G{dFZI5lUF*jlsU27B+_=C=SI93%-ozMelC0)?#7
z_Gk)j0*F$ga+L<tS8%<Uxwh@U+EARu1b#-Eh_$uz^}0h4bC!e6yvuG5i=bSM!#oUV
z!AAi;*71H)YATHGdj<-nXO?|;cb%EBV8y*HPTTfWa0Q1k^>0Z9H~+;*rRPDYp~ruJ
z;<K|qI)dN2Te}!ci+6U6LM%}+2<I>%jqJUPoLB<PtkJCRKY5i0HPBBztQ&$tLMBFe
zpavGIvN@QTP@){e#Kmp4k_{c`?&zqr+@=lP-}<Z!-cu-SsH|?T&APO;!A4h?xnhrz
zU#{@peH>_mutconPt1@FW=PK$U)ybr8r(hi2Osyz$<OP9x>+eHkMQwZVAuC>$x+6}
z)0SU5qY4@#{d-}EofRG3DFTq1yJIVP#DJ!OMflRj)1$h&cBa;;?7lUx|4%S;Y-?!&
zji<=#pDQaA5iQ=Pj~biRA#itQyhJ%Dj7hhtGZNz#%KZp>^)bk!14Z)}U0dh9R7q}L
z1^iGpHa7Q54f~swzkaQ_&4IX4=_fTQ6O;6RPG5vek(#Nwww_1mmHetD@$ktV&W&AL
zmt}sH_NiH1RrQ^!gq?)yI|T)B@dlN$wl<zMGB2_<xlW0gB;3J<q@*fxvwwr#dE?X8
zbFZ>Iv2W1YeNhX%03N|i%QQv$u3gYbk!~|6u|d?~2u{o%>SAwehlUO(${3WG0gM0_
z<JVI(oWUSX2HA0PTAG%oCXm^0qfuMgRD+*N4tN=ZvVcMqHaWcQA<3za<X9Hq?2IET
zP^9BB$NWC&wnEaU=yDbVRx4}kzVZIlY;JqBFXvXMyn>~kOn+BK;mph*cpVAuu!x9q
z7Z;y|nBNd^^Y<g^aFPGl(AeDU@(YER|LSGK>t*NoYunm7X^sQjRIkZ|y8QeyM*T4a
z5L-saReXJXU^JhSoV@5uGHq|ibsvx3Y^h@u?wh!hoSX-n8+t(fNzcr@_Le!C2zeno
z0gQ`6*pYzCAuKGMtz0$K-0XT!y3%^SH|O&i7!!jQNnY;$qY?|AyU=~bA2)*QG8{%Z
zp9_*#C)|j2hq638PQlS|4Uld|Lj&N@l<Ae+zO({nAvg*pU&p>tu>akz@uWix#2*2R
z8Fs~MStjhw)^iQ{u=zsgSKp@N3q8DuNC)sm%5E^>&_;=hyTETrT!Q})ysv;=)a@s1
zCL>+ZGBEt^?C7xDooj^9JYYp>ha@k~CGz{yfzq1Pcd?y@-IBT6V)G{^WTJrpy2gH;
zNuxtR0ohrB&+AFKS~IQ32F#Jf9)4>JYMqdN0c!#7{Obo6&RrR+Yfcwf3cxN2K7OnJ
zIfBi==u|>oXNG*ik_&ny=)X6Ymz&X?00k*7{$zD5YjEej5A@I{d)Q!J0HQhf1zBKX
zgO#Izz{7A_I=WaU)8e$-5c=TecE|rZHV}N<p7ooKU{dJ+laZ?Zdv!4jERF9@r4`%^
zuU>)s*$)>zaEu4lE;Wi++yAKgki?d-_GqX;>%BEGS_$(lFm!@%IW&g$bOIL|LW7Xl
z*jP_b2KdtdJ}C0uRsV#+^7ns?O7JU=dWQGye~Ddjtp5iUDDX=EPvX%3*MH0l2izxV
z>G!<6((>}sf`algGCpt&EXcy<W@o3Qq$HxJCt_wMB_xD-{qBK&j)ZmB{-SM>u`ukm
zu#k}3=?TqCgsF`UKK%H4scW-YlY?~K1N&eF`_V4ve+&2E2j3mxBZ;*nC98{w;Dak3
z3hEgobA5joz&DpLKc7%mf=wke)SEN2dVqGr3|_|Pzgyqy$X>kA)EGKFJL<{(x*`pE
z0M8IiFL#=K^E5ig=5Pey*D!#p>CC5~kRliu0uyE-H{WZ50`E&MuEUFp(3BL&={5QY
z2GMV)48_4PR!mYd(LhIDUS3;!AVo|F+Hvp)2Ge+cetzIo{Z<vvRZjf#$M?GKdxGq6
zDVM7}5BnMf0DiAgBz}g4iHQl*3J9g#-Q5N0wb@iycz7$45cwM=;M-8#*97`9u+_kq
zrr=pht_nFN<)dK(c<tAozP{qp{XPAegqWDuoB5?`8M;wRYby}m#6LKF!U9F}leepU
z%{pi#$n$VC2L%VefBzmBF7my8fq`_X@$TZhH<02!{BlNFBX|OffQdXgP3H}~tv<RE
zH6w^%@0*6(`U6XxUOXA|vu8gqZ13Yf0-vYnweV^}9x(aLrN0S`56?xaKk;#KZ|!H`
zjQxhB4uLFKMD->nyi8q{86G+k5;x&eQIHC{-_?Q3jPz%kM)n2<6H`$`!w02`8|t`3
zRX{z$n*YN4UQnKi^7Xa4JIJpg$x0m?8yJ>5xb4#4A*qgwoZR_FkU9*WpzX}kqM)RF
z@q7*q<GP54XZG;;`_wAePyL4G!}nWlZ{E0gZsA}<03iawc+H=F2au~Lt<MAa&*uwk
zlvE(fD&<DL{=MYn{T-zRRdPg&`d#-rylg44q}w%O|Ja>7{Oypd$H$&pn5WzXju`4D
z$HwRw)c^gw$#C`g`W}SGvFT#Qd&Q!!<|txc()D$dBk)s(v;4$Axnp~M`&JpWEgP<R
zNuNU^C;wa=F)Sl6vj;`r^<TS()r@`S5!}{4{fln){-q4w7?ryud&*#L1KM3@0s08M
z6lR7X14ZH4@16@saxy3&*2K|7#D~fLWy~UpMR_p)iB~SkXl=`1#NVMsa!2g!E7(3;
z+kAoI82gLubHA?iH{S0*pSu@SP|(zLw8g1nuq<esL)-AE^=iKPXlG{!B3;eQ%`G>_
zT7@3N-GL`R`e1t+ZnWfNX|MvPQ@N?8b`MK3(O%e=m6n$I)hjVYMcb+K6PTn?xorM@
z8^=zII`@6-{HSw#m)cH?Wry2CB&}Z?Znq<!EffxpDNptotxK`#o1-`e24NI=Qk2&U
zG7Ke4=lxFkfYR7<A@q4`%G`G6?J<-7m{|mu=}-rRUM-w+L_mOGF$)E}#6K*cGmI?|
zJ2A1@XS&)v61&QujK4QW3+hGcC&0d=(u7E63VqPBYWFQDbK3s%JfQeqSM&3|#HW;|
zq$!ujHb6#^;8tG{jy3e<kaTQvo^a4%Em!PJw>RsIJS8$ewrb!aV`DmM1ZrcT?J-_-
zJXnNKl9K*d40Um7f@tPXQLMY0<18q=bVcguG7VbTzb&U<A6IcGH9$4>#`f@K?Ks_!
zABYmLS3uj_gZq^2C9CmV15DJnCJS77XjxfV8MP-U{Az6B1_zq;G};Lo2HwZuPqY;}
zT`MFe7x|JE;oFv@D;7-a3x$bmclJ95%xcIEE#GwCD?1p_8bWG&o}CkQ7ND=EN4y8>
z6be?>WAKB*+WP_%Bf-bQ!tFRTCTmX7Ou9Jcne-I*SEUQ(A5ptVV^s&>VURrt^%i@w
zo8##@v$(v>{}`CFvnvZC?qGv%Q)63m_2&j{LGa*K$<(&i+~&9sWZhFTTFx~H0+~06
z)$I6HXg0WzBP{BhJ_bQ@^xb5zRkYZyUZ=S{z{RqgfaLFHf^N%g?u{{ZXnI1-Gv7o;
zva?O!J;y|BoOoLAF9{1>Uh!w8r>9Sv+fMsB*dA>z&&7K=9<_xRXmX#PpxT|<?FAL(
z<j~HmyyeNfT#hAb523q4u;oD{1Y^EojYIM92A3m7rR{cgnKdp?K7_7<(_+G6w#Bx8
zaA0S-U?FQTG`Pp0u909KyM>6qZTe9}L@V{=*da+3mqsD#fR9vRVz%j{LX_<|loZsm
z`rN1v)*F}K8r&W+Caa}>lDeED7ryPORBbZY-%mY$@po<S41?1GKene2+8g|rWMnj4
zuQ{1}Eo-ucLr<n-D>F+>L~PGG*ADJ80Lqa#Pv6f#sTfR3v?p~86Nu~XEsn<tE>ZtD
zAOHY?<yS)5SV}<_^n#0invkJE^kzYS|810rIj=t@&f>a;g_3QWjN#U17ycyXSnd~O
zKXdG46|Oo0F#BN8?6fGI70889uwKOweq@pZC+<7Qh9fi3A#&Rt|EW_IfL>6fvxCoz
zP|#2tE@F)VcA3e^9(XWndxI%9MXI<@q`<ViO?z~BW?GuqX)F;tBnJb@{2l3Cj}P~Y
z^NdVP%uLJ(neC2uAHU!of)4Be=+clv3xdppd43f%(d*1=u%D%a7RqHOSA~Ir0XPxm
z-`vSRN&)-y3r}W9HrSt7Z*7c%8H!}qkMReEYX;!Z_~dn8XXhqx-mwB$O%^DSxqJvY
zpS_^A-8w(f=!{@+AY2}ScpyGLgp-<{9tW5JW}STi9g<Kaiz8QPcF1)+b&Z34gmjsS
zdStuonB|Jm`ch|7!v{cJM@nChHwFh;`{K;$H}$H4NEiAuuxZA3mO{ZGMC{bw0z;3n
zK_v&6nxFf5z)i#W_sV{E#D>}mF53VP;o0lb(^6s-dxe^k-*+pmjv6~Y|DahLQe?>4
zTr^)5q?FkE-Ai&)T30$Cz`s>;b|4nAN^pfhP6~N1lTfgxn)(8jvgg`AS+YbEP$p<a
zA;d$X?d@YY!<m655A`Z2ywT*m2-yNsx*?-UJdqDvr3lz9vMMUrqpv_^l@GprAYTPH
z8HKzrH)yP`F72Dvm6bVc5L#&I;Ck<{x6tZ|Lo)_RH-MUGk3N3!NsJA0_U4#3>YVRE
z^a!jJbwAudM8pP$%^Z<0fwPG^MEF7bjD4HwxoFIrZ!LNCu7|M@DeK`96Eg+P`E5hE
ze9uhys#H%*AnhGioUmxOn}>%&wI1F_h>X>Qr;lLNFE=5l)8ZBPiW)Y7LKHj;87`eM
zu_WaRjb`)J_*Y>++9+J@r;J;joh5D2lgK4*d`|nhvedFW=GNI!iT?0bXN@T(*KfUa
z@{6ZW@bS59FB8<;Lm0syN55?WcqHyhqz7xmhEtVn_M>II5Khn`5_x&N>(qDj+0xa;
z1+g^<JoMe3S|>w}Dvj>&i*Ii1yl*MSliVK@5)x9pF+G~H*WcWr!#xEpT1n1lkXlDY
z6N*N0FxfS@0pngIiq(D37oTme$(x{Xv4kiZzKq}Y<IJbxZN(2gz5~hOV566lkrC|6
zyq|Gl-52`wsoFr3pY%UyHt6Vb!EXB1WjDsZqn^~6yM@C1;q<!xN!y;71|OeO(fs(h
zA?<LQ2A_h>8^Z=~k-L=c!_>awD0gMzVir8Gt(|1}z@b|O`YjKxo|Ae2Dpn>SiaUhh
z2DoBvK7KAz>Tq!i9%dA`c;BbZhwh60N~;N~_-PM2+`uT<-(a+f!DRrW`yR>(5Kn92
zAWKs4ybu^j*9AO?4bVv)L&Gb?s^lASFdOvyA`Gz@b&VgMicU2;jw{qFS$X^yIHEQ{
zR(YTryHrpSlsWZ*_lQ4|oQNrdQb4G`0b6=pBF5IcNtqt6<MMgnbI~%(tJ$B(o|NT~
z9-OCnlyh-*DE9LcI4}M-E1jjV<K`s=|6wT!8Jx=B$`^1VmUKokGZ{`Lz{-P`aq$_l
zwfS-v5p8eW*ITDxC>aJ2YEPym$rLgd5L13JR7@Dh|8ZUHOUAN}m;1v%?K|O%6z_Kf
zcMGgLQfVkv;%~C-*1H~|6EKazsWNGP1{=gK*Fen;479gK<03Uru-JQsSs=KGJKF|i
zB3Qq(!0#FiQ(p^;idveOBruY1m6y7mJ%s>g2noL1CUQ5h{CSYUNLu`t-Hr~C=JAq~
z#{}w%H}&~o|K;SI7Bh32YHIi(`N#R*ky53V|K;IY=lBa)ONp`RFlYZ)N<5VK&(}S<
zKQ4|sC!QsCAgZs~$j)~NSEj!K5hOKz%c2@}v+r@>KJNHRZz4Z5ywCywI+r3EyS2J{
zvfBUR4S5*wt9hRt?(j1vt<-~!5#UhZADIo?01<eZt@b5*If}bfRM-yDuMec}!<hkq
zhGYaixT%X>ZNk2yUAu3m#JpB^eY#_JRTbsugB4cR&!0EdA$6D}y2L1z#P7w~&)7|d
zwb67XrrMyBU`4MqF~@WE@tg=I+OYe~c7^ZxBr=@Kd4x2|eX=Cjy)(vdk`zhh7Is`=
zoU!-pYL}Vu!j4~7V!6edtypmiyS0~PldVIO*QgVUqEv>I_8E7@N|x2+7!wzl^GQ@M
z;H$;@3d>Qh)yOaDez|tcB&8-B-z6uXisOJ``7g|_bAPV7x_8bD{cMi&eCS|Et6^Zk
z1<BK+1<M^#ujl*7r%HV9(Hiw#(n!k64lizTqCxPk<?!T1J|tDKaJjW)02RONc8ShA
z(vbfy-)3N~#syFc)P58d{P<NhDJ2PQ=#ytlYr824mA7wXa8Oi3WLnq-k#r#*LK0XD
zok%%Q<Rm!y5Kr1hy)pMtEqWmu)nXkbdtH5fuMzXV4eaw4tD1d@xX!AfP%GRI98W5#
zNRQd6!{GXu++F*#(eG**%^ZD0q6Op=KNE<5>IGq7V5DGZ@+`mNef`^B0}c5(NRN5_
zJ%R25`lnzUv&L+Q=nSnB2H}p=r~HkLjnkv;?X@+09Gs@7zQlaUQ|^dqg{t<+*c%f;
ztu`MAlNSjxR)mBE#Ogkj)m62KrevJ9;;nA=!aU>vKXau`K!A<+xPUu4C1ojqyuJLK
zU4}eb75ZcIwQrwNivSq7^WaM8tB?7*Of08vmDX+_4vm7uLvSA%Bw*Pn(Vu+DDom$?
zr6`|gGz-%S;JeCZE7-%?2{5ET2Xvdzc>&R8<xC*{4`k`OQFj94?9}$O@F2K7lrlas
z@x7-T78p^=zz!4*_nS&dS3|=>b>{fW>%=l7{$g-`h&M?QiP2Ltb)Pah%KpY{9Qge^
zl85R`rPA-V0XgE?3YX_R($m!k2}}}lzuu)HLI}dh6k$mlyMtVPmA`d-JhCrWr7B@F
z$*%!oTvlj~>_&%kIZZ~qV1)q20brQqD=k>)Ad2YSzTcVb%jS4_(_p0c9<H(DUptEL
zX>~Qcytk2=R4?AGNbjsPL2lXs0+At=4pEt*z-moPqiAx(zj<*%`3>YIF)=Y_KWmSN
zf8E2u-I~FUa}xw*3#cEapp5d6gqRQMi7{tfh_p;7!1c&`^5h94^b`|iruX;MbGEZ>
z+7=ZvWtXO?gmzuj1vT+%TVLyPO`gTzZ)2?ve~|W7CDg2`7HkzDk%?Ef5{lBCkUiv2
zoL}3+uAu!~L4S#kJKyB9)>GYiuwMDq*cP#(zHOwtlr=h${Md|(Lw)ad+uPC7GT9tu
zfZ}gb<BXSFk%8GHjFll|92#<iu}bI2tz8$(n>ALu0l?>%7?|;PMdiiQqg9bt)n-%Q
z!+O4SgC2?!^t%{Sh1&aW{$%hXUv+IELgvAi2IG$@2u~`iDz==y1VcW=k}E4jg_w@i
z<$kSvpZxjE0^}SCE8oNA8I0K|^CSS{baKTAkF?BJDo5<99YF?jk6DGT1%lzX<JAuc
z4BMV6D1p3=IiXh!3<YCVuD_w^jK#?>n7^=%t}%*Hl|aQH#%I$RaPf`=i#P{(UvY7C
zb7*YVd$${lKgq`uvl{ilFrvwaK(=TtS2&7xm+rA*q1Nk*M3D1){cV%}I6~N0;={&$
zaV4j^htRqbbA+)xtcQAfMQIK$F!d$x4GddbTZ8f$K??YmvcyOu3%DSAZS7eMsMEmZ
zkaFa;#fDt%Qy(^N!@0RePbt=D7np^-VP$>Q5?Zo5jq!^k^%(i+uuhf^O+O0F{(@pn
zm{&g7FX_qhof@>?ZP9JgrtbGkkM{d_&<>)=F7|hl`hRP0mVY!0i43PSUiR64=y?NZ
zJ}_BPs_qEr<KiM&SX>0&)|^p&zRJ}PC5N`R1xj12;%|L%lu8_KQQKU=rZAG;4@bpR
z)qcwUCcrzAExE$D%3@0pz(yCttx~Gh8<wxOvgw7_Pbmtm7F=q`s8BFQhEf8tJ>9)M
z&+ic_7t58Hmc*#hq2;fe2vHU#j?-K)SwjmIiRG%_8Y>#ilwHj8x7;pQDzmfR`EqZW
zomPLmsNnI{M$)8=3^=H2gR<)69<D}rj46<P(a(`w0|Vy)kcGTeX8kE8=-jubIOl{|
zO^%H^@tG(h6B6e3)Z4dM_YLx`4-u;kcjx>2`z$tp<8#>^gHj2k7s2%?{i);S>cZIy
zS8Cg|e=_7wUwwZtNg9CWk?`!P+#N{CsK~o@ucD$6W24ES;cYT9mNv5Z!^h<RNte%_
z)hl-|Cf-IqSUI!ps*i@p<YOb?Gj}m_m>`k}*CPKH3((r;vd4f>7Ry}Zk~MhY3GJt$
zud67o_w~1eZA=7BBP;BPeT`dzhQ(P-N%oTa=?3+~b`E<UvZJRWmsQxr-WP^F$vsLH
zn~hAqp~M&!TTN}QH$5TRqW8`ZY^A2{%}ttT&s4Rv!h(a%PZ6s?PXtR$@KW@}W6-Gm
zi44ZD5Pmpb<5=VFe%HIGuD%}1Xt2TT1g9a%U%kK8g%uSQ@x98*%Owh~tA17!Q&Y>0
zk!vd>NMRP@o0y!uo<?bO;_KvT^(H`E6qwUsak)Fq1;oWY#kZKMu!OKE`TIhlUzjQc
zI*o$)Lh;dcH_T_WP0X0S?#gB_3!%9SOie$f`OoH~;|ERWa_g6dDq+JvWltFBt92Pv
zl*HsVYnl7;JAKy>Bxe(AdQx{~F<a56+N+acY>Xg1(O}TmpY-#4D)R`aH4p688mX==
zObJ#Aj26Sf!X_&$V8e?nvFMqJXS|s!V>B=AajT<~1$H3F(s?T{AFeyIePy)~CcYsX
z=pX#?qu^|(GU@Z@GF{qa6t(eQabEZIDeNGmCs8Y4*m{)WT3SG{OqfPRMTJ$gqtQ9z
z4`kvleCiy2-x!eN!h|gvOt`P7RnG+}f388<-ERFSYliMV5ubl#w%q3u11PEbpMPv)
zMZJx5sd0+Zl#^otaO#YqbgQP3o!OqS9p2Dk-&hmDb9bpg+NrlvJjJ^%tyfBN(K~bY
zL4hP^v{;Nip_#CIq!j+dNfikPuT{H+mPd|`S0G-dQ?3k)q*LpPVuNGcaIBEhe!2p*
zp=oKDIl6KB+7rBj&0sJ|Q5T2gT#=y;vRA-r0o?{~F>>Nt2TOBv32A99k#1N*WIN<V
z0-cL1nm0dXQclM0EpM3dme2$lh_SJ~C~&>PlMnTlIASqcMM<Bp_UuEaBJ@NgW($e1
zcx?a76%<$yeFyVpdHi}wy?pETVrto37VXpRY?d6w&zs|^%aB);u9WL=5g4M`0mhmd
z1IOnlrc#tN<n<1>1h2Sb=&q8&0QyxIC3{zs1P&035AFfN+2-hqYlG*RN|01&mgt7r
zkDgO~j@p5CS%>wB1qGehZf1r@2wp*+bn<%jAW?{ui_%9Nu#M`kWY`3r4aN55^5x3p
zVoX|@u1(wGp}C>ydT)<@QE<FL8b8A+I~`RS80jy483UftN>;t)NU|wE9xvj9Yb#<<
z*Z=Vt__5_#?`z1sl14?wnTSe+vv=Y`Rlas0{<_y+q(Tozd+@~o2jFP%ARJMSJ0=D2
z2(mB0<;#sH{MS3Rg2(|{$Fsr-JsF<Ddxy=|8_N~Lsz*WTa5F^o<;8>J`7&%17F#1w
zV1<N*S#51-!`4qmW*~9*2NckRoF=88D-Pit)7UYEr>?X=D=ySZlt8RZCCcwFL4~VQ
zW&)1K@c14eb@^G!q>ujnp?p=1O-*lrxQ*vWMt+Mf!EV)?S^blneMM4r23%Iv7ZQ9T
zi@vvEO?xI00Qi!cTh!Uv2_ay7zQm9w2S(9~bH&NtA{3Jp`9Qmofh4q5K!O6ug`e1Y
zrcD;0ArnrQ+&g@c;G5GJGbuBiL#t3(sMg#S{brH7)RcwK=ltjy7MROI?~GO5{^0zZ
zfq?<d{m6n0Ms*L$fA5uEdQe}rKauOCYy4<z&tSgj@dEx}d_?!9q0;i!#oh+dnfy{m
zcmed4P)|d(=<@3qENc#s=S!n_2zz;Zr!NC~@ah=n(Kbun<#s0R{KH)b;fgPgIRFW>
z6=>oUlqi+yeB2z1sMMOjIO{Rjm4(P-7<6BMQ8mia$b?aJqSK`q3i4G&#KH3<oSNLS
zT3Rb3`D*gmPztDtJ;Ho38DJ6d>Jh2T=<U9O2H%Rjn(v{Zn$ujI&;}T2gm7!G17*R7
zi1UBcs&Q`zQ3#`AN%a40^SzoYm~gu#ze%8hr@hE1)+z0$%FVYU>Cw|p0q^%&4&BJ~
z!dh^<(jVi^wd)DN^+P3?dPcx*ul(HdEfNK~^CL$^;$4=&5P!i>LR5xo+N(g)JQVJI
z4egZCk@zY3Z5SmrHcCon9)`S)h%kpxBzgvhzY_32vB^p$?&#r`$GsyTAv2vG!qX5t
z2yC1#(Rb?Vi^SY_g96WvFg|eF9ys7Xfdy%Akk5M$EEitnaG0-|;mRIWSZ)$UE1eyY
z$Q{x`Jczowd4KEZV1K*eY#sTtXV0?eA!~dQL<5U@9A+asx-vt^%`+9>R_VpXdp!=t
z61*dseV=@lhzS9nIJ@PhIRpjfjt}Y%bw(2WZnNlI<C}l}G2LjR6gHyGzf#>lB&kX_
z_$@4oq42&nqlv&v5v89;b$350*%lW|>!K167Y}!M{-49w;2*!eT*lC=syG!(E?wC(
z{QPiTT&{eoycM26hFIY%#w8qd#V6J_*7-k`;!HzxZlNNyhl>ZJMj1kK<y!CYco49e
zAV!QI!_o9rZ=lk#W(vKqNH#~I-67{|J-<i<qxxpVAdNTr8DdMkAmtPs8An7v<nH??
zzL=_U6t-ny*0Dge#79@WWMo>;%jnJ2l!Y1D-|M&2Oey=vKPE<5UM2J9ITfOa!#)6y
zdj|l4*aD62<b2DMl7uEOGf$`kpLBWkm7%ILfWV>&i2!S_AGETz5%a4J_V!W)WV);6
zc=~%i41D|RozT|s@#$1tj7pS&$!-l1>Gkz>LgS6Fec;eUoo&cpes)MqOoV)CT1wK|
ziz0Cunb9iE*zsGwYRxnU2k51T<T4)a?uPW!bB8m%z^kEnEnibx*`mzn^(w!(dUI_F
z92}mJ#wRdL0_dqW`;)CZ26<_55sJ$kl@gdAmJ1X>bqm>m?Ojv;HZy%wAaL0p$&XZ2
zOyv8xPQa`b{`0O7HF3FZFX`QT!Rz>cawf}p`F?E|jRgAbIQsyZ_OfA@3<m9S(q>PD
zL$i&H%*sp--fSy{L0IOe*w_0LC+!HY)5A^C2UHW5*1&9F32{vD&gvwpfcWuV88fNI
z?l?BPg%7X+ru8Ih=8iKTRocfyv05tt=w>Sc$&)cmwipK%mvz|Y<_C3j6=!7Ix-u+Y
z-iju{e0)tIsa=pbUZs09wKhmi*z~s^mnz>wA)H_vM>_X(={(0Yih9F4z3kd2V7}PK
z#K_0Qs3&e=tMj%qEx*vK1CG<K7`9HT_W)9DPg`1;n`;B3JxJ=ZG7mhx`DpeYqcauZ
zBW%Vdss}5}NYRfeRka3M{<N<@$}YD&G5}JQwp>nTrm!dE>``v2r+zI+O1ka*v=YCK
z6^AAwHaM6Z%+>QPub^B)!B{a}U-IU}IRiTk;jE<W5E?L`CFe9-`Et*5GDR{)f<xSj
z4je_}tyE_dtP@3CSXlJFs?x7r`SQpsC}ixsZfI<zQDUWg@gmje!Q<zjl#6u2R~H0r
zyb-A%yKCG7(%kM;jVawCCFMbO){z1)kSVqN?N&8FrER(H*$tHm4?hzPSEim~;^MF=
zx2blhcGm5J;08lOerM!+xVmY>kkd5)9_ti4pykDu24gK4>Raz7oD^tug|Rq(%>=Id
z;i~n{Ottz|jMcNZwI7;4Mf3X-mub(xS*wjR4y=oY;9j)5p5SK<#^-92V}qMx#R+fQ
z^p*&>1TXeQD_C-;eV%arq7QZU4Eg;toToIjO19hJ>`*~0if3FRrNFp91dc?=?<SjV
zUxp3kFS7MrB^x%6ckh0}#5zaf#wBm8GN1zZdJGOb06GCCKRz;%^c(1Ig6#}oZkhcV
zyky(U&DZ;=;38}JGeaKjOUuKC2NL4ay5MP^x}5my7u^lfTUvgi!GOLDrAcQh6zMcI
zHC0zDgCfhr+g*D^EERf2lBpVBU*A+_;3+azri$;*lD*iPGF|B{kkzh8OV1(3#%}z$
zCJ%TN^mL{VghbaM1};0|CVFamH{4cS_V_)&)z>kpwa3B092jAgZ`KlXbGx%6hj=d~
z4z~I&uN*vCa#dViT}jyN@+6mOuN?2=SE^Bb%$>4_WYM>zEie`VbZ@&qRYjYosBq2G
z%?-R?{FKAN5x>fMzr3Z^i-_g2>0_j7u2WO9uRpoPNQGrAU??9xe7JqgozG#Nz~4Qk
zbOCuYAmu`!ftA~vk#U&!E0>f%=kIj}Ub5SNhYA}@%6^%$bmnU#=~ms)E!;Xiibp|A
za93W5)i~VB;bLZ9+L{~>VvOdrbeWRRn627C2pXAJiLPSmkAwO5ix;Rzt`Aniw?^`_
z^~Voc+hKYQWZg28XrAcsaKS5&WO4M1Z%B4-X9x{-_19cHYRBNZ7{g_5Gq}ctg5rIp
zJ$@Kle3S#Oz=s<(nwnq=)*Zp5+0rvR@yy$tB})Yt6SIS=6>K}f8f2+U@$KSuVf9)p
z#n0cL_~FcSW!cwzWNO<#@mMPDITWAZ34*1FjWrgR)jr(G_f`O@%otp!;Mt*D%?K|s
zoEpeVr+xV{3QDr@@B^^Z$WZ!i2G;wjg@tP{4+{xphXSk|#!BJx;f>Ukc#p8LlWRF-
z@o<P`&aO0b<Bpw(0r8Ov2?+4;@uA&(B4kZYQJiME)Ipg8?r#JjA%ighrXs|#pYL!5
zl{`6|eeaJ_TwFZ+m6w_lHC?jLivajGpa~0V&&vg&TCQV%LeK(Mj$dS8ba=3%XJ*t*
zxYL1}gTQpQpKL$tIpU=!!XT&XPl-I(nhdSe^<XHq{w7~*+l<ZS=mEl}`51@UP|oMi
zT^xo6`=HBRfDFr0p)n=!3%5+Wz7j|^AIiFBzNlOc3SZ5nY@^^IUB!vMv^Plq<GV|U
zjFZUkEm!)5mc@+ljoxu``*5i=*jvx{dFSQjA@47X6+rDT01hh@jPBG%i+ki~?4|2G
zl^mQAjM_tm+NOqvh6;$oy%c)#r!g^CD1=Z*_V%PTqPa{!(!ti&1Nb$GIa*B2>W1cK
zd|V|9|DYhN-8nX$sEB|)7{B@Y`?m?TRfY%&QTdaQ!Jf$dF-Vb;I@2f^mekANxNu`>
zbkpk&_W2Q`oWA*7VMbwcA934Tv3Oyyr&gs(<Fgfp&(8}gV|89$^3$i{J%Q2D^%XcS
zd(n=H4(BcG0q0~=GE^q7uo_s|*s#;>9uWfFH?nTo=B0eO-Hu;;EVpCIu%D$ML_*UO
z-K9od6Ixxrmz<TQG`C8Mb!xUfrRK5P@QG+#VPjOfiR~q?vc(qbYIqE%X@sqG87|K1
z-@@SB1Y3X_yzzmx0-(f7>;WQ}GDq&`?y}bZVgWy<@$9))C52+8PaFD5ju5NrcI{JB
zIkMe3kcR~m;2=N01**n||FmJ)LQ`dHo=EsZnhFeDU^pup!Me5Ju7((?vUQD&6!s-P
zNqr#Z$CGGG1&g^y6ymcuKTo2d7hc%em+Av7Rc6!q#-Pgwu$U)!MRqu0+^$+xrw747
z9vH_!v&+}+$9eyrtSx?EaIllb5ZnY^P{yJ90Du~L|M2xB2)5vwQYM#?IJvY>U8I(Q
zes_GNRK3Q5cX<GOgS6;%7%gu!g5_b8cdS@aZBFz!vq6%Y7Eg0rLPqh|`R6Js+jXW!
zVh<n?0dCDyl#~=n3g@rL%aSXrOpqr*8f@!OWwJ2X{t%66tYljNR&peWmx6+wvNt(-
zNN3d{8Bh09>^Sf$;0)-V?<KP#;@}_-kNA`flj+viYR$$Kw7&WCO$9&M&m_>6*5{=w
zf4I460h#CM`Qhq#u2;>nvx)^A*cOLfK~HR~xz@&tsH>Eu(sK>-%-1pg6>^!u>zLRW
zmYz4-SYeL0qB72Cvk*Oaf2V@7bd8jOjEwB%%a=4X-n%snsiKp4)m#pB4M64S2Uu?T
zlYC5)my`65n5xs#vhtqH=FI$pA|h@2Q{ZOu@O0~DWKLJux@L+B0c}tSg4cvTeq7W6
z2YJ9zY*1a#S}7^#=2T%An_T&QQ4`O$Sa0fs<9oF2mZ>fo85xV!-|9s=+I`bF>=hN`
zCHl!WV+R}Z{Vax~)q0~Q__mRehE_*gM1!GnWe$@OKtb6YE!e(rJu>?RyXd{`pE`^>
zgXNm*0whjeUJxC;glqjfh@^Faq#g|&9bKXDcX_ey@?jl%S1fm;Jb(XCm%oIsA1)nK
zDa~k~qS)-$7JvqukiZr5M!mHt>GR7lZc7Lip_a*l<d1kw*~1ND!Z%bl%G5GBW!CGo
z7oY8~xXcdq7-((e3Tzs4CT%x~w)#oN6<Hv{`)g+#DI^fFQI6L3@`{LTln)NhEqgtb
zWeJV1cbP2Hr335J%N?F@*Q0IQe63vxAiTeKJ#?fp+L^h85;`SSQ$R>apLzP4G6qKp
zQ<U=!F`zaY2ndKdGiy&*+s;VlqUpbb060hd0nu?v^p;HN%qC9;t=`Qa{LL6wSQsDC
z0s{i(Qd%kA$;i;YejUFdq>$wGecc*N4+10tAX$y>_g(b)<YaYB%(e)183n%Q<ZNYy
z0`HQL=$dCab1`3R`-O&H`QYiVK7}UCvj(HDuMaC4iz_|pK0*iT*q+Mp8;w0m9kP6C
zV5kGLMw<gUwjKf@QYn9Ty)@L0&f7a@JuI&*%!}0E6F5>w{k*ZGdmdo4o4Og~GUO~e
z)YH>*=gtlt&E!+^6oRZ74U*}ssISbDsqtOjkt~di17`;$c}BGpbCF_i#4O5r0s;ft
z<RYcx1k|-910AL>Y*wBM+YwR7e8HCe&y!Nz`L{dfc9+vXS3d`mchD5ZCL~DM+37hm
z_YP#?J|+^6|F~D(HGIr)5fJ_R=Xu>pwdAPgW4jWdyaEl7DJ?fTD(bi4Rm^gCOn!}`
zs_I;S>J4}nE-I=up!I$I_aSQkeu%hP*-muWA|C{|^!ENBzK@pD!D_j6Evf;&*x5`>
zE>evM@!8@1py0BK*m9QZKSuf<i>7IWbWVSh+wvL4#OOaKv&%1cSdkpar#RU&w&wg}
z^Zwc-A$?cDxPkg77h$*p$zH3k8ytz~qbmQ_^+=9fw+WGIeo(QN-CWlF`@DZtkZ=5B
zngI)s6Mp*d@#p9vu=xHxrr-Zd-+=$Kd+`6sFZ0NZ{&IHo>`5xDe~9@m<?j~*Z!a~y
zqZj52poQKBdC$SFT0?7~D;L<~1)~$Jb;i~N4KJ+?dSYN$!afdZvrU5wi^d1bL`1N!
zzXAq~#w=Hv4G&N4d)H48D0%_b!BS;fy;RcDMZwg#K!)p^tG0gu_5AGSh1)pn<S@)R
z1fK*SclS4rQ+th`Pji&T#kK2xX~RqxjAS6<wXtnYmAJ(4f4-*~(_kDUF}qja+*%>6
zQl$zFk4fj;k2KL@lm4n);>&zfFo3F3&=kbQ{`heT$1_mP<qNeIdlS!|k=54>p=NzP
zGraI8yBb`!B;A>=P6IAdf2OP>8f7W(kKD`y#C_m8o30O;kMVZL*h8XIf!#^vz`!|S
zl4$IYXU`xrnWk?bi(TDA{_S@XBC1=*gF(U4V7L#^^_|T7s;a8jQX=1@BVH?d`rp8N
zt8$nGNlF#RCKIC$*zQS?ve2<?)VrD(NGCw?zqYb63HY!yIX3nn<e#;)wQi1;eHPC@
z6&+D?PD>vI5-NN%U!?`#y?ggQ@eug(BM<sBWa-{eQ9<$5$$bSr7@Q6p&40ff2WO#*
z56KEl$ftN%Sl~TkzPIp|AaY%aGn7kAYIj%dKTZir$uxRS&geGCLMnuWqr=DpB~j<Y
z=WoRYQa?>XtdnP!&UAHPZ0ylw1xtP16!aM{pUxN`tO-p}Av>=zx_Ehd?j9U~N#m`9
zZX^dvdHK;>s6Hd3?Ah`av&G(<!I{G_H)^dG2Ft<-X5FsfK_<o=d3j+$;ZVnYK5vBW
z!B%}RXlQU=Dk){kY?>HU7$=@I3d?pyfik>K{efs~fhJwg!)W_Zu%_!&$rFe(iaNOh
z!g!NtSc5~y?&A>f7fgI@t*TnbawO2?g?BdDy~5t($!&1{L8cLZZAH0Er;)0@H82%!
z#+14ScS#WuKHxFK%2rA0yNPjH&id>bINN;$4hZBI(IOhZT(*2|c^DY~p1;?roySUu
zKo%>PPU$_bkce_MSR`6~@RtTx>{*MCDyp8I!b&v`Y;R7<O4e#`g@Umiom^g}T64~$
zN3&3(sUp=3Bs8`I9tOcGlZm#=#aD$1AHa{`^F{?|Qc6Mhv|)=^{0gMAtg?rPhdSC5
zmG72WqS@30BcBv$jb-aLACXLfJx-8)C>%4E+e7JIk40f=fTtb>#qot>DFuY>DuS;@
zaAEG=hJQyCQ;AHr!u{$-v%O<*y8NFeG>QHN-sc*Jlg>!l!9iUb`QIsySESCe&~CKg
zJjBFQoz4{VBYpbvrOD<PC=$@2Ut>6&p7|gp#mLScx#$=_soU&x3$fA@PhHa1+^n`a
zmJEHR{TT*)bVdI(<eBA6m73}jUrPyzXTht>bG-L(=psZHACZZ4Mb|Xw@@Y>-R~&-w
zt!E%>eq~_{faPAb7bF~r34nvlYPIn-yOp)Zb0$IhrJY?_$x$Nhbc*i5I4=_Q&1P}U
zJYzavt>pJ_v_Tkp|B?Xr!u#6$pfKrE*4vB%z_Ijj{)I?6guVK^cGo)bQ{q#c;la5l
zuMm@_DC-$;C*;bLuF7N)pWT)pl|Qu16u0N`Y(($&UR2q>-qy(IID2@Q7vN5I6UTR@
zrh%w=fr??OpXOS1hS6g@RbU>)sEsxVL2?Imjnq;`)mPt{Q|k`aOKcDu>eg!=Fk%GB
zHjClp>QFZO_Ln9vBFnjj)jC)H?t#`(Z?qv6JzAwo1uI_|X{F%Gi;Md&it@fRTSJV(
z-AF-A-LLzMl+<{mbP?MBLY>YC^M1{97SWy`w_IKC6Ez*E0r&#`^y!XUWkH7%5Fek#
zR@F-!Q$3tzP^dp#y_12bQLxfjX58;$sevAUX*fP|dVJc?-k0F~NLJAGo6Z~a`likp
zWd|D@8>#+uN!&MIY(Bym#;~XKuAwPaf8=q`<T@awSctrU9$}%#ep48G2)2i0TV=xD
zwZbsJ1}Ip`4<{F_X$vrZti*NY;)W6`<pE|<DjBT5m)!)nub0sd85PZpn3NPi1wNUX
zaBT=^l~@O}6%D7T@H>DSve4lE9zkL9RbW)pB@`xq9i5Po9t4^k<;An3c-Ybt>!R6N
z0K5r}h#({&Xw2^G)rO}xI^1wi7G7RjTEZuAyc(WF3ZC=n%)a~h`QbXtTM>~c9AMxB
zvYa-vww91<7?+sX&IH6ydnRk^>m>WHr1&O)kn9F6y3+tNqpv^l5j&Gyg#|YGy$2IY
znh_rXx1TFc_{y9+3JbKf?e60j4+xm&z)*dEsSA7&N7eFG#Kd+cP8f=hwyuw;C0~*=
zW7|g*tinIXU{JYrURD4WLBb*;agXRM)6~VJrIS@!fmhID2>IviI)gb?I*T6g(q`Me
zriUAV=BD0o+@87sci;-0K@SY@r_dk&Btg$D8c)H)GdsNi4OBG3w69@zyx1V-l`$sr
z!>Oq$0_Lpbwr~wey3cJ7zGqO&#IhJxZ&ulY`Ze|2KFrqaPY>sbTL0W|;v_D^<zlu;
z0l2G$`#W2KOs=xBl`o9ZzJ4WvjkN;}Wr~VQ2PQHXh}Fkc&!q}<hY!7xD?<E(siSaO
zTV)f8OC9c`15}L%>Y%!=u41p{uJ@1r0JzM-$;lUfA7p?{UD38y@wa&ITbEf2htOi&
zxieB~Tu@&AM!IkLTa#BfV#=G44Ke$k#j^^v^ynvsHe^l5a@$96>NdgPmXdMwTXo}T
ztM=MJYqwJj_=|eoi<BB1fR+4^=)zw)6V<@Lv&P{+kGN2?(Y@dwqOstfdY~=<J{-0{
z<cd^LsXG1P#NW@*x7-<RKfW}Sz$*;1W7%(tQ=WlWh?317?X&{p`EuubORH;4V|m8H
z)>BWf@6PWe;@W{;I$8rU^y*7FpO;``zV1}y+)6wy^A)SgpW(hwN=Zpdb+pB(GgMBf
zD>I(YC_ACm*2bGs5bbsae&^K=DPpmGhFSm3oqL{@4i_GZ;LM!X(z0_8_fvn#5MzXp
zz;PXtL;5}3E=_gy?#LRy>h;6Dy;8fAfU|m3sjFSJq}*IlaP@U^+TXr0kf=$5&#?b|
zyV7p4FYu=|A-KfXqT^0iT0bVl!ong%%<;a;-S1C*S+;tu2Ww?YR0&L%OpWXeTU%Zh
z_Jo#~m93)JD(sMVoGO#TG*a@%`j0WuaC-gDHSEJfi^5Wq#ox6~t{!e4SmAt90s<{9
zX~FsVsOsb}h<W~r-aM})kvXWBQF|;)ao7huH5oR(eS?Gb3$$m}*4EDx`T9$T2M@Rg
zfdW%ERhuvV9SZ1w8iDj<&qVput&q;^kfAvKD~BrJH>U^0Ja3O(f8j<ilrsuJ&G4g^
zV10vW4!ea?NI-$wr|J}aO-FmO_@rj^eIl1bM`!EwD~e;bV9yQXi*hEJVMB@1SB++4
zKaovg$cKhO7lu|i4c5lL>3gT+0LC%V^a}?4U=d*vK2u{u17K~0L`1yN(5${-KAb)e
zz4S1V?YYhAIFzkuY46koL5YAC0Dr*Ut;P3`PbD|-i-JH+cN=ACT5e7IEfVjmiDDq2
zaYEAwU9sF{VW;T90l@=&#^av&TNkH?*F2LN2b!wOOHpD7niThuoO>MKv3R_jh&*{Z
zoT=itGxHT7($#Upw<acYYtqy!!KvNBZh0#M+6;Pn2EijvG0J3W^D_1}M-*XV?!C6z
zhF`>DSngcki!=OE3V$9woH^QwZ$Ce22j=wroT_N_8wsoIvJ-<Gql?o;c1weuwHiYV
zjH#>ytWdG0*BTv;ffzQ{W$o?lKzaA2;&$-L%NuEmzUtl+o#*BmZJw%X234`W9f!R=
zC*B`AaHfKEa%A20^`<78ildc$!|B@oR8fVE)+_Zg`*jri&!UMkr$UwBeuL2GFwA68
zVW^nFtyS+RZS_2)sGNxygc2IWtR{g_g&SvTeb1Ip#Xu$`KYY6hx+@M24v3A5+E4gZ
z_o1-?pLrlY_Y^qTT43``%1bKM(>s_P5nixl)Cm(o-VYxJ2AMwaHm>CU%FShw6&0V4
zWFh~CDx0gUP~z}@+(Ms(%j%1vVY|>S7h{lY$_o(U4udp#eK;G)X^Wei*hB~Z!HQs#
z_~XL%NN%H`q~Ku3s)34v<5^Uw3Y>`V-%sz3)i@jk{B!|dx2>rnV{_wpxgRASEH@ya
z8%3RD!kGb~9Y3t!5teVhuEW$b6wfLs^C?6Z=k&710Ki)rd0xS-^<W_&x%j?p`A|r(
z#&x(q-^skU;BKgWqdBm-y7G6fuVuSTc6wZD<}#RzwFd*JL#zB-ijObk2(|dtXHHI=
z6s2;Wx;m~Nr;D9`2clT9&^^`_lIrDd#lH7SO3yesy=6%V&-MC}{K*Xh!otMnGUg5j
ztY;%=6o>ZOXlZ>A6cZy|TNs=GewPvS?*WW!)98UbH#f(qaa=vFc~i>S%gc;~1=psu
zyc{TW^CP`vAoT#4vOOeMudh&^##;g8&Z20OHVjAWsU;h}#=9C5>QCJT?~abLDRqKG
zc{<oZ^=2|DA~Q5RytXYUB*JE{L7X;}&0-<|Wom*ocARKC0FSC?tFN!WO!o~MiJiOX
zw`t{j_=mtT(1J+{%n6woB2SkNbPs7@ac)c{;(Esd_sxFi50?xN;^+tVhr5e<DheMI
z$4u$^fNtMAS$?!KmOQ@2d8X`A`HCqTWOrAx)GQ^xa5VwG1Z>8_#4N4>nhuBMoT@A=
zFg>jN46Oy##(Rg-r?k&Q!Vjhu!~Mgh$CkpKWz^L*jSF0RT;q304hsv-Y_>2l=g3hA
zPrUp4gf`Amr=MQ0uJ81)x@sklNos+8YUY&6f!l&~ejBlQRIJbb@}<Ro4t4yGG(W$G
z-dB_}0$@68VX-!m?g<j%&dtaydI*vYNI<n^XP+Y0=1^%eY=FK>J1sXcbNOoFwQPTa
zv-sQZ+$?wKdaJ8!p{xZ!Uqqz~6_ry|K!DY51?i}Wo0F-H3&eAC^Qx<wo;Xbt<Wwdm
zdys|vfTSFI)k8TpRrJ;h>C2aPa}DXRK^u&hhugPrDzd!zNYBK`m;w3pfq}O&@4UI+
zPuZU$$}(B4FAKF8TC7BEVAu|CL61l#xa^QyNMC=!A}~JeIwa;?(b}FeJzkEr=<4!G
zCYk~hbPS>i#|^p5R%2kNoRqy6tnHa^u0Dz;0%~SG&EC|UUudn3&1t2^8+3D_aetTt
zY>z$uOvEXqoVLTUVm<$EKX`3@y}7AL0wJUNfTufF^mTO8coE>r*$VjZ9BSN$D1QNs
zpltf>gqui<{3`bCEp3n%m*QZr4}rk?`q9|bvi(*uk$OL|MdW(YO>x!cLrM(n*=O$9
zUwu+k1l>{sBgoRh5fJQ>tAVRpI09RD2`Vv@&O+$4t4juuIYL9}>|)8#=(nb-3iL)j
z02A&xwu4oC_JD9H=RGAl5qBdFu$-6Mz<d|n`%`wa-P~Hvkv*^9M=lUi%Zx53)|l2^
z?h_4_nTCF@I5K%Gjm5`5XE&`6q^m*|fLRwLYuho2iTPghklEi7;uPZe{(xi(mD91<
zY?K}q^{lWE?N@eTB5*SMcg8Pf>)*RR$WpBN!4kd#H7krQS1HBVc19WIL$bl{Nd^XK
zAROB3a;Cg|6LdUruS9z|$H{5l9(3**!-M^aN3@rcc6j_xh=`<Rg*~U93b8D8Du!Ks
z3O2iJL0?~o0V<3BP*i!gYz^1qb57eu(UXmZm7dD7*}PdYu-b@Z)Mr**Nb9p;{4x^<
zLDW5(zh$?%K9^e*6jkvDA08HC8G-V}L)Fs--F%5o&TigCTAQ<{-`B@oKHtRq=g)VS
zn^H1a3S~MpC2JM`vset@{kgHz-Vwoe(H`23OZR#A;2x{(*3IBDTMHxD<w4O3gMl)|
z%%IJ&!FCUiHsvW_0!A%4z5-yYxVluA*$hS;3aE8`Bp5c01``l`!t;sNQT+zDD}o~!
z&!2*n51w>?_ke^`W8>Vq!0JR;`*3qoSY=z%gr|NOuRnDlU2(W|G#DexeBDtdSE1{(
zQ9cx<1)8G3W7PyJ4TxB<JE2b!cmd<-(ICfLKD<+0q6QO%*5}8&(At)s0$BkP6U@$h
zCX<Q&WRJ6~@|K$Kqhz}6K7LL~O}RB1=(rxTzueW-Xg{|l_TGn>jZtsp&erAc5(9<t
zu_>nM%FeaZ?4*VU(2iB>q+A!gxn)HM2m81=J-Q$aiMcp?dGkCr$oQA-kpiQ^#6W+0
z_u!_ulG4j6Eb^FINH{1;UUY|BSF8lWClV8jO4?&<Ar@;nQ#PA1nxnD5-SVuM=<INd
zb`vud(ynP0t35Cxm49R_c2reW$z6Jp=Hk2zW4CJ%cpy4G|KgLlSCL^ZueNJMOpF1u
znhp&*x~=QkmTx7cnBpr(48zT%DxT|I4rv;3VX2LLEUB%#?(*xlv{vBZW(6wOf$B7`
zoSYmClc=aNS_U2<(9fai=JzE`BGqN92nY#*Uf@y#kbWLs-sG^bm1hSajD}@c>Hgn6
zlCS1EBt!@Hfx}`Yh@va#67E?Fd^YY5jalMU<Zlmb_U!&5lo=!~#qH=pXCm(9=H?a`
zC*~hnwgVW3(Hdhx3}<<sko0j;@~xJxF52!)@$)iVp3l;<QeHk(+q#(v86iPoei0F;
zo!6|JSguCgYQy$no5em_8qyqtE#2X)YRBpHLJgQM24!Pi`2`6m@bO7~Sb(y{nL2X?
z{U%a^;g^jyoohtvQYM%i6%|S94mwYnts~A*Ui>F;Erm?7vU|7N(m7U9sKbg%tjcTA
zy4b%Y6VCchY(C3=I~$=tZrN*eIa6E3Hp&M4;8eTiUb3S(g1)eth6@}K4e>g{aM-NN
z%gbRY#&TP_NEg@T>hF#+3Q7L`DA+Y$_3_%S_=1jca0i<6O!Spa3Z7~6jt10pnYX3)
z{j2Vf0Q=q6s^{DHLLg4|HLm>o=OAL*ytb|p9BLpv%JJefcy+;jLjQxK7?6%rKeCt_
z8&{jH-gMf=#KDOPIo#}jU;W@;*ODet`T;pEE!NH*NceA)|BzEbpB-9{_x}%+`2PV`
zJMjI9PmytQa5#VRf2a9me1DoLbo1uTp&=G~@YFSi)OCe#fA3xRS8%q@EgzUG6={8i
z7@RInTMGg_yb}HKYyX1352@m|nh(5!g6W3SmoU-?DvM<5Cr@wh$tv5_xVRa}r2&2E
zBmC2@k<w%@uZ?U)7ATbD8Y!u%*H=~?z`Sp=qGY2P$h04$Sm8igovFQmnE+O^7%2-&
z=*3HrFG3zeg>ikvjdN~n>|kK-0p|2SJhw%$)*GnEcyPUR#tQLD!U6*ewEI!;lf-9R
z{OiF+#}?7zsW=F)U+aV_qjf$6YBO|#4gzMq78(FqXu<HNLJi}_jT_X|y5Pe?Lb442
z)z^AHk#KtOi*N7k?agW%NE0t`yt;w41;t*^oEIJgRMmj^ivqtnMI?F*SP5u*AhFXk
zn1<v0z1#?@j4=#wU~pd}`XM1*{sn*@3=Dx6Pi)lF0-@RZAJ*VIDr<@RYHDiKnFP>=
zUO~5#lS7O?d9RzM4SoB1R-BWQ4-5xzwXw3b4K7#)T}>?O*VXlPQ%E)hmL>e-2*jDe
z3`(=jF~}|K&YFWDIT9{}T%}bn?6z_|Q!o~b^z-|ZfvL_26+8)i=0yIjLJC^iPiG&6
zh1GW0dxwV5@7~SmdH$F5tT6S!R9j~dG)8vZ%*;b;V@#)MaDlqQ*;yDE5+$2`z>i^Z
zTXQ9Ew%*mZrzeef5!@Fyr;7HQ)tpI|XI6fz@AJKQ(G0Ha<rUl_pM*}Ap5xdaLG9^p
zDKQvK4OVzlh3f5x-6~v$ld8&d&w;?#r;Ck$3ir{uJp$e9^XF^+-k<4=faRH<{{GZh
z;CX`n8K~rdpBLwi94)j;+K7>|vwKo$Cx?c<VA35Bs5$2Z@#r=vTpqvhu{1Wm``|$h
zxM6}!U~kU^40!%9t&A27H+qJ~a^B;z+<LbRsl#nx;c{|vBAI2h(&PW<Pu%*j;XrmK
z?*XW7lFgjZf(pcL!TcB09PI2BXm{_5gXzr*IG@<roli`1Qu;&iYF`M=xK)+7TfI3r
z<vmcyl1!xyPR~zY#Tsj0AKum($`Z_POcG2nFnFNd+q>%kY_D|mizG9rMc@9MXfFE@
zG~2_C$(pOD!vu}gAl$G=w5$UVT4?#^znsgR*~AJ<#ryb-Bek{RhxDNBIm9L4cDTto
z66@BNvyV&r-}C2(8@=`*DTDwdn5eCdr<O!zL0AiQ+jKWnA3#|74YbIRCKvn9ws@ug
ziv`#mrO8X$pX^C*u=D`aP>3ZBBv6=*YaWXeIt3?98XphJP?HIy3RD~W^c7h`ha6gZ
zzPivT{JUF^&!kNL@TlN6H#GFDd=?S$!Wqu_%x$&f2PaRj6I!7_Fq}<{THRL>V{1BW
z70DAn`W~WvM2p?nIX%!NBYVGf3cl>@Vx@jDG1Wz17EBQ<#<VUEv9V#b%a@z6F;xQu
z5~G|5c)r91Fmy49Cq$7oHJ51=J66y1VI}Fb9#q1Nq11Rj-5ZW@Hq#}%CyXH=&Nz7f
z>{%OA;v-5Lw0p~%&)_7z9_dDaLku|408Xq>Vo;TsIG-i20R}^CRy(hdsS(eVs_oqI
zL7uh<B2g(Az2?ef<730(UJ0YTQD(OKv#4nB&krZ9$F%zKDA$vU?@kaL0z#DYlY4OC
zS}%n(0L9IYN5vi?aplT~9A?<=DDChc*&F!AvQA}L@9!NkK#CXuTO77HVWFY?HR{kI
z!vt%IOBf9BUeI)xmX}@g9?xdPvn-Bc>Ve}xY<+x9L;RTCG)vZOZ+8J*+`F38fiH(q
zW&N5R9F~{#`hyU6W+OIR-Chs4t#KqfYx$0a{Xs-giUv_erM}uY6gH>Yrp-C_XFd~S
z_57b0bp}@Uu&Gb8%goQVj_-o$9!sUwY7O^Izyf1m8Sk;g#*KE!0~Ip9zCuG?Un?wD
zT}xYA+!ZliXg2CGRdog-X9m8FmzciZXpk^~_qy&^%mHFmqfkIycYPd@wA8KAP$kqy
zPY=XfGus)SW`O-Q|82{539yEbL5<YlKCiF0b+|dcJyw)?b-wSLy;%h)XkW(T7cW6L
zAnXj3Y}jKE8>3a{!%jU&d=L!%-vX~TI%sg->uU4Eo(!d$nUPTho2gG|=-rZ`-rld%
z|5tHu9aUx9?Tuoh7>Ja#s3098T?zuy-6btu(y0hai_$6G-O|#HbcZz3-JH1;-)Ema
zzW1E(8{^x1uRnYoKCt3m*L_`c{^l<#E2y{y?nKjR+)c!+tmL|WU0t^=)NW-s2sAuc
zt6rb|0v?KjJ4KQ83a%2k^}UUsc9Odts4fyp=SL|WLrhFufK7pXg)@2Pdso+|yI8|x
z>r)TOCMRhmr|6$N0jq@~=_HXP8F!$s@Iq-TUekhL*`6j`qJXuTxZlvSGz@r@udg!b
zQv6SJ$a)ouj1K1753ork-Z~Sq<oKUF2a&kYkI-y?@qj~L5Q)V{M#1m^6wjP4r;+mL
z*x1Do$Rua>cCbUWjM+qCe(g;AXF@Z(jiN{-T`>IxMn*=6KqVY2qf)Qj-1n4*dP}9k
z;Gl+A;Bb4zW~W8x`t@c|Kea_OO2dRg>XLY;fYZ@7wD|LRv+4Nw%lejAu3Q<foSB_@
zzq!SA0T>z7nfB9-zDolxlcZbJX9dmTc(XIw?(g{;{P9+1mUY?eAdsDQu{h}Sa{_{~
z$;tZ~8X7I6ufII#OxdqUT>Mm5FHQansITjJI+U;<m%#Am#(d`wq8L^7;(-*&+Ro0s
z?t1UQ+~7Ax2OoYU8Wt<&CkZ$m52i|o0O6NL<teRO-Vft4vJei3-L}Ep=|vWYo#nL5
zu}_<#@&iZQmOlZqgvY*#ta-%XvEZ#z2A0=mJhc{C!8V)jDX&j)?qG%=eJYy}nwk>Q
z05t`;{ln(>R4uL^h7!!o#SOl<Y;Q$#IkjMd(SXPYIKyQcDz~?BCGoIBTzGvEUIYV^
z8Tb&(WT%6h3V{z2%bFUw{$;rCmEts7$}LY8u9Uh=gekwV?w|$u@x3ziG4CC4z#MG*
z)QN1CV41d7n3=5iD>CNm4ODjjc(7v+49F#tmR5ZTTTY#N7M#w~N&=~uouX}wCir7x
zz0z<g_jh7Psp;vbirO;+1GS;FfG7#@Kw8zL*_?cf0Lg&$0J@ahyStvAo&%X#l0vXX
z<cBpRVqjPG_4ns?m;<ub9UaPY*=?KqB<d6=(Nbn$90!IfgfbI(vcEolTrW2D?!YN`
ztWQgRTQeH}+|9#XerROGUEux7c)q-d%=YH2x6GHYFvTuAz}MI)$5N#qPn0`@_2b@R
znM>7`pxWA6e|)aN)XDCm@=*>+Ne#$5MG<Q7BXIvi?{HOzjbAb|{Clp}<B19fJw3hF
z%@6#jAYQD5;sj#bB;Q&frzOb7#>PGtS88c(4arx=9sJ<#zPPl6nU!!;XMY_nP~aoR
zBnkQZ7Q`9R@)N6c(k+Nqc1lc|b~L8|O)Ow7*wXTBME7tTfiS?_otTYnsVmlPSsA{@
zh5PyW`K5d&w)_(^*sRWSHLn&r>2%u^)V|g9tv~StwRk?ad%}D0ZDc#5H=QU?Rg_j$
zD0$D2U$E5Ya5Oiu@5&{)#>@MwuhpM!LAudt+``hr)-oVTPur~O+9MKHcgmSLZ9QEb
zvj}wJSgA963ESta*9Pn?q~c0S6!fXr21l3rInO?)6LQ**S6Zdpx~+^b6+boU;8d$X
zA<x_GC2xhoSXqfMyK9ZFd*DD6x`ZN!PA*h&b^B#*vzMxzE=v8vAsvq&Jz`-Q=XU-n
zvo+@dLM_Bve?fwb&+Bnh5>l+`aXO+bbFEhll$A#S*#{!@EJQQIsk(i#zVL%|lt8v+
zA|KQukf0dOcx3wI9k?T`jFy%G=n4%XF)?j8c6hRD%iFhaC-(X%ne8q(jkQzvXRF6B
zGdIq69uyl+jU@-~VcM9JlE$x%S1@QdJ+s^rg=rOEKNk0|=t{!m=c#X>YncQ%gv&I4
zeN_M>li>&030)6lHy^}uSEHXjhP=k*#z&7FW7RpQgQ@Kpad8W?)bf)G9z1y>C3sL}
z84?&M3w8#1M7**1J5)3@9n`>~%SW*XnSq>~E}SvLMaFuD4#~D|ZEYF7*<Q)_;LNOY
znb7ZDFrTn7T16#li`MB+OC;vJxo!2$da)YCxm`X>p+8k?q|C;Ih~o{U)qWTMEpJA0
z_7u9!a`Dm@?N$A;Z@vKm8&GQT@O;nL4Fh^#ioUcPq;dj#SxUzni$7DTkmfbM!fEtC
zh9bCXI|#S-Kzh`2Px9JQpW#6E1el7PAWTw+VGdGYI-zlTe8m@c5nLYI21`i#a@Kez
zR@F)^hI-#1ipKUfT>=i<_ssH5P_(^XfpU~g8Hcqy0jA-JR(CNmWr2MG3)oP<56&UZ
z>{HO2J|$g)F$aK6C_u&B21eZ&l#Z`M2f!x8a;qIqB4_8yo10aVRkqs;0Y7(Snni~X
z^=voyuP0h5De+0?1N|_H#r$*7$Zz)JsOIZI9`IM=lQjn4p~}i}I3Cra{TI+%RjIqn
zY}5}0iCA~F07ul+iUYk(6H1529W+epPPyyXV`gt8vCNL<mU3G5s~q-hfCqyd8u+zB
zj7bdp<1?W|;L>o0%tIg1H<KQ;H8?s(6z+oyvtOyM+7$CE%nM=ME@%~8;Nk?jb4grs
z66)ID%h;6&Hi)T}6=OZUGRyf@sHMBA$7^fTO(&d3DJbB`5DbE*5}E*W7+1NRJ)T_)
zlk)fxFRG%d>Twgtet%sO{fi{DXW?8<C^q3&gWxCG40`V=D<1*k3aIocC@q#9fB@0-
zUDN;V^Jx&4NXkQ7ro!oaSKlAl%Ok~W_;jx(5#Q~vno-Axw<@4YUs)jlAkS`Rd*u-N
zzN@H&_8UKEzpsFhveAbg0=>bV>KF$4TAG@TJ~*=b!Sw5mTkGo|uc30AcYn6|@G1^`
zYK?|A+cMfV_dv2x>{3<VtwYJd;bbzFcO3;~xKxY1HD;NqNwYJnN3VmOg+&~Sx1^z7
zq0&+PRxHc>uzVmW4rHbS@2XVnIs~U}7iEs<b%fVa4-bwez1-eiQO<Y({&VwfQB~IM
z6!ut9ABJ(&im0kaEtx7zER1BI0pX(6(g-YZz*1+0Q@L@3smSfaO{dA=vvm83`Y`*X
za6IO<NDgx<wxx%ENMFwPt0|!0lK@O!fB*R<;Ky6{rb;&svYfSQ6U8*bHi1Q}HW)7;
z?sfCE%+^@`9ytYtMMyOU1mVbZus&}EI*Evzh{@dxU@pkbeFh?INCOQXc&4IKz8*-F
z7;D<PD7?769mjgbNsEetLTG{xd*Z#d0Ijfr0fn2ofU+|4qem$`5pWxEuBT!j(ciLq
z14dtn1lOHkau-fdfq2#y$@*nB#<dF|FE80o1wJA|78V;AymE5EM@I4w4uev=W_h;d
z-<^^|nuMgHtmw*;>@S+A5j}0~93iQF=Iw|^e&mPL)Sw1RG$T0)h*ei>qeDSD=9{P<
z?CV3|5yzPn2TZvclTSauEowH45Jho1IFFYfJWWV$(gH&rC~P1cQ-?dL;Emg{?YHM0
zF;yukDIhmw!hLv)i0j>Vzjy4Kr^x_IdHVQ}<#MGz^GyHz<qOVnrrKp>RDvhAErC!!
z92Dy$`s2*H;`N*E`@L~{<Ps&6|4~SsS)oQd4%47hRJvu;6qoZ=)2CSMj+peiH*P0q
zrVGsezJ3WWztyxHpMPOh$t|cXD3<1>Ytz$E81l%`38zFvP);MmW~7p<xdU4Tc=4!J
zIx^~aUq<y8xcPPI0PEEi?Bqb}+5v9Ql+cCJExnZ+Cf|OOIuNXmv%5h*5$&gX+@@|G
z(ti6%ny?Jqrp}jXBrkwaQKc`srpEK*$5+2^UHC(GPVZmH5Rxp)e+yypUoZIo#hZNA
zw=__-Hsgt2P>2UcqJe|=LB{%MW;Pf7F$|hh>x_S6Pp1^z4<|vwfqv%>d?c3`*jL(^
zjmgSxxnqllKjq5l<PnpDN%W1NJZi)zuAbokbfJ1pKu)eGlG+`TV(RN#hZK~Q!cRig
zDvsX#8jp|kg~Hk0y^4V^=<{byS)aHIz_7^h@+H*S9P@S2Rz^IFYt^lbw_PWM&rUCy
zj(@Y<Z@LazM<*w@JUoAV)}?PdnU?dknJT48%UcNuFV)r2dN*YM(W261;JZ}H13Llw
zFe>rZgDvbK_R->e8xU3*yLU`2^=Fp3#kXdT>}8k^zBc@oL&2-jzRKy~Juor^<dpPA
z3eRuf4sDoe@<O*BkZIL_?|sYJ&5zomkW2P>-wp@D7vOQqgdn-n_F-az_kjKri-oC&
zA3~@U<@kk3yf{=J{lx-E5*HcTp!Da|-2Vhh#e#!mV;o=DgclcQS*@4JKm`uOoO}wV
z*Xt6sSp05RcYjS}%V!Q3J{E~o>9{pJJ3EjuMrYT(-w`#uGEuAtg<wXDf@&F?MV*9P
zJ>0qr^IMbh!UL-+#k0>8_64}l=3_O`_K0jrNE1uGIZTvK7g$!!PA5MvZ{RDM)t;yb
z$~AHp>tdjoPfVD*e8t0L)UuNyv#tU0iI7}~VZl^+czG=W6U@#VW=D`~eG3z!kU-!3
z@`@>~zfvJ%>q4w?+3jdTLIBQI`!nGfqh+&Rkl~-+C14xRE#<ocgM0WUG5m7Udf|it
zdjddFfQq~}qW7a%yvo9ajDn)bzHf7HjW=}}>_UOn_yD`KEt<jR=c68kPQiAe)NoG?
z5@~|ZqzafP%B`l8+PNxEGbZz*5?ke1Sin-kz5+ZzWEg<FKq7o5>`kLu3A#|rVS}wX
zV--=5?$N5}T9{iAG3Zidhk2z9!<ZF>j^GNC2t{nhWH)gHyEQ4P*6TG759$ORZQvR$
z?p9A1`BLvlG;F0Q3uv_tU%9oU?;*giUTWUiTwe<kT5dWra@P9c295pd==Pf}Y?-8c
zD-mteA2wr@dgj2c<zsle=<6ZlG496O2TjNVQ=Ke`EBcJ<xb@!Tz(+s7&!7eIXa^^6
z)iSHCy*=7d*M{BLwejE|yx@EC{o!|o(?qNaF-4`c)IPFI5}nK7eF$s~01F)_=Kvm$
zPfKf{cz1OR=zLTvyxux0=~C&zb7k4cM2D-Y?H1~sXz1uGGc!#=N85`qiVup4QZ2bq
z@%qc-FpxaybX8XdUJi>ejTMqa3xGIrfaG>o`+TvmsZ=sz)eMhIB*BL!l+nQiW~wS<
zt57=mw+ewbC+J>IPGY*`0wp96f^0mda3VI_R|}sm?BG2Go~7;;^pDF!`ONnx1=rNZ
zAX@pG;T{*b`ZQeb_4GJg*KmvBx^<7;y8Khl%j{^?fh<K<jqfjp6AI?7c09&9PJ+js
z#lbTKb^(x08KjVN@1hz^48NWW{DGY{JX$_2v*i6bgc`q0-o)ItP^abzuOpvQ|J~JY
zUaMwDD;+c?yK!kUX8+$eBNA*A>J8)LMZ7fwr_??^(3(cVliIE%G)n_@TD4&gX3yl!
zsTiD>_m5mo@o6dLm&y|WNmjgah<eW!MuI{XQaHZCfKnYN2ufqosC=geX?!47YF=Ff
zfb~#biUW^{nv|4O;+^!VzBDVGup%+^mLo;&_41{qrEKi%AT%@?D*sWUL%DjI3OHn5
zrL%7y9tC1xw>5VQ4GrzWsW_E*G{_A1e#vKpAOpA9NYD^S<5p{{1Sq(+1h5YMq%g6u
z^_DD0<SbjBFOc{4b>BrpW7V<y9R0DcFnwdg94cnZPLne(Z;07$155V5jU+cWAVLC|
ztN9;$d*3|2a6wk5eqUT&>8Wwxmxz%U>W`UD^Gn``c1}Md)`%5XzbiB%$1<w&VlwaR
zD=ICVi_I6lXNzv3y5%zMSf;E$6<N=@VY2_*D7JdNQ`1%5<07<PyIrqKwLWyn(3E@q
zbQ=u42Xo*jOyXi<cSG*Lq_L#*pdmO@38Dmp#-D^WEWxTiT;~FqToyDK<m6$pb-)XH
zEOyTZ_??4;$Cm+gIedRz3mRQ{&FS*;^3Vk`*f>^|@KD$R(J!%JO-)Hz9kF@U(_m$)
zRz*{}%R7ji1(>E-z>7?!a2bHSi(TLVfk_D124oAIe$&fVlPPgJ(uH<ljEHNwzoN0c
zG#|w#B~|f58JP!Wxg6ALaXe$+ly2d^cCbCP*n!&Jz<?2C+W}EgqS?gqc8lEyAeUul
z8Fx8+I@wiof?=5>B@)5H@sx^3I$n3GMUG!|VSZciA-9WQ2C2FbQs5UV46CPSRYLKW
zn1_<AWxG|(e#RsB*J_g^9p3WncDj=mw`0}ESRyup{j#Z>utYs>T!Y!Mk8+WPRcU8B
zwBX86Aq`|It2&}XgQCU?2nU}xR!o(n*vtL6j0}7NOxY5hsZ>f>y|25t40p?6evyAX
zB<RgVQ@f4BV2CYpWphck38Uvabcw(xN)ij(KI{`t1DL!6;KTaj!#i00&&r79`}<Aq
z5fV1E_{P1zgp8_MVjElFD4-}9MroGp<#>Eg(H3ElX=!0mQp&1O0|S(>iR#_)F#wXE
z8YIL7hadjrGn*3Saz1`ZdtW~3(MvThmyr~IA~!cTrNXB(2n`>zsS-Bp-Qj^2%vLrl
zBZs|?6}Jz5fzH_D95pONqKxjJ<>z!Ms*3MaalhB8!&D~^J@uH?VR+uW%*JjpJFKH0
z(~6#5oB0{DGoqX3>@aGS1M491;$G_SyL<m3@g&lI5TI>j&uw>>NY)ZugQ=B$W9aM}
zd{Uu;=EEi8wC?Wje-6Y~<u_L5`u%NPhlf^jbgK0yM;+zC05NWDZ}#+^n2rmD9Em~x
zE-<tKP`Q2M=njGExNE#}F(KGss~o_5Iw=XARGd)!p-Wbh^Ce>g3CDEc&5F=RC4oB*
zC8fairowc2g#(Fq`C9YQAox;_=1^0L05Vu#N`MPR-2%N9x8pTYk>e_Fc5uZ!*SPKT
zN=aF?4Vr^)G6ht(!M8_@=8PiPi@o10O#d27mp7GVEPTh+XihE#^;e+*N~ZFB=dn=d
z&+50eVBpTj6v^!(33vnu5s5g=;>-Djz7-sWUYn6KrNMVre)`I7{g*V4WERg4RQCr2
zsZ>i<V&9A6pUDYXM+Jz8<n9NT-rWgvz0)e{>&FojvF8#}tv#Pd$#p;<{P9jYvA^B#
zgKE;W(PjRrp+P@+=#u~J+?<C;C1msI1=ZDQ7eqwdSZlK;gj@Sih!woNFUT-CIE+9`
zM5R{lDxa@8i+fleRkd#VfX*c2x=sCMK;O|qK4D;CK~jTy!Y55gXq}r=2AV(OEJ+R-
zxL$|>9(`~g_JKu<seiq5tF)estRa;O-3O=aMrY?)eO-sOtSrBA#`K85C!;pj<&Fmr
zC}W@<E!N)>x3=D$tT`L64pMsyrb(D4)2~cz_M7O<%{_q@{Qx_{tUp677YYdA2LSuL
z*kl|g850b&Fftr2*BKcu<P-O`!<}?F-v2=<pYf!-XKZwI0rf`WBOIJXOWg=KBr(x2
zg8~979S@{bRPad%+?mVQewJJP^3(5WCu?D~`>F7zS3nN;LXA<o1{E_q_wYw+bdhUl
zO+szx!7Z|MFHIe|#QDGI1X;KTeATx0Jy@g<NxnSzc)v`_{gZ1>?=N)sh?|UUH9O>p
zZ2^gUIztziqU-(#*}I0nBA}9PZ)u5pPT=$dh(_#&{XQucF{bLczq>>i%PmCVNRemI
z5m~xTy$V5WIL8D9g;u;g?<fick9Nl{#n|UkkV?7QWFZU4$OKY&i%7JfB;BXxT5*qz
z<S<?Bw1~Ul$gfLUf0-nUfaUe4oKNeYNp1+M2v@~!I|x-}W^96fmV=ANZ}X!m7xrPI
z7}z>DH*3uD3Q!W0hp8A*prbH?AjWI7Es+j3Ym``_2#xL9Bj$_;27Ub$z`gEr2;sJM
zC!JR}d`NYl>VR=l;!EqVaWcJUJ^0Vx#*JL8R)6^)+Q<D(<tj*&F&#G&y8>#bzVv}e
zR?95qVj6(I9zSL_NRTdlNblNGKXyIwrH<~~pT5G8z4>vASBHvCJL^2ZBzJ}?{v6(m
zHAM|_rWO>tAjepFpt2AWE_<24z(Nqc5UccZQVBes^k2Pl<=4_u&Sq=_iOGm`{$oy*
z%;x>MqTgSD3*ISLCM(6#^mql9pI--<9mAkZOpFHHJ#g5qBeSxi{lqRA&^dimgyuRZ
zNS2VpYy_sSpvnht(R&=WFJVGbN?2D<5*fLgt(Xs#J&5$ssP!nMp`nrCHX2;d)oO$R
z-Y)<d`S@vJng!t>^59Sc?Q(yXD!Qzhlzo7zx2GqxG2g&)Audj{qeBd0byF4;ZcH+x
z5fWB9pD68)m|0t7)ZOTDeg_>-sOhl8X+u!qd86gA_82E9C<uIjW`ABHA*r8jl?OGn
z<?%j!0gG0Hh;$D*B)!Hkw)%v_Jd|HZs09L-08|HDe{>F{7jhC3w)^YE#jMOuS}?LL
zG8uzN8{g~b4Lv`BO<-3R&!rzAg(=<R**ouv9z5#!p3j=oX0;qF{GhP1>`u52J0~>J
z8b}g2j*jJ*F2y`KHD4XQlCNlad~(UF6StK&J*B2?$THPj$N0ApaJ_hHnt|o=<;$R>
zfD8|4ahln=e*%0m`Uv6PWI5NSn)52!SM-zs9n^8lONTkIJ@@y^5fb_z?h#e{2Ed;$
zZ*}*anXW&}ZAz66hRYV47Za2H_U#4c57%}Co9hR2<AIs4PtU?K*x3m|0!_8G@#|Th
z!E#Q+H{?w<pTzmpTt_<IFqz1UMLwe8K5tpo-Dx`~=@=q*=0q0&>WYd~fnzsGjBz&8
z{%CiC^?>Z?)923=B{o`>V5|lTZ7+%x$g~QAv6`eVF*P*;@TW{q=Q|we>4~>}M>#(`
z`@^Fgq60|C(G{zlA9BJFkBpQwDN#1NDXSTV^njItMRuRy7ZGx-=BB1sVE5nFb_c7$
zi3-TjA!t}w<mN)8h$a|W{VG0q>;Qs|%aRk5l?5B%B|GLHR6gClqobqWn<14Z9Gp#5
z831s8NUPr7mBY8U$_ec9^77NQIq*pT=;_&G8w7r70SATR`f_xI8b9S>ybAAJcB2CF
zsDNuidcWEQ=plrJ<0nU`@KzwA2n#(#6Yi0!k0tN5|72zCdvDCzbOe%f*lm_9Gl548
zfTFODxVXkM?ibO~y>?vc6%6La5-qh^GXXDY5b(itm=S!8*F6gE;p4yXEgj+)1cbWe
zyEk^t(9jSQ6BF3hSTMr0f<(>v0Syfy5s|4$r6(Z($4?m|?D7N4jK0SZv$9IQJJkt`
ztcG{veC4`1`C$wi;BfG6P9DW4!lf%QueGoB@C6zPd_;(_4uC!@KK@~Gu*EGD7J$PY
zP7Vuyj=)Kv1yT$MSWAf1>`nOr-CxP!_V$}45HGHPW-YD`6pNK_-#*91#jSV9DXJ_r
zk1vJ62v7t8y=|%Vesp}{^XI$u^&|-H1nmPF;)C`PC3qvpL#H!}mx8Gj3jme{3nn03
z@$#sFZFX>3qRp!dul`~Il;$=rpt4!{`gI<LIQ7g01su<F-4kbVgvgGM9Z`w6fHzy0
zsZ?$|1?Be2GCnZ+p-6?icW@Y!EB^q#)ld;bY7{nT8zDYD3hwC|q7}fA)6y70d0R~j
z)X<R7eMExUas6e5zWB3g3mf7C5}3CqB<g@+&^7^HOLKFO?dFwwEZ7J@)5u3-O3ouF
zNDk_FdbD}(O`LOYzUSc6@cBzR*3Jee;!2nH8oYKs#V5kSK_CUEnl8&E6daH`G7(^6
zh8JwD4>+%wOmAae&#k+7c;0WO*U->5pc+#F`!B?sc_G!E_uxU?ON3_l^w{;%WU}31
zZ+4OHrK>>PLhs8Ob3H|_L;OE`z*Hzi#l(t=_jpw+=A@+Z5XmK8f`Y9}OE|#uhsp$4
z60TK*(C@VbhJ`_koR*Rx7te1D&m^H^05@hv*5SgBlZ*@z_!lIXT~!$vVnjwRKNc_V
z?K3od-HU$b6(p1CFG6;E>d=rP!phI#`VH@o!Y_qB3WMHsjvg{$(a|>E!W*xahxe2A
z!gl{CG?a|B)Bsp;Kmro(55&U6M8vX8P=X6RBO@!^;t!rs5l=BtKS6qhgmm^Cl3`@Q
z)k{+=exU|_4jx~<h$nyl1^%e~;0hP@_hTPE$@yO=9pJ_OJY3iQumAAm{E|WS@N0&s
z@QiOakDhM`Qn9=%{Xq92`Ok<9>D1(6#uDts*RLJ>5Y(88^7*y@s=fIuPiX!qc%?|=
z$MuZQfRq8J@{cJs(j?Klo0IbjTscDBw|K^A@cu~pktS(9TrW9$5sHRJUrlH8eY$A_
zml5%Bq2#*F^5)H(zFq^2EHuzE^!1@*yfD~0TKw9YHY`4P<<E~DXYDiI0FP}mGc({d
zznN-*A<xJNyO6MOz8CQ1<Fc|kz6$B5=B4eTTc1C36{Yhn77(#G&b8@VS@{CXchFz4
z+%^@s8dqi0!es)yrYL+j*|NF2bBKyd%A7lU{n7{h$%=j-MzFRW)^)0hA3b{ds`?q|
zLO>-1`z&>4SlAF1JNpN{&UbKMLRHWpYcf*gw7bj-j3KB;lVGOi?0gCv7jPy@t=q%<
z!L7@9FsHe(k@o&1PGRao^L+_PX#?CPLGs^nT3EG2wILS-;Pzigj)_@=<Y-7@dtoQA
z!Nj23hR>k83<U@@ACM>_9+@)}4$~jdEm3oUOT~M0@n{YlW|Nz;Cc_09LwWTwq3kwl
zzzu-<mlfb@W8)QIUD2foJtwChS+b#2dDwJ$SAWmXr0h{bU*syv&P^SIx<cjQQYF>v
z&o$CiWRp1yODBxJW1eW7fBBP?8Vw)d67u}u2Od~@x;KPO0cAv0MFoZV4hBX-iY7RS
zf`KAp6JMU6H`UgjnVNd;4H81wQ#l7VVSWK6D$GOy_K4%7&OC&(x<r?h^x<nvx3o9+
zM~_^sV`xy$#<;AXuk^>u;)$c=tx8s$lALHLt(LvG?5@;ms697J<}GBEBByucu*bAn
zC|7R&mldhLp<WH=E2r7y*TtS>F!Jn<%g$a4rJwe?j1LL|2)%_PYq>8SRsP}c<JDi7
zX1vl#RcRhb(rgwpFepgeh57-;w>Q(eYiZXAxGRR_vdgySi&fft!>MQ7>myov?_k{d
z`mVBI=|p_ZN4t-~!jj|eccrF&BN}Pm7tflwPH&yxvHM<UG?I&8$acc<X5nL%%Y9B*
zr@cT;!@&vrZk&*?Ip6W}<^JdWzG%)eb&%h*cMuQ|z#>M!GYLr<W~iuZkTgb@qPe9u
z&hSZ2pHe+SIS}J+Yz!+EGsi>ov9hCFMe^MkHN2Mo1fOX~nP<8tex7O1-{@}k%#a~=
zG<d9Io<-Hr10xKNIRmhRT54d<m6dWXkCk;M3S-+DtCe5t0Fh!Y80AuZN{2>^taFDH
zXrRC;oSTbS$aOprV#p7JaDrD7LD7kI_+IN_sV0%Z5q#buaTh<NJ!K;}NQl<nA#Slp
zTlBoWkzLxVAXjO=ERoqkChIn0PHgvg)o?pnU;U7lrUVYzPzw?q$-)r;%)Xn1$1ZzP
zV2Pi6NBhsodiTzqg`Q;7SFb(+C(F~R(&;G4e3}#vX_=z`bjrfpyeCu9XBzo4U+Rpy
z%E~z!e=BcilwFkn@w_(ajCQ%u5k~ka2{rQ(pFyP4u_3F5`Qcw`Ey`3r0}JGCV1Rkj
z^t5!z=3G0ToLoQOrZ-6Mz{RSkqeD_egbHjj4>l8FI7PCnuaT>_vsBoVB+5+JrCemR
z2n18G<A&V;Vm^Bm^V{ypcy*Fzgv(5Mwf^W_*jQ`%?W(F0#^XzPs`u!!d;XS1{-#A~
z3)^a0$@kos-1dRr{%$ME*K^X~IDUM8oxxfLe-`7<dHd$3PH|vB0OTzGY=OWHSd&0V
zxk=HAg|3@YpBA`=SG0XG{pRrSH!yoUzs&o{XQEG(pa^1>lq9MOGr6Po?YX9wR)C32
z-iUKX+R1y>Kg*(eZ3z{XWzuGf@Ux2tU!NVu=c<3b7vf3Rm|0iO))oy}V(Kp|`G~^{
z9_!fCRU>s5t5CePINKHFFZJ_BEcR;m=?tQJiEGxN9XvK+;rRQbHek2GjqQ%s^zhH`
ze$D&8en$OyVx<3q)9-)v%#WM)ec_ByRpkUU;=v9eEi&rh@^+-rD+nl|$`BwQpx-^e
z?OiACon65Pur{~Y25vOqnnCL%?F3mgE#r|)PoF%YDHDYT5tV>V<chxjB2-VnEJ^ff
z0HdT&uII0QtaOZR_9-Wa4#x2AhBC5!z?dY!#N25&23o`rEIm2I%pVZmNG_)|A0}w3
z`g${J&wqJxV5-%18iv^*Zh{SGw(lkp*C>>tK)qD%?M|DYpQoj!Zl^BN-|BQjUX>}a
z+p>nBEO25KHpIl(q}5&g5f7oI@@{VGuw|#)S=RnM$}6-2*Mdu!prL`7n3?Hm>^tj5
zdnPxQRAgm?4q@LYd9&D3XxM+g4w0PEDsQqt6}ddM@p|SZx{2hoXRqq6eE|XnXcNpC
zA#MTo=6CPTxY(hEhP#Y{N~z#Ju$za5^hZnRVVwg)j)iq(WNa)d!q4G^Yj%3f2U;V(
zT_AZwV<hHYYB>+@$b5G>3`Tcd{r!N=3OYJ+?C_?8bwrNQkmmUYh*WhAI-<bWDlpm@
z%$XXMi3h#r7x2qA%Sk@WV|F~))OiKq&_&=g>2*X}?yo-=ZbgSP6h<Kc<kJfH;VTXo
zDJkuc%WeR8yt5PgOuHw^7s}aQaU~^Ot9{@>{PRjx<D|RbXokleZu6`Eq=O(L;Nh0|
z1Y}F<VfF&#E-Q;U?kf)#75AV<SDL1jry*dq$N-KS7*?DgI_KY@GpeKARb<!}%j~uq
zfCUM|JMuZuK_li49QkhPA}?Rguv*M~%+HtBk7D^>G-c<{v+giCz`)W3TYW~RDTp(<
z!BuGDOmIpTq(HGT;25w2-laS+uBm74Y;E1z-ObA{LpXqE@$>LJ0Qa$iF;8#r#zshC
zHjQfpDl<@Rq`se9;UY~kS7+;)eR6emh4Udpwd}MdC@$Ib1;h#R@c}<qKssM+y1^GD
z>z&FwyDNsk{D67Sg$r+C3fLaaIndOkARz&cejfgWcDEo_wqQ(Ac>?r~kxY=$^t$Wo
za}|}*f!h-x7y|!{!1DsGn)Z9+1>{z4&uL(SftkBpy?j`hXityf%-k-hetiLEo$iYP
zq(V_~cD9w7jqMwT89v*a_3F30Fmoz%7=SS(9urfs@W=qzp95DE*68;MZV7P3srQ;y
zsc^3cH~xmhg98^!FX{7(nDT&IOC&lZWH0^d8HP(B%R!2dkBF4iT~kR}Stz<_Krf+u
zLQg^hA_^b4Kl0cwS0-g<;@!QAXj9<f>axCpk3TCpoGI(|9t}2T#RJH|4o>F%^S_by
z!%o-#Rpg&u{jaR-&tLJsVAuSg?-`)7hkX*tr|i^JPjB^oUSw6dKIiX{e~EZZ+SI#z
z@c|~}+L*&vNX>zqstlO$nwfn{T}*(ooo+wsKeq~}>~30MB?8$sSFhRw63{g;;QR3-
zi`gWd+k^^Z>I2MLS=?DGHJ1bpZWD8xlju|e`CKANBS=a|Jl6Lnt6bxMFK<qvmrYeV
zS5G48wT69gr0ooo#hLR93tcvT_CayD)Zh1$BK4KN9UB?hBLGIW<}$&4xo0`%{a-9V
zr2>q{VN`vakOTkT{xM8iV4`TY1E38EW;QoAZd|i1awv8$D0u3YMxU4z8y)!M{3zO|
zhhs#g%7hUZvp`Pt^cL>Y1bvNy!o6YxfH&a80X{aD(cmPwp@z_^Co(~u1xG<gb2B|X
z4wp_#0=!mRs76B}M1n_xWd>0DfwK>2Orw9y%o4Dm24Z;|hw}Br!k<2e#Kn!DBsbIe
zC4}0F4#!Xiu046{G+YrsLUUc8F}aL~lQ#_4d?naAOHQ6gB9ubDPhZ@4l{vzU&*k3V
zck6XFH<?qw5f&6ws98^8xkU|M42$L5HcVz@XvxS}^g2eb+?X2zu2wxn^@WD|0J~36
zL<IbvZDH>R*}MyA31ef?vYGYt0ADkd0d;a=QDrJj$6zd;C_7O*9q{1;a$iKK4<ztv
zNig1i??BYG+QT<hHPT3vGG<?3FfI7JpEGTsDuG+1)hXoTR|!Kq-?nmm9m&+&eM?4Q
zJi=eu@5Su*x2&avMe>lH{RkMR!PLGGq!b<+`dZ)4ekgBNCOa_^j@+Hew|E0SJfA>=
zCwYlN`rD6GX+1EQUf2Mzx4E@-!~Vu~yBf@B&KueX^KWL<Y0PI^5`kj}VhF45N75~#
zFnGQv<NHB<oZZ<zKT~ZFKe)9|By)&IO`$wh<Q9x?DHep&$IrGqUdmMjMS2MEDBKtd
zZ`U#Sc<tIy<8RY8#A;OE_ytbvJw0Ig0OvfTVen9aK0^Y^%-kFnD&llm8_QS!_9iSR
zrwOh#V9?~{Ow7#wlrys@@`9Yj{~7X=(3z_!*SnwDEmz4@Ohz8a&5JTiFoom!YkbVV
zT`2c#dsw1~R0n@P{^Ao$OA(n{aSUH#NCnQ(0N3n&s!6cYX9wL+JpW;NcvqJM3^YO8
zGdVdK8Hw-YbZI;dw7CF878(tKdt#<?aTfTul-X|Z=<3R;P0__a`d5bnE?*W9e+fOx
z&9t`sz))T^u0VA&L~}wu%tCNbchZW?C>i!~`^AU-fwZ`8Rg5JzCwqsptuo29tG8pu
zXa2sYvvtL4sA8VsG=iQOpa=5ut{y{elgfkUFO9j7VTA)dwSwtjPA=317<QrIVysSw
z85tSNaNdyTboKTov_~)+LcGW|IN$R2G>x4sr}-^WM8Ssy_v!09kc<A6BGY*qBPQt3
z^dNI<YbG=#bADX^2^;HU2I9xlvct(;+qC+nL$p%U%hT$u*S&kh&#MZFYf#a%IUf&#
zlN*FxfMwNFPR_Bhlc{n$%Mw}PV5;F#OYjr3hAjgIl>iEm?|-%Z-o2R+6~(Ko%MabR
zFWvw!Hsp3`U=I4tbmA>IUP(x7p7$)rU;qDmmeZ)vc)uf>EHkQZf5ODoi-`3E_?z4x
z5XfmO!P6`58n39R??rD2lKPnrv$gm*F0dQgq#$|p2rfa&33Imilq94)G&M~ok-HNW
z*1yLw$fcM)@}RD$rf~c1>UigT6F9BO{^A2B!A|?@u^>Oq^a8$Lq{$~30DxL{Ga2s@
z6BE`Ve`4uM<9~vJCXu+N|IgYPLH@Vu?)ACRa~bIu4CCA1800NISw^mZoICmP7@ZkE
z8lsO8kNq-4OXU6i+6>yCe~=jZpL7=d-y-V$d87Z%4G~@Ym|r^I50cF{?9spcfSeE=
z)AY<t2&9m<#sen+=yRUeOw0zQ0wfP4X)l>>G(gqPu_+|7YL^R*z=tOli<C+D%zp&t
zI>34t9vXp&zdrER{ka3PNl1&kBcJrFW_)~u*%K8|WpJLgGPi>)w(4{k_a;3AZo^;D
zMq(1R^aTl6?nyq30^!K6Dp+xkLG(L7Y|G3&kgf-cibj7>8xz6S`tH0EJU000WkF$l
z6C;A@(+`<1{SpCLK`vo@n;#ZtP$dP|;(tb$A1}<s9I$$xs2tl|70@>_CSU{QVGw{}
z)-V7Cg&{C;0eGJp%sq>{0OSw|PeH!QRRuaNaC7L(P^+-6_d?jq19k`3VLE(qVL|2F
zo7tiKNf_s0Ri^12zF`1Dbff<zDyrSo)V@iI54Z4~Aw5AY0+ev8<Hq3i@9V2CKunxX
zfFF4y=9Q){Q)@@Z+d}|%Kvk=xFK)0tNo=z^I5;>;_(YrR?<r{YNCqREhG<}5wmN4X
zdzeTyjoC>eGddFkw+}NYC=MCZV8=i-sKB7kTeyONDx8XdHzFryw(~kmU?2vJ0aClb
z`UUn($fB_XJP=wH7?S~Wt_r)i%_!+#C-`GA1*vvV^hT4hZ(+f~Y$l`kOigLChQK=x
z8q*T{ofb%;%vLRnPKT-`DRnUrgq%GHW)zH-1Av5i5bLQ8GZecrm~#PHUGEBZhf0ar
z0noak)PM}AmVk$iB}2R^F;Gsgju~ngumv2(f)(anic=qi<8JBTFobdy!~6^U*f0G3
z=!;~@bfd4>x_*_MMr!oEdD@yUXys;qb&J1?)Z>?^i&)zR@;IOSlaJELR4_B*(c$J+
zcXB%UZn!pDYOG`Bi;|kE59)!hb;Ph8LI||1?9NdBv$W)kCma?t;3Voi2(uJG!|qUA
zLqUO17Mq%PcF+vyZ@?~}m4yo4TpGs4vcmx>>4tFn07ZFjy0Hl~x??38fXs=Wv_-L-
z{y{f;N&n-#uxSo#!%x<yYN54B6(PS)&@k6N_qRmQi#6ggotwO>Wsf5KG1n_T^G)*Y
z*K|emtqgk?scH1;9_LYP%}3VM#3v6d{CH@S6$zn3D=VtDD=_y`A*Nd=Kar7>BhUQ;
z;Y8W(7fYD{#)L@^(EZJKz`F)?b|3=DcvC=YprxmW$h!q<nB=#bormP)L*T-<^NYD#
z>-5+i<K1ihKFZ1i$UfoZASB27s`u3SxNc&8{JcJ1Z$!tyWKy7$vT1Q$6K1w835{?5
zOy5hK{={V%2NYTt120Ns)ufZFkd~I(ssCzSdJOumra1@=(gBB{Y*EBmF;LsHv6>Pb
zpuWOv4E7D+0BK8fZJ|B%5EPu9h#?`K61KL!JpdX)1Obqu+Y=Bzr~tNs_lKXICmP{m
zd;J`Rde(;~{b|KkH^}0Ks+?d!<4#&qx}D3ihmW|d1z}?hc$5-uEGyo>azRYYFXO%;
z-IFK4fz;)ug6wL@>QJAkhL-i$Q1#ahn6suLLU66D5UjdYCK}LzY!-bE3aYUBMal_8
z;M0Wwc_^(_R8~PmH8MD8CSP|4k_B3Xyp~P6zSh9d2%3eTz&<g14YcvUz1i2a>t5Gv
z*vgceB|gYfcnPybDlO94+L`G1^mtFU3KK%G+Ak>UIbqh1lFbRH_xtPUaPD@cO3wqA
zs4pY+wEZ^RpS-E>VTzq&mg*@E`;0GMKh*OX^4ZZoK5dX}ih+qqK(M71=<13Ddn0Tq
zpv>R<HJ~mo?mv<s9FhfiKYaCw5Th^ee1N=w7*Fb*k0%5F8Bg+AGXwq$n)^B|i@CPN
zXif+7p78TST!!G`mVQvQiJ6SgPKu@6mHj7^_ZSU)B1U+}K}^@+J}^8o0uhn2>JzV^
zwg*)lj1f+CKLG9E?OXAa<Ksr(2nqgt5@9U(wwG2_*}Wcti3_4yNlEdSIfKLiMngG3
z{%gj@^5G50$;sP|sX^{57;V4;V0YXf1d!_F*fG_4<EK01>gMHJI&P7^fer|6q+2&`
zP?pDoY+B095&~$y2Vo?^WtD8G`E#}*rHQziSK#`rG^gFP5-WQZB<d>5i5rX^9sKk0
z9qf>o;%9qts5iWwpi2VG_Fzs9uzx7y02<X{Mh6rxIQZcBKsvzQ-Vb^n_s5Hq5{aKb
zcSAjAw`Fhk{{4GI6%!x7*%E#GvNPMCN#~!EY<(|4B8#bMKH*adS-Q}WK2Cqbm!3H8
z+?Flm@gS|Ab<JR#W;m3m1FXgmH*tm`09H>gdDAEqVcYS>4Qg#n5F|YJljaz^9~Kq{
ztCA0<Vn<$HhadlF`(SQO<csZ_w)Dmgb5uU@M;md5)X7^tGvIrHac2n#rs3R%eGI;e
z+yagoq?TLYs*HG4PY8Z1T0-)Vf5*d<u_Svai0?87b{E_i&-DYxQNzno$&BSUjuh3R
zOXo{pbEiLY88+5DKTs!+$e2v`+nLtZIP4wzSQ&^*eVF1bx|M3#`j+~_g9H-`xzagY
zCh`9|XGlm|?DWkprG|`=QqSf8suNY`84nrr!7ULRj>I}jT-GgMA0|(K#Nu|oxg&-0
zcgjr|p--cWa368AP?4$ha}bm&4$b!-H6C7e+In<*SpR!^dd8FclfOR>{E_rkelNm!
zGjD5+vn3Iac|=Uu7Dvw3c-oy5E>Mf<{m(H>GrBHE{E4$e`mDtN`Zdxll}w%$<+ZSg
zFVTu6{6eapvJ!kYN>|%z&Oa)Wh!Sri&q_Upws&vB`$p1AZ*5FsNxKWk9e<z06-DnB
z%`~&Ko#dM$NjrjeXBuRM(hbFG;`{fj;f*04lgz<i0>~ecN}cYWsG#OeT>s~nkCm&v
zT7-hCD(2%(u4mVl=6(HW*1Dqmq_9un$`3I`lA3=m;#3APEwjHo)}7-HVP*>Y$?AWc
zNxECVFk-aOE3KdnxkdfO0wQIV((9Pfwxy*C+0p}}f>Hl96MhvFUDb!*m9@+?`Y0mI
zlYG1t)um)QIx1XJsny_{RiM&Bj>U4I?A?Fr$M36lPnGE_mznJB4nh)HZmWlFbEUOc
zUeWB+7BV8Gpw0X$9};AmobmaeZzOn~f@8|6M1^zb$?(T!;hxUA;(#$zqs*lEW@j`1
z>{|W*_|vYA0Ugdd$oOf-5!>bYylF|F6T%-HX$09GUaf^$`=5s^y5q8(n7uB}Eui@X
z-n6118T(3bg`l#A;-8P!6mm>Vu|FufE8XSSJzbg8;`R?-hFP*_psR_Jt{Enn`W8!G
zArb7D&Y$|MMMz{r$>NhNeW&|T-e)Pr#JieE>u2D^{Bv6CkNtSH`l7H|%BPZ)yj;R`
z+|FIqTU<&9*xx5_{++b%bBniizHs2slD+@EIfPA57R+hRpZ++ed{kwiIpRyLmO`SC
z=SQoEBH#bl4`2il?#=R3_I&EGQ6#am>gf13JCi{XQB#mMHwi8aD}%Yxz`X&tj+o%!
z-Gi;iX<%&E%zah>CyueTHPfYiRgK%{@8fgG7rd#-FK}P+C(m7cH{s&(!bHq({`<)V
zb{dHf87<dxC?vr6WNV(bKV3dX8JuAmnI{ljE!Y8}u0`a(g9!?kvyV1X70G|x&5*8W
z|4RKON+e^W@R(RK0L3^oBIsl{Z7cthoM(2eB4+w$1{SiW*W;sRKjN;yn4#QeEjlf2
z7>JT9D=Xmffeym-sxu^^XHeg3Od#B5U|I*xL}1{V8>0#0Vc<;w#J}7qBgZY#XLj|^
z#e1fK6LYtArD9yg8Uq6}H7TB)?0AKan39CEuDii_slRw&wPz0Yux1>5sJ`K>fKU^%
z;@3t-Mmknn&7b*zfE-^BZq^G63-@rDbTE4%Y##h$^pz>}baesXf<ld*H0g6P2RV<J
z*eXa0L29m$tBI3-pSKp0hwnirFo}HhHs<E})`=AOyjddI`pgBoi911G(7uFVL8aZ&
zRu|aze#VDZFn7FW&6u!()4AE1MnmpOLSiD2(HoU#T4b83J=~q>pqIhyEix|q@|fDm
z$w|OpjR^NpO<mokFRc%zinSiMGP~1NfdCNB#0aSdnwWsFlmRyfl6>fBY1ae}&sXfe
zQ{Ca!9=8+Sv>6%-I2jOa2epMxT0#r}9-!~IhGO4Afp8IAn{WwbF)s(x?AHqr6JhFm
zj~<kpT6G`M3X1f5bm5wTJI^<#qYltGDb!FU|G^0@ZT6NYTp&OkJYR<Rcc7^ILK^n1
zl+*F#Fe-lf1fUJe6Y*%H!^yV}0NjHo4lbaLlQp&Q#z!dx1m?j#Rl26l2x}#AJsu%;
zr=_G+&dF|sL4K*ltWvGV!F(umO~H^D$>EGoXV|~|{p1cT53r@VdYL0Xx0Kmx>FIb+
z!X;2`x4|$Wg_*4!{+d@c4z?ZuC`yz^QvlE595qKuBb#KgT1tRfTS!P}gD<2YswdQ(
z!T2jODvAxTqeWg&5nC@0s>R+0(b)FREw}<82e1u-6VeXYYSRs(3eJ(lJPrwCSFT<q
zWVQHckiuayx(|an1*Pav2EAy|Rzo?E#!Qb>XfkFmAkYX?+!SP#CxFOmUU?iUp~4ez
znIJhLLK({H5NhR)m6wW&?(8RZot^Xh8(O0eVeYD?b_y;@GF5h4{Q%nGbK2Y1ygLBi
z4~*qJDD(%mGj8;o#7QKXaf5sS=H37a7V33ofq@~Ii!(TV!zrc(Z+d8vU>XLDOD|j^
z7PF7h*hgi8!ookw1Q(^IAhSXUoL2s#L3|-8KzwC`+8(qUbsqyjSQQt03T`ga($XV^
zh9N;gj9Lv(L6nHOlmnd|)I6Xs_38x=TFAZcFR$-OrrujE{Cd&XLBQ`RtNG7Cz{_86
zfUl*W-(D#bq-Wo}ejPmMV=bU=hxLGmi!0Ur+#9+nEG!2??%j9`V7Ec+8rD#h-USMf
zl*Ymj!5ANW8P3AvZsGN>jTG<IdmnFEF0jBHDKR$od0C0|3JM7+bWwnIQjT_}NXC;J
zFOC#5+nC>4u^BHv2=s@3uuBtsd>|+^b$zZqU8_-yNx!?dqa*mF9xfV0OE=DnBHv!t
zy0Unc+GN}a#CwYWx*!*jbBl`N1Oi&1)a-GS#RnF3GO+Lh?9)8`{imr9kB%&_a8~fc
zVyB@w^S}*st7|xQkoEztUR#?FB)mggWC$Zi%985$1GV{jZ&luE`oU@lw53Z+GXQ39
za@SNZxo{RK6BEC@yiK+11;j*E6Akwh16G5O#;dN-+n&r;Fo;91r-uPsvXGJ^C_;YG
zbLbw-JCWsA5r!D9cce~r-^#jse%{IQRZBv-3~gFpma6j0g{ltFKVJksww+z>v4a`K
z?i%;{oaiqo=q+{+fW!hrU{%$M2Rky;ldl>PJNqmO56^*32D#(#Wz)XxMFzPHh1tc$
zgZ<pKSl(4YRcS_vZEo`g7~eq0!s4=Bmrzm~j^n#w8x$OzyhzT@GKh?fTmj-2FhS3N
zG1g}YV=d>)q9P_f*tus>MaWC&mW`r^|C@gY@A&ISQ1!ziaarg>Gb!@^X=J<xv2Kab
zet?;@dbw@$`|Hz$oECbs(~FBgvenO^GcOf>*;Jt41A?#;Lw+w?AeMArV7n(TkFAuU
zUd3ffdIKOQo3-(<Cpu4pe)XodQoP>ynFs?zA`aV07($fb0>K*y{Mkx{fMY%ya0w8F
z%E0RdCeRoOo@l2eBxr-OnVQMeBoxFrQ`g*{NTvh?1qr&x3;6%BMM84rp<qCqu!(P`
zfo=rw2MF3V><?Yg-x(P6LpJg<pd6$kp|;C|KVZV3ps+kvyylu~emYpm5e1ls5;TzA
zo7+IURWHA0(wDZ=6<eF)c=AnlqX8zE1ueaAyh=)J0a|sva0&hH-4a<i-~tVM;oDSD
z&~6Ve%y>W+9tInLxA%=Jl%pr2AQgtr19BtBK`#bm_@$vXBhqXqGqckS`~n+PRR8aL
zd4)wqxUem*j$r{lm9XxvhGmcC-nr=7eSi3T-Q1O(Q<VYT4%{tpdi-2ikYE|R9~-*{
zEbPeO;D)j78F1nQsu_r(db2VWJ37c??=k2GrvEyDoe4gp;rQsMhHr3$Q)QlfCh-Q$
z3NqtY;Yu|4{(?@Y)E+bgphH<*jo#h$0~?o&2f&YcbpL)A3@QNdvhW8}Eor)3`<*nn
z=Z}t%Ve1}kS;EbR;Z(ev+le1R834?3CE(7Aa2(Hke#sawq6~}&$}Jl`{DRL<xaz&T
zuY!_+oeBy+xb(eaCmNo&07wTpk;g4Oo>?a2(^AKSrBB3{gv%Qei~=Rrv+j^1a>(FY
z*VKGKS#l*KCgu#ZH(;aDnwcpXKL;=8l|aY+&N?|Q?QmmSV4RAO0}d=1=&ckTDM9vy
zV&Y|bu__n=GGEKO_owlld>mxwiNf6T!rEF+{}zh6?{~(dO1r1PnE3=H6l}&&n^ALe
z0tStSVGT&nRzCy*=LqqMQ*&^X*U9SZCpM5_<ejfJq<syZj7?B2|G0m4>NMXiCJ2TS
zQDtT9%y{+8cxU&)Vus)MW`lnW9Za>Cmm_CeLoCq!E;^#~X>Dxe{$=h6=%~eAT-W<;
zP>A@(9g{zsqMySdNb6hwbT|JKjL<(z@ZYj+)JiYjHa1qhx-M|-`gP4eKm0o@^({T|
z`L7;#m?0b(e?R^mEdAde((_L%^l!3)#6Mk-;Up(tT<Qy2ASP32CIVg+Jy?UDpFS?d
zUcO8);}}H!T9cWUhU-=ZUKn41odY*0pO{#*EQO9vkSBWbIdZ;V7Q{UHx;JGbnA$-u
zo2fX5WjIk7bywA(uRD@Kk3RiodpJ%Iy$sxwcy1G(9~x_=ll`0zF&fV=TiUZy=o>IF
zKqxu#%}P~U`+d1%p=g9PWT=8{I$T!b^}>iw>s)RN0Kj{7b+q8WC8WZxS$9uQ&*5s-
z$JkhNe?q54EdW2954UrdmovJRtbg@GYE}{W)yv6+0Go~C{(U-|Rgf1^ZcE}oK8sAR
zfQ`+-UFL+&sX+34SmNM}Xd48A_e;pP;dwT;-xL>Ch%&-~y}RoShWmGdAS(UkEbQXv
z_s0J8wV>nxNW2cA;WU{j0<NK$xVVj#m57*FM|*qX#!PQ&{?RT$N@AZYe{zBK@jm&^
z65~DQj;GYrR)aZ`&`1FLL<&_#PC7j-GV-Zmf7}ODRRw3B9{_EqKD{X?BLjS*1Y(no
zaa-hPBOTEdDGqyF4GqTc++x7wJzF#a5triS?|-yT9LWEDx-kOSHo}UE2N3pn13ODX
zHuFb@qPKiD&&`|RxHyHkZ#(lxK`>38y%nFqL_un7*bs+7cA_lz{YiRGw5vg0@2<<s
zKeh)eDv=j2Ane8`9qi&L`A`=Z^+z>pJ?x{{tl*oefP|lNJK?BEqs0n<k#QLfE>?&_
z#{nL8H=XE&M(f{S?*WGtn7ju@L`Z|9bIWt6MzE+9fa?fOjb*T1fB4`6Hf;<f_hFKf
zY@-Or%1o0vG!0~#<kM@JNJv+|3ch$QQ~P~^q1nmg&(`Xy9{B6#ZQOw2p&{Vn3^g`V
z-mhNU`4u7qs3Eg%TO9#AlcX2@n-sybQ(k=*A<1ism5$B;pQfZJL@=$q#-MogsP~&y
z8Pt&76ed`xEd;<gE7R{;0(QI*FSsB;mY-@l^Y{fQI6m>`Jbh&{S`ro>j_WicK2!%U
zv-ol$!V!|GAcv}(P(EuEv<n1FGaz7wkf_*O<i?;mpJj^$tn+j$(R35U{?FXZP!usR
z(p(x-$t0NU8}XQW!Pg`<FRulfJ0U~Jf4hT@&P#NaA~`8Zf{IVFX{0!Nk%7Tx^>cf~
zfW^=k4}N3SG5+$*<>l3`PT(V}m01U%low}<5oFfYUAAvb6=6>le+jq5WAS6M!8q}k
z@%&doK+^T${h#Yq9g|XC>{(&6R`j8f_hEehLw=w3wzk21J>`?bVIc2QD-|RZVyJYv
z275npbgC%Pc;qAxu{L+$tXEZa!Zqj~SS-ik-`R;MDPgggn2F)A3w4H?L`KsTA9n-p
zEAMain{~`It7nx;$tF=z1U|ka;AkS7p7d;@qNlROnWm<uQ$&Q+){gUyjSZChS`tGG
zyil(%udW71ML`0$k`e<Nng;Y3I5>(F?5sm1j~|=w^rch6f2CROLevKq`IYI+pRxN?
ztgN|aa7MmVQzIN0@y31*(w^9hPI6$S_#-Da8YUi2GoV62JdR^qFwMHUBo!1w<1RZK
zv2TAhMGS{KLXmE1Ryj7uTyX<P`OwnWPTmoET;N6(2%__%(2kBqo>lQqfi&Vl8Cfp#
zZR68Jt7|(9E~lFiX>5UAYPJw@Eciv2g>5{3kViE0DuHZ(8}^-jn+LMQu`V&o8`H>E
zZ*ai{%Bb2kHn4Y{=BsN9Pxgw(ElLOl{pjU|oz>aY1mE^FH3-;Rno=-B*d^?PAUD=M
znEI@_r6n(C@Y|~zuUmM*;ED5s&nZD5K=u6xmlS#N2(HJ0Zf1-aMj*zpwdWEM7oXp0
zK$&AU?pulpXJjm4@c;9<C;erz%HZ;+gh#CXti%IbEGZe8!{Y;VlG^~Scg7%heR{&h
zl~qT(G&Z{0GbjbrwP)4S-*;%$I86J}qFkRj--EHy$HN`G;4$US=o2#LQm2vO{@tQV
zXLLC_nWVM#)UT<Ed(G%X$R8Y_|CEv+m>ll87Iqh%qOO4-oD@AJY~nOA+;fieufFg=
zCE5ZZcA~Hzq+m@^#99EKMkI#IX1IV=Qxlq~rS+w#sFla!O!2NhTs%}~+C<_g&p|Pi
z|Egva{NAK}-|_4?pIq%xM#saOURq+Y->&Pn2HFU#J<)udVw>vJca)A<AT6jByvCH3
zV&Nf@$>Jg-%Yg(msGv3eT#)toyJUK0FvNvI{4qIsfaYy^`DEqd3@8Ahz1v&kegtZK
zDXC46$82LB!X^!|7|{Ps8G|8~qJRK9uAh{mtgLTC#pv=qxO4Qo>*(0oDJdv6n*y9L
z1Tofp2L!#bs0DoP3A<@1S?#Z@DfJ}?ZpHG7F0{I+tJC5V_Q-)Ssn;_;p88e<^38if
z5s+`>Bjvx?GvAw?4ULPC*4*CO#1B%CYMK1_&H^?wBqXzwH3$mfO^S$=6fzwtxNM->
zb)WZ6boDeqQOA)nbN(b@Z_k!~AEgO+cy`jkn-t{3KmpR_e)ii1>EoX}AL)$Dw7Lex
z!w-g64U#il7~S1Z>XToRq2ew8*pQf%6qw8m_TJ>=soym&_jM7QZ#gx!v|zGAxY+!R
zwk2br6GoV7-m6e*FavKv@&W<R?`v9ZLjkmaW0Jqzfc2=&alUh@3ese;`@bN||27@Z
zpRfAgR&D=va-#7wc<HmV5WX9J@RzHIv+5Gk>v1Z(3Dnz&e?b!D6MK=x^XlFI1FWtR
A!2kdN

literal 0
HcmV?d00001

diff --git a/ui/tests/registry/evidence/registry-catalog-desktop-light.png b/ui/tests/registry/evidence/registry-catalog-desktop-light.png
new file mode 100644
index 0000000000000000000000000000000000000000..961731b65e3c3e9acde84cdbf74bf7dae23d07f8
GIT binary patch
literal 136335
zcmX_HWmKD8v!z05p+H;Qi@UqKySux)TPekhdkOBE;_k&=0!4zmLxS7Q_qM(Hk+nje
zoHH|L&YnF&gpz_JG9oS_92^|7w3L_%92|TO9NepKZ(qXx@|*ER2prr8IB79qH7~$X
zCj1w4bG(7og{8xdwV0EW6O<Q)y6@4^#L!#eK4K_+d?DEPlKdBmnp)52*M-6@t<AxQ
z9qqSS;O2~s%&hkI%`eXrmuddHl@XcgyMhz<ZC5v=?^BQ_Amf2tMQ>75i5Z2_8UYj+
zcp#%{CkF!WZSL~15w!O<YsuW+m3BPp&T{Q^*^M%VDwZKOmD_B;SjY6^6OWeXZT96>
zR2!cl({9A^^HQnXo~tQ<C+dc;meU634$p%=BjuRR<q_LQR0J-bvwdj=7v#Nr?+YG=
zS-CA`y|Z4x^!(q8imuL%x!Wnf(}P*s5X?kvza=^El)TMHUHXo)blE?|7>ro1x6I~F
zs%>(C#I3(Dd-Z1GoBqUXPBO!$p+U-sZsD|tLP+GC%QTo))jo4ZYS;VPzYr9tV47cd
zRco^9gu5SU<Lc5>=z3t2@F|lYIGV27cvwtATT<o_&W-a&2sk*!bv-J3+CqJbE%eUC
zK62F<JcDEoGI6fWmm1qB2A$T8em)YwY3-nSh7AVSl2#X|n)=9&<|owyQtokV+;LoP
zZZ=J4hb6j(EY)APsKv_3dYew=-SSt%&fZR^VP>-25d-0B73;tB`_Wy#>!hl=q@{4V
z4J{zI)$I=V(mN=7cr=uJF57wiSDv*OU%kn34eN|*7t&fUKC=$&IXcAnmEc`8&gq?m
z?Qda?+DBIa76)i7XxH@!Ka8${Tl3zuKj;|{N*j9<KJK7D(Rm}6le_Ama3Nwy$B#=t
zF>e<4S_ddAa;nD~pi~m{l|xfZeRS}ORWlUOYDlIH<JsW<?)?QTeo?Q?G0B`FLthlk
zL~hUIPO2(c96GJUg_&1}fk6q^-8JuzdU}$WyB{8(A@A~DO~QQd##w5v>^q+_WOGdo
zp@69|hz3xV|B7;tBMVjSV;^h%ueJn}yq<{Qc_NX#!(Z$CTQwoG+tMS-kxvOZR-Y69
zxdW33wpT)C<{0`4bmMCrL+#=bVL6_Q=(y19=G>N08k3ntnXs(Ub;1l$)g33is=O-a
zJ@ok*F10IyV)75zuQ%fgTx}lbMONCE#pgS9k`F)=Lo>+VP&qjfr8mozMSgX2wKYrO
zt2k0A&wt>{e;=s%&jBuiXAu)|^}e1F6Qq*_)YH<Qr_|-{*BJM~jXvKynFg!QR0hwu
z?kP37SXs=(@|7JU6IXy{xzeiobDNiz%T$p2*LQx#&j(^qqJU9auj@YmxV~>;t4f*U
zgm5O=rEmM#zYXsGx0x3b^K8ilL2cQYaA095j-@tu&8>#n-MUxGehqAV+piM>s7chT
zn$FEMoK6WKbhpH0m`E0FZ`vZFZVT<t;W?7}R3Q3{?Ihxmyfdq_3G$OBTTIcd)Tt~b
zbGmrVO8KgI8X+1)5%=_Mxon;5E~s1e)!(fVk<~@zEb1d(hMoUJ=M4HXGeXKq&+SkB
zYa}vMz#>D{O^fjZH6_rHGB)yj!mJ#9|GOsWBfuZpMbNLmxfV@E@4D|oA3S4|X<f%4
z&B=w#RcVu1&W4+s+UQmk5v(MJN;O3!`JnT*nBnh+%K~pbQe5y68Pf?gFmpw*^GsyG
zgZFv6%eiOrMm*`2MwkB0%?E{|sA(GcZA+d8?(aiPenlz}8nBavO=%^!$(=lU5*T?q
z7?|cDIx+?Ps-zudS}bwMlxv7~5&ovh&|<#zp48dtE-alB%T_cd6cVL28#f1po*Ml#
zHlMhSnYA_kbp6KHF?sOXY$dO#J1J+>y{#WV7HYmGbU0R>P9txg*;`wIvDi06u9e&S
zg$0uaxu;NM8DH*bm4FgCkhq96pNU{h_TFsGEUHBTUngP*z~xpBvI0maRAwsbyb#NE
z_`BbidF2>U<wcW?ud~nw=Eis=7q9$qJdHx+qQ;L|HaI)Xm2Ork$$snJ(L$&?E?<1#
z7}!=sO5%p;cp!Cisnx$nz7;XQ-lxIRVP~P;2b8*5tUoZ%DizfBmQ~dk^!!um?7cxR
zzhRnk$o3CM52S<8JDpb$kk%|ykY!3iw;8^7J!>YWx&@v)Z30$|aMqYpQ{<c$MoPYO
ziQ@O+0@hgU;=}coim+GeTnirv8-pk#ky%+YWlnfh^Q|j-nIXNY1@_kPwajw=@W|-h
zCDYpz95MG`>Ch6d3I{1a3@!`42Jsa`)hzV>0HRx<@O&lAL6@<2q59lj$LDlE0`M2-
zTu#PQHH$b(BdgFP6}T^BN-IE@wUgi>3IJCcWpv~jZmxuP`>o^X*C5KjiYXN+xwHQ~
z)ale&M1U+i2ea-OzA&cI_?l)x!BHGZ8@33bXnuOx){q}&mfW0{@BKt@@f&TtDR1Xx
z%nljPq0@E28kcorh+5*5M0y1oWhkz??IM5e^sA7WlJrJw8#RO#fM7UuE9mzh!0Cz(
z@$~28c*WJ%L;nhgK@-@Q*^2Fd)dO-(H5oT(lZn6>NvY7{C=*$ry2De?(-OvJoA#J6
z_%7f{{o@mDQbd^+gNzlp^;pKAb1UGwI(`3yzm|orudOckn5f%<?SO*Tk%yJ>IWJq%
z*4}{!*e+urQ|kN^@cY9>1vmTI1)%v5^xkWwvS}+LO?56@3y|ubpgB8O8X*lZS^L1K
zR$`@F%^eBO+8xXD5c4`#XJC+^Oo>9=CO`Ko<gPby{Y-=K$8PY*r{{<A@Djm@4lEiE
z)#i^o?cKsJ80hm0a;%his8I^s;_jSwdO+X5kH%EuLfi8(AcW%{jYmj`XRZxe<K#t2
z&JD6G0}DvwMWwIy_i-|p*p6n#L|S=Nd89zd%$c7uSqEg`QCxdfpsZB)g$X;k1cS|w
z`7aoss`c8f3wxDz&Z_#mt$AdvN>hd(4r=>%Xy6ZaqvhT*O>)(75G!uRQ4W`>f>_cz
zQo3nvK0x-%v0H4DUxsNgp`^Payhiz>1tJP#86F9T$BZjE#Z{tsC%dB-WPE(=(eIdt
zo0X+jqiX4C^$AUpZ<4pni)(~P({y8p?yg=t7}wLoVaImfmXnp%c6*V)7bOcDB9txV
zdOSQzyKie@VE;+mm{@V`XO2T!5=WXt&TG-OLmtyYYtqLaxrPTT{Nax*22LABF7Vy$
zlx4UB(QX@qs-G`*e<^=?8CL47_}4WZg-}-);Lk*+JQ4*5fCinAQ~UdVf!~dK`%;PG
z<NDv9yt*0n7dZ~5s;MDK>W3b7%N@@{2qoZ86j6Xy^i8`)`QEI|AL&Ct8z*Xblzowy
zuH1YFY!q4M{U&1(@J~ME@UX4#0h7J7xCk@&__>-I;<an+7p(Hpy)9@6u4uT3pa@a*
zwZX&0tgi05Ld2Eh*g|C*LL~gNwLb#pe5QK4iX5LYA7OfDDO;{i$6DZtV3A1_@OXa|
zQa-`Y5w5-4u9&J(uI6*5f1K`~^3V{!=>K%yeYc<%R`Qm5+RfMuF%c0T7H|y`IqJx3
zA9TO__yCl*35W6Tdez%1ot+}RioI>o>wOP?#Z$hP`t;3i`k>HU9UeuRqF$Ls4pb{T
zg;qr3#AF{Ws^2#`#nndZR8Uaxbh_z{)cF*YA}PT1P)bRJ^7gIKUz5(Dmvkw=?dH-b
z%+g8p;i2XYP7$>W;D1HCilG&<jjDpf(@?S6;H|$yjn{a*T61^?iPfFq`sSg_SvkhH
zolStiamoknDIw<Zc3UB`eTV;TVg!wHOC!$FJ(#ul%hna=X|G)BFp&$bW-IECLbh>#
zZ^9W{4E<@@UFcWm5@^J}hgke@DVd903k|T1?0pD}vVOR-UA#?Wbc49K)ue4-zIp^T
zj&b+Xw3~WR@6Q09#Lma30bx<1C-1&8+j*0H$oyh7Qm27RnVMSgojdj)wHlF&S<xQ2
z3=OMtl3yzhc6K@Q^U}w;B8fQn#V3qfhW_@mzMW4>lvRx>f}jW&<%YaUpFbManBn~D
zJ$!J<D<b+;F6MGFPo+5li(vrJiLP3yf|Dq&0bIrTgddk(O+U(BJ#srT&tTA8G{a!I
zp%(uJ2P4J4McWm%4rf~=UYL<7><2Yf590fF4K4-CGA!=^QAUh$`=OsrF7%AZJ_#9B
z<wm7YY5ro3U1U_|nUkt}&R(xNA9*LaVhgZaWtqb$yW2vI;YgC>S=V4S7K0uM_vQq<
ztmg9-0sW+=%+X}?>bSn|KV@HpsRH?3t-y`UntU8rqv!>xw|JZm0zS~!wNe7|lc3UK
z!<G)>?(IzBjlOwlgzT29dD`m0nJ~-_X&$KLB93{f;Ism(VlysUqxF3^aXTLlF^Q>G
zcFf@u7!57Mh=R4g)%iYPLZXOj@%U%TV!K0`evt)VnZ(8*2AA4*-I-pA<!w~^coAsw
znprxM+U%rAr8U1JinoR6R9GVJZ$L`Faoz0>8;ZQFf%$S|$PRikFM=%->Ja_Neq;F}
zze2u<IRnzJO3*&x?t~%PyUmk(!cGtVl-XaHW4Mfl7wW|^_ATzmKTQu$v&Yj7YRtA$
zDtUDq55*T4^jrRh<EBDttPeUYWn#@aYhQh@o7@k_H7b2qrc4J3_}|oukcCX#k#Bo_
zqyId+<GB#eC*Uz-Xl*Hb_u3t`WR^Y0L^|6@g>$2JCJ8>VhBdu-R2zDjh<asgurY*i
zA5e3q$;w>{W+rW$V^9~zU;*~%Pe{$Ea=u?Z$nZNpt-@XYAl~~y{O9`>Jq`#?#jnjt
z#NR_^Q?S@{5=4w$yq7Z&&z08nE;OEND|1MG3tX-$fiXrsGJ=May4tLU&5CEkCdkZH
zG?50`Sz?`@o<8#MjoOL!I9W`Mk6+*1glwUq%Kx|#(bA&YmXnkF!D2rbMl?1yI{N<Y
zTQ5j-Y8C-!<eyOLR2$#Ti%CXQbIuWS>ojU%Iu5^Un3a-A4SM*Raf7hL&5&{4;MZn4
zI;YQjoVnmA7oe!+FkP^o5~#@><%MtQ<~>|(sG`6}xcIX^aKZXqH`csA=549$bZA=8
z>zF?2Fs@|GX770Zbaz;Q>$9l6JY4zV9ZRJ7Y}$AaJy}fHZ;+)>T;<gnnjUJowHi;g
zowpwy_gIw7Ck!<D9TzZ)FIc&7bXdMp#r7u5jSA8A`coXk2M)(lydPO_PXs=uJhC@E
z_*dkdO(|XPC^>H{nZ-GZoP2T&sE}FFLbb4wWdrbfRj%a&Jj7e9DNwWLQe5s9pzCx+
ztjfaY4>C3pt#`|igPTTGRn@Tf2d-Yvf`LF?XRqfX-!N1cE_^aewQ`Wm2X+xr(Uo)_
z<L5xUH_*-~md=}tErCbLy?HtIqXl1~hhKetwGZdF%i@ZBx1ZcYVV3<2@qy(ie`*0R
zcv<^cT$3Qxqm}G(H&W1RNKUAo=H_SIGXzANpi|(ww%_P;L}Pf2`|#*6dP~WWdCN!-
z(lDCXB6>PSQU-tax!M~=j6dE_wVu(rOI-j2#Lq^*5C#<<yqV(9Nf6x4r=$9|`x9|N
z@sRVhwbs>jNB!hr+627QF4qaB_dPwT_;g`<-Z)|qxCw?rzb^wY<=R?X*ybJQKcr6^
zt5&cUJ2+W<H&84@)(`nQFAk(}6{NyQ4=x?Scc|Q}FfU?5F%T70k>909R%1TOVw+L|
zso2VJOiChQw1>_N6}>8spV^?oaI7^gX03Qb9fifH-%N-nJAy%zq<aQ>Zm>51SJ}&|
zkY@!ttF%iH1U^`kS4JvIHM#9aein6Dt=8?_`Te_Tr_v`pyM)EPGz&S<(IQJkWn`HV
zE1Sn%gI3hX=MIYFYBBoo?T^dm^zW7PVjA#XJ6W}>2nbhQA9Hv7?va&P7fww<BZ$Fa
zW)5>jHac}V`aOhY=p*`Ly3|xxL(7cyDU!7Lha)plKf!pD0<~w^SoAdQ&oY*3Um<gg
z%<}n-uP+}T{En9zPOr`xNgpT6HLOh{RO(NU_#Y;7^VJU8uLUtb?Y}duD3iZ85ZO52
zEPnZr=`LXy1!FK>tMd+;Rf|o|vd;mYPwgkWodJe2*{xw$mPO~+5RjuL20_%sPF4h~
z`pS1?x`+j9jYXwI;_u||Eyz1zJgky#piYl_i`}-;Jj({(X4{>me7?(8Y-18#zzx7f
zNA<Q%qD1)^45aZZiKLoiqO|vZ(OsP<yX*1nu(DD!mKhuEb8-N}ma(30>b~m?(7OOH
z)2P!V6fqrT4Ge2K$l)|NEP?8ySVbl-534CM(wO}(d{5h+*20b5s5@aC1DfjnE4w`P
zXz|H%><6fhrJ%5|lf!tpe6yJ8Pi$OXNN_$MqQ(0ZlX<^;mu$P=mzvrJnfY`~>i_a~
z*?3>UmPzw8C$PplVCC}LS1;6C(1W8Hbx_cYil5<Q3i;7x4vZ2by95#O4MOUc(NDsl
zuUxIsQ#{4S(&Be-)Q{2BKt91o%YA#1+cJ@cOAXfNPri<Cvsc<%kRqTCm%-PoetX^P
zc%1gfzun>5o6#YG_h1*}po&i_q6MVqw8^yIS0;4|tr)`+rB%Z&Tt_xN2va|;Q@suS
zd)-QvC=Qkjtuo)UKoT{h=!Zvwzw;;u0>^#x9JVUiIYPNH0zV|WgyPKFvKG5Fjo?e*
zBCsAl8TAi|{BW2)7fx_!322vbVWPLRn#)-Yt<N7VrK9dF1(i~aSshpT3C)MEYCit-
z8`1=osb_Vb-RoQ~Cg{<8e~mNwTovrg8Ng+0V`dgXtC?4>3B1^xzO~f|aI|<y7GG^j
z7~rv7(wseUw2+Ua-ntWeIf}vPbD?|MXa!C*TRibZ0oU^mj6^kf_8iWXfo#<4Ek=Ny
z+Kc6<?HFZjALmeT?>_kR``uvE6LEQct4o;P#!D)nwc0zAoXFx2Jm1*9NX~f6uJmy+
z&UKezQY38r5tH6P1nK$SYX!onkQZWo8bDQtLEv9$0xFvQ@Tbtw$n$Kb_xm(_x5vMV
zH^HN*pwP^6{yggK`VoF@^2Ix=EyIeSK&{{}KXE&Rn*|6OXtlNPXW9e>e%N_wBl26<
z_T;6}=L9NUay*$^-`Z)2aA$w01b~kE{J58v2eT5R>hV6P`5P(8?|igm(5uwqP+YTG
zE+N!L=qdJZ1?*u*<IWLW&zh2Xe{XVp+b)f<Jen?h^Sk!?%i7HOV?y@6W7w5<5MRk+
zEf&zG-Zy12`7JHQ{!;7x9y8<kty_memdv(n7I$E>_p240U{Xuz1Um(=64qxjNC7r>
z)ybz|PjO^=H67+$w<c?RfKR6Psym(i_-_JX`&64Eh()l2meYolt-5dW5(-<FeCkI;
z7u-Yfn}@MN6TQ)<EWfEn#aRE=`A%MY5_R5y4K-t}VN_Yo*{ap2eM<vbd3pbn^r^$=
zhib*slTp=;%}iFBcX!YxOUgEWcMBaKpRlXSCvaQ-2tlw^L5`b@pXZ$<jHA)0vmBH<
z1CN*MuP?UCad5`(he3O`b#gYg5)u-{Rj-~N4o}B37aQ!Rwu-YgFNvTz+1ZZ0Z`{9y
z9?X~P=XrhWjhDYgB@mFfoRqk|Ta-4=O*##{ksiE)FqSjww}@b=zWMJ4JGf_|TAz!S
z60XN%9AeS3x7w8^mln4g>Uht^iztFTUnl!e)||`^>NrYj_!gTbw*&;?TauE7$d$6<
zXpb&UW^ii{Uu+v>rHLXC^~dWdcN5|sOSv<30Ql8tExmoMcut$LG9}VW!v}y`6NZuT
zJ}Q&7{vslIXSt18(*TsP&2ZcP<&wcqA~G;yws-1Tg>ZA)@mwtu;(|e&ga*;1!*W+x
z3f??|K>#ixK98LDAv=p-KR@r&reeqRuxQJ>Qc4|L_ffX=`_QxbaXxj<v`@Y7Bke|)
zLJPgUu7xVN+o$IUTwGh&P{gyn_r>r4y8L_-t_LebCkn*Pg>@I@YL#Iu#V&6XS`-l}
z_qhBFkQ2nbje+=ljo=Zo>363MzeYUM;kg*yL3|w@9Z*w3=haE+#MOI~mHFNiZ#k*J
zqxkz(zs<tI<?`?9MRFP9sb!T*9`-9Wy$+3@C%;pmQHp|wO8F9?;|xuN*RTC<rj~aN
z0b+sDHH99fgBu~PZ%_|v%@4;>GS%~NX4GTr5>yKFF#T?GJ3F5f%sZ2)^;t;reh(XV
zM9}Gn#f+30b{5(dD`uNAsGFbXDSj&%oJFQ_Ut5buqg2o=*YHk1ln_}O`R`=A?1iYa
zzZe^1wBDs|0mhLc(!XCj3sf#m*Akcz`n;SNzFf=cL~#_1PYiN;dJxy%nBMN}xI18V
zKk(WkS;xVuO-z&Rn;cdeKXE&0+LNMj7@2?j!xalC6B62N$WRpf(+@_9dU^ngyFk6i
z)HAr%Tz^|<EuT$^OW7o<CrBg+HMY%j^+`0J&{xRInr02UHi?Nlt{+*Y)UUOs^>AFn
z*m<XsqE#*8?L+Fjwzkgw?5n9=V3J-^o7%SHW;%hCWW@39o5v(_W__fOLsAv7=#fNB
z(Ad5;eu5of7Z+AA(vI#;&dS)Mcu`VD{8gZA85?6PSTmbt?rq3yH|=!&9Y8aDGu@l>
zgT*91M6H*~Xq%L#>=z(*#s8uD<CyMc4zShp0hAL!kb=76=NsDeFjI3|KsSjI*_=m<
z+<dRB!?k$<{vEh>1}bMxWzZ-7SP<CBOI_$*Zm~U*s=fjTyJ+-cZ%Vc5wP9EI4tg?G
zBaTKyL<E`(4h{}QIiaOf&GJ1V<T~t~(0pjI*m~s&Ts?EFHd$}?1$X~Bq2q2*WA2%d
zEwN>%$4BPd>7Ch|>8rJo^qAKOwdWqZyOR5TM^}*n9y{tawYB@XNd|4wX#0o$*Rd;g
z=Z!fzLK<2XG6Fa~w;bm)NpL@Ik`dQYp0iw90=&o|gku@(nAu&jN#WsRnRd+d^pq$4
zj<lFj>Gm8;IWOAx$oCjK9~BG{kdGcge(Bij>xX9kT)VG(0Gbp|TbE-_n(t9;bII$%
z3au)VH4=CidqiP5_+zz#0np9XiKwc_y2@O_R9$T*-J_*J7QvBcv1BKynqt_-d{+)L
z37v^xR<y5naG45YOw1!ViG5mz8|zk$Gwl%Z^6uMix~r4SXLVU5>7k*XGT7aRTCdbi
zJzk>_bBi{8{jK*FN6j4R0JIa`869|uGi@S8>uopd8lB;p2qqJIczi5OjrBdn5ew9;
zx=TdgsHmub(W&D1@BcIDazHq1u^Hq+U9$hFu0TsNB~C;`is1Rn5P2^iyblX=84A>I
zY4B2tZnLYK^my@_$90E~7X3+qH;|0>Y9)^61)%6F+OLIEl+t!a)}3r<6djQo)gdNg
zoq1Hh8Nu7^jXu(EznJqS4Y+D|gYLtoF3LcG(ov|c^3E)~Ge8njS-1UVg_eV(zH*Ea
zYecrtTp{?AR?DAEsgXC<D-|Exzh-i8Rx%1a3e^uT$WCF5Xc0d2l#3INMRl*=4x(R2
z7^TzP#&gV?AsM`SRIy+pb#3BI3XBe(q0Uooj;Lg5U-yxeZ^VrL3b0e&4Yv&^1^C1)
z+Y#<-;)0riEyRmq>L+`1&KozoCr1nH?CkCbytPyz=*T<MN*w^+!*cK1)l3fOQ8d){
zi)q#E;pE&A4GD?<AFK1Kq5Qt60B%<W?R6Lt)NMRISuO=XJ#zrKYU<5~22BSP99C*X
zM?d3@P!>vWzHvXCU9NGTckFx=HazWgeEXLqkbXUn<8_UM#HRItP~W!EvUwRy$AhF-
zP@knSJ8bT{MI|#D+f487iGcd8%nS?y%*@u1o#X0i=h3BK=EZ>-ekCc6&cw4ND94W@
zptI;3o_!-f4<1MoqB*I%NRSM1dC=<|X-9?Bj<%!OYGnR1B5oHyqvuvLpx}hTB!Duc
znZ!-$jYYiXK<8t3g`(h{(_*3`UqP}YrC(`TWN!9`O4|D)fw3M70?zjkD|BN_dxguv
zBo*WyJ#%jZ2HZ`o<<N2}mh(kZ^<`fQ0-M|)RSDUeG161GB?*axBP!}WS|wWvnkBy}
z4|+xQ7Sb$Ex9goPP$Sr9%jt9a9o{BVwm12VEi&%V2kh)Cv)gJMPIg@O%j>>D_7BIz
z46L;~?Fg<F@XBByiRE`$t@9Mb=Xp?`mXF2fSFX_V(gXNK?nAH`V3Ax%O6m-0BAS?<
zlwzj^2y}e(sqgLWwE>kW%y%G2#1QZwbYE=G0_U&6yk-x-N@Y_XRbcUDuJQ--e^<as
zw}&~yh!p%$>q1K6Aek;~ZN_-BX{s-ZQEsJ{opf8QMKO)O%|DI^LWs)mc3PZGucV(G
z7sqA1p=OQ94>joU`a<ZLehq_snN5NM?KZT|F(y|N4+-3CcWPel<(=G3*S;EZ&tpLc
z3QJH~vV?%sbsMll`{9^{IbJN9IQVY#*6nGM_~OhD#^vl6nu-)!d9MjfF>g=8vIXzA
z9>XM8@)LJQZ)q!kY>iCl<C@JDwJ?PFmEi%z2apvEe$hJ4g3C5WTigeuthR>6at;U9
zg<IlJgKHFR5C-MAiyC=Hxt;g6mB1fr31+StrWh<R+SeK9O0=r^9?AE+{o>WjGt>7E
zdMhUDq<e#2`IuW+be!+FB}4`obbRS>xbcOI06W|-X4B7s0;~tsA4f}r+n{q>nz-y0
z8S(Mw3xNG(T6HB2&`)77<L)>j3QArXEIho~M=uX}Oey%F!*0ES1S;3O4H%lB)qE@k
zCBiBK=$I#+SSNV@*}sv|uL?oZ+PCXo*}Yf{<V9OHjHir&l~k^>Jg~CRDPqGxG<>TD
zximIlkBx<m2mGl86gubM#q#-O4~^E_fX=E~)+=Tjy-Yh3H1UTdS%7!}RJy923G7E7
zM^$N3qIotE;TK`iM)I!kc`S=UpH}waVFm|!2}7iIXis9D5XCF<X&s%Dx%yZ1j0Vtm
z^fRo2XrU#0UQS8TJmt&-k>CNzk^TGG>f^hE&~k8Eq<Li@`BZh%an`S3BS5ubsPUUv
zRy^#yAM9t-UU`6kl{S*lD*S|>`Ep~@!Uh_>ov=R67cxQM&ad1h{@~-Su@GGKy7KK`
z>+5QiZH>Ds%7ia_{ksq4jZH`WuiyW;ItlYf`2JZNnpuiQt4;$<yxkgNW$e6~QxpW6
zP|OAm4t`26#VVi{^t%sf!pFrGG2E|l*_LtJpC<2<9~>S&_?>$>!WdJSw6&EKAIm3?
z#I83F+ze|B?~`2SOoGA4{L7awr9hZ7VJIiE*|zgll49t!3wAXqZ{yHKINv4cz#y3E
zFGkUtyhriTL9JalybqC@=eT0zrtWF1qi_1&2#>PyxSu#-*i_fQM{l}4j1lnUObp==
z_>PA)mxO_-OdeTiX=Y(&aeM2-YGSLSBauSdDkjD?W6jCW%1R5X-#RvmhRp$EvZpI0
zW5gjhrlcnx;&)6S2cM$e^-1gbPYKxgi@=4kmN!%^X)fJNhuhuhR~<~_*8RMq{I$j-
zku_!IYG5<DW^SfZ#c$e;AH5qMP-m6GO$eo4HpBC4q9xUPm$FQF!>V-qqAcAowl-%y
z8L&~{DW#!gAuA>2XWx@_7tI^rBAi|<pU&j`;7Yd|_eQx$j=EF`GH5#Caln&f32dco
z6R5n;6h%WzZ1J!*%oB44Z4~6fnnE9k8AGX)omaytb?RHAW|2QxK|%O`07aJcCcu@a
zU&8e{{Gww8A3*X69sOqJ0)ErbS7U%T-y70@_;g22Q}&t`J;t)%oHa|JuB#1^|H#t@
zWVEfbxz3cL)$HKAJBRFMa5-HzZeIc>7*>ZCK?<?@7wwv3&NU3Mfq5QFY|tC{<|AP3
zrER+PG|1ZucZEWtD2=({vIZkAvuvdh@XF}7A=u7aa>_rdj^v9~0qrt^m$*fv*vjW(
z+DukvI&sj1Xw6WYu8e_*0o|w4=SbbCwmOcLc2f~ygK2sN137x-5248sH8ITfC=eY%
zZUINvKMgpHc5X8V0zkiF7l_t!_!fd?n89?pbQ)N&oj^{y8UO*sqb?s~ZPh)`Bu@C(
zueHvvdR@cHDtA5;;8(DS8n5<Fg9%pZ>pb6q8frdyulE#|snfcj&N(k8od*T2q%%aB
z{oo+*ndu?W=Z%w4O{;bKuVD3sq;K@*v6IXYYV1L@a@{dGOxi=k<d|qrGEpe2S)`Cr
z|1hv>Vp0_mL1qu#2XFRaWz{WR>Ji$F+QyYIlLyF>`(iJ=v8?@Mz&KYF3Fak4BuTWS
z4{*E5<Y5-3cfNZ_4v~EZoI&|RxmN-8H@U688dRH^=?)WmO)XXnhC0VQmRnQUw<HBf
z{aEx!p=m-fUF!tyqUA|C9QAx5w@>;jEja0-#`Lz8+ha*8Ag-+<PGCxUgi9!2ZD?0F
z^^%6&*I_D*!mjRFvS7ZTU>Gykc^S6!lt8vqzlRY-${C#+&f*}&L7DwBtZUA`HOoI>
z<BH&U$|XPa^6H4cOYa5a)d}yQUjC-VgkP&S>t))+fBpuyEH)Y`_><)JYv%2u*S&wP
zy2Ll{)yDbnUBn{5YlTc6)fzLkWEu?lH{i3puK2N=^mE>8OP*D$x$9^@j<)o%r6PyX
z%NrcShntgfR945cjihGAXhIzll3AwW$&<QNNfyVmi#kTb028ZolOM-2W3;926qk!1
z;8BDxmC(4@+z}Nfj(h4_)(NadwZB@<DJODY0G-b+KxKt$>_`@45y3dSquh3(_j>&A
zB~LK--{Fq}(83x<BFehrHB(b`5g11(QcKW9LOamH%v>4z$hHmFKCt-RKgI&((_}QY
zn5*@gS!Rm9ckZ49{h_UJMlp7=qL1l8yY>c^0MD^1kroN-?6sE%(9^(E87Uc@xnj~0
zqSY!bB5k?~UEf+qgHrI#udUp6-k%TWkBoRSV&7JCm#Pq6hDBSK;32x@lcy<jauv38
zGqV~qk>O;1<OqpPSXSS$Rrlz^=u!bzXlNmOSL&2wOwmGrFe%JdEPudwW%%2J)XOzq
zfDN&X!>D5w-b0)=tz|#e<Md1z;o8CPeoPYvt-{&Vj_n>^&lDwpq8*&p*G<Gp%rl>D
zHGS^vI2QOKhY$Qb9Q?lP2mSW<+5%dg-lyB;)jJ^MYH*+jzS-@U7XS0%OWsA_foy%7
zJQrr1Qg2(gQOC?~Y6=i?ks7C)GWEtgi~g*wo(#IY&4Kl3Bm7&JjkVEl%SzJYm!3*s
zl6GOv6GHql-F1#h3G*Zw18kI6s3=9OGU5aEVj4Q0Ns*lVTz?!1Zl!0M3PaY**-wU;
zbrZ6UF_PTY3Zx9cU#-*%+&{Q<MnyH6^M0-^gnfZKH-IJ>a~ilHbkJWLi`xkWov(e!
z<od<8u&~hPhKYd+Larp4w%JyJx6E;Pn}wUuv4b$x+53z34iIxL;aZWlgbElUp*ZAJ
ze`Q%ntneg06VYome}3m$nl@eYo~F^D+!9@`@{e3!9+ZU?4>;>zoIPv?_w;@>$hz8I
zK++sb<?(+SmQ~%wV8lE~ZxL=|vXK(=Ix9a7a6d7ryH$blsluw1@VA`#4ql<Zf<*^D
z_73`sDuO2)Zj-%?->9NtzgcA3AI`0x8$$@1*DBoom5aeA(nlnGg4SIJ;PM*RYEkms
zPzqf)l5_ovA^j4#{Q9&X$KCZoX|)lv*J;b)%K#z%Ux!pO;%Yl)mRCG$$arQJxbt}c
zgmiM0scu&>(7$}R+}V(q9l5awH@uP@|L*<MF~X!@S^P4hIqU4a#}F4(>Z6&u^AzCI
ztv55xs#&?z@jSRsNpz&Utk=pCi{Oun!py9>HtD)*<Pd;-p}wNT2|c8S`~D{PjKbB%
znjAJ^rY!Yl8c-xr%H$rMFC<aA_YVIymeq#LX$xcKQvq8ci2*kX6=Se=P;hg09d_RT
zW-Q_0goJxpf$bQaxY|yM=Sz#nw$HZ{tE-JB3kk`?$rV}*k(gAEu)NHYQ7pT|X?r=u
zO47rlSOeL|-M+hRz|pp`^4=4eo!u^yULvzy3QoWn;o1fA`%>S*n(db3hTOi){p*7#
z%SFOKhPg!$?t+o<8kL=U{$wF?WB=F?{w-wltOza4=J(qf1$>)<F8OgM*BGM<0SFC2
z${y0E&d|1&^fm{6P;jc}ifWK(zUj33U1Fa>WV|98?bvthKam!0S;(vJEBR~4CZ;N<
zSRSx1yH(1i9|VC7ujn<2P{Z_~F{G%ek-eb$_|ZTJg?8M7Q9PSl(PUUXfrBc<4CNCq
zO){f;wOxVbF|Lo(Th?Nx=C0gg2d?KS70$G(E@KHW72=!R6s%CB6{gsjhj>bUt!XYb
zc$A`C=Mo<YCVEN~Z;lmtUL!fjq{vVe(s+txafIExA83d(2Yv#tQTk^kOR2u0rWgi^
zj`#-)ul;9s*xP9?xzkTQYf)+^?EWZvDtFPhq{ESLEyPmfrw80)8wuZS$}93V+4G4-
z((R<uqfI5=dBZ!FbPSc!F<W5ICCwO^7dqQ3{~Ku&GA2Pn|EzDWI<_@DII2lQYn9{R
zRN?eBLPtcmXE3!tK5@8o+wv}gq7R|AT;9U?wsD<*pK^fC;ipNqt&9k6<|LG6+79Wj
za6-x=Y;)h>TRXT9wD*ufj3z$@cJjQnzd;7Up9l6sG|L$s!{Jqr#TB%-r9N8n%<Pxk
zaYTsfdL?V6U5J5XxGrnt%#$J)U(+5CupU%BL`^AA?lsR({l@sQ&rRTLSoog3Y~!P<
z(5uD2`>lD1a0rA@%P}#xm0-(tIfX}x+m2Z^eM9I~0f@T@W+l}u;sfX7s){8T0HtKE
zT4&Zw+>yV2p-^L^WkTq}%I?3DP2nNi63?9masBaYIJhp|w|61qycWjE@^|8)?AOS*
zG_tQy)PB;~l=OP5#WqN-3;&A7-xsz`LM&DmbwGbt8zxa}O%89IqFXle%~JB|d_`lp
zEvsN(h7t8o)fd)>B*Grw%`wkk03D9Ji!fTO<G27b39|GhrG9h2S$@G_vC?82s~%sW
zzQhj?(a25=+`MFk?6~Y~*Zjs=k)g<c0JO*%1;oWegw9XQ+mD@y9{|77+Bq`h4@e3R
zsQ%5KetwSYPR`7v*KwT&%Frs>hs(sY!18KoWev_>4otEgsBbof-{Y!CZ-0lBb33Q)
z)!xdp);rR_UaR|2vNYsJ=rz;F4St9;b9PFlvXlx`=rMe+`KQ+h2ggYATYEZncp8|O
zPC;*CiVN}7!p7+?ozH34$i$b=6*?9h@4;t4gcVQpX{G1ow%)^L@n-cujaq7;tJy`#
z5SDwnCq<H2z6e>LEEO*MI2;*gwl~G_&*p3I%0kmdZEA;(*~W*Ld__mg@xC)^S&J?J
z((U}ZuZG(qx2n01t%Vg@36XrosEg9<>Z#<&=m_S>k@ZPIyn6@~4<Rf6L^TjoV$-Tx
zApeZ~@w5JpYf(h9Nr2q9g7BF8&~zU}9kEF}%@68arhy2RUiduaY&%igY8rdJ)^Y_p
zuPdw#*gZni^1!YJ%wzP~6TivvS-sIKKnGRuWfIFuh(t;}e?9NB;Gi9CX+0G(`e$~s
z5Ma&ce4i6M4SG&i#&x6xXVDnjrbuHxSy^VrbO&@5&HNK(X7WttNW!wH3=gCJ8cvjF
zYYkm$+^<nc3gOAd6yqhvK=W#jG_if76F~%P#IMf(E|h>W`(aYGxVhsG`{_0l6pKQ2
z?Wj>UabxV4tP9a?Ka<|TI0dc>-gbQU3u*&b%r&}#gQ|@Sf^kts3u}QMCoLO=8l60=
zaH-xUDb>Gg!g+l(Uxou=<L3=oa8{`d_=`S$(lcqqD}5s_2L8YV-E{KYa9Xuf@a@n7
zqGUShT#Ju#cR?pVDdG!`a?N|eS60Tw$SL0mFh?`fec=6ndr0jnepK}uYD*ExbFslt
zUi<kZ0ARhTdX*j9gm=de_4@Kf+;vfFQ^}G1^zC*sbKE;V6;VW!q{u9r#8a^uod{#j
zF>_`bS7M&{e+Sw0Q3^S*@YHYoD<m5*WD?>zCIM?ooZ#V_GNi=^tf#khXQZnoYodyp
zbiB({L4+q85aS5HF_O-TGaHZXc3h5R=@!N5L$9(|E<$JaME4vP4`KNut~!Hp{=ZrP
z931CM)|X*>!r8P=TV76DM2KA&zjZt>8iv33zAdgnqQjm}p?8R&F;f3bCDi$TqE=S9
z>=Q)>`Y)td-K*gk>bsZ!`#*&LUZ*CB0r9>zURxcxjA&^@FG(YrZQOtS)aS1Ekz=zd
zQb;WP{xaMplzj^|Dmb(PWaKZGxNz4_BPX=|cY!ZUukavn3Xmv)toI7*Nn_3yuCAlO
zJA945xuf>QUye`T0Wvq^EfGer%6w$H4@v+249?+`T^7!_A2e{g@Rr~BvXM~nIg=K+
zu6ZEy%#{q@I^NyBv?T-|FRAU&`zr0#UX&n*@azAZG5(T)nTim0qJ*yB_S~Rnsuihj
z`TkOwmD7(bT$l5r7J}F%pL=HZG8!^whj3AS94GR3(>0AgqwvT`;SydUv4JmatODY?
z;4?Ty_Lv8|kQB6UoR{GlE^kBA!44cB|B0!TL+`XV0V&JwH3@-NrfaN_?Bh>Y=#yP}
zam%qUZ=(W#Fajs}?%&fP-z9}5*w21wk3>9sZ6gb$Le3L-zfk6?TvFXI;qUM}%R&1f
zx#a&I7YbVE4-yUZ(6ShMv(sjGr3<{GU|Qsl1(>|Byi6(l@Sg6UUn%{DQJfIFEeLnN
zTTsS8QNu{SGR<^gCHt<n?n=LjW>j6=i_TAf*KMl&x!2uYO83so*H5Oqiy3G|1#irE
z2(qs3<Q#1XJNyUnU+}(d6Vqg2Pgs!hI)xY$XAmtIx3gx^AOVIJ*OLDU30JbA{T^kU
zNmwSHZ6q3m6zs5yzk=w~PKP_t=kg8pv`lIR@Z#@SDqL4|Z$@p&R;&p6d&II*k_zw7
z6jXl~`l9<IkJPDavLPlpLT#<!Gs5oQ1OaYY#7lB*u<_ha)Nag=UB~V6B_snLiRka|
zx++DweVvwPHQ31hU!*mQuJQl>0O#QH+3Ej3trZnh!Q;TMS?r9a*M@;3qNB~{q!ks5
zYhX0JLMc2dir4*s4f19nhCoq9#)K0C)=F*jxul^dBO{|Tc#zl8!KHO$Fzn#-zq?1H
zkoz7LWyy&V;#Xzke08*tmWHjNWw+eqJP?yP3{6TxU&O0W;&Rz~o5{h0<Hn;p*h(wt
zb$(zL3Tw7KT#NwA$`J#LhpMDFPt{+-KxhQTRUdipdi)Cp;_c!~I4UzlgSDp8-IK0g
zq+M*A1B%!@Za4hb%ZvdUl{#Y;u2)CR!oi^wl$5n1#@oZ{6N1kqkT<9TH<NRfOTXp&
z?oTJuI8SMHxV+BRd{5g0cSdnE_V}Qaq^%yuuu(NRFE8xYQmQRi^(f92FWaGn!it}1
zyw|cde98M^C<KIjUf8r=DEM4lPHS<@rdiWN`7=1cqpEVv{N1tpnw(&J-~TD1UOp$6
zEg-7?lNR7=ce>)=`E-}@ldhFydzYr#=kiA;uV?y1r%|_vO2C5rcx5#PiB2lP*MNNl
zR6-Mjz5{O88RfxwOgJIp%}in%`~mNE;V{OnoUGdeCi{!%R6(zq2%Wx<;-GSv*n_)S
zzM(-RaQg88L6w<02e8jTOeL(NTH!=2dJa3v=lj(#SXI^Zw*Nrm73$5!NHfP$v|GT#
zcB)|*D$&)FV|ffAzfP@%ya#EM-|fYB99GE~zsZ4tFfh$`0$z*Rk^zUcZg7YHeTzHZ
z9dv(e87OtzCi8H!IdORavYx9b9eSv>@R!<EZ+0<X7#sbcE+Kvk)jlvk6N=9Zf3Hlf
zSDKTf)5`ocOxpL2MJ%9)M{lOM^ZB=F{%iQNo)9F@<tfv{xyrg_;OZB_=Lg%P-^IH1
zHusaFu}}A>7N8C254W?mTmoJX@7rxn@nR@Z;6nr=gI-hkbmxPMKp{TA&(VTqw&P5Z
zKg`b7l{V@FvDqIk+)h^@<v>g+&8b6NAIjxY)l?i-fe&bj2?-R60kyh~gs>whghHWi
z+CZH;D|VY%G#Np~#ozDHC}MEgC8%ml2gcWXPwiLQKwn-2&jDAvzE76v*=oYf<1v*7
zwB|&?WpkUzYKJB6$19KH7GpXp4WpxS!>$Lj)QfeG_t&TdKAiRf$KN2k6C=2Vd~Q~+
zEnnL}hbXgc7HW{qi}*jQ_2`8iopy2xTrVTpFEtd?lR#AH6ru$l&P?l~MMK}`^O^7v
znD8{w>(q6ec6@C0e5SO8f<238IxuVqIqbMpd23+fqqrPLSrqa=RIfX3cXT1TmF}-s
z1AGrM96QL(a#XAR?-lZPVP=TIQiKDwKi(ZW`rYmCCPm}sJyL^HZf<UTPnsQfMi+Yi
z*Kw*+%zkqFus>FtOZoEv1uF)(J-vWnsl~muI185&<x8ID(d+~v|4E*FeyG|Z`W2b=
zi=;~1`I9;j4h|08HP`fE>qk<;g3TVXuvneIjR?v{$JK7Y=>)3s;k5DR&3=AbJMh+!
zqd#;CpEy2-I<wFXozNe8zPD#(jnHvp!a#s~z@6!+S*16%7?k3HzV5^oaBok((52t%
zaeKRqF|DqX$z0o-*1wSFbE{Lk<H_?(9ikA6Dv;J!2gIn+Kjxv@R0DF9?KWfTU@2}-
zNH*=&+b^xJ_?{ZJxTVJ(7p5Ada~$heH^A2OJXt=zyF63_D8Th*7Wq_TD9p=eJmuz7
zYmnr*hDM3+*$DlZs?u+zaz0*k-@uUePR?nU-(|HoohhQ<3x};IZ71b@UVyyX<V>3B
zu2#upqq3XS3Ijv){NC$9(pdhpE-7N=+e4*1cUNWbv)sLojNpgGZ>WL~;Q_VnzSsGx
z`hksTby0g?CGI12ayN#CsLOPTO-kSK?3R|*T23J1>=j8+YB}uWyXnEi=wC*u+i91$
zUD7<!;$beaz6%P+n6~C~+3FpAtU*IV6Ww)c^&r?!p@GyYwQo`dV%>3?Z*%9n<BOYh
zQroo1rt<D_7OHFfR?fR#O`+F4X(?}<i}}RlP3NY-y<l!=_Wbn9?Ye-7z*V{ts#<u+
zkvWtdD4^K{-Cvfcd&GuUb3}$^qF=G`8xh*V4uzh)kE#byhy+NMtyX<(WrE)z>(txy
z0Vb&CR|1x9FJ}~YXUo)GmzyjV09?ehyq+g*@JN`^*v`+sr}FvtduWQ^3yV2r6y@c?
z4feeLD*^Xoyr)Of*X}+dGzM)ql-YiA>6G$6<P;TZ%J$-|pnH_C#<bwmP48}Y;0a`+
z^XBdlKTxxUe5Q8i+dH800<5NtsDZ}6+IiL^YdH?cVA&o!-!#mZWSH{6@Vx|S8it03
zPOH|?x%DMc&+L^(A*#4SUyCZH+b`BVJ>5IrU7tRWvQA7bNo9fy)tkqwez$tA_C=-c
zjNRusfO(+kT#hT6ryabo$EgD!&WqR7vy!*NV`6Xw12$fveote!m5`A^)Yev0TC9o-
zYxqIPobBgA*G`+kc?wymwRBj7GV&K~o%Gsf`(0S?j%Tj;UlX)~pJr9LS9qXycgwDf
z4Gv(Nrw2ygt0Uo}o1j++>4(G@$(jZ*L_Az>&YmyVygnb09NM6m-0_1>h1H#{ht<N2
zM!y|jSS;jIWwY7=_FRQEM$?^7+pjy$xNI%T>tl@aC6J#VSa+d0mHC#FfzOYr&2+n+
zPdZCKjYTutGt<(z0-wIZI_`UPWqQpuO~iGwlCgxa;_py#HleKH^X;yo&u{;WAxca}
z1F;CR{ylu>N&*J_c*f3$gY_`U7@}ty{@@PCxUWcjI;$lNR)(E7vwRLKhdQ612G)CN
zP8RB-2A#-t9X5W=8wA|;1wP&Gj&ZJH#*%6$wEKX?JF)iH?{7Ar)yp-Klk!amVrC4G
z-@ZksN4~qA9N(WU4gQJtx-{fUkRLIXM*SdBQQ%;<bhFO-R7!F4wDWoWe1NEsRQ7g1
zDF<A>48w|~FHS#kIUSbUeH#q}ALUClI$13|Qs@2$6eI?L{v?Gk&>Og3c5NK57ilQp
z&%x*OQu3+)XkuWMxvOKP&u1=3be<<EnQPby1KRtQNQ_P;4x4aHF@iWbJ)RS{$AXP{
z;K0EtTV+(GQ_FZdWaxLbX_mhSpsw-GvPtWkO}@bY=8rCh06SwD5t?M%>Lv%Xo(*;j
zJnjcehJo#IWdwpx?kT==)Qnk<9o)@g5uaeeEXRgg`8g>nJUqv)PUt#ZIuQ`2bvd8Q
zg@3?_Rrxqk2P}lX%EkL&KMUPI<#1RIugd-^lvBSH;(9un+Y6&fY21*<R|qI=SBqZT
z8dBA>V$Ckwdpu{Sow{kV(!{lay`h~Uz5{~Kb_^PHU#}|bTrz#5j~an3rvCo^8En>c
z$gd$Yih}hH;2+Wqyly;G_DK%pFb^8vo66sFphYR0ZrL0RzzXFwU*OJn{SQf6*xq$g
zSJrIo({D`-4x*bbTY=3-@sS=?6@2JFaeH5EZN|oSJU{tLvv_2(jyu!BBA@Sea_YXP
z%-4@I?HO8k%q+*cui&~`y*R}B7Jt8SeWew->=i-6{Fc0P&t7QiZ2u?UX#dP+&tZYD
zt>$FZ00!;FN-2Z>ov4|a8Em@8EGyn#h?CoA=4ph{8<@4{zEYwbJN1%(2A|i%ZYaSV
z*mjZ7lydS2B^31{$pxBuUmbuv!7c7zU$H(GS&RdSxtM0?YfbtP(I{gq6-J6bw(n^*
zogKmeR_0zJ){U4rSGA~(yeUZ)=;#0VP2CNW#pnG=9aN#M>f@7x=l%Tjcy+v_h;%sj
zh=Y$W=e-vZL>C7GrIbinUvW%!96_j-=)|^&J=Eg+%D2g}tcJ|ym6plH)>A@_7Po!a
zkiq2%xZG@rs*-?e$*kH%P*5;aUw8t6u^sx7K+NYNhqHyq?<`=ZNIvaQAM^MO#!Mwk
z{I&)W?yrtTkziCSf1W*q(=p|k<i#SY>u!KDtiiZwcDGop$XL1y&kvb0MWcU>fB+7B
z4u*zfVqkE4o}|LCxj+(A258u6kj`Qbo2XAa6i3F{g>L=Qt9dE?X(Z)QswhNDccI4I
z&ksQ33bU29wp0?K_KshdzCodkxlRd;#(J*$clusCbld-S`X91{p&aiMYhi<hPRI6y
z^}+!nxBHovOAYpyift0nxa~K28Oma(HG7u?^%pSu_RbQky^=<=iVmarB;G$QAz`>~
zYIXg3nN{!i3KAB>(?!&o89=<46Nj~Do%B9srMi5@WMg9k7PXfywnt`IGNYj<F;^Im
z@6#a|+fHTLgB1LJb*K{nZdo8t=@N`)6><i+Eix5H&77(!&J;PIEJ00+$NV;<=l7da
zG~$2#gi-7ro@l|_E!LWL-8$2EaP$9a0agsqxRulRzLgqtqy?0^x_lSB$K(QJ8yIQ2
zDlN5serioeDN(SLJ7K7-6~DX?k066%p7)lO1Wc=sAnyKj(?laHiO|d#%V?Z*$Tc)i
zrctjOccrgm$ePYZU7*|$k0pE6k}#SMp?(ZFZOX@6pfo#343h86XSWR~MibR(9#_cs
zZ05nzWr@V)u={*i_JqSgFCsym{-dX(-DSHhuB1%{cDZTI=-y#z)#O+?B8BE1^ws)Y
z+PG)Vek=nCZkLoNMc+vW?z@cD1rkiF=x}0Lx41nc6{^9Yqh2gRO2sejP)8;#lpzB;
zGqZSH;5)5oH1;FeEihM|$dAc%wZnh7GS0a4T>|^Q1+(7`)2Fvqw6Ap=^;;W~q-01`
zMGp-~ACGMfJ?;eW_BPMY&)3)2-I4_Y9=<gVye?@Z%XvN@uvvedlR=sZ*E3Y=IuQTF
zP@?mgQF8>C5{!8X%^=CtzsvX(5Nk0^qr77N`h9FjfNPEIM^~^0q4$=vjNe%|!ndSE
zO2sJ*U_;bufG#njmX0Tyte^ys7Ej|FxGz}MbWSDZ7<X@q-?_3C>txY7B?oibPwK2v
zDIS|$rX<xHr%8VdqeI@$<fWsd#Ki}1?L}j@)8^j;oJi4g@P0Ne=ZPcLa1_>0>B{>&
z&otQMt=lRoec&ISfdGswHA<9(>w@;3!|c?25=s4F2@Y>MXHAE4H!Oz?f3*{mD)JJV
zAXZW40ABpcxScB+w&y=pp-qIi4{Z}ieS{W8Ijl?@C=2hS^=cZ96(hvJvP?C$`Ju=n
z2UJ|PB*H@&@u9<16K@zY*@pUPSZc=Qe12ftvkvBnTfu#|u$Ozh+}xH+mDi5`>66HW
zJuI<Q#^6eWoHyRw{U1|b9T!!*wXL8aD4<A6iFB9LPzuuB4N7-+Dk<GvA~EzxcQ*{(
z-8D1}&A_|Qd3?_I{muN?GxuKiifgUwS{FoSkW2y3M7?2^G95`B)n*UpZ`pDrJ8@*q
zEWd*tJgj+~cE7SkjWTSXHPA3nadF9Ad%$<gD~uyh1EixE-;k1ujflY|{zKuYpafj~
zhg>3?>ghL>hOwF6{WZC@2sm8k7;EnhKQC{foDhh-e|B_bVZ51~)n>8MX|&erM*P4f
ziqv&<f3C$Fb<ueyL%{Qr^%e22#!kn9=|bhZL6%m7GJG3&?reqe;9><;uI)|kC<^*W
z4%E0@;c8bFazabT^nuR{UdLG1Hfnp56SW<^rdX)d4TSrP{TXpJp{eN-O%D67{F-!r
z`JcdS0`3r<`q<_Bm&FC0@X7&eknMiS5v_;q&4Mk1BosTne9!3m;f~6$EqjVEu2Fi&
zYOKL4g^poi3W~50>4n4hh=UzV&vjmwhJoQb6pg!MbOP4%jc90SPR2)LIedlcM&V;O
zVwY$srsD(7E~yXQHBt!!Ma@&Zoz<bcpM=NT{eyQI^Snic1YklJi7s`+37TCnI`GAQ
zG?2fK%{|I&Xi2@~wAgeC!3ix=Ek<X#taiC;_eZ6R`epMP$e6J>I+Wf5A>C^&Flo0(
z9JS2-d>cNIZw1$0E;roS9g8ZShB!lFNL@=wq-k9GW2q#;0E+NB<9Df6HI8jQ5?mUh
zRULXQ9S{2sawXn7?iiO%AtVuh+92z6>=S&F_B&15!$YgqM%Q@&R$I_C_=14+C8BJg
zOcW@V2!TpaS0&4X-d1LA$rXzPNK1n-eB++b?0y$+m|p4{kBT`e{d=8wzKAYtU!@-E
z{*rsESJd=A0Hqnk<Z>6Z_r4bK72hLhcRa81n!H+1hbnwFKA&~QTE2miX!kR>1Sq~k
zTIfex+o!3y)m<jyr7;o5Y*V^Z=YSVWYRE`PDeuNdjo14rUPa>W=W5>p83Zsj6yF>x
zTx;QB@UZeIh^MO>A{vG_YRTsD`3gQUvgrGWyuPYhjiCrxye}L5>}wlFNllGO%5Qaf
zfYmQSF;VXO=mW?Qv|zj9&{e7=?6!UQ@S^?Ow{_-Mc{3hbw)a)PdaE-9j<w3ylSW7X
z07<h%1W2SR^1Y(~^|&Ls0M5AoI{}%A;v%5dvtDY@-OZe8mIdQATLGvAuL1g$Bnv_C
zE5a{R0E(kQto1u|iX<~}JN)=-?M~r&MOMO3_)ld4l>pL4WB2%Ad7ggrAD0A&CxG?F
zWt^}0dK!_u_4r_|rGpoA9uOE9#+P-;KSw!0sx`0J1wa#$zLJ)^quCtZK+;y{a;VjA
zuUpJP?V2<^*YS~ApL%dWp?TiTE;H?hcaYhmqawP}*B7j;<lzC5RHt+q1!6!!<pfm6
z%6K<xjr3$aj3utf?dB{2s8(OvFv{Gm({+y1fzSVEnTOzvJJqdMWAle_?U%1qgeIK+
zOg<yba^j<)aJjoA0jidKEOWBl_UF&8xh*Cos(m`+ludh;d?mD~^1kz$-fEQcYwv!b
zMo@)XYc^~ox6*OsY|skp;`%60x{nVBti<<MP=o1M`SGaJ-u{e;pdwH9N$7A^T}?6V
zVbVCkb$;;2GFfs~x3&M2_+MiiyDxqEBw8NM&*K!F=;r$+B)8tLa-_7*R%8D;%bj}e
zlg%JMY;4BxhgHotGaRAuwS#~U$;rvtYu*Pii>2S9j;Bj6m%yS?SRPr*#cE9EbhlC?
z+VRXhJrfZBL?A!aGe!Wp(CJ0>%QdXzeV4K-X4rITqv;6gDMPbSK2goJm@wKFIEhqV
z@Fw7dJ%ALc09hqK&qT_zTjvM;o^$a@pXi8;QTi)V{`kza=lc5F9xdS7KzO|m!UOPm
z2*j1x+?`UXEFJ@QD}&RoE2!~6{F|DslQjyzm*v<VUmF~@&Uzw<0=#()dr)t8uuJps
z$BeS8ZCB(ZvUiv~o{Dk-9%R`d<PuB3v;Tlr#0POv8-zhLoOTs>;{0$QxGis0O3{}d
z*+SBKYvGe8m9Se)?%2$qyVL#na3@ayv2nIlzKSH~Jp)jLi5P5thf3Yi4NmV}yC_1A
z#LW8-A3msrX)mpDT2BAkk@j$8aEi(V%V&V*>MI8v?*m`rce%Rysfz-B<v*rt3*cc@
z`vF@|k#BwP4qf5z5{F?9TLb+A(`CBS?~tSPcF|q}Gm*I@5>eNF{@fFSZ~%94jF8`(
z+Gn<ZpVqmyJ5|im{EGOa*)O&K<UtvgqWfpY`6ZJ4JR=t@nFhVN_{~7Fq`1@HVJatG
zNR>jE#)YVKIlKjm!aj7^!AA~!Z9=sXJMUcwDU{6_eU{g^)Bzv!(W{v=*)<0MJAT}M
zJ=Rdad*EAacIYDY2zZ9B6?Gk*`+7%HqK{^6B{@^i4%@h_=SLa5J(%P}Su>VL1YGY|
zd>^f6$}*;bF`%n=2oh=70=_;p&+@F=a;Cxcn3+Ku^%kgX@VReJ);bL`wvTzXZ3kqo
zTq*NZixYt)AD*Vw>Vr6#s|+6i`62;~4?N7o$r&ZoPQ!0|@s7>mDF^_hizE|@VV=ij
z0D1fFCVu9e2#${rCiO7d8_$EZ+@ep^rD-78Qd>EnJUI)w@(YJ)HR6e9o-A`^x)(by
zKlA^rqpduOa8k3qQCMt=BnEOPuv`Y75d2TK4mp4SyzgEfe&40#c<w2HhlSiEu{_3P
zqU>&=39L-;1vDPP=t?7wwg8wYmECy0KaOUP>hSU5>J<2Ssu;XQDK=TsiHv!u_8xSn
z*BdziR8j&JvCYP3c?il}08mkhW8$v&IYl2WCZjW7_2p)l{^CQx_c%~6iG}5R#`R*n
ztG~8)jOAqE2*?2`vQ+cq1Dwo9<3p1_5MaEMm|aKXh!gVe1eS&a+j00@4suHqIg3>5
zZ*;RegUNhkMyTLlfV`eeVXIWTR%uABNX6X4mm$CcEKuWhBOk<))Yp{GZA(gmG~WY!
zK;Zr)2grkP#`h$hc7}E1ec-!n9+B~42izjSNtWr<(-R|sw9Qacv!b>4U$D=NKJh5{
zjlT`o=}SLdn+LG?5}A~7Kf^zO_Xh5bR<#GLu>37e3v;;bZvn4I1XfR1*J!_(8uuKU
zuoKFZzm0RSvNim*5HOq%AVGQhiwm~$Ljy`!<6<mxyTPBtIsjb9OlWjLXzH3}eJw}-
z1L9SGCK>Ddol?5y1tI%&%0uF*+M}gL*BqwXqsC)%jy>->o-5Smx*U@09-_ECy7U_3
z3m7NhRKYuj#u!?ButAm`-^)4t3MdeXv*j?!d|Zu~flK{65>4?(HOSDx)g0*1CqdA0
z2PTfFio@CW)6J<*SNUgJ-OzvH3#i*oh#a>H8IJyX+Ce|#c_v8a{gH;2R$-5<?4KBr
zEY!)MUM6$Nt16wCre^*5^Jn<_)vn@Bm@$ZI8+sE^uOgAbz=0@>BIcE{O`uDgrlSF#
zPG2Q;(lK%4OnX&%u>HI8vGjNK!d|lg0)2NeC(GTz;Y{1MnJM%4cxj*f+h@9nT~yKE
z1WT*C1CliNt}BSqdPkblBIu%}lMAEfJO&ZhuZgHH!K<t9H9y}H;xXU}8V^j?)$ufR
z0Qo!PDeveeiTHj#qo~JlGJj+)T5P;XYvJnZ>oGLxVn$tH?taeHagRnU*c{+$LWysC
zJI3iuYxzWH6>~^wcsEi^Gw~xmgE2Gqh=1jXxnh7)04j4#n&y^`!9{O@qvfySIcb*W
z-{+mEPc%A!_L!Szd}!^V5lf`}smTm5_VbRMZ;14r<CxMbWgG3?767`_KNWG+l*&!}
z&^-4`oeH|O`p0-sjZN$pKppeNck*Smo9>R_GkTt)@9;%d0Z6Jqs~QI2DSOOyK8PS*
zN5S90yvB`ycg?*j4#V?asxVHwJmeeG^*xxS!F9J74I8j+xrsc3AGoV$fSir8AB;yc
z?kYzFvlkq}a>F+x0M4~Sr@V}v9@?$PX+G|?)&UW^w@W<8V{YCi;XW#y(f0-PK_~>A
zG01#ajC}yp$@ICU^AOD8uX5atEVEKCc8F^f4i+bMH=AWOJ&hpZ9?C@gV7zU9(X3T}
z+~SFf@lHxx04Tu(y*&ss*8u#-?f$e^&uwk1Cn7C^<Zd#VP5uQ%+1^;_JMV`Zd~@v}
z%;rXQmYrX&CeP=c;g^NpcacCpAwT%5$CBy8PQK%_l)(^xQp8@hkRu_Q5s}kDGR-%)
zKea#}GnOx#CUAG)Xtc?Hf6|9d73z908z@%;_zI9=kJB1w1?=<H*I@aKTP~6opgA<r
zNjtR&lvq<AfHzG+5lp(Z7XSuJ-bNHmQ<Dn9o)DfxS_OeB3bUgqIyxG_T!6NX%0=50
zL_f=gj_wUmMSDElBxSmrq|ZjwE~m=$(9hjCNkw-9r}!lg`9*eh4wvon{fN*RiD;si
zic0QlDYXF7q&-;{fe-smJ<y|ZkaiWbK79CbOq`6A6BYtA#XdjEaQLI{)US2NNiut=
zFg1rCP8Lqo*~^Dn-d*gwYT;-DbiRK$0-Jp?K8V|*n!M`&=3c<P16-d1M6X#cqX7op
zmiG9NAqVuV<f||CxfSXrU*KBk@&m8K%*p9v20>M`7C1c~u;@F$G16ioES!8u1`v#m
z^}ENu(m-I-x<07n1)$&k`D(t>2Dj67pp2xg{U9XEI%7{hp$@MxTWJvpdFcl#2~F{g
zc!;E0i^ZJ&{uGh$Tr&E0HwWwLSV$t{V8QhXT_(Vrr1{>@7db7f846El^CiB!I+ngE
zJYOd)Q%=+iAQtp0P=^RoZiN%r3vmQLl%K4|=P*n)9?Ru`_B@1>swLy}e2)coqQZRc
zoXP>$e-~g?<oXuNCtRx*CDxG3>RLOU8z0Eu>UP6b+8c$pNZSf2Gwms@<XfGlVuZ7d
zmP<Zjej<O{ag$gc9DjjkzOP;e(EAme`aLT)11S>}rIUWY9TW|$K+3mXz;r6kxe8E+
z=tYEvj=TS&5sA0)><-1{C^-j`*@uUx1FnKfyGtYj4RkB>=AV!4`ixXt*0S{!RgJDv
z%Z+Fqot$1ZgK;^q2v~Q4clu_-KD7iW7NP--fzt;Bs?E|Zi#3nHt3nj1_|M0_28J60
z@pRUbtvNGGD)r;MS<8o`m{prqEP<KLyQ*o49}Is^zxmiz*~}ChA0MBZO8pEIXOwrB
z^uVqti`_D#AD(EtHx7^wS+a+~GX~>sZdyOjc{D`#X=IL%c0W>2==$cw^GVtH{>gnq
z;3DSh8lnNx-hGvAjnix9=9Q0@EHpBt&;NY4nIWS`3mM&Mbk5v_xkd?^wN^#6Ckyeh
zHLsnR3Mz{pC=Q+Oj;jfL#%HhTGC&uzZMyA40suErSFPBkOPR^Z$uTk6{O(5DF<I2m
z)%NC|jX}&q)rOM7Wi{xceLS}@RYkL@8?mH0Y_4)9m6L%%rJxO`S(Pa*Gt-8Erw94W
zabQgKr_1{c>ED-NU+&Y@-U1KHU#WTazE7SYDKQD_Br=^acRlY|t);~1jOnlNl^3Wc
zKU}mXlfqtnMtPdj%Wk-L?mA!3hg|&XMbVma*ETsG8*!YBt8AQDKH)?Mlp-nqJ-$q-
zdIzf^hk}VYt((Vp9>;B~G_F$Tvtl(HAN2xZc`Ryfq0#4+Kc_LvVOAeRXlVTjt0I4q
z-z+YWGj~C5QJ4HlY{qTaS`RZ*2xabQWTIwFFq^H!*#I>R#BlP8?)FtO<mJc!JrF3l
z2}j!v?G;SHnp5_`VVYc$XJ~1?iT@ACX04d%aC?(duOB=;HMN0&e6g&3IU&SQUSz|%
zFRq4re)TSjg%9L81vM6TQC1VJxpLB?l>P?PMEX8AsxxJ}39ul!IX?w%jR!g2hI@;p
z0af2L(t83`TMPy6Cnq1uz_f42h?zmLCe#NSSkB0cR-=TC^cR!br)eX`R5*oWAK|a<
z7EqFYCvgE8VFiAc$3=E<cqlHzcCXp98*nrhh>$-h>UfoU%caH5?>E%i6T<6#3k6!S
zwF};X5>vGVb!kuRCfY?!bAPgZ+Co;M3}H}~FOlZ!eNty$&+um;`m1Cvf=J-YzXN~Y
z=`%4D#}ZN;8Td1BTS;Lkb^V$d9xy94q<_ad?HE41AP&6_!=|-2?ZFL~dCJY_gee04
z`{(c42|8Gqx=%NR)v%FQw|8QZmH**N08@~qA&QigNhfbIGCH2r-P9j^SNV4=rIz}4
zTQ;{8Rm6zFlf`>VBhyXBZ&2L7Gb4*y68t<>GJ?r|tBLs%LnQxBhPH9!im1TTd7jka
z{_yzUe|q6^1u;5aN`;A8IO*JvRZ=d0;VLx8f+v*@Ny$dddB>l6xebN>Q0)Gzmjpb-
zhJNvRq>i`$22W<Iv!0EuxAAZc#OH0|ekAFv*I7=*tHyk&(0w=hxB6+3X6<H<pdZ>K
zJhp$oU0Z2@Znp8Fg&gtBB{79_j#reLvpB|AE--2^yZpo{1;eGqV8sn`79$usb$qD!
z`<wH><2_Hlr#%BcmDaO1$?c{-&$QkZ<8+CRC<RqX?_FY4pUom8q-(9)(gCGamiu~v
zy+u`$9~2B!Oly;(k3avcR>YLptyNYUVr5*u#K0`n7+`fYQ5v{F(0C)=Q@~U%Pp^zW
zVSGvdJE8Pl8@W+R3($nK!LS<sRK%s<SlHwvNB+HX&)V~#UAfq!Rl%?;!+O~_6qh-r
z-@MhuyGVFMO&71FERKn9u>3s2J$Sq9D|5&IO&erulEz|j#{cP4K{CsK2cU2yWl|8_
zoW^|Ig$T2iii}h@0mm5QM{#K^?^DMi)T1Ky0>}A_0K}tq#ZCR(x2b_d3*D?A{J)I;
zcZ?#DZRBLp>kjL6oMMI7D5y2*><#bP8S3kNW_*u*NL)8dY$d*KJtaw#_3GQU1b6vn
zX3l+G{4*Z~&*P^_DqFhQR%crF3TMA(vl15bQVOdjTM@ASwz$Tzb!;|vivWA+=uuYf
zTn*hmEEWx&_OjqW^sD=?QKhSkXt<p2(^jy2E|pCjEJ|aV_oGNY?DtF!-R;>Tz(ME~
znjeT}>MD#|_1%8{xrB#C^x~C9&N)*SSQ#yi`9B-M6y&=*Y0{5kzGm86oLW7j+81Q|
zvyE_7y3O1Ri(=MVGJXgE-hXSAz5J<%>in<=SFW(+|BL{K%BsQgG;{%}9916Se4Gof
z>$;W4im=eT8#NU|aC@`m@r`pRL3BoB09{z)y!?rolB!o)a;=%sZrf*(Gdm~=jB*a+
zA;*vN=MUV%H5s-(H!FN$RxK@*pSs9|u4Ya`&}dj*6ia;Ky}lXwHZ=&=i&(mtR>z+{
zioeJ;$f|+6c5WP}>oy0@V=&{ZI@=}v1SQa&E~YXOiMJ-X-8x)&de{jHre&phJIsNk
zgxGzzF43}{Cq`ObFA7}#`pz`+c-#RpttJein_M7?+a9lfO`v*kmfx)MujM^?BKoTF
zp@gn>-m4tqgY9}94l6RKW~ffRd^U)hOW~w>?eS%azTKFjlA{t&oz%&F!#7-@K%bt1
ztGs)?Hz##Uj>motToa{#W17XmCb+jsBZOzG(YzDtYAq;;dt}x8*h$roZ-DgsgPFC5
z*Z69yARGe?)L=H1h%eYs;jUj_Hk9ieoBqZZzBm?GJS}vcI5eVHCSBPB3I7$z1{Uw(
z7JTp#@byUoNtTun-MEN(vF9ZnkFmdJZ!&<?a5Z8Ta<pQ3Bviekr&ZA?(>_NTS(G*H
z81KRAIS`CZh!y+rqA}&ou=y8)zb^E<c2E-mu|<x`?4iHUS4EENz~BH?CQpaGhU*+t
zL#)j8N@7AZx}ZF(mdn2UYBTZ@E#6oHC5Rq)%hEH7Ba_8f{G}52uH~K!#$Kn+0}i~_
z4PlXMGb-GlIQ*HRP`zvrMtPCltsON(#IXwxmED=P;=Q`72_te@xmXB4fo%Z}ff^y4
z{1^yYJnwZ4_&~lTO`XwPVS2kB5QlHzLYf^94KOP2h_y~{=i7ZnH&-#7f}1v8MisEw
zgoJv0iS_qF0uH0|ea?L;JdrO;@ZGJBMx)~)!uDD`AYpGZ7Z%OzsXH-2zgD><Ye__N
z^lg~Rly%064z6x#qn@^u*tnXbBs5~$MH6F#twLRKRPYqe`!IC;2;7v}nc}pj+b73;
zfP+#_oELCzZ<!Mcn4#6La7I|Tu9RQ-+b(HC&HJ`DI&G|fc|Jj#<IhTt%}hzj*y|e}
z?&()7n6*lWL=DZ%&@lF44Xge4>$bgO{y{OLxxwYS-bX{z@))=2zw8UeWG32^7@QTb
z&W=7(XN-T)Tk+Jne&=}-|4lU}!g6$lK^yC%op*$g&qH5Qs~X8XXNiY<XGN~v{p6)R
znb6ATg;pHuUJQEtgo(J5=uvv(vSXo`lyn#oaq^*^mFLC8_#u(n(ahQ`cWbaJ!;EVu
zaV#sd?L5O<AR=K%N)Cog%e=%wd-3A(qVn$gdX|9p3vuK@IHR~);)a2Y(igK&3g21&
ziJG7A>rs14!S=a2Ej1ev^-Rki{G+&S9oi{|E~Im(J^ZJZojb>9jH>B)!}kqz6_P`p
z=RVo4EgePc7sd1U-Xo>UXUCP52cMr(lJO`zQ=~mhU{-7qA3SfhUAP@ck7e2?Nv=G&
zeTYjybuyw}wW^Wwo+s1&<Di;_Pk(8VmXhq{G-d%R1MZTnrKO<V%rN(Msjrz-bz`F<
z0_=OsH%sNK5EcSv(bZ|3*xqT}FNMr9VIbK(5s6ji80R3_k`Cms^M5Z&7yX6GcV%?-
z`)-|41KV@d+kfcnPpbO8X$lQ(RyIG2<+u_HA~sgW7O>p89f7ceDx}HmQ=v2ti+rch
z^zDM=ZL7x871g-7aB=(_hg%d>mwPzXBla5L-lajFd25cHDQF;{ONYD%5;<ng#?z21
zCFbs`4Bj%M!3HQX6F9Pr&qU$urnnKzJo`At4n#@0b3KNIdb-l0tFB*SEQ>_0n+N%9
z$62~Jwi&&*GemsJ<7us@1yQXl^LI3Hmx{&;G%jJC`_zV%9fxvKTGWL^G2MQIwC}#)
zzLXoZ8@2!T&*d=d>^91kYT3GHNaNkQnRPzM--5EFaq)v9;7A;#ufd77??3<8{0<y5
zTa-jZWF_h?+UHNkJmc(MNF~ibpe{V)Wj!c~^uu%f_EGW?k=3ZrqdR`<Bskop`ku0q
zwemx3LA!KGWzW9^Nx!uf*iNX6bCo2ZCnc^&>di~ebx_QHwU`KKWNal<UfbY&9@Y(E
zAtFRtVffFN`@ZnBkd~Zz5YG*N9VwgC2(Fe&!Ua%|Zau#avjaz&9>r84DeL*Gl~G>J
z!UKAg(?oICMl-l)DG?Y8RYuAQH7~6Ia$9wUkzedFP-Q2SdBB*+rL+B+p=C&IhcX6I
z9vVM|kVT_TUO#rlhyVFXO!D6|`4zb&I~e_CvCjBoBz8nmlFiEQS-ybpEBA<&X%c}y
zH=E+d?k=(^zSm*69qh);V+AP4wT$nMh+?Z(U8p%Y_}&woGKPI<aUqM%`kR=&;}PJg
z`WUH=Jl{Y%n4d4!+f61Qt^XlyQf1p5<YUyWXH7T~JX2Dz;rG<WxT)02h(j>W*tFaV
zb#S<4j$&?+(r&mwI2|C0rwk>{S&`}vvXjjDTxxrRHq+jMm{T<8{u1RdCW8vhhTeH{
zh*ShdI()-|vn<s-MXr4sMC0@zey#krkdY&Umw;BsY=n>C_-o{=nc*u_!5`2W*cx<r
zn~lP1EFkhF3CTb4{5uNo$f-jP^A#cX+G1O2u$-G>qHP6XR^NEG4bJo36+?@Zf3X1C
z(el2YKNSBMlnvI&Z|o<KHM=4rLQIWGQ55381MW6tXU{N6Xd)HTw)TXc(E0`7o}{FA
zu&=QwO#Y$}?hX8#e%Ux5n3%}X?Z0)PyaOSxQiJ{E3w(m^!~3NSH8o$oc^&q_NoRNW
z87m(HD<%mjH6}%~MrN;owiYc}K1&ckEBdt}W0OJm*}v4m=)T~BIzqR4Epb5S3#DyH
zUeq&Ls)!rO?u7Y=zk9;6uK?K%LU#c|f~~x~ct@2t3Wj5OHy|G1++ZL4anFYvXxF1)
zQlhRG?5aU%WzfbUk~;lv>z?}jMjA2dIn-TRRJ^;3Q(!53{BXr>ZQpB{lNCn|B93&)
zxK+6Qf7*1Po^D|CIFa7#76aml7xmrLQO|419@6DKAN@SSGTVtsXGi!qW^|YH8eqaw
z@JP$x#(0~Cd#H!G$Ki<-pQrD|RYuk;h(oXAf{+eG@qT*sn4yv8_$C%m5pxdL_^j0A
z)&-Pfx(!aEGMd#M)=uzhgYJ&M8wh@__Ft?<6PONsC8qNBJ9<?#@T4w<kU*n3UOrk5
zI9d7rDnXv^cGIMXY%EEFB1>P;oonY$*p=Ge=|+7k9XR>OvQizLPM4#k!;tfKib>5F
zk+5`IYGh)%)OZ>Z{E#A?kS^Q8ZZMHHm58->b~igTc4vNA<^2-1%vZEe(n1={X}C?Q
zP0r-Qd;>!+`(Uju&~n>>XKoNd7JQ+5w;r^JsgR+crNeQ591{NkuSpTk(x1EN-+vtP
zcAlZB_Gw6C*Ov{$WshT?Fg*-YO~fL7xZ2-QE<+Dd!QCpXvQlWRW+9Q~sl7k&p!Wgo
zDII1V^JcnbvU|C}!7jyOQ}?GwNv=bZu0}8N5;HW#LoU=7uR8Zy;jW^evEIX$OLJOV
zSNueUe$wePUDqi0a&?Dp-CzJ(ytiD3o`E>UTICiK+$)*nlr~E>#X5OnL=VgS_shK$
z(ldLrd5>c`Gy$ror)cs*=URdEvIP>gr2bcjBaS;a*Kv?{-1}NZItX<=Ps{PmD>F@r
zsIV~K_5P%yNwd$+k)AGIN=g+K#YIc6Q;9e(w=Al)#1abcRz>8yyL5n|P<Nk!Dot7K
zMa3qg(x?7p{O)Jr(LS)rIYGoR*t$@qbPkZnlaiOmAAbb&*QO7T&>8efZ8|X>TXmrS
zT*VXm8h&dL^^IL@h4LnW_@{P`N@JwcoPV$<RM^h=yvPTCyME#tNzxqO8ThkO#m>mr
z_z=lH1XvzkTIR`B!lR1TCJEb~J=J|DoXErF?jSA%U(oFIBOT_Itrx{C>7U&5_{h9>
z6KB=%>my@ro2H830IY%f^Z6Kmd$4DsHB;hH-*AKNMlSpS+D)=dpi?*~@+ij}=cOr=
zzG5RBw_Z)U2%iq=dKrJ?;nA@p?)y&hqHJe>>F%&lC@~XwQD`asxymZ&bmwvtH1brs
z9-hZuQn~jOkM518bBWR*+5YWHacduSiQJ-sj;#!E!U<NZ@5E*#RobF%JyGdxS!Wuq
zpOlio@!{j`6bcs9`VMxCUpvfm%~U#%?`d#QgJs4bXnipr%VC)(6&(vjx?DZExM;34
zRmbKGfT%-y?r#^!kZ-RBpisibs>imq7G$w6Vt83XwwL}CL9#yk2ne2+_#QCJoy4N=
z4JcmBS6lMKS5F=<56E0b429ps(gSLSw~HJ(JKk&@)Y~9j{PETY6FM}q1O|1tjSKvm
z<Ll$|`Y>jFd)OCEO-+$tp$0%<k%gbzWKlUPZl2u(8dl+B;Y`87;n=qn#dvpG3+UDG
z0b&}(zWUr|yPcrDX9?b(Fz8dnv4`t?mtn8`#euggKr6|+BH>xT4pAn1JkBufjYvJ;
zyLSZxtz|$ttR7I(jESMb8+xqMPP)v=bo=q~Ux$D7rx7Wvs3iJ1arNn<^0%Ss+;p8J
z7re?Z-_u@<b9kVr5x!RG%m+aSq)jV*I4xO@540Lmt`jCB#-%;<NotfBge0*&4WmXZ
z*vgXiB^qNfk}@=DKpxSOt-G7B$rAVqi?#Hy%%N@>)5P`?BFv}p<oGs|O#C|VsKIB`
zt|MioVd&)Qv=m=&Ya!0Jq_ru`C~Sb-*hiq%T&A?0Vc6R0t!k^Von-m-L)}}{4f(kB
z*Mtfs&MFAC7-#9{I7!q>E7N+*<!2qO@>8TzH+L##D~(N+LX&IW<-O0{e`}f5k8z@o
zc4W>Pc6@&~pik3uMytM_D~9E&b-uYZX&JA<ObZ+8iBejJ;%!JA)4q8<o$EGK%7#jW
z5BVIjl5u;U4fFPhx0W2tvBbPzpADUP$A8_McQ_?7*gCfRMv9R{qiLw9HwD~F`)Fip
zibXW<dlS_fv$R}jNHqSQ*0}GN;KXtUlTm?c<-C3?i}l>^kgTkg=yq>>pXN<~)DZWZ
zyyS4H_|6g%Zpi$3&6jK>EG&#gjnV72F;36hSO?GmrxoDk-6~fc$q@98bc%TN{s=LT
z3mQ!FGOnB>CAN3XKskKQf@a}y*dVL@s5{l9X?XjNnD`5*50FvStFbaK&(d0&tutpx
zK&&mW08)P<a~3m2Eqhs|g@uJ_wFfG)V9%~eR}*>fJ5Fq6+GguCJd89ay@!c`&&VFY
ztj^h9dDOB%l~CT*!E(LVO+}U6$*AHyc@CNHA3#kKakq4HB62kiQBV6Pkgp1)PoR%7
z91_!su;-vFn-RA(mC7qz-1;akOt9$NQ|j91Ql2M!y}?lw=2>CCjAj>XKST_upELF7
zh_KFL_)SLi9Uq6*dnSxVC<(zMTRijReA*FfY0AD{p0FsUu{(~6N|TSi11mJ9kqhp<
zKBv`lL}Dsgvvx*PqYhdLI<jFIKC49Zs$8tGEu@h`A{|mwTOt9~lMx)uy%E_74JACa
zdm&o>yT>mt7T05yVz3|9D2-m|FC<yz%9N0(g(wAVDLsADA-vayO&6K2h(<*fQdst7
zpcOHn?I3+yx#%w}kli)EmJpCmx&M(tQM!hg5_`<_GMg-UQ-M^PN1cL^rVRZM{YWer
z9X10-EyO;@_Yz0y^$T3N+Fh<!DWtV81@yGGq;LfhUTZ&)g8_X^mxufAx@$Lk>vNNc
zfIzj<)R;E=n={p-BB#Ar&r8z#qdT%F5}}JLF>os~ZvOy%rR`(3X{Jy3B!(0kI=a<D
z!%YLm<LDV6puTsUF2DUUQc653Be!)jQDt=$))SfGxqF-;;26}Pu(OvF*J6EV6Wn=v
zv7QG^(%~`)d0lIK`qVbs?k$vjLFc?3X+t6jLc?$lDm<FacFvQ+4Z`%T(qGA3YH%U2
zUwI8f`={J%^W21{?dIFF9)=jYtId(hWi>s^yF*P<*K;1%tiHENrr&x)-}x5mq`;Ur
z&9-Gn%3-P6BY9$Rvo!9m*#I*O(;<pVau(V8WKW-#rA%|I=1<ACLq^^$kYtqOX8u`k
z&Qve8-&*9l$&X)|x}i3C=B?({<Tys3{1eP=;{9&p{hBYZpkMZ1yjP?ZKu#JiE&>SI
zeg}^`SLUUIt1#^uoyBR0u;=ak``<w7O~&SUKkj^sAX-VT@m<@;AS-*VLf_VV3|%Gj
z=BcfZ3sQsKKK!tq(VHjCAf@?8uEbWSq9bO|Kp`@!Cc#EtEu82^$C+<f*aJn!^^<mH
zUUD+0sSOdG)?cnCccsKc163VTI!bU<MHa1;I#rtPV<u52VlmgV)lMc%?%%#kEM48g
z^7VaO>qPNt-P{3$?2d%&u2qx7gZcnzHjhPTS3u~g!FAv5(OaZUtXE>@_WJt8%W>uM
z$6u(A*N(_^NEoo0Ld_f)px0)^to}wgRaOC%JTcfwXrJSDYS1wc$gYjiuvgTj*eGbi
z{IjxjoJOVae|zGvkbWj3->Nqi<F--B!oy>_c02hc7>38<{^-wZE1z-GZOZW<RjPhM
z)Jv;tucH|TA5Fw$-3+y?&oN{rX{uED?+T?=s@!}`NQ2qXcYJo9h&|$siCLRXN1<4d
zs78w-M0Tt|Zf^0zjWV}ee${M>i{Hm3KjzM2h}wSRWlwPtk=Pa!DZ|vQ`v$w#-RN%B
zrm@A(+HwXH9W_8-=FypjsE7!4T`ohS=}*N%IF`1cbe1is=`(sqMdg07s6@EgTUB4N
zFt8A)$!Q}&AR=t$MGY!c5RTlBDvmwua);P6MB7OoJk6FoO^v&PHWpj$v#xwK$B6h~
zfph*cqr&!c5rubW!qSEMVlB&MKyq?=!tF$TtE&#*q9*%o&#PP;tB~c^%QHC;tx)=d
z<?5|^fwW5huw`&z2jeo^{;F%KnqX{71}^SvdjWwp4>4h`k+_D_i+)biSZ2QKgVRQ#
zv?^0()hXtp_F+qLAO1#iL5`aYL>PR5(=q&P1eqeJyQim_58<1gO^&#`j4#uIUtq_Q
zULI*(t(6o;34w$;@4@lFe0Ql9VkUeqF3F4g>H=*<y-4M=#MSwEu|DKd-;z5P`dJ?k
zfqz`85Yd>bk`%e+gO#J^xAKJu#!<I?dQQYyVwz7hl*$E&!uz$NI0nMr2Yz5;l4WQ%
zk3)f90NwAvn%(pJO8HmsX4A0cGx;ZSJa@LFTR^TB+<WX~4<qh>Dk>`EGC_Ptg@F0-
zG(BeR&uri^-v8aGwkmLzdCfb8f9qaMdD4I`p_kd@x|jb-nse-j@-O}1&pwU~LBB_u
z$^qtiw2wojL#ho4NV|8x`bhJGEj`%t4$lZF?=I-BwV|NimKBndjq3hga^q%)`S{(o
zrjLtvVcR;>hy9;)2nMI?jrGd_sF6v=Q(O=xWDyZkI>B*M0vJR+96CQRh~lDoZnO}4
zVHvPR02QHk<|Xj;(AX-gsK{>lyyBF64}|4}B#Z{%jm;1YGK<%WvN9zVUMH4~f*H$J
zR>ge{Q1nuYeOYVv+d^xyc<u41+|ausIJ|PM5W6Upp0P3a_;*~fkTs$LGPGQ2RSa57
zut4y5Swer<J0DRS=T4-u;U-?{ySnd0hw3IvGq@K%AVzGmbkBRgZTU;1EFe42GZFvD
zQ60>$worYvXm=Gsy~23qv@Z|PJ=fQ<Yphpf2f71hz>+las(D{RUH~rPaKTl-`5nO3
zT9EkoMqPmOa_o@rVP9zX2bPJqhkBMLkO7Llbb-z0TTDq&hzZ^tZyy3oR3e|10-$K<
zkH;ysQJAxsqK_gyUnldmnXPc%L8j=HOXXjhnNeqG)+o1&<<LuGb?#=dlo<O}G@xox
z<-AZf0UntuTR94$(FeI4P<jivJ{W8b409YdlKEK7=5jbEv)@1Lc#QLX>HmxHL)vsl
zWa4~WF|gjC7O-~HYnm@r^Sbl+&xxi&{>1{MUV-|~!lqERVE$-hy$W>E$@_Sd7-9a(
z4igC^+c-;u#aaEgC0i|P%yuVd!;Q`&O4F7b${KoCiypt{1@dW2kJ_^pVFpeH^|Y3b
zD2lkJj6*M_B-`Jn#Sj=^QQmx#(X=zzn)H5&1=qLQ@lpxX8IgEVj(Q^*`r4jQvO<wk
ztv-=de^E#VkB0)pR1@IKmbPh^Yn1nV4mn_parv{byuDCuy&-#LC3^+O#S}&nbNch-
z`gEP2awQ7%>6*C~Ly3p;RT@>RhFU&=_%)!BRq+5J<EwI&lT>bT*pMTcX9P41_i+4!
z1gqw@tnDA0MIy6!RDsnUQPMlMi&c4!wLe-Rx7pe=m{6)`i`?rW$es`XAtd6TxA<(=
zhnSn2$2-C|uv%^|!!s5hUI+bPyuS^$ZP6ut>xfwPM2Ttn<8;H4G{Ogd5U^i|i$q0I
z82`X|hD|M)cJ7lje3+{{1q)Je*`$zH)(r0aT*{dKsMy?4?F6h3h~mFIuq}Q7Hff;0
zeCZ7+^JRIA69OZY9miR~QUe{GrXiD@>79|gKUQ<&lUexsnfyBwH&w4+zdkwXTRU#O
zLZRb<qVJS-X(O!vD?IW&?M<Q6`@is8JFpo<`7JyD7>`DKKQYX?!FR|tAya|~$_EQl
zqm!c(J+Vkh$#3{Po#VhCo_QBk)RsN_Oyq~ils82!Bg<i?Hm3V;Pa=>FNdpop1Paj}
zK>pz`VW?Ti7`CJm{gKt?u0)90#<OL)xkHDhmi{wzChI1-e=nu&TjuVrrAwpymoIE_
zH<Fljc54ndXU1LcNss`gML^>A#b9m}B^A~2>}_Km7ZnvJFE15+Q2^@F`)a`P>1wJm
zWT-?9CP88Y$PsVGL?70>2dSjKL?@Cjq)R82DVWS{CqF~_Z@;z8+Rqdzct3%0WRhAw
zMx!P+Ij17=<3JHyPJ^j5cuRTjWPIO&v-~@E!kk}KdsB{0fyuO-krrQnY(q9}KG=q!
zeXzwYzhdVmoIt&(Udc2%OueV|8LKDt;IP5m!8Un!j2>UfcpExNV`IL4vuZg<nxu2i
z>(MtPD&-4@3G@j`R4tra{wbA0X<Wu$rKwXhWeauo6N!><^`lK*prhwvofi-Rv7@7j
zhI&G>h*rHUoH52ndEm?Td^$SrNASZxN%wo9I({Apyd||wDXe9et=APr66kud3^F-v
z1D)wr?IpZ6yCqZaQaaF0>_TJiP#}rP3u2isQ4D29y#4ng<P|03i|L!BoGUU}IgW_j
z5BG?X5>zwY?Or%j{efHAn%lM!%@W}E+z&BmJU?t-!;OuNrIGcqor`J(kf%I=&3lDO
z28RvGhdCB5cC`8bH$`0KA}143`Qp@5#5xFUpGshIJFLA51j$;-#mV$yd=mG6J>!vY
z!-~AtncfhSLr}=$LF<xx(M~7B{0z_&r#_b%BgyJ$O#1jPYrQ7zV=s930G57<<M&gW
za~X%{g%WqHMiBBl@v*jGdvfT=__K2Ez&85@q#u8u-QGz~pXx8Q*ps%Y6?>bbNa?Q1
zm%Uq&oE29+h@-vEmfjA1-&9=@dLWk|QNyqp;S21$(*{9Qr7|@;-6~sl+zvl-rihv8
zx<VsArpYWtXUKUJ)c>@@Lru^aI%YGH4rYH;NlY0gezmA@pCbSMoGBOiZ`Y}AjK|P!
zb8hDdJ<tdjl4sAF7oDw!#u3e{BF?v&a6#XclC*D<i;-hRe;cV1KAOSRt)nf&|KT|Y
zk7y}pzmSY--XEX7$*U-B<ep#|UB9)93J#JrY9YI_=tKhvOaK`+xxs^dN8?Fq+w8P*
zF*!Hpl8yuxoDuEV8Qonk-gXMufOhLf$Nq)+qdAUq(y;vUL&*u>eC5#*{dNPZ3zc9P
z7#botU-vJeQxxf9fCa&{%E{<+wp3AFH_Iwk_p{k}0{7a8z>XH*1grC&a?4|c8RK%g
zB}&uWie-PAt`<6{1C=xVko5AlBGioh^nzFv3&h;wLX7_pjvk_`Gd{*cX?ecReiG`2
zaZ8~_P|5BdI=%YFP+GOhf+=V3!#8TMHrFz%Rd5|@?hi^Q<ex>(B1~`;L)bDBpcsS_
zf>(v2OV=)Yp#W2VzAW-YW_8DM5ITSfH~m!*ld^SEDZ=*88o|`rJbf7pVgmv!aWyqH
zF_W6Xr~2#)qIra}SfRgH>ut4W6h?~s3fI33?W?WDvQ8#E<@6<#q|2Wduh!z>xT#u&
zM*R2&OAXT+Rq#LgEfZfSBU9Azg&V`qrDbS)!}99l{G5|Kc!^*KQz0G=<E)h+4hQd5
zU{2qgtav>x_J4Q2{LsDB)!%rn<Sxj^!9>9~xVCSJ1;4r~znkqVi5EqgQet-c;Dh&j
z`rG(OTU~he28yF=`{=Z|%12DyTFjo5Boepbs?=|i7o!r6SUc@JdQ5Dtit2z2Bztn>
zLRd0$dIM!GFL5LkTGG|!)CiIP^y&Mw+52nnC#t(&LSJC~43Umx#Dji{AqR1#M83q4
z{O2wB>rN^Av$=OEC|>jpKnElwU%oiOdXdPF*y$>CA_~gh8YJINBG0nwD&7Vcf(@1p
z+$R8iFwdT9CFYNHk_5bWBhX*C7|tRI_eDh8&N$h;S5_8d+~G8Ss-+{kOA3RZi@kKN
zZ*CPWw6wH@g$?ZNq9G87)|B1K6WFuo*8rP_5mxZRj93&2g!k0P1;qRpnYY#<C4Tqx
z&6!w+(a!7+q4}QXUP|^iau+f(dlb#2)}TMMkPcN1gKQ~pkz}nm82oSf7O7dMBE-yf
z!Yth0^t*m@H6Ko)4`Pl9TDDW?J{vgYjSX;i7O~!r_v*FaY(5q^2~`|2Am0?%Td?rV
zG~&@0(jVtRO22M|1m2;HQt*r>4Hr79uXl>vdmjq=IQ5Inj&*de^$qtq7?~LN(&UK-
zpnO{T2S*K>bqsg~ES_`P0uB%=GeV0;N_~C5Q#OQmhVI@a+7r(vUQGf@*8WWOoK3yt
zsg~^784L4-)*F6R_LDEpjp?b1%R2N97Xc5-gc{ikY^wTb(wnw+p-*g2boV-A<BGOh
z+WSQuSWUQ^XtVBup-LdbjrF%yT*D(HQBS|Vt0+K59HP+?n$zt8kh`e}4ui@r_r7Iq
zOqB{3`?LRbja|m>KB;cJwm0G(S61rmaG1m>bVMyAtx5#<`W8O@YVe>SfWB)!EwjJv
zX+sS*xQ-ekEbr=_SsCeNc55%V_Aa>guTuq&<Ema1ycf1jhJ50@4SJ^MtjG{n=v19h
z)z~R4vhfz%%y&Cd^-TiZ6Zo$<O5!oGf5J|kWFH!PD%hU2{$<ctRFix#!0sNsvrFXr
z%vd@kGx*+_f|j+7`+eKYOqqe)j_su1T+x|+{WnBYJyZ;nPELS!Vh=qoHvVAe_!xf|
zP8V%XINtBH6k+G=>_1rBkc|!@i4|!KIC51!B05?V9m?hs>@Kx$T%uuReJ>!eG=s_F
z`p=7cQped(^dZKS3LUbvWN2z+%Ik-O>?l@p!nm*|AuIDO@&LO#>^Umx&CN|wRQGCi
zH45{UA@=e>FaPb5LTU8Guz7s&CH7(QYV`YgTdx`lD)PBCJJuOem)q78hgziWWc)Z7
zN@cE%-Hr65!-^fkvftZ(rq95`E7av{WZU=eGBd2m|4zfKs(pC{U*%Hsb0xDr>VuwP
zow&}e@X~1#YPzJAYLv6O7rany{-p1;x+wHKqJLY(8ADEcDcX3Ve?v?9u2jP<IcjLT
zug{>N?jxog!=Hj4pXy(y1UAvUXKO9r*cEdu>M3)fF=<Ti+k^nYXE(3Vi->>c#_T#{
zL@PFpeTb1#2nkzUveH?I9gU2Q^Nj-ng9v!c`dIhAtvNS$Dg|l@OuC-3#>p~?XlO`?
zrE>U%>^8QaYw4lAi+pDhvE{ps6Lv&I??WXlKPg?%XlrIX=CCpfQKxE!L<w+E{BN&v
z9j>C>6uEnAhGlcybDQ(iH^9?Oo})b9ys<f%pXLVh{py4kJ20=1iMZ+N`g4$Lv%a01
zWFHlL_2OhiY9wB3!{%M^gs1;tMv>SYZ$i(R5D(P~FK^T$H&k?GRW-2++i3Rik}>#4
z>tD|S44dJk@gF@M8T7iou`>PsLUGs*B@76A^M?*$8Qkc#*`e-vo%<(xu*z?8`AO{~
zBQv~@xs4k^Je&|7cG0ytMFm(;w@7=6!^Ef*x30>dcc&~t?0s=;mg|7zcwPOx>`L^+
z-=^i0Pc46TpjjVkuXSpwdCY`aC+mqh_!ibqE{0NkL~Yj2=6m>Q`g6L%5t+WPWYswg
zHK3b25$u1`y+u7^pHcMSIOa=CVmJay=zTaQ?slQ<k}KXK72}hebSU4%nL0(9{u=Ig
z?YCfklq5@whDNlLvS$f>IZDBpG(}~^prG84c8X#(M77BfsJ5M=3AZ?L=6W+nntqLo
zUyb{kpX%qOk;~BwoV|3qCT-F2>SaalDhK^RxuvYkE~vqjcc+q~|1Oahu;aJEcDFRa
z^dH>r$rHQtm>lIzGh$e$s#|2-t5jB@{7!{fg_nsj85szu<J(&df-&%l_lTg7q9BCE
z_Q>$3)&%SXFAswQ7IdivJdOUTc=P7mZw{WV%IhVv^yLJb__>!yL}!U9J7e7MW&i%L
zHtQ(e%r=e)yXg8()#Nl}zYkftq;r1R*2CrT@so|gLNzW+`Nyqy9Wh%3HzyMS>*r>B
zf5guZ=_2fC&hwW=f)tST8c11LEp|(*!=_59)NC+{=aFogX>8*^+djOJ6AY)SRgyj;
zLgj!MpUe?g+RJSXY%3{C?5xwzB6oNn7<Q)VqYYfT9!FHr(9zM|T^@z}{8^yZ+z`d^
zglXz6KEA5}SD93TRFHRH@LiBrgS&g@tT(dKzdCD+@pWj#O1S<>^QpXL#5!_qk?AVB
zBD&^aB03U4&kMG2{J@}|^SFHCSeYL|n`coi)qJ-&(_)yVujZu-kWJkK>w&w+X*-9Q
z!431g-2E{9IB472dOg0$kc7!9UGVZ{ewZ7*HBUkqaW96}@GucxJlM<(6p*aW%}$UN
zpTWywzcLKp7i@xL+)U`}53eL1-V^oRAHNDACRS?-YSjw_CUc1%Vb|8$wa=eDqokn$
zFeCf*+!^gEtIx%10At8%?<{XH>1PT?jxD3kpI-|kuJH`&iF<}pF07<k1}GfoWB=+*
z(pu1hLlU5G7=lMqAn|d#_$DaXeZ`7|SLLoN?TMwHCcMN8H6?E*G5qjqtTkmrszTW}
zRSWJ}O)Q#1@Qx7uZ|!*~zF%(x!(;z&1cv-fO&r<%Uo~l~ar4*~5Ow+O2WNtsEhX%R
z8d|!o(_i~^^F~Cnexi%pQK#-|b>svIxSl7d_I7pg->-HG3JMPTKAf(U0{i1?+}nQr
zFzgK%aDgWut>S1x&J#^WZci5HD$5qr(XKG^V~0IE_mKW>Jphb5E{^-A_+x@2Il;+#
z(c<&KQ(L9&QS|$^N`KTSm)+S~V8g+q)jemgGDT7-?x5}MUDEA^g>q15a1@(-%ELo1
zlh!4ze)(8maHgQ|!|zeJ-}4nLg6lSb(Dg>M$mKk7sn%wpdOeAg)1nrgMbCS)Q{L3X
z7~S|SHg*>AozxVJiC)d-3}$Hy&dWpVUaFBpT@JX9dFv$d#(Hw<dm5R{vf`h7n<kRS
zk)VCBJlR6+!8@VGFFRP$Ra*|!Xxr(EYIW(YV0QKgNjbxJ2!wGrBt0UH*VANcAYm6^
z<d1en@h^gHk4v>{e!5SW=yABMMwewYc(HCEm(Qee*)(|03Jj%wJhm5)vTeNyiY?P?
zp3hTG0<^ot$=naxQN`GmcfYK#0+FPH6Z!u;Gy`Q>+!8Zubxbt&lunAg4PUY$Dm24x
z`7mJ-;rIlAx?6UCxB#lQ^nsryK`EBg9>xx^gnVIz;`qalJc5EPkKa*avE%4~HkI+h
z<<icuzD_0VE?<^NkoR)y%G9gr>w~zyH?Jqq7xQMjvfM`Z@Ob>m2566^-*rRhD)SjN
zZwCWHjyK(nlF<|_zOp;cPqed>9|ftgnFMCHJ8MWN6sA@O<1+ZrGuXJFnM+yWDi}x^
zHP`;OkP9uDXJwt;8)~=mRN|<j=l%2e>3n+#aetp10+CO3dPK&00Z<im=dZ7NPT%S^
z`gS2+ZnIq9>}1iMP8KT5M|d}Q-?^-KJq}Hbgr_|$-!-}%h5r0`eI3VJby>fY<%x)x
zxme_0bp0MY#{Ji`Jy{%|)#cFNO$n($Q=2@rR^0eX9b`y5-P6;fTA-o#Q&lpwbJCpS
ztuE3RGqaO`(-BVF>Dk_G<$8y}WXl<6dNLlfT&FWF0L2-2u|*ST0ISl}_Y!p6U2Tb9
zE;62Iz?g?z8(%bEVdi^OR1hCG-+`<*;8)b5i6w|b?yPF-jaM|M6Y|A1)(ZmLA;JIY
zC1?58W(d|#(6zAQtsV=R^@&X6M_yfA7=x1M(3*CY+Zb|!8<ecHR6SYgtN_hDG^%&U
zl9IN#I6S;ZZ9S94F56^Q=hmxaVuTfhkIKR&mEBf}nWco<@V+&X--$8WmD=$UlarH@
zaWrGYfQsE*>!ZzF^M30C;!d?t$@oTouvn!~X3lb|<O1Qka=hGJY+gz2ygz+<bp_Fe
z*Z{OyXfTPYc8bsyM!5Vxc_R?X$r@S5+v&7-#a<1KaYFm>wv92X*MU}9t@FZBgR{jr
zI}@W092t%HEWK%9rqH%^y24nQ&H5s>I?KBy8V}(8W~Qf)H*1S$KLANvEUU}m@(vCU
zL9s@5`d5PB;NX}JY+PJA92V^wcz+z&{M*%0Ga6dRTYX<~iKvK(k%0k_`<YCs)>H}}
zfKt{gT7M`ipn(N_B3Uu0?sU|09ZK(*28-Fsgj8|}@g0l%db_nsG&bkALex0lbcgl!
z=$VGfzTwVQ+8W5Uc_BcFSO<(r7<9OtC!IvX=WzhvoAA6kupZA1sX*V0O`?%!L+t_o
z8yJVe9Px1N=P}z8M5e?kZ2fRWik0XbSzk)^0&9;lK-Gw&v=KA+Yk?^Jh!&HIuNffD
z=Q}Td0NRachtzqw3OmS1-6`@JF%$p@Bda=4+4anH*r5B_x3+rLhiX$!a49E?wVjNq
zMrhNQNLb89V>X*+37tdr+u@5D+;1vB+t*5_-Q!X5U()S^2`8%bnj6G1$zmqAq3)X}
z-(X6Iplb6ulgg0Wu-SgZ9TxxDXlM2Qr1{wIt?xgO**Q2;xKE|v7`o#Brb$mkN$pc-
z`8PCMKP~^nJzpk<zReTSOK{Lk>?_={n*9|S6*U6%B^Ro#`*jT3hcg}{2+v<nba<nF
zw4RUt5)tw?^R3t@5GajJO$YrHHWSzl#T_ej;~J^OYfe%(#BAuA=YM-4t&=pp{x+FZ
zDf^SYnr-8{X}_N(fV=Q;yEldc^3i(wU@A#pz-{&Gl81BPyZ<BVDx;$8);1O>0*aI{
zgosFobSogBGz{I{-Hn2Pbi>fn-Q6)XLpRLO-8FQ4&pGew`JS~{tTjKL*!zxs*LBH{
zk9CI;@~*UF`?QhIe_T#m^tvk+g!<cW4&t>iLRw{^*if}IOrX%;q_+N7rL8y&<Vanl
zS=4j&?qf9SG<>H+IMFs4`H!Mx(w7boy@!tkhxu5SkCycTDT)T{g_(oop%wzca*Q62
z^C%3!hAIMTwfewl%QbQ)BqStW+qF<N_#n%+cfbyy9ne~I7PhQCO(k690l01kG{%4E
zMZY)4e93_P_H|o1qhINyk_`6kn@w4ag`;A=d-#Fp4bpR`FV{=se)Z~f)A?`?*_k)`
z;o^*JL_4=@EL%de*^V6`uL8;gS10ReuZVj|jywOOj1Tvo@@ZJ?j+t#4*338z|7sgb
z9igm$Ic^TdIxL7_BO6^h{qY(t3E*d&6j)?^CG{Ey0y>@u+^sdwRhw6t*&FwbIeOnA
zFVeg;wvt1X6enaISh%>hfOE`u;(Xcs?<(bHtq<j12L!D483}4p9FY4m+#Jo9hnkC_
z@aiGqJ*Y+KE!5vH79dEFoBlkKcIwKT(UnBG!;V?is2n}L|Dsf8YrJ;&mT7Zwc6BH~
zRDc*8`}nGfsRIhdW7xnW<T8;}=!+tmcQ%>Km`wA&oh|X?ou=7<-CySQcwgQJ43Y2#
zgV)TQ>fU8ow|V|O*IMD#{eod6_=+AVZ`$CIUz!M6XaufcuN18P%8HVsgclsUJPj&b
z%1s;ecD#+rks=y90m#6%OJ5r(G&I>yr#k0Iz2!Iia2f*(f&Kc`35;<LC_{Gb?d-(G
z#m#Un>()aR$)exev0uB{K<tC?M`3aFYuy7jwQZP~c6XE3-3N0qZiDex2tt+n{NH8`
zSKNlfevDn+U4Flw&hI;^HoVlDQ(jiLu&{8d$pmoCDjeR^&;%CfH5`D<R>5p=PDrOO
z)N{Xjx4erYsNQ&>@T<k?f2tvQvi}P#Mc>8J#AFix@+0nh@7%tPmkv%}8q|Fo3k@{s
zNWu_V);emr@$c;JD%F0FQNkx|!_MfVWt`s^C~Z1B11ON>u*my%i?9K_Q)x%&xH7W6
zU9eqH5TApYipqF`JEg%TY!>1uc_wW$)@PepmSweeCi%vNowG2tLGbIh*k{fNL0L|R
z#zF<os%6Cer+(B60PFC-R~_Ec8y40S)XY?#4$98%QFrUn5{2WXh~;wO0BJ?iRlMEF
z0-H<{Nd+NkN9D}Y7o^1W(=+%%JnLwFG66fvvEq*0(XqIPy&sTSb>Z5s?tiSLb`C%+
zkw3>{5)Fi-ez6VlXG&Yh`Guoe<9hn8Ul~$oTGzSSnABM_yZi;^ZNsD_BPC{}3m<-g
zn=Wr3R@i!~z4;ptWIQl5G!!VD9@K+HqNa#=ZBWh)i(kQjTCPoQ!K3YX;le$bMh!`^
zd*mIr+zl-tNp*zmcZEV<aKYPxMK+~`egm&iGmbiIT%hg{7#aCG<lk?8CXq_cfFzLh
zbsp5+xn11QALzGZ7UsJ6lGVfs|AhW%K{Ih#asZV(@+)_ylw)D!c@_hwOM&@=`&;=K
zSMW;~U=?emJ#B*A8IsMgha`EJ3j0phXgD}GvBC0xfwO-kJ$9D)Nvw=j|8r>8q8=xc
zXZmtxU-~DsNv_xQH;G73QH)byWr;Z?mIG2T1|+D+8pBm0rzbIo+#=yaCfR0~(xdrb
z20Vq0f#)<hp}~YV%XYqz{UuF7v3dE21y^Xhe_6j0Fu?1v<@54juwU&O4EC$ypt`XS
zjZ=2JH$0Dg>fIKRQ8uPu{m`kY={84h8~M}Qvz9|t>-y)pYQODiv>SH(ry@vktVm8m
zns(Go(fDi@|JcuL=<7GJ{5>@NNFohYdDS%FwEi?H?&@+5@f0g*@L)4OA_78?3N3(<
z|B1mvA8Hj=EjG^ZS4m15@HaFSekVXada!9;xh^qxRB(uz8(AP=BI45+l&%%r2NViE
zYdXg+0K{Fevr{BaCHeJVMS+XYI9PNLr#%j<yt&TFHU5?fxt{T?AP%dmdpbQ5d)r5R
zAhi=}e0&K#p)&r~7tH~Afhk(aKWANaL5vlEIG_M?RvAgl6>A#D=C*)%(m55zG)+Rk
zM0%8S*#{9<f}!Gbb^%T<qM|vah!Vx;|4KxgRA>slWGcamxd|%x=(v2|V-G0${rvfp
zn+2`s_VFD_g6ech&$DN!mpryg>jlEhhF7=ZFG5_?QLWoI69<!B7vDIt^3n}NCL|<8
zCGPBQ?jDl0Ne&QpSF_gMtI=m~HtMo*i4>BOEDOK%J6cv!fSz`k*q}!y#)+y$aUoy9
z|1R|sK2%zXT-9^sww!T1JetS+`O~MUAE-WFU0+{a&Zv}lZV_wgUi85nva*ejW``a=
zP<C>jdSH*y&__0YhPNgO+WT5oty&}x_E5c}mSwIPRGI4^fjnDkY<KYFbeO=zA?LtA
z%iZe1U!P=AB?oB7_!;>5_~5*gf4vR0TOHrIy+5R`NHtZN{g>ySQ$-&@^#z!BF2>>C
zAL&v~S3Q!Eb$#!n3>lf$b6)ehBnVnbP0I$oio(^J_^6P3s`C*E5KN1RB94Hd&v6*5
zk4WkwbZ>93Gb;;#S5QB2efj^!2O05{aIpL};_;_%Qi9r_KWlrp{`&Pafc3zC9Iu`K
z71JQhHiIDz=LMA8tBX*2JPxP8mx<+Y<dg?m-!omtOw_dvX}6^<!3TtRk}EM;4vx87
zI5CO&B1bs^AS}_fB=Q9-C?${&EdQ4I_MglZCQ~BV7@HgU@3y13ysU);(<`sO(-;*_
zm|)BK`tSpVj4bVIZr8WVXvM>mi6win>Z3QD5y|gigGs_J-qH_r#@5TRt9t0K^OI1i
zq}adc>f3*;croTLwIT4Q@{d|<y6qvuBIY!D>~~$laV+|N$?K-K7}BG?LrMLAX50ZC
z%s0&kOgCW3-}L$UHvC=pT2k)EXjGw%k(>R?3M9!CuRh?XBc?g2C#V=GDH#|Bfqa-%
z?YsqtJinc9>`6a0X$CtTnCF8HZ6u{#X2J%6D|ILw^>nHaETtnl-J8D{m${Kw2-?``
zGaq&@|JIyqRfj2UOIFoU1pJ%lSpaB%(yc~bh;}4HmwRFT{k^?aH<v)Fkw^brOcF@h
z{gVqwd5cc@cd4xG_7ctE24Te3Sc3KMf<IAz_`u3K9vK@OmwI5sW!axB#Hc7l6y$4~
zxm(fhsvy32e*te9#QqME_P~sNqmh~!l+&OKmY7gex+-W?Og3s5>cuq|AR;zqIP)K(
zy;{Q6vMx4|N^NVe_vwg$Z|Gmxa$C(9)-Sh^uU_V#_DH8T;wMGK#g)WTy=!az`c<Xa
z46jg$v8OE*CE(w*59<tfH8&WtHNLDykzynQJ4}8%m1_KjmLjA9J@|0PTA*=k(6i0Q
z9xaW)%~$!;5Mlz;c1k`_K0Q%zFM_S35U#Pgj?ghPr!1F)sI5yLw6qV1!I`&f@{m8K
zwG0uSzQ&?E{y&w2J)nYENi_$3Lq?9~ilM)szrr}0?vG21^Wx{Yhs_4ZXO`Alj{f-B
z@$B!5McaH=Rqco}$Wi&2Q|IZZ8Z`F8Fd?xd{X~&8P?)k(Jx%4OK6Neio;@NtO3g6~
zbK{`1eVv=-DA}JZKoTpW03<2gDq9j+Qe9-lJZK6I`q9uH@(jzFq!UhVNRatoBm#9J
zmLwo>PGl>xZ0RlG4<J?zt6^XO4gc5i)n4Ayze7J|{zuki9b{vP3|?mNv~TJ~C$3y)
zlK<+XN<Q`Dq7q(?smU%vWhB^0d>1zmSQV-7Wj|Nu^N^>9V>5)*TRr31T2QB&HQ?Q}
zNGvP2GDkRt8Pq=K`Q0%olt|@VD-k9rjWuf<8DnUN{skfHK?e}|5KuTm)oSK{<Kzw*
zpEgleCYa3SNgKtju5G`>z(wbh{71S}I@r5^Z9bET1Al$8{^5xVSKl8z#_1Ehj0kz3
za~KT(SYcw%sv7L)AJlAF|B5@Vl6A^oC1%{>8!ne!@D9z_D2tW3WCwO+8^bH`z@Jj9
zJTr9Qte&bKpmxf0?bA)W@3Rpe74{B{Ld@;PLct17e1oUj<d9EolyZj_{#7K7T9G9R
z4?|2Qxlp~4wo<wa-7t)pU-7vd>6>WzlJ3r^DV1zJRZ}-n(T)0G<rIDz<$nI|pm=V8
zAn*JE3v<^Q4f(T$l*jG5G<5#EmCH)I;Ip}sm<(^oKVL^J|669q$8On3lTHMUvst*8
z-u~ou)tj7**xsE{$z?W)bsY9rK27*i6zom0r1)lo`QJd2+jZopm$LRgOMuaq=5Z5=
zY#(tJu2-Vk``sAsFXStynH`nW5*N>&r3F{vjKp6;r>xmRP;@8rJIf`WoIwH>AV>6-
z(zyrFRQK!hW2SJ!XVB`pU%!9b6jyI=Z{OeVl#>FSZ<@iO#?OZ1Qf`brDj@g*iRXGq
z+V!q8_T5?lIRA|r<fi@d#885zv|=s3b!RG1emI+^=)ripVsQ$&HBsU6_0n%(l&R%P
z*Wg$$bZ7GD3xdmLZLOUm*Z+LCn;uvIAm~gvB`cIO`BxQwy!RWtqdR0Xr&KD3?<k?h
zzCJnSPSDI$hU~?*=zR%b6tXnS6o;5<)UT%zQ+C)(a2j(38vJ+xKA@Y8YsfyzSoPOH
z^pYT>)syBGJ~lxF)e$<Rg`lRnUR=MXm4nRmhF5ruR8}HulSHqiKk==g5`IY1eh%aY
zHp48PELCZ|y7{k|>7uf-vkUzTH7boPi+PH7rmW{{5Sjp#lCsfr42*A+slCwMU;a;v
zRclofPj0RmmUYRCbRe}ZT_v6Ye(M2;`!`SmaB$<9pJ#xyfgyKJ({*QM=7H|iZ1dq(
zleLn|yE!wG9KhjWQ-~_(PgUtghk-aPm5iv@p#PM;zhJlLd|S4E@_o&NbBYU&=_R)z
zTiw7NuABUt1PTin5aXrAY!u*r#KVPTCY5yDM8Be3=72ba#llJ6C(-(WB`0>0yF@=?
zQNusN!_y@ZOO6wm>uS#2-<PM-b1IH#UGd)dM>eEuL{XUfvu0c2CRRiW%j$et4_faE
zKf1n~C7`O^8)0G;_!%dY%m;2&y?F3sNsA+MyS)-ibun$9mH^dkjb<S=qjQJeLlspw
z?|sFnjYCmW8juYanKA^ww-ttyhY9%EcKlcr6VrIT1NSxwD?cAjc$&n{?H_=y02r=K
zh@+N^>)4qyRT@`Kr7pCAY&c=SifvzwO{3A&SX6YVEiKxZk(k%DM5^+-W4fv;BvPjJ
z``k~+Lu1-~oi{A&SEqp~WgksGnRoSB%cs%{?<K$Z#p|t!Sz@Ln8rD{~P4AbjH^&$0
z;Vsvv1(+9Msow&F<BQY%fHHfUlBLV-RldX5R8P;1qT!Zo#c%;m!`mtuM_ODS=JUzz
zC!#Hv{qtmGpVt+B3uvFMPD?0{cJOCX$*WhDnIA^l;t2fV3+Lx_M9vMuc(h@f4hOeg
z6ah6YXDeVC0i<2dP20beC06PdbN=s{`iV8PbVi9|lsvV9wtOOSYNBz13fu{C<(^Us
zWf(y0QLs<u?D~pB2rTWSdu%C`N&9c!Lyl8X5jqX4N?Z)BsQZ{}Y%Au>c!6SKh>?Q9
z!N^~%M9F$S9iZfl;nU#|09LubYMX5QWB_O3_!Q~sux6tc78<;GHhk`S+DgXjX3%q9
zY~+2mUbPJr@t8E4`1V>p^~fZ<ZqJT}f~Gw027&FlmsfGzKAB8-NCH4qj{8sbJ353G
zT)l_R64H<jmAfFEG+x`Cy+6yD<3+7d?Q2B5=k?hiKLE}-D<`KMBvojH{4O<9Wf^{i
zyg;f4`vm|A?C+OEua}fF&HP&L7gAGF>?0m#%Bt<USaj3d$HWD0S8iH4tjOSvyY@10
zf;7nOwR_sj?Z7^o#&gnzI>+HZ3z~UD0SDU>fs_;!Cha{v8_ACBL;2t3+UH8}$y#!)
zTT@9KXf>(~)_o4W3zZ9ZAd$j=Io5K$$*lX8<-`DrWmNT<60oygGz#6(2oFs=8lqZG
zZ)f7?&ak~BsuXyzI&5Esy>Gp***KPag$h7MI}b->b!JhBF--qsm)jTu?fJNK@$uO%
z%&jc2LSJX~`?$Jx8VoT!_iHSysYZGG%pX>w6jH-HE#)WSlT-RLX&N=!A8PX%9hK-O
zUzd&wI=BF2H;g5<h$-zZuj1-t87U-J4Cx-28|zBG@y}h$yzFP+4T`s<_R_4~xDmzN
ziD6Q9>!6d7@vs-&Pn?`8c`%->O+!UReNMQtvihKLCFOTw2w^QUI@vtMZ#^H29xGNq
zLRQpW{`%~tu2EuPx`E#Kg|>TU^cB!$J~EApH1lSC5Z)jfIBE~D*Y>uAgJnXpN*R*a
z&88hkN(=9aSjq@0g^K6c&-XtAQ24a~T0ex-nWJ%3fnGaNpm5r1d#=URND03WJ!PIF
zRy1IHs^zMi;bH%?M}{t9r$;8G)rQ8cQ}*iPXAZr#qo4f0bh4{5jl9nH*9)hgj<zrN
zrXF{5y%9I5mk#Y`6;OpYgC(xN1=m_nQZtetA04wgJ6I6P(JK^oyun^xygL(1Bi&DX
z%MHvta{%e)Vecp&VK+3qTeof6YY8!@ix!FxJ!cJ>n!85G`5Kd%N{OU?yng23WG>eR
zw`y7#QaDd7`y_BRcXzrF`p*v5?f1QeP=U!l5TW51Vh!=1Wkm=|)!48KB9v^+N)KEE
z@#UBDdOun1tJPYst9LeLp~Yuq!ipFynG@LlWLj-Wpe4(FlT&nr-Yq2p)h?OG!FEc*
z)<>d*6X=kEZ7HIOLS(Nnw5t@ae|@GToZn;krt-7*eQd2ee6(C5w?@z3Op)%z4(e#J
zePfzZ5x4!h2QV7aiSe+{FIy{(DTsJ?ur+tTYwgWvw`YKuW8X55?neGPdx91Y%$kzL
z-Mg)Ay(r&{%%n<i+`0u?j%1`{=F3l8c^u6uKvEZB44a;nKDbZEm;kYFaI|pUkz9y~
z*a+SA_d~UYS0p_R!%T91_Uu`e>B1K!;bT2rDj98+hvA`MWxexyIOR9z*Gh`C+G?_#
z^yzB48bWXSC>e;R@lL+tGo7yq3&$9OCi1mt3oc_4v?JR_vviBCNYrNb1z_(J2ov;*
zz(A*xD87H*KkK~Ine%)rf)oD568?w@^9_0Em-hS+uug>qaqb%)1>%SIB}T59f-crg
zVZ%4QKE`>5pGxHD8L>oc7uj+Ql^R3UbzKK-qnHVWq?#moZ3qY?pCWWp^FS4FN%?eD
zM`&|Q6AKV1PTn(D6X)1CCzpGiAEn~H$(L=}dvbw=|G6ue0B5Z4jPj9C!lDezOaIo^
z@iA#BN04$<a`KzEuits$#ewbi?LqPOJe1j4Ba6R(AN|(jPNNdzANk|OU=#`XVmC)~
znG_b?Zg&9KZpuOF>DF8e_gx3a;mpNhSo8WoTu}<IfXI)DpF@^OmUA^!yh)37>#bqM
zL^n48JA|wLH9@p7tl5UU!OoAx*~yYZvul<wvQ2>w7xgKPdb}XXy+^lsIDDFkoaSnk
zDW30gVvTi^i8WZESnUe7o&35i>vyDN_djci;z~;FBNcyB#l&M+cVoL|=xFFrys~z6
zdXkX9{)KIT614`l(>okfPMo{KnBLo2q+ED*x#Va^tH}r7jdU68O_a5TkDyDF$Bhxk
zb--6O)?!Z*8`2|~fr+9n)E#0B9BINPwP+C(a+Pi|)<vS5z0TIDyYXTPUh=z{!13c3
zfy=r>KVQu|-HH*3h3>>=KLc?VUF=7tMT6yieIIY{o~O8bdU)(i$I=mm5^;%9W0215
zw%?$>q){&Ej-e&&D~f<X6w>9P)!uhARo^q8puLI@3DOh!@umw3=yfyTL05B!k%zN#
z3F+zq8+22*chlYb@ugag0GE43^{468ntcJTjr8_A4MXKS!`BnzM|zoxx}gQqtx3W?
z(wqgG4kh0u22?7&ByQqD^B(jD9ZsSq9Jj?`KN@*P19)zGfeET|-QCO!q_NW0TsCym
zo&fHsTnnHX8X6f)l{l`FSpKup)aVgykpv=wiW`4g3!-_;G?X6;)W%36Mo5A(f?->e
za_=TqMNE`p$+(bZ@lDdCq3_2On~VhU2DGiu0vdq&g^%+j<_5nbG|3kX_al`FYuf!m
zRFyFR^fbiXRf*rK6^nOuhwhLF*y(le4fpV0^)@?SJZ#6a54W&gEh0brJw^MJYaF0|
z1}^1iJzw?>2=lDA>1*@i-*;-P>PYu>^Q_(qC?A%5%j>o_x|%C+?Qmb#-uwg?9Dx7w
z)$VlTO%m8xL<GN7z41E3+B^Ab8NTR!*Wfzt4`Tz`D=LkpNVv8h8T(;(ZFmU;<6$;9
zo3UG-d#G*ArTf`g7VpH;#xSru9}gRfi%gYjO4V@Cf0&t`_PV@G2rI^6(g?c0-~8-A
zRG?A5cMqk)BIDI;6g4d7Q^SjTJejVzdgyiCY=GSq4p`cMasdWkC&kxWZnnc)IS<X|
z%9LK<Gk%@@kG(;4EIj0Oxor+7;OEf$(uj}gyw5M`CYGP~2KIiK|EAO1{amqlp-AQH
z<!0IthFzfczk1M~Xh*;SZ!L$HVH2?gaJ{D(PWLtKT<Q(qHu=)7V4-7IcnvneTQl6Y
zy6GIW75*eI>RILoxAoo512t8I$d)mCaIyhSgjFYR4P@zLf8-`$19tav1`^*@`s%Zb
zGZfXayZK183w<4kfaJtot#{1#8!+5f_Y)3fKr-4%93|SoVMXhS=-j>lqR|n;?ip1i
zG$yv;$>Vtvql&nJ6A-<Dx5|X8jxWkuUXMRWk=(#{W%!V4dh&KECcV7Y%^8_i5nrPc
z<4E&fi<5fjaCt^WgMBowgQF%U*bMW1a)6`l2eOGgwVzc_CNU5^HIN5HX$LM9%k8a4
zPYCfzpO2wA=K;``ICm4~1RP$c%(fN;`CD!`;*CEJ-P%okE#~9FYq?yz13c^PGW>9S
zj3tQRr8{yvGOLMsQ-c|)###8#ZoKFK@J(G&9q_uH?8Pq@UFwa>C@3zH?jP=rsTDF5
zL)Uh9Z}wN1#>U6*?k2;#FuDJYx#2c-F-7#<RZx%qg}O!^(W54D)pAs&s!wMWWg5xx
zlm!wXNrbI$zCJ+x87Y>jOvG;s2II~G;}`6%66sbhKo{L`z@ezL?e(V6e@h)oZ5VIQ
zO@J7=KMnr_B`<}^FB22=$I~TU0GjGY$<z#A=yIJMdyeFG)ODlzq;}HoM1fj~<aeXU
zQ-V@bZnvEwt73-Opuq1TA@pr`SK|ekX^biY57249dbt=b;#t6OWQgNN2V5#r&~USV
zm}#RD$`w*`<Y!F(`n7J*Gfz{^%|9G~<ylW(h2em-GhFJtywR`zm-C1aM_Z||5X7av
z)Y#)z`??@W?Y2P7P0nmzII<NuK~Es$u*Gc)SLqWT#;SS)6I2U_w+nt^4}2>+QT%*Z
zG9RQw%n9i(i}6w9gdER3mgk%q3~Z?)m(BS4l=TtKJHvq(7MN0@S{JJ^lba5Ant*${
z5;CZ$*9I_KH3&3s0Q%~@n8-9A1glrK$j%62wSQXxy2cx$eIpRF{pjAy%JqHdt1Slm
zzZnB!y9Kh7df`_eI9Lyj0#2;7p2$1wI^(Un4jFDp7)xW9(=4H5tk!fU$U*>)0t7l@
zXDRj#N}6$AW8>TBp|shUo{ki`<fc*Xqz9-4pr!-0kJA9_T>%KjV0@3@L=PRy7LWTx
zE{gk9kuLreS$#NX-z%R_@<4)dc2OvwPfy3Px8UtCTWSuR5zfytoh#MD)HnVvC6`TK
zf@(pgJe-6M*FS9{Rk1D@Vxe|kN_%y2xFp$pYaF-musgT5^PM>NcXhf_r;Q}~xGh|#
zd&mF19-XyQ@deQ2dgGto&@M^R-c-Pc#|7sBa|tT|B-0l2NwKk-<w6N>uyud_e55uj
z4<0Y+`j{->PTsayDs_4d<9Wvab$u#l1PkXMBO-z}?4MWn6zeBY7l7Gk3pctRc7QxM
zJF80CtFkbqIZ<;ru{j}VVIUaY4yt~tOi~A%P~2OCk>0)Z8&PRf&Wq6buS@TwQ|oQk
zE@yYkU*wx^tGPaYavLo6YqCVETs+$jM)A&OExO~c*5HzyFxWiL3w(>--tlGob<&x<
zN9b)HiPqMSoX|ng2ipQ+DL$a6D%Xjb!>b<Dvx8d7Ym7b+(4d=zZ@Q`5FW?47=+s8H
z$#H#I`qvDqbO10{KA3d*-ALuQcXLzRllewbx!+g5GN+^_%(5x{ev78Jq<Ffyk5i6{
z!${FYi0sT-^%w7hKcy4ogamoXp|pS+RFpU&#%oy8f3wLpmHNYk6YnZdCU7x^EGzIf
ztOyH2n`A3_MARpm3qXN1rz)O}Yd3<d7{79+{o5e~-xtpS0S9WqlP@GYD~NVP+pnyc
zOP}E@;v(}xHn0EINq)Td)x4zYiCT9hX~oDlrTa+NiS?uwi;#zr^x3ax=5d_WLOZ3p
z9frQ2?q+%T?BF9nHO6c@g*h9@MPEe-DbW4xS_57%-m8xl5=zX|Y2ZiUUozINpwvJ8
zZBNlUkYwRCyTX(ymWVD7BS_MIwHQc;E!z4LVo2CJb_hEPdk^6na-yptj*f7D-u$m_
zq&A}nwkP3%gW0QIN^8bO;B8D4%B$0Ci#`ISHLXupFecc~>bT9PlaBfl0xF@zk*P})
zvMmMC+iFagqs~>9B&po-|D<({=q-M_^S`^Y%-DZGXP@XPX5LSytM7tSL>0tFrt8md
zEIzJ257OqZO|3*72f_60*wDu>=5*{#p+M%7fu<&-xIZr+WCoRoWJl6S^7}TC?(><M
z`15{xIq|>BYqkwg2MzgxJwjaD!KU~!<pN2RDGe(?S?Hb-6J{kF-%Yw2rG^DfqmD;%
zJZ;7B?7`G@6xL=1deE39D8P`|b{ey>U`jaM|2ExxDOrS4%wYsst`lX89~X=Dy~5*n
zz_km0b;C(;j#QzcvU#H+^L_y&TT2BHQor9ISTG<%Zr|i`sI-8n2e)1-V1XH&Zc7Qw
z0sM3QP{(N8Dooo{Pv0GBm!u_uy@Ta7F@8tm$`sQ2GFOst+vH`KY|9>pnzdFUhY@<*
zvg-fLQ8*J-wIV-~2Byb`DPklejpaQ1FE$;3!TAfQ*)!Ws8eka}IpjUvj+oR@kg>9S
z#%@>?P`Vom+6;9>HySnfRec-161j>B1_%YB4*magvy7=FJV)O?x?@Ix00E;~%rG9A
zf2ogAsP%qV=Jhhj(_xXYFkyHmP5t30PJH>q-l;MRoP0GG;)rRaIXB`6*OBB_M~?>f
zWt|T=IB=@6Cq+Kb=uKvFgnBOimCU-XCHcw<g>gS`1rKUT8GGHqhZTR7lpJ1@c50;q
zW@`yhNP-Q#cd-n2BeJ1=*Vv}8ExDn6?Xj4^1m?>Y5W#<ufm!HevH!|Y8;|&nL;=<B
zfr@7fesy1F*mpSXwsaDsI=fyHJZQBFFfwX2YbhV=VK0;LIx?!46lDlv@<o5<tMHc!
z<@q!kN2BSh8p#34|3o9nnMz$r<N#gkjqy1`=xE7vVz{qk7NNiYce7BMUdAVGpDZym
z-&FycFwp(A$Kenjo1i~9*P0<NTK@h=K!(5Qi&q*P5UMfM%AGp$HQ6jvE-PmH9n?cz
zcxVThQzIyq(h>UP71rNdE_4XL!g95cL(qT~iFqJNgiQyf)o0Gz!=IH3wL(qp0mKq=
z0H#=_)@tiWw;sUz(FhLYc05r)TqAvad{hJ?29*nA_j{KqfCjzGk<3>>3G1#Ywcdg`
zddy#mO-6M$E+9KkF+*N~;mPS2gbwQL+EsI=74zT6*Ya=+E1Vc$`C?PkIu$AG)#2NR
z-YXR<4I0X@GCaLn1)5&;g2ca}X)VO2@H(~d8ulOS_n6L3PuH5B8d*!F5E0__oiXn-
z{b}C;;+aA1nNn|WMPr-`vrvp}pGc0ktckQD#ouQMfKCFZRS!-`54985zt8@mj>nru
zCt@R?;JZ!~km#?Qdj02MYPp{USzIfV%0({KSm<2Z4)tfj=?xiUNUG)IJ>M1$1@Yf>
zoUYR;aCvNvpp6^z@z||xY7a3eHdINo!}K-OPtRC~`EGkD(sgy`JXs6P%X}g@6uPsR
zaiH=l0=`zbISrAY(J<=%hwf_mlX=g_ITYJ=2dCo;>Q6ZPwWyvJ*62sh)XVXP$*Zem
znf_QN&QoAvYpj*a<-16o&u<+LHVK$CZcVSktIiY3S4l~a|3F;lr-~80&Uen^pQ}91
zdLs#dRy^=L)}1@@>ORT(8J^MNf@jQf>F0amPqzzR&dAwndjd~HnNvy~yG$4n>-A_4
z^(LpbH-Fv(N&uAHVgf$gQs;hDc3wO$z<Qp4x;Z32)fJ4tI9hMMhup2=prOfkkLO*0
zaDAVFiJTHR9F8$Cawx&GqY(M!1TML}{%RlOPQyS}KIk~OueDf*i}S6HTz$byEq{$!
z?UM>sg{PS#gXz8rL=7DVIeD^9x4Ss&2?p)FA%%`Y*B#5k0ReD+dS+%>$s&zxyLDPc
zti8`)27vJ0%ecP^OeLd~uNK=<a&4)orsj4U$55hG&jNHJqvO%?U96k}jdMACKoQp0
zAFB@r3keK!HSV8a)NGt8QY@6q6rG*D?O#-K+8Oh6^IAVy_vW-Dy4Yi_N=}Rt=k^=C
zT3hAT9!$CD)ejeq4Y_t(p3Wo#HScY%OC@q7+)Km4_IVpF_R8&hhPDcoIg1wCjCnKF
z?wfV>16L^D2N4+iGlF0~)2OFWtEjArFXOf`C3F{*IX`qYtv5b${9jKLjzVtWU^F*`
zN?c4DQ^H%NVy8A%uO%X4sn5Dqk^a3<<FAj#(rMCCQi`aI#d4M1Vf*u@>6@C)Ee{80
zi^`>h>>Ghaup*!vY%<eW=CgKd_9BxlSH;6cA2IoR)3eE~XWBz#YzDta;AP8DG7z#(
zc2cw1ok6>Tje#MQE#@=8u*XraoVE~^dc3`DdMfa+vTfYWe|hxndLi$7G@$hN$euKX
zGMB(N(rJ;T{595yg$AizKoOGpTr2dtg52+K!dXuJlX4j?nVUb+G*mnT$1^}EdoXi&
zNQ(5z^TH%QP5+xnNBN=t%-!la7G*|P!s<x7g0BO!5$=YMvvyonPrU@y9B#M`k6>q4
zcVE#$-OS8$wJw0(@co>l$ssORs*B$Il;yGQvF9~18v_lCxXx>T&K<mnePX@1p%I&q
zK;vOKQkFjRv*qrZQLD~me9_zaa8`eCXOcm!hF-BDrs}jOjMScsxV7Zcuk+=n<B2|S
z754so?P7}~nkS;%QvKoQ6a5T*C#ywl5GW}!a<oMlEr-O!_tUNxs9_A%T8{^BBRe7k
zcC#a@Wi&jA2>??6V?ch)ziCYB{8Q|(_I6eBvd0r04>Mc8w=7+FVm0t2$k27-MZ$s{
z{re1y*$T06;z&h@wcb(b6yBEup4aD|$Mu^4)Wh-Sp*PU?-(nlx9RrC<7V?I6K>ZGo
zAm$(UgD}_|waQtpa#o<l^FOWPhvr_^6Lq5t{O*g1*EL1OF);?$AT4@6dU}m-gvU$1
z0Iy0;s`J)_ZP)PUG=BT@-be}twOT&+b66M&@5<^bwY{%DCS(qa`LLp$EgQ4;wy6%s
zvC>om1k)J7%+bR81zVZ<n+pK%M>=uDzHbsINqzkP^2&MQpSR{}Y$7(>Tg_K3R=O6l
z**j3Z*~(8gc(3hLBi!qxe5hqs5CG4Loyp~v7*u1^Znm2Q7$8k&@**QDmIkh-OEt|G
zGU`VHq&0a0{QWF7T5ZR>ThXvcEh@QJbEk^64_CT^hg*({j@TJFIJiD^PEW_@kLGGG
z)~5|?);ekG=;%!I9z-~nN$>LrJ)pfJT-hNfz#*ZKl%H>~1Obg5UE1Cxgm@yf-;<my
zbDQ}oDY@%4Z_b4p$K0C8EdhWVh3U0<TVK^PM8q0fHcM~Ml+D#CLT4dD?5{t9d(0Rt
zYHFb*&z%v=KTS%CPh1$wSC$-Z)ALVO({fw?4=)MOj0t8nhFv;#1#y0qPUg2aYJGI)
zezDJBaCCaQ?`k|;O281(LWIb*CL=F*PSg5e*2KLX3edwo)Vg2XUBDk;Gr84jJCnK2
z0Er1;rx&u-r<eY`Q{4o1|8UEzC!o^ETBY^A<LdMwiN8^OlhOU+Ae$aY356!HX`S4?
z+Mlb<PR^>2I4?I{&A}q!{S6}DQ)Ev{n+~c@x5dR>=3sl`*RYLEii(g;Vip;97RDBX
zqAU~}v`k<cm7D(k(pr2cPUn{|KKhq1_ie={6S;`kR@`oSu``v@Zltea6XBm98>hii
zxo@WNTD5`$^X02|en-CIV;_<#-Wo3*9wUomvzRE;%MKC}Z@xw@-Ynfc3?{QXw7t8Y
z%P<T+E|t+CN|LWI$d4;lvqDr<Teo_>p-8~tG~Q`EluTqku8!BHB>C{+!&<howr%Ja
zTPvA>FcRm3nb{gmUNtOqbhELl?V4hBfRQtv*S18>od`l0(UG;xp(4m@#k_j_ku-#9
zd2rGqo#X#I=59K&4GsI`6;9Vpa74RTUoGA-1Fk&&?lzivHBjk%wI}@5!RMpuKpcMr
zKkVzO-J6wF`wlb6M*+s6>0ud&gvbD@a&@R{7bnpDj}8FMM7h<lmFk;<zJo+X0P$hA
z#*(mA=A^&2TASRfzwxh~41GBoxSk>OFQOyL5719G#@sr3^(D>UFMr7|y*~cB{Tq;j
zW(iKCu-2(k96gmSnRI!Zt$C>U%S9BeR_SIpE~AE+oT_%KAFDw4`W4U6s^s$(NkWvn
zzx$~3lYc-EfDMCx;lt$`Bf--2{K;w}Uw*&h7rZ-FBJu6p2#rdSN;%-xVi>`qrADm$
z%t8&i8yGsfH5}HoD><}tK!7#5`ktvS(8|afI0(`K0Sh}CI#VHN;SBNmN84X-%=ud8
zSs4BF?Z@PFkYD6j`w4{zJg@FWD$z9R5K)vQ5rjCj0|PaSncvhGZw)vZ%e}@F!7jbD
zf><KhUjIE%EupR?v_<kt(GPdpK#0Txl30IPq`;acLL~|oT=x~PI5kcUze*JL%}cTh
zt55Wfvxj7%$I)4uz#eF22IH&RA!lo&eK~osf>nR@$c%iezmi%<SU!Lg5{vb*Tyhdq
zqIy=;RVEglsSjr=vZw1vVM3?E)m{phGm66nc@6YT4SX!w7~D`;tFSX^DzsvD{Wn<*
zpzs6in}LIJJWru;m2I8t$6s1B`Orxh3i2&1($y!~AtI%i8&ZJxN*iw$0M<$6Q68v%
zJ^g=g@%lAC7n>ngH|)}Z`BV?hzE%RULr-iUtGpYSpCd)MA=-dShd$<?i_NLxHGz33
z%luR1@9M%Qdj0dZ!uXe^Xh|e>2i0s2dTF##aC+1xSnPQ81PZM@FbC&4-)1}`w=B!Z
zvTAewdqnusu1h5`%AF9zhbS6rmkh+lKMPAH=7f1v8~tdM^4AlY)|t}en85_X2Lk_W
z=C62v!!X%40NnPZ$YNI<P2Wln?ey!RjvqUlNT6Y`x_~~Nb-mqxVubFZ5;g6REKDPW
zE%d8Vtj_|N^8-@o-|=b`ls}z}ip+e<JRf$syUr*`zmpcYa6iwpbr%nRv8v{pvIF^9
z(q80l$;`UU0Ut;>?Xn@DffzbMi(@!NbATc3CHxN*tmd2d<I1H}ot?mNgdsBudhj2V
z*52PE@?FA-oOx!oH_X;QP6=IJCa3*jrult}`2+MUK6Twj#^&au3C<ixHn(|nw6aRf
zXo{U8n$&XpFQN3*ooA-Lu4{GeYl58gz39*I95QA9Ul0GhOP_CFj*g$Q=7raM5B+_#
zl(&-J{_`H=N5^|^cK&NOJqw|eoD{Lf>Jo6Fc)~5*&_>|Nq0cD}?#BiGMU*3a`Ry<N
za*O0<`fDt`wpFH-OkP#;LdEZ{#N|4XqcU2?R8ATZm)s(PeVNmli~BrWxK{hYvg{T}
z{kcCD)73I2w?UB|8R>dxJAP@*q;)u+{prb)=;^>5B6dJ*s#s~N(p~D{%A;5&{v!s8
zHSoJ8@cZ)ZQ$JyWVNR5$-vHhTgEQQ(18e<MVCa<h0&1RE)MTVM=X$#1_zaG#^UOah
zv?=^bYuB10&3rakUH@Zag}Z3IOM+TDp)D{@+U~B3U~U9s?yS931-25G&Eb&SVI^bN
z6tsg%{pM_cZtd&}LXpepdbA*7CjfPO`b=oCL`o(ly!+|}dcbY6H45%Cizq`&VeJah
z2{ea6<%PtBWvyN*<k3!#S-7Ot^Wl>!oLW0Kyaw`Vn#)^pP*cY5pDvvP>YsW`<&)#{
zL06Qu=zvXz>lqjrS<ZMpm6`wZO^~QZTOG^Lw7%NR_mmL#@m&K4a_<(_dG(@b_4o?)
zi(Ffd5x*Lk=W98%YC$e${mZJ?Nx={iEW|yap(K5!I$aB1j0@gRG9E)MmH(CSi(oRe
z$-il-?$IJ9ij~|}=*ZBM+<A`tAs|suWiIb4EiJ*sU@PD&<SWhkYG{}QO}f@J<P=Ax
z+ZPbA_dXtpDi_r&%80zz$wB-UxHZC8<}@C>Q!7jy&LHlWjz>i7wi_oWIp_^6CuZ3p
zlaI7o3`Wf<tozKvKtVj#JS>&OyccOLb`0bnIk4sW+l#--{?Jx99*OD_R%grGS=HAk
z6?6_LoPLuyRoDT%(br#S56;xxS19_|2mkqcqAsZLJ+DLe&K032f4M2*4F*cEi%rWT
z*{@|1tu7f3%=I(mh2oMNQ7FZU-5U2npveO}3AuI!-m3|AmHTW=BSA#j``^6-EKGFR
z9*-te>xczhO%YSVmPr#P^0jX=VtmyxKJ{N4FP833<!BYtW+#Ysc2WYolaFLOsa4<8
z^Kb;JKHX%cCg$V&tRI~b6z~a!er5K*yO63c-!LEbF$T+s-szj&I>y#(`-CHBmP2<P
zRMz@ze0J;nEGq%J2Gq)T@-BjNI;nt1k#dBB-bahw(XbHnc`cuHnaeCVqdi$t`t`JN
z$?iUOK!hV7yglvMSXo)Qt3WqEFEsryQH5dR{pYz*E@euxQUJ=52dba1@uso3nyBm_
zvL|itN&h2+*mj;F>^@?7Xn_&&qx{H8JKHy~n1Khem&jDeJj<O&BB+;@RgmY*DNOyX
zoKa0olj8zZmnLdu><{Rw`Tl!BovSCOw07N8E~}9rO6@bx1~zV2f$Od90igL6xPD~(
zl(I^216Et6GYtMJ7nKfW0#xxKptn}A6mQT@G#{9$UZ{)VD~*+}Ao|eNyj|B`sNil7
zz?-PlB42MbJ*~y_Y-GDyU3`Ki#_^B2{`35ui%lNkqNsQPcR5srSyq`pCb~&Y#5hc4
zT$5Gxi*=gH1UpypF+FW`tJ^zE=2zL69~YkvsfU3M*cY>QP=8WiFP&#;MicR3CF}j;
z`*0r_=pH%7VriBOPqS5jq=ghfk5*HRCO$3Llx`8#Q+_an2PM6saZ%mnewN_sk{{qV
zUxv#Rp?oS;Wc6BE@6G!T;kPKYgxJgN4kxVt+%gEoNt!=3uWrxE-t5C>Ry`<hPS;dn
zJot>QJjcR%p@WCD<7ufRi*|Cp3-F3xpDyf^S&M`A@Q)F%e+No^#r3oS$yd0jI9R;@
z`_&PgQWjzRW_CU*ri_>a3X=xad2U<K_0l@g?5nqRx<=K<Hg9V6red*O$-|pCAPoRe
z6R?_mhw7sg&*aY9Ex+4Dc#E5%{=J<}yyvvdmX6yH=wm0A;ay0%$1tA*#aB$QE^iTM
z`fh1E>>@(>LH+{?r`5GC%|9Q7f)a$~RE#$#{;MQ4oz15jQ)OIOttng?4|5|ukDR8T
zE}CAk16^s38s*Rb{Q1#Gr_|xtcaqfDb5<mCijdy-=If~XN=BnE1^Z#KQ={xE%MzfX
z9|76SpR%a4{w8%%w7R$3$<?YiVzF`#Y;-jbM+Vi)RBGms=qipc`mAFxV>7e>Z!G!a
zC<iQMr3r8_{d>8PBsrXqBnN(R-Rv2uV*eyaUwUZ*CAjXfv*w$5VugIct0YfQN*t=!
zZtkmmrI(HxJLd7I5Hxh1ZuQ*2$msrJv1NV0JB9Ob7bt|2e)bCb@8JU8{edbM2D$n!
zFVAvHIy*aCDR6t+A8Ue&QpaDm&e+S~%9#xfn$Z<Gp_YH^06XK@nCvP1O(Z!RG>fhn
z<fc9MdNmLLGe5$h02>ekXtF8JMoemF&~{(3Eyfnp@i=b#jmWV`2&5AQ#cU7Zd~|yi
zJQh<`RmJcAY9yMDfsD)L19|$9QQ@85!t{R{EOW-6oCV_K5~7IW=AWv5Ekp<hgn8W!
z%B!YMnon85t3(o1=}2%rw=@SLDS8Y89ZI@;sLDF@4&s9eyesKHe1Ozn2%fvk`7sWh
zQABwH5N%eKv-fH@7ig6NhA8lztgNiPnetPBnYjbesZOt2an|9Nyto7qp5@ATdw2W_
zw6#4h%F_e0hPdL*PiHXdN@MlL$NPyCRU4K(xP=}i77rwq$yPSiG`T?(;b!)Qo%3NJ
zj2(a63U7g{wE=)sw&}Qg0Oup$XDfJK?Sh*n3=+Vk)dU35#=zhQ47`Q?i&RPvsK^O5
zEzHc+J$75+_PCq@W>~vQ0e;Y{gT{4Ur`w)3OIQiQJ&Emb%6jR^SSJqEFq@@qz`K`D
z_4*?X$cHkapK2cWUEf=aufg>}zryA8wRBLn<g<p1Y1H=b%N)8SN}Fi-7=v9GQtn5^
z>|1bIV99q0)K}lf+XuS<?771EGU$|LV^-jxI#Q+43Wtu~=;1K9hYUn6C3n}H$Fhtx
zwd6g+7TD)G-yf+byUX#qb;T<tLeBW6d6qL%QpP^A*{!gcJ*lzeZ93^MyjXnDIee&e
zCP0y6vm|bdXUqo6)}k2$1%iM20%+6~zKDMj!Y*%bJ2*J#0R9e?_E7O~L=;}*ZO4^d
zEGr%Ihd&8>GxBiQ818K4%wdISOz<>vs&Q1e`j+urtJ%$SxkH2_1p=va*gk1=KCH05
zL4uZ6Pc^_`2|>YBnhy(;aRq6>akXw{2><Qk>lS0QQX#aLZ$*FS{W>a@pA&w>&+bw~
zrL*g|@axA&w{@W&dhkQqS*^RgI8Q@lW&itw%|&W{{?(Cm9DtU6d$Cmv7|5?1$HYYT
zgo5HA5QpOoDzJ-!5zqzfywJ4X6PBXd<bv#v1!ZRHL&hA=_tw=Zl~?QSHy?>e&YXpU
zoDUE;v)7xer%?itF)<3*Uc&jI#~Xw0-Y2t?vTk{T)>}&gX}&EjUZ-I+=4XSU=%*lo
zDyAof2CzCp3Ne}Wdy_TMO3{#19;*)e91U9K%}VACSmN8WZ9;b6Q|Trz<YlC<`s^8O
zRzkoF9mapRsE|G^qlqZ+^$%f^R)49C-M_fWq=oj(({Xns(K+L2G5*e-^JDk3ic+%j
zM|al_lhdUOgNRt8YMYA8=ZMgx3rMT9$OHecsFP)A5AYfLbJcg(Nb_(~1OS(w8qmX+
zlb6cpYPZ(=iGzWPN{nuAs+cYt3Z?MzX@LQ->1(~qB6W4EnwI%**4?#rvV5)Obss-}
zTq9o--y*UY%I9u&G>BiuAo|Vc)s?lmK04h^EhC=fwj+E=l|%^C<l%X@)zK&sk5zB1
zSny%GruY;Zupp9$lg#fP7^haI(_N&Bvt1e$wbJ4#mJqZ$MmgNuOU=P=q4KcMjF>&^
z3I7R9quV)JYG(QifWMWO+XDC<B0pA{A`%i@w|esr5b(KL%ld~l+hqcH<)I1CV}nJ^
zqpLEX(eQJ7t9%>)UY%7H4c!YP=GEVv5tOS&<u#lQ3eDM&RxDuO8n?!sCvaQcKqzq(
z*O^O5OXnapmVUj<S3KIOR)-g>u-VFu7w}qi8nhJpP!3FirSU@N4iIQ)XaUdRZ2NEa
zRoFdoF!!(TP(#{1%{u;oR|evjOj!xgi^j*lCL)m%Hlm`a;CtLFkB`=iSL5|r1*&4L
zIamFYN%a7W*1S?>Nv!1hjsuo`qYefkhwbs0V|0$oNWKW>(k|!0+Q!Aj!^A>yZIqgn
z+T>9r*kyQr3!-v8MO`>;b^zbL4o%y4bcm`oU5vIiHW3WJqHFPfHCeI%XmGZl1i_6_
z34Ggvl=g6|xI|Z<1R)B}9nQ7bJ9EDv8;_UJn*Ea=2<?)XPH2_z6Zm{{W)~kDo6ah>
zr18_3D1~%i!@XFuHANb9-F13$&h30(AjojqFOGU<-_PH8!b9ky*<v@|S@*M{f!0|(
zvXv<yJT+(W2*Eqm-`6*${{8!RF*MM@;rU{gP@1)@Pk}<d-D)>G4i1iZa9|+2l?Bn8
zH;KIJI!l{ChkQbkx~l4|?9*R2m;l=~6qvzxNABnw8Px;E06^UT4{^~fH@qp~w0Ik^
z>;PM|X+v`}MN+*)e6mYVIN4`>dX<T)eBZ#p*$8r|kdROvsKNEr=;7X%h_hyEB7XqU
z$X(tAFXZ>Q{FcPAKM140MuNWZcE=EpHW{tit`9FV2-(zzt#t8<Q|!n+PFfOWJK4>T
zWH|a5lkrvNX;A{rN-C>Idgz047w)lkQJZBs3Fm9X5&`k8CK#M@xFOFdEbK}9Q%D$^
zAe2G-k%5kaLdx`dzR_9PD&$AsHjb@xR}dzv5&cZ##q*06fRu9roXZGHs5I!u4Y!;>
zw>!)P7+6DcH}|0dGSVqK$4GN#Dc92t#KvG_j&w?`-Fmn4;jL?}`_&23^)!x2wW7Oc
zGrNtX(SCC|L!|JdRHE>J*X`Q~cN_q^A=mSp%<xQ;>xDliugO6m&L)r+{(kd)ob0pL
z^~pL&oX`6{Xc^vI;fCCx0dEYYwXO&Z^Dj7bZe<Q8*GJ?mwxo=gu1(S{vL`oMn$89j
zlzsx1cqj#J>z!=s?)2fiBe|b0TCKv~#q^*?Clkk`qwfW<7xg-NdSg&A8BXijO5Obx
z#R2{jw*{b`hlrPsp3iRQ?Ad`PPx9x=v}K0^?MkcNEjeGTJp?X@V7f-Ql<f1H`5LDa
zuM>EH{Q-6ZMsP@o)rJX_QF`&6(|b+P24_?6^9e1tM#Fi5gDKM#_1eQE0Y_N=YUB2q
z{r*Ha!oEdnSi5egzgqp~!h+9J?*gRVs%js{EF1CcG{@AW!1EPW3ZEtEB7fUi+{ZEc
ze&$7e+W)E}*2`cML`gtM6<dmh1pZ)_ge-?qx${GL{b}4VgyW!ZwUCj4goaPBohy+P
z2UM#&E`9CF=W4OJB-p%Fq~A08O+vzab1JEzb()ck*VSTLaai4<#IBabviq?;Yjp4?
z7Kepwseb(Zp0$8y?ECi_m*)XfGVw)bX0!xDq<?CGN6t0r(m3-#31`dQOLfTvQ1|9q
zjP4RedZd%nKAC@l*7p_q1-qXbNi~yd93ToMHcOre3w1zRzX8fhv({kN#mCdQaIXbt
zbxkvMa2t`KRD8=<O3cb``XznAkd9--dTv2;S30$&&Qfe>J94_O4M1JXvr0*90tcOY
zrhkksUo{RT<DKZ9^Wlx0x((b!ooN;I6IlH7RE}OoQ!_>C=Ei%b^+9KMiqXTBI{A}c
z=QlaI(G=d=V$H_u`?~;M=liD2h!%ESPm{@h!_$q>W;Y}NP^<c%LfeKEF17Ba{H)+O
zr$uj|SBZM9QM=Doj7rt-ogJ-Ud<HHX9kODl?vUBNIl%4kc-?-GkO<~?cjD%)eamhZ
zQhKP~GAZD4WOKZdO(BZG>tgeH|LXFX(lwy8jyd7pdTq0ncFB{j<46<oQsoszQ$+*E
zJz)(tW9AnTj4x}v`6^-*%B7h1+?3BrI8Q{BrJ9^`jw0hrJNtyC>WCzD*{tBdg-}mU
zVnOT$Op(GGs;Yr0BBP-JubStp&A-dx^;eotw|~<2AF&?U9wz`?pyS~}V2*af+V^FD
zUFbDya-$}7j*jlAOWO}EGqZv;0ndfnLz7^9EXz4Aa3)z}U6?dp|J5~8ot1SpmA}!&
z{WGt_mH~1{QBfhr^<t+F08J`^+t`~6U(pB&9{ahT=8O&<TV;sj4YvE<$X;ezs&6(p
znpg6EVPL3IX1nW+1fM017pseji1-~HeN*$z%q(tfq?_~)C*{}74vK5>ax9>;UThg|
z`{La8BNZ1v{qngYTuKV$xHAzp=8KBVfeIC7%LsnH1J*JmEG)fwazvJurC{KTh|SW{
zi(0JW?JP$tU71|8YFge}o7Z-;d3h!czsJT4MNO~8YVG&R^ky~A!*Z8}Z^~;EWCz`s
zS0;IDOSj?W49(TdocWrI*LzoV{0)v(wdQtfTZCqES=(Y^Dd`w2EG$jCxn;e*%Xj%i
zgEj?AGHJ~Q65rJ}eMAbkXv_19@tQ4l6mrF@{V&K|=Gm)P5NyZp52G!nI8N8q17i96
zF+Y7qUUi&M+JBTnK7Sedr!^*r1|yeaSUPKt&sonEymp$v$b`2>cL;Au^jg^}E(of~
z%6dxa=3sAbrr(#kR%sNXU14!oIDNRqX2eDE#CcyuxV6C{fdCJ$(rs`m6~R0DYOh*C
zEI%^YEFmV>UAY!;Vm7raEAWsEJB&>aue%LIm?oMs<3+D=sR_V49%Ax;Onr4&l+pGz
zh=7tJB`qLGNJ%$JNjFG$cT0<ufPlz=ba!`mcjwUE9YgaS@9*B{`S?pf=AC!mbI#s-
z?X}icq3#xQ_HJSGI=krd3tG~B<~ge<r=gKA+|!H`e?xo`P1i3BKJj#4yfl*0aXPI?
zwPBT=^C*fJGKGWnbqyGVA0L+v9UEa(n~vGWMn;UfJVA8c7YGG~I{Q0m)|Id0y>ADp
zY;9ApI&L?eKaSpXG+d6Bp72!p@P<D3*5$BW6pplP<|pH*JT4{onqw2?R91=J9!eTa
z_#`ac^aB0MrtZHj+zAZDYU^Fng~aZz4g=8$208yW+w;0u<?Pi%AUI9d6WLSe+fSGd
zGff_9R{}U-@FO5n{j7K1KVg)`wPh(wT=oawD8|2@$dQwgkWf$=+I1E^4UMD}S9%C)
zE(PJr!O@X~@7r6M65W>Mm>4`Sm^s$c6cUp6^mOrOa?IP^Si$8Cqo7_ay4JSK`6_$T
zHVlhjS^M-HOKtC6Gt4=nWCXKcuLaD9tqlyHhn1q9(%xQrx_BQ;Q53hGIMc1BC@X$z
zr}=5KAu1(xu3fB(RlKs2*leUyV8I$-WN9g?vUI*(lE`IWZ6eb_Ei*V5LhU8N&u@!P
zI2ly@G*>hdSK+Vm1r6;&OM8BFgiLd)w4x$=7T(z8X_ZF#6Fip75U0&TSt+yi(n9zm
z3*Fl}9u@@!1&g_I0^WzNP);1iRaCp!c#h1&@-#el&<m;Zd?J;k-=2ToMY4nMXHoC;
z(5D?E5MEu4CzIKf{yf3@Y(oLZQQyH^pPh{FBpvfJJO)aJyh@&>8fP^rHAtuj##JbY
z0@7LzoNoEEBBW8rEuocVZqDhxXMxYYf<-6bX-6+wyThOoUt={-@A=(Nmb98@*p6{_
zXZ)y3N|z&Ez91W(_u=6#V)EJUWFhTc%rKiJJu6v?8qUhj;(*uHLY5T%Nc!kT)&OU*
z7T;ivx5j)f7Q!5xmsepzY?*8D1W#UW_DXM`68>zRljt_=5n(x7VtGkB50UpRbFMX!
zX}!1JKCyi2g0p-4*GJ3qF76aBPaU3F&5AMfwH>_<>dvmNyeY3sXpy%!*^Ynavb2qy
zGb$_g5#l?B2E8$h+qoQCoW<I2ySJ<<e?cr;YIJU)9^wDa!SPfB_O`WRA`7Z#a!W{r
zTrBsUsj!!{w3e8dn2^wKg$JGsV>TAoy``xtnSHz=AFs<tYTS$a4UK9eRT9d1^aPhM
zQtscpEGeu-8Y<S+k3y@4Jfd@d;#YB|t#X1JWdk*;(A;XIHrYLHI{WwUKEv}?@BUEp
z(+$JB(DXX!tP6rM+7-}$V8Ph3RURARr1=DeLcy-MxxWE?5KZw2(gvGF!sgJA`31|(
zUOh9gLogGHRPbtis%SVVtDs;2=k-)Q_>JrRb?``vpQmTCQmLOLL4M!$?XAnvLS#ab
zOu}^CU+b~-o2?;DX!YUB+W7cfT|inIyplubQ_DER20QKYX}WIxe9h5vomYy5vs2o5
zmB;&AZ9^`(&V@2-CQi+Q>0y_vX|x>Q{mDMZX4@qNZ~mseBke^97yjqOdk?%1@k7CX
znD1aDX&fjp8xo&kXnoM?eXr`+^xoQ0es`VR@!sY>o8`t%BJ)%p_I4ww;O1i4m|>8j
z=T7$}Z>6nLPDBnp8T2A#bKl9iz}en)V7&v^^G0{U^7`P}(qDNqzrIEL4CVSQQ`To5
zKjFwoNEqnWch`bS<W2d#@BQhJJw?lzb7l1m4J9I9_&mwsSf-i<`1#4~Pc!7o0zrP8
z%Vy^Puz<(=n}WYg%cb13$#3xRKEY$q()O*a9D`s5>>Ja+z(0^GprYMnDXBdPj-G(=
z3G}kOXrTsp3v2;Wv(Fhsb#E3h@xi7d98BWHGz)EOBfr3oOuRo&)?AW#5kWWt5?N3>
zh>e9X={74k`Ben9v0LmoYQ~)r7Ww@U5D!muhaK?;coVXJY**J%NaS%0estMq@pq+2
zvZ}MJc~&N~@PS7HEaq8(sYdU2)MGb7`X7&Qz!0wxGx_uk%l*iV9K|~h#J81|lh)QB
z-0(A%;`<$L>FjgtI<Q|Rc11&QI(-6;O=Zc{a$Ld|JZ7`2COnprC*RhY9!G+_(`p{f
zg-c~|f6KYV^N^Z`Z6;|UX~A7Ggum^Xjjf`GoMO#;6+z5DR3uDqxQ=8~T*O<4xiY-Q
z|3q6aF4%h^B^O;xEi*5#K3eS@8Z#WO;+)U7mdAd|@aOK1qS4<!(H0)I{NwcngPvgf
zqNZs?3ZKv3g=o$210hGQ>%-n@3sa>U)`%RVib^z9s7ZJNbEr2$U6-YRsfO<vH^Dao
z!kvIXF}vlhORuyy1WjkNqY?U)@8uFc)|Z)6HmmFFuLdS|C$}j6Ck-64HSY*S-!V2)
zZjnj2A`|e;RX=~yQF!_C<zoFMu#2dysi~=|8XFz`c5_Chgce0D<94#5ABran5Ef2W
zO8|&zZK)mRwhj<DJ3Gsb(D#Isw74D%1Q@zs><BpT8D;zbbS#$Qc78|~<M~>~Qude0
z&E;s^HyszJuGa48Y$ffX*0JXo5%q9zf@;4x%kbQIRRO0?%bByYWlm<H-CpO-dXFq7
zDO7Nz%Jk{U_27EdiN)pdAlgt|HsTHY&J$W<oh$>fwN+tm<ia^LY|Jol42Q$UV19CM
zOt|C@Mp|uWb9L60FdJKo=SPBQEnNDij<}!kn?+xj%<~JV-l%;>;aH8|XQKDAi3!a5
z&yNvt-EJ>7D@>UhT$~L<LZF*_Qw2kAQ_z;DujgA=2fsr;ejHyw35kko3KSbAaR)Rc
zpQlG*kbmW?PH`}g^1B>JAK{KO;dF`ThSS?QHa;ypd)lRScR1U)K|<eC^pE7IG#w$&
ze$(uYzEo-czNmjxeq><*;z4O+VL_-%rsk_r<&aLfzIl1j9$*Ou!jZA%)?{b%AZ#xA
z`t|Jo@R<rpq4b@=)i}JJelM%Nvs?q7zR%-5I|oO2(Nb9x-Ht^FlN>?@&txHNa68%=
z+cD4)D(H1((0P)0ma9m`4HChT#3thF8>!=D?dxGjcPZ;Ykg;u4w+i~4#=9mZ@l><h
z7<I~~$)Gm!WJ$uY=P>DTMd<)cLATzD{~2+6hR>XFsHt31+1m||;kOtnmF)OTu?orm
z2_`Z!gePJYJD%BOru<D7nl*<Btd?uP%nb>Kr?e#{>0lyRCN4IQrUFd6JyEjlj@!qI
z8$1{DmRH{NJp13|tWY9hdt-4jch`-B4_;WLhs+O}fOg_*&5?sCH6&%_`x+nrc&U!R
ziKg8~e&GHrI)Mb*!0eNR;_7{t?)WFYxMG`ev)k^RdjbVA($^ZQp=+}Q9r4oiKOUIe
zMOB7G)42cfh#5Jb0omQ)a=|~u!c(nS3mpxOn8S+ZPE|o6a`jh!N5Xbr)O&sXG}zIi
zeg-DJS~1;l6;Xf`qjtULN~?~Gk&??h1()AFK)c!Ewr*)?IJD(?a~54}<BS-vJly>u
zyxHq+G&F`pz;oj_xgP`q=v=KjR~!5W*`u?*))td&@+wO9$J3F|&>JZY6#a?<v+L^v
z32OpjJF8JKj6*~OGbK7r7Cpm<G@4*k;E3w^LSufu1sGMsP&5dHpqh0KRM3$0biShB
zuP+RUvhozt>!KbWJR$(-V!Kc~(FxU3kRUIK&{$aga`R&L*^`Tuo^V|tmazl>yDX=4
zqPd?oFCxMfQv|eeap;(|>tpsJSy;*ra??Sz!sW1GG#0M!;Ltx^<WW0frpIN?lsGFA
z9}`0zzyZ!$2Yd73=6Lps3_B!kC4Qer3s8uF$r5JJ$q<r1Z(-f$K2A=R&7L>iNw0A(
zRIWWXNChrjTwD$o8!RhKWb*K28G@u)<W&-yuPMbb02wZ>tPD$3XSO3NLkR%)dN$Rd
z@bQi4&B_oFWWR6&T?C;N*y;LvG>C_j>T>;q-p+3ULPCoJDNW4+IVRWDp7ETOncu5X
zJB6te->!4>Tx1e9n&(sEdFx%BiTGUtQ<jk}h!S~i-M)z!C8)|CEa>oq0plJ3Pix?B
zaP4n;EIuk8P_?S{IL7kI$#pw#>qyzgRUt7;5)PC>LA(E~D`rusI#nn<7PDYkT4pI8
zmL41|5gDlf5WaH(0XYA(%*<M&RcVXd%o&4W*38(m{Mc>BZP`Pb)-wHx;*E`s)KuF^
z?`D0a;kOwV^nl{63>jtLhM1q{HTO38&B6}vKmk7<!O?ZF(|I)fGF8d@mjC{Gmo<yb
zgMYpWMsrNk<8ejOwB?qt*BKO^$m4cv07lFN%++YHqbKuuwdHj^jEuKK)_N($WU`ix
z;@REy_zWwyDn0NS-BqVp)4ro-?J^xM>3TxdQqQ9>qe~Mw8F@V~(B_lE`e4%Z@;dJk
zbUF5^O-giHjK%wD+F_eZ4?UXIhe@2SC=au@cRmKX2VQKI3b$$1m1cwYQ*=i+NL}J>
zg<(XTWV|kXjEqOXvz3(eysENtZ|aWWOHo>yM4CkWz=nT?ZZeNEb%||Raq-biiLQZx
z!I|4*cwwOxz~dht1V3`~XSQ=#_q$c&H+<&goJrz!b$4?cn^_nbXz+RR9ZBY2*E|ft
zEpWd&z$PG&V9({WU6SvTkS*>!BE!eUy8jK)!bZ8pnwTmm&dVxux!hvSVFC>Jou?)A
zgSCKy?Gf!}yGN9OL-SA&a4z&|6bFWjRAo#@e>XRhP`Yu9v>2M3=i#uNoqLp|r$gx9
zw%0VYG_lt(7b(|`KQ;xeudk61-yGk3D6>O~^7wn6sQd>WvaIA;zz{u(H1aL|-wtYS
z1!Z<7y$_1TU`mU@*+w0`s@01ZF9<npzHSd6Mi6sfuK22@snP(Duxe_(XT%$n7A^S7
z@44*Ph`n-XX2r+&v7?Yc2O^CQ@nKE=i}BWA03_Q48;b6-;(jX$dL>a<Y$6yeoSaQ=
z=SMve@Rip9AP1^`lvnPr9B%W_QBiYJIP&RJ1XGr=HK!((X}?51fl0@(EbXj(X5;fS
z_bUJ}Hhe}|evar>=ksLm?#?r1cy++-bi70v=om$g=(<xLb2c%xelQmbvMotoVYeM%
zO*y<mIr-durPaPVyi5Ix`L0r9i4BtG7bK^U6npr!ZEC6sVM+-R3Du!MsX^>eBT(h?
z7rLe9_)Eu&Q4Zg^Y8xF{?xDg&S~UB|_A195SOsMZb7CY0&6l(s%^@NA<t+tDBs9X&
ziX_Wp05T(EB*(I?KJ~QQ&X@n-u(q0(&UU!er=+%pmMW{&SRApBUNpeS=nH1XCs|NX
zLl;V2SP%k4qOT7%RmTbvXSPD!1ZGOq?q*jH6RHnXm5a>3&bN2gwzc1I%OPqo+d?Tz
za-5Lz&8M<1CqAtt`+IpbEZ5!1f9e`dtJ7@Y7`CdYwx^`zv6UH&S5urk=CqTB6&E*B
zaTPgk#G12Nwr6r%sxqvEUqlL8OfA=Y=|)?iyZLNyZWu8o@m>rc`?*|-Rkjx-*SK2i
z3JVStX~kb2&rgllM;A8Q{I&7hahU8svu!>oq}evLaq15vy?OGYxk)rf?B6$98JI5p
z#7|@y3gA>$(c9+IvWP32Cd-+cVnd^j=4zXf-PaCV3%D8yQc~huwrcjEprMwM8laNG
zvjzq>{r%b2^B9wQjvyR0+o~_tJA+*7Xlr_|v(u{kSDZDpvVUK5p)!vFQT*V57?Vuk
z&kSByXXn;nT$SeyiiT!`OL2HO_cD`9Kyfh%5+*5|{Tf6pOj<mgnBDW5*@f}g;tqB!
z<$RefLozs21USQG4x49<x4-axzaWi>2Bgxz`b5SXLB>}9``g;#`C8Zhce#`V_8P}6
zG@<KN;nu4nj~xmTWj0fm_}t7w98$b8gPYsDiEg?l0XlNdryrsf-eGO_Y^G=!vK0u+
zcBH~Vn0n$74ep!W$WL+yZ-@*3GU=pndAmHe$9dBGJlr1odWmat@p8D9n@S2-%STCm
z4E#f{Qg0u&Je@FfpGCs?gYtFdlz)9kisggvzM*@K9!hY#Cl;21O1_x`a&x`ocH3OV
z-^E33h7ZyKx|r;x!~&jwH0XACX@DLlBhVXmlr(GFGJ%5<-{`h3UWN%O8J9z?L2koj
z-~h3=Gd6J%mLtQ<1J$YDsI!{W(uiR^pk*FQ6Q)1v2LV^gLo^ccR<hb`b!A0Q3j3zK
zNWCJUdHw2Yy3s=v9s<gnQp{{;hw>H=nEptzw#7_wqz871&dqpEHdpWc%><}p+LH$6
zI;^g$Nl@10Pk#LPP}y-HMC7!fQ8UcFHJJ_Cl3BgIX8l$M<E5avc2Lr@IWR*zt8bRO
z+~R`?K%|KrrtwdyeCR~e`{P~F;oX<}t~N`JoQ_-1)z#y`&~@9zdQ%Xnt1Jl4vI%H<
zp<Xj$msX6P-aPL)Nt#vskEQgj7aBdbi~R)Tik19B*K`rDCbRgI$>sZ0=x~2xYlULZ
zqR5cNXi)BI4L#+2{P5wkhDOMt6ryqH@b>B=u|L_blZd1dEvM>HIlN_rI+`u18P>**
z_euvs;+mFIA#OMYS%aQ_TBCA2G9|Z`R$l~g7-z=EX{>INXY?p85Hp9seA^S*Og!gX
z3%ed)B=YE+o47k^dK};P2qjTDjM7PED^158fB0Ff4(FZsW?j%=-7c?W^}(LNTw7ZM
zro`uUUcB7gaT;fpm29Z@kvS#w(Ihu1a2J%o?mZolrR_r5q(G@;i+60{bASDb-Seoo
zv+h*veXV)32nRCfCvOkW;MAbZ6CKK@czQDpCuOz=D|L;yvHewql2H6&1!CWZ_Ti)A
z11e-G8UF1I@0;5sbUP6-k);M$tuv8ni18Oko2v}DVO6oH*HIgrJ~8D7%l7L*6IF8=
zL2@*BcTX7S&J-(sBcY7WTt1hvfBrBW{CbV?90v!gCuz^DfCS5g-~bQGX4CB1IdxNG
zWBjXGMHR!*)TIk-;j!npYbUCxJKGuJ5yPN<efd%_cdt*oqRbv}`1gCdyUPrdD@G*9
zy&M;z&_Z=3cLmve3P+#y>+&!XUN)GH!b7Y9a%JkTUudG(8ux@bZ(-DgY`Nl0SAjZ9
zbvQe#0G`YYLf@AY{CF|ZsaBP*ltbOLgD{Ty!j@{OD~sD2a+vx_pM;gwkVl~MgX@C$
z?Ig~EJ|=z@_qzb&|6u_mOzIzbT?rqbS(TOuDbwMS*S9gos*!nIxd};s`bI|n{I{U5
zsgyv(vZ4yE9g76{AB!nqtnN?puDSG#kS@CUdtHm)q~hNZ452y|f8?gq*WW&#?2Rr3
z<g-k!w85m0)>1867v`cKkHSC0X?Y53Z%}u%z3_cTg}9aG9v&{6EVu<m8{L#tzeZLX
zKPzlQt@ohNY-ONtS@L=!tu{U{Zv8%j6OWF8k*8eu`ncS_tjub}u0Bv-ZK-#5r@d}q
za*LSowaZ#3w}yX{XjVuyo_4xc-G+ohM2?)UCm8v=0{iBlA5Rw`n_ISjl!PoD*E_sl
zopdl>|B?!Z_vmx}q<S`A^#^)e^7OV|!JU}cYE~96Kva;WzhCkh(||bz;>YX9DKm;q
z{Ey6XxZ&vmC+44)dZah}Y$sKGa}6MB9STR(l7WuWwfcs)*OjbmErO7EnB8V{Ad2Lt
zG>0mSuKZ90Wi5^Py=THiaGM0t&>>=LDdze%I}|64958_oex>A{jvmIRMIP_w^&wG)
z-0ZM0SF7c}$;lu=ovo8XUb-2GDK^Ar(2nPINOn7#E<5a7H^n^QmDJY&02IIbJ#kBz
zHxvnD&-r49K*Qhr7fr=jiMZxd%f#B+6$S_J<*%`Ziu7jJr4KM(G%D6zGZi!_JnG&(
zwc#Mar7rBxHAS^Xeu95Qv{Yj<0wkwLene!hZx2sjFdoNv%DXy6K<B=;z8c7v*1gWG
z(S;w32ewZO*S39Ve~)DqXl@@IfaTfD>zKc<n!snwRuojSS|f)3VBA8AXKZaK!Nei+
zDJrH#P`6NlGD9rvIUi~W1@!{^25rO73Mua5)A>6=eCV|o!q5K_x`b|&YvGXbpX@N_
zo^-!C-o|Y=@8Gd{iw`Sfy|fQb46b8L3^<t9ahmHIQV3DIoBOf6u|&c1KQ<V%D2Ck$
z*0;+9*u#fk-@l3F!Gvk#y**CA7}Nm;Gru-FqW`0D$tyslzYC`}y1SJgpQ(q_YJV0*
zdc08a;tsZCZVBLcBf{xVP0tV)n@IOw>4Z5B&L^rfQ&~Mu@yHta-wV7YK21?8&+;Ki
zux(tg;g(jX@uR;vxL<k-Hf`Pt^iT|ul&NzNar%+S@r?My_GLu4no|DYf36HcSVQB5
zLxMfKmD8Tua(qa1J;=b}yxoR$)FSzTKa|oI72ptv98)!hd!!n(4<^h%`w!7ki2H5-
zO~S+erDl2IPY7W)+JlQ;#m&<8QpbVdoF(Pm)6-9|e&3l~ULFaao5DS^V0zvU?d|^`
zS#b0F&hgCD4+;`vlH=Um=fpy7pTZXG!vx8oH25s3Az-LwWt>XWc}+4a+|w^dPR~T^
zUm~KX4gX=LZ9bd#qjbgmp;d-1!sFlRlZtXw*anf%LTKWU)L`J3@giaG<XR!KKiWEv
zuP0>BxBNdz=%(MdtK$wEyAo$Nr1q7jBRtv@x00tstF-JbT#@Su@{EJ!N54_AzI;P@
zQE6$X2Y5M4Lt&}_$vwKWZ^bD0GQdiyBV*lg?e+29HShczT<&^uN(SE?j8EK<bLF?Y
zp9OJWY_r}Ii1G@WM`muY@g1R{6qs!j3Az0~kDaypq#v?;l<<o9K<{z!n>ffi&M?U!
z;Q4<l2~$*2QkzK4zg1cuVR~p55qbYEE0YDz2Q{CffL3K%S>?@Ak-Ghnw1P^Z|G%q=
zobsw<NlKHidIkz+m~H2TC{k(2<NKuwlj9zGBG6!V&OL23&*IG%`RQMi+W#49>0HJ?
z?qyuy^Y!)n*j%x_y+|WSUa0`>>=a=j)SDHBYukDMMJDfcGSBl(c_%H3fD;rI$?|PS
z=><$Jq0i=_;dcs?=d4)U?{QSIhB?1Gd}b>la0>&_ilapNIZ@qu1ja`NKDVRN70f6Y
zJS`bn{QLSy4@`KtN4}`~spHi=VfjbClT*$-%`n<`JSoR_o_cVSa|kJzqCA2Hi?Ft1
z1{{qs@VaM0m94}#x>=zcH*C{ZZCJhseB1X5b2rDqD+F#nU)u_pq_{nPC!Md&If6r?
zaLhK+-~XG^1mT-V{Ql?)PEX<?%iz#Z-0Fb)?Hf<*ZB|Hn1!pqu={-)*&C3AQ%5(J8
zL>jKvHY!h%&$T+FH^ohrx`>|5&ji1~-|3i?`vh=|S|Y&pQ{9S!0TM-7IqEXPSS%Pc
z?}ryXi*t&szH0l)4!7$FJ@Tcn<Blv|=)+02)e#A}L+Q8#S4U{hZjj_<e-0(H2GPE}
zNqlVYd=XNA^bD5=`gUU}#u!I96|60#Muf)_sV|aIe>?2#;j#iA%oP=X5B2u)d0z(m
z$C^oM1ZMhkHNE*RNX0_S&h>%%#Ip0WU@6REe=@h2T=p>9z(AVZeq?)a@I&H=yrP|V
zJLq=(TV8MfM8@?&DnDzhJPBCrrl{t=5~@SBD0Kj522JwH&*#=v{b+Cy!rM(S{o>y^
zJ1IGz(<4hGD+8m0hz*Dn(u!PUbd0hBL`f-sGFMjRrL0PG?@%;XN?PaYy}w}I^AXPP
zuRDooR<dti&k-*?r;UaakF;+Q%fh-`d5DRbkQYreI?p*_RaShp0(Xrt`<Z4RKf7>!
z@uWl_Rc1^#WbP0PJd6*CDJSov55UKy7=pJ#qx&%NO}s@<61sdY96pK!r|h}FyPM0{
zm0FE%?90F}l}Q(IP9RA<EO#9xc>)%-W-WZlk6ygr?U=9Nl$~;=+Li&$9Ae5P2*0BH
z9Zp>I#KQ?8;J?Nma4CXVD?dX+Gb|n4+}x1-VRxfxAN)D~@05jm{@Pe_u2|cH_#lDZ
z(FvfiZxPyiyIFPrE2u%qsdTp!5fSmm#L%fQNvf%VeTRS8)$r<DqjEi7AmDcJuMV%y
z&!<CZWbXX0N?(ZO=Tl=UW1ZA)PehZ+a4hcY*PnOuRSHOXoKp2O0wFGTcCjCgH9%fY
zTa=YmrMK!SC54)OLgTb{d|XmgR8*juL~9I)Pr5ChV|f}fva-_?=k6c@*`F?oeeGZS
zzpF^R>g(;jW@uD62;J8g4)VFZFu#Z$1JcatnHj?r@h<RiQLb@LhDU54>MwyWU_y<R
z0m^zXED8}7-|PM)(#sM$>$Jodp@{Ct=W$!;dfd$GdYJn4SAz#^BQw)+dxW_Q!mxt=
zgK$&QPUJ_mhVg$d-2d#DwW#jDnXL%--|4w0%=_ODcLgVZ{zO&fE1OSbSAnjTt&`uV
zW(Q#)s3+6VAYrt>z`Sa7f{)TFqQ?8x3^RNsHjCBV<g4N>%@2l#>#>3c%gu}85hNxd
z-=BUzJ|X#8{`dJnekQ^_A2D_*J`p?pLDC4w0DzmOA7U|)&7e}CvRG>06c$!h?Scyg
zwbAr{6*@QC{E)4X<VN-pZZRv%D@pmxdI9<~7hIy#Twdc?>vpa>Q@m(CU0=2DeSgiO
ze=nkhUBLmA=N`AehB&+z{DZNnNqAiv-74@H5;cl-s;KGdLv4|>Ws(HU*Kjx<R@#I$
z$csA1(r&uL65MJoJMUf=6$MAjjF5UgLlAHbLcP4WAZFG}jf)cv!mv>*(E)6=V(s&T
zdDri8amIfc7aJQJ-~9L1Xd0K@zXIWqG)<YFxTIu%E4*L5lZ$D{KQrv(MP4FHO9BFd
zBM~pJ2O>`Xxlb%KYeM>{!1bHOuxE6hC8MXjEfh?2`uVfhd7q=wX0cwKwWmn4CW3@j
zR!7Hsawjr4I2cTeF;c_D#@;`C*f?3u0OLdemNr{vxZRCTbaO?{!NJJEm{Ze>{Dj#N
z6eh2ztX26<KM3QH!+ODKZ<64sTD3$+ig#-dy87VJV!z&9(L-+vqm~8}XW|9C2#2x`
z1w5~Rt~yDj?c$WgaXZ$hr>~`c5*EC#hyPCw0`AlQ@3xZix8sDBh3PX7Wy<ZvV@}l<
z^+N`2_W|KU#9?7X=tMjVJ=-_8==-r0FVXH36BDhzb}*NqX;xdY7b+Mo-c|u{kAzq8
zTiQC9bX3E^VZ80KKRvbB#Oj5@#8i^I6HCHd!<v}dmmgi==hvd->ATe3(?iDXUMq>q
zAgOd<2>5%H;$b+o4BGsQiw&-X0Pp+qg{#KQ{_5Z+M=rUx&P8t<I>%1((dbpwgdx>K
ztFJKVP2tGR)jMm35wdeweHCxm-h+DYj&B|e@g{IsmsQ)8+pT&^Hq=%+x!6<zJQ1+$
z{%0Q||K>A4b&T!rpSlPhCjorkTUfYQefQ2j;$UdkD0zp)Ox_`E*tVnlQYHcFF!T26
z?u7V8NkPGc>*2%m;i3M1ci5FS>`0r|Q^=O~Xf!i;sw?zwEde+^`n^%uot<y`1(72r
z$HvlHB!Ytl&y`EM#W;Ufg$)6EV~f`vwVvVJFaKJRXgU=z80qSCJxDI)*=J$l^>yr8
z@s8eH0gqZj4y!Nl;k~`RKwR9kImaK*3tDI{HNd5hhQ+Y^gUeiLY3cXxLjN-yLCJfi
zfW#QN{1AVCeuXO|Gc@{J{tDnhmSJIGwDo27>w($T)eG$Yf&TIwX`H<@w6x}yYHr8d
zJ-jRo42P3>td(bA3eLra6Zpl^2LOr!-pCObVf(K&34JUZjXzPcG7=AmQJe1^6agq}
zIafY4mLU%2dC%9_4hVDyG`!>pY2&4W9ogqpybRF2y*gZ9(Hr^i_7Ng~Ips&`<GJcb
z$c{FW(gM5$Y2LpFtjQ+l{cM1hARzc9zJ<^ED{f$*Xm{f3>IzHD^&K6-WMOA-^1P7*
z-4{X*i(Xl7uiFE@2)B7xs{#gE^RFEzz#?*Ca74GUP^qRk_ji&AS6k?aZwmGrHl5?G
zYoq7QpC9-*b)Z=}RYE*BSkgN@SFw$Qi#wdi-PJ9^VGT`u+A~*S_g-#_dM`IspjN{X
z<m>ym(I*)63^cBlm6SkL`=77W-;!@z+j{2ey7s0l0gr^uxc{9yc=sK_Hl+^j&n;()
zvqpsnVuo9&Ul>Cx^O~D&#ecoo+?r0)X}ZPn<8s<51qWYN0Af+5QcpN4-iL)+{fdl?
zhpB=Y&*YmATD2=r(ND{Wlrzh^z&SfdI*!L|v=w&z02=69YvYPq_uFl&9)Ah~1I0W&
z+xKTms;a60koTIDRH1}4szo-52ar1L*1LxoG`PU7@#zYQKHv6`cgipnp9w(4CnA^v
zZCj7Kt3?Rygjg6Mi`@zw(j$sFfqHOXUT~jzUmh5)Y)%lT4k`m71(1jJOGx#9k?8#r
zJka+=LgFV&7Q!Yz92_K7P}Q3y3u|R`Y|I|e^+6B{L?<d$KwH{r1y{i&<(te9cO7=3
zxEJ~#7BHIJE*LKA&#Jt=1=K0Y{2t!h!;20M<zP{ga63Gom+>37x3>pS<6NaVHsV`q
z>DbXUVP3J>7vi$*y}h~amwSL<m{uEDR1_A}lh|luwL3lZ02Up;$5omWkbo0D>?!=g
zbb-+jezqqA)+1@cK~4udViUVuKtX;0tupQVV_d1NHiH5FKyRhw73n#p085xGg}V7m
zb}DWHbE=o8=?ni1ds-z&dL?DkQia{6KTA4!mNzCs>J_Q7Gt=&$!F~U8Y1+>e^Tou3
zT4@}drT`<|T3=@cTd_XSG$<<-{cx_rcC%l_#3T%KCTQsC6K2+0kXVM4l$9YNAt9~m
zk&%)4`EE;_k!pkKw#)D!P9S3($Vf}4*WmE$qr4^|kx2o92VdG>qoeXr$E8z&udA!8
zV1Q9wj&R(I@GqmP1%o)aRZfV{#igVqcFb^&F2I_6wNz7D3z>96Ai-r(NISkB!tZB-
z11X&Uhn8<0&lcEpDH8k=-e$dCc?;%ff<hVe>C>{aO_rORSU-M*9nQ=BJ)NGG0SD%L
zDylBX`vo{;1o=idaSivahLKfwXn(ZPz>EY29Gp*zf97PXt-|F6`@7E2`9=JHOW~fS
z9iqEQ-`ZwJ>gNvHor?{yMz6c@rD;G7lS|QIWMmK(9nco<p;gLO_-?q_zlkQq@{D+w
zAkG${Bh12#1-yTseyOKpbTsy^5QUb{H$b24qw~0_R)=b52U;9rA|n5WoS_Mc%5T8+
z+%ZLJ<VTNP{rgXfpA9U&I(;6>7xj5X^q)IEKVxbES?M))67AkhNyHA){bhT)Pp_m@
zsta&0^Z9DbO=~Xkk}fco;?uv&7^lZ>{uO$IN0j<J)7XgWU6w_Gp)$xXX%Kh_QC{`|
zBe;O0n9ws+IJkcK$bpi^x2^E<&%EDdK|0#NVX(4H-p&lRj5PUwRz|r><rzH_%{ZK-
zkb`9XF9;V9tI3NQWxk72oQV7UpW8AnFxynq0ogSTd~hDYM@69OgcBkFN&6Q`S|>!T
z|7@(H^k`kTPu~$zpTEn=?E511FFqNIh-px8SB+|WDtN=g3C+=I+(hF$Nj|562OIVE
z+6(+=a6)mBukfWtdJRxs{(mnMi6qZx^si3G#r*gA&<KwDA*5=((g#1GBZUAHPI+%|
zPvE<MU$~^ti2v_jaPq6<;K$Dz-5)r3?`nt&rlypuD%pUj0_&c^sDDF2TK#8)+>85r
zQ7I*1ZEcla(H*71xQ5BeO#Qnn#^shEF%hvT=1CwYptWl&E&WL)HG}bHw8FayDjm1>
z@WQjAy@OKtbH{~KLEnIy2~d$Y#^`R!q@i@COGrvSp0Ir9zg}7r5RXWT<F`!z@q-Tm
zPClNwmj>>|XlH$Noha(k4Agnv>~>Ej0iQ`d0c^vOa?l0UsIy>ILOEJ+`{Ge<dW^M-
zAN=c=PO||x3L9ve+=uWq?l1RiAb_5<9}=BF%J2SX<_9L3yDhZwZZJ+tT74b7F_%LD
zk(8aKrXKKM>>wj&1usxO<b?Ru2z{UebfYwxLiL8|@t}xAXsP{nfm*XPH*YW83G5Sa
z%6e4@=(`LFF^<c7d#V{NoVJOwva*peF~g>9LkX@*nnV7l9kC8VGBTST9!ykJqRn9Z
z0-5Qc7MJDLb9#DKU)1{g>MJiVUAYoMrRlSOUVCpxmleEmzsjn-1+j#H-QhRj`DQ1Q
z7{OiNr6ME4y#Tbr{ey#Euc>_FFW3z*V(4Tu301OymxA_4t<Te#)mEDD`<=anQIU8l
zT>SXYj+{2o=-(%Puf1-6=~Vz@_qZk5SgwTebNs^0i<@&bh7U=H#Lx*yZtl)1CG||M
zv4Tv^SgAg?p@9M7(N_%(=t|o<Tjkz(wVAyOMFU65cFAl_hL~JNjcyCl1jg6->g=l1
z;?>DKRO@+|(ch1S=8Sgq$;mYd+;!HA)e+-GP^XG=8_^*%+2N#uoj2&jTrpR^Oo9yv
zAgNF1+lzPB;=MXOziS;%?~)<n<aImav$mW*=wjQv37uK=KpQKDwvOj-{s<^2FLxk)
zI6N2^T`pyTDe2ZbC8^e$of0-j*c~n4YBp3~oCcv0jMNYT7JWu^ZvIUAluqMLUxQ&|
z4*}fDu`0#@6P=P75Ec$gC$D`<V68Fxw2A0ybEJE`u&F$tdZa7{k{G3bQi)0q6ra*i
zC0Tw1C6|o%vdOOIi_szE{c;KGi?>%KcZ)oiMTMz7Ghv(4MR%24xSC+1MkBCS6?8sW
zkdtZ<C>m;-PX(;(iB3-pR5#dgi=U=#|8lzVc1augf(nCr{cxH(GF`?E#z(Na$HAG9
z%M5xJ)5YrhYYQPd`!hv3HG^dM1X!R56$|bTBbwv1b~rid^MH}^d+sy=VuHIAwq}ik
zfuoDFYmsJ-31Cy0nSGlq$=3m~sVNN1^x#6UkO%JKc@EJVfCHM9o$a#sab+bfijg6q
z$_4ZkmKE}Up)3S3Xu=vV??#KmDoRRpBXl~FZyGm>8Tb!PH$O0PgfE$xn3VCpBDtF{
z8=oprEwN$XI9w7vVfO)~9fs?5af+-AiVTpjQOlf;j>}_XVa@rRa7}UDoK^5LJ6(g%
z5|Ouo8Yel`-AGG|ui?5!E(HuF(5|s5B4kHLc=iKYy}#=AAltyfkZGK0u7dr3D9sAv
ziUY9z@EIS_q~(SDRcFhyD38Tc>A1X%@;{CD_?%xoR3F~e@(QUOE;R+cfA<c9Y&rsi
z+WO(~p{Fi_6#?#~C+*%~00K7q9iNX3{NKMNp0q}<NJu(1PWO`<5-lc61){NZbVg{r
z*0;1Z=A-F3X@T(2X}w!pMg|>hO%0Wjr4EE=0u$mdP;Q|$$6rt&b~Uo67ZGF#npGBz
zbhkbaDJVEl?D%r?j*p<?IC2WfthAYb7)}a8K)%?Sm`^g;KM3mIF752@9vhy}Q6SGv
zeJiNn{^1B(Ys|L%2^@Hmgf<HBxo@rxmKvM~roptUtHWuAc?>e1k503{m%Q9rv(|yw
z<|>?|)>bZMp~LlW=XjPQqjnujk6~SGY;1aZd%3Zr`5L4zgHfwd?2uLJ??&aed=m9j
zk$jbTa*uN01dA_Syrn7=F-Ij+Q_%-qx5Iktk>n<3cI(cXpDwsXyfwq)V!LZ8dzxTD
zv9p`^;sgfU`%#6ODn!i`#$lTbzmZeQolc0qt>E;BKr&-ukd`SXKUO=`1qB4qR+$m7
zTe)u^QTkfiEEjL?si4xZm>gVyg`|j+q100?ExY;Ac>79wC}Cc~eSD)1G+f0oZI4IO
zR8&>**i9Aar!UM68=RdJSY3DHSpT|T?nn=r;q2yWHy|C-9kVPnZQFtKrkS5eOIy>_
z$mlD(eVR&H1r4BQDsA3YVV9SGq!dTX#B0GV;Fz2JdPZUj_gxTe6CdAtf9*yXlKQiI
zY~3`4-(wfF<4<Pp2J^f;H<hJKd!{U_7kpMWSM(f@m)7%Ds+O;B73Mb9&qLDD{waMh
z1DL@`7@Kd&>9~q@Vp+IF3qwWd4bH;C50+}-W8zy!a^Jog9XC_vzT<IpC(~_v&&XKq
zv8_QsV1A{<=W`m^&S*6%$fU+^tMojjoz04y%YE>oX#VPKa}@*$I4TTyjPGYQ12GIi
z7{uY>;n_eSeUaMc2W|!!8sU<WwOH*s<Wq-}aCX;au_}${c1QIpMXwS;lFcmgN0Qki
z54}pg7Y$ZZtl9_a0uU1Pjv4353<cTq6x#3l9B=QYkA;s=3_|g)tR8;F12<$59S0-^
z`t0E&gk-zwFVfP40`9GX)w#8`wRLqbsVt@e*GwfXhQ@c_d~-ZerqX=z$1`HkdoG8^
z&}dYz$UZ2{8PQSHBsk>DqWv_aUbzc8UX@mJgHUMu#5u;)TQYw4&ocV!J*Ug*(qu6W
zABraW`i^i-e{!LumiFkcq?TF9S|EAeO{X-xg@Huqo`t668n4Xe>^!@ddKwRB<;BZT
z8t`nMjEjcoRsMLKjPf!vCgZ6$TQMF!`5`ZXBF=<s6;oqspY!+w1Cf%GU$%T}`{3X;
zIBOSjMOei(mv)eLC$j_}vfhLM2DxWK6a-SJSu=f#z3p<ubFpf;;)kr`^u}D}hR=C(
zYJd|h=h|?&+QB@A7vwea(0?gdi|2Bqda2%6!QYadkI8g+LrL)?alAl?7-v%F>a5#h
z(*ay0Tf855^zS=C$uOME+8~?s$1~OZa*s!@k^g+8V+rj8pG)aW9jEAF>RH0r5IQdb
zsz4>Rj25Uye4X0oD#oL7r>d0rKXikEXPoBkKTmp7w8<xxA&#c0=wmJIC5IuKRisDF
zWx){LyY2=qm4+_v*_ugcx83cViRGh3UPY?2y{UwnV?HA;{%<$aa%3^8T}5dQoIQ)L
zJT7`ueVb<4pP;7qP=wYLzcVSln=WmU12t~Nl@iXs;7CF22MM_2lecW4Z~C@o^^x1f
zbzkV;W;(ilz|sOd{NBOA4egk52rD;tfbG5~1}P7V%iyb!<P+KZtHXxqDk&|kXQJcQ
zg+sLN?cqt0Bl`M+p_v;acUrYnIB=~g{&Y-2Za4%4b>CLk3e-x<Y<J^h_Fi!oFaM7D
zL&&M0n4L|nl95|JTcH*~75Z1e{d(uJ0MNNy0NgdTkr$<+tQ;#y!F)21-en1`b_P2l
ziN#T2o@2O?L@Q5G^isoOFY?bHP*0#A3VMaiG<&-h4Rx|@b3}PR)Vr>0O$7x8P7pdQ
z(|yi;2$A9QzK75`S~XzLKg@35SfZjTX^g@SJ;Yutm^57-YRCSud-DC8q>U}Pu>Q+O
zVL8|4h%ZcrNO650ka_d0!)`9^X9JsMZL9$@xV!6iH{2x7!4ab@4n8$sg+;ZJWp_9J
zit6f>4|nIMz9AtfNJ#ZK*I#Q~usj^uNqpnkF9^T^gu1CFu&HK)_~?G_B53d80_e{l
zyD0Z&3S{<emkM{I09m%leShuX%fNU(8v3P9^F`LrI)Ish3OHh<0Q9{lC(rouJ+7=y
zJhoemcI$(&O>O7S=4TcEGU{StMl4iWYDd_R>>e)aj!=$lm%d@o?b*Qb(W$Ohg?x)W
zMzERl8w6!J8`?({`6EE=a^7EY*_0eU|8#MA2|HNy+8-WrIdnL3s{MAVSP)Y*Q>>l<
zflRE}>gknw^;9o<xF~SAdjJjo%vCWUkC;CG95c+x$;ui^X18CxH=nd)dz^W@2iUP_
z+p>D~zjCf907p$(!eXL0sHbt0h~q%-`6V8;?9hReQ@(U8v&Z(4u<5XtgZZXTLAVO@
z$eRPL2;#tryZ>PUr2GK2yAKTG1-5?TwsQ@k3|z2?LETaZ=mjDPFHCBaPe)`W@GFq>
zWW>*b<P>%!*bPZ^-mhWOs*D%7JHsWS-5MWkqjpVB=I2#vP;G(Fa6RDR(qFTJ25k);
z0*%AR#CRLv5DO#Y!+P~<vdN=oVW6DMr8Twe;uIN^v}Znfy2REMC>b7Z!|K0{ITrVP
z#8&E&h}s6_md~sHlKTNB-?Q7xVQtx}jRhRXvq{AF@9z>1Ici!QxAmo^3oE2pIXYV5
z`6($g>YYfwgx0zeNvGk({~5`?bS@Z5WLcW6Z98fbHyd#?H8<aSZf2v?a<|dvh=Rm_
zKUMjAL_dv!$y6w6lV}HSJhY$ImuQo}7Y$BGLKxJ23vuj*VopwIRaR`4OZV4(h9+Ak
zletx9ed&}v;gk6)p?gO2HHWDdYr)v>=k6iC<=h;WVxglyDoh@OeH+3_1w9U-Mf$>b
z9L)Ka#>UeH;@d!NtX2Da!ie*m9hsvec7DUbto`>To8|ftXuQort;gnG5#sq7@%Eqi
zSVnCwt%~e6Ky6xRK$n!36mT$0088vB5xX1n{QOBI4c;PCquHt$HOFA4P<?_nN*v^s
zM+?rSE)2qdV}{O_ePm=V`=Z3WAFh(xpDQaEO7<>rN4XyG3E9V3OjVvkpMY8mcD(q-
zxf6?$`gqQxbE@ictYf~;F%O=ZlG5*ymbbooxXEgNT2|`s;NvM}q(JjiPwVOWBU!G`
zcqbNXc0_~6Q<-K?Gmg$KU>Ec((4xV$lKG#}Kb=XXHhMQX{#B}!t)4JImHpn))+YA(
z^N$~I8Mr9FM%e>3Ol$khOaz|W&Dqc-ZAPBapwE6~U{k}4l#~=E8FzqJKU#q(st0WN
z5R+8Ee4=t_NE62UK$ypt(xF&oA={Rdks%teQoI<1#}H3z7wU;j0GDbM418BU!nIOz
zQGC)Ya!A8-+rqcf(oCQwKhmymc6$gstj_}+eeX5@YU`(xuf&4h28Vl9Wo6uQW~^*%
zu`G^aU(9y)q6;V}94rJUL&i%LIsobIqcH;@pvlU{c=XsxN}^1q_^UGm8WRP6em<g;
za(GCHs;cVR{)(ia8Q}diV%86k1-v%XL_s-|E>rNEufLo>2G#Q=M}Bs}3&LJMOt0rq
zCoHj^R3BrD^7W<Cp&*Og{QUlQvgdHumV7W&4hAEA@B!A0Gq#*joXj+sZ7P5L>K_<L
zsAPpBCnqV1$MwQeAV^dXekkbpEkdiHEQmDo=HUrjQbvw;*w6X7;QEsw8#wuRfIupv
ztsR!{HIXg7zcGDNH!_ld#p8P9bb1z0yjZVz3z`}aw^uo!tMn1JGnRxWEh%l(58o{1
zN^Th>0_0$^P;${%4r<Arot-Go`f?s$DaO!sD%ILWINuD5(`YP)b402+`K|s+1jr5?
z<RwH`G#r@s-Mix#CDKLiAmu4bFqVi9Za98@jyLKVg13weNAn6`8k-Pv!wJ;CjA(DT
zzK?r*dpEgXfqHrn=)7VREqp&83p5Q54$^$>Ga=<NTj?6WmywovLqn;Y!pb}v{hIB9
zAFfpp@jsvnuD>jNKNGMjuwU<S*;}xm8{e$4S*mwFr*4|9E};yHuq*%hCL#700c*Lv
ztT9&qI9O)8T>w-05BNe!MYi$+6%`fbww+g0RW%#LgKu~^LStY+kn=;Ja|9WGvLMik
z*Lka;$NiI*T*g|Ogy)lkQ(c^<1;9<1^s8_^vt{cg+UJA(P2Lag0Q{XAeYF?40{1&1
zD|!>Wb584pO8X9KcV73wTyo){e{_k>|3k(MB|o-eVPQ#(g#m=P+WdTe0-chQ692>3
z*#=k8fN-JghL<M>iZk#E(!s;pJpTcWp8p?=`0r2Oy!qloTd$v7FruHtQ{{27vzQ@X
z;)e{wXXrlNoyY-=f+boDplzq4OHQ7d7$4WDvFUojz{Up5J4A$q{bpxp{g5$TcgNLb
zWTN4}zmER>TfWX=HMv@oqP(I)(DPaz$N>KJE;c{w`v(O9*GkZlV99z5d@M>ac@f}f
z3dh|;B(<~_d=Y|Xe<P1gOaM{1E-*Ce;%aYik8LO7ajH$wG+mn6oiH`K4JT=+wwhDT
zRk2>Ebz5ou1o?KkcL{>KCy>>l!Cn7)BQV}rhDfCOD=f^?Z1QLOkAuQce5R=q%Z=kF
zU$6bc&8da4;MGaW8mlD(%f(7#RD5J!<SP%2R0T?L&fMiv1q4GW#{ypjq$Z!IWLmo0
zx!v(Temc4k+uMu02~08`5Q$rLhuR1Kpy1Gz&dyBHtDV!~e--q;uLUeyklT-Deh#Az
zRLU9tMaG%dY6Vb&jJ4Qm(UR(-`6At#WE6w!T-6VnWo{EO>4y>m$=?KbXKGrKibz!G
zaxJi4zi!95dxiV-0-;qmuQEB^0W>tE{xT{Y=uPG09^i0vD<paotE$G3k~-Gf;^N@!
z95;J4RFs#;QkX+0uU0$mKn8;*<VG>#wgyy~Xi8tOup$$?q_!a0UjvtU1yQ9!kzr)B
zyt5OWS*nK`%HsAGk=VT_-UnGl+5t<`h3b^sMKC4M_?FayHF__ech8-hLZYL+mK%2`
z8gv0fKg)NMAYiC5W1}4v6}3BKDAeLxbF}b5gEFGI`7z3L$?WYjxa;$Ni5us=L0Vy9
zgeBS=2rAG{NZ~U%+ne_(e+6hajC3KZ6UYPJ%OtkD;n~_|f5Br=e@Ca$K9o|T+eFIg
zvhYitm4t*Ocf8r~ZnzBr8HhLH;o)cyv!?ty1_vRGw%17OG$w)==H>(>q*lkUJf$4D
zM6Q6>0L3e>a6Gy4{%8YcXV51k^WQy3^4?<fSZPheAX%`oIskV#fNs^|ep&BzhXFXU
zh7QlD?zFWuT7XO+0QNHRv%km$BN;1at=ig_fuv1t|6n|eKETS1-gG3{(DZPzp#)H{
z!-zDU_NO~~wz(1HUlX!heDMJpm+M8Z!s_4j!ATq8mq3$~{Z6aNVW_*iUj5tzShXAF
z0F+I@?F=I0;pXPLzqB|o5DM1fq4iv6$m`{1L?tf2=0`}eT1)eGn59a=-isy~aAbB5
z75QamcHY4rLGy%hxCq#v&vuT-Q_zCW0xJFohf3Fjivon1iT831PA=PwQjVb7l#t@)
z<*rc5ow8Z^{z(;2CR-*>EVKf9Vq#)@L~})Nd*xvAY@zP_ptITQmPEiQHoLUuCjy)h
z79{E{6thMP7#Ld~j>l^}#wF^!%n8CI`sCcmQ3M4CI7d~P$I-gu_Epl$mU_D9$jCL8
z6UndH?DsbECURssZDK1t$jQkw#KY45bTvuUaF*y+#N}y7VKWRBE%4Oxdtb!bA~!ZQ
z-d!A7PIShol9G@N9lgdiT|gtz<}GVV&O4KsFE=-sC@?)fDV5Luov&I1EsG+;9fjyr
zxF2rGBs940kF_kr`Q9-bTz|2di9TKyPK>YmA}I+i^<D?7<a`dhq$k1ywr8ks!fkT#
zmB*$oLeA#y>S$k34=&(0a1P6bkg>aGmf2^droMGK0vlJe%1Wl|p(ufKj#iYby}{)u
z-A9IQ8PJER!&A(xjfM9CGn^U$?kRa3#qQ0UH&(Ny;S^P#6QMpOC}eb5FFNYX(oO`s
zm~tPcr>YR5_1C>|6@Yn>R;5{4b@lL1tPa2=x8I+(cHwDw;V~B#8~Y_-ArL*`;2>T@
zU0u7*!TEBJ9c>%t)%jBa=lSk@O+-=A;l*x+85YNt{pDU2aLSp$T^Y{`-G#Z&mSSBL
z^uyt3wmd%MtCfi5U~2~{9flMio{z{8&=47CPsBDGG~HboNVbDUDG4#j!QtW2Qj@r)
ziNiBuJh?{4e3=Vl31Dh6Up!QiGm^_rO+^&|HJv3TF4AaNXmkrTK(}4GR%DKhkKUPY
zYtZN)X&MoIo397-1Nj973N&Y$;UztCq?WU}t09~8&E5~y$F0o-tT`o`6<1>&;@#BU
z`f2*08A>ob6Zee8<?5<Z8DzP<#uvRTpjO0ZOe(Q8+SqkV(thg4Em$)!j35=PH`=AJ
zsLFWA3_i8Dhv;`?qkG-rl}-KY$4K0Cxkez>XaUfuIxBkW)_Fhos@7yGe#}rzB`;mH
z3qD#2jGMC=EhWdbK5f}^0M=|)Z@*LPG;EoV&tBwj<Hmo%zXB|Qde6((0k6d(2oqvs
zMX<%gh-EHE=w}!s(j^SL%UE#m5GA`K5=NUmYLrZ6^YZh;iFlJ;|9(~eU}9vXXmHxz
z6)e#QZkmkU;&~U$(WerCbN9zWFVSBrC=C&4griJEy_W@aYxk)=m1nRvX#L9?_;u)%
zB|71ozW)Ak#lAjTx5Jl3rqD?OKP2=<r_J;~>FGTSZk|2jD~wHEch&ZWN=vloc!N3g
zh?4SD_Y*nay^ya!>Jd3DO;+?mJQm6)o5E9JH}>r1%V7Qnn2C|ec=BMvahc_ejmB^I
z?>^EJOX=-b4^n^tAV`F(2XyZsSTC3AQ-W^tJ5RZ@?U5AF|4X@Z0a6DF3JOm*FeWh&
zt&cz#BnSTp6{n}CXJ==3S0uTbHN(I#Ohi-^bogiTRfv4|bI9gEkF_)m^TP7(!hCp^
zcv9!^_;>_;8nitbv}$9Ao*o}OfPyeh7@3}i=Ihs3aS;(n-|vtUn1ZV6QiIQNh%r44
z2mY&9qb0UJL?CBY%Guf7J=?s$*qt~traxM47-<Gh6_=T`QL{_fT_T6?ACDgrz@TdY
zNUpSB?sM)m7#dgrJz)Ty=OmAjjZJoX`e*&0z$?l7UFZIus@mpcE*l#gO=>9!q~v~q
z%7EfDSj$qRQFl`8cAV_h;Ck5X@r1FAN5=OpH#Il*Rf^r?z1w_t_1@l|vR7LDaPC+J
zko3@Y1f1hzlJR%CtPnEWwQfrNEsXzKSLu+}odSB&ijBhJ;t8zZPDUh0dLp<fu`x+F
zAl@|Y7YE)~g9O!z-&XGtp~9k~qEHd!84Qpu=IgeQ%H+H?2_p;yO(q-_H=358mL6&x
zpKvS0buisb!%~>Tw*vkBUF@voPBG#sU{O{A^o0r)CONVsw5!KY<dpnPPv5;EN8?%N
z!Rzmr8ojd$(+P>Ng;!tan<{p+)}fl>;^Ni@jDbNP*4EaEnp;lfacpjXyp)jX^o@<4
z+lGHWd@q+Wxn?%gOv0;*h+p-p(rWcHSzFWpBkr%GvRuFLUlapT6cOoE5tNWF0Rcq;
z=>};5>Fy2*k(Tb37La`DknZm84(Vo3)_1Kv&hMNv_P_i6V~w#G2)xhxJoi2Cd0p3M
zW^-;^`q(R1JCf_Xl6ASN_X;qaJhXU(79mH|Nn<`nlF`sng)ZZot56kAj1h~Ij%xJP
z!5r55C9%#-zb=LDP(jgGIir&0rOhwd#;EnNdb6ZFTW?|aY;dtCAq-QHP?0~OT6vgE
zmsdIe{QdOTf4zXs(_3B-f8R=xx-&+e)yKwa;5akmd<U%J<fHEHZg=;emwv8GzFDE&
z!}r~*nTUs{2K;CYydlBCQp?Zi(H)X_30OP4rD6Ax+6X7bg2HEm#uF>nxF_+QYD{AL
zPc>h*L|5c`Z;t*!NldY6hi^;|@3IvZTHHr9Ez%#f?jl0>abH<mV?-kNaD(CVG)du@
zDR=ny!?RqCln|+Dk4tJE*JpNi#Lf3s8=;g~e;lP?qTzjql14_vX}<yRv23|q#RA(_
z-(@-+i#hwgzCM3H{{(Kk(}wo;3C87$&&KLvn<i6J;xw;l>};HeHll2{CewsQ{+!%T
zxZ(~l5yo8}wa{LiA{~^Z*q_<kPyn-Fc;2TbF)UnM9qKrsk_=SKL&VpbgJs_F_}Kfg
z(Rgtx5=#B*{8-wiNq&2G0+0M~P8XVcL3^KlM$#`n3!S|toc*y19h2j{X=;#&k$mzx
z+UWqy^NfxvBi?qh)GE#dhmSG(lah1~bZWoy<^={tTq(Sj82F|^WO$D^4^eGW<K-ds
zn_pf$kkb-bjrahl_@{SxP;Mvjipq;0^*0CJMDP|5L4cV`wrB(aUYYs!w=t1y)Ae<|
z3`YeruBzp>-c(g!%rR)u%hoh+V>xj={7QOL=KC~kBY#lqrmH0>vTC`K#O+sRo*fo)
zj<EMFf!oOrHe(so_4Re9%Y%^{+(k?qk@f>qf~ltF=0ZsU^vI0-0eE~B?>cEVLV+Ji
z)zZ#6#<o6fQroY_Hh8m^CzZ^>R02t3eW(-E&GpF&fOb^uJ>lQSSUzMgX_fy73_+C=
zL%~Zsin-bsrSdFMM2{Z_PrMl*jT@euND$kaGYovUrGyc5^`5s_f3Vzov+eQ%g@oJD
z_Wbys&o)HE9=#{zy$3m%!`bIvD}7FbZG$owubnrJPt>4cvpPV|!s7p!gM(wfDNrj$
zOQ<KTT|Tp~)%pEoh4pBaf%u0HKcl0wQd42`rE_wO2M9#4w!)`RvFsMC3=Ekz+wmK2
zGU_>sIRvubGKP2^toE8Zm%G&n_9o;ySy2|J=KP}iE3DU}hc6|#{Nz67--9*9o{$7X
z(zEa}s!$(Ycg%3!_Cy)5MPE<x6*05a+qvb;#$s&fnn5L)wM!ZceQ*1=-{+)#j0JWF
zEs5G!4mR7pjc<@k1^h`G*&<L0P`3(KJv^S2;id<Baue`<v3*%>e?mq2CiaXKtdusf
zT~xAJ9^Wq2@Fc}@sAS2=8Zxb;V`D}5q^zx3D<r8_b?dH#IpVF%@4ZnjnrRXxjI6vj
zfg&VPU)y*eS5s3%vAk#@r*5hErHtdz+N43-Kx-xSk;8KHLN=U8!PCXY#HKmj_jh$P
z1((H2S06Rw0oLJNwQ764-Jg^O!@uI_8J4>&wX_!bgmFX@*e}3)_1^12h0~E7jN8CN
zI*th4!6W+i?T*9YhS10F>39O%7q4;XRPB#<f*3UUEgVEbNl<lQf2p?p>*gff=$)6B
zx8vJSB2~AyGOWu#@eCWktJ7bGQ8bc%YoT=>4ph$IkxEf^C%J+3WKcWTUN!2q9_e^#
zotTKAU<xASg?Od;rn&d<LpareiL6*>+gN`l8CRAddW@yY{DiT7wPAm!?v{|QfkFRt
zleT}RRpZsgS(7#oHSN^Y)PPiT!05Y8dR5h_31`{Hce41|FXYBcjMMee8l?}nCrykD
z+Pn0}b2rPa2-gPl1peYq@#zm`;bUN!tuN6C@f`iNYdyh8#LIxvCw|fazbo&?=9;FX
z(G4V_<^;ML)S@rF8tFJ<z7elD%+ARMCn96hcUxb+e3_3>#KR*vuKs(lx0g~r4SSh6
zoocpq4v79JM;2}Ge8L_Oa>OQIF$Zbf*!U3+C!82gj=$W&Lx1{qcT?N37L&j#fQ#4F
zIc9Ed4%?(ocWf$}N`*ZQ4b98B_vBb%S)3)?iQWth3^0^POXz#8Q)11-hlc~arqE|C
zsj>OmVIZFIaK^4Pq)Nrp?P16Zk-70leEPZ^(+ywUQQ|o4))rc&1&QF`A|x!D4LVe<
z3e5mUnybuUmaP0QWjIKzj>kSblzXN2?#T}~f|8PwqCGrf^qD6zyY7BN8S1t>GtQ^)
zS`F|deT+AzT|Up$-q`qz@A5WVjyCX#Loay`C>8KfwGh_R{wOQ6>x^d6?uaaQzG#xo
z9@-c`y4rLEIGvfrx+Rn@iHUUG@r#y!@`8_uzacdaAk>~@-G4~%Mk3t(@qUT;G`9$4
zDPUvcRHVUFwS|@Ct~&F8PY$6v39^gAr^v$oMRtfSEtiC$;d6XY5bW)(#;>x6Ry;yY
zZBH%ASMSozPG;3`Yh<EvG}XH}EJg{%+J2oi=Lxs%NA-u*=a!*zIjVx#lv(#^)T#j}
zgglOIFq?b=q~V|5Vx6(1&r|$%t91Z5?XxW&u69xZG0nihZYWt`S#An=!fA0T;$t9D
z4wG$Yq7jMI3;KgulKF!vO5N5*W2@%8NRA+O4x1=n%Z|9qaz={9nMw%S#-Yqon732E
zCYv1>r)X`l&H82K^VGNzMH`RtpHfvWdln1bYJ=u3{}{IXD)cn5m;&d?JJE3N$;i1V
zyvgoT=V-G1@}YIWR@`K!Wjoi1a_>ShdeQRG&=6Me%+%l?a#L}*op~G=zE5$T6&X!h
zZ$#$PSa2!9<L>~{=yFU(dU}QN#Tbkd8)vinT~crl4Q=wbo|7ti3e6vkv=jjrk0>T>
zNX*Zztd!a>uF26T_18R&)4S>5ce8d{^k?Wd+_Wd_;O%K|Ym@lxex!<RY^iyEoG+sO
znw=dQ)&}!UR*wCE7XIkj|Mivwko$%zY^GHztbYfZUz3L$yhG@eUuWm#iDM|E2cB5k
z@vCbJ2%wxMRa&hdZjQ52QuSubKd}z#j6q1;oj+K|-4La<SnjGYn_q$>0=`&trD#k^
z4>ksi0y+V6qQg;qp-%V4*kBxKTYq}D?aou39V&qMfgc;lQQlvD=>F*%n;y}<*}Ko0
zo6}iKx1aMR!Q)RTvp#Y17&^<?-I}|_-1(Y;e}zOuG|Y{g!ohZSiPL@ICVF214_pq=
zd>8uo@wfb>jE5v;h>I!s!UKdJRTGA!q@)0z<kgO`R+cZgste~ucf>ltJRFxGM@y&1
zp7-c&(7g$-^TpzqP+>sepbWjY2`xr<ZU>|Ob}kL{njil9VPk=Ncy}+Es=T1!@lmxE
z62;Z+aJ5Qw|G9tjBN&ub%P$uL%zh~rYXhzTT0gO@MyPwul4g820(dWe6=u*U-a$EZ
zYa1W0fX)daTds}iZ=L17Kr2ABs=CMX@_8VE+g#?uUDLOt(XX8~x>dOd@!0@tkD7A(
z77;mn3&oSI`OkoY<un-b15nrYXd%L8TUFZSN%Tr!lBo$sG9ea^@nDvJW~LzAK@^4}
zPrm+XU0S-bDT|o>49!HiSn5nV-LH7H2$2$RhiSM%@0h*ZW_#<MJ3#S*`{j*xX1>DA
zC3Pw+_*hsB<Nzk_JdnW<9Q+vAiR||K^yS6>Am?{963TBPNqiGx1Dm4;QM!1-YnMxn
z97UE+7p|vS8o*-U0Y>Hj==9LTl+8qWjVH#8kk2E58vmcy+tp*t8(^XQ=jAFT`v*Po
zrmH!544CgSY$dK;eHh^Cs+|_``2YCI|ARO0e?RE|$FleT-k0MkZXsz=y?V6)GtSkj
z9b3D)w1s%D>6i&>;QEjzgOjA!LlPlDK@3J0i5^^@hb}HIvk{M1fG`Lv@@F9hUELMv
z8)$dOLL%fyr-VWR<1)(j=&;@^5VqJy+L>pNyMe3+rNIf2KF0~1Pw|m5bS0e4E~LRK
zO6sWh>C5(X4agN5mjgA7NLZNA_}6+tOKZIHV^*wFu_KNNQ7jzOMO@){cIZzToGqVw
z`eskPAO6(Mg&}qZ2Fc?_wVMB7$S<}w#~0h>ZX+Y#E8FP6XR5GX1sToc)IeQ(G{vDC
zU}hpg%4LpLi@RYbGDbkjw%(kO?TFrYb-o37I0IdMN{SZTQoaI{?P^k&WJj#o1aBMQ
znXfKyE_U8E6S3YH;bU=5`?YA1!L`)IV|IS~77{i}8y)wR%!%yn$}16aUnPQY5{|0r
zDyQc2%RFW002-v7YfEUyE2V;0oSf^I^$x?iY7RRq)pFQ5kb7a`Ge6xQ1znS#?_i-d
zBt;+~U+=!K@OHW?6ta(<|8hH>y|G&YAj9ZE%y71RHml{1MA}DwKcX$W`REMY_!?pL
zq$D`V(3;Pa)Msi)g-lkS?CB~&Ljc)0=$A_2)_Me;2>Vl0llyO8K-TC}zCN<_kO%t!
zl7wX9`JDSMwF~^!*tpvabUe*CNXLn}_aw9-VDj16_yrxExZY`n+ZeJOP5S=qd#?(s
z&92Vy=;*Nm&-P6v#I0Mmh&PC)s-4&puM%H`4?%BGy+TVWr5|Rcl^BomTY&v=B=vmy
zY)?ybbEMjRtXcQe!weI8{<>`isqL9V2NTU+I5k##I7X>_dpHw!nDx!pCh`kCqZ%Q!
zaq||>@|E|%fXo@%inzgDG_+Ji(WD*8UWRvf@08hKo9zC(5kr}Jr7C@YUyJOe05O!q
zC$a2KOIs=qpbTwA&DQh(w$nv>F5s7ZVQFnX1t-8_dnkAOxn3QL66=}?S?UhY_NBI0
zIUFQ~BOuZP4SXr#r#3o=TchL9)R>w~5f^g!L%TASO1+Jf=b)PIPJ|I;k#end<;6Rd
z7)_Fpkcc&VSUW%?*2(@TRl!21d-AvQa~se4Zx4B__g`1UgXFM1jYv53zj$TmWX<io
zeGXA0L`gxC%R}Qc9d4yrk|%Oon!)3afhUA)hRGjPmqCDd4L*#-KuxXQpDs0D14+0w
z(w8rxZS9;qS)!*QtTS^h9UDr&6jv#*rL-~Xc8Z6Sly5-5(xe^7jg`or8|m{F3p*H7
zIe-98wCcN&<RYr*5!bSH;(mrcR;<@;a~mm9B=P(-qCM|iIOOJ46s>CIKyNW-3_B&I
z_lv$7tg~=y@52Pq>2kY}A@Rl=P92cfDZsSYrokm%9%a%&BW8Sa^l-YyW*WwxRUJE4
z{?`kTo^Jw@F=d;|VB%NzGCQ~fI5fu|uo6S`M=L7FN*eLdcw&ohLNoqs<mTHlHzbs|
zQF{F)om(mu-LdTLQ>WCR7v<!LdZ$@igHCXG;MA_2lJ!jX>{ZSyaJpySDbyL>y1Y0O
zi(%+I@~10KlDrdWM*^BviKr2q@sv!Nxt4V%czw(ZX)dhl%3yS-ra&MX!5h=fa+bgM
z?#WQXl+caQY#lJ<!a={NR8Lddn%a;Wb8#AB;}WRKWwSL!u2!}S>i}w{F#9X!56a5Q
zfDRj?*P8?4Q{H`?E>K1|WG9DyskSdEROug_SS$+!kd%F%Jy${)Pggkv<^-mZy=?w)
z^=n2fmfrhvYpl?sZGckdAW7KR;=Zp!p-yi@rxL66=2F*!%)4Z{Jmtx(u=cc0LUJ-P
zKYzl%Q$!A@1A5fd)Kg9=;^ofu96~+K2{oU&w{c=PS@INf)_k<su`N$qX4R9p91bL;
zq>?pxrJKa@cpSvK(pD4y%FRP&3uK#-gExPj=Qc0CK#|%-6SsG=;kabiu{~HZyv9O}
z84}DNNE8BruPeFIX0Ncb$b}{qrGM_bEU4U>85zeawWMKlY!1LbgLdOYLeQE^z1PE(
zkno4v71l;T4S@2;u5GBHDf-eZv$`wSpQ_;W&MA~3m7F!&2hqN`wEhH4`csa92E%Wr
z&#E-j0e$R`$I2_H5Ow)(^+~&C0E(<>nF9<TS%RZ@ATisw8?FW4cGuNF!KM`TIMHEb
zVX?cqbb9+1Y4OPJ&`%DI{>0XQVf@BGj#A8Htlmg^=U_OAfAe2Qd$2F?;K>P0MVN4C
zuaNh}p@qJkmvu}R|I{j0KvLv)fB%D|=O_?xEOZ=2W!0{e|JhfgsqFZMJmZ{z&Ds&<
z`#vq<JLtr`*^7r2>bR{=hBp$G>!f9n+C+{>CNmWa^&6@5H4*w6i(6BkRCdfNN)<j)
zWutKP0*zPL1O%x+Lk~t$%dOY-HS~GCx9g_qV!O+JLgO++I-)0mV<HS1v|d>lv4(Za
z?DFw4ye6ZSVY!NgF)V2a7K6c`cOFqK=_y&Q52D=<{EUl!|Gv)f+mlRLe<iO^rM9!J
zm@hMDmbdQtu3aC1t`(MDKmtZZ8!Hx>CclAbW%AG&AtJZEwUr@ujc$-0?uD16q`Wz*
zVD+^$wM<-v!J=u_zb8;$(m(x?C0fkhrS?XE<+I|C$@izRaIYAaKqsc}hI&7=r3l~X
zepFVDg^ABKHCO54H{eUNDmr0QiW(Zp8w3=ch{iG!3+3?&Nzu?~Gr2qka%yT}Og-PC
z<^AE>TGv+GV&Yz}WETmc<%7}DvdUBRjp-7jF0r8;`R>uo#d#QyN<@sGL`g-pLmXl&
zcHzf&g$mApN8bf*7xNUKgPCXU6um8_7{&eZubs`IyWp4*q`wJ)y7(GXZlj1UW)6lD
z!!h2VfThkDnn=V9lquGS)|SQ+6^qbdwv`t{^8>!>r(%2LGr`q2KdpHWtM{4GyCqnh
zmVU*u7Jc(4xPyYS4QWt^w*ckW7^wYz!_^#V5qGaULapqI#q(Sz7@Womg-a=3fd>Z%
zPq=oIO*`^anxRpti-}bUp#s8se6F^^&aj*0p{%S74^dCeKTkUco{%^?v==*1ep6yI
z+2s5!evPByfh?+69D8bdy6~!Eu|6@EIUKu}H{$Pqz$l0AT%NtEx;!~KrJ#VT%?{RB
z(GG07mv3%^592{Gmeu-{zmI8_isbXw7L1hB!*x#M^H1NThewOl=OH7TAvn7gR{=J>
zWm>Jz$A!!}(&?-$iHpVNkoc`B7*ywUk$TP#BS%45%IJ)Z<14PJt?icCdsKR-O&t4S
zR#|~b=7(juM%&cXw3Cw)e`2NpBLaPmNsp}HP}`#|Vo`+(ZQ>XjZrXrcL$DRVMlUoD
z_%xk#X(jw4%)e`MQ+7js3P)QL#d`X}2bx*Ls1t%JDk{d&`Z7=}4(Cm;jP!2yHMS3E
zq`~uf*FX9Rbf>PRI-O;leacAQEX86fM0MD(PP#tMv{YKn+9&vgv!oGSFf-;p_RP%t
zumh+fCJ>gF`|HyYbb<8Cf%lgC+_bc{50C$9vUZ-~XSQ}t{P9zgPT%{|I+u#2niNf~
z@=UqfGU_IgYG74HYbY;CC3U(SC&!JB4wrZ&nS<ra=TdQf<Lxog?IQ^Bgf}ObTpksP
zx$(5OkQQ&X(Jev0#r(<u^{RVdAeS=i6_>qrI!r@YxQBH+370TJovG&FU~{7EIa^J!
z73S8bfl7z=u__02WUUh8@nFvVdMSw?JZ5tXC@xn(7p8F2G&Jm3*qr3#adP4^P9#f^
zxQi4jUdo4@=qITeRONm#m+A|KKp|O=hK5+$l&&tZ{QP{nc%JmN0O)<0oU{>3zRKf}
zRvis~Z4e$IpK;#)Bk6qxR<{9KtDs=fD>eD<i7#KY?mQsc89D2XLF8qM@uR&q>~!BO
zZl4S<33zA}z-_4gVtg>fW*OP>2jrDEMk|!~`L#Q<SaMVp3!S9*1RTaoRFuk#(wHxd
zrjv-JKeo2A6GwVJxyzLIcW3W(qs(G=sE>l?H%jqN%9eC#-Ch&RmM_(4+1_1?%e#g0
zf-oGUk8uKF7~MIV>ogAAUT;`!SbGHJ$h)iWmG{%q7AA;A<pr)x=H%Ici}L04?!-KQ
ze*Cp39!Wwq>7SZo?wkpxSaJV#ehex)7S=$^$Vgw?E=*X0&Kgd5IIIdqCNj}G#xg>R
z(M}TCZxe3u5E2mlQmYAaup!H1GjUXjRq0CLR4XfR1WhLG4Tj@a6fzbTKDYEe&8=K&
zB#EvtA@ql*PV7Lig<#>a4^Fi6)#WYJ#kJMdv5`;nFK=CH4GeMV&3(zbV|KPEm2!J9
zH#j6@Vd2Z-!a_8QMI~_K!Mw0)9z=QXdWp_%#_6IdRr(o@Q|;S5y*HeEKH#HaxLaty
zwz<fM9W-IXW$KU5lqGN!uNwG7nm83KvICJkjt%rBK?%{W8HaDD?e(#fYKo{zeCY<=
zZ*e;n6c^7bVG}37qSWW>%yxQ2XbP>1%>Fb+<fQO=;&B^$2RrFv@4Wf9U%8#ni>&Tn
znDl%64T0oHgVE_cU&8mJ8y?VvM^%<pP2jQ-11j%`Hb>ju)V330*CrLOF<&At%jx3c
z<hae|*u|UmmD`VwKi)j`gS~2@+G+2U<)R%FUncfVlO>rtC(|oPI3eV7R9g|B{i9hj
z6wkLdl@2SDU$-pRA~jW0rmhcWKYs??iyww!)u^;cp_mjk63+L?&UvH(RMptn7(l`<
zG<&D~({G4po6T#V4y&6`CVv;)<S3@3S2x-#6rWp{&(mw(9oy<qVAACR53y?b7kr11
z=YZg%C1BC5-4rac>E>o7eV&*2h=@q!ihm>h?DSyy^|Z`_(PV*t#q##WIUZ7mgitC<
zGo%x>yW<_aF};?O)qViME)b7FA2PE05q&r3e<5An&3Y?Atb18`a($Q-76vz<N!>Xz
zKbl`@6=^2Ja?=5!%&7iw^-MUC%H-Pi^qKS-KX=ZBjF;|Yd04Y@AXs@MOW<s&s5C0E
z+NGd;G(JoxlbM|LfQ?6%h2kpN)A!cRn-J?g+MHxFT)8{-jKn<UG&Zhka&3@ZMTwBv
z@NI(DWhF9<INH}z%Xicg7#1@;`xF>I2`5EP>;2MYmhOBIrrAz+lezK>i{WH^+vw=*
z=m(SyVPUem<zlkL`X}i=VyZPHmPF8MLwxz$2Rww4u3X+^w9ZKG5Q0uaL!(R$Hisdi
zt<Q$`_Vy-ImFkF3(;3|3PdFJF&FfG7H8k8b8|(ln&(3B%LWGAG`QyiL^G2#M6fphF
zBK}bAL}JygN~gnUl=MZ&`f_pQRg}J7?s`Ai19(0X4%_egU*R$+m1zLM3B?*GowA@4
zdP_iKGd~hZi}ciFYHsum2a7U<i<OE#OY-x-u!*x=e0#Npb&zQBxn(BFV%e4+9>T<P
z-V^d4J69rDD6q(}+s^!8S^h?VDc$cXe&ZSnQE1SX3;U_nuo&u*ZSOtn$-UFeko4Wv
z!9Pv$AfY**kC;_wqbFx(Vvyi;Imb$;i%F08a`i*mCE&Ro-l_DQloamhxuY$erzt^Z
z&!GbZLWLxfFLz6ptif&T*K=GYND{fBLay$_C^5w1G3&s0$NIcASuxxh6A$+bvnM6l
zsV8*OG1Cgwf}BovJ+mfHz9ddF)~InioqkwEmHsGGbo`9ufu&i6o;&E3!?cqk1W|`8
z;Y>>>X`NR*fBY3cXM7nP?4LiQx;M~RW%1#Ihn?pAEaRn+PR(ks_*`09IbGkqH%r~o
zOui~*M$%yITw@<$-{mT_*s3f$Jw1i3Jeq)Qs%E=(%*wzVeY(*rdODLKLEl-1XS~vi
zNtPB4*Whg6a@;Wm_N8Iq&^^qT`&<3%e?0Gl6~JbDP0Wbfkvi!;gF)8@cDr1U+va!)
z8w0~uZy^e&Q*G@fC@eAb&KjzmJ=IQ}(6CY0AFQ<A9wWxbU~v9p`;F;SRe=wxjmUA`
z`#WHA=%~)TCF{*$sk=SbXTBDym%BNMg|&e801Y{pCZW4aXXW=Zl?uyLsu?)k5C2k0
zO%9eu$1$gVr5+%tjz-LCIqSw(wA>y+o51QsRjjkrC0(fPFPkk-!fn~`r^Ebh%?;7b
z4gNs<&NyMwAWNz~zJOYLaID{7x!Yg!O6AVSk3xN!UD}`;EVao}KiuN^tY<tp&=jE9
z&F|OnUj0Vf^H4R4n%j>r6IzFIDH}OQxCyY55|4cWK~h5a)XZv=UUw%^5Hr1pdttvl
zk}Kp7+lfhezQQ~>N;>1XBAmGI<2DKn3=GDMF{k$VXpk52l{6%M?;FsQhTPUf0be^O
z!q@_x6FFzd=+hD0DpcRb5SwqW+OU3gtAzh0QM!ZFh8aYvoPgUhekM3weQ~rgs@2tR
zjj&kG4WpI^)4hO#0y_uCSW}bn9}lxzclPN9q5-<j{9~_Ujar^oE?dq&4iAVle-&|Y
zajgxXJxN&p`P*P=ZQKTlF9MxtBu4%lbf(0_t`Is>*b`Gz#&vFXCzfFg<MpsS!{+yQ
zbA0$gsBj&|y)pf;`^7CxHJ|6lkmcuZC;tE$G7>yE+ZneXyo_C*o6v9hon%}?&~*QU
zKP%K%RP=;S>y&N$gLkWM#t`&moOp5?l5LYnIisPW&1S!L%!UymNp#%XsCxYy%c+5a
zR=$_FPM1k;1ZejLB^fwZi!~O#cJin+R(%bYzoE{UJmreuE3PTeMh8PZlog757R=@@
zhZ8F(UeUK(x#j-r1$dheS9(sPO7}2OV#T~D*;{gW&1&%g9bH~pntF$xpN|iY0!!RR
zs2{vS<>D(YLL~5?k(1NBl>g2ug7ozNZjra4T$}mxDzOd|D4&4S5voiuNz;2?N{-0g
zR)t`qCh5);Io0IC;^JNnmq5!N4iYNa@AEmdr{?{R-i8m2-OkI>Ggeksdep?b2?3z0
zAt0}vj@1S-n24xowd097Z~!r$f6K>&s1Sb==JS+O!{eFWlx9LU<F)A;wN@N-$8Qgb
z`|?u^^!3-)hfQ#3mERZ)#bQ&3FNQ^#px>~S9F01w*n!B+dVD-^Hg0Y|Z1Me(`f89S
zqa?z?Ue!rM58aok!2K1<b||#^dWS;@mSNNEif6|qAkZHCP@AzWa|^Rn<zB!<Kc&dd
z(9vcIjZ)^l?1q}l%4WIazwX!9HY54fZ<TzB6s$!n5g+&Q;P9G>1HNaA7UeiOLTE@X
zcx`zumFI23>Q_;_lHj@i*6+?gW63dQ=ifmpvifc1&Rh2V<@jU}T@usN*=%wJ=9_SU
z?rbphYqkYHS<n{iBiOxQ>QkrgJ0Hv6n3QsT2oo_K|7s_c2gDqXz+b_dOhkyra2QTT
zGsR2r^8Rr{_TAWwiHeMr6oXY|3l(8B-kT|nJN85|yls9$X#!zVQ&lw&d$oDDl#EOd
z=tslDu&2ZoTKK{tzJQGahC}@}7~U$PLGfCGE8SJ)HNgU9S9BV)o(7Zic>~m9)}(wo
z6O$GFw8h4gTOjN_IM3GZj668bAC4|I*j>e!F%yjsmVUP}oURrjwxz173Wp-#tAp!(
zpCxvgVS1`gb!Hyv-A4}D?8`76Vx)6?iW(m{@Ig%D#DeQJg|_2TM=QB-I5-3>dy|pj
z)>vBa`II=0*d}}Ng2iYo^d>oI7A}A1v{Lxd)(0{-0miex%7mqBYNjU`Gyt~(7$gIq
z@RVqG#u7eX?uxV7p1OcLNz!0pC}$jK8g@V+iiQi@M59!4xYC>BaI^(2UXV3sQiYf8
zV$cB5Uiqc9;2vfZi;-fjiVK!q(h42lIz*5k5V9r<VrGNW;Pm7~GQ)H3NLxFt(xF8~
zzy6!3wY4bBp@N-{cRY^W!rs=l0mwhUa$;U7m3Z7F2f->wE+^WKq}$f3X1ulkWn>L5
zGKzejLSrcNsZX(q+KRyXjfCd{=)i5@^Mru>wRRC2%7Z)e`87iTAkE4nA?V2^Z3|8P
zp8o#S2v}a(*<s>jm$YjNXpk~w634ZJ#Z_fx?DhBwfu#5MBR1#R>~<TTy}y%R7XWDV
zC?*~0<M*PXM&LRFHb@-sibN45C1cf2I=p|-ja}Udo}`J!fDRW}*|ZBt5^_O7!J}=S
zQtQqTr$pS%aR|;4GSerEuWd}sZH(@T$G-tVw-({`OTGSE-=*{%c<6Mx9Vs9d^dl^c
z&q2$?WEr0B{1jjYT|2V=d0{OC-g%vzoD6-<FK{5kQZ+Q3074Vxr$=C+H}UsdgI=n}
zSP>=iln6vAPA{vj8hs<&-P|C4-?Z>1;mtEDDh^1qoY7OEq4`HKrCZ?IogEs%8G@3*
zYAv)<u0p$0(LP_#N7~l5L;W=d5o$FNyZJ`F7y6AGUz3uOigGH4B=V-ZQS8|aM`pmd
z9!k%`lGNDjhcD2JMoryry*U<sEPC+oAM27D{KWk^7uN;!2;f|_AF;jK)1THUA|?j6
zCWW-EeBRQ8yg5*zI5|=5xtuq`U}`4l+c$B+(z4JJlmaYcW!P!O;wDDCTU!MmEZa@q
z#D$Bh-ppKXI;)|Y&BAJ21e|9W>oHZiYPZsJ!}`ZF)Wp}E2oCdw?>~Qjfu0^Du9)oR
zAF6i}i~9V*2UlU-Ycod?kq&s!V`CKo*yRnf*7eKPEz}hKp^vWR#z+)x`)ab&=GXx)
zohpaj?rRl<mzO|CJeSuTMt_>9)^<C^ulu;>{MeIK4k&~VVcZ_!8`}|J_7D>}2gtM?
z;py88v)BLm0|gn6W>XOfS9yQKe6!0GE<_K+w!Ptp7Ccvm0J`MLPd?wJ4e47C(9nSO
zGnhAx1kx^a;BU@jb#>9$q6~bF<8ly_l>8d5<)CUfRup9t5$OoCxg0M}b6_~?KER8V
zvgM4R!^~thcl$b|aQ)hq{loPdXv#1+ZmP;*vT{|>1!4>z8Qg$#Qmog%1zUi{QpeU{
zHj1<@_$U&%_V8bux_WwgvU>r7Dciscj=s&!&4hR>Fb}gg4UPpA7T`x%p=*=_D->Ax
z$jQmUPEU-Dy*NK#=yWD#?FnT<+TBKgY0)W{e&l4=31|)`7ltG7XxZ*AD%`EW+)vel
zX(bKA=;Tib2nhcEy$4=|wA!|476Zy(^<vB8^_5`nOLcM>h9)<(vv_QGzRwYljqy1$
zbN%mKfs4xH77;k7QfeTtF#tr58j&th@^rvik0yTY9W6|soaAKU<LyN~9Z&Ye-2Q+Y
z5sqaK&z>|NpVmz6C3xVU(0`^E1;$Xya7R?3e2(ICa&i{UCgwIx0|OrIj$^oY&2iNV
zz68ao^uw|sDN;8+?f}UJIEqxR%gf8F73tQ&8Y=heQ|sMyCAK4&L$<#$+FX}p2bmB=
z9_lp7k|#F?va2p4E>=;hHdP6cOUzk*O_8~NNjwSyFk;$*a+N(~KkmUNU<|X)V6%P$
zRdhU;FYQ@WpFmweQIRD(yTYLngfB}=Upr)fgxlfMr_!{vZ;_FB(^AaTjEun=_!Afm
zK6D%$Fb6C#@y8YXUTaEHQa5YLqp3d$7(_vdIdWwZzW+$~{#!tekqD1JLyo~Ip#LB1
z<vJ$C`R5i}XGF`=%!`lr0_$e~**}+O83I-JOJI?mFyj)Axs7s^1CU!b(V&M$n^ZR=
zk`<z(qeZ;uxDCS5uivXRSh9WpeRz<P!c1M=X=mV8yncdRUAynxIb~%XvMlTR-`j_*
zP+D*xw}fAP-Pbe2|1gTKQeIow|9->&$S(i;pZ|aAv4o_Sj*iRa<Hy*<gxJKm#Fz=O
z!EK?MjD1pVLa0=2>~vLYvXL4s8U;*|uk5uJD{bRnDpY&Z`%ye6ZTs$Hp_<H&iImvz
zuW-$Wi=S}u?DhPpmmeWr-v>UtX8z!`Z*$+q=CXE6&8e-D)FlyHT(a`ga*|RR($Z=Q
zf~x%d(Ui@>A=1ejb19m0H@Q(9xSZxckAHfv5=BYoqxF-1RZrxF^o`yw9mdfp5p52g
zD{_1WJ^q_&*sj5#2VK80EI#`eg*&Em`4u%*__jwZQKFW5R4gemu^xE0QWttdh5=c%
zsW=M!Bu4DpjcS%FvV3uUt(2MYr$|am7BMqDc1BYWv3?v9-YOGHLWrD5FZv>cy!~S`
zHOgD>N8rGK7b@jb=6*Aw2Wpn?xSh!lzN%vvL{*(v?9~d$@t12^tfOL0&OCokGuYP3
zuc){-m4eGl%WLM}P(x8(cS_BJ^;QAo+<$(~^88T;YvFwI-2GCrlm|IFjgs1Tga%Sx
z=3y^V59evN$T;#_8OQ{O9N3@oM|QM|*bhzP-AzR2d*Xk?RRiLp|NM|=Tp_C!jH<`y
zq3l&|Uaz46=H^ySzxe*6?iWi-<%@FU4=@z2%B*t_=Xq>H!_Nt*RnfSu=Qh^aOziq0
zLI^3@u9lWZrSZqd9_ig4n*nu$iK_lPEs?)>GR_NA8S$gAP$^oHY7GRq)pUfKvm*n|
zR=o{5UQ^EPM{ri>e^nSA4SYWJ<qPimtMowrCty6E`|tg!&(1cic<>e_OKU5VUA@84
z4o3smz5eG7-R;*}eWAz4ytgHG=j=KydTQ%Lo^6g-<T<N6AHzRf9IEqwp;~HcHW8U`
zN3*-%+Fx7yb}6u>tE+miws~skRl*yatv5uFB4+6xzaECfVBR-b5xCo0skcXKasMTY
ze{}J>f@suQoxd{l8Vn4l3{MIUs!gW%V8*S(^q;bj?mhXN!`3@J_afv}7@3gO*0v{Y
zK6KZ9nt6qyR5*T=ptXGQD%4QS)xC9?aoRnlQhxHT-P*}TtM2xouiCb7r$~ET=i=${
z4RqYUV)*;I`FjWXevde&qw=@=$%Pz6A0WyYEf2<@JDVk3%(;(E#O^bmrqCOhR&W^|
z`flFT=|yQUqC#r)c*lSJaKHWJojH2qR}qA(_(e)bfj#s58=!bke<mfpgIyGumpUQ|
zWuWJ!`N6jPsmz{yJCs(1qoUlph58CG1%S*M>hISSf}!Bg^s|KQ{43rCeZRaVApG$=
z8o@|<ic(Ch6Q{HF?40a<T&A-_!@eGg`Su$7PVGQD*fe4c42({?w(A>O3+s97p$vTr
zan!3>&C~UR<7lu3*3|<LUvbT#hZ-BZE|43a<EM$djXXm>FFK4mrb$iyg}2WlgNP2V
zeXuH`eTjR;we3*!OJh_PVaLLbW`A}f@ZDx%yvs(L1flel{BV4B?bGDc{9<l{-xqc>
zeEXQ-DC>iYBg+(Szekly+gYz@g}ntZ^7!zA#=BxZ@R@h%y9}qa1@DUd{bIqLM&|z2
z?uO4p2%Y|O)!y+DGt0CfhlPfo?r+XRJ9U*4u`Lq!#_DunwFymh#pu(gkrheJUpa=*
zBt2f!5<_<bC9-=jvYGbvmz^GPdHi1Gt~x6)nAx>IFSW_zh8t9qKhWRLucK=BJU@!^
z-3h{E{2h1*2E>fxs;Vk+X+K&1og*Lfmwevbvkw8OD!Yql6@BR0rHjRBzwFE9;4Fp=
zW?^j{IAErJJEx>LF`cD73~kX7Pfpg94aM4xc9@xA5I~8cjtGF+ihX4kXW0>f2!rw6
zmR@PcD7_Tn@LZKj-66m`7z}5wu8p1c)ENQH=;HX<=W~xJ_dEXnf#N+(^v2UkC~Qt^
z1IRu}k<8Y|`wZ#LsHu|`Xgz(o1`{K*Fd~fE6URosH|Q}u;1*orYlP82Lt2@1h^$rm
zd`v-2*^}OGU~FH_mTq`qI`lhOOx#I_wfvnWwVqY4(U5H3NwiJ#F{4e!7&8s^#oAGV
zPRqfMmy}VN#93oYznZW74i=xWh*yaJ9c?(gj9e>>>Z{u7W~%C;(-~Eg4nUdw>0MtX
z*O2~lh->&_V)#rAvpz<d<ni%5r`B;W9)A>?n3Z`c>#k%&_gB8DhC4-7?5#VN%d6c8
z`jfUtb0kDaEhr@~iJJcF1^f?8_Vky|6Q9>2t~>X?ee;02TZ$A=m18X8Ax&xWTzL@0
z4j^DxR8za!IAPl4EK2zZd6S>snXO<m!51r?g>LrI)>Mim45Hd5oW6rbXfBUOMD)gJ
z&F`K29o2GkNkPe8&8;`pVSAfzx8iSxvU5NC`uI7&{|H#=O?Qr<?JS$E+BxyZv2Vfq
z@Zllm3$aht8kAb!1AT?XuTBIpUCuv>3aY=fw^yD1t@l2mx(a#gfu|<u3^pq*b@c-1
zfG~EtBx+cAM#Uk<zKtYc{DcSKzIPg%nl6s(Tq1g4#0iXWh-M!#Pmhd=lF1@F+Gxz~
zeU5@o)Z?2L%TYG0xg}#fHZ{e;Nli^k>T}7y5^1?M!A4FFM_LsXj^gbpi=E|Kx=hMU
z$==@3leVxJha+N8{Tc_Un-h*JKNVUFf33($7P%2nTDhdnc!J!Li|k<L)$|#e>^929
z-N8_~d&1sJ?Z2pUbko%x*V>5>H%Ieqat8dEwPeJc%BnUxzv}T<*)T_0Z&nPqA-wcx
z`4}GFQD%`EP&0_PKo=I#zsdLh+o1WTK~MA)Nq(G8b}zketB;6xXGfP%d)tbgNp5WE
zzS)_lC<}ok2Neq~J5%wn6FR$D6xR?_e<5Qf>GaaxJ4QUemirQ~K=HbMz&)%^^a!NM
ziazIQ_t|xdii_8npZI)DdZ+tw1tt$sJgODT`zIO0&UF*~MtFpnO!gfVFr^y2nv<o@
z^FW8(94pqs3vzXJ-T7?_g%pr7J-h^f&G9Q=K~rz_3SsrX0E<z~l5(qfG-IZBDvMEo
z&7xzjN|jtqE=Ei|hmjEY63YsUii=Uu@tGZlVryMpfyB^*1xF-yXxXu|Pthz5Axsho
zSj@j6b2%&-ZpC3>wCY*H0Sp%9ahK0(-0R)}-tux(GjiXdW`i@@ojcGip^NzOBa&5i
zXXWwN1dDH?IdUpqoP0p;5fI>{f0|){D-Vc`Xxu@VoY!kPW$CDVGv;KGT5THPj7vu(
zDKB4~Ut*}Cm78>OMMDo}i>rZM{0mJ_Prj8^IfwbP0Lt$^QqDI59Jj>FFc05Qa~c$n
zu5|P87DO3V3CV_6j?&SRvgWHEt%WgDI-4!*9psjG+TogI8}nSYD*AYT^cGUS*s4mD
z?D|9_a5L|S$*@1!hdtG6$a3;>mdIh+CrUrA^}u15R#io;FvuLuf4glzV)pjCkyR57
zo|8rt6~huKA(7;Gx2ajA?(rmU4s!xn0`fR><b#4ul80u@cjha3P)V@wODNwpz5b+K
ze?JcKwY?X9<z^Y=ayelKay0nML()ae^=BKzKw0m20ZsLv+3C#zH{QWuUmoWc{Qlmd
zp{DV6P8hD9UlvvA_6NL#3AQ}>#l?#%>@<ML$p-=dw+Ryy(|ZV)$akef(AF2{ipWDs
zO3KZ|7!t}6G%8yg6TAQ|z)*w%WP79dOcsTQ#2l6u+qp?ez3FOd^23K<gA<vhq@a+{
zeXpiwGn*`Hv&CIxFy`TJO!hK;WkqJTUAe+q^z>|2(^c}Kd?N1Ng9lmlQL2d$M3a@3
zg^I7bxX|DaCmR`=;h&!hfCYsk8@K{~KDsBZ@BH&+rXV##?6_1o7y%v~_9>=3<6|2s
zyBYY!VDklLd~VI<WJQ68p}ib`Ox6(dU+onp`<%szzTi$weTgusFCO!_xS@Q_S28aT
zX>!OY7+$e6`STL)CsQVqlG=wA;UQ75{C9nc2!x!E<2$fOXd=6nfnfk1Za5<@geCce
z%YCqYePr~()<e=gRt$%=gjJqa&D$qH^|xttmQPzf%qQk@8Uo+?lomj!?GLtCwAQ{%
zd4m;gcPzX#G7=~@sunieW14zeCv%PMEiE4p<)Wv<v2n#k&g;@#$WU#q{c7W$)eAfz
zWVU_Ervqs9)Xb!*hH~%PoaF~H7?^p_pO+#&%EnQ_Zz5tbpYdCrUu}%L+#QV34iG(I
zl+VjeNltb=+|V+1oriS|rUErJ@ghIZlFud}CWcG-$65u9;==<n&_!d?5!^vM+HQ^?
z%vyaw$j#u!H1P2fP7^YrdzEMWp%|@gDK75~h}Q{YM?6x}Ru}BK@a!+<@OMA(%DCm7
z-2uR?1-3;rHQh6vboGt^bp1@Zny9qZ(sGrk<SeS}XEZPH2mTgCwp`64O*}mC78L&2
zB@%`al8kuPD%oV0_mvyMz>Tg9|CT2&zVSIWybr?tGMJ@8&B}VX<R2r_MT2((VLZvo
z)NLn|C5xF2dbA7KIdF6t5cKIt@8smP57q{4BZ><O_A8h0uMza}bZVl}^xl+N&@J4Y
zMwrYdBj+0D-e02o@{)>*vZ<i~9P&;V_m}CwGl6`^`Os<a#Sy{nt&YWZ`S4e&q|ctI
ztLr6YrL{fOeD=eqz|m49{>ZGzcyr;bDX^rAlVN3V82!mDVj@HHWwlD%q2N>l`Ck*q
zr=8;$D1qn%jMgJP&VzQwimhJx`9TE*eaeBrxNn8qm?=a3bZ*gLOBvO1MJ9*0*B^!&
z4!<$ESNJD(mT&i=>Gws4(PXOBM^U7oUHiU=;zg621_cZf8GCW1|Nhv#cDRA%V@!0n
zlwkikGZUvl(_W5+>egq}Oju3W%~p%I15&lLDg&?jHpW)a|EdvE4gbInQ9afd=e6&P
z7sutfy4$LQrcugqi-Kf-=6VG|QpcC0)Y!~#xer6&e-4>U&>OW4@ZHDN(b4ISWO3)c
z$6O_qDnyk<1=eoueyKjGrY0Q6_MvPwm*W<UDu+XWb%M)2mcinVG#Qjkg*u(!n=JkI
ztqGh(9Oc%P=8O8^`y*CXc_|vX0@k?Y+|Bpj(1=+ye#Yf+HL4jJAva*%-V&K_@&|Eu
zxFg9<UmuKKc7@sjcAM@#1sb)>GnGp|zP@UerVU97XCci;y826R#K{&MzB?R!wK0yz
zjI7Z)>Js!8g!V@QmktB+bNeH6wIb6O&x!0#+Fk~1lf1FKW+ttu>BKh|@uT?zPnz9r
zDWlh&(`GeYAvK`DC)iu?*6B-XQ%|f?hJn23VP!LZX0GiUuU`&q4xMy$_-%-w=`Ct2
z`s=lI{?JLHloYthB|bujQ~F&RyRf0T6${6#w?re|FLVBqhVswW+D_3g%Sj<cC7N`4
zPZ<T?!ylWKl2g?3$0R=yxAcp0o+a#gmnex6A6ZV~Trm}yJd8f!Di$CD(A^wHYe$1b
z6;jQ;e~`t>8GP|4$b`c~fIdWO>$0f%+|P@{&qrO;WOy>WDqWhyPfRFijHl{Nc@LCt
zA0JO!zq@%E85EHAN=7r0OoVPegxFZ);^S$bJ*&eq*I7w{&DUH$IHLY#Zi!WXNKkki
zbv+bNA!!|hLqo~mMLvCMC@=Q4K(DQP38M-Y+xX5=0Kc53MNWQV@-8`%Uso4CSpu7d
zP)9QIROQ{u?X9Iy`8%jT$ml6gJOrhf`iCkxae^L)v;yF#-wazaLXJQlk^NJ5mec@?
z+*@4yi-{s-L1dAK&>Z9A8WRrIO|RrH&L~l0o^5{2TasU0e$?*zveCDR?vWR;m)^T>
zOz?m|3n`KGRP#o_fMt`tqoq{V?-Q-mNU!WL@?Mit4-ZcPhqL1n^MY2M@v=Sn6{#|#
z@o*77)4yX}!c5PtWK$h?e=_1ziqxSKauclxx>T&PGhq8ac>b&vYh8@i6*UVY6BPQ_
z&q3m&pJb6vAq$)|-*FjvwD>JkZtG=GXJ=AWJD>Gt<f?Ozj>-P$xnp<Il)x=>*^5Tn
z_&uFTAxcE<a+FF#7a|hXUqSKtJ4*}1U|<HvmJc>`cgjix(Iv7uVPp4F-^Ze4x<%gB
z*FiBWFh@O&F4B0k=I<h9?&GQFq|VsR5bUyO!N2mpS3nafaRf+v@N(s4`bBDOkSTRt
z$7v-h$m3GUNedVi%8V$o2nh>UEZFg|^R2{qwnhE?8R|Q{m8$h~{1YpdIR=K9-}{Yi
zAG7af$%J_Jw-P@*P5dWB!S{@|NyH)|Zbb6X;LDQql^;`}RAB+WJauLhOJjDXw_swl
zLfb2XVRYZ`X?S0Kg53&&-Fymel7IQ~Gs^rGJ3Bem3tB1;T8<aAj2uJxnF?QR(spJo
zt$zrq_w`5CsFS@D<QIt!dTV(r@n_<~^#R>AIpyuQ>NLEna^^6NneILb>8-vbyPjbQ
zRGiAIov52Ai<R%a{ED!UHA2I%9~@+}BG`0%K6o&Zq+>mgulv$VO}$LsV4>TN0`CZR
zA?)SK%QjA9q_%55(e(>E?EClc#w;}U3|DxlXdf9h@FFphY{Tqb>xYkwG&D%bK^Xz(
zLi<184F3r&>O(WVefzfM)<%~TfZG(DoSgn^O(%W`1DWIxKBSWu4`<*_{QHlD-e*oH
zOCgNopp_y7QAmbHQ1Sl$oo@yUolKsp=!e_ycmMs?w*gWQOrdWQ#pCiduzL^S|Mt{0
zG?S(Is}Rn=ZuWcP5)yK%|M>|LSD^`IZNBm37{L7T|NZC3%ifHs^F2xRn`2hM-m!v(
z6B3os&Z!0k57YsK$+rDMi)7jkcyZ27EPAG@DxPpxx`4C*90Sm4VAS1z9o?O7>M#-_
z5O_ZQ{v6~h+zy7~tc;A`m?|oq;Al4n1Hj%A4eXv^5uxp%!uJVd)*tBU_{ES)nXlPg
z0wF%&@=8guiz|bhv>Ar1P~4OPr55Hm59KI%y?8-J_DiMW^7McZ@+m-N=<OQ#r4W)9
zNXYh1QL!8}G#EhwYOBrKfLX(L^$j_QmQ`wZmID_?Pgi$;eb`I;zrRyrE6fo+0CXXd
zC`SLAXw-7A=K0w^Li=HFxf@1FtEP)>g0dyanntgPur9OP8-i#j3`9vnK$(lR@i~PM
z1VN}H<Gj89!X<wEc<$`z2_E3!`>&NjuuJ<$zfyk9!^&zs@;hiF3#_*w4)7IHEP=lT
zra8Pob)%2H!F>mfAQ>)>;pk&H>wr{Z@4%z}??;k2L486(1f8+~Z|~7E3&QQEiFI{#
zPG^TYctPM0g8sPmYTrRyShnZd6NWD>GrxXqz<W0uEhyIRB!CXP)#e&3zOYG_0NfoM
zYEqW&1qw<^M$^?y&t|;}3U(J-F@e0?a5(l+Oe`Kk&70p!N?7Z?wPHD}+~%IcISgJd
zy9;_C6W_dfv!I|rSN8DGIw0U-(LKMv|2DWKo`pKP)^~3^L8cexVRpvtQkU0lj27Ou
zXi)vH7Z7qel&2;RfY|Bj1j+|?b|;k5FF=~Qwp?HlDOB37UYwz`noNC+fkN~*c!ae3
zdwL?-EjVK2WM!SMrmmnuefRDie1a*IAdti!-+3Q&zvRdZ{5cS_2Tu@%k-mO%j*3=C
zq#4%a?}CD#BPhrcc>i8SiX)**9Bc>@udVHhDFC0v+WIh_s{;5GAJo*g#}S{?b_NEo
zv*Wy9gW>c!Rbi8mOa`JFbDY224*vhQ-e#-g?c-zCKN0@|s|x~U8x7v`kaxj(^=V;Y
zU>9I%|H+Y|4&>AB?#YC7s<Df4j7DQJr`c&~ZE?G+(r=;Mz)wO(aoO%oS%!HDl;w3|
zz1LGlVA>3r-cuVOY~I<~Nde3Zm<tmH<T~k(o}^Eiv_;l?Q#eJzKlb6P()Bo^(*vbE
zRj$>8&2a=!b>Q>Uo@==G@9%$mvPa2v=)8vb(b4b&9=d}5D4vYq?;hc{sZ<(azfz0P
z$grZ!6Blj~L1{HrbA@D6bbsln=gvLU)8Oc6#XMCNe%-M#SqP@WSe^F_cNJaUzO5ZA
zULPDB1cVvXuprfHjF)V}R949O`aT9Q8_;pGq*8r;{v=ywFP4PQ3u>ZQrqo3<Fty@^
zc>K!3z<Hg!KoQNBz<(bMPhZq8ChsS?FHp3ZwA|+?pY&<2Sg|b{2;+0fmqly%-IY$e
z{^%eCjmq^)p^!H3LAG3uoV>ijP)87@UmPbQDmwa?av6|wxM3y-BQrA$>OkUS(;W&X
z_XQkJR~%=alY_j8$+m2^9ITyCe{@DNTz8+8l+IuP3&LQyq*k=Fv}j{6yBYjrpnB3O
z6cqiR>eOOugx_%)1A1<#3g`x#^@|I&C;8}ld6A6d!BN+vzhE^*$D?oQ?6f-Eh=Ml$
z#41ex#QOHyVre6uixWP`s6Q!H;JWGWk-)`W-gXEM3c`SFOg=X2T3s9-4o+@n=Cc<s
zUM#%O4f_85u43ShZ>`#k{{u}(c;N&U!Yi)-uz&ZF65Tk0j^i~@McC&_Q-%d|ail-q
zY|jG@%*4N=qOLEShL#q)(bxc-D2`97t*nf$L0^z}0+VC{hZP6?4pS$UqNTe;&pSvr
z)GA=@_6!Vka53ba+a>V<==k5K$8~pE)4n5Y7kBb$k^GXB;$XvK6r&W?jfZ{N^5_Nz
z*&x%wh+JC04y9eIy@YIvh1$ir##aCBYpC1mYe&1LIzq-p@(Ahb!(5p_%IB%rGoQ`l
zk+WfnZUFqzFgFLr;aOQ(m7#z6r-gKU=7@TJ_-w|&Qp6FM<<d7mPot!69cIo*%ky=J
zKx)gQ!@nnDhaDW%5*i1a-fxNwbzR-se{QSuK@!`ljy8?8!9IBy@fH-WL6x`=I<OL1
z+O1aY#rHue3ZDT<g4R>}@^f2u!6YKs#Rv8JAJ*1<OD2>G4i@bol<AeqOYBACb;!+0
zH8$$~s4TJ(bVLnau+)W(2Wgc)-9nme5C5$J8h0sol&q~w%-qL1rvLm@kMr~U<=R~b
zV9-X%HAKesPY%_wR5?8n{wQN<C}XJ%Z)rDyfaBc@o!_^Ru@_?_R1f}e?Qhck`0?W@
z+~`z_rkY^h<_Dk}tf!G0rKYpVrKPs88UOjx1<1p;w%{K>K6@O__7B?^A4Js%7iTFt
zUw*~&yEQ|%Gp}T;IDvkTJ*utTj+>sDos^aRO}P|{Xlq-6W8q^r-aZ#H>cL)Y44Q2&
zvVV#^R~LERPXjp);)8>s(C1zo7?76>jtC0UzWlzh5SkHryb}3ZpX|u~w5hHn|64hu
zbdb}<snwF70v7H_zJ&w#DDaqJ-a~F^(EuWE8p4UQQ^mrn?36vfb!X>>^HjaR`)KKC
zfsR!GHWHDbH%E4~*PR(x&Bk49z^8R|X+uCnyAybP%0}EAtg7Hit2KmPAhbGwODMvZ
zm`o<V{1T#;)Bd@IbKH(0G8qFW2R9ff>w3onQS!LeD!a|Dh~jXT91BUr$MDRT?GUb*
zSfuK0Y!k^h;nH7a2#BllIQ-33p>}YHY2rW7*OiyN(uB`;ye~6(Dp3_}%swVuw93ix
z36E2~%qL*|5HNo>1q(~zeS1swo`}3X+%6u=<C&=o2T&0rua`qHASG~Cq&16O!(>b~
znF^uH%#gZq{1+2!D_l;89iGC=?rzl^W0V^>(o#|ufff127p$W~9AVg5g?Zn<X8?2k
zmr@PO(HxI6S?;GYFq{`Izl!J9ydnJ&1wFxZb0o%uG%mRndryHLsh0Zm;H8go2HvoU
z?-_>U{JlN-YXPw>qN8KKXu)HkVZ>1taI#R)G@34d4gBS2*}gQ?ClxHBkYX?|C&pUz
z@`$ABa~q<kr)O)@{>v4rX2)Kn&DE5X&_IU5{LJhvP@<7@lVqtQK(m+N6&IIRQMmwG
z)X5iP{ozniX2X%Ew7CNgn6W%I&Lh8*07D4gLIN)Pg%b<h$T>4Bqqs-74b_m=)E0Td
z<1)2BF*-MoiStUi6>fXC+J2jrypumkq#DULUYhK6otiKHO_jq87%+EvZ7ixiW>UO9
zY!DEy$9Qa8Keb&Fr$zM;4qS;ut!*FMKMHnqwRP|iY9$(mMgb)-7(PhqHu+q&<{y;e
zerrP+WG~lctIy1I_4Qx8BtNNc9c_h0%RrvXU(}B>2cq=JQl*@9U}6dS@gp%OC&Z-$
z>S1Wa0*DA^5XDjcd^sf!5#UZv&na%FUFN)VHMi=O)hi;Q_wwS~u)~caAAY3tYZM-m
zc>4VH>z~$K+0ZF5GyBW$Z|F3A8pUj#=$<LvNkK&weF@Ap=_OBJIZ18n)5?=}gW=+z
z-Y5@=)A{z%L=QK4+H&`1W--zHV&rnBK2M$+RgT+V&V^OIuUNB3YZi};3JYt@^|I*<
zEwx&AelG2xxM%U?4L$PAb|_QVKvYFomR?5Gkd%S)a!k67q9Z9M^={eKWS#Kb`Txb%
zTSry#e(}O4DhjBSfQX8;NOuW{bRI%lN~F76M5Lv=ySp0&q`SMjJA}K@@9*CAuJz8J
zD2F*S&+OUH{#32Bfey|Z_I&LTtyQ`eTPKHV6%_>sZ)*8S<%YI~{mn4s8?dYQqy*J9
z@Fsq@O9yLuE;YD$L1T+aYX%V!wze~;@|r2w2^9MA5NKiS_KlB^zj+{6aeNs``7KOZ
z##5bfmtr~5OH|*x+A=f{YBan|2sdpnPu>G|D(TF|f|k1OOA?Z1j27@S87tAFAR&o#
zVnmj*ZV!izM<Sva7a`C}-U{|2A4<$w&MZN@vmZi?+%6*N41)r`##mk*QqtcDGAsgu
zE)3q!0>=w&Ov?)kf4paI>5=||yEag0mwK`nnyXaYGdNnHGBJv_wV)(tZ@s0Q9-st9
zba*mqbcl$Q?;ai#+w6Zfqc5v$+Qjk4%r3^`ap<reQO|i0#9~p^dd(GMOr3_KRbF3+
z$Gc`HEj~hf^K7zq7h+|6A}tHnW|Zk1DkdF3mB{gHZ?)wPS{2T<V>~yz6JjKO>3pX6
zB1^Nvtp5GDJ+xtY0yO2sQqe)*LKU{0g%eC#T%qyg$*mgFHxwK8pV9|fB`L+I1jR+v
z$nRc>yYO|XR{JWqAZ!r1-3E-4z^a?0;vj5^#xH~RWFFGm)+e)@LG`RqS(IW)ost%F
z#@>}W<23}T`Uo~gE8W2c4a4haO~S`fZXIBnoN&JiQ0|ejh<j0b+EcP60jSkM(hnj=
zi_7hfBsnud<gnDKe1}Z3u;j!y`iyMmsPl4v#mjyKjN)f{GwwIq<IFG*M@-Zl6=|}e
z24#W7#n9x&Q;bDptj+RQ<&rw4bEgOSb4?gweI@A|`RL88WhJrfI<yD@0KF=YHd!rp
zgG#aaG^zk0tJR(|ba1HmV|#>&Indo5_c+i&xE>WoKDXVzxTAKsU%HED4(X>1?ab94
z?8Hzz9<LOJ%4Ur-cWIDU2Z#8FfFWGRLUGK@&r`&Q`N=>0z+bAh2g6r9tMrHaj)zex
z%nXHk`lG+=B)YaX=2i!sEZujUF8yb*Z=N0{B_pA1I-GSnxSWAoz+kC(DMUkniBS8s
zx+&5hX5yY1CLKxLqzruuK^NA?xNH=sqR!vL(!}<nZb(WiWqG=iv2hTR5xtnMG<9%b
zF<`J&6y#S<7qdwD@)i{P_KzHYlx%N*2Y`NKqV{NcC$ZW0nYNKj=lumJG0eusP7ueH
zhVM<L#rG`9=MBg5Wz80+NOWbdMoUxf6i-a`_MdZx<3Wzx<FCKi(5kvrs`5>L8pg^Q
zl|vyzUf2tL$N-a}ritZ=wuz$wS4F0-{w%fbe6!g8es(smYDXKR@!|L?gyDn@wOQxO
z8hu{({ez>u6fEoa%s}ZOZ}sF><qhBUM0sd`vb(TDNM&btc4H5bM-1deE1{3m+J5EF
zDCBb6|7;IcRb1fUG3|n3(_I4)i4<W9ffu<R3_;;yCtn(j<!68Dh@hu={`_NKQ%8Ad
zhHUjHn3C$BR!^P1<SKH@)IntG$%%LCHSXF}^?@Djh<K}&I?Oz%qu%_8s=aL9Av@=G
z0$^mAU2`>vrdSULN}=$5WUp7ruY?6JpVG)FK;CS7^&*sB%i^d5?Ah=#upiLW(mdU2
zTX}wHJU)t!Vy9{r`F`a)$yNZ5>C5u)be)$82^e!9>AZx_?SJWhQn0m@4N0576j#Cw
zPNU{}1jtB`&n#N6<x(d;c!0yS5$u5^EjECDd!kw6ux1%qV({7Qk-tBfL?ln&MMQYA
z2t?MX3=o--^wanMIphEiV;hqpSB1^ej@OV8y5p;un(39zRrTID5C=-UlI+PRKjG{|
zaC57O*V-n2d(ZprFuAP(UfWRr2M%x@PoMn$ls4792>DY%#ySg*%fAITzwrCThEto!
zeti2-E9KB^b6<m`leKvH_a|dxeGtt1j~--s<FQGM*{PhxWhK2mYYEbzj8fDe&GTr@
zx?x29;^v(PmX^ALp?&L$<kv~OBl9#zddE4)KuWJWIXv5er+RobPCBajttXc|kg4kT
z2zTKKT#QABU=V)hyTN9;ktVmLy#r2zGZ}GgZ`dq0iwxQZ)6&w0hs#7G8Lc*ZJ;?CA
zuyQvC2MqdubJJ-ry!!=KLa?7Fo#%dZ2jr`eTqAJ`VLbN2;o&%VgWUw(wM*Y;Zb~8g
z`lV%H@~mhDv6iHd`FF~?TvUgn4ps+!J-uxg1I>*3%gsVNIz&u!%f&VnW@h}wW2@s<
z>)pJDz~5`_>$puPaXU6j0Z)w6|7HPNs=d0N?YV0F!K*9U$=dJO&v4jKk1kHeD3U+O
zi}6#AGEq~$AW4hBihZ)TNr&M64kALVGS{L3CR+77I+4^SH-6$IiT-BzYJZvYQ%AnS
zd`D{P!ePZog(aPw_YsQjw*+c_;G**K0wt3NHug{AId&W&7a$S@4koGVqve&{Hxt3#
z>-HixvjE<h<ty(w?HmX{bGnb3osvjIP9E~(#|J*)iKWJ|>(#6}8JYO3j`6Z6)rZ-U
z&}O+|W8%xDrZ{rqH2i$I96<HrqIoxXZLGv%uqT~|=038S@fMAT_je(|ww1w0_<$Ln
zUmCP@Jk_@|Uo+p{_CSyv$!1<$`q}6T=}Mb-hT#T{9A!^IESa7hrBa3d#B}`JRQ02$
za}tuW)|WGM2wzF(M29idHkeF_?Hul^6j<N8jY_&PSf4EyJDHP%KP(ST<SP;qGqh>I
zsa#!M0qFQu6HRZE;F@?dQcOS~j+SC!XjrP~_kmu_Sg9eTPzS-+E3a7Y!fDB@o9zQD
z0!3BTQdIo(VN?CZ<;mjipApD&K3kOzXMVO^he7`Sj5_NOJs4_%?&X_fu-ac(VRzQ>
z>mDHz>NCa6l=yTV-kRG6S(I$$#SAoN80hE>8LHarVJ{REaI5Xg@gheNFUA^L;wv`0
z-jD!<TWOiKHEQrsG*_k#@-Cw!1&#+_Q&1EdZp<Fy+scOI>T4O|DpvKphb~b4CeC4{
zwzS^B*XRT-ZTmr6fjSSxgKt*-272hm=ZmhAnX3<U2{!N^uFQ2Q=h?E2l}3t9ta6B#
zR&OlPS&^YONI$$P7C4qa7?F)J41ScrHp(+VVmTgWm90WTC+zHgt6q<vYIjB{7g_g!
zc6xU1{!tPK{P#_R7GW$Z4y(g)7v8hmpE~t^FwPihhzSWj!hF;tEtiZWLN|Bn!aaqH
zGf-}PP*UXGj~+XuKC9l7pL~(@_S&%`U-K^tik79onTBM&BLdsxq@-S>p<W`hC-IVd
zWga>|-BrXzL~$2_Nhm2Db`s?KLt>&k$}CnzYv=a~!`UK*#L#?A|L|&m{J6cip*Kmk
zh_#s78TB~qq^|zYeto$E2m7L3x9~?X&jU1E_V0=+zuVe!KNNq7xDFSXv;*TkFblRO
zs#9SQW4sxySgJRe^}=}YmmqqxFP`vqRF4MpmJq<r!~}!=LuR9yZTmmg=sz<{E%3<Y
z=89E#yxrq2x;|O$!U=Il^pp(tADm2fF7;Lfxh|XnHrHX$DvlQ#5z)jEL$5X3pHH7G
zl^o^yi``FW-5j~Ahk}O2Ba-eY!tP+bcVHqI*%0|VbvZ!p+YT?UrM;yMK-8)@zIsE^
z=u6!yMcpr%m54Wo_hbz_sjs1GXZ*U+V5~K*S!RXJgze99m2B4bPjuluOhhja+Zyl8
z_&Mn9>yk;zZ;mlgrM$d)QMXI%4S}%?$jg+AxJSw5a-zUnV0}3sr|=WI?S9zgVqjnf
z)P>p{m1@=j)5nl0E0dv=W{~e%bg(iYCo1amNG%~T!3`(LCp#WX?MF%cp9wA}l)>zb
z4z`|F_N6as!_I~@`8z_MZkdZWuHDUbs(q%fG`HAcXE0_p)R(CuQ;Ce=fp^=mBwA5M
z8Xe2dxTec>-`WRwn%Kmt-@glN?(zh<k|p(M@NbRh>jAz0#u5yUQ3-~*a<y!DuklDp
z2Kf1U^bJaBdvc!+rQw`xIWvP|$ljNFisN1RP*fL}sI(Y;-Up4W8*gzQhx)G`uDsh^
z*)TMkPgz5?$fir;Rai$OOODEPeUGp$=;Lc_)Mpg=twcjkL5JWG`<Bjp6`4d=<ys^f
z#++Yw-X9SJ1FP(a&pJ9V)lawFPyl#sMoldO7q=>$ETKNTK!QhJ9t`#@?qgH_#`#A0
zk_RCi_^9*S0iI&1PIhW)8*1-hAwN}y(=%psXEuQ`Fw1oJd(u>j!6ty`#ut|Gpf`jP
z_e5GQvt~M6UT2kCuQ8@pM5n;bUkV7g$Yk2qUSZbwI4d{IKryGQqr+~qtE5V$y?^{f
zjK3V#nx_zT@@sNpF+LpZkVYQ9E+s!6^E$E=+|vP0rxTU-Yy38QC&I>}KW9-3k*_U0
z<qH{Ees8GW8_?kEr)>D~hop0XbQJgK`uax9*>RbLdE!2J0GBaQ)0HFXXqaZKpn@MY
zkSDI}d}XsUQd07+`xZP&5`87yD1AO=(-OMZ$hG<Cel;PMrRw^bg^+N~_K)(}=K(Qc
z@k1y*DA!1Fk)KKk+i~KktIwWKIoV&#4t#N=sC7bvg2%6@D6CSmo8rU9b;nV@(om6;
z5IH?FlaKE`n4n<qu?$M~+%=Y_KD8YMjDVABipI$+m1<H*Sa4Nl2;fz6R6xT?g&ScZ
ze!)Pbh{bSPD9FlMf&__dvR?V#)N=#PUuphev$Q#pDgNQ}a>g!~K;-w&-wd&dDF{i5
z9$CuKZ&nM~+Lx3mg_ycxjJb{kTZHd}>LE^m)cD~x3v=uP$m~fB4Ga5_9q~;VtIM$G
zC5e5N?!XraEK)tFVlY_!AlkvMxT0824;jjq1FI-GDlCS28jTp3ZXX{U^q8vDe+b9n
z*mXSUUekhs6S>eXEzkaAa`%6vZ!V{MDa+sZ=1w163liQ<2-uO=5h;In))a*QXtVM0
zwY)EckBbJ7ncg-2l`kew{^F*&Kgm7%L5H4<BihJW3Yp^W(|$ULZz4v%q(`UKX?R6O
z2Fr8oUKBXvtiUE|fg<#NlyD(3n}DLO`ph#gQleCdXT#{7L6;k=7{;{Re^+yMYp<Ry
zOXJc1g@%7&^!|rgJEfeTrrx@B+v)h2h?SU=g(x`PdD$*L>y>I-Uc{SI!)rkrnX|E{
zDSWgGQXGN<JG(r^9;WwR*QO13ME}3M6!Hfyyx;FVwH2LyZtzYrzk9}+i(McxE$xGB
zNS>rzYdf4zj0U1m@hGOqw1BK%YQK+szDofh(D}hXB&eeI<ru#1^43<AaPmN#*_z=Y
zbEws-<LnB)W^C}9dh2+x{oFwPv6OteV1qWS31o3zWqDDVm4h+A_ZBGOri%-BPNEi=
z7BWOIS$&Si*vmQ;zy*AI5f(zCm!Bw<LrOoW|B$>!%KxsBs4;or9r9`f_mzV@e3a*}
z0+T;q2|RM`xu_RfGMO#}TgVnu4q(9RT&3gLV(}xhK8P!)fPwy(=YUUs7!(cXT|N;J
z9;uXqpeS`ts@At7Pp&zu=N0P)g@jnP>^a&zp?E<?wlG_4rvnIo2nryG&R>dxdNSX<
z=?Wr&32|hLw00{7#3jN%I0eDNP<zyaAuk~*B_S&XolV>?0=wheOD32ml07CpG$#H%
z`M#nZ#@aB4y(<{>C_Lq}4dc$w;Q2b*S_I!$wJ5E9*53mUwUBq{U3;DX>IKd#>HC8!
z%|AceX9(hXu*GGcV*Ha}t@{NbCEp87Ev?(Ue=<5YI<C&E;m5~!Y%K${A^p}raL+mR
z_ywB$2u4=g38V$z@d#H1goH);1o^tWE4MCt@pq)VEe?U0J=rOIRB)l=65@aJu-tnS
zbjL~kfiJkKz{W}A+J(yF*@P9Gzj50*f?dCZ9#ZZ9Ec|~lzoESw^)m|##bADarCNjD
zomRKs7*b@ArgI4?D8r)yh$UChCQ85vw2p*@NLjX`JCQ2!Dyh2QZyxbgAO`4-b5$Gw
z<9u=zGdS|t7C5K9iV*^ZPn>JLyo27Et`bzwzy~<XNeQuHzW@K^83XV%H$oQ+ZtD^l
ziGTz`17K>Z`{rc;U4SlFRp%)0jhC4qK+fFJjtidht^NJ)jt3l1_sKXoQm>^H%VaCa
z$d<e&$hlwV{>8Uvrv)ITw>a_4Zc+<8R=?i<4PpKpiu?{t5yAuLj3&<s`F(M4alLUF
z3T*a1>3?>W1AAdN7DoNych|iDY6IX78g@1omOFQxwEK!iSuJ!y2ssQ6Lf1)k{wHo0
zP<TH$l=p$dK<nzlzrJPfm6MY$F+3Lb@4~ibo+os3Z~m8yO=RQMT52>!T0vufoL8tV
zZpLP~9q$3sFu;5`%$KKc-a&Qy_KlVYHm&>nKm%%R#Ahq%8Jny=1Cbc@wFT#-vb3tK
z{?fb;@W-b85}&(OMQJ`l(&7F4?b3cj<TE7b?EJC2`-g#vDX}(?STtQOmwTe(y*(A&
z1X9=JWTHQRb{8_Y*Fr-=fYX>Gn~lrIdU~{ljgG#z=tK3>V^Dvjpra$Z(2Xzf5#f87
zo0~;r7~{}th6M-vBqsI+5Ve6H+3*U4k%BB2peIPbv915Y2O!nDIVfa7GppVQMxU0J
zsL-M&18x0`Y!A@g=xD``C>Ad(6i79>f~^m~DwA_^Is)1ZL%BFD2&#w*3k$l8shfHy
zD)@$of$#-cFg%CHuCwR}sXp5NU~(G1FMs2)-_bx|n$Q9nc}-0XDDQNqYVaEgk3ZeM
za|ePrb07v>WCvn>`cy&Gc3KH*8K2D(^%=W>va$h)Uf}|>SZx*s1@%KP0kAcJ6aY@g
z`KAl2t-%!F&+(dr!(o5f<l^E2P$$4G#sOm7=>3MW202lm0WkMiKZSb(&@GI}Nk!3l
zd3ZvoR99wa^+CE>i3I9X5YYPKG91>qRKrY3qsja7aD(EuDp<CVEk4G>tF%9nQgE%~
zP@B%xh)di()evxvkh!X8Ttw8&6)rBshzEc3m%1n%Pl6TGZ-KtX^nIqO#YWxX;`GAC
zpRYHb>VIp1nfD+F^vHZ4K75#`-BmMM3>$0}N(KfCKsEuT-I%JSTF~iFlRP`jfrzB&
zsE9kaZy&6W{A^4n0)4AtLVCE_y1l)9RaF&4&<udMt{Q~6tAKY-R_z!J=W%mJcDA-g
zFd6xJ2zI8WsXQHLSYBHL9iKPPiz`#$709B=QLW_^1<2(p)-p*DtZ{&lcJJKb*E_z|
z)%4o^%beV7DS0tZxP_#m{fB(TKW$HO)zuqU1OH~6UnB*P*P2oUUjyF!t)H4;JI3XA
zG6M1Q&}fRx_z-aUi(W-24CQPDSzk_a(b4TeNDNr$&VEX~`yJ2>pmxCNfGY)~PVd(Q
zN^pp#_o~ip931@Cp`)kQ7Jf{8dF>7jEv-8GI<CHc)<`KvUL5w%l~NujG<?<uR8Agl
zl+Ku23JMB$$I*`|1ckmcQTLx>JjIXvp(KOwzdC7rRbGw0UOGHnUBJz$8^7&RsEt5~
z`NM01@3^HQ739J@fU@=&96NXg1<BYVbwDxhi+V{(4(U0t3}q$rNpGjRxi!Mdp{4C*
zvs@RUxdE*F2q3W1b-I1|QuXD_jmT`HDNcZ~<9`)s36mBWFSd_>JusN0Xn~yqXuQQl
zM6O(iurE*QlapStP|R#eHn3?@2uts4>w74>e!X>>Xgl(V=`+*tHU68Z;3-md_|>Hr
zqu6yIE93E_$S2#Bo}IUG$OPqe?&0WoJbuask~Q$O!wGL8TM;B%fy{Ynamln-%GK`(
zA6>1wIQk&Vlg3PGn5=TfdD$~D)t9D4u~~^pNd=Ix15FXe@j?#>IQ8K?;c?X;%Av$-
zi?iki(#Wv>Kf8k<!1nb5iDf$?nS_OeRwt{6K$lM%=`VSedIscEA0Ir)7+9)3s)s3$
zkt?g5E?tycfTOcFic-UHeC7mkKZ(bDe@+jUvn%be!S$xS%bK5YOrCc-hI$*!7=jQ#
z0x$fdBBCN5;XsH=REU3gBfw=C!DV4-QQk@3L0_e`!dnZZk}<6Q)_bD0t{_#e(#D`K
zy_I}!17Ok*#Q;`rePePmEdD^m-azIMs5_qE;>NJs=#G`(1J06EnypZ5Fwp9j0A$wq
zU#;Xz<&-|)C=4n}2%rQ8i1w#Xufc?}yW6>%%k3q`(bg2aUfpYIII~G|v(1L6ZFXOI
zmbXWiK7a9|#$rv@2M-{W2)cykAhJNPZx4B+e8mA0@5;>2r@3)->%unRv3l#{f~&Wc
z+usUDp5|%pg$!-)aGE3`iAb3F{_+mIji?k$G@HET14+b%Ar(?Oy%)GU!_JN8C(kgn
zuHaUfo0XT36zQ<|rDiLY@0J)u0!5w0dRqdr*fi$e3x~W02tQsPbgIBCY6nkyy?$y)
z1ZdhAv$|y%UHR<=?>F!+8%#&o^`-a}31jGv)Ht+301#<Gpuayi_Yd$aZf#lEXMI#g
zas>~=AtCi{`EfMai|f~~!*Y#f(EH}%a$R{Iypx5eDaqHf;QiSVTf5!hRtQh3h+rJr
zV;r3HoSaTnm-^Pu&J{|Y9SkzEix>4|xI8RcS|@m<QV4{ZHrDsSw}37MpQMnOZHsnk
zi^o;{qjo~CdUd>&pT@@u{4WwP>DA4rzrYrZ`MB~&IE+*+Pj>l`;-dbO1YV1K5bSl0
zAF|v)Q4iqe@kw>Aa%D)^lgsTFMJ$#fE-p174Q>rK!MV5aKV<xxR+<t(AQw0Ok=X$d
zj8C}DETjcp>c7L8>)!u$S5DjhM>>RmaYjb_|Nrq;*KKC&JKVQPZ@`U!*Y?%%_D8@2
z<L6(mCzD^IKbS%L`!i=J`TQGCzkhyvQg6lhauSLV9NXe#Le4i$P)IM!w8>uL|NYsu
z%P%~)m>&)~d*1c`%TR=F)kWgE@5`@@4^dpW;v{J9A4Z)As`(aqXZ@P*|21DU-|w9i
zROH?M`l>}q`_;&|kVK@F^hz`7*McUDTYg=UCZ;9dI`jT!zTJQ$L2MdpeY=V3;zJlA
z`y#)+I<5h~tOAdypxAo_K^~=`tMZt!@0~S|fgF+A{3_{PGf7*UU^<12`qjsTvfq5#
z@ar|4-tPO~cv3<P?f(AZm=B*)QWC}ICSKjcpohpo!qNdDxvx5E{$OD(T@v-a<>wQ@
zIQj_K_x!`B)4#b)U)U?%eDsi%i082XHy6nQ+0GMw1>42St{L0W)?m%#t5>E}Vq*M{
zA3>+^66J6}xo0w-1HWE(cbP6$T>51s;bnQ%6X)I+=Pk0+N-6V6+Vk(2ymddnsDQI~
zdaEU$j>M2zb?<IldjqvNoKv~2@w`QKb94-xY(z*%IN|*l4@gTvAp;B#NS#W0MFiBm
z-ExxTTW2P>?EQNBnheO`?(nbZW!fYA=E%$ZZB|PEV8O{(a63VF09}iw79`Cl6TSMi
zGcHP6x@;~g-X$O|E`ID!N=ZaSNZ2@!-$v^Hg#W`n8kFe$iK{jss~}2x+z*5N8+{PX
zBI&hj=Y1Eoe0(3xUB{~7El9^X!~f}1h-X1UR8&?{(yatMiI|=fL2a_=O!KBspR}49
z`$i&L<{g@aXetSlwKR!dCF^EVTtzcFDRo*ug^Irt4t1uEYhBwpu}-+AsOSN(0{HlB
zBqiBbACo_3)xgA@Z+yqM@^n$`_0E%Kza$KM23Rr=Br6f>rno@v+(v8L3-CTtr-C?I
zA_kcn+EWf5J|Zerk507`^gEfF{67T61VjBFYs24c{q7y4DW%K$@7L}b&)4+MMFxa~
zydfm?LDEetTV4-_d7j{(Y@N(HI#p|rbR1f#$5&+#$3HkkK<Mu?e4&$YTV<|i%-dV!
zo=K4yZzD0;3;*D?9xfuxIRP<2U}J0k`%6XdOv$fyZq7~$*Q05Ny{faaUf;WSi#bj`
z(TsU+h&fS2u<dtyz(am)s9vOWk7w2Y?S$&Myf5Jkjrv8V+}ad(@$~Ifn?yvgRnyPn
z^GUq1ge3(>T*E1)zW<O+tl~O~dsiy#Wdv-zOs3QSqsTT&Zu^j!ZyY_R^sX0;me4=r
zRgLkmK4RV+JL<PivCa@^Q6yhBm&oiBE>w%hO4^fucdP!^-w$@K?YO+|+pE`o@q|Fk
z31wjb=UDD`@-I|Jt3!o-l9aC!-{+-|6>ahF+T>@8ovrqIip=aFu{}Kg`^(qTx{;Ub
zCEEp>3x87)ZW8Pwqa_u&RZPB*+)T+BcyfHSzs<4p{O~>kne=mS-_b9QK9>fnFCV^9
zt5iF-9UaKYAqIMTnT?m<ZI}LlbX}SS5Aaeg+TTAt(4|X$&CX8yie5y#G@{C0E9D7b
zE-JM)a^+G)4u4kF)E<Fy6rVb7iC`G;5m>ji!(BAYySR!$WEn;tG(O^#NpjYv4cyJw
z&+t#(Up2xGrqojMi;Gjs=8vUhjERpEet&o(N&8<e*cA1cCU{s-n0aAU<rc4%^z090
zGJ>53BXsYvT4?wz#ij$F7SUD*?8>Tn?NatPMjgJRHiCO``0NQJ_72k7uA2*S*)Lb?
z0O+Fq<{v{=;sMd+_E1p!J`q*UYbP5@BEsm&QQd*h@d!DY3Mp-ez+xlAH{0drwA&~1
z-#QVvEW%!bcWXyMM3wFq^0@!dFfJE30c{u%9KPSwQF#Y#JvrT@^3%oFL^Y!@srQk~
zsaoxCJu;;D%-T{G#!D+ISSE4}Cz+$8qCh1Y-Ss7sY3uOtFr3=)$xR+(3xkcb)0&uP
zwxxe7I)-qJp9iG^mv7#@bv19_5=UkCMEAL{AJHCeDciH{qNW~sJbNR-?;Z%HIo_cY
z<$b&^2TPU9-|cDr1P!_67H2WUpE_2w#>>LLc&cf5VPWik^!(L!R^EJ$dGySBAyE6I
zRTS-+EuF+;l~-S>lSPh2G4>u@rb;~N85!|E%aCdNL2S9jQk3q%CdBS=notpAa(R(B
z($4EH);+)!??E4$fJg7PXgFR(@nYr<(dj-;{iidq5~_}-HepO&qWU1XvbU70@PT#A
z<WyB++vNCr3xlq_be{oGZhk?>GHz$F(rckNHrSfMu!=MC8tx<=T_77UKuN?pqcfME
zpgd(}WMBx6Uf#M)*I05?7(EzZSc6FGeP}}>es2zZ_eXr{l21sH9P8U-6lJ%ZjVctz
zmN`%ek)@<k*`Loj951IRu{2;PT1Ca7<)jp?vu-P5&IZ`9+VzfKqQ3d9WnPmdPN$s;
zJHHpBGI-s(*sqnKnFzMq`6OnjSh}Gx6~k;ZnQS44Ssa1lvthNtB7(?KD(7B{WpcW0
z<u7YcfzwZoZf*bf3A>PIx$gV8s&4G!Q022}6?9ltN%Ym9!ix^AVz)jd52oGW$9;OV
zjf@tA87dtTf{BiaBIrGFdT1CgJ6R>)C%#qvXNt4Jbmwk$vC(FTzkfZ33PtFrM=y-n
ztn?$rW77MU>{M!hz7@PHJm;rbuGimX$Y`XuVYxmwz@QZH^b<|v4?A=|M5il01a3ku
zk%fsNU+%%$V4vcmpO^P{<a_rL-@$foJ(7{d`gk55if5erlhsFetCKyl6<P9GDk~}n
zvk`%)z#q5n&lNWD<nJCU8;)vT{?$w(VLQK^ZW=tF6&WTekbnrieg`euTxTS!Sa^@)
z%vXxq&1h|F%E^3Vn1qqhuxWn>!#I2`U%$EY=6V)vo&^!?MfCmfdOQR>hi^B5J_?uC
zajEmC%T3$;l?}0YWXtGvmFQYyi=&vIsHlvst)3VGAPBeS;hEi5`}0|Rob{mEiED`y
z19@bBnZdguePfil*5=G{?9idy@18-#V2S3+XsIIsX=H9L0p)J{5>W^8-MbJ|bmvc4
zkzOB<!utqyR&<h%M`g!;1Rg;t6Uzg3)^F>UY8)y&y*wm?mb(2Bhlhjv+(03zU%b3x
z%-~spnGz`(rk1|)znV2*#KG)2RTf=8PcJrz=vO#ct*G}8SDc(of0=6CtCOa^mY*IT
z9-<wRwiOGrlbc$?ZLP2STeY;bK$U>|WLYXnWA^I|#K{77tZ8LBGs^&vX7GTX#qzLw
z4(afD{~)XF`o8Wd@wZ}1-=}PI<E;+E-&^P>&RWa}HO}m!GO;W4<2(jXL}cIzu-H8M
zV@FzDl)1!iV}8*f6BH*L&9GL2(@$G#y<+Rb8gdhs_ide1mKdy2%be;c1<OxyKalj8
za!BNmtnSHli#@fo+%gzx&^jx@S7o`%Gf?w&usfnjUIdK%&=<cfcl^)okT=nURH`<<
z&8D{CX!lx?F_c&=oV|5?{FU}*zz7B#sWAnHRhiA7{scEV@F(MQ0Yb8NwqoVyy+zE#
z_o!7idy|FQRMvF0)(gT;kbugpcAlrfZyCi_IMq>%!bSnZlLb>hhcm{B3X_P*$%O}j
zFW$T<v0EAi+kwtlCWDiL^1(r@$w^LqQkSHZ6b?I6*Fg>4(eFHHtgJFQs%$h}8mk~7
z2jEdQYxJEB=?$LRS7W6);Ky|kt*Bj0&#-&?9CuY0n1cpm1p$sshnpNi=uAc<_>Ug(
zdG(Pb`00EK>C1F;tlU*-`QnxdTmeJt7=?26NuRY;eS>V$C$B(Q(o@XP$PiO&Eovhc
zQ}NcxZokgxZx>x>^e$X#JE3n~`Ox9l6MwZMGzR9)o#*?3U(>>p!k+xJv8)?R;UK$-
zV8<XZzsUXHEZ|#QZ3cPk{*cCn=WQ=ptIt~n<~vy+a*S52EF^sH`;^0=FNDKfje3{s
zaP!7<PeY@d$K5{WxXvz~x1~Jql74YcP$#r3{XU^?#WXx|`z{ia<sG$`$-NU6m(&$o
zlSH>}TO6D?*qwl#l-Vc7=>v8)vrp|3x^H#vvhgI&AUmi=1S04Yn~QKZ&rqMn(ioh7
zvjExO15+I4kR}~r?5-3U5TYb~$;&g=)m5;z?k@`8thR%Yk%4#%3PN1SqPLCU2uMro
z3Uc^RTKX|A;7hND>|p6k&LhoRj4Q0~BE_91K%&6I!HeTlRzf%0wkB{F8L^<Wk$^oi
z^>KSAr8>;11tjoeCHWt!buEDX>SNIiCjXY>Psl+UnWdEPsg61&TqD8|H#N9lWZs#m
z`2g-bt<h!>(Ci_jPuu_O0T@uF?CKk24L1a)QZ1*tH(y_JBwR5$^~R<|a;y4N+l2o*
zIXQV8J3FP$?d3h?39#??Tqi%3(Q*w&LRlpzBkSE_4u*_6a3)Ef`a`3UYLT}g=q}Xt
z1>JagjY-Qd{6d}G>Cux%j~MiiUyUBT8X5_bxOE#-`4;~HILJepSbxK6PP)f5(bOcB
zcAWc^0qfyIYn7<R?i`j#gbPRYLQkT0^5I+eon4u{8b>-$h0p#MSd!DUw*Ak^+1QTa
zV%Og#LBK_tByUL}@11{Jys{vsmSr@jY|1)nSG=OlWR0@@^rO`!M}yAXBq2%ec==Py
z!u^fpuYBPIrWaqfb^@37c6WJrCUcZ)6K&{V_*kSPkY|4KE!j(3G@Sk0sKjZv$kgt>
zyiv1QNsJw;_){+X4PC30<K2)&Bw3=fB#A^1m7kJ?NWIR##@oMs<Aq$In`cM3wE8dq
zB;6VFes9ZGn$4(Z(Ef(?$YeBM&k3w>8B%x?43wiP=_CXdUlQo|Y-nc3{Y*E>>>K6F
zKIx95!^d1BFc{6;+$hHIDGtdDMug?QB-bL#ttMYD30K+}*~+Ena#!8N0JD>U*+yYi
zb|-Fr;b#4bdRvHcKt|>(SAn>D2zj@kJ@x>JKxqr&5Tf^tE~?)9WbAS#!sN^Tc-r*D
zV7b&e-8+CzLPEC=Yj~Vn(jz989g}smBr!H(Rd?J+r=8%jxz$`sG$*HAXzp;C?m<X2
z+fW4t+65WsbX96Y1CRa-+Fb+%UFH0|G&1pM7*1d8eM`rOG0NIn4$*n86AU<<S+!+l
zPcRD#3(~b2%RhQTAohbOnSM%x0OfI#+q?~p!!r7@D=RoxH`zZnwyR`D&CpQDe+@{S
z-%wYM=3DmEc$HgYm;O3iO%uFQqHUZ`KbZ-0{o+mZUfG?Ao{6PW#Q9O#kj1wU@0WXK
zr-yhgSejZ|Z&X=3F^Dkg>0dEhFTXm9N(^%D&q;1Ec3=@9d!MdKRk^=LW4m5NO!=C1
z#A<mW)62!Nu)xwlKdGyFpaO-h${}ZedGh4g!)#+LTu(OxZq#)_HMz%=xmntFlsh*S
z>7@Du#6Bni&-Gh|^k?$y#n^|suNCPkpI;i9e)Z4#B#eXd==zJ=<D+)JSr0}bVtl9H
z3*^vCw1vFhJ2=q5)~OTesT-h>Yi#_bG@&%m-%pAZm-jQ-sTRy?#;eVa7Q8|^z%Iu)
zFP2dwB4M`cB0)yt^XKDUtu;2Q5>Wwx2o7zXB{2xGy;QERuPMQ};pySQ;dJ5Y8ynNu
zR`;X8mhQ8>xz6x(J?I9l5*tFPX!>tjxxb>JS!wjDTj?WyZ5n&BKO)>Gi_gJ<mVcc;
zeL0k#nAq@W)924A7T*u1wz6u91!9XeT}jV;lb=$o0vY!n*iOVbO70J4>1cRzLx-aO
z=@XAv=@$EIJ=G{3kF5#2cTPbOj5_bMeulv8>8}0xak=CU!NU?!$b4&MeSmBL(^)=w
zzoH@x3tE$2ePLm`Q#Rh*Br{c#R`bJ6iU^nQ7q|ZHBDOCtD&HkXG+AKi(uc?yy~;h@
zTY1lx$=I^9HCuD5k14!ZS2quRJ%8%7_b4Z-d0sG4f!-(}RF1y>&e3o%e(ClTnykyj
zGsl!Bq-OCLCfed?Y8_d5yQRsf(^MGCtaz!Z`J+AK#P7bGs!&frF0a|qA<ou)Bj>Ih
z^t#5(m=p0ZJi36opNo-cf@&r@K8slEse2837ujzsSv{=iz{8gt_YngZX*$de4KJfA
zSe40Zw!zOsd#i@yf+>fE6-(4>ZDGM+sz>eTDGCk_pZ0YKB(Vx@?&PquLeMExS@&cr
zh8n_5UET5CsY6RkOE{BNYXBb|j4nvTPi$AhT^tc9)~xq%#{dDudqSTW6d$Nj>$aK6
zXmt3o)w-Cis5DI;@w3AqW+~>Uc9-qg$kCudKM1TYH~q|3y+a*RYks~j15?mgvYKzn
zk~`JPtqo$~CL66C?r5=6SZ1l~ii9Z7=Fb;9&gxy8?QE360wS5a%@UDH8D~q9n!v*O
z4K=pN#%t;OqnvRP=j}4HrJ3LUf$2E-&$M~5Lu0^%(A8aRd)VQ(L2K20Z2RnN%Az9O
z;DMIB_%|T7t3G|eX1~8*=b~X{^VItCg0Ql+oH<dxz#Lx-Vwpipb9HQAW@w@M>hh@S
z^tzh*loyip9c8-vMyc1JB%dCxl;}3vAI>bYj;2T6RO~887c$<)JB+Y@M!zYAkl7h8
zzWB3t_Ve5RSpM2uQ&Z&1jPpmi!nH9qp}DafTfFZ5*<Ktsx#neT+e^~igH-dp_-m_@
zK5I;+rj`aa4De|s6iB^ku0@~+m&kUPM{L(~(G<lh6t>;lx;!1L=#1uI0|n%4`QhLo
zi5NZ;EhBi-DplC8^vv;t;K*ySYJ7#8rWtYwh7bFl!DMzShA|#xsq<un#gKe<*uyM{
z*83SlntWdq{p99U?$SyhAZ4#v7c_r;cWG)u!Z5bB#+aDZ9P%y3xT{iayBCmqseXi`
zWs#PZwd}AX;EH4cbLWxDt?hm9_C$B9-6%YUJf~a_^!L_wsw?A-S`(-E6Va@c^0bvv
zu0{Fz>l20d|73seE9qmnbbcll-KxuC(F*>VN=8WIW~(%x2UaQHbaG(52@^X&Ma7qW
z9m~&6-iU5A=_Y20FC&Yl(fr_^&0b7Ia;kQgLU~<h4u?#Mp@IF!DJ&tICg121tEnEt
ziKo8!BQl-WE5&dbv=1TTXb7V?io;0<ILC<bro2pZi?#ez$9=P=6}-Q<Hu)h)+q8t)
zt%9aif~-~dsdjm)ccwNBt$uIBGaXHB(q<RyDvKo#G&1b>)du3F5>L0W?d@eAen5TN
zAIE^8VFl#_lb-$Jyh_TkSfFjk*y8;Bw<_c~BYwL>9LqmV_+8O!pC1<6ZOv#=Fiw_(
zra=F#YQ-j-v3>t{m;K^x|HM?nms}$s6uW<rO&>aVSt|dr_bn~d?aT8BPx|_GDaQg@
zk2&IYdoVwf{?L=;+<}q>4(6d$(Y$|ND->9|oMl9L3v^l>i|o8kEw*?7$N?*x`Sx(R
zuS>x_r3HMWBUuB}BEj6nqtYq?uMli3r!m`rq#xgtE??@r=m``(E0XIb(?n+C8@IBv
z^T2hF5XHjAkgY8?EqmV<?NjmKF1y7vjPmTr^tU?g#YOb1vb-^ts-Bh96$)@Rr|OZn
zQ3vlZzY?mACr0qu9<A=JE>Ij=2L%Tci<_*CpVa!FK&}^4*4U3AX?hLAYFi8KuJAu6
zZJ`!=gH26MG>x@+9g6f2zWH#kQc{+bh^U33i%<4;s?YEC_9XAOg6ZvMHOR=w%h(d4
zqHcXQC!{eD7@0NwG%c2kpMs1GxZ1{Yy_peVVZXxTU7OwR*KpXP$j@_{jrN<sv)!LH
z|A0zbHSwGNZL~15i~GFp^>hpF(Y&z`MPH3tBiG6D{Mt5^9q!|Sg4GKRn6z!<nZz1P
z3_4KX_cB3F^6Z*6?$^yB$(>vrZ}n$FYtl*%)_)in&U(J+QnDn+faqSAO1-_uOZxc(
zvy%eYJNPQ!`Mgs%*%74l;0b$<BVixq*kP7x<#5vRCuFvg>=?SXgPu8U&d{731sYXe
zUY}F~+^_3Xg)D3&&A<Cgl1<!!QQt>$m=~JR9?ikR{<5IB{N~cR@w5I&i?b3C=ag|S
zR7&$D+vxi8)h6`2_M(uJENYQWD2c5g1^4Zmv2u=4**W9~UA|<Tcs^P>BvrxfrX2gM
zPc}IPkI1TisDQT6b5Y57GczGUB)_qJh0c!o!2Wc8t??0Hq}#jY!>L9D<e*t}+>Uzz
z#X@q<@lTY_Pw##6MYKA)nB3!}u*Z)dFC^iK>>Q{EDaf+F{t*(Aag49hKOke%i;{9|
z#3#Rkgoex^99<i-O5s>1vZMNB(|m4urx2z_N#==GU2g=K{yua<2hq-n1?cFc9>QG9
zjCv|<VrP?+nRe!f8A~<gw@=nH*3ZWmy50=1u`YF2o^8HY-n5D&qav2yiQ%fUsf($p
zPjFgT(sp{rWl4%)H)b{esAz94aO_TUk0y6SC}i!I|B>O@c$sBMaJrhc^((u*M#fLX
zMFwY<i_$5iua+CL!^B-oRKK{YB1zC${(LsUR_pY~`7}#W&Z_}cx69!aNf^wS-s3JB
zh~SXQ-4Ac=sEd&Q5vuq>B3+cc*o#ZI!pF3TUf-tYY_?mCFLnu}jTdijHv2_BdG@Rm
zL+cI$(t~v)P0e>*-wfFGkEy8$s9Zyk9-Ny3KDzJDqr&Z*&NzwvXLH<+`SaT?(Z~?G
zzt=<}LdZVx19w0}!hHqHXM=eiL3Sjm6I|6C%PD1fcYR3l@Kqm1;4Vo`X}aYHev=;X
zyG80eU9MD{$Q!%7JnXiYDk$)MYr+YL35kKOqUmG3p_$2pZ7l<&#TT-5)p$%>F}2f`
zjvMMVWn;@*3_^X~Oc#`h=+D^gQvy;_y%xJk&p0Y`mGWCJBWf>;_4Yq@O)%Tee>OqC
z?r_u91HBmsS8cFmDn*%XFHWvBe6`5wQuf~lrd8(P`kl;_p!1%?pURO6ekjc6%sI<!
z+US@Y==kqTq%%6s$ze|s&e-R$U$%l_KyTPT-QH3if`u8qn`m!$_$=87p)G>PWjp^C
zsU|hklu)tpbRg8kTvAt{^5ex-TI6Vv&0KZm5mq@B^8NdlSO(OvBY-Br#h)et7(#G3
z>)vPnfT7E78sR`h8`e6=;B@d%nm@I(MI%OpVR$1y#-;UxYORLXukQ6P>?s+7_q_}a
zhdoa2gq6@9?Cy+KXsv~G@To3}hcP?Or}+c2aCKmuVU~I%f1Vpk#oOlBAx)0bVlb*z
zu_6g>!c{M57f%#RqgbULP#5dSSpK030TzmJAHbCDKevhF6drBkFpmt+@6uc4&$g+S
za|eqq7`y*B3y6C5;2aM?Of5}v+tLZ(h5{jQiY*ZZ-xW|cJA&k?mt0(26cma=8IKF8
zE}gr(q5O%);C25+8P0Fl?1|f0R+%W|RM&=}-`tj~tIES<vTSG8;0+ufS0X1NB4RQc
zeF?dT$_tQ~lVsAzWK<)Ty*qsY`VsuF*~otVsgjBDECYT#Hj4Y1blROEwO(LBX|>kd
zQIL(f@p-{hX1&I7QmeM@r@K$u$2mwGWP^;%XFnm{5-1epW4!5LTW>MH?eAIS?duyu
z-xI7tZ$`HV5=?g6<L~LZV#?7moHjykV2C$a=IHu&pnbe1y<91T`w$C5db1?@niKBn
zgFWG*7mA6?36TJvr39#J%y}~9)=S@RrRDj;D<UFlcn4$R<vX#QZ-%@R?r6^n^a#c)
zbJNpzre<CFAsRxu%oH32+vK{GneEOD>lP^^LtZO1+~XEv1tmgF^%)kWB~T*kZ|ClT
z<FtwDbmzGO2%Yx!w?8b`OxGu#O@>w_CU8<(s<xl=?6X2bC6BOh+gZR+A_*El#E`P;
zn123Dir}!PI<w4Msr$Po&MjIWFqgT1fxRS{JUqC@mDok?5WwQ)WIEiFz}Mr(jyGtO
zlyB8on$Q%<XqfN?U~UAaJ=ICEj>h0*MfDILRY_BS|NcyA;Qh@hr|zMV6G(nsp9NcM
z5yjF39!*VYSEK_>@Sv*B8cJ$e$aI9&|5^|GN?}-NX%Uzry0RgGKqwZNLqZLb-D7@p
z^Zl<o=p72hIJDNoUQ1NNhsm;^w6r>+I15GB82>~mlhTCK>7jP1_&(+AO*R{1%<hoO
zRfrC4X6xH1$sQZZQS2*{2Q3gcIC`JlUrbF+-J@rNr(Ui(2Y+--0!@F^ZtfI?Nsh_V
zKw3ITBlV4b_!kc~UiVU39Z`2_Q`O|%z3MD^gjvAaJMbK2MH=%h0Y^2vy;Bs#etd^w
zfwc}>n<Yn-t!by5e68WnMN!4meajSWb6|7XO2ixB-G_-!5hDxBNax_i`N{nvOnjLZ
zy3gOx@OD-ggvqV#&X|W;o)mp%vF`o><laNUjtCk(*roI<ZmBo`x2jCl5&<e;<><|c
z>So!=S}UWsmoCKbQ_x97z|>0P?=5pIMUJk2@rqQs-YNa&dH&~Nkyy=d1P`9kmWf4=
zf@_=CICkHYV6%{S@@dx@5}W90hXx0qQRi_XFoF1yH7YN!pfFx#<7NBF^9E`ltU_u&
z-cxb-veEc#SJ8z?=NL3q_B#O_u0JR1H%A$qa6@WsF+Y6xKuSeL_2Px3?j^l`3Ugw9
z%(K*Qw7v{$gV3_fFD>~IFmdzqFO9nuDp#=fF0(Q+=JX4V>aNTZ>8#+8h((9d>&$lI
zvmyF=%Z^MBS_dFLH(RCh^mqPGaEs)$U#3194GRl{!m+6#AuF4p@em7ZaZ{~yX_H78
zduw-`Ph58`#6Vh5oQsGd*x>CQko?qPI5iP_M-CSx*Yj=N4;ls2b+;w5KE1~BCU-(o
z>hA75BC8H(mz$)EaW@vofTnYXwh4}3gODz@Iaw|oyq^Fevj!cbGKwXJDwVbyU|m{e
z|Hc=e$#Nw?OQeU0Cy0jcRCSNbe7<|!#tc$G|E#ajZFV980?o|!VD4XPFjDey=F6DX
z&DEjYTAR7|hk_Fom=dKb)pI0%Fj4qWuFi0_J{<ZdAhzrH-W-Xjd9ndnUpR}#;r7hW
zDk__nwie3sg(U#L;RxDSt&{A;9)(!QaCv!pS+#4&=nl4p1!l{EN`p)1eys7l+}vtY
zE)LPGED|S>VX%Mu3>fCTyj&sr@W|OI@S&vPQ1%kr9c`&~#T*O9aydEfor>xe4nlc@
zhP2jn0c7As^mp&yPpv-(^A>L(A84#0qr%mdH-^hDC0T}FP|#x(C_%m3G4FQ?-Tl@-
zYb<SSAO_zgyi5dD*03PQ-0bXPS9BLADaXn73wkmdlZIbA{o0{#d^;kTD(#L8(}Rn$
zW2b__)h#VE6AuT^VrA5AiE5zHOJ%OfFI%-%1?WZZ{hqaOKJxwjU7(XDsIjfhu0O2D
zRy3m93_RgZAsVVp_XJ|<TbbYcJmbq1;lkD)CF`nRAFGTt%eljUs~Qy-H`&s9=gZJK
z3mvdz(~aV|%!efijEqVqtFp_XhE`J*#rtH7g8g;Hk+G1NSjw^s*+mh&2wfbw!BkPu
z2GJ6;Ft4k$%_@$vTt1YJSUQNb(ys=cyn`pH&MH^j<=T$~HhVJ_%hOj9(-s%AETf08
zVg~WER;ZW5#iBV6K(-~rVDry{0u4RI1iy=`-bQ!WB{uE5fRK=a4=!dk$&ES!A{HVU
z5$PmNPf7oXsV`02ZE|l2n5}=D@f?LxsUVFb$MM6<^$g8e4G)q`49D|U<~;(})%!k)
zE_K8X!9X>|^C_1lJ0+#TMnti+<Kg}YR6|n4Lu_oL_}t6onMC)aExgExUUCieIe3Uu
zQc@x?s7z5EH>+6av^&ad7c$No_*Qi@PLq`x5)pDFw6vZ`O<?5!!vhp^i*(bIf`yw%
zC~?#8g%u+M+4{3H_ck}!bP)vs0siaj`nc_d!4Rr<e!N3?r1IuWImJCmvnN}SmX?;(
zpKR?(7;U!-(u3togH#I;s{<`m$Uv|%CsD?I?@@w)TPim{+gJehdN=yX2L)S90)p6>
zn9dcL(6}dHmAob*YQ*~L=Jt+{&+~r6ek<(!?qkKKNLL;XWv_nLQLZ-4)?5mD3z2di
zYYEuZ#2LC7CsS{Dq$Q-MF#w7WpMB_arj>f@Yc{*({_%*>P%YFRr<2{}`MrNeB*Cp`
zlLf!%pV|O9G0XttSa^r;IvKp$cz7^bRag9YTpIlo-60oCRCTCt)?<#u_F%aqXLTSE
zJJPUw=nOUqGHMmvZ%&S-J|{?LS;eYgSmq76hDAhxo9#Ia9f*nF7kyS&zw%+q&>2|O
ztK;Sd8$4zN`+Uj9=dl!@k-pR};R&~>sHYad^LkD}G1k>MlI4R#^k{T+6nAwspN1wX
zB%dZfA_6yAmYkft_bwMJYee=r#({@6RsRx%3_oM95ciYgrpi^WZ8Ce%+A4IkH8I!U
zU2nBD=z5mGjw0$4W_0G`;UOa-5f|qkqdZ!wrzVA{#p)mESFgbrl$`r88BRv}J%96K
z2Vx}6BoVwJ%r145D>O%T=13rbNrx&*7{X#T7-|-nryvFX%mT1!3yb0a6w>{j>iM;N
zyCEONA!TKf;61$hy@JAKLGh$Z=Zp2s)|$M3o1N*>%w=V1$RuHQ@W77!5fl^S9~kIG
zAv-Pp{wMWmP_K3{XFiZTr2=Nxo5N;!G0=}yYUs6AF>r9g+uL)OP&Ks{x@RHL>&?kY
z-X4Q=yw%nuWOQszlxh!etL+;{&Vsq%22pH+mniA)GPBC%6mtDV_0O75FrMr$9_aBB
z5?YQyM9*ub>CVoPotdBR;NeBDBSrtSF%kf=@Ym(#q85=1W`_`?y}P#uFV#;Xu_Nh)
zH~&QU7^Df`JOjpXe)RE~DvXxMivuS6AS;7XrD%VynYvY|GkPH!5%@R+5cNE4iKm?A
z)?J&`Rn63HzG|I6@1U(b;dHuS*FIF@O$-?~GnPPuKmEJ4H36y8ax;N1BTF&Ya5}T@
z$B&1n!oSN+lUxjM3SpglQQfmSg+V$PWFqGkt_fTp4`>vIQo3wrce)=A>538I#VJGa
zGHbGIR_h5ur>_Wxt?Jsxqte5w?GAffuIM1_CJn>GX_~H4<4Oz`3_i2M8gHU%B|4|f
zHbXhcR|737QTIpU{I2u8+BcP4fI5*<AqoO6I2@VOHg9(}k`dk4mzS0ft3m4OXlv_i
zY3ZVR+jQOO^=TR0ECHeKX0es^#?dvB1=}QG9{Z6gHHV&4JGI4pbBW#hcO0&aIsb=e
zlPW4$SO&ldV`d17?{-`fK5Me|fvb!EbbZ8jL_I(%0Ct1=9ls?Bm%5^-It!|Uf~3X7
z4)bPyg26}nWQWBr1WVfFJX{&>VI*SFIw`;e8@HsYl*H(bqLse17|Uv%w#D#1?bpf$
z-WQ$iF>H!ZFjj@Lm8NSx4zvyg5{qOhr=sG|>={|fsg>_r-MfFkG`|GQLNKtg6^lP%
zb_FJ<hC~Gv=&uxPZzn{4+g~1ueu=h;^hfCwgaxA?#(M7vmZ~K(=y|0~f*ajoT)pe*
zfkjWZ1XSgRV<5yd-Kb!|2$fKXPsmW$(?j_Cg_M;Yhh#^>E^TvtIxIRmJ3G7Drj3}9
zOQC3Z!lGAm&2liv*?eUce6oVmuL)@{H|iS=aI&$b+WBn~b>X}S3BhXii_R-7rXu~#
z1Zu*lN#?Ca@QDC68wfiSKj^oY<=<37>J=7J8(e28{JYU|o)UHDK#xS1kuG~Kv6>-;
z-S)-)R;y%vw@a$LM|(nE6mw!$Luwhl=t8R~)84-^)y=8-#YHfrGMRm#px;-~(cv69
z9)FJs_m$aV@HE&qye5%LJQq?3`teZPPNmRR^!@uLXlQI0<GIYi_zL<1krCLrtvqRs
zFb<005fghu(mW$A6(O-(2xBPd`nsea<G;H7lt}dstLb4vn5Q{U?l&#PHf^eylvHhi
zx4b+(L;9FGIb$sOqv<eVcJQ|RUY90OKSVX%h>gL!y?tZ@1F6TCG@zHMy<w#!A<HWH
z!5i_s>Qep9(ktJ`x36#FZbqA2<SROUb#X%fiALdM+D#zL6o=eH9d@Sa0}bXPr9x1!
zAvGi@?UIHY24#&G*a!;<2!!S+za)Iw70pp=IS~;MDZwh?Si${yU!_yQU!90T*x>x;
z3KGKpM{>#&P;Q7U>}b*?!!%iwJgdKQPdWog;a59tnfTmW!sOv5)I{p2DMj&woukeK
z5{^icO@dF|1m0Xcg&m7}?s^((;is;ub*qzsOgUQGf@hT+xb$gV=RaS)`ZbXv^6BcM
zu3d24h>E-|J^$bbZN$zZE|KC5>GA^cSyD|QuJ}2&R3qcovUl*7I)3!#imq4ten2Uq
zVXm^z7b~<jrnNrE?i6Vk^;mEr%D=ui<MGPBVZ^m_hKu{mLc(t@#M9{v&z*8!NOZ2_
zJ(1xFKD$Jd3GYEdG&OHk{+k+Hb5^x?LiH{9;%BNo^{{RQPXb@a>jko~vP^o?fA*Be
z6PLH2Vz$$^wlcJGI`Cdg6iQ>gJX#^Yv?Ld44DhWz-a9!6>HPa`t~piG8lksI(+<^j
zAf~ZNFFwm?68mnwzF=E2fBvs)b#{8kM}nhO6RLMcg&O?7SwIlo8ItSTjW|}B)mNxU
zvG4zWnscqcam&d&8{L}9-_wg^+xLSB#Lw-AU5@{qm@@%pbp6gvoI8m3X)ckebw)cA
zkx4-cuK(F;PUlK45|Lv*U=SiE9QR^&xS7!+9@AX^{68Avaiu*9vrx>h`XG}}cMvmX
zOi#RD%nW5r+dK`<_(wOqR<k{Y^HfXgsR&N0PLSCqlGwPjYD$!Jf)p82?|)aX=FllL
z4N}vogIhSu<bu&&+_fJ<b4LvprTJm_?}}`*O|mezwlIfnb-YkWZ@<ASl%^0I9h~?D
z?;l(8nkuPQKu-ZJYRY&aV^}YeC$s3y48cZ(2LUSQzfW-X3v$E`Mn=M!>Y$>w{W`T!
z8OveM{CAvi?Si;rA&X*38ddE75cif*S+(E#sEQZ}qEb?#B2oeZ(xo7vbR!@j(%ldJ
zfKo~--AH$Lm!NcacX#)hsK5Omd!J8djI+;qKD@6w5SDA*>%Ql_<`pP~PK-<wn36RE
zSN<)7YE^;aliu0rrkZXq!pE2gsK|#&FZ2KYy$$($nQ!9I8i>ePE+3drFy8$0qc-rc
z(ygUG88;aRg@^w-x!lC=RbI|BwJ{M4S@pPoujW9}wQXWTvag5m?CkQ{SrOECy*)Az
z#RV33Vu8lv$blSnx+KvgvBIDr&<j;?T5nw4F9c0fezuOXoWrYEHTk-?+%QRgq$&AQ
zu^8`xuTLafw=6Gj1g>_Q1+d{gKfN+X_+RiHicQI(c?7#KLCjyayA}hssciNKGVk8G
zBqx6XgKzeGuWE#5II2~@>HNL46KUj=iHV5^d{Xukv$Oqa^74kO?2!Heo>kgA3y&fS
zGBe{`T|M`JO)Sbo$ZP-*+ChH)j^Qu@R0-i%zHcoH$KD6GdBRAJ;jJDpBLyYAvC=RC
z8iQin-MO&}LG4yENHqB&TUpr;b%J(F$o;#UixV}|wzl3&eZ3zijBBdC3IHB)Y_+c6
zm#P3phEz7V5Gw%DaTo+I4sveLk&(?#xq6C?M*gg?r|#l@_KcH}(HSkj>_U}fk|tH*
zc+O2h0n<A%5zC{k+2$IQ>(D%si-+DLA=$sR_l{ChG8)2YfomDE1hx%#A3PY#R^yvX
zs(>6aWo1!CMfQn4nwvKpgWPEToeeQfVrtN1B<6%>8gT)4M0@^0Vc{xjF?4OosZ`z0
ztpso-$s#l<=|3Lsj~@9EFsGB;F`?t;{*-jq7J0ojY!S>vb@WpA*G3`c0WxS8hwmmr
zuLgx^zD}n`OUNS+k1g~KoKI%-_7rSvHa)-T0X2CRQdM1(DGim-V^Y#kk}12!{l;l>
z12#_1Sa<1mFevmeKHI8q_Qb0gFf)<pNDWMbz&NVn)rdj!qn)MUs_{!lx*s)$+6P_T
z7FsY%W~R%udc$A_luH28vbDXDQ-AaOn8chrP+q6%Eivi+Mq2r5oL8RmoOmIt!+P}*
zc57;>3U5qqIE;m)KDVBjxV}#!QB$YBKgs9*@5aP8U4dXPc5IS#VB@vmXSuk%j`Am^
zRoSU9nY_mZqUWorS60)I4#ad>&78Y1`c07+4@U#h+6C^xJ}C9RHdC*+X#v<SuvQc9
zyyoLmR#6eVbbz+quTWyIsiyX-I#LNKe_}L_A<-`pJ;m&O_y|OP;JLxP9R~q`)+-C9
z5EP+zG|}mxtUT&r%x%(9?e0s$X|s3GR6uR1*Z+X&Blb35gAbwkVX7({dDLsi!(2pb
z>DKm_Ey>sSaB<fve@E`|lccV%eK&YlMgN#H;?w%($ZC%5s@|W2V1gwj*U8xp&Ht(Q
z(m>8>FkPoop|wh>MWCIbtu4e~v2!7{G-_#hs+?*)tE<2HlITusj(4!Iumo4&&ds%Q
ztgWRjm_mLuBCrxE%~F&DL?UniRV~nisW$`4h7v5gzJY-^a&kdUJLbD#vig0Qv0LBk
z1dsMi=Uz0owXNx>TaBLE>gXf~x<c!*0Tx(F;bEfpdFW|qya{&95jTr1^?&U}<}=gN
ze;-|HU1s5IefOY@)0TBN-j+qaXkkGoRiWe~PQo?uXwI0{)2zd86@zp`R&uA6y^+y8
zJ8>*he@Rk7cQ@p-b9_o_YK#Z$F180-v$trvkfV5|RyxMrZMmaEO!|vovs)L|t0Apv
z)nGMa*pk(Hq9a1Vd~ao}8N2?4_Ajpo&4n=!8oY_cf9Vd_Ao|680o&wJ<=NBBG0^7^
zmyStO2ZPb*%cs}F?uT}*BemVzDueCWuICxASJpVYnUFl-l4ie$s2i&|GFjhjnx)=(
z{Oe+_Cw+I{3cuL=S0;ql*@`Y?yJHY@n^ZqkEch_?xi!4dgq?^>uVqu6d;r<t8*cL9
z{4zW9UP-|2NXZ4L7WF+R=Bu=P5@ElwN!C!lDPsj|Bry@2cHf<)@ya-7q&bSM;DeE>
zcDb%cok~2AZW0&N@F`10vK1&Q?&uE$vc3veowY}CPaBA7+F~h%=0D&zcr9Y^Oq#$}
zQ^(wvw#SRT#BQEeySL10eUY&{v4G8COe~61)@&HO`3(ol18KVFfp7Ns=%J(?JMWSB
zOa8Hk7yGPJw4~-`L3?{%nVxyM3@-p@x-!D+fG}DtPP#r?7M^F0X-h#NGwAwgX$c${
z+ydgid^ut9|B{$!`|jOUoS`CP&~<X&ylF~ChKlGNE+PTzZ@V3n2&U%1%4~<N8B|zV
zmP;eL?Q2{RTG$M&5<kc;0Q#rOFUYn&oYMU8;m)vEEQSY-h*Id>>}>Z9`}H+0J~#9*
zHajh7r2q_<a&}$21xbyq!(qmQg|Y$yZlikZV-68o)Ik{^fOpC1OTxiz|1%qdus<n2
zQECrZOzU0a3F?AMK=&CcPf!y^&>7&qUEN>j=*X(_oR1pKWnkdDj;V=RK-8(qE&ZE<
zoLrDgB$B}!NrFdb8qH*f>uu1VHC$b&P=pu-M~Vi~`$g7`j~&k;$ZhQ7c0hVd%TJfA
z%dOZ&DLdx-D(#DmiPFD$<BZg?{7bgyq-G0O0TW&ob%pK$X2OHR!-k`U7l|{fRrRj7
z@Yn>+=5|8mG89co2)VjN!&#(0MV-agdlv8OjMkLOttzI;<D!b}1gOVW74NK*)6t1%
z-Ru=XgmW4rJ2Mygr^P()fqmDZU~)8|J`m7r()rN}K<ZgetJ}6s0pa<2nzl0oYQJce
z-;;~_d_5#!KTs_baEz17R0KTVTnOAeJ<bw4=Us9G@5TubahRri+YmNA9N7PS`>Wp-
z8`Q&ACFZ`)uGkI@@C*f;;^EmGY4NPh-*-s|v%wU+9s7PtN~+Ol;b3j-s)uHCXjg}D
zsm7)sWW^c{SIWv4)x>}GAFFayeNV!o)uVItrAv5zVZf%>BM_2mCkBJIr?SO)SXnjN
zM%eWGGj5}!M{wyQ{%b96O8a}69iOlrb;Mu+#0i6egm~xJt84mb0JjccQ9q$DyMw2m
z`sSC<D(qd+-@iAe&@*&FAgD}h7y&!GBIX0mn40h)IYR`5QE~$#Q@M=2qiO>BE&ZNv
znwOB&^T@UrOG;(7G!DC?sg`LFDJuD<27A_mK%hZ@du;5*%LIOsXkmj(HAcNKIffah
z%mMc9;*@LbD=irG6EZ#BiMyM$4M|qH-CRfyk5UOv+yu4xJwpzi2|XQ+H=Y<4gzpLq
zY_|?>uBPRvOfQ7ILu@ZB+%LSYSEUZwqCdqvg@b6=EVr;7FxwfuDNch%%fQ-m)UM}j
z`j;<kmIemw65)95s+<m6JE`Y5l$4Z-td%kJhZ-#MN6jW1)iDLjeeVkLVvpRs2^5Q#
zCAR8sp575!6sh}&SKcQ5nU646@J+k)n>Sw!`}#{TD;^q@<i$;YnI!f1_t)=9-kfU<
z2a9(L#7Wg4AJdB-SC^}U50YE*excr)w_2Wh{k935$@(%>frjulFkg_}>`0-=NICI6
z_F|WREK5L>CYKe0hMJ1XL#0Kf!VV@4lJgMJMMc%LLIs(s(9-guRy?(>tVDuRIvot0
zlf-VjxzPYh`*v4RF^&siQ)zRW2<bri1L-!~l+sDr!)rsc^Z+m*Y1`^|TXlxJliIxS
zIgV-%w+X@swsBkH7G956J8k)#9`6Moy{53ZPjAMGqqtCHeZ05Yh?SJs9)f@nBVFB4
zeqr2BYVl}l_N`T=BIzzkJ<NcV(F*haU;W`x1T>i{WplI5!8kU~e@aWFKp-j+l!4D*
z^o$qiI~o~9m6yL?A5$*r&wQ8jon~NA0elLAQXT`3G{7{1`*d9X^U+Z&00bbQggGrL
z0S!9wkgB4hhjMS6JEUJF!O|9!6wcGKg}a~ytL%tk&vI?JHH9z%WrvK%p@v&$<6(cJ
zf5=qKL|?1YNMdp4{t1im$j-({{a~t5MHcC*fH%R~pz@qS!0uB2abJ3;QTwRO4GfF~
zo%Z43;r4ZgG7q<um>3eu35tU2da&+aHQp+F<7_S#P)$S5LH^{4M%Qckz2W0Ntqe-E
z7+w>T=e-8+&UdYN$k^CmXaiL}2S@mxzQM;97@s$qM%{%Og&h#B_WQiU4Tr*{E2aCM
zJOfF11OqAy0FK}{x;i%6INbbe;OA>)<;axhqN1&vSPh~P&l^E!9)&9XHsF=XmS=8M
z8JN!}IXGX#pm?<~+0z~4Uy+bNHgEZKx2nP_z)NR&;U|u&7;khCz@b89+~wzYh_=GE
zK*T;{Ovg*yR(QGS%EwrBR)6X$hiy4&zPN*LykM%(7;5;l`ejwRQ=QW?GX*#+L$#{z
z!FWp@i&QN0wP2b3pa)nu?OmaM0AoIOc6Ni(S4%x9qL_0@<A2YzEm?)?SLYk6V-<P+
z(&PjcCXO{qRh4Z^y=w_ZP{ArMrTXpe_?oSSnNGWzHf1Ogb~~5lxVqwV0TcpU>f&X{
z5odBZ`k9_?kb0gotbIl1`jJCUer~+GYv61?WjDAcKO!U3)gM-a=@uNy7`J>SWMwtQ
z2S1o{SIml+E9NQ)*ml+fT+PH<*YiD2U}-@oxR*~$;F_VZx<TUmdw%!$+%YuGLmxT2
z<6vWFPuuUMVzrSm%KRAZ^gl&3;q2E0Z@qph7WSs@j4`Pl_%_IHH*cjv!&&s>W?sSJ
z!JItbB24e-#rc6v^-!TEhy!1Un{p&+DvcIaXpc-9JVQCQcR0;FP)?NLFN(>WH^Kym
z<|*>6@yjM-mEd^)Od<d0P^p7@MFWgAAZdqo*;+$GleO#ttImhjDU+B3@o0)9GON(*
z`?^nMwCG$Kf45-cov%m98HCCO5}3pT>LVOrRx}aq`1g%!f+FI&=h>;^7RhE6s`#E)
z($IgffYKUCSG?bsPSB6`?3My_UwF;GmzPSDqY=6eRwNV?-~9Z*#bPv&x*tXpL}eCQ
zsk|to*RTx-28K-bLPA3+p=U(cDeIA7-%mE)U{bL$IY-`dI5lf%z=Eir`4zMCF)l3W
zZZIM3Ua)Ez=roA(3l0{nGbVTrn^>p#l1IgBGD^zDy5s%1IYaBx*#0CN&$%7o#}PAF
zFQoXBYqvzy*o$im3i>KXVXpDK5fO=h29#_-q}K<;&Wm~tw|dH~*36=%YF@Q}IlfjZ
z`TcGJLblI*UN<N#Oi#Q2`vY(TAvRnw8ZGawTv6vXT{#HJQ5WzbsKLHYQJ)vIb&YQa
zFJ$c5(G2>1R;P@~@_G!yrAn%(&jC0@L{fb|pPfIm^+$D-wU3FrM|DDo1)HHth5g(0
zI1dk@6t0Curr7@PdCT$fGrzxVJQWRR;Mu?Sr{@pABxksE^5Dg#MEaA*`}{x$08lsP
z^86IPXE?LI(6m6|Wru!;-6mPITSR57$RZY+40iY;$RMCtj<}L|V0-=g^<&ptxbSvK
zF~Z1ND`N--GC0PW{CpAw=3NpI-BF*>^{Olyb749Q6PESyBFCNN9E+A&qHD8vaf5J|
z`*4)QI@4_!ZD}v&%?Cle9=&OO7BHjWs)~#D+^$7k1MIVS#mWY@CPXZnk;N0-xgdzm
zjz0z8nnURxa#U3Q)GURx#O&;iW<0u-x?Gj(aC$TcXJqFrR*S_-zRHgq%$oyvb)aD+
z;`3J<^Lg{9SdcrEsN*!M4#a_h<*!pyQ_MgMc_L#g@E)FtkvTLdcGS!ASyxh`%&vN%
zfHg-G8?P)AlhEe{j93fx)+MI;ioh)uEAyp7_2V{j-)ISEsOhAPre<eFcZu2a9ZwcE
zbK-u%oC(MtX21r?MOZ+!Hhj5gk<n%|wjZ4NS5`c<KIE+G9G?ts1H+`-^cpH^_hk$7
zB}F+*7=y~o$||o^UVx!Kh{o9ZwOe>OX~+YNKk(22?Ny>nRjmLi1BvB$2clkMHLEK5
z_g4l=SF4o173z(8_}!o}G~DZ>nqBTK(+2yFoS2*SWV0`nigjWNgK#klb$wsVMQ}LM
z4wu*{Z8zB3%Hgj1JYZ`YMSeQILQEVv#&w+E!@`+;KH=uQ%yuZO&>((aP<36}>{VUA
zAxEJk>qkvBO`Q)G5XV?AjGH6xSS)Hv_&oc(-V+ZBgN`!s^=qXV*6cCCAJ<N7(&RG}
zG0H5~K7RNy-kw0B1cTOZ(4m!yMoINuwpg4xfO5hko_7Q~FDyJlj=_wDQq15pS~L%j
z6=J>LU%uBtVQw_o=OGo7sa!TNXc<B8pjAXG2K{|shWwE%Bb2N@g}8>4UM6ePB3Y{%
z{gl(>UdA!wu@R&Z&rMJAwA;NE35s+LGt<-GgMY6S-KweC61&F21f`L5%J3MM-SD6l
z<VC7^%uyTW>NLiJt9z%rhR1OJP5-AsmS4M*JL4djO~}1MuRb+2Pb(xOjDergtw*)Y
zs1^EJQ7;kq+Yg5NYCnQErY3Q!i_6bKVx>CL$LYhC&zX#Hb{D&ccJ<lx9asMI@Gc*X
z`CYz5E18oL*2EAvG-LWE09m*G>rO(f@d4PE!^D4p1H-g~Wdl*TM=I!RMs=KK_5c8O
zfS$(<1*&$T9RZw$lWzoq$e{^pLnj^)e6za9aYzzg?pE5`)HKD-^@%-RIj=o9N=q=@
zhtKUcC7Uy4My$Mmq~!Pc*!x2fQM?NBb&=c-h+l<<!6&qVJc4gEO{)qmF6~gs&h%0o
zj@U@ZL$;Tm9*%<{kK@@hY9&6QrQ><-4q?G#8XIL15fSuRQq2n1fT&_R#eqzRvfQxx
zU%#Lx2t4@~K*hwwL{9EL_G+z3&(`^p6DP)3y~DT*)c(>zoJn+O8|5}O+8-9_{KO@v
zrr1XmcI)CsfB`~|A?!X{ba#?}cwBHP1F8e$0@CT0{VucDMwbk`YS6ER!86k};XsVM
z17i_$?RLk*dr*K=TG7PNJEk1tP|D?UL$OQoTxWidnD$gT)qbPpbSS8FUn<akjWapT
zk0qT(uzviD)c8lKzMuFw1`Yml0ltj=lxd28&-_d9W;w=|<js40^~@O0u8es5@~}UD
zQ5v{Gi~txxWQFbSvW@lHM`O|>f1{D&62oR@Vd`cnW9?fwl6l|&bo_hr&vSOta}}1k
zWPLgX|Gji6_3B@w{@TU={(PJqv9J7fo&duKyBn;3|MZg6`lE?|zr0lG{x>ijet+=b
zf9;FMvTm?e+8^@rz`6rZh(8}EJ&B6Tf@*4N=VvI<oHjz5C@9V-*Y`j^dSQg{=OZih
zEk&%z2vwq#UaMt6GERWoW@`or7yl@NmtM-I9Wk=P#tJ4$AooPaP+A+Ske8G+T^Z;^
zMMVYsqy3Ey7@zgU3HnM)cdx8+bWtU40nu%&+$IiMf&^LjLpI39fdQ?LuP+I+!5gr{
zs;8H^gPlIs;XVu-C=^*lL@W50XkA@hRV#l2Zh77$PWt!iRMV!MKv@JyOXb#^e#-Ha
zgWw#4diAP{i_1042gOFC*9ZwY5P?})s+w8vY&Iq){m6vDf#w&jl+)B&<%YYu&s4Ma
zH4stWzrO&~HxLef0Ou>P76Mx?t<+ZV+o`B<fW`3QMUQT0ow^lp&aT{^us+yW45EpW
zKQ)HwCU_npmOsv~aZ3xQ;Yveup$omIquA?v1O!4QPq--O<^i;Xi4<74{$;sddVdw*
z<IvRYh0f{ADA#CIRx(pl2_R9D&uXoNe{j+P_AVe@%(bgpPgGY1(O^&wT)2Y4oy^J_
z|M>e`4G;sMwg)?^=#UWWy%k-y5(1G~S9f=-m4$4R$&)B9yXW;bf_i$X;OihANfC$t
zLg)8bMHG<D^I<3{`u&@W%T*LdzvKZKQO!^x!>zwV!EJM1zB;9%9C&t1qiJbhb6$Pu
zSe8v=@dWGriq*LE_g}jseTcb`D+}~TF484-nB+y2Mm!|cC*_EsRjszL!J0&8-}VG%
z!xjyV%5yZJcTJX_TZ##Er&(nUnrlHVA}XeW>{|&<Fxpy}B;_aLKf<a3*ABZVx7P(H
zi|6;@g*myY<D!z=B2DqEf$|&G8G?nC)dg9or>UpaXS>kxh?f_#WZPe`6vbc1adG8O
z&IQXLXc$uzBqU7g?Z!$i?I6zzOx9lWk%ILrv*8dV3i%0eLwBY{2xKqK-`~^{6SW{X
zwHy|V(jn08Zr!5xz<IAcs#u^mJ;m_+#SUq2*1H@Jpp{Fs@nS$9beo8Epu`-Hd9AUv
zRk_?cB`~nS+nbn-fzSQ6YIb#GH=!%5!F+$_VfWN8Up1M;252;sDgYYaf(zYgl5*eM
zi`2;x4mLs}gHte0<1L)gp!p$Y(nH75Y6)S|Y_ce1@sP)*wOH?nAtk=Q8hQI`MiMsw
z#SW9T^_j|%I^bkvpnj$XUQ038w^^E6T2?yEO}q&h`m-V<narh*_YBFsNRajGGE!1o
zU{*>!hRIJD_29v+Q9Mp-i}7PWE1908`Zdqcrin9YDOVtJUNGWispT5#>t#)-g<eEe
z**9<}i!cd;nu6ZkR$&#?lA9Yfq<?3LXI!#GCamlT=w%@h#6V2!HVv&(VT8aO6s27-
zxcH5YIiu5&2`=Ob!t-bd;SxR*lWedT-*3DPeO7;_vR2l5F}V28G)lvqfm}4~jVIPq
zk&o&(Jg8s?=*t>^>0M^Ie6jY+5|3^Zr&H?1TtOwv%=BM4HblctCL7KxJDvjP!J&b7
zWyP$<!-b^JpTn3Tv|C9<<-su6N_*mNZ+qfGIu~MX=XYD%0~RCj65Rp4MKFyLY->4s
zy=XKvG%Q6a*y#{J_s!=Mfz{&F!pcZ6+6%<&4yW4ZG@zfYfj-A-&0;ea&#*R;=IhtD
z07pRX*A+vE^D5PB?xU8^WH^skF5{#)in)#xQUwNtn5w95E29-}RaAVWQ__@-camR$
z&0?DMLbl=Z9$+pn4EqA6c>ar0nnyAOBM5Y&=gFe_=74R(3z!<?8*S+B<BmzpOwWMN
zsdFRY5ipIP>vWpI48`DQA#&6WKw>Zm5K)4cKk9*u&TvERz8_tg4e&`Ll!4qs`r<_Z
z)hY+O1j>=Fw*I<fYqYX3SC#EyuJ(QuJ$(+q#a4D}Hai=VSy2^i;dIKmE!}n7W#Zp_
z<~wTmEUd+p%XsWJzUcv`HQrb$4W75aGN~vp2kac)-JBlvxY{3|oPCM7dE0IEP37Lq
z(n9`$zhZ?R(=nA~53A-DcAlK!!a<gDMZ@2{I68TXja9EFImc$Zf!iU%!JfAB`Po>-
z@#>I*Bt`}S2covZj^9dhb92*Sdu|o@^i)W$8wn`bo;_KrS?Skcj*_feb(Sbf2%C2)
z{QC;@A>G|7Xa4IQGy(x1A~DzU@)76jn0ebqJ;{%j7fZ^Nif9oC;*v5U@pe|rC5!Vj
zT1L+*GO)~89qRp>atY0}&}g(JXmxcJ5*h{V)RyT~E4Nk#8HFeonAptco~;H{ymp<2
z$U&I@sa7E~L^tI}KmZ=b?J$=n{|S8A)IGZV2Ozu}l$vbp2xgWd`-6?|1(tSmBz!Rq
zkQ4Y`+4IUXs*ZMG6wy0=|0S*h@mQfD`7<f1Gu-|Ua8_JC7ebl@6x|U7nwkkfe3f`a
zMWvUUHVkBn9Sn3%E>3`4$BG>3>YoDpl9qyEqhh7VV$%;O<E3<p*&2&elB5Evtd2Rr
zDhnW$K+n-_ZYUlo24*O1iA%HQn|{7@u6GNG4RyC+eAQM7=g!vFRtm%8$5X)91oA2e
z_?xGP=B<yE(L8+k%`YM%JiKVVni~l3qjsEx3rkX0u};atuDs@|Xb9M}QQnCawT_Z(
z)NsH3Hg^DMIYG1vwp%-mWS+r0=8FI<^H>gH+p>de<I3^~IW=|JOpfHI+s;T57UR+M
zm>A@LadZ{mzc=t0et~9t4V@_4s=c!O#D2Uv7zphYgaz68KdPwy)($6|smLq5h@lQR
zU#Ajyq1r7};hp*#F?I4EEI|JgS4o^yw<lD=&+F$I0!oA2w4r>|(#jYxg%kA+IGs`u
zPrT6Snpw8ave}*!*>q588kB$Yrc;&~+V_Eaki5%p7|}sM!eju*;sL9Hv*0aTeX^u_
z=v0<#^I#B{Vw)HQxOq~m=6D9INR+-pC8(9$yGuyee4@^}c+Hhy=f@SAGtGHZPMf1x
z1;z@YQ<VU0{JUVyCb#r67C^ap%=-!V0Me9B5_LFV<I=n=vY90g$=owDdKO@17_Fp^
zg$2Wi<=cIb%BIco!dM?h<%8w?=9U;3gi3^H^ksior(iu#yZoFYaAAH5+^SyNyh0++
zz>|(OjUogfkJ$6hb;{G)p+PGR@oO-*$<z{U1!v1Givo?!uBYDNxtM!a{?1XtK!bk@
ztl=u=iev1^o4i#PQuU|iXDb1E9X~$paPYUne3O6$`7BVsH<ihD=gr;-h3zhdVIx!~
zFBmwj7cTuHHXtSIFJE^MWk;UG!(_V1Sk=O;I3;DVK>rLvJww1d2nWtf{=j?>H>~Lf
z(GOW|$u|fF^!4;M(2Xf5*c^@wOiXTI@aw#M{B&>pn_HzXv?{UR3Cn)t$I58z{8qVN
zJ1QlSy^~>GsWkUM*4B1yu{W(9UUi-H-zvAHD|dF#+25#5W|8-N`HCZYGc+{xFk}AQ
z?Hv!>r8&S|9?ZuR8eou5vm#HfZWn<TZpOulM<gjzOhW_vls(}6?%F6vr19ouhpznm
zg0U*QUqOScPTZd!$38YdIl5|=NRs$)VpxthwjM(V>nI-&JAjRcp6LgX3#Aw#7{@LI
z=cI#X-s&TYk1%&I5izkaa|pA;(y9CYpdg&w)_vfQ`ujZW{M#dEYRkO)Z6}Grr?h2a
zVFm^|yuPODzXSzdOK7Ujb2DjZ4l5Lr0B98F9@6%Qvf^YcV_I#xHgX8_K=Jm-6$MO?
zo%~>h;2V7wqmf(yF;sS9($n+J=l5Wz0_ML=`Fs$K68HgvHZ4LL%m~?<M8V~9QD5ok
z_TFHgHpueRO{W`p5Y8=tXVKUD+h%+2a4~Be-DWF^ZM+Kwb{%c*c3{xb&#(T(?C)Ux
z^|!VLR!F!iHRi2_Gxx@AKABJV2es>Se)6anYCjhAZNBSvCvLp|#_K6V`RrNk35_Db
z3kco8**0Gw6{=F*_sl|7hbsJnS<3qo0uPTyXL^1${7lx@dCmj&q#@iz2KNM`mw=R?
z=(iL0B4&TTw>cO9lia-Zce$@R-{SL=+hcPHoe98EKAIZY`w8W`@R^wG%s|Ufh~ZHA
zBuG+rtZ{a>hIV7|SpbX)qE)qJoN(hKcLyBdyxRW{D&jOA>w$9H180HUVekkt*$6BF
zZvvwD)ZS`1j2|EshSDKNBoLz7Y!0$@^r`_Xmo1-H$kXb{RJL0g*o65)LcDsthb&~@
z>UTG^^z^v&?Jabkwndgfv2_a#Es<_dcb&^tMrX>)4}4LeLMa7ii`9O88N#NxM0D1E
zJS`)Ge_RVB^%E<D=D;zjG@BJthy+pv@RVV4=i=s;E1i}Lq>z~P#w_LS^NmRqD?2_u
zK3l{sywdRsJGzGtoe;_pQH8j2+r(^%S*N4gZ&zj!Xn}`H`7d-HkVJ1l20_%3a@6(X
zT|$M;w*sSy#jRm%^OMf*FUrB9XB(&z7~YB?1`7`fJF-3oEKV}~79K4FXz`*ef~ii~
z!GI}(!_Mb+dwaic#nB2FKFs*vI}az0lb#m?_KRL$xdLhy>hzECnwj``7==n7Zp38m
z_kH&d7Jjx?{`i-G<4aiTwNV>p2OX1KW&2WUyQ#f9M;+sr&CSjC);j<0;Tz6Ww^<bn
zUqB#h7^Aikw2@GFb;j`h60V<*#-bV+7?4cxY_7K1#<f`ZFq*E=?XeG4TbcPhGh<#K
z1X-C_T5{NIX+TQ`xxaPD6ye#MSPjHH$Z|nn6_}EQFw|%0_tUocDi)iZfx{=XrwdB6
zDbh(D&!J8>_`DYqt@_+*?c^3-xq#Pw6*)|Q@-hf08Xg+5S{;hKCK+K%P>Vsx>=IQA
z<#q9}v>R``PlF7pfENLyR=J;Fmk;r9u`xc1V+FIJh+bch$s!Ls7nid%KF;pos6$|K
zvQ9mnXzr>Ghf!^@rf_iR{ZItLq^Dc|f}5OZ{ggnSrT^^osHiA+Y<03kbGVO$qyFnJ
zuh4EV@(^*53Q9^*h>_;KhEDL@vT4VgkU7^A+XSp4it^O?*HeB%RiRL%HF{;=b>|uG
zvxq9o=Dsgew?s-2%ZSO7!x%m{`I&+DM`b$t`h)L=2dpeuZKgDoJY!3YVM`X|lJ-^y
z(j}=IWDxxADyuQCvdRz1<1BUb_tP;m7b<h4LEi%I&Z-ql@)8msG&Nzpjq-cqs+5=o
zK1NYe3MYA>3Rq6?uBP$(_e2ROE$wg)G`F;9h>w8tVo|nEf1b84OmNKzG_<wz@{mEk
zl{~@0!E|inj~vt^{QarP$P~=5hKMmVfpCm};1K&!nki6|s-SWD8^x(xSWCMN&i#+Q
znQ4V`tKi6be}M%94Vh<jib%yQwvhzoZ%RC53Ic``HJ)2rTYHfo_1P<x*P$!R>&qK5
zTD;i3e4MgII08YTyHRDD@wiGF=XF(;0r$J_>T%bg%U(g%Ap+<M4Q(q#4g1nTbN9F8
zAf8ha00x|RF7LCgL@<cQWZzGEnR>vSBeJP`8&Zu8Y!*6dpq+qDk;8j|()L}U!PmsZ
zx#~|SA<@!pDJwkDM&H!x1fD+m=}W@nllv8VI1LSrcM1w-EXfmZ($m+G{2qa&9*i-h
zC(dCDOy$;R9RLF?v#fma^i1+qfO2$gjnVPp=!fFOt{H(%h2BI$gXlmZmXIlhH-ohh
z{45s5I@q3|ijznv(#aM6gbHb3@thMFr<}5P{u~jP>=TySCnf}L3jGCSny^(XavjfA
zDvNKv0e?+M_IkjB<Q+!=cAM4C!go12IrI}oWIsL;(T?Xf7#CPt_EMF2%!ngS25t@#
z<ifD+d}8$zz*0nQ6L4Ru8hj&bBr7goU%u#0iBmj07*MJ)k#^P4dT*fIF#)?v)oJmP
z*9lKBFj~6)uw9|F?_H1wu<YNb7wz(Y{(OV$zy7#-|KczI{fzTne7ip%d(8jUFMhe(
z)ZX6O-bnTAH(ipq(~oc8l8e86dxK*Hp40FT62GgF8vVuPDGL0O>UVQvvk)Cm%)>vb
z?$n__e8vgYZEC>VlG9;xL@R9hv;5OPOvCXtH~+qT!E({h7?p4yK67&nJWsf|B2%=$
zsa#EMQiQ3wz4dIefhUjV;zw0iUAug}I(oJxG%u2v-S<9sSE;f)OyvW{4>n@zMoTT0
z`-`GM#{(2LGezjU+4fgi^k#IfbGTPmKb#Zfg5iB<ogj{GiEXbQaKtYdbniDJ)u$)z
z8jB(|Ij)z9`9zjpz3%?J*R7VI|Es@HUpIXf<b9_+4zyk4^tQp>=KGwhE#A1$N8epf
zX}8yNGEx1<f)o%HeRwh_3RBZlw}Jeza?lAOBebfOu@OPgA}SRbj9PsdhZH~`5{|nj
z)ITB`db)agW+q}#XcY57(SKRGRV;$_aAPu#alTDurxG-FmBZ#%s4M^sNAMVb0&Yyd
z@sV%zbEBbv6p;d`<H##4L<*?m&rz>cMdo~Ht({eR3_@Nc?g9Pdrt`kjfSw(~B9e&h
z(o(JMC~~^btll<-nzJ_1?NMxOJPWdthPDF8j%Hua{^OD6X9a(pN2+;lz|CFXoNdON
zuRKM&RdrhkTGYIo^&k|0Zu1pt6KO5CTVOYkkXS@SMPWV)qfCMqIuq-T6%h^nr&(4@
zBVQ4Cgm`!l9=w{oAsq=yi08ID6o8rm(2n)gtIXu=BPvTvW1~X;fU=U3XH!P2qBLu*
z`S<1{OF~YBjTaGpYC+22&zt_xU?p#Xwu>>bHH1k$2uN6o2f2~Z9~I^q^w*`#Ly~-o
z7VyX5tT1I??2YT67W5s=7zhIa$?nQn_elEcnZq$#>xCpl?c}H2(+s=)rDKqJCLVM>
z;!rwvzJ9xNjD*`7#6#?V+v^qR?lEUM>4;YqoAHX7l9O-_DUS{mqSN}<Rmx1)2b+KN
z<nJ)z(e1BkX?LWXvW4T>TSrglc%$(i(eRTOfAxtBFwo1(Zp}2roc&xi(f$X0etGw#
z`ToQ{kY$=%e&4W{-ErmgUOKg>TP9pEXSsoStG}<4Hp#s`n!7h$))Q?^Wz5+PJ+{+Y
zfrgUw$LlyCB4L~78xG6y^Un$odJFSAAC5-Z73=HdMCi+UV5+#&=<Di3Eoc%Ov6YgV
zdZ8N*q9mhdrpLW|SQYLJ`>BLtXPSI_-h6xCw?Gg#;?`9<A%ii{m5x*@e`2c=LpDdr
z`NSDOhKBE}Cf6d%V0ef}XPu+a2wnM(UVex1E2RYBZHekE{DOJk1^=TbR2nj%zIxLL
zIRdgu`BJwt*3~!5YX5;4R)aX813$>`Dm<C`nKBK!#_=+3RTU)nYL7!_?P%G4$5TzN
zEG%t@euJ^?iA_%sAiR1N)6-*tVHrr?{`r|Ap)cX2*}>0xa~1h!dr7oy7j>4t5L`+g
z#&?OoNbhzJ)%FqhCW>dKNbNKcm6FRiN&j_sxOnLVpfiW!FR9k~cppQN;LY2&rgD-*
z6O)sJRaL@l;pF5=9Z#{jUKo$Pf2C3xVe?j6TAJS@5^@>BrCD_G7Xt!3#6C7jNyuyr
z%;uQYQz1-20h9kGFo8Ld{vwbd;ynf;M*u@X2p7<~kfs}GXk)oH%RBhp!kM|*I>Vr~
z25N50U>*pA1;1aH?KAH9A?UjnFe(w6>jgI#;A4M=xR^S(BWpVr9SKzk1wN~=6X_%(
z30@&yadmNFCB8ONs%bbnma5FLWZsaD51#xxM^%pJkLXyees|OWEFX|WK}lU<tMGyh
zErWnZ?K5Z!q3rze;~^K5p0SRG^+w0#HEtVt<Tuf7B&Sf+lRv><WND<M(CN&VG_a2?
zb{VK6r*n02z310tFX%!V>~Vt#3p;**OzGij$wt|v%#}}3!~ekoD65}q?Rstn;NAT^
zoHgw>ezEUfLO)YL-x!A3e{o4EBw&5|cpHtQSl(u3OGZv=DrM#oDXD*8pv}p^=AgMY
zl-<6#&AM-=H{|J5!Ma^gNQi-nOjc3REyW9Z>9xTkyAS8Dnwpwk6pDQjA1HJ5Z7VW=
zVcn6fDl5xGOY2k7=T>_ghWCZ<UqOq3&x1ILD9M8uVR<vdjG=<TE0)6FuiBAgD-33}
ze?bICMX976jNtNKUxZ1qYnxBxg#@0SWq*5DsYs2>${jf2mibHBno!7~y2eh-0ecP7
z449Z-s4Y_p9PS)?8r2CvS+qlt8|V;uoUT$*8mW1VdqmUVg)d4kh%f#HpDBL-*B6Qm
z#dE9n6}bkQh53aT2P}W7nOP0taRwgIh32-{^Q;xA9}{n8%h^2#nC39h>aeyPRL~Al
z(J&a>vFfAEFK*#M(Ion9r*Suo8?|+HkSS-ZtJ|2e53;`X^{Q%z%i_my73JleZLy`L
zLm+aS0YTu*%*WWcUK!aELUVEDM<76U-h&{TJ#$mqFgH?WIZ<Wrln}r!UEGlIpEENv
z=hu{htG?sN!G(ZE$B9zxGFWcPnWYU`>H*8%ji&0hP3u=es?Sqj>EjyM_m`FADzON$
z>TtpI20&sE5|{KhH8)FNt7&U}bs<CaARHJR2Ec9_EZ49-Ul@&ivBR>o^j=uVa_Cxa
zFiOiz>`RucyY9P|ccF@e?ybrE$xbS*a^;RzHHN#`?KlA++GE;s*UzSy1wFz%ldhD%
zC2tNtTpM?8^r0@1dcMph9rEjj(41}-ZE`2G{QifSgZ^8=8uhmX^J$Jav9TGV{jUBQ
zpgB1bUV&TJ*wCl7JeRRc*fSr2ZL;4s3fsyBw-MBBNt@X*qy`)okm>#rkLDQ-kOZcB
zM!!;)QcTCna!`vk6AxS6Ck!jM-5oc4JzS6{^j1txR(7{)PPGg{!&KmLjR;wZgsn}h
z85GYeTd)xf^FemCR|u??1lGhEIWF71ff5Jc<JtrM-<L6LySG#$gHFbp>Hjn@I4GcZ
zZflkrMp-hf+2>9{LAdjZ_k(`?_>k6@fmj>h-xRd9ZTRGHy``l!MTMWgL~>dnoY`=#
zrvyvf9ayu#Z;a-~X%)_O97paU(@HTcAt2P~`bZ)JmuF{OgG5Me-sF;O8r}P13J@I|
z8HqJY>TP;GNVrQOVL(Y_^J?et@uZcVYvsrtkK1>SEL@vn+i`{7=id7*+TOj^{Dm@b
zB===3H|fKl*cz`L*<~aS99cfMQh)H_dB$$Y_xelcw>r*0W#>lLbd`A+C<GW8J!wml
z)I=iLEn%b<LS;7fvk}_H3*f2eSA9L8H$7(vInI|ju}*Qq^O@B0Su;J)%v2+yqQ;7f
z7|Ve6jRXX+Fd`@@3{vt!8~u1afQk!-3VA<%Wb=E@1z4G|$9zW^85zmVIqu&f=0J{s
zwZyd@lKZE#%|n*@AtbVGviC<;R#!h?L5VCyB&j);?XBAGFSg3G0PT8xq>}W>6N{x8
z%EGycm{ZX(=2;_k^=>s_g@BMX;F-Zdex(MvCvKUv(8tj>b~?H$VR=FFq%3U}017$H
zk6K*G#JqK5#y<{hOjg+LK+vYKey5ypnvau{6HtQ_X~MyABrs3sW<}HvHrPw~ojE3Y
zffiNNG`!TXxe!ou=m$3=gtr{8Ufs^OrAM{l?-bY(t(ob+QbOrkD}{>In%jbj)1*UR
zqUl2V+0TZ+KkuWDxAj`^$;vg^8#iwVS8UH1b#*@{=})@Y87|!jU|e;Sz5BhRrPb?W
z>KD&uC%}q4zI^HU-i?=WbVLKCKuz1T14f-Ux@w(mt*r%+(ZZQlXgqGZKIU9u$Ay0Y
zfpCd>RPsh19={$*9$_$r>IsDMgI;j{J*M1k+1WWWaS3Q~TA;3yG8^&)<CoO<P7Y}`
z>Cr?fuZ4m7oSp)0v1n*ZL9QvAqCYsuZe!%U<qx=YB4DJtyk=&(5fSg%Xu7+)DB|zn
zW-fF@`vh&p`ALULB)`hCVQYWP%q;fmRb@K9Kwh_hNYfpEKkAZ<cEM=%$$g$ghuGX~
zr|g*`C%y`S7(@S)%%j84SIUR4RP!w8zL9BOI`_Q`r9EA>1D1eTXp+Q*0MY(1WBkV}
z6ms#X*RBf-3pmtr-b8GW6YSs89<w<)T6S5M;~q+~;!321H5I?-ri_$}<WhXpEcum$
zu;;p;lYXsbC=~^k$_WeWw`4!kG*sF&iOF5KiQF%N$pK^FD?z2D*BP9_)dBJ8=`wAK
zP>Fp0>@oMdr?|&(HGgHHrr_yu+3+6>>_q?IIA2RvwigES7OO*Cpfcy@ukXxR29U&;
zh>hUh*3o2L?C~oASHWIAW?f#XfWgu-GC4630W*y4c{(C4+mO{q)YQ$LIm77+jL&Fj
zVC2GPIMf64+vGE7WCVSPJiWZKb8^&-Q>t_HgWY|7*P$CvZpUX#Ou=nm`JJbKB;_#M
z)C(CkalFHYbAV4y9eyTuQoRVEuBkn2A*mZGjVvy{TF2w^`X^d0Bh^@OYT;kaegDSk
z6Bz#M?kLj|lE7pzOChgqY|Lo5kS2d&a<asD{L|T~GAyqssDy2IiUARZ;XEup$SBVV
z2W1!|J$)y@cB2tnHww+pPF(l)hyi7M?FlpT`4yj|`1<dp?#3g<++<{$CkJ0wn7BF1
z60^!st{A~^*PuHQV|}b*7(%U3F3Hvm{EP>NG5Yx(Y+M}N;ClySi#Y$iMXdX!ZGw%9
z>*nSLA)^i85i);rLwlZk<p}}M8(?VlK3C&=Mg|5AjGKGLD)XwU9D&B%&>%22Hnw8;
z5FAueJ{1?UTD9BluUR41ICMH*QY|kR-9Sf=ugGzLf3o`VUWP#Z_Om5`0f+mRKy%;o
zXg@PF)=t|^im-63PCd!xDv!e?`XyNqu)cmXb)C-fIMnb@i+x6EZ*$Gv-CcWo?%Ixt
z#mduX&&rXfifvSehK7YN2L*wwmnN6E5(_UDKhBCWV;N#~YI<7u@QtnQ5k!fV283{J
z?k?ZK!Xhnv_VD3LLbD^t9*Q^7X!O(E87Q~Whn-MoK`=@gi#*8)(75|AbQS=yrNpIV
z<G*sE`Pv25d>ai;LZ|U3EOe@`@0)L4<Yjo%q1>jXPCGr`f54u9es)@R{q~AK;6{UP
zT^LPIi;W*sKYH{kP-dYchR@6l#^mDQo}CEHS)BntJ3ch-+&uHwug^T6ux`G#we6e(
zN~}gDK9gR&576T(loS;Y4y>6Bhh`vbhnU@BXKxSU!JblrB0jJVcC3@9p$a8_Q>>F0
zsZ+Z4HeZECOW9kitnOAq9rEp)#D@<*F8qjylq5iw7fM;G<`G|Dc?|PiegOf*;?!^R
zW)a1nUc-$g*@qm%6gSb(&ib@bmb!sMXgV!mAgZOMl@c5ca2Rmfi%Uwn)LX*}023Y>
z9;V;e_q&7D*wPjlh^q}3f^_#ve}CkA7f_uI%<1E|0?m)X?sMWpmBt@}B%sQW0z}5m
zUDK6IQ&tENCs3#>?DnJL)RX*%;rrRy+H%_;d@=I?@-1W!cx6E5TpTyvvv+SAZ;(9&
z#ysHNKs=!u<bx6lk47=#`}gl5AqT+AK}EH>cBZ$JfPdNy<g-f$q7>S}cc$0Nrr|dy
z@l}UBE^BMIAQQejPdhpyBI0Ow*?6=xv?2jwed!aw@ybIu=;{y|i-oCa;=sq25K|bx
z02XkcL1P0hWkA*wmnMSC&Zx+UD_Q*Q+s4D~c|AS7pcS>T@)AhDea-~HNPB;Gw^E52
z8;T<n<;@(I01@C4Ot4Ts)6jTgS_WdxgQT0;R%{t^kMD(*gi5v;`-O*xM@7++lmC*r
zXBYy*E=b%o!>Q2uM}G@0+W5iz5dsz&7|=HYFGwr1LRI=XUl&8!N|<D+Pv62lK6rb#
z^X<LZTB@xsz@@8IW3sceHU90{j;mx;L_iki`DT<&7!+pooS(%ATS``zhG+DlkdV+D
zmNVj}Eh&XTn-u)Pi@!`4;1?Ab>F<6aB%WBuWW9t8EoH*tBb^52ppz=a3#yn*w<{OV
zwH<&i2~C%)s08|HoQ~U+OvLl1kjPRX{I)&zd|_cR8SUnzs>Q`Q%6cg^Ao+_)p6ycS
zP2Ibyei!eI9^ZM)SJ5}dD&opA@4mppajH6|rMgt*`t8R{XGM>kw~Hi?r%|uozez9o
z*7WX8)4O+1P_SWP@fxWhwd9Nh<czcsVrq}1`4r222(${}9v@&rHL4f$j9ivah?9nq
zgOP)d7V;h$$?2+`E>?nME$?Tkd$IREKHg%u$KdzzcPsp<^}~rv$za&Si}u*>FQk7-
zhUfoZT<=8cdYo#6H%4Xjy+cZlz(Y2Ij|@+9naZeG%p?u}aSf`gL?80-M5k!|T}0?7
z!?n470&ee%BMzcc^oVDc*L1-CvzSPl|1T{4r(TD9KnxQT;UF6{*Lqge$G|ebcj_!I
zFIf62dH8aT_J6*}{n3Pzs@i(6Hn`7*>S2Au7AX4wj}bl-fS6zY1x;U-{b8-Le`F-_
zy?as;64litbMJP96T?nF|H(^$RYc;ciUMh(Ka56gz3>^M${08~Ya3IvZEe}5@qr`c
z>v8n+rKN2YZmUe5YW5$z60S~tQ@`32h(Fv8wos^6*lfEUvMu);dwu!x;RieaeEeq5
zj+~*?z?g#|pCH0i*`W+Qt)xYqqU1k+-)cj%`a;bHj&~{kd}RnZ$eW`}8_ZOGAST8I
zk_;d^#l}@3D|n2@K0}5G_~e&q3Qs#ZUAlEE4TkWK_}nn=KmXDP_N^D8ZB0!>E$K7`
zDJzW+B@{?sVC=@r{JTR=(RIO>e}NQfQ5*IHU>!r;2-U7w(Srw3Z~~LCnH@BEFM~|9
z!8iIhbKDkiK)|%8$Y?Yk41EDPO0_T#=X6ANE}|$E8Qr>3T=B6!7e@5ucKb$kZr<oJ
zNk4W%0(T9I^{?W85-q*mIoGXP6t?Q~e)>OHfKHl3yMzE~=Bn4;7W=)=wK8n-!=Hx^
z2+_I6^6}u+y!dQ*Kd*C#kscf~b|Cv;WXx-6Ne8hb_|P?s{(vS3670a~hKYe8o?m(N
zn&Ge_7xLuiz`z&Wa3+0b%O&i>i`YAG7>iPw26&)r${jN%|K@PZ#d!?$xn5o28E2Z(
z$aEYFRwg4$#j<235(10FxR0lCqISI%6>_g7k_+BvMAX{jNKy*htjektwa)0ZBOP7g
zrMvhXxSe0|+1at6qgw~@H`v)Q*3X*~v6*?1Pk@l8wWS5lw!Q7LmOilRaC1Xy_}?-#
z%*bW8f@z^?tp4lQ8pnHbVD0q<Fno!~D}J?^Ps&vl+V>Qvt`};>Cw`B}F0S-)`{8s6
zCrl{qklcl!xvz!xcU3r%+LN?FDFMFMFMrdWasB6BVVo<+njM;T%I|~PoF4dff-he>
zK_#O&bT0ZlG%D&9kEW*nZ+k|)o;SqAtLq3OUERs)>E3)@e;6bn7CJhIhuuHv%^fu)
zh32Q0yeCFTO1*JG&M~5XAEdm+cdBmQeR^*Uze!K3!E~W{JL0pwc7awWn=V~f<$rjl
z;}>oVFc8cxDhj7pCnyVvjy5(PA8cRG^_ON5BZMc!%gYP%3;=mQ>Vp!5+N|O&0#O(n
z`#C(EnhU_JGW}rkRnJdLJ5*d+N<DR^Ori|8%yc&wf`hqa!&i=X@}uHEV&YUJrw24|
zt`9W7n=7ySNSQS%o-ycJ-0%8t>#KG=SV8xJ${yIL5E-bnNC+i1tum3#TEgR}Pv_wL
z{!mj3lmie5tEyJX{n0=K4kZ;9?llL~nVWkG^g|${YQBysR9--+g5`#TJ%gW&+#XZ)
zZf`wMJTswrPBSOE{8okLeb<(`-*(=()>Hcyp{8fQZ#90|_H>lzdl!LZ_`5<by}!5^
z5XnQYhmO8eLQUDcFz)zJ9GRojc`-~vEccOu5*2)C&Q40g!om{v*z|h71X9a`j%mLw
zQfYgxHImuTEhR+(iL8Vk7>pwElhIORyE@s<t?)Z@7UXw6G=H^G5MrsS?7`NvurE~Q
zm0-=vepr<4l+jaJ5k#|cv=j0`bM^DzCF|rE_%dbxU54VngM0mDJ1s4(80=IpU;a1=
z`a@h-75tt56<!)(tfR>OTsyp6<+2os+anN@DZYIsBKyTdv{$B~>~DzQh8>jE;I99N
zBkpqk6h8y|(W6Ij!`BlDUHpyiz*sS!P*y)6@vd|$vWE8WO_}iB4Zcpa;l2>t(;*N;
zD{V*=XrYVu@9~|a-7%@A%gv064Ea#da`>3$NomR_lz)r-JiE&N_U(giA}^#VGxGsb
zXeMbzW^P{ROJm6IzLnIG-~0vm(h1M6{~d2t8}F!_o50~X;rfr9J;8F6<K*0Kg!ON?
zy(Dq(e~qjCzsCZPdRS)+h#rLTnwgv1EKN^OrvQ=u>!EJXTPXDl?Ez9rP8R=nKQEos
z9MDaKaM}6zON;YVHIpsPOH}~JcZ+3zch~OZ;O(Jdd4<EsNTSpuh_eAk1vFvLk~Sg7
z_`B1;HGHCSf@g9E*tl5aVrKnd>Ba*ooBaHTWy4YImUEDXB2o{)_-F-TN0D)~*-*MF
zI2k<tx8R_$aHm7@@gX(@<EO1n_4`TCYUcs_i_-T49<V8Bo~3tncMsMd@2?LJvPsko
z4w5~5_~H1UrGOr^Yk)UOkdk&IPmg#Uj?!l;p~uC)BZ2(|=6(Nl!mYyhOxXrb&JsBX
zhaFIaQLdqX{CD*eER)Snd}3m4zkhG^q)4xPgxMdk55U1{d;8WvSb6!$z(Dcm&sm;e
z3<2e;jER*h0N^@CV_L(78BnkSCp3!NArUx(n7)x<6C&t!{}AR_Q4WxhD4qYx72p8L
zuAKjN`~icn2Q$O$;)FbV4^`ct4-%^qot2_<p)X@OlyQC_MF1MuU{JzoYQEi_HGT(!
zeIU6=26YyjlEM`NeF+1f;dgy~2}E`0X|;mI#afEAcGJ*aox6mPEEqY$c0ze4l%ZY}
zxGG0?p|!ZJtMq?<7P3Or!2Na~9PK5D*73f+Ip7aLhfS&Tfr|3s1VTi_;Nw(3VHQLj
z$?@^Ur8kI)jXo8#0M{jh@v&5C^6LON{^y&Wp+kpy{VpD!l}R>-!;uI`tm}zJOD(CB
zOjEQG*@3ya3`9Vy0(TfCIdT9fxw%!K61bp{x!)!R>ixfh<I(}+#xg#UNas$p*y$0*
z#$KgNlGrMAF=kn*l5y8g!FEu+JCT2Pax!6L_Vvq`)lhjk93vpX`oqOxLH6WH(~$E2
zJT8(dDv1B>4VN4*A-SBLU+8wdR#MU*%$+3@AD57nO#HRCS_W^6YK86W^!E55ZvNXh
zzn6hw4EsN{#L)ahX2x4!B!Z8ep}`8&3(Z5ye;YCpLh#qBwA)vC_3BK?eFz9$8rmrT
zj((@{&%P+P6AzyFKm*nmNi3A9SYg|{-2Vv3;t+Yu{o$pfn8W(mg?lDChNwyva&@N1
z5||4{M$)^x7{JFeG#-aM^2BrpAgS&{TpW<v4Ts)AQdvtRhkFJIlitr9^<Tq<1xIVx
zN&i-mgy<j9f!@={F`?o3^(VKX0ZtI(hWyT_G&HRWU|}pLA#vyK-9r^ebXU@z7zmL(
zB)+2Rd9h&!sr~&X6IK)4pPZ!UD6w&;v2T#H*GS&g9948B_qq_XQVG0$oAQ|W4>|?)
zZ`KZM)Bk?<2Hng5uP6b3f8zgJ%!I0*ngu*<b?5b@*T^O@O{9-oh}Tzx*32gF_cGys
zhSN}I8e{!#Z`V!@{o<l!q=k)gUYMO8|NRjjEqSGOs^ay-QVs${CMoSNneTt}7Wn_(
z45T}(D?iOBUNw5LPd6AYRlPo+=<fY)bY}_ia^pW=bf$KLbwYmNcy@3#-XwA8>J!&a
z+W#~u^3W^XB_?*5ZyVj%Fj>QrpYXMOc0~5yj>>vRf3K(H<l>R+)4*8=K?u-{J9~Ra
zi%pe5d5(YJ%q8xrl{!c_@CTIxd?4pw9o+{cH@LXCBPHg`O*mC$Rwyumfi0eXL))|M
z?R3gw#!!5A#j%f@&&pKk5dvS%JTzLu4Da8KU!SOQng$n$r%xL|6DgAjF#{l`N8o5@
zB+ah@IzfOR>UE!<3Un4qZ(Zrt8}JE>^m<cUYhBk$N=ghW;?(<<imp5rkLoJ53<nN5
zgkIJ4&Hs<hy1Tm@Kl#D`Y)Bk03qrSpSRVspml6=ZC<1=o-P5BXZ)0t}Hf;67(J`3I
z4k5iq59f~_pJ~HD&h%AOR4y(nqk(MNhZDD59~vA3$__g+*d3?8FX4Un&Kh2B11{NX
zS4UKGJ`Msg9jNj}zz@2XDkx#w(saZ;!t~jz`l+(J&h}!Kl4!ncvNlEB-F}3CoelBL
zS8AydX@;*1PcW{L7!P^=pQ?XuVxhlX0Sfrtr2=5=fs0T+;O0PAPOgNm1WqqVpUy3y
zA$Shbj~Nh71Q-Fk$j*8NeCU2qxGZs4<~nZ8P$m@>8nzOHJ@P9lsoHwY4+aJixw&1?
zqrl(>z()~Dom^>N-p`+wa>%x7a7V@Z(AXmgir6!hd%`d=*t;cj&N>q-mc~@5A5-)w
zX3B}FReB@`B$V%^W)Ewb6=+vg)&6^V?du#by91n(2eCg%5H~cszghA^tEITc`MPKn
zC*_M5FGxw9A7d8cyFLtX$kr4BDr@oKlI(|f?*@Q`o}a&DVw<K~#jT{%lYCd&LQGJy
z`c<TO!~((HyMvV#vH+EW)Cpb2*C{@m`sTWPUtUGf!KV!T6x}D}&ob%a9#K4e>6+N3
zcXl(TA(tud*4Fw{!TXJRg#n#+?%vt*bZq~xtIR6;ii3w&l%M|&o>i(WHLL{xD6vTa
zH)wC|!mbtd^z^{`15e>cbaYvUO50G?m-M5dAstY4l*Gt(SN`wq%=Eu@W~9I8?f>(3
zMxpw<pC5z$!Ebn|Vxj=o!8j9+A`44Pn5|zyL19aKz-j%>-yc+9aSID{0If$b8w%~O
ziN(e~9#IfT$<50H+BkUGw@0uI78$RD`~*LlIjc*(ke@65<g+s8(JUE1;W0N?MI?46
zEfrQ^pc&g)WLR>3!RNMK7tFJ-F{eFY%3{{4zyIB$6ZiHjw-poyfpur~M*yC<@feI%
zI%Df$FMwg?JsccMlWf&ojX@9_0gYmRb(qI&=04hM85tQc?5(S-(*;M;D6qmR%--OL
zgJg^&=^~&*ef|0ssu6jKZ`wcDTkRZ~xLKz459<o5^FvrN$ZZNt-Zr<tZEHt{hi=eQ
zQ|3LSdqUbqcczS?W_r~4@5)RjtJqjUtHG(?7ok#dG&eUVm8_<xmuoP14-r^)d_}Q0
zPn$$BAw9iZxBD6zH#SaSf?M)`umGInU2}xl(p&G|-d=WiH#Vm<56ePWjMwsY8AU`}
zDJVMsp^-d-vNG)K<lbcf)ll1J&;BfbmJqJ0s)5FI5gPJ{B0~P%H>G#ga(d$`&A12$
zTM^$}M9tqTtgaGrYS<8A!umG~!{)yaibViEVGk#RM6h}wx|q%VU%g#*R1{jb2NeSZ
zgHTE?DoA%pgES*GBV0+5kVfei1W_qLx*KFrLAuLJcej8_4<TK`+g!l=y|>;UZ++{n
zkH6GmWSBW;pM8F{`~Lu}6x>5ZPhB>5hzRB+KqLjb(Ieh)bI)Bzd|d(0Bv}da1fHic
z{7s8}cRjjlYzY;ymW_uTfl@VD!G1uo^?-9tzohz;ikjNA0`F_!_Po8FYP<0P%J;HK
zM*DSfJ^t@?n|mB<ze_SB(O+CEZHSLyw(FmR;t<W!*Afz7uQrKXl~k9pL7qMyyoa@~
zyT^a-+;WCzCu>{X*)hd8dm*t+dldNWq=bV}TA}2{?|JmlL{sBOZ^M?qn;8KCfP-Zx
zYQH@x5t66NW9E;K%iG^@;_;{YpK-PRf83NVaO?qdB1lVHp#KZ3V=xgRv=Yv+C6I?T
zS^fj^?U4eC45)k+QdT-5F77z<5=)dF;x-}c(0X~CI!=yk0Vt+9FuG4#3Ot42xl1>~
zKERrsgh=zl{5!w^r>U+|0j9Ho8B9l}v%v0&X##x(e+^WC<CX$T3By_}At@&}w>XM*
z<;s<*SAs5E9b*SlP%T@iXo0DLwi{Y|ZEax|mbMe<Vkt~Lf-oj}nVOfLR^(R2AB;RA
zo(!QcZ-<_#olOsTt*LiK(%6HFA`$MvPY42_7Ai#Z<liUfWPmAeiw!|~6B84CeGBB=
zCJvj6<<Nv@x55Pmj$$j=-5@z;)#TGrQ?rLl-l4_u0SSpJ9!U%EcC?`&#mF^iE*Kww
zbni<T;2<!m+>m#3Z3K*0gyiJ?=+KPJc?qzJqXn&}Fz`Oa#gz{5z}pMS@;U`(7ec9o
zoIn5(1rZwkA2Md=_#11In1>DfSuRmgjVZ<pD~oU%B9MUBugk*4rn)Z86OC>Px+Q((
zSaDiq8G;IQrQyUlTA1l;n>6N6IMPob<do@iXQU~02Mv>&7XC7AzTm@Nc?M7}mBWl)
zNS9&ItaQ@@<`6CgAo{-wr%{2qw3QV{Iw=hv+(Up80<9z132*kUEiH9@PW}i_D=^p4
zDByY&y)c+-Kafogc>@<OUWEJ^9F5t(NlR>#N|W9dIA}VP>r>OO)uN8-L5vpQp1IB`
zph5paU&CjIc^b~51s5iRCzlf40w@K9AvePRFpDh3k4l7HM5OWuXVQcH{eJr7&pA1`
z1O$m8UMJndB;62S%nd>232(KjS1R59?`l?5SoF)%?+2v3>X<^T@8T^b<=8_+-E;-q
zs#0<)+<f6<S<DCEEFd5@;}2@;&dLK(ISQ~dudk6I6M@x2QBhLf6M=QA4+I=8T-|`^
zOAv=U&BlU2IMYK3p^nGhY4;Zv1a^0K!>x7k%z>>LF12Un=FSILl%H=P^F19>B&67E
ztfIG}A#iBsH;oBxh+y>Y&Q34-L8f+j2`Vkbi$HJXhwRCM%@QB<vY&c2A9<y?<?V>C
zXTeJI-b_5H1&wlPa7uumI~~$|KaP`+4}d=e!f!AKWDp)6!ka^9@yW7rc-mh3`!nYU
z1Apae+81F?NJbU~F-KyjHCQ2xYW7eoh!`}|>8XPa*Ol4~o^<Kiv%`vphG~U`o9}3v
zXTYVXiYq1#;}AynW;*ri>b!r}&X7_HyZmS`E<A>K_SRP-URaYZu{`nq^=C<Sbsa@|
z_t+GBFCY5XaN9T?6H^M2yA{3yzI`O9@50pEll3{}c;7RD>nZ;p%!xuhoMV651oS5i
zkX&6Y6$E_Q8{gJ`Y2#6rNl@rVYDfYuIHERr6z{-0UtLYT#^<!gm%g(9>s*Z2aZ{eK
zlR`XYA>+8m!uuxUW`FL@o2$q>O$8s)wxtgW+&wv7gZBrZ`1shi;2dvICg9?!Rd++r
zo+@*bjjf}q%6%cSsjW?t@HwcWJj=;mmix;)IGlNs34MS-X}}tUA_K`^YRi}awP3Cu
z;+lkBdeO(#c;;M<8`Ua$3R3-FGo4>zqUe!nAWkGWQFNmUUDC2my75VDi`XX{*U0L`
z{jiX|TPs&X0bJ?mcpD?Fs!Fms<Z*hJir>beIm{feA+U&ig)&z$oLEp`Cn4bgte&>E
z_Cs@UuK=V1t8D|Ulwg^>A6)>K*+11uYU!MuoQU+z!1&9<(^fyNBGX`M7YvjLXz~wd
zjKGzZh)6=r`){QF`g-o)=&X#KEGU4%p>}WkeEVWsd}T*@Y4Fu>K&3Rn`XGdTobQ{k
zLxI3Uuh@95^Y8}oKS5*boTY%c8JnjwEskX_+dj@8LqmIq@-t7LKFw=30LqEJbj775
zI{<fp46Y-A92JVY>I$6pn>b)~28ULn%!?Y|j~cwWh4#H&Xin>?H87eF4A`t~R(?(O
zy)|56u3-%wwCfJv{5-ir)DIrr8VA>3B&bTGPH|@Dk3bZGZQQE*)aDVVYPB>|>l;ob
z;%$pDYSsdQjjE{VcvC3j@$M1L|Jm+S6h~Z*BA*+nB-^=0w|+MDfxLt`CoiYZ_Di^Y
zfvjS11;)`^TUmifYIXDwj{?~gA5t%b22wtSgtQbC0@5q8vjbIuNe(lkA}3EzOKXbk
z_ms?X(bSBAK%wnikE*O|#L?&srY}dQ`kwPUyqt8}kp=_w=8bDN{l?{R@a~FzR_V7=
zG;chP`}o0H=G)|P`jylA+$t!?+v7#z1?=~`XvW~i!kCi?*+ll;_;8e}aEw0kNk4#i
z?(78!mxK9f;=91hN|qc~yXOJ9q)TW4_@<@IZ?Qi;GE|-q-%d`EzI4ZjCrvS)l!^*e
zati>*+06Ha9zVz3s`kf|k@s!B$Re$FpX~4+`uW=dRLl0-NvD=MpT7Bf1_#z&w4jR4
zNZbB?EI-;O)#0N@mlMtWbIjGy%H@kEQ5{>@ORMiHhiO~p+g=g&TfOUUGQOpLuf!tD
zE`LFTa}u}l{v&jo4&O0ajD>}QnJam$+q08}jefFa?E11@^VuuW%AVx+!VT)&rloT8
z1cvC5l26Yb^?X=ZY>HNoD~4&OblHAktV~N2o;q&M&^5FQ{Fy6{`I4{{_m`M}ZD61w
z`qXcb`B9BEvSK)mEz9VJBF`w_6Jdt!)`M1=Ar~L()r?<0WUq-*@o^l-;@5JG(yt;y
z|G``kR=NtQLxtKR^dj>IJVEG;7L<yCy*fcl^-0@?&~!6Q9rC4bSm{ZTu1oV$U8H4d
z#2G{oSCgKAI7+i0CUz2PWvR<@{hPSEtja20X0Qq4@mX;u{|4zi-<&@`MNEP!EC25Q
zu_gY@li#Kg<UJ)OPLZr{3rqJ$WA<3yG2{81kN!l)h?I`axPAD>oZ#;8PV$@5G12`9
z!8wByL8bB%``n>*<>)KT+kIw}{MqF7k9~funGc$FlQI}?_Yy@i3>w!0RDbea1+Oul
zF|3n?S1!}Z@mZ;KQMC-+ShN*jO>UtVpCmVBB<Ft2kc~|9`R6HhqNqvzo#>TeU?jA{
ztWq~)da_v!qeuSwVIXHt%W&soLi!h!SvrDP>^G3*R}z>P71$HLw`Mi;x>2^fJ>*in
zS^K9z%aqzZiXqB{kc^wZ!(I|(kXKSyP7`pilGtfyrgDYS^oB;ntG-OPWGnJLT9a5<
z+59p_Z$ik4&YwR|N6v$OXX9z7&zRVXqWsOqD@i<*N%EASoC;5%Y{XR^WJX>8{aDq+
z9}m^U6Nb`rFJHU7c>7^^hRW|BKh7wNJ%Qcjgy1G;>P~6WBl`WUWhx}Q?Jh$srRO<Y
z3np|Oiu<33o;%6R&iT->^(JJzzG~ZsI{hyXow;u4hrq)TdzL1r{3=;r<2+mMsgr{N
zYxx~9kyc_ypGp}CQgX<rH-&&E)BJ4r+#FP$P3S7XhZ-In%*oc#-^WtoGz~$ERKi|%
z7$ZgijgCLUDk?<86$-kKY8roTh^jxLUi}U~G0-Ns;2U@3-0eUZJB`YR))1n`IJmgh
z=7rCk85yCyM9N_V^D(ZmXdX^$fWQ+IlLsP+=S4&RW}Qwz%!GmIy)}8##KPR<mB=O>
zN^w6?Q+9j-SxQ^#3?It}Ft+MAf8=r^6k^T?=5>A#+v9|E$_5~kV;ef;<Yc{o8$vK*
ztT$be)xh9zS`CyqupF|9+-6}}?9CJfq5NUj9=^Ob0^=?|K)bpZgPuEw)-aI@_&}t<
zafFd>$w?`pbP%cj4y|Q1FB-~vUf}*kk>sc3{Dwc-KqHT&KczKtPK`PIJv7Hnz&SQ%
zkcR>y02Bg@To(-mB6M!FbQ*>WKyXhD>MI;JVN4Hqrdl-^kR`fC16JEB1`y4Nu$7aQ
z9V~i=1Y`l4dIN@82+h`qEESQ#BNh&;$};^Ay01DV>_T5BX@wfLDWbw-v;)JHBchc9
z<xOdDByZz*rJj+T!)qq@$(TFe%wDOQe})1kfUB$9^7%r(r7q)OZ4@^*00VWXF3>*L
z1yGJ9NkU{zVL#w7e0&Zd5(G|VBsbkD%PuH1v>g1jV6j3v+O$CHP0693?e1RHzIMVz
zPrtu&Q~J`>B_y-Gva*`m=H})!Q;q>XzU@vV=q)ZkP1pS*H?|7or#Z}77|BU%y;^#L
z1sEWsc?{tdEe>?{bz7@J^a;?@9YfI3!pEvr;gYIIH61_+<NqEifS3^26LY=8iB+67
zGs`%5Baz>Hts(Bk$Z{-0(l<=2#0Gk{mJKjGU<(Mm0+l0VxaZl<^8iEM2rfxA+u3h<
zPujH^Fhi4K&J%8$rK)Q^FcrgCCoF6M|DqpssVh^h<Y>*$5MfOY=^cG0^#NKVzXJQS
zbV^G~A|vw`dNY^egm(E9g9)|<J`;j1Ir;0%@}bCZZxxLC{4QHEjZWy42PY>!Hx31`
z%l`iUrej|XJCkTYEAeNJek7PKiXEfLc`YCo2o!$-R3e{LD5s{U&*9)iM@GuZ$UJ4p
z&(F89vC*z@sU@l>&8vsL0#x%x%j06G?~4^%4ME8~JbiGJ94=S@S>oXctQ}zMAm|0)
zjmN!cVhH*K>H#K)aY){YNI`1mK<kX>TL73=iA|&ZXvsPz;IW>bF*C7xo)J5c7aP=!
z8n@`_i$O?+QtSkc*tNqfCjCYLFH$;_edDx%Tw42(!REMf8`q#{cN>!K;WZdn>ecy~
zbfx@+>jJ>Cxx0t48+I56u(|;DXo9#ak3cZ3TFT4Ir|-S)qFIzvPmyag7CWjK%WpHo
z<WW0ovyk>uZaKD(OjiImU$@fpowdU_Ci}$^*pUxQ?eaf=R!-$Vq>Dhy2k)lCT*egi
zoH4b~9R`qbzo4(6@U|PRtZZ(H>^268X`ZRtodW;za;<Wwbs)_$MzRwZ0Uw8mr8KaB
z`@&9#uqLz4q`RSGl?Tf+SC%BG0rFW(r~!G6u*;t!&KoVz26cVQGe$y$$yd-0Gju;|
zi{xa5P+Ystd{b~s7j!9NV`DG6!3P%^6JxbDqr34fDkf$GkmyTfTuPA5O9JVCzzZR8
zKznh4kQQDFSaKMrsGuRu>gfrAHL2vdwXBPHRwCy6=@TIcO;3<D6tYT;-_|POoFaG=
zIcKU-abR%z1-R6=3`GP2rKI$OiN|!qcE9a#0+F%BS8pw|j)aP&Z~cZLWuPpv7^~of
z`U)j2ZR-@F!X;oZ2gN~FFwm?h=L178dCbqgBxq}M9VDZnN$t-Xb8y@S1H6#aS_FNR
z3RnIX#=oo6jUImjLHSs>a|3!&qKuAbU5|rl?^g)L8X`LHQXcG(QnVCmdbaWnoJu7(
zqdBhsNJ?yJ2z!EJ0(~MdqIVC8La2B=TxPP9pa8YBq;hr^P?%ZPf(KzTmYG?#|6?3R
zM)|g+gz<hxi<MPhyH?k)UhtQk^yxTm)4r}CFj~3HC<R0Ei<N!DtjBZ=UI5@OyoJVB
zuYU8rR%*>q??)=F7#Sd;R_GC?8XGGh6k%mxX!zRq!2X&FOdkH$l!bIVf5CP7`u_b9
z(sRdA8Cc_xl~E7C1cdk(wZ9qf`xM)|vu+CF<6^TxAMl==kCrqJ3`AsH2g2G%GA4F6
zCp<6^elZo*8g0&+WVnGNe!jd7q;_P|{Qa*G9RE2JESH0cp6lND^ASmmIyDh;L)p6D
zA?g!yYBZ9i@C#`9`FHw0x<dlQ#{6{4MtiQTt}eAADlt7B*7-I_FJxt9)m`8y3=HhJ
zgecp|N>sWBMDJnpl>YG>T!aFpSah`ftT(JQAL3>(P7V+fLe|~{2)M>d?Z*=Dy*fug
zp_H381xnjAg;=-sIRo7ZT*@!7F<?y3VU7Q&5e`KTCVW5$!YV|j&5jf!8|wfx1Ace3
z(DFG<1}G_s3J))YS5zwZ-~kO2(}%4y!DX<2I6|KRjjPx$WIhxD<ZSjPFW{*#S?L-v
zu`2+$^#MP7RzGRQ#cW_`?&R6a=@u;+3}*zNE++#vn-rv|fKUT|Cf|Mt40tSw9gj7^
zN<}x7zL$`aN(Gtw0?dXpu8y?`<hL~`Em25e7j*6>)YH=g={C5=iMUYN)&Pc63KT#k
z21DjIKhj*-)$B$cSa72=$k+KDIA8&`ERci2(OclQqTipAqOYN``$?-bmzOuA2nd|6
zc6aw-(8lUhLB`jtY-^lQFz(b;7*tR@8%&F_V%BLPkS&0!)@ji#imOwj)NUPgLAz_u
zw4r!|aGa9)goGB6bC3O$BnM!h(Rfw0^M(TmX+nk)o*yKUzr>7c*vR*Q(g7mN0csIS
z)z(v~`0+!(jrgX)|L)t*F+B`)gkem<HG3C_v}|nrqM{hUpk`rn9qKwJpI8vGMCgm?
zi!bbHA4OCiA2fRe5b;6NEcmkKam=ZVCVA9AB(0ZM6DHW1SY!XQBUfegzq;gA{NRiQ
zi{Dd4Y4oR0Z76ylHZI6d)uMqQ-ab{LoD+f9ayNSA;vwM;<^xC+BOxYc&aZ~2&ZGlK
z<-@fv3k4b`rZ@uU2BjIo(;?}_*ubC`3x#!Z0Ra3N1X1XVd|3MgC(W%}^4Rm^YaOu8
zmLC6!B*lLlb0)^+134<Gd*zF?oQubw`tw*^9E$6NC%k$5#c-fDj=uhLPWq#t_wUo@
zXGq=W!h?b$BO)Z;!U>Zm2OdG%+qaK}Y|ECJnpM#FweFoE8>xfQ7|Tl+E;u@GudLh7
z7r<U+f50FtJhAmN_hbPMGdR7$#aC*NTPL~vh=Vit!$;<!Jaz*HR))FNi7$5mLTcE{
z3upDr%QI<ikO?o@fKfG&%FVf4&&FmX^|qnmM8G7<{a&d`8PWmQW@bB+UqN&vxNbkF
z=NIdKIV&fJi=gR6r#_^aJzMO$i=9etfI|VTqIlI$@^XhO4&Uo2cLqAnrAc3s)}7!G
zF$DYy=2H~AyNkj!0bAR7ViFQ3ryF_s=F(KeRPl_^YeN*F+$b9jO=wLH219{^b5~(9
zns>?7H4Dz~*?HdFJg(#@fc)VgO3@ZFXMl$Jv!pK+bM=$o+tzEUJ^o-+3TDh;V{h`?
zWG4ini;5yLG7>{VQovU0e+O<nwv$c%+1cmGV!MV2@3bjz|7gU66HHs%4ct%=hSBq-
z*0+M4{TXyU&YL%2+Ch30$bVw_o^9-`4+A^3KHr~8ZPECZ?;Q9(N}sd`LFWi<3fj#z
zcE0~K#7k_9R}(rq-o1a{mh1vtE%y69mR`8<CU4@C)~=r3cb#(FzAiL$PViK1m4lu)
zg`1NpDMTiUnHx(YQs+bkK#`Str$#h1>Cp?}+iT}>onqtTvjA7>8!O-Ks7fGp^%|(P
zUlLYog^8t6+}+8VUq(hkzT!zrzRZ164loc96PTHSAmQt&i{D^L*v^}5&UX9rym|ea
zgR7^#p&_Nvt>-;NfYAboo*LWto?4!2w5sZ|P`P)AQ;fj$_wh%_ph5xeThgj>e#h{}
zzH%ZbA3$F-yUVcPcuo6?p6O}f61?Ytq_~zy-&;}_LxMBK9(u=*aZ5`J>_`cL4s0mz
zC*aN?N&pF0vND}(@WIy4RoP&vP9si89W1~naJx4)3@IU+aIkU&EicQE^@U;lt+7I!
zI(WA+?vXF93JA<+XE#8?OlJ`MQ_n#N{dW)!^O_G4lWxD^k7WM>tBF02TJpNhb+bFD
z1Z5WDwwRw}+$NXtYv{j2uK2zOQaQn8dmCqI>=l@g>g(@FN!N$<`rTx1s(j(8gM6r>
z@<JV*nF&_rObadMCIL8;>%6bPs&d@jIQ@hX&$n+40;k!WcL`8RDk}Q(^izRBK?L~t
z$vGcBTy%YJ(%WS=Qj}P@Nxb8w)YF@->$>yj$%f@c&rnc=g_*CdM+-gQpWEA(2bTVx
z_gZq0zMR~U?=_FSFe`krj+~$~uH@|mx7OFAcXqUs|MaN)%x!AY(LWnQDs@l%E2Pv(
z6kiC1ezcBAr$@=e@&nBAg5&g_R;Sue3_UdkSBUxO(AHpXc#k8fSRX&Wif`KdoMnB^
zI9_P}zG8iYOuRJ@HYyPgSy`Fa<YaRY*J*t!?H%-d^tiHM>*pwc)77P7<|;1!E+j->
zQ?o3`O4$Jn$p~M;VU<F##UG4m!~y?5OkQh(sTW0|yi~I7m&9k2C8_Qn>u~l}peV2S
zNGF9TL8w90jkN_QB_$bM-Oj?r5LUKYdQX^}Rlq(SbqYE_NRz`kTj93N(J?UKUV3lN
ze_9TkY$j}o+?OYvbwj7(;!ys)XsO*4Mv~<NY}6Y<PIa)h#RCThw#50FSZvsEa9+k}
zWxuR&Ers+BYQ8P*N!E}an5M;{l=|X@wqgvQij)*TBr2E2B|!o*G%nDXaN8$Ti63@v
zfSV^s=*=jF#|mtAMk~bQ8W_+xEn~#Bv=+YCFGI74B&g|AN`g9T@Tfx*fe7g)M+#QX
z2H$C~ba|uOE_igpxL2yYOp8w#e^l$^Z)`k^YHMkcLm-kaipyuhgzP^gufybu!&D7Y
znMVBkh>J#LWTe~0uw52+oYwO|hS}zQMOau(*yTK9CGYbCEHN=`Q&T*~Ode`#%ZQ{*
zL!<YaHYQlMUsGgnS+A;cUEklk8)eSQ#MGkgp9B-e_FauEEN*b8(RtC6$xH*gAgfVY
zkep2UOFzrV9c`f7xl`rweQmr9!^Fw?{g$)>QWRd4j4#OC5-;mRWEkMRB91G9y|-y-
zcDJ?C3#G)wzV`Gi!zMOZNJ8Fu8}@b`3+q&otb`bf+=&Xx3=zei_s7I`5X+MY*kML<
zr<dDecV|7D`XKUPbA8?(rg}U&I{e0$XaHBz39<tLOYyVsklaXAOTo2*>8Mr#;2qW|
z1o8o=1C$;J3)8bYpbzUTE7tB#^S?{p7BOLAXxLSp%Zwxn`KvP_JeKl1>=`jJ>JW*J
z@YS|9p&9wzcjeFc9U)82-_ZDsd~%=LFQ*PP6fV}R=8x*6Jf>;VU-V#&!Ra~Y@7=*=
zwy|EmvFG^c?Tr8cG*a#*u@|JJ@%u;4KFL&-y2i3q;c$hHg@u-$9xmMR@4`i@+M8Qj
zA^U{r>eZx6*Ed_P5wR)bZ-$E1PM;%IdR&XTilYyw3g)H4Naz}MqJ7x*h5ym>ja+;3
zwCT9#Gpee#xHo&&fI^VBKt{2B>$9J`-Tkp;d70O0DZEXrM&nK8J|;7P1J%|hCS>g%
zo!OD9pScC~%%<kq1l~TrayH@2307FCoDVX<gY&=t-uV`$NtXWxJ*%kj{=p6Z<9R}a
zC)XjYeX~=iPEGRugPA{nZ)Jra_u!<>#BzW8S@zu2_|aOy`oBbW>%LPy{_b(L80U=f
z-_*jmGoR;4%fEHjx#{fmU-;n4A3uO^KRDQ5Vby^@oIPB_r?CqDif3yW{nmQ;Kgmie
LNPH51^y0q&lc>1A

literal 0
HcmV?d00001

diff --git a/ui/tests/registry/evidence/registry-catalog-mobile-dark.png b/ui/tests/registry/evidence/registry-catalog-mobile-dark.png
new file mode 100644
index 0000000000000000000000000000000000000000..3a598b03e02d049c466a21f34b4f0278ebcaf0cb
GIT binary patch
literal 163686
zcmeFZWmHyM^e;?FcMDR|Eh*9s(hbtxDcv2?3QBiKcT0yN-AKbjcXxP~$8-Mg*Z1SS
zcib`jfC`(v*Pd(6U#;hZl7bW(G7&Nq6cpN9X>k=OD7ZIJPza-lFyLS6NAu>PpfI7{
zii@auq#tC!1}rWTh1J&EEj0Xpf9&l{1{dy+(jOHkhvdQ*<QJ}+z3(kPB_wQ|^oT%(
zVu~VCgkXxIO2(6mz|euO{`}SW)x-U{qTav%X)In;`tP?zBf8@K{ecLqoQl6+A+o)k
zQvc^7h!m0`Ey#Z^he**Ip``ius}Mr0J%)cTOey;RF8X(c|NpM(lZ0p(>T^LKILu|@
z2jY>z!Tr7{f>HU^4#g}%^$3zz)V>)1uI_KRP-Hw7ttzFnjh__iQc?IznL7GyUeA>8
z$MdATuaD;Htk##lx#M*wKE!zZebXDP&)l9wLnCn+)aayQ(?x>e)pggu$L#;9pLXAc
zp9!>2*B!s<e`Cx2Tv0qR>?;0S2M=~s@~KSzPcWEelLfL4ewUlzmNEtI9ik_kAG-hC
z85$OU$h9!dgOIU!#1<B%B(_-Eki_|HrGdjj177Y`rogwh*4D%hg2zOkQ^>Q4!`pKU
z7^jnsp9z>0qT<nnSi6MuDpXY2y9VhIH>_XtasI8P+tL7A0n4$~=;s_(BSL-;mdDFW
z-foA2E<3B+qgl985yY?cmwj%*0%WoH-a$e8rHGtd9WGRxNR6g)o$t?94y=UMC;D9M
zj92LKbv`}b3;Dj6`xZeaB+?c1?0lOwna$+8KP`1e*xxGdH-I^~&fs$|S1Ya&@_*`0
zArtaT7xK4XSzcP5=tGGd3_*R)Zc(x5dA2e5kwf!WmC@$yLZbr);TXmf^k!wJu}r3b
zw?+}2v`U|uXejdM*A9Xnw&3O%RVR9SVCm;N{8u_?sP#7D#?@gE(1TjAI4w`0pdaq9
zk01U2+k3B9+I{cAoi;ic2>E#YK3dXwP>UWW%PtK;C!x`8LJWj?rt<IRvxltzz!=RE
zIzPKBBE%EhXXpwJkHDpWpDi3XO`C)AbnJh#&G(}M>u&+Fl9E0>+#<X;Oj~`tzXq@G
z>1;E~m_NF-R9F^?n7j4i_H_MTQJ+l6{|u69|9AiL$Ok|{!yq8xb84M*1_noPU{--8
zxdAuTXGo~58Q4G|;5C#j68s@+Ol7&<@AC26c=+Vs-*<+9MduhlmecbL`G6y0ce<1S
zl!<aQoC{u$yh<D%W2}-|_F9|I)5YVr*Ft_{Nq>7w1YaP>YR`QmDJf}p7Yx#3mQY+A
znGjtVg;J;R_X+h}@elYf#ijfB4%-E<N#9(*`?urVz$mE+`afM9F3e_k1u@dNZtl;r
zW(g5Xz=T&o6xmQI#KMqCc%zNaiunDnHi)mg{_R;wr*}7N(}NZep7$F?sqzeu_<1+#
z+0%UySc6$Yzd^xy+(LFWz103L_$_m124pm=LpU&4m?pg9?CFuO4~nqA5}Vuh1}qa~
zbv^t#OURS{@7l$$^rg+R_8rCNh=zWV4Y_?IIj-IviW2U>rsjFS_4)7fBHp&O`kt%2
z2tgsxXM+zLQxAee+FR+k?&M*ujQf4R;{I=0oO$2gtUX>IFXwuktWw~b7$WLXiz8-j
z+-#U-t55uUd+sOt_(PloJstkPL3yj922i+s25*g_5ZW-SRq(%-+|jw;@u(i+bF@up
z{Fc3%eZJ9QCA;FkNzk#nubI{7fmZXrI?&}aS$grm?`4HT0AWhq@8tx<-=*a5aDcc!
z9Q*&qL3ny3HYS#YwUgb=`FCnOkYZqn^>4vX{5K}V|KAw+yEOkdj8;Di+h0{?17Bh=
zDY~moeq0^R<^5X_Qc9ZDk)Uy2z&^and61xbo9Z%IIE+Opfi1K>nl@Wzg%gT-ww-O&
z^v{$5+oYci#T9Q54*kW=?Vu)iu<ygoDVRZE$G1B@-tA47x*aawKHj@;#+gkOjjJd_
zbJ<LHOWCb7$Ww$oASKePx;=G=?s4=*;?H$BWc{hshm;%D2oyLJd?x$FrgydGp;{f*
zm#Jxu0t*c`+iPn%4=MR_pJlvh%w+!ESRDa=c<$JOJ~w`k2)HaNb$&~{7^M74Pn;}z
zEs4xJ+{4fN+#|3kzi-g1PFobpWwtu4!-rz7E7w_8n-8azj&eH8TpTTZ`v(O1;OsFR
z(RyDUoK$c8%orRTl)cT{8EaqqE}zyDhQ{buq1Em)xHTMkjLGkD!tZ%rGFoQPp-<5p
zFCIs#r>Ywqj`+_8>P^b2FlKdFZf$m2Z@H5jBNw3*kHBP8p*j~a`1y&J?6se05B%k4
zp~&;?5i{wm3Y7wxn=%urIQ#iJ<$wEHTsF8uI0i|HR!-~ft@KCABvyl*-vQ8pum~Di
zl`8dnMaq<{_w$4d29VtZTAc53ntxl!sSQu#vO4*qVkT#`T=6HzR!f%Y3O${FyDZPM
zM~0)d&OlhS{aJ$s<Ip?Px%ZnbE=RWK`WP5-Map@7k$4=A@#LBnx}Ik@)et6V7`TY%
z9OmgwPFVup@JX@e&}P4%9!tYZ*GkO&33Vk1FH;;=+UXk*acJbGEXQ9;Mn`y8>Nnq=
z<SggHoMA!3z)$HS6TTu}UYXCEPU6(;2}MbIWh9!vc8_tan8|axH_dpC!S-7#$}%%Z
zN7o>P$N^ix%Vk5hQ#jCmsnzrMldon&D<To6B`PMz)-0<5cv07@U9jF~(rk9$a+W=N
z_(i}(NhKHY`3()j-{cRb?KgvVpW9(9?cSJrF(@g^vgGRS5H#oGBRxgMQ7~%v;l8L#
zb~MeaDqxbDk(-xkWwo}l7_>iJ9qRPG3wnkU#!Jd&J+(hu;p8Vo5fa})yvJZ~veMob
zuQ~OS-INKD&Y;7u-c7bkG&GgdD)qHNdjP}Roz1}{OtY)QB|fhy>3fUqukvXXW~CZn
zhkaJ|y}Q_bxOKMCs3d*uR>tGJK68kO^|D`wMm~M4S(Vn6%J=TdX12ZUPA*XzOUUQO
z@bm-NZq~o5lt1Q5Oys{U)d*Z}^LF1HFne&A$p1hvk~O=?<?^ela5z;b+OdBu=O#hO
zL^AH`?$X97Iz+qPD~8u`qW1&&#gAB$Z&IWBc#P_we(G1+XKW6BDNxKZx?XPEJNf2*
z$e>;mk}De+^h~qzU8x|4`$#(ea2mY=7LViV`^~}EmcQu4!ceVKNH^C29Ft9A%4GMf
zd4yqPufTtBaozhKMWE<QYCXC;`PE!5tKIna{YH}lDxdrDNIXT}!yA|Wc<9IbHF8k(
z<=Tysg~Hp3ny1FHNh~Qmeh<TGul;pGh!(Z@gpc?=iMXxR@}-q8wd8jQm9E@uR|Ks$
z5KSX*^$^fWWsJ<`j)KF{2Tc;s%igi;pyE?W#}BBNa9U6Cn3bsQSqE+Fw|F>BmwZOq
z8r3|2Ehtheo?zClA4tF5uFVwk_q&@a2L0_|saERG26*D-fgiFHF6{7F3%WxU$03|z
zhF8dZ+4n*9D}_G+gD%f%C5?^;QjNvva=p%LI69TOB4ZRncUt+(n&VFBh=aW%aw@Z-
zWUJNeu9GVO=Cqv{?H20!ypQ<xv3Wn4TLs2bh(Ve`hnsKwE&M|vgY%o^w~thBKOM}s
zeU+ImAtFHLae~}TmugO1yx$xtpP6J*sWzq_P60TUUI9AgZ10kIvT(FNkv@UuS-jK-
zZ0fza((3|7%^b^ToE*Q>CflS&8D}f54`&VXis)!=@gnCyPpe#Nde<)ctj}INH|IrW
zhhw!(<B@e6Ob9X_a^y~+SomNf{rx?qi^-vq+~&qk^*S-PJ%e6Lw7JUjNERP8*S#45
z->VnwDBqv;m6J;;q0-2uCo;HN%X5hgLYbjHZ!}wQYt0!hI<YTOIwxRJV`PYY`$2-=
zX13g6vZ4H+e(kEH=|l^V;dD9@K7W&Em2qF>@vmk^CrEE3OSN&IcDpfkK8_{HOt&zb
zR;?QeE^LNJBtCP4`4aEzJ=DA(v4^w%P^9H#s4C`_%f5!bahPnm5PQtqv(Ke3C1P!v
zJG-BCB$raW74ugrgQaf}|M_W;1F#aI_Ztxqo~0IdgDOkqo0GN6V3ELs#e%_f&+{Qy
zW+We6*(BEEiTYB>er{SY?3}kof-Qzd%BB1I>(om%_czcpV<8Cc3C0LVkz=4y^fuUx
zE}Q;LU~JHDx30HNYp@-sSB`~2!+8U<DI-LvRw*VG>-I3+Q%qr1V|s#9sF3ho8>-d+
zH#F>m`%d<s;ptB>rM~z!Ec!W@1*w2f(VGO&8v10D!m7NT;eX|DdDE0U7c@2n1&^D?
z`h~(IJeH*Cmz3duTEJnV@uk&RHpSD>=<l1;_0x5!t-Pz#oe?*=c_-W^RY>oLJRHN*
z+`iN#dd>D$g`1ZWk=<97g6rw31v=NHCk(%`rpB@j#~bne=Fafq8}Pmb)**9EWX8wa
ze;rMJ&aCZ{MghvW%<0pOe#lWdNfD9k7v|bxHCb#b=_;ch$+Y=Ufld>6w8@c9(b7tT
zj=;WBB~=1uedA%VQut@ARyFy5#^V`5*DZrRY=dG9+|^o7xMrn(@u;wEDyL`U_dX}X
z-%rJ=g}SXCYoJ8~QpTj-;u0K&HVx4Zjl^?5UgmN*(jCS*-yAh)lSCW-34RI7yVjeV
zQ<Kq5!Kmkq8lY5qN!<jzFEw=Gja9$0X!n_%=1Qb-+b=dc91kY3QdHry=$fvsc46L|
z2DDu6#gTAq0g}a|UuQY~0f*Kxp2z8vLdV`K(Du@J&1xR3>@uUF7y|kI&bNj?tp7M&
z`<N&GbT(%J^BVVS2A>-)gRT}lpnw*=(jPNZZrkBD8K2k#kiAB7L!)pJ-X^iMH3vTY
zT>mjyDBtF>1__TN!={l_t5zu}dskZmt5%}xxjjM>h0ijz_^VZ7FunP`l|rVVuk};w
z?Q45o3~U}mxJk*FG|T*78s$0;^G$0fYdw)HDYd3pc^|+#QOuI02x&;+_k7PIz=?t?
z9z#^FvdJ)6sBn6SxTM3E?WvH$E1w7FcXwema_~+nj#Q$sHx`FhF|$?L$CYpj5*Q5s
z+HOMY;b7@oQqdF|5%<K#d_NW?Ks<D@o4pJo^L4wNEU{oRGaEG6u5~|av|sLBhtNtZ
zeRIpG*&HYqa=YpO2uSNUx5Lyeu@;xZ!V38y0#^N@6oLD*O<6EO-zL8@ib<`9e2<CR
zE3P2;gY*mnh*1wK5_p{0AMS4xX3s4uSkBg2#`cB$Z=+JH&CboE?n@EL`I)tv===j=
z_7dVh4<@n{2y$2tC5NFA7mqR}3mG6weoBAiT(Q#hR)BK{%xX|FV`Vok54}IB-ukoU
ziR#eBvmRgWcO1NX*DUk-Ifn(kdGcua@j_+C)8d_63j5(=n-qy*_syx^a9vXG2b^Oe
z4?4@SY~E4PWSp-GrK5EYvm>d(wt|iNRd)L`g1%k`JpRiNB7^v6+rtLgf|C{UX<%ff
zgo|G-wL5DHq+0HOVa6LsQhfo<zQeZBU+Ij2{(?uT-8Kav*b>F=AVKp*p34**+Su*k
z3>{w@w}W5OWW!Lj{XcxYu2r(IB;D&};O$r1Gq_zDVsxzj%+}(QpjwNOM22@TeUh1P
zvjlq%nw=?bN`ghs>D9<Pw)7jNc9!Sa+#YVcF8$`BFK^GcJ>PG(I&a6`Q3)Cix47;h
z>5W-nQ%6)*vv(%(+;wm<z@@O8S2cNKM|O>y{Kz>kQslOu8q*~Rt*EFbXVPh@^J{C_
z;{es&{Qfdka!zb7N2$&GS|L-!y0b&AUYo0SRyh)nxyFA*@DE_FPTOH?^F9QRxA@In
z>Qprd0cC{E(4Jf}noy_FZkCP#DopWm)UYc^y;MWb7oK}vgIOn83IMC8<u<R9(cVbB
zQkN9=Jr2w;&PZg->D*9BWoUp7##=v3Qb{K(Ih!wOqcHS>8OP_o*W|m<u+|ecU8KP*
zQIntH8oti=15g46%@U8N#WyxlSPqL-B9u<r#PAxqrf*|341e#*eR}ccy(KQ5bV3X<
z_ZS_6;nvV|M^4aYj1>~N%kNP6%~Lglqze2y+Ea^wT(DSYg;Q@2l}*^WUHA(E2}L1l
zgGuN2%<Za#)EG}FAEq2{$o%Pd5#=(UOHzq-8f}Y})o>HO6e(lGA8=XEsHIZ_uumjm
z)_bzH6^Ts9?Xt5qoHk{#N;xrf%&K0KD5)%xW3APZsjaLmXW!Xir@hkTB=!%MU@0p7
zB?}<hH`n8wr~O&~&fd2P?uT>Er)QtlidAj8y}i8be^u%G7Ft#tcll>n8&uls*)S4`
zeVJyu(aG*)<@hxCWxC=kr^C@={TEJzv0@X1^J;1Z!>5M6NF9AdkE^nGn*(2VXB#o}
zf9eXmWB^VzTdXeYZ}XAWpuJ41UCx(A=js5TR?$WS%KH@3_dSLf7ok|`?YC$`TyC2M
zgXrf1$dw4pD7Q5p<1cR#_4)muWNkazv0Xk%q7i8=_O1ika5&#Ep3Z47Ih39w7H)Zg
z+y%hWYL!Y>;M{WNGi==tV{P?$TBi^t%_)oc{{5NqdO~6!%k7cOzOFne3^0Ue8x@a(
z5zrY%a_Ql#NXSKP0@FCH^JnUEIyQ%sG)c16tPX=P>D2HUaUZfS_h;&zYe~SQ+)xZW
zSAUUh(`fG&7DC^qJ<UMWoHJB8|14jtUy}D@I<KotTVrstTkc(oB933Abxk-tD{JLv
z#xL%NGkQ)jQ3R~kBU7aYzX1=>;dapQW4*sRthJEpdv;F1X?x*}iDlZwZZ=>onHq{g
zroSGl)!_1Bq=IK=tn52VsKpb1Y3+HIkbmZDMf=f(MrQl!Py7;*AssDM+;;OGn*(?@
z)#bX?xegsqU@g8_tkMSwW_O6JRp&{S>+$+OwVLa`%a{I`jZ5Fsgq`DUBQ^Ja{?t29
zDo&+LwbVQ&j;!q>%aXQ0_BUj0{4Gu&rzMUg+9gyozvr0@tz2gSG#Ad7<yOx;)gpxq
zUeB!|tMfq5Kdm(jkm&34r$_JP&e1HsuWz#Gj9y-jk_W<CjArW5X1+4=Pbns&l#CV*
zg!wt#ktZ2b(vIBqIA6&ZY1!m+TLWSD=nY1|m`Z3C3q`K?=^IFU?O?yqvf2NUl2$SO
z1dTQF4N#M-X$kWi2a{Nee{3W&8tCVh3jY{GtxY+;fvR$(nX;(ZGe^K|@QI>|sLYV{
zy^M_cRiWRUJEQ(b%zpDeF&u+T3nfmrb6#Ch@$h>@AncqL=Um^PX~l_zm~mKmbVGOV
zUNnVZCR`h%2%HI9pZ-de_r03(dEvZY-;K_j=ZL=f$A8#x2x^H;n`?A;s4bLd8rWC%
zn`Qw>uN5H8J}e-w0sKRmwLmGMV$kAye+5Kh*Q4p`fdveHiE`}*t!C@`Egv8<q;cD@
zaOa2rSnWMsKdCEQsah_iUbZ3?YH)uZ_6%hU;{~VI)6f@YokTiiGj;~^V7HOXHzpMp
z^Wq83k#9Yf()&bhHSK!g={44y0=P@_N_S|paqkX){C%M695<d*2?fJUr%gsRN6R>c
z`tQW_pWIq=hege5)Bizx`014p1%*t0<yI}_s7U1K_KM>LOm1B*C!h>C4m&<DYT7o*
z+v|2z2)*oAXs}zF&+~qrL7`H`NI<XcGSuYs+J1Sy$*R^o^Yqx_=O^mDE)O7>?yX6V
z=Ss{bw`Dk%(3#t_^r7Q4d7E$$s0>rGF@ZJ)$UpbF(<2R%piClNq)iAKu?DGBbbbb<
zsg7A2#HW}N)DkN2d%XV;=ke~)DSwh-w+{-R8C+XEPMMa`t>m1ZH+wcW&tNfGzDm2^
zJBT~NH2D$zGlTK#u)tCd-o`-2eP@>#pllis=r?X|w!iyCD;u1XDwXux+TeXu2fwf=
zzo0ej3`ph367p3^@8fS^ZBgLpyV&CXdxNQ1zLD<wJ{o=~+)@K`u@onxghR9XwGA5?
zkI+D$h!;YMg|1D4y}u>{G&6|<0o}AeKIi>shBMUs9zoyx>5_Ln4{k-gWP(0pWiFgY
zvn0f}XBQtv1;etyD8D|+@Dj66yH}@u3mHKx2OCB6m47=Sn{gtGYJ*m_@$SUe#)es*
z-Z6lV0D|$nZ?KCbt2TV{Y4X|_9ZKQoxjkR3JJQ%SpzQ^SOu2TbIwLtQK;{$Y2ME(1
zg>_KxhlHJP8koY)-<di3{4xHF4P>kmlzek$tCgNsLfz)~61DKDg4P-5bCVXSrQ9}7
z5ULM<ytNHhP|>oeJ1dpCw`bO{Za`CEj~@1b^g5k)#*qrB91FF%k7gb%wJ?kTD*>mz
z0-IW93c&8Y{yFZ?&uRY**IuOcQv_JY3DckK=0nNUvNK>Kq*Xfb`E~bFeZXe$>n)Tg
zHfZ(067=yn#feP>(i4!PURa!r?8O6otDX*%QVPnOzX_Mvbj;POF&U-!N^zGB=Fc<8
zx5aBez#%D#AHL%mkr?8z?>jRS3rAH>hwQ2zx>WWyB(hwmQvFengu+cab-O1goo9xg
zrzXI{qty`JbUohhWff26E9<Ui&V47@qt+dMo5|k{u@OcFP`^8Ut~QO+9#=?zQGtZd
z8V1N<0t)Fokz}Wr`<la&jJN0B4vX)y4Mi?rrGW-=FyE}|6!}##)5FuVc=XprDS1c!
zUH)3dTq12+Y8(xe;GC{KH#@lLR5;WZJXQ5wDKNMr;LXyrz#fWnd@!i(`x;y=FukMs
z0cXK6ZLIR2wGVEIECr^{2Czi-IOb|CST)L;Jo|?`>_q`$C-l92n}tSPmxhN<!Ye26
zOHck2)!V(P@~=&CK<}qg{MZd?VwKiRpp{<)`s0?**#<pshZu*6pn>1<l2s%weTiVR
zW0&Yx`D0)ujM=ioDr!E#JSz*uz^3Z|Qog`{yv*mm21#!|*RHdDF68Iqc?sB?qTeO(
z=X7~$E<G3KYRo1Ne$)Vwbu`O=k_xSHb$Pyeyv%K?=$$O>Lvr;xi+=n2h4Ycf&!sJ{
z$FUb`=`foX_g4nrc?)He6rAukvduNLcE)lT)ygcHeFoHuRld5t{qbj`N5i|~X?i{#
z%-uMxbJE^l9XklJx@|_{5h;80_A76l2T&(`l@sv18@hPTk;ZBFg<h3Lx^b`6W~OYW
z7yhl;4nRDoKxVal>Xu0T38fIA*_S4l%D)Nrzhb6<(EAIm9?6)pXUk1ad0RvG7#)@_
zTiSu<Cdk+CuZEs`_-%|@j_1<KX6ok2GU=`kAsc=&lTET7k;`P4sPzuZH!q)$=X1h*
zZNGSi$AC)8&Y5aGOJpg?s9B*DjzP?Q5Q2omEE$@f!EV>$6$%x_YT~%4!>3WMT|D=p
zUVfn=g~OtO5U=j2^|sY@77>dQpG74f=o(wZ<?{x*Nv!vM!Qr1~ik&U`kYBN6lO8U0
z_)jIX0X!#{%9K*Lq}5?xzV$^p?+4&j!^UbH79)4T_-f=}%?<)vB8drKyP<O8Up~KK
zv!1RfN4mN>&0G5BRy>N!q-HsP@f?4h>0J%3X_EK{Z1rMo*P93|AZrEgYLcu1!~_QG
z#G-nKUoeGOxMbvmvrgEQ)dZ7X!y>bD6vczco8ot+_z+x_*Y&n@1G%RQz{jDM`7)K>
z>UY?3w+$+k%LX5hL09@z9{-^vlGA2Jw@vT>U@u+TP(RZDw17oS$AyOS)JIct)mTy!
zqaYrBhhYDV9>?|XXfd?bYu%x#7xX}y^2~t=4ntLT@To|46I(GYWF&fVJrfH^oTW9w
zz{b=r#}JpB+81isq+%|(B5LRDp&7Vu-imx1HA*?%k<{^LfPrgd?ar0HW+?3I^u50f
zE=*+6y8}#3<et~<L44YJdJ1}`Qs=93f|6wpY?_TzFg(W9`DGUp=oF1&dVOd>{_q0^
zYHGrg_XUt>i?&R|uMP$M9*P820Z*>qpLuON#gk$sh&0p#sy36|b-ueVitAb-h5em#
zq1`?=Q86N?!}!@<Oj=Tf?vnrNs@*8xN#MrMG)=a0sg1iu2!MR0{*uwSR_8P2(<Pdk
zI?j_{N2`oCO8`eG5);LoJ&@hm+$@-jfX60oZ&BGCkch%BRc)+**mDw>PgST&`MS2(
z*6vY*VPG{~Q?O<FM~OI`Q!P>31-n$t_2*~4>!wp2Zo9dX=jE@xXXJ)s0JzQIbPC$q
z2>Fm;K9v5MLz6}P*<-#|H6*RkzErcaoknYcyPT`<Ag&W&W7TkUz_Hb{MDRQDCbLC)
zaOqXMLqD;Z6rz*xWePfLa3okS%#>r0T3(N}zJK@4U%Bn>@<%LL921>RL%P@JH@F8^
zhx67jJ$CF)6B|I+6o2hGn(dHHb?~d6xL%zEl_m~v(7)KYh?1jFak3ZQpIi{`Crkl>
zK_GGj`%IA&@M1&}Z}(4>P=z7A%Ub|Cwq^=(3=BwMQfGBMn8}wjr@huJQ(D&cK-~X2
zni)mH*KoHH@boy81Qk@oIX_@rHs)z~J&n4BC71rHJ*wa%6=tZ#aHh#AKG!P_i-F`d
zpuz3MFp(p>A5Fa_DFc}JaK2G9>jO4D1T^yv#n$DICO?KPe)>P&;X#&YSu2aib3f$B
zTW3?^^(P$zX(#oZ!(uqhJXZ^bC6sVHSLPiK&6RrTY!R#)oq;`I-jTsf?;6THPO-PP
zKb|2$`qcf4Cp&r36FS5ig+DUt6xQ8dVB>bfhNJWC;pj9QOJvOBZ<!w~e|s$!mKBwm
z!RyKnWb2uifj4}v^DdVu{LSw(_&vKdDb*JB_=d==6M%4n&!E&fIXU?-F}**VClO_T
zTEX#EaeL@=FgDkDdze*o`Mq<X3JC~PL?xAIRJ0oPcn$vqGHxcn?>v|cXhoJiVd#ew
zmr0kCfJ7S$dPajKAE)q=J3b`>K6;b;aV+F390q>6AKo>T5lQNYEz^B&yJ5}a3^tRy
zRgqvO`#E5DBSz)^swt55b~&!lg3<UjfX8Tk@PmkagUfzOiG%;=8}i}Vig)J~bJ(Uz
z)7hQCbeqyuz6IWNrhP?GK&F6KtLOQ5NN_xQ1yi<ZOz1g*7JrA=G(#gDL$=-mcf|11
zN&GCMdYPdUDZhdSou-Ds@OPScm$cV5B@fk2jc!cZO;r|gM_1o)awd`(-c97@!e}>I
zn;im2OvSRH)^@x#<rY&uP(tFF!kZ!;K!ZK5kMzokxP}CZw&YTIlxsU-|A>EI!JfBc
z(yI}t)aWLkuP+T1cnOd8La9K7+Qztrh=*}?sMw&g!aTQ%C_=p1c`HEc>gR;yZk5}1
z|Cebbf)FlDqpj%Y<f`+vVpkxbQKD8+*K6AwySmncz^udB$gTbJ^RvXVz&dOlVQZ~d
z{+SS(*49?*>9X-k2eP!6>@a28%{96y?5VCBQ{>R++k@ZChpqeY`(r7B5qe%7vlI+g
zIyxK@a(Hp-I$j~(DSegw%w!}uBMZZ2_|W8pA0^;&3EV~?By<(2<-oM}k;?A^b~IOO
z9_TJjE8O*Pd-S`dtTxO__3Opn-2X8ACNxAgVBpN8m+4ftdogSO1TYL>g^3(rZySws
zK*<$Tc__qM>aGZ792T3PS0o@INPE-eu=JiYWhtO?LYcYk_SAsD^WJHo=}mn3LW8|t
zu19s7_m!5*tgs-T+kw`$LdHbF+w$K}jw1Q;8AR5ZlH+Hju=tc=5PR||7M&JxXY5_)
zoiU2Oa#S*ICbKisJjvL)BBHKYxNt(X_W62i;C879G3=0Xm1>SA(T+kSqL^9?R?!Ig
z%;okH>EY3LDj)Db71#pLwb$)(Pdy4cmQ+ByLCz}wq`B7OGH-9D9wjKJjvQfndrc#T
zgto!c<0c}Wl`;&&-`LDRp;hJH?GPES-yd*e2?Dsz>+b9K$IAkjo>N@9qJ2{Q9%%n`
zp>L}`cpbDr9|JmWB))(b;9Y{PzoB-o<}YoMSoGBvWmY=_vjqKf^p6qEJsPDOje5f5
z(}8B2{}wRU(}!CQM}R93$0CFOU`YLk8<1@BecYR_x0yYt4&@W6-C_=VYQYp;5p0vv
z(%zqA?u2BL8+9j>OAZAD!YsA8p3e-YoqXY;)#z3w5E6kA$D=eKsx)X{{D#qWxg4`U
z%XN?OBoEf1H;Mq`Z8&022omrF1x&vm>NKXGh(ANbBu9@RCMbca8wM14_t<=WrQ<h1
zDUxw(XrwVUj}LR_lV25W@YAah)YjmTuzO>G3^7&Ie+SUT&duf@_)Pn1$_H<c;Wsjv
zc7h%|Rd;fL;BJjNFZ}u{6e=P6C6Vc!%u`5N3YBs$XiWcxIh^-Dcn6lZdBqUrNydd8
zYS3zpq&IU~aLU5}M(K1_t+QmiOaXGW(qCVgjRqR`%;Hai1sDJtz&8f!jPc|V=tM4i
zzmz#X>Bm!9P3X7zr^uc|`l8l<#DX9g;FTFIF5|YjuiXv^|9a+x*n15A3}bTIjdp3k
zA@?j)UZ+W6H#?fCA1qe=x`Fwilq1SzKanpnsPQL;vLa}=hs(;!y6He`QK36sI_m)l
z_&0ZlQnm8Jxl&VLh<jfjDF5R>M^LQ!d=^UnRc%5h=*0xsUFx}#$q`t}i`@jmaTD=a
z?7oNZAaJ!klClm&!hw|$Fo5@FN-a*YUnr$;m{&D$<AS9W?e9R^F2%fd+#bn5KU_$0
zSY2IP!{RU>y4dB=Qd1)p^iitusP-38hL(uJtM?%N0Iq<+@OMci!&(NihI2zvYR!g?
ze+w77?$6+ZaYUA)p2cm~LZ_UYn&p2Ak(gsI_z^?$Z%Puj=a#{rpMX`D4)FO?2=#n}
zLl!XZ#&X2c!aYIesv?8WVl>rrwG(<Xi$b&)5%}Y8(|Ool$lu&v{7i7BDO5}=>3GKT
z=gtw?VA3nk8nGxuL;jQrkV4*X^aIJx=jq^f$=e;U)@zXY+RW+&*l>+fymMQ~`%dkj
zAEam@v~EX!Wbh{*l?Mn%oPws^|2KMEBw#t<x=)<{J4QM`LILkZ)h7m2;J^8!c%euT
zC!>~0oXU&`r8mRUT!aEraIt>>lR`y0IbBESyB^mp2|~d5FK`sy_511i5o|GDXqQF$
z8ON#NGY|!Xx;|P`ejqX+377n55fGgsfQ7%(;jj6ha{Xt;!Sei{nNoeAhhO#oeNXmu
zd9wZALOh_71?u*1`^AFj7XX)Q2L4Yw8-MGgcl6|VrGp3atU1dBQE&6!{kSgvt=Qj%
zxqX!WpC1EDv}OSE98l1({}UM_H_YyYtb+B8gnkuLaR#QY6DFsn<KKRO2_b+(+hUIS
zV?FkSUxROns5m2~4+>uG68rZG@hb`e0no4@^9T!aZK6Ea&Zs%1<jl+MzQM2{dI5)l
zCG+<tLmu=+L(v)0fy`M>2rIV3u-X@8A?l6toT2V-AtT<#z@ZXK%l)_k>BW<mgwT0A
z3?Ng1hnx=V)b6k-OUz1~znAhC00m^!BZd6~JdrwTu(Au@$-x|sB@+)KKEL?RtF`}1
z>KKPYB{87z(qpB~J4&eU6``dp&W#G7BA5(ngmi8|HVY&h7~Bv3_XbW$9&XPG*i@#3
z16#jN`QM&xK0SVmAHXxgq%$NpvFo@2L=7x`80xM-8)=KoD!E99&+S9U??=UdAF=5(
zxkylG9HGR4BjTF}0My{;U{nlw^dwG~3C_;HD(ZvHf3Zx&E*t>DvA5S`s|(kaQ(FI4
zFv<y12pSoiY0;~bQaYNr0TAwJ_j}AGMA~5>jif+&!Q*(bQw>wnQ2iSOFK8<<ZV2X=
z!QNPU)lUES{!!z?!+~V<czaGpr?lEB5(LrGzXkpxcyp*bgova}O(L#%eViUFJ~t6y
z$_58Z{CC@UP0%0}VV%CD#!0BHiPc#T<4Ubng?Uo<Uv@C*^bEu)d+vd?OXQi^2QsVD
ztL8|??=`_gKs_<uRO9}=g$NQb0oH+m_$T0aqmo@j=MUrm>A!UOt$RQPw(!5d6mwnV
z|HJ_K1LL15lqCjGi)x`9c;DUNmA3;G9XvGf!s9zW3PZy_AFPBJb?4~#B`ZaT|A`y_
zX<|a5zeH)0j5wwgrp%Jx{btQpbxEL>1v*N?&bSGaLA%TD1U0f#3YcUrhx5!<6Zv5G
z;9BT+_yJTrqL|f+Yj<0f{ht<ahH)}`f$I+^XJ?EVT~LZj!rQ7+Fi=Er7Tw}zSrU2k
z#^a>(IY%KQJf+1*I)Ea#$2<!Ow2HX7gP*7eL3$`E*lh3%2v6(Xnpmy0i{(kmJ34O1
zT66{7;+-|-sk(%tK2N23tMVdW=JOtq9D#bE6oH~vrd8~I-2Nx0oYe}nOuWzj;T?rv
zZzv6|ae`MB*<K3iF<P@mecy+K;Dlj{`eA^4Y$Tab;6n<F9&c!qa3;Se0{ROkywBIi
zD=Pq*fe5=!qx~O%@X$u+X5SWmQGw_yey5h5^?=nby{C*$!8O`JzLb3V8+Ru12%rNX
z8!0u|zUkAc@@uqT(gv42oOd-vcHf<_0w^@nDq1E0N|$1b4C1gyAB~}!MhF+&a0Vn|
z29^AH0SeGe3NS?@PInfYDb*5zJ}hh%h#*YC5>KaW?Bsa9g_cu9S4eLJM)JS6q^23T
z-8*^SaQ377)GGFDHlGkp`8N@-1i|62K-hac2>MI$2=a+PhClMHrqRkBpAlFG!=_t?
zGD1)!Wlq;e0-%rf3k736GE@{XzCU1RO1+CZ(m~k;lj;=aHwT3Qy++wD5UPJT+vM<)
z@rKWQbAboCQY=2RSH3hBu%n(pr}h3)UwxAac5DpD#5Xyvf!LS##g4MgH9QhFr)2aF
z;=%6j?ZF&JA3^87MC^+<UKcyZ%WWOr*CRjT$n2Jl$4LSmL<T71NP$$j@zbPFWbv#3
z#54e$4uddLE!7L{U!nvI2?jvEay(-MB0dNhN#d`xdiE%WeFL$0>?|^N(+E)Elql)R
z%rqt*7du#Ir{HaHJA9m0&ENq@P!@nhaASb#_}yRGMV*2S6tCwQE`aI+o@e=f<`j<~
zQ6O3*c*Y=aX&!+|aZ-XoCU|pqS!#@8^X6zY#8}EXKUwhkB|rysKz{OkxETk6+C`5}
z)C-4L1{{8mDiCqt_qiF%oYGhqALjZUUqo{P12BNI*{1!aF0SVb@&Nx!PgkVs<gbV?
z_}pwa=vnkyJwz<jB~1lH;Sn)0Hy?n#fA`Lz{2{wpI)R3{{SGiy5C^UDaQKry&6hsC
zI!vpz7=6<c@jMfS07vi#IGzEbf8Z5pyzmi2t6`pCEx<3$@B1Zw3wr8$Fv7JRzDeI{
z`%oslhMwp}X}}71RqTvclvP2~qOxQpE)q2|mZ0z6l4TLAQ!*4AjQ@0*xZ2ld=WUC@
zFM4&&VE45<uC?~X+s)V6OqbMK0%^~#)_#e|(`t8O(`wSI@)w8KML!bG_w{VAOCtGH
z&QKPLo^1IPKKG+f)KOr(mNr3Y|IC$$nyt{Ib={lVYgh#V4WRk!HQFD797)+ysiz|6
z{^5c<oo-VErUALh=1_{Bvn)74AoGPuz0tl6;Mjp5ZC;mqAZrOuiU@dJL_pBlEk<;|
zxh;W%7wh{QKLH&9(GgPsblpZ+gU&Q^MEiga_#^tcYNohBjmPQB{Al^=QDy@oS_NHG
zc~AtvW~5ep`J>Txj^E^a9e9TfBcC`dDgb#{CwB7LpBc8EE=k^3_BhwBw+65D#bc4y
zJ)*!-xlZFqrT~X=@2j1<NLCzPmt+R@lH8L##?Q3M<Z&c?yuNpJV&Uk#1h8lJV8A(V
zk92p;P?6>j707D#ISr>ypE5}cf&I~+%9WPbrbO7{cKH5m1Ibgf`TeF&gDnZ82Gc3d
zM_|#L{D`$%{}ES9Hwsq6`Rc$kvUpZ8`4uTT2#d~F8vI^tJ}>I40exxBTQQxdf(O0C
zG=XN=adp>|4|u%zJ;E6k;2ci9^)v-z(KDtxy}>WcdZ0nqOG-)tOy17xYE57Gxh9p%
z=8K@O<a78<)5Cc#5E5yWGIeR&$~`PM=r95sbR%3i6Mq_i1yVE-WL)cz6>2<FxdQd@
zGYe!Zc-;<?d1f}~_xy%a>xsB+sdSD<GWaUAs&#QFa96j6b$|^-FPHr4Yy%7&&<_J<
z1)aC*jFE1c`n*}>eQ@zO`@u@7vOYCfj2@8+v{0h;DXML_9rA+6Gx|Un5A50vNS%V*
zR8N+16qwbsrJ5aT#q3J+eb4zXMo30U_}s{&PP<c2-n`#P=lHRWM$BbxXm_v(4xj*^
zIp4!#=EueEq;?sT=lNC|o5>fR3eCzZ(2<6Fw3vj(P{E*xfXSXTeKVf48$8nHy59gH
z90p8_d3YMH!_F|H;*z}_L`nob&%~ohsOJS#rQZB7kBNHmMh2*Mzy*L|*2`=KHF>fo
zHhx4OLI`hC@$P^sUV#^Qjz>#;F3Lr}LHxA7NgS1^7$mUnJ>bB;DFrEvC*o}S&O?Ah
z_g4JL%ev3<jXzoOx*yf}-YdAgkF4#DC9#++WCn)(+XR}J@0K4qt!ls{z4WVo6D)7|
zU8mj0Y&^GbV?=%n=m7qMUk)*EFq`k3UKyDE{Ny^GOHC;i8@4X(1bvYWroK*{C4I|t
zSNDSCgNQK<j2Apw#VUAdr-0U(&Xm2ul$tuMge<Ak?u_TnwtAvW4Ftcjzn#Em);{`G
zjgpbF_3q|fvC3w-j(fJ6bn_g=2|5_ec##8O%md*7D0{*p+SSH*E%CVYDgzSQ%0xKS
zGHTVv1)%$H4}6wAl_$Rh0jUnvuOrr6Vr*ve6}rvaqXtd3bMN!N;;@mA11k}h!l5fj
zVh??SsJ{z@qrmop4oc$fQYOS_)la1eZq!9rggJA$Ir*rfjP;sEF1gBTa%=EQIU*^4
z(=bATLWVi0J%EIjUK4p3gK1AemQCWw^6gRtdZE_Bq0wF-o6v@c(Nv%W>Ws)$N(fuI
zpU-87$9c=PJ~uac%VVl?#qe+*jqVLETa&)?$7i+X!xCM>TO~qp=qx_{;MfX?tZ&NL
z?7~^1N<|aSeRDUcPk9SVWaM*`%C!&j{rMVdxRV4qFyO(6f+~$sOrdMApQ)6C;jA4%
z*d2nzm>HUj*!PwJL{7c`1gYXFdf?HB%6=n899z1Ts1?)T;q|ErjxU0^w#Pz4#vjVL
z2$L7BW@t!OO~~9r2*&(!3Z7hl*H-@m2v$38M9j?Osrnh33E$3ryM~IEiX{0pnY26E
z<fK|$BrISvS@^j*7t)AUmS){H9m_5f1SjBq6_kn`-k^XA&gm^TJHJMbD<lE_=4qW3
zha-snzj{z_iG<h%d-50x3ps({5%R@kDwO4-(H-{TF4%iuLKoub++UHDYLr(bm$^7v
z^mJbBj8kq3`NGTdYg-T|FfEtP*bRw90j1O0#g-jax3Ovm5hb0+YW~QJTAcIo2KE^;
zzx5PhQ$U|0o$c04B0!InB_Ku|@e074(41?avICSQ=HY}r)6Qixv)gFTyZVfLBIh=N
z6-2`KK?_|I*<t8S0f{cLzz{2?ZD&V*`$agdvA$6->er~Jp&g4IR-R_`doEcepb*<%
z`RCT+t_k^`1r_fOd>(v-9mUZE=MKHBI?2Y^vDdQoQLG`%6I+k3qFY}pPg334U!di=
zX%S*@mUIsq@eDZfuscx@RkJEG)2Q)E_bYfRVA+Id(2!cxEG>80bk?v4F^h%C$tG0<
zkQ@7>f_RJX<z4|VnP$0m-nc0hJK^1WwFxbv)82f&&51*&1UXAiT6hTtidm(;Z~RvX
z)q@(CRlcW?&}a&?0ky|_j4^-YgD5c2V{qx&V<}>~sz1DtY9EBMM4*vRHCFbU_-X&x
zJ=W|zE9iUoAsl%O@r9rdqM3fC2<0n>Wgj(`$Nn`@+nKUZ9?6$rJ@qtrF^*45t7#O{
zqeE1f){KYM<?=GWFuj9kmhht=;C_$XE_H*}`?Jn!98w-CTJ&oeoV>z{dr<YSyn6uE
z&P*eFdxkggg_+fVz~LhWm_jkL8vZ=XSCBrGuL>E7TqMF%VUAX(XlBW#KR;10Qe5VC
zbsa{)kxDz!14u;YM^{Q`SgcZj?+{c-It@)N{~d}NE*H4o*;6q@Ttt~<b1&O`Zn4=`
z>APRiW(I9ZPp+&vqrdpY3e(wZ$oAeNd<rQl3qSbhkVFX4k0^mn1cv=z)$3_oHuh}q
zJ@W*7Q&4T$7}VgBu_OXOw5Gv!ZqbK43jiAXvP)@|j9BdBxUlhg8)0g(U>a;_@(d?F
zWIR+0(!!izy%v{*m=Xkp0IZJhS|*)~D%7i@p{}(4e#gu`Mh3v+MrqwRV;IujdDZJw
zsV_h=spTCGLJnQq6&?;tEtZQ-P9SiIy=~MJfDYU@s~0``e8#;+fN=0~mJs8AJ6)#*
zSr&!%lVr9$vxlk{k%OXlwfOTWy+UpWP2d=2a>rNkUr%f8Ss+&oPKM?v<)El7ApZ7F
zZ?waZ$4);0RURlzSs@zRwT+lZVEYE#?%{G<8iWTH9yRPeUF<0l7$#p#Xvyt!Y3=7~
z3T{kqBth3Pw!>5|luI$9_qp7|a~T2i6iJyhE1-hNlQyJpqF|6oyKeQy>9FcWqmLEn
zlzo|mP{Y@NXpbd)7?+_VuBxHLHYx}^#hCa74&&h72V}z!Hol4yr7zbgk2E)}+CAr(
zF5job5}gOpIg}T7XV%}NpVP{xB9CJ_1YNVfI}2F2CJHjbD9Jvd$W~KK<un>epR4hp
zmHqPK3Y>j8r>EH`;T>d9XLy4Pd(ebQ^L~3Ic)iJKJ%*621)Oo<HGpQt=gbAR{%|rI
z$;(t@c7M^AyJI;xxDqaV0J>n`nhhMy<rb3rDv5bt?lDK|?oOD2-4lAW2%%Ie+8W7-
zV+cNwY!01zxr~q%@F@&I1hZE$dD&*F=#9g&ZXXHxGosh_FJp5C<<q#IU21+&Z<YHI
zn-P)&haUqC3lEx2ueKUEmMJP04kKhfR0O6^cIWEjM;^L8OpOo|%#TwQdKP<AKermc
z={qB!5d{TN#J;wh=dqrWwv2|*X2xzqF5~;96?rgal30wk%b=!wFIThnXB|F>hRRf%
z{xp8{K5aT$@`gaEtb%SZrm@)Wi!vftY?m7n4N@iy3u8y1zj}d)v{A5B6#y$yEn!)X
zBY+m5&LG>wiS5H}=G)AU0OpBzt{86&EQ0X%kaeJ&0|^8j9yerns<;Q7DVA^*RvpV0
z5u=LTaY=pc5ZK<?%91RZdsintrU;KgN>vMm6y#ST6_*JSFfy8}HsL#fIn#d-=P2-q
zvy6dVlJk9={jvWPhdGl5wWSp_=17zCKvUjL1SI`(?Mo0qi+Vy-M<SZ<3P!+X{B<yR
z(N*hpb-)~Znh30<v^b0N1^AhmdQuYVbiF$g>c|zaCx#H%av4L~sk*b5gsD0Py8qJx
zCV5@=aBqo#;3|THmPFp|b8qh5KuXa8O<4iE)$%<^5Gd-ik?t0lYIZ82SejnpAfXv<
zuf9z}9+yk2)!}E?Xs=iB5}N$9vpkwc2QCVWvM_p*9~*=5N^Oz40uX?FkT}`90aR$Y
z(tu1F@1-!{dLXJ*gd_B#sfu&9?48NQ&PU7a@g~OQg^|`T6u`cE0ge`6d5mR4V_KS)
z<|l7OHQLO=3$!2xgkcvF^@&6hu!3`T%2=?`E5OK6YmD2;*&a$!Z}Z}6{fs!-V8>^Z
z70gYP6-=m6sZZ^T4%AIDUKd9YUNfuuL@k@v5w>p-ssAo@liV2;6UwHzn<me%c3+(W
znN3z*9@cJQOMF=Vp$-XW?4>tw#%tCdcOV(jle?n}aGDce_f(~U=29F?gf88}ODL~I
z+qoCS-|cV^n*b;7?0{g6ZGst5G}B|`WjmI=491p3z)(u9r71}ooA7Fnd)Fj24CvB*
zx#QaAoCoz|@Zo6047fm8EAs(0r*te4P@(rt%p0VBUIe}UO#0>-QoYF!^p~h!W)UvD
ziht~Z-c-pLqFnj-IW!|<a7GD}z>z#i<QE7PeX5t{FZ-r3G}?1X#X@nG%2g^Ntd^uc
zg-b<}$<n<sYS5Y6OH)z!HUWOK#QVBpY=+!9>N@<*^F}ZxpVvenYP8gaGOT+Ihte_G
z?TsY@l0^Zq5N8L<yI>(K^0%L;<kPgdD;C5*_mf`1iS;zO9a{Tf;X=_dG=(sQ^@zg-
zuaN`Y=_OTSxJp4}-us_jqSBlXW!m+hPEc|lfK95g{SNa09B+$wNlQCG`8wxIXWg;U
zd#K#Rmr|+Rc5pr6W#~MFukD$rB(UBNC07rH8-nxJumuWm0fm91%KMRY{5O&pQr%Xl
zn+WsSEv<)hwNm&{&a=q6c9@<{yIaG=pfY=)QPCzMXu4uv!t+aT#E5h}kaqz%FkL7w
zo1)<%a1Nca$2567h`T?H77K%T4dKTf1goi)ez*$|+J3#hA0K;PW^9cbJ<1`_&S3MU
zo_+crPZ2y->2$gGnMR&Sgi*2-=CsGy8s{vHZHMsHuk)=DJ;OtXk@Q;#2DfHZW8U+<
zx!P|$BcB-whO{9~I*p`2#}Fw9799KL&YD&k*q$R5cZAO>(iK06y87)k8Hy=dM8m}F
z@$N3YRGAeaXftw75W)#4Ib&WYQ9&Npz5MzgUGr421mK*5&5YdnE6dm83m-O}#;Cev
zzVZMuLcR~W<*LC>M<+c4iNbZGe=YKD<lWWbw~^?Nu_OyRy13BC{)effiTmJ)iFHNG
zrYsN)D8qv>h&YuZc!<dTM7FW8*MKxlaZ1+^KnL>NFl<bOW|bfeJkx*?Nj&?*52-e{
zZwc0jPGSy3RTSpyid~ozM*^P|6+Q+jJ!9+VM-_a5{xck-jerMqPUY^94=-Y%yH$ad
zvpL&^Tr`OV5i$ONf)<~%d4t*S1Nbu+2JCZOb-5Qmz-hm6vy;_8e6;QOHjp%@j0FRg
z-q)T5#wy!#yc<(}941*23RCzB4*~Fqpu|cXVi~?N(yeV^d{K>pnKz`1>e{x|O-znH
zrk|s)l|B-+2tG?83zan;svYfO&FyerTL%_-E|o$|yDl9>)PhuuPJ1Z&2g2xp=D|BU
z-{jN-K2(8|R#_Er77G7v8Dl3I-h59_rqYglg$%D;i6C;6Ic@6$>oN3B7RuOK)1SyI
zm922k)hdLH1kI>b3!`_e@e;yC$`ql>nRK|zpGhr8=u4i%TqTm_qrS+55SAp}wi0pi
z`lg^erpr*HHG&G2VkjVbXb5z5C~vIHn<~+Xrw-B4VT<t(9{<4)zhMqEfshL62&`8{
z6)@qF`Z%6UAFqX6HZc0%62HD{k_RjN3|3`pC<WxzSw=eHi@B+aM4V}VgBYukU89wj
z<Nd`hbx<f0j`n0b3P-QMe@DL&5MYsT>9U(b8op~gLsdh`cUZMny7xo+WVO8&lU2r0
z7&PeAij+W(922!Xj;jq(_&Al_tR~_W_&AHL?<OS1KVlQu&19TdL$D*HW<&wRf%(!0
zCS#{zaf%X)5JF9C{b*nzbXqPV{+su>eM<(B>7qzjNn^4(eU11?A%sl?HRi**b(R#v
z3newnv@7d<Q5}X|#*^f>h%YJuX)R>iD)ziSYHJeEU@D!b&sWrXJ)HFDL=u4o*`-?s
zY^e$#H55nS-N%=qHD-hS-dA$8#sRV6{MZx}?a65gW}aX^hV&7VM<q*oc!virTFFy|
zc4>uFLoiM~2X-fEUE$rkxZphXLYP$YBkDD|ezd+S5=pNj8_nR8s_q8aPScIG9;q=;
z{|pjZz<L;iC8BR+sVZg{K}NJd`lDzslwu(lG}dRL)DFb3nNg(C^4vRp@9tG#H)q_z
zdW>Cl+srrE5l0~h2%C$9AY!>@K5OfT96CDxe6`25Kh;@mpW5_Nrq~T8`KQgAFA}7E
z-lzcjuGNY+#a){I19EnC)cIWP_Sml}Idq(3+4wXdt-g#M7AWAMWI6nGItcaZesC0c
z#)cWUm8^_8&DItMg-A?5`n>@stHH(%PXG<BT=nah*!V-x#2{hX$CgsXcGre2pFawJ
zuWESp`V57e2xC8nn4$wGZ?t^YU2yN7dJWt2>fnv22%$9)9XRpXJPfBx)PWkJey|E&
zEw3h!SefE-gz2x8n;eatPJqhy7^>tTI&!C2#H?0SRd2Xs;xZGL^jg2wL*IhhukRb$
z<J_d_Q1aVq;#&zru=#l@))H50%%Zq1k2_|Y$|ffl+Yi@c5%C!Ebvq<h?~-y?V(^D8
zF7X~Ql;yAkyf!kq412ZfEI-6!0m`JBC+X_(%e8y36igI+RrbV{XL2RaQ1G#T#J63{
z7KNTpJczxBG+JoLqDOtEzb!Ju@>6%_t;(B#-ua>TfqwE*E3EDwpgES`76}==^u0qp
z<1v*kwOJ8)Ddc;XSYO&`|9F9BElxITQ&Hw}(kLu9^#MBOc`G{v=nzbi$Lsic9xX0{
z@3K2~BI;F2>?6QTHa~Pzr$@^b%z7yy(|prgtg2C~#r8R{RMS^(H+5sF-S-<0P(YGf
z#Oar7RefI2?1*p391&g1wz%wyhMYXFuXo;dyQB^u03Wd8-RlHcQaN>@pMg0RCl4TW
z;kmgUjSmF-Q^mzA9XCd>HneUtUVMB5AkJ-#|0=O&VEu=pOPxWVMyYiFac}m0X(y+k
zX+L>d*M+x~hXN2RnKVL^_7#9IR_Cy?97!s;o&&t|vJPKlNH_~suTmN#s*LgXi+38A
z^Y#1OussQBoW+d<JRm4E(+xJ18ZCTsdoMIoG>|fI;n41!>E&$p`QC~9VQt{eiSrH@
z$R@c|w0oX&NWs7%W@qN_-z5!TD7!pExerW-mY|lw&5{C0Y8~*=yT+lk*Iy-LQsWtL
zk6jaVz}R;?-;xK%p~7D6^;Y<xLyyMc%B0`>gc}FY1P{;+`R&z*4F|Pp*scxO2L}P1
z{tJ2a{0(U#SJJ^EO+Q8UZl5?-G#;OJ-42KVh4kmLeCIV!0q}9hHtX!_P;p$IGNoDH
z*{lEsv$JFP+05D%E&@6itHSw1bB}k2XjoV!X+t@1$f)F!5ueCjM9SW|v3WOCRyQ*y
zzS+y^@M!m|rKxw4KNBSlZD;sSzA=(<-;YIxLmcV!iRyzqw0%yks$4xt1i{^G0FLx?
zt@8bs!NY}2qVOuQO{rKJQRTq5($*T*7x(PWKsn=Zf|x4*(RlT0&0W)mL&><S@SR#_
z7Uq<_lJPH9lG;E{Br=%zwXHPy2{J<nA#Cs-!>fv+WHvpg6cD4V)T(X;p4XWi@PrO`
zHF5c@Ym7e`_U_op*0M6a<|vHqz5itU?Q)$U&}bl(cy0F5*~f+9Q9(@*J!W-p+6M3b
z71^x)DCL-5^Z%mmyWg??-~N^Ck-c}al}$qS&fc5sRaPNHWL!2Gk-hicJ2Nsvwz6j=
zgwTDuKlkVRKYV|9A4kVK9j@#3dXDpath4f<Vsz8zU%8DguWxB&kjI76Q)Dh5h6d(W
zrK{8!7k{CoFAAaA=Gb8JI{YpHR0sg`BrGw1P&x2Y0X7bLG8u|R`hZH<-3%HW;a&Wu
zw|2&6Nn*?6WNNMNjI8XwWT}eOFBH@4bT*rFn3Ddh%9(FxLe8oFmx6M^KQ4R!X`1lU
z+3NL)Jf#d4bxG>YXqB}KZCO;_{*x5;XGl?6!Ufct^@bvgd-dXlYFSXv>jSfps}R4l
z*OMK8U0+GvXTYl6An&&MKy441f^<*F9<3LE?A6}iCSM7};z8RS8lPWfvJ`u;e8B5}
z_`T~2gOG_2Wr*G*0gRyGW`~RpG;3<-+!*aNM=gF++9G>Hv!=J9&TTVl!klQq?apqO
zlldNkQ%XT<-&R7MS5$S<&ba?@+Fxb^kV}ilbR%WVenZPmxXBbvD=}se)bMi26B>wA
z^EC~Xm#6KO4ufqdoFntobT+83Js+ZP_+Oh{3x&i?yS$EhXzkQ~_PmqRl&#=0d$dNb
zqB2bOPKJnAv2{d<%yg-~cD1F;FuEr?EgWrj)1|$MoS@%ZG<VXa)m0nyd^s}s(-ynh
z^I!VsY2lgDy+1#%u)n`8yuymng>t6m<^BcqYx#-^iubB-$nvqQKxfl<gUDU}Z(*_u
z+-0T3WJoiqPz1cXJSzf-`ljkPQV)n-T3J|M4t6`ao%YVUtc?1x5322b)pSV%n>7Yq
z*IDEy5&w@d)PUs@vHDEk6QEsRS36e^anbc9eY}JDJunW7WOr2;r?m6AgQ&2gzQE6=
zHXGj7nVNTaPx><<C#8tJ(jPwA5Di6TrgECFOx5c6^vfbm<dO)XF<MThbASv%zL4z|
zSFT4rx#aVh*8H?lRYOdc(rFX4(P^4{vIaF@He3D)0JnIsbe_v)$;!9otdD|1-TLGW
z4cI*@zC4?I|H2Gx{Z30LInR0#>+m0>J{7^+&VQP!vzT{Z<)i1X6{|p0oEPB->I_dz
zxg+m3xo>B$&_(sp$@Le7oStJ8?p@SGTRzoob;vf3()XofMHox0lNa^_$=&|ypuAu+
z4cdCdu;BBhW1{Y1Uny^wwhbWX-L9*y5^(FCdMg5w9|OvHBF(BdZLZb<?_;rL;Pxm$
zvR#J@tzO{(xwA3RYn<;FQlp$QS6EO;mtA|U^k8fmtBH)Y0BPq0V*9~2O00fY7cwg2
zVy<gkeyG@FEJ}$SH2K5`7rK`}Jb!OQp6@A!3`Pq_q)AcknIEl%f&M%iXdsKZ^mX8A
zf##_6O3L7?MBK7(Gq@c_&Ko>@IG!_)D>d-EGqV}dLdIj6%ysVu(VJGQ?Enf7EV&i!
z@w$cVK+V>Zzgg)~kiJPtGmPl@2rQaYP%`p=u>eFc@gKJO&c~siW9+uFU+1>{0af^r
zjLii=3}nZ#ws!*AaII7ov^DcFRm800$*=*}w+<rxdkp;@umO3NC5J}7#XoPfpHj4C
zia|`5%_l>cU~g>=y|-o>ao?o4HMD=Xug$OnC5ZBup}`EsST#-`kN4Q0y8;AEfVp!f
z`qHOYOK3R6r%^OmI?Sgy`drB4HD;i)eX4^Ls}93^=GevQM7xUvZNkr;`NWSoT7!R5
zUK1cqSq{E0n&@ouJ}Cx=rJj4OFn&{S49O^fM6oUmsG&{3l<N2pK2Ak{oEl5PZ$DVK
z2h6@O0PM-cUu-zGn5$cs`sXw)kNo~!xB32ksq)1W|9hY4>z4_fh9<vgE)tNN6+u_}
zjuyi{f^YEqZ=e+u@5zn4`0**{Iy(t0fgzp&@YAWI-meNT3mxzXjC?<jeB{5o(Dqul
zHV=?GLl9#ozXN~TcX)v_vuxKJsMBqAOH9*mMc-UA04;~0Ccu4f7@~9Me$OAS3t_Wz
zwI)~MstJ(@<@Lb?iLaT-U+kbz_{u?Vg-;fI5<(0$zK)6}z8m5GkMVmMWrMw~vc79a
zJJB?=Ca!}Ft~T!ODu@F*oQW+?cP53u0_AVEbL5^3w_RY(&m%L!Zk@{v?3aM`xQ3Yw
z#_p+%dk(k}=4u~hqo~sFD{TP&7Zwi^l0q;itcU@&#q_O0`J+(miV$uuD7@744J?<=
ziSg=>kqaAQV;@&Mx^X~Bg`Cc=J3&JS54)PBnl5ZjY_~mNmtVL3b)oxdc&aR&5=jP5
z3Y{RVJ{#aRNeXmQpBtS$jy<`ZT{A+_a!Qv(8GMoD`B>X0F>-ouA3aT)D)jhsx@i9!
zP;W$k%{t0)R^Qi`7-#ZyGd~VMD~0Hne{Bk5c3-W9nl+XW?93u{cAa+EFbHOBi80Qd
zF6){VBgnYvh%oQ<?9JAUv1EGqw}xf_hZp#&H(fsH&oTu$&!v%}n#~(zoa*PH1ow-t
zaib5>KTk`4&6ybmUb065bkI{duNOn-e9Aj0SP5wBl}!zfrcNG;f`B_!P;6*m#z=>F
zTJGv6xq$j3=QZeJsfEuR&u~P&2H)EW8=CKYUtb3*Nxq3cW*0MoqEOp)&AZv1{8;z5
zaw12Qode3<f@cFCAJw!jZm;Y=(8yQLb0a=rWq({+zoDWf7n_HLdO*ycxO*pFVT}^u
z56^NcMMfb_IPxgOfAsTv)*PXwTDzQ)!#QvleKvf*JOV<6H6iwG6jxlnXbUs4)(g;T
zs3wi{8!;ph27DQ-wQKvf5k<TFT2@TjYqq)ArSNh93Hk?*AxH7LPr$VmKXUVP7JTHq
z;JMl3YwBc%qp`bguoQbwjs%y)Ay+Z4;U6n~M|_8-u7ox%zkNh<7e>v8nU@r3Kyl*T
z0%X_1>F8q!;`$0r&oJj6D0QzcaPYc-Cb3+4KP1n$Dd?#8umY6gIyI+FDR7N<6*EhM
zp<QKDlz8{MEIyO_)>xTA-8jYvdMR1YkAn&92Zdz5KNlVeeeKn3_SnTO>NOYu+w-R_
zkBj43sAB9}X<zz9WhYgZ`>|de0a%QXA55x<VOFJa;D+ox=Z!D3AR2-<S#drsNMiaN
zYEjJs75t=Z*+^lR6{4AaKJ)Kx4-IPdmfNpLIP@(2v=1RW0e&RR(=0%9VesNa%nm&u
z-}f)BFntIvb-T-IA|bO%gWcEZFfuh?R9q?sNs!si8BH}5a3u?{5}F@R-})M+X!6#_
zpQ?cbUew8$Q+NzqD=sVeDe>l?f=D)hxV=6Z+&St83jC`oTB<@Wt~Jf{NeY(v1)#YM
z!GM_VoRz58XJvmYGc?5xcE5d<`+|k+&TI_5Z#9_HONQ7oQ-JoFv%Z*T%foH0-(X||
ztNMIT9z35S=BFQc%{nt7wll}2W~M-V^U=$_!cexSDYdXL1bzP^56`Vs7B6(Xp-uY!
z7e$_h3fhD(*}^t&&LwaFFmFTOb~nwZ_3ZTbgI__ksc!Vxz0xe|7~o{ix~1#dY7$2P
zD2^ruVxN_=dZ_2fO3nXNo5ovteVNv*2(LOfoc3ull^^e`pN`y@L??uGlN+vla5DfV
zmei}Hre!&L>!f=wcz7f8b<DN<F*|SoHDslbqA(GI8qk^b`KSF@(%#bkvquiI)x?%4
z;az68K|W*)r6kBk8i0+LBi)hsgg`!f3o-z!D&s)z3f+eX9tL9xP{4wapao&*0z!K|
zF4d@JkaNH9txHw+1bUaDxe6$&nU2nND45pyreU|Z@8&N~i$Y%kFS|b#xbYU?z)9{&
z@MO<~uBHl}ygYKfjlSZlr3w;`((T`#QUfm#cKZlW&<NpogJv~P;W-e7)2AxeX~zdo
z)RY;&f)b3ONer!4pZoo!%-Ti3SP8FHb?brs=eRs*vh&V(08)ULjtF#|t&XM?>`K`R
z<m1pO73%3RZaKAo$#{9yS;;9kg>d<_A)b~F>WGS{zN(P(-@XQnwzp#{%gQpf^Oa}e
z)@*Q^cb+Qd2TH$=Ox76_LtV_z=Xs?1suq4|d?A*rsjgSfqto{p5M(k$aSXU<!z7*C
zSTLW{+}SK|##0aABkbC{OM#(7Ejj^yQTWZ0+(&W2$wKvKzqwdWxi%&0G|{<HQKz)W
z*6vr{{q58Xme-l0_|YwGTNFUi5|hScJhsM6zCdHfu9G2l<-Q~laV*{qCUd2_S19dK
zQPhu>*f~l+fdxa0D(m$h=LuyLCA~IpoXKa2W(UATruYaZd#xSPZ*I-i)lkWg6{s%5
zOS1nc^EtjiugSHJ>bZc=8CTKb>}NQ(*OcAekpUPa46jy#5UncrZP#&$x4%~VABn1J
zp?&K(hMxfiGGRZ90Z92L_g;_+I*X7c(|d$v06`uUl{<qb*5vg&Uqk-WZUURO0rhtP
z<sZMgz-FfvA;Z*u6j}J5K?Y2Ii31OAfcX?Tal*%bRMuTJXHxRL5@v_H6M6AMeL3{r
z_Kc5?tGP1nIrT!s!}AKmhUsxKz~k=cpR?ufe}M&BcE(@0H)cTJZ;KizVILqUUj7hm
zG+9(Ba{i99UQ^C_rTIPn-$`SiGG_ta&*uMHK?wz>3dHvsXsA7ei?{4UbT~TwAFVP2
z<4fs)anru<e=2?d>bM{!85}J6^5w{m*8q8_HCXD0?t=pCG*Le!bYuX#WNk*^qt7*r
zO}W8qi8MT3s?W<Id;e8hg>g%i8XHGc+xvSh#kv*rxNC9!8#5eFK%6687sp=+nj?+0
z7mq9B_?|CGA0N=<R}oh)U>ZF)<Fy*(FwngOaz(=B&g$fa^J24nyio{l8lZJWek_wC
z&{=fO{RM2TA!7Pok4HouZgTBlr!5o`Vy~U`>mBX>o<5Pw${dUYN^Pdq{F6l5WKf8y
z)zO-Q?E>-FY-IqNdNX>HpQe3~n<}2lJO|MS-qkNicmy*Ys-3KJr9b9!jm;~${t8eX
z7HSsY+9upi@n5?U#PH?BSioiTwwwh%3=ibTyl!sv-RlmydnhCy=}Dr|s9PZh_kaxP
z+17YBI8K=5k=7q%Q3?2uLW)%E3LTy)fOW_pWJ6iyYk`f07~gA<263sTydTV{IVRyq
zzKd`A3k4dHdvds=kOK_(jmt+cUve7O8#lhVMX&>$b7mo=bx8L4t56tMte~^7ab3gT
zN=76G1i3(2Q)h!(ZFYT$LKKhA^K$R(bpP?n6%?Bk4~&EuEua9l8rYw2`0S@k08+!E
zHq+Lv!|ZN^g2snOZo-(Y78Iyl4$~ju#>l>tEzpY~rp$OKs=n0+|IV`9ZKn?pYli_5
zgdWE0G+!?pU3kVnMi1OqDhQI`ILI**50rdxuM3pH54w#SU-(^~RUsbxHwplA@IzB3
zQR0p48i=rEG;&olXe#Ij$sBhI<wl&SESbx{8TE|iKOMTS<YVEFk4A9@ahvb{qVVJ9
z-)fR)S4KugJ=VqUj3ECCB^TB`VG7LmQ-B|5J2ZOil2ju*)Bb4pm$8HI-qF>PcLP?A
zQ(=sgw2cB6_p6xe984*=oCI;Y`;Oc54GndeC@t3s?7F$d$jm>oq|k-~yZ&Is8n8WQ
zNfh27OFJTDxHG8gbCOMTSeV(N;}Z{WyVIRTz(C?wx`2~+k;eVWlF^o#&QC*Z3EXm|
z2tJjv5Cz=rvF5rz@^-o1K)M>#JK|v6S=5BuPoqHP9>qDm6lxAThe>OYWT@%0M*i@3
z%`3+ir%-5+<Y*FUmN>b1mAkC=5pfzQJC0$Q<3CN{w?gI?KZ3^YiEtor=Jw^;63=I=
z&l5RQiTfcw`yLe!*DNNXN>3<0hy-#le#2=5Hgi4AJSqz)sezv8T<ytZnyCjxWdTMY
zpD8RH3hzx4>R?aZX7?~ad&AoCCKRj*Q_KzxgxHoJ2LU6Qo&#My*WGUFisX;TMas5s
zsUNvEnzRW=31<?;XA!O2fA8!<uqK$fb7&VgF1$d}b@*2P$bIVt_u1n_jNkGC&zFL#
z&HYTA<Z9o{YvO<s!|UwO{6<7Pjz4WwwOvP1_=ewJt0rG&o-nYWzy^efpt#K<L)yw7
zPT^1EGAAfaC8?p*Fb+gLSt!)WI+Gy!Ia$POAo5kr-EPV?&VqnkT?OPMtbP|ur!=r$
zEG^))v>8spk<sFQ^rt#`>`ovRhUQztX@A!=P#3P2z`A69U&X?7wE2&`b7%+)QM+LJ
zN%d40-{)dYyGY|5Xp)tlGfwC;!bf9x!Lj?zdtg~Z_oiU!<;+!PC#4<!z?*bd1lQV(
zz8@6USiCVSe={>BD+r0vQYJ$2bIfSsbd4R&)*abxy|-=?p>eB}$(hjQ{9q&{(A6T`
zL2}#p5-fGM86g>Zi|Z#D7jwRwgi?T)IMo3V|K~?mB!OY-+L9{o2pHNnQwrGgbtsRv
zAV|Zs&ATYw67}J4s6GLivUsXqWg|<Gn<4q`2-FlmAcBIX<2D9aqMgx{t`?PIHXJ>q
zEHTf4#I{iP;g`ot4yDWN#>rdq{i04I;_0sfq!~@jC113-YKM9EMYasqE(;s(FzF=5
z_C=B;qtke{es}Q6xSMCP3-HXLWw0@73kzp{2UmW~x(wxl6P^;1QiTsewHI>&Qq+D*
zdzwf|EbiM@)h?^Su0jD6=q3z|ViGmnHBy-!A;%c^E`Vj?KS0_f_VES9@WiV>+dW9!
zF5f$^3&n&H2+_~BHjm9YgEsIhvl7{LQB{Z;t1sdTHl0HK>wZW0GyfM0u%8+mSK9Xp
z3JxRe7j&4ulbz1QNE4)}RcCKCASKN0Ig=pW5mZ}`9uUs2%e`F==*G{5Cc@I14Q{$Q
z_^dkRMqTMRBTjzrM*hqZ%HDn@@qs7LY!Po)s`$|hvp0|)x7PYncVd~dB64u4*@GQ@
z_Jsk1DF1V;_yxGWFiF1Hd=-IC{-sw^?`O8#d=fm#BbLNrD(3;KD6A1F{2=zF_8qn6
z5hiMc5DeQiX|92*6ossEzDh3CFev}iD;o#uo*I>&ApQy~q6<I^rMp>&<Uw9X{P5n<
zP<lW9%6uidy?)EfHnM*;w&S<m+m1v&)>lq<^7?H?ZNkN8((Y5#7zXZ)&P(KFb|0Y^
zgrK^=`)mG*{<6B+NPr9a=_iP)_`!a|hTZzqRwE~({58^|FM=3?W{=U*mllF)70%ll
z*OlN#qk-@~ZhR{JH-GCl5BRXV&qAsLNX5N8uP@1c{#>Bk{h6tlz{Z}BQO)n5qib}d
zsLU^oAP0kYRTIy(2MdnXO-^}G4N5PiMbPsvI<64Za`YwRfES(XS)cm^8df*gC7b+9
zEm@)kI1+?6?P_Url|jiE&!}**_IVZ7A81_WeU{sn0}bt+0mZQB2@ONVX^I$a0%flV
zG9uvDp#XVLND&r!z+SuSda+U6w0|cCEtFA~cs~B{;pJ*h|EB6V6b{|}C{U^R9cOVy
zx0zawaz-j73ej#h5Ysg#Ohn41QWgzzGFP1IJm~Mc6VWI$Btv7tI3(mj%sK5&EEy5a
z(ROul5*vO8FI?{{M1c2vgy(D0@={8O{JUK%2-+plfB9yXkU6(w()ZY{`4AT{-#96`
znSo>ir2U_Sqn|kXxhTv4SbGRwD0Ju_by}J4iZlc20}i5|r#;aJHR1!1-+1|=3`O!<
z0=$h!Np#-|voyg;v4BOXCwYmv!)DO9hH@?yi`;2;stN9q#=A|2!thsqyp!4-bd$tv
zoNLii9Ot9ulPY@s81yfXpgiEK1X6BIQ9tO?y0FC73#>2u^Gm5nz?MtWuZ^0+YKC}e
zU&x;cOToRguTuk$k0j_~h~T~vuVMI)XQ}7Ki(!lZGdfB9|1mS8Q4um?K(c%SG$Uxd
zyu6om;4xFfcg=`{nweEI-)W&S4;%&vth2v&-|2N_VD^&6#J=|QWO>k8ddV(PWHvH)
zSEC4Ick>Mg6x<eCu=<E?%&S}8UNxze=<Gwm2zR5`=QyjOqzaK2-^ZZ91N)r|nq&J_
zGPIXTEb2T!)q{pEL`KmC0TI*7ZGXit0hCjrw|3v1mSVyeo`glj@)HPr4~A=45v(I|
z(EXpMt7l8A4=hV2JusH3m(0}+<-{arTPQR911y71kw)FC12IGm*Q{|@x)C}V*Z2RZ
zfC--X-LCtv0h<QQSdGX#Y<?Ib8_>SSJ>j(+$iy>6nwF@;B!yUq<1Wl!)VD7~BtvU*
zRsYp+D?{rX-mYkYudiKpze2R>MjLvAGG+kV*W&wk8Y~qM1XoCgkxIKepGj#kFJIcV
zl6BXExMK}+i(%K|_k-yMFv0{$p8#kN<svDxee;0}!u*9Yk^gja+e`Hll*sb*J**(Y
zK88EU1=e2cjX$<$5hA3FwWgpiG{iRJCH+28p<k0I<OgQtFaj9}8cpD}IR$YL$XSfJ
z2?U-@HvsSO!80J9d6XsS5;HtROzZn)G6+a24C;7vO7#G%gxaADKF85IdnmGd8`uiE
zCE%C?0Y5rnCTvF<a8G@C&*}?(?dZoxzB`i&@6J#J+~~cJ$pFD1?WYuU7IN#8`|{TG
z#v&*vVcZ)XkY^7Z3g$2Vx2QM<rFt$d*v9v*2H&%4<OZeIDSxPj{tdQb@SXf1$Yy8h
zQ5_$BcN1s53PmoM2v@LPV3VB>!A}=fUIJW7HQfajbog&7RPgWqTp3BbiCI6p-FH+n
zpdbUsbduDwK#<dekPPtI4(}7#!7cEpCZnYvsD_c@MGIl9dS9Ml00xBM1yE=5ms+<P
z(LGt^9?*!1CciI@j6Xd*{9jY-bq0nEsfXvuH+>&N2fE-brlpR5H$pPT&=n&2O<N`~
zMMW@rY^`_r{$;uc5;_&oExp+O^zL`);M_hOQSu*!KEp_q18|1??N3W$-{eJd1QO$H
z0zN-rG`LRyPlqh$33lBF?6?GvTrGY0v%QbjenIC<RDe#vXj`hs4Z1RaW$9`-Tv*$Y
zX^42OBj8&B-wf?nfiQh+wCi-y7pw3>=6_)^)j@?1A#*_Oda~kPqbMBn^4gO>p_TBv
zzSOUJ*IN%k>SS=K2H4-Eo&gS>{3d0C|5M1_=)=Y<!1tlE(V)8Z(7!)R!Rus)|EKTO
zMcs;nUa3FA&IOmzU?7J6*Y#bRg(OX^Qgd!<H30|%h<*d+*w;{Kf}adBPGJcER47>j
zTv;Hvh!XWqZg*XvC_HKH<)}xEV*tAvtPmiBo1orEbt>ZDt9Y1_^s2mNynmd>+U9yN
zNSpeyv^XVwK!kKM@7K4BpUbUQmFO1Y?1;;Y%X30RxyqB0z^x+U=hWL#D!N-^{V5&H
zb7+i<C%fOE5iAgT$3ZVod(N~IH1Tjreh1jrOtNI*tJfePSNFN4f3pbQ7R)#*xLZ`t
zipeiba16cIN)lugvVRI3EPN3VDu?yy^Ob?x$W?fEUs;1RyuTwbz@6A~e>gRL1ws*d
z;27-v0QynbDHv&0*e|ayo4}t0S<p)cnlnvqN#L<rfjD7gDC2@M;oj{B&(e^29f+BO
z{mYx!0arcQnSusE5_r!w1$h;~Q^4?(Z}1a8lLbgZ)aRkAP<=o{t~H+btbgRDN9jkw
zTuZ<oYye(D2eiCpi|IU8#UL^yVb>7>!`%w@j(}LDVMBSNdQ~bo`~~bM86ioannzp_
z;K~b_X9KnxOAt$?J^u3+CA?P(sI#b3@M$!A(rU@zXZrrFho)|P0VPBhb~GT+VYS3h
z2_}9+rYgKCs9hom%d!Zi!IVbJ9tFzu;5Q(g`2)>0$WK_Az76`{y4s6iQ+!`|vMVSq
zAvrx1KhO_v8LGkV5&0Ng@Hog$SPjIev!R-puvj}laQzAR#CxA+#&T-rI|5+`8a5`{
zWB7H@ZvkL%<KEe5$n?q14_yT+-GK5eR`higND#tTfeCxLGbzEHw+56xKYfGK-wz!3
zWU-+@uJv-nfb9bL_J9=zqF^zNWZDInHo^G;%5G>sO{#*t3}YX^N(XOY9uS5fjjAlX
zQU%H^AvpaTWTMfa0m1}{m{iUcMoo$U`9a>u{cfX<pT=0$qv=Hz%~FYFa1erCdn~@_
zHBqfnp#;3S(@1@r6wFX$BFN-H-5gF;<y6e3f+VW*nW~)WmDp{%YGekExeV~xg^duT
zc|+<fe?w*$t9mxkTpyp^L?NjfpbIO2Ux857>Otteha01RW({*dFe|SulLSl11_U+S
zID&)8+-bHmQ~C?lR&EZvQR3`{8hQ2rx0(yaGG{$g&Jc4Ne6Mi&=a<SPX@J{eq?k$)
z_v<54jf2>Gb5lV84u?E(;SiIiGW>!Po<O~~)TT;vZ~a+cL_UUpkW9f?slFRoSd7b&
z2*q075(hA$=@wYwqWlDw(8>Zh3X3RMxKfIi9WFx0a1u`VU-1kwn5?hAFRGD^v82Id
zBbOj>p=uXv>HDIJh8Ap&J|yN$K97W>yiB)30ydLX!Cf;#z$3(V-WxI*8k8>DDu7CY
z$87`K@(%!zA44U^ooE@$1&4Ny^qbuQdQcS)lnK$Ov3AlIQ6o}+L(ez&^(hEt%Yn86
zGDYJ#ng5X&gu(!LFs~U){Zyj>_Gz$7zkk<Av(LGrWz$WtuEyUWjCi#{^ZiP449o|@
zlJAXY-Sl#wrq+XVrqHk<z4;tDCZkxp1P(;tv;W%H69neBTMb#eU~dx|zgM|rsdgP+
z0P}OQgV=@p{+!eAjWSq->J9py8NfP&84v&893jTii|b2BVc~$ao6-DFDkFfATG;(;
zu8vY8uez-ZD;+MOMqon}WqPT4mI3F4u@^tm#!Uw)!jFUaFdF*6v}8QHJnVOP`_mnC
ze!Byc3@-^+?x&UrKD?d42QT3q1&myio$W?{3y@#0*J}m|5)PwAPhd7;zDy2#k7afh
z>y!oa1yIYopjB@FoU3~^S;!6HpSn+2;8=o#N3ITdncKBO!^R-Kj9=uErgHzi!JSi!
zO(`Hr)m;PKB5g0qA<=*!Y=!p-gauFikE_^R*!vH)i)%%Hi5CaH;2<WZjv+hz%5Vtq
z%A_cRd@>h3BbjAPewTV6)5=)ZJ#c~sbmr>o6C|L!Kyo!N;OdBn@sNxHs1zxOp8OTA
zyda-6;IZUj&lJt0(D(#GB+xKs)hIBqZNp57zUU19+NsiGL^i+A*#OjqQjOmh>Ygu~
zkV*HtfDx0}I0j1+-YP}Ds2>>yk@0)CS{Zv88E$=+=2r*Yb`wPCSEoIzM!wwrBR^$n
zUnRf>`19(mpFNQ7;1!bI*1nlB@Jp7o6;k)0VA_?lC@bhw<;${F206aHO}sOX`&&=d
z<oHas!qnS*BZa26c`lzDbVX%fhdNuFA8C*APNlW4IPrwvwt~3;&(z9@zg6nA#QGPa
z13V?>d5C_;nb|_keICut$T9I>_#KtX88EO0?u#3Xyr8M`{JC(><+Izb*7zb8?%D2*
zyxCdob;7rIQqYN>n5WkV?<y#knyVT2cKkz%aep_0!+(R@$7GwW$K4uRD$}nSvHk}a
zbj8|d&4G-KdY|_NuxfMMiz643%%3#5tBcNHFW#NQomravqo{h@z@(NH;W0+8#O*#?
zeIIcz(+8_14M_(9b!Jy5ld=QQP#^dma4!t5<fWN`4KVpdn20(vWA^6VxMWm=#J&Lt
z@KRV)6MO!P1@H;n5o>H(D`e}{h?8UpS!|OClwD!I6sWW>h4$AO$1YJmO_)E3v(cN_
zRJI(c{`H>++X+jJ<8r!TRFA5Uo41gjje@z&@*gH8hS=Kiwx&fWy7Vo+w?`7w{&6)H
zy=)#f5mX|tesZ{K>ZQjqJq7FK?Z<iS)Ds1x{>Aipf?63+#L$R(ON-7xMCOF)*9$3S
z$NBmMPjYlaxIp-$TfzFZb(csJe`hQ!?f7+O^@3m)#+!dnmfEj+Bcr6DBJ}}>qE#D2
zTBF2ikvR5FvP&&EP8L>WE46xJT%1s5(n#k%d)mKx<IyTtx`gC(+&CF(8UkXA8qXWg
zA{|M|JeB-f<q!jb7b@l@oap=9IYKy>ueT<99q6tenzZ_#VwNRhBQ4(T)i#yHA>+cE
z6CGGtVa5zTmnW;O0%2Q>Q#e^%fQa|mVSqBX&qK^q*&b;v0CWiZck)LWb|Ryx>?t*K
z<w3$A?6FoD?I~(mct#@Rfrd?H%S%(R8~#Y3g)+6VBw~B*0B&KcGOc9>)j7VIp}}&^
zW&R|(^_;O{Lb!tj<t>kEH6F|SVSDWBwzpm6f?<utN1@UF>i8LbT(+75FOK4EjyTwf
z;-;)$euR=YEmS?T>2;=S*lI-rb1$jX<7OE>DmuZEXZ~S?5AP`vF}~Jw1RHdoP`GH_
zW5C?uup0#v`B!c|N7^qgdHRXsB%kIH!x(CF=J-%(HVGr`nNr*hPJxC*DmGE429%_k
zwq5G?(B3i(t6%0TS2fc_yD9A0{yMYa9z!*>e?>D$&M}SW20ah=tDjV}WLA(>Wiu+K
z!Tm0vRXqna#q;|+yiZpxuMX%0b0~nh^ZZtx#;igmSJh1}|E$`#)UW|W8)6<vDocR#
z0`#v#!ckjk-10KS`k^0CQPyXN8Mmo&1E7w^{PPLGfnuFH100B-W_mgFDF-@_92!@)
z<>?g=^Q(+8hOGiXj!P*(w9G(RdU=io>=L`g+n~aE$+udi5lQ~p_vhQek_cZ4dne-z
z1MAL5T}Y9@`-G#>u2=PmLeL6gDthpUdKt}E6QOM_H>e|sQs>JY5L#fjG3s<;2qEY)
z6m{Q<fopG&2;PFQvT1e)>_*uN69HxFa+o)<0@YRMD)h5-Hoe^Gek(n8ENqBB*1t;(
zYsY>g=*)lU5h5^~eH!CH0M8O4$E*-Xw1Q%!&Eg0H0^gzO|DqwU%hW80O7S$?55{AS
ziX8y#ezC?T`Yh~Dka{J|z>wGT(6Jtf(Xk<kkx_&5aEV>E@rRST1z@?X%Ou>ZtXt8&
zs%t7B%;Mwjv=1H8qjDG|$Q3^0m3bsl2Gv8!IaczV1Fbd}<e-i95GnE5j#aACW|)(a
zKKMw>mH96KS!^EBeFy3R^0W0Iws2SNN;5H4Rn?RIoq9<k`P_MsJ4Dewc?qbAkI;mK
zsEYMsGma$c+t0Mr%*`PX$xJQcsfHaa`(3AO?t6Ehk0}V|j=6W3Awyp^%0W_2$m<B?
zw*`YiGJ;_Uj^DZ+#uK#rcK9ABVEtyp6rd=9cnyHICHQpY`OvR!Ook*~(1t@Ru0$BE
zj23Gfb9zXON3NPC9M(>5N{{yP-cz-`ys=<wo3#Oaz<G$C{5TFy2W*fUW|#;=gKo%4
z-r4T?-G8*P2r%miO2O&50&t()<s`#B#LZJoh}k^p_m{8?x<%|8bOtr&G?c%CIHG1L
z5*po|LC?@dKWR8{&l*=e#Pt9Tze(TTsA*RuWdnV{4?raO=PnZ*qk3SV4(}b9wX{|z
zL`R+n<FKS$w{G#2n0B<Mr#JMfwjxECLQ{xug%JjkyWYQvzHS%wb{eb^?Yu+J+%DR`
z)YI&ENmRsWk^{dUEV!|{>Ik?}Sp@o}bAqBh+=C5ktT{m-P@cTU1JACK#Br|nLoeby
zSuFOIEv1zq<I5VmulZ@73P?rB)gdc%7j=}yt{?}A{mvk#RtbN&yf|V1`wZG9bff2q
zQ|p@2w;f1(7$?QJKi_$dZu%5tGBRYLCScPQ$heEKy4~zS**nkh3RqpFU$U46c#q*T
zrLt+;|02AN+=JS{T$I+ky3FWV`5pD7Bvb_*<rPqa_W%0ejsv*zwy5^y4Kcpv;Sk%2
z9bAu%Lx|mJJNwQLTPfEOZTuqhgtXsw8h#Lj&lGh6(K>aC35e<j+ojfbb38%qPUo%}
z0e^vH!K<!##6{YL|1b(9eU|?gg!s}5=~u{}zbm)6zVxy;Tm(s}{kQTk*N1tA;orA4
z)Vr|6?USGa+L;1RCFdpq-8z`{^Zw~n@<Q#8QiqSg9Ld}$DG1gr){>!u`jgtYMN5lF
z6Tzv+Wm-;TRPT7sW&Vk+J^0vz&g~b^kq7~yWV(>-;8v>AO>&JW8+1DU{)OrNUh9MF
zs5m>>zS4}6>Q(68AegfceYRi%*5@KHs^5Xk9RbB63xa4OQvX`EI}gVyOfzEdg_JCl
z-1aTe;WW!9e)3Ck;{E*(0#3yr5B*n|`&+YO-wkp$<Maf&t9?YNe}PW2LZ*m57zZCO
z{(Zgo$slYV%n|{DH(=Wr4t$_SXO6_Kna?;#TpC@t*f>7t@8@of_w7(x=pwf;K;TxI
z=E2gFsSOx-VC!6JvdH`w@5x*coUSE=Bre&7FfeUZnMEx#lZa^n_YO~J2eh;S;}QZo
zOuBtX!8p4^eK@R+WilGdVZpB;P4FlbzngA1G)%)@f`p=R?-ePhLFgyezs9|MRk^^8
z6ymNhD~jE@?Qt0+O>Z6cOv}xoA{P9qH%9xm7G#wKP?O8cp!5>cmM?kXX{ZB`^sYFc
zTqC>d<bt7Uc5$XB(&~%#^|eao-e(CHICEvk6W|?IFMo)5Ox>gU6<ex|+@zzRuM0$Y
zV4_A5tP|1%YZtS3BDgjO8R5c6ylEE{p95AV{U=fuLsqbt)Sp+4jg8ALD^EjdbBh(^
zc~SN1evjv5nNg{BzBv;u!YKuwL|G9Ol=+3GeT%=DUE9|Bgcu*cz(SdAd!6(V=Wd5|
znE}7$tLUHDB)5hmK}#pjgUKn$R|d_tIu`5*5c}UZegS~EAT7a)cN~Fl#A8#GUI#c8
zH#W!hYMmDqy*IO3cBOe-Ry@N=h$KKulsi-b>By2t(=Z{I(C(hx2j_*eBm(df5U8Kg
zbu0W%MV-Xi4i^NoF|s@M408{+5uW|F&fBG0=qN9K$*XdwxVpEIY!*h6^C~+3etRgK
zQ$t5icU9)m$z}AJ!oi7+vbp3I@<jrxCMF4Pq+M4eo!r`C9AH%riP7<>lE=at@qEmX
zQ~*=_us=S2eagXcf5ZHHAgEi4u4|#`aZs{r0k<Ma+x?j5jw6!OXp1#3mIFZZlC8^o
z7deZ>n*P0guVpmM7lK%J1X_w#tWl+^5-GWbN(x^Q`dGU!W$MtcZM6y$Wc7owCla$d
z4mAX}4-bnFt6*O1a<=CbXjK61?|z0Iq9V}Q&X0x_HR+wu2&gYN?18of*63~mjbvqA
zZ?$FCTQAAngogn;Zs$k$fB(jFP>b#5ZkD=gVyM)INQF-;_lX#*tcoo(n0|dG2?QU!
zhGGa8r5#h`Ks~PC_Ip-N)u8z2=(pSf0z)ijN`@h`<k^1Zc(5L%^_HN7FwAf#oZ{+d
zAJb3HXTs-yQzbsZ5-GPCr5U4PRwjGSjs20aT9uo2?76CHWZYP@htfE8_pdmP5Bqim
z6o8sB<BlckeH6cY56;|3sI6{AH#nv(V3i)MAT45I*7p+QXGssIi)vEkG}O6iWb};8
z;nbO5U3efqW8iTb@G)DAJ*VXp`o>WrG2K06sh;gmE{RLbEhyNz8^@vVijQp4ZBZ6b
z9e{a%?gL<j4zkNl>A5{jAm}kGND3x#!=)7qBH)N}TN@~PMha0{C3Q+$o{H}e@iol7
z;_y?DP48fS5P|{Hm52AR%p78sdi3J4*SrePCZuidy5eFREJ*~G;<g6AQ?LoZn%Rb$
zl{E?oUk4{ABlOHI<Q^ArlKo(+CZS*ROFKuh#b2w9(W~NUK_9yYXoTFvz|<HM`*wM4
zGD8@jF8$PE`~I_ecGIODS@s<}`K?E#ZHKVnWTR>9I0<rXKt{2iI&h!-OThN}`Vc9i
z1~k^v%6&4Jh7J#iHC07ivZH&k{3L%XnA$q6AK6x-z(8v3jXqpzpZ6q%!*Wqn>PF%e
zxcCWky#?lbGu#v99Q?9whdif$*~Vw}N&@qh#D1m?#BwSJ1$rZ~*PVB=eg42(u<imb
zF5=}|#;mO`rpuvJQ7PsYj^7&7rxA7^o6|mtSi13Be(hGLo=kw~AB~-o7k>vRIqM_2
zEE6B>^FHx}ljQUvHm1Ig%7c*gllIwCj9c~+fctu^fTTWl%U$s0N;yw{Mn?y&o(-MJ
zpS{^dgXMrIg$J}1=MVnAwm+LT`v(&bjUi9%<C)K+0^E9;;RRm|4)4PYVPU>+DloT=
zz0RAA+MUm70NJ(C7<Apla+NhN*_lcJwpxd|pXDZ+>MojpGy4*(^=}t6%hV*TwB24p
zo*hqqotjs5G!WbEnhD9l$MsIXi@v8^51cUG7vKiRVRu;jCA}d-a#AVAbf`q}$p$32
zDZccqMmLZeOd1R4^KRm!mAo(io+Wleme1?OboeUpzH=SHObD?_E*I=7lQ;cgfDak8
zFv`8@vVS*Ns<#PK#H;lIjwq=!+xa29A->t<J!ONC1i%2Wq~bGt4G~Fhf6W;Y|5`O`
z5ERTEn{Gdp-ORnG&Az1nVsI`G+-O6wT4;B7PBPVg-`L58!oTcdk&f(=CJ!aOIeq(q
z*DzW5(VJ_LA2xyFvlYw!K(rw6oePttg15YWJG~vzE2q1uF4AHOIb3^17H@BNzHkBt
zoBDH^q1fURvFWg>ARf!Jrti;TXb91=1h0i5a`Vd~1+W#2%*m4-4+=kvr|Stv-a<eg
znr5k6ch8$wR~oZF4hUqWW$LIhQUDB6?Dz#85pj!p^vYO;8tDV0u_AQm(uat$pMAzN
z`hCa0zxj8*qkL%M<5J2kCOoOx?YOzcM-Zl!nAxS0%=KAUcc3z~^cAA);T3#aAS-&g
z*Jx8q#Poa+!*jl120Humh11>Hj&`y!Paiy9jTY483TKD-lbev%s9R~4_0OX6N635Y
zOdvh7dj@}(GqYBO1)S=tKXXznXY17Va&)>Smt5#kuc&5tl@~uwv4fOCj*=?iM8#zm
zW6MEDdzYL?&zG33MQ;uF?KcPlBW{t1j2ntF?r`SiFGY<}Qavok`Y#rMoO4yz<egcI
zvlZd~=JZS7wJlUN$pTKn7Ab!Od@neJzQ#(!Y0&2REBh;D?IT4P+B4-A#PNXOu5q66
z<L5Q(doKrs^nML@%a2B|>*Mk7j2_vkifG7r5PkT@;y9i775~P77HJml6-fpos2kii
zomuAfpRzDLYIK?xICVVA`y1!7RuvLrvH5z3L>}#wT%3Ng>0)De{-4R0*A0)aRuC!=
z5(TTWyg@ugD4Ba<=<{6tD?lIfm@iH`ULA%~@E7+=;9u0~)kjYJ%<P7|;2yKwnW{Qo
zDYJgiCKg+y1o>-}eL$is!`SMeH)MZ#&*45}J+z-&LDIOAvQ+{)gOMjPRa1*XAzz{J
zVBg=QBOfRF-eSi5_Ud*Y`lCT5-bce(>2t(pX#vx0!SriGN&h+nx&gtM1sWdU=;6(G
ze^HN=vTPJ*=O_watssd)Am8}@GJ03m+`c!q@P1$q=WunIypQAZE#zy4W668k2R$qD
zkMU#@F~7yXpXmXY$J5x6uU`po7shM=Ete^zk}LnDg-U<F%w;o*8T+~9?pVYv|KHw=
z&HNT#iBQGiPzy`%i^N`W8+|-=biW@<BG-#M{FJ$A@_CE%B5JSL+8s(}e`}uCr=`#%
zgk=;x1;7(0m~e*k`-*?vRFcnD+^2VMetJF=LsCYfy#V5=H=l}_O{=!BWWY#mw~r)1
z8a+!t&7oM{FHtr1*9^zG@IY&@@~XUvp#UT{A6EjVyz_K9UnOnj0^QT2E#AR!_D(&L
z`{(jhM2D~2R3=#K4YYP3ypmDzz1pJ3mB60bt2c?<L<2)f#B#AHpRKzK{iu9|Y-6Tg
z-byC>5lVRK%9vuH8(?OT8#;=||7dqq#gbEMO<<T-{((a?;`MGg<*(m78%pAwU9Th@
zz?%?u^?6H8bsrPdPxD_gI@CDw(eUdndKJ$!mGAEZ;Q$Dc^pl^jNd)!jvI=Jwg48*Q
z>B9EDX;T$1miK3V6_baqC&BbjSp%)dw*721|Mgz0I_JIrT&vW`FF~Gpg~XC{m-d3A
z=DX1*eL*xZf~UP$l<{|Z5-CzB@4KR;LS&@n$VdJ3kZ!psWBumITLp+Cho_ZIhQ)RG
z^N75LI<%`YPN#_)n?F!Om;AY-rfm3f4P?oXnF#?Y9|fP&D@!0MvX=HO0r~}6yY7tn
z)m>;t)Ab@Wa9WjlsDCcimDwzHJbx7NWl)fbsDPmgV@an*H7_j)-Q0tmyy<<s*;4Bx
z#E_6Kow>T3)f>?UBn${$zoHay1a+v`<nu^83_D8K2q~Thw;4XK!l7b9Su_uc>c%@|
zsE-b?ye!2WW$Pnl5JcJsNP3Mg)Xn8|EAnlbk8<{AW#<gu9YtQO2&1w-b4IK4gUmA^
zR`+MB+@?!szqITD6bb{Zmgm}5I@8nVWMDF~R;GA6)XKKf_FMB@aw~*TRf1`fv-eeu
zsl91ii<Mu_Q>wC?XTL0V_DJRV5t9}2&Dsx?xMJhBn8CCBfk~8l&9d|~xsBIhs`d5e
zs$S4%5{sB?VHLz6xHID70NCjopl2%SbY|=iPlEJ`#+vZ~=cQH!mpdnNT~v7;nUNzT
zN5Hx#_1nHB{_6?0l@*FJlS^QS%B92N05=DqtBJ~P2V&77&=8oU8i_z}SF78C1oV=3
zPKuLuM8`e+9b{JdZlWlYzRA%)=!qcjw#J@zl_<{$C&8%~b{N{;k+UHDI`6IEGIrfs
z-?$QKF_^EO<2Ot448(lE^Jy7LiN2e=PSR2y5@7L@14lOCJ~`7#V7T$y__7V}-qU*t
zKXvL;!^_PPU-c1R)$||<={M5t-bV?9PC3mpFwb|&+Vg~Fbi?X3G?kD7Cy_$8omoDh
zU@`FnMyZH3p|+(B6l@*vuvY41Etr@Z^$S^jY3sCZfcY3F!M(tUioBkF?bZ#tc8G=i
z4H3p%4V?Pb%9e?;<ZiVEFY$9<K*tG5Kl(7)9PlvkS+N>5W~^}dcmo~*3cXkHOgM{T
zYpV5;r&BE%=6j|_J>xgW*u{QeM$XS@wGMdZ&YO|dQ?8;4VWMPOx(dl$v3~x5b0P5c
z5rN3l_kniCM^j^lWT(<6&w$>sbyZu1xAz5^!?0d@FH^TvFAVO)uqI8bp^H*ius~AC
z$(@%x!890yj?Voyv*P=)x%=n!W0+%i*gHsbi{<sm=)X6z+>F~H;&#3J_Aiiyzc)u$
zPumOJx2r9@XhS+%PPV@)@%EkqNMP{>^*!FzJS6u&a|*~bt>O6<M(C}HG@N8pnE|p5
z#AhuSj7P?ApSwbVL%~Nhzl&H8%R0*11Oh9#H=&2xOCjSnt98d^J*#p#Qk~Pz<hDkr
zQJwud<o8_;1_jrTUo!;VE)~L^>uYpr+jM1A`PgG^rq4gNn_6Lcwe~q4Tw~$Jm1ZsY
z&6tiKfaoB&MP<-uOvg^tV`>@MK2WHcwO|O(R1Mx5_zc9^*ubs0{jFlONRxS=wrUj)
zwFe;Wfa{jwl68r&h;VHnwg$Le*N2%<3&N0gIh!Vd%^0bi@vO&MmFr78r=q<9|L^^%
zG()>*V90Jn`=5*DS*N3-;||iuQ$NUQE#OvlX19)HRPaL-yY78R0X{OckCdlGj|H2j
z{Nqr&dl7QU0=k)cyv4_-68ds=ua5`%?_lkZbpK(xoLd3O5MVx#9A#YZs881t8efUG
zyXUmRw?6dGh^|g8>-ORH?j<CXss~B;eK=re!<i|!3~2UgCWwA&`T6EpTcId4b#3W`
zSAV)QB}D}$W!*O)d{PIJf}CdNil=3zO6NGD&~W#bi?y-BB^e`*UBj)GyQAuV*^s+A
zKV@tR|IoZx6YMC$DG-6Mk9>&kWAR-YxX5=lNCa8!#C;4F4TQb5shWE;F7A>mtgarc
zZVP&_J>Wq{W`2!jFM!jlO{-`HCjZtI7V1&1ZNsCcgv_yLz`;XH3$1s-!#tPOd_+s^
z39hX7m8f!pX}o0He&&^GRl&;^n!w@HuICW4P{a`l;$q#8pZ>SVwk<*9jkrEMjv(g^
zLq<Oy;beTXGs)T%T`__vOhJP5;HpO3hswUL@q|@G`3r47L4<k{j$(KR)vw9d6GY%A
z)F@D-)W1}C@C~vxwR&>S`0>(%aj%-ToZ=Xrmv|lmxx>Q`>VOy96TKiS*}c4J_9<So
zX^lD8GW@29a=g05EUf<m0#46DdtCtM@?hZJKiD`Vu_h?GBe@-CBF8LlPWkv{>x|qM
zRHHypg#0or4aYgaeDJ6$z2eR<`G%GeRJveEOha3zwZ0!4nF%o)NXxufH?6`Zn+cs1
zYQ_g$fVW>dUu6Rd4`!Ws{vjHBbV`AbeD?=i_{1fNTTru<5$nNL^NlcW<*N5B%#r<P
z;#F#zb?7Wi++}>y%Sl!o(S%=nsDTFEaS^|%1ZYpzrx_?xQ=~*afF5vEJRbqgbu_Sx
z112=V0wFq>^=KYA6aO?AW3iF8KV{j8oPPT$AIkvV$@y0M#s=R*L-1*_z4j{jd++~h
zD9lnhpwKH{61UYES?_?CdStjEaGL(rQ&v!CK+e1e&9_2zLYG$HARV4bjpKzQANSZQ
zuB}`RB|Z`vkf`*k8Qtw_o5_Fr*r97|e5ce1cU*0x^<W~e#0YJc>X-%kpbFiJTSiNW
z8u3gJSIxmO1jcL!&M)t<HuGwWm-N1J7TQdKTC306lZCCCOgv`dOKrS<rsrKEa);sU
zFp^>?!xHkf_4PUc7F@7B(A$dYVjy8vr(*6Wi|ghAm>cSx7j>8|fy?NRq>QeuZhS%h
zlh_rx*`~^uatosBVt9c;qZ8B>kQ1F2d0~e20c%z(Wny=#B>I7A)d*y1&e!ewH+aZA
zb_M;nPrk}0(K878aOj%+>vu+jXFr@^udvvBk~ddcvs);(`>i7WT*&&1P+AYIfMesw
zyVg#tUh>GmVG#A(5`*AsXAp_&1vJ@BR`wt}=S(#3&2_y?Q`$fp)3Ot8co@&a<Tm>!
zi22+Y@$(b?VUvDM|Ln462$=LBfdr}r$j$B8dvpJSHas1l(+x;^SVKi$k&Bu2gi~yf
zP)bieflo03Yr_3tNlNsq6moHsk?}W!wwmCpx)$^9KIkT!Ui_GV8gi;>b?LNgG<IG*
z%Xos-7-45)Igl6A$QN&Btg6u)wel<anbC9C^+9dL#M;Vn*5+oHRi=S7@sDIC_dh&&
zQ_lArd;@bU-WFpiHwZedpiR^ieQ{-DXuzbc#n_J3;946U*@a!xW?K&M>nbDbU{6ap
zm()hs6)%H@>Uj0T<5y8a1L>k@?Y$|Tiy%1!r^GSL@*PdTBFV723xXJOF(1obM8eKw
zk&TljO7nfY*k&*&ZP-^^eje|n4^Q(%D-4Ckny??Z`ERB%;?>@D(RA;O9%vUwTuiJF
zC9PdMgSY~;mtp7o@~Q*e6EAJ?S>u1;#F~;I-_uXwbFnk(g2(x4|Hvf=GW#g(3wq7Y
zzJNF~iCy;=O&nAS4%0qLaB*X%3W2sZYk~PM#QM6nxNqH^KrfaMrH~MQ!v7_8Q}aMg
zbL@qoVHk>jSbG+@)Ijs%0P4Y&R|9zslHdnojbD$3uw{3UDJ3j_^1l_x5!Ivgo(12&
zN+>vpng5O)#7lJDm=n2q##8JuOM+^pKQXz2pVI+<aH{iYeF)r3G~9QIrwHFEx=_V$
zcG+xm5v7BK%n%#(M5+VFMakEN)K8<&(y2~I+gPp*P%;vIDZoF>6Vytd0l4-O>b5M4
zsvvOp4LJQ}gvB#YZ}n;IJ-<W!#xSSqUJ$lHWoEPz9+Q$>TH+DP*p>e845eGh%b{<b
zTxJB~lyux$gL9@9M&=@$VZT!M^3mb=ah_C)HZ<Jz8-gso-csVV1E8);`6+B&K@x%U
zcMi0Cy|}If-{Q5ZDm*WTprXMq>jeF%+Vs>EKls6*9Zu9-0OGOP;@z`d<Kh7FXONk-
zA_N0lKut1%t?;&1)M-xn(L=n^I8;|RwWC}EDEc2}86M13EpA(psKanNGNvf}d6*nJ
zHDt(||4XHicdHCv!-jbh@WO#Qhs;QEo#`*PLpW(CUe?+3_l!a%DbyC(2PuEjOI_BL
z?%O=*?K>p{ijDpdM9Jjm?d1!x+;zg@@G?Ld7AeT8TP}j@j;%xzU}*H<Z%&wg2y`o-
zP5Kus7V8{rW}kjKP={K)?$I65L6}-L-UeQ01?C)e>@~3-b*DJ2(EnlqIkGb4MY_GW
zASg;gHSE~M{V5|3@NIEoB_L1acbq|QZW9)V;g{fz30zXSq!Mss*=syvyS>WagO<I$
zx7?9&al_eSd`6x~rDDwg0m`3=UwZk<<lzkb7od9ZnY(~c2PnYRc(JL2?+-+&dH1Rg
zyyvx1(Y=g<!f7Z=5ibGsu?6i2Nh}Q4PeBSQrCZ<cu$15>sR!}xFgX5$oZ}cs79X_K
zwYGk>JFWd-4tc89?<&}you|FlergB4H|djDq5b*Y^ZTH2<w&9P<ibl8VkIVHCKL6}
z{TPOJg*KRK@K5f%6qr*)OtwLJKf{A*Qo$8wE9IZ#x1=!kj@!Aj@J)Q}c<mP&S(RgU
zO3tW6D9W)Nu;L+FzsS5Wv4(aWKefW9>|d2_=eRoJ*~}cQlDw+49NxDmPxlZdh1TY?
z(cW@IdT@1DRi>YT|6zUQ7Fag|;!1zjuCD*et4{f|`>j8$?w#ZGPuOlFsSV;YM07I{
z<UKM@MrBWXNm7fnwcg7uMqZ5Gnv}AlUaI$NeMmRVQts{XK?St{&<k^#BG*>f&A4Q_
z3_?R=Qke!&?f-=h2;qo<3-Q7p6#BQnvw%)DCp>&uihKYfQ^#_DV9eG#^@AUJykANL
zuG$B=w`K)FJd>xIVRBIgmN)6-zB~gCwBSc*2IUZ_Dn+EDjBIHh)D98cpvY7^kEPfe
zHN%l?y75Yavb$`yz&zM-vAMU}O6=-Z&#xQ%9rOW9q6gDdn5vLVVc8Oqu6Hj>xChcg
zpaa;Qt4p;oD0b}*9)_YfAos0(M7<cuhV5;zg#9AzFpG=ao9NcTko*J!!F!!2kvpf$
z>%Of<9P2kYM^+XC+(6N1=TQ>i?7Glc<uvChSQnFJ-VFJ7!@c38hZ_SB<2`}-c=vl(
zpjr$#o9y;k!MvfGz*aZbUTrmmiwqpEjavQqjq+MgIoa><yI+m<Q%KCO5W-@tfp9%6
zRXT%tkdD>ceZ@^-CW?j&S?Y6tU~ULSM!oI0<jFpiKMBG9FqFIao12#M>blyh8ai=2
zMhB=>U`q+S2}xj23hxOLfAPK3T+2iRf1<l5Y}G0m+#cVH$@=^)AsF-z6bnBrrTFDA
zBm%TZttTJL6Cjpv+1*UA|71V{>M{^*eWLeI32ji!5Nk7vro7IE<vxgl>>CEh*J!FB
z?OjNHEwPIoru6iFdk2F~dx*=k4GL102Zt~cn}`v;|JGCSsOQkJBSiUv24ZsnLDzaf
z9-Ute+}w+2J96k~LTpJ#rt|0x(MBCJ7-PyH$cN_ikwxnrKEg@gM)52qsd}YYhP*;s
zDAvSYm_6Ymclgz)XSxuY@t#{to7<19>?iQSnYzHw6X+XNm{9lnV$+H#M|cMGp_tzC
z$$jB1;&&+ozycg^#1oW9xB|FozpAFa?a`5JxyNb-9N(7S#V~QXd<MRf5XlE01-ANs
zkO;xa53^~0l!W2mWAZkCBm{be$2-$sRG=|?D?-c^4ElRXr<NB#Zc{V^Tu&{!!z)Of
zrVg6VydyY|JS+u82tfOQfzQBL+~jSC<EizLQl?0=B}Y0eg+rgGNeX$Xz_>*qrEG%8
z)Ry)#5qQE*DpV9HZk*tdb8JqGX2#>AGd%aP9R;<RK{alE?#A@oQ=;fM<dEqU(@V)$
z81jI8Sj~tq1u13+R5KgiDB`LR=^@id@!dpMIm)bRw3%rJa>YP@m5smnB_JX^SR<w9
z`_CB7`84F-X6xadEycWt{8bp_NEq)ZEZjc-1B{C3p@}<y1Y5nt@r&Fg7*8v~e0EP@
za~d~Jyya~9U;C@AF$LQMJ7wEX;vGC5W?%U>*ZtXV<$8g>=UAzQf}n>!=LjT^Yv_1e
zt{|M!GL;d;;HJh*uB?;h&%)&bMo$RyxZqrpjm@~Z=hM6JcRc>-lvm|*i;j?F=XbTU
z^MHX;pcDq3J=*)3{S{C}KJ3vHuC4Dk>6Er(NGDplwrV{1na>P4nn8B@P6D5afhxxe
zgeiYP62WH<g(^hOm^59-&G3uBmfl&S7Ip&00_J|Imw$}*4vS;OETC{F8;d$r>#dM5
zkXQy4G1ef`5w3^PvvV=`Ejo9$M~+i}PTR%1oabsWT1#UtIRtbDVj*CtxqJ}{qFbkQ
zM2tVGL&>-qs<jDGPqM9sHcm^|QJy<N)OW6^Cj`^Q5D}Bkz<4BJXMwc4AAy1=4#LVT
zT%?NE|HIx}MODFdVWS%aL{dRQM3E8!NokanmM&>U8UX?6Mi8aDOS+M65RgtuX{5V5
z&*c05Z;W$sF3-&w<J`QyihH~F+Iy`v=QE%1!P$iAY(81g;9<+=#T9G0!@fa#ja6YB
z@zZ_*wF#X`?%+|lYrS~2{{Fy=mAmb3@Hb5&_3<lbEHc8)AlsuMcq2I)73Cr`Q9VH-
z?-@190oeT@Qk+V4pWfhoF}vfbdRb0`^XjKn_B+{TKc0T~Fj?_#G5D=ktf!2b`japG
zx!Ol?5=~k3dcfj$NBScezJxS0#{Wtj$6igbS&z(mBGdNH?R<9mU~6g}WDh`-yeDb#
z20xbhg!I6C<SBAxbeb(;kQ?EAuc}~_X0hHb@WDFR!%-j>MU;U-z4T`dn+=;M{GrIU
zx#cUCzkh*yj@;%gEh3U^iw*W;lUK?MHrj>2_=Sqj-9_EyaUC$JPs^<<>CV1@2c*r$
zU!>~#CA<`XiJwj;N6<waAJpboqUpxHbWr${;@xi+&9wJr@^u8GW~IAG&HZW*Fp{Cf
zGWTj}|3NT4>mJJY;6&oS7`W_}4w=C)-jFZda3Jjtl(g(R9VjH|1JZ8<R6p(lfBwEP
zn=MJ<D?Wf$UxC3KdmqWNdv6Sr4itwzaZJkrb0{{|3h5a3W;P+B1A;hrJBhc}ZnVYi
z|E>uCQ0&06cXM8ge$h@7CtoOZTqfm`WqX0MI}C5ji>@Bneb)Ex#y-T-g3FD?Gljx^
z^fBIWz{Am=qa3HvRIv)6A6%AC(b;YM4XnoU)-2)0?qpWtrOK{prTu{nMrlN3<^`&=
zx$jMXDf6P<d)qT?eVITk^a02DsgcAxoY7|n_9K&3*1?pp?!`2ZY1aIhcF((rsWPDy
z&dH1sRKimzhCpPMj5iXWGh&a$T8O%k;&8`U#TqjCY}Tk=Qnk}2G+FF_ct0fE;~Az|
z;Fpg^ar?8#eeNpFfYe_<!Z|GpfEAq6_R*A0p=C%hoKBgPJJ40l`VJl{l~(Nn;MrQF
zN-2spAzxR%mFRbU1PSYdFR7bf?zuM>efsAK)3ed`c;9S^MxSJUA>v10y!|9h40lgB
zS^9H)n44#6S7`%(_;uYw{>cosT2w&f3ig=g`jXk*)m7v|ut@{t-kpB}Ng$H31HlaX
z)>^iQD^9n(<=pQ8JnBw3C}%xCRd4&_)8NF9|D+Qf5p)ER-_)Ocy3N-cKaeWeN$<(A
zg4W^2@Hmce25!y9tl5K?WIEJ<{eAk~O!>S#y!>za7>dZF-W%HvND*3_YuWGTc9G~7
znQEMX*)SzIMKYskS6QKooY|Q-pdWLZ;L|<#_vRTUeEQ5@4k)%bI!Gw&wV9gfL+%2F
zU)CZZjw;+xDG7`lYRp6XK_L1Plkf!n_yKEL1O@xY0wZGlr*BX;M+XP@A=;;2@5F~6
zMOM)79!PRtVwzEQW7Lo0@M2)a*w;Y_<^2ASCc!3a8UOwLGm6toeJtZ|y&}7|2GfUi
z<)fv~od$-o2a}1IZC=SlQj96mPg54Zw3s>iY{cdMiVTw;3nQWfbpfgGq4uzia3Tsd
zw$>-W?B0EEfEKWf70u}`2H0p8^>Z{G+<J7UCl#OZk&E7D;C)&=M>bh}obM=T7G$KT
z1>*o%q&^a8Lt!A<bQk9R`;76woGNnQRJpm|WTsuS-iR*I$rrZKs(l3^_wv8m!z)Wr
zMgI4H{n2gymvwjV|51?mTcElV&{^}DBQ^Yft@B$q*=2!IQBfZsx;SmB!;}1$BR2Y<
zs1g0%|L63Lkmq%8H}me?=zV$>=f%$9{UrwI+kNJcudX1hxAGP)F0KkayiM0{p!7?^
zW6}McDkh79aUZ=62*2Rk)C>Ue{Wj=Y`fh|ZmS3@q0Z-4nE2NofI%?h%SMmEsr)IU(
zU2wDD4I#6Qo`XuF7tvsfc}E1*3pk`O^}r|+ale)W9V&!zYQsmvZvZEr-PYv2Hjo+t
z9_%ahSt5=jA#?fFE~p_XK*$OoDU-LY+FYA6>^@KdLU{_5^h-Ef{?DiR1{AWceNaOK
zc&GZGXGWL*zs2Q2;#+%F6I{w+G%!CV0>m9`F2LvRs`1M?99Sx(RN%q{nFtv7pY{JA
zVb$MVWYE=J@6P+QFt0804sT~S!fzixp6<#cfBZY+?``wOfTa*WS@Z|23$Xcu(ZR!Y
zI7qBM?Q9j4F_7blgokek(i<bQDu!ACNbv=2+V0h*&&{A1QmB^{?@y)ue4w2%eEnuc
z43A2@AFOx3;*$Lv&W(bl*xlPxh(~sK)bkr4KbY8<?pGC1(S8Fe2!OZnV>n2%=k6DO
z%*q_PeWQLWjd8pO;c8G9)+3LdfoGm6_2gr{NZKR)x`g4zt75~)C0ENDxoXIM1Z0IC
z&oLjrJOQ+1BVP3I{NY`@beL`Z`@c)uS_Fp{1(zoTfz|>FKhI?d-Ma+22ajcSE(_c3
zF|Yf=We_)V2(K-EMKS!^1Rtj#;|GHRDT)pei|%XZcHj*_T*c|>z9D>g->9+Da#3(d
zPnM)*Ej9luc1eD5BU}P)(M<qWZz|?ZR@qRtqV3k?`xi}M0ShR8jc9=SO4s5|rq*My
z4O!`LyerH8PuL3`-oHrE)8SHM#q-1U4=m##(z!9YAqAvo2~<c+?{}KMNuo0XC_&6-
zl&nhzZ6zV*b_!Dv0X+{6C?GkE`e(u6BD>{@^Hn%)7z3X=Xjh4f23DY8qf;&TCTluV
z|KTRG%Kke7W?~$&9zew!$sGm1PS4=K!@k=8!vbg)B);vz&7uQj-!zSqik=rBj<%dk
zm!k2K|EyMJWz*^(^T|Dn)!+@yVh}Vf{}EjQXty$yo!a8`rwnAZl@ehY4_NiW6+)s$
z+aL)7;OBKHaDAt4W*YLTPhmHNN?>^34#l6o$=V%R(4q;wAF2W<F8Bh4fFK#NxBbFE
zT<1Pp1GoW9_UQuQc4_&O+GZkSK5<k+0m$CR?&v>DoM0zWs9kpkO>*!dx`2>+iNP?m
z-3c1q$=1sS;D<rf1`7r2@>OOQGHw#Mtsh^{0j(zhh+@pR^G0J~e--ToVptaeA$$^u
zPwgAj7Zo+cAPcS%U~cB?IrT$0v($LdHw<<l@CqYz{bnZJD-(57ehG*Ojxnm2M)xN_
zxr7Q>-V%ihA`q;D{kcRXvcUhfN+=P$T%f#4e-ne}>nl#7bPdDPL_Qac{Gyf$8`Tfb
zJYrIze}U!k{F<zC0vV=0z75bVfF@wv|F^DL6Ey1P(L6SL@axA`U|%2~m;#na#4hCQ
zow>XTbIgE8yk{_-0nO}P0yM4LSWQMiWd(*T+N#_X^{g|{389q&HKgn%F$NK%)xnA-
zI_Ztn=Fk@OPh(}K7Qh@4S*8=DK^m;&65TdsQUAQmZM_uE4}Kf^EX2PR$B0sHE5uWq
zjemxh0z9(dYC~@ntZWzXtO9ywn622O<UK(Nf$eAMCf5C?z46>mAh5ZsHk5)ZfGqS3
zLY3YEWW#O;XD3mHw54W&rh`Zn90+&dHQaGKBA%xXMh1?JKj&*K1$p_}DUurjRJlQq
zW98I_KQPArC&%KE`1e>MhIP3ANAqaGR4~+ZKuris14BHWQX>iI2lkeko<PFEg!`k%
z`ovcIP-^V*`7(X6s<)Uy`u2UzF)iAvR=tb_nrs+C72;1^+&~_WC%VsoI4W865!gzx
zxxEpuW^NTfXZw_$^|#N$RA4e%S5AGTKuZU7C7BhDuixJoc^OH)di4tQwt5iHRjgBC
ze(S!|A@btMFL3Bm%~r61m?=QeicX&pJrq{*08@ozKB2Mx=SKk*By2|Q;2#7Y5(O)|
z`5gafNK&S1j<FxVRJvwQCZu=^Dqa16yE;h69|tpfjyA@a4&TD{fDA1tU`fzba62FP
zb}XR`Zo~X@7^y!Gh|6Q+o3NeX3ze~f_3m@S=T!<)_F{Z&JSy~|Xb|)pn@<)s8$P1@
zoYHU7{o$+D-7S(+{BnmDJQ#Tq+=grKCX!(8KB()xyWs$)YN0}dti*qSB<)bOBUW~R
zHuYYy9fqH(fcq`T?vvvO=lmHHt_d>)EvF3_*8>lx^Orcw-!B^F7cJHPd1^(vF<f5>
ze-tu@gR1{=F11!11V93LM;W$zq~W_3&;@Nk)Ac(#7o_{p^dLkPFYUcN$xG1qc%p;f
z2iCb>R+G9T-LbhmlQtgs8?0#d)ELYt;cJZcUGd`e>J)TI@bZ$UI{s1Iy~)5!{)?@N
zbS!PuJ98aWVd3^*20a~T?QUn)IJP&1S9S6coxr^3EIqY2ugB$E!jB7i>K<&jb?9*3
z9nRF)1)YTs>i0!`BVrN+4)M^3Qc@Dy<A)@7IWyk=a`%uEYWj*z@7m<@{@O?x$>cJg
zdp~)NKEnz;&Aj0jFm5{7oWPa6_dYn<{w9JR#s^oR6{ipYAEEbxa;l#|JBC$bv;L>y
zTEG(CCn1;kqRHwL5LLrDi39427UGR;=}Ht4yMZ)X5>y3uJJ?_U5jJ79YgR_g4u@Qk
zX2n+4$)~o$<_^BT$q=C7MbTlK17i`{5DH@tWQV~ti5P0BRzRjYnSb6kC8hL)n<iBQ
zFM*Kf3sevkUjfGpXVhZVsvd%_%p;m!sOfcP5uf?Y)u5O0pP|fEIr1SBtdGdX%2QR=
zK0V*>5;mSUhanOm8OaHzxsou@1qL%FVRsajL<)zQdWZBFc`=xSi_s)1Wh-Dx+&kKU
zz>O!UbFBeTlY{o0tdkjt1UL8*7chmyVN-$Ogi6ZmKL9j7(F06t!F~%qb(80f(3%t6
zUU45D|Hi#Xr^l3a+jj~qAhhZqmyQ6Z>#0;^<=Y|(h+URRd?^w1c&dL8m;qUaebZ;V
zpt~W!`X&jRtTUebLzR{O-cnBlaOdw)e*GTr8DRbUn><f(%_|8E2i0#mcWrmSf>#a9
z<<uw2^K+GRL)lH2MEsnU!XXR~xa&$qH)F?Sj9J_VRI(KJeoI`yeIfj)9s(m2Bm`(p
zrfZE;Uf+@Pk|V;S_SFHjD+V(Q9hxF#QoU6LGH?9HC0Gyg0!ch&X~l5JWSbxkjeX!J
zy?!6(%2){ziu5<Id^>72r4ql(X}duTG|8X)M>GBIl`Ji@WZwXT)!SnEAbOM75`e`=
zxaqG;X7BK9qKOKChGxl#PJa6x0eo1B=OD(u-v-|~Vat}>lxHc@^a^Qr)jzQP@y$Mj
z$)FE=z-UYBO<0*#Ersul*PVILeZxsr4dZ6eJEPV$H+l1YQN^bc=hACu_S;TYjKiam
zk!x_B0@a0Y?k9yZ<H6pSXrE0MJ5PTjUgg8+7gQw>)WM)m%>5UFyF%_KgL-`uFY2xk
z)s2y0YO|F}nMnkcSsi0LKPMn-;1*uo$sKE69`c@mPg_t5E7<>g|Jg?X?YpGe5quGh
z5_rlMc2>YCxmkv`Fs0Bt;SH$<X-f!iMNpkJT*ST-1;CK5dHM!0&37sIZP3^$$D?Mb
z?cTYYmu@+_(D`=y=X)3KuQ>qQuaS$A2z|x+?gV_A@gKsxwIw^x8<}Y>nAD0P8nNX!
z3mX#pAoF3z#J^8a3G?t6oFa>BAO50|?VGq8{o8V^SfvdaWIh;H?p)f%zmYN}&kh~{
zibfvzFT_0sN{`2f>p+BgnDliXn#1+qw~&NlQ{X-w%2UHXypL(bdv|m}57%A<;1`py
z@|ZMeBibW-GL^6%u%cUJB?|iogULGh$(Ej|0rMTS2Uq=Nrks{o?@PhghS?xj>n5c#
zUm-o^^B(vD2yN09`#>gUr#JTJuO1PMTB3ozA+h<tT8ft+3RnwZ%4NLi0D@lQE%%q+
zIq&+|&^#<SpKM99I6uD+0vtMFc_`$Qq7U?!Ut6z8^^?gFeS%ouFfbsB?Q^?vEg-m!
z{$)htLz;jo2m_rg0iefQ^<is^X#MGElZ1xSD7OUZ&UuL#LED?)_vD;7X9%Q<ANP%Q
z`wOMH{sPq<lF-r!@?0;`;0jW1LkvEgmL_#_bflQSiIgjx69%pOcYl0GT4%X-E*BkY
zh;QbF8JgfaF7FJCn7f&v<q(r}RiFq5;v~OX@dCwHP<`J}_Ftl*N8MHScHz{l+=&gr
zv--^C-xwRxwsJU_d7K#L2&N_Q(C=Z~)+RoT;+7~WH`y-tiHMn#XW%63?h_UO?R7ZU
z*UDu6_wVL@?}Bq%ku6lpAvpjF{j4PIffEeA`?P`N-%Lf7q|O~7EK)I}^yQdvJ-H(Q
zjH7h6iZ!-oV}^hV369GR3v85d=j$x7F5Gd>5HTbQ{S3ks)>`%N!^uf$5Iq;%W+fL)
z(*A})gJXNFgtxn!fPOrB;~y#WtuB^eD8JyG&u}3A7G%ZB6MoSe@aUlfGG!Bpep@Vo
z&dm_$B(HSq7Yq?|9I!{b5+_aptG9Y>s9P=VT!v)n<okoV^so5ZEq$<gq5eq-Gr|Bl
z#EuA|a4Tf$kp4<}Z;36s(k-V7>ZUu_U)7yC+g4kD0(}h?bIFGqxt`TjDn4JkPLlN3
z51^DN^e8)-;NKqyHWdacT3{5oU}hIKQIYGqn|KAeoDMWqzdyMEGoEiZDhyzKzJ<b3
z_pKHxp|oFqm2R=7q+ey#9qc7*OTaPS|8*gtzez)MN#p7bqbWQa2z<nsf|h3r$Ai3%
zrwJ7b>tx_bi^RS>A?uAlC{HP01X}xD<_?V-9+&})S;GPQh9)szBmd0yKQwpDgX00J
zkG;u)x6-+g8<kw{M9Q4T5SBd^|Clay?q4=hY8-Y|{Kq7C{B-}^U)+P-x+}70MCfRB
z@Eqg<BLz*16h1u%+cTr%tZj1do_uQ;TYu|d6RN}_!LY}r^1N&M@kuIt=wLw34ja!_
zHN{I-#J$dWy0&UWsHvsYY7xUy^XI#NHx@&IPcErI{>N@-MfcRY^7E*8g34@U@v<#M
z^6K^#H}ITj-<mtRFDxDIhx8X$X}85M>bn}}CpozFBn-tf<AwF}DcoW11iMDq?UEi!
zJx%XzboO3#ENBBF+n`}p(kX7>Ab&Jl+V@}XKieJpy7wTx>sMp5xX~^wr>;gr@1N9?
zT;16b)@D;MUA;Jn4L7Ku%QVER!KHh~g!ZsiXsm)-JeXO?D`_|Wl@sBSfo0w*!@^r@
z;^lV^b(YOFK7kK83mj#*)9OG=`|Sg58JCaaXCLkzOu+)YHkiN+VsQrx?1WO{chf2?
zEMsY9*QzbRFb>X6!nV6}Eq`&5-uxL5&wIQ>30eum-{1JA8ctc|cz&TXe5~-5FjqX#
z?gPtIsgZ)tKRTa`1h7ZG-*%uA!vb>uurBc>6)FtSB3$FZ6QKz`|3VwY3e>7>1AQt_
z*aa4{t5Oxn(Dj(f{XY1a<b2K%So$iHTfcC#$~dH-I_~A17~HJ!m->Z%D`($|`um0u
zcb&r1EFuSY%MIDdD@qj#oWX2GBGX>ZxXN^vA;DMw==9ok4DNC(#U+1^DP%-oE8?v2
zIw)9V6IALikj#yYlL?`pjxw**AA(QHP!%0^60olKuKqQ7D{lX$IJ)~&v_F|Y%HN-q
z+gH;Ni&N-zmUdl+ZtNraggsxA;^*Bdz7@%~;@yqz=*6G@^^FbawmfWc$~(1fL4~&6
zoZh|fqs-eY=(J5N+evG&dBV=qi|{G@h7kFdhdHt|Bu@m~p<2#8UUcuMl_c2qSiNav
zLnt#1@@Z&WARSgLHf)pJWGG4Mn|6bFGb$39cYJd`5}NVp68M-828sD9ju;@V(q!v~
zcHKlNfL6U_VPLG<rVVb#f4&}ixOTpC=UHZdtvU<Yhma1IFQUJ67CWB~fc4w643DcU
z7n3BskGHJ^QOowF_d^*YUmeeNt}uCQvp+GHEi&vQorr{#cw#xF1-c#Jn?;y9sD0R)
z9D^2u(Aoeb-T@i!z$OH~93RV1+Wv<HKtx5FBMZ;X2N0gD*ShzVL+KkdaNyryM;Pls
zfiwIR{E9j$t$2B#Ca8V$y1OTP<9#4+n)E~=Eh)eWr24yt%K=uyGDxpc$W0)M3(eN$
z2g#45z=xww8|;oQET+0()4%eSVDK3Zt%>*`t>Z2LBXo@Kd_G^5%zLHp@9DS5FHj`j
zbvZZ==6JOgyVlxnvbub-`vI)0{E3+AbqC%IRZISS*XVnH_rdi~5YYLkxI+S_=h`Yq
z8cM=~LZNc?e~9sH=}qJ?wF-x9Zu0P7f5Q3QkS=I5suaX?p%(-Tf|iI~kFzX#&v3OH
z>isedC|g1u*Sw0u;L0g8n|O>&L5d7I1l9ANcf^tFM<!_Qv|IE}XuqRK?lwrX)Lwv5
z$PjX=!6OGh@Z^TMa4*pL@1tUU@2|APzxd$|=Cl`p%E6W~wIuXKt6=*I=3OG|;e0L-
zj)0eArhLYw6!)?9iETycZTseAL!MCrJfZd(FTpl<Zl7K~BNsM}y+>T11o9?vX<xt#
zo=c0bdy=U`1_JBPR6rpL+i$R5*txURNf?aGUENAzw|#{*8~=_$v3q>zE&Cetk_3b5
zF&+4Bv0>3q&lfr$A$c)@8^)q9WqXk02O<8Q%X5{mt}4%eouUE#!Z6SQ(<$bj9Lc+!
z;O)WUdf^3(m*aKLUrUM1z2pr<+Bj8rbJ!v4oKf|Y6~zxZ$;E!>9%g241eRmoY5AP_
zb0^VeSQ&m<mVk7(@zMuJZ$7ElIqCz}!-k4bupciq20d<>%Xu%b;JV&hjC?9$@ro>l
z7mfXp1JE8aQIvob<XfEpUFF5dljcaDv2daIdRY`YilLLcp@7sFj=BLL{Tf<Km)hY6
z`QW;Z5zY?M6vB1vr~eiRI%N(e$L_A&;W|9n{Wb}FE_5GS->mpT>5J8+|M%y=g*Uo~
zGMK$c57SQj4cXV;Z&}RnydZy@@fHwGGc*++mQhmhy@X9mgl@Q^^P`~M#wP8e8d%uU
zJQJ^Ro_SiTzo>5~<))a7x7&7=nb0aT@zy0<iWA{N`Roo=J=lwa1HwyiIRZ6!iQ_Z$
zA?|O|&;^5+qvt8#4CCHbf~-&@o8QLI)n6g3D{-7hjJ>&NeE8(wFvWa#&;+o*#4R=;
zqzEvXR?CYG*_^YHScH7drm96`FyBPb9p3Q$Dk|z;;PT~bR<T0i3se%U&X=Y4%gTeP
zB*21C1&6rb0=P;ex}VZnUjK_{Hw{$Z@)29<jv0hW`R+lj_5Kp}XF|Y;tF4#oqfIma
zsFCJNFJ<vQJ)a<JDIJdk?BV*QTSP%h<S81~im91{q?3E{lh*;@5|<%>E`MuD;n3d?
zdH}&8xmt$Qu|H(ZU+FedL2_Tr9Xjz8pi9U+v<UEkuXe}0Vc*A~HfAwKq<BaW`u5~(
zka;NR1yLc)jiBN-XBo%_+c+UrkGoIpmN>{z_3#fDZXP$0L_(6tcNnwoe6sTcU^2Rf
zd*TnDNeOLvNd|LUM?%%!k)8wqGZ&cTiv~>Awm`BL-;CeDx6gw~QCOQoy?dc|7ViSU
zMZ&f7h>H9E54g!>V_4O86YCWO-mHG@MSG=Ev=eGh?{t(LGqE&rB6@2tPO&>4ZXbac
zcSyN*zGBDWKRrk^R)q8p^h<zUN|tRax1YWt_Gtjq_zdw7JTsBa@v;_2-II9pDMyG{
zYF95={ruruG#KtP5=4L|0uaQ`$8F)ie~jzhQ_Ghl0>A3iF`Nj%j``e%iGKnMvh&Xk
zgF{vGCJ;wgT%gu|_x%r`OluEiP1|-tRh4th7VNjF*R%F&Kp1B~xT3~0aOYCT{rBG6
znH3{!?kA58WZu3yyp=mzQp`ml)~gJ-X(q9Na<YKn`yA)XGxq1jzF)HJ6y@FWM4t4#
ztwHIKB?YKz6xZ(U7all4$8(hFp-wviFO4~>cwCdPpBguGak2I#Iz5Tdi#LCLa1&zQ
zqjEM?+n9m|*(CN><-O-yzVijeG^1vik9hoLuxJ&y$_LZ^VEN{z$Jd_i&;VMBf&CnZ
zgd>k8ig;_HqTx!<(mGf__yj`U!SUcLTz2376G);nlQXdO`9n0DF>6)D{4bA7jWUz>
z^70-@`04>I(T{SZ2}6c40)F(4_rOHu`JU=3-3s!ex$c=p;9nF%m#R5eNBlWrTR9u%
zw@BVS0CRjk;rt+)<jtf-hRBE>=^U!Uh~Wh<u(=b!jE=gk*$u&MWbdup_ct$P&|q%u
z-(op&_vi1YG(T&7r#KdD4S*6^UTKlQ2P4J1^H&7Q<LbXlzr+or*6S4rYQKR9y17yC
z7zd8)gFQolr3fmlfbY#M+q%@5$%@bvIE&j|eIn){_%YxvIWpEVoUKHLdHD*PuvTuJ
zX15ta`RcS!EqUwzxK~z`^I*i^Qg8vjswgxfzgcn~lM-3UTlwtl?U8U>c}+f$5X1je
z&EiF)Nct;|oHLX2b_aDnF^TC{;j%l7iq`CVL)l?g#L<3_@S*AY0x9zt!4F+PVnlDD
zT~}8My}}^KCqd)Uj{TjzJ^g^(RigQa=#ap2oncUgJ{vHkV28em|65add9s^|&zl$X
zMY|k4Dn|;SbKqCb8Jc@*81~ww7Xt1;vuFv?H@H<K*)44yuYZ>BzWm$*Uv1xcAeDeh
zaVP@mov%bVoWwy~q6*R5u{5iHi%J~BNU?(n(#XI7tsuA{&)e$`p{FXu2Ecwz=E7Xa
z0pJK6*`;XChi=_}H02?0W{FGsx2dk5M=#`=PQ9m$2y>mue+k=}G#pR7TfVwybYOXt
z4}7=OzbpKsQN6ZBOJA19Y_3iAU5_xT1XL+Qo!c#&*x#H?bN#>&!xChobHq>GVGPm4
zl5*$EI7-F)2G>i#nm@WKBk;dYLI;+8C-Y%5kfk|{JSkU(>2on3XiRn}y>l}Is2rS&
ztzpOohE%RqnPIwTqN~aUs)erp#43g(w9~ywjo=gmME2BEQDvxkEcPnkyD8|MfQNkv
z3{zlgzhij|?KVU%1(-vPb&77l;y*e0B;ig=seG~~iv)!?E_$WzeI&j5>k>Pn9eGVt
z;#S#7ttSFc1U}K@q|2qHi%33N)0UiC9GR+1m-Mdw6G@2SJ*V<)Ys<^4(#fh}>Q31E
zu#X?{pZ+_Ysk`hkH{g6x61P~p-@{EqLnFrBwBOfYv=N*S6Q9e}AifNSF8*{!p)3!k
zhUYO|+|Qn!1aMB%9ph!gTU=?7i7l~pP2eMmj#mLTc-F`l+w~C!1qnI!6d%&DpPVz!
z8V&KyEB-IgWMe<)UXI4_97>tJ?@xX)?POskGV0WB9{Avein=PK%w?}MD`wYhRWEnY
zB=H?j%G*s^8jAEV&94qa^k>!@v-Uvhq3yHv^}@`x%Lm$Smkjx;?$}IBOx*X+oLSFk
zei*o(WiKS~Oh{@(2KgpjHR7CZtd>3bo-F(7@XZ)e2;su<jH<m*-PTYG(YFuR>ZYrU
zQ945}hQUjg%xU9J905>Z7-tHKbqo`^ODD61BFd!Vt{#-X_)(Ly8uf$E{jGq2K!fYz
zb&>x=yLt}$&muW{qg2~dQcQIz*dBj#l*4-jx^-NX_b@`48_u_Ud_~b}cAESasK#B6
zr>@Vp-QL80j_Z+aZf>S-bv_*C{Lq%D`iGMk!NwP`c`hTld3`?9JYLKePVL)%=S7^`
zpGBpaKK|>Rgl@)X&+NCV3_D%2VGd$^-P^&R4xp{#SHG@+wD&&_BWlmqOiRT`t&pON
zaa88l*XghS+O69*9pYMbZq5fuiD6!@q~hidD-X3UC%I)D6Gl93p)ag8P)rV{+F8v^
zT5Z@GGfXOfp_53;#(hqYX{D|eM<MqB`3-ivn#1KqX?%S|DtTsK06o?to`cPbnTU$N
zS5H19Iq!v(zZV+#_WN;M)oZ=N8JFWa`hrTy8eW&PZ8!;4*!QNLwv90V{MoEOnUji>
zk4s~>ZhK@m<*=+Zt~Ey2VU@!(H#c{H+>T15DQA95Mq7nUIUCOQB$uPAo(KbgNlzET
z`VPLFb}{j<Q|HCTaBLE7;tCEVhpUv{-fTF84;N@mat*J=_I|`Sjb^aOkL;frCcWD8
zA#+^=^i5<jp<0nh=SkqDX+HJX#)NrXnjKor>C$&t1P@Ep(|7AWm+<*VRO${kMK<qU
z9`mo!JfW-BlpCJwlIv7C8_vXg0UJ>NB0DH3C@uVW<~lj0I4Fb8P1@@3qMt|&y&ERS
z4<(GCGyNn8xw<@Cw=iS04@+|y)v{|i8h<#h<p8h7#iZmxaRT0l1-5=MGM5zG;@gM-
z?NpN6ZzzXtPa_+4TjL_iiYTt>#Qokw9?@Q50-G(^BfqOne0#N7@q(a;jU??TWu~mk
zRhTkg)OhG<eN?B0o~Cc9=NvX^e#P|Ou&NG>#q~$>8uEpiw<C4sKYuRe%gHW2a<)I7
zs!(PS|1zKGv~_j5Y^*+U=}TWwJL`$b3D%=Kvq(BR{HHdp+WA(!#RIujt{1ybn~o3j
zZ+(wn9cp7Lh-o8p%X2z@JWjxrnZyT%I;cSRo2jr!Vv}2#8sgXn<A91O+x3H0w;W%)
z{jHkqlhw@7soI55sdTL}VEqdFJeS7U+<SOw^2^`fe>u@fWjMT6Z9s^GXUHnQeYR2f
z>e6l)l$E%oTu&M+VWb3DH#QC<cW!J#!sU>nY}Q&F$EG2-R({?n5rbB>E&!i<W5I+2
z3mx05>$O*BxqCIGYr)QZ%iX7jV6rd}8Wv;(hQ;YUnH7EI7Bg1|gR(i}A&war9`QCK
zV|*%m?J(#~t21Awg)feTlv3b7-tF*>lVEZ~M$kA8NC^qmQn75lY=KH9{pZt(jJ2rd
z1_9EmQFW=kbjL0R&g;Fd!f~63fuYDk#re1^c*90MS}L%}$7J@i<YQ{5S>i=f<s;Fg
z3*lY~FV*Imguk04xo|9&PnfGlT8ZV(xW+N&c8E$Y=0E|x=Q*CPqHr8cnT`8RRYk;2
zx}~KBPYFi789K$(?-eL?$5ic47o!eykrpvGliUc~8zdDJd)mdLRD-w4J`{;uJvK8j
zg>QeqPaWZWn-0eZQEwePM1M3}QyxX4<66h9+c<oOLxbZDWFaaX>w5b7br*Y5M}<x-
z9PE0R5%kv#cI?KUE7I7fJ~;+clU<>1=oWQ0u(V{7U4=doJs1PX^}DU>rfzjH7tL<d
z4yg?nd+Ra@&uK8zJNSNe8kE^hJ7`=r790$xQS2^+$*vpnED}GZp~+Sc_Ut%a4vN@c
zRLGDU+4W3oDSmr5^nX~uyIKLM-i_%`&4;I_5#1s`K@<qBjs(E)9h*x_9R2XbkRtT*
zWcHH%p{lgq`DO**<v~f5HjnniJ8o2M+k}OM1>UX7o-6S@f{>sBJ#ucr+^ON|N@(&P
zmiRg|KYdfFL?=GqnoyWGniYOd8w)-2W`!)P43hkZ0alJBj~uq}M|)#o!B2ZsvQ<_I
zh6L!%P9ba%|EZ=z1h)if0b{)Y>G`O-lLAZd*F!(1`aCoLaH7`0N9m)N3z?&u*2B4l
z^#uv0M#joVB3EaoO9^(<=F1gBOI<rHL`kwzQcfrT#1`h?CwwW6lD5$Y20$_9assDJ
zjm8#wpz?*OdXetw;iyh7Zm8`Xy`GNaYD;0=(U}NQM0W_C&g*fzkdSyac#7MHcZ6+<
zR2*rjxph(zvqSwxg$@y(=iJNjmzxzj>$fCU7iQ$M>wv(ZG*ZMb*4S`e&_D5M&*HrZ
zrJ97PtWLq@=R;AelwD8E)((f)apb3qI_9Ux8*90R&yUGkNN&_8AYFXycJZgq$?RN4
zoLxX>w!@(IXq;a8!8bLW!Xl^Kgms>rG6#6=q9iLEM5XP##Xw>=erPsUTt!!CePHCj
z(f$ROPtMlml&Zb{dfN>*h|CR0Jm*TA?ShrZ(>3YC#ZJcs#YrsdRnxLQSlq%%gg>j(
z{yA+`QBubc8)k%sm2q5Jrh8ClON@V7JQ|LCF<CLiv3j;%Xelly|J7r*ROj-1yFqzT
z4K{1tUT2r8mW?;5?EIg|;ENFri$D?^8HUWmyds`6WXoBdTw!tfxhNgUjQ)_&grQ3R
zsHxs0{_Q-FgI(;)>MvVG6tZ_%z_Hx(`#YyHkIXx>daN0@>nXTvI>}OdSVHW?aOU-+
z0t!3x{En_;sUoI6HQT_h(lvacN48zPE;FV?n-FoS9&F9HSN7zZIRcxm^Q^air^$L;
z9IqH@##u3)+YFI>kIUFvdg!5!&J5UjLj()O^XD6&CxB^`UHivdHhSQn4}W!_a(gf{
zldm--{wMh7In~&1rpMH{U0;C^>#wXD`_lj{Zjnb1#){!U9KeaR9@xWmR#3>tpu}1D
z_wUb5%0Yh0#l=O%$FWkNZ;;4tk`fRMr-<mmR5)$51oAK7c{;w!D&J1~O@$f^Q{3Aq
zDD4w=&;bL}mv?6~%-16vyQHLK(ZA-RB4zld;Mo*c8|>&%D;M00p5FZHLCBz<a_A9~
zOre}=@@kYk>D8%IRAyJ3@DU3mW5M+JI*oV7wR%@Ej@^hhpU<A4wD`BE+4qK~>vLWG
zeSNYNE?`hFH>bN;=nAZ|vvAGflxy~mJ+R?B-ki{xlFYks8Ug`;!+e?o)pqPfbDCXE
zvGAJEy?gg;cB3#6OAGUxgC`}D%?f|```k}$;AZQM53MJR(&2j#<6w*|+IlP`M5r=}
zp&J3>P<FjBFHh@rB!fl{0)a5`$wU5y1TM-sxN5xmoisL|11Jy(uJmAK#E_hkk<shd
zC248DJ#NX4wyG(NAbB>NndBfN5LxWS815w1P(p1rTnonC)^XlFCBe0aCww<#)b<=r
zZdBBt>%DEu#zr1grt^gj26XT<vE%|>#<8)n^P`A2Tk<81Y#wL-wzjmDl%iu}=`i6l
zhrILsC>>WuOpH$`H?Mh3DOv{=9w_joIl2XYMZEFNgMS_I%fJ2R`4HXT{{P?pzrPy&
z%$4eu+}zx>h|JKGloU_Ti>4+a)Obf&^LL`Xy}jDn(@leeT|GThJw4J$T;9gtMc}eD
zFf`ORG^C%s|Lc?+!At}@dUjUs4jl%9E;2DOGWgSTCMH>=fbgISTs2fgchl4q<;&Xd
zK|zJPjmRNMs(SLzu2m5-+%gJAHkOu_R#vvhJHh(%eW77tc=+>GLRbNKHxHv=W`67G
zJN+pA=g(hOF=7Uy=H@sqN{E%0b+vW1F6jq3ZZF#J1VHlG;=(6oVv>i&7>Ic1fmx#g
zDvBph<Z9@b#RdlzSYHg>M<@wkFt{Rl@bS5->(VkZ2KxC)OG~Q=P*SM1h#(<k9upCb
zwzsR)*Sn5S9h45G{jRL7)kH-QgnbH)3rmQI`8T(=wzS0fU8G)AQ%mc`ix>C%-&WRC
zg()Lu(?Y(AC@GoR+2QIxSjc21=i~6RMRTX4XJibmrKoBd9F*GXbgQea9UM>~=zj(q
z4IZ(d91<e0E=T*UJt&A*JvgZlksO<b7nc;ZY`obxx3wi>gBpMa3m_A_)I(WU=b}f>
z&(Htwt^bhneZ<hW`0e(dj@=?{X}aNvrY6t$cv4ihPkIChE^Z;==3BSEgqP8{G!><y
z5FpB^bSM?#4vQ0!c6WDsdV4!FmHg0TihWCv5kpM4xIw|ea{8N(;==FJ7zz*|hSY6s
z4PtGcG1Jgwe*3nBWfv&w4jb-}fvxm=d2mQ#Yp@Q2RJ>TS{!pW3cvzZ#8X21eUgTOt
zW@c1jp}v9R`b)YuUlG4T(jr4cL$ere-}X^Z7Zes#L2`FYPg;E=D+MdBf|!+asHz%M
zi|OQ{t4>O4Kqg^@k8OyapTA4sm57K)_Z!^gKt0lH$3M$4s3gyBenw_tVPR<4h4AO*
zR>MH7iJHrla~Syq1u;c={1BwfMF?E(9x_xt7OoMxg;?`k2#f#Nb?2U;p&=O=87kXb
zSeY#T#6;~*9;KoYe}p?vsLO?v==nGj$um_{L>7~|d8EaZb1N;HT-(9+165T{cuc^v
zT(6Vde#GM9k4dcvpPIc-id*KLJt9a(dV71y1&0|7dW$)!-|1e6v7<0D!sDBS46<*_
zRrvb)rg^PH3AQAvB6w@$SBbA*2?nOpy~Z4gpVaXPE`mypzSqQU<*Rt<ti{8Bs0iY+
zLI)$%+K?g%zl?O0Wx)ZL+}mM%Pn8~C1oqMV`g}G|xzauI$Vy~Hy>^b4b(gd+!}<Ks
z7A0MSK#aeNlKc>y+<r|>&ZbKL^cYEgqD3peoMNC&*RRyY;zQ_5bfmjr4p(Q7+q~Wk
zkoOkpWFzLjFHl!Z7?Y5|o$H5|C#X-rsXAQXZGtbzfGR+}u%2Q~-!<A2D7+>Ruj>dW
zJW2A`FlEmRrG~)B6byt?i1UX7BU9Sug7E^Yz557+ksOJ*M~XuhPwGQKQ~~Msn7|iK
zSqKB+TZm*278eyut78A1!OSmKOFR|`c4|W&G`ouULpaK@eX0tPtnHLtc-0N0k=)g-
zEX(5$(GQe0aQj_Q5$<S>zikL;(+;*@%OTB*|LIZo5r>O`1R38j!rV;hX9F^#Ei|vG
z<sAaShGNh|Coj#wiO9lyHSuToF#@swLSH4s3Ve4E$$^zz8jLK5?-&i?GU;(vYZ+5J
zH1EsOL99ha-Cll;KrnOf>qm@8M^yMAyH}6A45x2|KYJ0TPoPQ!tAgx)_J>=tku@ZO
zLD>bz;T{6v|0Ys7C64oozC9suCa0#pC%;;@a4-O6E$kM5{67yY|HqFWB}9f8Ti0yt
zb>$vXxb;RG?_*#RF{vOBLxC|%p5fsG<uN9|YZHdG$kTV33j|yuH9HiY<A<ln7q7G4
zX6I2v$fpG^<OWpHJ#7fhEbLJ!d7-52zpMD_B?IPI%UV7PYIJ9rM^4qDf9pTzLuKEb
zx<H2E0ci}Ho9o&2<m#NRU=sYcA*n?fZuZ!iHM#-aPd4%aZ)t+?1MTot2~_;@R`dcW
z_9*IVhip7doZa_Qa6BFFt)+}tX_)`n%DIQWt9p+dgNEd#o;bJ_<W%kvsA_i*=pfvy
z-(}<tu)SqB*Xr_r(BEU3iY}hJd-h~e!Wzj&w$nTc?XCIz!>(b)H`r=l^@8XNtE+wK
zRb8YJh@2KSHR^U*huCdWvt+-ujbtuzrr`^F)p&*~YD}${xt3#fFV~yX1}28?v(pHh
z^~!s<q&Mi6CLzmd{S)*LE0B<tWul`Sh%BsK%gIrag6I_Rk?2_ID=HErKp+A?#OC3>
zuTPOoi;E>rW86`_Rja&d!=32B>O0h+M&0Gwo1+}jhS$!Z(BYk4L3wIoQ+`INB`u}s
z-8Q<q@*Xm11<ER`vib#3(+36yt}c&t%&LF_ti0;2`#h)n+%ORt@yoJ1O!<v%T_s9H
z7jk&+yiA$x;d8aWVTP;9N%DH<_5qu{iu>3JOEp7hsPxJ$_d1*tl)ZA(6{VH6GuIl5
z&=y><EQ<~{ce9rE^$!t5UD_wSsvjr=O8G?0BVJW;^p*Wv)N@dIcSxDLznhSM!C+0d
z|81&5)K-w<bF^t$gT>3d^EnMB9mS_FwX9g-;^{fr$GzMFT;qeA3lmeJA7lMnjo$8V
z%_7~ZoD8T=u}Ijmq(%!oJR;geviB=V4HftAU|_6G)yM)^2?cFIPN907e58+$7&u9w
zVG++R8){6BaQ+>ul1y6ox$|kvZ|jv~yJ-&3?EL&-zLVY9P<y+$>S*jiOgJUeZ8dE{
zj^d3g6?v!_`x5Jb>_bFCm|^mJW=6+04eE4ur>^kBLHeW^Amof}aCv!o8TrT~Wl1d&
z-|immvU-8bkY!}{S_0YeL0W5UwfcBxY@I{owWRK!*6~ou_6;m$xjd5(I@+sNZy${+
zH)#zkdr&|6VC6T=NgKJMUn0cM)FpuINXeTk{)j;ilXbWVf0Xo}shZ-xnJ-VU&XvW-
zRfE$25(lOw!yGy*%i@E3YxDZX+iQ9sIF@rF)adHkr>!+=a^W})a5COk_f@U2Vkpb|
zvS^m6*K65!-Q&tV%_=!zoVfPcLTX*7y^tr?Vyux`Eq!!@d!dTw4sl(bl5F2VT8K{G
z9OjVk$1+OQF`AmO<=+Vr%bmAv93mG320M726oWUdukC6RiWtRuB>De|;oYlI3u@r|
z>a`)I@MEz_g!{@nN2qt?!@$hW>yD#6@}#i$r|rWb8OMrf)c?Z*8cmuX+jLsnSfB3)
z@oPJ;>Thm2%(qJT$@wx6<nwP`>>rM-@n3fj7m}6qffB2H!Xk<JU-5|9xVV$N+XXc3
zI<C8?Lrj?}pBcvL0EFo-=`-%?dwDsuURd`OX?9?Dp3Lzi1R9|AT;QXg`}Oh1U0j`e
zdwbgyJrFevB6Wa%Pzp)1O9qgay$Pc3q~qW7L5BMJ5>jVLr<kSeoEGD3p9HRbwKEl$
zdjaUG+3?f5vw4p@8bFInyB1%=B!{JyKg7zsnTH#v4Ps<B0`b?cSMB4hoPk7iI2KNO
z-JL+Mp}p$YZZ1=OIAYz)J=&9h;Op*nax&w3y_rxk&GTtiAieO(_pL~YuvXd1=TDML
zD>NJ(&tT3t?R;rdmtp9m7Z+zye|q-NoO$aTX;Q#Lj{1uMsa(}-)m8d8l^eyt#FFa$
z9vC=+tmo=_Rgl2T`SI`0g>@f<P4@R%Pfbm2*DogmZ_;l2kCtpp@g?*n8r6EMT}*Y)
zEUJ-b<(9H?QR1?ryrtz%X_bc)wO`WmBr4lJw&1Jg%|0sI$_jgHWUOg&vBsK<Qj^tn
zOVZPKfu5U-Lr|o+EkH1*X8F!A!oqNPWNPn3t)Av(Jxk{2F&XamlT>W(9N&w0hA$I=
zyS(ICMh__;Iyi|-s63a#3#7U|)?;*xf5oSn*QlT{$Xy?CF(n?RUz$X+sEWrCez=`i
z6-Vu=xu8SSXSSGOen-X7K1mKQM0l!OT5F^5DazY5AzRy{Vpd-IzRlV95Ap>$G7QR|
zp9YMgs@wkN`kPQ<gH`l{Z>{xR7nyq10@K_8g8k?>jihmUTxK<6R@0;GSF(1C<{2!L
zvUtW{wtxWHwbV1NW!wm8j6LtVj(#QLV{4LIb&c|sneC#oYW_^61clf#qn7_2K{daJ
zLHxT5<&SvNI<!~Uxink=k5S}1pCncaw`q+g(snjp${TBJY_zF(0NCEl)w)Fk?jw#j
zOndD@(C0s$W;MR@^j0Pnmp+;+8`aS{oLO5hXwb%`8=o(xRMm1hjI~)eZ<z0;i`4G~
zW5LB`9p@_hjscLY5KkO;s_z45F>j-(78TRk#bvYh+YsYbJd1T}cSCF7t3F~SB?<fJ
zXSeqQIA=-+8zo$+EIQZ9*3A>`{aCWlzt`YBUh0kG-!D{C$de<uxxXvSW_DLT1Wjyw
zn|!rAX}!#(d2&><Jx*I<@8r~#DPm5fWA)wH;6RwpiHht?S7D`YOQ*7`rh~qSY>=;S
zET>yznCvT;tt|Q0y@Zbq;Z0QHOd7j|_f762d|1U)cA2FM&kSttDlN1e;GEswmz2TU
z?qZTAnlf=2j{Nx3wMtz(A;CU!q@i@SY~-g`fwA#g|966~jnk2ADc6eB??qMGx$9ra
zj8MI(J<!pWilIKTA6lK2zw(inLXV|9jZ{)0C=MCuHFpGgYFx0U(RbyuM$2*;%E7ws
zkf;FCZMP<GhX*4mavA?V7KJl09;n)iQww4Wwd5S=@=NpDNzqRh^+n+IFM6a4|LVYB
z%*r6a2}cnzzKnWRt30Nbz2nb)C6%5NreIX{z&NO#p=;;)cfwHmCTwZ9&69PiqINQM
z0f#E}CS{FgBB6pZp0v91`!tK_Ls~TUoW;Hau|FEFui~!Sl}DAhTB9u03AkUpS}$zS
zoT6KG=Ug3`;5$1BTk6@=%2-@mJKLp63VgXtsvpJ1He<h@Z#myvXygq-xw`Ad+d1YO
z!k(S}4F+1D8odc#)xoXDf6dxcSG-=iVB>mrN;LMEcU@fZWKmW7bg5=r=}-bW=9OWA
z7vp&|mAK-$51CtNieMFgM1R@4Kf2%bY_$b(qNqw``4SYim_k(}r)t-?Y9h3RdtWNf
z$%$AlhFo8657H({u;-;@b`=5u92a?AQ#?sONL9k1Ui;dY4lJ@o!Z|PN&$pS*Q~yzl
zK36N(>{PT(WE|T|I^73f`z!=kAorEo5nG$)A)ZnJ*JCBy1@-YcoO_Gfj*XWE^F*c+
zyskQlCKi{5Z^mN>%6sz$%J3KcJ~2q6uPU4Ns78fT7N9>j)|50o31aKg|Hv`%sdbl>
z0()`nL1b5?9%n+HzDJ1*1N}2oVK=D)eM0_#aFtkf*(C>VwF1HM1jBQuMIb;%=MX8U
zktCB@kI9S?=WlN5J+e67m|uL99W3ra-xj=e=BPG}6R?mHvzi`9w>?ih6H57{L(;0Z
z6{B3t<jKINBx<oIeS32X&sMh6(N4qDP&?4}S?Qf?a?dq!X`~|iUFm90?5f9ORPi3B
z>GSv3Pz6a?8oO64#xhdQ_dX@adGIwMLMR~owP!vrec=;}7-!8zcjsU|2R*N#H8<y9
zaEm-#K8t*O9WiF2Rlax_!7gmO`x8Z7ANy~r%kVKxB2Ms3x<x2TSHr-tiYcl>Xfz7(
zsk_MVq60Q<zMjhIixKe%y@(lCr;S~jQZdL-10&fs7z{>fjdA67g5W|yQE_TxsSZ#`
zIGe1`rb<goJGL7tfI9tXqC#pTL}m68_hnX@qW+8etEGv-YP$;S&9Hd%(G*W555Uss
z3I~DQ3-ngp$E>e)mTUK06JA*@OmbV3);|ck*#3ib3vI;?AjF1?xqV<-(NI&1l=)Vl
z3`q5H&HKwF@HSkXJ?t!?NpzOPKt7uSofuryhBdZZp^Hb4#%Dh7zrL(!uNP;3H_p_M
zwPwG%sOtZSZVB8;%*L7EKfUeZ+taCSs6^WKSEocq{GoqOFEE*29?X8>D0~vLv(J<%
zNw4Xq*L-#eCQVZ%h83AUhEWAt=80VLg;wHI^H3Q;6`(XW6|U~(%E`!aG#|u2UhE(x
zV=nXga}Ct(;AJvB9#n0+el*|L5YIlzLDVsL*q8Pfj330vTr1ySR+k<es4!?~S*@lM
zX*m~#e_s$QZs@DqX?kThrN58S*RZ48CX-OQSX*10<a%KV@ewe&?(XW@97y-8{Q=81
z>PkoE&eU)sG%a~q6<Wr3vO`&?OF419-^brI7{#QqG{4Tfav&(ncUfxtjjH6;`30t7
z5OD#5OFSXrM_%Mrg3Q$dow}T*-DkObAF!9VX=ox6cOtDi9oqUXyL;rW^`rJDbKbmU
zGHdd?^_*sk-7O<mntRyZQB8k2KMHL(!XsTD!&tC@X)vvZu79BDwVJG#TZAq*k@>=Q
zo;i9k%47W=1R2>ir+`(v7I`FnNVtvM(yBgAjS@4D8h%3fk7?;V1v^w@Lmh_;5(M`Q
zKlNDo$o)-i9+vi|?g7Hu+H<SQQew*O0iurbM<3NIvvY4rT^Ui~wjZrzH~w9w>T^W-
zn8-WS7AnlfpOF}RV6s0+&KD`wz}8x!J^#@~NB!*#QAYq7O_b{e-ISU`mpK;W9bY^p
z{~t}!%G&;_9R6)ObBo=dCkWEYGlKGuozx{r{!9{T^3b{K(ZsPm^Nw9dmXi7w7+axz
zJY!1`mbDfd6=l~IDPJ5M85^It)E`iYYWyL8;-`GW`tk<{JC(}{_1N)o%I*67-VZ@n
zg&X*sAII~8R9>z|exGsO@0mKDq+}4<3;_{VJh%N%%gd_$rFDjFkX2|~j_D5+uopmv
zy^mVSH4Y~3=oa7A-_-5e%W_Lp?tl5ms()&s++u1t2;B{dvq(J2_@~BywbLxkIX(Ng
zCz!ItxuwC;X9Ic!aziX0Ncyo%IEP{3s$n8KpF(+qBv=J6F==M$d_QPhI3{ylA-74%
z)^W)X(hj~$HdCW2`{ChueMv9hdBsfTy4`loa-uB%<!^(8QEfM^!Zj-3X;c_9Y}(Ib
zv>umE280W>E$g__%1hS7B_>W6x$u4<qoExaFB6>U0k%!RqgRpx3A-X&b=&oZNlw}g
zyaoqZEq;WncIlJ5GqLPv`l@>vseP|#IFG#&?K!7D?`v$=rZNx_5p`kUT^uB#-M+oe
zZ!aD+qN?MNUSyw@_u#{{C#s`fsGa7t-DPI6-OT0Am-6Q^&O6D2fb<(WSEHo4sb11d
zWKY#C%=uj<zS4*hFnX(qE89gK2&!defm;Cee+V@FRlBBFijUclvzg42_0h&i&azDV
zxRBd%E`r-iRA*a3Xa3Kxw0ws|H)FYwjEkdA9tG8?+_G!;$4X0vk@!jrToo_1Ni~9v
zA1b|8mp4wb=bkBSV8ZjUeSB?KR9CYZt-2SuQuFj&xy5zZ@tRQTlBO=+Z!XQTgkf~R
zKeF|bu=$^f;a_)ZeNkk&k=7!<e$R!15rX*nnRvxs>i|l&*GkS?Rn>jNOibZ@n;ERz
zey_7v+fqGigF?P8li1l>I`GCBJkr#_sX<xI2{L>)M%6c<8XckCi?Mg-4-?gk5s4=3
z=BSQS&tiT0v3Bp_vCuWvzLqSSh>?to)l9NOF~*t=)=mGi5KHxl`1pAK>l0x&bCH6o
zwVXJM>fQCi`f)hh4@b34!|sNsbC-QMBTF{}^PO}0nrYW{hPY&kG;ThiTbxaSl9ku_
zMM2e)`h2^5g><YQzS8f9g$-AIlU1Ds=Z`CO_;pJRE)UzAaig@B%Qa{^j*Pl~yni3W
zcNCq&N^2YN($wpB6}2Cc+up92{uf{S!(r9K#pL8<TbiSbkmF0B5Dafi-dX?NMpof~
z>TtZs4B>)OHS5dEcAGY%4^%6c>zxj#y1Tn;Pg@^;^z^k~@8N7XKhn6|dSo|ke6b2B
zOZx2ym`cAPcFUHQyQi4pd^W$!MIN&N^(yO?5^~jJB`UEo6aslUxle=GoEN)o2Q*3c
z7n31|U4k#JluR_witq2j69?n|O0b(`togJ(WtYVF$z7TjSHLWKo`iY3`hmeQnrRRe
zev!Fy8^NtJi)~*dt1^#Fh1I>zxT-W{FU%t%E8?GwhQ9H#NoGDzU~zOv_*52J8WC5e
zen$2%?%0}DvZj&C>*Cxh#LXBd1n+fKYD(FQw4PfIiw#5fgqI`bR3luS*^NU@BJep)
zSy>)ab90?Z90VxWb7dy{qbO)5@Mk#EaM-qTYSvczTsKxt+U2c$cIMPMG1iQ_`10Ad
zmVvy4MbcA(>nY{+s=b&yeAAvU-!>*nz8pz<NYU5BFlDbL(q=0XfL8ja%{Taq&Q^r^
z-kkv2XWyw?SKa-`EKE^DoWv4&q=pI3Ml>W!inFp-e6}0h<~lM<pBmVQJzb8s-qLaF
zVJonWc+WK-^TNPr`Ol`EFP9^msJ4o^?Z~OcFdesG0RyKQ$&Zb*gRr13my56<{t+g#
z(4)Eq4CC)SpI-Df%p$v-mh@$acRxE8F|R+(IDE)4en2^TdUh5_sy6UI6zAl3oH?Bx
z6{GPa|H167!Rr&n8mFzSKe*weaVeU`qx5;5PkFR1iardSjrt%N0g0He*t1xhI3tKQ
zJ}Jp<K7jMDk`~*zIcoO*uz*lfZMV%~mJe-=8r2_RY7T1kemAN=B785;rrNHK8$h)i
zSwn46cPhHS)U&v%fEzMzaq*`mN;8Ft|KQgx1s%F$g01R(oNPhkQ5M^+0TGi&j$ga`
zm@X0Ghr)E~H?&NL>fibFObxY@s*x_EQRl~Gvx|$$9OjoiX0em^5n?ae8hXram_J9b
z^_D99Lf4U+Fj7Xf6cK77@SwJA`X?yzAjAFsL}w}bBIlYi5pDkSoQ?S1Ra?V!%}C|m
zn8WcMt74Rhm3fBt=>LnoxBQCod*8n?QG5dyB1kCR-6<f_%>YA<NDPg14x=KXAl=<v
z(#@zy4&B||9RoAm+s|6xf8w`pp16p$oVn(@_TJ}t9>?nl?6bxvSIs%ie|K(W`r<A5
z1jZ^KbbvT!^v~`xe}DcW-zb!tLYNRX@U2aNZfbqx&zGAJb}!w%?F@p;NckaHfr<WS
zf};7SPCj=~x`FZ%?SkbrBVHwrk4c1eNC<U{sUMnh<#qLrempo=>S1j79PWSYr2cJz
zwL|ZYO5V$wT>XH?!rdfZ$g+J%i1X^pk*{}-)<T5}>Bx-{JN#`$G<H=FIP2w6mq3TW
zj87&~S(*7cbtXLjy=kZpU*q<!QNxM(ceV6%69^fiHZXCZ#7NYXIBWxTZ9EVpAL#{-
zU7%d3m`+U*cgmVo@wu$FV`e5Xep2f@BZ7cR%K`x3PH3S4yXFV35bpUkZ|TzGqqbny
znI9)xKe*ezMm_!E|0sDoM?&Mrm$JR)%jyi>ap24w=gve+P(7oXol~FGuPguK7+g_a
z?zS_{%nVdka=0mnW?|go6y3wkm1I(w@5R@x5^x~>R*+C^pv0L*aR0vNLUt^jOLQ<R
zn2-pUE9#USx*eOp8@x(LG}(}4?>($anlmz5wUPbP4c3INRSNWpbO^m2w)!j9T5FZy
ziD`q@WI~X&7Xm$S6KyW$eHhh3*4KO~1Py`Ik-jH`Z*3X*=R1M9orPzUN_!BA(>JkX
z#V)zQ<q^(@lX}VNfv)#QC@fwh?R{F+*s5b}Di`0%IzJuFDTfrVkqf5z8z`Wjigpp+
zy-!5><M(QuHpV0j^(g<Lwcm~PSM5B6O0B|LA;_Wni^Z;dKUCUR+s$FllOmejww0@T
zUkL+(2N-pw!TChV(yv1!N<HZS1jb&xvj>FW0Yoo!PU24hVZdM@)HdR~fjMm>#D<q9
zA(>0Rq>RL16tM1CyI6ouU?g@$cPm+w1t<lA$l)Xk_J`h6KtI5vi5n|dOO?2Fm#C8W
z$@|1nyW^Fesp`VbA<n1Tqv#sz{$_`v`l>SHTw-xuj;6E5aw;YS)OSx!66Y~-P~Hi&
zgUwdxQLt@*v+XnlPz^vv-L|ax+wxUFNjSN2*S^_v@%-S)>J=7%Z-amzf?1=2rD6y#
zkIdODdRnX<PI3UN&R!85B-dR=If;yVn5fkjX5;^CKagM{B4+6l8810dKC^7_8|m`g
zjj<;&?#zV3$8j`Uu2P!eLP>k`s}{01i)h<ors8w!TRJAYsZj?WI*w(=XW30Enh}Ge
zEG4Qs+yc=L3NJzfoJUgf&UgwMemfU-WIqcqnwz*8fO}%#_c-4++O0U=(LuEfb$Kzu
z_Ltv{7v3$es5qFz<ml|&u$~bld2vp=BR8l%q#IeWF=Cz9sT54<J$sI30FjVrT;A`~
zmDS+_2jgJDOrR;jIDs!i+oI&?8oL>tfzSltF6X?&U{tZ2HW2>bzh4z3&~X_$@3;bg
z&w77ZW{(-qDVd<A;*$c5s)xTFzqkLBlHY~BpF~W$Qv#^HKFn|AZs|63;=eop_Q*+V
z)Z{lE2KS1;e9o73>O>yO>C}K7RX|-I<oX`d%^8dMHVWKQ)7PH_O~mCoOlue(MF$-;
z+dB4a_@j=}z+#|)%9l~1>iaCHv7T5ZSMP2##;sg&1pm<K<#!oW7W8dCfrx~TgJh`_
zM;>qQ?L+(bD?PA8TY7j`=(53AfoI7f@MzWcr7fJ866X#JkG+B=zvL`g`=#rb3B>z6
z6P}YubnOjP4wNVg(aI=M!y;;ssG=Wfl&zU=oIk`V>s;L{qOWn2IKN^-^=NZDD9<F~
z?sTZ64|2<{#>SnqcK#-N;rZp|i#|K#r3z#!M0(P#wE5Hv^x|b%=@=L$QwjTD0Y&8v
zTsBtieW;F;71Xv>fq{+9aO7JmlHWotMsN$A4+Hh8nJlY3Yhzm4FCqMFjq!tCmiK!p
zO$C@A4R!8&R1id)UEVWE)Dwn35%UPlM_g$W?(M_`6=;~^>ouJZqUU_DCo;qmVJY_B
z7$=~^_q$7U4$=<5QET!_p6Cz|<(6Y2BagOu)lk>7-ce9Ie9-jDA5!9^E0G_97Fx+0
zhHI_16R=CkzWCu9>B^N?KfmYmr+b=&uy4h-wpVeJ3klb5AXm?AR;oHq3v=6d{X`Ex
z2)NY8AlsA13wTvGX+){Cut!6h!UN@stb$4ox81jrwh{`|3NwlbVRcr_d_@Vt`U-C*
z?`y%<29*YE&xK=k7za1AlgtAgZ{0NNnwuv`HSkX^z9D?>*-B3f(RPotb+V{~$_9Gd
zyXy3IWtP0R0nBMH9brWOOX1k0ganbrqKadMTiG{i;A#*+=rnd6!Kd~$<JB1l3}&~z
z$tw6B6|>Y;jWxtlZ=G|<7vh>9llY4JEzEwXx>(?;lq`z1-pEB(GJ@8svBB)%J%k^K
zA0URjOiY%TRHWiU$9dY9C;1NBQz(bAUZWSIrLmuXRnGYqT2`M#4QnH|EfRy~3Yh4t
zDyda_j9>8=f5o>3)&YS~`GKXF?}8{$XOSAa4AdTRu7jq-#MWF1m<jTNz-F=a<8twD
z|I)y>yLmx41!AC;G?ZMt9{b%ihk0wiC&Deu%h`X1jPZuHl4)t7<>;DTFO!XHwBy$&
z>?^9cc_yR(WJwfW+ORas>vl=#BVE+CUh5H2yVSOo2PxHiwUgx4#mC&oMe!RNt>;Rp
zRbOe>2*QGen%T%QGm2=eax>@{Mv6gGiqgX@nMrVE#n4GsJ;X$PiDfcUchFU|a&cgU
zt^qiXq8v8LQw{YnZxH`+V>S6+P>QRb%QEU3N^Lxc^|0U!IL?0Rn!~+4p%(AN;^53@
zl*LY>z7EEn8ekb>FF9m@z6}%gb<#CXpO*ZxUQeMDXY;FT9LU6gv8Jl6Bq#{I|A^N2
z@<bPL%yOU-?L878Xmz+CN4-T!{P^+X6z|n|VP{-58Bgut#->gFY2qVNU452={e4RS
zwvaG%fCAlE{<>V7DnGBqmFLBm`&|Pm9-GXj>hTiTv(CMy8W2X})PBek`!ob(`{lB`
zZ%!*fQp=73F$4}CC*80sF0bLb0yiQ6(CVFXK&xcP0y@_v@$(N0{-k7#S)gg`1zJ7!
z$u3HDYOn^k;Atx4wnly<@X{lH{rVJZ<Qp%MRbH;zMw6ZBBu9>?erq)jMxWn%(@!<w
zJ+JB&`_?8;9#hM6oz{Yg^Rn#5@X~GzJGYH{Mo#vZjZdt%V&pT4-|>%MemTf-DYqg1
zqPMC^v8tt7>Vod(YQMgSIxU<1F&m+^Lqvjc6EVoNn&|V;(nXua&WN#p&(3|N*)^4w
zN+pgS(|lR}suMnb(B|S>HtAYk5qOYE@0scBNuBbN)D`xvp1I>Of3S1K__poq_!{Ld
zxm!(a4u9{#TzkKdB|T3(HqYf63`Nych~zdpCN1mEJkQ#_r?GY!YrK(LbgL(udX8Zt
zR@K~%alDl$)QpmuMTaaGlXbF!*+l1K%40M^t#7+yZ((6Ef^S7B^e!#sVOIQXjoKct
z0TgXdGf2$3o<0+`<h8|Axo-?YAl<5$vqJZxlje0@-}P_!9j~mVAXW=lOMt&tb|URP
z93Gr3XdT1%qx2yqrClyHQuYTv3l~@aI208FwkXi*J6(O@@SlWff1dN(&7<*e2TvHH
zlC?U%YL8p=V7BrZQ`ZOchk^wS9Vi6myI4y#@hJXMK<Qt}u8d(<_+B^<Q@3Ac%d5vj
zVx{P(t14f7OscDqWY`YB8Wg6<6lbHq<BVZ7qTiU>FcvwfwHP?46EeHxB(6-B&T0zC
zwxxj&(ax};p(~URn{FXqxQ}dl=uD_%SC>kr2kQ*8Tsd}Z-CH0s#nWt&qc+6jKZqC&
zsy5G!<(05Eub(Ui@?lmUA=azSp+qTNITku*(Z^>W%J1@8&ApJ6IDFOEG3PW8<@3_p
zBbn=K;!ZCn`Jt{Ee1&Nvv`EA;Bbu%SR`^CD(WcyOHRhQ~77y)4ug4YrFZupxKGyc?
zpn#qIp0)|^-jj+(Xq!s?FBB0co{~JopYbw7LJM=TmU{eleE(5P14zbN_HeMuFOxUS
zU))NPSa(5qV)jtFe6nrxya9Rj+Lt|H?<!2NUfA8Hv$<T@Blsna%vTUvkeM+SFA6W2
zEtKl*3V2b!E&7FTOVpJ^ffQ(jQjs{%x<Y^d0QdFrvJBFAaqpOBpGm7+**DrAkH)~(
z<BM5|ZP=^Jb(r&Qd(8vyrNEL4drk|D1rlBu_F%kw!C*!ltmQt0OK<jo!SZZ(P%6)R
zlw%CSSNRK^3Shn)ve=Tw+?_7NMaaO=0|EkH%t8Ae>RJ`~hFXy9^-g>ylnu`JL<=H5
zo>Z7aXCM;PSFoh0s@pJB5LMNxPOxq}I;dz|mc0~cyz+e0`OnKbQNky|=sGuHM_>1E
z_5E{ByN0TputiwH?^TN^N!j^NONjMbMr^Sy%v)kBWg{pyIf4DY<H47&q9dnd*oF{_
zh1k`XO1kt-1r>Bd)nm<c9EiK_6AcD_?EWvUXkbtB?C*0BzKig;7EsG*={)TdmRS6}
zawvv$Mdq2q+t0xeV)hOqk=}tWdHk8+uC22mKXaZLytHb!Xm-k4Eyd1c|C>pK+{N>0
z^Wv#>62^;xRIBWEWLix<r?wHPS^oRZuPOu_*e~d<@$P$c0~*NorX)6p(ZBDMtm`E@
z$`v#pMn0`X*>jMIC*-N83=a=W=EN#5a;R)hg}B2sM(XgClZCvZ%g_PgmFB^uaU*vE
zY}+cWQ0r&_?D3u8I%!Z%0KIBo^R;Oo<?e7`2H$drAx^3SEe5v%jtmo=C~<ielxSZM
z4W*7IARrioaR~|v(l%WoPXOK24t}=}io`~TYa9~NUMwuBN#tAhGypTuaNYpuL@!?X
zKe#?yH^nTqFE0KNSDy7en+d$jUJG0<@Fd4JKVtFY%VSAjETaBE4s~@^(R|f$O;trU
zue7$XQ1;<qF%=o_HitbUe$Mslc|1q+a>UteY9r`ca+f)h1k*JA*?0SPwRDH6lihvV
zb1ha2HCgM4PC;B^u~=4wm#@UFv|B``30milodv$~OSbSC_j?1Pg-@aI$r5e9+W(ZH
zp|jIZ4BBSDhK4;g#_>im`y{dFUaU-eo*y8&mK&RkDr!F8(sWDva^u<m^#W`cgZY~n
z<j7ZG*-@(xtxl@lYFs{Xg?Lu+p*3HWY3LO-tFTiBtFYcyn9_F&YR+sp8Ya%~y3HT`
zII&3U)&|*NPkjZD6B(4)RS1x7MzHMJI=A%hqAPxA+C{Rj?2~6EG!7g-tKmt~S7p+M
zy$C^7REhRjrNj^(iOsS^g#IoyZ<~u$!E&E`Y3A1a6i$;e+@4gNyqC?FU?A91N?BN1
zns(RnUxl_}Q_`ek5LPh*YF;gf+x)K^hzl?)nQ*bw9sRoME_szk%xoY>QBDSg3jSp^
z-}%Z@5xbtIPe2kEP7-@nG0WOSLybI6Z)OYL5S;a?*cOqHkl0hfrGa{FiBZ{OE7{%H
zV?h?euX#Q2fLxQ1sV0rv=kGUNnD<O?5K!SMV-Fu-cYiLlIPiagByZ!=r0B;ISJu|l
zE{?U9)FiLwZy}(8jC;-3z7x7(Nk_l@h{;oUCeF1KTA@(-IbmR%Pdc4)SRpbz1=5Mr
z-I=v%jm#9!(>e##<*eSVjp;hH>lkbf=wt44sYxFFsBss5!aC<M)PpG>etfn!SIWM&
zvJxzMebduVzs7!NZS8D$NG%pol9)KfKW11sSH-Kt|8bK?Md!PUX7F3qn!%v+v$bes
zQzW4&lGuv*?#M)5QB@5`E+4ehK7{w!jH!H7Ig64LzG#<lIMEto{~t9Yv`zSD%X3wN
zV%MMKL99Rj!+U9!wS6!bo!hKj-JJq0*`_%$3N-gvFJDscwCR=CmCTKie6^}jDJ+Kw
ze=l4u5Sy*=Q8=nJCnpcd)3tYM3WtY6+mVs(71N9yU6mApE=wIo9E?86fAvFAx1|%q
zlY@#C-u{Vhbn@~<lE=$#CO$<snEEUQ7Ue4#bCub140Ux>cgqJ6ba);BuhN8=UU7P0
z>s$qV3q5F-By8gb#!yw|GXIqLuY|CDWP|S@uHCN^!;_MH+IJZFCiXz<ea8FDZoJZS
zAcEfeZ08z|`#j`z8ub-dSlal0%@v&9#(*zD1?7G8*B~qFW$yk;-Q#!=e2M%gM1a=#
z&j0!}Nib;XyZ#$rdqmy>BtBehz*9T7Y)J0geVYxS_I#uGaHV=OIK>lVwWRJ)3Vea2
zFjaBq^?nff4Kk{Ms)jR8)S-F1x%tn(8XovK4oEC|lMas5BsbjKgGFK1oQHqc*DZxt
zWdaB<UAo|sSI3dYei6^buxE3@r7!Ovfd=r{9zg22&tBaL6~}$C{c4M9>=0f{5q0?e
zXKJq&lq0~q$rU1c1x6Ytl|wZSC}h#pGzc}xXIAK5cbv4MMjqxzxhN8kF{VBx=O94r
zj0~PRF0w~1*BT*P2=)8O6jXpbhnYI-w~S)xi>v(>;-`4{!V{4bWP}?fp9{Ec#gtVx
z*+2Dm&9x2|#exH2zPwn{a8o+H%Ir?vN|Jl&4N@Cje7mBlW$9>5z2K}zOlmIG!-Qs+
zT0x2pB=IrZreRgA-zp+kexiGI#37x%T?PyeNy9SBug!IK*dr67DGY?U4x^m3f-6qW
zFAYk!BC}rAu!MB6yQVzcI_P7o&iX4tiS`~dsXF;s;0*-i>;`W;rS+|yyz~Qk@U3`C
z{!N}<Je`NBzw_Q%ks+46`WvaX;lA<(u@*x4BRPftYzB!+8XS!QBoF7+`QL4+iVxI!
zJzr3Vx4A1im6sK^*_1XH2$F&3!DOjJYM?QU95ZHU<V$RkACr|6+xwP2(RzEq=(4BZ
z(0j(!q4~s3HW?Ba6tvfLxl79}w>)MQYCBtLHUAMOP^iFfahg;|$-2w^p3dL|l&gg-
zkzq$`-6*=#=hQzW-Pm4osn2bLQ5ORPU5cwu;}>uv4n9xi(=0l-!yKojy@Zf`uOfxH
zm`rqTtkhLlT(g(`90aS0^KM7@W8E&C<)$tS=5o+lK%i5k$9-7zNPt-4?CQbUw0CKb
zUwM8?N{WE)Z@al>qZE$s!{_s#WrMnUi)b!#ZO1QH)>2DRyZYut=_V>*y*|mN6s=}S
zyK#7M%B>~1Yb5uSoKTpVO6y(c3n!7rO=pH`UKhgBgFEj82#OgGt5it`my2~k{fogr
zWG6}YyC8g-$F#L>rb#@J46p0wuKVdlTF}|MTeG{pa8+=Z#Jo7JRlo2v3E`NIS@M>a
z#N8<;_9>l{4h_p0Qs&RC%VT!x%weH&KRz3Q(m&YoS-Ag$XHkSK(e+p5_hCp^X;M-v
z?iWw~0BzankeXzH$ZB3s95{x7ftg%Ft2r_%DvA#`s02>$Ag3WBE>38>`<15WPgFwV
z{NF@}0v&aYQHBQF^q%t@CJPH*>f!HRF3^c*Mi3=|)-;vGv9hQPugxm<sE?i$rY(@i
zWJ7QLci#kw<sZVaf@B<Icb>+|T@uF~eqGf0pQF=UXjB{)oZOQHbCSBopM*-D{=%MZ
zjgSNb9Jh)(6!3V~HP$9?lW@Boua`SmPNV^l0BqW2iICvqQXF$3g^KofS6-wT`R$9d
z#p9*9%Y1)E<muxi8oIn?9#aJU`}ZO8O4_JPS68o*tt?8<sp3c~?_;ESDO04|zNcxs
z*wL|8!LINJ-hcf(#`$dhLzEm9ZoP%L8N4V@sHZ<@B6p|o7Y1@hgois$fc_sxlS}U$
zGB#O9bMdeHobObwd+8qPQWcU~*%*)_{H8ox<weuapXvg&?tLk3L}G6Lj8R~YxYuxI
zy!5NN9*il2$;3B5AGJ?hJ<IIwR-WiVGb-y<elV#kMQ&voc%81>OFn8kUJUZ<drrq(
zw#})iq7pq5m5kWzWOQ;yqq2^cLM15rOG_L1&DT7E%5yL0?~g|<UllhLqHC~c)2^|N
zb(&n=on_+D4EI$c;>6B+MeRAw-bnpQ?{*=K1DavDi<VF}pDQG#H>PYJ;~lG7cqpe|
zEK-OEp<`Z2<&POuY~otuf5#}RuCCr^+%#Ej)!;riYiCfS@Jy3Y#>k;fmJ}v-QWy~;
z4#azcMV}w#xq#`L9oRW%GyGA&z?UovU>f?>5F=jTN}&|_m*o=srV6M!_Qso=Z2cMn
z0r_L998w6Rs`vl%K9eUgQ*#w8w;K8exSDd+wi~Of)oLjyc&TI2=Ysu%1FIL5loK>O
zjSA;rc3o{hp+9q0qA-+0DdG}_2!HsPni^%b)CT6#EE2kk+!`7h;51-8S`;7E2&`LR
zT{2i&g67uV{f{s?v?jE(JaBzZfuB%E$kmWiPeiO_)$$YOvsAn~r@&re--BNrEV&8o
zsUD!&Ks6A9yxbYHDS03GdYHAGfLtW<M0dbeG%Zj?pyTmoNbJ!4$V#TI4{DO5Xfx5*
zIwg~&g&)bu#LPNCKM4pZ|K#7#j^h5)-{O7Uj3vNRS1IYT9V{R2Z7Gn+`jh_)Ju&!5
z?AOHLEs5$hGpE<(ESsNvx<_}lWnFm<9*|doc0=Q7+ZNcGBUegh>Wy4mN&YD%-KyXz
zh+ZM5VNgV8;o*&#H5bviQD}c^E>Ku$q0RWM#8RoOdvjQld4VSm-+FmJyroz_M)}zU
zAU-2k`>t)fa+RKOg7707TU*<sXYBQEJ6=FKdM32Phh=ug;k<|1g8#kL)veMDM`w)|
zFBZ-xee*<V3nCPyqubgiAvl)cw)s~w7Ts5c+m&Z4{|35sYd<Q<M4#v3AL~lVz`JlP
z30KlpP7N%}hyUS)#Do`*?&-W{XM;9+EJJB=mky9@8=ScJ>G(kAeHJ`*Uf>C!;rBbe
zjfY>6gg?>d`EYm^a61BsDZQ|+V~X~|Uc+vD!uJ{f2@$~4YUp$zJ3<*oikHT_#s9AU
z=j)NuOea?jJar{a4QN>_&()a1AO3g2aWysWQ|s#>ERv3qzP+7V)MG#Grm8^64H=m=
zFsJWoK6!h<Y&~!noyFR0On_(2CeS%3m;I4BTZ6H@yj%dptti~Uqv-rQ_HkobJMV9_
zN3Yb)y!;tCwpias+W)gsNb5Wr{G(R}*@2G=;EibOW$Emx8=SJ@;q~{&;mEm+9Lpwu
zw(|^HUdoeD<>CEm&Y*F9sk#%Q0Tm_yPKeipjD?nuhuDlvZz0&9ObHU|;Hm4Fq)(FC
z)a|kg!fpUtMPa%*iHhRal|g4o&Ji|k*)Mr`)OYZ@M9A9*=v?WfR^qv{pOQrXh~8c{
z!*D;p!RMo@8l!{_3S2J;xLagmL89VSJ?YrtbmXGjBg1YU^AIWf08eOSnY6&PbJH>-
zP)WdZ&$Fp@e!E*}8*eiysF1$!>9Yt(|407iq6~DWmiK!$!G+BXL&K;m$9f@yXNKe*
z^EdDcRB<!xOyyTKKRX_)lK1`%@e2Cg>i^FPBP?o=;Auv}XBkXW_*|hy)}GO>02n>g
z!=LI9JfP33t!rS$%TofL%gL1-Pft$*%b!f5zzx*d+p7~J@a07|37%_L%aE2qM`x$b
zYd=|FM8aeWl240^0kabsF)^pzr=rhyga3J)7-?yZ4E9e?A$aO=F+lpuPD^{ux^|QB
z=|6*$n!UZMeMz=la&Bx*p-tu%_q|^fK0es0gS-DTb%likr-^ZPPLAb+X5SkGcofC8
zwc}%bFaw6dwDf=Wq$aS|j(&Z3a(dwGYWkWBkBDJS%Fu{?jvWe(*F-~J%e?((k%DMz
zM}>V*hQdpU35ay@=7ma1N^X4m-KB5zJtzohLH_xuFu+-r6lp3vv9Y_`8~qNCg6Sof
zcA^eFaPM)3Uaa=dgO@T-_boU$ydtH1p8DbPPD|W7JZq(9&Ck+*Di=_PM@Ll{_Wpiu
zGBUiR+y4G{?%eSQrZ=a%!)SDFZS6PSG(2lsAwI(w|22WZ`Tm06AxY-PyS+0#$>1U}
z28^zaOijt*wl+3)HaBCEqw|d#Z{R`JwznUXj}8x^4WNarkG12j9|hk6mrXTidz;Nw
ztOR^Y-X2~nW^k*quQy&pYU}C({N*}Gzm@A~zkg2z<m4=A8ZQg+ekm|G(sOc-wYTfC
zuz<I2JgOvgSV#5WYxATeqnkJVZuv<k8?p7&0cWpFz^Rsolqn6=KZp=-e);J5*mkxt
zTOtx+A|>_qZ9%0l!Ql}JUQ)+QON)}K?fIR}P+(YW{Yx>pYJZcQklKM7n9AZlS5!F5
z%j<pk@a;hAKD(wz_)xaL|3%E~`JFeU^HEE5cb*DIF3?;%pX?t;CDFi0F={K`ueiA-
z=;@(1f{DQU>y{;_Gci#CuV=%I7(9y^8NfQ5m33RBF1?JV5bq;dU2QE!|J>92^0`{t
z&5uuk5s{aNXK)3T^_0&Zn9{gJIXNBN-Q9uXjJXb66%B_Qs{ERgoqc_rOdT~{=*~`!
zU-_TFb^mAiq${lbp9Pld-)q+(HeCO|UI6$lFZkcU7Z)w~)&KwP|07ppb#ZfbWqF(C
z!9^Vz_*mzkf;FPMmGfs^LvAVCUrPN_@JXwhfZGUsS-jD?0seXS_W$8;KS672>+5Pg
zYwJCQL>rj!nb|rxJNkP1dNlFW`48F6upCbAPEI;R8it1IVT^OKcRazKs7`4{l4R!l
zTgC5>!QC&_VKJWyc!lHh$(Ro|Ivtr00-l0JVxpD(WhL~TUKaAhmx`bk)mV@X#L=s)
z66TN|Wg2jJR8E4I#-mCgB%Jh_R$uOotLxdZ&IuDEtGGoUX7~$jSJCG`88hMt^H;n5
zUU$+$gd1uFtR|S*%Kd_ru*r>){Sg%IFD>@o7Bu6%3;3TKn(>p`YfCf{LL71PSdQSq
zgNi}Tqobok=Oa*{M)`qvSzrHvnED!TX~{~V?6QV~v%61gRYvE=ri%QVDGR%XhI-HS
z(B-vN3v-L7dd)#j(M#aMC~S<kOiiJu+Rr_vKiP463o_xo_UvF0x-Xqr6J$GQfJ$`P
zwmd8|CCl$D-~g}j9RF^>8@@Bbd&5+n=pK<;1jI|Th=;74KwVPbZJYY>fW83-8`HN?
z;iQDPu*m52&4|JVxp(rGdKL2SYHB;--Iafv5@Y(K!Qp|XFs)fZm_7??U?<Gae6Wra
zubVjWy8i{H{-GkzQf)8dK_8K=LHyGOwfOtcJ9#!7CH4ckgh!_jMt7-1otSp_KV^Kr
z2?>>^O%Svrqc@;I-|?(#5M=A<mDj+-yVc3!I^y?`snBYxWFed~`b2+c-0w1Edj_Hx
zR=TNctXi$@B!=)2Z(?(#2Or~GMIU3;93Dc>)OV!1Xs%oFRyl<ic)_2wrl{bUyI)vr
zgw5whRTLb#TV;tFjw=Jpc?Pu}Ke_UgHk_GGGBUg+oygcq$;47L)_5C_VQqI+RYywv
zK7m6%3{!=?jLE9a+%#k6P*o6GUEbc_qMlz~rc?Pcd@kdE$6}*F8hk|B=n(A97X1!s
zDc{)=m928#!4U--1!iuJQO1}3Gc8&KY`#(p-?_b?g6+MNg@{~?>L+@nhqhb>W(VzJ
zwo<siX%-~@Q;?lm16tkFWZsS=_{IE7Qiz5wBbe<e3CYe(IWy-a9dQf9P`ehnmD6ab
z1SfGo&3_x6d5ZVzW6@_!KVLzR8`MpDJN!$g1sSKubqM<eG^P;cbE_q*J_C=>t!MJI
z{~6KlbV9P{APdV|a0KwKv1Mapi(1+52x*h*#KSWq85VX|OYL7B=o&=w?RBKgbnyiS
z1rqH{m#`ZcaQ(-BgU{l(N@k-EJME1ey1%&$DOZ~%9D<^(yMRAP3@45KCJ?2Amj+Hw
zt{j!n%E-u-NVn~dSNHFADKG!E)_00v^YFU7yyMS`7p!Y}<Tm-ItOY-+la5MU{~e_b
zU9FYP&Vwg-X&o$i__$Xp(XQL2e`}wcOL%c2QS<liB+>2eQb8QjzkU_mn$Co2PpRJc
z^ojtow7r-^sF{=;|4PuDM^@IK`JmnG_rydiXKnsXJiR&=UPreQH#e4Q&DABdZ1zMq
z+O1E8i2<<=VQgmExg=1|4uQnusI0|B8Y>12zM%PkDNfOLGU!KIBPLjb4+Sehd^+H+
zjWtAg_u=3caC43;@5u}lvd~gRfg#q=SuT;t2m#~}__~~_*FEi}Oxg@D>7*}JRjY^!
zOr)(kzo$Qn32{C&ii)vp;}ykIzwVBP5K&7|Jkn@#p1Qs|>H}!8;%@k85frEsL#llM
z)Cal$8-Fuud4)8K-OM~L<An`0BF(9yTpZz3`C!6?w#X`|-T0z=^|ynBr|U_%XF-=e
zVn6%T$cvm>xYl7UQEe_iO}h^#bC-yc{y~cI>>AANXtj#<@e-P>q}~%PAUJnv`|d+r
z&ypN*q79GM(BSnimBH+0Hms7SDC!oTy5X&_^*Nzdkq(qmLrI5+iq$<MGg|2c7-EUs
zO;&vWFEv{}2_p0g3SASevJDWI@48c`*@%4eoxJs4^Re)6PGhDHF@!Adr`oQg;^jT3
zf1(-4OQo+ly3pJk?iwb(%{rgpOk8;V@r5Oy+uBEpvrbZD6AQZ)=LD>1o-W4=YQ@XB
zwC}z$Q9+AiVLEeC@c4or{nR!ix1pcToTD+ZS4ZuYrHrvg@YX+2eIr@3tXzA;ilS{1
zKM;Gku#r7ybhP)`?gb9r*B9yjYBj8GljTg}#NJF>f%KGf7U|o9REiQ_htnLYTp2|r
zChu(Q>};xn)Ai%k9u|PdnnEFw*@brFKc#;Et+awfnFp@>nCo14wpRqY{_)UOESE#^
z_NJUnjX|K$QSH3(-w4rJPh9g2nO+4Y72~>d2kemLaDkm1!t?Aj7=}DAm*y94i1HyN
zc@}rpkoOWci*VRv0kx)s&IRb)N@9<-?nDg~K+NPn^tY)PfMH`4t<c6yv)aheH6$uB
zd1ZGYKlszY*^dhNHO?*@yEIj~M?RSqU!9Z?(NPOonXIu1n%*vY`21-Br-N~WboyNi
zY&$rgPu9Dl_kZ@^!Ut&)+i@lPt=)&W@fb5u1mr);OnXx<+G`x;1omd?HbFF*s=|2P
zhgk<=@ed8sh|bR5X_R+iH3h|FmeCqjv_z|(_C%Ryv2<{4ZA^-;h|jM#PYO~JXlN6W
z$G>gJn7wNpjH^9<AK&sGr3jihL<Q^}9vlF_dw{hz76KI8hK7d64Zu}O68zK_t^#MZ
ztLspNsq|*JZVa~0%piaU;`?_ZsuN9LD?o1tjO^&d#DBD(FJHRWwB5K}jQDpyH_8KK
zn=NP#i<)V%dU=6(F3=WYN7)15nXtu<ZGrdZcl;EOZ3)vFd|-$E4gW99Ae71oNS0LP
zM)ckV1Qkx@@T0S}GiG)qJ(hdfx3-J+c6S~1QLiSQ?CpDJlM`9%sk#s4azhV{v<<E5
za_YBq|F*XB(>3NJUw^Px)U?+0F*de$^>qlx$uV}a^EJlP1)7!xJPD<A1tNiKt5Sz6
zqh8Edh;7+IL+ix8YZmd29r#Hv$5*=#%<kCo<vn^XA?0dzQC3=d=2wMpmtYr|JGcD>
z!W|O7n9A`EYO?67%uNQmP2i^J3i-c(b8$ZU7AzbFUvw1uYb9Ran|P%3?%l_O-(g|%
zYpK{ddeT(E_sjIm%=rX(^Dl#03gwqv0pATE_6Bw*$$HNLjxs^WF{7H|$rIZ9boANF
zbMpaIUhCPh#)C0)zLz`Rdri8}N}5jfp(udIJ!Gw<R!9PrHuqfR_=ptasRd3zk#z(d
z!XIS3Z2<a$<l^T)nQ}lOuCZtI^4iCL0my!{g(eh427?f#Lru=+^Y;M!S&0vzu56{Y
zM@4|-J_~q`fbCNUxPYhMD&xW5RoG6H176-0pyzh^EI(cC5j4&&;vKo#AKGKpxr$9m
znW%B-+bT_dxz}O7#2H3y<ats|;Hpes^kR%d^7=3Wm2BUH@9BAI1~=EK^gWY+dw4}B
zS<N<ERV72emNYCK>^9+Bp}pPhJ<t3vwOg-l`K9`98DNwCknV}sn4D-rC=UtNj6Xmw
zd&T`)5}up>0?%!1UuvD(%Addl^pidB64M%q$;0+i$!fbHYtL}*SmUt*6$Rwu;#=4i
z!PzN?efh+-6bakP>B<#ELrwG1bkn3$VKwC*;*in~`sde@yJ~+7HS#2A{-@LG?Z%yj
z!Cn^O323NteZR#WLHAHzIpcos`Tel{d+suvJIjC1NrEhj4f#a*vk$e{RT8Qwd`5*l
zA9)4^qwM=aRIa<v%eF~uR_u59Yb0m{?L2o=CA+Uy9wd_J*KAEAJL-C9r`}Xru54Ot
zurp9cWPPd43^?P&T#gw{DUVT>K`U~cEwFiaqCq^C4`xCT#2)O777wut!j^V+=(#Q0
zjvek2Q@VGl=H0;~8p{KMV4YFGD-}ZGe0H`kq3~qam1teXpgD^wkgh%LbJT<RhXUJ>
z%4V}lYC0J;0FDLGM{l&Xhk^H+IoS99eYeFg2q`Hku$o2M!Y8Qj+`c_+L62JbjZe*&
z^0~N!MAwkpbyHh+j9_jk@KkovXQzk*ATM)MycBu#(&HKIw)<aUa$b~Z$AtSIwHbNz
zOe3FJg(6RS)aI`D3oBpHl^FUg#C?~TjgN;CxGJbdDh<3`?QgaSFOIIV9klt?Z+-;V
zscbF_EVtTmA`T@8_+ngV7Lo$V!m?!JS^d<hbSlNkoTNpBr__656(QzSDaN#IKd8NW
zWp`KXl+mL*2D9V7+u38N>qD6`IU;S0brU{O!{RD_u<T@{QZojV;&{3qRKo1;vXmCa
zbul2k2D_NaEiHzYr7e;=QVA}!nPhS>U(zb17^!Y?3MxE;srtU+ZPK~(#bnJ`%<U>z
zKu*o=6<tyO^l}YbocK<u6)eG8k0^gv@xJUcol>ae)ppRy9>sljG-+Shf4m=FQww_^
zVnb2Pcpqu`s&Op9J{Ohn-B*_!6M_GO)x*QX=dhCzll>;5{_@kz|MddQaDe3|%6Z;F
z8yaOdy#<z1`ju}(s)e1?j{qqY#J`%?NwuywU+yMyn|{rO(;xYQME5tRXjS!a-E-gp
z+};k_KRSw}Jw<b(n0U#Y+VFO;7@JWs@jT0z(sKvgO*CGqW&}C6&rfN}p@ir*4NJ5R
zu}hm3gx~=|b&<iww&uc`GuZP7wIZv`JsVC~+q>u)FHctZSyy#!^m17lC4`)&Np`7D
zacMr-Ta4o88O!wMv9Q<u=UaQ+YU&y>>A`)d#hgntA&bbwJgdD|nscb{3T}9$XD7!y
zg+nm!dDYhN(rEzf^x%Oy|Kj4N+mex*!l&NefymI``x>#+E@wksd|7!;Ev~VwHtd+d
zLI?g7ihrr_SYnB6c1hfN)Bo1X55Cc0IkW^BP!Tj{!eU}qU}22t`i>iFr}8cWk$aO)
zhK5N`-)=WX-M(+P5*PRU`|CtOhZtlAm^pZ$*=ytn`$xmsjsX}IOnGzlvGmKZb)eK&
zRV2gE+KiO|qFx{1jWR<%|62#aIts{blc8BIN8sm@`@e3v8SmGvr3{s9baiw98CvUC
z!WWHAO#nD*X(&Y$<m-O0*cxHywmtp|T`pHM>$L?W<R#ek&kr~N%>eBS*oWps$ljz1
zi;w0Y5sMj~l|19E$PjBe#h{oTVr635vYDO9QUBIE3z8V3l32r1bK4|I$9!$nbplGp
zK?0A?`19vFrtgJs<M(OrUq3I9Si{|fg-7f(2C=w>B7Gh?Nc<OyCNJ7W(@?hLv-WU5
zZ>@;O349I{)iQ$lHI^iaztZ|&?D=A<7`Kh|gf=s5suVTsRZnp<Qy~<Sto{sk)sf~8
zEbQkh-#+U_z0Z(1hFZLxtSnVr)$Q!aYoy@@k#6E4YWJOb?5>BXVFJjul%2%Nl|O$5
zOOt;x^t6Ydq)-64Rky!4N3=6VM(WJOCB(;5FaupP0-n&)BJq>b25cEARWmpLL^W(0
zJd@F%zxoQY(_3{)A}Pch0Vs>J(aIUP`Zg3UH7Ys;BCL;DCytBx?F)Rg1&UY{s>`^u
zsUtqYQ>Kc~HZVpC1qOmelV#?1PVapzJ^rRGn6Bg?JVe~KhSF^~BY$*#IQ_<3btL69
zYu1;76_CX42Fw{FE)??XUAD(dz^n=QwV3f<7xM$CXz&SG3_Ssh@7WJFrEWcxZ&P`U
z6kX@K%`Dh*Pa8UvEW)l!^s6?zdHaUFQ-P<zD3BP1J)Hs}T9tBMAUCp4{0u-_w+gzl
z^m*R>!o%)@J(oRnJyuBR#v7^&z<LDk;s18R|LxwsnZqAgyncgGmnQ~LCYjXOyzl6O
zJ$U)#q+ze|C<Fim+)p+~=D^AwDv1;Fz4F)zcb`Lm+p>;`S~AT7cv(7&Gg67fE3#TE
z>@GR{MHqHGtfUlq!rN@#1TpRW#`(#qUZ*E5v<8!YEH<dp^R7=OjU7&hN3Rx73RsQu
zaIC(Y7@=!hM+cnlMP#KHv`KQEFBUqmVqKNia6BjCO}v0X7RSDY6aNWs;9IQHaXN~z
z)34tB@L?__(3p#fP8qk3J6{-*b@r{OQ`9n+voC)*k<%nWx;%*_EitN7hs4{4Hv7zi
zF1~6ud#OR4B{)nAu%ZQEjz_n=_M&7i-4M9hiq7xt$4!yBwln8*l-J%peUj=_;a!@0
zpQ=A`71-sbx7X;%<6X{22b{=MnjR%&AK@q@FoQ>Jb9v%}BJ~wfy>50!4%3q+nVbV_
zpQDU8+&Sc%=0aF_WpjKgeJ?f<o$ufwY#RZ*s}Wl&5s<IMoEOr@&F>)-sjDk1#n1-F
z<p~*f8zRc%R_%(U-5Ve8_B4)tM1az*E*e^%bww7Qoh)wN_0$fUAorNP5=@wV23j(g
z=MMkr7eP8lwEbIvG6BnoJ+HD3fRhjkPJh_ev${1oej`WI$wF1y-`5=+>wrAsrwXjQ
zsHn)Mr0%U#Y%^(F6og~qtKh6h=5z@|sMz7RS>+_Kq;uD-+czGxfr+RM+Qh^}O%hwl
z(*(|ou+Uv2Gn1|AWam{5?L2RNQQsX@b`vEgN#ajkceEH-zz>fO1)yv1Yb3p!-lX|?
zEBQ&4-jG2X^?2ME?`j=kDv<v^KSR2kdfJ1ZILbEH;CvJcYt(WZ=CsnI7WL9Yy&#$C
z#M$7^FQy(?s1+)@m)A4EUV<HPAyLiP2oyxjSw1HVN?z&%3a3++&%dN?&k|BQ=i_9<
z6BB7mEu6nC*K{Xd3?Y@S2dKjpqY3~eckL$w`*8zn?3IyQGMOZzd3ElN^Ys;Os3zs=
zJh(kt*k!{|Gg9)y{D(SL3L(8ikF_P6n|Ripjjkl3Mw~9YyCl6lxL>!3lK@SXU0)9;
zOCex8UhBB@{{4G8S4&A1d3h!<Tdm8&sqg+oJ=SJWO*#jUmyJ7szi`UN0Sss%%X0~z
z+AlZkpzr$tW{I6~xvK;alO>pQ*Pp!a+P!`Et`6USzi`+~$;<5uC*<<lnxOSClO2>C
z^7vDioxTD`{pD^$c3kERm>L&hd)XP$Gw!q7TU$fbc3U^FUasp8*+Z4DO;3%^BrLw3
zF6O@`PdF6TZ}P$A1(l3UR{7qLN^UrtYTW&DpCA~kw=6fQXQCRdQdQ^FnG|EENbcE$
zAx=Ko(iLE>w4TxkeSPP`v#mp$<Z-}qwb`zV=oZCzMX^GKyd6}L+ig@iFcj;4U~5jE
z-+8|<wkI+%*)?mD*YaG?ZbEYYOViQu;qG)(sqa}RwS>YqR!|;$BC$^&Qm}YBfO9Cm
z+t@p^@WqUbK`oXY(KE5eIk&dBtE<LRNgrsu^8UeWs24+-<No>5@842jbG;Yr#?b-v
zp9c1IvZzZSh?eh>a$uQp9W!bx_(rMepSLcD#9hGM+^T)uK}>OhHAmx5mmdTCHlw!V
z>I=0=K=m0tOZfJ4d|Au)V9z5K+cbIgfreEO2+c1nT$jObZhE}J#A+@PD&cfip(g3G
zGqO~b=5(1HYUr|Y5|Y424xwAy4(2U9rgr)hFvnA@I5(J1q@z=()CrcARqDPS6O}|c
zsy*^_-e(YjVk3=;`!d@f934mCp&Fx7E!#znLtZ;tEg7M1X<ge!xx0ue4Zr9r-}h`O
z<6(_wzgda<a64N@24lJ+v?|cU#Wo^U&G`IEU-QSWUeVt-L*7AX9D6C<1H&PTzu;E1
z`b{mQ-WiuJ>b_ffGz6FrN|PAPx9X$2OVZvTgnI)B*_sMIXJyfehQC!^-WxBIp}wtL
zxS%Zy%Gwk2`^0XeQC{eOE-`jNiGi=9uW}6s1_m(Ye?vjAL|(!7A3vg;f_ZA(XT5OK
z&R-?37Yz!>_!_^O`Z3V^hs=1{pfz<5PKbvY3ASfzT=b)(vd#<K1v+}W!f2F18_U|=
zoA9}pC2V7^Hp=ms8Y(#N0I`X&BBG`7lWy^o`IA`v&3bNwkCS?iMdGaEw|LidV<RF_
zz=4cnl8z}$K`+u`r{Q>5v?+>&oGP7@k^b+<%P-n9f&LX)Z*tg`4mML5XC*3;W7Wae
zJ5zNlzh)_kLeoyZT0!uBEp#VB7}QdVU^s2lvuWqh7>G+<U0uzr{)ob@9sK)tcf<=p
z%3kNaToJ^_QWhM6c;WL@%a&de^)@&#*y?~EhJ`&emryZqi4?E_F$&%;dprj@g?;4Q
z%Z+8Ueb0v-`s3Gj#>))So8|L5y5)!3qc<lUIwFv`eqXa~9B!^0S-_v)_|)Y1HO&L$
z6_+g1D}bY^(s!Xtq&U6orxyFHgfBvsdZ4K<4b&Ir(2*$N7dfE+H{(UPE&f5zOk4EQ
zk93O5cwZ;F&fHq&v;COyt%g%JO4yrfovm<AIsV=Cbg=Omp{&bpKR0JkQ0Q!Kj#+qS
zP-W|QY$<$n{YEz0P&_UwDFdME0Jr+aP*l?_v#97L$TcglW?|ocjwS+tqyp<dElO&3
zyAxWS`Oy5rb+i{}tTi{T-umF|Om~%5CH~K!KOo##<<hk+uPhdM+UnlL<K!|Q6*{M#
zCwJ%K!X~B<s1Vn+c-}<B)`T8NXF`-#3pT@Oenh>mTmfgeYD&e@j!lHu#+`T9?1=`&
z_p$(nRph!nF%_}a5L8mnUvGNm<QI6GYvi568_(4phkxfT`zBRR!MyPaQ5fnqLU=(h
z8K!+PA=-C!uoU&#XR5^Okc!`K)ah^B!I|Vy^RU661f42lBjU%Aia4q8BF$X__E5=`
zxHup&3F*Jr&L&X57|3c%b^qSI=R9T|!2MWw=wcTU!&34Ne(3$8JST-ZLD0b-X}&}N
zxh8p=pU>F6{PV+tG=#sbtgLG~E8+OCaBtS5X~k%FYK@PWm^eR?d6-mKRKjfe&ZHCQ
z$pS`fMFo$D3uy0c=7`t2udSZf(iVu&eUfKh-9A$M`g@)KU7mnMX+uLmB`UO3%W&pi
zR#E0n<yzeC4S0(8Vkv7#sCd$cZA+i+@HiRov+ZdgO#eWO9ISvm&DT%P*sY~W;FgTi
zzUVV=x>p=;73nX}Y>!SJ#Cgm)uSgiZxPJZQ;nRZ6xW<8_Ym6soRnB;&`s&a9wi9(>
zof2hYsUPy|1Lmp`xzn*MeAJTNRCD2))l5{n?|Yd(t|>BUN<4}zZg@1%n>2#WM1Z(U
zp#gMSG5}mHK0ZFWSvprW`uKc%x~`&`f|NA3fPsM_2XPsp+5$p)%24Hw{sp>UY<-iP
z#SoZdP&>TlXToAmU7RZ_5n~SHwn<F-74CbVe*92|!Kk6Rhz5Z~fy4|I=fH2mm3#fo
zMw8t?K>Lca{!|~_#*S?H(IfGB8jQkk`dA{=d{Zzfbb%o=n031eaZ!Ph`M=1}X83cz
zK-(+WP>y1Pb!`*vkE>gsIZ+1^i1V-?$J!GOb}z0gz(hP_V>8-Zd2R3_DnX!hnJ+j~
zzSgM9EM%JQy=<i=5G1Xs&Rlk>s2T23rRYw(To<ZMv$%@6mb2^qJPt&&newGd{7h<L
zS_6@?yXowGuv%@Ps7dFB-8x+epxzYcpaSL5*{rvkfjtQL1|WL<Xx*^fsk)DfIQ|ju
zh`i0)-~I5F;I+It$%;t-gYOXc^A8*Q3E%>05cUK_!i*Z<)lb_u9~6{JMmq(%-Ki5I
zH^?rVnSb3T<y{p;lP=wmn3!1M3yCI(6Ucg6;lB3FZi4e=o`2N~KSv$_DcXcMG$z?@
zwO!A8Y=-n~b&)A_gP{-q>%p!uKSgWBMRcgDVe>nS31*$`?PSLlQ12KSZk{N|49ka7
zOjo$frlvNZEGvahS59ydTX?)ND-@uNz7Mh+!UaA7y&`Q!roq(JaTl6%@GHw~mCar=
zg8!oAE?(4#WknY_MV4sWTk-v0FMybkO~r@#rx^Bl$m=ZH07Ms@?=L_+lL2EdH-kDE
zaXMjaoK4C;PR2jp)*a7#vI6vkQ)I7|eH$dEe_k0#*o?A45P<hHDtZHC^EQH@%L1u*
zL6lirpZ8v~Yy+OmSfl6P%f03-_EL<4k+gJ%G*<s|Pa5$n@6^bfKghP&ePH&dwIe|F
z7KB5-epZg9!h%+?D0Sbzp4f`2zj406j*_GpD`^i08yk~*)w-&<_O0Qzu)hK&#s#6B
z7PR%I{@yiqOV)^QM5Ls#z2X?1%ACelcL@w8PN}5gSwka4rL*q2u3$}hsFGflsu4^C
zKPbvD>OO@8#nFhMB<ofT^6VtQ*Ed_H&2@Je7d)0S5Cikru)BlzA*?MPlJz`8SL5%$
zMrmYZWK>jEUn>XWOUdgiXGv670G<~Z!JvB{fBN(Zq-ziCQHi)%f@-S3`d@<uA?*c&
z!6qV{);d71o+so>HAsM^l`C-HK)u~$QHqT*4twcs<}BM#0_aPCX@>z80(vxvOoha^
z6qc%uex0@&$e0Ms=0$<9<^ZZ%Y>B8nX0gJ3v?O6Fw<i0A``fpxe#DZQ>U-rCJm6~N
zu;btLCnAH2xU2VY;0+ZSR0(kk${FkqXF7oU<M`39(PDk=iUk*hkJ9xl>*jl^$t>uQ
z1$*?;^LB!xl0(Z5{xrgloK9s<<X)EcV4b&r^ho6}U9nBr>Yxqi)IVTy@8Nx$G*&HB
zQ_<JpGkA-0+Ufd8K(g2+Hv6^<Zsp0I*LHBMBt``_-uG5fv$3pKOV8tw6K_cDXnL!2
zl)KsMY_rUDDIzz;<Mn3KUgOCh(7WH+bGZ0eY+Qj$-17xfTzsn}XsgG`7|4?Y-6v7I
z3sAC-R~KhV$^gJD$S68dgs}(-or4FKWvcdHWF2>l4~X_C=qj(M2o{#x<OLx|0W1!j
zKPb1*r%n0wXLCpxEQQPDGk3=Z9lru!U`R+a*h-dPH=Rz}bWvpK4>nv+1jXv*$hre_
zy6x2+&Zhly0|znp9>|i64Ex^UY!kjJwV1_5c{BlIi(-rUyIWtQhF?8de1Ez-U1ZH7
z$Y|5D8S#;lY@~VZBQGJU<m*rY9eva((-s)Rl(XIr5QulVe$bU3v8aTfXE~RxTL-77
zI12jDd#v~@tsDlmx8D_<J~8_c*Hpe4QHR<>Yl_8xz|NSDZ45g9f|@F=S?b$*D0ap?
zcdL^bn>C01?wK(iuOqFoni~P@#d|f6H^Pj5VBa!N+RH9!S1+jtUECyI;40BpBDWna
z+K3FDyB@$VopGEZ)W6|#6tk1r*AM~K!Ta^8d#VNp?l)?H56UiV{rh*kJC?@oAc&)0
z-T)*d#ety!jx)gRUyDgUNGc{*B~bvb>JLXQEiPug;k6zA2?$RBYWL!WpgouggT3WQ
z{A`*RFgOt)M)DK{q@W8#sJyqiCqxl3Z6M%8&RG5Ck0^eC`O3;U0QJ^$WGiSloCA_y
zK>`N!t=j%&UbK?hxH~lL2waRH!2ki^6{<miC<zJwyI&tc<c+Et3`qAtZ=!|=%$Lq9
zdh3qE19rtOi+I(x1|SW`($?lL0EEPSB>}J=S(%xk3v}U;2lv}U$PHrNj||pT*_IXS
z^W^TORYaY5CGv*G+AO{&8u5_ND}JG~;XFtzvE{?a80*Q4jEX!{RqX{GG259EbcbWC
zu8nj=0hd5|HlNFocwZ6L-9*Qt-kf2g$0lmY798G|Ya>jE!CyOH(w3@TdO6v4{|2qI
zw6Oirfn@yP=d7&{FF8TCIgtOFqd&KOW7fOBNv)apx-`|4Xb(tJ9@tDa&XK{-$hnk>
zr6c48OR9I?*iWx;h-1`h7gBm`bmbKo7xa|7(-DXBU?N4dJyYT;74FoZeC=%{!7f@;
zGS%R$B<1U?F0Xg}n>HZ0{tYtR@6v5|3eqX2ePY!!Nhp4qa<WeA4)Z?os975O*{Rz<
zwdZ@->z%3?tP8fq_C{!S03^GRESFkiv=H@!|8{;7_=JDg{s9h0Nst@$uSRQNJxDXC
zu@}h1Y|@Q@AnJ3FM-|N;zNuKZwY<7I>oTMQg+dEN%&@GbjZR>QBPA8n92b$yQN!YH
z{{2bBwDyj20-u6rj70f_d|{wY%u==Un(E5ER#|$|<gvpa<yn78jlB#S9*T+7SB2J`
z#T1Lu`LF~CHQRw9J;8_>rIbhSdQj;Ib@<oXN(so0{Ot(dV*%HX(Mr}5y4b@zNJ4Vo
z6h8l|2KbNXtTjp7%HOq(XX#sb!3?OxSi)f+x)kNNJ=L_czJPtio>AEVn(w8Ak6#jE
zVyTn!DB#yAb_S!R!*Vaf^bY%vs7anK!{HX^cW!SK_F#`L134N7l`pNG-W=swgwtbX
z^s9C}u*qss4Hni;i*gQPI&RM<N6>4;)QJ4i?{hsfi23-;Wd^j;8ukLMOAqS>>s+yf
zOS$drH}0hs1_Rc*0l>*Uw+8zgN*MtYmM&Yu)q~_F7j!Z4wC@_NhDP{;Njg3em4s6k
zgCAeaiXl8&5YIA=e2V`awa>nkrDbO~o@S=UYP=JMOAMHLFmXoV;o%NVCo##SKF0%c
zJ5TxOmXp8+4q`HOM{2A`Sn@5j$?scq|9|YgWmJ@H`!9@%pn{?xA)#~&C@CNk(mix2
z-7!d~q9PyyGjt0>mvn;#$j~jVbfZY;d(8bj&;R|f*V_Bb-s|0auh%c$H(tZcT-O=L
zdHgEw&V`t7-$r*RRb*usr<zUyWP9dcfx%#GiyO4CVps{nO@&%AU<t9~k2H8sy$RF5
zO{Q6JE7R&SjwJ=ZY3a6UqU-R`_JPm)2NuDPm@m@Ep-31smE<1G6k2Ye&|59|q76P<
zX{glL-8JT7xg{AP<!2Hn?x~GNm4QlV3(kgm>T%z>zwW6OHIKRm2iLx(ZGKH4y}a7=
z_I9RwO4G3573~_58B^w_&4>X6_C$7>+5bo|b9F|o7u-b^!d3#cX?TpPvg`|$RORH9
z_n^f?v_AIX_J^N)bw9n1HX16qbyVr5q}#QR7IM<kIi}Dt_U-K-1kd3yQX;f?jOH0I
z9w@Yia=*se7RVdQooawKDnuL`_S$0E4Ulb&eQs6p<Z6WU>YpOL+F=EPuco>*m_JPI
zK3)O~8<cyOo`VQK1$q-pOYh@PC5#rJ-yU%bGF`Ps%0BS$@TiNRMirz<F$rzrlLxVU
z1=xbE%R-w-NYRDkHtS~(X$^a?L8=i0*-HDF<?<*!C44Rw|BYt+6T>6-k!Piqj(UHw
zGgWp*RgZ;6KOEN?dCg|Ivfm=5?5kLfHL`P#f*^+tac`Fc;#8*FW%k0fp`u5h^TPr0
z3(czsU&bBFjfeDA$@;^w$JTHf*~qT{GyPS7M#QT+T|0sVE7CpX{&d4_X3UZTf2891
zKrvj|u=#^QS7Vva+*pEt4?<|Y{(PXi?Xj)B<Q|#m*%Uf1%Bjnkie|!dx;<y14^71H
z3f$3G0uKSBP&n!JAAq|AuE;fYbsHmPPx@YG+<lb=fqI~WfF$RR&Q4LMp8-dNGq>Lp
z-J+qH1Q#7v_Wi>{=wX<G|I|T1*ZaA(TjL+X=S<2ld)1O6oq}o^_p@tvXc^2?zr3su
zQ?Qw2{jT;8b&k_=e1@n{JDcB~xcip)Uh}rcIql_(RKpw^L?qB_;LS^}D)u+%`22$&
zfBBh=tfl2bS`U-N=VvuFLVrqvTuN8&k$WHRNmn}14q@VFV}8&dGAia#5?s1MKoA~b
z%1BD=$;yhsWHKQdm{FLsp0&lsk1S+rzY*v1M%N`oRVGN4+x2m%8)=(h3UnQsvtqu`
zi|~h6UZL`^+I^1^3_?7<{rxM59J$*$&_Eg7wYT7x!&4QT6btj5^a>KO%Uo{ZVn-Oi
z*DcifwFh`ZDW66t;bk0|?Bz@11m4@;hX>Zf+2&b1qM<d<SBLb8+4^2hlukxUHZU@N
z8!-sf9LB`Od#qYbmmF9zDr}+Twb$x4va=Ylg)Ne`pjAbfUn*WL=s5PSY*QM{EST~C
zc_MLVzJu-LGo#B5^FM~?@me3ud#*gY*ev}zH#kNE1D%S-*6i>1NKb#Fh?H4dZ;z;*
zsSxlP$UN9wp8Lz5&~QB`<lVsDkwN<`#!uoi(6qm-(`o`c>1GvZ1PXw7<-*!ZWOMmh
zrydL18R<r3KdPu(be>&4xHvzZ!X|C^(=#u})%yDJ*ZwLRkJd2X^t+x2wj29OxtQ}B
ziTO32i76A(U24<II*Z4`7q0tGhW^1FCIR+|uVdVF44Pe5S<J(E-sPqb>_<iiN0-F^
zEKYuT`S3M5Poqlg+?)4UMU|^p9fukfRF40=F7q#R4!``!ef4)&k3}!?O}bor&g`D)
zg?*+2bhzEHgub9#&%5ITyq{(tie3scGlojm4cW9u_EH-v@zKROK8ny<2A*j6NSVYh
zGf;Nugo{}wiP^p5$zfooNfh|Yd|^P($gQR1Ys~csLj!{hVK=p`-g0v)Zrb*@l=0TV
zZLODk@$jUzB#vcOgcGinJ<)x_<uH+(h!ozZeJDWOouh16(LO|MXRO<MNjgUWs*7Z=
ztqM=4;mWIyVlLVaM5c0IdET#2M4_$YkA_>t)1=3Uu;<T8eod6B)Eq)H9aatOdobhm
zd~~`RR|v~BI1$*k^Sk7w@e^(6&CJkF&rvO|t=yVeEBDnGAR|jEFY1FETqxq+&y*tK
zX7z+k6ruR3Tl^l^d|Jrct<4=JLANdF)By!TxACdWNKHThC7O35MM*(;N2s-VkP~D5
zDycxQ+&lYWfif!XcUELCW2E)z(440bP>i2`I%3NaUr!OEK9s-l8F^L5$f4`RUcYq3
zPd&8sWu|jaQATA_e8NYUiH8WEK0P*bo+d)o;j_RmUE+uE0a>MyCR2rHehu1M$w`UQ
z6<2Mw`r5_UKUKyx7z7jIG5`Lv<E-|`7aoU-(nHE?eTrRHwbiw6?%U6=&qXIks%aXV
z_8#ovOSvwl6Q7BSO!(*yHEH@|b0#CP&w5GiiWvp?1Ht13TS*-Q0TJ`cU0v%bDR-0-
zMTCSb%`t=B)|dCG@BF&1mR!4sAFY^!T<zJ36Qv@>`zf{Vus(oLoidnsIQpD+dWJS#
z{O-boe)J6>-TXtlMMljCDzG8l-T(gnefi2J@s*wO9ize9BV{K)KCfYYa`N%EVdMhQ
zc6?m4q7K=|Aj-)2fJcm(U7<0Qa1+PAttN0M=5{>&c`cY_^r$T1+?W<q^STCJ057KK
zvDW9d>og-g>8{#sBzcpWOy9oI{4g1f|Io(vsKMFU#c?R>iL6v2npeb3CM4<JKDWRj
zg8|`XysKw*FEFDM>$J-%MbCcGs~%7=fjbxb=5vXp2(q*<DmW4m;Kg(y#=>6Z?`1;m
zZAKA##`RBHZ<sIQ9e!uKcfp!P2~idGpI*S;`BydGUceiM+@R)X6FDJ-o0oxa{1?fq
zaifpKR8#Vi)){3&X3JYs0jiFt*93^UwY7;^YXpTvte$UAPs8-w=VJTb-q|IqtRmLZ
zQHG~Vib9Z=kuw`>d7;1>FzF$zJ;10&YT)7ZgOmgQ{2whw0Hdn?O|A=ZpWFKfcIa`U
z3Z|#;3;LM#&RG0hD8w=Ci44wNgunlrU^2x>MAGm&B7mTJj#R`ud6tX4S$hA1r*7#_
z*V3x<pwUtV_Y&B+@_xCfGl6HWB`)sl)AiC)USewDG)h6xrWBnyhkFN^tnX|D1b=XE
z9zYN9Qm)MBo5KM(nt#CcfBk)r_5as<!0q_IMDGFL<iF;O%_m(TMt<$@@BjK0>Ee9n
zIXw2X$nV|V5W*Ij$inhnJ3H^qz&Fr4Z0-_Yx^#)?$`$wzhE(_+X}#_3?MhHXD=DE)
zEzHexG=kAKba(IG%}7rN>o%NR#7Q3eU3RR&+uO#bRQST4$Km~e0upj^66%TG*4E*@
zr(Rxp^$6gF!wC)4VK82CW6<g*P-0+@G@LyxT0e8<1=uIIq%tww9xJo-R#vXG8K8Wm
zWj$62&JJn^6RWEo7|g4Ifp0Hgp2ZFDq_Ynn)}K8W7#R3<d|aNJ7nrG%K0XCD^@_;|
zh9_=IePDnlg=?+epz;=EWbAFr{cKQ$n_q$<Xtax!75d}HOWMOIhq1%m4Kb&u;WikM
zL$PRVZf!01W)wI1r@09*&42nJ>FwfD2J%mM9fA~eWeiL-F0QVBH#gN{8c9Bji8TfX
z|A7-)Uazyei-4&X_!h1V+6KhN&Xv}`eEG7$TP6BL5?&nOOQO)%r%p(?d3<zs_F<zL
zsji^gYL3nGjyMFSl980u(NRI=V0=7D)Voq%2-4%={kTL#G;BCdPJoNlg$$Vj>Zp*A
z+5;|&4mR)%BPJw73`Jrf()KZ}7hIjjVa;i2k%fQpjjSsp9o;<<5q7>Zwa!M!qSK9+
z^YD<;(b3Rl;o$gD<@n^;vky1{m?{lx;cek^ZT<D05BUIB*cd2kY6D)gK2%thpKt5z
z48fvxn2(uoDV`>WfWR1V-$6*1$4)~-LqOo1S8`9=Fw?x9MX0efBI;&pWMtMqS28ip
zKXq_;Uuu*wyFr^qdA-bxR6t<&I~1|1nwsQP-a5E1mvfexIkPG?BSR!#<{Ky@b<4;g
z^6YZo^o;4{%S$T6xVJ>u*r>a?#c=HH@2_aw<UecC#&+k<uhGXQ(>%BVkS07mqmZRT
zKtP}o_L{Xc1inFP>RexKLBYG1FMa-XMPI*0`N+yP<s<s1AqD9{;`7<~@JgGsk00;x
z@fni&`1pv5HfUzx{*e?B^?(TXobd)@W3-Ty#*T&p&x^3<%dKr8fDMTR$qqcm<#sGv
zeCo$uMMCTJg2yVjpQW{I^**nVyG(UP!;Eyzij0ixpWpI8T~!r@$jKK(x!sS~!hM_^
zo(3VMe~YS=m6h{w0!8@qUo-T7h2l<L2-;}1?i+&`ISofg<6qO$;0+KN9UYHCLHqsS
z)hkonM0`X|pP%&TF80$4%jb(dHR+^XA{*%$Pr@ONz-FoM0!{^syJ~_iKgy~<Yoglu
zR+SwEVkzPJb>LPt{O;g;0^NR>k<x!=^&@J!d>w=5z2=rlJmsr1OJup~;(uUCAtK^A
zf#v3OI+S~3%D)G~z~fM;0^A)C9LP;UFuXGGUi$__c}m*xkIxFnff$j5Mw|N7D<v+j
zPk3*yjy!o8vLg#FFJPHfQrvj(e7J}j_pt(Is#$Kl4GD=k1^x`MJaW8d=jMPLK>Waw
zCRZHtbL+XAjywkQ=1NL<E?l_4zrxJS4AvOtzrNI{%SKwZ_0LJTyYDvo;;)aCK`T)0
zOm^I-PiZ+hm7rn$XJf5_cS+JzO1K|;IzMaH+T5Ij6R#de73CZF9~VA*_G=Ug$v6->
z{?UD-DDR>39M&9|eR21f97Gr33QouRKaT_7vXhj2`H~=O{r&4#h<c>w<lO#I@&gx&
z$-<aBQ&84rKU|dI^JSs?v@U%Q9+R-ccrzfeS1w%|piSbL5%3IwDeDxWA&{>a=j8hQ
zxwpOUODxb!{I(V&^TZAH_JJ!n%2_o&lBFbKPJlOAHI5txfX2*aB+gS%NN9V--K*Hh
z*F4bBKshJ7Z5_A|&ik9qhdXO(AD4SRl+}M2-2{UTj$q|vN`{;(6ugghTO+<>u~G7-
zBd!eH2JRD__M=i`54#p%0tv>H2{TpzwCH~-aWDb${*QVR(&*IG-4RP#CWdde?wLBy
z>op6k8a5-m%O{7lXb+}^cKeqhrCNGkyX*c7$;3v^&D$ikHz~OnX4v%Zu;tm;w9A0^
zeI1P^%rz8>WELdJ^^Q{x=1kG+956*{G|G#RJ0lrea}<1jusvkwMS>2vO$cnZFmCQY
zKYeyt=t7}FdC^0K8O+M{u*H4dOS?(f*WV921kCbn{6k<yVC4FV#eGDWne{*PQivTT
zm6&pC4xL$t-0siFVckl*NPeWdvvWz*D7NSt>7Wels6HVp7>K2lCL0)bZkykw^6VB3
zw`wo0-&8ahSA!`{nV`XwfBwP+NS&3_SC*GAm?PbRQ5Jfuo0iwCnxn3!W_Nu;Wu2`b
z_S5>Mtg)@MyWrR6aw?3RjW|!bcD;>F-GuU?N8HdKI!JCrXiwZT$C|y?=<`1<6nwrI
zaP$Hs$c^JC+R#z&kB#MsFE*yucH@BI7@#LiTKs--s4%<nXd$&<v+($M_ucq7%7M+W
zE+wl&N;z{S)|FH5zT@Vs08FHGd{Xl@4|?mh!YU(SHx4atjLU+9dEMQg1JA;y{<2ZB
zd>I~A(T{K{wI3scucd0K++5Jt;4PN~8ut;HjCmCh!V8X(R_(pLYYh#)Q9>}Ju9B<v
zae{iJp+Ec7KvPq5Jpt+FgN-8Is`EX#q8eaGL9yf|1*0YBa`rTYj(j%+gNrq+1Q>>X
za369U;gz?!g+2c=P;z{Hykbr%acIm~=+3Vnp92poiY|2~RH!0;E-cWJkR&7~davpj
zfGC>l%;x4M;nl0~jO5^tf<i8f{L+?RU&{l?CzX`^`tadHk{dTLOsc&uqN1XKFCWh~
zwYAByvbN>Pm}vwCN}9Lw@%5uoDA21%Ne=d&>D6*^bL-P`a&_g|5v<zhoNLTFNfYA_
z<RCZ3{E$aHf|O;oNb=N_6t+68z!|2`BKPjeIv_)EdTs9FFWNnoSiv{1N`e}WCE4<&
zrS8YNl7FXy(ot}(G^B*RCfUv2mBJV+IP<M-Zo{~i5hclH=ns#hoXn`%UODvl?<~nT
zSHLGQH7F<>#0+cGGvSc({cL?)7a=q}nJ(R4)=e`}X)j`Wl}$v%`}klmUyD=R>8Wu|
zH`3YJcdcT#Vh%uQSja@dTts+x+__M%Vu<Ewqlt9NUwm+07YvecVf4pacTnS7_?d<E
zkPH6$@`CJlO$5Et4+v`!S}ULQqSrB!BKZk<Z$-!Wxyr=f&0`Jwi>H=an6W&b$J>3p
z2|EV%HRGQX+8bY%G9hL{zehq3xyo(`7Ibo+>2Ze%W%Rob;w-6T1b<IY>g-mA!lK{s
zn2XlXrB-z%*HP4MKuS%KK@F%hq`{Y<B|4MAqnUJgr2Y$lbsxC96SiB&Yy3wF=p5H6
zEU!enOOTaM-Ib7@4mld^NZPN{jDR#yK?>!X0uwvF%xsYY0u#GVfP>mdX=$^$73d54
zesygYt`_roZSD6RM4`u9@aOEFgOF!#C||ot{3MQvb2TJ|hJ=J4R?|KY&O>@uR@t10
zvDFd(u6RBTgv@lS^esaRf2mRB<XZ6Ey=snc64QT_EbJONHrY_uv^V_~TyN@{u$#ie
z#^P-jIqaU-N2ZDlRSy5O77rEb7usM_h-Dih^SW}>X3S=`u_?-xsxO1a!7^rZe}VP~
zt8sN*ow4WK)j68maw(e!C>j8(m<c%Z$Z+f6Ql>U`gIA0tSo6eemdUYUwgG3w1k-N=
z_k}sUek4T}UY#*`G2h09N;CU9J6>5z)DP|`Z=#|Y5SO(LoPATpj<@Sbb|Bq26LE`@
zlIyCi`NS^pIa%rG(#D0(OFn+QQ9a`~qfgf>8$z-<HQ%Yfh)8hh7UkySlT?l$8zISE
zGjRIs(O}30B2fG1)+~_0J=fwoYvu!Wm)#p9Binu^K$<sB7c<;fJ9fxnQPk_uQ*CQ+
zN1w-#488nMFM#FD*Zwjy+srWU5%b}e7MjA(H$}Hy9x()4Q_qD(Gnx+X%X7Q+8Gr5y
z#bn3QJQ5J7qH?S^OtnSm+OiT5v_fuDBES9of_9&Xap`olw$bUJwg&b%bCX8y^%EQF
zmd=Ro#M}E21--TwA$9-RmqBD288_E{eH)dgn`Kxc+aTM_%q;__T>jn6Qll2P#hx>e
zhWC6ka>%dZXkRhOW1*F{sm^7AAC|V|Vb)m0yIa_?B)P(?g_%V>gFg!uVmQe8=Fgfp
zm@Iq<N=Xv>D{!b}B=Y78MG=1V*C67P{e}C-XW3ZGz;k>7M1r=RJ!%<Uu?A6baZmpe
zY8$#{Omc~P-Jg#&ZWMKTn(9ZYx-w*6T<3t=AylW02nk9aI<0n&m9>3v=Z@b}-)q=%
z#bEibf1ho+RM%7Qi7_(!-q{J>rXvb59m66*_icwB6G|a%jCJvUMf+@n4UOhjotZo4
zPlH8go_RZ&yuOz0Nc+%xTK|eDR8)nv-^qTg>`%2pO>umwNml!Mk(nbl*peY#<d`(d
z+~iOVxoCEWk+CNI7KIS9fJSrn-6zMU<8tR2;bRpQ^>2gPQy9Y>w^3_f0OAnqmYaPF
z#XW&o82uQdY~xlIZ#IeNv)_62=A-JJw-%qR^#kEmuO>IIv-qwYf|w2I;eWE9SY54i
zoPF>oHhkA}!EmdEikk&Sag%b5^QU*izH)yJh2EA}zD?%a+IBoSYT7QkgnX>GeC70T
zif<u_Z%9x<1_6602)~r|V{UW<&h)+{J18l_sBWjpu`xcqqKxr8cEll3JEGDQw0sqF
zocjEY`}3it&sx?Ak-LG!lRaFI(L>KRCXZL`!e2>Rzi&ER&qqEs+zi|iKDZe}qQ=#9
zq}O2D)-CQY;y7t%>bM#g_Z27@MkOY}ZdFQ&up_w^EV|3lfrHn6)s!EUHAW5R@8};6
z>2otN#}4GCXNW8Y?rW*}(nK6EZ1_PPRbifM0VaQCU?X-vg+2nGad@dF-*M`Nx$$gy
zzZV?J6!gIn{VVYlk6SgW{|w0&@x7m%$I}gfv#B7AoBSAOo?)`G6yrA=dB8sH&*@Tj
zafSK5xAkyQAe4FAD^dCR<k@7wZ>@@MOLa}h9<nP7%UuV8_X|zDt<aONP)BM-CYG1s
z((diYVqn?O991&^{qxr-qZ~5fs9%LScI>kx*s1$>_uLIDpQwAj#HHkPoZUAB3LpH;
zsNP(Ss-=E^Huv#+)*SL+6+a=Jdb`0uoh|<1erL$&H1LaigLnbLt(eV0YA5oq9THIs
zw_E$MUcYZosn%QVq%L*vE2tPN#`Vjx<(+Y+R9eB3tlNn4ljPFnzX1cxLLBOjk+mVO
z!dzEQ*ad3ahp?8Chv)7a&1F*Y+hHo{N@hWXz_R;Ob~OHh?Ezz~!JQRZezXSh;Bo)u
z%a@1AFqLSuMpxXm(n!GlE9wghKH+sj)NzvrSH78rg)Eg}-gzwVtQzwiT}vz~tC05w
zBnkWcQET$cRuJoTGoWwR8@9Lo>fHbGg3IhTA8GEsj3;e!>&>AHRCTLkaU#3Lpg*(K
zo|k=k&w|w4`op|D^5fK1L%rX6{o{V|Uq-77J{nGzS<>1|=*2f3Z5m4F%bnXzbQD7u
zmQD?twZ115VI#-S-q|g7i!Yiak`+b2;`lsxLT-ET(}Lu$+3>pz4RH99mZ|KES?Gv=
zwlERtr47LV>l0(`N|e!k;W}1UI?^ixr88ns9EE8(bA7iT<F~yG8@3lZCkEs|d7QH7
zb~{~Z`odb^GHlI+PesO*bW)hG#%(PR?lvCMG;Ct2-aV6HM$jMsIfuV9dMfSJ4g<k0
z?*J66`JCh;sZr+s4oR>B+g=7{AM_7O%jQpxz1i1pfG#&B#4jp2xlo|g*O%H&?n9&`
z(OZJ0!%XaIg7eQ}ps8yeQO4v!I_HWlnP$|lGPVcox%dfYmma`TSA=xo<#?@Y|57$_
zZwx*$&B=tjan5LDLZDcAq!Qz2JB$>az^z-_LI`fxa4y5z*Fge<ewgjIZ{ItBU4Jn}
ztGoIe1@m&!?IjWH+&Yl$&Y#y5qe;llw$#x<|NI$|mKKqv1dKG1#jgS*S3>Q+c6sz8
zQAV`OpYCWZ-WEds=u%-UvLYo8Du2E*9T4}zXLeS@Y@+z-h(udS%f5{L4hI8+rap8z
z$~C^_H)JZ@O7=U5AB}LZOcjMQ@Cg-v!9=5P*?`Y##{&Y`3p!a75L@k^fHZx&(WEfD
zT9^0wG8cI<H@9J}YP`|2XD^c8#Ezx<E29(Sx>I~1X0f1R<J{S^jx}=*!R#%z$ajI)
z7H?e8l1~We^Whd5NllUxhnfnQlCeWJHRefrybgturSfWO6J5qe!}zmik?u_z*+r$c
zn-pjtlO)+mG5aWcXQ*wHm1$B@sI7MHDdjk)Flbqo5~+f;U<8RaW*h7UfV4n=*ZAt2
zbm(5aN3vOv^0>@9;`W_Nj?0dX`zB%8S(VDn>b#eJ9BkXJKHtB`Jo2=L)3EmEW_$5q
z%NNw&Ddc<Hx;8MJyM9TVGWVQpSo4qI$25@!0#84smHs_vQ}EY=VPNyi!<nI$R$2`v
zEphx=%p#o8<9KdqZnd$putbbXOKTG>mrXG+4D63VqM<(z&l9eiS;9h%2pN;;o5XW&
zL%Its-)^6557XLs3PZPfpabqM<^`|Mp3o?Q<;4pLb@sT25TR_a4Z@{esxkdC3nlHV
z8uId+L9~s>KLb@{q;y(%E3Ks{!#kD-*%8qcDj{{%)kePCVQ>z<f1*kGQvCqJLEeRj
zi$JbY*RxdDA(ldGBLjm1n{RRNXFH>fKPcwHbUcPNW)}7#GasqP8JcWnO;8@0<C_cd
z@-BCY(DwM*lvy5#SS2x*t$*LCKRsDd*Mv$~42o!n5nk-quac*^J__S*W4`JyINZGe
zd{E6+?k%{RrF^`V;!U%&xv4eOIO9IK|MLlLgGM2bN^z4PszeDmNE%9hWKHTTL&vwS
zKZ~E|zMEbHwvb|9tHf6A)YN)`U8Y+m^EXXGa?8!r#s*94uQ*m}E@`+$c#jA*R&HHZ
zs4u{(kymw2y&L0Pj2{hZh#D8mLY)!@KE90QV!9`i`c{1mj|XqHsr_9z<rDzK8X~#f
z*2nF8()cO}!yodxtxDIqZ`e5@;4@R!YPgS62{|4wWpAvwXS(`rG@P#VWqKo0s7OfM
z{&u=kK4DiMVoKn>!OWZu-4$zr!-ik3&<Pz(wY6i)!bEj=u!QlCxFhIcdr>sw;_THn
z@{~cU)vO_BSl1FFKk2Hf@=`x>&8{y{*>-!h94}_t08h8m|0EvapjuL9tUlL2+<Q1O
zOhqt@PrRNgde{y9k>`{3Bcp*_TwH<p#M-c$_$Bw5K9}z|7*+S$rn`4<v4zUf`}b$&
zIUk!EjnTSVoa0|Ylm<}4YM?y-akK?}rX>H9Oi*JUIQL55D5`TvA9tw!HI%nyM?~zH
z&b_iGZ7!sGxE1LiHq3ztouqv_)8gu8aW?opS3LFj$wx?|)yFjoDAdx^^~PvZ6i6&;
zT&@oVdWq0&7bqp7OiUF!p3Rv3<=@K5!oE9~70%{R23f{YFSMv#1z8C@Q$!^<+OiC3
zaBD|@uJ_eA2%JuaVydrGVCp)h9xq36xhx2fku`FB&`7$&2?A^mXltLGoKaJ=pO~;e
zeB}7!qgE=j8k}$354KXHg>DN!f0TbyZmW;!dR19z`O-FDD{AVUZsy02Pyfze^*tnt
zn&aytha2JVm6^#Q^t`VgGDlZloIBjgZ^k4Sc7FhqW1U_XUmu^_ec?V6wS&+Z)`$^0
z`SK);Qov<?gS1e{?+5`#xtW=nT>6z(>*GzDzPStM(tD?fw1@ME+7Ra^CmGxB2nn@y
z*_ih?u7f)p07Rol?-r8Xdw16KvB^i12X_tU#$RAGgf@P|D8F%Irrl7fi#N)*r@cMj
zu<kvofFWHap0{Q-z!iJY78_o&^8^z{3TxH!4VP41uj9s@Q5UdOHRS$ig(2{ULK7-$
zF_UjK&?T^%YD6okMqc~_L8D@>z~4C)mGtk?9E>Jqk6CPoy)PyC?8|{Dhq|>!CMEfK
zJ>5p1l1{?Sw?lF02h2*f3beUxGQ~#67&g}~A=8c8l@GtZK3NV|U>AB&!Ej{7n$Dr3
z0^<Ls!8>J9&`B}s*8BP<?7lJpkS!EnXAQN6B#<|5+|U%w!`+bZ;G2MGB;?nAQ0by4
z{SY#`d&@}h^T`AB!H=m;xw_R-Tdd&|zxxj3jCp4B-o`>@PmgkW?5Z574R@Aay!Z^(
zl%Yp2+*f~O!bU@SOnCfNqf#It>1;&!fs(*PQEFih6stZLuL#b>=&$2?KKz}Rp|N#0
zUk7kFNO39v9iM@oEWb-_tnFB3C#>t!!^SGTl+`Fi2ZeT}!vrS0f|88P4?0lqsJ$aQ
zuh87N^X&ML*z4zu)@=n8*uceb#5?{~N4j~op+KqN;n5#_W21bDaC&+g32QU#EYWV-
z@85M+%c;lrl7Xu!cWZ0&+$)WV%>*>lgz0U8N`9n^i~s(d2nfzfaodX$O+-QqYyk!y
z&)U8T_Fbtkex7%E+w;-=mJtgE^`YKOjRQYV507!Dul5IKtdz#aO$yu%>Iw5Z#!_N0
zyf#?dNH%XK{t9QjG~qVZ;8h#bWSn@17IQPhxcW!F_EhPy(R&)v^zL!CVs4%>i`Vm=
z^zcZ>zzVPq+L{XXS`ppRQrGvb452HG?3c}Cze4R*sksAbo*cjIJK`=w>s_!n*Y9ea
znuWzY1TNAESnI<HjhVMJS}eP+)GgqBun_pP3fHtH@OMWSOfN69k&>?!d2(Gumv*l~
zvgg{{^3lwpI|9~NS`jjR9Ub!Py&Yd?UX|5AyF1l)N1`Tn{Ahc41KKL@Lu}~VkxpQC
z(FW&1><XB`zk2;3a&dY=do%$ewo<o<))Sz&0zGP#AplTNGxSPT^iPNYEs@g+39-o+
z)t1)>4L8c7Jnuo9HAzglz~kxoq_G&Ku+Y#>XtGYRbgKF~9ByrGL94p@<jMIW7?B0K
zb3Gr<jY^wmr;1^WoBHPj<S*{6*KzNxjb+@HDh>H|WzD7UgJgCPt)ILYb4kgQOb5CL
zgvTcBo_{S?{JG8B#{R%`oy*9VPJVF?Utv<vXHV6{q<&U0n5CtJ7D7lg*HuSh-ztt$
zipm^QPXwL%q;P&l|7ZpKLg%5rz68m8H{aN!Ke)a~hD?}<(^E$qo4hEEFJBX_>e4o%
zN^XUf#+Z**tfWn$Igxe$=>@Efx&M4~)i%H4Wkl5@;~46rwJO^7hMQOM0yM~UGjI2G
z4C2>DYgOO3$&9A2xOLc_AoLgKR#@m<pm;+Y8n$9bzwL$G$8t5ak0peD89H#k&3Ix8
zhg_;-pUSI3XVJ_}LeK&5J%}>6*AHE?(&1=EM#iJ9{wl8xH$%t{6WOTeh?ijh4r<D_
z&gz%n7_9HFn5T{g;S23;Ds+o%n5^-#5!ki-&XrSEKA1(jGk(qS(mutPG6JzjBM2;m
zD)K2ZUld)v#{8NZ--7fGZ4Izgi@e<x7$x!q;G{T^MKLHRs{?1F6a;pHFW4TG(IK~K
z*N_hg1|dO!UBq|x%WId@JyX4!#5+s1rmbBEiA4?X?SjEKLT?ZDV+A#7kxg}PR`(w~
zZRDV(uIUW4wq}Jk<$*raosYHbZv*jnSDMt6Uta_N){kmIhIaW}Y*^$61u%<2A{%xn
zatMX4a+5~0Ro($TKO3{}c7I9VweeDO(~5b!+{-`&Ksp#D$d}spA=yOe;_g4o%&mR;
zIVsieVARil5%@3AYgM?cLYam<n6fZqvyO)me$>t_F672hG@h*x{j@Uy(I<HM(xvjH
zwvVQ*m8=?*vD#1@$%i7;i%M!j6z{fvkIbl;3!@s=RY7Y%Hd38DYn`AFIG8mPw3=IP
z?tk=WrMw(Dnby;DPZY&zuoteG&UQcwd;Z@)B?e3ktsm_kmldB7%gV^qM$yfh(uw5I
zUL%k`V04OJ_kgoz`A;=B@8<v%uM8K%WQsBD54zU#t(Eq0IbQ{wujdyQiibmEICSa!
zt;~%9%h9)??^}#5EM2<G=#ScDZ#>>{5kaHn=TyZaHd*b53SLh(Opc9di!C1rL$Aq<
zTD&O$T1kmjkNlb&ed}Ps^Io}NQ8|UTsZCER<mqmP@4hzrXV|#k{yid--Kxp3krCs@
zVC{LZWxRU2eFkVMN(nk$oo!7YoSk{{Ubq14+su+<nd14rv^>2J@*IjN8~=7UX%-jN
z!^VfOmKdV4u6QCNBRBSacv$;!XnE%BM+KqGbmy4W-`m^hbac{oESnPG2_s60p9xmc
z3-b1@{r!CWJ63jfiZx0Ie3TOoyt59+Iw~qE%F4ctJqXXWcv-w~?ydwQ3(L2uDRFl8
z6~K~eMQ(0BLm#7h?y^en<hOJ>udSiG6MZ^x-N9w`!tO-O=bt~X$(fU2fTF}UI>4lK
z7u0^{4+va?h}O8hE3&T&z1zgPx#jhdMpdL}bW4gr9a*wI!6|xALmkC$m$T7WO$46A
zl3KYp=w*`lJbpU~aW**pGQeS*1EDf8h{a-c=6P5;nwV(dM~|*XAmA^&xa%NY1;~N|
zY-Il@|8Hb&X$blsC|d-F!K*oGF-642vY)y-JA*(3fZlI|6&Rw()YNRs3urUa_TJ|%
zE>L*>^ACec`aOEXVF9c~XZlg8H0N=sv}SC+ZCkGYT3)8iC#m580`OABee|@0t;+kl
z&5>ZVT7JQJ3h!S(J35jd?ekix{lF)!B_}JG#ktse3od>%C?q6wxVP8#*ueo3rQX=w
z1pW@d#}((;T8BsCdq2T70n2~>{&h!|DxLvH@O;Y4031igS+N#=|8tdq;GYkeM}NOO
zw=%6Fp9;UsEIQ)}@hwu)w#Pa;=fQp$KG3p{@9`Yd<&hCxR#rIx;uW;o+S*{l%PFA0
zC1BmB_z%SX61M)gZ(~L`q4S_gZxT~*m+1BnebtEKf(smg1^@Fcc&}fN9JOkO1xQYg
zAn!VlnpR{Qa<RwHe650nba3+PSB-yumCn<rvK}67(sFff_K2|1;L;Gm=T@n1FOq>L
zurfq#V6a$?dkj(CV`Ej)p+lpaFtgxpA!bZ!??ps7aooQ@-q|?;3<f$nK~Bz^oE%l$
zuf6yC@8!24HrdJJ;bEes?i)md)zu1jRhcvl3>cg<<<OVf*zU5h+~?yH6&F{*z2GC^
z<<N+b5Plz62&ab%sWdZ8Az2mdE@x&;0pQ83od#6Uxp{Dq6An$#l*GLz`yMfIw^m`g
z<l`?D@w9Usr$dD+ROTWh7+q=IX?Y0)gLgM80VAKY2czbzL`3K-=;-L&26lMmCst|Y
zX^8Blpcv7k3Y6b$dvVSidWEApDvJtQJl=Ipt}8phTOQi5u(Zs~Vlp?w$Xnrt-6PY5
z*;$a~ZvcLE?b`JGe3p2lc{^b3f`cCWIA#o`^rJ^<3^4%#bTff~Nb8Bm)Ym7Cj~lSo
zK;INE?UxHu9mGCJ7x&!=k`Vqo4PZao0XG!NGtG>ld!->vz-%E2Jui=Yf=OQB@R=EL
zmz7aOL?QVsrMgzHhxehpRiysYrxBr{`MAeI`5-qHQp>Y246s!usb|da*B6*DNb{(u
zsN{yWg^j~C0Wy-j!BRJCf`K~WDsS`SpDFvulu`FJ5*TLxR}!NBSI{j0n*D$8RmR06
z#Q22hLjWTmazI<`F>ZOF42F~a`1tLA-RV3VStU>s!NDgWAmHbxPjvpLk2c|WiAUK0
zT<EB%*?|FueMc>=H^R|^xfkJl!pp`sIx%7R&%nmKdk3xEs_ZPLe2swcDwT8J*<QT3
z)7wi8$H6e-tn6&8K0-$aNH;pFsydpQAdrT~{JFV#q`7%e`eb97=GwKzr6v0#>&IV8
zfOfPnYnCrlc*ZOmK*w^c>zPxXU0sUu^0G=w94suV@M3Tc{rZ*t-aSD<!H&+tt-Be}
zviR28n%B}kpev0ui{-*$uH^uF3zd`vX{eJVCsB5|+Tz|d1K{GIH~a*bL!DeXmns|l
zPuHPsnIj`#8WPIOsG?F#BYJRfh;QR=YC;5zB#7ZkOv4RI4TQ6nmJINHpg`p2rZrz;
zzrH#%lNd*C3|${eYIgy5J_{fhRT(v0^zhW>YG-F*`BAs4xg?Govp<+i7&tjI)99wU
zxgT}SC}>5#h6vw0nbvo@(l+|)YJYYrw=mtEog-zI`B54GGy;>Pw2UvaWqN~l5!R9H
zJ)owc(KlcbYboffaoJ5vQ#GfS1LTf#>jREPghdS@EiAmAK7FgHefI3xGLVJyQ4OxL
zqYz2a@vnlOz!@R>HApag58ZD5n-nw`*@p#6S;ZU?b!}~(cTP*Qlq)G1lYk8X^gGCI
z-P)LHQXtgF4WmcRNSCtYWJ6#tz`FM9S7gMsY|6_ng9yFKcc>Zm%W`smC@8G|xzZdg
z&*$goSymp%L$3i=aRnR?E&QDw{beYl;9=nQi~u$#q`KFk5IEG>NOhnP2@h<4O`Fuv
zaf*pmevCNT!o4K|w~Sd@w!KVEZ4#4yM*lRX05U9#IDzyAO(i_MJbJN4vykYBh<k%N
zad-2p>%8~&b-4=Lu~-~`@LyMmib^Lo7!{wne-_B5UVEl~|FF|8!XgdmyZL8e1NQeT
zJRpRB)Kinzoxwe4JXK$7YsQ7+?IBmmg*?SaiIrJ7IV@1w;f8rmV?hCGpMa_p6TyUK
z+X8JiY~PBsO4^C#AFtn&*6Mw4@gF`L{e=s#VAY1uTR%aACj@+F%KpUufBRR%p$$WM
z;eR%}^|$}d`nh`{d4@B4avK*O(>)64@kSHfl@58SY0a-GrO9#WETK-xQ;9s%n{@#J
zTa!1{Br<nndhRg1Vt944Z(ZSy$kfL+2SNfx{?n<s&1Cp9kv!4-w?o8*sN?OwZQ8%H
z!B@fi-}HaKtNoH8y6EYlNwfa?wZlX$r*WfCSCSA|!)Xb;m>_~@n-hs}09JBP=*2K9
zfv#WYv<vkzMa?#6+sNE29H)$?o~o)wyi@{JG@oUcU2nQ{wsLag$$>2_0@2K?ZtxJl
zye~iof^3Mwk%;`>qhCWdJ!voU^Ye$e)Y7Fg<)d*kH-w=Sd+Oos4W;{FHI5YN)kIO%
za<IJ;PAgtiae8vN0bB^&=6X}kK>t*HqSh6N`4KI~{>O+s&0I+FI6OQA8!OMHzD&X@
zc|AQn$d>coTD*Si7ETcd`)mXiTu8xVA_dlJV9F2n31HR56FrruRVeJU=d{KucCt6q
z)1&(OrG(*}|H1A?@dMxoRC#UN6n0uatuit(nI5lkiRCs<Nl3_p&w=b{Z?^@n8q{5k
zVZFznVI%KCukB?v<F<>fVN}`T%{giruy2qOUeukd<u%7b2w<|FH{xR91l-7gfPX5`
z{(SA?l+@Hzzy8inXo&FalWUu4luFF}5I;FNfoLfN3whExH^Zq$Uux=N#;TdtaN36+
zJ#B5QOiVJ3E6{~)@ZL=ka>=SynvJ%)Y8v@@c)05EYr@T4SP)f`g`-g@6L0#>q4E#j
z{e69KFt2!xWOx*U*>tzFTZJ2EK2t(6`!X;P6cx%T4_Vpu^)*r+j|Gv1Ix|8MbPZ2V
zN<y=kziP#D-=@&n-96S2o)!V?7p!G$L`2%ARHa6vkLL)LdJCK&9#^ica2pwYs8_cC
z5EK-&sy<>^Y6c!vK=K))F)B4{3n68H^ZNDNYz?eYMA9-cdK|se*jEHM0F}fzD9@**
z2fux*%0fPXDC&QLr(c82#4ZXKL%UrcNu_em7Vd!5o8P~k?1Q%g0j*vDV&e&n2!&WK
z;Ma`RxGeaAsu+UW#(uo7XSEmMZrDPN7Z}uR3QYO9?EQYmO4~LBu9Be~w1cJQ?La;>
zs%!#Kjg(zWc0vEkr$*mH%n$`Rd7S5Q-A1Fx^r`614^uXg_E_#=tr+{|$c{Z5W~BtP
z8JvYgaeW>Pa_AUMm9m5CznlKad&Oj7L`V}`D?_LlxcF@jnThBF5$&qHx+om(!M#Mk
z!p3~&g}TO&(JVB%@^~*=ctC4*mR4fl0J_hjFlf~?<#iuQm3G1$1Gurw|J2Wu%rkMb
zs@}r02!gX=)I0UhiWh87nS{RHS2rvn(*$hk(>B|MpaNu=<~qa=<yORU>SsN`;O9P|
z<hP64uoRwGf{xEnv9Uk6#|es@7Sk~`_!JIviF!9EK9ihj31fV-z1aJ;1q(rAfY4^F
zhJcrdir3$kI{8>GPVoVNtR{fzLKcpi${X-3uWVlIj+eVG*{$8@+dY`cN^*saLnn>#
z{)}e$W+|=bY$OCr$Fgg4F^@%3zMVzmEXI_Rg<IBcvTGH<Kt}mD9&IYH2AI`R=Pt{x
zqi)~j?idw5bLI@nhN1iU@<5y5R47O6LIRIz3y?}3W`5z}(FM&m<st74oBUF0A+?o|
zPFaLDuolZbvuN9`{AF%~YPw|YLe5+|Fy%LSJtq733(#uHGqz!V0`41rI|U48hqWWr
z-$Y5+sr0Wy>kx5s&E{UTGYT;uLDyg@Ck7y2Z>&M>b8Db;sCPgsX($G$KHW(|Fk*hS
z;A4lt5o`^jn@5PQfE09aOnppEXntjd{Z1a-n*-F3A3vZ|FCTW7heyp}C=a24rQ9U6
zcgzMmRFn;yRzc20z1MbLy##A-lA!Zr@oWVnjL%i51neAbj`sev+(2wMV9*RlfTH7E
zutt?~TMG26l(F0(v40m5(np4MUj?6Bn1?^-zx%h&;W>!4kW#^Iklo-<ql-WkCC6vP
zUc%fcFs6$Hn~KznOukxU6lrN~p-JNYjS!2~hGqsH#vejbwsPzKd0+!aEq~+de(173
zE@c0JfL!I_pI2dPz!Js4;6piy9V})THF&kTojrGMuDa2gdVdg}sEVz^R0C98(d^nl
zFqee+%;@)yT7+L%Sg&rkV%P{B`^=|cK)C$PDwio`n_?3nWT&D&dmphSF!40}JyAmd
z%-$d&>4O;t-AZ}WfgCjwLz{t|JET{rs3HklfSp|4!F2k~XYW@K3G?h#IGZ7`R_aZt
z+OSHCky7(1uN6+JMBHvcW}Zp1y_gY>)lf)@>Yf9#@_{f+<VL$El+bwFB+PtA@0tw&
zl~$w2=5L(oroIwZij40FHlK&zTdN<d)--%)lYif{5=+KmP~GD(3_8~GH_z{H2ToUo
zKF`W@`291Gc$qmn_g!lGz_p7+w{wh*PM7nGEgIDyGfNZ5QKHnD6yttFU)#6_DNWY$
z?b{+d^s38%VWFpw3MjBXN>=zIf#oF$+L98mAH6@beFv=eNF2*6!wS^FfYD|!&)Qye
za`x3tNd{so`&?OBRiI@C{+W}b-T~%NY~?H&)fn*ghAV!j@$ST#5#&-Y?aEuv<z}aV
zBOuyMBSnpto{MiJvs6Il{q6lPm$^9%Yc=b%jM$J~pTQ(UM<oy<SGBD;>c1y!>i9CZ
z|AmsnsehBP=$fX32yCrg8>r=1%}zS%+P#N=EaI%Bm&sAIyxg(0?=&x#S3Xa+H)iLx
z>Y-yb*Qs;=@$s3S<iT;DV@wlYahdZ>3k9DAeCBf56rM@;xeJAN#2p*(OeFkYtN$wb
z9#ko(*mv0gb+s#1Jk^t$;0iQE!@|O3J>{FWjPuxai8$#_4<3TA!065##gy-^Ar(~;
zuX%`F>u3WaUu$sepk7o4WrLY~09KcPheE_NoQ(pGoY2m%(@ZW(i{{HJJ!-lqna4s#
zKP#_d$ZawXrVurhPuZp*^-r9iYZ5gDN9)7#%6d)P{N|RHlRvGrL+b#$rfWVduY5)8
z8yMfPKc9HO@lid5XOhudv8ju>eZcJDk}|Rx5`__6f+AqVHm+;St@H6|a|r3s&~5Ns
zZ4SLvI5AdXt8MQDPHY%R9@Eq3ynFZY<F`Xa`c*|?p{w@wB+(_^+m#hI;R6|s2g~`1
zv<lbp@W|(c;Fc?<=U9?14XtQ|EyuEu10zGlR#vqn@{Gfa4skyE{mw<{4=rI-3QKhD
zV0J)7??AyF)6?QmDdV*dEz{vq_X*e7Kg%wx(TfXRa!hRxM|E)4Z+=ZiuiAp4a9J!9
z8Id($Go3$#0zj`$+dmQfWU!@97(NG#d3%g*5q)$O5P(=#AW}Z(G;{~tmKW)};I8V^
z5##PE4cyg5=76>rYv2iKY4i)oX5a=@KGfKd{leV4$ME2r-q+8cKPblY>K0{m_oEn(
zbNuDyvAr2jqLqL{(L<@80a^h5$xP#y>Uo;15TF_T;Ro_)&v~SQt#ylCQIlxrO&IA`
zNfYMX&<`e4#!kVWk7{OSm^A|SVgsPDeKR9=gi#GeCe(BT#sD<3sMdtApC{E|?fW|v
z%Vnt7WMY)q%dMd9*jqFW{!bOpW5Z@dCgewUy0&3{WJz~#V#&s~LN~*{-q6o@LcjK+
z#d50FHQ(-od^8&yeZ1XxwOW%xo{pC;y|(sX{yTxpsxXyUMyfgm73$7}2mL`_?ONb<
zf-nlB6>pRXyr_Olo#OAW=h!sf^ch&FVz`aD5FGYNz=2S`R$k3(^6jlm7$rrleus^U
zDo^5FLv8T)4flJ~2WZ*zal&Jyi|)vdVEu*V**3J0@f}C%6)5luBhgFR+bamo7PGfx
zyURjSs9>m!8tb8G(JT2PNTEQq<jBUv)Z%enHl|>WEBEXYGinaosW`wQGz)GUz8ej@
zTfb5sp#H$TfPL{D;8smg29I<Rz{lEDJfOM3tX!^Ucqb=LHL@sQr{nkH%1R<SXmMD7
z%47~3-M^sLroO*9w_WK>KAqHmE<iJ>)NrI)c|IF`dlMEm`KuDOdnDTP-KoW#!zy@S
zY&3<`|In8z{pF31PUTEUMLdg!x;mU4xAvm`F5R*>jzV#+O||A~WCI($5tcnpz4Ci0
z=a`Buzen5w)MO3#hWyJs@F*{Brq2BO8U(B0K(*>-8<^k5&mF)E8Vr5KbJCL#Hjt7C
zOz3C@l4{_2c%UbS>LasHVBfbZP|c9J+K^mzQY3c%<HJ}GhOM>Vd#4iXx%%_>@87^)
zx3v_OJC<)}Q?Ke>NbFuCc)Hvoz}W5J?f8RyMA9hH&HQ~7?^a2QV;CG22PrgV)Ii)6
zgEK;vy16z9OK{stZ>t6jw+j+P)D~hC91!Fe&u^dbWliIGSx8CFW{)IsvY_*q7A(9B
zcK4zontM+_tzp?JweP*bA0s8V-Fh4ZRHxU3r0;3P9Zbz<JhZ?lzq9@exZC8INAuf{
zf^-XV=YXQ1ZXL-8wv13jYS)<gXb7MYv-UQ+(sk+cZjs;1?@8hk&cU;}@EQXcLM92j
z%ER=0`5}2VqNdj5MMwz6&E6HnZEEVdr%gjAu+af*QZtnWHarfK^}6~^a6TGcy<HVI
z;9^&tb~-tG0pN+eadcH~6|UO!Hursvo7qC~ZD6fbKBum|*7G3{TdgBqr-0?C#J}9t
z2SbU9mbSPe@qw*{snV@mw{jD8>$GX@b<=^km|r{L23$<=4qF!ZtGW*3t%h-sl<LM~
zRW+XAy9tO{*(Nb^&6xf?vn-Wzl55v`N=%=)wpUp7ewjW?l>yAW`&K=VY`OI-73bQz
zl0~-lu%Kfxw~sPfTPjy8d{q&=07GjlUxFbMDy|h~kvSVZQt%4<0*=?^m6}z&;cp6{
z3^I87G_AsWn`g?$*B8hTnFZ**-R4`yTPwreEkmUU*i_*pB|rDAr8S%RS+w&SPF{0C
zF~7*nGvSS<<}4RimOvnU*e#<BpUd09m+kfIJ)G6mQA3S}HwtkDhpw^@lsvA-FYo1Q
z&mMXG>3}%r+y^1IxKAL4*{nu6jPk)&c4%;L$)D#3(yZ#AtD!=!uoeJ42z&JTXlAeP
z&Q4ByTm33!w|iHL>ejvBTw-rG3rm34g(aMG_;~c3jk;(e*jAk<4Q2;7EA5olGgLyz
zS->~@VQ0yGpii}w4->=d5V8-T4Kz*?pU<wTshG)PK{|7j7Wr^&XX|b4j~_a|T<_sF
z>L-#n{*;oE+S}Xn0nitW$N0EnO-~`Xp>UEQMa<VrS>|@-Jb1K&g5b2=4a!=`Z7|`X
zDPcI{dG(-Q?t-LITt(s9RFiRC<r6k?(7=RL-gA^D4f8qAu3a=RYL1PH)HZSM46dJt
z4Z#5QPAt$eM&=#)2V#2uXJ1|cKGt$qdLUQB5;n<$2SQL}Ie_>Ri-xhUW2>33wFXnT
zlH61&j|FE(SWmN-wORy~Gb_{~3RZ)pzFgHXgEiE6qSHO>k0AykyZcGX*BhVit3T>_
z?+?8*0N%VI>t>mZ5{3^PwKIv2p*ofe-vI;6_wV2L9m8q7sId#o(`WIs99|v?20;t%
z`I5T5(RV<{C*ibGIs!*z1@%0=io8FBC!T-j<rc<vE@qae8(L==KDuj8du&%*Pa*2{
zJn-VxavFcgbjh3spBJ}aOA>w?vxqqo%@mJm0{iMhj$|Ph3#fwlEIPmiHu5RGniN0#
z1;{J!mM@f{dS*y<@sas#5U$Le8-yn_M=Qq4E>{PuU@0Fgdklws(4`j?tkx~FI4I`_
zc_S>}xJrH~AyVSAPl$<DuL>U8?=Ol`0eSKX<}_53RtwZu$?yFnvy6s%Th3q~R%kGP
zr?U8{BjNQ4=k)BCu9qT5xcsAJ22LpDq4kWz6&+7Y5?-alp_F^9urpQs6fACf^U2gn
zYo0HmY6(dAFhz`s(MegnT>~}=62=mnEuh$lOG>iy774w@9TO6vX;IF~G-o;}!^tPF
zqH;Q)=m@UzoMT@FEEQg&H63X@ex6y|LMWyDrx$QR;Scj);ZpsJ#58u^PJB>W-_87<
ze2(nqO^h*`bGy-?GoEEcrl~p;Dn>XmXjKhChZ0m|G(sJz2?;g^Ts#(Vw1Oeg`PWmP
z48wKD*&Gf8D1DA~luf|uc~1%<0yegpaiN)t6VEuU=FxU4aliWJ`@E=rIPTJszJp?C
z-b_Rt4L*6VF>gC0A2KsBoxqs`{4r=@T0t>4*cqApd$p`vUP}mCI`gHa^`S5pA2+Ib
zouP!5%@>LIM~VE&a~lxE+0zq9coB(bl={ao@Ag4dD4c^~cowT=$ar|{{h4V6hbAX9
z{)v6WCOA@&LYIW`5{OFVy~e=m27BAU&=82@x+Nyk#>P|d{u^Ue++#@j81OQjwU2@6
z1ag^M+(zRN8DwQ;btXA~d466iQ=W8x6@#LGos4Ey!LoB#hl5D=ChPXHp~wh>urTb4
z{)jsZb4$`%JP&ODfp5Ndbd}2YCRgFW*ns%|5&EhKjbO3+_cd*^F_?c~sPA<7aidVr
zPzpHURGI<lLH{T8BmetN)9;$P%@Vi{a<$OX(h`<SknKjb*8{l|HzZOWeu}sGZDikz
z`mWG^Ug>3~Hn!oNtbapj5zJs*swcT(ICe%O>0B10xacKZ<N7<N<-$tPNkv)AYCv$;
znHw}TDX<jdJz8J#wJw$S188oLa&pq|Uq9R5GuTjAX;}HvbyJs-ck|^?&n`Dy9FXMV
z<g~T987ZT#-WSd8jOBvXIs+4vm5Am}aRz<H3*6_enVFec`RQa&81eS)U#t;a@iz2U
zakQ4%>BaL=z!QOvVun;OUEzoA{Ix*cQf!S&HgxSU*U5Df`f%?a;W9bdxcP(<$bG%N
zYVZpfac==?b9M7~1_sdD#9@ha_|WEq3bVK(oJKTl^{p<zyv}#;LpZ7V&5sX78~%Y2
zR-?EKm8l8^`T2#}*wja^-!La7V9Qpf)~3)deDzAx<=+T<!QWkC7TwJQIk_kASG9MV
zrF5l}gh{iKpF*&!L5YbgGc%U~?u(VqFD+5uHc+z-dQBZ1T34_dy7c9d+3af)M)}(6
zYGHuV_esOU8lqxi^5AMba@fCKztS8eg5(;1ru$nFrQAiROHpl@>})v$RzzO88L3)<
zPB5;S#B7X%0PuLvUyO;tVaDsg2jAV8%3OU<Q5FKIR@hrX<9ZK*+#*3?VR-{*H@6xj
zBbTV?KiHad9H<Uo6C%!@mABy&$EtxRyZflQI1V&63}t8i^~*Bz<J_-bth9mI+2DKl
z0`+Wqrr0VKcc)b`-zARH(vWjl#6U|L$_F|9t%Ux`&e+Ns-!?Xjja}^mokE}ekb}-w
zulC~Na;mGz2{>`D`{+(Y^d24(SPJ<0oq_i3!6s}jGBR)259j8V5SMIjf|)-`=jbSe
z;#L+0V>Mi2(2x)ZQZU9_xMz3MkBA7{+>AJ>uC0|LkWP%4WO;aGr}HBcgOM^HCVZmR
zdy}1vE?D|(CT`q@q-<?HXT`|M%gMggmVWdM%SNf9;z+=`**et}hens-u31eOPyr4<
zIW;vYDXA_-rj^r2w^=sCWPN>I{T5n$mJF`>akY(sL~S-)R!&Y!TK!iS8~hA!HQJ06
z3y0bNZ83}g{u=TB^}iB2YdO2Rx<H7pOWjUuTW}BV@rpzy`8)t|`pMg<C^Lj6X%<%_
z9B_(@Q&Wwd{ZCCA8&76$z-2!g^0m?F8Qjg^q}rzb{Bh1>aaMgTwbVEF_;DT#4BX>M
zlZ91D)NAXhVh1DQyoaY3>B|B@JXJI0uL9j==1Y65>1+mMOM|`^8t_UA3OM91z|aYa
ze2zrAp-$c1wt>6izI%U?io)~PkCMRPU;=Cr{1WvV<TenDjx8R4iO$LS9v2r1y*1p(
zW;r`P{_yA+$_ARn>CGneyPb_G((BGfBitI6q-~KEwgMbl9FOYaqoO=cj+Pb|Ly3r9
z&(}YISJE{B)*Qp4#&+*xdD-9X_DX<ryr#eLm}fKO3$kh;-FI`0n}Umro811cj@-yr
ze$B+lh-1y+scL4nwzdMYg3D`!z-Gfbt@P^H*xlyP>$r7)y}GtKfhWJZx_aFCi3@SK
zZT4Iyn2Wq2i(UzWSL2N_#C&U!$;L3?cs$NNZEStjPQQ{$MZkJPeGC;6lD$yDzJx}R
zgj0`k&)vj5pP#3U3<i;uq3~HUGBR#YgN;h#^QH7sZg@$B%^)<gUt!7R4i<ZT4J2{q
z7G_KhbFfGq9^%WoHg|W6-??*wC9O;Fl`aj*;6+1ihyVYu_ukQ5|NsARduYo@WJ_L1
zQ6wTOD~XIqR0vs7l&zt%GhV3dy_Kx8T6U7XLN=kYH^1A{`}4WZ_d36GUFUqy`F(%a
z_x#TFIiG*>HeRpi>oM;4+q!SrBF}d6BnQvvMW`-`{rH@kD-B0zayEFMUSyAtdb<B2
z;moiZ5k&sL1!ZM%=cQ*<IRqWHZUi2BhC^Y{wSYSw7@(n}OCNQ^#KQinr{yc;b82eR
zAkf!-X&A^JJhf!6JAu#?1s)=}V=F6O&2;}0$SbLd5GSIE*7dnQdQ`Vqqn_NLYD>g*
zoPTkRGr^QIRz^BhS*hQipm>=RZrq5br0j|7?(I!cRx#cRj+r<<z45sd^~Ab&`}SEm
zd5~RQ&l>VU5~Xvs!_hH4Oq-U8DfnMG5PhZnRkdxS)AqYQ?8Xf@)a^Szj61?r6sL8e
zb${jwyq}JaGl5qL+Sdb6%|Ce^?`Y{Amh*}`^N)^(lD8YzH^s)qaU4GU&mW~_a&dB&
z%zr^uC#~hiP232sqV=-%jfZ)&HiCn0>pZWdw02KSuygd=Yec2{M`RUNWDz^%Z1`}8
z$-f9=>)W?4+WvcP_J3<a_P^lxVxYF@yY~F4Y=5_I-^HTQb9QsDuYVS_>=eapKu~i7
zOI*L2(nL_wq6QWR7eG?BaE7>joeYIm{}vc)@{GU3HOe4%yD?e4O$t*Q%&augU{3Ga
zvUxLCAK5!B^bY!vKkx*rAi5cP=DCi0UDflK9Kp+-ahO5AY}60+4Bazi2ccqYHdj`+
z|40abEIMJ{re--P>bZbH4*0ezZ{t|1-l^4z9Aal)W=>i1&CR_B+{jxI;tj<1Cts5V
zdh)cd&me6X){VZuD#-rdLBsRC9Wj${FC(*4_gVSvpC29+m=h%mO<vB5%X^!Vf$nY=
zZw%Z>QA<)qhcYue`v+OZ$i1Z=Edj*)t0Ac#TNBX9D%uKRm!BX#pe_a7`JCXHKRu}|
zeAR_LSFS-OsiQMSo$@9zF%gtch0B7va|(ty{q6pooiK-~X;M;B;C^k$tHWKz#Z3?!
zcl>Hh$rem_(8`qL46c_=Q$l7E{jC#_H=+FkYmfWG7EG!1W0O_zcy0@LQqN)RWUp|`
zyrkeMiyx<!xqw0T4-Y3@JXTI>CUadPNS%hZ6n^6|kf@tBZ6bC{2oQ~FjGmu*1?eKX
z&Wf@;)>r<!DsN76{O2fT{#{H=5vYJLStDH3ZURgPX|~S^47z;hOVOpJ`AOUiInB)(
zw8~0KjkJ|J5-&zQT;in{#xTDe`U>l}6X)1D&dJI~2;Vtpn^zftH5NotCqe2cmXGq(
zFyA@IlJm;$-Mia_*deas<*mLERixCKQd%|Qt?buNWA=UK^^)oRq3=-u&{BR(&dj7^
zbYX*^K@Hxehb!h=d2(p$yg=0V(yUrX=vN6Dw$&ui<p$&tB%cE;OX7bYg5~VDE{6ZY
zMgb`ezlIgCN4pQ6kXx8t`1Iw=7b4Rg>=az<m9{&u>Vx@#`SBWFT96#x1a|Q+Mp9<k
zUQoj#AFPSs+cm5kd_+akuptsNfsRmfqG#x0GQU?*)skuGS?QCXpI_jKpU^qovq19&
z2n7M{*`<d@uyVB9A?O+x{WOQaUEk+St8g;#wJ!o`XAH{sj-~ZKrt<55r&dbMhj5x&
zn#wEAm=fikBES2@%A-b9yG{V2+`h)fFMZjsT)x6}^?eq90blDktQ+3->V~r6S(+KT
z6IPn(I$E!|2Oxs*|InPF$H%0@sLHW!om&akk~5$p;F1Su2NZSw195!kL%LsO7=v?D
z8{T#OL7ebS2Y1m6ew`IKbSDK61Sk>5UT+~U2^qsF#Q87&mhq&~JePa@-&g>_uiPK+
zX<|G|-YU-qv@TFL^>|{U7peNggN+;}UKrcle-;dMY?T8D=mYvs)F^)!&g$CjLbOAj
z!q%ppjH36;d=3#a$?nE@U%5!9qF`T#%pF*qQY(E#V?={fEq9V685e;{tbpgqJgL5|
z!r})Y07S`p<5d-85L{eOC7?5NFD1_WejGUD8f}eq)i@8aq&OJ&9B)tT%g`-6J-IUk
zWmNz;EHl`0z$b_AyvdtbzTXLK8^z`)pwOMwm)&;IPR0DJWApX&#PN}HfAmcm91BKB
z^dF07pbee_!!!d$lT#Q}27G!&qE+t>Bb%Y`s65w#KPL5X-7xETuf98XWCyY$sJByA
z9v(hh^GYZK=L{)^8MsmS^5QJ&8G5~6I9V*sZ`oC7<B*J+xlM@I;#dttrQ|cq9&X-Y
z)_1g;$h)tJ<4-=5pd1kt{oIU%mL@+J(*&?{$Q1shYZLoIE3fI?ul$K4MY!u_pnGg4
z`#Z^eF1=zrABEo(d-gO3$(<k{U{jCbVfsBbR*0Vke0MJY#q;OPA1yKL4Ttn;tDeV*
zy2xc%>89ja=Xxlh=mEp`uVr~R*zj!n`wA@j=(J?y51rjDX==`uJhXgu_`71Zgz4;9
zd$aaxek4H;FU+=a?4{(z96R$0Mo5D|5<g-%RSYzAik3?}mM37D7$LFq&flLB+j;%B
zwq=`gKK+Xg%_lT1AOb)ABaEWda^T2}0Sm!r_yVZNEu-7=52gvW+FNdQ4j^FLt;~;{
z;rCf5Klg9mLoayVG$B47Vihd~Zkt~X!>w-z5!KAHb#eOWebi`u!5OImw8Z3W#a<{m
zQi7u}Y9W(r_}R$dUHLMCF60}s5+()<EYJ~9m%01s*M%*VTzB%4w(L4szS5kmn&}76
z8rG1)#Js|GMGxmp&A8X`X<Uj^mZ^S@6yQ9*w`B^%X}1(Q+|$Av*i*^Kc>KoWnT{C@
z$n5dju<nC%zrGGj;tyTu6b|Vv%dLKL+u?l=KPP7z$a_V@-uqV&B5PIv8&BVfd$Nb=
z=v7DkLsCBZd!UPYKiZ}=oU9!h*$V9t9+v4C9&)aEy9R~q!sf0zJMt^c;*HoOK(-ps
zb?&$j6k8t}5^}^zZ+Vk2dA#NULjlvN+mX&JkEzahmF%y^42$HG2HA{f?B#~|b+<BM
z=5H7tn31VaoQMU(m(LGl*?3P?>^|;ul$qrgIGlw87NCtBaNVh2XV$t4eomW}d}axh
zh&)I2{p;?I=O-i-JCyV1A-pk4_b!jgdgAy!Q^4C$Xg-po&~c{Ks7+};koUsoP3t~<
z>r*5if~^60HLQz+`~X*O)&1Z=o~e&X7FE*RM5=%I33gen{JoAq0I|$9=n~W#6IDLn
z4_*o)1X=h0{?v1x?{77VsGbOn1@$#jHrl_gAafY1gLZ&w1N{@ys;jkaMMXs~1ZvoP
zMOkG+e8m=wM_b;|ENUgx3_$UbTs+Qm2o*K3_{xc+T<?aQ?By@gXqJRr!od@FG?rh|
z&G9@KHOm2;J|+2&3RN#C)!4lc{2{xXn>KwhrTS`f#Z%R7{tQP}CvcNNPL7YKl=>m4
znd#J?{{A?<au#)}<xR)Dr$(nYJfvcp+Ogf@1;(YAdOv%%&GhOWvP#l(-BkAV!+-Ej
zf@x+kXtlpt&&3HPk@wa%-XZbc4<F7NcHkn?@7=&Z-|@RWSJ|}ccV)rD$Dx?y<v87_
z*_3llR6iNJxAHxXa&7w3S?GxtPOVoBeaE}`%@2QsX3Sw#^LjX(v(6B_5LQ|KrZm4V
z|0VQU+1zT0&-*_chAE59ON&WA*|2dP)jm5PkgNemerd_PZ&={ig@UQP;GuJ@-b00;
z<v$O5fBs~C`XPG;Dh?Q3^BCM~GJp6<5q#;v1?nZO%B4#}{#|Lh$4q|YSuuX&uhTo1
zlksIHbrLd@r=3CmZv0pYU@dji!VG0fj4{7kI|duPZExK{_f{kgG_)z7nN~v)M~w>V
z64pnEtV)EQjQDztl;EkVitLvo#-?UJu-dxwz_EM3b!<{l)Br3pHZP=q$!G8u#RnIp
ziFk@okkr1nF-0&^yVN!V5z@Pr(}p5#?7o5;K{l})_EJ)^)*SVYS9*2O=+K*S1pxF$
z4!eVJcwWuBEs^rI&tOwuyP}x!nGpHD=OIR5@r>7FL~$uyM*M}a<g4%4S94Y{fL+9P
z^fKrL(DbvTt)GjN0iT}t<YqhPW!#YHXJr>ONznXpaz<p7k0YGhmKR1cnlu9JJq2CK
zQ^Rq+4g+85Y!nahDPtO;>wDokdSufjFcfE8&Ce+bWfu-M*En8u!JR@Y$o_X;uMf15
z@;rVnJ0=7#XkIvM?cWe<NZoFf{o=v+BSt@#r+cyvv}*ZR;53bJoRA;8`FSUlWcFZR
z0!;~xBJ_7ojOS4p1u_r|w3TZ34iSkEqpULriuzElB$J7zM$^sA;*(xRa||N3=ljV8
zqqv9k7Jef{Wf;foKqRaBGw7Q74KB4_cxj=-GReT@uL{p9DQp0Io}5q{YoeU|btr&n
zf_EA&@-z(zco>MNSD70vMcyfa<?}`bh$m4@1nG4=*>-EJE!zQS6+xA`eH7(HcSdni
z{vbhETk#)|D0%F0_iD+FC$jCdazlIk7>nO?cqIs<qCHo9kwp{Gdhx<9?q0GWN=%er
z0UMr84RCCbAC_vf4v}~@)M2Z3L^C~9%vT|(GMFzTcbcW)gen=ED#EK{<k_=lsNNOJ
zPGd?5Dg%6m&wPA>+}geu3hKH$mug?obuXzp#?s5YK6Af;X5ZfjT0wI`hR+|J1Dx{Q
zNf#ifxl6KFLmQd_sN#BIC?tvxELa)eFXaD;)V2<p4w_zmu2ox20*jM#{7=+L%Dgyc
z=0ghVf4ve$8dA0D+s<a?>_XMKhm`pd5>ay;v88m{)-s(d#J<<x-21Fz;loE#Z%+Wh
zChZ}ieObh{A}J-Mu8aLOGL#|x$(LWqN!y-$oINXheb^ntD_h7aY9@8D@+fYgkLCQR
zZs_HW<2NGPtaSo4AO%*c5n7oS%3G@Zm&%BfoFZ2ludy_`Qfkkc*a-f>ILIJ>X*S~0
z`PpPZJxt^&BB&wJD>ZtekLW56QmPRn*2es&7<QM1n#&<%MSt@-|0pq@7PNTBF&GPV
zMR#{p1lj13+Kbq2H+v`S?T#+9?rnEt7I>b@T5{B!F@&U^+^48P48Jh{dhGhAP4mqf
z^uw1aE`cs-HtO627_0WemMWdAZ_dh;?DQC#Ce^Y0hOA<Z?v8DE{eNe>b8p&zY-ms$
zzH!T3_=Lrx{76GmOxPDgi3#^6?9wFfZ%$zIvY(7ueTa>ZHLG)(%&hm4QmasLOk=UE
zJV*NuQlo_(ua^}v9p9erZ7C~Wo_WPDw4DSRJiqB^p4A(Uw}lwFyHG7kMZJFAYfgwP
zkJD|W##tGy6^HCToDbR}RVM2E^_<$6OP6PO$#y6vKt1)c6>c2CrobP39|wMZe1w9x
zj#h!ap6}Bet26d!;ok0Ic?nU|Wt~3#69(naQDqp9q0gZEQ|C#t4(Tcl3`BE%QFsyx
z9Z=y$cEP^BHRzrbv!R-Ucr$|{+}Xz4HeB6ecv3vawE5c&f7u-%FYQs(i`e`!IL`kd
zP=Oe32EpYN3gGOS7ChY%J9UN2SOu(WWVm(ye<Z_q=Q{47<<$-hc*>(&a0>mHDN%WJ
zP!eKS<?HrnoTpgbH*eogOjfEqaJc2vmcW91)UUV3h+}mA@^I@anp<JvNd>m!%<Sy!
zlM|>xM`+`&qVI%W@pxwnCkJLNoBoMLXHvIMQ}_~|2_^z@R^?+VFm0FOmhVP)_%1FO
z{-)eLc`@^Oa<FY9(tPVt5*URVmCDT&6qwHEK?NJ56c>%W3r~g>yPprXh9mU|(jLS4
z+wMd5w$=005caja`PxWLBE_pxz4c&t-eff0Szz~eyz(Y}pKF%0P5#v4<S{M>Mjebd
z2kWSPrRNKdPhQrich8`gpT-4iEQB7Nw^AC&-uHuW(E79erjcDnWlSoxGwo)1i(9-x
z5O<*y-kMhx8pQ=@WPZ8%;F7wcBg9v->&&ndrmfRxzJ=XfUcv8P@aKS$3lU;z{G^?k
zcf1;@TfYG_nPR6qbjaNNysx8CXzHXpXL$KobMHid)j}3&VmVagp2Yy=C4d95+Hr+l
zfq{WIBdYIbNYk2At#5rwSu8+X$^Nz6C^j49(Vfc|P+Aq4G*U08It;&o7UTb7()AR=
zQy5=0P{bA|@_(BgM%oILm1-XYT&JKd6rcPmK<cGjMeWCgV-A=`-M-+MQGdFrcVld9
zY!GxAkB=;XHN};22@3D6Ter5#5yIp@oxE2P(dTX2X?}B$`*n<$sgYNbYVxzV3nmm1
zFoede+?HJedn*mTfrZmhq4_htE7=%FzYL*<u|Q*a6;bqH<;1x}pj17%$w}vGYuv=G
zw}(WvKdIin{klMFIHT&7zozxdl3lBCodlmoYDkXH=u^<JbQv$WF5<;K7fQb>GfB*$
zU;6twGs1ATvI?;)iWhR27o}}$>y^dR_%FN&;Cn?CW57mxROfl_VVhW}UWd2|<fim4
zyMc1$tn|Z_EW^Qa@oWt8?Lzqo8!mhT{ch@Lob|L+L3)GD4(amRNilE<tI2so3o7qm
z9xeaLt!U;o?49vHQtye^R|3=@H&8&gCO}NiKA%RS<7x7v{*6-vCF&KPV9Lh~QNgZJ
zySmj+KYDX20NvKI{&Fl=`(z4n>-JP?>N)j~jio7hTD<v$`Xu&MdhkUrq7!L#@IT6a
zvf|BZDV-Ph5)_QUZZL>O^MY;#`rStlAD*`P#cszu*)KJ*0eeB-)AS}qpmfZd;FYD#
z1}f;I+GBE+TEbt!pev#3)p__h=trf|>&vnV=Eyh6X^7+(*GX<kN=nMyXHJ<S!hboH
zZSxCYcFL;WK(vk(vfkSra`!f3Y+|zGI)hW(H*mBM(dNpDx8IL^A1QAai~g5VxbNiU
z9~>qIQ$w{BZ99_wjRmNNl{2WFu)eSR$-Q9WYp<)ko%HE?tO-@&!#3fVv@EMYSH~-O
zH28pk<J?~~(xoLOS`MRuT$f@8m^12GpO)_kIQXo=(LW$S{Ttk9;!x3Negq<MFu00l
z;Oh&_MsB}Cr*=a1i*Zxxi&(wh{MY6Bt^SWrBZwO_%>-&5uyr*;%b#V|s@hb+UtaME
zJG9E7tHAEgK;9909hft&-s>p&>j~!M_3ev?zsFZ+e_ldLY*f@%YO{&i*$j=emkbuO
z<Kx0sJqXzjSqhtcONwJ=E7@x|`VppgC;_lq%$Qi|OjefWwevO7v=?@g|D#|aPi>=t
zX%08bxrq%BuSA+FF&+^vW1a6)fOLSJQtr6KOewTVW?llergG}iVv*=CD}JA`?vv~M
zW=F0hJ6=}(L$PybU>28z9MfSI&e%<~s9{U8U>lJJhK54|@=vWM1T?swNz(k&wuur9
zaK7zw3WYGAGG8V|=5^i_fPWv%MtM@GI_yRW$TNg)O+oPg;@NI}=Igs>*RIC4e~~<S
z9Ob0)Qpg3YMWR^n8*WejAApjdC#y3Me2VL<fbj72(T6eo55TYWS)$@0pk-#|(6EeV
z7XN?@QvNmnRBLlfP}XY{s2z;R(I>Myvkx6B5x%B9QU8dU_%%PQZHt_T^h8W6c83fx
z9P94x#x?-E65bhnIHfNEj^(uOv9W}IzUEsqU6e(T8X!wp+4ziiIjs_mO}X&at+Fsf
zn!wC^^&Mrx=tHhdg&Q{>=13W?o<7Zg@BqH&xd>R~-MgFP*SSACl`%@Bqvzcp*EW%v
zu{?WLe(j|TDFkk-JE&dUCI%@0Zj#eTD?0e#K^)f_-y=LYHpcA|3(q0bp+j+_Zd$~j
z_|*EAQ@ymj1fDDCk)SwWK69q<?(l>*h7514^uh0Wwx3fHSpn+j)>qZnuetZiFMxc^
zs`b#<kBNz9B_I07VE(JYifq-WASZWHNa!B%az31f1J<7-BO(xClg@^E=L6NhBwf1R
zw%r!lb=aNvtb0D8j$X%XiWvbPKT>Dgg4xc?tEwytIl5E&obC~o=vXK<z+6Y@jkmNY
znwTUJ%%kfAUtc{rIrXuhEAx{^l2UuP7JEqUXJ4GRw}1JCjD4i2v9H8~oM+vSsR!z7
z&qeCmHIt-7<IjV-@9$czu3WAB9dbP78HSHTcTwUQ{QQ>(_`NUGMn=Khnmv$95U=Xu
zV~m>COuWd!92qM(8N<+zTO#4=On}l$^@i*`e@aGY4T>v}hD;p4Z*LD4^a$Nyu@#S*
zwa;G0gW<~_3KBqA8S|Z_3Qo=o3?kMB#f6ODgHvzJIJ=a1G*$*@BzB#bd*<uz4(itL
zdo=#!I)}lZKZnM~Mj#6rr2UCh55BHkOCtk=yi7gaa9y{^bKQf3eC{PR86j5J6%;&d
z4^=g$xWiDTYE680XS)Y~M(XJ3^!uiyyb8RSwSCz8)90EeZinO*6x3|fZW~Z5y}7a8
z|1$eUVmU_+$tx=dOM1ixK7M>(eG^rDYV`QjRM2-;7qGfWI{><|?nAo#avv%#oGqA1
zCv)rWk533%jXg5(`}a|s<MUD$I96Oco}XvkC-V=7%})LMA3c$-yhaoQap?R{gHQes
zI6?l)-$LSEBWk##p%xIzHFXIM-F6jE^7a0T3Qh3S{r?Cv)UW^Q5y2?bg@yTf>e*R7
z7?G64);^DX`;%O!7gW!m4_rEgNM#Sot?F{n_Z(%9^#IX895)`Zkh>v&qV$W7s*G!J
zf+kBj2_|DO!G9+v1dkRt3ZD~8ZfFS1%4!G<Y{<$wLF}TI&77RFoSa6S^Dai3;^Hp%
z?kV>c`uWlN91;l$35gul#xDVbwrBV5TFb-iI_@4GUheNO4S-nLuB;!bt3P)YgCBTs
z^ysQcg)w&FzI}t_WqunCKL)LQ+s`*jHe|h$mv;xZf*GwtKQ9`8y8@Z<x(UxmkM!Ls
z<2Gzm6u~fYv&Fe_q`@;>vW3q)fS=>uJ>P}tS9l7hLMTwJeyJI&s&0@VUayS0y`v-H
z+6WE1im4(E*`^#G4t92W1qb|ybKfV$GX<I<PtU4D_fE|I&9l|kRZvhcHdcA(ybVA7
zTIq(onb}<hg-l=H2!^uYR95dDwBNY$iEN5&-lW9)_PY80Vq9F~EpL`pFRUG%D|(Wj
zsFU8{wTPTPUCH7M3pfxa(juJZswo<UH%b%|z5HT*89T~OPT?<{y;*mq2n2Ysi>sO@
z2)g~0JsCQ0Qd%`3gCGfTX=UC;*ux3LD1Z92J1#zc?F!O@)ja7^ly<)T^y&0;3!IdR
z={-Mxf=gsWb|9jrpmvqJu1IXW*GIXyKGxPE*7-^@H>f{9ziueRQqon69G{KqnMljX
zd?_he`=zbI4l@R-s?n9FWGfIE-%1SkprviL?kC9;6AhN;>xpCc?Cw*ijufuy#3}F^
z%0dQE8Mxin`n|2Bw)B_z2DS9H864JdFJPR9?m^sC3si2lA9%Eg<Fg6()I(z3J*VHd
zuQ}l|+GVwwPgGjS^r$WyY)i6%s0C3;Yk$Q;r-&h~S~sJ4-KZ;WIL4Kb2tw*u{s^Zv
zv=xe<tE$>NI;2`RBVHvfF`B<8a_tv8ym`~?ySS#q(|X}5Xs!giFYeEO{@eI?^B^Y{
z7mHG$dY&q=Hp&H@PFyvwlN2F_gp5@KMp(NilvP#Jji`T-=H=U8onPB2eJ?u04il9W
zCVHR?GNk=4-~0asRR4eSHRs7Z*?s62!Hc8aK$yK|YZCT2!q=4#!oWsw<#?=Tb^X+D
za}yS3g0MTGs;UaZEhmD)z3Dk!pu)9i%i`kaSH((XR%W2S_*eIS_vW-WppVfraxZ41
zIRv+(@VTSI2}A?&$=j*JaPdf@lQHqR0EipRuXxlHj-i_0m_i0?j#x5GROb0%funQL
zFx|r_+EP_TEOTaM4-1V}v;!rpv;VOE5W&|oVPfz)H-_(?B;fjsaOU2bOBCw7FV)qE
zH-Np6%#2~hcW5Uo5wMe&M3^E0S=9ZVoptH+lO<}yiN|0=hihZX@O?2C*FozGb8uSr
z^h2qf*vqxKmU_$a85x#<kJVWA(b2s#sGv+cb9d;XCp%6oR|eJ;o!MGhCOZcQ?mnRk
zO!{ela$D}g1-Jns@InC326J61&5LzeU8xMbp|1~3Cl8G?z)@|fXl;x_AzpyBuhoZi
z?khQ?7|c2|QN_pImjcSx*qd;@16>w&3=BU{Fv?>mk`WyTUC}vd>BNUD%2_u`DCoIk
zmy6+0L!Wv9BX_TeVeTuGfu3Z7*{C?Cy4&9t%>!n&LjnAOR|S>dKDKkP<?@h73M&py
z|Bn`U8A#yInTn2o*$-k*qg)&vCX#X*+6cnDI|hRqAg74W=8zoiEWC11HIy(!k&a;?
zYLp<sxxfWMke8b#(4d+6Y6C%mf<VAhiM1O2MOIFD6V{XjMlc-|wvLV6W&)|Sj*m1D
zqpSVgtv?CWB;mlxTY(7)36dX~Qxb*m3>ZIXudTJJ4CHFtu2@bBM6S`LP`HMqn*IG-
zSpcaLYXV(a9Iw#lYg;C!L*R)Qe6M-;?iA$T#^y@P%YrbZaKFaK^^lO40H9iqfAy+8
z<hcIC@$~X|gGZ$-D1?>)A*QUUE9@hHufK0fS5IkzPDX77A!ZcYxBIm{G;5u!dQ<xG
z<43MXn>c$XAZsAp2>?K}pVdq}nCK-4Hh?1&$3A7`=R06!14f1YU7qZMxW<%|uv6h9
zEoKl)MuNDuR5A^uY=rm1qEdWQCViv%NpKDojM~U8s6}Vd)U*WD12o%90B8x=hMV~&
zdA=effPX8s(#Nov-I<ly+EG(arel7p3c>E437TP=3Gs@+BOE~T0ttr)#|)4%HUcPm
zh7-omy<<jIlf25A5&pcB;nZJX<f^)J;MjwXUbP2I2I0HI{rdpr?~Z@oBOVIn2fQTM
zm_Y^m?4sebS5RVWZyxUHnZQu*awz~IZ-HixR9p`DHx__OpF#Bg#pLto--C2wEnYe=
z1el4U!sOiJms_8HRU|DfE)Yb+@ZfMqC-*4qNAbSJ1&;F*^OJ+^m+e3rEldmB-^9+^
ztYEM7f>W+MIPV5;A_PPaM${>GYsr`_I}7U)5e)oA)gUiags%Vn`4Koj;i+ezyd0{c
z0b`K+eoh4oF1+`gb_g+-!M667fJ_?N(a*e$;Ry+Q1Z=PatHu|xYYq-F1oAY%!6Yw|
z<1hn~$!{Br@^uvtzd9wX2M$^%z(_)uZu*^pUsozEjg~Ic2I#Blqa{FFGSOi<7j?aw
zhT3y8WJ-pE{QkI)a*wt00b0HBWn24*qKsT|Y<ScMsMQULdCXhwcxgHf2pvYBJCTs#
zwn0kcUAQ{blo>TEEF5m4%H6Yw&?VeS*r;{EP<Lxk&?5GsIe637tuUxYqNWneVe9UG
zQ^pt&4TP3jb78?c^sM5gXsM^WRU?uvzv;nF+qiL~VFmmUaYj6UB>D8@&c773vj&m(
z_J=d{7uW*4SH4>iQXwo})fa$09*b?r*z^c87|10PMg77em3dkDc%J&!O*UemQ|{lN
zog;Qt9x)%fHt$LZ0v%wi$rucwgRyPgGNiQY$5;3v6FpTI@ZyAt>c6b&M<yFKm&<|(
zA2c=DmGpRM@Kn)s(-pfTTyl@U^WF2)VNsD#;8x8Z`WK7;@vN^D<Yo0+3#<K?7>Sw7
zVDD|<%za-D*pk400!5}$#29ga6B;RIKPs4!I9u<7Wx}m=!7dur--xA>$FUbe&^(+m
zZQ>cLqn&>spXV=EpJj3>sYZ??7Pum1T-M3B6}EiIe)m3#LZ|LeZlR*FkX8{_Nt?Zx
z3SGkUFmV@M)2^WU5863q!qDlY6&k~GvV(S@Pi3KzCo?5ZA)Yu){d}$5BCQ?#)YGrN
zjXHVb#tmHvw$jG_{1FG+K~@AGo!A6fHTDutL3$%9zcJqf$0eD1W&n!4vC4J=kRL0_
z+T9I|xzS~db*QfWFYSy%c;HoSgki^(rrLgN;k41WP&(23f58^Tbd2IQ8Stx)m5z*f
zJOhVN5zhG1X0AALLb$y`v8!ySTIbPSLNvi<I*%-3_0*Y|nD`8tdav5w^>gwcR8{Uo
z@9GT1y3NE|^#a|=TWY(R5(l}-R)>6Ww&W@leW89>X<jy0pdhX+|20fx7NkVrgj<%w
z^e+yf=2WeKUfv{GM!Q%XwEn8GvWwud4c~nuViyGR`_AU~?J`YqC%j<M&q^e>Q{Nf*
zTKlw;JRvt=6B|1@-K=NY+@!c&<`;db4f_)!U}NDkhO>BnRpu=&<OHh;Ix@ISfoYl0
z4Sr^4vDZMuS|fi|COi>#Q*8$<3`$L}*-Gbn5<Q03QPvOzi09LhNALQBsPdr*G11?g
z#N+n(vGG{2uKh4*a*~nPpSB)IpU+0QnpnyBPzl{?D9_XJ<hE8@00u6|c;VvljhP-C
z?(4DA5^Qg@d~x586N8SHHhA*spPFm>goSd%yuGY#x?&SAFhJ&Z8?WLsp1PS099asA
zaC!ilB~w%8Vh98)2QB&d<<|ub4B=&lj=E_qVGhd*^z^azF`5oj0pIUV{E;*^PP8p4
zcU`}c--w$2QdkSP)zkD^G7m>0B_3tXKu|Y5-fI2uJ&L1T&G23di4yixTfeGazTC1#
z2SGrl=QOQO&VZvTKG%GwF3+-q`IE}8?D|9Irtiw{UkG-V@Hv<1(bNJW5``Su1|<x<
z^;46=3A5ks9I&3+{{ah>UEDwydv3v#3k)jhzACw{W(8^?&;obU87)*a(b@bAs`^}U
zZ4>omWV*i_ZgniqW&BPJx{Z4kX@w_eMV`jKx)LSn_Wb$Y;VX(UCZL30o;coVI`#l=
zSJKvrzoxZiE3lJU{>XddebT#^c`zy^41M8A{?!J7fU}Jd&ZGfys^j6*_uJD0i>U_P
zqSC`^i08}-?!i(;Qub=xvjd$?vs5j_ly~N$hP=3rKdrCA<?R@p@(WK!t(>F<J+TwW
zs;2a-BO%v8cEWqt=+G%_Rd(o}oRRhocgGIM3dt{qlB7tY!o>&6X0}yn)tQP2R|pfi
z9~mJvjvGP_!z;D&;`<7j?$|X~84V0qiLKNGbzRRl`T`*@u+FL-rIV$_U^+O9ehOAx
zCo~JY23-x!QD{P*61P?$fFF+dyj4M=6$d5$k7(>VToj&>tZ`l_Q!2WC3Bs6?b9^pj
zS7&D@DR`>$U4v1kQ=apNkU8M|zE`4F7ood1)ORCw$=~+(O3p@SyI9Gck@$lRt;jV-
z{}YfL8uuC;d+4!UMf1%sY>+~5#aWkJi9-vaDB*A{&z$Um4q$~K!IvlgMS^pR{6m6M
zK8TKqF^m$NYf0O~t9l5S-S_xnDon*t+|6_(L#N;W&Ap?Aw)9d|fxzGZ^Dij%zB3Y>
z`qQ<F&t84Al-TmmpV!isG4!vrv^4pL08OBm=3cm!+huwx3At;xs*S&Lr{iQbPjj&T
zcj8XYQz|EEAUfF>10PU_ka~$(QFGTmxULt>^uV-FkbMbT$?#`ZNP*}kS3G|D)RgTn
zahfe0*|7QJDM8n%wzOT;%mlIWHQ<9m3aBV(60^^Up6$eR!*0;>O>L@u6%&%Hq2J$n
zNK0=g_D#qK+y?>?JA*iq63@R9RO+5#NomQ%af;GncDP=)4TYJ%{;FW6EI#Aq<>l;|
ze{<QI0WY7#^p1&6{{}^<t&s!?AxRDj$Ux?(>gJ=X3`?lxo0?8skm1YbYVVH+g|Qn_
zG{f^$^(cwr6oZo;`$tAnn8a{uPoa2K(;Y4|L!r*u&x1zu{8<q?o;x-r8>p!Te%h1G
z%KaRcN5e48p}o}j!a`z^szWVjLQN_`Q2*5vEM3oiiim(X=wFn@ta6q;5x2Rlsbbux
zHrUtIO_7As6y&lm_DXSAJnokv(EV)-s>7=DN|j3R@2b$PK0gDx4=Ferc0GN4cadps
zGWJkJa~B|LZ#7M`ol^=jCG6#-)@NQ`4GEW%;7~<hlbV)9tB$BqGaWhem}Y0wC1_c+
zr6{(6y3KqO&tQggnh#0?+5-m?C;IT2)E`_6QJBxX#*=)Re*M=YVq(rP1#4fiy?OSm
zYo)kqV(p~w(*Bz<G=XVET*c%dkt2JIKJEPkoW%x3iX@UXEp7d)^;#Sbs_d=EH)$dQ
zoYHpbrq($99vp1OrNYw;{wr8)`@$G&#vOcM+KbR}9ppEV3rZ0d5mAN&@S(>SGWt{Q
zJ-x2(=uvL%f{VSd{8|)oU-aUHS5;FHj@+}I`PCRA7AraZ1^anT&4pj`<8rpyKXs9`
zT4xR~J=)623Z1J_(Kkp2WCl7h$2{9Y3A~xKtDB3Qm+hU-%|k%-rRO0pA0MAQ7mkIm
zpJn>yExtV4x9~xuj?HD@g%Qs{PR6AKpN6BcKCvB+C@jsrdJI3q%zjk2ATj$b&k^(i
z3QQK<obXypM}k&P3-e8Q;DjQtt?}=KmZAqYs!lLPefyD)VXgj(o!_wYrC4SwT2(8=
z^<WKsl}$+>lGTh8k(DV?%gYgy{q*TmEZZVV#g@ym_BE;xzaL%Py?wjZKV&N!W?*zJ
zvGV(emrZ-AYF?g9QH~H>XqCt<!MWCF^DX4K)ah1;uPJ5D`7-kMe<OU&DsuFCIu6++
z{j8ofU$c8dq%#DvxSCbl&_35dlE{;+TDt$kR6u<u$LhoKN~pO4vyk9$B%|q6hgl~f
z;is3DF!XZy3wd(?(i^mkfqUBWq>C^Oskylg1p%&?4_|H?Ts+3~izLhu=MS}No9<v*
zZs$Q5eFeS94a#t;g5}+VcX0WAns&3^?l-=40_T|K<^(TLyhH7ansvCjQBHaoN_~Cb
zGlzGWHYUd@ud-GoLt-m5c{*DnLcNrV8};I`&i;XcCgQf?bw8rnD*`pHvL*dS<#1~B
zn*B`fMr|Lq6T0afvlj%w@f!)h3L8py@D*HhI4Vaz?%#;k%Nf~Wo-0mfW~pk_v0aw>
z>~F4&qA|Qx8(o6vGX97t_UuR;TFMW<ppTjq-5YchdZh*RBQ(vWxZz|n`1%VHqb)Te
zUdLfg<{C<$G==>I8T2e^L}Z#%14`y~eI8u)_s!exYBWEo@z}NNOya1Uudgyu8lJNP
z+lYV^xw6ykp?C7-sN<lfgMNqr3Q+382+7Cc<0yLREpq9>jX!FFN;^O9ar9^#N($T=
ziToEHnAXK^e|vTVl3(I=3rzz`K_?<&Y3M1-^u$z;J^3MP|1)v^BlQ7$ZI~aC4nPFb
zg(rr-Aa=RolJXfePL=7y{V@n0caOwVdTtcD@yV6$!r9LHgK%|xoiyWhlLYA>D;LKf
z|7i&vJ;9|+c)X{ua64(*gs7+{Ok-)|Pz-92WyleSiJzdNPar$Pd11-~>)N$|HRUJG
zJdPK&eXqrc!C4=ah+B^U;QnRX`7h6S{onqF_|-M6h%nZ578mU8-)HXdsoa#VtK?rC
z78<(7REk>J7U@2fyHJ!o`cNJ%ej)npWa9h#+~2<SZ2E5BZ2N&~(AA_udCx=Q%hpw`
z^9xZfW2qb>*P`!yz-3Bc1?!$W*z3Ja^^fT3xsm-OH#g#+uZf8@FV@-rdH))b*X~{g
zkte5?ci@|u2N@U`3JV-#5hixGUm-Me2b@)~1-9)bFOLkB8(+isoc#?k=IK*9uQsr=
z_7r5&;yZeJN=)OZTZ`AP=O8|L*B?h-`jn6S8w*fjl`}P7zO{%9Qj`J1U=~c^<c-fF
zUP)hQZf?es-#JN1$Gdj}Gifmy8h;L(SdEU2HW=<20@W^m01U7$uF7-_^u-YoBLDhA
z=r(v7HRv{DFvwc6H?s&X;QDjiKHlCw9v*78Utm*y2-v(#y;Pl>g{2X*Nr{)XZe(eB
zqe4)Dvud3m+alQsEapDA4NW*(aGSu;+fm`ZgNQ$MO|`SP-?~+^q3!y0*`A)G+>6M+
z-b-f}CGGByV3!LQzBxOW=<D;v#l?|`U%LfY9}A0m_M=5m8QXWAi5>M!Vc%fLKRj$g
zsfi|;S4#$9TTdmq3VhDmGujD?HZD4PSA@fGT?tId|F8@|{@GZ+0SA*z=Egpu)C7-_
zuH&w#tW3PBv-=PZs~aT=>z#kwS6}Num(`Up+g4>k6AhK-9tDN_b6Q+x801k|_H%d`
zp2<jqkhwYTwzYLY#bv!${752h7V7NdiR=-Gqk}YZdB*;%UZzLu;xZ5$ZoQ&tX8{%#
zF#!5UkDinCBtD_hut$$#@FDs7W<=<@dU|>mId&C=5yXPC9bq{==!S?{b{g^G8>Mbg
z5VYCwXl5LS4^h5iZT7ia#G^+Tb4nHmbD=6(dpK5zVvjgIjV(JDmr85)CqMNQB_5mQ
zZup%gI8@hYPIw$BAUTEoP<`LUkW7zK(9e>dOXJ|W`ud3Uf_3?arvpH-K#Pr;&NNB2
zRy*`Gj{8T4z<kqC(zoXw0qWbXWnj;<A?HQiPc82)%0dvW|9=Mdf6v2oO@h&q4Veq3
zyRtJgGlPJ_{YK&TAjOm0hS)8ODrhw`4Ie3zNf;RG^7}{Y_wV2H@=h7vL(jK}vIHDH
z5goNOoWPWphD}1iBKL;t)NP*?{lz`CJo;9diee-2_RmIfhD{iS)3v=d%78TWU@#{;
zJ3v#%QZG96$||-7b+HvF)Pl|}FHED~C^V}1{dEK*NWO*6X9r&534$fCn8NKbaY>!M
zPD7<;Kkzl<pkTr0HVW_x@bVBZBc5Vo*-mW{q`yp3Kr)6F0#4jo3(QZ-LkbqzF1x=<
zQ{KO}&BVk6xQ^eGw{P#fz3JT_&%et~UYo5-=t>~AmN0R!P-&xiL=GypESNj<_L(jq
z%TpY6X-q=Dv*G2@px&Y^er9TJ{L+L`drp{E`riHf-`*c*O>;u#m)j1P>H?p@OBhz|
z5F;NTqMc<-a=~0dljKNNrqG$2{mOWwR2E-^ui-DbsRQ{M{1%p=c>vmD!?vuXGT*0h
z2?<rzP*>nTIgGYwX7iT-D@Uo5fmE!-PnM{QfR9H4w#DRCoV?Wq4@c<=mm4(&Ft$6}
z7B*tZZV3$>;YU)>dE0C4fboy(^OG|fn)D~?Brra{1~HogP74W;hWK9&$ArIx2*zj%
z@$LGr1eY!JiR1`lZx}Hxe&k6+-R@yHh7&@vqN5|`Qo=XwMIc3Qw~^lC*q0NQF@;af
zSNAa&D<XYIt=Y3!*C3R$QEF-0>dObG(E7DrzLcpj(sVD$YlmhfGJz3OXLAQ&KkQpL
zV-Z@&+4u@R()N*&U|*PvZVe{5|NQxrf?5)_8gL~mn3tCQ?Tw5$msJ)v@-n7m@F*I*
zEBWMA_TJ##zTSlwICj<Ge!TqVMt3(Yq>is(zOcrUz|1|lPHnT%{{5UjaDExRdkGLH
zHEE~AIfv?n>a3kj;WA=nzZy-;DP(;a{XY3+>Jc&5u97BLduRsh+H&|lpR${X?X<PA
zQMZG6w($DrCqkx8I+-3t7n5o5;KK!sX3%D4ItGHvfMPv+W_flNvmH&r(a8ERbO44h
zkJ^-mu~gT4zQ|))3yFQNsriF7v!FEgMtc$9i``7?VB9_$nzr{g+~(H@coV$>K6=s5
zk7S51PLJrn@rm8h+EzGg>-VJSB5So}v3aP#;2_YT0fWcskTvf-cp^{gsZVKTBNpe)
znw5DJ{)KnBD)X!(#GE*l!*9JI%D~|<_x<9Ce9SDNz`yL5#wCylOOA|o@|pMqsxe2u
zYzDbRd-v^&8r?nUibX@EV14;a_v-NGr#$jP+NR~VN`Ls@VPT<0v-gTn65$g+p194@
z^3PT#N8<{AL$-4TfdNWqCdxlx8_Mq?<p!(SblRIP4OF`*ZaKDvnykX|Zt?eS^lro?
zWb>_}n3~WkJUOsTGAZk!%E$3jG*y=f6ma&zRz_8!!Ij0u@(V#%ujX2uS)P_V6pvWv
zjax)t->hB$%|yzVx{90TL%8ti(>W&f7fk=Oz7^TC@j9SKp3ASlpPF_6G6<(Y-yc-#
zipp27fC(tawPh&W=nh{Qskf|HKU7Rcgj%6oA6;1*|F>QB&CNkes{uFfWCj#%rl&tn
z!-Saw7=p9)OnH*m+`XmyEm+2JxA*Pc8_5d`V@H-r#LhztcY`<$D{hG|pUB5(z0zQ-
zo-f<=^a#tYX)W>+CS!aL+dDW^hYCww;Y2LZ<g1fK4J|EIrTvtN2)U9^<9%=kRvc(6
zg0FHidCxQ;y&Fx$Bn$%A9LgU^K7GfGPhvD^lRKp41^Q(d+NvcUF=FDQjfLRtu}Tlr
z^dpAPp?XDsW)Fg~%|ylj^ve?_{Q9NM+BLfGYXP>Lx_zzKYDejv51>7roSfpgSI2VS
zu3*>};Zj`pywc0+M|YG|1igrD=n1sSmy4alc=Q@^&<I3qym`W`#WUtyA<wSua26U}
z{Y)n^(-<X{Q6s$n(4pm0`V1IQb&Ai$;Rr%^;<i$nR(*==Paz((w!=shF9?AdpF{20
zuMl;z=gd?&c)-gL>zh}&u3r|kT=_ir_sOn5Fb=$Hvgj)E9_{?9Tno%$ev<Z<d8-N1
zrA4j#o;h1$R`Jwwv1M1M!|!2({Bn(F$7tEHMGyIJQ$dde&(7+?2<w?djIP@AZWk$9
z;?WZ<@P;<fM!0$|Ala=kqw9Gri_qfKFvm$6@;)>B*`lt}CV)C!#TiC57OK}<kn&?D
zoAbPX6W3-XRUK?{1mFprzH6L&?W1FF$rLt`<Ie}qNII*t=yY-E`bt0Cl$Ot^hG0*)
z4>wLlM)MzKU04`-f!$43@XYCp3q}s$NZ0E6w0(?>Vz+;OE{%*%-yEA3bMC76;)P0y
zH0_S0(QRwntYy24%jz!r^so(my}e@)GV&E;_29G+w3}cjJJihw^_;^WCd|Kx^OdS%
zr-_{{z^z#7{VLJ4HU5Ej8X&&eF$burz20~9kxy85X32O4UCr;zy+1C=RcxTkdGx3S
zMp3n8`4c;Sld;vo5Z$16*iIN07~KEOk5rF=T_8)g62~Q164q3~?e2$_-U{S&-$-Vg
zSLjELbR}35zfiZPrd~7Jcp^X@7uM)w6sC9GcxfufSDrE+j8y&+zLnC3hELbPe1)bO
zCrVbTYP58ucVmuO>y0Oo(eg@49R>4yJOeU$$`|VnUbt`p-Lo(7uRj#qlOU!!lXk|i
zl0Au5tG&Fyu2}lqISd*Uu8Q^JU2Y>!^mAXnVl*=vK|Zr~4Xty~04RpM4j-mfTL5zE
z4{9HJyw|83fAgjd&S14D*m5ovj`jAM7L0)9scp|uPFFmCo-iSF;v0hm_ZaU=((-0p
zR`7dS9YCO#u3^u-z2D7tnhLZkUQ5Kmj{#-SC+J~;-6-*Zb!ZNU(r9DKAe@B_N&#cQ
zEQC+x>D<138+SPPia1}R{-4)OhYknStVd3W2GZ^EDOR=nox|!i<oh+NU2w9n(hq4O
z2M;Dwd<FC>aQkPBuC8vKbGO^|LWizm$N5aaXJ%bR)onTfwvPx&-!)G3Be1=tWn+aa
zrya*$M9_JVbI#MJgQ;3wKkn%T|Ip=&8lRp96#W}pJsCh^Yv#vFUAY(0SMz6PJDTAL
zu=iK?+F#KgA7Q~M5qFl;R~+ytCb5ZH^^{S@sg)ip1A>&b<mZ)zwvTW_!7oFjpV7MO
z+j`KyuZ_U|(ed|fPrDj_zO^<+Pvsp#Jx@3<iL~ebS@`?e7d&@}a3TV{<!j{JJR4r(
zY(8$<l&hMWi1<I5i+-EnaiTHxZREVReFyi4XpfuSpEhG{0<OQ}y`#Sok#c|E4eDNo
zjQYI|J)Gz1qr2BiPLW(ZKfo@=QhSgCd`i=otUnKasukB@ZE$(Fqp*hyVhNyUL7u(*
z;@@s5K$;J2qwH8-{^)&S6n;qPw|Xz7od{}5gdsG5Q14fg&xcbBhCQc?>pgSh^;{^a
z)U>G!pe#q^;ai+w@M{#nG|e7&;HiCzN=zwVF%RhMae<qT*sFw$`@@PkN}(!3aW_6b
zUNLXeiD|JH_mChG0HT7Jy_B(^{O%a!HzdJv{J7P^R1(~4pRvsE6m512=>>Frlkr=g
ztDM+UUx3L(SxHG8?u>g~9o-PFG!DEBY(8c?nnEO07U}pKP=;<qMC!#Oh<;cw`kwwi
zXRPH-%vvC@q}yJyKD^9?Kddb~-xQ>%))sPT!In!zBwr`oTeE=RGk217b;Fx-ZvVw7
zsDEPtpmEb!rgw4OOT5A@ENoZiGq#`8xh2b_w?=GH`U-}%AmQK<`49^M{!l5rHCn|m
zsr9(_BCcc}Dw|2qZyOrJ{hb)<cdZ^XRwW$JvRmjsoJSEdyhp`N;_c1mjNhl=8b$$@
znigNoM;=ZyZ+We23E_*R7U!P8w!mVS<Lc`mzz|!xe?zTdI#L~3vxc&3YAH8=vH5H6
zlpHWwnCUBNYBqy3fa%>==RH-Nbt&|)5o&$##x!Yg>lWO{Nvkea%eTWXIE})q0WN6o
zSq_-BjmDrQutj>Tq^U3c>@85`)81JT!jmJ|4m{df?Ci18<41c>9>Z8DQc81coMQ8M
zZx;xg)~3=UiV6ylhrDXCy*GQ&_A#*mFCM{TzGw-OhWq5LhOgGy2oxS3SXj{YWq5nj
zDb1Sa<jHB+HnsCnerct{90Z27OD<VuURpd?AxG!!O<wh5_=p)*P=t^TS9LvDh`M8O
zv*Y3zPa0xN#(l-ZLk*SWXI8<1B(1m%EMm7E{L|Q#`rfKj{^|>ULnBN*_#XKY`7mQ0
zi_T<fJBsBu3l+{YYY93Rk1Wp*4uHZ)%m#K1`9>ugE7H@k>6VMgsYQ+_f>9KT2k_A9
z!6BtpdPCY};yqA(rC@&GN*fi^do*BQ!<Q9<!bU|!5E$R-JXKppG1S226mN%FUl^U5
zgXDx#2k00O6A&ZuDExKdzU|H;wr0(3{v3TQs=fT_-;*1|ikC7G(?)8m1`VmOB#_Q*
zm>v>xAgu#{Huy=;gy+A&%9&=*EdFshVpYOQ)0A}S-puGb`xnOFLR%|+sC@QQpvrmv
zVyf3=-Z0$C!e$>ha~c}Z{;xY-8l`2f;@~y1@Xd!95TOqW5sG~vYO%Ao@7k4iF-o$x
zR4J<;!859Tbf^BRkZb2H8WJB^?Vz;8C6t~W;j+?-PAq%bOV#Caj+vX_hRn*mXO1ZE
zC!{|=Eq-k?GQIsAy3a*euTs3;DWO3l+p&FqQh4fCLsi=jG(Xn|sAJ2DjcffyejCSj
z5GtA99r^5s<&VpD28Yv$E#G}VBmJxGr1-rjPZ-~}`1C!uo1__<l&t&)6n7Q_0N~Ii
zY&dbrMFV@p9mQ=&xnGpsWfWgA=Xy0H1X~NU!?lkO=O-H4DDC{vPt<Fo-{{LRUnP9f
z$tV1&=>-d<iWN7sL`wK_IdmhKlBj$mUwilzH59uPb12f#)7snHgM%$&O~gnHJ<!NC
zpSMe@dZ0+Df<`0j6?~I0I5P0}C4CF~Q~OW>A-^caA~SAJPNvB9U;px~J5y^635|-N
zOK{s;E-p;}P*7AH=_>vMZB^DQO5WHl6LY<fU`<QeN(LQ$RA;Vu|5&D@X{Ms#s@#X~
z7M0&D;roN;=TBj-=kdg^A>;ia$N7xjxy^P(T=P1Mf-Dt+1(amd958>;pZa^<>6t+*
zHBrC)N=g7;Z?uyHH5_=Hgg~c%j-MOBM`d=Qz>W|rjMa^bP>O{B_ZRpt12>d>eRlRX
z!q2;6%A63KQZ33|1>zd1tcA{E>dwNques#g-jg4^;z3%F)Grp*lVh;|mGlvNt5)Cj
zC=ZX>2Ulk%$G^@Oa=?bXz=w(4_?EBgwDQs@T;ap+og25*cE}67@%vpufSL;SQZ!$x
zW=4^k=F}^C!PGzBqdM?j4H!L?qC21kVRSJ2`JClZfWLpBQ#a8iuM=V6cveYH0c@dA
zB4sUuC{y?SWp~8J^mBmkV$<mqJ3A#wGKe`2{ro5;%%sX=85#zhuL^la6Hpq0*M6JV
z!p0<DnCQH`1zf`pFcNo%u6=uIBj~?;37RC_jhHl|VY@hP`U$l1og%l$$hwJx?9%e@
z&SmfzIwxVprNA?ox|fdb4Ty=v#D~jN7PM<NCA_|M^?s>6YiQmF$N!{ImH6rZrW2I@
zzgO}8uYNe?&d}Qj+`*l=aib!7?oYS`aZ;{xleV5{EHB@&Z(nz9Ep0u_GyJC#CBL<5
zu_`33&A#iACO8bLTTpmw8^62DmHF%`4WDv`WT-m4Du|@e$uYC@?1!}hK<_2h{#E}=
zssWeySNP6&-zTuzO9&~nwuNBAx?+y0yJvWqqsnUpDVcW>!HJl=r0C?=H>u}EtH>!w
zxJu^S4<G(g_C@zS13ibtKcKTmu5Uz!@^QW58`jdgdSF3sFU{5d{d-4&`W@RJH@*}E
zg>K%e`8<-<O6H1n+Ibo)vBLw=(#iyMOl8d&-U(j>hr*^|#lFjquqVMVlzfECK&u4M
zlWt)t{6B5g@aTH_4FanNM8<_5`{08NLNWzu<d5E`kKOjZ%RMDK7H9t`C~}joc6|y|
zcXV9()nwk+)5B^$|F|#a{a$DIwA6`bX<J#{!G>{n&AEBDlN0?R7~sdj$(h1>7LT5^
zQz7t(dhYK-ZFYKq)t@l7GkrF;zz@B?m&C<&yjBHdiI~_5m;%%j4<1OUsO;n7nqfkC
zg3b;J4a8)qHYR6hjX&d1z}3J*5dr>xT_l`A&)f^q>?Q0vsFAGp0xm09F#bt?d~>7m
z`Eyd6mVNi2a)j{y_#=dcE%F(9C-?VM!@mc*2Yz=C4N*~1@oXI*b6C3a)`*OVL(L>r
zDMOueE~29s@7|3?-LlRje(G+T_-KDW+tUffz$0{Yb{~B*t{%71K(B!8izvsPz&@`>
zEuv&07RtrP@?CQvN0Lmq+WNWIuYZ7C)=?XSW0S;Cz}YRkUf!auj}Wzz7NaCSqO(bl
z=eWTqFf!^Q%NIlp98V+%gSyn7p&@n&d`ePn{!}s1N7r%#SNQ~I{Bwgd*lC6Zsv^qe
zL`E@V)k<yPQj+RP#AMox2|S|^cR}nv#F@3@y-(9`?%Yf~6(Zfx_k6HAB+gZVT%6vI
zA9HgmGc*nkZ^Cy*Dk>@l<oUmR8J&J;BqKfWknJm_V08mo(|PHK6mQQEPoRmNgF|<l
zIPWfHWxlc7#bL)aiTBP8d)tX<J{jG@TZ3=g@onpbpqLj$Oz{Z>dt$gEh^F*ZAg;VN
z=6yp`lRELl@9H~y|C|W|6yhY^6kz{2k`hQ#FD)z6Jct|W*6?0@hpV{?Et^08(M%|P
z9|{JhcN|mEfbg}TGEYuUWCX+8)}6)CuQoStx@;sXTUHl`A{zmbe$iw&T~5Gs#+8ik
zStm?;$Vr8MZ|Z%k{DTE8|1xr*F<rB|Sf5wmwhGRejxH>80-Z)K#DlD5``O>3NNm}&
zYbK79m>Ye=Kegu~@_6SXzC4~o$SLuWF$>+$&oBaSMY$GvJhw=D2SLqGP7$sf=0S9s
zNZpl-x%`H5_wM*tf6rK+9~aDu@{n=-M7{RYvy=i0by(%-R}rdw!$OgkRw&KS|LgW^
z#9!8BPtajfYDQ-6nnOghdBj10!>!f>pQ&rXcfKVcr<ZI$vTOA(bQT~Zn)s;83;R+G
z$QvTnld|Sb@$Yqg5(<^my(^&`gCeqE1JLc?MBJmyzWxD8DOBssE#u>@ub;tJp36QN
zQBO?i6W>a_u%82`PPNDvx2dg}Y}ci;rSv@lSLqe~d?{_&_sk}(tu|v<uUejt6}dQ#
z5As8rj7CMw)arEKp_SrF+d?5rzA$_JvF|LsWAUr2ht`64sZM1oqz`k&$=S3DbdF@N
zDi`N$taInaA3I`fK-M|(lB?w5qn^9OtNTHLFGPl1lh|Q7N@Vy_ZOWvW@Cn2pa(yVJ
zQL$yviFm8In<1}>C3e}*CbkrVN0G#e`a$DEQO>y#2*3Nf57lfb%w4BW9f&U{*0#lN
zEe_MEcau*p4d7qT^`NqgsR=W36Y77Lmj`ooC8m}}ZA1Ev3I;RqGl`2A$5+4P`muY|
z5z?Ma1)4f)8FE2BFINrAEKkl~v~#n++l%kEW^UZN2cs0US@c?4CUbRRd06etw5e{h
zahUo2>f{JLrUZIYTQsMT6JGHf{#x0%6$nSRQ`t9%KV#9iQ~G+p<t{7lTF0!3m&20$
zBlL>nmJUc04%r<i<+_~nb=K;VZ2kFjR(vi}+MTj)W_sGm@M{QiHjeZKlrg&e$QyjR
zhbhV;#iTw#GetwmP_52>YE*cxg427}dAhN=RI@$S<dRLw4;PmR*)6*pNDkB_wYkyB
z8iI_saCiJMfBkyd^dH|W>UBR4KUdHE;P*N@-tpapkB`t24e9aY#HGVs+?*TT+9kw>
z5b8i5{J3xBt)R2d{9KI;L`2>~9D=mm8t1!%t_^N<74}o-u~J{I=DvH~vL?I(&HF+%
zQS^3X%Jk>fKn*J?9lMeM2#q3FM_aq?$*vJ^#in$v6zkq@S;pheK7e3U=cRQ+3PhI&
z(B~q%f!bobt=PJd{aPiI9ONaHL{>~y)v00ZC|>=Y4;7%E^9$}V!h+M16jdWS3E5nz
zm=h5|=Q3LRfGCUyUPCvzvb>P4Tlfp@WPO5?!yHWU7SwCMb+YM-0%v;P)Al@iWFbsc
zOqsN%+s=$?^;QG--NUpJy`=K`9^_*SKbL3wefcAH(NS4!C4O=*UJq?b-;Ss4!E>yv
zN6T4MH-{;%$Eo+vOhGJDNn#)*Y$}-wMRJ<MyWNt{_74piFAZI~bZI)L#O7~lK99k>
zcr%Us+g+{0Pa<Buom@?SEo4z&%8h9pxIt)wwYBmAGxn$_YfR6~;9Ui(1*Do6U=2X_
z9=w(D^xY#YEE3cQAR^YzHU;7lCThhhCe}GqnbTz*l#+CQ@#3m<W`R(<(LLLu?mKt+
z9eo6KRnx;I*<SJMN<^6zIWg&VRgy`<`FWvd?vzH~4B;-#&>Nsd*XO1xA&~%P2oY7C
zIc!Y#P&;o>4Dxb!pa0Y4l6K|?j_a={4fXX2c%K7973+KIzb?Hr&#?UAopaCmCR(C?
zZnbB5w^?|2&Ub|VSovWw(Y$M&+qUME%gl*=!IC+g*f<$_yiPMeR*!1<SzxP-csHwp
z{h-&f=zb9;<(-nIm49J`Qt8!-drqw8pU%>0T3+4g471R$*Sl6WE=&j*rOj-MxPRmI
z_^_^{Ro-|fq^t-3I9Yz$q;(`LN~_D!VXnLuSQ6$^xhza6^IPTsE4Y-PByRU>D(bUr
zpLa&r>+yzRf%cp~b2IsWP{zkh_>P7m-=!a5*J-PX2Jlv~@E>7!Bj2I9O^VTB$%@{x
zb?C!KDZ!a;FFFD5_KNNwE}%^!(^kjJ0=%j)!6nV|*Vw&Ibs>q<<E6Af;WzXa(nKVQ
zP2Is75<<%3-1z>9>lNWY-rkFF)cvgMsPcZ1H0z~TJSJj$Ye#=fFyGf&{isaoBGCzb
zVVZ-7#WxM74jPCQTeh();<6?fpN~>cg;r)3`HH^=1poT=>(=-Y#9V_Vx>$67@Y~a>
zJG@tl9P61}9zQuGZavi^@~21>in*`KcQKZX?w;q$%QUUOBa*!fkGASDy=j~ICWKH1
z1_9gDC7-@Cm7Q~z?Y4GqnXRHb?}q0_TnTsSSa<ONwsgpX$6o+IUH9~6C6q;luYGuw
z_U9Jc)|x=O){5J=tiM{f?5LsNQ@F=zMr)Y+a_V7OS3NsJFK5gMF>KkvXW*bSqXBb~
zR?!VZWcH`3?~XGSSq@N+yD|?U94xHERfbM>W{8LpH2ZPNd8yr6N2lWi98AMIe2^=5
z@TBR%J=VEqt-lf?T!MUF3RZ76`|gvfs66|W$t6`QC20KUd;z;0&y}KR#K`@MpB`;A
zZT!_Z_NS=*)RT<j;^Hq+(CGm?738G%+jDm&^j*!F)q?R9!zc{#_#Zr-Wk8i%*R>H;
z6a^FkK|qvHx>HI;LAtx7rKNL&96^+n?vQSz8>CCRTj}oHz~-C0=RBXkVGE1<UTdy7
z$GFCTR3!6X04(b6GKSkUKzd;DVWP(($p_Y&6L_M4ET1~d0J}AG#B&885d9YfkYvqD
zN=s}1d|%fY0KGZOab$0MaEbv?RZj)G+`rF`V&E<u_@19%R2rVG-~80*m#f#1dfDe#
zw>-mZyWE?=ep!2)yyj%?YvH{1*})+5NZ#c|IP1K4IF`JTfzV~g6m)is6Wz0C!=zi!
zVER|s<8>^=BGLw(0Z@60Mt6W(p31XxqIO_hy~gPq=|EZG4e-huC%Re=lE)(4+=jY?
zAD0CP=GzSsGHHgD7rpHNyRtwdV6?ibuJNi0rQ^mcJRJuzZdls8W&%dA3Gmu_1UE{T
zO%m@7DS*bhtnf7qHzOIej8bG%*pRz>*l}lF{PXJ_aojFP8-^Blj_uct_+3q5at=0n
zy0)#YzQ3d1cc?QAoeLHU;TYn!9H5%qTsZ6PJ}MvqE*gk%I6pYG)tufDLVl134iV#4
z$mM%zdo@W!=DDG~b;0g{bz|w`_&Je`SfqQ|LB?S$*$amnn9Cf*!sz&7rRmZ;dN4y~
zv*WvSu`5ak<cf6f^0v(xrx{4-CF4%4i<i0sB%t#-lBZP-=0!h=8<0<V0^-r^*uD%I
za*J)T=~ak4xx6^r29pcJh{;55bbvyQ<sDw9#LZ<V*yfn=JM#Ygv0)A%%_=pNF>-z@
z3L|DJjLe$7<Na9Hefmu#>8bA)WYhFDd<H@RSUlvV6WCggO1^n|QYRvgcuDBrX?;LG
zPpqh{Bz_2jbv;NR1>s;(g?kDp&aDE-tu)z;kId(#Xqi=AlYv<|;gn>7_Zt{Fmew;9
zU}(T4dr<;m3Ko|V-OKyE^&h+P>7wd|%FVA{LWn2+P0z#QG_YU--A0AOHBR%~XPEoI
z$yr^bA33NK+K$H?i-?NinQQ&)uj6`wy@{4bx{g@yE<XUC@+vb9iP1(cVh43*F*!x;
z0V0T&3h%QjhvA4W2-TU&#R_o<l-1On%77`rjxg?Uo<em$8McnQbBRL%mCwxaY(W8o
z)lt7^kYc`KA!N4(2_1a^sEdo;w$a9GfuoaoLV-NZEV<(J^9!)dl$rNyYKws0!gM5a
zra(u>ud7tF=0N_jQ5Z81NFD|Rb9I}vS(rRL8n0j2hE3;K67bS7Ul?`ZV%$6coUC4&
z@6%G#krQx<GB9mH)_8p<{c1dvHjJ>HEVM^vD`!pp-8zDII#VlW=@_V5nt5<2T0L?{
zkG^s9X6K86C_cxYKH~(Fsg*$F;hO!bO+nZjMUiW-kjJfepUirlxgJ-g=zbPFKDM0A
zxA=@a1U9Sj)SskRG9_lC()C&1G#5rta54Ci5I+9|LB7!S7Fiqv)jLC{AT+fi5<}bq
z_#7%Uj(UGSOo&{O2QmHc(Z58C|9jr~TCcHFT9GGaBtCkv)8A%;`tHBgc;Z9uvhW#q
zX0nR&a#@r44In_d-v7cV8&#`!*Lw5Dt1|%9FjqD{nB{(VD265!uFzh)BQ&7vFVXV$
z^Ma|tr4q@OxU#b1jyN;mjoFv@5<Qxh0j*Wxt6*H_VErQ)@whLoW_Tb^jW^AmPF?4k
zzvW?1*G+-{1<D~&@a$zWtJPah!`h(i|599dxvuUUZcc6kM^*8s9+=DqGDgozi&WYI
ziEW`XcArvvV6-wvisbe%FZnt{F)qBZv1-K!vGO{P1kYPKA;<(&-#TMCj#jIr66KQ<
zA`2Q+o}%t#NW3g=(*WoY59eu&R_xvB6*>ml#40znB0rzq2dI?ShfZe~mzZ(LpDI1P
zSlZw%4sgy=DVT}IBrfK;W)7NQye7q-cS&ob+h2yBPkNv#mk-Pa3~;ZwZ0;x&^!Y7Z
z6>jX>7Vlnduz^*+tNc5^ngDXvqa@p}l%;OJq%sR{#xitu6yFX58R>A<IB^_B=`6B1
zV^$Ezo{-1ka?n**=U(7{I!k>BvpK|mH+LAVm=$wZz9bYo{sJvv$YoHkVA(g7SNdLk
z5PKz?`n*Lalj?CaRV)m2W=fMCz(H~_RrY>NCSxNx9r*e?!(A$YLky>IojWZQ!LBl9
zHNJNYE@4O@-D@{&`sN2Wyv@m33w=Hv_g!z+Orpcp!8Rua<u3lGDPCBsbrQp`bp~Lf
zcLm$zUcT7#V-2$3o)Or8pr+ZzcD9_T6ezZ^zrR0dCH~}!InRch@H8A-zq2#<le^`J
z`!w2n%yznG1L;!LX<f<z#C$!ovuho*uy!C>F=A9JTA8Y39~r4!&oA?f%q3z!QUc_K
z_c`T7ql&h(T0Jp7{=wvSJ!s9Ob=XW7+M#Ht--pEDnUd9GhV8YH%`e*1iLrSJ0Y~7L
zC9+a3h={Cte&tECaM<Y;I{WRU5SVghaVB^@P<)Q^AuqnrXZ5$we|KMajV?M8#6e)d
z8mgdTVUb-NhF3Om@uP!0ftqRN&97V*lVf8&FvBR;WRlC?2a<LqSX(%|I6?glCBch}
zbYR)+#-O0czcivL2Buc)Tul}Xi}as<n60a=d~}g)5nI+8Yo=UK#+A_tAD)v-|1~i-
zK!+P`>{`z?_8X@KS0188m{{vSt|Xf*uRYu1^TEB`F4?#$W}J5JnNdCjB9|}>w_;i6
zZ6_}`-{doBmwbTyJtXN9xGnW<hs>wIm_aeU#B5pGY>+`YSFyuszh}fT;ub^jVvJPm
z3=6IpJR;zH77BOu!6hqlh&=eTX#Ysm84HUpJ|{RvvT?dQ&unx<v@HauxHG5L_2|Q>
ztAWGX5beAsIX8Rq1n6mOoFd)iM@GU*ia|@juuVsRZ$SF+4f+^ZeZvloHwG3x*zc<;
z1{wE8ThugzOd&y|{CwMd%yPP#L<X%(NsfBnKB8(jTs7Wk_j@-n(Ve+vqj@O19X{pS
z#CGV;%cW?qx>(@TZVoLljPSZ1ZKMVX!5FQyWlv3~SF_|}gI^QycT+&B;|RO#*`e$E
z&V_Fyfo2nl?d|Pw_)cDl9kz#YX%h?*3S?dMTSNTDHM!#O4W4EWVaNY8XFlwQ&bZd%
zH;6z4TNFeBBVbbx@jN@GH!zxK?{52sSeXCmF#1=R+bxhfPsIvaBYE8|+Q`<N;UF@;
z7|V-K0WIwC8{|~$o$f&<;OwQ4O1A6qWBoS&{&FMIYYedeqt2(Ka`1?pnw;%?az!ip
z^xGCL9@z%Vy*i&VcYA>L3+KC%CET~mJu%2bC%$H6ly>wF%+Eid`VOWQZo+x5wT18d
z>jeQ9yFS}G9`oHW^)RlK20h_(sf1^S(YS(6Rv!0Pjv2LUJ{)AqW&cvWtCAKxqie}L
z!u<`;S>V;XIu$yZtH*v`JL@)4v2T5M!$-NKg~Ujn^^5nXss7yiM`AawPsu8QVQs{*
zDS1I}cR1XG>LCibo)RRGK7AJp%XFs3o2&0F^qu{$@@ZqIQ0j~~4FwG^_}rkNf&_T8
z;`k|KA_*Eku%#zcBu3A^V7nIDtrl^O+NhR0bVKD2=4v~*^Shn=xOVKY`r^Fh{;RZN
zl$Ajf-=ps6>h~bJ9!!_MjVn~}T}Ai{f4K9H;^KYS1xrl^pDB&0YQ|kTf=RV)Y@g2k
z)A?YYKrs3SCMJm$I45#mzr)$VCEhbA%ZWZ8^R(-$t*L<tO~_*H>7Llzwy7PO`Nh5H
za3<TP+WzPS>!Y}F7v=lYu6CnE;*pSC;T@<cm6Kd}65a0T1Y;+)e313)$?X&t#%t`@
zV!%$FYm);<g4IUFC?vs!hK5%kuZ-tkOoP!-O*)@fty1sw%i%h(KlcjT$d7m0T@qG7
zVgYuzT|k|O+XMt$6Va7|>r7iM(lo+RD*DA{k22%_akI4#gACU1kNcr*W(@zpLgSpb
zb*9}oO;fkmc(|yNr#|e&PC+p+5i=rPY;9*(!qtmpq-=XgxUk1S`5>eq(Tx;TtiSiP
z{d!p`*yI;yPDygY2oviT*=L*(r>FZ71U(*?r^{DXSbCKaOL%9Uf72Jd6Grt9jzSLM
z!2g*j-%jypWd*Po(WzwVZN_Hd`Mt&bUoXJ2trr^&3yOkjdkCK2?-vbqM><>LeD)Qo
zN~IL7t1&-abJ*PKaWGtcia?z{pRTsoDs+o3wWn(3zc`Q`Pb$sPeBYER7P|1RcqC%J
z`}0kK{8=Tqqgxl$rCX}|{{6><c2t#bU@FsEKb*WLu2T19<rnNn+2}_4mV;2yBDaQ#
z&KzjDwZ$#1HFcnjvY20-s37JNWbmtQ>|IV%cLgxzJk|4=nHj@Q^*k<>de)}~&T27*
zMo>>vRKCq|UW1A`%F03#ourYmSe$d6c|aMz{!oY;jb@{ruDrd^I8mq82(c_VYCr<w
zfT;;B=uafR*bFT&MlfS;DmtXP9(U5GJa%4aK%C_UvMClBbnIHyb9*#2KH@Z`TL3^g
z#>DJJee(&ZHLv#F>4{5hbrxXBK9h>gj<x;U%DxI?TFS2B7z0jr$H%!^woOTQ9673*
zCSnGbiv^xK;&en-!j`Ev!wK=;^WA_6ATFSXFr+U6gGst07d7eJ7x!Nt|N4w;RLM_6
z)6PQ`d7{5h4rw1do!i{f@Ald$gP;{-5Cuw8lE~biY<{-m$ja87{j}tP5)*d)`)uWu
zpG;5{y9Yf`(}?Hy*mV0mc2QMxT=%d<lN}3I!qSAd8N8j(X${9zjfXo4K%lkmFk35w
z<Ic}<5LG&y>RR>j?*R7<QDUgrbBE2T-Cv*T3Tj`Bv?`?zXAhqk&J-LUujYIwJ0+b(
zYztf%0oLQdWH4=aNyBQbi3wzw(y?6A>bUc3!z6)A>eZ@8V3}-<1;1#wn>gGD5q9jM
zMno1+ZV)%^uFlkM_u4!b*qtydNaS%gokn7lOT}G*{E=tN)<=&qF?~RgGR0GzAfh+3
z4`wjUqVv|hq?Uv%Q1dOFie-Z+IWE5V3DxWgZ$$CBUjnrfe7S9Oq)hya?voqe+jZ}5
zR_d`*jefn)OpK}0CzXi$W-ZtZho_n(WlAt}@orHeysp(+XAa12VN6_gzO?Q#C}Tg=
zSc+<QWN`P~NOhk3*3fDl%3l4yhv-JvWSeN?%Zr=JxCt;!hg2IM=zEIsjT(Z`QNVTT
z80B@$CL@{``k@fsmNramW!|4oyNz&zfsK_|d8^(5O}?@BfsBC%*~k0Gs55e+HuM-a
zLmTsr(%zL{sEbzO^c<xeF4Kb*hVpxak4$UEi&bQxZ}K}w&7VoDSUE2|N15AvOg69>
z*oYh!Bj#%*s{_>Xr^`77^#hZ5<#lnagQ|i9{A?fputOm4-B1+>l7FDz8ptk9k)UDY
z4+{I}R*COvu1J8wb{4Noz|pqc8*A(qHgucurY>Cbd#PrC&XMWAdWk&REdSWAw`tUH
z8@u|i?FMjx7E}%EwGoF`K?W<_ixOuO>jjQ0WBnC9MQIXwTK^>G0f8hz@S^@{%YrNF
z^r4P2+izhCoio?~KvSbJpCZ^xNB6-$!;{l&<~+X|#VxkjTf7h6(1|Dd+|n!_fDNfT
zo4Gz8E_XaLxtO;*UpzgOcUgJu<&W0V!y9Ht8_v|?28eS$Ha44yAu;G)|8^UNCfHB&
z@sMR5qLF%!k(6y$S666<%FotaJeNU!*qq?(O!xBg%2IgN3mWT49pcc{<jD0%OI%lL
zuOVBoIwXA$2RQ`m<Hksgs;hF>-S%9=Y6hfv$Yvbo8W!`8xfa(W)gE62XwT=nrQ=_a
z3)(0K?umOZtY&;^x7M>b9iWz&abDKaCkI=mh>a5`FRxnFwo47f#zud}T$X7(H$Wcb
zYgKWfE<-z0eL$J%#tRR)jt686Fhejc=tSh3Sp*jVqSU@mgARBYxDAB$Y?VQ)ZF7S7
z{(ZF{uWyXkwY)?x^1+?vF*5+8np=Pl5tpP6Xbg|i@yll1)@{sl-TN+}aUdE*TDT&)
zoFa^A<)jo+aYW8jp?~I}!d;%|fiwXOey4UjPCW=aYZ{>SNbh?1%k$z2r6{JB`fB{t
zs%E#Ulm3)KfX{9vxkciD`4fH{YNqHAND{a1++keO$pvkXp;Zl+2^1or+19i8jOQ-s
z8=EN=Lhr$ix}>jOSf-pM4_C1Y@{n*}YDKmJ5_r1a;}SsF64Ici`w~&GK<;p=K0$<>
zBfOjf{Ypx{{HHC`!4aN<%KqE}V~5QF+ODKzxFT-XvDd*1e&us0wO^<=C6|doPCE)I
z=NKI#Ri;7X{-t(jDya?gG47qgPFg~3cf;J*%BhpAyYoQ-5+VU^9Zpejmd;r;?JDxJ
z@Iw=iJ+Y!xx5>rN<Q~)tAjP6ii{g94Iq*>A?c3VZRuZ}gyj8iF;ozt?%l{E&8#*vB
zkl<q49!*l97%`&@nwDAUX@<(+6t3_BoZO0=y?uB=j2!eXYFZ>q4Z>B1(~x<uQjqXg
zme=XeFR$C%hVC29-^dMl3o0KgrV71S3RlTrLd~tlh0ZQ*kYLtAK2BA_9uqK$@;Baz
zi+3srCk!!N-nxA|xXKfso8cedDFEq2F+3;h<UJLvIo_&nrQV~2VkABce}TvoG?m+}
zU;i>sjK$ck!*wRk`Lq?Aq_L?<Nn7j|;6zee_+#bGEC2`r{oI4seZ{>v0#>$Bo*L)>
zmN)XB!1{XM%(1kp*gl-DOk{b8l+Weh+bay8`jeV~Z(}4g{U1>Oc+bzeGf&<jN;MlR
zQp)-6OK@o8D+hYCJnUS><_=xg`QMfUR_**jo!qm(0n_i}uHZrfw070!w6v?I%L&~!
z=-W5BaWD^nI3ktEC8hQhQR?&94aiinYK}H<17pg8Wf5pFsm%yF$@7zP<l$zD<!g0y
zB)g1Ic;!}VDAh<>SFPIPcM%w4z$|zfVGRLDv1#0uM%`;}aTNj*P;YnaajI5N)$fE9
zH0R8>ilIYwB(^cI3B)h{1XV*0lYurFepZ^vwFZzdy>Q&ZkDfkhSL;b)bCu4|P%7M6
z|K|p@h%!t2XBIV{*9XRFmfO<*@2rFjM}oX*rCOJOME8WV2FwQ%(D@v{>VibN@=3?O
z7;h#13(i~hD)Zs*Pi3krD-A1OgM!(>yWw+UQP~Y%r-@8C)LlkH8L<4A#Az{caUBh-
zv>9qkxpXiG5Ls?e1U(XXvHvR_2u3>ahoah4jYBYD<}r={zJVJgPSw`)BJ)Wi^1qzH
z`@L0HjQ~=%srtxt8-KOauHLq`06E!7JCvd9$A^ouyD;(EHbpEC(JJH~YT9nWxqEE4
zb<mxwMmTs1Y;bdsch$Nc7FpLuyeW0Cm~8K=cuypvtUZ9VU!N#9JDV<_HRV=%6*ABn
zpQjEAK%YGX3sYpw=a#50hd+MIg4^RMZK#Vg|5;y9{z4$PgbyD%?kTf+#ZTvbBM{(r
z@{@k$FMZPoUn2mWIj~xdTdsjWyX02rUVwU~o_CcAXtd01Ro2NpP8xXL7Sz<hkt?40
zy}%IXzctU~rFrmSFunMk?BPQaLYJ4*$^(pc?e$tkuDzb-<<Z~oUFO-18zI6s7Y<(2
zJ!i)85R>-_u!rFryJ6=-IDN#r1ZZmyC)TYDxwHK2zLGtYL7l{^>13UMuXi0lLG<Ny
z%t&xoo)0hN3|I^4*IF*k&r{xDwqj=HB_xT?SUuXiB0AwEf-#A{*PVewan3Vf=VR!?
zx754TWPLw>vaISnDvq`&!j*`ueD>^xx`VXMtAu02&*yY$%Bvd-q{PHe)pC*~UfkG(
z$;*|`dZI|;vv~N>_TIq(2*=#B<f#|+L#$dBNo>^xA!9OMF)Jj@d9f*+gGR~l)GZ}B
zIV`$eMp!%5&6SdZ0&H*Lq1O$&^Uf=;(O|8On5E}qt3Cq1Pkr|H{k;Q<oT(?|u4AA$
zxkQyy`p_o|IXVE54b*ep9i6-#kN0MKj%Uc2eV!M0bBPq!CGdi*KAgOr?xn85m8l!+
z245GQKZdd_+wl<0`QqY=X8yiP>#DhI@PTkF58x)?kPBv-Pr%-dfq@i9ch(*IIG<S{
zVsm2KGj#(TWHw#{6Ar1A0IG1)w+L{88MkkV9p>W3>XvqPg=m)EUb#kxUVaNAUSKM2
zN^3DF#V4n@TEj)%v@<+)s5vJ~Ohw^AetL7ubM1;SA|{XIRO>@Ma~G`VAD3{8I`hC+
z!fxN$2IG%p_pyP09Kz54IjxtBe=$DCkNORGv>MClm<Aaf=e>@MygYr%%v|-#xs`s(
zUI8IV_(||BaC)S-JW+L=oo9;7+ghb@qO#V;->C7Vr}7scV5%4cOcnEao7plsAD=j%
zR%&W`1_+4K)4*|-mYPmYok9I9?HRSiC$TzG59$N+jUNiEJ~G<84$n9Rg?yT5P2nyv
zl>GJ%Ao32I|2)OO6pUEp|Fkxt7<BQ%zU~-amW#h<+vZk`PoL@{OS0}P_4b<1;on(x
z={A5i(01+FQG!5qp41FT0Nx*yYH9Iz-b5-hKliAikF1T5ajVsI<BzKqSY*PCT`uaX
z#bHuAPA+JPDk;%B%z39L78oEC=o`Ry-~F`j+gMY^TwuIdV8{IL%D04Si^`#&b~_HT
z_T8iT!06;!ZP#rB9NNUIehS1Wg1@8wG)St9J5ws|s{2+x>)gvDGaitCF$2y!A&a#I
zsNO)X^NFIXp@H)k_s_SR@|z^5!&ufwyLLxMA8qXAPXDU=1Ap&e*KT)L(J%~O`+QwV
z+H&&AZev<|{ZYc~PezAJYc=3VLPLNOq6xd0g8-nv-4^KDJ)yJ*wlSfzjV?wFl>72#
zIW#A9_03>kZ)X=ygb>_f8;`2%saEy(b<|>suM`nmyj7JaiUqRSQWtXprcPnEKhpnQ
z-dN4Y3i%wGa{cM)JmJbVF{$caJ~9$Fv1+Gnt3B_mK--|Nej`}P5|S<*gjkZSM)Rj(
z?CO-2G@zD0SmW$x*rjr@bK#hX;1bwBrvr2fIs4Htc*98^s{1z_f*+x+hV8|E*bTJz
ze;2+zK<-qRn-P6Lqq!Bx)H4&_8MZpWztiKg_39cEN;^<mdX3P=&cWu+jxFO7J#)$!
z*>ESRpuOdx5T1I7{+{59v)oJN%8LkQoho=<UwytQbae6rB-IR~&IW%{w6@o|5Xi6_
z`^zR0fVtFhH#Cps+GHz;yRVq9m4rt^vcH-!Xnc7divEcdTB4!oXlHXPYjYaKZmX`b
zksss-YwbSe)R%vrw}`zv-O%6A(bQe+MjMobmbkVk;b?KcPWQ}v)`9Bn8+rrpTs<rp
z1%U{9^`9I2AZl)$u%iJ-g2#NoE{uhF5EDayh7k<@POkUAUI21zo{P%~HB~7VDx_V?
zM!sYMJ_H(n(l}CqF3j-ida3v8E{|WeXt~vr{$@R!EHzV~(gZ1>9WLFLMy*@lbU+W&
z#s0>`<v@XaU)dXF*5Er2nfyu4Iw4jUw9jUTYuxQN@i4i*>V9)^g}~-M{G0enpT0m2
znjTrI$`j`s_8;)3ic4j}i<smkSZ7IxN0}NO?RRMqn?=M0SZTh~au*9V*oBxfbVT2k
zB#kdo7q~*_FPB}n$OPRCph~eh9Mkd8VzF3Dg|NW?`%p37mK?p+@1iflYl`b!v*rSO
z$`7i-rUvl*RJ@;*<Dq7hKKC-6tsjI44dBuK)D%@_%^J>8?o4d>?8DFM^ffY4rEGnB
ztd8-y?F_hL##o=@mg9AsDUmt_>BNhVieNKQk&==v4ij3b4yP!x7Ko?GoL6w64sP5i
z^6fwz4*S3Lb4P5QK6C}=*~ANAa-y8(Faa<GTr{+|Q5s1em1mP-o9-EqyZ3ywakR_c
z&iaT!rAV`PM0-&@A*xnzu2*1G#F25LozCbXG4bgVNdfA7FlbxKsUFf!TdM&Dn;{i@
zu*qEvLL<NwtjsMa)V^+M+rl>2?&AE_>!p&h&{vA?mv~(287@I^ob|}fw85&Qa5wu_
zwS{omQx(|rPkQ*~4`Ydm`4E$39=GYPbceQf_DnOWM%|I*Sf(C68n-VSNfbFo^WR(B
z9_GnCUHIFh^ySEg{%?ja%Nm`xe5+O8Q)=of1t`9*^kYlUymb{scC}-vjWpBIV6nZO
z!yb(me}xA9@}>SZ)1TO?36@WZ&rH^~7%e>KaNhb<TQ$}Htz(6ZT479#RxSe`62Y-A
z)sr6`nbYvq*R}!<Tn8s-yt$+pO$HB6nS~r|Y$*e#Txa$lv$7vuTzr_TzNbw0^vdmw
z_6bkSKzD7b&U5surIBI0uM-)P;{B6*Uo9B5UU1<>$DE+tE9|6={Z+3tWN6}#g(Vas
zr2}e3?Ah&YIqrpRxa;t;vaqm}u-Ka_seCY4DMr2j{Xj^$^L@>g(he<*<+TE(&r)fP
zh&?xBO1USND63n`P&+F0kv3&@tjmjH`J09RejydQexX+ABZ4~QREfW^7`a&DL*I`r
z&Fw!-x_wiGIIT<d({3X_dCtt?Xq%Wmf7aV2_-J+zQc<U;2OAm!iEmLfHesM+%+1fK
z1}iv!l%X%&hj=2_yJRmkpWFkdSW7SSEbU&6M;*L2HP`imwJx&5>$h~}X7V_$(~%-2
z-Yz|pwpi<sm)FUgh<v1Um(xejQ}xEdV28po#Cv6Z4+$A4lkyuI8{0VJFxl()0*=Bz
z%g0N_GS%76CHieLfOJrJN<;Hg-^ao9h~H%+%*O|l0IU*-!_Gy9@{xQ6$L6oW0VE!J
z=H|bx!o<^H6f#wa06xBonj9dGw6_H>imWm^UF_@>RaF5$#T-Z~_>S2>{9dt9ZyIhG
z77Uv{W8$`tBG!lZXR0=3=;HXT-PVRW?xLaDMR<BvM#he|TM~u~-1SP!@%XN{;Tv9Q
zTaC;LE-c_C4UsU&#eYf8(kDDKb6EM(n~0d$eq~H-(Go_4Qqt1tub~G^Miy`5!U4)Q
zCfTP<Oo~VCCNjnkA2P}QKwI64pH#Div7!geBLQ9%V3YLv4MqR+L=LTDhxtgIK;4#r
zz|UM<WiV(v1!KtNSc&~)nb2?z`-_%_8Bh8#LlFGEyo{<Cb3qm4Sxoz)2iJ8Y!yn#6
z$Drh+kL(H1dcm!ihOtMN<WpsT7KRG%Fu?ofh5or$@WO37VS3y#<?BC<1ilY4r;=VZ
zL60oc4Gc^%G&&YT6}xB0+0U`f$DYjp+WpgjV8WV{<zO>As!0%VwN{}GfPD5r;EJ`U
z%0E;o2W^L(7v;TMt$}A{>W6EC>FybBIu@>*^ZO&0j2^@9%oQue2}DIjw@jy9W;`xx
zmpv|AyuH0yr;oarg%HQn9G<d2H%4_J>0*Uan4W$42wM|g5F+BD0pB9A^sT_hwd!qW
z-p%|+hDe-3-!g*&%b1uLHZ469lW4;`!_#UVZO`SmX6uik^oPC>JP?r~Pw6oHVPmr?
z6mJp<u=Q1n;ZSa-gA)i}y6-c$<<J|$g;3NJ;=;~SGxEcwwZRPXhncb)C3>gKa8XgI
zI|PnfmBXeWsFDg*!9za@`>*9xMFK&1lPHeGbP;WrNM~BfhjE*w-{bg(ygWP%sud?W
z%%W`5BHPZr35kGm>Qlf^92?40E%R_KEaj!2_R<s1iCOHzUfXe7%@5llN+0dRl=Qm-
z-W9||MGY0qep>aH0l`iYH4V-8a5os)7ybO1)R-o5sf|2FFE2dHNX(i#oftOL`~jXo
zUV-;b2eEG2wFkSqKVE<Sf^9odEZ5|(x`=Em?CjHRs%UJyv0rqZjsfwty+6fgxjVjF
zi;U;PEqcozKc3<Tbw{x(F+~n4VJ$;YMJMbfzPQv6I<eQ@U9u%zZ47nR0c^GEY=}fH
zv_fA(FtZzs@2wXRfcebe#rv6a@0l4jjEr9|5nq+6?0Y|GULMamo0=_$yq&Jj2?UM1
z_7@)?g@)nbQpsqxamP%>EZ@95MuLQTC)C>F9Xfc?vvVr|Ec}AETJ|Y)NLu`s&mANr
z=t0dJkx=#mfyD1>=m>4o*Ta{h92pq_XtyM0+zaQqM(=&iN`>X1*7I9zyBefqWa}gQ
z`8xHw5&b;;l$2L7T7w#q0zcZ=Sy=u&<{EX@Dym0wPeJlwdB1jXUDZzuyWb^bYQ2*!
z>xsIjYnem&@DC%fu;RX2FvO{k79Zy8J$X5;<S8Adr*UVwY$nW1&jlOtt7N5fQG(OV
z9Y0!@({WU%8kcme-lnA>I5;?$r^ISjcVHoF+^k7a&i!EJKK<X!<k=DvTe=#=dYhD{
z>;BRqyc+$p>zi7aThn~w+cxv9!<N(d!IDiPQt0SM29>39^Ztq*7p})GdUCzmwUq(P
zI)c4L&u6b~v<8@UPHt|PSH4y>c=P%-dY7jnoyBNbI155N6e5PxNfP+or^@p5X4qwV
zZ8|3lwCXKPO~tMDGN!AYoSnPR-7P=gB>rJlkdUZwy?tBk>8s@)EzG;5K*F$h*Z=r&
zr>?fzaT~=4-0xG}`V+lB2gK}ZE<Q}0wLKsQs<FC!MF*sjQj=*4>bL!~Htl`7aK%n*
zgv{LWLWIVVt5T+_2@s;815N1H!XRJ=ZnVX+yjWmBciZTH_%N2IaeNKLyP%+-1bw`?
zhoC?|oTrL2)Z13~(a<uDpWsKiR#qLGKjk1~Z>PF<o3XPxe6^o{=~Tm6o^DX#t5oTS
z<(^GC`gnl1!InSt^Y2>$v`-VC%Pr3KM-AzfxF(@#!Ia;lk_@(5@9c0z9#^gubQiAT
zXE6$<i}jZ8v6UpV`YZaMYyO>qabf0Qrf%qlE0<|hzuyM3G)NCL=xE>GG~yR~Rm#V{
z=pwGY{I+Um93G?+tz?Sn>Ke``JF-%)w0@%QM2P<afcA%NZzaMo2p|TC-(jl!43`wF
zO=WvWuxHBNed!G*cpjbwp7@8}*qTta&pV$FK<D%#(c?&7w(|zOg_;T=<#Io@Zvp+=
z@a$-7t5Mg8(DLODC3)sO7t*S#_kSsnQsImm(%sX;^>0CMO|Soak}Z*&+n$+tU!IWq
zM^+)?vndnVBen}~)wh0tPyoPG%HA_u+kF^$lk>S(NyR!yo@I9OIBuO|U<MB5E$7+z
z!2QsC=75j>^aSU<+gC_c<7H9=w{l8wux}l=+oRN1Wvbpb=rf1w3Qu`fgg?smfmNlF
z_1$4jZSnDw?Aa&t@2oG7qMwyk#uEh)jp5HF<8q5KqI+y?yKk8(G0Ezi8ys{MbWKlB
z(>{ab`lCb-%M5cdH@DU`MI$34KGeD2S!aLj$A$JEiIGg80(`tkQIVP)A3seVTQ-ud
z<>T=yDr&{=A%U>}b@W#mJz9!&RGlu4TOox+Jq@4F)E>(+S@+K+Ry^UN;`v&)2H<kF
zvW;c<dV#4rGND2kQt(bkx@S*1p1+mD4qvo6ZNfYr%|%%(`YuB2B3+S4B9YGG)K|&v
zR#-tfI1Fs4IXH_fR9h;wJ`eDU6}rG7sjpJamdM4<xZZexkNjjZx~ne=Qg2!YIcNIe
z_sY4N_WMf#)DrFoh>IALHrQ6dfoqn{vsCiAzW#EoplwCEJ_UXMfT62&P=Rh9I>J*T
z*#@&U)+uWHOG|`=d6OkSB2E~NuQWwKO)d?FWK@MUvD42<qVq;p)z<9#V$B-m`3jT#
zwb7hr!*w3pO!dazz64oI-T1;gI);fe$8F>fH>M78hr_cvtF117fZ~u;z~(CjdHQ~~
zF-`&U-oeweyfE72JJiBUJ<%<T!eKDJB12FpLeA+Uj-U1Q1HaqNM$XIh7EQ$yh)777
zRd@7f1qDudS8zzjMCGU@5}niyRq{a~FR%Uu>p)DvJ<he@?VUSatL#SB81F&T$>Th5
z9aULoIX+dQwh#8nK`XDx5JcQ>uiK#l0s?BtUW1dLug-m{O$J4fjqszE`}xI2Mvks9
zx8-V=hAi%1?Xa5BJPKMhyi2IgZ?fhe)LNQKZBs_qao7-EHNGPj<L7NrtSR$zHs)d$
zLz%3G{B?<(Z36?oCita<<h(961F5v8=;0u$INThhq@s!nchh38z8U}GQ0}G8Tr+F_
zj>&Pa(oFDn>G016(PB@|PE9rM-r60q)<+)vRzx0cPz4xzoIhkv=#9QW=;=`?-0k5a
zV>e<*8$ylOZcpw$SR1u^LNmqE@JvdOn9YvpA*~7F+edKzE_7;EQS$j-7)d6^)DlV`
zZw{7|tDtmInu{;J`!rbB&sKqP%z${>19tvBZmoI;P9D`=i(K{6M=faMiG^n6{zK!Q
zpU+euA8eip<?|8WNGmq({>{dEJWL<SZPmk?(tb&BAm0{nK_`JPjtdL@X3L6P(2c78
z{Rcwc+W*@GJPXINU3fJR<bvAoz9=u@1mwh4Ot2%oRMTi=5i5gR@y8n|(Qd&DB*OZ<
zc@^&W>{5`1JB7sdI4?8B9;M2~qb7gmf4NlM@!;S|O5<vTnxBCCMvCep2%N;ke0hF!
zJWm|UdF0q|JTceSX8VX+`OOp1({r;?euudFoGAqp!*F^@0#mh&4Nn^?VS7NW*H6_L
zo_YI4LMW#wIdNCLZj-3xScS>nLKY@2+2F>8JaF;qFY7ucCcdP}+;bFGy4yN1_=K(;
z5M9w-a-=Y}+Zbmbcf5s-eF4DZ3LDTqo^IMy#%(o*pZ*Djz^kD;E!PM^f(DhiVE+I0
z0{SU^)E<|Z%_h*FSA5it_;DV`nWIwcoZ`Zm2V-VykCq9}oFXrcxaTsDw<j~Af?iSK
z4WB!0U^8d@--~a!VK5KZu)gN6uX?Ui{K)bN)%Tl_B!8+*OL71H{X2xe*ZWh>0!T(}
zC*Z-e=^P>!4NQ<N9udu_;bqrf$`$qrvXvms#((f&e}AAw>qWVc2Z~|vq5ZnEt?(;1
zo%$ZO4!qJiotmU~cW!w%GHF#C)<blPV`V8HZCArFIvXeFqG=+)To#^Nq(s;!suX0(
z78_YSc<{iIa@t#i*XOa<W4a8Lldbs6$P`h#%>l6EbJ3`{S(ux<9<P>P{t5=J@G^J#
z2(|6Pm+)|<!Srrb6v)SM7bUg@5yssyXU9UWL1aRU8*}1(?FL2B>>2&_<J<JX@4!-=
zv8StH6o|&_`mAkx%zJ;i!Y5Cu8W>&J^%s9UF`_-Rj?Hl=C-`l5<7$4V8XFpF)w*Cu
zJpQO%pO4HCE%*ykD>^IF{vuA5_SIgh-b8^#tgt7Y?m016>pJw{D>frtM4_2xz$?pU
zhls$uHQ!B+DPhrv?`y<^lVOA`*A!d+f!BF2Y;Unvach26?dVvj3?LoWt1=Rq4qbaG
z9+$85>mExCD|4Q0OjRPLCrS$ok!77Gj_#J3p>4&pE(c@xEngmGB)XR&CPx^`(^IJ+
zi>*K`RAwbFN4=Ded!(h>9m5h05#d}*!!2JZPhF^b#m&i4A-GLkb*J2@9SEkj@eyl)
zR;<s{eD%;b7nte&b;6=n+emcJPji{twPzqva~^8fb?&w6H_Oqi6h|h0Pqq<R(u5#a
zM%4<M42}8uIiuc$AN*{hYQF!h)sGGjhttb0wA*}#%7&HX;vUUd%Ef6aCSnuZ{F|H8
zpSVVHmJu?m<EO;Ga2~f0X1a*B`HSiQ^UpsOf=&=8o8nSJBy|5ZsN`Vw_QNL8bhYrF
z+^L`PJ|S?lT||x|r1RE@)uY(j1AfUGY%MPJ<r@9@K`&YVM49$xB=dztBy%0nOY0k>
zZO^K&%1dw4VKB5S7t>${$+Lz@chI8#Ldqp7GBI+A8%2Ac#s)|V`V%yT!BKk{Y7X~|
zq$icK<O!;3Tn;I^a7GJs(p0_E3gmlR=mOX=a}1(K*O37^pMCBsZH)iC{V<2ad`NXM
zVeQ8C>)`2UsshU_(1y(aBsJg{4rMF3uJ+cuvu~~Q3%0igtW!`lL4FCy?H*g6_@v8@
z%t2lk-{q9{CxX|st@C?SVIPvmB)b#p>guK<M`mV%3p36g#PdFyh0A|zY@-XK`b*e*
z8y6Q4G&&KOI5@;wC^uW2=!(c-1m)Wxw=&}??s+xK&Tz(e%!1Hq=>GMqxn-vCtpx@`
zCsK=YMT^bhr-QlN^Oa_)be(%S__6h<3Fn2Czs#aRu&t{~pUK8oXdKIc#;MS1J0b39
zcV{Q=g~f{-Tnxqq2sc>BkIOw4=@~F8>#)bBND)D#xf_e;0T+ElbrG&zq0eZs4%fNI
zstnl`Bz1G6K1Z2Osv&o#YHfXDIs^RuPj~|>ao$UsEFkK<zI;LLb;-a`^hAG<5K9FB
z5>iSA;gs}6enCOAW%hUIy?k)Dti&!|d2K5B>0Zz=aBxsjfv};VCP`h;(KJ|`YHif_
zuPsh;ka03U0=aNNJR2JwUAo<8vO7m!sg}X#u-4qo=eDr(gTIao1G4Iw0<v6*>2y-x
z8MG%p*=J*$k@Y8lYaK^xU+3?1OKM8Q#!xCXI;C*24bxJ%_`tv|XHV5Mo|d*2$f+Ly
zFa@XeK-keHU*=TX$cV$%6#2~q@`KUY>Y^zsJgf}KXu%IV_c&z$3|D4!*m-ew=w@eC
zPCDYOm}MK8-xYBo2^@fcFq0o6fEYWgvaikhVydg#z<BO>iK=BlIMKK`@B9&@E&>_1
z_%-?0Zv4~U*1~F7g+!<EeC0Gz=24F?hv0qL(!7sN{lXCy*XqM4$MBGZ#LUD*Y&!@d
zAY;^)=oH(dCa4+sHJz`3Y7q1RnoL7O!{Hidi7f($^_c!^AP(WTN29#|_r7LBm&7zF
z8;DWg)1iD9fDeg$)~AwY=qIxm0zu<wQuim-$2hZ$o-p_Z58FiZb3PN?73LW{QU85Y
z@`IlF($W()_)Wl5R%j&~J{|Dh<$9s`?wwn=qWDeR;;Rn9g&-$TyzNRzK&K3eES3=g
zhc)Zmrc-aaDXqqSTJERM9va0I#Hp&O?d#umKhd>(_wH-w^xde2HO}>@WS#HAp)xVr
zwKlw6INX++>m!>A*|Ex*vK=ig-m&7Ui=@pZ!FmLpkAa-SO~unpA&}P8YZm8S?ugKT
z&~jIcIYB7stE}TmQpHz4B@oc58x;CRcwNV|)pw#(%>AyA`+A$De$MqsX7f+O1%3`o
z%Ny-Y8s#4>MGo;*c8C2<m>?I>b$&od*hv7bHz`R;8zf^Gv(BqUhfbz`ABlou(_vGW
zxQOd$eVq8o&{onIJ<wB+z$1I;v?cv(d~$dDwSicczsU<_xpT(Xlo}FeRRq&~9(p>}
z=!4J1MaDTZWA+Y|)r(M)VL_^IRro7Bw*4*-e^l*(nJX@CzvP5wlw2eY@V$_BrzxZ?
z)uEIj9bZ{K2Wm3c;|=BFW#pk*JyM(%f1y}LsP}P>X1zl|>|upbp1P$av2c@8&#>#o
z#PID0_yVmo%C~WF=D4)0vt536w#(_*u-jc+9Ou6kVtUUze^Z~O#mS#Vxe<=DG`%!&
z#Sa5fjjxC2&uI|N-NhScNc(q7lkF)w&6DNs_`gd&^s7_hm6{L7tOu7~zSItd3mZzn
z<zoRB0lsZ1*l|uneC3$z6uN&?GZ$AlY-X#tbf!U{>nrfbeEolvR^~YxS_EYW?c=)d
zO>QMg;D)?TF__4mBDr-vI7r(^(?h;aW>Or3k1g*$k*}lx=^!0XI{)qWNOW7mbwXcO
z@E6q>9a@<#G01O2ujX=n)NIM$B#lb;>2$R*Lk<+Va)+*u`CPo{OH8M~kk2;GKcG~!
z%~Q(3ks#MW&9&@r1nr-n7H875cvZr5_V1BmZbOK$w)Y;IrYHJSPCpxEIB7%z{BtKl
z`5D^s=T8=St{MS34)Gg&P{+bluCk~zYch(WG&!m!YL6XuxetR?j0y+X68wm@>s>*%
z(E?LO-7)bO!p6Raq@r>&@{5Smhg?oOEYQ;oKa)MEwx0}St|x`_JpxX!XV6eFUsvg0
z%S0}GjVi}vt`)FT3zqA*A*7IElKJM3UA^CUyv_cjJb^9mhohvqzKP~=!0P=4B|B+Q
zp@7d70+9H&VsFFE|MwXg20FSj!{s6XmvT9*9gqKHH_B%n{9YYgb38isI9up=fOR{Q
z7jB<{m`B@6b(|1#0YL%KE=?D)<K}MZD~aW0{$jh|8Xz5Ct(c=c-J@Lio`0G(1Em!v
zP0VjVq|^=n$}MJjt+qCxdNdx-5bd2A%;^2o33te)XB71P34#chzm1h6d6QV)jW9n!
z&R)8-wYAW0vmja-EPpt<OkN_*B0Dj8ZBG7h&-!PG!VQ~}JG23=gLCuqYVI4T<pPw>
z-6R@t?r)xL8}~*DDxHpioYP&vK~wq|0Z588iH8~`AHefk;og+~L-?k_X&CL-<eF$z
z2Jq8t!I%uDk@yLo6v~CUa}6c5tTb_Y1Y&W?CS&bAowfSHIpU9RqDyhlWu&FGKJ(Ia
z#k0Avj!`7sUz@JhA0;JGHdd!BVj+mMfB*WTL*$8aznr3HEZ_23yvJ4)7sBZC%_$BA
z6W_!FI>kFvCud*sG`I=}GBk|j7m=lAtgMwX6B1bjOo&}b6EXUx6qVdIYVQj^+iq0{
zx(vnJ5{U^>dIWxU49ht0sp#lTK?}IQOz+~+|M{|Ve>+Eo2_mFwAmn>$Dp`J!4j6fP
zidk6YwxHVlhkS{(_UFfjb9nyMG$x&#oFE@$u0YE}&|{aMle(p8uvjM19kLJ%S5Ijs
z7&C_5S5!V8t{GwxxE!yxS@8Z8A}9OB^W(>l`inBXrQ_nPsZz6J@PurR7oWw~*N2CD
zJ6?PN@)0Ko$5hSg@n1@jteP|2{pGD`$M%VdiNQhJSyWTG<xGX`@sSxhxvvokr{z@b
znXzW^Yyy}b-A?1K0VVjhl>hI}Dxw&(LJXpKgnY^aJ?;98qV}ogJc|qUP$Y?Z)Cc}h
zVWo18Z$tUY-p$|JE4V$gtiQ=IpD)Ts|Ct|W=6v^_27e;z8!4mO8=k>CUzO}8a#WZ_
z?vhIe49-87{B5!sHhp;x03z}3{5-jTK2l0XC1Z>g)@*p}Efj92OQxkGL3w|r?NQ@j
zKpxUhP0+@fjoSXsF{l)~=%mBPCw}Dn4B)D8v%PmKru>6g<VJNZ_|A|e+k1i^HQVG;
zSq*kR4V!VvqM8AdafU|?ctwB#CLQ?2VDkR-AQvL%t`&0Jn$kNJ&0?gd&ncX*OS1vj
zT+#3Mg|^Fq(AR+``ca1;?GQ14=4JM<nSekSte^ZR@koX<QbD(mi@t_1DdA}7YaGh<
z#S~ht;c8c)68kH+r$`&#LYRJJPZv`Sd*2WL0IA_3IFp=XsJK|E*;<?XBTO*8HPCG-
zg>hYvG-a|M5EaOy%NlO&_f`dv@GYS(sugQf7}=uz>HdKmWu4Ue62!1FmwJkCzOb)!
ze*@k8wVaw7NYJpX;J=8fHjZ6A>4~ofX^7@&H_7Y<MxC?WgUw&ztK(pdYa2@bUevZc
z4NjSdWO;gj@pW`&IdeQ<;xpJr?UCxs1^@$Q)Tr@%>*3VSV{KE@wO~pg<ngvEa!Bkj
zXlJ|r;py4q7g5`(SXND6><{j^9IX7<YX!Flwco>w5`$pmSsh}1^wQ7WY&5r%O^x{C
zZWgER?<l$Ax<pUnfNN+REqw#OlYO5LrgK!rk*DZA!T0^`AI&94*ut_;i!T#Tp*umv
z!ig7IYK(mSJObTfT%MKswVPY+Y^>han^ytZs$@!(JJL&DdsoyyQ05mE7X$eo>dsrY
zlDryR(?^^23Nws(#SOj%G?SxaK%mY1oSvF>(jUlNXliZ-^s%v8k!fYJT^z(H`sL(Q
zR<>x=m%F>yIjd3PK}thQm9+Owv*#q^>TG$z&z{u_*qu&z5h!xmI_6$zU1D9D_0GoN
z5gelyu&YvAm$Jxw<zKcQjcmm~ioB@t?$kDb%HT1oXz-Z)ZA!LQyf33iqVCq;=8|Vp
z6cROOONVjsxa1Kh#0=e%-F=vMliqbK+GJA?dWSz#%sAe4R*NcS<6OKr`$zOk*gNOY
zKsZDkh;H2w86o_lY?OOKb^ZPe!~d@f_#${Y|MB3?B}W!RkmLPF#OZI^#)tFYt7&5{
z{lUBaMmZh*L0*BN8b=={!=3JeYl`ZB<DuyLbbg=6FCgCH`fCepfnGlj=NNvakmHx$
z?ebIuUIxPK57II2;?s|j_->R&MbU}3=eT(ZPH~W}5~<An)%y4Qqluy`cz)^`{$16y
zb*tw-W1{jFSu*s%_|Z2t-H~IZ0TZ`$lDo|mg(>+pQLkU;hG2`Rf4KP%+*Q!p$)7GN
zX>O<%vX!vdZjZI+OSjbI-#7X7CcQPi$6+G&8&CaR|GW2d&@%NuIpM-L?1{Z}CK%NV
zRJwcprmu4-V@bs?zcM-P7FiuV0)LebobZjt&boJ3bK{r!FmWAImbs~p|2$aMK<OWS
zM#J_T18=uaH~$Fy-w*!a*7etv!pga+Vzf|>cvKub;e0l0W_<gucf_LB^u!RiEq#w1
zH~J6Hq>5P)saLtl=xI0lyt8Ckl&?M?>m?0-3{jyT!KL8Au9a)!c72FM>S>Kxt2%wh
z{ld~`2l_4VUKU^!`l4PZ$rF7&fNx294^5WL3S*R1K;WIqQ^iM-?O1Q{67k&&Dn=hX
zko_VmLw8D4ko-tQ6Q2nEitA28)G2}QN<G=$+E}Q|=~?m8`L^e;p_Z8+?gYxYcUKTY
z(PAA~x19-wW&bh}QC(4AlYV99@klXo-@`W+nEXAR)o>o%ai7(Mjkk*#10(oba8`~0
zy|T%w9QoCbYvX0=c<m3_RX*!Kp<RPi^2)iq*Mgz7mdvN6+Cd%JrLZS3Cc^y#S2a*}
z6GSFxG~z?@452Gx)YUv`X&nlO3l?v*Z*Y7LDZ90G^?$Pr7_h0y(-m{*w}?m3iD7+{
z3<y*y4(b~ktMS(_?ERT59}|}*W+=)0MEM%_OAp?wPpsj{(u{~|j>4uF{PyZEb9wy9
z$G`bVUcVb(C??ejvJt~gom~N|k1912;yMq|^$7aVuG7Ky$vW9&DdK7T>iCC~nw4t6
zYS#P2@oD8&G%2BlLTN5jD;--UgJAUP4S$s@!2w$Q6Pe&tk>(;jYBo-;<BvTEAq<Sd
z@X9otn{)?U>EdZ}yYNF5gy2pk)3-lm$sc^kP5F4{iU!qpPtC?u?;{nx^3s;{jIEET
zfJcsd4VE{@h*H;t;;uo}b4I0Sw}bRut`&+4%GUBTlF=X9+imrVMqOcK9=$0Pw~^(c
zSEhJCIr(TYk1kA3NW0}FO{xI4SJjv(ZNPxSkN&IW=pfGz)P6xpxFuuMo(A9e$$>^M
z{3ng_^&w@WyVudhV_C3+y9`23QvF2<vAmw?r5l>yWpUs+hs*mH<n9kUre|=T90+}1
z-%R^-rKdqF5lx^IyB!qXwSaE1Oz)d5PAMT4fFQefIuw+KNvB6|OKEl|U1^WQSw5SJ
z&U5ufGo5!x+ExOuuP`~?!A%A!6CSMBS4f;bLFX6_IF$G&nmZy)!sTuEJ!F_dsjq*z
zkx)stJH|aD6lJpDY_J!WIp+0AmX2gnjh8!znq|oHP=ocSAb*0`&pIrF6rB{F@51nR
z_>}zYo77k5Bjxo%ajq=Z-EEnfozr#6^U0*4sOu)lUzX1azG82#DetXKe=&*XXMH>O
zu=U`E-qo9c)<+N$b+Xb{*ORx-nup{m2zeCy$75q+e({p(`WN|UUM4Z^Lt|-%(=oG0
zwEqxECVY?E;|g27(|q-?pe50#?tUv|p6#HP-#iMJUlXMGCgJ9Ij+|fg*k2dIl4@Qu
zjJrP9SdWGgoE5C(&31H1$H$##c(qY8fT=G?BDjWm$vKhp*1x)u6|BlP5qOW{iS8L`
z_jsFN3oWQVO2l{C!g))pne=-1b_;=$sE5(kmcf(0UnlMuKYsO1y)n07Dr3=~crGCx
zeEn@2bvg?Iq#jp4o84C`IwoXrfwDe99j2<O`RkQD<AH<D+Lz`lV-+s(CK#KhF1G_p
z1dD%irHZs=Ag>p4q;uO@Up%_{W|~rY3cW@vK`Dtr<p7QMG|6u;AEYwJJP(z45Td63
z=waqiykL8sbPL|2%s##dyvOn9RNq(c|F<Z@fVyy+{nh-tpYoCM6TFxg6RKghi{-LO
zbE&r!Z%z*9Ke-n^WGOmulDg7nmHOAE2#X5yzXb>>DOu=S*@^9qav&liQgx{uK2Hy-
z%wX3dh$fCSnN8aA4<XC^KGZ(;RiigbGsxwW?!VHUl}B&6f11g3xs6ClOc&l|loY6P
ze_bf<-|MQ+M;~iy*ewuugW@TD;ef$j>i5j{>H^ZKY!-ok{#z*t^=ytA?kC8)Ag%c|
z$vZTq6lEN?=BnNK>5(rP=zd@*hKVK5Q&<Y73}M;oBd;TVT`keeWh%t2%a42Mns?~g
z_h^D&-zF5er3fAZyw8oFrKjGTxC~$O|5ulUMn)wi`ORg6Wd8vB^VB;%Joqe`z6tZ|
zE&uz&CzO<=9_zk(ZkfKSmH)DM<w6Y0_ZGjqfE1m+%m3DfLd;EXp*FHm@Y-FQX8|(4
zRhM+yGPBhGEqdsJ$!*kAavYuDu2LS;v^NU=innjMdhGb}D|H^+|L<9s3mNl*Wun-w
zF-Q_OHPCGLcC}_ck4|`f1-(T>tMZkncYk%wl{vMQisdAVLFv)ifY6^`)Xv#ntF-_9
zKh*|ssvT?JNUUu6qu=o~_!=hj^P68-VM_Y%Q};-z6C+3`$b+Q$Nhrrt-nAaTKEGqy
z!{&pB|NRUmHs2VIRwo@j5<{so*pj&4Jo9tCn6Vlq7Bi<9G`qUu!`hC@rSUJE*M1U?
zBxZ@gC)z5%2z!j1wfx_5#z#g(oIK_K^DAvfqgQP;0`L9<rxVkama{NRJrJy5U429t
znu)yHZ$C#X$2f5(lHcO=CVDnwr5UK|-m6EL_S1hFu$#^{rp<ZA?tC(0dJ^;atwoAr
zL&AyNv4N>xB83Cj{`)MVkg?`JgXI@xi6Ln#o5>V(9ce`s4^e_<IIXAGf68P0_hqCe
zCbYV&*F^JcCK1|9gO}Gx;y5b#8@509R(<Xd($45u$Q^q5?^09WR+<V$Z=Bt(-T6C)
zt&EkLmPUQks}42)VeBvi3VC{|H&Ell4)aDVv}11edhNJF9F}Dw*MnP!WfuaJvg1xv
z3sYLos~Xz>)12|!eB(e3yVmEm8Peh%KW6k2`69VZQ{`TZeKh`&X5n1G#0`%gaqo)o
zjP~*yRb=~|o6v~`AMG~@hROQcAJMFXl&hatXKU3xp3ET!<=KR-9sd1eB&CXncH+(6
zs6SiJ<q+&QbK))xCmy^5D|OH`S};QT)n!LKL9@z;U*XGti~5rznxB@3;{9d)z?hfK
zXTIo2TSMwNj;FK-drjOLfo+1v%od+li~qM2ar}(b{9HRLhs~c@dfhF^G)4(-dFNgS
z5Um7Gpj-L!>pz9-V%Ky{(v0Mn;^2sfU*J;+Go#d_NFwWfXYmhq=j$(z-SYy>8PvW}
zNQ5`@@46NrIxS2`X5BBm`|mIOY36%|_?#R1IfYD1or_Mo@tw2Q;Ty?#-`~sS5<S2t
zc3Lp)i`KyZ(4io{jTX-E-#4L>Ts*{8C3jA%t?N8-5{K-zr#l-ZGDLsA(|hn5g}C?e
zkIhDxBk0n?p6GqQ{ofWw0#DRb&T&V>eO8%Sp3?tE-do016|K?UC@KmH1|c9IDqYgu
z0@B^FmF^a#MFpf4*>oda(hZ8z-QC^Yuz4TvIp^#9yWj6u19q%6*PP=S<3Dn?he`{-
z#k2P_hu;kFoLjCx*BOY9l>Gh8tglaihl2ONw^e9g-wWnDaAQ%NVE7?CHhOX+MEA9p
zjC7;0zf!)C;6J!iY0I>C6nNw6zNQi;y6XSlR*IpR{c9Dtl{>JmaGDFWhxhEwRfj=>
zPA-hX<F1t1)fZvnzg>Oy;y33@Zh9@)89p`n?>*MtO3@eoH8cF@O2x4ETXoV{7cQ;g
z9LwpSz}1)c9{FlU=tF%l@Sq%_fKPGMSiR8mIv{=_>#<Pce_yi#PYd2YQFAi|Werw{
z>jmY?2>T;viP$kb%XQVV%#F9E#vN=@2?>4vt}BmRmc<SX1SM50rBveR$)kl6{%hFm
zqk!|uz0hRoi&&iAV~^`Ny3F=JL3DYm+}xh6<?=|K7v1{<-fJzb7<w9tE~=+z$u<X%
zrr+1Uk#y8CSBYbTy&dYmKT1g|fmZfTsH7y0mVQFr9RW89ORKkrCT}+k4K_?IHViEm
z3>nHwA4U`13Hl4$bK2X%!3!*eX%dDs4>j#+bzc<Tp?Ry=`dhIzS&=6Bo8(*OuuLvV
zM|X3}k9^!nVe<c8cYTbql#zd5^ib^Te(`=y{gMTjC=id}d7+S{=~G;4#_QhRuYn;<
zw8@lO{iAg;z>7kO(fV5kwFp6g*H7_)^nX94B_3oZph8zxx|nK2U1<yY-#~wM4edZJ
zMuqZw+smJ?2w>la0T(|Gj=Y;21}kgv%1X=6pSJ}C5&Stt@L06<VT-rHF&)mo{NVlR
z;iHG;R^#^TL$YcMC&#qBlU~PgR4pcEws)Ktm+eAumAmwB`};?UFpGj0aN2`253KLL
zzJ!k&p^UKHW|)UU%ntj{dHTI7ho?$cr}*vbKcZX~T6*)XjX)%>wb>@UHI|W;=yHeW
z&-E4TzqFNbx=HkyDwdAS2Lq;9O6XJ}5LmsgYJWO+ZvmUTD9q;Kv;TAPpmfj>#<wPU
zSV_c9LMQ|;MPw&c^7T@Uo3X8wlmZ+dP*9mf0#kn3F-M0nG$0`0%WaVS`P`Nce6W@w
z-5q6}%DVf@`%{)evVJ4jR)CGc{3h3=TaUFq@sCIUdnP@;<?DF9$Fh)_8&S=1BB9+F
zuZFmIW$sDlsr#z7-SU=bKFo5$=bJ-{o)x~CO#v{oLNb*0c7wo(x*$Yn=pX3TajqLd
zqj-HSgNvHqd?>fnt-B6dNZ8B=xTKRr=;`Uf#Ob(RCJ1~t@IE#=J{HqyaJ(*j=cLEM
zqf|9VbvY-rtgLK{lvF0Nr#;;?8wzHC*sfc0lCe(!3SOg7`Z(nG+9THovYOeXqWqE6
zo!TXFoL=NtvVoz2Zu?D<TGU+${GHpWgU7+h5=1_VreirLxVx*Np~&5Z>1bLyyIttK
z<dPKwjoo%nIm4QNTad#lnJ8ngX=i5#?4a-+(%5VaZ59XD+pv`Xd{YJBtHWb5zGNV^
z)U(7#uIJP`9k%^*89~cIIpX}}C5f@VK99lDaXq7UR{FR`;dt>mQ~uY8h%%GoX&DFV
znPmalD)6%vh8g_&AnfjPlp8&=j`iz*zJNscz8z4D*e%8&y6kb`v{`Et7k1b_DCl$Q
zUb;I9iYw5ig6NcY+&4xZz=gA!$c>iiE%1ih-qBI3*p+0Er7{PHYyv!lo9zTl)M~S3
zU`{;P7+nrTp@YA0)f_-206XNd-gta#j4HC-?dYTg82kSIyD;1{Y+Qpuz2Pc5<3qx+
zkug`-_hnYY`Cv<$Xo6W<5b5P0XxUM6JnwgYeb11OVY3DUR^_i>LbrlcGZntkot&Kk
zm+%9fvXPieIMEd6W%{SY?c8k>h(Z3%lZghqokB%}(D@E42DLbxVcFdOz7~)#GH5Pa
zZ1?;omDa}lN=yvC-QAs8^jHoXr~!Rq1-%Q%a_37h_Py+>3lCp-E`iNV0##t&FE<vq
zua16Sx~cqz=H_etChpxvDs@DxM?JHjehUlBP${}fHM6RSb#!%w(82InuG9Mc^g%4P
zXC2Ik4HQcLy$Hq?^z;~^rz@kyoa$h9ob8s5G`yqo9@4^XmEl{Hf(B?(s56V@IWert
zA_eM=sZHfu6rJbC*Z%Dr0-o&A!U9uCNKEXo2++37>C;KxtL9L$e?{`ZRlMS?@QLX=
zB}anTw@8_BdHSHWjo8eD%EW|Iz5L|lb5hbTfSe#hC2?9xSFpqgah~D&hx>6YFZx7B
zM<Z$G-x?be5fMGa#SM?FrcTXpP_s?0#()fYbPhA3AYxjRF>=`mC84dYt**|Qp6Of{
z>hEtXX1YB!`JGaJwoVbuK4+K5_tuWf%gdeL(R~k(TG-x>jM4gfXiY;tqt+CU`8GLO
zSeWc&^TJtXF*bcKHhoDf!tVI?`>T*`yl9f+4<c!jG@nI8QJO_Hw~*aib8~B3Th`|0
z`1el|ECv>wQ_uUJ|D0GjaID-a(2=_$S~|&TUG-=`S2pqb?0$)V63RY&{HjwTcMrqJ
z%4$=yEH1cI*4=#q=A#a-8qc2_aB`|!SP=6(&OQ~uO{lK+tNrxp1-nm5bInD-{s~ge
z>t*Zk_D8do%pBjdQ0>JWkh~oo=tS#BTUx&0kO{n?A~0|L5;v9K;KftY_~*~35Kj^B
zoyI^D5YM?MhbJZgQrX$izy|?E7(;hzXJ<VZudBNSmB0t;J^MbsKKPX15~dx5Nkdc6
zD6sVL1~*8aobL5gg*r@no&5am>l?tSeA;s)*>AiKZ0k0`i<iz|E?*;C2$dZtVl(~K
z=eG?jdjRhcwR|AA?F>OEsX!9Xanf(mv!ly~XT^a;{HvSe<v<;@Kkcj6B;6m`?Z<Vd
zu`z>kt4j>|3Ko*U^@05SB?`#w>kqW_g70Qu``Pp7p(Ol8Z~s({j69Brg>@8Kf^)&n
zw4<B}g?p!`wWGz$iI?X`#s!ZS)(4^2iIwTQpzHhhM`SO*?&;!7v66wmHJ;nUe7vj^
z%K2o@scDY)8u!OmS&z85s~1Y3ZEq2LaeZkP&dU8kib@A0No~`OSOgr_I+2l@p{swz
zy)3t<E;9pKZQS>poCj^_AO|YF*cce;v^p02uf;8a+aPAo1JHO?)|X^DmAc~*v=(<%
zBnV&H-uK9bxyHP&8MBy4%WKHT!RsUuMD@O$hI%dc+0ejZzJ@6ejFY{X!TQ})=kWSv
zQNO!2&f8lM47haND2G*Pj)N4W_n~9f%%4{0jMfIPU%&P{${TEkc4f|q8VUm^#Wrij
zkiaZ4szc=rRmWp+y)f#Y<oxl)o~w3UI;iWFu$`Gv%qP&a?eXgt+)n6^xf{#Tk5f;s
ze8KbZ{9sEmk*j^#W)|#mdo1G>sj2;=4g{5ZBZUYfZk-)L>Me)e1N!sM@<)KW>{boT
z68-_<3{BFn=D&2S9ErJ1ZJ`|C)a5yJ0zh?9rRU@rud_9C=PCpp;8FZzji#RB1()e^
ze*D1wul-TMHSTHLe%NHk2M0eIh8SWa8O|%;;55)JC~~Ts3s|EDm1@iCoUPKM49XwY
z+CY?e38w)!GfogDfPx$+b)KD=FWS|8@V5GAr@w+V=B4AvOO)_ZM*`Rmyy=gNN=nuS
ztL5uG5fxQcd&H|;E}LtEy47Xy!r0FrEv|p*t+4wJ&#R@jHi;lU&wDFW0GoU2>Jt$W
zaUl+7EwF(`TyErw|L(f!A{cNzoF3M}G2W|k_e%Z7w#u!<u&^hIa;H!2FUM4Qxa=3L
zC#!P2ZkP~6LVnr-xaT-omX*n4LXZYSp-jl)Gs7*WN}#(>9DuutT)VvK+%N>vsdoBg
zpVZJ-{0NX!Q^kpL-sW4<Sy81HoG4Ut#1exRb@!pAzP?hP)?uZC*U0YjGz`)Vw2l@d
z4MLvq_tswt1%_srrsnXw9SXc(d8{fFXiPgoz=W{9iAklhwbNNXzk1lC870VFcpzT%
z50^(Q@X>m0geDTt2J9~HHcqm@*QbK5^7?d7uRY?5!?=S>jf;bWgP6k_&>%eg56Ciq
z*p#OgOot^#peju7cx=f$Iy=}bcbXJO;pTwz;!@{#YpZ{P`sMsieKj!g4a7<>Zu(_!
zV0lJ0Bja^-vZe~`InSgaACs$7_z_DbKo{)L&KIZZ&?q)|!2@|`iQkXQhy3<#I3FCQ
zcKe9@6$|ugTOCheI-rYUH6guJLFP2j^KT@wtycf>3nlpd?Z@9)fd^+<sQvCKn32+v
zeWv*>eGeb%oBHcKFw{(mP90YU8MSH*n>sW#Nnc=@^YXgvb^P`Jjzq`XV(;<y)%S;;
ziz@a*E({#wj<Lwd=i<X10#!G;^h?b8L*zIeE4ucGXx08v`^J+0_%83-VR|vnWOD!e
z{=cZI1b+E4<Hiz1bV*TKR&<fNl#(jJddq7#Z@u%KP@Cj1<K*c+KZ3Zup{;KX3~xNV
zyu}A<_~v=Z!&x=xBrO8xxqf>QJzr;VR>L_x6&mbc+RnVmUkyp)j8mS|aM^m!qe_pc
z3%ibkJWhKLMsbqP7|!K<C0=~?wyA38=HcN;MBz8=Bwpvue8tpsalJe#m3O4PTiPhy
zG;s^_EsxW^o6|M2oQe)JeTk7q2yTh_whH7drroF(VdXxsx)8fe$S`%l%eo(J(A2ZW
z8+oBz2*v!l`2{GL)lg+IiDe;mq|g9(@D!J!|6D$lZ)v^IM{_<+q%i=t7O6p)&d9p=
z>Wl~h$Ca5<3-!~}Y8sbP<4so-<AHC^#lVR?D<h-cqJv8W1E<H?u{%R_ky4v%GL?MX
zjN4B~Ro;{4mX=HpzYv|%IiG!()*F525&g%qE?{w3iWl^XNJM#$1y!b-8mT1Cj}ySc
zU28FnjiT&C;qQqVnx4$3B%XYU3^5pum0PhHtuu&}SgH~~@P)*M^YPZ^hYx6Vv9jgX
ziKxS2YX=7hHLhuQR_`^d3A*IxcRX^SbMv&|hL0$0m<kZ}*ZK(?PeylFsN}CLGu1O@
zOb|%RoAxKmSJDKB;2qGwel`IwL|h;q7(g}J<yXG0w22n)YtIkThy(>^?~&j`Z787n
zUS&{ul3|LWCQh9r_79<FXQg|&t&)T}hz7k0x&Qv}j0egk)JSUi)mdwgjrUYA#P}l;
zz9q1kNtI9BqBCF6`K9QEdy`rd=2a5aPFp8V7q23w4!y3t|A1i;bv#|YcWxp0eg;i_
zK0{O<!o&l2Rc44kkny|kEOini&krDb*4Y`1tqmp*_mdfcG&>E~0;Fc~5}QqL*tkjC
zz$&yl&aW$p`WmXpgCF%KPKJE^#a6Yy3<E3cJ~JXTRWL&70$jMsk3Z2=Z3I?1u5wtN
z$uLUHf}103fS5DC+w&Nxx0!I5P*2a$u07+-Znjllm0?Y~5^}Y*MwY+{1-0!}d&;W(
z``@L=w7krnq;(E84sr=xUDMDdI&M=(D1T@}t2|$rI8A&e9nCSAs~Su9+4q)7r5SAN
zFI>)GJlXDfc?$1nLe(`Anzwk~jX7dot*ik`boFi<6aAl5%kkslC0l;vs`7Z9)%sFr
zy@Z(2=lj6kJYO33-yADV<T7K4Kh^N=F$-O<6<@AN6J(ewx52r}Qe<4L-cCPSn~ZD&
zYMjk@*=D6ffVB!#?xtf&BM?T*`Cb+AZthdT=R8@$q2hS-XRKGK^=>$&@Oz=+vW1PK
zRi`Q{M)sGx?D<E>O0ACP8^}&57K%+rv)L2n=f~9sp%-U$ppe1q5cP>_qMFBMDh?j#
zKQFY4-YfpOb#FB<HPn7;f(#xAX*xKuye0zb$PB54xKXmh&Yl??^7;zC7d|o2npx|7
zjID~Ku2Hw9O_#qIMnu^CzU#pTO+VwM`|_Ud*FA`{P-B(S>Jg(AC{bh2EHolcv$eUD
zletYeYF?hbBPS;mB;$G5S8R(wcjd?O(h)&0)JbX81nd^i_Y(SbA;LwtJvUYmUfZr`
z3(TDSGT>%g>P84L9MJRs-kWsphf+E=x=f&dhf9Y#VeYT?$Q!h&G)7(x<;6CKkk-Mj
zuKr59P$M_4AH26?9nr;=WY0Z_uTDJvz~1Ks18TllD6}ieWBNP>q}bg@-k|Ds?d%-!
z=jU!5N(2pAjqN1ABMp80<gBYZiaVAJv%+dUqBHht#_IuC>0-FvvKV<9cg0a4B?tNB
zX1j0l9ZD#E2)pTme9~L!J9jN#MnYRk9@s~5w4-`>v<sKQD^YG&Q@Z&RX%-=qzgC1g
z1UFFV=MH0=V6dxuzw3UG`9QruXX!d#`icbV?Z!xfT%tguZW^r^^r30YDi}N_DFX16
zZ1QbH@ek$6**_S5_eeT8i~9U&&pn`3uqRzs+-e)l>dNUdbLe;xo?}TdoxX>JskqeK
z0`?1$GW{zu+@2!hogcDw5FXr0+zR9bjB&(#hQInV2>Dx9@4kg2dPzF)iriJVyW&IB
zOVTaJD{Pt^{-skqxLt2}+3T-n)Xq1D%Ea<STjZpRSG(*J7<*l47BBB^y5Oc=oUJPf
zD3HVEbXqn+$ZAT3y|vHzStvE>(z%?%fP`?hy-)1gC>8-q=w95!APW6faYJ$dOX)Qn
z(t}25J5A(s5t-)1{1xt2OU4(qOPt&Td8Q$5er&QU3=EG7r@Z$|@6%e$p+s9JT7Mn_
zj=P+YT=nnfXVg9_-l889+J-96j!ebpP&)8#zUdt!P8OdVhU&-Dx9as57yVVGIY<m8
zWrw{WLgmu}=9`7?ROQ!`rdbC2G8^E&(W#^D=p%lbE}v+>JLj@R>rsd`-L9CZP@3Rb
zjDbU%)csM;@PaP_XKVT#Q9tEwoniN#QnM;(2`j#gZEv+leQTvx)bW59I%B<DF)Yok
z=le4TWXj&mhPoe}`<?EiP7G4*7v{wzkU#&Y1<dc;Z;UXl-fz}TW5Z5kMv`64c=M4k
zSEXa9(_cvhZPzEJy5G>NyC7IZ{Iy6_e?%FSDlYEoWML5-NBZjd@^!s@xZECs*E3}0
z%T6aJ0%*_ELfUOF0AGLf%lmnTTw*-$F^0KddbnMF=pQEX<;6uYX8$%1NI<^6r`!lF
zi;uYZaY-!1Ly7WPm@gsOx?353>mHUK>&#`P!8z)ZmMB86*0s=US}$Mb9h2uZ%&8Vd
z!a@wO>#Qa+s?q*h^`4#ZG-W*|voiQTKU@8VI;-LM0Khwmmq>B4-IdJC%MP=N_VXR`
zpZ1Fr5)^nc#Y+qk42VVqzx_$lULG!`9TU>rZ@$SB4-77QPk0Oz-+iT1E)5M6X)A|=
zkJ9~iBn?fuD>C551CQto+4z(R&1VQ|)<0k=cVj-sc6=7c?9m3t_pC$5zdPi)wwd;P
z?jv96FNu-8#1C=96^oa12s9P$0f8&%^-RyKXyeG0cimd`RjbB|>%a<ArIr8*4?r9m
zwtt!&3(7>w#IyL<Nz>Y-WY)>MCX(%S3wl9K;L*l;&#@JllPY$b2Y$)7>Z#ox;DDZ2
zcO++LJZs=~?s&2K_Oq1^&5u0~-fzWi7klkzMbzsz7U)DzF@tA6_dZ-66V=WpOF^sL
zodsfo3sOiH$`L-XPC2sf+26^6`{&WDCsij9)(W>t3%WOrpS1hj7t-qe#)Qs4GT&^*
z42~WrH^l>vEhmvIZD;wqQ6;I^HL3f5Y1evw>o=U(IaVywi9aDAD2HSKJ)-bzT3S7l
z@sd5`_GgE+0m%TNilVly>;cBXN(c3P_oWUqfwy6ka1*PN)<>m~P_Jx`2PGI_OMQ>R
z8!25^cc@t%Gpe(+x$1RLq>c09^t?1OlVdgLGn*MkuuzVJW%*Bs;{BMuWYMOmUPvnK
z4*uPM0y|dgi6|#4?Zd6Z)6MaliN!4ge+Nzs20X>7enLtqT44ShTtNG>){Y5KqMEhm
zF%IlL(prmU?8O@@_~Aiwem-ngV=|}dphN8$nTvL=x|0zR!OkC3?P;5VWkuH4Vz(>Q
zB*JU6qtr`X@1KXg?}52f(sp;UDB-+NrfYK1+o&*49eIz&E{x-1eKE5~`Q^6;#nRn5
zk(hvtoVV9esh)ep#Pd<_;ozoy6>`k9Ldpcpo1h6Tln|?iaoDs)ab`&&vwa8+>sOjj
zxk>P7yei)JUeA}wYKOBrbBiNbGUI3`hV%7i+kN;DrVIU*&{yBC*(?`daor;epFS$F
z-+Ex-V85FX@tQ}%gpjm}?8d+o<_ac`S~H*qzi}BV({-zp>2%;`Xgu1A7i90ta*1n5
z#0p<@h24~J4<?egO-h+Ee(hg^)O;!>ZExU-%GN-oH2ennCxQS_qg&C4zT6rJ7kSVE
z`4Ty!vD0Bhq;d3I?LQTPYVQ-qfND0WKuy8YP`S-zWfN7tpvBvs-)Fsl{I~_aU3n?v
zjgER8=;X1wdG+p|`Hxj5Twb_mW%=jGDzznOwMY4?6zENIJ6J9@Vl5AD#}&A|a9~+l
zw{vWLS3V34+{@jHQzCXGg4>;cp2QToKq<Elf@nJwBb&o2!mbMQ4z^OiM>Jp8MmiEv
zS68qq-G11Vz-%ydGE=A(|KqBubHWXwU^Lgx)T|K8@8QGav>|ivLepu+0qML&eajub
zGpjg=n~l^M@z(l5LBJY_k3VOhSH@;KiIF|&r*PhyQY-#=<BHg8_agd?`xZ3@$igne
zf*xxx=)U@y*O!-DUk<kkamyf!ht_hz^FEXpDXldx`sPC$u5<pt6D5eC(zKf!q;k2A
z<8HYpf0JKc3SQ^tzkb=IU26UZ2>~cDkeowuX$exU>el1w@%Gj`0C02+S9AW`vcclI
z+(mMT(MNwGH%v}WZmxefT|=Fx`B(~8Vk4J-=PcYWs(YW;wxE_gEf6LY>fNzK##&|O
zs%4hq&5wC5-mQ-1d4BR0y>+ZUx*GTFKBJnQt*z-q#hvL(|36gP(2ty9T*|(;*NDYl
z-elxN%}MVl@#TO!M&H3R<w|SRhfFZi&yPwy=~gz>7_O=|-lUZg^?#aR{|EfnRYhBa
zb+vAQd5SY~%yL^|lakqGP?EvTS$Yr@%o@hpwtthgvE*f!&g@{04obtzOECKrZGmK@
zgvvjxweICPo%mhlI@9h1bV%R|c%d#fwK-|x8`v0_F7c@^lE|=}8`7o3BVsT-a85au
zJuVQ2nK6gUA)Ao8N!x=nwmmV8ia-)Elf35VvBoEpldPWejw&6C#5rv8Ne04R^D0-$
z)2#wP0OR9}v)BS0(pw6tKfbcQ_sEhx6QS3VfL_gIcdjx<+rVJHLc>R!F!v4H;p(eb
z3n$3p!ou0+>Sb5HjMtQGY~j2j5q4M9=udDDW+A^bu+*YL!VGouCwv{h(NEpVPoM9^
za#k852kA{yzd3lb9H6dyeAJ-u$|U&~;_R4waGU+J<JLr}`nJG?j;P~+M*Z9V9&+>|
zvgesfVw-GRtA1VilT~yO?TMb1NLh|?RulC3a!WGpq1w}<BW(B6?s%`|UA>{9m?y(q
zNdpYB68gxgT370F=KXL4ZGDeM{z`}J?yc!PE1N`SL+W9{2!K~jojNF^Ee_kzMGj}`
zed3MpFD^Ij4PaEk#=@%hx`Mx5X4K=0?AP+s5)r;lkTU=<2u~e2e(JKuzRr5~ZmEMN
zofs-WAp+)BcNor+ueoPQah<)w)`#ca`r;+0wQA3`iOQiX4cDpAoO|OY!~*IuttDP{
z)F0&~Dq{<6NJEwn9ChwZk!zR#`Gj%o0M^*&w-QzSLqof_AABM!k(AH#l*ddvX<@($
zj>AGbz|%*5gfS4IuG7|;!)$}tMAf5&goIRauTsO^&{5}fF2juq8_hF&#ipjF3!xAY
zK^-jgTNd|3{cs8&c9jXGE_8OVaeqq*wraBY5*VnQfGzEo>2Ezg)Y+zO$a31TZBl9(
z%{(guCmWR}+6(DUg0}hSm>4^MrZ&W`MfPXE<+>E7_wQf**2fDFy@f;i(tIEi9pheM
z(HT?Oj~ENkUsgqEQh~UZuTe*zaVo?fl8wu1+%-1_n$%{U=cN{kQb65hZNNY7mMmT^
zNIO4&+6t)ohlF&sKU?APsk0d!9%~Q0&h+q%9H&3^=B*n)50dYz`9$?)Yw&qq*iKJP
zt{uDNn48}xQM{2DlGi8PH!XNf&&b|vdrk7F&T6?kJ~%jdvF?{<$YWg=jEO{^==$fk
zE}xy0$iETV+HUg0@uoFE!m^Hb@K_(&0Lvl~yZwkax<rMf-)ZS`F_+`X)AG#Q@x|jM
zR?d75!a8;8wff)ONY=~r&~|sPIvpAcK1JswJ(Wex?(PzLJY2yQG0S;ox`A{1eWJ&!
zzkP`j?t7A~`HACE1@+vX7w?axYWAWAYU*`mm~&*BxUOZXNRbmpj?y8f=!SV|yH}8i
z2`Qpj&MRRr^>L?7a1S3Ttd+mf*JlCAFq<Oi2{W6H71cA@WZK5ne;K8<&b}NX_s&ma
z=aa0}UMng%IY0^+$UU7V>g($20vQ(uDdcqAE9c_EG=l1{rs_-N6ZziWoD1{QEYqE2
zX{fIV<DgiFB*999RPM7A$CG((J4bt9EmWReo?0sw7HTGj5Mjy1aSatr6Ku@GCr1nJ
zZ2Lv@(>TB9mjvHh*dJF`EuyR!O7b1yM1|&hw=lrC=fT%l!deh72P{)-@UKyEQLn(g
zKQU1R((R%?o;hNc;JTo~gfgDlD~<P$)hj&ChdKy-Vlqp9iHNf3p_g*IxTwCrsQ7^1
zhP4W@N}!jYPG6lBA84(@e3a8_EXpWx=Vwr)l;nlxbaw~Kst75tUcf`%IC1N?rnWYL
zF%M<Pt7oUj(^!sgS0$0IQ-=`d>SQ-8I(To^)G_*<D%eEqqbIvgu2Pw0<=SA5gG27S
z)iCCqgo1*Ctyk9}SdWE&(ZV1>^5DT+6B8<2OfQ`SWk|ILSl$#3mRXhdrY6A5*RFP*
ztYVjG-+SoY-yKJnNqCe*D(Hm0mv&nqzNhD9oldeyqmGH_?p}5ap2|`*4(Uj9BP|&m
z7mS}UPu1*tgpXGoZ9IGStUa9BNXpAhF4Ov#b8?3WJe|-ye7FNulQtwkv#$s|Be$->
zh|UpL(*2=>?Pueej1&)!vHkA<FHIDyO~b>(GfbExb;FbUrL!}Rnv94Ds=ZGoSK}LA
z;=T3ZJ<a$B&&7=ssad(W<~LK!Eux<+UGGwTV=P5A%xdI=iHs75k1ih2C+)q@flb<2
zz$j5q1T!qP7o-9e-SRb}t5W&D3b<`ozG63CK|y?XUakmJg+(MbYW4f7i>oUT?vQvf
zufmvFggr3wfWH1yWWK(HG$8@T9bKIAIE@bf=E%cWMF&~))A;(|_IX7^XXca|Zh<V`
z;LhXn>H&8Bo@HY|<&(Lf;Na6Z+AA?t@!zcwV5npf9DXTic<{zs>#nFMYXbG~bKBE6
z=bn~IG$91Jnxb&w*U=zNnCePKBJ1;7rN3)yrscEK;(VhoE~ZzeM>qK^8#qN-tn}{U
zMDeiLD*{)&z>vOHWclUd7NeMdOrL>1%TlQdYufV+yLn1$>#=MN<^5AQ)mE^?_eywi
zQ?_G+emP^(tC;XZ5YZLiz9On`Y&?`E?ab~5)cI&LKmD1ZuB)LNxf+UpgufAi%FA}G
z#5(PSeK1q;4`|hC$DLd$tmwah3O)QU^x*=*72My9nqkb@c{cS|FlzdUC#PcAM4Jfo
zCG!U4Sm}D9NVO~bJm*x37+s-8M@d1<*v;Ivq08;iD!a>67p><=d_jg-2Se3rITFU{
zn>Q6^<f%fbyKVU$3JU;^mfd~Nb-1A0D;#7+rAiz@<~Qp@0Ykyy0<aftS@~jj(DF9I
zi_^w1mr-7V^stj{FlVr3mGZyO5WK+zfldu#2yo=<o@1{$r~7`rhJMR#5v&e9_Xi85
zVC&ubsJYU9ox_Tzw4uOT<3@k>Uf@Un;1Z46Brb0o#1*KD>~Bd2Gl4-Oc7^(+5|TvS
zk&`A~;Q*?ZQTEfl_E19!f9wD;`8Ynel^tewEHr{9;JKU*&Yd4!B4By}rzy0<3m*ra
zN{}YG-x)1+TzDQuG0&S1XSFZRy@!g8S@g-u{Uy~Fa^yg%g>yE3@%1dVyfGN_MHFZ>
zs#g?OJDk_AmIVg|hubLWeU+o<&?kC#&_Zra^yKUhP3$o3z5|4A5G2v1{SZPuiVM2A
z!H76JmU6`lNO47J^LU{|=yIO;kt{Ek-zOq!h;#^WU$N+~kbI<OnjvTW<ZpD~*O~um
z0rV<9(`_r&Ri?XP){_FIbQ1?Uti~NIEG%j+-zzImgQANo>>)?0nnr;w8Krbg?)e~S
zqawd@Oo2^ea!wV#xNW(F77dT~KYtA1@oYa9oM1ha>!QOAw{u3%%1ZAaos_2b_V)f_
z045R!mg`j7XT3q+1nWe5Bmuonobtr_!otO1RDpx*{r`M}bt~B*(nT_PT^@1*m#o`N
z9_%KvvE_RXbep4>@^aEQS;dHLoBnQg#+F+S<#JPKXq?fXtWh-#->x%JiRXD&I`-uR
zwBQO6s8=IkI_1t-j^VPihsSqDca+P@&MrOH-C~jYG5+eSx%2a`#H-Y{fT#Q$xug3P
ziVZ5ws@(GGvyIKoS9Nyi>gnPuHudpQMt+bx>a0~U|33b67bo@!rP6v|>G&0D*sEjM
zz<FbY-El+$i$$Tx`uvDNXY}u1$J4#(lT(z-0d{wE?7VAtB@w%8M>tJC4fjj^h0M4$
ziZ&~6o69NMY1|at+JB=EHd@$VB0g8E^5nbk2nnbq3}u6kJQHD(wl)?<5qPpGcv(VC
zF3e2e1G0RKJQY*D50p#n<QU1vy`(w+q3zi0BghEOBwD(XU%!5}N3v+;N`#^UVu)3?
z#5boMmOHk=XaaMhF|Qe0@8xUHK@@c76niIMxyoAS-1%h60}yWXtXz$MUnw_*(m{Pj
ztjN|zXitWXU|pKze85Jgb`a*p>H^GaOhiRkQg&e|H<Xic_Lyb=T+=<weY$RvJCCej
z#m-~*nY#60)w{rmyb62o(8mG-Oo;-WQ9LQY+Yt4|Zm+|EL%66yf-rOS|JkVE!Gs)j
zdED^n{J5ehBV##{_bM9H{)hucRa<z{l{#;GyGCQ-01u7k_;c$PObjMIPCIs-?X?F{
zMxdVurl{8zY!m0dv9jt<m5|>IrkJd=YX9EB?L|$b`O{W0Vs}EtCUs~C<OzFqILStM
za2b#zHUW@QZZqD7Bq1SDN0ntaG}nef4I+)S5L0Ni>q5)yFFu(%&6m~ASDni-a2$-I
z*h-Tb0NJ*}eza(DD1SVPf?34t9EL+(vE?7CiSFP3x!;{TUHHyoc&8A*6ql6O(|k89
zP1Nt+)x|!k<Mg|A4j^13aFH;w$wzxG(Mncdu#CCb?si#b9-Nx`eJ>9-wEt{ZRCD=#
z8Hp4-SXfx|Cb27hX@S+%zHSElwH<<2HR@?n0px@O0<NolV(I8G7sHq)_B>oewn>}Z
z!nm2IQy4^7ZZl1u5vQu>iKRkQpHON3s5IfCSi5lVt~z)6?a}dS6gZ2NJU<bYvG)xh
z_}$z;LDBZ7cRyw`wT-x4X1|!NU4Gf>^&L|Gtzt$u??3r*vU#w6{13x~O!V37o3A76
z&MR!k-4^NySgbd!KlgvsTyecr=&I06yIaqr0{>Zr01hU*Tz3q6ByGV(uU_%L>qe(y
zz{p!Lo=-|f=3>^bQYTuVInnbhIuSd;;O$$$U8rCNRpxkl+6)zF=PX@275^h&?WG6c
ztt}jyjt2&_A6?wn|8=C%psDHEM-sI!0ZK(sGGGWi4gXs(9xh#L@BJY;&uKH-#ULl&
zOp<-tOF=`^+ua>XWJ#-%*%BPOteCnAdDDAXSjtyFF>p4a<kd`u+2VW3k&LPz2vRJY
zyw0eO3Y)q`Ezadm1lMV`nWGT+TTV*cOggcV$)ZQctQktBABdGCGjbp|C-8pf=}QIX
z8?XrPwb_uQk$7GnnpoA00sAaRyPVOeHB09A3!m_A001suaRjHiybn*qS3~KDm_V~E
z%HQl>?F^twl~ReMZFFPVT-LtKiiSI%0F7y^)ZC#p4M?jS(_T?TpQg`FDPH__dmoWj
z-mYer`~l`Pa*~p*d$<q%7uJ~(jM{bCY7C8!$+Hsxp%u^Ac7AeRAJ6GL#8jXE=2W6^
z8t6H(92RnmAcS$dtZhJR>GkVV{W!lH8<A5c*4Hc}P;^O-!bcKZ_6su~u6@#U^<4%-
z2{1u$F+WR$kWSUCI;)w2eJjcMdN#IwJ&paw$^%^uvd+;)qp=b~ozvM*=U!VaT7^k3
z3_&WYsl`jp&U|oo6tDezbZNV5-ez_=(JOm8i9C|(U}tBf#D&-c9|Cvn71a)<4pmhE
zNXQ#^DiXoEgAH&G4kOvDy;q1;8f6pr(?N|hbQ*8*(k6S{URTu_F9dG&)_Aoa-aws)
zTYS8(>*3b^=7~QX&RotGBsDZLzZbJ!DxI{_u0$1^_FhMp{;GG{yx8a`o%p=Bw6p}}
z2QMKt8Sr?OxSi9!K)X7|MrSzp8Sff?WMF``^sSpH$Gxq+G%r}mIZVIKwMh1!Kz4Jw
z?r{I`Fird`i&2|Oo)VI5PF}k%k(=RMSc#CNvtn@*8Ty!e@$KHnkgqWLyIP|YJAY2%
z2@iKp^8s~W(}jNd@}oluYUwK3HPrGo<Rsd$Nq83zxO@Z&&{ilGRPA5M7C)D`TWx<@
zv?u=Pk+QijaMGM2gc^?z*P(ntup{oCOmM0MHXYd`COs~Bs}x|CVILGL1y3|Id_-aL
z1gRA$em5iXak#8sX+N$@!n|kHlog!F*k&^c7NPUQ&9sR@y-x)Z*mK}*o5#4V2<#am
zc4{{{_7iZp?BQjB`T?_*&t=1XAc@@;JiS|*Z$zjFh*3WGllzO@hcG1_s+1m{@;GC+
z9Qh*1t+?c;x7HY#y&RaTyuI`G6Nk;&r$lujLa@i3q%f6|6@QH3IjjcF)86RY>j9{^
zF_$5E`Q|>wy%QlHQm?tsHYzC0l_wqYBVx3w*)oI8O~LFh-9M)JnKy@c;O^{irZ-y5
zHZ<zs1&k>#cbw`OZTGl1EZce*tVpBgL#2zhzcx=_udRg%fTA2iVM4@)g&?!1+gl)p
z>Zb0(i)vWZd&|FxyxPi6OEcQXXILecjut($t(+#ftgXH}bvwv>YhKm3)Cj9;CA@M5
znE9rd6igi)&gV27WI)AULSHfMwsg5%%mD-EI+33qajDQQ6r!@{pw6VxcVnf*Tm~2z
zeNG+s7J+!_iE_D<SeJxTXf^H>o|p2RmMpWz?by2K*VW<~e+CA(>q4qOCpPZc7h%MY
z#dfd7`ZYMjhF`3X788&xRtOml=L-%xSHB_Rfop*b^mGOGv-JWAFV-y!^8v-t;RtLQ
z824z`tTaQSexcC$9y^n+QVcmt=z&`H(e^m2VT%w?2%S1f=3H0F2Q3W@oHd9gZ)}L#
zt?&sSX5YkG3Vtl0Q7IkNgkXrL%#e%cLyg-3>b1j@&O>k7lQlx=$<3|!Fy{lRT%F3e
zdLFxm1^W2mtZ(mNQee;&lwRz46nzLgjjIa>Hz>s}$ccaLM{3v@fEX{eVh1)okKNX^
zylh|faGox!?XN4!ATk0(h0z{$Tr9uEtxJ436n3I8X?|v?kJM@}TSW7JD@qdg2#|&Y
zZ{~%y@}K1NCSTfP_Ka7A>=i|G;w~?;^=ubmo}-Kg)|WPCC|eDnQ_i#KnIRuNZiQ83
zqS66zQP2%zN93?znoZ;HPZ(!MtKa%1l;1!Ydu!Ll`7C|c;Ldx;k{|MK|L!D1^jTeR
zA^#07&AJ_;Kaz@eEw#)gKyfwn5>c;rL4T9Bm-niXz=Qfz2A>II?e}ovADD@IbBkjN
z;S!VjiY@X~2q(*F@#!77Z;ZO76b~<<zd0qNebq0*XOFfJ4pS*Z;%cVa99PVaD@hx4
zziwc7B<)XzH3}{*3bWZWqV=%yFpm`&NjLuVJ~`2-=hPz8*LySYS~6P44Ff})m^b<L
zeL`VjiO-?kIXb)^MiO`C1U$|Q5At!Ls+GYo)!-VCae?_66CLa0<7;XYcdHw?frEp=
zT91raPGR!l?lEnM_^o>{xJHZ0gg_n#$9iGWE#T`^t#WjC?@cEsr|>OjJG<l?;nT64
z2PExvC8pjmPD1Elpi6}*Z2ZRj9J2<}hl}b?QOVDsFSoCD$ahZnmtC%iczJj#t12m|
zC=^??W@gJY!Q~jof6PR14UqF0FXKZTHA%g&^b1E?TSvR51fKD2K%M#67Pdrmfc;{7
zbw!1ew!NcDIOu!T&L}Odj(lL60<4eYVc@Fz#`-xAB1`1Vm5Ya)mz#%@lHyj4S3%ac
z9x2|gqI%BBpWCIr9f^XG(|S?x`O`Dxt<Xs{J4k8Xz_{sk8`FJ$J%@Lls;{5`&JWf`
zZ3_Iet=}bXX1=g3ab-liR4a~1Nu%fC*_-_{p8J`VmHp3qWKGIYDy(pYBB}eX)klP^
zlq5XvnJX}yPB1;%b!iP~J9o@YV%syPq5pwJcjsB(;#BNUp_9gzlf!n*4-eJgAxOQ`
zVTMa#&ZhvbEml}-whsncAIZos?v@M57UPEINNSnmH;ModsX|k<gyAU(-F==B{CT^i
zFQHY9DK8V{>i#x0@wwXyGR5ZyioJeq`}*~7oS%Go30P=S_YbbonI|5vv>t9}JX%iv
zRK)^8P{;7xsF!cU&is9WPxJRM&NzVa5m{7SQoSo6q;yV!BJ8v62r*?ep6f2iXGVsG
z7lY~sm3v^i56qo?bf67{Gb*_YFrYWIj=F5cY0_pqPT8KCYb5;Ro~E?=PBv7JTHNE@
z^Y`Ia>WSdFjyC)x1$%O}UY=wHjau=}%$D0!RLgfBQSoxq45cTv&A~2@<%38nlSXq$
zJVT#J!|GV6TUr3pOXKBs>%2r;DlQ-txQ#n1;9PF2E}y`MkE>F&PrJ26D&Ev|XLmO|
z^GQtQ$rxZ-PDhvFcM0JDPooO_D%PV_&)b_OtFP1&8t{^SQBy|qnO(rne`)A?wnkQ8
z2+2P-`U=(&>e3Cv?VM$c6t3tC6nxGRsFKe}TZiS#U)@EGl2TF^o8`!Vmg$4rO*y8z
zf%thvmOxw`@0ON!H+tYGVQIP1@<0?!y)E*CZww7zX@<itX*ge5om-*O^KuN1rlp*M
z^1Uz1e`cz8Yr9Clc{B4f`IA)J!5#RSUnN>{Oym8tB%wq%Eo~9ZTnU0+u4@aekeB#{
z_V2vr2#!(|z_Sk`4YF0Tpfo+Z#_`TgRv;A#+P?X>_0nuzUea0u=8uU9f&Z&LpwDE;
zliEyOU>NV;peFiFPOi4vZXu3q&F+f!q2|{aEt>0Vdi+QzB5iD>U=$#yWnp>wQpg#f
z3|<Y|=5P4>q;)6&oBm<&?++;O{}akX>k<1;C<sl6;J+C=G~LhtNpqn&{x?1N|M!oC
zju~G3PYd|J`Vaqa{G$(HQkKRHY;5?Ljn_p*lV8){C%Pl%+W{7=u0F$u(JxdfrIG#h
zeJYh~6co&qvWx~vZvP2(g}=CUJ-N^)J`4HXKP~kci?_)4cB59i2mZ|DlFZ5W(VxA$
z{*#_lU{SEuw_X-k#6%B%c>8m@T8Lw^y}i4N$bjF;m*cyRX#e?wb*VUt%iiUf8=9xp
zC{iMuUinf{y?9NL^-waKO?9_G=3|Kv<BjlOsD|`?MgK6cu_;}x%n2rrTWSUl#8n#H
z$k4Ny?~gCNg$w@^6-}zX8{CnrOXnbqiu>{R^GM6>suzD7-@K8!)?(Bb{-WxleDPCa
z=r{kYw7mGV;P~jYG;eRA7aVrf+H~w$mMUN6?JXaF(*IBXR!BmVC!*LX>$R%Mmbr+|
z21fm`zg^*k>J3_=@UZa5_^%_6eZ`x)5*95tNbcRe`<F68Zn5@J%ExC@{BqLYS*h*+
zbLl#Ucng_sYsSiFyr6n<qjo<q_^wHkQCRrGaY2G|&zxHR$4Vr-6?3s2GaCoael?Y>
ztiD3Ye?ILM{BI)zz3t;YEkQKdT{OS9r^P?tAP-au4|_D{k;s>%(U@lGqU<1D=<g%F
znEuvgo2pstCAA3r-lqiO;^HA8*snlb^NENFdxB3&N<<V97S@1<_LSHF%gwLo-3<{j
z3I=kHrOsjr`{=vgQiWea{f}JUch`y-X;TrLy?W9<9D3&{82gC%7bb_;O^6XLn8H5S
z?Qm^%cDAczX0rMiB!5KR94DX>qGjkwNZN<z+j?h{QA~-<)YjXGdKpPM`(1i@@_<t5
zo9Nyzc~&SsJtKdEhBgZD>B9y8)JIey!%9gaE8kXkS2b5E0sF4-sOVd?$LN?2H_MCL
z-T_;;@4c5GlhD#4LgvM_MUPgzq<#qRZsz&3Z}3ufp<ymlEst8{wky7C{_b>$r~nC?
z6t{OzPiv01(9<9GDjK&-7g>8K!k1i^_dn8&y9}_g6dNZ2tsH&?VBsF~9?^-4imIus
zRMwpuTLLWVF`7`8(VLkSRm2N5dWopVWX;3=!Wpmpd_Lcz9V+I0d7mqMAD@VbwTA`r
zkvn9V#A^8`V)XdMDPr9f?xWpegio)bt>C(Kk4?lJWYN&rBnarQdISq$+^jte4)ss@
zs9^YdHci--^lk~Hr-ghm@#y~XJD;a2O^UO)^nIQq;s<ZHs;kp2G=;M$E$$diUS(m*
z@3k&x3Y5r~J#Rg`6Mwv*P!hJZwBFSD=FI_Xq5@#d-%i(k!op{aVRvJsYxKQK_&1>Y
zmp3}RmsNvJrD(bv=k>F+zmwV_Rw%gX?NjR~q%siyKnf4u0w$79b+O3_X6vy?H88pZ
zt~vKaLrV*H8w<kruIWShzD)t52y=V;_d6K3D1?F9XQ*)-4-gF&%b0gdAmb~<%*xIV
zCT=Y-AyJnrAE1kckB*J}oLhQh(+yn~kBB3KVz&Is>wL)4^}nL08%-UWlkp!cf5*7;
zWOu#YK1;#eskrYbM!Aw#pu?E)u`<5;wPk}4?@#<638_^!=H|3?T5u_Agz+&!$tDVd
z27;$QXzIl%zmo`hI&Q|Of;~C6g`11#=bU)KY+k(}IvO=e$41+iAepSM_X&s}J!ryQ
zUi~Ajnw?21@GU$X_u)g-*zoqR-}6@++_-pnoowcddp@#6!x;_P$iS|+^WouRhH{TL
zS5xC<xpQr$>!qH1Dy;jliwBNkk})wv_>X56wuIkCAsu|aIENCNUeiaWKoT&mpzetQ
z#C&iM-v0jRBGaCmm*;k{p$q#g*b+oXMe(_vE&OvL$i=@$=~PQgv0Dx08nq7{)WB7U
ziFGfTs@8403+3UKrbP3}(l_)m``d;e^u#_QZ;!VU-))SzK*uCFa}C6#sp(PZ9~o<I
zK{b-W+sMKx>kr#>>9Q(h)Y?PwjGJR+QM~8Xy#|zI+^#WZAvuAp>i2KoQ0bE15pr`{
zors{TcVAqe-}hbAyp|wGEP{Ty8K?Wo*VmXM|J$|h{)NmPQ_}34V`6^31$9Kcz<T`l
zdROfnaup?z2irQHE?3DsK@>}YTXba)h6ixgIs&7v3~wD^<Ab87_toR$ba|Xtr6K_m
z=f&xw-@EMOsFPTCc_Os9+D}Em6o-R}xwmt$(U+zTg9K{gvV{x;V2`ET64mSYJeM5i
zk3^$o%=Il*@-3s!-dRM&MA?ojhkaik&S~9tS)MXTPR_LM%x=@}=<Li^p)H`E_9|NL
zX>G|IsVdE!EpU&;4<<wtqM^J`WWSF~)znBy^|v@>ZpF0T=6H#5@;s5>+25>Xqf**a
zdp9*Ltuetvf)UZ$-`YMhveJXv)Nw(5M0jeP(6tv|=ZoiPF)I4<^=Sr6z(9b%kFLJV
zZFE`D+!Qgm(xaIj(gOpD>1ZJrRex2O27yT0L;;Vrj%a1?Yu5&|)yde`=%}bNRC9)9
z<6dsT;8Lca`f)7eC-6i*emdHkbhtcYm!`{sxWYRSwx&KWwyVp+x!l!fm-;KDgecYZ
zs*V3e2K!iesjqg=eYqW$->n}-fBV+^(I*i8kH*H^Db#Zle0trS8XwSu+Lwm%6<tQx
zI&nzrM~a;6;$wi$N8?Dy?um^TvN<)gHuu`68Yi(gVyKgtQJZc4S8uW4MTxK54a_$y
z)7$mu*~ca%@WGiG=|}hOb8ygxnc*%H@;GfaBhq3@ioY8inj<r0NY@utBhoT<IjwZ`
z^7YZJ|BB6SURX>|T}oJ4<$d}XkW#1jS3W~r$MHoYt;)+XN1@!5dtX#bKGLQFM9*@(
zj0BlQ<T~>U1p;GKl&QzW;E3IPrI69Fpcj)4SK|1|LhC$hhWw@5YD{6_?gbhCJJV?`
zWem!Yz`%9qY1vc}*zZEE+Qr31#U>;U?CtEbpvMlB5P_?jWx=b9#;21jz<xAXfmZY)
z&r6B7LiYB16Wqn^5r^5JHx(B<6zF+CERl*%jnqgdUH-{nnujzN7AvCuSVB&3q-_1y
zn4puj#;$04`aNp3N{?e^f}9Dj@ZQ#)sniUeT>JB_=V!;?#Sbs0y^@3)TYIhd*Tfu^
zO*LM<*7zKqMFXo&V-N#LrHG~BjectL<-L8kjGDzx;wy_`8=LXM^R{}w+I1S^8hYiX
zQsw5MW_i=xdS-She4_=0zw(jaKS!BH%ZL{yW+4q0+-?#1x%^`5?l0a*7L}+JT3l==
zfL59)PG@|N(C7&8bU?7!A5)+}4;t4MPSgJ#P;N>{G#htny$n7BO@3m56iC+d=y)No
z!wc`8F7vyxyf!g2Ypo?#%5pqq!8^6~e^s<rzNq7}^Yv|R#bAMUDx#YaH&bCWC+_?+
z^QSxph6Fz417pkH67oy8W#J~%hI5=mm*KqGH#QDevkunnoxC`!2u!oNxrdnwrC|gF
zf4F!?26NT2+(%jNq9x(7mMSf%{&*;<B=UsrA?}}!6O;tXypxEG0VQqXAe<gYN}fTo
zXFpBP>o7UbtuowwJ~=2D-?q85WL#>Y3du_Yt@{LNx7mH36($$n{6Dwd^+8G)SOhV)
zJz_Ij-rDNgR7=*USlmRRY=Dz~pN!zRKMV-AN3IZipnC{a6bnP?Ty95>5k00IQHAcB
z^KbuTBp$vAxFi0MNv|TQrWQuYrRGMts!GtP32mILZ#u@Sy_1uleLg>)4optYCjJa{
zB1?$^1QD^ZuvGCVCTF~v-z`>m-s1PX=xCmr;$Wts;pX=F7|fC{SH5NZmllVtekWfy
zPj7P#x1?wA^WPV3RSGh5Z)~(vwZz<bV*}N#gA>bEf(6Io(a@q=T2!9iS0Wehm&7{+
z#GuXn`ohA(Jz3)6D}YG-kbXV$2m(J<0_Ets>GGG9h-1~V^MYx!?#!Q8dab$9k4`0=
z?Att)+Ts#I<fJd=ORW0i%1X>8H`?kY^q=WXS9?S_d7ka`Rk2I+^G`-E{WWr$Wo0Qf
zOfrMOnuv%<!@_p@KW<-5Z`Hf~xLaCx$po^&xTTWRAsG?7)EUo!lxk?e<UM^;=eUj{
zRBvJNQh`|`RICU%ER~d&%6__a4?xCZzcnl^>HBYh6;~xOy#aWmN=ji!n=|u{VF1VD
z{*+BjejM9dd!7MY;10(Rety6wF9k+>So5W>?j)f0ZBKTD)9)M-v&~>~<|CAg$Ma%2
z`S|(q&WCO8-@pGW0LO<y5LGmLvg)NeHCCkgC%!s#!sDc)sf~q}vdlWqylhAfsv`V@
zLR^k?zPXuAraUNL4m+J@xG>vHvnXFxnkts5*V8>aTIqmo2wif^7rGY&s!Bfdx&`=%
zI=5}|enhwyAzM;+ge)C0(kV+R?V0Xane|jkr^)Z%$uf@~vM!6=H}p(T5^l-K6q5A+
zP8F*Bd!ix5tbd92IN8u>+$lg$4|sxJwpV%)+MhlO;MygLKz^;c4<i_e+Pw>lIvqdX
zURF7y0<g6PG7EmEpA{{(+4=C6+tAqnA6OAckKOUSFbAZumag1ejKWUhvVvL}0wzr;
zhsALjt%sSF*Hy7Iq(JL0?C<t})?#OsdnlinZQ<e?=3)V#re>km&b}+AN*yWp3~CX5
zImGhPV-aVO54V@bdBtW>ruW{))MW+^DczaJV7_Lh9D`WsM~u(}hf{n3wdC-2Z{3{G
z?NP3G7q=;2YSdWH2c5RVmeGuYt)s>4b$}B#k_i>rTl>+Rm(zO6pppCq+Xk#>Jw3LI
z!6iP`uhU{yIS>Wboq`;U^IdAV5wBl7L{Tyo6lH{58JJ~7GiobIHc?UIK3D7I`%9Zm
z!fzi%XZu{JDAn+08V#-+DSw9}+9mGh25#-ke{G}X${jPClQS2m4!FN+x-ApRi-$+T
zys)Ejkc%$O?s+Tk#IGrtnwr`dJ)71yQNLKf8)n?8txzFyv(3LVwqD_~3l|zfYX-;0
zV%p+)oQ-1M7{vB!9_3wWvsa(icRoHfurg?WvpBQ&KP@0&u$48^GB;2B-m0uoTl7GI
zIxEGcEt9-*M~_0iHH^}Vd2vXmy-sqC2LmXZnxN7ZbhkSB!nVt1qshsYlnYbFE^NfX
zR@u8w{kA_~m59EE7Op1pC&-ln(LcxmN&8K0^{ayI<%vPN>8{&2OnqA>e6DK&s>E)p
z)-5*C^)m!x4Z6>sv9Z#P1)0s$l(HC&T@>N1Rl5vvlrvt{qf$>X3KVOlAj%s>*}{_g
zG`S_pJ3SdE${eI9;N7mTYL<z$tBH#@X}WSUH_m(wdb~8!TjNC0M@vjhEOn?rPDv^5
za<0DmT$RIGL*k0^ugL;6$;M{1?}(9rip+)=-3*6m&)4feKuxZ7&oZ@;myu!P;Be~c
z`cQVk1KFUR+2^#XN-`Wh#U@PYD?d4<7ZV_<d}+|H#`u#QRNA*OzxbaTRn5&0Pyk?(
zMS$MIf=<m{NeS1a=kJdnpFh811!Jr(0ps+={U5Jm{Cvb*E2@=}H4V1+BdtfqG~Su^
z2UV-*5velj*6uUT{Mqp)%yR}b@OAH=G1}Cd($Bu9OHmjbYb6rmpb44my5MCgxz(pv
zRPorHc{F-;Q{bu;s8t#VXHR@+O-lNDQ;>1|q!~MXn4Z4FFZgl&W%uNSYL-fs$@I6C
zsFCl@sHL)j<NRXh#9QWej&d0|iiV~w&523EKvQ@n+%jxX&&<kd(VNm3%}SQHDWxbJ
zdtg=vp~xL@llNb9A9|)nqm~6|h|9BkFwVbTuFoGi{d!sxET2oFG=kge22IRjN)!eh
zdRs15?8iTR*dQ&Dr+u{$(f-3$?8U>bGf(jd59-t+mwgV0z@Vx_7`G<!xO~JTN~;G`
zZYZ%s*w@k1!M1EJj5R_+e`43+ns>)`+vM}SWma2Pj5}j_7^<{LuidrI=)hs|yGk##
zwb-rR&vm3F&HQvNWnKE7rCmIBsEvcm$=<E8x!V?ePB&zExcC2+cjoa>es3RFDUmHp
z$hYi_y|G4-WE%!!jIoxTtYu3iLbeIn8IpCzGM2`YnF`-*A^RX@DQlJ@*|I-}ey`{6
z=k+{)KKFmdy`0y%@B7^6T-WFNynmOO^$3UwZ~or6MoSCx!N)mLQQ=bO8{c8(?Aew5
z=`W2L&g$2#T%RBEe`sUFO!4o{X$0j>6WHoQ)u8p72jz?K^Mt!)>GDD!m<e|Q7H~Ft
zWo(FOoGzgV{BbjuIDBWK4ScBtUcXkb;!{0n9NvLihp@>O7COOMZ0rd{PtDIc=_d<8
z={(>(tbVSJ9a12bvDMB3@?OgxC-~rjTw2i2>E_$}>y%!O1Cm()4IS#W`!)oj<UPYI
zZn3wR(CYbqYx?bjyQwdd0>8B{v=?Vcx&>P`1_c*A0NLJ>-k*InUgHKoEo<&kYHa5o
zc0cgQtoc)TbEQ{#xD1^*I#6ofY#Sbk^q#AH{K4R5z148D$8Ka!ps(A9qff#q+qRkm
znG(<&@)rjyr@#B`uE&h0JhBb^xzqhttnNlgqS1-s+k}f0W-Lng@FJ$)T5T=Cw8KbE
z?O&kiSR5?>^e*5Wc+&xd>j1xbiEWJoCYY3*dDjg{b+{(luL|IcV(G|13j@g_Tm?0)
zk#-f#97RM?ZI&rknU|j+0_ojxDD%eUMj^)5g<IV--T`)YCn*e8q$X!mh?VGc8uW3V
znZ)p&T=ny3>$lNpwA0+&;+C9Z@52*NsHXA__=9-H2j`rh_f~nWj=_RHcXj!$zKH3p
zOIw3f|1QFIT1rTEo!Qupl>$NJ0i0tb1R&<Hcw_N<UmFhXzNL3s{`l#^tyuaM?^i7x
zw<JDC<4W0EUk$N%{WGuRJ)iP?NAh>EI&Cedbqhsk|Hv;E+Z_ui5=IB+V|O&O3l=C}
zkhud@CT_t6I)YQf0YEH(1Vadg!4}&*-PJAY&A|mrWjJi5Uyr&U5gmOW&u2S1iR~p6
zTNcsiFjU?l?|})wL@zfxy9xC<ySdwGKXg^@-K+Ta<468bES+L*J5c&qd64XEZC{cb
zD}ulcQwuMwiVZB+5p>GbVkoQg{A$|p&kZlno_9H!wLco%TLV3FN=?Lnjy0q$ROXlY
zabnnc@~tptnrqC2VxPqsm}lhM_)CYDXY-Awg$Jd2*nA?`{Tg}Y`DL4#JWr~EX$&S~
zaxoPMi?Wo*<sRd7Sk6}vw^Ic8n`ClK&kK0n+Wu6;G<&!bps%00C1D5PHd<PxyU+1a
z;^9^B)vik4YtEZ+`B2Q;M<>z~G4VYaSK_kll|^1+>$J4lEuW>|^oHog*j;pFJ~RmO
zkL(~Cb{$j|JnJY?XiCrnljikAXM;n>yM^0knsK6(IUePpB=I`eZQ8H#v=KJEY@&hd
z9Z2vxUbbWRD~9cMvTJIVx=@^g#IGuz;xzG*zP*#aK#wUQ>0U|y`ppjL|3A=QUcPL_
z2lw$|i;M!}=UU*#J8lJc-~F9hfSg#n2JjtTAEzQCTqLl`{^4hsl>Bzau+<!30gqZ{
z=H`|S8tIdmq|;+U0mw%JrP&}`VH$`hL=3a-x3~VR3REBf9!CD{Q2V=$)#Nb_s^PR0
z2!-MyT60BbV1yZN`^OKfmo>PfmpuAU66&I4bkJSqtw`{RR1M;Or|?^B@sdg!)IK3E
z&$b}aZ!K6mk9k9jonAIe12@2bTdXMMUw<i%F?Dg&sOM*7KLZ?i^1D#d=s>-)j{Z>j
zJ%{`Euj~V19Uxy5Kn>B?cL4$)`BMSB(~3{<u_1%1%T73$wWe4<GR*Y9^u^x+;}TLX
z`lZW-N6LzpZl_YYLKR_)T`eUL0LvriRnVJ9BKG}VZLTYN3vVTMIqKyIoiLB*bj=l6
zm&<H@_uX#J%cJiORP8%#GBDU#<G3>Q>d*9FAUkRv1?hfmSXAsHi~`H#5}Mymg!tG3
z`>3aeX=xYu6ES?<@@^={gt+!A_L<a5Ad3TnMOKL4Pq||zN~-g@IftYHC`23MV9qWe
zAb?Q@3RJ+|$zJMlrih^N;U5>}F}}KK8KJ)~rxGBHP>`9WqwNrKe^pZhyqi>1{0!=g
z9s*aMIAD(MKl1B*%^?s*ERXNr{lc)a!$4}nRu`EkvYwS?tmRKcbbGQ@tS{^bz~K_9
z{_bD#st8z!oYCC$Idj!<vX5n^s-+GPL}b4}^}ZjdaWQ6M(qxeUB)C-rOt#Zv=HNnp
z;o`&o(GYl#pP~xNcyC@iob;)Tsu0$cdyZ`_<EOZE@Bud~CvAR?tiUz0z43o~W_rxY
zvY!;_=eFuNOWa`MadP;*AZJRn+y3FdR|q?G=5vOVL6kuALw3o3uiKDyU@#@09aQg~
z`YbsY01oM3u%bPC7LX&PC^8sB1&@iQatltd)*CV{NTJDb@Sp#cSNS2hnV}8{(>Jr9
zk4}qje%mR$tXu;$a8)4ca&Lr$<qnxzTO4Xnyj5KWtCUbu+6GC^`oOKpiVDjtzxOR5
z1XI1f{&B<26wCN5F3w}3>^!AmetsV0#<%ACjUjA6FEL)@^40Nk=v4E)hVBfs+lP1$
zI8EU&RzUPH;?F8e|J(3L!}NZk?yg%-Uv=jC5X*f!p0{srj3b*)6D!%%GdP-Fafh|9
z1Ji!WphdOd5PL}OB*j{gJxZ492@;m{k97J+>XUh?apRBBzMUyv*^16|Asfr}+Cker
z<A<eO6nreV@}A}FwKVA!CD#@;yb?={oTMaR-aP5_^pq-VsjBHPqvID6jSR)}p*zO=
z3$!8V^UqpArI-8o8wO*GKuy9KhRaQ-#ahOi?7pn8(5$ZzoDLJd<$_6^S9Z3i)gk0c
zE@WwGozVjLr~``tXIK4f<#6k=dVtFS7FTAVP*#4I=PD`ZxykZGefF&3eIFltjQ@`W
zD=FuM<*m4-H~xny7UjzR3yX(6A^UIS_p(4F6x6<lxel?_9s)nG@wfi6;|WgYP}~B3
z@S<^RFB%!&$~&1IEp_ln#`A(Dj?1DjMj~S*6UIu9<ezVH=-^R#I%0wJ$|xL|m$TPy
z9U3&d85V+^mInhRN>?vgq%|_j{2Hw$zw9}})2sSupOVi6q>%KiWZH!bj-4bq7psu2
z^jqCsaB`e!<v4PgNz2hSY(@*qc(G4JO3D_*`I?#qBqSw^mF{)l(}U~l&p&N7R5#WE
z!n2>FTeF>_JLi2D`@Ves483|aB~|Xs$xw1FKROX+Y|MJauW0V5pMfJ&Sh(udx1`|R
zpVSpBArf_rHXu1%QBl!pNy^&>5>#N;mhqL7h2{5VxwQcklI-m`O8^-LJMw3e*W>!Y
ziIf`)H*ER{rj_%lB7%aT6d+*v9nbs*h0(IkJ-*k&D^)j@5EN8fwFA5*f{uLWNvqd^
zV-|Q_qd@&bV&W>t{_b<`BD3`HB(cN2eZ_EiO8V|bdQOpk&du4%hMmll-=1+uQ=dMa
zx*;(NKsn3F`2v4H6+78c&QCkjWHv?E&3LH`PyK9uA9{0SBbFO!Pd}g3TtCAYCp1f=
z^Kt9&Vf9V#XN?&Md!Nx$R4G?u`uW%hi1$sy2GvBmS+$op8uEj4ii_tb3xpx}5<46|
zntHx~N(yBE-Y~tjz;fXNsL5z<6}cg?w~<8@aCi4!Nq?!GUNQC!P;EBfZM`*opHv>_
zm%ZarP@o47Yid%S?uNxmMS78OV3@qF^k8p3`h0=MfKLz@_|~_83-uu=nr7mG>dxwe
zsB47u%9oArN2-){UQjACd6KGU&Dqf0bNTDr-EI<;fUc~qt}Y0{Azc6uAxAJz$7%e{
z5LvYy2&pbA>{TibRy&h>Z^^q%{mBV2pTO&n0wGwxkh1cZrY7|a)iePJ<o-;wEjd0x
z)B|vkJZ)_cHb(Ac@I%Ux+tYs%R7rrXcDvpiyHF^{$^n~&`sP*fPF3(ueB~8w=Y_WO
zDvj_eg>hNnW6CM9KWCjTdygu6kA5lT(R5F2lK`u1(KI&hCcm(%Dk8(C^Z@Mq%EY6q
zc7rXSDytPTdNQj=+S(Qg{kQ%|GBQ4}vONs7KNoDJu<WM4Ii9WRbF)tB=Z_z38{(y_
zpDJ+k=sr^779ePw)7si5uO0}tJ-yO*GPb-oxj;9D&C}@>|10|s3c*iweSHVRPT!cB
zy#u6Ddx2f)KwN~EtI!e5SBr=b2hqg+y|pBu+nk#{e?j^VCl?kvaHL4KeC^(|A(cY?
z$MZLJXEF7eGga#Wbr1wBXLx%GfYB!!r90zEJbCojOqn_F{w7E<JK&iI=q89BV4?w}
zdyfD%G}+B4YnW)St-4#YRFW)W2IH+;OAFjgL2+eS+_UWz2@$MQN*D{W)GbIYsdd&9
zr|*CwfR}2kl13U^k(uVdBVA)%O&Ax}+AzQ$Hkz`dq}|Th<Qycqq<>J7SW;ac<ziER
z(Rg173XK_M;pCLF9Vj~pZ)>MOyJ;C1D!-DZCmw5)%$=`-;G(_IQ-olZ7s4T@ueOhh
zia{HuaTC=xBje)zqV2*{D#tT$ni}_#3^N5))!~(HpEJ6}aln}|bC4<o0Nn};3xmc#
z_4U27*tp0>xE}P2S3x0!i~=iwz=;VWln4Z|-78g<1_nLyuBebLsc#!grfkAQyV|>}
zhU0G@cMe2xcE5nexr9YUeebvDBHZ;`9*jTNOBX)j!SuXplkve#9#v{;YPM;skvML}
ziTz#!blJ`(_x<TM2Jk&q=Cr(eH6Xy4531VpJ#V<^X9tJtY8jHOu5;JSEMwSha<Ij`
z;zd*{&hfquBtom~>3z|q*?GJfx3chzzHc8O61WZ{*W*FKUeKRcBWWsqY_i6(>nA8K
zgMoR$%hK|YPkHZz?HdqQz8jtFXkI?P_irfEOF$QHRi=J8TxudBSomt&oR}BQ)4K*>
zfK4=F68q!9+rPIzrk9PJreQx^xXE$n6qQ;cEdHEc{Bs$FI;eczt16%9n6viE;og@F
zUpClihF#RE_Sd0!@e@bhYeGYrg-q<!gShU}0GoT~-L0Qo*B=7sDGV8LeE{0M9k9TU
zw{B``HYetPd+}xEC^p5y{$~tVW#?y;UN!3{hCZ=jb^RlEAs{X>24oBOT8pr?UjqjC
zDvDlBioH2E>@#0`xBdo&Eztd>gal@ESzZ(OjmDN14bYvLg~F}g%~f%+`afP+aivhV
z;hn~G*s+2_Qa>)8D!+N>^!kgO9P7r0`b-74JHyrg+z_$|?Qj?XdYiGv5L1ErM&CYs
zw`GxGRuiUUqJ9^oPZn4=CUHO%5gK{|hn}*_M<%Z+s<UG<)OdfDS;bkl%81RI*b09M
zwX$_rq1uazZv@%vGNS@zac`h(Ul{)$(yGb>`j7a^d%fyGxlTmNj9?Cpe~C+MXoZ+{
zeVXRZ&U2X8`Md^Y#o*h$ZNmjjoK$<-Qt5_R<@)*W`~}W0<O1kUvIB>7JN3t`_H2aL
z++0~H1avajyoQ^MgEm=O3XxbS7`e@UpGBbk$SU_&Vv%7^xq0<V_HxIMraQX@jnY&p
zu9F8$LLIB9E7di>ixCl_%S12V2foH#6oK@Q>R-oT$pZU0zaxPGVOAXd;Kv|<?BvfU
z!+O<wYae(RX=?+sZee|+{d#f3m3_zQ`5B{<(i2tUZ(1fk4~-L8O!5CBGs8M;FaT^o
zg_s1oyzw_727DU99H+Xk1<rt4g1+iLA1D=-4LmbbBh{wjR#{xQaYUwH1V22y@ErY^
zIO@S#X$pY$-a`gPsX$J0S~5{BMr-i90arvfad9`d#P$UCOq5s*c+TTv;xL#b-9!}{
zs`k#7f&M&qk5i!uoh70j!M&G7M1-$Egw^wkt!gu!($Hf=8Q&C*Zc6(p%|`ewoycX&
zyU%|efFhpoC$e#0obhQUzN>5RGjn&aBBJZ-q;uLdHDw^)TEh5Q!Vn8sE@_IWC^^=%
z*sJ#`RzmW?tpQfho{563r|aLPWpe5{h9b-=T=jc9he{^8a*F};^meC7F={mH9Lgan
z#U_V)tTY>ul5os!=u`4`5py*Cq2h)G+5cM&we{ht*^l8G4}V>2Oc9J-9OlO$|M~dv
z%QZ40rQHLjk2$wdFOZDC^51$BWajm~pW)Pc+HUC>JJxejc6oY8bt|}ogB40c-Cg31
zfD0Y2T*Bjrg!_*!Nl7wvT|*2O!w|sAaS*Rcf2Q@XxA>D~T?_;688(hk>!X>NNb3QG
zR_8veep`g%kBN(i$3IWkMG7UMTuP^`u^LTklA#C($c1P0F=m1np2g{xyL+^@33u+c
zI}DHzjU$N08abu#sqkarmf9yFjmJ9CbXBjmUipei%g9YBAU#Hh-^cWymIKdoYeeI7
z+Tb|cWxo^05}_w7e3DXQH>CEmM+U#NG!3^m^|TM_@-oXnYQQ#FNJ{zBUPy{gdD<>V
zem#64eDALi2oY9@6V~dFi1;IODs*HJ1dk=yFsCCU)f3Hl<ybKETw289RN>@y!4ets
z(iaD*_)eUtXbiDEe_r^n^R<w1=5=|#%oFp{fB&Y+efC$BLp7gTBd3COFc%pvH`F&N
zD;HqlyMJs`58=(bQlKoESSVAUD?r3djkCqH94Yt!JLPGmflsZQN-irAqY?HO4WO3C
zdC>_~M82aJs225G48D56UweES1ar`x(~tj^i+OI6U~yzB4zMVRd3>g7cQlhpsx}(Y
zeBwtxQk~{!0s6);63MK>#?`Lv_&44|xIVj|3!sN2F!!#98MKJ?_ZtB(Rk}2^!r!L+
zhVe3IW?CTl#KittBHTq=I5=?b_qMcj_4P#`Ura67%zX4BCntiBpFeit+@%<kgGYvm
ze;d*+Ev{!-@dN}_AeBwCrDYO;RCBb=gsbrarD6UNsAz(|%=rx~K}Rr&MB)_7z*=79
z%DQsAS39@mHIe-#sy1H{G#`)ZyYF;TQZN70Dm7kaWo1&;I@iB{F4hM3<(UZy&fEe4
zF?I=wvaT)(z&$&<OxyeSCK(O+%BRJ422aE;pvu&P9$R~#<}hVCqP0*_xza}PKcW#4
zYj;3~gjnOPeZ|o+vGmVkV(b=@IV>$c%N+03j;*eK3-m!vyIc2gNLq^Y8+O7KP1o7e
zruY3e*kb7aUaT0@k=oiX{X6izB;PDz;ZpW9lc_1Y=H^=^Hg_SL5|$w14>mQ0h1yx&
zv32W%gUVTNF3L4!4gxbzPSIE~ud%Ugoy_dtlR@&BaqeU>^*lSB$0(GBP3|52!&X+A
zae?HH`Ah!Z-sjI!3ky4?4Cor@+8nnrp{KbzpG>x!8f$6!6UDSri0i;koae^)LD9At
zDgP2LFJgSW6q^jFEf#9|fM{ttK1x@GhKA$OBWJNfJRW?f^bR8jeS8(sd>tJyHsZ)<
zB?QUN(IqQ^+0gX3S!$wl-@Yx*{4kJrz`}QaO?s5d%BtWfL^?elXK6ON@-lbolcDA1
z;V6E6b?4)I2r2I*r56>_DZV^dpzIQf{qT^5z_O-+C_1C|yY}|lJTW+2ZC;*{I~=uB
z1UNfD(PeQqBHw$KU}5p))jAi3N97IcrAr;_7PQeOI_~apIJ_o2TtIPfqH9b>L0Cpo
z5+Jg`mU2?7O?bAx6i8>PV&AXVv9e5I8^pPeTK1OZ@?}@&@4PHrm{u(X1x9c3Kl|^G
zj!|o*jZhbH-U1aZKF<oZH8l}hIADQ;H^T{T;8|ic<Xs1=tEwg|06I8|nnpuAiaXcv
zXrQK==Ll7^abB7F_N_}YUwxu6WOuGx5AB+P%}ga(G=x@HyM3-=kByBbFQwcDtjXx-
zl<!`eM+YKGM@FwHU47$4X2WNAiOp>+aqOrhslH9(BtQ@;3v+V|lSc7}dx9mRUaL^r
zRj*ZAA`<R#{KO0C0`K^km=Y`*M<(O2B{)P%q8<zm|FyOT$hWpQLs*>2Rkq@Xfq}r)
z80+{*SJzwDI|-$A2rHDK-4_7k)y92M!=pw(5}&H)wIc*sF5(ZLb7p2_#K=su8o0W4
zj@DI%hn+NYF{!d=XMEiE`t|0RCXfRj9YZCARtHKhhldUhW^g!4G-n&lW5@1z;X>N$
z*Nnr%3T<upwl?A8hN{(dI8*@(>6VtK#l^p(qpyg`>J;50>Rw23f&yny8Kl*pZPw#+
zV$wB|N;zLAB*6=jw5LqguOAZ;sGhK3?ART+k9YZBs(Al@h;jk*=l`g7{vY;J;z0`-
ziP|S7`rp6rXluK}%Y6K9KVeblhcPfQf$S%kJ?ZG_*(dZoNxjd1J_2IE$k;PH{Q9iX
z(Ot~dNY)jy>SJMNztb6hLDsnX5WMJzhb}px`ryB3j+RuXs5Ap=ul~B~J$`fmOw&N4
JLft0pzW{!BD6;?n

literal 0
HcmV?d00001

diff --git a/ui/tests/registry/evidence/registry-catalog-tablet-light.png b/ui/tests/registry/evidence/registry-catalog-tablet-light.png
new file mode 100644
index 0000000000000000000000000000000000000000..390fe98f9804d79073e27679ff20c90c1e419818
GIT binary patch
literal 82812
zcmd43RZN{-)GpfM?rtsa?q1xBF5IQKyBBvYR-`zEg}b{`pt!rcdx4&pe*d3+dv12J
zS3*KqnKI@a`aEM2q4Ze_8G!)d-Me?lGScEI@7_Uv1bz<SAb`J=lpycDdx!Q;MqEVA
zBl9E+S{F<4!$7JemL*noD>fE-e~(@N+5dikU&SS$l|L08`!>ybpZo8wdVV~*ep!Lt
z`(pm@^W*X5%YF3r*4EbcHZl^@g~kJOc%MPPhbSCraJ)Z0h(HEQ?ZKL1l}a+Addfw1
zHkqUF6Yv$<)xGgY5#?)|BTClYznudE16$d-xw&+VA)QrDGRf&SZoz246n`O9;3>dV
zBK7F9Y6_uKt61OYBI&^NZ<9X<4Ox*YGY?0Q@zN$6cB_m^Bp1rAC~&w>N=U!0-AOok
z37emk(=%Ei%Z88mx86&}^?T;JQhMkd!@u#WLtt_(QVIm-5}!nn>J<*dBIkLe)~|{+
zjJN%XzPi2Ey672ox6*CiWP`LLt*Z?C@(Ls0b|oIE5<u~@2x-?1&Gd(KlHLI2i|jJ?
zzd^JG=hZ5@AWC2UpcNg$=-s>2*JRE>+WLse8j1gQrFEGvYcgz?43nf;1%-`Rl~hFW
zChDV(@(m=N6@}%exk+=HXZPEbsj@?ye_x@ib*75=<S9LnmPTWL18djaPD{T@5Z{R;
z!CQDR_YF)h(jFE6wzFW1z$x5TdaWHM(dxJL&{n_ZT%aO({SmsTH|QdK_Qm}=6n#j<
zUQnC*?CMZg`xz;h)O%(AT&TnIFM0xgCJ`GSKgEEfnXSgv>!-`XABD$j&}MS0*a}82
z=ooL3(|X703Hd(8hBRwQnh!#0efwxfgofJxEvIqK_vRKcJTj8$R6pknw7ZDEbQ~fn
zB?))XH^Hs-a6VKi|9e(8HgK6#H^FW_Per=aiz%QC`p?zoo&kkctSOm}Q4mpYGB|a4
z)mf|t<Uu>D)9TF3^l2)L6d$Ao{j6ARxo?yEb%fHO-cyN=hS%n>`bq}vq{gJW^K($p
z<>=`Y_IGPTnNj7U<F093*`v&%9MS7vRbF9iO&=-9x7(R<ez=LL)i`&v2Tk*qw}-ZN
zf$I#%I-DpGKy;^c2MAEp&DQrV^?i<~94pXV<-yxtSiv8sDcV&?3uvlLA^8v(w5#3@
zmCS4@@pO@mZ?;ljcH&3*pWi(p^Nm4`IfAOV_P<kTZQH>=0`F}29Z&{O=c|7_nab(~
z*PMUBMHdX}S*NJ#>FL>L)U0-UQ4iK>v{}j5(Q$Tm4tSFsfe69hlj3={v56*F6+d15
zb3(IKBtuW-`()J?%~uSGYlIf3v!nK3LUB*7GoMW&1{u%NbtaM#=g$pVF01^1K3Po_
zCkTR})B|&#@}Y4et1W+3<n~fOJ+`Mx^6~R4q_dRC<hMWo66AH29x%sBmM|b8hjb?V
zc0_Lo{aelUFc`XNPe6|Ny!zqJSZV>YS?@?|r_3k;G?Co<vocIVe73SE3Rwncp<3l<
z&BTfZT%4(eN0VJc>0grj%oxx}WT6^~24(=Io)_h_=Hn|YcO^0Z9e*M7M2)L^aVf;(
zHIZ=5%SFH#+y*_FTynW<?|#FZFBrO@c~(6S`^g3UL=Db*Cw8*voccq+lZk>ctk(ef
z*=H}Rj}IIFL+k5u5J~oDBow|VR0zUOK>?i2(x&<9aE-tUC@7fh&by8IS!@f<{F{=f
zM#!KJi$uIZLHE<O%2N7aN4cy%M`3FhU6IAsx#WtzCvxby<;L@mxdfcY4~NcZGkH1*
zJ^YR3bgE1FZ5k!V8nI0JJY$oSuUE;0{c`GJHTUN)&~NG=Sle8fACy%qG1BL)iwGI7
zb2+k0KYI^WQ<N6%*)q8c5v*n9Xyo8{K_ld2ICzc-pO2Nq!5(Ax{BG{TAq(${je(on
zwB6WbA)<j(vAkXmLKabUu?9I$F1@4|^f|UROe{MlV6$P}M6T%u-=D2!u$s8(>Xu!w
zBO%8;-5zHN`}>Jd7maE1xIIUQhr^kem^9{v*gdSoL`Jf)u^r77juoT7sQzpaPp>rS
zR7m6SK6~DsoSfX-+cS|uJ(({32AucKIVGKto5F!uuZI|9_s~1Bn0Pel2f{c9QF*TE
zB&IL4F~~?;!5(6y)i<+!!_Ja1-|0g2^bqu$J*1`S+(HFcaqrsl&APX~98!hodJ+)N
zkb(52=`A7P%8=Jd=zj28nS}V7iFn_UwAxr$XqFl~iuj-K`E)NV6t`%wikv!<N?@($
zhD`du_9Rm)W<^EGDbZ%}HP~o&rsUwa#_6)LD*NebEt204C@sRm@2-R#tzqY4yPvJJ
zJMBh>Mtl(RDahyoYv&JFZ=0i8C{^z5M3A$Y$^PAoS-(j5#%;F-&s*>I(tzIk<aRhS
zGQ~E#6Vc1xV9#oC(4^Ojih{?n*Ef9q=e|t!8+-6x`=7W119mfcd)pVe%3aMCpVhGp
z_x<r7hQ`KZfJMs4>ks(I*(Y5oEztj6py~B6F@ePF<uM_LRL%D=A@8Ojm1N<>3N&0j
z{E|^r<%vM*n8t4ZT}>}wBzXiuW~hD$HD0!VG?Pi9Bd7&zlAx!q_dczrAxtO$BYBxM
zIhSc0Yp3r}&iyBfHT6L<cy}fAvtGHRAtllMRTiz-5}n;rmF3{jq^dw9F1D0@`COC+
zqlU{u9p_O<me-E{as@Z8(R7gli9l27=1-BJrxxPfr<h<f5Kn;n`HL_tG-)Pj&~-ZK
zx<a2%w?@2rV<X-VQgWAGjUW#pL$t#uz+XvV*?Qg{{F|4Crm5JQ@^G-5mida;`7SYs
z9?j>MhMmXbRXrFgAt9k^U@Wa(`XdmvtzA%>I_{=38d4so@U)~)kTD1$Uu79UTc5sO
z%r7k92L!~C<p+yz98TlDz{aM;(CQQw#H)2N?0+CkAM0C^X7Rwf#b*U22@+~Dh9vf%
z0Jed+gn2=`Ko(L`5^*_e%^fqEX(}uh8j~7RC-<#Y_I3dE0~JF>HlJ?*UIe;QdUBXK
zC+pQ>ZR*|^cu&7)th}?Py)RS)vJB$;<9Zc(r6Y@~-k*t9V-@pZ>Y-y;**TT{bqk9p
z9sCyv7^G>Q88sSq`sL;$J=G2;O6)&<`e>|+fXm}+Jl`<(tJZWFPGP!AChX=rB6)Xm
zsgV9IhI*IpD^bBF=@)rIcGs&Rbw+|M^?+_9f9Nb8KaY&x_1nD8UsRJnl94$bT)>Nk
zDxd-W>|kWK*nRc+w~y!3UXS@-#e@ca;!=i&>pE^(bY?F%iWb?2+{O!LCLzE6eddVj
z9^c)g7$?@fy)U9F=vcS`-$v|gVlI{!D(^yRN0FkjzRflaeK9gb62o=DQ=@h(u}lCp
zO2MtS{Yjf#RDP-t4qLt{$?sRZwZiU~UJ&~7`NMJ%Xxn+eGU*Ns`74m)rD%-5|DB|5
zG3z3>?DtG!gU&z2drkNh!fpA|@-}7F)lT!eBJ)o4>b6)jiQU5@&!?iGp<!B1dwlHI
zK8dp?7%5cS)n;2zgUxr1%GE@A1NfoMgM(mbFIOuKUx)pbl|{_c)6?e{;V-{`n9bkK
zN}<?I9?f2_wl<tjmrh?5*3xOvh1tXr@iR*QfW>FGYXN*_{3doO$3?TJlzg-ok&u&0
zgYKD@GmcKDqj!C}0=uardZQP&MNnlNiJ-*8YtZ0?mE|<9!?;?p$o3uJ*L?5K#GXc(
zj8PV#sUZxgAqq$4v>S~GA+B-CzH*`j$f)i`4n93xst%M@@Wj74JXqYk=d=D$JWYJx
z*cUf)1~LXFrnnLXI!F`9ZkCt?Pg3?{h%Y6GX+Ot}j4ykO%nm+aIx~yjo2`PshQ>#s
zE4-5ls?YVbjXELua){<feBHlDlMGH;j4oF|LP}lMATiOyu<L8V;f2n+xJ4XFJNpY!
z>X7S$C)ginK73x9kAOY8Tq*@CU4b)p)H_Amk_#1a(c-(`VKKc_V~hHla`pUIl*yF-
zm8VWcf4hmT=d+lVdgVg%@z;<jjZ&F!wC(xl%kM-!7&`n_HJDbal`L%KR#g1X0kO|w
z(<eU3*yQ?WZRJrAaJU2{Bx{ZC`_qH&v&H(#6Up)M!PH!;1=1cF(v?EJgNm8h==fSA
z(=S_v$GdbMVicq#393b7_t)Op1CzN@mATwLXFd<{7mz6nSQnR=JxbHc%F1SKM?}Jo
zz~y7~ujsm+^QtYkVk6~1BkrK1CJ7tZ@#|zPEbtWgKOE3rb<2ED!xIB+<=5P*agE>~
zl-})#0Xo2qK8kdz+38HH)zth>Tjv|gbg@JU?F2u(ZX7SLAUR?)OvyL==ARUr_xNM;
zjktD)Q^Cm45RbX9w`i9ToBV*V)BVGaal`onH3fE+v<RaaOT#lBAqjmSKcNm-_WRlb
z8=KIbvn~{d32v6gpHANoG}bab3-`OfG%m?s;7t=278V8*xz%|V{QuHsuoVhkxYwF~
zU2Zee2t^vlXXlZdHg|FJ$X^PC-d2~y#$n);$K%H8$<fF*Lc}RoNrq`bK2n%f=Un^5
zd!78CVIQ?(zuF>bJ}!WqO?EO{Dz(`Y5^T`h*9Vn6o2M0|Y*NIeQ%zzg!rCF$`WAER
z8s~3dBX-hQEV<Gle4<jB48jVlZ4NOe6r)lrh7-t->*d16#>V!?4N#UbUPTkPn-<J^
zmqKpataUq_An&OAktV@8vr`3*nzc?9-@h+55dX=X;#*qK{IJqEDP&7BT8whK9&B2v
z-;PcJw(D(?*iuEMfw>F3J$}5_V3|K%_<jLJJFWq^ZZb#)5VETI4VyEEG|QS#49->z
zhEHH<0-G3yWLw$?9ERtZ*~U0DlOrH8+97K^UlF#EJ{RzG;XpqeXl=3&6qhKG-LT0t
zT=ByFqj2V1uynPj_qA+73)rTR@xx?0qVYSN{Gc$!a7ZE>wJ9_95X9Za+S=9HdxzyY
zh4VG<g%UBj$zsw(pj2aY+2{{qR(!xG<T}-Cw)&=PI)HR&#M=CKW3tCn70Z42VCO=+
zJW7fFhN_ApYM)cq(xUixm<ch_3C?)-RJB-C-dXa+?cOaW^wmDPUjUE@NcXn7mxb1d
zAfi!};vREb#eJ>pb8|g^C13C}QVE1B)hk6Xj%>x1$rj4mLWY4%Zen9FnImKQ3fKv}
z8v{8xd7+fz_o+OQ_H<)B%XAJfzxUY`kQ>z5Egsx_kD8lPpDhKwx%TH&u98k+rhDK1
z<el@1iTl(Zu_=O|&uGMdDAnTy^eiGhtWCC~i@XS5#SLpke#S&p+fa0HS*|^9HACXy
zMBJ|Ak%fsG6tJ;4vVv$ubmgZD*gRY~PC$P23jT>&n2|WN48*x7CpLkBos~Fo;SU{W
zM_p^kQ+=VKp=++-Zt3dtE@hwF3LW2BD_+(ln)68(X^()gfTpqoT;-=0<wZ&vFKZ(v
zrVxz^U8ZNMoRI$7Cka<dY3+BT8u41RDg~b!!XI%6=<G0TGahti>Xk0CR*wD`3n-F5
z?58)S5s}YP<H|Km9Vbp}G=wf<o3MJ2&l39Zs!%8u79n?c#bLXJ9N>B};V32bCoL^a
z64{D80C2M6oKw`W+gsa^#`zE?TQN|W<lUOOLCJ%oZ5ibtD-%IPhMT{5Y*_vxQ2KDF
zzpcF8%X^DSDTK_)*Mwr>k1Vt%RzB^*YvbW@%O-pG&$r@|ttTgyEl$NC!P6HC;Yeqx
zJZq1ZUkq)&ymmf5(mx+AHQ%=Jep{+L29muwu`tD%zeXbOkO^l(yR@4;umwKvj-(`E
zYgQT&0#zhhf8oI+13SEx<y--YPz`HPX!P3!pM2kLb+ycQ!A+}V<Fh>VQERz+LDdgR
z_E4iS@an7T0MU7egoP<)3J|i!s|Jeqmg@?6&qng9QpFrB6^?BL2xewwO)%u;<;4;S
z#y|lUbARibpSHRGTSTK`jX|eqr(MVVhj0f(36u%mbKDe^Q-_rnkZlZQQ19>33&Elg
z_0I2&x%jk01A4{o<4@juPYsLtDs6&vmGQIK>bp~a<6v0l;TR?bG=iArGhkY}QJ^$F
z-|k`6{h%PR4!;+-%c=UD97B<Hs6h!k1mCn@eRJF9HN(@RykQYzPxh#yTV&9B!|~(#
zV=69MEMU>Eu>|}Ib3GbGb+9mfgK^oj<$9oTfy*VuUFX0+(-0gCIBho5g@^C8xWBXc
zWs+MkW|*=yuAg(jc!F{douRDxFhH<&T8u<)_jU{XjrRk{GMK%AK;0D@!+*Bo`%!iS
z<uqL(ovjgw(-KiwUe7zcx*px#SCtbU$M+o#?!VMZRPN4~v9;+~E@~qp;GaX))k~ar
zM`9ahYh3Tgv$PA{)%}DythN0Y!XuX5PJShj)3?RH)vNVgh!h<*t)d8ngUXw)tkro6
zzb3kJYRgZTCYCkwdVWX|6mr#F)v;jTNG)?I;4*6EyG*At8%%!tHDIU&=izS9X`knZ
z`-hQC2q)drX=pZ^>XiT&8~wwz5Yx<vlGLE|fJ>~<{SV7THtRY0avd)1YOC!~1^$8r
zG|+9kHG^(jOF+-BIo}tENbK>Fy(aE6A?!NS>p4L=90mL3mWXtY4*Qo?J-=a8s@9<w
z)LKKc(KJKjkef-LRIxBjjO`<YrHvz%D!VKz2Z&e_e&pJ0LH_xT<L|YphK4?uQ|=4#
zYgv4CXc#UFU5+L&xO8c_Ze^5+Kh4IIL|97$p|5&wlGzHOYXbMt`3@&u6}GImq+$-T
z1-(-km+!jZi@_8Mg!9;tV;NIE0O%tu^>kKRH?TKNeD&F3h;^Lwmql2#b!P1X0e&jy
zFEkQddrQNlu|DYudIy&}`(^pwzGmm$i9hE)U2dR-nMq-;8^@ddY`^%?*%{Wb>X;mQ
z{Au0?*_1q7XXl6*A5@K;6ZPhy!YK0%>tB1wuy^O7??TnYjp=)K+hs}Hj8@5lS*Z~6
zqLgBw>9c~sji&g7_$5vV?LJ-#?JbE!+$<)1r*nlRo^?w0IA!Egv3JMZpJE#2B6D*$
zqw%NdG%6@86l<y0s_<sZrXgxHo=b>0BMjOuh&fzV&II8*A#YV(A<PY2nzC(1=M;Vw
z7|H!odx)&PzW<xXRi5wiT}@tI{!pbK7Wp7HZDOKo?$nDcUTjL}hhPiCYP&=&%mWmR
z9~(FKV3`ELdXBz=kC5+^jfqK&RRaB2xB@&oQE5S512#b63Z>@_jZWljEi%_{gzbar
zZ1#9Y1}MsnWT|}-8APtYN8I-7#JpazzBQxY*-uvM)hD<m14SxlDnwN_4b6%1v5B#X
zO|0@1?KQ>4)#Pn5vtp84wk0K{2K#6_M%&d&wt!lJ#^CTz_<FS%;+Vl62|7M9YEk;O
zRfv#(6pR0>52b8Ucy#oGr7R*MVwV4*=gENx;J?#&JU{mYUiwNs-5v^f7%Jk0?Id>N
z@p~Sv0GLUH@Ewwv^4|`<U;`KeAcc>yk#9xu<+5D_RoKW#yYkF$YK36{F&Wg-3g(t7
zmPJjkKX5u8_sxWcGM-|HrwEQ0&iq^1tzxD_V^!3;C@F}8Lz|O1ppeFEw&Vkf12<zc
zw)y@-fQ2Pqrz~LnoflM_P7xl8J4w2zPzL?-UR4bL9s*WTzg)FBI7b-eM~ixc$9v9m
z%C4ds5}vc$rQ{udQ-YN6oE)^nI6>>%^h+_G3MmoWy9Z&F-#I70MF~Gu4!;WI+E|+U
zGiY;>FTVIA+OKyI^7)V@A@{__-fa(}1US#nkcs$<hjwVyf4K%K<G%ZSE=x7{kpgrl
zuyh<0Y*^Q2<KGQO;m-RDQFR6buc=_8_^*LNU*&ITK*RwE`h`>qct4U9A2CFSK8%#b
zd;bw#$M4p{vY#4dbB>z94_@#7bN`A-HMUlL{LTk=N?N*<V3xjH>WfXLIATt21y!)_
zxM?Pz{*~8#!W@ZK^sPy50^66n(7TvY(}~xyY+29SIsenU?Ot!LN6V4wTJAbaHQu0a
zerp`>4fb1zsnv+NHzU-rQTSN(u_WN4AY^vpur$duDxPi*xwn>Xbwqo9JzTGLI2*(>
zc(gd*2YkGI9skbRVUf@SIKg=T&_&Yw`_LzRM5@rsfiZ^KI_Z}T+rMdkogRl71Cyk3
zDbZdAF1M;%!4F!b+-DNhnnYI_3-{G@#>MCNa?pM#->YrrlSpl$eOU~9t^%?M7Zx>N
zISM^iWP-F2pA07ol7m_}s_NA}b(^z^lfYDqpi`9qN^pg+rXhS{V0SFEHI8-_$JF8?
z{1=La3Mc>%+gYd5zj7gU0cqzaMO>YI7UA)l+yB*A70M}#*f~(t{`0h4HT8aGhAnVA
z)CbvCsXgh!+Gf#xV0-`^xU_xrvFi2Y-f&Yso$JoeVV|fixY>EX%e<#4H|{L!XA2pC
z*g_2_a+v3<eU2!q_*6JmQTYNfuGdce4DpkB^$`uNpt&WH<i6(?wukwvap(14-ELLk
zS0*juJ9C|XIBg<PTD6NgfKy9yx>lRmu6aNCcJ1ri9>XoM`wrhlk6RMVP4ve?FJsSu
zvhResM~bTrWnwg^II0X^7OnrA!H36de1E2&e^q-<=~l=^Lcjgipvg@bNg7)~4@!^M
zZG3;He_2mwX2Peuz0%-atWI@OX=p=f0jB0#*b*J`e|+GD>M2zE!2tTz{5_+@TiH)s
zd?r9u<6QXebO~IPb^BYRzLfgnIu+Xb9(&|ly;XDGm!cyQs_^h=A(x}2_QA@Qdaz~b
zqN7>=w+r@w!d2Daz)YP4oPQif@kZCMH8t}J8$0`O+BoaCS`$fgSSYAr`Xz%uzCOGA
ze+SM@Y;<)2yPR!XfqHS=*a4+Y$ScIK^YEI=#%=RO3a>psy$sI#y$9l#K__B#Obq?8
za*j6dX>6(5odtCj6uzDWF6o;jF5BBb<GIg2{)AZTK)t!WmXfF1=QzwdVV9#w&58k$
zJ@#V6{&~$m*9mWaCr#h?>5GVsnQS(d37_|B>>pLclp6^xVO&k{s0IWy&f9#ilxpw{
zn_+b-Sek!56@mzq|IrnqrU^QqC|id$L41IE0XQ|O3OXeW22@Jso{H{K1x?$-$A7zd
zh2D7%3Jm0kOnt02KU5c66ignW;%)yo$JKAL7YXxz57v)%PrnHmc#l(T+VYa+fD#C(
zL`xqJo&CUd->SFlrs^+&w7RB<r4WYoZLxU&_i&__xLMepbm@6X3{DzYps9DhA^(QW
z$Agr&3@kt0K_l0&9STRSVB4y3sG`3O8_M%TPDzwFtJ#wK94@n-FERYKi+F#8@DI(n
zkqCb|<%UC(+loZ)E=75*Q}QnIrrs2LXgwx#FTtC#wahfJ))1hlX60)-zva^uB)yvc
zlW=G~a*FdH(t3H9K`FH6FsUO-Wb)`g`4n@Te#l-TqXb4LvEjTP<Ezy<!qfSLW9j_c
zYHNb8p%MZ4pFn6<l}lu#0lyEO2yb7IisQ=~K+t`Vez<?p)5t>}`N+kk{_jvoM<&D#
zWdyy2q14-|-vD_u(Hn&SZYlgnZr9s(;U?L!H2=-w75X1bBmP^-@Spq#_z3@W5lv7m
z;NSl8%xV7Fj_3{2|D8!f1MeQ5I{a=70s{k~P9vhD`#KyQ9Yqt-h=`uAcIibv2>3po
zEH~Qsd<e;2Z~gl99aM+UV~tVo0Dzd24nJOO_SRWWhoOEzCn6$yR;F;&0relxS3*KU
zh7@eAG&|2%t}8{OA|i^}!pZb(55`T}%upz)rcqQ>7>LBRf1?rrqVsyki!3*#Z{hH*
zw7(s*2$XLQcp06d{r#Ey=5G<)08X2Q3m9YqZp$g%CtjC>svJQ8wz|BtLn9!dqkxA+
zB{`b6|C)oUU2g?szo5-H<EI;Zdi65VjqV^=)t{g5Z*Q>^Gr4S+9v@cZGv<az=;|+|
z68daG*!fa%%MG@z@oEeP9T?=<#?QTBaYwV(G!#Pj=fcH0jeheLf-?oms(9^c8lSob
zvFX(Z1_u!%B1pWc6?j|@hUzTYlRo1m7R9VKJG=jVg*4Wzka|ki-@4c&=eB#W_~AE}
zUZ3WP;Lqbfs3omDd-`tW5S2s#>y^mG1--#?y2XBd4MGMc=a`#?WkSIBa;qPZ%NW4Q
zDH!pJ4gX|v+uPlpECw4$F4t1=RXOcCiHYg$89qU%rwqgplJGbj41c5Mb>74BgJmfm
zO=B%}Jyw^Ll<Zj-y+70AcRjiwWIn66p8uT1r<yP6y4fi>#e9d+>UKJu%B+|`RzXk%
zq`XW^$+gaWn~HnqJczWN?aPzoPXfpbuKX?s6rXROpP%W}id}X`u!F5<!OqVQ5ofF3
zEv=~*(?u`+QK?C1v6jZ|UdXbkOxzX|XeFwK^A)QLj;Bkm;Rel4oW=m@wDeO^7!~z5
zaHhtkQ)NGZ^@>U~tFOQyYg2Bc$RJ+F?`*qYM$>3xf;;U;)2acGiB4w@@$v$8IC*4j
ztX=gdQzVy9CWHK97N0A&dw@}`<93lmRLgwHwl8qUo94wMx*(9t>5}hi%WbiwrmEd~
zhx66Wa3ppq7Oe`>a9)0X!rtz$RGxb8`!i093AmqevL1i#%2z}ZU{WPH1~zhlaWv|q
zkP*s|##DhjiCKc)753||l(HUM(JXB;?t>!B4X0n7%M3b6r=+(XBOD!9S0cHs=eG97
zbev$b*vtry)JK~ETL`S7_dZ*B3`NdpYQmDZ<g#0-&7Lp%Uo4>DQLD5iaC=aZh~F(U
z?VZBpbZzv^m4N9GizTFz_A-#S>$iE(CT@NzR$O$3hljVEDp)Mja_+0l;Igey&gWtx
z`?4l{dqq?3a0xd05*o><-)0&|(q4dKv4E#EE}IPAnsNA8=o!fg&lqT`uaE6G2SANI
zamR4e(os0&4th}Ee}(0{A5NVv)gOxnzHE@jG98B=&z8n{xS0$@X9)Y};zd|Tsz;Vi
zbodU&eGneOF<h+KZQ`KeUCQX}>;xmsfb%}t*qj7F!m`46dnPZ}npd7sfkGw=TA;AY
zB`oh<cZQVf{QGh|M>BbKlvXu{K=nI$H!4fZG`9O-rCCq9H6i1l8hPR+MG6@}7Ahvs
z<*>0K^Q}nQImoQoX7MUp*ni;6;+=3gM`2d^g6{9^&ab7kW8#tNI83Y1?e95C<Kj@s
z6n_X%o+e;<!_ROnv5!yA&LV3(zx=tMf~0l(!Q<$WI&l<V-ee`A@C^|T?h~7ChubM%
zoz0?lv|1ZKmNI7(O}W2_t3f0o)K3=oGoO{(+0uDYRSkpFcc5StWY>^<!~2N|mO^t<
ziBhqgF>-pI@O~(~nTakx3ctYPtHWvPO<`Q^UCn%tb9!|K0vMDSLh*FcbjRa4+mOF*
z{1@u^$f*ok1Y+P!Tb0A`d=CQ)ewt%kUxYFgVm<+{8%-OX?EwWErJS#=t*!A&QrQD>
ziVrOwmp!`8PIpJMe;%**o&GQxbQq7NyE1BXWb?UV*nye!TJmo{3JC~20|xXE{Xw`v
zHhH9Jph>i$p&<%~@za)a{=mk_uvv)QRI@WKJ9{lO;@;iyJaExw$MgP;+*_~WIsm~(
zbEnttRlZ=I?|-=NpHq3B0gpL=Ldb=cs>|mlD_3tdD=Q}_w^HaNmr5m{7F-%j?8sB+
zSLcKpx24lyQ>NGIcE0AzN~o%;2WHby#jYyt^uG7&k2LeV-V>n@{$)RsB=e0*fyeEn
z$znDxBI4zN)nTCuol&PDP0$-=W%gjVI{(D6pM%Gm<I--m#iXLjxPJ<uc>wYi-F-Wb
z@43!ma;wJdm;86O#f60?skrkw*%d<HKPWW%E55f!$;tE@fmmNLrQ$iZx`V<}n9u8d
z9;bXBuiQ=+Wb9UvKAXQjH^Yr)@q0f%I7VvVG}7B4DgI8(;I=<lZN=4v**Yy4elxxh
z1Z)AnXYcE-MI+s2kITG|_|1x$JX%$TBAoRvx5x8<HY_YH<zSnQXKHzo6;F+4wes=t
z0q&RBfLXUG{C$~DBNHK4nHWWjGN*<v2;dS-fmma^+(5!*Gt};VPp$Za?hJrCPG0_?
z0vBqs(!?qiN8)`W9pOm?3J$<D84gDmgGDBA01)nKlR>#ka>*L2S@4!$Lc0$l&gicc
zM*5`V>7T!qO853?3j~SnKB#^E&Q{nbi&jW-^dbLCI)^0=W4Zx=Dgvkdi)$M=U*H5t
zG;j_lDU{kHv5P?x5#hL{!1UPkDPjCFqw2m!93@PkH|vC!j3o+4>yN_au$+=sFd)^K
zZKApG8NTD%N~Z>$>SBZW6q}c&mJT=RX22llk)#s9TZ*v}!M#5efD&V<;D1s)d3|(_
zf09+5U5p%a-RzNI3A#O;mTRax(rI$R-3evO$jD&UuB)<`B%30UsZLGfal8V2In`&P
zPQMpzQ+}HT=}oCp)f0iiSYi`%bBz`kTGJ@$TZQp~0hnR5E<9E%wH``!FLxSUl--~x
z@Dr}uePNRb%e&12z+b2|Igs9D=Y3KJof<C(iTU(}Z`OWM==A^lI+5Fp^;;CD9A)$5
zB-(FdtN&M^_^=502d}d_5kHe|lc}w3P)qWd?wBUI`#F8NCLV*HF2XM+sFikaZkz9c
z@{K`z!A4kO!!sq{_}$NfC)JN;)H%0?R&ke5M!ck?a7n53z3*TBKR5gSQTO)twzj56
zLOsZsXfm=~XgvQrML3PGS%Cg23jjS_mK%tJU{RCoB+5lDA~^#q@gBjTQqQ9q+R3lc
zyt`#u?BbAYXQk2j?9q6v^3n&Mh$1ePdaY}}e#tf1Sg4e!Xnjs&`OI;cuSP{xv_&=Z
zn#P(Rk8Lw#A%mA<HDBR+e<lb8#PJ^hGhfiH5J*yG&?&T_*Pw<sIr+Gim~VjQ+&lVi
zntA1s$6bUCvTIH<h5$G@F2H_gOEsKbT$DfoPCpsOR%T|@6hMa2_&im@x+Zv1tod2I
z&Ml>-Q6DF-iZ6f>;op0+lxx2rLjl(ZYx28LE_DYi4Ru@P^T@`}uan8vF;}dtFn1N~
zhad<IL943GVZVlOpBNM**tWg4=E|B*CIn=2pFe+2NhyJfK!)7P@w^Uh7BWSqn2aTE
zov4>_mP;KU9-<K$+aJroHDXn{8$p2QUKnT4Vk3{I*QglFXk2OYROPt+ds7C|>sBcg
zaKwyUEBuwpoKKFXF-|JD_XgxBtzRHu({UJf`SY1+hO%V!C>JSa(={;3M;Uz|Jfk5Q
z_*qruAi{Y>-zM{IVCxa+*I904&UKHCh!DA!G^f)Simt3;rO`veA|euSJu136oF<Q+
zgX2dyLTJp5XDPRj&g?g>Nkw&qGe9cxqH#N2;xzIVsYS<-Z<9)hD?RqlWN2D+Ob2pD
zaq}33cpmGyGHi-5kI6hrygxv85J}nBhaQ=$$;#dQ7B>BeT!ag-V-F4w@kvPDZzD4m
zr}tQB>VdVRrp^!(&~gF`R<|O_^$$CY2~*0g-ia`u+5&Dr+NxXcJEa`X|5)eZGAy6u
z(xFIA4z*U31MAs30``cQt(cYJ*Fj&XAR>ZLn>{N!<bijbS*JkGi-5!MQA6#PQP&L@
zDH89fujTe06^$I*J0e#MR*W}-n4#dEl@5_{vfGafx;=%DacSjGRAG5!_#+XW2Nlq>
z?qMhTU>Mv*kHsh4dzGcst<tP4L9Cx259J&!Cv3OoR6(a{?wdF~PCFk5aBb3god;H1
z-LZd*qLiZqSYpE<^6Zi-IpA!KmYWV^g!joyDusfpCGXZWR!?U_p$Sml)6>)6OtHL|
zwU&n}?1y??sO~j}?Ai#2`N;K|lRWmsH^7GTLlPz=F*J@B-(rh&*3%y=@wzWGUZdC(
z2mP|>-Lr|It1BxkOT&AiTEsW@5f~&}8UU*2LTRD6#gj@Z26KoPeKddvPf70=LjGa3
zRClo|zqK{Pr8}4=QX;3QP-}NALx+Pv*yjPw3*XL$m1LeU3nfYD%yd!3NNRD-c@{it
z;UkyIlrjPxy+y<2LwTS+0(j?DW!g6rBAQm^1icp_XA<ba`-<6zB`zN-dA&FGS1(}d
zl@A0~Yq}&6@+ng@gokg;W-Kcz25E+}ssdTjHy2ePnDl@8ApqZwU1V{9#bRqUk@JHi
zMw3ot>-G~fJ{A^(U&sruUQ0GJTzq>?*9aXapX>@orT(Kag|nk0`nJE<9Jt~m4Eu^V
z-m>9o*J{)wX3IOg;)&;pkCTffm9~pZXaVO)xGz_`h*QQIV72$t)9IYYYUSF{RPEVJ
zM9Mmw>-S^dsJY9u;MzPcA=<^Njr;vhtf{T#zClyd08NimCV3udhmmwrZn(|A!YWib
z-f!uLDv%HZK?fg|m`|-#9l7~AK_`Jsq5zS6LM}2LW(=?W0;sW!9?`gSyPC@Vh@SqM
z|Fo4bI)Zmb?5jIS`((0EW0pZvrG_opd!#b0t>$WwenPJ?+vD#|s5`Au*}-q1R__cd
zJ`ymq|IqvyRe@k2gV~@X$Gk$VglvW#3TKJ14}l`}O}iC*%`+(Fz7!UMrh7oAc`$HV
zO;wY!${J0#N`6T=*cC<QDS5WvR9)SN@~j+`RsRM?c3=e%@pj<CBhUgCy49Nj1{1?5
z7og8#ca=xRU9i{ji62fC8d3Cig&}IxStze8Nr!sl@8ykW@zaeN%xaQ*uYy1f1Y8VJ
zY1H$j`!Q5UXZrGdX^|VBf2VUs-F!~U3M<BUG(ATwhuQ7>Boz?iOrudzHl?ujgc`1}
zD81;2WyC8*c!m?5vsEBPArXlsn?2CS02QN|nGUHd*Pr~;0*A#FVI*FUk6Mq6u|hI&
zFXCNU0*h)c<4CeBPBdAQ$^Mwm*Ds`kt**y&hACgWi_Cwo0f?S<vs1IKU@@;5=n@PT
zMLx3DL13s>Nau))ijw%%I}sxCba%QuRX){{sE+joW=Phm>l@i;T9uy-Npqw{oarmi
zH928c(?yJYACX9bnG^UpIYef$u_*Llp5Ve!hfr2Vfko~vFPoiqfu+o#POS+Q5Wkf}
zBjTXovuQ?){75sjU2Q?;e%|VrOXswvvrbPITSkZrm)2Z|Yz*Xx0q;?G_a~sbMMNic
z9z>?18eN(y3m=>SX)sbDu%0d6&hDLrj43K3a@5((Oi6h`BdHaMZ=NxHJ(%X*U*^}5
zX4j8)6LF<<(V?@2MfGrWEzHRG$zqoF`C|O@J8mh*H+?KB#$UrcF|Pg6Y)G?68zy?p
z+|^Vq(_I>zitRV~SPZ*9rmZWTJU?Fd%JMnwSctgp(}t-ld>&gRjRJQ|D7+w!*qweb
zNUlQz&Bl5&N+9eqDj;hULuex)V?^S7ZU<b*W<ib;D=Z5)caVgv<*Tr5rWGB|u1FZ9
zB_+CM7*IkpG&1wCF7hjTF_cRZjllv6@SB-nwc2DKsGeBQgY^jRgVemY(q$O+Cu*x=
zew~F>Hg$#L5@Qw%1p_4=IL*Jq$5UQDx__5BumGC=&aMjm*V=5F>2{Cw{(a;}K|4rI
z+<wVWT3Up!dMw|+F(!Z1qKP>y^6)e?=ucCt)DIf|_A|0UU1X}$upt<=4KkSy1T?H<
zuJ|a=(#o;Vx6#df_2eoO+G>8QJUBM#0wbb2|H3vc_48%2niM_lUsYjaI!2@Y_(9o^
zx8j{v^2s@;&LOPPYE~tBFpG9R?r##1#de7`8uznZ9s{)pr@yq)EVejaitPdcyV*#v
z<+qRD1#-`uT#r+l^hK7JBri#X{Z=aUq;zQ~1<|SBH*yO#tpJ5X828}7faKxXlDfxu
zChr8N$sQdJs>u!z&qq=~#-(8i27G!r<+6aPrO4%bJQ`|9%|>kUxmwvT)!|=3moF_Y
zYS|gM$k))nu-0NhUeM%17?Gf5u>~H<Re~hoG5#9XTY(D6$yRhO*78z=D@8y?9A!+L
z<r1L#!r=~rJTZQabx&DDs^!CO&)^<0BRKf{FRU~h*Za(w0-gjFn9anqYUxy2<wQ#j
z4!1e{{RgdnF9g*#TjZQWN}zpOZU?K`otbrF6*Xigt0My)H4y(6DQ4llhJ(XU26rVQ
z7R^VCIIvg_#Ack3^B#jua9Tp1=l$uQldb+JO1TuZ!g7DUx#CLAV*h;x6|?`v0(kyR
zQ1>e7RU1n*`#R=sBBuPPxdFVE>NUF5wFockgku7~%{I%XwD1<;=31veYCWrip?|bs
z)vp+Q_Rr~lKwDl@FDt+J-@s<eS#YwMbFXWNGZv2ALMf|Eh}Hp6LCC^l>_mIR!$`V7
ziHL|0^ShC7T16WZjP~?%&p$r42kA()4C&EckZpeXlp0z4)i0aNRuX_g9L+~k5MKCK
z(6ad5ds(Q?LjE9lD`X2Hvs2tag!8%{ximXrPb5|`+xh7_O@4>|1HOr2mQ~c^avm!c
zMRwk2>dJ}><@9}$H`Q-zYMn9#AdLQJkdF-%XM^+pS$4+>Z0~X;HoXJ9Lu?gNz3uWV
z0AU#moCOnd`=Fs(GcHx1VA7|@bJ-H4`Si<uoeM;mc^(r3SLA$j9NQRJZgv0g1V?H#
zW)JUSo|!oniDP4HP1qjY+UgxgvMLpgNBfkj+zVunfz_BX$oWD~w2rQ^Q&APRA>`aH
zWSG>SL$6WXR~{}gO^l6`i-MscxFPsx)1H)3(<12ftUk8;G+{atiYm^OsLHKCk#_?M
zqQnazXDTZ|h`i#-2PWR&FoH-D`U67`LFaIDz<QA2$OJ&1mlqeoORA$HAc=C_X0PEy
zGpC4`mlx$BK(@ud?;6ms<bCKQ{wXC;hk@>sNyWU>m?fbp)TgI7#KYVwI<B!2+`JO|
zZ&80LW^bPANv%*+W6pd<T<9SSIcQ0iP$;yVS{%vsL<}RxczU;JY^a`0sC&nvEZ~_~
zHASRg3{+x)rZ@#f<^#SjfOL4$@$#T=-=I76Y%os4t<F&Ty;2BuXJ$GZiotFR@ea5-
zr<+`1l&&jHms3=9-Z-63a9`I@xv|7~VR&vbEiQnfImBNJq@EtlX+_5cAVYxD|8yO6
zAoG1n)J|$86lmPRq>@KML6Jmdciyup(VutdQ|6?h#^=+na<DahnO<#i?Jq;Yg@0v}
zmJl)C2)OnJklnn3)2TvsJG~inDm1Y$loUN&N;bEXgIqDpHG@d&cmVtgLEO)0r6s{-
z0*x|HR?6@N;)QRWt+vt@3<pFkCDBe_h}3VXCwb3EpsWnYr7#c(ct``dVLZuPEP!N0
zNa|UZOt=vf5$%m<F>;smb2MsHlCbESs3V)eS9k%a3oBB-E0B9Zo<dqW%o`CUGHIv?
zm^F`bmLYJ~S<e>%=-uWfI!`KqNsI`-kV31&rj2c8ONK#@y=Uf>M8D<jEeSv=_5Uk!
z5H&U`4>*4^ua(IRpV#LSgU<I`(~~iT+`%BR2^h82#oB#AK{*qa>kFD#`qIZ0jWHmu
zN;2?tIs`z;P=|ELxIN~e)B|C{`$KjH0AQ}Rd73OYlp9Uc>9r6=#^|^YL|blgXdg<<
z=k`#4CPL-b0`OyWyNMh>Ajy?2r3A{k1JlW5LtRH#S7i>haB1cbOqidYcZN0#Ws@<u
zyWMtoK`5%wg}5jv1Zs!T__Yq}x#f3ftB4q?D;#z!X-2)0pUiV097zoc)HuGr2VuJ&
zPEp=mZIRj0Dq*0Y+->C}sW^}~T1+AwDJc98dH}i)VJh|g(~#IGiUsILY<fx&JYU^)
zw%d<D`JVtHk2M6x(Wc+-CEGX$1|iY`#vUshR|uZsIJDWFXbVYY(xWrz@G%?lK*pO;
zJj91jd_+p04oA-~`kWO?Qm@zAFr>hc0Uoba&W8aCXh!WB-~Dl0aC#<#g$K}#9X8VG
zahaLkDpvht7Y6tCwh|l2;+)Kf6GMVvkT0*m;T{Kxi?!x-KSHQhi_+<%jsrL4t!%Gu
zZrWT9Yk2rUkyIuzPm%q7@Qox?T#@{FRQo_Hj>UwM;%_#KcL!DuBK?>%|D(e&Q(@Vd
zaTt`cxmGNS2yk#+V>w088+P3f=C-yk(*j0k?Ck6sGi@~+d3nlo<JxKgo~V12kqEej
zqUsj-={E(^&zB}2_e!SvT#q~&?bkmm8<zamy#~kc9!{GBz65BuC;LnUHaHa3<NbI9
zkZqHMR%WAvE+4+r^GUHxibEeg<EXAM9yF-Y_GITBA-rO(TInE^85|h*g_M$6F}0vz
z$37=$g5(CGo&Vfr;VC;j9WWItW)_P)5q)bYZV8!;$-(cX&U-DuqL=0PdvK>O0t!(!
z&{L_iVzeOTkt&Ik-%p{+^W>jzyT%IegdEchbI${pa47KUXmQwY7E6wb&7|VY#;(B#
z78qCNfv>UVk7RnC6h5Ob-UNPe4+9dX{U;4^P<^j%@Nl&8b^?Et0dFwX0n6OM%4v@J
zWH~LdItRWZ7OWX@e0{%cuTy{r{M0+?sSn<-C5i;I1)Cp#%FGuHQ>ONd2IiEh<z;AL
z#%taw!@1;FwVQy!RP9rvoRtWLhEqkGhd<*#T10>mCg&EY!qO#p({q61NHQopRl_JS
zm^E-Arqk{9Q@wVcFVDbKTkpYB=4ifg!lpc+E1$uYygr(08<3|sXs9IPt8+%iy*Uuz
zRaUiJI+7mKX`*rsFDkTxE(edR-sxgxWIp{T+8XFT(d0DTe&v?8VAOTi$WHo{O*Stp
ztCps_@H+)LsU%`S(2Ip4@gZ&c!#emQ;j>A{xo3GzByP;UTKk!Api)LK^YN{$&-%vq
z?HQa2$T)?X#86R${P&J*2Xz<K;opm|;Ah1DA4FevwOZhRT-(2gOybloK-!7=q1mxl
z>cRWFknaFMaJ)4P1fyk5NEiaB{(esg;y;EQPC0ZAqSSJFZ+|>Xr_I9>@RNP(T0VCt
zp4mb#vPm={3P3-q(u&zeS2qCKCit~`UaJFv9e{13F90?PU^_N8Hx~=#8m;FmqTuyA
zd?H50#Kih5f$pyg?b|>0Ewf<I{zkVLqjsH>^Pk`6@ehxWM!1(6D<Q!jI!~6`|J<)H
z`CRSDEY|2}3;C*m)Gi(Ne;X7797ZIm#sdJClE02+aKrgOT;%FBk^m%989)b375?hi
zhy=tS99(L&_b-$MwYSm5eh_A*qdSrsuZ-`|WJS%~NMkiI^FQ_Jk4(Nj;&gC!KA$N;
zOqAJ9Wz;!4U40k!i5CdHZ?B4ip93rys|NlTX)KY5!qL{&hJk@`J6q`=9kn@ISp+ce
zOg6Klwe~+dZkIO<5z-}X3!Q&IHP~p`+S=w8Kiv^4wKV~h?={+Vz4bj1n@L6F<xd9V
z0=6o<0*i}-4Q{Y{0|K%E<_c7<Jqs)_MAEakxVR$F4@iU_$`%AA0K`WR51tPFCWqmr
zB^WdHx067`WdhbLeV9H_*+2pqt)+$Pd^Xdeuaz%P$X)9IQint$0Eci0MDoC$R0Urj
zJG-Si&%W?nz}J1XwLe+74BUaG0?I)<3yY@z1ERNvFa96mz@XlW@~BE7!wnrB-S|0$
zQHS5nCJw{z<*8mOPT%LZ5TG(w)Ook6!GPENmGOzh=fd^(kM{rY$MK<|VgSKa!Upyk
z>XWcqC>nAFBmu1so5qVZW;uAVM7(?+7oSK)6w7YzDi8$&ssQA$^86U^Za@r_^nIVs
zWxG-!W77Wsz?6C|E+vlJp&FI?Vlv{Zsx_wY;wiMMPd_C>zR+n_eYFWyvINN1Oit_2
z($Z4AYXG}7>J8mVaoFh6Ka3lLhJ{tkYLR)CPyujPyoH>)oXiwv1K^D;qD<HW0VlZI
zg<9GV9`CO6a(hs{L<Qe~S|R<N4grFRl~s$yWFi1{w=`o*_*Cff0zi)YcBo>tvE4uW
zc%|{XrR@RmZGeUmsR=ibOS<@)eFhXHHI@tv40P&c@8(H*fS?r{9Zh4fhPe6X{+zs>
z1HW$q2u^-peL!~_eGIc+%MHLvkQxBTuA&CfA=;$d=?A%V{8M5qaaVXzztfM{Z(t;u
zKACP8Xd0U-?yfQ-he5)F3d>1OP7VkNz{{pmAUHg4$7RwT>g(It?3EJjvH!aKL&*2b
z-smF0C9Kw2%1KLyf4r0q4GED^B#Owz%^g5PRra{p=!VCn+GO{C6~)q@^ZxfRS2)A~
zTXO>HVoatp(r9v%QVy^q04m1D$A|w8J)1}-5&7`oLBY<=ow_(rG$MA1RwG<f45R6l
zBTXXU0rxvUOv=%x0;tvg+z~rF*NTQ9Sn8{x(@?;50BLgv0DKcHwz^kxTC3+?Ovr;u
z)p3c_1H~z1rn{&uY;2Iw;XfDv4DkNwcS1}|$mCE0G|Ua6+)?q`6o%Yf`28Pz^~t-a
zeC}sSoYpx1T$w*X=Tn|C&s!@R<BJ!-Q$Gw55fkqwHn-vi0k7*G5dmZS!EVlF{E-dd
zagj?Cf11m%jsYb}0wDwo%I0~gMkNB4^u^+v-<o*Wv>+fL092NUGEnRorV8sFznS#g
zG;2&{Cans=#iXPLSk6Hp__Zzod;s_g``%F3A)*8pcT#hooSmgQ%SPWncR;a^m`HiI
zkOY*SBE~s^iNBKRxp%TU|Asm5kB5^v4Mcy>>j$7|T^iIfca`7Uz{Tt8>TY0)3(WjH
z@W!TyL^J;U*7h-!9m<4L2Iz;N-!oJS-a-mkt;FYe?i87jOBA`wi^KN`$^M*A7RAIu
z6TsJ-+Et3=L3I}BtW(RaXFy%_k@>ChnV7%BWN;kd{ze62V^JO$v}#u7?{5K(00by7
z>IPuQc7Omk?vLy)fU;C6R_X>S6TrqLSHMQf5{4n7-+wA(TmdE#fk{nHMMG1pR#F4>
zH^jxn0B?NSv)B1`boedbNJF2e8~96;!PqcH<Xy#YRJP*c1rLVgv8~Sgc9U4J<?8KT
zoILLh+B^cv=E}5|o1M82*ca;1guQO?;KU0Ad>+EX!l(-f-2zyMc^p_M^52?V;)UPq
zL8<3UB7fwM#Bucp$T;9$zKo?;J8pmBZroxyN}^RQ(y06)dk@xYrJCwhrP6CrYqZM(
zWWG5U9-5uCz1k@umqK9%fs>jnpKdIH*GgsT<uH8;Q8;7JV>Eg#Sf=qa6ng-UPDF%+
znDPL+&XcXKug_vN;Y(Tv6xG(o24Fqj3e}{BFJns;6-+>&!Te?hFl#`~0C081y3KTT
zlcV3KL!g4RegIqZ^5*{Z1bCf!fYb2W0*+%Gz_Ws2V)S$)0fX=Z;zU&;sUJY(eP=hX
z0GdI7YHJ`GpWA8%4tT2HCx+6)M(t}4bep4zCi24Yb;4}`O)@1ag^2)+JFv8*-4d*u
zz-_;#R-t=3ln}H<k81k(z&g?WE!Fk&|6&2%`i`kXL(={AvYq3KQQ**~CLVu(e|~=c
zNlQ3G_T>&B7tUHXoC->ialw)esAr&|Ss11*SJRUT$Yy0>VF6G-mgM1q?Z}TL9de6$
z@$4t2|D0SR&SL$>RF&>W{XmX)E+1;mW|QMD`ZBX}T1@9F^nl)s<kZyEycP)AS!`(}
zSIT0>BgFtbCnqPBmf@ZrQC7APsKUd|LA7-3qz`JTx)if-Z}G2S6R?Euo{y5x<4Jp?
zV-z;7F<$u?7#XJvo&S5_?`PQM9)kH6e~ZaV^n!s?d3)df|4y3|mL^3&)5AlhQNrY;
z<773^;&cfiBZ`EKEFX=eARn!wlSY7t2M28X)d$Jg#02`v9uo(h_?feZF1fk7I=7@6
zc(|GSDKQ@4sEgAU($W?->=U?B_Hg#7fHRLb74z|FGuC86V-_KJ2lU|a<!&k`Ojh5`
z(LyI8J>U^p*%>FXg_Ho6LgAT{(Un)el?~HC4=yzg3343?FV@t>1>ECMHWKt)r<|^j
zfIyI%#xOE$Mv{mDxhb{$+pc(Ms$TUvLM4hmn^DE@gn{U4D~*)jmKMfADDzJ}IN-rF
zArGJscF@Z+ZsJJ<Mi|~)q=)j53TcN&p>G+7@B|+&NJAiD6jTQ!7+NskrNf1W1~UD=
zlNucOu3|_j2MjdXddn*P89FJdateDw4x|HAPYYl;KhXCLB2+6Uj&Nf}tH4n$MV2)+
zd2}R@dIlc%G$x<}&A%~c5Qqa{dr`HrE~AZm$QVRKW4dlNZq<Lii8oQPFh~dBN<bud
z{kJAJipQM%E(FZHZJrcrb_WTdKjlqrp6y&5(Iw$n9i-tY9s`a8OHF>H39|zIW#5Vq
z4qQH40`HYfw}EJbd9@oAQx6)5K77mecGe}W5!Kto4dJ~CpCbJ3bin$5Zj=bv@5W{O
zHom!8$6QHy+xd8^MOXT?-G}SQncc5mTv@CMDuf7UQX8zDczf$#-&i)N3tyc@PAN3;
zMObN<>9;nQ>V%+V{TY!2{*y)ugDT|Z|GY(w_a`ZbR!>4J?R_9-?#q7K$anc>urPR>
zO_D5k+%kP%XX9g6D$fnB<kK-z-e$ml($DbL?mzQ~HGi>>ZEjbYfW1t#rl6o|XyAfH
z&GPuWW<cP4a4`(D+-T|Oz`xndq==z}^*K>=Ok5Bt0*372+-l`-oVwvP4!J@-`*E^D
zj<voC9#wE1ud4Y$e7?H=F~iRnd$6#q3-J2MIe%F<?W??g*i$2qFxT?<({8L==glQa
z!{?UPhO@(NW7*<%HmMdS{}v6md+yx#jFhcOJTsS7>t>5XM6CpK0=yfeaS$JW-!jK?
z2=PN)3RaF|{1R9&pB&Qp752a|Qs0V>0V@s_5%K@=_Euq4c5l1)BLYfDmoyS0-QA#c
z2-4jk-5@31E#2MS-AK1|cX#JE@Ol65T084FzK!*+9XFII_q^vl#~9anUFYvihcijS
z4c9kp?lBZ@c?X9?9DzQrH@B+3zri<CV&B3OvZ(3moa!tcWvIFQp*`|rqd5NFFB`>7
zejYet-PYDIXTRf5LR<6mru&7cdxam$@#@eAVp$j&)ho>lnGF6UNa~9@E2-wj^x$&a
z&vjO+Q0y1IuWSg#;}r~Uvi|d%T`rx`ke1ne4p{b5#y7w7I-RL4prM>)8y=^>uc*_C
zJ&WF3Y`%84+4B5c2#a|tww~k;99Ee<5}%cV5fKn}$IY~2aLs!wfh%#j#fJhz-k83t
z)9#RmT(v|8LCQ(BdKVe%M%2~C#pS_Uv{E~x(r!>bSECS<)}{LfR6^5vi@4j7pHw4&
z0sQlqFM+4P3rej~@%{U}sS{j`N{h7@_?~YN2%31HXJ*@x(C{o7tG;{oee;cU=Jd`M
zDmP<u90Mls!FuXBCX%@4H}n_i`S@%F_cWgAt)`nj)`{YeXwv64nR3{P7L=Unwh0|?
z-2>tC<4R`OpXZS@M4Z+q*59<3Qsh$7EV5G2<jmH8jj$TS5eq4a%~wkdLUj@36(LrP
z#XZtVEc|n8HPU)Vbh_P3E1r5_9#Q?h)kTuEnX6{;8tp@?ke|RueX&iZ+3NWLi{szR
z${`|I7OvVZo3`CG(eX%_1k=0YX!Iz`M4id{A7|s0nR$70sxrkh2RF-&ZSu?CQ{hI8
zOgiuTp&8XTb%kdhmkc_V!6Y6*b053ekqzsV-?y2yeAJK5`!E(@+Ri{vpD#NLmm&6m
zjf7P9+*Zy}UHBPbOz@T)pYsfoF|Mv^3Ka*9|75JjSxqPw&j#P*<>es~K=>l0hI2ZE
zvJ_)4H@KE+M<J}ygp2L7m>$nJo(JkzLcHeHb)a{9>^Vfz02?(Hcg1t{er*hm=5;$S
ze{N4#7n9M#Q*Zgi<GuaipG@LOjqQ@x8~ynOV02>a5~q5;e4h_EDuv<qoq_507~1Sl
z*XsjLx3wa0byD$6YrB=P(S@vm{{DO}Lk-j^-0t;SOB+1R9Moz}Kl-a~{k_dfzlV@r
zUD@v|(2{EoSIWgcjsALBmfc~B6$J~g5mO#4J1NbOcNOyrtL6*dFmdHkaFdKBrx{i*
z{!mWLq1aVI`huOG4i~Aj7}U8+A0fP~`7Q*Z^hixWX6TpmKEjPUm%5WjNPhMRXfCzf
z;FI%q4)&6y%Ew63hPDSo&i-PLo_MO=Zrm!Uy&hsm^m}+O%OU2_iuv%s-%Cl3?`*Tb
zhH$%hc%DOF8yzAvE9F+_HhQcRw(u^z<qP!4-Y#mt7sT?rA7uTRrZL0GHdFj7_M>uR
z=>Zo`MGOv+LZK9sHG>i61RcCY<Fg&wrmI)}Nt;t}KL&=ms)NjiDLoKj=ePJawqk$J
z>y>`}q)zY6xn0zFu)CBFrGn?|PTi<~H|8@(#9#)i8YYMbrCvH#ii(LjUB-Wy+=#%(
z+GYv$&O7dIiJ43?o|vpRnsGiLb3UlPJ}x0)s#MYD@XpL|M8h)!rB<O-!D?qk!&7K<
zP_+!gm;44JSMoixo@FWEpb+vfF%=2swgB6%M@a&!yHBBbd-A-(du;5Q?_=cBucXJs
zyaiLa?4J6&1%Z*SXZqJC>a@-rDg1aEbroZFdGz&#Tgn-S{TzK@6ed(YQkxyotV6-a
zciTOCmwgJ91JsWr@oaA7UASxFj&<m^pBinh`HwmNfQoIb()s?yv)N+ZU9mfnE4b3$
z`7tki7*7>gVax4{Da_`XhEi#3U)BRnfswF8e)U<4eC(N>aKh8B>{*pZ-Au3V<3U@g
zA+%xbXtuZO+*lz7XouPcdKBjBr?v#RK9+=`<TD(F*_8znD`AQD?!;GOu^srD1U@$c
zGy03lnhSwCH)8OL?--)z@3&lH)s}ANd6(U%x^*$Jq6o9PN>f68(1>kvhrO}rlX@1u
zz-LKnV`AJdQf`o=zNZNgx-&_|=ddWG#(3@i6-8*Prk^CoyNF6BR{Y48Q1&$b+_KP?
z_T*w95f}J$ll=<lZWd|Lisds=zK!iMClZxS6)no<>&!A4<7TO9uk|N=>Rih<IbL?Z
zI2oG&A}Exfw@57pwX6tyT_dJPo2Mk4a<=5Y<NdJLkg9z<kL{J3XY-rJt}eEA#hFIK
zH+hs@N=jMeUz>LF88MMsR&Cz6W74RY5#|Scl-69K4JD-nlLYH`A@etI#7S}RKEH(}
z9{}P4U|XgwW}Z$~QH{4i)xgZkY5_PVgR?<j<6t+%1sjxAayoLxvjYwLf4zdPQDLTx
zy`})}a@Su%pl~~*O|K3*$vuYkYw+w5Xww#FzT6WFzj<@YN=5d8i7cb2>%wkhQQk`K
zRibH`2woxEo5;d&NrcPWgYyIfb0db`B^7T*r7U_@hR0D$-q29Q{s~qK&%-Q!GFrAb
z(k-p0^bB<h(9*Muj5!jhxR>$`bE0beq?ornTuAhuEP5jGIi@O##`Gs1X7KS%h|et*
zZ#)^;_7WE~=+fU&j*8jS3gt-e-q29VNURV%v1=4ZQ@|{3n;RHR)oCZYz6tH{ehqxA
zTkrI0Q#jq(h4I5aiz_6?$Fo={@Ct_(Rj7spw><xo;nDs)pgi9wzj#-i9;J0)yj&BH
z_5LG2OMG6HHzcKEM<AuDs)?#9jtek#dpIL6@ks`HxPFC}lXDu&q|i`XB*hnbSWyBN
zbm5H#X1E#)Wo@(MA9sU3v)1(%GgX4&ZyWDxM<i0%xadyg!ZZXcx2Uf8zQlv0-Yw>+
ziq?CRGB_swLpd)Y{WRbEcG^`!P9?XV1s&IuS*7o`yG%X~O+2JVFcQL+w?mfu?9XFY
zHcz#yM&ib%2yjRn1M9S<0|bXK=V65O4{fNdTUUVvyMehZqMs69Lnc+{Z+bVHXgP7L
zyE8s78Cc4Q5ew>eIJB}mKTc#;Ff2(+{%r76M%W_XNiQyyn&jrj`Yb@k%EK+-OMhBk
zNnmQvJ43@k)6>4NWwQ}G@>NsInKHGe_YPCorPb9xBn-#irY~=PAVOZ$4?@PTQ6m*5
z03q4MBKd9|8&32T&Wl==2_6<Ug#nNQSgK7FViv2+A6Z0FIeBuohErzBUE#6^M)Xh5
zo!xg%0^U#bn9eu3Y@E2!J^P<p9`aixvpFF!z-g`)H#*)n)WNt3J{(S_lez@m1Y?g8
zaAHuzNk{3RSy4j<{W2;=ArY^hGMm9bMoy<#`jh<+u)(V-a$)d1-r1g(sNzM?YTR`6
zLm_S@#<JRM^>R39baV#>1UQ|Z*_Gns0fNiv&XUhas+aZ#>dR4EoFuRf!nt4a);J-#
zR618wd*2{c7+a20Fkkn$#5Di`y((AAcRYkq@xWSN#nxr8M^?A?K4q{e)4ZN|QH*VC
zB;xM=r#i1({TrfEY=f)F`RVa49o>BT-%FYUO`VOm_4LHBH6D)=*zw?yn9dWFi@u9+
zAC>m5`|w=Sc6VWYPh#7wnlL&+Ki~AbQLscfI)g-Q@m2$-A0{RNB&*S;?Gf00Hs}7_
zh^;(oIAQb0N3)MJcV5lq@+{<~mM0O8eSdw<dTe7RHLU(ldq~VUNnpq->WfxArp-_^
z<$VEj;wqVV#2W9WmAySI!V|;@_OA&*Gt$%CNkil0#EI(y_5FJ!B*)b?d4HDO9Q?(3
z%|^Gv8V7O5wSp-lY`n)u`AbVlAQ9w$-Z#gjRrjhbv8t4!BkcRcF5lhO0@To>1-mu?
zN}$oK9|K-%z^Q0I$fCf<m*~w0gs`JU2gpEJWp+af+s%TJLPZPfZQ9xFdA_*Qlgpub
zhj_-1RaHZ(4w$x_u0uor(E>gNK@hi(t>>oKW<^GTT9DWCRnCFR;Xl*g{E<$DAH<|&
zCa1skd?M7$qBlt)NOE*Ie4N7xei!`f2m(izLKjZ1^O;K03v*<SDf$G?B@n)xS)97o
za!*$%JUPBPJ@^@}L>5lhh93SN!#k&V*F7cKyO@%KMy0tyz+S<#o{UGJHB6H+YwT`F
z-qJDp!qUqGe)ZGD79t+c>P3KhHWw;>pG0cCWxOmt&J?w$)S3C{R%F-QWRvlu;fN*&
z$K3H;3pP(<#pXUfcU5(h;wSzOLN9*U=c`%Z0iseZZ*f>gro$xC-wrMA2~D+H-=iOU
zR|{AJA&K_T&~D~)T{w3J_rtCPOJq$y)&Xq8Z0_2#!o$;pPNl-~M|}mUeo#RH)>=#P
z{AE{*(KB2B+@JIF&7o{Ed?=IY^brri-(b=>hNF6OX3Xn{t+?Zg*5w@aBXlq<0)ode
zim+z0j(LNv@z<1BUOm8mj{VBU=DemDM>>@Q8&-DIm-UHg7$N56)V3`7zt!<7FW%&m
z6HC|DLGE%7rd>O;t8xd$`%M!Hp8e}u9iq56m@f%glagA-!@&Lz+<vB}Ma&Y2>}%WC
zM6N$R?tY+-Xls+cx>|ORd2<JEPyj$^Vzofh_4D=Zdo&O8?f$6(4wl~*6y>?hW57w5
zFkLU!XO#xXqOXH3M`f*ZUnjmt8AuNGeQ6nqFz~Z_WDm%BZ+Ti(Azd3j;%Y0I>K#qS
z?-`J*e?7bNYDH&z!~9KA^e6UMCYrA9x<vej`)|ty?|85r$1`awl_bqdr*OQ%nE^~Q
zeN?c~wh52sV}VKCuI(qLV83sk^IvIDbj0ap!;_?Z;VB4QNx|;ukQoFe9?k~a`ZmI<
zgJ6~7L6Hs(UKY+EftN3C27{{kALl=L^l}ad9RHZeTpcI_>nT1%Uhai*M=RC~+>aza
z+?GZFIj;~%160fkXKf;MBBXKOFFk#E1+*S3|JVC!B>hLXK3gls1y}Z&p$@hV!?*SR
zF!QA#M!wBvt;Z3G`6eE#*9~h$XEK%%4T&WJS@Itdqd}BXP;iEJJvjKu&0(J4O$l5{
z=*xL4>@y;7wAUCO23kVJ6B|%@GIez1WVA?uLLw3Dqz--p(Kq>~H7Gwo+jcPZf_$e{
z&{m=-pWcw_MeP#wxIES|*2Xxa79i{k3%7`f!N~b<wFMKn+i=9s+qBf(;`~YQ3A_ZX
z)b*D2#a@1^7sP&QPsc*nU>6o~17GBuI*hHHo;sSpuYJ!=W&P2e>62Vso5EQSZx;o6
zRZK*FIdUqcgpQ8xdWMcprtaEGxzAzX9w1{rLD;&Fk>4izhlM?(V4zdK-&$Y0DF`9y
z9vyA#nn4<$8t?d(!Vj=&<|K<2$dRpx!TSoIhW=_PJFov=y9obhggz`-A$NcnKnHsk
z(%Fb0++RKEf67I<rHQOGqS4}dw>FfUMvIIbQ7|5tm^eF|H5^T?J2f~Aaf^4t@N%f(
zr1K96L4UFz)~v_F{HWI-KGoAh;Zq-9ptp(~k?JMjqS?wwPfxR|z&D!G)>e9T6$3FA
zK+^ak<N0rO{r*kqy9sfMlJ)B38jcEnJ|`!K2Fk{yC1~W(ubjS|G|-saQBG@DLRNze
z=vzWIwx~+J9hyVuu@-;_Q;l8YVUo@@Mqf^=aSKBtx}p#Kq-U||1K35sr8R^;3lH?L
z&CKUWt`i!KG`|VMJ2)I?n}ZAJjM}z1+Zv`YlJ0?*3QKL0@RaA#Z1sVHga$>DUSFIP
z3l9aw-B9CC??|>>4_XNkrj*tn&WBT-zSR_I@HclSeTAsoCHzOW#+%7`zoSWSHUC~4
zrER$u^Y^i8iEikM)b4>PIF7G5I-Q$^EN}rmxhu555nE96<x7E@sF`8Zot%t+_>EeN
zRq6anzB;s&)74qA=|jYXA`*DKe~);!%+?%tJqpuyo$SK#nAGCKBiwqHE&GMN?ip@I
zm{v6{LfG4TTF0EfN<pd;e$)?qDouzb?V~{jPeukhN5k8Jn5&a|7n!@=KgGr2Q~_XJ
zZBV=Gjfkp0tJ@yZ%n<4;Xlb!PN6iw^#xJ?!XKB`r?_cZ97q6ffme#BhOBNHsRWO~|
zx4DkMGM}&7n$kx#BfZ-?>fENMFGuyY-JQq}NaJQb=20%UDlIBi5&Wi}Q&(4qLCs;<
zx1}<geNlfNi-t;a`torIFbN5J=tp#L+4NkDhZ(u;FltGZ%T^1i_MT(5+y;G1sx@Nn
zFypu~nbu!PxSWS;khlJ%VK>+{i^Yb1?%jy=$p(#Fu0>_yHfUO8Jz}IIdw<S$@Ay~t
zPGapbz1v7!C7MAcRlPWi$>MqRF%G};9U?ZfS%2KNv;`VfoI`uZX2)?(mTEir$lIvN
z-CS4quP?fB!am$~mm(v7Ep`s|v5&|BygQ}ylFSyDchN&6OjIuI1&2cop+$=o&uLcY
znk{Z0d!*y4zn?W#CpzGnjk@)w2pT5X<9qbJ;|wK4!o#b)AB_)vBwGu-c+YNf6)8D0
z*>dcy9feWYCqu<|O*FArg-_@B05Nt|W4l;#Igdy*nsxpb7w%OmXPEQ5)Bq;DJ1H)g
zv&b~=ftXU~^Q*;mKSgMSow4HIgv>cF_Gc31^pVd;k3SrKJTJMAS3$i+#O9fu?8<W8
z?|J(M$}g$a(yV)rdXcl1=5UwC@Tp&P0;B(MAGnq}4b)S)ukmJbZB{*<ghP|*4co=6
zChiemRc=v-1qWj<l$z{K=95WlvYAaqewT0h61H>yuxWDKlT2Jyt8Kd6RPiN5?5*BF
z3@I0vz|CSEW*;K6&C{OQ>HgS+Vo@=bjll?s8>ldcBA7b^DyP@hT5$YAlj|edGv&Sy
z{Hll_RIl0WsyDeTaK1bor`j;t0gqVsO=-F|j{|;kqxF2_5B81O98pOjj=6b4Ej_)s
zlPRwiNXcM48}ZPY8qpz@Xz~0$%f%WmlN#LKSW1)WsmoS3I2<lFx06^4(jauPeIvi(
z!-Od+S@MzXwD8p^Ol9R9+?nFfs}Jl3w2Lm=?Tq~5R|IV1<#L5U<w#)8e?Hu={ViQJ
z{L+5CrQWFvyj_WqtJ#GWYfa&($d>Wo+D)E7AXu>Jnt5MuW5DTj*AXfiwAzl03hC#K
z%Uee;_~Rpywz9*{I696m!hwO77U7Wg&>bF~D;{TAJG;6Hf5ibbMS=77i}m<Mg;4V-
zq;MM+MRR<xen1!jC~o2=F4PKHGNQD{kA6~<rK*ynzH0S03(ePBmwS?+)2><W5_;0u
z7so@*<0q|gbw-7ahx%GsuEx92<K+47)3Nf!!lvpqJ~wR~D<{<#w`1NKBSQCnJe5gf
zwc5x!C46*dlfE3pSE)i{s5m&Ry0)}$nZ3_9dbxDRd;|3ZSBV=NbDh&yXf+AA&x>Um
z;zFvk3*Zk;i?mt_zV=m$@Bi?3ppG*cNLiQh8&#b_{zCQ89o_77O~0X44NDq?*{9i2
zthH&4AJ51JqjL7pU3f5CLHHBC(xC6*VYcw$_Uxr&BvK(P>>*F6Sz>R7E#7Ki`NU&y
zZ#1uWmz4bo9aj1+-L{^AGz+Fee~6@jQl`bUZ_zpIro}ChT@KpVQ`O;Udniiqn_`-0
z?Dm~xBR;Qd1gisri`}Or>EPDq6;WWjojSZH;B}%|ygrS>^t{5t#!iTj_YwZ0)@ns5
zostB;?K-<UmJkB%e7x;c-&$<TV_Tjb`p~J9Fs}-1Vl4!;lIu5gwY87FetUY9u9?c$
zY&zp~UG3p~ZfiubLADL619KTw84csG+3!1)pz602*h=GimZln16Ym1=F?yr8L%gV)
zqL7rpE)`9?X<%wfVkBz&t;)8zxjf+OH~7E3z9)EKX*Uo_EzzI&F&<W2T#Xf$uDF{h
zzDo1UcW4mh%iYPz^UbAzV5e+cqIhfIY8k;@+vtijd#jJnYH3JFbjankbgdLM+{Os0
zktk@ew=~s%l)~cC-J2<2&w=UtXQl*n>S)wkolozQFLrTlo=*@1`I3K8e}&``iu2Lx
zr#RG@8JrZN@f(|n35hRXIPMgl2`q4Q>NRJeV*(q7v2TW;!s(86TAR2byxDZoRIEih
zoPxQ@AKl>Nc|^|`y`hBJ>p$1RNNK%96My?k(qN>Y0|irjD3!UyITiV%lsdU)Nfy@g
z#cg3Yt!A<8N4As_jaI0TXkurBSv)w*!CK>ad@K=Jm8`aD6V{_P_Bh_sCTmY(6!-l<
z#Zv{!-1I%XgfjEfMy`){)PgylAEghh?LOH)w-XD$QD0igb~rFCRs;Us`tzIFLe^@^
zSOp20mTzOt!owZTZz&ahN`^LSpxqE!ew_19vs```z2dfA`xw;kewUY80B@rwS;ooZ
za#tYJ0=cdOkSGxovD`uE0=L=ho!4;rk4wB|Qhyk3(%KI1f_d$?#O@8Mq0CMw6u<AD
zG0PXm@LF%66)D%-Jh}-IzwD<l9I!<Idh2k&L-LqFE#A}NbH@GS!KEiDySbs-WG?UO
z2q2T-acxd7j=p`O_J$l#Fx|!%bat?~Us;`yH>v$oEI&JQ!|P|hqHgx5p?J|5@p!5J
zGRly4n^t47OvBE`NBFw9Sa!NV!|I@G7U8PK$;ME#)_A(8ejw~fQ*#nv*yurFvNf2Z
zG~K8#;L9>K5Ic+!`38NUPCB6y`&Fr|d7!F|{>U#P^@L5FE4J)%FxHv4Fg2Mk+mU#+
z6K}D*run$!zEH6pm+)GDIPPdEb2}`hr9YXtvVf_8!5e~RQ^WE6C^PhmMVXP^V#)R3
zfRtd`v;F{*(kdEVEfDI=z)#$2&(jVpGoN-9Mz@EFcZ!)1>^);H4ktFJ4jYv#G0SVp
zRT>;)e1u$Hn%;c`cu-TtoQNE@cqET=HS(DNGj_4Z%b^Rs-NHRjY_QjrPCDQehR<tq
zm!*BPr^4nwHTb^pkMX;auia<a2GTgBM1ch<|Iq?si7sXXyC-@i;?&E(Fb;hCWHOz{
z<UD7T?We(Ip>y3r+<1X?cd2Uhec)Tv?{^BBC4^%g(apN~@&i3LZM5;S8P8}ih+#74
z&Yc0?!VwSQv~<Y)jpULtEmiY-L-*an4;ysM%)4_9PZ`XdQYnq*X8Ov_0)6i|5ehkE
z<c`HCS&#O)b*B1fiN9rkjavO_K4eHWN9S;h5m#zjEQh!|i`_3R;)ubZdHUhjkY-k?
zp-#M&W+<h}vDtckNq^s-xG*7_tMC_P$(~XHO;kWYU(UOM55&YngTFL`maXH#VLm)H
z5=;}Q<!ayO<?VPiPP@QKD)C2)`Q#wqUVQ4E<EXwlNyC;gWqXr6&e6{knD-V})yZ1l
z&fXfWYU8l+CphXVe9}}aY(}~No#H^iQRz4|{KrN(a0HqHLJ(Qa8Nq(a*OymQ{hFGI
zOTIsK#(PrFUozFJ6%d-<KRI|P3hDg<&HR8af%tGTa>ymY%T3X>0U>Z*Mxo}sS4l#=
zEFUv8R03vZXWwG~0~Is;X-GN>5D>?%FFEnP94VGQTI-LHli)1fztL#E)!I*4PdW1W
zmQP8Pt^z;7HUpb*Drc9?BWUV*A{)%g%J?XaeV?j1+Pd{pJP>`ja~aE{7|*e?9p{55
zg;r+dOpL?2UvSI&qcLs4Euw9ZKq|*UG;4Xj6oq#$4VK?x!}~8Cn!hz|UTz#xM3yD;
zlRb@EGb$=-EWKA$vgG&OMrm~Lao?a_Kz%`;(c%i+!mRpOuI}y5Dr*1tHA7=VpKqk!
z0x@IXEiAS93HRdjkj3j<I@Zc+QDB_!p^8s}N=|FL`yBc2B_@F4_x@i}%@f1Z&(B9M
zbvOu*_`g!)0Z}E>56;`&cZO^6Z>@?%oeuRksX%DN=uy?%?LUAWcj94$v(`_81kPkH
zzkiGoWE+6X0J9da{%1fq|5x7L|F8c<1O*u#&t`q8@aKpogjb8tXCWAG5_BLGT(QK2
z+Q*nfRbb(~hq?QC7{3Eo?wV6BDPP5>psV{>HL~%OABaqR0HqEBLI|22-S74?QE1pr
zi)1-wRB|M=$&ezydHV{xJv=b)h|l=ogf$0l_eFR2wYBk$qSqK^Xu4I6jGnWm{CeKJ
zipNSD`cEm!=kZx&&2#?XiLn*LS4@*DDiLltR6b7*4Gv#9Rb)??!QYRi@ctp+{(zKW
zag}`0m$XDwT5`x3F)FF`9@aZt==JqX=k_s4Ch%8^V(?)#yWrg1Y&y@<3kvGZF@nEC
z`~IW8#pV8M?N$6jTH6N_<bc3XcAG<bVdBW5yxmRfwX@DRtl~vX(-9Jwyv@x5)q4qZ
zAP+?<X+hhsKNX_T%t8r7z9&_;PP6*1Pom{aCJLPpUvtR#{!CmN`OELFrMm0>=ZV<1
zv{IKq?*~bxxI}P6IKUJZdhd6=taUEPX2G^x+LGIfx85X-;C3zjz=|tFP+X6u0l%@Y
ztXj-&KfP1|{C^pZZ9gv79`h*?#p^aK`w|1BBS139t{k;^O%la%1g&CBm8TRWwBOnh
z(pymjwz=#ltP9Celp4cGrkyFCC>*eLz8QJYXuh8;R)+EjZ$*~ClI2L$x36*Ni!y%B
zPXvQU;D(}BK~9vO_>&KFi!eYAp@hh(ViL_WielRurS>7IyAYJAH=o^q%cM#T{O}CP
z++W}1cz@bghzL|9q>T3}a78<DN{-OCgY37tdCJ3^Gu`*)<yL?H@fG-f@q89|k`!y$
zsB?S%n+{|2a|&XB_arDpp28#C9UiCfm(jz2{V=UHBK%!{u1GJhNQWGC>R+~%KQx%1
z?zlmNx&6prxjnG-vM%=0HXHqVSp~ew1^$m*Dp6YxbUZxQ=ci0CDFG}F6S>l0Iy>fI
z_Et6h<tu!fIJTK<&9n_@_E8^4lxxlRz21biy25e0Kb>{>0AiEU^W{FlGjXUl35vrJ
z4<Pj<n@R`?bschEudksj5xYOPuhVKq9+@EzC=>xYY$4Y1@$)GViy?@3iIuAjKNW=D
zgK?otoZ5kGc9)F}P?Mvh76yJ4B0+}2xLf`lq`<++8G_GkbaUd?{KF2L)!b;h#B90w
zp3ZO>MX3f-9R}w1?B=wxt!+f~L_D0XY1LBT!^zIr1SYM9XzNm)mGk*lGT>RE^zsIe
z3~|zY9+)nemt{G-h0|25g<Y%4QiD2{%cXrQ3K2SE(U$kxFO<^U^JH(bx|PpgB~sow
z=JOw`TJvR2%M+!q526zi@hmT?4LY96HZdZ(xD}_~<dI4clpGue>ph162xB~76Q8~L
zy!-&TNmD$o4c@-KVBS(<G^MQUBwKts7?0Cze`+y`Y$$<Vw;f<|1#~J5N7ChThv9y#
z4aURCnCjeg1u$+8yQV(g+${9GkB^U6R?fz#g0v|DxBqdsl|xF1#dKk;Ubj%O#o}nm
znf$@ra@+09eX`od#N&bN$L0H}=4~zG-1N6BcKhsg(yhn>6(rz3OJXr+v>u=1`1(G-
ze;-CLTjSJ;LeB+mIA{e>^gJg%>>e_fi&A;mJwFk{KfJ@4`nvFoLcTwNnG(#D%D<5;
zGaTVRV0L>bLngjk2dDqbxoTB!UO(_KKta2qbgDO0nax&2V7Xl#=r1+Z?@bk_5DP2t
zi+g$rULEracwAy4;ovk{oe$?oHknKpRe+Y;kb_#Yy?FAE;+47HlzDEsnh)I0h#|qj
zXsqbuY6j<1i-5bXG{23cn<J$ulcm&c`yQ_5`-I@dB9&5Ae`jR^Q|-x#<wm6@1C(d>
zDga@QXV%5$?XCQ(6|eQM#@GRfV4`gGgoTg<`-^ku(u+}Y6xbO0LKE!m2eY}$HI7%3
zd{K^%a~8cPFk-*ygmfknr`_o3=>^UNx39oVzl&#$UMh?9R8qIWpbAMyDz}62a1;I~
zD#rA8;*v7S4Hv0Q`bR(cbw{hT=n`wSe3%}==VRhrTV>T7P}E>gKr(L*@+a0y%E1^?
zy7lAw$Kk*TqYdWotg)2v_PC7Z94@rO@v!Z!%K6_rK?g=`y_*T^_=MT!Dr1)s6Q9c#
zH!|S#glKI`%q+1u+@${Xn=m+cOn2LR2?!LEh(=&EsWQe(&;DiZg9pd_v?};BN)DSJ
zXS5600Kz}`uy@?dSLm;oYCaze^IEMPfJ6_=uQpqQ8o5%;W7ufO$S}&lki-oM5I*oj
zz$@kBs1%$wLg-MIuUdQco`G$-@%m(;UYzckgKY-PkJE#Sbvy~+1l$hiB<19y0MV$v
z0YjE*CY})!fOc@v&^#+acaB0z<_M`+g?XvT2@~EKK&-&iV{?6U2!;w0IjXb${N}+E
z-ra66nb${N6C}>>h-lS?Nbn#Bydxz^xw(c`r{sC%#KKa5&4OD~BAXo;OTF*3J^c8m
zkTu{QgI1&J$EDaPFh?ACosTUn;KqZgt~szr61qeD4oz*>3|srm>k7L!?z)l%(-|Bb
z%ruKkwh9pQV6NHtDM|D#A|5?G7nja#Wc<tq0TP?z&W*=oV;BLaQaBs))}ShfamNY#
z?gWucrBskj?)6lW2J-luC0xZ=PZ2Nef1a+-G*Z@%>a4nYy|qm{%GQoP(<#wtG}Q1t
zEv$`2Y)9&w<Vxc2u4wUEogFk>&Z}{_|3ezfc~J+$h)BR)ZGH)Xin^}h>Klf|>~uAF
z3h{N|rd$vj9{+s!xU-E&7rd7AO8rCK1oH0ls%}CR!g>!pMkE18t)csK81Qma%Ju7x
z3^ThO^YGPyF`KKMDf6L*;>_PtiHs%!$kU#QwFjPDcPCfofoPvR>H5^_Itq(G*N#$)
zVxQL%G`Zx@b1pM8GQK<24g&P{n4s$FqtSdi=G@*%x@%V^{Ck!b!)pXD=!=;aUCm}+
zGul*Me;$Hb#3SPRGs0(}Nzu_9ELXPVIcN8w3Qy)K@MDMlqZTNsYTJ&cvsp0<hW78?
z;f9pB^;FUC%uvdkO}1KKb`fy7WB>~G2!ZC9{iOKt!`LAsj0ly-<)La`k)cc|Fz$+u
z^T``cPX=O8yBy3I??iU^oF|fKnVOgon|n5R%7amI3K=_*O6yHujb@Ja@kWzrH=~>!
z$$escF_VcLJUToW6boY8utw)G`$H8iEyt$^^kD5#Y3A?Wda{HUxB=ov#0m7}fQ@2n
z2nYBbb=Q0F;u-YIDl4O@(W|CcJ3lrxn-FrNEd`?Q1Im$SM<4zNu#n+#)_6*zPBk_;
z*#trHm3qh$xq&@|j-T0B7V#YuAt4gGqf_+v$-E-~%2lm75Q`lKv<itjMX+zeh0K(w
z+bndB8txQ>j{<m1sJ%IDjRL;&*Ra7YoQDTnrestZkF%kXhbw~TcAwSsx<n2yq{ceC
z!U#W3Ua{nxRHrMi>z&JHM>+uPd<YIgXdHXVHevrVJ!~e#O5p1O6J=1W#L@^j{Wp6W
zgUk+3k<M3m=2KZ3vkasx7PHi_RB_4S|E$NDK2>hh>@HQCEiWZQ^@Te<_Lz+s1#*G0
zM<=ag-|=j&lWHv>Br;%dxUYVXAIGoog9fE8rD}sWmixsh23!yt#O?bXBsz0#_)b2b
z)^Xs-jl~KW6F1iq=h<0EA<8O}RV`6s5l7Rzvag9-_%K=&;9xwmrbA3XUqpM51I_|M
zj2I-L5zzyNnbVh4y9nH@CRZqLscg%H5zVb^tA3lJ8iUqji{owrAQMx@5^&VT5*m+$
z>x0ytpCqz!6naOpb^lZVy@inT5qi30xxw;uZy%FqEzi*0Tp?FuzYo=~lNB~%8iXpq
zzng)Ax=EajKJlv^At5Y>jERz)^FvI{o7>yIe&w#sgi@9D?GxgHH89L9wYVY<ej^n_
zL&f2^yVLzGWw$d5dnd@nLB&C<d1o*XlWo3;O$Qfr*dh@hIZ7i!g>6R|P1xI&1khva
zM;ciIJ`6hTql8_~D4^5?G<S{QR=a)tjfBsy60-lJ1thgm$YvphQi^fE@v{#9QC3A{
zQ!mJO&4;`u)p_%A5i@uF;J{nt7wjwg*)|XEv|A)!D&W|Hm4bwTV?ekzTkly~yZZ^u
z7do23vKg>ln)Ez`E5uUoIoBBVL@eaL2t_XZ{JB)6Kb`YVJgw~XCI1GDa4}&j8F8((
z5sN^>!&8GJ3+5jQ&_3?E0c~z=PmOXH<5Nl%6;VW1f>cf<B`^eo&He*m;E3s%IUIMo
zR$nJ>oC%wAH&kPG*13wsSfVQaA(ReIMl$5IKf<il5pue?$zMq4-;W8Q_i{fSuQdqi
z$NHr0gYFMa9;)px@sv4TT4hL(I{y+nkkHuF?-ck7%y=mU7z`;x;P7IT+)3mc_Ad^h
zLx{lZE}x<rrq2t*Pof8xvbvb_x?TYv$vM0Jl$PU<2JudPu~@(&OG=|Gd+PYi=CVO@
zN~!kVa;(X5Rh7^ke<8S}n}Wqmt@g{M7`ofS4|h~|qk9Q#6mhL=>0@tbzhPFzl7m21
zfTZ!Qum09<gun#(pf4jp$H2eON8RoP-HLUznwMv!6sARwBG<tR&&dcG6CeNSAsXn~
zUaOd5P!8%65>(y@<7^yHnmbJZYKOqQt7t@KjAbneuSIJ_-0kQ5m1054a9FJk`SD?C
zy~fY$%L0k>+aZtBm9x!#I!%7+X17O-Juz8<R$TT9F-6S+m13wd80Q&ao+IL3mCANM
zk=EWm^17MNQvNtA!o)I0cPrQRspTzpKzaFBN5?v~1dDWSBgF9CaV!8yBBy}d`%}CG
zPIZIFL_d>~aK#@_#Dda9g@uGx6e4>>HpdkEj!t^DPEd7MJo}<J{d8bVzLnnGJo$jR
zvQmx8_fPErRnMeQ^CgP>1E;Uu&H^HR1ad^5%f(&vRj_ZtWLv%MZNm|_pQHHHSI6mM
zjn=Q6yJWLhVY5&idKVYrfUG&)rX*AOBby?+c?F{t{BVIf+A-$P?H%(fO}GXeq$Q?*
zuI1HaiW%qCA(*jg<WCfUI>+O!I6O{Nc?dXUGzQClG^se52xVOfh;SpDPxsoNwpgyS
z!imA+SEQo_aMRk2D3is8VswgM=&=_$BHA>62mljLGO7pJ<8r?i__M0C+Fi<c+lQ-w
zm9iV2-i<GH6<_WLn{r6Tw^F|5!<q6@t@ftj;a$r#a9n_GZA)ZzgTpN0QvjaHPYOkE
zf4rgRVPFvB_$((_{T=-)qhiSdaF6b^d;MPJ0DRf6gncQOI5qs1gGoFJ4}r)KPmQ2}
zsWn>^idqErh1Zo$Gsyu8q!(M(#w)E}@+-b0$&sXiFp&oCk3Gfa>Zn{>WwsrOmChsS
zv85Wdrb{v<$?GQV5KgNYzf=g#ml`M&4Ih6nuW}>nS{h|%5|dyL!bFk5|26~@?s7T9
znQh~^YP0!KUl8zFo*p^fT_m@Y?8k4k`<z}rBDJpSv?3G%=P%pvuMZ=$O+fAe$fdF1
z*C7h>_y5K64XY|^SG!bTJK#&5!?N;VQn#Iozi?rc*-TtUt<e-8e5XN<W2+GYY_JKv
zwIlD?o^O=Tz8bEKfIth=cNrXl!IR2O3VUE^0K?O;?s)EMFJGqpPXblz3dPu}%F2Lf
z_~sDHSItWP9&DH_7E9@g%1{RBq~Z$Vsb3+$5H*S!8Wb^V7CJl&I4UCX0(7fKl0Yg#
zr9z|q5TGy0HB|Z4k$gT~AxD%jFGCmAb#YzRN<v~<U+XT6rgW}0ovj0K$Q>v;8x*%!
z3w!Sw4R)5AxgR2FXrR&_y7oL#PcBV(jTx{Gf3;*lR719s3_E~QkWCW{4l441zmUi7
zPGDQASnC5iujOs^_c4)k!&1T)PCLAx3LXXv)xWjsxX=`xwe}XO${j|QI#;wksI@O<
zj9(GFHu+XaZf-W#)Lz2<CM=b0zRB3N`vHfwfYa{o0c@SCDV{{D9o@%=u=Yk9v-tx*
z!Etllpi6HNL=NR~cjIymOnTnF;^_y|LWuZ09y2KZEHg7o(kXPfzOP)!L{ri+A}L#E
zQg9|qp*)z~SH+Z~!5i<8Wp>x@@bcKn28>V7bjZE$qv2La^y9g?$GnbQc6SiAb8(Dm
z+N{wMD-rmQtBid(R<xS+<==-eW^;={_Lw!ebctb*@K>)p?cw|GyNN7|V{@r`s}H|0
zOGTYC@}O?xB~~!c`$T92{QWhBSKagOD@wjpB}guB*J%T<F<I|<^IXZ^2i#<Qy=Yo&
zsP;SinFmVhyEczZVB$oqwN2$w$7afV$2#Q$09*Y?&=d>Qz+e7yiaMfS=qw8dsUAz?
z4CqM?B_&YW$pZI1)R3aAE;o?g^nQHwD<-HUi~-;T4-13pKpNkvV0*SP3ueK!uE8HP
zDpj&q)M<MjQrFjrZPeb*cFR0=77~`0Wqu-&*xA2y^!0r*))a&ourjnpQ5d~lE-qbN
zpC0rb*@=|2KLXZcWO$j-AjTR>C&jq#1va}i%0du1{P;=~g?z^vqr@xiKGfxukFyR@
zH#Ki(>25<zXR1)~s*IE($Lqf0y~WPf`HbwiX}#T_LKGx^wa`7LRb#4Fz%(2Ac_Ms#
z2w1vDTONh4k5oREJfM<LsuM<5=na$8=>5tRuC>RTV=k4i&CZsr0c!-}&a^y-BxoaW
zARMkK@c8KG&@4jJB=M5kY{3Vz6Fwc>4%CF!kLS>?922m)50iKp!9W-52N|wK4GNcP
znvUF_Z!R?$&vtYd79E1l^x@H-tYt?Xk>^HywYXwQCKLzT=I5t8NMmBt#fmYILsNWE
z5nH&TUid}-^eexT{Fu4=B1Klk@LY~-X->#~|L|di;kAZfS^o0Rua$<Ou_YI>hzEw^
zF~yRx<>98hsSMfO?aep@JU{l5^6413tPd{w^()7y6$@2b%=UY_#T6<=lIwv%0|a%Q
zk!yUralVzCGmO+ub1PHSTe@3sR#8Byf~?fQ5}C*rr&O<X+#2-Zc18e4?CHg3|E*h>
zdyEF-iBLdN&71+gD|Tx=v$?94n=~pN!Z`q*hCI|aFi<H}_@fh<E3VZ(SD}x21cf^{
zP&f%z-W(~s5LY59!r;Bh+vk0EsU)@_S^inR5<uiDQLC5r|0T}ie5La?xk6tYV2&Wn
zy8|!R;FebtxWM0@ZvlSMaJr*EcrezB(mMgYr@>&zU{^sDX8m*RCn1t9R3Us=Dw-;R
zX8F<-neDjd!&w^{7oX-r6Qa2Mu5LX)1U$c){uFML`I?~;jmz2U{eLK483RV+beXpL
zWY6ikp;QXjn?#JkEdVz5BtlZ)zOmHr1V>_<Dg48+CeN+iF)~bZj_l6I3~G>)rc!S0
z1)>mTW=5BJs|ShSQ7KuEd^hqGTJR%J_F31{&iJA#Z;^U+{cL1jG5}{6u*C0tG?$g+
zTPlSVS;j5SZ^9o-dd<hNm4wx*Pq6G^FM50c=|Hj-C_+`+3!}~f4t|yja}4zAe#MHa
zxq$`UdUda?*xtP1oE4d=vNRD%75spmVRkR^P4BXbi3-y{mhc@3msBhhg!rdisboJE
z6#a08v_Tn0tj}okl)+48_?f!{OLYDK3&fvV(w8kDwvfT0_U+)UbnAhDmb{RVP=B$w
z93(I*g^e5jW96BXLuQ@)b`LW56U}%>Xdb}<rMd%^2nD~2dO?Q}cb}#fjJJ`*8Kx5U
z2XrNf+n^gbNCh2g>uGQ6gm^u4{t$6ZchWaio@*OeU_6U5<Gg`u$l)Qs0fmIcP(JZj
zi`JlsCzfyBH>%*GKv{G$cX9=VnD>m|AIDJzo)BK5-sb0l)XwOZ3po5cK3kIel<M(P
zy{&CY%BYY6kp%x|^}ZOBO*Jmj*H;+U`$5;+_p?gY%`I^TP&NJ2yxOeGsvmA{3;B9^
zzqD=BBCudTQW3r=wbgCbRpNLLq~8cP2-a;xjIf<s@T0&>z5s!B;mnZTeLVoYrUxqZ
zqxo&+ORT_O=`}bQe!zKS-eE5X{A1@5Do->w92WN88Sy6gi6?$rryz$CD&xu=hqRs#
z&u^Wjmj>h6B|{~QU%DwmjJ7V4f+?oETKx&NPfDV(2P_KtxQDX25~t^>?nE2XL`+l+
zE9bFk;iKm~(prt<%Iev4tT6AwHWv9KabTpo6HFezQT<h-O;Y>bEiQXSGuq6VzQ-+H
zcDK79+Yd`^^?m79JWwlT(b<)iOPE;vsTRG}JcXZA&Fxr>7>|FABC4VFq-7B$Hs3sx
zB08S-qU1k}2Yu1*vZn3TZ}les-PYFDPA1<WS37(KLDUy8LX;jSkQVU0C1@taOQ1#H
zz?m#ya68;$u4Y8fpXMbw1bZ!kb%LG8PCSwT(<P;DYlz$kX71c6H5Y;?U=S)bmjg6L
zpg~h804hh5jI1X+Xk!Hx%n+4tXN4)2s{sVvoJv_s?RFH9`jKaC)_f6w&JSd45gm`E
zb^!eblK%S%B{|&)y$*1<mB(idMt(s9N#5hKnLD?7$$4CukOW!8D0SE#{31R7|LVXn
zSq61?b#Xaux?lCkfopSvTTTspM6rMBS+6i>x6u>Rg}?t95s}7iIwEx3%TxUr1llEF
zmQxXa0BVg?<n>R8pztoJT4gmgT=ObmaaBcJ25kjsXm_|Ue~h=H6jXzfhedK6Gg;Ps
zQT(_Kwk(Kc+^EgOW~n~sdUUtdSMee*{SgUdi<&xux6jS$Frubi<^3mbK)#2%wlmq?
z=hj0;deEME95=y!OO&8>^7;Y~LYVlB6G@n=8D9P6s&>j<$p}Eagy@H-iWaYjb?^%^
zz)JTb^Z&ogp8#g#j0|1#1!we=TXC(?+A@D~k8lFez?qv@`tQ~k@!#>K*uR69RUdhH
zp2mW%b4z(BRwFxmD6+kZ_50BbKo{WcyD;!YG#QQk+vB25`KXBT5zOlTeeuN4t*`%e
z>-jJ}d=`&*&z&ES<U*{$Y%Z_vvS{kyF5a1exNr!F-Pi~dWcAPoPuZ2z%>&*a^s%G_
zjS|{rH<yRAW>Xw67%lLmQ-z`Qb&TGyggd9<gUZ)|fy=H<KYIFxn@kwcqvS<6gv6ji
zVm)dFm#9uCBtB|7>S)yUGOS6PR^0}BbJ5*H5zXfxGozAy_I%;<k^<7(`g5w(_$@qw
zU0F5S+c6a3#z_LNmg_UYp#NwAFAm{e-k<gma9e($dDIf&vGY&DJ8VSimoSkhs2ehe
z|A~*T>b`uNHx$Hwy|2V@y~m)~2?LXlARz1R-W~1bNfG!J;g3-Sj%8re-s+E5XE_^Q
zd=t-*Q(GZMO#%ZXn3*yw;Z`1X@8_8IsU8j>rR{-84p$spln<EkOS65$!&hB>mB-8X
zAca-ng{9#SudS^Of-)qM=NO!?4t#xoRIZ!O*E9<SpbQVg=w1U9(p0f30Sd}^tGhd(
zauX>>f(u|dbl#*^+Uu7mnC%6LmQpDkv?S;@Th#kA={~0at6y`LdyhcCo-dS-y_T!D
zn*h>ot?dfSOh$-I_a@W-0PVH2qvKzUkk;?eWPqD~!Ofj-6&EO$?rvX8jYfl0!qKuj
zA3T`i2ldS1!EEK)^nZtoh`w<SF|7#@TWfgBXgEBYF1Nh1W3(C@5Eh16wXs#)2xd^5
z_P@o3c=H$9{8lJ+Sq6h}GLJ|5Q&ex?Iel_#foe6HD6pC;iU+BgL6XrFF&>#GAT_*0
zQy4_fHeBNZeY}X`)xYf+UX^2T`yc$kX&W@P>^J-M0e!UDcGm^uvj9*9<xW2!^ME3Y
z!dEUwA^<*-$vD`OuT5BUd3wDk<Pd;}0E;G#v|^TwB7m|?rP@eOJ3?ptSG`#6a7rVS
zp+*>5One|(q2t~K6umWYQ&jKO{M_uDqQ|8ALih7<(SZb*rDIrTRjPN1{(J|FH;}?1
zvvu%!!jOi`ai<Q1!*o9Y_sH&^?C98-2KMXN&7L97M3&PM^~!!AYD0$10?`ThvlXaQ
zqd*#8OF}}zkLYtQ>x*9}(;gH*{;Qk9jPap-cgUnQE)MJEOB_K2xIzGpXJ=>kdFEeS
z5pWyINL-z57Md^qK%?ARU0sENBEy?~2`o8TNyng8sjo-(YyRF7tjxp1qu>9F(}_X5
z3e-RC0CS71SyL1nSEt<x*?f68UwgX#F@{Ec_|KnW5Il0c+!~9&v(Xo2Hg8X^G6`fD
zU&9fy86mVvfakFZ!L9}nYHf7EcF4zwItWSz2J5YhawH{CzD3Me87xkX>E^z}8Q-4U
zB$h99{F6UT!Nt|Sj)9GBe>peAYVi<?x1`cltrctjI#(*S)%?<vnR5GR#!hSZ?9x*&
z-f03uJ%z`)+<NxFsq&-wVvEI$zi6Pa`|UWZMM_cy{eOBC`&0Qf+7k%=F#NB94f^tk
zGsEI|IE8dEJEHgYHb@anjeyR;c$S^x_O<p(czJvKv$Cgesecz42^OnC88AtB_x^+9
zotc@5<#x8Q+hB(S9&(CUXzK#i+9MF=1cEM-84agy&oLE?ls=hv7{Oi2{mZ)onGH>#
zbF;Oz1#&37Wl(FseEv-2_VfT*IJ8h-2_8egwyuCEpqnvRt=)ihg%9(9Js4OIFhk82
z%dfhF8i7@}!g^DT`^QCt`?H5y4PYT9F&T^1nya&zD)~iTAI@uz5(L~QK$FLz;G0_(
zwtsazy3m;IHXllGjJ={tAr=4P4LsW*s;`ODfuI3XJiHkUYER?@doEhsO^%i6n$6as
z#S^+sA9*R3-r4StZ-G2GOd1W>$By5i=3E0I!F!V?+)itjV2)-s)BOaoH|m}j!sOBS
z@B}LZ3&5M+!NKvmt(k6$ZDLR>HyfRPua9)tU1$)`ozlVD>t9*|2uqI&7!W1=a6-g)
zvtL$IlfdFM`LkX3f!C!=)4Ti9OGZ(LWHOowpg7(}tOFz!pdb5%1Nx0Zt`y#8jZPMz
ztHmcL7stoHf5GY>f=HS1VgT*Oc>GDI+0t|Zy)~35Y=3RLn-m<3QY8dBVaQ*!c1GJz
zbY|y2Iu@p-HaHx^P{Kpsfuw~W&LEq(oO|tjdt`fK19Ir6x?ZJEU;ivS9tkGN?>Z~p
zi^eLBPfK3Rc4z)vP+~)xbrpu!SI@j<<@5)tz#rsvv9nt|f4#oGp3RdV{66V(X+gC7
z_Zcia+?M;BaZs&chq#z8c?4PB^d2h|rllb{7HKq{L_6ysUs7s7M}XL(_K8~K&d8rX
z`CNRARGVzyL1G-p=F6$}N7rk4H0i9Yq@$|V9ydFh^Fo%ILJ-4rEc<8l2>gqdk+ih8
z*J!lA1Z*eJnH#S(w1`XCP!Qu+2gwT1S6S1gnw>Yl*loyma{yimP9>5-zaL~ina|fe
z{-M+aBuymMQF|GS>*HmM7ofUw2=*WJ>*8<u9T}g40Qp-EXmm>TpfgUk6PAUf1Vkn}
z+RI(m42{J-S>mbj&3&+{uBqoHfF|N`!ygcKoa^MP*-F+lEygiOOy^=m0J;~}eHDfS
zXRDph%L>)N`u$)wUKC}D{k9r-&sQ?n_?8=N3E1>xMlwFb4w#)?Blf0HSDwUvC@kl&
zJ@Sj|^%p6i1p6{C)LM>Ay5|k(*R*~KnUhZC8HzuDUdjSDkHvVLi-xAgbhaW}%qd4S
zY6~E|J7`}(){b`+@&$3c?ryBL8Gw|EL4w%BZ``N+1<gbC1d#JpYt6xS#I>OX5;4F%
zA>Rog`4Qy|cm@ikvtTJjV`P-0H|QI$&irygz>-x<I7Sa_EeX7EGF{b#zPAyb_W>*<
zaiv;_Ow7#D;(#O-6O}t9+FG()R&3SD!I<mrp7F|gb6C^*e)y3*vEcPPe2%5zDd;^(
ztEiEo#u6GR?^evolSxtHH;6dTPszM3IW|(9#t(FV-){k%%S|sJt2Ns0Qn^*v)L@Vl
zmg`Tb0VQwwxwGEJQ0S6Tw?_gm1@ad}y**f}!7|}bx!)aq0F46BU#=i@2IRQt^aEaD
z+cyLK%haz_QUd!^#V748FOf8p`CcI*A!&$_JCa9ie?G(In9o(H-pO8G>?Y&$xIjd|
zwqrKxWlKumqSYZk(jYNY`EAY(?f!&|hK|k*<}Wa7VSD*$l>1Q3L30U7Q4D~QdH+@a
zz&9F+cX(K;ScOUUoN5)!kgN*ga{d?vHck*|MdK#KONQ{{Y9SkRZGBp?ad1HI$hXtd
z2XPX;<!=QCO9!J_riBbIKtx1j`3#`V!+m|9!1h=Hh{&RFQLr^1Ua(+*XjX{*xJu)4
zzGWvP6P~a=MGg3K)YPe5PGlsGF%MupBzbTwjjDB61gT>nBnawkr9Zk502EsRRZp!3
zaGp(<n&iPW{-FBx(W2LuSLfGJRMBfWcAyCz%|1T6wVmqvsWn(Hj*}&N$!X+~!Y?J5
z%z*YQ!qMW*$(Y=>gpZuEA@{!;4!S0$YMvI)NaRss&4GYpXHGJkSRYEa9x9Xhw>KOx
zccQyrg%0KC8%g2SonRdUQ%MI<By<|D@xPdZ%?-w#vyNr}W2DRP#kA)CBM_68$LXvK
zWQRC8Is$&!_CRcD8FgRCFbE9t_&7Y@=uucWU#8t@GMSh2{Q|)B(7Kf488iSFUBOO>
z4frpx>CNVBHxvpL)M-n-t&|7L%ojNT#(D>A^Z>yHR=u%m6HKc@(;9F$YAP$K)f?2x
zb@0JgA(dV?A%j)I5T40J-s3F_?SgHA;((ZEisN|?BC$ikHxAeyaEb-tAVBPphp|6c
zK>Rqpevf&1Q{yI6U|M{4`Tc5djGu6h&hT)oM6&;}81W5QyOBMh;A%+gh41xY5E1=^
zK@#ktv>7GV*3jVKBqA=-M{rO847HGPVx6ew=H>;mS<_Z<O2)@0a?OxJR>n#EFAe1<
ziHcWtApH9zAI*Pqs7{Ac3-aU|DX3yB|H&1J5Ew<JV+qA)Z_B*VJR%?gXJA`F^Zcj}
zpGd#}YWmd#)2Jw*ODI;On~Pn}=0p<iBra2xq2PS`;Z!Q?so_B{aqNTwmY5BTHCoJn
zg9Swq|E~^7j@^9>my1gTqlK{EMxsVaSw8hkZrMrT_J|GxG2@_E&h_Cz9@IGyJnrSS
zW6!0=FW1wDbO;#(PMKbk1!>_H5JW0x>>G(*A*2c6FK3U3LnE_x>!HNmrV%+0B<lK=
z^GRllFMn&bH=}c&`Z_vl4I-hgA1%PI985uFZ3^6EU}4F485Vshl^_QGQ@X1hbMF!(
zfu&0NM$f)xAmtM%iC*44h@kWWIy%32nYe_+V3gvMp#>N9Zsa1UyfW1RkZurCzzqo-
z<2|T5Wk4oR>PP)W>#g2jJy=(i#QzqYng3h8{<mmcTU#sB{bqYn>}LVtCHUH_)kjze
z&ikRQV_|ZbBOAQW4kv~<ku3Bf#g~dqC{jvG^g8U`V__8rx%$^CB0R~9Uj(oM%^}2p
z16%9EKf1YmcAtL{QBa7z>=Dm|trv3axSXJbL=r$-wfL7A`~NHxaxAPZFfah_T^Rhk
zFxaqQm>~bafDix-*m%>^<NIkyQZ6n&i;ht$zGHB(OGE^B1`}CeGF;CU`EOb77V<OA
zLQ^0U9v%|TCdykNF);xP2P}zaUORDhCvW{zcFO#BZf^cR-o7fTs<2&GB@~cONhPI3
zx=Xqnq#LA>Zln>UySux)ySp3d?p(n6+<X6LjD2<PjyH42SS)6K^L?N9iMwga5qt}I
zxCeiC)K7xkjn_h=K!uFZEfEgeP6tObjHG?%&cezlmewl{dchH=Ln1WP4=J=QDG?c7
z>B#^7q#a*Z>*oR(WktKAE|u4+$rcK#@t`x#MAYsg)^2@@W-ZDpI4}F6sG}|TZsLQ~
zLnbNacOaNV)`G?8-yj7`ROzzEMX8QMo_2+P1s$<3gyZ0mcm+B(6aho48KKin?xSzG
z_Q#^C727tMPP+EiK$MF^h>Lc1;FmYl;K}oAfGar%pXg@DNoXh#Yu~l<mM#Zhv*)LM
z6dVmOKX3{k(Qx;V`eU*Ij1tZhG81<OoK;KasQ&9?s40)cO5m9Rv|k+Divi<rfvaEn
z`p^g|f51Hwe+%@OD4~=0n;kp#6%ow)`uA}S?vo3NUxJB~!JqUnZb9t-U;$)D!S6mj
z2-UTUVycb3d?V49k52$MS0)9(jXH@lVQ6*#9X=g6zlFeq1Kg$n=L0%gL78lT_l1Fq
z()Zu_Z`+&2F8F2!<tk~8@9FN1k|`qjCnQt9`gwxyM#vZCDN|iLJ7{g3y9WVW$j5(Q
zDaPf|g(mj|xxoQXFz&yd`29Am<KO-Izfw&l>OtW0(J9*-k+-fCc}$0_mbb2t9^>tV
zou}*Ig+Qm>;vf!EmM65jG_A3+gk>l<)$$#V3&C6e4(E<i<fa&;WqUMcwY~HWDC_{6
zb}rA><xVT18;mU$7-;C$m-RF<+urE{T9|Lo!jZ<>(aYn7wo@U18JRbx6&T}rT{sq7
z(j*ePXJr_p_E8Y;?tQ3ira_I~NsIxn?amh=NO3|ixl}4Tu+uPF3rTVujc*VYg&s|A
z2#hS&s#3kw1pSmuQmal!X3V>>#1@<;z!H76p;ERgnO1Q&nPXPy05WtAI)#cHPI&-r
z(m;kkG^U7U^ACuPqXBx{NUld>f;*G6OX_|H%irC{OSjg63%0Qzn@ui9?-7)NC4#o7
zQH*3HZ?z6t_!rH^9)vuxHlxvGR8N`Ic}zk=T}#VSqdq`b)%BPvv%>!LVSQca_UarH
z56`UO4h%>T@pyE*&pZeTEyW!{GTp;d({7c)0N4@5lsBJV-g$~>Urq7sBI_MQ%W*e4
z_9rq&g%49Dkb3^;5dUZ>9y}P+lAWf}P)Sk=_9tg(_S-s8lO$BuS6eJ8NP?Yf8&=gs
z{asSOfZ|hvfK>{4xW;=^qGpdC1(>?<+K<;nzt8H=8Btd2P6J)f2Mq^jgognL(d2*^
zPZH<aJM0HaJ|X~ARO^5kN&?OsvA@ySeVr$I+3`t$HoG}T$Q`hL2!`sP`3B@?B9hFJ
zKn+`_+SE|5a+BN>O}IT@F||$YLZ{k@wPDJf=oDS-Utrubh&Y);2l6ScqWQnHeE*dt
zBJ(Lkf04`nu*T(Tub>{T37b;Qqc7B*Z8k6>3dI(1K66Jn*o{AbU(Oo5gJT2)Vl8_4
z2Gg$Mg<$cqhxLxX{nne=3pRP>j;9;)hNhcWATgC%<qznBh|yj9H2QDaz4R+#fcoOw
zGfkwfw(s-nCiB%s*Y$LIHhf9W`r90J%u~T0o;>jy;rg`=M}fQX4D^1)3yEa{$|?hD
zVnVyeP<N#wR^d4BE4JjLi8xyAUCp+d93?Dv#?=Ca-3rde^u4_ozzG?M+P%iD{%JEB
zwv5ZXe|B@sDOgy5bq0vc9ILbut@1IjR*+SRszfeB%Z3a4@wGvvO1}Ov(cCxGq@)I;
zN9;<}DqY5_%g%RHr0iZqye*!mVSE#renYWeDs-npK{7{2QmyHTk(-dgwJBy#bO_$e
zND_rHu(k^Ts!0z!nTm>vJ6tq~P&iHgw|dvH4oZa_8r4o(28K$HE(bi8lYF%tx9dVo
z<+2rTBt?@CSahmS>l0II%v5V_FZrs$UjXYy!ZtYcVKu`SI$+(*+&uaFud$Aof}&wn
zhMl1#iTA9g`5Lxh4y4y-we}758RPDLTVf3uaj@n51SY26>vZv4#2T*jUUN7S=;-S!
z<x0Z!lU%t2B4GDQ8n@?6-Ag}U&u#Z7JoO-~CDtSoaC+n_hluY`4o4`xyv_<Q)=-rJ
z3H6W29@xSt2L0vYm~;yY?d4ty!es$dZMW;^lZIwFFzsjKm4={|6liiV@fqx%0F$`l
z?_+O1wY`5NuJDX!wMqaT4T@Xc>2iR<J%n9U_9q3^4Lh(r>U;9o9z^t&N#+V(Mk3<*
zZT;iN{BLw)5KaJ<#awARQF$1QU1kjrfIYRk6Qm4sZjK!zV5toVhu%kHu35HxVklMC
z&x+_#FE2mPqBX7)rN)vQ=36zZlxgvFQ^`}K6HVd3=xjrd%I=4<a>3&@-lq|%#s6I8
z&@Y`cMYA-j&08Q-d2@~|IL>mhzQHz5npV9A11$jf%f?(6k~}q<^_jBM%|ugXArbP>
zn+`LPkdT;}6%{Cmkl27V_YoPtC)sFl%a<MHMBrMaqlCv{SchLPo`09kb=LPwiu&Io
zL(?I4+c>~+FA|ODv}t0?v*oZgMMi=@_u>JWq_jdB2ylz*V7z>hjT%qhsln^^UAsFy
zFBEdF@XE+2S6bR+%b~;E29P#S0GkzoMmGN{p(-wVN25tOMwPLTWW4Bhyhmb|PiUr0
zML~2Ag+!S~T{Yv|2j92v@t@BB=Fuj_&J-vh)>2EproY7F$aakCT?KE2g_cL1U?aq@
z*S?d3DV%SEsMG_Bl&!pHOpg!l&vbyfpHp;xP;s{uiYX|MIX&!}{Dgu|Ru=VRx!iZY
z$&78<Tub)Tb+(GahuZ6`2}7sn*P1Wc0(N~6<`7j2y5p$^_1vyv!4b3B&E_R`X*Bh&
z^U3lysL@YXJbgWS`*x8OrDv$LM4{jeEiD~3=cNq-dEmK`8E$V%KM``f-V}=<TlG*%
z456c-%vaj8UQsnUmc$%(1Cp$ANqiKsUxO1CtJR9n5jsV9A)Cz+laWvOZ@skHs=0A8
ziMjrqh$4e;9^w~h--EH~R_i^cKsW^|3oGmCc!hw5#!=8VbsNZCv>#-$vuJs|D%8lS
zOt-R*^B-LHutC1~1vuN_^+u<ry)%-MeIMmssR#(4?*ms`wuk0)af8}{G1@tHELD$m
ziF{6_UYd6S-jP@x83L_m1Z>EnW)wbZeIr(*9lwV~6OfKn=#{?P8crBlT}7&5&AC@B
zQsaL=ov#J==5RFSF|)n%1Tb;1ST);z;$2E$5b8pIh3U@FO)QkpaT|y{0Wdj#*;_}_
z+%WgYemb-E0r6X*RKU1uAW@x#e@!tf@QBpX6CKaN>vSgAm{pw$H}T;{$fhZp=G@(j
z|99jG%J<VJ-sdZ6$V)3(Fi0}F0DOjWTm3i_1(B?Ojc|+eVd=*R?f!$4mH+^w`89rf
z4;_`1gs|)h@&#6lqKg~f04_z3_K$ji$Mh47PETWCU0E#MmVR$I2lkEN8~B-tshMR6
zRvX-9!tD$<=S-D`sKJ=4nylen@#F1D2odl3=rLzFYW)W)#p17~SEB0b>gJ}?^%Knv
zmw>o+1CTfm_eX$P8g1oAIA82t`n>_!tZfe0@efR!Z{CccV&e_GiTMcIt<^P3xNA%z
z`hX3wcMva%hjW47Z<WOZ6uCrvQEsRQdxUooOL&{|DkaHZP{2)xtu&(0E!z+s3YB+|
zyou8vULS5#Wmp#GxArT~B$kqZ&{N=GkvFD+L8|Q70Qp(jFTPkLj!eNF{@pcQ;1Nr2
zly`7ggf;M_oKAibTg;LEVS)kzqUqke5RhvEt|q%D5C5SKd9BmHfka%{N~8PQ=qT0~
z>G)-x!N?VC-R$?sVd0#O_;@Uqrz=J1(@ExA0BzwCS4M=p4^mAq9?+Au+FYb$o*_;R
zF4%YE&8n{Zw54+QBp|1w1BmfaAP|7cqbEMd!E^Ht&X%zXn2}{mC1KU^aMbV6CQ79;
zZBO<{IG!$B$d>V6AItzA(GO!|3Q{<L3#YP~IE*C5@OlE8nw#DTZj52b<leh+Y<(94
zBO~BN&mB!<{PXsiM5&<xOU(MR#$>Acx1dtHpf5g#ru{2h9(wEh3wt}hO${l#4|mJW
z2y}!F%`fW}>8~dX$~UQV?Vw;^KnTG{Yw5~oN>8umAd?_0N?$nYX1Mq;cwT9dWc<0?
z(uusWGr-wRV|RpG<^Dr$^N2+gj!j-ftzy|eOSW+PNU~<F1e_o~bef$c|K9X|Kg~Ca
zuL|?c1Mx=4^nqB&!-Zlnag9plX0d7)<x2M1ts%nG?;-~<sO)z~eF|e*%IPWrDP#x~
zfAo*y36sQJT==V9e?ClcvgH@g%oOeNy4)FDL^nJ=hG{h4@g52y6LKKE-5iXuO=2zx
zC^PnKUJ{b3!T206Bf2+O8cntB)h<*+7mq@%`f<w`vLkfzU$Z19BA(<kHw}QZsFbPN
z9}Ewu)u3@ny+y(=R?c}yUa;-#M0-yN49nDO-S!J-s3YEMgJ^r%I)@d<(^WXJZ)2+h
zfXlCwkoMK`9l5%@CzsRafjnP$G2yR2?f648H6JaHaBC7nK5$w*L$<vc5P0*yx4x&@
zczOuYs4)F|vhub_*({nmEFf*zmRcSJmx9t}4HUT5r}J;MdobZn&|X$RrRe{jK)Z}T
zNp#?^y*M(de7O$K6*-_!s{*^<bl#m&br#)Cn&ijoeT4M;!MICB$*E>%s9~6;>ca-N
zZGVp^k<9mi%sG(E?(=a!W#d`BPWLewyS3bi@`O6oya}o0=L0A*BT{^7O;)ZzHD$4Q
z#b&)ezelg284O~F*wj95Ve4pTx6;W66>`c|j1>_76hE17Xw&PdgzGDjy%|mj=I8H-
zDT>8LueO@|=V92@dt4!rMNaVP8YOFIT$RxnpQpGiSfWG8jAf{$YmCyun~%#Ga#Ul+
z`bn7XIX)NEYj)aj2#dKRA~2giJR<x2hW~w)jJ%lj=F5Ta-dDWO+8Ld-1nMh64Z6gD
zlH5I_&bm7ogYeW}nKLv2nDrnOJq%iON2!&|p(B*UpQ1;vi+1S-pWCHSVt2N@08n{r
ze$46s3CrUxg`_Qr^-wB~r#`6ztNq`@N-{=zUQQs+*&xa54O40u#ht43d1T!lPAD-R
z`xKIB_YM(Zt@&p`RaKPUpoe=Cm&*nIBs6*xSYcIS?1aD8BIC}JfDslbvKwp-%hYn3
zA1?Bw4%w{vZdt9?_;b^3QLno9<e=ipz9Xl^(Pvc^Uc`NtGha!B*_#7Xqk5N-oksg2
ztA%RGM$D)kFssuTbg?g@K2dLR>7k4g>GboO^1L`QT;qB1tT*9%vF!4{VRwD5bbOi(
zcN|HYC1P|5=j#WZwy3*yHinX8re2y4mk^X2+3$8Ll~HsLfxvR{$UI%XwAGYP@nH7q
ztEppv%ay+?v!)S-KU<s#Nc^icj~~w|B_hC3ip5mcwJVn(HODNO%f9tFEat+rkW9ee
zSDFTRvf2HhR<THC`&mCpGN{Dx>45&%U$G(rORfvsfn%Dz-@=G^YfY{)Om#r4bbGv3
zW;F7$_8vqiq%oRFTU&Q3)Bp-F9*f)jBQlZENc{b|ekVb2f=EWEAB*MUM~Efh!L}FE
zYLdN*YkN?6Bko0pKRB@ZOfl*Q!2YGh#r_XDKR0ytV%^zPxx*RQVzoSuUq>m%myM>b
z2Dicr1gBK`Y1ph|SpOhU7TKWEPo&n|`t;UC$<<YTgxZT#-IC{mI@7QZlrs_CC&528
zUn~9x3sB6slAbOZJHLI2ClB#C8`81F!on)O`t*u<CbPOKMxZouK-+(^Rdn_h4dQ>3
zPu5x0%ZWQl#-jo3y1BRatJJhV{nK>|-tyJ`$$Jn?`|Ks~h{tO3=d8+jY^mBZ7+Tc7
zdnA#$Csa2h;~N8?G{=wmEH4a7`5%*6{2iZH&w%-h8XQ8j>}gw$pS($CDf9s4-Yn4u
zO5t?ON9V=BgP=W_8zGJ&YW|*-eD$;}Y<n2_9Pxq!REhuD!@36I`?q3Pbhxzg)&0*t
zk4rUH0cRj$86-^4WVx1s!W{ulYN61u2+Pva62(t%^M+uNh|R9OCa{Rl1AWg2sL#xE
zkA8mo_Wa`?M06!&6R`o#f&0Tv>00{gH06|Z3dnli5_9Xm-`tVfL?*<muWtl7?JfCu
zYvWHzAGq=<c;0;SB>9JDxO{S6U}rSw|7!KTJQVjO43BdZq;Q0tNcKll{@tU`S_!J)
zB=IGM`S;m2Q5y(t=O$r~uG8saNpQVnvB=oT-5_BIN@Vwcp*@lePZh@e7n251aEQ1p
zC;&@i?Er{UCe(n6&J(|=Cj!gwj_3yvz4YeO7M<U1{SGwv2Ll85TL5%Sc6QZ#fh@8*
z?s@8SCp|%p!F96M)}k42{CXT$-$mZC?T)FhgDB9=xgwzUIV=1u`q0`Fj1@<v+9;k=
zxIGxXRAW|0{`O#^#kd3F2ajz>sWqJC-h>oJWOgOMD(-xLVc7K$0wi*z*t~XU<5GC6
zaDcf2?^w6Fhd+KFm_`y1mfzSX1j02O_QrMj*V3T`-;zPz{3Adt<*ms?aXX!%Xi|sz
z$&4J-fGRX^2b<Dk@Ty=6n^vP(U2NL=_@IWRWGR+X2^I?4|M%@Fx|Z!ru+r5bv*hzT
zk4xg)>Bze5y|2e8Yo~FGgW}_F$K}Had2HxTJT@SHmD_`A>gwBrDG0YpJ>qcR4i2`d
z0VV&8*?1HmPP<HtPK#?}?mU!;(*rX9oBPoLJYK79j%7+iEcX}N=u`Q|d*z=(l9-T?
zk$LU*M4MQSWm4D+mWGlmjYeFKdzD(>1%+!<BwPt`I-U-vawnPpNpuA(|5UV?LZNaA
zF{EOCem=R$8p{iGSnv0EMK8YmiS?G2OolvBpkDW{a5_F-oiLhrTho=<073UqT*=;i
z>)%rDCg^WW{~j%PZ0Wm#3HGX8%Y|m4%a(8)TLNee&Ff3pL~u@BTw-aoGaz11Z@c3`
zRH$~7gXVh>%26XWl?!raP}_jItj6iLFA=o+<1Dfbh$Y`}yT2sj{K+KXf0anY1fqmN
z*1DvW6v$jfLqn6Vv8lN}WQqQ)g(m)moZP7M?zfg<%YiE^3Znj8nWoizdW4;}xn_kM
z%uS(2MJ0|;!j~gm!V@z8_qg6GJ)$^Uy&(k1hicnFN+2naLb%p)2KI)wn?|Et^rNq+
zD7kwC{-i5pB1>eZNI76zK(u`D=wLA?35Z5<XH21CVPkJ-Y^VBmhxZwuJmO6u5Qyna
ze#k50x5)VKqiQ8Gd^bBDCaXl~uFyhoSsEN~OXKI))`%j$=DW_Fx4P|DYP>GhYFI2Z
zG#f+93BLyoP!Dm2StNPB3Me9p_%FUV;SW{$8VB#tLP2=nsYQMg@OQaxnOGp^a-B^U
zLcnGQlUR!+2l1g-5|Pt(U=a2Qx+XtAzmc>$ovsH&Q*oQ^i|triwGPSoB4exRB)zB4
zl@23|wa1J6oxnsXqwi#*swr4PS6f^AC$;3CnL<U8Id`y3&<h9PYBlJQm6AUkfcfmr
z=~7#E0L2BD^JX^Rvztd%yXjP|6o|#1C{KqPC*f1imjUl?|L%;84An{llZ8URbYvua
zHrY`SK3-`!n#zq$<xIk8t~ggpzI?FP1EPLRXA6J+eLx)6S^wRaEL^RlRHSviHJ~ug
z0gfTS5Kn=A*{gDaxMg}QAHxnFR3{(~s64n$YJCKh5D1uGnA{hyz@1sD+2$~RmSJl=
z)?jxY8C(?n^7iHNmgpVY0`#Zvx#p@z*Y~#JI8#-wWyC@nw?xZvZG2uJ=O*}mES`sv
zl+9_VmNqI+vRe{+TW~8b9ECK#&Dx`AmSYr1{~!Nd`s6T4moSh)(^MbO*W6&6QDHQe
zyi%nS1~>`UW?5tGc3ZL?-~7g<-0v%Jn1I_K25}%r9F8}eAQlNF5GM5%+UWE{CSZR@
zIaMWc3Z^xJH+!q-wP#%-$k%*|WjvYw=w7luo+Tzz<mE*Rob$K)D=M|3#Cw~1dT1V2
z7L&eW8M+%w4(5jwS$I1^L3yx;=`P6Y0k@|FN9e09p`kzfZc;!vQZl<)?j%Drjp{d!
z4?HegKRUc&z$~>~#mULHF!E#CC!YWy%X?nmfMS`Q)fWznDI&@dayeV)pU4z4(C-Z;
z0$NM&->8@KyJOnLnr*orJ}&(q@^S?b^`D!~c2D5Y`?^FMTxJsE=f6iA9M#i<FsR8J
zl_ODxEmj1Yc+c5lb%iY9POGO@5UO5!GMduZ>~=3szYVAu6>xCj@3kw24r+=74=3on
z+54jUWW=LsbS*3pf7(Ls-~=17egY<3h%`K7p<ZN~yWe{kFq=JAuVXMCHK5yv0TW{=
zekjbD0)afLm_kB8MEkPKTr?MSDa!suqdstdZkBe5!~RI4(2i0>M1+5`;%0AQ3Ix$j
zPusn;LUs8gi>2{!+bK2O93v5M{V*_4tWi^vj1Nb1p>}sMR^{ykFZYZJ4#)jJHY{eV
zOd_F2dLp%+YtI`b0VJN-Dsvq6hshky;*x8P_SD&8pyTCx7ZHyCK>V+LfH)(pLs17V
z=e9mQBy+l2?uBRAAI$o%GJO3idQX6Gg<Qxm9KmS(^l&{6$A{Q0C{kxJ2TP#Y<&XGL
z`DCT#U*Ow%`p14|LA}TZ#}`7g!<R>nu~c^T!f4}ds+fsKP`9t&SM6@Xlji6wvKZ{?
zP*CLQot)H|&P7hi?@>&MS*}znS<>ZyvGd>K+8s`<(tYY}T($4HE1W6(NQ5D5@?rc#
zXE7OI9j=)5Lrk*^Bip|#W$3|N)$NhKeUJOgya%&x@<EP^<R}oXR-w_3YV<pwad5>e
z9;svk=;T^vw}<I{XTTm*t%Z)Vb@TH?7xK2GK2WxM^0zlFrMy?Td!oY?f&xW_O%Y2;
zU+4#fzvK6|yXPk3<@~|1BR$adP`jfEb?!?J=Vo5sFv6j@2^2Dx{4(pQFM!)I{DBd*
z)&6oeWy#TWt`uNPTJt?Hp$%p#r5My&_(?$x*j>q(b=6H<Mb&2{!bp81Zku<%EA)HW
zbEN(f|E0{Auc?&J`*cFR93ERBuT-WbwU~i}hnJOwf#zXxg}&4MH9q(}{sEuO8pSKI
z#`NZR1v`btAXX#b;$WsoGJ#Rd^P9vn_PvgcYC)$X5pk{~U?!n<#l`{$<gGTyP3t@J
z)k=DaS>J}JP2^2}v6#=QXd-D`hLP#?1qz;R3!mNsmV#Pwe$yQ$L1)t~k+-)1gYf`R
zJCo)y0;`Hx=B3-;_#F8F{^j+&q4D(c4ifR|L!5QTndvSohZz*3$A9Dh0oyQCaTsdC
z(QqWuaN!~+U!Hz)lA$J%!6}x?59tFEbbK6Swe^~2`+h2t56fzy+5R?6BtnPi;cUal
z{OL1s?7_@X91@ba$CT`aL@=B@Trb5{{?}9!r7jftm8NTyyc0disN9e|nUoWyS~uOe
zPQV%Q8b<3UlD2V<;^ZihN@D%SF`P_~px|YpUU&RhVU(}?<R1|s_pUv2D$mMF(h$1E
z=58Eyc_ve?Q0}jPk#gzt9X*O82IN<r<;u-@!$OO(qq&Wv<64U=vScf*=T+^V8>7K+
zARdk*t~gBDJxFFVbVZ?n3lj1DD+Ad^%+X=-d7lyT^>4@AuP~x1F$N%1ECbXp$b<1{
z^6^St*wGhhlPTD{M~OCAQRNjq$9iPxWDaR|p}-wTZ|l4GymAx@wV?JIXaub8?!+0h
zb@RxjAZaLcA$rL5A#2adgv9#vI$Kmox7&q2->)lba*xWxZlJTd1*|1btZZNQzV2?E
z15$uNtRR?kZSqf;>Gr+csxdf=%c*J3|Lo|z_co1=ef?UJVS~)~XTJChRVDK4d@8uc
zO)OgV_qbfLESDn4L~y2{QXK=#$(*uSp(iG*S-q`%RFf&H{rQ>_T_?1+NI1|_nr+W;
z!Mi%pz}<dxd_y1%pB)~3f4?dZ6#Qi2ya`*^iLlFFXMDFr<J!q6ff2xy^o~PE$MdfI
zdNr$~0ajw{fVpVV@kbakuFF0{4l<Fr^^LO=Mw`>dn>W@=8+1G9$S1r`7k3p`Z~IHN
zTHr-m>x~d>vDwhUf=dBmsDI)TccRg(d|yX=wcN;jC>~2iX6cP;cCvhbf3X{tB)2^r
zbNRO~Ec5MIZWuBo{#|>g#&Q>whdV!mrhpvgoC?~v=*TPg37G`0pYlE8m=sc}_3lfd
zfLsL+2O=;yxVR+k><x!fkDpr}LD+=%9=qLH`sPW4&F;h1{-xg~oI7r{THL56eUu<+
zbzprq?nybk7N(&#+-tL^44;5>2GrF$E8b_Lfk+sCrg+_(qg5X$0&W{7Dk}b;nRWcg
z4Q>lIf}Nvvu5*O^GM{Ooo@1$1u&PG>_Q^~`%GkA)#KzNzI9(*GjrgzL@3Hco@W}=R
z#s!<NRdkIKa5^5%e<0Td6`)*%9J}p~qMBlfDULTzssBD>?&)#`0uN%hWEu+r#XC8m
zi=xDMc5Km#*o)Y@BP^b^P|J8Z7_VsYgN8n<Q94xqMr?i7?gcQkE(X#N{<a3~N;d|p
z)@G~KW_w3E^4`4IS2D?V9t#Dw6zX_p-|fy#7McwYSxSPRL?OX{@OZHZ3}MRP!DxzB
zZnA6XvB|8=CFB4YeE1GWN`$E;vYWwLdMvk0<&J<<zR0~V$zOls|FI4%{@$vmv!3?`
z1_AH}Lc|7JMY)Z~lCRIty*A*n5?9?_k%>6)8{s$9YRps$W#LHd0L^&<hS_YgSvf>4
zfecL$3HZ7@BkV|}FqD{Xn=%*9^e3^>?U?L6?9j&Zn(Y)1Viqx(OlK?XhFYtMId=T1
zkZI$gO{@XVj-7+s)L1lXpVhQskv}k5owx}C7WL%9{Uch=&%b?|EiNS*AIgLgaWnE5
zWUqc6_!csxZ;?sF`jS$SIztq&a>xeacs=J%R@7Lml&V}tR$E+D<echyKqNRwx+cd?
zAd}c>xZG*?Rjsvah$KusqZ-v_lbIR%XqT@$P3QvTu>NhXx2r=#X0v}(K^fYIDJY?E
z@bu9W3wDvG(E4vgnuMjX7v$AS@*Qb<y4BY#06hE--D%S4B`=MOW+U7({|^=bWAyct
z?&|<QK2e+P9g;R;H3yobU_oHNw?Tp~;%+ChM?W2mhodr%*WaRk2%ed*qm=F&SjGP+
zY84Ns!L2AC(9yHv2@~?9EedXL<tS-=TohxVVM*EkVif%VZDimP=yNBR*U^M}Oz$T7
zEzG`S;k1}rSk!kuv1V4&MY{hGz>P%+Z2L}y_-m^Y_HYb_RZ=gXI^73KOHLCmTG<ye
z(~rB(EcdE%3{G6`5`)wrAhVJ`ds3fr1TrV5278@P^}G1BSZo}f7L(P4hOE~zwUZrN
zwf|TGm8PuBvn-IS0OG;ndm{GbK`OcFPxr?E<y3c3M#5t+8c6uxwsrrDits<?a-@B?
zI{U)SfO*tL^pD%HVO6QKzgyw}hz(}{TJ?8!|HHN+`2Ved`H$+XS61{J<mrh{tNsp1
z+d*tAKarrYFptaC=PzHR$A1IZ+<dv5o|yPs*Hvq48IhRN#n$f~SITYR74>*?jE$Cn
zOvD48Z}+V;)Q*l%Vzz=gd)5gC5|3B=RUmKGq;d{aD3%&+pCFdgip;p4Iy&im9;`>f
z*$@SHxyo;ssZz$ErNqa=A}5_uBDW!pXorV`+g~m)>$!*#4#U-KF%5ye#sz4A^7wDi
z#@;QTp>~1hsNi(vBNLP2<qGilZ1Q}0O%FNi@G()ydwh5>tv@}}?ZRU<pUhO1fY>`y
zuNIrw^0qm8OXKs{8T3|vFm3$%>sJ`HN-?BowM{e0frp26D%-xYQv7L(#Jk39_P|Zp
zbbNzhAhuSjh()DL1CuE~3ecVPqR~89O$%Ly_kJ$bSzz~{`hYg|MNvB&sxnTjP1Lov
z8*1cn!zZBAv&`nAV5u#Y6z#hLg-l3T7^mm?^2A>eIt`A~=+OetHZO1KqyLW2_AUj~
zREwdV6218rr}Lt@vaP`wiOUuB8cTbC7o@4PhNf|)QtJ1DWfp;BqQrGhpCS|&x3Jjr
z1z>@r@i~{i-^1;K<99*{Sh4y*6@0gk+5zzQwPp`mQmE+In>_nUz3q#A#yo^JJgLG&
z$d`HSfex_1RmSa)3Du59$*eqIlTP5AUF}cl^(@QhNr!xWmJWzbWk=iqzznm=vSQ+U
zqZ`l$qym{b7{>v4$MtMox2cvu9D{BFwAd5TLBDaA`6RIDdS=tpKmIJE2utfHLsxAz
zXWxkqJe|uU;(8O9z+s5%5|qTlGygO_pui@c10RzeB|SWeJ8iapva{Nt5C^2`1-vA0
z-#)S&FA~3vZ#~ECBj7Zm$?XBC0yxg!=%`T{D!`1%VP<fK%1KG1&9dt(qf4bkgO=28
zq^ZeapFEcz36x-b?BKFCoA28UV}ud1Qz=U<Om3HRzOgr*VRt%{9l|R4svZ&=TB_PY
zZZtO8S*+Ru%y?=md%6-bNjF0QSP;v-2_kCc28ejc*$Vaa^Z*iAV>eLw>({GkxS*9*
z%>ZRub^WQmh%5kteH<y5*aZ=-=IEFE6D_-qHHWe+=NgJBP51y%GM!JC6GN8KKq?sF
z8<EStCdvFx5%dR-(Go0X@A6G~ZPIO|@p-+b&aLStYNZ|}u<3rE2kqV+E!bi#RS8m7
zw;wM#1`fa?<8wJrVwhO6x?8%$(7xPX8ZUHay-t^w-N;WHNn#lyd;&;ZKRTv&(QnOe
z(TXkXQSE%CtXd63l$Q3^J?)d=>D%|bEt3BxGb(kh@i?Wdf}7&MwdF{owcn?4IHTSF
zo$WQzYID&1qexSNG0m8q_qCV`>kiUz2~Gy(raZ<7l$2tkQos#Cj!7(y7K3^JS9*LL
zoIsBP#evCH`{tY-C6g5DSz0m0NKu`cd{zCKL8T_gQ`9(w_=E&@PEHcpM#&F2IzTS-
zkzByhzqGJk<UBt9`?5X24o#P8ufuf(PS%>joGH-$eBkUI9W7Pdmq);&t*)-dxK(R$
z31M1@CW2Z8@Jg-a!eWO0BfG7!=lugFtGv0n`6bp!kz#?lrDf<!Fa|9#p-^(dr>8~c
z!^D~&t$H(q)3LE%f4tZk`n&|(0*%=0>}<a---{QRU-io1aN5nw+Obv{kDyKsgSudC
z)qTa)frwXkxj-RrER~z$CIfY2gFmg!aq#I8q@>4ylyqFKcXibM5YP^i2#4}*W%eN8
zvYL>RF0-ToQ2t*cyI(L?e0+R;Jw~j3{^?@FP*;~gtvTD2^W`q_uPGu{kK`j%YQ^I4
zPx}7*3h1zy$u_@U0>H#_VSYYc8fB_Zdo3ah4JkxC>e$8G+q<i)s~aR_w>VrM)PPbz
zxl~?tq+y8OVHmjos}Cn~lQ7W~1KB(f9vy@cmk^=$aL5TJCKcY0yfwA&yn};*$M|0D
zqzj_RU2hMbAosRCwt{IhHMZDHYKlg{;Ve%o0Z^KGNU1ke(Xg@g|HR{QtQ9X*E-o$(
zVtL#YFTA}WI+`fzoBydFO2~b4Hz7d(415(=8ttkoYI<OLdT<#{-*Xt641h8BbdBrW
zs=EuE;95D|L);@VGq(?UT!AR+91!HR0d!*D-Ex@^s83Q*9RUeW5_s#O{>nU<bL2bU
zJh{Xk21&_gb)_q5Jnp&Q)fVKXlE3cvA`)TXmB_IW+Mpy3PgQO8j^Mf6oWM|2<|k}5
zifHr!Cu|fx?dd$nwOjD&N#JPE-<9rHHg&{slq*(`%qN{t@Rdqp?kQojeUO~T0hKwE
z=`;!f`esVXR0F0hr`?%OtDE!r^>{{?o*CAy>2h|38LA5O>V3;n8=bD`P%5{2YV#}4
z3sFX^l}60OR?>tuo`L=V<r=36v_FYLD?yuPqZ;h=CVW%f6&E{0heT&`%PVWVe8aEz
z>Ct0qAAvE-(R?dZh>{u_>arDB*&5vT87A9YuHmOr#AB$4M?eFv)57-iz-cg=5=Ja8
zq$$&?jpwVselDBs>>nGgZIm=l8Ovb;OzPe3;JEr3TZwr`9Xc0_qtCG@yCwz(q~vCk
z)$~+?@8^n@iu41d0p(v=Sy=|?1fC&6BWlbBmy&U#1O5H7!>@H4NJ0r23oR|Iu2SP4
zz-=?t+4&}djaWRi4M2qG!2bhF8Xg-%S84Z)WlWC6V=c28IR>b>-D0Sf!CuR=)6wzk
z7nhW59c%?>%b<2B0SD)pC83I^&)yyB`gut2FdQh~FZJG7aKa)Ies&DSF#)s>d{$lj
z(BN2q{|cuKz0W1UkpOtqJ#YF28xF?uFSToUwx_?YOwgBawLE@EsLBmC4sr-=sHu-N
zye(b9QS%QIjd#SN(&!%>vpQb9o`nCv<s=Kh4Cu&r<#cGz_pPGmrlw8_Iu}5evzrqf
zR|TN;{YlJzew<RB!Ol+~QxjP%h((pXXRk{UGW^SfixAwh4(Ce2%KJydBxg8@lc=_$
z=5P*3@`qv=K}PpKC_a*mvD2Ce^!wX@bD=j7<Ncx2=Mgy+pOePO(8x3hH(Zk|K)_6^
zZfj1A*voH0DJoZL{Aip+NAESY9cVuuua0R&PsaQ%v9Au-kQpFH2~|TXG*Krpw2!w~
z;Q)b=<WMq9<rcXi8n_6ARe$G+BZ@@G^)AV)9*!G>=D1!xdgs?wz1a9tkoE+8&Po6c
zXrw@wcd$|v#+E`QR|(z73k~EYfjDfnJqFs}zJ0CiM1Yl`2~{6%iN^`M&$;?zU^1WI
z5vWTtn!<jl+KBOBclARYA%Wf2$ONb5732*dW#p@jJ+6BR#2a$3v%}%~P`V=HM7Z1l
zmkPAeZ{v~gKQM?szEj!_E#<c?Bj$YozS8pB14+9ZU43eBH0)p7+au|of^MdAEzBC2
z603<+2CVORZ%*E%|85O~x|^V+B+LJ`^2R&=SD@F*%1X$J9<_sGT^Jk|RqdNv@Uy_r
zD_;|D-|ki!pU&^Jqw}|=8JC?N-?S~Quvo4=J-@7c2dguPBR0x|xsBl2S!Al-X=@rk
z^mT!yT%DMRU7ab_X#Mtj=&^z|=EG+jxYA^v{YixO#hpilU#q2eGQ<RL-J9L_NXT8U
zf0vyCtJFJ$#KZ)KGqd&Y-H_|POz*MWE14((g|{5y-~z=xZ{>|yXP^jUvtU<-KtY~d
zul9Pa*0RO)pKsNm>tbs_H3{#>>3IAZhg&r<5!ZMWa{1-+-c%lncsLmD{c*Bdg-%RL
zI`>KR{S4ca^}TOn@-0oDQ7Co3U8@mhOR<9d#USu;q6M-xZ7xq~&rA^I>0Ji*{8{v;
z=k8`=&Q6)CfI!tSP-77am2v$vThGazto*jU;H{{r<c~;nGrt?5-EPJaIvzlHQ|4Dv
zeR(=G-|c%6>cGO8L^}p=*&Ilaz~nsX<@2bdsK`>hG+rvjS({4p!NMXSlwhwUC3k;K
zI)#(Lulw(|J%=bSiu$r+VE3_WN36F9RwCBI;io6on9nCptIeZr<9GrcER)S1*$ah=
zgfgnCex5NYM(Pen(;Y)Y!K*D`Nb*fLI90F%W@_p}SaF>5!PD{FDuI?PMx?3TbNRCw
z5<XM7*QU4r#F`t;LqcAGiGnMYvfS-YQBhHM1cU>@n`?Jq7(F#U8ymD&ZDD7C(yTyc
zXm}$CN9+#&ESNJ6;HnD|+;<n3msWq5{lzm32Y=X|OfHD8Po?+2CFSOp;!h9PF1LHz
zQ_M#7{Yo{hv3Fl4PFo`Hql^gjfryHNLXM5)<&HF~<uW`XVh(saBPfDMgEHmOlDk{c
zG-=;e$a9-Jv#CrP7Y$7tk-U3z%YIm%P8mA5*ys<}$EQzs^iP^{yst4CdqeTMu-NzX
z(OWk6d!*7x_q5e8)noJYZ~Ksmj*gFgm4(8P?a?Ouo_qa~KHQ8YFjg6j>3R6_Se!1j
z#1($L%KM_ocAxQ&<ihXKH)`=kArJ6u0$+Zrq8vx8$Mtr#`UYvl)VtHoGn|d!-DJ_$
zIOE;bx_dZgMBft2XYhOuz9e5qw7;pCx_X0h&-`Vv54<)m${t!gq{fO{TX~{x6K4F8
z1_1_DZ-2;w`QnFFEMEgpFt`Q{U0y~#sGH`^%Mgmhq*<hl2m|B%a5P$r!ST6^&RZWf
zRESvYg=wZlMMg_2)aCH=i7Zm?o0-{?rTqonCOgUsxm#+OEOLjn!^3F{5j^q}kKK_p
ziNk#mic=U<wD20rn`@c-V7g?eESr$aI#9|NH!%^&<gf56T(NN<o;U^U?lPYZpJN57
z3I4BNKpWzFgY`P9P<X7Cz5P>%--nTPR%=EE2C^S)_ak!vUcaHjun&cD-7)n#Q$LT$
z^MRhZ<nG1-#hpA{_Begc9W+GPbZU~<x~9SeucdGoCa4)ae@@Y5r0w(Zd3r!@u6Fs4
z3)=i2?D9|d$2$bTa0MNIQvrp*Ctv@^(?he3-HMC7iFR!Lmyj@-bnKR;#2Qey81pK~
zlR2Lgs~qIrHlK)HyE$0@`nVXGdlL#c<Qb1S(wSwt+V*yKCaq%5=!I_MM0x!(EJuH3
ziyUYViZVOl)YD_pRwkC&FZX<MQ(CwQ{$LGj_Y?7n*Vys$^4<`d%@vH?WC)6gfR~7p
zw6q--cHJqAI+zxu9Gr=XiJ1XuHp~1XOZ2nWcV0Kip!H=?=ZEbX?w_1&>^o;k;q7``
z?2X@F^bF~XgiS<He_S6?tE<s$bTG0Se7RfoIE=L@ETn>QMgPpm&g`gG;bth>zw7Jk
zyDbrCY-o5nCwA&^)vR!kIoF;akp%|f!|inb|GD;ZNL5u;oGx46qaa9964XUuL_G4l
znp3$*M}_&f&TCphNvl_Hnl_yO9`PEJDPGSXHT7DI>;p&XU6t1`A8>I6g#{~{Y;TU(
zgI12HOO#90>^`nkxEm`fUd2$WK&`nU%U{zTn3<TAey>e_!*tvas5ydI8ZboacR4`?
z!PbYhw4kbNalNT1wwfuES-lmkwRkx-tGg=j(?ZNOGCG=bCe0d6&(Hsy1dF(jLYc9!
zNftaJDYcLM=VZeEJn|l4w~D&XvAj&RNVzIk`rBH9_Euy6@^Z6E*s3xXA`%ft<<BX9
zZviAf*?X^`4|dg=`hzzqOZ&g(i%qIvV`q_xxHKBg;ne*c5_TA@$6q-*-U<XD-5#t2
z^H9K*_!0))BVgB;IAp<a+V2^dm`s#;@;W@1ZwQEl;r?Z?Ppn7Wn=a4?Vo9b`XzzRh
zQVuH9!XZWS7X%)T#zx5L#2<X-P0-VZB8}{g)!Xh$1M{d<(5A*oYcex4Qz@0w*jS+5
zX!ZjFhs*7eR6q$Jep=1fORKP+&eLwUlxI6j!kb;iPXOM09<6qj>Btd#RX(h2xztRd
zQa*=0U>W$&)^_>7xBanbx0(GLqQ3u^vjt;6M0Kme91Jk7-c2z|SZOM@<i&9;6`Rf!
zn$0y3aJzNS=0^BvDm-+vTXIPc%HmtobXJIx?x&GI<|0Mc&EsN{kq&zH_HNHdvg}Xh
zTn0vv<jN$8ErqMZseKLG%-U+Q)LGHl%!UibqS0$h>laa#lF?r481)L}ik{gcT*!J$
zwy0VKU>k>K`=VLLX3I+=2l$bsTJwubgmeM%JfxI;)m&r`m@o<NFj}a#$oKC4pQqo*
zKy}d+zTAzIpb6~&p9TQ|fetxJ$!Au!MYcKuW+S^fPXs7lK_a{9nHkUdKR2N~SK|`e
zdqToQ9Qz~)p7WLKSn{q=P(GO{WRc1e?%W(49NyH~O-8qI4pGm9{z!Og*3(ogf?@9s
zkupMGsU<t`YwS({Ak@)v&Ext(Y2fcSc!{%$9K>`Hu|$!q^;T>_qSyObN*#^}`=@^Q
z6Z-O>9YT&Z<7je;6$}irQ&U%wiFyI2jFz^<n=XkcGay=7tK5iBPhUSKI=a9!=)Q>?
z`F$1DmKRJPF`P9`q#F%dUb##Zw4&DJ6!j2<3EuW9yF5)4Mvg19PtahEo}eKAJ9UGr
z;^5q|w&+%c=+{3Nd4A+Jm**6s70>gG+-v0I<lh(z#<u<QjD>|8`&U2w%yu&zUxOmZ
zfFH$H>C2^sBt&o*-b3$7+9srW?ri>?w(#75^qidq3Wo@}Dfoxt5}&Gk((bs&P<R7@
zayXtBBYLdo&ZK{NnHT4kto(PtZyh7jdJvd#6qfZb81K?}$f%wEL`C|>nN6(1u2XD$
zzltLY?xsANB7IG<A2d+*F(_FkthPSFc@n=Myflcv0+uFXXDp>GySQ5SFDx7suSD4g
z#=NEyRZfHP@T;q<K_#lwg{CIG9{6FICfnVUo027hB=#T(JgewHw%a}Lh0<FgAALF0
z_3zLhr7Ijz-@FP`9M<%G^@=!V_RF_duU`FXd;JCrY+v=El>ghX`Tv3en|69=nt%Td
z{iO36Y^>kEMgW^%`tQE~`zgLa`x~%X$N7K$YWrzKQqtr8WnKLIUHrW7e7&HS8i#^+
z!Ds6IA7%#!TbjdEvHBk0kfM@$w#LaQP9u|sqLCQhlMMCuGgMyOV=pv+_=pAm3Zx|y
z-FD5-klQ`Z{!+-l`2Al+?TNxlH$(mVN?fPiyX{UAz2+0{iMgqXnb~5w84VG20U@CT
z$_}UI>iGKZ`Fh{5w9e+VJLW1Yo%FIU3^c<6CUQof0VDBGi+ASatVsi-!)qQw!qN$H
z?P)=5;4sfv2ZxPf31ryqZ(qd8t-d)Q3Cg_9X>gy$*uuFJBD`-64UyWLpOsS;i=ZU?
z{E{%9lguNfP%(0tT9#TGTVhYJKgZWos7OwdL`jQTM3f#MKeCn25cJvbH|fx;R}e!U
ze`C&(Kj`8r-h1SxDEM+zL+{DfQr?a!Dn+Z;{g4luj6pg0V!kvft*W}enuRU@<y!;Q
zHnO-%F|SQty*Ic>o^iL@RZDcDfntyj^*78vSb4p08QUofHBC&S3pBGB6dq;@RE0F9
zVj2;0OosItY@fS7e&ZBs>g9X=@9?lQQad`#&~vP0LKr2SyTzrX02h2X`u$pGR)KN3
z!w6A!QPG^G*6o#Ec2s1fnza#7!+@}Mtw)%5(!hCQ+4GEznp$GZ1r0qal`EzezelA`
zIi?@j!Sv${j7%ob97ySVY<)kwMo+W++SXfCe+!pDd1Uw9bh=^85%Sl^*2b1d<lb=m
zdAcasA;clv>m}gdF+~{mDd<JP%L%3TRtIjeAeLAh&J<|3mHI_xO#$W+IywUCdiQzr
z3A^5%Xl^**Iw&?75iH`|OxD<{B!V|Pz2T(6&tR@|cQkzbVT|DAWsL)TyXv~w@tx6>
zfGlCDmJ{d4i*3BWy)s}36XDytRC`)wGA}=tZhEa2Vl=8YECX75ZQOY#?JAcl&vx~W
z{a>tB>g<l5H;|bA8Uk*IT&bnhg@w$l-VOnZVJg+Y=7I#^DDx;|+vAD-m6aFR1DD+J
za&#E4j9AHVwLM5*skUuiXIvfq@g7-Rj^{Yqu<2kYAuO?OrB8_X7RG6d>|QU4o<SMm
zpdwO+%!V3&M){RK`>AA~PJd0J%D=SEn9iv}eM_p^XOA4ioB!n1S)HiZSj^WGaeOrc
z7i1-7GO;eF7xr73?ZFtJSZ1+U=5icu9#LnZZ~I+kTLhYJ_|biU8OMD|>8as$Kd4sn
zfi*HR8ZNutzhrHxT-@x{ltaViaLe@eUJl&wX|%UUtFy?X12N8)3-CMRUKX&hF5iyl
ztma$i?MD)4f{&8sTjAVTEqc8J&-$Mp>-ziqmp$*|pRYaKG?kTa_Rbk0CTdhnTQQ}j
zdu7idgv|AhWnXM;{GLsHf+{0RLzP8;)SJMNL?ALGm=A1Zy*%}l3@zNSSjh2@{3`Vj
zf8IeS82>xkJS7!JHSo07HB*xLcQfu$zS7C`g36AWmh<nTN*cR8EWP}hNnP2WW-2MJ
zAQ#%M{$+<%a_XqtLZky5c@a6Ed-jI=rh@+U;7>37FbJ=nu|5eARDap_21St%Eb_(q
zP3}Ht-RW>5z1e6nI~K4RHwD=v-EdKfOqF;X26shq&Y01E`$C((I2dB%GuvDx&R8B@
zrF;1-FrPW|dT?2{e=LlWN@Qc_;AmVQB-6*6g05L>F+-Nh&dYN=UF_;xG6oPhAz_>e
zBl({+!OOSExSO{R%uUm1b2-Lisrtr~xg2%oEf$9k5qJVINwi6I9PBKPc0YvC(P~M_
zS+rEt6_!gxLQ`!_jU2BpOjtA{2)Q{ln`|2O17<0tQ!z~?9UE<CdNGG~!*F=YT|x?h
z{XD0G9riU;tLN>{!l7nV5^@DkBFtnC`;)#j9@p6vhGat@Bcjz^rK2B>DrvgHz09<@
zOty|~(zZX&V@nz*psz{4s5K8ZR~o85Q9->8MO}cQ6cka9x{+QkNkHR#>)6^PtGbfi
z*1(ul8d%UMCo{FvGNNYgWGkNkbN2%21AD?;tB0rG^4(5SY|3gwv-_%x_b6)vL*YS#
z7Gs))evx)nszu)Z>s!r|<$x{PL*`4ne%eI#*(F+f#+;p=R&0S&1?Hmj7`cuC?ShWo
z=y#?X`{uVsbA7x)4?N|=bkF($>QmHdhxEJmNWz&kln;C_RR0#SI;V%yz%IdT?XQrf
zI=~E`1XHx$>%-Jo#NtwCtsJd9xW5ztH_)!PYXy_w=xV^nqb;Gaa$PaH_&b{Pi}e=d
z#q9&*08ieR#_NM~6&x%q7T4KjR1$yf)`N_aoEoQyqVYjLmUNvQUt9`uvWf0`xW7n*
zY&cjq_NS@tm{iK;CO;V6dzk<h@nuS5w!S12_BR|{Lc-cD6B#=@H*HAD{=Tz5VBdlJ
z4x@n{<1L+Lv(r)c#9xXqXIEFx2aL`@RP>~D5*{7Qt7q<OE&uL53Q`J$+sRghhw$j=
z<>mx#&rpzL+1R)^g<VD-O2qCq|0>b;Ce0@pdt_6FlY?boWZ-vDP)42)VblpXY+g=I
z8c$7`@vXG`V;BSj0(OC$oFx_)*ii>_K-XFP1nxW4r&ZWM?RmG6dvGAzE{@`8R@+^r
zrHOpGgB+sgE(wnyhQz8k8zLHvX{w>DT2$cGvoPj3UxfYblx4C=KR?s;=JI&PL&RwA
zLw(-)(V=$B94vmGI;9Z7lT%4(?7eVOGf#K@6{)zsexdybjRFEqZrxK;D_OdLf#1@>
zW1}Mj{R0P{RuPHK7bbm%NU+x?9OT?yaVb3O&w7Qi1V0$)7%7H0Irut54Pr*4T%S1h
zh@pSA^~6wokc=4jhDr?PehXHxof&EsYNb+)XIjYogg%Dg{Jm14^6@Hn8Sw?+hThfJ
z|BfP;rBeb1OjfJ)_j?mrp#+>?{|p0soP>nf!UC_=_4W$`!vPQzA{OI)rhakMR`diC
zPrnuct;l#DTNnK$ayv(FYHXXQ#p^}pwzLG3*`tJ~w^zGs2Il5mHq(JHm)NkL5U0&)
zxWugd{QTU)Lg07m6b6Gx$dxZ1)2zD>#zLR#=@}TDiKd;o2(K9d;aRlPMei?~eYNK}
z<~6V&E0k6$G}vi02=VsrJW|aR!G`f1#H-cL$b|Dmx`s-O$9e1det)GZILA;^0NI^-
z=z&SwnuGq+ZwtspOq(ZPdcY%``%|TZlsO*jn^gm+|L_7T>AynC5GpN}u!z)nb10~Z
zi3f+Pz0+Rsc0}xI$Y5yTo_rjMQ+Ky^itAEESG*e}OA}lgVmt!24YzV<4%FpV!Y`(N
z%dqAj%34R1ViM#%SY}J+k{0nj`A8h@hRkrHy6KB<-;@k4j9={)YC5zv_21yB#g))!
zIe2#TP#1ofoh#5gQwn%Cyb!?QT%&sy(9sJNxvUYlfv;g23H7{cCU_ne9Qh@#!K!9C
zt2FteSmjoHUjMwwTY>o<C@g=q3Bi{ITD^|M&JO>%znKF{+{44ev3T|t!=l(DH^dNz
zqi)~}C^<4bPtTVvPj-2GdeMuqw6rA0tEs4{2!&^cC^Z6<^LGz-0B}YqO^yZTU(;Y9
zzEGs-4vbx}H5$Uf2#8Mm+#Llh2;So*Ky#@DM&4Dn)b8%w!luAFE~1=%mSr}D!|`OQ
zsLac&BmI*PP`Z<nC`3<5o0^)+S2M7(YSy}~q%<KXaWEN8VTQ#S=@CPkm}ZJpay-{s
zUcTo!NImz;HWUdzLx@~1$@9%sHN{nqW^$$Q5LO?K)qRJq?g70lDk@4rUOqdp7s4=*
zP~bASDCtqRZu*jiOsvI1pD(f>)S|RSvM^d-F%&hz+WHVJC!13!|9BzwW2fXS&u$@p
zEhnBD#eR^=gnklE^4&m2-;2594OIy#DVcX%3jajV7bX#9;a<s=z}E$!kZ)hhRORk*
z)OMEKnD9okR8mp`LP0Z7Idn6BHa5V({4mgli}^t*&r&O5V01N9Tzi_f#%>|9vau1+
z4O||!_SZl8z{D{#FyMZ*ZXZ@<gf@n4g~M>vzOb<|H7(q<TxmP~WkIq8GPHz6M5;6s
zUh0aQ-NeNiI8%~|H=Ck}S^fVIuo`vuZ$u;Qj-*)qNMEZL(~r1KWtFA;G9fs8x)IGv
z=?K~4MejvU<20tyyaV~v7iK40AE)c}gwQoLQ-C-B85Gv_p`3A%pP!;`zMkI&khGeZ
zn3(T>;o_Pcmre6L1o2{Bt!|gjN2(d#1MwA8nHK?xVp!;Ld@a74mNA9~-6^k&QpBQ?
z?icz8#!ZDwJl<<QZ{Lro@GJA@y9s?(VUMfIP-n)N&Tk4QNV6<bX==!riB4=u$fPPW
zO{dAjnLJKT9`@7^$PdJfix4F6qp}gVyT+sI{RY9c=5hRl;{&Q#grPwpNRUDVwgF&!
z(*h6E*%5U~E$n#_y0Rt3>x_Nj5WM^QdkPA&r1<!Grs|Aekx@~a6?!lohIq`C*UcyQ
z$4jh<9@iH$c5(ZXaxI=O8)q2;L$P$nlQlz=WJB`_YKv+>jBr%l(9rNm2GXwotgp*F
zdk{;fQrhT)`9h;jkNCl;*^j02Vl7n%oG8&o4%~{LdXE!}HD>##*rK;z*ci7I_L^=x
zKo~BjInc*J{ts(!9ToNdxBa3BDj^~a9g5Nd0s{yLC`u09-Q697fFhu@bT>nHcS?76
zNOyM(&&S_=?)y3CkF(Y}Yd!mqz4zK%g&Dr{{eIrp`?_8iU|N9s*6SITrNiOT*TRw%
z>~K+`?^2(izJ0q5z?Lj(^*kJrB9Xb`ihu|AwZAFSD_ZQzE}{?wp+sGI3hVzGE~7>z
z{HdBL6^|P>r9$r#L9`D`QW0(`rB3ht+Q9FvRdg`ekg4T4K2j64b8)g7nA_kbY@7q5
z*cnl7H={iE+t;)^mdhLKleCR6tb#0gAw?<I={!`i*qq1wE;0g{-W*-8WN!r&icyxV
zWotBWLtKQkej_q6%3XJ&rrC{|v@5;fE$aixFj?RAyu7@fsPO{XbROP<jC=##VHp#E
zuQU%K7qHT~|J2hXPESv7ztL~#|Av+pBxca`JA)9x^`Ys)fFHQGJ#Jp04x%q3hPAy=
zN=m>3aS9<}hqqQAN$!!;-^*SYwnYA#i$TXGA>(n$b}b{=+A^Ks<m`{<^_xZ4BrgDy
z=AU`-Gj^N{y#6@n>y6U~pWEsWM%{0&3zPvr!b%f=y3uoyB8NVw&Y4oH*apof^*bt@
zNt-hy6aZn9xEnlIH*?f0_fw5K9glXe&$jE~XYP+Ky!~Fgos#LP6#51ia-QLczi)w1
zqILGHueHxJ40aj$Q=;t4l}U&2o|M{^VMjQ|k#eMPS2glsO9yb{?z(o^`g94YMU_dp
z_NA*#bX4Q=8p{P~Y0IU@X_3Z<hKn@>@md<Q`F!yy(LXQ5`#Mp3MTy93%XP?33#}5V
zBkhknHW&>~IVrd7$D(#OSEP8bbKm`oHz)4>e<UVSb`+F3R|+B{#V%CXaIjFg(;GK_
z#yJ`1tZRSuj$C$)Um?;%BMg5gHy;6#^5*6yzNO13&XLOp2n6E9!_FSwBP;QW%hyR#
zOf0nNg>7(h%|xoCJj9UN7JC8B9XyXiOG<F5TYvq^mLyfiC;LYIhMvAgB9@B(6JSA>
z=clFF5We$a*ye)18(IlT2!F}Ju~)irr=_XxZ~pNClb=}l^U;wqcFuZkA?iE}8WEak
z3T0w<L(A<0`3NSB(yWN6nAqcR+KM#(PmZn-pZlhr%RmDrAu$}b2K=6PJ)R#aQ@iv-
zb-LE2F(p^mSEQc<apdyOpGgN{%qE%Hktyz8DXU1m{ufRzG<MAmC`LOceNC1y-tK--
z_9bpTPR>(qB#s)gb74`ivl%@eHAIuxEgrtyX%PI_ZKTP)PmK)`gpqz|oM0Hy_RXga
z9pzRi0zc;SC`T<z<oTpUHtPuFC)TOssY8X<<NBi4M;lLgqryytw64*HrNpF^zxag?
z8rXSU+Iu5d)mX36i)@}<cn#@e0Er+DvdY3dGB$qs$y%6Ob2<-Jk<E&lkftXsXV(J`
zJrY|NJuGyQ(Gx?tmC&GZqIQ8}H>Yy>a&s*FZ~w;e#GbX)dL>iXduO_N2g_I`G<ULB
zo=<Ot&)C`6nB5jO5RmJvSFm4WW6*8lzOJ6~vI5#QDz+<P*#2OTirv)~MwapOr<4QW
z6Z?jxvu_{4QxI=v;&2|Gl7A91Vs97A927yK5LuK$oAvGU3d=<Cr@dd<Dm`?yGjTjK
zakV^g(A2cFz6hNUT51v+f)W;j78-&M7WLsj&T!n&eO3wGB1U5R0tJ?p4YSo{Vr4(p
zzIZHxi*o5E`<sm`A{{3Em>S(b`g@Yp-~f}LU>kjYz59iq7wjpE3DBQppN|a>=UZqs
z`lMsazhS#tX^AAddQ0<@ncFpbZshniJ9rtgQK6B8O-p@gVgF>X=7U$SU+b&2{9^9Y
z_Dy>l>G|&6?co1ex$J+Gw)cmx*pVLB(bm)Si=|=V_Uy5G8O-TAZ;G^}q#FFfY^l+h
zG9P{Xr^0<p4(nb`kal$rB24JLrHI&AFzgs!vr;oLhm<j!DXtL_uU85F=NG2kBt%xT
zZyCBcVaPv}X{~F;Jns#p$kod7sz*P$>0<k*><O)fBMZDU7#oN3-^?)l_wS^FClfnI
z681%WC|6Wa)AykKk2pw|_H#?ybF!MT+a%8_%ZIHArvto8ACquev=`j5f`VWYFqpCU
zD?>wSa?7CHNQRhr5_TC4eq(A@>hY?@8C$=9N@E}DK{PkFM1k4*%uF0ZkGKT=9~dko
z2zGgTW&TCM;`I&>7Jk6tu0dwTb;GPLkSxD7ks}zXh1xqf9eatlqDLHrOnQTYPUE5Z
zEG)DaT^kV8cCYC8_6P+(ZsNX!AK+^oDyJv403|4(c05+V$FPA!Rh64kz=sv338(hS
z194Wk_U-AFx`f5o|6E{HMb*9o*{j%2!(-#!buo%>J8uoc!otSJ#taNSZy#_lGBPqT
zNrJ=3)zkfbisR#B@T`E1zUSrTrKJ`5^yz!(OdU>YMQ%L1XB5U-(8C{ItVDT_#E~yz
zLx1O|WXg4niE5B)DSTjIQ)=)^)gx9+jSmAPe43MT^O&Bls8bBwhXfx@Ar!bPjt72?
zNx_AcMnSpjJToK=3_TJh0CA(Y{6c@_MYibD-JhaZcT`k&@=PcuHg+PHGyhr`pPMtx
zWc^^HN(V_rZHQn=)$RzQoXm5Uwq>H<e5+l#e3qxoR%%znJ#9W&#H8K$LH^BPGGBCP
zXef<NO@Zx+%|%zgVH`I{e3MR6zQe)Ck|RIxV-c_*z{86V56{cW>Wx6Jogq2BHb_~m
znRfGNtz+?z+vd}v43&RzC$@AqY(A(=X2(-Mlo1&;BpH%redn~{njB(Gm&Qs>`tQv~
zh%^=@H@b|L6r`tX{@|&|C5j$psdNz9Y?SEPnk-QC*>7++f1GTL3~|?HM?_6B72&oC
z1LOhwg@`s6&J|g$!E~5@X9#H8w3!|;%*n}FR_p2R=CIth+3w2;&kE)$u3V@yraTD%
zMA?qXi|!iCjd>PrjHg%i)<xwPF;P)kHgn^d{dEfCl07C$1}w6&th`PXQ{}G4E$!ee
zJ~v@ySY531*B=ma*nAvLFJnPX3r2rNG+mK{2jTG`!Ob-)f>ARdSK$vv-B$1I@bhAi
ztlix{EG;>>c)d3!M~V^Fw{N^SNjbT6RaV1afH-_Lzu8a&o&|=62)7Wechu@GE-s7w
zcXszdvV{Sf2a9#mcwlnnhTr~5)C{LAOtqZl<S?H|c?y88?(TQM2`p-|J2dt^F<ZIF
zO0bosC{v@>#k4PGSWPW%>@_!lF2e}tW0OJtqYg0W&INt)YV0$aZ4>2-RrT~n01$~7
zh5k`;-RJw6x1>z3X>X2_XT7-G8?P_z)T8mn;d}|DuXtDP7tXY--@7&*b&Z~(H%>c#
zr{@DNEIuJWFuxpsoA>uzAc+jSSs%)3`b=b$aO?~R13R@?Vw~dGxI#|dZ~7K2Y;4z@
zoUwk9QDS1^$s$)Z6}6#qKR>@htH1C@aJB^ka$u0;8!i|Oc5;F9-sAR5GJivi;PKhf
ze3f(45?Sr_p9{b0^W@L`@v)wi;)Z5M!ih;WH5y4M|3C%!8Lh32ibdmeZ&qP~f_jP9
z=g0@&qp;(Kf0)XpK0A9g(v*|)!K~imipQ*Pz*)026E3M9=ejy&s`jV8bS<@wcG^+y
zD5ucp^Oe72jt-5B_MmpXoy9~+nrcH1^NF3E-PGBW!dRO6`u)i&y9^EiPhS?SsAsPF
z!h?&7MLH?Qijqa2f>@IHiTxG_<so+;Hut+CpMFa2t*Q*d!FtN$;?p!1&qtV3_l}mm
zH^b*Fex7joR)7uh#S}wDRaNx^g>+Ac!==7Qa9v&Jc-~}&MS`SaW?$=gY$-dYY$LOR
z{^bvM%n-0m$kseD9)&b~Z|}UX&J=9-qm@P!z+^*o4IDJS7+}eJaaTDtI`#(8e64Q)
zBG&lWSPT_+@x2akpp1<vP;;gKE_eA$WoQVoFF#-YZ!IAF7!o5mGCV#FTE?~&&8GnK
zBtI<=DsP}K{tEQgDm3a9fq8Zam!9<~%Y*jKt@>&tBiGjQ-bq9^P5{0w;2T|E>@^y6
z$5rf9&Ty3!D3)Efxw#(r94uUC=jF9`bd=--TS|;Vf5Ktb@Fcernyzuj{%QHg%$grK
zofk@_Tarx&%1trP_of|g)_nk~N7iKJ09Lfn_84pP>JT{&l9<->mC>3ZOL3+L02{;W
zx=c4{e*eK`sqLfb^R2z)7X*p}!(o|0>M9!<#=aWx=7m$_lw<9T%Sr?dX;yjTYNlRF
zzxMW?2ac<v;l@cGNkQV!_FPY21T-_^vj0H<zdkm}dzZ^%TmcK$-OUna(80Si8j^c`
zx<Q+2=->c7dl*Q;kqHdxr_-VIxf_E?u*+h)F3TWw%q#*R%&OIIKAxo!y^iv+#PVc-
z|41G9B;sZsTE*$Oo04lKNN71P{!DTfj0mEwxjatWP0ow5aoK9~MxZndihD`3ImeBY
zY9tbpXgXR+>+YeGG1|9qeSViUM<7)_-cu8)?9rSSv-WoW;us_Cbz46v7mal6X<O9!
zv-7NhgzY)RXy6umj9{)p&IlkS3?S_%I^#!DxXw^0-j^@VX`D{p85kO3V_|J>c4{Gt
z5kTF{xmroxdGV;>rWhdIY7_YHJnz_;<vWw=Y^E*ulqTEDHgik;OViS*<`b*W0?FAU
z^Z<A(1O#B<Ycu`vTn8f$`Zu=h<3>weN70qe7!^4&v0OAtmM`pdhGs7!l6|rFq+vls
z+=u4?ZCNF$rDb)P!oSu_3Xt4CzK^_o-y~g}FEl=ONW`Ewe0sAoISq2y{2;(Mo^7J0
zq*bWF&gkT!WTrOKS;SM(KOT6tnOp1E=oI8HL4U-H8g+^ad;L1S(sJJE@USI3OFD_i
zHIAI~)w7E73QL#O&A%WjF={NbPRMxNJaS7Zu6MgwA75dzw;ZYdx#_Fhb?d#nNz5eQ
z!Jmu>UYxJYE^``nhWBO44{kdSqi;^H;<Z#QpRN?5Kigcp-~K*XaH5!}usxwK1FxNG
z-Pnn~$dsU9df&M-@WT}|8k2*R&&)<91xN8E(N;ECR&Ja4c>A(bLr7)#J(0JUp;hVW
zD>$?ADj731O9^234j^RGs`IdH31|7msIRUvhVvD#OY~pHz<~uSTcB0}W=PMg7vlGO
zGi7<eG64M-Oq;E=VyRZ}@rNulV(VosqBk-fM-yC;k&%F`w=c7mxdz$>ShSV8F`Tyk
z4h_{k?!CIYM_$DKUM9SY4-4z5d{t&7m8(_221$z$YA+pwCWReeSX<CBG7Nj6O-eYv
zb*i}9Vfn*NzvSHA-SdnmLV5S=d&8AjIBJn|qU5M-qqSVqnma?6)Zp*XNJL;eXO!Zl
zhyRb=z`nTzGS&9`0hgC~GG<Bp%TH7U1d2}w5_u~tD}e)GvQRVYb71tO<<lS_q+2bf
z^37`kPVUBFD*ix>_7?5qsJQq@?V2uxnc*ml_G_ucCcBgKbaiKnCKvMG5eaq!AXgsE
z8RclshH|B+x8g|ck(k8e+t<f9QKW1<w%Kx83CP`_=b0h>+wLy+cUAl5lV!Y~NH)oG
z)7hOVKhI0dqz~>3hBLQIA+N?_wjbYKWesSUOy`o$ro_r;{rD-RP&D3^_K7{0@7F9k
zxuxWcROX{}s)<Ub+0Dz7wrBioU#CPjq6)V55*oxs*rVy089^0-ir7pI=u`gT>*0ai
z9gm2>M-qXy$->E8&45sn3LN-NRAM1WS6gk9%vEJ66&(EZN=b2^{1T+KxsZNSNY0z%
zB$U_$@G%F&WxOZmZ?#Jrr4I`6IznQ&1Xx1Bkx^F2pNfz=snpQXdanBOC@`%NsP)Xu
zq}f62b74WGyl?sVJ{MW2#@YAoFgt!8rG0Sy;bWq&1#H_X&@b5a`fZW*^>RBS=R_3R
zq((ZtqN~efyD9T?LtUpMx_G^{b5a=|XRk;Zp&=jB`l9Z^OhunPTUlC?$35ALt&_V0
zQL((hI6tj?Pa9!5t&fAE5`Jzce)QD-D<4#DzauJk#&jP?)k@gw9zTu}ukp3kZi-v=
zB&plAbv+zvIW4M=I^7WQ^XIRX?X$D7d2&xcf!vF4Y@~S2p-s6sS#$?{Ag#$|)(6O1
z#~o;~)yvX`uJ4H54JOkBeorO_o^zOr3mV>QRn?k|j0ij7>p`tYSfoSqGTH}IrWa<4
zeLNNB11PI#`Q9Xo)QQj8*r@y$?807zPv+0hrT!@M6XWiYz%RRW|2izoYD(;CSTI#x
z4PEg3OdQ8m2BI!E!z;$%##k)aevf=NIy$1Sr*G;-a`X66BYdsN79_{>xPr*|&VrIR
z0}*-YSLgGz;A;2=a`qeJR(V(U**I2f{*m|^Cbi}pg{bJ*yCVp8H+eg|7a^T10^eq<
ztZ*<f<M-JT8+hD1%8jJ@r?xUO-tZtZ?s%ml2x@HS?JoxAxw)q?FfbI3^!&x=T0}&_
zRq*ikuFh#+_~*;4b*Tn8AzY;adV9M_#`AS#qa@4UzZ5Lva46thrgO#W(dQgy9JOw<
z?s2`<e_zvrhP~;Y+@v8dpz7B-@9CKC0fkCE%PFWkTo|0KWctTjdqSVZ6sU3LnOrxl
zW&-)kdT@QgU3duKI2f$w<G3&+P5OavEuOP*bF9XbIEXFCB7fP_s+<@fl~a^^KUqE1
zQr{_9Rz3hzQrP{&ilVs%*XT1RO6f)TJ6+8n+(f-Q0bv2mWfql^bob`UGA&e1N#1Es
z9?xhyB6)HAQ9t47?+E;2f6ij)t5>0NBtpsXvu)tzfL*q-lds?(CklA#Uiq&9E2Wgg
z+qtTA@T+fAvB0UL*5&VVsQynOP6DoCh3izDoE+0qHa6dD!>!Lv6+(MUzgf<9#%!9L
z)K!JLFQ(18U2CRX5*TqB1A<^<!xO)Un(vO!Zg3h#M@F_BtIgH~h0PQwipz5^hGr*w
zN*k*=iHTzwqXx6o9zxRVoG3*-BTv0prX;wEycE;4%Oe>Sk1;Qs%ABU5<$y<(-_;=!
zOp!^xF<A>BrxJvrOk4IVz>#(7c|$@%Vzo23`I=g>$s~?G5ZtR50454h0#^%w=}Ngk
zO=wke6gam&7_y<|3nq3aip$hL%xaB$ubUxL)*fI~f|vSgv8m$X=#Je<?;goi9^cc`
zQ$9Au`gv{b-pyD{5_up&fVnQ6%<hH}S#%jf+aJqk&ekuhJm@BGqxm5|QJNBGQ&3UG
zqu0xvVyMaZKudG;rNs9@`fr^u#s-1h%Z=`3#7`~PH$}OBf^CdVl{klUbxAfT$ta2R
zMtU+^(sVuI2QLR^bFAgdCSnSUCdiHBRR_ou2q5><E1y>N?-@|l7$anF?B?U?vHj_F
zhDC&P^Q04?B_^n_-U#~es19Do<FUCbdrCgIgfew`MioKRWD%oMzNlxcn4j48wjqY2
z_HOgYCsg#Etu0nI2@8pQC@O3^-3%8!Dwtws2RwsKukLU7ehPECTHERSp7{kxk4-Sl
zr4l2JKL0$`w;wN1zu<A$HaAi#sb@8A(oZia=njUnGGq;|x^pi1VX1f$oukG>nR4dj
z4z0CWDdk1+Xr<@CQ0I8!R}W6T4!eh`%TbWPmvVa2a4U<9!P`e`o+6TB3n*7#z3kt7
zXccs?Mw@*5H^;C026`;7fBXIOF@v}}e**pcrj@;WDOq)UhiH;?9^*f>jHVk6=99_O
z$%!nCEXGys)U%d?Qch0Y0&aCFdKfBRs4&e;$s1j_>qo+9PRQi&(9qPno3-unJg{;Q
z68=I&LiB_)^Go|Zd-_vy@<eP>PA2t6s5Oz2LPToltJjI({8(weIMCM@L9Q~>w1~oE
zM8WOk4W6ajk>)^g##QqtR}n7>r0;1S(U{((%@nQ>T8s%#r7V@*zv?aT;3YzoV%?q{
z`*O8Y$BEi@IMLF&ZF?S_xm#I9T?EBf-=?uB%1^OBy^~|LeL4o~YL-rE>q=|)q5Fu;
zU|5InyCbi|ALM0RopR@!ttFGM<Fp6zBZ{|jUve7?nKqfr>)|g}J@GWsF_rJk1S-JJ
zOaY^0ownTu4qOKV>#gDOf?6Ck%^Mlr?wu%QAB?pe>(J1F10ofM@N{$P`?av;Uh3lm
zoGzcm(12=|i!*dd#zvKVyNXx|Bk?Fz$_z%Gt?k>Tjq&B>7hVgEp2+2KFpM^NU>C{P
z`IeM~`U=Nds$Y0uAnR>MnV+Vko}HcPrRkq|TJL8KJQckA!Sh4~;a?M5;^lQ)7Hu6P
z&>l|sphw)_2yz4)JmiHehVb3@HOpa$u^actu$wzcNm&5^37z$kG8MEqA~61)$FjE{
z>SHYbCpg;5;IY=zWfXgEU{`varuav5+PjJ^*01K+jGM=CbT?!@iq()Uoao!vS{^l^
z3yGQ7tZvfRc6E0v=Bc@^`J)x6t-0f?R#|O<L8j0Z-k-!VJtSihnPwTkUSX!hqFu6I
zk(af%N5U#3gj-z7&F~l@0c5L?uUdSk9;&JJp;oL&v-ed~i!ZZgAc#EBzsoN37HR;&
zvlrjA4jQUtZ3+oI&3bOYhmBR1jqDX5kTH5erqYx4>{%QO^kb4<P}irmqoX6J{I&H-
z=oa%R@Irz~gYI|&z<>-54GUE3gjWk3<iR66GYfw|Z&%z*4O}(<C83YD1}{Li?V~^1
zsMz9WWM*of*DvOo!!my-J@!?F95>5-=uB(s>HH1Q*aDp$)KMeJVwp{tK&~^3WQ<93
zQVg7+=06(zWh9=V=5Lr~CaTEz7ti(Wiw~}Bo@ypkT$G+(_}XZBGGCs#;d5&!tTxM~
zArv>?%k`nc3=P-p>@p;)#$q0%P}n>+FLG<NRG)#E(O<KN9#dblZ~42-Us$foRJRdF
zkgY?4`f(*welv7M9vO?9G^bhWdnCUgDfS4^qflYUN{I+hVsO_-|EBxDMevhR0g<kn
zXpc|juGfYY#3+~MQ}po~8}2>Kt^!<XZ(bW0-SYlqjL4*PL$-DGF!nI!b>C(~g|M@U
zIgC(_r`0CK#HC!<?t|&Yw64$)$0H<ax=WbNi|sN}1!ZcG%+;+lwf2wuS>ne6Pao_!
zhlR__DA1>8WK#bX1b+nT%jQPeJFs@^O}c=!s>A~Q8;JXCrEGf^JFF;&7p4VzO0tax
ziI5_%dSUy>#oMwWU}B()B;m{^$A!SUg@MCIL|tB4B%H>7uUGp@ds6(DpX9F~*stIq
zXS-tI!I#b2u&B`30z<b~Yx9a)ht>!55xPXi5O#*#ZZ@CGsM#VQ&&#M0Z*HCL&QZOA
zCQuE`Iw#ZZ<Ewvy390%~B?bo@8J-+7k=abom;ARDU`d2>Sx5h_bbdTnm5$_tD9%k>
z;w=*+H#b)}z3?_0hVb#Wu$`HcI87wJ_@C%~++q}QR&eGR#SnJTMM3f466d6TGZ*p5
zhvEm~B};tlnLI5V9p!mMY-GVp?M=K;U@=9RW0)xsO%QziR?$#MOYJG2F(XQZaDBOi
z;+mjmIBF*q%90Y;4lU#J=;YARAC3f6=tEGD7CEM|4m!FRPyhG-PxV54RBr}qxVK$c
zt{g6d%6ozbDAE2-!0<ct049l+h5s0Zd2O9-JJ*Llk~vrirMV!D9QbG*n&l#*nbLDF
zsncu(6tGZU%9(tr&y3Rp&!%PY?U6AYgKsY_p<7d19T;O6=_?eFb37;!WPbFfTg0mH
znQe*xyo`j)Zv9YEq1&7Uahlo|Z9O8OvOgyyP|rztc7kW~_TjhWixUuWGAJ!8i>2!B
z>N~~>hH_0XrTd0HN0E7d>KYnsQqhm?(fBe%9~T8b7TTFMH#g@sDu`Eeb%~d;`5?ex
zW7XqHfTG-QM(bbfRS&<F3%0GWvz0Lt?{xLpo#^X=m-`V{)b;H(_JaTjBsuJN0?q5T
zY&!Z}21YQA+PoLWLP4U$s!rFJ_l=cHXu;9Ry`bZfXXRr=g@3{841?^coX$QZ2v<%U
zlv+oejFh=-#nRUY=3Cr)prPD~Xh|ta3dstIeG(FD49p!V>g5Ap@Y^FHUV^)Uf1*6f
zp$LOobC~hJjlef~V6*~%{eSoT{?8KQ|DRph7Oxmc({e6b^z~R;aG(+hD>*$wMLA?~
zbyejs6oOErL8x6hAk@@o+~_DvAvEEMiT$?;UDd09BCv>wg%wp_9iZgqXTN0mXRl>s
zXZ#s0OxesPKgworZ_hCnaau7>jPh;dTd*41|78O2l16)*tKg0mpr|DGj&;ZY1tsHz
zn(7r3Us;%6VM0C@DvC@g#JRbrtIy+vexy%DL{ri40SaAU#@Oi+3oA$e8Dx$11wM*+
zxgNF(_*pz?33bdRVg);tGqz3h`5xhH{Rbb#l*+#;{%Mh;Z0eBR^M8PH`E<Rbma_HV
z6(t}g`%uY1qcpelAsqd|5^bccyquE4uRuv76cprJpJyt>s@#6`TOHR#<IhmYz&9wd
ziZC`n?oP%&KoO4+e4M{J231u}@Ogmp{`Kd_1X?`cy?RW4dg1J18p|MlIe~*>BP=8q
z8lBV*-j7chngQZsgL1NRI>6(dmYe@OE~@)K|DC+p#gv$##~%v?MMNP2;<81Ih0;u!
zF_h@8I?a7aO@^}c+pAu~h`^&69|cL*^on8aKZ_#I(#3Zg<Qo>~;0h5SZNzy3E|LG6
zX`Ho4>+ut0@ay48MsouLo7Jh<VwOb!6=;rl^XU^M8yma%WbVMNUTEm>V(aTZ2}To>
z2we|BDX9VTCN9IV@&0~B;V)kbG%9STijnQbci<0i!fnLqf?ADCWa=`u^ma(rnINwn
zXO;8kfT&NSJFQPUP^ejzNH2_v9_(l_;dga*z9%4z)860~5}O>JkRZ4d``-1Lq`=qB
zGRqs}$p#D9SfhAC6^f4|7>%p-XGxHX@}n512L<sPF7;6GTz!gZwb;1Wxe?nt#)>7H
z3X66^79GULDuVY91!<D4vnDGq@95;TtevZvC&7MmPPw-<6-omF!Lq}BdYeOj7AwQ)
zniBm?rZn^7TmI`q1pqz;6Bp0)`}Cuuq@Vxm<rihmOs14Az=t0>MZhLWW_Y;ziv+-W
z9B?Jl#VdRv5<4Np>`ctejY~?JjbGFK+<6mA70t#=($&<Q&OMuaZ#F}%VH*@{65Cjm
z{M>wZHzC!s2f9@hp92HUcSt8T$BqAhG0c>vPI0AUP@~uek@U$?dT<tcG8P*!U<r>J
zFEX0VuK4+r*0Tawb}FoATAH)hvt{Mk*}f!Ph7x2|>`l4ataj0l1yVeip+^<~*?fQ2
zI>Pp<wtNOuiO6o~w6w=p?bg~)zB=EI^<=Ivom5vYGULPSbblN?ngD9lMy@rZtB(jx
zXB(vv3=>q8l;C1{k>`z`4`Nh7q@0zuR<LM5R2WsvoDvdg2d(g*@UTh7fD`uX>7~HM
zK3|$t;oW2DA;q}qLQ7bsA((~CCbEH_lazvj_{17N<--?cyk$I79#&Sr%ueY9L}uYc
zMhS;d+CJY;a=vrv_=*163RByqAu$Yl!3*U1-VNC1w0F|>C9+38Tuf`vyV&JxU5JQ^
z;&)%ydyUEmM#wf1=`!0l9FdcSpBH(ZDV|YISPwO8;YUt6ma02;-_0OVJL5UZMu&&f
zM4^B@4HS(Mecz!dhdusF<XyeTNB_V(^gvhO_tJMWZu(XQCQ*jVm?6#48KuG*qUV>v
zaaT8wN2sKe8#3bgJ+QWhN|HB%c*$q0<dkGHCAclG1w#YmvtCJ#8p$|sfCMo*&NdSZ
ztq6ViwK_R@{7^6%pOdfU{g(V@f4uX~SWap|0r+sEL{Lzd1RORae*i3$gt)j~(f(Y?
z&SeQ+dS@WXdy|(Z=H9*@jt<*>P4N9>RKbHy(8OB*^=!Sh-F$U*wY(gvT%`2{blAo$
z?b{~$tK=!IN9NFhCj(&*UtxeT>y-}`h8gJu3n@GNohDPdtkFuQrgU;+acS<L_3d(`
zz};+>G}pFg0@U`=8WyY<zAG6U8*4uK)@o|VUtGy?n|rRGl7^avrONX_7y>bLq8`+~
zl(o=H#}bnsbh$e&Z1hl#qhPO$^b@NgogB>0%?+gFs<%@lt#X{*-L;_qE<3(G^qpxe
zG&(YJJli%tJDVt!S1+Z=xpU_sA3j*V$_Dbf9A-osHtg}9%in}|Iy>*rMVTop%%$Zn
zBus}xAVT-WFCwcWA|tKfNr<3SGBLmKRyxNnr=5{ts<)7~x7(9f8~MByyOTwaQBhE2
zawGD;RRDITzDRIqN5=@XVKSJAn+nWc!0-!pT6xL^sWBX`J#RK92CydSo@d;~3&q^#
zhRC3P{(Ogal2t+-+aIq~EQTmfQ0LI6P2%$uy5FC+j}g~{{$06AKqBIP>onV0ZDki0
z3Xjw0KIL#Ufg0Fo^YLk()4002l9Ix}0--`~y0lgSFU_=vmBU<#*L{6?!M$^#0mtL8
zIsV-1ApwG}cDyz1SzSLEL|IPKXAg11rz>P}8DGBqMPt&KpKmc+$uw1GGF`frH~E0d
zIYW_AL|hsADJaLkqwuhMH2SvP)T_s>v2iemVWPT3vV~*FsQ%nd-+cDl2t*UnC;mO8
zA;)@gAHR4Yxk=(d!1Z$wtm7#+2Tu%?2nK3uovWKGP{wyV-m84-E7_eQ)JuR#$OPJd
zQ{&-h`xUOEQKMN>pf$NxBGGB7xdjcAa4frJ?c$bE33_yP6fx&pTNu+y_x_=u942oI
zL6k%92-0-)i@7oF_2g8SOfjoraPv2jc+P`b0JiE;jGw5soUbs~yl<S3y}c9+8EM*y
z(5D4Ei<xY(cyI4F7{Wj-qiZQ%Y4hHX<Jp>edS2N5>o00{*cZGl)2(tNPHxsKzaZQn
zo_GaO1Y(2QwA2b$Uw0*Ud4Tm&sPH@Ik6M{&PQl$hOGbrvsZ@)_sds>F$o*BtvwQL1
zLxS$Rhi9{YaIjX1MLVcjp3Xb<O$-mWKk1M(q(;y)%Y)@7y|2vFwm`}vfR0h{eLcM%
z-=Ua?gDNYhj(p<U+FFT{C(n@eU)z13ktgWuuWSscFQhh<g@!)3R}%M*aLHE6$jCT7
zMo?M`?6sTUf3!6(EAQFaC1uO7PS(;i@e-FQM{j|IRaajs7u|x7Y4smR&a>!gPO}E*
z16fWTKZmQHpsub>_Zv>I9|<a4fY`&)dMqOuV&(j2%5AwV-}E2hxTsh7b4!jD$cKw7
zEi6cbhG<b`$`7XyXKfsc>tZ~>0Z2_y$a2Dtv(ixv5myDD@AAsZr7GO~?x&W*YduCR
zT9>jD8G_^m1|zFA!NHQX&O0AN3>Nt{>E$WjyLhRcAJ95QgQS>v{^Ex&zBg~mft;#b
zwC;}AKR0*V+;XSoY~{E+^}P`8qG2^#JKup#DldPM`x5AKGY!U*NYtBbVogWqi_MXo
zUO)hk)nm0i24%Qd+teDB22Nm+J$8G5{sI=jBZ0J`>LF052c|C=eU^KtM}X!eC{z83
zJ3cE4fNbKL`pnFj=lcS}?z)yU=ebJhvMN(tEu8lWCnmFvgNLE=h1wT9&I3Qz$GYyV
z(%%dFx?b&01l5hPil`p`Z6eNoxowGsasAGq>k$slpiqFax*E4+a>=iC=e?OEBsr(v
zaa4huNN@s`3JTuwVd?>RTILX2Qh2r?@7!bz&AW>I+|J1zV=I?HaTt>t=vrlBv7%Op
z^Y`=Hn|1?tWaG!!Bvo#Me}SL2gzKz-@K<kCQP$h3>`;z>cb=Ks^=}-W`*TxM?->9D
zX?XcmAS>T8KZma3>)J71mXt!CQV?7JzNQ<UQ6l#V&TJCc%4e<jo8qe3AnVckiky#6
z(Zsp+g>f=Ta2ghIHYZnhRYCN&K5Vut^oNDTTY8<n>F^6k(>(9wc%kCmdVigAkt>s9
zBDIwd99|ne9|Gh})8#+Y4cCF9Vrz--D|@G=M2q`V9`Mmhk^zQz(6hwrqQ&Ae^~v+z
zsQ$>}&;m7X(4)DvdE~iEHnVtKyT~VS`U?<?L2ps!T*G~}`9;gviKt=;&_zdXo%YlU
z)oQ+pi{poQEj*S^WK)|X0YqvNqSNnjvN%g1Tr^W|D#cF9RmuI;h7r+cyJ94BlmpIP
zv>^vk#VztQAxT`$W*?i?{oxxdTENLU1&uD*{TJFbf@$Afr+o#33nDCVX*x3F2>Pxs
zt(LVdREy8;rr}&)1b=HQGLfer@%iU{Sj*O^F=yc-5oNOT@{gWK#{NXE3w4*v>xvz)
zKaIUzmT9;?3nmxnxwU%w)DQTYAFd>fWRP+GSvjIhk6>b~Ob>^X0v(GBI<`@y!R9Xl
z%m?(HOP)6bvX%M4fFiUc0awUz4igZBJsC%U%3<+_DE7>dtZO`ul@Rom^ece3kh6N1
zN}kdGoaA^sQ}X~+a5uQ0s0d<XA>Rz5w&hpzf+VJmXfeCL024GcK1AS?hdml&P;?a6
zdZslcu&Db>mKhK1FI04%7%%c>fl{=6+x7<M<OS#*^6n>qAj_ee2?yPr?Z7ZIGc(>%
zf0If2?IBa?pJK;u{@+@FzrVLb`)Y`2`oNd1Hvih%xYI=&C>z^zab<4`McXa$UxkHI
zEe`Di(H=iyZ$~#VGxPAW25?9@{YD^=)!&6EC@B#PxU?h{W;$yg)9zD;x=?Z=qW3BH
zDIjp;j=YWS?q!ZceT)sdvNL76I4St`syiV#Fh&@<KRINZL6L2I;>suMu720!?yvr0
z3#yytLVXyxeb6O}_n49>C@N-2B+fO6RDnh;m-*x4TE_rpi@ohXM|f9~2B18bR+40~
znIt{Qla!YB2Bqn7Uy;M+5GNQ#QX&{tX-R;w>2{qdo<aa#|Hn}br1m}2A@U`9K0*P6
zs<SWEz}NXmFZ04PV5l;b$?+jLZu^qcfMODtT7QRs!!JVUDIodN+&|i9yMmwokski{
z8%*WwP?hLg?={U#!A2(F!;Oh;nq?RLA&kGBo|jjBu4vPS?*04suV4T8_cENGs4Rl5
z-a_W5w!S`zxZn`!Y~?I|HzX6yeZn!I-95#CcWRv-om>5lxHxHx2zRnr)Ls0O>X^sb
zAIAx-$Mvgq@10InK%$+DJZ_l0K&!&Hp(uI7b>9BZVW=D@zw5HX<iPxtr3!$(#|vOo
zpogya#o6CZ*_x_>xk(}k>O%p&p*aT(2G8Xi@4sr31DeSKy*GEex}SaLYutbS=X-48
z)-g3Pd*|9zN7#w~!mUsiTT;>&GXn8&@eyaa<>ivcg7Ux9VV+{q`p(H+=jB%lH&W8*
zn}ggzJoVXn?VW%80^f~(%;*6D7YEPYiT>WGw<|x3y+FII(_wQ9HB8ez`C8++8gM3l
z?@%dcx+H$EwL3`S3(zFI`T&^lXLc%6lZZlCtlpQ969CeYl$2!AK65$la|Wncc^YX1
z58jEn#!3A|sUqy(&vxo={hMNw$HE|m^<1&v!VN;(pTv5hJeKAyQw=xiL`B}@-fkSY
zZO*mL|47s~H{ZFjwr!uC&5~YhTv%AxRivb(ob3oQS?-N41~VHlArCne%vA7MYq4lA
ze3{eSohz~5<Eff)+y<dWA`%j2^~N`Vyu_p@D{H*$Ee4<%*yL>gjyx7_q3mD{1qkVu
zlT(G-i^zzn_5N5|2Nnh4?XlD{O?|g24lCgN5v;OWtkj>st^oLrP;hvioK&wi(G?f>
zmnp;Rly(5cG=?Wi<>-~9q5dD4<u#_%+ge+BDi8ih$-g7vxA>Co8)O=eu@Ef^3{@oY
zMAAuYVlY@hWlK#3fCsewSU?|^EcZ2pMe_m``(WmWHs)Nh$4XScI)IPC+#LS(Cl7i5
z&>S_t63~kM{d=gRX0JUU+Jt^4*9-E6q4x@4PVoMXhm)C!hVFUbt^tZYN_d47tH5A3
zG6O%`#UmkMxGbKXfu^xdt%xjozMH){TKSHO&QV^O2(`5X-Wl-BI(!YTB5Y!w43Izv
z%ng`E^oZM=Ch<4VfD>*kChU7`>~!-dR3c_zdV|`Vt#3}9?$5i?Um5?*B8dcGiUVr-
z*q_(KJPsE3r`_@xWcapPP4IrD;+aZw`<*Dl_J;xjp4-f06BA0ZvbZ%K@Y&4wie*Yn
zNU|OkU|>{~k?9&3NP6dyR#U^R*b35)q6hm533%M$QEH72s&?YrTb@#Y(PauQf3fav
zuM4}Aj(+gg*B03GdK||T9msEo;@5*b3mZ4LstqYf(~odINpeh_D7HRmH0+JuU#N?B
zGMk;)gN8c^94&q_D%S-SiqKEPHp`b{N=i}t(JZoNr>FI=%6m^$j&4-0z}}Y>TKpn`
z-Dc>czbf>TD>L-8H}&<;^?~>@)3y$PRUVdr4_VFES2)eb70g!V+pAw}wtNm@++XPk
zQE#+B3!fB%5nluV+hclX$bj~{LCcESfDM*M%1JT5f5*lOkvD>sw05}*E`$VN_(}~&
zX`Hh5=j*g{?AGLsrQ(R9)f;+(=6TO`o8Wgn-hO!5jNwrT3GV-jG|G=ls>94}OD4%5
zprk;rfjO#2;4u!R#bP75q$lvSU|^+-1U-F*R485p`6`e~|Jc9Dz+|^H<WUJf4F@z(
zVWEf)NfLQggw`D#@P9I5qm-gvy-KE+kh$uixu?y}Sv^^oT<Rrck&tAJVv4`8hXM=}
zJ`0^#APH+OxVI_L;5rlPYPW)eU5?S`QH6)9?>%3+rJkN2>DzqOnENA!XOfu6<Cw2r
zv=0hlz6@j-0_Z5K@&4O?9fzblQi;4zv7^9&hDbnHBa$H!G|mec_0c(rTsC@p{I&k^
z9wcr>LdZXlzn|#@sEk@|JHpB1yBnN{65$YH$q<Pqr2CeX59c~Sa^0#CYSZyOTkG-D
zNCg3!niC_C#8FXE!y@J1?OE&H{p$AEO<!Lhu4U2!z((L4SLb*jUcu<kFM)jbFIiZM
zBRZ(XM|VJ=!R~k|m;9C^#l1+SWO+8_V)v`NyE_~rJ3<aJQnSrm5(|unH*Hcyk1*y4
z=UIkI6?Q<%5X};OZ|gL66mV2~$CtQKP%eMmA@PFbd{t`TYanZ;NmwUmy9v0{4qL-z
zo!`FSO{0UjPduj;zx_3qTO_=i;H`#Cy0D|~>ny3Hw2=XT!8C~ze>p}e5-SXR7L7jb
zc#E{)rpH-X=@2gYnKU<9wxmE8sfg^5-!nK*P*u3G)vW*1HPkGqP=s)$w%?Y{;4)%R
zrDtGJDo_eCD%2>kTUz>#PbS&lcUhD5pNQRpe7qMseJmm?OFl-&I4*+g>U1l7sli3-
zA|n9U4Z^i=QoqnykrJ_PYN0<PJ3L5KO1plpxcj9tqpr|IE%aX98-L52q}*ynqqr@?
zX*E3ilnf8=v(IOwc((5s*^opfd3k->)wMO?{W+#x-3smQ?v9F#OwWTbeAUiP%h~ED
zt->fwc=0ZBIr}7<0uS}`kKO!(Cac2qytZUf;4?q|T))&N^)xUM6w>FM+@A}`MKXT)
zP``u(7WpR(^ovv(%?`JJ0EKQYTjP_mbTZF;nH$S_X41S{>6U*F>Dae8+nB<xamGoy
z^2q*wj%f^a3r{kTsCGFz21FBV()GlZa@{sx0IE#q4kB^KQNe$d)6>4%v?ebQ4V=5c
z$mm~>nfq&~XPT7{m<SY(P4y<d!=9hnMX|H_`v<O81^NfFaWd1|(J0E$>B?BY20o!F
z<y5y+N2`U>;SE17&D)1si?!}B6Vhzyp_?OpB-zZRm1ZsGvt$Ni4d&y;o1nnJw1=<I
zBxmYYJ#VPO!y2WDh)INzb=0mw>E0qVvd=SGLx%cDILtq|9DY2+!X2A--X1gE)<n4d
zb*2{<7K*&#5<$u+D2!bosHk$jC>KBQ88BBa+MBMr8EBZ5&y*mzLLGmb`ZIA}Y6h3V
zwj_k%rkP3;<Q{M$^GBgF5;g0tjx(pGARhVmsBuziWQ1*V`;>UJP^+mmc=GRaM@QMK
zRWRzciC|>~^g;=LW<FCcT6H{^{SCi-c>wdVSU1<1f7vYXa&u1|8S?7-^75_LYESTV
zS}<%|B43l&+FM>`h}Y>&#mnd|W_zPSa6C$VA!=f>nIBs=>ue&@9%eS4CtF<YctTM3
z0tD&CVyW$Ds8K;%1OgTXlGK8#d#$d2S?41TL0jQ~lMXpA+yZoCw9dW@s??<z{|nw%
zeTRj)EA0G&N1ZyuB+tlsBorCVirpryYQ@<>mU#7GgOZ3y^v?D+sV;XsSFZG^=OD}t
zxl4SOz$Rxhn&}7t2cW_&heYIP4KQQJFsA{(4o*hGVFjjLtGL*(F!<%tUz+ptK!<0$
z0-~hCe7?p~$(6W{wfBL25}#kU*<ERdM>A`M*}PzD`I!i}R)1fSF^S%QMVB_*Cd8go
z%RO%hM11f}rQWG}qWa?}*7isR`x>fKjMJir`%f(L{O)05VsDM}Lz9`YPhw(z0zcWv
z=2;+2pkjuY<Qkz_SGoH&=xeT7E|^+&6J*mxm=c<Xx=Xkn^$iU&a41>5YH>{)dn0nn
zHu?y*Q_bgRxLIG>f;ynF8e!K^_>fUw!l#q1LeOK%=C=MecWub+9{50Vegv)uB-C^{
z4g(58IIUE!ObM0c-(Jrq%`PB$2tW{O6(+!Wnwy_rZnQ^|nuySZiArdcd~M$tbk&aA
zSx6@pVs1gdyS~7D_RMO$RaGiDOdC6wkj>TI1_A)=b4Ajg4EeIs%(G!V);kkLh-zU|
zvBi&z(>0OaJ<ln}+bXSQ!71MKrxSTjT{wn|dZm@o$xaxe5F8LK|BiXRP{|q~uXEb#
z6a7B&iZ7-=o<mxCaC4$Ty(Ny=*1-b4y}HFYV40&_;+L4{U2&8g07&&GF7*KKy1h=y
z>oEsZ)6G|icYMwZ8sLn%Bw~=QB%6(vgzl@Vz-6?gt-$IZ5U|lnUu!lwwZDH?=ank?
zyg}@w6Y?~TBrqx}b2ZjM5pZTSPXIa$q!9pHl~B#Q_BLB2gy#|Q5y*|0kp97T$<hQz
z%GC`~q=Yy-n!JLB2ASg_tIrowu?KleD<9PdoW#Y;UcjMb<Ye0Qa48`cz>^aa5_%ex
zLm=cV!f2fF9H@ddk|xC@1>dhF5Z$3NkN(YxHaZW!y$~zj`2ohn79^a_(<|Z+hSHXx
zb(>c^!!|Ncxv8<*q5VnV41wG`O-MqGW3SS7?#@`vX!H;Z2&ZR|$h8R3C5lQZdyo9^
zR)-uz66i~9aYrEGO`%ls5w*2E@-Bj^GH)2Zu*%_G?TrZ*fT;m#m#t$P$iN45$1psJ
zP+6+;`u(kq4du*0Vc;TB%u~`u>M5Z9vk-mzK9_)r?ZE=_nkj!6)X*>iLC8Y@1c&HK
zhJ^lYi)5%?{y*75)H`3&1z!JCkx=MxkqH<CQqqsWzf(T~!4dG!|HEXW|JN;L%v<?D
zDk>@pewRytTL-xzU(Btot?%EzbAy~x=o=au3SRhI5CQ5r2WKDD6Erk5v8D)7O8&3a
z4&8}Y?X7KX^Apuf!1&3}pX#z-A_Kw;;AqX(q+({qz-Nd>xX|F1oRA=acX2T9cD+gu
zKJYJvS%Ll0+j}^@qtar*Y`9fuZ>IcUxL^aE&ts@+oX%#-vIeKN29rMnOJHbN7}ec!
zk#>WV^My_pfDz`a?h(9rLA6$TvOcggUpDy719fW=5X|nb&$E6t<9CB++C-r$<0}&I
zUF^-)9ngk@!nBN!k2n5X3ups!r<IOLMo!LAo7<b8&nOs<DIhK2g1$N5H})uL=K6jL
z*ROtOF!Y?#nlf&x%$QQh9(-0l1_Fx|KuQnv_t)GXE}W50QhunlRv0je>&40x1yxdq
zOD(9G+2A}Ro%Ft4imSZh%yn54aFDkMDWNXE59E`LS&|m29n<xEFw#YWjr<MfE=!WQ
zih6te-EUvFwoMjjYOgMng;Ne^uddhriQI<?3$OpY5aqO*!oR*^M-?b_UZkjUv;vFE
zZ$$0*#o&E4*4HmcP5m@_T0}Z7H&Kwf1t2b<YASj$u=ZB1%FKRt$H~UVrYy7n;ll+i
zQl7LD%WywDni5TR1!&qrY$C7IaKXP=wcID`AKq~#pt0lg8B^Q=Te}aO)^q^GC+I3Z
zc%BCmT-2@!U5w-kF?u`*WDw@7Ju@+xw>iybZD~n<a}b)OHT|m1cZ4LHG`Mi&u9n#e
z@gfn>i~gO_M5c@)eoqw5f?>=OGb>8u8D%1u@dDEQaZG)Ti^pz^tp%xC+odg@32&l0
z&%r{)&s-%?>}E_!AoA0w{JkU?8A0V8Bd|54^{4^{2Dm3?hjlK-{CNEA8Sw`Nn-ddh
zQ`i)m+u1IYO9<Bo>!BZH5QyX`7)4R9ab_y)xg5ub^#$YkzE1u6g!*_?5}@X0N?jQ}
zeE`mp&+!;qmju)s3Vw%}%Ak2d+Z*OzJYyyy79`N!nVKEIPkv-QQ*VmN_nv&laaEb%
zX+aYJ*!+X%5FZ_#8ySz#49g2RpKF*il6ndV!~uQ0KlQWksQyUP;y1!U?L)#WQ}_!~
z4vP<Zmt9@ibi(*>0~6aBLNj4T*V9AX`%GYo9y0GJEa7Wd7)ZFvS}Fy2`{`OkQeMfT
zWa>iLrq7o>Q%s=PBV4_}eR@zy;z6GK&-0s$JpoVTLtY0ke0EPw#n6z&aU%G6J?~K}
ziG>*bB`bq0%1TS=ACOH|d2SB1lx+;0Uz}u-5OJvN)~YBgPcF20?3`PIBaLn}kImA{
zrs-Tr-c+m`SPX(&7#Op;tY&`4M0}ZM<mIiq|AqwXCSc|sT~@-*pK{a9`!a?cYH7Pe
zKV7WzOcsu18>=~QlU2g~y9f@l73Jk7*rQqfPo6&2tnG6gnBzVjsMWm_uI#^d+yN9A
zsK@dpqBqLLbsnHdDB?FpT<WW*4j$OX^*UTTFMe+T#<q;#A_v!;*rZ?(Og6GwEU9o#
z)`H@alb3nyT~}JpTFf>og2K4gw8o`xxxfs@VKydeGixHvWj*}`ulxoU#f)3uNx-BY
zQ6#fq>8RC=&<qZIav+eBTv^G<M*}s^?HxnIJlT(<fVPyA5E2fqAWC<@dIprRXqJwR
z*Hn~wyKkgxX3kAyhwdGPcLLKH)bLm#x3GlEb-q?esAAk)X}m}~Buw7Kgswkh@~L56
zXu1gS=8ph&1l#i)jUgIYx#5Z7g;Ga(A$fTW%QEAB(}g+HizLkovvGh`!Y6fV^0*WJ
zK0ef}GkeY?8PAiiRuYEmLootW4bTy9d=qR5)ZN4nrpI6&J>CGb9iOjO+UXG3B<S|%
zj)SH33$>{GrQ*7KFm~2oolF!spIlr3bVMOk`Z+K+O#5%Cd%NG9A)FH(t#&rkJ<~ga
zfLmGYmESrLvdSt;8ttyw8a|BxluTjigI}7tKtly1E%b<EH}3{f&s77|;qh#-&190>
zNF0g}zeeOd%8FrE2R^5jRr)tl@D&T4`EP|_WQy!z8cgC(zsXh2Gx}nHU+41W&js$p
zSd#c_3%!)QUZuA;8+`%_KbNeZ22jncbS{KY@@1X_`g$4$0Bkbl^yftvB?-8BjPCdX
zaX6fkk{(aOF;<Y=9<;bsd04V%89|#ssg6P}{pHdlPpnJ_6~0C4kbsDnrk|WJO$F9g
zSEr2Jug^0ddnfJ>m8^8(rh~RfFtq;g@&Z1CsZ@Qp7RM+?W1w617Jkq4*|!~D_R-{V
zM7*i8?;JQIoyf_}9g(ONnX$XB0@Y1{UljDy6VqrTGTZlf-543)z73@4OKO0Fp=P9K
zw$ePWsHk(nz(P;ZJsK*T=Tu-mSqM1mwO_A}_hzfihnjo-{PA9oj|&EoGZqN_&O{ze
z8T^gQ@*3(iJzsZ$Ma)yJecyO>vNKX@e9z70G#3Mk7^2vjt8|7R`dbl1MMYEruG<?s
z5xP?V`t+jNRv*iv+KC;#?@QoV0Yr0PL5_N>E*SEmq0pq)*<$vS7;Ke<Zd872r>CN~
z+}vT@a()KvkYFc|!03`(5c7~g5q^ETH;OPP6sJ{KO?lV`FeX4>?ptkwSk9J?8^&Rd
zbMJ#j6XOFbq+BF}r)O3X07pQY{}j~QMfTit=6!;^j7v%4r3i5bx8I#fzUlZ)%P{yI
zosORdYK63<Bw`iBuWXt_*u2<A*dL;z(n`m*DzSj30twkbnuU7T&-UP%^@kHCA(~QH
z1rnVy#>DeQU@UjyAFsW1dy{QkL~*h)(B!;PnD~Ql4JNKk#WgZE79k+n5_(Ms@*>j(
z>XW?`%Gt|?1_pmbgL;1A(F7+$ZA$^LW(G6!Hy!HHNqDt87d!h(Rgqc+12xfhq2**F
zNZ7u<x1~`;y6@A0jeNYwhV#a79yL&?<%T<PC>I|!B0faN#58~Pe9mwj-QaoPVesWm
z<iu3of!6|YG-Gs=*mr=qza2J;iXvEk7-i_eY^<uTF5qz+(>*8w$b45dQI$?$dH_3d
zi^o;JL0tzhS^-v>KZJ3}=W2@<obkl#^!OxEA#P;x+=VGt^&EM0?+_WQj@;b5Re>QP
zo=3Ob4Wz_GM8(v32OvV`mQmgJs!-Jo8OH&I_THM0ZOX2%8!b;X!z2-gTYO2tk*8<~
zRt+KU6jx~VnN<?G`X$^y_Rdxo2^9@D_f3q;%BEj!dy%r}iO@(UIV>%CKp>IWJDla_
zqd+6O=nEN|aN3;u3+kVslJ`#AbD{KaC|HU{C68mAKP@*7(pfF~#F6uSwb{R|8I~Q6
z*hW946ut7hYJ7cfiE_Wi>$nYtOldW`h-t>+(FCT82+y5I3@<I($A0?pc$&*GCDzn*
z%irJsHVPR19`#y4`<=dI9=r7P+|R$}Wh!in(Q4~q=t0}Kzr_QmT7;UdLh<J4{i!KC
zo$%q!S@t8rE$>d4BEV}GB0$5g)m$}%gk+{f{;@CS7_BJe*MIS~(U?LHM(-<&g!ceL
zJx9bZab;ysbFo#h)$Qbe@Y=SY)z!DlGLF$5rAiEO82%2;3N+|~=F2D~La{{CJL0u~
z$EA+7HElTq{Ok63kq9A!GZ40Sli7`p`jgskpC}@;5BfT1X_=V|g#y+kbn89uzw<nH
z-kn=#bL2U*c^VaQX%g~CS_k)>T46Q!&t9EO8Q5QQTB?mwb8=P!nGZnK%$Ysn0Rf!D
zX>JOPp=?(Vm_5hpZQdaseU>I@utR@F(lzi`pdG-HPI@UH4yJiURrA8}4t*CdL<ae9
z+~sD{!O8b{_VOQ!JH4^7v5R9YSMdjh2vW1NllJS=JB_;k)!unVMYVP58Ur3dF#w`~
zz!4-$jsgb|6bVW!f@H}-f@H~v1PPK0Buma9Ia8vd6h#h_gMj3q<V?>3Pv8E&ac|$g
zcXa>gG1{L>N$tI>)|&I3?|NQYis_leKcP`r3P|-5xB3uy3)s_6dz&ms)>#6p6XbRB
z7EAdlw{Iw?Nje{7aDw~3Xp(?GoV81#6vCT%ouaPv8+z@g+!G`~8^>LI;lc%s&T!=D
z={cd06daTgE~6RBbszu>$u~Aegmk^_oHU7}H9z+wIU`u6udscAELWqDbqNDlzx6}u
zTWE{cK@e<8HuBvM_E@#2p!YOwUr6k!Xu70C_&}qpXY|+l9G4wR2j#v;wy7*35j`Cj
z$(Nj1+*hdGjo&DA2_i33MstDoT>L64?SUh=W7}Uj+5H1U2zGULk6Rw>f<Qjv)?F!b
zNEkHtu(Y#V2etpl)B|H{sMY$X%lnq5Th+IBcDh}gIfy0f?CfrvC%;U-MXTWK#h{gM
zuirjGJ5iNEIRkaBkjrim*;(AW)Zyvx)-lr+<^%h45t;OI@oB}~YsT#mw#>R5+?F7;
zHGX);S*E(i<%RR8NjII<*+koC#!QJItpt^G{W(rxaWA?cp)o(%vd&q_L2JI6n~u)6
z++hIP^T6o$eAjmHPJ=t}9*6x^%aL+%4UHPdcHyXv{M`-oUK>R79wnUiWMYW)#-h9m
zNu<9)-s}mInz2C2r2GY1j|+itF3EIB+p7I1A~k(*(iL-5lYLlKl~W;QT|P4zHfCxv
zgJ6H3zRlZzGP_n3?LR79u`(?CJx{IMh=4htO87;k-2h?v761+~Fq0S_8M#a$Fr4ei
z#+3j6#H7wvx?<n<P(obBKBjrfV?bU)HTuApj+Ec*GXMx+T&KXaG+ae=E#9a#UZ&0-
zHgqJDDoGVD-d@`boa6r}54ksUMF|3igP_mD-WL7dhlpP0#jlC<GUOYW9SH$~Uq&WO
zD_5(=fl|P{i933(bWmH!xy*EEaG>g11fO>OX1L)ahoxZ|ws2EcE;`x7+XaD6zj@ZJ
z+P`_$H_%gWZsZnQ9zeYz%UxPd!D|3OnGE<<#1+{}m4o%RLo*#6B(f|P7Gyqd2i2CJ
z1P=4XU9h$F<v;Il1c|Zy#17GSL-a!>mA=1z{hFPdJ8dv%+%@N3skNn`S<7s}#3Nj>
ztl5-;g2PWnrH)FT$%hol6;GHv6_9}<p=!@BWDE7)PNRyyU8<fFdp^q8#K*30@vzGh
za;KeV-zVcrbaczCH_gt^<J(JjO_W~1_2Vvr0A-Zz-ezuJp)_Tx$`e3YTi^&ucl||%
zyQOtLpNWZSutR?E>*i2}6&YD<kN^IssP&G{1CqsP@ZzVr(k(Y6uLDo72w_Wa-I~Ra
zo}RA!Q=FP`<E0{PP@-r<3~Cl{m*$uuJ^vCHXFQs4kz?{V(kE08X1>lB3{Wm?ubp)*
zUpN~Xq?J%`D~8i)U3GR$D^+@4U&%^7_%UgxJlagSfnP}nEfTnU*U1S86KuYI65M9Y
z6B;g&{0~M8#p=D*Ac*432@#r>p>3=d$n0TTtcne8*Tr&~UVJ={m*zqJK)CV2@CQc5
zI6R0H+%`7UKj=E%GwZ=lOx>C!s3WBYGa~}RbIH-#Tt>2v8YK=*?{0w<fy`AJEpg=A
z<2g*Sn`s+?5Me=HTVf{xyii}MomJE_tsne9<7}#V$DHTnz$@U&Q9RLHe)1hNWB!rc
zESDf=`L`DEUn#Q`w^$(o2EC;5Kvouv-5_*kZd;tf^lj~oH%#7n`;CvMqNk?-Ypaw?
z5{sdhl9gpuxXN-eRNpZLMhW!h(Cp(x@}lUU;{M^W-0$>ZE!rLYE>(-}t^-~C+K!Z^
zCcP|7Od0YE{3j!F_&yGBn^fxU;LGZ@wv+Q3^g|<SGSQ68g@&<<nNxTFvq0JWw_HS0
z9kWJtyis+&!%)42U!{2Bws7+8ukhRMp=rQruJx~)p!?~NuO%f`N#U`(vkliQELa?-
zhbmU$`YRTCOV+-z<fdu1qlxIZmIrDaMh1a7CNA-{lGUNN^Bb&>&5~~f7@&x|QDA6f
z#KgeR;SIvT=z&XXON)EudE7iY8M3YAZjI+gFkCbj4hw9F7w*mxeFeogJ5Ku8+6VUB
zB&;`NpE{BRU-kq=6*?y0;Jn?@*Dmt&Lw)PMoj8oP|1w%1r<c<{zwB$EG@=F_L_)Pa
zgV*fB0*huTJ1wn`7~aU#<Pw+3_|uv%n=p9>z`Cidn3$I>=G)g`%4Z;EG>s?g>gq^b
zq%u_-Gh5Fp0%@}cV%Fbi@LDa6<g&5Y|F7|~YGF|zLVaS)zJhfm+xY<(oNAXKm>mPr
zwa(J1sG=+OKpVB(nJ)pE)Sy>vEse<aW+VzZ|GEwthq&UOsFwe<Xz!$vFkQ=%o>`cD
zWIKvF>ZrGHndeI*jQ0BqojK7LIl?LnZjKinp&;jUYg-LfClqwq0rB26a~Rx<A%x0(
z88Qjq(!wY#j`HIwZooquZ?Zc71YEX?s;bZWJETnx3Ht^{LkgwT6a#{S9?QxWsO6G)
z1cOoofaGQj#?Qw`CSjth!YZj`rah|njv(~8bZiQoWA$zrG#cg}T5vXdzLA_mub-zq
z7lLe~S*sCeV3+0mR-jR0KNJP+C8f}dS?fl(;caVT-~L8@{Uh>A*QltHkVqLW!0wB<
zZoimqYFHMkhV!1$GJeO9ST&fwDj^U;PV?I^<6~iFq5ep-e{kmQ{%(|Cjh{Z3M6wXm
zTV~S;Fr+Ih_d+4Xs#6|s_6Bkb7Wz=o#c#s&#f0F5I}5jH(Fk_w{$dNvyM{9WJ#~U1
zHOOOM<tW!S+@wV#$Zqy~u-_4kqdeP38@RPJq|>iX2e<0=8u{sOB{PNd-|{yi+-!Bk
zP&Y_P0~UpATxJUD>JqT~{WF;)j)PBomx=RDgwu238X$QBDrr$It&t4f`#`Ayk->HQ
z=S!`Q(T36f{z@1RgJ-bJ#xgxSdm!IMHRm#zu3ryblop3E0E<TXB5c2m?_3Xdksd_2
zG(6IvjP__T(9`!p)KU43&DrlX`b3kE+J%=N5TFQd8C^C|U%mJ`>)%GQi8ysd0{33K
zZjDJ7s%^8K1yvOlqtE0JSOp{D>==NoY~xLuVB1msFG1DTlVHCOp-dObG2(e|2?zUh
z2PHwf#HsvAeww7$P)R8=CP`l#y^o1zZ~g<<%K7N9ZU^<t2VXtID1&MgWt=&1S4>Jw
zRN<w?yR@{X!eRL<JC2O}jr-?H&!>mR-z-X}FuTVeM8_bGWJJ(`D6EOOL@`)$YGEFk
zOCjjM-2e1T%iL)F=wdn?Bo?c<M9TTL`cJ=06x5cIQIe%ni{3N#aye75LP<vdnxu2Z
zYu)>3lvH2G!^0haGww14XOI8~>E9n`l_-0i+MmFYfqrZQ&soI1C5eb|wMrv;St*23
zwcw`xpCFNlKU5SC*x|>=Uyc0q;xEbwowAfssf<vw-U6BA)|HI~$O%;7$$k2&HbqIh
z;m(R8yST+zeQFG%<da_r@uF0u(NJtZ4+Q+Cwi8)ZZ{yb1+Y4HKMg|ABts*fiqp0oz
zw;E8XiFGsKUENC?BYZy(2NurZx?PDyxvYeNnj<CBGy(-y{J@&4n=7NXJpFiW)f)K|
z4FxH1t1lrjsvkdo%xX=4<TME<Qz?@Sz@~lp8Me@lX`o(cHLr=9n3{gQ5Z{yo;vPAl
zWr0RvK|uj4;>OXwZPYF!$Z_|&VU0Sfx3OT^WLE1kkAvAOjYMz>E(%gymc|@C>0nLh
zoV;I`zPY(snipvt3GdXC3Jy|X+6t1vV}5w%3$!b%#=bsow)R^0m2b{{H3G5@rHJ)D
zL>`i<4>_3h6{+Nt!6EO|9q{|cPH-CDL!D}kE9<W?Uir2(gx{M_*OoWH#b-4rws7&%
zC0^dBoZGyRp*+`ZWI0&rUnhNPq4Sdjg@D6T{8u^FK#_p(l((CDAiBWXc%gM=d|@~p
zlOA~8kAUJ<YxxFM$5=~CsdAtS#FGo!?grgQxWvv)O+9#)!A~*dc$34XGA!&WcDvNv
zCYWiUc0YXC8ZQtRqXJChh;;D;Pd?EFzNrL-wL`5fn;#cr#8SF0C|i3g5+e-=iHHVH
zDQYI$D_+0t5`2eI!9_hlYigm-YNW<ttJ?Mvj1a${-?*5Ql_gna(c`&$D%(-{xsj4m
zX>c&_!^%%9K5I`;-Sby2U3+?vNaa$Xm0P{nm<n#ik@wcdc6JwWgIN;>E34aB#j5qr
z`r2Gbk-kwe7ocUF3?n2F{KSO2Aj~3zcQ;nP>Q+;mSBKjSndp1Nzj-)cz<veqZn&H#
zF@-|{ti-?S!B5G_Ii7aC@HR%W{hhmj@r(*~tKXk<*Z82PFw)q+U3g>n)mSMEg0@}2
zCX4my{hSf~0Mq?{EN1?*3z+EQ60Q=iE*slo+S0HvWCTJfDgrV7Tn&4YMLg=%xTLJg
zLlyOaDenhar+8AoXtG>@$yV3?p(ipl^iM-fULG@L2)*It)Re*WOl6IWW}UN4^Opf7
zcXW$Ez-`!zcN!HDi2Gu~T&O1wM$Td6M=iy0Nwlpi7oW_uC9HH5d;&R7{cf4-#wv2^
z3w-n!y0Rakgby^Y*Gx}MNt%#SP>fW_q2NmiGDq8(i03iHNaU9rwag>1p|QlPm%>Qt
zR|=JRTqq3t`S}62(OnPfB_yhGqAvP0GDgr{kCz+T2Va&ijnANC@)t4Hk~3$zW@H~N
zb;b6fp6w3L4Os2da>FxYFm*Tn5a1syY_r&eM$kWeLt19@g9(r2pQ$~&U|k_3Lp;(L
z@&(R9fes3rMEF)`5!&DSdbu{OyDRQHgv$P#OC$6@yr8PPaGiOu#$#-$MjNYaaaahf
zVb&K1UQr56M`O~Dc2G`y&pHPi?^O7@?`*F79A$Q}7rKo4OEEf9ZfpLmta88{8W*14
ze&Z8mXsA{HR@lYN!Bb~+II?Havo9&ivU2q;eKDNNyN9QA^Awmu;-#gls>a5Mv(Glt
zrG2OIeP(9Xb@oScsN5~WZ_j7iC;;{Vr};tF1UqyuW})2sOGTY!#Y#uwGAon7?%Iqz
zzA+e1flSSz{}6V<oLt~1+&%0PcVxWY($w?>v~xJ|pFs}t-}lE^5!O&Pxj3wl^4Qn`
zQ#^uBHaH|CGX@fJVtDkw#jDve&#Q6njAUTLh&Z2Y6$oWfOWHcD43<F2dMNGeu(AWj
zI0r_DHmGcz?H0f#`W^DO_Kl!4iMy+-2qr-o_e?^%K*X5+5P1B;K1s}ty1BUma_yuj
z(gOdQ2?60IW;k!ZS)5h*PMrG=nf3fWGOmJZq<U?;altcfD$;g2v97wbC{F|Nae|*p
z#9(nimdJ)gC4fka_^XWUdyBGu%Pj|;e7^5DI6>D-zi(Zu4>47%iim@QReZuorUIR{
z()XoT%zyGvmBduVc=NdK?e?a*I>lC=P-G&{eJ)E267$c2eVMrA=FOYy8ylY*`AGaf
zey*?E!=33+#&h%8A-8Iijf;)(@%3FzO)~)V7>h=kK_+85P&*Xlw^3|g(=##@)l(+A
zcLHa4c$!-hdHi&#J}msk{Tr^j(BHq0x+!2|vRum_$7}Ao{!;;_(#z3*_2*5`%*cg2
zbPL=qRnk)=Yz3Pe$Sbu)lVA32my_OAh$<*J&2b3|#+|--Z6ETXhavVEMuVAYX<f3e
zXd>s`B*eyipCI7YR2+CmvKPV|A%{Ct{PR-Z+*)7O;~#75*X*az&CRs5>5*Jr9-Gwf
zO!eb_(d<zPF3H+67hRUNjB@RvYbDhwHAXRZANYG&;O>y*6Bx_#bhf(~1Pe!DMCb59
zFny)Rgm?F!Id9v13O5HJ$I<iD0WEW4XsBeM{Cc)(VPbH3xwrK%B@=}v$HRReR;`+>
zXa%{)kq%dc9!aSB%|C>rO1gz$<_ak2dK~tK@&4z}pXGM~>T<HPMbUH|9AS(>o}PS=
zr5wlq%%~wQme<~7G^MH@s+B5R@J>Gt3p7&6RxfkevW%oKjV<mOb}Es1{FtHS(uqk9
zhW$XdU&ZRd<dgPg7B%I7(%Zi_igGLj-LN%2-XuZkkJQsQgbrag-qPH1Q^5Q+lrBH2
zik%G)v}XwXQ{(6!$D5d&=Yi-0Q8G0Tm&l*+y<1jou*a8@k%>TtarCf}6Omh4C;(eC
z(>;Mqfy26)NxHsW8-vC)ehGAYIE7+X4drLN^QeeTi*6@<fA1<c!dEv|35~HW6f<-j
z{^BnVzF}g9jEY>)Pc<_tAIEct>5=%bG{nJhH&?YhujBD8XfdQ7O(qC9nSt;N5uh2l
zgzAcy-pLk#kPWwrj+QPvH(D1z6-Fa_mzT-8pT18_q^zs>`sFj0!nQv~hP)C$q4XL~
z2pR1OFq&s)WxelKOgZevo1|-r6RD6!Hse~c=p>&O6wOVS{OnF7e}8h1vU3E;)sgLm
zOIHUaFNa{bJ0WKomgk{?Asv*1+rbwCuRBm$V4ZUb8NxF2_UZnhLY~8|D>3Z|O_1YQ
zUa0tK*88jpgXz|9YFq5Cs2DQiqyIXsbeUYx;bJ2*hv4U+-z*j<{f3w~=JVaCzfmk*
zSLzHLiZ!<jYLEIBl2W_FGD?_Ob*+jDWB2%Z(?Wb?{?-Eanx9oI9NK(ZDj^PoP3fJ%
zoeX@Ee*-|H@i+v}b!}}eNfj%hnOqqWQ`FBwGE&mr?Y}zVm@eTXg9qNpFJC^@Z%BTm
zRFl&2UiVW5D5KK^p8^6nxj8{!0sr&7XsSQd#!Dj=an4_7QCcnz5bKOY%iV%n=^yE6
zKfY3!%Kt?s=&T8DsLwwzSxu4-UebmN3Y|)^gtf{V8gZOg1bG7=fYA+O)sbN_1Z{b(
z`$nvuT5BxN+3OsfOxLgea!XhTm_8XP*|#i(5is4k{JQXBB>j<bGE1_A{Z8`_$CWYD
zzWR|_1^v%SxHPJ~gMB@cb`2qDbjRg^ti|30sSwr|spf-!%u^c}D3`Ph+i+8G=2D=Q
z4@a%@lH&!tZmn$G)AH7tG=whHGdzF$Apzp*v!N&pKzx3`E)IvoO0C9TE(w;y$PJ%|
zQrJ8VdT#L2KrleCOp=Jpw=xY?x<W)tT?~TD9RotG;#_0<3aapzAU_XweDpCKticfO
zOHL+D{yuAzXnm7KP%GDAX{3jz(n>C0eN4gt@n$AAt6R^0rPHl1I6>)gK!{v_xrIwe
z;t1)SyjMJ@6Vp%`eZiZ|nK$p>v&Y_boqeC3&4^+P7vCrWEdA18RosNCwDkP<SAKE*
zL*1@9_Sl5+wP}_m!P4vM$z}Fu<{$3w@>ppOCcpCQU!zb0z&#z^X2ZcB+%hg4M(a=D
zsO^R7eCrx8!vttU4IZf(u_|HbPyHXF#yre6Z=khR%3<fUc`R%8xi6K!>d2AWH}B?j
zq?Pu7v}iD6rjIq?2;{r2>F8X*&6A}ND0I+hO)B|p&xm}!yFQQ6hVyr!&@n*fKs+4T
z*`~>6yxkhlqYo83KY!K6LSJfaqYhqOH-eT<X8dg0Bn0%_)t&fo>J>HCaiW7EMtW<r
zi&_ko<Ne%%KymWMOUDeaExk0XqrvYoCE#WcY^SLl+QL%(%=)rv`oZ-SmHIG9TIPpB
z@j#{1{RSkn+PpMlz7HZWFK-b{%MMGsb*nwe`hGyEXJeHoOS@G6o#x>>xJ#s@29mR1
zWt)lvW&?mJtr~poF+BA8Xin$9Os|6-{mapjBqJCcO<B7utVSrw$p!VMo+qmh9)*Rq
zaxS5#41S2`zOE_8voho)vi;F(V>h2MK-J2k-)s<oXRK7i#K*(3I@J{2N2Cq-B^%CF
zvz0A;-nq^{$q!z^JzPagZVSAX{0(qN-7w4mZNxo45Gh*1$%Xqz6W2}x%=Y|o{e%=|
zuD7PGe~`4O#@N9Q7n~pvP`d$fno73nB@S<zGzK~+#B|Q=OJSn(88ph7(__57&(4!0
zJHiDP8Ez{$-lCz{jNiufD^|!#`KtL*Ti)=IgoMWM`K|TH7a8o4J*D`pE<d`F5lM9-
zv>xfEPNYt~9%rJ$j0$X*7TZV$ia9@GK2nW4J$>6-C<5{q@yl`asqMdM8r~{r`mIjm
zw<@*Jb4O4|0xTz-$p7CWqma(CUoKHGS*p!_lF{wFbog8+tG<!=oJD>U8~%BFQIZEp
z7Q708bp4o;jO)uTYBC&pTb>;Ffn`oa6N2&HrHMLXJes4~P$s{`GCrGhew2dDUPhrQ
z;z*k=M7mW=?{U3Oa9Raz*!}(%A_ohb!892dr~Q!5(?>ToqZyen&5X~>n4tib0vxp_
zuw+6JjC#8}F^1610LdXKLsV3o7l0L~aK<H#RLZ^n`qF#q164YZPL$QcqN5tH9F*v&
z?3|zpTAY0ae2Vu<k;DM>fCfoIv72-5!$)Y8L<8g-6yK%ZI)n4!>TXL$0CY$mQ2=7$
zx#oJG5~ngU4wIG31mp&fQ20x6rvc8K03B+4$2L%Y!^CJNczTIBnkaA%*~NE?jNL3Y
zO4sw!dhCF+L4P|V4X_h)rq`D<u@l|;l(Wo==m&h;kARQylgR6n-W_DOE*Jyv`WzM+
z*9WyQAB{`e>W^@m-9X~v_}nkMBdrQ7ln(y$IJBCb?u%9bNI!WptD|zx6QyGE!u6q%
z1Fb%Vni}aj*lPCvx8Rd;8b+M+%`MH->4q5@hO1p%vscox3-U74zkn)y4#o16!)e54
z09|XR?M%WZ#N`tmhI}*Db;|Ro34_kbX2@Y+%wj-CD=2?7X2)R=hh7HTK5o-oV|j|k
zp7h1}!1$k&dia0z7XIG@6aVL>|HTbGJm&xJG|T^a>3@fZBVCj>9K;t>M8!2pQ-aX9
z=}IX^m}Vr#o2jW8?)GVl=4N;mR0o|#)MEKfSb5b`kye=g;2hhOp;1qCUK$l|0YjmJ
zszSR|l~+_AAwm*TcK&7toj*=Ijie*aXI&E>o%S)}<o8jRe;H<xp_u$8KrLAh8&(R-
zF*@L8{@Egq+`1emQc`i#!RxTZ!0HRijy6ez?X8VEdbTO!u4~DSg=@kIGEUJOwhLhw
zufZOH!!Q?a%f&}0?3P5@{yekT>)UODT&iFX3CJ;oRrcP%W7e6ufDU{<TH#bA7YgU(
z{g_CEpSdfin&%i}U1~FZ{UjJ79CL?d-9epU4b#zF=iaajKrh(Oyrr9@L=yLXcN%9|
zCv3Y&WsehH@8Q`CZ@5ht?iWx6E>GCZOZc8(pX3R}jWS1fkO{B6vQk5bs8230^1*e)
z*iks!wtskxM>vbG;C2y~6~*8$Y(TsJUgq`JPk{b6ynXwTNorQMc6KJhr~D16|7k9L
z(&cwvSm}<otzvQN=OQuM;zgLXqc3Zq2RU^WDNiMrIWF7$AN0=eYElIa?|R{5?`7oO
zc1~)Ke!4Ecl?%QJ%S)li=!gzxdai}nQke{6o>U}7v$8|kSzMYYS4}u$Ycz3rXv*lv
z!7x=^0c(GV?D<{P)n6MK8~J>7I@)J^YD*&`z%+EOr3P`$m*|*oB|mX{%7{3}ZIU3O
zr2Ek7Di4uRMku~ZCgIbICvTy1pjNC*wX5?=Y{V)p6UX))#0|XRgzQr%kIWiB&ffB}
zHW?MeUxQk?zNTM?G)S?5Td<=fJr;e)d#B>c%=48O#^i|bW6%3N|5V1@&zQFG`h&?i
z4Z=|m-Au!4Qx<(ecMzSg8E;o3d}**bQgEMSbxUL|+dPcjU@OxN@P>4l-}fYzGeE@h
zc4#W_&i^b>p73MeRqd6J{yrs}4mHN{D{*lNl7gP2Ees4+2~{5I1+>RgBneR(qz6!>
z6lirnZm&K^)0n_{^H@XmB>bwVaP(L@bcz=o6(e4J&aIE|@vMpm#HDJ2AX`X%UZAXn
zbZ$BF`|mHn-G?^wzBXpz9>MZbcUFuo2u0lOg;CNqzKm<Ov&*xxq`@Z_Dy1ZmoHylZ
zXrhC9;};iOl$fKSHl1nxq+ahQix|93h8Xpnw@i{3ncxtnGlALj@PgUkc;%KG%fDZq
zMxWWGm`;sgo(<+U;NQc)_512n1bd~KI8m;5BZ`AuU3#T2W*)~Ezw=f^hEZi{2ktcb
zMrOA<1sw+!dxm3F&{-^*sj1!_%@)K2qy;CRdH-)%J321K^!2P%`6!jP{nIBOh7>e=
zOF!p^y#bO`wi93CSr6MpJIUee#|{p>SRG!z*pP!?B4TV<_JU#M_&Wp6caLS97@1@i
zcP4x?PV%LH-z73_(`3Jh1KXIC)bQS?8-tgc=@iQ)uvLer$XLZ<WNvoD<*rY~F&}YR
z_#b8zDOU03Oap?ii_Pcw8F~cv$8(4Dgg_dk0VltRd0tZ!e@>*M3J1%_d#uNm%JxES
zd(akon<O3?8Xkd+jf;tmkm6D{yryJ0)oXAqr|B7=JSTf}pI!j|?*M1<3r|q{>uYcs
zI3DExezo)Sg2xaJ&S_Dp2ck;HmC}D8@A-dr$o~#I<iCRXA`Gz~gm>%)1_rl(TSGzv
zyfta<h>rIa9OM2pAC7+){|Ax8@Mn13Bl^nmT8I;ze7wTTKQKp2Z{L1WTzmxInWH0%
j7LscC!E@LT(-|Dp*+hH6J`_w*aB!r=WgirXJ@xt*_a5s4

literal 0
HcmV?d00001

diff --git a/ui/tests/registry/evidence/registry-provider-credentials.png b/ui/tests/registry/evidence/registry-provider-credentials.png
new file mode 100644
index 0000000000000000000000000000000000000000..2fda38d5ef327d642436b436921e89bf6a62a9a5
GIT binary patch
literal 84649
zcmYIvby$>J`!#}qf`F0&0xI3o4T6N^&@ptUfOMmTNK1Ej4&B||-3>#>P(%Hmb9~SD
z%^$#Z@yw2U@8{lYt$Xc2c{vFTG$J$v1OyDpucC?w2*|*nh+{7hfnT4=q@E!lyhe}|
z6;^ghK3qoD!!dnAJ(W&sXnda|27VXR*vQw}%bEPax4CVu=f}4)mL6MYXJ<wxe~}DE
z)t?QGwXWX%)#m(hoc@Tbqe4$Dal5JR$9A;ZEw?GBj-jE1zt&k0b6<cqOvj(-yuk1H
zRWK+?(((#5+M@Mdh!6J!nihhC2N+-Hzg50vMa00zevuug!c|klYssz{h<g~0UHqj@
z9So+TqWT1k7C{~?b%~R4g=^0yy*~Xih)uKd=(QRD7ehojSuogt<7<a$_5?G?NhE1p
zxu2#<kyxWeBRBZR;CbTcR)Gtd3d&h#!qW8%P!;d9&Tk(`LEnv3Icr4KbY6P#xegG_
zT-or0nvkS9E1bNjfv6w|rn086#CXop84?c{bmdfcPhl144~$vyMVE?1fio9WUQBVB
zo8wiGSB~B$Pe5im5I`1+Nrb*%;3|S@H?4?{DeQ>_j|9r;4lJQws6pjeF;8-~x{Bj6
zq_b7UN4j<@^mH?d#&9A0f2Q^>W~=i`;*LMtAWLZ9l)e9GLhnmeieE6E?=&;@q)Phy
zt6`eCXspDax7d>tI62W?(j3b6W~vJcXUwK7;lG&nJ2{XpxS8|KraMjx9^=H*z1ZqT
z)$ZV~OJ0!rhX%{@MMdsR{KpUGM{&47cWX!!BJngUz3CI7`At|&f;mArzc{|8Q<4^U
zy-_9R0YA_QDx&NV)UYbz@Iy@)i*>g%`Y7Ke*t6y7Alq2>XF?9m=yqsz<=d(u`Mw*k
zhSr^RwHJ0)67Eh)?&HBjiP$ge=8)dQfj!oiSG1L86qF$5lEY%gGIRaRx7<Wuy$D(V
zQaEcU&Id1=wAyW~F7wq8^CfI>lXedGTS$>YB~^3wX2Xw3*8SPMwdEL%pP4!An$p53
zOlQmvEOE-yQPj2Bzn*N_9~RchJ;`1G6FTLg>7mxen9w~7So^IewP~k)6d==4C{FkN
z)r@$UDw|h9Dt0jq(jW<9NePVJU9a57w3}GL8my62Xox7aQp}Qivmp~?+E)|!{Ra8Z
z*O=rm|5(jRx$jths#BHRE?~j4*t{HR{eSia0vGsqZPNy0?sy&9R%b?!WSug4hg7Y&
zFL|ak1h-hPQkn}%nhdcd1~#bliSkJ%>*o{)omH&O#EkxMB2GSO>*+VOt024wL^H3U
zRwJxo0wwik74NCQ!!q85dq)(YgCC$@a8TG10sSMY6f)sYS^=%7GL*oCNg|$ImD1b0
zFL6H7EJznQCZEW-9_)B-YSahuNPf~wwmGgxzP1&j(!5<{U<sH+&T>JdY+WoASLLIV
zAUc#Uc{HFWY-FF!a2Wn)7GPLH9G0@T3%0GUI65^`+>WVIuBfom=Crw;bs37LT4Bx_
zR>aTlU4)COx1NNu6U^7uc07j(cab6aZ~N)|bsdDyYGj~`#p_fRo3<+`_2irAskBG^
z`P|u>8lap}6)pne@QcQD7yT`Dpf?(F!GYe$ipU0z{JC@PtIfI^#W^Ihiuc92xI?%X
zzs*!~)<7STE^d%PQs<*VdFMQNzEK>SKle?nwOyogrJI70DHj+LYBkc&c5pFE#{1jE
zf(vgcCm(fnb^4z;&E2j3nbI1({)F6PVS^}8Ix#?+?UiM$pY%Il!qSLpqntHt8^((d
zthV|HO#L);sTWhQod(2IA5M<v-GjrFE{jq`p255?*)dzt1~>OvKY<KHwjJxT!7*`8
z_1DU3&u746J9zgW-@iZt`iVxVCR-Hj>ir~#DjG+FWsgxzw23PyMXnyCnZT-s#x(tk
zf&V!;fR<`HXE{<-H+3MVu1lsARXqQ=$5W!H@fS<&v_-r-2PlwVrP2ir%Wp<7)#sNY
zcwIuW1&n_3&rCk1U2)wm(W&LM8Zd6JPtc;<56prKQM}U?Z3Edpb=IHeuJ?K5y0Cw3
zT|#`;+op97(_GqM>oqGXhFoPq#C0j7J3b6A1-ErC?SdcC`wZEI2<rT(|H=FaX5#_(
z>gV4(IP=g-@n=7bxzy}`s7~<{5_!d>L3{J%9cD>&e7Y;bPJ!ii!G7MEnT4B_^EeIM
z?jdxVVnM2f`5mWvx<W((Ujp;{=ZHCM#wNB5i1d%zTi*|QjB|OHoKZj?C8gmPyYGO$
z)|4{M=a{-d>P-`x2{oN%HBq*-y?XZc=)}atn#9DGmTu}w(jFcjT0iHuwkSepyGm+g
z4yvoG%d4vm)#Mnzf3I4JSC81*G7=v~Sh)Q<x|x({HleLe-wPX@v`uxIgj9@Aoq#AM
zL0^LGA>vT&tQN!(Jo%qKwB452G&(X_EXZ`J(GFzN7*u*s0c_~@gW1{7|9Qa>q&B|b
zzOSms6lU3tsdDZYpU~63JaAWq=m_xf@#)YoeGp6~ow7C-)2MrobpVCl-nF`%Z%KYv
z&8mw^7xw+dVKJ3{sW_Gs!Z<WvUe4Ybi^xK0unr;?5by*;YHMp7^rahYcu@7kes(om
zaL`NBLj~;~vIoP_GUGr0iA_z7kB*OzPEL%a;!65nvSnannfH;uKbK|vhh%^MI1398
zPyMR^f{&7*aNP_oS5!VeH|il7nb6QsM;CsgPmBVLth_s(W@hRxbrb%sA*8wx>mzUw
zXH;NVm=^&NU90>uxO(qerlHoBeiH`=$=7G=PR-dluSBs5g%+~fBq=GWz&ShB1q@B)
z)+vmjGxDHtpMZs)KG^B~Lu{UuP55VM0l~tfVSzr1IKn^SqS4Mt3a$Rs5Zh4}t795y
zSXN)}8h}Z%>hIU&a>mchtk#{`&~Oi~wp7cPUq9cLJ~tPc#K^dGI$omubb3^23bMDi
zS7GSgy*QXD+1=lFJKI1;p4K}u*0T=yO#f1NJtE==T*JxA8hMzt;h-8*=_jP5s6=*m
z!++_{RIkGoC&jTO@OE07ZovSoEvh`_c_M)vp`s1rVBsuOYm~dRIEKUFtVtHuCURKR
zsCn?}10y37c&i(fU@a{&68uTiz-V9;<G`KHBd3K~rw?__E=*3An8RcX)gZoBSor+e
z+`>Si%Eb;{Q1eEAU*Fg1XLFTa4;}s#wKeh8YTY)aFg;j|Us~(aB9~1Un^4!R&p%s8
zekT91Ph;bwZhwH1<GU)90Dep8p4nw*KCg1U(-H6S@iAAauC$Ddd?QWwW}YBur5PPM
zQ-T^}<mu^Y47U?{*C3bDKuSs)$D}RuRbE#!)8+8!frf@A-~Bq(%Zr)j6PuKpR_5D`
zqAUm`H~8FMyda3={*h$*=dByEa03N2?(N=zTA})Qb*8ksk*J9()#9G&c=yPR+;F6w
z=1}R#(9~3x1qUDT;_vw1hllUP>*0?3PDf+o^W&0gYHCccrH&9=N=u`BzoaBqyYTC{
z82Jr7W`M0zz}2{=J{zldpXL#kGGsLeGS4kDzNPC%x2@@k!(*zgSC%Fw6rIe(?$)Q1
zxC#miLa?hQEX45iQoDR{kWZ*U<6ja310^X52)NW{Z~Xk&w-;3pUzaleLP62+Z}s{o
za;F*JZ}c>l)}^ZWcL@g?V&8&}`m-x48=X%gqM|$>7N&=WWH`vB`-b{noL<`(Y)P%(
z4kyhH@X?W!n2zee0^u9o!Po~Xt!ColJr}#cB&;v@r@b%tV}{}fQq4rQf!vi4ks3jG
zFPL4JM2y^uovX_dB+0?Q6crh{A*PF0S5Jf1CY5EQ0LQD<&;ZZC@<|EtVlrtQ6mSoh
zn*$`K3;9Vw<3FTyeJZ1(r2T`|-@MV#(AW@Pz;d*lHo*;yL~o0(6*!oV3vW3T6)`Xn
zMqs+n6Wd<hkxdG^W1%ZRZ_Ax7RNZ_8DO_#Gt$`vlGCmleG&MEl=hMuyNWTmxNjgA#
zh4D)I^$%B<wV$Y@|Na1b{`l?WBoi2`*6?ZegUV%P;kIgNN}l!?tRy!T#v-*$Il}Rm
zQUMB;v53nJj#wUdJ*y|ko&HO?VtxS!dwZPLOIw!*YIJ-9nK0th3Ef;bt-5@-jEoHa
zRJn_tVcll80uQLcBTD|OHvVchzxIy;<eRd3dew9)XmUm|SqgAtiRtO_l8t@*^G9v4
zTZ0cmap@`jGL<Nj;(EmXG%Uww%LA3K(M!M$9G^7!EqiLQko)mvcp_&mn!Sjkh=F4J
z^aL)7p40b0G~0HF*P?34kjyYH#7BQ43fou2hjJBJs&(dkTbB|Sc`ehsasp2ed5S^@
zgZ2jAHqXPs$f)D6(EPFc-hW4C+S^3*8FvxIQ(#49Wsz>H7cgC7E^Dnur*EjJsD_4{
zFc|Fc(CVMO^qH+m(LI{c!ybn!?akJ%y>|L@$S*0@h6WG1{%HPJ_GWk+NpE)uw9~%M
zNsbOF&wggsb%-x?Org8NSaO8HTt4!8v;<bByx0Bn1`lF!Nmm;dRI7Zqo#;hL5c8Uh
z%+y%Sn7e3ik0ypBc&b1tE=aNifT(4Nlp7lcC1T1mLqQikP@0rZ#)pc?$f)pC{({p^
zPnHRYOF=0KFLZzZ1vfL5(oKxVOLpn-(UY-;>Md5znVIGWC$>+Y<i8J9eirR6^AK#6
zz6;wP<YCLSWbC&}Io!Y=jI+1PMJr4HV?~g9I9OR;QK(gb-T4#tL+gp|MK<0YR?z1+
z{sNlSR_6L2Qg%7i6$l^fAz4|IW%`{u&2FwPF7n4Yt4#2V{f&)@Y{{r+NGS5;|DYCm
z)#wZ?WnO$LlTb_WRB`)h5MKqA=4^pd9wrGdjYeI3k;=G*%H(i~x2E<Nq{Nx^g9VOK
z1y?hP+GpREP^wD!tD-zNiBvi00(sFWMy(mGlxwZUhK7fWRP4RaZ&;LGO?0{mxyd)X
z$+EH8`;%<X9;~lFuC*iO2t?No)H$D64<}X+4Gk$Xm7Lw>P#_dZwxV4*Sb5x!Pv+U#
zWsg+inMHfKDnjGl=(r6O3u}WCx(cjV=3mj4V{B+Ran^94<NS_@_>iLuEvz;fSF^JY
znE4j^Dwqi+m*%GbxXR6OpN5`cko^?xj*U*TxQaVNZBob#k@Br9`)M)6NM+&Cw`g5q
ztow`ZtmDZ_3R)}s+0Jkhy;|wvVy(^f@iGCk4($3m??eh*Wi}3+WN7`b%z}D1i8aQv
zZk`mL1My>=+(G3Oc8e_yv(|Cr&061;EY+kQUR>mR|Ncj3WVc3!Oi|dg)dsokWY|zs
zv6X;*l$58YrWzzVDw6bsAbE{U1V@!aYu-xhcW67JHj<;7Wu#Vl)z#7BYTb8Ps8v`e
ze#7?%i(X8Um?lA5*l<UVblh9Vq~7mQOgc?t_4Wjg&Ft=u9<t(VlEXXwBOxJSymseC
zX~)a+2O^fqUU-a(t#T>O87DCeoix8&LabzBG}4_yiI_!O4}jB^m6ct&DgK<h#7e#J
zyxMwv<346EXoqet!>OibJ2^Sp=}nJWFzSC=K<N8<@l|AHC&w5v2`0lq%*>D<+OZcl
z!Jjp~1G9UKw6y3nz+h?$uXK0Jv-pYTV|FoJclW!HkdT8}NPzSb(}8D3&9_BfK0Yq%
zrJI#z_gA)tW=9qq$`Z44i2~BP@B2n&!$Ig5{Zbyi|GdTtRQEPqAc@|5aWMrJpI-V`
zfgQB#5(<TAr*_zptRFuj^VFBe9mh_XR$ELL0zKo$P$J9JEv3jNv72KP5M1Y;dQnC)
zXXp`*7{!*CLUS$K!d*{&1bexw^E<g%f*P**&y2^Z2?zIM4wI&6wB!uLh>kD<a}K79
zo{pCrv%5s0^NA-*9sV1en<8Jnn5&beQJ;SaoIQljzyI{<>to`mvO_VDi2Tp-=6J^@
z^FU$*b&9Q$urNPAKNmMQ!B|>j`nl(&kTA%a7+o&aL&ZnK%%(JfZ}Zs&suRrPvy(*|
z`?>A<ql)y3Wzp3!)hQ(yDyQ0X%F1=|LyCctfv&f=Kwb!Gc&%Pw(2ce|&@GuVHK0`1
zpUFZrRg$OI(jiS>+1ll3K|lX>xOL=BYZM*9wDpDxOMH=KP8apdpi&E+h3_hZ#U&+B
zGR|+8)d#a5KYrYDKDisa-epccnXfbrP2{-0f52T@mEnOy{9;tb1!|QP6^+7bXg&aP
zj;7`!aQ5y<r#XJ{&faUqM;zzqPr#B3u+iI@85pZDFj-oh>dWJy?O^*18+!MuM2lgW
z&!h)6@A>M;=&%8>fPyw@6R00G++uU<`=KZ??_fhRE{G(gAc>nOeKP*Ds`q?cSC769
z_40*`FrMD=@d%7IK+<7iV#374WGBJH!^3_T85=7;iASfbhqa-^`fJOSuhiycV@N_U
zdDJKcszkgRlj)uw;qC>P^&wL9Nlz2xtSz7&=<iq5N8ht;=(oyp%FoXqM#fjDr?cKi
zgwe+Y+wiwZYk3fR7O!w4oRV0m2Ju>J^SWipZx##2hvj_nN<GcW?Wzu#_FnUbPnqtG
zK}ZM52DO)74aJd&v1~)t#y<{JOl}j;;zSt<!7d!$y7Re@@;c@mlq+_!1l0!cI6i90
zr5-*+J36>*zf0MlF3l<`Dl+>d?7C~$A<rlfJ!FFV>v=1h2hKa}kJbh1Eh5tcF_id5
zTLe}sbuYg~4wZ?K%%$<Kcc;-Z42EYGclRs|XuEXpU~lPI2e4P-cs)LTI6-@oMVnjA
z%KTPYS!p?y{<Gsv>Mi`&FMm9*G=(W^eSMuG6IlRS`%90nCQ^e^Kaqv)t)hUm35HwM
z^L4U#A0)9}ym+0fOKD(WaR2aNIhD_1yY_iu9RO`pz*di<xqL`QL_tCEyt~2^GRA=(
zE!LWU7bmuuDV7wzzP;F$^pCTT(qi^M(r$EOAxo~;v=lH*y7^(x(=XP@PA?cwN>~nI
zTw0LlmveJW0F;rNCiBN~zoLoo87FOU?ybL3(~I$fqaH36e3BnD3O8$KqG^LJyl{9}
z30O?4G4&0}aCC?2O1*tRO8O{&C^6U01-giQ44ujz^x^IriUVjn0UWPtmTE$KC)wCW
zLL~Lhk;TJ0GQl0epKqUGr=l**6w#gOpyy%V`w$K%BqkUen{ID!FU-$hAFQ_8()%Gz
z<Q=ECwLK!C5mi=H7-VMItky@xzXnY&=ME<-kgJHM;%95+KK*!xi5bRT?mT*&-Id+6
z#LvdYR@n8sR^ARPK1p-S$aHsSXTV0W-fnv@$zLf?PLlb9S5BdmVb}|?m&nsu2F7|V
z%HB*<Il6e=EoSg4QUYoru$haCp6zL0`<J><RplFu@F0eKUrC#n7;lN*tmJ88)wlae
zPnW1jJG7K;>?K9Ux?OGf`%%n)K4*dn2#^Y19j}yE`uqEL7&9_5&_&Zjtc-N@i!DAo
zil{KlUv1AoG$FR{IBX(=qGG47nWK{<u|KrTC2FCbt)k!F!j8m^jH>P-+D6J-i|Ogl
zJnx8ziP`Mt_8THsRjqZmY@ep_Y#%MY+8^48{qBmRLR07~RxZFkLW8pzQHg+<b(-Fe
z9MO-uUmq)|%=Gl++HDU20F2KKW>#3pM`!PNyu|b6%a;V$-FLzT6}GbC*C)=r)YWT3
ze*D_&=AV4{*VQuSCD#LOAe!zDgB2x-gm;O+*7#vSBVM(0FDx}WKGD_5At2b_)~*8@
z<-Xb?5g@iNicJl9<6cqp+2y|S^JfnI+%;^@5bZ3glaW-DsWdtDA&@<g`7P*La`IjH
zE@9vrE6Er(_@7+Y7&TAq9b)3Kyq1u7(R~Xu<JhRk)U+gOz8^mV-Qf!r;*=yUrDej(
zBzdtnrZ$AbLd^?v>eN(JxFngxgoL=bU2?s+9<6OzKC*ginrupwiPaXD&`Hzl(v*$v
zBGr-s6g>dSxVxkNJQdg|Pa;ZtZE9$!`SwRQ^XK<EHd<Q69m6@{5U~J4sq42K7P#GZ
zx~rxkcI*tEa21c6>>aY>TQO<6?oFLL6=7ErH5wM$2$8s`J^AO=gZYBOad`M|A|euK
zOX;MUGCw|;>~1CVd#l1_W9Hudl9ZC<aa>>evEpfN<i877b-w;X7Mnu*x@59{C1cIl
zj<08Kprb;uJ7_@1RMaRtD$8)Z!DT`-D{{g&85wbVk?P)<rl)<po`>h;%a`RM6{Wgo
zzr@88B5U&uyu*Xf2yU|suoS|gZi6H+x2GTO{3U*kslCLbSIxHggg4FSuxGp0_H3F<
z(!iO(Q=nf?UdPeNDHk#coQ>|6`(mAnXZ8A>zeZC9E-o%AtE)@28*8$%48_I8)z#x`
zYq=iAq4Sk_1qIN{gIVaw`_MH2hZbwF!BzJMV(6=$u?HJ`GS(}EPk0lX84+EaZT3dC
zQddo&U=WSDnQxlUp<<C5nV2NT$M@MFV8{`FzVqW;TW)k_59@#+seJmLpYVp{y<BV8
zTmk-r3_2q>!moi2LKa8}iRDKG0OfjcCktgjc{C3eHMdQ7&d(iW2V%mnJ!5g=lG9SM
zEY0HMVk6R0X<xbGUOL?T;^aIWbIZ-`36q1qu_!|94(w7Ev66Rrn{~4pdZVrde}(h*
zZG38KsSD+Pz%K1UTvCLX0w<-Yx(;g@t29=)%9zSjG-1kT%8glfCPgkKf?n>lSqoIP
z-xUV!CE{W%VG~&=m3bTW%J?RtWEyGcHWTz~2hegdiTQfmkd)+PhLYj}Dw*x?78xHg
zJQ<93ClqU(INRHW?I7Ck!H{oOR_{6~qoiQz%PZxE5>kDjG&s$HT<5~VLZD$&(0E<3
zR$h8iVaX&Ijz>cnZ){*iQT_QP064Y}=ww=1>0=3xW}5lXCLx~<HkBqPZB`qLtYiQ&
zDJL!*znbI9DxFmy-%4fuHNQfAd|nyIKv7ZN_Rkb@a!zf%%h1p;tuldNa`HPrEb=dg
z$alIpzcL}Oj35Mz3x^)#(rbab$S0H1t$v84%{0eqF1e2|tjGJ?3v+YxXzJzVWkT69
zzCWrG-gTiNA^DF>G7eK{$l8g=OZ9Acv9!?>4DgD|>OB;_Xm==WbtU=Oa{*(lIZkYS
zt`^{^v9`8`3DATt6{^sm5t)<oIqoZ$fH{a_?O0>d8y%n>D}{0<NP9MBcUMQW4-@Fw
z%DR;%!{VVtEQxE-z4K5;HXIQOVp@36Br`qz2R|DlTK@2VYFz{IFzTP>rpJ54NjrJD
z0m*{;YddB_bpopseu6tW0e;<D&BUIUa#Pcq5pfVxaf0Lt%EAaROLxYjJ%#5?WXn_V
zpBsDH;X<9}2Kait^)EjU;iXBg`9NB?+#Y_Cl%XzVW9`aFMMs#!E!8iLm$cYWH51#*
z;^JZ)3MOe$vQrrB@)G8UmGCD2-rAgYX<eDyNYvd|fGQ%iMWs+R2jp2mOS>`pboTO$
zbA~ghMr4ixZRNXGZME%HiDoUSfSV{82>@6j#Wq$}uT-4tLa3fZNz)YA6rodI^P@%B
zN3z81>;$XeLiM<&$njFKgN}BiNV=?a?WyGC#Pj_UpURc(+8tS2d2$eF97Xz@pU1S?
zugYd$-)4a<za`oherfbzDLn0Hn7)Tc8uaXTVK|8010#GN_Q$-{bvNu>8nI9Qv^iLs
zk^nhRAXpxAXk@^Mov@@!%1{O#M<|V_4ez}@PC-$l&W-cFKGue>1jpj7FlmuUOG~3A
zk9-WFnXEVhWIE*q<JPy9<C(}R-*uZ@gz>-@C#$WkMMd;@CaW!;(kdF@H}3BoZ_l@(
zvw^I1<Y(?;x?vNuUR5d*;iNf6I(c#=@Y3j%!4_UPN1f{h6?sFAV2mrha(<gvH%<Ms
zLvNvcQIET;Z$ZP+Rnz!A#;3A}dyJ6`PuO3Q214Eov9;_CwkB6`!*@hS=cuS<`F2Hs
zobdx+A%TnWJ&gc&NUq~>h)V<Sp~NSW7P)b1b+}RIETc;zXw-p_k>+iR;Axfl<j$@A
zYJB`#_ieHc!g13NHAtRah2UyB&xMG3)_ho-mQ-@Z1B_8-&(ujI$V06L$KMEUu4kT@
zlv?27aXGDLX<6W2tPD}`B|U^adUkBShIT7@`UozR&+cW6(YNS0SjotUi=%itygI$k
z`z)PCjR6a`?v8#<W;z^ufaj68qu`wo?tvy`KZz<vH;T(on=H%mwXl8cg<2_1T@$+J
zPz^1&%nx#vv@4Y^YRdZN=g?ZG(8P{SG*NO~F#*!i@sU!4TQoHMKRQJoM&IOXby82I
z3>1T32+i}w8Pb=Z`{I_03jguCyeb*8i4IyVp8Y9|tY)Xmlj}ly*Ls;l5TU8+wChHv
zi5xB|DeH;zR$UvOZZL1XWV>IQ9kta!r<$*4VF14Qm@OBIuST*>8z!EEt$_YZh0p0M
zXbBde;_%ge*!g5dx+W<;9$-&y?(UNiUcL{G4j7(7iK!p%E56)Z5`(sL(RTrA3|bQX
zLP<f9n3y<GoSdATo~~CDUQ$9L`y4f3Z1nIj`SkQf;S7NIT0L$f;Y#`dV2Q=9XlW5P
zGcz+WiQVGLoq?5*b_NFq%1TR{qMDDTf8djLXnO^biYfe+sj0*F@??{8>G0;}c>;#Z
zlVFu3&bmM;3g$apJUp@Xq?w|#Rm}CcNH@g5q9sE0`mqyD6OXdP)HjcDibbnP0IZ2-
z%sDIALy~mcAC>zpILwy0_@0GodMRXpM~Q!ijct>dC|C{!|Eh0zU`Qq;?(Y3?^q;V>
z(=5asly%{NeL+@Rfpm~3X3Qb=At1bPFthP7vP)^?Rb7v}Ch){^(B=5|782`T?#^dw
z!0hrph_DsqQ~L)7a8bc$$iAZ~0)t;YeDe0ch7xhiflk=9mpgqgs7|>r71@(YI)kq~
zz8fNhue%5{v<$FpQAw-bm1sAM3&T~uUllBw7@3+5l9tNX5n=?DVp0lW2XsKD-cfyI
z&CFLwckA6U4vhRy3%KYYC!a$o&fTYHneA`?*}N7Nc@(`|uNuwBz(@#PqTeA`V~n21
zc07qO$vejn?b)Pt?^oVbQQc7yc39ubj1Zh6b4hKeCqgacvdM1&1N5&PTy2rbmxPxN
zsiO-n0~P2<t>#EFeO+aqU{Z0{BzLNv?3)te;o;%sO>B9EGdeIx-;jv-z>|f4HXF+x
zoLb?%NfWFn7B^6%T!t6tP1&nf$G|6Bt#xIil)Lwyux4&h$4A-(DgSJ)+)(*j?uq>T
z>?8crvJizWc{{iJB}j^;W<(AxY6+Ef`KAYV7P%f;{tBp5?-s*ab{~F>gW;7tt5fkT
zEYtcynI<L<GE>WZx94%9w8Esh;q0@e+J<=rdy1u6JOx29u)ag;q8D#|k(VOt_cTc%
z8=@ZcEsmbspGRNzkB$UhV%l2iEH>HIZ`JCHZK5j|Yqs;#$*F6A#c*}>sp;t8<=5na
zvTsy9fmG;qH&X&=CMx#MdDwCQ8a+eRgV%k1R%cQIRz}0bLXUaXraGg%85*<jJn*u&
z2aP#G>=N&nLX6bC7=<Rd+DfIx!__ShsHNeC&^H9*<#oQSH-1TSc?6bf-FU+;)f$cF
zLy1KbgGogx)r$S4oa|r{-CNqv^uCZjggU4+ZcyNX)jy6ecImBfJLL&(FC$$tJ}lxO
zGB)*b|I)Jm`<Ao+XK0UQ>@n`E5&D&{Vp)=I<Pq)BYZaKOzp#$78kpSuAAmC$8r%W~
z_><*aSw;YC)+Ab}KtZ{Nv5oY3$JzUJKx9~HbRHcY1toiJmw!>fH5Ek_Evv0JB%bd&
zpomOLqW7-ibmy-O4aK;_o<l0pI3$8%&B#WWenf+ae};@KEF|ub^1GY@^8eJv&Q8z6
zq1ng2(cwWUmWn7|W-!c>=Ca7_P@bHNP2*46zrxaYk3Num2OsH6A(aVJP2qN7*A0yX
zh4DaUBpJ)bggRAaKAE$cz3suc$kkaknRa8>IaE(3v==Y*f@HU^_J|1QIACAH<zz5J
z<eSI)ZA92Iao!Qlj&ZR6A<`NS${FkBp|3AY>hLEO!q=gW5lq5gj#q0F^$SpdRaaGI
zkA||+wk-_s>TDbuBwY6P_6CJf8sS=%pATpb#xfFfTDWWv!~lwNU-<imCj43-R1g%0
z#UF32BGL=`M0O{LN2)^4BBJliG#(cLYK>4(2#ZF=#pou*djCg5IbDyYg8**;cUXT)
zXDvvfDP9Y8`|iGA0NsC(c0`xHJ0osf@6)pY?8>xO?_YZ(n~?`^`s7$BAARYA)p&JX
z6p6Ao=sbP9AKw(HK}a=kWTm7s;nbc<lex0Qa7&TE*|xSHCBGF(P42!vB{9D##BQvs
z8(X0LJ+Ti6zO)Y&&adR8rGtZl49Hm?6rz~<CUXHnXF?Ic>3Krzhhk52wdVkbXEy-~
zGyZYsqkZWR6sSrvzpJ9x>xGxHiR>8}d#&t;FNt5id>I7FR$yX0_pg_pbg-vBll?I%
z(oD(sR$b*&nXMdJOD6!`+E6pE$P@NEwb2D-b5R2b=fDREiFiyDzgxUl$2#ZR=H+I?
zAoOFh*!UD2s~=;?P9meC()e9P9AEg`lL?&5NlH$41c-`p=p#uhX$uIhj-`9-_F$*r
zLVjmL!bn%!CMd{RgCp+shVs?FT6~7D0X512+d1V0YFK?lAqRlY@VF*-1?gVQ7Hb4c
zwTHkY+$@QcYJ->(x{f))HaSwIin5W>qDWxAX=x+OKhcEkBO}L`mLtv&e=y$I1-zyM
z`zR%$El9QMzj=d2CS*NZSncB1aoo*t--7w-)k}=;4i55lzjNx1MIE9uF%;zA)KpYO
zYJ%E-hu95_T*jmpSp-zZSUkl+-d?ibfo0Mw5*g)ZWVIX7XbTF$)A$vd1nbumKz?y?
zaTyu<s<Ee7Gk``(uTq#@ROEhpZhW=B0c0&enI-eQ`&v2oSXx>-KR>T5KMiA5pc54p
z9W$9K(TsacADc}8>P5BI%h<ahxF!{5+xeg(7aS$br=g^zq`aI3FWEdXMU2uKelb<7
zQ3)uq<H4B>o|`=wQZ<p&R`}aG;Mh#N&7M&6&kLjr2;yG|$Dg6Z;xTAxQll;p$>Hn#
z`D4+sQ4il4F<}~J!&x=$vAwMY78il+R}jcS`5JHeF7C}%PL9Og4OAn(GJ>04Q20+=
z90`%BYQ3G8g^9S;caU}DgE|vmn&6M|0Cu>?M^`UOPj$DO(~PvVv?ZE_uN|2zteMz~
zs}f1kwUb<2u?N)q?NL%p1t*!TSvcLDwtSV<W;z}o$$5Fy<V_;7u-s5$BVGky1_#~J
zF0R_w4c}8dcQ%zy`|oFlHDP)Zjdt4=Hyz3|GpbmmU9_4!o{4zceBw^-a|D!4&ViZV
zR-0TawVdbQ<fq%6tZ3)P8})7v4(~_`7)~MM@F3nI2gP{N?r7IJY1jeFE%pGtjv3t@
ztYr(Du<;PN59O=1vMR>AB(N)xZ+{w=79a2FYbEP&zpx8y(JE@8vxm4WsBNHQKbw`6
z7h>q;N-X(?Pkua5EFPW9w7tD!ulYT&HS|v2?AplKxWc;&2D>?2**NR+o_T)wMOQcc
z8;|2Yg})?Seqjp*QfR$luhSVFMNUpmMJ2`J7ZD$51_T1y*0>tR9`$^H;|Uo3;<ei<
ztE1%L*d9ulgpr|K^~fETtjwhb2EN=KNy)*;^>()E%X7NLc>Us>Oz0{XwOh~4oRzpu
z+wM<Xy(K#RwOqp4PmPx+6-t>dyu5ByPAIBOzh+7`0#6iutO*PO56}-#@Y>|f>+DpT
zhjY=4xVW^GBs_A#c-0#;dxI!!>$|Ny(;bSuPv8${AAYv9=bcXj!Zi{i;!3NxZn=S2
z4e4t<yh}i?XCHqS*zA5C78cgxe3I(39sD3%^&WLQK-astB5i-5-T^B$h|=#uQAr7!
zl^Dh(q`P5|X~C(O?uDWYO6#3ea2ZrrwUc5^gGi9!Qetv2zx}z-QUb0f;<kO?xZcvz
zqRgyN+u=hcs2kT&8FXn!EMX_gh7*`)hbm-wzaBZ8uJeE&n$#E4>4hjKC&|La7PVhW
z@z6s}k=$&@!lK}k`mJ%M#8TOw`A}zSb!f^*s%yGPW%uCx@&=BA^6R|z>K`r&1S7H!
zsD<@?1<6W>h6KI9@FaVOeRJ>cbLTu$q!!+?<8m%ab%btHDN{)YkQ*J`9cZO#WL!uL
zCCO`I4hvB{lJAaSB*bnI1$`U%YbzRYSHa~*wdF7|mlM8rQb0<E?enzV7H2YnzQN%r
z!bp<dg^8Iyz{1%hNV6x~SEL5fZTc!FB_k)7DdFUV|4(%g_$*{WZ1k)FU0L7U#5x0#
zH(UQ@wjjy`&hL3Yw>$oTDuzmZcXI<fT4d(t=Kdgj4%X;ECl<n8uVM{^11aL$?Kxf;
z3Eu#&Z)6l;Q<SCb!g=~*^@rDhhxzWNezLj2p=eD@PVm9Rbhilu^W1B{Q%6t3gq^5&
zVyPiHYOpd7$Yow@2X~^AmivDP^dmQa>@6{|EY=m&7uDIp(b00YR5wp`Iij;g(7|Xm
zG--BDL#<Tnc%gbR!xuFNb!<z^Byc{3*HIAI`*D<YIDiW;^c-Rqf#SGdYc?Ue?%H}6
zMj93xJh^?qJHI%{kerl6fJZ{k6YqkwP;IrG?PZ9{x0@%pB7u1#mO$|DAkrB=v9lj8
zo7!F`R%4N@Jnfw!iMxc4E&y^D78(Da1A6%jEpTP-aAcH{PLs<>Nh7u$sz@cCUP+E_
z!Fo(`Sz1~W0Y2%6#yZ%ORM<?F@C9ruIw#3HqBQ$&)Z2Qa6B1lc+vF@Q7gsz{TxV>`
zz7IC+j(Qfn(5ePk&sI>wE#y(JPV=qJ%^d+^ZM_^5#rGPl*891&OU)}*suid{&_y#t
z%2tCBo<d*_$iZxil)7hrEkD~ko*4O^;d2R-5&$H7`!}RChODd;o*tyzySt!N_RXH*
z1Bgzu)kJn+OpJ<)dc1?gd~(4jXU=a6Q~mw7OShGF_EKIerDa!|73a+1d8fb1(FR+C
zP<AB6bOYs_IGqN)Zrv|~C_$c0g#T;5GxbhTqt)qlAMXGVutrn(qzhce*4k%gW+s}I
zjrG8`K&eGhQPKRnm}kO<kzN6%i}EwhKPegQ@pck|7k+qa=Of#=FuWJ}h{;SE&tfq~
z#X#Rmj>KV4`{CUetgP}k|C-nkZk}i7<!N(!TP!(8>9)8LVq@PQYkysII+6*I1<D;1
zrTWG1kuGjMK%*$tmb1Bg#8etwGfpTwXWd*oj5@b!)=R*i;D~F&DvSSYyLJ;1KgV5f
z+)a%@fE#*wi4pq%zdj`UYdQw}Dg_!X2Ak1P96Nh^vj*$shG_wdo$c)&yx%!bc^+ou
zM$&uU4i1hF_xGuSmkRvJCbOf893uJ%Gm7w>@5ECoxIe@sM9H|l*r_;G4K(^GbYMh}
z@z-~Sc+x->=6~yQGc~uc0E%a~UtzB7W;Dq)vDz?JVy^D$R^SZ@4h_xOi;IlRq?)pz
zMG7uO)NVr8r6p8oe|L7<#@?<}B^U_fv+k<<g6jO?;ct5J$TTp_3MX59TAm9`swp+p
zR8*wh%6*QCD(xKIBF@%H0@{4V02T?L#YE0~q@#4_U{Hb9>Nkta=%lV*m;!X@pN~gH
z>K%OV;EdRXlg>iXSp-s;SgZ>0Ssla%Zd4(9x57_e^mX{`APqPrlG~M#>-|3h>_4Bh
zx~N_(jC~>HLP_n@sZU6jzv=2d>;vt8@GxfGOzDdG4hlsuaZBf|&J2Uqs+@Tp^a%d@
zX3K{!60I*Wn_LeXl#3d0+*C-Gv?`*0iUlfX-H{foA{wLjQ<%<oqg=gn*_adl*UJag
zAJM5n?}+&I@~!AW!}hXfHN|^^ZCV85Yg4+ZhtXj{<Y|(XzlP5%Dm+s8js6aCt@2M&
z(&nL-jv9!WfkD~g*T5?+H)<qHyEhCYKt!ZkEv8Bou5T-;|BHpVhiBRpWbwzB-bf?8
z(mK>NgA{mCop8GW;0elk==j@en`zf|0;sv+5^rd1M=Yb>#DK(Fz%}UjxTq|x3%6Fu
zTT(V0{Op<6?d|RVYZus5D^0E{S#Gk(7gBZ#dj^+`GoC+!J;xbRHx7(d=uXaW#<l;O
zDBnu>aigl85<g^)po?zi=a?2^*$%3Zed$BR08iZDNWcF7rk7>0SfhPSDzLTK=y0@9
zp+cXlZf9397*~|;P&32yJ4X<w2&0YvEc_!;_G*VoYN0!&M!W_EH6`oc@1H7YfHk}x
zF6Y{P$ue#L*Vf-V0s&t+ua0I<7HwMDSlNw&{5Mkl{c{RQyGPpgQ6k$-**hll6X^93
z<m3$g8wRh}VSG#KV|u%<IUMkUgwQ--k_j4&rY-}vH-jKbTH5i6i6Gi%sT;h-L4-kP
z(<NfZ2|ot0wXnQQ5|R?g|F@%}k*$u6*=(KUIFr0+-?DX!J)7%TQk12hry1l~u&8(+
zfL3M{&)DM`?y}FdFgEsyk1rTdXMoQS*3Ya+ai1QrgWPf942&hy&Ws`9{HZYed1`*~
z{*aE{Ap86vgdwFfneS|%+@HOa|9gKvYkaBJbrJy(!}zbRE*H6n=Y^^0LDkXm6$nF7
za9t);q5oxXQ(=!4$k1(@F+nX-29NG@=}O<Uc}od<nIXz1zki+mfa5ll`ynXYV+L^4
zJAoksG=uaS#<371f9$8h%Yjj%G`MCN?m6?n<NZ7jI6X`gVDy4y+_XH<j@t{Fz-SYc
z9r@=ws?T<?O(<=ihrrPPef0F@K!5*ox#1mDDG$)QkxX}uOpPtJC%U@_+ZNi@sz`H2
zqq#1o82)`20l|0$Fty;-#GQ(aQRb$6EW^xl!wd2GiI=TgU@4S!|F=zq0o!07ew9&I
zt+>d{tSX!DrT0Uf{*b>-d`{UgUW+XKDls2opmP^=hyNb&ZxB4{gOVum1Qj^4_UZ?|
zq))5aQ)V$-|8GVJ2&nuVqa2x8F1V%Jx`901f;WUYdjGcgW0W*p38xl$dRPHFDMsx_
zz1E$S;n&u`z3CPjnCfi@n^iT1`G~O-{WvOywvYBT|NUoM1pWY|W0&_87tPb(g!fs}
zbLwN6T=_sNrH<ciA9Qx5{imlb)XKm>M4+U&INEV+ax&`OaA&9CQNtw(pQC|Pf=e@9
zO=u1vJ$v=T%Bm|31%H<=H<V~JmP*CY4e;hK|4U8~PU~rPP?&nA%eL^>m7ne4+3OIh
zK)fDme+nOVPFDV0c$_pH%1#Xkd#5s!p>eTuXcqky3XLvU4S&b6A1?H0BsK3Bh%<jF
zc<DJ(3MLHSpYCQ(AQf)^ApGG3^Bu490<9-h*E^g@z-=R2^8fdWfE@IlgTdTmm;k<o
z<weSFR_5Z?H})Z%%$*HfZ9XZEE*;#7ip7#+HMZtMAc8l=q}`Az=qYvd5m3`dM@Bd~
zIqmH1j#ru`^5jw^!r!^>Pf6xFFx-C=UiEsYv0fhdH;ip@!v*#EpL*zJe8mVN>6$8;
zK!4&=BBJo4Qm|v-k8jBPl(;BB55w*`ji-c|U+^tc&*jJ(&G_}!KEvy+j}il;sIcCC
zvOP}b0rFYM760WKA&&>Q(m<hdfnsY5b<TVWpR>o^k+W|A<~sI|yG!T;;0+dcczrXX
z-Kbe*R&F<4IDy_Kfk~E&`gbGgHpTbe87FN`6osWeTkVsY9UCf`zv-HdV>8g{zmiXN
z<;m9X57vuOy;Z~b`HSEWQ${SKW-PrL6FvO_BuAQ7fR~%M=G&}XE(l<;*JS)ROzekO
zDUASIh#<>$3ne<3v2l60I#OEQwci<;9*^LS^w_}?YC6T5tMNp=b6EX}1gp|*eN1U|
z;IZ9%jo}U-ns+){lxFHk<-Fe?PBI<Uy=Q;g1&YMuA7P(3IaRMj=FU%iQL*Gwx!bKP
z>+5+sH5`<uMui?kacZ2LrVCYYY<A1mJM&~x_U}4Q2C5INK+ewBLU9bu_SZV{wtb}n
z?&4uY-8IB--}1w}WP)Fjv543ixj9aKZ4~3D@*IDkTI93}27@OmcA0h1!b36zfz38H
zJ#GAt5h_SLt0xGLo|MOpfm3iDDcKC;-$f;p@scxfvJ(}D(Mt`AUrj?ZtX~d~Jl`Sk
zE(2BG^T|gO+pIR=5fe)b(f-CHWQFa=&~IQy2V5Voj_#sgheSlY5o^)pvXKf~+uL)v
z?|NyvYsa1v5h3h)39q({Bmr_LO@{w-RDvt#>^#SV=_Gd73c%kQ-fKBo^KFw#me+ZI
z?_%pE-&&wjUKf(${RIq`E%tVu1wrb1_Vf79B{e49OtpyESQ7(-iAGS`GT<yp?(Xd^
z$8mCU0+6UdZKe0qGwlW^yirF-M*;U^{+M87#AhWrHmhE+eEEzHveqX#-H-h4aEH@B
zA3A?wtX8^n@hJnLhE9)nZA-^>LzX8dd^THh<ULPMBTN9FhpZqwdzIXB1I%o;)H7|R
z*{n1p;!UWDzJ9s+;0#~^WXlY8XZbgDr;_O#)SzRZfePgD%-pS7u3`FGljrq7b$OaG
z$4Ty4N@m#p8Lph&J|ue`DbAbLO~ETGFqnXOV$^<jWPDVo*<I<aA)ox(QaNDO1H?`p
z$7_r2<afKnDT@uV#Qnmtkej#;3qYb>oGBqWv}$xdSjaY4sxC_9Hy)_7X|1lUzP0H4
z1A{q$vu>2Pyq`2bkpAIyIGCsx8;mWK$Wrf%{RZ`yC%M~K(f^T0F>00xT5W-`QB&^%
zHS~=hxfH(9C-YSI=|Uv<OXsQetX`Ujf6O&tx@h}UUNQB-6uuK`x~++>RDq7AMF0`-
zxw|`^c|F`sj>a+T3cA7MO&qnZjv`whGhugAy}c!o(!=|t7y<{>6ckk_W9vowon4+Z
z2uW{=oy}%vaztDq#9V*D>y2_B_2(EhKRK@hV~y%4pI|OaH-hXACf;{&8n;{wGVX^+
zOcK6@xw)~f`byKiUBYq6N)r>4Wp|h!pL}6eO-*j#NuFE=8iny7N0Hici>IdDpIlkL
z@7LGe!OhKN3fi#TxLI#{)qL$s;H(QH6N&{G6C756PB5Y*{Q$q5*N`RR%18?)V9I`G
zzA;mx30y}hb*pOk1!_cPWuFS$D|{zGXi>^Cs?BThklrv-Hj|C)e$5(d&C^8@3m(UF
zikOsc61fy!NoHz({t&t?WvH>?RaJq~$B!L=y{gt`(MbnZBHSxS0^O}HQY+AwkjMkA
zw+}tQUm~5hG`nx94I8gI?N23mjig+()^Y1UB>2F7T^^WcTFzQWF874q9k=_U!eV}I
z#r~V;+NeKwzKh3)cU3hlxL=>*%Ft$JwFDQob3kF`0PaD9JSE4(00)z1wS@{2l5ci4
zg}4jjp3efUiYn9;3{GrKOLHlp#zt0@inpqsyc;L?Cy91_XxKaawrV>1R^c=^P5I6k
z)q{d%&Cn6a>vCER7R6an*jE(S(GI-xMEqYbeUx(Lw3|(ibiJPhT>4(q^`{EB?=0H%
zNI9LlpNa4<mno3L6A}}NUcY{CZ6w`z$T0A9cl{D%bRwjOK;FQlR<ckHct5U>mZ@7U
zs_$lIMn<~3{i&Re=I^$kY*+26(uc>#rB>wsVz9Nz+=>^;Nimr=$6eoOFD=)Ll8d$o
zd&^ZgJ#Nk+5fKXEsRD%Kfw|$HsZt~RbLBXA)CHM+r0B9aa{YjTg$LXBZ3WIe&%79k
zo&8(KXl=8^QD*L7mG|Gv8up76xolRJR@#N@0M_5%^ykBuU!~xB#qNqYCY@~dq`0`<
z-Rq5YUsRiwCjDreJV48O$S$llLcJ;o45YntI7wY*Ga0cOub}K!yNcgGm@QR!rr|Yh
zaa~ei=1B4B^qYqkKi`9Dl|LX;Z&>?aJr(^ur@-0${cZKomu|UEA#P${^0{&1b$PdS
zIRvHrpbI5Q1qGjK#KgtRD3vy}O5aU0UczATYqB!ei`=|S@*qYAhJiR{G9sdZs{)0r
zUoL;r)6;<)PWJW}Kv}HZUn>DK(GB4FT3X4Wp|YJQ81t3}Z$KarUhpf1riYV~B(84P
z7=eTu>t;7)24fqC?6D=DCnXj&6wT<G>gt>(5)!;_&Y5BjY3>94cG?!)JV30wf?16f
zDCLc4`>Bl@fL_JsIjy3gqE<F;?524|@~{*AoBago&k5B7?~`9?3s7?PD!32R*FOf0
zKHGVj?QWjSKzc8Og7qeq>)?7r3~(~KJDl_g?$4G0iH~GmYg}RM(aURozGLE;%$rHy
z#(JvdOTdVB!`HCRR3|>?6;Sl{+i_vQ=RK+?wYJjS2)l?wMh9jqHf>&bFmkUSTQSnm
z&~WHlLp%dHn5hoF@#kJxET`_moH<ogr)zrkBE67XmH}K9|1IN(fbH1(GtSDZL;TdU
z#ai9go>1bv?CfOTf}7F~AbkN<hqvpV*(QO^Co(Bmq=G{_4S$)Ipk^Va-_Be6>9m){
z`ybWmP`8>W`9tGqFmP4*obgRcHhaVShj{I7K0R11R22jVqf=IqnV?NtwLU(qq9Cuf
z*k5<`D~)=3Qr<n?Y#vrsv8$=ga{Uwrlr-=46S6mN+N0a5PFnLe@?v79=Pw8hHa5aZ
zgxYn?q&}d9Do5hA{4rEy_Tvm}uE9^bs1|wuI)sSF=c*q-2S_^2Ew<2e3`mkPqmb))
z*9Zw;*D@v<Z+ukLWV1V#V4C;go`Nw!?nZ@;cRY)4P-k?IXX>r>a?L}}aFSB%Q;T$5
zsWP?cziYT=-vJF8+c&HG4cy<@KDQ}g$Shy+1UUS`WLLRi#k2U2-@Uv9!+Q<0Hm|-d
zdZj+$P$~{29Fvl^GV3^;u0892Y#B{eVDPw~ODe3!AY$itzZy#Bc`}rGPsdu}KFcKi
zcpqgkJ`2%K;y2&eS1F2iG=Xg5k>F8!|2ZA+l-M)Pk%~#Qt7F8G0Pa4Ku~^Lk)|JD<
z!$d9{IjF;AZm4cJDWhxQCzU`z7aEj1QL(#clRj$6Idi{06mFcFn6LwsBH$k0#LDqP
zJ<id$zpPjA8`*otLR!R&o7kNSS;YS1cgGJ!8~8HG1FcQ6gEOEM{$I3)$ti<k5)%Dd
zRg%~_b%3%uHKi<0O!G6C`GnnWD!=+*rdL#=v0l|+00nR_5)&r@=Ylx#)UoCQv9e)!
zNQevw^uGw=)LIN*olWM_fA!<9&QQ=>wN<|<nGQh%wAQW7JS*fn?rq&?vyW(#%u1^M
z0RaVH%_smQNDsX}C^z)fy(!VDjBS>yXl%Ue3XC$_*q<(vNf1`h)r7{am)SrYf3&rI
z&er{Bt$vJ3vm9e(4}biWHtzDrpt$x%pyfI676F#%Eb(wsP7fCm4}N#eH6S|}4?ddw
zySxa3^!ugD#n9>$4h>N{1nC%W<e-a!pC$hOMU^e}F9jShVA*hK9GY9*K-%Ye8Gwg#
z8lq{s0D}T>vBuff<z_GAgl%=YNEIm7{g3FUaXHqCV!sGVduN=<qH7F-N@|lNfn!RF
z)NrknWtLPDy|(*vR>SR7_E@PH82C{5EB@004twV-|B8NkYxcP|>kL3CRx(g=T2fd{
zEvun?Vg&GB=h?A)(zEUER9_B>alKb1&_F(qLcG-e%gxu=O!QRR+j=<I;MIq(Za;nk
zS(+=@QIKqVqPYiB4Qstan}G0FC;9uP{e8a0$_hRlggzh_MiWz{e>UZ;ivJ_$?E+Zc
zU75~BG31;%%cxQQ@qh9lYZ;V_e%({wSNx|c9~xrWL?ao{rgln9X(O<J&|Cg3y?;ac
zV^mAE$q23@ntnAkZ-D=^TWO!JEfbGWJ&|Q8{XbTWMpHL+5x|6qj#RdQUEFeWsOw1J
z9h*~pPv63cKky%6ML?n_KuQX-;ElPL(TfR&(wN7^<9_0W(;deui@M$t%(nccsyCU&
zlzuPR%Bq7MDr<t<=$QSxY3K3Bs?>{)Z@xu)|8KIdHO@}<sFC%Ab>y5B>n6O;YegqW
zTlNQa3qHzUg(%&sC3{8q{C!r?ou3m4{cGydyPt`a97oLZr+#_D$m)yRt3HgM;r|5$
z=y4xixKgU*#Sm1m4b80JzuD=&OHJIRJc9UzZG12i|8o0R_ePKkv9!aBW?-VL$5kz-
zYeNiU`!Bc%Vp8BKM!7fY673yCVdQ`S{@q>UYx^`{QU4#2Lm-o432s}cBa7U@TLZP;
zFG9S%A)2*{6BA_o9->%@b>A;cu8#%&(?0dM@qfmUVwQY=qaJmKK!0u?;|<gk0Ih#D
zOJell?ut?OYBZ(MIltVsa;MqtS`g5X%d;f%JcT$ud=S2T4;Th}sHh?t^)oUo;^+hn
zTOQ#9+k+>o_I0sDUk~OAl-$4z02Pg&Fg;n*v#}YKv%Dq{?=H&MC{mTz({lsv@(2L8
zH81yPh045zvTm<zXT4yfG5b~7FWD@6hhWhdQJRH&R{ClyeM3S2N7GfuHTAV|5D`TI
zl@cix=`QIo00HUFfiy^WjS>+MP`XpPy9d(UU8B1@273=befJN3KAYRU_uPBVbH4Q?
zNc#tVlngK^Ybmx#Fb%4mnL&mK|72$GuJCr1R(6rMV@1yL)Qncx<b*$d5+4<ZOL)mE
zBouNnLlmdMwZVR{5YwA|Aa}bYxgCtmc4YnRSxK&D%D`)|dglKm&`04Fa(x958*jz|
zM<aG-q0MFSoj8PCNHhdc>*jNH2G?yt@9$yB3v^rt#XaXV4G#;Wu!v!GpGusqjS2ZP
zGIHEcDd`a-<N+qzuFFq}Y$wb9OCLKJI_nRbaY_L&F8B$BObFVPH(AQg#%2s^^7GML
zmEjEOYWJ%*3ZLn;TX*;zYaMq|X9>A=<{OLk8hD)MJ%u~ZtQL2yt?Uq+xrNGzE9SIn
zLaq?>i<zvk-x`5$heP$6l^iXER@W{Q!~&Aq{2Bym4aagZ2&13o4qI3qdBKIMi|8o@
z<qgNaxB9(DBO|>zGRsh<GOuDz?30jj-gAVT!Qp@UE!dL22XMwI=Zzx9yjF5*M=iuW
zq@7{o*h6;CA)-5?*Lb9h$fhlt+al}*Rh)@ryfx6XxTWf%t0phTEZZtw>njw^qops(
zrHMIiOqDD6odRQ*o(2O0!@7~Y{L||?hZ9g>LXre+9VYe{z@j53Faq`!4Cg0=8IL|n
zN#)D-@o;geh$KM>8Juor2vMUctGU*5e<BcWtM8qU*X8^i%!vk>$*$j!@mZHh=c|L=
z@~2L>d6k3qy#{2tUAFLrkjBAjII{|La1pL@bC$H(o4Y*;YY+FxO70R&w^{dqj0a)5
z?M~Wrq{FYM$7;vSo3q{%+4NSmap+oX&A2s=6hir`EIya6>j-7&GnrpZnjzsa+2TJc
z<Z}8YWah569>Wr036du+3Ex80Z4L+a(ylF&^aar)1o&iQ>)rPuUR^@-Sgvl(!-KkL
zEbf#CMo1eXTJjy8+o_tyjDzM*uKK6aM$MTk6v+#Yt_FonXoLM0f%PS&LIzX@=U|w4
zyl`)-+O{h^`%|$jtHVVAJ~IN1OaS^W>FNUE%}huJ9$=BuBSL0hkq&}iV5N<`KI)IF
z^payO77HO|Rw*EvE&$Z>4r-w`2D)D!yy%yx;dH~5#mxJ?_Jv<^MtzC7^68k<PHVgM
zU{gq^*)=%0aWY*A=rp|TeyysG(<Bb(fPQxP#Q9f^%Dpnv*;sSUYSWWrB6esjvJ}~^
zQg)3-*)<Q0(|nFQ*v{maGyNW$XCk$^0N?pidxo2|Kp{#qL){f=FzxehP7CH@ejLrZ
z=rE;{!0R{%(=*zyJp(mcp<HRkRIfq>(PE{~*t<X=MeNuM!bj%EpAEakW&t&4Z;nFc
zZuYRzobR`t*@mRK=ME%fA(iu$zB2Af!#UKS;>#?qzwKp8g?Xf7p5?F|Cv@jT&}ToN
zDN&L<9qqk25Oe8%m8Q2je)c<Zch+?vav+e`?)+mQ0b`bLMNq}SWOcmL&so>Ao0@s9
zPL;RY+dEvAlM)RmXS+hiV|g*l60WD)BFyp72h3X4Q&rY_2f-0)oPkhR6OYraamdWO
z!prUIBaXLx7afCoU-W>%cf&m3dqBqMV5Q_2idq5p%j5dp6%iTuy?cY$ip5;&*fAUK
z7VXRlKPEBKAq!hOEM<E*TiDmEyyugQ-_Qbd{pDUBJDn}=PL`M2UAQO_JEWez6xt)>
zcGTD^gvQ&xF0*LY9g$BnNE(!s=@%dn-0Tk<jlEx~1|QIGV``9wGd&F%GdzzcKZUWe
zm6}dj9*!`|*xA`-%S9E!^)?$yPr+Tg<lH-U{d(NO*mTfrDkr8E&5->5w%`T1dz!aL
z(MZhD`TRvKln2*R7xLET7osk{YJe;JG|gL^zX9q5FZ40#u9ZSa&b)>4JsdOmJZCl~
zF{R@of_76mInng(3BHQSC{wvckvo6v+3(CZD>+53o;Bsq51Z?jel01_T3O|94CY}l
z3L^D6c63Q+y@eElEz126bw;~`MJCfpoErj()Vu@VNh{<Nl#ibpk8vTjD`+7RQ?<d6
zcN<Yu;80WDC2>atzbw3*nsRP`b+2zyf>=BVe(l&>Zm}g%t}*nY;AATN%$VDtw9<(J
zA0}*I227)#{qd2z2i?BG_u7SQv5E|e5oX55>vHv%{!8tY#2%2k?_{Bj)Y2q{TAA2s
zJePG<=2yWr_FKKtg64yk4fZ=z5uZ``0@)s{0523aa7aK5vm0)-$1==ot(Rb1BgOBv
zwaHc<SGf1hI0I1o#$kK>z2Bn(xzaY~h8u~XovBL5<r&=L=D@Wbd#AaniRQ$=or{A-
zu}bmFmmbfXriebI$=vat@1MlYX`$XE<oFO}zIsKK)4`&bkDqbBY;AhP3a}NUdn1bV
zM1`t6Jcd^pfo*SlUM!e2GwY51Kx5JxlEdsYWQqFIZwC!NK8d%itb=G*XOK$6-kedh
z<-%7PU(~Fx_6xu5!fVgK+T;g4iEw)2g1^?EbY-|b4uT}EPRVtqBg_*^dVjj{i3X7@
zY;08P4pUv!zip0<d+1ZZlq7TDba_mKys33N%_HX*ARbUI&eg6mK2T|fsh90nK3Hl$
zSszT3jAF{jFk~xKoYYo&3pQsH6WlyJF|$9i;WB_gCFM7skK-z&J=mQn-vVk-9}MjK
z_wRE%o!`IS6m-4h5D-Z7SSWnFLxWjH*q0RMh99newmqv-;C2DlK<yg4&JvHvt#v%N
zW)X4w;YdaRt8WhHj)%3+waX-aE-mZHX^o4Di*w!EolR+mJ+1uljP-D;Jom@`xjC+e
zhKA@deskxrQGr(dScQGAfUCpaT<Q3qLAg2sZEdcMK-gijJIrM19)4}pOq;)VuKvSx
z2&UW>!K0IU2O8ST`V5SFTSU(uLf$!0U30Ki77Qg*tc=!*DT~|_Of!*C=GZzUSa?G6
z-eXqGnSqa;5iyFJ^XJeBy*3xRwlMhTMlts{jhW$2$D30GR3t4C4y$tB{?m!IBi74R
z%)p%%$F@8GIaM|v`PG%;7*dd7;3@-Y?PDvoH$55sB7l}=#^=#5p`aw%*WG(i>pU}*
zlIrhk1*e;l7CjHl5gX=IKXG@nXg`_tP&662$VG4Rpr~=VEK9%}e0b*hM8Ke#aR;^X
zawk4#thPe$mw&oe{~mIS`?PY}Pr0tfBhhplt0qYIgTc`+4-&58621m#-xdZT?V4-A
z)TAz-dnwE5b$2_V1Fup6`?1l&AS<*onEJ!L;g<AXp$4ekFNgCiq2TGrLK}zPyudh*
zoUt-K_lLr^CXCysnp208+gB=O&Wk~cmv<uao`4llP(@v$hQE*9xwYYbWKB23ni(1S
z8Ah0P|AP>@fE&#uxBj~9WwOWezOHp(NC?jLmyxW4W<MOoAENlPE+?DC!=1F9X`-?%
zroyP@VEtcM(EU-gd2+g2e+72XBu`%QyIU`PJHhN9ytY1Ncu$cQy>1+<U24dQPAy@f
z*qyVgy#t`ke2u0lmAyoP$-rkyxvOMPpV}OEJc&(Ya}M=C_O1F#x*VCRBKF5Wm8!k~
zAhYsUUe{Luvlm$!I1Uv;p6ia~0q8`?<@F5X;NYMK;)YL(ABw1gAaAgUIa4jb(aK0m
z#B%HMyW*K?YH9+NhSU!d9yS`5eZLrXlh{)w5yB{1g-n3>iQ0hh1o}xRz;FcI-7)L0
z&UW;oYMd7M`4S>yCCVjSG5prEXbj>qzp(4iVRtoRJ%1ApCuXC`oUM0_qM}pI<36U>
zE&us>vqd~i6q_8nJEP{Zd9_V6>a{|sSgeAdn#^sqtLfrH(^JX_v@*%6ebW61-LZlM
zz8kfQ9~pqEf>cYabcO+bgv}W~C*X4rN4s9)Spfjc9+QwTICG;>AnMIOG(>WmDH?gC
zv9Yt=0y>e0>(hQnWkjv+HLs}C>(lpBu4(N*ZjM5P^pzP+0Hhag$;ilvi;J6$C-c$`
zK35+~YHSG@mM@caF%E1y{eZ6#6(Jy9`uX!`<Bi$jfphBMlc_J4vjPo5lpHS4pYQ)9
zGmRP=OxH2^$UN578L=65apCMGQ;%tMP}#Hokv1yBl?lnkJ7Ebge4o|4bi_wx=_ZWc
zqXlzM)Si=kIhn3}qyyIoj@VM=Q-PIeZRWB{G~p5MkwRQ85{l-D)@}8MF1-_ERwN{%
ziK!|dxt>HPuIm4m^Q<ef)|QChpFi#3k~u^0|6F)M_1Y84tDJo`b|n$FfK;eTU@BK1
zs5xaO5jBb7ZHKw8$k+0;YH_|la`J<ci+HHA4J%yssyA5vd5oOSq<N=eGLh|eB8nqp
znW57^JUA;*NWPO!P3Rai$z4vu-+Z<G#$hAstj~D|H!{QC{v`G|;p57#BlGTs=FEE$
zog~TH$@j@;2sRdWPJaQ7I0uRyT+!$-nY#ifiyQ0bns@|HE*Jlg1wb{7c9!YpUKudU
zPCl1hqOk*y+WE6^@`AiUuU<-SDOFyShXKDt(Q^_bZ}nJ8P4+~xTGEQPdSK!Xo1#Qx
znU+#f>HW2kvIkf23QXwhcuWwxIbMj|T#<ZZ@oNnR!+VznOyh-+dSz~D2?+_{NNo=$
z)u^_KFa#KwxGV%BL{D#aR-mOQV+&{_+tr>wXji2o)xWyN!M~l?ug}+iH3Q&3eJZ)f
z7&9vLt-T>8V|eDw?CjP^{(Jm)Ipf8p2!wVKZW$^w<Q`DB1!zZ6*UMXbK7sJ(Y1d!o
zPnTV2;0=8Qp3rWUtQVzB2Hjm{ka`<uz}>2;suoe}UDeZYTOMr;XC4oyu%OV-@EgRv
zJaV`jz_NLMbrq;0V1D^X)Xt5wo`TDg;6wKL`MD>GhiF(mUAFa7Tk$~??u+arkVAoS
zyd^dnns9P?LhpaA>;ZV9#Y`1u2+>jbzJz4B(AqTzytg+<ySwqN&*|PYJv%g^=44%|
zbR%k}Uc+uD7f?WaJUo*V6Gbv+V|gb`%L#}aO2DV^@$=U?CJFL6Za?F;dhA~L^!anT
z$v=Co4<+U+_vQrb_8WoJvJg_+7XEDXP3uM!8?|o_=hE{v{p^N-a#%_yv(e(@#!P&k
zo<~sN16rrd)c1(VV@Y&vy03!V#a{KxZ1`GmCrJLV1&b7@)mQ~+3k;`G@jT7SiGD^T
zKDAm4Up@!b7L8Vevz@>D^NZ7%b4}$n;IuVb5?q=TGTwe!>wqsXfkJZH6}Ql)s(2+O
z^<BO=p>H?wm}|4Q*}K<i$vuY5R80E&{m;mf^zV1*h!sqj2k%A%h%l#kWk<M&&?1Yj
zwYJJx-&7Kehc%1*Nvu2b7$}3kR-hNV;EsKE0u${PESm&XVbz$q)O6lwSH(Kv-M{tO
zw<(s~G^6k+t&-{3k9j^vJdK*n9+cWXEj=MxHwKuJwc&4+9QC$pz8K+WF;yaxJSN&}
z%FVJ`TSi`M*?B=&T_l2X+9zwwuM*v_61pSOa#l+k0;Q3B9=n?Lyyf-v_1R4qGyO@J
zeIw6^h~Bo=lTKH1nvEfLuQ3+&?39=(mjG_KC*<})oPmbMYOu){I4Bp@LJfEie9g1^
z;u8~J3I%6p)8Z@Q;)YGM0}y{KPn&XBY_f!HNAZ5Tv97*8Ln#p(;kaCtbJv^qH#_t1
zpreYYhQBL6EKqtVZYzo7y{L8A{S?w=QE)6xOaFwJh&a;-@A_e;3GSfyyrOP~tc0Z*
zu-lnv9Y&b~NT4V5eC+)y@z0juuMdLNFW?@8Oz}n|DIHRSQB*XRdy{GNylV-34(Gb7
zj{pnieubl1=jIDz(2;1Xa2rjqbtx@}2)MsDGvX3>Z@<#}4#R_7B&2tE8add0uo2<D
z=x{*#18gwxHf>4*p{zEgY{qU~df|WE3dwUOOPH_e<Y_1NR*T~qvf<<~m=*isYX@5N
zj}G1?T-QAxr9a9%5u_=d6+}Q>7V@L-#^=I=Bg}>+va$0%^O<OQBkJmAzS#SSBhi)5
zl+s|o_9=^|WpL>33`-7-(mQccS`7YnBEfw)O&dohw=g@<!oS{WfBD8sPQ3Nua+T=q
zj1_*s-B0V($5qiK9<nl_##sG6nUnsG$MY44sA^_!at)Ev5EG>4wZ-p7ilafR#TId9
z2n_6i^*N50JHyD4T<skl-|PE>@)NXL1MuAw`Q?hg15v;VX29cZuRO&xy_N`5G@t0`
zXo$x}4B10M#+wB{HL(xvCGun%^``g&Sw|_&Vl?dSt*!nTidEq~5)But(?U=P;tbMM
zB(*U(Fd%#4r{|&t{1Z=vfMl7jl}_UGNMcwVg`iJt+b_5YU1Y=;%ZVa6MScAPrf+%w
zE!*_;^eQTq?IG1;i!Ivx9*KZe0C`HMkB!aD%y2?B37I>fu(c|c?BtxqDr43hAui*A
zd7uf{9{z?!9N_Wmba(Q4w#vG*lh)A!4n5mV=<x=|@3`wFWJ_U9aLeSjBM1awJfQTg
z3NgJp-HqXNbpV^(?VTNiz9b{L*_-uW6hK^4e&W6`UTqr%d<m?S^W}S%8DOyrO@avJ
z)!>MXt?M*kat1)pjCm2|IB`FdwCARO_kW$*xu<}2w2V1PzX0l7y(^4MO`{KvWCTgX
zBsc2kyZrq1JWShI6uhdjH`(%7F@s;zG<GuFsnLb%W0ImIaSW!#)8$CDV78q7XV4~}
zwH^9Vs~q_~-|@j?echAkKjnt=xVofs72bw~!Ku3WB$`YX2>)69Hi9>5CY?FCRlZ;0
z8OjzDgF`8cn|seoqGrid%M<NzCXuOGPzrFf%s>2Hb3f0_I5Lc+)7U@Q+uprO|I(|g
zA#apk<#c1XQfj(lF%rGu=5X2@(kcVg0E5K}nM(9XJ&v>eKWG75$b$2bR7;R50r+ZQ
zn4KLjgygEe=H%q0rOh_%Rp;1QUgmd9+~@yv`lGj7rGN?P=v!P|3^D-4>~R9hN2<=x
zgqXBz80wZIQeL9J#$=(Tl_xL3XKKBV(+Cy029%>QF9ZLNS0v~rT_%B0WCE2FztUdQ
zV4B!-E)zBj#9eh0UrhYd?O86}#n%-HpI^GC2xrGBJ8rjhB9-$OVGPsKta(5+5r{n3
z1N#3@#Wd58IxF8h@fgPff)#3+C9<+|E5}x^ciEn>1cc>#=9iozZ;J-)3UeyV)`E%H
zJ&Z?dIPn!hVt|0@@iXg_lk;M|-CZ)hwjYzVDt{up$YvUne*P@lPFlem0c<A$(~Xwq
za0aUf0*;L3G!rFOt``kjV@BM|sfBYsz{GSpULS;a-|#puesxo;HLJ8>hBRcWGzbQX
z3vCcGQ&Fjxyte{to4YWowwuUtNZ-{=1sxV|1@T3gLPQN|`^~C+t?ya&&UW5_r&#eG
zM2<+oX)?d*$gg!MY>`Hz;?h)k78|0JGi%cr&$um8@o~R2?qI<SZS_mOYH7AP`q`f&
z$KHtzYS`m4wi=gvWWBCqTO4)bdj}j-<K2DK?O(~%c$H5a0>(}%&W=YTi0!gu>kk@v
zH28j8@Cb2H1I8-vc-ineb7YIZsdPH}IpY;utdqkDitn5t`?zdsfokbwRRq^JM#UrZ
zcZvhHmui{Uk8NvhwttNRAey7NEG=@A(M8hERaa%ury{AIsVq8x>y}P{p~Si?zM)lN
z=2Tpgk1Vmb;k#Q?7VL483?$r68;h-s8Wlhh6>R>1KsR&RalOc;H@4KMe|rL!Fi6rm
zh<bflqf~%69No%<^>5%J2mYAex#t_UF$_aq_Y0+c{!GsAVz+v1l2LSr-+ii#fKlVy
zH?h0-{A3TzSAT4bRDEu32sZ&BldqVlyMP1WDJcwst(B_qF3dKDEMeEXQaX>NkQF+p
zzB1~19apkBwQcR~xdkX!R~JDftZp;s2W9ef2N&n(MO?zCt_Pn-I-Z14No6>wYl*sC
z?gbLsYAVl=J;8Th1z^`&9}~hHRe=Gla)&$j1Hb33FS30;XSt~V(~3x1&DX9s-5*F%
zfFTp1zKKE}OmMN``kY%-JiDU7{VI5UqAJ}3DYch&UW9(x<pY&59W8JN$9sXkK_Btb
z2gBLLWvIYu{o3g$BPd*bl5w)$Y&^gt>NYT@UT%1y*$*%HMTlu%`PPV>6XMACXpL3{
z(y$<+w>wpDG}r{+CDa}c#3v-Ytq+39go<s?Ebw!`KXTK~7grgt$u}Ug=fjc=3Q1k=
zH178aBQE>`nJ8N0!X2N@AGe<H4LX|GVlM`}2P4y+{o^jEuO<9XD@F4ivXd+8rRau!
z7}SZD=@@G|F($Um)?%-2X1g#->m0g;JAJ5x%|P}m;a84}<f9J{s*xdaydhUUo1LKM
zpSo#C{PI$z)j>YRb!|p4++OSkx?LMFZo=o-zX$wMVj*aOqU-DHrwP>+(pP`B@qbr6
zbls2&j5;&sHyBQ{ys7^LL5;uMa~%z=t8?64sV{Xm%HIO9WRKy~b4HaX(Ip5Ezjx}7
z;zh01XLc5{r4F9Fg)=lLrj?Iy?khFiZnpPVLivg&^K5ckRHE<+O#<!lIAr>pG_5WD
zzvaB=ljwUwa|7`j30;gyMaf$~UrWVDOt`I&bm~P9iA5BH6sxoKL0cruJyRy3#(k~A
z3kF?klX5xP6)@hP52Kd(l*ldTrj@$L%EgtLqjGNzSJvLnE{pd$0fA_%XpEZT_O0nU
zvdWZ@qQ<`HS23%r7L6|+Q!5iq!83)RSnZ4w1*Hfq$%D{Wk)LYw^BL<^N8i(GjrB1J
zGD)XN-lb3b!oI#Uz{T>Nk>OjQ_%7DydhMeCB4_8Ou&3E0prZ3=JzT*o+|c?_pA&nI
zIT4#m8W;WZ1(LY+doX7*Z+??n>-%y$5LkGLt{i!hjTX_O6tAqavOHzlfpaLfBY#})
z_{F@4Ir9p|tZSr8kn^Sb(aP7#h2HMoUp()l(~WfUEREwM@w$yeN_IF{-Yjhqbrc2`
zTGB8{5&9HY+gmsgxc0Izty8Y8t(2_2-Xe~D79Cw0brbrQkC9$LWWn-dG5j_b`+PZ1
zz0}=%{avYV_=pl^EKsz43VG1+!#Ukf*1lZrBBl$i=tG=73PH!C7e8Z~!(!E*xpjX;
zx%F+jo+6=n5V*q3;?DK@Ub;sDk8LdK&k7^B;N?8bX)v{JW=6MJtS6dhxKvw<X*~Qd
zS<f1bsw&q1(^5ZQ&)87CKzlJ)GRE4nx<wto-(Yp0GVuWKc;3aSA|t9{QC#4v=vH)v
z6APF)g7oJXR}WCX_g=%1P~;I%)G>p4`QoB}eKd`4=s$6^Fzdt^IZXl!`j6vu+jVEC
zgNwAfrh|n3@+_7*j6Y&sUBfMV)WnLn<Wh>3&j?9(^ltDX9wijS&vDtDTm3ye397?6
zs*QUqqto(%p_@$Jl<L+N%8@PXlhseTmyI^O3zPGV{y7BBzdObDD29m}+$l=sr_(8U
zDzD@)ynJqSVSbr>_U<p0>lxyexo{*ufpURa<lPvH-@oEg{TzOMf8{@l9|h&7lIfu8
z!pnh@KO8(P{6fr0!z<++)rg2J426Jp$G>7C;YqpYB05r$at_!<iZs3A;vueNSylv#
z^kDeFE1W3jPH{k>jyUD?2jqNSi~hH1UOaLngU1DZ{PjO2xX8jYG|4p@V|x{^$o-qc
zw7W<h)HuCBYeZ?5RPX;4{pc6TVsDQ)pHXlL?QX=43_P>tqIS2{bGKE{az_uOuSG-%
z58}4`J8)S~mF<=+J8{9Zl)S3n(N(WeDTsbjrm~ItIr~aUgz?K5zRb8#`M-zZL8+1-
z?EhGR{!w<#T2372A4U{OF*UDq4=1`kgWtytkPV`&e}ZvgaVyDow-w3UWW;^L#MIzJ
zAAC}(pof3c)luAZxs`3p-SNuq5&n@EEU2MEP2*q3l)dwJ1kX#X>+qDtA7;&9dqvVL
zV+KU2L@2pEf&SAJ_{gfD5`2`&?aS31;(q#9RF8sp^sSL{Gn)qGp%c2A%5^W4hXk2d
zgoPpaZv>v?lcVP+XBw`d5P~=Iw*wyiJ2P?#Yi4hy?d^cve;-9Tda{^OgOc~zM;}{n
z6<_c68M}Qcn~<C^h%li%<RH;_0l!U)1TR^6b(|L8%C}GN<Ml=UKEC&HlTfL`;qQCr
z-Uou~ttlT+RbObQ2>bl((mStl)6&u+B@0PGt`(cxB<LqDG^zakaB_6$Kvp_KXVk|A
z2LDHSd2>BW2Penpyfqiz2(atn_YzKKxyF2kj;i`OF+l0>|3NV(`K}~t0Mmqsp0M^R
z9*&NW_xJYRIz%{9t@u%W9{)YXeRP`HO{S=bLmsA<M3g+S2#A272*gYHpAQ1~2K)k0
z7&I_ek9;u%jSP&s%WP{=Lzj*3xBojdSz3aCiyUP-MJtJ-{SG66>v)pMWBM;#1LK2(
z3tQ`(>-%`vFLBe+XDrD7UDTwg#owxoiT8R|9vd&Dx@kczv@KxADgEE>fsEiw9zY2=
zJ6EGe==vLQ6g>SqLXA;t?`K)QGuKO}0~cV)>sL$>Zc;yjOkPpYht&s{%`EhNtoVC8
zvX7<&Fl&riNttHtFWhntFnuflJq(cv5e2~+kuv|Z8Yt?&^E<Me4V)GjJ&ukZCf@(L
zcK!U>GkpUiR+5GDze*sK$BQN-n(-;&{Xq9WHn^~|MyM2<jfjhj1Et&#N&bKL4p9p&
z3Oj%H`~2)Xnu?E=OaAYHlKqtal+GU0Cx2)V-G)*Nv(ef43kpGa@_gXW|6h5!x6c?>
zQ_%zc=^CGZQzerzP2l(Hdh*lu@2xD%s9kJiqvUkIO#k}|zFE3==%~-%cThOeChd!U
z_oFH&Kw4j_CD-8K@cfffNQhqf;dX1?mE^4@NI+o_O5t725oCIfA^P`d-Kqr<CXMfS
zG4DM#wo)#-R7!jPZ%{PD7fl+Q(k~>|Fw0ajl-wOypZ=RT!Ue%Ln36q5xRoFMuIbf%
z4tnN)gF^U2B~{SIHeAJ1@<~DHU!BRm?~?oZW)^m)_MM9%Mn9}p--5pbBTPX_f0>g(
zhw>1w@_|I1yh%sr-#0)|=7)x-!G8$9iwfWW`z4<J&t?1=H*Kmol>7@lTg`8y<iYEl
zZC_A_9N2>gno#J4x&Qy!Z+0CK{20-Cw9#@yBFUdQNh<%&6exlk>OKCgU7-l?8TGQF
zEIbDGXwRk1yE%q`CvTMSPvX0YimIrQq{0@$UZV6*jBEb>5Q=d2BB2x=9Xh*Bx(;ec
zCt*jsfmdiwVb6=CPX?;<`VrF=hOj_)SX#R9ak8kk{wo2y^(Rkz8*aP_e>ML73gH85
z+V#USCGC~&Hyu=y-V~|mPqDy_&CAQ{jd1&xE3-PVjxg=3PS{+n$VuE=eIcYG9Ats*
zoVt-mRBv}D?OYp*=<c`E_GSP3efxt}n4NCu<~HdNuNO(}OAqd%SMqlCb`Ot^_9{H_
zj9At5Qp_yD^E=WaEopb`GFJ&)u%2bW?3_G)HXG?Ns^T$=p5S<!b8`F2YAlY`;Puso
zjWmV6{%i$>CDWj=f0A~nNXa(Qmc~|iWw7!{*DK9ntfin@Ym=3?RbrVR#8UEBo11MU
zxMek5urX7Cz(<<gjDAG6%}P#p6eHN6bypnkvS%r*k#YQriXtR9?b~XLxH_{K9F8en
z#XyG%IM^jQse%0FDSLi$SD}v1PG#<@prBcAUk~O>b7?!f*9v!zAta=v3D9dln9IiA
z-d>!-5OM|_Z{wP1=`#IbTwzA;`uBC9#<*k%g{U5;<A}$^#DGvK5N9AV8!dA<)$c5o
zYjDG=sbks^{<A<@x`7H@;OBkQX|8+tXehF$s_N?1HOi-FN9F@X+1w~$-}eWwwvfZa
zODeX77o$amfHly*SN9V#Gt*?+(qRd?cTP#w#-8r~>ay`I1#qqY2$FI+B`b29T<qz2
zbbFU2w~V0cWX%5tv!+l;`}aa<1W;}>zavuBBvN+Fv5e_%=kbX%>fLT#UuRK&_m)?$
zb^O~yoTGjhFsueYjC`o};27{)N89<v1>iZxN1pTnd^a#K#UCI^R8s0rP9xzsjmpYz
zgnGdap5Pkh*1yYmwmX-%s-0$5DJU)7X9<V#+8E2c^H!wWoyvE-z6=6Q3?dUFd36T%
zr^>fL9wr3lv<e*Q9FFtJ3t(<_gE5&u&9|E#E2r%gUo-#_2KGyB1_6s38zyGT%<pgI
zV&^jlf)l7s@g?N$AG>e~yzD877339cY-}H4VF6&l&i+C^voG?x_QipdTIuD$`@oG#
z&tU0Q??02cytYD7&rs%@jR%rD1K0ZRAd=#uW2;?9e(oiMh(JS&U$L>Tgy?yAtj`L1
zIf_l1bJk#jr>EF(DA$SB$APil+>>(`T&li-QN~Nl4`CUMd=8s1qci1zax{z(tL*g}
zz3IzRqhPtG4rf{7q#$pYnBxlxF|qCXyagX$t#<vrj|D&nG8Gh8=CtjOJk8$%Qp&Wx
z+q>RvqYSr@ThUX*47lc4IanUw$MIpxIWsiWU)5iG_H2E4jV#~~@0aLhe~*u1I$nq@
zaw%~4DBc)INS#h#*JZt~*E=IZ@hkz+9x17TTQK+O;o)IO!=dFsvYMyI+nCCCtrEQ&
zWeZ0q02DFP(b?bL(7R|oIy`*$&f9o#w)TZY2c9)9?qV?cv<%~uCkq}-T1v3GhjH-&
zIpbs;PUqk3>9eQ>(nAm1u#o8J=tF7JS~7GGOIKE+*R!_9nT9^J21M|G$X4xv_eYT_
zQer>A=C!>vhTY>L1t;ez<3&*DlfG~VxIrJ|d(omPboKUiMv|~GGjj<DsL=IwDGH+7
zV2B?5PIPy2wx>7f-Ruo7$(wYy^G>yM_Xg+1mMphqcwA~S9QkQDG9tI?=mLRuRSA+$
zOKgD)At@^9?8d#LGt5u#bLvR&>arpeTgg1ORk&;R(AN4gV)aDQMPefg`pviA=xbDK
z$>{KK62HM4*DB7CcHGR}<tDwvu+XO`$0sW)*5?Ccw-1hRZq+@V(734f;e`kNSG}FT
zg3H-nYFq}W^7||JQLeE+MROCrgVEj7Aj;~dl~HzJ&mI-bMphn57|{U+^GhOD?0}5B
zJK80fCNydtuGPyoLA!|GnR{?_pu<8<^RKE>J!>jqG%&$cU^mrGBAcj8GdWUDYe?LO
zH+a0JqLOdZu3nVsG_$x}QjLSYDSb{zZRPIh?CtIA8(TZFe=U=s<W^JI;@lYS<=iDx
zeqEG_X>`LOtYgsR_PFeoIw=~;elbr}?)?0GncHM)y=%pg-qIx!%pS%AS^lCvvguqx
zLh!M^#2egww)yH@vz5!lphu4$xtx$iN5($C6pY?E-Hf=sMY|$$2l8E$0C>$+h{kKb
zVPb5oudmN<J@l#nUeJF6TeauoBAgn@MV0sPb(FQCP($TNSRxtVyo5p$R~}9@$46-2
zQGYSWq=I!*bojh#g)_gc+|iBB_Ta%0_fKcy&JQgQAz~+opMo$yO{;%urXy)j9vzgh
zuSWv|ACmdjhe}-hL8!q5bqG23Gmdy0+OxOv3Za&>b-X5rJ%NPMNkWc?jW?ud7}#9b
zE}!k}mcO0Qv$3;Fed?J=OwHBUArV}hMnMuzSLTyn^)3rVA~Ms`B(tv!JjrkCg#BOp
z=i6)eO5^WVJ3p25gAOL7T3VOl$nG$P`$x}2XjS;XC-18b7STuL#q&BpQn+M$Bh!_;
zlnR3wz9~K8ExmXemY81U6Nb-T!pNRO+U!*zQ#4p*{|Keg$g6*C4djObOcXqeqfF_{
zyxo=Sy9c*F>Z?|6cvTtJ5NR4J6%=5aPIq-byponU0CN1HIo1{?{1akzf;ah<q5ip-
zHxc;~rfPM<mW@Qio?c8RakTItr_KyXv;|gln^KI#=?{NYT!Q|)U)iP$*=|yL+5*v0
zx!<Twz$ZK>PwSfw4mXv$%oV~sme9d1v4IQW3T&mkX8R8ILnyNRQ?U0e4ePN=0p6Qp
zFpXcza+pf+4d?quv+7ioKE;(fhR233oT0HAlXB<lgFg>k{-}PJejP0SS@fE^r-zd+
zOWj`Mt`7Jn@Qe>-P_YK~qcSm|(g**MkhPC$R~SzDF)-X~wp)-P<3hmhp38Er%-o-s
z)G-lFyECaCo}PWmXM>LWygj^9cPv<i)rxHNr*j=!8P|VbhyvpeUAvLc?37sWO;|}|
zBHo<vqa$zl5wFrNqVqW`W7s1zrsJ;ej^mc1(ngfXhGR<u`iA4#qqZ?kut7+0*6zi8
z#06w~r`Xsa#Se3hmxm`Li3QlXLl+uBdepbYBTm>zj5;uOaFm?uem;E3ls8*x*#Hcc
zx$DBUtz%=6|5dY|GBVbBX;j^v5QK!(qe#9FHAP+uPj8G5W36eBWcBp%=gus88M`G}
zvA^NoSjOE8C|`a(p%8^(Ju(G8ji%~bC(~)a5Cn_3&uX9&BJ?~5>MkQXouiyDK@mv)
zL~am=+!<MEir=oU{Ro)O_#Aeoify9;1c~36AJ*8%{XGU|Vb-VYkWQPYV()SVXkvRC
z7uV?%WgYB}+p{p%lx&rUmzr>?DB`j=Tgr0tGcs2<qK5BTl|pByqNCS+FizPG8nYFs
zWs-PBa939e5)%{CM1u-c3bhN#1V9oMk-4O}IFZmU2%3NWw=xw(n}RjsM~!9+az{!&
zV)_y))Lzb@<b!UCV**=YMqJoqaLz6dTfU<k)?*zme866tl!GocO6u9$dv&&_0`#{E
zZ}`tnW^0W?&Nm|Hqi&^xqZ?RTk}DN5w;GQBhIhVOX=os?IVGgV)+g}ZQg$`fSbLfv
z%GI~~9&hqqjdEWK8FsMgt{V*AEtkEtFV=IAV$QnG&}Zq~=s_nRZC=ZrMX>;im+K~>
zWIzLOnD5OC55ND0y)#?e?;n;q=jWTm<5~bnj;=^B+fSET!hyb%Y&4gC`~DqjjsIf-
z0|o9^!$y7g8eGYr;7h$P2Wrm2mS4?&AdVYg{B42)jth&29>|@6;-v_)@i2LLdPN%U
zhb}E0zpk)J?mLsa92`beAFam3;BUvk37A}V*Y?)eU-PU2!N~^aSiVXKsa12E)S?=w
zs(~}M%4&nHe!q0BZ#*YI*-psxcpc3TTMlE7S`d^^lLJNTX7>%^F#fwb2H%w_sG?AM
zp5nCv#q8@I`ao9I<O&pGGG@fa7sk=($j&+^>beozPoev7abL22Lf0_7I{T3z@-`{J
zp(*LtgB(9XV_FpAxMwPPs)NFC&y0&2w^)mjtU>071m~BR+BHta;=>sjIHbzY(1DTF
zac6QkU2>e<s2_9xENV}9@NzkOSh}x|m@5x*)6XU`4y3b2Vbo%Gyj}<iL81z~1wrDn
z#aP}&hEyEIt0t8~^@!M5i6A_+@q9S&<yKiYfBX9NoZPT?uGEp-HKw3Dim9fm>JbTt
ztW8g0!woMp^Imoc4qq~$pPj}+(<K4bm@rlaEZd-W3WzX|Vph?%nIvL2Dp0HK8)&pT
z$%(kRfeQ7++HbdrA87jiyGTi_qo6-iPqBAu^_>;c?g=dqr^)I&?!C<4>MZWC8>X`y
z%O6vI*--(R{COly6odCz()AiWy+D$CfPZkt29s7TnV?M>cn<!vP01G9ZB^_59X`?N
z=zy6@Ay|e6J2xhZ)0SY@Z`j$x5-p}HcFc7ir+<FqX7hFl<a5t9ILge(mn!E2#n3Ep
zvH}LeWY{;5U=Oq_m~n)cFoKj8c(vJCUD7Hu!u(Hf9G8!ekKZFA3G46#jas14<1}T^
zE|Z07DORU1?gOi@;itH^3R#%e{&W-IQV(jfe%IM`K0R2(rINmMon*@q+M6qvTv$bQ
zdkI!4vCKoNj8%|;?&5O!Uj-=&0yKt)K_whU(fnR$o3_HhFQ@spq>T?rHTzeh2<itO
zigi_ZoFY0Z7*sR?4}N@}AqjX+yDmRtz|H~!{FbG@?i=+6{HVdwk+>!DCypfxG-2`4
z(KHGbqk{`_gXKV?p(h%|>#-YOV*SQ^Mi{8EL7)#^z*vq}pj?6W_2u?x4hY>O<}g0L
zE;D)i_AQ9Y#&g_vKmEj}UBbnB2@e6$F+k-~&$nT5g}p<IGCV9$>v+w9Gy<-3pd=eo
zz-(5WpDlH*MC52xd=WukgRJ%wRx%*hk~Y{41ClEC2E0NMKx6i}G7nODx(0!o%+>^P
zqjY~EYm92_>gsDPSO3rgk^rNNisol#hAu6z!NVkoDVSubum28iJ#IPhihJMS-MdFe
zw6rH%pRKVQCG_%+M~m-nUV8lIX6Q*`a>#M1Dn{j&r$b@)B|6_yYGQ=*D!sW5jnZvO
z+Ff~8PAtpo?c>uje603{?Nw8c;-=LW=hm3Q@83h~{<!T*I3k_Zpam43ixz#ga<=-Y
z=l9@p<qVC=-D90hPy+x7AGa=|3W(OM{nnfG`wox4?B85peZ8CA+?phCa^bSg1(qt{
zDaDh@e$MaIF(C5LW9h&N=+0`OJF!(+^x2?+&dZlCX=z1VBMw<wS8Y}>=e}Q_2xODE
zZ=XNtOb6kIvjQ^_=46dV{ZmtahNf0qA6nkd>4FO3_vPikI!gP8gn&4=Ao)-4+=%)b
zr!ec{+ZUkNR)2~l?(6qIV$y4MIJqc&PrA^rfP>$YI^gOeXln}dK9<D(Zo$8GFnFg(
zJsgULxbBW(7Bb$~!Jma**#F6&b`%XFi-`H<e7M{>NFfGuJ(FH(>;Wtkkam0sA?S_c
z;p07Cp9?z754g!NGz<?jcs@MLPIE0kmSNIW6Yhk8L-cMqU%k@7fvM7LT-x_N(Q_gL
z1A|VERedALg1{$Gz83~p73M01G=g_X=1axOA(Cd(XM3PNyainbJkIjXw;37DWBQ{q
z(3N4A(+JZ~!%u`h$f>R=aSvw~<dD@9vzzs?sU))Ez*&NFSV%~#De5F5{ZWT|!{lmF
z$vZn1nn7a$tLty$o1A7K>~!I5(btV!L18#X2w`<IQ>_cZN|#`mK8JTj+=-yJ5rS@m
zo)qTaO55k=!l+~n1M3&tfRnDl<wU{_i%z0WqtZN6-5Nw$JjKNY_P=Z^njGQ~VxhN&
zG&ndRJxz*;<%1<4U+9Y##1eD5!;*Rg)zZvOIR$9>e!BD7u6e#XR+1C^bJyKDvBGcy
zWl!|h>8JRU<zFH^FB~D+d&g4L3;juF_bqq2MLs`23ZY4q+G|yfVWWh54m|<%lD&#V
z1s?j@?zE+DN^-DN5GZi~fsen|34W7@oA<EH<?Y_p+3vvwV(%fdM(cO%nqA;mTDC6*
zIT63Y!$(R%<fecN39p?jtf%|%^fV)dN+#x&1rdu?a=zA}+%C>8oQs2l<c(WZRclYr
zm)5Qbz~btIdJQ{xrMdb2E!1~@_~ApHtra5P;zBL;Yg3eZ-RseLHW#${JG_MyPJ`li
zTpubW+^f`a(AM)#i?KF~VN`f#tEZHp!1i@EblBGj2~A&xR@X)AgP=xSFlU;-s)2=1
z9O$)!D57ROLPkE_nJS<MwVWz3*l+Y=v!#8lK;!@fFCZZDt(VuyrfVPQ<8$~(BcB^M
zR#SX1Jb*W&zWy2{scwyAAN5wk>phS+;}9spSxSp!wd2_KWO%*f-c0(JtY)BNCl_1<
zlMCqcSPQ*Y2elIL@RC1%ES&zOq8UUP7;7Q(HCI-ZC%d=475_T;K@K&ZsXF*`eMRKS
z9Fm>wtf?l5yj{g5q#PU~Bht<Bj%bJHvYP^!ywk6JQoB*SgwGb@X2`Hc>@@fiiE4fv
z;27LP_U4^`JD@47n(k&<&7A!t{7lcH1;G<4=jSmD8IF4wba81G6N!TK485x(>QuiT
zhGc>W>aF%5dt*w$5)o4k^x_kxj__4R4HMp%FLkHDS%SIK_)1%Osogy)K6J*T(NjDu
z^LKjsY>o2~utt8?)1$nS-Mv1Y-lO>`1kF3P>O~+Baui~D+O?-~mJJDS+<EbXGC#$R
z<T~yF6{BPUJu9nj$3O~LhFib)VUTfHp)g%Nf>7z<4j1j~+)gquej*~1mF`-$7fnlX
z(M7nJYXqD}cn*uS@%oBobTu+VZTQ3)(qzryB{O~Y?1VT9@ICPt?0WRLaSZXhicuTm
z;o18Aie-93Y`$lxr>^~)9!&g7(X#$d(~9Ne9#r2-9S<$*bOg~sMXwwg8D0j^i|C={
z%}t3>!%lXmKrtDa!q2S%US3{wB{jex?Q0$rjkPagGLUsrYJ~IOUHNJ>dwAk1h44r&
zU%m8tx>FBd(FWfwK;`(4cJi*j@a+9pZq;P`t+^M+51SByGWMdC-G!UKGa&9<t0OW!
zLe$aCj?t1bzBs<>qdHKcCT=y>&2_<t7m7p7{=osEbs=&aKne1>%<I)L5KAhZJ$UdZ
zI|N)9U<a$aANi>apGNRrO|(j9=xMP+*`H0@_{$g~)`#EN#tB&A4xdex^|yNh4T&}$
zGN0E$@042Hi8_`%9#8lO_X}%hfBlf|bNJAx`?to%qn<DeL%~t+qTSi3nh>-j{#ovm
ziqgm0b1`I;YD@JhHFH&4RR8_7u*srB3InPC?&0q)82<&2dX?~ypY+hT2C{j|->l?!
znOS?S4s>tF54^sXk)v=vm-B1(rVA?=3*E<P3Y6eLz@@1w?F#o_hsPP6H)Ctt{bM~)
z3_OF674R3-1UC*xdYE$oRD%_npf3^gCrQlS-Fk=e?|1IdL5bAF<nojR;!}TjD{wSC
z^3$zPJ39`ZGm;3p>DzM2B>S6hf+B09&TFTxi5l6Nr}=H|v2C~2(>JO%Bl}U;pMonw
zeET}t5hjI#?cGxU0Diwzit$&@#IJ*CHNsvq(7dPod~-o9ip#bCIh2TTp*7=K5Tswl
zVN2)lahyBZg_jXh++(*HjBNHM=exHh_>h&XM$>YyH#E}Q_R#q8(o5vJphx@Pj|;O#
zEarQk)2(%pJjs_+jHuOAR;#yXVWw=>X*H=wt1P8<?A}rITQI3gxr2&4WWOF=vwQXQ
zAI~vxf3G=0<YK0#Q_+rdmN(|cfE820jWfQ1%VX_iCfMFaW4y!BR<_}z4jwW?2sxyX
zptA4}{0=uKL1U53c%k{DqzJ)nuyscb&){UE__VIEldjUd*NyPXO-#~j{jII@FaP6#
z6hD^B%LCcNzhuKePx}wAt~*6jd@ucL55jvc%jBv?ryV6r3=~FY_om+b-Fl%U=P8hs
z@+f*L8R%Y2QyqNz^dli59>fajOSbT%@`($Tl$3(19xT!S&c-uzNmhN;woa$C<^p|-
zm4j__vOe>er@6_*%hO$%TS{naOu+V3Q`C?O4Z=b}LBYp&<+%4Qnk~bW^K86On+@`V
zdFSMo)M#A$di8b`P>w_A4j%$=t(}dG$U=A=7Z6_WF+@V%V_=hJwEt<|Ub-)UP0C}l
zFeI|My1m`v8SghI137Pi?w$p>A8$;{sP%&=@9LTw*4VAFdcT+$A}Li>)l1lUbaAH2
zo?xzWVVGru%e7%dj#A81)e^hOq6LbGUZwi2nVFejGCmV?y`#Z1nFElO6m@`0)x{CX
z47us6_hSp9mQKuvz)N2jj*pClLld4c%ALc`$XTpfyGH*T9N}M|wbj%v1sf@0^o1Z*
z=o$o+Mv}=n%q%bCfgTDv9iFe;UF>rKYjwqKjfgI>04tZ-Ox1(5Y93pU63{ca%M<Lz
zaYzRIF6I^YYJk_i-=%zUX)&7ly|{K^P|!}Dv(R5YCFu?+y7?Wfu%g55*~ZehwH4+Y
zgB4f;Qv=Pty-E*xuDVNY$6>nyF1tcb%clt#z@m^Ic_D<9SQ&-`6y9aW#btASz09<?
z<_af?gx@U>G<^M0RAXknFjW48qJ747zY6HO7gMsv*5>D(cAHj!7%JEtSW>Sp0#&kY
zuTDuP2`&a-_eS$<)mr1eF`pBqDAcSU15tR-r_0RG#^K%ByO$&5Nr_X_d_(sg_gpRE
z#b86@G6Ix)ElI0{l<5>=G8|tfenx_QOT!mQKkNkK>D?K3ZkHZaYp&hGKv_A*t%`&Z
zpif8cU!bp54z~b9*sA^3ZaO`e%h?8f!&c6CR<$ECg<1v@FX;M<^ry1*#U@saih#l9
z@s@U_<y?&zZs-nxcN8ms@8~DV^Vs#)U}2u2TnPr8QJar?dilKeOV#>gkphDWDw%;E
zEuV(VTutiB2mpsYbx6#$N5TiqflN|xd;T8_K%y?5eI8jaoZLvPzhqEHWcC=!M05MU
z2{}~_%aCAR$k;!D9_>_}5WfKpmpk`_S&fX=9!3>RO->INre_+VnG(JE(vm&AW)f8D
z5#JqFoBrk+JE_5`bu9+or{!uwTOqe_B@IcxJ~<O|+!LBAy=5H!>wAfk95lVLnH7-c
zy{NAQsB)dhE3;3&twhj6QsgOBPE*n-5TV|$Fe!64;4&8n?c{AiNy~EeZ4gOhoy*A~
z_;aq?X17`DvcsE19a3v&>Ty1R+NIUj)^_|*KINTn0Dd>l`gnJHyBPoZzV3UFJB)F<
zS8Cht;3DxLQ(}~^*$+$5&I%dY5GfZJIv6mZAW;fFur*q0W+Q(nKPZ3catQ**+>h6F
zGqKH0z5?A724ELT#iI1ugY(pC=f?U#zAe3g>xqG_Nw0eO_6{j9aDS34#?Tw4zt-!7
z<f`Ov4`=$-*7_wR)E_d+A!>~EG0W!WaBA&$&bKE^r4wq4c1k@E<OUtUNOWU)+EaZ5
z%}|ou<=te_Ys+KLl;JcR(%FfP08&rMvd3UwBYH@w;Ichki2V5$4FhX?JkQydFiK)k
zjfjW{2J5eJ*lH6@|L)Y?ExACZ0~fPq<KpCu;JLpD%nu;$Bi-NSM8MwuqF1BhX+e$n
zu;a@;V@6~gd*wUys09d?_W5*SxN97z<sTTKs3^M6v**vFW8%cIKk_s{kZ*CRf5fru
z#=Z6NW0UBFX=6@YV?2uIGjfoY4n|<(IX=X}*@G84f<0Vju(`WiqTTkyMciK7usp~W
z5$EwZ3^xhYQ&&}$PCUG3K3aQYz75jP8_P`CBkK2l?9=Q*f}}oOo@|`J16C+RgAM;%
zhRWV*q7r1uG{rt?v)yZ-8@JHRY(Hrd)6sc>wu!h{g8;lxmmDu<q7An_7-ag)!0e9}
ze6E0J9;EC^OG>4QDJvVU&?z0CUuwLul=$?C+eydc%a>0(y!Iwf=>FuNJ36bXKC>sl
zk(QIFQdNI$KwM!k-bZR(Ts&QAp7LA|DDNYJsQl+f!G^ExgBY`RnP=#;QR?i2(cCCJ
zg|xIZ&;!1rqy%I^fLMLt8Ffn(G?}Yw-BKxhMbShnAm48>>jHxR=m2WOue0^WoEcK{
zu{yjBv2^Ae{?ufN(?tuU*WWT#r7lWtnlp*Bd~<csR^=D2C%cmVzbZBl^!D_`Ldq=R
z;x^-Qe%5gJdZROG(?{6Y1**lbuGIDKe~6RN4V$|Yko@xHpHN$w1nxhH7-kk0b5+*E
zKu1b5gZ6`$tG<8>f7B%IjXBI7B+k9q$>@!9b=ETafIin62*tv}az9)?08#6%$Lr}1
zjQ|yr%kdzZC&$C9(w$Ym2+ezEK3$&l#(lL?PmKEY{XILz1~f{(%=C;QA2ycyI04tQ
zj8OrPUCFDpGdN*acpzYsT<x|HAWZZ!n1P%7cWf<R+Om75!zJ6wnMlLn9MlRq2d)&4
z1<&mOyD>>@EhQn$e}+Tw)o&8T=&Gx0sulA(@U-vnQgf{>q=`*Vsy)hLH(gc%AyL0f
zegp;@P=i?BN9pu_5%en7XZ!om#cn}PR#s~V2kiYbprJ|EZ_4_>%1uk_PnBgWAyJa@
z>sQmDekA4t+A0fM05RLyl}S>n#7fihpVfjsGjF{tTifr{xgTYK7Iqxgi!H?kTCOw4
zhnrLRS0l9YDke7ewhytfKWAnO_a=tq3~t%j+hfs^c-4W7bEx|Cgsk~d7bo+<eUOtF
zs`j&Fiwh0~nb*FRmcCc<5{p0LF>rRtg&fWsQ_=?I<TNTRcwLr@mS>2$3K%c1Wu_`X
zt3%LO3ACVHar1Q*=IjbG+1OCZQ8bzP-HC9v1*&Q(d%YYKnQ3-k?eG5n8vtN_c+c&s
z#;7pS6a#2&9%5q}Vmf?eX-2I_fT_8?P4-2QVbzXsF`ZJ5IlRU<0o(2B8|I1PqG5x9
z&IgEwtW<Qs5LH{-FS#dfS_|alzI(Mn`T3wP0cbSvC(`dOUzF{C58ga`+m*1`J^EUl
zqOLd!aSOGBFdhkBb=)Up02^>dLhC7sK~PrAXF2ZJM^{a_+_a-0A6fLPp9&4+Ek74O
z!_3^=+tgAY&|ZzhdbMW*mzrv<K#Pk)U>3gTdo0mRN`gs{^2pG{Abn%&X^^a435{!j
z$>(=>L{=*D<3L^%jb=az07kppf{8YEuD^GMfX49hrb?<7n)RkDm-c4FTqc+8Ns^$}
z+M9t<CW=5_X;xVkD6AFq#&QbToF@kefcRiNQ^T$|v9U3og{@m{<*SV9gG}kFPG`IM
zeF?Ro>0$%)B=po)TRSm59Us401Z`@V?gQFtOf10<JyX*h<0Njp-NzW;;-pEZ7&Ks?
z+j=IuZ?sb#FeET>9^y8b@&Pk->Ef|ujUDJ3?|KIO*RmThwIc$d8*V?jLl|{SyMllk
z;&Zj--`o6^6ZzIBRniDs^v!-WWkDepnxgr0Bj$yr(}Zc86-fNG#w&mS1Ld)%#>bE6
zWg=<_QWZpL$t@<Td<B*iH@qJ_P)_}w@;GXc*KtD~^tOq8Ca`LjQ!C%AV6)pDbrY!^
zNy>XaB*Na-)@&Tse0}9;5}OkMy3}V#C0QRXTgRZ1&oqpu88K5+Qx8V#0mPdK3o_mv
zh3aq$_!j$Q6A;6Fo9lFUC5z9|0&KQ5MD0WmynO?+Khjrko!7W1ww#`wrELhhUmbi{
z#>k{Q0GO`A%EjC)A80%Q(oESvJRi68RZE%+XewBkJ%OgEzYCh7!C+9(eFLN$MM8c>
zji0=H-{4|}6qJJ3*qgO<$Z2yGu%{|)WmoV+n_f@x2ebh1LA~?QH{-_fohe6<JNQ4g
zzA`MTE^HSQ1q6deKt)=*+aQ#Vp;PJZh5<!DKtx(fx+SDxV1`DzySuv?hB-^&J>Pe(
z>+F9F1G8uEy`J^N9o+2fX4A>V9VW-y(`2YawHr5Xj3oldz<b^#RyoHdlKu=_V%{uE
z*ioBP5|B?011MrmZiH*UdB=!#)|!-1i(I^@9JTw}>bjV?sQekh)|xPC1odmjGc!`y
z?PLa|b|$e<1tcDE?aP401%se&5zx2rX2D7<pmklEA(HjCmvdac#uy`~kZcKpw`RE^
zB{1i}$+Djts3f{581)Z~8>Qg0OOu<v7%$sS;U7;6m<MDGFOX&06EO>UT?lg1h&P>#
zmsy@JPopzr(645-m{Wl&y4C&=`EZRD-eXROvyyB(Dg&ALok_f6uWG0Hp`lF}A=A0C
z$JR0EsA`m%d9E$ojS=(k_-QdwxV5sY#A$SjMeym<b^1NigDQ4*_6$#v#pqjzUP-Tb
zj_vcx;*AG?_Lt6AR#)EzA0)M{6=w>E!I&8s<_@wSMKkM)c<q{jETw5#tli~g=M^AL
zn~qyed%k?IwU-{mPM+mGk@V_~Bx2)E+fnTpSFZVRw*CH*XY8Wmyx(~s-I)rAY)mX7
z9yZgRd3!PipRD$mJAq2xZOa>$OhA*76=XWHij#+JrE##M4VWz|r^5v7yJ-*C9Sa18
zttXD42XBwAJGKE~uKu+Ptvw<!C0_yg7f+wgp8Td#&39GMm@2g=^E9?Sj3u&6OZC~W
zpN58RxT40CZ@g&;iZ19MG9py*BY<xY2wP8~V>vDD_J?X3B;@+6v5%QB4g2~PfmGOK
z|E<Ru<Lr5@_Z>M^zyhp{C6Y5zRKWb{F%7ucL%$UEYwLXGRLC^r#<<Mce3eVTA3uHd
zs$S{h_C4a0df<Sh>(U+{jJEtY@h-CrtU@Nd;mFuv<K#>ur4f)Z>?<jOFhFv&10^jX
z8A?&dkdUMPbKNYgD!_T(eU-x?{+%8-canj@x{cDZ9p%WD68qHskmlWn?=Qoy$AsJb
z0LR4e?f3HQ+?R2$VzjEusTG9wH%_JO(L8Yv6FQ#lxqGjr=NwmKWn^UFAA&Yd1>W0&
zgfk@?W677ZxcI5hI6U+IG(&_Q7z$;lvB1xN{0KZwVCZ;@(3oA&Qg~7w@sjgzhd>v2
zGq{U?rzCmM<^jnavOqiSsRi7w>~^`%)x9`|FZ3Xb<Rc58L_@J19}_+inR5bzHhYcD
zMZwYACAKY74mnXr%F@(qS;SYGajGc>-{n{{&Tk%Ph7r$scJqO4pgymB83`CBk?@+>
zNIR5BpDCBU{oT((Rizk_aU-YZJ}FTSW~lTq-?KKiqUg%7<j7-kNYEWGUBoNwn|goO
z+4th&pyP(Pirm{$YZ0vXSoU8Of48Z`QAlAeXO)vxR5mcSM#aX&_!fJMhygirV8>yQ
z^!;P<$L?_2mJoCYMuhgKnc8SzO6>}`_5Z%`*Fb{YoA6zUGXf<S8GN1JSoNa!2?>XK
zieHs8Yhy<ferue%oo%8qAo~a?1K@ak0vx9n@6T~MIyf(5qQBpN;}yuL^6PwSQuA*+
z2#x_9R{_}Tt@KwzxI9)qmo~BYEv!8&wk@ZKm{8lZ4pX4Ldv<nPk%}NcmYjo80MK|}
zt6jT|;f+WAR9O5wOO|r(doYjL*!cDJE9bY&A#jSdnV-6c0gbbFc-Yy=DR~U|&O-^p
zvoIJ1F{*a3)Fwi{0pBKf)LEp3#AuTXFX-CMG^C=jgm>YKGir5hZDk&=szO4Ze@{=C
z3c%`CSLsc&TXn}=5x0_+C-3<YkYCT+!&v!{K>O<hSO+IPDbJ=Q#Qq{hcSsss5m>vC
zT?&y7u3v}3Six)H@Xl~)qWcwiqi|0!mw$E7U^qbVst+^P!nj)3xJRJ3i22e!_cYKg
zdFt;t2^>w$jKLhnju9o;Sd<LL4AT@JQ!s55N@E57-UD!qWu)c<(26R_&rk3>%~+L{
zmE=NBePhkymfc+I+|@f?o5;CE9|>X2^37jMTXiN40pZ4gO>%|n7f!>o!~Z>o@uK-@
zzS(^<+b<;_Kuh!Ip;=Q)lkMs`GG*Fq*ui?TXmz!pwtRb}X?g!22nT?yYFh$6Puu{8
z5%a8H`B{t!2??VMru1mLbgRco&7IF&L0ATT06NX*931<AZw}^6Kv}T_-;sjNuA>Gs
zgp9}PS8lEVdRf<cqS}7rBpZstls67p<C2XRY+yd=ET7LB>-ejXaP&DK{JB41vuKnW
zO``nea4CdUU{2&t;m<LzdX>WTO?PU;IPX^Qp2a-+S<2;p&hfW33vzuDVT+w)A7u1-
zsdN)NDBq)^RM>jiN+5vj$Dr~;BuSTrk}?r=wKbDJweJ+%W;x#+26JF8^Qk#QZ$ypH
z8?c?0K;p_a+an9~%#9`b@e3*4-GeX(dVAGtoD#ajTeSI0MLbq8sNd`B>&MjncWET=
z-Y87_u&B|fw@Bv;#2cxYxt)+@Odi4rtx7v~a*YzRLD(<<t^axfdF~-k-@wPJ9sR+s
zy|O|l?sCm)3h=G`eSHm$jgL15jdxRYflwnb@v1hRZwAwnyEi`pRcb(L>!_{m867<x
zXq^Y4;rH)SM+ZB%^9ni))qF*<kOG9^enw;CXV3*|X>K0KR{|ESf1hPQ*9=#bG!CAd
zs@3=&9v&VMA^HeBHuUtZetv#nSF(_L%16z&*pVGB@$K;kvTS=G3MZpBJ_5M9a4+;v
zOE2V+W4Dfw>0ER0I=O%o7Vh1Q>)SwpJ+{>3RWM+{X54B5+lyAyWJ3cofCV`KPNC1v
z8-Z}K`S;=8a$WwF77zDqvel|>>VN=hWT(uRknZ;O;*ydS24<ns@^U;p?971i@@nY$
zbUcr>&UB^yI(Q!#esy+tBUT;X*o}VKxq~3;Mjo#-jheiFe+8cQC~^>Pe)Wf!;N;Ey
zJ2%U%ryq;Fe;Crj!OaasjyF2v>LcR5f4~3W!4$aS<K<Sg)YL`>Mx54D_3M5R4BR_A
znb+-tqVk9pwk8X0vE6eDi6c|}Lx|H03cCNDIEKfw5*J+72)@g0xY@B_9PIHxFl?xo
z%74@;=Xh<MOjJy)=OAIcJe!7+oSeQ=Peo<v|Cgo|`AAU@s~3AY*xCIn06>6wAgE16
z)yvizW~lbFBW>boyP$9Q*CLglvAA(6mOuZ3!T#GCmmV3InZ<^N0$_2A$+tFyscCjt
zCT7s;%F4p>@)bgQ4KSVljvUg*7rxyh%yMN0t}g*E2k&_J=I!vklaVnDWTdB87=3Xm
zzlm{D;_)L$?+Q@wVQ{DR@(b^Xy~MbDV!T<dU%v`s9uMw&U%qoD$Q$D-e(B!)yUYAN
zPM$rvLjBhgy^_fHZMl3I!(-22KJVLD*PX`87v!6F(=H^~BCn|}7GAxDGNgGH;{SlP
z$^XUGzonFJeVz4<6^-@dVUwQvm!_*feLWTuRiFEk=(Fy}M$(dsXN~W#ei4*8+4t+Z
zM*!EI)Eo<9=E#$_aHwJ%%U}K-IE1+=3`MecRL@*hzb$xrr-#|p?JF{1Uj<SRH4m}i
zz%W*!P@LsE4VQnh^9~3!Gk%BGE1iq-<LtWta*5AtZn;e2@()+A`5qkI@UFlv!l)lP
z^6=Nd^a)^sL5tzK&RJ%9x?-xYukxmb<L4UDY+gEER-mU%o&q4^Lqlb5Zlso1AN<l5
zpT(mM-^JH;<WEoSVCi12>a};Rt;)F&NBg{ubtGhBJ|Lw0iAV@dQL+6<R3LMtg@wiR
zZFnm%9fp&3UY;pN1Wg`9*Vk2Ty7oJi<~a@ULBp)ZVdZ8IlWv7P>gp!Kr(k3{*OkCr
z21+j@Bg9&_E`^RUgfa5Sp}<WxBI>6KLdWNa+8JV{F-^3!GCz``*#D)!FQU7x4dh}o
z`={?(-wiZ39F|;uV$y*r6NVDpbMGYCCpA1FL7#7V@9Fj@0P!8=s~=q19mVK)w5Uzq
z>sydT)4^(3a-sSAoBN?ku-00YChv&G$haEsh(Sg=3*4QRo`IX5pLt<a3QdMLbqfD*
z`2jPJl1nix3``n_`-8sR3HkDcZdof|F}-bj%J&NkCXhOB2Q$Qacr`#ipPvgVDHQ`4
zdd7?Fi9(g)y2*7X%Sd7p_w7HYEtv(>;!V^NE!1L7y;^~FDS{T3iyN$Fr&?Ie!pqiE
zLN3fbNWQCkVHh`by)Ymk+h5||^s?}(>1s2L5!m^|c;2wHvKp{_iUcy+ad8sGDXFOd
zb+NPvFaySHhTcl0k~g3~<0GReY>>OzhMHL&jMKFIbP>SSIQ<Ywhcmp{S2Ta})B_bN
zK~xaz@u>dt8@^OeFU5FFNl8XRpa4@5A}5~&0t%`HH=ZwZTlD<sYyg)N7{19p`uMSc
zQ8jyMOGjH(HTrZ!oGDSFbh-gs6{!Pn@XSujQY%PkS$)Ok(sx8%uzk7_TN-h>K)u=D
znP218ed4meG&o*f02+}X&d(izfE-tzFLk{58>NeYp8B=)_s)6>S>Wu4s_~CqIN48c
zQKHBA_VF?*e(F?+h0ve`(Cc0o!$S>W`g50i90r}f194sodx62(VxR8Z#0*}Z_&AMy
zw`I)y=<)1tDd~Vo5jR`tew~Q!s6vh7o68`A(MHUKIV1Na95B|mB`yk}iC-f)#ijZl
zh8Yj94%#oNwd62gE&K>-T@#G_(frmz5o1)p7nTy%#g>5SLJ{AfW-{*Od*uB*0<Mkp
zwOSqQxuOpeJ0fBcNa=H<&Fl68=Kp=39}61>da3jnocj+&@!TYW|7L&O9=6w94iNUv
z=xuAJpU1h<8n5?0>RyoT9;2_uP;@s=z9!j(wRjxG=P28m%e%LH6(PB|d+)%!)Ka6|
zJlAbfBTg+=>=qpF&}-fc^>H}=5kpj!^NLmoiT>jW26?Zma}Z__R{HMks{8sO#m@c$
zRnQPCDSL5gti4gVXS&@SVM`mqYHy*jdpE@<x17dz(!?x_Q7Y_VoD;*nF*f_Fb2-Us
z^nZyRNbxW{F}y9<+&I%v5aytnn*Oyz#`v+?t5u#k$3Mxwxl7y>tX<gv+yfVY8@#d8
zdfn+H1FeDg4~!{}&IvEq*cIDr3z=Vq@f`(vK}@x0NT~Sxiq#~mYvq(2q_Gu;-B_hL
zw?q!n#mI7^;f>&XcZn93F@@crOVgVoToflejRaDdu;if3T;kcmN!rfaj`~-NHC55}
z!HbU@Z+1+VXWbGs&$O!3d!Ka;GALUQvI+~joz`x1gee&=8D(TxBcTdfCI;cxw9On%
zGAzDl5?Kvx_61%&vLTYGxi7H|5<U6fReaD6Y5X&?kfjzJWhPugi>fY0e>FJU<b|&2
z3e&F8$}AfgZT>jLlqq>UB{llw?rg7VK<lD8<UOacr6s^<CgtX~NBjV+n1mXk{bZo~
z?R7j^0jxUN45fi2NgS8?60kO%j~r^<DoO0@?2PG~T^-c}0-0KFeb{Nb6d<R&yoaKk
zHTS}19_8T-n+)z;^agzucd1@_^Vy$yddgX{s1kWhr8NI=l@>XGZf@B4D$Pi%Ji0fP
zygxY3`GM2m!-qNa-r#s`(kmZK4$_p0bx;hMn9y0B+P5mAy`!bGZEYMJoSlh8ET@wj
z_6QgWUugX?xv@C7x7f}>-Jfm0jKrgW@8DIqoVFD&vwV6zC4;(f7f$Rp8SgiSd$Az>
zdvBi}+cveKRSMKKbDb<p+X42tpQRfZ?Od+a`@L;oubVG;c{)FzE#E@*^qEGgn8Rrm
z4S=hsH@?$e7)5qC!Xy_d6RH@jX4lu%1;(?98J@B?r+>ptO$LJLf2qgF(|csx@xAiP
z%-R%gA^^@yv7g+Lz_UH&<3E@AR|1{Kxob`=h}e?X<6vaWaXscC5WF~qqcC5*VB)bH
z<8>SOW2%&ShD4%wm&5Ln@vs^GI7gn$1M5`i$!yd9^5v2?dAq*IV#pSq>9XWswHTJ}
z<7fwo7Y|xkT=2uZ8C9Urlx>!-N9kpY{7H$<@IRsN9PAwgBym+Xh$7@yx(`!oasiz5
zXr;H|4JICwdey*arIw2e@%}1sm((h?qgLV`$WpgQfAj&Sj^tyd!NE+tIMDSWrXWJJ
zuxImEFm>1*hee-?PCUBICtliXWMkMTrxBhfGc+tYald1Wy`^{K5!KIcHt3NEXT{z;
z1%&Lu{_g5J!`XAOW({65LT|v>8Y{5`O7SsZmIP8V91?y}yZjoT25hvqH3B7Dv<twl
z0!~{g0s1X+7Sq4OX_&PuB_~OFtX^#Co0^_>?=5zt&J%^aexFZ!fn4Ibgvn$^=h;0n
zU4$pu&e~zKOk6^Id{Z$Yv&M$wdep)kXB{&zseEOAx)f)9>LD!C^JbP%kqg;^Ms1%r
zNrm>Z0m!$Ph-K_TWv7aY3N}=8Wxs=mTeyy8W^ryB&C1G}bo4EOzn2%d#(-|7kW3-V
zcdkpYa19>zF?4Rf|2&a8<WUrxQ3o;Lt6g{^zx1=11DS`E)D%A)5(a26kM*RJtu3F&
zf{BC0gldCd_9WBSm9Nv&=#y|A1wHwlvQ2>%-#@=5!M3Aw($ub6PnBvyiA%x{5e%A?
z8t8*LCqAN;>ow=IKYCoVy`km1O=Y>DpO`uK0KnF(4A;w|3v^o=o2FrCJs_?^ytpD%
z<#9-Ad3%#B2U_g@FG9|=@77%}{EFvk!AYPO&Y6v&bd~`3663=w*P|4f&UKD(%vEct
z312Z&!;{leVbl0v@GIT#n#<1jx(Ii<$08S7lLCpfat7Z%Ev@f?o`i|jQ^#~_(7nZi
zaDs+z0EXB5*0a5IDS<NUpf6wUAFCG~uwY8G0A)|W34-!iRWDqtWzr}~YE&-JsR4RW
ze*w?-(ag?Ulf|Wsyd~pfV^toNdvi_pc6MN#T4;s39SfLoV&?B*y*CAzihU0>%C;x?
zjJK)>A|eoIjkCQ$DXid#2`nAlM6dIOcMQ!_2xsfM0)$qLo$nl*m`v;;^K((V9bh+6
z)DJ8>w2GY)l0VL_DKnx_DCiHa^^t(^Hm3|@A3v5G*Qel~jQu|o60}D<ORW>9=7!ZO
zB?)o}lr*NQP5Z&*Y;cRP?K>te#bX|*U`+~u)>SAw2{<fdEx0z-6T$VD@rsT7ef{#!
zt--u+2>`z6^QGV+!K7SghIQ9<b#+M*m&k4-xn1QG;Xd)cXB%^zwwr!LmVKcO5`-6J
zPZ${15X!j*aKZ<19L`&Tk&Ga$5?&mQ*T9@j<5tNpR~r2J7~*=5v3K7#o`g!}Pyxxo
zLet)>e(?1Oob0o-KE5tW&feYhH2y?^&?^D5+kQ1J7w3oO?{5p(E$pN;A%INt>B8Mi
zB(e2)6&DaXwFBC%UXm2dQl^`m<2+vILn0~$sLt`;+IYeA=iPZa%-Go2t<myCI|bl@
zL`SCNpQl--1$R3<o<<Xk<Uf&D$W}7?>joqj&ngW17r;&nsF{%ox#7srO{4*sW>1ZK
z$h$|h8w@zw`(77@Z3Eem+O%OcxW_2~3*?_1PlGvPk$rIydkb`*$#MtCmz#8eetZfB
zJq5Vz83-n=5{K5XrXVclBChuq4@N;+a_K2JmxhRDB4e{#*wTg>sK_`j0sUJFA-m7B
zwH+NBE4@@3=FiQX+b3K_xXcDz4zfZwPX3xz9E{lJI0mt>$*@!_EqC2GJBHb*pAfVH
z@bW~BGfUGUcvAni`ZqcBYHI<!ut^lVTVcDelyNW-2ofDm46BYJ>6TO~**y(+<~P(W
z%5-bY1`}Y%x9^b@xfXwV6esbG6ty$!lk7_b0oqMghihC1hli_^m;Dzw4rT83^JI`?
zYw(WPteP5F@vpC#Ng}K%h0w;e104~ZWeL_v(@DnefiOXG@)ic>$;^<8)p~9YvUUmD
z0*l05*cw~*xs;fmUvX@ynZmuDo!K`V{UC&6-Td^v!Jmz~Olt1_2gx`v>E<#UN?ScU
zTpu49k^gC+Pmx^cdAgTAWI2|l7C)zSNXkWwJ668^GQcWYv~?HUHQ@GS^ayHWvoliA
z0>W0nw{IEzIWYe@M*mU(?^Zni58fSB^kIF-asiB)1jtB9fgKFn;~wZ#iEZjh_Sj?}
zu!k}Oy;TIN?4?~TE;;|y!QO{{mY_ba%_D$S4AKO;9Zea!uZ2LPdEE}?HhO42Os65G
zQl|gm!-})S`(<FSah6gCOo2Qlx0|Xf?Z5xiXP61vONV%er|2_nTBhE3qwLI4#+qPj
zVwhevI4$T>_F?7VR|!tp<UrepwJEO&LG!kQ<4PO*{?EGf+}RXE^}XEh!Z8Hh4ouEg
zH#avyB2)I+-(M-z9vINgJy*d|S62@W74v_Cz;<o<V)pZ(7@kRs(mHQRTm_PPxM0Yv
zFPd4H5kN}7Vr7=&R0F}yQ$<{~KB9e2W|%@WsNsIR+FxQ?Y__#!Wt9)SXl|bc$|<IQ
z;8j)+A&(~Q0obO=1|TP9VqzjG83+@|%(dxPQMh=a5!yBx23(9_PMcKzcv9bX*q=NR
zL97It{JcjB`s0cGp5hZ9ObkRtsLLhT<NJ|hBoE#jnKj!0@6mj;_eIGY2GwlPBO?F}
zZ?`!7Bdy;ar%QR7U^lcy4l%J5kb&V&P~g|g-X;7w<ueSWgzwisbV=lKQH!<2jcVp@
z>06j`@6Sj^S5btmM(4n5(8qc9T<`A#o%zJ5A7F_ao{^mLFZ4B|;L%$)YLz=U3ypt>
z{m24?9?{Aei4v8D#S8*zHZaX+O|OMSR7@e<CDaurDm>$M7Bpk94GC@x+GXF4`x%=5
z>&D_aNXUS!G7x}0uH5Ee$Qm0_>qeTwi!L%!dSo5-TgAsTV$8LEXJxJLF9a0DGEiFz
z>mCD7o<P+!yK;Grj70TO#gE|+fAM1UTMN4<)5pl%+c`eo@2_Xu*M>Qc*BG-<PXTD>
z<Uv&>;J5$)7BDZBd2f8ynXNvlfByL{aE3!o$5#T3EULQ*5q*A2`>%@KX`(yC*qBwQ
zQOVPQJo7x-SOrtUA0Z2<;%M%!Zw&mzu`wOOWn~`03<cXtXH5Lt(K3kayRCTNba+ej
zl&zeA_I9ov?$d4^yNwP);_XRTxzQklZ7NW|1|rsQQsJ-nYGY#RZLF-VSt^r!QuQt3
zjZ~`$-S^a7oOXfH7u_fJv8eFy{qsue!!=2~C<<g}Ie<cM4<y%|NDo`XPoo|fs*1M`
zaa)YoG#{8gUY`x25Q+t4kNyl9!>+XSwd3$ixdLt2+2Hr5Z7Pjf6HNGqhB~T|49bl}
zbt#`WfTnI_M5b&^N5m&S`{m}QrZST$LGFy1b%L`%(WG;i&!0cvl&n4gS@l?<EmhMD
zfZ>Qsh+P(bx_*89m?MAw{Aq43(}o>^)?MlZa;Xz&U<-|xn7#>Suu@fWJFlkT-kN?V
z=Kl&iL-EYh5uI&t2ADn0eiG51`%y$Js4yB7>}1lV_V>Q3?!DB9a{$l}Tq$Uv@`Jkr
z+2KHrwY;PxO?Y>A7o_^Yq2mF|V1}h;E7^{L(H-4SzXR^JL<;XgMHx{VXEgkX^C~^S
z@Omuqr{fPWGgNjmP5@|mF6*iIXIT}7009l0z>18Y0NL!!%uErF6M4aChM2Ee#LN_0
zd!>REUWw2kzk4iI?A&6b1dOU>7Nd%@WAt^P*S#TNBk%E+kE%*|zfCz;Mq1iwQ{Iiu
zpcK|LJ|3q70n%cP_O#Nm&qq(|e2~F$obPpM+WU*^5~ZS4av%Y-FAtF>mX`C|%Pg{p
zrKKexu=sGB^PSVt5&DJh6tH<ZqTdV#ZhwmM1uCTsSC3r}^wvmSUFe>7KmeNzz!hl0
zJpuwDUsp&4Bk=j1HeOcJFfj%9$qrz?5UO!M>Z_j`d+oyUylHukdqak-`4=g7xC|mp
zLfHQlVJKN!74P%gm%ioI*Wh3fjO>?>EL)2$)iIALR|a#By|3LUw|Fo`xdPJcX-}T5
zy+L#2(Z+A*LP|cfgIrayTTVG<V4No#$2~dGao#m4V3zB_*4qnG@=ToUf&yS7)w>X}
z01VP_fytytjA5y4f*_x3+dvZn4eeiFY7M6~Sh|3_*a8b}XJ8!a+E0@Mm``q9F#;?*
zo0>=5B7nz5!sT`V2prCv6QG;`dI|4AjC*?zy0#F4j@zHC*u8cE<*}Yhv%ZN-E(o|B
z%2rm9HPu$cWF*}uv;KcU{u2n@*|Oek9R%EyMW@PRc?t#AX)htLxWpk9{G0>K_3{*L
zA(dm3MJ~H3UE2Kp>lz5Fgv3PMVXH~7%RO<eK1lJ!1|S#vxrNq9G)m&opu8>8D^^5T
zcUo`tp==99E|k(2X*sY0GM1MGfAWgPBj}YJpIha<pl9YT)6eWW2-_ro3@pmcUmot0
zaHKw?l1iPy`&-Y;8<~n=z+f=!n;jqzc=%`zj0tY}mY)K4adL-|k(HI9sWy=R1+}!8
z=ZHRwC-YR!aQa|yLJNKu7dMek2R%pWjNssuJ={KDBY>t}_g2EWIfv49M_7r6+bm&A
z7g!Y;vCq>5PSwE#KOMzq(Rha&1I=qrcuQmrVR5<#bKd$&&f&I8DHaomm1BQ#Ohuid
z4T`EC+%mJCwgx?g9zr#2`prGhAYy5bC_yxBpd}6uX!z^Ej1Fr*`p`(n5A+m6B_(qf
zCK?+XLCtc$zm4E9y4WesrjJwxDZjA(8RwD1DA=S_^E4cXHYi8i)=ur0p_)7EAjmaJ
z>|0Hj0m;SKi2Qy<rAaMDh4vHMX=)l8d6H9q^<v`QcV#}eaVzX4R_RAseu`}O=MEQO
z69Q32uyN>c?tw}YLBVmhll(^dt`oN5pE{r0OzLMuk-phUXG@)N;K!eWj*``j2ldFK
z2XG1enQS+?&5}^yJQG?y5QUX9-IBP}1sEYH$2x0BXIFbW()rX5xZH+PNwkK%LAvUp
zq2@z*x`65Xbw$*0HqRS@jEcJKn!<?%$w&27T-n3zT9o$iWdlpCSp@q|)&|?#kUL{#
zmU3u&)S2?^BZ^|v!=dc(7S{BRy!Uys^L|#unJ0acaVekE3%4J~(tBt;d{lOB3mwb{
z1$PF%{PWZl+t@~~K*N!-QH4Xfq%HnI#h{U~z8~9DHTs+q;~=X~-T44{AsGO1P7nKK
z5Caj+H7hlPEPPe6qbUZ~Fo&V)Js<_rfd_K6fvVHS$ti<Hmrj#CR=(!1Ck<$PzJ3#_
zV-$Y`5Kdg$)^%f%h!C)ZnIjo)-MVc@62lKTd%|>dZ%3O_{&k8Z8*;eD5pnD)Tl>Ez
zmNiSs4aV_>6sBeyCU1kF<0me@+Lo$eitTX_FQQyv6|Ex2G7*tTcER2=IvLzqGe?-w
zDCl02o|qm1CFwOx>4R)3?%qwAu*D0<DwjB%gSg||xg*crKHV+XR0N=&d%=JS_mzh3
zMB!YYGxN-mIv{K1rMq9vs_kx;3*c@kWy3pd-XuhBdi`BK-rYK;Kz7J4pBW(&SC$~)
zXe68iI)At)u3`1+wCJ&i1ZoZ}@n43Y4%9~w=WYE-;ks&jdRU}uUbE^+davf9CT$_T
zu9CO8VPQQr=f+?`AK>w5?`*1{=0??oh}|orsN>b#1HF=*(HSe2e337AasO+?=`#jn
zytqI8rD<TGL?&)%cQ-&qB??5MuV3yMkDJ29jnmC~^VOv;4n@%CYm+6P4Kg@mMm6r8
zxVHTo`_F`m?na5%9S1kJDgZbV@LWI2`|(3f;q35Xrmna{apIgd)>}rx5)$}KGet%O
z%1OWbQ(41*jbXA9O7HNnFllM&6Az(SV3SY-z~86X%T&(-x6Imy`%`h>wWe!&E0_BA
z+G=LLi1+j$S2DYBHf!*+-B+6Dom~5`Z;G*rIRl_bcW+8>j+KsP0vW8<KGl{y?cB1L
zPwsf?#=|yDf)K+E+Qrcw!U_x|Kl-+hOoMc%pdEkj0MOKkNk(DB$Htx=ZJOiZ9RqXV
zw(dN&-gJ%99Dr?nhjcl9^Fa)b%U5I3&OY5wqq6ih>c^-Clb7w$N!YzGqALYI@1i7#
zmCwTbJjm_)Q^c^Hot<}Y{Whs@NOdbVk^zuZPtQcq|3`O9V2_7rcr5GnztWC*XwIKC
zUNG#0?sFqHyAs(ll+V5iXrdE95JgN>bf92+G*@*S#7|cjmxGN_nAK#}g9o8HIywU%
z>B&Hw-59d1k#3tH=8QYAITlDCbv8ME4&6@D^ocDtJFa#8@1H7}PGa%`elyrk0DQs$
z;4^{4a8yObiE+0Fkor3g-SSFn+Zy%at57Be-RF!ORr08#)h12QDm9BPVqTWdw3iBr
zx@Y3n)I(A+&2o9+)KxUD{kU`U)BQc>#<8*3*VeCJd(1wjP&yL51=mF$#!DWWbCONu
zjUT7>Jq+I_=a0Tm5{FL^hffkmOd{p^g4~knu_Y6^MPAz|&+7ExNd3X8Z``uVCeH3%
zy?-Bokz~Qxgz<uqlCs<5*{8&lUj69_ueRYV#TuE^ssv5N2?9SI3C&n3HZ^=d{ZEOv
zEMlskbfB63B^ekPiC^#@0EkL5)OzLVC_8j6?cVy(f2w|_uQ8S+J^0KoKjs8KvQ0Tj
zMCuc}%PupMt)pZA@UU^x03>gz>)#t{Tl_Gz#Ph}rTfvw*u^>ZKH#^LHzBzal04TeM
z3btEKtdL!kmSZLQFLSFLx8EBXi9Z7FY7!v{C1t<g2QFrwBEBZFhUy#dO8$#TFDb6G
zs#5OV)RU6RT^lr?fH`Lx<__h!bDK>V{OOsMZgsGjUg}H7#xWTLN&D#7Sg)v_UXpQ*
z#;&cc^y;Gmd~jBIl$BKf^#U+37M@~6i)q80_N#2?`<k$8+zub`Y)zCF0AR(&0pKuj
z>&+xl2)Q$9oMWP@J(sVI>y&DgqA){x`stMrL@c}(BVUv<yLD@z_D3Q1qZ~2D9r0YQ
zZIHD}{bdR_&{~sqT9~Jm?Jt`12S_`c-B~KR#7djxsW%$&mZ1YR65abm1t)_0<CW$G
z2{knx6S4_a@qEs^7Y(%Nd^N)l9~29P0&g4e?A1{v`UXLbLt3J|YAmRjpsQ{7j&5<A
zj#&)<MB&vW<^wWE^N@<s=F!o&+@W8oY}wpXCF=IA&9LJdfGN?=loc}jU0BEqz;eU+
zldH?VQo}&3>B-dW!P*Gw9W2N)EmqL->u?^d<X#Q(z>sWJxdVMV3|JLf$5lcf7KqJ~
z!wP(S<}0zI5vNB2q@deQ);5%HAr{ur33|^{PTO_*ZZQXocgBIhtLU3vxRA>UF)a1D
zs-*ks@HF9XA=6PxG*5w^Htd+kst+=nA8u{YUp5Kwuo>MaAIpMOAjz+9{R>Jn;l3DJ
zgoi7GNU)uPrnmWIMjkJZ;<tyC4=l~h%=GktP1-267c(5XX$CO)qeq}uAcuywg@|0R
zTAinna+xbgwR}rJoLZev@D(F~9>#~h1^WK1-jNZPnWU%f=u;#zJDghLC+h|5sSmP$
z{sQF=@DyPGPi>-)l}!{j{F8JMOv(cwG$jj8|37R$^)e|bDKiS0cnfhp@Y{18j7G~g
z$BM_PM3P*nU{0$*poi0NjnlUv+H#{WeZBGSwAFZ3I;gm%&>Cg74OPqu<Fqu-<?W)h
zVBfxVjUBGvn1*jo{GJT-LaSGrF<ItS{5B3@25uAT#ZEPO<bzVKAng27EN$C)?}JA^
zfmkRooFfPD3cTHmgDf2%Qe*UqNMI6ZKcS{KV(gbuTE$T|v}o(D2`mCFzkB2dn>_k(
z3ZzWCN}eAcSy*f=f1y`mf<RgS$<PpYSlsg(rzXZQ&V$_d|C=MS)GMDmoWJk7S0R;o
z<c~+5^jvy7dqI*?$ZZ5(!`ceWO$M?Q!l9uiW1#Qqw5cKI>4Cq+?;8xLC7={^-CvSH
zLp|$Xzd`dH)BewGU6MEKo}8TT+SCNT$a0>5O);RZE{Bz6YPxEAfL>j-z+Nl|GGqWY
zB3$9s-O%8p;RcLuoI2Z<yFK5${^W)BOs+6-1?tdi08c~5_k;=bku)kL2ge-On9nzf
z%vJ|8yS*5r5U!{*&;c+X{uMS#tWhmd-i1dY2*4_Jbx#K;(wPrM2bX}N8}Q1Bh=_2t
z_Y$-}izvF*L`FhM#N$5XU}hXKUS#-)Nw%QM5{3(T4zMsjQ5sbXApi=ry1E(wt5nXn
zFf@GA8|^e-YOd<$wEbF>(duhZun-`Kb@$VD#+B=dy4nHG#XyDUIHBYu{;knhvX2Ft
zx4QlDwm?mzU4g1Wg7Y0-S;=Y%sR<z$>VtdI&K@1F6}$8nfI6q-y$|Lg%yXUa)&)Ri
zj{S*`e|#zvrVgtocvt0g2#h9)^ixuaSTuTmxnfgMrM4;Otn40^TTF=-Y|VT`fo$R+
z>RtZ9U^|AJ64(sa+_@_NeIKerF}R#vi`=Pe`1Px!EYL|?lNuSWv$3i~o09U($zmGl
zs>}R$tHz($9@cH$kX{r9CeZ*wlV&Q(;<z@HTG(hi3UscVo(T(g_4It9$$?~-f%7b5
z+u4i*aIeC2&|H7+OEoes@IvQ&`B;fo!7M#fyUHOI(~u!HL&E_ANi#4GtbizP4Z=bK
ze%l&AZtAM84F~Lv$l0Th_gS!maqi)f^H&(|-zJrq^$sJ8iI4BdiclQ+`1%P!IDj=b
z3a8Hi9^Bi?SWk^~$-$)B@;P&7rND4&59E@}V9ubG7D6_Fjs9K58#{Y@CB?98r#w9`
zQsTd)2Bu>`YA6dWL;sn5Ghp%oI8U<pY8q<h+iYT~J}=gL`}U4NC?Fn^lW!`vmMW%8
z0wmp(oJW)9+{VU>;)vm3GMPB;^3r0jotGyv5>yNoJf?2*&5njJ+4rd?<3Q2A^AfOg
zV(=8h{_n+`$aC+`luK-Eyz{6RShmAaR`I~5!9rTv%IaHo4E=aZ#C{~Sp`o4*bl{zw
zoFEga*OQ964oHCw+<EQC8o8f>Mw(d^Z^vy8*9?78^leV-Q=S_?9zf31+7?1Yx<XfN
zX6yOfAoj;UM9`|_<P-!V1h{mSp(Xb$L?K8ws`>`tB44%8-Sl;ih=Q3yN${66l?+nY
zz0D@-$M=^_M}U=3JdOKBB15tIFIzyLx?FdY##R^RIomqOS@Bn%+UADmjZ6Gj-Us@z
z!AbXnlHb1*c$}TIEVT9snMk=UsvY-f#9Q-~MpkAOE|o%0v}W#`<O_Frdgns2U*9zz
z`0_rEJ3q4pbk4L8PNnY0KRMUIumEhbKpnOK(psvLH)eru{OkfuBM5FxRj+axZSX)2
z2YY*ypK%K*_qxudwSqFV)Lcc1S=esC<Vb!5xGe^wmNZ*0+|JxWA3TVFnpVjrLfNMu
zR8&=2j#US9pMWRd3%wlC7;%qo>aDno@TMH#@8xbBN>;fqJ4NSfgYltB72r0aU!djw
z7uf($A!BW&l&m}p!Z^CJv^13O=?}Om?D31s%K#i_-Z5NnnSrX*o1Fs$mwuLJ@HJZG
zeu%P6*VgJCPu<usETLm+ujXpfaR>9;(bOV|kW>EWykFWXuU)%1u+u29037?qslT8%
z{@)9dprX^xbt32B=m)wm8Vcbwoq+l>RfDZiwhq~r`<ps>cVjTr8cK!y^rYK0GBga(
z>`D;e_^_}7Lbn35cKQ4M&hcYP!HQ+a)R~-m9UUI{#gagQrZeyu&9|x57AOa-Bb}P1
z$mqo7?PU@DGkn8bqY&eaL^)5?Xw;UrK%X11K*-nHmz3-N(*`WJ->i`~m1Kiv4b0`V
zDnEY<XxkXv#=*h@^rZbNM;0oogioU-+rGIfykM6rE-J2XXvma%bObqZqXt|lnAu`r
z4H6G<kz#-RcyVU=aY1X${}HXn@o|yYaz~uCg+Ynipw~w5myzaE#JOaFLvOt<;6Bj5
zWRLHR+n@Jh9F~vIzyLU`jZq~^vv?8ft~O=!0{2NUD=g5eTv&8WAT75X-|I%8$wizj
z0M3&=?s=sXGoz5}+{jX%0N8>Rl|W_x^9d<~eP83Q7wRzNCtO%;!qfe@xw-Le{sDpj
zotBXS8kuLOHAzmfT^(&McEg%Y`ARh+Ag{dWp3=tPc0BaDA+pQq$W!vE+yxuQ+5b1&
z`*9BLC14^U%zfL3p4~{AxRA{NhjHxn@4102nES>lHBk|#%-C}oMI>|zKH6Ei{L?)=
z0^M&7U7o_m=)v7N@uNN5#UUh<K3^o!HptL$m2pVQndM0=fG*7X;&i+$RYI*Z*wT?I
ztE%$A33{~|+Z7|MwY4WJ=;8Mi=!=R{`UX18vLTY`+CI6KB;?<}f%au-R@R@S-?QtM
zE*QZRhQsacxj@NJ?><(|ZGVFYG1B58x3@EaSVH8NL$XyvMOiDC^Px>`p7t@lthP2R
z-`Bkhvcc?ULtGcof9N{3_osoS$INh8UCG$(ev7yby%D30fK}WqjB++{ADQ{p=<&7=
zQG*D@Y|cpNyZQIo;_dO*R`1;FW8v6!W8(Mr(`Vm2%vI+gMlpQM`E{E~lF2Bwh75Iw
z6xYx!Q=G(e{c;eKRP*{jlq2r7YgdpP{+n92#<Y$_PVQgU9p2p71bX&-8^X1J7XSu^
z9^ReWB|8vI{-ypHwX*+#B9q>{#NZxQ)%|sau<kK>dWDC4>F=HU@`j1SHpMf-pv!W(
zME6c@URUpll5v-|B(J;e^u-%W&-3iKI5P9Hci|boG*IOBU%+^YoZl{@l*@b=#cI^S
z>(dNQ%caiJ`4Y)vLUiA|bMX%nqdP%JD8;(Fve+1+q6|N-lfc=qo;zU^aNg4Ucgj7`
zQDF>ViFJB<s*CL1+1vYInK-|F1K8qK8x5BC_BNQhc8u6kLJ#f|JeQ-6&&-5EueGas
z*z$5iH=RX9#c`7e86fbZX3Yt|X%E=a=(5g2)G(@0n8EGGMPYA)pBH-GEr){z>5*O@
zBG*voC@3T(qFogaXyY~uW#edP$J%YLpFl_COqb`eApY^roP<LHrOQt8r2FyqNTq)>
zkIU0H{<tVqh)h)`OU?P3(D9TUwt_;hgA0UN=WKL&g5@sxT_*cUpovs&f$}E=hGnKB
z<J)R3&$nD4kO-^CYv*<TQaT>1;O?q6*5FM%=!5+R%=M-a!5mj(!ikIFs7(ipZb9UA
z&o2kackS1%ebh2`V`4;{#}caK=@315&{|@jtXiN><bH7T9y9)hbC_Uo<>EHELkZ`%
zmrs(SXn%UdPF-_jglisOa;d#lx|^@LEc^+zU)B+Mr7wv3N-2l-st5i@v@)@;>wHQL
znd~TMYLk*aee%$_AJhn#^M8#&((dY?dR(-zAf$meA)kI5sNMk)qOWB*TBTQ0Mu__1
zyF_76i4YR0_6P>5XJ-lgu8KTQ(%bNa&rjA1;6K=1J>J>w##z_svsPS8El)d0Sz2y3
z?xt>QxFAzQgdPxQ-3`W<$dpOkJxL8p^gPN&Zh2(^se%Ds^P~9n<xa1ik4TCN>j##G
zI}Cu_c>{=>9&Adq<I@{=0Xvjqgu`>GXwQrJ<LS;AAu16O=hdRfiBPbE*=Z{LIoR79
zVBX^gRY|&3CRu)>qvCd{jlZ^z4xi^(nx&VuI{X7Qk9Pbw8(^7?Cv4LlJD5u&8(+OL
zh17Mqh=FZY`|NEt1X1SZ=gYq36>=Qow7So~cY}>>LgjT{w<?r`(#v6NAOPehKRI2o
zhJ%}vpP)|WgRFmwSerlwHk~Kl1+&L&G@tT#6)mJnP`duOEWC4#+cBgcMB7O!D$X$n
zPaYJz^Pte${<!2$wxJ4w=IbOQY@*M42TVEW4W?>VemYMhXIdzsGh-~;RVPSm#KPjD
z-)BG2-)BKNynFwuZb^nr?k7LnhepR}W}T!jz>|{Qre~(XA1^yX66lOFG*bi%XlQDt
zl6h=Y+!a8N{uVLPRd_#(xs4D2%X2K@V&+WZHCSfLKbe8~B4aKc0|U->Z@Bq%wXMFa
z>=AI|3u$gT+M0~h$dFDbvui2}BI?Rad+v4EB<W*TDVaW2byxsU0;ZWF?f>-x`uD!9
ziyIkb0L*$Yi2&3~y5k%9_}>2Bl-KrTVWGUXa@kW-o7K!j10$oM!NJw?=%}a{x<~Xi
zQHjvAk3&b4Hl=r}%?5b_qFGc`RJ!7Y;&3-QVm>pfDo(pDcaGXG^^J+}Sf-Rm6VkCt
zh}|2nI<%hjem^TD`fN9_JG%de$i<HK+@jQkc?_3vm$8&cG8@1+tLCc-+x8jcqo*~?
z8k;DR8?M64+UOql+x-04GflI#NH;!7GT*?Upi;xx03c1Psjb~G_QZb@Q|$#|cZ|E|
zhq-i62OLkiYC3-~b5$oP2MnU0Vex6XZ)vG%{QQrTe1CW%fs)kh{5la)W`Mz)Y()|w
zi)nbxnUBApuL8CG)V=-6Ovn!C*7i_pQ4U%pdhD&jQD=+Gi?FH+#imGemKQH(2<Zr<
zs1-93xZ`8P+PE^()43n7b$7;zpf>iYDZO|-&pKqtxcZYD>Kj&J53TYPv!!KZ?rlHl
zl9s2#S5{WOH%|X;ElNpAvC0{5vVduMtwvR7C|{?EiI$dHky`y(=+=1oa-Q?lJuIvg
zmOI}b^Fb69f03oRA8)BDDmlpY_w`ly(ko^3;!&GvfOHzDTF;IF!GNnR;K5N99&36<
zzBX)eVIe}*B;~EED+z&bf#Hny;NT#RbW+6O3@QkSd&xM0Y-n$Pe^@Ae@pFHs$;Y)S
zp!0ZebmY40Ym9}BC86a!`TeOvE&?U)HNNrd7syNz=&A9uV35+XRi)yIXzd}l5rQ^o
zp$HML^V4B*nvea37Z<8{t*YB24q3MuqlZCj@*4%mQUl&}KRi&H*?nE-R;j~kUuV;x
zueq(Q<=Niw+4c?cTHqvv!{76xN*E4@LxvaEX2Fy?j?>lbpzuAU(`x7Sg#bfNiaqwh
z)Wvy!2+SD`9%FDMbruaPC&9q~D>Wbf^5qWTh<(gncuPWTpBy(o*R)UZlj0GLbjl*|
zBDI~TZ3MmLMX=_Mg1&(Cv-QuPq^OmZ+3VLtm^K41%0S&8&+f>;Gs??uR~sfLY;GX&
z?Dxq*wo(K%TLYX8LY(;qA({I^7i=r)?eps&XS|%5Imea@M0kWQ8kIPoq|0xa(B}h3
z8jj6?ii012@$U|mx`;nNYdHIJj5~fb#lA-9hnEzGu9k{|)w4E0?}LjxZh2Ad{y^Ci
z1aB0cu&7++5m+?wf`$w=SvBs?>&FO}-A@IH+ZDF4#o3tmNCj<Xo=oyOpKr@rRh?Lt
zqqn!jj)^zE1h)EM;=TWOMS229bFaq(eRyJGmqp2%1IIjE!BDKatQ(qnWo1Wom|Lio
zc{yF^As1G<b<HWMn1oqDRu<ih7rf3}FUqx)G(G2Rs_V)i0orhjRk?MqyzFei%ZIK9
z50i~PIMmv08oqUUnr@gLQAM^|37}8FM!l40>HBMDU6|7$7@?9Ko!akbv`~1h1+*0C
z@SbhNa3sDsUCBH|D7>%yRkHCBxs~BtQc^OQ3s*<CZv$<BTvgBZ*oQ=90_Y4)U5``c
z<d-LHQY;{T5<8qgCu6ssPC9P~DC9&ecPDtw?KWv4!A?jwaq)ZB*^T26*}uJ@AHsYw
z(-5NTi3$emesjFc&T-puIxo4f##~NXS=rH2rZZel@Izs$rgcqTP7Z_c1@XW9%X=uW
zCHgIn2FO<-C>L>}7$@Nz?$IqP7u-T&Rn=o4l*Sl|#e73aeK)RKRb+4H^-z@ps^@*?
zwYb*F$%eId7FSny`^b@Ig{G<gc197FkeF9A;q;M`K5w(%=zg)7I6wZO&~T5x0tN$-
zlXN4Zt?L&(7?D>l4&4gcg7-HxD4_+X{6saxyPt74_4gN7jMzx$Si`ESNG6FqAN4*P
zzKi+yj+#7*Do}IZo`aE{w@%E+t<VS%myx)CsPbXTe3=W8%(!<q*g2Jd=cf?t*7eyx
zp{XYx?wxgId@a+M74JGLPYU@~qk-m>q0t$21glK?bmefj=H6-%B^;gq9@FQbeKSHm
zW%od8!LCvaypd&ms4#S{CfoDrr9Vjtw5%gBf`oyQ5lCT9EYQP&sv&6Ar9X?ixaF_G
z_dI^-`xokUxaR)pUiXhpttyAz=))@oAdLMHb_^xYzk&5x=tz9KmThl&#_h~&&UX;!
zd;3S0nlUokm0@SyBIB1q%iGmL@J3}xiNo=hSJNB~`wn=T>g($tK9nU(Fd5@7EqnA|
zUi_>~<W@BM4k!?tKJ=!&3;${~^YI2I!07H*6JBQ47&docT0S||)fUTLUcRqq8w31E
z)Z(D-@(1aASLPZRHu&z^pGQq@fBU*2w|d-{F7@_m0y3lLRE_<>aAp$beD`Mk?mX@7
z+qaLlMUtGir-)c|_-*HIn)_^d?L562Dp^K(S~qBFXjB>F8R|{_VABVpzK&ZHmEpAG
z24{wOd;d4P7k*mI(N;TNzP$q60&Hz<p-^G-VjD`mf6LaJyL0Q>kAcBKV1*uVng3&y
zJeIgQb9C((FjD^>CjI}r9=LqX`+rv#NWhI1s{5~e7~_O^clsi)3WX9=P+Qdh&+l&P
z{rjI7EB8UB|Np$}^7WplPyVOG_>YlAe*Jo(?Xys|7mg2u8n1u!X1U)-#l;XQ8L9Xx
z#LiXQQie<DYHVUcb>DkEd4w^%lE2j;!j6%#-8?5ZBEm)a03A^h#nLl}ZCcmR?jHsw
zD9Xx)zFIn$;T$8$@eKxCk`BMp)g=eARyDS^7ymF)a<ni+F*%8{nbWqsDCKK6(c6T0
zEv-oxK^=9|->;uuLIyE<G@fFZSGc=LJ@4zAOBow8+b>V~F1@IG7Wy`!+T+~JJV#0@
z@Tw9kk@Oh)4df$hXYwPo_wCr3BoSv7o$F@i*FRP5xR9fmF4f3P68If%sl5nwb30u!
zNY5TL8?pd!n$l8|i;s0;zNh$pR|Cot8uD^2dVDPHNkO~fe#<Z@A44PqEn|XT`W1f@
z1H6M1Ln=*ni$d7<l&=HV1fYg>14P>{FLu)4%9m?DSnj*Ho#7LXP^0Xy_KJmSz@BjJ
zs!$wCrn;?%_Li;WBkAbcvtvhH2c81|juKpQW(;>1w`hE#k)3K?B?yDE>APf@KhM=)
zswC-a=f0!E51{S~n|nQE@$pr{ZM<(s`*=G?d%Jjdq~FPE?4C;8_RPs;sKovNzQfg1
z&6J~mOOFSypeXFw5RQkim&w2vh13@3P12O<sdRJaR8+fU(Bwo-AlCkWmoy6(-&^e2
zZ;kYv>};c<y~9Jqem=5tB`z@$wx5W=-m~}gKoLzim1pPJ$v8%acf>d`MGs$bXH58<
z?$$zRHiz<%k&M}r>3vB;PoDI2cIN&1^@5gGB3+RUGpw>=XlQ`dJoqu6)l@LH=raXd
z+umjosIcuh-7xb*sg+Pt8A~-)O)7gQCZ^wY)mH<%!dUI=HuCcF4h|6-d6Mtm^>Qhm
zB?!6(!eC_jf~B#MQBj){l?|aJBk$HADjM~_*o`*Q$d;$Yv6s84f9aGeBECMRn2Mta
zlIi}H@vJZ;5%Y?&__Do73L`%^ykFnYFcPY7V^au&A;p5Fgxo<KN~JAL%gp5PzaQ8L
z`KFQ^VRVFtvxZOlkoi7VaWNN<bS%d)joSolIq@C>ZP3HP?{-rNIL8hR$d~9wO1{HP
zV$~-s5q<VRDlL*=Q5->PV{7|f5Gv-XKJQaeRXIEa86Grs8cvrwo{>$!qYPvlRHq5w
zJ^d6IXt$)MqccT8p<`%Bee2fgFQ!L#K2wQ*g*&WzSXpsjZh9&mw#yj6%cE!hbbr~*
ze7!4CMDCgzjlI#g*L6ijIrZ^BA=&U_xCBxRr^gzSJ9zglEolZ&g1s$2_JWz2-*r!o
zN?%1;<?VAt`|CCZI;gG6?NIRRr$*C=+qr3qt8vy|VPWyWvH>&r>&xuDJZE8$5EOul
zMpDiie&`kPu|VrxYa8c<cEctb#=~3DZeAeR)G;$ZFXajkJ)K%wnWX)&H4*pelYqS(
zz5DjLar=~z0J$Lbl$q5Q1v_nKe0;8Lx#~8YXL1jrlsSh$xn1(?yulZ{R#BuFE&{aD
zBBG+ED(#IerKs)kL)A2tEQhwNU?>Vn1f&z@ar#LkeQlDqZ+yHwzs#vKC(=(pu+ct$
z7~*%_az1|Y19B}&(r{_xq9Z1pfPmmlsvi$dZ72$}mtuYnmtD%@WU~b*e#J;4qN>n!
zv{HdVq*FVs9`9#sR*<)_YS`Fd4_S00_*!q{kwa0{nxIp1G&xqFrpan~7C+k{A#$<u
zY-=?=Xqo$Bci**N=_&w3+Gt^Pb#%O7WF%uZ_%l=YX4UlFJ5v=E8hiYY-UW)>LTElt
zPC*7YQQ)1MDK(Yc$Q<5!``)*uU1BleN-e9NQ!ni8dw1>t>y<HBW&nn?veL(wwH+^o
zLMXw!#qAS-r$M3l7ddr4{viKPFe@3DkhimYhAJF-%9_>hc`Tx#sCdxYV!ckI4SKB3
zT@!IMva!$$kJnloPltwjSeiix^>Uq;xP8N}Wr#Fu`L=oEHVzJu0}c+Bk&?0pRmR7c
zS)5cDc#rYLKz_bGvo<&!{CIg|!|vQgOHwlIRX6A^*w=a|N4!OxnyH7E^D5F4c<f(i
z<s)_fa((A}azmNr<S%mvTieai-0jv!66PgDMNzHsw9@flBrOl5QTO(W=67wqtVfgN
z=}5nEyLZWey8=foVNWPggz!M?2cQpb_<Z`r!O;h`X3ZY&X7Of-2leKvFR*ZI-WV6V
z7HPW7H0{xzFf}C%`ZNWI)7{8{1+LtJs764^CV#-k%2|TxS!X-vGSTH##(7@k&GDhp
z<hR;hQy>qHEZ@}LFr|V572v1jW7k5~DMa2&7EGb8U;m_}$ej3&*L7t^SQ{-t>Gf2A
z5j9ii8BW^`pj&tZ=^>B#l5%4t#BqN*&*vqwAZ=!nlEJ0hJvfk+tvp8-h(tu-uZw?w
z`&_?8CSwmOFQ0jS9xnt#^En+9UOe^nKmHm>F`DbFdrkL8ghzldc20@_U+YizSsAxS
zSvP9##<r*?Iyu^Vt*xqFpq95m9>j^B`IkV{LQgtA((Ue@R>#JU4Gcgq6L(CFFt$YW
zScST3E|wN?dS8F}uNS~L)YrYiw@;$f(liw3_~K!}Rt>s0l&VD`Q1fCG)76zv1~)ek
zBMzzk#>`C7%IXN*u0t|R+{cn!3l+RF!VCMScudeh$qf3|X!O~BIf$OpKX?znp(l+U
zIE{^sSy(71`(1e^BnxEoRDimCcpq}EsoTZPWp&8S)m7xMBiHjxTrmY)V!xuIK25?G
zX{wUBfmqnMlvS~FCbM8APOy_Ve;VH+yesDJv<<ASesH=r`{0RmO0V>BJ?EiqPb$ju
z^ulMUIXP(~kgCXx=-bvfm>Dp&H#0Y*BjFc-O;ye0uW~G{ow>WXxVX7aJ0T|z9ABRQ
zZYU8%XN=SP+nYB%WHW@E?S1-iI$E5WEjo=r&oqSyGZF?l&a+gn*S!ljj>0F}nkvo9
zmxV6ZBQv`zba<d9CcHI)g*!UCEpxc!W5aoxe;&!f2P*A(d|&6IX>8iB!@ZrBpZ_1?
z-ZCtz_J8{w0|OLpkx&p&5NS}l!J@l6q`Pw%LPP`vM7leMmKquq>F$v3&Y>A*Ujp~<
z|9keck9|D*)%MkW56rM;t!rKD8=v$1+7-3_yxe_JocY%~N+NAm$1BWqb+4J_Wi75G
z6W)nl+*Rhq3|v`JE?1}a`SfWDJ^fJOZbxhDx$OcjPfbLsjjv%>WwP1uH#+6-6%nuB
ze(t>{Gn8&XYqGesuyNuPyQ%dXuY-E)uFsp)_c|omqH?2l=<|uXeC_5^8Ljkh+6wmj
z1d{x<=Xlv1XXg(iWu3OhcFwS@ut~Y&Ok=}Zoy^f@Ej<quexzaKdx(fUvZ%FKOH@an
zdz(GxGweHywG1F-XFh1T=3OIixiwya_1<g<k30Lz7cYVH!qt`;6cUWPlH9YZ)f+=r
zh>AusX_dQXGdLXCxAL^MMwXJW*X>OfCBOAu(_XI>kIWYraEUxkFaWy@l~l|Sc#i%4
z9WZ``w_B%jeD~1Za_V3y1xl9Dq$i96rfbRB98I2*rAi+(9BMC!jh-H$PJabhX>!=E
zpCk_VnPr}FyB!%%#OeflUt~)VXdw)e5jQuNO2gHs_xg3M7)m>xgO)bt&Ddx$gLTEz
z>{oIa;iSY{W$VSRges19ht6kyglA{hS?x5OEH|b+WV*FraJRO(A52R0G_=edsF-3i
zn9UDg!;Ux(R#Q$wPq@AaTPqBTo|)Cq)jfAIs~gzT*3uHHx^w4Vmq=Y-OQEiA&GIyQ
z9GR1Euq5Cie^>bs+1F@?l=qn5&7Y`@CHjWT_Wt+AANCcs4+k4@Tx%!5eFHpVHa8Q<
zL!z(~*wU2?YNH>UXn4+>pUg!*plFh*Vtgw%6OZ*REj!zP?CqO|{o7pj)IuEX)4z8(
zG3(>Go#rkc#f;kA-Rat0K^y9~?mZ&H9rM2aQqdL2wA@d011-s&TvS(x3-|!_-O!;E
z`k%991Ia-07__nC;5gC7A8e70f<g)j+C1~go6@P|x2e}}+yET9mWoQtldcX($K5-3
zvO%+ykufc0txtLix^B}}@6Ivd#-ms5@9+QpdkWxroLyX^$vls*Cv!zk_a$pmY1O_o
zmchf<qbb5B#qFHi`LNIU4`ql5Xm3j_7^6J}$;h<xO&QEhBiNMPm%7M@lI7Sj%qQfD
zOaZ^5K)=7gceuYF*%~Jq-;+a97^_0>zC7cKkV)C)B*AAnNXgF0L7}`=<f-8a+>Z;U
z$Rmdr77U#>PPFluS_%l$R*I8S^4-OgCpUa5q{V2%t);8%H>3<EK><H??J1s#p|D-^
z(EF;$uU{2Vy&V#DW!%mekL1GJ#J53s#VvbMlLX8t3ljLC*pHb%HP3<i&ff7yU>*8`
zl2Z1oK6a)8ZD+;3aD`R-!xUfFL%*bj8mOcB5z45oK9K>o74H-&hsDR|X1w*ukA)g?
z`<8>0MD_2E)XqtQn>x6}(Cq`B&AVH@YkiG-H*UW-Ffv%pt_pJ|b6Iy0%L8{3e8icT
zzpJtFJsM9*{@sTkZ*-#!!(EFrP7l`VmJ=EWd}-4onKZwQBIw9%1*d9nNZh9mF_m&-
zpw1#(!o*%rFSz^lpj$+GV>~^lS5bj1!%CX^c|VjA*Kc*c^cKnLyu$~-Pi(P*Pt$f(
zy&Jk(yE?kMbjFwnOR7Ry+DA_>pCd_J=1)AqGFsjluP9b{oi2=7|Lj?^ZN<l5LT+x=
zKTADGM77kZra4d_(1>k*M%4Eoa~TRsO5i@Gaynq@7y6J<<N2~b>}F2%C^aDnKbXbi
zcx}wjC7qCDFP}4UWP)8yfCJ58bzB)TS6y8#pt)PNc`h{Wke#J8eiRk`7@jI5%_=gd
zuo<B(-q@ef4bP=VPoswE+S<z__+eShCblEUk}yC!qEFhnS(r>BVq%zW<O;rhd+E)?
zBAVW(tOecr<x@Q6UK1C@Ku5>-vM}^#*|lpwg@ebYUx<pOf2<YD%FkCr@2RDd^!3S=
zRAGr#AG}auE{EZeUaW<fh9+gN#Z6MMuN!51_fjy(4>~n`o;uk0^XKDA<iOBiOI$qh
z7K{FJA=nYq(;Ka-5AHcJZ->E)Dfh9Q!nP~u-Y4?J)^{vExBEf;l4T?A&!_(873XE&
z?;E}44JXZlQ%q?YFV@sf-W&Uu@M=9w-v>o>YE%#jhw3o1v2|EZZ0sgnV)0G7q2@`t
zD|miMqx@@9+$mWoxkR7i3gZyN&6261dwEWuefC*hA+Jsy`~E<?VZm|_)Q3fUVeNTX
z@J%A<QGKcI!?$l6XsFgsz7p|y2}%9vy&otqA6n^vgLUtODZ_E44|U>#aD|!$`A<@|
z?SUqJPhNT-lBK)Gu^|v)E4|?0FhGt+gywIYynTW6LzIebFgO8|lbdV4+>-@%c;-%%
zM9S9I)?ECgd7;tZZo({u7n$S$?g%CIICdc!%t@DGRwFR|LTzD7BBa4#xLU%Mkf3GM
z9mg!tZFj1u!k^C0elQK9i%f}FhvPmB6m&$Z+}iNyOD}@4e63~X5f#-^*75_OQsOYG
zKhpcr+e=~8RS9%(8-3|^6O}$+iP)a;@Px)9#Tm7DdCW($z{mjYTKnE+;9XbV%IjWJ
zAR-m-pUH$l-MgS~1jHme^R201qD#eb1P{#Z49p~8A`pEcmC#!QUH-v2Hz?(bubq2_
z+@aEP-t<8jYlCJ-n|{&Hx1W!XG1ezbDW1*T9JW}S0@kbRcEc&Y*y~fF5fNiK%2Oa&
z?#~Zy8qN4}au^}-s{txdeFUGVD$CRq1v?s;Lz6G~bo_^=-JC%i8a$?*+JRT&CM?Pk
zF4NK+6bn`w0)P*;v5EZn0+wfC6~j{!iC84zKc^4)ulA>yz#A{ayUHy7fU&yEtE)hV
z9TOUw>Vdx;p{OZO8Qzwi{q?poZH}C1VSYX%C8f=3$td1l)~i=L<jVbvGK>0SP(0K&
z3ejO6mJUiYQ45S(oZ|a(PEOr*=i^CJ?!5d#xO4L~#h>q!y_fEO9yh)_e2cs6MW&#<
z?_iG7r0X9|3gN(5P7^gn#ldcY{1pKm84+Wg{DusHAuzwDBhG<Bk#i+={J2|*D!Si#
zLyOZFyXhu|1IT<cD#v07wVl7JxgVX!g4qX{tD%|3wfsq2*tKV~{b_0K89~qJSYVC2
z!A706&zNmxKp3*}4U7gF$~~WTcFWDjAsHd0<B#^(+jvOTnKWjiYI3)69i*TMqjv)9
zY#W<7Chd7(ZOqXuByZ*V(zV^S#5Xj2y>B1-|DOH(Fui3M6QF>fuenE=4zsiX%_6X0
z-y_1~1Bt)Wq-%0U#*mJ66)Eq<ov#wu%u&sb)2;L4XNg)u?|Z}S@Zop2NrPc~$E(7m
zS}p4m&vALGD#N47?d|mEr=eRO@9KQy#$y!eXg>Dsg2w66#++~~3;(&u9D>NSrT-5i
zC0Bv5K#%?XV{q0AQ>q6B@H2^Czc&E^@}^<kec9I|f0}_UPh>6j%Q3G>(QH#<4au=T
ze|*Ij773f+Wt%fIqEp|a#<2Qpg_xMEymJ&s31Hzea&r2skH*J&KfUqV<ZrzNy6?m;
zHQ1aNE5)<y!xi!Hx-<Xv{eo8P&lXJyQJXrarx1i1-fNmrnFr+=O(J|l{q5oi2`?j$
zj(iU%%fZq|<76Xl3g-*25<2^t`U(En6|qDshKZ%ak?kd!Wb*N4A)PA=tZ_Y>D#n|V
z$()!zDXrEb1-+Bkz);N0kWx^B2+XzM-QbzN%0|dZs3D<6-#;*s)x|uaxOUX@6Q(do
z-_k8DR+%QSQ4u{pQG<zTdzocIN=kz8J@GL?O))UEqoOjqPX}L-4Fs(}&HWwU4H}||
zH!f%nh@kk79gA;jb)dH8gk!}&waFCcII}sUs3v!136+GuY<(?ienI~P<0cEw9@g?Z
zo=Z^+q=(!7HzZe%CID*>=5`}$qG$TOj|;7$Sp~*lXd3(jKkg_Y<YuH{+%A*8b+Cg4
z>K|D-d6#V#NRO#~5BND^22M?P_s*($!=9H(mS+;9L3(5PHvYv22%7cV+<4hP<h5s8
zbaowBXmAx9roJv&LK!Cg9hC$A^<X+IgAZA{v812wM~T~(j|+cT?5{w(hqL_7yGMp|
zi}2#tk{ni54zIDNm!yeM)7#k{e&?zh7#bKDQlJTMdx5~ca}yUXK_0?PN=M!Dv*fZI
z>N#}p+7YeK8(D=YDqK<huC9E`*9wpGvvZS#Q{-sNc_qM3_KztU26Hr4B2yMTKbM**
zynXH8vu}B)e!pd*G@Y_E=3}7<eF*MjLMM#toy6%1v?YEjs>;gh8es+B+W)OVKDblg
zL^JPzl!p)7qP=lopy~W?as1)+!U|_z(yMADdrqo0#+aLFX-p}`44-S!5NK%r^F!rI
zUZF;G-8#pP^?V@OE)us(YusbHrOzM{By2Ht79t`oWW;FX?tx)m)0l(6*T*bfNj8)B
zIr_x)bbg(Zxm8b>@gUW~$_IwIKk47a0=9sN6|mA_wc*nd9Ow#%>H60ff|w*dz|urg
zNJA2Mpsw$x5?G8RI=kEdHpM!oUUG4{^mw|z_wmUcjN)|f03C)$ticFGcK}oEFM8w|
z7Sr+35fSU8{oco{EaQu>*t7E#g3wA&r<^KK=WuS3*`x`-i8!m7>j_B(RLDnwcyLc{
zd6@S(xF3fPZ&n<-gGpf?PFr(o*RNlXEI1-RSoYKQn0oZ!fhYr@bXL~6>`Y$M6ZCU}
zMp1@A_RFn6uI2gpG-Cf-qd)9$_Qw(Eo`^iOhQQXXeAvXHK>w@t@lvZDieS?qqn{fd
z7NfP$Eq88G(qLhV9_Ed(HC|X#N4U1TBo-JcF?YZiE+%kh+&VL&CvbjdCMf7>>2#|g
zKrO*}cLmC@2iDD{Uw|*6K+*Z|{i(cDS@iu^#=)fQXQyPt@;}{1m*{F>Zsq&|WG-=9
z*!bNhUS>OcSV@O7*5+qpTkc=JK1qTyjLU{7YeVNg6EAT*NtBzdBpYf@6j7-$)Rd9=
z22V}LU8725Ox;1Ci=n?hiQXdnu*DDaP(%OmlQ&w4|LX5QJE^tG<*;h+ns(>{22W^6
zXSekQE$^L7H&DLOtqI*T*#br<2m5<G&eTBD^ixP1+R$*MH<x&Re(jIrS=Dj^bl*eT
zurpz=Nqx($c2_)~vRW9&wUw3m@CWV~PYu<p+t~d^ov2?I_f-i1uJY6pYhf%b%*ML2
zzgzJ*$voV4I`@|D2l`i{f_UcsMOm6l{0tUzxd3hW;p@^udNjIYX-`1=xUuzNbEX6l
z8UP<M*TY)%Go|8*_+07pNM2fh6MXvQl`S5FurQ8z)psRL%{+v<7EmUFdY1j(8S$hW
zYQZQGY6HgkNyLt4NJO7Z-#E-wt?>^s>a97f+dgA)nsB*I*$OU(5XJN7aS7ZOL>xEM
zb1%3SjX3Da!Z5h0hr6TqNBg9gk18zhYZJ2dB~Nmq7o{WIkjoS}YjwmY8$W;kBy&63
z8P<lqGT1%(K0C`X<?3sqH#5GrG{K7o(2JIU+wU)c6X-oH+-+wH4gGG|6;)(2_ZgqA
z4!N^GC_tMLuSp*wLL5|QKe{B~j-D9lrI1SCJ#Ot=$Ov+r(LB8K>6hrkrs~~3yMWD_
z;DaoW4r$&U<dph35h<VZg1>=P-RZN#0}xwM((|sDVQ`=h)=mxu&Z16l(u6cMlf|<;
z{GDq+C7F;SAflu+RJ~@Ttf(j%!+9{@`taiFmV?2ApbpE?6<fSnRa%+Me>Pn+QH4fr
zdpjk%&aM*P1Py-ov);yT{?h?a$^4Dt23EXw$kLX;y+!`Rj!>rRBQX#iTx@NERi2RX
zRT-MCeU2#?R3`#RId*4+6X~_f!ibDIqu*A%+Sy$IBOJr&BBbM3Rnz5AsKZ2{A<rzO
z$S01D4oQfL$|8QwN-yyoui)e$_WSo)Z4Xs#nQvqdMm;<_CUqM=_mAl|2<2++vvJ@!
zj(mCW>J{{Ukk@Q~rZ|6BYim$Iz^MUB8t-$(fnrW=vR+nhZX6esowAa}2sd9t6t)!4
zQNcZv7|U+61h1^9cz;RFpk7f)N1t@5TNyWf<tqZZ;mzzZaJ7ezw;0s3hzINMV@nM4
zJC1*fN3V~N6&GX`ZhIe2k+2xXff{{|f<&lZyfG7E!u27Ex`=UBX69j^bR-@Dp7~@6
zunl@hA*9hP(H|&axPF9s^@_*QoQ{b}d*|2)htD|?o~oFm_~C~LH6ExT+y7+PQykOl
zso0vVazE1rQ%E#TO=%aj^82K$whq^7Q{Spp8REa!#w__C#;5&w$9D^q!<oxhoekb&
zpk!`k>;%>w-12>`EebNk9$(7gDqS`bzl^+;qO!8jX376ZSq%e}X~pMobx?ed*{B<~
z7dX7TYYWQQQ%B98K`-{AVdUv}4e^>el49#dTtY-dg5yGjI)M!2bSZITfEkoBPLf}~
zZSU&ps;J;9DFot-?ua~<-5uZljLxII?#>g6PoF>UuMg6lzq@`I#t!CP`SaP97iH4|
z#V9TJ$pT?w;wwG&@VD^mXCuJ@_pt@@lrqybX8@}sZ(mVTo%>b&4%XTa$9-B$E-so7
z+9ri}VCrtS`c}0#Pm0)j2!$^-bnO=MU?)T@9k~3B_m|MYU;liap%rN;ypS$5^;naK
z(v7yMt4f#uFzkcAprD|J#(G9z9eVc<nM*}Qj<UyI^XI9CU%%wPhuSM|ONmL`!`b=?
zE)f|4X+oI&J{Cs0Tx-0N1=85#WCu$79XuhNSLgk@Bbn0A-~vx!6op_9^!DblOO=&N
z7ZwBa(qc$x@cegonO%)4ownR5+1?`*fgYUVwh6M7!~IbpU_Yh_{QWW0<*1l|{Q}dL
zCiFwOkZUxtJ38>9j$DHE7fT(1dBW$*0r8O)M@&eJ*z_fXp+FyhH*5TGPg-De5>?>d
zZD-UyFf=3tfS<=aj;-Hu_LV_Fqkqh0xSRbEui;d}gW<s4ot<PA=+U-UYiK6Oq`+KN
zBKuUrwY9ax*qqj!^YimjRn=Q0Ma(Ryv$F~VZEfu~Uyb)RU{)b;Y7Hc1H{WXtJV6Bn
z_-DOXnVD%#|1f3thX|&*nDlq`?VoPdSoEBOnIzioKbUD<N2<19f6Zvaqtkh$GPuY_
z1ZI#l8KMccgvx~Zz3D$4zE==td89DcJPS(+B((ro=w3G;>Oj3fI-VW1W;Oh^(o*I9
zdklpC2Q-K<+zx;7%+3YNN=R}-LvFn~fxcsEo<i46^!j$udu(K2H;_{{HYymA^0?ka
zkzTaHJr6MClR6iUP9ap!<3O3R=LQb%yLN#5jPKO(RGiFQ@jKSA^YQAPAI*up&_#*Y
z?zQJ-gp6^Sa+3~Y#cmT5e6=U8_)eQ<5*?GVRuycF>=6+-PdKelNzehKh~eeQEiHQv
z#D*jX)0Y6g4}}pyMl%xuS*z_!dvJCs=>pR3j6gt$Zu~(^0k_-zQ~47<N7l{BQ_>^@
zY3XiIkxwFSUS2cpn|XUXQzE`i(~j<vebO7VT?=5UkuVqpa&~;Yc_<VLrb<pW^m|uP
zD}Y$6eCOc@J)C~#K|Q0+7*Hdxa##Zn4xd7HaLD5L^$e}8U-rjQ^7v)9Wdt2W8)-+e
zL9x?2VKGkMmu7dh;|MU{v9Yl&btk4SaM=|snLLJZ0kUFye{X^D3!8Dz^k>8iK%6*y
zZ!Om(hHVJpc=yrQ{JHfuJPgmpHM$x>0Fwh8riydqVtTLd=}D{=4l)17tECD!Zqs&t
z^^^7jVkOw=e&yB>FgS4-PKe6RULA{xp-OcAw6;B*7@Od>8l9Qw`b+0+b~8V68b#(_
z{_Z&efN##u`lU7AWGn-%RoNL!r%R*o+=sVs-hir<Yy+xoVRv`eA9jl4*Z6(P<J17q
zCHJ`9>MSJ>zin0>{-#!J+gs`q*f|;$9iWm<NZLLCw=$g7qOdi9iT|)MQhQ6lI!%fZ
zz1H0cCK4qJ$rt2^8g)Gfj~^req~w0tUy@dA1<S_czp6GTiS1;_Lw+|lo>%RWaeuu{
zR(_ZoEC4$m9Hw@w-Cr~Vb(R6U1^@24qt#f{ZN0hKpx^6%hOOOBq-H`X$xtQdh}Bio
zWEtdozjPG$*hG~h<1w-r1Qd%43;UhJ+Vk`JYqyedPa^8rx6YibT;5}(i=pgn?)PYs
zLhW~MlewR*u3615E&|(v!D+0>+1Xi1Vve4CZP>!!l$pZ~To}F17{!5dU?ANc!PtAh
z6g>Z=BN+pNNZp5j@q8ui0P`45M~m>G2P8?5xNp`cNO<UF46Zr7Ly7B6;N5r&pYA_t
zHLc&jX>}6Kb+7utK}q!Z*bCXah@zs8{wV|&w$n1^AYf;X{>lz)zF7w4(*Q@=*dgRC
z|EmA#gz8SEeO8Z!^_1Qi#)8L(o{{bEYWCZKpX9I=yRfh@kvJpEy(h*?Uc?&L0^UAW
zq{g$QLb3Z{mW4S;=B4XMllgAy5Y--h_I)iZ&Q&(k4iep4Rw36;kSo0@I2T!1eb@rs
z&}7xo=B<8HVu@mlB5&Q;A5<AUBQ@98S5_!-O%BK-=>V1bh}ByTUcySrE&*FKV?Jvs
zRVfZ`_8(5y`v#HR_+^~Rb=&GCA}*S9?DK?ud4ORwJOtU!>VtB1*#BHGvD}M0BnU(Z
z&rbg4w}MdpDaiWbBD+Bw9;2Q7&{Ua)*=T9|owqrP^75!&->pk$X3vAh+G|m>n?WQz
z_V_w!Q|w-CUjdWVa1rA|#t5slF~IQZETNpdZjV~@Pv3vDJXObB2q@OvBjx=)+^tNF
z_tFA`Q$PTHv@<s}kx<h3-@=3g%=(#`8PK+rgW~~JAb7Hdk-}go0By56tPX@yNxyjU
zqNuEC=U-L{LJaT-?0ff~Fzbr|V)r3c(C~m(&4{^}SR07;Zrvx6$hs338hUkzkSC1?
zOOSwfDIj*jBOoB*cN0M?(Md^3@$>T!sAy;~+Z*FK=vlP=w*ms_4xCo{6luf3{jtiy
z&BG%d^%6wW*Gx-KmU}rd8{)Yg3@=XrB<RB_1YDwLk;CC(VasZuvP#V1MR2e_+Q2&O
z!>B}!M@qVRPYtn6%6FO23PN?k8`jt5l$7$P`szG9NQ3*fHrv|7^3$uU<0@Yn!$6Wb
z14>s|z`()7{H(wIPpoP>7?Lb2D{JV;Pvo)MQ6YZUh-veW$1=EK!AuvuPIi;NFvXlY
zy~{%y9^r>XMn>A)6<Y#lo5$%qRlM%^;9y=#N?a)o$vl63cir~);9w?(=TuZUL_Hv;
z`=)AOtbpu9j2pV6D~dCPksDl22VdK=+Yb4UzFh2mkdc^;8vqsYQ=tby@KEW1@k#=?
z?00-V&dz=q%HRYtlS}c%1E=-*MF9jh*fh;R#-(-GaPn3-h!M4J$Hc^BYUAWIb>6)R
z=4bcM1;s<lMHlr!qA8vD$_`aPj7{nfb>5-SNR^>>+b`w#fc<2$!fXm8trbFEg4?@v
z1+u*kRvkZqfI@^pVR!!!XQXUy>iyxk_#C<lnt1+<Bq&h(bOI+N<Ob0wk5N;Hs#Oh&
zk+1KSH3QbAmZA#4e~Y7pL@rb-h!36FR;j7J{kspP`6ZjBndYk;1c>-PV<0AW#)z$K
zh`}(s7?48ktnzF(oMbKQo-_#I5TB!h*Wg{%>wDpoVC?{!ryNJ%WFDZk{NdIK7w1W^
zS?3fImyn>OsE7~7y=K2fpQCcXe!{|{8ao?x3fVh811WQKTo|j%Y<YSjqiUI3dR3J$
zFnj~W2=o!k$<DC5rMp|R@@o|-TY-2aqwb6@f}wl`p*>uOo@pMxgD3g_pp!W2DDDQn
z43nHzn|9s2$G-v!kQ>9nM2XOIA27^_vE1OCFMwdu;V>m6RcNAYdJ%Nfh?hE54=2=!
zrrO)p(ck`;yo{~XsS6O4QyyCzU@Ml6;fzR-isN+opUhGC-Me|9i7=ZdxpNPbmbxVq
zBU-|7?krY7b+<P)nAaTn2y7PI?$s}x#h-uYhn)nGrj8QAc>a0NyEUM5UHj<YT0m=P
z<+YWGQ-Igjov#Magf;`ttnPS-XMmc(4`d}`6cRBnBmU>K=E_h5RJ{*qq5)If#<1_$
zv?NbiET1X$<A-n-vG=VvZ{G6p)zF+ogyC(C7Mm?1X+Y&fuPJDX>|wE9bJ<yS_2Cqh
zgPxxC>C<l}Q{7v`Fl7~)LdQ<p>>atjxm%<Eo7e$l`lpM;1)xt%DnMGd6MTQJSvsXD
zx_Ge~HDrdAd^fw$&e2(S4){=H<2wU`_XY;(8jM!XA|<JvvFyMw=fm$WYhWqL(gO2L
zMOJJWe#&U?`Y4?;J&)asnYQo&r%4xi<&Q%T{NBlDcBYNHAErPjVO!p09!FkgXlQ#x
z`3MCP`w`z~aYCjZ1TNSPz&t;Gx1(=jaOD18>W8h~^3>8&bSLK{9?M@{9**n5qsj^@
zM?X)uf*!L3Rbc>#i_inTLFg)dxhLD-dt-PTY_2;y&A0D85~2JZHZWgQWb5TAjZw2X
z@fPG<L1Y4dJ^IIpn#XT*($n*T7Lc;V;;gEQv$LEW`S6=jW)N9b3m>h>XVPRuL_{!e
zL}D*27|6lH*5p-G>KX9x@x>_RK%jr})N#XahA2Kh9uNV<Yygn}$eQ*<T2g(-Td|9z
z<A>FjmOPY${Y@~ijk0NP74?hfaf%R0J9(`5e-m0jm%2zape`;Z6wQKIuTBquukWws
zVJ1eY&`@9ObS9P0ApTVL*h<#b1-Ci>*5~7K`L@+-*RI9<Y;U{z;?Ds9D50*EN<I(Z
zCvtLfpEuV^TNeC3e*6f?b_E56moGt6pdHNhISgx_lU;3Z>zHRI_T|=BW%jC0E03c6
z0o*aEnV5#jqKis=eW}7@9C(<Qz8Q0Yh~Mxox7x&=zp?_qLFu|rrj0n0b=0q3^&;;y
z1^<81JLq2Q-90}?+%Zd}R8>a-aqWRd0i9+Us1gj_Cw9;5(}=A)D)!dAh?Mny-R#6$
zNJ>iLJH?iP9{{gQyuEU+reecx-7#_2Sb+?&bZ-0QdJyO7j=8i08tDK`d8OVY<t;~_
z-zH62rV9~qKUyK&e4`W=!N<oZNh0^3xSOM*|NAWY1m}O$114L4RfT*81k4WikX^|C
zS9ya8?`4S3@+gkBkHx6->T68`*+6b^EH&0*R$d-#+Y2gia@4=1?WVdoj|6acmX?^n
zzaYOU104f&y0(g;hJ5%c#KX&^`S{{_96wCVE-))n+s%D+Hyo;mjfwFKSdBFOUQcgg
zGgD#!;U@?o^EHdxroU+c34&PrUkO5^m6KC&)8V6s#asFB51XEFf;<ShHJrCX+6OyK
zc$6;Yaz1`cMXKGA3sXl1dyUc2(qdv^f!b_4!|;GoBIgsU!i{K_yX}z-C=*lxSpFdO
zx2oBxeC;cn+B6R9hN+*AT~?TrH0S<}I}y1v|0-0ccSf!hs<{rSed&5qHx>cH5FQ!1
zrv265q+okI&g!8)^J6|+!i+wEZ71XYa8LEj&T^~$nGY1+)C>%|5!SZ0+4=d45%1M*
zK@nm2%}H-d?d1_{8N=dM*Dp)orz*7{HfjR4EM;2EWJb*X4IVjDu8;HoeKg0Vq@;Wf
z?95FkzMptsx>d>a6$KQ*>9X3#)E{?~(dtn)gMq^dWd``)F5Jrsf6wGINNoG7|3q9o
zum4MNI-(K8`>*WO9Q)t@;=ai<d3&VfWO)7;y!0{>*@z#DqvQP(jk@u2m*Mgy*4Fcx
zUeasjFd+cmxLpMop57z;YV1r9r?l04@2wjbVLSx#Ifn2}-ko|9dnuO9tJivBRN{J%
zB!fPWT=F=Oytv9qkFRsFW0?1*`RgzLgoVFub>qJ<`d@YHWxL>iq1mD1x65JwMXdk-
zO0z$C;0ZS0K~o1%4=~%OK4{a=mtuaLKHk>08?#DFNvVa85}?dmz$!U<qqe=ho2;*)
zsi~-_3PR3*f%u7aVo%_ue0s34w6xV6#Vt_x6g)1Nm?BHX-XynlHpr*T4G$_sE`?<&
zw0(w!VPc?OX82Ww;~Tiu3a-x2&#pGj?X-yn;A38mmGB&D)4Dd&-OWT!-q+oYNK2dF
zo@p59%aoo1-dI4xFMlsXcqr!on1?UJsRujcg9j-10qCOGPS<-Ok@ijfCE69=#{l*~
zdk0WJj7-uGy|FMcRmA7^j?cZ~0|Iu%1F)h?sZSOc^triO0X#o%Xp}Wbd)55O`x<y-
zyC?ZAC}xR^wH<6tC5D7p7P4!K6MIuM1t(eqo85<0QiTx|5h8pwZgxd|1Ey?dWvi>%
zV`KNw_0uW8&ML=<{{1XJh8u-I=AAypVw6=5%?Pp7xVJgXR3x3qPspf|Hr}H4QHI*y
zVXviA%BU<=4sKi2R|C5t7J!8pQ|xmQpg@wI5f41g(`kp$hjR7nSz40vVUzKv0P`$f
z(keCe!H$nZ^l*h$piQC>#s((ba*&LUaq?>_<PNqrHcTDex{iVkCr7s;BJqb)uEs^^
zVEaD*P^EFR9f;C_XClbQK^UPN>#U5X3vK;dY}=W|7_vRO?v<G-9VBU1cMEX+H$HMN
zE$Bb4iDA9G6*v<>BR@D(wDL`|;Ye6m7~0a+o&j=tav}>Mz<i&(aCF<gtyN6VF(NW_
zW$7Eq<yR@;afILD;DO|zu@Kx+QgW_wFLkdw^_cE^$R|}i?j1<3tc)nVi6g!BefD~+
z#(uU9ZFqJ`TF*p7Ea_Fxj#a)`FV5lGh|21qyn4=EM4*IMeol@agBNZ02fvcEpCrM+
z>5@-xk=KyDqMDJ1j)jWq^z67Fpc1bJ^FTj#u+w{Wru-?v#h37uR1N*SVT)ZTmd+I>
zlp#nLp4~)I5?}7(93GCx1{6RW(#pz+UcDF0dtctof&sPt(hA5gA*nCi_6Ci@!|{cn
z5#a<?6;OQq#eW3>vXU4&7J14Rx@s2j@<}wM*^1dQF{Y_z9;f@hpq3f1S|8Wbv)!EF
zJd=tunN(!mP|7x_D8+0vR@!^Dv-P;Gx}smTGU87Uabc(}&Z?>RkHGx0uqA?(^r!3V
zr;j-%&ijLN0`v27@<O<(W+ikkze|JxD<mf`Hn9U=d17J$xCX1r%O`<4T+|C%o=vF=
zDY?v|zVA(^GPelsd;&qCApsHp2YZQ*{I5v5`^vHpMw+{CT<y2@USGq!EmW^D($VE)
zWr0-q&S6OiP0w6&aB2pK>c&2CeUf>u1Yl~G&9+lOiKL_yfKh>l1pYy_UB-|MRJMW`
zH^j%KI0?uq23q0SMIYJq^MFAGT}=d#u^B#7=5VrNN(7cMF+|O<g{wv0-6Wp`Tq}v5
zjJGy6UdYPI=j*EOuPBD`@$!m^iBY2r!FU<r5RvEMiui_(mYi=-!y^;ud#hXt8Y=)H
z3*vXFI%yRZY55y+G2tR<hPS3cRz7Lpj*b90+wMX@Zn(?tO61<&Zmmki?=#6;*hJi0
zpVj$ztD_dza2%8jPjCcsnNK7y564q;loKLvFCi*A#5k1r&O%?T^lia)NyWjKRWU<~
z1%vcD^hxS#$idD&$6#W1h8(=Zu*!-@C@{ggztc&h(%Et^V~Uox?adok83&Xfm9`q7
zk>POB%g0Z>*ShV4TqTjG(>dncsUySPFE`uPB(#Rr;0l;GuMh12$|>RF=B@#mtu#}d
z0QAMoynJ^x^K9j-t65ajIwVvOtXMm-jq)9NQ!{jx$M>Ar)9IfL_fEhFo|rL>bcJmT
zLQmA$b&&5rB$(_U9i<dt;xL@b2Q-Oo4mri`?y8+3t2)*ESUm|?g3IPUNXCFczjs1c
zf}MP~R*f<}+PJC11=Jyx;R8Uwc&^vbePSi$?A)ET90L4G@wa_MTO$GY9v2>+?*V!J
zGagh8dsB@Pzt5(CO$b2iCP+?DS<=zj4r#cJB<}B%1ARkP6hVjxn7A6IRdWi2W~HFv
z(-MM$9-e`1ue_8wdhe58|E+sZR>2rzEiFf0{>?20VmwR?#6fSfc1xF-fU|Yt<j#{X
zqlZ^YIO8OY8--&b#YwS`J!z8JMya07q`?)(FbgdvO+h;#Gr=W%vWCL<FfxMRaFfIa
zkV?FyTlHRiB}()UpwQDh`v>oHvKm`k{h+I$XtFZnfU3rjqiO|c8y>xIaP;#0bM?cC
zVGUn!zk;G-Wl72NbCtL^&w@!aqJLDIubi%|z%_1%sJQ*vaLUZo^b>G&1}O5LRi$Kd
z7LUEPcEj7eyu8-VP5`c3YplDY_M)+{u#h+)R>bMcDR-V(58Ci>SQ*;@=o*j#!!}}=
zj2RNUJ&bqcLAt_2<g_eks3s`5{mD;$g+!&;l@d|m>nkiNsfe1Z&}1y&aijixu~Y@=
z1_w4=H=1OxsccN!xswDIE&sd$mCRH8v$?mwvo9@LTRn4_xVy)Oh#IRgYu;n3=5k)P
zW`x9gw+&-paDh1vAgtE{^6wnLaiWeIXvJ1={pSCo%bq7Qrv+^bwyT9!Q+1#lIpjdm
zoR4;4KyVHEM!N4x$@LkiWz25#fXhV0_RARZ0<>8-;+^=mTlBi+(VzNvmbwx^^KfYE
zrOEDBKp2)dwe4xNBOmWINk>U2ZdO-6k(S;9sk0{9k_U*P5E0DB;4c6aT=PK`JNkmb
zc5P;{=e$%d398R#y)&<aj8~Eu$iab47_wy@w75JFi{ce40la^#ha(viQpr#epwgW`
zVctGq`)@6vl12OpKXR&M{$cZ6rQ`j(_g2F~+<i>*y1EzzP=%kx>m;BR1sqyXCA4E_
zn0N(JJUcr(%a+&_D7<NCL_tJ;_GPU}Zs7o2s6Oej@G#&N8ecZcja(h%V4;wVbZ-S0
za&x3Mnr@hoV9^6{(0;;H_I0wuvtDQ7i4`{~BWg8>>N#uN<<%lKED#)*?Yd@Z2m!Nk
zSsjdY#OmtK&NSx`^nIIShLO{|+uKB(#v+l76QEB8N|gr8Mw(h|w;jM{+{?#6OP?kT
zfA=O>v(ogVy^v70y9Wv>j=8(HpGbg@j|@LB%IL+KA}bDX2l@_hFEN`A9Ql&En*y;A
zl{9H;DL}4y9GGj}(XNRh@5nd6$`lbP_Yh11B|9e`N)*@R{a_G?iCo4mJ)R8Lt<|F@
za}}~<>>g)Z)oM8oPv9I6*6p%{yGbW<*II2!W!tgWa!om2E4QjU57<=Am1%kSkV&i7
z9>}WlzqDL~onq^h37UkGuF?DTFSY}fPwhrG>Qz;u$4+OfydelxwlIJqE`EG|u$X3t
ze|Kb$lr%xXF5}J4&JiaeVdM%+{#DY@JCZ^>E=ya#JEnGR>V!~TR_lDU?@%b{NjqP9
z%5wNX7!VkA($`@6{1USKt{-C3zoeiP;jw+bhQDB-A)d$|QaOd;bKtC@Ibn~Q;Ny)R
z1;p%fh*+uL@GYyL`Xni!f8z?ZE=qbTJ*=XtYO^3FR-groF5`>~4<~&z(mHSlh=PQD
z4y7Zj!N{4GQtLx4r5yG3G?$BKuW{8;hnNMu*CkS`$`TeHVUB`6JS<+D+EDOh^O*e+
z+VLLEDAxHbv_c=C(tQOAt9Yc7phDB#B9hvCe&g2K322UmMF*w;5n&9g$>)5Z?j?b}
zaWjr_XS(7zF?jV%69zCi7__ptJG_Il6(8ojpF0sY{~PR0fEU*EefHM3?rar`mk@nG
zDh1q<;qcbVQWQCBsU>NFrnc<;i^Gi3F?h;`pdK44n9cn*eD~9Je(fZ=(RB?Cmb*7&
zP_*=M%Dm1k+ndk!85iw$fA<2rq5#5fY+`oPzWEhEYXhzVOe$p#Mo%FgDVU`@OFWjN
z4~gTm%Qi!N1Nc01v26ai1F90JU^MKv8g_))5U+`NEajHECLA|M+UUWoIM}MfSx?pj
z0Cj=Yn3tP%4-*?`2vS6zk5?U%<#!L&aU3j<E`be_WTcLYX2lj*V1j5){aa#eY7KnX
z2g~Sl@FUpT$Eu(wK{mFwLH?va<I^u6sY!b7MC=q0L?q86;L#+SUX+~;M1^uxs*(=)
z#XSzg8R~2E`bM&lNo2DtSXa@-mT6=3ie^sd#e<@YtZqltnh5+vkLvBs+vMc84ps-Z
z&W=B^<tWu2AK)66{WpU-mgA8J5X?qp!*HuQEifvn8W^1&tPuY!8J=qEkT^vRlL03z
zwE-a5Kl#u|1+*ow*)%XnRdfX(c-O2CYY*9k#sxPw0}fXrf!QqT03$(^vtps(ewgp8
zt1*Q4qC;?<-8L3H0`r+w=Gg|5e?0hlSTTm&@E;83t^PI|E%Mya(SeSJ*0^X%yr7!!
zpMSEZcH6|IL2>d`j<d^YL}WO-ZRm44fKgbHX=jHG4L&AQdX5Ve{%xThY9N1jlk9o@
zWibXJXeTQps>jXcec!nx6fxGcf*OR7((!Gjut+6Pxw>51-hWm6-3?CK(4nW<*|E-(
zNu47P9pouWknanhsA*)}5tH@zuV-T;7}m=ZTF`b4ERzHqDt>-$2U3W;B^E|$gi@zu
z(|-S+3&q;!_0dL3Dxy_!>~ZhKr}rF`&f81nFnt_+0V3`yRa?dRMLVZMT87dh`>Rx)
zeZC&knvOG4CHdR%;1FkPTuu%x@ybD$I@3$_Bof(DRk+O66t|acUX;33N}lR-;r?R&
zSQC8J$8J@TwI+m{q+02e)aXm{GO9c1b&;N=*W&*%TiIE0=W3GZNJJpm5vv%?EG#5N
zZM+aL=E7iY9UGh1nidyhpn)6QVzKPJxfI0G436Lj6r-#X?mq*gpO<d*%UpY{3G!f@
z8M=#a4mmC4_jmkF)5EQByQ{r*7YpEW^BpmPw|Wx}W4*?%?1$;}Uqi~Ie<FO^TWG_X
zspur>Lu4GoMdG6r)8wK(1gVHVeg5^Y0rCsbn^9v;aXGwZiGkQI&FTA2o?O_`IU&Bd
zE~hRpuPzTD$k=hQr~ingG5fs}vyyuK8aspUvdU9(Z_l={u=kpIysNs+H_%xENGW;9
zyT$eORf2cnGudsJuFq-HKeji7IRkynf$Y=JitXc%F{^F<yK)uPL02(z`Z_b!$b8bG
zq9@P2it4hGG$r|e2>dAJ$meGB1(RG-!^C{pAJDC>nt}uz-}c{n0Q;}WYvp-T2}&(%
z%bDM=KB{5lkXAM*>u;N{M-S94E)Nr8{OnEapmAW}+`<Bz^R^5b8JQa3^B$3T<YtwB
z@p}9m7i^zldJ$|Fr`X=QEE_W?7D}cQdV6+$p4FgD;RL`fpal<@hQiQL``vk(hR^p?
z32tS8;TNdLDfV^1q&(j|Qr0dw_zP@yi!;@^qHo|74Rtm)8jK+y8#-<d!26RagfElP
z64OqxhR%ESLck#U%a<0_Vna|%?&}9ykhr+@fq?-qK`M^dg_*OwzazRBOzIJy$hYYI
zg}82M!LMF6i_rEU0jSyhm#mK;&xW-;LcJ8LYhYS#JNTE6-@G^N!UFBrtwWo|2Pe4f
z7LjX&ul<|=)OGi6CNPc>^W)&H_EpQPwVpYf@~{$>md=Fm>NU~-Q2CX_&!0$!_rz^}
z`?VS{Gj>OnMozh}-M3U!P(c1S*Z9xy(eF@cGR{Zhfk5KSco=`Z^lYoEieLMf68~Ey
z<EaKY{O|>sd|-t(It1T)#iqH7Z>~vldhEu3GoT_<+A{4xKgtd5(g4O@jS58ZtR~D1
z0DqM;iD^3>S1Kt4aOYSARBT}gU)#-K+y5)+!AA@Py3~Nj;<TffY1=slz6Y8qP_%b2
zna3;~jL}<u1Uj_l*}b5xEKmnA{mSELyO*f$d!Ov}>DUiDL_s2%1&?u$PN$Srm0tT4
z&vGf4F*8-iyFLBZ{t;5?9S-s2bidA8Ejqev4D|VCg-O}CKj!58ML2n$5KC_@eYzWp
z4E{tk?0)!Ge;%@FF@->XvmB9(MF2y(5BhE!f8H?7bRs5`5%FrD-pu3_)I6}8ez`xx
zkBv)2bTZdnM;a(l3Q$u}2)o#&l2VIU<zh)ZJBdMSLxR>pE=Lj5M<ZD#j?2!lJ)#bH
zoci8-ERo#)=Z`wPXZ)>5`UmFdu=5}znM7c4wS8)(4J&pXTIULjnYVQT2C$_-t0f<U
z+Bw~73L<^&gOrY7%xnUULcBi&<J=x+BeHzZ{kT_l1Z)6AinXj<$YD~Nv^ix+ex}PY
zRg`p2>I|%0?_%LpS^Si&LsbHQ9s$F#0n~9DlT-pHzd_#-AV7S65#P669f0?yHusHP
zyKx&BhCHAU?zOc?7M9SNgmqN>F!rjQivsZGVHob1SJWd^{A0d#zlT&zm51kq2_B32
zJX=XeC)=~lS+exFU}(*YSFda)_wATjn1RHXQa(^9ID$yo{n)@(u5aFNF2cQ1A5_*s
zuWBzp5fm8NOlC(w^SwukMvMRaXf}4Ko0tgS;grOwPX_ryTfpkv8)y8m9u}|&4BZ-n
zz4<=^%P9V%dOkCy0%q=Cp!M+Jj!)=|uPzJeO9T^8GVK7K@6jw7=HunMjcrUYH`t2B
z;qHkQZIy3krXaO3C;wrYL_G7)DFN#piWtN~v{7Oz6NzOU$6<w0g4;}^^2x!Pa3JVp
zbZu&)gPuI7+23LSvYq&gy{JUCjHhB)f<57S=bXtcdIp9KFmnaWY6QhWGt+GBCnI&x
zLsHCJ;M*kd9G(EV9k6D2*{N^xN4nnfHn1eyNKd3sb}Iz~`<lfgfN1!YB!m6gc~le$
zPZ=oH7aW}x`;t}%6U}`H9=GkkZ(?GC47{<>2f`v7iYMG9iMA^X;*sYkW_DYXuzO9J
zIJ2h?Q}_gUxthiPm|w$WL5=d=o1JW{IvN_9^Zm$u;GXax1a;WFPLjdk4??#O``HEX
zZ#k-@ugG5*7MvS<SWI@r8?7xa65z9$uMO4h4-@gNM;99vX#Dse6EsOpT^1%Lr*`dF
zJG<gK^(s&itj!<-q}c_B$?;y>biCMTxMM|r*(tXu<)b_Gjs9WG;>C_*^A#$9=Y!!q
z;N#p<%98kizc%;xOGmeU<y#sIWA)jJQ$0#xAqWX4Icd=o-1SLG6%Gb%Wd02ir{_p)
ztN(@WEP$#5F?FKLiOm>B|2t%bRqYN@&E4kUW~(#3hNGPr@?y30jIk=QbdAG_7^lgm
zdl%ujF~>T;aEw*(gw>z2{gx04(^A*vo@B6b9`5X<#|a8Zgno0u!*^UC>8dXQskThC
zO<S4`u*GT!=1-0&+}=)0d-vD(EbZ&>l84^~j;uvHyc#^r$KI5_{&BP_nTJ_wCMqkd
z+aMk!s~BCIoP<H!3y=s|P$no$sBvvf6q$BE*$)7gtSR<ts*3L^QCZ8&B!3X{D+#pG
z3fCqPR^T##YWhlFI`Mv{p!4>$`)1C4l2l(3f*}f;9aBA9xeoxhro@HM=xWDSOca7m
zuuqwRrd1S4*X)q-+ju)WQzBZZ^n+z6Q{72K+w{Ol4OGNbjCS}L14H;@c`c=(mOBEd
zBbbTk%4C!`py5N@|CAQwPloi+-M=I<3(#d@;o*Y=1I{i``3dLYgh!T{PE3_lPoH`Y
z)t+vuD;x{pI-NBHM=WRfTs(L^mGoW>X&qhzWQ&-1)!$nEWDQh0CXGg2_M8iPFb)ds
z_+l709#ZRL6LB6Tda!E$0}4^{&ur!v8A?EnsMUuI8x}11V6C^AlrW&NKT|3@E6aI(
zCsUu9j;SC%J{-2W9{rcLG!7m`82xrgb#rr*la~i&?w2mR3V;AO?t72o$IFD*^O)=o
z05=MtQ&skU@RgLE?d15_jsbK4!u-w5%vAP**qLoTEhQ#`kUXGgeMxwJ?U)Grw-$i1
zLM0cSp$bU+CKrVslO$(lEdy&p_tU)LOsUxOeT12iCI>woi#S^3q6O>oMrz8S$LT(v
z8N7FNG=1ji#0tyl>@P1_`<Is-?B0iJae8b9{jmgsf^xLiZT_R>huOTB;o?hgNvdbV
z(qjrbys(pj2nLT{GSuK8n+LjPq2$HgrzrM}vW&$!=?DOw2ARnB<Y8F~gnkoj_x%rw
z$N<owmB^{{B#aOdx1CuRu{zKp1f2(FZtvkIe_6{9bN|Cyh98tD5<DzETvWFV3<ykL
zxN#eM+`Sq7VKvf&3*7arV4{;&4HQf;Yt{+xZJ4YRF#H#|+yb6Zu5I+XNaGb47@9H7
z`1U;zxq#+xVo{MCRWy)_+3?iNc{tg&BPPxTvNQVLn6HQMY*nh0hsbcFrsA=PrwV!>
zB)A;-s1`5v2q!Uo-2-}-{ov=%pX-kw-Tm>y7q~{lsrjrX10~c&7a6Swt=%>)k{6Z|
zJp6=|;0l*aq@gfU3%EP{Y4{wR^j5R@0Gh42w6O4m+qnnG$V`~{g?;tyRsP0xo@JdG
z{VB29*D@MR=$(2K&&NNhs~H#ewbc&=$>wc^G~(2rH>tnzk|7U&@j}b}M6|Q<TUP?t
zUhDT@cQv%SgF~qdwd=tORTg-@)}8L=SQ&OiG2q<=+W-38_ZTB!H%2$$M1J}GL0LI6
z(c=XER3Oo$>s8SG`}ft)N9EM`i3o{taZgsh2NPM6l6jbKPd{55M!y@>@m6fYf&TBl
zZymS*CB3q*17#0`=+OS9c7eGJb*r&*UBGuLYrB|CIGF)=ezA6-NklR<0MoZOX3DTr
zhwg-$gQh2PEeoL6L;6xjhvJlt`xkIDiF7*|1&|D=xt}bqF#(04gYfQdPC>6SE@(@u
z+1fI*)$R?&TGgU9VK}@;YfJ)01_ta;v=7TbeF9ii^PNX6TDSmKUO>I<<1R18^rxFA
zw^q{R;6U|=eL@TFiJr#Mg+{`}R7)^=&*LQ82xmRG!j>}p@_DG<DcQiw@5DqNDjQ~0
z*kV>9{Z3#1-Min?0;sGy*Rvx(B=E6kL@`)aEJUyvQInap#ZKj`?6ovtJzh>0R8&<R
zw6=Vy$n%$NTsj1|FCpH%eCanfVtfU#Oz89a<U9UU!j`bQ`RsP*@5;l7NXtZWfPcW~
z-{qOg^Z=R4iSN9&x>~L&e++EL^3u{&JRSl&WjG-5hvMRiNPY_Qg#4MNNNQl=q=+%G
zG8;JhBfjOAlVc_;8}jo(U+OvZz3<G-il`Ml-v_ry(*3gCyME!X%<HCH^MXQmNTpVh
zW9YSo5E;rafUZ7}&@CsM)j$i(5_7YV?ZVUExTh}0bWh^t7eQ`}`;#M|3Ehg+8tRAA
zz-|IOn8Fexheb{dny}UL8)JSh_p-Z9AwwB3G`-i`R&Tez0J~28h*ec@gV}C7hO0DD
z?WfPeBEHFq?$HOg)GotGiXSOY%tawe9DGJxK&5Qd-6tCQg6f49zr!kCBwq<3vZ4|s
zbAeyJ+`D@pcp3l$9{rvs(X{WOR8r<+NX*M*sW73mKbB#%3uwSIepdlX3E)ydLcuuE
zmB44WGdpM}f9&QCmKYccB<{!gY=*T|9zWnUF+!lJNL=MI4J!$I0V?c$;)=4l>29%M
zVVuAN1~}Gz_VEE;*QGH6dQB39gi9dP0nv}ru)<ZA3{f`)hrf0T(QXGTS`irVl>-m_
zZ_nO>#3-vYDalhUKVj-iyTIjP3eK6k;ygD@g_swKX{e|a>NOvDdO}KLK)Fb->9S1+
z>6ugwHMjWo*+TOg`wJ?n+b);#LWmjxdewuWwNGimQav*N@|ct23prn^mHjN8bTfSL
z`(noc7Ic*KU$cUuu3y%{AU(4kaEN*oymLM1!)2da@V0(I#|ZKkfs~hJQ^IA24$1ux
z+hURfF~|ON<zM}Bx;*QPo#)jbdfSr&`Gb-Yx%%x+g9*NGQEc)_gY2sf|D<02689tG
zjQ8yi)1$9FlD!mHLev<F-{jn9`e=~&3H$P`8xe24pEG{E^lpQYeB8&^!Lz%3fBnyx
zhwt++>&vmPPK8SL`vT9#dpBOrQeVEggn0jL{xQBz>5bFN7X+)8mZMsQ$uB?76I*a1
z_s`SO7u*z{mnXagTK2`g^GU-P<ZJ8Y@E?ed-NC)s&TNP}R_i6!l;myZrPG3#e<X8o
zbyU74T6Zi8g<7t@EH@<ox;boAX(D&<>XqTFJS~%<o=(o&<*Gcw%$GUra$(GayRkpu
ze2gD`tS_abkWT$m<5q+<(;dX+JA1@btTE^fLor`U-MD<0=VH;^-FoGnST>@6UxKuA
zp5L6#i5;DLqVxGbpQIBh<M*#oprEf#%60QUYdUZSt;=%<*$5d+F*N(kT+_rZpY%Zg
z>WoU6<8vK%k`(_Ga^s&m!n`~P&y3MRF%2sg^@JNBnn5sXR{Fn7X=?*md^do&WKw;7
zmC@%n9&ec@0--mcFKcVvYoLey?Aw>;3*w22#;#u#`UMYhz=gB2vabK~u>*)8pDXg-
z{rdtAtDh__&VF!)tBGPcI5;3x6cn71%MX62jMt%)!076$0+um4mu5q)I&g)pEDK^b
zSNM)xcT8VhSs8kMrb<N>?Jkv{4JLUgRx*T%88|qEzj>Cq0D8-p=M0jh`{%fOf5aTq
z9^?=P294jIH2?w9?w(y1c5WT}^XC%jLr<)Pgor5huih}Na!c9EQYnMqk)EBBvKLf1
z>OG$UD}pnQEHwsPzu!m-f}P|2MX8*@a;3|~Cn&7b+?OBCgU{aEzuxZ&gg0UpqodKt
zhfl_7o<HYhV^c*O0PkAb@HQP*QXJ*_%Yqvu)Z7`A8wX*YCS+s3wsgSQuw<F#S<u&3
zhdTH~ydw`czI*ff)j{ceg5~^X=eb>8SooBR3Wz%XN$f6w!z-M3;?Bo_PlF8>4ZIaJ
z-mZ#+^*^W@F#|WII-*<mU9$&Q!LY%;V40^fwBeNpz|<uwY65MM#^DH@`oZ|1t4k$#
zqm%JA@qxK1X2}A@TIQ7NRY49SQRFhsrk`r(+3Cx9_4&CNv&o%Z*RBrExbv%$XRM-*
zQta^6Mlwz0@UWZMioGE7v3!yR$JAJn<<+9r8s!y;>3t}lbh+x1-Ws33FMNqbbot|$
zhQ+<az`588sGTms6;Q$2wb|Nx6alJdA<9>88f0cFQFFsC6nqM7w%qs=36^(OYmrV(
zEJsW%MP2rnUKSAJ?g0XRtLjnQz?(V_4W9sX^KM0%F_I1s(^UaY=oa`~{ie?4pDp~J
zw<N%_M^}HnwtloR8rKR0LuwX7UXSkf2>rSIl_YQG;xn_}M=zp@fh*zzzM-KZ=1`vb
zXjenr*~?`r==)(|p}^cum$sJc6z|SWIrxD6$<;1le4i+w%}^6VjXZ=J53{swwqpW$
z-^&JOa`EAw*uUD^wN+US^*S)?-z3Yx71#%{TCX;?m`?t^#ON20*jIRo-O6x<4qECf
z1kF>kt&V^cQn$kRb;r3nN7-G8W8#VisTUfE$TcSqjbXzWvs0+^6nz_&{*Uj~jZS`W
z@B6PD9%H2AyANbeuZl@6?_6D0S2dk;7M6nR=DjpkLflw!&yfw6-yTAwE6Z5M`wlBQ
z9z)^@`MyJ@&sg>MIL#ebGnt#0t6-V>ja345L6)3?(r~!)5MG3m0e<%C{5Y*|JinP1
zWN}a+<weSxM^605>UcL^|L*7gMMhJbavlXS<K$QCh~%pvJ)U#LtCQr8mVSL9|DWNi
zU_wP7-e74AsUsu02z|Y9qwR+qd?a1mQ!YR0djYgN-#=#T`zL)@7faoro3Kh++U#_9
zQr?ilU9q5Sr6BUFD<izCEf?-u)gP>!_-$6)<h{}NaK+LNsr-%pA^9X1UUct`H2zKH
z!xTBf`089uxkxRM!>{*NSj}!C+A4~*QIC7E7iL!(Lqq_#A!vLkI&JY$E;$P@=6QMW
zTxx@hQ{);KuUQR)rO8o|<N7@+F|e(uuB@!g$f$f-mjv`KrFXPY+*#kYMl)kUT2D#X
zk10(BH(iUGh$2DXqb+?w+k{Kz1P@ksUsp9Sh#zS$C1*P|{j&6<Zx61hY^$${TJvvv
z-zB$|HTi!Pb>8t*zwaN{(hy2!R*^C?a*V93jO;y*b%bLaTgWCMgphIUy*YAh*{O_U
z9rIX;Y|75Dez)rL{r%VDA#d;Zz3=OKUC$SpNfhpg>@rmV$hV1o^j1*3#=)+zx-xGQ
z7jw>s&^rJ?)300%Xf*;D1Q3V$Gq+!Wf_-k*T1^Sqov09G^7?D}ZVU!9I?DY(L<GW|
zD)hcHw97l7rC8NH?Oi&fmvO1axY-G$n9ASo5fL;C*@v-l4kM4N8WsvVUpQu|XOb_$
zZBx?A#{R^kZtaKys#D*!q`tOXMBEa|?CKmZpIQMy@f1WgT`4Fn%nJfBa#aTt{-|Lc
z<_l*V?F%avUVV8hYHc5yO1Yg}S(w_ph6XPM1!vc|3#Y$Prxs!LzE^hF#<f?L<3Dg1
zYa<$#`#qP(QYP;3i-oDkC{$PE^*Zzrq`ARRtzt$Emq#dc`=b>12~d(^h0(l?KfhkF
zP`0yBi0lklYk8LJs~AQ^%@@Yr!u!CoQ0wzqS7lrP7X(?n-9D(d-jRe{enfNp(o<-x
zvk&sJ?G8h_!vT--+~@=@%j@WNc2Vr&nh4vbW3(%AM!tq$Usuo3WaERSe0Js;wwCZ<
z#|^SOZtk5^?g}gkkjsNT-m-XpRVVePgeb<dPxX)N8Xp(B!}Ct^vIHZa_94=Y4|+1J
z{4D;!12400vB2wBQCUwz@lAH~Qj(Rjwrkb*m1os9L16|~(c6~+5LZ$08ckwpPVKvC
zzCSaBKBfl6-FvuxXDM)R7ty&wr8@O1OtUB3(lRQ|2wAFs+kZGh6np&v<w4X6H>#ja
zsm~I(?Q7B6G_Bs)n0@&5l~0ii-_7?nZ9~8^_MR&|k||m~4#X$W0~2~z$MpY;1+Y*m
z{v9^*yfi9rRwYt$NRX@c#s|9llY&JxErpWzKJ0Dj(lyNrU_|bYvfPtrja^t1?lr2f
zXFWOJVWj`SME{+;g{QIUk&KPj$k2}sG0CZvhQ}KS!f1Iz-Nk;IQ9Gc$r2ivdkO*Ok
z`@S|q@{~QUg7SIgQTHs-#p#=wB|<~Ns!2XnllaldG7k1^Icxv?k4j9N&c#Z7oR43~
z*2GJp6r=ocS-c+_h{Q@cxhx}@Zd`Nv!W`Z|5tMxI&p6YQI$|4(2KUtkJ>@t*)Yj5)
z70+FLeIpk;$cU285meBvAt&i5rt7WfOz|Q|aU<d0SMm31$apzbbEBi<;QhHxwpm1E
z((To2-T!vT7xH=C&AJmF=bQRkeoabWy-!&F_y*B#^*p~JU%0Pdm9WF9^&*$=`3Kh8
zvT3SX4yb_HB!Zqf57G_&SY5*#?#3hIy6Q#-acLngD}UEw;Ws<<9}J!6pL3Ypb0#Hr
zTPK6@`r1rboHN!<hbFlV%ckkMQ!IVvhLo0lj4^PV4a>@^-|<fB*IyYxHCURz>3?SE
zc@maYQNJby)rNApnw<@BfFY3_BCU62q0skI{fe+b@fSqw-D+rX&hHn1DQA(7%uGMM
znP~aLe062*Rnn1$LNnh}SL3Vh6jo-3XDtT??q13Eyj7mx9!kS!`EZ@zqa&;AoUG@n
zg-k-(iA+96qRi0ebUhy%uj3sX;coa(Q3V-Tl|pVwd@`2t&jSc>>58k>1KGN#jz7<t
zCZYWfa7qQ=2Mag1xc9YIeoXf?FfJ$3`zJ^1QpEA+1xwucw})I2Ru0WNdhkMEj>KSB
zGb_5`oPnZMMNDyxUV=%HmcYl5cXcw~J|E6$!T$UiaEOm3pokk*Dy3`?Uab<;Ibo4%
zCz#ZF!}sV^-wuAM_VNA9ii((Vx|M$@aQeUn_I{;X7g!j|rWW4X9DVP@zgE$JGZSAZ
zk7fdD$M2gjZK`O5CbIt9IcVoMHfX4+0r_8@D*?iz8YPndA$b4f2aW!qpN*5hR<d_n
zEm)a^uId+RZ5<rl|57b`m_*Px8x`>*PJ2?-$$EU2`2(=aiGDg*a&^`B<b)4LW#ZfM
z=k0NYfWkZNu^6}mu~Ms)p#}Q|NDgftoZqkp9A2w;OH1lKd91_(#;iLl&|ngJNw2F{
zms^usJD<t6hjj>uv{uD+|6VNk_z}NytKG00GEkOTP&VKNw+NmWfFQ2%QTa!t6584h
zk(gXO0d)JKVuaz8p=EF4!8d8rkdXaa-wnFI&3^yIDy660-L>DFdfS32kDcn1lfNur
zngPf3QA4zRj?2QNp{C|`H#ed-{`Koy6cj(Kt=URw0Fw}xEtftvb__yprt}1=R2NSb
zU*`?lHg2IRisHxLsMSo!as>g|!6J|VtFgYtys~%8uyfaK^;}%92@emqp6&d?7$xrH
z-1aFnEiKLP?>&e*gT1V##z9^ET->C$&++mDaq)yI`?@;)o%R;8)cdl_;-wr|LrVqL
zSU%$ui==DiTm%Mw2ON=g6fk_XG*fiH8MaaVVv}sH#`-u~1TX-2Sl<w}1QHShV2dsx
zF#}+sK98dFSg+E(rINlNOcc~+ndajLeA;~QJI@r93;{>d#P1+?Ht}Y3wD{3)O;0Ee
zkT6S%ik|=JG&{rnjifCHkgeA!%-ES|^h)$4NaII5p@5y9cuBifEudz;edB5miOTGi
zi(<&p24boq`5)txlWV|mZMixt#u;UNQ;QDxdx(0!WQ^OXb)%vhZSuK%k&qCZc<GYI
z=B8Zj;G<oTAEm5Hc|y-fBQ!RXe&Ww9>b7>HV+)j)MbHYy;pKA&X&pW?^Ye$|mZ_KI
zLFsl*J|e6I2uP0c02_QIrZXix>>AKg$ET)tt`BrR6L5r)ub)*#B_wEk0C0Slp(hqy
zYySQ)=$lA}VbqMo#w8%Jgyuy9VXT6pA{kjE$W~PBegE!muqs%<l2)c6-bYAJ+;;-j
zS~Gz*!GSUXz4<I|pLtOR)Q8@Ml^cTMTig5TeAdpgvY$JMsFtij?#pd$QV7=KUxgU)
z-u;mvot*_JHQ~U?V$=g<qs}~-@CgT?Zdp^*xXKe_<UV7^1KZ!2612mu&EEqRD<D9B
zwn}FBERAr!Wk91Lyb!E4V5X`aSCKm{%TY=H_C6<;3(L|e2Bn;}vSE>6WY#OQVl*V;
z6jHAcKXF?lFH4pB`6(3Qxwoe1=bG@IT(dVtXq!+_(0#q!+g>hPPIV|Pfg|s$LaMbS
z7Ye)nhO(B9i&C)wEq`x57-VbVU>?4fx|wSt-s~TG%aV}LElZo+3P53K8KyyLc~TZ{
zhna9WgBZTQXlv_Kik?`p0|KQMa&GfKC%rrjir8u!yg-3hDKej?hCMa^DZ)3;SzO&{
z@$H&`B{`~ai<?aqGjKB6wS{_;d4m7kT>;z}RG`jvhPf77_5JjR&-*~GHsD02)4T#`
zp*}H+?0uSxa>`f5iWlXk`_`W<rpLs@ELp>4KMz`TXJv<g(k0ie_iRM=4eMVReP4b%
zIkXz~`q^{~ecDo>o;_M(TuK}NeP^M$`pu{B$k+$DfN6d<sQs&>o~PyK3m&(E65eMw
zv&+ijHJB)1$tf@;Kj+i!K9f-sKaLI~XutU7u^DmL_JRqkDd8p8JS&B4bv|v@`9MM$
z>_#MGRBjhLmb?J3Mn}(QH8$NSQcDaFe4s2BFg>I!42syX*-=q`Iy(4BdcWxx*i<d@
z9D06Hvh{KXHnvc}Dp|I+vLfyJK<>#lsCh+ISvf~nF318pT&OvE^;VvyYf@NC2+4Y`
zXs#a#Ph69=HXM#?K0Q%ZUA99$nhVa9mdnX8w8uw^+66ppnV27MCN8^lY;sUjnN?Q#
zia+oq?RA73<Rc@QkAq~hC0XcGR`RW?#1GN}!?4;wHz;9VjeOZVU0@LwA0Jt}QGdA6
zd^&EKmbphn#r1J}&tNAnC^*=S^ePR+{vp5HGA@oGJByF1!Jx^TM(})NpLEFe5k_oZ
zUzAO=*15FDzLN(oi+>Ic5)CazCt(#?QkfY+J3B-D{b_ga&SHex1(@fq>6+xOLG|?|
zbD`G?f`Sg-zeeVj>vmzp%8CY40#{a7Q4{3=qS8=C5$D17Mq_sviw!5V_I4*vUf%3M
z-kJnxJw<(e8pF)QJ>Tz7>9A>wO1TRlKm%F#w$7gWjVD}UWWZ9syLA2m6;;jFmc|GP
z^|R)W_l0?NqT>zxZr$o(J>?A~uvM9j2bQ>E2l1m{0fw}OYX4!qfqQ3hUp%+pugnkt
zO!CujPP1tPd)Q{g_M(W02zDYdI=YolR|@;_Do{e_etAD{u4$$bnrM*Wi21Wd;)u8i
zG_7~)S3f_(ur(#&Zw$*s(S?4fU(+`*D6TPV$7I|m4=l7;8|%cU7JgG=L(c|}miY}m
zg=d-;YIRq(YL9*e*xQzX0bojWE4)L=fZYsFC0!QPCLp%AK`$weUoR_LXCa`qd3-Sb
zt5ls$TjpvfMkr_mrikWx<?1S;ILBTV+%eYGC*FLxAp`QLnFL20hd*cP9A{&I&+>YW
z$t`XZ1~GUKBP}W|&yR&ajsciC){PIy9{=2%&@I*9p4y*@qI>kQqz7&p@aITWNlr@2
zjh~HgZ}VJ6T_f3$3Np;At0=kOb|r|Z%;+B3qhhs`vI16jC#U1XpTw@NyY|IqBg7`O
z^zppxm#n7>+l1fGGc#WX#0z>+YB0<sP|tf)l9h=&Qa^jIjhSw=L4^%->**h@j>x5a
zcVX+g4cQ1VcavBUtk299qSbBZ<#WziV3_pq@KAC|Mx6tmJ*eirm2rsWQUi-;(W)%V
zb59_Jq;=&4dCfE9p?<OB*~6cL_D6HWy2cyRjfaaII)51^)lm&c6fEt#tD{T4wUgbY
z&y&Jsti#el!ndLNs(WZjF&psUdSCW>;_=4!LBKH9D$QlYCx28-xbfhDek`qXm6fI!
z8*Be{+S|BTua!kA$JNsCU{XfuZe!yoJ1_Uv3M(tgyJ`TE9Z!3kPSpJ+1A{JUl<$%@
zxa2ua;lc@H)0GpR#yQK(c6MVzbBSyC8qW8uX<f7rN%NZxN=kx$(4!N3=n1k%fDz?)
z^dSJJn(|muHT~sQCm@%QMud5;Z9aIBY<sYZs;#XBsj`43Vd2}r`M5U)&`*Ai59Sgw
z`!#tV0N)l=y5P?=pMBrMb-};s1I{^ne;_HZ!{JUhYCHiAKVQX&?NFUJ2WRW%c3-CJ
zu5_?wxEd>8Ed&9F-yVLKoh=9Ii_=9tDmSNC?$Ir7WIeqQpO64}-d>)b=}+j>lar@@
z2lMj}gMItS6JN70Dw(XwDc;Zg)|atKrp!!)^$lMA<+HPmtVC*ld6>POu^I=!9*|@C
zZrq5cp%bmzS)rKy{@v~SQvlR|-k0W6NCtKv*6W9dmj@5uB_x=s-LThHGC2&JXAmuo
z;n0hHc=hX1o<NP{&EI<y4mB@g1=ceG{^MXsla$+dZEo%mtkWt;(a?tRpCS&8RpR#-
zfL7;ZamI+~XZ_)Dg2{-ThLMrjX|TuX5!!4(Z2t)0lUx>hjrPVZwSL+?{(ZbZm5f9l
zOkZYv`c(GsXb}i6$_C0vt?BtPk=)qSR7sCSUO+{gO1y8(ps4imPC_@R|5i{4BP091
zD*}iz@$8@Zw3>Y{fTQqAOGigggWIw4!26;qQ1t8K<|gLKelk>O)^nX)&APqJNE%>N
zX-l%Q@%uB)Y=s)e>!Yd=41{Z=<wy6T^<6+Vr57Dek$X$6I2(`K70l^Zp<jyAxSq$#
zl`slSK7ytr!1+b^V@r!lVPR-JhgJ=dvf-hEiK&!^zH_`?cXJZ`_FGKmBJ#LrDUq=6
z=kFQ%8DPQ9Ok09?o?<5DHs2$ktn-4e{{H?6i^YQ4njxRJO9o}24i%&Ym+gnAUP1ek
z{~VA>1fF^&$BYCvoQo*zY?%ygC67URETQZ}pW1ZPRcR%IEijKn`pymDbJEon7Q7DR
z07LdW6~<b0d8WIFZvbd9tmP*nL`l`XW)0Y#j12lHBR-FH4kKw9S>w;W*|<YO{TG{-
zBjyB@Nw;5HuIOX0A8reO<FmqsRVkGMBt{{Q==q-uqrb}BVrvqkj}XpaLeIs5EwI><
zpIT>t=h%6D@>1E`toMj_zT;Iy&t0zvFY6lX$5!pv>MxI~-2zTf=N(<<IR7lq1pY!v
zwR_r~9hH;JmO~1_)y2X?f-=e20?kyupi}dPHstQif3bkS3pxQk)GRi=kSxuGCv!&w
zSEXIeeOghhnX#^M@dR}%ssRh({THgIRx4B>gM^XAtSY$P`ihZn*12SEI!B+Re(|Jl
z_<y!TDIl1TtESeOkcG;s2<8vh|6#IcLQq{^fN=67s{R`u_urGv)he35rk!f2&w=XY
z;8Mkub#gzV)Z^qlh4!0_nG2@zudcWj>7J7%{C9hN$>rBPRo+RsJX#TPK)J);5PME3
z;P1}}M9LrXY;!K#4%D9t(-6WCQvagMmCPjEr@ZY1wkW3Z`c6VGO?Gn8CjWr(rF9MV
zhYjhE&swaKcB@{PkY1L^dvYY#ghQZkCU^N755nzcE&rb?JFrJx?~!%Tr9VNP0j4G7
z&Nwz1?N$&*_wBA`C0hUCcn8bz`#6HhHkogr1Tuht0!DP@Vq1MZ+&G->>@VQhFMcEG
z7+|ciyDx5l4%MfC!IO`0F*LPVSwo=6FJN3$w6VKe;ZJn;h5V%h5B9h)$;%m9?8|d-
z60?xbz6FOq!NHjkO_V{Wb_NLj0k<KVMBvC&Q*ehg;pbT!ES1|J5NKWq^$P+d4b6@d
zTBnzgO?!KC5`2m5IbCkKDs#Y%4Ze05N4`$Y*M;q_sV|C|=K9lo^m;08ZUFce=vG=(
z!OJZeBBT@^?-#1(z+v3@=;i1AcEmh&PZ5>C(qhYXLj$7@O>~CJ6p$LnDaaTZr9yMf
zGa47rXMxGr3~AF^hov%q<KmyWQpBmqC)w`s+;F)t!B_=Vo^g6y+3VnnulkPDy{|$|
zSpk2<Ay8A~$Eh{e(<Sff<dh)X;OVJwu?^mIVg0qnT@<#UQ%SY;)b-CMO=6ML^L8iZ
z`*Q~q#=@b{H&2-e?U06CD4_K$Ead9pE-0}jqVVM?^RY-OKatQO55SZj2{_!MEiPcS
zNW_?4AN->(rp`zl5{MzIeB_pVWGf8Wru}L4$m{}jw-!mt{=YbRsiMmRaf2G>rg1S^
z>*@`r!LKc6y+}Yn|IT%Jw0_G$?C5^IK|;W4dkOUK53GV0RD2io9BJ<nW&9Uymwjxz
zg}!-|=N=T=|M!2vE<~mr+2)v`*<0Xn*pqaJ@qg2*e|ijZoD||P^5mxa-^fwMFmLuz
z_w7;w5oe}<L;1x^@WwqKT4l<U(gP4SHlLnf{TI%03;E6v)RcEP?y?2>5`%W(9Luzz
zjgN~1Ou~P;X)E_hF;NA@@Z=?PH;Nh|TBzPR0e7YsV#?E(Ybz^1O-=pvM<<YInA=!T
z*MPPqwXSvcDO>Rp82E@V6NR;~Sg@28{O3(3XTPC!&Yq88!gkB$mJg<oAeq*pw6_I-
zhR8nrwPOVjVx|nm@(wDMRSO?OpCE8W;jnSM`8N*h&Ok!B|GgC<X{d^_@}s6+c>YOJ
zM-PGR?o+D>&qV^-Ri_18DPS&s@%(?DT5eD8k%hbtPH%P``C6a%Dv$VqxJwU;V8V*2
zGSm)uwKCj%^zLulNr;f$6nghPEt+EGev+-o0g{<7KQ=$VX0Mr;YoP~Hr+du5I#Rm5
zvolztlZ<<3^zlWe$tVBV2T}hOvvTA2B1C<err$>D<eLyBQuu>HW)!CYGJsYeOoj1{
zMv+C#F%&;R3ZG*9myv;rA$#gTF_1~=$)IBphReI-;k8fa8D<7oVf^uC$x!TAH7J~I
z&q9fK?UDcMwrW7usOg}4`%JM}12w!tWI|&)UabQ>r&nSFlE>U;PQ)4ypT6`s_%}$b
z=DfX+z?RDRxE5uM&|Ds6$Uj-R@>0~7S=;cIt>DdiU+HJhHh*u%s;0FdTmFtXy9rLB
z4P2880(j2)DP!u^TwGQ@jmnm<JZV`l8XKQ1^CbQf`Gt+V2zc@Qi-K0_A0LvI6_yG)
zY5d&Mt^T+ML37>ME}iOsW%sbF#RO$6<UY-*#qqa3iJ+hG;NWskBLB|`ev{+Tp_HBO
zq_L4B&X=OCRYZ~oqBoO}ev%L2orYF`Yj!Zmo$h_~<ll;IhZ(deX3+DlQOK>we?%_V
z98h8EtAms;@F1pTGIwtSQTRr^*#J1@!~cFuznf^~@8#hcAA_6*WEl-QVg1R$0gm!0
zSb5~SS$*aJ|9wGV^s0AwyrLTK8&UUf&e^?6_ahkgHL$~5-~cRWMf<sdGJS1Pz0INc
zM4AWwM^@V_P?7iVol3RMPbF(6>wgt4GUT$lR~5$Pns~O&UA>4QY3cEG$?R+lXCNmE
z^0UX6mh+_l8*K<+pe*RMag>CscNq0PFhL;Xn}cZ!3(xmpURApiR<FI%D~Z1Dee~&3
z9JJAK_W0a6$<Aj9{|^R;zaJ|!!*g2ArfK=}xBJA*#L1C^3<S%K@O0@G92A{pZ=w65
z{2CrV8qm2EZMHb$*gX!(2R4fU-w}H6?~3*9B~$ccCTAGnrXKD^9ND$wk1y{J8%!PT
zAi(A^>1RvrkG#Ok6B>E@NjY#EI=&1PVqxNLPq`8j;^N=i_yO+Rzi~VksrS%n|Cgit
zwxi4bjnJooA=imOCf{S__vWolxj8dpubLRp$0RK!rRFe|^l6_4ccOLj$xfqf>z9Ms
zTI_$bWdtx0P*Ve}6<BatW}a|Q1%<5xBFhMOyQ$>_{wpmdb{4R1Sqp(AoZa&X4>N-!
zW4!_z=`q;PQY%5s?81V&j!s)i8{z`$EYpi4tJ3y6s$nDX2*Ti=p`-e@dPbj;5^*zF
z%q}UTcpAJ`6`G%peS(i1@z21}vR@um4_4glp^www53Ah|ADzFAJ?^26SoYx?31K}}
z9c@#;?pw7+F|Tw?SQGng?A*zNGbu!iaOAN_VVxJcV*tuvo4jE<vDA(8!Smna8)-aH
z&xtdK!M$N{qw5Pu^yiQ5wkvl^MCG%y^+et&Z<njFl36X@2AZs*2+L2O{pyrA()t#|
zJH96+{e>ZLmdGfcs~)e5Fn-0E#f{(yG8su4bkGd^mAs_Y+^jZc)iE}7XY}?<(KIv~
z?a>$!1rw^0!6*~w+S^9pmLSE1m5z6|-G)8}3}J462IK<Z$OA-<H$y-5+_upaS5X=K
z^(*bqFj!NW8d42sh_)kiZsA$jQ%m-?-}L`1Sm7ANB3)&O*9O7tn@Q7=`OQmna})Wh
z;zd(egFt~uw{BSu58BNb<+!-=o${v8w~SW)3guk^oLed1%HpDl#`CR;K7eQI{3?&I
zg*9eA99n{p=mzRzFPXyIlN`4{^Zu6MHOu+<(GU-CD;9gtmz!^-6rDwT`^loKkhUIQ
zt7*H7Y|846Z4Gv-*8OeJPy<!Gg>uRTZ{ny;P?i0;gC6K&L8_lwE)pPvKnWSI8P=1g
zyrg93TYyh|Ul5$w%yF^Ti1j$>S__bt3=y@Id>AUK=DNl&d<VVr35F)^fImwde|R0j
z?2*{SmHG2d!8a3qePrTG^;``kj_+}8ED9ygnUj|XV%`H%GfmMuy9zQg9yRuNcSOLA
z&+LUX(4?R(83QCT#1F>X+tG;84WK*l6^HN+7P34nk@NL6wk})<)5*-7y>zM4&}J=z
zw&`B+DJfIdS<TIu4(;1Q0rNRs2kh)aa8i0>yS>y+XY|{GGu~I3?ALE^ECO}H#!Y^$
z!EH7E{d@UmvV~f3bHnKFA6mqFdwa{k#R!-<U5aXJ^M)!e0|-E@O$Xrf%SBD|-+mwK
z0Y2H;%`Lin6@=tt;*gRT07$P?HT}vpA#f9skqJ_QD2|9QJ%`E57c?|nj>z-ND^OZc
zqSdGd?mrLN*|SQ|Ul6`@$vtZTa4)2!y>>RHYFrlWd6Al?rmY#0(&oHWCML}>G0zpA
z11fh%N0PbBfgHPQmidplIjWlj%`S^&r|VzwJ<rFrQ!&#~#9VB4oV3@W;N%yZDkHvw
z-10ao>Qb;DYH5Lm<?V0)8S{QR6s%8_<n#Nhqv9MKf!1XojFk)Hnry%e0Z&KXs_<XG
z&O8qjxQsHQ`i6%ifJ0{d;2lulQ-OvwxDjWr8R_cET}4I)__nfAguH&8pLZVu0YPyb
zG)3!dsDIPjQ^31XkK(|nN`0sr0biC_9-V*OmKQv5kxBv0*4YVc6oF_si$J<H##+&l
z{6!Q)MDC|Sw57u}PLR&X{&<&MnEr8j)bmh@7E%%tE?|(P00UNT?IHU_RaOR!4l@}U
z-?HUMH7T>Gl_U#_iejW}y^qvyM-1{>;1m;jS0e*?-E?$3;c!9=T}#WwPoESkp8@xZ
zm_f24dF*ewNV*I$P;WJf!5shIGy{;c$Oy4dd@PcrtyPDj1LxCG9zt3|qE1YaMd4bq
zc^I}*eXRn!Uz8v2m#x@t=2*e)3rFKG%?1ZT#rb@gcFxt+c{~>CWDPnIv^hpoiHdz(
z;<&D=>X3IpAFFAJ=g)B91EdI`z8Ce_dc4na#m7|&h*%x*{IH~7YiUVEp<n8+@pQm&
zRLAFe)^n?u*nGw%P2Tj6vb+%8p(pks&HBurbhep6Q>IRt&=VxKNnR1|t}k{hO4*Ka
z3TD!RLYMG1=Gjm>ily^`ue^3winZ85+#3)JfG-pXt+8pUt>p^Snk^Pss;CH1L0CC8
zBY!A3g5U}$$*o6NsYfcSDrOrhcU$(Q<;j7{rrVrAbN|Sm4;2oYvVuy6s)$<CAJf-2
zI<MWBooxzcT>(^nGgS6YCF-+@`m<+}Q4BuLF6fF1Uf1ET#i+P(F+u}sr~%Ja+Us_$
zBuhY3TUl2pWK$K>cluKnOSliD!%gqLg~~8NdwaXyk9O8IK4T$+=8?W{BF@ZbkJI4N
zrCxg#9M}D0H2B9dL&tNB6%ehF=TuD;f#e8V1QuneqVm_8_=}^}RBNw@i^PV7-90=n
znxt{r2_xb$W(ZHg7n}78wb)#veXq@Glb3f73{p}Cx{lNuwuI5)A*<fDTx}3I!u5(8
zMMrGenVLS?&2dbQc9J<&v*N3Q=9-Y^Qr?dETqgj1f-O#f!}CD?V&E}Y*`FyZ&n|R1
zi%yDxy<ACAHCF>29*+L-+N~<+OM~$E;oA7cB4G`tm1(iHp~5+Es@ydxJCUXQP<y-Q
z;aHT%l%4x?6paW^9j$`{V^KTya@XSM;iYU8?UKRuDJ*D00BOc&y|(r{SF0HmyZHkc
zZ(Oy1_Eb^}5S+Ey`F&&oR7f?2HFqX!rN{>VXiUaJCMdc1vd@x6=zBz_C$~>~OhP{L
zc`0qg{NmzZBA8{$K9E0mdSz=0>@uD6jrjE(jEo5!Q@)U^Q#|MZd7`N}$PIC#y(bM|
z7X|8bwX|bzUNf;{hDS!gdaOB;JDHrC`b=BjC{wk$D<L}iCN=fi#zuU4dcL0oSl%Qh
zQ)`3E%hP~QDsF)KhjExRs3xdS{AAZ(g}AaFUepivFSXj|IM$B!0SqRUOvMvN!H!?%
z;#HarL5bBMNqQzGlH&_+tS>KjR!VY+ezdf<-UK12<$?Bg>~BQ%3A37DwNqf+%6$Qz
z`bLkbVah0b3fDkJ{3I6OWJep^P4INPmfTpB0tn$9?uO?`iHYT!q=9tq*RKJ`_}xW&
zi+j=X1w(-BB41^KR|dFoQybJy_YE>Kg&7}kes^pD$Qs24XO^rP|0j*ihr8?C<X7tU
zz(rP-^k-I^lw9LoF!>1VUgNgXb)4RljK^8f>P=`*nFoz9ERPnMPDtSSiJ~6dNW`KH
zYWe|Juuy;_`VDq)FeZju-AqD4?d40-I>WnUS5;GmB`K=EewD1NL)O*R)e}EZPICL9
z!0s-^tvy@NKHGjdapCFYv{r&9I|yOK<=;|KGtV86l5VHCR;R|QApf|~1V!|V6d2;F
z8l}R?_-nd=i0EO7E{K+{Bl<HkD=DJBXclT)Tk8UeCHS=hL+_2ragc$3^X42djb;ZX
zMnzzcDM(b(4|gk7WBuXmA=MTdj76+AOPA2Rq%5tm(T#VQe^*TIVj|%<^VBN*gQ$^+
zj|LvnM_Zj3)ii2Vd-wRH|K|k+p}RZjM%%zhi_Dpju%#M$->v#h{L8|THSBjgTe4fF
zQ%H+q%=FiyJBXPb#E9AgA*>8UAeuatnfGQG@j&?EE|7O1{m5?X?j*8BIa2m+=pgEZ
zeO)MB*V0f>l;`+a`4INoiX5)LLzkU`FvJ`WOAfTOrb4)nDYQElPc^b(uC<(XN`EC~
z#4gFz#-1+!k&o`Oc0YuP1Z|3!6ZFA}y7X1jW&~$%XnYm2wZiN6xU=IeBf5mw`r9TM
zc2)BOe+{|Eq!8@J1|AOuy1F>&e2_+1R26sGB`_a;GU*XYPp~8TsKZ3o^2*$LAcLRZ
zUbi?c*8B6I7wI`c4a29z<-d3hKzNB!`Gm}@=<I?j(QTuAP<?kbsy9!+E<)A>K5E_9
zlh-U7Pi$dL0N-u1aG5I)6-77^!bdu+v0gAv#z3TU3=f+3I(j5Ngw|%EnP&d%^5#F1
z3ga9u(KTDGwQaSiOlox+NT|x%DHb^RM5l8RHUj76LG;cF-64d0xo-;hp@x@=lNu;Y
z4MB@f^_igH3hQrIg-W!M#`u`6y-TEz^+Ha8)9oT?8d`sS#MhRdqvie*p+||9Qwr!W
zi+bs=k#p@lkiG8UNq35Whi($vZMk@#u1_T0jc{V@wQJ4sZ{Y#(e3Oy41U*pE3+O$y
zYt@c-Zh4G<q_*p=6}X)}9$3ZqhdtpRZ#MVp)f9UN<@L$>Z0=Q7aIfGdfEZZ9;Mv{J
z^~Istho;J(U<(DWco4!@A<37<7aDUu`$29(&h|Os`?PX~6H#T=&Z)ab$%1d0!HXAy
zR)mA6h!8-M;V?LMxnC#pbIC-U$13OKP4u0s5U<y!@R>Gy=H~jZpTRQ->{5L+%hvZz
zv-`VkJ+#~+no2myeUY44ZnO*my!7q`h+@7pTHt0N(xSrx>tjbA91&@W4WOL~^l|&6
z8r5-r`l;$?udQ(YSf1P%FKGOqJKeVA{>VUH9`sb)heV$RTZ4+}qNzvSF+463)B?ig
z^uZ3^x)IW_v)d|9i1Y=!xwV(90>q6ydm%PI!HHAzw?)Zrt_i$>pl9t}0J2oEwI|Q=
zQnKLd2s0k^!>j1{Ywg4#HH*GU=F8%gu8<R-yS9J(F-y(nK`E@Ll0O6%(r&K|-o<t{
zVVvcdSD8R(qFSLaAwXYIB?KOsd=t|X(b}W(EK&bfu)f*ibu?w!boGxL<0q$ouTkEd
zdo|JYWZdY{Zfj#?)wtJ(>R;V-kagtvmYwcI#d&W#`M~7i>i!p2aCNrC@f9`XFx6T`
zM;Rv_E=JV0B>b2UNIiJZl*tl^e)gur8b9C4iS8FlI~F7yN4z6RSXBJ4l|+FuC7kF5
z$d|ZR$kgK29vu-IZ>w%O!R(8ZziLoHF$Kue>+fREI=TeQ9#g80;ZVW(ito`)_-dPs
z+$L)7>0Q<pN&IC)Zo5vCC{#w?(?eff=u?p=_rZ(|j=9#}QzF^}Rlg_Dwc^L~`080$
z1R6DxEJNS&ipn8yzq8k&s@<6z{TN?C$$i8tmt%sDDmT_N=xHfA$c4do%i%mC*^ma=
z{DmM>c<cM6&wi>R62fc!r?<|!9ma+@d0Fv;(U9a|4ii0)piifn?DN8o<=Ey5ivQQn
zDWc(cjQIkjxbIul<2BsFgzDf|j_p(B3mbiFT9dyiOQbKFfv5PBV7esC=Db(Nph1By
z+~|oE%aO@7+u3h!3e8C@nbWsI%wZ#K*i8LfrV0F(<`6xN8*q~DAWRu)^6j2A_2eUZ
zIjOTjWQBolUNrv_Yzz<7v&N=Eo7zS$=sm8b$8s0@F~Yz@;HMfqh=sRvvT|^ehgTpI
z8$(Kj&5i;%C-j9fic^wz$Um)Ymhg3{mTu+OC&Z?`LCO5Yj;sKE%hu+4vM&wfBXP_z
z7|`u6tVUAMuaK^fY6~$B%{|EABqVN;N$APnsQPsk0|6Il1K&SI7LmhJ2Ys6&_8+La
zN<=S;<cbiDj5Fob1cB-K5^vG-)yIGReE`x&<tiNW@RFeG9UG4G71|GJ$~xN03j@E6
zZL5_WF2d5sC&AYdteYT?AO*v8vHX|6mxBwv#B4&99-c+Ym09<_vjidBu8zFN_K*zd
za%O`Kct)H}6R}?%>;Q`0@dE1+IMPUX_1|yqb|}4U_rqzNdsM%=o`T93$&5uM6%*8$
z6T(Z2$$OOcT+Oe;NA8&-1f8$QVX~_;1rEgjgwpI}Xb;Sa<K~Uw7CTh~7wrxye35}z
q?gMe~W~ZmD^tK<sKM2oGUKa@3S6T;qu<U<ovYyGPJS~%gz4||R@IYn&

literal 0
HcmV?d00001

diff --git a/ui/tests/registry/evidence/registry-provider-scan-completed.png b/ui/tests/registry/evidence/registry-provider-scan-completed.png
new file mode 100644
index 0000000000000000000000000000000000000000..833eaff7a74d2adc0275332c19e2b830545caf26
GIT binary patch
literal 103799
zcmYIv1yCJZ(=G1q!QCB#ySuxG1lQnBu;37aySuwP1b24`?(X&`_e=g)bqc8B%*>wN
zy;sXx9jc@ti3o=a2Lb|uC@m$X0s;aF{0TM*0|xvOB9Z|G0YL$g786!;OFK!2G{TU?
z`)<aB?P_dp4+DF~*uR#J#c-vnN2?TuMLjwF+n}tewUt*4CPPSMb?xr`jH5a2<m_}^
zzlXw0v2y5al#|WVGx5`gx0z}Fo;ZFetJ>Xr+J)&}9}Mhtu1|V)sKI2<@JyR~-K2k=
z0~$k(NJ@Ls5pR|@CpT{XlI0{?*-dIaLx-4-T$KaXSjxCEjg?%!4B^{b2ZS)nf1e*c
zL1HF~lzPpO)D%MLB8WUihBAlog-TEL6c=mCZSHZCY;wgWp(Q_znJ7J>#pp0d(j>E1
z#t@@SwKo_BvTGA_xoWPSQUi%${QrEUy2&I#RK=Q@w?j~AyszbNa9?l&+f?6p9!-kE
zX!E#sia?t3i2K)nhTv-FH%EoG<mgg}?66px{ap`D-XJ9NdzD$Q%mx#qM>C425ts?H
zVg@rJJ$?G`$il_gW=`=ib(=FrSCmfJ(PZiabEQGj|2-Ne$3IZ<)e<}KcYft1nFiFc
zK`Jq#Tyg&gF>uv1-V@0z?R4U?5pBIiQ2RsIJL(LGe<na7b^TV)>xd8PUl5Dib(MeP
zcDPY=C*@sc6c80uAm$ZEia{@llHX3=f2r#UTfUS=qT>))V)^fKI3kt1FFwv$=ORii
z@tC?~V=7X?>RB|OOp+aYYUSAb)xphm&+@aIWxf`ut`1}wNYH4|$Wnw2^GDXrKQ*D>
zQWvxf%om+Ne9A}td&@_jA60pW#Xiop2HMuT{9}3?yjq#GK^WOiDNC|-42bC~0{O|~
zm=g)qv$lH^n%tBzq019I;%>;&MX>Z`u>Tg;LCOxnoGCW#xJ1=pgvn4+_#1OBql6Gk
zJ$N2QpPd;s$1fBx5bQ!%+>gdw-HabRLGcR=GD3Jo0e=^=b1WhaqS`XdM$-S0Ok2!O
zpmz%ao_>HRdxb6E4dF|eqoh?`LQ5T2g&0w%rem-@VH!tg;<N^+t9Op$zjvXDpyr28
zLbv%<Nxdc&!$j+${i!wx66-hoW@J_qTb+fG%;(@-=W*PShhA18&{Gv{DkrXi9FhMy
zCkg}&J#_~7sNZ~kM!$u)zBm)bTRs_7d^ZLvSCuxusP2r1m6429mc3OX8vao8MCPc^
ztbdp)SQyD)m$-^2p33oYM<GRZj_rU_uJuqSHGsO_#Z>@TrA>{~K%~bHt7`nDRVQmQ
zCS^nAf3XTi42A@?%krNu!}xnKNO4U=B6#jemfg&$p1}#%5n_=A(AY?{R8$mBx`mbM
zS4e5F41-tJ(>1V`m%~g<Vg-R=|2<hKQ1kmB$1PFSGT+AiDLR$d%U_%8uZU%Yn8hD5
z4rI9qr)5LEikR|WW(_ieVH`C@s`)52yFUBD>gHGnzY-{UMPn4yOcejvN2n!4rr3k+
z?(zR?)I23oWwm5hlTwXxopPOzOo|T^@MzxNUTxlOe%MR~5D;Ej7QKetY^NUX?!v7Z
z8S3pjr%!`!TMSgu%O>1tj{Bsz7CZ<`>hP0TW@#1p3|#*6xr7xH@$>u{dxFgKxaJLD
zWtda+{p{!#r!nj+cH?j#N2c{KOHM4>v~}u9BK5{p;%Pk|o}bbFx*Cm`Tsn{U!Q`i}
zU#pp3U%b4%HwR<|m&7Y2F%`39Fqs}~Oib!O58TDmy_0?yT|b*#T+~Wl_rB~|Sis{T
zUXzumFL5X<D|0<#w{I;gf;IAs-Wn<}oG^%|RhuLnNJSPABxk=FYi+a>Y<tJRFVoI(
zY`v>5Ss?Zw8XoqC+wgXK-yDkV%M&9-v!Xk0V9=eb)Gsu>J<1PDq}He_3Kc`cB_zDz
zepv4f-mlba@whIiQJJL|FnMu%#8aJUc|X{C97){Orge{fyBE~O(;Xwdi05<o-DIkp
z`yGi+XEw4P*2LxI-cZQM=q~Cz6r+00P8EqLyX=(S)lZ5zM@a^HN{&5MrOE99MF9ve
zB_uP<K75)$dGJ~|BT@zMTo8%>c{3dEW{2%k&F$(En=Xf)oV@&QC_5)75x?mwXZcD5
zJ~y9IHsy`E>-AoFp+dS=qpgjM44h(KP*DHFCHgY(?v}GKuPeL4(jeiSK5McGZO&&o
z;k9fmD1Mm&uk|jsEjGGw=nLf!Ru5SuVpO&pot*E{6q<Hx7-)K<V>ZK0m%Y%wR#u;T
z(XmiJJf8cua-2SJZf;A;OYiRe#@!sNNY}7iW%j-+J4wgSUdoZ4ag>a%{zb&)u(NV5
z$ubr8eY0USH`RY#VWmR9l1{S3a`P7=o&mRK!VZ(`+1g6g*X=WY&${HUvbS0ebR0<L
zzemWN+2;ir92zNw*=O~5p%MbC_++cv<M!#4_f5akhhQrH>-H~XTy_|U^3KlAE>iUp
zH-Dq`>g^3gy!qHR;Y)lY{qOt%2B(XSnsV0kEGSt;?@!)C>5kZRnq}rcK33x{*xBE0
z#(=N5#8DeW2s%6=qkEt8C2^VJcRoR;rKc4rChY*uk(MlY=;Ovs<#onX8z@GHoANxu
zl-D&~Bpl$|Xzl*?@U^x;-VNMY2TrzeqK8Xzo9uu15kkV{^+0`)h;*t0ui5$SeI(Il
zrH)>s?x4dPIz$1V$Ej~>DqFjjvS*HIbANv&Pg)ckd!gO)KDN!z9jQto)@S!<c4eYc
zKHByZ>Q<lqY>5FlyZw2^TBzT_a`tw3s;e%$MGtL>EEbc`^GSbDtxtVj9l7y?$<Yn(
zK2toCu7>8J_(!|xJmuFXu-q+Q#b{c6UT4x4;Sb@nrN6hnKK2A9&lK*GS20q^v!ewO
z3FapYRTo@iu;6P}=w-)$)Bn2%#3gQTm71CRyun^PP)v*8^m90~e2@tj8;u`{#HbQp
zt9NEYx1sNdNJ&9&TRrb9Hhc}moQ$`69wnpj*E`>dhrr2ON;lFB*L^w|c$^Usk;%UI
z4o_R&e;;$UnkR(<qvfmfcAcZmSbFAWZ89idzGu`c))(!=|7;>uy3y{IuREa70$Zfb
zW*Qb!Fv!GK5Zlv}0}21#`#wGDxcqDJZ-1kG(=T8CLcSPyX&8mPjg552<_SVW5&Dp1
zSy<@=UOj^@zQL%=T<Gi38^`o;c}Slc+@DvGBKP>?VG|hw+&(ANQvtof$WM=t5g*tz
z++qON67;yaxcD?xqn+&ieAnT2X?%0Q(l;r^<rr9O`2F4wH2vu=G%}nF%4GjZes6ED
zPiRp~*Uq3>hC4qcabc((IxP%?#KXwybFJ@66bFM&n7ScDDu>lnUh#!nC2fYc#|`<D
z5j!PwZvo;lKdokh-Bn6giIP8AWFP>|$})8}D+zxSqmm>|T5Z!y@@UxiTynIZ_xOBn
z_UG&E<eeAz3#ALM3|QkxRSfktMUCcif*bE1>uV59i$#q_PVrOpxrU_?XA(~Na>+Ho
zL7HBAR^N-x4-ZDfQ!Y`XA?cnx%MuQ7y7P(Gt}@EFa0%+Yyq(VR(cas8YP&h+$;w13
zWxQ6JZ@-BkqWqwAJX@ym`fL}>x>7ODSa?TR)mTgR-DoA{wqm@(n(BLOa%>?AOGu>I
zz##j@OLM1%U{)I;r2ZzkbGL}Gv3ebCn^D03Uda9jDz3>V+Z6nl<ndur_lcLsYfig$
zxhqIj-eb$yX9_6EJc<6L1iJOprxx1W77B>K2OGXShvT6KWRff&2ECJy@F~1UjOq>6
zOFW-mxQvM@BZyi}MmR`fQaSAiK3YPspeSLgNg;&AQOJ+P{-CZ{eO4rNKA1Va7++&l
zfYQbGxLSPIZ!;a_j@_1sSgv#AwYGk6q%b!!Ce}+!U#NJfotU(P{IyV_e4V;C7HTvc
zPczf$YNv8=u#_8Y7EdeS<C7z!Ok2uveR_#Cid>>uxt=W=426ixZb7Phf4n!AdVjXY
z>$n%u*vLt9!nJUqSu-bB`g@LovY;w8J|^Me@o@kiKF2Ex{l6I4flIzuAntoWnN5Mg
zk`1%iT7$Txh}&R7bJ<ZT%4j$dA@8y34L39#8(#mZ_q%$r%I*M>uUej-X@){cUyaE~
zhJbgA=e@15dE48<$ZGdpcNrqPJm;fln6q@Er(pT*hKmg9=B0O|2RtJ8yz6q^;r@6A
zYW)$WAd}&fe!GMF@4lh;m)f6H)<?64K=hc@yB(gNcj*a)E!S=2V2R--J)SRLX|y9k
z{Z?5y(I1XYrI2<rA?S+^o=x)2S-lehIfL)b^R)$lAPT6SU&}3$g^YdnZW?z*>g^KA
zD*3z(7F6Wx@3+TwH+7a720CP|b?1`}CZ+pVW;~8RbGuCCu{lyXseJY@(oYOEx}hnV
z(<fMeM0a>UJuqqs(M5f{PpTi9dr7P{W@cm4ZL;60vzQ^5>2>oM(XRP2MCALzVm6+3
zbK^vc#>v@eIadM+2`N1BGoI;Q(pkvzRIU15gR0W@Q?!eBTO0XV`^i^57n4*T_2WbC
z-&%dO;C4t+V^U%ND+4fGtV`nLJ@9sBON*Tkf1>Ho=F3rNtDp~$1}3DSsA|Kp#G+Ve
zIQ<SN7KAb!FRd3jo-LlKvrv@)Nu*UT(QUMi#Qo@h%IkWDFX;2KJrG@mSOBTlup0!z
zxK?kWA+h(IyD)NVv8%Ijy;QR{e1z@ReCSqg_&r5Oy9iS*a^B=SjkxlL4{x1wscB!9
z^?Kdb>f;C>7|!zRS!*^B(`H6-S-%YCh=<#5bd2e}su)A%S7_HB?TzueQ+{(+>NNfp
z8I>xqd-{BD8G6AFF3w}~f;=uRrYL$Y@WseMrbZ`6jn-zq>T;)go1S4&)7f^d&4kEC
zR*s0<*?3|rU_dcbBhSfv&Bf?k;MMc0{8xkV*7>Q&E%A#|o_j83`id*DfAQY#N9(F6
zMUi>Gx#I;Q-mj#dlH0H?w@0)3ZAJoC-6p<o?q@yXIhUhr!|}8V8C=!IL2zaHEly|b
zcHLk-(OByAd@*EelRC@2z1xE^WEX6dl%|hYyU~RF9uF5Jc?*Ec`Mf@<7Am|R7H0Ce
zoGexvc4}4zt|!xJlr3iPd+OAgcb`azi6P*!AM^yl_dOJ`+Xu^sE;G&7M|sD3+I_rw
z6m|>Ze`uV}O2>qLIc`+H=VtgXAY))0Wv)F~+)hor<1>78{-z#kyxB9@hn&vOD_?E1
zw>fEjy;mCWJ#f8U^a`YkD0%N!G!e2!V150^SOK>Sqs4S?$GxZ9<L=MI?jR<l)eO4y
zzheZ`V-Dw~<^v~|ds99Mlp@ciaceP5+2t~B?+wS%;1LlerljZ;Dy)?*RMMHfHXHX}
zejdOGotm18CgOkkx`$w|L8+KrW0Y<E`|L!!^QE0tch{i9quzjj3BjmD_g^o7&B{`(
z^yzG^b!TU1I$stV0>Zu?4;wr6=g*wvxi)vlCXTZ?*+l2^*qw_yIxGs%GV#~2QRD5)
zYqN<qLvySSkK?@|cr!yi>{sVb=XYBX(vh<55zY$3cIWL?KeDoXN-x3XvHo~_6r7vl
z=S@(b$`{9IWyZ*HgBFm=W?3J>w~dal-I3aaa<y!c6^-&HOO4f|r0W?)F)obckDsAX
z6<w_KD499!HriW#u1)Wd%AW#IGJ?e)pF3N8wxQ6a_Y;U0Z1vvlHU!S86lE}&Dzr-q
zykKpSActw>9x>=Duf~E&rm?WFs1!5k4Le?v+04Ep6A|L#mJIUHnO*OV0oY?VQ!sWo
zQ^?QHKQlcYs0QCI5deiK1a8>kR4ft%H&dt>{4^3rbA32NWh~e95l1~wrf|PB^;dgm
ze_oQ-@Vw`sT$EoXOC{sOIia4-iTHv?uMoojz!#3DfuT(%>J<HIbfee;ymh~ykORj|
zwbpo!p)<LurAwV<%-l!<*=&d@j^gKcSxtPqIrj5C5XBVs!^+M#71_G#YVB5+^5*8p
z;dnY}LL>E2X=7uwHzAJgiK$vSFCi%jv~V%6j^CZMxvkRW3^dKAP_Y+}neXoJxg)jq
zr5d*$#q8ZEdS{;{Yq9-(UJgiVK}}Dl$RxWEh;Co+H;vRwew5k*em4PQG?|v=Q(IGm
zvHijO)vH9K{1=5-ds~|q7gVpm=+G@W1~nKF+`E@G5s@8JWyyE6F75!fde2S_$pkHS
z!hX69&)2)twP56sttOXe4KX!xE3D|J$na>pg;LLkCv|?2KPe5t(_KVJ#7@c9b9OHb
zlRPfF^>P&|s$BeVyr<J4@IyXZ?PHeHYv8OUix@X83CY&YQmtOMt*tFz(BlzDpDsIB
zI5rd1t>@WlvqCx#O{pPdcXzkVN(1C0+^5d>x7Hs#r>CdFuW0TA?It4$nZ9oyY_;B=
zjw_LnkmS0${J^^rqr$_%W!+`Qzqucj6R)qV;Mu0OyI)JNoI|FWaeaTh-j62Wou8OM
zuGzFL%7IaX=STJW!er2f!zOX#6o)oe7`VDrq|{jxho!oezZmK5O>^_s@OzBv?`AW(
zl$Wk>mRYLL{>lq6DRv={v#~+XXdeoZ&k7;mRW%=7GgEfW6kGE|yL}LkLZ+{#(Qk3P
z)*!b7c{c*RFA^Q3RnCDJ0{<zJlfm$QehRu&#U)u;Q~l<r7qf+IXqumYPP_E_<v4UA
z@%{cJ`aMKJtyE)efm1W2!|ly_>_~kSzK=Qf;Pv-oOTCrP<6|Me=bNL0Ly3MXM=VlL
zlSd?O{4TQP;aXud{jSEDczR_ta<n3nw*9S?n8VA%rF<#}O@+9&pC#hK#0aE4VYHV<
zmcX@|It;eDsxXgQ5k!+cPegGB>+wGF6*ma|4!-5&{shV|b<x*l=cXF-$1TPr23!A|
zG$QWP-<p+%M0-9J*yUWjWkgtwuzDSO&3p2xw4FNaHb;9$1qS6(t9sn$yv&?|)Y%hn
zyD}(Bl;;+!O)Tc)2L}gsohI6-h<R^7#$0L8F0&KP^35Qf$C<WP086mCx_V(ZKwTk?
zi^Zr5#LR5}_4z(v+7xT%XruETKrtXkdpnpS!^Tb&e1CCVuCw?d@b$M?QzGpB$NSS2
zGoaf4GK5y(=yz(|ALa+yZa$SmDjxO?$*|s1z1FlQlvD{Nkmcb;iKOWG_ITkw=H44D
zCP_yJ^ESdQo3)DS;soD~rckVd%UZt<m%<Pq{!d5chluoK8h>=^%fwW@+;VFc8R9Yb
zz0LZ=80fJ~{+8v{b@uiB^Q(R1M$^h`N9X!y`-k-B&G+fR@1??pC3Dj2%$Bp%P1L`K
zgUZf3-!pbVoh0^ZO<F&{2rM>Xe`H~c^ck}F?9ahb-%!W6g?9Q(7<SNR8J$>|n3-8=
zyf8aE$^l(J)VS%TR-zR;xIfQA!)emXEuGm>vyTkC@p&%3IG>vCTq&*QpMHzCw|M0>
zT*vs;?ucfk!D}zFpnd<tL)*m_YZ-{CIOnY_EII-1r_Qm5VmTUDW3G9ocUkKgWFl}^
zqA%Y+D5cryWq55a#x$O9pk97^U1{<G-?}7>r@cQJ=2myO%%rPv!yeA<<1^IkM*cit
zz~xMP@2qoYxzP~038&S;)9!I|G9Tp4!p2NR)=c2s9jt(g8g!+E6R;PUVe));y0x`s
zsh!1bx7MOws6e3mh`!$2(*s0l&~7mOc>uTteBaVOKoX##IlR3*9?jLh2Wd6glgxs5
z*wS%N2Dy89i11L`6ydW!UTpPdJCa<@5ny2YpOtG>8xQ@Y5Y`dBOkmIzG4B12xV69G
z`;G_+<Wz`9nqLc*U^w!>j1cxguc|9J6|?m<&x7p71u90<g!UDD`Cq9jwMD_e#b>|$
zmKZ+&EuofLQ_k3ylIWVArJ7l@uZzMjGzfAVq*pO?_Q(Ce*x1<n^SPiY4uNA#FE~2L
zf}lMKRlH1Sc6BAaXNC<zBS_R`qREox^nG<>hJgW7JjBHXDw)5iNU~<L!){XF)aPFv
z7nhNdiss8@OJk{=8*T2rd4j%o2o>b5PKPQbYQ-gUCF#7b8jorZk56vuyBJ-3qFM1D
zfb>mW{b;Tf8wCZ#XSBunSS$S7u4;U%ezg?$iEzB3wYHdELfUyJ9xg6nK>~F)`R(zn
z#Y`Io>O?d;RbhVVL?(NDN`visj_sI^82LK^Ul!kCV$s<SX(n~c`QVme0i5oTcBuA@
zSy;q=+Uv6bvC)Jd_y#hbgj+U3b4zT(aEtS)N{iEBTKlS0^l<#MgJAFBR4f&}JkCwi
zT**Xk%Lm%Qg{Kzp=LQ`fx6a9Cp~7q6zye6l5}FmfWuOTewc9=0<a%x}mh!RH^?bb?
zZ&mJKy1_=5+MrZ}p~)NMV_trKI-fgQ4^Wf9Q8KIUEY+F;6$7*?b|B-RkyN#+$Hnbh
zt7~q~7g?4}URR{m?cY})mItDV&H<x5{F>zK2DMwPBB7=Z2@!I!?1mnf3sooQc6ZLT
z;Q2jdP|pmPi4gIph72Nj-&kP9TVnIs6_oYe=+qjRx9E;(Fd5cv#fqI&F~x9_5fjUc
zK47VP5gIc!HLdDy;fkfy*47@)^+1SPXfmLQsm>f<+l6~@yCZ~9d+hMMh#%;)=L0H!
zy>T_MraMP_`!5X)4z{8<XUVN0Ol_|~I*&*skn_24yvp<BVCuXBPv(lSNh7d8UjF*C
z8}URtB6z9c=ChqMxA!G1Yy*BTrl~@b7{WkgD|e1~sYuQjc-K(Ot}$HB3T5>`*K_s!
zu)<(y&9iC2ck(tR%Tl95s%L6<XZ9`Kdi*aR630fsi<q(pimI{dPO$TP!KPl~k0Bim
zPZOrUz>*4DTyT*50Y3(vIwd&-)1E*eH<*a0RR^1SD8h$_4`(wQ|7Nz*>HF^c{)!DY
zJu}0`#x^I@9a(p|Js?_awNT;5N64eLi>!2sLb+SW(#@c#)TUY>X8~aGT8lH4d<whu
zBC~x-C^MP>zkenNg{62WUoX0;eog}^&VO)P8Mqps32UNW(j-4LP1zT>QwB-!^}T!S
z^0R7gZs?YjygUJyJ#j4}r7(aQ?*1eoJ_a$O2=e{ir{NsMK8`O}H-TR&lIj)%C9fMf
z9zA86eabgZJH?#(7X}7$!}iDUmSp(_Js#|<f90^@ah7FrI3GPB;z1*Sn6A)&&Xsh;
zMiy|o*bG4>lZ^g=j!NkBy8O`uRIh(#WFXb?2isz&5g41}tJ@-lB)7>@jfs5_->06y
zxl+wqEYRnL72TUnOUA|TLaO9Uvz4~wloS~qZW%l9*~6bTXm%MA8t;!z@kr5>kFYnD
zJG)6T-`Cp1G2mQImvU3G+#9a#`)ayZ{C%)|EG?%ZA`pCieIHf;tg9uBQO-!|PWe_3
zlrPRG?V}eK<`l{uZ`?SYS(@1jR#wLzw_kdrll|u5vFN|~$_ibIv=R~$zCPW4&bX^^
zhI0j?=jz%TNrzMn>FD6mdB<}U3?&@{4aJrI)OT7{^UWy2Z1n_3`gJD}l_Xyc57s~X
zfU;xdH-*DZCup`pCkKb=aolkJ>-LNdDjv7!G$yB|#{JqfL(;A*ey%`1RchVnP$Tc`
zMLFBGZG&Kzw0z^N9mi#(@$LLGgC2fJh1;_mTkTd|&6mq_`*N=11w+hZKJ-WS&8o>s
zAh9J9{K_ZmEN)x1pXE@o?37vzz}z&DkVoTjM#;XSEo~lI3Vg@I&DsJ9SMPK$lYi4|
zEco(OlyT7I_^q81zt;XVULtr{i3q7Y2cMpSelYR#P#9)UK(=l+B1gqySLXdjsYYpJ
z)tvD`4Z#njbDDDr;okOMBm$n<GHum8>wS<K^i{PnBh&8of#~{Z2lt1IEubnGNn|?T
z-*>$~(`Syfnk~x4xofjsYXNdZA|5C6jSlbA<@!>CcAh@bT%(Vos0T`25O1fA8!%IE
zi<gEzkNH4&HKNbt`kE8}l58M?q?nv#<(qI`zuaMbytuIB$_TFTo`bKHXXz>#eOHMb
zLHS=9=_RiuMoQEp2}#6ttk#%dlU%a|KR<c1R;;T3tKqBV%w$b=yn9Q3Y5R9qkM%Zp
z@I+A{BQ_mN=lA5$vx;f!&aP=Kj*QPQ{oG0>TL-1fwUoM~v!qEIk47l!1U5QtyIKlE
zbG_9YtPh|go<Q6Cx7A%8p&Ne^K9AAG-e9ESeouFGey0aw#nyD*a6&{ltk)vtT%Zxw
zgAR_}2=rVjp+wYyO=xy6^RZiPuRW;TJx&NU7!M0?mqbc$v5%4k@l-2v+wb<ioz?qL
zMw-G$t4?VMQ{~HPyHfBmf}^PKbDF43w0hRZM--Hc<JD#{jIt-K&guzV@tY?dLH8>$
zRS-wz(gf>*7L*`Zeq|t3bK0&xjB#$<oUP%NeKt1-@>HLz;5NSvD^pVr07sg9p&Bo<
zpp&^(Iaa)`c7}LePPFRGmDSW{feZ%#DA#hL4P?O=BV*&~W=AuWX;@fTJPzw5x+}IP
zFDrS}3C4KnQ;+)nl_X7U5=g#J;uWI1E|^c&5jWhZ9-Ni7HUG74jMFB$k?e;Hf2_bu
zEV-*?eTiKvIw)jfRaMDR6r>mYVs9zrw%Gd&<ngsE92|Gif^SL&NVshqnLbYzKrADl
z06FKpI9XFUJz9xhusxa5*7hs33*NXVYq|Q}A5OG85#xSykX>FMuT!D(JCNvCZ}^fy
z^7W4$3)RA&@FhYPFPyfdQ`!uJ_3M3ydU&u0$*BE>E=byi7Xw$<Q+Seq3xg(m0TvV)
zutnx|CKGCHd{j*CFKG$&gQ_Yj^bow&KzDrGRIa?c-NCi6;k4m&X)L3VG4kMyfH#Jz
zk7hD}>t8P*bF~*dPWkTXhSLwTUO6rh$A2PIblK$~DJ`vxOU!S^H!=;V6666iIa#a*
zkUlaxdOy_3-X6pbOHc2O*8q-`l(Z|A;!1eDs+{jD_Jcao7jX#*+VA(@1W$H$AVN1m
zL_2evb{{M8#g|MRl1?Ww1@8~0z&)t3v9TBDPkn;leMM>SHgudvgQ_H3N!z1;wYQSQ
zq^u;^9;nq9%AWegFh#YkbN>9V(R=lggy=Gj7n+NohvO=0*pe6)*`WQw$6&c|@PYHY
zt1)l@_3JI?fSj*Fw-Jf)2apiW7b%lTbvo{k1EDIJ>U9+eVt1!2n?xw0vGEySoe#i%
z8Uhq$RZR^CC#PA#-Um23E30C)r<miIYVK2io*6y66QEeOzZYiVcLTuH^ZtyYr>dcW
z<KwQCCjD|>1Q$yw#gn%Y2<rC@x_3JdmpMIFok+U@cn=>0`^UXo4gOa0Lh{bniwwE~
ztLG?_HCacE?3+Ekv^40O9ld!ij7srw3Z&?e#kN;NlFV?q7M$@MO&AhF@tf^3?YBw;
zR8S$U?Y*&X(1i11qWr}|PUW)HWw_m`i=g}S4ZxP2a>=X!aP3F0)|x4XqEQId`#fCu
zg@8I0r#z{TtE8@iWop{nGhgSKYze(8$(S_?lCezNS-E!ldTKXo6!U#i3~<lB^+7CS
zH%|<5gxs*<C*~(x`f;rLpS@L3lv2RyKP?c)XrAu}JwY0Dcon-zK}*qGcm@ypAqLg7
zxSXbRb_xzLr5(E|QKGpu&z6fI!0GjzE>?TrBz^76iXh~7*&jdUTL}IE2?|h>lcUS^
zRtrBVWHI13LRto2wt``S^UJ(RJ&O;WH1~#CeH2gpk;UORGQ3ann%GK!y{6qdm(?X0
zi7S1@YRkIs&4o8!eFXIS(?-Sn*eJ(kFBw@zo0~x??lW0K;u}Zh#^9$k%w2?F10L6o
zAiq73_sjcX`F9uxrw?yBwK|))XO^}6j`Bt}a>?9|r@tb(tB=IVSBFvC29Wey*PFbW
zzrc1(5iq^JrUG&ixw@!Y+`il+!u|Hd7obCqfX`KBHjz=Nm`Nz$)nq(o1_|^jRvK)M
zC$j^hqbJ~4W}4x#Hg9^urR2)i+78Mh@~RRoWk3B#|6i#K)3Doj<TiJqHFakV*seBZ
zOC_^>h8kiLdUfGxC%t;aYr+OXL$m5Bm85{TJi@?myf1LZ4}nbJjmZ#AbaPj|UV6rq
zfVY84XZiK`<uM#s$CauF3JVGm(R(XC=}(|j-Do~lqgsg6XFqt}VUOsu=P&tsr4gHy
zw&<?3QQBx*v-gXN{A97SQ0H1=W`7*(3~0DIT8=s~Ad6bA7gal=QuUvOI;J6;AI@jb
zFsT-x8u&c;++?kLH#<xiv<N|<UtDgFdyB0360_1;_BNE08={(3LP0_|o=;PdlKNBq
z%5~V~x$4h!vJOMT$S3<=gmyA7;Qi$0>FIj1I0f`r_|_Y2R<LMP@__mbh^48#u8gYz
zfn|VEZx5zK2hk=WQ_DvCCMIG<yp>=7;PBu=M9I@D7_L?%jcUPYGFz}0329~rT+7Q~
zu?M75XBFyg&qc@mU`#J?@)Z&KN<JP-MB$T=JIofLrgGxRRavjMnaomyE2eMzAXQBk
zcalP&;Vf(#+~M#P`7k)Y#-{ze+8p}4rA|W&(Qv-<+0N{J0DnAm3UfGtx7yQiMPLnm
zM=^@q;b|xBP|yKVRO5r|{cfqIg}_0PNV7xiz>D21N=IRj^-_DS=y8J>j;!XJbYGQa
zugBgNCu<#d^3pbh+I-m0)UMy~H9HR1Ph+VHYb}O6t_ki&$aKN?r&crBy#c{|(SCE*
z0_Wwry<6w!hOI8AknmVt<$aIWbDhb=9*OkYVBU-iQl|e=J3mBzrD`8<ibs4W5&fQ&
zl=OoMB0bsJV$$v|UZz`Ob%j_2?~Rs|nc4n1%GYf4#bSwQIWc2zf8Ws5Zn=qti%Uw1
zxvur|KxeJl#FXz+Nwed=4aRDPeco><!Q*Tn%x_Q~KKl(-PeH_V*AoSZo0sD+elu_t
z>g7*U1fD#|XYlJa8+5)Gk*%&LqnI!HoqiWUeScUCzyGq)rl2@cq?0eR-*9?7TO{q)
ze1EX@Dj6NZEC2~@x7HpDLn%Pwb6ODDv)xI+RpdTXP{Yt5SfoNB>wtMOS&?2Fi>_(=
zShE|#ks;u_o^Mv^NTq0xh|yS614JIJ(uPwnujDDzr!d{6?U^9WAGLWO;<3}^k%(=5
zpAHLw3NT;^V7y}`B60Kc^ZDH_HpkO>0qW`M^760xW)R!ow|e^JTfyg7aA|`YpI4wL
zMY=g!+rP*T5Yv3RB~mJ|Zq}|fgJr7u)cXX`=J&^(M(;kTpY`W(_}rv|;4t^cUn6mF
zi$k<N9VPAy=c2(<G+nK#Wx&PTt&D0vd9r9W+C3v~!r3loZDri*K1IAR($O97i(j|Y
z9e4RIK<`v&^p_%N<-Vt~sJp#nT4{7EhK5dx$7|Xxq7>c*%Uq_X*+C<b^Gs#i=(?fm
z59+rajjy$~Kivv`-C<skc5!mz^L<happ+McgtRDT&Ga@5KpJu<3H~1gN-Whe)9Jeb
z{*3JR^X2oQF+o_sJ^YdDh0#=vao0DW=X;_uz2+-_$m<ZduIHf7gsfjs03u!F)R6JE
z^m37Giq5HcL5QZkPOT{6_O(trSb>mg)yZ<k_S%qj>5*}>_o}`$L|D7lJ$FJj8~Fqd
z5m~p@gsn|dX<OuXH-}+;j0uXMJl=WHW_ThK@_WX)utr5iMdEm-<JYf4^3x_#ez;IY
zVE<JZ5W;ZK-p{v4a7Z0)hbh6qA-e_bZ6yFnvHcnhLNLoD+UeshA}R_nQu~L86m4oi
zI6q(W1c0ZIPo+~V4LlA098J6@lS$NKX+bC3bbj;e#>&!iz0K6m(!nePZ*;U+$~V^Q
zMnRwZk`qt?W)_Hr^VJM)#X#YAv+>#n3N&G)i{-J@oE+^8d{JcyhO4_XK_e@x*1hx2
zX0YLS2G6b0L#*<ZzF$YJ)OB2?O~mrle+4rrYfDw1UIB>%huxCP?eOkcDhD|Q#U+HU
zwk|+6H2~Pm@9Bg*ZTAL*6}<5@ZlK9L4`k{9p%&Ju50q;}K1q`~;v)d%gyXed$%+f6
z_2YFUk#V*Pvn_#1F{td$A~R+qea*8-dCfyFU&5D{{lM{JTAl7W0^h^*yjw#)1@-mf
z?)sG9DMW}VaWHeYb!+3Kekw3dMnU1t>J+!1RAU&Y7JRhIVnjm|J8{EwVh`@(>W1&@
zjnuP3`lbz9KrGu@qUd=J(mw@|pdXQ7gVloRbl;HKgrSVI!sYe#?d9e7%nLk+Qa2BE
zzxPs&>$2Z8ALGv!tM!l3qam(<Bnrr$fKKe;ugDeqdgMqz#n3ab9|Z8yJAlYwZlqM_
z_Gqr#p5x=kAQ!~vJ~9n8$SPva7&P=Uou4XnrInu2(prS%2`LH7pAWKRgQL`MFLr3T
z?Di&%ifotb+qb_7;Axh<RAfet3&ePKwtq)bkTSwD!@7xjTWT^m)b3agw_dO2PrL6H
z;X%2${CudAAL6zdJ&;~W9G<6F_XXB`^Xund_VE_8S>4_3p1iK-73GY*Oo)+i|MeMA
zARc8No-^YwX!Tp1=1S(ibq93bmgrzkdkaNBxdBC<ea1cfk20wH#ka?OJ2&B0VyEo2
ztzJp>_(nRb`ThPFvS4h+v`p;NnjG?P{flj0_5&m9KaI9E&4aA_ehoO|FWx^@&-_X9
z;`QqvqKlFaM5&^qGdPx>cSi*GM#+9_x4UoOY?y}AqM_r_Wxmq+W0oTD=|2wN9*?{m
zxF1b^BK;|=Sy8sqbh(+qzbvXAznf<<V{L8INzlg~*QvkK(Ar=}#Og$ChDoZ6fgg?b
z@2$dMemEY@O8@L+J_Q<OVP490@<O}X&oWAUniU|or8Q^?<~?L&%lGG)Xjs3{YdzN}
zO&cx*Q|C2{46PQry~UU-H#%(AYON}sFkj|1Y?gl{#YsWb`Wz?xs8aHahu_*uU*U(k
zQB+Vs)x7|E^zG0{ax=G6^+3Bsz~|@rM49hKM`^Pee5p{V4Azg(zmPPjDHH`V?|H;z
z*y4eb?;C;w79dbhGzo8Qkdfq_+AvqC4$UFpjYRm-#5htzKC%4qdF<I$?~;awMp7~J
zgfGjkelOB?ty6LqNf!?`G_;h{1_fud%6LxDSa)k{eyvsi`9>M{8$%rS`g*$O-K=BE
z+2;B8^(OaNDx=Z+jfr%&-~;&n+J68!s0nX!wnzUymNJykM@Cg=_90Td&}5QMf3CN-
z%+rEOa)2~Syo{b9)T_P(T9MGO$wgfDYYIc^UfAqncIaJ=40vaFGiJF~HlHren9f`;
zmEz7w<y3=<%g0i6s<PmIjf>{{@T4T1U5s1Nsnuz(fI0~d$p{CyF`edV7V5&POvw}m
zmPX;*8yQU6=l`!(6o$ig0HxP^MFX@7B)tLG8wE23e)W9^m441xUHG{1CYfvz>P=Ug
z3h)(FnUGaSSef(Up#QZjf%M4mqd%cYYWUevA}fI7?aDH;5pM%>U(Zm=x#Q+BvTLhv
z#e%~E)7;uoUFK^9zu=Qc{@ofwNPIA@BC63;1&9c*g26;JA|0Itb?|T=&z@A((AnEE
ziwfg{;<Wlwt6mZ%L{($>zt_R|7m-ba&WjOse<C*ynkMV&vJ+06i+r@4p*<I$`&C1w
za*U_Ze&m)5`WNhfRAPiGbqj@JQ@z|(W(;dz=Of28AWT^*Yk_)`>k&THxs#Cg<5wKq
zDc}B|a+<&osVZB%4CyRaqr9|`oa4oFs$62Lkmp^UsM279O<2J~9z`pvl3vFApW^eS
z3f4$wq{9WF2?RYqlO1yfOR<D8SorcJRACkp+y^bk5|wQ}`8QLNCaaDt&p#nr5Yi{4
zsxyO>inDa2Zm420&Tgp>9Lg7{svhaYGW&7?^|V0ScYU2k=&u+o?;@Av+ijz-JBq;v
zlgR{{7<oLjUUkVstZVU)IYP}=iwR1Yf3<orJy4zC)|1^6hI0P6Hy}4eFbq{8lOl0G
zk5I|9V>~i?a$`+LnEw{y9<64gIFa4<6uZ#!y*LvKi-tTx&|pF=SL7Pz8eqmNDF|sb
z@5uja7XcfAA!nYVFD%s@eqi?=h993|SCL`PpRXf?&0Qe+K|h7XxxTSPIVz{9PttCN
z%y_OOM=oCl8gFq>MrK4#ic|-;a5QXjX|BllSi5_4%G+SU;a@L6p!?msZ6cK`Q`6Fq
z5(`U3*D7UFo2K~i61EvLNoq8lYj{~^L@GQqrZ9<_hSj_P@n=k0Tn36F1nEf}wfLb=
zZTH4T;y+JOX;MP#D%;k)w)s%vML0t%22tF1U@5YfFjFvc(_5fya=%MPKA(Ul0~W6u
z7pO22vFgfiz62^RcUip_?z@2*XLB_obner6H7g-aZbIdwYpKN)8VWm08G{&KNKGmY
z3+K)Awh+j9jv2E%;HCNL##PBo#b`2K!5h=A-03`{-X|4t#bT<uFs0!ehNR-eyyyMM
zM*9iO?f|Tc{?GV?H;?lQ$?*M4g6Ju{oqwjq5d_NwFN32XCsi!`h6@%j!TU;jF0x*A
zJ;-4)A04Zus}z{?!4VUqpm^3q>Nrfd!0$2@omzGw$zYUqqv@&O@r=wvmfV4X;r%DG
zZ~{db2T$8ji{9aCP8g3mCT(uok_4pE6?jbI&v$l~kJk?_Ulz6#>BG2U_;$m+h5m05
zkY!+8zNZ^Z)Ur+j4Q*~o=pzBX5d31pvt#S0!Q*v$iqnT5zU~uBp0xbL!eL}mT$(M`
zbMO$1<avxLHov#SKT?mKlaR8M>Pt0A^)h?^;B^9)>(Gr~(Z1&@&YYg>Kr@%C9%5+X
zo?bpt3q)b;fC@dhc2_D2R(~2R!)%rC_|&=%Z7k|)$fhG9?|)bmgdfC7-4y5|Z+^30
zxeOYDqgTqHBkPk9;m=t8pxgYESEIsaaIY74M}vkIkVrt^`RS*=sN&$)vzeFe-)nNI
zWff((m_CGK)N^?YpvX`1Ic%)Nm)F(sTiAB<I`t@)RkYeUYVT)6_XK3aoU-QijWR<L
zT%~pK<*{r(f7&YGNIED8MZ&6<My4agR5;^lwKP!#2cx~BI(vNm_VMpY@*+53he(MQ
zvCI9ihF4djk@D4$?5#Zx3!_--z3!s(rfRWn@?i7;0^Ld$7*qK2;U+ECNT<)h(x$)f
z;iV}}xf5Ya^ZeIiyNRW}t&(Ihbw4dJjWcwrsS|7d@>{Js9nk*6>1;7R_X{MD5rX@7
zd|`-Gj8UA>$s|ZWIq71gl*XOGBRe+sNA~^lXN_eoVRd*%+%21p-deXY8*Ye8yvl)n
zC;Lutq+z1>J0h^JZ-HpmL3CWN`o0Kec)mq1d6h@Ij`7p7iI-77?JRzb+KnvHLdxx@
zkqWuyG@hwg@xN%)*JaMr)rS79UP?pQQ3DaA|8h9DA)<)~J{oPQR2uasDyn2%y|hIt
zxV36CeQYuzYHo7s%~r0pEwem*cq@&1<q@rFb0n&IzwB4)i?~4;oeH<|)i6}>0EvGC
z2gFM_UNCh=PAHT*K^5aNO<g7Ap~-RDvfK+SyWULft>9^?KMC<N%atkUHxNUM<BI)q
z$cM#g60Q}hE5XM0Fm-vFSta9f@#O!m7()08N)*OOW>?c71{<E~7%BhZ(nQ)FlRi@i
z{z=)`*slDe!JU_p$fBh1$PC)cI?M0*)#eb>IQ2u72!DAbq#=djoMg;ea+Ub48x`4+
zw8vj1HdV#Ot*pDrk%3u?Vk3C}u*aXcC7be_`z|B}>%=#m-I0`*xDd7U((Q>YQZm+z
zYG2_X9v6$OG?QKRg1cCG=M3xOXLB}+k0h34Ke(4=E<8v2lC-pWX0KF67^d36WAWav
z5MzI05s+bT#x>Utt9qRdCz_GYpvO9>TI4)hQ?*W;j1k}`pI#Iq!~Sy$sdZxPE{U^}
zUBBs3-K)kmj7~*|%6P^*QB76N;Iz+KtG<NvF-bxiM+5deY^t}DT*xeBBsBcA8ic~`
z3>h@_)hb`&k5=Y}+sU_&zZ(o2*wY=VqU4t5?_o7y4%6wlR%j+FFVlSb6o#8LwLJV*
zJ3HL6)(M?_I$Af|6>jzqN{FS_v+ijp-P_-4GmKRp9D3pu;E`1geVTtOcAix@9bhlD
z>B%}y#KIeo3k-)yJ6Y=wv;~IqWx}m{iO}eA=q#5Q7cW!2C0HrL#*&tr9mh-rGj;t6
zrwKo@HblZp=wD0GUqyGga<J42RL%7eKbkeduwETm$eb`VErIWJjvmjUKwBC-(s*`(
zCghF5!qm@^*FFAC5uzs!ogomvW`CzBWBF;xcHz@vgS}G&oxVbLa64zk&oSkHMHj>n
z9>NU{x%^chB&I=ewzHZ6j6V2W^3|PV-&rYRKxa&`wyJcDZDh6%EXAi^cmsOgXzo`H
zInoj~GIDuX`C%dm@~U#=;?iZq@n8InGatU=w`#R{@`|XcSe5>KZQ1Ml_LP4ZQ6{<V
zt5TN{pK(^}CSGr7D#B=Ds!?HRNFCqKh@GAD`m#<m%;ARV7)^tYzMtY;b3FPeXL!2t
zXnmUbHw6(!A)k0~C>4VD`@M>)JS_#~w!ijCiQH`|8(Ed(OMZdsup(j3;ij|XhMaah
zUb46u_K$(dFqWaXr)9N{&bLF(b2}a~GTxubt+KI6g#wz(H`1{1nzrw+8Q{^T<HK?a
zLs8^cX7AHC`&ODvx97-k$*=&%???HYYQ&C9NhA3_UA+A^JRg6Kxh>yCY>LDBhlr6%
zd*bP#R{=WezNNpe$iuwAs)RsALK(84%I|cInv(QV`1NH;@BOCATG`FMSte<JrApPo
z%)jH1?f{kc0oA6lkYTAarMdM`7o`sEYbk5BiH9?FX}GN17<g`1h*sR>A%FOEcCe|}
z7!?{M9&tX>#A(-LRRCG1VD&Q3XOTw3ZiS<1Y<s#C3e3;k-QQFEb4?6J1k!K)OrViq
zNpy08prhCl=<;(wt}kv+(^Fxfy|JK4^^F2e8W1O+oD!6k+l-Bl{<-w0A)pALp#0VU
z>lXx6NA9hbCYYxKAjn|~%Jy(zR063D3?Bj#WH2pA%?0ClTKAwpFJQPuURrv1P>Kq;
zfs_wPe2R{aPI5{LHq+VJ`8z2+eP9Um|LzeY?BUSy1e{^09P=r(iVAUWFTy`#PCK$7
z#vcU??wC7^imFudhXZ2p(9q~hpiYK>|8~$n-S52M+>>g-sMv!HfEW-7cKk^LLr{UP
zg)V2~Z$?J(Anfi8d|{NnqRDKk1voe(2o?}~s}dCorU&#t1__x$!FibP&DFW<MXmGW
z=l*jsX$cj!f9UM5l8bRr2^4*M+TZveJ}{Pqw0bt@<vr}|kpJ0X9Q5Sm4;&mW)zwov
zWYtuXC=e_Pf%iKi%pu^`5B1F`xuAl2!i!7XfX)8AN8g~7tZaRwD+XHVe-HUe+D3&9
z77W6{Gnd;7y4&l?TrwkeOz`a>Dl*bW1}+5(SepbiSIeY0d}!Z)FTjPm9t%%0u?K=D
zW;2z>ODcmKdN%XQY|eiT&+L9Xk6>7toXjmi1r9t5#&7&Xi#bWmVk}?{9I75q2a?Ut
zKLTU0Wkz8F=~8-td;j<G;y+;cW|59ngk~T^q0(l6ZXm+RV4ent=FIT-8^j?{S0s}X
z6^Tv)ZA`Zv5f@(5U@BL|pZ=Y_A4~zu_(lfJBH^QKS$B^$Rz_2#D$W&Af>eSJ#-tzq
zmLe$Rg3NuST86oDPdfQq*w{lwe|GP`*ffO+&gf6!z)`h0)H^&JjD}U9yX&q`TRF8`
zWKUx8?=f(KDPUZZNi}e4DHz2D9oCHnE+*kCiFCGSMpXkWBq5)qBg4YoUs>*M3mcyq
z#Rc5|g=&b$Bh)Pr*-`n@s8i*~6(lrtbbsPsk?yFxjZg*`CCpWk=TEs439pi7U;YiT
z33nI=j)OK-s+GL1KdOIsmbeYapx?yPb@n=sDoo&ZOZYcb=<n6P17kFw{8J`0pO?Lg
zPBj7;d(8{cY-U|c{kl6HM)c3j7zSDdM$QzQYPtRclL|l^j@4k>qb9Yh$m_2ac8<SU
zAyo~dX_>UJXOn+-GeYzC;@;%dJ8X@*_tlY%09RC;06NZ_n?~Yc&CTvWM-&*Xvq-tS
zxPXC!3yY4{WHh$1(JzquV9E<HqJV_9PpHmzjfaKh5|I1^o^lC#J^YA^6YEng)2app
zc;*E_6>Rq3q|Fbo@rB7hUV_0I_l4n}+B{h13|OFm3#JUpc9zHO5iraF@LSOi#(?<3
zZnf!?6`ii$YhNfjz)Y&ssW;l{!*IEttpd`ZOg?uoY^_|$Xv*(K05z<quHWi{7?p6)
z_i(vAG1BaGh=%|8h_9!w51er+(0#hYKP~|G!C%9#fiAq(H>T%X`xMM3pt!JEYpDnH
zNcNh96+U9|48RDJjt*`T!XIf?odtRmG(f&kK1~5_;<7S&V{_9HzerGUD0;mn6g^bH
zX?uPFByYaTAt0^qQZhlbx3^FFXoYp-a}kRJZ78i6MGQmw!+$!q6v?_^$;I5*)JhyB
zZ}aovZ*v4y9{}?*fvyNX7f2#6AatbSiAhQE*y@37D&8oN$6I_ouIwyONN+J6ONk~D
zoG;TxSK)Cwu-_SsX|&q_4Be=lEAazNe;QcYCY-eL5Ws}nzdU?h1Q?foMZwoT@|LD1
z>&2=qK)teQ4ajnonx_Cc76HG<4IsS)<{pYQD+yz{>^HlBp88*9EG>rp3B*zGxN<eT
zdOOhX8yX7zzzH+p`*>x-<<L~)<m$R_M}Wg(+y@BMz`($w2zWI*yxjj77=ot=p!(kK
zR_yHE^OE610S>UBprDV7`i7r7j>q@S%gBg$cCtdB7qD4QBw&&2iIe_0Ka{?UI?FjY
zpLKw&1$G%2mWn@M>0TcnXJllI8hplR`Vtxvg2Qf(qDR~9j8-JsROD}!lE`Fuwp2UN
z3owFY;EbtpOtZxIfHF?*t7#YEjUK>}GAZZu9Zcl{-|GM*b^Tl2{gVK*tC-FM=`sL#
zD>5OUR-4;bDS&aXoX(T3H65drO9H`G7eRUkH1eCUqPnAuX%I~^;Smvmalpn_7_@r;
z;wI5xr26V=KX_JIS=o$v-3DveM!ffj?P$OXP|(nJD-A%)MFm8=$^Mg;7S0U_pgyl{
zY}6e0*Ov;Uhf(Tqy)&U%<>z+lByRg)f^_=!eBKF=iU8sSCIaTLA^<C|!3ARZ6F4>_
zpk~jr!1YpS+5>@w#uFpAkDmcJ-zEb;-8Z@60BGdR4%}LP_p2{IqUba$$ghssF2uJw
z1ju`w5%gw+h%oT*jt>uE7gV0_&owI=09ngN%UO_p5<WhBm)O|YY#8w&9y_n}{eQgx
z&<hHnp<8b;L%Ha4bD#|H|KAZlfDOmez<8)Xv}j!1ZB=zX?%`EoZ`L4`A?(I5Z~A;I
z2E&`k;14*i#bVG&<M&J`y$!>p^A`rSgPR64U=aJUe@x-0U;%W;ulFZhot=X+s}O0#
ze8&37dp^dJPT^1krckr8wMA;g*!o4fngx-LkBch<K(reTHGlJW5L48)pl)adr07s@
zOeyN&W(|ts{AL|n2?xu*Sk1tKQ@Uo|7A_QsA-2s158x0<MBr?loFKH?lMywD>vIGJ
z2IdtMq$DT%nLKSr3j$)ASZUwuy+~513eU~EPUCw(m$c!1Phh<Y&|<&>0qj_-w*r{O
z_N=mHu)Mhvb<fwQkB(yy)RmNQ0z$xnN=r*i(r@Ae+a0n7hA2XG=D2BSVENFwKv24}
z>=@|jyP}kKdW2c=E-x>${7N+|k-(Blor}zVMSM_#V1x#a*WUTLA~08;WNyGMob$D0
zLu4cN`RS=A6$~0DkLjkX>Q8urP$Kql;DBzLOzyb%(K+s9c)nV8w4P|WmMDhgGq^b)
zksnAt9q#4j)VdP%_oCQ&K22xTZ|Rx<CSPc&{9&{1(hvxFT+h-H60iseUV%BX3LL;!
zn|3P~A-gSXY{sn5R~nHSlafX#`}KWy{q5xo7UdNcHOC|4d#wW$M;t+PmH=rcz^8S8
zI#_Gvgwfp1Rky`hry2a5F~3EMR)Go(|3PUw14n41=_^_73E-}fsJnE9fIL5SFq8I+
z^--c10lz!I#(CTvfU@E}S=!mzEq(|8BY#?Ee#_9Cq@9FJ88oXDeoe4m=yH@pCXM0l
zN@1xtLv%c!P5Lq=aEv5sA0&L5R<i9-Z;1I=7y$S%GUqHNnGb-m07kYtA2$H=YJML9
zxuw*x`XE5N{2AMF0j<>qo(e!U>q-`1p<MDbpalVBCsm3c;Q`E3|2hZB;ZF+B2XSGs
zP(I@Gqh>iiSqot1QL(Y_0sWEF!Q|G8U8nlEzeIq)zfo^rUmkGRQG4@>d73c)s(Oc{
zW=r3<M>91w3}KW!Bd|ot&LJ9|I_j8>ofJ;H4CP|OE9aXX7Z(@Fop1UtJ45IPMz@BA
zxWYdwA;`{$D1v;lO9O?L%Hkcobun#p+Re8uQ?@ff|G)zEf@DL1c+UWH1{~W@l^m~i
zV1V(5SMd0-e?hWqUi?j9-el`Ks-mG;K><1drW$2h09tji!%S=eUTaUl2B_qXmAbH!
z*ez6M3gm&rxyuZP^$Sd0&lm593sA<k1V()iAUgK-iPif9uon^<>Zd0uDe3C!deDr4
zJok;K+t>yW&6<w`Lug&MC`pZCn&v4`CePOsf&rg$aIQx|7UD2z{~uj%9hOzswfzFp
z-5@ClNH-$g(%l!0(kUU`9STTEcc(N6Tu66!qqIl~NV6yR{rG(Ex8J=vu7khOb*;JP
z9CNI3{>C{q{B78FnKo)ZJ@xFH;qUI?d8!W=sEV!~=}4O#8w-l24E>^P@P3OXPR2n$
z-;o$aR^_~Kn5)c)iBSe^ZO_WV4yL80g@a?XUV|hS8yLm$XES6CmhLnWi?%RuwWM32
zfsvPXgA|V9*Ui1c&K?2u*SO^s{3mGsi^B9<bMcZ349Ks~U3f`}aaWdygwT;bv9}$S
z5h1#FYkitz(PQkFr)R&Gc)7XHR@=M=Bf>Dr18+_W<PxbvpG2#G#y+r>cV&1rai(#+
z=`D~?#&32+sdw6vo6YIWra;0V=@t}xvW(Jnae8{1yJeLBaDRj4LN`4y>=6_t5?~|j
z3>(G)Vr`S8y8OdVmfyPNhUd>;OO0SRFsp27f`Hxvf~Ib;(+v0b`wxxBJ(vFeObDI<
zzM}y5Or)Fsip292jfmAh&FAEM&+xE9vB^ZPl<~XAo)QjXJ7uMmuY9#*mzr`14=w@>
z)%h>zM6P_ie(84QYY`%%VEXO;DS&r`cu%gP`qZPY?=bxlGHA`4bR!?Suuj1x*lF7r
z-Hg}%6~p3cqm$@;e!w_kV3uX>TZ|rDtdUa#g|gvDL=pbV65;KQdSX5ROHI-AGSEKC
z)r!ecMASMGavqroHayU9*!2F_A}lPdLS$H2AGkNr5A`JUbsV)6K2wvW-OB9j?Bt|c
zqg&)NnVcffLl2(p6iKL1GYQz?vpc|wAwB`6!&3yD`FOOPV}Xvs*`#x#4<k{=ih)(a
zzAY}=(SF$_AIwrHMt<J%lcih8wDO!(S;t>{L?57X9AO&za{KAEU9CxUg!tA@nd0rU
zklnpK`S>{*mUd~{rpY@nVmTz#&(^Sf`OnF4#yqc>RB2Kfk4>@O6E-OchkJpeuN(CJ
z=Yw7R+IKlIizdM<K-biKaaR8>S*U)j*}Mm=AoGit3Ws4ocnyyPNl)h2N}FnT<_)8{
z6fDfzmYq&#F4R#dyUOKTJU{-_wF1zSUxV$RvJ4BoJAoyOm5njpOo9`}CHF1-G_}fn
zY%!vJD;Rzo@yrQ(V@d2b(ARPTGMBM*zC0D^p#M%ssc$nRCRqZ6bJXWXr7x60fYmc1
z0dWKSnIAj<&vTL013cNfqZ|1kU-=IaRs3J7<PET(7}8m+@hqWnDXB?73d;Q48Ei&V
z)M@`Z(l)`|T0`Gkw7-iltwKLa1^@j0T7kvT!<$Zuk+o}=0i}o%2IT2^UP?BMOP)gm
z?05vYCAS|OUr}k}yK*Vn<_TS{;uhnY+^o<=sy-Ovx?ix?*%)*d=pSi))EpH3-skM*
z5PkRjUP2}$;1@k!yny<HubWImOXvf%h;n$<Sa-VldOBd;cP*oVaW}FYa-6<lNqOJ!
zv>hvn6_biLOX8iHWe3|8QLgvZDezf9+A-OmE*adjva$kQ=IX<mkK^$8>FWFmL)5-Q
zb=Qg+tu@Px6f=oI81vi{hQD^^Bj3kNvx+DIivo)S)+wgVUUl)%(`31*k5!Fcb@Jpf
zO^ssGq%oLn=i*7kY3pAPW#aY;7AcJwIXD<*a&rENAmIj4GwYL4@$$UP`BUJhU{`MV
zOVHWvdVgGiP0m|gx>+gq>z69w_QiMG`{M|>TvicUuGaTwEM&xSd@T<tpVR6^8t^f3
zA<dk&CXjO5lju*s_Vr#ZeRZ>Dj!X6T6j}ReG2WsQTT(6gvt@?v50d(|@kkDi@+}D1
z!O`GFoOQL`N3YG(b;Lyl3Mj<CWsgt1o5<_pMXo)a(Bnkx;RCyaK>|OwW4VJeQOBUY
z=;691nu-FNLbaX6M3b&cZ<N^V0h5}(MoD2m3CotZX`b1>CXJTy`^VHyB80w#B@l{f
zHruAzWQ<6}Fs%wDm7;UP=!<KkDy%+-z^$8;+q-oeW&TWviBZnmx;3Qn#%$k|C-#1C
zQPjH&^KHb9cR|z9H;a$%n^+8c@0!cxT3&uqq(F>WtoKdy|G}$H{liuT=C7iqHa-rL
z5J!|ZLPCbVfvh4ef^RFE^9;Ta)(@Urou~gWk#b4eZ_-2A9XwE17}#QstGYlJQ5;s(
zwTYFX<s+qIKA+;&`I=o;5y|KEaSyhN_aOr+v~@K1b#(UnN`RjWjm&sNP1$$t{`=A0
z1%Z6a%W_D&U)qk}p{gCnS1O?V{C$lF>5_~SZ}YaqcR^W`))hCLO|u;|KVCh7l{b=e
z!_x;AUq18AcaG7syKedOmDe-wq!Mgc><Uqu^InV;-9XD@+)pEs0}5kaQuve)d@esb
zC?KzpYkEr=(e}Y^!BlnCVG7SoxovE4xK+S;1cV3Un{&UNZ-IxNc6NDNc*Kp($6XEg
zTz^XwA;g+UP3)M#N~jUuuiTv55b{{I@GLP1$WHnnHkMf;SN5k6AuR*}AN=EaGi)?H
zo3|vjJn7;!^R4+Jn)mu@-5iv48R~10o3Hef25%%`%W{=ymu4PZ?(f^OW?N?eoa%bf
z58fDnFc|?uACd2pTv*kRB|K%;;#JhUcM?(cK9d$-vs6N&zv9fGPujUrpS-=;`(ak)
zAuMmMV(XL`68&(@cX|3eB4zIf!qVSj0EpQV;-~_k#nAValhAEImPydJ{&NF2os&Ts
zxf8OfJehM;EWZ_(hMx-KW9#*taUgn+%#Cro)jUpCabwH#k|*IXsScN4T>h9JVd}SY
z9LD62;e2>V-Gr>gBj<r80HKFDrW5t~__ao_D&e<>mUE^<Y(09jq0Ck9+N>2Q@qbXd
z|MnYtqP$jl>f=^L=_%p4(wwI-Ji>~Vg0$FVTSfS9hycIy$Hl;gXp>*^;>@oh178PD
zX}R^KHOH<j73Tg;*PN(hpg!|T0m?+g<}q<e!P8oqM3NK+D>_1RNp#(m6b6%tb(Wwi
z`R;f!3XDuHddCsw<Cc-Ad5$qM^K2{rJ?H$8+BPTCjW^m6hc!kEh=N~nj7r4K{QQil
zLkU?HMf`lT9_v)S(&zi<RR#h@Jm`<LLhL*#V`Wx&hM}gNP9E&VmITt<GhHuaL7hR#
z@A_q*rYH4T=$`ZOd>>%q=NhtDF`2Jt*phSUnd}K*k}toeJ(VgdkL1HM*m&A+r#UUl
z5|T@A?)q2G2Hk}b4Vu|#!b&`h_;!%zo7=T$KE444V_$@Rj*=D-{&t^$vhk8zG*Hc#
zyq5Yq5kd8YHQx!^$ez|=Y}+7k=H=wB0HVq~ERqga;YGR0VFn3aYD3lL=$j4d5VVgW
z{f@eSFUXMZD9{mN^NhP6LSe>K&&{^jL?YIXdn)?9u%JM$pz!I_y~l^aL6_|u$_kO8
zxp>q|dn1lB^^s2t5-mF`QN~dvuuW)ay7eHCf9s6?|Eu=5S<W(C5P*{(EA}&PNKs!u
zx}=2faY;v`b8$t@&;Q?rLQAivkNQ|N(!C&yyrc<Zx_7edT0KHR_ttK068QID?WX5M
z5&q9QX5c57Z3<-aJI+{80edmH)8<cakk6qwb$`#cyfXBdTXkFd+b@hArF0noQ@D-B
zRuyW-)*v^=#2|};BWA#t^!mNZKRJeviH3%Pad&WN81VSyUyJTd5{UR=qGDkY7{dSi
z@WsP2^_l3@Y(AV*(C0S5xODFHpZY-L6coTy(3!-GKe}sTWuXhOjBim=8jXwFkQ78g
zIRV{bnVI#RTwDceR!L-!&ux=Pt)!&BzM`VSCj>R~X!R;AEDSr&__08AYBm9Vu@lDW
z=4vWWXH7Ey=Isti{51|dL$%<o-S4517sS8homstDZ=h;YSYWc|GT}=#e@(8hbp{RO
zpgrp`Y|Hq@B_*MvzGP*kd$!Ip@#NofHGb&+K=V4_VfTaljqC+}tyZ?bN#q2H$urf}
zBSU+k0V0zosV|rsh9ZA!0hXzl$n5jnK41uG9{wq0=U1Cj*Vm|>dpc)p_y!2N`+ZO9
zmi(@fCrAs3816t~46yKoe|}s}y(G$rW2g=vmB{{EYvnNCboOWXsGy0VU|}Az`WvJ9
zmm=uV&Ci!(8QGA6mms}t=6a1Pr3%jhr<V7fI;#z({rd7-RodDS6n)K5mvQXUg7&|=
zl1z@IFnlWA0m&-?16qOo9zFMghWW_iVtplAnUjMp-nt|oD!%3BI;W(Tm)oVW+o_qQ
zaguoVGLUl^_(t)vf^pjjNxfWav{Y&F+PlJL>nTCORHo?aw!dFitliUT8zyR^V^G(-
zomD%-`e`KUsXEG3;HSFnV?@jT*AS_pFJ3+3GgTLokehdS-_G}SWsEbpjhX_wnXOG9
zR}J`FS*t?e<*N}#37m!<C^iP4b`*Lh7RVZgn?PJbD<_kypJtMz$U%7Z(1Ed2XN*Gn
z-H_`W(W%gx*;Xp<s`asGLJgT4svQ3Rh+?sw(ff?!tt6idYhU#W*-Vvr!;;;zN!PIM
zW_yKf{mk>7nG$6iq|K{l=oUv5`AtZaL^nNG5Ry1StH7n&gimx1`=9g+JaZwE7%@}w
z1BIzn;p$nneOUCxMD~rkkcHE$(g_~%STfFZ&_<9w^On8rIn%AsKDCX<o8RO21n+d{
zwf~OM1Z=|&3{#12y;T_}y*-8kJaI!{XWf9A0eozLOH~rP!A#X6vEggPs2ZrQklO02
z58RMsR32}GR9<m(ejkcXEW&?B3A`AiGk9^1{NkF7Mx^71e2ZkKrs0IbM;*U+;qvvU
zu^jz9><wQUl-q;uJ4;wXV0fdwDJ_AvG@+J6s2?pK`tum&Z&6%LCe~3|c8j&Uiq?{2
zb|smBye{XXmi9SQ{(^o8^JTO2vg<n{?LVp>(yGplqApVd)DW)Loan*7Zh7sP`PPLM
z*Pks|<CC^Ca20~RT7zv)9Vn=^j*&S?UDct>7gg2?3f@2YsTW172O$BF<geu&oRY@G
za=QO{=3-58SOJA*SOv7fzjE4dNj@KAhHbNrsu#gY?3wtu#Eo+K))NvH`X+W-CGq6y
zZqcwb@%bDWHLyi({4z?d@T6*_(ZD-vlBXhxkOcj|d|qBiHa2=-VgDO9Kq?&(@$SnP
zj(~t8OUR#g^8X=%(F0GtVM3#oTk!;3?0jeffnL!4j-2w3WMY-OZ8<dpjA8!E6v8R$
z5jB6Une<@fdcS|2^$yu{HDSu+-I63bnfw<bHA;5@k1p@hIa9AwAZJKLMX3&c)IM=?
zPClyKpNwP*3X_tw3JbS;qQ2hTK#|eVsJ{Ob9X8QSV>8pMe7ChfHWa?fdZKXF5QySH
z3*l(JoU5P`+om^y8ObP8yu)Rs)M4_zVAIZhb))@U^(G>h&&?eVLGzCpJ)|zU%tn<m
zOZuPngX^yY`i??A{Qs(N{qWU;obrOGnml-KKZo!c1C8&qi~_yvM|Z+viBpS~DtgOr
zIDyedGj7H6czmZRJcfk<QVY=ZkuUtk!CgVLxxb7s+;sCWfw^Fe^v{Y2;Qu!~96cNz
zjlUptlW@TH-uHta;=j_~KYASw40+90udCtV@?*!GL)d>d#MdF1Ld{zF`#(yZx1ZEL
zpX<o(1c7~IWSCPlv#6*b|E;+hgQoZw+jrt$cub<hwLc%Y?jGKiZqa)ir>d7T;)Y<}
z71Sde3u`K%O%0Gh7wTDUs9Bz=QRgTqD6IEJf2eo0wzdYwS6b$T8=a0uFE8_oH3rbg
zpMVj{qh>$0n<;gDPAwiXOx^X5QiqH)6OZ<-yL<4HP?!W_T3U(#|11A9ML9XZ>BEeD
zxRa3_SQq@f%$%)CjR}DUEa!q4<}%)KRqTr*o!db*+G<uWX|4WaFvOCiJ$`R*FWXl!
zUrj*ot3nDxx@`CQ=H~yW9C;k$|KWpyt!>?`%)fgq-UirXY0~*@ui^B0yu7{!2M142
zb9Z7@l-F3Mw0!qq_->_{VWlI<D^^C<>SVIbH=xg!lxlghukF=(%~b}kMa});dGPGw
z$M+lZl3ADmMyQGODNoX4jV&A;-n;=+-RM8^rqxZ}Bc^wnQCFwo<t6=psg5$2_+h2x
zU#hD?msjM64<p0hDb!0fAQyw5pqA8-IaJj|QzjgPPta$La9YaPdvT|4$E`=EBCRUF
ztDdV_b*_f4%SkrKhO69Ydr1j?Gk)mgon2g91jUcHc;BnPd{LAYn}Pw!#V(9A(f>>D
zWFLdw*4^OqlB-ThNomV4@b+#^wT96|-;1>|F}J7Yp$cU0Jg*`~XN>ras#yjvlmvI^
z0fE@+>&rPscBt9nNJjb7NKOa&@iYcUY2wuSHD6qPO5ALw*Hmy)qRBv5)ARE3dUfUD
zX0tXtOqLZ7(iPKS(H(Syy4e3Y`Zbh6`BG2tOwFtkfy0kr@~2$-9cm>^%nMmr*;v}C
zUbyqTiG3qe6_nw2Pc9A~9v&_p7R^>k7X<~$xB2EA_F`qXX<DcjUhJQaOQ4b#8X0fI
zHb?|o=ApTypu8ocq=ZQMN*e|(ej214|9tT2@|)A5360f@a3i{hHAwJ?iexx=x!4TL
z=@Vd3ifZ8Nut9x4FBrq&Zc=~1%4+XePEPJU=qZ#X#3e}uKVD?H(^dVmS2l!J50T27
zi#zh>LNqx)vJz{>V7gGk9GsG3VQ>F?wb$H)-%R82fMXu#&*;$%0$UrKC)Ygu{IBb-
zHErZi2K`QpT~i5jMQSbi8Tm=l_4G(d3j+0B86V6if=g`zf1@d=?yJhfvj}Q7-7%F5
zSE!~^!g+^*^1XZHzxM-VizX921c(HYPO2XL2l4_I7G^SXGE>tx;jjag9O-iv;oh0*
zwzlPYLC=?s)&-ui@@l3*%;h&Z-qg=9ukOvvQX@ggtiHerCj(ottCGKP%O+FE4-T2q
z7I8+Nf#G5DSJoCbX`j-|lm851Rh(ScoFiLD5tjKzEF&q&D!#9-#mhCnqP$A0C94a6
zgMGYiBwUt6NaNo8bJ{SPH;6aV9Pjq&)2G0jz;@&B(0CKbY+3u;ak4(g-Q>fUnvjDa
z+j1||X}*4|a>W@p_n82#V(i<5Rf*L?X*8|+6>rw{j1!HmwTl1smbmnWd^d{8lO?F6
zZ;WUIgt$Wezj`~W@UXLgeKd5$;H?gYt-X1rAa$zu$ZnBugsoyZH<vnBlCtPozeOtH
z{ql3MU8{#lTWCm>#l|=U4__sLgG~&ixBtu(nN?~^xC+H5Ojh&@4|H_6i6>*+6;;6#
z*}#{DC6$}DH(KdUX5tXn3zjJ0ir}2tTb?k`{s#Fd`FIgZH~RA8ywthO=m~?4$pu^1
zMp>I8q=@<N?u*L8=j?Cwn&90}dfzyOT{5xasydh$`}=ZT0bct>(3{a}<je7TNXck#
z$a6?^fKqcNzZ{ZSz-&>&ex4=~$MI{W&yT6To>q|Ol)sIi&dKE2JC<iye-jn)j{w+x
zN&b1;Texbn+*ql`m9t=p%NI<Um-lzd@u3*dtXClPZXOl*C9rB*A0z;#o#7Tih)Ems
z@{)mrK{d|Q!D457|9XFf)Rew%84g<?E$d@J_t=f*%A3OGQ*LFvp?xzNbMpk-i<iGY
zsni`<e81_a>)-9yw3r%%4u;3<*lJ{2T3PAlLC$wS@6I_G4rP`zDZ5m=!2r|Ob^7io
zLJ+Mu4CK(taQ}Yk&HxRe0Qo0V<rm~ce4NVBetOe0u6@0VtV&8kh#1}*Kb|naQi>d|
z)?Hn$`mBAp7p7s3E_)`k^;<dygMw#&u_7(9yJ5}y_fm|Arp<KhZp^oBzNy8~t;yl1
zc%{A`r}Hk)%&bkVkJbe%gCu^C(AAYBeC|?KAJqRudn5a)HV`Y_yWalILHv#_fyEIK
zgWB7@qbSl@huHK_rf=-Xv5DC&?w3KIlBm{>5-`F%oXS&HZjgA>=of}X{{FD@3UCLV
ze^|qhPsWN3|E8WBfj{^<Za*nE^<xV{n&b-PEHKHFQa`&KtVF3oVQgJ?SI}^&(BNe5
z^BydB(j)7J6AGR6@N;~nl<r)~XDY5QwkEtB=!E>n+|Tf7<D%?Selyos(+j*+iT{w6
zucf8W!%y&TvDwbc++1siV&x}~z0OyYwxBR92c5P`HK}&xupRm$g;cf0wz^k0$?^nv
zc54b$+m6DhmH?Fi1OQXf=d?604-XECcJN|X(JSg=V`EcACYQu4i!Kd35J6jdziYY{
zvk}TfhX4?rQI<s?GuRLWa?ev#0!DW$mAxqaO|V$J6M;!6I!6v~Bcma$?icT?H(nQy
zhMJ2|XzCQ{?Ui#Q?A@IaG}QmpYzWujDX-J?f<zdl5%i1Gz@(|Yy@KglrqF{yqy1*%
z+ST$`zr*7=$V^$I-TBBbG$JDr-x{X@T<lc^;>+|XzcjC-)5Nejhg(jc7QQ+4s8=~5
zC|o_!Yl5m!d*>V7nKH8LJ=Z%cG!gHIKV?V0MKyCUNaykcJk<w9LCM;Cl|s#kB5p^E
zEKE!`oe8qWx1GLDPN&;;dLOd{C+M{WCde1vUcKM#A7Pp+QqD+nCUXI1w^)Zl$F~zx
zWkhUPPq}s83szS0R;|?4)h&OqyE!EP+PsF0^B{!pR3z5;9Wn2J;~?MkSu%j>f|dHY
z>-zp|1sd!Q5G%bd4&q-Z142bQhC&hj+vY%gb1CRnCLv>)2m*49r<a$65Rf%5e*e~M
zb^lUQ!T^>D!}{)QJm5=CTGPuwt2*!!_=je{3Y3h}Vb4aVL!~Xx6g>TUWZ3R|xAK`|
zFy5VjhK3H4gy;19t6R24gc9fnEj|jvTxoUg3w}EF>z8d~)mq0Zh*nY(XcA#lEuZ(t
z>B_pfWKI!qxGh%2=GyB^$ylnVT&@y{V;ijB9)k`hF>sylWLb=5%>j$*tU@J%<(ij2
zk}WZT@#BY=L?ymdRGvpHHoVE7GG}h*%DI@1w)vY_X!`X1ZcRbubM4{Ma=NbH3(L%&
zJr3VyHL`57)X)%%LO4MLp6Smszcdktn^E#%B_LhvaoY&{ZFB;2$&bV@TcsNhV|5x7
z7F^3_K?6<Rk^eoDR^{!x-eLZF8|l{#iiDYeYXMRpD45js<&*C?ELN+QrP*vRxKx)d
zvJpam62Ex{c#1~XpISgjbi@jm0dl%FFokvW2jc(P5F6BGe>!4U5jdGjM-z*k`aj$q
z`2oE$OUUc}Q$EK!02@GR%`w1ZP=&Mqz@pbM{Owx+6HLuBW1x+7TaH(}c-T&Jkn3Ln
zoJ)y%(dWlDJ5bb#g;NsS8z6`g`yNUcs)guM`GT3q3G?D&{cLbnjXK}F-g<qIV*bk$
z!)n!)GDaHl*}iOLDKc^o#udOoq!o?fSDF1LV&BU)e(`~n*J2_!NIGV<#qG#%s*sPL
zzu}>fCm!wP(QSdep}W_ZQO*2R*PE#eKT07Fr)$ueO~f`^s+z%<=~-_Rb8B*2;pIkk
zlHB||6oY~~Q7)uSk>v`tr<dBpV|Ea?%9n~^hHdvwnY8mF9gW{@)>Q|o?*fBf+^qLS
zudp}H?_-bQ9~PVs+QQU}(~GGEYF7?pjGDJb(8>Pcp2<$r(bhEzA>TTyp~4%i!?{WW
zQrtB^_q77)MyU4PkB7mB?tve|?ZWjoGo$_e$LGHhuon9Ic783nksXB~EAlQoB7FKI
zL-PrAW0L{6=WK84f1*XznoD)SsnGB4d~Ui#T};RK_VNo*XJaRU3GH*~kF7p8?}2Xf
z=tYWuxw`t*4Xds)_Y<Y><p!Xts=-`}1g;kmvM%r5fey(ofH`z5sE`t2oPwV2JW65j
zSI*lCZJy_!y91se1=c^hbvU}^h;O-H%H7@m9(y*OgYP{XdkX#*G#3W>yCppEq4C)k
zMgS?5p)}*A9m(??CXHg4m#^?!y{|a&O)4b`OrGr>EjQy~V><#*3SjyHra?6EZuWZn
zssr?{*K-U05j5)M^6h>m)C@Or|MZZ8^Nwrkv2*bcxCU@dc(i#;nUtv;h=0)~0uSyj
z2(uahQVP`YqVoVA$bJ#FI@#MB3L@{O5JJHVZBKMuEZw?*3S+YxA+=PTz&qeet=Wbc
z|Ah3;^8#OI<U7I84Hjvkd&N>siY%K^LwSAT`T0^KU_(&-E-&A?vMCp?WRGQ~oLvS7
z1G%@FHf3eJnw?&1GqWh8;#W+3(Qp<Isi9EI`+%|GHVuZ=HxmPwnyj%s6%Tdv5~+n&
zmAEKlcWae*$+G#Ilx_0KNh6t=mgi^sY0}9Vq|-rXo3XLSVOYq0s;{M__z2$7=s(X#
zxxzlC5@N|%_;YfOz|dpc*V7B!8r?3~Y8z~qHS#<$kdVA)zf0cvMj_uMV?kt8?qLb(
zZ(IEy?j!JCtfwMY=7v|!FD&%*^x$}8!F}hVrZyeV7JG&u#^2e4txxbRaSE8_{5e?o
zv9STmOTG>#e<hCL1W=hld<(<_v9WqEXR4pSj-hDtzH({`RwJVb-v9<vK}HiG=mH{x
zLeM=n<;vX5YzA~~gSn>onH@H`@^nM9RAXRq@fw7V!HDbtFj<Jn$ytu8Q|Qt&G6;A&
zddTv!HY}qESz5q00Aw``a(?{D4bF+lN!%L9BYQ;!*efhcrdO}rfiVL}2A`X6bcUFi
zm>d%cIjjnLc_sQiHzs<_38MR8Um7c8T3(C+bjqAxc^3u<l_E}?{ZF~fhf{gb(BB>_
ze<p5f1D@-SO+kEb`>|iigVuag%s1P^DFCgZ;4(+g*Dg^*kORp`Y->^W*`}NlT^^=;
zlAU?JEQN5g_N;$iTUW--pI)U*^rfHL_rDG_B<bi7%IWU*N0y|Ov*_OsB{7U3tJ=sj
zvB!eK3Vttxr7_qxsnJQB$w`PP`wlvL2kUK!*`n@PED3a(S=mMivQsN(?lzM{>T*9F
z5L9nIS!XcEWY5_wN;x&C=e!Q0)aF@j7p6!oD=zTVxbQ#qWiu-vCKcInuYJBw*Ewn@
z;C**{xB_+C?cZ3|o1->kj`?UN5}(^I?TViK3h-sYzn`?z>M!_f1YuC)j+Y5}UBGXl
zBn$r+FT==$k@*IqI_}l^)61;&adB!Hxnu1dEbvx+es%`$(d_r&yJZbB8@;^O7{?l2
zU0o5kF$j_DWzGJYUjaM=cukz<@Csm2p$`e@e2W@*AB^^@KB!!)g2cr+E-r4Eb=M?z
zcKD?ZUbYtk#mfzZTMTv+;~xO*%pTUOvwU}PumFfML`1|+;5cI=8C3ow1avsSW=y67
zFWs@Mqy2qU5ff6i@Y~b~+2B#hI7@Wm{1@8hV1b8WQEHuyfv*mJD=8^Gv&>NrvfEAn
z=6ruXXY}L84=^QHfip0$S{7}IiNRXt4HifQ8%-$YF)-h*hTS`6L--?w2DoghM-naA
zTwT_i*xR%k+sVN6Baz8a;*XsN-0~G`%`!&DGQ;|PG)jj67Lh*}5fLBmoX_{S9&Vph
zL1)XayjEJqsHjrIidW8Q7pJREJv4cpTs5HO75x-M%yS)9IdSVRhqf@JIBV@OC{qjv
zYC0*W^!IsGNN<N7AHH<~KTS`~6OCyLd;2dYBdLhzKk;URK223PH-d}-<KDhsq)a<Q
z*m<$DQ*EWtT!4+b{SCK+pdYKAWhNY}86e`;C*heDj~zCWpz{NbR8&-1B7XP4Iq_hj
z*6;R2x;RqSFYj#HMx}bNoynH#N%RIk${>J12pYW3_YurQe6I8L`DAA2s*JeyiJCwR
zq%H$b6hM%ApPuMvF(k2IAR~`!fEUIbM1xG(QBS8Qi0C>@JL5SLz{wojcm9^0$PY#z
zGZ4`{=>Sd{F*TIgQG76og%l4D00A8KpP61X37S@>A8Zj9UC%&Y%)y^oTUydjiGY;h
z2JH4?Vqyw}w(R@K{SKG_G68rZfkq{;Q<miPIUN&uu(h`zbs2Jefpc~>kth8PK9oYI
z-3jSY1$hMMP@-}Ps2!l;=(7=ZXJ>gYlv&g7Y=GZH$7qJ|yWHCNDXAHb6hT4X3vNN`
z?|;^|`RA9?Qd37W`F`I{yh(_B&Z2W&ise?w7o26TYcS2G_{v8$^3%#C3<jC=&w;3i
z5f7+u*xHfbDy0C&_Le;GAf6qq+-|riXEADW*|;3|@l&f}Z>mfixKdirm9}}@^-kBF
zJ@5PIME>-c@2oaWPZbn+OQ!RckAxk$0zHm#<CL)wdwPc9vCSX0F|ID94kruHZkK_f
z5fdM<zx_2`62I-t>At(%%%!1LWhm4%zCp5JV`Ww1JtV@wFu-qN{iogMM)VrD8AeO5
zHGu&+Su1h{6d$&hb!a=>+8j6FHV`)H^<x8Kz8#4F(Jqi9IF>cO0nBeMrry&T5z)k;
z;GcqMXlT?>MVRj%Afa9l>u}u!2HBwW`#R<{aca#eTICK`;%u|r@qBEsO<zlkaM>|<
z^;611*)j_o$lli0C~?77i}mnY(DxP?a(q+H5;ohH1au~4H1vhGf^JTP4%2611;ii;
zCOzK>qNdG}{(c&M4(HJ-(2OqRyc_$c?Z!^ehs*YWxIT>K1Sa{1L_4J>c=?g$wQu)5
ztuvc4SNFS*&^k#+n9gPOK`A;JQqyX^HbYZeijVP5QhfQb{pRwng`Dya<p<BpS4@1g
z#;1(Xliwl+!hKp_Y#$mCe#d0-bC}MD5ACoXE?+n(C`?zYcA2f2v$811ON3#Cg@mkr
zb-ft~>ie}=*Y@srXeX@USNmVtuumKeparU*w%zd#)S%h(P)T9y!}V`LiO$ETr$7UQ
zx6pLQh}o=0l|cYT!o`|pNv4f}H+014wmkxXwro5dNTr<Ky@O5DsC`C8!1W=iAHzh7
zu<09s6(Q+eVDH<2d^m<{FU!gTu=!L1-bQDfERpX#_R-;CrH*%H`99tRJ`&1nq$X<N
zQ=|xq7}&4tFS`=gz{v|8h~K2KpUVWm+>2cSXS#KYq-HX3E=8Uiv>RK9k7-<l*KQHN
z#q!0ABJgs=IGOVVJ}YIxJlY5lnY%wlQG!Om!{d5xy51TR7S<)y2V$SYLXFf<$;Y;Y
zF4Ik+=2Pq5Xhd`KFh<<)3t1@1R=3lijUeC;N;dxmuYpOk7)FGrvCPYZMZZ0|{?+cz
zCyK-wTr3J9Pj(9-iY8ZnlU|o5&(NiU!RJ(s4~?XTkt>{<ZTL%Q$#*&Pz!Kz8=q<Yp
zoIF|-{nell>P!LoJ;#`2ndgk`-6Ukuv{z8wDI!~on~8z;`U|h}M)`30mft-J8<JPp
zW$@+j@Nz)a*M}P{LsY(&gRw1zoTjFxoadne{PXfOpAO7=ol1q>?#Wu$opIjt|9+iU
zx_UdHPOcA{5kUG80H+bnL3hfO2`K)9)wVR^j{yE<(XH8RC#$9l?Ki0r_P&I<_Sl;&
zaCAk`wzWo}6m*C2dmf8+hu`${Se>JabYH*P_!}5hfZ*?JY`g<JzHY5K1Ka5EAaJDz
zR5aRqj#e@EIY)Mt9bog#xL=(ER{RY}HaZf?^hpB0`&^wC<l>X{0yE?F(eJ?OXk+Xa
zSY^e&a#(EzkuKmG2p~wR7;ZJVxVWH3fB?H2vOPd`3N?F^)*0(2#J9W<e2Cfd4Y-QF
zprvI1IT2zvi_1G;f)0G{n}Ba42&DNz$YE!|2@nYp5#;keAZ~-Oe0h2D{H(=M<fJIe
zH_&~zGBE}ZsJwpc+nM^MIZg|2t5qHpzDOp$qV)!eERw)iIt<c)H+bZDdDTb+OV8eE
z+s!-b+zY~F1dtY7r(eH)dg}MVCApnuY=$jQn8D6&tK6qY3u$QDXjTrCOJ7L}d70LI
z-?W)duTZF4f-?8Ld3KW=jyV$nf>oy`8nVom<aq3QdD3J}UDGSD+yB_!ZUA4t8VC3Q
zqfedyE-_NSNhQdp5Tpb)gu!EQw`$uQGC&NAr&ENp2)g3B1%ApM+@bs_2q}&BE2RzF
zTuj*-8@Z0(yCWQB)*=2UXmgIB7l6oh-cj`u@T`xhzR2zIlcrh6+d=1`hpQb*WMGNz
z32a8ewv|#}55^wBp1ls!@6z!EiJ#2k8<h+!+<jZ<eHbyV$6`ESryam?1CcwE9HL>j
z*XK6X-W$C<bppVrkd9ml=gbvsmPk2hyxc{KX^3Fw$|7h42f+aEwl1?7KukXtCmv-B
z^1NRI4C+0&GyAzb+CwePO>fJHJW{2%2D7#rDLk0WtLi$$qsCuT7dUY6HYT6S3dl8|
z+E&(A)q6mlf|8XbAPH>t`<BW$vYzfPr(w^MO8GRtXywS;V9+s(CvT(BEv~Uu!DtPb
zzD;}`eO)z}So(Ng7Dt`s#QoLpo9;_vIs@zz|G|*I6sTH_`3cONNw(^@7y{g3*LhG>
z9^@xX{{U{5W-7qrZ!I91K^?L3HWHs9chAW`!Vc^{OHV}suA|cCd1o^>YK6fSnn`9a
z)@dNV<>l@8aQOA8-DV;e!6iqnB*Eh>gA+Fb-k!Yl;U}G6v6r=VsktE7ti>cBxth$r
zXJ$uJrGW_gU1w+L3+m371Sa-YYO!YQS*_n0#N6SFtr5d#TzII&&|ZD<wvIh6Gn!ZS
zAWaYtg!h6j!dJ+BQrb^;gvY!4WkfZeE00g+GV2>1GZ?vTmV^xe41`jnPM>*wR#uHs
z{$4giOi*;-@FXKA2cDlCKG$d9MWq&z9xGCdj)^I%UavQ946L|vOJ<=SYG2FLQN#Vn
zchl>kxg{EM!LbI+jV`cazIEIzhsAsPC^BU<?@En2hNm?=CJb1*GBI*|F%p#KC#_g;
z^i7ku!?T;^_k&O0L}F+&o%X;8foxphJca-;PB6fU_ABr&{|%NthyhwkNNC!>JY2zr
z!-cE&bTH;#GBM#r%k@kzZ%%7CbJcR2tNI3PSJsSkOioOA+vm<YNov2C0@7LtP6rS=
zJ7+$=Iv>&$7*RF!XDsvxVYP^A5&yl6_Uyn7bzNY%FhK>L$XN6aWa^J4E`0Bcfe8hX
zXa9JmAO_xSNXU(vd72kSL`Z(2B*lAUWfFHsuLNlgRGIG_mQQ9x59!=1aP@o6mv-<p
z_~`B%A2>QJ>^Fn^d@a>9+la{$YR2|(sc*yuIR-}6*SjIVY_dfi#>7$uy)6+va7X`q
z@cHWmeUjr4_N=UoHMS3?fW)XeF>!Hm!Cl3T7b%W~x0U=&wKRQJ;*3$duw7OMGqceb
z$?ImfxY*^s$BJ(=omw&dnl^neeKB>Lt<M>s`)A?!Me~#ui_|;^7nk}|JJxo@|EdAp
zpKQtdpD3!StBoj*6fa9f>=hTwq!yBslhNQy*;wnWsKj;D4My#r<?_^33WpWB1luNl
zku^GOput5+7vg7P;=lRUNz$>P)%>mFJ-g`)+X$;l?HGpxLHSn1qAGIW4vW?6h~e**
znH)>b;K)dnzkq8#d*?9hsINPwwu-ry7R0lqImJWHI+B{>8GDCrDDdiZ0<EZ?uMumt
z2&EFvf^)X7e02jlD>-`#IQ-GMfTdexT}@pyfFE}ZEw!U~2DyGDX$kz|r&ny}Esq;>
zeU^^YpQMB)w}Xru2)bg6feffHLZb4IbsiYxe(k{1H?f=I{t}3NeSHE144*PHS>v&X
zH;qy;vCx#mV;aFvHG3m(Z9F3j#>k1vMqubhKAXhr*NFY>O-9EY)YN=Z?|B2hmj+YA
zMH^9f-q6C;b{FC`xUiIdrfb<(%AoLpUsC`E(aSG>W^ewd-7&Tb_k(7(7~)WVatrGd
zyjQ|h-+FuLK<Abg30oSoG*6ORl?qGO=N|T~7PZLn)Lvgov4O^|)1~^S&|v9^$#enz
z5oE7THZT4^UyxOx!Ot^~Ghr)H-I?I$0CWEG<x4GB6w4K!SO1wt&k*n%q^d1DTj)7n
zB>_Pb^jqLYlxuwS&(j&&Ib>iEg79T&VcnV*Q=nJShO_8Cb%&OJPcm19CYaj|vteE-
z06v$yD3##lQL^JwU#_rV>MtUkC3==71VlVMJS3#B?(Xj8CGP*zC21oyn9}u<nxBJ#
z;ra8f*<LzYTG|`F4oQ#xO1Z1_4`gC8we&H9DeUD0sTRt5+{&CqB}}6BDD1u{$=7BR
zU+|>~aq@llT4i1=P9c~@j8_8L6713(92_K3B7a%iQy%J>PgPVwV)FS#MZn%HRS#mG
zU%*itSgUcMc+QwG$-uMG)0PLflx=H=q;z(2W%-UTH@_<Nu51R40Qg}O{oGD!3X~SE
zO`@x-Ed9LJK*)ZXVksa9p^o$aX#+3<b8~Rs5YTQD<HlP2X#e6s497Bjw|bfhX6#Y{
zx#1BXfDml<7V$YB@ro3lrmNIDje<A}_)f{<-7P^){3F?Xomzs)O!F#94iZRGr6%EI
z^DjqtDE9_oFPYSIO%swSux>t3{6dN3N6y!*>%_^)DS8b?tKf@>vF`jyI1LMnCL>Qs
z(j!b_s_?&L>+HoEzbQCoElpnH;k9MeaY&B)x#oLG;pf(GIgwIJlL+a`=Z~IL!y|L~
zI>*y*!*-HQfIG&E+fOcI1kZ4T;5W0bAW263`@?FWU5JW{w-yv=dV4cJ%3;wc|C=66
zpl4oBUxQ@3PGVZCC2QGQv6y3<FkgP2fn(UHm=Y&d)$&}N4Fr1Zf|D!hl`Z!9(9_Ng
z+5;7xnvmi(K^j)p-s$P|$I$jVG$lm}5D@>D29IAR%2a~Bp(f_Xp|FXX?4`lMfu1l<
zRB(+OXnSAFelCxu0(Gez&*vF@`=UBwV{k+>EO5@7ZgGZ9TX2KoR>8R&k7Yj@ne<ix
zo{ANM52&9=BDcqW_V75^3@(=maq9ok{jK7Qj>`f;RM+@;J0+n$-c08r+=d?1&#P3{
zZUTIw?m3FLYr=JY?Q8cjQ-CX%M9SNts!YgPh2oTXP<hNivaS3chz<|8{&_OoqKyYT
ze-w<_|Akz_ivjgXN4H&`=R-fM*dQwB6)85JGb<P;M9q^@NcZ+U>8ei<52x2*)Km}d
zwQ&5c8dQ*?3Wjn~G$;$<^^oIxr-*3u7u2!}3jXm%xsrSH^Yo7^+1pAkx$^SrchT`N
z_J&mTKb`E1F1rKuowWW>g9nT&CptaygQ3X$I?Ltas$b7&Lp7k>ZU%y`+lkj(wy{j%
z+oRvviY@Bw;Xd~hseqF>PtVE|0sNaNm!etnUtDQ+wxOZn0w`<kUOQD?Jb3@yk`dvZ
zmy<8OI;q~3Lp$-TB4Lw;={L<z#Lt_<EItv0J_D&8oU9NOxjie{I^%`mc-q}KXs{j(
z8e=EdWy;O1P4XPG37p92f08PL0OfBhZRHsmc^^Jxfad(i>2?|gs1%jzckei0VI3kU
z{^dIh*fo?#Lt^`$ag+wAExo0>L8(h+R9eWRK}-)#d$G%xrRyA~cU^P4U9R{%f;XAa
z{P@&j0+RY>1h>%lYN{TSi>Sz=N9re*;uI__Vp?Gg7{pDHe|qilwep)kB^fPm4<gBV
z#3QgiP1nO1!F}jq@8*}+x3{K{HTvkEelm8I?Hd9-Vp-V^(x-Ai@lpR)y!dOuWqJU}
zl|m;BV;0WO$eNvli!p2J1s+?bhQ^`>`3w*Ahlz!{Z}UXWWYEyp-7Sp7?@pr~w+E=<
z0BxACH7ZU1*E0y23qEy1Q7$jOe#p3!lRNd;vvVQD-Q3m5Vvo}?byQ*^ugN6aNd@1i
zb<m-+;I5A59g_c@O|~qwC4sZ<dMk9BwaktCZ=eq$Etz~@iB2~dlpBF9@mX!*`QkQ8
zRA6B(7K_M+VWn=Sd@x1K;iR?~6#<V`H1OyQzno!vShs++$Rs5AYkbzP9iZ`?R&RWA
zkVH#!vnHn!GbF;o#Ct)uvo4z^6Wgbts)6|Gg%pm7bS#pt;J$YH#dNN3kM@~a<loqA
zS}w!aUC}8v#U5N=riuxQ#Ny~XSS=BTGort6wH)^3@q5{NR9{!Klo$Oe6N<9@;%8Oi
zTQLjMz>Z%F*6TkXdKI83m=F|`gjTEABr9H858}Lu?XLUiAsEmZdTK4dl~~o>NUuS5
z%9iI_Psv|(J>#4DTXBq0iRr(CfjL7p-pct|YY<ydLZ{iVQ*Ax!va8N;LH~<*x!z%m
zE2r-V(YwiIU0alceeI$f1i`qLK{E~Lf4+fQaa>LQ$)It_B>|Vj=Xwe=`ir+S-V@`9
z;n+F}MxLiMQHkxr;RZ*MmhpSw5bja>t}>&BNOYV>N#ya<uN{`44z-T^CTZ4YnOl@R
zWQS9`{qv(Q!AZEluXycxGh}4-_;$Vv2jMa!iI3j1mA+PXu={avdAd<~?*9j4?S$PX
z9v_Y?PcIVYhR8Ee5vO1dsIM@+njGKP{(MHe$ZRL(^m%RWW%jicLezgQjr>AQuAw8b
z#unQK8PBY(tkV0uCIm{)?MK4WP#!DStj5zPI5bmbyeH57CIr)R_WK>G8ua$pt|O9|
zyr$9eeWDBv=mM;5bOSElJpY4}PWnttL`sTBeEG5Pq>>)oW$wpe*xB(8$tZL>NMiLc
zVc{#TM0Q+2=M50y({QH|63W)XN2){lvApP7SJ@uY3i#actvW}OEOE-w5H+Edl|77_
zr>H1bK*2b<ayEYbn*X0zfL1a+JvlizJ>6<G^%Ah@ot@(Uj46Gb5Im$XAceGmSvkQB
zuLP37u3E#QNqwpD&NtEor#(;1l?{i{r&;o8K`Tt7)}MLf{p4+Cn%AgIlb37$uY%Wf
z`n@6vSvK||(|tQQkC$qPcU<BS7AAa|o7*Xu$jBBaBQ75J7z+b8W51$uUq*6b4Ci_@
zo3Z2M2PZZ#u=<F{wSEb=QXL5VjS#X+?}I``7Sv#w7)EhI3YA={w(yy*QsFBvyDq3l
zaFpE7^~JDw2>gRq6+^l9SRU#|_QzaUY4ZlGg!`-O4scI0FLAdr^nIjiQE4DimN_Bw
zIjL-;=nz(fbI%j*l3%edK55Gzj(c_vt+b(aFVBbWPu?9ys6gvH;dl|G?nn^XpMn7t
zKL-!qR0DXuoF5mzRz<LR`gk!Kthiz;5;>&{%%bsJ1O}6w{lM9rXo_$LC6!mw!7_V8
zr6e0qRIgO(X7b|t@;)ro@h@SHWb_bJrZDN;p-PXjMSp8|0@L8`mM`{kUcE+i86B5;
z>=A&E>$)e-KiC*&<{NZ04@cc#%_ER2QVYb<pk-+<54{6N0$dfaZ6vq1e%G>O9r=_t
zx3Aq%vLo`IiujD_jl~W&9-i!DKK1-L3(L&vYD9Q<^GE5B0J{UGB&Xs{d&BOJ&#uHl
z@7{1($GkS>+Cdxf$u2Fp?7)+J&Ziwf>z^=SjKO9P$JLUk5|a&8XGi3wfQFyZ_Ez}H
zQj{1$9ARfk&`bR7Y;7gPh5s4%M*<I=A{Kq@j)zuD!iDJd@h1ZZ2bIh{+#ix<60H#J
zkZ-@d=O`XqF10)n!KFCpaZ}$aCu@diS+XakaHanUK=?o~TN`YW?P{4i%Q>1-#h4V=
z%Uz_A@2o7qGJH8xoF*b#3uD8Y);`^HL-2cJJL-C-hz!YmATu@TZ!N%l`?CA_<9);P
zTkPf{APRUU{&KR?oT0qVzP_vJxT@mMaVT>3`}X4TG<9^jLu#D`P91|^#rqsQmcAi$
zN=BtoYVSH_6*9h`5xYJ8RsThDeA(G&Mww?Vg0`H)rQw=ZANIg({=zCrA9HIgu?)A<
ztI)EY#3g##@SiDNtkPhCc7sZbVoHX8!ibcG{O^s{`}AU)<4G+nDn#MVvW7}UVnLwE
ztd>k{#ZC})i^=p#Hj|`g+=g3XWwc-sQ9X=0%k!c5AuUP)anpI!aK=0cq|X5nEE%=%
zcO}|AHr@`va_2ZA8zuT#xJjHNBa6~iLRoOnQl~YJ=bnbdGaYU;A)Qq9YwKXnofwZ2
z?GD2V>p;(j&?d8zU`Hg&V!5`Ns_Yo8gzGIoq{mgCi?nr9Ur2-d&;P1HF`EJ=BQd5q
zf#qwt>I%EW=bZFOAvNKq73It5sS-g}x(AW+L&W>veE6+saYE)d3tyA;RJmB0B>w)|
zZp+cR#Z<u}s=|tsUKVvtpcz{A&-<@x??f4ySTvRZS;EI>;bL)&cC|z62ZE^{!k;{y
zMqj^2v~0ztm8-Kl{}2?EXHFhj0eCX`WHvukOln9!TSabIy4n-;m4n|hD6GXG?}F2)
z6Ygc3P`sNI&o>9reJ1j8wo78%MAFwq<J{_l>BX#uu~1fNrO9boAox;wex_%uw}1)1
zV5J#QIZAokiV|I&PVwkwe^4cZ#YP|sKW?kPen~~(!+Z66K5F0U7I&g6GX!B=u(|cu
zQ#u{_e>x{SKc-~xfSZsfk_Mw@`pSvSnD9?Btt@Sf)_i;O9ykaa;e4sm8E{Lh$M{t`
zIh|MP7K?TEZC+y(=ZG`o#T`8h&ECzYV@86?K&2HQSH5!BI<Z}7y}DK;t*NPLVw{@|
z{8mtP!9LN;#u0o?3-D8R?&&JltRgX*|0W;^WHUV!mRbdpzl+IJHwEXU+kYHvqVMtT
zYd1H^VJP_5#-mL{sv%(P&k8snY~H20T^!7xZ?1Nc>oqj<e=V--xSkAIJ_YBnWOBa4
zEw-=s?wN|V{FP{#f6`M%SN*mu^que9^z&*`DD^a3h216>TW&(R*mTvs)L-0<0bfRU
zavtfbrl{t1f5WCK+V*IbN_(Kw@JW2%pMxd&?y0(W@gHpFggsB+&KDO@!oih!dW>A3
z^!a>!AiZ311A1SC;jwI<h!(RR^qr5bK3Pr=#{5ibZ%UsoYz2>ks2%WXfFe?h21Jrx
zm9r?&N{XBhozVTg{1s~4amuGUOJyA#s^L(Ajd>+v5#i$>MH3ICZh*$|@9<Z*P{N{k
zSuS~kdw0`MvC#N#gde*r^6_l;m9}?fQnlvQ20eL$i+)-{?SIw>uh7;2D3g_`Fjubn
z1a7g>&g<<%0MicJOqJfB!w*Y#kVe(%YS$l08A}aa8|V-AyUpqrw77VX_U<{XANOw8
z^CuQqln#)_)s+=;>M$SPv(=F$B`LBTh#u)rfjI{jgSyWpZ>PiKRP1n&q*oiO;(BrO
zXQpZ4mdzms3a5yU1k|=Hq$St?b!k!+-+=i|(#mavX@o=PaIwrc7}1%OYO2alM@OeA
z)b{>pB|bepU&i}kV`a(Bp-i&^QObU`ozG!(`E+Zr-RBP`I1b~`*2Lu9pL-!-FknZ@
z>w}Db>$7Ldrab21>?<#?y!O?vDy3w4WQG8gv0WyP3Mh$(a3k`)b}EV341>3$2v}yp
z8A}C2$z2VJi9pw6QOab0ckm}~&TbhSm*l1O<#C4Iz1>><kGwvt6@5Ru`D`l7)9dqn
zA|^=PId6rTjo8!~FAD@5z#=InZQ~OpZeY|&>r-F2XLb9@TN5f+AVnmx@i#e_d6_Da
zz0d>PR&Yv#!GY`JZSuT5_Tr|u!&!c6>OqmZdAC1bC$p&c4i4_m{M5GI1ILl@l&`_O
zRLT_Qx!KV*;CH?EI%h1=SZp`=I%T0$P*{jb!LDLz%4vGmpP!!(ILYSbmJd&PP~q99
z4n|kLYE|hCX}I2YM+Ds6=;=V{Uc7KS7^m3$`30{paS2XJ$oHTL%*?eWGcK~rA1|=R
zviO&B?7qHvp&TqN>A!;x*Q6R0%4@%ByO=NAgGvAg_rzwdwBBlnumO*jMiFe0rUaa6
z*IOD55IC945~Cnw?L6)F%*;$sS^;N<M&dg={{~RyC9qeS8v`yu^z`(?!iKfk;2kX?
zgl!XGKfspjpEq7_$(#1%&vL(*lBlngmY1@J>s<O6&FWqkzMzrvfO36d4>QJdRtItD
zl;GKxs~ew2Nll$`)(d8ccXd@(g1X0B4g6ad7Z;7Fz=Zx{8JXzlkL{j!kRr?stxCh0
zVw306NPS&>AI11DyI4m@oh>X#Coo94{h8I(xy=78{N9Ny#iSJAce*^*0xmkjUJden
zN^XZMcjcV*pDXoCaAkfP3VHfBY33)f8Nt>8KxFPMe>zYUUoQI{$Cj1Z1YKi*iaZ?d
z)?j^EB+2yJ3Q=6Ur2jPmb&RGkXHc2ZJ^V%@aTPMKFS-UEP-5R2EGNX{bijd6q`dYC
z4C<gzcL<yd@Lnhhg7d~9-+)n21vv7Gg+-A%Zhn5AS*O|<7~#Yk0v5(;YmgjZJkS-O
zXo!sfy5RBkQO3}z^zLn%n!S*{1I^XwIfwiY5pRl1aKNnsIIudeS?~5GrNuoT?-%y6
zhnuFzpruEArt{<en^@%JY}&=1>eu&~K3?kuZHN?3j4_dsq4F1u6q?ic82S1w-f^;m
z-e>(Snl_9HOlu`RHys@vVKEe9E%k{6Z+p6XIZu$VC_}Rf3m1+cR|BsB54ZjzDA@OQ
z)2br1zVPAI^P;N*Is#3zxz~7(Za&`L#y?JHn0!3{u&Ng_lZ|D3Z3IA$0n|_k3F!uG
zf<<GQ$e-KGWM(z5aakl%F$52E>#hlyB{4Y9=XPh<#sMw@IG_t~N>!_VwKqbNlbc(Z
z+7l$qRv@k)G+57A1MI}t*B7j8TW}5@@E@r|T?evNS27_2J7}MMv<TZ^{SBO?OifL7
zo{*7|0UZ*d@nQXi*jcaFxfoQjkI`rDi)~dBgX+80GR)<a>qdjC@AepFAnS`2|ImwV
zsq{0MOM=!&!ezQr)9X5+1efu~L%y#@JAjZS^hmgAtzLbH{OfxmkLzIBr$SEnO<(_j
z!w%lF8MUEKf+N8lAPtuFM;*Qp)(Jy*D7|h?_ji#bPDo>T-WzXmaZgYFpQJD-LcYrn
zi^7%}>FM4VogVeJD*Y-u6L0$d9F7_GEY9@MG7FNuv|nvWiHqYf-5npVt_H`z8iBp#
ze)(#B)S&IX;?~|bZ%_5`!WmkH;1i}-q1#yFz-;X@Fx%+-$?y{35z)b!Y?G5U06c@<
zU8Hpc0s>4{Mh52R=Y=+>E!0;7fSg}{0<6v`)I{Z#Q#iMPIn&lqa#%M2LM+V9DfpZ=
zfpY2e{(U>31MA$+b|-*H<+eA85X?=6817iuU<Lft!-l7)0GbF6a`SR`?`Wf$f8{59
zGiCxjZ~)@OtXYar_C!C(_nw)Q)&x{W?OgY#2bPz~60X3pUdTv~>3lcLe&gGLPvexM
zX}rqnPlB#P%E5yJoMarn<M&lWq0~m&g8<5m6itvvd7|~{5V<KS%kVF{D@@SMq*Vmn
z9Kqi%)vlN)?ah|2c20~X{qn8<ZCmDNaZ@gEd(~S@ZD>YXm2Rpo*T9dWpVX?;eDotl
z;EO|Gqy~$&&8!M=35*Qwq_`B;ZGFCNCOYu)oP;$k`(-EJ!AIWPa{ipE4_`@bU(J;h
zd(JHluZ9kM@I1Nb5xJ4D7vkmMVwtLys>o`86NzNxbL+BKN&FzHPCCRXlsb3i+SILq
z8qr91ujzJJ3=EjoDBJ8eY>oaO+TJp%$|r2&1u5x}21!90k?xT0P66o-NokOfmhP5L
z=?)1&y1To(^9=g_-*=t0&e!AGA8^6mPwaVS?wPr+-{p4s6QgAJxvcvkEMyN)MUOY@
z&QGsURfhnt@zZqWo45DC9{WAdS+~xD+x^MiDskQr$CvBj$hGbS@A2_*Fcf?TlH&a2
zxfKJk#7@wEb8vAmXw>C{376yEIA_JvaIPak9m@H1&>Gw1B!4J@*Ws$mML{e}P*@nZ
z+vEIq=G<DV1=!F!Jf*yaR*zcau%rk)9Aeafvt=J&z-L0qbUs>wGFq%~2`TEoHVMBH
zGqI3J>LSbaFVIbz7|*G%<=9n_%SF!ftoEwFKap&85I90Og|xL^c}@<NOW_!)wb32!
zc!Bu!E6kO_+V3!sbg8chLPrb?4A?EFZ9x`bcJ`ZyF@O{VZm5My6I5|sw4x=?J1d}U
z16pQGbacpi0PrFMdJRcK#3l_+THa-R>lqF%uJ;5PiDlZ2lYrEh{~S2$XdkUjBuD|!
zdb&U-8$tSE|KPy+V780!25j?X1_AVt0GGG}iwPR^h>t%aPJq9^PbUl{5^ty-_P!9A
zp&*2MXEsT6WQ<+r(|*JpBaP===Djx?@z7%P;{yg6v05y^!r;H|_VZy2Sg7Kd8R)FK
zelzWPJ!gC!KQP)wy1scvVDR+m|DZ5tATd*a$-RkXd8*D?P+Ha4eD?oMkZ~$_9po1O
z`}k~jo5IKBDEDoydb}<5R3jF%6$jt)Sr?=|p!a+}nw}o1EIyj;xbo5wTdz!FM82hG
zrEJ;lY+-QZy=NozXs~1-!zRpJ%KZ^Jv^1?og?I39I2*X6^kWT-uz?C>M%iCKGRUX2
zFpm6r6?X<?#DYsG3UWq_oo_Yu*Yv-I;WOFao~JFid0*Ua9?T8Q)iB)I``aOHFA74z
z@_C+ekSs$*pYGpO5>v{ha9aJYkIq{Wr4}EXvG>|Ar+V{d{W6tXCYgoP?wrb^CuV0X
z?y=>1$cWa`%1Yq;k<III%tS76w)A7;=ubi4J$9Qmw(SToj<A`{ug_NR&BxK3z@kTG
z$`FmEL^hzhO-ei<bjTN0ljQ3{_-zBp@Cpz?VJn;V#nJ115dQ^4Rkqe!{fYKKr3Ms(
zU*o~ZIJ<2+1MLH}?V$6&2XVF1hCmtH-qEpAie?FvBjBj8z^WCIoRV@6q<4TYcT)A@
z%DJs?0VLmov^HU(&k-}W@T_1f8lWhB+5&KiiPHhM5YV-Z?Ye@ofFuN-AOa<dAnAGS
zg3QOwWw?GIoquU!0?V`Aso1?8Jztj+eY}jUd|60BCaE;dSYHn%oHml6M9<k{^i{QU
zGKJ<;30pn?eaGjYo5O)`A4#$+N15HHUQ;VJ3*D_rQBYFmaIu^}ZVBki`)Su>pryyg
zK^~S%y+(bP0=Ox!?dG&fg#O?B99VOSy8qS!sBvppy>7AB84LkP={*Hm?naHqVX7h7
z&F1xn?es89;JPaJrT~)q<nZm``(`2QHkD!dTp?!eWVSo(HrVa6E3r}^f{#r`R?l-i
zcPdn$P3@>eC3xBpWEvhJwl{V9T?k<CC7pk_C;khDtE^3R%f81XBID=ECmZ69OF5FB
z!S}JfMHD(s?(jOxP<gpIUs;SWj`+XG=jyu*;0GYx$<iB5B(War*MJ>ZN|{tJ0Kb5>
zF;%B3VL^B5$PGJ=vidUy>vdIPyphrn9|-EFpP+v72+EvbtUaAn75)~bxyvNmrh71!
zHv}?cajz}_V(cfqJOosR_%Bm>-4=JyGX(UQ0VLLDg246K*K^HkbD%vfbvfGv-yP}K
zlZy-gAJ2@xBTx|N`Sv{K(`ssgNzXzf$QP8x4K#e0C3tlRJ`~7MjCx~$xV0aM=i7cf
zBlA{A#@iy)6UG@o=^O9L*Pnkgn9@DsLbSG;<|PIj)#OZFouetO85ZO-;~(pAb~IZh
z+fI_HBR`)Ie_d%W`HK)DEqX=>DRxRp=L}ZUb_8hOU|<hk{?St~$C50e+oi`nxM<ZO
z4qv+ea(LK%cI8{fyYt0dB(iV=WUu8)zX8fs1G41O#6io1nYrm$+Q-A?*l9JNW!N#i
zM6=KJsCf=n3B0$n)jl{cKOOu1d*F3}dveSUzg;-wt^3KSzsMQRM-Gp0Q>gJZ{}3GY
z!i{2{c-)gGXwh!ry^_$1J}|QT`32Y-p2pC%jm96h!j!%zdvT%K3QL{J=<Scl|E%pv
zF}1MhyX_=rXnTAPeGEV*VE9-EL|TCB*jo>_fq`hzmz$MD7ijQsF)@{aNV3FHQPS%q
zqtp#l37~EUxKdyP>R{V;B5UP=d7BudQDd11(hMzA_`QgBzjc7zuj68kN=msjclDN8
z0PF}<k6}Fqy}Hc$)ht5TEewV)xomZE3{kprlL&n+tO~QzC^=E{IMR<;9JEOC$RtCX
z1VbBut80@RG{KRe5-F42!2DB^o(phh0&ldi>@Nw&pmYGM%*(BJiKLH!?uM9S^wSNE
zrZSqt&Bz9+{lM#k;OcypQn{inpUmF+U{$JuVHaM|26Un8q5ApaIH%AkdB`(@BxgY3
zl}n#oZMHBeX!PQ{t69Vk90naj)d>A=b-z%7+UU2;-yIlNV(MLt?hyov;Vc9$ig0^u
z&d-mQh*MO$gf$A3U7sEwK&|idy|8*81i-eLJ_pQJBI?ivYM~98>j85NgHF?zjow%#
zMMFS3e7GbSxJ)Src{jl9!vP^W1~NBQBVjOZ0||k+5J<^^aB&mJwa}aZJhY3-Lh9y2
zWzhX8Ceqf8T?RcSSRUSndbzN)j!CZ>(_`}X7jH{@rl*e_&S9QkH;XoN$;Wh?PweNi
zPTy&&S-@N&<kS;xG(Ji^%Y)yvBp6Tlwd+t`k~;u8y?rWq+jsHs8=yc-j8-s?OxH#}
ziCww=R3Y<X2~dH@$w{IWacd3vaypw6-v7b#WC&7H$VctoX-R~Ox#-Nl^_ei1o6W1y
z<O{k|Oo5mHfio1lT>JM`gNqNCnCC~~UP0KM{20{y85c;I{+&TlpfA{yf|k-HQ@7i#
zSY|HN<pYXzfZ=6+=hG2;__z-wv~AvyLeR&6QTZI*$Bzm~zOXi6cBBcS=UZqEn>`;~
zfo(-37}KY(6POz1^T16#ySM;z2?l6)5Z+m^0?>q@dA8VZ$$~1J3Yff~b%K^N6*)jU
z`b;6cQ8X5=vY0|a+66{8px|x-Gl#z@Mf8G#f{Zx;E9L|r1SUtILn+g$Ed|33F~28t
zI-c?gKmZ%+>8-4+pby#`AcBQE2wOMnG{R|PZOn#@2n@VC+e7Rw>-t6dl3;9~FhCDG
z=#72Za`|T8^U~nB&Dyb02hxcVC1Fjmd#%#anm*Iz$*7WMSGhv_L2m14>CUXg!h<or
z`kMfM{LV<qO9&RH9R?X)D}ImMK8GvWu(7pQx(7T`RE5gl0wT0py!LA07#5O#wx4-5
zM|~wvd#cB|-!0@nFL#K3?cVk$Iip<Hnlmys?YRO+AW@8Car%((QnB4nOuQ17Iy${j
zJyZuHGXy!$O+rUX_dpNk!vi+e?d1UoyLUZW<lX2579zl{EmSU0)C}=O<_6_D=t=3c
zYLJ|Ol$`}cc!NoQ`z5HmKqwo?NQA2ghRo@@&uif33sip<L29p-P2KNSpaUH`aFNIt
z0-7C|)7{+w;N$&C_p<>C%#<@a1P|Y<_~3st2XKyGhB{TI=wHT#TM*6*Rf<Y=TTz7A
znV3F<31I)c!L;|LK%6h7*X{WZusc0>jGo@x{(RpsZAbMn+^06e10jR<7VAIHq|q-D
zH=SBPQPlpPkaV`VUFmV8tUXzZE(^bYIJ?L*D~EU73g?<y6Dzr3UpihZ`9r((x^BPq
zAjZGaW3834e)8%~d;Zg%dO<Y|;cr0T@;$GnS1KM!k4`Wu%81(BGvU*yI6JIT5pH=@
zU2Dy23)o5^0x{mij}7pvMea)jHI~mAAc_!~(*22!ICWil*cy^S5hVc%b@$clSA>e1
zKdI?h<Pwx~Iejk(&ZNf|quQMFI*?)3E<9<~F3+#7uvD@|LN15Wm)_p^S614C#;F{0
zi$T6TnVX&cPA(nx)%2e~@WK_wpR1|6fw(Y<Rt@m@8|v$QJXHz!=p)5RQe9sBd=GHX
z8MSMxtDwgVj8yn5Dy%A#J=NZ(j$#B*Op`Y`nhhML#zwi>iRuaHOom3rxqc$PyiyVl
ziSEgSMD*1a@2YFY`(MD#b<U5E|CVIs6E!!>jZ2u?x80KlZ3@W`Y(QRGRdY1ZDEUix
zUbh6i;%Vs7u8~>fKzDhud3#zY+8m}E#ov(zpYDkxyO_W9LQq&3+M+=})t-ctGg0N?
zg*l>idFfnATH2r{;dpiKEk%FU;q&Q22v}7h$O=58zKqKMqQ1%<KCkyy*jAW?I6qfy
zFn9x`!zoZ1)iin&r(YdQlKlSceI9P0p%g3<9BD8P0Uga25I-Ngs@-IIUaZopw17AL
zeQl%c8AJqPmlqZDa-7o)V80Qc!~gaZefKK@0(y}fe7fZT;*L}&ZmTfyood~yR53X3
zfA0ffs)$1d5x7;;Ekd2|l64eN2ewo)y9Qe(s3Rt+mFj?|g6K@Ts+DQs<44U;N%^z?
zt0Q|!hC=#X5F@4pL#T>IQ#H|~xJV#`R?l>yh+auqCW({FWdUpwFCbWyJ=-_`zJy8U
zzYCJRNV}nxN3sanVCX>25z~MS%vY@YT*xaY))&9cvzZw26>K7^1B=GLOVcIBs83lY
zLYKC{vYGW&*N4Hu`1r%85M3e1Tb}-=DtAPxa*Ik)WU3QO4lxwdR^1&Y)^kV7X$`jU
z?_rfCP`*<Jp7^8#n@)hpNe_n(=UeetyKlrCX$&D8EY;MRTF~O~P3iHKy!%yAH@Vp~
z<1b46V2X%g`sT*bJIw!b{zpi9?_PtAhJPCw7;G9s7FT{EfqK8P{0F<^!@J+m#W5z6
zr));Hv?q^w`c*|FP3*mL?v0T&%ie+2@_)V%ef2B_Q#^|6`sW`jUVpO2D{jT5<SH6s
z^pOpYXO7z(Etm~euqp|O>J>h`4QBOpj81jQ@(g>j_&WxD(Rp&_W2R3f`7P|Kf4aA@
z_1sUaL{K5JSX1Z8pan<Q-p*D82z)mfChFVT8vXj=dKdeZ+}OVVP15i*hHzTG?(;YB
z2X%D`hF_~DndEop7zOv*65R9VW(Vn?g>m_I%a_B!4N{t#>wWS@B1G|*B$r5GuLr0g
zyECGMuS16Qfq<tP3Ja>_R4R{#g?79a<@poQ!-tYSC@?N!baDiqdS2P}f%AH)FaL(_
z1-Y1o*(;A1=h>v|Z_$+-GxuI8vzMrhm`D4*2v1j1I>W}eiy_aV9P7%k7kuPG!~{BF
z#lL=Qz<&Fy!@>n5u+*LR3vLrW#r@LHsRQ?b8TcjljOAJw+|fWmCcwanapFvykUH5n
z3&H++jS(P-6DtzZGfbA&#YUmry-ViNg{^=(m4`6N)tdbRRDVEagrm|qGD6MF{NbAQ
zISwU?UtMcX@(rb)UOLQgP^zYv@guj~LT9Uq+7%YW`j3yM{M(sbubld&Mzru`)G^nL
zvr_roI0Hlr8~XB5ka-Ky$T8(2j9JiWtXR8bb;R{wQ^aQIx1Xn@*eQP$92t$zPaM}@
zrZRnbp>-S>62ipVMf(QaydNF?{bX#a=e~xZKJ@!bnL>DtQ6qf#xt`??!b}k6OBQt8
z*jbK2NBd&bWdJmxkL-_BEQP9kvRxk`xd`(*S1dA%m4X^?blmIGFQ1*CpBP-cVa^XY
zf3uZ@!~NLRe%7eSj0J?xvY?_lzp2Wd`lBXmJ5Z%F8lQ`msV_@8Fjcc$fp2yj;YOah
zEI3xx`h@6wb^83pGU3lJ&|cs0{uQ`H`6^SgLx-`e_Fx1vDy0qOeDVuR+7#<4#|OD@
zeQ4;v2xzAZjnVt{39!7fIC?iX@EG6u`TL8%!5D7y@u~Yt1+*dY-3!gDTSLSh9Uq?C
z$k%m}bg2F!D^_`|#`~K>g<^cMb;~855ee5G?a!Z^R>&~vN<L6$rJqx{7~f;~UuiAF
z!^02u_ZMnbA8rl#fY$QokHr5V2>&o<D=JAz(K0iit#(P>-SDEKqW*<`WkFNuc{qhI
zSjY#_o#m){8jIkZ<b3xi<c%$YZO&m7yeNw8jpcoK@CYiE2fR#W4FCxuAmILAo|f$y
z6DcVl8ynZVV~>@(>Syo^F1FbqKWd??a?0CcRZ(?`$dv%GbN-NqM{e^^3sRwiw-_H#
z+!!ozs90pyzS2HF`QWARM@8h@$@DXkTmxdBJQF6sOYfYU<Uzzn7Jeazam1~k`H#g#
z$kpb5duo69vn_)NAIlE))hnA0tJjeO<n@6L=;I137y$SIvMY;WviDyW_VdR_m5IC9
z*He_WfIr7(JryS)&~(6)KgW=1jo(%c+Kdx4e>YwK;aM{A_jG#V1!y>;tO|eHp{(>z
z!INW)2Y6saDZ)3?>FSfzCpjCW+0*_NSp55I9D!?lZ@emc?Hu}6fhe3{_Pi8G@Ru*A
z;xkVE`$%z8F`BW~`OQ)`;a$B$0RurlfiX36{7CTa+1%qdy?<^|yt<y5|E&dp{|cf-
z_5=vfTBKVV75)&w;=!F24_&>FY%Fxd)x4@W+EZ3p%-2OR`%j|vGHOVCV$xj|rvp}J
zIT!<73h8aANC;yGL3+SQ^R5W;>Mh2k>;H{Siaqi=&{87suW~q(Z)e*5O5pWaH`A?q
zqbD+vsa=CIO*ZYMlze4xDe^u4yXj0A(7bRQZs9+dAqT&rlZBnzP`5(kmRu&&%Y8Rz
zbv`eB$7pg-WBr%=`S(WR!nLPEA#r2gg%=6~J`%v=zirQ;>g^Oxii~79#tlVDa*W2+
zEWq$pO^7dL6kPj{BZo#V0`4gMouyt*N%-pqhyCG+*;%e@`{6kHy%#U|1wcTNN}k+<
z272RDo7dK0`d8#2;nRg$a*K&##FMh6>ksb2hJIw8`%eK(G`C&`Z^0Iu<xGuWec}0e
z71(aInq%|x^9)!><GmG{JPPshwaTv)IkSmDb$$G*Vf#j#>uP(r<?K7Z+_Ty;7l%Rp
zaWm{m)umcL(~LAvoF5^7PwM~fqkfZkAj5DWBOa)_JnoQqY>!)Yjpe?FgzZc@|5VJC
z_J8Cufo%e7{lBxl%}bOT9}juw;^|UN%*<Hbr*VC(hElK2DmFqs8C=`Ok#&a?e^nJQ
z&dbSRqW_Bj?HmzjNI-Iq?X_N`=YyySVTeF>#AeJAm5fE9Zk$pk`R)X6mTZ<rrfV)~
zW{_U^|0VXIqHRFflfL2!M+rY3>z?AKp|Kl_yRa^`?$!AuZ;Qs!&})#RRb%S0eY|*g
zWz%svn5rd!nw*#j4s33P^iel|clM(111$1be^^+UkJ=x_95XK3Yx|#MysWGj*FhZ~
zuBdfib}YAK7s@_1<5IJys4V$yQf}R`zJa}Ro3Q9zV;X`E`#YdMw_^l|(G;xGz_cdM
zvt6a(Zq7=aMK9Z}U%uRrW%n`mcb9lEiHQ>HvUF62KSN52i%A3GhA2GmE(cEeaS$zg
z+S_0Bs+MVz^N@uGuKXS-I+%6De`@`cF(H@ENvVFanV8?l&CSN2!>EA!pG*%3lVrl7
zimwocSY(EhpQI{t>G!5==5Ldo-pUejy6$IWnG+Bsg9w`GcTADU4Ip)yqN1P)Pk4;m
zkccFPd78tG@Lg(h_36-s^ztgj*-px*F1c#Sm_I!|JPxK$PrqgSph7}I-Vz@9u2Z|v
zi@Q8`l>a^GJ!+vbrkZUu7TWLt0x&T7dvmv1>i7lZeBM=?K{x6MC%(g6D?v<rz~en9
z2P<o}Wuo26O6E^s(=MM}s^Yh`wb9fxx3j~@o}QicQIKBm<)ow(t<PNAe4Nh^TvMgj
zVvcqbS-Be3x*Qu4yYSd#x*-v%M$Qsl`0oT>W+g!N8$*Va`%A?-5I;Oz^FL`4ViGDB
zDg)6luI3*fM>{)XXj?@^eLK7Nh6~NkMP9AHBqZQRMn-_8KVCA&%#0ch?fL}DbXkY@
zE|teI+r1tEi&hzI6uA#(_IL*P!TS2o<?BUX9&i!yRp{;ru+n|P_Rkd`!a0fSwva7Q
zP1KEJ{F4{0W*eEH8F#;FGB=7`95V5)(*8d!=+~Fz^b9Pd*Jkc*&2sVBBZ+36!#^3m
zb{RujRQjj$dbyuXRu?FFvH`+v;L9iHJJF5#C7jYvYyuT&JdT)bP6vx@=Z#0*;fbbt
zdN;clePPL}%#Z*T=T-8N3p`X*Q4tXkzfg%6)GTPp$shV>UNyU3w%VRZyYoza+GG@N
z*%`if_JC(_%6T0>`+??s0nPp5sORlBzBKKaMBKkJwCC;^Js_w$I#vsdS?o%*wYzzd
zo9zCNS7(NNjPP}I1XYO{rif35Q2-O7McRANw@Dc&TmnM^*mmpe$rLfctr~H6@c5&a
z{Xa81iq+30{JlA@N2p@CfAw<D561Zqhas#LxvK#F`*>WGR}mS)ESPfdrz?e#`gezu
z3_-}#+ImQ!PS(OH1(gS~UuC6~p&<u4{Fhb+)>|0D)W2iI^O=q$PseXbxik9?N=hM|
zkirVpJrp68+^&ibmL=A>plosX#@7}q@|tL|6fQ9acaB#GEg}DJx8CXP&cTy2+V(mo
zh?)tlfwPV0WzoP-D}1zB2=oBqIa8AZ7g*DWqUaVbjy4eIiT`w{b82GqcjN<|eBert
zq)Zk47|G#+qy9?=dvBKv7`$J<moY5(r6FzJlzo?(j@+1lG_)a|EqAnuz<wqEJg_~#
zn5YT>0@Vor6_lPWWWPTyZwfzSIb7n@aPg1S8K|@ScP--*R6o^m$`UbeqyA@L28DB!
zkh_)SI2o*vWDAmJtO^lw6q}@onEm0)-ghM1x4XfKsRVo{&nmX(7m}=~es*FB0TbHj
z$8v*@XLg8<us^EzEr#CFQF;6~tWoca+q0k=6-(Bkk*c2~^s<r67^MC8OF;zYVA5g9
z+i$9hZBzjlV$&~8(9r{4I5Pfs19V>%+k4yd=w%gtmq$YUh8^>Ut6hHC+vI<)Qm}>Z
z3-+(kk3||PkUxl2KdgiI3&KL@{NMX&6`7d5%wnlhn2WpHRdfZsv(EpM)~xSQPC;Vl
zn#`<^scj(b8J_K`2*{bn(f{|^5oKsW#uz2%7y;(+Np~vV%WjBSOQSg4a5QkCm=N=g
z3^Wri|C=cNB3vdhzzIvsEO#!}#(GUB-ktQ#{md%ZLA_*^mFUl#FiS<fMQoMQ=n!>`
zLqEW@dh}JQJ{)9qZD1vmap;;aNGb66tPib@Ri;z1P#ksOMM0U%fE=KOT}0DVJpOy2
zy@1eCy-wB1iYIum(uX2EEp?uI=vxQ53zR$IG4`_2j$+XJYLb9}_tk#A6vlDFs2O!K
zJGb(vk?Y~``VVA@33GzDM*5=XP?~<OKW(1njuGu)<L!g>#>8S}vb{klL<cDrS9#e1
ztqd4}%AZmeiv)|bcjW^L)x^#dS}d-k0{m5P{4p_uy_g3|R*pN-_^<baYg0`1^$6Tu
zV9@1m9`~X?JS-6>iJ!t0VX&4+O`x<ks?aa=mn(OX&W){oScN*2%Es=}k`8ruJsvZ$
z@tMH3U>htIvQJl8!aUhs*Yq+SKl_0PkKQ@Vp}MD<yLSXHI26^f6ww69hhqN?qn|A`
zF%oz6mF<3aRRTzHQ^zV%+?jh__C%0)yh4Qjef)QhLv0sZ&aR}i;S+YYsMq}$YlZv9
zWWTi#X!g&24qEHA_0EzB{3B3%tE@Cgv-gH(^iheje_Jwjc4rfhT%!1EUhWR3sv$En
zwN{Zr$M3G6L+cl>$zEc$_1c<hc<c^K_mQ(&e$g<+6pA*U5kf%g(vpF^Aoyb3VwDKX
zA|uAjtyuU#$3?q#HqjdN*+8vEp?q_#<Iq~=E~NT%+1tpZmKknJdM-34-TMU|W>&#(
zt-BetUjFloDY5u+rx0`R!$wy>=-LoVpGMU=*Fp{T=TN;mBRlNU8p`Kb*F9oApyCQ~
zH<LaHRwZl-lc$92Hm3ByPEzNpV<l85J=$e&{Pxz<_4%s>uX9kAhQh)!dn>e(g#L;D
zfCE_!8^1m(*N*=qg89%uXh+NY^Z72Jt-0)YWe1739{cJDk$kIlnAje<xAv~b-ba(=
zyh=n#$27U^;^jUs%5SZ9M-{`p6XZ<SU3Wjm-oGLz{hjmZOdKvvJ7HE@P%SloHz$aL
zZ9>_NHbbI95V7I3ku>a}I^UT5OYJdhEShv-?^}r8m6LjG{-J!iO3W4fmZk?u`D~|!
z9;%c7!b~TN_DQ2Q8-+zXSoVuPIXY@uV9)Kn5^E=VgcJRom_}PMs<g^K|JjN|$XpNS
z=3KsKz)_ldi_15~{3245Q-qgWIDh}Kqk6G6qgSWc+Dd!8=wrGUA7S!}vYWTnj41Vr
z4S(7rD=Uq6kKe~~j1rUS7_$iM2d3@S(F)!tq=s9y^N_We0+FCe<^x)mJZbt@P{f`*
zweQGDQwp$C<i4-m$yjNBYTWgsUHN|1)!GPi;rp~RX$mba*m{vlr%hAO`Wi}-kDiU=
z_m%YY!@-N8!dW=TBX(XkT((htz5orbn4OmK-T|odpO>3&MrnS?b++&jyI(L;=~V4-
zY-v8U?aPF@!)c@$$cfygg#!-UNJQtn>SH8pY(j!)E6>x-Y;SRuVUhmCIKE;h_r$(|
z`QB!20i1pG*G_j=FT<qnKqwRyE_Xr5{aMp&gV=E6%dQov)1CIwP``KLER2c`*X+!e
z^LuTzOuw)8^AJNMR09mE4^d+0-ayYgTX4MJe{3zcDODw`Iv9BTOra@PYj-C7(jCoq
zHNLn?c%xU!F(sLZ*nCqS!<zpsG#?VjNwid|;GiR1hZvrd3E~+#6a%st=E?p`FZ7dR
zoX;0Wp?>nYbnYy+Z@?j%A8pjl*T1cn<j(%8mD0yJ@K`;&V0ADCNi(3W3PTwo-*-(g
zj&Q-L6NlQjm!W;xVj_U6@AiA;fe6J{H0OP*A{*px*XAsvl?8{vY+?T`is2%_Z*e9C
z`>x(_E?vs`f%kI4C<1{k$2`{ZjQo{>@!sa53uIt$V7J==Z4JbQxDv*&n$cac!?7vB
z&HlTO^EfBFiZ$KuHMsI+2-IqS|9GPqGQ>V5dY38{78kaO+;D0#e>eY`PS5#C2FaB{
zs<q+${))8=HO?z$+Ua-Ywm)ffngi9Q@=e5kdB9vvw<ubWwZh03J}{b%qzl=URx)Vx
z@tHJ32NhtED^V9vTVh&pa<ZQCa;#^NuE-nh<YI5!mDVt*z~RHNZZ8_4`$<R}+3QPH
zC2cB~xb+;!2yS`RI+Q5q&M9`G8|VIp)7JQ7*&#aLNFe?2smT`y-^nI<{CCN`_XV~{
zuQ#9E?Y?%_01}$Wiy<1+nESTvP-VdZfUXy9sV<t1dd^O#z$~ZNCax)wQf7Ciio`va
zE-;U-Xny)ifGw}J?VBo6=*&2ySGw9njjzauyQe>)*sfzzq??N(bZ2t_#V*)`^J2Wr
zzT}a#maU1OWu$W+JDdB=if+mod7j0ya_bKD8|5!I=q|)x$6*zp%Pf={JlhIpMm$Yc
z(q1$v)xwes9a%m&tT-3x>rl-0D;F(wwwH>B>A({cw=QtccDCnQ9;q0M^ft}hd0hKy
z+YZvF(7x+lRy}I`dDqBCm`+{(lXl6Ap1BLZw}A~eE)w(NaQQl>$NN2RTq1WY3J>Sr
zSiOjCA4E&yzi}I-?aqje>J`*=nQK&;SVpDf*o-toN&}k74Ox4}o2ZPwzP7?(mbbQh
z|E&eMxmE67+bejQv~7NMkYbnH!(hc^BCVbD-FP{-1HW?kdP}`QB`#@hHrDL=a5zT&
z2{9rK|EyfPmSXuArH3bE<DX2%CE|M@YLwa&fzEch4gS$-HJltaS(4E#UBbR$TVcVR
zYnvTpCykh^6Z7a&jmD`U4@dZviR_`4BNUkz$k;clxYNnSM^u*=tiMeH7RPc9KOOUw
zNKN`ddAivO%@@%|pxi=t61}oq(d6X3ckEpAu(brY&xl%vJ!ecQtNHtkiYaV6E*nW#
zgR<2%-lM79_Cc6%3klv!q9-dTyerfym2%3p_QMC-<KjYh1j^i)AUwjKIa;w<GQYFC
zzEOxZK~>Xb*Q-aIzxIsP<OXd=1G@y{>JodKw@yWGO@~+!^t_ccn*L^8xenUbJv!EV
z>Gv~YkFe1zJkYv2gX=W-ilRCz$XUcBDAY={q>&D;7#ySSkbX3?U-su73|{f`kyVt<
z6ct97&c+oYs~#lt{&<h^12=?q_6jqlSw0s@q?w-w<`A<jH^|=Q8t>!_s)26u43=~8
ztV(6<IvVi|8kCTbjScmZ&Ba-3k}+lXn{U^gQ->xhO`3L{b6H{C&}m5n^C_@uOZNK`
zcfm`-cRei;w%tC7iKs1H^SLJ)3tY7H@J=hTBK0jrzGe4+2>&htlJrt-J`@hXJu0q$
zg8-yw5WK?17PpNc$vdIsy#<9XX+AD?ok&DX^Mn_dihBoNdV$3RMy7WJpO376$<eBz
zzM>VoPKMEC;eHr!)Nnm1426)zXo|z41%nMP1ynmZ>n(Xg$MUI0gEEp=U5LIYYxY~;
z(N9>>5~O@H1cE~at{<eWQcC7|c8ZIyoog$X`o1*=FPk2%9j0!o;(72KUZ_MA>{P(~
zu8P3C|2p%NW;Yh&F)8wguoJ8`$JD+RwQfSvOYS0seOi{Hn>7PtZeG3@_o6gga_ScL
z{fV`o%i?1rqarbIPR>6SptK4hT(`mdpe6|JAjOF^FXu_6`kZbo1-V4NKOSqZC!~*m
z2o8vmkPD8|<U)I}E#XHx^nMw1@9q(%U&l?0Eo&sxPY>#&U;NS1!NTUohsxN{@A7pU
z5$Koce0I#W8U)S9;V4PyZ=;horQyB$EZ_Lw*0ULE%yX;o5x(w`j(mvjM7qv1boL@^
zQ;Z|_Rrxrm3!Sp!2eP{7-@o9X*yWA3*63F<*V8KQdSi@Zts^d-y%|oiQuA-JAq?+-
zs}kz|xQfp)1amxHzLqPKnid;def~X1tJaz_P<{A_zKKKiK*+@C{b3Ow6VI^UB$xNs
z!E(_=<e&n7%Q`#NT>YPtaUaVh`zyluG+SX(1j;t8`zG)yn0(@cKO{#EIu_5g+CP#}
zy?T{PCUOuw-IE9Rir=kq^7X!aj<41abUoB3M6M_96@IoTZNf!MRo7s$*XMb3BjbuA
z4aa)ac+@AvL;b!`QbAu3VaX|S>th1hC01-KB_|-iGm$Ry1?m*U{_vL)DZ-fG*S(Rd
z$1?VF5w)YUr+NQ1?U#&SXg2OEdy5V54Lt5!Y1Kq(W_jdH4#yq)<B{tU%0&>=Xi9{^
zucCfx`IK1j`Pkn?k#Ff^I>w2tzOj<ov==5tkcS5r-CkAQ5F3TLol4Z*Mz-S)^9t_r
zorFpDrfNc@zP@n|x-mWf_<r@wCnywFT6+J#v%V}ptNL8?T{R|R4rW%S!vWS)iXK|X
z{oP&73c~`Ri3U5*(Ew@KX0+Q>f2QemHW19O=6;WhOGG4#=4tC#R0aW_x3;Y!I%@-6
z-4T2P+u{(l?@uI^O}JyMoaZ?~IlM+>Fdg*N*Lbf4s&HFlbaco2&)4%&5&CeD^uUnt
zB81Z8GUp8jnw>PUxl(Q>nUuN88*(PH<MA?<%z5s|&5uP(TSZTXITSC8CiBEE4r2-^
z)+#jPi{WdbqB`!a`dCTHBwl_&TXT+^$rWaUn>(>7?P!daf%Ejl+?NdWW7pR=N58vl
zkVLk#;aNT5GnOrLpQVY7jq5}@Fs9&J&Q!V}Vz_8Q_WBtuQEp44Rx_2J>0I*?r){TP
z@R%%sgkm47Y0tFPo;s5;5wmyvtE^mk(e&u}<iOq0W+(&wqB%mUNi$iBeZ=tbg~4xy
zF*^(1)e)~<JyJfrKcCZWiU)KClHW(t&jqZdKTmpv!;1R@O}?$_XsgOXAtODlnouuT
z51Jq`dMC44)#%>@1J_gg<u_E~hO6z%>+*hL4zHDaey=hv&wXf1I2ey4HjmkX<OXSe
zC^PMxV3SXumVu%}oXEh)NF`T##@ib;C@APPx6^xec7E6Mmw&izQ_j@ns;(rWj$%xC
zdAEDhV}i^;iK|Ek6(uB~n3O9F6SsS=b=<`t*qJSyoZj|LS;LO{+xpL`<4W;~!4qO4
zD$(OzfzYAERr<GJ&I(oMF3akgI9qR&+X+vdfcAxvdOy}}3#OvJ1w#q$JDW7u{e$wo
z(_8fd$UNidVmie5)5JgJiDp4BQs+$5qX(<+Vh<~*&JR@)^G-{V14M38`WuZrU6P=N
zl-Oe8bNLBVWewLRZ0cEW`6y05Xr7C0;A6ZX$`$sY8}r!7LzH4x(qH*eMWZ_4tj(P!
z`a_4Xntlw8&jT?Y0Uq)yo6Xu9IUwh)-?zRgdZ>QO1wvkXwXkqhcLAhee*>_@I=4F{
zE#-407jr~?6>h&ooEV2qu)aM~>M+&SLeQAo^({$!VBqzFQoC-Ss(jJnm^Z4T>RV>s
z*)8QiPOa`7Y|OlTNP|4{qCp-do?cu`+b*v9er|WVzGaWGiE+yJ$pv7}b8EFPtJnH>
z*Ff?eb_gZRBa^tfJOA!oF`a9BCp;e?<8#7qEc5)yN(Y=wGHa=Nc~-pI1m2j5P=Y$-
zJP<j-oZ+~9`SK1BNf%R@>|N7(mjR>lHP;uzwzfyx{3inTMX*|52K_GF{*flL^1XnQ
zIeZos7r9Mp&Tykv@8w5orb>t-oYK2rCO;&0=b8;9ogbRrpDvDbpxNn`uZJAC`d$uA
zv#S~CXgeNNk<1=hE(fItmHN#uLS#)<FFJQ6g@>KAVqV-Qc;u)GAsFXSbYx;%aSdjU
zvKKH3LcaAZ;E~>(@)<_vc#L+N5>XK)^j=sGygEXW#VnPJ`ryt_n26H;+u(XJblfi?
ze(QzY5QPh@oIR*ld^=w-#S!5M8M<B@k5C$n@9UD#vOXRxjvQ)Zs}P=+bqXU~G4c_n
z{%+mIOv!3fs{Hk)wrF_1-uS3E^t{fQ-Iw7pQ@ysouud(J$ct)q=@5ryN{vHBlvu^G
z+oSI3vK8GY&(qfpkLU-AgmgdiSoDjbLAme9vLVPQZrADEJ-!-vW@evB75MUsrIg>g
zh%WCeEwiW+)##G3%Ak0i9kzYhRFLlVR$#n?+NsIj?JUBikO)FS;$cFZ_`9Bj`7(cB
z(B+o5N-YuU&Ir-+@?c792$vPa>XsXwsmhNKu$97TBMaSbrF(vMpc}2xPEJTLjbdjp
z9Tp(<1{8j(U`bh7%77OSItDp*Msgq?OF<;5G$Z|9CpNIN!08FhkG@{71eMe5VmTOz
ztgm^zLAAAbU-Kn|n251d7QMH#9hOJ28e%3!oJ6~CN{3CEmAM1rg8+r%E2W}-Wx+)o
zYf^iy8U3cyonLG@duoJD7YC2TtBW6v>}2Q;B(UjgWML@dQ1GZf$9RsVomFyP(@9Iy
zGe>n^1lz{FSHi$lDsH7?QNNiS+=18YePZ}^2Py$?2)22C)uuMJk$KHCMj_<h@zKt4
zq5YY^Zh2w4YR{7v&VhGokWu@2J(~|})*wVI2!kT9R631?lZ50`XU_`I5kCO3GZ30S
zvU?KBm{eQNM8R)Qmye}AUAnd&FI3w*?@i8hkXTF<K5VamWpC~j4o{2<<H75Z$w{Y!
zB*!w{=6a_Ku5B$!%ZCPJ3)M1U@9Al7ys}wpxI2^MmwK}+C$4idwN#{5qE`bJ`r)yJ
zC{PdiQ@9+H?6f{9m1#9TcG;(Qd<&1ERnt*O;pBOWFJnw;9j^w)GIDor$K5KMB~SiV
zH6RZ(8_lK`Y@y6*mh)R&l(sKI=|QNkL~j?@`Cw9^v*-JB9N?qw3xom^ArfOrRSS~T
zr(ME%wQHsj=H4TN+9=kPm7biHiS#&)On~iF10*{!5=GnWPLT}!GRgEMiuSnuo#_e5
z0fkoxm}^UFt}O++WKT4d7G8Fc_l|%j0A|AxU;Xu8Rz)4F6x*2BSs)`K_N8(=sTL~N
ziw>A`VFJ-sfoAnA(AUKvs~`L9vFCSN`jWxSxNP)p<ap7U0T}ad<YZW6B3qy|1Gp*R
z_uCoEJ(_8p>Kn6P?UZ1(m_$NC`dH&WvwhTEtksz5^m@iTD?B{h)^eGqZ0Toa@VD;k
zlUIO=6Hov2;RYAjfBO6TKLKLy+LF~AP&c!=^cphCl@%!E!oa|Q^xb%~y*y$s0G@ZX
zwLOj?U9whhg+wyvsP13UZgw>qOqnUs^r&<?XaHLy`H+?eK*C1M<#62Q^RUoxF<rga
zit>8)_U`W0`X0o((R8Xzzpqv6%S7sOY6Tx)Fi6C>TG_7Br>BfLc#u;yPO_vsX@$D}
z_DH6S4W{fNwJG8Vuff9%6+ZCh-+m}NSS!Xt#Z*vfTfI1LhY1<f<#<~D_3(Pmd9p~&
zYds%b_-$`Iqm7Z###68oo@~myk)@}N{39`-^?C**w%>&Cho*lyTKq)md>4KI6!Y0s
z2z06@CR>8Oa2SdCaf7!;ssNSxOD;egs2>@$xqV{%t-w|nI=Lu=Zh2^R2~gSt$Kuh>
z*joVq18VDi0MqM$MHYl$uE$~2{#d<B%;BG#JG#;#Haj=d{rk6U3Ke%#B>A_Fm4l^L
zo57U&{&67X&->Wu<TzVJ{nKN$^8`@Wz7ukqZ}#H>VvB#EnA>u!SE=S=1e)#BMYs*T
zqQJ}MW^^6UaGoliaXu+HDByZCE+D@kBcu76I=w*e1cb2Qp8**q6|6dLV1A(FOG$C(
zD=#Ow$p>md9O#=x6K#{j`NY(P=6zuPu!n<ycnoOb{v|oYMp;#q(x+qZ>Y7wn2hDD2
zYAT*t77`+Lu{+Tn`ubseq$5-Vh`L7+Y#X%2#b5Fk6%}o9sC@hgWS^Sg(zB1FM5Cjl
zso^Y)jVbewAMTtVgL44mQJ$k0%hl}+fqHU7w7IFNZabdG^R&)nNC()bhE6t2Z}|B5
zIs(GpF_kLTS18O>xc2t;-a8Mv-5x(eIlG<#8&!8G9@t35d;OZC$+Zd}fZf+s8}&Xc
za!$|Hn#>O=snycaM?gY6{}UiZWBlZiiRf=%Z+YGQo!F=^ZX<x2VsCj_VB~0<=?C-(
z<H*>U?z9@;e`^6h%;}ce+uNx&i&d+WY%@bc``dhc3)RX<yW%5`D?>E#<D#Qqee9NE
z+G5lt<Gk5ImZhrh`;uqXx2ayK@I!PcjgOd9Uszv1%HQ8VZ%ggb!th>7M&=LhANP^{
zqPJ9Auw?IF^SN(7KD5rf<@kG!ZT$PSHoh?wocGMHLDfB(C#MVJ;txEH*LBw`<N-T-
z@%GNnILh+!@>FW2^NE$##Uwh-t}{QxhLrN;K09MkKHQ;BSA9N<$n@3z$k))|S)kk6
zlJOpyo0}W)uq}od?B!<(TPtIhRi?N)?kO~ZFoda4BLujcono7GPt4*Po2BrOM3bSk
zXeLq|P&{g=+8i&F9xb&#od+qd5iiWoPnK#A!~&=yB^6cRfA^Kj6qbXXf9w}9BW15|
z&DWpRfh5V3L+iu#`c;2KYz0$*svP)AmtOL*dKDC?Z{<=nE54Xr9rA)$k$U3`U@Oo%
zG;RlKaMOvx3xLT6h{Jl*l`PRPd?g8=I7SABa+9k?SY+vMs02*z*Dq;{xT*h83)OBt
z;6cJcL(AuX%#(fn`t<@3$(mVMJlU<_FeKO)nOIu#n2oLj$udYHNbUs+`%lJ`ZXh@V
zq{3$$KW<2UqgKjg`g_+QsGwU@AqQh?Yp;OUfl@kQd;R=!vZPqS+NP4v;CCqR=heFJ
zwQ`~gkFLu>p`nCq?o=?f54RWT?~Tl*rTcfr@@kHzf9JTEsjH|sb{<FC8xLJvJ(XKO
z%+jhcY+2MNmLGu2Zfa^O)ldiG(&<?~%{p68YiEBh`%PtF(V?fe8UE?tr6MTGg^E|i
zu0Ni_dA7Q?225BIq)f5tJT71LcL4FeOtYGjlM|3UL(c!a`|rg4N1uwCn(piEH<1b0
zfQ195>&wS2IRIeA#A4KLxbH%|13gN2SJ%U(xv9Ci-GaUmcwDeRPky>#V(SJ{L#e3?
z_&oYCF)>Y9*w`-PnJr9Bhwp*|13$rJ7HP4uu=q9pR!;~Imj!Uvt~R7#NP{)=($aJU
z7OAs?9a#eNe<y-g-5|xsmrR>9ta6U`N$A%>1gY=$*W9u}G6=4q!=j_6=5*TsqOGmX
z%{>R4xQ2V^yHlyk@QCn#SUZtX9)DPvp1r!YqtY>g5u4c|?1Oso0yoA`Lcs?E0l%QU
zb&Tfk)snDBAtXsCkb(N10>Ze-Ghq#cbWB#7l!1GrfGbS_bkAC?o(Djgjxf%yGLmr}
zE#v@u+^Fx_6g^dne{d7}x4n9A_v|T$T-fWADN^MLm?(gby{gK=WD6B3<IQ!LQpN>$
zDTaY!X80!3--8N^^*MZzlq^2-t(L|NCWC;b((ojQz>bcvt{~lgh`artzseiTx*Ea}
zuXGqm5u+=dBY})D-zktd#OYSvZub3m+(6~+#<`1mGzF1XB*=H(`Ow^naIKB%nMVw;
ze~;wV|8prVgFR1Zaq9@S_J;fy#PSmhYqijaGZ*HPr=W)u242?s+w8^yiO*4XGzAjn
zW`9op9sN{HQBbMe9V(}nz9^LAZoyolrx8&)+ZOqqfNJY!<e%@D;0x@maA?&`3p3Qj
zG$oS%o{+%f8xfe!+vbp4>!Y(z%`b=CvD=!xAcRAs+W4-f{(Y}h#%K^wf6q>!z#9Vh
z?@thtFwkxPev+plf%tdw-inZr|I;R85MFx!>lreX1t9*NAw<rL7oYyUhYIWe*N-F_
zgn$U9wR+$}^2Fie1&8#ei-7$9IL9nhZ$}3QWMpK2snu0|e)sDLppX7{h7gY!=x}Xd
z)_pKp;&yooK)9eObCI;A|GO&8l!SzYhKAgfl$6lW;_NrFMi1;cz>G;r+1b?vnAF&!
zC@L`rxzdU6F&~nW(<`g0`W0KO7jD7W1bSOIrhm5yGX@0x)znxU3ah(+lvWm2*VLr(
z^@^;k^NXpf%J%b%j4W?``o6tQMX8vD<V~wmC_RMv(DFqu-DnhyUG(&z{PG;@FWx%p
zY7-R|Ra6{prw|nM0l0ka28Y<l$a>F(_fH|C6ZA#d+1s0&07cK|dcJMHH3$m>^RLsR
zic?lrj)_see`sO8o*Kyv>-77A9~cs*FgBc3<)y6r=2dEY19DVh;qLZ`L48Dm`@`-?
zV{Kwn6Jb{y7gs~^@?Z+5jlr3~HPfdy5*pAI&W7SuB2?wiRBk0C>t^`?4E$gsbD3U;
z=)WcqOws#5Lt7y12g6Kd)c(O&MOisECMIzkbF$!!*Y$jVqA0$gU?+w;x(<T@_A#30
zIQs2(9C}R>+_1pFjIGCqyI}>$OD%xuR{tSd9T;f)?>p^6J=nFd*dx2rGWY)m8%wVy
z==W9#M-}#ZqYnq%40h{}I1Kk4JhmX!ur?x}YBBGp#Z;Qd9m+c$uG+L8YmJmLNrXIK
zre^@H&SDB+sNW>SkB(d&@w;9Px~#N|eD$uEO>ICWo@F!d?1T7D!2Y;1w)O0Lao7p2
ztnBlF`nJBlUS|&6G2HIgRP<+qsg1e0$U7=vTpg0Z=l5*?A@*Hco7Z}=X(7Xh`rnf@
zqM$Yv82ZvcK3K%>TS1Y<dvxkzi0Op|kNG+#V6PiceB9a+GRZ6~EX>Ung#r<dAjlD<
ziJTlC*SX&)UhJ}>5c9Q9>?|}M0V8Nrb1R6MX%_Si0P8%fy*W8KX4r?L`XVA-b{prw
z@hN7u0%kJj`!g0Ns}#zzddHxkBw#gnU+*DJsxs(iND|S}NuzW;S~S?`op5rhVFt$N
zurOYa+v17}s>-v!4@3@V>F(y{2)>GRtgMM4t-?Yvc>;jo4eYhWmWvZqu!mD+Ahu#k
z7G%CRyG^aH8^-a21_#WbSfMC{)BJ9&)2KxAOCXa6SzJOwaZ*i0gyQ{syZ!0UgM-As
zzY{0N#W{f~3pmfMI(IM}0ee!j$DVixkiceU#KR`Bn1OMvy4*m_{+GMD`Zl=g`dj6+
zsHh5)q0+#>Kwx2wrT#HMk@K%tdjq6AKO!I*7NVk~lqU=m0|Vbf?XRAW3=PGvcIf6h
zff@#zK1ohu7P!I6-KC_Zk<g+HQc;QdY@uwHTCiTd8XFx2nx=P5OfI+Q)FQ3QL^wEN
z(ROY@--%P1O`Nm6<6zAvizS%(Jns`|flVeT;}lGNs33rIXJ&Ii3!mM3b>}Ab@40wy
zi%UwbhKuD8vO=IQUTVbPErV!LKsQ%3XXmfIx0)=5SzGAMhqxlnT6X#!YUVN}Av17&
zhW6$g#ZBEl%Ufz{CgMty7;$l1VujydG-roW&cMYcv06y)7$K|yT7#^_W*Tqf7Jnx4
zzn)7(qH_vD$sD-5T4-o`F`>31;dH9aFTgSqyUn7wAUUmJ4ErMhfP>nlUP1CDD2%wD
zD#!4HLqfpszY<t2Hr0QM0(A=T{01QJfuIrbNSA@6YRxLsKYtI9fjc}ok_iWeMs_Rv
z^P{%*K))+BE$znS0G3GW+HaZZRxd{9a%*(Ja_92TJ=>(uSIRrQy&ymwzlm#pI0H!w
z;11g#&ffq}6CS&D)2Gqh2@5MrBH+Wz6@vKyYQUBjKBSECVfNzD!XFxoSES5VlP%^0
zu+Ke6hUvj#<J4NwTVALA*)E9pSdxsxE)ExTfu8Kv^KHSs;6@CkasvaE-&}183o9#d
zGe<qS0J}Ws$n~wPChG0CdSk<Y3ynIV%5iTKFwavt?H^~D?|`F_Uj1D<#xjy5?Lo!H
z1Zy>-vTm8Xh-=IQdrVxM9)<i<<XBkYB>G`U_+pH8Jwm&q!#PrbjOKOiVn$Gq1PJkQ
z3|=2DtEqAF8D#j=3XmfzMXF&~q&jd2TpNYTWktnVY3aA)0kO*C(?_6bW%EP3z~u1k
ziud&>zQ)twjI*f{ND>iJ42Fad*fIF@>7DC&0_4LjG7(1vtS2KX9Vw}v`D_Fg4NV0<
z0Jia3T<&*>g#!b(jJCGNNfd=q72?mO>u<^`An~wRqr~-sZUao&m1R*ic`v)yH#W=^
z5D*Yp=0Tn0`EXaMFA<8B1W0>YnmXUX*Ur56M;lcd4@7F^5pz2kP87x#_l#UgE=d9p
z5iJQ878Zi9lH!+zGLXrzf4Wfwy0a#)rGR9bw{OL;?Dk?1CCUEPgX)ka(@wKP-DlT_
z6E|gLrLiYkDM?AYYa33N$D6|>UaCUM#fk>MM-RlDOKn}Qf<-TAal;at)TP9}2YmQ?
zKlFO>eqfCm*&=2{yX9g$cFZk}zo7#`R;yJuV~AVT7R;P=>ufXAh-^GYM@K<NBSUfi
ztsh|k1ZzzdYmfsW;I<@5V=hQ~u~~En6?HL5I8jcRk=kK1X3vp_tLp}BSX#@+O6lL_
zeR4;->AY2(d<>M|HJnnaYU<5Ar%vha=xNN8ikwqh9qgtMx%cLGZ4VCGHbtz{Q`8^F
zZAP80v;FsQLg7))4Im)o^+&=J)4!|n(GDeWR%)DWrt^E0D*Ol#^he0O*i%@Ub3R&F
zSjhjWd13BU;{<nkbhlw=>f2(lRoe1!``MW@EI4?!$!slcp>gJj%l3FU<CpJ&r4=YM
z#6DMdvG$>N1ZZgL7>MZi3}<4xjR}D8LB1w0Myfn$(s&}Ueiiran;4N)0;k1fQ9O^!
zc;-Wj+ZD0H(d0#WYU;sScQ8V5F7ob{YCV{N$|SLY6}7j0#JnCIOVj*A3VI802}X;D
zfvX?DS`wSpEQ4-KRMyfDu_xK{zH4W*+pujl6_o=p#=)TyS&wApBx)RiX>xaG=k(lD
zQ>3E1J5QGGHE${LQfVT${=)r8w^M1x_~dz)R#z9|iJW4U`GieeLc;L|d6}G}h|xqj
zvzn+#fR*NZy^gGMy<d<9CdJwL0h9{jPaWNrst=pRFX=(K0+J`<;^NLfd<6K3a)a(m
zKyvDheUWmjAkO8m{S)}no8<7H8apZ8P!22!EG_@;T8oz<u(g~j?4_)}MM-Z5okMW*
zuMYvm+O>Rq3~67BV#Z_mjGOCDTbc(($HofYF|b*WZ4N-eqV&6QDk>_1iDp*D=Yib`
z%y!m%wX0<xs47Frm5QZ_8g1@Ai>cdlHn;0#pMhq#qO_XB|JDLF`gX81&S}x`@wx2Q
z#aE(M$i@7i;kHZ`9rxI)tfta7w6?+lM6Ji->N_9Wt@zB6e4X2zwY4>%c|^v=ak*Ur
zrc^Wl@qm=Mr65l)En(s7Y>8LZRaN1yxyzjnxDYbI62D@;%Nwd4B$~wHMJrjojvi{M
z$)i>wGg|soJI+aINy(Rp@JR5tCo?w#zH{-)6V+5Vq8mj{X%-6wr~@q*+w`nq@0CYe
z?lS6&u1Xf%f+~t<8*aZ+C>N+Y?`F{xpsLHaX_P5gxN6f|>7?0?kLSeP?G78Dl?eD6
zALM5{`EDv<TQ53n&!)t>g%(br)A{I_js%b=qw1ztyT@lL{C24s9eocaI-p*^MmR8t
zXr#hgQPw0;0!x&>l$U$lz+0x%NLq5g5#0!N-vW1Yr^8dOBq35_+)Vj#fN?N9R@z(=
zYeHifu<QV4faminbdI}j)0dTv4ZyM~0NwLw<fjiGK9mju=n$CBLqS0?eysbXuiuU}
zn8ez*u#l=h4i+NDK7zoe42ddeuAYnQ6N6ta<6w!X(qw3{)yqp<JkZy-17t;2mO=T~
zVft}%a)Nq%sqVAyS6iBS5Z?jpuBL5EOI~2vu3lwrxYr9<nI~<*XefgBuE@fimb%E(
zwhHxr<@KxAHzPY;mnviFe09|MZLA{Z@5WPl@szRCYP-G5i=0w*>mJ{|CPc^FjV<Fa
zpM7sGF2$a1x>%aG+&qjJmR6I}Yf?5}^23BAUrr_-CHJLh9^;It4AY(K=44utav68n
z6ON#SC8rAvsA6*@#&QSJ_*~wbuLm-uawFrv%K$ZJo@{!im=QTSevVMmIY>{H<ayNR
z97u9J95tF9rv`bm_op|NMMZlJ)fOPP$855ZUCn2-o!j}y$?4|&(D$t7U~Xe$qyCi9
z`Vg#OXg3>|6gA!zO`$9_US+iFH22T9dQOau{b);u)vPsBYW4I5SVES8k724MT1({>
zmnV06o+o4*DFw2CKw6grFJvu4PfwGVkP?t5ohr(>P+-4xH3(9RIC`$PiVkNhyZ;~B
z-YPDuF8US*5d*{o5fBiRF6ojk>6Qi&>Fx$mKm`GXhnDV^?w0QE?(VKL)%X9M@7$cb
z!<GKviM{t)YtA{wm}4&NVW;QYj<IaMm|r)Ws9=9P{R}7kn?~L$vr&JR+7`?;{D`LC
z8C`C%68LsMyTesA)8C(#CPWyUPK6(3yrq}fXz&%J2KIznDMy5j(qUm2h5iJbZnOOq
zW?_>IB%T*2pC&78aoLS9gQ5S~u%%a*X?vj0c=G%t(*Vn<?CZN}*hrbmxj%{jw5I1i
z{IXlAr^n^zM+Nc0wfQ@rV+;Y(Ga@3<2Rg-<37^hgHF*kWqGUKsSLl`k7q6a>knL>_
zC1s}fRGsnqJlWFZiM&rZmUOh8?JD9_S~_0s7-w?g^Jpo1F1xs&R?V&b8`dtG*qadj
zcRKM-_o4)I#Bp9lyvRv4QBQC)?R#uzpL4N&$doN>{u@CuL*(&T|K9K4f|3#C(dg`}
zOeTgb?}@#pmhPI1N_>lX=}d#oxc`)CvOwkY&0;!DPJ0=psqgPr)~Pbnk{)4Bw_$|#
z3`mPf+}iJ2zV09Iq#DBz?!gf(E+&?iYWRy-7O*c43-J}L8GauR7<VYGO*3b!RqO<l
zbKqP}7|w%4VQ_G8^xW41fk2R7hool_;$%f-B`}I$-eTw@PGJF==tyU~ybTOG<8;4t
zK|%Qh_^XJJP){ICHw@FoC+|*5gM>-z*IN&mfam9j;k5wr`*AdC)q-Wf%1ad!c3}*s
z+>NomzMwb3nq>eWW~O?|Os_2rwwM?sghZ7z@}f>vyUiq{Ma&jj-<-$7Orai6Oiiql
zOrJ``5bEqA7!Ujrj7RVIz`k2hNYc9Qr>%n9+-y%5;nP#Uu+b7l{YIWT2D8C*pGM~O
zP1Ww5A0GTfw9Fc)Lb|o&9aLm72YDIeql{a0?@rOu&22Yq_|;AH^R*#w6blL>lPWM6
z$uk}@V=~bjjGS#LJ6H{8F>&bF<?!<T=B{l7b9tnm@<bn5tq$c#<IHjL{~!uycXe6|
zslcm(1U{Oz`t4xbdi#oeD6MAf_uc+*#&J=Xva&LrCO<0q<n|x+pRs}wsp@JXVBKU-
zrIh*hd{5Z0renY_?-Qn?*v@lNNJ3j#GSbqr)XG_?nM~S3vY5V>FM(a1EPcYKJF48l
zZEZWmrX(anuCA_PEvo93PJ4?Ow{L&7Ug{Vt-uh*{)Om4sh=Idl(lz<BYp19vPY!~#
zu3n>`{}Xy*@|W8iY9f57w$U-1CWvba@`}FSzD*Ct9QqqPgSS*FUS}2;r^#Xve@s_q
zZf)Mw8I>R$(7CI+?_VO+LuPT&*wOvH+ft|TRZ;##@fGjhVu!hU@i{mYNG3hofwDW(
z;Oj1TP3i4>_c$$QpP-OSa#uRrUJVL027FetSr+147|Dr8d{2BWsjAMO_meNlpX;-r
z_vagz&0mNvD!2kRW*2Hx(H6!bpR?U~wRJ0|?Mz9Wg}`{YqQ0Ip6t8gkb+z~BVmd#c
zTM42F=?v4;J%vZNEx&TDEy<~i)iVl9oXwsu*6rXkt?!@i<k66+*{-{;%xCAFdV`My
zrczUbaJjo%N@h9%VH0P$N9)B!)yUXnoR+(EaX{KR`m|Ti*bhXYzyF;j;X<2z;yM9O
zDnU;#1H;e-?^2^y%2iDD+&ZNkf-R#Muy0#r3-))CJ3XrLK*3z@CC5KFhx`(XCrB#W
zkJYeSvHCnT(PSttD{NLCqSlWyfEyvT@@r+~Fz{zIMUsksbpq~fP|L`!Q-+E0QIj~V
zC>EKHH9ClNuN&%up@NQ?nbZSj)XIGcLKA`kgNey1SMmDsfi|J>^2yTrNauY*PKWiM
z$O(FGwzh8XtfO{osMX}pcXwdIG|Kx0EOOcQGl`EV9Ra2($Q+vjO}ed0Om=R@Q<<i$
zZjUsCH@2Azk(vF9G)}93<!7rG+NoUlG}-4Qb1<PZS5FF%F1TZG9^gjkI4@oj`>!h#
z;5-luYV1%~e7?tY9SMmXgFIxcRHtchV=OCkvtX;cc44lm(GORSeZi0dsmlInbCb)t
z$ZTZxd<OeSJE=c6AV3-nB>m+ncqAw~v<1A!ODv;=4L^GXMgb?}zSrm>EWpoCDm|+!
zNYR~itAg+12G9e^Z_R=01B1+$Jnqpu9Ltn+%A>z#o|Avvm>8q}?k>3i-jWnH`qljT
z5-}WJ<;0;6n+v#UB3bRNW;Mbd<Kc-sSm`AZFX0aJgjr<a4@VP({i<A69&UWP`;=*T
zb`@&|cv?YA&a6X7&$?nbo3eONPYPm2ii=g$)t_RmF0Xd}WIpR}31aUwd-smt*m-@p
zr+jd5U$)!7gA5yc^eY38yMJH}6DO6G&;ukC1plPw=6FqUj+Uw&ll&XmHUcE23|-(V
zY0Sbt4u4V$g~=znotv!~GC!XYQJkz)qOjuP&P(4O*!6B?Qtyo2y+=q#drD#!Gl_Py
z2AQX#bXiG4qT*dJE)y>i2CJxI)JJ(ur^AUgGE<HtwY-(#n<CC=Sv))C`NVg-2=9Vk
zWybrt!tP;k)K+n(K9|K>cyvf^(M~SCO4(A9EN#eR1#$7VLSynCsPE$SB_$;{o8LV~
z>?UcsP*G8tAy`x~ks>1^&?sFNV&><TmdG3y)0s_%Wn`K<JN?(N=!l4Bz$nagwBUi;
zR{&UgJjMW-K)0Vz2csft<3Kg$(brH<1~Jqao_EoJ5|YKdZpL04efNl~O25#Iy&l&V
zZ^(Q!M6R$n=cj|knOsQn6C48m+sd`-2-d|LRjv!RZo)U^pHv$&kzf^8)icl%v81a;
z=9Sxwi$HZfI$q}1&NjckDEA?{Y}cR*O0*siJh)rgF+cwR#0dVtz>54C1A*t`g=nll
z10w=sF5i6o^ojgY#FzpHwG?`BZfTR>==dB)e@4s$q&^~(?DIkt{4?F^3M?UTR9U{|
z@K!H?-!8yp?-5cEz#A4QAY4mYy8VdED$WEFD<>8f`c49*Ab?b|RLVPRYGNS^$Hm26
zT<S0$Om9K^!tKE@IyzRgH7%@GWFq7nf06N&ipTwM9jF{cLQ$D@)8Jtbs`VbiBs`ed
z8|g``%&m_CA!nA%Xb<ROMkTA?AiGVWxI3T|dOW&g?V)QW7ynky%8J;&s-VPEkmHP9
zTy^wH^Ywjk@oiR=Z!!9FH%zi}ghh5ZJQI!`H_m?`xEQl#a||Q1xu?eMv%-TTB6jOK
zTbtUlpdr8(x5#9y@T%`7tET{dAa9S0f@h#nV-XQ~O|iDGKjyGS=ymxo@yXc-jh95M
z!5MFuR<vfPYsSvI7X^Q5Kl{Ufy@Vd$h;lz<{5DL9c<mW+P+dJm>^S#7A_xgO)7tK;
z6nsLcln3*X$x<?1v6tRR2GY^*EV0tQQh$H$TDiQl-I;XTdQc9}!C}ejFqvGUd(t!F
zz3>_qQ^k<9qob9Ry<9JY0uS?^`3tWp6RVJo)1_CV`G^7=vE44A+xJkAcn!Og#E00e
zm+s=e{NTMcHvA2jYjkAck*PgQmMk`yxkmYu(fIHL9eaHvhR0?5S-=7q7fOY(rNJO?
zo9pT_21cX5d@QkAl_|-|0cs@GH`84<VB?}9f3JRnx&%ki?U4M5dp@~3qvS8Hi|Td!
zkBPcw!iKI-wh&_$X6$!!DE8g(ad9K&tY|e$N{kL7%qE<>qXQ!&BNOH#UtOCXcOsIN
zX?GAZL$u8<+C3*hv&ZYt;B;yqhGfTlD%W}>Z(*X$E^Z&?%o*0|IWvLQBxj}5Pka0+
z^UZzhH*r?X0dy68w)68?Hm$g?ie@yX#deJP1~q~e`xA&AA1GkOWq<ILeKLJ?VO$fi
z#Y#)CAa*?;;Go{Q!G*bfgYJTfUtiJ5A71WX7RKjMDwbHd-1N$W!pmT^EHb#kkWV=D
z(bIhaX`X~WQuitI{YNU*mTN;@4oa3X#1V2{m*Mu*<VsZ!JKCbi)vhm-CjhSrH5CmF
z4Qllz#4PZCDh>&GY}&iLXVRN^Th|h&y6=`)&F1VB(zC1UBX6CCn9enq?XG=uUk=r*
z8y`Pk?)i4_r~f6|5tg*Itk<jb(z3E%Tq`fceY5UZWGc!7+`>&}hq@p5ZRZt^kuIYp
z5dP)&9zDYD>cvc3U@{t6`Bcxy*T~FCNM~;=xe*!aZ#|RyF;I+Oof=;|&I?oo2-eKm
zh0QvLi$)xDy}0L8!UL<_wNVBA3ZfJgwtfu#PF|tmBF@PTEC#(H@tZ(YT)vY8G73S8
z&uO2RUs#woJK?yq*ntOK)T=yik%ZF0)3BtgT6twKD-x!)!Ew;aiR5;$OVW_L#$pmn
zVnMRIyDJhvc<=7r<hNZb8)`nP6zHd?%ydo0ty5I@U$~+B_`3!WFnT{s=kxGj8ZA5M
zO6<KW{y$hiUuzw|K*msWiM2VFn<lHs*741e07A~zs0QKB2ZqwmNufI%TTb=3r~dQC
zXkms%`C**E&3uWZPrEc~h4HTUoX#-2!5LZe*v69Y)%yP653A<35ZW1jGqEe+au!2|
zU<%YrrdJMcdAJN{p&atQi&y0`B3H|>=a|UrDb~)Vgd|3WhCjvmYNK06=7Q9eQX!qg
z=GxXV2{uc$n^VlJkLVt&%ty23<CAg6ICiI#d9%t!Q&rp5ER|$x5?iHpw!Un<t!aap
zxS*vRF6BZ!6v>S|tc-0p?Rx%eE1?F9z4%b-&?&`PskjQ@bD@Y8lH5v?V4oW2>7f!6
z-SIz^Z9hNxBye=86H&A>SfZ<+PxOdF_;lK!Yar2KG4iv)=2(a{=2{4a{36V<N5`gp
z%4G1}%L|n&2b}6SI3nC)0h}!ZuUaAjZzi+x<8_tEEMvOcwhm#0m_OtMCF8bWpMe6*
zc4t;-Chft42LMzjpn(l;;-@B<fPQpzWZs|pKoSgfll7epIWVI{m{s3`4WXge3d!Nt
zlytC)Y#g1GCZFN)d_%t!Wn}+qud_q_BEI@$b-aZ_Dn(J!8+wcVcF2iZ&w0+Gyyno=
zP=$g$bo5q2GTs^}xE}6m%;{yt@8)Q63krGm<YLX?9vBZA_m&QIO{P~lmr;^a-h0BH
zpt|Axsi~vGYS=4C%{h4>;Q)uhP1CDYQLSK0rC3}1PifzRck?q;)G=(1t*4unT+T<8
z?pJ2Nx3zVezS&vZa#?KO$LdXla?Fa%cfo_WWh7tkaJgsi)GrbtOh9ine{u63g@amU
z;1G6yzP@zYHJWPMNR|ywo8eO9qb2DW&1$Cxx3*Gi{S}M7j>uxY&IsG%<{nZ>cg+d`
z5%{y^*X$dc6V4Km^v{b)x=**W1-LCg9ukAunAK^!N~`nI-~*;3AAC;R-oc(yhZ+75
zQS(VQ8K!dQF3og{<?SD@<2akkT+W9p9QSTuI4JpPRM~{5Z;ZLe8WkE9upTsT?krF#
zSv!{kuFP3s`IE(!!>bP#d}v_c?&W1vHSZ+fHZsc15Sol8pU2nUewf`n|B*$zrHS!`
z*?Q1N16P%U>@Yj-8`WG)qLaf}UJc=7a>pncDd~7FTkzP!Xzmh2*A0nC+KUiVE_Rn$
zexIK)<JEi%h@k_kGdAtbGF>&PK^9X>C<c(Kw``tnj{l$u43yh@vlUZ)_~B!G?+#Z+
zUw+j0z4aLyu|2fx+(et)(6bcHPmM<eEF(>QeuLqWLd8FcP<iT(dMK{hU>1o45FpSr
z!DSqTB;?;fF}UiDfmf3DT=-jw>)9bBM}Sso8yF139QJXi_SOz4c@6OPRtGZRSMt}L
z*OdpQF5wk=IywS9%%;y)lJwidc6_Qe5{D`w^?;pVnEfhU_N7DytMj1=?!e$6I7>58
zQ6j`9^4+A2taiV&_$Jd#j^^o@e_pyrOVC!*OqNg4sa!DgdLg|~dTZ+b{8nUBZ$+iL
zG`_OAOpn9NX+2|z*}Z${RaQ=P!A*i9(Zl)PcMBz=t3Be?XOhKf_8_&yh$zHka|$_2
zv5%`|AJ^q7K9uM=8(=)6IE^ZFQOYlx$jZi=Sc0|M-~rVOX8+3Ss+?+YbdKu#af6}V
zMnHYC04R_pO0vk&EZuDrih5=FZgGFbM@$TJN-j}^-Y6%U3#{pcgW}`kosL#<u<%VC
zFK(c^Axbw)2dTK#(x1g}mzM0)uN?rS0Q<eMu_1eLiv9<q@!}n{ETt^Xe3u3vuF{w+
z;hRStPKQu$7gg!cE$?UN{dnMY;W%D!(77>YgLw(yc8>X=-*GL<P3jyCyjSm=t1iw6
zd5X>&0~FXJS<I+Ya?H<;={GomI%In{{8C=NZ|JVM3BjxVgPl0Vj*W%oKJH)cQxS!0
z>fG)l1-flewgZnKv@kgM29c41@+e~{Q(Guw*^KVCjNB7EC2L!n-fy~YU&LQGw^00U
z6uga1NuKswFIrWirR*-(O}Z$KXU^to*C^9*F`W~WFSnjz85-iSJ2tG7<;fBIf7GrG
z4jJ)_Dh<r@a%OFRgm^6``jwu3Q%~wCS_rw^Xo<o2R@78{mKIre3KG`~T|N;UAj7X?
zkDvtsB`+)6vVj)<Dls`(j=Iw2#0paTQMdV?AD@6d^!M+CN;R*--qF!9LfnGL(rh3x
zDQRUpYx-K`)HYd6G@{@R^M^0Lrq_c~DJU~ig}gr}Em=j$*%go*VX5bs)M2I}Hwo%%
z-DOVfM<BF{!k>;YHVpW*rhlYuMMjEEOu%QXZeL5^%~3D4im58OyF4W=th%^AlHaKK
z?HbB8<ys2L-R$EI`l=*R%qO5L%H<IlQK-G!5}4HXm|EQ+R?ELmHCs?vm^7x+qq!$K
z{v$ug0nZo<ZW51Ae0@1;|1k5(+!PB1aPvGdNX5l-TU&G`HsJzm5}ZOUC(A_w(o-@D
zXG<kFp2WU?EiT#d@Zt?i8na_<vdEjzYBtW00oFuBXv$g>@DPD>3lW&1FBbaqWkW*S
z{PRo!?5@K$f4^n-W%sk)Q8w1a0RGcct`7QB-E&$Tx96u=hiw>lOzBWBUZc0=MKx!s
zJ|sL74-9%}{ml)hnnKtU%VaJ>O|5mKb=&1oD_F-lxzT$W8!F>U$KCm_R7x}k$ICzJ
ztFbQv$7z#0oaHVH4SHr5H#j-%*By?h-41Y>L6~8FbzW-mJ^ZTb<=n|IVVlm8fJ4KR
zs|f87p3;qtFYmq3(U4#AiZ1Ld)B_BrYO_3$EY34JcLj-F(h1QUPvUw3;(GT7w;W5c
z%hgW_!LI+Rz8U8a!BGP;GuG^>?|~5yA3kmO$$&$sGltWCcD{vCzXR>goeFT}twY_z
z!6f~84dc7w&MVY1o6~yvSaEh2CnTipd&iaXu``69<YWJdSdh?eRPz4SBk<A(2L=+;
z($>aeCfxWgQk;OQiTh8eKpq0qCK3~qa1ihMksjtxh|d<!U>f`-g2|IXpZ4O#{d|N`
zKhov7o&2@te>x#vdaTEfLAlTwiz%<zcMJWj?+g$9KatRfca&UQ6H`~8BfKAfk`t9o
z_*Pv__z3?$F_DamkcbFO1(AF9I~E~3ME(fpffUAvuXj6BK!pl2o_92ql!0=!x^0SI
z?%b0Ul@yf{6B8HL-KKkp9r`^mB;-2+P_dNp9D@WcsK)+&OCKII&*ix6Yzn%Z)O1oR
zim$wjQ;5L8z_76U*w{;phv8V)3h@424-SkttE+obV=nN2D3*?kUB>G#6`A$^igu1s
z{<pH}z7Ep1dt>8(x(3fbJ<W0PGnD_U*y&j(nnyvw{&cN?uC8uALR?hTcDdWKH?d`3
zqW-@Z#-?J5-6$~~vx6=+P>PnioCL;xC!Pdm2oDd>Iw3nd8~lJ_l$PG#FO7ucl_SGY
z1BmSY`rO=e_2D#meIK^~0<L#Psxi@qVPeY2UwwU*GTvz17sB>Nd*$t@5c@iM(8Ku&
z4i1bj_;n4a)Og1~s|$WG<M?lXuuja;ijF?o7@OO=`V@^yg4$c*h>jO|69h1_-zmwd
z)!vxz&Zjv!IgJ~9x{=J(>NW(52mAHma1m5fQ&ZKOo7%=_^LzTmph9hJX<48b4`F`F
zVe_P;?cZm_-onyAg0Cvs1*{+Ff7S=HI5C`^-StuX%k5*JHQ>gL8;2`>N-_p-W!zSJ
zb#L6jD(L~4MsI4E^33F{19(+SMlhL7lr;pB_<~(&x$WBFD@uJ8fq!pL?j(ebG&VfG
zw{0<1VA!_QwFzFSr{^bo7iTP}svk2mpEh*aZ>jb{oa(&w0d#+$I$_2IQO)W~pT1J2
zGP8c?D_n^5(4fF*z^kI-xG{Qg_pbTGM713LqaYacEfvX9KYALSk<pYSu4L4o8h(M*
z<cD{)=qEo`w2>$6^X1mj&dwj5j?+OaXhKE{jp=AR&t9q(8o90w;ycmYyx9ckyPlRn
z?L%O^1aj8a*R7^&i1@CR3i*Z<o2m3rj*M{OymBD_xBrkHP?RCDfgncUv)vyJb^rSM
z2xFPe%4-r-Ren%^kUO7m&j|SZ1QFZXK!&szEiEBPK3}7Nw=QHBh~NQyb92pf$GOG>
z@ESb#=zvS(w3>$&8f%z<ARWV9Ph$#N4D`p;HWm(*?;04eu!2FD0s7Bd)#^E#dO*^F
z#$`A`<ldepJ(|`^CB&KVurSDrNU5n!1~bFqbK+!Nrfc|A24!AiOD2)<IPNBbc3V7z
zTIW0{qbrILobMv(bw+`nD>9oH1ilmUj6Xl|GKojXQc_YO2*jP+x8tV2W2plfQRQ~9
zy??&Cw1kI`FR2YT(0{7hz1r!3p&=Yob99U+#fV8Pm&7kQC8ZBUK*m6(?k%+G<A#KW
zP8FGcuBvjAk?9603B^;5+;{B3JZ|R>tNn&zVy$s;apT6!=9BN1Iw#1ao^m=^xcgHH
ztQe@MsHnbO8#D!_nwhDokQXTG@Y#M{mD@{U-kU15E{FevrF7gfYa6Z=uqdKy(kLKF
zGKA6t;|Y%9kMG~vtQYq`-8|X?OZ1&tRHY%h|F*GU+-sD#5VXZIIM~>JeUw*JTpP}P
z)Zhs=>2b1X4Dje+^oozx<ZB8xwp4)LpyR;X8w+Gv?G9u@83qOhVqg&^SB{K)34{(-
zyIj7Wq}Z*#nsh}fYqj-wA>Wl+3{H+Jl>!6gIg#W4QOMJ0tB<6bsBl3)!+6N{P68t<
zueL>sl!n1HDC?NcX6i*K8enBVLPtj*Cq?`F7<d%~-O-p(Lk`whW09SbwP!?u?ny?h
zfGkM4)^@9Njnx>$382|Y5di@jMfiBK<d{~c!|wdbT$A*hOy#eEHQ2O2m(Z{<F_+mP
zqBp648V-0{9G<10WACOaEW;RddrK^JBqZ04RtG*Y^eVjmI<DWfF5>?b7Seld%izEP
zYJ0%($B}qsI|OFTB3ZInOq6r7vq3NE4K=*1RoK69^@02g8&dKYkjI^=8zJCq^Yth!
zEQB=-;+ruT5oEb^@fZ`^7u06%H6PsepK!a}@&n3IT82oxxNAJs-`@;&C^%p<YuA;)
z5qf-lY$YER#RK@QwFk#s3@!)|m4S0M>mL{x=r5S`#Xba_B)P)Ue+?|tvY_i?ywZ4M
z>q<aoxY+#ai$Fa($o20di3;*5eE9;OBgcIL6z%RV+K3XxJ<MLbCkR-5<dwB=vLZ6l
z(+{_J{%b+_dl{SkY5BRiJ3R>^<aA<POcj=M$w11Ej&d7LRy4#5p-cT_YedV2^a}*t
zqt)(P08j!7)>l6`c-WidyD?@jBP(lZZ!aw>x-y&#vc2H6-KDOIHdhd1t*wUmeYusw
zWDbbO9}hrDJm7}?)ZQv6^ha?PL(0%oZm*@<0<~hcYN0A0-;YRK92}4*u(+P~|NiX>
zgMlEVE?IMd{u&V+ys|*Ptyy9LX}G#$2y?q+S9B!-cR}P!?ReO0Kw>Qqd*tK*nD_Tb
z_P!-j=6}&cz){vouOcYqv(4ssL(2-yf)FUP+T47@RS3mm<eDkf9o7ahaB#x2HOfDG
zdOl_Q6_b~PO{*Ti3sSA|YV&;4F@G3HA-`Y#u3;DcrqX!{^osQ8z8N1!^gAMUpos^B
zKJx7&1%~;6V7pzc5>>eP=z-c%BVR8oNj!AHoOvXiF-2XSTUB+^VQ<kC8b>~=+ru?r
zBq1m+${lukVR1o*d)l8C1pj*b?-HJ&y^}~Rv){5@?taj^uUTz2k|I3?4}nIrVjE80
z%x&2!gj`{6Zti&M&!6f>MwIp`Brwe#){VQnd#!HqH6~H<42idIk&;}(zrZf;Mi&wk
zoUimQjZ>tQ7mj>GaW=}|^O7ZdarN};-(_7>E%Y1tC8`4p%RNdZmUk6ZQN7@lKAxqf
zZ=-vM#Mc1jEypI&^XJdW$mpn^iwoF%_@^XC(gD4b=vN>JzwYc<e*Jn|=svp-8<O7n
zbv<Ys2C4A;=BAmxzAqCgf-N5H157gqqGlyk#>z_0O77v&&k*nGTYs;Zz|!(Ig`r{V
z6U#2R4rF8=a!Nff;r%}uDp??svWA9$q$C#;+e;Euecrz>IL9UV&QxFnxf1xMs?6NK
zaQ%QR#!gS4ySqTu+}eEO^o;lv_0L~6lZ`sw-9P#f6qGcvqBSXacmz4%eUejwfg#o}
zUwyv#+|l{_hBCae547ofeiX=SJfVMi?Jbh*Z2VMWqTs(cQB6WY@8Rnao=OBS#<8{a
zL(IPytp58#_b>0J`w{P%nQcksASn|RkdyPd<hER7{PWunuLXrYL0Ri_$P)kemm(sp
zOl<%5;D;}sH*R*DvHZ<DiGd-N>|Xl!qFX(8i@p_PA`qC59zae?{OtL2n5Fmo@5k{b
z1_nOTeGh8VKi7fG&R#nI;=jC=Sh#$|D$hzn5Rl+6Ncaf;8-J5e-gyI7HQ~oN0DE|1
zBR&6@8a^{Bh@`2Lj};n8VB$?9p`Zv432FWB1K`g+?fLotkM#5Jum1mnd6{V>Wr&+X
zLXap6tE#Gcro2P>@<vQd3}j6(Aq1qaAkq4}BR|OHAU((gr8-Ef($kGhOiX|QYrtAr
zS-BId9KT2j)bMA+{euJO=KJ*N)4wDTVRnM?fnp&eB}L=`9qL2qTDueLkWduyTjZuO
zqzsr?SnlV?e7Cj#J)I;)H<Y)K$~xUeN7q3jLBr3vje()4q?E$)?bY9O`J85<4X?Sm
zwXD1p4I4D3c#8C$n(Pe3#2}@=@MsklM!vj+!FP3D0LGp!V0emy)_G!Le0U2m-0nSn
zY4U;JVqaWPYpkrS5CQ_*NF+*vf}SBEZxj?T18e@=8kyg4!Ao??Y$nIeaHN+NW}r*U
zy?ImWutLd7O+^)1CsNO9rkt&sOWl-Y7);TZpE9zeBeLt(10_=^oyP9=jO$F@sO>5k
z9lj~?{Ta5r{I~;eDfcJHZ#+G(Lx^qR7Ukp9?wL&*D;5JOzYd9D)wQ=Eiado;;*1FO
zey2wdA1<>=@$&vFe#rSn0-_`&B}Xa@FTRCa=Se_Di0%3N9sw7-<LvN>wf?SVgn!ZI
zIjV2!qWMh&KZ!L`5|V{{sIxDiTWj$N5;Ot!#+Q7lOuXMEO~Qfs<Lch6ScmxWoPq+T
zzYmpM6+-6|E+gnhx<?fYp-;Z<uz{*c;Bx?2)60oA`A6j_EBDsqFXb$@M@ggj`1rJi
z<hY!!C-t2Li1<hM_w?wZ>KiEUwB%zeW+<kFI-i_wOkUhH%vErk=^X%|QaYT&FIkS^
zYsO%vqwm-omI5(_+TGKQMH*ELboz8T-Jwm_f}%I}TSuFHO24)N&XK)fHRt)sZCwTW
z-9x1XDx~CJ&<KLC>Gy`+@^2&bI34a&P_g+q*sqW7&3auRMCZ6(y}J99<IPC(GUO)X
zX+4j~zA^K3aqc*@^kVr%GC|w!<@Z{YzFs+2v(Y*<DSo+l37id(2L6$#UX%?$<Em<j
z0YxyKRvGyVw&UEWjo-KD0Dmem>Pzk#FSZ{#+)zvV=$-8St$-RM)!5)Ex78~qruV&`
zmip2$s`+*(LR$(Tx7lkD58aw7cHWM?L`Fs~x7*TnSFDoq2>JfK=A=ueR~D}^D&x;N
z9h>-s)oqvAmrCR=VWKu!O7RV>JHp?dRK7cTh>eX+X=!=V++ct=nDgUDFb2l$xET<u
z60kWaOGr>};SEl@8<0JzvfW!O%8D$RL0?=dk&imq-*-A(l|;dGDBpIyoF@*`tuHI=
z?A*$y&X<mH<DQ%}9?FcLIogV9T@A)#c4~(d{0;`y$;pYT+C&^k5+1j;wB%P)YVCa3
z=@i9!_-I2UQ~%F?fE{rRWr^j&u2602MZW&U%{%RyG^C`-kYhq@XL$KCQ>hwRC=BX8
z$D{KyvySxnc656$PK(2Bi=`WX&`7;?&vCu0!wyDgZD=&WWj4#R89_5E(5`PR({1am
zag8jOPmwA&)wLcvJ=8F!@<|=h3eG`NE;ZBrFS8dCdLu>4J)>{m!9<-C`@M3sXrnxW
z*<4#kXJdVReR|tz;?!?liGZi5ZRep<tzoqz*>~#~bUEJx10P~xb@*{RSnzOh1>gAi
z@!D9SDZ54YG?ahR5wAAJM;IenvUS|0<6<79%T370{jisF5R>3f^u_+WGmt)Lo$R+H
zfxNpbMpvCjJ>!jOXaHe;zpR|x>R@G4cP+|fm2G0rW6=Chp=n+H^lfWG^v_p1+gT+r
zFyuiDWqJk^REdZzSLbg#b+6)cxU6r-UBC>Ib-ETMGUaN?+;}tNwu6o?+LW6Z-TxJ6
zAE0~DQg{4V6a$YLj@ixbIGrgslx(fySSu~9E$D;r`AkAW0_vZH`1o`M`s7^(U7KXd
znA&4{{Yi0_RNgzKpFQ}zDyZDg4hIs`zd}+mIgpvP#bnf<c=dq~MBGM3Mj`<*s+A$3
zD^b;NcO3V`aU&uy9}Yn!Kt$v*7=FR!6^ZP>vtPVcsqh^+S@yq&Pz@ub_~qq|oBSt?
zR#!bdkYPQ!oX+14mOtGG2us92%H?3SVLvTMDMz)+>>}CAH}nMw2_cVNA~a`Lw<ArJ
zxhgsICyF(^qSPvL(B2!wm)g>BI#>^hh*+a>pO{eB?}{jTTN}7Q^+xvn<@ySAeb~vL
z?97QsNJvC;xdWc`5Eqxhd2qkl`4ds@xdQHk=C%Aa;b5Z7>E(Q-Su(c-E*KH=&aroJ
z5c1IU;^N|z6fzX@*gV}fx6AXB(1CA$8Kq@z?@;;jk58uWxc^z%_qil#vc6AGQ+q+E
zo1J|)ZrC_GJ6n)|cmF;to;tM8@$v8A<K2wXGcx2OSivB=Z9UJ*YGg`?du0XhvCY*h
zR<AJR5V{-<=K+HQC&d>FCpgn3p53h3goDvOX9Ue?{=Lg&Qa=s)k}+8Sw8a9t?{>25
z^{@UoFSq)J2Mx?CU-6{G#bFYTt`|j258Z80QCl9K)5XbP4KmkYdD|H{>-!pIiMb8t
zJYCvwFJJBsD9`C%!zrw+Y<Oz{I(9&E{$%#RXHhAnc2~JNw?@L?mXlEZ;(x0c$pTs%
z2aPoI4_kXKkMIfXex8}_Xir6Uxn^@&s@jAJqY$tUs&Iu+{<>z=9qW;hkWg9aDk%6H
zDikN^r#0+-0YTer6$ZA!c3b`h=maa+g*0GMQc;-$X$>b66eiG~p$8g|l3m!#_-qz$
zVHOayX4qR=s({3PS`lUdT>!42+6hz}G+5UDx%)^+(^^EQNXl}u*_VT9GlW%D;rVnF
z)M7HU8Cl7iQ^y_al@Dk&ZCRxfjWVCX*w#^KyCo410gnZLVJIfZpDb=}RXFU-0tZkH
zpccQ1qN1XYEi)5Sstb(3g0pEHn&qJhA#EP!F^$JVvH@Y#uovW16fDUjaMwDIv7e|Z
zD|>o-ONG6h0WQV)aNTe)6X(Cp@BVQ)2YGO9P*7N4#BKk^On%Tpn;|n-B@+OSSCeZ;
zZ2^U4MVdL{b6ZL#d)32$Er6$V7qlAJendqS0kgOc(FGP3`R!NwolkN949HQ030x0!
zKT#ZsTdu>xG@xxok}rjGNvIAk;^^>D?_9YUwCR{UzzX$DOjLsI3$B5Mp8gLo0L?&^
z&PSP<nad<4j{la>G~qM2fepW(QBbn1`WDA}`nnlTH>6_hKi%n}BBA9=^WmoY(%k$S
z%>b(0u|i`dM#g+7a|%tzLh?#LL<_4tFE@84{p9RS-m@J8n&*4_Ve+10rt*)rh4j=^
ziy&A?b-Drdb#>6e0~x=;G2A{tP<UWQE)>gAQTPpwUPHdP|DGo%eNW6anv@irGaBBK
z#L;m+Xk>PqKV_Txw%HcX<u0Spj^_VvG>A+Z<oL!QCWZF0OdxIJ<B5aGUc7jpBk>@!
zwA2yA!Q?;0wX?Pp`}-AYe@(NfU~aM)^&3D{y1KdwC?>3=Pr14D|NAkaOoy3YqTLv+
zBk5f0dWHXs|Nh0pBr&JlNz@XYz^bZCXmA1^j)wdM6o_2n;^NiLNB+dh^78W8>YAEv
zb)L5oJy4@3-EssC_j3{d@jP90`$g-?7cX8=Dx_L0cgF!4#R48Hl9Hy)-=|6s{_F6@
z6o}_R<yhUbUy=1eOk)XFd?or(hc(}3EZ*88Smu!HvbVDXBOT(#|K$InVH&^!0?h)A
zZ{(+y(69`c8E7-3qM{6A0dxR}HC~0BM!nk2Rs6b7J)BSfumEv!v1=f@Jqyk0g{1)B
zj#{H^e=ti8G*)p#t<uB)!9ye;ml<n#HrapQ^o(dH_^#$<w0EQ7ruWH|dp%lRd;2=n
zzR)XL<$Oe|YePXKaa(h9eF0jW0R}dQ%|fSDWzrLmO5y`a6yWnvHxFkh(cyB#8ip6T
z!<f9skD+@5R9sjM!+>JEa@r^FX#V%mr(>Rl#E3n=w$;7oM|r|UsGMO4a9W5<xyhM!
zN6UU<%*E@kqT+*^T!XRZ8B5Oxy(-S5?uLN1I%F*5M^r8k=tTJW`PJ0MrlzzkB<Yl3
zB(n++Pjx{-flJl(j`)NGfwq<_Y8g2homc^~>P$To^^SqUw;MrvJ9`v0qW_xIzDqlu
zdZSM8bonhydyv*167pnnYUs?!3`BTy4@LiWx%d5hAc87GrAo`V0j-Q_<tSc@pDzv6
zhW<h1FOqB6oVCpktOfFAYTEz1rYSjc<d-`f)^x`spChP*6{EO#<upUY<Yph%{T$bl
z9>Y1RM4Hh0w+WHH2x_C&ylCvZYDo24`9`5QC@wAOyR+LhbTatw?U1};@1wlEi&{xf
z;6@#zg!kXMjOh=Bh^$nFRPcXzIqz3Ue1>fg<JK?4|9fx5vy-xW7Gh#PVNayAy#xJ5
zUlzXqpHivn8npghhr0cSOrWT^xV*UD-;a|~U0_8@p7uaSytlc3^Ir!wuVF|I5*q`9
zoTes$KA%8~P?nOE6fH6F$G;!LYY3kUpfCkBH5`$C$Owskr!)*QGP1u#EE0LvE*4Ty
zcejkw8zm)d?5-_pqz2?dWusyyUgVd5ujPXrwN^3TtjpP<B<w1fQv%XHt2%^)xU{rB
zQUh=!VW1O-C;IUtzo4KXO#1xys@^Ol<d<IMm_omQ|4vO!ZEkCmHz1-=`7na)BPS+?
zhMx@c8}@g0z6J#ROGRZ?vDiNPE$RGsS4q(1O8))x|9#ImZ_6_pnuPRpqUU6E&uN~M
z(1<4l1|FaN0VX~KHucQhJ`?|if+3UH(ngh<W=xS`08?<9ehZS4z5t$=Eae3$8A(!7
z62srG+sq1Oegh&ivm!g%1E^VL<?SQ$Yzm5&e|z~733LtbL{wFiGc{3Bg-G1px5AcR
z|9j~1GMLB~4L-r-jtd(b9Z1tk@Nx{wC#W~iu8w#7{yxkP%U|;AKxAnRc?7h-j*L~8
zfe6u$0jW7E`OOF#mY?gzE2z)^Ex9iWuyld{i0eM;O`@WtOowP5#qAmq5y9anrwt-@
z9HjU1g-%?i_*`8%F|+S<{+3@zUm{?inGOHy0Tl<pLx&I)Za->NQBzAwNs&K+L<it+
zI6TIwl&Cc;eod9xwn5zAtyTuyiGsoqH#W)j>XL?*)*ty?fQiYrudlbtxg3_;e@*1q
zi93<Zhkva=Q|=!<T~oluaBdVZ541qK)*L_`2B9{b$?%$Dtda3xX2(?^1YPJF|3Cme
z*5|to6QidDUcc|axs;Qdsnl6BG{i`8yNB-2t>@K#po^pqF%A55HsMX<)%j*w(P{6P
z4P_sIJg5<TUozA}7RI1WJd()}G%7(Lvg(6^G9)l?xdB(~m7!sHYjFDMsf(nT*!#Z^
zQ^r6L2Wf33IAIB!ZhggZYw}`p(hXvc3W37wpwv2$*sPTDd!e0Zxk0;lKtLB9;?dl$
zR?FRd7#My~L&=whg$;khVFbW`Yj$_x_g8r!tkhl6n&G0B*3VY}M+ed*<j0Sh*5Ke^
zXiGIQzgk_9KZAzxwzf9wg}ZnCA)qdJ12l_|KXtIh^T8W3H0fZ7_E+m8zQFt4qN^Pl
z(LLI%gy=c0PDx1#Pt5V87lzB`>qWtioHV}1+lu!@NEo)E;D3)m!Yhz33p!4LL4n*-
zV#g>%^z`%;Q;~qv&hr8Xc)33SO~Mi|Pm<vbwpW*x$jBam-?O=25+}t1fB_IO6$M4E
z&B`o;ZY!(-CJqjtygo>V0Bgtqe<{f8DLf=p3{;b#1v@1<*~oYedQq*~p!Q7({T>vQ
zpiSA|*9RKehAcH!u(Nw!;R&}XoKe5$;pskoLK0Zq^w-4J!P5bDfPz#>UOtjL3R`xm
zg!Ik_dQ>4r=;2@;I{LSt&{X2C*X-_Av@b!DRbuk%7xd@LA+;-#r^2^9TJ8y&ZHFda
zaA=vH-Q5{urBhKE0qzcF*LzsiDKz!;%*+Us(`uA~qYMr%ZZw<aIfw!kE&(Bck*RY>
zJp&bvzJC_K%0!%OD;W&74Pa=Ik}}_OFa$6a6@8JNtwQhIne#T?%$m|Y*wdNnpKf5J
zR;U$sZcXid3_m_Dv0Y=y1mi1WV&W!d<Y!I`cRqe{2c5=0PY3e%UJsFs4Gnwtf~g*t
zD#p$my?y(Psstu|Sfj|w%EEgkA_I|#`4AY^uI5yqSX`lI1Tyrc4MJ}qIsV0bi;hpD
z&O3+VkT_*l$Xo{xA1LkhJfGwRIDhx<hZbO_#*vDzb8@PgA+D)9b@M`R_Oj!AbI*7~
z7Z%l<`N8>-{1o==+aJ;+z-C6_wZ%VJ>O-9pIkJU=1KXVL2fDLUJucKTb@mHnlp7XU
zXg<U(@Kk||o~U$=dDq<Be2a2EJKt}5E*&1*@|=i1ZWz5zMDV}{d`syFCf&t$Q0RAo
zr$y{(8p2Gx<#h=ODQR~;7zBh2K{nDR2TXh;hJ`qg)SYsCzev@Q&O-t?MLC<8wPjY*
z(hP+?Kfet5=d%&JjU|TE?iH$(J?{c6R86&gPN*_B?r@=TQ;{hrlruU&5WUktV*}x8
zM@N_CKr4dc5hkV}3T!&a&5DYOfcdMooErrHSMqhBLb-ImQTVPcAA7I%XDG!)r+wd<
zvwQUDkr@%(n^sfiJZcZUG|kFJU_yZU>0Sn_pNfiCI6MT&<PqYBi?AHUSd9pvCq#=&
z{om1v`Sqb48WXgQx5+0<M6sIJ!UBh5F)J(UF`eeqhY#0RPj!JHg9*#)JqdVzz?QBz
zVt_@PJ%AQ(z<FwDYaa+a$i|`5HczjEQdIP-V#Z)eS(#Pb9~C(iT8y@<`#D-%H|{<~
zjAfvQ{Ic6H@-c^lBQZ16>Y|J!*jfn_q>=!cf=Egc+9bh}?nhaflfUt`q@NWZ#f+@p
z$;t6g!o1at&Zq$1n@&~kSB>~64{x7xMlsrNf-zCG%jHkqK#)im75Nt*9W5^#+<3-e
z!vqx43OH;5_2xLlv^G&LxyAwu6uztuYSV$imo-V=FvxwUm+i#F@={Xt4}(g1KU}Kf
zg+%~G3lgp5=Vw54XTHRE^78xP58y^yd<a`J6|z(Zy1KR?e6UZ>J#rJ(s;<b(vpTeL
zzakuO3G~{aGs7e&c>~w8y?x6^-e;Os1bzer`ug@Vny>WsO0AWNi>gUhFb$ALtw)PY
z*T7xF`!2rQ?)(l8W3nv2100KhbdOIywCCFbx{U%2W?K^u6c@W!84aK{Ry#NxZxexM
z0R*#G7e19x<Sw?as6SGH7SmiEvd1*45=1+By1pQb44Z>{ZL!$SE`}<P=G31$v;Pp&
z=N=x5LzBM-<_T;D+3#Q-B}i)=H5b84krE$|i-Wb(W^|8`3s(1{ciIITC#Q522Z?j@
zDIPAf5lm_Q{j2-ex;P%U%kR8}www2G-|JWhAb;sB+Ter>QOimfoowR$d<Q4be#&js
z1=dLz)>G5VoT(Dg>TSJBr^}YwH^)s1IkIz;TzItx@7~Ss>35Mz{gh!kn<BY;G}MaG
zr+Eh4Shi-V)qJxyDKTULrf)}U>gr}c#}N8S#n4ysqt?SQ(|uIugE2bC<FxJoP4K0%
zssqpj&cVTvXR;O(>GI}mDNC&y>Wa;gHf$PohyCT4N!-QI%Rym}_-K@y_j+NhE;`fd
z(ptIAN+8s3xphpYqx&uL$u_IQ9`AmRuXgX;%AeGO0>sAQB4R<!&F-#v>!A_?8Ir`U
z-*c3T=_RG5xmr=zBnPhN&x-_+Vt9$bDDhg`bP4dI0+lN<5m8){BI(PQycQOly9?q7
zs$?B3L_iY9M@I_jv2uGl4sIYLA7f*ak*DZ5gGMAUICz0Flq#hyxNoPK`tu7^@$Wx=
z0Ly?yyVck9&7U5kDthQr5vfcB<Z{A--is-Va5Csg#E?>u=z{;3`DO*DeI{rv@bM2)
zjxgX1v-@;<0Gp%}$tT=DilfiE?Qw^Df-8uzFQM_NV2rPR(0=P+xhLw7{RwaK84C;C
zb@&p-!@p+w4g1<V=z!7u%18USJx03R=mr+04VajK`E)R)l4{9Y<VRkI_@iAB%ws!#
z&#`e}TPRAsDN+`yp5OkF0HwS}o<nXQXNr$E7KKlKiJs`^ZG$cPw$mljn1M^ju_7~e
z*HcW4J9sP=poGC=HF0Q@ep6anmdk%w%mOo^-uxkolS2l<=OPUmth^+`IW~T`$P0YF
zbFwyq`aGdE<4x9Ng`vF1wP`I%zA-IJQVs$F0#FCQG_H9mw`6@Stt;w#wJ*{a7ZybG
zUp|PNSLXfT9wIMqfIzeU#!gZE?CAyCJP$8eD~ps~Lr8aOMmI(9t_UKVid}Yk#(5hV
z8;f(Ao*iy-*{&jhQR*X=Tsih_OX-3ZMddP+@S)<ZKXq<Ifoz;<e#%g>amdiw{zjX_
zg-IGar+XrQZEpy*h8Sb-j!DGAA$|tEPNUTVJmRGBW+myI3Fkwxw%6!6A5^v`Lx#+u
zIJx+drP1V%<Lm?S@%V*5MDpNfZsCE(4VnAuD3iY|=epwrVt9((k1p#AR{C(Rrs;zr
zKltPw!&S^<6BcR~&mt{3@xw0k=j6tCsW^D>6gRv{m6_S(iiFJ5AT^_BZf{AtKRxX`
z^80uJpM75=Q`17HgY;s5e+&u9(#Jy8A)tjwOg>)O3)LvM%K&`k0GL&qlU*$PfE+>%
z?v06JEtzPw{0bw>j+Kcnwem48H(&8*j{k!NSY6c$;Ks(N8;v~|@#8QzyR7H=a5q+d
z2Hf#rkk`fLhILbGy6jxz$5N~F0TM>N&Vpk1nT<Jdo{Ig14zwvqo53`w)V?cvQcn-$
zJ9CYGaBvC}m@}RgiHfQ?f}a5)H{03qX-{Lk<s7MkDNJg^eB6t)K}*Qx^z8;{2pqc>
ztKNEylg%w|@*xXA22sLqRxS?{=F``A27(?+j%V8uJ%AK${7-I#Pw#lKIso{=>A?o0
z`KCH5s@M8jOjmLE*pe`Z&ANg06*99o=xG<*!^LwtFNr!kI|B%~6Pu3ArwkBx$t@D<
zMed|*DOhBC<mI7l6sVWBqCZ~FciP!ignrTut%~#WhG07>^2!&=)8{AX%Q+uLhrt4t
zg6sR(+GT@ZUCGW|+v-Y3IG6K9nJq}PK-ie=e&q&L?i`uKH0Asb9)H%y%k7l}hl5cM
zT<;%09%L2eOx-(G>F(}+8(vLTfL^S>#XV|W?tDbB5wK8#JK`>3fZpa>hmK9-bTuPj
zHo)e%{!~vkuc(^%a&5IYX%6^&kTvUqRJ)7Q&ZKMizC^^|>E{|xcnwKtNTLu5(*hIY
zDoi%7gd`-s@q5u~l=s&5LyhM7`E#H7RF6&*sIK6N@ZX#PJ0|{WONGtV#lbRL<66zS
z56CD`KW=Pn00m}v8_lO;vTY5V#Lj=;9`#gKQBllNwcTH)|EM%ibGS@DngTQOQoj`x
zoOq#++i5_GpqEm;Iy@W(_DKvMK2GCWfI9%GWc2#trY3lb4P*>;bIX{h|7;k@P{+r0
z0BVg{3GIpSx2GqdLbsQa68MZ!ZZQ)N&P@KkS@Ol3;6EX9hp^GF*TZg9H%FtK1*O>=
zH!h-#V<VuKPuNHgCOQ(nw0NegXR<kg$6!O=prOv}lSj_P<uu<6=<$tv1QL7<Sc^T>
zhDQqE)3{Bk>cUiWF;A=f>({#mv4ZE|kRxmw?f)8z<|r=b!RFM~fsDuF7?{>)1NhwU
zezyi^T)T!+Y%&5aHg1RG>~rnWoW4k|GD@^s$sW*%y|}}YZyss4H7TH-pA|K+sZo9h
zPCA<t27F@&=pl{lX=zz$=_8|_+pYVCipCwzS!~{SxV9UdF-}%*Y7f|&G#%uG{UD0c
zY4XqI7nu4n5XA}Q57aKE!>JF161OHR6KG5<EG!NWx|YV;H>@+%OBtAne7=ApZFX~0
z`18GG<=a%K%h-`s^7)glB|TsVB-`CQVT9nO0x1*P_EUU(idvYt{tM)D)&r?t)T$N7
zki6+j#bhg%A9kn}qlzTw9sA;WogS?AY5D!JalD-*U~5}&b~Lv@wtI;YcR}wX6$A3M
zd-`Bydh;Is;pyVR!I}~bCYt)?p?ewK9?ls$X3dzU8hkjLSDo|JU1Hh#?0n^sQtd~=
z+e?R$K~0_7b|l7URI|n(o)Z&8k=G7r!iyJ4a&o)D$jN@>rgRiKCPqdaCdb=}iHXpt
zZy7}XxjQw^5Tw@_W1|~VuU{`uW>GD$rd|TD2&QT-YlAeSx^d6FxSVWw9JZfbJnSg~
zf0DV6oF0}2(q505wa-hyTUGq^>+T&Mvmgm*bC~<A)kQEdH#c{WkYoSy(_Xs@qt;!g
zT1jSB9_i04I5p<rotmMRVh4U&8`rycwvsy{KvZSW;ImLrYC08Hzl+tDkPvTBFQN9X
zwT4=yB1}&OoT>J47&+|LU#q08qgR+2ir$+EG?Y(yiA02{#O7|3tRM%fE%H@RS0i6o
z$%TB182Naz7eKg#ssQs7<&&k7em~c}0?&doFaq&mPdh)%QrmZajlyJp8JYA_x+@1J
z5hgbKFlfl9NIG9#x&rHB&_CL0G`K#pk3F-p5<Zq=7ByNSxE#{)hlSzeSqBwfrSBmw
zqyrB4!rgZB<0JWwLzt5+rc*@_Me-4A3EHDo)XF8lG%rqVn6yEUion;%bt$d9u%2<u
zcVV#4+*B{Kahy#Q{V1PfNanoMiO<B#?x>0YYH!B2yU=VxmEG|KT!4B$*;!JAflfdk
zbV7#*bjxGy@p@URHtW;7N#cKEtiv>K#$eV|wR4l02kYIt{fm&3@e`^7Aqa=g^2us2
z)wqJuYpM{sN9*DH42*qYJak}oqI%1<NJlszp2LPW<{HZ==V-OL*5SfcmftnkNHEyg
z-`#E9Xk>M~@+K!I|Axout(U?dVKd)6)8PBKC#DfwX$VYKQPJac=ruU(<9UM4SdOHk
zIV5G7E@p03i}~}Ae!7Vfzd=pnkw$M_ZBlx%IG<}BrqMEb`B;oh8EIP_#vs3&on0|Z
ztIiZ{y2j&rS@#E+3?N|kVX3!y_H(C<*1c;(yPHk{*r%sYHRbok6FfXT{LQC&fAF7T
zR6-qGv@r&>izu>1Ks1-(DoDBVDz0Bh^pSoJeE7|s8QHWBtYK?uih$;2`sIFwoK1=!
z%|xF@8MagV>E@kjdv;DvYkZ-q*%-mttgN8QyO0KKf50ouD~iYe2r$<LLoZTu2goK$
zky}#%$BEdn!mb#$>R*=ah+t0eIK^-%ehnt5ao-4qBC}KronYK0pi7_=tJ4U*9P8-q
z9P~eY<CvqI!m>duUl)$&dU=k+r5s&d2JOYM%NG$zNm&~SDbmq$C5ppbjQVkLX`)?x
z9@U$bLcdIj&CIfc{U~$Ps^i`X)hA0vFlc_s_}NsU!i_UZ05x>4K2_@5m=Wl`P|9(5
z@WWg0kXA{kVQkF#_*dM%pUoDZ6Zo5C1N>k*R?s<FZ^}2N_xK*+tHgR*-%x5p*eCf*
zU7gYFk#j<JS1&js1V%a+J0dyRD~%_T{i3q6V)tHX8ra9!zk9V24iY;7XVQHQ8KT1b
zXu;Ay*;<a5P+wkZQBg^OT~a;2KxtpFHR8zpR-vO0a8wyhN=|n6*7_Bi4$oJ<KOJgf
zSb|{%<1x4G<wQGhnZ2}TL(46yGegEYXLzP#%4(2eugA%}5tE~g30BHdEwx(ki4*Wv
z$S?vEHWG5_4w$mq+}vAR>ggG?qyXJs0KWF+D4UpM0&3XjjRDvgD6@rm(rjv&+ji4%
zFKo~@C4vw?Uno<v-Va%s|N01Q1X`-DAyxBryUAIZzeYo=@N?zY8)Ex<9*sGVHE*41
zGFT2=sI!;&;rfKgndqHoeW2&`!(&doehZ@<ititHhT8cB7~PgP$Hr5pINaSQcYZ^b
zwYSuPj)4*Pz8Tb*;DcO?)=QnQ-Vz=d(bHcF-c#=@?~?{-X^08J!)~vu`*_GVWInuI
zd-8lJ#^6VqV*cYft;%p$xsYOt3d0h&xf`gIn1fDk2L)Be9d0CTWCCNPqw18mG|t0g
zrZ9ed|J&sQ#ZIz-Eu{Jeqlr7vbOsevKj<CTgV9e}*gtmpy^DmHBB!S&D{2XD;O0;9
zZ{B&*EcRJEl(yG;$ZUfA9yJMx?aVA{?TZ<%p!pY*qSpI2>k98{dbWr(B`%wLmS2h6
zxmzY|54MPEXjEoKN5^_rZHDLT`8{C|#IooM!P{iiKCebS&3u39ZrM#|KjWrCQyf+Q
zG&pmEj-dw0T?DHC#KeBOEtK}-iMEZ2e6lT$f{p$C{X`uH&}>;+TJA?GmfPVI5)y9S
z2VF|&*})o*&G1W5JZ##8Qggf6By*+TNKRHK_Afsa_@#Wh5y|6DFjW6D_iKw%&w<9x
zZSiq4Nl0x=J1HZ#<*BxQT5+>)UzFPeoz3pN`HIBUV1N8%&xY4^$$#U{v!KX~NKP$)
zIRPXWt9G`L*p7Ncm&)mUc*p*>Q#gYzd4r%Kd8=Qy`5cI{VOeJ<Cm&AFBoGOFrd2Cq
z3edxWDK*wT(n)KfbmLgjRqO|!T4~}$gGf0~?88&lOLrj)rPHWbo}WjI<<M@38i!Ia
zx{fN~Ml%^QG}O4B9gH<sKl^p7KV8unB1n&{tpB-l#{8ZsNN9U*EI_DW)bD(IE@hvm
zFl}Z-C$T+Zm4MhwK!o;9u@RPtVa=s<MQaonJmqAW>lN7y`|{H4V(*H@`fQxMH#wxp
zy2;<xc&Imdd~+x0M}n|smCM)QYnZjYRU%N<fhIZ4<91;DH}^a7d?<aPbdE|I%!aLJ
zRMwW3q6>sV9L|gF6^_<8Jg)(MRyV6${gYFpJD&kezBOE>vpvl>KE-h11nx+IgXhpk
zggRQVAlz*oon|O-nz>y6Ao{dTgDqQSQTG3P`oL;b1N<*5M_G+Cea>dPIu8K9R1CXw
zM;$Pf5+Wk{8xhRoFF4i4rl+SHd_!MemI{w7Ra#y&f<yY<r)&<#-Ep`e(*n<+mtPNW
z!MCzq-q!Zbczl4@AH!;X3F7C+H0sSrKED$_->a;wOq-#1V|ja7aRPAs(bm|!@<>}-
zhQOI!vDp;2<u1@K-@b|tfH_vr`kiNy2Wx|xg(bpg30%%L#f7ed8%E$g2_nH6ZEa{h
z$a-rq9P7pf6-@b&3D5@>+7~xKZ2&kp$FC=ZgfSxdE_;n}fR{ruUuHQ6Ry!Rl<nN2_
z2ar8`Ha%Hc4wcemp6wc7VW5}h)9wQBUU{>+4DM{=|03%xqpIBBE?g8bKt$;f*#_O+
zpdcXK-6bX6Eg&k5NOwwuNarF1ghdEQcY|~{oSVJ>?}u}a9~eUi!n5l4+%e}hh2vl<
zl9tr>?Od_Ex>g21Zv#f`A3vxpr?^SPja;JMQMem(RY?Rh$`skcv2ruA8sAs`JM)xx
zDQt(ULWx*GvDpcBLpg?HBM$4)T~ILqjrI3he2QRi;6%18!~Q)*ogfZ)(hw|p?_S@K
za&TaC_O_cn0DX|9!1P<I6wO|pdKfEs!Znwg$k>0;c{D+mb6n+c(hoO>Rj!+8pPD(P
z(p=sx7ij~M=WrOxVmPgAvTK2%pf|ETdwF?joiqgvi|<^Q{ByAd7w<_#l{}Z-0@Fp3
z)7sERD^fL#Y&?oSe;7=~r)`z*CY#Z#%#hN6S)p3}3m2T(@pZK{T{J37$V!l6KStz{
zbxe`A87YGnQ*WWh6W&jw*GGqp&+TL0xp@O4V+^Mv$*BkH(+K0eC74lejw4dMvf*r{
zsPbmN=+drz`xIoTBv?E>F`hak3GVQmXK2@lBycDfDVa?-q)?WukJcwdw88A8)@Em}
zE3T9QR#aXWZnx!>Os#8mrv=J<bZZ=lT4|tsTb)Lv%<MKpuR5M<D0V8GIw|)W5q>97
z6vXqKuzRwsbt+RG%a*mqaz3&guYmV5IK=h;<a{Y}mp02<9ry+iS?SSW@MtUSk@RfM
z!+{|#URUc}2vlG$)88|&xl!PX8AlH$W&QXg2q1K@SXUeUVQeCma(IeY?AJ2k<)})h
zD}xvW%5p~4tC`<g|2GRr^1X4|RJm}c%Rf&trU>^yep^(W_Vlxkk&bslZzT~CQHP_2
z^Hy?qzcG?(hdkCHW~s6wU3>e0gyU^o(3z2GZ-RjkaT1rl#}xk?ykslwTIeFn%?6+f
zDo4G8Y3FuUp_m;CHu?3dwUn#tp53WwB9UVbBpY>hg9b1)<}A|HEjK5pWxtg~sa@wH
zU&RNjy{+U)T9qQ8A2Tibpz+@yNLlVC;e-~`Znb|=g<i8ry_BbYC1wwXPq;&&WSoaE
zaAD&Ew?6nC6ep(2B~3O%f1^#7Ev~G5d9EBBY}zXg0*%rBEUeAxUWKQXWH>x5BDJ5v
zELPT@lbai-S<dJ5z+TC>0%33;<+69ADn5TL+qY+Kd0shHePI#rK5cwet+!G7x2!CY
z6P-g%s@5jUvC@n`cQ&4Xn*r*iq$w&R1qCpG5>h&0JLbTZD5-p7A%%`KHZlea_NNNa
z9urAi7;ibyRKBIAr%%${DpvouxS&N7n&|k{40Dz&a>c!#=S2(>Cmspl1KhvSf5U%$
z>x;ss5>?_pPO7Y^h)7oKIo`k{^gyB?);Iiz1+T1GD|<u6B8rNv^z>3^@{kI?mzxb$
zHS!k4y<5bAh89P$q12IsgK1bQGCBf0G&D%9KSC?0z01?h)00&2xIwDDcwCNeIzaKe
z+CFA)X$kjaYpOg5{}Oo=H6IoLq5#r$oJ&3X@d2daGE?oj_aE^9v|5s!<Ocm$N4@sf
zhRw^+swy?xd*Wthqvu+;wf;enUa(vyb=f7nSc!TxQw)z0>Akpq<Niyp7u&{+*)x>w
zr`7C84^c#L3PpN2b-OtC<=_5@An|?V?gfXLcYLkzD<@Y6Bk2^W9qx}&DF?k**L`uu
z_otQQ=PgUUy1%Q$aX`0NWKpxe;@AD;g2fA?<LckXv(OiTQD#QF(u`(z&Ybq14|ykH
zJXz;5Lsvzp0s%_<%lMpMHX`Iv-{k<He!X&SO$iQ`n)bR-i1<2Os7>qfmuqKlFACpG
zmHG->BHhK!ZH_K``XfBXA2jibsR6LJ(%}~79L6#@76v92%6o-*#^jqJGT%`y<3DeQ
zm;J$Y#H9akyY7#5gQ;<PVQo)ZQ&aXnwchn_d*A#Cg>c3?F!VuKSeU9JW6SkFqNIj{
zec%|`;9d>g6S9N$zr{Y4)b;g3dGnf)ad>wzBs0tSe@h=?*!X+vzH|74h1j}%TNzw$
z|Lxy#A6!cTgiJqsySde*=_{+NbN}yBKpFAUcBiAYZ+IB_-9VX~oc(_a0E!Nj)RDVb
z7&1~41xkG{C{zZoJ~;#E{a;B13S^TLrn&?K1*9w4C@7@MM``5c#a|2b|Gn(jH^4h!
zK*`QN*xOFa^$P(417-HY@4w%#to+*FXZ!Crcwhf&=BUWn?e4vxx;o$ZnrIcG`i0C7
zIXT;4=ut|>b^G6H^6vG;YiMcF@t=Dj#3hkAdFE94ImkE2H{!_toXi)OUe}6*)CF4y
zm*z|C^_QrT_hA<G>XqPs&&oLi{QrOd{D1TtxM>f{)mRNxl*7!ZN(6C<y9LflmW$Re
z@BDXx;aC9DQq9qO(>vYZ%1l*WraZE~S@24Pf(BQJlXI4TY|x0;y0r0sl8JCiTa{Q4
zECMbe34CI!uTa@KQynz=H6#0qnKahtrv7_sW>nE>QHBNw%YW2JVqs!-!=9@rmbnm!
z`zk6&FiXlWEbLBITGjfbJZ$2h{ZU|x{J%@zeE|wQ6&0tRL|55lzGC?d3PS^Er-5*>
zImR9oO`iaF-Xg{9o=D7ORucwg+TR8t!NG9fk_m$^9Y|!UVCuJTGPEymaQmhA)ezIZ
z6WPZ8?>T7>;6fSt^9N?Q?Cyt;C6N{(#Oxy#mXgqiBny<oNLI?uZnw$r43zC|Fnb9M
zPZ9JM_c6VU@mT6|1%vH=mG{+b4CCg|&=J*(w}>nlLY3VF>rrP$&q9Zylr#y;!vG1M
zg70`u0HJ|DFYi&#p}4I4){j&NpJ7NqKtO2dRJjEuxflH42B(eFvm>&>LQO^(|ATOd
z#?-<B)>{QHF}!ydY+)}0^)-vbiXL&j+aS!4oOyO28$dsVc+hIPAxbO>+HM%w1^T?n
zp*Er>%+Y>cKN;Ub!C&2%B&t0(MrY#vZ2Z5gKrwnchoUCrOYo(pwpKcp>5E-m%cror
z_wUCt>95Z;T~9#)_qMm0#42rPZ=YojDFtX6Txh*;Rnwq-J>BmBQ2>ZQ;T4x&1p5l>
z+paq2t%e|E3=X9X5h0<?!73j0Hbk*zvab#zyC%-(zDaB5)PX(Y|A_n`gqNR%1xI3%
zAl&VQKK1tPkV>cXabUtGJD7wsxql3JB*5%yg^jYQD9zSL$ydErkP_JM%o*QCV|!Kn
z$`LK`^Mik%Q;|$Lo~FMeB^NO1q3*7=oqsEF9v{ykB`!`;H;h97{OKFYdfp$`#A)g1
zf|J2*#%aH_4$HJ6T}03C?{g=61l1V9!-eBab_-MxQ9~*FBpV%<9ySL|UV2ic_OnMn
zjA=nwjIf@b!lR9b*4PpRC}7?OiASn<Lqh`_C_K|aS_SSKc6i$KEiDf~y?|cb-NoYe
zWT>w%YvdT*Zuikw6yN>E&j@WMpObo5Y+KogkD;B=wVtU{?V~Un9vw86s~m|Fli9rZ
zu`aRBvc50I;(^}3j}HY+i3(h|va$$}dcY<d%3EgJIU`9Vi4sV@%AB`0L9z-F7A4dD
zxr)mWv;fOim7;gB-MmE*69yk&`2xvep)WLxA96!8GFn<bIl=m-yri1bWjh>%KcM7}
z=uF{vKb`ThJTz8;UGU)G0gTzpdf-!)NtLwQ1zo^YwLK^QfL}f+?Mw8U`0jifo>)0p
zi*EUdnZ3@eyxEs=r`vra9?kFO*w&dF!uII!ub_1p+i>bCQ_`5Bpt{o#Q;nMa%dBPI
z%%9}(d4DOhvZKGKm=?aRIyl>Vo3|L_<=Ob(V@1!Ay9p}3n(KEur=a&*G@k!wes?EO
zdFp#F%`~-4yaZ2V>MK;U#-Euq{y$;1%gU1XEJyUwkCYU$MYD}{7T+mYbl$pi$3!>P
zzjY8SlMtYB3?Jd^g4*dad>oXi%P;tbKitCs532KW&jtuj<sC>L&h)0fPZsg;et768
zxhNCX%wHW5;Px#q;)i2YXJAl3-%Du`(s8EZkDZIy0}8sYPh)A;232Wj$tm=4PXCJy
zK*5y*PPf{7Uma&>PAse=!7wlC9yX35tqf6RUEOIiK`-EI$ffz-EI!J(`xG{mr^kJ9
zb``-fL6_X_U<x}lP8ReovR{V58jph2=-BBLG;j9qj<ciGU{l>&hQlQW+8L`!H+V(#
zw>96^st+stu}X`#9j&PQfXko#gKhd}&Y(_3Q%4Dh{u9i|1FG8sWZMGN^p2lp3L7(H
zv6yfCcMzw(N9RYuPg4^>w}r4GeFKC3T4yqvOtqMPB={jLhKrV-z~z-yRLpgv@pF?9
z5!uFInxy6C5<Py*=DfN7O`0SwAq7nORX={Pa0X!iaxLfr;WPN<Cvz2JK#2&|HzDXp
zN?zT$cudu>D9U)7OL4{h^wYrJU2APKa>R$6v$Q8X{ec^Uv;z0{$}o?J^Ay*-Mur{!
zyZOlJJ$vxp`+PfN8RnXMMQxLQ!^20M_Ra9H5BJY`tfy|8nXO(+uARXIIsqa90N=tG
z1_qJIKYqZ78CEdY86J>e0QP&YnMVD*IAd<yIWU!SxgUB!^_{0usFD@PEHaGyyZ?p6
zHYlHCqrZ;xsA=dZDk#J=8!o{b4?r12=S6tBWFIL^wD236_r6F<g=-F|JO8~OBrY8&
zCG8M~br${bQA+eKIm1tiKf)pk(aHZ-9F2m0*w(A7b=g-@Mh{q+CD!}A&#^DPC%(q2
z)yR=IRTmTaog1_K68(AOdq_9Gs;X)r4ZJzii;9x#ZyIaC5&l+RADBLrd0k$T=H`Dv
zh;VRlaGe^F!TMIp{rq?b*idl0;I>;>f!Pf=cYW5bKgKdFOkm_N1}&0yrIoavo?i5#
zoFqIJ9uY`j1ZjG0@waarRuhDqN+uF4YpbiE4bKMA9CwlM%a@HHNn~SVE7EDj4EG}E
z<B)91Y78^LQuX*e>-l_^`d+*&N5^<kmOi>0FM>DYU8PKu(}vbjt(I}iGOt6*?xwEe
z{-@{NjvO<dUOG3gKgg-CXWA<bw8A9~4bGpnVfeT{qT>(Rnb*HO$*ubxO*Xx|ggxK;
zw5_;P^Cr>-fBsIBYszm8^MFfXaGoacxx(gu0P6h1^-;(55qbN)ASHo!BjK<wl}Zr+
zI;p{Q13$b!CEmQzOBW6r?5DvYBn(e>%>gqhh;IdGXkb;3hX+!<BtdVh?s(<VWo1Q0
zSy|bPed}mDpe3xk8u}Qv%P8fm)T@`at#VaGR7wl0`AHPW)t_|Y$FV+Q{@3iAn+i4-
zmw(lIz@>V_P9HKiSQfk;Ot$_uRL&!z%|-EqTq&|G$ZjCEiV%?))3@-c$4qNKfgzds
zmnOxTs(~Kh`+YZ4mPPmLU$(cm!(D6xP%n!}RnV7vjC_9th1xzIq>54NHk`xfhx479
z?5ZM#c_e;MKi(ePmmoz7hTcM74q-S$McCjyP0{WOzE3;4UiwqZKRK|4mWC}%ncbq@
zYXrgxS@IiI&+Xpz)BhfuDk-J#BCfjo*UoObdP!HVmRw?T+>ND=tyT8ftUazvG26W{
z_(ty^<rt}|CFz}<U4i9aA?(TIv**vDbOO+b|HqFG8)If|!K?m{E|yH2d|d&nFbQ~$
zFVDpe4v>(nblQsHPJs>{kj?SR>B|du5L0%~#3a}5vXuF^PemR5S7MPrywY0S?+S8a
z?J-(<rfEgvjA`Sx#NMc-!I^QsoYgcz)E9^BNJLl16_Ej@Yjm(PP6p+D33^XyC!?ER
zBlMmTr2K4qY}6z#<zR!(cKzUR;~Zvlq^Rs^t4?FS_F<|-pK39x6RBdbGN&~Z-#WOu
z(Rzxzvi|V&=H5MhZI18%zcP0R8*wD~Z*~11TT<$nSg*+1<Pr}-WFlaqgPNG^iuqk_
zN$C=<&@(Ki<m>;<0;1Ig`S<Mf@~*bDQ0auODYHhYdU!iD|32N}g0;6}c`vy6O9hH<
zT>3ZH{O2V`LGcoovLTx}*M*<ENUZnDQw#MR1NxWi|AcZ$JaMOr3VNJ>|8{KQHP!uD
zFxpm{@#?QG#mfBOD<VCw_jJ*=qGfUy4o!C9H+s-+>izq@?-3Mx=u^Rux2{-f=vW8N
zuI_L5TD)gvX=^^Z@mA{r5z)-!G#omVW74)Z3h?FzUuCSXF5(f8AiZL0YEFNOf0cbK
zh)+oPYepANRBo8u&ql1o##-w@<_rKFO9pyK$01Bd?F)`h{`>duXJ+&c?*OCjVto|{
zgkNyE;aKPQnGggk!F3FRxH4z1h-tQXn#(Jl)B#o`>t9wcPg@4TF3nIbH=iCNm`88(
z7O88DAv{FF2#R&i?%Wdaw32<wd`1uIHpyrP%drCWCyrF<rW2X>&QLE-LFS={az>9!
z3X4cFUEP$ZTOq`p-^z_!2SK7$9sS&8eWW_5b9FpT9IzZ6hEswk*n0?-<mm?Q)44HZ
zSMUWse8TZ)RUeRY@P+ZTp7Y*BdH<|UP*t7E9{Hi@20jvAi0FCt#?`9Z$1&jjZnVBG
zq7TfKEd~qphe|0!rpimcM4l&om4Gu-wE<qZatqf#>Xlxeu-_OVBV>&ZHbi9krp=By
zu7SJrM?@;<f6FRbT@wg!aI`br*qaP@f8JB7GC0{qUp$~bi*FD1-X&i$Da_#?$goTp
zIy~&{P2^Vv3zv!wRFQbJgk1><sver>i08nplDMk9t+swOjFP?Vfw|pl*LJB(HjHw0
zox*l3y<@vG1*=6@H-Juz)mwn3_wA(H0pXRH$EB}-uWsG`#jN-0E?(f1>Qk_a0s{AV
zZfWzp&tJin(`s_8-h?q~*!uU(0f`s`Djg%EtbdC3WS!>)gH~N8a`|%bD+Rqq-G|#?
z&Hg5naM-s94ONmLmp7ly_CMWk7PV^~aSBGF^6@J-Cm!hxehPaBJ<(`^t9>5K(rDXc
z2l_CoJuZdFH7hMu<&+l8E6fIlU?%>)@gFhDY?zG8-!r~hxHXmG!#gyjO8-N2H7X={
zh5z*UB9+s9{pUUKqZcLKcG{Q{UOSm=Kl)W-2uNRF^`)K!*?abG0pltvFwgB#kXdd2
znk}Q6YtV()pOD2K86G|(N^S0TGUh|_O*Z0YGrPrbO^th<oy$PI7#7XMcUzpS0kg)I
z>%0N90yThSTwQJ?%rqsP3K;+W!)cwgl0;0B@LMw@QBXB*x5av@0VdAfyW|{9>{&OO
z0#GMwoU{8RqG$)0T8r9clQS!2$u5Bdm6Hi0Jd@s}Y|(?wi%&o%ULthu*N}Jr_NirU
zSdxGdlyKJLMf{urV<?{Lf;VrjC-Yej=9TM34;7Bf<);=WkI}H3HKG3=hDw93Nahef
z>Vh}@h}ZITf54>Y_NR|TM9OJzg?001lymgu&>S5dXUn@UW1eXVx}zcs)0Rd8p^+@Z
z#fvhPj1=?t)j=)DP0K1sPjtn!5uJ*?$*az-4r4+s)WmBK#MMn80UnTW3j8SF!@8eo
z(ix+0k5*{n(iw6g`3HI~nni-FrfbUItwzA(oUC(|R8fiEc^<ceLore1b@4mRPbp2O
z{uFl*nxTS>jOX;^-7axcn8F_)Og31qL3|}Fc3<h=UmQ>=RD1Om(h1A}&EQ}0Y;pep
z)@*wEwg+t?B*i)nnbSugT(+}N0OwI)2pPY}i#j*32hQC#y$8^X$Xo#vE1;^o2adxQ
zfzx5+H@~}U8du@R#SoIGX=&FIk<#+<Ysx)7{dHi-<~mWl+vRz6hS&oP#%SM%lE^jK
z(K5zzTA%#Lg6?Lr#*;S+^q@%y8=v%VP~2FLRe>)w6gS<blny*%t({Sf>l@463E6ph
zPUD^N4<6r*v7Y=<{kAYZdbrr05_KRUs~o#7{l|~MnHTz}UG1SHvhcge0AaxAczS;j
zBz-*ok-;f)o;K4TqaLH92Tt%hI$j8ce9-ukoUGF#8qyX*=B;;i2{C7My6{V%!kUAP
zhPsLO&MR%<dH~D5t#{uVuN@veL1n*(fn3`sC~@g~1~XFFOxXFDK4BTRzdLVYv08et
zbC}F&!ccBw{uEXp#^=ZxMy;BhZ{HfMHsZg3|J|)wfv)oYHhACE8R%)woL@7F$<x;R
zV?tix?b}@3+?Y>TBA?k<83W!D0A1PNzcbCUcU{IbM=g&u+F9h##i#%$<7H+%ho!;Q
zZq&>t{@U~DJ8B?-Chgc5FSfqAM1_PuYTB0Z*7Q@*1P|t^<g1kD6%{?$gm;&NFPhws
zKI^#^X2YQZZ82);qMv2@!ft?s{&?sho5ZK?g7A#AUmK`o+}I&WAe2oIm~Z)nm8^?U
zD3BDVN0+a%@lRLm+=MD`Ep#yH(Q`3{7p10885fPuRvu*~{9yd*v}mS#bzEXtHU@|0
z*N6x(4pZ&&IV^lWIk9JJRL<a=Ez4EZZE$G{(P?lnTOTPYi;;~oi!z;p&){9g!zJ)&
zqzF7Bz*&xd8NlmSX5M!Wbv+v~0fFSJz8~b0RGDeyWV~(*Mdb%c<CVRM0wS~k4)Fjd
zvwn+MYzprc==x_{`;nL{(_upU(7ydP{R(PW(3882SHCSg*BAaI_m5bHRgsl+0(;gr
z1w9mqi5cJ?j1>&)gts`8$tIsMUKD7zXYC;Cuu^908VGFPeprX_g@a2RhjLe^xqI-u
zS)?;-z<gj#VgC)8YRTk!AE!uwV$({5NYDzEpN&7eh04+Tpv6fb9*9ZPtxsT;PB$K7
zs>WQ*+P_LD*8X6lx?$9md%qlB;RI2j=Sx1FE>JI(H5LuN8Ht<KCX9NzxKI5zG%zq-
zrPC$*37yyROw)q+SJT+g>N@93F5|x-#QgSvj9E)dD?Ln|akFd#0xU{(Io=s4uvg+o
zE%Kg%M!%fgYGmS^Ph{&)VzQvSD7BWv6bw)pkP)R<S#l7uEES4L2WHOpkDVPQcu+G_
z39X*LEBx*Gp7pto71tiI9=B`tCF&{ILN`YTvgfepK)PW)RdCWGhGk~b^`|VYIK}$D
z<?*FACeyQ-b+|7_>fwGT<#GxCVKhN?q0%p43-JU*SGd!#=z#%SqSJ&KA{s9g4oo{#
zT>AZ$p{Uz=!#S@?+EbqjOXXdz;{-i3BGV;1#lv5CVaD(0>-&Qd!o=-0EboYkp%a24
zTS#!Hy1r~aA!TQ;6=P|@q-$j)cfe5+31Z{X(NR0z)9PHsN(TOc8%hl4Ia;HicLck@
z<Lc^tCG#a1v}zR<VZb1NS%QxIS{Wu=oLp}{3^r)HMX(Uq!J;!?OcLbE0;<=Ni+#QG
zul3a2@9ei2RAp#8w5j8>&J$u{5)w2a!DzIYYX{Y3Zu^vdewjpF{3Tf^0)fzDV`iq7
z^dE_h1+uVCwfU<S%wsYN+Em6AK@2yFV$EU!W3Eb*B|gmx^Q@vGnR`YIrnnTQy>;f@
z39jz$1AT7j1ZMj)X~J6Ei&-Hdu9P_gF`K(P88hj|=1ilgGv}2#l|tI0f>qur3f+(;
zlZ8@cjquuUkK%vUy~CI#+8xi$!4xeiycqdgWq<rdrcq@1eLVJkh_b+7GZfO2lFHFl
z`mSnj_Y4)~SQ|iXw5o;as7Ww(0y}yNvt?d!G2_N_%dx5spbcq=*4W1sfwhV<H08VJ
zG1cCElM*(s-d;$w#>c_&KHL}AaC0+P7|SPMbU)xwR8k5I3Ok!Q7hvK0k=W1>%Y{fW
zWv~v`NwxO{RDUKhyW4(`b}ib4Oug4Z;12~{H8_wgr!P?>Z+#OA4AJH0>PlqxQ;?PV
zL)G(`%_cQ6b77Bw(a^vEj6XSY@;;TaASS@af6}8oUTVU*cvPh*?2j7vc*{w+S|IQi
z$TcTwWv4-DK_=ipRoV05gGu&6DLBsK)UD$yeR5Z;m<`pE0jIMPr}AZuXO4a2n78f$
zXisudUtPFG%4aWdFjCfeh*UCY!vZ^T+z#Rl$pk&WrKZ{pkNpiu(l!th0wGY<B2;b^
zCPBqjSd;<+voVVhy1k2zKB~)%Y~|ahnRwa3(@qVuR<db%QJaX~+GoZmMjw_H7Q7>T
zZ@X?jX6%gW#77x0b-l1-vjK{qIm$#*I92k(H}uNo)R$8wB<B6iWbUDBaaZ`{e7xO`
zi@S?co~K<YoH5OM5R<k7W*@<JMC1gqniXc0qL60aR@#bcwp~Wf=U>*k0_1J&c&0i)
z#8vKQVRL`qPWuxIco4adOPtZ*w1;8cyQkA&u-Me{$=zX16w%m8L-W@2bfVhR{^SR_
zcCCZ<cfF?@fBN)QO1jROHcCP7{^8^8>?~VKuF_kluVmlIDJgso2n`JWyui{nCzV($
z$;8rF{R-v2+%r-^R|T6vTJp~-g<7`jEAm!XQC<uH6JfPFKOVFg`YkUS7!J8rKnld!
zq!W7-7!r^rMT+@utm+GPA2gxq1;C<|DI*3x5O$(LUST0AA>kVfp+(E_%6YrANULt<
zKG+C}L{VEv$5n!CeYa*=y*_a2A0+;)k!{liRM2QJ?+gqGXmDJ68|rvV(#Fm%eHrGX
zo(J2hH_${xcq%{yZ=#$g<d1rGG|-YNgqH2R^$C-#B6wO?K9u%%k@gu#X*gLdU#4(d
z`#7@lV0xV$($fd-HaaNzimryg2BkM0eew0U2FoW@g3t5xLnrl5Qf7mnA#1~>kr4fn
z5E~0C_pqIGhbiO1$ieJ?Qf>za2diCvj#{AgrV_4o9Ctd!CuTE!DV?v_{=oNGZkzst
z|87x0p-u)5>1TacFP44BNKPiT1_$cOhaht{mmg&<DZ^?izfQiDV{q>1&r+n2m64Ll
zluZ^I$_gT|AFMj;IxaNrie>iggWA-{dsVk0XQCk^h@gwQij>dgZZ|pCo~~M`H+41p
zcR1M=N8}`*c3vp#ldSB8;5|m`Iw!)6L=t{H^VFB4$wG=}o91Tb(PU9~W+ElPeI%!*
z@Hy*SAo+`c_7@OLDS2C@pULkTXUg!ZAD#1)iA&Ej2Au{e#KL(vN0P55&t1v!>fV$F
zHnXt;2)gt+-wVEVbVEfoTUw3n%vJS8NmUgW8d_`0(T$$<=fv<8m8a<@)fXzppO~PY
zeK%bp{qVxh^cd=e@k-0=T&<4xK7MLx%!1xMEt8(3yNl2gLB9n^K(+d}mLS8TAtZ*h
zoz9klpil=<F|i~;XQ#2URbHpfcvk1B)l!q(x6zBgw~m43UaXCfS0QgN_`g{IOclXC
z1hy%5K0dyWWMAccE7ePv$`U7rW_PoK;2hi|pv!b1vb_I8)#hZy;GIE#nK~;vV+z0L
z-^Eqe^Wy-~5EAHNJWjht!%_s~2`7qmuZFE3XZOaw+EIWmlj`gU5~<>c50C_>FIGwK
z@t7>xP-<{mOeLm2;&}oZ9ND78=q>O7C)b~WPf0BIIHO(m_b1^;1g+Y`^z?9>lD&hm
zG6_}(>wzWuz(5IKJB_=8f=-Ff9r>U?r`ziqq1UW*-0JfakU}>cDXyyW$TZQ2Oiq46
z8^>WiNdrTE<GpVpLHPa7Y)|(_LbhX8Kye*n-ucH&_|pRtW;>-`o$9HIqs~Q1-2H2D
zNa$-etNx$R?`6@d?zuRccm2uybf2`%a}w0nf2X}0!Gi<x@b!Vpt!&1k(&er!JM-Q$
zUc31rOP!mCEApFCt8{i2@`&?L5N%IRXboGAyu>{4ulJ13t-i=w7`iT1v%=Fq>b!pQ
z@C^0Q)26_`<Ohrxm#=HejM7WI-VOZSPfRb2|MrjS96$%wq%36CdfgejSL!1(j#^Vq
z`)(Z3w6%eyK)`OD@InsEM+2KU&SZL=s?J46OADE=$8>UX^Np*qYzz!;D&sd`eUHq<
z-O!s6Xhgfd=`5sWhR<}F5T{CQfffvQUgSA)l~$A4y&FJ5r_T{}pDM%XK^KEbE!YUm
zP9i_1_t_e@^LcE~jO@(!kZDs$C9-)>O>jP_<2{l};Rq3mcRTnCp1^=zv&&0$#(}Kq
z9UxV7{(3XeDd@eUpe^jVo$8}CWHr!+dF=<TSr|I_0yRP5#&c=uZZL5!tNDaJ^4Qz0
zF|nU6a3%|^cZXcG$Vem4qvVXQU*#7&pMS*6Sf2*ECY7RCUoAL&aJe6IdmMv+jLq7{
zW*eqE@Zz}bUBwuTfx7+m5xCv>5S}Rl_7sct)pmixU0rS>Vj}8l8qhOl91Rv*lWo2p
zxHsPp-t(=g(ob{GI*}odnG<hvzdA{-ch42@L<rx;T8ePQy<4bLo(FR1_E1uYBh6qp
zLfFBO(YX9-rU|rn-?4L`kpnZW&JPz`Q_~#il_^8XbnD$Phu!=UuTS|_H8Z$er+rW%
z@N=ZXQPK({v)2YP7ciwr8thyQ?XP^oihB#<Sa)?kg^+Ok-d+8SiV62=)5)=Nu;HA}
zoPP<GP84+B1ZGsQx7@eNxY3y2lwAFvt!;%%sy)x3l1<tAbza9^Zenl0xBhkaShAzU
zXK@HlG<DZj-{g}-v~Hc>L7!&H!Wn4src)*CT<Iw;vHWr73_2E(zt7U0+h6_xC-ji@
zMC^Rg@D2`TH=|Z2YO0L&v{m<ni*5Z&fVwS1y=%33hB!k3KqkOl(4m`>(Ft|ZL*Ei;
z1ch2jjeE)yw#G|5E*g~Zs1jRt)nQq*q}JZ{AiOAWI%-TV0wcqW3`TNA;fKRvPq>?F
z={tS>=i9;v9LmY?@!KX}l|iiBM8Fpjzh^k0jSG}S6Kuc@8PJ#6^myAT;p%bWHup1t
zJcz(JB}OIoaH%>d&_6dP$EcSCL#xUqmm*i5KP<()^D!KF7&O23{6BoSJDhd^fVnhw
z0xgn`G{3w3EG!f1Kbj%xPbo6W-`x>AwGy(TzZ#!RNZOFeL}Q5MCJr$nF|F@<Ca_Vv
zXG^=L9*L;0-RxFSFgn48F%CG>cUhm8=YRP5`qi=;T2_9(q;A%B^+2TBlGR1)F=S>7
z@}pkZjV72{(bH^gnRfok#bs4=U)qd|%$T@TuzRQH%J!$fB}cyasCQ!|C3mu*{4Ag3
zzC;Kc+UT*H=#@<*RdhJr(U3MDhpu2|xNI2#E-p5Y`w(3bPPExTHls#erk1+)*oTwL
z?X8hCerHMyo+S%?S8YY@5Dr-YtnBXWj8@t53;N=XmpV^he8RHQLL|Gc=}sA7(h@&-
z!e?~VaPjENBZG5I!3xvS-BU+o=7-l_U3A}6ixNLneK<PW(z*zKbBs07U|-B~_3Syw
z(l#e~N)TeQ)8A9imaCi0uu#ZjLAnj8zAz$OJ&N=)r<6{X!fH}N4~wDK9)sO^=~TV?
zmkiGfI&EfMglj24@*FLOU;J#xA`$R)YNx&zJzqEa{H2UlpS9wYCyIu{#*k&xxvMML
z`a-j{4_5=7BNfHY!9llxHH+?{9eR#kP_BVN`s$bZM4jf|UdHy_$J4z2%xIX#_Iz09
z)8UJfT_*cTJ8RXGNOFhFc{xtlWS85wgYOiebIexfw<OAzMqb-n$X9!c;oZjsD=wdV
z&qM;J)xx8T9~0B^(AkB3L`SK{CXg)9xSa0!(qEf#^oE&9QrKJknXvmSsQNQL{5*4(
ziBM1g)12Eo6R}00t(M{C>(uk0HR3if=rph42?fjAkm;2qZlZQ+qplwe!YQ1uxEzYL
zDVW-_3m~@B-9>u?p=YWA&;jDWjGdfbMDn2)=AD~dXvC>Tytd~qko*fu`J}9K=zx`U
z2$KY_D!_FDl*)~%(xY`(dp~r%+nA64$qU~9{OCCtpy~{Hw=_&|%e}}s=t<$M6zfgq
zJc+q6U2DN_+K57d4z9;I0mG%zY*~;3wxybaj!-@SEj!NF^FxlK-i%2ro(5sWNI{td
zO>t7*VgA=C<DU|z)KU9SR+D}RsQ}yA(D3W}qQjpsijH5uzBgwV73qxTe7<bVmX6!K
zoUG*?axPZa@jhKxo!~Ad5@bqdw{L?n462{74#Kvs8&O7+6m|ipLa_1Fo!F9;VU&RZ
zSnhxQs(1(UNq?3_3<z|?$Xt>n?rNiU-5N$gc66dM_@7z2AFZDrZX{$cs}k#7q5qp1
zaE}LVY<H~uQOhS=|46iYldrb(qlX(~4Q?k9BmyAEj=8}w2U0DRz=S$kpJWc>uC@at
z<cov9oi>53vruD|8^8k9cAvtY0B|=dBt&|8>TSWkcuaJ#g${plPm$E3nx(pmXhc?K
zDb~GpeL6{eM{LLV+wM=0iFVwBtuF(!SeDL$G>1$~DSCsAM*_AVQwC;z>lCzqBuP{7
z?x~2u?3cPdXQ@2GdnxHcwp*&j)&R(W#O-C<=~wb`Oty2s<TDc3&AI~7>ze>zLuV2W
zl>5km;j7u@qte8fvc<_&PWtD3^LJ|Fp8KAm*jFAI(}naS0I-hxVz1McNZM;9G1~Ux
zJD0bdv@|^h&uK~rO3*g0sSyap9v$|k*qbP|wYH(B>jK|4OqwKmYpVJZ!11>|aKr0d
z4o>&7dq;bjX!sR6bC&QfI3i3e@kYjPIZ*{`2N>M$FZhH_YjAM#sEX=0Z`KhKJq`|l
z7O`MlhSk1Olh-a>XU<>(d5iFZI)57BiNnzQ3&nnxUh+y;G^Q4d2?>8AxJ5}$skoi+
zg{bEjVQKJX`ibZ3puL`H0?9M)X`IIE=BN3$d`oh@n{CU+SS1LX+@3_4nU6bdROyek
z-F0h&jjDc`H@E4p4`!_R_ALc}AYx!`xU#pd+CDwQ(5~P&RF|5y?Kga0G3xR<{GCvj
zo2nNJgONFmo}ch}{Q2J3`?>~n*sLbKu4kv!9;bYUZBi=OnUV5H3p)%~oz5dmJ`71?
z9r1M;Hbva!qzBUXvqqVeIW+wa6yJ89(-#NcO2}<8@7PUl&trDHH>4cUJ-mRKziqhw
zm*rg<vBf{_Z+B>wqI*v5l=4fTC8RZd%PV!WtBVK??0Wr?07X`*xBBLMO7f&wTz8+5
zpK|Ov<KYbjc4f7vwRVfUpT9i!KN1xUB{tUI*&A|zX#(smwzv1u??0$^x)22$O4V-t
z*<o)yzX{avu(5cYlz3{QW5?n!vQ1KHb?>e2cbmSn=VDc}pl==LcO}Nf{=0h;G~?vf
zsv`OriMSoR=zwX%<1FgXhUq;}Jx+3OlQKp9d{3ZJDPi}S`svuM2ZtYTNJPBtP8dgc
zkgu#tsH?{v^1)K%#g~nT>``*u(pfxO9ShWoD>h!C&a`MKREzkG+Rm+W_<mB%%zdtj
zQkgk94tqnEn&V=H8Wn6%flRpC16;Z-ED*M&US~sv$^340pj2t=PMGK}LPk;>>YEXz
zJQPgzM!^2QTl4$NDrB1ht+Y79uo*G7ltwVY5&AJjDeEIT<|KlNL*=)Z)ax3!UvUjl
zm0Z%OMaa?T>Kc#TaEp8X!NZSfqf3uX<g#GsO-M42{-TGM8EcGt_NCd4mUZyTdX$%@
z<cC7tXv)tWAzh6>YcBXvZN3UF{@g16Oh&qxm`;B-uo5qrVzg_`r9m$U=Xco#{#ulf
zqE(r1n*QDrz17sQt8^1QG|fsge%tfo(2a5V!`+$L7Om>MyuaaT!qkZ*tZsk6`V{(@
zzfC*7DD|J>++6Zlu*1r0hd6UJf~^#^=}#sq&Bkj6;{l>!J)+ii<Xv@!Vgmb#%PWib
zt(VT2Ofi4)Cho-6qVS)2zBhv*Nps5do#T``Ol&uw+f+oR(+2b3x?wZeD-iIY^3E+Z
z*#s65ITnyF@t+-bbiSSZ1EcZorAxmc0!BK`A1|1g!lS6><|54h#+#cHv#{7f=QoFa
zd~!-^mP;+(As%pVXLdGicDCuNzeC>iDS5Nt#7#*&RKHyyceaO-?(OZ_J6_nG>}I`x
zk3y5e>D>h0o(H6SZ(6J$KL&P}Sn%U=+m=(Xr+`LSIu0U%iPTKrP_d(`tY=9sB~#6%
z5By5(w@@}xGoo<^#LykFJ(ilW2)a<R2(F(yzM3a4Ly~d)0gKw-PPl!dkn08-Lc!{-
z+cyojjNZQJzMmDVxI}hWgqhvgg;L`zYx_xCe?i{;(!jTZ5w5cidJ;W&4dgp49h@1X
zs+ZY?jI9_w-dh)ecm0iq>F7kmh%CSwodF2DveMFdVk{G|X4u*Nc=hTPTb=iGLr@H(
zVoj{1;cYZDD>X#&?Zl~ujmcW9@*=*|4rga)i;0}HPqn<5K#R7WINkvpv8%pyZy+u6
zENqwO)y$s~*;>Quel>0wCCFH25w_a4F*9AKt8p=?iWh8$Cd}LWM5Qz;1wSz-YE8N?
z?~MqeP~Cu!cDXT9#nnGpxU@_^^)APY7sn7wBq33Ei?Ow)T_$m+;voP(#X?DOx=2V#
z+3k*PCV#kD3>6Lj{+$}}%J25kdY?Va<XiK?R``Hnvbyru!h999A56!rxcHs@!YVo<
z%EAbbteJnV8c|XrBhMXE6|~a)BmcQF!l3hqp*EEu*w~TC7zTAsb$Oat+AY{>6%{d5
z7Cs%!Q@y&p;Klq?sCm>e-|nlaFX;8IU83gUrF)tS3za68um(1f;ysbl5;G~q2!er#
z*ItB)5j}V0O_Tp`7EmjONx(~)#k$jV{6Zi^HD!m@LqAta*pyLQ#5d;I6FP^$AH!E+
z|17Aziqa*FuVyKeIzU`KcZF18caEdg?_SW5{nl?GVAP=EW2c~~aY`D)eX5$Lm239(
z8(6g*UVg2eoTQ8ieh_ZDAC#Y8amZLx7<v~gdommFj)cm&{f&S2TZ86EE?5|1Xsd2>
z@z3+<Fl5k1b4OtW4zRK|8Z^hvrl>x$-}`1lN4ZC1@bEhEw2Ier>0L^LXSM#A`v}6D
zjPyoG$SkP_Lw<(+%uEw3KWwtAYzPMLG8CqzAnZ+gr8@Y!yP(1_M#ccsH;zV*uKudg
z2cKRun2a|X&zdIh@5hf6*ymp7&!4wo&l%3o&BIq4-P&oeB2m+3Q!!@$LrYnlo?eup
zDU%-@Iy~I_<qLT^7Is;9#NxDtPnHVoFx-z;2l8V^{euXA)>!Mj);U?k2mBls7T^3*
z=U%Jc;$*he)Eq)G-CZjghUnM`2Fj#8w$2@eI&-=`R+Mi)tvSh^{)vpiFA9(QlXa}9
zlc>rqXw>R@pm=;ED1yr#C!Urkgn%g}=vR5m@?+XJyRt!9B50+-#!CTHjI<uby7jxD
zECX(_ECbo%!UC*BvvPB(W8Kbwb{vxOXjPVFvTXs}<#0prpV)l_Qr*5<PS>W5k<=bK
zx}%HQBUm)0c|J8;o%5nx4!-}rN-cid^ZkIA&Kh#^4wuDkwM5-Z#Hj&PFMDfOX186o
zlC?{hdt@agFJi3xKEO+&b}eK4>@_(#`SCt+;v&Tj+-WNSzi#rAZ1T|Fu(sX;_lU>d
zsjEGO1RA3j(-lB~2^h6G03y1h*kqwv{4Ktqs(*+<wTRDJ8Q4i4o_uq221MsX=op6S
z&sScx*zE?Mo<_lLpH?+@b$;U!?y+AK8=QSTf<reYS)pwU%2!=|)rS;|ktOAE%6zlr
zUw;A1vcru@<Y3x9sk6JUvy8Pr@6U8;O$Z}+vRsUhgU!4{U5(bbpijp*m*q0}JRnzm
zn<v#yc45(l|Emk<<2;%c-kmD{n~X9K-pp#Rok`+mm#OH<8meQe>+B9`QbkHjn@oRI
z!*O+D4OH!xigO;$k`1WaXCZgY`sq@s+gakP%VKSOQ_%$@QyE>d`|RS!Gux#<t57FF
zn#(HqtwBBQYiF(mH->COT1MTv)IM-i{m^xkAb9cwTpzHAZav6(XR7vv7Dx%<etyEe
zo0HXjz#YTg>)BvoX%yT-O&ndr<Lt8QK*7*PrTY_BM#b8Aw5fi@Y9fG<ibMC_pwP0m
z!dHLHkjwp23!+r~X~FhQr}q6H$$iPr7)C*p9<3%<(?pnzCJDGl2YGQjBu3$>{{3rQ
zHA2Dm;`d}XQAx<J*7jDHD&9{psl7eSsH?6m927+b&%Cy{wNIA%GK03(BtKOL1p|Xj
zuifr$Q&ZiGd0?<XCflD(Gew$Wh$1OPQWjNCS>WS`5Oc(HnPD5Bo9;PWHv5Zzm3T?1
zhW+%5tMs?K0~8+z!}aF}W8<*xrH!0VhA$Kz99ppzljK#$*GbwiiWw)KoJ-<%_lKT5
zmL8JunGBot?`|#<+pC$3&us$GXO_<S_ObTOt%YT7;ySMiy8@f%@xzbU@D7y>dhV^u
zP8F|cRq5$uTTQ05e3Z9Rsp8|{-~gpvZM_HxKnNJsJ3mC!aJxb3N?>3ohziQe%g+wi
zAjFEk=)4_EP{TJqp18FQD(B3Yv%Sq!^r)FJZ7<D^x^FQlm~XW_kUtJ@CM74UUtXQA
z`YswBKEhOoST4B&<A8V4Qh6FcIh*XaTa9Q1400@+D~simTNivL%x+zTolmUQ5S!a+
z!exnIK*QKfdGV6>S%DhBe>e+_gixP8y>Thn!1^ntQ&f4Z!i;w3>N4g0;$m~Ee5oj{
z^BEAzdbda{x!BnpU_coX5+E%_N0d#S?vE>*m5ml{$8ofo#Bbkrxbqdz#tWI5<rYJA
zuz2dEPVVdP=K(2zv%*?Qh8TUZc7_ie0hnYQ4)aUhW#s82$G}O-S1mMZO*VR|79n3<
zSM$*>c$uH7SxUmB+2^C;&8?@jZP+Z5&lN^L&IIcpy{I66VR&rzc<brQM+fsGSM-*;
zrfn$35xrvD5%n*)?OC#%u>5!Crv7Nry#DsXaP~^`tJY`otT(3weNlJe{(fZnjz+l%
z=2I`UWV+3Ux`@C@Far7)V+ZHWk-o-1Y+DaE^FOtN{?H75aF;r#l@=!_XZCXzB`=7D
z1g4U!=h3%CzKT+Ju$^}NLb<xu=#kEzq0AG{)ZwlfK1K2N|9{P^d>u(Rx)QmAcDy=e
z9XI>S!NsBF3bStogY;BQIy;DH0o9Lf%W`iLDbKqqJq4|I1!cj(nMQ34)Rr!r8k!-5
z9r<<c!#&0T3z*9`$b$K4Jn-B%t;p;qOsQ#Tfb+q_MD=U-U@dPj&+}60d+~aTk)GV_
zkmVZI)-*ZA#n!VDbUYfaIxoocJD+%qi-S{ape3oHK|#m%3%Q3ud(UfBh;Yk`Py!Ue
zC+fr-&*TgOc~un&*-Js8ET}G&)_FxjN8E})BWC}5a9K@y##)|G?&R(0cf$}0#z-fq
z1Cd_E@)8a5GO@h0%7m7!pg%A)2$Zkw)>J@CdXe#?;O?L3#iXk`-pC7b7OMt@X+JgQ
zf1W;-m(jiYl%jih_?6@o?b{HQ2M0Ug()=D&*<@4VI@fVUPh&W^y>*GUeah$^Zmfmc
z#Zr9ZEzyom8$9FWo6WkHM1P2eQA!0HZdWO0GeFmt<}=Cbd_HNPcCe3$QRAIV0&Tw>
z%ZOlQv10yEL%n--ktbC=-fINtY~BrJ?v&*UTKln?&HY@GPN=iBnGwyUAh_rUqSm`&
z^^BVO3yi}%urN8?6jUx%(S9Y4RN3HoH<n=Bzf^c;7W;&RV}pp(O9R58_o_X_#i^Cq
zF$2x(>L=}kEUhLRSlznR{C00cib+L<Q?s_|-F&571t8sw2xf|Z{RV8H9$RcuYG=1K
zu6H9dC5EDR1u0}6=jTQZcVw-unh8uj*_Y4HwZL-{>$G2{-<mXG!rW(B>tzqy;C&#S
zz>JU{4?WTS#i;oU6tCb7X>h-q9klp#8<W_^Up9rG)pCT%eK89eU0qYn+u#Uy-ee%F
zX{A9bQ>jTW=@eIu$LR#(>V4g?3Ha`H`RgGX!J~VZ$9b{|+`Kn$`c;YP$$g*3x}qyx
z7qrm>1{gQP#vXxcQ=KY(k*z-nha8WNCGvlU9BvM@pJX7Bs>Q4P6{da9wm4%+bP;4}
z`sq@~k)QGJJ_FS5!u<SK{!`;R969d=!usEjMzC=&u+6q!25ftfqMa!UDqO~(GidBT
z$?^!4jC|udvo+nYC<t`bTV{tVF~CE|UtWoEin~Sm76WF)5(<BNw@~SR!K>afc{||0
z5i!iYetr%O)u=O_{qp?N|3rf{Y27U!cIH9A5K+GiJe%<{tHEOLtBm$g`@Z6gjQN}|
z&p*_*(!5Jcd#a<OOHa=L2zinOB@#}r(@|EjX`TiJd3jQncN2vqF`l0Go8FSz8TT)Y
z+S^3Q7y2!zS_z?*8f46FxBLeUb(Gz5sK7WV8pJoF2m_#PKqNPy$wn#rC|JqaKk>`M
z=+o9vtb`9h(?8o=f6-F)eIk3j&>Q$#Na(zR-U6zMeWdEjR7T22(YSoo9(mVVrzB;i
z!D98;We&qB`fC*()cG5hZx2_$N<s)qXbM+ff!V+Wb~ViAR!2)!0s5Aa{tQsrWx!B_
z`Ih_%0GyoGCv3sa-q<+vrEn6oT_3iTs0#>~S)qH;2c$kIbj<GIP(W$w6r6e!t!C1F
zU++X%{60^7hN?=;np}+V>}Fl{p3~+8v(ffLV*32-O3U%X2OHzAZf+dbQ|EtHS(Srn
zmI*&B=>PonrK~x9gSPf(`OEjZl9DkOGepC`UTCYt<K@lZPR(0ClzfwZ^b1Mo`v&57
zLmu;s%gTCBC)2Ad#DG|;<zpDIfuIE58AN7-lXuq5hao?Ex<nC+bP_tU%fsF$-Y4tN
zs<3Q`NGGEU$4*a=>%Mz8AKawx`ANcQ_9ZfLf3{`(Mc~y*fIg9#8KyLdzOm3B;C6Vv
zzY<UHMHy(iuX2B(f;f_sYKfo;b)g$MVBe80GV#4UN;$Nz7zO4Q6WdTG1+kox=TcMq
z+_?1d5uBJrOf)!dG<0u(s?YYTk+Bi%L6j8dv+U;$>_gQ~_czvnJLWwfdE+`S41#C|
zYL9}wD~<Lr2&#B$kJf<|^<Z$K+=7$e+tx8dXi7VkrB-`&xcCY@302LYS%=Qg{-RB~
z4U2x|*cWheXIM|{h94QjbX4Y~-uhaldu}{YwWIYktB}KT>b!3er&2`=vOXE;yVu5@
zCA!PsjVe_Ap3l!-JRkwcaW=La2AQ^(6)~BhYv-bi^;C`Y7py{(LczipQNJaB$AhMR
zZ@qetP8R%P2$Q`Tzde)LPXo1K<Id}k67Q#=iTqQCrCYzk^9=pLgY>1Hi`wDR?27iV
zO^d;r`Wl|Ce8?dE<*pdvjA1sKHwgF%>eDQJaI^#P5R-K;o!#P($K^zFL=9MC<|Y2H
zvrSA+Qo(n8;(S0%{5RN}V-i>Z)>;Uemg$o!>kk4ouvYC~2dn-yU{kX>wq#zVSVP>E
z9$lS)E*9}_^s0zDm6OGOscU1rqMwQW=UhB_c@YpC6$)bKJHeB2y^aw>{9K#|lIr+x
zR!(AKY=f~>0TBe-`Q{`qBnJaGcVbE}bmd|H1UUV><HeboXdjcOqupHiq^1y9=a=vD
z?&cXmA1tfHw!ZkhF*A>fW3|pjwmbV`^HhvyZ#}efS@~X)XZ}}{vsl3P9Q2fy8fEV!
ztF?%@Pkj7DKl-DQj#LhI^rZ>6TWO4qP3Yf?*Jx_|ebtTyyCx!{)!_R~f~-<vf`fx>
zw}=c~Mf?FO5<HbD^5w=<t;sNOm-+Y+a~yBD*ZQ+ehKuTPadExQx36JU8v}Cs<>u_m
zy}A@R_N)EXz{H1a1c(02xaK{bI+vxXdfw`&f#k&!!zJLlIXEq`XOK${t^AGFuCk#R
zUIrPJ36MK?=UNr5q5-uH>r?H2Gus;DSj7ZAJ4XytBX;JqmGg`uV`GmOIx+x~ins5=
z{jv{df;`<ID{wS>iPHV6A?fpsV0+X0K&BU$`yJJis;nR=`1R{^67SHmyrNFBvlC|}
zXCkRTIV|-WY&|p)I@+i9Ao^VB@fL7CTnD5sH30$kW1&6@W2704C5@@e<2SM)0O|iP
zN8rk-eSZy?<ZGWilQC)3andLG+4q;IV9h@V7PGDG^-W4$LnndT&<!w2)KXbxI`7^M
zHTXkVM_hQUT&)v5Obyp+j|#Rl&Q4B?)N6ab`|8K^BrW1CKtAaD>@0-CIm6inn_vwM
zK#~F1L$gw5BPWNd$YwKf6r4X9TosP_(YPCTQ<@8lzO_vbsz^(hJ8ubOv<Gt(DJ<5V
zpn(n%4;izzwx)RdS}8#%i$f`0?R+!^yd-}NW1~!!LY?V!5n9dhPopLfLi=r7OGoF+
z1?H0{x+`b>jMfkF@$IIUWTv9_te(E|d9^Wa;$SUPf?w{ld;9jp%7*|PKtFzsjkSR|
zd)UQ+!u6=>;tV*uv3$mXG1<e3)%HhQ)9uH##DGAbdz-6L=myQhG-8?5NWI)Gq$b|2
zw!+fXXK9H*OB*5Q3L3E--xd-v5M`Su0#EXxPTVWMJ7=e-fQk(s`p{q{K`ooel-w``
z`k=ZwXW~dSPed8Q;OO|C2(mYYKY`o+wsG?0#KecS7rXKgHS66R(Gk7L{LiZnxz0$s
zcAlr-KLJ&+*D>Cl<)=Us45`mSY1&;s1*@LYcPBqoeL?wC$oARwu5pY#H^R#9gk_!V
z*&-?3#*Q!@yLTn^N8i-PjZ>4FkS#);fsDEvx&eTs!QAop-};~Gxs8kpn2zL}3}jc}
zVbW65P^)WB%g9JL*x51VDGdI~p&_OErvBmudFLw0$haV&$NT6tHxpvSmWcWc9z9C?
z`<EDE{i?>FQU9WCYioNWE}k8<BG7oXU>W`zA4SoHTd(mq4&{UDYEL3&gY`zAmdbbP
z&tq%M2h$gfE;ss~yNZnpde~^xID|$-?52z4L%`<h^72<_S0_+|04M3&KOB;--SLhe
z?-My*oJPTm;<RPO;rKTZ4da{rS#hLW`bC&X&|4y6m3Tf^3U)fx;oj>=IetAWz0JCl
zfB<nQCVO|ZrfHOeoi|453F{3l`7PR{IxUQg#RVJ6a=7i6Z8Kz3_>4u!pYa9nD9FZ_
zlpsbtahIK+g2;K#(Etd>5FuCAo<h!+WrxllMk@G9aj822>3>U!m4b)D{UPl-M8)<V
zr<95h=7EPrtIG!36!0E_tYHgciUE(fZ0_c{=eEB+3$drw@~)Rjf?(^DxWP2I`nw@1
z3~MXXia7O!4xXVQy8KYFrdZ#fdUxjpHmld89ELbJuV%9(32Gg;rfM8XIu({GtOyvj
zj%Sy}!azJTT%f);FSbnB@R;`xo~S%o>l2{i_9$#_Y|yVr&|_?dKikU8L-+`U=lr_c
zeLi`YatmLmod7;L^>&MS5P}l=g#V-02_zBpX!F_VA%ZZra#qIJLExw^G0k3%)6QwV
z)RQEpOGJuyFqf^2wnEhbVgk5Pv>vdtL#U4^rZkwmsHxb&5iU7gL?+;o>PG;dU{a2E
zrgjSbmlt<n-q7H7Kx5^^<Hie2qmw;XZz~FlKQ);kOA%^;D<I-Cy6ddx^(!27=exn)
zwDW*Ak*@%7K0h?Ht?iU@u{BqXO%0xI%f}oLHB#r+t-*uBX5V)ImHr{;2vkskc(k^P
z^mIiE&w<fSRGvjNkPWZfcOgYSO+Bfcl)SfbFH@}7opa62TR)sIQ+fVWP%zf=%&PZO
zC{t2Uj_SuX?l;aFkQ^gl!(IFT=)amDJ$WLE1rUZ;0W%{E7kn%_N5>5lrchuZRqF14
zkB)YF{hCk&G2!_hdZxiYgVj1oj>x}#6?9Zga*8dwVFW1Ni^lK4ZqxJY^P9!pyh!cT
zBwB7)G-lhK%!L=?)MooPlkR*$Ycw~n8)$<l(GULq3a6@?nqn^Cfc8Hcn|D1|QgTVC
znVCr?gD3-r-cX^%!wuf?u_>$v4{#a4!Cmjyg4C>ZssAX)2DU>&OiX&K>6p;a<71EP
z)BV&XJZuGQw-0^_TTpvOu95IsJ>C#!)GaZXN%c{rxZ0Wu!1bfoDl=Uw7;WZnFMBuI
z+0<uyRFss!X^CAlQKnuB+bsFAu8=3(9wXh|Q2{r-Qw|6aCHqL38=@~~ii<ZTC8g8u
zE^|Im2ja7gqOfqsZ^+`gbCM!yliCe@(SFbAde16(bo$Py0cS_YLS^2JGln8W7UUez
z>z4cglf2K38=ak<xLWdeUq?|p%;wo@TS3QLReQCb9#HGcCiyh$VeX5t|EIXKjH<Hx
z+C3qtAmW3Bl&FA!l+q1KNlJH!q;z+Rh_uq3(g;%0f&mCfvq50fU7PMY6a7E$8RLxc
zj&sh3GY%gdI^68L*1gtTb6)dzq4Dr+#|3+r8O<4K8c07|NF$6obCD0rz%I%uo?1^U
z>A45PI>Rz;+yq<~Gc|TV+^E#ohmKDAQU1n+yQ^pRFJ?RiUo8;27Tj;Cc)x6HV&XmZ
zVoi%v`S9?@$SAO<c4k_gNmw?DC30*MuItr%ocn2Gc+J2ImRrKcb>F08zOz{0)r+J=
zr_vrQYG0vM>o=YeGWS2e*-|I0VBB4zkHyHKansx$*>(l#ch_9}cz<o?KEUx>JIAQ2
zic{A&dhf;n#5f*2(V82EC+^S|V&VO6U%pN$I1J&_DsQ=Rh<;b@6|LtgpW@`_z<5IJ
z^(7JxeAycPVDA`J1crbf8~w*0(^2#m()idLb<wISn)5b78Q*sZ>6Fdmyw_$7XZqOJ
zkI2(*K=j(SYiDd`HoJaK&B+`P{+3)NkA{vF0BWscm*c<b9vOh(DI_dJQAtHU^jW$W
zGfJolvhm#aaDB(dbiKS9)QgcjN0owtWi;vlgKM#}u(Cucy#94|i#BjcW^Kaf3T<#e
z2i~=7>&PkHO4<%;m)+%ngI~-@5TJr<f<%J3Wa|*Cp1@2v2PUD9gGqN}R2(^*5&ev*
zJC%T^<GP+iJ$NE7?3{@Xmyx=drAIFU_DHMJnwgGHa_UmH+vV$It1~IRy#v37%lVy_
zX*8h0KlkN+;wdo>(GyY8_E?0=**m+-jbNCCg?)0b3@GI^4|{|e9w{ozc#NMA(S@(M
zI2=chZW+_i7#k5Oy|}0On8O-LL(lWOySoJTjDYX%V&kOc4fxE0{G=q${VYd}g?4A8
z!a629nV{oa7PK#e6k&DpF(!0agTEHTB^*4wYy%KF1v}rWYLj}lzq{FsICP_b*!qN$
z5`>GCFZGVTENW+o`iA=0knh1N`wHANJ7O3YR#rN2<kiAm^z32_pM}VRevD!A!}sV=
zmyr#6Jh_jj9#!*dyfAhHnIZhF78QrA4KPPf<K1?dye5&p)|$Hd`s44z--MCrmVcVO
z-a8I`PLOT@cLL;GCCEQBi&i6>Luxd?efzd(YYub`;Ge$MN7Yqvy9D3Nm}jo0i2Je$
z3tX{Qf?c`tk&>g66PCl$q6vpT)6lh*l{jdBJJ?F7!pq(hv7+{nh`#4cOKZ$Bo!yia
zehh`CK=RHr>}Se1(%ksCUyc^*8dFodCx!aB+;eyKTp1`Z4)GjcW3Yj=RL*@mrGo;U
zoEKP8=4Ds{Lwt8x-q<&C@H4+gM>{FD^`-~20fK-2>B8%2p@p?n;NG`9Y0j@+zC^Qx
znTDDDho`t?WNMjjbL1(N^+Y=QI+m9`Je`P0x)&+=n3%*Qwd3v?VTm{U`cl0}Xpo}D
zOeTMyVkXA#3>n+9ih7k|ox|o3^?lT7W0C~@gTC7-Y=UA=9++3Jwn1n;RA>r-NTMl^
z=Mb4Vs0%o+{<d1^65Rn>(##+ku&ROU<^BA*NO!6ifHfq*c~*g-=Y4$;jOJTHOb;K<
zcwT-?F`8#*_;|--x1Fe6XLo(5%DI#5Rca~y6L3+Gimfr@{r={9#>V6`Yn=0`)6wgc
zwcrjWRv0P|TNd!QJcF$<lhY4c8nD{T`duy2$>$#!%4PL?b}O4*<u(<`%G4Px8{5#h
z%k+#}Yi{-SlkJG`RMc>t%Um!KB=V7!9uXMlT#5!68Ovm(KC98zYshR|+D&>Zps@_C
z%A`LGD)YR+q8q5HBA~21=USWt*~=_yR`cvxZP<TQ{~YY<vW6@ZhiswULbxhOf?vKg
zUtZR&-Ozjcqzu2S9)JWu7<2+C7xcRjdR#g<#-DfDfVP8YTHd#9qFz~r>3Dwu;KMQs
zRq8IMH>AGsSUz??$d1apw}&N5t~0Cbz0?9r12#UT*VvZ5BM0l}oz26&&J~N>?DJz!
z2xACskoBsSTAaaoOEMXl_fiwwdhKRf`$@#KGr`gh_C);W=idYO1wD47W9L(-<*2-&
zuFicHun!Qr60OSR>QY0j2Js#=O4S5Drw22w2$)JI`M7{rJN-+uJinng(zH9FW6mQ8
z(C&o7+S;Z&PxjlI#kC~^$*^Z6$8vIbCra|3VEF^p(vI$@TngVB#AG^`b<azbr?z4k
z2_LYZxdB&l$i;R0eie6oGl&FWiQ={Vt>7-3$`K@O=DXLhc+gR8H&fG{0ecr{?=d`S
ze1$|IqO%BkF&I4Y_K#O*PI^ueVHkpDv9^t@Z@tkc_j^jm^84MYL}9Vc9K$}{BC6in
z!hZAhasBNiQBe$4#K5duAcmWw1!+pz`>Bi<_5P{Y9Gp$(fghqjR9|YgegS@{_Ahm<
z@n4fX4GB^-6P>bq;)$_-&3t^W>7?#nHuYJj-xaVV%(*qxg+dnu0LMV%c@J1)ToKxV
zfSY*HS?}=iRa1B7;EI5_lhZnNFp5eOs%-EY?Q372FV+ow^@`0}NAaVU+(<s3*U@5g
zi0NR-L~pg710y5y=WXe0(18K?QvEvXF>oL#+gVybp}4$8IKCpj0pu@BGEBf}Yj)i0
z_!{F`$qLhmzp(e}@8G$P^AoPnA!b&kYdtni3dPEWb%WeiRK|i4ap7*@rfaa-=d{zm
zI=2L!UDo(6<D^4i-Pan9>NK2ERGca>PqZ(?!u17K226$Dn#n=0rw`2h6SwW#0<I$O
zeL*4InZ#N7=@VG13?1Wl6&Du|m1qN_o3(?0{(zLv=pn5u!zEQUH6goc9^;C##-5xo
z^3G1yOW2ph#3ZgLh4kmj33|;JZA+5i)E0d#x-C$h2If{q8|mLA!;68H{RGvS#0|L(
z1-W8d7=1f}T|iD88%t^23ZXYk6EwX}yW;8Tx#gNPzt9;0Ily}H5TS<7GTF?TR)>XO
z&l_c8sQ~dtq*m25EY<N-Y5VEZx7%As?w!-$Aep0cxNYj})*bJHo3XQ$h$vioc!{&O
zJ54C;wxIOGrSY*kNXPWL?3|797l_hAXTWHw!$NMizL_%2osYn9@Q6Jliw0P{88$ur
zE9BfWu<h7`9#p6HXyx2zJ_nPsmtDY8Ws&C!uoiamKt{z{Y`t?R?6GIL)JKbCf)gC8
zT{9)%2dk}jahewY<^s+hGVB7nSnY^9+tMNYn3k|IRoLaM<`g&a2=U$Dq)l%Dpg@ul
z6mAELiVvvf@@j5=a`5!m?CB*wlC3tlYIoJ#5(yOU7`5VQT~4{nxDW*#j2#~X-5Z#Q
zH81AcEryt?mC3#HAvXyP?xF@)T;9di?JDly_5u>HiYfxy>x{ioG^g_(?(RUVb6M(J
znfhMWav!0pIw0h8_>@=gd$5GJuqQZW{ctsvEMK1xkRyi%ECq1<o`d$z*hDf)qWp{u
zA~NFS*wolLp{BRK<u`|=rodo0na2)9h%2Wjo)FBKzfkg;dNQu|ZUxJIb6Qg;URs~X
zC7fzz>`>HcsQ5dW9G>m1`J{v!v38H+a;z~!MkjHvp4)0fd})qaa_>Sot-<eoGT^Wv
zUtQ~MK3*?3`k9iLDgG;^kbb#INLpI=;dX9&bZ;uR4Jo2@VN4SD4x{0Wxu*3{EC{(g
zgY)=}fj`VpVKE%(lE^}f3H7d0pNVmbI`<r-F6cZk?M(ex+*K!b-WJtbs8)R8ff5uA
zuG3HDQwi@=Q|o7`VFrsL$C9HW#cUU@1`A`2%}Ps2oo=~O(0*Bzo9k`k!n#FBebs&o
z!;#{h8ox}MwhB847&}7xWQ-ay@tC>N_Kk^>SyPfO<5RI})=%!P6rEm66L6Z}Thk_1
zFCQ0#np8`kG;{DRVLpDE`?Hm^(|6LCX<A#PsLGP-J!AXhm%@~(+e~HV<yn4iF)NS9
zIE!sL9I>1Vz6l7J(+zaiH1pa*)rW09OYTUe>e|GczwC8Ir&e2*{^cEdraYfIEDW^S
zz@j4L;M(PKs3k~9SpWFBd0*9{$4>Oj%a@fMVo~D`r{z8wZAoq(df#v?NIO4~oV|=s
zdb-sd#aevgfswm;<ZO+o6{N)w6huPudFo`7QoNB6Zz+cHe5`~0?xV-@@@k5T2_R`a
z4lG6=?B`}$Jae-ai$(W7AKx5iuLDM6pAa`?1CQI*yN!V`a&{Djv4P!t`*K+^`Un7t
zWdB3$otnP8HOD^k5q9<q8&ig-r>BsFr}@pBj$E&{QwDf?Y;yAK<i=Jfx#J6TS_1J;
zW3`TL&*Vl(CTa}%1vLx^+;%!#-9GS0Z!$0zlBzu1vOPaopxd~Tso&D*xf8eR<L01(
zqg*c8NYmOCyvQRiq<;^*erNP46I}whub067J5{i!K(ApwcuuCAu#c-R{RvU9;63W^
zGGeRmyNM$WXFlNbde}aFq<5xmA8yC6_T$sZA(Su<)QL{npweUX@_L-e!U6WS=#51j
zpVUUL#-_hFAIvpRcJi~z;^^+TPzja=hX3qm<=T%*>gpam+t}xK+d?Z5U`SAZa6dLa
z+VyDQE-GB|#8gj?fAsj|OIduwsUb@eDf!K{qd969l%uET6HgrhwkEe5n|INVqL&mT
zPpFUv&r}vQ?3I+R*HK4vWsDIb(Qj=j{9<p)eq9l2xl4v;7RbZ%TexW==`ng+dpq1#
zadq`))ekv2=iaYTM_BH+_Ay(e=jTTyCN58}-dXI<j~B&dm_IutzJhi~`oxmi*rmUZ
z{X4s!RLhlhfd$8Lm3Fjk_SzHRdyxNP>@NCI!n)_6KtVd0oS|>&TXX}B<mNJ&)*GTi
zHa$tT$HLy8&z`l~G4^JmDM=2AhytxCF0f9<==Bx%B~~`GyXU?HV;JaYVzj3|ikf`q
z@=tZ#YU6tdOMiLDpEY{7q(o`Vk40$A2MN4rtd}%yQ>1w2hmCdvkcrP37?$jhVg@+d
z=^652`yCc`+W)0aB>vSaCEn9^oz_OEC(^R)iQqCUNxS1-Lc2kPa@Td2zbRI(6V6SY
zB{TQ(1Z>lcd}|Es9(nWLTo_s)_+Bqh@q;w(L5r8K14yCJf=imv8ebn&2gejhOLeFe
zsWAIVyvPDIJ(zzhDTyIVJsIvYFnr9*ll2R%e-&9&L@|>Vv%Iv)`{058*a<QBe<U<;
zb@v3f-E|@SW=9$R=s+`-?X1R*Pn(nLrkLMqIN_@oN$9w>y#mE_9U#8=zF>wfi@7Yr
zLmXA$nVGpH++HRdxhD2nNN?T7ns+Z=K`A{T+U#5eF6zMHgeNu)UEY**L3q0aofx?u
z2Z#_J%wM~q%^(dg=|0$Pt^rl_5E{hr)IfYtK=yW(1}2qfMg~Vl7QD(V3#|Z~l8Wj}
z-e0^WwaleKzXQxZOIagFM<ZEB8pgw(C(`eH%3u~b$=LZ-RB{W5eOr>%6gFL?lfP<i
zxeRg$Gcc)8kxuFuoTH&hzqz%_D4N>y1RzhZk0v;qUYs|A>}<ipw<iAt<eaZd(C53}
zLMhwr#(%u+H{y)uZE9>|(uUxc@EAT&|0ZWls(uAvJHObrT2{{w4OlRL-64lF|MTM`
zCo#`8gDn9f!)=Ee<UlBUCOgaCT$gPZ(*nwAr`&tqo-OwY@qbZt5}_s$S2MSN!W7+0
zw6mAYjLGB(<do1-TbsV0XbYGAnzN!c>2GgaOPrL3TDTvopO>Y%V4vy3c?*`GobUEy
zbv(xAA^D$QIRR{#i&maLM4gLk0g?8fliL_F`caBiiyd!VgB?$`i8B}Y9=!|izpy-S
zsPb`)trL3SuGBzX-@YE3hZ5*51SrgZfBl42zEfa3;p)9n*(KgVQ&KPEM_*6hl_4%0
z{Co6t6_NiO3@sbuKi`Z-PXrzDf6hQ8-xr4MpC4(gfA5*X1441MBCyp=Jw5gL3l2r|
zZ4^r;x(^#e00n}9<xVw}O;F8$&jZazW(vCr_BWiIR@H{Bd*GA=PAPffA+i7Y|4Ex0
zrwl#7qysMyC<1!!E`w`k)GL2~5I2KGyO8I>TR>oY9?v846b)%<=aRTfpyBD$D@HKf
zLlhu@1JY10Fq{U;3rcpA(43q>Kg?qgpE2m<`oS(<O{Lax=>avh16bw#y(-@)_ova~
zF~)!&3HZwha)4v%HhNpRyYt~u2zi?IW;XBbl~hZO0WxH?id(Mz{2O?OmN~CsU-$&>
zfQlOW;!f8dYJeH`w{J?~;>};DoE#l@e9`?OZgQP#&u(fGQ8R-y#|ok&^p%gWurOH)
zn{gtf?*Dyu_wG!G*pqXb8yVPnjo0%+Fb?i~xjpjL>x?WX4t9qc#mQ%ocRk*D<N@a0
zLUG74<3e!b{Ngrad$92sA0MBZItzg61^M|di#_1_n@pq=fI|dqLEt5NI&3?HQsG03
zucU-T**CFACozme*w+?KZO)S=ph~{v1pX|fgmf(}2pwHvB1d9jD%QVLsLY&P8;zdR
zZRFbnvPn>U_H9F6=eF=?epg!`bMtm6x~3!x_4s2eDMjYLyAMg>$O3pG?B_D6oECc*
zrIt`qV^dQ|nOIm@@Ef;(*x9LoxZZ&X?!Wugw`|DTr16`M7wdWyzq9WR4_~KW6>#17
zRKA@H1yA)Nji7e;L%f$2Pk}<72wFy<u@B6;48d^w0r&^$)j2o#`-2}BE5i$J?#Aku
z{ls7U=zlH{kLN3!l5uhrJ^ii%-L6-69^AgI2Rv!OQB(4twMCh7T(BmGipTP<3xbyj
zCgA!6y^fghATBVS_=1V-qdyt1wqrN`2^*_i^<35Ic6>^{GKU2e$T`Lv&)@19!@j$S
z5FQqX;NMq4<STGo0iSBFpm0On1!UYDPzp%|l7nJ<+-(k#EERglgFV)@wfz*(9OKCn
zJFOHP%aBJbAFFh`+Tc4j^6)#@hU84L-@OZ}_b?8yP<q578xtGbH#i8E@>f+M$*BZk
z?}cO3oSK>oR8u4|!AyLl;w2#GB4HFEW@GEE$KF7FLNNtOX@Ekj0~Q}diLbJyAVY$n
z_qp&gu8)TnN>fOvtCYb@x45`?SM*IW#3NvW0=eYfofG%Trn@-xOQO||OZQa2Kz9T%
zTg*hD`~|F7Y|!kOr7%4C;@XSs>&t|y9tSQ-m~sF#lPaQl9&U-Z7j`GGm%w(sNF|Za
ziO-93CmsDiJVlXvU$A)qC>vQ(Wupx?dE3hfM%a=ydJMTEs~>SJ9c)H1YgMHC!Egna
zt4f(T`9tA}YNc%H=zjof6R90Q%5Ku9;+_E_I7o(o#KsnSr%LqjrgDT}AVOIol*CjT
z${w+q!`wC$z>tHQr!&kMz)HEo8hmf+tA8Mcu(u<kAco^;Rd^3|skngceCEKQX1^@|
zZMs4NY37^YSq$^2nfM^CVoVnQ7pSm=1TC$>4>M{kVZ-Je41*jobwN09@8|g85@a$J
z)0n@-Y5AfvdG6njG=Ns&BbN=&an|~h1%ZX+1)b{Fp%w4$b>sr-SWmiIn)&G$O7?lp
zN@hbaSN*B@Atl~bC(;TMHZ*=6Q_zvcg09hkHS(jib>F4Y!+!e5W@N4LBTmlUhJB%T
zlawSbV)^m=g+XZ({RHbk=wq#P)SqAhk2wVni6`q8C7s?YAI1A(-w1dgOdaD~%*z9b
zho*jN(ZOyX2XH<G1O)uxsvJ_ON31YD$gAQwjp5U;h>GfW8iL97v&8}tL77%x2~%uz
z^eRklJ?W2g@ZdfcaD`LwvN^B1l90qD8QJ6$bo7sxFAVi0B_}gAn`aYG&-iduW?unq
zJ54EatU>&EZ!M;sKiQ_N#7Oth-*bP=+DUP_Z)<UF?IZT&O**9kVM7y>`Den}(zn$(
zTB5z>GUBdX%=D9L35UdsZ}3utP8|`$<)%<~GTJ;|Z`|MB)-E$zDl_(pdo!!F6s@W>
z1-|r^Sy_h6fiaVDV5Ye=oMWDAWSO5Mt%p!$qqVvVJtEpyTb47)LSsg<t#?~y3dqM7
zL*CQSsp~Q^9(M~x-4|^1@&GSTK^9%<^Mjd)=!tvArf!iES&F($4+;)+Ev?oH1bv{l
zh5||T>Xn45Ok>|W@g<5!FFs&g+|^3Mc{GX}Hzw!jiEr`9ejM&fIX2PIh)>g>$W2|Y
zv>N5ojP3$j!h32=1Zjqa@RlFuBcBt)#_N=PiSAJ4JnG`_fC)oIMI|~i5?MOqqb9|F
z_wLl*m)`x~rI)TIjMbg%>F#W7JoMt?VJv)6`?7!kVgB|@UG?XaKS2kLb?F*R1Tc;-
z1EV@NIVPCQslKwZa=;HEzB?2xj}=3E>b5<v#<<s>>6plJK>^)!Vp;t+7l77e!?w-b
zbM-0_H@VBo-fKd?(aP<}8$8DCM*Uh>8vx_@PG=}HKyt3-Y9*ChS8}7YkWPbpC-;OW
zGxbw33PJZ@E)!lLuGlZzD=ayyw4Kt1k~*NJ7KcjGN^IgF-S?o1mX6MJZNvtaJ2OK=
zz$7<A=R^`J4yMeCB1&QJ%$=utYoq%K<am*(spIvBS%BXu|2){4z&<npaA~PF%Lb4A
z*!GQl<y_fQXlvRc@i<<iC0H){_z{YgagmV(<Q^J+nVzS+>O*Vz*U!Wb)9$hsW@iIU
zJ^$kQG<nWieI{MeGbu)ssbm)rki{v7!s6NJ#Jsp9)#8MYZ>=<$@W~D86rd(+);cB_
z%~1J-7M}i$<juCGAgZLh^ZaLf%vV1@>cOI`;5(kFH6OFrmmMM*dIbkJWMdy+<I{5}
z)mp@ia#{>Bg3}zMTb*flD%$`suLsVcKFpg5mZN>y>rWq^P5SR!b9~Db#|4<c{(3~v
z+qa>?!EC!S1}9k&LOc6ZTL|?Dl`$cHetvrThuqu?A*^3uaLY-w%%!LQ<0))QsidQl
z*S|t^G3rccZORc5ZxaIoURbNCsR6IY23c(<CUy`>+mXm^gIXCK?(5s?$pDpC8@uTj
zFayyKiq6Q;wpk}Oo?2Zk8h@c16%r!DyiinoH6JxHJS;^Y^BI)rma7r^-iOcfI}^Fy
zP1_<OC??*j)U&g*<Kh-BXr##NiFxVi>2>PP+HRS)b$6@Vu2-1PxfSYHtWEd*Xz#nn
zo%{J_(naKyhZpFMC*9G`qTi+P>+4Cmh)jZGM{K9L$6R|v_6J_85yv1;f}mWvq{P_R
zy`|i*?I|^iM?@~E-pz6P-gB#~WtPJPQZ;~aj(b?|U@C^dGmr9aZVn+S9@SS`sx1Wi
zH_^c3fPh1A*Zg}wvWLil`Afw9$Or47QKIV8Z^&#ebO}k%F{z=W`xM-ax&@vctGh!J
zJG;A;<>i8Q)3d=u9odN=McA#gFqq<80W}u;-up2+ocwbkIUOp#xLEfroav9Xb?6$q
zlm7T*VG{jxFa6H#s{Zk97R47#PV(wB<LEw@y?7jhd<_kvr?@12gzS&DX*7nMroLhI
zv7$VdmPp8Js{gP!fBhKF4yx}|`?YXRjfSc9oP&&=y=1_}QR(9Mk)_z-^1!@gVdh*=
z4<qnJFNfW7#pl5#Jg$qW+n4|O!`~WOn)-FI+3`f^w;twJRHRWXbKb$cxYt#3eI;HE
z*js~IkGL@&K9`@Hn<FCqo$(kG6>zc4TBp>%|Ll<GgVHImC%NH^&K`Bm6OPlEo*tyF
zY+;dd@s^|$7dg2PT~3@QnVkq5SuY7xKtp0dzacO0aB(sIt(`a1k(od_i;R5X#>B|J
z5O@H$$+xznuTMI6Xk|8S{7!^;a{!EcuJs~y#0_7+x@I#DC?Uw__LE-Y`uwfyYiUMU
zCFl9l#kJsUy{XB|Q}AXhXPYYpyM&q!SJvxDUD_CUsD$tVw0%PKKhabA)l1JW{_T4o
z&idjni6VcQq-GfZ>jyL*xahmN)%=-|n*_zN{%?Q(zde8xE1K}uQwMk_Uq;8oWap$Z
zGcl?BqIqaLJKo>{*<$^V6Cg4j9~a`}RQ+>~1DdhYy5*jSb>N`(yZ&&rr)Nz{iVhey
zi_6Oe$VZni2l6`13+<|uBo<;|N;2uytNi^nV>nXC<YWx9c5RheZ@q>3L`NLE(D_MP
zJ7q^_CkR1HIW3<2xjjv%dGgrLqjq-ECOm8ca!tuAuhd%%rTSrBw)*`^>cRJA?5O*4
z*KtF5>}kB4gZIafx8J4qX0=+5)pl~c3JY61JAKsPF37z0=~D`9q7;sy0!mC)OMQ3h
zVAO`ScWFlzpU-V8dSfG{HJtXN4(aOha*neaf5q45@xne+8KR||o2}qycz4bi>*AT%
zK0~abF)f2fq?+3OUG41Y@3md!rj2K7RoW5}*CU%3(tHfQy$(wA+KXUNzTaVDG3aS+
zV*|}wudDWF)<)d&>x6d)l;!2+AyiOy;l5@0fZu~zuYPCLhC70kU5nWNl|;gII>YwN
z52&j*TiWB(ygrY#w-?N3=)1qvin#6Ly4g$uB*%U*RDkXjhKp13^(eUBjbUYAFoi;$
zwUGM=+TM}CYr026Bi0ZGv!ea-K%B|1c(`U&;+g4iG4VC<EAIw$cxIN*J9Dci-xQaq
zcx*peDrjgZI2i?X-o0Ds?=Sq`*>cr@m6eq@mM@29R5459$B!RB!7N<~W=ue0!G=;5
zpBXtOI7@Ht^L%mxLhpZXPaDn#ST4w?$qPEn=K^67B-#S|$V>eN?56UCcx^38>!)YO
z4a+aQy`gp(NYgIuF;-g%c0liBS0*QWK$?d~KB!9G2%bd*`Uqzj<*R07{as!1Y}@s2
zxU;55J8^i}{&gN9=7Gc(L*8raR2!Y#D=lG3cS_+kd-`W|A(frj&;kPku`Zpw+?Yg9
zP5pRsdfC*(WDqIQXQQd9iI`<D*6=tEUVk?7#VaYx@H>b#jt_SMAHZWfDT1J+y+wYF
ztGW4nxHK>CV8T$%GkQNxzu5SEv~Hb6*lF3QGfPqewK{$pbZ|fwh(}IL>7{_v^(W?>
zOf8725|Nn?4dJ)nwgPlEpiUvi;B#C|S0c4&s2>S@T@>l8r#Bu>IeNUaG+MC)^p%n*
zG8+V?@gwjH;~FnFjTq?%)Oh9l<YXfbGEq^{2uc|R4@)bn5)Y5^u&_=LUV#HCy)cZr
zM{ZlV+Mg}eE=B>`zI;mBr4@+}dv$KxIUoS8fZaN@u(O-gPp__0kdo#X#~>Ne58CL`
zVCD4c^a9lR$;mdW<5Hiv{VISOvek<ANQjBs<6&pvbubl3tGK^1Bn${52x~Yce*<y)
z6;{aV>M9grv_4z9&9xK#`^2ZDK6&>SX_nM)cWteWe&2QXl9t|D?9J-y_fb<{n`kW2
zEH?=XYE@QNwm?<8@0t==sF$4S5LjBSPQ@?^?`>`>s&^(IZj~9YzYdfnyM~=l)17*1
z4sm(sKYAW(i2aH4je|`iM#jP{$q4xbHqHM$W8(HPbv?b}u1wEoi;jGk1KnW)uPQYJ
zuuZXceT>G+bl*W=_KtbgGxeG2>3ac-tE-k+PSS;HsSFH3e^!~}j#DaMKW*_pvn)zx
zA40=FcQXFJogV*>C+Pp}H)sr)WT|}=Ae#IFt`!GKqd%|eCv{#NeSo>L0PW`A{h||P
zmB^pG42R#}R8-F;j6Yc=k(*bV{+z1Zoxka*|Cb;5q~crGJwBeHNKJBBTEVf+kUK=4
zoTB?@az0?Lij{z|8N+{Psuh8d^V@TEa|3d;D+*af&S9(as{ml}fO!A2>Q7b;aG^or
z4<^eAukB88Mzu@(%LvIDW_;n3p9A^qL=KBRUl;Bx7MOOA<DA8bNv`8wz1sDwKJ(&I
zn*@~#yU}FkoWH$p3n4jQn{LL1V2Fgpb78T!Iy6+KompB=aC^j}pU`0u(ZR}pJi^+j
zQ->Ov`tI+%9<E>;;kZ0I3WY>oD;6D|Mw8B53B$Iq&#Pm{3B|f;Kw+NvG_?Y<2rUhb
z`klTaxun7N{ONUJ0m0LS)8nk-x~$|t$cX_>rN)!@`@quDu=U1d244!xeG?yz-)c*w
zoaQHA{e@}h=%hVnf0hCz^WL9fnl7bQIsEhar}qWxgCCPZB@7J=3{+H%tgWqKu+D}p
zq<WP4oPR~3m}wh+j`U{HL6ghYuqhoO;Vh(D?y*CDpfJw((#yIU!T6*kcH?$NST+<N
z5Liw;GE9w%pIu#zjE}$bPu{#)4&9yOF9*|%-rlF4UTIII`Obc^W2U-J?}Ny+-hH>d
z#vwm4S|TEKW2e6x1VabEOS4!TPihNSFe&*Qh1}ShJ67zd(yXPVT8(b_oC|ZC&oYe)
zpSk8jcCl>_g}S}DDLG4`_*{)ZCo9vrEuzZha!S|Hw*ZdHb9^6Ht<0AO27a}_LBpAk
z0Cf~A*WP5s%M#QG(ftx}35lb({}|31FZX5*4e9%^(6u<>KQj5HucSmE48nr4vOY<w
z-FL~BHa5bBEzr47vN}S9S{GhDIdm8*HkNv_w}+xHDXXkRb^CZbpC0*)nKc#6CaZL7
zUyO?VC@ocA+EOqThkfWE5Pha+3_+iMH)VH)`w9+Oo#pTosT$EYm%vg{Y&uxX_>srn
z4(w7I#y5W49HY$!A2_f|@<Jiijbn}&UbJP8)e6?wP9;IdYGf>xS4F@;lts9SJI3h|
zUhHdXzXGr0>+tB5n4?$0`H*`{_5%TZObhq8t7iB?3ps8grv;1urOQ5#OuLwd75l2c
zrmJ6m|EAKZd7Uw)DO+Yi=4sRo)a<|_m-KKouUoTr)!xpA*;ut*R8i3{a;w3dFm(xu
zH_6xfy1KigI*18kAbUl-5IW#D;cijvZUt%*lhjlzIgfxqo2XVufdZ^9hC`NBe|sJ^
zJlyz`k;RHPFZr&LM0iL@3@(-Zn+mHHr&W#mWST!K)5n6fp*w58OF8-6(^QnfwLw)!
zX9ra$BOsu~X*T)0#(_kW@v9m}1eqp2l~8)iwftQ?id*SJE7=u{iel|{Ii#OPD!0eW
z>6AWR0;d|K+x*TuH7K(OQeq7r!qlS8&6JQPYm|0iTZIORY&PVFAnosO<dy28498Af
z-oLVaJ{gaBc@GwY-1Kx2znV6w$hf#VpL4yeQnB3r2{U$v>)M){gN5q)BTAn;J3AGR
z$vN%YK$f}TxzyKPMz1a<TPQobC2ei(jJTb@Dea_A$;`{UxjNk6_s(H=w#|rv(`9*<
zF*o@lBo_H@PUK6g^>j@o(?skC*WvqR<V=K%3L)-~r%y@H&@Q1#i9J@i$~#o7>WQO%
z`zC?63OCo7qK?8l;4LWHtjiNv14-(10#hq4maLF+x;87{XkR&3$tW3GmZ2X(ydg-7
zHm1pLCN&}ydAD@1a}C{14Ut+O&|GrUOH=dosN-ygib`-#L!03~J{gBtWc?DhZhXjz
z)k3$=DZ~*=yIiWrA;H1du>D_d4&+A(3F#tq9;kCey+6A*yJH=CH`R(XfDN+($@H#{
zjwr2$6BYg+U_7H$VMe<UG;35T$>RBYWTfTCDp)CTgypDoH6kik)^B@$%6DJ*vnl8-
zKrr>lC00Y@n@i<q6H`-G)xn}7St&qo8n;HY%FMz#-0p<y<+1NgH$3xRGO@LlDt{y`
z*%Lx*6frT80b;_ZI#6;YDPpi{9jy%kzMVL@qYn^<*=*8McnV|@0$XM}$cz+zmt<at
zt&G6Lf>D`Qkz&kYU_l92PM&ftm;0%T+Jl1dT7&Pe<Wpte<7@}rWH6`u#V8;E-6nBo
zTXFf={=oQbl|8L<kqo60)?`V~n?QOT*oMBI1&SlEFg*tHHv48~2Y?dg<MtA^)^CG@
zDR}Ky!>*S)uL;jNCG$DuxL>YRa$^-STg*|{J1lgRc8$HMy7o*~)@=0iX>XR@pP_G6
zo;T<0?d`L(y%HA{#r%lpf%#C?gf%@Y>;CQ<m+f;AZ|^TDDY~{Bmz7?5plV3)DT9UV
zXWzYSot$Kasx)o!(@|L3?B5?PAz?N7z+=e~`yp5VWHxG_wrr51ljG?^m+l*UDp~_6
zK&Bq17H#dJc#NK=6XL_0bZ1j)udJ*r@-ci7jhfU;b?2*B4^@;lKS(JH3fz{Fk%^Jr
z?SE!!9G4*~>5N*{R#3QuXpRs%@{pGg$8d-uE7B={NEW8FR>GH-pyT^4wZJ7+eO&)J
zt+DnTaT^w)|JN3d?AUzeOfZcow!f@ZxdnDxDi<>&Qs121H>Ta}?vgs2ZKazdCB-u0
z<gJO-(;JcBEWN$;tR%{z7+F<SLZ+52nHqWIHUl<2DjqKg3Z-Sj%p;6u%*&}%TOR5@
ze*6Vv;O|BhB~t})P1xU%V?TSO3j^=sNFpf`|J^?Ie;Wq<fB3++bBG_$&&~P{;^E}6
dFXjSFv}I?`+Cfc;or~*{5|<Y%e)9a){{WWy?SB9O

literal 0
HcmV?d00001

diff --git a/ui/tests/registry/evidence/registry-provider-selector.png b/ui/tests/registry/evidence/registry-provider-selector.png
new file mode 100644
index 0000000000000000000000000000000000000000..adc04021ddef7a53ca372203fb3edcc488a3e524
GIT binary patch
literal 103904
zcmX_HbzD?i*G5rP5KvNDX$I+TrMrjj?(P&6P>^Qm92mO0ySux4Na=>}c<+6`{RhJj
z=Inj;s=c1Ip8ZQ+Rtyyx9~l7w0aZd=SP=o?CGhL>(bvy`k1r&W&kzvaAxH>+Rd!20
zSbFsZ)0E)VACwobJ#C-a`{jPCy;}CP)wH(U-z%Lj(OA%^TBxp`wm!5wZn{dP=KLap
z*T3v3)J(<o`qLT4bLgY5F24ux#IZL0`=h#@rmO2)O3Jq#e?ELt@}s(_SZ@h7t!h&O
z%THap=LZK!V<+lO9wZxO<QL^GB4z}OLQ2Rc^(Zn*PwV&Qr@_Xd8u?M>8wvr|ukmPU
z3(n73k$^Ww$d{^0eZLnL+n|nmESo!IFmx%Dd-6Q=4Hq`t3^P~=gI|f}cB@Zzmzfnj
zj$AUY5z7#pN4i<wyp7@x;unMXxpfI1iT$8jPL5cs#t6^hG*X$aRtD=}H>dD!(eB?8
zj6@T*=2sOa9g_o#wGJp17)l#cX;xX~aKUPwsuOQ1*?u##E}+AbM#<xHT`&bNM7ZaF
zSPdNTrYW5lROo$EHCK#dLJHbdy-^(V4cG&jSIR%&D(5<}g*GE<5DIOryg9N2Y4mR3
z)9v3%6<Y{t6oCt#)c)?wP8kw?80W&DWssx0$CY^QV_r&DANHdP`TJA}l@d62?)eb)
zECfH)??!O~LX}T*TQr@XC{#8c9NdzuaT!>g+rfskZLgy+mMzkjbITAa|6pUMTYUL&
zR_k3-=e@*sQyo*2``uTZ`!4FQ?k7JIy}+DLK?2+U>@Qe5q=CsW7Jhx9vDKYV*uF;^
zrqc2&4h!*YKq^5Jv$4O6d$zg1xEE}d;K-DtVN7B<C8#?$t^8T385&`!ZU3^1i81K7
zx!x?v)A(pb^M>8|gQcWMs|LrnQCwgt9c{2c^cXYF8dxk-!>R-c(QwFLKZWwg)GPcd
ze(b`J7r7I%8^H#8K2>5Zys7@$V<HXs*p`X~4z=`~m0`DsG}lhX?CEB7L)D5nh^jXz
zMO%sa7N?ujlYdCUvg3$!#xK4At9+aB!!d2f7xta!XnS9hIKNdtm-zb!xJr48Q4QC=
zGV!wDB34g?sZ<NsOk1R-oG1i)(0m5ESXs^t_I{qPQ^=HRWJlSBVl+U`>GdoNDk<xo
zu~l7|V=ZPT!dBHbaS~d?ON1Km*Lx5acRx06nb#zW9!~f6Wpqc{RZ;$c9EBqBK?@kL
z3-xLWIFO1LUusZ|G03&W+$W2o=Fuvveb&t?uo+6k%(rQ|H&ne0!}fm0dVI#9Ep#@8
zWnw#Z#T{v_A{VD?`gZ|0<6Hs9&E~{Qsu*O07umOVp+DGu#&cOmIyUyRJr={2?by0o
z?<G;<;|Lxc;9dn&9@u<#us3zZTG)a|-sKSAK}9J})DK;lpc|V43w7%PLUX$>&bM7E
z<1WrNLhx9?>k*uG+2lxa`Q0%bbj4nA(5vp$(I~;bC~XXxJJ^;Yd8!uWttS5Tqqssi
zbNX=0oG9F~Skn(%V7X$$vuBP1qv|?kxOirt8&2Ed&be?Nf7cqhF6V-=;bCjnL#C9u
zOX}4ud56>d*CFqF0CW37ccLgOWg#_L^tC&-r;NC#2;A{Lx9>-3qB3Kqakv>cZ&j5P
zY5QcrB>!|IIL9GXX~$@YJ-t3&6FW5u4k9tohqy>>8{$|r@@&aiI<eSw<y$lx)ju5$
z6x<$DYS*Ctm73Pbolg54&P+sY{)wG4Qb(dlI~eUdUhyZ(DaAJMvSv1=!RjeOEvP6r
zekU()$QhCMrLo29s*t3DKV@LH^P*hxNzOmucw$vt#Ir0)<**KLp0c||oTrSlgkH+a
z`NndF=g;+lb-wMTUse`T%64!%|14JI9c0s+`jE4l$^BePf<|dyv26+;F{J*>K9h!G
z%6yUJ?toGqP8?&jWzXxWsag^<XTuMU3x$F9CEE(5a#N(K?O~(!JxcQOG6Y^UktM_a
zu79^urg|sIUo!~4uvHT~vAf6$;Od&;?nj!D2i5j7F?MjBWa|%jiSpnBT6z9F>{-R-
zSV?uCX;?;4d3`;)H(Py-JgRnL9hF}d?>6@%YOf({3vO*N$3MoqD=(88+nB7Eq=cjz
zwD8WNQO!9Th%>r^AGE5J?PQ#Srq$!q-4O<rRQr{{avRf=lZ9F$nWJ(094gVHDz}bn
zr5%EyQG<(pTHoFwL+E4FTbbSzUN`h^sDus(I@glCO*JYkjyu~Y1h%mXhMJdZhnlK2
z?k&U@f7jO*Yo8)S(o|EM2gcm|{OssJproRbl2SjpsfmeMBZW<!@qBSgN>NG*UxPhJ
zLL%dkk|M;|#Dv)be{_h3FWlB7U&7fLMwqFa8aUuY@Bp%uc{owVfSZfkFBT}A7b|Fg
z+IgER-xjk@_XfKpTOmmhn+43*4Z+7Oe_9(HZwHZ)h5j}EZ~3{uUi_f1`84UE4z^S+
zqCl;lYIOgy(H)9{f}$j%IIgG!7ulMg#zKkf>Oew5%E&-JUT!KFGQm>Cs5ToL@97Du
zmhz+TnuT)ma3$c(DtwWCU$&c5<mdOvnuC#1Ub_O!SDlQgC-Ur<YKQ2w$~0uZcd8)S
zNBLdwn*gr5IyfF2j+ZdU#pMu!H&RcG=5h)0r<ya9UepscF)>h7R8U~*SPK<rVO(vf
zo3^j4$&qVcoE+@z6b|pnL~?X+T*r*o5f<y|>;`Ek^nCb(dY{M!u1u0PFjzm^HM@b_
zC$hti)wkxMP0})Q=;1#jN>*kELM|o8a6oT7Z&_(+rREe_l$1&WQMU%T&;lt`!Be<p
z>FM9lK6(#S&>n}&!;5h1AC2?$-~LAU0EjEy18i$m_<h<L>+Sxow+h$W>eABPvCN&b
z+}t2^l9(8*0yVI1+DfH53kOHdM2=ja7-r(pYwH@<WB#?Zk)tIPdU|@5GUBw6tFyDK
z^K)MJ(;xm;rAG#OHrnZs7hlUxPL{Y`*xA`*i!;|<R3IV30u|*I$1h&K4C0Mgw&4q}
z=hs>Oy~l=q$Yf1V|7lHh^{_kwti5Y#VQ{cASYuDdAS5J|pk2jSlO9)*>3C++?0$2T
zAx9j<i#*idPp|oTin(iqF6kAuSI!j)e+>FJ?Udw&YKx&>j!woAQqoOCJp#*p*~5hb
z@k>d{jg1ZPtJY^jNpU6QO*I<ZI@rFo5Q0o8j87REBdPq5&xOAR`~jID$S>sbZxuR3
zmFx}W?Y%1c8fQv$5vH>8JHNPpDDlR_-Cdj0m!6ML<}e?N_|>Z=??>Kz-IixDQBA&2
z&C=ROOBvqY4~<Ptaw*&ivDy4J!fW<=tA{^-{(O9R75IZU>sx|C{Te9X{jEn}phZ4)
zi)l>xY$QXf5^=n(JdU_3#Vv(sV4(BT65kS^!TQE2%IRFY#}V<R%caG1%z~kd<F<*(
zGAhB`!h9D+7d8$KQ$O3)#r{HOPDpe`b91xS7d801KNlA%L`2?6tXn5;WheH`JwXn2
z%`!=##TNm-3<gGstHj#%il0F(*z>P$p+Ce#nIS9cJC}z=g@r~*Do%u{yxxf^DMQp>
z39OYPpKVJtaVq>VKgDVSv9Pff?XM|}Ot7%g(TUwOn-l%m4{q(vO~2oN^;dFip&h?q
z)k9!&?_rb}a1nFre3FDQ?$xnCdT#EY`?`von;Q#_*r>F)D{9ux%wnpSBXVhhG$px}
zRep%C#_%rsqN!lj1wK=ajg7C+k32o5&#r7AH~TOX*daq^!rDOWs`$vkAaE+8+~ILS
z{ind-oc61JRCtZ5sHkZEwc=MkbdhJJ<D)gCw~!chO?9>t8^W}R2pIJ)RNl_+=@}rl
zQ#W1_RFF3c{qQic%~6@X{mYjxqXfCpd}NZCg2{Vdwqn`7y5@*O_n!Mzd467wP<x+-
z1M^*|v8K)I$<3liV7HtseShT}TyEQf+!FQT`LnKN3JQuhZ{Cz!t6&l@u+N~r{`~^{
z`kTAkS^%!jKR>v={o-xVq#@I)^~^Jr;He55jgczNZ{AY2noof$q5F!k#!gn)Q0|;0
zUa(JEAm1BQRQ=kBg{s<FH9o$k>7s?e06qnE1ssu<aN?kTqwoP$FatMtV$X!-O7lZB
zRXC)iXp7^EF(90VFIZ}u+gp67=(dyTU*|##9aw{X=2R{&&I#P6Lp)A+sW?=>A{5e}
zXx2&pz|ZO=+bV!V{m&i5Jn!@oku)^adJm0Y;b8k~sy#MqLA>qC-<9XT%g4sCkXjG+
z6!BKeOMGTzQwE0yv2FeJ6<Nl~prkN?m%%>Pn-eXP)X3jxABR+i5opsX*QX-<2VT+B
z1932Kec=du>=b1vAzy%H9icWI<O@AGJWS%SJ=)ossdwHt8A{{=wi6$}xxI~pgTwsS
zjuO|v3k5D~n(@rA-=&o?`^aE7j+m&inH?p`?7cR|AjS91dFhn~UZe^Xh>k4YWZxC-
zIlu%fNN9A8=WpM-8F+X#=Y=$tD#yn~<XfD9uEL^fV(zx^A0$ga0kSjJg)}e9WTmC$
z)yw=#N=PW8g~u4eJCI_;B_yifD<!Z@Y=56ns{f&RKG5Ggxaj#Oy*=8K4yxOy;q7@o
zJ~M;qpd&+hLi>PY7Wph~CDYLq?rddkg>-RfYGjlJ9jTC)7OC*!Z;`u7b=K1UaH1x~
z>`B#7KY3d`Ods<MCpNmMJ=)u|dV2a|f7+Ncck$!Q3UYgY<zoP;vatS;ED?`}hDz8D
z+pIj@gR>lNpGLJ6m)Yn?TU*;;PxyjJiw++z?|h{>i$UjWkkMaRS%hdf3BpXxEtczl
z8Do+J=2#CT9%z^7G<lrwW*8aMaTGu&>m`~zIvVy+ew%58m)Ne%=RD4)UWhv7aX>8}
z%9;o@?$quku~o4oSC%w%a%~oZ)zs8jEjFF6hKWQ`AW2Q$ciG``m=&juDbgZ0haR4u
zOO5VI=BQgR=3?EJ=`0B)M@L79rRBXl&6{si!Y#;QP7W4(%N;?%!Js8m+DYo$EpV_8
z-q@(pHr@SmBT`x8g1+tu#k-H{Mz)qSS-j7g*m2~~HMuN{)OTr{D#dn+yZwXPTCraG
zl)oBUnNd|YP|yCRs*|Q5VUaoiqABrF5EIm91{L|@NRc#t!Jvie`PDLre&*tMB@Ls6
z_2e8r!D2dWwNPz+wmn28m--eJ6=q36#O<`ZP{Z)D@2y#I&jx|!gw&ltFd)8k!+KtQ
z%x#?AeR$mFHZy*zoWoK>|8qn{5<ZVkeHm+ZYNdSB&YF`V-Iyd@MR_wleGOML)1+?a
zka7nlA<_xKOtbd+p6JlffinG4`4#acGnsLM;zG}>Bi!LMrTTcoiY@wNfrSE9TZ-cn
zjQVoBy-6C;r6c=ASTvQ~`O%V?Hr>!Nk#01O8wBUf2)CPx@_@_DPW<Wdpmr2rtR+~*
z{AmA<_ckEP`NPW$1~P)|{=(70o}G;AhUFqdDnq|7Cl>u3=Eg&cu_cZ{XgwpzDwWD@
z&#G!F9GzWMG(;Btc|OW0|F0I{gr|*?dkm*p3Df#bxA2o$&_#QA1t+7}2NP@&eex&Q
z(%3jUR!3-raGhz2=ZH0+84V51-Q9g>BrP1`p*0=ipxxl&Y;SMARDW@?KZCa_s<&aj
zcTiw!(6J0-z>3A$$=>dKft@Ar7we>}U_Kmf1KH4BZAkQcULE%c>O_o`U`3U0sxh&V
zxVQ|TL9+bLMTx^x_-qzN#>U{tSS;o;2RU}@iEJ53$^MDc9f){KK)Ew#w0cjr1fMsV
z&-hS~6Y<7kTb!*$vfabi+l^oryn=3LqWSBX5~`|Cp<#iO^N){1X<~dMz2YT}YG>ay
zn-wiAB+o-|C#~d1wQsV?HPK$1y(cFAB(TjwLG(8Wsq};nA-;U|D&$qIVvE%IFJTdp
zmoHu{MoJjd&b}-@4l7xe0cBI(8h24qyjVs#n$0efh3XoZ>5aBlq#`Y)(prnRX|PYT
zU%FHS;R`rYkX57AY5B;SvMML1y8{()Ural@x;i?`<T)wP%C*slESRnBl<3v9XF%o{
z%4}IEc=B$x2>Yn=9KcJWjUfE9^TH$_4w<ps?J1(-z4*{j)Q67jCVtmPEiJ9&`!(<P
z59`;zHV|K-otv*?V&FqpZ%q2fbl+I+2b<cM8XNbWSLc#4Ffj1&G+53QLsXjg1AQdM
zbWt+gq#d%m;U}Sk`_33@bvrq{17Ya&{TNHn4D^nuOD{`L_Y%_Z6R_Q3m9^i1Jld_P
zNs>yq{B7Z2FpFd89yfk`(&-Nm-qh4xs*Yy2D06*%`_s^*I)|@$#iQ<F(b1R$2uX>F
z9&T=&+}z_%f`Wp|M#{3XXfh3Tb!92nF_oXZZF(-q^k<l^><lCm275U}Zi}Cb6~v@7
z!gu4cf<)(Ey1@x{rHaVsg@566^!yx2Z)$3~I$kI+!^=Fm%JYH+p&z5;acdDGuprA#
z=H=RNbo01a#o2!E=W*Kof=eVRC7hF}Xoy}Qu!fF?hR@@&NOaS@IN#msHK&55MEn5K
z5K%vHx^2HXe>)fLlS;gycl>U3UzLkQGmlI3<dHEbjD!{x>781hN<1>vH`kI-0;E#V
z?jO!tS|VSax3Y~~cz8jl64w*GxzrNBJc()oFZQL1dV5P|o1F>fDH2R*L8Suj(6%%h
zwOCsb^<PDyRdHsW+n~;-#d_8XOd!Kl7#VnyL7qES=xUx@Sg5fW6Vyk!I$8-2`$f}|
zs-R$FZa!8ifeC<=0L!uC#0J-6W;U^V+wVEW!P~ev_;;+?y6|vfJ`9l-NpcE`fWW}p
z>+9cyTv2FlE-vg4Afblk<P_K}_V$|Xj%Gxuvy(PCY#|p7?+Qj!%21Db|5^PidShoZ
zz5vtn1l&tHv?6zAuC<f>Vyp~07%Zd_fiF?gxXC!+p-s&@?B<a8j|rIjXtaYbf~GIM
zxwn4^Z}I&ew^RwYwIDtEMh&@MJ?Y#r=H(L-%8^Z3A5IyOk~YfMX8?|!e%Vnjx&7&)
zoBQ&QxnI8{v3hQFqjC!^G?~@}`q9;RZ=AdxlsSzak5|kni>A(ty=2sC_N#og=JJRN
z<F_1B)(|Jp<Z?s_@o)E!iZbx@4ASoiiaQR-{mQ)`_8OgpA6i(Np8k=B>7;+E0B)Wa
zvt+$cOoXi{N?!Z9-#9S*!`kkyFs5dW)v)*oH4Qxz2S<+dZzFVA__u%nV+Fu&?aS`z
z>+0*rApt@`XkZ<oQ&})kHz^Y`1(s2GWw753WX~~!{uUg0AeB{d5rcIz4K+0EAS0s+
zCGIGy3huPE67*6hE<8<@|2}44CUlD$VJTf1t2>dse&>uG)U3`mCnlFFJ`jN_o+{Ro
zK2yZw_uzS1U0JDITMU80k}Qdg>CXB)@^NCQlrNBsS8N;wo=#mRy~IH_8Y;RiS|%zg
z$wsAYb;waGxTgc~Jy9<&==}^m|EEWF;m)5KLNe0QAGoYswEJox3ju^jx&SPe5=t~|
z!B$YjmBE63tgu<CccR{%iKzQ9l*;SQ9J@d<vOiOzq%u7{UG4L5`*3@)(BNuYolgaF
zbUv76^84};^PySm`JJe!icQ|9ppf!`$9JdaA~kKVrG(=IQCJKn(o$+pj#Tw#7zMa~
z|Ap9eX74o|`6HR_%9$@N2W5sB9h?{$8727Lrdp@l>kSbM2bT{(SQoxH$TU=gF{t_-
zvo#iH_q+O{4~IWAQis^A=PQdgBcV|btc<&}Wn{*~yW}!wpG$7V<82LuO}*VE;L2b<
zYn>Q~riK>j!nX*CH)s{7c?CT)xY$1{Hk6}0j`1>Y<_e06WIQ}HL~xg`uYdl0?ZTaR
zaQi$QgB^gSK!TdcYRzrb8!?ph7+ttrsxQQjz|K))XJ>~M%uhz#P>^R%Q(f({^{jLg
z^)<zUjD&<rZG+RT#@JA)Lnwejl+=8l9{EJMEMkX!uwBz8?>AF*%d!=DkLq->V|MIC
z##zQ`b{%kBMdTa8_6VHRne6QWTpCqaehvabSK6V_?>*rvkMb~=AbsZYa<mjqc7s3i
z7V2wF&7n<=TS>;a$XyFgE_R<ilNN73XliOqIlHP}@^7qfq@*N+s=EprIY2aro1d{j
zD;#5SUqgn+x<o`6pqWkhY>Ksr&kZ-c;5|xZD~5DFWG%{8xLa5WQoIh-I!n#klPo{z
zDQX)Ul-T2=_V_%`XUhzO_JYXEf<ox!$}zD@>T7F9w<>pccLBdtsEF~hnJeFF^1K4#
z^})eGBAey*=4MP>94;m%=7$gBElx;igk~ltE|2%_w|wGsZf<UsmNQ|+k||t{fiB;0
z6h25ZF&cZrZ4s-at(WT@#cn+X39QGUFRkNTQWKlp&rE!Ln)CAV?$P8oDiNKe&0eJn
z_{ttqHxlOh=NU#fc8W#q#>I1Tz|y$JjEVH9>5}8lJ3I5<Jl6xtIEfuMZ--jDx<}jU
zSzF>&p|*P(R2Pp;&={cBL+b69PEJ+A%At$3sgRq~gF8E4E<+HXkif~c)15bjY=()U
zgj^=#&LP?d56xnrPwDs(6tuIw4O;$ryY1e;hrNR>Po0EKA<2NJp0v|VNt+9z@0XL#
z#Im1_jaD8S?4Y5bmbTtNRwz`v%vG@eAU3w~;Mo=hi@`DJ%qc_{Mu%gcqQ0G-P;jAn
z**!cwtTN3WgPDEK36YNqltr0?RmP??SsNMsSoFjVuCa_uPHwmRB>}S-)jyuApc3hA
zYx~-tuT<gUav8;_BVwt=UaYDjGqnu=e2Wb-k2kh3&@vAI3AYHRm6R~vLgq@PE#pdb
z!5<!wVJ`eU99R7pmi_Zil{Ko|UX`_l&R<X<?@i`(ARKL&IU(-I`&p(&!os4;_^oxP
z{FXh7?f(9Ir*Rb(nY+fH85QjA**?9~WsV?X&}dwMt=F_hH=-;T;67j=|JjwXCs|9_
zn-I9(=n3E1+?3~qZ*6s%`SX3N<ht#$wz87G*>PFdp~c!AcLFMAG-c9XY3QIKDJfm(
z2${8UCV9!$ew1dhho#n^yN|qTY?k(>3dCl<=55KQa7$E+^UM{fmWYPpD^y@nDIwR(
zrSTtR?ism!^9gb}UQU7PdVI&4;xHf20vD+KrgZbT^};N;ucU?xB70MeF%*2H3%0eQ
zs1N_!->^tnY*_0PE5=WZhnVb$67lOPkM!v~xi&*+Qnt55yU0_TV%;t++UEvNaz=Kj
zVwc7#h9fmt=H-2fC3Z9*X-}l2TnsRgPy!B>72cVp2t|<e8y}7MRAW7p_KArBxe*nW
zs*hxvBVW>NLDb>{QNcdO_^KoG^OQ0cYNXt4ER3wIjPII^G}6x-AduZ}O6w8tNl>fh
zNC|G)&1NHpZ_6vn$#<Ue%=4<*tAj5EmC4Z>m1>VHZ`KFm7*?9SlVph=9+GGal9H2!
z=ZNTw`bK&;SS&R1Qx_RLn?c~^Y7r?EN0cpEMtqT$EX|<dt<XN<{NMf#_Vy+&)6u5L
zM;>u2NjZ`4i=IF4<k2#x+N@}1)*>V%A|m`iv1xO%rLL|q?R+J#81$yzcjVg$0CvTP
z?%X)C<D_q31*#DAHy?%CoN>eJiIHtQaWXkeOFyQKWmSO+!r0-uCd|f8aFU&~9sJ+2
z(zZ|YRhCXmA=B7=^jbu;w6w^a+MOTlr3YdO@bMKb;+hzzGlX9Cuk(9dM=)0^10QyB
za&nS`{GOM;%gZZ2Rg*ZUa69kr3p0VpE}EbrnND-zmllBOU?tq$-i}u(y3pJm?ONKw
z$0<a4tNCH>ON)!MQoqM}S|1<Mu}&bgs?=85;+ob5T1YFCsr;nybB6b`)22UQH+k5&
zPr(j~yZyiXepxGo*&GG@?I03CS#5_ie=hcZNSx;2*oN<y<>+~MH3hS%aaXME#|_1f
zC-Y|_8W&Bxk&C0(Cg!b8i;3Axzb8+ApN3L~y^B?#-x26kO~%4(wiQ^H#c8~cr;#{5
z(q8%bCf|wzISQT=2~oGVX+FK2GW~9C1>!S=m4%}>&B6~Cgdg6)hZKGMWe;bWJg9ev
zs7b;pxoBt@7{X<VNCE;Czew#wiw0tc8%RpYl<7}gAP;A|E9-8@$gOd4q);n*WLsr>
zF>QUMc_l=b%$2F<hRZ!vO}9_k8kt|=jlC8fRojF-X3LUB3H5oojsp_pBOd8nUTz9Y
z^2Y|*g87ZC*LHMC@g)k!K~NS?Tvc{V+7<B|QLGo^a;bdLH==phCIJCrF`=7<<uZND
zmn}oIC8RaQ2W_bG)o+NSAt?{6yp8r-vR&m<wQI`S5)^Rjx`w)hghWWoFUcBFsq(N>
ztRT@T3}`G{LACW^)Z%#vcoA0DcecZjH6SA+gZTV80G8ne!?MbI+Cnp8j%UKSJi>7+
zZXj3fN~hgX{U}lk5FOpp;NWi@Y;0^1Vc~LT;IJ_#Wo8cc0qQ+n-Q5b+)62_iCmTJ=
zX&4p2xs3G*urLuZv7H@Uab2dWi~^6h3^X)cR8(=+St22^2c-5vcsk#aP+zW#>F|W4
zZcxl0PEN8W5V@U@*2@r#u@sAj5kev&zW8xit8T0iK|`XD1oIS*ei!oX-o>Wj(|8&Q
z`_edj5WNOKs!Lv21r$H(Jz>A>&yj7s6T^rP6QUQtwShdCosnY)MY@v%F~kB3cXKBv
zr$0rU1)P;b#SKo+{W=MkU!p;rLG#|*kcWFf^QUEarA|>Cp_nn?e)mYVC|#p1B@QZf
zb?v+S5mQ>6v4xCtb7f_9kL>i1x)`I9NN@RF&Z)_qk>uvylaP>H9;9RwczQZ6za-Al
z2*#;!cRPukVSl^IMEI(6y}(Myrre@##U#|bAF2x^B>jh?`uZ7Gt^ub@W(rK)F<w%H
z7%h-kM*9<c>;S>3SE;xJBt1y27Uj)~Qa~Me?pa#QLC!&2RrY~n(YOEA0%qI$gYyWl
zBwzFyqZnTbFPXyTiW;$tPTcyJnYY{^Fn91fbVBVhMVSZxojlEa`!5&gG+V0PDapwI
zUMKe{SI4XG1nd4zfqBtrOGWEM7Bh^00^g~TU6v{hC=0N#urM)2(g#Z5Kw^}CXMbrK
z&J}i;i^3WEe8&@JpwPdoI3J5q9d%yfbcZ}+oI?{g@MzPI>l&pW-E{Cyi<#$3z}@9x
zrWK2}knxJAn%W2B?|8$(j*7w@u=rUllTL9G!~_d3Oyrq>uDZUrKtq4O@V5ADTF*@T
zW--~;q&+?n&V-#|;$xuLUR3})6@n^%BF<Jyble#(n}~6;cXlp{Da&7E_B6q!>bC1-
z`!uM=YR6(<`K!gDq%v1nJ!QNdy4flwdzhp?={n?vqcqkm-&KwMIdk(z6~tNV<~7fo
zH@{q;+e#e<Q}5sXS^G{K$KZN6UlbXK3$ttQNRyEL26u{lzDg;RqzK|<r_|s^sIJZ+
zv~_@KN6h;;l$-th++V`@J3p6PS-L(;sYlj%Z!$v;L`^OJwP8I+&3;d|mo9cxNw+w2
zS9RQ9bc{jdW#l-KB<(9oppXVjG?3eO9B83{^7u?qbWe0`Y&nGcB%H2=!CXbv*f&$w
z?LshejGZ_0H#fKW-=IX>h&{@`h8#7TjHUQ@yU$lCk0n;-C^E%kXjQjO{DFDK%ovN!
z+D_#|GOouH>+0MGV(FS_b=fnoqmjGJ7nrT6-i4+7C;>`80C<RqcqegA8*UveXfL|>
z$=`dBNV8Y8aoC`%tLwC>YVL8cy1M#6Q;$cZVwP^4p-{@;suL?r^vm&ZcXwdy(PG`%
zW?!_jVu=plk*gS{zPY``*Vr;|*d4S>w?k4_1XC<+{a#w%{0$-y(C2geSg6M^!-Y*D
zPByfk_hYEkW6~nxAFm_TD?GAOk1UeLY{H2Jd_H?OrRw(wZt3ef>74J5k%?M@uEbVm
zdz)ddHU=IhZpnKo!(R9)aq-);^J2Ps%6ax|1jRpOcM7-4ZID&#9mQB>K`BWpyz#2N
zon77XyFd|4WG9qa;ag~xO#b9j7xRLgj10~dg%Q?4+3BEWPZ*JAwT1ikV8ZEcT%_$+
z-bS37AFt%#zkjs9wX^=^1AlTodKKa^C0Qk}lOnY{&@0w*^5%^!7CN;>@FDug7<F)N
zI!!w+RX-M;{v?`R7qyN|vHz(daiK%H9oPJQwIbm;Gd?TjW`qIS8`L380e3AA9>F=9
z?EV%z<CFXye=3phF<LNMwF8FtzP`TfCrOc!UvK2<6DMF&xVP4V?@J;h-zU9?xy2VL
z-K=;)<YQ+$I=)xS`cYdCx3~L4buWLladB}09SbXQ>6XdOiQ&ouI2>N7^7Qxs$3^AY
zCAm{*c02K(w_2<%GoyZL<gI5FKVDyL`+gca`qgYA8<kDO*L;?MeSCZzYehU$OZHv}
zCA_*0XE-VdVMq9tq$*>%3ro3E-_OQ=K#5;a6+9)g>l-ZR=8SBNen+N+`X#vENVazp
zaJ*Qi7p1?vz4Y?V@Cl^;ly^g%$J;b8IN0cUMZfh4i@wR5hmn?6^A**vV25^56_Z;e
zujbZV+2d(N2$t<nL0vw?=17RSj@L6XZ-c>HwLHb|PU|~xc%R)Yn48jRS$r-L36(%H
z7~U9;(Jqt73R7lOx`|otp1w?geu|#$5M3zJoT*TZWTnV>W}R|M!AwMMtWjE1gO0Ls
zKZ!o~QLq>#1Ioq;$xAQT<)EZLnoi+a;&zU$l-JQ7=(JUHb5nMTiH^=}2N!-WT*tt~
zI{fMXyR-^Ywdm5XVHBg}QewLW%SYo(%0u(M|DhmPF<>AFnX}3$x7h0k_x2ArJ6;v9
zANH}0G?LQmG*Z8Njf^bZQtJQxJ5V|)C@Jy1JvVo8IspO}DgpcNV*YW`>gJprQ+@qU
z6v}Kwl#&6pwVd;)0s;cJ0fKQXnVFdky3L<|3BX+w$Pr?7<MPL_Iguw14-TZIrK#7X
zCk{v@?I%idTn^{iEGB<0V|9(=(rcyns&FR_L2KitVe)m(`_q#j577@1GBW^V1{4Eg
zQ&U*T=&?<Lk;t=>OO5g}0z&G<?(WZVZzQxH>HeyANZwvl%w6}S!WU0pLe|DW{-+=8
zB>@I*R`weyN#snW!TlMAq2Up!>C0`(xe154EvM(AROU`Tq~5+1DW8|>ooUI*g^RJZ
zh1=KJPcg>Jb;%Q_%Qz|-BMYdC+X}Gij0EI*<)q_SI}V4ZgN^g@Xr4WL_S@`7Vkgi!
z=~srfJ6q0(PuIGg+;^eu%+;l*m$RG=#L-WLSRW21OhozRSy>g@E=wy^+jA#jhZB)C
z2pl9~@HGgJHQUaXel4!ILWz;D^LfC}q?mKLaR_mTY=3a}`$d>>kE|img0-E(>8ep5
zaJq+m0l(|tIole*6B)C$(AWzoh_kk~#+t%Cv2#T6zKvI?WI0U>+MR1m7Sb(N*M-=Z
z7~M8czQp)6qb<Mkxd%OQ$lBulQNNWap-c*hhJLGh4Wt`dK;z_wjC?w$Yk-90b!m3u
z7Nu(`cxh~A)*4I5?G)iJA(@*`9OXBEf3@OEo)i%q9X&)JMIRm<oE4Xm@d;)+hb~pl
z`uX5ZlTqS)g=tL|IS<c%Z)C@Lke_!c=3OpFwTXwve3_w`c@TVsh+tEx?jG%R0L=C1
z#dt`&o`)qfPph^`rwGaj+O$s7sZs~Zcq*<5#h>%@x6+59g?umAQ(wYIDoBgX#y$gQ
zYk|nMMe>V0sxTk-_4GJZ4K=L@a=0|DN03M#p1G>Oq~lo#bH#_02yTgV+UuBRZlLj$
zDHg8N=(curG`x+7fq?-4|5UQ02u`;@tDT*lKs}09O?Mx2tei8K_41wwa-nQGOgpoh
zrzTYS`;^`(KRaiH0fH~BJS2-e#jr~7;nd9onFMd3f3Sb^40TsnA-}*~9VI3lKAAVs
z8%Z`t)Z+WZza=$kU0V2aWF}`-z00Mpifjp5mj^Ihc1%O%=-uh=lU&V~M6-!5-*U3h
z4zw>eDmqjARp<N|3)RGg$km+7{^DFtq^kQx@a?uqYz(Q*VlI<znr$lwD>Fu~z&r|I
z@W99?1ze7SfrE#NhyN2j_pOML^7Z#1<kS`T@v&SS*U>WM*QH3fdbWs-jm<$iW82k{
z1UepVfy1}id@ybQu6X$b{yR`=<S@ei$6K)4$6p$9sXQ~y&X%|*v%Ck-1L$7x)%qS@
z4n?hFBv8(|SQQ@p4wbgDCL$$G73FisxcsAUBI;pcg4BeJg7TNX0gO>1At5pp6e%ew
zT1ONqA;j;?e7D1?OjOj@!zt+t95yOWvS`T2_}orvMn*;&iRWtSP`^;yU-t9y%8%2-
z!^N^hHQslZ%o_3zER4GOxxsExB;zk39-rf|js#rX<kNg?=!;LsZ1wfWDtdpmu6}g+
zW}GmcOGJx8plTZK+2(q*T<8Aus4deo`L{L*3>gI|6Bk#c&cVS@lIq39MG~9k(ZZzd
z_%%(#rB#C+oUmaRa8F>(g(^qWEhN^uICTqqpl*y##NBI*dPJ_B?i~4uT{7NY;~vCr
zjkSE$V10bF8H45B++6Yf`(S@p7sZ=j662u~F6o**!`6v4E|sot(2y4^JZZ-p|9yoj
zpsM+S*T`vua>(Uy+2?LpM)dsmh)H*Mca6<*OaZMji>`V@^&vA$1u?%@Yf(Lh15w7@
z+tOj^isTS&oqkJYEjcB-tjk6J6U3&-I^?o0L0!P+I^Thk=->HuvhVNjQ+OUL%E}0M
zjg-Hf;p{(ZJgl~POFrkYnxvM#6xBsNZCzdt1qc;D-qc-G?*OcDaq;_Y0q?0JY<C7|
zF%-!X1zZsGBM%J>flIlSXtrn*7+IM$?pwNg(2jW=+-!Y(i2r6mz^Ibe(Xo*qJp@kN
z1Qz}}JNP}&^<StoH?+1UBEVFtgIXo$F&+U8&!UQofwB#;tytxUW^IL|8Vk5CvD_M>
zA$GPeHrrqU)~zJCyrxR`a%#kv{^=7Zb;Q3a`=)Ww_RwId@^HIz$_C&sAj5&>x=rqm
z0mL1MWnQqKc~_ZXkFl}w#9r_o^L%G3WO`KrX;$3D56Qa!!fX2%b1Tp%!JfoMra?@m
zO?eiJno4VOXmvn^Msl?@{?grD{Qhs@1_7b*xr3vlETI7FVN*hQ8gE!|uou9cv8=Jl
zrp%U*kWe)IK>O40#>?l+mk@vzps-6omclXZ{C03dig>U<`&PAh38(q-5SE7c`4iUB
zYzq|)mxzsaA8M<ygrSg7rm^l5@9_lse}3UMbzkqbR2VKmO-~Os7Z7OaUIw~~!2ls`
z;)#a861$A-oP^K&AtEATb@gM{kU6_gY(7puq8^b*%cKp80Kg-u6*~`m@QjX%hD}4l
zI%$_XTv3{}%kG0FC$auvECc*kHWwE(lEL_j)dKe@3`Z76_I2Y-oxkk1T}BEnt^~oB
z!otsNUyH&F^iHTp=TW_2St2i`$gdD5UdWAIW<giXF>?;*>)wnp{3D)LS`ZhP{ZsSd
zu}n&{&xS=cIc<{vVqtG@Z$CC|_}HLb&jcqDPDw_OnNV9%i)3F|APjVC4PObSp?TwO
z7yh3zRj0q-eGNpq$9Yx+3Z7gVEdWs!L?`))2z{}fxKSS~Z2zO#rZ&oJJjQ^>WOv>6
z!1F(WbrCJLSWf;ag9J~$OvUeR#fM7MuL$lD>&fm@H(#hKY@D({Foz+TE5nD}4LqF3
z^JTyOx8zEEnJr)F+ZLxAFPNe;$9ewVqE=OsU)TFQ(GfnymRJ2MQNNOnRSCH4HvPPL
z@c!8?f*TznZ>i<^&$4nDFWXt-sFn7K<F~qED6lu)IT}7}zBGx3*h5KVWdEaOgMS}c
zt&-Q$+FVx@TWS4BNm)Ps9KvLGvGlgE@1t6>?E@I=A%AUW<7#zT`+o`|yE<O6KAQ0t
z>dNnI)v`zbR#ktYYVYSib)R@UX0QL>tZWWXIuR|pjxSN1xTslY;?=@6Wm2Izcc4Nl
zwywiz-SN%_c&6AV7z_qL&A+2jG&m$AmEU`PqV|`+F&Ga^qo7`c@0HsA*9y1bo`HPL
zo{ix{%m01Z<+<(3pF&N!6Xv2<o#XjrtZ@ixXTu}OjxC>6acA10r2l){{9^5f3lhdJ
z&5d#^%|txT29=7+%4$7RGH`<w)SobZN)-ZxGjait*}I2W+%si9+P?8cW)`xP|I`rI
z-#>5BACm_hzLE5V+*Y#<$IYgn-!W=r*o};jOM+304E3B*`&L=-*UXg%tqWO~|5pou
zP$LWv>ix4dgjLvli)~tl-&*cirn$$?Fwt+$+Z0Cq^;o(jfYH`vMnOil)Zd?&_dIo-
zw=no+@X3_5h>a`|x{FiN)N!_PUjOYM1H%H5{m9sGwH+$RehX`jAH#Xs8jGW10qP4Z
zPZrXYQQ3@m7K>(5<#zO5?m-sig@1ed^Z(>v@eKZ<Hh7F7!!F#PpO%*30zA+mMqF~*
zc<?q{p*-D7$DS~s6k$6rUP)^(nr7Ahm(RZ|rdMYyGVth|>GkdkdU$|xJOsgKf<@C&
z@;C@*pociAoqs6UKy#Z;{OAr+M^byaKK(xN?4w$uvyVwn*!Bk|Rr}X}Gh1Mc;sG!h
zep8tFA%4NS2_&ShGsRrtML`gA%P<p}#@2jMV@225^6z)6gn+81F+dP{XvIswqY5K2
z&ClXC)I*cdv%%A&Z!0|i{_Xw4e-Y3>I5_y};VP{o2u%W4@vWAcvRXt*bVf*3h@bQK
z5;GpjofzD+$-;jpMyLYXDyG=6s`ejuK@&0<YT*h^Z$!U#AOi=Lp#a&#e@RKd9m-4h
z{B3uwnS5b6b8Tx;pKbkB+JC2z7i;)Xn@=#VRQ+Y3tfcn%nV{Z3|M<ocS6!CXjt52o
zZG&C>RMLhZXvTFpzW+)Rfpax4VdiJ*x=L-fFD%w<=>{+FzvpI%!<F9GU{BF0V6fAU
zAUNXPNgDqAPXWuy8a=K3s$*u}d@l>kCJ{8%Cx%CUdj31-H!`9uU6C`7w;bY6{|e&^
zxM`BSG*tz@0xD^5+}xdM8;kU|&$9v;8*D{IMG!F1R*bM2T3GO$+GFGMyfDa5Flqo@
zhQdlp7~BWW%PVS3EreHm9#o1omeRi>8e>lqYyPu2w<R-NL`x?8*hNq>b1N@h+?3+u
zP?7*jxSsB_XLOU(PuJ00%8oOsP5q!s%av5?P*TOj6t=q#iD)X{tEDSxwmZFBCzpn{
zE0WSAmF@<6!#>SyRbeA#;mI?i1{bhv%;ScffSk{M5uC+@x*+{>_TT-)j2W;N_FpHK
zocFu>5VKiS8hH%PG66|9Gk2BG1Gg0Iz!Hxu)0EZZZaIe_-Xy>GEs%bQAA%SF{P+1Y
zD-)B8iwk_k_Y05=tt7I-M>D=lU#Q&=K{Gl6tru$}{}JOijwDA<dxPJq#HcE7$-$3C
z+Nq^kj3v}md5pB5?z*f+)u6=^skcE_D#h)loUD0M%v%s0mvOhw-pF&ui+sq0=^!DK
z!RGyl00SMJu@e<1wb}TOH_~jDqv>DIwx3}QJzlM}95>%B@0J<XzG&?TeCu<6%|v$e
z;&CN=2;fj%8+HZnp?teKSe9Y<*Ik$0BwVWpaQZ|_Jdi}a3@yF=>Kq%cCOTwyDEK0a
zGI+PQ-l0mN`-8RNx@<r2(LQR65b?M;IXlx)Q(wb-NN7BqoE-M%i;|>MfcCWQO5K^e
z(;%c^1__;*bVb~dByGxaI*`v3$LpyLXiV(G!Fv+?I}>swf&903X})uF);unw2c`NQ
zo>%Y+!x?&u%RiBsOZBdCIsr}A*L@Q?SH!&c25WIL0C5_;YiwWuJqRs@uK>&+VqUv%
zOQrzfBCw+K#}9^<Yk$gvgF^zKwmCO)f=M};$anYH5y7%ET*21V*x3BE)>AN3EG8^!
zJzs7-zS(D07a2KL)XG!Y|Kk@XOf%b6EWk;P+<H6!sZX)0XS%;Xc$&}WRN2bw`P9vI
zwA}f{#heJx4}nhSjxH^Ek1Tul<(aeDWwQNau#@rQ(EIkm+Qv>QEII-n*6g@?Hr58r
z_!4i!5|dlkEKZw7hZ_e62j+*YFHVE;Wu_y^k;>_AZu^&qUd_9`9|#DPdR=eEDd0HC
z$;nqFoU7~Wk`n-N3#%kmz*V;19|B<$F;j?)+`33Hn;u#5?H){c?)R-{!x=tb<($Oc
z<azP7-ZRenPiuxy6cWun%InwZ;13EU2(TW@tXi_Ggo&J8?aj^2_{2msVrHYWY?-&F
z031K~(bNPGP~~PH2>HE))0(|0r1<#w!ijlg;RYG<;+lBeP9K^U7Z;oFE;Z|a+A(mt
zoyRk6^vKPYyR$4PcLbusm&Q8bN;wqAz=0CAQ3gx**g4`moUh7E_HuHnEJ-720{Ef)
zMt?qPfEd}cr$5ut%{*0=0np*Mo85obr}HM}ezOlX_jA&_BI<rGmp-VEsi<0V99Fgs
zU6oY-E?8MPJjX6d$(!OOTk<1pG-RD4k<<N@{DIfy;KKtUs~h7>L#vm_oKFw7nBWGV
z2M@y%(c)oQl<kq@MOcUvSquGBsQ=XD<YaLQ56}F<#qmsy48Snw;B%ZVG(T?M*E8j@
z8H`_C)S8EGs%)<K=+c`<fX??P8iabn@-;I{BV-oF2{L#u=PIBGsif|rm_mVQurv`7
z5!a)|NUY1fCC@cnltz4ZLMCaabeH2Lv9aT+0@b|Ep(*3b&kFRekNynQky4nN)j!vl
z!&12CcsNT7&<XgHefR;tygbxoPTFv=^1X&r1^aye?!Py6VKzS7VEpB*va<4s&*L|N
zfR19&b3G-@XyT=MkJ_m^x3%a0qKXpao7eJNKSvWr=r!05V0wQ{WYYYVbwt92h(sLg
z<vYe0;A0gzMMZQngghQUe2Cw#uv*&KEc>=1R6iGi0LXy#WbHsb#xHBuVJnTcSgVe7
zNqm7FYIn5&lR`waRnj>h?+R&Q&@FbE2tp^CZ}HXj@p)Y92$D_al%*I-;xNUnGG7Yx
zq1SGV$Ito&^hOz;4ppa$LW%hTeY!h4<<VlTlYJB!CHjn}Xq)+r_cU!=_`JIZTi73)
zc9Xi49d=j0O7cj7{#HwtWv#5<8u!vn3<S=R45eb@;%aJX-2-M$f~(86J6AyU!0USX
z8L|(DqtYA?@><1HBP>@thumk^5iS5U*@=;xv?m4%kr?0XFCK@9Y^-B7wgPaAiR>oV
zvu&ArqmNBH|2XL%<WWYn!C%dmDq@Efo^Ht5SYt}MBH)cgWskX(w1m@>G!$fHz|RTT
zt;~#!Vj?5kes=rQ52PrXKzsmV#gD)r;?woCkdLs}(L*js%gsfl{>=LN*siuKEw173
zUoD?UJG5ARuYut=W)`;r1h+A{`My8{IpPrfoG(t3y9)WL$!wmNX|$>j=Vv3CJ-;(z
z4#qOYmc32$odP0)&?zS9G^?O#b8~Y5Pb><nJWt!@eb>`M%`Y1x5`KdhWW;d=<`pJD
z4!clo6TMP7Z)j<1d%U*x6*H;Ys)@iW+`H@w!_(cJW<lcLGqfsC`Z+GH5uOI8qo&k@
z$~7nsl&~>d-S3|$_k>SCfc}9q;{A%52NkuNhr&o|6E&9vo=7zVD~uZ!2Q>O5*huxL
zkVBAZL0Gs<d(;GGi6aaRAz<n$b?uAX$-{*jS34)HLzfaAW?Lg5pwT{F3w71!$fjnQ
zRcB?9lW(pSC2^$jd-qeX$N{&AZY9($;m8Mtd3ks|4bB7Ga@&LO(K51t605Ymvz=ju
z=juKa7U4w+ZjR)<_v#jsAf5;5#vpTZ^C*k<#HYP~HuMe6+=0c;-X_s6fiF`>1QT@h
zVp~=2Ry8yZqy7AFW@JzrtGcVFr;J8veSJ^T9WdhWYaL=%v!(oMi<z_I<K+O6VQg&7
ziU?@eNszsN|2`oh0q9@KB(WP~)-hwVUfkcD0T*U8H5X#(G|CMPBENk@z%Kax+4uf<
zODc~11mww5l-43ZAvO1kh=%p)>?uzT^j$`BVQx;LF(p2t6^Gq?T)A>rWsa^HOLnCW
z^TWGQs49>O-2D_CF|d6bn{zn}+;S)nS|4C&j)3F;b1@E~1pDTL+OKgauQwtEdXECn
zHbl$23%J?$17c~O&F<nunc4I6C<)d5x>Wz+7V-AVP<QCT3z!t70Xlj~gpZ-9MlE^h
zbM=6J&=FdHwL8`zM*?@5U9j0<xb`>T5?!RZ-3S-Z&tJX0uslC25DDRS-V>fP@82K3
zaVjqFzrDRZ@UFI;DLk5~3EvFm<eIJE=nR{-qyCIdEZ`xmZl9=DZbYLg`0TP*A(Q-W
zaK2pKspoi9zeA(OCItd<-c4W6L3ZS-=CIK+6&{I9q{UlK039zjB@xyCi=A{d^SK2b
z-#SjMyeYJJ_Zfofu#B17ZK?bUS;g}Tr%U7R>Nr}x()7yacCOl56CE8rc$7bdEZ8In
zmE`d=>1qFz<tsE|54)#kr-u>#q`2tl4LJOUm3RH%<_uj(Xk&dn9(29iflhN{Zf)&-
ze*G&eX43l(y%bS~M))fk%t*x6NEgN-*w7hP)YW~%{Rs=1N-j~n$LRjYoAA^hDV)x?
z?OjqabOLUFT791$Y4fT*XNI9rC~(i`&&|EJ=M{(`K6s$);XGQ7noC;2ezfV1;OTLv
z9VS&Fa9=8y)*M6iFCtlWZZ{V;b7lp&rU-=_=eAXa(6Tn6zz_KN<DJdk<<A%cIsw1s
zB@Ra=db+tgX2A9N`ktmML1%e+g<iYdaR&{4dv&~&S^8%<<xBrGaE<L0XoIEsJ_=+b
zW2|r7T^*ivT&*b4-`>|bvY1LgId&l%L+0!oF)%SUdEOi^H3j)h7iree1@$o7JFVT{
z{MzWzZT6a5UTy}CTC5a+<8RZiX)Cb;l2%_g><KHM(1e`(n&k0SPd={tA?`+KsH=zK
z^VPebA#l$FyM|^C{o`=01w}|u5jF`u;+1~EYH@1ql#U8tFt7hFrQ5g~pSi?2mK75V
zJY3wF&dwJJUz4&Fu;S9v(tvwMyU#^dqt;R=Wl|e0E)ugkJ3UgJ6Xw5ud^bBk4;&4Q
z^+3iwK9)}C>E-2RV?+Pnc~*-}`{e$V8ICRdgSYBy=4i&&_3VHzGw3z;NN-SDIi8;N
zc#B~11-595v^6#XK_;mnSzlit_b;Cu=@gGA{azrjmTiy&5l|+L|2ySyD&N2)KGxno
z=+>B%P_rKA9Wim(?%zw#2&)&+t}{QUgcsW^_#DtKm#UHz%GaoG?46vF@2534sHDZE
zWQ<8r2;aXivzi<E*N|H+MV4lV62lG)`#_NAtCDctjP>iu-r@1_iLTN17@b>DB*>mB
zrShq69?gqZ(wP!n;Cjs6SPuz@_55Jl*va&vCZJ(Jb0k2o?!PJbWtPYye+V9ui6xB2
zmz0}qNqF-uWM5e0H-xyzQZ9n=ANr$1e02MBN2`D?(4gtrHq*a)Y26<j9T!p4(29Yi
z=STVfE*9+#ECv0q7T|6OgU~+LOYNV2TQsCS&%sjqPT-rGb}uL<4J*F{`JX8eN|?wj
zIRKK>eJA7G%To!x)M2OyJoY?hhNgrfmG#Q*bBNDY-V&XY&%YSKt)gtq_N%0@zKK@V
z@4zl4U3GN?tzWIf<J}E5bH8!mx}tqPpZ<fhe@yf;SNtn+w_f7EtgKhSL7?@%jdUAt
zpAdmpS4ljn=nM-H{wsk$iL~O7Fdyvq`AyC$1LUPflG;dWji1P99Rmrn{zI}~p1l;}
zn{mQW!$K&KX~UO1dIWP^S9~^x>-Np6{SSyXJ_EQRzpa+0l=E*>T0yE4N{aMsG)Cud
z!Mt>N{-@^*-Oc|ZJhx2jERkOZdIaJ9UG=ih3kZ=zl#Db*Cya{f9~b_Awok~4X%lkD
z-vTH^0`STt_xl7eBwVlagIW|ta;?IYZdEZJNRj^&%;CxG2Q_iY&Dhsdg?Z-Q8UA>w
zNO*eMIlcpz2>&Y!CVj<1EFgZJ2)35clO1`c@<j};`>z_@HvUWws#Y~)cmyX!n4|vh
z&$-OSkp-m|YtX2S(#n1W6fXKNxBr+f0s>Z^g`#Q_fV%x5Y*u2qCOY=+)<69T?yg5e
z{)6d>P-6@=+!3L1Uc~#o9A6-m`kb6@6(%nx)!0mgP||DFPqsWE{I68=wuiiQ{Ad)P
z%8$(*t(3Gx<#wjK+hi({4H4<>Vzc!^$$(Ft#~}#2+IGfgbhV8K=s*ION5x2nWu>H)
zmc*MpE~KSpU{VIq%&B6q_i`%p)*yU>LC5Zc6e?&R;0)Tx4g>jc!rsp6?(XVptL*+I
zO6IyYtNA=DDK9SvN8A_@aNFT&d&t#lW!S7)VA0ukf1tjZ$h>{An?``c@^CN=1k#+J
zVPdZ_$*E9WcVLdfBeKsw{y&<oI-sepjbnkLf{K8&ib#XfJyGfIW+2_t&7_r7Qt9sQ
z9wOZhqXp?0U1Q@ry!!3WiQC=1C!Xh5XFA6*S!x>g5Le2G2vO@wNchM2h4~q>KUbIC
zVzti9_8U!`2>p<LW+qMVW`Ao-R^Qk4>M+YrSs6WW;}=4+cZ5Zk4Fh~v>f#hH_Kh<%
zN3pX%Uu0&(CJN^lkihN;g9j6{h~onEQLGpgyH=CC6LF54?IEO@b>BEQ$E(f9@^W&-
z75BS3sH_kTKU_(AdwZ{1%wi%IZMaur86UezpOA|l<hfzY;n3;fNG*WJISH`fmlz!T
z)xMsdo^&$;0?>LTd2qOo1F7712BkfgBJIX;xDC~8)6a+0VzP<n{rwdDev(DMB#t|V
zy3A&3Y<pm+(4m=MQmE%XEF9(|#lLdG*&+>8)OIk(v3>4x5xrUMLi}}hJCX6U-x&_J
zx$4lJ_{gNmsAy8wa?{1(*`aW2B*qIjJ(|SAMm+1TUAeB`Oij)9YNvbbcQrrv$f_Ng
zY3STu{)Ty9-B7X89NM1WtS-zs-#QX59)j!XV#|89RzH14HloVgt}^xARP@)q68W}-
z!-hP!GKG?ofV9Ofo5rzhn|WQqIw-gg%%v3-8ObChB!>qxh;pTDSzeDnYo~Vzs;m)d
zb-DAgtkA<FHEHIriHX}Q8;aW61!?^g!9;>CAE~ark~%jX%=|h$teBNG)8tt%R$UZw
z8Z0*7?umnU&SgbPMb)7!a~~dzY(gJrQ^6iHT$(T<lKF}pW0=s#;qx#x&=lXO!~cGC
zmqr<(AsL7fYGZwNA^c{(n(n;ORxdOgN-Rnd^h{0GLWY3IiDg@?m-3{qe{5tLxOZQv
z*l!fGvRYsALil}$I00Z{$6oCv7+|AkiX57RPxy5~$Y+kWwNlma*ouA5uL;t{HI^N4
zr*=aZm~k3@jf@!F(5ri~hyFOxP!Kz=aW&V>$?iuq=c$e`>5U)rHb*y*uFoUNAu~05
ztP+P(#(kKtx)F%Gs{=OYNVrD1F}r4};Z|`^EaaZ21FBz#54n2K!@@Gt;20la+##0~
z^d(Z}`H%Q`R@8EA_CO0kM8wI?G;(93`#)*tSvsx$!*2=}<3;H)i2akfcqhhPSxb+W
zZ|NPR9Hz}gx{XeaVgpII69ACFb3g8#ocw+rWk4%ic4X3<K<I$<vNNArW>n*M-03C4
zlr9d0L(cvL`$GeSyxyW9iVXL6wzts$Oj2M?qw@3X$CNC7<UHQf@411*mif-3@cXqw
z6^j<-!=sBsguP88x+)_fOr?0P@$&2h-nq)!p9DdUWPF*LRjMM32=}den-6?P-Bh8=
z@XOMLV1JGwAokb%v$^WLw)<^$=(Se0O?G&IRba;w^SQC@E*hs|9Y1S8z0r6(kjnGL
zr7R((iqTqJPY?u?V)?N{mIC3-jVvEnqYjpnHlGvtBzb;9^~U|JjrqimAOOEo9!+si
zy(1=8lb{BRA=+(-dl>06$<JeXYC-LJt!TamQKZAa9*RfK^LdWP^Nw61?{uA`MVEIp
zf+M)8(Lo^aJ{b#rs<Y?eq-|V^Z-WU^sHy~%Sck9MXkHAjtZh8f>f9Ol`t02Rv_ZUl
zpoMx3E02eiqNDeYz%f#-QF@YC1fF&>ZLl>cr-nS=DFoAw1dr~Xl-%dEiGx6(%#X_-
z;5MBsBaRL~vpeWKgE>>4AXeSe&~9PbkCMaQ&7JS<UU-&9!XcA6p{B|AZ)GK0;;tX<
zJd&``dFg>!AE#|!8Mg}TOF&QP2nu>KjINU5eMe8v6zWr5qEaMQ^@p{HziZ%~o3<tN
zg|BSiMnVpV-z}BFN|b-3?G4@K_H=wPHvCh@EqXX2Eov?M@iy&y0gsPfCsoB_BS|N~
zijm=S;T2=mGx}jr3^s^2!cV#fzyC6(Dukz2GXB_f+`DjT*6V5CR2`RIIF`yL$I8ep
z)KYd~&B7X@wSE>$)ARSw_k1mG=SJ|XgbhxzgXNercLSmGRo(cX$b(jj&`IOXbEmZG
zH^Fmf+Z9%c0m^eHXezq%%rCC|&(|i0Z$^hh8-kCWem2#7OSZ{K%xF3Bf~>Aj)LNH^
zjegFC#q!NDn^@hB+RA9*&an&zlWsR|WQg6Xc5o!+l6?ZJiYp6t>$<n|QajEuGM44S
zY5kF#L@YT^32=+Crt|VaF90BkzPNy#ou<>wdyG`uKyhzOiad^#7ich<C{myf=qWfF
z8R)5V*yggDa&L4yrlY4%<?&;_^uYKeHM+t19lIxAr+dbodK?{1C{Gr;pHRUtpx$rV
zMx?t-OWzamj5xj}dfnfGhL$$;3Cq-43oDVwMJioM_Qf&rU1H4P5`H3|6F|5AgeBIm
zb;{R9SB{<T5%{$X=i0y>586YI$T0i6yLx2v<u(w1a|6-P3%lRM_N$)97@U#Znf|$?
zw3LjD)^EQ8i*;-5+L9TU#U3hE6=is|)Razx@s0_k>IfsF)$pHd17h8|AAFfLHHOp2
z6qdDRSJQErs^gCY0nh`F7eQHJ961_y?<%C^53DM=T<mouUmQ;tAFOzhJ{a^l4w^k&
zq><_frK&dE<ECnWST%pT=6Qbjnw>q?HM=`34;M6+FJHa{4fd9GFJ?C#K#xP|qC%de
zq7RYqc&<bU%=)nNA%HoiYTfZY9g(+ifV<;9>m}}xciN}p);$9-Ez`!CwW@2!bJ-m?
zqNrdO`UqC|#(K2Q?=*2oG!zCVvuS6Furu=J4#eeiXr>VtGoo>EadC5^D3k&stH@@%
zm;tm`Y-yP3EP%>~oId*X^OsnEqTocOeKxZem(5(+*ie^58HAWs_f*}Z%Qx)o+|fdX
z9QUr439fdg6c}|+&8O2!PX@NT#XVBZI`nQ(6AWq5^=2ox6LH<wJj`%8no1(v`+Z^>
z_ncAF;ha?gKdcmLlkQUR3PO9_rPKX$-^C~}-xYc1%eU01{0#Z=nf5Qt<fp&)Rd39D
zx|q%P`C8P=>6)6WIEit$eKmkjO_iv~Ne1dpqi75HPnQU{p4;=U$}X*tJRwO&A*X%F
zRm}cGET(;xLKTwF$}o#`sQ&h1OJmKuCWCSybz7Z;uX4jCQdE$(!S63c5AWYIgV4Wc
zg<Nmv=)tabxVgcJT$vfXoPkS87jEHrow^U?&TAtoFS<gPq6}<?kXE7zT*-&CUP>0I
zB?}?^de?}>3oKjSY0F|~B3ihM$7(CA|H!k$i++QGz|Iw>>G47)VQSZCay!zYnHE+(
zUnJ|B&bXR1vn!Hbg<faCV$LiqL4i%QI07n=Ivcr_G0dG~_}`SQ8&=5ZS!(#2jee@W
z5ddFI!W6cj>iWEWdhUuEXI^i4ZO}3N1(P&ePeUUtEPPn5l0Od2D9S^mMh<8+8nND6
z(Az~o-)b&=Ezf2otF-iW2;Jt<*3=OhXr)PsY3n>~XQw!Ekwa+9Ic@J!Tg4C0Ws0@W
zXm80ru2o>k|E88M1s-`5Q@7`RN}jJ2tvL$R#W^`Sjqb;ThXp^_r5W*CY4V;{6E*VV
zCeV#$oE)9*88FNP%sRR!HkTp}^BaW}O60FL8!@i73C5EGxh~H0UQz@A4JP68aOqJk
z%$f4LL%_z)mId1tnhxfqp~=iC`TFvuOx)v#l$iAdUJjX#?%7`k<68)^aLR9UR7RVU
zvCu}hvF5?AK6BgCRize*0=5Z>{ayW8+L^xT1|Qz~{5Lz<sBqevnKi4TAf#+`vh_~e
zq%y!L7EVFiO{Dmp&$B&5g5V`Nzf+Vka=u>7Rqu>Yg<Qp-PX59J<8l6p?z@SU^=yNL
zJ}<xE>PT%o26Yl^)MI+y9!hpZHk!<9Kfa~GUTrnYW`4K^QTyzZ50JC>qN0+{CVKDZ
zr&SLtEf+_=qeYijm#@$rndPCe!1>tADyKek(NO{v5k+J5oYy8;=pqpn6@^+{N*+Li
z8=aISo9lwx0zQ^O$2+VF&@E6hu0i3frCKmE{Z4~~@BqNK1<y)JsV6-eG)|xIyBnzF
zCt41w)FG*DO}F#M>UY-qH2K{Xy~-*oUI?6iID3wPCLd<d#b)7P&b2-mc2*U4$ounm
zTqf4;yrg->Jxle-!;SG)7p2U!*c^OId48fj6Y~ScphKE2{=KDb6QxF>#VqL(fTQ!h
zG;3=?sV?GqZzVf_yFl%`auHYF$8VC<tDiE8jMfTb%ywf~#n{MShzO=7%ih08x|Ouf
z_8W$KGLmkFGc|tPwnVR))!j9a?80Fo_q!-A%e6sgUN#HLbXKeJYo!QLWh%WE{qFHw
zZc{|Q?2>9Vo=r+~Qg$}n_2(--NoP50wra;6p7Y4&bXd6sq{(Y*kxRi`6FQ&LH@F_P
z<AvFE8|-3^x{1eE`D6Qf<8uDDGX%-j?3BZk_3y9Jc+TFu-xWzp(jAl-8sj4~k?W$Q
zclYhCQm1Gf1U(?T#+~Q?#{w3N<mYrW(!=^xYGi8cu$V@llM?2|6;iB2_p;tkv!yj8
z@T|6zzS4UdErru;$?56IDflZL+K_USm_IR=R+59$X6~YEsl&2HgmMNhCw!Z*?Api4
z$XEW`!0!*TU}O@nh*50N5@tuGq^9Z%3;$e^iKj~jsR6EkI=?0IR}lv-iAqAjF1T8K
z9l14I?mj=)7)2IkCi7d9jc!0%_->n$uC8vAS5wrp3=fKWx)*<*@eA|sp6*eLiP7$%
za8sNa?&!Vn4Ln0}13sr`VDV|F!^UWBSbThMRa7CPlGkzXIu-1^Yj`-Kk%a$`KEgBp
z=g*&qBc%dZsx|K2PVZKhZW9}ff=HHV%ky*qg|?#e*9mGJa+#teWn?@L>7s`I<Vaco
zEvsGL8n$@e#TKIc;jaJ%%Ptn&yY9~&XW}j!ZPN{px7OKh<Q|4ryx&{(VI>;RR|}u(
z0hnl&%{0SEQ*kn+(SqxoW}-+X#B(g)*~Y}gL`zG{sY)U;Yal(T$3}Asw0Iv33~=yC
z_UGZ3VdT6)MTPIh#H7@2yPkf1zRNgK1Y|@@SHVpKi3WKgcJaVj`9T(!4Rj|u$|+ut
zE#7&rtBENh))&)!JRvetK@6yjN9k`7Yq5_SqHZ_3>M`^GVWZJW#!fog=8DVuWeq}J
z#Lb2sZ{BK_sSly+>~nKC`s#p^J&IFwKp!5{J8@wUf?bUTETM5D1LN=JOkk;{I!@cO
zjR-8B6^W<6Lcj2w#3#n2e1PaQTwik@9nmtX-{aWjXdJCdAR_*WG46SUlVkZ^QtZo1
zIu$0byUe`>6xhAz{)Nc(`L@;;(FnOPLY(72B5QqBzl^_Y@OK5Kuis(y;KNIut#Y(l
zSfBWDtkH(aaq*q01|}Y?;`^093zEETCG^KAEuL52??1t^r@%;--OBZ6<wy5KWjoPN
zDeHvxZI(r=q%_PF!!KHzREsqwXtIp6Y8S70(U`{Is#KTnAz@XP(>nnD*XT2XsLf!U
zFD75Z=8e6*y`z46Ja{B|$AlpyJUso+9Q^WPwnztM!EG&hzLuve)gG0rWHVDI^G*Hz
z`_qWFV0$~e7r_}L4iVl~bOQ<T@wD?{KYozVD36S=Pfn!13sl9_zRe0Nb2RFve<+#i
zUt0R5*ShmwQToS|sO^A@j-UP)S@bu0mFEcj-(hli@`mX?ZB5s6H*QQEWXMTs1Wiu1
zzThrig!0J52iaWDzQ=wm^RRS0S1GWH2BI8aTAK1^BQLO*@atj7y)N(brIUHN1fKq!
zch9)}n>d8`j$@c{+j)_*<sI4fLbi5xb5))lT_YxIAFe5JIysVJPR{hWPAv53N^EmY
zp32A0F;yQ-cO6dc+MXZ-cy1*lUed=3{1i{Nc_XZ&px;KEUh_13D%&OGLkVitnRA^d
zswpT67q7OWI45QJB+!O#D)dqAJIQM=_=QWk(Y-y=J$;WF>5S{kP$x6{Vz2M;n!pn`
zxYI)wDb?G&hO7KCX=vK~H%Rj@$kb;uMc)|=Y3ZFL>qgzos!p+yKQ@yTOp~zX&x&y>
zAD_=^t#2NEzPRIB7uTGVv3TEZ1}t1y4c#sYu~B^oG6lhQk-Vy^Qbl(wj3pM-sL?&2
z_bXhZxYMPl0O|a~|M6~T0;z1W&=M$S!D18=urt?)LR<=Qb8#6b+ZzCOY-fkk;iM=?
zg^7uYt|;Y!&vvIIFP~^cE*G1mq~!T|KI?j=OV_X*B(Yv>CN_Gp6rxs;LaZ`Z>5kvl
zOHWT9flXLMQ$FN8=Xz3a6N|Zsq?^oIQ+WCyM~FA;WGqXDtjiLR;PeG);vwC^LBTJa
z<(2sNab()+hL@SOsw6*$PguV)G^&4gV5_dB1;ViE?E@`XWEX$?;sE|Qk>6Rr{>}8{
zq>DSZkn7vyi=-umOuxJ!uc1d#FzcbTHUzuLBqD}cOR`BEq#=0OOjY#u7UZiH3BWMg
z#%&;<rVq6Ri*Vj%bmT?>hz(y#C*$j=g4OgmGeDR&f%pWxdeH|=-P2&G1nPn+_=GCp
zaA$UP_xC$#LhYGj_VnnBgkGFg=lr5~&n!L|evX%Ga}Lik_~kQsoA>l^oa>#C>9`fg
z@+*9nSc*HWLKl=;5P>xTYOnp0KXVI{uZFViH+KV~zGsKjlyjh!GRfJ}?_|66P2nXz
zB=N|t$oQ_?eH^Kn4!ppzqSsj8zE51G*f{6m-i5i?+E{1Np|;l$FD{Dc@NHJJ5X}ms
z1(oR?U5?O_z?RnGs;9I{jzrZ7Yv$(Y7(r0*UV0SM@NXS=24JEsIx!*&Xkjo?n#sgL
z7z$KRH;QCn?Q@ck)tI)S=DT(1crxtbwPEKVi%z|yB#|e2j61j~ruP`YdM3rXfT>Iz
zngQ%2eZ!g68S?RYU0q#~ZsQ6t%j)avGpKd}LpVs`7|x)V0U<2C(5H3yk&Olihd;{U
zn5r3|eg{De^`+eYmC7}T(@5DQK4#K=$)_n;U#@>ID3GK@;7)vaPf?OA?|I|KjkvHc
zp{WnTuA2po#CV{XWp-Wig#3YDzruRNcnU=|C<-jIRhF~IKMzSPdHwwzguT<Or)HXN
z;J~1zKBzkIo_>>;mlPbe1As$=iZn~^3<%!P$3c#x4yt{zcg&I?ucOkuEg5zN7B2jJ
zx5jK}LVw$mLohGT>Kr*Qx8gCCYi}Z%gGb8Yvae+$RaSh(CGGEfp|-25tyNyJ4fc_7
z166VidY|#u1|=nBaI6<&mzh$0G8zfH(s58&Y%Luu=y!@c4%EK{lxeliJjNBlii1!7
zRnFpMdje@YsRY2=T$ytTXhTNE`*mDkUUE45bls)v^BSwpLMfcAVhv$6Ox%C}!c7+4
zo~{wtY;ai;oJKV(>$T@M{5?&-x*JIq)7dAUI$1VSQ|l$zK4vv;+qw!X^|ky401`!m
zUt%6jLyZzz{M^M?7{xyHv*A-yqr>|l4b%9CNY2#0g_GP$`kpY8mm<hB+q@0*W1CIH
zLilCDd|IH^(l|9_esXD>RVp}GQCEPzv(J*-BL;^2at%Fq4A#1#*2Z#vx-|+m6B?1x
z9hoT^)Kbf7n|aa87w-j9lAC5b)F<o91oHtd!BJV39nnsKEv4dairkSw4TRlgPF?f`
z!|)ULC*$nytRf6zh%~z_$|_Qecx_|jQagRT80x(7rwfjmnyl2~u6m&ulDIRM-T{az
zN<p_j^DvA)huH76&-(8+$BHjcCDZ}D<<Jgss))n#^@$9JobOH};d0`VO|Gb8(9{3e
zzqi{#<vE&a(6KgIv)f50+0=LT$ACe*>4H1REZJYIwVhV_2j5X)SES*24TE;@#o<yo
zvH>+WvU@uYV?6X6SI8_FfOhoAxVX4Hz8mDEkJ!u>{mj63kYzrG%F91MVf_I*1VEAU
z7_>_>WcMvEuXxov(04e}EZg4sA{Iu;@3pnIXhZZ`Q{f6N5R=w!s1NLDy|c6&j!k?Q
zuD-jP%qSX8!N2(nf1UAg;pdGrzBo#iu`0_s=~^_X0l8oEE_WouvIZ1}t-M)W2TwA9
zpaFHf6Ak^wk{d!I$nf;(C%iVG$s!vsPS1&+jqHo(V!qs-fMHPKp7J9*v-OXwo`&1?
z_jz~{9>aueFL>I<R#~+(xVWw6$^a6<-Q98cAu}W6;=G3yU@xaO2gZc)pYdUXIWkZ=
zct0B}Tz9EliGXh3&|!7ur=tl*W5#ZQe?$#>faJxr*4^4Vl`dEqneMeD_Z_fQJKfvX
z=A&O3+SX4lbVseG>sQNWzK0m~9F((T;vqE|H6Odn2&k+ZEYz}phGi1mJt$K_e)-1p
zmJ)+FpBrgP_t-D|wRw3q|Ay;Z{s##C5PJUN+2c*wbEkQCSVA^>rs1QDnc1C2C#D}c
z+1U_>eunv-bi~7qnqXIQ@%)KBYe5V2wzC(%Oe_{28k4%ALJ5T&pPmn;+N+(onb?k^
z8NJ0WDPL_)Ty6(#yxOP6&88W%rqE0#CEn{V&i3F_BfSAV!nxvvY*=c;`c{tkGa<Z%
zJQDdTtfoocnf{AYins1}97pLsSH6JiXL8cqZM#;Ih8Z9vJ1sy@UU9p5R7UNpg&OR7
z&CQ@Mr4Vvh>mFkS(UyQ}CgE_|1@dBiN`Y7Q=MG&p@25&jN>U2cC|Akkj}8y%_(=%}
z-gSxo5Q*Ai?i?71BCQO52;l=|j~@lG<THPZQbtL(_Ner%>f9|=6_9=ABJnInx;8P9
zqETZ^hF)i4PKc96B>kCBG#F@ywogb&Xkux9(PV@Nm^(20wuD4H8j|@EwE;@Hx{C=Y
zVc2?Mn}UiA+x4ofwdSns%r02^6I<ww?hyv<42tedeh_Iztgg{3M@UCgv{-fB!el_!
zKqwknDV2&m^2~pZw0FZR$pRH@*~lYKsNCU`xroK*KluGLuti@6T#rl$F%)%<+Rpy=
zg?GML+)K;jo%ajQ!dnD);}=`5JN3R|S!0fkd0c+-f(%zWRGN7*6>c~v%-GqdczS>6
z{J-@<tv@LG(&H(mX;nf*L!NS}2s*4*B78qGiOxz{$6D1ZbstMTPnr*lsG9@WOIz|Q
zN(6QbX|BBjn$DjGm=g`4>x_tKZk~o*o{oH@4kY>14a!_m+8wD_CVF}nN{Id<t^LZ)
zQ<N=<5-E7zSXeK3u$$emuQ!#3CN<CWjzQ2}xff9;+AW%d2W(QOiuMAxIBT2+#vM)>
zbu(+@9M=Yg-G<&rX35a!eS;-E_|$rFiAI982jX<$S6XT--uX-T#yR!*e<8(#J~{{A
zqN$~yDY>qZ$FVZ^GIvYR_XdT-t5iFFDShdfT2z}#z^<mwpO2ohKPhIzC!8I)^K|>{
zU^VikwBCPLmtwwHTwJW3BH*rNm6}l}T+&L$!b0~oE>efV|J{W)?{CI}?brXsNP=SU
zy?_i+-WLg@>v|%4IbZ3;dsH=KA~6H|DCP8lw|`09PqE(Fzdbm&K6zlP3pZ<i?KW!A
z4o&v*JN)a)!0ODa8dTROHbpdZunSaGWJHbZYR27z(G>kuHn_C@?~<@`1oNox6m;=*
z?_4W-97SZboF#But>*Uce=6)z(!A>*2z~Wbf-FaXTWgq|#ClqO=2FA!lyT<&w72N*
zC)lcTtfr3XZ=_sp&z&?)GroozRIXhzu_%?}{r#E-Ve<-N4yZ3zkd%^7vauMg#;844
z#jDp9uSU3)OX|vg7yAVnKfwI^UDpK)sYNp__DSv&W*EN6G`vl+j-|n%oOSW4xIx_P
z#XzLS7c)rMKiZeu+tMS?TGz4kWzDVT=yw{ae;@+URynDy|HlFb*c9DjZI*9!{u2<s
zQTZ4gcGf+iD(s4HoRk){AFARI+5SfT@0Hp-2}5Y>ocN6EJz!ei&SQMU)_p_gnPT(5
zf8`2$r?0~4-CcOMLixE`j!r`!(^BxlKaSemukKz+$$rI#OSBY6*yn%mR(L%97;Vk~
zX!V9Nbv5)aFWy6#s(L`!z~7IQ7hY{lAsijuqFgA$4AcebJiKv5HUgWf%#hOqra}X?
zkn_K?0jyrB+xTO*ni-tLv&h)xf?xjq04(*fq0QPywOHyo`qOXEu38E3`jj{9`bHb`
z<VC9d?+<2@RG%`uRE)H6{{9>HlVVYvz(+XEZ@aMlNpI!~1QZWUfY;LAlXFNob7cMt
z_CW9A|Na*1&1)Lr^so;SP0EKLQ^q@bIo?&E$@?1ESd`T@H5C<~KgI>pl((Y7SWK1D
zZU4U}4!qAQ0o@+8bs-x<eNp?I92`t6Ec8qaA2`xV1fTgn{p;OXxG&#`&|x84w%7jB
zcy00%8ywpM*VF&)(ZAt`HA=~FT@NAfDw%cTR9jx1PN{$Un)q<xGoF7mzJK0p1)w8P
z_*SOnBO;i5|6XvAVLDWy_FHOF5+zg)Di@wza_5J<X6N?a&%Zxs*KO!!(AaOQX6?E+
z!K%xf2f<Q7QjE@?L{IL7gn<7ZECtL~J#4=eH%$|0{(j3RZaEpjSD&G-@sjJCn}p*2
zHQ)zvzE1tp;N#&$ZdSX~|Jm~IV0?48Zu^!_X&hzj#<_>kvWtkfwJY}IVDl$UdOEtO
z@PBRtEC+G5XW5joD<a_+%*@R34}*44oNR0ibWD0YZ!iCOJstq7OM#41ckIV*tj+a3
zNhwCQz9<YcNUe@>Yk%<nv2)iJ_Y;Y3X3==mwIcD`j2hm5uLEmPvGQiL+p>4z@VLJn
zy$<dtDalDJb#;F~R-gZ}S3&J2Pv|4etj4S*lW=YP)#v3s2CGO~WyJMG?Z5X)J~;d6
zZBcjq8!4PpfkG~Z0!^X6&kXAgdt9im${D5J*k1k%aiYAUU;o#&V5y{|c3SPgauKG(
zXpI$<EKjkLw?iBnHuU#1ZHnUH_toFa3Ey~oe+O3;Zf5BFZxRQaH{4gR;DW9zrtS<^
z<RMu^{r-*lF*(o%JA^POmr7qto#K1jH{A2@L1Hhd<c7^WS|(XA_fshQ`{vxohPZ*S
z4ck1LD7jg?Nrih3|1I8FSfsg{!)lx=*GlAVf0T5S72dP`yU;dU$PuSP38xqCwlP1w
z{r8VQO_0ik%WT*^iOcJz*0Z(vJ87`y?lq7WP(NS4&Wx+)e_QtNl`m8(@ODNw;e0n>
z_^tqCG9TE<PyUTfT`j&4g32J8Gb3Azw(dpc5^00CVetfcnpemVc*%3BxVkC2VyjnO
zs|B;r>V3}oKampFSP=AeE*)WSXQq$8K$bEc70cadLr)`8S0lDxJ6>}_iCVRs7KY2F
z7Wy_8%cf%f>vy_Hz8p$=dLeDs+O!TMuVJ}RRGN;RVH(M<ZsVwApU3pgxw_7Vmo+aO
zT<au@_l@ovQX|SJhu-Fbu);?`{jP6D|7(nKgtN}eV!nzRb$+t`oif?O6ZwTdaKPy0
zf6MTTj6p>yF)c<MetR4;GPUfk9-(T7k~@61XXix*1J)3|t6v3FCYiq<zc?U_>dN%;
zZ&9QSr+pkFxRFzn@g53=zZbzO;OHk*%~OtV(T^2%3}j8v_!^H|>rQ+Jx9pV`k139P
zLMg-QbUwOK7!&5?<;i#aohxgg;EQ`~Q5cN0?e8~y!X+=S9gBRjqNb@4r~E`)lcC`D
zCz7n35_vsiRYm1iWeMiGcP{(IcQ-06%S^huQQ1XyP)6!!XNxe@`tn5f$RW(@c0FZ<
z>rVK;QKn4W_Z*r#<z}82v>6=}v$3u+3QCNwfdOs~jsoTFG4j3cVFc!cmi8U%tmddI
zNH!_1SRjaP+Tmf@G9N5{*3nC0`Oh7g<2ib(SsEb&KX-Ez$bD=pEPM@ZXrL!ytUfzA
zP`QJxmuziCM6Pq`+Vi{mIPpW?R{I<Q)bR;wEEi7ZY~A(u7h=(J5;NG{{?zu&`U~Bi
z0#=>x(TOU`+Akj5zIX55;n7)$gU1Dfz^yJsPx*X-#HEE02P=F0(6_CM5LYi>oZcTB
zqs{-!by%~5GGBXF<;5y8)6$-MfBRNaQ4y8fd9t#)OiV}w6e=5=n@Uf#$7SMZ&lGrX
z5_MOf56kbwrp-e|dq3p;EK6ly*@ilv#)hWGTC@MXxTi9KOL}HC*MS?*FQWPJ4W%e8
zb!EC)LkS66Yirxgk1@0dYkIXNPxl!5#snBm0;|1rcHt}UzMCH$43hNhP-xB^Z1=Wa
zc~Kqo-&{7KQAZ$y-`?4IsYcRLdMhzyff_{k^SUK~8TN^rasuo7<JhR(LzjSn0DlpY
z=wF&Yp4RUhMA1<a;Sw^LWRT`)%xh0xfZHj}sWob}xX3uYdU|L8B9hFtb#!2-m}wRr
zzSpF7wvMS2&DYQ@+BJt~7pxyXe7IW9ToO&c(~Re<hx(>1F1ED1eJ2EUlQ*TQMoG@%
zfRI4Bv%Ypt_x#;IP-08WJR8N_Nxrm`W_!N~O#0O9%H^zbFgx6)`5r!OdIVBTu4Ibx
zQf3LnW0wB=pc?!cp{l4E2bE9hAjtGNJ3r_6X@C;AJ0{X1P&+ro*`KK}>&6^EGvyqS
z`*6aU@?d9hxKwDO$PFlsYz}iC0yB_NUV+%j&gkQ-g23iglXRd_7;bRTVNmc99Tt%w
zr9?Pw;)9jfWu8erk{T`hwXqNG;X`@sk;5vu#2P%4VHb8;auee*iun6|;^IxUmxuku
zUM3ZlCS8(KYa8^*;Bgl7dza>BW>&t@Gq<#STkh)0d*)h8LXvxSRx3?-kCf-@&_i?c
z)gr;GY0}^zz<hrFAa4#<b3v(>+J4O}R~~3FwVS9E>tDRfp=<FX`LTdq=y})99+}vX
z_HliZhN_x$N-1k_c&KOsWk7G!xFp4Fu#mDutc8!%DfX9h(Yt*EXcZpe`pfq3cr*dp
z)634TfoE~~&dryP?@S~3!3b^bfG?O$-|5VjFc1}Un0yQ_Wb`IQYeV!dV|#&O0<KqA
zVvJ)>Urtka(TqY>h3%^9;X(FKD!<v=F^{XLreWPk=y3wqF=8918b3k5V*k%nA{X`f
zGc4>+6NDg?d=3LV$a{N3!^;Q+$zj?Zetz1#-BX3HPOnQqknbTAD|1{dQ5z%DT-kh`
zsUja*%CYxFSM>uTY|rKGwA))L6C)WgOq(slWLlX>Zq*6gDo_YF<-3&k<f1M>JS<Y)
zN6zjImW6i5#39s&<v?bz_N-S$5p>B~NvsKOP2c#q=sQuY%W?5+hnl70xZUoT9<;IC
zRMi48Hr7JrFH!i=&_iBcjqVM3Ssqr_j-F}cUb>#H3bt>j454Lm*5w~<kvq_@+^CR4
zD5<VjmENz9qUz7->G#%?A;z2rhV4dog@j~=M@9e#Lqh{p`1eUU?%i<}M>+r_*lK@L
zaF~}q$OJJkIM_n42e7l+ASb^AG><6@_weu#<fEBBfAQi4H@BJ>{tt$9>IWnw&&<fd
z0?$b;cspkFi7IYjc?85vpUSqiN!j(x%+MKvJUso=>t`tXPHXkj&iGgVz2)$ON++i$
zr5{C$@!J{lzY@iNkBrgCmUtIHW&n60F)@G^`b#Ay>dam0)kQ}W{<@Y(sG#K0gpFUn
zC=P`tYsNH4%gFrL;C5Imv7W8Z&v_Hr*54m??NeOKu}9WSanM?<2%(~4L_)$$-lL2=
zPQ6j@;cum47rB)7vnc2s4`YgyHYnftw=uWBera@rZ!M6VlW!NovJH~_bn84^H><XX
z{T&4bS#|3SjjgSXjjJ5is{v4%)dGm%i^@G4QG!4`ik(RXly?FBA$ol^8Q@J@v(=Z)
zKi{2D2_&#N=Jist)qTXY+=4<OU`1P?8RW7YH55D>6lb{AyS$^L>pE}N#oO0IxuKET
zo~SuDnZCR*FbzKq)$NWMw?H^xz8wi>hYD5#Vu5eMDcN+U*68rps{r3G1hi;yftO95
zEIM^B;0}N{r}8>{n0Tj9w^Gqc>0RLc>D`I;9i95QI>*SN+<^OJbGQX-a<V2B;Z%Zk
zZrd9ZP_G|JN&U(<?ClR=+*aM4oga&r@(TK=jyB^t503VZKVYSZ0%P3488(|>a&)S|
z$3#A$Y3-#W>otAGs&rYpHc>NJrHjddNNrXrsFseF>s)K}dyC#>6s<Se8`j-LZZkeP
z<4@0CF<)34GT^eluxS1KE!5NF?K?xH7C@7WpabPKmb<|q5AuN9^0Wu;dZ0ipHq+={
z4Ln{@I0k;XC#InPd!;WP?3|ytqlvh0Z$=l=O6hRb3>&*f`{-8k{*Hb4v>xS_-A2nc
z_VnWT#<|(jMoyZnn@2=_v2|J*XTF+e?QSrjTiGjt0}y9E`Ixd%D4sjKzw0G%xq`QV
z&qbQEv%C9|)n?<#6RaGHweHwje-&Y2p%WDlW7ErAP$_l&pllKGrA3xq`8`~baaVG~
znaTX5$h5BJQ*2^J9p9}V)S_WCl@=4gv(yo$Fq6C5;vYPld7c_V3WieuEFdH<cbCG!
z?qvB)r!XDybx@2o&A@4AW_eN5wy%F`%KRXP`S-(bQLWp<nZX$eQv#0X(hky=^1F?I
zU{Uj`kBXz@F&$hG_O+gG(os}=i?a(%5c3}8Ilzgx9}Uvv#55Lx*s<Dbey&Kzz3L;-
zPS&4nMUS2VbuFxj$^E4da5KhLT2Mjmq;EOLS6N-%PEw^`-l;D3dC50=Y3{MiTb#Ap
zSk+yd>>hf_{>*<U$lrH+ln}~X5Bsjmq5teC;YAo5K|~?BBl~`LFfnV)<*}AzPz+L}
z8nEAR#~va#1$CkAMrVi%OcO+0*e=n&8Z$suS%JI_BdnD12e+j;C0AEgS4qj#&cg28
zFxYYQ4_J;@Iw8&l5gCUE<9+eKNk__S9+i~j0}nsO!xI&~?ld(!i%xW&`vIctiJ?qu
zbB!Iq+H24QM_~f{6YF~uUN^$vO*EM_FpS2K)@pt+@vS*LazVGzUpV*}w2e}_XlPCe
zNCS?qwiL8qaX{)e#;|CVxpX}`ql>bG%l&FeONWXRThCRP`7-15{vQiC$D!&R&G>v$
z97@KjTl30#X0juk(q_7<uSaWC1dtr>&+#6D1i+wnGoOLgOB51TR8-{PZ;L21f?!S~
zTetz7A#b6~X}YrS9A?j@9<IiZf)LzwpALD!?Au-{C1lNAmz?R#+-T}!OmaUn_`2Tg
zOuQuTr@+*35A=I(Q(hjv;luBxfDfm%TUbaXeq9Q{<;~&B{4&S;_wE633n*5@oDJIW
zudk0cqJC40Q76McONnP>@c~V$=?8Fb5jgb)@Dm0m;fXwFn>O&HHN-)0?E#4f0_65s
zp0!FuR&7r{JbHfqXPy0knCTTO+-5tzO^VXbkB^sEs+!lcUD_?&3xl!rwU{W3WlAfr
zxDvUx=8hb;1N-Y7I4<c-Ck~iFfZRO|*W1~*N&PhQ&C{<;idF7d&53~S6&*MQDsCgH
zhXsu1sU4weC$X;U5TPDZ;3a(xs<yO08;EifI_<5z3upSC;bFU}ij)2%UVD)34&EQK
z;j*{AjJ<ULp<;6x1ZtR_c{tqoXhXG7Q=%Qs2b6R+aI_n0ywLwH92B|<0%yz&9w1LF
zJB-5X6odNuH4wzh<Kp3(kBD-?x2Jo#U-*rr-xR`}E&*j5D-=T}vL8(3>A5$YxlSdm
zrT`b|i8;hE+K8eD=RiP8V3#NJo*e|BGQ={+PsHdfdZntVKg8gwh_*CLJ;7GG_>pRb
zU1J+Net59@Yy?Kh=limOuTqaAiZa=9IU^oxvUSvN7*8}nl%sEAb%Y~P$FtJ(VWL?g
zpKHWEHox<>>Jwa0OWRD9Wdes(a$h`(jzhWWy8k#1K82H$twyy|Uoo61ea#IBw=Ms4
zJxt_@0gcAN5kiBQn7CV{01AJ`!g4%7$XHfhp8NIfIIxd{XI7|H&&AAqG*Wv2__B7q
z5y$gU34HwUZ|S0v)x1XCQJ{I_qc$XS`1tWF)A{cXs#qp;OjV8BSU0dQgP8aU+d}Hb
z9e|P+Xjf|Ly*LFv91z2m3?>+|S-4Blza9rG&OH~t>*|)q?{1_k5NiKD>LCTM-RN>p
zEWM05NSz1jOM0bwg+@@C_a3YcAk2ce*7u?1S!wf)8X6iP<1LQgc`k1(AEt%jZyS!7
z8=5HAi7xP3-d{FuYT9yebK`3pnD@LygM<+J=apqq6f3WIX%I2fw_%4;sEgWz2m}yC
z<zYBwQytaS)fE*rE_Xr9)>S24%sEEwLnl!9P?d?0p|}(80a}xenb|!dK-bk&EkESR
z>oUhpRf#WY{0XST?RxitIj|al6e?&P9*q<?1}%r2^K1_%bKfagocSDCe$eFUp52JD
z_G(%SYXYnyO2g%*NSozu*R4t$OG}TXb4LlFT9E;)jN_3xf)@%-VIgMKsI%G}H$z6x
z{^7Db-M!?p(%o%qX`5%Nb68h2H2m}ZwE;c3QS2~6AK3jfrHFcLg4wF0$U$y9nwHA5
zHAdc}9$0>X_cFptLGrAF%Ij+Z22h?5RxMGJAHZCpSmTbBlH1Tg?%nL?Imt>Kg&DKE
z$wVXB;J)g5Vw`8W&@6mtZ?Np0*w@#mB2bxAk|WM0qqYblTyC|e3B3e?dq_a5{k(zW
zvx7ZU96JxYO#cww@;rC!E<%Xj%gZZGArU#BzU$sI&Wyc0RK{U$o~QjrR&8%%qL`Ik
z`#Jhi7Dv4y7b~~iZ#r}YIqSB)zOZ*jgZRc(N!w7S92%+;t>yWrPBgzs;xtoIPQ1!t
z^mI;Vd`Zgt(0<N)EP03MmT@@CTukA|BiYVdD!-V3K`x?M`iRG2?Ex7&f<0SK>80?B
z8$5|JJfg@q@ZOL8ajlMU3Z?OWpgE<LOXw7Zhpbi5$3~>d#B&-&9oWn@6h65%_qY{<
zM#2H>%I~}rrCb9;CONot3AL`llKUc~fS%+8P}Z~VQTG|jjSgO#kM!hQHow9RSg)`P
zPJ1oO@3i&)&ML5@L`7ZEVZ%4%NAA!y#!@w1$|{x_ALRkR3K;!#(}GxoQ8iNK*v@|x
zD-vS0ma%H&ePt&aTK4;LFSIz^dcO<SJG;Acet^ovp8^^0JxT%fHin&@9U`KbEr%=h
zL%+xAf_JTd+wMc^_HZh0lYUz8JVJwm4O$xwCe53c>7k3rRk<S)rx%6I&B8ZuhHurQ
zQO64H>U1X)9Itk{Dp_539&Sz}n_$o#N<G|+cy9c!z1S7E^;kb-Wo8fINhJlTO^ie)
zrsQWHGOF!AW7v9g6YM^|d4eu~F8tIp-4)L?B;Gn6K^1utzJ0e`){A}8zpg>SRt2kV
zsL06Z`z*xaX)vEl0cDBJEwP-G9%KH@ucxMlMGmU?A6bvzduS)rYGh^$1M^KlzYQIy
z+d{L~n2f?7X|o5oZi1U`AQXJ?^JkPM<47?S=2kjVTU%RgGkd;(Hv4ktP6Y0kFVUiN
zc(+aW7Tba=Dmd0#+<yuyWi=V->Am@Z)7_`|R1jo{&;-L%Z?*x#tUsBbR$@c);N%2E
z0Y=F7f2M3ZJT0|2`;_m1E1vCuI;Q%n+tbq0BDL{Mg6(Qi>h6{<ueAT8n|yuYPlmcE
z<J-F?$38{Bm&Y<$WTXT&^R<KzpS<wRU-Z6lc+W3Ovi<=-Kfm+F=$E(h5^{QFo~SAy
zr?o<qi6At=jtNZqms{noqSt?xLA^3Btlqx$0r0Sn>A~J!t?LptCkkPbwu&z`T)5O8
z4zXW31fn(U`;^kf->3tW^rbED>6Db0m8DsP8MKF_Lak$$lf1>42jV#Gm%CMBh+;bA
z$cbZOnoi~_<{I7c$p@iXD=~dqz!Vh-!a8OeT+4wOnt)a|jz@vxmHyytJy`aEP-Xgb
z0=mubU^-raNEb_U*9XU6M8_myeuYDr&(9gVU0BcE9_lz<fwkr#MEGoZn*0ej7WR#!
zA9RoB8O<iMKT_(WuzXTz_%h4#d+F!<p9ZWae?&)hn|2O&6~$4uwB7=zuDyNNNXAXc
z>2}DHdsq-s+@#9^JR+bKEYhuY0|%=}l3r9;{@93-BZpw7i{XRsRh_spuM|Sc6Wr|F
z**qFqueiCx)1X0>^jKNyvCnlS+vKrkfUp8sUs;Km<R_z=Cu`p1O;hFr<jqYhWNqV3
zhJ!y0gW>0`tt)zu)!=PsU(SqMxV@DS5xF#`T2<}L!qhv`bho0pAw$>%olWdQ|GPaO
zr68a^Tw|jUT$;JVY{al3qRU-V`Gd+WqKldAJhe3&Kiwv!;5XRu6#QJ5+8x(h1l^Cx
z!4}omr-RTu@$pUe6Lj5u<+nIZ#%(R_s>P8;C=#CR#kYDge|hENM$4jrkW8z}lD-Rz
zRio@QJ2}?X#U&#nqxbT{zUqX{zW{joydE7#Z9qZr<JJ%Mw<0iMdSNR=Q}Jut7q{+$
zU<8no#Q)*+<2k*O709Z?3&Y#wzA&<|AR{J5AsT8&pGF4;2C{yKT$Y0{4)8od$2e2!
zS)U9yeI*i9M;k%~H{OoxkZS?ihY-vfb@EFYzv3PWX<*ZMImqF&(qs71QFw&N;yL}r
z#T+#mF>O}&xhIe7@}Gexd*$Cmy?95m^XYCqw8O0I&@j@=s#e8R2EQ9^r0tbrGi&h!
zUb+PM$Gw5*e2~fWWPdl+gMyvCoHyCa?P9WYZ>e2!=Nbwf4pC0Vo~<Pi&%GB=&hPEb
zZrpDe*%;9RWY7@T{r7CxK-6_<b%CPlCd8-UViFWY5B~JUjZbUXt2lvtHS3<9=7$R~
zG`X+hB|3ZU?}<ebnqZ}n$}fn)pD!*!U0hL0>hY10nQ3LUwV9QbvymM?LzG38m2UaM
z9$5a!i+w7ov(L74%8gmUvF=OslwDIFDu0JOqgbl+CDCs?s!>$C^ub6ebJQ<}L)K`N
zT)<|`KV8<7RmC;F^*%k|{^S=RC3(Xdm+~NXfV;D|pysX{kkbM)OEGZPSz0ooF&aP%
zvhKLfmJk`K<l)hFbY0W=v?LXTeMAYWdiq=EKS9@J<%c>v6IR5W4pDbeMgR+5b}SHz
zNz=xH)^4z8aIi#vL-X04JFb(pO0-}xIggg&zY6pPJ$*{uuC7~F#TDq~<es+pBFjk!
zg4gI$-?ytP9esAP&fz{%c3v1Kd#cZJVnSU>GDmy3$h<=H<;$1U21b!82jg<bX(y0#
zdB&$KPVWz@8;Qj(pl{>l<6S@2f8y}AYxMxaL{$~^(7A30M3)@aXaJoN2+w;0+QLuQ
zZUE;gee#OYEo^K>CE%`%hzfbaJKW#2sNVyYmj}0RF3~CrL`}}jc$`te9JVGw+)|?3
z1znD8VqFxDs;ajgyuW`(CB*B?V5-6#ZLIwzaRT?Y9>yK#eK9>h30hL;hu`(`3+IzE
zsa(yS3mn(-f!kIyKQ@HnI+^KEqGj)72&`ypBi`YV@f$F#mBMg!Sfawbq7|Hi1Es+!
zmRcRlZvl=fqD=qxx0+@n17cwcJ=(l_LaD_!sm=f==4PkqYZ<Ro(7L3ZP`U4Rv1XTI
zgTy=hfIl|yE^7oa(}2!b79i_t9~){NW_tODKK;v(L3@?iv}&Cpz&_-X&Bs4;XrB0*
zjZ}g57*h-v4JW5BkMc2;`~?({)O>t=&jn`SuFW&9_A2*ad5OL__*+x82f((cXub#z
z)B~qsT}gpJQ`>~ukdmMXa-rWz<hP+rq_M%+M3!YaA*VR?TUuG+=TrUtn2R&}Le0uJ
zu5C2%C@5I_6@sQgXlfh@E67nR#<T?!ONYn^fxa804j^Zm0K!h8AK4s2hmGfC=VYJ1
z^aJ`81OfEmy|=WqeE#73le-}xrD<|ajUSj`j}>F9{l*>FG7H#lb<yC3Dsx<s8O@Ah
z&egb#bvWuLiD?%8DFm_TbBBi0<VEikN+_-+XT@s6jeMh?;u#IDh7Te60FyU|RKX6s
zbUaWFf4)$0<{l%&D~3{*VoB~d3K|7Tccl-CsoeQQGUPIZ14A86fV`2j`PJmh(_i>(
zQexrcrAC`o_hD8U>i~iYHy+R}`Iy>|yy*^`a{r<6<Cj>-_t*BSva<ak_XEHvYA=z(
zw#a&9li0PhM1Jq?snnZ2z$kU8UAd9yJda*m3a2*{uxJkv_Qk2TnAdgFT3<IaXb(d>
z>}ZR6Kz4J!QNP+^|70!kVd1ofxc#MZ4AFR16<&LLni%rW^0NGkgaq<fEusB#kRA3l
zFjc2+ioNcQ%vI&Ti@mhhlk^~GH^Wa&p;t-$3kX6|P{>OmwVB<oEH`QDQ!WR<`EeYV
z@pc6(Axq`Q5{gFCD!EwI6{qO-Zrs|B2h~GqEcKfNMMDE8<kO|gBjYTopEMM=R~n0i
zSpSa&G%0ODP9^nws4P!+PP_ZQIlud^=IxuFUKvd&GG#7Sk@p-N3)0P{hW-%=&RYhh
z-|yeQ89q3Iunyd+*B69X&di#QO)w<($+<R5jM?m2tsGJpOm2OL-;F0iJhuB+sQqq`
z#me-{-EonX=&}#X5M+Ns-qXnZg%@v!T>a%|L*#Yte(<Oz6=;ihJtAoNT}`z%5Vtm;
zZ9jPD);yt8j!6JJc)pKc#m3-LCDoU@cS-t>UB`AHU~9QLY!{Sa!vnALgg~Jj!Xkeg
z4ItbxN08zHU@lq9kNHgZiWW_;KQ6lpPR=r)bo!6(@ZDQJSCZm;!x-e3{{$PpMdyYb
z9vitl6V}Hn7+=bFmJDLRzWw{jD?lTl!}si;TxtBQ1N$P6$0p`0Y$nEMW)g-}!2v*O
zQ05QdL8VmX#(YbS=IT}}tFde7$=B{}$h-6VG+RM`!dEkV&C`BBLiAlvK;NiCv{O0?
zA^@X){Tv+8_KD$haHz%bC=9SaH?Z;U?Vi}%I{vO%1V?lD`1;^e2zgxGw7beEEatTK
z=71U<N$S6n^SYySBwmw6z20XJyWsqz-iaVXn2|_3vQ<};>@A1X_F)4?H{~t>RI-V$
z_>$sRv$P(Z<_g98LAbddq9yX1Cb!`n!F4j{=NB)t;+Xm1>+wYd|0nGz4jBgWIy<_>
z>I67@Eb@E({)Cnj56r@Ya=DTzH0yU7{Wa+S<yT;>MI56)pV|G=DkWgJt|8Kx>>3oq
zUU{PWdoZ|q<O9L#HuMM(T_HsZhbUy={LA+O|0w;G4Tn)j&4_C;5({=;w0Zw{SlDXv
zVAc<Q!7a6&kY9gP(xg+b9CN`11nd@2od3@zG$#|ReUv&(`;0zQ;sw)zTkc!dSzW-O
zwW(EAlZ_?kmVrA9^E`%&B+?2rxyAmar9Wwk%1P7`>A#{Tp0ZQlGYb6q;|smL$GK~j
zdEK9GJa|*$lR^%vLC5vV#H4GXt6XHCQUAmVV3r{>mh-h4MyNH@<yCf67c?){77CNm
zf7Iu#PFsFhi5|Mz9mxWs!mRX*`9ztmBM1!}%J;ncjQYahf?NRkSM~D7pdn5wc)wO9
zvTMz}&YA7V!hkMecdHH1P7`-`&DhJJa73itFkA7q&^OBDs2^VwWQ$J?^9+^^O_ohf
z)(uUz7YB`9s0gIW!QvKPJVWlv?f37eO@$g@^+rhCw)jRAW0UQ4|0|&vt)K2R(S;(Q
z6_Wc4J>8v4>?*QTV&6hFCG|^qp2&K5A-kaEL>+ztMqpro*P9!x?Dv$3u<~VxCB;ev
zXo7XEhVXx_(dg`B4oNK3)Rxl!2@~FkJq|>Wvo+^^&_C;Vxd*5S?F5~B_d^YpS_Pi*
zOF(dO?=CHV00{d(ZN#U%rLUSR_T(iRv-@S+w?jg4j;YkolJtiv<U9ML<woQnaB8ve
z<>giOU2JwPE>ID>U<874jYzrnaozX7yBai@{k?&@v@`rFu@G#DrH+U6VV^f^YIa?E
zO9?uhx2EX5wx>!hxEq~zjG^vpl@<d@1lh8RoW#T?D`P*G#s(*Ks;~P}1q2A*c5P`2
zxJQvyV4Sa7C?L4`I&O0U_Nlg(R|W`oW?`pnzmkM~0}D>=D?QE-2eG6amYvE!@gXc^
z5dDa<%shM@P#7QY@S7S~poYW4od6a%hN6;=r7uv*?jPH%HpImz7nlNP)T_)D1Cxkn
z;u8vm(^`D0*LI)~`KzuVtO)66fZ)`0%PkY$zIh0c)pEPwvTb8y;~_a}>T3rZ>gDD%
zN=gCuHYP^1AENk5V990XAR)|Vw(fp<?Z7Hb-^65K^g6$@B^B?7+e%ByRCT+%yI7Z5
zx%BkC@u>{RiScpkpFXVr&EijL-bp@esR7?g_9yE_-UM6g)DP!d5W6|1sx`VL@qI3z
z7r3;V8ixT@C;y3dts4Nv5Xxn{J;n5%=Y0`2U|S0?28YC`6=-`djn5|5pMYcKdOnxc
z$I!|q#`COiZ*n6mtY<ZcA1|MiQzV8Z@}T?ck)<@i2M_VuXHo$s3|g({^Klhm&-JvK
z!T~*k4D;pQDgz^<1;f^G<+L2+Qqpx|0hP+Jxv=n_S-bw>=>R+)9J!urIE5O4tE)ex
z-$uBn81=+dj1Tm98AyRRdJ&Y<(NtmeToOZWJKFQ1<c9SH3X*rRBnRI;GdigrX;p*5
z?DzI7l}uRfQL-sx204$-${bNe^*{0PsRX;Y#N&B9k9~UUlQ>aJ2gJqNbsmW?GkQWp
zL+NcKP+k3sd=ASSmAK(pC|=1h+U>E=-_kSU)875uNd+jOk%jxwhRleAi&=dIp{J+k
z)WO}@qMd1&>E!Oih=C9LT1u1a-o61$8t09@*05Ke*xQs8rCe6iuO;a`;K&AktG=oG
zVB_4!k#A{hTW-xQ2f+Vf<-Oac!ZaXDQNZDp$I5oj<Y1X!X3+Wcw2NK%<Sk~pB6|G8
zT|%!N2m0;oWLT}!(s7IxKX@una%@FJ{5_hkT`ldE_~_6q_-HSgII)i1k+OgKTdNN$
zsq#4~50}Rt-s`b11jfT6TGa3eflfxs1OMmw;gEzQgh{fjJ1oH2AUWCV0<(n}fuK)k
zvy(lf9WmOKd}}+2LXCCExk}$f7I2E-xlawiJL)G$UR%n`%YV(-yR+0`XkrphF7yXv
z_NQtDeFU@RmHx$=4uAFK?g$%$!m#G8xJ*;0j$<od?Bl-P&I^Txm{f0lq>!i0d=ofP
zPR(2&gv<OMNV-oxXfod<$f#CWT3!ut-sx=?eut>3kQm9r!}}j$Zy6U=_l66jC@2Uh
z-Ka<msid?>Nq4t&cMhcp2nZ<M-6`FnNaxVq-7z!+XQ9vkci#8YnNO$;Zuac8)_q_1
z6`?>*n^rl|KLM9%zFN!?P`#6LATcxBK%uCs(DZXp`5xRs6qLEG@#=LjrF1{pYmFWN
zY8YIhP*Q%l_wib<?g5pR#^s>ApDceIbmbt;*-E2O<Dz3|-wV6s53qfY^6J6m!zAPI
z=*<NkHKxUQQ)7Ubc2{~sLj&+6JJ}r%OUinBc+?jB@1c0<0M=}r%u}E(1iGE9$G2<u
z!0~xX#uLafo4tFSyIv7>>&ZXg*Jtp%1{U0W5x+F&yvy@5#jn&(o$~&tAGLn9j=s3-
z!1&Sp5_OnA_Ow42W<Zo>IM4iW0+gGHw-*h7m2!bhn}<(A!s9Wq0AOn!zIv30v%8b!
zXFU6jvKG>A7T9eUtR|kXX0x-hMtjvMyee(IrpNAuQ3zaaWN>x!yNHeiUs>QN4(kh{
zAeyen10&`>rnaxH8lr!bzT1~`J->xWJ2;dP4F<hJW>BJdY$1x9j5_z2*JY8nu|KBy
zcWWz=+&UQcT)GV7pNhP|(R9_DZ#qA(0pUoqb#58J($LS(k86?(PDk5WGN1bC-uyuc
z#`f^=u=CzTa$@30?|9g=`Ra!2YF&emA9Kqx?a;D>3szU;EL)>3fgB}rWd(pD!S>%k
zSd#o$JlmxbND+*SjID9(dKvVGRzTcOHkmj3HT#=4X*!5Y5O)gfZv5i;etPT59n7BY
z@&J4Tn}R?RMmf4OZnFTaC?zB%sW6=PhECvl5x6l53G<%yvFXB7ZXt83zWyPAA*6a!
z`;wi?sAtVP#h*`~^}8<$R@T=ar(69=EuPRb5Q8Xr_lTJ7OHY<v2+)1|_RZ17#biGC
zNt&xFWFj-n=lvis`Ps}0z$De%_pSW-({#3O7mPn~$?u6KNfHcH<E@(ke7yOv#L1Fo
zw`zA9AScPsXk25ME<i(exi`zRJzhleTJQT53V`Ot<PpnaY0sW5TBw#Rxl%yKt!D);
zUHj`5=fUq`fJ^pnvzu#j5}r;N%is6O7j<|IMBK@CtWVnz^kfFJvJ9cZw>|ItEJXoZ
zX|%H^SpKM1kxN_Z!nupnvBGAq#!K(^hPWP?;#HXg3kJrwf1mi1Cn06!tg+)-PDwXi
z;26Eg9XuM~Rme*=;lpxq$@X}(k-n4;OjZc+@n4r@$9rHNtcWiIV{|&j*zoXPnau3$
zM|38b+u(k$?vlBl@$*=in{O>G9nrE?)YQbj#1W-J^JQfbzV*trS5e7snNZWWV6gz~
zq>$-E&;rKBZpe>EWS4jEBdiBg^@Yz_#dUp5WK%dSC%#f+l1_|Q@B08b{wa`noEA!C
zu(^#D5D*dll2QB|-$<dHakdK5$Cc;qyWL!KAu38Mvu4)f90;fwcP1MpjYWdA=iScu
zR8^}@2825j6_&mw0-SMYz8cz5+z5IC63*iJdXsAS5IR9W<Had-s=8`-O1IWN@Fic+
zF&_E7QCjQXu0AVZo4n0oh0k>E(c<$fk~90sftaQ-jN}bFJM?f#MBR7bHwq?kZk3?y
zfcuYUKcpt_1sc9htp-Sz|H>=04>&~DsB-CozM{95*TG4c-lvh+Cy`6WB`mL(dhkJ}
zXl6xTpt#3-Qe9nmkJ#e6wS@`I(?`IjqWhGWZm4b4?^8S;#o2FxR3UTomw$KkZ^6MG
zNz*a0<4;Qb-BIYFm_NG%D8={VPJeJIaC74jkPsXl{5sJ0%|d5nEFvtTwUqW3y1+=p
z9i5n*Y-?+;8?}pI2nh*vvbBxO-*LUwc`Xef!t<6-n|<*YK+fau&s*34QxoebQ>H~J
zFRL1Zdj@Le)~H7|wz2UshP+=bPMQWO<Pfdkk3|$-S{x_4;-5ZMLlCaFiv~d&c-bVk
zT8AC+qXin(W>>Rk0_`0gx{dbgWnY<ICcd>RR0U2aQ<d}O(3~Jj;PVfdB<=X|aS1&(
zt4n?k0OU;<lF(nQw1@#z0gI0xu}@dtkgbEk9ViSW{DVmxQ>DL>FuY-<x9I5Ym4dyo
zV-R>A`h>I5-BJB?`v_DMny1HD=2)o}6S0I{^;Ol?Ii@Puh;ZP-eX>38y)}&kahfmo
z3>e_QN(4(ICo5ZlU;W6qcAsnGDMILLkn7GK?7&Tl@b7K*uNU+EdLXwJ)d5v^`Ms5=
zMW^IV@$+bP@!6sgB853fN3~ezhve<j-aMVStZZe~vxiT@$o&+ui+#_d<%6)si?4zk
zmz6ey%*@7?J_x;FDmvL49v>ZzqMmbyqOEE})*+4X!(};oivn^!VNav&(Sq?JXc%}T
zVQfZtLhs4F;D<D*SbH&M2WuhQp!KtNcE+#fQU*jH*nuaX*LCOIuO`iEayByHAqs36
z<5S;mZH@NW$hyTmo0o4eJyehwlAz#jYPv^NDkLOi>fSl1&->=09U|EPJd`5cn!I++
z?d`*X2fLJ?5bEjhn?viFa{%hlg(6YKp<)o5o0_Us7n=-c_pNX`5|$S${SON`T)F@Q
zgV_c<-)xXa#cMaT5=_v~x@7vrzGvV2wXbv7`=#pnWcSUXhjzaDvvp?`z<+~-1BlwH
zrGS=N%iE$`iIS3%J2_(BJz>%3vs*W-_YrIdxS2Waj%iQci|p*}ea-Pke|QZfczQs$
zcp^`-;`e1!1j~omF`i&7Eicht;*o8=Xq{LtJaEVfnQL-7ZZxA9Wb>2{2qXN}((^q&
zJ~BRhV{h&*qrhkCQ?YaoHC1*NHESv(UqAckENY=4mmiuokIUv%E&bII9B!y1&F)69
z^hv0L+~2>H84s&`w%lakds^%5jS0@`q_LE@_sz8*sBC$hmqq|+79J6<Q~?I$-iV{=
zeG1R(yx&<`8a#H_6aFE$$<3}tE4if<-fWu1exElf8qPKw2Ku#Y8V*yWCGou(YtOD)
zK6!%J2Y$x`pI$maL6`9&?M9c|7v|-m37W#fZ~Z)o8%sci5yqc*GMa8<nvvq!v~XUU
zVTrZ!FvT1H>C<<9@buoT#)apbLNVW;x||PwQp_2k5OAv!A2trZN;jIRa~d9K=GvW(
zvfzY#;qlzclzJ%fyxJ5No~~Q<&`3;gv|AwI0x-Jleety$Yz4i9a4*M7=6$4@=fU}{
z(|8%f6s@dTv)}+MaHmkGG=oAWttS8{C9`2W&LM`wYSMY}T0L&;X6k3CLg6~I4xjg;
z#KP`$8S)5(fP_Rc0dP`MXxWrqk*I)Z^mKpPVQoevD4G*-#;INY7P|LxH!~umXUV21
zyx8q#MxFB0!pi1xMfJsMoW5TQPZYD-K{Kd}LGkT*Hs=esT5MWR)x<^0c}2rvHr3re
z)-^MOz5E`m&k^3sE8taaWU)O_p}rltaz0Y=3MJnshnajqm8ojEONuVPC87ib=tNNS
zOFQq(Kp>Ts<yK>v5Jhr6(Z;VqU!Tq%ahm_>40!S4MOr!>Q8z!{mwds2tnuv8gUD9H
z9Efy$M1*vpM5Tp%e#nqx_Y&V|k!R@vefQ^L?Q)GFab*#7mM;BDsK}=D#az|QJOO1t
zQCSA3xB+TebghG${RZfNFFg36%oS)AB)Achp;c^k{Pytkyo=iev1duWbVp)7M_Kt{
z4QQal!`+IBjI_1+KF2ef6PuWK-w##pb9gT(q%332pJx|RXThmj!^CsXXCSTLHqNp#
zN~$9q$P^VNaTFDizkLHte7W+VAT$RN${OSLHhvQwBYKsa<GtQIg@^X*uJ758?Tvzr
zznE(*NHW7-w{@9iMXp31M{b7a`CWNCiE)!JlUqf9%`48RVjqPuXLQ|sIF(pz%qFg+
zq(HDpyyWak>*?y!e=Ao-a;NI!GIvz?m@Wk`u*56M&=uuXh|I>wCwmlvJ{s~tY+U4H
zw|QBsR@Y$HI_79VvEZM!CcRjKJ4$Q|eeuw9HDb(ThVpRJMqWE%eSNbZacSnAq^Gcw
zi;IUf=;zA7wxjF1!2_k6=<zoY2s7J!EBQ|#VE)E01NfawJi^fjHm5y4_=rn5qps!%
z_7!1fkeMBq^q=<j*9T~IZp+-r3czl>6a0q&y4X$EE8GOax!mV-qf2ID7jA9=VWiG>
zc0gj2KcaAvJ;{NNhHhZ6EKIbZDkja3`X4gkC_{%__!HUj;*r`6R1D-~fAIq;2ekFX
zSZ9BGDzL4{L_RFqB7a?&i(b)<IjAv9Q<(lAJmwSMqFN`coY`aGi2t~m#r%k?<?qEH
zrDDql|H*%aq(VNBAL{5<HtnI^`iH$h<zM@cbWnDXKNY9Ok6hS*%vPOPQiETX_1_!W
zb)06n3UV^F)NT}N<t}a>;WhdM`-e3Ace#V?d`@_5fsRp&klf%FwKVsWt=(Cd!S*o~
zt3D92!2blJ{`TOoZ(5M#_NL@V3}*&9Fif@r&UgPnqFizIp<p#DB!*uvv__xjdY;sM
zXcq89QAB`RANe{VJ3G@h?|L`fCZ7FpYo>H}u@&|9!UZQ~;6J2J=N>c7tC5$6;i1-U
ziRO6)=-6Ori;6|DJ(R~My)#j1b5YX6pUfK5v5YvF9RdUvS}iI80YFrkrSRkhEM1<<
zwqO7t08_(xbzqrnJBA9ZH~=4OXS5zmWCX;h3^X-D8%VCM&zA>;P_R<*=G|PTz^Eqx
zi$rSJfj=oGA)(y(gigF1VDY*h7s}gXRvGCpV?2&e5LaiWF_|QQOG%B4WP=2R8)7t^
ztgH?OIEu)~ly?u7xtzSbppLbSv$L_s40_trS(AeNATA;6Uq3yx`{^6qTsb%_Z%vZx
z>!H5>7}Vb=_&`lc;iWN_t?Xd54FVZ7)zxXJs9_p_P`0<{B>IFTGBOh0Jg{D0>n26W
zIRyfb&+zD%mzPU)>$es*?v7JKL*ba>S?%qb$;oLN8Y-vlF@vt95-N<Li@lTr6$&2r
zl^$k%_};KdTlXlSK!lqm-UG05NQf_V*8lKuKv4nv*uXwGIQVbnF6hzpsb%6zvEUV|
zBPd=H<AaV5=oaT5YA_b<ZFxFb-!HycM^eO<*c|(>tpZn8SJ$nyF_@>=e1qKnji_3G
zxtV}DSyoC)@66%CrWrUd<Kp9ElCl|YhL?cANifYV_nNJ{hl~Of$pE>Fl~&XJogYB*
z1hD4687rEen409`;sHkHv}Uzlz98nXwV9(3i~^=>4WRb+3aq*UaqUD%uCtR9+#1tU
z0lW=K@!_#aNuTaamQ&YY^Yc4}-zrA_1YlXKPjgRAalMv%IO;gQVR3G`5bup?D=#lE
zDvCmRIYa;oPP7O2<Ip0jvYvC%vu<~$`9e>3KBDK@19NCfZih<tzs2}N&6^$d2|yt+
zTl(#H42Iu9--1Bu#X6u>?gDGa-yolUFep6w|KF=fz>YEo<;0hf4yH0@N-9GT!Rz{W
zJJtv$++}h$L*Fd#HHMp>)oAZe@e+MrEfNOp2Gi}azV7JktnBE>NHukJMf@0JGE&ly
z1|Q9qx>tjNGs1C>Y%6e#@IYKv60w@ZL`Un?xeB_^)=bm@_58%NFBJnQ&5>ML2iw@s
z>M$T@cS5aqR!6*ah2q01n`T`#6ly%~%o#W=<X@C<Hd6jX(Z>MRH%eFsNL+Ti+Rck$
z3QV5?gQ=RD2`>byR;>p}Y~o`UDDk|)Bw$uT^P%8F%X(lR5Sm12H&gFCtLuDvI)q0{
z#;3nz2#P@zBptC(8K<RXFaWvh`InYcc(`ldq~ejyAwQ|?|NSuK>ij&h*>!bf^BDNA
z&efZ6YRX*bfc&*DU*5(yxv!$FuHfJ-XQ?vKcBZ^RATEvxlHWS*O#~_ewfBc&-mNGx
z?Sa~3eg|h~eWV2^Lv!;_nh3DlnCJZd?7_;4j#BY^n3DtlOk9N}nN=3}6F(FcdD!Me
zhgYOqs(;#B9XGX$*km1(;G^2W`)F(&9TTIfpzzx?bf}q&YjUU>RdQo<6G)F(kPf(y
zPHe8&cJ7Hb0zGW5-?;~f3{RLtuj_A6P$|4#pN&(bkLfyjh@T%9L$An2sWf_DS0B<@
za3P=SM8(6C08<eatt%4&^8+0N6cqoza|CmmOA=}CJfcB~z9*kgxLdT>z&!%561E2|
zf4@LF5PgT#J4)}4{QBRYe?CRJ>lp6LM(*AF@9!F({olV747+DN2Movm1LalmSz5Fj
z>jv)qJKK;%<xvRrlRvs*{(EZ+y$DCcsG=s(y}S7yc#YUMNZiUx1w(!22fq^j?`^r#
zY?v}9vH6ZWB7f&q;2X`QMnB8($zRhO5^B%Q2mSo-e8~TBmX>9TyHU2FN?ZAm%=*#d
zf7h7XHf&|Ca<6FwUpOt_^0gM@B7MnGZ^4_oqpM+)1r9wVpBU5sm*^-aNUT&hYoX+F
zS(|HU00^TW$MmTxYMkSJSqC?zfdP<$1w3x8VwjQ$F=}h-1}zqRyg)4NrN<4yn>TOn
zmRZ9u+|c`sk+qC!w2%G$xSRFQqdxt6?>wV+p$MElL`ApG@!8!Sw&55J6AZ_6^OG>4
z8)j4N9v)tjzvG5v6Y`l0SMO=Z(QU&TdD#C>i%Gtfh#QHxpi4^Ej@lI{cFeZ40E*5!
zY<Vy-(UJ}<9qX}?7|1}XsIY%Wd;3r6k&^kr_V)gkcNxHW(H4BPKIZog6fcvQpT-iC
zBn(>W=*W2KSc{69dwDSdwgw8Oq2rhMsagxHzZXWg`&l-wqJ);51E0{%ea!o4MPAg{
zxD^Fs+ik4bTR=@=*;+33XT=w4H1yyJY?rXQsw(G!-zoU`E3C_R!FLN$A~A215@#<w
zd_RA_URiOq`_qH-NQxG_s@#Q%j^S&VciPDZG=6DfR_^rHY;Y?UlrtlC3c&xzhCMh?
z0k8P{`L|dY1x!86F;a?aaY#Y`qBd-!StgW8UVgEwOT46;b`Wg2Pyb&s9=;4pZp%Aq
zrH%-9{VfM8D<utQPOW$F<p~KP`h!iP&7tZ?(6J&}E`5n-B*a7tKYp})9auLpG}hCD
zAo-{glOROJ#9q<R&=v@Bfk=tfUDYcwoXkhH7URX>tczkQRP5;M>I#HCG}o;={6Q&(
z0N%l{jE=#InCfaUZMnObqv9s_UMG#sG&<04xqZpYi%Ze<xx-ztF9qg(2AU>%ZrztY
zfiSGzk+Bz9fC?_%$5>>wv%8Z-nz;40-hD8b8aRFR^)luG4f}zy0hC{HkCTQ*(n&i1
zdw4jYC#q<_u@!%TbL-O;WKuC&rd)td!0gBG-mq8_^2udyZ?1g2Z8S=|!nG?L)FXzD
z`bR6(UVyO6!}oEeb3U4RpuZoGO0y;bW7uU!E$c@ySk><slQ7;HF}z+QAso~_1gXs+
z@(-jM33!uJalsy=L$x$CG<0IXOI1Sy>}Sa-DIFu!DE|J`)NAe3)KpYdj&;!~F`5br
zS_%@kII}H<In3D|IgjZ{cs%(K4GmzDypx^|lJge&49v}CVmOT4`RRq+7C=x(Tx{&>
z>gsE5rAQjyD@q*qZxBZOzPj_HOQw&7ylmzfAovL|LqQbB?$^cE@Q8?{q@-q@ij9^}
zzGOTV%(S`1^9N*8E^nQVRz6=G-&L@=5bhqNVC?3mJ|MS-z$`wR>!_*GddAInet4dG
zOA_eLKZK6@{(o2i>r$p5h}$yJmbIX_z&X@QV<t;#ot)r`jaOG-OCY33h<uumkR)Pa
z=I8g2s;%w)n|N9V+SK2PJ5u@IW1mV!fse`3lFZZz{A$wgoALS>3xU$4w&Z=YAo$WL
z@d1C;cQ@BuhD)l_voF(g`Yg+AW}h!sB4jal=5J@K=M~_R<&IQmt&`=T$hv=DqjLm)
zbTn0SxKE=m3n1?|c0;ekF91UkP~kz`(}T|eFVcYMW?~Yc)G6Ga)H|Eyx?UHfEpqUV
z-{7I7YdATbzKd=O)Nc*wv0U}V%AT(yBP1d4-n;e-CF3dcYerOg^e4*RYSnIC1e=0n
zb~+H{*3yJPeMy-CzCnh_@@`8XfvF=U#>bPUJRL90^R9PJqAkRLUaGm9_23r)Zk;5v
zi3vf~D_&j(KFZmig3@Mh^fjaMimI#)P8xc8KK4MCx~!#p1*7TaN?eTWf%a_`by-mu
z;8~`A_J74A2`qKbJ#63AnA9EoF8Q6aZWObc_1M>$CH~;d#_M#4XcN2c8;|Ki3s`p&
z1XI(~`xCYF%mOw?nc_UodunxX&C^qD*h^GY%0s>H3}|*3e+WFFCwqwLqg4RB5eaya
z_Q}MtL_MQwjpzs^0;SD0aO#PF>%Er<S7{F=JG%fpnKDcDv%OisEUI+tQ3=Y;n;Ggh
zUn^9Hbammhhk@cueY$E_r9|BU-udGhrT;ueT|M-S9Psz=ZjsWEI>ClQ+QH^9%|No>
zCU6!A4yFP~u2~FIN{LoX#~2nm^g6O*cz9Ww=$7L+9Gv%D-1YKL6MjVhHZ6EA!2E{4
z9XQ2wweh`R(x7Dkqv|;%I8-*n<a%v&m3TXIT-NfngMF##%dPAsw7ehJPyzH1ONrUb
z$I>HT{6a%RF)=Yg-~Wx<pd$o?(Z}*xsF;~;o@|dl!FU3kk|+C<c$5lRJTJdt0FsIh
zm3#O#@B%|5aIPP^!c~uMKx6UQ_XK`o_TD&3yWSbZORWO$5;nxKtbphBAq~i(fBfW0
z<|MFF_C%bhT2^v7tX<cBYy%jiX?!$DZn0nbBQAh|Q{L@%-J1+Z#*h8p1G%H5r!#F~
z%<sVudR7J$6jxd_h{KIP#i`GyV3X|ZRC#g{{GUJ-!orxcSI{{0QNLGvR2d!*hXrfM
z;#|JT3DRJAroo{k&&9`=bYnj`H3i^<JnOOff!m?1p70lp;CH&(b(vQO!U3g1%P5e&
z3-l5yEKoobrAVQs<NOVJ7eXQ;5RB3Y>~6FB;$eOo-H5W_-^u(@O51>I7f~J&Vx_)L
zNkNf9uoQc@S11jFPf-;!Wq`B#r^HuiT5COQqmY*W^dWoC+}0DM19y;N@az#==Z3;%
zbr7ZA;|%1uO3zqHdSTW}{|0VGLmjEv(+2%!bP_m|-8OTD^?N6HYjuHjd1~sy-2^4C
zJJMxm0#+$Qwuue$q3XsUae&;P;aD6PSlSyj6vmS+SM~GfN5Z1tpWllnb=fpJU38BE
zvY?2ts0Y{`xVR+3)chl(=x=$Qw*Jb3=^E4Q;(xSE^!Bn)iC>`_=f3Nkn&dGt%Eo(+
z^#l-T>|%_UcXpnHo<KDEdy1x>4idzm9}o3pOQMM!{%pV;KKVGXNu{%lmkA?f7DGHA
z1!QHn^;s8ikuSPdIZh9`Y!BqdnUW0B=~b}MFhTr7rD2swu+Nt-U(Q`&DdC{zxWw2h
zUj-UUDyR44{J8Ua9??lwYug3Zy259V?}%s3H<#$r32||O)<`OjX{R8O2@uiL8{OG?
zBq@Y-bavf;f-?6VBb?gU2Rwg8MY{^&1yq+tR5Wes(^DY(>`tc4TsK7Xl+d9>_MWY=
zF|i_^df?V}rr(i}YALMbk*;T`d)HDM7}!o%*?@<;Ik;fE<r8wX)wCC2ImeMWf;5Zy
zeB}a{dC#zP>25;ra#z5=OqdjL*`JGhYo|~!R<u202R%!2p(+42sOzm^{O04ud|96%
zmD9lNu#yLdgk*Vj7o>N}!uHce<_90NDh>{K^sMy(A<cNUm8Qg7D5tf@y7eH?0^HT7
za+}h<NIcx5fni0bBw5(Y2BhYOLP$u=lGfH$B59RLNs251l0m1Z{eFIK$~*V_ptlcV
z%>Cx#{XXL&LP>bmwnc)0GhHy?vZ|<z33%TkTCwJPl%Tl8+(zBgk}+Oj1Thb+R`;hW
zk3neNq=>HP#cH;60`L{bfA;LndPEpx%%}%M@vQIdfg}?SFd5aXwk}pX6a%}L(thty
zmSnZ%<mF3l|CiIc-WPuMJ!q^g;5#bItLJ|%G6V8!{A`Wg@+ZXA-GYz{%%OSO8QCe-
zt?j%9Ni>X%IvP<*-JaT3y=I55O-qIREURJ!b5U~&Uh8ktQWzKyi8iOgm@$wJ6e|8%
zP?#5#8qflgu!xx0+KORbu9>y<=FZN|irs6)3w(8^WHCMi$Bx;IrY$sF*)myV6>S=J
zc4Zdg=m%MD=xAsw+s79k^z`(VeG(bMj-u{$K_os@iAhNj;o)q=pRhqy=kz~!i@)tr
zqq^cM(^j|kin69)l@#pT5!!XoBr!#2`P$(HiofV*$G#L-;dQ1E5>7zPn;B<r`SXVj
z0(n8b)|N4ds#>BYSBmd9x#OeumieB~_{6f<FI?oD%vX>eWW~MlsVSNIjp{YK$BI#-
z@`MQNOZrrKxFl$i-;RL+mI1h1J|tdl?|Pv)FZI#s6MErFqC&=N_zwKqrZ)S}A$GR5
z>8i(TMb`+;o3s6?ogGV~ZDZq1b+xI?Y}*<$3{U_I!59)AWD`zwP4*Rqns^BU6%P}S
zQW;R*z0>>1@S2H%K`%phSI&KSZY~)VoI#*a^WltLA=k@m_$g;av#uKc=@ZD#VH40T
z7i4*Oe>sj-0Gz@6{Ck&`=z=cDii#0Hr83^xlOs8<6XF@~*`(KnHSd|nfYLwE!_M(0
zOPT;L&l~>mj+ly#+|khprWWNDKdUO8UUP65{lOAX|L~TJi>dm$7-x5=`306xz2m4f
zlGJ~!O~tp5RNQ1@^Ja7}@v!`*dwU_Qzf3n8&C0iH+<3joOP9`4Uj1?q{=@2?B;aCx
z{Uz@nqed7Z*W$eQ7@bAh&*$@hMo3-mBe!fzU?Z=u8V^f~u#3_If#>c}C2I!y|7;NO
z!UVCqn+(x(*xT<fH(YClr~oh6G$|VmjeI~-mY4h9>^6KkG7=eGG$l``rcN380H3hH
z`w=QqOF=MA_N+psOd_ucb9T4m=$$!LLmeA%L6dXd8x8ydo)1vB{vN^(88aWQ!a+26
z?Up&hrz<s6sOE1Z1kCDkb4|CSL)c(VzC$|?tbmUBi?a_b5tQ?_ep$)MnB?OOPaown
zW@m3~AM-eE?QLxIj<5ih*U1)pMftF_i-h0CTMM|MQb<ibw8~<D9Zyu3Tu8{O$rWj8
z5%NoE5|DW!qN3WA1phC?a-lDK)4>N1^L^22tr&C4k00`(N1<-r6=uVqyyj|j%)T4~
zBD|qtCT!q%T{tYm<9Y*_d8S20g#<a<JCucdd(cKahaz=#-50LAvF?3aT<>(8FS@Nz
zBUulmgTgPkHCZgrYgCG+2QJR}vfb6xG~x(JIyz!7M7L&Zx;9E9e0`BQ3pIZ!5w#UK
zl6_J*l){sX_SzVPF%?_ySUNk8<wXPxr0`JPK98Wg+}fr9i3UJ&`zep*V!*DqrVAHY
zOhn{QdxKmfQ_%-ib4>CHx2+X<lm(D<Niv?9ck6TGiTZ?;aAALaY3sLL+xmd+1Js8U
z+#cuWk5}&ai0_t>)Y7^+(F!^rH#ba7w8(u=$(bzoJ~=s&?&~GA%Y3Cxj_XmcTyR=#
zt@9)DE5(6nQ91<VMm?a8=XakNXnvTrzw|LfvwAPp3~6Whk4yImQ8S{9jrSU&NO^fe
zF;uL*9wy)skmPyv)^L8#DlH9*NZZx>G7(-e66Jl<Yg!;Ew11ZE`GI1!E!ZU4pO51W
zhZ!uNOdHqMp`c*tW;aIW#$l%1LXxby&OAfcXM6}m&1~Lv>PV)NH1~e887(r)9{!F;
z3j|jzA<4FVD+TE|uOXBm<mRpe3*rT2z7`?iE`CQl1MYzml79IK>9+AOxdIikmy{_F
z=bGMl{CV5GmX)Ilxm9naHE=uaeVpxV>zv2Bi@@4Mx~a3wTd{ACqF)bqLN;5jdOJ9H
z#c5;e?72vl{-LIw$^7n0kQ$5~$&u(OaVU;(2~<fuJ-q_`@BIXJrO@s8kdP!tBnHY<
z5zR{?$Fr)SYzfJr6SgNlj0}auZtVQ_uKNh6i)d*4V43pta1I@JS-hs27x!7uFin_N
zlZTALTZgf`My{E&IG%r5F@-u^u$KSAQC~vhsM)(D^s8(87{Eh_Ufa4xWP9P33ZOMM
zo1Cd^whsN2H|XZzJT-eS*_!-?ocAXWC1r><n`@^j^L{(M>NSHpAKS{@9N)C5lYv3R
zZJ(~Cg@xECKBErx<;AGh1s~h%*E@3=VJ^$r*4E^J3J8umZtuO!%&XGCK(nx9#C1Y-
zSyfe6cXtDh>v88IUt3!n*y}=wuJGAq2#9kJb31L_eRt?~r(CSprW?Evq9CxtWq*d(
z>F8%>%Fl0razjE)T%>amBE@ohkk$w$L^hLUWF$zza~Z13A>Ku#?C#iPL1fdn`aQ~|
z_@W*iHUr5BPmg%;V*pjB&Y^=ku4wp9{5}UdGi|M{S5$2&JkX=lB8#Dv<wYTA5E?p<
z^VZtlA`xQgA`k~Pg%_VMPh@fZ1JCC6xX0$wg(W&Brc5N%W^k})1Q-#$SzPjC#hqZ4
z0P>C^<pfONtw2Py`2x!qi)=<(EEX&jpujNL&~v0J8i9WuibrX|t&mFLieU)=K*@_2
zzq<2B?T$CbwAqNql3GaUG;mCO*z3pMJ!7Vdh7`+4OS_Td3Eqo^D|qsG20adurVFVs
zG&2*qhbR32bv`sWL|<68p}~81%MT8B6i?D`?a)-yn5%Ou0ufh=>*P2z$}`wAse&0q
ztO8ChXEn|z3Z1P`erb<e&RdeM8uje#>@gLN@X<{&r@bME-@@_%>q|>7r_eM*s3*+g
z_%bCQE6&BuRnLF_e0`16fkpMI9g~FL`ABoWTyit1KlTJdWkC766-cU1XyJlk$(}UQ
z$)dpuis4x#-UrXWCS`Yn;6nBVl0+WpOMd=3)%|;LHwaJc9{CCOl0if`wqduVL=doO
zJ<N}4{xFx(=sOG@=4WGLYw*~#eDBdP)%tt=7*ah`E9v4c7Q>uUUG6e_ZDsmDEC6f<
zG((eK?#ni^adQP{E%1uSa+6RzeEi0f(<=n(lZYEqaGrA79(>){Ab`8Mjaj_jMTAX~
zMB#abRzx_8_-oI$x1SEX>B5*`C-;NW0h_Kp)H@+v%MUfprummadt+2mlDNJAnaL%5
zKAHQUXOnBhh#Jbd@_X3+PT0-*qI_8TJaE9w`zd$0pbR*IKm!EGv_NK^9{){7-k61B
zP2^)bElRz^`r4qr!OYB7lk2lCquBygrj_+|={WA?KZnRevqk__0xCS9^^+Qo)J(pb
zRK4lbw4M`=K?wq<#C`)O&$aqQw}7{Cd6_CxN(!sX;$T_^l`ogPBV)PyvCo($$E}E)
zYLHn`q19C7wiFJUOW^$x&~PalajRI0-`;DjKiiOg4BQ0(e@#3v&_sr!9=eWSANhF;
zldN9eHSYUUF{>)eQGPx~<ssKbcMKFPBBz~=Um0SjWmHM^aAJ1%_X$;GHd@UL<z_*}
zz#keSZ1@%w9Zk?P>ML?07^h&L{^q!MZjOmBSb^!dY<=W>Wj2@JxNrp|{Ts75W$tZl
zDK{%9$(93!vB!F2oRaI+*yx`>Wj?&mQ~O-z8GHM?GtIh-y<a161e%d9;ZdHU*v_Y+
zxZMiGDIvQ9$y|pQ*KLd%l@WUc&tX;C>tDa-Y>(gk>h})_0A+-S{v&a{zw1n~q40^V
zbVj*HsLLYSgLX?e$+JVtwtWHMe^I`Q`|aYYI{oX{k0fGZ>-?Um{Rqn+adBKC{J7(J
z))5><^09)C-;HzceOgstZJ8eTd#?|E=~%jY=gOD-nS42%z%wM^8J|{%?;N^cWjKEq
zu4RD#oXtdT>DDMjyx(?VclH(aW$mj=Dw<G=>-mN_%P%S6;qZL{i&rpau-|3+uC46k
z*HpGkL$>(6ESob|mi!dm+-gJU_8Ea2!&FPlcaC4S?>a7q+RDS#D+98?`L;elIk6D~
zyik)R>bGXucEo8(5Yf$tt&THWqc*P~wJ!UZK+8S&{R%*tPBXlOn901D>gAW5o4w8|
zD$(E=lzqj=*EcogznceSy?ah(^K-lZv<nL%N7;rxlSpd2n@y#qU4>Zdwe?VbD1Mdu
zYT4({_p4@r>7_4G%1Du>ZZ^OlTy8I*7#X3-{JI%0YNjf2_`KiJ(Y-&a(FoE3$y1ds
z16BFF<pH1DdwYZS2EnfX?QNI1!0Zg)=KA2G0Xq5-6<$L_!dH62(hkAJt^1Uen3~30
zHKQ1qXpu}mE*MNXudg*n3dRRvU2${lS89-^aIfXaCpiq;-{Mjv2!>3=w!2k9wqsXM
zkAve1d@vHQ)n;a9f-v%U835`~Tx`wKIFGYrkR?Frf+d^JWpT<Y{`gARbQ1x@U6E45
zbwrz+_bH3Ro@FDC@}^RG8tjsh?(ULFOG!n|KJr`}fr;BlUzx*X2a@@{j$XmHMuX#s
z{s~H25;Cdp>jf!)!R5y@KgHFWrGr4^d7eZC26pwTm%*5gK(a6C7K4lkNS0bzGp?_x
zfem~)uW?wH;rDpjtG{fCqUMWK0}dOwBDeWRcC#h17o3V16R+R0Q*j9h$STBoT<}uP
zxn-N@J_OOwztis<;n6N7Az<sExpZ8C$a~NnWP_7yMO6JEl>TX3Kv!2(cwI&H<YW-V
z2`S>`P@lG)Ow>`UySqE?EBd+b-L3EGhX$6qfAD$^Mv5BeoSa<1+gDxK`I)GhnBw!w
zsHG8eZZ0ZzcCg``u-0VWI@d)hR^3}_>1#ZdY@7b{k~P3w^&Q)qw)wEnk1U(~*5i6Y
z@bA=UAw+)n-p^`qtV<^-2;1)K*s4w7tWiPeXh+5sPmCYl|0PB-;9}>LL1;OeA|SbU
zWt1_Wn7A`tUA#M8FI3NzflCc`X4}GEYC<#4{uDk4gzXJG5vP|#0mtqnQcdoM3h3He
z^boy<nuhVZA*+VlA#eCIr&s)B<mBxe#BIRxmpL&h$~k&(urwhgqzFE2J^3T?)sM`X
zInj}#?OKNpZ_?vMP&n~H-Np;X->u02qIL82<rUBhTB}vR@A7|16cyn2UVXhAQ9(wU
z_$ubf#xzJwrDJAxxvKJx1wMhd-xCuHDZJHQZ3^x#FBg1Ns-2l34RYNy(${A<JF3S;
z0X)qY^sN7eYObtG<9sdc?d@Q!0&-f;j*oL{&NhdCuJs`U|B3g0xK6Lxi&I~Nrb$V}
zFRis*0e%JF!~vMw&&9s=l)kA(i{LR%DdL1!Jlqw#LO`K{25oa#s}bQkN*>j@ufDgn
z)f>*fiOkOC#{Hg?lXH1l`Mq$ov!E2TGlo^UawAw{-!*Ryv5D|xNOlKH3mg|)1SzK~
zb~{TSb{{B;Mh>WYM7?-<ZHBnSfINtbtgsxlUR0eguYNk5tk}fIQugtAX?CBmnN*jY
zLYs)+&_316>p0Mx!kb_*=Dju5#B2u&H7CIYGDe1(jXb+T;xYDBho#GN*`)g+7BNIr
zBjnM!xnJE+h~3>);34}%MXFi&FH=TOET4PkRMgk6|6E+QwAv-YRPqj`rZ%=KeG|T+
z`uw%^#GvG2YbAi-MMIJ&8r<le!MF#p*m{MV%ftQl-|W%m$*hSF8ClX)g_(glUC?k@
zSs4I)qr$_bhC#Io6yBSY<)}%ifFc9#8U2eFpYkBMf`M0sTQSjedqJdw>Ffxt@-0=4
z%c#8zQj+7(dH0>`+a&gSBlS&9H`eEuCWmQ;T&Byc=NtCc$6r2A#o%e*Z-lylk;P$G
z4!X^3%|~nfy94I@{H^$EM;HY-I6#28te)W!!*$>k1I0u6dS}aYLIvFv3db`Q9WR}p
z=-sKRZP%3p9sdOAuTOw}NW^U^H4!0(ThPP6=WeJ=$(#b&@2&CJB&Dk6<J~&l<z(Z6
zd}7J1fWtCSL6w`0dv;<$5E3G-S#7qzw+LzEW}nE}Uyw<H{^<}2@Z-y-zh7;mO~HD~
z$ioxx^QW8;az=6^svNHS)ta*3RdjN4mHVg-(DdATAIA*-a3emAEvBq6os2H4G#N;g
zgB57)>T|g}dPih8Db6RkEnaT|iZs{;8XDqPR+Y7OQsaS5OfuK@Fese_!h$MXY<C3o
zXe*tU&hPmnkET#Ef_tu5GKT=01(*zOfO<++_K>P5ai_4Izi)#vK~t^0o!8|ocf8!>
zw)Y!+>%;jS$c!|iQHSNz*wFCh{n}RL_NG}L*u;JxVa9>Upjaqrnq1#hcedGZb_g+h
zeiu^g%IZ4W1M1pZb+i~_lHix8pN~pIQJxU5t-K=6{+b>S>JV1t=dU@s26|T2;==19
zBc3#PYJ0(aQC*IY>@}-*J5gGo&Q@tH0|NqjD;t48$Z>sj1{j;|5_F1$%`O9D*0Yxl
z$8)`8(>KcJTBJluVzRo;o>%?2{qoL{Rh8cJm}t|4*0gS3H#3ie2I?JmPj<sWcuQ2B
z2Z#VH*16cueS-r%C4O!D-DfEOmteKa-g(&W3fP;e+tM4ao|w~<Bes7bQd<K~<#-u3
z?|Ytfix9+c3;BmKF?8y_zNMs_Y%ufG(ZS660X-w?{MxK-p>ivlR#`TiQ9wwq%0R;A
z`lZAMNn0#6dU@I4cCJR_1UYe(96#vAc=3hj`Paip{A_x%z`(=pu^XAiV#9&WkP?mB
zZ~T;K3*ZRLyPhnk;i*DU@{L5J<qLEmpw$4-#UN!1x8HaCAe+Q%Zuzk{G?m)7s@{0i
zW|^i*$W2dl2EqqQ%Iw=QRU;|(yARAq6;oEW%7seSSfN;eN_H_*_-rqoDb-{kSw$yc
zywbwua^T`PeZ3DT-7W<<`vG%Nu@8tDz$|n~F#?ZCyYz_S5;BPqH<=Frse%4pz5S^o
z%y9X5JQmjK?~XrK0m(KI8<v*``KDreva`crBneT<P~+s|Q$F&@lL#hFDlcb=3^5W(
zd2Tdpq*75?nNeNxF_`7tqbVxN$=Fyl%|D|okDtNup2+j3nORx+rk^~Q{WL;Qa+Vx2
z>8Y!nPa|d4hgg)Ws;b0gWEhy*k-xu-!Y|^UZ+5xcuzfW0;%pLHGzsEV(L~ht`{L<1
zJHuwq+0E%YqapF~I%#X<zQT(kEfa4!X#(8DX&>P2`nJ3h&=ovlWa4O_Y>NtkQc+1o
z$zR5F9ON@!8VRdgD7RXe5hH?B7D=VdOS!X1At(8c@`?EdG6C{Ulw8xll6las4ciUZ
zKAc>o_u3}c@d{iG8tmqtlcIxx<JnM7cXz13-HmUtD5(Qxq-iAs`$Jh4z$z^+hK`l5
z?{~MxVmf&6X{c2kyF$al3O){)L}z75i;B|yU0?vQ);uxx(X22f!Xb%>OdP3IG=W0v
zC1aRbnU(GA<n;xcN(0SwiY;HplUc^WAX86`5+n!5aglV`|7o=l{dfK)snKc8u+gbj
z_=yS`@LxWH69X9_@MO)&&IVy&+I5Z)rsBeVD#lv@=-Isq;ggPg*Jbf+vrrhm1iDdV
z<Jp`h(Mz<TuTStmQpdx4x7~B8FQLptWj|nLXMmb+iauL!Rvy1{D~b8>!!Sou<Pic$
z<aBlB8lkoR)Xi73jXk^gB~*;;R9&;fVoVXyaJYaL(|G^f8;-gUtRDcK<Jpi@V5b5@
zSBq6T_!zrMB_#_Ar5+>uDO~5g0~D>&vwSL(fh6e<A4Wu)UtDg)z~-8jEY}!ns9x}&
z`W4g@DE`)(r62SMTIuTVuUKc_>+Oa70Y4~}?J>g_?8lf21PX_!Eg<nvMMWhtCZ~*!
zhv)6v^G+D$n>V+!>Cwzj<$NpP_htK)v_{O8B@{lF2lFU?%spPobe%CkL7G!2eIrkv
z+;m4OiR4R8Zi0*Vy-UOOMk2+-%Y(fJmZ>{JQFJ_fyOqm0g6zI*#C^xPAJ+PQ^cdwq
z0%fRhka_CeGc#Y&t+0S`^scaX7G<*k<vGe7Sw=4U{QOb?!@K33KAtxc!;cTiyl$j~
zYNH(;H0$O3{7uUF55D;M88y{jy(k5qWK^4Zd&zTJ)}^}-wz_ABY4{i);^^LMnP%eR
zdcg&m>*z?iTLfjFLZxYF{^YzO*x^sr%M~{M)Z})Y-Pi~eJa@x)3O=tt{Vr{bw)rX;
zh1&Hh9v;_8Jk@b5K1VHwrLf{Xydj0~%%OCYmFQ>{XH1#H(gC|QR-{NQTqKK;cw%;v
z_CLZ9JcT?q^y53ebR-ME?z>O^etv_k!!h>F5Xe`r;7sBBdJ@IS+)nvGND1f}1;m8s
z2aCuOAt(=&@PZkEKnn~Fa}@Go%LI#5+C;^`uxx6AD>I9_%Sa)6LHOmHljjje@~Tge
z-f@M8hYxjNsQeEL`0maJo6Y#_>sz4ukp7-=JD6J0YD;9jq*n}&i}ONk5upSXX6_+N
zy|A{m{TUX9^|0k+YcwN1GjnCS+6H*9Hl<xrtbzwIZa}uW(g9afy~l{9mZ2x{X;R1X
zW08+(a(`@N|NK!)Jbi++8ZHWaFy>$w5mtB0SF<GZzMg-Qke{&VTW)TJ!G!Se>n$Qo
z#Zx(85eG>QC;3QEPogQ?{bcwPz6N$BT|!6zWNG#2ypBqip=!<Ejm0ec6(z=5+TSW0
ziS|n3HPV=*jEwOdwnP>$qjItIBXou@FJBtBYLm;>XDH=cY6}-C(5^tb9#2YWq5rc#
zKNzD8K{~gJEK(W_TWnCH6brdASVjBy6Ora*9{KdOEk?GnR)dG&?vkb2yeSrrBot9-
z_UWjj=q|vB_O;x{`}s;>tPNfZ(n3gDqD9vRqm?8s=hq$za6Eby^O4+Vnse2+a<g?O
zv7a@o^%Vi{m55eFyWXj~v^4E=O3M5^^puC2>y6)0>qv^I*PHI%_RA3PIRK>i?h2IS
z36OwQjZ%RMVyW#IWQKOv8?}mtfZX)&ka)~p4GICT$WI?n5GxdkN!qzj$;ov}WcpSz
zUuCasa{jYk=X!y}6b!0sVr){-mcWwvpxgAEmNUe-O2Le`Y`g1cbNllkLp-khMy$tS
zow@wvo^rnBbZG*4C`gh*1OXw%#d^z+h@1hbM7FrbaJTC(HXYv(;TpyBKjX-Yb;>{O
zy6rb1R}|j_bS#^x-X3HiqlN)_g`bLv#S^FPx#iAM98R10`JZ;d!371daxxxge%JGf
zEP76SCJl2VqZ51HY;HqTw~MVlB35txfsXzQ_elv2#Cf3J=|c|dA;;x4E7jszjWSEW
zi1KpSn6~z843n<7r-F3@P*V6u5in_MR(mNHX*lJ!16P>N(g?8qW~{=NbEc}SO6C{g
zTN4QJ`rx9>L|zQ)m7RygLM3ya6B6!tir$I%9&6W|-yMYbiAC8XkDMGF1U%sLizy+g
zH@AF5iPK{a)8AicYF;UO7d5(Ga5qYEzx}NO=n-<N6*fS$-nvKI8Zx94e|jucMODPJ
zSr1{Zt~ArkXqUF1cH*K3h3VDw4zPFf7Ba}daDzhsS&iE;K4>wLKTB?uNxnXV=Yb2a
zhINGCifs;j1*b4Rnur)C#pUj}dX8+;&O{o9=6sW9j-75u65D3NfLLg;P6qX;<Hn%b
z`PUy2%_-+ygJHB%#H^<l`MAMt`)3q2dN(sAO{4}B#{`sOPe=#DynxlNE706UNr)6E
znsNhoP%r~!w;VC;6cfVeFf%a`Fy2uWkWQM(ly4jy4AAxF`*ooH;{zLX?|M@JF_@-J
zpQkjHZN=lv%f&N-RVKN93h-%z=Ig1IZ6kV6|Fdib4~!M7@2;-0L;D*9Zq+7h73)VL
zaf1>us{2>%Rj+TL=MgkX+!fjtwm0Ef^rjV;-Q=@8`;+C+i=g==ZCc&#L-4{nxV1g-
z0j{?Q4wGcB02d%JY8F5)P|oQNjA+Vu3P*T(HYL2(KZ>NV7#Z1H*>6hO+1=%FmAf7A
z$GTb>UIYu{+V<dGpzx7b^W0tJ)D7r{o&>-z$E0mK2UD?7Z04&fO~RNq%{I%OS~H5H
zi`3kX+fVw*ra@R|(o6lzBw}j-V9@VQnNhl>$*BP}&z(|!5(axio4W=`CDMD`5mET}
zgMqDQfS=#V_ViWT@%p^<&A)I8R|~Ml9B9i`E6o=!983TS0tEEJ(hPEDG!%RQgdQb+
zJJ9{ng4QcIB!tW5w0BjK0C+^_Ws89byJ+TG=$VZ0A3$-6OOw?g=e6~j0+kxE^M`GI
z@0*4)?{{)VQ><P$f#&X~dyTHJ&p$iDGSbsk7<A3q2sIj^<1&ExJ7&r@kSwB<cR8gb
z8)>CdF#1xm2S{Kc5j14H2eQ^=Tc~k~k!*+4c1i;))+bxa72J(mK)$0Gel7LkbrJhj
z^=+l~tjhDJ8wnT6#XCUCpT@k~4veVa8)I>z1tn4vQZv;q1AUsD@$44;8%tdwBx8!J
zb(IB>t!%mPyN2`0d^<M{_7@73=A#wM`=ci91H((p%f-6QRqOk+yHidhq0J`y>a019
zu7{sdI8wdm9ZUukT2kU5X@YbZ*7!-&W75{0gLx4&H;6N}_a4`Ual;857S?8F>XY-j
zE!Ap>aXNP=o+=wjDXCQ5xJ6M4KmJVJpp+EdS@#oWt+ypAd9(tukLT!PN;+4|IDnZ|
zg4QWb;{@{U4j?S4H(N_rnzR39+4@xDTl*RoE7W7X&bqR+vT9Cx8`zE8IFhd&@R^Er
zTv|fH5FIpIFMm+sT_Xw#HOu3Ro_J%g?e6wvD*)ZD)ak<37Ka50gY)EyPgilDsC7`i
zOp6WbjtmYB4raHMdcl+x2|eAiqQdWJZ#!@+X-uLeztTT)5x8M%Rd_W80GF-in^Z3;
zXVbTxVDvyOOH@KE_w+;8ir4;$35CMK*500s9sAYbyugClISyiG7PoD+&;uJE|EV0+
zIovFWaCoSK=M|tcP*Nt@k5ixK$gOOw2-nWw<h-AdAimwx=E)oC?$&75MzeMxsqHFC
znE4J10&Y5%g47Xh9UWIHg-WF#+wwns8n>Q-h5Z3~Z_}dh3kx99nybD>r>T%{2=*O&
zFC^gsYD&M=cwFH~2xFI?<@<kFR*@glgjSX_#X|9{JHQbrUkH*svzjftD1Vm1Q(yCn
z`jw#xeUVk+B*&QX0GtG|^sueM5-3^y!l98!y+v;t+iQ>UE$5q7+e5Z3F;<byp3unN
zSd{Vkm4Van%5mbUgqMP`{ZQt92r)24j`hk{!bs$HB97@vTgmCd#6T4{&=dOOp=%@M
z2(PQO@VausH@Nf@+rAocu}~6U<*BxLV=O5xo@NM5Q0be<K)y_d;Mv&hzw1(KJzVE`
zbzHr7xwT}zH8VLGr&BZd-t~5F*2@#RT8h8BWjzZ86ad*c-Zzjpc_5+-SjuZ0kJC}d
zXq%L=y#C3JywA%Nv%R)==PM7X!hU4?6xdd#DnX*`%~Z05!^uf-ltcG>HO!wPB@{T$
zS>4>+;DU1pCIa4M0r;h*`iLnS+28J`I}V#mBC@h2@$A09LAcdasLT)*HGr3!*MZt_
zBBvFypQA)a8z_x+Y|3j6Cv1B6^Wz0e>nKo`Z^W_wilju?c6Pi^Yl|QC-b}$$djvQd
zAllv@c*2H+K2yqH;am-%==er{K?`35Ej|Rhr$`9#9P;*d?}~ypIgw{wHKJsE(C>IX
znn}0TdUtDLB37ev>j~Lu7bi~Bm;ed!WeZTMdR~Rn$dKmjYygi6h!$HR{P@^nx)`Bb
z;APUAtx^C?hk14)27oX1hZnzOhfPSiJT_j2EYHOK(EXOodgTqw$t}jLuD1sSWRkcA
zVJryqWPT$l%)ED+`y;hI`}8p|uk3Nc!yQPL0|mdwySVi=MvY`1C^)&j`e!Z#t`GRg
zsNT$M_@S>;dkTnz{{Z%7$0H*nhd52Ehcy7Ftlh0^IHPGOCneMNq(k}BE=o<+)}vzx
z`vJLoL?xc3Fh5lf+9Y&La_<9O0W}THYq<xHe0rky_}o+YofIe#;jIB!m=~tB4_k0!
zib1Ugw31A^O@!Fj_9~0tzc0x8hdttgrm2QmQ}fK!=vz@WOVG&r<&NZ|o>6?G;N+;5
zE?;LIJ{n6xwUn-AA~UTAW^6PveuhTkt1OdW4omvvrG&`dnjVyT%O1P(2APF$dt9>d
zLLiWp9g#e?;QQqz%|q5xh5?s?-FQbE8yj}I7Mk%MjdyXk<&ItHjML7YhAi~-1#tqh
zAlveEF_&4iH>vvI3ZmE+9o-YnWNah+M@0r<M%*|Q$C~XI5TJ<E6>HUf7J<*K?nQUb
z@UR8gZ8UjqQ!C3P9U;JZD-)2oe0+{O<NqZwySvgtbwIbqbw8O8SAiI#%XWLs(($&5
z&$~$7#>@=z!_bRs4P9Hc43;6<AIGYzr>}2d&<L#3gS;>}>s(<Tfx_XDk*>EleEB(L
zQcR6@iyGwhO#6t(`_w?Ng(|jwbyj>Qk~{DpgqZ~HZM8+NxZ0#3Va7y65)Qo6x2tI<
zII;T{#3ggR8q2^^J8FMq_D;Q3xo6CS%a{<^7});#AJdi6vV}`zxs`~(9gOgB+o}Q8
zWCzm3B~Ql!T9WCw(U(6y(BcyHRT-5D5vKw8&)&XF-l%^(!2!u_#%LUz*OZj4xj1O<
zA^u9wKbFQui(U;+O~otx@sEPDKxF#4Zhl*7dq-EwtH#BJ@9gY&aGHmAX~&%1d~rct
z^&(5u%6Lg}SEtDtpP!?=qH51-@N-+p>KP9qyfO<NHg`xgPOw2<=2pbAxAA#$pxJJy
z7vTc$DK;_|HUyX5&3H-WhAPQI=D?l#3}ggIF_l!mL++fU$w+99hun_{z^3gnSIQXD
z4>H@P_I}7!-))sa9XI3j)$0>X`)phB4N|S{UBgMuvSb$$kD;iDZO3Q3xWMrN2}!TF
zukpR5)Pp+|!${WBGBcr`6WQ-G5;)bqsjE-Y;r{Jgy2<^tjIFGC-laW9;ur^^=0r$7
zF1{1p8r1YFg?DX?TzcjZ!)2y%s+=vx&svFH{uZFtNPMUFiH98gbEGsJ5KBj%;G*5v
zb6BKv0B-=7Q%!td@9$Sgt~7T)mV#dOKVizj*n6bAE*`x0AN1bGNL9`YPw{)W1{iGM
zMLX~mDTWKw?sd>xSQ0etmr4IXQuW|i72)3DXsN+Ea06$}N`LQ%2Gq&=a~#_omgci{
zMe?gQ<?9$X2Y-cs0K0hjpk<A&?+WQ`bCfYxbQCz+m>3(~a6_4psY-<E#{k&;ul-8B
zrn^C!09xkJ(cRIo=!^`?<5POX6;e)SW}!Ahb-7(S4}^kGb2$*my}w((@WIhh&&{L%
zZ~x$r9X0Hg+*Mq&RZ<zzl<+&6({gGo*AA!EnuOD=&hD6_o0VC;>UY;9m&v+2peCae
zFlI%Y^y^%MeVG|-7nPc4<kQYO{4O^~v8B3OB;Ie#;ULUAlw3drLDKjg<XP-pLQ8HI
zu@t>8E&qI=V>2I#^%nz2LU2r}4L0%Ps7YfT9UW9mvW(9lKGTV3B}1QpS=VMH_eT?j
zIWM&T8X_Q-<?b%B<E1C|0lIu1xKIkbe`i^J1Fjtw9)(yfWp@1^y52e}>a}Yh2N6-y
zAXEg7s0fIlAYBU5&CuOl(v6CMfQU-BbazV(NJ&d~cXz|^+j!1--sfHK_c!aTb^dUe
znNQvK-q*fjS1jq^amd&h_h93$ioz-CF_A*<&~<3_x?*su!019u(L#E`73D$FjEDnu
zDb|A{hkvnv<StoWF7iN=MybQleY7>dJyMpxI~M7AA{(^P1Ob1rXDAsk5#n7N?m8a<
zXX13-rVc{KXO@Mm))ZO<Ql0hnmuZ!*(t)wR_1<#G=d}^5@=+q>IXP-pByc_E0IWV-
z8#X%V>30d&OiXA9u|eh6m0?Fpi;%lRD0dO5aEwor5zTEl9_Nv@I-0I-BHHpP0(slc
zqHGU^aiw`~8~R;0Mzddvnt=zKzpn%kezsrhcN<mIeJpW2zw<TmPrndb<qToQ9=#-S
z9$QCNDy@t1Y8CeFW9^B~0g-YkUkZde$5SOyVh@yy^oGE&!R25%_RIBBqh@UThv2Qc
zszRs-elLrD_be?fDdMofKFFzOvN*2}a->)Li)UbGh3&I8mR|C~>S%du8Uv4Ng@K(9
zevCJe{*F$3<8aSDPLDj-MTUwd!%Do~UHoL^TEMB9@YM=pO~WC-iCl2-Di-qr_{3qg
z7o6wLr2pdnUrkxMEFCd&!ejFNkqz?L8uxG1QeWc@5MZWdqqk>82CroY?b>WVJUg!k
zJzrLK17U2{+H<QVSU=T&?0^4jr)LU;jRQkq#;&sh`oghd8y8pCXwA76AmI2DcS!wr
zF^{6&z3;UMj7+<gKBU!DrAjh{N+s*9hO{cqT1QmxK$AehYriWlY-KImy*hycxs2*?
zwDyAcgLt;1lZ|Q#@PL&H10fNnTzX6Y#z^5~7MA(ZAtpt7%?yR?yM4Cn-F6MzkKzd^
zxZLidnp%hihpdZL+!lZH0wF)qx^VufM&(CmII0zvwT=%TpzdS4&x0z}JYU$*RE`U2
z_vKJ4vZ@8EQ$lPnZ8sH_<?cr~OT}hG1-`M_>I?ce9if@g4x}(NFxX%0^S@$$upaaA
zqapH?F;Q`YXLl7<<zjpw`|i@bU_j(O4qNGoc#oGv?`m|83X*#l<|S6@$a!@%#X85U
zNElRJx(NyhWGht{@i$4Dop@s5t5w^6^{)N1l)a2lj4pjukl!^At&YFr)6d;re6Xqi
zD6;ao^%xZ*s^6xX*1L{jrmfvoAvKYgC-mmc8zhQR%tPBm(3wMZ^MJtdF6wpMSNA`a
zychQU+FDQ_*x0|Ra#be%#+)RsKSNbpn~KMoySgD2(e`&U@Uv%ZY%I@)Ke#aF+0@8g
zW>c#A$Ad~E(v2b6QWt#+A(8(FN<oL=&BD~qLCC@}WUm-TT2B0IXr1qj>d96Ota2$z
z<v+o?{5${VzH*4@9uUFb(xQvg1M&&x-`4#IwhRVdm*XPY<Q7BQB{fesdHu1-J~Q@H
zk=y#;y!d3SHq#@Jr=2}LLHO6zDjj*4nFS_9l0`!(W4Zfyp}o|@xiHY808NRRzCQ3D
zTl)?5lKvh@ZiZ5)pMa)$VMP^8MOgR~@B|ncyJ=`nX|M3y4-vid3sXQDyt)W*a9Xop
z?fM%jDzcvO(@vDT`C|tUto2v<1O@E`H{S}n85GHEISx!LW{+$}HC8GP=dodC<QYe6
z9@OPOn(^8rm^=n@)-*qzewv2<)M56`O*Xrg`F(3)`YXCUiTAQ()30J@^kvwsu-mxz
zRr!&at!8@=$<53lx`rDgv-3-uJ&sN5&R$}GwCaNl#xi1}5gL~5A7(tKzrNOi|A+Bt
z(lz};o60Zef&$96B`;6xS3=vNZ}~g1u|_pB$>7~S02q6Fc-Yw819{J%!A#>yWBG4^
z8~-V&<@WzBq9IN#&2{Q$dE~2NGqWr(A(mtY%J$!dt@nxsn@0{5qpQu0&_zcewce1E
z-c(W=t+w+|&}`}NPm^H^G_C<Ohix}V%8T!QVAF}?;<F%g)DY5P^w2Vm-;ZyoOSWu%
zZmwaGzCKys(GhT$K-2y#d1h%B6}y9V?ugUhE?J4|W_r#~i%kZ~?N&l%JedsnyxlmW
z3#!%V9cI(IcE4o9=tnBGLw!*ohR3Zt&&_C&pF}aN#JpG$F_5W<v>0<fcIP>Eq;~mn
z=)=#0vOP2uBu&t>hKc!~{u+(CPLvko9tFk5)YOd|TPnMIv;?E?Zr1+7Ac<6?r`T)w
z2tD9M{fe2)WGJ5a`|I+fn<BEZ(;(Fu{JW-%?D`SxtNuf;3mOnT#)y!RzP7m3h5Y*_
z<*sva;00y8WK3wc&}F@+=>ZFjBgd?3iEO#WSR{z-=FJK{CdPA{+?d=)TYVEZ#;Pg+
z4uhInR)?MY>6w2gZ!#Z5T!80MiTMQ4ty@(Fdz#|z^qN0<J!-HJDX98|Ess-eYggAS
z8Bahs6t**Mx8**HW;<J**B-vn9XbY6Dru{egLU;HCcKdzm+h6@#*SE~jnpOHriKPG
zcGr*XE|yBj(D!T5ju#XpSx1=tJY)!9*{#K*FwobB6))tX27?06uZ{>izyxaH0{44C
z0)h@a8T19*5j%Ia_*q!M8@m{hUNCe!yxT7`H2cW9?OBRh;;DAJ`V})OPR<iPDJ1m#
z^#(dSf_Gf7gqlFK(uk{*uaqo%$1B*`_N88DwP&^}3$uxq;f0{xph!lPlj&$_Fn<SN
zFoJX2w5lr4DZ5JcYqsJV0@0+<fCdxJ@X#P3GR@Rl)%M|ZK-(>RX})DvGrNWTM=76{
z#<RsrbJR@-(t+P$K2O`lkdQl3X}1a5M4!(Wh2WfkbavxF&WC4~A^%p&xozy#d<!Er
zWgWeqqojm}SCq09p8xpk{)Ry?7LVPs9*8znij175>ydW@BArNsQEqQ{<b#`i+I`*c
zjIAOJ1d$H|uNF#8xMN&#&oiDmj-JYw*=@B5rukTzsF~2KjZJB|+qy`#(qgU(ye!e+
zu&@D3B&z#|omk3St}3pjRH1{M+FHZvxYIh=J1*`_M<1dE<{CmKJp%(kZ+IufTmk#Y
z)u`eVVX3?3)57+eP2hgfbqgh={ZMy<_?FWywe3ksHZEEv28z{G@P2|Of6;N4a?gc&
z#IY2t;>C~hCntL@z4K!4QOl3d758p^J8=zmb#Cj!>xe8$%2+Z^Z=1X5ElBjU32314
z5PEAP#fdrp{FEKK-!MJ9fIqaqO5v)dN|JeaoO3!@L~(T$nbDe(fFwJZnNsWt>j8E(
zQRWqeOfg>ge_6Twb>DjNuHDrxPa3L*K_d7ul>vSp#72JaKt?&9uj>QqM%h=951K&w
zGWPZ@ErBh3q2r11i@Od46g--Lg|*(irK?{+=RGC8XlhJjZ@(o?JDZ;`;}t6s?;K#_
zO%T-79!&P!a+m;p;yCEQ{4s84_LGZ49ti&B_7(uJK#KFQ&IJcx%Tp7GcUgwe4ljmv
zBcTVVJfl9&zN_?@Q}yWdsOQ6n+rAIERmEt&CUw=NrEQvp_}wLRroseSp_?*UoSwz5
zSn$v{-qLhLw}d?=e8I-|o7dh(sOe0q6q_J+ParMqHJByOVUV85E=Gml4pSv<xrXq}
zcvtMt6ZKtCChyKzai$*eB(V|UeOA+ct_fp0zmMOh0C)jnvpv{^_=$L7kFT#=wpV_G
zPq!2m!L0d2e}%_s`*L8D<p2b?_y_?k2?8qOyT^+V8PKL`1j`>B$8D`nS4l`qZfpBh
z@rYSiRMg7hfPVbW-qU5dTP#`nyZj;IwaiAp|6-eM^Yn=anW)oElx=H&_Wu69__eE9
z3TxXTnW>)qp-(k$94~IgdE|6AjX<tf0$V6eFgQ$H%v3Irify^~=+6=>$PasI{NAzK
zMsq%Uwh4SeR?F&;E(QeE1_sFT44|*uJbKS%jr67_Xd}7Wpkta6u7tO^UTN;z(|9Dv
zD@WswG=2BOWH7BOXUv0w)4oVWtIv<fO|{qzqHo75EImZ(FGNryg$tIN6dT_onV0+1
z$I{-+hy+#Z#vN-f2fDk5T-=e=&mWPZG5xrG`0HyT5YJQ1HdWo`nbzS)XnjP{4i65u
z&N1#Ner-)=DZv*wvT4bjTtC`mJJDs;RkLVcHI(?xnkc`$X8-fUHOLw|)9=sv@Zqxa
zZDL}UL(f;R`@5a&CHla%IaudS1D{>rpwyqSA99ro`<t4CkQQ*K9<0KD%Jq;>cwyM9
z;J#Tq84$$+s@151mZEhKh736a<jKI0n<(@-O^((X^p8U@3!U)LTmrnbotj8o{mf<(
zjaxwV+<bragn(R-+aq7MNm7b|;f%P#cIg<#EjPZ(JeG>Fn26`^2;1puqKHFUbqx$$
zcuT(>2ysLcC&WHV6bc-)gojGn;^S)tS>u$WHF#9S#Ga&F?Y$-<Lg7}2(zD?FqFUJY
z^klEyD8#iQ8<D!+jChP^nk2gfPWoxFEnGZtmwI7JdtPllmlsa~WB|+I$_Q@DatLC2
z0;)I2pxCGy*l27gt*~F)-`!1e&R0^aP{_t7<Aj26E0EWng4;m+9EEXv?3FgOn`%XA
z@M){Q0-(8tniBFCJg=CLibw7Du->AQp7KDV`ZMHLo+k>~tqcn!D|Gb_y<;{XHrtD2
zh7z;Nd4I6fas#M`rhOUuY}?~*$8FK<rlV!K4=5@BtVHTt6IaqJf4YIi&?hAoKRX95
z#xOZibgQoxI9Xqx%qeQbia)%X5vj@~FZZeXPWI2)W>9wa_3c4jEw~2~L^vYUu@7X?
zOqAPT5kcOI-OPM;fA$C%6^6?;0bZqEyeyT0v|m$!0>K;i$fzTFX!m#Xkkik@H=@bg
z-3|V|Wg<aTtIN7gpN{6EEK4^ABffrpGrKuO^d!{B+uOj<5I)%_VSS|3qU*k{35)*r
z0p-_^-1g${4pQ1xskKsOk3iPPVmV%9)Wv82kRcW+EOl-fxnjRI0>LP|LE8Kbnm_8{
z7JrF<6%O({_4x784Os+&24!n)?S6WguU!?Ch)Ad{7bBsMHpC$;lbscDQpA2c;;=Zm
zKDE9$`-?{&EThwY374GCirf}JnjLkljf9+??M0nzHKh~Q+AsGyO@4oM->?J!&i2$6
z9EYHQ>NV^PX4}PQ$QJit!<66x;M%Iu=c=c6fU<b69rpKh23E^)*WNT4C@5e}dU(;~
zr35$9fc1kky-0Edr3^ab4@gG;P1D2v=EJ2kvraCG&e6!NO72~_?<!A{(zd}e6^Igo
zd#{R3#wzU)=hE?~3_)3P)YROqp*^^Cn$@d^TQg==DrXbP9qbG)lA@x+usg<$SFxBW
z@xGaUNae!|?$FvZf>KhQQLGm9O3!@a)b9U_1!!slASmK%+eqlwOtZT-UR5#ms0Dtc
z*3~;&uv|PGqiGMlDH0j6MxzpHKtzK!|AUR)JUY&jDYLd}(dYR{xs4$&>2n<jdR$s!
z&=iA#HEj3!)(zHfQ7W&B6ErKoUkYr>lqsCYA3JIzVbEZ+-JEO*c{0TEV^J=$$vcw8
z9NhUe@klv>6D&%oxVS2vc8CSr&CJYCstz<tE!2mYB8DPz2C0ubVn%=v0m3xGkplO#
zV-SiFx*(2nkqU0-V-6Me=T-J&$2sa8PyU9-G<<OL%B?8i5FXrFqM`hne6&V`CMhMQ
z?e}tzi-jZa!Aa15Pr_(qGU}P;#3zO3(h+4QL(zxdfXoNqQYD)#3O0gUjR8>#=X+sO
z<@E^n@ac^WsraQ%-p<LLBY5QG%AI;rEURM%%S3MB``l8>9^NBmrLk()<%g%mbf};&
zx_pO=i;G$X2)Q$1n(lV9o7(%z*!n=~05?&_N8cc%cDXMT@u*mDBdA_7ve>C-KDQbb
z`QFA^`0Gw=)d_W)fubU9A&oG~wcZf?tU!rOdU5-(|Ak>jKMKxhHNpy^^$JsytE;i$
z;T~U>rl;ejh5a3|i{jhJutEZVvR|5Eie|=6p6<s;`3rcWJhxw14eu^Nd=tb~dsv;L
ze%P5Bp6{#RmfJRWdq_pYTp6r<?{MtSK$K+0Xo0?ep?|BUM>g!TDL&9%43#=ql9MLL
znIBlFhdtGFUs&fpRuYkr7%Onv$x>z-GF<44;<V{!AiQ~^xPLMqbqxx#2zHxL*>tr6
z$2VXDG>E$i*&}LWYKmvY!?m?AsDh^M1iCNpDA<1Q@|^aZot&3DZc%cs5yOElzA592
zmkE%0E;QKmTv^W=Oo@BmPPhC6BO^+{r03Qvj2g}a_c{d!iv`|*XQbcc@v_cNj|$t`
zK5?lG4-Psx9&%w<H4vUU>gd(qa*OCLe?!KjgZ*=DBEY-!(*9O<w1bPPD(9K+?<|;<
zfr2khsf+aqQxBxx&8nYKONs3b4Gn#A%F4=GU0oZp$p{!69Msb@a-a%p&6bYmv$ZX1
zw&1R+yg5A+(&9Q_b_MONHBFkrjHx1Dcxg-b+=}3*vlmT8w;KZ^TuE;aL^ywO!O*){
zoP_x(#uIL{fpWK$>lvWY_o8t~&hAbrUB#~S%hSq))yG?oR^H;EDA3mzN?=6OEW&KJ
z)hM+~R;W4>!SOh#_5!e*#T!72!dU_!`N6SKsE!s-+=6=i&4wSrt8+V;yZo5Wi!*CY
zGuA_krB=AQk~x_{`l-b8xu!#z7y}K>dW!Q1T0%$#xmygO7J&UiPyj4Sj)WM6kNKJ!
zUn~1%ubGiWN2^^}){aR4u_>#*K0Hg2iI;@_%;kLCv)^28mw+r(+(rxA_lFMl=Y$Dw
zyyc6ZwYkrKffWlR1injFzIoi7cn3ip#bRkZmO_NMm-eS98rNpSyo-kB=a+~mGu*M;
z9ei`F?Uz+{{O5;|FxI48yG%?>DTeb7Gq7o9`>;sQwkIx4eyB)}mdH9HIP{_lm9;MQ
zKQSKeY>#Bg&(GJ!7Nh)ny4z!WQF4u&Uwx~|ubr!8rb|PN2nMp}{UC#M>S_6&bGco*
zu++LaMD2K21f_2JiziPI334q^>r+2}-u0Z>r2nD^Iw0p>?n_@=nlqmF1I=ow#rW|;
z&ASIeUr#Oy*vmD!n@5*aU9gH(62FKs=^*+{<U3e0R?R~84L%K9u_C^8%x%984ee(s
z3EmZ!5^L^gY`=|;Ci=UUUue+>ju4HS?sAO^5XAW6sh>VlrVoom5@R+8qmn7&e|2{a
z$<qg2c%#Dm;3Z8}wGyQDrd*AHLDNrtMpu)N`k1*sC+AD+D7PEiy|zDR6W&H#)pJJ+
zC;nG$*CQ5=Z&mMvZipl+TOZl566DS%UB>pl=w{$WEjB)8`zWrnG`~2|-<LLYF)Udj
zQ#Ua&O?CMqupVA-3ueji-g;4rak?xdeNaldEM2;fPtO<s@t=QYoKeSpTh0~h>1iXY
z<NF$!RsZ2O)?*U-u%<tMj`nhBlm1GL#X8ZnP8`!Cy1z+=e?yyS`gNQ@apGi4PI*W?
zV}~r4$?P*u7qQ=$gzI_n3P#`PSCeq9uHmB=l@QVKYpW~dJ39_g9~+Ii7Xw<ESZ`kC
zYO@>}Qey=w&ijz$!t&1tTlQ8Ep^Xf4rle9a3DnG4ld_of7szu$sCAt)#e^u;NNQ^G
z;4nMY<A#4u>!x58KYHFvt$3MCeMTCD5<R^IKkuDp@9JyU-hcv2T>K*-cBH3Mspa}1
z`rUM5`9$U_>2m+hLgs^o(Zr3r{fM3jyyilr%L(qSuag6%XK85(Zbg&gNE!hhQ_^zr
zMnVODV%W%dm4K3)^l;<IWhG!manSjl*OySah!H>Ra&a^LpimXu1@*rV<Yjz_Fxu+U
z(oor(2LXa-yGsbSM*_$g4!e@VLjBvH1?zw=0yMCq7rI(vU-g|;Xc5%eBet%{b00ZJ
ztMiV?z9+anztGY9j3U0BMDzt;wzn@9`e$sjX#gLcB~5J%Jac`erMWqM@Vv>`OEc-C
zmCuk%j!a9VPLbQhBo6-EpC)fma<G{tJ;d;~X`!j!$TGaQq7zLemdDQQAm^#zQ%I^4
zZ2gUOV7=m3lBtksgf?Uljro)i`{{=SaS`ukevJP9eq5g?&BC1(w@6hv%f&OKjaV0E
z5Y3tI54?8nmopRlH>lA|Q8sIdh9xEjRaNOaJDcd}T-sro**a{GEQaKWS88hi;^9h5
z>KFhzO0<IWa_gKQgbz!j(GjaYPxiXh+D7Ng{*(s6J-w4_a;5KiR<F?ufZ~7MIqT0-
z_DN_D4xWu-&7JQugwZ`UVZ<#otSkMet2+!1>w|<hPjkBvlwXY+voNLV;^@>FIRnY5
zGop`L-=Ce>-{ZCaNREFxsq6Rd0cETp@|jzf_OGS~m6fh3XNP#YSK!q7E$pyOjNI$X
zz}j14s_AKsaud!!*wV$4jN{N~Nv$V|%#NuV>}F)y*DoVg%5Hr7ielo2-C8bh7$e%8
zmu&jv4(8C1=*42ya{KsG<7Iv?1!r&vNnt@{!M>uW7hGCennM*t^YjwVS8<d6d7gXQ
zcLb2Z?JlQ>@q*bo3RR&&LH>O7nibAoZ{jZbkGmB|OflU*pC5ay|5ku9pFIi*G4QV`
zjR(_=JJ8A$)|`tPTEjY@W9GXo%wvxe+4#HTn9QbKOQ&gOw>;G2Ie+_-qx$75OW|L>
zc}?*;VsFm8Ax!q9W~5^J*v{jbr6=$}Sj~q`MiuLZd;<A4E^cMdQ7LpZM^X`{N0egu
z4<7_vtlf-_-QBcLda_2zXXTvHH=zLN?&%?YVI+-o=XVZ|j3g#Idr$L}i(E0g<@|J^
zB?RLxvqflZC`8aR5a#<gOgrz9+OXkzxr!#gp_-l1elR-5t*e_T71#0@EhUR4ut~S=
z<<neEWN(JN3kgXnSRdA<E)Q5HNK;$PMVNHZaB+Qd4=<>#EBv|e04XXVq4CTz6qU3B
zVzYyFrtkbs76jy@<*rLyJ0<a~jm@`&?!4U=_!ePt|N6x+TYCTMzm(@C%o>y8V}K?g
z^8oMa)v`Z<xq8O2+buI&@&=b{>{gf)=9+_qhFtA-h|ROJvfwwJf_y146odD+N~$Ek
zpRnRt{=*5T>%AFfIZo)$%B`2UFl+Gcvaq`v#Z`9?52u)D1w^st{Ib2J?BAdOF6-Hd
z(s)l#T|q%`m<b~w9|T*ln8H$xDl8x@IrM*OUggL4>B(^mi+lxUHB}m1fukWaNfwHV
z4lP#4SaQiEvDYa`Zo0m|Bq!)Fz73%qAj*f?U`l5=$rhdKT4Wf_R!X}HW?zPCxit|-
z&6}CyxtS*XSuUj-lm4s_FE6XP?YIDXcAm}736Pwa{{EiMgO;M^P_Z9_k=bYKaNvBr
zyEVqi+8Kw_UwUpbIvc*2X0z}fs&S2E6FX5+h)__7W6G7!bVnZWDwXI-jydD4^cqi2
zP7<Paw{pm$pb^{UzUuXp#hg>dd7`I~kB@IPJ*Ww?Jhj-8-oDKUxLXR4if7Xt?=_Ft
zNSu}gRTV#E6ql#{CFbuj-_=pO*#X&OtP`lijeJj#T+kj*qPKh;3{T_Oi+ucehI}5b
zpZ@36)Q!DN!`sw^^awxd={ak5#t4vp7$&>crbeJ!t#Rxb52bF@0CL$S1%jPBf;LCp
zriNtTLU!W;(xfZlslXeEhX5%-d#S4WmBCS6yv|r|Uw?n&-+AfU`Vi_v<Kuc%z``?Y
zU7pzF&QH^mIu&?6gxs0(tbhx6v^di#u@B(y+~Q)E$KXa4!D65Bi^$2ICK_h|Y!W=H
z5>d)RLaCNiD7h-Zr+#S!r-hu{+~&V0wRc6A(r1(EaTYWM-^i7LWLPyt8yB^SK-aWd
zp6wbOT!85W1@pWr6$wwZ`<whO!3gs)R5MDurHrU`p^$(^^jz;Sjb7aaDA|6v*;!^h
zw@*b%*WGs4;6-*X2G$N5GJKG>UkW)PxXt&5?Ig?V_j?^V4#!v8M^!GRGy<9x_GkH;
z5(RmAzYlm<gJj4!_k<-xIGm>Q_~P$znCZcX?VTy++<Te(llQO9;l9>|PAtW&MOOEp
z1mojGg@qyBobR6QlyMD5Cl3}VT_KPb{H^KxF*Tm28vSBx4}Qc`jgqRPcqXls9ENUS
z+r#GMasnoMjQT`#Tx)oj_ykX$e&K(mD<^l^1?Lej^6l5eMg$eer{@odcElEo!A!MU
zsPn+p?TnK0=TM|GUgU2y>i%TL<QKQ5XQWPDlsp)8u-mA|XLgRLf@++DgOZ9CBA6aK
zn2pr*OIM1%a<|@YReb@pHyLSQQ4+HVayv~g9t0WoS`G$VM-c{5aBoX_dbd;SieQ#h
z#l`VvyC42W@nfAEn5q=74|>%21Vj~;*=}WZ_0w1!?C;0_j%+3fpruY*pO?sF(D+S0
z#NldWdH#+9?D7|ygPP(AG&M}b@Q6FkA90=L=hRkfx~q5RX(Q^IbKG2ANuC~3xI`yA
z#JwZqu;1HC2Y26=eW_Qd79yO%GpE^2)YOAU>AAiq3t*r}&CaDWJFpuSvoj)PM$5@|
zIMIwSV6p5n80oj$g(xla;i3@t$HDdRFub3gz08pSe?xIcS%E$g&bnh$SN_uMhqB<{
z0#d0Ew+0F{MD)yRmIQk@<MZdQvX2;gM$%+-PppT<|HT5ZyVu8DFnTa$K7R%IU0cP_
zw}xDaJTp^6UW-#bSZdbTbD9YHa@2E8wD3efS+TXX%<TjPwYx1u6dLn~F~mTgw`QH7
z#1LAztT#x|c-%hWT_i>H=bnt^xd{q#nExEBTXB+mO+I#fg4I2FurU^&%kIAVSF+U}
z0fpCiYTSTJ$7Z$?O({N2Ldx~6UsF}bkzXcfxSjX2Ws_Ap&;~m?Uj3E#y_V_d8gACs
zw9`Y<mj(N%sw%)2<#Ge>(`<EI`SS3|6aVEiT4ZPjhX>DVkI>qHl`tB#oJsYscyBQ<
zOnKaQ-v+oVgNGO3lku8!w1jAgl!2BO=hl?s<6GrS-9QUr5up!zZa^JcixGUIS!C;O
zaf)EO_w(m6qF!>e?LR94x<O0+)JXy{WXeicxw+hE4*VBOKl-twr7V`(EadF(+Xr)G
zt5<~P=5BQ93Q^<7k6PAw2LKiTEZNxL;QC+=CJe36ii%Vyf<#0Tl2#JDknY@{b+iV+
zL;D%75arjT6e`8E$(hAPBX_j6xvlny_hNx8Wc!EORn7s_cf{_So?QuGzt{1|^IF0O
zJ{efpXvo&UkYjcAr$P47QH*|j%EVCS$35y03G@=weLMM54GhuHA7wwv%gTHk6w1|q
zXRhQWczHD}KF=NF^X;B_LEG5tpOD*WVG%3tPAywyw-c!yAe;U%(0^<1jDb)}-0|s`
zlnKm7c6g@Wa4i_xP${ny!kCT^4;2z#Yz#6yUMAhd94<^8%0F5x**-mDsvB?n<nC{}
ziKZ_kD$2LK_u3&48y`PMgDC5A_#GS|RN8ihHD`&77#MKmoIE9NxQC{gCjBm9!iNK#
z#^o~=Am0Vur*3b1d)nIR!qRPf_L|pM@pLG)=f(LS-BfnxaJ4O7ekI4_w!FBmu1a%7
zqjGUT6IJ@rWO2%CClw$)N%TCQR0pNO2aQ}m1}o5D2ew@r{SwH7lXmkEoH)ju19TEJ
z7Yi#0x7?5R4hV|@n+yLI0JaoR#<Ns@U}n99;~x!97`4hh&=iuRhLlYBBf6Uc$-OVf
zUCoeB6%61gx1%OBW^k1dcYPWy#^n-;e=FSVoNGCvG%&Y0m6}&vNQzoG#qH7ctAwKE
zG9bv(zE9_EInG5McWh{l%L%?0;%zp94py&9%YP=7i#l(jSzadd_V@j)6FyxY1<f&d
z7t6Jw=Y@nYKi!x>3f+-YkwsfwP*hHDOVOHv5P3nH^H8c}wc45aa~)pteRl9UfZY}N
z5#;QZaS$5O<yHU5;*z#t)XiW<gTyl7_%BSDZ+05{P#8QJ>Zz|>)v|JPCs1zZF{PuG
z0;;exdF>c3ZCKWKAOtjJch+|rb_}1Y+CB4Yq#4V0B_aZ%J|`2C?!INuqdQAx5_`+R
z5pBgIX}?lI`!byG<{5#A1b1(sRJ`Qn^+@Do@_n5^k$QH#IaP&3sfp_PfBw9^nWj~g
zQ&BMx@}$8k=wS$L6#gUOWH6=7VH*02aXa0@CRRJwp6?Y0!%*#?e(0qPA&k#f$2=>m
zs%QuV#b^=z4nX?=`ox6RuGlPg#9#~U1`AYGfWk(FhHmc^`K~t9fFH-r>e#Zxt8p<j
z$EYgKPeXJK{g~L{cgEOD9V|3cw|)}{lmKhx**y$0O~-vYHBAJQa8%Nq)wW2s&}**b
z#Zrk8$>T^UMTZ85mnr-j`h!jSg^<An1Xt5c!t*=bxr2^goPwiSSD6To8=hAI)O^bu
zntiiqeD4E$*3VXVa;bf@bCa|Qj<s&jsWYgvon(yUL9I(I*<Wfrl)=4sS`=<!bh<he
z<QH<v&2^50aC4>ITRV6c6l5<~6h<ApF_>S0QWlkvI<**f+3=|0k)tJ)t6PZTiIwg4
z{3B?3%lBj+cXMX}7#lsLEM~oV+WdkpTS_L5j%<i4(zAm36k)B1OdD>ZazrY55ikod
z<}w9Bbp%}+*l$P|HM1D?SK5W;RDq2sjL!AlxjHRaD<)HW!KxzXRb5I<#XeYZ#ZPgY
zQSelb6e(vCT=B5p;`^AKET7oe?&|s^qGzf&Gwd#_MOWg23s|NEl8@yob>-@}?mvId
zFc{=60={Wf5-Rqqy=z;E(uO1hCFY!O%5uplfr@aKjPUzMdY1X4nWlJFOO0~px#^2?
zHAWp8Tdn)o?H79ieQi->i0ZKK&QvPbnJU`~f=V!`glL~lj*fW1@^^h--`T8hB6NCM
zQDhutsiJ+$akvz2`)%pKjCuEtS*658D5~1J-0@o)7Qrdmb!qdqK}*S4wwrgh+8X+@
zRS$T$$j=vVtObP8peFLo>%Q040jG;Us;xr-qMN&*=h;g18SJy1_|XqSckn^!-tZFC
z?{yL(Acv<C4GlXx979Vq27+FH)z#HCHnMPYKV@O*w<2C-6{Bsv>07U?oPwb!nkg$P
z9WM=JsQzSA2JD?QMmoCScH=_oc|F?$>fxd-hDI|&vDPGI@mepQN}(fJP_KLJZ?I$`
z-PafeKE-exm~|ID;;w{-?VX2x&)_yUX5`&0<*I2<0$$^;0&}0w>Ok!&vCvShkmN?T
z$PZotP!1TOV~GnV!Ba_^b6dJTbPb^rcB<Mjyd=|0%JB|y=-B0EEwj1l20e}Pvc^=H
z%P}0L1QfsXJtq|DUAJf7Sm=IqzftVER2f?}o++QHu{OMCES#U;Wjc@rZgStM@$k&%
zwlUAJ@Rxq)bIwWj^vKe*jhE{_K!~TELn&Itt9A7(v_a>|-8vwolvt_@?U{K(^Myl4
z2Wk?D=g$&jl4y;`h9_u-4dd`|Tx^efyTBu%)S_oAEFuW>gfa_{I2`|+W9k?91CAEt
zpJkpm85aX_f~r(Sk_V6No<Uy$v*zbJjls{})%<K}WMK|VzZiM(>dc0DGZQvst5?0}
zlcoiaH3!L#96~3J3j609s(5p=le3f}QV3ci@%)6_eSPix-@b;9d_p*VPbx}GWO6B-
zh^D^3I=lKU{JM}2hB(W2ZV_ek#Gxc;qG;qT+;yU@SN8YuZG#_{W<UEe0Ay~x7pn4G
z3H;a6)0@i!YWw?RI~SHVg3RiNhp7SwRI&elNF7z_)T=G(2c>LgSFL9^x6QTG43}T6
z<N2NQ)aVm?eJ2c(zNtjT^fl1V$`*{zC)saVPfyJF>@o`;V6jjnd$8lC4nm$wm|0+e
zQ!Sz2AJVbDZ5Rb2mL;%nX>OJ)o|7hB%i&>bM@I)MThf41H@cpys~LG`N^0u-mf3ih
zI}PqXckC<~_FEBW6Tig5OuGKpXs#%=XZp;yZrudYte)er&5fZUb}FjIi!K;mn<-VQ
z=vMY6viHLP1Wr<p5R{Tp*nuYwP9C02$<U@?#lLSP+%f;sQr#Q;kkjQceQCWWoB2=B
zCWA`!U$k&C2IsAa>ne_-14GJ(@*j%d@&2*Umu9K-N6%Bq78Mb-vVUVJifb1eO_-|?
z7NYv{@4v07u*1uXRij5FKjbJcd;Ey-99O<0ha6;`WxFJ3Em;3crt#rVn?ac@OW)oS
zEZnWDoABZ;9)`fq=PNaz)>*i|?aDbwZ5$4gG=yaIjYkbsU7B;hadzqD(d6RdGUEAP
zEG&#PG#dMqPdHVZ;m}^vOz&V)iajUu%t7Qj)%X0K)f+V`6doT#3-6kHH=~<KqbDII
z@=cT}A|b!1sKCa`FVO8XQylttS1Vg<8!KDL)&8SFx4cT`7OIydbN><h_{ih8b#p*7
zXOdRhm}ai=2D!AEZIYL?uy&rbUNfPe@I!l>+?O%ZiokOD?)rT+*E3N}PVZ0dnLfYV
ztS;6V)(Z@;JxRm2d)=}@N2j)`oI?2_#cEVRtpzYDs5ael<cb%jBlNqC9~6Guzb6*`
z`{<-~IS&!WmkZRI+LZDE`9RvxGv-G(1~5qQFHMF4H!vt@8uL>8U<<@J1u@nsN8J4X
z)!$0|K|kj{M!9$mhF|@ITg46z3bQ(F42BC|!Ny15Gz}JYQpr$@x=yTgRp51-cLi6h
zy->Q`(2tKw$<n_N-)<FzgyUX8YXL{?ky$-8P0-ay6VuExVqqy>!Nx?-GaeGfJiFcD
z&urbh$g7Z}1u#Ck&XbkJMZ-VWmRr_1R1wqk&s)pc?%{*`w#D_UbXH9dE--6fp2Ve~
z$aj2B1BUNdCPu77oL+`xh%3wfA*rL>{)lXAqI}TG+RClh`o~TJ*GF-<ZT6=V9<{En
zk+o?KbarlRaG#LHM29o#j(JM}w}d%k^<eyDxBK?5hJR@4b$3loSAgTrg!wuX=0LaQ
zArSG)XVJVlusDKkCGgLE>&Obkc|~Ilw9!<>((iZWU2HeLU8i7m7{9cmh)Y0_tC(tF
zEqfDTU~4pRe7Kc}OBis$f284M#N7R(><zHI#i}(qDHw3~Z>V~M97LpGQor1YN4m^v
z^ou7cc=Da6P^V@k<C|_h@<1V{N_CHoKGxXdnW9d?Pep}=CkJ}ZRA<)L^KFk>fCLVK
zKaZ)?i2FcXk_Sv#xxBo*@9rG-tFQH2p2gv_8yXv@Z}@SrJD(C3<MP;`YT|X>PO6&v
zEeFd&8m&%WZw@jbyFVLle(}J+$L@5D8{ktnB~2ig5>OCOVYdOMsJ!WU&h1z1R{%=|
zT@Pq<VMy&$QBmP;Bbe)dK{2;)8)PV58?17#GpHlek(($J=?RD`mHFw~TtFn*(P0*q
zulYGKjKA52Hjg<cXT6AmUhPMT#aRkSmKHT}IBB<gisB|*kRBZ<8qv`_;}OtY_h*ew
zE-gij7|}HR(3-lrd=6URwGoFG$Bz^;HFR4`VpuK461j)cWFFWb$hHELvg_Nv4KUG$
zLW4t+@wzrl_oI(oQKlpdJ^g{?yi3!|&g-Xh5YiOoy2kFabr5?7=|Mh$D9+Qu8{Qj1
zz%xJR+6mKt;%;aP8u0iqaqdE-0-tKC+fD2JOJ_MltQU7E+RLN2Xl3G=8i|em3!Uk|
z<M|(Bvo!^fa^`s;y#wyz9T`E|^}y&DSH?hE^CD#^IkyYwl-_Hzef~VW6IZUbUO@B&
z@<3rbt$<iw#ARw?f6K8SeHrqk&Lse+agigH{X^v}M$1I>UMI=XG7r)<jf_;d`FzGW
zL9*%|_litNq$5)46a7ay{-f2En7PBFGdsKS*qw3rf!{+Ab4NOZ^_G2Dj`|QibqfdS
z&7V09-Zs4AF;pc5%OfFjNwBhCM-zGdO0HsIS^&rB)T}T%*Pqrn?Y{)aWvsX>U|eI+
z8F8>c0m5LDu*h$Wy7LU5=;>B_N+)Vi8wVap%N~PvSGOnK?n+xH8&guTyNlyaov~xB
zil^(V(>iRlf)4ii($p<O=kNrwSgK8=$QJ@bf?lcUMQIoQ$t)9j+(f?H3Wdj^#o@<J
zV}Ea5a$eMkCl<<hxD4etCuVSFiC^IYXv!(ZDepZlt%c9#$o7aP)D;@aD*H9j0eUiv
ziR!U@gkhazLSo{{-dYH-OY`}o;5)+qT;r+9cQ<`!&)ln6voupTOgdIIrD9JVI#$o!
zm{4=*@4-Yf;KXD#No2y6$NI&IeI(lwCkGuUj(H{|qMtdn1VU4I;STb*YDFJEc{`=^
zQ2+RovdaNkIFmzd_apzb0>h1QLRN2XcQCss);a11;!k?tvM1Jo!`g5_ta*QBga3jI
z&=`&-X-`gY4v90*RYD>o3v^FP>gzvzS1IoN5N*+&M8iFjBvQznd9K&#Y2KZsEd0wj
z@wxONNUXt9HXQgkAb0k9uU+B}^!OLvZEbDjRn9W6FWRKP+3}w3x7H^r!m1?upiY-b
zr1HThd$C%GSfEF?ohpwkB>Mx8OW&}s<LJj=BNoBE?*_pbtarn!t0hMEVGzcB>t-~_
ziT|S-HtIDIByCdZR^U0+LJMfmwbsYNN)^CafXuD+k&1=+Y|{2fW<%@L4WwO^y&)gp
zXL9c7uV3?Bho-v{c{<ID?gkA1<f~c0$x$n3bd>few!n3c3p~`@Nx{SRng*zr@Sq^V
zez=O1H7oT#nBhnAX<{3lVPssrOxzmwG&!sgypcf^{mFo=Ggx@hM@MUUV%N0uIWEV;
zuOKki4DFuu?t5|5Jmw*SJ}jS^@I%i!hr>Q@)n-l2%eB_k|0`Dh_Y#g?X;w>iqL@tk
z^(*by$5)<L5NP(RgEumkM$4a^Nk8M)2c2G7nG!9ywOMX`o7-7vUm7kx0Tv&wOPbmc
z(nM<#7NtR-BEQsBIHM$tg$1W)XQa#)Ty`x7V-*Jpw$%D>k>gzbMrd~fs2CaFKjn4V
zm!k+XNJ=fl^f;$o>CZA~os#-Vtt&3lJ2{D9@;IU}|HzmRIbf-SsuS_xh9LaV510TH
zf`VK-yW4GRcE+s1Uk$7~7guP0rs|m?4~_u_zQ{pFx*m0pb61pXoO1HeTeL^Ydu)u)
zZBT4N!|HwoLO8V1(dENOmrf1{t~zed&Y@$5h&E^_m|GXAvREcPJOYaZn070b*xqP}
z^Cs)Q@eV8!Hn+D8ToQ#tLJ7a7B*XW@VB+gnNtYDh$lU0RT^{iJ^r=nv3zeqJc-=34
zSy@U|VM)oGzI3pc-Xn{VjK<b}vZTL0UL5pid!#10P|kvY0=$I#JkDM%jY5W*<zUfJ
zLm%^fp4e_T)lxISVl?YQ0UZo!oqP4F7*cDQJW%)QQgsq^7l%N|d&iFarfY`sPAJs9
zg#8+2Rwc0R>Ey$1DxGMstD~+qIz3&ql@S%CDsEdO<GDz}pr$@HSm5uE)8Jz!xb+{l
ze{(gr3+@O6St2C6$H(6V_^E4Tn{L}hczPFEtVK?^$LPx;&6d7RDCQXTmNlQd$B>bd
zlAckj@Jb50aOaK0jFjFUYwyW2*BIv><!It+Ud4G)DIH;dRiKMXC@MPo^vq$RBa*#J
zY{0?;Ra~OKLv_>lgPY$^)PzANXrP4#a@3Qb?R8X1FW1kWeAM_HHR2JKsL6rY9Ecrx
zhW(KFk=J&cxe9aQ!TmpAh;;QNp^;4p@TWIM%k8Fq9x+tkmY4%p{{=@s3S#<xHO1kd
ze=-MRd~9x$M47{Zg%02QsUN@w{w}9sGbUdRzT6(C<&jnU%nxUGYhF=+>czJOhACv*
zT}}6EQzb0UKu=V#f`6Osa68#wu(R9oU%^0_^~~<(oa6rbQg68!%!eQW+;}iHVFFxQ
z0}oGe0GVdnb=lx{<E7G6tfr6V9RQM@eMdIz;BA_D;a$n9si)6Ex-&=^q9NDL%Gw$m
z&rNGXt5XttZed}dMEyi8j9xloJ0I|){Jgw0rF_};$X8UyNUI!>*?~^((?0Fc=V18`
z^P*diCDw;BSp}kMhq;^cOHd5a^E;OrBUWoYPvq9eQW=DrW?Qe}xh;Yrx8z6pT#d8n
zQYuj?sX{{kAqm*rseE2_(XE*$=Ex#~$nM!xl@gz&bX@41Z>@<XYOe3zDU5t!-uP!-
z561b07G^9)%rIQ7djLxQ(LDET0Cas3_m!1p%f(r=Ps7YSp<j>LY_GRO-mxsAoYNHw
zyvuIb;rh<YD<EL6|EcQW)d;?cmXNbB`hE>X*ST#NZM5JlbhekPC(A~By?>3zX8b2#
znd!p*OjF<;=E46XLO$4jxC}d%^yWSY5rQLGRP<YdHxy7Pz}rcPMCW)<4xCO7rS&ax
zpJ+lDg!11?3hJLl1qG2uJGN_2epovVK8}mUXMaqH4Z*;>8(X?BKFMf)3g@((>Wxd0
z*<`nAEZW?(GARd{RES3whs}ETTq_CxdrzBvsU||=wzvxY5y^D9mIWLtH%^|?u2`-&
zuBe|4x{dB@i;HE;ogok;d@M=r<vtnb)^yGtbN{QfoU!B6oEyU}17KtV`aY>153oz%
zv_AaOg${|T!BsByJt-c?TRuIhlJgfAB;S6`BxAI~uya~qXHOmYhb~hIk3cJPrZ*@=
zg~c>?BH|xL$4lfIdTA0^^Apu}|E?o!YVp6*8q>lb=r;U^944#tkBs8VcHPXDnVA`0
zZgx9KvK154qhP|PziACSHL){f<mrfe{II<!OG7WkWM$Dcn)R|jVhTv8;H#wP7PTcE
zI|yfawZ;29qm4b87>_6Ld$2&nPE!5rI`pV}*@f#|R*84=ln4{Ik6iZ?CR}BHhU$!s
z#wORqx|1E(&R!H3uM(5lSQc6deP0V!{JMI!Z>;=XlRo(I9%;!Bo0FRt53|1P|ItzW
zZ^g0n^c^iMETMNVD~OUAIUhZWct<InE{7R#(?-y3zLoV*X8D-_xzv4)uvnSP;UiSy
z3Xx2Xi8iefYJyRP5#*f4p%L33-S3#|oEKL*cMMoq7ky~Hzp)thY7xM9Alu6{U#S70
z8#G-8x)y#geBlX3ncUT;F4SXO8f8cR)1uFb!P^Me$+?~7;?M<mPZYktnDO2-{hLYz
zQMvU}?<7S;Qn;Qa;&?}tDjSbqq_tYh8qpNW(*_NUMAgq(Il5N=<^y$kEqrSYXYOST
zEoh;R_ejgierz6b35KCd3JaIHpE*xiNF6tZ3}3L5Ypym_Mkp&|Ms@}!_Z#*87{WfZ
z_6kvIo0*#TfKS;d`iA`$<I*M2q^2quf<Zsnqs#6tPERkdsmH@Q0(4tk930(omSm3$
z_NSIU5$!Sa>r6wDLbI&wKbj7o3y#gyRM+=cFiEC_f|@=E8Ev+|)RS6jIgz25%M<_5
z%FK)ouG1Haa<v>fmEBfZ+QRfF@muZZ@B=2vWKV%Q^p{b0lCrGqHux752WrN!nL%99
z?Ck51{{9#MWNl}EO}!s~wb1?(vjz>#>6WqzAS^&N4-FkY5f)31U^G@xQ7I5tNU8vJ
z?2(5O8z*NEOy!<W<owAftZen;MFXuFk?)68$(UzZ@I;%8l#taK#qxT%&$Y~f_Cr2x
z@@&_b4SuC1Z-C&;`c&Nl&aAbvj!qW+^xVhSI({Ew)VYGOoy^SS;tgegvDh(~J}5M3
zPnaXobd}l7fdlz|?+I$@<-L2WU>Ia#l2I*4a#oW16MBf-Yn8ugfcFT4EZkso@Q4Cj
z=qP@%)I=+0)eMRssarR79)8<3dz$?En;=1A!cUsjq${8+xj#Wf%51V5fluW3N3arX
z2{T6sWKB&qyxrfMqaOA7B#y(5k%=iNyZP6z?*_QR-2V@AEZKaWWLKo`vU<7w%KDj*
z!@Ad%ICfr#alZX(Wr5y*#N=qwKf(5yZ=$}wY;;&!GW@O_7_#wgEkHPo6Nj7@c1KT7
zp-zLJV2CRZ5(J^PXkj#Wh-e+5ExqWfrGLQbh168T2h>%NxC6kmIK|mb2#@uB=;@UC
z=^k^W6P7FQ5f;#VXg~P)3}hmh*lB!ef}xEgxVIaBw05$)Oe~jZ5~nf7RLJNN!yShH
zwiMlE-Uj003=DWYy3=3D%D%6taL8|}0orRfg+<~eZawTY^^^TnNi0%z($QqGuv?F%
zLPy6u4S}b>-<o^D(Wh32^93UIZq_SxiSvwPXZ)t7raW<B-@g5<l)n)0Lw76|mRsq%
zH(!0`bFot?u$c5Z)}@$(tX{duF#?qEeS<?oWbF0@Vqq3VT+q|Id}ANVdt+L<&Rw!L
z=muRb2$uDp(1dJ3Q_bI@!RAg`2B3i1BYm+H6kEWzoK*e}=u~g_Nw*BNx1VixdH8s+
zygxoa(94_p@;`m~Y`&cWkR%N|jwzlR<C?Wk*7Bp+t!8JJm|%nM(3R@0&{<nX!hAq<
z4*Wclw|a1tk=ljL&w<pCXw2KGr>M3!FboZ=Q#lrkxoK~iuXbrb)Qhn)C(^lyFgn$#
zq$rwHyQmVIdHO^1{Yq5_@@Ht$N(u@ruGN19j^^HP!Pvp%%P(V-I**^phG2M>tau+m
zEbX0Q%L$(2!Gw<kdD~S7CvaI$vrp0h`*~Xl7J<-(fy5Aoi`k=h;bv5&4XFl;BB#vY
zju2gtL^f<7eR!R^)A>iBoncV^@w202ytUP|>zh8%bT-B^UHJG$6CSO)_JZP(;vDUq
z0E=L-TzACMW<H-=+GrRI0shCj3qMOChW4@KaR<Z=|F@l0mPp8i8}HD_h{NW0R2&|~
zesgM_YLVH|e>bB-XPg`yckt7N4mu#QO{03+!H^_uw4{T>`tY|UvV+5IS+5D-d{O&<
z3DK#k)B3@OU?Crii;Mf#ty^h-5&KVU@LJWLmV<p!<LvDmjjHaP7?#bHN*LTRs}%QJ
z_<zQ~jM-Odx06!MKkQPt&~~yD7!t!-48A%M&v!^N=;shr|6&0}*OhFSN4=aE2dg3V
z&Wq23$lPpg&N|{K^Vgg#sj838sm*a60q^e#%DTJG!Xe_X^pa93cx;VoYTg~+B~={(
z&%%wt>HxRHy|Oo;n2P<tt6pf3?c;-`>a;$3RDE_##^$&=RCu){MJz1GV`GT)#vQxu
z-lcsqjzt#;C^!K!eA>`Ik|B6bYN8OQfKS`+gAnJ5Le?O_JbtPgBe%oEBHFNtXw`n$
zKCfW2SXM$E{^M|EX=2inj(F^ByAllx@DGU!ru+B7_FD2|;Q89X`O%4@y~BVzM&eod
zo4Vtq`g%K4Ma1VYO74;%H<x{gF^6!5`Ib2`fMOCOW2=ta4xLn7T}L6CZvV8ZLcQX%
z+)&~l%d4)hAE7zL+TCzjUsdLK1}$lGTic6D{t$QJqIfr#gV9R6MCHPHC$pF|xs0|p
zx@8}HFC$iPbq7ELTw!kA*jf$KG+0FZcE0rPyVw9ZVW|hlY2o=9hs#cigxOgw1{Mfd
zg<Wc9Z<B*5R&Lk-(eiJAmLC`SwbXb7b(o)M$oD=d=$pa$J`!X)-ScUvuEgJfEcNhc
zqkYeNP5I=wP}|)lg08i@U@#{m8EHAw7|^OL6|x$~vtvG1QVhApt4GX9hJoZzUoUng
z%AuB5a(RztdoXtv++OH?%#Imrl!zJ%WI6U^ay#BdI-Ix1+Kv?&7lPTxhs#(8%R{;o
z)m2d}<^}|pS&h4G=QfZO9FCh+2gmT7>kj0M#m2^7;AWNg8$3uK-XtM$foT&+du6e=
zmI^m_cX7!B#jaI}hR}`-Drq9!AMo(RI*kN(xV=3)!vG?1SE|t9W*hHclg&ZTO1yPi
zp^w3oyH@75!s3+<g3C|q-}xa(SoopN$iqifmA4G6t-lFVTiaSEXx2jwZ<Y*r&_5Ph
z9JI8{bF}3XTs=m@Qa^uQx|DG_j_1OsY)|@Mk$gC?F{P;)Kgm3$qjNr3A|>9Zrl(&Y
z&@><ePsZ%dU&5`rxN_e&BL7F}|CrTG7)vP<%(YlXo%KD=Ydw8-U2=I(zUbK5Pv2=d
zf(7kGXz28%u^C0$b{)$bYIMZ(YDU{B)p8<IcVfDuOA(KyQj(H(R}RKOfsx<?_*<Ss
zC%G42?UYsZnf-JPI>sR9$V7$1L2aG1pD~y<2@#whujDf4qRM1?tH8BXz@J$52;>$Q
zLaBkXuMy9*e-<Q*DP|uBwLs^Ysfn!pa-Rb97g5lczh#XF<59sdjl_o!-MX<b`=)oC
z<Pzl!9#c`paylqbetq`Ef03jMVg!zTcE|h^s-dUGeT<WQr3;h&9T#+}jQP;1w*LC{
zY&Am1*u@1)lzD|!uj5Oa>%#uil)u0UkX%hojrx|UZO6koKcRqo<iy0GE(9q}FP+Bz
zUyfXfC#VdPTVz%LwBbs3ZY#y0znzv5-Fa{u>NKf^ju;!4(AWetkTE{^<kV}jmlMMY
zSxmy{dC>K@hCVgyL<KBEmALqQ$^}$-nGOskj|2v6uYSXOTStC=pqObN!?7}O&bo7&
zqs}?RcLD(|+@oYM8uOvxR6<U4=VA&}Lwez%yV6y=0rq&^VQ;}sih|40=ua!=0;WFn
z`jEJ^N(PwFKx_h#ww=I~DcJ-(>V&k(T|U3*)Tp{MM%X@oAfmbYr^gKHyglaB+GE&e
z(p_}Ns{)SU&QXIAw%gLlXv))(A>S-&6?-eIU*^K_T$_&+Bf%xVnp8qUr2oKXUi?>{
zln<gmtc1t9*U0%7p|pkWcWwkzS|~J{zye55c{7v3Mb65|_|s|(I?OH-?fs;!zuWJ@
zG@BOTgT<jJ^tbO5KjjF^z5PU=>|sol@@p}-f4aec$D&ZH_EON%)Tr4=Nw)jhG1N)W
zO+J990z`YCEcyjiQXp2niqT;`S|~oyItRS^B1Xi-nDT%O361MTLAB`}EO%w_x=R9G
zI6r+@;IU5qs1pt{j#1vsxZG?>rzNbr6HHD@%|=9IOr2GZ!LUW;H;rD3E3Yx2X@ru9
ztIi9cwJR;Mc`fnZURGdFMsST?A_O8+W06){<J^#QtZx1yDV<j$(a353lQE(D$k5P2
zRm1<X^8)ZNdscC2HvM{t%HAZ(b8DuN(QE9fx9)f6|JYiU&;^NEs+AcOt&deWfW=vn
z{s?}AxL`!|g&UX2?*jc5Dc+OQ8s3xJXw-kDzX-a->svp{yG{61tk7@j;rHgC$E59U
zAqcQ<Xat?~h$Zs*JVcGqpV?k0`WHGl?ae&ooftSdT_(n>fTy5sYWptd#lrG#Dwr=i
zLrJegAxlR_Oe{#@@jsHd9St%#m7-Warmk<Jb>-ULSd%vCeQnMT4U)pZ_fal3YY)@)
zey&fNOfR;;s0Fr1Ko<6%(v$mS;k}S>PvW|NvF}}b9a`=dOKHEsyl+Cva`Xd6JwLKX
zQj?PzF|`lnrM~MH?Y*b1zr9Nx7CT}du(a1LsRcRL$9Sq^<!&?^EVd6N=}PRa?fw0n
zTf&=0Dy((*UU;=*{>WFe7F}M6afE_uFnX1qj1%YT)!$O~HP*Jj_72AupX)l?Zpc(f
z#)LkNT#+hLuGSIg%Xk;(&Pd0|SOB-u69v?G(wmvIv|mDjb=9clOn8#=+j$PPHgl0@
zEVFgB@F;-1?5N*-goon!G~jdKL>v3urr(DGzuI+4wy&lJkRjA&T`<yNL!;1M-PU%u
zmm=jtje$ubm$_B^1d}IwyItjn>)6NqxOw5(IpNj0e;o;e1+SF3QWu|~6++gsjRNuW
zFbl@RHYbr1QJ?4edzXY_y?ybM@ewb)KD&!pbTK4yibcbN(%SNEkoI15%-F44x;y5p
zf0T7NFHDO>pu=R|88t8w41l<bx^TmRju<Axjvvl@8B_XHGu0^P=I-SC_YFT#$`}~T
zmrl6ycUgAWf$n*FdH%<8ZXZ}lF-DkyG?ws8_6&kiqt(?=$EL-F>r}IF2I5^AFVF$Y
ztKi8M0y`Z#+Bos*tP`mA<uO)_HsV7g1_%kjHUb~NBaqMXxd3OZa2H*&cDtoiKzkhC
z6CR%N=C0bbZ=Xj4j;C=h=Hv6kw{9io=H8sN?6uxX5ZIkrnhW{=7<=omsM>e!A4Nn-
zMFa^!MOr{w8j)^E2|>C+Nof!<Na=3rl9oo1j*;$?l#Ze6ca1*J{=R!3zkR&#`U}U2
zHEXR|_kCa2d7htZls2zxY=Ah5oSm5o`SdBd9^+1WIBI1~=kUiki}I%Bkv`-5*PP~0
zeMEhFw9DsyWdC^Z1w<Q~o!S3Hd3WCR*ihKUrB8JZzz~uwdiQVN6YT72Kc^luA!nGJ
z@NG7*A`ER~WFwop-&>l|6Mg&<c~8byq+7gRY#i(GU^Y1B9^JgZ27GvO-eZ(g#Wyop
z9=i9S*m5k#lb0`mB<%p}AXC4$a3YF}*>(eC-pua2ZdW(KBfjp?1g~r0TMfL_K-%~*
z`IQ+HgiXs)qRW)rcOIY5`Z=Nw@vhnzUV5+Npe7nkG6vl^2<m{2aE>1pPz1Rxk@*s_
z(D7Zw^#*4~Yu1hBKR8OZ+&Q0?PzVw<Y2|}^Ep)nVTiP&`4fTttl?~OJdalAdg{S_)
zXYzN%LRu`cMcGC3Vn8DF%&W>Eyge*mkpjh>;*tSlUH-;-+e3Z|Y7dw*{8`;$`VkQl
z-$V0=O4ULCivJL%u|_G4@NQ@|D$}<D<7{lM9HagPha#Y_W{<M(Yh^x$_#X=^Jmyv5
z_v*F(F{DMHwg$cn7ydCL)!g_~G5GUf%Kde8ZNVAA2Gn!lI^s0+>hk^fH8lfJdB@(r
zfa=|YI5_t%+TXvtoGzjw;QsTXOAUXXfwn0x{GZ6T|MNl1Sm76XcZ*?Fu=$#wIaom^
zM<rXuT$PI{LfTiGCY}24KBC!t?7iY;WogMl8Yp^Cubm&uwMm~$rYJgfyt5N0hC@c|
zdSUEYW~xag|83?Zti7OaLK2yD4G<xuD|N#$rn2`6Mi4{J=$}i|V2PbH`>P1!2-<L0
zS3WH13#<!p(xfCMYd~M*=0>he(=*mOIQck#kZ!IwU|6M0GomDrfiKSEmN?nEv2<^x
zc48|aq?#ieXFg}9PsiOu3n%+0IbYHMzHf2>C^=H^lY>rE>B5)XTnj}-CUx~F2&BX&
zW>!Qknjm93?$ak>y@yOO#Xq{gNzoCer{C|GSK1j$y%RI(jHDve;N`7uH|j0zH$<h?
z)3(W0T)XmT=Up!miF~|-nT?%&fc}D*I4U`LH2hdjN(%03mMSWQjXi^)JKWjZ%Xs^;
z+R<uuwoLD(zW%+P46yxi<8Oq|y)6yDpYeqb85ryiX%CM3$dCTc1wC1i_*bD}DXRhr
zm|<bFe-9JCfP0~?KqG|gLy#M&0zJ>Y`umY^ivnPy5z;a|h#3bD@W7`qa6{$mTMZA9
zNC+rRK#C%srspTi&=uN|RPFqlnwFaGPw0NWnCH#Eq5GoZ{KlvQ)w#K~>q&a%<^7!j
z6xootm<qE{`bt;sU}MW$+OVzzQ?roUE$LTOJ2abzZe&`=U!&<V4zdQ8hnMJRiT6vx
ze^{;!e22?37bNTN8X-|BH~{C*IlxIa=xe+Bik{x)Omy^@A`VZh2wgYYvj^p=M%wXv
z;gt|?aCmfN`>3;HJZJBLsg+dzps2XGPR;AP%*;Ump^BN3M0-G}p{X@SP5pz7+N;XJ
zajR8QA%qH8(l#Z)BnZ@0PBU(dj;2c&k@hTL9iv2PeP(ws;4VW%B!aJ?+kP4uwKNp2
z^znm?A;AL)i5Bqq0YVK#wRL&FYEBBDJt$DgR)VCYg|3<H*Ki*$YKlGP1lic^`tRG6
zWLCCZW^hu({uj|ReT3hC6Fu8K8kLMf3^~G3(syp{f@DB*eDx|FEgH|@p-m7<X|p7m
z@wTa@?j=(M?gg}Px<K(8H{>L6WHyuU!kG}pqYk~!Y>Sq6$ntfdq?E9y*!_5KHJLN^
zT;AIl@gd`~Qg*!ajn&)nO3DQOMuWLE(0wlLM=7;5{}FmAii+XQViBXo`MKb>&W}!W
z1uG}t#KPF2QCt`S3uf1=mNamcIBejxeR=$EEubfuH4c>FA3d&<k?l->TZ0zR!k}zy
zgqeYb!r@EV4=9H$RM_&cZs10>a)OP@k<K~(V!l%L4ql4PhkWq*ncH?BQN7<E8y+q<
zpYUc47Je}^tM$<XoM3~gMv%b%pu00X+A=0FQr}`RI{vMz8B}m!tI<2eXsFUI%<$?l
zAK}M<Oy)pMrZ6cv!D_pfjDP^-#d&Xy2u4gd0gvtR5g}#GM~fwFW|8T`eq2`Dr~w8x
zI^Hge^ETCwhF%>D^gmG+%?E|Y1WzfVBYi)33-H$*;omAY+93@?0C1ux0=MAOKljQK
z*~<;F-xHELY1G$NS0Q*Z`b6FvESV;yDYm~S=!cXHVQ*ud$o#yW`8_~Z8-3AyG*1=0
zbc;`~^CYF-|5B1GaPh^TUGP#eymwnWo@5##p+DX)fmZWsBfq@2^-uwmYI>&0PX^iS
zY3v6o3=z!%)!P*On@%9Og?w{($MLU~00R2QaJi6x!F27}hX+h0Y}BRql$)Pvjs3I$
zgq}WDYx7`tTMrM{p0BK$%X|JmABu)^bBF#XV1>4~b6!|ktxZpV3JpD)ns|r9)(&Yl
z+1c5Ir@*FQPZy&jG&Yv%w2a@uS)=rf{$&2pmB`l)kWFSisrh<jp65B04w60KB4uMo
z18qVRxEfhBkSn0%l_g=H8Oy%9wZ*93$?X|YwM)9^x`FQMDk1K~-LpjeG>$8u%lY%)
zy-5~@lu6l?S@2I){aT@Y8uuu@O2x!GBQHlbwv8|>09pE+kBbbWp_|#dvMe(%Tk<}0
zc~`vv$a;ldOiQ5Lhhx>s_oViBaz#dVw{Cbmt9rdxVxoW=WMQCGQn?rQBH}T444>zj
z5LSOBeP1mtR<NU)tHMAL+*0F;QU`ml_fp#p!+LHUFpmq|H#{u|YdHToLv%(P@@Snb
z?bKyfV-ArW=hdE}f%(r*kK_VIfBdLvwQ>MLg_av?jBp*Yt_5*|riKRXj~3rcNspY?
zIgVBGHFu9|&%f#BMlK^*Gq`Tl$9Wv}Z}nvc^)`Z=59-wAZokJNIbk46Lo0uf|EuTm
z#)KBGlf1C-fOw$RCAHjdv)f5;g}_pzi}a^!yztt^83H(KLF5c(O;7}2Ulp{rjTcD)
z?eWSl-;#F`At4GTvPp)|sIEOLwV2}hqA6!%Gd1`5vp+E+UeG}{U#$e;_rF;Ty9AF1
zzP7RUJYDR@APZQul-xumJi#W6X9Jjx@CA*ZVmMy(A{`Z734GjkuF_E#m=m8v^AFke
zBgu5*dCf~2CZ=@FGU%nefAuIH&O%QKkq9;|tx4Ut@+JBl7*q`@;Q;Xr^8wfEnISzy
z$6v&V%-3}KQc7s^?3{Ki*>>LRsR1fovet3e*0H?!)r~ch4jH0TqMN$`R(HO9Ie6Kc
z`84GEP=Su=&o3J17buNQ7`v0OyLnV9wTXy{m8<1XJEFR8=^*06!%ZL6K&*4B`t_sD
z$sVe6@TaVf*?bCCNQaVMZwXX+k;67MwTwEIZfC3hl1@&Ad$+58Qar0R#;C5Ut*w=f
z+&y~zjxNFvd+`Y@{AiFYJzW!Hqod+Z>UMvc@adA-;WF@(3q^wU@I2$0%Svq#v6AM6
zFB##5hfG$4{t$4@TVdkA6}Y_mYmeh(3(P451f><xV5R%laE9yE_4xP7j~~Nn5_k`*
z=nLx;kjh|3;j+<`ds?MPN6xx!fu*>3vKOY5{rU2@Z|CxfY$eYAT;P&0P|rNsOvR|@
z2d_$dIQiN95H&6tCp!sRSQptj=}{Z8uE(iBS-suyC=jj;3=D9{>{t5*=(3ot5`H<C
zXK3wv08K6RffJ<O`S>V9_Wnmt{Hd=VzV4Cw+Y3yi(9m=zh*r~mbRM<&(r1gq(hu!c
z^4CYaRYxi~9|8kqrTwC6TT?xKP!~w}J%|`9ChTKf0t2Q5Kdzj-{EPPVUcV1A%xKJ7
zcMGK>x@Nab+rrU!2}(THHrmH&otc~E0HLfP^p2B+grx2!BP+(MnG?@UYS@F3p&<l#
zc6YL_w3orfVlz@283^fc_PRm}afYv}js0XsmZA)ejGiu(+phQN3b`K{E+D43EhgWw
zRk$C!3k!u@SAftJF^eMHi|7_LuPL&FJ=%Jxj)N&iS~6AuqYDnS(_P{?dA`1hMj6i_
z?!fnf9=o$!x#SIK!ms`xG`sV<QW!rr+BqBG#}F14W?RkvP^=!vjfmq&u_`&@F+%OV
zy&y0JZ*FDJ!AkGfFB&4P-?OTAinB<h%4s7&S~UIMj`oqdyOnt(p<aVCMh3ZetTSZ>
z@@;J&IYrB2#(S`ZZrHx@0K@Z2zZDc9s(TFTG^$;iy5dF)`)}4T0<w5*cdzg?=&#}H
z^yK3BxIlcu^WiailEm2rJN^NSetop$R=WL_=_P`jhbXQx@Qehb+}+Uo&E=$>yU?Tf
znU(Er8b2;EL{!oBDdr#9NkLldQ|ffL!soSLU!FZUC0D7OA<{+DPBUIh%0R4-<_9a@
zcR5*_fy>x>vgSMC4L>fkY{ke{`XDd`NZ@UpPq8S|pRD&+Vy5vi-vOsnyS51;;{%Y&
zbp^@U#s|852%1`gDERGP;-jNc2Y1ZFr6i1m9<(A%-1rNgWiz~2E+}N_l6!S2aYOp@
zGy15VufCo|p#cF+{vK96skq0VLQ_FxBrf_kF2-ek=g@ileztIx<4QtI4C`^l@6Z7I
z@(h<<&7*yha%+AF5I@>;+`|hP0sMGxs8X3;AukISJ^~AxKJ~7P#;M<=NFfUx(70d{
zx%J!@XhiLeX(HAF95y|X1RM4r?t*_jUvHyUJE-6clP+z1obgAqC~BRh2yFoIs!CUg
zMPXBX>D!G~Z*={G_T3v=8mwZU5+hxfrgioff7DBS|1Q!cv^A_`Y4w^oJ@uM@z5$rb
z(sV;w+3qCgoY}4{BFfHj%!jfIZFDQFpMd`(HfLZt=yvsr1syiWR<+qi?fC`em*x@6
zwfmS(E0Zl>dI!4&?<9|geTgzl&z#YN`OU%M;R+b)hwYaY>XkM-m)2+QM|C6#U=Imt
zv1j3>#qq^n@Ct?BO0FUuYCxoOCA5txD`VOzU^Emqw^l-0B{lJAWlwK8gZVI@x!mGa
z*N<7Vin!+uJANzNrkZUVWo_}+lV1raDTzs43Z=p#!F%j_Lf1di1mmGR`MReBE8URv
z3~SRTB9WQe>Iyf;BWOi;L<jy_zCFf;L&|S?@PT!xz|_X4Kf_AGX2TCWbNX1!%rHyL
zw}9IfcvdQ%cce4!_w{vv#RTu-g>&R@1IxH4nENW(nx|niX#g|cooh4Do$`Z_V=37W
z{sR*#hck`Ua&cuxFE(k3S>A&4lGA)VpjMg$O*(eCotO8B1hwWg3Ra1oSN#@y0ewND
z5nTH7^LXM&@#`o*4vFk<0u4V%^2qRtt>>N4WZ|NTy*OR#X;V^OzTUIr-rl8DzIRac
zBvQX4Lr!Zsj!BoxW;jz9I%K#wd56>A63TMbJEJ+1P<dCG7(_&nQju{hx~J=`%zACZ
zx32R5f*l-JCJW6<hz2Y!u~r>cK-lqknSq_?kB-mQfU0eu$3DU*?@cj)wy7A>51=ts
z2FI88?k}zkF;`brIW3Qud|bzvthL)|5UQr9Km~+R%ia0Xa61^jSUb&8K!$?(Wm`5X
z>FJjaedn=m?OCmDg^zUvqOEs|mkZ}D>d4sx==G4yMa4yOa`K%O^Y}t%Kp4?`wlj-=
z1Jq72BCqUi+awh_W@)5+?*OwW{yCj;>==*VMQ`DBrKkLDgpv9A0!fH8v}k&~!9gwv
zui1LVT8aDdm$RRP8EuCl+YN<EXGyl+`vh0f(bE4$F6rvS&Lzu2>h8g4#I=R|V*A4?
zM6=t`^3xzi)iA^?xkCnp>GsNuoWdK`oHiq@$MoSa8J1O>cC$<YQlO5(mUw-DHBkY~
z51ly_iJWOn8nvizCWwYU7INlDZg|AS#XFQ~ZzB4qpwKY3A(z;#L0<9L#r1P$#xRkg
z+FWW$iJhzrqv7)3xgVO}Q+i{sj)t-ykgWmn`1IwW#zqT0t6(mQ`6W!2YFPpm0k|)s
zwlHZ{YVA~#>EcJqPtB!66KZcnY5mH!8GV~jYoN){TmSc23yj}{w<mZpVsBC&e;=6e
zr`H3@o9UCkb0oBI+zoxSJhfb<P=fg9<1qwJ5@>0gh>ZwP>txvIbeag!>a8k_BL4q)
zc7LAYR}d}IoqDOkMyvn0YIW68$|a{d(}`6FU-o&W>k(8cUi?CZa>A`V^yz^j@;N_-
zX7InTxd%-7(f88i?T1bUCDw`mJS!Q8K^RS&?dlYFytrDfYEe%Jk;vVq0+A4EWx9JI
z!(Fu(9YmhbRO$YGOKkx0JxiwOs>Xjw^3~VoqqL0N!cL#n8hMl2Ak^%bJCw3j4hx!Q
zx8B|Zt#)d{KfaPbFP_BN`Srph@iw7Tzt%hS-@sRZ<+ZmkU3qbF(eCHYmueYrBSrJu
zjc4`zURUzhS-0Kr&xaa}Y%G17B-pV2Ie>&JALDPtTVyU6c}<c0-)V0DsVs%!c})$5
zWtK!>9kqdoH#xw3v{VC9Bs1ktz1z<dA8A0zHBrDNUdXe+{6+F`?=}Q~qCT_6UD`1+
zt2Y{BR1=lNL`MU3V%NR(+ng??AP*Igm6J<1QnDpr!t{I?{cDERpykg>xp0<9%gZW<
z66yh<yn%4-T<A8cB)`XrmY^fNdg&r86LFqtXh6XEkLE#e16s{C<Er#kIgn}6(3(A&
zg4kZLLJo&Sg6llR2-?Wb{1m85+NSImwx)mdg>HvCk&%%g#!8_Kk+cU63Y456q7izb
z<DaE&<mlaTLRoC<?Dj#O3zUHKSp;X0yu9ql&R>k2AN^Qfetxy%inZ}9w7=s4$acZ2
z*a~h@PXv!l*T*YWbSm{Rn8wO2Rv-);C`)NQiWCR4DNk}QU#1XrqkHfmp!mmF`Nkv2
zF~qBf#dbKAnBP19b3#+zK?>jr6xRg>;UOOi3JO9X!^kA|^MrqE0VO7wc;sK9*BGVl
zOCjI_p*wxkpH9f?ZobqgdEK_1z~{(erCl#pBL4B?)xHeGi)6+4`1nlO!;lMJz4wYs
zZS4xDwTjGNlvN>TwTk@Wv@k*>I|-9W*o`6PXm>*>*(piT-c6AqqTFWcTU%Q;aAts3
zUQkc~$0yYoA}7=4DLu~~7qONhT3cVh0iEu0-AU2?c5&LRMP_6Iq=Z9xB%;?h;17_@
zLZq?GbsJ&fo4j1-n=?MpVh|M*dx|z*>#Bf_eHXoO*0wTHM+YRTX>9IAae`LMc`-sI
z3Y>ohHo#EQC~@@3%%s)g@%Ub0f_R?VPQrfPLZO@-8~om**s^IOTv(^nFh=oUR30h=
ze738GQOpyj&d7u8a;vctR6rC;x??}z9Q53E=>X%u*>U<!TY?g@EP-H@Z6>`@V)1ka
zlr*Kx$DexhJJiqgkbbgwuA9?$&&eN&tjGhJudzoyY!C<+AS5Q^K8pjCU*9dTNZaLd
z@M!*8UY3uDDx4e#5@A?Im#LOSaFRU){X^=1ZsEkzdrHt+gzI2isd%2u`#()HyH(0a
z%54@qTk*{j96y7+9`{~@3IP<g&CSN&zEgvrC+&2k&RwE0L~*`qH_m(@r*VC6ntgG1
zVtv9XS&3Tc#_5V9cI{gr`lU?BbGiwhXPODUkFOQB8rH?k)~?)M$mc82t}e4`u@({%
zx}1!YT)%0(J}ED6%@D!M%DT5TTOCX}B_kW4o;}dbOhI^A89l>v(zCu^_|8|S4Qm92
z09~Jqx3#t<IYtG{BJl7=XY(N&9C8}dz7OQ8|JF4f4%>t)0}~U|6WMbuUCGSI2-O!5
zu2lYMbITaBVZmW_V}pf2!<=Jz)zS!5Bhc}~CqJNNW-fT_b3|z0^VmhTe2+rJoRf;k
zf60{}y-+!KpxS8-h(VzCa8d3T)g2v{8Lg?Qp^KfUdF2ksDY}rl7d=Wjmi=F^`dax2
zElm~3b>w)fR_`xKMd%m3Zt!~SnWw$g^XYNK=?Nwt>B$k%qj3EH2EL<6^RJ5fZ(zDN
z+{<&&tq09?ipffUe#`7uT$!m90JP#n#YL42yZ6K}c$<6DE!6k!ikX@`5y9a$wjI9B
zYft(ggAbN2%HYGmbcqPw1rHm0WvF5wtVs27Cr_*+Xe4AJ7(LDfPTIocZ;vu-KJskq
zy%`guaeB1Z-rl}EoYK`5$8DNMs1roS?fBx{1Ey-E+dYcQevY<N9;XuSTZhC+_!~km
z6uWgXPqF@EF|sOtub1T3Ji7zTw$oYsDO}1e9`*OP|4$6aD2WT0oX!*4tv99{W_N7&
z5bKf531iij&H<-N)mk+2M?rYJHB*HMryI1giQ5K&v7FhqM*+I>i3b&8CC%^gD4<n%
z?eer-+H|@3i`z#f=l@&oH1%a`pl`xW!Fjp=Hz}uiZ&5!)SspExm~Q=o2w^EiuTY>J
zlsevD!n}0pXCr5>I*V@6n^gTA@{@0ODzzseFuCvBT>zi{DM!oFw~=JaGAt-3^N?G;
zx0e)r_(c<uSbK7cZdjZLva@)8XTOU+aP95>?yE2#Xei}avrpjHG3$JMI(P_NM}MNu
z%!B35N|~Jn7JZiI784m0F`quAN#L6p8a~i1e~rvSWN(Ag-sf@+F$sy31UVgZz7qAP
zwHZjzAdG^flBFciJy^R;WO*KmS&n}Zq-T9KF**?b;`6Pt;`(|oo1&vaRRBi+rR6~?
z#j$MbZ<?ylreQQ)gL!9R1eK$<CB}E}X5zXYn@kDr@j^!N*k3%x&rOZ6#`T{6DLuLo
zx3%>O^K1mdyGuMKV$BE4=hVz>OFbeOLE-;&NhShX*GoP5?6oay)C5N<x1#YFk*gD~
zTd5d8<^U}&imBnloH9`<qfRQd)QG8&^setNIv25(A&Nw(W^A0%Mq!H3dUoZ&?OOz+
z`epoO1+w1Yw|kp)wXW8aRXuqcb~H{$XS>zZJoIM2DrQY@1aOINu+J`<mEQO-#GqMN
zCu!L`+YR$F^TwmH`p)kp+neu-dRTnxK7M>vS(Xz2kTZ+)S@lm=XrlCjrzlso&||wl
z8wT^el_73On3ap;V#{8Iz+n1cYXc=M;ca0iod=a#6$SPIh_SKb@4h=>G;;9*uH7~z
zCV(#cfk4=RjDDf|ZaZyXy~e3C^8?6P^{!|Wx(@dl#XRW~ax)K)IF`=EQ;6z4Ibi^K
zO|@R*JBZb*bUVaqx{7Qxr830x#ZpLo3%I!t-rD4#8uEZV7#eqOqwaAGPy#McUK8dE
zbXQAPD%wd<vVOT8o-G&0sZ19ht_~3~`edMCdI0E^d8ozZ%1Y2>315v32(S<NptN<S
zijH15@wJibOL6fw5?N!vC1R{bl#ZmgWBbQ^Buj%bADxUQh`sSq=sKBKH=p`!RsuhR
zFYmdKvUp=t_3c%hxg+hHw0cMZRX}dxY9W_9*WyvPjO@hB83p82KD|DN%fMd*2>XcY
zuV4DvirJx4C>qJ-kPyTzWwzeFoh7}Fg+L@9?`_-l!7efwo>TX^ZX;RA+rqwlfq?pN
znF{QcKlg3EYV|rq!2BhgTksWw=()7h#;BC<`KiqUij_3ihmb#U1=Ecf;U{)zgx3yC
z2)KoY{$gX_scelTy-!X3wHj98;y3Sw*1+hnp(6mf?3MN-+h%<kP8);n{aGx)zb$rL
zBRx_!9!8~3@2^kZ)Vu;k8-@5sZSvJXkr@!fChj#+rie5Bnf&bp1KXlM>uy`?mupzy
zYT<P0r`ubXzR9SH#bcMDFQ$7c^ei$iZp_OYJ&IWanpSASB%$hr2~KF*uV-cy?om;J
zVEk#mCg)xdA>sLWwbS|8sq09N<z?H)kBw`qc7t#CP1aJ;(7Yq~=(=}1*%s+fyuQAE
zWQ^PmsdMt!-F<|O?Qi{@7lMa@WkE$mZ0oWXy%Y`HiM^Gvjx53Z2P(kL0mD_2fUC>Q
z_YwJost--ST7pGz#}psQU7ZX{sN#SO@cn|@;sVj+T&h)7RYjcPmMK}!Ai+qC%nDGs
zNcUxK!{KRJ$<0BgIPf^`?-r!~K3?evxs_)f+D5TNwzog!&S$ZJWPV<KdN?#1*%c>R
z|ACAAYQ)BPT|`3u+}3NPm^Mvcof0GCjfy6&ai-M+Wo0Eg_lXQu_OwG+3c;`EJ@0+M
zVI|?Q)wEiPO}Entn!dkcU9P=Ko<MqhZJ-}Nvt)`eX2a;Ib=?mS?*|!0B9EQ%LMMrG
z=GkzvUgJ4%jO1_gMO!L(5@aeQInFJy9!W?%-q<$kpeKvpry=DsFNJI+)!Z|;^IDIq
zSFhTy+N{?cy6&%S^i>m+p~uYume&0U0X9JxzW+@1as77h&ka#o@iKTG@8zRoo~5vy
zDrK)ue?zY*3qebrs%bSUcE%<uv+j%R5qnIDLt(og#5Ldy)E1DW{fuH_06V~|<L>(G
zJJ+7QeJ7Y)=n_u0`ZL8KMFHV@uz7)+EN-P>yR4)H=HmlZ9cplE??cCQe|gwT%>bv%
zu~mZd{iUSt$|IrUJ;&v7>Mxp{($TjBjBJNZy5Hg)+dndL2h%Tr+kW3wz6L+F<8PDS
z5)<C}5q!^lgHVb?A~~Q}UYo#XHJ=vzzIY!0z1zv}O+=RPROWk+?QBK5&r8VJl*aAJ
zf;I{o`PlIib(^D`mn`;iT1H2kU*7*O4cW!{KzjO#!l~l`=CDrrmk}kNjuncB)f=A4
ziN6_l4|h!7yQfZETg&~;Zu~Sh;a!#Egn0Y&mX?-8A*b%PwwN9{L5U}9BTT|=DUBRl
z<$D;sUer-CR+hK1T<#$cu1*1ttfAyXE10hz@$ujvZZ=-M(Ts?V89F>iA{KKC>rPH~
zuG<eg%%qCxx}S22<$&yV>~x<ZY>ien`isrRq%K$zmZB(tf{uIk;uBE*V6qXQIXW`(
zR7lzLqzKko;46B}iBIwF?4VBphwt%3B$Gmt*js_CNf4->q^tBERp^{#YI4!E?-5Ge
z;gO52J1U_aFJ26)!y8g2Nz<N+GLVovccw{dA@&p1(+jRoNKU}{JvmX0y?~e~wgL`k
zx?9I*n-*mhtkm<|Ky`n;_TZw&QsaABy`KG{|3OHM6rE5P#&Ty=-_xyn=Bg0F7{zjU
zs0u(I>+S&nereWw_`uXuk!yH~zOQleOL?endRV52iur)gF@AF}SqGu0b=vK}Y#a|E
zqnzPhTY!+P{vLGQUxnM@TqdRG@E@ZYOGHWWXZvtHpvwFn0i&b_@P>bX+8L3ahtO{D
zzQnaS%I&?}{;>s%#bA=-vb40>93l1Q=H?{{w%trKdr5te$3eKW%3((*ET~R5c38yM
zhU++akHorRd=)GBBq1RYe5_fm^{)yKp^WCXh<E#ORkl)g5G9}Vdjb$l<>lwWdMzmS
zP%RI+_Cv}9@m5rn-vCWIMAA^q`T5RRhoJ_{<Yg~_crR-54BY%Mz%3>7r7yM5cL1Eb
z+ch7`e@{P~TjdMP=#Q5Ewxm9tWgCe;I|Q77(>qS2`pT~+Y;jMbANpIcvNq5+IN$GJ
z0cX;b8@t}w35L&Qybu1tnP~=E<<{7^xNAcd!RhI*N4DnyUTuAL;*9#86K1B0H<B~E
zvZQK1c^dRIB+MiZ%+qh)yeYRFu{^M^b{s9~mrvx^``Qdms`bhA1If6_6N|%9mKGd?
z1~d#6m;>`DGls7L`Iw_K>1$OLH4P16$JN*2id~)Igd8#odXp(sEwrB8TMJ!em1S)_
zmfrGeYDCI;Y3ZlpnAdThyprAoCZl6txL{ck6yM}nwSDV)lvL=WI=V)(+9={3Xl=<(
zu}oi!tBbN%jgig+s4Pjbm!5}b#Pn?`$GAENjw>eSX!;SU-=|juG=ypYCC5V|ax`~c
zV0FZK9(?)s73?cnThnK|-xG>N4u?Ss!OO!7fHLux@NFw0lXY!u?<VLh{LWGaMTuB_
z>1UxU;$7q8<Lg4Nhd;kc19&3YU@!^a-s%2vg;ie_Se5}Pm!o#|U>2c@%n`c9@#&OG
zxll(y`eOAXzM}J^8U~f**;lKSVe~>LikXfH7tmk&qG|&lk~IShpVJRJhue$~>^DJu
z<ZoU8gq;hL?X+2_(!9}7-pZ#byiCeIdP|M?5qiAScWy?RxCMt-uk;Z2Is*OIakTt&
zZngS8z4AFK+Ms12elz>0?PbeD^Zu-@<5SH0KUx;ApR#4V%kS6oYnU^&Tjy?UjlB3g
zZ8*YN;7eyz8wG(}?U)=M%hV(9J*n=fPj+uPa2l7QdJ;C<&}vAiJ(z<5!%$dQ7!?%-
z3A}d&AJY*Q5o6E!vlWS8W1A2!qU5AJb~F{n(D+8$^tH8((4l2Wj&17h1Gf?Qk4oA4
zP2*>dPiJ9jKaj08gebHH*U0zp-~SZUrF<nZiSMIv8OWRR{?sWm*MznE_wN*t?&}{Y
zV1MJNMqBwl0S3mvcCI!LHT67r6mV+hm;9Hy$hd)+0;LZpC{xoDe54NLU>{Q!)%;2F
zrM2;=1cdCr;{@TlvS)PYz9v6KAxg|4>V(X;2ed-?+}zKfKZVW?CbFpARRr7)9@5b*
z!7t|>3JO6&F$(_H-(f4&8};XU?Q`*QB}HWdF34L}$fXb}+A{%p%9prgTqv)5G8&ev
zi{0Zv#szxbC5s<DY41Vq{8&g(@aD!uHDH0aM^%`kw8|ixmXwq3UY*?{*MKsSzjwuW
z%%_Ugerz;4aY$iFPftI*@KCIyH}4{5gZ-ljf=Xg$on%6b2nN+c?MmpvYNv_I9erps
z$OnNVvsO70q`l#xRzPM0ou{veo}{E?H(GQ&pVMB+bt)+BBqpA1mvLD3XMtj!QT@SC
z#qXgCeD}AfwI&<jrQh3_vgv=aW85VmAb_5$rbp{Kq~oAH9EYl)3AeRzqcLyhd(r2m
zAMC+A69~)@#4<EBrJJv2#xcG=;rdKV3shFC3te$aG2s_Lo1-o6;umIjfu<}K?GfwU
zSo-8TcbAopKvHfBzP%1m11pPHJUMoBCYL-l8%09OUZ36woWfnta{-vD0X$m~Yt(QS
zSP@*-<G{AE0<AfeW<2~OnLH2lmcb{?>%9HBPOe<qVQ+Or_k6#eS|$n#4jZ5tMt;mt
zVOSX`^xSC<Tv{Twe~=uSH05)=58a%H2aWi@HBf33X)Qs_WdB_*$;)va?d_@P%P?TV
zoE*xOj*jK_it!X+cYn+v20b)I3P2HuWBHbpRPzKr*XAe0GP?`HpQk@vkxNC5?}HV+
zzmGP)$2&ckRam``5I=A`o1<5zQ8+tWj$jPmb>FDnr;n1M6c0axOXUjSwGG`Lnojqb
zfVMu)X?JutBq><C!g?)ONWN>tcIG=q6tj+Yg-5OAeQA05j3v-(KerexNb_<VNb<al
z`Cb$#JeG%kz&*PQC?PaO9KYjPjwy}gm^bp55_Zg-oSXvR-5@588zYT|-2Y@*Rudvq
zaqjCJOu3f_J<d)vjE%)9n5-;U`T5-_d?)qom0Q>`kjIps$PFPctX#EIDC(THY}6xS
z*fU>+(byRy@bK}c>H&l_e`)>&gfeW*uJG9{JZS&9_j|&k!ONQvM_H1bocv_AKifHp
zvn$o7{OCqX*WGJZUh`A9F0kV^^tAnk+a>I(uoMG+iEz|5;ZIpT6L03X!^6+Uw~5h`
zYp~p3`|D4C{`_`){i<xGE+*!ph(x_%UvuDdUMCVh$4+l_OuE+bN(*AKdZ4c3KcOtp
zC@FV{;~J4puLwq@_+Tz}CdfS9ieWd=ge8hcV{_2$(evYtdd~vQ0T{zwU0v<URg;&Z
zoZaPJrC(AVfpChhLnq<l^G}_&DaAh@-N1pJ=#eNPMBh2&2N^8{-Wswbu_RM6{Cq-b
zBSaC^Aztt62v-^8)+iwv2|kuvP7H$m229p4XThaBBM|^c%>arqXV$l{Jiv&2d0>(h
zNV)GI?ot&Mr7kSo02iiah56y(A{98aI{qwfRHwa)UNF{}KX0(`y54*d&Fg|Y4msJ4
zh-gBIqJpq63t?g0qm+wL9dfb(9|Hr~%(btywY7<)d`g{C%h$Xu;PRusSXWKWcxR#O
zcXk-9JotRss>Z0qBqTuY1^J`yJ8Rs4GI@_j3B?1pQYf?iX(64^zxbdz9`*v<zkK49
zgVH7U30DMNNsp$_9F9^%v@KNzbB`%*QXd(OjE;gpKulCL;N-;4<zRPc*7R`1q%kZs
z^udD%;EuW<A+3<WD>mQXuj2Q5|Kzj+=0$UD%75BJx9u)YUu^C-=8|9|fkQjJM7XZ8
zLw*0g{mN*%!iEk?l~7k#dyGtZ5uK`SVq)U52g`XNF+tp9HoxO)RB1d|Xhu0L#DgjR
z6c}TalvoYU7zx!c-<o-V)=(W3h7B@Dm7LaANe27n{umcy8;iNsUm`M?5)zv4E@AfB
zPB(ai+zR+kQy#~-d_pMaM9sV(?c9SvaESN3U^azIfC#R3=ij|zd+VqnAz)8lhAV(s
zhTr4lYp!}hMn(pzA+hO5SL<eOcDVumZd%w|8?&7GQGX8efu$9Qvq8Y4XwmvFvFtxi
zT}8>2VN1@!a>Bo#@o)&u!Y>=w=OHRy6lG;r4(QSUMkURT{^D)UpN9a49domkXx80J
zhDPL1)FdEHa#hf!WZ%FAirO~bemC(7>HPaIFD12b#Ztu!4;Q|{<N!9WH!f-HFIbx|
zJpBIj&jV<5+&cKST?jM_=_1^}kA%CX-!`_r9`g4U4Sd4NpU3XpR9Ff?BmeV+<Z;HJ
zpM@XX3Axak+dvA8+7wr%*@hn|UH<yz+Mix89J$#^;TNq;t+zhy{kt#9rFS@5*lq5k
zZb3$|e?s<AGsJL#e_7XLXvBh6x%9n#@P<Txg6mmPjTj@CRjNYAioTG;*P}PD!2i<)
z=HBM(@Im3vLp$xUy+8dCQ%JnH3)ynf6*|{NzTeB!B*+w|`ig<}y1J=Z)cN%h>clAS
zy>>b3rRCg_r#t%@s@0Hx2cAH8&Os{oqfe1?>W|{Ooq$sJJaY#B)`7wW;|6^{YV?2(
zQ2Mtg&CR`q9vUU3Cu$sMzs$>(5PvNxG`=-lo%;2KO&K?z$w#t}Z<?p;Yk<^OniQkq
zzXubycdPx`1-}C~@APztbpP4d7iC*dPd`s}#B_@7rCZQ!B7NzN7Mj=g9ct>kyDq8K
z5*QG^R*0o`u`>V;p<-3Iw3u4PeRlTKqXG8L>U7a=YUUIacD(&6N_l#_>ETAJAsOmx
zCeGX9zTE2eNvGeu0slrlL}7-d@;ti0)-&U^wa;5&6u$>HX~|c<@#Cp`F$UDkQ5Hx4
zT#a5QHw_{W$_D%Zg9!=&LBYC<-gns9cfR>lLqrM#gqFh;EjNi^1;VruNfK3GzpCY`
zDXV)|7XN+MWR5usv_;O4l8=jEw3u%{!>627kdc9qX!H5@3()%eDdf7gY*Z#Lh5?2-
zQyZ2T`}uY;7{5o$Rwn8_Q6xCnytWG;W=~u!3_E6T3b`=o+bEK<H+hQ?0PEX;n$Xbn
z!=0VW%abh=&)0pDuJn6@mOe}hC9+0s`M(6t4>_A0vFtT9HH|YqKlY*7+A6wwwJ02u
z%WV*W(9Q1&+CSWp^!xPBE4+G*II!(Q^p~OJEZ|NGIi1fl<$e5ao}R6!q+N%6Bc#FI
zX<J=BC(X2P+W*K^H{KA)uEkb9^$=w0s>6A9zxXp9H_ZaZ>1$`z%^hr1a_zaL=@NRG
zrd2=LdmoZ7e|PPUdeiF*50$m|FJxFP5!CO3V)ekSuB<Fjo7wa5ZIB`z!7|A9QP&u3
z4R1rc2#Cix8>FN@f}{uhOwa~ni+R9-teYu;NuwUNLXxk9m;kCCj@qR6Q=ipkuf;hV
zZ(A^Nl6Hae6WO@91$xywU<UKtpPTb!BthmY(sjr4G@*)R;_o>p#%uHQtsXR~UHtny
zQu?gYo(?j9DHluGe!fRON+EsUnwfSw(1`iTxdJ?}hv8ZbX9@}`fb2qj1FEplUq&oC
zlXZBgkH<}7xu)Uw`<6Xu-a(d5LreQ`UZV)JrrB=|!g21BUq*W^^N6>S=MnEzy;B70
zSIhl2NKl5YH|tX<`NrCfh8f#Xg4r0`w0`B$CXTCcm4>r~A4C4;N58)kbjuHZZmY@1
zUdG8^WG^>}Nk6pcw18t}L=@Grn|(_-srb(gg*xPVFr!+Iro0VZZrkFk$$^D34k~nQ
zw?!@DJUHPscY%MSZ}11aN9PLP0S-ZoZSwG}1iR)hLb%I61WdsH5a@vM0Eu?X<T2cH
zxb+z=VjlSaz2`7=r7D<b)X?wkB+1RjRyy0wJTQf6Y?AN`Z$1imO1Rvgn_K5t!4E2l
zK8x6>3*t3cf6f(}QKa)@3-1l|PUzr^+>Po;zsRI(-SN_ZJnfu~Cb6UT?`;z;+$8p*
zV0U%Zo$V`LoIF%2!1?y`0MIqp{6vIwm#25($5x_$-6n)euaeF?qmwQyymD3>R3qGy
zPFD(S&hw7Gk}Nm)_h;3>*WQV=@jhyes6@qNB&TaLo7hg=p{<ap6nTU?dN6*;)6XH*
zo7h=z4#it-zvd5-40lDT!cdzc(cDdjI8N+RMY_)J?!hc<a=S&(Coei#{th0SL3Hp^
zjAeEfV~hqjLEUtv`5~+jroXQx)M$%8?=(e!!Cv*twi3nRA-wPXcdwE~d+RaC(YViP
za2jV`>U5vvwf!4&BFx%DIM?Q;uT&!M?P#jeS8ITtk$epTCQ+NPcevr5HqT0Lej5qH
z8B3FIgcR0S{(cLz%aaX<hyZ7j>5I>cEmBz#N|HkV{EsjN79lY)|Az&3>dx9H=pp{M
zZ_aIH7tt1w@cZ2VYust5PTg+6la^9*%uoplp_h^F@RL_!3}01FcRb7kV#wm|_4ylB
zXZxk;nPKTA?(GvV8Tk6M?%UdhH&LS|4zO(o&1h^o2bJTTDt5N^GzSn~HW8=&EEv!k
z*<QvZ{phsggcyxjmp78J_{-iab@~$ec?<OcZY>&x+8gpLh{36jf-0MGQ3l(x#VZFf
z*Ne<638Y@Y4CE@zJ8tti_CAa?XbCd<oQe80MYR*+Y`^%`rIw;9-S)KBx$2pm2RzCm
zI#wlL6}%T-j%zjsdfolE7BFy~XRLPIPczJIr>Nkwl<Tc|#g0M|gz>7f+GIgt(sekM
z)a&(QqY+cZFh2vTWBn~oY2A9;CO-`9h0M&%sN*4>jCOrKZtNl^T~mv@<ullCZQS@r
zq$`zTQ$A(%urV^>)l-E}`EFMq<~(I~spNR6gYem|#2a87Ro{}r4V0}q6=hO?NZq`O
zHcY3St0%i)?c42m&t&Ya%)Uwt7PbUgTS;`(WB&J2uA2`S@2Rb>WJq>jd-gG&RP{#H
zaK{ZL64Z4gjp05xw;f}mjYxGVJF0gn)6BQgHD0MdT3#vA^)R!t%2#0kLI@-cfy@19
z<im9z@HGAog%uw&{p>6Y<*o=LCT&vk11WLiccPKkn7Tr<iX#f^r*63)E9DYD1NnZw
z*r1xeg_8mz=i~K?xtQ#E+w(Mv-J_!lBn!`SSGLLd*O>D*YY+Ff4u>b&6o?`hYP_Vl
zm%qKmk4HH%em9SA?dWQyx29w%x(aer`O9^8hszj*y}pONNW=L+fIM4?G%ntD=hczV
z6^2~PAEl))zw}@<z{xD;Al=(h+F3qUtTQUBYd%R=ykA~ocMXdPP;Xh{%m`3T85w?-
zPLJ_j%D>hD>*v8--K6%AkPvp06SvLj#|)5Q=rD>*0%$$0d~AQ7^UgO)90uQznhqIP
zgm7ZR(N;d$$VfXICs(>iNWN^Fq)Z0eZIZ2gO}YDWa>1_Jj^ZDvBcJJOe4=i8k8xy(
zsMmJ6@w7JaY@mkXEw9S%O`c&vp;vNDEOmV;xH>UB6_4BNi3QsFZbit>j8@@E3>6ui
z=5R&u6VekL6&1{_KPzNVRg&H4y(dW>W+E8aRYnC@v0xQGX`ppB7oCM|u1WC4k|f_M
z>M(;tO@UXhc5UtL+q%1f{fm!Xy+7CH^W(>*2+g&nx#i{MCh`8mJ>~Etkh5GG$PxQE
z1tx(#&-2<R@9~Ou;qQ$1fL~UlBZRTh5&*MX*2KF<E-q8U&T3JTgbI|Cs@dTS^;6RI
ziSLL#&K)B;#+uV&*H8VYsFpjN1onh^@`l`%h<9`)GdSi*k6z*YdLg5ZS-7|RNZa~b
zbsOb*S*MMl)bxqn4|88Ou7eEqMR9#yCqEl8YrGg1f?rRpdz1_E%{8j{l!ylf*NGel
zdn8zLBTyJAY43%3ZGUocvh*4T_So^|0S2xsgJn<S%+Ga!6Q{CQm>3#+i+KP07rBi4
za-kv8Mzpl*p69W_loRtWca}3h?8*npOHZ`;1y^vVzfsTAE;8OV&pDs#Q)u=$ylIqP
z5;0oxQea%5RHEA7raEhAXv|rqtFu-5qd(K;@fz*`tyulb?ag9`9mEIh#*OQ{^Tmn2
z0?L9b13BvTQ@@U}+rqJYxM^9X&)Eto{GQ*|CL8)t{qjAl{~@i6h4ivugEmE!UNELf
z{mF!B@owf9JD7CR$sHkhcG_2IeR<Y?hxH-q#qDKP)FSU!Z~>D;$xLnDYgys@x*ZQW
zdyC@F;^B6`i_;)>&>9)Ogn<G1VIIRj^;9;dr-iKwbgOAXBxAWOP?N53tEcu%#f0pa
zk7>EMXn>>yxKX8SBtVy%&Z;_DcD{}S{Yc5XcY-ZDJih|M=v0b&p?G?$#52=59LyeI
zqZ2FSFd_3E4x;@6U;nl9wCH|B#@F`5oBY2A#KZ+zngvH}l~%Fq8%W(`$kI7xanIHj
z#VhC9htcQD^4y=Tp4Rh_&pvv_M}C|$xjl#M|9K_j*-a#&sT@Uc>4e6Wam_(B>CZ7w
zuLi7F=@v!#E2o*u2j=?M#-|rasYvnYnNN=v6LA{Dl5Vaj>81HZZ+x+4e)Z*NTK(?K
z3raNd%!%~$A4iwC5qnBz5PFg7pPQ+f)>e%Wi7F|fZ_1UGmZ#XBnTB!{?fv_TlCm?_
z+S=pc^vZ%KFJD3klt>E1jERj5mi`t3nz3^i6u^c+l%iE`J`lSsM8RthOIYW;mDOL{
zJwH>Zk)u51>-%A}Nsk;{n%bw-&(2y>8YPZu&jrUa-c;-_<ZGEp5O$Pv*^DTanJ2e#
z;pq&dey5Dl-XF7Rek=HO^I)b4(+ROYRigJZ*#l!@eg8(w*+JvM_$YF9GW$)iNs6wz
z=(DUe_1(~e+T;LR4LSq-@S$QykGwZ-#c|5U(%)9J+L%srJy(0PND)e=Dsfa-I6dOI
z&vG3eo#*Sk9kO0qY$Nth-AgdaERe6;Q%uWdD3}(Zf76-udM{FvA?DsXG7w83R^#xi
z@!MJ$`jX$iTJl^yAzENEyBWA1#<`K6F4?)bV_=}aZ6zh+7dA1$0Mg^O&oK+7EK5ph
zJ#;s*)_z2r?|wr+*RFRlLev4VZ>Q%I{>XLXl`K^TcHM+F>L$d>V1Y)Fep5$@n=X@t
zJFC)|-TF!uZ*>5LfN|eD+}L}T6LX=0r6y<FGGz@7MF!$RUp<o?MIp#8LpC8Nykq}-
z2fr*uJwHyS<W{+i>+sxxm|Bq1N74NLZkMJnL#|{G%q~Io37S9&!lpgR*7?~&vL8MM
zLAc;ulaBGoDf#&3nJrsa$89IwGhUP5JFUdVd&Z?Ixf~jyI3a;04+K)~PsTjc|41E4
zU3?$o(2#qjuU<vu#f>Q?*>q107<K5gY)|HoWmC)oC<*ll9^4RM^P98R^c%nZmU*vS
z)%_MT?bgXeR{fLIy?Cjb*GV1oBWhcNlMHQgd@QB>)ILyjRZ6Zk|Ip(;>#1st)6TP8
zrcU(x7jKYYvjI-~>PeV++3=`1a}>$I;$UK=t*^GFQ9fC)#u_&KdS4WFc9)lx=&hu)
zRXPq%ty)4BVR=PKNjfPeZA+?URBz{~&pOX?{psG=Op?3!yjs4N%~V|@cq-bpDLfDT
zKp)6o>X19=nWrhHHFb{g4xy4zItC1N(b|Z|LU+Ottj5H-O?E-(u@Bm&jWf^7xTK<|
z>NzTA&7B&U__s%k9khm+pW6kMNDt&N#d1@E9&m!sY4||s(f!xIdz;Eu`g@*_HvM$m
zU4x*;I@7IC&=qzi@)bJfk6OA9Sx+poJWIA=hfb}K>}d#7pAJ-&OFhqczF0RlCnw*r
zI@2azBwM4bYt^J_YqhG+<}f!?8}uh;RY>9=t2|DE!ZASF<CX>Z1&F$nUU3~HS;cu2
zsuyyN)k%9zE!Ptz@YLFD@9QFBw@#yb8nZp1T}UH;@aCwrtSph+#HF>Z_C21Zd%ca5
zxx$L3hE`YX)<kI%O;vR@gdHPX-K)-B?M;#r6C{GqkcfyK<m^b%E&~7Z9_Qh4go)7>
z#xH$m%2bM7qZ|s?Wb&aE!EEf!HfuF^dQa{)+SB7u_hc4?lHnIpWl`TNUOS^15AJgA
zIM>L`k|y3J;~gmcHIYl5?mUwDL(uxB3zt)l`aqfidZxH{_%*fr=`gEQ#ImQf7)8jq
z$FR~ZW)0nn=gikjGQw#u?2aI~B5E6>V&HggTd88Im+f4eG=9WgpP1SuHRY-BG+rq?
zPlL+zxcj;HKyF_c;VFZCpFW0KZk_9X;xebX(%bPei;9n7btNSgEaQ%<BS<0DZWkGu
zB1J=~`RPxeT3cH~(!`YyPtP{^cpt3|SI&+GuGlSfW^B3bbiJMM++ejt>`_4%@)}n5
zgVJk*StKgCj%&Iehx2o7VI1A(r$<`)O22;C)J;@bjUCw3nT_UE_B=w*QMrnb9~|h<
znJ2V~@Frn5G4CK<^H5x|w!2QKvXYsU@x0E>`Pb)<z*s(<IzL-fE=m=5O85d`JCEnk
zPo*CW3T&C}I&jYLN$Uec@L<97odI>-K0G%Et>&RUe8hKYnlLt&!u)}yx*w*cx&!t`
zSaD{BMMf4DjOxTuOVQ8jyy{;}+DpBg+v%A~tbgq=8E-~t*(aZTz(w_(&EtD;Y0_A!
zH4UMrqL9e-H71#5yC0cP7*saN&khf$JJbRXEI%apO!S-8_iVWLWjy!HANetFYiXHR
z<+QO`KO)1dT}MG+Tc<N|#|fW%)VhmQl~EPRbJO;0eprVxlY=pgrI_K@@wMG77N1=h
z>nam_BDRm`n4X=+eR4h8HxhW?;!r^L$rTfW;?dL#Ir;8X4V*Cxjx7^w<)1QoE`vL-
z7sUt2S1uchH}}aq<mjprC565|^d26g)?z^T`LXP#!P;trE^r-P{&f3}?U~UUXG4Iv
zfnt)K6qBz=ifjR{Yv=E<c0x4l2lndQrX0>l%QK}rUv52oIqh`;UF=?pNZexopmK&&
zPihk+vP7<!dz_eQDk{q5s59JL)dYZ_X-{#JT6>oDn9@%sCDDmuqYf~C7jY_?4d%tL
zXUm4%#c*C-iRE)zPs%;B94sBd^ts#>&FXXSNubIR9Y=Wc&cPN{gtS$E;!(;EHjIzt
zYi=RSmg)MV3PL@e*&fr$-q0q1JlWLkQ_Ows_ylO{*`1ARG(J64%|SxG*0_f*snxIN
zDcJiQrMY|OC7vCTa-);$6ApHED`OQK-!ZW1EMyC1rhGgsy$3GRi%{?))57Nnt-|Rd
zy5f1B@GX#!5quD}U7JXh+u$zKR4occbSBl?IXGO+Avrj4?%eWJz&udjE|_L@`|$`%
zmr@9CV>I2$=W^NX?2Y(%a={}*Sxxh!GO~&|u7bir)4~z8+~N|R(K$@&sd=mz6=pt{
z)wz%~+H4w5YED+xt?miTo*vfqb!()SPN_X;!}d+9!OB0QKs8!!U1c<u2yqFzRkl>%
z%-53*P`ukQhh4kljxd06=2>Jy`a0?KMbse9?ECRcYLJdTm4u_Rws%88aa3TiYr#xr
zfzIms!M5IGi7eKw<d-GFizN3fIAX59vSeL*{MmJkcaM|t>2!BRsbtNykOX=;&s%MG
zpbShWwwf8sJh7W&`L**Y;v|ZqBdu0E&A2f2f$;h07>?4Vrg=hBewr0uk)Aic*zWFb
z*+)$~#4?f0b<U^ar|)oS<W9QVM{_h^lv#3}l08$+R+MI=F7Z5FYwlWcSm{581T@I8
zdhf>Z*~p*hMjZ)DR9n{+v)H>HmQ<U`nr@E(hB>Tq9ao2!<$g>pElmZ_YZu;U3&rE|
z*v&TYM$z6ir_!45AbVCbnMgF!Zn@UQ#4#F%NJ~vr)+(<HwMhp^j@#KG@#>|7GIPwz
zN7bZ(?4S}D=whnavgn6<$<GLSYazIv&qkmZU=K}#<62s+bpO}825BiuHEjo~NN9DM
z<uD(mAGtcM|4cM&F)Q^nWvt4#kX;9QE58;A8JTXa=FMfj=1%7}skT6}!IYyX=a$Cx
z%0JJ?C$ulQ=_n~FxtPZmV9FU9hC8yDg&i_XxQdrp9b4mbM|G`4)xV}FaX3yy#|(Zd
zGl5&60&kt=i8ZuK#p8w)^<N0Aus*LgDp_%()cLm-(7eKJ%}tTw5x=ayarmYl|7q}1
zu}-jnqWntPIm`N)4Ekc3grABO@;8|W`sh`iZu@lBk?!x^&ELB<LulH1p6gxi@^p8X
z@BY<sfzUiy(tyC|su^C{Nfx%58v`G9Y4+L$XyGZ<%eww9AnkP@&&F-fSmr!(34BcE
z!&VmFW^}RclSt+G=&cB*xA$UHav0ecN)grk&?{8HSCCc*zpi6jXp?Pa{BogArL=SR
z(=>7LV#Qb~%#3e&o<A>gBdMNP;kJR(vN$DskO9rd#G4GVNqakU^kIKaJwAmX<UnRV
z7HAx_D6Dtit-5saf|x#*)r;mYE4?<t*$GsBPjlr;GmH1`>yhS5^C2SZbm9!6+I!jA
zhOH6=?Bvt*l1^+agGDGER)^b`_UBiZmgeUjR`#p{t*enl$>z+#w0+O7ca^8G1%~-?
z;E@K`C5kr$1=3E-l$=>8JkGNgWV*2tXsJPSYFkoVB3D<KRe`xrng6UZ(nGCKb2wLh
z(RKfcf&MS*m>2<9{GO%We#>LtG7C*VQTr2-(8q^{K_y{*X<sr)_g;I4J^?J=EYP<4
zMn;OP;)rxTd47R9cAt`8$+%CaZ(VJa2sh-^<6F?oaFH@4-tthg&TR{_+`ey%$X)SS
zLO-UP8U(nRSsPN}Pnj)@R=u~i)mHTB-DASeX<g5DsVOhHI+^F4O7>!UGjyc|N*Hd@
zU(|KFk&mk{W}#a#H%5>l%#lG!=tA%S7DG5q<n;t)8<um4)5D&Hv3)=?@=MyI66LNQ
z=xD4t3@_^m7S9(r$nH6<<x<VKSvrKoV(PD=wZBUd<`nat$yYnWSm@&RiqKSXSs<=h
zG?s4-oZGaP08s3itQ_yU7Rrs4t0;IUX{RKA$dZd21igj9P+3LE>Cwt7hm|3dp|YYf
zrk{=u>Loeb1^WexDNa*$eHjXcs*E4bTFO&sI4C%Gw#xu4Uir0Z`50WpD%oYn@n43R
zN>DIMohmo8l}Pvq>k){Q09^sNK=e7d%o{-{@33t8OvrwiHlf;afQYkdZ8?Whz-0-@
zepAhb#ZwTDl^q?KxI8@#AoCFy(pzhs4DW=l?!0t@lF^r4kfx@dnr+vne3E)l${rr=
zq5E`Gn&*X8e23{^!BlUm29@p<R!VS^q2Xuz)v36a#lr&^CY?u(V`J>dSI;c9Pu{+w
zg6@i-{tt;kE`4x5WO+NDS+A|Dda|GSL!^9ce5lJ|J7<h6O=`e}_a7A`As>8x`zyzt
zqlD!*r%?tUf`V%8HfCrW1+Vb9-er`D9dp&WLuk}NE#|3^3Tre*SfkAruirAiAUM*+
z5LF{VhS#Ui+x1Y~X_w{w>5}tq*R(2Q_X?vKr62j4EzXxu=v;hg3lDuG6X=ztZqg(%
z1WrJLRCk|y&a3_-<&1463nASyi8l_O$DEbn1HH0Wb?>y6bXgc-dn<;<6rBElHJx=>
zRL|SSQ4|9KML`+^L0ah$P(+kgiKUV5?p%-(5D+P0=@jW$kX-l@0t+nNA)U*TOYZJF
z_`BZo2NxF$=L~bsoSAu^=l<N^1WSFJOv4Q^bM-0(qakE;JuoSIPyn%ipT`H3IQ+!7
z;I65q7psLx`n*g+9-Sc&4)a+bvfuW?YBH2(#MGci+l=V2CSAbuDD2VLu*)&gRk_5Z
zgIeB^{mS6E*A}KDTne@nzQBc~t!@IgV6>RaR{&k^zL)>utp88uNTGUmf9e9(4}-}6
zh8)?j`8CGs?<%TTP1s-UQ!n_KYdeLF`wB0wKG{CQNYYFGX8|Z!?4W4m#G><$g!kdE
z_bpRM<o=L~R3WXJ^HE>wmVG>yxE`f~_pY!$vI7E_)qPJgdI76}ie&&k{E3$vzZ($j
zA9V*{eg!QDdkR0_U(PPTe^^^w8jdr39jaw%UgE?k;*f!rRn42F=MXjZ53WTE!{xJk
z{WbyXU*GSX<-C>R)D#%1!z61w_d~?1&&wTVQJ~f}+6(`Aa0V1%$45Q!!B2cs3|s1m
zoSNJx{R!pX2yi}L3kx~4vYp#II~N_IU=VZL9F^E`9_z!Uiouh1hh)6wtW-C*j_?p;
z5l_B0Boe(8_U(lq;!(^yb`)2_5li>e#Bx6D%UbTuDBk-^u`^$t*na|ySa4sYEvNVL
zT-^TT<Gb#}JX}pH@IFCS)MpKroPu%UsnRaj5#1kl(KIwf899zFP={WFCb7PrF5|8N
zQ-AJw4Iv>cEp5RG*3x|QC9PJj(5plhlo=0uUY3RV)M)VwCJYd|fjA|-@MxMQ74Qsq
zMXvl@MM2MOg(P&FY-*#UkN#4G0wuVR<#e3YqsNbgZKvO*TgT=r4)iMP`lGG(8zw2*
zbT@(5k!%ddvUP#a(#||66Z73^`8#5*Vg8N}yFGE%D?B%gfI`7c^04LMCA_*M!3S9M
zNbI1bKzvwrQ`twOP_T|a!2o+<1>-T0MM2{G%%t<SSCTtsdZK{LI<m$OKkdnsI98{=
zDd~Iq@zD{u*$6yljBS2?(%dy)c+)RE<?pvo^g1vwL`{v2LBT_V+u?>zjok-d8=I|D
z_~z*W8fcSOK|R-%bn+6-0f;yHyP_C$yCKHlt8TT6Xzr)6A}v6C>tbd6+VKD>@9J`p
zb?29w%|RaxkFd>Tli}Sn$>Gtj^iuKMQeNjv$kKdJIwhCOH^cC0(%kZO<tk5Zs4ltt
z$>1Cy0Vo_sB%XIQ#R49t!1?~JTeT4FcSZQN(2s+yFjaHqRLQqVCX=p>XTIkf5(KAB
z7l((U?8}pfQ?l8EyeBUt-(bGCRV{d#Uj!XA6FNQ~{rR1djydr;O(a2wRPg5t_>t0c
z26{yr5@%zB>=}rxe>7MsN@aY<@=!CVPCeri6A>{nGvi}**z<^ko<XQM@0XrB^*p->
zgGON;%JGu}KHcCw85w>PS<|>p{A2gmd%#xLFZs4IpwCrZQRxi4R5JJytw(A0xOsJ}
z0L02`ds;MF`gMWdMzqw)@rCeKCF#5o07Le7eh4~Kj}V@jI_dhP1UDODQ)-9tT5XjE
zRr^BDfEBBFZbu0xU|~1f`Iwx$eVY84I4Y@ZB!K;<r5bPPf8EY{*4Fgl#_$@t?n)>~
zt=(i~Uxpod*x1+t>rSUp)hjTZlTgvvhUI3`pd#FDv_$u8N$U$YTEh78<M0aT6(4*l
z;`~8ZcZ2h);Rr{(Zv&?y?727(Pq~Bd-tjal6slHgSByAfc;T~UVuzM!;FKTIe`=c4
zepsL9622|73n56$W2{YUGYt`u&T!TA=e(;uobyoFGW@H=`zRzJO8}fk+3^`KKpU3Q
zOIkfWE7i5IS1or}m~>gId!1IiIjJ^iK-@FHOB48AI|k=5bY}%Fb<eX~f@lS1g?!HO
z%XQyp1@U%|@HiScp!o~S2orXYh$X8)l&I=q9WQ3mYbFT6D|Mf&yL7`94UFPf=GVEq
zI={Ue6d*w#n(F9ym&Xgz;|ATe?&6k4p=pQg1?<u>-;A_nAyC|@AlOo0qhRWM+SM}<
z@&L%XBdd$C@TYOz-bdRYD?wN}q_^>=7pKpaP67}w-Nonm`UOU%7+)=dQ?)t&Y0Nto
zI{s7C;Otjn!fsCESHH;35sslnxx}1Rab@_UA?Y;B)xSRyl5<L-I9x_wO&S(OG2~}E
zo0AEHAxEr*HSpy^Po5Ot#+4mP2fP{HzYj?3wXSFSc4%8PW92gKO;5A(bH7Sg&-28}
zY(!A0L~zEG<>dN=i+kB<|116(ChlTr{&InSHmr)=J5P7invg*S-hI=jlp3Z#-TZDY
zdJ~)!<8CoiAM+Nlj$OOuP3F*4s_xB7nFzC=3;sZNMoaWpFJD|KJR4^GdH+|@zd*@a
z3E#&}$*d~o-;-L8F1i(thUaI>zI{9RC#bQpG7{eS-lA)9m%W~yGQ7ALox-5^^OcR_
zJ$mmS+iW%X{UU_>Q5q0JjA0r#My%gAhG)rTseJ^z|5{+RJb9xmZURh9ZjNr5SdMsY
zVa7OYMM1Kl74Sz$Oa}HFg}*xjPm6|Wn*7bJF*)9xjxKUn`wA;MGEyKCrWlp0=~H#S
zs9osmk5xynIZUL~61q*UkuxED&;0Dr?5FUuzvg*u_mF<?txF|Gne3l`@yq-vQfI$B
zNxG#@cV5q_2$Ccx#pV=h_y2+^!Ygk{Ldxw;(nH@v-sv?tWu8OriH}Jw+0q@~wyex%
zuKghMSJES~`2|t_paXKXyGHx$b*0O6&fRq|&L1ObXB;K(6qJA;AvbsXsD{wx0Jqss
zxmcl>z_CaT#0=<L3mKw3jXP_6cA5izsTYcgiTRzb?|^bb0O9WsStETF%_K2dWs7X6
z!>PcVtwvZO;+}g!+QnISc2CYTTSI`9J7S;%JpjttI7)Ui6cw~4NfpH1g;g*)zb!_P
z6aRHDh^*WGUE0q4ZZ4;4a8Dt9l3vhq_`0vc&Cu5qt~{;tj-JOg8h^pGD9Q~Z$l3ZO
zv3nA5NyGP@W_bSWNL{2@6^~DQ@xmk>$6OYt@`lF7*^OuEVLcu(#M=K-lqn$+m*QGI
zU7egIO>GyNr?I*rjS(3iAEGq6m8uNKZ({M~E71?rD-?Nfi%0PiUWd1ew2QqCttKr$
zSH|NnT>=T3?B=uWM(<E^h9##YAOae>b<=91B3?+mNKL?UG6*^U@dUW*oMAEfKE{rb
z*G#Lql%kh+-|*;D-Q)ADmM-~*T+<2KKAjhSA;go&cJIc?Wzv9mCWa4t6g|_5zfmg?
zIA)SiU;GsA!CLdV#G{d(^aQ<z0zPBBfm7UEQ$^hsKZK%OVSi@K{OdP$ZfWdInm^ou
zd9|7U;U$OpQoLyr>{3FP2`Dj4IH{4P1gn6e=jS&3+2?cdZ>;nhMNMbI)HV|5YN|3z
zntIH_deQk0mfLc2T&+h>G!E7$;q{QKyz%nhY_0csvj8LLXltDx3%8l9>O!GP0h=}|
zN*Qd#1xxOr(t)3^2p`|x@}_!X=lJZhQ}xFL>bqu!mP#>Y@KkPt2MfC=$zx3sh=2+#
zlbll$hfYFj{3C^!dt=@oVJ9O>#vL!ahGtbG=B=XZ=I4?pF1A0~W>STs49-&jR>J*<
zq57r$*BNbOO2|d&niB9&_TpUfek@TF(X$1xAHd7XZimUZl<68bc;CF!|A>Ty=&3{<
z<|PBxx=yyHr(V&3&ow<b8RGo&N3F?k62a-u#X85PZI##MuZ|VylzPFf?v18Ncz68l
z9opFmCZ(>j8TloB71Q4z3S7;NRo~@4t9JJ+_-5uH^4*CbzpfdBMVpYEQkrT!y5#g{
zKo8!z%9mWRJN1VWDg1kwiQMQW2=yx0-c#;9+@97vica#)nZJ4U(KQ`b!~t)Y2Q{+f
zza?(eda0&Q>*_xKEHy37t{^*AM&@noRKVpRz*jZBaaLf4|9)=aCh-5U0K=hXhCZFD
z2FJzINcypZFhq)NU&@WHMJ=v!uC|ZD`E+Ncth|EO!(Pzl+dz{a{RiQ)yEWT5H36f!
z|5?-K5J{kpWEReHLwj*+SL-#|fEp#&O(CzHzfnNr*v*UPffS19&Wht_TPYQ=t#ub`
z3g6R2k@9-g5(vTRs{$bxI>Zt#a6|P<h|a?5#8+drIQd+FY<+qUu&+wUjjcLs)oJXB
zAcV_Aag^}wXg+Th@%`@P#Pl!8ko<31U-`N_OqK8hrIC^7KdrJnTIW;ys~^;u__0#}
zpOtb$wCf)6qSDc(u*3Rb=N==GwfpZCgzD6;WKTVqYfF$@j#VIWwQ67{KMjS}2#6Lc
z3Y*Z#nM`jME=k9362JDz);Kw*8q=dl0d9rJ*pwGc%X47YD<6)<pbJse=SVs%|LEVQ
z>rb=4I`vhE&QYNm8FB`>!u<+>$6k{|3jq{2pWVxK0Fp>^dyL0o2k>(c0uHPOzK1iB
zFbF7qb2=HUZ4EuTdPNOAS{x0lH`g3*Wt<Y0W1;o5u~^8l#F9rz;SV-vC8mH{(#Rb1
zEQ4?xSW5#7MNo!MwaYbKR{qXJbS*Gby>PU%yBpXxO#v)iL4|yLGvHc#d!4+v>09P|
zMnY$67w@&@FYda<6N?nKJFfhYy`q#{t*ESgZaq?Q?14TB7d5!N+`1`fp(wfoETC0r
z2%@H{vrs}SfR=MqR#GrddoOo;vP!x5L>1P@u+4^^BnZ-NMLOw>mZeXdK`USo9$!$$
zM3<mx6)$$8ETS581wN3h+o2ddo|Q+V4JLzu@^q^$xx|$?*Rji%*`KsGq6D(R9c1nP
z%1Yo*%6{~ig|h2@b_ayC=v8K^E>HH4*bVlj&Hl`(JSAvvvgpL@Y^Ki9tQvcD#V^(T
zmUJi=u%-K%oxRVN9z{+r3FuS6IMou=+4r6BPVKZTyg|t44g$?+x}<MP6Vgv|0r_Km
zjey&0&5baB`}KHmbhNL`u^yXx@?sV>#AY{Bk>?v)GMpxKH1PIu6r+TQbBBps-cle%
z$Orz|_z;U`fc(H8jxnQB#SbUGl(VyUNhzn^zO!2e+{?E%K<7oH^2d%@wgwK?W7iDR
zC5a1SMV-yxpHE{NDSUi<lFsKFA^u=q@#HRay;OdZzO@pk5W|}2)n`o@kgFxAJ>g$u
zdPmoxIQ;@5P!E%?=AGsM37KbGa>*;auIvekv^-qpZG1JkNd`vLJ%r`m>}$Ade&+~-
zM3>Fk#OyQk(TrC^0OI+<Ls4|(a1$@$bj)16+Xbcg)7Fq7QY+i5O~Et`I8Ro<xHe5<
z>S>sK?ZS)dtoHyaTcFDdDNx(qPSY3_0#b9ORD&j;v_VANmTxgUWPbPQm6gz73GJ#K
z$f=|ftlo9=6nD+tGF}2|51du0gEv_@Bdfg+_fCq6ik!_=fGi!Tl9LB#5_wW`FZHX|
zHU_QTM*#+ZY+Ayv845Dkdn~Mbe%>&VC$*SXEwL+_1S7#!K719S*djHze|Esjc#22`
z&(TWGM>Dn=ADc4ySHgxyN|knj2Xm8GX9R;aL6KZ|Y6#9@$bkl(xp<DW!qVqWpg+i-
zFml7*<aSFsE?ma}&LG2!W7S+~$MfS??i481{HO}DrxwG)eO~HVhokVwFhisjTuf4O
zbf|S-t4-Cp`rWR%kIz@Uq2d-Pg^Efm$-{?irw5GBoJY@r_?1EOxA0ci<4Ikl1{$zA
zT7)uQCVp0rjhB<V5u(?%#5ZHDHozyYBd3rn58NP}y>Cp8aeAN70o3xk`6<eIBJ@$r
zm&?YiQj>G9UJ>#d3r$I&T}VeQy~_xL6{RIs(T*prh+@Z8yTbSh#ipBl4ozJnqO}ry
z){7nJ&|9<>KuY}r0#@?hb8xLiekT)VvRd>6>Kuvgr-({ZRw;dbsvzowc@_4+7Qk>L
zy@9XMK%d?NzC|ox3AtKs1dKKsanPfV949AvO5?PpI2oNOf>=$Zvj=u7%#b*Y#dxS=
zq~6W0M5ku{em0vT&X6H;b*U>mZbi_>tYXlI)!;J>7CQgz=@@Qt_{LS(?}*m8iKEvO
z7lEZIr!b$7i6IQ@bJI^|JijwB>FroNFFoK@^|$ulUwe#D7cpagbQLr`<1A>gEME|&
zKDs7JDoBS;w~r(-jr$;^CA4@(|2kkTzxA!Cc>S}wf_ypw8#>y|-UYCK&sUmKz8v7+
z?R!SHF=OsO5FX7mQwTxC0EhT&af9RpV0K4B_^I^GL>};V3U(Ge<KXeGy%}O^dH%pz
zOUy9(HJJ|ZSy2H-0<9Ss%SSQChHH(0;#0Z%%f4N{RgzXN7!n^962IboNSSiW;PZT^
zrFn>C!(554xvcOtRK}~<g&H>mvW>}Sz0DHKuXWpMiF-Q-fH2zA#79vBQ0F}86V&3}
z5=oPu56!pZ({<QVrkRoigT^ME<=x$ZRO3$6_G9IGwM}w)Iv%AF{;m8lw_lMA3d0vA
zWprp^2BlfTDbtJJ-YY!?_H6i^_nquSO}=NR<;K^3N**5|>`Iu1plPtw;vB{GNkPs?
zjjvz79-9+Nb{E-(#)iOnn}hHe?Ky8Om1nlf>Nok|{{~1v@wLa<(QmOB!b4m(ur4;%
z)%|LS6tA)K*;~J_SAPhSsG@#bpRBC-a13I<-Oq#AZw7y4xwk!DAmPr-!6yv??o@+5
zrTYKHz0m(JPpJ^NO`WdNI@dDTnJn?|_wBAUWMgWihc9A^ULoxLZ1tjt_B<B+QGW4B
z6>CFdwCK&@XIHbIf8d*>3FUou@=?@Gif^KLJ}_De@6p;p=2@kWI}5o`dR`QFSkPc2
z>b51X@kZ}eyp2&BothBO&1Zwn;R#zaC-(H~zJGQx-{MRZtQjSjjmPwne<sCzw(>-i
zuk>D))450X`3k8G{k?Z|2Qu&P*@oi>5gAXzGn4{Z-T`+T=F3;O!-;GM^DOGS?6BB7
z?cN@Z)m+GYF4%WotvC_f_w2y$@A~$8+FxVFyb3~5JumoK-qQIUzu?bFJB4c*FnqT7
zRatn}H=I-N6XPP*2wYANF~U~%_NC`!ah$my*=Js0zD_SxFwVZoN7{chA4?Ti<rK1P
z4e6trb5$!COu@Xiu(lqW3Z)?9InbtQ5+QuQewJzAdkLi&J8HkS)n#TcJKf|uS+##e
z*g+%wPP`R9I6Cs`J@u5Tz<kw*p4{I~aW}O>C^>P?x^woV7YxR!uBRbP_r23O#|4Rq
zzI<~}ai&IL*_rmKk%b$2?D{&{CW>*Rs|qXmX<i%gZrUp|qOCO|vu~my{W;naIF9{;
z!aXFSCrAF2+h%ZhX`{R1m9XL|Rbc2R8efU+L6|xAb-EYMyN`dU=y3a7JwqvaOZHIC
zLE~JPOElPVW*dG#lnoWdqZr<F23bK}BA=}oP>gaXci>ZDC;CKXf1tKIzD^UbHzrOE
zR*USadAbEf_PM%=H6l0IB}cZr-AvO0@_bE6C2EA;x&>AYzn4sx5cirlNUu>q1Q^-m
zo!(N;^%hE*l!OtLtx(}_@#;&pYPr_`n&rk`;vHE{ocpLEaY!l{oc?O=L5qfbxQb^Q
zu0Jo$JVS1i^sN=_alKq4ONSQ6vbnk7!7QDml()UM^z#jTd@hmAJ$nVSiqttHcA}TV
zd+jQ2jr64{yzGeuyi7KYUNt66-Er)t9OAQQvgz(34cBg(oxo5aVvd=J3q~v{>Gq)v
zDk?O2@H?Uv^ur2Ud(O@$(>8vr!bi`J{&t|nA4Bs0R4!}SOyR7bLp$7s*gC6B`MEbQ
ztze{xSW1uGJ@DgZ@7?ZGJE0SE6+OukNRReT+E1N4j_xY%dUE<T|IHbn`yA&<k_^}V
zP49WO>wQ!&rLCoI)=o0DK=Ol+x6($RAk`<!U)+4#g6L=Q!rb<Mw37Q{GP|6s`zH$%
zkqU>?PRL?ZvAc5Gn3U>zO<50G+iWl8ce`+<T{nA*b>ryKbGusZT5kQ_zJ*S^k3#Zk
zhn+mn%oWYtJ}c@ZTbdHBP)HK7AjN+r%~6wRP+@A@r6w*;*;RaGFh5wdeSX#{jXtl>
zkgu`UI$3QyRDOG~-532>vE1DeX}eyGhcH}5PcqFF&dKlTW^?RoDKfq8_6mET61k~!
ziRcSR{iONq7Uw`krGz(gK9Z(?@{-U7<!wS7_d_<s_UHcS{N_&it^MQg8`172Q%o2P
zamNsGQ+0*bVzdHpJMb7j5;IejQuJwExcL#%TrTXA@ZTy=WwJD7qL&2=aGo3o98K(A
z3hW5qaG!^ty`9tKeV$?x-?A*{{w)DCCujR(crQ4?^z~^X)dacXlpzbz`Zp_5B|j%g
zh#pApUlXax(S`fDxe28zZ<hC;oe%Do<Wy+pfe}=Y-}G<;+?FcIRQb&qZJVeq*26HT
z$Y1AXH!8k-peU1xHORIgCi-N*`?FRJTbQ2OYszQ2e^PKU`U*<_c!8(A5S1f{TUoG>
z5^Wi@A9>T0s1lzf6>g&w{;;3uy?47*`#$s=S-0m{Dh$SnCBFYhmnu~D!@uT}aDe6;
zh{h{#4ouWrdz%PzjPXN?YE8FcSfWI&X^*?|X}!(1L`2g4QmuAPA|c&^yqko|$`duQ
z>?6PkoVU<P*%BcK=CtgpB?Lay%b_^cU`|yrFBveKq*Am8L~ThfoBWnl*C^KHPUk?x
zS(h<ISgNloY!s0A3l@6x-eN<zDBat4^0O0K9r1vea5Du4^Ie=ySUL%exbF7FicQ8C
zV#eOcZn^6zetKu@b|+`}IpVFFhhP*(+)S6cL}c~nOq}7^&2K5*J;$YXIYGw`e3{Cz
zZzuB>IBG05C_(vh7KD@4npsDme>DUp?L;s4Nnua)vTGA&RMgW4v};MaeY0MIT{jSo
z2qL*CWp6Vi3dZoIRm#IZjFnq%Ui^u_88sJ<WD~E)y3Fr=k2q8G!toUBZl%XtP-(v;
znga%I{8IoteO%sxGR--Mw7&#u4{)g~-x<zz%{tyoG>6cRpV4tffC5f%^s@FHShJc|
zDL(?MZ!ksK(Yg@iN0|PyT$BDMKNxKoCz0}g^!vKT@vRpU5;K#NtQWuMpO@{Z@;aU1
z<4Ep@9ZyNME|;#qnxDriE?$4-;`4r&y1IHcHv6+4lj#V0vsXx_PeTFy$YVc>oh6g%
z!a@)$1BX(6VWqfuQvB_&*QCyN$eIHXeVti%Ma1K0UIKR#a0q1g@t`l2(D^^6Ki}dn
zm7^%Lj3Y}4;MJ=e9-aKxVE??K$w81i(ROtDdtfbPCD#9@EK8F1cwy~iQKjjBm`SD8
zuKZakKBvs{DjNN@o&S#obSmQnjcELdDS~)3-N+qkMg1Jjj+<Lr*ImHo4ID~<0qAN!
zhp(BHR5eRB=>O`lQ~9Uinn+eaKUIQ+>uKBHzt8_kI|O1{GL7kux)mLKe`PVAZ*~3X
z86K)EICdUsPe~28=1$#9#rOaVQe(pk9m`jqt6NjVfp1k(z4ZQFrZ)=#U2E$SzGZeR
z#gCij>ffmvHtO&u+TS3<*WE}sK`=v4Rp&I1aA0BLcOjuCdO2flk6B|D**jcqs&<k#
zx!*)t_%g-qWA#|euLNUUo|+DJwy~bsgTR|E>ioa|B@)Ar^1-t4;!O?)+fCsCyguq7
zGZmLgE;AmRd`dS>C#(~g#9ja$gxUZ8qu(GqxjhG63%;Ljps|_gw<vPx{$bMbqq>(P
z=NG#N2YcZ*SnQArbYWPo@1IA3e+PEU9*Tb}g^vcgT^{w|+AZfFehb0WmwhS9CW2Fy
z%()9ZaBYQP%m%b%|I=MsXugelA&PT2T`KsFG<f4VVSa=9i|VWURhk_f#L&gsQooHM
zl$Am4zh0v2AGK{n?84IVD>Y3`YE-Paa8$*Lf{3!$ymbF4ac2AZXH6r1YOz?$lkP+W
z)*O0z_P>h=7~t!n=dHYWJIVBP1T!Bl1Yt4yA7u>5ryK4c*1m@W6c-fl-n27PdLH?|
zEB#@H?kb>gL&Emlen}-QYs=%;q<FbvwDqWRlDetX^VM{Hj22dE5NFeKekb%_ga3`!
zkTO@DQY>!N_B4Lsh)5jiWwe>ce2fn~lR7PB#<wTpH%8k4f1%``{xCzIj8PQ7W$(L<
zBJ8OMboW9=v`$CFqhggq$(t$XG%XIj4UV%%6<4kiusDDe`*%-<W5GS~+fzj;N~N5D
zPN-JXp;&icmM*~(d1q&2_cgoSZ~M+cd)(GFwqJ5qi^9FK$3*R88pXw7{}hrhi{Uly
zJ}XHm{6?woo)qCMlz?w#=2E(z<kt>$JPW?*-oW%p#R+s}6SJo8K`Uaf$2?79KVqo0
zl`RzN7tZqUz0zfEY01bSHY(+i10LHm!d_!~)A4yl*Zh$Et-$m~<~t;x<Q@<g9uWqw
zMKgNtt;HAv<bv<wVWM;G^stFr#j(BFO6I?Q&KjDW937dN8JU=w7?~Ly+*?v*UfZ04
zZXAT&Wt;OrM?y6E^w`!R=fq_K@+4RW$zj5AT9cl*yDOD`BvYeajUAwXf+LF`a2Z5B
z#dWq^8eC2WfgAFi*O}sp)}}bF`xg;cWPAWxJN`?E8{~)4X!W79A-l}oJ4KCA8h2&Q
z&5wrFG%h>R{oMtdP1yw!ul>3Al%7GE8kAn7X#R8*L&E*&3Y!_|=iRNtct7<H^YRCn
z6$rNmJk{wgTKk!;`e%tpm=h<Te6=)Gks!OL<>%0!gOIU`c&d60-B%@pOw%kaj${m3
zpp~EHu)ZJ1;cv>}*p^Xfltp%_fbXduyQ&>_=R=M%Us;^J=I8cLe@wzB%ua1(nj^WU
z<oiP&^|mG{D%6RLegd7QBl%cku9mYzGF~2DU9GI5av@i<D$3KlG*I*+EA;l8gLv8X
z<9IK5gkNNikD0b4lvNe}=l93Qq*PIhE-o%Vdi9#FdY7of4OH#m>~<600d!S1oi=ag
z>6~5*Ryr<r{9&5%-5OT~3LMHHo%OlX!%Zwk>M6L$m(<Op(mb7eO0RDS7>kAK>^8Xu
zF5j<6`81@49xT<_jbc;v6wR*!7}kW=&}&r~o>)t;Et`qB&--PdJJEI8)+5K+VQnpf
zvm{2(a=XHnR4*H(jge-Y`dH7gl0O|CvW0@WgK@dPBCcY{s0rkTVPz^Jx;mV0EP)BY
zBB+GG<Y^Mv){YepQgsDG!Rn6I>u{&oY-`T<_9g2+1K3m9sSIm19jSGQPv0f|zhC$T
zT((9aP&Yv11-m~A=&|wQ;uvNQVPCdZaZ5x{@MM7$H5DD4F!KC(;4Smefet$nvxq|(
z3y}hRc!MNDTAlvh)ZM^HVNi|E6%%a89vgbNNQt{8Eq)FdC7^Os{KTheFbkAnPF9%0
zsAXk&Oe$-t`sbu_m`ef66#%0e>!N3VI~H$!E-o$xsYB)bq1?dq`g(6SjNglR`E|Ug
zkei$}7A^iv($Cnb!r@I}Qxi_u-paFLTDH{hT>#+$WihBJtD<|BC;N2aEwiOFb>!9X
z&X~6ba&?Oks{}tzdGP|Z<$`_tW&Wg|Z3*vLZ%hhnQf+N*d3i*wuCjL^D7Euh>f8mS
zGs~SHKWN4ZlJ&j3ysAn)0DQDL;Puee<k(c=YiVn19xRD4QLlpn&cr`e^WXt+KHkX)
zNdd;Pb9I6bgFjTjNUlYrXQswRMv9B$)7U3LNRrg5dL2FEw>iqKXXTA4VH9__+;rbo
zJUnC+arsFYczaY;Q=0zcx99n>DjFSaGf^Q3Yb=%n&W^KFHKbkg`zU}&5!AAsZE$ti
z>CBGa*4O^9(_`eWZoYUZ;~=-5@yOz!CGZ+B+ZceJCg-IL<Gha=G(d4k!GN0kLwg}#
zJlxFVc(@m~NKE{;M3*-9KfzIE3#*Z6Z7*+k-QPR<x$0YUgtlQdz@?};T%Ib+RCTV{
z&YkSs*;xm*_5j5TsXXfG`O0cCLo(AMaDknHnk+TYXado8YiNoZc*}h&`u*MS7McXz
zE123PDM+XFdcDR-oEBkrv*pduR`C9+)InynexuhL;;$qM>~1ZV{k~{8M4+7Eg~z+s
zNMOZS;Q2UKi|`*Q%9=|qUllwk4Zhye-k06C#t#P-q<ZhISHOgACxDT-b!lUc);r@e
zlFYLsjO7>K#mKQLK_z6eB`VF=+EHA<*r3*FeQ)`BZwVtKBY2UHyaBh`#*ME~VsH|V
z<V9py`^=q5f=V3Mg*M<9i3@}1pCsL@yHY<yI=7z_toCcip=xz!sS5&k|4<*}>ZoL`
z!3Zx*d$e2otMV|z;yHRFvf{OeYjz846e44g(bu<qxH%;l%mc4G-wICKjy%01tAb)>
z-!c|W)p94s$vlSjlHa<OD(3p%*=-pqv4Jtia>p66oZD&jva&aKJ<6|X8kdzQxD&DK
zTPa{RLK#m3zWC{8O=YJKtgSu(UXWm_{8>9b7t>z-`JJ=<iB@b>(?^wcVUCexEaPPf
z=7}m^W%0FY%=k&$U7WLXC7W`?=ul;OvF!{XObDu4Y>oH{#R$9hffa_=^VdTaE1IRG
zc2-t<fRYh0)<4MLZRw)s3{OC%oYc<R%}f>+A7ZiL9>umkt6Mq|6AIZ8SQ=}8MrLN-
zrIGK&LuP>D2(Nj+7+am;qBp|)LCAZ*IiMA&9crDH_l)e9&W+>8jmu0eiVZ3C2ddg{
z9uSj~Re_J4XKK}~)+6#DK5y-Q?F0mY1!&eXFrivCbDEtTg~Khi4Bq1eWH2lHV9whL
zSGTCF)wRpiGT*I+!}}+fOf&*r94F3~mU8kOXO;n|^AUK(zLU+ukv}ix3Yg|3qx5aJ
z7{W~nihGX7wG<#C6#Fi@3EEg_4Ez*znm_OCJYh>ee}ZY~)wMJ8s&k+&QLgjcmvuBV
zFOOB)M*}<hzJhr-n=PaDJPYd*7%!S)gw9rJO3T7lSN>Fi*Ptn`cXrS%iqYH3Wa+c8
z#^}(@$k3dWfS09AeKNCWPPVQztkf~(q-EB;@0N9GHfz=&<~jG%gD_C-zytlAOR81A
zO-3DY_@kF;CajT!^XKnmu!6FdYG}$R7_MMcl(Oqrc}|T{R#LK^sCXmwG-iSPZz@NF
z>t?mj?8uk}81h}Qv32()eiL32iZ$CC>)pkLT{a_{N^Dah*|^5j8^}od;D@6T#Ra>&
zo0Dd5--gby0Wl@fj_Uo^b;^nB_3;9_2k{SjlXFL3t_!zWTgCe2{x|lZczAYpHzwMr
z=j<{pK{3LuSHedmwRd*3sIc~EV+1+LSwB7inM4W$gAU)bzLJu@-Cg=zdY8@7HsF2H
z5DuKC-Q4ZDs#%l01<55mo;A|MHe7YX%oc7A>aT%$%;NWVqqx0MFwk;utPZZdK_BQe
zbe4srtL;vk&6I%-u+$RI^7it|p{W9MriiHL*^K+#;1ozP>_v+nEBw{a@feXAGY_ah
z!g{y0YnZ;&Z=^SEXNOXNDz@R$QsebC(;0PgrY&X~n!zZq#zJvaPft&Oe|bQ_<5>tT
z96VDH!pZ(>6$Ww?1lp>mUATSA`v|*k&P*?Cht&|@cQ89xXm1GsXCxy#VD8G{*Z0L@
z(P`UCHLR@Py`(`0(gj%)N_ndJV$>(NZ@XxW)r1N~9nk-rAbE$7WnfDcO0q|#HT_}6
z3^h$uSC0-13>@{Pk95z@GM*hVcP^XhX!C)*z%WyFX67Oo15LoCci}TL;keYGL1ZDd
zzp&9ktW|-x@j>uiM+!^C^t3J>U`VByB@1HIbv8Grq{LxJ6YY>tm3Zvfq1~p0!{41A
zMZ?>0VM}B}@flXa@nr93$>#Cy(fY@z#ig0^wY7GzSUx;N4{a|9&%NLmjAvwc@rxbI
z=mnrX)3yA$sa?r%ml5E;00x)G@zTaT9GU*`MoW1zlZ85#^odiv5r+6WCiaVwc~PZi
zX{p+J=l+P`%7Js_2<Zks`z$c1e`Ex$Cn9#8=Q0q3XQ{)+weG?_e!d#DY*b`<{(P-_
zi<O@D-qX$wm|tWvA6fHk517pN#{|CT3ZDX%a)h~Yvhb7krR)a&0AHP<Z#nBVE+2PO
zP$zfB3WbYYZWr~{E^NGQ?~hN0!Su@I;)R87{c%gk;4B(?rdv~3%A$5bV(~{Lcbv*d
zmtMJLF`q^&{8s=OOecs7Hzi8=`C0oUxY#*MFZEJAMj*Um_huzaV$hRw;;$OqH6a(K
zn74zyHX6u(bKfytrh97;CWs^Pbr5`qFmk(7M5XjLUQt7E*|vIaBr289^<!Saaj6lN
z=^~Yxmd_Jzh)&%#O?@+@U#-XScH1q%i<fe-S9eX})w#NNl}>@O24Sw_l`?hv<ASF2
z{-#>LZ_$TxE@^Gv;%ZrNSr&YUHZGI-9`xiBO@bG)wJ`WR^`R696%4z7hEr_}$S@{y
z^JG&=I}JcKp5p4LFh8!}_RlrsD+`)vxMEbs0t<TLL6dNbYOU5q6a+xI!$ygS9%%Pc
zsXo4k4GVktoGsS-N%b11Qkvfr3!((C&SoP?2JQdaKCz9<EMg^EV#`>VLvpA4WVc~|
z9^M3hN;1&U6`l_hDWA3;R%CQJpR6)_=yDo=`;w+rT0kys-Dht4U*8gYjjH78@4)ZW
zm1{rly=bg*8{^HtCdtP{L{}{3WL~M2AKudu(48BAjLM(JJ6zJt>T9MPFfIRFqv0yC
za5wNt0lDF>%72tv-^h->{lX-*DT12^XJ7b2@4IQ&Y}sN?Hl|290I?F>(t4zTpcErg
z$f4DI#7NFqCU~QoqjEiglQM#Z%Q46>tj4&eyF@_<^tpx0Zr=3T*qsk+@lR_wM%Oqa
z`*%4%<QarLB2thr`BctG&P{eFu)V~&cCX=1@O%aO&7{MjU|Z!y*yBo^Ok1S8X-pJ*
zlnbf#UEkc=p;DQ9{!cP*aSiCvDlE`e+VV^EZ?y5;P`GUP+otuofPt_2$ejyNsUi!V
zMPY=a>Lap7N?cwCqwkZXD1(?&&}u!R1RB0FnHegsm^3PzQJJ>qnp@w?hB<DP+DY~u
z9#`N@9bcdO-KoA<nr=Le>&PJwk-s((L?cw6mQ^}jy$CUqLwvm6Y**D7_k>o{N|ZtS
zJN+H*yyu!m^8Zn?+){u$hvarN)<iNqf)Q?mq~@m*Gfbq>y9Ua!)*EBJbY9%A#QmNm
z8KNkchqh%Wh#UHs!g&je2OKQQH*O~U6jHxzP{tXqt|Md{8;b0uWS-MYvC{yz!R!6~
zbljhGW@GOkT`~r8MT?M}v?2QsW=*|cyjdTkn!oEp%G##sxjq#C^cunz)4N<MojtRP
zlOcnWb#{TiY#Dx2!Of|=YI3j{R*63L^37!e?N~X`vEkxpzPc$vtl*^AVl-JaC)SRL
zr->~Ky4h+J7n&RO$Wbc*YAA98#NURaPkXa&lzHsjd7<)LY9wq~zZ@)V_M;5s9^p2k
zdn$g(_B2yAacW)`wr&>5Rwx=^*QKG3csMX}G$i<qeC*)jNp9BoCam(IX<mM*SLgcx
zq{!H6t=Ky5K<As*PX~FZY)zU7U)dGOz%j8c*#w2n%-0@=RxDemUsW9spO`3JF$NtW
z$o(lJOeCFk3KHY69Y5ajLScN%X2L^pz2<#)+_W4Eu|j0%>j;(c_-EYoW$U*S+MEp6
z@bmJKv^5*`(XkhRsSPbgikHel2l7|S`3B=BRld|+LUtG{A}Y?k{qJ@)Q$itSK@5(%
za8tRm*P2;+1({Uhx-y*Pj1I)-Oy82g2|kBC;bTpFeOIMnw6It!v6LVkBlKy`uVEcx
zvOM;nJu%=($b3KLO3|kq)PXqaN|W@UC-a{Yhkq<@)O)$)bJO$CEJyrXfYU7_mLR&7
z*ElW-Kg@G6f6g8LZT5O=TCUG275lzK^K;WrVXJYUZcI>t0IZ$AKf@O#XF<}|c%lF9
zuI61ibNym2Abb&CE&NmS%C%DIl@Lq$8YdYTUxEq<jzx{yEVawDnsl|CnpwWrjRqbz
zc-@GZ3^r7WZ>(-YaC=aR`GIGg-=Y(>x9OTqYzOhF?Xz=YbU&B>zCL#7<!_x7klR%E
zId`E!uH(~<??Hh)abI#eKD_<;km4d38=3WL)@DR*JKldlIP22nuIst{f9nvO6!?fh
kIKK_e0pE~ZymW|(W@rab(|dX3!B2?f-YCnINPqhLe}mY*T>t<8

literal 0
HcmV?d00001

diff --git a/ui/tests/registry/registry-page.ts b/ui/tests/registry/registry-page.ts
new file mode 100644
index 0000000000..5d1ae1fe14
--- /dev/null
+++ b/ui/tests/registry/registry-page.ts
@@ -0,0 +1,310 @@
+import { expect, type Locator, type Page, test } from "@playwright/test";
+
+import { BasePage } from "../base-page";
+
+export class RegistryPage extends BasePage {
+  async captureEvidence(name: string): Promise<void> {
+    const path = test.info().outputPath(`${name}.png`);
+    await this.page.screenshot({
+      path,
+      fullPage: true,
+      animations: "disabled",
+    });
+    await test.info().attach(name, { path, contentType: "image/png" });
+  }
+  readonly connectButton: Locator;
+  readonly connectDialog: Locator;
+  readonly exploreTab: Locator;
+  readonly myArtifactsTab: Locator;
+  readonly registryKeyInput: Locator;
+  readonly registryLink: Locator;
+  readonly searchInput: Locator;
+  readonly refreshButton: Locator;
+
+  constructor(page: Page) {
+    super(page);
+    this.connectButton = page.getByRole("button", {
+      name: "Connect API key",
+    });
+    this.connectDialog = page.getByRole("dialog", {
+      name: "Connect Registry",
+    });
+    this.exploreTab = page.getByRole("tab", { name: /All/ });
+    this.myArtifactsTab = page.getByRole("tab", { name: /My artifacts/ });
+    this.registryKeyInput = page.getByLabel("Registry key");
+    this.registryLink = page.getByRole("link", { name: "Registry" });
+    this.searchInput = page.getByLabel("Search artifacts");
+    this.refreshButton = page.getByRole("button", { name: "Refresh Registry" });
+  }
+
+  async goto(): Promise<void> {
+    await super.goto("/registry");
+    await this.dismissWelcomeDialog();
+  }
+
+  artifactCardFor(name: string): Locator {
+    return this.page
+      .getByRole("listitem")
+      .filter({ has: this.page.getByText(name, { exact: true }) });
+  }
+
+  addButtonFor(name: string): Locator {
+    return this.page.getByRole("button", { name: `Add ${name}` });
+  }
+
+  updateButtonFor(name: string, version: string): Locator {
+    return this.page.getByRole("button", {
+      name: `Update ${name} to ${version}`,
+    });
+  }
+
+  removeButtonFor(name: string): Locator {
+    return this.page.getByRole("button", { name: `Remove ${name}` });
+  }
+
+  async verifyDirectRouteDenied(): Promise<void> {
+    await this.dismissWelcomeDialog();
+    await expect(this.page).not.toHaveURL(/\/registry(?:\?|$)/);
+    await expect(
+      this.page.getByRole("heading", { name: "Profile" }),
+    ).toBeVisible();
+  }
+
+  async verifyRegistryNavigationVisible(): Promise<void> {
+    await this.dismissWelcomeDialog();
+    await expect(this.registryLink).toBeVisible();
+  }
+
+  async verifyRegistryNavigationHidden(): Promise<void> {
+    await expect(this.registryLink).toBeHidden();
+  }
+
+  async verifyOnboarding(): Promise<void> {
+    await expect(this.connectButton).toBeVisible();
+    await expect(
+      this.page.getByRole("link", {
+        name: "Explore Prowler Registry (opens in a new tab)",
+      }),
+    ).toBeVisible();
+  }
+
+  async verifyMarketplaceReady(): Promise<void> {
+    await expect(this.exploreTab).toBeVisible();
+    await expect(
+      this.page.getByRole("button", { name: "Manage access" }),
+    ).toBeVisible();
+  }
+
+  async verifySearchPreserved(search: string): Promise<void> {
+    await expect(this.searchInput).toHaveValue(search);
+    expect(new URL(this.page.url()).searchParams.get("filter[search]")).toBe(
+      search,
+    );
+  }
+
+  async submitRegistryKey(key: string): Promise<void> {
+    await this.connectButton.click();
+    await expect(this.connectDialog).toBeVisible();
+    await expect(this.registryKeyInput).toBeFocused();
+    await this.registryKeyInput.fill(key);
+    await this.page
+      .getByRole("button", { name: "Connect", exact: true })
+      .click();
+  }
+
+  async connectFixtureRegistry(): Promise<void> {
+    await this.dismissWelcomeDialog();
+    await this.verifyOnboarding();
+    await this.submitRegistryKey("fixture-registry-key-not-a-secret");
+    await this.verifyMarketplaceReady();
+  }
+
+  async verifyCompleteCatalogSearchAndFilters(): Promise<void> {
+    const sharedPolicyCard = this.page.getByText("Fixture shared policy", {
+      exact: true,
+    });
+    const networkAuditCard = this.page.getByText("Fixture network audit", {
+      exact: true,
+    });
+    await this.searchInput.fill("shared");
+    await expect(sharedPolicyCard).toBeVisible();
+
+    await this.page
+      .getByRole("combobox", { name: "Filter by provider" })
+      .press("Enter");
+    await this.page.getByRole("option", { name: "AWS", exact: true }).click();
+    await expect(this.page).toHaveURL(/filter%5Bprovider%5D=aws/);
+    await this.page.keyboard.press("Escape");
+    await expect(sharedPolicyCard).toBeVisible();
+
+    // The multi-provider artifact stays reachable through every provider it serves.
+    await this.page
+      .getByRole("combobox", { name: "Filter by provider" })
+      .press("Enter");
+    await this.page
+      .getByRole("option", { name: "Google Cloud", exact: true })
+      .click();
+    await this.page.keyboard.press("Escape");
+    await expect(sharedPolicyCard).toBeVisible();
+    await expect(networkAuditCard).toBeHidden();
+
+    await this.page
+      .getByRole("button", { name: "Clear filters", exact: true })
+      .click();
+    await expect(networkAuditCard).toBeVisible();
+  }
+
+  async verifyOwnerRows(): Promise<void> {
+    // Logo-backed owner renders its image; the logo-less owner falls back to
+    // an initial avatar, so only its name is asserted.
+    await expect(this.page.getByText("Prowler Fixtures")).toBeVisible();
+    await expect(
+      this.page.locator('img[src$="/fixture-owner.svg"]'),
+    ).toBeVisible();
+    await expect(this.page.getByText("Community Fixtures")).toBeVisible();
+  }
+
+  async verifyBuiltInArtifactHasNoAdd(name: string): Promise<void> {
+    const card = this.artifactCardFor(name);
+
+    await expect(card.getByRole("status", { name: "Built in" })).toBeVisible();
+    await expect(
+      card.getByRole("button", { name: `Add ${name}` }),
+    ).toBeHidden();
+  }
+
+  async addLatest(name: string): Promise<void> {
+    await this.addButtonFor(name).click();
+    await expect(
+      this.artifactCardFor(name).getByText("Added", { exact: true }),
+    ).toBeVisible();
+  }
+
+  async verifyAddedInMyArtifacts(name: string): Promise<void> {
+    await this.myArtifactsTab.click();
+    await expect(this.removeButtonFor(name)).toBeVisible();
+  }
+
+  async removeArtifact(name: string): Promise<void> {
+    await this.removeButtonFor(name).click();
+    await expect(
+      this.page.getByRole("button", { name: "Cancel" }),
+    ).toBeFocused();
+    await this.page.getByRole("button", { name: "Confirm Remove" }).click();
+    await expect(
+      this.page.getByText("Artifact removed", { exact: true }),
+    ).toBeVisible();
+  }
+
+  async dismissWelcomeDialog(): Promise<void> {
+    for (const name of ["Got it", "Skip for now"]) {
+      const dismiss = this.page.getByRole("button", { name, exact: true });
+      if (
+        await dismiss
+          .waitFor({ state: "visible", timeout: 1500 })
+          .then(() => true)
+          .catch(() => false)
+      )
+        await dismiss.click({ timeout: 2000 }).catch(async () => {
+          // A route transition can unmount the welcome popover while it animates.
+          await expect(dismiss).toBeHidden();
+        });
+    }
+  }
+
+  async verifyKeyIsNotDisclosed(
+    key: string,
+    requestUrls: string[],
+  ): Promise<void> {
+    const literalKey = new RegExp(
+      key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"),
+      "u",
+    );
+    await expect(this.page).not.toHaveURL(literalKey);
+    await expect(this.page.locator("body")).not.toContainText(key);
+    for (const requestUrl of requestUrls) {
+      expect(requestUrl).not.toContain(key);
+    }
+
+    const storedValues = await this.page.evaluate(() => [
+      ...Object.values(localStorage),
+      ...Object.values(sessionStorage),
+    ]);
+    for (const storedValue of storedValues) {
+      expect(storedValue).not.toContain(key);
+    }
+  }
+  async connectInstalledProviderAndScan(): Promise<void> {
+    await this.page.getByRole("link", { name: "Go to Providers" }).click();
+    await expect(this.page).toHaveURL(/\/providers$/);
+    await this.dismissWelcomeDialog();
+    await this.page.getByRole("button", { name: /Add (a )?Provider/i }).click();
+    const allTab = this.page.getByRole("tab", {
+      name: "All providers",
+      exact: true,
+    });
+    const registryTab = this.page.getByRole("tab", {
+      name: "Registry",
+      exact: true,
+    });
+    const nativeProvider = this.page.getByRole("option", {
+      name: "Amazon Web Services",
+      exact: true,
+    });
+    await expect(allTab).toHaveAttribute("aria-selected", "true");
+    await expect(nativeProvider).toBeVisible();
+    await registryTab.click();
+    await expect(nativeProvider).toBeHidden();
+    await expect(
+      this.page.getByRole("option", { name: "Fixture Cloud Registry" }),
+    ).toBeVisible();
+    await this.page
+      .getByRole("option", { name: "Fixture Cloud Registry" })
+      .scrollIntoViewIfNeeded();
+    await this.captureEvidence("registry-provider-selector");
+    await this.page
+      .getByRole("option", { name: "Fixture Cloud Registry" })
+      .click();
+    await this.page
+      .getByLabel("Provider UID", { exact: true })
+      .fill("fixture-account");
+    await this.page
+      .getByLabel("Provider alias (optional)")
+      .fill("Registry test account");
+    await this.page.getByRole("button", { name: "Next", exact: true }).click();
+    const token = this.page.getByLabel("API token", { exact: false });
+    await expect(token).toBeVisible();
+    await expect(token).toHaveAttribute("type", "password");
+    await this.captureEvidence("registry-provider-credentials");
+    await token.fill("fixture-provider-token-not-a-secret");
+    await this.page
+      .getByRole("button", { name: "Authenticate", exact: true })
+      .click();
+    await this.page
+      .getByRole("button", { name: "Check connection", exact: true })
+      .click();
+    await this.page
+      .getByRole("radio", { name: "Run now", exact: true })
+      .click();
+    await this.page
+      .getByRole("button", { name: "Launch scan", exact: true })
+      .click();
+    await expect(
+      this.page.getByText("Scan launched", { exact: true }),
+    ).toBeVisible();
+    await this.page.goto("/scans?tab=completed");
+    const completedScan = this.page
+      .getByRole("tabpanel", { name: "Completed", exact: true })
+      .getByRole("row")
+      .filter({
+        has: this.page.getByText("Fixture Registry scan", { exact: true }),
+      });
+    await expect(
+      completedScan.getByText("Fixture Registry scan", { exact: true }),
+    ).toBeVisible();
+    await expect(
+      completedScan.getByText("Registry test account", { exact: true }),
+    ).toBeVisible();
+    await this.captureEvidence("registry-provider-scan-completed");
+  }
+}
diff --git a/ui/tests/registry/registry.md b/ui/tests/registry/registry.md
new file mode 100644
index 0000000000..409ba9ead0
--- /dev/null
+++ b/ui/tests/registry/registry.md
@@ -0,0 +1,114 @@
+### E2E Tests: Registry
+
+**Suite ID:** `REGISTRY-E2E`
+**Feature:** Cloud Registry access, onboarding, and tenant artifact management.
+
+**Fixture boundary:** `pnpm run test:e2e:registry` uses `playwright.registry.config.ts` to start a test-only local API fixture and three real Next.js servers. It uses only synthetic fixture identities, token shapes, and Registry key data. It exercises the browser, NextAuth, proxy, server actions, and Registry UI; it does not prove a proprietary Registry deployment. Live controlled-backend acceptance remains a rollout prerequisite.
+
+---
+
+## Test Case: `REGISTRY-E2E-001` - Fail-Closed Runtime Profiles
+
+**Priority:** `critical`
+**Tags:** @e2e, @registry
+
+**Preconditions:** Local and Cloud-with-Registry-flag-off fixture servers.
+
+**Expected Result:** Registry navigation is absent and the direct route redirects safely in both profiles.
+
+## Test Case: `REGISTRY-E2E-002` - Enabled Manager Discovery
+
+**Priority:** `critical`
+**Tags:** @e2e, @registry
+
+**Preconditions:** Enabled Cloud fixture server and synthetic manager session.
+
+**Expected Result:** Registry navigation is visible with the established New badge.
+
+## Test Case: `REGISTRY-E2E-003` - Current-Authority Revocation
+
+**Priority:** `critical`
+**Tags:** @e2e, @registry
+
+**Preconditions:** The fixture revokes current authority after the browser receives a manager session.
+
+**Expected Result:** The next page request refreshes navigation from current authority; stale browser state cannot open `/registry` or mutate artifacts.
+
+## Test Case: `REGISTRY-E2E-004` - Write-Only Credential Validation
+
+**Priority:** `critical`
+**Tags:** @e2e, @registry
+
+**Flow:** Hold the credential validation task, submit the synthetic key, verify the disabled Connecting… control and key field, check for disclosure, then release the task.
+
+**Expected Result:** The `202` task stays pending until explicitly released. The task watcher then settles through an authoritative status read into the connected marketplace with a "Registry connected" toast. The key does not appear in DOM text, the page URL, request URLs, or browser storage values, including inside JSON or longer strings.
+
+## Test Case: `REGISTRY-E2E-012` - Provider Management Without Registry Management
+
+**Priority:** `critical`
+**Tags:** @e2e, @registry
+
+**Preconditions:** Enabled Cloud fixture server with an external provider artifact installed. The fixture then revokes `manage_registry` while retaining `manage_providers`.
+
+**Flow:** Verify that the Registry route redirects and its navigation entry is hidden. Open Providers, select the installed provider from the Registry tab, and submit its UID and alias.
+
+**Expected Result:** The provider manager can discover the installed provider and create an account. The wizard advances to its API token credential form, and the new account persists in Providers. Registry navigation remains hidden. This synthetic browser acceptance exercises UI permissions and the fixture HTTP contract; it does not replace authorization tests against the real API.
+
+## Test Case: `REGISTRY-E2E-005` - Complete Catalog, Recovery, and Lifecycle
+
+**Priority:** `critical`
+**Tags:** @e2e, @registry
+
+**Expected Result:** The All tab displays the complete paginated catalog and supports search, combined provider and capability filters, URL state, and owner logos with fallback. Built-ins display Built in without Add. Checks/compliance-only artifacts remain visible without Add. An external provider artifact installs through a 202 task and an authoritative membership read before Added appears. Removal preserves provider accounts. Reconnect, unavailable, and generic failures have actionable empty states.
+
+## Test Case: `REGISTRY-E2E-006` - Pixel 5 Reduced-Motion Browsing
+
+**Priority:** `high`
+**Tags:** @e2e, @registry
+
+**Expected Result:** Pixel 5 browsing with the reduced-motion preference enabled remains usable, and the card Add action stays fully keyboard-operable with an authoritative confirmation toast.
+
+## Test Case: `REGISTRY-E2E-007` - Registry Provider Onboarding and First Scan
+
+**Priority:** `critical`
+**Tags:** @e2e, @registry
+
+**Preconditions:** Private Cloud fixture profile with billing disabled, `manage_registry`, `manage_providers`, and `manage_scans`.
+
+**Expected Result:** Installing the external provider makes Fixture Cloud available with a Registry badge in the Add Provider selector. All shows native and installed Registry providers; switching to Registry shows only installed providers. The wizard accepts UID/alias, renders masked API token credentials from the backend schema, saves the synthetic secret, requires explicit connection success, and launches a scan visible in Scans. No credential values are stored in localStorage or sessionStorage. This synthetic acceptance covers the UI/HTTP contract; real Registry and provider credentials are still required for live validation.
+
+After the scan, removing the artifact preserves the account in Providers and removes the dynamic type from the next Add Provider selector.
+
+## Test Case: `REGISTRY-E2E-008` - Installation Across Reload
+
+**Priority:** `critical`
+**Tags:** @e2e, @registry
+
+**Expected Result:** A pending installation survives a hard reload. After the controlled task is released, an authoritative membership read updates My artifacts and emits one success notification. The browser submits the installation only once.
+
+## Test Case: `REGISTRY-E2E-009` - Version Updates and Recovery
+
+**Priority:** `critical`
+**Tags:** @e2e, @registry
+
+**Flow:** Install 1.2.3, publish 1.3.0 in the controlled catalog, reject the first update, retry and reload while pending, then offer and install 1.2.3 from My artifacts.
+
+**Expected Result:** Cards show installed and available versions. Rejection preserves 1.2.3 and allows retry. Its notification shows a generic installation failure without exposing the backend diagnostic. The update submits the exact target, blocks duplicate actions, survives reload and emits one update notification after version confirmation. A lower catalog version also offers Update.
+
+## Test Case: `REGISTRY-E2E-011` - Disclosure Assertion Regression
+
+**Priority:** `critical`
+**Tags:** @e2e, @registry
+
+**Flow:** Embed a synthetic key in a request URL and in nested JSON values in localStorage and sessionStorage, checking each surface independently. Remove each injected storage entry afterward.
+
+**Expected Result:** The disclosure helper rejects every embedded key and passes once all injected values are removed.
+
+## Test Case: `REGISTRY-E2E-010` - Catalog Refresh
+
+**Priority:** `high`
+**Tags:** @e2e, @registry
+
+**Flow:** Publish a new artifact before each trigger: switching tabs, clicking Refresh, and dispatching window focus.
+
+**Expected Result:** All three publications appear without leaving Registry. Search input and URL filters remain intact; the API receives new catalog reads.
diff --git a/ui/tests/registry/registry.spec.ts b/ui/tests/registry/registry.spec.ts
new file mode 100644
index 0000000000..99100909b5
--- /dev/null
+++ b/ui/tests/registry/registry.spec.ts
@@ -0,0 +1,492 @@
+import { expect, test } from "@playwright/test";
+
+import {
+  controlledRegistryFixture,
+  FIXTURE_REGISTRY_KEY,
+} from "./controlled-registry-fixture";
+import { RegistryPage } from "./registry-page";
+
+const fixtureMode = process.env.E2E_REGISTRY_ACCEPTANCE_MODE === "fixture";
+const enabledProject = "registry";
+const flagOffProject = "registry-flag-off";
+const localProject = "registry-local";
+const mobileProject = "registry-mobile";
+
+function skipUnlessProject(projectName: string) {
+  test.skip(
+    test.info().project.name !== projectName,
+    `This scenario runs in the ${projectName} fixture profile.`,
+  );
+}
+
+test.describe.serial("Registry", () => {
+  test.setTimeout(60_000);
+  test.use({ storageState: "playwright/.auth/manage_registry_user.json" });
+
+  test.beforeEach(async ({ page }) => {
+    test.skip(
+      !fixtureMode,
+      "Registry browser acceptance is available only through the self-contained fixture profile.",
+    );
+    await controlledRegistryFixture.reset();
+    // Exercise the real media CSP without contacting the Registry service.
+    await page.route(
+      "https://media.registry.dev.prowler.com/fixture-owner.svg",
+      (route) =>
+        route.fulfill({
+          contentType: "image/svg+xml",
+          body: '<svg xmlns="http://www.w3.org/2000/svg" width="20" height="20"><circle cx="10" cy="10" r="10" fill="#2563eb"/></svg>',
+        }),
+    );
+  });
+
+  test(
+    "detects keys embedded in request URLs and browser storage JSON",
+    { tag: ["@critical", "@e2e", "@registry", "@REGISTRY-E2E-011"] },
+    async ({ page }) => {
+      skipUnlessProject(enabledProject);
+      const registryPage = new RegistryPage(page);
+      const key = "synthetic-registry-disclosure-check";
+      await registryPage.goto();
+      await registryPage.verifyOnboarding();
+
+      await expect(
+        registryPage.verifyKeyIsNotDisclosed(key, [
+          `https://registry.test/request?key=${key}&source=test`,
+        ]),
+      ).rejects.toThrow();
+
+      for (const storage of ["localStorage", "sessionStorage"] as const) {
+        await page.evaluate(
+          ({ storage, key }) => {
+            window[storage].setItem(
+              "disclosure-regression",
+              JSON.stringify({ nested: { key } }),
+            );
+          },
+          { storage, key },
+        );
+        try {
+          await expect(
+            registryPage.verifyKeyIsNotDisclosed(key, []),
+          ).rejects.toThrow();
+        } finally {
+          await page.evaluate((storage) => {
+            window[storage].removeItem("disclosure-regression");
+          }, storage);
+        }
+      }
+      await registryPage.verifyKeyIsNotDisclosed(key, []);
+    },
+  );
+
+  test(
+    "fails closed in Local and Registry-flag-off process profiles",
+    { tag: ["@critical", "@e2e", "@registry", "@REGISTRY-E2E-001"] },
+    async ({ page }) => {
+      test.skip(
+        ![flagOffProject, localProject].includes(test.info().project.name),
+        "This assertion requires the Local or Registry-flag-off fixture profile.",
+      );
+      const registryPage = new RegistryPage(page);
+
+      await page.goto("/");
+      await registryPage.verifyRegistryNavigationHidden();
+      await registryPage.goto();
+      await registryPage.verifyDirectRouteDenied();
+    },
+  );
+
+  test(
+    "shows the New Registry navigation entry only in the enabled manager profile",
+    { tag: ["@critical", "@e2e", "@registry", "@REGISTRY-E2E-002"] },
+    async ({ page }) => {
+      skipUnlessProject(enabledProject);
+      const registryPage = new RegistryPage(page);
+
+      await page.goto("/");
+      await registryPage.verifyRegistryNavigationVisible();
+      await expect(
+        registryPage.registryLink.getByText("New", { exact: true }),
+      ).toBeVisible();
+    },
+  );
+
+  test(
+    "denies stale manager storage after controlled current-authority revocation",
+    { tag: ["@critical", "@e2e", "@registry", "@REGISTRY-E2E-003"] },
+    async ({ page }) => {
+      skipUnlessProject(enabledProject);
+      const registryPage = new RegistryPage(page);
+
+      await page.goto("/");
+      await registryPage.verifyRegistryNavigationVisible();
+      await controlledRegistryFixture.revokeCurrentAuthority();
+      // No client-side lease machinery: revocation is enforced by the API and
+      // lands on the next server-rendered request.
+      await page.goto("/");
+      await registryPage.verifyRegistryNavigationHidden();
+      await registryPage.goto();
+      await registryPage.verifyDirectRouteDenied();
+    },
+  );
+
+  test(
+    "lets provider managers create an installed Registry provider account without Registry management access",
+    { tag: ["@critical", "@e2e", "@registry", "@REGISTRY-E2E-012"] },
+    async ({ page }) => {
+      skipUnlessProject(enabledProject);
+      const registry = new RegistryPage(page);
+      await registry.goto();
+      await registry.connectFixtureRegistry();
+      await registry.addLatest("Fixture network audit");
+
+      // The synthetic current-user response keeps manage_providers=true while
+      // revoking manage_registry. Live API authorization needs separate coverage.
+      await controlledRegistryFixture.revokeCurrentAuthority();
+      await registry.goto();
+      await registry.verifyDirectRouteDenied();
+      await registry.verifyRegistryNavigationHidden();
+
+      await page.goto("/providers");
+      await registry.dismissWelcomeDialog();
+      await registry.verifyRegistryNavigationHidden();
+      await page.getByRole("button", { name: /Add (a )?Provider/i }).click();
+      await page.getByRole("tab", { name: "Registry", exact: true }).click();
+      const provider = page.getByRole("option", {
+        name: "Fixture Cloud Registry",
+      });
+      await expect(provider).toBeVisible();
+      await provider.click();
+      await page
+        .getByLabel("Provider UID", { exact: true })
+        .fill("fixture-provider-manager-account");
+      await page
+        .getByLabel("Provider alias (optional)")
+        .fill("Provider manager Registry account");
+      await page.getByRole("button", { name: "Next", exact: true }).click();
+      await expect(
+        page.getByLabel("API token", { exact: false }),
+      ).toBeVisible();
+      expect(await controlledRegistryFixture.snapshot()).toMatchObject({
+        providerCreated: true,
+        secretSaved: false,
+      });
+
+      await page.goto("/providers");
+      await expect(
+        page.getByRole("row").filter({
+          hasText: "Provider manager Registry account",
+        }),
+      ).toBeVisible();
+      await registry.verifyRegistryNavigationHidden();
+    },
+  );
+
+  test(
+    "keeps an onboarding key write-only while 202 validation settles through an authoritative read",
+    { tag: ["@critical", "@e2e", "@registry", "@REGISTRY-E2E-004"] },
+    async ({ page }) => {
+      skipUnlessProject(enabledProject);
+      const registryPage = new RegistryPage(page);
+      const requestUrls: string[] = [];
+      page.on("request", (request) => requestUrls.push(request.url()));
+
+      await registryPage.goto();
+      await registryPage.verifyOnboarding();
+      await controlledRegistryFixture.holdCredentialTask(true);
+      await registryPage.submitRegistryKey(FIXTURE_REGISTRY_KEY);
+      // The form stays visible while the task watcher tracks validation: the
+      // submit control flips to a disabled Connecting… state.
+      await expect(
+        page.getByRole("button", { name: "Connecting…" }),
+      ).toBeDisabled();
+      await expect(page.getByLabel("Registry key")).toBeDisabled();
+      await registryPage.verifyKeyIsNotDisclosed(
+        FIXTURE_REGISTRY_KEY,
+        requestUrls,
+      );
+      await controlledRegistryFixture.holdCredentialTask(false);
+      await registryPage.verifyMarketplaceReady();
+      await expect(
+        page.getByText("Registry connected", { exact: true }),
+      ).toBeVisible();
+
+      const snapshot = await controlledRegistryFixture.snapshot();
+      expect(snapshot.credentialAccepted).toBe(true);
+      expect(snapshot.credentialReadCount).toBeGreaterThanOrEqual(2);
+      expect(snapshot.taskReadCount).toBeGreaterThanOrEqual(2);
+    },
+  );
+
+  test(
+    "uses complete catalog data for recovery, direct card Add, and confirmed Remove",
+    { tag: ["@critical", "@e2e", "@registry", "@REGISTRY-E2E-005"] },
+    async ({ page }) => {
+      skipUnlessProject(enabledProject);
+      await page.setViewportSize({ height: 900, width: 1440 });
+      const registryPage = new RegistryPage(page);
+
+      await registryPage.goto();
+      await registryPage.connectFixtureRegistry();
+      await registryPage.dismissWelcomeDialog();
+      await registryPage.verifyCompleteCatalogSearchAndFilters();
+      await registryPage.verifyOwnerRows();
+      await registryPage.captureEvidence("registry-catalog-desktop-dark");
+      await page.getByRole("switch", { name: "Switch to light mode" }).click();
+      await registryPage.captureEvidence("registry-catalog-desktop-light");
+      await page.setViewportSize({ width: 800, height: 1000 });
+      await registryPage.captureEvidence("registry-catalog-tablet-light");
+      await page.setViewportSize({ width: 1440, height: 900 });
+      await registryPage.verifyBuiltInArtifactHasNoAdd(
+        "Fixture built-in provider",
+      );
+      await expect(
+        registryPage.addButtonFor("Fixture shared policy"),
+      ).toBeHidden();
+      const artifactSnapshotBefore = await controlledRegistryFixture.snapshot();
+      await registryPage.addLatest("Fixture network audit");
+      const artifactSnapshotAfter = await controlledRegistryFixture.snapshot();
+      expect(artifactSnapshotAfter.artifactSubmissionCount).toBe(
+        artifactSnapshotBefore.artifactSubmissionCount + 1,
+      );
+      expect(artifactSnapshotAfter.artifactTaskReadCount).toBe(2);
+      expect(artifactSnapshotAfter.artifactReadCount).toBeGreaterThan(
+        artifactSnapshotBefore.artifactReadCount,
+      );
+      expect(
+        artifactSnapshotAfter.artifactEvents.slice(
+          artifactSnapshotBefore.artifactEvents.length,
+        ),
+      ).toEqual(["submission", "task-poll", "task-poll", "authoritative-read"]);
+      await registryPage.verifyAddedInMyArtifacts("Fixture network audit");
+      await registryPage.removeArtifact("Fixture network audit");
+      await page.reload();
+      await registryPage.verifyMarketplaceReady();
+      await controlledRegistryFixture.setDiscoveryMode("reconnect");
+      await page.reload();
+      await expect(
+        page.getByRole("heading", { name: "Reconnect Registry" }),
+      ).toBeVisible();
+      await controlledRegistryFixture.setDiscoveryMode("unavailable");
+      await page.reload();
+      await expect(
+        page.getByRole("heading", { name: "Registry is unavailable" }),
+      ).toBeVisible();
+      await controlledRegistryFixture.setDiscoveryMode("error");
+      await page.reload();
+      await expect(
+        page.getByRole("heading", { name: "Registry could not be loaded" }),
+      ).toBeVisible();
+    },
+  );
+
+  test(
+    "keeps keyboard and reduced-motion Registry browsing usable on Pixel 5",
+    { tag: ["@high", "@e2e", "@registry", "@REGISTRY-E2E-006"] },
+    async ({ page }) => {
+      skipUnlessProject(mobileProject);
+      const registryPage = new RegistryPage(page);
+      await page.emulateMedia({ reducedMotion: "reduce" });
+      expect(
+        await page.evaluate(
+          () => window.matchMedia("(prefers-reduced-motion: reduce)").matches,
+        ),
+      ).toBe(true);
+
+      await registryPage.goto();
+      await registryPage.connectFixtureRegistry();
+      await registryPage.dismissWelcomeDialog();
+      // With no detail panel, direct card actions are the keyboard path.
+      await registryPage.captureEvidence("registry-catalog-mobile-dark");
+      const addButton = registryPage.addButtonFor("Fixture network audit");
+      await addButton.focus();
+      await addButton.press("Enter");
+      await expect(
+        page.getByText("Artifact added", { exact: true }),
+      ).toBeVisible();
+    },
+  );
+  test(
+    "installs an external provider and completes the existing account, credentials, connection and scan wizard",
+    { tag: ["@critical", "@e2e", "@registry", "@REGISTRY-E2E-007"] },
+    async ({ page }) => {
+      skipUnlessProject(enabledProject);
+      const registry = new RegistryPage(page);
+      await registry.goto();
+      await registry.connectFixtureRegistry();
+      await registry.addLatest("Fixture network audit");
+      await registry.connectInstalledProviderAndScan();
+      const snapshot = await controlledRegistryFixture.snapshot();
+      expect(snapshot).toMatchObject({
+        providerCreated: true,
+        secretSaved: true,
+        connected: true,
+        scanCreated: true,
+      });
+      const browserStorage = await page.evaluate(() =>
+        JSON.stringify({
+          local: { ...localStorage },
+          session: { ...sessionStorage },
+        }),
+      );
+      expect(browserStorage).not.toContain(
+        "fixture-provider-token-not-a-secret",
+      );
+      await registry.goto();
+      await registry.removeArtifact("Fixture network audit");
+      await page.goto("/providers");
+      await expect(
+        page.getByRole("row").filter({ hasText: "Registry test account" }),
+      ).toBeVisible();
+      const beforeOpen = await controlledRegistryFixture.snapshot();
+      await page.getByRole("button", { name: /Add (a )?Provider/i }).click();
+      await expect
+        .poll(
+          async () =>
+            (await controlledRegistryFixture.snapshot()).artifactReadCount,
+        )
+        .toBeGreaterThan(beforeOpen.artifactReadCount);
+      await expect(
+        page.getByRole("option", { name: "Fixture Cloud Registry" }),
+      ).toBeHidden();
+    },
+  );
+  test(
+    "updates and downgrades the installed version, including failure and reload recovery",
+    { tag: ["@critical", "@e2e", "@registry", "@REGISTRY-E2E-009"] },
+    async ({ page }) => {
+      skipUnlessProject(enabledProject);
+      test.setTimeout(90_000);
+      const registry = new RegistryPage(page);
+      const name = "Fixture network audit";
+      await registry.goto();
+      await registry.connectFixtureRegistry();
+      await registry.addLatest(name);
+      await controlledRegistryFixture.publishVersion("1.3.0");
+      await page.reload();
+      await expect(registry.updateButtonFor(name, "1.3.0")).toBeVisible();
+      await expect(registry.artifactCardFor(name)).toContainText("1.2.3");
+      await controlledRegistryFixture.setArtifactTaskError(
+        "This version has been withdrawn.",
+      );
+      await registry.updateButtonFor(name, "1.3.0").click();
+      await expect(
+        page.getByText("Artifact could not be updated", { exact: true }),
+      ).toBeVisible();
+      await expect(page.locator("body")).toContainText(
+        "The artifact could not be installed.",
+      );
+      await expect(page.locator("body")).not.toContainText(
+        "This version has been withdrawn.",
+      );
+      await expect(registry.updateButtonFor(name, "1.3.0")).toBeEnabled();
+      expect(
+        (await controlledRegistryFixture.snapshot()).installedVersion,
+      ).toBe("1.2.3");
+      await controlledRegistryFixture.setArtifactTaskError(null);
+      await controlledRegistryFixture.holdArtifactTask(true);
+      await registry.updateButtonFor(name, "1.3.0").click();
+      await expect(registry.removeButtonFor(name)).toBeDisabled();
+      await expect
+        .poll(() => page.evaluate(() => localStorage.getItem("task-watcher")))
+        .toContain('"expectedVersion":"1.3.0"');
+      await page.reload();
+      await registry.verifyMarketplaceReady();
+      await expect(registry.updateButtonFor(name, "1.3.0")).toBeDisabled();
+      await controlledRegistryFixture.holdArtifactTask(false);
+      await expect(
+        page.getByText("Artifact updated", { exact: true }),
+      ).toHaveCount(1);
+      await expect(
+        registry.artifactCardFor(name).getByText("Added", { exact: true }),
+      ).toBeVisible();
+      const upgraded = await controlledRegistryFixture.snapshot();
+      expect(upgraded.installedVersion).toBe("1.3.0");
+      expect(upgraded.artifactTaskVersionSpec).toBe("1.3.0");
+      expect(upgraded.artifactSubmissionCount).toBe(3);
+      await controlledRegistryFixture.publishVersion("1.2.3");
+      await page.reload();
+      await registry.myArtifactsTab.click();
+      await registry.updateButtonFor(name, "1.2.3").click();
+      await expect(
+        registry.artifactCardFor(name).getByText("Added", { exact: true }),
+      ).toBeVisible();
+      expect(
+        (await controlledRegistryFixture.snapshot()).installedVersion,
+      ).toBe("1.2.3");
+      await registry.captureEvidence("registry-version-updated");
+    },
+  );
+
+  test(
+    "refreshes publications on tab changes, manually and when returning focus",
+    { tag: ["@high", "@e2e", "@registry", "@REGISTRY-E2E-010"] },
+    async ({ page }) => {
+      skipUnlessProject(enabledProject);
+      const registry = new RegistryPage(page);
+      await registry.goto();
+      await registry.connectFixtureRegistry();
+      await registry.searchInput.fill("Fixture");
+      await controlledRegistryFixture.publishArtifact(
+        "Fixture tab publication",
+      );
+      await registry.myArtifactsTab.click();
+      await registry.exploreTab.click();
+      await expect(
+        registry.artifactCardFor("Fixture tab publication"),
+      ).toBeVisible();
+      await controlledRegistryFixture.publishArtifact(
+        "Fixture manual publication",
+      );
+      await registry.refreshButton.click();
+      await expect(
+        registry.artifactCardFor("Fixture manual publication"),
+      ).toBeVisible();
+      const beforeFocus = await controlledRegistryFixture.snapshot();
+      await controlledRegistryFixture.publishArtifact(
+        "Fixture focus publication",
+      );
+      // Synthetic focus dispatch also works in headless browsers, which do not
+      // reliably dispatch window focus when bringing an OS window to the front.
+      await page.evaluate(() => window.dispatchEvent(new Event("focus")));
+      await expect(
+        registry.artifactCardFor("Fixture focus publication"),
+      ).toBeVisible();
+      await registry.verifySearchPreserved("Fixture");
+      expect(
+        (await controlledRegistryFixture.snapshot()).catalogReadCount,
+      ).toBeGreaterThan(beforeFocus.catalogReadCount);
+      await registry.captureEvidence("registry-refreshed-publications");
+    },
+  );
+
+  test(
+    "resumes an installation after reload with one confirmation notification",
+    { tag: ["@critical", "@e2e", "@registry", "@REGISTRY-E2E-008"] },
+    async ({ page }) => {
+      skipUnlessProject(enabledProject);
+      const registry = new RegistryPage(page);
+      await registry.goto();
+      await registry.connectFixtureRegistry();
+      await controlledRegistryFixture.holdArtifactTask(true);
+      await registry.addButtonFor("Fixture network audit").click();
+      await expect
+        .poll(() => page.evaluate(() => localStorage.getItem("task-watcher")))
+        .toContain('"kind":"registry-artifact-add"');
+      await page.reload();
+      await registry.verifyMarketplaceReady();
+      await expect(
+        page.getByText("Artifact added", { exact: true }),
+      ).toBeHidden();
+      await controlledRegistryFixture.holdArtifactTask(false);
+      await expect(
+        page.getByText("Artifact added", { exact: true }),
+      ).toHaveCount(1);
+      await registry.verifyAddedInMyArtifacts("Fixture network audit");
+      expect(
+        (await controlledRegistryFixture.snapshot()).artifactSubmissionCount,
+      ).toBe(1);
+    },
+  );
+});
diff --git a/ui/tests/registry/validation.md b/ui/tests/registry/validation.md
new file mode 100644
index 0000000000..e0e9835e22
--- /dev/null
+++ b/ui/tests/registry/validation.md
@@ -0,0 +1,69 @@
+# Registry UI Validation
+
+The consolidated implementation provides Registry installation → Providers → account details → schema-driven credentials → explicit connection confirmation → scan launch. Registry management requires `manage_registry` and its feature flags, independently of billing. Discovering already-installed Registry providers and creating their accounts requires `manage_providers`, without `manage_registry`. Scans retain their existing permissions. The Cloud API allows `GET registry/providers` with `manage_providers`; listing `registry/available-artifacts` and `registry/artifacts` accepts either `manage_registry` or `manage_providers`. Registry credential operations and artifact mutations still require `manage_registry`.
+
+## Automated Evidence
+
+Validation after review fixes on September 9, 2026:
+
+| Check                           | Result                                                                                   |
+| ------------------------------- | ---------------------------------------------------------------------------------------- |
+| `pnpm run test:unit`            | 475 files, 3,511 tests passed                                                            |
+| `pnpm run test:integration`     | 11 files, 253 browser integration tests passed                                           |
+| `pnpm run test:e2e:registry`    | 10 passed; 23 excluded because each scenario runs only in its designated runtime profile |
+| `pnpm run typecheck`            | Passed                                                                                   |
+| `pnpm run lint:check`           | Passed; excluded the unrelated `.claude/` checkout                                       |
+| Prettier check on changed files | Passed                                                                                   |
+| `pnpm run build`                | Passed                                                                                   |
+| `pnpm run tour:check`           | Six tours and 19 anchors checked                                                         |
+
+The Registry browser suite includes regressions for replacing a rejected key, disabling every Add button during an installation, refreshing an expired owner image, and confirming credential state and collections once. Unit tests cover late completion after the dialog deadline and a single shared failure result when catalog refresh fails. The three removed browser test files covered only the global animation changes withdrawn from this PR.
+
+The test scope review removed 29 net cases and 614 lines across nine test files. Browser tests for pixel spacing, icon classes, avatar internals, and repeated provider layouts were removed or consolidated. Duplicate model, credential-completion, static-label, and environment-parser cases were also pruned. Assertions for pending controls, write-only keys, accessible provider names, single confirmation, and non-persisted eligibility remain in broader behavioral tests. Both first-key and replacement validation now explicitly cover an unsettled task. Permission boundaries, schema validation, recovery, and the controlled E2E scenarios remain covered.
+
+The controlled E2E uses real Next.js servers, authentication, proxy, Server Actions, task polling, and browser storage against a synthetic HTTP API. It covers Registry enabled with billing disabled, Registry disabled, Cloud disabled, permission revocation, installation and removal, account preservation, the provider wizard, a completed scan, and recovery after a hard reload. It does not validate real Registry or provider services.
+
+The reload regression aborts a pending Server Action request. The shared watcher preserves the backend task ID on page hide, resumes it after reload or browser history restoration, and emits one confirmation after reading tenant membership. Pending metadata contains artifact identifiers or the prior-credential flag, never submitted keys.
+
+See [the scenario catalog](registry.md) and [the Add Provider tour report](add-provider-tour-report.md).
+
+## Registry Environment Configuration
+
+Set these runtime variables on the UI service to match the Registry used by the backend:
+
+| Variable                | Purpose                                                                                                    | Development Example                      |
+| ----------------------- | ---------------------------------------------------------------------------------------------------------- | ---------------------------------------- |
+| `UI_REGISTRY_URL`       | Public Registry website or key-management page. Supplies the help link and permits images from its origin. | `https://registry.dev.prowler.com`       |
+| `UI_REGISTRY_MEDIA_URL` | Registry media service. Only its HTTP(S) origin is added to `img-src`.                                     | `https://media.registry.dev.prowler.com` |
+
+For production, use `https://registry.prowler.com` and `https://media.registry.prowler.com`. For a private Registry, use its website and media service URLs. These settings do not change the backend's Registry API endpoint. Keep both services aligned in deployment configuration: the current backend contract does not expose its Registry website URL to the UI.
+
+The help link is hidden when its URL is missing or invalid, so the UI cannot send a private Registry user to production by default. URLs containing credentials, non-HTTP schemes, or CSP separators are rejected. Unconfigured external images fall back to the owner initial.
+
+Acceptance profiles and fixture servers live in `playwright.registry.config.ts`, with common defaults in `playwright.base.ts`. The existing `pnpm run test:e2e:registry` command selects that configuration. The general Playwright configuration runs the ordinary suites without Registry fixtures.
+
+Credential validation has one completion path shared by active execution and reload recovery. After task settlement, it reads credential status once and collections once; the returned result drives both dialog state and notification. A deadline releases the form without reporting success; the same completion continues in the background.
+
+## Screenshots
+
+These captures contain synthetic fixture data. The credential form is empty in its screenshot.
+
+| View           | Evidence                                                                |
+| -------------- | ----------------------------------------------------------------------- |
+| Desktop, dark  | [Catalog](evidence/registry-catalog-desktop-dark.png)                   |
+| Desktop, light | [Catalog](evidence/registry-catalog-desktop-light.png)                  |
+| Tablet, light  | [Catalog](evidence/registry-catalog-tablet-light.png)                   |
+| Mobile, dark   | [Catalog](evidence/registry-catalog-mobile-dark.png)                    |
+| Add Provider   | [Registry option](evidence/registry-provider-selector.png)              |
+| Credentials    | [Schema form](evidence/registry-provider-credentials.png)               |
+| Scans          | [Completed fixture scan](evidence/registry-provider-scan-completed.png) |
+
+Run `pnpm run test:e2e:registry` to regenerate screenshot attachments in the Playwright output directory.
+
+## Live Integration Status
+
+Live acceptance is incomplete. The isolated backend runs `chain/14-dynamic-provider-scans` with Registry mode `official`, development Registry API/index/media URLs, and billing disabled. The local UI uses `UI_CLOUD_ENABLED=true`, `UI_REGISTRY_ENABLED=true`, `CLOUD_BILLING_ENABLED=false`, and the local API. Distribution defaults remain disabled.
+
+The native macOS Celery worker repeatedly exited with `SIGSEGV` during key validation. Restarting this development worker with `--pool=solo --concurrency=1` allowed the queued validation to finish. The development Registry then rejected the submitted key with HTTP 401. No backend source changes were made.
+
+A valid key for the development Registry and credentials for an external test provider must be entered through the local UI to complete the real catalog, install, account, credential, connection, and scan checks. The PR remains a draft pending that evidence; automated fixture results do not satisfy live acceptance.
diff --git a/ui/tests/setups/manage-registry.auth.setup.ts b/ui/tests/setups/manage-registry.auth.setup.ts
new file mode 100644
index 0000000000..bf3daac561
--- /dev/null
+++ b/ui/tests/setups/manage-registry.auth.setup.ts
@@ -0,0 +1,30 @@
+import { test as authManageRegistrySetup } from "@playwright/test";
+
+import { RegistryPage } from "../registry/registry-page";
+import { SignInPage } from "../sign-in-base/sign-in-base-page";
+
+const manageRegistryUserFile = "playwright/.auth/manage_registry_user.json";
+const fixtureMode = process.env.E2E_REGISTRY_ACCEPTANCE_MODE === "fixture";
+
+const fixtureCredentials = {
+  email: "registry-fixture-user@example.test",
+  password: "fixture-password-not-a-secret",
+};
+
+authManageRegistrySetup(
+  "authenticate as Registry manager fixture user",
+  async ({ page }) => {
+    authManageRegistrySetup.skip(
+      !fixtureMode,
+      "Registry manager authentication is available only in self-contained fixture mode.",
+    );
+
+    const signInPage = new SignInPage(page);
+    await signInPage.goto();
+    await signInPage.login(fixtureCredentials);
+    await page.waitForURL("/");
+    await new RegistryPage(page).dismissWelcomeDialog();
+    await signInPage.verifySuccessfulLogin();
+    await page.context().storageState({ path: manageRegistryUserFile });
+  },
+);
diff --git a/ui/types/dynamic-provider-form.test.ts b/ui/types/dynamic-provider-form.test.ts
new file mode 100644
index 0000000000..889df0846f
--- /dev/null
+++ b/ui/types/dynamic-provider-form.test.ts
@@ -0,0 +1,28 @@
+import { describe, expect, it } from "vitest";
+
+import { createAddProviderFormSchema } from "./formSchemas";
+
+describe("provider account validation", () => {
+  it("accepts installed dynamic types only and requires a UID", () => {
+    const schema = createAddProviderFormSchema(["acme", "aws"]);
+    const input = {
+      providerType: "acme",
+      providerUid: " account ",
+      providerAlias: "Test",
+    };
+    expect(schema.parse(input).providerUid).toBe("account");
+    expect(
+      schema.safeParse({ ...input, providerType: "unknown" }).success,
+    ).toBe(false);
+    expect(schema.safeParse({ ...input, providerUid: " " }).success).toBe(
+      false,
+    );
+    expect(
+      schema.safeParse({ ...input, providerType: "aws", providerUid: "short" })
+        .success,
+    ).toBe(false);
+    expect(createAddProviderFormSchema([]).safeParse(input).success).toBe(
+      false,
+    );
+  });
+});
diff --git a/ui/types/env.d.ts b/ui/types/env.d.ts
index 6815cb962d..1f0315284c 100644
--- a/ui/types/env.d.ts
+++ b/ui/types/env.d.ts
@@ -30,6 +30,7 @@ declare global {
 
       // Prowler Cloud deployment flag — runtime read (server env, client island).
       UI_CLOUD_ENABLED?: "true" | "false";
+      UI_REGISTRY_ENABLED?: "true" | "false";
 
       CLOUD_BILLING_ENABLED?: "legacy" | "metronome" | "false";
 
@@ -98,6 +99,7 @@ declare global {
       E2E_UNLIMITED_VISIBILITY_PASSWORD?: string;
       E2E_MANAGE_INTEGRATIONS_USER?: string;
       E2E_MANAGE_INTEGRATIONS_PASSWORD?: string;
+      E2E_REGISTRY_ACCEPTANCE_MODE?: "fixture";
       E2E_MANAGE_ACCOUNT_USER?: string;
       E2E_MANAGE_ACCOUNT_PASSWORD?: string;
       E2E_MANAGE_SCANS_USER?: string;
diff --git a/ui/types/formSchemas.test.ts b/ui/types/formSchemas.test.ts
index c482901d53..ddb5f4e301 100644
--- a/ui/types/formSchemas.test.ts
+++ b/ui/types/formSchemas.test.ts
@@ -8,6 +8,7 @@ import {
   addCredentialsRoleFormSchema,
   addProviderFormSchema,
   KUBECONFIG_UNSUPPORTED_COMMAND_AUTHENTICATION_ERROR,
+  roleFormSchema,
   samlConfigFormSchema,
 } from "./formSchemas";
 
@@ -20,6 +21,30 @@ const BASE_AWS_ROLE_VALUES = {
   [ProviderCredentialFields.CREDENTIALS_TYPE]: "access-secret-key",
 } as const;
 
+describe("roleFormSchema", () => {
+  it("defaults manage_registry to false", () => {
+    // Given / When
+    const result = roleFormSchema.parse({ name: "Registry manager" });
+
+    // Then
+    expect(result.manage_registry).toBe(false);
+  });
+
+  it.each(["true", 1, null])(
+    "rejects malformed manage_registry values of %j",
+    (manageRegistry) => {
+      // Given / When
+      const result = roleFormSchema.safeParse({
+        name: "Registry manager",
+        manage_registry: manageRegistry,
+      });
+
+      // Then
+      expect(result.success).toBe(false);
+    },
+  );
+});
+
 describe("addCredentialsRoleFormSchema", () => {
   it("accepts AWS role credentials when access and secret keys are present", () => {
     const schema = addCredentialsRoleFormSchema("aws");
diff --git a/ui/types/formSchemas.ts b/ui/types/formSchemas.ts
index dfdf406d16..d34a1c84ef 100644
--- a/ui/types/formSchemas.ts
+++ b/ui/types/formSchemas.ts
@@ -5,7 +5,7 @@ import { ProviderCredentialFields } from "@/lib/provider-credentials/provider-cr
 import { validateMutelistYaml, validateYaml } from "@/lib/yaml";
 import { MAX_SAML_ADDITIONAL_EMAIL_DOMAINS } from "@/types/saml";
 
-import { PROVIDER_TYPES, ProviderType } from "./providers";
+import { isKnownProviderType, PROVIDER_TYPES, ProviderType } from "./providers";
 
 export const KUBECONFIG_UNSUPPORTED_COMMAND_AUTHENTICATION_ERROR =
   "Kubernetes kubeconfig command-based authentication is not supported in Prowler Cloud for security reasons.";
@@ -56,6 +56,7 @@ export const roleFormSchema = z.object({
   manage_scans: z.boolean().default(false),
   manage_alerts: z.boolean().default(false),
   manage_lighthouse_ai_configuration: z.boolean().default(false),
+  manage_registry: z.boolean().default(false),
   unlimited_visibility: z.boolean().default(false),
   groups: z.array(z.string()).optional(),
 });
@@ -192,6 +193,27 @@ export const addProviderFormSchema = z
     ]),
   );
 
+export const createAddProviderFormSchema = (
+  installedTypes: readonly string[],
+) =>
+  z.union([
+    addProviderFormSchema,
+    z.object({
+      providerType: z
+        .string()
+        .refine(
+          (type) => !isKnownProviderType(type) && installedTypes.includes(type),
+          "Select an installed Registry provider",
+        ),
+      providerUid: z.string().trim().min(1, "Provider UID is required"),
+      providerAlias: z.string(),
+    }),
+  ]);
+
+export type AddProviderFormValues = z.infer<
+  ReturnType<typeof createAddProviderFormSchema>
+>;
+
 export const addCredentialsFormSchema = (
   providerType: ProviderType,
   via?: string | null,
diff --git a/ui/types/provider-schema.ts b/ui/types/provider-schema.ts
new file mode 100644
index 0000000000..db50e86d49
--- /dev/null
+++ b/ui/types/provider-schema.ts
@@ -0,0 +1,33 @@
+export const PROVIDER_SCHEMA_STATUS = {
+  SUCCESS: "success",
+  NOT_FOUND: "not_found",
+  UNAVAILABLE: "unavailable",
+  ACCESS_DENIED: "access_denied",
+  ERROR: "error",
+  MALFORMED: "malformed",
+} as const;
+
+export interface ProviderSchemaObject {
+  readonly [keyword: string]: unknown;
+}
+
+export interface ProviderSecretTypes {
+  readonly [secretType: string]: ProviderSchemaObject;
+}
+
+export interface ProviderSchemasSuccessResult {
+  status: typeof PROVIDER_SCHEMA_STATUS.SUCCESS;
+  providerType: string;
+  secretTypes: ProviderSecretTypes;
+}
+
+export interface ProviderSchemasFailureResult {
+  status: Exclude<
+    (typeof PROVIDER_SCHEMA_STATUS)[keyof typeof PROVIDER_SCHEMA_STATUS],
+    typeof PROVIDER_SCHEMA_STATUS.SUCCESS
+  >;
+}
+
+export type ProviderSchemasResult =
+  | ProviderSchemasSuccessResult
+  | ProviderSchemasFailureResult;
diff --git a/ui/types/registry.ts b/ui/types/registry.ts
new file mode 100644
index 0000000000..9d3e436dd1
--- /dev/null
+++ b/ui/types/registry.ts
@@ -0,0 +1,290 @@
+export const REGISTRY_ENDPOINT = {
+  PROVIDERS: "providers",
+  AVAILABLE_ARTIFACTS: "available_artifacts",
+  CREDENTIAL: "credential",
+  MUTATION: "mutation",
+} as const;
+
+export type RegistryEndpoint =
+  (typeof REGISTRY_ENDPOINT)[keyof typeof REGISTRY_ENDPOINT];
+
+export const REGISTRY_FAILURE = {
+  ACCESS_DENIED: "access_denied",
+  ONBOARDING: "onboarding",
+  RECONNECT: "reconnect",
+  UNAVAILABLE: "unavailable",
+  ERROR: "error",
+} as const;
+
+export type RegistryFailureResult =
+  | { status: typeof REGISTRY_FAILURE.ACCESS_DENIED }
+  | { status: typeof REGISTRY_FAILURE.ONBOARDING }
+  | { status: typeof REGISTRY_FAILURE.RECONNECT }
+  | { status: typeof REGISTRY_FAILURE.UNAVAILABLE }
+  | { status: typeof REGISTRY_FAILURE.ERROR };
+
+export const REGISTRY_SUBMISSION = {
+  PENDING: "pending",
+  ERROR: "error",
+} as const;
+
+export type RegistryTaskSubmissionResult =
+  | {
+      status: typeof REGISTRY_SUBMISSION.PENDING;
+      taskId: string;
+    }
+  | { status: typeof REGISTRY_SUBMISSION.ERROR };
+
+export type RegistryCredentialSubmissionResult = RegistryTaskSubmissionResult;
+
+export interface RegistryArtifactTaskResult {
+  installed: boolean;
+  error: string | null;
+}
+
+export interface RegistryAddArtifactInput {
+  normalizedName: string;
+  versionSpec?: string;
+}
+
+export const REGISTRY_INSTALL_OPERATION = {
+  ADD: "add",
+  UPDATE: "update",
+} as const;
+
+export type RegistryInstallOperation =
+  (typeof REGISTRY_INSTALL_OPERATION)[keyof typeof REGISTRY_INSTALL_OPERATION];
+
+export type RegistryArtifactExecutionInput =
+  | (RegistryAddArtifactInput & {
+      operation?: typeof REGISTRY_INSTALL_OPERATION.ADD;
+    })
+  | {
+      normalizedName: string;
+      versionSpec: string;
+      operation: typeof REGISTRY_INSTALL_OPERATION.UPDATE;
+    };
+
+export const REGISTRY_ARTIFACT_ACTION = {
+  SUBMITTED: "submitted",
+} as const;
+
+export type RegistryArtifactSubmitResult = {
+  status: typeof REGISTRY_ARTIFACT_ACTION.SUBMITTED;
+  taskId: string;
+};
+
+export interface RegistryCredentialStatus {
+  configured: boolean;
+  isValid: boolean;
+  scopes: string[];
+  lastValidatedAt?: string;
+  validationStatus?: string;
+  validationPending: boolean;
+}
+
+export const REGISTRY_CATALOG = {
+  COMPLETE: "complete",
+  INCOMPLETE: "incomplete",
+} as const;
+export const REGISTRY_CATALOG_INCOMPLETE_REASON = {
+  CONFLICTING_DUPLICATE: "conflicting_duplicate",
+  COUNT_MISMATCH: "count_mismatch",
+  GUARD_EXHAUSTED: "guard_exhausted",
+  INVALID_PAGE: "invalid_page",
+  INVALID_RESOURCE: "invalid_resource",
+  PAGE_FAILED: "page_failed",
+} as const;
+export type RegistryCatalogIncompleteReason =
+  (typeof REGISTRY_CATALOG_INCOMPLETE_REASON)[keyof typeof REGISTRY_CATALOG_INCOMPLETE_REASON];
+
+export interface RegistryArtifactOwner {
+  name: string;
+  type: string;
+  logoUrl?: string;
+}
+
+export interface RegistryCatalogArtifact {
+  normalizedName: string;
+  name?: string;
+  description?: string;
+  latestVersion?: string;
+  providers: string[];
+  /** Provider declared by a provider artifact; distinct from its target filters. */
+  providerSlug?: string;
+  isVerified: boolean;
+  isOfficial: boolean;
+  isBuiltin: boolean;
+  isMeta: boolean;
+  hasProvider: boolean;
+  hasChecks: boolean;
+  hasCompliance: boolean;
+  checkCount?: number;
+  complianceCount?: number;
+  versionCount: number;
+  totalDownloads: number;
+  owners: RegistryArtifactOwner[];
+}
+
+export interface RegistryTenantArtifact {
+  normalizedName: string;
+  versionSpec: string;
+  resolvedVersion?: string;
+  insertedAt?: string;
+  updatedAt?: string;
+}
+
+export type RegistryCatalogResult =
+  | {
+      status: typeof REGISTRY_CATALOG.COMPLETE;
+      artifacts: RegistryCatalogArtifact[];
+    }
+  | {
+      status: typeof REGISTRY_CATALOG.INCOMPLETE;
+      reason: RegistryCatalogIncompleteReason;
+      collectedCount: number;
+    };
+
+export const REGISTRY_CREDENTIAL_READ = {
+  STATUS: "status",
+} as const;
+
+export type RegistryCredentialReadResult =
+  | {
+      status: typeof REGISTRY_CREDENTIAL_READ.STATUS;
+      credential: RegistryCredentialStatus;
+    }
+  | RegistryFailureResult;
+
+export const REGISTRY_CREDENTIAL_ACTION = {
+  CONNECTED: "connected",
+  DISCONNECTED: "disconnected",
+  INVALID: "invalid",
+  PENDING: "pending",
+  REPLACEMENT_FAILED: "replacement_failed",
+  SUBMITTED: "submitted",
+} as const;
+
+export type RegistryCredentialSubmitResult =
+  | {
+      status: typeof REGISTRY_CREDENTIAL_ACTION.SUBMITTED;
+      taskId: string;
+      priorConfigured: boolean;
+    }
+  | {
+      status: typeof REGISTRY_CREDENTIAL_ACTION.REPLACEMENT_FAILED;
+      credential: RegistryCredentialStatus;
+    }
+  | RegistryFailureResult;
+
+export type RegistryCredentialActionResult =
+  | {
+      status: typeof REGISTRY_CREDENTIAL_ACTION.CONNECTED;
+      credential: RegistryCredentialStatus;
+    }
+  | {
+      status: typeof REGISTRY_CREDENTIAL_ACTION.DISCONNECTED;
+      credential: RegistryCredentialStatus;
+      tenantArtifacts: RegistryTenantArtifact[];
+    }
+  | {
+      status:
+        | typeof REGISTRY_CREDENTIAL_ACTION.INVALID
+        | typeof REGISTRY_CREDENTIAL_ACTION.PENDING
+        | typeof REGISTRY_CREDENTIAL_ACTION.REPLACEMENT_FAILED;
+      credential: RegistryCredentialStatus;
+    }
+  | RegistryFailureResult;
+
+type RegistryCompleteCatalog = Extract<
+  RegistryCatalogResult,
+  { status: typeof REGISTRY_CATALOG.COMPLETE }
+>;
+type RegistryIncompleteCatalog = Exclude<
+  RegistryCatalogResult,
+  RegistryCompleteCatalog
+>;
+
+export type RegistryCollectionsResult =
+  | {
+      status: typeof REGISTRY_CATALOG.COMPLETE;
+      catalog: RegistryCompleteCatalog;
+      tenantArtifacts: RegistryTenantArtifact[];
+    }
+  | RegistryIncompleteCatalog
+  | RegistryFailureResult;
+
+export const REGISTRY_MUTATION = {
+  CONFIRMED: "confirmed",
+  REFRESH_FAILED: "refresh_failed",
+  REFUSED: "refused",
+} as const;
+
+export type RegistryMutationResult =
+  | {
+      status: typeof REGISTRY_MUTATION.CONFIRMED;
+      tenantArtifacts: RegistryTenantArtifact[];
+    }
+  | {
+      status: typeof REGISTRY_MUTATION.REFRESH_FAILED;
+    }
+  | {
+      status: typeof REGISTRY_MUTATION.REFUSED;
+      message: string;
+    }
+  | RegistryArtifactSubmitResult
+  | RegistryFailureResult;
+
+export const REGISTRY_ARTIFACT_REMOVAL = {
+  IN_USE: "in_use",
+} as const;
+
+export type RegistryArtifactRemovalResult =
+  | RegistryMutationResult
+  | { status: typeof REGISTRY_ARTIFACT_REMOVAL.IN_USE };
+
+export type RegistryRemoveDialogError =
+  | { status: typeof REGISTRY_ARTIFACT_REMOVAL.IN_USE }
+  | { status: typeof REGISTRY_FAILURE.ERROR; message: string };
+
+export const REGISTRY_BOOTSTRAP_STATE = {
+  ONBOARDING: "onboarding",
+  VALIDATION_PENDING: "validation_pending",
+  READY: "ready",
+  RECONNECT: "reconnect",
+  UNAVAILABLE: "unavailable",
+  INCOMPLETE: "incomplete",
+  ERROR: "error",
+} as const;
+
+export type RegistryBootstrapState =
+  | {
+      status:
+        | typeof REGISTRY_BOOTSTRAP_STATE.ONBOARDING
+        | typeof REGISTRY_BOOTSTRAP_STATE.VALIDATION_PENDING;
+      credential: RegistryCredentialStatus;
+      tenantArtifacts: RegistryTenantArtifact[];
+    }
+  | {
+      status: typeof REGISTRY_BOOTSTRAP_STATE.READY;
+      credential: RegistryCredentialStatus;
+      catalog: RegistryCompleteCatalog;
+      tenantArtifacts: RegistryTenantArtifact[];
+    }
+  | {
+      status:
+        | typeof REGISTRY_BOOTSTRAP_STATE.RECONNECT
+        | typeof REGISTRY_BOOTSTRAP_STATE.UNAVAILABLE
+        | typeof REGISTRY_BOOTSTRAP_STATE.ERROR;
+    }
+  | {
+      status: typeof REGISTRY_BOOTSTRAP_STATE.INCOMPLETE;
+      catalog: RegistryIncompleteCatalog;
+    };
+
+export type RegistryBootstrapResult =
+  | {
+      status: typeof REGISTRY_BOOTSTRAP_STATE.READY;
+      state: RegistryBootstrapState;
+    }
+  | { status: typeof REGISTRY_FAILURE.ACCESS_DENIED };
diff --git a/ui/types/users.ts b/ui/types/users.ts
index 56dfe7c3e5..05785cf44b 100644
--- a/ui/types/users.ts
+++ b/ui/types/users.ts
@@ -92,6 +92,7 @@ export const PERMISSION_KEY = {
   MANAGE_BILLING: "manage_billing",
   MANAGE_ALERTS: "manage_alerts",
   MANAGE_LIGHTHOUSE_AI_CONFIGURATION: "manage_lighthouse_ai_configuration",
+  MANAGE_REGISTRY: "manage_registry",
   UNLIMITED_VISIBILITY: "unlimited_visibility",
 } as const;
 
@@ -112,6 +113,7 @@ export type TenantMembershipRole =
   (typeof TENANT_MEMBERSHIP_ROLE)[keyof typeof TENANT_MEMBERSHIP_ROLE];
 
 export interface RoleDetailAttributes {
+  manage_registry?: boolean;
   name: string;
   manage_users: boolean;
   manage_account: boolean;
diff --git a/ui/vitest.config.ts b/ui/vitest.config.ts
index 81b21dbd70..39d01398a2 100644
--- a/ui/vitest.config.ts
+++ b/ui/vitest.config.ts
@@ -73,6 +73,7 @@ export default defineConfig(() => {
             setupFiles: ["./vitest.setup.ts"],
             include: ["**/*.test.{ts,tsx}"],
             exclude: [
+              ".claude/**",
               "node_modules",
               ".next",
               "tests/**/*",
@@ -87,7 +88,7 @@ export default defineConfig(() => {
             name: "integration",
             setupFiles: ["./vitest.integration.setup.ts"],
             include: ["**/*.integration.test.{ts,tsx}"],
-            exclude: ["node_modules", ".next", "tests/**/*"],
+            exclude: [".claude/**", "node_modules", ".next", "tests/**/*"],
             browser: {
               enabled: true,
               // Vitest's browser default viewport is 414×896 (phone-sized),
@@ -147,6 +148,9 @@ export default defineConfig(() => {
 
         // App component lib
         "@iconify/react",
+        "react-day-picker",
+        "posthog-js",
+        "posthog-js/react",
 
         // Radix
         "@radix-ui/react-alert-dialog",
diff --git a/ui/vitest.integration.setup.ts b/ui/vitest.integration.setup.ts
index d8659c186e..c60cb00618 100644
--- a/ui/vitest.integration.setup.ts
+++ b/ui/vitest.integration.setup.ts
@@ -12,6 +12,10 @@ import { resetToasts } from "@/components/shadcn/toast/use-toast";
 
 import { worker } from "./__tests__/msw/worker";
 
+// The browser harness executes Server Actions directly; Next.js enforces this
+// marker at build time in the actual application.
+vi.mock("server-only", () => ({}));
+
 // Server Actions ("use server") are bundled by Vite as plain async functions
 // — the directive is a Next.js compiler concept, not part of Vite. When the
 // page invokes one, it runs in the browser and reaches `auth()` from

From 9f616a5d43a528de95efd40462f157ed0f91135b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Wed, 16 Sep 2026 14:00:54 +0200
Subject: [PATCH 66/77] feat(ui): allow disabling self-registration in Cloud
 (#12815)

---
 .../developer-guide/environment-variables.mdx |  1 +
 ui/Dockerfile                                 |  1 +
 ui/app/(auth)/(guest-only)/sign-in/page.tsx   |  2 +
 .../(auth)/(guest-only)/sign-up/page.test.tsx | 86 +++++++++++++++++++
 ui/app/(auth)/(guest-only)/sign-up/page.tsx   |  7 +-
 ui/app/api/auth/callback/github/route.test.ts | 68 +++++++++++++++
 ui/app/api/auth/callback/github/route.ts      |  6 ++
 ui/app/api/auth/callback/google/route.test.ts | 40 +++++++++
 ui/app/api/auth/callback/google/route.ts      |  6 ++
 .../disable-self-registration.added.md        |  1 +
 ui/components/auth/oss/auth-form.tsx          |  3 +
 ui/components/auth/oss/sign-in-form.tsx       | 19 ++--
 .../saml/saml-config-form.test.tsx            |  1 +
 .../profile/memberships-card-client.test.tsx  | 18 ++++
 .../users/profile/memberships-card-client.tsx | 38 ++++----
 .../users/profile/memberships-card.tsx        |  2 +
 ui/lib/auth-callback-url.test.ts              | 38 ++++++++
 ui/lib/auth-callback-url.ts                   | 22 +++++
 ui/lib/get-runtime-config.client.test.ts      |  3 +
 ui/lib/runtime-config.shared.ts               |  3 +
 ui/lib/runtime-config.test.ts                 | 24 ++++++
 ui/lib/runtime-config.ts                      |  4 +-
 ui/lib/runtime-env.test.ts                    | 28 +++++-
 ui/lib/runtime-env.ts                         |  6 ++
 ui/lib/shared/env.test.ts                     | 42 ++++++++-
 ui/lib/shared/env.ts                          | 17 +++-
 .../runtime-config/runtime-config-page.ts     |  1 +
 27 files changed, 461 insertions(+), 26 deletions(-)
 create mode 100644 ui/app/(auth)/(guest-only)/sign-up/page.test.tsx
 create mode 100644 ui/app/api/auth/callback/github/route.test.ts
 create mode 100644 ui/changelog.d/disable-self-registration.added.md

diff --git a/docs/developer-guide/environment-variables.mdx b/docs/developer-guide/environment-variables.mdx
index a6ba5c9d54..d798faa6c7 100644
--- a/docs/developer-guide/environment-variables.mdx
+++ b/docs/developer-guide/environment-variables.mdx
@@ -40,6 +40,7 @@ The former build-time variables map to the new runtime variables as follows:
 
 `UI_CLOUD_ENABLED` is a plain runtime boolean flag that enables Prowler Cloud behavior when set to the exact string `"true"` and defaults to off; unlike the other renamed variables it has no legacy fallback, so `NEXT_PUBLIC_IS_CLOUD_ENV` is no longer read.
 
+`UI_SELF_REGISTRATION_ENABLED` is a runtime opt-out flag that Prowler Local Server reads only when `UI_CLOUD_ENABLED` is `"true"`. It defaults to on and turns off when set to `"false"`, matched case-insensitively so the same value can be shared with a backend setting written `False`. When it is off, the sign-up page only opens with an invitation token, the sign-in page drops its "Sign up" link, and the profile hides "Create organization"; invited users can still complete their registration. Outside a Prowler Cloud deployment the flag is ignored and account creation stays open.
 ## Registry UI Rollout and Rollback
 
 `UI_REGISTRY_ENABLED` is an optional runtime flag for Prowler Cloud and Private Cloud. Registry is eligible only when both `UI_CLOUD_ENABLED` and `UI_REGISTRY_ENABLED` are the exact string `"true"` and the current user has the backend-authorized `manage_registry` permission. Unset, `"false"`, or malformed values fail closed. The flag defaults to off and is not a replacement for backend authorization. Registry access is independent of billing; Private Cloud can use it with `CLOUD_BILLING_ENABLED=false`.
diff --git a/ui/Dockerfile b/ui/Dockerfile
index 278c8b8602..22149a9fa9 100644
--- a/ui/Dockerfile
+++ b/ui/Dockerfile
@@ -100,6 +100,7 @@ ENV HOSTNAME="0.0.0.0"
 #   - required: UI_API_BASE_URL, AUTH_URL, AUTH_SECRET (missing ⇒ fail fast at boot)
 #   - optional: UI_API_DOCS_URL
 #   - optional: UI_CLOUD_ENABLED ("true" only in Prowler Cloud deployments)
+#   - optional: UI_SELF_REGISTRATION_ENABLED (Prowler Cloud only; "false" hides sign-up, invited users can still register)
 #   - optional: UI_REGISTRY_ENABLED ("true" only after the Registry dependency,
 #     Cloud role grant, and controlled acceptance are ready; unset/false hides Registry)
 #   - gated integrations (load only when *_ENABLED="true"; the value is then
diff --git a/ui/app/(auth)/(guest-only)/sign-in/page.tsx b/ui/app/(auth)/(guest-only)/sign-in/page.tsx
index c36226e61f..1ee3c37989 100644
--- a/ui/app/(auth)/(guest-only)/sign-in/page.tsx
+++ b/ui/app/(auth)/(guest-only)/sign-in/page.tsx
@@ -4,6 +4,7 @@ import {
   isGithubOAuthEnabled,
   isGoogleOAuthEnabled,
 } from "@/lib/helper";
+import { isSelfRegistrationEnabled } from "@/lib/shared/env";
 
 const SignIn = () => {
   const GOOGLE_AUTH_URL = getAuthUrl("google");
@@ -15,6 +16,7 @@ const SignIn = () => {
       githubAuthUrl={GITHUB_AUTH_URL}
       isGoogleOAuthEnabled={isGoogleOAuthEnabled}
       isGithubOAuthEnabled={isGithubOAuthEnabled}
+      isSelfRegistrationEnabled={isSelfRegistrationEnabled()}
     />
   );
 };
diff --git a/ui/app/(auth)/(guest-only)/sign-up/page.test.tsx b/ui/app/(auth)/(guest-only)/sign-up/page.test.tsx
new file mode 100644
index 0000000000..d1abc10660
--- /dev/null
+++ b/ui/app/(auth)/(guest-only)/sign-up/page.test.tsx
@@ -0,0 +1,86 @@
+import { render, screen } from "@testing-library/react";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+import SignUp from "./page";
+
+const { redirectMock, isSelfRegistrationEnabledMock } = vi.hoisted(() => ({
+  redirectMock: vi.fn(),
+  isSelfRegistrationEnabledMock: vi.fn(),
+}));
+
+vi.mock("next/navigation", () => ({
+  redirect: redirectMock,
+}));
+
+vi.mock("@/lib/shared/env", () => ({
+  isCloud: () => false,
+  isSelfRegistrationEnabled: isSelfRegistrationEnabledMock,
+}));
+
+vi.mock("@/lib/helper", () => ({
+  getAuthUrl: () => "",
+  isGithubOAuthEnabled: false,
+  isGoogleOAuthEnabled: false,
+}));
+
+vi.mock("@/components/auth/oss", () => ({
+  AuthForm: ({ invitationToken }: { invitationToken?: string | null }) => (
+    <div
+      data-testid="auth-form"
+      data-invitation-token={invitationToken ?? ""}
+    />
+  ),
+}));
+
+const renderPage = (searchParams: Record<string, string> = {}) =>
+  SignUp({ searchParams: Promise.resolve(searchParams) });
+
+describe("SignUp page", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    // next/navigation's redirect() never returns; mirror that so the page
+    // stops rendering the way it does in Next.
+    redirectMock.mockImplementation((url: string) => {
+      throw new Error(`NEXT_REDIRECT:${url}`);
+    });
+  });
+
+  describe("when self-registration is enabled", () => {
+    it("should render the sign-up form", async () => {
+      // Given
+      isSelfRegistrationEnabledMock.mockReturnValue(true);
+
+      // When
+      render(await renderPage());
+
+      // Then
+      expect(screen.getByTestId("auth-form")).toBeInTheDocument();
+      expect(redirectMock).not.toHaveBeenCalled();
+    });
+  });
+
+  describe("when self-registration is disabled", () => {
+    it("should redirect to sign-in without an invitation", async () => {
+      // Given
+      isSelfRegistrationEnabledMock.mockReturnValue(false);
+
+      // When / Then
+      await expect(renderPage()).rejects.toThrow("NEXT_REDIRECT:/sign-in");
+    });
+
+    it("should still render the form for an invited user", async () => {
+      // Given
+      isSelfRegistrationEnabledMock.mockReturnValue(false);
+
+      // When
+      render(await renderPage({ invitation_token: "TESTING1234567" }));
+
+      // Then
+      expect(screen.getByTestId("auth-form")).toHaveAttribute(
+        "data-invitation-token",
+        "TESTING1234567",
+      );
+      expect(redirectMock).not.toHaveBeenCalled();
+    });
+  });
+});
diff --git a/ui/app/(auth)/(guest-only)/sign-up/page.tsx b/ui/app/(auth)/(guest-only)/sign-up/page.tsx
index 0415c6b0f3..884eedfa70 100644
--- a/ui/app/(auth)/(guest-only)/sign-up/page.tsx
+++ b/ui/app/(auth)/(guest-only)/sign-up/page.tsx
@@ -1,10 +1,12 @@
+import { redirect } from "next/navigation";
+
 import { AuthForm } from "@/components/auth/oss";
 import {
   getAuthUrl,
   isGithubOAuthEnabled,
   isGoogleOAuthEnabled,
 } from "@/lib/helper";
-import { isCloud } from "@/lib/shared/env";
+import { isCloud, isSelfRegistrationEnabled } from "@/lib/shared/env";
 import { SearchParamsProps } from "@/types";
 
 const SignUp = async ({
@@ -17,6 +19,9 @@ const SignUp = async ({
     typeof resolvedSearchParams?.invitation_token === "string"
       ? resolvedSearchParams.invitation_token
       : null;
+  if (!invitationToken && !isSelfRegistrationEnabled()) {
+    redirect("/sign-in");
+  }
   const isCloudEnv = isCloud();
 
   const GOOGLE_AUTH_URL = getAuthUrl("google");
diff --git a/ui/app/api/auth/callback/github/route.test.ts b/ui/app/api/auth/callback/github/route.test.ts
new file mode 100644
index 0000000000..5e454e778e
--- /dev/null
+++ b/ui/app/api/auth/callback/github/route.test.ts
@@ -0,0 +1,68 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const { fetchMock, signInMock } = vi.hoisted(() => ({
+  fetchMock: vi.fn(),
+  signInMock: vi.fn(),
+}));
+
+vi.mock("@/auth.config", () => ({
+  signIn: signInMock,
+}));
+
+vi.mock("@/lib/helper", () => ({
+  apiBaseUrl: "https://api.example.com/api/v1",
+  baseUrl: "https://app.example.com",
+}));
+
+import { GET } from "./route";
+
+describe("GitHub OAuth callback route", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    vi.stubGlobal("fetch", fetchMock);
+    signInMock.mockResolvedValue({});
+  });
+
+  it("redirects to sign-in with a specific error when self-registration is disabled", async () => {
+    // Given
+    fetchMock.mockResolvedValue(
+      Response.json(
+        { errors: [{ code: "self_registration_disabled", status: "403" }] },
+        { status: 403 },
+      ),
+    );
+    const request = new Request(
+      "https://app.example.com/api/auth/callback/github?code=oauth-code",
+    );
+
+    // When
+    const response = await GET(request);
+
+    // Then
+    expect(fetchMock.mock.calls[0][0]).toBe(
+      "https://api.example.com/api/v1/tokens/github",
+    );
+    expect(response.headers.get("location")).toBe(
+      "https://app.example.com/sign-in?error=SelfRegistrationDisabled",
+    );
+    expect(signInMock).not.toHaveBeenCalled();
+  });
+
+  it("keeps the generic failure for other token exchange errors", async () => {
+    // Given
+    fetchMock.mockResolvedValue(
+      Response.json({ errors: [{ status: "400" }] }, { status: 400 }),
+    );
+    const request = new Request(
+      "https://app.example.com/api/auth/callback/github?code=oauth-code",
+    );
+
+    // When
+    const response = await GET(request);
+
+    // Then
+    expect(response.headers.get("location")).toBe(
+      "https://app.example.com/sign-in?error=AuthenticationFailed",
+    );
+  });
+});
diff --git a/ui/app/api/auth/callback/github/route.ts b/ui/app/api/auth/callback/github/route.ts
index a152206125..76f9ba790f 100644
--- a/ui/app/api/auth/callback/github/route.ts
+++ b/ui/app/api/auth/callback/github/route.ts
@@ -7,6 +7,7 @@ import {
   getAttributionParamsFromCallbackPath,
   getInvitationTokenFromCallbackPath,
   getSafeCallbackPath,
+  isSelfRegistrationDisabledResponse,
 } from "@/lib/auth-callback-url";
 import { apiBaseUrl, baseUrl } from "@/lib/helper";
 
@@ -44,6 +45,11 @@ export async function GET(req: Request) {
     });
 
     if (!response.ok) {
+      if (await isSelfRegistrationDisabledResponse(response)) {
+        return NextResponse.redirect(
+          new URL("/sign-in?error=SelfRegistrationDisabled", baseUrl),
+        );
+      }
       throw new Error("Failed to exchange code for tokens");
     }
 
diff --git a/ui/app/api/auth/callback/google/route.test.ts b/ui/app/api/auth/callback/google/route.test.ts
index 96599d345a..bb1b8de3f4 100644
--- a/ui/app/api/auth/callback/google/route.test.ts
+++ b/ui/app/api/auth/callback/google/route.test.ts
@@ -51,4 +51,44 @@ describe("Google OAuth callback route", () => {
     expect(body.get("promo_code")).toBe("black-hat-2026");
     expect(body.get("utm_source")).toBe("blackhat");
   });
+
+  it("redirects to sign-in with a specific error when self-registration is disabled", async () => {
+    // Given
+    fetchMock.mockResolvedValue(
+      Response.json(
+        { errors: [{ code: "self_registration_disabled", status: "403" }] },
+        { status: 403 },
+      ),
+    );
+    const request = new Request(
+      "https://app.example.com/api/auth/callback/google?code=oauth-code",
+    );
+
+    // When
+    const response = await GET(request);
+
+    // Then
+    expect(response.headers.get("location")).toBe(
+      "https://app.example.com/sign-in?error=SelfRegistrationDisabled",
+    );
+    expect(signInMock).not.toHaveBeenCalled();
+  });
+
+  it("keeps the generic failure for other token exchange errors", async () => {
+    // Given
+    fetchMock.mockResolvedValue(
+      Response.json({ errors: [{ status: "400" }] }, { status: 400 }),
+    );
+    const request = new Request(
+      "https://app.example.com/api/auth/callback/google?code=oauth-code",
+    );
+
+    // When
+    const response = await GET(request);
+
+    // Then
+    expect(response.headers.get("location")).toBe(
+      "https://app.example.com/sign-in?error=AuthenticationFailed",
+    );
+  });
 });
diff --git a/ui/app/api/auth/callback/google/route.ts b/ui/app/api/auth/callback/google/route.ts
index fc8e263a94..fdf81c57bb 100644
--- a/ui/app/api/auth/callback/google/route.ts
+++ b/ui/app/api/auth/callback/google/route.ts
@@ -7,6 +7,7 @@ import {
   getAttributionParamsFromCallbackPath,
   getInvitationTokenFromCallbackPath,
   getSafeCallbackPath,
+  isSelfRegistrationDisabledResponse,
 } from "@/lib/auth-callback-url";
 import { apiBaseUrl, baseUrl } from "@/lib/helper";
 
@@ -44,6 +45,11 @@ export async function GET(req: Request) {
     });
 
     if (!response.ok) {
+      if (await isSelfRegistrationDisabledResponse(response)) {
+        return NextResponse.redirect(
+          new URL("/sign-in?error=SelfRegistrationDisabled", baseUrl),
+        );
+      }
       throw new Error("Failed to exchange code for tokens");
     }
 
diff --git a/ui/changelog.d/disable-self-registration.added.md b/ui/changelog.d/disable-self-registration.added.md
new file mode 100644
index 0000000000..46e62eb1b3
--- /dev/null
+++ b/ui/changelog.d/disable-self-registration.added.md
@@ -0,0 +1 @@
+`UI_SELF_REGISTRATION_ENABLED` flag for Prowler Private Cloud deployments; when `"false"`, `/sign-up` only opens with an invitation, the sign-in page drops the "Sign up" link and the profile hides **Create organization**
diff --git a/ui/components/auth/oss/auth-form.tsx b/ui/components/auth/oss/auth-form.tsx
index a9f3e003d3..953bc1235b 100644
--- a/ui/components/auth/oss/auth-form.tsx
+++ b/ui/components/auth/oss/auth-form.tsx
@@ -9,6 +9,7 @@ export const AuthForm = ({
   githubAuthUrl,
   isGoogleOAuthEnabled,
   isGithubOAuthEnabled,
+  isSelfRegistrationEnabled = true,
 }: {
   type: string;
   invitationToken?: string | null;
@@ -17,6 +18,7 @@ export const AuthForm = ({
   githubAuthUrl?: string;
   isGoogleOAuthEnabled?: boolean;
   isGithubOAuthEnabled?: boolean;
+  isSelfRegistrationEnabled?: boolean;
 }) => {
   if (type === "sign-in") {
     return (
@@ -25,6 +27,7 @@ export const AuthForm = ({
         githubAuthUrl={githubAuthUrl}
         isGoogleOAuthEnabled={isGoogleOAuthEnabled}
         isGithubOAuthEnabled={isGithubOAuthEnabled}
+        isSelfRegistrationEnabled={isSelfRegistrationEnabled}
       />
     );
   }
diff --git a/ui/components/auth/oss/sign-in-form.tsx b/ui/components/auth/oss/sign-in-form.tsx
index 43ad982217..ed51346738 100644
--- a/ui/components/auth/oss/sign-in-form.tsx
+++ b/ui/components/auth/oss/sign-in-form.tsx
@@ -34,11 +34,13 @@ export const SignInForm = ({
   githubAuthUrl,
   isGoogleOAuthEnabled,
   isGithubOAuthEnabled,
+  isSelfRegistrationEnabled = true,
 }: {
   googleAuthUrl?: string;
   githubAuthUrl?: string;
   isGoogleOAuthEnabled?: boolean;
   isGithubOAuthEnabled?: boolean;
+  isSelfRegistrationEnabled?: boolean;
 }) => {
   const router = useRouter();
   const searchParams = useSearchParams();
@@ -80,6 +82,11 @@ export const SignInForm = ({
             description:
               "There was a problem with your session. Please sign in again.",
           },
+          SelfRegistrationDisabled: {
+            title: "Registration Disabled",
+            description:
+              "Self-registration is disabled. Ask an administrator for an invitation.",
+          },
         };
 
         const errorConfig = errorMessages[sessionError] || {
@@ -161,11 +168,13 @@ export const SignInForm = ({
     <AuthLayout
       title={title}
       footer={
-        <AuthFooterLink
-          text="Need to create an account?"
-          linkText="Sign up"
-          href="/sign-up"
-        />
+        isSelfRegistrationEnabled ? (
+          <AuthFooterLink
+            text="Need to create an account?"
+            linkText="Sign up"
+            href="/sign-up"
+          />
+        ) : undefined
       }
     >
       <Form {...form}>
diff --git a/ui/components/integrations/saml/saml-config-form.test.tsx b/ui/components/integrations/saml/saml-config-form.test.tsx
index 4949a9b255..5f567bba4e 100644
--- a/ui/components/integrations/saml/saml-config-form.test.tsx
+++ b/ui/components/integrations/saml/saml-config-form.test.tsx
@@ -58,6 +58,7 @@ const runtimeConfig: RuntimePublicConfig = {
   reoDevClientId: null,
   cloudEnabled: false,
   cloudBillingEnabled: false,
+  selfRegistrationEnabled: true,
   stripePublishableKey: null,
   stripePublishableKeyV2: null,
 };
diff --git a/ui/components/users/profile/memberships-card-client.test.tsx b/ui/components/users/profile/memberships-card-client.test.tsx
index c5ae7f5e4e..f18b6cc36b 100644
--- a/ui/components/users/profile/memberships-card-client.test.tsx
+++ b/ui/components/users/profile/memberships-card-client.test.tsx
@@ -205,4 +205,22 @@ describe("MembershipsCardClient", () => {
       screen.getByRole("menuitem", { name: /delete organization/i }),
     ).toBeInTheDocument();
   });
+
+  it("hides the create organization action when self-registration is disabled", () => {
+    // Given / When
+    render(
+      <MembershipsCardClient
+        memberships={memberships}
+        tenantsMap={tenantsMap}
+        hasManageAccount={true}
+        sessionTenantId="tenant-1"
+        canCreateOrganization={false}
+      />,
+    );
+
+    // Then
+    expect(
+      screen.queryByRole("button", { name: "Create organization" }),
+    ).not.toBeInTheDocument();
+  });
 });
diff --git a/ui/components/users/profile/memberships-card-client.tsx b/ui/components/users/profile/memberships-card-client.tsx
index 10b7f28e24..7f05b9cd64 100644
--- a/ui/components/users/profile/memberships-card-client.tsx
+++ b/ui/components/users/profile/memberships-card-client.tsx
@@ -52,6 +52,7 @@ interface MembershipsCardClientProps {
   tenantsMap: Record<string, TenantDetailData>;
   hasManageAccount: boolean;
   sessionTenantId: string | undefined;
+  canCreateOrganization?: boolean;
 }
 
 const OrganizationNameCell = ({ name }: { name: string }) => (
@@ -204,6 +205,7 @@ export const MembershipsCardClient = ({
   tenantsMap,
   hasManageAccount,
   sessionTenantId,
+  canCreateOrganization = true,
 }: MembershipsCardClientProps) => {
   const [isCreateOpen, setIsCreateOpen] = useState(false);
 
@@ -232,13 +234,15 @@ export const MembershipsCardClient = ({
 
   return (
     <>
-      <Modal
-        open={isCreateOpen}
-        onOpenChange={setIsCreateOpen}
-        title="Create organization"
-      >
-        <CreateTenantForm setIsOpen={setIsCreateOpen} />
-      </Modal>
+      {canCreateOrganization && (
+        <Modal
+          open={isCreateOpen}
+          onOpenChange={setIsCreateOpen}
+          title="Create organization"
+        >
+          <CreateTenantForm setIsOpen={setIsCreateOpen} />
+        </Modal>
+      )}
       <Card variant="inner" padding="none" className="gap-4 p-4 md:p-5">
         <CardHeader>
           <div className="flex flex-col gap-1">
@@ -250,15 +254,17 @@ export const MembershipsCardClient = ({
               </CustomLink>
             </p>
           </div>
-          <CardAction>
-            <Button
-              variant="default"
-              size="sm"
-              onClick={() => setIsCreateOpen(true)}
-            >
-              Create organization
-            </Button>
-          </CardAction>
+          {canCreateOrganization && (
+            <CardAction>
+              <Button
+                variant="default"
+                size="sm"
+                onClick={() => setIsCreateOpen(true)}
+              >
+                Create organization
+              </Button>
+            </CardAction>
+          )}
         </CardHeader>
         <CardContent>
           {memberships.length === 0 ? (
diff --git a/ui/components/users/profile/memberships-card.tsx b/ui/components/users/profile/memberships-card.tsx
index 56e03cb9f8..aa5b8884aa 100644
--- a/ui/components/users/profile/memberships-card.tsx
+++ b/ui/components/users/profile/memberships-card.tsx
@@ -1,3 +1,4 @@
+import { isSelfRegistrationEnabled } from "@/lib/shared/env";
 import { MembershipDetailData, TenantDetailData } from "@/types/users";
 
 import { MembershipsCardClient } from "./memberships-card-client";
@@ -19,6 +20,7 @@ export const MembershipsCard = ({
       tenantsMap={tenantsMap}
       hasManageAccount={hasManageAccount}
       sessionTenantId={sessionTenantId}
+      canCreateOrganization={isSelfRegistrationEnabled()}
     />
   );
 };
diff --git a/ui/lib/auth-callback-url.test.ts b/ui/lib/auth-callback-url.test.ts
index 3153a06eac..0bac5abcf8 100644
--- a/ui/lib/auth-callback-url.test.ts
+++ b/ui/lib/auth-callback-url.test.ts
@@ -6,6 +6,7 @@ import {
   getAttributionParamsFromCallbackPath,
   getInvitationTokenFromCallbackPath,
   getSafeCallbackPath,
+  isSelfRegistrationDisabledResponse,
 } from "@/lib/auth-callback-url";
 
 describe("auth callback URL helpers", () => {
@@ -150,3 +151,40 @@ describe("auth callback URL helpers", () => {
     });
   });
 });
+
+describe("isSelfRegistrationDisabledResponse", () => {
+  it("is true for a 403 carrying the self_registration_disabled code", async () => {
+    const response = Response.json(
+      { errors: [{ code: "self_registration_disabled", status: "403" }] },
+      { status: 403 },
+    );
+
+    await expect(isSelfRegistrationDisabledResponse(response)).resolves.toBe(
+      true,
+    );
+  });
+
+  it("is false for a 403 with another code", async () => {
+    const response = Response.json(
+      { errors: [{ code: "partner_provisioned", status: "403" }] },
+      { status: 403 },
+    );
+
+    await expect(isSelfRegistrationDisabledResponse(response)).resolves.toBe(
+      false,
+    );
+  });
+
+  it("is false for non-403 responses and unparsable bodies", async () => {
+    await expect(
+      isSelfRegistrationDisabledResponse(
+        new Response("self_registration_disabled", { status: 400 }),
+      ),
+    ).resolves.toBe(false);
+    await expect(
+      isSelfRegistrationDisabledResponse(
+        new Response("not json", { status: 403 }),
+      ),
+    ).resolves.toBe(false);
+  });
+});
diff --git a/ui/lib/auth-callback-url.ts b/ui/lib/auth-callback-url.ts
index 2cba07ff6d..1e370887e1 100644
--- a/ui/lib/auth-callback-url.ts
+++ b/ui/lib/auth-callback-url.ts
@@ -100,3 +100,25 @@ export const getAttributionParamsFromCallbackPath = (
     return {};
   }
 };
+
+const SELF_REGISTRATION_DISABLED_CODE = "self_registration_disabled";
+
+// The API answers a social login from a brand-new user with this error code
+// when the deployment only allows invited users.
+export const isSelfRegistrationDisabledResponse = async (
+  response: Response,
+): Promise<boolean> => {
+  if (response.status !== 403) return false;
+  try {
+    const body = (await response.json()) as {
+      errors?: Array<{ code?: string }>;
+    };
+    return (
+      body.errors?.some(
+        (error) => error.code === SELF_REGISTRATION_DISABLED_CODE,
+      ) ?? false
+    );
+  } catch (_error) {
+    return false;
+  }
+};
diff --git a/ui/lib/get-runtime-config.client.test.ts b/ui/lib/get-runtime-config.client.test.ts
index 2c0362cb40..3c4fc0fef5 100644
--- a/ui/lib/get-runtime-config.client.test.ts
+++ b/ui/lib/get-runtime-config.client.test.ts
@@ -146,6 +146,7 @@ describe("getRuntimeConfigClient", () => {
         "posthogKey",
         "posthogUiHost",
         "reoDevClientId",
+        "selfRegistrationEnabled",
         "sentryDsn",
         "sentryEnvironment",
         "stripePublishableKey",
@@ -157,6 +158,8 @@ describe("getRuntimeConfigClient", () => {
     // false (not null) when absent from the island.
     expect(config.cloudBillingEnabled).toBe(false);
     expect(config.cloudEnabled).toBe(false);
+    // Opt-out flag: absent from the island means self-registration stays on.
+    expect(config.selfRegistrationEnabled).toBe(true);
     expect(
       (config as unknown as Record<string, unknown>).notAllowlisted,
     ).toBeUndefined();
diff --git a/ui/lib/runtime-config.shared.ts b/ui/lib/runtime-config.shared.ts
index db1318fb21..c6a5166cf6 100644
--- a/ui/lib/runtime-config.shared.ts
+++ b/ui/lib/runtime-config.shared.ts
@@ -13,6 +13,7 @@ export interface RuntimePublicConfig {
   reoDevClientId: string | null; // reserved
   cloudEnabled: boolean;
   cloudBillingEnabled: boolean;
+  selfRegistrationEnabled: boolean;
   stripePublishableKey: string | null; // reserved
   stripePublishableKeyV2: string | null; // reserved
 }
@@ -33,6 +34,7 @@ export const EMPTY_RUNTIME_PUBLIC_CONFIG: RuntimePublicConfig = {
   reoDevClientId: null,
   cloudEnabled: false,
   cloudBillingEnabled: false,
+  selfRegistrationEnabled: true,
   stripePublishableKey: null,
   stripePublishableKeyV2: null,
 };
@@ -53,6 +55,7 @@ const pickConfig = (
   reoDevClientId: parsed.reoDevClientId ?? null,
   cloudEnabled: parsed.cloudEnabled ?? false,
   cloudBillingEnabled: parsed.cloudBillingEnabled ?? false,
+  selfRegistrationEnabled: parsed.selfRegistrationEnabled ?? true,
   stripePublishableKey: parsed.stripePublishableKey ?? null,
   stripePublishableKeyV2: parsed.stripePublishableKeyV2 ?? null,
 });
diff --git a/ui/lib/runtime-config.test.ts b/ui/lib/runtime-config.test.ts
index 412cc1e185..3ca2fcb405 100644
--- a/ui/lib/runtime-config.test.ts
+++ b/ui/lib/runtime-config.test.ts
@@ -72,3 +72,27 @@ describe("getRuntimePublicConfig PostHog hosts", () => {
     expect(config.posthogUiHost).toBeNull();
   });
 });
+
+describe("getRuntimePublicConfig self-registration flag", () => {
+  afterEach(() => {
+    vi.unstubAllEnvs();
+  });
+
+  it("is enabled when UI_SELF_REGISTRATION_ENABLED is unset", async () => {
+    vi.stubEnv("UI_SELF_REGISTRATION_ENABLED", undefined);
+
+    const { getRuntimePublicConfig } = await importFresh();
+    const config = await getRuntimePublicConfig();
+
+    expect(config.selfRegistrationEnabled).toBe(true);
+  });
+
+  it('is disabled only when UI_SELF_REGISTRATION_ENABLED is "false"', async () => {
+    vi.stubEnv("UI_SELF_REGISTRATION_ENABLED", "false");
+
+    const { getRuntimePublicConfig } = await importFresh();
+    const config = await getRuntimePublicConfig();
+
+    expect(config.selfRegistrationEnabled).toBe(false);
+  });
+});
diff --git a/ui/lib/runtime-config.ts b/ui/lib/runtime-config.ts
index 29d38ca952..ba71f22f7d 100644
--- a/ui/lib/runtime-config.ts
+++ b/ui/lib/runtime-config.ts
@@ -8,7 +8,7 @@ import {
   readGatedEnv,
 } from "@/lib/integrations";
 import { type RuntimePublicConfig } from "@/lib/runtime-config.shared";
-import { readBoolEnv, readEnv } from "@/lib/runtime-env";
+import { readBoolEnv, readEnv, readOptOutEnv } from "@/lib/runtime-env";
 
 // `connection()` forces a per-request runtime read (never build-snapshotted);
 // only this allowlist reaches the client. Each migrated key falls back to its
@@ -51,6 +51,8 @@ export async function getRuntimePublicConfig(): Promise<RuntimePublicConfig> {
     posthogUiHost: readGatedEnv("UI_POSTHOG_ENABLED", "UI_POSTHOG_UI_HOST"),
     reoDevClientId: readEnv("REO_DEV_CLIENT_ID"),
     cloudEnabled: readBoolEnv("UI_CLOUD_ENABLED"),
+    // Off only when explicitly "false": invited users can still register.
+    selfRegistrationEnabled: readOptOutEnv("UI_SELF_REGISTRATION_ENABLED"),
     // Install-level selector "legacy" | "metronome" | "false"; the client only
     // needs on/off, so expose a derived boolean (the raw selector is read
     // server-side for V1/V2 routing). Default (unset) is off.
diff --git a/ui/lib/runtime-env.test.ts b/ui/lib/runtime-env.test.ts
index 7735622c89..02ae75b972 100644
--- a/ui/lib/runtime-env.test.ts
+++ b/ui/lib/runtime-env.test.ts
@@ -1,6 +1,6 @@
 import { afterEach, describe, expect, it, vi } from "vitest";
 
-import { readBoolEnv, readEnv } from "./runtime-env";
+import { readBoolEnv, readEnv, readOptOutEnv } from "./runtime-env";
 
 describe("readEnv", () => {
   afterEach(() => {
@@ -121,3 +121,29 @@ describe("readBoolEnv", () => {
     }
   });
 });
+
+describe("readOptOutEnv", () => {
+  afterEach(() => {
+    vi.unstubAllEnvs();
+  });
+
+  it("is true when unset", () => {
+    vi.stubEnv("UI_SELF_REGISTRATION_ENABLED", undefined);
+
+    expect(readOptOutEnv("UI_SELF_REGISTRATION_ENABLED")).toBe(true);
+  });
+
+  it('is false for "false" in any case, whitespace trimmed', () => {
+    for (const value of ["false", " False ", "FALSE"]) {
+      vi.stubEnv("UI_SELF_REGISTRATION_ENABLED", value);
+      expect(readOptOutEnv("UI_SELF_REGISTRATION_ENABLED")).toBe(false);
+    }
+  });
+
+  it('stays true for any other value ("true", "0", "no")', () => {
+    for (const value of ["true", "0", "no"]) {
+      vi.stubEnv("UI_SELF_REGISTRATION_ENABLED", value);
+      expect(readOptOutEnv("UI_SELF_REGISTRATION_ENABLED")).toBe(true);
+    }
+  });
+});
diff --git a/ui/lib/runtime-env.ts b/ui/lib/runtime-env.ts
index 430d4f298d..92ad218b16 100644
--- a/ui/lib/runtime-env.ts
+++ b/ui/lib/runtime-env.ts
@@ -24,3 +24,9 @@ export function readEnv(
 export function readBoolEnv(key: keyof NodeJS.ProcessEnv): boolean {
   return (readEnv(key) ?? "").trim() === "true";
 }
+
+// Reads a runtime boolean flag that is on unless set to "false". Case-insensitive
+// because the same value is often shared with a Django setting written "False".
+export function readOptOutEnv(key: keyof NodeJS.ProcessEnv): boolean {
+  return (readEnv(key) ?? "").trim().toLowerCase() !== "false";
+}
diff --git a/ui/lib/shared/env.test.ts b/ui/lib/shared/env.test.ts
index 6154171e94..715e829989 100644
--- a/ui/lib/shared/env.test.ts
+++ b/ui/lib/shared/env.test.ts
@@ -2,7 +2,7 @@ import { afterEach, describe, expect, it, vi } from "vitest";
 
 import { RUNTIME_CONFIG_SCRIPT_ID } from "@/lib/runtime-config.shared";
 
-import { isCloud } from "./env";
+import { isCloud, isSelfRegistrationEnabled } from "./env";
 
 const writeIsland = (content: Record<string, unknown> | string) => {
   const el = document.createElement("script");
@@ -55,3 +55,43 @@ describe("isCloud", () => {
     });
   });
 });
+
+describe("isSelfRegistrationEnabled", () => {
+  afterEach(() => {
+    vi.unstubAllEnvs();
+    document.head.innerHTML = "";
+  });
+
+  it('returns true outside Prowler Cloud even when UI_SELF_REGISTRATION_ENABLED is "false"', () => {
+    vi.stubEnv("UI_SELF_REGISTRATION_ENABLED", "false");
+    expect(isSelfRegistrationEnabled()).toBe(true);
+  });
+
+  it("returns true in Prowler Cloud when UI_SELF_REGISTRATION_ENABLED is unset", () => {
+    vi.stubEnv("UI_CLOUD_ENABLED", "true");
+    expect(isSelfRegistrationEnabled()).toBe(true);
+  });
+
+  it('returns false in Prowler Cloud when UI_SELF_REGISTRATION_ENABLED is "false"', () => {
+    vi.stubEnv("UI_CLOUD_ENABLED", "true");
+    vi.stubEnv("UI_SELF_REGISTRATION_ENABLED", "false");
+    expect(isSelfRegistrationEnabled()).toBe(false);
+  });
+
+  it("uses the island flags over the env vars", () => {
+    vi.stubEnv("UI_SELF_REGISTRATION_ENABLED", "true");
+    writeIsland({ cloudEnabled: true, selfRegistrationEnabled: false });
+    expect(isSelfRegistrationEnabled()).toBe(false);
+  });
+
+  it("ignores a disabled island flag outside Prowler Cloud", () => {
+    writeIsland({ cloudEnabled: false, selfRegistrationEnabled: false });
+    expect(isSelfRegistrationEnabled()).toBe(true);
+  });
+
+  it("defaults to true when the island omits the flag", () => {
+    vi.stubEnv("UI_SELF_REGISTRATION_ENABLED", "false");
+    writeIsland({ cloudEnabled: true });
+    expect(isSelfRegistrationEnabled()).toBe(true);
+  });
+});
diff --git a/ui/lib/shared/env.ts b/ui/lib/shared/env.ts
index 398822bd02..d54c9d04e0 100644
--- a/ui/lib/shared/env.ts
+++ b/ui/lib/shared/env.ts
@@ -2,7 +2,7 @@
  * Shared environment helpers.
  */
 import { readRuntimeConfigIsland } from "@/lib/runtime-config.shared";
-import { readBoolEnv } from "@/lib/runtime-env";
+import { readBoolEnv, readOptOutEnv } from "@/lib/runtime-env";
 
 /**
  * Whether the UI is running inside a Prowler Cloud deployment.
@@ -20,3 +20,18 @@ export function isCloud(): boolean {
 
   return readBoolEnv("UI_CLOUD_ENABLED");
 }
+
+/**
+ * Whether visitors can create an account without an invitation.
+ *
+ * Prowler Cloud only: always on elsewhere. In Cloud it follows
+ * `UI_SELF_REGISTRATION_ENABLED` (island, then env), on unless "false".
+ */
+export function isSelfRegistrationEnabled(): boolean {
+  if (!isCloud()) return true;
+
+  const islandConfig = readRuntimeConfigIsland();
+  if (islandConfig) return islandConfig.selfRegistrationEnabled;
+
+  return readOptOutEnv("UI_SELF_REGISTRATION_ENABLED");
+}
diff --git a/ui/tests/runtime-config/runtime-config-page.ts b/ui/tests/runtime-config/runtime-config-page.ts
index 35d66672c3..e2a651edec 100644
--- a/ui/tests/runtime-config/runtime-config-page.ts
+++ b/ui/tests/runtime-config/runtime-config-page.ts
@@ -23,6 +23,7 @@ export const RUNTIME_CONFIG_KEYS = [
   "reoDevClientId",
   "cloudBillingEnabled",
   "cloudEnabled",
+  "selfRegistrationEnabled",
   "stripePublishableKey",
   "stripePublishableKeyV2",
 ] as const satisfies ReadonlyArray<keyof RuntimePublicConfig>;

From 30694865499d8e00ddf9e6cf3ee34e770215ba8f Mon Sep 17 00:00:00 2001
From: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com>
Date: Thu, 17 Sep 2026 10:03:59 +0200
Subject: [PATCH 67/77] feat: record the tenant profile declared at onboarding
 (#12818)

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
---
 api/changelog.d/onboarding-profile.added.md   |   1 +
 api/src/backend/api/filters.py                |   7 +
 .../0098_tenant_onboarding_profile.py         | 116 ++++++++
 api/src/backend/api/models.py                 |  81 ++++++
 .../api/tests/test_onboarding_profile.py      | 174 ++++++++++++
 api/src/backend/api/v1/serializers.py         |  74 +++++
 api/src/backend/api/v1/urls.py                |   6 +
 api/src/backend/api/v1/views.py               | 121 +++++++-
 ui/actions/onboarding/profile.test.ts         | 200 +++++++++++++
 ui/actions/onboarding/profile.ts              | 119 ++++++++
 ui/app/(prowler)/layout.tsx                   |  25 +-
 ui/changelog.d/onboarding-profile.added.md    |   1 +
 .../onboarding-profile-gate.test.tsx          | 267 ++++++++++++++++++
 .../onboarding-profile-modal.test.tsx         |  73 +++++
 .../onboarding/onboarding-profile-gate.tsx    | 128 +++++++++
 .../onboarding/onboarding-profile-modal.tsx   | 172 +++++++++++
 ui/lib/onboarding/README.md                   |  27 +-
 .../__tests__/profile-gate-decision.test.ts   |  32 +++
 ui/lib/onboarding/index.ts                    |  14 +
 ui/lib/onboarding/onboarding-events.ts        |  61 ++++
 ui/lib/onboarding/profile-gate-decision.ts    |  20 ++
 ui/lib/onboarding/profile-marker.ts           |  67 +++++
 ui/types/onboarding-profile.ts                |  63 +++++
 23 files changed, 1844 insertions(+), 5 deletions(-)
 create mode 100644 api/changelog.d/onboarding-profile.added.md
 create mode 100644 api/src/backend/api/migrations/0098_tenant_onboarding_profile.py
 create mode 100644 api/src/backend/api/tests/test_onboarding_profile.py
 create mode 100644 ui/actions/onboarding/profile.test.ts
 create mode 100644 ui/actions/onboarding/profile.ts
 create mode 100644 ui/changelog.d/onboarding-profile.added.md
 create mode 100644 ui/components/onboarding/__tests__/onboarding-profile-gate.test.tsx
 create mode 100644 ui/components/onboarding/__tests__/onboarding-profile-modal.test.tsx
 create mode 100644 ui/components/onboarding/onboarding-profile-gate.tsx
 create mode 100644 ui/components/onboarding/onboarding-profile-modal.tsx
 create mode 100644 ui/lib/onboarding/__tests__/profile-gate-decision.test.ts
 create mode 100644 ui/lib/onboarding/onboarding-events.ts
 create mode 100644 ui/lib/onboarding/profile-gate-decision.ts
 create mode 100644 ui/lib/onboarding/profile-marker.ts
 create mode 100644 ui/types/onboarding-profile.ts

diff --git a/api/changelog.d/onboarding-profile.added.md b/api/changelog.d/onboarding-profile.added.md
new file mode 100644
index 0000000000..b1588f8ac3
--- /dev/null
+++ b/api/changelog.d/onboarding-profile.added.md
@@ -0,0 +1 @@
+`POST /onboarding-profiles` records the cloud-account count, area of work and position a tenant declares at first login, or that the step was skipped, once per tenant and never overwritten
diff --git a/api/src/backend/api/filters.py b/api/src/backend/api/filters.py
index a7f888b453..8a9f37c366 100644
--- a/api/src/backend/api/filters.py
+++ b/api/src/backend/api/filters.py
@@ -41,6 +41,7 @@ from api.models import (
     StatusChoices,
     Task,
     TenantAPIKey,
+    TenantOnboardingProfile,
     ThreatScoreSnapshot,
     User,
 )
@@ -1788,6 +1789,12 @@ class LighthouseProviderModelsFilter(FilterSet):
         }
 
 
+class TenantOnboardingProfileFilter(FilterSet):
+    class Meta:
+        model = TenantOnboardingProfile
+        fields = {"skipped": ["exact"]}
+
+
 class MuteRuleFilter(FilterSet):
     inserted_at = DateFilter(field_name="inserted_at", lookup_expr="date")
     updated_at = DateFilter(field_name="updated_at", lookup_expr="date")
diff --git a/api/src/backend/api/migrations/0098_tenant_onboarding_profile.py b/api/src/backend/api/migrations/0098_tenant_onboarding_profile.py
new file mode 100644
index 0000000000..7ee767fb91
--- /dev/null
+++ b/api/src/backend/api/migrations/0098_tenant_onboarding_profile.py
@@ -0,0 +1,116 @@
+import uuid
+
+import api.rls
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("api", "0097_attack_paths_scan_db_defaults"),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="TenantOnboardingProfile",
+            fields=[
+                (
+                    "id",
+                    models.UUIDField(
+                        default=uuid.uuid4,
+                        editable=False,
+                        primary_key=True,
+                        serialize=False,
+                    ),
+                ),
+                ("inserted_at", models.DateTimeField(auto_now_add=True)),
+                (
+                    "declared_cloud_accounts",
+                    models.CharField(
+                        blank=True,
+                        choices=[
+                            ("1", "1"),
+                            ("2-10", "2-10"),
+                            ("11-50", "11-50"),
+                            ("51-200", "51-200"),
+                            ("200+", "200+"),
+                        ],
+                        max_length=16,
+                        null=True,
+                    ),
+                ),
+                (
+                    "declared_role",
+                    models.CharField(
+                        blank=True,
+                        choices=[
+                            ("security", "Security"),
+                            ("devops_platform", "DevOps / Platform"),
+                            ("developer", "Developer"),
+                            ("compliance_grc", "Compliance / GRC"),
+                            ("other", "Other"),
+                        ],
+                        max_length=32,
+                        null=True,
+                    ),
+                ),
+                (
+                    "declared_seniority",
+                    models.CharField(
+                        blank=True,
+                        choices=[
+                            ("practitioner", "Practitioner / IC"),
+                            ("lead", "Team lead / Manager"),
+                            ("director", "Director / Head of"),
+                            ("executive", "VP / C-level"),
+                            ("founder", "Founder / Owner"),
+                        ],
+                        max_length=32,
+                        null=True,
+                    ),
+                ),
+                ("skipped", models.BooleanField(default=False)),
+                (
+                    "submitted_by",
+                    models.ForeignKey(
+                        blank=True,
+                        null=True,
+                        on_delete=django.db.models.deletion.SET_NULL,
+                        related_name="tenant_onboarding_profiles",
+                        related_query_name="tenant_onboarding_profile",
+                        to=settings.AUTH_USER_MODEL,
+                    ),
+                ),
+                (
+                    "tenant",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE, to="api.tenant"
+                    ),
+                ),
+            ],
+            options={
+                "db_table": "tenant_onboarding_profiles",
+                "abstract": False,
+            },
+        ),
+        migrations.AddConstraint(
+            model_name="tenantonboardingprofile",
+            constraint=models.UniqueConstraint(
+                fields=("tenant_id",), name="unique_tenant_onboarding_profile"
+            ),
+        ),
+        migrations.AddConstraint(
+            model_name="tenantonboardingprofile",
+            # `statements` written out explicitly: RowLevelSecurityConstraint
+            # .deconstruct() does not serialize it, so an autogenerated
+            # migration falls back to ["SELECT"] and leaves the table without
+            # INSERT/UPDATE/DELETE policies.
+            constraint=api.rls.RowLevelSecurityConstraint(
+                "tenant_id",
+                name="rls_on_tenantonboardingprofile",
+                statements=["SELECT", "INSERT", "UPDATE", "DELETE"],
+            ),
+        ),
+    ]
diff --git a/api/src/backend/api/models.py b/api/src/backend/api/models.py
index a280708d53..4f1e963c3d 100644
--- a/api/src/backend/api/models.py
+++ b/api/src/backend/api/models.py
@@ -3113,3 +3113,84 @@ class TenantComplianceSummary(RowLevelSecurityProtectedModel):
                 statements=["SELECT", "INSERT", "UPDATE", "DELETE"],
             ),
         ]
+
+
+class TenantOnboardingProfile(RowLevelSecurityProtectedModel):
+    """What a tenant declared about itself at first login, before the product
+    shaped its behaviour.
+
+    One row per tenant. The three buckets are closed choices asked in the
+    onboarding profile step; ``skipped`` records that the step was shown and
+    dismissed, so a skip is a fact and not the absence of one.
+
+    ``declared_role`` and ``declared_seniority`` are deliberately orthogonal:
+    the first is the discipline the person works in, the second how far up the
+    organisation they sit. Kept apart, "a security engineer" and "the CISO"
+    are two segments rather than one blurred bucket.
+
+    Immutable once written: a second submission returns the existing row so the
+    first answer, given before any product signal could bias it, is the one
+    that stays.
+    """
+
+    class CloudAccountsBucket(models.TextChoices):
+        ONE = "1", _("1")
+        TWO_TO_TEN = "2-10", _("2-10")
+        ELEVEN_TO_FIFTY = "11-50", _("11-50")
+        FIFTY_ONE_TO_TWO_HUNDRED = "51-200", _("51-200")
+        OVER_TWO_HUNDRED = "200+", _("200+")
+
+    class Role(models.TextChoices):
+        SECURITY = "security", _("Security")
+        DEVOPS_PLATFORM = "devops_platform", _("DevOps / Platform")
+        DEVELOPER = "developer", _("Developer")
+        COMPLIANCE_GRC = "compliance_grc", _("Compliance / GRC")
+        OTHER = "other", _("Other")
+
+    class Seniority(models.TextChoices):
+        PRACTITIONER = "practitioner", _("Practitioner / IC")
+        LEAD = "lead", _("Team lead / Manager")
+        DIRECTOR = "director", _("Director / Head of")
+        EXECUTIVE = "executive", _("VP / C-level")
+        FOUNDER = "founder", _("Founder / Owner")
+
+    id = models.UUIDField(primary_key=True, default=uuid4, editable=False)
+    inserted_at = models.DateTimeField(auto_now_add=True, editable=False)
+    declared_cloud_accounts = models.CharField(
+        max_length=16, choices=CloudAccountsBucket.choices, null=True, blank=True
+    )
+    declared_role = models.CharField(
+        max_length=32, choices=Role.choices, null=True, blank=True
+    )
+    declared_seniority = models.CharField(
+        max_length=32, choices=Seniority.choices, null=True, blank=True
+    )
+    skipped = models.BooleanField(default=False)
+    submitted_by = models.ForeignKey(
+        settings.AUTH_USER_MODEL,
+        on_delete=models.SET_NULL,
+        null=True,
+        blank=True,
+        related_name="tenant_onboarding_profiles",
+        related_query_name="tenant_onboarding_profile",
+    )
+
+    class Meta(RowLevelSecurityProtectedModel.Meta):
+        db_table = "tenant_onboarding_profiles"
+        constraints = [
+            models.UniqueConstraint(
+                fields=["tenant_id"],
+                name="unique_tenant_onboarding_profile",
+            ),
+            RowLevelSecurityConstraint(
+                field="tenant_id",
+                name="rls_on_%(class)s",
+                statements=["SELECT", "INSERT", "UPDATE", "DELETE"],
+            ),
+        ]
+
+    class JSONAPIMeta:
+        resource_name = "onboarding-profiles"
+
+    def __str__(self) -> str:
+        return f"onboarding-profile:{self.tenant_id}"
diff --git a/api/src/backend/api/tests/test_onboarding_profile.py b/api/src/backend/api/tests/test_onboarding_profile.py
new file mode 100644
index 0000000000..ee1d37417d
--- /dev/null
+++ b/api/src/backend/api/tests/test_onboarding_profile.py
@@ -0,0 +1,174 @@
+import json
+
+import pytest
+from api.models import TenantOnboardingProfile
+from conftest import API_JSON_CONTENT_TYPE
+from django.urls import reverse
+from rest_framework import status
+
+ANSWERS = {
+    "declared_cloud_accounts": "11-50",
+    "declared_role": "security",
+    "declared_seniority": "director",
+}
+
+
+def _submit(client, attributes):
+    payload = {"data": {"type": "onboarding-profiles", "attributes": attributes}}
+    return client.post(
+        reverse("onboarding-profile-list"),
+        data=json.dumps(payload),
+        content_type=API_JSON_CONTENT_TYPE,
+    )
+
+
+def _error_pointers(response):
+    return [error["source"]["pointer"] for error in response.json()["errors"]]
+
+
+@pytest.mark.django_db
+class TestTenantOnboardingProfileViewSet:
+    def test_declares_the_profile_once(
+        self, authenticated_client, tenants_fixture, create_test_user
+    ):
+        response = _submit(authenticated_client, ANSWERS)
+
+        assert response.status_code == status.HTTP_201_CREATED
+        attributes = response.json()["data"]["attributes"]
+        assert attributes["declared_cloud_accounts"] == "11-50"
+        assert attributes["declared_role"] == "security"
+        assert attributes["declared_seniority"] == "director"
+        assert attributes["skipped"] is False
+        profile = TenantOnboardingProfile.objects.get(tenant_id=tenants_fixture[0].id)
+        assert profile.submitted_by_id == create_test_user.id
+
+    def test_records_a_skip_as_a_fact(self, authenticated_client, tenants_fixture):
+        response = _submit(authenticated_client, {"skipped": True})
+
+        assert response.status_code == status.HTTP_201_CREATED
+        attributes = response.json()["data"]["attributes"]
+        assert attributes["skipped"] is True
+        assert attributes["declared_role"] is None
+        assert attributes["declared_seniority"] is None
+        assert TenantOnboardingProfile.objects.filter(
+            tenant_id=tenants_fixture[0].id, skipped=True
+        ).exists()
+
+    def test_second_submission_keeps_the_first_answer(self, authenticated_client):
+        first = _submit(authenticated_client, ANSWERS)
+        second = _submit(
+            authenticated_client, {**ANSWERS, "declared_role": "developer"}
+        )
+
+        assert first.status_code == status.HTTP_201_CREATED
+        assert second.status_code == status.HTTP_200_OK
+        assert second.json()["data"]["id"] == first.json()["data"]["id"]
+        assert second.json()["data"]["attributes"]["declared_role"] == "security"
+        assert TenantOnboardingProfile.objects.count() == 1
+
+    def test_a_skip_cannot_replace_an_answer(self, authenticated_client):
+        _submit(authenticated_client, ANSWERS)
+
+        response = _submit(authenticated_client, {"skipped": True})
+
+        assert response.status_code == status.HTTP_200_OK
+        assert response.json()["data"]["attributes"]["skipped"] is False
+
+    @pytest.mark.parametrize(
+        "attributes, pointer",
+        [
+            (
+                {"declared_cloud_accounts": "1"},
+                "/data/attributes/declared_role",
+            ),
+            (
+                # Discipline without the ladder is still an incomplete profile.
+                {k: v for k, v in ANSWERS.items() if k != "declared_seniority"},
+                "/data/attributes/declared_seniority",
+            ),
+            ({}, "/data/attributes/declared_cloud_accounts"),
+            (
+                {"skipped": True, "declared_role": "developer"},
+                "/data/attributes/declared_role",
+            ),
+            (
+                {**ANSWERS, "declared_cloud_accounts": "1000"},
+                "/data/attributes/declared_cloud_accounts",
+            ),
+            (
+                {**ANSWERS, "declared_role": "ceo"},
+                "/data/attributes/declared_role",
+            ),
+            (
+                # "management" moved out of the discipline list into the ladder.
+                {**ANSWERS, "declared_role": "management"},
+                "/data/attributes/declared_role",
+            ),
+            (
+                {**ANSWERS, "declared_seniority": "intern"},
+                "/data/attributes/declared_seniority",
+            ),
+            (
+                {"skipped": True, "declared_seniority": "founder"},
+                "/data/attributes/declared_seniority",
+            ),
+            ({**ANSWERS, "company": "Acme"}, "/data"),
+        ],
+    )
+    def test_rejects_incomplete_or_unknown_answers(
+        self, authenticated_client, attributes, pointer
+    ):
+        response = _submit(authenticated_client, attributes)
+
+        assert response.status_code == status.HTTP_400_BAD_REQUEST
+        assert pointer in _error_pointers(response)
+        assert not TenantOnboardingProfile.objects.exists()
+
+    def test_lists_only_the_tenant_profile(
+        self,
+        authenticated_client,
+        authenticated_client_for_tenant_factory,
+        create_test_user,
+        tenants_fixture,
+    ):
+        other_client = authenticated_client_for_tenant_factory(
+            create_test_user, tenants_fixture[1]
+        )
+        _submit(authenticated_client, ANSWERS)
+        _submit(other_client, {"skipped": True})
+
+        own = authenticated_client.get(reverse("onboarding-profile-list"))
+        other = other_client.get(reverse("onboarding-profile-list"))
+
+        assert own.status_code == status.HTTP_200_OK
+        assert [entry["attributes"]["skipped"] for entry in own.json()["data"]] == [
+            False
+        ]
+        assert [entry["attributes"]["skipped"] for entry in other.json()["data"]] == [
+            True
+        ]
+
+    def test_empty_list_before_the_step_runs(self, authenticated_client):
+        response = authenticated_client.get(reverse("onboarding-profile-list"))
+
+        assert response.status_code == status.HTTP_200_OK
+        assert response.json()["data"] == []
+
+    def test_members_without_permissions_can_answer(
+        self, authenticated_client_no_permissions_rbac
+    ):
+        response = _submit(authenticated_client_no_permissions_rbac, ANSWERS)
+
+        assert response.status_code == status.HTTP_201_CREATED
+
+    def test_detail_route_is_refused(self, authenticated_client):
+        # One row per tenant, so the collection is the only meaningful read;
+        # the detail route must refuse rather than serve a second shape.
+        _submit(authenticated_client, ANSWERS)
+        profile = TenantOnboardingProfile.objects.get()
+
+        response = authenticated_client.get(
+            reverse("onboarding-profile-detail", kwargs={"pk": profile.id})
+        )
+
+        assert response.status_code == status.HTTP_405_METHOD_NOT_ALLOWED
diff --git a/api/src/backend/api/v1/serializers.py b/api/src/backend/api/v1/serializers.py
index 5e1f2fa6d8..663f199339 100644
--- a/api/src/backend/api/v1/serializers.py
+++ b/api/src/backend/api/v1/serializers.py
@@ -35,6 +35,7 @@ from api.models import (
     StatusChoices,
     Task,
     TenantAPIKey,
+    TenantOnboardingProfile,
     ThreatScoreSnapshot,
     User,
     UserRoleRelationship,
@@ -4525,3 +4526,76 @@ class FindingGroupResourceSerializer(BaseSerializerV1):
             "uid": obj.get("provider_uid", ""),
             "alias": obj.get("provider_alias", ""),
         }
+
+
+# Onboarding profile
+
+DECLARED_PROFILE_FIELDS = (
+    "declared_cloud_accounts",
+    "declared_role",
+    "declared_seniority",
+)
+
+
+class TenantOnboardingProfileSerializer(RLSSerializer):
+    """Read serializer for the tenant's declared onboarding profile."""
+
+    class Meta:
+        model = TenantOnboardingProfile
+        fields = [
+            "id",
+            "inserted_at",
+            *DECLARED_PROFILE_FIELDS,
+            "skipped",
+        ]
+        read_only_fields = fields
+
+
+class TenantOnboardingProfileCreateSerializer(RLSSerializer, BaseWriteSerializer):
+    """Record the profile step's outcome.
+
+    Either every answer is given, or ``skipped`` is true and none is: a skip
+    is recorded as such so "skipped" can be told from "never shown".
+    """
+
+    declared_cloud_accounts = serializers.ChoiceField(
+        choices=TenantOnboardingProfile.CloudAccountsBucket.choices,
+        required=False,
+        allow_null=True,
+    )
+    declared_role = serializers.ChoiceField(
+        choices=TenantOnboardingProfile.Role.choices,
+        required=False,
+        allow_null=True,
+    )
+    declared_seniority = serializers.ChoiceField(
+        choices=TenantOnboardingProfile.Seniority.choices,
+        required=False,
+        allow_null=True,
+    )
+    skipped = serializers.BooleanField(required=False, default=False)
+
+    class Meta:
+        model = TenantOnboardingProfile
+        fields = ["id", *DECLARED_PROFILE_FIELDS, "skipped"]
+        extra_kwargs = {"id": {"read_only": True}}
+
+    class JSONAPIMeta:
+        resource_name = "onboarding-profiles"
+
+    def validate(self, data):
+        data = super().validate(data)
+        answers = {field: data.get(field) for field in DECLARED_PROFILE_FIELDS}
+        if data.get("skipped"):
+            answered = [field for field, value in answers.items() if value]
+            if answered:
+                raise ValidationError(
+                    {answered[0]: "A skipped profile step carries no answers."}
+                )
+            return data
+        missing = [field for field, value in answers.items() if not value]
+        if missing:
+            raise ValidationError(
+                {missing[0]: "This field is required unless the step was skipped."}
+            )
+        return data
diff --git a/api/src/backend/api/v1/urls.py b/api/src/backend/api/v1/urls.py
index a558fa6387..0e50962cdb 100644
--- a/api/src/backend/api/v1/urls.py
+++ b/api/src/backend/api/v1/urls.py
@@ -39,6 +39,7 @@ from api.v1.views import (
     TenantApiKeyViewSet,
     TenantFinishACSView,
     TenantMembersViewSet,
+    TenantOnboardingProfileViewSet,
     TenantViewSet,
     UserRoleRelationshipView,
     UserViewSet,
@@ -107,6 +108,11 @@ router.register(
     basename="lighthouse-models",
 )
 router.register(r"mute-rules", MuteRuleViewSet, basename="mute-rule")
+router.register(
+    r"onboarding-profiles",
+    TenantOnboardingProfileViewSet,
+    basename="onboarding-profile",
+)
 
 tenants_router = routers.NestedSimpleRouter(router, r"tenants", lookup="tenant")
 tenants_router.register(
diff --git a/api/src/backend/api/v1/views.py b/api/src/backend/api/v1/views.py
index 9df5be424c..df89a69523 100644
--- a/api/src/backend/api/v1/views.py
+++ b/api/src/backend/api/v1/views.py
@@ -75,6 +75,7 @@ from api.filters import (
     TaskFilter,
     TenantApiKeyFilter,
     TenantFilter,
+    TenantOnboardingProfileFilter,
     ThreatScoreSnapshotFilter,
     UserFilter,
 )
@@ -119,6 +120,7 @@ from api.models import (
     Task,
     TenantAPIKey,
     TenantComplianceSummary,
+    TenantOnboardingProfile,
     ThreatScoreSnapshot,
     User,
     UserRoleRelationship,
@@ -231,6 +233,8 @@ from api.v1.serializers import (
     TenantApiKeyCreateSerializer,
     TenantApiKeySerializer,
     TenantApiKeyUpdateSerializer,
+    TenantOnboardingProfileCreateSerializer,
+    TenantOnboardingProfileSerializer,
     TenantSerializer,
     ThreatScoreSnapshotSerializer,
     TokenRefreshSerializer,
@@ -257,7 +261,7 @@ from django.conf import settings as django_settings
 from django.contrib.postgres.aggregates import ArrayAgg, BoolAnd, StringAgg
 from django.contrib.postgres.search import SearchQuery
 from django.core.exceptions import ValidationError as DjangoValidationError
-from django.db import transaction
+from django.db import IntegrityError, transaction
 from django.db.models import (
     BooleanField,
     Case,
@@ -293,6 +297,7 @@ from django_celery_beat.models import PeriodicTask
 from drf_spectacular.settings import spectacular_settings
 from drf_spectacular.types import OpenApiTypes
 from drf_spectacular.utils import (
+    OpenApiExample,
     OpenApiParameter,
     OpenApiResponse,
     extend_schema,
@@ -8935,3 +8940,117 @@ class FindingGroupViewSet(JsonApiFilterMixin, BaseRLSViewSet):
         return self._paginated_resource_response(
             request, filtered_queryset, resource_ids, request.tenant_id
         )
+
+
+# Onboarding profile
+@extend_schema_view(
+    list=extend_schema(
+        tags=["Onboarding"],
+        summary="Read the tenant's onboarding profile",
+        description=(
+            "The answers the tenant gave in the onboarding profile step, or "
+            "the record that the step was skipped. At most one entry per "
+            "tenant; an empty list means the step was never completed."
+        ),
+    ),
+    create=extend_schema(
+        tags=["Onboarding"],
+        summary="Record the tenant's onboarding profile",
+        description=(
+            "Store the declared cloud-account count, role and seniority, or "
+            "mark the step as skipped. Idempotent: once a "
+            "profile exists the endpoint answers 200 with the stored one and "
+            "never overwrites it, so the first answer, given before the "
+            "product could bias it, is the one that stays."
+        ),
+        request=TenantOnboardingProfileCreateSerializer,
+        responses={
+            200: TenantOnboardingProfileSerializer,
+            201: TenantOnboardingProfileSerializer,
+        },
+        examples=[
+            OpenApiExample(
+                "DeclareProfile",
+                request_only=True,
+                media_type="application/vnd.api+json",
+                value={
+                    "data": {
+                        "type": "onboarding-profiles",
+                        "attributes": {
+                            "declared_cloud_accounts": "11-50",
+                            "declared_role": "security",
+                            "declared_seniority": "director",
+                        },
+                    }
+                },
+            ),
+            OpenApiExample(
+                "SkipProfile",
+                request_only=True,
+                media_type="application/vnd.api+json",
+                value={
+                    "data": {
+                        "type": "onboarding-profiles",
+                        "attributes": {"skipped": True},
+                    }
+                },
+            ),
+        ],
+    ),
+    retrieve=extend_schema(exclude=True),
+)
+class TenantOnboardingProfileViewSet(BaseRLSViewSet):
+    """The tenant's declared onboarding profile: one row, written once."""
+
+    queryset = TenantOnboardingProfile.objects.all()
+    serializer_class = TenantOnboardingProfileSerializer
+    filterset_class = TenantOnboardingProfileFilter
+    http_method_names = ["get", "post"]
+    ordering = ["-inserted_at"]
+    ordering_fields = ["inserted_at"]
+    # Any member may answer: the step runs at first login, before roles are
+    # curated, and the answer describes the tenant rather than the user.
+    required_permissions = []
+
+    def set_required_permissions(self):
+        self.required_permissions = []
+
+    def get_queryset(self):
+        return TenantOnboardingProfile.objects.filter(tenant_id=self.request.tenant_id)
+
+    def get_serializer_class(self):
+        if self.action == "create":
+            return TenantOnboardingProfileCreateSerializer
+        return super().get_serializer_class()
+
+    def retrieve(self, request, *args, **kwargs):
+        # The resource is a single row per tenant, so the collection is the
+        # only meaningful read. `extend_schema(exclude=True)` hides the detail
+        # route from the docs; this is what actually closes it.
+        raise MethodNotAllowed(method="GET")
+
+    def _stored_response(self, profile, http_status):
+        return Response(
+            TenantOnboardingProfileSerializer(
+                profile, context=self.get_serializer_context()
+            ).data,
+            status=http_status,
+        )
+
+    def create(self, request, *args, **kwargs):
+        existing = self.get_queryset().first()
+        if existing is not None:
+            return self._stored_response(existing, status.HTTP_200_OK)
+
+        serializer = self.get_serializer(data=request.data)
+        serializer.is_valid(raise_exception=True)
+        try:
+            with transaction.atomic(using=self.db_alias):
+                profile = serializer.save(submitted_by=request.user)
+        except IntegrityError:
+            # Two first-login tabs raced on the unique tenant row; the answer
+            # that landed first is the one that stays.
+            return self._stored_response(
+                self.get_queryset().first(), status.HTTP_200_OK
+            )
+        return self._stored_response(profile, status.HTTP_201_CREATED)
diff --git a/ui/actions/onboarding/profile.test.ts b/ui/actions/onboarding/profile.test.ts
new file mode 100644
index 0000000000..0786ec18f1
--- /dev/null
+++ b/ui/actions/onboarding/profile.test.ts
@@ -0,0 +1,200 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const {
+  fetchMock,
+  getAuthHeadersMock,
+  handleApiErrorMock,
+  handleApiResponseMock,
+} = vi.hoisted(() => ({
+  fetchMock: vi.fn(),
+  getAuthHeadersMock: vi.fn(),
+  handleApiErrorMock: vi.fn(),
+  handleApiResponseMock: vi.fn(),
+}));
+
+vi.mock("next/cache", () => ({ revalidatePath: vi.fn() }));
+vi.mock("next/navigation", () => ({ redirect: vi.fn() }));
+
+vi.mock("@/lib", () => ({
+  apiBaseUrl: "https://api.example.com/api/v1",
+  getAuthHeaders: getAuthHeadersMock,
+}));
+
+vi.mock("@/lib/server-actions-helper", () => ({
+  handleApiError: handleApiErrorMock,
+  handleApiResponse: handleApiResponseMock,
+}));
+
+import {
+  isOnboardingProfileRecorded,
+  skipOnboardingProfile,
+  submitOnboardingProfile,
+} from "./profile";
+
+const ANSWERS = {
+  declared_cloud_accounts: "11-50",
+  declared_role: "security",
+  declared_seniority: "director",
+} as const;
+
+describe("onboarding profile actions", () => {
+  beforeEach(() => {
+    vi.stubGlobal("fetch", fetchMock);
+    fetchMock.mockReset();
+    getAuthHeadersMock.mockReset().mockResolvedValue({});
+    handleApiErrorMock.mockReset();
+    handleApiResponseMock.mockReset().mockResolvedValue({ data: { id: "p1" } });
+  });
+
+  it("reports a stored profile and sends the declared buckets", async () => {
+    // Given
+    fetchMock.mockResolvedValue(new Response("{}", { status: 201 }));
+
+    // When
+    const result = await submitOnboardingProfile(ANSWERS);
+
+    // Then
+    expect(result).toEqual({ stored: true });
+    const [url, init] = fetchMock.mock.calls[0];
+    expect(url).toBe("https://api.example.com/api/v1/onboarding-profiles");
+    expect(JSON.parse(init.body).data).toEqual({
+      type: "onboarding-profiles",
+      attributes: ANSWERS,
+    });
+  });
+
+  it("records a skip as its own payload", async () => {
+    // Given
+    fetchMock.mockResolvedValue(new Response("{}", { status: 201 }));
+
+    // When
+    const result = await skipOnboardingProfile();
+
+    // Then
+    expect(result).toEqual({ stored: true });
+    expect(JSON.parse(fetchMock.mock.calls[0][1].body).data.attributes).toEqual(
+      {
+        skipped: true,
+      },
+    );
+  });
+
+  it("treats a transport failure as not stored", async () => {
+    // Given — the request never reaches the API.
+    fetchMock.mockRejectedValue(new Error("network down"));
+
+    // When
+    const result = await submitOnboardingProfile(ANSWERS);
+
+    // Then
+    expect(result.stored).toBe(false);
+    expect(result.error).toBeTruthy();
+    expect(handleApiErrorMock).toHaveBeenCalledTimes(1);
+  });
+
+  it("treats a rejection without an errors array as not stored", async () => {
+    // Given — e.g. a 403, which `handleApiResponse` returns as a bare error.
+    fetchMock.mockResolvedValue(new Response("{}", { status: 403 }));
+    handleApiResponseMock.mockResolvedValue({
+      error: "Forbidden",
+      status: 403,
+    });
+
+    // When
+    const result = await submitOnboardingProfile(ANSWERS);
+
+    // Then
+    expect(result).toEqual({ stored: false, error: "Forbidden" });
+  });
+
+  it("surfaces the API's own message when the payload carries one", async () => {
+    // Given
+    fetchMock.mockResolvedValue(new Response("{}", { status: 400 }));
+    handleApiResponseMock.mockResolvedValue({
+      error: "Bad request",
+      errors: [{ detail: "This field is required." }],
+    });
+
+    // When
+    const result = await submitOnboardingProfile(ANSWERS);
+
+    // Then
+    expect(result).toEqual({
+      stored: false,
+      error: "This field is required.",
+    });
+  });
+
+  it("treats a thrown server error as not stored", async () => {
+    // Given — `handleApiResponse` throws on 5xx.
+    fetchMock.mockResolvedValue(new Response("{}", { status: 500 }));
+    handleApiResponseMock.mockRejectedValue(new Error("server error"));
+
+    // When
+    const result = await skipOnboardingProfile();
+
+    // Then
+    expect(result.stored).toBe(false);
+    expect(handleApiErrorMock).toHaveBeenCalledTimes(1);
+  });
+
+  it.each([
+    ["a submission", () => submitOnboardingProfile(ANSWERS)],
+    ["a skip", () => skipOnboardingProfile()],
+  ])(
+    "reports %s as unstored when the session cannot be read",
+    async (_, run) => {
+      // Given — `auth()` rejects, e.g. a session this deployment cannot decode.
+      getAuthHeadersMock.mockRejectedValue(new Error("session unreadable"));
+
+      // When
+      const result = await run();
+
+      // Then — a result, never a throw: the step stays eligible next login.
+      expect(result).toEqual({ stored: false, error: expect.any(String) });
+      expect(fetchMock).not.toHaveBeenCalled();
+      expect(handleApiErrorMock).toHaveBeenCalledTimes(1);
+    },
+  );
+
+  it("reads an unreadable session as an unknown profile state", async () => {
+    // Given — this runs in the root layout, so a throw would abort its render.
+    getAuthHeadersMock.mockRejectedValue(new Error("session unreadable"));
+
+    // When / Then — `undefined` makes the gate fail open.
+    await expect(isOnboardingProfileRecorded()).resolves.toBeUndefined();
+    expect(fetchMock).not.toHaveBeenCalled();
+  });
+
+  it("refuses answers outside the declared vocabulary", async () => {
+    // When / Then — validation happens before any request.
+    await expect(
+      submitOnboardingProfile({
+        ...ANSWERS,
+        declared_role: "ceo",
+      } as unknown as typeof ANSWERS),
+    ).rejects.toThrow();
+    expect(fetchMock).not.toHaveBeenCalled();
+  });
+
+  it.each([
+    ["an empty list", { data: [] }, false],
+    ["a stored row", { data: [{ id: "p1" }] }, true],
+  ])("reads %s as recorded=%s", async (_, payload, expected) => {
+    // Given
+    fetchMock.mockResolvedValue(
+      new Response(JSON.stringify(payload), { status: 200 }),
+    );
+
+    // Then
+    expect(await isOnboardingProfileRecorded()).toBe(expected);
+  });
+
+  it("returns undefined when the read fails, so the gate fails open", async () => {
+    // Given
+    fetchMock.mockResolvedValue(new Response("{}", { status: 500 }));
+
+    // Then
+    expect(await isOnboardingProfileRecorded()).toBeUndefined();
+  });
+});
diff --git a/ui/actions/onboarding/profile.ts b/ui/actions/onboarding/profile.ts
new file mode 100644
index 0000000000..e9319378d2
--- /dev/null
+++ b/ui/actions/onboarding/profile.ts
@@ -0,0 +1,119 @@
+"use server";
+
+import { z } from "zod";
+
+import { apiBaseUrl, getAuthHeaders } from "@/lib";
+import { handleApiError, handleApiResponse } from "@/lib/server-actions-helper";
+import {
+  DECLARED_CLOUD_ACCOUNTS,
+  DECLARED_ROLE,
+  DECLARED_SENIORITY,
+  type OnboardingProfileAnswers,
+} from "@/types/onboarding-profile";
+
+const ONBOARDING_PROFILES_PATH = "/onboarding-profiles";
+const RESOURCE_TYPE = "onboarding-profiles";
+
+// Explicit outcome instead of the raw API payload: the caller records the
+// step as resolved only when the row was really written, and a transport
+// failure is as unsuccessful as a rejected payload.
+export interface OnboardingProfileResult {
+  stored: boolean;
+  error?: string;
+}
+
+const onboardingProfileAnswersSchema = z.object({
+  declared_cloud_accounts: z.enum(
+    Object.values(DECLARED_CLOUD_ACCOUNTS) as [string, ...string[]],
+  ),
+  declared_role: z.enum(Object.values(DECLARED_ROLE) as [string, ...string[]]),
+  declared_seniority: z.enum(
+    Object.values(DECLARED_SENIORITY) as [string, ...string[]],
+  ),
+});
+
+const GENERIC_FAILURE = "The onboarding profile could not be saved.";
+
+const failureMessage = (payload: unknown): string | undefined => {
+  if (typeof payload !== "object" || payload === null) return undefined;
+  const result = payload as { error?: unknown; errors?: unknown };
+  if (Array.isArray(result.errors)) {
+    const detail = (result.errors[0] as { detail?: unknown })?.detail;
+    if (typeof detail === "string") return detail;
+  }
+  return typeof result.error === "string" ? result.error : undefined;
+};
+
+const postOnboardingProfile = async (
+  attributes: Record<string, unknown>,
+): Promise<OnboardingProfileResult> => {
+  const body = JSON.stringify({
+    data: { type: RESOURCE_TYPE, attributes },
+  });
+
+  let response: Response;
+  try {
+    // Inside the boundary: `getAuthHeaders` awaits `auth()`, which rejects on
+    // an undecodable session. The contract above promises a result, not a
+    // throw, so a dead session must read as "not stored" and leave the step
+    // eligible for the next login.
+    const headers = await getAuthHeaders({ contentType: true });
+    response = await fetch(`${apiBaseUrl}${ONBOARDING_PROFILES_PATH}`, {
+      method: "POST",
+      headers,
+      body,
+    });
+  } catch (error) {
+    handleApiError(error);
+    return { stored: false, error: GENERIC_FAILURE };
+  }
+
+  // `handleApiResponse` reports to Sentry and throws on server errors; the
+  // status is what decides the outcome, since a rejection can come back
+  // without an `errors` array.
+  try {
+    const payload = await handleApiResponse(response);
+    if (!response.ok) {
+      return {
+        stored: false,
+        error: failureMessage(payload) ?? GENERIC_FAILURE,
+      };
+    }
+    return { stored: true };
+  } catch (error) {
+    handleApiError(error);
+    return { stored: false, error: GENERIC_FAILURE };
+  }
+};
+
+// Records the three declared buckets. The API keeps the first answer per
+// tenant: a repeated submission answers 200 with the stored profile.
+export const submitOnboardingProfile = async (
+  answers: OnboardingProfileAnswers,
+): Promise<OnboardingProfileResult> =>
+  postOnboardingProfile(onboardingProfileAnswersSchema.parse(answers));
+
+// A skip is a fact worth storing: it separates "declined" from "never
+// shown" in the funnel.
+export const skipOnboardingProfile =
+  async (): Promise<OnboardingProfileResult> =>
+    postOnboardingProfile({ skipped: true });
+
+// Whether the tenant already went through the step on any device. `undefined`
+// means the read failed; the gate fails open and does not force the modal.
+export const isOnboardingProfileRecorded = async (): Promise<
+  boolean | undefined
+> => {
+  const url = new URL(`${apiBaseUrl}${ONBOARDING_PROFILES_PATH}`);
+  url.searchParams.set("page[size]", "1");
+
+  try {
+    const headers = await getAuthHeaders({ contentType: false });
+    const response = await fetch(url.toString(), { headers });
+    if (!response.ok) return undefined;
+    const payload = await response.json();
+    return Array.isArray(payload?.data) ? payload.data.length > 0 : undefined;
+  } catch {
+    return undefined;
+  }
+};
diff --git a/ui/app/(prowler)/layout.tsx b/ui/app/(prowler)/layout.tsx
index a753c99c1a..623cc416f6 100644
--- a/ui/app/(prowler)/layout.tsx
+++ b/ui/app/(prowler)/layout.tsx
@@ -4,15 +4,18 @@ import * as Sentry from "@sentry/nextjs";
 import { Metadata, Viewport } from "next";
 import { ReactNode, Suspense } from "react";
 
+import { isOnboardingProfileRecorded } from "@/actions/onboarding/profile";
 import { getProviders } from "@/actions/providers";
 import { getScansByState } from "@/actions/scans/scans";
 import { auth } from "@/auth.config";
 import MainLayout from "@/components/layout/main-layout/main-layout";
 import {
   OnboardingCheckpointWatcher,
-  OnboardingGate,
   OnboardingSequenceBanner,
 } from "@/components/onboarding";
+// Imported directly: it pulls the server actions, which the shared barrel
+// stays free of so tests can import the barrel without mocking them.
+import { OnboardingProfileGate } from "@/components/onboarding/onboarding-profile-gate";
 import { RuntimePublicConfig } from "@/components/runtime-config/runtime-public-config";
 import { NavigationProgress } from "@/components/shadcn/navigation-progress";
 import { Toaster } from "@/components/shadcn/toast";
@@ -71,6 +74,11 @@ export default async function RootLayout({
   let hasCompletedScan = true;
   // Tri-state: true = has providers, false = zero providers, undefined = fetch failed (gate fails open).
   let hasProviders: boolean | undefined = false;
+  // Same tri-state for the onboarding profile step; only new tenants pay the read.
+  let profileRecorded: boolean | undefined = true;
+  // Scopes the step's local marker, so answering for one tenant does not
+  // silence it for another.
+  let tenantId: string | null = null;
 
   if (cloudEnabled) {
     const [providersData, scansByState] = await Promise.all([
@@ -86,6 +94,14 @@ export default async function RootLayout({
     hasProviders = Array.isArray(providersData?.data)
       ? providersData.data.length > 0
       : undefined;
+    if (hasProviders === false) {
+      const [recorded, session] = await Promise.all([
+        isOnboardingProfileRecorded(),
+        auth(),
+      ]);
+      profileRecorded = recorded;
+      tenantId = session?.tenantId ?? null;
+    }
   }
 
   const registryEligible =
@@ -116,7 +132,12 @@ export default async function RootLayout({
           />
           {cloudEnabled && (
             <>
-              <OnboardingGate hasProviders={hasProviders} />
+              {/* Profile step first, then the tour gate it wraps. */}
+              <OnboardingProfileGate
+                hasProviders={hasProviders}
+                profileRecorded={profileRecorded}
+                tenantId={tenantId}
+              />
               {/* Single mount point so the watcher survives post-connect navigation. */}
               <OnboardingCheckpointWatcher />
               {/* Persistent banner shown only while a guided sequence is active. */}
diff --git a/ui/changelog.d/onboarding-profile.added.md b/ui/changelog.d/onboarding-profile.added.md
new file mode 100644
index 0000000000..07f156517e
--- /dev/null
+++ b/ui/changelog.d/onboarding-profile.added.md
@@ -0,0 +1 @@
+Onboarding profile step at a new tenant's first login asking for cloud accounts, area of work and position (skippable), shown before the "Add your first provider" gate
diff --git a/ui/components/onboarding/__tests__/onboarding-profile-gate.test.tsx b/ui/components/onboarding/__tests__/onboarding-profile-gate.test.tsx
new file mode 100644
index 0000000000..8adc2c7f24
--- /dev/null
+++ b/ui/components/onboarding/__tests__/onboarding-profile-gate.test.tsx
@@ -0,0 +1,267 @@
+import { render, screen, waitFor } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+import {
+  ONBOARDING_PROFILE_STEP_EVENT,
+  type OnboardingProfileStepDetail,
+} from "@/lib/onboarding/onboarding-events";
+import { onboardingProfileMarkerKey } from "@/lib/onboarding/profile-marker";
+
+import { OnboardingProfileGate } from "../onboarding-profile-gate";
+
+const { pathnameMock, submitMock, skipMock } = vi.hoisted(() => ({
+  pathnameMock: vi.fn(),
+  submitMock: vi.fn(),
+  skipMock: vi.fn(),
+}));
+
+vi.mock("next/navigation", () => ({
+  usePathname: () => pathnameMock(),
+}));
+
+vi.mock("@/actions/onboarding/profile", () => ({
+  submitOnboardingProfile: submitMock,
+  skipOnboardingProfile: skipMock,
+}));
+
+vi.mock("../onboarding-gate", () => ({
+  OnboardingGate: ({ hasProviders }: { hasProviders?: boolean }) => (
+    <div data-testid="tour-gate" data-has-providers={String(hasProviders)} />
+  ),
+}));
+
+const TENANT_ID = "3f6c2f1e-7b0a-4d5c-9a21-0c9f4f2a7b10";
+const OTHER_TENANT_ID = "8a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d";
+const MARKER_KEY = onboardingProfileMarkerKey(TENANT_ID) as string;
+
+const ANSWERS = {
+  declared_cloud_accounts: "11-50",
+  declared_role: "security",
+  declared_seniority: "director",
+} as const;
+
+const answerEverything = async (user: ReturnType<typeof userEvent.setup>) => {
+  await user.click(screen.getByRole("radio", { name: "11-50" }));
+  await user.click(screen.getByRole("radio", { name: "Security" }));
+  await user.click(screen.getByRole("radio", { name: "Director / Head of" }));
+  await user.click(screen.getByRole("button", { name: "Continue" }));
+};
+
+describe("OnboardingProfileGate", () => {
+  const outcomes: OnboardingProfileStepDetail[] = [];
+  const recordOutcome = (event: Event) => {
+    outcomes.push((event as CustomEvent<OnboardingProfileStepDetail>).detail);
+  };
+
+  beforeEach(() => {
+    window.localStorage.clear();
+    outcomes.length = 0;
+    window.addEventListener(ONBOARDING_PROFILE_STEP_EVENT, recordOutcome);
+    pathnameMock.mockReturnValue("/");
+    submitMock.mockReset().mockResolvedValue({ stored: true });
+    skipMock.mockReset().mockResolvedValue({ stored: true });
+  });
+
+  afterEach(() => {
+    window.removeEventListener(ONBOARDING_PROFILE_STEP_EVENT, recordOutcome);
+  });
+
+  it("asks the profile before the tour gate for a provably new tenant", async () => {
+    // When
+    render(
+      <OnboardingProfileGate
+        hasProviders={false}
+        profileRecorded={false}
+        tenantId={TENANT_ID}
+      />,
+    );
+
+    // Then
+    expect(
+      await screen.findByRole("button", { name: "Continue" }),
+    ).toBeInTheDocument();
+    expect(screen.queryByTestId("tour-gate")).not.toBeInTheDocument();
+    expect(outcomes).toEqual([{ outcome: "shown" }]);
+  });
+
+  it("stores the answers, announces them and hands over to the tour gate", async () => {
+    // Given
+    const user = userEvent.setup();
+    render(
+      <OnboardingProfileGate
+        hasProviders={false}
+        profileRecorded={false}
+        tenantId={TENANT_ID}
+      />,
+    );
+    await screen.findByRole("button", { name: "Continue" });
+
+    // When
+    await answerEverything(user);
+
+    // Then
+    await waitFor(() =>
+      expect(screen.getByTestId("tour-gate")).toBeInTheDocument(),
+    );
+    expect(submitMock).toHaveBeenCalledWith(ANSWERS);
+    expect(outcomes).toEqual([
+      { outcome: "shown" },
+      { outcome: "submitted", answers: ANSWERS },
+    ]);
+    expect(window.localStorage.getItem(MARKER_KEY)).toBe("true");
+    expect(screen.getByTestId("tour-gate")).toHaveAttribute(
+      "data-has-providers",
+      "false",
+    );
+  });
+
+  it("records a skip as an announced outcome and as a stored fact", async () => {
+    // Given
+    const user = userEvent.setup();
+    render(
+      <OnboardingProfileGate
+        hasProviders={false}
+        profileRecorded={false}
+        tenantId={TENANT_ID}
+      />,
+    );
+    await screen.findByRole("button", { name: "Skip" });
+
+    // When
+    await user.click(screen.getByRole("button", { name: "Skip" }));
+
+    // Then
+    expect(outcomes.at(-1)).toEqual({ outcome: "skipped" });
+    expect(skipMock).toHaveBeenCalledTimes(1);
+    expect(window.localStorage.getItem(MARKER_KEY)).toBe("true");
+    expect(screen.getByTestId("tour-gate")).toBeInTheDocument();
+  });
+
+  it("leaves no marker when the API rejects the answers, so the step returns next login", async () => {
+    // Given
+    const user = userEvent.setup();
+    submitMock.mockResolvedValue({ stored: false, error: "boom" });
+    render(
+      <OnboardingProfileGate
+        hasProviders={false}
+        profileRecorded={false}
+        tenantId={TENANT_ID}
+      />,
+    );
+    await screen.findByRole("button", { name: "Continue" });
+
+    // When
+    await answerEverything(user);
+
+    // Then — closed for this session, but nothing durable was written.
+    await waitFor(() =>
+      expect(screen.getByTestId("tour-gate")).toBeInTheDocument(),
+    );
+    expect(window.localStorage.getItem(MARKER_KEY)).toBeNull();
+    expect(outcomes).toEqual([{ outcome: "shown" }]);
+  });
+
+  it.each([
+    [
+      "the profile is already recorded",
+      { hasProviders: false, profileRecorded: true },
+    ],
+    [
+      "the profile read failed",
+      { hasProviders: false, profileRecorded: undefined },
+    ],
+    ["providers exist", { hasProviders: true, profileRecorded: false }],
+  ])("goes straight to the tour gate when %s", async (_, props) => {
+    // When
+    render(<OnboardingProfileGate {...props} tenantId={TENANT_ID} />);
+
+    // Then
+    expect(screen.getByTestId("tour-gate")).toBeInTheDocument();
+    await waitFor(() =>
+      expect(screen.queryByRole("button", { name: "Continue" })).toBeNull(),
+    );
+    expect(outcomes).toEqual([]);
+  });
+
+  it("does not reopen once this browser handled the step", () => {
+    // Given
+    window.localStorage.setItem(MARKER_KEY, "true");
+
+    // When
+    render(
+      <OnboardingProfileGate
+        hasProviders={false}
+        profileRecorded={false}
+        tenantId={TENANT_ID}
+      />,
+    );
+
+    // Then
+    expect(screen.getByTestId("tour-gate")).toBeInTheDocument();
+    expect(outcomes).toEqual([]);
+  });
+
+  it("defers on billing routes without resolving the step", () => {
+    // Given
+    pathnameMock.mockReturnValue("/billing");
+
+    // When
+    render(
+      <OnboardingProfileGate
+        hasProviders={false}
+        profileRecorded={false}
+        tenantId={TENANT_ID}
+      />,
+    );
+
+    // Then
+    expect(screen.getByTestId("tour-gate")).toBeInTheDocument();
+    expect(window.localStorage.getItem(MARKER_KEY)).toBeNull();
+    expect(outcomes).toEqual([]);
+  });
+
+  it("still asks another tenant that the same browser has not answered", async () => {
+    // Given — this browser answered for one tenant.
+    window.localStorage.setItem(MARKER_KEY, "true");
+
+    // When — the user switches to a second, brand-new tenant.
+    render(
+      <OnboardingProfileGate
+        hasProviders={false}
+        profileRecorded={false}
+        tenantId={OTHER_TENANT_ID}
+      />,
+    );
+
+    // Then
+    expect(
+      await screen.findByRole("button", { name: "Continue" }),
+    ).toBeInTheDocument();
+    expect(outcomes).toEqual([{ outcome: "shown" }]);
+  });
+
+  it("leaves no marker and announces nothing when the skip is not stored", async () => {
+    // Given
+    const user = userEvent.setup();
+    skipMock.mockResolvedValue({ stored: false, error: "boom" });
+    render(
+      <OnboardingProfileGate
+        hasProviders={false}
+        profileRecorded={false}
+        tenantId={TENANT_ID}
+      />,
+    );
+    await screen.findByRole("button", { name: "Skip" });
+
+    // When
+    await user.click(screen.getByRole("button", { name: "Skip" }));
+
+    // Then
+    await waitFor(() =>
+      expect(screen.getByTestId("tour-gate")).toBeInTheDocument(),
+    );
+    expect(window.localStorage.getItem(MARKER_KEY)).toBeNull();
+    expect(outcomes).toEqual([{ outcome: "shown" }]);
+  });
+});
diff --git a/ui/components/onboarding/__tests__/onboarding-profile-modal.test.tsx b/ui/components/onboarding/__tests__/onboarding-profile-modal.test.tsx
new file mode 100644
index 0000000000..3098e6dae8
--- /dev/null
+++ b/ui/components/onboarding/__tests__/onboarding-profile-modal.test.tsx
@@ -0,0 +1,73 @@
+import { render, screen } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { describe, expect, it, vi } from "vitest";
+
+import { OnboardingProfileModal } from "../onboarding-profile-modal";
+
+describe("OnboardingProfileModal", () => {
+  it("asks the three closed questions and keeps Continue disabled until all are answered", async () => {
+    // Given
+    const user = userEvent.setup();
+    const onSubmit = vi.fn();
+    render(
+      <OnboardingProfileModal open onSubmit={onSubmit} onSkip={vi.fn()} />,
+    );
+    const submit = screen.getByRole("button", { name: "Continue" });
+    expect(submit).toBeDisabled();
+
+    // When
+    await user.click(screen.getByRole("radio", { name: "11-50" }));
+    expect(submit).toBeDisabled();
+    await user.click(screen.getByRole("radio", { name: "Security" }));
+    // Discipline alone is not enough: the ladder is a separate answer.
+    expect(submit).toBeDisabled();
+    await user.click(screen.getByRole("radio", { name: "Director / Head of" }));
+    await user.click(submit);
+
+    // Then
+    expect(onSubmit).toHaveBeenCalledWith({
+      declared_cloud_accounts: "11-50",
+      declared_role: "security",
+      declared_seniority: "director",
+    });
+  });
+
+  it("reports a skip from the secondary action and from closing the dialog", async () => {
+    // Given
+    const user = userEvent.setup();
+    const onSkip = vi.fn();
+    render(<OnboardingProfileModal open onSubmit={vi.fn()} onSkip={onSkip} />);
+
+    // When
+    await user.click(screen.getByRole("button", { name: "Skip" }));
+    await user.keyboard("{Escape}");
+
+    // Then
+    expect(onSkip).toHaveBeenCalledTimes(2);
+  });
+
+  it("locks every control while a submission is in flight", async () => {
+    // Given
+    const user = userEvent.setup();
+    const onSkip = vi.fn();
+    render(
+      <OnboardingProfileModal
+        open
+        isSubmitting
+        onSubmit={vi.fn()}
+        onSkip={onSkip}
+      />,
+    );
+
+    // Then
+    expect(screen.getByRole("button", { name: "Saving..." })).toBeDisabled();
+    expect(screen.getByRole("button", { name: "Skip" })).toBeDisabled();
+    expect(screen.getByRole("radio", { name: "Security" })).toBeDisabled();
+
+    // When — closing must not count as a skip mid-flight.
+    await user.keyboard("{Escape}");
+
+    // Then
+    expect(onSkip).not.toHaveBeenCalled();
+  });
+});
diff --git a/ui/components/onboarding/onboarding-profile-gate.tsx b/ui/components/onboarding/onboarding-profile-gate.tsx
new file mode 100644
index 0000000000..36853ab3cf
--- /dev/null
+++ b/ui/components/onboarding/onboarding-profile-gate.tsx
@@ -0,0 +1,128 @@
+"use client";
+
+import { usePathname } from "next/navigation";
+import { useState, useSyncExternalStore } from "react";
+
+import {
+  skipOnboardingProfile,
+  submitOnboardingProfile,
+} from "@/actions/onboarding/profile";
+import { useMountEffect } from "@/hooks/use-mount-effect";
+import {
+  dispatchOnboardingProfileStep,
+  ONBOARDING_STEP_OUTCOME,
+} from "@/lib/onboarding/onboarding-events";
+import { shouldStartOnboardingProfile } from "@/lib/onboarding/profile-gate-decision";
+import {
+  getServerOnboardingProfileHandled,
+  isOnboardingProfileHandled,
+  markOnboardingProfileHandled,
+  subscribeOnboardingProfileMarker,
+} from "@/lib/onboarding/profile-marker";
+import type { OnboardingProfileAnswers } from "@/types/onboarding-profile";
+
+import { OnboardingGate } from "./onboarding-gate";
+import { OnboardingProfileModal } from "./onboarding-profile-modal";
+
+interface OnboardingProfileGateProps {
+  // `undefined` = fetch failed/ambiguous; fail-open (never force the modal).
+  hasProviders?: boolean;
+  // Whether the API already holds the tenant's profile; `undefined` fails open.
+  profileRecorded?: boolean;
+  // Scopes the local marker: the step is per tenant, not per browser.
+  tenantId?: string | null;
+}
+
+const isBillingPath = (pathname: string | null) =>
+  pathname === "/billing" || pathname?.startsWith("/billing/") === true;
+
+function ShownOnce() {
+  useMountEffect(() => {
+    dispatchOnboardingProfileStep({ outcome: ONBOARDING_STEP_OUTCOME.SHOWN });
+  });
+  return null;
+}
+
+// Profile step in front of the tour gate: the modal resolves first, then
+// `OnboardingGate` takes over with the same `hasProviders` signal. Outcomes
+// are announced as window events for whoever wants to observe them.
+export function OnboardingProfileGate({
+  hasProviders,
+  profileRecorded,
+  tenantId = null,
+}: OnboardingProfileGateProps) {
+  const pathname = usePathname();
+  const handledLocally = useSyncExternalStore(
+    subscribeOnboardingProfileMarker,
+    // Bound per tenant so switching accounts re-reads the right key.
+    () => isOnboardingProfileHandled(tenantId),
+    getServerOnboardingProfileHandled,
+  );
+  // Session flag keeps the modal closed after submit/skip within this mount,
+  // including the failure path where no marker is written.
+  const [resolvedThisSession, setResolvedThisSession] = useState(false);
+  const [isSubmitting, setIsSubmitting] = useState(false);
+
+  const showProfile =
+    // Billing must stay usable before onboarding; leaving it keeps the step eligible.
+    !isBillingPath(pathname) &&
+    !resolvedThisSession &&
+    shouldStartOnboardingProfile({
+      hasProviders,
+      profileRecorded,
+      handledLocally,
+    });
+
+  if (!showProfile) return <OnboardingGate hasProviders={hasProviders} />;
+
+  const handleSubmit = async (answers: OnboardingProfileAnswers) => {
+    setIsSubmitting(true);
+    try {
+      const result = await submitOnboardingProfile(answers);
+      if (!result.stored) {
+        // Nothing was written, so no marker and no submitted outcome: the
+        // step returns on the next login instead of being lost.
+        setResolvedThisSession(true);
+        return;
+      }
+      dispatchOnboardingProfileStep({
+        outcome: ONBOARDING_STEP_OUTCOME.SUBMITTED,
+        answers,
+      });
+      markOnboardingProfileHandled(tenantId);
+      setResolvedThisSession(true);
+    } finally {
+      setIsSubmitting(false);
+    }
+  };
+
+  const handleSkip = async () => {
+    setIsSubmitting(true);
+    try {
+      // A skip is a stored fact too, so it is only remembered locally once
+      // the row exists.
+      const result = await skipOnboardingProfile();
+      if (result.stored) {
+        dispatchOnboardingProfileStep({
+          outcome: ONBOARDING_STEP_OUTCOME.SKIPPED,
+        });
+        markOnboardingProfileHandled(tenantId);
+      }
+      setResolvedThisSession(true);
+    } finally {
+      setIsSubmitting(false);
+    }
+  };
+
+  return (
+    <>
+      <ShownOnce />
+      <OnboardingProfileModal
+        open
+        isSubmitting={isSubmitting}
+        onSubmit={handleSubmit}
+        onSkip={handleSkip}
+      />
+    </>
+  );
+}
diff --git a/ui/components/onboarding/onboarding-profile-modal.tsx b/ui/components/onboarding/onboarding-profile-modal.tsx
new file mode 100644
index 0000000000..d0dc7d0298
--- /dev/null
+++ b/ui/components/onboarding/onboarding-profile-modal.tsx
@@ -0,0 +1,172 @@
+"use client";
+
+import { useState } from "react";
+
+import { Button } from "@/components/shadcn";
+import { DialogFooter } from "@/components/shadcn/dialog";
+import { Modal } from "@/components/shadcn/modal/modal";
+import {
+  RadioGroup,
+  RadioGroupItem,
+} from "@/components/shadcn/radio-group/radio-group";
+import {
+  DECLARED_CLOUD_ACCOUNTS,
+  DECLARED_ROLE,
+  DECLARED_ROLE_LABEL,
+  DECLARED_SENIORITY,
+  DECLARED_SENIORITY_LABEL,
+  type DeclaredCloudAccounts,
+  type DeclaredRole,
+  type DeclaredSeniority,
+  type OnboardingProfileAnswers,
+} from "@/types/onboarding-profile";
+
+interface OnboardingProfileModalProps {
+  open: boolean;
+  isSubmitting?: boolean;
+  onSubmit: (answers: OnboardingProfileAnswers) => void;
+  onSkip: () => void;
+}
+
+interface ProfileQuestionProps<Value extends string> {
+  name: string;
+  legend: string;
+  options: readonly Value[];
+  labels?: Partial<Record<Value, string>>;
+  value: Value | null;
+  onChange: (value: Value) => void;
+  disabled: boolean;
+}
+
+interface ProfileDraft {
+  cloudAccounts: DeclaredCloudAccounts | null;
+  role: DeclaredRole | null;
+  seniority: DeclaredSeniority | null;
+}
+
+const EMPTY_DRAFT: ProfileDraft = {
+  cloudAccounts: null,
+  role: null,
+  seniority: null,
+};
+
+function ProfileQuestion<Value extends string>({
+  name,
+  legend,
+  options,
+  labels,
+  value,
+  onChange,
+  disabled,
+}: ProfileQuestionProps<Value>) {
+  return (
+    <fieldset className="flex flex-col gap-2">
+      <legend className="text-text-neutral-primary mb-2 text-sm font-medium">
+        {legend}
+      </legend>
+      <RadioGroup
+        name={name}
+        value={value ?? ""}
+        onValueChange={(next) => onChange(next as Value)}
+        disabled={disabled}
+        className="flex flex-row flex-wrap gap-x-6 gap-y-2"
+        aria-label={legend}
+      >
+        {options.map((option) => (
+          <label
+            key={option}
+            className="text-text-neutral-secondary flex items-center gap-2 text-sm"
+          >
+            <RadioGroupItem
+              value={option}
+              aria-label={labels?.[option] ?? option}
+            />
+            {labels?.[option] ?? option}
+          </label>
+        ))}
+      </RadioGroup>
+    </fieldset>
+  );
+}
+
+// Three closed questions asked once, at a new tenant's first login, before
+// any product signal could shape the answer. Every path out is recorded by
+// the caller: submit, skip, and close (which counts as a skip).
+export function OnboardingProfileModal({
+  open,
+  isSubmitting = false,
+  onSubmit,
+  onSkip,
+}: OnboardingProfileModalProps) {
+  const [draft, setDraft] = useState<ProfileDraft>(EMPTY_DRAFT);
+  const isComplete =
+    draft.cloudAccounts !== null &&
+    draft.role !== null &&
+    draft.seniority !== null;
+
+  const handleSubmit = () => {
+    const { cloudAccounts, role, seniority } = draft;
+    if (cloudAccounts === null || role === null || seniority === null) return;
+    if (isSubmitting) return;
+    onSubmit({
+      declared_cloud_accounts: cloudAccounts,
+      declared_role: role,
+      declared_seniority: seniority,
+    });
+  };
+
+  return (
+    <Modal
+      open={open}
+      title="Tell us about your setup"
+      description="Three quick questions so Prowler Cloud fits how you work. You can skip them."
+      size="lg"
+      // Overlay/Escape/X counts as a skip — the gate persists the marker once.
+      onOpenChange={(next) => {
+        if (!next && !isSubmitting) onSkip();
+      }}
+    >
+      <div className="flex flex-col gap-6">
+        <ProfileQuestion
+          name="declared_cloud_accounts"
+          legend="How many cloud accounts do you manage?"
+          options={Object.values(DECLARED_CLOUD_ACCOUNTS)}
+          value={draft.cloudAccounts}
+          onChange={(cloudAccounts) =>
+            setDraft((current) => ({ ...current, cloudAccounts }))
+          }
+          disabled={isSubmitting}
+        />
+        <ProfileQuestion
+          name="declared_role"
+          legend="Which area do you work in?"
+          options={Object.values(DECLARED_ROLE)}
+          labels={DECLARED_ROLE_LABEL}
+          value={draft.role}
+          onChange={(role) => setDraft((current) => ({ ...current, role }))}
+          disabled={isSubmitting}
+        />
+        <ProfileQuestion
+          name="declared_seniority"
+          legend="What best describes your position?"
+          options={Object.values(DECLARED_SENIORITY)}
+          labels={DECLARED_SENIORITY_LABEL}
+          value={draft.seniority}
+          onChange={(seniority) =>
+            setDraft((current) => ({ ...current, seniority }))
+          }
+          disabled={isSubmitting}
+        />
+      </div>
+      <DialogFooter>
+        {/* Outline matches the app's modal secondary action (e.g. Launch Scan's Cancel). */}
+        <Button variant="outline" onClick={onSkip} disabled={isSubmitting}>
+          Skip
+        </Button>
+        <Button onClick={handleSubmit} disabled={!isComplete || isSubmitting}>
+          {isSubmitting ? "Saving..." : "Continue"}
+        </Button>
+      </DialogFooter>
+    </Modal>
+  );
+}
diff --git a/ui/lib/onboarding/README.md b/ui/lib/onboarding/README.md
index eab352ca2b..99f632e2bf 100644
--- a/ui/lib/onboarding/README.md
+++ b/ui/lib/onboarding/README.md
@@ -2,8 +2,10 @@
 
 The onboarding system runs short, anchored driver.js tours and orchestrates a
 cross-route **guided sequence** after a user connects their first provider.
-Everything lives in client state and localStorage — there is **zero backend
-coupling**.
+The tours and the sequence live entirely in client state and localStorage —
+**no backend coupling**. The profile step described below is the exception:
+it persists the tenant's answer through `POST /onboarding-profiles`, and the
+server answer, not localStorage, decides whether it is still owed.
 
 ## Building blocks
 
@@ -17,6 +19,8 @@ coupling**.
 | Ephemeral sequence slice               | `ui/store/onboarding-sequence.ts`                                     |
 | Checkpoint watcher + dialog            | `ui/components/onboarding/onboarding-checkpoint-{watcher,dialog}.tsx` |
 | Mandatory new-user gate                | `ui/components/onboarding/onboarding-gate.tsx`                        |
+| Profile step in front of the gate      | `ui/components/onboarding/onboarding-profile-{gate,modal}.tsx`        |
+| Step outcome events (window)           | `ui/lib/onboarding/onboarding-events.ts`                              |
 | Manual replay list                     | `ui/components/ui/user-nav/user-nav.tsx`                              |
 
 ## How the guided sequence works
@@ -72,3 +76,22 @@ the sequence automatically.
   `target` must resolve to a real `data-tour-id` anchor within its `coversFiles`.
 - `pnpm exec vitest run --project unit` — pure logic (slice, helpers, registry,
   tour shapes). The driver primitive short-circuits in `NODE_ENV==="test"`.
+
+## Profile step
+
+Before the mandatory gate offers the first tour, `OnboardingProfileGate` asks
+a new tenant three closed questions (cloud accounts, area of work and
+position) and
+records the answer, or the skip, through `POST /onboarding-profiles`. The API
+keeps the first answer per tenant, so the layout only reads
+`isOnboardingProfileRecorded()` for tenants without providers and the gate
+fails open on any doubt (`shouldStartOnboardingProfile`). A per-tenant localStorage
+marker (`prowler.onboarding.profile.<tenantId>`) spares the flash on later
+renders; a submission or skip the API did not store writes no marker, so the
+step returns next login.
+
+Each resolution (`shown`, `submitted` with the answers, `skipped`) is announced
+as a `prowler:onboarding-profile-step` window event
+(`dispatchOnboardingProfileStep`). The step has no listener of its own: a
+deployment that wants to observe it subscribes from outside, so the onboarding
+stays free of tracking dependencies.
diff --git a/ui/lib/onboarding/__tests__/profile-gate-decision.test.ts b/ui/lib/onboarding/__tests__/profile-gate-decision.test.ts
new file mode 100644
index 0000000000..0f3430fb2b
--- /dev/null
+++ b/ui/lib/onboarding/__tests__/profile-gate-decision.test.ts
@@ -0,0 +1,32 @@
+import { describe, expect, it } from "vitest";
+
+import { shouldStartOnboardingProfile } from "../profile-gate-decision";
+
+describe("shouldStartOnboardingProfile", () => {
+  it("opens for a zero-provider tenant with no profile and no local marker", () => {
+    expect(
+      shouldStartOnboardingProfile({
+        hasProviders: false,
+        profileRecorded: false,
+        handledLocally: false,
+      }),
+    ).toBe(true);
+  });
+
+  it.each([
+    ["providers already exist", { hasProviders: true }],
+    ["the providers read failed", { hasProviders: undefined }],
+    ["a profile is already recorded", { profileRecorded: true }],
+    ["the profile read failed", { profileRecorded: undefined }],
+    ["this browser already resolved the step", { handledLocally: true }],
+  ])("stays closed when %s", (_, override) => {
+    expect(
+      shouldStartOnboardingProfile({
+        hasProviders: false,
+        profileRecorded: false,
+        handledLocally: false,
+        ...override,
+      }),
+    ).toBe(false);
+  });
+});
diff --git a/ui/lib/onboarding/index.ts b/ui/lib/onboarding/index.ts
index cd6907c036..8d0c967b65 100644
--- a/ui/lib/onboarding/index.ts
+++ b/ui/lib/onboarding/index.ts
@@ -5,3 +5,17 @@ export { shouldStartOnboarding } from "./gate-decision";
 export { isOnFlowRoute } from "./flow-route";
 export type { OnboardingContext, OnboardingFlow } from "./onboarding-types";
 export { getFlowById, getOrderedFlows, onboardingFlows } from "./registry";
+export type {
+  OnboardingInviteStepDetail,
+  OnboardingProfileStepDetail,
+  OnboardingStepOutcome,
+} from "./onboarding-events";
+export {
+  dispatchOnboardingInviteStep,
+  dispatchOnboardingProfileStep,
+  ONBOARDING_INVITE_STEP_EVENT,
+  ONBOARDING_PROFILE_STEP_EVENT,
+  ONBOARDING_STEP_OUTCOME,
+} from "./onboarding-events";
+export type { ProfileGateDecisionInput } from "./profile-gate-decision";
+export { shouldStartOnboardingProfile } from "./profile-gate-decision";
diff --git a/ui/lib/onboarding/onboarding-events.ts b/ui/lib/onboarding/onboarding-events.ts
new file mode 100644
index 0000000000..360cdb1035
--- /dev/null
+++ b/ui/lib/onboarding/onboarding-events.ts
@@ -0,0 +1,61 @@
+import type { OnboardingProfileAnswers } from "@/types/onboarding-profile";
+
+// Window events the onboarding steps dispatch when they resolve. They carry
+// no listener of their own: a deployment that wants to observe the steps
+// (product analytics, for instance) subscribes from outside, so the steps
+// stay free of any tracking dependency.
+export const ONBOARDING_PROFILE_STEP_EVENT = "prowler:onboarding-profile-step";
+export const ONBOARDING_INVITE_STEP_EVENT = "prowler:onboarding-invite-step";
+
+export const ONBOARDING_STEP_OUTCOME = {
+  SHOWN: "shown",
+  SUBMITTED: "submitted",
+  SKIPPED: "skipped",
+} as const;
+
+export type OnboardingStepOutcome =
+  (typeof ONBOARDING_STEP_OUTCOME)[keyof typeof ONBOARDING_STEP_OUTCOME];
+
+interface OnboardingProfileStepSubmitted {
+  outcome: typeof ONBOARDING_STEP_OUTCOME.SUBMITTED;
+  // The stored answers, so a listener never has to read them back.
+  answers: OnboardingProfileAnswers;
+}
+
+interface OnboardingProfileStepResolved {
+  outcome:
+    | typeof ONBOARDING_STEP_OUTCOME.SHOWN
+    | typeof ONBOARDING_STEP_OUTCOME.SKIPPED;
+  answers?: never;
+}
+
+// A union rather than an optional field: only a submitted step carries the
+// answers, so a listener that narrows on `outcome` gets them without a check.
+export type OnboardingProfileStepDetail =
+  | OnboardingProfileStepSubmitted
+  | OnboardingProfileStepResolved;
+
+export interface OnboardingInviteStepDetail {
+  outcome: OnboardingStepOutcome;
+}
+
+function dispatch<Detail>(name: string, detail: Detail): void {
+  if (typeof window === "undefined") return;
+  try {
+    window.dispatchEvent(new CustomEvent<Detail>(name, { detail }));
+  } catch {
+    // A listener that throws must never break the step that resolved.
+  }
+}
+
+export function dispatchOnboardingProfileStep(
+  detail: OnboardingProfileStepDetail,
+): void {
+  dispatch(ONBOARDING_PROFILE_STEP_EVENT, detail);
+}
+
+export function dispatchOnboardingInviteStep(
+  detail: OnboardingInviteStepDetail,
+): void {
+  dispatch(ONBOARDING_INVITE_STEP_EVENT, detail);
+}
diff --git a/ui/lib/onboarding/profile-gate-decision.ts b/ui/lib/onboarding/profile-gate-decision.ts
new file mode 100644
index 0000000000..83fedc18a0
--- /dev/null
+++ b/ui/lib/onboarding/profile-gate-decision.ts
@@ -0,0 +1,20 @@
+export interface ProfileGateDecisionInput {
+  // `undefined` allowed; the strict `=== false` checks below fail open on
+  // ambiguous signals, like the tour gate does.
+  hasProviders: boolean | undefined;
+  // Whether the API already holds a profile row for the tenant (answered or
+  // skipped on any device). `undefined` means the read failed.
+  profileRecorded: boolean | undefined;
+  // Local marker: this browser already resolved the step.
+  handledLocally: boolean;
+}
+
+// Shows the profile step only for a provably new tenant that has neither a
+// recorded profile nor a local marker. Any doubt keeps the step closed.
+export function shouldStartOnboardingProfile({
+  hasProviders,
+  profileRecorded,
+  handledLocally,
+}: ProfileGateDecisionInput): boolean {
+  return hasProviders === false && profileRecorded === false && !handledLocally;
+}
diff --git a/ui/lib/onboarding/profile-marker.ts b/ui/lib/onboarding/profile-marker.ts
new file mode 100644
index 0000000000..20f0005e8a
--- /dev/null
+++ b/ui/lib/onboarding/profile-marker.ts
@@ -0,0 +1,67 @@
+// Durable "this browser already resolved the profile step" memory, mirroring
+// the checkpoint marker. The API row is the system of record; the marker only
+// spares a flash of the modal before the server answer catches up.
+//
+// The key carries the tenant because eligibility is tenant-scoped: a user who
+// answered for one tenant must still be asked when they switch to a new one.
+const ONBOARDING_PROFILE_MARKER_PREFIX = "prowler.onboarding.profile";
+
+const listeners = new Set<() => void>();
+
+// Tenant ids are UUIDs; anything else is refused rather than concatenated
+// into a storage key.
+const TENANT_ID_PATTERN =
+  /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+
+export function onboardingProfileMarkerKey(
+  tenantId: string | null | undefined,
+): string | null {
+  if (!tenantId || !TENANT_ID_PATTERN.test(tenantId)) return null;
+  return `${ONBOARDING_PROFILE_MARKER_PREFIX}.${tenantId.toLowerCase()}`;
+}
+
+export function isOnboardingProfileHandled(
+  tenantId: string | null | undefined,
+): boolean {
+  if (typeof window === "undefined") return true;
+  const key = onboardingProfileMarkerKey(tenantId);
+  // Without a usable tenant the local memory cannot be trusted; the
+  // server-side answer decides on its own.
+  if (!key) return false;
+  try {
+    return window.localStorage.getItem(key) !== null;
+  } catch {
+    // Unreadable storage must not re-open the step forever: treat as handled.
+    return true;
+  }
+}
+
+export function markOnboardingProfileHandled(
+  tenantId: string | null | undefined,
+): void {
+  if (typeof window === "undefined") return;
+  const key = onboardingProfileMarkerKey(tenantId);
+  if (key) {
+    try {
+      window.localStorage.setItem(key, "true");
+    } catch {
+      // Non-fatal: a re-shown step beats a thrown render.
+    }
+  }
+  listeners.forEach((listener) => listener());
+}
+
+// For `useSyncExternalStore`: the marker only changes through
+// `markOnboardingProfileHandled`, so that is the only notification source.
+export function subscribeOnboardingProfileMarker(
+  listener: () => void,
+): () => void {
+  listeners.add(listener);
+  return () => {
+    listeners.delete(listener);
+  };
+}
+
+// Server render and the hydration pass see the step as handled so the modal
+// never flashes before the client can read storage.
+export const getServerOnboardingProfileHandled = () => true;
diff --git a/ui/types/onboarding-profile.ts b/ui/types/onboarding-profile.ts
new file mode 100644
index 0000000000..9980912598
--- /dev/null
+++ b/ui/types/onboarding-profile.ts
@@ -0,0 +1,63 @@
+// Closed buckets the onboarding profile step asks at a new tenant's first
+// login. Values mirror `TenantOnboardingProfile` choices in the API and the
+// `declared_*` PostHog properties; change them together.
+
+export const DECLARED_CLOUD_ACCOUNTS = {
+  ONE: "1",
+  TWO_TO_TEN: "2-10",
+  ELEVEN_TO_FIFTY: "11-50",
+  FIFTY_ONE_TO_TWO_HUNDRED: "51-200",
+  OVER_TWO_HUNDRED: "200+",
+} as const;
+
+export type DeclaredCloudAccounts =
+  (typeof DECLARED_CLOUD_ACCOUNTS)[keyof typeof DECLARED_CLOUD_ACCOUNTS];
+
+// Discipline, not rank. Management lives in DECLARED_SENIORITY so the two
+// questions stay orthogonal: a security engineer and a CISO both answer
+// "security" here and differ on the ladder below.
+export const DECLARED_ROLE = {
+  SECURITY: "security",
+  DEVOPS_PLATFORM: "devops_platform",
+  DEVELOPER: "developer",
+  COMPLIANCE_GRC: "compliance_grc",
+  OTHER: "other",
+} as const;
+
+export type DeclaredRole = (typeof DECLARED_ROLE)[keyof typeof DECLARED_ROLE];
+
+// How far up the organisation the answer comes from. Founders get their own
+// bucket: a one-person tenant run by a founder evaluating Prowler is a
+// different prospect from a lone practitioner inside a large company.
+export const DECLARED_SENIORITY = {
+  PRACTITIONER: "practitioner",
+  LEAD: "lead",
+  DIRECTOR: "director",
+  EXECUTIVE: "executive",
+  FOUNDER: "founder",
+} as const;
+
+export type DeclaredSeniority =
+  (typeof DECLARED_SENIORITY)[keyof typeof DECLARED_SENIORITY];
+
+export interface OnboardingProfileAnswers {
+  declared_cloud_accounts: DeclaredCloudAccounts;
+  declared_role: DeclaredRole;
+  declared_seniority: DeclaredSeniority;
+}
+
+export const DECLARED_ROLE_LABEL: Record<DeclaredRole, string> = {
+  [DECLARED_ROLE.SECURITY]: "Security",
+  [DECLARED_ROLE.DEVOPS_PLATFORM]: "DevOps / Platform",
+  [DECLARED_ROLE.DEVELOPER]: "Developer",
+  [DECLARED_ROLE.COMPLIANCE_GRC]: "Compliance / GRC",
+  [DECLARED_ROLE.OTHER]: "Other",
+};
+
+export const DECLARED_SENIORITY_LABEL: Record<DeclaredSeniority, string> = {
+  [DECLARED_SENIORITY.PRACTITIONER]: "Practitioner / IC",
+  [DECLARED_SENIORITY.LEAD]: "Team lead / Manager",
+  [DECLARED_SENIORITY.DIRECTOR]: "Director / Head of",
+  [DECLARED_SENIORITY.EXECUTIVE]: "VP / C-level",
+  [DECLARED_SENIORITY.FOUNDER]: "Founder / Owner",
+};

From 396ccf56bbb58653239bf77160c592a0a35a0f34 Mon Sep 17 00:00:00 2001
From: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com>
Date: Thu, 17 Sep 2026 11:58:53 +0200
Subject: [PATCH 68/77] feat(ui): offer an invite-your-team step before the
 onboarding checkpoint (#12819)

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
---
 ui/actions/invitations/invitation.test.ts     |  72 ++++++
 ui/actions/invitations/invitation.ts          |   5 +
 ui/actions/onboarding/invite.ts               |  21 ++
 ui/app/(prowler)/layout.tsx                   |  14 +-
 .../onboarding-invite-step.added.md           |   1 +
 .../forms/send-invitation-form.test.tsx       | 112 +++++++++
 .../workflow/forms/send-invitation-form.tsx   |  41 +++-
 ...oarding-checkpoint-watcher-invite.test.tsx | 132 +++++++++++
 .../onboarding-checkpoint-watcher.test.tsx    |   5 +
 .../__tests__/onboarding-invite-step.test.tsx | 223 ++++++++++++++++++
 .../onboarding-checkpoint-watcher.tsx         |  43 +++-
 .../onboarding/onboarding-invite-dialog.tsx   |  78 ++++++
 .../onboarding/onboarding-invite-step.tsx     |  73 ++++++
 ui/lib/onboarding/README.md                   |  16 ++
 ui/lib/onboarding/invite-marker.ts            |  48 ++++
 ui/types/onboarding-invite.ts                 |  11 +
 16 files changed, 879 insertions(+), 16 deletions(-)
 create mode 100644 ui/actions/invitations/invitation.test.ts
 create mode 100644 ui/actions/onboarding/invite.ts
 create mode 100644 ui/changelog.d/onboarding-invite-step.added.md
 create mode 100644 ui/components/invitations/workflow/forms/send-invitation-form.test.tsx
 create mode 100644 ui/components/onboarding/__tests__/onboarding-checkpoint-watcher-invite.test.tsx
 create mode 100644 ui/components/onboarding/__tests__/onboarding-invite-step.test.tsx
 create mode 100644 ui/components/onboarding/onboarding-invite-dialog.tsx
 create mode 100644 ui/components/onboarding/onboarding-invite-step.tsx
 create mode 100644 ui/lib/onboarding/invite-marker.ts
 create mode 100644 ui/types/onboarding-invite.ts

diff --git a/ui/actions/invitations/invitation.test.ts b/ui/actions/invitations/invitation.test.ts
new file mode 100644
index 0000000000..4f9635a590
--- /dev/null
+++ b/ui/actions/invitations/invitation.test.ts
@@ -0,0 +1,72 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const { fetchMock, getAuthHeadersMock, handleApiResponseMock } = vi.hoisted(
+  () => ({
+    fetchMock: vi.fn(),
+    getAuthHeadersMock: vi.fn(),
+    handleApiResponseMock: vi.fn(),
+  }),
+);
+
+vi.mock("next/cache", () => ({
+  revalidatePath: vi.fn(),
+}));
+
+vi.mock("next/navigation", () => ({
+  redirect: vi.fn(),
+}));
+
+vi.mock("@/lib", () => ({
+  apiBaseUrl: "https://api.example.com/api/v1",
+  getAuthHeaders: getAuthHeadersMock,
+}));
+
+vi.mock("@/lib/server-actions-helper", () => ({
+  handleApiError: vi.fn(),
+  handleApiResponse: handleApiResponseMock,
+}));
+
+import { sendInvite } from "./invitation";
+
+const inviteFormData = (source?: string) => {
+  const formData = new FormData();
+  formData.append("email", "teammate@company.com");
+  formData.append("role", "22222222-2222-4222-8222-222222222222");
+  if (source) formData.append("source", source);
+  return formData;
+};
+
+describe("sendInvite", () => {
+  beforeEach(() => {
+    vi.stubGlobal("fetch", fetchMock);
+    fetchMock.mockReset().mockResolvedValue(new Response("{}"));
+    getAuthHeadersMock.mockReset().mockResolvedValue({});
+    handleApiResponseMock
+      .mockReset()
+      .mockResolvedValue({ data: { id: "inv" } });
+  });
+
+  it("posts to the invitations endpoint without a source by default", async () => {
+    // When
+    await sendInvite(inviteFormData());
+
+    // Then
+    expect(fetchMock).toHaveBeenCalledWith(
+      "https://api.example.com/api/v1/tenants/invitations",
+      expect.objectContaining({ method: "POST" }),
+    );
+  });
+
+  it("forwards the invitation source as a query param", async () => {
+    // When
+    await sendInvite(inviteFormData("onboarding"));
+
+    // Then
+    expect(fetchMock).toHaveBeenCalledWith(
+      "https://api.example.com/api/v1/tenants/invitations?source=onboarding",
+      expect.objectContaining({ method: "POST" }),
+    );
+    const body = JSON.parse(fetchMock.mock.calls[0]?.[1]?.body as string);
+    expect(body.data.attributes).toEqual({ email: "teammate@company.com" });
+  });
+});
diff --git a/ui/actions/invitations/invitation.ts b/ui/actions/invitations/invitation.ts
index 72f591705a..620a6e1a1b 100644
--- a/ui/actions/invitations/invitation.ts
+++ b/ui/actions/invitations/invitation.ts
@@ -51,7 +51,12 @@ export const sendInvite = async (formData: FormData) => {
 
   const email = formData.get("email");
   const role = formData.get("role");
+  const source = formData.get("source");
   const url = new URL(`${apiBaseUrl}/tenants/invitations`);
+  // Origin of the invitation (e.g. `onboarding`); the API may record it.
+  if (typeof source === "string" && source) {
+    url.searchParams.set("source", source);
+  }
 
   const body = JSON.stringify({
     data: {
diff --git a/ui/actions/onboarding/invite.ts b/ui/actions/onboarding/invite.ts
new file mode 100644
index 0000000000..d7e9221056
--- /dev/null
+++ b/ui/actions/onboarding/invite.ts
@@ -0,0 +1,21 @@
+"use server";
+
+import { getRoles } from "@/actions/roles";
+import type { InvitationRoleOption } from "@/types/onboarding-invite";
+
+const ROLES_PAGE_SIZE = 50;
+
+// Roles the onboarding invite step can offer; empty when the read fails so
+// the step can fall back to skipping rather than blocking the checkpoint.
+export const getOnboardingInviteRoles = async (): Promise<
+  InvitationRoleOption[]
+> => {
+  const rolesData = await getRoles({ pageSize: ROLES_PAGE_SIZE });
+  const roles: unknown = rolesData?.data;
+  if (!Array.isArray(roles)) return [];
+  return roles.flatMap((role) =>
+    typeof role?.id === "string" && typeof role?.attributes?.name === "string"
+      ? [{ id: role.id, name: role.attributes.name }]
+      : [],
+  );
+};
diff --git a/ui/app/(prowler)/layout.tsx b/ui/app/(prowler)/layout.tsx
index 623cc416f6..bd58df359b 100644
--- a/ui/app/(prowler)/layout.tsx
+++ b/ui/app/(prowler)/layout.tsx
@@ -76,8 +76,8 @@ export default async function RootLayout({
   let hasProviders: boolean | undefined = false;
   // Same tri-state for the onboarding profile step; only new tenants pay the read.
   let profileRecorded: boolean | undefined = true;
-  // Scopes the step's local marker, so answering for one tenant does not
-  // silence it for another.
+  // Scopes the onboarding steps' local markers, so resolving them for one
+  // tenant does not silence them for another.
   let tenantId: string | null = null;
 
   if (cloudEnabled) {
@@ -94,13 +94,9 @@ export default async function RootLayout({
     hasProviders = Array.isArray(providersData?.data)
       ? providersData.data.length > 0
       : undefined;
+    tenantId = (await auth())?.tenantId ?? null;
     if (hasProviders === false) {
-      const [recorded, session] = await Promise.all([
-        isOnboardingProfileRecorded(),
-        auth(),
-      ]);
-      profileRecorded = recorded;
-      tenantId = session?.tenantId ?? null;
+      profileRecorded = await isOnboardingProfileRecorded();
     }
   }
 
@@ -139,7 +135,7 @@ export default async function RootLayout({
                 tenantId={tenantId}
               />
               {/* Single mount point so the watcher survives post-connect navigation. */}
-              <OnboardingCheckpointWatcher />
+              <OnboardingCheckpointWatcher tenantId={tenantId} />
               {/* Persistent banner shown only while a guided sequence is active. */}
               <OnboardingSequenceBanner hasCompletedScan={hasCompletedScan} />
             </>
diff --git a/ui/changelog.d/onboarding-invite-step.added.md b/ui/changelog.d/onboarding-invite-step.added.md
new file mode 100644
index 0000000000..c2220888b5
--- /dev/null
+++ b/ui/changelog.d/onboarding-invite-step.added.md
@@ -0,0 +1 @@
+"Invite your team" step offered once after the first provider is connected, before the onboarding checkpoint, reusing the invitation form tagged with `source=onboarding`
diff --git a/ui/components/invitations/workflow/forms/send-invitation-form.test.tsx b/ui/components/invitations/workflow/forms/send-invitation-form.test.tsx
new file mode 100644
index 0000000000..a653a31692
--- /dev/null
+++ b/ui/components/invitations/workflow/forms/send-invitation-form.test.tsx
@@ -0,0 +1,112 @@
+import { render, screen, waitFor } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+import { SendInvitationForm } from "./send-invitation-form";
+
+const { pushMock, sendInviteMock } = vi.hoisted(() => ({
+  pushMock: vi.fn(),
+  sendInviteMock: vi.fn(),
+}));
+
+vi.mock("next/navigation", () => ({
+  useRouter: () => ({ push: pushMock }),
+}));
+
+vi.mock("@/actions/invitations/invitation", () => ({
+  sendInvite: sendInviteMock,
+}));
+
+// Radix Select does not open in jsdom; a native select keeps the test on the
+// form's behaviour rather than the dropdown's.
+vi.mock("@/components/shadcn/select/select", () => ({
+  Select: ({
+    value,
+    onValueChange,
+    disabled,
+    children,
+  }: {
+    value?: string;
+    onValueChange: (value: string) => void;
+    disabled?: boolean;
+    children: React.ReactNode;
+  }) => (
+    <select
+      aria-label="Select a role"
+      value={value ?? ""}
+      disabled={disabled}
+      onChange={(event) => onValueChange(event.target.value)}
+    >
+      <option value="">Select a role</option>
+      {children}
+    </select>
+  ),
+  SelectTrigger: () => null,
+  SelectValue: () => null,
+  SelectContent: ({ children }: { children: React.ReactNode }) => (
+    <>{children}</>
+  ),
+  SelectItem: ({
+    value,
+    children,
+  }: {
+    value: string;
+    children: React.ReactNode;
+  }) => <option value={value}>{children}</option>,
+}));
+
+const ROLES = [{ id: "22222222-2222-4222-8222-222222222222", name: "admin" }];
+
+const fillAndSubmit = async (user: ReturnType<typeof userEvent.setup>) => {
+  await user.type(screen.getByLabelText(/email/i), "teammate@company.com");
+  await user.selectOptions(screen.getByRole("combobox"), ROLES[0].id);
+  await user.click(screen.getByRole("button", { name: /send invitation/i }));
+};
+
+describe("SendInvitationForm", () => {
+  beforeEach(() => {
+    pushMock.mockReset();
+    sendInviteMock.mockReset().mockResolvedValue({ data: { id: "inv-1" } });
+  });
+
+  it("navigates to the invitation details by default", async () => {
+    // Given
+    const user = userEvent.setup();
+    render(<SendInvitationForm roles={ROLES} isSelectorDisabled={false} />);
+
+    // When
+    await fillAndSubmit(user);
+
+    // Then
+    await waitFor(() =>
+      expect(pushMock).toHaveBeenCalledWith(
+        "/invitations/check-details/?id=inv-1",
+      ),
+    );
+    const formData = sendInviteMock.mock.calls[0]?.[0] as FormData;
+    expect(formData.get("source")).toBeNull();
+  });
+
+  it("hands the new invitation to onSuccess and tags the source when given", async () => {
+    // Given
+    const user = userEvent.setup();
+    const onSuccess = vi.fn();
+    render(
+      <SendInvitationForm
+        roles={ROLES}
+        isSelectorDisabled={false}
+        source="onboarding"
+        onSuccess={onSuccess}
+      />,
+    );
+
+    // When
+    await fillAndSubmit(user);
+
+    // Then
+    await waitFor(() => expect(onSuccess).toHaveBeenCalledWith("inv-1"));
+    expect(pushMock).not.toHaveBeenCalled();
+    const formData = sendInviteMock.mock.calls[0]?.[0] as FormData;
+    expect(formData.get("source")).toBe("onboarding");
+  });
+});
diff --git a/ui/components/invitations/workflow/forms/send-invitation-form.tsx b/ui/components/invitations/workflow/forms/send-invitation-form.tsx
index ce98cfdc97..cbbbdac225 100644
--- a/ui/components/invitations/workflow/forms/send-invitation-form.tsx
+++ b/ui/components/invitations/workflow/forms/send-invitation-form.tsx
@@ -18,6 +18,7 @@ import {
   SelectValue,
 } from "@/components/shadcn/select/select";
 import { ApiError } from "@/types";
+import type { InvitationRoleOption } from "@/types/onboarding-invite";
 
 const sendInvitationFormSchema = z.object({
   email: z.email({ error: "Please enter a valid email" }),
@@ -26,15 +27,24 @@ const sendInvitationFormSchema = z.object({
 
 export type FormValues = z.infer<typeof sendInvitationFormSchema>;
 
+interface SendInvitationFormProps {
+  roles: InvitationRoleOption[];
+  defaultRole?: string;
+  isSelectorDisabled: boolean;
+  // Where the invitation was sent from, forwarded to the API as `?source=`
+  // so the origin can be told apart (e.g. the onboarding invite step).
+  source?: string;
+  // Replaces the default navigation to the invitation details page.
+  onSuccess?: (invitationId: string) => void;
+}
+
 export const SendInvitationForm = ({
   roles = [],
   defaultRole = "admin",
   isSelectorDisabled = false,
-}: {
-  roles: Array<{ id: string; name: string }>;
-  defaultRole?: string;
-  isSelectorDisabled: boolean;
-}) => {
+  source,
+  onSuccess,
+}: SendInvitationFormProps) => {
   const { toast } = useToast();
   const router = useRouter();
 
@@ -52,6 +62,7 @@ export const SendInvitationForm = ({
     const formData = new FormData();
     formData.append("email", values.email);
     formData.append("role", values.roleId);
+    if (source) formData.append("source", source);
 
     try {
       const data = await sendInvite(formData);
@@ -82,7 +93,25 @@ export const SendInvitationForm = ({
           }
         });
       } else {
-        const invitationId = data?.data?.id || "";
+        const invitationId = data?.data?.id;
+        if (!invitationId) {
+          // A transport failure returns nothing and a rejection can come
+          // back as a bare `error` without an `errors` array; neither
+          // created an invitation, so neither is a success.
+          toast({
+            variant: "destructive",
+            title: "Oops! Something went wrong",
+            description:
+              typeof data?.error === "string"
+                ? data.error
+                : "The invitation could not be sent. Please try again.",
+          });
+          return;
+        }
+        if (onSuccess) {
+          onSuccess(invitationId);
+          return;
+        }
         router.push(`/invitations/check-details/?id=${invitationId}`);
       }
     } catch (_error) {
diff --git a/ui/components/onboarding/__tests__/onboarding-checkpoint-watcher-invite.test.tsx b/ui/components/onboarding/__tests__/onboarding-checkpoint-watcher-invite.test.tsx
new file mode 100644
index 0000000000..82893beab4
--- /dev/null
+++ b/ui/components/onboarding/__tests__/onboarding-checkpoint-watcher-invite.test.tsx
@@ -0,0 +1,132 @@
+import { render, screen } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+import { onboardingInviteMarkerKey } from "@/lib/onboarding/invite-marker";
+
+import { OnboardingCheckpointWatcher } from "../onboarding-checkpoint-watcher";
+
+// Tests set this before render to control the store `open` flag.
+let checkpointOpenState = false;
+
+vi.mock("next/navigation", () => ({
+  useRouter: () => ({ push: vi.fn() }),
+}));
+
+vi.mock("@/store/onboarding-sequence", () => ({
+  useOnboardingSequenceStore: {
+    getState: () => ({ startSequence: vi.fn() }),
+  },
+}));
+
+vi.mock("@/store/onboarding-checkpoint", () => ({
+  CHECKPOINT_MARKER: "prowler.onboarding.checkpoint",
+  useOnboardingCheckpointStore: Object.assign(
+    (selector: (state: { open: boolean }) => unknown) =>
+      selector({ open: checkpointOpenState }),
+    {
+      getState: () => ({ close: vi.fn() }),
+    },
+  ),
+}));
+
+vi.mock("../onboarding-invite-step", () => ({
+  OnboardingInviteStep: ({ onDone }: { onDone: () => void }) => (
+    <button type="button" onClick={onDone}>
+      Resolve invite step
+    </button>
+  ),
+}));
+
+const TENANT_ID = "3f6c2f1e-7b0a-4d5c-9a21-0c9f4f2a7b10";
+const OTHER_TENANT_ID = "8a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d";
+const MARKER_KEY = onboardingInviteMarkerKey(TENANT_ID) as string;
+
+const CHECKPOINT_TITLE = "Provider added — keep exploring?";
+
+describe("OnboardingCheckpointWatcher invite step", () => {
+  beforeEach(() => {
+    window.localStorage.clear();
+    checkpointOpenState = true;
+  });
+
+  it("offers the invite step before the checkpoint dialog and keeps the store open", async () => {
+    // Given
+    const user = userEvent.setup();
+    render(<OnboardingCheckpointWatcher tenantId={TENANT_ID} />);
+    // The step is loaded on demand, so it arrives a tick after render.
+    expect(
+      await screen.findByRole("button", { name: "Resolve invite step" }),
+    ).toBeInTheDocument();
+    expect(screen.queryByText(CHECKPOINT_TITLE)).not.toBeInTheDocument();
+
+    // When
+    await user.click(
+      screen.getByRole("button", { name: "Resolve invite step" }),
+    );
+
+    // Then
+    expect(await screen.findByText(CHECKPOINT_TITLE)).toBeInTheDocument();
+    expect(window.localStorage.getItem(MARKER_KEY)).toBe("true");
+  });
+
+  it("is off unless a deployment opts in", () => {
+    // When
+    render(<OnboardingCheckpointWatcher />);
+
+    // Then
+    expect(screen.getByText(CHECKPOINT_TITLE)).toBeInTheDocument();
+    expect(
+      screen.queryByRole("button", { name: "Resolve invite step" }),
+    ).not.toBeInTheDocument();
+  });
+
+  it("does not offer the step again once this browser saw it", () => {
+    // Given
+    window.localStorage.setItem(MARKER_KEY, "true");
+
+    // When
+    render(<OnboardingCheckpointWatcher tenantId={TENANT_ID} />);
+
+    // Then
+    expect(screen.getByText(CHECKPOINT_TITLE)).toBeInTheDocument();
+  });
+
+  it("renders nothing for the step while the checkpoint is not requested", () => {
+    // Given
+    checkpointOpenState = false;
+
+    // When
+    render(<OnboardingCheckpointWatcher tenantId={TENANT_ID} />);
+
+    // Then
+    expect(
+      screen.queryByRole("button", { name: "Resolve invite step" }),
+    ).not.toBeInTheDocument();
+    expect(screen.queryByText(CHECKPOINT_TITLE)).not.toBeInTheDocument();
+  });
+
+  it("offers the step again to another tenant of the same browser", async () => {
+    // Given — this browser already saw it for one tenant.
+    window.localStorage.setItem(MARKER_KEY, "true");
+
+    // When
+    render(<OnboardingCheckpointWatcher tenantId={OTHER_TENANT_ID} />);
+
+    // Then
+    expect(
+      await screen.findByRole("button", { name: "Resolve invite step" }),
+    ).toBeInTheDocument();
+  });
+
+  it("does not offer the step without a usable tenant", () => {
+    // When
+    render(<OnboardingCheckpointWatcher tenantId={null} />);
+
+    // Then
+    expect(screen.getByText(CHECKPOINT_TITLE)).toBeInTheDocument();
+    expect(
+      screen.queryByRole("button", { name: "Resolve invite step" }),
+    ).not.toBeInTheDocument();
+  });
+});
diff --git a/ui/components/onboarding/__tests__/onboarding-checkpoint-watcher.test.tsx b/ui/components/onboarding/__tests__/onboarding-checkpoint-watcher.test.tsx
index f30fca862d..98e80744ab 100644
--- a/ui/components/onboarding/__tests__/onboarding-checkpoint-watcher.test.tsx
+++ b/ui/components/onboarding/__tests__/onboarding-checkpoint-watcher.test.tsx
@@ -25,6 +25,11 @@ vi.mock("@/store/onboarding-sequence", () => ({
   },
 }));
 
+// The invite step is exercised in its own test; keep this one on the dialog.
+vi.mock("../onboarding-invite-step", () => ({
+  OnboardingInviteStep: () => null,
+}));
+
 vi.mock("@/store/onboarding-checkpoint", () => ({
   CHECKPOINT_MARKER: "prowler.onboarding.checkpoint",
   useOnboardingCheckpointStore: Object.assign(
diff --git a/ui/components/onboarding/__tests__/onboarding-invite-step.test.tsx b/ui/components/onboarding/__tests__/onboarding-invite-step.test.tsx
new file mode 100644
index 0000000000..403bee8e63
--- /dev/null
+++ b/ui/components/onboarding/__tests__/onboarding-invite-step.test.tsx
@@ -0,0 +1,223 @@
+import { act, render, screen, waitFor } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+import {
+  ONBOARDING_INVITE_STEP_EVENT,
+  type OnboardingInviteStepDetail,
+} from "@/lib/onboarding/onboarding-events";
+
+import { OnboardingInviteStep } from "../onboarding-invite-step";
+
+const { getRolesMock, sendInviteMock, toastMock } = vi.hoisted(() => ({
+  getRolesMock: vi.fn(),
+  sendInviteMock: vi.fn(),
+  toastMock: vi.fn(),
+}));
+
+vi.mock("next/navigation", () => ({
+  useRouter: () => ({ push: vi.fn() }),
+}));
+
+vi.mock("@/actions/onboarding/invite", () => ({
+  getOnboardingInviteRoles: getRolesMock,
+}));
+
+vi.mock("@/actions/invitations/invitation", () => ({
+  sendInvite: sendInviteMock,
+}));
+
+vi.mock("@/components/shadcn", async (importOriginal) => ({
+  ...(await importOriginal<typeof import("@/components/shadcn")>()),
+  useToast: () => ({ toast: toastMock }),
+}));
+
+// Radix Select does not open in jsdom; a native select keeps the test on the
+// form's behaviour rather than the dropdown's.
+vi.mock("@/components/shadcn/select/select", () => ({
+  Select: ({
+    value,
+    onValueChange,
+    disabled,
+    children,
+  }: {
+    value?: string;
+    onValueChange: (value: string) => void;
+    disabled?: boolean;
+    children: React.ReactNode;
+  }) => (
+    <select
+      aria-label="Select a role"
+      value={value ?? ""}
+      disabled={disabled}
+      onChange={(event) => onValueChange(event.target.value)}
+    >
+      <option value="">Select a role</option>
+      {children}
+    </select>
+  ),
+  SelectTrigger: () => null,
+  SelectValue: () => null,
+  SelectContent: ({ children }: { children: React.ReactNode }) => (
+    <>{children}</>
+  ),
+  SelectItem: ({
+    value,
+    children,
+  }: {
+    value: string;
+    children: React.ReactNode;
+  }) => <option value={value}>{children}</option>,
+}));
+
+const ROLES = [
+  { id: "11111111-1111-4111-8111-111111111111", name: "member" },
+  { id: "22222222-2222-4222-8222-222222222222", name: "admin" },
+];
+
+describe("OnboardingInviteStep", () => {
+  const outcomes: OnboardingInviteStepDetail[] = [];
+  const recordOutcome = (event: Event) => {
+    outcomes.push((event as CustomEvent<OnboardingInviteStepDetail>).detail);
+  };
+
+  beforeEach(() => {
+    outcomes.length = 0;
+    window.addEventListener(ONBOARDING_INVITE_STEP_EVENT, recordOutcome);
+    getRolesMock.mockReset().mockResolvedValue(ROLES);
+    sendInviteMock.mockReset().mockResolvedValue({ data: { id: "inv-1" } });
+    toastMock.mockReset();
+  });
+
+  afterEach(() => {
+    window.removeEventListener(ONBOARDING_INVITE_STEP_EVENT, recordOutcome);
+  });
+
+  it("announces the impression and renders the invitation form once roles load", async () => {
+    // When
+    render(<OnboardingInviteStep onDone={vi.fn()} />);
+
+    // Then
+    expect(outcomes).toEqual([{ outcome: "shown" }]);
+    expect(await screen.findByText("Invite your team")).toBeInTheDocument();
+    expect(
+      screen.getByRole("button", { name: /send invitation/i }),
+    ).toBeInTheDocument();
+    // The admin role is listed first so it is the natural pick.
+    const options = screen.getAllByRole("option").map((o) => o.textContent);
+    expect(options).toEqual(["Select a role", "admin", "member"]);
+  });
+
+  it("sends the invitation tagged for onboarding and resolves the step", async () => {
+    // Given
+    const user = userEvent.setup();
+    const onDone = vi.fn();
+    render(<OnboardingInviteStep onDone={onDone} />);
+    await screen.findByText("Invite your team");
+
+    // When
+    await user.type(screen.getByLabelText(/email/i), "teammate@company.com");
+    await user.selectOptions(screen.getByRole("combobox"), ROLES[1].id);
+    await user.click(screen.getByRole("button", { name: /send invitation/i }));
+
+    // Then
+    await waitFor(() => expect(onDone).toHaveBeenCalledTimes(1));
+    const formData = sendInviteMock.mock.calls[0]?.[0] as FormData;
+    expect(formData.get("email")).toBe("teammate@company.com");
+    expect(formData.get("role")).toBe(ROLES[1].id);
+    expect(formData.get("source")).toBe("onboarding");
+    expect(outcomes).toEqual([{ outcome: "shown" }, { outcome: "submitted" }]);
+  });
+
+  it("keeps the step open when the API rejects the invitation", async () => {
+    // Given
+    const user = userEvent.setup();
+    const onDone = vi.fn();
+    sendInviteMock.mockResolvedValue({
+      errors: [
+        {
+          detail: "This email has already been invited.",
+          source: { pointer: "/data/attributes/email" },
+        },
+      ],
+    });
+    render(<OnboardingInviteStep onDone={onDone} />);
+    await screen.findByText("Invite your team");
+
+    // When
+    await user.type(screen.getByLabelText(/email/i), "teammate@company.com");
+    await user.selectOptions(screen.getByRole("combobox"), ROLES[1].id);
+    await user.click(screen.getByRole("button", { name: /send invitation/i }));
+
+    // Then
+    expect(
+      await screen.findByText("This email has already been invited."),
+    ).toBeInTheDocument();
+    expect(onDone).not.toHaveBeenCalled();
+    expect(outcomes).toEqual([{ outcome: "shown" }]);
+  });
+
+  it("records a skip and resolves the step", async () => {
+    // Given
+    const user = userEvent.setup();
+    const onDone = vi.fn();
+    render(<OnboardingInviteStep onDone={onDone} />);
+    await screen.findByText("Invite your team");
+
+    // When
+    await user.click(screen.getByRole("button", { name: "Skip for now" }));
+
+    // Then
+    expect(outcomes.at(-1)).toEqual({ outcome: "skipped" });
+    expect(onDone).toHaveBeenCalledTimes(1);
+    expect(sendInviteMock).not.toHaveBeenCalled();
+  });
+
+  it("still lets the user skip when roles cannot be loaded", async () => {
+    // Given
+    const user = userEvent.setup();
+    const onDone = vi.fn();
+    getRolesMock.mockRejectedValue(new Error("roles unavailable"));
+    render(<OnboardingInviteStep onDone={onDone} />);
+    await screen.findByText("Invite your team");
+
+    // Then
+    expect(screen.getByText(/Roles could not be loaded/)).toBeInTheDocument();
+    expect(
+      screen.queryByRole("button", { name: /send invitation/i }),
+    ).not.toBeInTheDocument();
+
+    // When
+    await user.click(screen.getByRole("button", { name: "Skip for now" }));
+
+    // Then
+    expect(onDone).toHaveBeenCalledTimes(1);
+  });
+
+  it("falls back to the skip when the roles never arrive", async () => {
+    // Given — a request that never settles.
+    vi.useFakeTimers();
+    try {
+      getRolesMock.mockReturnValue(new Promise(() => {}));
+      render(<OnboardingInviteStep onDone={vi.fn()} />);
+      expect(screen.queryByText("Invite your team")).not.toBeInTheDocument();
+
+      // When — the step's own deadline passes.
+      await act(async () => {
+        await vi.advanceTimersByTimeAsync(5_000);
+      });
+
+      // Then
+      expect(screen.getByText("Invite your team")).toBeInTheDocument();
+      expect(screen.getByText(/Roles could not be loaded/)).toBeInTheDocument();
+      expect(
+        screen.queryByRole("button", { name: /send invitation/i }),
+      ).not.toBeInTheDocument();
+      expect(
+        screen.getByRole("button", { name: "Skip for now" }),
+      ).toBeInTheDocument();
+    } finally {
+      vi.useRealTimers();
+    }
+  });
+});
diff --git a/ui/components/onboarding/onboarding-checkpoint-watcher.tsx b/ui/components/onboarding/onboarding-checkpoint-watcher.tsx
index 1339b17f8c..6612b23993 100644
--- a/ui/components/onboarding/onboarding-checkpoint-watcher.tsx
+++ b/ui/components/onboarding/onboarding-checkpoint-watcher.tsx
@@ -1,8 +1,14 @@
 "use client";
 
+import dynamic from "next/dynamic";
 import { useRouter } from "next/navigation";
+import { useState } from "react";
 
 import { getOrderedFlows } from "@/lib/onboarding";
+import {
+  isOnboardingInviteHandled,
+  markOnboardingInviteHandled,
+} from "@/lib/onboarding/invite-marker";
 import {
   CHECKPOINT_MARKER,
   useOnboardingCheckpointStore,
@@ -11,6 +17,23 @@ import { useOnboardingSequenceStore } from "@/store/onboarding-sequence";
 
 import { OnboardingCheckpointDialog } from "./onboarding-checkpoint-dialog";
 
+// Loaded on demand: the step pulls the invitation form and its server
+// actions, which this module (re-exported by the shared barrel) must not
+// carry statically.
+const OnboardingInviteStep = dynamic(
+  () =>
+    import("./onboarding-invite-step").then(
+      (module) => module.OnboardingInviteStep,
+    ),
+  { ssr: false },
+);
+
+interface OnboardingCheckpointWatcherProps {
+  // Scopes the invite step's local marker: the offer is per tenant, not per
+  // browser. Without it the step is not offered.
+  tenantId?: string | null;
+}
+
 // Sequence begins at the flow after `add-provider` (the gate).
 const FIRST_FLOW_ID = "add-provider";
 
@@ -24,9 +47,14 @@ function markCheckpointHandled(): void {
 }
 
 // Layout-level watcher: renders the checkpoint dialog when the store `open` flag is set.
-export function OnboardingCheckpointWatcher() {
+export function OnboardingCheckpointWatcher({
+  tenantId = null,
+}: OnboardingCheckpointWatcherProps = {}) {
   const router = useRouter();
   const open = useOnboardingCheckpointStore((state) => state.open);
+  // Session flag: the marker is written on resolve, but a state change is
+  // what re-renders this component into the checkpoint dialog.
+  const [inviteResolved, setInviteResolved] = useState(false);
 
   const handleContinue = () => {
     markCheckpointHandled(); // before navigation to prevent re-open on re-render
@@ -48,6 +76,19 @@ export function OnboardingCheckpointWatcher() {
     useOnboardingCheckpointStore.getState().close();
   };
 
+  // "Invite your team" goes first, once per tenant, and leaves the store
+  // open, so the checkpoint dialog follows unchanged once it resolves.
+  if (open && !inviteResolved && !isOnboardingInviteHandled(tenantId)) {
+    return (
+      <OnboardingInviteStep
+        onDone={() => {
+          markOnboardingInviteHandled(tenantId);
+          setInviteResolved(true);
+        }}
+      />
+    );
+  }
+
   return (
     <OnboardingCheckpointDialog
       open={open}
diff --git a/ui/components/onboarding/onboarding-invite-dialog.tsx b/ui/components/onboarding/onboarding-invite-dialog.tsx
new file mode 100644
index 0000000000..7431d7c829
--- /dev/null
+++ b/ui/components/onboarding/onboarding-invite-dialog.tsx
@@ -0,0 +1,78 @@
+"use client";
+
+import { SendInvitationForm } from "@/components/invitations/workflow/forms/send-invitation-form";
+import { Button } from "@/components/shadcn";
+import { DialogFooter } from "@/components/shadcn/dialog";
+import { Modal } from "@/components/shadcn/modal/modal";
+import {
+  INVITATION_SOURCE,
+  type InvitationRoleOption,
+} from "@/types/onboarding-invite";
+
+interface OnboardingInviteDialogProps {
+  open: boolean;
+  roles: InvitationRoleOption[];
+  onSent: (invitationId: string) => void;
+  onSkip: () => void;
+}
+
+const DEFAULT_ROLE_NAME = "admin";
+
+// Roles are listed with the admin one first so it is the natural pick for a
+// first teammate; the form itself keeps the selection required.
+const orderRoles = (roles: InvitationRoleOption[]) =>
+  [...roles].sort((a, b) =>
+    a.name.toLowerCase() === DEFAULT_ROLE_NAME
+      ? -1
+      : b.name.toLowerCase() === DEFAULT_ROLE_NAME
+        ? 1
+        : 0,
+  );
+
+// "Invite your team", offered once right after the first provider is
+// connected: permissions on the cloud were just granted and the value of
+// sharing the first scan is fresh. Reuses the members-page form, tagged as an
+// onboarding invitation.
+export function OnboardingInviteDialog({
+  open,
+  roles,
+  onSent,
+  onSkip,
+}: OnboardingInviteDialogProps) {
+  const hasRoles = roles.length > 0;
+
+  return (
+    <Modal
+      open={open}
+      title="Invite your team"
+      description="Security is a team effort. Invite a teammate now so they see the first scan with you. You can skip this."
+      size="lg"
+      // Overlay/Escape/X counts as a skip — the caller persists the marker once.
+      onOpenChange={(next) => {
+        if (!next) onSkip();
+      }}
+    >
+      <div className="flex flex-col gap-4">
+        {hasRoles ? (
+          <SendInvitationForm
+            roles={orderRoles(roles)}
+            isSelectorDisabled={false}
+            source={INVITATION_SOURCE.ONBOARDING}
+            onSuccess={onSent}
+          />
+        ) : (
+          <p className="text-text-neutral-secondary text-sm">
+            Roles could not be loaded right now. You can invite your team later
+            from the Invitations page.
+          </p>
+        )}
+        <DialogFooter>
+          {/* Outline matches the app's modal secondary action (e.g. Launch Scan's Cancel). */}
+          <Button type="button" variant="outline" onClick={onSkip}>
+            Skip for now
+          </Button>
+        </DialogFooter>
+      </div>
+    </Modal>
+  );
+}
diff --git a/ui/components/onboarding/onboarding-invite-step.tsx b/ui/components/onboarding/onboarding-invite-step.tsx
new file mode 100644
index 0000000000..6f7fc2e7a9
--- /dev/null
+++ b/ui/components/onboarding/onboarding-invite-step.tsx
@@ -0,0 +1,73 @@
+"use client";
+
+import { useState } from "react";
+
+import { getOnboardingInviteRoles } from "@/actions/onboarding/invite";
+import { useMountEffect } from "@/hooks/use-mount-effect";
+import {
+  dispatchOnboardingInviteStep,
+  ONBOARDING_STEP_OUTCOME,
+} from "@/lib/onboarding/onboarding-events";
+import type { InvitationRoleOption } from "@/types/onboarding-invite";
+
+import { OnboardingInviteDialog } from "./onboarding-invite-dialog";
+
+interface OnboardingInviteStepProps {
+  onDone: () => void;
+}
+
+// Roles that have not arrived by then count as unavailable, so a request
+// that never answers cannot hold the checkpoint behind an empty step.
+const ROLES_TIMEOUT_MS = 5_000;
+
+// Mounted only while the step is showing: loads the roles once, announces
+// the impression once, and resolves through a sent invitation or a skip.
+export function OnboardingInviteStep({ onDone }: OnboardingInviteStepProps) {
+  // `null` until the roles settle: the invitation form takes its default
+  // role from the list at mount, so the dialog renders once the list is known.
+  const [roles, setRoles] = useState<InvitationRoleOption[] | null>(null);
+
+  useMountEffect(() => {
+    dispatchOnboardingInviteStep({ outcome: ONBOARDING_STEP_OUTCOME.SHOWN });
+    let active = true;
+    let timer: ReturnType<typeof setTimeout> | undefined;
+    // First answer wins: a late response or a timer after it is ignored.
+    const settle = (loaded: InvitationRoleOption[]) => {
+      if (!active) return;
+      active = false;
+      clearTimeout(timer);
+      setRoles(loaded);
+    };
+    // Without roles the dialog offers only the skip, so the checkpoint is
+    // never blocked: not by a failed read, not by one that never answers.
+    timer = setTimeout(() => settle([]), ROLES_TIMEOUT_MS);
+    getOnboardingInviteRoles()
+      .then(settle)
+      .catch(() => settle([]));
+    return () => {
+      active = false;
+      clearTimeout(timer);
+    };
+  });
+
+  if (roles === null) return null;
+
+  return (
+    <OnboardingInviteDialog
+      open
+      roles={roles}
+      onSent={() => {
+        dispatchOnboardingInviteStep({
+          outcome: ONBOARDING_STEP_OUTCOME.SUBMITTED,
+        });
+        onDone();
+      }}
+      onSkip={() => {
+        dispatchOnboardingInviteStep({
+          outcome: ONBOARDING_STEP_OUTCOME.SKIPPED,
+        });
+        onDone();
+      }}
+    />
+  );
+}
diff --git a/ui/lib/onboarding/README.md b/ui/lib/onboarding/README.md
index 99f632e2bf..390466e429 100644
--- a/ui/lib/onboarding/README.md
+++ b/ui/lib/onboarding/README.md
@@ -21,6 +21,7 @@ server answer, not localStorage, decides whether it is still owed.
 | Mandatory new-user gate                | `ui/components/onboarding/onboarding-gate.tsx`                        |
 | Profile step in front of the gate      | `ui/components/onboarding/onboarding-profile-{gate,modal}.tsx`        |
 | Step outcome events (window)           | `ui/lib/onboarding/onboarding-events.ts`                              |
+| Invite step before the checkpoint      | `ui/components/onboarding/onboarding-invite-{step,dialog}.tsx`        |
 | Manual replay list                     | `ui/components/ui/user-nav/user-nav.tsx`                              |
 
 ## How the guided sequence works
@@ -95,3 +96,18 @@ as a `prowler:onboarding-profile-step` window event
 (`dispatchOnboardingProfileStep`). The step has no listener of its own: a
 deployment that wants to observe it subscribes from outside, so the onboarding
 stays free of tracking dependencies.
+
+## Invite step
+
+The first time the checkpoint opens (right after the first provider is
+connected), `OnboardingCheckpointWatcher` renders `OnboardingInviteStep` before
+the checkpoint dialog: the members-page `SendInvitationForm`, tagged
+`source=onboarding` for the API, plus a "Skip for now" action. If the roles
+cannot be loaded, or have not arrived after five seconds, only the skip is
+offered, so the checkpoint is never blocked. The store stays
+`open` while the step shows, so the checkpoint dialog follows unchanged once it
+resolves. A per-tenant localStorage marker (`prowler.onboarding.invite.<tenantId>`)
+keeps it to one offer; without a usable `tenantId` the step is not offered.
+
+Outcomes (`shown`, `submitted`, `skipped`) are announced as the
+`prowler:onboarding-invite-step` window event (`dispatchOnboardingInviteStep`).
diff --git a/ui/lib/onboarding/invite-marker.ts b/ui/lib/onboarding/invite-marker.ts
new file mode 100644
index 0000000000..4fac2c5acb
--- /dev/null
+++ b/ui/lib/onboarding/invite-marker.ts
@@ -0,0 +1,48 @@
+// Durable "this browser already saw the invite step" memory, mirroring the
+// checkpoint marker: the step is offered once per tenant onboarding.
+//
+// The key carries the tenant, like the profile marker, because the offer is
+// tenant-scoped: a user who saw it for one tenant must still see it when they
+// onboard another.
+const ONBOARDING_INVITE_MARKER_PREFIX = "prowler.onboarding.invite";
+
+// Tenant ids are UUIDs; anything else is refused rather than concatenated
+// into a storage key.
+const TENANT_ID_PATTERN =
+  /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+
+export function onboardingInviteMarkerKey(
+  tenantId: string | null | undefined,
+): string | null {
+  if (!tenantId || !TENANT_ID_PATTERN.test(tenantId)) return null;
+  return `${ONBOARDING_INVITE_MARKER_PREFIX}.${tenantId.toLowerCase()}`;
+}
+
+export function isOnboardingInviteHandled(
+  tenantId: string | null | undefined,
+): boolean {
+  if (typeof window === "undefined") return true;
+  const key = onboardingInviteMarkerKey(tenantId);
+  // Without a usable tenant the step cannot be attributed to an onboarding,
+  // so it is not offered rather than offered to everyone.
+  if (!key) return true;
+  try {
+    return window.localStorage.getItem(key) !== null;
+  } catch {
+    // Unreadable storage must not re-open the step forever: treat as handled.
+    return true;
+  }
+}
+
+export function markOnboardingInviteHandled(
+  tenantId: string | null | undefined,
+): void {
+  if (typeof window === "undefined") return;
+  const key = onboardingInviteMarkerKey(tenantId);
+  if (!key) return;
+  try {
+    window.localStorage.setItem(key, "true");
+  } catch {
+    // Non-fatal: a re-shown step beats a thrown render.
+  }
+}
diff --git a/ui/types/onboarding-invite.ts b/ui/types/onboarding-invite.ts
new file mode 100644
index 0000000000..e1bcdec4d6
--- /dev/null
+++ b/ui/types/onboarding-invite.ts
@@ -0,0 +1,11 @@
+// Query param the API can read to tell where an invitation was sent from.
+export const INVITATION_SOURCE_PARAM = "source";
+
+export const INVITATION_SOURCE = {
+  ONBOARDING: "onboarding",
+} as const;
+
+export interface InvitationRoleOption {
+  id: string;
+  name: string;
+}

From f382400037642185d3fbe1fa0580befb8ee06b12 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Thu, 17 Sep 2026 12:12:14 +0200
Subject: [PATCH 69/77] fix(invitations): expire lapsed invitations on
 re-invite (#12831)

---
 ...psed-invitations-block-re-invites.fixed.md |   1 +
 api/src/backend/api/filters.py                |  16 +-
 api/src/backend/api/models.py                 |   9 +
 api/src/backend/api/tests/test_views.py       | 236 ++++++++++++++++++
 api/src/backend/api/v1/serializers.py         |  17 +-
 api/src/backend/api/v1/views.py               |   4 +-
 ...nvitation-row-actions-non-pending.fixed.md |   1 +
 .../table/data-table-row-actions.test.tsx     |  60 +++++
 .../table/data-table-row-actions.tsx          |  21 +-
 9 files changed, 346 insertions(+), 19 deletions(-)
 create mode 100644 api/changelog.d/lapsed-invitations-block-re-invites.fixed.md
 create mode 100644 ui/changelog.d/invitation-row-actions-non-pending.fixed.md
 create mode 100644 ui/components/invitations/table/data-table-row-actions.test.tsx

diff --git a/api/changelog.d/lapsed-invitations-block-re-invites.fixed.md b/api/changelog.d/lapsed-invitations-block-re-invites.fixed.md
new file mode 100644
index 0000000000..29a8e99235
--- /dev/null
+++ b/api/changelog.d/lapsed-invitations-block-re-invites.fixed.md
@@ -0,0 +1 @@
+Lapsed pending invitations are reported as expired and no longer block a new invitation for the same email
diff --git a/api/src/backend/api/filters.py b/api/src/backend/api/filters.py
index 8a9f37c366..2b3a4b333a 100644
--- a/api/src/backend/api/filters.py
+++ b/api/src/backend/api/filters.py
@@ -1440,8 +1440,20 @@ class InvitationFilter(FilterSet):
     inserted_at = DateFilter(field_name="inserted_at", lookup_expr="date")
     updated_at = DateFilter(field_name="updated_at", lookup_expr="date")
     expires_at = DateFilter(field_name="expires_at", lookup_expr="date")
-    state = ChoiceFilter(choices=Invitation.State.choices)
-    state__in = ChoiceInFilter(choices=Invitation.State.choices, lookup_expr="in")
+    state = ChoiceFilter(choices=Invitation.State.choices, method="filter_state")
+    state__in = ChoiceInFilter(
+        choices=Invitation.State.choices, lookup_expr="in", method="filter_state_in"
+    )
+
+    def filter_state(self, queryset, name, value):
+        return self.filter_state_in(queryset, name, [value])
+
+    def filter_state_in(self, queryset, name, value):
+        lapsed = Invitation.lapsed_q()
+        query = Q(state__in=value) & ~lapsed
+        if Invitation.State.EXPIRED in value:
+            query |= lapsed
+        return queryset.filter(query)
 
     class Meta:
         model = Invitation
diff --git a/api/src/backend/api/models.py b/api/src/backend/api/models.py
index 4f1e963c3d..ef19712f94 100644
--- a/api/src/backend/api/models.py
+++ b/api/src/backend/api/models.py
@@ -1380,6 +1380,15 @@ class Invitation(RowLevelSecurityProtectedModel):
             self.email = self.email.strip().lower()
         super().save(*args, **kwargs)
 
+    @classmethod
+    def lapsed_q(cls):
+        """Pending invitations whose expiry date has already passed."""
+        return Q(state=cls.State.PENDING, expires_at__lte=datetime.now(UTC))
+
+    @property
+    def is_lapsed(self):
+        return self.state == self.State.PENDING and self.expires_at <= datetime.now(UTC)
+
     class Meta(RowLevelSecurityProtectedModel.Meta):
         db_table = "invitations"
 
diff --git a/api/src/backend/api/tests/test_views.py b/api/src/backend/api/tests/test_views.py
index a881a7becf..37b4a87729 100644
--- a/api/src/backend/api/tests/test_views.py
+++ b/api/src/backend/api/tests/test_views.py
@@ -8784,6 +8784,190 @@ class TestInvitationViewSet:
             user.id
         )
 
+    @staticmethod
+    def _invitation_create_payload(email, role):
+        return json.dumps(
+            {
+                "data": {
+                    "type": "invitations",
+                    "attributes": {"email": email},
+                    "relationships": {
+                        "roles": {"data": [{"type": "roles", "id": str(role.id)}]}
+                    },
+                }
+            }
+        )
+
+    @staticmethod
+    def _create_lapsed_invitation(email, tenant, inviter):
+        return Invitation.objects.create(
+            email=email,
+            state=Invitation.State.PENDING,
+            expires_at=datetime.now(UTC) - timedelta(days=1),
+            inviter=inviter,
+            tenant=tenant,
+        )
+
+    def test_invitations_create_with_lapsed_pending_invitation_for_same_email(
+        self,
+        authenticated_client,
+        create_test_user,
+        tenants_fixture,
+        invitations_fixture,
+        roles_fixture,
+    ):
+        lapsed_invitation, expired_invitation = invitations_fixture
+        lapsed_invitation.expires_at = datetime.now(UTC) - timedelta(days=1)
+        lapsed_invitation.save()
+        other_email_lapsed_invitation = self._create_lapsed_invitation(
+            "other@prowler.com", tenants_fixture[0], create_test_user
+        )
+
+        response = authenticated_client.post(
+            reverse("invitation-list"),
+            data=self._invitation_create_payload(
+                lapsed_invitation.email, roles_fixture[0]
+            ),
+            content_type="application/vnd.api+json",
+        )
+
+        assert response.status_code == status.HTTP_201_CREATED
+        new_invitation = Invitation.objects.get(id=response.json()["data"]["id"])
+        assert new_invitation.email == lapsed_invitation.email
+        assert new_invitation.state == Invitation.State.PENDING
+        lapsed_invitation.refresh_from_db()
+        assert lapsed_invitation.state == Invitation.State.EXPIRED
+        expired_invitation.refresh_from_db()
+        assert expired_invitation.state == Invitation.State.EXPIRED
+        other_email_lapsed_invitation.refresh_from_db()
+        assert other_email_lapsed_invitation.state == Invitation.State.PENDING
+
+    def test_invitations_create_with_active_pending_invitation_for_same_email(
+        self,
+        authenticated_client,
+        create_test_user,
+        tenants_fixture,
+        invitations_fixture,
+        roles_fixture,
+    ):
+        active_invitation, _ = invitations_fixture
+        self._create_lapsed_invitation(
+            active_invitation.email, tenants_fixture[0], create_test_user
+        )
+        invitation_count = Invitation.objects.count()
+
+        response = authenticated_client.post(
+            reverse("invitation-list"),
+            data=self._invitation_create_payload(
+                active_invitation.email, roles_fixture[0]
+            ),
+            content_type="application/vnd.api+json",
+        )
+
+        assert response.status_code == status.HTTP_400_BAD_REQUEST
+        assert (
+            response.json()["errors"][0]["source"]["pointer"]
+            == "/data/attributes/email"
+        )
+        assert Invitation.objects.count() == invitation_count
+        active_invitation.refresh_from_db()
+        assert active_invitation.state == Invitation.State.PENDING
+
+    def test_invitations_create_ignores_pending_invitations_from_other_tenants(
+        self, authenticated_client, create_test_user, tenants_fixture, roles_fixture
+    ):
+        email = "cross_tenant@prowler.com"
+        other_tenant = tenants_fixture[1]
+        other_tenant_lapsed_invitation = self._create_lapsed_invitation(
+            email, other_tenant, create_test_user
+        )
+        Invitation.objects.create(
+            email=email, inviter=create_test_user, tenant=other_tenant
+        )
+
+        response = authenticated_client.post(
+            reverse("invitation-list"),
+            data=self._invitation_create_payload(email, roles_fixture[0]),
+            content_type="application/vnd.api+json",
+        )
+
+        assert response.status_code == status.HTTP_201_CREATED
+        other_tenant_lapsed_invitation.refresh_from_db()
+        assert other_tenant_lapsed_invitation.state == Invitation.State.PENDING
+
+    def test_invitations_report_lapsed_pending_invitation_as_expired(
+        self,
+        authenticated_client,
+        create_test_user,
+        tenants_fixture,
+        invitations_fixture,
+    ):
+        active_invitation, expired_invitation = invitations_fixture
+        lapsed_invitation = self._create_lapsed_invitation(
+            "lapsed@prowler.com", tenants_fixture[0], create_test_user
+        )
+
+        list_response = authenticated_client.get(reverse("invitation-list"))
+        retrieve_response = authenticated_client.get(
+            reverse("invitation-detail", kwargs={"pk": lapsed_invitation.id})
+        )
+
+        assert list_response.status_code == status.HTTP_200_OK
+        assert retrieve_response.status_code == status.HTTP_200_OK
+        assert {
+            invitation["id"]: invitation["attributes"]["state"]
+            for invitation in list_response.json()["data"]
+        } == {
+            str(active_invitation.id): Invitation.State.PENDING.value,
+            str(expired_invitation.id): Invitation.State.EXPIRED.value,
+            str(lapsed_invitation.id): Invitation.State.EXPIRED.value,
+        }
+        assert (
+            retrieve_response.json()["data"]["attributes"]["state"]
+            == Invitation.State.EXPIRED.value
+        )
+
+    @pytest.mark.parametrize(
+        "filter_name, filter_value, expected_invitations",
+        [
+            ("state", "pending", {"active"}),
+            ("state", "expired", {"expired", "lapsed"}),
+            ("state", "accepted", set()),
+            ("state__in", "pending", {"active"}),
+            ("state__in", "expired", {"expired", "lapsed"}),
+            ("state__in", "pending,expired", {"active", "expired", "lapsed"}),
+            ("state__in", "accepted,revoked", set()),
+        ],
+    )
+    def test_invitations_filter_state_treats_lapsed_pending_as_expired(
+        self,
+        authenticated_client,
+        create_test_user,
+        tenants_fixture,
+        invitations_fixture,
+        filter_name,
+        filter_value,
+        expected_invitations,
+    ):
+        active_invitation, expired_invitation = invitations_fixture
+        lapsed_invitation = self._create_lapsed_invitation(
+            "lapsed@prowler.com", tenants_fixture[0], create_test_user
+        )
+        invitation_ids = {
+            "active": str(active_invitation.id),
+            "expired": str(expired_invitation.id),
+            "lapsed": str(lapsed_invitation.id),
+        }
+
+        response = authenticated_client.get(
+            reverse("invitation-list"), {f"filter[{filter_name}]": filter_value}
+        )
+
+        assert response.status_code == status.HTTP_200_OK
+        assert {invitation["id"] for invitation in response.json()["data"]} == {
+            invitation_ids[name] for name in expected_invitations
+        }
+
     @pytest.mark.parametrize(
         "email",
         [
@@ -8791,8 +8975,10 @@ class TestInvitationViewSet:
             "invalid_email@",
             # There is a pending invitation with this email
             "testing@prowler.com",
+            "TESTING@prowler.com",
             # User is already a member of the tenant
             TEST_USER,
+            TEST_USER.upper(),
         ],
     )
     def test_invitations_create_invalid_email(
@@ -9047,6 +9233,56 @@ class TestInvitationViewSet:
             == "This invitation cannot be revoked."
         )
 
+    def test_invitations_delete_lapsed_invitation(
+        self, authenticated_client, invitations_fixture
+    ):
+        invitation, *_ = invitations_fixture
+        invitation.expires_at = datetime.now(UTC) - timedelta(days=1)
+        invitation.save()
+
+        response = authenticated_client.delete(
+            reverse("invitation-detail", kwargs={"pk": str(invitation.id)})
+        )
+
+        assert response.status_code == status.HTTP_400_BAD_REQUEST
+        assert (
+            response.json()["errors"][0]["detail"]
+            == "This invitation cannot be revoked."
+        )
+        invitation.refresh_from_db()
+        assert invitation.state == Invitation.State.PENDING
+
+    def test_invitations_partial_update_lapsed_invitation(
+        self, authenticated_client, invitations_fixture
+    ):
+        invitation, *_ = invitations_fixture
+        invitation.expires_at = datetime.now(UTC) - timedelta(days=1)
+        invitation.save()
+        data = {
+            "data": {
+                "id": str(invitation.id),
+                "type": "invitations",
+                "attributes": {
+                    "email": invitation.email,
+                    "expires_at": self.TOMORROW_ISO,
+                },
+            }
+        }
+
+        response = authenticated_client.patch(
+            reverse("invitation-detail", kwargs={"pk": str(invitation.id)}),
+            data=json.dumps(data),
+            content_type="application/vnd.api+json",
+        )
+
+        assert response.status_code == status.HTTP_400_BAD_REQUEST
+        assert (
+            response.json()["errors"][0]["detail"]
+            == "This invitation cannot be updated."
+        )
+        invitation.refresh_from_db()
+        assert invitation.is_lapsed
+
     def test_invitations_accept_invitation_new_user(self, client, invitations_fixture):
         invitation, *_ = invitations_fixture
 
diff --git a/api/src/backend/api/v1/serializers.py b/api/src/backend/api/v1/serializers.py
index 663f199339..639ddade61 100644
--- a/api/src/backend/api/v1/serializers.py
+++ b/api/src/backend/api/v1/serializers.py
@@ -2150,6 +2150,12 @@ class InvitationSerializer(RLSSerializer):
         if tenant_id is not None:
             self.fields["roles"].queryset = Role.objects.filter(tenant_id=tenant_id)
 
+    def to_representation(self, instance):
+        data = super().to_representation(instance)
+        if instance.is_lapsed:
+            data["state"] = Invitation.State.EXPIRED.value
+        return data
+
     class Meta:
         model = Invitation
         fields = [
@@ -2176,6 +2182,7 @@ class InvitationBaseWriteSerializer(BaseWriteSerializer):
             self.fields["roles"].queryset = Role.objects.filter(tenant_id=tenant_id)
 
     def validate_email(self, value):
+        value = value.strip().lower()
         user = User.objects.filter(email=value).first()
         tenant_id = self.context["tenant_id"]
         if user and Membership.objects.filter(user=user, tenant=tenant_id).exists():
@@ -2183,9 +2190,13 @@ class InvitationBaseWriteSerializer(BaseWriteSerializer):
                 "The user may already be a member of the tenant or there was an issue with the "
                 "email provided."
             )
-        if Invitation.objects.filter(
-            email=value, state=Invitation.State.PENDING
-        ).exists():
+        pending_invitations = Invitation.objects.filter(
+            tenant_id=tenant_id, email=value, state=Invitation.State.PENDING
+        )
+        pending_invitations.filter(Invitation.lapsed_q()).update(
+            state=Invitation.State.EXPIRED
+        )
+        if pending_invitations.filter(expires_at__gt=datetime.now(UTC)).exists():
             raise ValidationError(
                 "Unable to process your request. Please check the information provided and "
                 "try again."
diff --git a/api/src/backend/api/v1/views.py b/api/src/backend/api/v1/views.py
index df89a69523..8839fcc686 100644
--- a/api/src/backend/api/v1/views.py
+++ b/api/src/backend/api/v1/views.py
@@ -4476,7 +4476,7 @@ class InvitationViewSet(BaseRLSViewSet):
 
     def partial_update(self, request, *args, **kwargs):
         instance = self.get_object()
-        if instance.state != Invitation.State.PENDING:
+        if instance.state != Invitation.State.PENDING or instance.is_lapsed:
             raise ValidationError(detail="This invitation cannot be updated.")
         serializer = self.get_serializer(
             instance,
@@ -4490,7 +4490,7 @@ class InvitationViewSet(BaseRLSViewSet):
 
     def destroy(self, request, *args, **kwargs):
         instance = self.get_object()
-        if instance.state != Invitation.State.PENDING:
+        if instance.state != Invitation.State.PENDING or instance.is_lapsed:
             raise ValidationError(detail="This invitation cannot be revoked.")
         instance.state = Invitation.State.REVOKED
         instance.save()
diff --git a/ui/changelog.d/invitation-row-actions-non-pending.fixed.md b/ui/changelog.d/invitation-row-actions-non-pending.fixed.md
new file mode 100644
index 0000000000..dda0527b0d
--- /dev/null
+++ b/ui/changelog.d/invitation-row-actions-non-pending.fixed.md
@@ -0,0 +1 @@
+Edit and Revoke actions are disabled for expired and revoked invitations
diff --git a/ui/components/invitations/table/data-table-row-actions.test.tsx b/ui/components/invitations/table/data-table-row-actions.test.tsx
new file mode 100644
index 0000000000..991b6b5974
--- /dev/null
+++ b/ui/components/invitations/table/data-table-row-actions.test.tsx
@@ -0,0 +1,60 @@
+import { Row } from "@tanstack/react-table";
+import { render, screen } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { describe, expect, it, vi } from "vitest";
+
+vi.mock("next/navigation", () => ({
+  useRouter: () => ({ push: vi.fn() }),
+}));
+
+vi.mock("../forms", () => ({
+  DeleteForm: () => <div data-testid="delete-form" />,
+  EditForm: () => <div data-testid="edit-form" />,
+}));
+
+import { InvitationProps } from "@/types";
+
+import { DataTableRowActions } from "./data-table-row-actions";
+
+const createRow = (state: string) =>
+  ({
+    original: {
+      id: "invitation-1",
+      attributes: { email: "jane@example.com", state },
+      relationships: { inviter: { data: { type: "users", id: "user-1" } } },
+    },
+  }) as unknown as Row<InvitationProps>;
+
+const openMenu = async (user: ReturnType<typeof userEvent.setup>) => {
+  await user.click(screen.getByRole("button", { name: "Open actions menu" }));
+};
+
+const getMenuItem = (label: string) =>
+  screen.getByText(label).closest("[role='menuitem']");
+
+describe("DataTableRowActions (invitations)", () => {
+  it("enables Edit and Revoke for a pending invitation", async () => {
+    const user = userEvent.setup();
+    render(<DataTableRowActions row={createRow("pending")} />);
+
+    await openMenu(user);
+
+    expect(getMenuItem("Edit Invitation")).not.toHaveAttribute("data-disabled");
+    expect(getMenuItem("Revoke Invitation")).not.toHaveAttribute(
+      "data-disabled",
+    );
+  });
+
+  it.each(["accepted", "expired", "revoked"])(
+    "disables Edit and Revoke for a %s invitation",
+    async (state) => {
+      const user = userEvent.setup();
+      render(<DataTableRowActions row={createRow(state)} />);
+
+      await openMenu(user);
+
+      expect(getMenuItem("Edit Invitation")).toHaveAttribute("data-disabled");
+      expect(getMenuItem("Revoke Invitation")).toHaveAttribute("data-disabled");
+    },
+  );
+});
diff --git a/ui/components/invitations/table/data-table-row-actions.tsx b/ui/components/invitations/table/data-table-row-actions.tsx
index a0ef693279..b2085fc9b3 100644
--- a/ui/components/invitations/table/data-table-row-actions.tsx
+++ b/ui/components/invitations/table/data-table-row-actions.tsx
@@ -11,26 +11,23 @@ import {
   ActionDropdownItem,
 } from "@/components/shadcn/dropdown";
 import { Modal } from "@/components/shadcn/modal";
+import { InvitationProps } from "@/types";
 
 import { DeleteForm, EditForm } from "../forms";
 
-interface DataTableRowActionsProps<InvitationProps> {
+interface DataTableRowActionsProps {
   row: Row<InvitationProps>;
   roles?: { id: string; name: string }[];
 }
 
-export function DataTableRowActions<InvitationProps>({
-  row,
-  roles,
-}: DataTableRowActionsProps<InvitationProps>) {
+export function DataTableRowActions({ row, roles }: DataTableRowActionsProps) {
   const router = useRouter();
   const [isEditOpen, setIsEditOpen] = useState(false);
   const [isDeleteOpen, setIsDeleteOpen] = useState(false);
-  const invitationId = (row.original as { id: string }).id;
-  const invitationEmail = (row.original as any).attributes?.email;
-  const invitationRole = (row.original as any).relationships?.role?.attributes
-    ?.name;
-  const invitationAccepted = (row.original as any).attributes?.state;
+  const invitationId = row.original.id;
+  const invitationEmail = row.original.attributes.email;
+  const invitationRole = row.original.relationships.role?.attributes?.name;
+  const isInvitationPending = row.original.attributes.state === "pending";
 
   return (
     <>
@@ -69,7 +66,7 @@ export function DataTableRowActions<InvitationProps>({
             icon={<Pencil />}
             label="Edit Invitation"
             onSelect={() => setIsEditOpen(true)}
-            disabled={invitationAccepted === "accepted"}
+            disabled={!isInvitationPending}
           />
           <ActionDropdownDangerZone>
             <ActionDropdownItem
@@ -77,7 +74,7 @@ export function DataTableRowActions<InvitationProps>({
               label="Revoke Invitation"
               destructive
               onSelect={() => setIsDeleteOpen(true)}
-              disabled={invitationAccepted === "accepted"}
+              disabled={!isInvitationPending}
             />
           </ActionDropdownDangerZone>
         </ActionDropdown>

From d0d29108e0f9ed310e95edafb03cfc938fb689aa Mon Sep 17 00:00:00 2001
From: Haitao Zheng <h@tzheng.dev>
Date: Thu, 17 Sep 2026 19:19:11 +0800
Subject: [PATCH 70/77] fix(sdk): report all-users 2sv override failures
 (#12700)

---
 ...leworkspace-2sv-all-users-overrides.fixed.md |  1 +
 .../security_2sv_enforced.py                    | 17 +----------------
 .../security_2sv_enforced_test.py               | 10 ++++------
 3 files changed, 6 insertions(+), 22 deletions(-)
 create mode 100644 prowler/changelog.d/googleworkspace-2sv-all-users-overrides.fixed.md

diff --git a/prowler/changelog.d/googleworkspace-2sv-all-users-overrides.fixed.md b/prowler/changelog.d/googleworkspace-2sv-all-users-overrides.fixed.md
new file mode 100644
index 0000000000..1283ac91ad
--- /dev/null
+++ b/prowler/changelog.d/googleworkspace-2sv-all-users-overrides.fixed.md
@@ -0,0 +1 @@
+`security_2sv_enforced` reports domain-wide 2-Step Verification failures as FAIL even when every failing setting is overridden for a group or organizational unit
diff --git a/prowler/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced.py b/prowler/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced.py
index e5bf69c5ca..3c12091f81 100644
--- a/prowler/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced.py
+++ b/prowler/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced.py
@@ -8,7 +8,6 @@ from prowler.providers.googleworkspace.services.security.lib.durations import (
     parse_duration_seconds,
 )
 from prowler.providers.googleworkspace.services.security.lib.scope import (
-    failures_shadowed_by_overrides,
     override_caveat,
     unevaluable_reason,
 )
@@ -145,23 +144,9 @@ class security_2sv_enforced(Check):
                     )
                 )
 
-            failing_settings = frozenset(setting for setting, _ in issues)
             reasons = "; ".join(text for _, text in issues)
 
-            if issues and failures_shadowed_by_overrides(policies, failing_settings):
-                # The audited scope (e.g. the admin group of 4.1.1.1) may get
-                # the overriding value, which the Policy API does not expose,
-                # so the domain-wide failure cannot be confirmed for it.
-                report.status = "MANUAL"
-                report.status_extended = (
-                    f"2-Step Verification is not enforced as required in the "
-                    f"domain-wide policy of {domain}: {reasons}. However, every "
-                    f"failing setting is also overridden for at least one group "
-                    f"or organizational unit, so the audited scope may be "
-                    f"configured correctly. Review those overrides in the Admin "
-                    f"console."
-                )
-            elif issues:
+            if issues:
                 report.status = "FAIL"
                 report.status_extended = (
                     f"2-Step Verification is not enforced as required in domain "
diff --git a/tests/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced_test.py b/tests/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced_test.py
index 1da5b1bcc8..0c317a1be2 100644
--- a/tests/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced_test.py
+++ b/tests/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced_test.py
@@ -224,8 +224,8 @@ class TestSecurity2svEnforced:
         assert "trust their device" in findings[0].status_extended
         assert "also overridden" in findings[0].status_extended
 
-    def test_manual_when_every_failing_setting_is_overridden(self):
-        """The overriding value is not exposed, so the failure is unconfirmed"""
+    def test_fail_when_every_failing_setting_is_overridden(self):
+        """The all-users requirement still fails for users outside the override"""
         findings = run_check(
             **{
                 **COMPLIANT,
@@ -235,11 +235,9 @@ class TestSecurity2svEnforced:
         )
 
         assert len(findings) == 1
-        assert findings[0].status == "MANUAL"
+        assert findings[0].status == "FAIL"
         assert "trust their device" in findings[0].status_extended
-        assert "every failing setting is also overridden" in (
-            findings[0].status_extended
-        )
+        assert "also overridden" in findings[0].status_extended
 
     def test_fail_when_only_some_failing_settings_are_overridden(self):
         """A failure no override reaches is still proven for the whole domain"""

From bbb297aee7f7ef4dc5742c9336025f02531bb257 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Tom=C3=A1s=20Sebasti=C3=A1n=20Tobio?=
 <89701146+tomitobio@users.noreply.github.com>
Date: Thu, 17 Sep 2026 08:31:08 -0300
Subject: [PATCH 71/77] feat(providers/huaweicloud): add
 smn_topic_subscriptions check (#12186)

Co-authored-by: tomitobio <tomitobio@users.noreply.github.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
---
 .../smn-topic-subscriptions.added.md          |   1 +
 prowler/providers/huaweicloud/models.py       |  13 ++
 .../huaweicloud/services/smn/__init__.py      |   0
 .../huaweicloud/services/smn/smn_client.py    |   4 +
 .../huaweicloud/services/smn/smn_service.py   | 145 ++++++++++++++++
 .../smn/smn_topic_subscriptions/__init__.py   |   0
 .../smn_topic_subscriptions.metadata.json     |  37 ++++
 .../smn_topic_subscriptions.py                |  36 ++++
 pyproject.toml                                |   2 +
 .../huaweicloud/huaweicloud_provider_test.py  |  26 +++
 .../smn/huaweicloud_smn_service_test.py       | 128 ++++++++++++++
 .../smn_topic_subscriptions_test.py           | 163 ++++++++++++++++++
 uv.lock                                       |  14 ++
 13 files changed, 569 insertions(+)
 create mode 100644 prowler/changelog.d/smn-topic-subscriptions.added.md
 create mode 100644 prowler/providers/huaweicloud/services/smn/__init__.py
 create mode 100644 prowler/providers/huaweicloud/services/smn/smn_client.py
 create mode 100644 prowler/providers/huaweicloud/services/smn/smn_service.py
 create mode 100644 prowler/providers/huaweicloud/services/smn/smn_topic_subscriptions/__init__.py
 create mode 100644 prowler/providers/huaweicloud/services/smn/smn_topic_subscriptions/smn_topic_subscriptions.metadata.json
 create mode 100644 prowler/providers/huaweicloud/services/smn/smn_topic_subscriptions/smn_topic_subscriptions.py
 create mode 100644 tests/providers/huaweicloud/services/smn/huaweicloud_smn_service_test.py
 create mode 100644 tests/providers/huaweicloud/services/smn/smn_topic_subscriptions/smn_topic_subscriptions_test.py

diff --git a/prowler/changelog.d/smn-topic-subscriptions.added.md b/prowler/changelog.d/smn-topic-subscriptions.added.md
new file mode 100644
index 0000000000..87ca0c8c28
--- /dev/null
+++ b/prowler/changelog.d/smn-topic-subscriptions.added.md
@@ -0,0 +1 @@
+`smn_topic_subscriptions` check for Huawei Cloud provider: SMN topics have at least one subscription configured
diff --git a/prowler/providers/huaweicloud/models.py b/prowler/providers/huaweicloud/models.py
index 38cb1acaab..627714a8c9 100644
--- a/prowler/providers/huaweicloud/models.py
+++ b/prowler/providers/huaweicloud/models.py
@@ -384,6 +384,19 @@ class HuaweiCloudSession:
                     .build()
                 )
 
+            elif service == "smn":
+                from huaweicloudsdksmn.v2 import SmnClient
+                from huaweicloudsdksmn.v2.region.smn_region import SmnRegion
+
+                client_region = region or self._region
+                return (
+                    SmnClient.new_builder()
+                    .with_credentials(self._get_basic_credentials(client_region))
+                    .with_http_config(self._http_config())
+                    .with_region(_aligned_region(SmnRegion, client_region))
+                    .build()
+                )
+
             else:
                 raise HuaweiCloudServiceError(
                     message=f"Huawei Cloud service '{service}' is not supported"
diff --git a/prowler/providers/huaweicloud/services/smn/__init__.py b/prowler/providers/huaweicloud/services/smn/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/huaweicloud/services/smn/smn_client.py b/prowler/providers/huaweicloud/services/smn/smn_client.py
new file mode 100644
index 0000000000..a5345dfc1a
--- /dev/null
+++ b/prowler/providers/huaweicloud/services/smn/smn_client.py
@@ -0,0 +1,4 @@
+from prowler.providers.huaweicloud.services.smn.smn_service import SMN
+from prowler.providers.common.provider import Provider
+
+smn_client = SMN(Provider.get_global_provider())
diff --git a/prowler/providers/huaweicloud/services/smn/smn_service.py b/prowler/providers/huaweicloud/services/smn/smn_service.py
new file mode 100644
index 0000000000..371d1ecd91
--- /dev/null
+++ b/prowler/providers/huaweicloud/services/smn/smn_service.py
@@ -0,0 +1,145 @@
+from typing import List
+
+from pydantic.v1 import BaseModel
+
+from prowler.lib.logger import logger
+from prowler.providers.huaweicloud.lib.service.service import HuaweiCloudService
+
+SMN_PAGE_SIZE = 100
+
+
+class SMN(HuaweiCloudService):
+    """
+    SMN (Simple Message Notification) service class for Huawei Cloud.
+
+    This class provides methods to interact with Huawei Cloud SMN service
+    to retrieve notification topics and their subscription counts.
+    """
+
+    def __init__(self, provider):
+        super().__init__(__class__.__name__, provider)
+
+        self.topics: List[SMNTopic] = []
+
+        if getattr(self.session, "is_mock", False):
+            self._load_mock_data()
+            return
+
+        self._list_topics()
+
+    def _load_mock_data(self):
+        """Load mock data for testing."""
+        region = "la-south-2"
+        self.topics = [
+            SMNTopic(
+                topic_urn="urn:smn:la-south-2:123456789012:alert-topic",
+                topic_id="topic-001",
+                name="alert-topic",
+                display_name="Alert Topic",
+                push_policy=0,
+                confirmed_subscription_count=2,
+                region=region,
+            ),
+            SMNTopic(
+                topic_urn="urn:smn:la-south-2:123456789012:empty-topic",
+                topic_id="topic-002",
+                name="empty-topic",
+                display_name="Empty Topic",
+                push_policy=0,
+                confirmed_subscription_count=0,
+                region=region,
+            ),
+        ]
+
+    def _list_topics(self):
+        """List all SMN topics across regions and get their subscription counts."""
+        if not self.regional_clients:
+            return
+
+        for region, client in self.regional_clients.items():
+            logger.info(f"SMN - Listing Topics in {region}...")
+
+            try:
+                from huaweicloudsdksmn.v2 import (
+                    ListSubscriptionsByTopicRequest,
+                    ListTopicsRequest,
+                )
+
+                offset = 0
+                while True:
+                    request = ListTopicsRequest(offset=offset, limit=SMN_PAGE_SIZE)
+                    response = self._call_with_retries(client.list_topics, request)
+                    topics = getattr(response, "topics", None) or []
+
+                    for topic in topics:
+                        topic_urn = getattr(topic, "topic_urn", "") or ""
+                        topic_id = getattr(topic, "topic_id", "") or ""
+                        name = getattr(topic, "name", "") or ""
+                        display_name = getattr(topic, "display_name", "") or ""
+                        push_policy = getattr(topic, "push_policy", None)
+
+                        try:
+                            confirmed_subscription_count = 0
+                            subscription_offset = 0
+                            while True:
+                                sub_request = ListSubscriptionsByTopicRequest(
+                                    topic_urn=topic_urn,
+                                    offset=subscription_offset,
+                                    limit=SMN_PAGE_SIZE,
+                                )
+                                sub_response = self._call_with_retries(
+                                    client.list_subscriptions_by_topic, sub_request
+                                )
+                                subscriptions = (
+                                    getattr(sub_response, "subscriptions", None) or []
+                                )
+                                confirmed_subscription_count += sum(
+                                    getattr(subscription, "status", None) == 1
+                                    for subscription in subscriptions
+                                )
+                                subscription_count = (
+                                    getattr(sub_response, "subscription_count", 0) or 0
+                                )
+                                subscription_offset += SMN_PAGE_SIZE
+                                if subscription_offset >= subscription_count:
+                                    break
+                        except Exception as sub_error:
+                            logger.error(
+                                f"{region} -- {sub_error.__class__.__name__}"
+                                f"[{sub_error.__traceback__.tb_lineno}]: {sub_error}"
+                            )
+                            continue
+
+                        self.topics.append(
+                            SMNTopic(
+                                topic_urn=topic_urn,
+                                topic_id=topic_id,
+                                name=name,
+                                display_name=display_name,
+                                push_policy=push_policy,
+                                confirmed_subscription_count=confirmed_subscription_count,
+                                region=region,
+                            )
+                        )
+
+                    offset += SMN_PAGE_SIZE
+                    topic_count = getattr(response, "topic_count", 0) or 0
+                    if offset >= topic_count:
+                        break
+
+            except Exception as error:
+                logger.error(
+                    f"{region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
+                )
+
+
+class SMNTopic(BaseModel):
+    """SMN topic model."""
+
+    topic_urn: str
+    topic_id: str = ""
+    name: str = ""
+    display_name: str = ""
+    push_policy: int = None
+    confirmed_subscription_count: int = 0
+    region: str = ""
diff --git a/prowler/providers/huaweicloud/services/smn/smn_topic_subscriptions/__init__.py b/prowler/providers/huaweicloud/services/smn/smn_topic_subscriptions/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/huaweicloud/services/smn/smn_topic_subscriptions/smn_topic_subscriptions.metadata.json b/prowler/providers/huaweicloud/services/smn/smn_topic_subscriptions/smn_topic_subscriptions.metadata.json
new file mode 100644
index 0000000000..35d03ac953
--- /dev/null
+++ b/prowler/providers/huaweicloud/services/smn/smn_topic_subscriptions/smn_topic_subscriptions.metadata.json
@@ -0,0 +1,37 @@
+{
+  "Provider": "huaweicloud",
+  "CheckID": "smn_topic_subscriptions",
+  "CheckTitle": "SMN topics have at least one confirmed subscription",
+  "CheckType": [],
+  "ServiceName": "smn",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "",
+  "Severity": "low",
+  "ResourceType": "HUAWEICLOUD::SMN::Topic",
+  "ResourceGroup": "messaging",
+  "Description": "Ensure that SMN notification topics have at least one confirmed subscription so alerts can be delivered to recipients.",
+  "Risk": "Topics without confirmed subscriptions cannot deliver notifications, meaning critical alerts may go unnoticed by operations and security teams.",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://support.huaweicloud.com/intl/en-us/api-smn/ListSubscriptionsByTopic.html",
+    "https://support.huaweicloud.com/intl/en-us/api-smn/AddSubscription.html"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "hcloud SMN AddSubscription --topic_urn=<topic_urn> --protocol=<protocol> --endpoint=<endpoint>",
+      "NativeIaC": "",
+      "Other": "1. Log on to the Huawei Cloud console.\n2. Navigate to Simple Message Notification (SMN).\n3. Select the topic without subscriptions.\n4. Click Add Subscription.\n5. Configure the subscription protocol and endpoint.\n6. Confirm the subscription.",
+      "Terraform": ""
+    },
+    "Recommendation": {
+      "Text": "Add and confirm at least one subscription for each SMN topic so notifications can be delivered.",
+      "Url": "https://hub.prowler.com/check/smn_topic_subscriptions"
+    }
+  },
+  "Categories": [
+    "logging"
+  ],
+  "DependsOn": [],
+  "RelatedTo": [],
+  "Notes": "Only confirmed subscriptions (status 1) satisfy this check. Unconfirmed or canceled subscriptions cannot provide notification coverage."
+}
diff --git a/prowler/providers/huaweicloud/services/smn/smn_topic_subscriptions/smn_topic_subscriptions.py b/prowler/providers/huaweicloud/services/smn/smn_topic_subscriptions/smn_topic_subscriptions.py
new file mode 100644
index 0000000000..867286bcc5
--- /dev/null
+++ b/prowler/providers/huaweicloud/services/smn/smn_topic_subscriptions/smn_topic_subscriptions.py
@@ -0,0 +1,36 @@
+from prowler.lib.check.models import Check, CheckReportHuaweiCloud
+from prowler.providers.huaweicloud.services.smn.smn_client import smn_client
+
+
+class smn_topic_subscriptions(Check):
+    """Check if SMN topics have at least one subscription configured."""
+
+    def execute(self) -> list[CheckReportHuaweiCloud]:
+        findings = []
+
+        for topic in smn_client.topics:
+            report = CheckReportHuaweiCloud(
+                metadata=self.metadata(),
+                resource=topic,
+            )
+            report.region = topic.region
+            report.resource_id = topic.topic_id
+            report.resource_name = topic.name
+            report.resource_arn = topic.topic_urn
+
+            if topic.confirmed_subscription_count > 0:
+                report.status = "PASS"
+                report.status_extended = (
+                    f"SMN topic '{topic.name}' ({topic.topic_id}) has "
+                    f"{topic.confirmed_subscription_count} confirmed subscription(s)."
+                )
+            else:
+                report.status = "FAIL"
+                report.status_extended = (
+                    f"SMN topic '{topic.name}' ({topic.topic_id}) has no confirmed "
+                    "subscriptions. Notifications will not be delivered."
+                )
+
+            findings.append(report)
+
+        return findings
diff --git a/pyproject.toml b/pyproject.toml
index 8e49417f09..a05fa6a6ee 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -133,6 +133,7 @@ dependencies = [
   "huaweicloudsdkkms==3.1.204",
   "huaweicloudsdkobs==3.1.204",
   "huaweicloudsdkrds==3.1.204",
+  "huaweicloudsdksmn==3.1.204",
   "huaweicloudsdkvpc==3.1.204",
   "huaweicloudsdkwaf==3.1.204",
   "zstandard==0.25.0"
@@ -271,6 +272,7 @@ constraint-dependencies = [
   "huaweicloudsdkkms==3.1.204",
   "huaweicloudsdkobs==3.1.204",
   "huaweicloudsdkrds==3.1.204",
+  "huaweicloudsdksmn==3.1.204",
   "huaweicloudsdkvpc==3.1.204",
   "huaweicloudsdkwaf==3.1.204",
   "hyperframe==6.1.0",
diff --git a/tests/providers/huaweicloud/huaweicloud_provider_test.py b/tests/providers/huaweicloud/huaweicloud_provider_test.py
index 189a64a44f..8b84c3f2f5 100644
--- a/tests/providers/huaweicloud/huaweicloud_provider_test.py
+++ b/tests/providers/huaweicloud/huaweicloud_provider_test.py
@@ -292,6 +292,32 @@ class TestHuaweiCloudEndpointAlignment:
         endpoint = "https://ecs.af-north-1.myhuaweicloud.com"
         assert _align_endpoint_tld("af-north-1", endpoint) == endpoint
 
+    def test_smn_client_uses_europe_endpoint(self):
+        session = HuaweiCloudSession(
+            HuaweiCloudCredentials(ak=ACCESS_KEY, sk=SECRET_KEY),
+            region="eu-west-101",
+        )
+        builder = mock.MagicMock()
+        builder.with_credentials.return_value = builder
+        builder.with_http_config.return_value = builder
+        builder.with_region.return_value = builder
+        expected_client = mock.MagicMock()
+        builder.build.return_value = expected_client
+
+        with (
+            mock.patch(
+                "huaweicloudsdksmn.v2.SmnClient.new_builder", return_value=builder
+            ),
+            mock.patch.object(session, "_http_config"),
+            mock.patch.object(session, "_get_basic_credentials"),
+        ):
+            client = session.client("smn", "eu-west-101")
+
+        assert client is expected_client
+        region = builder.with_region.call_args.args[0]
+        assert region.id == "eu-west-101"
+        assert region.endpoints == ["https://smn.eu-west-101.myhuaweicloud.eu"]
+
 
 class TestHuaweiCloudProviderValidationRegion:
     def test_no_regions_uses_default(self):
diff --git a/tests/providers/huaweicloud/services/smn/huaweicloud_smn_service_test.py b/tests/providers/huaweicloud/services/smn/huaweicloud_smn_service_test.py
new file mode 100644
index 0000000000..a46ec9731f
--- /dev/null
+++ b/tests/providers/huaweicloud/services/smn/huaweicloud_smn_service_test.py
@@ -0,0 +1,128 @@
+from types import SimpleNamespace
+from unittest import mock
+
+from prowler.providers.huaweicloud.services.smn.smn_service import SMN
+
+
+def _topic(number: int):
+    return SimpleNamespace(
+        topic_urn=f"urn:smn:eu-west-101:account:topic-{number}",
+        topic_id=f"topic-{number}",
+        name=f"topic-{number}",
+        display_name=f"Topic {number}",
+        push_policy=0,
+    )
+
+
+def _service(client):
+    service = SMN.__new__(SMN)
+    service.regional_clients = {"eu-west-101": client}
+    service.topics = []
+    return service
+
+
+class TestHuaweiCloudSMNService:
+    def test_unconfirmed_and_canceled_subscriptions_do_not_count(self):
+        client = mock.MagicMock()
+        client.list_topics.return_value = SimpleNamespace(
+            topic_count=1, topics=[_topic(1)]
+        )
+        client.list_subscriptions_by_topic.return_value = SimpleNamespace(
+            subscription_count=2,
+            subscriptions=[
+                SimpleNamespace(status=0),
+                SimpleNamespace(status=3),
+            ],
+        )
+        service = _service(client)
+
+        service._list_topics()
+
+        assert len(service.topics) == 1
+        assert service.topics[0].confirmed_subscription_count == 0
+
+    def test_paginates_topics_and_confirmed_subscriptions(self):
+        client = mock.MagicMock()
+        first_page_subscriptions = [SimpleNamespace(status=0) for _ in range(100)]
+        client.list_topics.side_effect = [
+            SimpleNamespace(topic_count=101, topics=[_topic(1)]),
+            SimpleNamespace(topic_count=101, topics=[_topic(2)]),
+        ]
+        client.list_subscriptions_by_topic.side_effect = [
+            SimpleNamespace(
+                subscription_count=101, subscriptions=first_page_subscriptions
+            ),
+            SimpleNamespace(
+                subscription_count=101,
+                subscriptions=[SimpleNamespace(status=1)],
+            ),
+            SimpleNamespace(
+                subscription_count=2,
+                subscriptions=[
+                    SimpleNamespace(status=1),
+                    SimpleNamespace(status=3),
+                ],
+            ),
+        ]
+        service = _service(client)
+
+        service._list_topics()
+
+        assert [topic.confirmed_subscription_count for topic in service.topics] == [
+            1,
+            1,
+        ]
+        topic_requests = [call.args[0] for call in client.list_topics.call_args_list]
+        assert [(request.offset, request.limit) for request in topic_requests] == [
+            (0, 100),
+            (100, 100),
+        ]
+        subscription_requests = [
+            call.args[0] for call in client.list_subscriptions_by_topic.call_args_list
+        ]
+        assert [
+            (request.topic_urn, request.offset, request.limit)
+            for request in subscription_requests
+        ] == [
+            ("urn:smn:eu-west-101:account:topic-1", 0, 100),
+            ("urn:smn:eu-west-101:account:topic-1", 100, 100),
+            ("urn:smn:eu-west-101:account:topic-2", 0, 100),
+        ]
+
+    def test_skips_topic_when_subscription_discovery_fails(self):
+        client = mock.MagicMock()
+        client.list_topics.return_value = SimpleNamespace(
+            topic_count=1, topics=[_topic(1)]
+        )
+        client.list_subscriptions_by_topic.side_effect = Exception("denied")
+        service = _service(client)
+
+        service._list_topics()
+
+        assert service.topics == []
+
+    def test_topic_discovery_failure_returns_empty_inventory(self):
+        client = mock.MagicMock()
+        client.list_topics.side_effect = Exception("denied")
+        service = _service(client)
+
+        service._list_topics()
+
+        assert service.topics == []
+
+    def test_real_session_does_not_require_is_mock_attribute(self):
+        provider = mock.MagicMock()
+
+        def initialize_service(service, *_args, **_kwargs):
+            service.session = SimpleNamespace()
+
+        with (
+            mock.patch.object(SMN, "_list_topics") as list_topics,
+            mock.patch(
+                "prowler.providers.huaweicloud.services.smn.smn_service.HuaweiCloudService.__init__",
+                new=initialize_service,
+            ),
+        ):
+            SMN(provider)
+
+        list_topics.assert_called_once_with()
diff --git a/tests/providers/huaweicloud/services/smn/smn_topic_subscriptions/smn_topic_subscriptions_test.py b/tests/providers/huaweicloud/services/smn/smn_topic_subscriptions/smn_topic_subscriptions_test.py
new file mode 100644
index 0000000000..ea118f0d15
--- /dev/null
+++ b/tests/providers/huaweicloud/services/smn/smn_topic_subscriptions/smn_topic_subscriptions_test.py
@@ -0,0 +1,163 @@
+from types import SimpleNamespace
+from unittest import mock
+
+from tests.providers.huaweicloud.huaweicloud_fixtures import (
+    set_mocked_huaweicloud_provider,
+)
+
+
+class Test_smn_topic_subscriptions:
+    def test_no_topics(self):
+        smn_client = mock.MagicMock()
+        smn_client.topics = []
+        smn_client.region = "la-south-2"
+        smn_client.audited_account = "123456789012"
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_huaweicloud_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.huaweicloud.services.smn.smn_topic_subscriptions.smn_topic_subscriptions.smn_client",
+                new=smn_client,
+            ),
+        ):
+            from prowler.providers.huaweicloud.services.smn.smn_topic_subscriptions.smn_topic_subscriptions import (
+                smn_topic_subscriptions,
+            )
+
+            check = smn_topic_subscriptions()
+            result = check.execute()
+            assert len(result) == 0
+
+    def test_topic_with_subscriptions(self):
+        smn_client = mock.MagicMock()
+        smn_client.topics = [
+            SimpleNamespace(
+                topic_urn="urn:smn:la-south-2:123456789012:alert-topic",
+                topic_id="topic-001",
+                name="alert-topic",
+                display_name="Alert Topic",
+                push_policy=0,
+                confirmed_subscription_count=2,
+                region="la-south-2",
+            )
+        ]
+        smn_client.region = "la-south-2"
+        smn_client.audited_account = "123456789012"
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_huaweicloud_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.huaweicloud.services.smn.smn_topic_subscriptions.smn_topic_subscriptions.smn_client",
+                new=smn_client,
+            ),
+        ):
+            from prowler.providers.huaweicloud.services.smn.smn_topic_subscriptions.smn_topic_subscriptions import (
+                smn_topic_subscriptions,
+            )
+
+            check = smn_topic_subscriptions()
+            result = check.execute()
+            assert len(result) == 1
+            assert result[0].status == "PASS"
+            assert result[0].status_extended == (
+                "SMN topic 'alert-topic' (topic-001) has 2 confirmed "
+                "subscription(s)."
+            )
+            assert result[0].resource_id == "topic-001"
+            assert result[0].resource_name == "alert-topic"
+            assert result[0].resource_arn == (
+                "urn:smn:la-south-2:123456789012:alert-topic"
+            )
+
+    def test_topic_without_subscriptions(self):
+        smn_client = mock.MagicMock()
+        smn_client.topics = [
+            SimpleNamespace(
+                topic_urn="urn:smn:la-south-2:123456789012:empty-topic",
+                topic_id="topic-002",
+                name="empty-topic",
+                display_name="Empty Topic",
+                push_policy=0,
+                confirmed_subscription_count=0,
+                region="la-south-2",
+            )
+        ]
+        smn_client.region = "la-south-2"
+        smn_client.audited_account = "123456789012"
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_huaweicloud_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.huaweicloud.services.smn.smn_topic_subscriptions.smn_topic_subscriptions.smn_client",
+                new=smn_client,
+            ),
+        ):
+            from prowler.providers.huaweicloud.services.smn.smn_topic_subscriptions.smn_topic_subscriptions import (
+                smn_topic_subscriptions,
+            )
+
+            check = smn_topic_subscriptions()
+            result = check.execute()
+            assert len(result) == 1
+            assert result[0].status == "FAIL"
+            assert result[0].status_extended == (
+                "SMN topic 'empty-topic' (topic-002) has no confirmed "
+                "subscriptions. Notifications will not be delivered."
+            )
+            assert result[0].resource_arn == (
+                "urn:smn:la-south-2:123456789012:empty-topic"
+            )
+
+    def test_mixed_topics(self):
+        smn_client = mock.MagicMock()
+        smn_client.topics = [
+            SimpleNamespace(
+                topic_urn="urn:smn:la-south-2:123456789012:alert-topic",
+                topic_id="topic-001",
+                name="alert-topic",
+                display_name="Alert Topic",
+                push_policy=0,
+                confirmed_subscription_count=3,
+                region="la-south-2",
+            ),
+            SimpleNamespace(
+                topic_urn="urn:smn:la-south-2:123456789012:empty-topic",
+                topic_id="topic-002",
+                name="empty-topic",
+                display_name="Empty Topic",
+                push_policy=0,
+                confirmed_subscription_count=0,
+                region="la-south-2",
+            ),
+        ]
+        smn_client.region = "la-south-2"
+        smn_client.audited_account = "123456789012"
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_huaweicloud_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.huaweicloud.services.smn.smn_topic_subscriptions.smn_topic_subscriptions.smn_client",
+                new=smn_client,
+            ),
+        ):
+            from prowler.providers.huaweicloud.services.smn.smn_topic_subscriptions.smn_topic_subscriptions import (
+                smn_topic_subscriptions,
+            )
+
+            check = smn_topic_subscriptions()
+            result = check.execute()
+            assert len(result) == 2
+            assert result[0].status == "PASS"
+            assert result[1].status == "FAIL"
diff --git a/uv.lock b/uv.lock
index ca1afd8346..fbaa60fb40 100644
--- a/uv.lock
+++ b/uv.lock
@@ -104,6 +104,7 @@ constraints = [
     { name = "huaweicloudsdkkms", specifier = "==3.1.204" },
     { name = "huaweicloudsdkobs", specifier = "==3.1.204" },
     { name = "huaweicloudsdkrds", specifier = "==3.1.204" },
+    { name = "huaweicloudsdksmn", specifier = "==3.1.204" },
     { name = "huaweicloudsdkvpc", specifier = "==3.1.204" },
     { name = "huaweicloudsdkwaf", specifier = "==3.1.204" },
     { name = "hyperframe", specifier = "==6.1.0" },
@@ -2412,6 +2413,17 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/18/7d/721f162c46e3de604a73674223bf6c6bc6cf7ade25b3751a71288f4dd122/huaweicloudsdkrds-3.1.204-py3-none-any.whl", hash = "sha256:a790b5b3c457a608e5679c101f463b4d037dd9a8a66f6e46144a9e5a4b37780f", size = 1626906, upload-time = "2026-07-09T09:04:06.936Z" },
 ]
 
+[[package]]
+name = "huaweicloudsdksmn"
+version = "3.1.204"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "huaweicloudsdkcore" },
+]
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/e9/5d/c0de47d011f1932c9c0ddf669c238d9fad01653d438d38203703526799d7/huaweicloudsdksmn-3.1.204-py3-none-any.whl", hash = "sha256:b0818ea9293e27458c8fa1d2da021c98006cbf9ce01cf17a0f1df598c4da3a6c", size = 323674, upload-time = "2026-07-09T09:04:24.804Z" },
+]
+
 [[package]]
 name = "huaweicloudsdkvpc"
 version = "3.1.204"
@@ -3817,6 +3829,7 @@ dependencies = [
     { name = "huaweicloudsdkkms" },
     { name = "huaweicloudsdkobs" },
     { name = "huaweicloudsdkrds" },
+    { name = "huaweicloudsdksmn" },
     { name = "huaweicloudsdkvpc" },
     { name = "huaweicloudsdkwaf" },
     { name = "jsonschema" },
@@ -3940,6 +3953,7 @@ requires-dist = [
     { name = "huaweicloudsdkkms", specifier = "==3.1.204" },
     { name = "huaweicloudsdkobs", specifier = "==3.1.204" },
     { name = "huaweicloudsdkrds", specifier = "==3.1.204" },
+    { name = "huaweicloudsdksmn", specifier = "==3.1.204" },
     { name = "huaweicloudsdkvpc", specifier = "==3.1.204" },
     { name = "huaweicloudsdkwaf", specifier = "==3.1.204" },
     { name = "jsonschema", specifier = "==4.23.0" },

From 61d13f078c523bfaea00d870b6c007ab93dfa81d Mon Sep 17 00:00:00 2001
From: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com>
Date: Thu, 17 Sep 2026 17:22:21 +0200
Subject: [PATCH 72/77] fix(ui): hide the Registry tab in Add Provider when
 Registry is unavailable (#12837)

---
 .../providers/radio-group-provider.test.tsx   | 52 +++++++++++++++++++
 .../providers/radio-group-provider.tsx        | 24 ++++++---
 .../wizard/provider-wizard-modal.test.tsx     | 24 ++++++++-
 .../forms/connect-account-form.test.tsx       | 48 +++++++++++++++++
 .../workflow/forms/connect-account-form.tsx   |  7 +++
 ui/tests/registry/registry-page.ts            | 18 +++++++
 ui/tests/registry/registry.spec.ts            |  1 +
 7 files changed, 166 insertions(+), 8 deletions(-)

diff --git a/ui/components/providers/radio-group-provider.test.tsx b/ui/components/providers/radio-group-provider.test.tsx
index 34987d5a41..ae9e64b5a0 100644
--- a/ui/components/providers/radio-group-provider.test.tsx
+++ b/ui/components/providers/radio-group-provider.test.tsx
@@ -9,8 +9,10 @@ import type { AddProviderFormValues } from "@/types/formSchemas";
 import { RadioGroupProvider } from "./radio-group-provider";
 
 function Selector({
+  registryAvailable = true,
   registryOptions = [{ type: "acme", label: "Acme Cloud" }],
 }: {
+  registryAvailable?: boolean;
   registryOptions?: RegistryProviderOption[];
 }) {
   const form = useForm<AddProviderFormValues>();
@@ -18,6 +20,7 @@ function Selector({
     <RadioGroupProvider
       control={form.control}
       isInvalid={false}
+      registryAvailable={registryAvailable}
       registryOptions={registryOptions}
     />
   );
@@ -131,4 +134,53 @@ describe("provider selector", () => {
       screen.getByRole("option", { name: /Amazon Web Services/ }),
     ).toBeVisible();
   });
+
+  it("hides the source tabs when Registry is unavailable in the deployment", () => {
+    // Given: Local (OSS) or Registry-flag-off deployments deny discovery.
+    render(<Selector registryAvailable={false} registryOptions={[]} />);
+
+    // Then: only the built-in providers are offered, without a Registry tab.
+    expect(screen.queryByRole("tablist")).not.toBeInTheDocument();
+    expect(
+      screen.queryByRole("tab", { name: "Registry" }),
+    ).not.toBeInTheDocument();
+    expect(
+      screen.getByRole("option", { name: /Amazon Web Services/ }),
+    ).toBeVisible();
+    expect(
+      screen.queryByText("No Registry providers available."),
+    ).not.toBeInTheDocument();
+    expect(
+      screen.getByRole("textbox", { name: "Search providers" }),
+    ).toBeVisible();
+  });
+
+  it("falls back to all providers when Registry access is revoked on the Registry tab", async () => {
+    // Given
+    const user = userEvent.setup();
+    const { rerender } = render(<Selector />);
+    await user.click(screen.getByRole("tab", { name: "Registry" }));
+    expect(
+      screen.queryByRole("option", { name: /Amazon Web Services/ }),
+    ).not.toBeInTheDocument();
+
+    // When: a discovery refresh reports the deployment no longer offers Registry.
+    rerender(<Selector registryAvailable={false} registryOptions={[]} />);
+
+    // Then
+    expect(screen.queryByRole("tablist")).not.toBeInTheDocument();
+    expect(
+      screen.getByRole("option", { name: /Amazon Web Services/ }),
+    ).toBeVisible();
+
+    // When / Then: access restored keeps the previous Registry selection.
+    rerender(<Selector />);
+    expect(screen.getByRole("tab", { name: "Registry" })).toHaveAttribute(
+      "aria-selected",
+      "true",
+    );
+    expect(
+      screen.getByRole("option", { name: /Acme Cloud Registry/ }),
+    ).toBeVisible();
+  });
 });
diff --git a/ui/components/providers/radio-group-provider.tsx b/ui/components/providers/radio-group-provider.tsx
index 0da4bf2d83..2d589b91bf 100644
--- a/ui/components/providers/radio-group-provider.tsx
+++ b/ui/components/providers/radio-group-provider.tsx
@@ -33,6 +33,12 @@ type ProviderTab = (typeof PROVIDER_TAB)[keyof typeof PROVIDER_TAB];
 
 interface RadioGroupProviderProps {
   control: Control<AddProviderFormValues>;
+  /**
+   * Whether this deployment offers Registry providers (Cloud or Private Cloud
+   * with the Registry flag on and a user allowed to manage providers). Off in
+   * Local (OSS) and flag-off deployments, where the source tabs are hidden.
+   */
+  registryAvailable?: boolean;
   registryOptions?: RegistryProviderOption[];
   isInvalid: boolean;
   errorMessage?: string;
@@ -42,10 +48,14 @@ export const RadioGroupProvider: FC<RadioGroupProviderProps> = ({
   control,
   isInvalid,
   errorMessage,
+  registryAvailable = false,
   registryOptions = [],
 }) => {
   const [searchTerm, setSearchTerm] = useState("");
-  const [activeTab, setActiveTab] = useState<ProviderTab>(PROVIDER_TAB.ALL);
+  const [selectedTab, setSelectedTab] = useState<ProviderTab>(PROVIDER_TAB.ALL);
+  // Fall back to the full list if Registry access is revoked while the
+  // Registry tab is selected, so the selector never shows an empty tab.
+  const activeTab = registryAvailable ? selectedTab : PROVIDER_TAB.ALL;
 
   const options = [
     ...PROVIDERS.map((provider) => ({
@@ -82,12 +92,14 @@ export const RadioGroupProvider: FC<RadioGroupProviderProps> = ({
         <Tabs
           className="flex flex-col px-4"
           value={activeTab}
-          onValueChange={(value) => setActiveTab(value as ProviderTab)}
+          onValueChange={(value) => setSelectedTab(value as ProviderTab)}
         >
-          <TabsList aria-label="Provider source">
-            <TabsTrigger value={PROVIDER_TAB.ALL}>All providers</TabsTrigger>
-            <TabsTrigger value={PROVIDER_TAB.REGISTRY}>Registry</TabsTrigger>
-          </TabsList>
+          {registryAvailable && (
+            <TabsList aria-label="Provider source">
+              <TabsTrigger value={PROVIDER_TAB.ALL}>All providers</TabsTrigger>
+              <TabsTrigger value={PROVIDER_TAB.REGISTRY}>Registry</TabsTrigger>
+            </TabsList>
+          )}
           <div className="relative z-10 shrink-0 py-4">
             <SearchInput
               aria-label="Search providers"
diff --git a/ui/components/providers/wizard/provider-wizard-modal.test.tsx b/ui/components/providers/wizard/provider-wizard-modal.test.tsx
index 40414c3688..fc913924bc 100644
--- a/ui/components/providers/wizard/provider-wizard-modal.test.tsx
+++ b/ui/components/providers/wizard/provider-wizard-modal.test.tsx
@@ -212,9 +212,12 @@ describe("provider wizard account creation", () => {
       screen.getByRole("option", { name: /Amazon Web Services/ }),
     ).toBeVisible();
 
+    // Then: an unanswered discovery cannot vouch for Registry availability.
+    expect(
+      screen.queryByRole("tab", { name: "Registry" }),
+    ).not.toBeInTheDocument();
+
     // When
-    await user.click(screen.getByRole("tab", { name: "Registry" }));
-    expect(screen.getByText("No Registry providers available.")).toBeVisible();
     await user.click(
       screen.getByRole("button", { name: "Retry Registry providers" }),
     );
@@ -223,8 +226,25 @@ describe("provider wizard account creation", () => {
     expect(
       await screen.findByRole("option", { name: "Acme Cloud Registry" }),
     ).toBeVisible();
+    expect(screen.getByRole("tab", { name: "Registry" })).toBeVisible();
     expect(
       screen.queryByText("Registry providers could not be loaded"),
     ).not.toBeInTheDocument();
   });
+
+  it("keeps the Registry tab with a retry when eligible discovery fails", async () => {
+    // Given: Cloud with Registry enabled, but the catalog read failed.
+    getInstalledRegistryProviderOptions.mockResolvedValueOnce({
+      status: "error",
+    });
+    const user = userEvent.setup();
+    render(<ProviderWizardModal open onOpenChange={vi.fn()} />);
+    await screen.findByText("Registry providers could not be loaded");
+
+    // When
+    await user.click(screen.getByRole("tab", { name: "Registry" }));
+
+    // Then
+    expect(screen.getByText("No Registry providers available.")).toBeVisible();
+  });
 });
diff --git a/ui/components/providers/workflow/forms/connect-account-form.test.tsx b/ui/components/providers/workflow/forms/connect-account-form.test.tsx
index 7e74064f8e..471034df33 100644
--- a/ui/components/providers/workflow/forms/connect-account-form.test.tsx
+++ b/ui/components/providers/workflow/forms/connect-account-form.test.tsx
@@ -82,3 +82,51 @@ describe("provider account aliases", () => {
     });
   });
 });
+
+describe("Registry provider source tabs", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
+  it("hides the Registry tab when discovery denies access (Local or flag off)", async () => {
+    // Given
+    getInstalledRegistryProviderOptions.mockResolvedValue({
+      status: "access_denied",
+    });
+
+    // When
+    render(<ConnectAccountForm onSuccess={vi.fn()} />);
+    await waitFor(() =>
+      expect(getInstalledRegistryProviderOptions).toHaveBeenCalled(),
+    );
+
+    // Then
+    expect(
+      screen.getByRole("option", { name: /Amazon Web Services/ }),
+    ).toBeVisible();
+    expect(
+      screen.queryByRole("tab", { name: "Registry" }),
+    ).not.toBeInTheDocument();
+    expect(
+      screen.queryByRole("tab", { name: "All providers" }),
+    ).not.toBeInTheDocument();
+  });
+
+  it("shows the Registry tab once discovery confirms the deployment offers it", async () => {
+    // Given: Cloud or Private Cloud with Registry enabled and no artifacts yet.
+    getInstalledRegistryProviderOptions.mockResolvedValue({
+      status: "ready",
+      options: [],
+    });
+
+    // When
+    render(<ConnectAccountForm onSuccess={vi.fn()} />);
+
+    // Then
+    expect(await screen.findByRole("tab", { name: "Registry" })).toBeVisible();
+    expect(screen.getByRole("tab", { name: "All providers" })).toHaveAttribute(
+      "aria-selected",
+      "true",
+    );
+  });
+});
diff --git a/ui/components/providers/workflow/forms/connect-account-form.tsx b/ui/components/providers/workflow/forms/connect-account-form.tsx
index 2ccd6531ff..aeb9d413ce 100644
--- a/ui/components/providers/workflow/forms/connect-account-form.tsx
+++ b/ui/components/providers/workflow/forms/connect-account-form.tsx
@@ -218,6 +218,10 @@ export const ConnectAccountForm = ({
   const [registryOptions, setRegistryOptions] = useState<
     RegistryProviderOption[]
   >([]);
+  // Only Cloud and Private Cloud deployments with the Registry flag on answer
+  // discovery with "ready" or "error"; Local (OSS) and flag-off deployments
+  // are denied and never show the Registry tab.
+  const [registryAvailable, setRegistryAvailable] = useState(false);
   const [registryError, setRegistryError] = useState(false);
   const [providerError, setProviderError] = useState<string | null>(null);
   const [discoveryAttempt, setDiscoveryAttempt] = useState(0);
@@ -231,10 +235,12 @@ export const ConnectAccountForm = ({
         const result = await getInstalledRegistryProviderOptions();
         if (!active) return;
         setRegistryOptions(result.status === "ready" ? result.options : []);
+        setRegistryAvailable(result.status !== "access_denied");
         setRegistryError(result.status === "error");
       } catch {
         if (active) {
           setRegistryOptions([]);
+          setRegistryAvailable(false);
           setRegistryError(true);
         }
       }
@@ -467,6 +473,7 @@ export const ConnectAccountForm = ({
               </Alert>
             )}
             <RadioGroupProvider
+              registryAvailable={registryAvailable}
               registryOptions={registryOptions}
               control={form.control}
               isInvalid={!!form.formState.errors.providerType}
diff --git a/ui/tests/registry/registry-page.ts b/ui/tests/registry/registry-page.ts
index 5d1ae1fe14..bf25ed5c29 100644
--- a/ui/tests/registry/registry-page.ts
+++ b/ui/tests/registry/registry-page.ts
@@ -79,6 +79,24 @@ export class RegistryPage extends BasePage {
     await expect(this.registryLink).toBeHidden();
   }
 
+  async verifyProviderSelectorWithoutRegistry(): Promise<void> {
+    await this.page.goto("/providers");
+    await this.dismissWelcomeDialog();
+    await this.page.getByRole("button", { name: /Add (a )?Provider/i }).click();
+    await expect(
+      this.page.getByRole("option", {
+        name: "Amazon Web Services",
+        exact: true,
+      }),
+    ).toBeVisible();
+    await expect(
+      this.page.getByRole("tab", { name: "Registry", exact: true }),
+    ).toBeHidden();
+    await expect(
+      this.page.getByRole("tab", { name: "All providers", exact: true }),
+    ).toBeHidden();
+  }
+
   async verifyOnboarding(): Promise<void> {
     await expect(this.connectButton).toBeVisible();
     await expect(
diff --git a/ui/tests/registry/registry.spec.ts b/ui/tests/registry/registry.spec.ts
index 99100909b5..a99617ba9b 100644
--- a/ui/tests/registry/registry.spec.ts
+++ b/ui/tests/registry/registry.spec.ts
@@ -94,6 +94,7 @@ test.describe.serial("Registry", () => {
       await registryPage.verifyRegistryNavigationHidden();
       await registryPage.goto();
       await registryPage.verifyDirectRouteDenied();
+      await registryPage.verifyProviderSelectorWithoutRegistry();
     },
   );
 

From 5fe1a6713b266388241906e66c18562be7414bdf Mon Sep 17 00:00:00 2001
From: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com>
Date: Thu, 17 Sep 2026 18:01:41 +0200
Subject: [PATCH 73/77] revert: remove the onboarding profile step (#12818)
 (#12838)

---
 api/changelog.d/onboarding-profile.added.md   |   1 -
 api/src/backend/api/filters.py                |   7 -
 .../0099_delete_tenant_onboarding_profile.py  |  15 +
 api/src/backend/api/models.py                 |  81 ------
 .../api/tests/test_onboarding_profile.py      | 174 ------------
 api/src/backend/api/v1/serializers.py         |  74 -----
 api/src/backend/api/v1/urls.py                |   6 -
 api/src/backend/api/v1/views.py               | 121 +-------
 ui/actions/onboarding/profile.test.ts         | 200 -------------
 ui/actions/onboarding/profile.ts              | 119 --------
 ui/app/(prowler)/layout.tsx                   |  17 +-
 ui/changelog.d/onboarding-profile.added.md    |   1 -
 .../onboarding-profile-gate.test.tsx          | 267 ------------------
 .../onboarding-profile-modal.test.tsx         |  73 -----
 .../onboarding/onboarding-profile-gate.tsx    | 128 ---------
 .../onboarding/onboarding-profile-modal.tsx   | 172 -----------
 ui/lib/onboarding/README.md                   |  29 +-
 .../__tests__/profile-gate-decision.test.ts   |  32 ---
 ui/lib/onboarding/index.ts                    |   5 -
 ui/lib/onboarding/onboarding-events.ts        |  28 --
 ui/lib/onboarding/profile-gate-decision.ts    |  20 --
 ui/lib/onboarding/profile-marker.ts           |  67 -----
 ui/types/onboarding-profile.ts                |  63 -----
 23 files changed, 23 insertions(+), 1677 deletions(-)
 delete mode 100644 api/changelog.d/onboarding-profile.added.md
 create mode 100644 api/src/backend/api/migrations/0099_delete_tenant_onboarding_profile.py
 delete mode 100644 api/src/backend/api/tests/test_onboarding_profile.py
 delete mode 100644 ui/actions/onboarding/profile.test.ts
 delete mode 100644 ui/actions/onboarding/profile.ts
 delete mode 100644 ui/changelog.d/onboarding-profile.added.md
 delete mode 100644 ui/components/onboarding/__tests__/onboarding-profile-gate.test.tsx
 delete mode 100644 ui/components/onboarding/__tests__/onboarding-profile-modal.test.tsx
 delete mode 100644 ui/components/onboarding/onboarding-profile-gate.tsx
 delete mode 100644 ui/components/onboarding/onboarding-profile-modal.tsx
 delete mode 100644 ui/lib/onboarding/__tests__/profile-gate-decision.test.ts
 delete mode 100644 ui/lib/onboarding/profile-gate-decision.ts
 delete mode 100644 ui/lib/onboarding/profile-marker.ts
 delete mode 100644 ui/types/onboarding-profile.ts

diff --git a/api/changelog.d/onboarding-profile.added.md b/api/changelog.d/onboarding-profile.added.md
deleted file mode 100644
index b1588f8ac3..0000000000
--- a/api/changelog.d/onboarding-profile.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`POST /onboarding-profiles` records the cloud-account count, area of work and position a tenant declares at first login, or that the step was skipped, once per tenant and never overwritten
diff --git a/api/src/backend/api/filters.py b/api/src/backend/api/filters.py
index 2b3a4b333a..ad89671c89 100644
--- a/api/src/backend/api/filters.py
+++ b/api/src/backend/api/filters.py
@@ -41,7 +41,6 @@ from api.models import (
     StatusChoices,
     Task,
     TenantAPIKey,
-    TenantOnboardingProfile,
     ThreatScoreSnapshot,
     User,
 )
@@ -1801,12 +1800,6 @@ class LighthouseProviderModelsFilter(FilterSet):
         }
 
 
-class TenantOnboardingProfileFilter(FilterSet):
-    class Meta:
-        model = TenantOnboardingProfile
-        fields = {"skipped": ["exact"]}
-
-
 class MuteRuleFilter(FilterSet):
     inserted_at = DateFilter(field_name="inserted_at", lookup_expr="date")
     updated_at = DateFilter(field_name="updated_at", lookup_expr="date")
diff --git a/api/src/backend/api/migrations/0099_delete_tenant_onboarding_profile.py b/api/src/backend/api/migrations/0099_delete_tenant_onboarding_profile.py
new file mode 100644
index 0000000000..870805fb2d
--- /dev/null
+++ b/api/src/backend/api/migrations/0099_delete_tenant_onboarding_profile.py
@@ -0,0 +1,15 @@
+from django.db import migrations
+
+
+class Migration(migrations.Migration):
+    # The onboarding profile step was reverted after 0098 had been merged, so
+    # the table goes away through a new migration rather than by deleting 0098.
+    dependencies = [
+        ("api", "0098_tenant_onboarding_profile"),
+    ]
+
+    operations = [
+        migrations.DeleteModel(
+            name="TenantOnboardingProfile",
+        ),
+    ]
diff --git a/api/src/backend/api/models.py b/api/src/backend/api/models.py
index ef19712f94..6a18cd1994 100644
--- a/api/src/backend/api/models.py
+++ b/api/src/backend/api/models.py
@@ -3122,84 +3122,3 @@ class TenantComplianceSummary(RowLevelSecurityProtectedModel):
                 statements=["SELECT", "INSERT", "UPDATE", "DELETE"],
             ),
         ]
-
-
-class TenantOnboardingProfile(RowLevelSecurityProtectedModel):
-    """What a tenant declared about itself at first login, before the product
-    shaped its behaviour.
-
-    One row per tenant. The three buckets are closed choices asked in the
-    onboarding profile step; ``skipped`` records that the step was shown and
-    dismissed, so a skip is a fact and not the absence of one.
-
-    ``declared_role`` and ``declared_seniority`` are deliberately orthogonal:
-    the first is the discipline the person works in, the second how far up the
-    organisation they sit. Kept apart, "a security engineer" and "the CISO"
-    are two segments rather than one blurred bucket.
-
-    Immutable once written: a second submission returns the existing row so the
-    first answer, given before any product signal could bias it, is the one
-    that stays.
-    """
-
-    class CloudAccountsBucket(models.TextChoices):
-        ONE = "1", _("1")
-        TWO_TO_TEN = "2-10", _("2-10")
-        ELEVEN_TO_FIFTY = "11-50", _("11-50")
-        FIFTY_ONE_TO_TWO_HUNDRED = "51-200", _("51-200")
-        OVER_TWO_HUNDRED = "200+", _("200+")
-
-    class Role(models.TextChoices):
-        SECURITY = "security", _("Security")
-        DEVOPS_PLATFORM = "devops_platform", _("DevOps / Platform")
-        DEVELOPER = "developer", _("Developer")
-        COMPLIANCE_GRC = "compliance_grc", _("Compliance / GRC")
-        OTHER = "other", _("Other")
-
-    class Seniority(models.TextChoices):
-        PRACTITIONER = "practitioner", _("Practitioner / IC")
-        LEAD = "lead", _("Team lead / Manager")
-        DIRECTOR = "director", _("Director / Head of")
-        EXECUTIVE = "executive", _("VP / C-level")
-        FOUNDER = "founder", _("Founder / Owner")
-
-    id = models.UUIDField(primary_key=True, default=uuid4, editable=False)
-    inserted_at = models.DateTimeField(auto_now_add=True, editable=False)
-    declared_cloud_accounts = models.CharField(
-        max_length=16, choices=CloudAccountsBucket.choices, null=True, blank=True
-    )
-    declared_role = models.CharField(
-        max_length=32, choices=Role.choices, null=True, blank=True
-    )
-    declared_seniority = models.CharField(
-        max_length=32, choices=Seniority.choices, null=True, blank=True
-    )
-    skipped = models.BooleanField(default=False)
-    submitted_by = models.ForeignKey(
-        settings.AUTH_USER_MODEL,
-        on_delete=models.SET_NULL,
-        null=True,
-        blank=True,
-        related_name="tenant_onboarding_profiles",
-        related_query_name="tenant_onboarding_profile",
-    )
-
-    class Meta(RowLevelSecurityProtectedModel.Meta):
-        db_table = "tenant_onboarding_profiles"
-        constraints = [
-            models.UniqueConstraint(
-                fields=["tenant_id"],
-                name="unique_tenant_onboarding_profile",
-            ),
-            RowLevelSecurityConstraint(
-                field="tenant_id",
-                name="rls_on_%(class)s",
-                statements=["SELECT", "INSERT", "UPDATE", "DELETE"],
-            ),
-        ]
-
-    class JSONAPIMeta:
-        resource_name = "onboarding-profiles"
-
-    def __str__(self) -> str:
-        return f"onboarding-profile:{self.tenant_id}"
diff --git a/api/src/backend/api/tests/test_onboarding_profile.py b/api/src/backend/api/tests/test_onboarding_profile.py
deleted file mode 100644
index ee1d37417d..0000000000
--- a/api/src/backend/api/tests/test_onboarding_profile.py
+++ /dev/null
@@ -1,174 +0,0 @@
-import json
-
-import pytest
-from api.models import TenantOnboardingProfile
-from conftest import API_JSON_CONTENT_TYPE
-from django.urls import reverse
-from rest_framework import status
-
-ANSWERS = {
-    "declared_cloud_accounts": "11-50",
-    "declared_role": "security",
-    "declared_seniority": "director",
-}
-
-
-def _submit(client, attributes):
-    payload = {"data": {"type": "onboarding-profiles", "attributes": attributes}}
-    return client.post(
-        reverse("onboarding-profile-list"),
-        data=json.dumps(payload),
-        content_type=API_JSON_CONTENT_TYPE,
-    )
-
-
-def _error_pointers(response):
-    return [error["source"]["pointer"] for error in response.json()["errors"]]
-
-
-@pytest.mark.django_db
-class TestTenantOnboardingProfileViewSet:
-    def test_declares_the_profile_once(
-        self, authenticated_client, tenants_fixture, create_test_user
-    ):
-        response = _submit(authenticated_client, ANSWERS)
-
-        assert response.status_code == status.HTTP_201_CREATED
-        attributes = response.json()["data"]["attributes"]
-        assert attributes["declared_cloud_accounts"] == "11-50"
-        assert attributes["declared_role"] == "security"
-        assert attributes["declared_seniority"] == "director"
-        assert attributes["skipped"] is False
-        profile = TenantOnboardingProfile.objects.get(tenant_id=tenants_fixture[0].id)
-        assert profile.submitted_by_id == create_test_user.id
-
-    def test_records_a_skip_as_a_fact(self, authenticated_client, tenants_fixture):
-        response = _submit(authenticated_client, {"skipped": True})
-
-        assert response.status_code == status.HTTP_201_CREATED
-        attributes = response.json()["data"]["attributes"]
-        assert attributes["skipped"] is True
-        assert attributes["declared_role"] is None
-        assert attributes["declared_seniority"] is None
-        assert TenantOnboardingProfile.objects.filter(
-            tenant_id=tenants_fixture[0].id, skipped=True
-        ).exists()
-
-    def test_second_submission_keeps_the_first_answer(self, authenticated_client):
-        first = _submit(authenticated_client, ANSWERS)
-        second = _submit(
-            authenticated_client, {**ANSWERS, "declared_role": "developer"}
-        )
-
-        assert first.status_code == status.HTTP_201_CREATED
-        assert second.status_code == status.HTTP_200_OK
-        assert second.json()["data"]["id"] == first.json()["data"]["id"]
-        assert second.json()["data"]["attributes"]["declared_role"] == "security"
-        assert TenantOnboardingProfile.objects.count() == 1
-
-    def test_a_skip_cannot_replace_an_answer(self, authenticated_client):
-        _submit(authenticated_client, ANSWERS)
-
-        response = _submit(authenticated_client, {"skipped": True})
-
-        assert response.status_code == status.HTTP_200_OK
-        assert response.json()["data"]["attributes"]["skipped"] is False
-
-    @pytest.mark.parametrize(
-        "attributes, pointer",
-        [
-            (
-                {"declared_cloud_accounts": "1"},
-                "/data/attributes/declared_role",
-            ),
-            (
-                # Discipline without the ladder is still an incomplete profile.
-                {k: v for k, v in ANSWERS.items() if k != "declared_seniority"},
-                "/data/attributes/declared_seniority",
-            ),
-            ({}, "/data/attributes/declared_cloud_accounts"),
-            (
-                {"skipped": True, "declared_role": "developer"},
-                "/data/attributes/declared_role",
-            ),
-            (
-                {**ANSWERS, "declared_cloud_accounts": "1000"},
-                "/data/attributes/declared_cloud_accounts",
-            ),
-            (
-                {**ANSWERS, "declared_role": "ceo"},
-                "/data/attributes/declared_role",
-            ),
-            (
-                # "management" moved out of the discipline list into the ladder.
-                {**ANSWERS, "declared_role": "management"},
-                "/data/attributes/declared_role",
-            ),
-            (
-                {**ANSWERS, "declared_seniority": "intern"},
-                "/data/attributes/declared_seniority",
-            ),
-            (
-                {"skipped": True, "declared_seniority": "founder"},
-                "/data/attributes/declared_seniority",
-            ),
-            ({**ANSWERS, "company": "Acme"}, "/data"),
-        ],
-    )
-    def test_rejects_incomplete_or_unknown_answers(
-        self, authenticated_client, attributes, pointer
-    ):
-        response = _submit(authenticated_client, attributes)
-
-        assert response.status_code == status.HTTP_400_BAD_REQUEST
-        assert pointer in _error_pointers(response)
-        assert not TenantOnboardingProfile.objects.exists()
-
-    def test_lists_only_the_tenant_profile(
-        self,
-        authenticated_client,
-        authenticated_client_for_tenant_factory,
-        create_test_user,
-        tenants_fixture,
-    ):
-        other_client = authenticated_client_for_tenant_factory(
-            create_test_user, tenants_fixture[1]
-        )
-        _submit(authenticated_client, ANSWERS)
-        _submit(other_client, {"skipped": True})
-
-        own = authenticated_client.get(reverse("onboarding-profile-list"))
-        other = other_client.get(reverse("onboarding-profile-list"))
-
-        assert own.status_code == status.HTTP_200_OK
-        assert [entry["attributes"]["skipped"] for entry in own.json()["data"]] == [
-            False
-        ]
-        assert [entry["attributes"]["skipped"] for entry in other.json()["data"]] == [
-            True
-        ]
-
-    def test_empty_list_before_the_step_runs(self, authenticated_client):
-        response = authenticated_client.get(reverse("onboarding-profile-list"))
-
-        assert response.status_code == status.HTTP_200_OK
-        assert response.json()["data"] == []
-
-    def test_members_without_permissions_can_answer(
-        self, authenticated_client_no_permissions_rbac
-    ):
-        response = _submit(authenticated_client_no_permissions_rbac, ANSWERS)
-
-        assert response.status_code == status.HTTP_201_CREATED
-
-    def test_detail_route_is_refused(self, authenticated_client):
-        # One row per tenant, so the collection is the only meaningful read;
-        # the detail route must refuse rather than serve a second shape.
-        _submit(authenticated_client, ANSWERS)
-        profile = TenantOnboardingProfile.objects.get()
-
-        response = authenticated_client.get(
-            reverse("onboarding-profile-detail", kwargs={"pk": profile.id})
-        )
-
-        assert response.status_code == status.HTTP_405_METHOD_NOT_ALLOWED
diff --git a/api/src/backend/api/v1/serializers.py b/api/src/backend/api/v1/serializers.py
index 639ddade61..271d3a9b47 100644
--- a/api/src/backend/api/v1/serializers.py
+++ b/api/src/backend/api/v1/serializers.py
@@ -35,7 +35,6 @@ from api.models import (
     StatusChoices,
     Task,
     TenantAPIKey,
-    TenantOnboardingProfile,
     ThreatScoreSnapshot,
     User,
     UserRoleRelationship,
@@ -4537,76 +4536,3 @@ class FindingGroupResourceSerializer(BaseSerializerV1):
             "uid": obj.get("provider_uid", ""),
             "alias": obj.get("provider_alias", ""),
         }
-
-
-# Onboarding profile
-
-DECLARED_PROFILE_FIELDS = (
-    "declared_cloud_accounts",
-    "declared_role",
-    "declared_seniority",
-)
-
-
-class TenantOnboardingProfileSerializer(RLSSerializer):
-    """Read serializer for the tenant's declared onboarding profile."""
-
-    class Meta:
-        model = TenantOnboardingProfile
-        fields = [
-            "id",
-            "inserted_at",
-            *DECLARED_PROFILE_FIELDS,
-            "skipped",
-        ]
-        read_only_fields = fields
-
-
-class TenantOnboardingProfileCreateSerializer(RLSSerializer, BaseWriteSerializer):
-    """Record the profile step's outcome.
-
-    Either every answer is given, or ``skipped`` is true and none is: a skip
-    is recorded as such so "skipped" can be told from "never shown".
-    """
-
-    declared_cloud_accounts = serializers.ChoiceField(
-        choices=TenantOnboardingProfile.CloudAccountsBucket.choices,
-        required=False,
-        allow_null=True,
-    )
-    declared_role = serializers.ChoiceField(
-        choices=TenantOnboardingProfile.Role.choices,
-        required=False,
-        allow_null=True,
-    )
-    declared_seniority = serializers.ChoiceField(
-        choices=TenantOnboardingProfile.Seniority.choices,
-        required=False,
-        allow_null=True,
-    )
-    skipped = serializers.BooleanField(required=False, default=False)
-
-    class Meta:
-        model = TenantOnboardingProfile
-        fields = ["id", *DECLARED_PROFILE_FIELDS, "skipped"]
-        extra_kwargs = {"id": {"read_only": True}}
-
-    class JSONAPIMeta:
-        resource_name = "onboarding-profiles"
-
-    def validate(self, data):
-        data = super().validate(data)
-        answers = {field: data.get(field) for field in DECLARED_PROFILE_FIELDS}
-        if data.get("skipped"):
-            answered = [field for field, value in answers.items() if value]
-            if answered:
-                raise ValidationError(
-                    {answered[0]: "A skipped profile step carries no answers."}
-                )
-            return data
-        missing = [field for field, value in answers.items() if not value]
-        if missing:
-            raise ValidationError(
-                {missing[0]: "This field is required unless the step was skipped."}
-            )
-        return data
diff --git a/api/src/backend/api/v1/urls.py b/api/src/backend/api/v1/urls.py
index 0e50962cdb..a558fa6387 100644
--- a/api/src/backend/api/v1/urls.py
+++ b/api/src/backend/api/v1/urls.py
@@ -39,7 +39,6 @@ from api.v1.views import (
     TenantApiKeyViewSet,
     TenantFinishACSView,
     TenantMembersViewSet,
-    TenantOnboardingProfileViewSet,
     TenantViewSet,
     UserRoleRelationshipView,
     UserViewSet,
@@ -108,11 +107,6 @@ router.register(
     basename="lighthouse-models",
 )
 router.register(r"mute-rules", MuteRuleViewSet, basename="mute-rule")
-router.register(
-    r"onboarding-profiles",
-    TenantOnboardingProfileViewSet,
-    basename="onboarding-profile",
-)
 
 tenants_router = routers.NestedSimpleRouter(router, r"tenants", lookup="tenant")
 tenants_router.register(
diff --git a/api/src/backend/api/v1/views.py b/api/src/backend/api/v1/views.py
index 8839fcc686..d0294f4abd 100644
--- a/api/src/backend/api/v1/views.py
+++ b/api/src/backend/api/v1/views.py
@@ -75,7 +75,6 @@ from api.filters import (
     TaskFilter,
     TenantApiKeyFilter,
     TenantFilter,
-    TenantOnboardingProfileFilter,
     ThreatScoreSnapshotFilter,
     UserFilter,
 )
@@ -120,7 +119,6 @@ from api.models import (
     Task,
     TenantAPIKey,
     TenantComplianceSummary,
-    TenantOnboardingProfile,
     ThreatScoreSnapshot,
     User,
     UserRoleRelationship,
@@ -233,8 +231,6 @@ from api.v1.serializers import (
     TenantApiKeyCreateSerializer,
     TenantApiKeySerializer,
     TenantApiKeyUpdateSerializer,
-    TenantOnboardingProfileCreateSerializer,
-    TenantOnboardingProfileSerializer,
     TenantSerializer,
     ThreatScoreSnapshotSerializer,
     TokenRefreshSerializer,
@@ -261,7 +257,7 @@ from django.conf import settings as django_settings
 from django.contrib.postgres.aggregates import ArrayAgg, BoolAnd, StringAgg
 from django.contrib.postgres.search import SearchQuery
 from django.core.exceptions import ValidationError as DjangoValidationError
-from django.db import IntegrityError, transaction
+from django.db import transaction
 from django.db.models import (
     BooleanField,
     Case,
@@ -297,7 +293,6 @@ from django_celery_beat.models import PeriodicTask
 from drf_spectacular.settings import spectacular_settings
 from drf_spectacular.types import OpenApiTypes
 from drf_spectacular.utils import (
-    OpenApiExample,
     OpenApiParameter,
     OpenApiResponse,
     extend_schema,
@@ -8940,117 +8935,3 @@ class FindingGroupViewSet(JsonApiFilterMixin, BaseRLSViewSet):
         return self._paginated_resource_response(
             request, filtered_queryset, resource_ids, request.tenant_id
         )
-
-
-# Onboarding profile
-@extend_schema_view(
-    list=extend_schema(
-        tags=["Onboarding"],
-        summary="Read the tenant's onboarding profile",
-        description=(
-            "The answers the tenant gave in the onboarding profile step, or "
-            "the record that the step was skipped. At most one entry per "
-            "tenant; an empty list means the step was never completed."
-        ),
-    ),
-    create=extend_schema(
-        tags=["Onboarding"],
-        summary="Record the tenant's onboarding profile",
-        description=(
-            "Store the declared cloud-account count, role and seniority, or "
-            "mark the step as skipped. Idempotent: once a "
-            "profile exists the endpoint answers 200 with the stored one and "
-            "never overwrites it, so the first answer, given before the "
-            "product could bias it, is the one that stays."
-        ),
-        request=TenantOnboardingProfileCreateSerializer,
-        responses={
-            200: TenantOnboardingProfileSerializer,
-            201: TenantOnboardingProfileSerializer,
-        },
-        examples=[
-            OpenApiExample(
-                "DeclareProfile",
-                request_only=True,
-                media_type="application/vnd.api+json",
-                value={
-                    "data": {
-                        "type": "onboarding-profiles",
-                        "attributes": {
-                            "declared_cloud_accounts": "11-50",
-                            "declared_role": "security",
-                            "declared_seniority": "director",
-                        },
-                    }
-                },
-            ),
-            OpenApiExample(
-                "SkipProfile",
-                request_only=True,
-                media_type="application/vnd.api+json",
-                value={
-                    "data": {
-                        "type": "onboarding-profiles",
-                        "attributes": {"skipped": True},
-                    }
-                },
-            ),
-        ],
-    ),
-    retrieve=extend_schema(exclude=True),
-)
-class TenantOnboardingProfileViewSet(BaseRLSViewSet):
-    """The tenant's declared onboarding profile: one row, written once."""
-
-    queryset = TenantOnboardingProfile.objects.all()
-    serializer_class = TenantOnboardingProfileSerializer
-    filterset_class = TenantOnboardingProfileFilter
-    http_method_names = ["get", "post"]
-    ordering = ["-inserted_at"]
-    ordering_fields = ["inserted_at"]
-    # Any member may answer: the step runs at first login, before roles are
-    # curated, and the answer describes the tenant rather than the user.
-    required_permissions = []
-
-    def set_required_permissions(self):
-        self.required_permissions = []
-
-    def get_queryset(self):
-        return TenantOnboardingProfile.objects.filter(tenant_id=self.request.tenant_id)
-
-    def get_serializer_class(self):
-        if self.action == "create":
-            return TenantOnboardingProfileCreateSerializer
-        return super().get_serializer_class()
-
-    def retrieve(self, request, *args, **kwargs):
-        # The resource is a single row per tenant, so the collection is the
-        # only meaningful read. `extend_schema(exclude=True)` hides the detail
-        # route from the docs; this is what actually closes it.
-        raise MethodNotAllowed(method="GET")
-
-    def _stored_response(self, profile, http_status):
-        return Response(
-            TenantOnboardingProfileSerializer(
-                profile, context=self.get_serializer_context()
-            ).data,
-            status=http_status,
-        )
-
-    def create(self, request, *args, **kwargs):
-        existing = self.get_queryset().first()
-        if existing is not None:
-            return self._stored_response(existing, status.HTTP_200_OK)
-
-        serializer = self.get_serializer(data=request.data)
-        serializer.is_valid(raise_exception=True)
-        try:
-            with transaction.atomic(using=self.db_alias):
-                profile = serializer.save(submitted_by=request.user)
-        except IntegrityError:
-            # Two first-login tabs raced on the unique tenant row; the answer
-            # that landed first is the one that stays.
-            return self._stored_response(
-                self.get_queryset().first(), status.HTTP_200_OK
-            )
-        return self._stored_response(profile, status.HTTP_201_CREATED)
diff --git a/ui/actions/onboarding/profile.test.ts b/ui/actions/onboarding/profile.test.ts
deleted file mode 100644
index 0786ec18f1..0000000000
--- a/ui/actions/onboarding/profile.test.ts
+++ /dev/null
@@ -1,200 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const {
-  fetchMock,
-  getAuthHeadersMock,
-  handleApiErrorMock,
-  handleApiResponseMock,
-} = vi.hoisted(() => ({
-  fetchMock: vi.fn(),
-  getAuthHeadersMock: vi.fn(),
-  handleApiErrorMock: vi.fn(),
-  handleApiResponseMock: vi.fn(),
-}));
-
-vi.mock("next/cache", () => ({ revalidatePath: vi.fn() }));
-vi.mock("next/navigation", () => ({ redirect: vi.fn() }));
-
-vi.mock("@/lib", () => ({
-  apiBaseUrl: "https://api.example.com/api/v1",
-  getAuthHeaders: getAuthHeadersMock,
-}));
-
-vi.mock("@/lib/server-actions-helper", () => ({
-  handleApiError: handleApiErrorMock,
-  handleApiResponse: handleApiResponseMock,
-}));
-
-import {
-  isOnboardingProfileRecorded,
-  skipOnboardingProfile,
-  submitOnboardingProfile,
-} from "./profile";
-
-const ANSWERS = {
-  declared_cloud_accounts: "11-50",
-  declared_role: "security",
-  declared_seniority: "director",
-} as const;
-
-describe("onboarding profile actions", () => {
-  beforeEach(() => {
-    vi.stubGlobal("fetch", fetchMock);
-    fetchMock.mockReset();
-    getAuthHeadersMock.mockReset().mockResolvedValue({});
-    handleApiErrorMock.mockReset();
-    handleApiResponseMock.mockReset().mockResolvedValue({ data: { id: "p1" } });
-  });
-
-  it("reports a stored profile and sends the declared buckets", async () => {
-    // Given
-    fetchMock.mockResolvedValue(new Response("{}", { status: 201 }));
-
-    // When
-    const result = await submitOnboardingProfile(ANSWERS);
-
-    // Then
-    expect(result).toEqual({ stored: true });
-    const [url, init] = fetchMock.mock.calls[0];
-    expect(url).toBe("https://api.example.com/api/v1/onboarding-profiles");
-    expect(JSON.parse(init.body).data).toEqual({
-      type: "onboarding-profiles",
-      attributes: ANSWERS,
-    });
-  });
-
-  it("records a skip as its own payload", async () => {
-    // Given
-    fetchMock.mockResolvedValue(new Response("{}", { status: 201 }));
-
-    // When
-    const result = await skipOnboardingProfile();
-
-    // Then
-    expect(result).toEqual({ stored: true });
-    expect(JSON.parse(fetchMock.mock.calls[0][1].body).data.attributes).toEqual(
-      {
-        skipped: true,
-      },
-    );
-  });
-
-  it("treats a transport failure as not stored", async () => {
-    // Given — the request never reaches the API.
-    fetchMock.mockRejectedValue(new Error("network down"));
-
-    // When
-    const result = await submitOnboardingProfile(ANSWERS);
-
-    // Then
-    expect(result.stored).toBe(false);
-    expect(result.error).toBeTruthy();
-    expect(handleApiErrorMock).toHaveBeenCalledTimes(1);
-  });
-
-  it("treats a rejection without an errors array as not stored", async () => {
-    // Given — e.g. a 403, which `handleApiResponse` returns as a bare error.
-    fetchMock.mockResolvedValue(new Response("{}", { status: 403 }));
-    handleApiResponseMock.mockResolvedValue({
-      error: "Forbidden",
-      status: 403,
-    });
-
-    // When
-    const result = await submitOnboardingProfile(ANSWERS);
-
-    // Then
-    expect(result).toEqual({ stored: false, error: "Forbidden" });
-  });
-
-  it("surfaces the API's own message when the payload carries one", async () => {
-    // Given
-    fetchMock.mockResolvedValue(new Response("{}", { status: 400 }));
-    handleApiResponseMock.mockResolvedValue({
-      error: "Bad request",
-      errors: [{ detail: "This field is required." }],
-    });
-
-    // When
-    const result = await submitOnboardingProfile(ANSWERS);
-
-    // Then
-    expect(result).toEqual({
-      stored: false,
-      error: "This field is required.",
-    });
-  });
-
-  it("treats a thrown server error as not stored", async () => {
-    // Given — `handleApiResponse` throws on 5xx.
-    fetchMock.mockResolvedValue(new Response("{}", { status: 500 }));
-    handleApiResponseMock.mockRejectedValue(new Error("server error"));
-
-    // When
-    const result = await skipOnboardingProfile();
-
-    // Then
-    expect(result.stored).toBe(false);
-    expect(handleApiErrorMock).toHaveBeenCalledTimes(1);
-  });
-
-  it.each([
-    ["a submission", () => submitOnboardingProfile(ANSWERS)],
-    ["a skip", () => skipOnboardingProfile()],
-  ])(
-    "reports %s as unstored when the session cannot be read",
-    async (_, run) => {
-      // Given — `auth()` rejects, e.g. a session this deployment cannot decode.
-      getAuthHeadersMock.mockRejectedValue(new Error("session unreadable"));
-
-      // When
-      const result = await run();
-
-      // Then — a result, never a throw: the step stays eligible next login.
-      expect(result).toEqual({ stored: false, error: expect.any(String) });
-      expect(fetchMock).not.toHaveBeenCalled();
-      expect(handleApiErrorMock).toHaveBeenCalledTimes(1);
-    },
-  );
-
-  it("reads an unreadable session as an unknown profile state", async () => {
-    // Given — this runs in the root layout, so a throw would abort its render.
-    getAuthHeadersMock.mockRejectedValue(new Error("session unreadable"));
-
-    // When / Then — `undefined` makes the gate fail open.
-    await expect(isOnboardingProfileRecorded()).resolves.toBeUndefined();
-    expect(fetchMock).not.toHaveBeenCalled();
-  });
-
-  it("refuses answers outside the declared vocabulary", async () => {
-    // When / Then — validation happens before any request.
-    await expect(
-      submitOnboardingProfile({
-        ...ANSWERS,
-        declared_role: "ceo",
-      } as unknown as typeof ANSWERS),
-    ).rejects.toThrow();
-    expect(fetchMock).not.toHaveBeenCalled();
-  });
-
-  it.each([
-    ["an empty list", { data: [] }, false],
-    ["a stored row", { data: [{ id: "p1" }] }, true],
-  ])("reads %s as recorded=%s", async (_, payload, expected) => {
-    // Given
-    fetchMock.mockResolvedValue(
-      new Response(JSON.stringify(payload), { status: 200 }),
-    );
-
-    // Then
-    expect(await isOnboardingProfileRecorded()).toBe(expected);
-  });
-
-  it("returns undefined when the read fails, so the gate fails open", async () => {
-    // Given
-    fetchMock.mockResolvedValue(new Response("{}", { status: 500 }));
-
-    // Then
-    expect(await isOnboardingProfileRecorded()).toBeUndefined();
-  });
-});
diff --git a/ui/actions/onboarding/profile.ts b/ui/actions/onboarding/profile.ts
deleted file mode 100644
index e9319378d2..0000000000
--- a/ui/actions/onboarding/profile.ts
+++ /dev/null
@@ -1,119 +0,0 @@
-"use server";
-
-import { z } from "zod";
-
-import { apiBaseUrl, getAuthHeaders } from "@/lib";
-import { handleApiError, handleApiResponse } from "@/lib/server-actions-helper";
-import {
-  DECLARED_CLOUD_ACCOUNTS,
-  DECLARED_ROLE,
-  DECLARED_SENIORITY,
-  type OnboardingProfileAnswers,
-} from "@/types/onboarding-profile";
-
-const ONBOARDING_PROFILES_PATH = "/onboarding-profiles";
-const RESOURCE_TYPE = "onboarding-profiles";
-
-// Explicit outcome instead of the raw API payload: the caller records the
-// step as resolved only when the row was really written, and a transport
-// failure is as unsuccessful as a rejected payload.
-export interface OnboardingProfileResult {
-  stored: boolean;
-  error?: string;
-}
-
-const onboardingProfileAnswersSchema = z.object({
-  declared_cloud_accounts: z.enum(
-    Object.values(DECLARED_CLOUD_ACCOUNTS) as [string, ...string[]],
-  ),
-  declared_role: z.enum(Object.values(DECLARED_ROLE) as [string, ...string[]]),
-  declared_seniority: z.enum(
-    Object.values(DECLARED_SENIORITY) as [string, ...string[]],
-  ),
-});
-
-const GENERIC_FAILURE = "The onboarding profile could not be saved.";
-
-const failureMessage = (payload: unknown): string | undefined => {
-  if (typeof payload !== "object" || payload === null) return undefined;
-  const result = payload as { error?: unknown; errors?: unknown };
-  if (Array.isArray(result.errors)) {
-    const detail = (result.errors[0] as { detail?: unknown })?.detail;
-    if (typeof detail === "string") return detail;
-  }
-  return typeof result.error === "string" ? result.error : undefined;
-};
-
-const postOnboardingProfile = async (
-  attributes: Record<string, unknown>,
-): Promise<OnboardingProfileResult> => {
-  const body = JSON.stringify({
-    data: { type: RESOURCE_TYPE, attributes },
-  });
-
-  let response: Response;
-  try {
-    // Inside the boundary: `getAuthHeaders` awaits `auth()`, which rejects on
-    // an undecodable session. The contract above promises a result, not a
-    // throw, so a dead session must read as "not stored" and leave the step
-    // eligible for the next login.
-    const headers = await getAuthHeaders({ contentType: true });
-    response = await fetch(`${apiBaseUrl}${ONBOARDING_PROFILES_PATH}`, {
-      method: "POST",
-      headers,
-      body,
-    });
-  } catch (error) {
-    handleApiError(error);
-    return { stored: false, error: GENERIC_FAILURE };
-  }
-
-  // `handleApiResponse` reports to Sentry and throws on server errors; the
-  // status is what decides the outcome, since a rejection can come back
-  // without an `errors` array.
-  try {
-    const payload = await handleApiResponse(response);
-    if (!response.ok) {
-      return {
-        stored: false,
-        error: failureMessage(payload) ?? GENERIC_FAILURE,
-      };
-    }
-    return { stored: true };
-  } catch (error) {
-    handleApiError(error);
-    return { stored: false, error: GENERIC_FAILURE };
-  }
-};
-
-// Records the three declared buckets. The API keeps the first answer per
-// tenant: a repeated submission answers 200 with the stored profile.
-export const submitOnboardingProfile = async (
-  answers: OnboardingProfileAnswers,
-): Promise<OnboardingProfileResult> =>
-  postOnboardingProfile(onboardingProfileAnswersSchema.parse(answers));
-
-// A skip is a fact worth storing: it separates "declined" from "never
-// shown" in the funnel.
-export const skipOnboardingProfile =
-  async (): Promise<OnboardingProfileResult> =>
-    postOnboardingProfile({ skipped: true });
-
-// Whether the tenant already went through the step on any device. `undefined`
-// means the read failed; the gate fails open and does not force the modal.
-export const isOnboardingProfileRecorded = async (): Promise<
-  boolean | undefined
-> => {
-  const url = new URL(`${apiBaseUrl}${ONBOARDING_PROFILES_PATH}`);
-  url.searchParams.set("page[size]", "1");
-
-  try {
-    const headers = await getAuthHeaders({ contentType: false });
-    const response = await fetch(url.toString(), { headers });
-    if (!response.ok) return undefined;
-    const payload = await response.json();
-    return Array.isArray(payload?.data) ? payload.data.length > 0 : undefined;
-  } catch {
-    return undefined;
-  }
-};
diff --git a/ui/app/(prowler)/layout.tsx b/ui/app/(prowler)/layout.tsx
index bd58df359b..4a6244ffec 100644
--- a/ui/app/(prowler)/layout.tsx
+++ b/ui/app/(prowler)/layout.tsx
@@ -4,18 +4,15 @@ import * as Sentry from "@sentry/nextjs";
 import { Metadata, Viewport } from "next";
 import { ReactNode, Suspense } from "react";
 
-import { isOnboardingProfileRecorded } from "@/actions/onboarding/profile";
 import { getProviders } from "@/actions/providers";
 import { getScansByState } from "@/actions/scans/scans";
 import { auth } from "@/auth.config";
 import MainLayout from "@/components/layout/main-layout/main-layout";
 import {
   OnboardingCheckpointWatcher,
+  OnboardingGate,
   OnboardingSequenceBanner,
 } from "@/components/onboarding";
-// Imported directly: it pulls the server actions, which the shared barrel
-// stays free of so tests can import the barrel without mocking them.
-import { OnboardingProfileGate } from "@/components/onboarding/onboarding-profile-gate";
 import { RuntimePublicConfig } from "@/components/runtime-config/runtime-public-config";
 import { NavigationProgress } from "@/components/shadcn/navigation-progress";
 import { Toaster } from "@/components/shadcn/toast";
@@ -74,8 +71,6 @@ export default async function RootLayout({
   let hasCompletedScan = true;
   // Tri-state: true = has providers, false = zero providers, undefined = fetch failed (gate fails open).
   let hasProviders: boolean | undefined = false;
-  // Same tri-state for the onboarding profile step; only new tenants pay the read.
-  let profileRecorded: boolean | undefined = true;
   // Scopes the onboarding steps' local markers, so resolving them for one
   // tenant does not silence them for another.
   let tenantId: string | null = null;
@@ -95,9 +90,6 @@ export default async function RootLayout({
       ? providersData.data.length > 0
       : undefined;
     tenantId = (await auth())?.tenantId ?? null;
-    if (hasProviders === false) {
-      profileRecorded = await isOnboardingProfileRecorded();
-    }
   }
 
   const registryEligible =
@@ -128,12 +120,7 @@ export default async function RootLayout({
           />
           {cloudEnabled && (
             <>
-              {/* Profile step first, then the tour gate it wraps. */}
-              <OnboardingProfileGate
-                hasProviders={hasProviders}
-                profileRecorded={profileRecorded}
-                tenantId={tenantId}
-              />
+              <OnboardingGate hasProviders={hasProviders} />
               {/* Single mount point so the watcher survives post-connect navigation. */}
               <OnboardingCheckpointWatcher tenantId={tenantId} />
               {/* Persistent banner shown only while a guided sequence is active. */}
diff --git a/ui/changelog.d/onboarding-profile.added.md b/ui/changelog.d/onboarding-profile.added.md
deleted file mode 100644
index 07f156517e..0000000000
--- a/ui/changelog.d/onboarding-profile.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Onboarding profile step at a new tenant's first login asking for cloud accounts, area of work and position (skippable), shown before the "Add your first provider" gate
diff --git a/ui/components/onboarding/__tests__/onboarding-profile-gate.test.tsx b/ui/components/onboarding/__tests__/onboarding-profile-gate.test.tsx
deleted file mode 100644
index 8adc2c7f24..0000000000
--- a/ui/components/onboarding/__tests__/onboarding-profile-gate.test.tsx
+++ /dev/null
@@ -1,267 +0,0 @@
-import { render, screen, waitFor } from "@testing-library/react";
-import userEvent from "@testing-library/user-event";
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-
-import {
-  ONBOARDING_PROFILE_STEP_EVENT,
-  type OnboardingProfileStepDetail,
-} from "@/lib/onboarding/onboarding-events";
-import { onboardingProfileMarkerKey } from "@/lib/onboarding/profile-marker";
-
-import { OnboardingProfileGate } from "../onboarding-profile-gate";
-
-const { pathnameMock, submitMock, skipMock } = vi.hoisted(() => ({
-  pathnameMock: vi.fn(),
-  submitMock: vi.fn(),
-  skipMock: vi.fn(),
-}));
-
-vi.mock("next/navigation", () => ({
-  usePathname: () => pathnameMock(),
-}));
-
-vi.mock("@/actions/onboarding/profile", () => ({
-  submitOnboardingProfile: submitMock,
-  skipOnboardingProfile: skipMock,
-}));
-
-vi.mock("../onboarding-gate", () => ({
-  OnboardingGate: ({ hasProviders }: { hasProviders?: boolean }) => (
-    <div data-testid="tour-gate" data-has-providers={String(hasProviders)} />
-  ),
-}));
-
-const TENANT_ID = "3f6c2f1e-7b0a-4d5c-9a21-0c9f4f2a7b10";
-const OTHER_TENANT_ID = "8a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d";
-const MARKER_KEY = onboardingProfileMarkerKey(TENANT_ID) as string;
-
-const ANSWERS = {
-  declared_cloud_accounts: "11-50",
-  declared_role: "security",
-  declared_seniority: "director",
-} as const;
-
-const answerEverything = async (user: ReturnType<typeof userEvent.setup>) => {
-  await user.click(screen.getByRole("radio", { name: "11-50" }));
-  await user.click(screen.getByRole("radio", { name: "Security" }));
-  await user.click(screen.getByRole("radio", { name: "Director / Head of" }));
-  await user.click(screen.getByRole("button", { name: "Continue" }));
-};
-
-describe("OnboardingProfileGate", () => {
-  const outcomes: OnboardingProfileStepDetail[] = [];
-  const recordOutcome = (event: Event) => {
-    outcomes.push((event as CustomEvent<OnboardingProfileStepDetail>).detail);
-  };
-
-  beforeEach(() => {
-    window.localStorage.clear();
-    outcomes.length = 0;
-    window.addEventListener(ONBOARDING_PROFILE_STEP_EVENT, recordOutcome);
-    pathnameMock.mockReturnValue("/");
-    submitMock.mockReset().mockResolvedValue({ stored: true });
-    skipMock.mockReset().mockResolvedValue({ stored: true });
-  });
-
-  afterEach(() => {
-    window.removeEventListener(ONBOARDING_PROFILE_STEP_EVENT, recordOutcome);
-  });
-
-  it("asks the profile before the tour gate for a provably new tenant", async () => {
-    // When
-    render(
-      <OnboardingProfileGate
-        hasProviders={false}
-        profileRecorded={false}
-        tenantId={TENANT_ID}
-      />,
-    );
-
-    // Then
-    expect(
-      await screen.findByRole("button", { name: "Continue" }),
-    ).toBeInTheDocument();
-    expect(screen.queryByTestId("tour-gate")).not.toBeInTheDocument();
-    expect(outcomes).toEqual([{ outcome: "shown" }]);
-  });
-
-  it("stores the answers, announces them and hands over to the tour gate", async () => {
-    // Given
-    const user = userEvent.setup();
-    render(
-      <OnboardingProfileGate
-        hasProviders={false}
-        profileRecorded={false}
-        tenantId={TENANT_ID}
-      />,
-    );
-    await screen.findByRole("button", { name: "Continue" });
-
-    // When
-    await answerEverything(user);
-
-    // Then
-    await waitFor(() =>
-      expect(screen.getByTestId("tour-gate")).toBeInTheDocument(),
-    );
-    expect(submitMock).toHaveBeenCalledWith(ANSWERS);
-    expect(outcomes).toEqual([
-      { outcome: "shown" },
-      { outcome: "submitted", answers: ANSWERS },
-    ]);
-    expect(window.localStorage.getItem(MARKER_KEY)).toBe("true");
-    expect(screen.getByTestId("tour-gate")).toHaveAttribute(
-      "data-has-providers",
-      "false",
-    );
-  });
-
-  it("records a skip as an announced outcome and as a stored fact", async () => {
-    // Given
-    const user = userEvent.setup();
-    render(
-      <OnboardingProfileGate
-        hasProviders={false}
-        profileRecorded={false}
-        tenantId={TENANT_ID}
-      />,
-    );
-    await screen.findByRole("button", { name: "Skip" });
-
-    // When
-    await user.click(screen.getByRole("button", { name: "Skip" }));
-
-    // Then
-    expect(outcomes.at(-1)).toEqual({ outcome: "skipped" });
-    expect(skipMock).toHaveBeenCalledTimes(1);
-    expect(window.localStorage.getItem(MARKER_KEY)).toBe("true");
-    expect(screen.getByTestId("tour-gate")).toBeInTheDocument();
-  });
-
-  it("leaves no marker when the API rejects the answers, so the step returns next login", async () => {
-    // Given
-    const user = userEvent.setup();
-    submitMock.mockResolvedValue({ stored: false, error: "boom" });
-    render(
-      <OnboardingProfileGate
-        hasProviders={false}
-        profileRecorded={false}
-        tenantId={TENANT_ID}
-      />,
-    );
-    await screen.findByRole("button", { name: "Continue" });
-
-    // When
-    await answerEverything(user);
-
-    // Then — closed for this session, but nothing durable was written.
-    await waitFor(() =>
-      expect(screen.getByTestId("tour-gate")).toBeInTheDocument(),
-    );
-    expect(window.localStorage.getItem(MARKER_KEY)).toBeNull();
-    expect(outcomes).toEqual([{ outcome: "shown" }]);
-  });
-
-  it.each([
-    [
-      "the profile is already recorded",
-      { hasProviders: false, profileRecorded: true },
-    ],
-    [
-      "the profile read failed",
-      { hasProviders: false, profileRecorded: undefined },
-    ],
-    ["providers exist", { hasProviders: true, profileRecorded: false }],
-  ])("goes straight to the tour gate when %s", async (_, props) => {
-    // When
-    render(<OnboardingProfileGate {...props} tenantId={TENANT_ID} />);
-
-    // Then
-    expect(screen.getByTestId("tour-gate")).toBeInTheDocument();
-    await waitFor(() =>
-      expect(screen.queryByRole("button", { name: "Continue" })).toBeNull(),
-    );
-    expect(outcomes).toEqual([]);
-  });
-
-  it("does not reopen once this browser handled the step", () => {
-    // Given
-    window.localStorage.setItem(MARKER_KEY, "true");
-
-    // When
-    render(
-      <OnboardingProfileGate
-        hasProviders={false}
-        profileRecorded={false}
-        tenantId={TENANT_ID}
-      />,
-    );
-
-    // Then
-    expect(screen.getByTestId("tour-gate")).toBeInTheDocument();
-    expect(outcomes).toEqual([]);
-  });
-
-  it("defers on billing routes without resolving the step", () => {
-    // Given
-    pathnameMock.mockReturnValue("/billing");
-
-    // When
-    render(
-      <OnboardingProfileGate
-        hasProviders={false}
-        profileRecorded={false}
-        tenantId={TENANT_ID}
-      />,
-    );
-
-    // Then
-    expect(screen.getByTestId("tour-gate")).toBeInTheDocument();
-    expect(window.localStorage.getItem(MARKER_KEY)).toBeNull();
-    expect(outcomes).toEqual([]);
-  });
-
-  it("still asks another tenant that the same browser has not answered", async () => {
-    // Given — this browser answered for one tenant.
-    window.localStorage.setItem(MARKER_KEY, "true");
-
-    // When — the user switches to a second, brand-new tenant.
-    render(
-      <OnboardingProfileGate
-        hasProviders={false}
-        profileRecorded={false}
-        tenantId={OTHER_TENANT_ID}
-      />,
-    );
-
-    // Then
-    expect(
-      await screen.findByRole("button", { name: "Continue" }),
-    ).toBeInTheDocument();
-    expect(outcomes).toEqual([{ outcome: "shown" }]);
-  });
-
-  it("leaves no marker and announces nothing when the skip is not stored", async () => {
-    // Given
-    const user = userEvent.setup();
-    skipMock.mockResolvedValue({ stored: false, error: "boom" });
-    render(
-      <OnboardingProfileGate
-        hasProviders={false}
-        profileRecorded={false}
-        tenantId={TENANT_ID}
-      />,
-    );
-    await screen.findByRole("button", { name: "Skip" });
-
-    // When
-    await user.click(screen.getByRole("button", { name: "Skip" }));
-
-    // Then
-    await waitFor(() =>
-      expect(screen.getByTestId("tour-gate")).toBeInTheDocument(),
-    );
-    expect(window.localStorage.getItem(MARKER_KEY)).toBeNull();
-    expect(outcomes).toEqual([{ outcome: "shown" }]);
-  });
-});
diff --git a/ui/components/onboarding/__tests__/onboarding-profile-modal.test.tsx b/ui/components/onboarding/__tests__/onboarding-profile-modal.test.tsx
deleted file mode 100644
index 3098e6dae8..0000000000
--- a/ui/components/onboarding/__tests__/onboarding-profile-modal.test.tsx
+++ /dev/null
@@ -1,73 +0,0 @@
-import { render, screen } from "@testing-library/react";
-import userEvent from "@testing-library/user-event";
-import { describe, expect, it, vi } from "vitest";
-
-import { OnboardingProfileModal } from "../onboarding-profile-modal";
-
-describe("OnboardingProfileModal", () => {
-  it("asks the three closed questions and keeps Continue disabled until all are answered", async () => {
-    // Given
-    const user = userEvent.setup();
-    const onSubmit = vi.fn();
-    render(
-      <OnboardingProfileModal open onSubmit={onSubmit} onSkip={vi.fn()} />,
-    );
-    const submit = screen.getByRole("button", { name: "Continue" });
-    expect(submit).toBeDisabled();
-
-    // When
-    await user.click(screen.getByRole("radio", { name: "11-50" }));
-    expect(submit).toBeDisabled();
-    await user.click(screen.getByRole("radio", { name: "Security" }));
-    // Discipline alone is not enough: the ladder is a separate answer.
-    expect(submit).toBeDisabled();
-    await user.click(screen.getByRole("radio", { name: "Director / Head of" }));
-    await user.click(submit);
-
-    // Then
-    expect(onSubmit).toHaveBeenCalledWith({
-      declared_cloud_accounts: "11-50",
-      declared_role: "security",
-      declared_seniority: "director",
-    });
-  });
-
-  it("reports a skip from the secondary action and from closing the dialog", async () => {
-    // Given
-    const user = userEvent.setup();
-    const onSkip = vi.fn();
-    render(<OnboardingProfileModal open onSubmit={vi.fn()} onSkip={onSkip} />);
-
-    // When
-    await user.click(screen.getByRole("button", { name: "Skip" }));
-    await user.keyboard("{Escape}");
-
-    // Then
-    expect(onSkip).toHaveBeenCalledTimes(2);
-  });
-
-  it("locks every control while a submission is in flight", async () => {
-    // Given
-    const user = userEvent.setup();
-    const onSkip = vi.fn();
-    render(
-      <OnboardingProfileModal
-        open
-        isSubmitting
-        onSubmit={vi.fn()}
-        onSkip={onSkip}
-      />,
-    );
-
-    // Then
-    expect(screen.getByRole("button", { name: "Saving..." })).toBeDisabled();
-    expect(screen.getByRole("button", { name: "Skip" })).toBeDisabled();
-    expect(screen.getByRole("radio", { name: "Security" })).toBeDisabled();
-
-    // When — closing must not count as a skip mid-flight.
-    await user.keyboard("{Escape}");
-
-    // Then
-    expect(onSkip).not.toHaveBeenCalled();
-  });
-});
diff --git a/ui/components/onboarding/onboarding-profile-gate.tsx b/ui/components/onboarding/onboarding-profile-gate.tsx
deleted file mode 100644
index 36853ab3cf..0000000000
--- a/ui/components/onboarding/onboarding-profile-gate.tsx
+++ /dev/null
@@ -1,128 +0,0 @@
-"use client";
-
-import { usePathname } from "next/navigation";
-import { useState, useSyncExternalStore } from "react";
-
-import {
-  skipOnboardingProfile,
-  submitOnboardingProfile,
-} from "@/actions/onboarding/profile";
-import { useMountEffect } from "@/hooks/use-mount-effect";
-import {
-  dispatchOnboardingProfileStep,
-  ONBOARDING_STEP_OUTCOME,
-} from "@/lib/onboarding/onboarding-events";
-import { shouldStartOnboardingProfile } from "@/lib/onboarding/profile-gate-decision";
-import {
-  getServerOnboardingProfileHandled,
-  isOnboardingProfileHandled,
-  markOnboardingProfileHandled,
-  subscribeOnboardingProfileMarker,
-} from "@/lib/onboarding/profile-marker";
-import type { OnboardingProfileAnswers } from "@/types/onboarding-profile";
-
-import { OnboardingGate } from "./onboarding-gate";
-import { OnboardingProfileModal } from "./onboarding-profile-modal";
-
-interface OnboardingProfileGateProps {
-  // `undefined` = fetch failed/ambiguous; fail-open (never force the modal).
-  hasProviders?: boolean;
-  // Whether the API already holds the tenant's profile; `undefined` fails open.
-  profileRecorded?: boolean;
-  // Scopes the local marker: the step is per tenant, not per browser.
-  tenantId?: string | null;
-}
-
-const isBillingPath = (pathname: string | null) =>
-  pathname === "/billing" || pathname?.startsWith("/billing/") === true;
-
-function ShownOnce() {
-  useMountEffect(() => {
-    dispatchOnboardingProfileStep({ outcome: ONBOARDING_STEP_OUTCOME.SHOWN });
-  });
-  return null;
-}
-
-// Profile step in front of the tour gate: the modal resolves first, then
-// `OnboardingGate` takes over with the same `hasProviders` signal. Outcomes
-// are announced as window events for whoever wants to observe them.
-export function OnboardingProfileGate({
-  hasProviders,
-  profileRecorded,
-  tenantId = null,
-}: OnboardingProfileGateProps) {
-  const pathname = usePathname();
-  const handledLocally = useSyncExternalStore(
-    subscribeOnboardingProfileMarker,
-    // Bound per tenant so switching accounts re-reads the right key.
-    () => isOnboardingProfileHandled(tenantId),
-    getServerOnboardingProfileHandled,
-  );
-  // Session flag keeps the modal closed after submit/skip within this mount,
-  // including the failure path where no marker is written.
-  const [resolvedThisSession, setResolvedThisSession] = useState(false);
-  const [isSubmitting, setIsSubmitting] = useState(false);
-
-  const showProfile =
-    // Billing must stay usable before onboarding; leaving it keeps the step eligible.
-    !isBillingPath(pathname) &&
-    !resolvedThisSession &&
-    shouldStartOnboardingProfile({
-      hasProviders,
-      profileRecorded,
-      handledLocally,
-    });
-
-  if (!showProfile) return <OnboardingGate hasProviders={hasProviders} />;
-
-  const handleSubmit = async (answers: OnboardingProfileAnswers) => {
-    setIsSubmitting(true);
-    try {
-      const result = await submitOnboardingProfile(answers);
-      if (!result.stored) {
-        // Nothing was written, so no marker and no submitted outcome: the
-        // step returns on the next login instead of being lost.
-        setResolvedThisSession(true);
-        return;
-      }
-      dispatchOnboardingProfileStep({
-        outcome: ONBOARDING_STEP_OUTCOME.SUBMITTED,
-        answers,
-      });
-      markOnboardingProfileHandled(tenantId);
-      setResolvedThisSession(true);
-    } finally {
-      setIsSubmitting(false);
-    }
-  };
-
-  const handleSkip = async () => {
-    setIsSubmitting(true);
-    try {
-      // A skip is a stored fact too, so it is only remembered locally once
-      // the row exists.
-      const result = await skipOnboardingProfile();
-      if (result.stored) {
-        dispatchOnboardingProfileStep({
-          outcome: ONBOARDING_STEP_OUTCOME.SKIPPED,
-        });
-        markOnboardingProfileHandled(tenantId);
-      }
-      setResolvedThisSession(true);
-    } finally {
-      setIsSubmitting(false);
-    }
-  };
-
-  return (
-    <>
-      <ShownOnce />
-      <OnboardingProfileModal
-        open
-        isSubmitting={isSubmitting}
-        onSubmit={handleSubmit}
-        onSkip={handleSkip}
-      />
-    </>
-  );
-}
diff --git a/ui/components/onboarding/onboarding-profile-modal.tsx b/ui/components/onboarding/onboarding-profile-modal.tsx
deleted file mode 100644
index d0dc7d0298..0000000000
--- a/ui/components/onboarding/onboarding-profile-modal.tsx
+++ /dev/null
@@ -1,172 +0,0 @@
-"use client";
-
-import { useState } from "react";
-
-import { Button } from "@/components/shadcn";
-import { DialogFooter } from "@/components/shadcn/dialog";
-import { Modal } from "@/components/shadcn/modal/modal";
-import {
-  RadioGroup,
-  RadioGroupItem,
-} from "@/components/shadcn/radio-group/radio-group";
-import {
-  DECLARED_CLOUD_ACCOUNTS,
-  DECLARED_ROLE,
-  DECLARED_ROLE_LABEL,
-  DECLARED_SENIORITY,
-  DECLARED_SENIORITY_LABEL,
-  type DeclaredCloudAccounts,
-  type DeclaredRole,
-  type DeclaredSeniority,
-  type OnboardingProfileAnswers,
-} from "@/types/onboarding-profile";
-
-interface OnboardingProfileModalProps {
-  open: boolean;
-  isSubmitting?: boolean;
-  onSubmit: (answers: OnboardingProfileAnswers) => void;
-  onSkip: () => void;
-}
-
-interface ProfileQuestionProps<Value extends string> {
-  name: string;
-  legend: string;
-  options: readonly Value[];
-  labels?: Partial<Record<Value, string>>;
-  value: Value | null;
-  onChange: (value: Value) => void;
-  disabled: boolean;
-}
-
-interface ProfileDraft {
-  cloudAccounts: DeclaredCloudAccounts | null;
-  role: DeclaredRole | null;
-  seniority: DeclaredSeniority | null;
-}
-
-const EMPTY_DRAFT: ProfileDraft = {
-  cloudAccounts: null,
-  role: null,
-  seniority: null,
-};
-
-function ProfileQuestion<Value extends string>({
-  name,
-  legend,
-  options,
-  labels,
-  value,
-  onChange,
-  disabled,
-}: ProfileQuestionProps<Value>) {
-  return (
-    <fieldset className="flex flex-col gap-2">
-      <legend className="text-text-neutral-primary mb-2 text-sm font-medium">
-        {legend}
-      </legend>
-      <RadioGroup
-        name={name}
-        value={value ?? ""}
-        onValueChange={(next) => onChange(next as Value)}
-        disabled={disabled}
-        className="flex flex-row flex-wrap gap-x-6 gap-y-2"
-        aria-label={legend}
-      >
-        {options.map((option) => (
-          <label
-            key={option}
-            className="text-text-neutral-secondary flex items-center gap-2 text-sm"
-          >
-            <RadioGroupItem
-              value={option}
-              aria-label={labels?.[option] ?? option}
-            />
-            {labels?.[option] ?? option}
-          </label>
-        ))}
-      </RadioGroup>
-    </fieldset>
-  );
-}
-
-// Three closed questions asked once, at a new tenant's first login, before
-// any product signal could shape the answer. Every path out is recorded by
-// the caller: submit, skip, and close (which counts as a skip).
-export function OnboardingProfileModal({
-  open,
-  isSubmitting = false,
-  onSubmit,
-  onSkip,
-}: OnboardingProfileModalProps) {
-  const [draft, setDraft] = useState<ProfileDraft>(EMPTY_DRAFT);
-  const isComplete =
-    draft.cloudAccounts !== null &&
-    draft.role !== null &&
-    draft.seniority !== null;
-
-  const handleSubmit = () => {
-    const { cloudAccounts, role, seniority } = draft;
-    if (cloudAccounts === null || role === null || seniority === null) return;
-    if (isSubmitting) return;
-    onSubmit({
-      declared_cloud_accounts: cloudAccounts,
-      declared_role: role,
-      declared_seniority: seniority,
-    });
-  };
-
-  return (
-    <Modal
-      open={open}
-      title="Tell us about your setup"
-      description="Three quick questions so Prowler Cloud fits how you work. You can skip them."
-      size="lg"
-      // Overlay/Escape/X counts as a skip — the gate persists the marker once.
-      onOpenChange={(next) => {
-        if (!next && !isSubmitting) onSkip();
-      }}
-    >
-      <div className="flex flex-col gap-6">
-        <ProfileQuestion
-          name="declared_cloud_accounts"
-          legend="How many cloud accounts do you manage?"
-          options={Object.values(DECLARED_CLOUD_ACCOUNTS)}
-          value={draft.cloudAccounts}
-          onChange={(cloudAccounts) =>
-            setDraft((current) => ({ ...current, cloudAccounts }))
-          }
-          disabled={isSubmitting}
-        />
-        <ProfileQuestion
-          name="declared_role"
-          legend="Which area do you work in?"
-          options={Object.values(DECLARED_ROLE)}
-          labels={DECLARED_ROLE_LABEL}
-          value={draft.role}
-          onChange={(role) => setDraft((current) => ({ ...current, role }))}
-          disabled={isSubmitting}
-        />
-        <ProfileQuestion
-          name="declared_seniority"
-          legend="What best describes your position?"
-          options={Object.values(DECLARED_SENIORITY)}
-          labels={DECLARED_SENIORITY_LABEL}
-          value={draft.seniority}
-          onChange={(seniority) =>
-            setDraft((current) => ({ ...current, seniority }))
-          }
-          disabled={isSubmitting}
-        />
-      </div>
-      <DialogFooter>
-        {/* Outline matches the app's modal secondary action (e.g. Launch Scan's Cancel). */}
-        <Button variant="outline" onClick={onSkip} disabled={isSubmitting}>
-          Skip
-        </Button>
-        <Button onClick={handleSubmit} disabled={!isComplete || isSubmitting}>
-          {isSubmitting ? "Saving..." : "Continue"}
-        </Button>
-      </DialogFooter>
-    </Modal>
-  );
-}
diff --git a/ui/lib/onboarding/README.md b/ui/lib/onboarding/README.md
index 390466e429..0b76ec6ced 100644
--- a/ui/lib/onboarding/README.md
+++ b/ui/lib/onboarding/README.md
@@ -2,10 +2,11 @@
 
 The onboarding system runs short, anchored driver.js tours and orchestrates a
 cross-route **guided sequence** after a user connects their first provider.
-The tours and the sequence live entirely in client state and localStorage —
-**no backend coupling**. The profile step described below is the exception:
-it persists the tenant's answer through `POST /onboarding-profiles`, and the
-server answer, not localStorage, decides whether it is still owed.
+The tours and the guided sequence run on client state (the sequence slice
+is ephemeral and resets on a hard reload); tour completion and the one-time
+markers persist in localStorage. Server input is the tri-state `hasProviders`
+the layout derives from `getProviders()`, plus the invitation the invite step
+posts to the API.
 
 ## Building blocks
 
@@ -19,7 +20,6 @@ server answer, not localStorage, decides whether it is still owed.
 | Ephemeral sequence slice               | `ui/store/onboarding-sequence.ts`                                     |
 | Checkpoint watcher + dialog            | `ui/components/onboarding/onboarding-checkpoint-{watcher,dialog}.tsx` |
 | Mandatory new-user gate                | `ui/components/onboarding/onboarding-gate.tsx`                        |
-| Profile step in front of the gate      | `ui/components/onboarding/onboarding-profile-{gate,modal}.tsx`        |
 | Step outcome events (window)           | `ui/lib/onboarding/onboarding-events.ts`                              |
 | Invite step before the checkpoint      | `ui/components/onboarding/onboarding-invite-{step,dialog}.tsx`        |
 | Manual replay list                     | `ui/components/ui/user-nav/user-nav.tsx`                              |
@@ -78,25 +78,6 @@ the sequence automatically.
 - `pnpm exec vitest run --project unit` — pure logic (slice, helpers, registry,
   tour shapes). The driver primitive short-circuits in `NODE_ENV==="test"`.
 
-## Profile step
-
-Before the mandatory gate offers the first tour, `OnboardingProfileGate` asks
-a new tenant three closed questions (cloud accounts, area of work and
-position) and
-records the answer, or the skip, through `POST /onboarding-profiles`. The API
-keeps the first answer per tenant, so the layout only reads
-`isOnboardingProfileRecorded()` for tenants without providers and the gate
-fails open on any doubt (`shouldStartOnboardingProfile`). A per-tenant localStorage
-marker (`prowler.onboarding.profile.<tenantId>`) spares the flash on later
-renders; a submission or skip the API did not store writes no marker, so the
-step returns next login.
-
-Each resolution (`shown`, `submitted` with the answers, `skipped`) is announced
-as a `prowler:onboarding-profile-step` window event
-(`dispatchOnboardingProfileStep`). The step has no listener of its own: a
-deployment that wants to observe it subscribes from outside, so the onboarding
-stays free of tracking dependencies.
-
 ## Invite step
 
 The first time the checkpoint opens (right after the first provider is
diff --git a/ui/lib/onboarding/__tests__/profile-gate-decision.test.ts b/ui/lib/onboarding/__tests__/profile-gate-decision.test.ts
deleted file mode 100644
index 0f3430fb2b..0000000000
--- a/ui/lib/onboarding/__tests__/profile-gate-decision.test.ts
+++ /dev/null
@@ -1,32 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import { shouldStartOnboardingProfile } from "../profile-gate-decision";
-
-describe("shouldStartOnboardingProfile", () => {
-  it("opens for a zero-provider tenant with no profile and no local marker", () => {
-    expect(
-      shouldStartOnboardingProfile({
-        hasProviders: false,
-        profileRecorded: false,
-        handledLocally: false,
-      }),
-    ).toBe(true);
-  });
-
-  it.each([
-    ["providers already exist", { hasProviders: true }],
-    ["the providers read failed", { hasProviders: undefined }],
-    ["a profile is already recorded", { profileRecorded: true }],
-    ["the profile read failed", { profileRecorded: undefined }],
-    ["this browser already resolved the step", { handledLocally: true }],
-  ])("stays closed when %s", (_, override) => {
-    expect(
-      shouldStartOnboardingProfile({
-        hasProviders: false,
-        profileRecorded: false,
-        handledLocally: false,
-        ...override,
-      }),
-    ).toBe(false);
-  });
-});
diff --git a/ui/lib/onboarding/index.ts b/ui/lib/onboarding/index.ts
index 8d0c967b65..42e1811b28 100644
--- a/ui/lib/onboarding/index.ts
+++ b/ui/lib/onboarding/index.ts
@@ -7,15 +7,10 @@ export type { OnboardingContext, OnboardingFlow } from "./onboarding-types";
 export { getFlowById, getOrderedFlows, onboardingFlows } from "./registry";
 export type {
   OnboardingInviteStepDetail,
-  OnboardingProfileStepDetail,
   OnboardingStepOutcome,
 } from "./onboarding-events";
 export {
   dispatchOnboardingInviteStep,
-  dispatchOnboardingProfileStep,
   ONBOARDING_INVITE_STEP_EVENT,
-  ONBOARDING_PROFILE_STEP_EVENT,
   ONBOARDING_STEP_OUTCOME,
 } from "./onboarding-events";
-export type { ProfileGateDecisionInput } from "./profile-gate-decision";
-export { shouldStartOnboardingProfile } from "./profile-gate-decision";
diff --git a/ui/lib/onboarding/onboarding-events.ts b/ui/lib/onboarding/onboarding-events.ts
index 360cdb1035..23e924e7ac 100644
--- a/ui/lib/onboarding/onboarding-events.ts
+++ b/ui/lib/onboarding/onboarding-events.ts
@@ -1,10 +1,7 @@
-import type { OnboardingProfileAnswers } from "@/types/onboarding-profile";
-
 // Window events the onboarding steps dispatch when they resolve. They carry
 // no listener of their own: a deployment that wants to observe the steps
 // (product analytics, for instance) subscribes from outside, so the steps
 // stay free of any tracking dependency.
-export const ONBOARDING_PROFILE_STEP_EVENT = "prowler:onboarding-profile-step";
 export const ONBOARDING_INVITE_STEP_EVENT = "prowler:onboarding-invite-step";
 
 export const ONBOARDING_STEP_OUTCOME = {
@@ -16,25 +13,6 @@ export const ONBOARDING_STEP_OUTCOME = {
 export type OnboardingStepOutcome =
   (typeof ONBOARDING_STEP_OUTCOME)[keyof typeof ONBOARDING_STEP_OUTCOME];
 
-interface OnboardingProfileStepSubmitted {
-  outcome: typeof ONBOARDING_STEP_OUTCOME.SUBMITTED;
-  // The stored answers, so a listener never has to read them back.
-  answers: OnboardingProfileAnswers;
-}
-
-interface OnboardingProfileStepResolved {
-  outcome:
-    | typeof ONBOARDING_STEP_OUTCOME.SHOWN
-    | typeof ONBOARDING_STEP_OUTCOME.SKIPPED;
-  answers?: never;
-}
-
-// A union rather than an optional field: only a submitted step carries the
-// answers, so a listener that narrows on `outcome` gets them without a check.
-export type OnboardingProfileStepDetail =
-  | OnboardingProfileStepSubmitted
-  | OnboardingProfileStepResolved;
-
 export interface OnboardingInviteStepDetail {
   outcome: OnboardingStepOutcome;
 }
@@ -48,12 +26,6 @@ function dispatch<Detail>(name: string, detail: Detail): void {
   }
 }
 
-export function dispatchOnboardingProfileStep(
-  detail: OnboardingProfileStepDetail,
-): void {
-  dispatch(ONBOARDING_PROFILE_STEP_EVENT, detail);
-}
-
 export function dispatchOnboardingInviteStep(
   detail: OnboardingInviteStepDetail,
 ): void {
diff --git a/ui/lib/onboarding/profile-gate-decision.ts b/ui/lib/onboarding/profile-gate-decision.ts
deleted file mode 100644
index 83fedc18a0..0000000000
--- a/ui/lib/onboarding/profile-gate-decision.ts
+++ /dev/null
@@ -1,20 +0,0 @@
-export interface ProfileGateDecisionInput {
-  // `undefined` allowed; the strict `=== false` checks below fail open on
-  // ambiguous signals, like the tour gate does.
-  hasProviders: boolean | undefined;
-  // Whether the API already holds a profile row for the tenant (answered or
-  // skipped on any device). `undefined` means the read failed.
-  profileRecorded: boolean | undefined;
-  // Local marker: this browser already resolved the step.
-  handledLocally: boolean;
-}
-
-// Shows the profile step only for a provably new tenant that has neither a
-// recorded profile nor a local marker. Any doubt keeps the step closed.
-export function shouldStartOnboardingProfile({
-  hasProviders,
-  profileRecorded,
-  handledLocally,
-}: ProfileGateDecisionInput): boolean {
-  return hasProviders === false && profileRecorded === false && !handledLocally;
-}
diff --git a/ui/lib/onboarding/profile-marker.ts b/ui/lib/onboarding/profile-marker.ts
deleted file mode 100644
index 20f0005e8a..0000000000
--- a/ui/lib/onboarding/profile-marker.ts
+++ /dev/null
@@ -1,67 +0,0 @@
-// Durable "this browser already resolved the profile step" memory, mirroring
-// the checkpoint marker. The API row is the system of record; the marker only
-// spares a flash of the modal before the server answer catches up.
-//
-// The key carries the tenant because eligibility is tenant-scoped: a user who
-// answered for one tenant must still be asked when they switch to a new one.
-const ONBOARDING_PROFILE_MARKER_PREFIX = "prowler.onboarding.profile";
-
-const listeners = new Set<() => void>();
-
-// Tenant ids are UUIDs; anything else is refused rather than concatenated
-// into a storage key.
-const TENANT_ID_PATTERN =
-  /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-
-export function onboardingProfileMarkerKey(
-  tenantId: string | null | undefined,
-): string | null {
-  if (!tenantId || !TENANT_ID_PATTERN.test(tenantId)) return null;
-  return `${ONBOARDING_PROFILE_MARKER_PREFIX}.${tenantId.toLowerCase()}`;
-}
-
-export function isOnboardingProfileHandled(
-  tenantId: string | null | undefined,
-): boolean {
-  if (typeof window === "undefined") return true;
-  const key = onboardingProfileMarkerKey(tenantId);
-  // Without a usable tenant the local memory cannot be trusted; the
-  // server-side answer decides on its own.
-  if (!key) return false;
-  try {
-    return window.localStorage.getItem(key) !== null;
-  } catch {
-    // Unreadable storage must not re-open the step forever: treat as handled.
-    return true;
-  }
-}
-
-export function markOnboardingProfileHandled(
-  tenantId: string | null | undefined,
-): void {
-  if (typeof window === "undefined") return;
-  const key = onboardingProfileMarkerKey(tenantId);
-  if (key) {
-    try {
-      window.localStorage.setItem(key, "true");
-    } catch {
-      // Non-fatal: a re-shown step beats a thrown render.
-    }
-  }
-  listeners.forEach((listener) => listener());
-}
-
-// For `useSyncExternalStore`: the marker only changes through
-// `markOnboardingProfileHandled`, so that is the only notification source.
-export function subscribeOnboardingProfileMarker(
-  listener: () => void,
-): () => void {
-  listeners.add(listener);
-  return () => {
-    listeners.delete(listener);
-  };
-}
-
-// Server render and the hydration pass see the step as handled so the modal
-// never flashes before the client can read storage.
-export const getServerOnboardingProfileHandled = () => true;
diff --git a/ui/types/onboarding-profile.ts b/ui/types/onboarding-profile.ts
deleted file mode 100644
index 9980912598..0000000000
--- a/ui/types/onboarding-profile.ts
+++ /dev/null
@@ -1,63 +0,0 @@
-// Closed buckets the onboarding profile step asks at a new tenant's first
-// login. Values mirror `TenantOnboardingProfile` choices in the API and the
-// `declared_*` PostHog properties; change them together.
-
-export const DECLARED_CLOUD_ACCOUNTS = {
-  ONE: "1",
-  TWO_TO_TEN: "2-10",
-  ELEVEN_TO_FIFTY: "11-50",
-  FIFTY_ONE_TO_TWO_HUNDRED: "51-200",
-  OVER_TWO_HUNDRED: "200+",
-} as const;
-
-export type DeclaredCloudAccounts =
-  (typeof DECLARED_CLOUD_ACCOUNTS)[keyof typeof DECLARED_CLOUD_ACCOUNTS];
-
-// Discipline, not rank. Management lives in DECLARED_SENIORITY so the two
-// questions stay orthogonal: a security engineer and a CISO both answer
-// "security" here and differ on the ladder below.
-export const DECLARED_ROLE = {
-  SECURITY: "security",
-  DEVOPS_PLATFORM: "devops_platform",
-  DEVELOPER: "developer",
-  COMPLIANCE_GRC: "compliance_grc",
-  OTHER: "other",
-} as const;
-
-export type DeclaredRole = (typeof DECLARED_ROLE)[keyof typeof DECLARED_ROLE];
-
-// How far up the organisation the answer comes from. Founders get their own
-// bucket: a one-person tenant run by a founder evaluating Prowler is a
-// different prospect from a lone practitioner inside a large company.
-export const DECLARED_SENIORITY = {
-  PRACTITIONER: "practitioner",
-  LEAD: "lead",
-  DIRECTOR: "director",
-  EXECUTIVE: "executive",
-  FOUNDER: "founder",
-} as const;
-
-export type DeclaredSeniority =
-  (typeof DECLARED_SENIORITY)[keyof typeof DECLARED_SENIORITY];
-
-export interface OnboardingProfileAnswers {
-  declared_cloud_accounts: DeclaredCloudAccounts;
-  declared_role: DeclaredRole;
-  declared_seniority: DeclaredSeniority;
-}
-
-export const DECLARED_ROLE_LABEL: Record<DeclaredRole, string> = {
-  [DECLARED_ROLE.SECURITY]: "Security",
-  [DECLARED_ROLE.DEVOPS_PLATFORM]: "DevOps / Platform",
-  [DECLARED_ROLE.DEVELOPER]: "Developer",
-  [DECLARED_ROLE.COMPLIANCE_GRC]: "Compliance / GRC",
-  [DECLARED_ROLE.OTHER]: "Other",
-};
-
-export const DECLARED_SENIORITY_LABEL: Record<DeclaredSeniority, string> = {
-  [DECLARED_SENIORITY.PRACTITIONER]: "Practitioner / IC",
-  [DECLARED_SENIORITY.LEAD]: "Team lead / Manager",
-  [DECLARED_SENIORITY.DIRECTOR]: "Director / Head of",
-  [DECLARED_SENIORITY.EXECUTIVE]: "VP / C-level",
-  [DECLARED_SENIORITY.FOUNDER]: "Founder / Owner",
-};

From 07d48ab15dba388636225d4c9435120fdd1519bb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Fri, 18 Sep 2026 09:20:35 +0200
Subject: [PATCH 74/77] fix(huaweicloud): remove mock data from SMN service
 (#12836)

---
 .../huaweicloud/services/smn/smn_service.py   | 29 --------
 .../smn/huaweicloud_smn_service_test.py       | 72 +++++++++----------
 .../smn_topic_subscriptions_test.py           | 11 +--
 3 files changed, 40 insertions(+), 72 deletions(-)

diff --git a/prowler/providers/huaweicloud/services/smn/smn_service.py b/prowler/providers/huaweicloud/services/smn/smn_service.py
index 371d1ecd91..c614e5149b 100644
--- a/prowler/providers/huaweicloud/services/smn/smn_service.py
+++ b/prowler/providers/huaweicloud/services/smn/smn_service.py
@@ -20,37 +20,8 @@ class SMN(HuaweiCloudService):
         super().__init__(__class__.__name__, provider)
 
         self.topics: List[SMNTopic] = []
-
-        if getattr(self.session, "is_mock", False):
-            self._load_mock_data()
-            return
-
         self._list_topics()
 
-    def _load_mock_data(self):
-        """Load mock data for testing."""
-        region = "la-south-2"
-        self.topics = [
-            SMNTopic(
-                topic_urn="urn:smn:la-south-2:123456789012:alert-topic",
-                topic_id="topic-001",
-                name="alert-topic",
-                display_name="Alert Topic",
-                push_policy=0,
-                confirmed_subscription_count=2,
-                region=region,
-            ),
-            SMNTopic(
-                topic_urn="urn:smn:la-south-2:123456789012:empty-topic",
-                topic_id="topic-002",
-                name="empty-topic",
-                display_name="Empty Topic",
-                push_policy=0,
-                confirmed_subscription_count=0,
-                region=region,
-            ),
-        ]
-
     def _list_topics(self):
         """List all SMN topics across regions and get their subscription counts."""
         if not self.regional_clients:
diff --git a/tests/providers/huaweicloud/services/smn/huaweicloud_smn_service_test.py b/tests/providers/huaweicloud/services/smn/huaweicloud_smn_service_test.py
index a46ec9731f..a91d71cde3 100644
--- a/tests/providers/huaweicloud/services/smn/huaweicloud_smn_service_test.py
+++ b/tests/providers/huaweicloud/services/smn/huaweicloud_smn_service_test.py
@@ -1,11 +1,17 @@
-from types import SimpleNamespace
 from unittest import mock
 
+from huaweicloudsdksmn.v2 import (
+    ListSubscriptionsByTopicResponse,
+    ListSubscriptionsItem,
+    ListTopicsItem,
+    ListTopicsResponse,
+)
+
 from prowler.providers.huaweicloud.services.smn.smn_service import SMN
 
 
-def _topic(number: int):
-    return SimpleNamespace(
+def _topic(number: int) -> ListTopicsItem:
+    return ListTopicsItem(
         topic_urn=f"urn:smn:eu-west-101:account:topic-{number}",
         topic_id=f"topic-{number}",
         name=f"topic-{number}",
@@ -14,6 +20,19 @@ def _topic(number: int):
     )
 
 
+def _topics_page(topic_count: int, topics: list) -> ListTopicsResponse:
+    return ListTopicsResponse(topic_count=topic_count, topics=topics)
+
+
+def _subscriptions_page(
+    subscription_count: int, statuses: list
+) -> ListSubscriptionsByTopicResponse:
+    return ListSubscriptionsByTopicResponse(
+        subscription_count=subscription_count,
+        subscriptions=[ListSubscriptionsItem(status=status) for status in statuses],
+    )
+
+
 def _service(client):
     service = SMN.__new__(SMN)
     service.regional_clients = {"eu-west-101": client}
@@ -24,16 +43,8 @@ def _service(client):
 class TestHuaweiCloudSMNService:
     def test_unconfirmed_and_canceled_subscriptions_do_not_count(self):
         client = mock.MagicMock()
-        client.list_topics.return_value = SimpleNamespace(
-            topic_count=1, topics=[_topic(1)]
-        )
-        client.list_subscriptions_by_topic.return_value = SimpleNamespace(
-            subscription_count=2,
-            subscriptions=[
-                SimpleNamespace(status=0),
-                SimpleNamespace(status=3),
-            ],
-        )
+        client.list_topics.return_value = _topics_page(1, [_topic(1)])
+        client.list_subscriptions_by_topic.return_value = _subscriptions_page(2, [0, 3])
         service = _service(client)
 
         service._list_topics()
@@ -43,26 +54,14 @@ class TestHuaweiCloudSMNService:
 
     def test_paginates_topics_and_confirmed_subscriptions(self):
         client = mock.MagicMock()
-        first_page_subscriptions = [SimpleNamespace(status=0) for _ in range(100)]
         client.list_topics.side_effect = [
-            SimpleNamespace(topic_count=101, topics=[_topic(1)]),
-            SimpleNamespace(topic_count=101, topics=[_topic(2)]),
+            _topics_page(101, [_topic(1)]),
+            _topics_page(101, [_topic(2)]),
         ]
         client.list_subscriptions_by_topic.side_effect = [
-            SimpleNamespace(
-                subscription_count=101, subscriptions=first_page_subscriptions
-            ),
-            SimpleNamespace(
-                subscription_count=101,
-                subscriptions=[SimpleNamespace(status=1)],
-            ),
-            SimpleNamespace(
-                subscription_count=2,
-                subscriptions=[
-                    SimpleNamespace(status=1),
-                    SimpleNamespace(status=3),
-                ],
-            ),
+            _subscriptions_page(101, [0] * 100),
+            _subscriptions_page(101, [1]),
+            _subscriptions_page(2, [1, 3]),
         ]
         service = _service(client)
 
@@ -91,9 +90,7 @@ class TestHuaweiCloudSMNService:
 
     def test_skips_topic_when_subscription_discovery_fails(self):
         client = mock.MagicMock()
-        client.list_topics.return_value = SimpleNamespace(
-            topic_count=1, topics=[_topic(1)]
-        )
+        client.list_topics.return_value = _topics_page(1, [_topic(1)])
         client.list_subscriptions_by_topic.side_effect = Exception("denied")
         service = _service(client)
 
@@ -110,11 +107,9 @@ class TestHuaweiCloudSMNService:
 
         assert service.topics == []
 
-    def test_real_session_does_not_require_is_mock_attribute(self):
-        provider = mock.MagicMock()
-
+    def test_init_always_lists_topics_from_the_api(self):
         def initialize_service(service, *_args, **_kwargs):
-            service.session = SimpleNamespace()
+            service.session = mock.MagicMock()
 
         with (
             mock.patch.object(SMN, "_list_topics") as list_topics,
@@ -123,6 +118,7 @@ class TestHuaweiCloudSMNService:
                 new=initialize_service,
             ),
         ):
-            SMN(provider)
+            service = SMN(mock.MagicMock())
 
         list_topics.assert_called_once_with()
+        assert service.topics == []
diff --git a/tests/providers/huaweicloud/services/smn/smn_topic_subscriptions/smn_topic_subscriptions_test.py b/tests/providers/huaweicloud/services/smn/smn_topic_subscriptions/smn_topic_subscriptions_test.py
index ea118f0d15..3e76dddc80 100644
--- a/tests/providers/huaweicloud/services/smn/smn_topic_subscriptions/smn_topic_subscriptions_test.py
+++ b/tests/providers/huaweicloud/services/smn/smn_topic_subscriptions/smn_topic_subscriptions_test.py
@@ -1,6 +1,7 @@
-from types import SimpleNamespace
 from unittest import mock
 
+from prowler.providers.huaweicloud.services.smn.smn_service import SMNTopic
+
 from tests.providers.huaweicloud.huaweicloud_fixtures import (
     set_mocked_huaweicloud_provider,
 )
@@ -34,7 +35,7 @@ class Test_smn_topic_subscriptions:
     def test_topic_with_subscriptions(self):
         smn_client = mock.MagicMock()
         smn_client.topics = [
-            SimpleNamespace(
+            SMNTopic(
                 topic_urn="urn:smn:la-south-2:123456789012:alert-topic",
                 topic_id="topic-001",
                 name="alert-topic",
@@ -78,7 +79,7 @@ class Test_smn_topic_subscriptions:
     def test_topic_without_subscriptions(self):
         smn_client = mock.MagicMock()
         smn_client.topics = [
-            SimpleNamespace(
+            SMNTopic(
                 topic_urn="urn:smn:la-south-2:123456789012:empty-topic",
                 topic_id="topic-002",
                 name="empty-topic",
@@ -120,7 +121,7 @@ class Test_smn_topic_subscriptions:
     def test_mixed_topics(self):
         smn_client = mock.MagicMock()
         smn_client.topics = [
-            SimpleNamespace(
+            SMNTopic(
                 topic_urn="urn:smn:la-south-2:123456789012:alert-topic",
                 topic_id="topic-001",
                 name="alert-topic",
@@ -129,7 +130,7 @@ class Test_smn_topic_subscriptions:
                 confirmed_subscription_count=3,
                 region="la-south-2",
             ),
-            SimpleNamespace(
+            SMNTopic(
                 topic_urn="urn:smn:la-south-2:123456789012:empty-topic",
                 topic_id="topic-002",
                 name="empty-topic",

From 6c8d6994bbf43d644814468ed5ef5c092a4d360c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Fri, 18 Sep 2026 10:16:13 +0200
Subject: [PATCH 75/77] fix(api): sign report URLs against public storage host
 (#12552)

---
 .env                                          |   7 +
 ...-download-public-storage-endpoint.fixed.md |   1 +
 .../s3-client-default-region.fixed.md         |   1 +
 api/src/backend/api/tests/test_views.py       |  48 ++++++-
 api/src/backend/api/v1/views.py               |   5 +-
 api/src/backend/config/django/base.py         |   5 +
 api/src/backend/tasks/jobs/export.py          |  43 ++++++-
 api/src/backend/tasks/tests/test_export.py    | 120 ++++++++++++++++++
 8 files changed, 226 insertions(+), 4 deletions(-)
 create mode 100644 api/changelog.d/report-download-public-storage-endpoint.fixed.md
 create mode 100644 api/changelog.d/s3-client-default-region.fixed.md

diff --git a/.env b/.env
index 721d25f4bf..136531ec2d 100644
--- a/.env
+++ b/.env
@@ -115,6 +115,13 @@ DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION=""
 # The name of the S3 bucket where scan output should be stored
 DJANGO_OUTPUT_S3_AWS_OUTPUT_BUCKET=""
 
+# The storage address the browser can reach, used only to sign report download URLs
+# (e.g. "https://storage.example.com"). Leave empty on AWS S3. Set it when storage is
+# only reachable inside the container network, such as MinIO on "http://minio:9000".
+# The reverse proxy in front of it must forward the Host header unchanged: SigV4 signs
+# Host, so rewriting it to the internal name invalidates the signature.
+DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL=""
+
 # Django settings
 DJANGO_ALLOWED_HOSTS=localhost,127.0.0.1,prowler-api
 DJANGO_BIND_ADDRESS=0.0.0.0
diff --git a/api/changelog.d/report-download-public-storage-endpoint.fixed.md b/api/changelog.d/report-download-public-storage-endpoint.fixed.md
new file mode 100644
index 0000000000..87004d8a56
--- /dev/null
+++ b/api/changelog.d/report-download-public-storage-endpoint.fixed.md
@@ -0,0 +1 @@
+Report download URLs can be signed against a browser-reachable storage host via `DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL`, so downloads complete on deployments where storage is only reachable inside the container network
diff --git a/api/changelog.d/s3-client-default-region.fixed.md b/api/changelog.d/s3-client-default-region.fixed.md
new file mode 100644
index 0000000000..62efc579f2
--- /dev/null
+++ b/api/changelog.d/s3-client-default-region.fixed.md
@@ -0,0 +1 @@
+A scan report download no longer fails with a server error when `DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION` is unset, which is common on storage with no meaningful region
diff --git a/api/src/backend/api/tests/test_views.py b/api/src/backend/api/tests/test_views.py
index 37b4a87729..43a13e4d4c 100644
--- a/api/src/backend/api/tests/test_views.py
+++ b/api/src/backend/api/tests/test_views.py
@@ -82,7 +82,7 @@ from django.db import close_old_connections, connection, connections
 from django.db.models import Count
 from django.db.models.signals import pre_delete
 from django.http import JsonResponse
-from django.test import RequestFactory
+from django.test import RequestFactory, override_settings
 from django.test.utils import CaptureQueriesContext
 from django.urls import reverse
 from django_celery_results.models import TaskResult
@@ -4540,6 +4540,52 @@ class TestScanViewSet:
         assert response.status_code == status.HTTP_302_FOUND
         assert response["Location"] == presigned_url
 
+    @override_settings(
+        DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL="https://storage.example.com",
+        DJANGO_OUTPUT_S3_AWS_ACCESS_KEY_ID="access-key",
+        DJANGO_OUTPUT_S3_AWS_SECRET_ACCESS_KEY="secret-key",
+        DJANGO_OUTPUT_S3_AWS_SESSION_TOKEN="",
+        DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION="eu-west-1",
+    )
+    def test_report_s3_redirects_to_the_public_storage_host(
+        self, authenticated_client, scans_fixture, monkeypatch
+    ):
+        """The object is looked up internally but the redirect the browser follows is public."""
+        scan = scans_fixture[0]
+        bucket = "test-bucket"
+        key = "report.zip"
+        scan.output_location = f"s3://{bucket}/{key}"
+        scan.state = StateChoices.COMPLETED
+        scan.save()
+
+        monkeypatch.setattr(
+            "api.v1.views.env",
+            type("env", (), {"str": lambda self, *_args, **_kwargs: bucket})(),
+        )
+
+        head_calls = []
+
+        class InternalS3Client:
+            def head_object(self, Bucket, Key):
+                head_calls.append((Bucket, Key))
+                return {}
+
+            def generate_presigned_url(self, *_args, **_kwargs):
+                raise AssertionError("the internal client must not sign the redirect")
+
+        monkeypatch.setattr("api.v1.views.get_s3_client", lambda: InternalS3Client())
+
+        url = reverse("scan-report", kwargs={"pk": scan.id})
+        response = authenticated_client.get(url)
+
+        assert response.status_code == status.HTTP_302_FOUND
+        assert head_calls == [(bucket, key)]
+
+        location = urlparse(response["Location"])
+        assert location.netloc == "storage.example.com"
+        assert location.path == f"/{bucket}/{key}"
+        assert "X-Amz-Signature" in parse_qs(location.query)
+
     def test_report_s3_success_no_local_files(
         self, authenticated_client, scans_fixture, monkeypatch
     ):
diff --git a/api/src/backend/api/v1/views.py b/api/src/backend/api/v1/views.py
index d0294f4abd..1bb40f4fd3 100644
--- a/api/src/backend/api/v1/views.py
+++ b/api/src/backend/api/v1/views.py
@@ -326,7 +326,7 @@ from rest_framework_simplejwt.token_blacklist.models import (
 )
 from tasks.beat import schedule_provider_scan
 from tasks.jobs.attack_paths import db_utils as attack_paths_db_utils
-from tasks.jobs.export import get_s3_client
+from tasks.jobs.export import get_s3_client, get_s3_presign_client
 from tasks.tasks import (
     QUEUED_SCAN_TASK_STATE,
     backfill_compliance_summaries_task,
@@ -2407,7 +2407,8 @@ class ScanViewSet(ProviderVisibilityMixin, BaseRLSViewSet):
             }
             if content_type:
                 params["ResponseContentType"] = content_type
-            url = client.generate_presigned_url(
+            # The browser follows this URL, so it is signed against the public host.
+            url = (get_s3_presign_client() or client).generate_presigned_url(
                 "get_object",
                 Params=params,
                 ExpiresIn=300,
diff --git a/api/src/backend/config/django/base.py b/api/src/backend/config/django/base.py
index b967110c10..a208dda915 100644
--- a/api/src/backend/config/django/base.py
+++ b/api/src/backend/config/django/base.py
@@ -295,6 +295,11 @@ DJANGO_OUTPUT_S3_AWS_SECRET_ACCESS_KEY = env.str(
 )
 DJANGO_OUTPUT_S3_AWS_SESSION_TOKEN = env.str("DJANGO_OUTPUT_S3_AWS_SESSION_TOKEN", "")
 DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION = env.str("DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION", "")
+# Browser-reachable storage host used to sign download URLs. Empty means sign against the
+# same endpoint the API talks to, which is what Prowler Cloud on S3 does.
+DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL = env.str(
+    "DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL", ""
+)
 
 # HTTP Security Headers
 SECURE_CONTENT_TYPE_NOSNIFF = True
diff --git a/api/src/backend/tasks/jobs/export.py b/api/src/backend/tasks/jobs/export.py
index e658d6018c..aacb22578a 100644
--- a/api/src/backend/tasks/jobs/export.py
+++ b/api/src/backend/tasks/jobs/export.py
@@ -6,6 +6,7 @@ import boto3
 import config.django.base as base
 from api.db_utils import rls_transaction
 from api.models import Scan
+from botocore.config import Config
 from botocore.exceptions import ClientError, NoCredentialsError, ParamValidationError
 from celery.utils.log import get_task_logger
 from django.conf import settings
@@ -222,7 +223,9 @@ def get_s3_client():
             aws_access_key_id=settings.DJANGO_OUTPUT_S3_AWS_ACCESS_KEY_ID,
             aws_secret_access_key=settings.DJANGO_OUTPUT_S3_AWS_SECRET_ACCESS_KEY,
             aws_session_token=settings.DJANGO_OUTPUT_S3_AWS_SESSION_TOKEN,
-            region_name=settings.DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION,
+            # Storage that has no meaningful region, MinIO among it, is usually configured
+            # without one, and botocore rejects an empty region before any request is made.
+            region_name=settings.DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION or "us-east-1",
         )
         s3_client.list_buckets()
     except (ClientError, NoCredentialsError, ParamValidationError, ValueError):
@@ -232,6 +235,44 @@ def get_s3_client():
     return s3_client
 
 
+def get_s3_presign_client():
+    """Return a client that signs URLs against the public storage host.
+
+    None means no public host is configured and the caller should presign with its own
+    client, which leaves deployments on real S3 with the URL they get today.
+    """
+    public_endpoint = settings.DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL
+    if not public_endpoint:
+        return None
+
+    # Blank keys are signed as-is (empty credential scope) instead of deferring to the
+    # provider chain, so static credentials are only passed when they are set.
+    credentials = {}
+    if (
+        settings.DJANGO_OUTPUT_S3_AWS_ACCESS_KEY_ID
+        and settings.DJANGO_OUTPUT_S3_AWS_SECRET_ACCESS_KEY
+    ):
+        credentials = {
+            "aws_access_key_id": settings.DJANGO_OUTPUT_S3_AWS_ACCESS_KEY_ID,
+            "aws_secret_access_key": settings.DJANGO_OUTPUT_S3_AWS_SECRET_ACCESS_KEY,
+            # An empty string is a token as far as botocore is concerned: it appends an
+            # empty X-Amz-Security-Token that storage counts when it recomputes the signature.
+            "aws_session_token": settings.DJANGO_OUTPUT_S3_AWS_SESSION_TOKEN or None,
+        }
+
+    return boto3.client(
+        "s3",
+        **credentials,
+        # SigV4 puts the region in the credential scope, and MinIO answers to us-east-1
+        # unless it was told otherwise, so an empty region would sign an unusable URL.
+        region_name=settings.DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION or "us-east-1",
+        endpoint_url=public_endpoint,
+        # The signature covers the host, so the addressing style has to be pinned rather
+        # than guessed from the endpoint: MinIO serves path-style.
+        config=Config(signature_version="s3v4", s3={"addressing_style": "path"}),
+    )
+
+
 def _upload_to_s3(
     tenant_id: str, scan_id: str, local_path: str, relative_key: str
 ) -> str | None:
diff --git a/api/src/backend/tasks/tests/test_export.py b/api/src/backend/tasks/tests/test_export.py
index 416361d95e..bbec0b742e 100644
--- a/api/src/backend/tasks/tests/test_export.py
+++ b/api/src/backend/tasks/tests/test_export.py
@@ -4,15 +4,18 @@ import zipfile
 from datetime import datetime
 from pathlib import Path
 from unittest.mock import MagicMock, patch
+from urllib.parse import parse_qs, urlparse
 
 import pytest
 from botocore.exceptions import ClientError
+from django.test import override_settings
 from tasks.jobs.export import (
     _compress_output_files,
     _generate_compliance_output_directory,
     _generate_output_directory,
     _upload_to_s3,
     get_s3_client,
+    get_s3_presign_client,
 )
 
 
@@ -47,6 +50,19 @@ class TestOutputs:
         assert client is not None
         client_mock.list_buckets.assert_called()
 
+    @patch("tasks.jobs.export.boto3.client")
+    @override_settings(
+        DJANGO_OUTPUT_S3_AWS_ACCESS_KEY_ID="access-key",
+        DJANGO_OUTPUT_S3_AWS_SECRET_ACCESS_KEY="secret-key",
+        DJANGO_OUTPUT_S3_AWS_SESSION_TOKEN="",
+        DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION="",
+    )
+    def test_get_s3_client_without_a_region_uses_a_default(self, mock_boto_client):
+        """botocore rejects an empty region up front, and the download views do not catch it."""
+        get_s3_client()
+
+        assert mock_boto_client.call_args.kwargs["region_name"] == "us-east-1"
+
     @patch("tasks.jobs.export.boto3.client")
     @patch("tasks.jobs.export.settings")
     def test_get_s3_client_fallback(self, mock_settings, mock_boto_client):
@@ -243,3 +259,107 @@ class TestOutputs:
         assert os.path.isdir(os.path.dirname(ens))
         assert threatscore.endswith(f"aws-test-check-{expected_timestamp}")
         assert ens.endswith(f"aws-test-check-{expected_timestamp}")
+
+
+PRESIGN_SETTINGS = {
+    "DJANGO_OUTPUT_S3_AWS_ACCESS_KEY_ID": "access-key",
+    "DJANGO_OUTPUT_S3_AWS_SECRET_ACCESS_KEY": "secret-key",
+    "DJANGO_OUTPUT_S3_AWS_SESSION_TOKEN": "",
+    "DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION": "eu-west-1",
+}
+
+
+def _presign(client):
+    return client.generate_presigned_url(
+        "get_object",
+        Params={"Bucket": "output-bucket", "Key": "tenant/scan/report.zip"},
+        ExpiresIn=300,
+    )
+
+
+class TestS3PresignClient:
+    @override_settings(**PRESIGN_SETTINGS, DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL="")
+    def test_no_public_endpoint_returns_none(self):
+        assert get_s3_presign_client() is None
+
+    @override_settings(
+        **PRESIGN_SETTINGS,
+        DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL="https://storage.example.com",
+    )
+    def test_url_targets_the_public_host_in_path_style(self):
+        url = urlparse(_presign(get_s3_presign_client()))
+
+        assert url.netloc == "storage.example.com"
+        assert url.path == "/output-bucket/tenant/scan/report.zip"
+
+    @override_settings(
+        **PRESIGN_SETTINGS,
+        DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL="https://storage.example.com",
+    )
+    def test_signature_covers_the_public_host(self):
+        query = parse_qs(urlparse(_presign(get_s3_presign_client())).query)
+
+        assert query["X-Amz-SignedHeaders"] == ["host"]
+        assert "/eu-west-1/s3/aws4_request" in query["X-Amz-Credential"][0]
+
+    @override_settings(
+        **PRESIGN_SETTINGS,
+        DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL="https://storage.example.com",
+    )
+    def test_signature_is_bound_to_the_host_it_was_signed_against(self):
+        """Rewriting the host afterwards cannot work, which is why the endpoint is a setting."""
+        public = parse_qs(urlparse(_presign(get_s3_presign_client())).query)
+
+        with override_settings(
+            DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL="http://minio:9000"
+        ):
+            internal = parse_qs(urlparse(_presign(get_s3_presign_client())).query)
+
+        assert public["X-Amz-Signature"] != internal["X-Amz-Signature"]
+
+    @override_settings(
+        **{**PRESIGN_SETTINGS, "DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION": ""},
+        DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL="https://storage.example.com",
+    )
+    def test_region_falls_back_to_the_minio_default(self):
+        query = parse_qs(urlparse(_presign(get_s3_presign_client())).query)
+
+        assert "/us-east-1/s3/aws4_request" in query["X-Amz-Credential"][0]
+
+    @override_settings(
+        **PRESIGN_SETTINGS,
+        DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL="https://storage.example.com",
+    )
+    def test_unset_session_token_is_left_out_of_the_url(self):
+        """An empty token still reaches the URL as a blank param that storage signs over."""
+        url = _presign(get_s3_presign_client())
+        query = parse_qs(urlparse(url).query, keep_blank_values=True)
+
+        assert "X-Amz-Security-Token" not in query
+
+    @override_settings(
+        **{**PRESIGN_SETTINGS, "DJANGO_OUTPUT_S3_AWS_SESSION_TOKEN": "session-token"},
+        DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL="https://storage.example.com",
+    )
+    def test_session_token_is_forwarded_when_set(self):
+        query = parse_qs(urlparse(_presign(get_s3_presign_client())).query)
+
+        assert query["X-Amz-Security-Token"] == ["session-token"]
+
+    @override_settings(
+        **{
+            **PRESIGN_SETTINGS,
+            "DJANGO_OUTPUT_S3_AWS_ACCESS_KEY_ID": "",
+            "DJANGO_OUTPUT_S3_AWS_SECRET_ACCESS_KEY": "",
+        },
+        DJANGO_OUTPUT_S3_AWS_PUBLIC_ENDPOINT_URL="https://storage.example.com",
+    )
+    def test_blank_static_credentials_defer_to_the_provider_chain(self, monkeypatch):
+        """Empty keys would otherwise be signed as-is, yielding a blank credential scope."""
+        monkeypatch.setenv("AWS_ACCESS_KEY_ID", "chain-key")
+        monkeypatch.setenv("AWS_SECRET_ACCESS_KEY", "chain-secret")
+        monkeypatch.delenv("AWS_SESSION_TOKEN", raising=False)
+
+        query = parse_qs(urlparse(_presign(get_s3_presign_client())).query)
+
+        assert query["X-Amz-Credential"][0].startswith("chain-key/")

From d819639f0eb6931ebe41ba79b64f77515265b705 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= <pedromarting3@gmail.com>
Date: Fri, 18 Sep 2026 13:13:30 +0200
Subject: [PATCH 76/77] fix(cloudflare): request every permission the checks
 need (#12842)

---
 .../cloudflare-token-permissions.png          | Bin 295779 -> 240023 bytes
 .../providers/cloudflare/authentication.mdx   |  16 +++++++++++-----
 .../cloudflare/getting-started-cloudflare.mdx |   8 ++++----
 .../tutorials/prowler-app-github-action.mdx   |   2 +-
 .../cloudflare-token-permissions.fixed.md     |   1 +
 ...dflare-api-token-credentials-form.test.tsx |   2 +-
 ui/lib/external-urls.test.ts                  |  14 ++++++++++----
 ui/lib/external-urls.ts                       |  12 ++++++++----
 8 files changed, 36 insertions(+), 19 deletions(-)
 create mode 100644 ui/changelog.d/cloudflare-token-permissions.fixed.md

diff --git a/docs/images/providers/cloudflare-token-permissions.png b/docs/images/providers/cloudflare-token-permissions.png
index 49926f04151821da87977dcb0d434c130ee8d2b4..59634d0df1ee6444a976da0fb4c37764a115d669 100644
GIT binary patch
literal 240023
zcmeFZ_dnb1|2J%vRH>vCDYep4rB-V1-BwFg2c;+>)E2Y$p0#W579DED-lO(NsMg*}
zs4X_(dgpW9*ZJ-Fx&MRvzVhSoNFF(IjMwYA-U)lGsZL9Mjhcjng!cYDl_w-5R0AX=
z7mh%bz{nj6zakP64wCySicj6r*D|OQ5YM(l1n;ZHafNd5D}os*5@;S!hCR5<bq@oI
zL&e;JLR7#p{9Gm+y#BW&VUic)KKOGOlM%9t6aSnq4o(e~Nte|L&A4i2jjecZ2G=^z
ztgRS5n{w!2v8zA73i;P7mJ?HL`j&+2-!D^g>g9iraQ(jqU_#`tRQ~-U{jUK8g?V;F
z=)YdK{(B&@na1f~GlD=a{MSG%B-u~k-_yzU{jUKLGWdY%zh}en-vesKl(qkwOlT<C
ze+_hj`V^S{Jss`;9)S8m|L@}bKWp^=+r_!ZYv%cl!}QWZBpg%ceLi!3Cf?EU?=z}Q
zcfkqz!QVZ6>720X(>r0;G<Bul-KT!LgKr^9+P1zEw{u4A%Y2KHFQ(O(_U}Vy2^??J
zK!%QUeAapS^vOVo+*9s!`&O{njN8IHS1+-%!-dWh>J?K#XOcFBlOBZ#d}RE#7^j8u
z-xnZQfO=VEToK$KiMPy8$?uapSu?9$$>+;D{#nq&BY)Hl*2sGM=d&AOQP781OYR8a
ze!AVM{8$}<o6dPTeci8$F<$y&%Ln?7@66m;o;&ER)=NoYJeh6^olf|E@en$&itv|J
zjPA_a)o&udp6a|0Vto0@^YA-+RO$SSsu^z&_uWBtD(lI=*JS5Rne>$!OK4Ik?)>ba
zsTV1SPeJ#I^d{U)GC=cJj+&VHU*rb8rjJcu1#7s|Ip8tUoBT|#oV06BcY2kd;s`mn
zvf)T;aVe4V6LK$j<?HXk@4sJ`F6@(7h+JepKkU5qE^Oazjw;O>eIK+;K{pHgKvwCm
zhs>y8^;j!iG-W^0JsN2`dnR|b9i4RDb+YtyMa$<+|NVb08ym1}FYhT{A$5yYW#k1u
zr;Z?jl{W%2xL(!+kwK=IC8E#IPLdXrj2cf5JLNA6%c@S~koi#{T(Huc^_=@$H{wMf
znV)$bOpQ>>FvpivV&zV(K~v|aIQfYv9*u3D!q?K;G9!tVTd^(7tCs}p!3!!1IG#?*
zziU(1fEut=mq59pb6<-a-;N=(ym}aP9zw{>%_)3#Kd`^UV|9#GpQ`>WGy-<RD8;I%
zM(LrN3j1x`vx3=&mAm^BcI;vbYpVBnvS(wIFJFYXaXd(mrhZD9O(CCmIB{_~l2*8$
z@#N?zOv^KOy~5Y$vAI`vj(kUN#4N4%<*Pnd{yLAbm|NMs*#ScLJ2sOVck>*Vb3%eS
zj>oNvRVhW4c$Kzf4<>bN8}^35zaUtM2`(Ll0rx{fYR)%(&OIi}Mhrbv^YM?wr|$k%
z(V{S0N-w5SV2=Md+V8%H%y52Qh}5~kvpff5Kf3pnJ^6Jo)Z`IVTInQ+$&i_pw7;S+
zJED`#gWp?ynend~L7)#A2FxCJ!?6WvF5~EvjXL#2NhLS))5haJUt<-$`b9?qNi>2*
zT6sre9SA{!o;hnJ-!D6u@1@x_LY4TTy`b&YZ&ilw+wDv<?;9q0<7>`jidQsZz7_XZ
zs@?ovHziTlV7or7<Rlx#>Jz@)FXmzSbwt=H;6%3<m*vx#?)2ln&B={hWUsw?cncyc
z5E)Q$c`cdkww*~7R@GRwPPk;Le8!+y69p~gKXtjeLNzq(wKswhd~2is_gNeN;42WI
zMqL2<uxeMLnBuWf)5}*}e<iO2q6K->&E2#=Zl!;)<xTw+!DIAxC2tYybB2;!N;d6T
zE5ov-^dQ9J+v_JCd*8#cGG)(d)0s@HP&B+k;#j?6d8;2Q5BF^kb}yK+q=?}o?Y%_=
ziuyg==sbSoc+C%7X=2u+_#@x-?QoZOBPpJgUwYYfP*WA}HGV<u?#SEhrNJmog7d1?
zQ=2Inmc|vHjB)li&!B%#o$?A$+@69D^Ha=I(SN>tt?Y4vB|Zr!%m&b1-ex7Occ&ZS
zWZoGg9L%tjNu~Tr&xo3(=KEIu1hky8C^v?Pe}9C_k}pzx%H5msV{1|?Eg{gzvHRvi
z<VKQ_cg^V<QvQ;I9JZyXtoA?mZ8<lhW3=0?p!_s|PEME2`*3cjK%T&RysApkFLseD
z*`Wj4+Xu(87O&)|6`iiz`9u`jj5n-TPQ26`b5;{}G0r?q6Yd9Yr^9vACER?3pdp*j
z>2_CJ0bNhV(DOUx`CUB{KrO;10LQNSp*&$%n>*`-&HZ=mPBS@OTYakOGF=84shfOn
zX%%b+S+q_uCsigjf*iLjxTC>es&cejAb)+e`z<)8g|(<|qqbyS0ki_8AeP0TsV)7E
z804pgCaes;&ja08WB%uJL6qqwUDvZm6&I`t1Il#m5f5nAtrNX|uzSayTwp()+Vo}`
zfn_eNUJ|G_9wkdYXFuBt+3A!&b4VbQ{d*IFMSxmm@p0>@2J0mt(!o1;IbKW7T@vU?
zJ;2>Ni8AYie~=04;VY`nwXPg9=VZ)xd&k^&i4+RPRE@v+3QmFW@MJjsa6Fs~3Hek@
zENZ`A7|D+R=C=)8)wiv=NwM4adkOxa!w$IIoSx=lp5~8Hv|O7&WqWa1W~<q8<dv&4
zgQd>hB{`K1ul+HewgG<i%z5+5ZdMTGA<$N!ev}lK?FHps$IOzzb$-phQXeu8T!B?f
z9QAIwz|^L<vzNRazecdB9OL#U1CQ$%=e=X4pO;po1`R-)2WA{+Gm18!zieRas@v<-
zMW)$Q>MrCZ8A_>`8M9SXYrYRKBK&!=n4qJ{>qA&I(!WZ5tnuot_h!R^z}G_bgTt$Y
zIb|jzPlv)6MfCQvxpH#lKoKYQu)|lCn%fx-_P=A*J0#%M9G%HlRlr?S-=eUJ5+wH6
z#V=or!W+sbZ0p)zig__iOnTz`g$)A<u^DxL73r?W?F_2WyI^w&7;;6jNk+p#C-pjK
zOx#px_7p`U!yu{Ok-Ge`b`8)ud);vvOp8<9m$l{+R>9u*Ah*!NP+&7s2qPv|Q`l=(
zh1wXY)k5?dy0@~Y4^K~;<*+l~P_vZ!_4GH7{KdIcZ0drRBHJLn;x$fJ;Le3NLJaXi
zF&SJ!&^g2yyL~h1YxoA%9Ys3=Pc(-*cq3`X3|}>-ISgW``3fIv0w)^1)5F*4ELohc
z6Xi#9Fr+E{&GTepMu7g&UF}I}F@&%w)l#<%1}Np9%wuqQaJr>P+9$i6JU~;90R3Q=
z^E~u;kaIB3bMQ!FE|BwiamDb<x$nCnHbqSvwV<9Z<B)RE7M9(*v*XpI``jrXpQ&=L
z_eqrU>fzPdy_}AKX3u_(Q3$_Qq+zrqN2U(qkem;NDd}plQ?13HHT`^|(azlE$*w>A
z_^;#ro8S*!7P<BDFoL9e3<nwujSP);opwheyp`+VrD=%ZU9+TDjJfV*SqwdCdVTdF
zzTq5Ep<TL99zIgM2HqLbw`)Mpc%KA44r|Wx=g(_4@*(Vjt-I544g8!<0JP|A(gJ?V
zb4L4&BVwsY>=&PrLBC7E0ed#sWt^YjN=Y}sy*b1)_5)Om=wt^9#y819`Gst|HT5hg
zsJVK_z->ucI>u~Wl7}rP@yPxa^>T5;{>#V!;h5Ktq!a9r>5*ysw@RbeSJ##YX;H1u
z5kB;hzTeP&GUw)(q3PSD(O&#Z-}mafYI!((XTu7zylZh~E%3CoM%U5TA?Uea7PW4l
z>CO<_Cc-{?Vxz7z^(UFwdq(fA0QNvxD7_f2{W$ij)_G*C=tF(_az&QWdR~{2#=e)1
zn=TVJOr2l^x6JCh>lSHZP?#4MI9z7Hb$$1R+<Eq|BODs)q)z&Z@@k;$gRd|l^CKsW
zpZES4^5o7RQS5^d&4VGaTv#g~hY8oD{N7I;PR||5TyBo?Cyp!*cZ0Mj9<&{&+1B!6
zZsBNFkCxH|(be5+c{W93j=gt!-@h<~jvy>u<n*me+jH$yR^Lto7{(=C8{_^<M^n<w
zplZ8=MV;5BNcofM?#H_ldAQPv(oQy(tU*B~t3>inw$Sy^wo?@f9wAOu?;>@3Rb#WW
zzG&fi0<eoCoqA)ty?WymP|q`bRy3B_9MK!KtBEYO)ts2g4JWZ9W925$9AXnrCvu!Z
zwFygr%k_Mc-)^HX%}kgncqo7KC*;FLve`Aq+hC4Bq=J(84<7e9`cY{Dg|wrKq#u1D
zP>OGE@c=;bRs}W{y;OL?%9l_C+(%v1MrVjbT?UM-Ix73(gH!ru#bLL)xK+Ihzdd5x
zVv+Mam~u@5S~-tDJeZc{IinsTRszF8u5#G@_6L*tP2*zoJ+i-{jJqIE#6NMc!aTWN
zlFtir-5Eo#Q*7Hh^*pz8rF8d?3BBdLtF8V%3xL6V$}C`o*YS_UE;_^&uJz3?dA{js
zE65HP@>;JL>5%-H{x!-Xth)DfAAlifpcOV+MFQCMC71mb1z({?!u~|k$!1fNGq;$S
zV$98m)HARFT*D{TGT-vzGGZDpXCmZ(LUxHCtR&(>0D7oCMiQ6Kj2h=e&vjm};y+jv
zObTLp`AO#B6#s2!6Va=Kk;TrN8&X`fXFT{^ka>-Zzg1ui13EdF_OK%&tIjUHamg$@
z&jl8<D9I%dXPN_tCJH0H@I9JDTXrPGmmHIZoYM0_Z$Sz#vM%Rot*H!4DoHj{ht7cZ
z5YDD$`5c6HL2uzT!VX_?`4>pK&)Jc-ZAL|RHkH4`7N0*Gqk(-3Gi<d1D4gZ~qRB?|
z8+lseQXAC^^S1)}_;K*l^|~2?ZHoI+imAaNw;#nJHJKEF?_c`E?z@nMp6nPCK4?wF
zR`@{J<LemluDlk@v_h-46%<xlu<fUe536EABmzUo1iI8qe-TpvX8-=p?^v`D^y$8(
zt%@e*zIs<*+$<;ugiSHSR=hB9P(>7=G9~;0RJzILFOfAUKQFsZp3;UWz{_!bjDM5?
z#qfSw8XYp%W6YEk*^n_!bMSog<#P`;Uy-h%JCD6zY5cFKQH*Fh_L2T%1UOp4^QX3Y
zdqe2Y&|gM|E@L7?k??)!M<He*c9mJEd2&u4uub3KjqVLVpK&;ou!_NTp=6crwjOu$
zWKH%w?R-8;?^j#wZZ9j>>W=f+Y;ffpC1asiY1Ugtcn=}N2W#X2@?h>xcqcwDiypLV
zJX&&`593ku7)`RW2oXgZCUhd%e+!c$^0DHZ_1|i$0^H}*LUDyGHt59DGzA(msvnvw
zEa}Dn5@Z@oDQjtNf6#Zc*?%YD-hDHvT&0_TA!BS4vCQR-I~uH)=)4AgZ6z`R<-8XA
z{>Nr$VdzKDc4+dhGCSx;{Tr~xD!*~yQ-vF9v-uee@(?+^^+A0|mNTQbVXv3o0~t<o
z7Kj|SM@@xWUpDA`jpc_}f|L5;E2lwK^@JLB*GZARyF<I4&j|`~rnxkdq?g?>l46{&
zb3ZD!P%AV-Qiz9Q5x`a)57u!q;8e?y!nfm=RAM;~ns<5y*>BFEF!Wk?wT~vg7I%1z
z23P)(gDlH$hiR#RRl`T>U8kH!RNY-V;z?mKS@OrrA7UX`=yGJ*K>^UI7gEjhB}U+O
zOGIc?G5uBJ#}HlKydIJaCKAu)AUm<k`nR+d+o-LOq<9r0sZ~eG869cRRk+#GrKB~u
z9VNXH>WwbWSCC#W9||Vvk*LXBeXeg)0mi1y`$WC(Gek#1o*Z4@jziV1u3GSwwLqk5
zqTF?kGj`SxOZa(f=Rn&IUxgXolWKW9<uRwJ<ht*@y4@cdohi7;Cf+u<nu^C#OA{pF
z=)R@L_}t6~smimM%FgGJDKz%SxS-HU0U_83nRNclVk)O6{Vl~91^V&dY#1+|WYWPD
z=Y>orqqn?YKw!^-6;=o9caKViZ6F_;Q@sHQ7F~E~zC~*DnA8}km2bwb&9NB$_Ij`^
z{+bqY$PS?P=PdnVDLm?w1DfNouU8_&;A?+tcGJ;Bp6M@ipVF2(lQ$bCv7?u$xEaJ>
zYB+SC`L|b*>f^q?jZ_9v-p{Y9x=(=hcs9~^#9#)I^^^SQn|ZJuf5dqf_p1*&mL3$f
zg^4(V6?q>jv){HmTVUUm;_-NDY!FGMnCXt2WTx{YB|^u#aO`9n?lWwI>vH^HpMg4(
z615+{8s7wOBy!HRpBUGjTAnOV5p+M^u&DiPeJu@o9Knyi_cd36Qqf*cc5I`6-wG7i
z<x+OL`HBWV1XtvW7F|%B#Pm?@YLSrZ?YM8eMMZ*k6NWb_))8awf0uozB$2@?3aPhc
z0+(M&SA`-Ss8q1BWO&O7tmnt`S8^;*me=U?rll^7=YM*z<lqx%68KmoDV~3!5#U>i
z0Adjc90abo%<&vyO>k{H3WRk7m#Dw*lPG9PC&#zj@{YUIB{|qXGG8n3HB91UxBj!o
z39B>AsseiE&M6*SRb*A9b9M%B$zWg2Y$ZyapJJBN-*M38Siv?M&-bE}&Lgj+pFiZ#
z%?U0YGBolI6#Q9fu7z+8wyj*D@Osw`qyG!6smOtdn-|l{$#vsq)r*&wd0+>KD6ieS
z*+}1MjbZ1+YVLs4zG((l2!{{w{YgNl&Y3aoU0dv{)I1c&y{PJaSzP>Cv4opXO5U{4
z=&0vK?yfj8jsC6zH{6RW4wbkEi<Y^f_alJ;SGabkax}M3{`{1j>#1p0Ero28PU30f
z$p#-lu^xUc_o%AL17r23_Vgw`1ibYUiI9Q1)^96;3O;&>J6zLdA(i$D%HoX?-|Uqf
z;z3~|on~>jzZO2(XgWW01n7J{j>hQ|yklrMTK>$<9nd<s4zuHZ#BB(zmjs<;KKx7K
zR-+>lFphg%zk$MRX7;UOIJ_(aLJP4^dgU_a2mqCk<|wz(M+5!XVE~QZig;%n78AC0
z8o++av0)dU+7L-==&|?f08|Cw1tg;1l}~V{Z(sFBe_4k-VMVL+Xe6{6giCpMI+S%*
zo({Z+vnVdFPqr_sZ-K!Y*l96!WAoEpKa1%8D5*c69QS^`P=D@PS607TlV_2EtR5O(
zmQj~J>GXDPI!!C<WB1%@DLQa)k^Xf7+>hsfOYug|PTX}(rBZ4Yh0AbFBr0jowtYQ7
z_SsmVBP_{sy{$}h`A+2x$W26v0WQ*0cVup}TKKrxP2F|C|8E!>sQ{qJcMQqh(>LQ&
z;GZBjyPFLGbw{a>uvhFuU=yxAlZE%cFmzu8YjzK)T70}NGHRK`KXXRC%-eIeSnNaV
zAldFn1d}UVI(0+oQWv}R*sha$CF+@nl{((>-^&SMd#NdR^xHM8YK(`A4{78|UvZME
z9tR~P2x+}$JkeHTQ-p%oC&s=GO<EwGk|?nb;2SM9Gf+g!q&dJF9ar*_Txi%xFqvA~
z(i*KqFl%#Rm!b5clmt-1KWKfq0WR_T25yt|H=eMmqV@SM4z7WhovsvQ*_zc3$$KrV
zHWSv{wrndm7^^w|mNWx;&qvf4p%h?h2uiSaITvh?_p}fxqLY~QMIX*bREc=GZ`%c`
zo@GF50Lo!EW?7J-l<>QeK}|>HdP?6igFKO2@8IOmC3|d#E*BHotz0ksJ4C}hPeE=_
zg<e%}b1_k00MnHTXtl}|SO<<uM;8gxN89@VMSYVY7{#1!L*`E?EW=z|{JrY9xNbeh
zfW{v)7~)arN#3zcoV_Xb0+WHzF_N`@CY@=u44}ZBt7TaPYYH-sv*<8X1<I?7k_Ru1
z6+yB+g(tg=Tk1C^2rfl86#`nC8Ndai!>LyIM!DeaX#<y0=hFv`FATkp7Tq?xVA1?U
zs7HY$Nm+}yQ>i=l=IggsbLTLhakKP7KA~U$mcaeF4qa`m3?u!lk_;TXZ|%u<vZC5N
zs~abd|MrEtW<R`y1*m1NN5*(gyW@g%-wmX5N#4Xj?ubuVmx&N|hdPm=HJ}^-`Raj&
zh-gI;fO$O+;r$H$w>a*_{W|+<MEFtw|2fejyW0-^O(%b94@yg!s~=Qj2?C`p_PXaa
zV?}|I^BQqmCqFH2nh4TTkeTi;Q~E()c_+zi;@{Ia>w}j1Q0-S=c#gPFWpu%R>)hjk
zUz@ugo90o9qOJ?Ajf}wh@^9>o7&QTqb|%!p!47k$w^OjJPel95d5HY!>!W@<Zyn$W
z=Y!v=bHlx#cJIBm0i*GgE`~(HlP(y&oPjcqw2USaO;0{tkSu6+x%~xdy<`L^UM%Y1
z-!;qiRV|b(3BR7}f2*iGyuErDVRV{%HBd1qC@=Bl7tdAwnQ#ZV!0^q^p2;qIqJ+*a
zNTz68w_e%hRvh&2_CnBYeWexwe!zGPQD=pat+&NLd@}8(p8UHk;Ih;$m0dsyt&urD
z#dC5!arE4%!3lg1p`)8ie=_Q>DSES<h;qPp)hj2RGb(`gd0x$5(o7ah8aWy^+n;=R
zJ?9KKsMLOp!q;9q0h<zbBEgeEW9B^#5WjE6r0C=n^~CGy#(AgWHu38iQHo13pQExH
z0D>00Jid~??MWvsb1;c|4G(l0&q<fWq2lK*gK!B@Tv>!*V|8KepD&!#DA|Qko2n@j
zwsiSu0yBM+Ai9fd@bZDf9liYoZXOhin%Lvl9M!Y_mwJejbk`3IiT}++-CS0;S-(Y~
zP)A-ljeLjg26rOe=(dQ>hBJ!#Q^2)xZJ&+`#Cso{^b9W*yQlpstJ_)ya4(b8+1x+A
zcgA>8u-b3PdckVpn!}7nwZG#uT8Ha9-MTbqfJL4+^bDH4IGkl1we~L+w}S>~0?Qn7
zFve*>Ix+(^fZHeQRYswm3GI}a^i0p4ZdjRkuQ4na_MD5KESGo0UQ;xsC1Fo<+wo~f
z5Q!$^5pWctxiU)p1g=D`Os-(AT$miHNYeD4BD>%9oWxbIdf5%>5qg@E9}oE2-D;Tp
zQXMye4SEs!8IF-KO<#$sepKUp{1G8FQW>yqEV%TpIXt^}6e`$ykf?79-OK`{IY23K
z2`lCB)(JoT^dTzT3JPCe0}dT$0$j60YybT2&_jBZ87rclJmox+Ryz9Pw#*1s&M}~@
zg%zT_JJs}hyxxfpgL1NtOyrl^kA)0}Lz-!$sJm(o9#GQ6=wTpaR>ci2hg_TVlZqUz
zViVRwQdt=smpWVlty9fh#>MRPDSQ-I9Mh?4O6juw!%LOik4d!&ALBK{2`w@mDjiM#
z-AvS2K*<PI*bOcPf%>gh&L>1+pEI1xarn31U}z*LzX@Qd9~e#ny>d!SKW(P$hWpu?
zM&xfP6^%fxjq@e(CMcJrsZw&D4~AU583}v<;j5!|N(9y-8whqd+mez#;%b)Ld>Ch<
zW20#6-A(QJG*od4lg+ktuEe}-?rp9+fb@g^hHIDYTSWH?M8s_-Jm;B6mxHVf8S0^B
z=iZ{HTqhkm!K+Yty)^?3J<p|}43V_V8u|TEQ|*`O9#q$sRDJ5vYo11{0S#CHtdv|D
zn@K=++EN%Ij4z0_7AG^|4*~m#ZB^NxeBN0{26xP=-uQ-67^(VyvH(VNsAJVgdBE+1
z4P~Kz!L599f*5ZDP12HR0+_Jv_ChWYfdj>@S$LtODOsBrrWPqTnp%jW@Rlo}{lamV
zAZgRCwS;N#x)6Dnkd^g!<N6^DoZ6T7=IG{P$|@jANrrD%c8GMl#{tH@bTn(w>kLW_
zjY&{1pb^9A!qT~{E9pBR&~9sXF>76ekgcfd@UHO}E4C`y7*ijBF7^Nr>dMXU-F=#*
z^d^z#XRhuWN4O7860PES^^ktJvb5?hV1UZ@RKoJPQelP#+1<Fvch*kFH}J_>2^`32
zgfFf--a2V#FSHy$O3vjGLTSh<lwFi4b~j&M#d}G$V?Q@SVEl@s`yds;LAF(@g#_Ud
z-=OL9A$8Fxpi8EmK_~E4_YY0!-Dl|Z3iI^7fNaX!SNR(c=Y^x+dTm`ApPzK<Y0N@l
zBsnujR^yHNtV0Gc<EEPcT_OD7);mP(03K(zb`VFq&uw0?h2qu)f`}TKiY^QTM@GW?
zgp|wU{m3Zb_IFy3h{{%Few&O7#vxx8#9$oNM<*RinsxP>l%k8w88*E-OM&ihq`#8!
zpX7y~cBjhQKx<<aRYQ<>*2yG}OP|F-^n!fglO8+RwKxdjcf3|`N%BEsZ&)XkXIeS^
z<D^(C=e&>!tX24CGlbhpvG#s=;$$bYM8Vr(J>)y#LAJ5&Nb=Z}J|yPrQp3w~TMT5-
ziD)jYnJwK<lr#}dSqLq3o$+#YpY@~SGEH?rUUUq6ig}=JthHU8$w%N^G8GSW?+6{x
z*q0Kk18{*p{xi^fWkw88?e(C$3U}2k+ABxX`j$i3-ribL_ZYR#Zo~I2X99gwi6P&p
zqeJU9wQ;Ylk`#XF8J4_G#Alc)jpG5_$NDW+_CRH#-#DV29gmwlIZe+h<i&N0pY+cL
z5miEe)+aPtoay-AWe*ghAT4QooK_hX$afZ0(nMJ1!0shH%}>bU@`-W)Jc7tG3l<-x
zLY~9GaLNn}isx340?D|E<{|We=BHHnUsc0%03g%CN_WJD=h<3ekEQDJc||H=fKI&o
zc3*ViwSlvqgUUV3rzKg;H%%~3$6%d;z!kV8+DF=Qo%HTWFTQ=k?5FEB*XzCmD|i?D
zo2Vf7Z9^NY4I8G9LSUMo$3Nx1A3vtfnn_WQVyQD9JJG(bQG_a}u$>+<VDIq%wh~`~
zEgiD0f@3Edvc#6#x+Y<NU$*mTvf9Y2N^hxCQ})uyEW}I8;vbLldrkK?tal`|x=?3I
z<{NhEM2C4;M4UYNSad<ldlOr2rCp9Oz*wI)cEsiFth$@&2c&$POh=CA$^Vx5p(c4=
z_;{e7(wXJaTwPlK#L@FAkMVEPKdokxzNvRSCx319*Aa}(i3Gl1^lp21Y0lcNLeyto
z>!|x3`K6u%o=X95tp4>*-~W!pfSyHH{0r*?i~is5x%YpQHUDto|1ZRjj89#?|8u!$
z?sF#_`-@;C77~C=hqU28hg!txe@A~}IeQNmqK(b~n)jX<bK%T|<@4qK1MX>F$^7q>
zSTHMSDReOuN3`7~0W-b_a6@&@fDeRx`XAv?IexnXh-Hv>>~j2PIn{XBj|W0}<j;?=
zXri+O0GWcq`kfxLV5s>mI=Mq*cc9!U8K@)viEPE@1pV)DmdHnr@2uOWt48N<$AB8x
zTZWa>7n||KqXEd6sC-%SqvzZuqtJ)DfC*vuknY((yQc;xM%KDw@?Qn>;y5%s^z#~~
zwZz^OZJ$`KiMSy%bt=8i2?v5eL-$1F7<sH$Y;X39O%&3w%hgZ%oD&uS#wbSrk4At9
z%>f+#9>9y8am!o&F*BlY@p}3Dg>2b&dgv{mKZ~LaBFw1b?<ZzHqMhjrn7#gk#q;$b
z!D#7?>TgKP{?T1)GuFMCELN7{w_Yg`G}m=~Jd^u&oQL%a{sVMtaG88FhaKWdw{UoQ
zAk(rv9n50O%ympOXfxfHpsN3<jj^0<hd|74r-j0g?6nC%?r#r05`X0m;M9rmJ9~Sg
zp)B;860h9>BY2_L3f-=@&-!HJ1aP%qEdkhcXDQ7tv2L@mt{z~t+c#^GX%Bpwk;LH7
zRslfr$`+Fz$>;KKX$Uqjc<=xDTCA48FnUAaa_}R@mlio9Kuu3#GIYzC1YD`@=~0Op
zhR5#QUO-St;CnDFA08|3bD9p|uwDQ`G9uZD?ki_*smq6*)1z$P26Moja2!yi3d)F*
zJ6?7Kavg2ZAD)R~k65Dbzn1cfD}5xnm@t<{#K9@n=<azt5|icisu{yGVD9b5mxD-{
zj(nO_WQ?r7RpdTAq1Tep78|$t;F{rzIhQ9It|9=%eoyqu7Y~}wy+Z#S-aoGXr>S_B
z{70W15C?EQ8sKGt*`o|k53i&NemHt^E$71$a4xlg_=9DSYa>1b4WxY98ek{wqDH}j
z09jfD!0l~ftcr-em436l7c;Ynlam3C;C~`Z4@J6fe2eTz?R)EWw3wufkO544rKe}v
z7o8<t+j@YX&{$ah<H2G$UlB<0jkT<_M9}o-{M0W*&~8SA;(qBB{e5qSqmjcvkisZR
zW~U4AcZ+E(A+ld@aYzZ&{EmaT`99jR>6!&obTZs>e|LY|^T&OjJAkEab4shUrL~<<
zvn6Te3C!+2EJ`9*27s-~Z@oguRz4iw^f=r4PA3>GcWgoA^e^Wn<@}<zP(+eQ1fMlP
zdW~z84E@IMe^zRXxKcq6<wd%Ve$-;r7H4!G3af&Ii<{2g9`zcX?Fej>`2`$+YpKX6
z%6v{2*kf&$lV(N0XMxS(%l=vO-$mJvy41NQ-j4u3!T?ZxQivfVwdXLh{?X(V*)JuX
zsOWd!j9rJLdYEU<_N#iCnhx7{fGC&fmkW=1eMN63BX_!aqHmKYIA@wA>h)xLY(Py|
zxK<x~c?)d<5V=6+WUWm5dY}*a*~4af(u)+@;KN;DULuAcCa@^}AuV|?L=S8qZcE{K
z`_gO{1zCyU=fn~K(<T503ujRSP<-S|JW!wF=Or6U0Vblp7YNWtq0{$X8P6Ed<<h_2
z5G{7M=mwv~_b)ompB?&y{j)YSv_zq|i@ylKo&^S;+wGfD*mNJf*<Js6rpB$HTOaBG
zvALd4Bf|>(6<oE$Kk-qnSFG6Pg<9RKd}|}J`x!T9KKIA2G}%^VYD5*t#k(RbN7P?E
zsA=+|`6-jOj&O0QYCP75W@jSn_Nh|W=(3K-u-=TtQUUL0W5&$WzV!)rvYOQ_Ci1Zp
zmeqTSN`ulgpzMzH^w}b33~jVe9F44WvIvtSax1H~OUY?sD|t??J{{9*D8zwQ_}47L
z8nXAG@t{Ej-v?JeTG9}x`Dj24BgLw-U4&%tzZqV)GCFxlA;%B!v_*hi-UbA;SLw0o
zDPIESLi$m)Rwuii0vSs)pBr4VL~VMpGp9@9oI>;17q6V3t)hx<_Ii}IGxC*Tq^v^Y
z_pXU!SvIX2JfJ9P{Q<i9!$I}y&ln96u{%{wgl`63d%qR|Yx7+boZ>-=_gX)olicyw
zKRnp(WH%xTtUExM#<^c*vv{VG#ncGf>N4W0pLVvE;bOBZ5@l<XKjop9wNz&Iv|}Kv
z)cjc>19lV8d_SpthX|h<1>(rO6}RZ-j{t>^abfQKCXr#nIKr*|X$^?wY@nD^8U+Jn
z4(||UA7_+^&vT|;LR{EUb*bz7Rl8;@v39r+lCA5L(l6?HMEl`M+;#1EmsP>-w40ys
z2TRVoS$TyMEhp}>BWBXhDW>CH=p7jB#!s<sIg5f<>|SO+oKt!B3*Nnzn_5b-dJ%o6
z*R0@E$L8dVXx`!#E7_HRJ-cH~LHydYryG<9upYt@*2g<(IZW3TXsR8Dkj2KmZ+5D~
z0=fOP;*$ecdP)_qTQt{CjFob$zOf#s;eTy3h$MIyBXveboG;z|+?lRO(Ga&9q$NhU
zec)18@#*AYlmG5lL(C-RgvbWL?!3i5K>1GuIzx^q<yz;cEpUn)0i`(DR}G3(5$zcw
zQl`zFDZj1n$1jVlsGSj==6XA}E-RJhdu-OOuWUMLz!q{^J920T{J7_mSx|JL!WK|x
z8$_q;i)_nA9&Wy6-*u*2?VL#v9Wf~D6Z3SNJi$i@0P;zb&)2)+tG!L^fS%KpjoTc$
zEWHLETjnhi>Btv!9!J$DjrC5EG4Gt^&m1`W)HNig{M^ImOu%biv78oqRTPV*y4W78
z3;G10>~My88Tqo53tb`Q(%y<3H1kJ5s+3jER|tdT%@hPAB!?wQ({Vs+Y8}B}<D>td
zdwb_U5ktY#cm}8rLyutf5m}nx?=++Ag6b3{ej`T|t(mL*era?&(~)4~p$UkSS0O5r
zBQ;N-cPg?g&j0GXMK~|-@=hw?DSSW(69(n;mf#WJ#^g<jp;0!n+avZaLS7DndBG`E
zDRBvPNN--1UF2nhw42+Ou#?#Xpt0~`$jt>P;6lL+Hns0-^B%3W$UvpXY7n#Lv&!Kn
z>q}wl;9Hg<?s1Fv^%JClcuMDoO(}ScB$k+ljn6tojK-J!v4pAqvbE~a>gc+pd+9i5
zlObWkY%>4TJ@$%2S+rcHl~I${c|qpeH+n!}T2S4GTSd`w^ahdN%qKQt3vzuSc8dFf
zjc<#8%Qf49&q~A(N~v@|uxgCIbNF3b;<7tb&THdH=k0IYCfbkQy|_NWW@Arlv#&&r
zE#y1U`I9F1S;Wssq`=%>HR_!llqJhS)=NY%a7)W`o_@}XV(w>)m}pH_jSG-8h&<?u
zTcWWx#z5OzDo!=ofq=4B4`8Zk=L0=wtDhm#%ICiPN4uieQ-|W-eVL|)8K)(NI>#T3
z9&|3yA95coV2`X<&6%tRHYT?X^hL_Ht9HvyBM-J<OYJ9xydyqK@T@Q#E0(**0Pa1F
zoMNV0-)f~xVTTeB`S`J|G4lv99j6XP&ko&ECNHO*;v0m-?Lo@MjLOXpV%Tzj0qQos
zQqbx4L;`yPuU;lfj3Q^3_)8QHpM>YF4;R$nlBMzUNEBAo27BmUN;&Ejcb_|~p+B>|
zas8BSIYbUBPC!Wa*^QRG9;CDi*ev&m8f3eAwM2Szi0PoYKyL3d^QCp|FwWkIDi(Dm
z_9OAz=PtrxJ;y^X&yy@EJ%j{`@*a?`o&iWqP5QLo#Lj{4Du-^FAHx?^J%DYVr@Kd4
zGy<Wn_UX>b8u649rAv1h-t#82kZLuZOl`g#xs~}pkX)8{t}Vm6k1qJ!xr+!hHe7G~
zgh53d9lbC1yxDUbzbKzevWah(^<NeA-j3*ET`%THH9`|zyJ(UAP%+Sp^jL$WNmUCV
z6y~O9`c72IS`n;ZKda#r$k4-bemv4-d-2OIwh6ibfKgpWz?28yb^(+!i;ydWpf91k
z2y3o{*ospi+Ac#8%;0{^wXV#)h?6_0AtoG!JEAz6bs<t<?Gk!_+M8{>UuTN08)p(D
z&IuA~eagFvr#-@k0PNP@xyE^;Gg)lXIDl5^mKt~pK$psW<3LVN8EoDFUIxVGB4Ui8
z@-{tx#m^^Zzn;Cg1FVnDC>tl(;|XI1O|y%MkGU|4qWMMB@h^#j)V*1+Hk4uHHc+1k
z9_ah1J9yUL4AHgkZ8zFG({6?y$pV>5pm}!Lwi!~;b7bQsTWE<{3XrQhtAh$ix)6pp
zk)z-@9%86u7Ps=}2n0uRq?1W`y8#fpQ%+%^)z&vdVl{<EUqwQM&r%$hwk}dcj7%PL
zX`B&d)>XVzhejGvMJ*4q?-WHi?W^wlEmsjWbEA(E;YMh~!mC!9W3@Ft%<^Z|fUnW+
z*#!6v!NsM~x~^-AlG_dY<6p1(4q0A@fAZVciLrj})zwTr-5C{Xx!XH!`8?&GJYr_<
z`yR?ql5-#b@Kaf38nkP-|G2oMm3rG+*|&hUBL*wBzY65EcQeaUw|Oy^ok<5XKIdCy
zQXt;-sCzYg!}^`5ke#3DTA5e_|5zZ>lRO#?3Y9sLV7WHI^>gQ;?5r<&?)Cj!BO*mv
z0R9#hh`QCx4q=0eTa}H@M*y+FjJuxnuNl~p4OKvBd21aYIj~I9HT+UzZ;gYd>;lKF
zIl#uEF0EriUjw=H@UJc%=f_}VMqNQQGT7=yZ^NG+mz$6oDD1Wj0!!R)2O1L6$Nf8J
zM+P^T{b-gwH5bdk=f?e`WrZk0;fD+$aw$$>wC2>s8PX<8d?bKXxH%bu+3p4E-EEPA
z6lJ;2A<9FL3ldXEzFG$m!6afPc{u67GJu3(pB?*Mlk|Cg)qFT#$JoxA*_q30cF&BX
zEFginO`{?Gdxm?heMb5$-vBVfv_-OzSHu+CIyL*E9Zz5<thTMErLtI-@%-B$>}7BC
z%$w~~4Wr{H#01be6+nH?2EM4}xcx(XMeYLdxipm@CA)niJ|P2mFrl!q;~M8%wT@+<
zGo221b!%k_g;3d*kMTV<xQrKPC;JoE%e3QP9;z}+ZZ(rDTXPIS2Kg_P^~Ig-BsCeh
z5Y3x&Z~{z+PT1;nTUmue=c=~9FbCNPP7zk<Ah!kZL#FvohtBISi0QQFLW+rPc@OWJ
zFz4mM$?KBJ%t%`<a{8WtC>64mgnH5SDSlzIK?+JPHi@d5(y(if(br0^_yv}3$#IdR
zG^Gawa#g}_NK%rKCG#M?;FL?<&>yke4;XPx=ht(=DWRirs1OL?dO6?AiO3pt1hm0O
zxP{g0+w$sdi-sab7r|X3{WXT8Or=XeMBnON86yKEpBdJAr<K!6?D71gbyHtKGc_5P
zhn!bA--&+Df@GCkClg-{+~llOj7r<y0AvYHC9Zq<qse+%2|PTH$%R3}vLiGed55lm
zc^TqscqzQOc9!K(ex5bg*nGr1hGd~_V^_JZJV3Cb*HhDRjlzk;5l$6YHJVj8CauJN
z5<&>Uax4x1;sa}M!}jImY5;y8xH%w*Qu188aLQaN7$69~3t?aVabQVz%pDU%O|ob3
zMv*qH47q)i47~MS3ZCH}Ki8K!8?qL_P(36Nnha_W4FdvG&{m7*E3;$4HbkxfZh~4V
zaX?%Y1KR{1ITo&o4>O%yS=I@l<C>%&ZADS%#Lp%%Fhj!dk{zeam;5*0iBB_cZp*+P
zhY-G3=)ES<zCM?b%@L^Y4`HU8U&SpY!^jLQ3ZPG8&dtxcs!iY&BYnP`tA(x|zJz2Z
zEZF~o<L1a}+G5*9lFuWBMf=Uij~la^uXvl=tDvy2<CW=T?|R<sO!m<Sl;sS!OmlM?
zA)ettmqZ}OV39@wYFn+(5-u$ojp(x+ru5(d;cBKL-`AM1__Mg>n|C;2$g^6{mm`dC
zw>j<85q>xJ_qham`xombEy0;Qz~%lv159Un6SVSX(J21bXn_AEo||#dU@cE0eaXq@
zk_9(~UDlE-p`abR=Hu03cC1F!s4<2&6L-8VW9&nW;cq_#;_BbH6bfH4HvAi)6>?+g
zrY$?K_nN2Ku^Cmy+k}sXZnfh;ouQT>T~9p>(-Gpw-usq!%`HsJyp*uDSk;hZ)kGJa
zNL3Q$lKEb@o;pJyP`YSWT>oS#-Kq$@*<H`w8^6lSl$JM28cY8AN-SB<1yX-}i6nd4
z_7f%M*ZvRHRbF?*>g6_=H*@aC4u*CGagaoYSR*^y4!d$y>{Yrx(k-RrLcBPaI9dlN
zp<%d84_lB`WL7EXjsq<;67(!Iqar&Aufm~pYQ7F0S+<G`;}I|d`lhnI63AquFGY09
zx~yNR%Y@%E>R#ZtZc3F%o(ahd*9}M0D%6a7{*WUoOvpvbAQs?43nuxa!D#PY0SB5K
zD(y=-AQsNsadXnQ^Cl-^36RJbt~)7TFQQtWBU+#2ktik=8hWxqBm-o&SkS+sW%ozH
z86^ZjztJhGo)6z*Z_5InXp&RWXp<SHlh=HmQd1gr2o?0F6j{v_RbnQlPfS_MAGMQs
zCRqO%Ki|5(f63%l>n$=5YQObQWfPD+OQyk$Sz5G=k>^~Hi0A$o%$}sFm2x+PZaC#<
zdGr*spttG(DPBENxw?HbO`ZDZ$Lp300GzqpWGZVBad7d+z1WhJ_RN%1XkgrG_>`MK
zOvWQUl(j$mm1^Ht;6!3}1Z2=W@@cx+eRYiP0Jg+waiyG0=7n3O8KaO*%<Cv4ux`tl
zi59vMlxN9Qw9b7fY<n8mFlNB#d4=T%+gShM?XhVDIo{j+53ZtIJIPO7$n3m?2@3N@
z4XQE)g{F#OMV1b)bKUm#WjFa+DDdRu(!R>6`NKnrXQIbkBf&Tky&n{QMEwP#t3c^d
zr2jmqYjrjJ=APbM4X&$NUDw<Q?Ahv;Oz#nF%thh2&uZn{+=mbLfxDcEZPS=y(N&-~
zt>=g09*GV+4?DOiTv(k36kpG<!c2{6b@e?h{9MV(N2LuyGQeJ?JXo3GKuH{7jB+#H
zy|JB9KX3}#2~Z?@to%|Jo)MDuhAlFn$=RJ>aXctn<hb?unim;|TmI~K3S^9SR53k&
z%gp7X?&eG5*|NtAM=hT2XIrk}+2nEyNAh6ojDhr0_l$1lhqdBKo!xe9pG*N6X$#{h
z<;;qe;6JiO*8q^{>3As;Kv#M-)=#kUsFf`?Sn#`_;3Q-atP5zbvtXaY+^mP2{5K~y
z3|`J&auUg}q1z_$3k2TrUdK0E3vI-!9Hr~W(Y+UX%eTZHf2XQ#Gjt1aDK1CDg`4bx
z(u=5g!ToMeHP0OWgACW{u`6A?@qOul3>6K&3udr{Yt$SlQJ*1hb4kIjm?W){L#~nr
zh*XAZfc}6e^?sxu2@8lYLKsr$$X@ub^NL4qh1#o#S%tSk`D5@O?*y__paQ@5oz)*S
zo^Vx@lv2%sA)wf_O8Q}Xzl)rdbJW{m?uZ(zKprv@@EXW`6u=6~GFpS=`i_;NO7tdD
zc(Xet_s6dYUu=orYuNz#2Pht2Tj(ll-|jz7pOcACiL?m(#(p|WH3#G6|3SH+Qm=GR
zRYeu75~Dd6YgNLcBr^8ByuH4ZR<D_YPsj*}V5aaRPvtjxOp^~vAxeB^4Uh)NPT8br
zaUq*;|CZ76jh6*Rc@pg}<HEGS%|Kpf;P$5Hs!df8bEl#5;~SSUuk5gz#V9#YXPw?S
zB+Y^NB})E2OwBu%ZfR7SRlWQ15k)xwM#bB#C=9J*7PPXgs)`Qfyp!i8^_D|F@QM|5
z-P^xw!gi*~Ug$%4P(lUyM#_GZFNuH5z|}K_iA#X=@|tDakjxqIAk2G_+7?k~@cjnO
z-5|P>gE8?#j@4L?FW!`9(ice~Yg%hDiqKOGp1T_e9A^soWI9khd`y{%Q-1E<RXT?&
zgm3XLrZ%FndOU4f!$}^HM^Jhn!9$jvldr`BFASZZAy6Y%c~fojXXbHhl9}>rlK%Ev
zQ*W`QV&&??Vp!#41nrPq=(J3<J0n_9Z(;YvMyHWQTEl~866m~)>8dYTM`!KU<Oyaj
zBuPh0cJEaSSGl6l#f7$fMDIvtUqi3w=t5*PNg}@;HkHFf$1mui^S;EwY)VV*EY%^K
zqD~<x7P{10#;uXQ5FZ)Pph9v1YrFqqBWO2GW`pFM!!4-B{8wzPN$;na_v|3^X4^uq
zSBaUD#wgD~<SmzP?Rb}yf0TWdV73ouHhEnfG4t1qW?|GE8yvT}{_L1Z7{%dLC9?4I
zmpmV^0>h0Q6bf}T8w}#$UGR5^9M~Gt46c4M*&~RD$ag0zpPp{GHnAYDk!RuD>p-iB
zL_GaAgj49Gc#e(YHgpzK|9`RoDxrPhi{6dZJow}Ts9^3Te=DD^eee|TeN9FVf*Jd1
zn_4K-uA++-wWL7^hmx3B3pFSK#5eh!)!l*C1UfHuz!_=sogpw4e*-SsE_|%srFxG`
zfwMOd<^(fz1k_J4X|mh%5@gK96dqh9T+M@wCNizGn>f}Z@l{_Am1Yvc;~sH1Z%vd)
zL*IK;07MJiQfnsU3fpWkT4my3=H!NC`+fR;%;i12KmXD?%!o5;E+WQ-9DNS)PbQZO
zZ@#$4W<2H2?m>bJ9uhQxaKx2%fOHd-id#BD5w25SuAp~zjoWIIS}{tA@g3?H*GPu1
zZkMF>J4UThVW`xTJ9#jG=r)X7d6D83;r1{KQ8rxp=saH@odJQnvmrjO83tBOvLhC_
zM7V;{ax(g8CpmwC)tJ1cvU$ZiRIj_hcHwJQP{`ra#Az)>=GPfW8olmaW#0$pUFfB!
zv<jmimA=#Y9DYxhcfojdR)8>}TLuCB_-cQ@z@r%LcZUz3UG)6yE$0lo;GFp)rPKiH
z_o6Yxj(*KwkmDyhI==4@POc5He@F3gir2Kp%_x};KbkjzCYf;1$MULmmkHH<Ijmsj
zuh8z@U-yM>j((m-6>8PVs#nU{psV2bsG8=b0-ZgfEs_M-CRSu^?M0>zB35TENAkrn
zZmio`hP_&z{DIpXQ(uG^W|N}vF8mW7svJb|rEJSpWF(l$C4YysQrRj0nCf>U7nu4y
zTkuSChektKiV)D$5=oa9?~a}6tF2X_CFML+JX`OcP4>GH9mZk7Lk`(7a60vCie0-&
zrvF5Sec9{gKla|H5g-y2-q2vhtIBX)ZHkXg#X*qW+YAp$<}Sth&G3GU1dlMNSJRQw
z#*zqU^4}G~@<P1;?Ypwgw@>M}hO^2&6#<p!=m+#2ouWs1(z!O?kZ5r0S4NR196e9w
z_E^y~JXvmB6g6WZbb|Dau<QeM-L5hV2<p#Hoilra6Owf|wuMa6DDdH0a_%#XFz$Yu
z`;q{1IL>C2)s#}6V_&qBB-A1jvV8#(WTi9PWpyY6AAxwRKGgQ7FA-i<8&IT9l^mw2
zZ)P%li;FZ<$-CAOnC%QakgmRe@+nk26bqVsD&NIKMw?e9S$1tZb9>$uAtM$bb$Hz`
z(!uy#=0s|};}m=X4lKEd>W~8^?$u23Ue@7G_W-v@%!rR9?I}EL-9V@m#Pn_+N;K&_
zAymCE)XQ|+>8|F!APdCI13bXgr9NJl9piT;#}(_pZ-O%Kv40-91cr3GA!QP#I`W+<
zt*DpFTTW6QO=ZPlc}F=tx!%(A`!A~-gEnD~^u`L$C@54#JW3zEy2CMI8+7$~sI%!E
zur^8_SO0|HOi=cu5AHzcoqVt`B2$n|g=Is}z)5Zx>1E6Uk1#|#4uQV&qUmn*U4JcH
zR`&UE%>JMD{C<vrx7dR99iG)Bb&<#2TwirR5_DZf@T6HcHELevyA_oFo{0jCG}wbU
z*l^sVe!?2(m#CQQ{Wze)i+&WC$@GY7qBX!~u2kYmSfIZX9M!vu4g^d@upXyUUXob_
zM^%3NU6bm4{mqHTYuldrrc_->mngq8G>uf{4I%1OEVE~D_N`0^^zey%L^4n7A<dAM
zk(}tSr{6qk=w?0$e$gz6uE}!1$vD#KIQS{R<vKB<yFmoqOa31m1saa^1P9oBvOu;i
ziBAQ)_U41$eZnYaLn`NiBP`sG_mgS-pFcmCo&mCt9S?RiyxQ&u+I#x|k9p4bZZC~3
zr38hOsCV#;#Px?9Dt_L0d2hDY8(qiSojHFMnj6}YBAU8o7bx>!!I8a{d~p&UP~vWr
z`K&)_7Ze?t7CCcG4$1bYMeIWS3&4R&h8<{0jUg6OkXh>^Nyp_85~0^q7cI)JcQD`t
zwIp7H(h!bF$ptAqJLFx>6&c^hQ5=5Bq02$p@p}2|#+UnRMm`E9;BHmXE8!2!Escih
zO5j%C4^#cFlwU`RH|;$iO|<@z515LE8o#RoDtT=le#UY0dYfE2jj{g8Kt3@>er_|)
z)$Y91=TUfdtnWxq8uYul2od=t9ID&f=Z&*=yM32qpYv>v{1k&kBy;6*#l(AQ>`OEa
ziN9z5QE-uAMJ$-2g=SDfRcW7|P&FaX8;34hdv*G5`=>oE+4QHlljt?u+Z^_c@YZW7
z%b`Js(x%M<^;jID0l6>80bV*r%Yhspc?fBd(ViV(rVFO}-gYn+(ruO*;g6*(vf1pO
zUttav84*2NQvx3G2x_@y`Y3HQR93;6<}{4P^NT`>{FN^+9}`IA>(+<$O{XVER%?E)
zXq<k0dGVQYml!v5#NLfhf!X}0nZ{vdSgEh9sI^iDS}#P0>xN{<pd~iXH{;+JDdXc8
z7783lw(^YkqRdoRMYk@De<FvWGZ+Sr>IQ9Tnwf_h5gQ{1JfnflL8q>FevrF#ycomB
zKa{ep4-rKBxO;DH%IpV9-tCM{InayCXlmJ$aEm4c6ysu{0XKC`)eR|%g#`8iz1mp?
zb?OBOdC?rVdn^ADQtwF<Yh<us1BC4fji0%giMMbxi9)b#CT@ZOcIe3NFy~8t8I(hs
zBZ+nEw?a1ru7b;sTC<*PhF+gSzlTe+KtgGZA1n-;D%@BRjdw(>L=QZTz5^EoP{Ng@
zmv26UGoI`&yhSgRwYeENmFa}H5xP$?G(Q;LfZujKUPthat8Km3EaddJHm|_Rl52}e
z^v;YRT)58^Ty7!LVAoveSEb(tc`(Zpj6GBqZBs^e!yX5N#$+f-TA1aRf^G%-M!9uv
zPAa>=D{m?%NIo_{0j&EdF+i}p#Kl7PcH_IPzkv7mOl1;QK<7=c+jNojf(w$dxp5vJ
zyeTmJj1AUg`5`#=rCx&3S0NT4CvbFMDVAu{G=7gIA5Fk1g-=oZvj43hF5l)o8t#lR
z98DpiS_^Y~IN`N^;>U=Qe&_7etT#&`1X1vf)=p&C-znsQr6a}tXshaVwm*#g7|)1W
zCAlrb@rf$|zorZ1<a6t#l%#NGWyJ!3Yg3(Ak=IHo);V)Bj(RjFGqa#~+70{{Ll3Qy
zp=}K?C-k2C(+l1$ncTBMO?nx|XYS_iMySoZ9mf`7hB-$2c9;xV#pcK2@{1`EQx`Rt
z?_yd2JPsRWG0MFHQg?s+$hXO?F9bI!P`7sFD*G{g^8cj%l`jE*eZbc(IEtq+Y&_i5
zP#`IqyX4TwY{w&E7A$IpfV6_`D*>OqYeTuj(){TNE*<9NU{nWhvJ&B|c*VUkdQX-K
z-P@hO4Htnw;nmkFA?3P7#?M7Trcy<NZy^~B7S$jPu22iLdVa&Ah&>DLjpnA3T8Q1}
zwF2xmo+iGp*B}>P)8r&%2OJx$oy8%8kYG^bGb+-%bA-M%tO$<xigr;ldf0tQlIsdI
zKQw4mB>Eo5YI>wo;4P6;9fblLk>+l${vQ)wV?5ZMj;vAST7>2a4<Dz{G>tX%9<xu~
zY?zFWlvl)u3vP2K#3b`*gzuFH-{9V4k~=T06}YXckV>znINOI#!`K%Dy#{9-_tux>
z@?W3np)*kx7e!t=|9Yl>6Lax@v3FhpO>Jwt7D15(Qba+d8k8a;0#ZUpLJ=tfHl){x
z^xi?R08#@8(tB}9uhKh&8bG9X0-+;>UeB2Bf3LmvI=AQU{8w<HB$=6WjBkA3`#!JS
zG+py(#8(v-d2d9|tJl`+sBzM_EIshWc*`DMa-s+u?D@|Mzkax3Ojwl4#fPru<6Yj5
z;J&0Wcw$i|rx$4a;lIR8LO1Wu#~_|uwxrH(m`W`)2#(c1tLzfRR9Q7Jm{s+i?4^91
zzWS%hISIM9f0!%ZZ<eLixr!Xbmt#-1gkJqMx|NdzV%O*456?d&G-UC;7Sn6YAXH4H
z@uh>Ovt2iRz)|CEr;;N=zbEH5*IM#B@;?Yr{JjvTV86ePrqAqM8Rbhf8;;DdHYh8>
z$xwbW@a4ln5hFUXn>H+u8p4C5SEXBTj>P(F8)L%@{l3KBPN#Y%+U;G?)_#a}t&O}h
z1!feDLZc)VnhzQG;~iJoe1q>o<1N^`vV{5o$@E^aq7y#7_spYG*Jp!Xdlde-(aU^|
zaz99*Gkj1RQ}L@rmgWI6A_A_w3pZpkH2LJ`?{TbhV0YNXH@_<1Y`AD5v471x3Ryj;
zcj=ewf=$F#cnsH(A1_5Z`tzC)#=GYL8-Jbo1h%RkOi)N0w@H>-E#5%oIzTXYi>rLh
z^%tF31L+Z=(~NUbKh<JN+@++9L36!jfw*Yb&=9iSS~T*$JC%2Gkf_PeLW0@5nvMJS
zPJ^v?qhH;!z9{l@C6F8aWWi%g@_2^A1Q?z|y*3?p&k6Pjtearw)hL&=T&GTt)?O@}
z9^=y7{%GKOYM;zV<Z+q@g#1gLcZ<6?h!w~#29bDoD^e4UP`bR`AGbOi#Au(coBSGE
zgdNQW+3)grmuDMFPm`b4Z@AtiNy2aFE~#Fi`%ARwdIl&eMz?odCp>&q1xE@DnqD<N
z*C3k>v?L;Zf4vrg3)~X<#^1s|Dgwwf51VBQVvIuI9bh~}Kav56Aoe3bwl#G-=cZjR
zO&#k%CX0gB#Cs3@AV<1`!imAiVYyqkew+?ysB#1M`fk-70+v`C?u=gfEROJW;TFxA
zOEEz{t5)x0onTzM`7N!$LB9~$K$r&mG)>F-1gW=!QRAeF*TfN#o{O0sW~Rz>jg<Bk
zZuXMCdIsbt{ccGsRE;Do2Dv2f0g8Znw#%BY!y4HAzlS)o9YxzGwTs}ojCx{`Uc+%Y
zJKBM@`m3svCl1H-4SerdUVmGX={{-NAgu6y9hY;I@404Pcn{E1Trb70@x^Q0@8U0@
zBfVXwxk4n_ET|pmKgr<DE~(TP;{KBP{PUMXR_XU2m5Hp)<3o4QL0*G32ijdHf#;N%
zCyLI9xvJ_OjV^-0*fWLz>0jsO$2BQ>vNJE=5n>rE!$&xk@YN!d#P8hwRenzL_R4pi
zbJXThM%~Cu(&~{ber}lgO^SqF?N7}k6h;d-LZ0Ybc{l+Ba3mnNeBX(m9g%rL;;r|R
zwgYWHv3MtCimU7LX3_}?8Gsjx6#uavGghKpoZ6``a~2eVWH31xYxpiN$idF_=&!af
znwa_b`in2*{MJLeZ(OH7x(8q|X8xWYj}r9;y<hv1bi`TLT#NCF*XfELkJOdBlvjNC
zow&hw6#!>`2}5#ve3*sydxxT2Rba5)pG~5j{R6kqPYZ)(baPh4rD_!;?)!?RGG|Oy
zI9qgbScIoCr&1VFINkjImapb*cBCO8e%{_<{GPu-!6PkL4vIVU*LR?dlfTG0Yr*~L
zKJy@u$3%xXvc!pe=(YGJaV2?d1ncQ@!nfj(JQQck%fr`JDA_1XH+QK{bG=&PapDSm
zEM}9EB|O!|RGY97_V6}x!k*@Vp~z8?Qg_$uOl6PjsOTJhgyZ4Er?&`2WgBaID%x60
zI!lSf3#?YV$0gyJs}UF~-laIQX`dowNJLpV(EYsRB0_rj@eVw+{PdG(nkDgyzSJ~9
zO#8n2LpffYGwa|i^6AY*tlvK81}j;F=VdUTplA@K%dRiJU?4E2&=-$m#uaEhPvnhI
z>vZd7GJh`>;?i}Uk6MC|@_Ukf`PUxam*?G{!_j3LXbbin(+ecWzR1fM#>BP#+asr!
zN<3P>yK@)o<ZpnQf(hf$Q^yvV;Mf(kw9THlM)$zy3=bbN8QFBhs6DS8OPrg6WMz^1
z>|kbRBe~lu^o6V8d`ZiwAmRDfNi_{qX@$!1CV51krjcUS2S=^(*$AKR{*MRa({8(@
z(nv9`?^X`J7=t!}!I!MN)Y6F3vtWzltLAcHO)a!~3~gFiyy{;Yfy8&<QhoX8(_MdM
zFp2Kmng>t>YdtV1N_y`4vbMw<&wR#_lxP}Tv?e$f`4vp%_ZyS?=d_z>Ck}3Ve-euk
z4-pPRdx41}qWuMeL$L~&dVGy{xiUUdU8m|TpLAQ<7b~XXXXU-H3+$?V@8Lz|R5&W7
zR@0*G`@R%(ZJO#gP(&_C6&aT~1%ie@BhQDf7xv?zF?$hYRkNhJM&d6u{q=&_VB(b%
zVkQ^;E}!~9pjs?^rWm(E$xS6i)rx+}FxLF-29ZWH{Czc0g0jDV(X-iYu|T%KlI9E<
zPz6|DpOfq<nyRlOk#d>a8R}%u`~p*qFcKPM5*-{F_Ae#+MtR>yQeS?3jpvez|3c)S
z3-M+a-D+grC-1`0R3yjM07BCN^j2$LpI@$Dcz*!!L9k|1qUVbFNx-2zgW;S-4oYJD
zxXXuOcl7R)FQ6I-hw;&M$0p;drXrZz7A`;_TYelyI}11Y1^FPqhvK6lMeDFVk#N|}
zn&vBy5!2@+g6m+|OyEeF!&R*oJ&vSn)6=BY&;3P;c$jw^A3I0%l0TV($U8Ca(kI7{
z`%+EuRFC;d<LZO1*7CEY=uAbT*`?l<z68i9)*o>=Zl80#<{6~N#BrPBZ4x;omX<~B
zZ1bR#Y{@8znlrE<616CwaO#t+E3Uf~u5igTdyhe)%O%b|q_FsOpClCy<6?o~_ei}n
zi-<vcKHViW_mbhw=?{AcRlH>=b0;8t{K%LY`{vK={vtp#`!FT&c)`f}{L@Q_>5V&W
z;z2#QJ7q0-kg{^0`jr1pgBr<E*h%Xdw+p$$pQrz+8<`oP^TO>;jwFDqQk#vYg;5z2
zKctFT@-PUIYNp+b&pJX;cz=)g8Z|>P#>V(|7d0M;u7%0^CCj@`q=ksw=~#kMhS5Db
z^1tnG73nzzHj0Ofhds`<)U$M&qnFD41&j;qnS|(;{hxCh24BXJ@5zpSfU_Qk%?I62
z&`ixC#6PT-!9KS2bci@FLO_-kZ>Q)loCB98rPa2P&SBLIjih7yMq5bJKumC9leB2-
zoV|38>^6+!?Ey?U)H3FS>-IU{fk*5K10B7S_84)agkSaukwKzO25H(ETHc6c%J=X=
z-VX{EJ_;@X5%r<I*=zQ+>uG+mA5{gFD^)L5+b|E9;+U9g*Mu-8i5y@fSd)niKHK*~
z$`bjcRqppqSBGMlPYS%R^QZol8bvvcbgnwC`oI13C4_O)+d_ura>IS&C4T4Cc43mn
zw_PO}55xuK7?J>%qXV)yVs86d{<=-{iVq_+ZqxKSVk*WyVN=D-x@gEX7l<7C)*%Gb
zL-9uVNFNcLrHJ1tPoAaqUd2V%C}FzZsiVog4lw?o>M+K69%k_@NRfauN*`X^zFGFY
z+(KKi8z8LQ1ExjQ?QR!7j%1o@5)Kx3dc8@Y7KFLHH76l^{o++!{!WJXY8(Cw?wlol
zZwAOy9dmdHH2lXe4aL{=92Q6pv#;{(Dt~HxdTCnR!ax64^^B`8hf<W7H`gz!5Taxr
z-#>rZ*E8i%A4OGoL0-=~fu|JH;zemx>j!ZS7$Bm)c^VQFJRL!lK)G57v8=AW(B>Wd
z$U+?AHhmyn&<Mn{3}q}D3CO#rgDYwjgt8YcrympfUVhqgVWIx8u-rh2!QihJA1sX)
z?4zt$+7(B$B{t3?mN#oa<BfXc-`g6!9T^~-oyl0sA%9i6<U8Ps$RIk3up@%!A4iSm
zU2v?`SLHpYMkpP;RcBmh1;}E#K~E8MhY<Hi#$*1*d&&-W)_Rt6Y9FHu`z7bH`Mp<8
zs~Q|9Ec%0MS4WmA$(~9vu)OrKQ0&=|)t9?!q!gJiYaw@c<^&o;6J=&zAL`s6%as)p
zEfKZfhm5t~7=-9*bBO2Ka})+)k1t3347{$5gxQJD-hy$^rSDUuBJ&64=;@@3YO|uZ
zHgYIpwuTuu8T2NA&OydOE~n9ts*p0D!&8OwlA#WF;?PMy4UD~!x$$mH6+G%HV$<?G
zg0j?=8AZXo6sa69Xy#l7KUx6_=urCrsvJ$`!9WS{#c>~#5`1R8sv^EKFgVg*njrTq
z$ms6V`}NQLW4EiobXxX4fzgcXTm6taydjx!6t&p9>*Hi{EbfewU>fxVVX+{)08i3L
zWH7ku6ID+zc&qqDA+PT}%#A^xJM`c3D&HJq;f*KbfjV#brj7H5kh%7k8_sRZuv~gZ
z%P|x}VZ-S4@JV~0JTqfP_X<*7+1sPS)siv&y$j}W)(`l9wf5P3g+Gg`cXh245|*Vt
z6=@*cC&D~!9<?Z!WGO3_*cTKunJN|>{(vOHoIeh%_jU6u6d-sS>7GxRXouOXHp*9%
ztD8s!jLi!4;Z}Tm$8G=BePZ+a8bGr%Ct{f)-M?PztDOD3k!dbA(|ZrMA)U42W|=m@
z&wX}E^`)Mv-aA{W(G6fgs*4rR<8LawKbHjt%&dvDnrj(#_H>$j`+mvc4cTRHRUO<;
z|1)GHhK|xkzcNHeviwOBikj6g$-f^l4CICxg@%_Kdko^%0C0+a_WHv|{1IPxwu<vj
zAH8@_J1Gik<y4&_yY>>+w5ts~{5PrcDJg}3w4U+{Re-vU^b=`@xf?}g_><$*1i{6+
zd$+YC><z~KDYeI@Rvr1U-^=rhHiK?s-l#|i9`Ltqc<oi)TvqE~k`4@-VW2m>qWQ&G
z7pB6RXEfw?JmM5(mxuWyZwQ7P{#t#{UiIvC^oJluDsn0Tstn2oDj9zF$mu@@31`Ci
zSNV?whTaJnO2k(j1B3nD_p=PvJXi*oV5OMN5)!<URyucF`Y>9xD2wWl1k2)2G*egB
z4t&%%j#wV23$^r<MX|(Pl_r~sI(aDY;T405Xjnz)%a6kfQBLLI=zV5<_6d(?VA7>I
z<0U>PgyH*^yN)3ng>3uGbhX`HZ`?yIp82`mHKvKU8FXEdh7ZP(Uzsj8viCGrY8vt0
z3aPqFNx&cJ*h)d7sPCQ53`?huw*kuVYIc9t7Kx%<PPlR=yg^#*o!ykpWkFW`_x;m3
z&$t!sE}y@Ddy;B%lVtT%L7*}xT&0C9?<Rd5PVbLu5+nVI0!wygr2>MXE7|Ht;!ZQV
zL=F~>_WT!~9U80bU*8*;z57Jmm(1hX5BbOZQJfERjjs-$g0J1-Q??X7LIRaY_58=y
zb=$Ln21&&|5~4&v1N>?l$G#HEp+tFZMQa1zY~-5(iDk0yJvq9xHY0gy>C%S({!<t_
zjdVW_@@@NNV{ESs|G695_2<U6^S6q7+D+doKJMVl#wJrd*Kw8FV;(Af7v;qY@>cSy
ztg5pWA5P1Kkn$$HCHRxi*zrs3F+Ey@!b#KlkSRz)PEcR*uR3wkJBS~+J`OCCgQzGs
zwu0=4FtxQ`<i1F~l&;Po;?bM5=g}LCxUG26?2~$T+4oSMjROWXQlIiuUvb&$t2eJ8
ze6Aj-yGXMjF3kWjDx%#`ZXjKUDDSGmn-q=@`lBqOC5+mB-=&VmLl=L3^N-Y=HB();
zWM{Eq#HTUq-*uGp`olo`U9!S~Q8QmN6W<>PLVHC{T_2{XQ0iZn%@em<a3vV=9Cv$e
zbz#Lq3ZDS4H_LamTYdHYheMydA8rranXc8YyU{A|bZ14rUP^c9TdqC%c+<Yf1-b2?
z<SU;WX=>kbiw3i{h_{A>PM>wfz{4s6DHd)Bcos0OvVucWv)*WcIbCl9ayVksF_v_t
z-mQ<x{_9cRo~r3Otl-M_+b6+N?c$oxQYV|%JlGx!gp!%b9~0}Dk{MghZ5)SibBL<a
z?Zn%2=LwE=EEAM6Z&@ck5{vut;?Vj>>(0vpN7GrnMMM5~=9zG$7UQ{Ii+AFo!9dse
zR=>;Bzq};EtF_kf?oxim&@kza*E;r{cBlPE^B)^4<}t+f*c-=zw$pK9tYgpEro}tv
zSzY*@-oNhYVbUZJAM0lECtGI8e!DY2wND`-|Hyf@37-{FFm8z{94fjiR`$9ar*6~2
z{M~QWV=w?`md9n@gd3*u{+4vx^JGHt7pVn#(CxM+Pr89-Pfe4Q5jlxKKL7JcmU)(k
zbZdOH9+59D5>g(AVG1&bF*OIyewfYT!li7ozgiI}Hqd5j&At$BHR4!f`gT*+i+v`m
zHh;`fxi6FH1$WoL#?QH>TO~hFoPpAFXh&cdwU!2NbHYEC=9J8D$<l3|>U`y}k~Zde
zpsSu#HNI49WweICbG%h+|I}mafbVqjHOJSS_GHj{o2{3tZBFR6PCnY-a6H>p<PI8K
zxuiT(H&n{_Q@|`FBO0eTp;u*e&hFTAEsMdO2fwy5x-j{s-1I=y_r7NL(`u>ljLJ(f
za|yea-e&Bhxa;`6T1C6i<wSF2D9Sa_34dgTDb`Kmt<fIZF4kQeVVIIyHTcixY(PM$
z_jJ(c<trFK8b)060vZ}wHvWtwPNOL?FC!LPPuahorF7cg9>DaD?9V>zkKfwUz#HM3
z3jpk)9M7rpXal&3?&Z;U@n`D%&9b_5;Wq>x5N5lmdLal%5oXdodT7cejpcJ4@R-d5
zei08iZ<!~}5B%qq5OT!7G4*_}u_Ge~8}dw^C1PMuHopTr2iiMTQ=cIYM}3d@Uv@z%
zD!OO?GALeT<m&<i#zQ`f;est7LW>5Z>r~)qAvOJvavHEDKm2ySl8G39IfI14XJ>DN
z_*G)`eMw%8Ed5Vqb=EfND%Jk{srO#ET0pomi((H4T=6Ou<%LJyhyY&}&0C6L=`3*e
z_D8ok^;t*&(f`UVTs-eyxzpvkgJppUe*9#d>xPee{?Bjjl^ZqB9G3^a#)>%7Po*#X
zTMO{#4e(8%c+W9H7<xX%>wr-mI9DAZ^B-{n!dR*PHxJ)9GPz0nuWtg;>d?wGK}Y%5
z7y0`aI_lp43$OoAw0}A=>pyAw4*x~c1MQh@eWHKR^!>^IG9dozB~eU4|D@^n{qwc^
z-%<S&uP^e?*LJ&q{%;@l_va)2$7?H4$o=yTF8=eiml`hp;|)^%zNY`Fkzp|L>;HU%
zssDR%{(XV|_u~BLQTpFI=ik@j|Ch%q-7MDjvv1HJtpMNbm2X!1s{1TeyOj<Zuf7Yh
znT+0(EsLE1v=`mP$iFYm@1JxgK?1;0ALJF9;DK#`j|T(pZI!TvE3T5a1toTe;b&<?
z>=yn;f(g6oSHfi7|196&x6>D3>H8QD+zR;z!)+3SeY`<UyES{0=BMBl_fETam>t<g
z=8wVVG@&H2l->=F<U=5Ff*$e&J~8G6*sPGKqPglb(46?GBsAgB-T#<p0+8#eySdB9
z)ftWh6#lk3Qc)dnq!H?Tyvi^GVGoM|QdSVmVV@u5O;8;H7=1BlsW`_%MEnY1REY(E
z7tbL7RwhLpTxAJ(GV6er+%Xn_3iHtVp#Nrm5Ae|@(c679y-CL5k76O;{0JD0#R5im
z;Xwn1S1)7{PkX@g@73k^&oolTMLy$cq6Gnf0TY6_-gwYc7KFIfwhV33@x^tv9CL`X
z!SdRl+O{p%y1^NFq8j*hnMcsbjt31y)DM8~7Re7jp-|F(GkYxXv%A*gS||i<M<b#E
z(D&OwA24|7ruO}<jDRjP*b`;Q$BO63yn#PE4gynE0RK-%)Vgqw?YP(Bk0dLID>o~3
z3ZTDQsfo7Obs!C{!R&Lu`#4ES3H{NMpu-i2XE*?q+6y&xp>MKD%R(SOWh@v!Wg?m-
zw|ix}fvR7)1OH#2m#^~oE30h9uXqB}k^t!X7}zEkn+Pj`3DNuxlw|;4Onw&&8c$`K
z!1@(iC-F-P-w6g(b+&?g@|Vl9A+~iV%{uzLpGb&f{771HULK$)EdVh69ntePY)A5r
zwCDbQKcbvkPwRzXG79lc!a?{(+hcG`2!LBd!<G#%G#1BGF`(WJtXZ40V%AfGVq>+=
zZaed<-JStn*4`@R=03Qxte@+v>rweCt}stsh=9$>Prjq#py<qE!Z_)EAd2fL);iaN
zw{rEh!pL4E%zan8B^>sFh?SN8zu!fWRJ58R!;G-$TzoJqo&3Sc-qaK@3USYOZDTwZ
z_)X0BzztRt-_A%Zv@sVfq#N+^405}`2B$!uXQ6?Z*#dIEJb=&)uDWZ-EioP9dWZed
zvB1Ke;tI51flW-rC%{qI*9BSy-M1o?`WXPhsT+a<^v{hz2m$=|4^<&RZq?a1f$n#H
zfR>Ni2*_+ZP>mEkfPv|DH|<M(9|+)Y1-TLyfPDSl(hOx@XV)yjRuLejf94+F08iKg
z05hxv52|V&#PQj&!Fjx7R3i7ljDdS7%uCcm)lEZL;2Hl9C4K?WMs;py)+)B=nMW*C
z2)WLZIpnnjgakn#F@vp0Wbuxe$^59Q*H(lHRlQND`1AD?u@M@Hz4-%lteqGjE656h
z)Dy{$!4qK1Hip|X(v1TuL-$;$q;B4Z6PrheUp$nbFj+jtIYvk!_GH=bNVHw<?+Z#g
zwMef?$-8%-X+zZGzY0sf09e)8<OIM{aLaGf{M1C7wF{tG!#Thr&?2o>CeA+l-R#qk
zJpli+fbh_EyKW4F!dd}uATZz%uy2X9s6hb!DCa~xn5;yX2&XZ&@%3y$)VylpxMQG;
z;6fJJdovseBZY?b-<bllIJb&-kKGiw6mid9=#)mjD{;kX0((D?8-@mVB>Vv^FQ;4L
zA!i9rqhEzX55(05Ahtj;xXFbe65z(ecL<C|EyOT@1A~+VC3la2g=Za@fC+#I0~1bn
z<KSxa5!BjU1!nJV5T^19`{f7%l&U{xm>CZxOxS*tb*lcD``MN#fD@8wFy%FT4b_Iy
z8q`mP3-AzPtY*aPXe}=AUS)Qqds?vI9q+kuoY(Rfa}=i;6gI)dm&4lM-qcL3I&J~z
z$@8DZ5TPy*%P0;4jUe_{5Px4&Q9j9pI;|X)mUKOP!a+E&9?i0VgU3=Q-Gs1tfD@B@
zPGKx(R_vd`&!GF=6flr1AOfcV05hA~)?Q@zCR`Zs6u>^bwc~LJV|-2kTWq$lhdm?t
zm<4~`iPM+>Ncpl22x1#$#GQi8=V1216c}B{DhrOJ3kL^$sRMo##Y$|9hus<w>pY3C
z1%UqT`>6398mwcwpc%CfW(QnaYujISV5Hd%u%8;R8cl@MDAWiH7@Y(TMa4<m_YqTI
z5Kw|O&$afha$WlTBK9}o<LJ;lU*L!5vc_!~W0u$k)N?^SQm7a!F9}upp194y++&s)
zd>qE#H(mWw;r>caany0k%+x7E{Heu=s>I9vU!Z{<>7e;Q>irpjeZ68hMy~_F?W$uc
z-ms7`@JhC%ara4vM}D0y_M=BF@U=#X7*d^c%=`~;1-i2jWr!<-oQftyLev<>ELwu`
zH1fQCeYTae3{wCE6R2@Reu;!VzV{gHmpocdbLpm9Hu2+tUE&aMz7FggzgZ$*&?fye
zlK{M#Cu|Ndu=`gWPr-&+n%>~NQ;PMm9FyGnstRdWK#BrFVXkY!rs;BAZuw-Tg=8&2
zV$vc3u$}Q4!_s&g-hY5CHZFG*ET=#0B&jAm;r90A@E(&gdG<OnJTzgqeNI?Z9}tX>
zxwP7OuPP@}NM--pi<c>gQAxmA?>4DBu?%>MG(U=0RjCa))ODHp5cn=e!4fuj<m(>r
zWeThbicGGP0Bk)B?S8UsV$oAj+Qt^}51L0>4r>xU;W0!%Ux#>O9c62fJm4#FYTpdt
zN*V?LtIlRi9N=YSM!s`U7n}sMtu<4y+wrJ4FH=-RBr#mBpCxhddF|{a@AO}L)JY1V
zjvQwIqSc4N?{#Xm585`ht0KhTu;;L~@bNZW3pJO{7AqX`CeO&-Zk=5u-ah{~^LNoC
zz8SDoj7H8^e{={KXpQl#Cm`NV3?(luX0*WqRtnZc)TT_4ou^%N$v#o2$3?deaD^U^
z-aS9v;t1ZHWq>c+r`T+p_%-2P;`7J?JQ)nj$zz63?Gj$35M3?UiYXp@#M6hn%l6VH
z<%8nn*<n3l_lzI2E^G(BA&y!ff2?cg<m!#R>r~bwKZ%IP2SG3kiyEdZN!)k)%Ugyi
zgj(ZJmO#e6b|Z(k{?0uGXCRB^h0}SK8wt2AhMr(#N;BAJw0r#6Q{%H8;^(nGNAU7Q
z=jFHyf1s4N11=B@(C@W;{ma)0U9^5?u)s!!6_?LRwfWr0f`?2%X<YGH%GmoMs_|H$
zI%n=E!ybnaIzVw#J+okes)U2m!JRSF){XjeH{EQ!X3z6wgfL!LwAWrxxUUBx5y8Vy
zk9gwT!Cz;)23c(<H_*;K<E>_OU~)@?TL-1yeWmw~J#(NUsp@==vk(nwO2GXb`|hk*
z?$uTpv|1!9n$$i792C#uF(XzrA#d2dJyc^YzJ?HrAN24CWUE%VS{=>$?21vzhH4~X
z5T}sqwWjDB{t(Pm1puzZA|MQ@b^PqPW(FdqJgKjz6dESlCeCSxO8gQ>tw3YG0KPUV
zW@5LE^Fe!<fUJ8XjfrkqWYsUpe7vYQL%S3@*T(){a2c~KN=4r!&SEEj9-nUUwfkT|
zSa+_V1+Ey$OV#etO3<;pD%@xrHmiiBckF3dfD8B9j+Tkm%)M<f2$uQG-)LLQ#z!Ac
z;nhYEtWoZC&iT{RwgcsK{-FhJ8?U(!c%do0m_mi!Wn45~)Gpa$$8~xFd%=QBHBwkB
zwpdn73#B2Lx_Ps2IFcQg9YKq2fv-ZGsu8zD1rLUwQ07R0psFX!m~hWZ?n>2sz-ya4
zT-WAZnrw`fDx*y|(40LjvupFI>wQRijo7W@TE&&miQI>x@C}q`h>gQL+`vv_;|Ez<
zt(+Ku`u=3$1&}y2BP{0i22AXp#{UJ1``6v#LmlzjvZuAR?}p!<skv2b0=^5-g;p29
z{(2{54M9#V+dYUCej1<%AWt!pzdRD#?7xTPw%gvK7SIvxC1B@AwOhzYP$C5nrZp4t
za?}1Ko=sol>Zm%21*(K1M9!SlX%E0@;X49!y=OPu;{2GrzE^<aJ{E94zTOq~rxr!w
z07a#2^o<FZdyfJ8l{2V#L`@*DAWvnjJ1tb=)q4Bj@`-f1&`v`t0nJsZtPjLk<``Qx
zIO)agz{Am1x%v%FvR;xzAEjbOi6_L>J)&pFrXQ}ouvh?AuT+Z2jY;>7HSQ^J=I9p#
zH@nr;e?2ozAIKf(ZZ{X6fb^wEh1X>!p=sA~5BgdyPL#0^RJP+EGi7mUl~XGRY3y+6
z9Vm|6sLn6(N3`~Jl>HL!O$m9sfS1CwtgnpLmKidu&FZ(_tOg#s2N3_4lfTChwrP7j
zSI_n-(cGq_4s`f3;wz#T*8u>eY~+{w6jz8t>Jd~l71_K!8t!M5=f{1Yiwq4qJTEV7
zSHE-ucKPi@_sLu`2r|qMutL$t13Qd|TGe6ZqZ_O`sV7jf5-cv?Yv)@x_`Y5($5yKe
z>ZW@)Q^{Ygu_JZ<d(BIC39Jq101Z%N0dCkN1b}a$i_5l|wDp)B4}SMR%cjjXf&WK<
zoCKgl#R3UMnkw<#z0KM2Rf`>6QTO7SLn*xE)sU^z`mdg#kh&%>gsZ@SExSg=q0A9i
z1**`h;~H@Iqs_97U#zAM_N@0I7R1H7TiM>D?(R7mZyH>O_*((v&^*60YW41uMN$|B
zZ$a~bQd&jaaqKj)coiR0$@n_m{m5SAC%>x;pfYvrt}PPI2U>7Ys~sIH$3SDZBF0*k
z|7xTyQGi36Vm-+x>SJIky+>}zFt$^+e4NN%V;eh&^Cv`_%o*ciA?U8Kauxi=7~Sji
zgD-NP7e#qeyWv_4@<ONyaJbU6^_}B@&b3p=0O!SBq--p_2P=jmOoYRDfNI2US1e=?
zsw_3lGCs#bB(f3UX^#W-PobV>k&f8T!v}DxHQ|D)2^l5`B(@bJhV|HOh`OwD0v5*n
zNYvKNIB;4o9C1ktj%|s4nQF092UHvaQwKfH7jypW7`j#0>Gz|UgIUogxrkeI`Zz}~
zz_?X<jEOVk2Q_jHu#`0urAv4>MqY{I42QIG+24pwd0&^N31|!*4<iVq$OCi+Q((E}
z=v%srnD%gppF`>NL=s~=`G*e^E|4KM&KBh*?}Q*3))8rQuT|2$*j?5qoTqdqM?NL3
zO{eITjo2~b;A5+E)23smVnzif8a&l5V2S!<;XisdGpI$IFmr>3Zo72;zc{)I;3SzA
z<i@q_k*AkXPoVge7w2T3DbO<uo`xKYpWWiNSK3^Arl6EDd%#!|fLih+V3i<S<7MoS
zdcUV4y7m;d27$YEae}0mXCJU#Nh-#S++f7H(oiUYrUB@}gH5FL0IL1zmy$mGF^<98
zq_>eMKXuh3x5}#k;;PP(W$hyX2ds$~O|;xwsg4K*mhy}Ndh#<UmF!sX`i>OS$f>s<
zqtk1M?{1plIJm^kY|^=VhNwZ>5==pHQ)wpjUVndV4s1aE(dsgLt1Tvom63S)rXNFp
z7f_(zz9FK9sRq8lfo=ee8O;GDYd0Vuk0=2~9J2_q2)SNam7aaKKpX_q9s#|JIL^#3
zsfd&|>27o2u;B=C>gc9fur<Z+ffKNf7ex2#^d(&He0YIj+QPmT3aUgxTWSkk633pE
zYa^#80F2PMUh(-ItyA1vY(rqP0P)<rL5j|kM86*=V35EwMG-|9r*H@zBO<K<ESuA{
z!HkKKh1-d9y32(Dw@4;`&f}#s?C(u^l$swhxijqDT%>}&F6(U90#ke{c+TwY50|op
zK%SB;ye$p`ol{4O;=r=cmJg8G^V-(&jq;3+PvJshxIb~4gx&Ia!S>(t&6n}xep$!I
zat~Y>#^3VqgT9P4goiV2x-4{eEF}p5-@C!N>sgr$5_L{x6H4(E9<-&T4pxq-h{pFr
z5m}}X`AuyWd~)lGXn*_E9|67We|mxkic>2Ql7!t>XF%E~Oo^y!rrUr+VdUDZt!_Rz
zFwWCK>1%ipw-?2+55;9_I*pigB8}_7X0|;Ucj@4jsVDrW`N7aZay(R2j5K;dV8<lr
zNGk|wZ8(_^w4f3d>UCgO03L#Vn}7K4Wdk-X0PGZYHeIu?Z~u9tZQ1`VVWj^8bQVNB
zq&85wx&uzbLph+VuR*5RlkY+sS3CyscrM;_#g3uySOOdvqpE*RzCiHRQR#G-Lg{%!
z=A0B@y*f_+K~l?pB@t;$<Gl7jP7pe><H2q58F{X5?ow9HaV>yxU(4Eq`UzFn-`YWl
zxNgYCyb6F6CbrULNIwweScF)j_ECAi3$QdpNAw|P>$jJWL4Ux!2khpsG2y*{W%fE@
z+zQ`j41YIV@&sW2?y0RKV)0C2{NyJ9XjVD`&Ren2C~D8+C_OYHjt}qQwQ{kjg`}qj
zb@|B<I2(KMgQLY~g>4A+7H^-3OXG?RZMi6n>AR4C`+L#ON9h1=DIb}LA)vB(n)=@M
zjom$gAhgq@u#4^X6`kOweZbIv6Clzy(}^F>jC%l#4@Fy|<a)Y~NVE7+9ojMjZslmZ
ztuAYT2UfPd4xOcRSbt|qEI_2gAzLO_oigEI2phFfjql+icVL(-<(E*g=%Mij`bzgs
z5(G%`*iQm6sHRY*8{!dvc$bBRJM|kNf{f1=gb>C*;N%~xm=jyjP2GZ$x9lY6S(f9s
zq2^UMbNmm-_kv@25$rTD%9uo;MY^lbqKAkrZV~ITVK})PHtiOV`<)b<7v<d{o0!et
z(c`qbhIQ+ymV^Q`?KzCNHToek-t$D+TVkXz4%T_8dptG!hW33ew9&|cK*GOwMG%LE
zIY6X`v>|7sS$epZ-Fg5o>Z`Y<B*eg8-DtZr_Pwp)m1v~=10KQ(CzhcSTv|wFp7-Oc
zo+n~?%9@-)J#SL$Z13PSt4C=GjW-{bJ;IHQ2jUt1yZ}p;<fA4-eQ9ZNg}ACC+}4l~
z`KSFo@q^hB+Y;o;Zmf@3-H+0QytMIl!lZ!LSsu2B@)U=ozIuOubLn!#m1J;X$>MAK
z{)z7<$;mYm1MMG>>&Iu<vN_ww+9@A-POxCK<BGpm&9jo*!p22q2j|eiG8N+1<DJ&&
z4SNa35guX0{nJbx1QY9K80MiFiv{>NJ<f?8{?m2YNyRn(D9pY?1H*|d*SYxpqx+GY
zS6Lx@K0Kl(&LW(t=q3eX0J-@V_20Lb7%1Q=1OgP-udW@dv8v7Ahncig#ODqZM<6CB
zT8iawF*7@g|JNdy0uJhbsk(pva!EQ)QTp#675x6sf1~ifGrPYo+W(`0X8(ik@BhB;
z#=owc=M=h0mcQbb<@(q9v32ty=%~=NGP$oButk1+qt3ZRW^#l1TG+Fy`2CO}2yVL-
z-lys?dbkKFTeFmO&!C|P_nPFIUrGDBV{0StTQFvtMN!w_j!pdHda+;X88m-**70ye
zV%exG^x;V`dCk9CWGLR~Lh#%%oQX!NiEwU0WL83zS8O^T4U1qZT>ZHTyL@-i3GGEr
z@J*d%Y!lzXUfmN_De<2u<$j&#X^*`vCDs4+YI2Te&-O-`cX>q*FpWP{K~L&;4|@Sh
zbU6j!#E`zZG8COr2#HZ%L%rAkIECJ{(t%m}9>W4X>SlbT{zFr+9leeM^^YkaADU-^
z4&(xONAA!7A}S!dA@+V?vDeH8S}Rj<Tv&jHFq7bT)F)#5jEDSs1Y0kfmf8ah4qRfe
z?x3skSiGRu003+)$blx>G&O+j%{o{o?JTzvw}Kv-9At<4Cqjf*%{N~&Vxb64R{%Zh
zG+qUKKUa=<0Wi1`gjoN@fS|tb%4hp;Er1ZHDqjLJCnl(fM5jOHBnL=cyFrg){P%DN
zz?9W$kFrZ?*Xrw~n3whz0i|a#;^QmYH}2e92D0@0Zmsn8UA*%A8`b#T5K=#pno!SG
zqu)gnXeHe12B(85F%Xc`4OaC%pO#XiO69aO_GOQZ&(H6ioc*SPM(LV-eijSWkR=;(
zKORK|d{4A#B#DF09x<S084LP0xzL#C;w|euIshq*1Euh{5r-ejk0->z=}AUp;f6(3
zJ^s2Xbi$S0=&OOwpxYC2|HF_z-blsC%8@8t&js9Ps8IQ-4SHbRr$-x87Eq=2yYmI%
zNRPlN+@Y5(ijS@Y)DjP%*in22kLOpRMmGmF)u+Lnw+x9!pgwCiAU=;P-ESbuV6usY
zl0eL&UK$4cs}ZeLewkUk`H=+J<377V$e~!M_b!62ME@Z#;C7U2?fFd;yjWZ?pa@5n
z)*upj4=TarizbV+jGVoay!%Y2;2SZc!xL99+p>69sjq}EF7W>mvB^A#J3Fd7qrW|-
z34sXByg=6{sutw0o;ul%Bl||a2z#v)^*pB$%qwiYVY0~?@|q@Fg}?iONy>fFEIFYB
z;~3jc;|S&Ftz5u>_G&5XBA;pdm%x?;h@~2r?=jES4On~oJ`Y+QIJkD82$=_MjLzD{
zyRXbWvsst^RWTXc*z7+47^H;0U-9s1J7|kddVnd`y(uW6$r4B)rv$*3?p)yn(q-SM
zfU1vgDO_RaG*LV(fDZOb0_5LCK0-CP=;{GhXj0LWOlYiE0dB@PP)?K_i}O)GKFNTG
zxtoVk*fq9Ckg%rSf-2!FB->zgRES9ZCGHA^FT?>%NjVfy91G0`r5pvH&M!UBY^e3l
z-Znz4m>ILP5o`HfJeoYsTiJE*xlsdJ$gzO5Ti^;x&`+le<*4=_ztUBSUX4<azW*Y|
zyedZ4dcvyV)bX%n8k*yzu5L|8tuw9$?DXBPJDfb-zUD`npAsJy8Vrqw#*aZJv6%`u
z4J?rA?KdXxeoOn*_c@6|LyIBjLE8g3a=dwe7Vu@c%OL%xMV(Pr%AL-|B5s)mDT`~A
zYC$y}-wRGosg{HeXF&#pSsu6}uk5%3holgg3|a;Fx56Jk#e<RFFax;H3GEg_LpGI9
zaRf93$@y4UNI!ly2aqw6i*JtPe_oH;Ee0P>5TNiL7lW>fXR_Y(4db5kqayj9;*zMb
zRrMX9K#oS+w~8HDBJg9Ex4J?!Da5y*^bylUkQ+;nN;#hQJZo-~oD7=E++)t<{U1>+
z8Iz~`HCZ`dB|G2;)8j%-D}^M0;LL6?t;H{Z7WJJ7MkP1O7$}TN=v!{ts{n`A8Aq@>
zMYmUpz{Dd+Jfb&Zrf1*@Yy*5TEu|A|w&BEVi(Ae;Co5c|BCck2<@v?qF_93|w6pms
zchXD@%U6@IW7&%*vVP^!r8-WoY)KUtk!zs6qeCN6pyRSWBQgnid&{N(KFzp9a#ksE
zAUby2Dcs;_Fv2lr%h`JXgWl;w?Y4KL+3O<Y^61b+R>qpqmk<B^w)-G0;!$zl5!J}D
z9ilVxFjcG~WNZ89^FzgQ3BBUlJRK{PW?q2NZIK_R?vsT=h~#2_wm`|zoh+*+l#I7!
zod$e#OdK;;1*{W)-sQV_QWA%<BwX8R=0AEf<oR>{S5%ESg?6VedFo1mH5gMnrNm8M
zR*jwLQ0vT>6dj*D^^+%0SXIp`8&zJf$Q%5*8l=8*s&AngNN$ie0#C0=___TvpIo(O
z;6&5=;9KXERq>dKNZ2tM;@(8rTdQ*M(qQ^T{<roz2^*)YbNazDZ{oyYYu+qtrYv^r
z=5cGIUKFZvb8e}Iee;#fs}4G&8lz9Wok}Ftc}gwU^YbmryB+lghZ<vitkfo_z7&qx
zSN?R>bBl6%IX1YvwT&zm*%5doWM;bB0xO2%@PzLlFyE9<8JI(^YU&levGyZeLtac%
zC8Fu^1ojG^HjNZ-V1HDxO~sWvA$QQ*XKP0K*U__gTM;{FupNF4T&eO`OC|OrkYf$a
zeS~T^gY%5?oEZOfG)P`6Da#EK-I7!&KN1~5pIYdkkj!(di-?ozT|V+q%e4VwS@w%f
zA^*Aq(P(fu|44RvfV49Lfpk3HdSEWmg6bJ;g%5=VTwqv0AR$1l$v4M%UE$t2j&J3c
zuuN>!Uy==ceb*?drK#lmrP!+ZXBywr+&A!RO2nBM`Z<UwCzpusqe;!qKo%7Trn6b=
z$QTdJ+uS`*PNcs6m_HECLo*}MtnZxU4YQ71kg)Khfb}Kohw*N(D>W0Gk#z?NxXaeA
ze9~7LSvmroJHj8e4j`3}uts^ZWn$(mV@87*w6W-t1`XTEo0xQozRO<h-e31rkoF6;
zZoZTUPlUus8QW_n9JqGgtJpE_Toq^RYx#rI{=}oBnagCE4L_bF7RJ8yJUT0G{U>>7
zdf;h<757S|N;oZB2f@j=&P0)R)cHP)ibzMGSXq+6h(rUOd;bep!%!G;N4?{s_SS$E
z|9+fZS#)8Im?OPEV?a*TPkDDw^^2!+dWO`ZaC>UTq(|1Pm%NMDR;3bPjt7Qu?dI6g
z_3r_>xnuoOqfP$9VU-e<%F}>$V0Rh*OK2@6?qtK*`|WQ1j@e_v&j#@?Y>yr7LrO)N
z4Omo0h8GcGgPw0XDCrdvZL`x=Q!JXOIrT(ojy^f5y0Xsg8fh)>wvf7}vM<e5!d1=T
zjuG;&t%q*zo^$O>?2kHRU896qud_~}i?wRU#^eq^`Ha3@<k_>aF6UKqk1dUeacXk!
zUp1#v@U~lLo7<g&arNgNt-Vs|v+wv^v`|%PSsFUeClN%xce|-J`{-<!S62^{(;0Kv
zeotYkQ$%g-PnEf0Hy?zMR$uMgj3~8bF+Sy~pHnVEdu=`POw|;|tC}mXCNNHKFiVmy
zR$h-aXIF1;lrlLy=GlGc75qXkkon>_Riz1jCgmza=O~rK{@gQW|H-oQ+gqQ{cn(F1
zt97DIPI%ODg-nFb^l22vU7w3Gn2ho(cZMdm5V~)O?Y+$PwAFZ;gMxF8%6&o{mrH)M
zX|Q3#ZIvto_b(p|8eMs<cb#eEeb8rqwnt||PY(W7kAo09aO1yMdT`&Yq2i+w0?LM+
zuM%E+$i_>4(8AN<+Taa}%PmhvRKu<F)Jhh(fCzCd*HbV*Hix1oi=J^u=ny)lwz)Qr
zyeH+Uw!womra}us^x(Ttu`Pv>(-_QJgw#$m7Swv<cT0L7c0<hE*)De=Dd`YQvoKP)
zbunU5$s?zz<Ienz9%8IlnIve<c6Z(y1m|mwvZ9R#U;7jFI$HQS&w$`%QVHnlO$;wq
zsC$(?4P{NQ<srYkRe**CMy`3FZjUh+eef#l+jx-j9oUS7Kz*r-;w5D<{bKMDbn%~a
zY{^feL+$xS?tKxd1tDp%Lwepd-<p!6#7!P~h6@@00)A-$5QDAf3W`1RCZ+HcLUbG-
z%L<ga+Rb3!rKW3vLq{b+-08OV@p09G%Q$uZb{F89jY4XiLE~qBFcc61<)JDbRBPKJ
zP8?G}@T-SazRIxELGu~C3d;D?`o429i&=Le4Fy~#{PiuG@M`d8yLCVlX8f$4ux8Jx
zgSCx;1q0FqGO#3`9v}rN7K##SD&6sppTs8Uut3>tAS&!Y*_Dk?-pWHRYEhJrefgUw
zOgw~Wl-T6qbExZ65mlYyTs?HydLrfyWGDB=3ZW^iEE`nv7T2FAy*e?2zK9Kw=$Gp?
z=}BnTO*X>DA#GP1ptDOjlXrw4C`?Pxej8|^q5EnHBslcq?^x=W&^NEOEl#e`A#<9|
zJW6GG1$S{?p(;D!^H=)O3ws5OTx-k;(}}}mPH$K!q;5b7i+wLvuLk-S5IZ(A7iEgY
zTVnVtXvJ@OS`a2_WDc;;%juR}bNFJXFZ5M4IoA$x(QXObE47PgLwWaOWkn)=++8+k
zT<PH~8a?paJm`0Vs+vC4lVEh+4UP%CO2*eM8EOJSdM5VsgF=I*Ijo|@7yVX=6t3Z0
z7Jt}Dvp-4_Q9f(j8D9GQ{MFaR>mok!z4BO9=C=}?jDmnY&b-l0jghh%W;X5?7+^Ou
zWDX<Pjd%YZy{pJPWGSs^{CL8^s82dkK5=aAVd`lC2^e-;phlQafB8)o{TvFX+0p^0
zs1Dx;+reV}<ON!h8=!4?Z=*1GNdx?$5FBt58D*$SXBpWa2J+22TX0pj?ACjO0#+hf
z2F1F2qv8kB*zY6y6Qh~1&=--Gg<te1cN`VzmL(EJWIsap-QxtqsW8vn$JKLa7Hi=r
zV4zjmU+Y4CSYI>D(&LtyldhapZ_S?Ipl(*>xnz3CpXkFllYmxO9r4_o)WYunVh#1E
zpP{3#7u|b8yvVX-NXtoVN$9zb4QixO;%&K_F%e;PXzUQ?))aDcYBVt`@q5xCn=;TT
zEHa1jpKw?f-{arwePQH$ofdSsHJNP;HE6{sM5Pi=KwY|el30mVGT-*yBzG$VG0o9V
zGE9AD%QTuTOONW>zXY6qv`gKHZ&8lq!`!0qphfZ>hKM&NZh9ONE{E(YFb@oUNsqXP
zhk2u;aD1jP%VnYiy9e@XSmh~YctwcQN9{g)tgqPKsCmA6nM&YS7xF;m_A}6q)(JVw
zKH~FgJMAr_lVoXw6dXbni!7DJ?QC&ZWBN~Fm;qL|k5>F4fi)d29~rd{wTAsHQzXKO
z*Vs>(DhJzDY$%p`GkaCB0Xhhbi`vH8F2j+M4g}}U(1SMp$F<QwffLT=s?X)HrFa5E
zN@Q6ZWt}(faU8y~9B}%<Lw!=Eifmq@LzW(!AQGf9Xym8T+!`i-2*(EA>kS#yw(kyS
zwxF1YCX;TK*AFsJGS6nL9X?kZZY+x|JxDaFR(9K#PM1!k5c^e6F<`WM4;S%6u>XYy
zk43Pmx6)LTnh;8L^~Oe!!F79sP}FTld1eLO6<%7N5W5tnB|VfLHtK99jN3BKsl{5m
zDRBEpt3+00``w~Vt9PWIEnCu3IR~NB&A@FAdZW9oB*P|&s6z5XTI8NoD^uS!tbAOi
zCGSNUN%bsk8J%#|QNEp!%eWgBYNz>MSFUQI0|mRSE-c>jPLmJn4ij+AZM*faW(waQ
zVB%!^sy4Dgf2AI@f;;cNT7g*oE8upw5(f)yE+M&avWF0$6qK{Y+ca+VI9B*gZQTG{
zhkH`f5jckrje;!7SJ1J4h52k>eg!nvt!ltslM6Lsav{Y;E~C?MiU8CWcCUz{-O~lJ
z8Mz?Fx~LSKXg^Qwhd3NS!Jp+`;QU!O3ATtq;QJhN1G5D!=udRwKvq)K4uHXDXbS=T
z<n{sz<53ReBqdf*H2fN1W@z+J<AF|LR0O<VEodEVCmc!yN9$Zj=8+4I-X%NJ?<mRu
zCabO#S}g5OKn96M-fzKb{$0?{o*e|uq&_#WY&@<2@~(qH&?{G$m;!x*Txdneh4KNK
z(2*EGmw#>!^<GW@Cea+~v1bH<K7mC=sM`Vf;}eHq^&W8pdb3y1{J{0%j!Z0=B)vpo
zz<Q*&Yz(z2=4GFQ`$LNJ2iPZGba(<pNjcazF*_X<TAEu2#FG2cD<E9>&Qf?jBtsqG
zo*xA~5G}|k(k{AlP1CBlTX234^g-%&pl-tNLz(+Di0WHct`a{Pmjn!xt0NIZz=&Ju
z2#z?P-5)V~ej?wD1rNCv)Q{#o18w|g9pG;{0VUVfnDDyAH~n9L4B!<Q=Nhf7S8Z5<
z-1M_M7+DqI=XP2N9@4W0V+7Y+AQ$w!4wudErB6HokM7PObtSYHmi&G!kXZ2dk)@fS
zpP}oyace~^;xMD9xAOwc%VbA@ttmY{nmUUTVP)))sRIAE<`o3XBu<QR@)%H)|6CL%
z!H3oDfS?&)O98T=R062U_M!szct9pr1{ox@F$Z=Y%M*a|zgHwj4%uwJlIEo;iEV&f
z9nQU8(~66XX}V|}h@^j(cLJ2R&$bj3AT{E=hy-gfL^EhA@zxz6*vmS>Gdg}uWCEny
zjFV%~6f_gxLbJ-Ay`~;72897d+T(#u1hw)2WMcnu2!JT+9X?Fz`CsQiFRe;ot>j14
z5iAgz7cO>z>F$qMhyF+IN$q$SHKBCBcr+;{MZ!fs313|)!AZK)&L0ihID;Q(bzd%1
zpCEJxD2k3-g=%?~bTW0p1R!LPGb>&_k5y;%$?7G?4-+zS38OZNyxk9eT=h&{9ryu7
zW^D!O$W4}5CQ_Y9=b!!Zle{XP*^_OJeF%pD$*IwvOLj+r=1?$qIl1_D@1#h5lsJ$T
zXK0uF*7*s52+D1VXy;KO!LtnTOy(9Y#O6YZMr`!aS5;$GCLZvV4uZ#ALdm-Y2PHg-
zok1~6CY7Mo_Gy(<s3=Pe0QbEMHHKHxm31`E&`aPHZOIM(*St`zD7bKe5-FjJFS(D<
zabS<nPTNjfnj4+JqNS4bJ~*?cS?)(!ss=W|%MaI=m997cL2U8cqJ5ue-kRwT^9eEF
znEj-)4^B@nYeOxSH2e1qoeRyYe@rzm^Z=!!Y*M@VHc^E-&+sZVrz^h<Y?q)?qGfag
zZ&b@11P?PW78}*QrjE3KcUf@JQe*rG++nq7Zy-Q1V+6V48LNdPU)i@NzK$234F`7e
z)K#My-QTOg+MK6cvm86Sh031;fU`lXfaBz%JYWGyM(@@K?l$vtoIyf~Nn3?cxsG5J
zDAY{W+N=%z32Z%%<)9FZuFd{YGX>Q2flPMHX12`pa;mR|N;VE_w^_BlK{Iu`LsA6g
zHeXTF1gRq;1(s}iep!rObA04hqR|mALEuiKlbnZQt*rkN;PfF_u5O=+KIHi8%C+Y&
zQ-<%=N2xh4lJT_OTYRQB7p}7V!D|UTVRs!BW7Cz7*dzx?J)doJ%<H{Q`Or}sR0^@s
z?HKhn3Y7bHcDD`npg^+l$*)<7qenUx^-y=t;sPes5`X+k=%5-D#Ze-aphxye0%_4M
zD&hjBt&uoZ`(+Y$-^B2B&}5nzbLvm@-VD@>EP>SIWl@0mHV8$RtxFH_-AkQ3-8ehV
z$EKC(44fe)@G*u%VUJqt7jFngh(V=Gji*7Y3OdMb3@GM1or6$jp>&cO<>{e4_f>E=
zR!v(i(ByO|CQDAYx4}{uzvfqpcY%hatZKI2D1{jdZNIGPqM;D|%dyw3&#{3{?<ZuD
zeYS^k+fV|>=KUSjgCFDvHN!#9Q{0tuUVKdE%oy9tCp=|7#{{l8Z*ZaRh}54MrhmA5
zP#54N>zPbFATZQ*zlqGmq5<E_ds?2Vv?y+ed$oQ5`s|aUnE~8VNPe1^piTU7$sO!N
zTm4D;?+9uP$^3#2lsx&ZKsS8`4pvFWc2dW#mqAV+##1R!beNmUhi{e%V=}yDE^Y_Y
zTb8I<pT(bj<{+H=WBGCoPSYcL_d8HrUxP<X0{Vm6;lV440$E74zHuf{h#BBn1B)nb
z?epVh2f%IO<THrx{BrAz7Dc@5<J9`)meGRM35v%gnLL|t`K`#`f7A=hzzA7;O%xQK
zlB*FQJg98tt`efo$G=lCmV?n;xv7zq`yz?4?b8`h*%gd{`SRmt!o6Zx(u#j83(N+@
zEOV-%Ah?$sYfh!5bnGHqs*nE_z*c~i&!{_yU`hj-r#IBj(OVQq2RudZHY2vFE_?@_
zz^K<`Jwmr0et1m@d+ARO^Zn@m6_n+L2vj_n(BCe4TTBqJ&+=&+ge~&)T}S9jb&RQ`
zO8N6WbOM6yX91_vF$iB4(Nso%G9!17R1&z6gcg^^^Hc#K!mhj0EoDsI$BkGI(}TtC
z2QO|Rlrm4>Dv+n@+nI`+OuSAD?kE=ib|r@Df(+dMJ8NYsPdIz(Q-F1dgJHl%n1K%1
z4rsj@{&A|EkZQ(574Gw(mjLVjtARK=n>>{$V3x%&e~hMhXD}PFN0qXZ#(a{Ekf$n?
zd4FlhIPh62#{ttx^143*Y&7ta)AkpIWoSGPITsYu?{8(22Ruv-;h^V}z=p|uI{l@c
zs+Y~4`a)PMkxxC*V&pNR2Xy-NQcV;>6{I>4M3?uV@T7ZcA_zDIX0QV-O69UBW+LT;
zj^Cn=c^5)i@i8&$^6k+-MmE6Zo_~D-_S4@&#;;EgmV~Cqq}_#zBX^T-(L<juGtxy)
zOy*je2IBE;?*WpnF`zL}e88`!hW${ca0{s8^7XKxA$lMipd0jhM~+Ww_F`Rearr`b
zu2)2;^xR<gOq6}_w9HUBattB|n}RZdt4~oZ)c@8hv7=N1wB^ZeK!z9ftVl}$#<hZ`
zKH(ITU!Auv(IcA0mNZ_7i5AW6l_ZJ8Mqm)A6k_ZWIN9G_3r8!buJ!W5Hufz+DYH0n
zk*U{lIl?YAEfQr%{aIlGMyfl^v89O6D2vPtf+QKm0H_mL`4Hnj+8BjmI}Ffe^>z|l
zEaAUsB9k;C{nos|d9eW!c&uJJNV_`{?1O%0LAHC<m0I)BRW4NixV+Zyskqa8ecm1|
z=cm;IokfPeu|k4j8823tb?MLNT%tz$p$b(|;%m4MxJ2{kny&Mv3z|qv5F#0ysyaX=
zqUhy+k5zS8xWhM(P{b$i%1+k?_8R?%Qx=(yciqW7*}ogGE6+R8eq~Y*;C#0lLn|@s
z#HHf_lehE`JmEvb{kvZ8Hoh~DJ=~_>L6cK2^6msNsr5)nEX@^oZ+}CF^Qj>hdm&EK
zdP?20IWig@%_tQ{a6-6tek|JE@Q9PxQMHOi5w1l}&Hd@5=~P2y8$_B3{&A8%q2|44
z>EtG*;?agL`fQbTY+zlK>vkeusWfKbAw8jnMDS<`4OdipB)kO7!oYj#v`|<>yO3Gm
z!ga3uyD8e~DD)nJ$*`(`ATmKgZdG*1Kt4>8Di`tcitXcV*c$4{|4q78LEr%0R<iYi
z(DFJIH(Ds4{-Mim`?851m~eE|csK)SW3<FYI?BFB6Tg%?9@ZAIlGyO{g`qR(ODIOQ
zTM5kC#6lko2YlFl=y}sRFU_m)1A_ew61+LliPnGd_2?(ocVCJ?u?hwsvM`G!E$Ud%
zB#p?PJMum5lg7$F6<YICnD$}V^bP5yLD73&5S?IgPi$AA+WuU<&qx=MwB0ry=$Xv4
z`+w+q?|7>J|Np;IRAgt*BP%k?-i}cThYDH6IS$!-lMx5UI8n%Pa1a{GPG;sYk5x9|
z;Mh41vVTwS*XR4^?@xc^;>7d$ygwiJ+x2<_o;f7$J*wbN|MB;=*|=+*97o!-=!ILa
zfDXC|Ss8m8&S`@ayU`K>pNrN4XO)tqhqDP7X}<#NAsYnwL&FQPLD_Zgz{G~0ok3BT
zJ2KD3o9_`~gW10t7mZJYyfn_()0t34S<U@}7#!2W^VQ??+2&xereJr;(*13H!%1Vd
z60l`_z?+y@z=aeQp<Zlv)9f%iH}E+nBgfg)2a^tXxaWdh<b0dAD)YcP`D?`M_7)S2
z_VO+&D}%y3eq%2RZ^(qXZ86!;uB?^8$q~eBD-gY@1c_8y`xxZPO8x-D#LYU7TzjH$
zDE(n<f2w*1FyGo~4=R%I3a`s9EGQ9h=6qhC@2hJbY2-LjBdf}|$1eCu;M^{-tLMp+
z1(0#)J(|D}#eI|{Vf>Y-bmp!>PLq2y4ebSrx<)wVlBCs@^er`t;*fe~B22FJ!-G7{
zyX0^pzi$+BMS!g*g*AynV0Qdjwlw|1(+<jG-Uq5Fl!whHM44SbAOqtsN4Zt=@Q{Pd
z8T_cOD2#p56tjLy<LHB`RHK$Z+c2bPOsV76m^W0n2`T=~w(Lr!cj<zB#~kugz&7_`
zvw2FR6L6*`d1g7FcBtg_e>n+Cb~B;xO0Z%dJ~5K|(K!AcjtXmxVB^C^zdZvN3Ptjx
zBz-U2JzZw%(s)cUC=4F`g<7pghzP`!fHC6sr+p^r0iFm$A5H8aqEaY6;%emis(kV2
z*zhsOfuKp`)mkM`Y%vB9)O-X>)89+c|DyCVllYu3J}(K)cNmSJ!;;_FVDHv7FlKAl
zic+Co+8#}e1__8WZfmy*K&WwXBE>3M#e$$%(KYw5ovayse7%VBU@=&U{!1#NIW3(C
z#)1)GBeEMo<L-5aiMY)NHb)62x8k#lIk8%Dz$@$v5WVRvm>Trye92)ZA8>x8`H*nc
zHwqp1u4Jv$^3eCP(%>PE1o#}q20?LQ-QN0Zz-zVGqB5{#d{E$weFdrj-u!A*q7bZD
z2NEa56So6o0!1O;@5>)(pAw}Zox8MD$A$$gkQd;ugqnIp!NGY-2$YIQ0zD9eZAo6r
zE_U7IpGWwW1I3?oJ1ztxDE+Qc!!0in$OxbhG#$JM>Km`(_v*j5&Z5Cg?|SD)vojE3
z5Jwq~++>KY+$Xx+G3t)D&TT{;oik^jnyk)4rf(f3RuikE#8;1*PVUc00)f04-02wO
zkYFeX{{{|vm7?Ax*mAcCRRp}4)PNsW<OAle%d98^urvcKQ-<)?Q3qR&z&-?n1!m{}
zUlstw&_hUc^y+@Q)<pp^z}+|y)DlM-gXQz7Dp6prWscR@YQyYuCT;8+(t7}%dT{v`
za6WR|SdZu_>G!4_e|OlRl_;dFMjw%on3pJYSk|QfXf?LD?c9&kTA2@C%=<LPi``+o
z#}T+AugsKdYZdEiI6G+eK8-;cX~_7~vL^|DUb8g_^HD?niPI?B7@|#~tCl`YQ;`Hr
z3JtzYmfV~=WKN~Nld)oO$+FIA-1QEO9Yt{`(U?2J@Gg8Pp9di!j7>$f;Zzwsi9^8e
z$pSlYo|b<nH|mt0=*JGB1zil33w`FwdtkteY|!NW2Fw}0?<;%sfCM{P@nrW&96{iA
zj@<tFkqR64gUh@d*T)$Tvboj&Z2;>caYzu^6de8GEP-b*=38y$BfnXF#ecoD%y_jO
z1LvxJU>9-KXEj6r5tNsGhjZUfK0v}(Tb+|T-jMuD-uuoX*p_W{gdyJ-e8-P7@HeS5
zY}n9=6M3^-R)Y*e<r1%)xDeWu@hvuQmdDnV@atD2``Y$K_QHU4h^SxM7P~C;`0d^E
z86-Vy`v9nJ-i_vIbJ*cJ1p9dqSt1(eVmRNOW;*`;p;{h%eP3;xkP6eo;6zu3<msyn
zgQpKe>$1v+)CNRBhLfEy3pCZ@{uWIC@~f<Vjl4OQS1{SnQB^wd^xK`WTi93jye9tZ
ze>CsPx+ct4OkNw6+QS-tXFYMNp$o0bUPpQX0|`s$Pu(`ZzlL|EW>e*=uS}+K%Q0>k
zy&n@g%*Mre<u6Rt0YfS6FkQRhw@(*b{eU|U?}x81IxmnBtU;(oA(CJV8sWaqEwiwt
zl72OGLQ(EL?%!DC$i)*L<tHuxaoiB3#S2!~Z0g+iwHXNPepkFhh+>sPaX)8E-w9Tw
zooiR%woIlW${r{?4f*E>SH4&`{9-$z3OJ5}fxGW?$ExontX>MZ+;0fT+5ip0=?@8N
zB>vgKU0lpw^A_&yne0o&Z$~#z)Lk<g&rw9Kl%!vKX?IsT*+y&jsVk*jSmaRB9nYM<
z-0R)xq6%zz3Rq?G#xAT&l+UYm(4z!``l^U*)g@s(k{z^2Wwzk<Y9BFeOc(8Aa@<%d
z8Grn4ujR}VhX~`SGdnxevKh~#;Cyh#dUC9B`S7URD7(<r&beInp$o6qb5=$le;~uS
z-e(Fm3`5=UGJ*!Lrme9jtL&18zk~uWcQ&E81Z%2+6J@uihAPt0+1am9^#9+x$L%P(
z7%c=1qhj4##O<ejOylkG!Tt7v^HDf1kg@p_eBckT-7PI)_!7e%jkJrXKmb`Zi1Xkt
ze}%Y)6}5P6M83%2r<jVqd!%H9Ch~x!5MBcDZyY&5`3NNcYOH<(ShH7Y(q-`w{N)P}
zH4y|w$%b{&q4>ZPDMmJ6!;^W|CK1#%aQ?O>Xb}N@)TX*+l{5Q8Gy38I=yt+YDy-*u
zEc6YYkRAdY;FSr^BSct98L}#IQv#9cI2!ELxPFik;kAFaA+s3FP2H%5DNc96rnFFe
zgu)o(#t`ot${45(W+U-O<{%hItqCgM1THM*86uQGGNnlzV08os|FcBI2b{XsMnYP$
zkA6-?RjuT1=N4G6%<=+6A1uzW{koCgat6hYQURaRTkDVLWBmZ0P~-fFAPcB*ZW!Su
z<&}!?LLgxN#bf_mmxBA&{I=K?gpZayh!q>;s1Ei*B{!1mn5>dZJvtO1PjOOs-BWNO
zKQ#!3Aosdauj4c>(|PF_A$YLj^~Joa5k%W=9blR())WF8LGW>ohM~Vu0kuih1|v5P
zuxMQJ)fcOo_1j#~pC?un#JeaRa4^F-N9Y>mpeC4}0RkRjDNscTgFYgXz(R52TDFS&
z+}!<cSEgDM>Wyu|M_!T#Tg)&v5p@Q$F)`5E`N5KjAEwovkX;cOcZhXEyb^ej5HhlR
zKdi*auRz}#WDBZO@W#|LbiH4TsBZI3i^AO@@F+)$5BP&}$6&c%^*u<qEduL_kULR(
z{lWU>jVPQNIi~)NLw8p~6O(FsF_<)wevFf4fQ_}CGcVw(e6c|ODBu(~cg$fzObN0^
zq15hMGvjB80`A-)rn6+~5&H=dlr1r^A^1WQzu0PWxh`)UQW-e<N+>mjgHwh23?W1n
zs%aP%^Qq8-J3;SuqJa$-&}|29UA9_t^Bs1}@8ZPc{55Ri<aD-($|$q$_5}PGC-$U+
zGyK?VL!&=#(I0!iOMP(kzT`5KDK9w(Jb=x23J2d~yqDNlXxpc_RCW_QB{-CW^TWo+
zj#BQug%9z`FiqmTQFODrRl|C#vB%}Xmr$`I3>y(gPQhdbaHX9yV&sc}*!Y*2X=MZw
z3`cxU<ar|}mn_W~6oVmgqT<JH_~GUbMi}5XOy#Q{-Flxb%_8$~1Ze$x0G8N&5Pa*p
z%m&I&d-mbo^-18w8~esdIdnrss^0#myiIt+*b_qZ^!+StUBb1KjJXrsOQ_C|kj{JK
zngaI18kEQzE1w1!$eGJSje+p=n=Y3j_2kJ7xR3uw(+**x2ty5$0yudq-B#WG`Tf=Q
zwT0FZr%)jkNcC7O^3I!OLq2;#vMNF6=qC#l&I#3<?e+yL3@<Yj_9h8LsKu9EmAjhV
z9YCA)0ICET1#=Fo!;X>2Z~jO)k##vM{1jwF7GJzSDfsMtqfn@VjDrjQ`<uP^lck$P
z``RR>JUl^>C|rFtkl|;7bsm1poOP=SzMqH8v1fg0sl)x8Nk6un-r~_g0E#E{;%us|
zixNryv7Ag##`W=3-9tank2ul?qk^0jvDNgWq3~2U($mSQO4Gw|Py+kpUv+v?sc-aY
zRCV9}@tHPH>MU}jOLB07yuW+K7mAYhI%(1;y$cgK#8pT%9h2-H%GiKyi}B>I>(81E
zFN=oD515i=mG53qLLj@82PcS^&XgC$x7~m{6FF5SIRsnB-nnDl@g+o8eSDlhlz;Jg
zePoF2(qgy}X~>O}bjEIfp`)o%bK;&oiwkYwqlWX|*Y*!P20n>lN@wzX@*TJ_E7Ge|
z{?xG>-48P{fvY7;1;9+Oi;?C|3Gax`IqikNFDc6WU>o>f#RKjSVET#S5@PolDBtB~
z`tHKn(*|PlHSqd&50r{Gz<k>fO6By71YkRVgCv=Vc7FqNscX1`yG%UwvQ9r$T{imK
zF5`)WZ_nSnhRc*iFrm8^Wy+2^IANSPm$|-MqWyp4gx?qYe=-n?&v1Fs5*t_OGJPMT
zFL}_>^|MW^-%v<PhW)X-KySht)%;~XYoS?B4wQtHqIPYdG)h~^AjQOi@XW|g#<P77
zX&@vVDg;iIOHCpuTCVKt2xWYiPaX7J_nnO4DHoKU)CFmuc35btzL7YXyV*(4gh*qB
zUrUX>SCF74<&?E?ca20&4;O0BXlrF>G6{dRKovOO+qJhoC_i&>1S}Bl^z&lUk73S+
zT)g8ivzuz^8tmp#U6y1f?)VDU41>a%jAodZ3O?V8Kpi;uTvNhRoQ|$Up7aQlq6tl+
z5q&s8Kl#G}av?R+;2%ov@X9#ld%4yIob(SJ%f4u7J~1Kkpd{Zc%D3T{@}l;VituFk
z2elN=Z~;1@=6vUa?2tF%6KWeu<!h9#vCDkkLLE-CBR3c4Gt(0HOx&L!8~-Z1CgwAH
zJV=pTeY+(>0cceAzC4_KVZvMsVy*tymL&D_!Ne3NH!MQ0S^yRSQH|h%Q&Y=<C^q~2
z8Wrd-SZm|o2zNgUE4v0Dbk>;{lBWf-UCt7ahr?xK4HJ!pZWZQ~!t^;#J!6(W@{5G9
z?w>8Z=nF(1ua&Q-Cb0^b%(VVlTznA0h9x4Gy5RMV^-7VIe&tOO+C1?$#jGOV_%1CA
zlUhX|8-3mhDeZf@dXQztHLp<kPpyC6ty+}&$~V>#cFTnheui%mV~?QvylmriBf6$D
zMB3TymKTX3#s2Fa!HRaVncq9(+FGc63Y)&{mS}SgR>HWrO3oB89zKKVb0J{eGFPJf
zK}+cZeLpC9?Bb~dO$4`QxaVUU7AJQioJC7;`jjQ@qN|$aSBgCf>$b2zf7%<3bthhM
zkzDricIrb3K+kMJPlC#}Y7*zFs;@q8WT=oTSK%&8%T!LgzKd{TYs@La>v@(ZW=ENt
z!8=5M=wVjA&9@b@9{UjunD(SAgY?3z;!ari`zx~Ksxc%{eRf$PN5RWfxJ&XdYe8K>
zH>y2TG5$){D=U2_3&>34`h%g|v!c@!RVA~@&s@VTS`<ESn=JSqCvSXnBKmh{9{=7e
zlr%SZ#ce-l-(jw37j>s=@CpWhiF*P%^t_C5_kN>HOm3oSvVxDrH?8o9&$5`V-+zdF
zdobV{mQWgU+xjk-a46#3K|8{_A#`#>iMxo`o^s-LAhb966eiv#TlRG-J>TjFL&H}X
zT1}`4qI>8KO)aBbDY$cK_vgP@*L6|*=P$18#cx@-pxS-Ag!d#n|B^?Ab<Lc!AMp&E
z4edW?6_r0>4RxD7qu9mS{j7wn+mnTrI{q=U>&a0JmJvR^gJsvycdGk7<aQ8$f6Pzq
za@jXNI~n6c5t^Tk<>X?Bz!*!it6$uW+1xXWA;WhAig`>)%A~$CN`>WN{0ACBl*(M1
zkgY;x1^st5ujn70JY~5_YHV5EEz@J~3exT0eaAGuf-jv>cC&Fq4bo3jJpF+GeQNnx
zuZOk5zHdAw54+Bk#Z8c*K1Y84!{`1FD@)yB&!n;QdUuTy#D?H_4&sF~Gl306r1)EF
z-^7_Ti*^9VtX>#yCT3r<wUA%N<L6pQ_g@NedOrBYq;${=zR3hNcqXlRzd%b!YxP*>
zKx@J(x#C)ek3BXTE<K)6(KRW|xxj~qF5uqa644jqT_*C|4|*?yRu;%FNU^LrT>?zF
zjb(w~Od)AS*0fRg2}aoq##ow-<$~XVtq0AQ`BR_9VZXdExt(g(nzao61~>WCkTgI?
zNKB0+wix>M5?B`hG}wGgiBsDAX%W41BU=}rag04S7!d+V8tbmcckO`de($CsJcRmV
zYcSXZPms@TSz}>?k-UAB;*WGkProY&(^3h^{Xc|!HPjWRubIq=pJhbH%o-Q|5q)mp
zyDC<<p68;9J^#*CItWws-|k$|;?6r$VDM1+rhjps+{!ZGhZup)r|So=GU+KXt*OxI
zvB(uB&971hY6xd&bn*{1{wqk5vLE7&6<GPzluEn%_RuBWLg+`yKG+>tu~}n<JP*HR
z#Q9IK!{9&ZVEo}HIxqM1$XV6VVQqu9HKS>$N)N9&=0t5rJ{hEJLKkTqp7jM>I#i9g
zwV<fbC}S~=sS#&E?37L4*KXtqBj!2ey=L9?r5`Ep3>@I`eb$ozH>D!8dy4paNwvLr
zSl1cx4OsKu<ksdPD*e!d%Hcbta~xY6S;TgANc2S#frQ!(c>f2Re>b>W{a#ReEqU1D
zmpQnYMuZ`G-~wT5(7$gh>-|43rM$xM1*0uWVxM6|B@-t8-Ko1yqZ|G<Op2Nmv!7`J
z)(ekddR;!yShlMm<y03ZMKi)r-KC#e_J9OwRgF9R>TmW_PL`$FBI8PUm8ucD45j{Q
ziiM9fEq<>t{jTFDWa0PZdb${Nu)qMId90Bv?y`%+dFR&6dC)PGqZyFenc3P1q4sfb
zuw9;zoL_(o$FAPl>rG+zdrrbC>C$E$v7*8<MK-G<n-M8;otwPCG%F&xdR<kk=HCs@
z=I@zmanh8qwx{3zA@<iDe(tbQ!(EUIjKQ;NVSkh+<VjGPmhT^g7N*4`kvt!!FNCst
zwQTC*%TVAoMvGqTWfrC~zKGY1W6FmU;_ta2L%QFNkjv&^4YE56=GUln(u;jc61VWJ
zjfnPJ$8;^uz?M`bP;iTos)jl<8+u3CI%90JPSL+L)@*p9UY>XMmGwboP2ohGO2(}l
z9c(N4FZEeZO8v)H_t4_y(DjHJZ086C%zluc1bd;~;Nc98Q?sifo~;-Sy!NZ(sU0+%
zs}xq>7(6O`bf>{bc3)+Od9uF>$yqkO5|wJRuIQAfr;_YdbC%4K)qeKY%1E6(MS7!B
zZA%URl~oTq`l_-i?=a`lf1uT=`v3eC;d=|8pOX-*sZj>6<~9E36-m1R;RAoZkjiJ^
zC4I4jU@pA;g3H-}EH&5$eJ-ET{KsD?JOd3i`O0aPdhIXa_5F8ePbcZCjh>Gro&5B`
z>~IP7qS#aK;)*!$CwH+6X?i-&8_csCc*uB8t1-O0ay9M)?`jv@Dr4sS)l%Vjts(s0
z1VJ?Qw3QHiYlk7$MR<S?8n-}0Wh@^narm>~Hq(nL9*JrqwojsN^O=xuMYecQD}f{R
zaD)O9z3VN@&~^D47x7*ujYGM6fUuXWXJ<u)V=j}yp}>yIr)%IvW2)l@Qn#3Yy=1wD
z0}dOiRV8WRAN2G@ZH!NO72#^(dHvglk|Di~!8#}^-6o_=@gU9g!DVx<1l%i}`2_R+
zpU=&MkvrVnnznKJK>2M{Pn(}@YB!OBRDfA9-~3>&;H00Q^=QqAZZ&QJ{BjODajt}^
z`u*(Fn7R<rQ)`DiL43^QT{%q$RIZvjd+ifCB%L_zGC4J?MeXBy&IafSrs!4=E$eWX
z<wlfO>6!kn<A!QNgsrs=@hV3yfjqlUq9g_Y{mk%%z&{6LKN`8f7E_U@&pACV5A~aW
zM&ZEKe}z>+8dTJzCxpK<!Gas$wO<GG{;P>zq}s1xRgH8AE#dcJz|v;bTI#iHb3{vp
z2z9mi!o}4TpZVOar)Ol&@ga`MkuG-S+nNq!CMq5e4cTQY?_IZ9j2bmu*bv0R_A5yD
zR8&?e(t7igD-@nege1Mp#V1iTWYw=an)<{Y4QwcEtW~oVvG2aI7r{1BBw{v`87y)K
zW+O$ovd5rFKF>YrJB4!n70OfSHsZhhEh{`3uXM>vmcTl9c?Yv!SQg$jk^K89-z+wL
z>=FxpV8)YFo)IH0qpXo)h(1)n9`pvJ6q~zT>GxUZa24Bqzrgt~3|R8IvH%&QQm0|w
zISu$lYh?wHaw1$HLE+TS?3G{lHU+tYd<Pjggg;-K>+D;k#oGIV2~U(e?x!o|-<d~m
z>Q+yGK#x~Nz+Hgi9i3zx>j^*biUZ}RfGwMI`~6`bS1a2*TVbucgDE)*_fb?{t2|R1
zDd<<;?b@}QYt*;(0+Kj4RSWSB2CZkdmA~A>k0xQgZCaGo1-vxhT1VXdB8a+vEDyp>
z((feL2hxs8y?Z_t+p4Y{dYKGTp82B!&oh?~#^f7Juu{{Gu$TUyt`$0Ro+d_vzl?k}
zpp?~Yh2BXO2Ip>74jaNq@m(`6nZ3%XHxzzn(!j9!!%&{oyKx^j{cOaVWG%Fzw9A_1
z?V?E$hLF#37#vHgK?e)GMPVWB$oo;z5hJ^7`CoBD>n(n!YV=}P!Lu6T9*%EN)F7Tj
zLrR!p{AsJ61D94D;jva>mO>?Pd43$R4E3K7eRWl>J43$|q60EO*xAcpCJl<t%l<%C
zh#OK0l_je!Wq8r;>a<-)Jsn|BoyTR|hjHDm+RR;^!e90%x<XOnEL0P_Z!obgGq5p!
zF;lh-DJ$ErIl;5CJ#Y2TrFO~;8Xj(#J$N4tCNk4{Rae1Ga^kGe)Z#;#p+H%a9S@<s
zEig$=BMDr@G#Bel0q5Hn^x_b{nBZCs7~<4=Fn3m*h80_@O+$rDXtU!C^s3j1qSY6L
z72#2gH|m=KOI&wDb0jrO!=j5Z*L86=NB_^X?m>$9#wJ&rGIdYp->AgwT!{>y<&fn{
zQ<8y?4Aath5Rj3>OAh8$W%srSL3umPihgJrjtB+~HRisq1~>S4Ax9xC_1^?fbP|Na
z!Rhnjot~-ICK=y~`WB{Yfk=-Uy{H-%S`>TjqwI^iabO^Zv0t4^V4_>Td_rs32PCqp
z#2s^8z`kAv8g-Zg-fmeX%_fwr*P5I(eXzn<DCa>3dxyfM*lX2q1fCY_fh0U{&-2+A
zU7xVH;j5on##ve0NHR;#xsYAZIFKN|NhE~C^~E>nCRYeh?7wN+%YO1N`*?u$FQ+e0
zC?^wsO3;W%;hIwh=@(t<wFAYmo6hSCM=~#qD2<O^x(iKk)n#Rho3`0JPAnyTj;KzU
zi}+IEB&mQ?OvU&g!u+mxwa{>_r7>_fcg5$U+v&gs%LtZ^o0Uuxb3lU4#_!IbA8!2~
z>!NaZ>sX@Ql%v2bW7kL#;v^TSwyoYNklp%`+XSt1S&a==_#JmN<`4`<<fr<u&)Nx;
z-Sdq1dv=^6;5>i4s5AjWt(|9Z*|W-eXsG$eBck^-!fS!3Ff;rNM~?G7OP=ntdkq;p
zOO}||(34aULfC7X8@xucT0M_g66+B+MXw;Uh+oh9k5KQVN!>|TLpAGidCHF<!I(0t
z^~2YFPy?LXb#bc~5tgckajKnjVZdIFHT0*N&$EEEU~}~Eng0JCi_l(xJf>kckdl&)
zw2$w4R_zMKe!?{Ovg8}w{lkSXxC^;uP`*I(bERh%ZI)0`kmapH$jk<{X3}>Z_^3o}
zBzR*SYVQ96a~Q{f>!sNPfUJ^FB3GPt)nwb)-xT7b?)J-0)fT0~HWNF%deoykNwSD8
z5Y)oGJ@cB5P}q;f8cE7$@2vDf-v|qtR9wvqedxibMKOK<?o{#Rz*J$O7i+R_>KK+O
z1K}q0)6YTv0AP9AY)4z#syIly5&4>9L>mqARfTcd3h{VL%>Ol%kyXqT$x<>Z;q<x1
zP>)ii<rA746egE8?KI?trbkJ~xwu;96vmleqFRg-#+Vb5?O8e(fn<E2%t6kVYynBa
z&&aDR`ckL|p$r$hF7d9018T}U{ReI-Y7kciJkuRB$p^*xY@Wx){^Jut&^Xz2e<5VW
z+f5XpK|^yWSg=_849?>gYg`_x*UO3Zd!W^DZ#MFGLV+{?R<Q7!BJhHr0MjJ+B>$6w
z__<JqWa&E0cx}8-&HD~*xu0c5QzxhY6zFJ3!Zr|=5!@wQEoxcvdoeEQ&%ZzZ-NUm_
z`^Rl^^kM5aAVmuAo!k|2Jii;Wj^)pdH#Q`RyPYNJZx!@hVjL=Eh3W7*(ZNRFz6{<y
z#U(K-^qIekR%?$);`!!5v21It4nD%dcLR5;tYmecds-(+7S~J)H(XQSD|49I_YZTN
z?TRdi2uF>lr>ONmL#J0Vt*b&lu4Dle06Sde4N0gavkZb(@twrYD%!nT+fjw_sjgDO
z9j*Hf{S@|SEivBBgRbcQjg{@pY#>Hf00>yxyxk|RDxvI^UWVo+JI($G5b2ti&`>uo
z(8Vaqy?Xsp{BQywCKIw3LwvZZL+@zu&yvq@v8*HZUxN54He$Ts`^cZS>AqcfO<X=$
z%B~UrTX17=nf~O#=}Nvu0T4iRekXmgGvq=-oflc#=e4tJ4F3<+MdDMvv=YDPUe-w^
zPBpW&l%ZYyT)w=iM=Q=mdq9m;@FBZ`nr1-*s7-q6GZ9$CSrRpNWkS2-1i4c7WaCV@
zaxI8kG{@hD9E)R!RYDD&*N>ESuG6&4UnV<4li;8mq*!~kI#%Dcvp9zj*^8fdemXp^
z8Wu<Pz|jLl$$p1Zy64-})K=yqk);*Jo?tZbev}f{NCWSY0`Eo7+H;nfDUv?f6hEA{
zvpm;`lxxI$$|mHRe~%T&F5`8TR=%+vvMQn+CAImL73&vyj9k}>2%18*^V!e0Jo)cM
zmrhxL7od)=oR+}n=LWRt?xez8R^H>*4W7d+U;GK_IPQa99{mG`&!^mX6v~nn?P$A_
zN|#yS;DwG`M=y@W8C+T@h7Uz{iP|))sz@>=tK@XaVzTa-b}<bq5|YcMoN(SUp6PK<
zL8ic7Y*vPS#7RamRbDZ@LOlcVqC6|km2|nlqUY6J5$b+R>@$*;keA0h;1~+}XtmJK
zOD4jIaF@xKBJq8)Z0>NIt+2_K_^anfkkZ0NPc;YSHgp$t8Wa2)Q|WlM&*Ps2-|7RX
zG9KN>c7hAcAaXM0rtvem8H_EWU7^XF9_~UD-`{<CJeiO46p_wD*wda|97;^`P~DC8
zzQN6dn!XW0J6W`(vKzF0Jr!ZVnBQcek;+;M7jqG+?vhU$2#U-$BVUDII!qU!=y;5i
zWExdS@SOO)9KFN2sCJ$i<r3lD$hqduqUxdQ%T)Aav$ZT!HXCJn#9qE(98P50U{>wa
z{b0ys{qQ~5ki_X4S^OKND8^FEN{X@WE@M_ny(=naNC8@B%+7YTKl+3>w5${A<~_-?
zQusD-r0`c}kQ08_>yK>08zt2WZWoGv*M7r0v|IaYpgqn`1HU9ke7N6(=7YF?FJL7L
z@3u>jw1Msp^+?M5Px+eZ#kx#rPdKf!%CV{D(VQhW>|Cg*5aHa5j;4)>W(-Q5xipkO
zud&i_pH)*F5f&0cbZ7l0Z~U{AS@R<(+qghfm06qa-bF^GXhx;wrp*ZW*RCE#IDQlJ
zsJw1J)OvY>fUfCPmfez-HOc}4^2%bs9AsM}Nl=aPCeYdQ80tYEyej2zUF~x0?w<KX
zwmg*CkGEe?)B^T2SD+N6xYOyE1@fcV-s3EP#P(~s4h6-f-<IC0>62yP2`5ZukdB&;
zMMNXG?e=cB)hqpp@2rL|kfQbZNEE%(4DgySx%b^QHYDD8AiSmQ#zG)lk3ITAhfVj>
zYHr;}Xpq7?Pj(8JC`Ai|qV~bzHsDb!U%;HAc?17n7C^z`Z(a_6C*RO|tY-#X_0KDc
za?dx?@w1Mt`s|6)QfTRqw6O{o`PVYm_~<A$yQ)@X=RC~b-3;h#ox{q<{V1e^upF8}
zYyT*(M#!LEU&@#6jO}$EIURH#Z;af-PN!Tf?7eg-1Q|i8MmJ6-xoE@Q(L<#}FBj26
z**lb%e)fujyy=o`an}iK3rc?!F3fr8H9=3ob%UkSa!;1)a6zTo++HW;Cn8J>#=UfQ
zr);Do#cQFcg%q(7)+TSs)s#S!aS7D3taTL?0g_<H$Wz3=(&3%I$X@Tjm?2SM1#oJT
z%=W0(mW?;if#9+ZGh)vV%jkSTC^V|5E>3^Y@QKf#efhhj465-d_gSFY3?xi@ugd;d
zvV`M}{iENOf4Oj!=;DAR^QOP<hazjO9!jg?FY6f=*%I?9>{a%g<0$RKFbMHw`Hm}_
zohl%i`)wKbXC0Jt94i3frX1&9ocOumJE!wK4%fy8xD4bM!y<bf+*mWkiF(p!a8->g
zJ<3uHN1gUwOvuY$wTA!A6hC4peO7L2Wk%R#`J{<(0=dqjq+%YH!?H8JZt*lOHl#wb
z{>`-8BG$$RDWqh?4U?n1$MHlrW@am@cGd?Do8Ca=a`fK&wA_GOT5N>^N85QCb3vYu
zm_buiuv-kpBDvbqn&3;<Eoi6#M_RbtP+MS#!aE#)clQ><ip_`C5A`9*py~=DMYk5Y
z-}dZq^fP)Kc({0ve}|9ohnLLG0+59TLnQ#C`+`$VpQfpa_|Pg6Qa(Qy$7{2L$yC>~
zOA9EIM~*};YR|RrzTar)2tKhpZcfnxv$^(r>sWemtrUzGWgg~jNdJgstgM+kxG&us
z+xUPCSqD0OFB5y%5Mx1nSmzQt8rm{RrR!$Q`H)!=yp-br3+%E4-YBQdBHBJ#VIJ{0
zE$M_&ku^$4v;{(riToipFpKaIek9~%D{wn|Z3n~9r8^=`$pZTJkH=mr-szBe{|LZC
zvTo+0ITx?Ds|-$xybdgKfC};~E;bZ|LL#yMlKms-T%(6CyW);G`Z?Jg5ygV@^>@)R
ztyD=&xJxvb$fFLq^@X$a5#3desUDHn3dJ6n&pe!<gh?5y_w7B|LK<IP7}Fk+bGpA`
zIw*fIFoP3fu48)%V$#lcz1@;2dU!F$V^tC<{(`=P4Sd4yEC6!_M+5Of1gJ^sFMqmn
zkJKgHJ?Nzv@^_wn9f#*Bn$^$$d`$ns54{~DDnn&VSGeAZ)B0hvx-_WAbH8TB>tW|_
zsu$3u5GaLiM6qS*Pvzt}uaRO%;QE4fWIy(wc5Sjtn{ndcHAO>94{q!<=xxv^@G}bn
ztF8;eKeh4E1QbdK@kPQ_^eP4S=M+7d7XajwOZU^$pZXoay2>7O$OiIang8_LaLEd<
z=LQaFEFHf9yQx<H-}J*X0IA8GeMA#iAB$RfUEQ3bKR&Ll1~o<}M7-TrDF0e1pe0!v
z5e0_c%$prJ(|YF--f@j!FUpi3E+Cn?<^rUK1N&cjCMhMAr3BfF=Ss@*=yqHnP|L7W
zFjz>kNw%giLgqsJ2`Ig#FKj^3U#Vw`W`}I-7(l6b)h?VYN2y?EUr4n#$04t?YmBHb
z56PWpTuYB+WH72Y_Wcz14XKWH-<3})oOq)nZL;a%J#T>}SZ^X9lmmufKHy4_uB>;<
z4<4!^*0F_;n;`se9fDjt@0D1d+TG1hu2EjQzNp~`+9`3KP#UVyvz!6)^A=B~FvI&9
ztbfCv94VY2_Y=0W52R&2qANgV0i%JmG?~XX_i}fRk?Fm@S~HL$980xGZmGw&T!V`z
z@BH5vpGnE-PDY#F+`4CfW6J?<Ooe{PZZ4a)Ah{s0z;Ut#P%U0Otn=JR`vAJJchR0)
ztxgIbQNCA}S!GzH)Sh&LJN#yp35Ex1K1GjKge!-yuv(>z-c>-o(G=t|w>vI6MxITj
zhrL2OEpuh~#~-~O)~JNnU8`;T*J6bU1Tic@_UF(XF}?&d@=pJ%0?iD0bnK&Gsb0=?
zJ#(n=!rfi7Zn47+AUvB>!77!$9K<_OIv2H_6sB=hp%<+1B?OQ}^px`x6!-Ia=Tkb+
zwByhA1P_&56QgJ?`=hN^uFXvWH#UjZpx*y$N<r<}U-w_R+0q>8mBkz&!YTa@+p8P#
zI*&oe1pEZhU~F1sHuD6Eu>O<pW=`V)`(wwnERb)g7q3uWL9UC?r~%1%hr%nA`pmBx
z_?fQXOcO%QC#~gO7I-8Z!;+RNVh(A>^364lkL}dr7k8viqsxRqUgzbZE@Vy7<d&Q*
z1y+H(PFErG`R47!=AC>IO+_6a+Uv~BuS7bHF-*VuRh1@(j{%K4emN9iD|$sQ$34?7
z(e(lCw||dkye`1}phcff|N0B`1u2`{?=4s3?Jq22eY8;h?&q+UoY!MhT9ZxV5Z$^<
zql+9OQ__vt$`<peHyk>TRbR`D<{F4BK|<`g6acilBI07Z<jKWW=|MjgF-o4jV#&n5
z!4KB=hTg3p7mkDCKaAC+Rtx@;>Rvg|rda&cjb_@_KGR@GWMqxv_2pr3S5c3L916I$
zZlSf+rvZ*&NBNakvg7xF7{u?woZ*_dQ*Db!IR)+mM$&D$<OaY~TJiHWocQ1{WHlS-
zg-H&zlV&ttR-qWp@4wjUwqC_mGP&Z;<}X6ws}<hz%|O|n*#1v@R^Y+yv>Z(lI%U~s
zkCQ)r$d-7!_)G4!@#Cjkrb??|s4H730@QXjUWT)kzT?8o73ih?`D}!0lr+tAz=dKs
zs{z5^GxivE7`ahSGu{#0uWXd{bT-G)oj|b#BGD`gpIp2m9!hC{bu`~iR4jhtW%o({
zOoZ+U8s46w5o~`;*Kb>5r*V*um_xR0Tvl~_XLlD_!WOVXjk`2MO%R+N#G~BVwu$mq
zoc6xBXHenA=CRJQg60q0@7c2iT%|@eM4NUDm0?A%v(%*Q`kI<ASp+_6>iE-nvdSLy
zoeHndtI@%i%4Q^W`GupFoE^ATv?NWPfxo-1O*z6v0nm$+g7L~pKQn`JXN-U@j49S`
zeIhac*D^Jg0L^`oIn>1w7@O*+lLmHAF5l#`w@3;kitS>`ATpZ)qL<U25^wNFO@+!e
z$>0N>U0b`O#w~X<got{z44|eDL(MX+CLHEk!EPU>)FP>%;kosd*UFOuFTudH3u&*I
z=ua*mm^yf98p@mw*93k|86`{8K#<O4vDHZbk4pV=Z@9mx2$XDzQZGo`vo9`le<)?|
zNfE5)B!4lf9{kP5709xhzL0Ve*~g|MeO<cL?$6w`hM{o>Ld_wm?K?hDfsUjmwXf+Q
zYdGMaA&Zj8^2hwZ&Vq8-f&+!6xlG(>iqcSlYzr(T<lcuHj;!4r9f6H-+Q?RcEf((^
zQ0^^;ErFQOj?S0d=}B^ltC{u>^nS3_1cV{2n$4qL#QS5m6Kc6unotY94gV6C=blxn
z?#9YqUtlEF$u4uP#`$S3@c@RKKxJA?s`rXEluJYHdCG#Sogs%Vk)&8Robz$u!xV2|
z%aj1xvjr8o6`-Ec$}b;4MTGOGFDP_K%($aJ1avxvqaP{q=G*vDPP;dWOG*dqgvD$p
zJO52@e67vz&AbGgVr7pr=w!IIAh%;z%1%nEy&MzR0f>3l;kDUp&MB$&oGz%Alg!C?
zEAu_l%8eA5<SpX9?LoJhS12Eyi0ny3Xc6jWZw0Yp#1{JKd06DnG|vdNo~oAIZUrMB
zRhbxRRG@)EJfC;5ExHTzvG#4{<Th8~Pr2MswqSGZznk-p%^{K7IlGr&izh8VFW8I0
zZg-}5(N0aP#c+L4V~es#kaE~TlHZzp-(726+<7ugFq@=fGfQ!;ys;yUW@OWrJ|#&=
zt3ke2ijpeFp9=Et1n#f6<9t?As*9%CsJ`z5j`+8ue)V4q7T^ZYU3BDzXA~qoj0kdD
z{!YD{0Wox|=re(3BBxb?+zU>2nJ8(!tF@ZeLv$sU-L1ZXIVlZO$@>wF-M#^E`??Pv
z=$F60e(VJAiIjGQuI$vOB1Kil?KJ+IJ6ELw{{DH-yOvvX*lZx%7ft!08bGRlpKH*5
z^8^v|Ce{F@elYMR>wJ!&o*n_Dz^@J@yXn!2QTQ_;QFO4gtsO(twY=jGxF-6;n|8mr
z{{pO6r6Fp|jR1IjF91M?ozF{zU4aC}mm3^+i{$_;mO!_BUPIH@xdphuxJS>i_noHm
z&WDL}Ml%>F(eP3fGQyz0_AK`+Z++$lJY-dXeN@C&wp$i3(Jp$^0mJ76pi?pr20Sv(
zfKBS@1^_4a!!i{-?KXg)@r!F&JIjH>=1sh&^)cYj{g}upU%J=9=}uTUKQ;)lN~^Kq
zCaHGPaLRq&i{d@b^#h7Rew_o)6KSHRBr2gt?;k4zcZrt(rM~!hS8sazY}#+~iyv^b
z^$QcaH*PhfkX#<JYMS%W6~JH)&VYKjpmXYFHK708yLDg#fXsG{EO`1w;JDG%tF8eM
z=hU7SFQWwXmSz>I2P?o?VGEqI#nZr$T?J6JcSaRq^Bhb<2F2%OZ7C3Fx8wG0jSc4o
zszeULYNkSV9^=Qyg;!qy*mAe;U%-7ma!%$N{nA~G-7>TG{WWne8V?4bX=i|VwsBh^
z29w1O*ANT>N~_UL0JI&v0sNcKz-MqhFvqL_l^1y5o(i7B*ODViK!?FGXLv20FL&sh
zy#)-pOF?}iea*yyO*P2J74UAjJsb7xJ11@TfS5GlRI{nzPOSu9bFvZGnbq=g0a?!~
z!E`H<_9&qiC_QPMI1l7bMA5042LmUMqyse7xea>*5P^2@-gIr5g{51|?NiT;10VZH
zdo*z&z+nO?VBzfxRS8RwJBO;g)uYZq(*>Tv4-fBDJ>CF{AA0{sUhnu<QZ((98vnNT
zpS~B)8ya!uO}l^Plw|W)Z5HT)scNNDSFz0(rwTm+80^wSUUfBfRy;nqHxO5K{+z8k
zZ$#!*22@8&P3IbC($=|5_T{<2L~k4=nzjIN>HX!D<E>TmK~qtC&+Os^mAbh%?vJl<
z0=#Ru7kBzDhwl$SYqq?6j^)1OJ;3QH9V&K)&QaSITLV8h_ZGKT+UZFPwdBb8LTLh+
zc(RV5<hA~p5@2%swzrdWrqZL<O-q*UPxf~LX7+;#+{?}T2Z2v#ZcMxYC^6@Q&<~q2
zwA{~>SBvw#nihlVv(7c7VYCxl_Pj^t8-U0ScQy;qXe31|-oP;6iu*0}2yH$Y-gNRZ
zc)b?B0W@Otc0z>Ia8xs2&j~^8(`Xfy^>3{t@AFcSUf&R4CAR2~SYDFc2mr3>(et7V
zKO~G_er2+LG~`_57D5a~99jW%(#vyRa+5-Zddp@6_9=%*rE&y($HBo4@_0b(_a)#O
z%RbsTui=rF7?3Qc!YmN;lS})~S^mTb>ss}bePFJ{Z*>B{Wy?um->JM>iRrZlYy;jo
zg^#c~f9Fns=qqentxb5wsN)+T3{dKEo&e3Po$o#XxBREY(|rJW8=+Mq<|a9dSM<sp
zaE$>Rt(woq(<S+H;&TI_r8iUfd*Sm9hk#?+Oqq0cD%oSZ%6|y4&^srGHh@3I{$>8w
z6ipoK%#Edc+r1F@cKvyG&qg$pA@1Z>$8}5=oolC6lzn#?%d*U#2~Yn*z-HGhpbHS+
zcZI$T#EXc9&Izj@+<&(sUAp}lNu6`h3x9cTo^ey|P+Ao_ygS<p7#mQtKg$ic^v>);
zqR!#wh0v>+o!@nu5Q@Bu4vn4ey-aL%--Tgw7R1&O!QJzn!l)e3;qz|sVOp#r(-yy1
zSz4b}>fX63QE5VE_3ddQ&GWEtz&%tBC>ltM@RwZ*I@jvzWv6+MNroTvSYZCvQ*n7{
zNcitQ8(ap|C&?;Q1tB9h!co`IJytB^F;<Hl$WZhSfYd9_@>=v9wSQ+Qmmur|g17hh
zL~py0g_)dVg76Mkx_?wKC|u#}EpX!uJw*s4;g;K#UPN4B!G&VHPVnhXD!<J8n=B}d
zg)7xP+&8tG2>bVbn+r5;^`>Jbji1g4FNK_&1kVXZ%*+11<#R9I25_PIt6{uMY`U9m
zF`0^9X%!Z{@nNs(uhq6F<tyoSDlK~F99g-pkCmAwo^A8Uu-f_z>L?$YS1tfRdv>xm
zrXzU5k#@{w{q%g2T6Tk^e|~MJ*8Y#GGO%IyvRA6#m2RdDFgtrHdos!yB6kWB&ZLqK
zyR;<}8Udf1J^}v9(J*beFV_~;s7@*P<f514M7r}p&bio6r3M+s={*XVGK=gntP7UC
zotaGo@UW9lw!SKsid6O?MO!;)a$*L4dlG2BNm+Klc^}f_*}WYO8TSc1g&_;Ta*{h#
z@la@VDd2a0^ACaUE?a^GUM~mUIG%m_r&H-0-5Aw6#oooESE0>n&w2m*GAe6LagF_#
z&V<hTnjVx91qR<{xT#Tj6X2~1=(lmPS7}sMA8s8WUi~>MNWbNkN>nJ-Bwt{l3i!vw
ztwqpUzsTXl5(ffB%A0)AC0t%+ECC0pgD4Qqw^kGM#X+73A-*s6zTw8*oweZio{uoG
z`jS{Cgg9T2_|RWn!qWpTunzsA=BneSUS?biALtt-Xi7#2<&yzUPU*fov<tCO15X*V
z!cMl+mH2<8I9>zYibMWUP7;(!C=Le=A`tv01xOzL>nU*lkNHU5yw4+acmt@iYgg>m
zVp8Cm>O(M!u?%cYU#80m5h~SFT%lGm1s{QZu5K9Yy<)Wu$a`3FcR>L(u5bUy=hlhz
zYVmbgUMQd{9I%3ed)sV&krgKr{gO^51r{zrf(p_W{XwE}FPEOFP(y6NJPcJj1Ou?M
zUN;o;wwllDjiU(m4biNUi9rj@IOL9~76=j^!c?13O+`7fuD-i^v%5u>;byll;)Bpc
z+|^$%$q&}IA5J`*xp`<)5LhTd<VE*LGpHI&(sS!tlz7i<1#PtZt5CZ>m>!haHh@r?
zI56%;^&(E6sL3<rKx=bV5mNEXi~HwKv)a!iy!-Jo^l|sWFW0vX3hwMSH;B-!=-S&3
zjL~K9fretM^ELy{9K%;%$q76|pFTX%sZ=@12p{GJ75Wr-E&c%ScsGsZygSsUWSG-y
z18_1(5rh}`kkw@BO|!3b12u7<wURsyRH!-`q;-OsJiBG-UvyO!TSBRQ*#;Z>4p|oG
zELJALIFK^peSRsfn|{j$7jE($px^ceSp(Ap=)9h7mDyV+y~kP;i@=XT=?JX$2Y%<A
zkoh>D_P1tBTX8|cKT_0eH`lU{gwMja8hrZ4;YFff8{XwV2J{`8nT|dBS(cBi4cSH2
zA(>zw5EZ-nza*twKTuaI#^Cp=JN}%du{-X(Jc*&<yPmw9-?W2yxAnv<w-@I=qYkP-
z;jMD^1;gM|a}Bye+cpAp-|6-V2cKk0pUj(MqV@!PE@j>+uF&1+l^vqP4Mn0gPZ_Qy
zSp89bUhhy}{99)|J7FE%-_}^&9DM)Cm=;@>DNnD+_1EpM>XvAy-_3~>IXfQBC3b8u
zFxiII7lG#(tB!5H05{MoNnnCz2u&*1@1TaNxkig)c|pqE#iJ>DDq>!#(yyx%zFc*5
zpV3)uSda3QI1>hChOu~yHs(ucZKm0~R|@;~D)*>FI1j6#6YArSP>K<b_J>c#o1DzL
zImYR_XSEFfa*i8{XoGV*trE9iFJqH3+_%wX?U#3(14nN9_5~Yo3k?7Jt2+4cOQSaG
zl4|w%bFLz5Q7Twb&R?4pn1IX%_+%()gl?m=cG2B>!)z+SS^9UI+R`G=c(bw&x3qko
z!7f5kY@8yc2V6OfSBTw52NiAxHUZCmNf_3zRzCE#H0nUfd!{%!V-&npRJ=e0sxfjm
z?9q#@!BS51ZQ|+f^(!Be{3Ca4b7TbdYEvQ6BydjRXOrIWu0suF*;3P46{;<HNDtDw
zSFxD71GK3(qOhpD1fm8#3L4?}?K9U@?9ynpdKK1J0g=aXL4!WogFGa>UVA3X07ucF
z)qiQGhF!Zoq3mY@&aAWBJi26=WpJRV@JaS5Z+ZPEdx}vk#?frX9!j;t-*FYnx@h;M
zz0UlO@<0sKT+_`2^IfP(_N$(ocSEt{YF1dJLB8a`*}s9#K-#4gC?%qCczg$(rV{%8
zfK?`EJN-w3(%ej?^0-_^Ybq*oJ5g@_D8&NhRMKnGcAO&j-L*F(2~M$je^UBuL1LGq
zv4hs!Y_DPp161-4yJE~C7TwEV68kcyl$bsuyf3oGx8#P?(7@<qey1JxR)|?%4t0i6
zbNz1x$gsi@rG_|WSb3r)%|IQTW-ao>*sUEn9^trix|W?hL~+Fc&FNGbr9a8@_$|xg
zJ%~mw5fR!Qv9=vrrIIIp?KML@xSJ`M<T))xFvE-8e6hIyW&IB4ej*$h8VGsWxs_IE
zv)W3sP>dl#_EG%`dwZqtiaxiNpMHdiZVh)ghW*+jSlGGG{ZmbA7lcjw!e<AE=*KM@
z(slKcv^8Is-&u_h693A&oVMGd$i?K!?4->(t<L=E1-igiC;RculI&l;1uuku-ExYA
zys`h=`kiArkGTH1f1yU7og<jh+lsAT)Op0rcrV+**E*E<<HkfW9VLu2&3A}+LZ=-x
zepVc-UrSpy>r<kT<gb*J=PF?BZdLQR*Z=9>OWU6w9S4OpAK@-8<od+b&(HQzhq8zF
zT-m)Ueb`<;5w#6XU;E{MfCdySovJ;Do83I02V)@nR+5MI$4}o0cTm!(i~Q4b{o!=j
zZPxUjo2}TsRGSyk(EF)8&HlUG%G~`eq)ZmMkBt*c+a2^-{@p#!Wb8~WFXasyHnvy5
z%Snw3f!IB>kew(G%MneE+y9Yfrs8jQsAZ*&j+4^O8|nP{%BNk0^`xH5oukWYHOjAW
zX5pWMA<JUz6KrBuqWd(rse&+6X@Bk@rR0Ue?b*bBs79}#7Uf;e;hwTf8BKrBQo0fe
zfvUAk!Cn4xbe|gi1^X~n>rsi&r-24f9NsP%Rng9W7h%G;dY18qC=;lcy{Anae#zo$
zKv{JrF^&SK*7&$Wv6Gsax|`m=GpL@<?vf4{r(Rdn#>N*X1e}t>%4~y1sC?O+4j10T
zvhQW(_{xP#a1VF;W2dOHXBQeoCqHm8wX(67*F&c7=D!Ua$XW<D>Yx<a8c$L*JFZg-
z*Lvz(J@aypW)}*vz^vB4mBt*&uhkeUnLX~D30g3is+h5g^}91#i`yq1uX12*vgDLM
zaNB46=b60QdDSOV2z>dzNUz<Q3NtwG_#-@86u<o4nAmw>B}t>Oi>%E{EAihzWLy)Z
zzD_7dCU!G*XOI+t`Z7_0=+*4lOM=WG7!(SBjHkQeS)o*{<}3m`Xbbzu@b>9F`i?5?
zk|$xj*EvfWMv-uLoi1}%Ba9#oZ6b|V^Hv_;OK7wc<>-grZI!-m4&C8^QXC`w^}`@v
z>o4h24sARo460+rIpD|lfh!i{se<pBmD==sdK%PrB9*p%>T%M)S|1Xw9mk7*vX{47
z3p<h%a~}V&i@e2fbCkIM-Kf5^(5`0Yh&TRkz~}+b72(czq{3UJ5H(Xa=N_fvMuBaY
zU$gW3<?aJK^;CnWX`gI@{|3WDzt`*TW)P#c4OD{DDp2dI@h-_hxAV;w6c;dTZXdVo
z%n))&e}>lzqf2L=4FObZzZoc_weq-+Jkm*3<2*Z_(+U`W+10YaI_6NS?%5t0FQYwg
z!N~WxM#SbCZJ~I4@KczN0t9^7M)d1@_JS-(Hw=5DOG@jO5XA3^a8?jZBHNSAtVhmi
zacbxvr#)*9kq#D4o%!1_Y2bRHL2@7%$;prJ2{g*D1tasN>EiZlAnM|a5Twy!l~Ps{
zI6G#_3C4xkmpFWkT!8sF;3~>_+m5lBz1P_vf5q6HnrvR-o{i1dOcSNaOI(up0*tG8
zt-uru{$S4C_R?O-XQJBVaa~ezMH%o3p6m^mTYr4KCe^LYJq+&#D5#^iTa;(Ijm9&&
z-o=icUTT~%E#<Qvsy&`U-4>0?(r~fm68@TpcC=ihYbzP%{r5RG1ZT3h)tBz5ZrJzz
z2F+bH&o-)3TK*{C@hjB~S+f}O;}fYSO=qxryA+(A=3M^~iIn*za40@{E%pbgaqb)U
z*;fY+F__f8`11SR8T&BjyGGF>-VOG4GzrTa{cJ-2Y4G|6Ur7ujy*zmt?j<r)?uy*J
z=@|y^{^FoZk2vbweRi++x7b6tZhFwNuU;8vJl5E%=2>hZwhZYOzowgJcpr`*-h{7w
zrVakc_mYhMGWAvLL;#cLlAl|#cRTUYFaPMRI+Ih<`$FtJOx~|B>P62*?|Y_ys!hzY
ztDN9X@?zm)p(P>V%3|&o?}j`cCkF^C1xsq3rlAb8-_}*A4Opmu6|VcSkYe&xB5y`E
zom6!9kQ`mkn|}7yrtaefx`jYAQ}@Z!?#H)@57~cr*FBbemb5jd74^8!W$+tdekb7W
zm+MCVED`n*%3s@EDeWea4tws@SS4YFt4`s7r2#FGjtCuMuwQqC8Em?#i+1jOwEF)@
zd+Vqux4v&&M0x~A6o!^T1SE&<kRg;tQ4j%P2oa=PLO@`Ep#%k#k_HhZq$H$Mx|Na`
z8Yz)}_vN{t=eh6aeb@T^@tbuP>u?S;bH%>){_gLmp3eUo8kE(aqBS$t<<Bo?HkA%@
ztm5u{wC<<#=6-MB{kExBPqS0Er}t7mUriid5!a@_w<@DGgmFJ~cwMRdp`_}=PI%8!
zflRd|Oa8u{$YdA#`+so(VvmN89;{Yg4e8jPBvrI56%>2*{bNt+hdHlW{FD1VZn#h*
z&-iM=Q<db3j3|-(uEIi0zVL@quV;g?o+NR-eX76jZH^n%^B&pOlAiS(DnFPiE$pUd
zkjO8?z^MNr+_XNCk6*r}g>;^9^pz?aopjD=lX>oCXTqgr-#4k6YVBF?g+}Y3F}<o5
z@8Ai{oA&m`HeOQ|uU9p+4yei3Sy|A%E$$yvSo$aQGThu#xUS&QGjP{BAVIfO5`TVl
z3ObRU&y(FaWHxu7zROj?Ev}J77AIMmvMd1G_btW#rdoqH%Ur2RRO-`*$^DCBLdZdz
zQyJd2Zo2n4p>3HQ{7Fuml;oxFdjE7pCjyCG;4!|coSP}2z3BpMU9%nMT3s_w9u#vB
z!jbzMz<|#7htFZ6)wcUbv_tFBHt04jx-Wxn&yjZ6;l|h65K5-E8G}$8d>6Eovimbs
z@LIOxeYB8K{lH5y>H*hLqxgM!4tA$nnWX=TEV8^ue34mNKO!5eDwm~xdm^%|9O;wj
z)Vo?p?}B>LHkG^X6_50>&rJK6J+fhQZ$CJ~C-i^beR!F^PYHd9Dz<W7GrTDnz1(rs
zXSk_LM>PH5B3@yQpTRY=`=9Cu{EVr?f|LBuS3q(B(SQCI_{F7vp2+|HNyi4h<3C=)
zY5xc!|5<;)&zdOs|9%&AVE^%&0?X8YepO7|z$F`nY+8_$-bou{C-kH*ZTbH5PJZaG
zV(L0}AE~^sA%nvcby_*wGV3JbFU43lr8NYS*tEo1i(cDtd;yPf>!O*zW8X=$5Dy&-
z?4DW5<aFHHmbB2fp)VbD)1c9M{J;qOpKi`-zSiu@^0~YFi&V$!>k==q>Lwsx+WHnE
zRT+nfQI2Fxgi;@b0oO1Ke8v73rAq9sY<omUEJscoi=Xr)xP8{gf3}$FKRf?4(F}_*
zgv|0Ef-tH<5ZbYNUJ*LiLz(VCD0{l#+6L7fvk~&U+3L4}(c(RNF}p{`YBeDJ?4ZI;
z&IHi|T!l6YNPrKq#Q;bKiv}TQ_xG+Lk-F|bfH@{@N#QDJfOli`a7ODdR+}qjz5o0w
z1A?6_ARpjfT^;VPxbFv?b2Pnxk<efQ3NrxMKCghA-s?y1Iu*!)dJqWj#YDXDUNIzF
zCqp?4>feCm1;b^~I&UY8#HzZ}37V_kmxUrJ3=Tlp!wEO!GwS(sLh~T#l?_N4(E?Fy
zW^ar@T1WOaa1?<~j58q7uopD?JehiP>d|?{kuz1=-X^{W3(LTdt2a2@jjrE7#UToG
z{-mCjblf<oE~-EE5*_*Qm=+#mS<Scm2z2w*=%w6jtAS~X^SRq!T#Rs9pabYN0U(Bw
zI_{+QOjkr3-5iH{LbN6bY=a)6ay?ouq!1;2U)BS%xj~RRod89z>;fO59B^aBsCZzf
ze2hw&U!bTri7*UkNojHye7XhlIN}F@b7*`<|96z5k}v#O9WV~W<LDsU&o?IR#Sct;
zhJ&GbD#lk0tqXr&4w`@Ssvm#}3-34JeaI9u>=UC}Q4P%G7F;iAmWUtE;hqD#zA}sN
z5-TKgZ6k*E$!tg1dw>IWw2cQ?M%O9~e3lnzT}oR6Z_+Nz5Qs{7m(kxVcXrH7f<y1_
zO0E{fQUX(2+jEO&CoL$uhfVsuNu(z;kdsP*Q1gL;VTkJ4EyC(udQcKqLe5M{hY2l9
z;A+0BEu6$Cp}p>KZX~3=atq^hWCW=h_#|QLflNECM;M)AkTGguG5g81sibXFLu_)$
zW|`^llV^E7ff};}Wj*X9CEP24OgkedHoAyiu)Ckl;~QDsL7-ws<QXuiGpGiUkk99@
zU#gA-u5^41Tv*$B0OJe-lhYz*aQ7e5XZ)GLDiOzmloL)Vvt$5;7~qGQeC{n(A$A~x
zf*M}dLta-ynZT;^iRb$iph<9fIVW`l%Qw*LKm{mHjZZ!UfN8Pa8HdkMiP{(w<E6>)
zvItexBK33v2CP=>h|VG~9C?yKpU!}FM32pj=jN~G1<CiSbB9^SE30=D|IP{bVGZxw
zqa+;s5-F%#+NS2siw=Q7VGQW5rrKs+YmCC(okXRV-v4^77#PFi*H<Ad%llaX=};gR
ztNNgox?ICF9R6plP4-QNG6bN1dCkS1o&|FACd<HYcv$38S0;Y_<%S~|K|Pwz;@vu<
z%6s9vEU@>n#{Lc7%~-fKplz>>y%X2{x);(?j_pQV(=ywVe<`km`cP1E2RJrnRWD>x
zx5bKJ0BH2h`ljPKUEjYk2)isua&X<OdaZ}~>;C*q>hzg!k705?+bGbeWIjr%2kxii
zeQ>%ze-G8&#mF3OPH~B`RKVBW)jJG@#R=jZGa23MH-0M^>E_^0z!=Dxt5ua#1Y?FA
z)&uMG=!z-9)lV9|48xX{M6u3%f>QRffvK~MN{qXnPRmvj*b9Wn;C>$dYkoZ?a`uj!
zrsmM>j=`@*fI|w$7u++t{j94PF%N~I7s#tn-J1Aa83J9pww!j`#)JSxn(E&hD>-8U
z79g;#1M?a_u+GMKB|+-a0?Tx$>X|$=fHUp<zzi}7prC}a&2$~KSGYi&R)PR4biEBu
z1svBkFGyM!h_et%axrzS{#{2@&sZ1FmiVy03>_MX27k>qeeq7#euGK6MxJZ~F5d3T
zKBZ!IQeqbuy-ATCGY^i(=o9Zv`N`^>8r3s!0m_mQSUkX>);@o$yQyp+)?S8XG~Im9
zbvN5Q>w)`ST}S5a@D?(b)6IV-=}f->Q~+r`G_eE2I&PKdwtXWDU|ZTjd;t9C^J(wg
zL?Q`M<R=icICsyTu_k{scFMo{v#-)23z&-bCF8lGl*}bPmwpee#_mK&{>`bP6MxxI
z!(l_#<J#*ChcACyr%*zhPox3Er+;2C1Qg2l`#gVtjRDsQTCM)=^}pBUn0?fFBWU9N
zx7YuEQ~MFZ|35-<k;rs{|MjMMADsNZN6mwS0d@9&uk7GoYHxqMZ*#N<`tY^o#&^-z
z!P@a}---4jf=z<hp}U3`rykh@UDLBKrpD;&U5F3=oyun3YSEXbknDSS)2C_;q+7pD
zf)XGHL4JB1071*k5&fvQ&b5HB!v^Y{G0RIa<r)8Tl;*_5iV9Y#b$3kozF@Isi`QMj
zlb21cDb6|xOqZ>}^RgKOKLLzt4aE>j4JcDu666330?y@|jD98bL`QVF@xNq?;HW1o
zJ-&Xe0U$~?fI8)B!E$?7$rgk50BG?bRDosQjy-(zksl=NSc9ii17Kk$qWNHWp9P>`
zbHBkd{;n+_SjNb#1L)Mc<>~`<umD=dmqtJKNCorKAeePy+af?z=uKYWUL}bMRs9Yw
zrqA0kF$)lZpjv;jZohL@znjIM1+jy3>`Ym?j5u!adHIK{zuUj)8N_3Qm(?C{rc-^0
zk}U#JL9j_#2!@;h__MP_5eP;oxCf1onA3)6R>ke(4Y1B>LH1cGJ2Au+FFkJ_MnQ$h
z34kv(0r;yIGV7z9$piVl#&>xGFcn|#EyorQ?p`(J+z_A-#akQ!<wgR?Y%ME0J3X>u
zI|MnnF;UCi(adv=NzOfqJs<`G;4rjV5I74Q!c7g_GnnMj6A^%vS}Kq$_-ET47*48k
ze=O5A*7se*uyhgc(hc{aGA>h+0JqNj6Tn7o5WufVkYVudb{GE_kE_c{B-fC95RsKp
z#0i+5&7Zuxhj6XeJouEmve9S_W>AT0EAXA);IcUGzvYp}+c;)~7+(aFlqh89ooCcH
z5|>yXSCx_;J<X}Ysr&)QC?WU}JgHTWz+|PqKlQxGM-|-cOqRlND3!U!&I1gS9rtb~
zR5lfZD9<;r)-JQL9H>(A{h1i8djl$|n(R^Ti&u?M_a9tj{Fw5+U7*n!HR^iy5M1hB
zfUYLAMZ{`Ka)I0Drv|+0AB-%|anexU+rv()p7i_)-tq?Da@*wiCvB<1r2KjK@<rh^
zwN!SPI>?GQpD+vO9ROCfuOlcBef*U(0lQ#d;D*ShhbxDty{>H%mz6b=D4IHXu`ME)
z@RBvRUr1Q;MqQN6=<}Wx5eecZSZj?I2rXC!_M%!)HmYb^n>}*CnB-cV5ma9qpMz=}
z>#Y{rUSgLFV7}WfMPmf4(VZe|=!7iQy#Ur;?ZVVE2~y?;L5xO>#WaYQODGDzWgnwN
ztI@?<?`@n`Y)`vB6p6A0UhQ3xYCm=W(f5H-PL>jl!Sx7wk()Ary0#3#wo~H^D6n-x
zdw~s$lkfn*WQQ}HptY+VM`q)+SPMmq9yU<<3g~5u#<&-7%L05n2NWE_C%~HWo3h);
z-f)%08r*Q@!mXk{TPEF2>94;g)$QSJagss#J?SyVXtcR<T0Y4JAEC?`cK{QFhaR7S
zuMuGa^@2pQ6oyuTU=O!6#DF2jOae+s!rtjpQT?wVesd#wQGd6xD6Hz$i%SDmp)FVQ
z9;y-q>iEBR0{D3sF(qs%0;}-3zd1|iaNiRDn&PWheNaPzj%R*&%Y7s#1JhmK>7}}1
zBBx`Efre8d#FNH9!hIYb14-JMyD#rEY9CT>^<WU}19To%s2NDh%e4IAZL*2IV_!a@
z_Lm-;8-tRurH<-*Q^T7K5<IV8t{DLb=mFqToN{prm<n6HF-?}xZK)Ng+XNh#gE25y
za6p`k<wUELj%|mfzW1I54SnCHfs4Du^E+bO4uy5pd!3B?7SnvXZyck*Q|Wj!CyP_+
z=%vqY2Ftg$SktVh@_v92I{+NYUv(*#dH*Oat+u^a?zMhzGfDZ`*xI8usCu;)eXw+s
z@EH>U2rQOH0fzhxg!b;gIRT+&iRIu33OJxVwj8IMy!h5fAymZSeJsL*L2=IVIK-oH
zPisaK`zfY%hPD}D@@|8SNntN=r+efXZM>*k*>Ov_i+~Sszo)fbU%MCEQ`tC%eseXw
z=k{bI<$_S^f%-^}0Oe;zelDag6}TrHp)CwL?*MJa;&dPK@0LzW0Tqfh5WTktlM>H+
zwJr<Xq&}zsMWvO!2<|#?|GO3W^ZDrkUass9_dZeE%x9?BZkYz8-#1ZhU!-6x!#if_
zEr6~bg~8HXPmfk@UGdC(oMEeeA%EFpZW<9T@YV4YECVC6F%`h>c7CWSb9*7sG<bWP
ziNdDy2q=6s^!SH}7JiD8W>5w*AjIsFVwLj3iHi%VH>UtsBWc=n%5lDroV%c}_}mk;
zP$0XoGw|E(8(*pb1E_cKb&Ev?CVyH?Fk#gB+^xkOg_Mw2g~O+}=}`zdUvFlWJ4(zL
z!cG;~3St~p9?N^K$+h<I$^A1uPJX9Et<T+#-kdia9mq3$_8!J^Xr1<b?vlL8=AFOr
zbja#$^59ds0(ZOGZBYBPe+{TQ=bV&M$ljPB6^;93(d;IXlg<o9C#<RdWu5T)s@il(
z7bgYs0`sEr%AO<|BLe)VAch?yK?#uo>okU$8c?Xnt}^!3tG^ZIvhw|zVs3wvYqM%4
z|AQrl%=t-)gA8B}9n?Vj1j77vbf$etA2K|9wkag1V%kgU;@dnM!4JQUdAqvYr=E++
zpiFOh&Fyg!`gV!561gxSy6Ff7(y24gc|RZ~7Pv9Hru1gW?|6<y;@5?_12FB!My%VN
zu_9|j!J0A1^Xcn(iOavhMoray()EGp`BKt3shUy!V-Z0+fom+l6<#7e+NW_$1;$3h
z(gP&{<!rA+?zjU4AnBoHgvdyHxE$;zv@G*AL2`sgkpnhTNV0vvcJStVzG^1W^dtcO
zPH6?CT(mK+w|f>}G6n>kLBJ_HIfhAVS$lU-7r9S$<OM@mvkR!yGr`_=b^J-Q*>1EV
zWrs5JKs6vu=`DjjgJY!ebwL)zOK=<l%gH}FTMY<i8i&B=^9^mUy1Z(TVil*H@+sI2
z^_-ZS=evjcHod$`1cTR4ieUS#9Cvf;icVe&ZYQ{3Zeh*);)yQ@yYpkFNa=5|kry>{
zfwX+Vpz`))*8uxtp051XiEU{{du?BxP5YWtFSmKm<%Rg2`qkvNvlxkXUfgk+h~UK#
z)_J1vloik2aKIW8kV5pA?=ijrE8tqC=Gtt#k2sYQOUdi$T#l63`gZZU57}H+tX%<N
z_^@h==Tx1o65j^iI!ohqX-*@gL!4H_#sZ~vbLU7~w)Q51=f+f$r#+cFU;J3`?DUdv
z=y0Az0~@+WVn}~1^H2IAiD|YE2V%WJxW%emvCj6-4!%E)YgFE=XUTG^iHFR(1Uug!
zqV@?A#kp7w52fH#k`(FK9+DFA>}O5?jB644<##1puZ?6P$SO^SOYX!U!v!iiEbLJN
zhkzBblxpXl)3?c+#Y~s)xFyjin!t8R%do;$8*ND!L%c`GEox&w0uiq=!?U=0jNP{%
z$<<$gQGN;K4A?*)^(9@(IEYbUPTV6dph%btxhuEx1yp8IOs+#ZOs$84UJjtwqG574
z5I=D9L&2*em2>BI)CBE|-Fcto5}?tR=8MVh9urT$GYx#2ZQ41k8s55L&e|4LwXi6>
z70TgNTj1l5;K=RL5FNiBCA5^M1@f<sWyUS~^-!W|n^<VC3MF?kS0JPk)W9y}#vQul
z*q5(-0dKKGIS}gak=oXzZaqF7%8`AYk<%2d9U*O%x;qys#m9dvehPA}t(c<$%Wu65
z2o~_GB~}P#hXr3_L{F5&VuJ0DYclj)&ZzUISFFypH5~ySl_vCr?s)!)Qd)ypF?IX3
zn-+u@VzxYni=!8O5hJ0JGJw=oV*0Kj)%g#TA_>I==ko)`7p8=SM0Y~A#ZG%kHXWpU
z$0;IY%mk_nDhKXZ$3}>0+Ta)yH}^v1j#*Pf2K;NS1dQPgQN=`avcyz0mCAH#G6G}$
zo1vWYpdxOe4JR!(O!K1@7LY~ev~S4YC!I2g(-Pmi)S%Pbj+m-oY$7=bOnN-~>qlvC
zc22724Jr6+(p}}qmoW$>Itt33rgoh7Y)xqFjjVTe)m&YD1CE@yeja1(ua3-4By(KE
zrbxZ92k<#-Pq`!l?ZPeF_Wpd-+g06Dh#zTnk)6pYs{M*N5?{=TJh|>frf7@smLQ>H
zEJ?JPz0$JN$AJ=ObFbouFMz}Vr$N#q?D-JwDZPCQ9PWnr13f0?pW+k1SnCQ7QJCjE
z5iHY*>TVm8Hxf97G9;LmxesQpT;05sCl)hlXj`nbLBYc;L88J_s5Uw06M?g2e7u&<
z<Z-{VQ)bCT{PAp_#zU`G!Yjk$&Zp}Y&J4&S`^wqiA0%oP9KB5^*zUHxK&!bbI)+NI
z(Rm5?G1HJ5j$<h4CNF)GZd$u9xQUnob11g1koq2K#hA}DJ_?c`b8bzr`h2H5G%;4N
zekGEij{mMD;mzceL^j=cadE*Y<^4-G<dH4#9WdK{a~6kP?e0iOMYUP+MZgK!#C9|m
zBT;P&(zuOoH3<@ullEq`HbKk_s9d$9Vm!jgY8dpndxPxS4jXdZT7jO!6{V=aonKJ&
z3Zr@&+z31k8}<8z!UtKjgCpNJql2jc$?#z0o%OGoMdjUni(PetH&aeK5zE<UkM{kI
zGwbZk(%^Hn)d8S^xZnlF`Z#MdV0t+KTTnXkv2;|s^ZD66egR7$nUx7swFg_eLmtFC
zNX)U=LJRl*`qKfBy~gL>Vy$W1VfhyG62xT4Qq-qokkRu^XAJR6e;$7O3y|?=Li9~0
z$7Z-h$vYx;ylL}+-`VEbf)baq6Yh7CiiG})jf!dCWr#j@2tq<qFG?Xe5KCMn;i@pj
z>BEtV0pP`-*gGf5gN9;Qa(aD#mo9_BZh8n(w33(z(hJlJ^7Fja^4l(WhZK8*lDc!@
zhhrPl0NCce1KG?U%Vx0fWgC!lKVf&YUb+>m#G_10GYUFFM#eK{JQ>D*pd!<-(55E4
zWzcjKv`xguOgy3+I!MQ;CfCvw=kAtviCk`g`RBc+FTo|DOO}9j0uOYoh0!OeiIT->
zm@>9Hbhy3&3BkZbRG7pm*cM@t?@V(Y(H9d7CA&n@)5+TEi$*$WY}_8YomdW+2!hR3
z$6XAfeHMgz-OYpuN98&*`&^Sxak3M#f9(5#nL14FG`*&&<AvW2E-pl}Nj&Nm)xjOl
z7haX1ty<bZYr$xN&I{pbCdd`46z!#b9)bC#{9DN+TedN`JA}yCz_PB1jG~2&QV)?$
z=a);J;=h}Kc*P}DLWAv5SiGF9VYK}NXCh9f?e`<l>DL-(d=>F%R_d=u(ip@ETNYjF
zQ>N0~Oc?H299)Gr<@M&12c2Cf&;~2-kdBgKSLl$fZSHY{%rXbhBZ){sC%%2I>F04p
z;`v)rk@`tmat&!wgBM1{L5$Cer5Z?nk2%#6fAF)p?U<Bg<4@hygy*QU$9ye}K@!^H
zbyOD;2=7-2hJB`!ytwGT#6n8*xQ?j1MSoi8j4f>Q-Sn|#N=A?~9&Geep={zGG}9nl
zY7k0+hWGdUc(+Gvg99@#-qZJC&uqfZ<riNc5-Lh8%)CX6hRRy4zaW^0GWU#anybW3
z&HCC@1K0|5mXLxOU}s?clX^L<KR)wW`84VxgQ#?^(qb$XWAMs~kAoY%w0K0-L95Ho
z-sY<CP?4s_5*#tw$EIzM=<C<pv2Tq9rO2j%9D3$$t1}z`zVh+16vPh5tD)%YCyqRg
z`Y&UHlXJysFo>K^QuXv*?EPkkp7W^RQY!sgFRuk7aBDo$D8^)upP>@39Dsvx_w?*D
zjZ8Q6_mXQZ82YC3gp$gaX(Ho7mAEOi>W)q}{ZiRR*vN%&`iL#mpEY0wGp^s@Xt9go
zgs;%CH|^9M8fI>^yim+MnTwL^FGlzr=H(3Z`kwCWhVoW)6JLhWBV1P2)eMc|!tWi?
zolpmn`C#`635_y$?T9Hz;sk1n2s=EC={aI(5!MIi1W7YQw_mhR4!mH-o1)pn61>_Z
zg4?69BMI&)o&zeQ54q1Yf0L!Zbkv@aHoqJu9H}G`{Ahl<z4-wDj{n)G*<b^MVB1Vs
zJJ$yA!4(V;On;)-5nRjysH=0v2=p@HgGY`n_r6OHeLt(dj_cPG4>{T?*yWZT(imbO
z7hQ>bCLDdnsFo?U&46b)WYrn4HPNB3W_ZnBr(!Hv`1pqs^IZ4K;<s+3Dg{eB!zZJ8
zeo185>Kj+tw^Jn*m)oWM3plEih**hzI`7m2tI@7fHoZ(cyn*9H*mFleMuJ?5iQug;
z&JX#s63DI9VGfI&i&Z0_66-6LId{kEumJ)eR$(dvE2viT6}l{r<xNx}aB4_#`dOxI
zG)RKQ@lU&_#OJymGA9x_%wrwNNeEi?N@}zpi04VvLG_Td*=e)MqH}jhLeWb$Q=x>-
zndYAAWC@y{fNmS&uqLtI4#tZaE{MuJLdM&U!t7p22NIe`-S&!SUw=^e5GuQ-cQiG?
z6LL@_N^*@!(XND}w~8)1izl5Ph&d1DI!{p560cqefIX3d?am5>5%Qnqd~7dlu8~9%
zSJ6yo6#W@4@_jujPndO4DRXnnH#;_QfSS5Br=Qj&x_rv5P1yF2_wvVz6?>LfuGN7d
z=5q)2MYWQ(`wH__P8&@x?bv>!@zWPpei7_qmPW{U<oC_ztFY>7P#=V-i85RihvsP(
zSZY4cs7OG39d{L76%>%tu1@2a8EJtERk-$>iZW27mH0QFyh!vhs`te=<P|oZH4$ct
z5$uJ(Li9FQ#08WGPXEb!VUO&@foV-CUVh^)pB@z2fjMOdffBeGt(mgDcb$l7bg@bx
zSeq6h+!)<_f{KQpw9f|yiN@tk2W(44FzQDAN@LfhVfzl4_!D{O!>5;0GwGt%;DkXQ
zQP`jIIv#+!tbR3U3#cOImyBV}?QfmzpCVt!DArV<{bnku$x-J0&b@M}3-rq07-Q<X
z1tlgBB-gGy7?RLo=A<X2;movei(&nJPepSe1<f3Lhsjf=dP88h&9j}arztn$)y45}
zTe202{W#&n<kN;yT`@F&ydmMG#DJRS4zeocD<Z^GZkcP%k2P6Z56Fp__pobLjPi+H
zKGAu_(->*Ov+OBs<&9g6gkr(V0%aK0Y$i_baD}*dMBn#h%Q79G)=K4-1A!iu39pn8
zeCrF%gFk*~imms&SQ@i63h^k%pyCS{@snakmL<9NbBsg|zp%xxF$ni1wYVTJM_bS_
zpsReT$l~Ydy+HAL=)brC=04w!OAT&rj_os&$d=ThR4^Jc+OW&r$q64&`>lEPNwI={
zt+_olS3+(hyA#z&pv_n5EWrtxv&2fwfxdjQP*lq&%|mzCGNR94gbW{N<L{7Uq1p49
zi_j*zkN@0y$HSMd8W%(b;$b=WW~#d*I@&XP6hJ-l^z(iNg{SxNAD878d=8jxmrqo8
zC7-7Y)lGU2UR<6YJ?0*sqG;RqN8R6Z(Q-+uMbJ9@NjL6KeqSojakbhH9%CH@cAc@G
z#@KwMf?+fm?TvTJcTnkrq4XTX6gtkum6*Pk$5;E4dE_y_7N#Es5^<!e@^+tpMcM!w
z6<JN<#woPSLkRsp&7O$MSn}lEp}Wgj9kFs(Uei(d;OKuu-6o(gSqgPz{~g$rKy4B6
zyu}1Yhfr@^l?FZX>N{%^s`I@4#E8obbghjZn)Bz6QsVEt^S@p%(4FpLM)36uJzShK
z+Sqe%xNM08e%<uNycq0tJ1Z;}A=AXlF;9cOb288n;_N_ri!QhkmT%qUFwrnhI)3%&
zdV2Fu$zvMwqNiVUDd%A&lz}$Z@|$^ruWkC}{<ur4wexkh?~C(%?s`Fqhz3iX9NzJ~
z6;aZqM)_`c^p1nvAs_koTnZ3cz?nqtz=OqezUM`yIsYgVWK=O4=+zdE=feB9aMjP2
z=|mD0`$_fEM^X<9&Y3GP%s$cf)jFF$6u*BdlzDl74lxlG1*R_5f(!$yInvIg*AnPj
z+<is{Ws{`a2G4(;`I|}eulgTcCm>vKkMSfAYy$AG(CaP6G4fC^i%7LMwNEdYAn=a6
zS(*kEarKTo#9o4ijuBb$4{!GR;}e{Fq)jL}zB%~H?*}jkxsuq_JAKLF6cXS^iwQ+D
zvZ6CLFH_2E0W?_I#M^Yj@(a^IO;fOzh+Q#p{oW$Opz8ySw4aGdc7Mg*R>VmUS*3zX
zBp<fhwVP@zI}X*fE{isQ2;h*z>zSQO*1gCWnP$-T?~;BY$kp&EASRHARVNG~-{|~y
zQ~w8?i>`HH<@ybpEem0mU?Lhn^emiUe8m%XjA-6UqR6<n$0%?5A||XvZ~xOeW$_>0
zL0Yluidb=LlKv<xC2@%y+Qmg?P9iVUGoE<hRyyvwil}Kq^SO%_Owz}Fiq;K4Tfx<d
zswU=qul?}-V{*(B&cx20m~d}1orV(uVKx%Q8~3LD3aRPDeoC7&Z<CJS+w`D`X#Xr8
zHP@6jP2EVq8E31fL~k+U9=RG3L`@-hC2B~<H3UUBC(-|BNY2RzKnI<X<i#Fr10mHj
z`wrLg-XvDz)~-FGp4%;Zu^lw1@L3ikx9{}j($}gm{B<YUB-;FES_}@8E3*6IPX$_m
zfbH$L>5DC}jQfTMs_J<H{0m9Qu!!h(b{sPgM_!rl=2pX?#fbzr%|9?MekMc(*$ff7
z%G3XLSjjn6E!GS(T!~PBuHEx3@9yb0@7LHZWmnqOAi-BjRV-fdic~Vfy%ve1J<{f?
z^nyFxo|<a&Uc;ep1-E7&1rX)0M!%?HRUoGa{rsX!Hb2|i<lgYrE(MgiPEq^R?SkBA
zD+9MK4Y5p{qUsVwE$P12{1p1$j)x&zP?}ILrWtDR6!^X88-GgaqhDKg001q2Xi|v2
z0o45Pj*in$><jbe0ORf;UK@K5-$0AGOwq2~d|HmWR!Z7(Ey({}nYp(8<$E$wN=OzQ
ze2?a3)_W$c=QNSUUq4oGcs{Up4|^PQ|0`CL+*bFul8XzX7nKIDmFmOcFZG7qrMkmm
zPSzvWp6O8Yz79J-GtK!i`tEF5U<r)<%9%Y)mC0nJ|MM+Y!OEwwXKu{<x9nKs-!erZ
zV^_DO+v`&3`!c)-KiH$|=M#|+C4Y;wd4}gQOki_aehc6|k_yC`i=OC~iM^_QPpa%F
z@e#K4aZSY}==9ciF{j2bJhu>G93VrmSJj(JTiG@xoc2fg3d_l9vZ1po*bM!_bGu8`
zI36uQYlF{MMDAQp+E0ioE~jd1_9xwWwy0zNCaiWo(JvKfFs%Vx+q<I&gP}KHN5*!4
zODHPU7yvq=gSB%Hle=E8`nMyRWgv*%1!RRTRI%pm81&BCcGghhZ;xE;-n^4TJi=W@
zXYtiD?(<{YZ}-ZXsxPHaF?{1zLR&szJAApdToTT&ZusnrBE9U{@$w==(WXF3lRVRh
zhwLjMTcNyr0x8sA9l#!XVH3eNX1NDsTB;!F)Qx!u&{Im2;GasL5dx$Sx~tA<IIB<Q
z(H0H>xN_b}qYrPwmLGwDiiC{EV3T;{vR2%-NW@4XI?!{uHqxIzl0RYu<q<;QAH+EI
z3~l<V71l(;<<)hi-I3XkEg)&<*KsxvqFWzG-{HY-or>h<H1A{VWMNS}!XKJ15MVUy
z*Uv8ZvJEgLj6v+Laja&la$>-HL<{*QS|sR?JgXq)8cQ^PduhIqR!uLW8zrxNPfn14
zuJ!!+z-Ne&5BF%F{-9_Ab{nS=xb)#2aSmNaF=sbYMJWsJebcoML(h8zmQ<eV;2J#8
zgs#n{cd6D)drzkp67F5bkn4yGl@O9G%=uV6O7C7MeVL)MJDuNzmZsg5G?Ww=(S6{p
zol+t~fI%|P7iYZyH=A_l;-YppO9BZ7&0nE``Ka#3xY$7G$fTpIJf&pxY4Qh@-f8Rd
z_>0tHCVHi<I^5Rl_?-l^Bz%{lILcGTOjhfXg0139<DlJNdRAu+oC{uCOgoqnpE6dj
zD}qw5iFf~W{g52!V$k74`Z!88k<GEFomG3gJalNrx*R1KT8_D%;*@bjOS<j4o&erk
z*!oFf^5+(%H^t;tNoSYidLTI*fOcr!%#@f5&beP`Vy2V<TY%2Y|8o<ilzEnn@>-Gi
z0ym3bbBm)#?krsdK@?Wu_wA;%Z;ei8C%;#*53SzQ^v{}>wf+ium5PCqQyE2`pZV-(
zX{bbW!Z$N>E)wb|wawH4PLAcKb^0cVL@pP0TN_(jj_41Q8Q&t$DR5+tC4kLj5?d<V
zo|wVjnNRsa7$_aCM^im~uL^NPT<*rR^?+5K6i$x)XXTYNdAFw7Urz^6@Fj3G)ezQD
z@2)Ok2;sOfkHKwOHWMt2i%q0aJT&%F356#$@vio*_su^~aC2SGn60lOtR;3c$!dnp
z`+Gf#Z(3zvC56mg5+u*C8XjXXAc}?;gWRtZf$U&)ays44oImd9f_>tTeEM@$SQjKY
ziG)h^mSyWR-OaoFWs1_=z09qSaWNm`0<BVYXh(Wwj%?i|*(lEYL^#6IYdOU*Og>>&
zeBUd)Z>$6tzl|%{#n9A2z3lt1O5`N1C*M62fzW=!a8;Ga_l$U{#c%S;nIHjj(x-%B
z$lwA|+7|%4@NP3N0DvCjwt+i10Lg%_*?JSdm$p^{)HvtuhY-FCDmp6+wHI2+7S{m0
z=rNMj$M=FVz|;BBJ7=>V{T>Q~RR<<Pu~~V##E*AKG<NwQDvVq8MwezKQcxgtZ<CEm
zE<tYKGpTPYbt_-MT%Thp6Pe_hLuEjphCuMiER|oovP%z>$kRAw7x=R44}n{UFqFdv
z*v=l<BVKp<w9O%4bqGKG85Ad^96xxD(?SfR9HN79RI$kdh!)?Q(BK{f7-;-pOiLpb
z;qix}npaSAn=Oo_XEw0k8f0UuLaIek@0Jt{56x|%w#FSOna^1N4W3}X;jx_EkII_d
zi@i29WuK{F;{d*Yu5!VA&7e!@V`+~h({k!}5s<9Q<BeLu%%2;~yX}50i$&+suGW-N
zy1VH$Ze^^jiYa<R$sAF_3B!5+5rebxFniE8%}}<p^{`PWuiZu{uL-pNbN~sMd9!R?
z#Q0yDm}@uE5w{$#;^7Ak##oOnr;{gg^KfO|o*;p+HqRe{)0`v=loH!(rM+%(99PU2
zJip3(e}<-%2-T50G~ibDN=fwj7Sj^P%?LNMcaU|I8K@9y?PK0za#c4n#pY->vie(5
zwp>5UnG`_A8+xG==~U7ShI!>WF^w_#6-iW;`_x*piEU~tj;kLldNd!&OKs1dp@X)h
z7aD1D<*t<KMD=g%61Ack`w-O2V#;&?2Ud0MX{rgRYJ^%Y_|Ae=gS$feP8-^(?UXMA
z`Ff6*NE1d20jq(j?b0|D#5=!Pcks=A(eqIr#jN-F^J9K*)D;Q{&Z+3QT<x9|2q4_4
z7kD8gc3OXSR9|f)ojzkgA}EHAx@B%^`?1X=fIbq~K1Hr+5PBwq8HZsov_f-<Odv(b
z@&t4}daE}<P>ox@ExUrbmTAqw54>!=D<2^5JY^odwJ(%G%z;&%25i%1YIGT!@ltV-
z;PQ8d^>zAi37Scd$C%32OF;@RWNiE#*NQ#+J^svwSViHXjy2U3h_!nvn(iP&6X6|I
ze4cRoHb-g_jiL7z2=64x%7~Jc-0TWqJ*U_RaNc(pmk=bsUN-%D`99F;6zKPRl(}IG
z^~VeRI{|U`o+7BRUz>!I=ITI0D2KtW@;zpz&BJYrJ$_z^XW536W!cVC6uE+mo^8-L
z$Uh>wYusaBPK#<y*-j8oB{ju8LwF`6d{S-wq#`-xPcOnVNs@6h)>QXa#xZ?6wW0a>
z{;TT8Y?oP9xWdGPg~QvWdla(MYRq~8AlZIy>h2ZYElOvf-*0a;#yji03UZ|7xEA*q
ziiM3-=GYeN!89n`Bdv#zD@qYO*B<a~SEUgYSJV!Uu0p7eV`8vZN~{2~C&aXnQ!5eN
z%_x5H8h4X^&(6;$SC06~2MI{4TFod9ln%73MPm(hm{VT2JFQ?#W`A6Y)V8<-v8H6B
z6gUq`Vh2g;x7MWD_Uapm8RosrYC=zY8l!9b9qk?`i31XkRHwX@wq5Imq&J+-!`7i^
zJ7jpWiMon;)cVT-`XG+EyPU>!ewF+fuHN&z+`jzN)=5QUvO)Ok7Y&CL<KlOgop-I1
zOCcV}9dV>!&KJ=Blp1NU7|Hf0cjj2h8kb~YBGvJ<DJWLfT<DRGU$T=01MTeHDPYf7
z8lB&9S$tZ+P|3IRg^)^GU{t98MfdOvPhKzbLZx%((>P2wIwjA^kVwJ>5w-jNj*JOs
zPV0l9DbY*oIHZL4ZwQpQZi52=JFg18lU(65OC)^x18jFIPp@-biy!1+6<FPp`vhiB
zyd&wPstgnS5aD8g=%)hIf?Y_U&CoAFb3!NygU3uklsPh_2;Y%sj2#T~4HDZsyt*9b
zMPtPyptBUavH&U3Pa_oGG`t-WKnzq72cjrMaY#S}@;>}#?;A^Ew!tuEhxkgsb_Dgl
zr9YJlG|!-`-H07vOG&hWvUtDE=hI#IbwF<Noc{FdmnB^7p@?tWW0qzi)7-YB$o4*{
zZ+_s>837N(oAw_>*n6{?u-!l$vws!{7Ng17GP(*==kYKQS4npK0eF(HS3^!L+yEKc
z<tqWne6IdVboG^G@*0wwyR#8e(X>|)vZxg^?dH(z7((qANlpGlB#c)K+ArhE5Z6%6
zNLqnPvuk+w!l+^<cG^3<u&*&a@IZl0$*{6@_c2x(al1#Nhi0V8_ka01Gxe~^(BN6A
zbSxcV{YY?4)imvU_F{Ow+em_LP_Xobi&}2oI&d^@9E;M8*on?+=N<67D+_DPViiw+
z>@i|V{IeZ#xed*vd|kXZZ0AZz_)#B;RG?&I=nEx=g(d@kBKlFb*PQ(eYqxt#`zSH3
zxDLDyrTGqUi-=hbic91<mq*)^!<UCyNhv;0WS+?#{^Vrr3t&Bsbo#s`<zC^3btkpC
z9|t$lSiC=}RIx3BCu-z#4ILB;aRijqW!OG?SHLNLVFn@J8k_69vInMdO@MaT+Rc@)
z+_g_qloDDjHsRVkhm#oM-^aj4|8nvo7CE}#H)6Z!^{qDIl4TNighC1nKO%*gol(f&
ziC;_w>H(X>nMU@j#G6fDfJ-b)cK|QKD@LSy-;QBM=MJM2@J>`C7sO+HfkjED<W(0o
z#$HMPC57@4wvT+2CEm0Pvj{<(tw|_7d@U}#Us_NPl?rgmgH+qcDrc9f0o8uF9wUXh
zic!H)U5I?ofo<RMl3Z(V53zem>e3nq&266DX1?;*&|d`0!mx2rds~6$&G_BK_HP2R
zB5b%Z2$CroU~Zy%jF3-^QlKX!BKD+7=V3(E{c8BdJc>OMYNyuOA51+JW_T#TSS;V1
z+pv#d&_DOadZF<-b5lR)AjHy^pasm%VH84VUkX0PkrBF8k+$~z{#@k4o736SMVUc1
zUHmDFPvFsGb^LfEw$TLl2mQ(n7C4{^ALY=Hp|HnESTGUx$MDpkUI-*MXwNY(4KV#=
z%C)?Wz+Q6o_rI!iZ4<ROpbp2X6X51~ZeTf8l$)pbMvTNvgcx7w+ooNaOIB8ndrr5_
zupM$%gmN-}_&abnv|WUTE)MkYgjGG64fxv28+-&xF!GCH8??)e9V_r7CS?X^7_kM7
zcv6TErQpjmHmx4<Ih<`=%Q=QSqG_4}+HCI}Gy_)7W6#(W*?2vcTe_Wp0Fs`BAakHd
z@S_z}lK2WpnTf;*yu|#<=`N;ai@XpA+%Lz6sQbr(G1`8%Mjm%Lfr8t%_mEU?gR8*x
zX}~aIvLI6w8D*Wk(HoIug-i2=D2RBQ^ZV@QDcZ;iHT=>xAe*a4MT}97$zJ%k@PokF
zRL7gY^NLjV5}x=?gl&<LT%gJA*Nh8=5tp&KUcmsJ{Yd}}WiE2<1BFj8D!x3ua0#<J
zi-?67<tuRI`-r91orLeR^HKf&pM7gRpA{TIusP#N1V+ZWDuHB&7XSP_b;5&^p2w6O
zk0NZ<(I14g!dIImy7y4|Lh%-Soj;-vc%5%C@;MeZbM_vilGHJ)EQ{Ib_tXyZao3iA
zRBgQ6nj2(tpGqw1_*{25T(nr=zV(REXPpx{FpXW`QjTIyj=(QnYd0H6+^Uh}CuNh2
zSu)q-+DEI@vm*yIAu-LEL0;Kw{iREE-)^mf-Q?1c_K=~lU_x^mqeVXRgA<ut`tu*~
zB7#@kejlS0a#Kcm%ql8yuOd1D{6pP80@zztk@HYhnh@bLe3JRD;Q&zuWprB2%>qK#
zxZ`9>K&d7o`u5<Y0a~^m^SJeE=uZlKN;G?Ex1`NOk7jJam3PmV`qs|9oP9+_DYI7y
zm|+2YHGQ|n<z?D{4NVXUxe%BEYf{wbd=Uj54;xH670V>>W}ooK%Ds&z*jMj04H$!*
zA|=1-s~<St`YHK>Ra_9079H->`oW^{>$iPQ;;wtkju$sNL<EdOVs)&VOP!c?&dkrQ
zT~5YlF%D^Ejzq!Oh8+XXLRh6&ZcYTd&Dv+|I7I(cOgxZ_G|Sqd?!Ef#YkCY`+2Hmx
zj)wp-htgI-i!Vg+5dEm1LIhrpJxn+HQ}&7rIYm}-?UTh<1FPiM$>;KYBD`k!*R>{f
zEDs+J&)xz9!cy9-ptV18z0;wuSqJs|!-iHfjc7M&ycPFs)Ir~>XLv>OnxJ@0@EcFL
z<<3MQEgQ*q7(G|&0xhJCj<kx18V&wsEW3b-MasjJ!Q7Pm!yx^4K}~itwSXAqt#20_
z8h1{>#b~yDYNhf;cPl~IOyL-%%frCqw$N}~;gS*Z*>mpJ9WMgsCF8!{Xo8@RDs=T#
z#!|cPMnS*Rq|H4|)tbia^w5X0$^fPaXb`<Y`4NVNC(?zNtoTk3w-~}4B6O!(F9glq
ziCWP&7rl9xkyaUmj^mX&e=5hsEI7sx^LGBomHnCcE^FhNi@Im8lcS8xjcdr0(5LiU
z_iqfM{fA-|>}wA!>E%psotFK)K)opv))2ygh+XCSe#_1D5AMm*{hshmAatJesxR)F
zz1x^x_=BbHkWuG`p!ty04Vqw{l<GUu+>r#uRMJiY<@=nQI-7}eXX0d^I15x{tn$U9
zlxR|wuLU{^lY-cSmBe+i{7Y3mIq)A0O<v+g&CaHOI6iW;dZh>DYWapc;#zL@-w~%z
zL$tDHO3TId4WE85fYcl4Oo=@ghP_4i_Zcr%yy}NEei@1f2cxp4XrzjX$uQ3mQn&ao
z)8$JJ@}oU}8r)%0LCg+If%cJB^Z}x$BfE3NWr?v}e&Fhy=c5qR1r8r%Kjg!;Hm~CF
z!iyMgEe1I8TK&mHdKohJF~#?9o*3S~%Y4+*>S?OFiQBGBK$Ml7*#Ob0^{drk74Fez
zZt6o3;SXYd>)37fg>{oI0R8jZo=@Gkboj*SjlM`1dKs76(pZFT6ec~`tn^56qWZNW
z^03M+!})_N{LJ1JuIDqNOIiMQFT=pd^-XA|dXYhIpRug_K}A9AcFp~j5@Uv9Y>T)i
z`EQ7*oul70PJofv^B<M6mWu~^D@Gy{*TSWO-pX8vYP~G^v0w+oH)30-H>?pS8KV5M
zE;Gp{9$%Jjf<4lUda!>DIdEqBL!sAU#-C&n7IfjJ%dm&>Wy8y_4k+g&&fJf5{+_>*
zS9D=bQ4$AoFm(fQQR=QY(MLPHcJGWdZ|?`?`Z6cY2di1e248N;1o}R})vf1#u<U_F
z<n9}C@7vuoS*rqq2<A!1yeLxG%s)IwtX~D4MqSlYx4EZV;$HFh7Mf4=Cs%Ek)ue*^
z!qR6LXV~B}>cM>J+>641dedlHxHZQ=ayxo~zBuo#noM80g}A!|5Vv`Mi%}F%3{t3h
z(fJ1uFFk@zsP&}#U)sD(_CBt%!9F9)ZR&r{1PqsX#hC^lXah&J+&5N)yJ9_D_Jr_T
z$G@!O(AAN_cJO7jCx3MXG1;HQ*z+d-^=aVEhf+cso9978>fc}8r2qUixZ?ly`d=yp
zByt-(rhmmC|MSNG>rI|4|4${Ns-HPfAPnw#|NZb~siCKzcR>h6b>t;@3>}TD9uhf7
z!`7EIO1uLkA(@GmZ@IuCA<nN1R8_IjLXa-)jojpGsib`nY?uY6c+dRRFz6^$&jJr*
zy<m%Hkkj0$OZ=#bpA5rK;3U>l{zeClCjN~G@?|mt!b5c_fP@yIfFjGb{h@7fizM-L
zP}-k6*akeVEJ%uQkx5dxD-}?Ma|}mkYrsbJrioPp5pDOV-oL~_S_zxIpxtR5%Kk<b
z^tN>0N_#rRGg;4#fljC>!%RF778!FF0T>z9r-Z6YGqg&&H98!7jmp)qmc-TOBy3j>
zI)bl{PXV%-3Fu{PAHh!iK#Bwmao%<}0?4$iq@Up+@aN4s`>XR;@Q$aD?C=fncgri}
zhZ;o46B2Nq!0hiW5Gf7je<*w#K`lNQ+@G$8d@=(#cpW-RY$}oWNWfppFlRglhIDtF
zzll7k2AiBOOqs!jt1Yx9!gp=?U-bL}C%j2IkBZGwJyQsOu}cqnwOU>W3-P4{Oc^xB
zlQ2&D0j133YY$Xov9sP_oOP3b0={Y7T93Xw{S#^9C>tIQ2^M+F`feRaMf{^GJ?Zt(
zeE0(>FvY%s=VZBogr!?&Dbsl~pTMU*n$^1TB^mHV3596#TEM<fv(4vUf-epi?WKW^
zCncRXKV&{I_GDk3_+pc!q;du+2*IkRM`+LRKBE1r6lnkK0-M0HodKjEp@6v;t^6Se
zY?}wo510aFK&zPz+6|(R><v=2ZRm?vW3R-dT*@0hP^;eiSUzzx$4DAv!;}tCNDK`J
z5w$rpQ-lMOz96*gvIhMXO+eE(uCqj^KT(IoI5DTN9pfa`u01K|nNtBOOWEGiS%>f~
zZxH&V3EB|WZt1l^uPBA1nXKZ&8-vRX$tFCR8ma@Z4e~NzU<$LfvYfu6gC`$Csz2kC
zZ(`GH+v1Fr#^_YY5>G<$j(3ssgI><n=xTPti#z1-WjPqVw1>mKSkEPE(@O>rX%=u`
zw{`)AJsWiN#ASe?m_$jb6ooE4=G?(8^LB_K{rWDVw+P%B7jRsQN<^_E8y<_nC6}lM
zAi^Z~V2by4hp^Y~5~D`Iu^>|{^uX*|H9ETd`88_|D7;!=OLZG`<)5cu_7^^TFL9}k
z%R(l6oQ{jf=oF!8tEs5>@4xK$6h@e)sCz>lOSfIn)Kwb<VxQ!zs|7+}GNJePXY?6*
zrN);SfrpebpviLj+73jC+gYjLibEakf$L$<+!RC_Z<D-OH_0{;P`jKcmjp^UCWB`~
zbYZ(J;IY_rEu=y!(y9Mi0)m5xoiwd##K2o=Fe>kQmW5+ol<H>uyMA8+CT`v-nUELc
zGGw^N73(EwdXY^s@1y7shbBmTyWq$61=16)Rjt0%2M32feD3AE_=CarlY$pe-;~DC
zDLI;mrrmXe&4=@r>puh*kxmo8fvieQB?2Sercja7OB+o7yP$<G-ep7l=al=jkEfq&
zlFu-tO}y%|1W*{0hroAo0Md>QmP4M1%Rp(mE->cyfcEOR8IWI`Ch@-csCJI&ZI6)=
z!(5&k;}&Aonx%yBlK2=ki8MSB1!mRS?+vm7kwTZ|Bq~5l1Yc{Ysvrc;bw7O99x3Sa
z)er)5G@|5AJv1w@rc%f|6TI0pod3lIK$-FuH8m0uF?90J(;9!dSqq(KrX00q7FrXd
ze*;-4#~F;eHghSwfstgq7}I9i;x2{5>nRf1g#3MG!CY$nK8U7MfrxVqtO@x7t!Bc0
zz_4)O&(>UNAq7b}_VVU3qI>LRfBYIJQ0#d!ry}0{sh2Dqd7L8PxjhewTGz(pX}U@0
zm%Au~k-98ETd>;9Y{J8A5M4rxm~x>{0|A8UiGu9hbr4CuV2DELp44lv;unwo70NDd
zhYP>)cw1cwxMlDde|dDx9?6`<CwA)Rv89n7Kv}lEvlskR3b%C3{*(VanR+}o61n#{
ziCupls7=~2SLXD-xEi6dGw=_AEUGk+c3gkR@$-g0mhV-8w7BHs)g>+G>+nSSi%Wvv
zI7yxW@wxx`FfIG+q_EX@BX|B@sx!_;ww0QSD<Hd;N)d?sR6jfxk6PDx&OLUKsWy0e
z1K#6K->Y;8Y9@<nn1I*kP*o{x=t^0_ueS4w2kg*1JW!GNW|h=|mlcWp*f=)yefevb
z<87G-qu7H$uJ1~Ra{rgCo|L$p2Kw%Qd;MSXeDnV=72yA`^%r{d|NHg-a01}UVjT%k
zx3PR{oh|&N?;5u;+DrZ8{nbCaqU|65{C%V9w8g_hwy&RG0u3NJW)OO4zO}ONJu+fj
zq^g}%Mhc#Qkv%x%(DQX0D3uIXkpuU~1%ZXFadM?o6nKzEJBp#tQI#_TgKa}k(F?&2
zJTH@ts{r+CSF6uCh_6<xE!%oQb!0k?(wc2mE7MQt$*-A)JGT>WJobKTQ&=?+#$A{I
zg%Sw^Vf|w03m}sB0BhD@b13y-rQ_THkV2<&6xMRp2UD@6yaBrRvUX&6CQ#U~ya$5_
z04xF8W&0%TsNQX$<jMgx#0{D4cD7~6;&giNja`821!b=hxEfC}`YjL@4ghb<0sa+T
zAX%hn-G-E?z&REP=`@xBpVj(HVK^%4$YB!VMfU;(DmSvOrMhW(CNC%D4(NLuR)ZyJ
zd%v5Naa8FL6n<ImQe$Zfo(<yW?a^gGRDth>)P2BHV5A0n1-{Iu{t%cNe1jIaOlYB<
z1jd{ObR&FJebFXBK4m!ZIPl_MF_UGg&u^akXlv+vkSEEiIuoh7HQVY?^<%68iA#*Y
zTC@zgjXEE@-Tay-cAixBcX8Chx$`4%MDLNBOc+-6h}D_9x)9V^=4|Vb8mZnUq>w_9
ze-!!Y8Tj<uKo#mT(kmo-d$mt?Xbw0f#6w*Y#-YItV93yo01YK$qB&~f9cWQyNX3Hg
z>(ui>;5V8IJ?ysUoVPfUMnqK#yRAUD6Mf&n;<YeXck!gJz#>-3OFjDQCKD)jCjj>M
zcNQ%QcL#YrfJd1`je%;z<q83o)^=&LW^5TmJ%;%91~GDNjLy5u&m#2M9>3HFfV%S#
zlb;FTRl5KIXeOBB%9RM1@%F&dz#5o>^mxUPuy_khf+HW-j+!-wR^uUtRD`=@-9zBN
zFbFAP+9H8AAP0C1d{*gSGL=@TcZI+MU}T(&`EcuEy-`tDyYbGSxu_hu<5{Y4RxP&b
zzba-R{r~ErZx3KgNMqhj(HhQI%?XL7J)<2RXh6B)^fLDsxTKPx2l-GU`3Q;yFa}l!
zzyzSlqvw_dkZQJ5#6vn;etqpiu6k%b$gHP!HZDg^0HM^j_n$Y0cFQ}&yO&{Pi2i<q
zOB!w+?D6Iy2I*VXN4VlQV<5F;FjptT>E;xuKKP-MppXrG#KKm5H#<NKeMWB2HV11m
zkrZs$N?gWJw;m``N?d2?@0eK{$)5}nB~QLi=>eQdO|}z?;6|B#D8S^ilzi$%d+U(J
zv<$h9G9E=Irvg>jxS{4;EVhhdo-B+XhUcsvyK%lXie-8oM$6e%Nkh(GsPfc<<|gNG
zoC!1z1utPeg^8U7Ws9dd`t@QKMRcq87pU&oAsaa~lM-YP`=b_R9*16Mb2fIrGGm%{
z?P)ZR_nOgjAV6J!#N{p)(hd5W#19z9NAxif1+i}hOdIcETpqOLLUsesfF{y2$!33Q
zg)kyPE&5}~y+63UCFC~&wt@Pk>aJI+6rcJSC0(9Ot%f(845;xB|GAE=McO1JneEnr
z2d(tM26)<2YoE?lY&@b~pre$}?EGtQ@sK+L4;?)6grZ~-&eU^XdyP!(cTLLIx272p
zqMc`e2(hy>q6PlIh;`QhVFh6ZyFdc6$g9vEH^zkLb9rd%gDpiQUKL5Hpi2KUUgQf5
zJi5M*>5d`?{QAHue?CxX%JG=}@EFwH-GQan-<2{eeupAYu5i&NRwDhdk;^O1uWjHy
zJqM3C3UiJx{~iAIaC2J;mE8kfHQv`yL}t=LK6g(g+^25f4tJJmQ}Dv7=`XN!E{7I|
z^OE;#Z22YCR5Q%t9NodTWXY{u*?J>Q{)(6RGN@pIUCy$|8?d3a?ehYA<L$GfE?H}&
z;2eBAXbGM!eJb~SpWudttE}y@_LVixJ34SBbn!mt&EHcIBB9xNsLAGp?NRUS1oYkE
z=F5g=YQk^Fidn;$7(}mJWuW<##)(ZQopxo}wl!`YxA@K@CA7a;y*OdvzL=co{$@XE
zM;b3-1-5(=@Tq~@QpMg<QK^C!cf5d{5HC@8{r0QOi3Sh<g$V=t_~9J=j<B0DWy1cE
z1cbzyDKgKq0d!JhR%Gz%9t)DDr99|fB=v`<>nqqY*X#We_Mhcsqrerdd0#S3My|Uq
z;9uxQ8zHWCO~~dbLTt)m8FTw;{l+KT%SSNHR9P8dyW-^O&`0m$;VB(R{X6JqWnl{I
z?N`@_ZyX+7?}H}YnyZtS)p+_>E=WEf*7aYk!@tV>9p<XT+32*<Jn{Wil8C3VM3NyU
zM0XwKUl_)9-%oPqj&4?qYj9TVM2YR?HZH!ijXkwj*Kg;iE;xNJ5#w=;9;>(yKIAg@
zjq;$akDXgT?tJdJP<=gbvCMTOr&O68oc$rWcST$0-AK0Uw_lqvu-#_r0)GGw>tFxe
z=mUTBU%$NVB6s<p-(IPwL0|TNID7MOD8u%DxDY8Vh=>q_vL>=M)@)<Vnq3jH))=ym
zy|OPOOO_$~Od>**JxtcIghG*R?6U8?*X{d0@Avr~$NSgsIOd;<Y39D~>$=YK{A~a4
zODvgT_J98bdn=#(|NRrpL5Tmq-{ww`(0_g_S3OnKUi&Niv#rHnOFo*2b4LIBo;Xf5
zch9Ba3Jdx_tR<?kY)jab<Xpe#RWY^y`F}F5B7*Z>2k;unLWaj|FvNQOpm5oD&N+a*
zwo|Wcsb!<0-iq4ihtu=sgZ=b-ti0aWPo8*u{|B?rKWcrq8Gk>`{h#lKrws>h1j|Bj
z7?>S!C5?GdTO#l-kSOsB(3ka1wI%2iu`>NYNz{j*?CC}W3w7MX63aP2B+!ut6+j<o
z-}F3|GIP62_JjRT>uFR}A`^4ZM0fjX+}ogdV;-RnJ}_P<ik<0F5$G<V&hywnGqibq
zW3Im+l7q_ve%dSbWk=@w;BR;ZK_4mgu1O1HkOmnoxP!hWAE1F8*MT$%XI1ZC9bCiB
zA9p2z1gVL&+xx|ZzRYGbpqDW73Dm&!A`1!W@BxVY*N-Zs1vUU_ULZgEi(ZMCACd`w
zp^Inw<=j}2$)`RDK{+8#1>WRgVY2xM6QZV0DwR3h=<f%bm*30#okpB>A>drScVZ*}
zSt{&-L>f$h<v}eBCr-mI3$F!DJtRmc4()_ol)lN^`}RQDY=|`;&WrR1U$nqB$%F?D
zeC*Z0CGW0J$lZEEW?{%h`2c)x4{0D#n@J0^4rC@TQDsMq@%CH~MVLOQIx4C^+QS7L
zA9bChr2WTvc?<H$0^gRf06kO&ud^isVc)V8Le_qA;Cq-K3IKxzXc+Rn%`M^ru${=*
z0I<It@Cc~nYrPB=5&l*%1sI|tyfVyo1hhBA(O17gb5|WL4b<EEV|8efi9((T+!dFX
z<Y;^jTl*tcdcLq6Sl5#fPlWyo;cDN?KO6{C7@O_QS&v$1r3~scP7`-A-CMMmOQXER
zmJX5t-mn1|e(xAvgW)RiyH!#9j4S;Z!slrb41Nq6j{w7V=`r=o#nk2<O!Dx}ANo>i
zJYWgn{7X9pUy?zlI*?PvdJ1P{7}V9dtsO*K9av+_eSs;$iRcN+CUB;!y&Jyiwi-9X
z_8zzY51S(CJe>s_5T_ge{nb<F#B=;Axa+S@YBz{U`2mP#tEFp8VUjL?puRXcuwX6y
z$pMthSyLO{h5`%z<X)J8VNK^}H#Ny#rcXt`ATr;<3ebSaLJkYj7ssz@;FI^gQ2~QL
zC)0eiai$dn8lumRT%#|r4(0^`)~$bpNq34Lcj9f??=O!T_q-oPiM3M8L(hCgsgg_-
z7Z9G#!|CSol+P>%$v$ohh5y+B?g?p-hkN;e(YO8t9obzRSzx|3ofh{O()M~j-DVf!
zqnXrAL`5t@zueY&OyOVwShZ^h9Pf|yCj(@$97I#*15bm_el{hRCRq}s0{#N3pMK6r
z0SrIUq&76yS7Ylza&8jXlv5RK5Z^l1tiTiIZVK$>0id{1Am;d^Q0KP<B~rixq=H96
zJ4E3-TKn;~PEubZ`|(Vjz@=~Klp9?|QrBGUYF9@MBKvwI65)VJIpd{mDN1A@-ZISb
zIcHii0J>F{Lkn{*(0<qYWrU;OS$nruQr4!fe`>|6r>@t4>!7D`o6=Qd3`4k+Z)a|)
z(>CN5PS#4(ETNV%1{s%t34j`up`k7LQPHY2Q|G`M%&DsNG7w(@S=ZEm^t^CQoXxf9
zXkJMo<X9C`@o|{_%z0o6qOSe42B5rB*gmGDl(DBd(QA{E7e^LX(*du|)dKwjgYVCd
z6iO;7m6Gl6(-=%YZZ-Ylju8Em`Dd!4jP1ElAy0vz&8Bf(S^7SpN~J+8ni@wNSZ|JC
zwqTCSJy3U`d==Ny8Q8S28hA1KSv+;i=^@X$^^9^*59OXzk7kS=smeJT-#UpYd97=9
zz!l4dt+|&P8sV+4i6mS4IQ$XK*jH(K3c@xtpc;0arkaReMtO%b(``Z)0MO_I+G0;e
zIgnS?1|(@*PhSNFfY+ZloZf9kVPKQqUfOmeca0qQJd6%5(7QWyj0px^m990={qep^
zsC0vKNI2LO(&5#0i@o?TIVu|TdYw>B0=YF$ZX4}+KlkG~g|y;Xd~U_F`VTI0_DLH*
z-lRQzl6G;z^!w0RpSAQngg>+%Z*2(gZ_Fj^Cw^d7ZBA0%Ko@9dr0(ZzV#A`>cfkB>
zCb4MH()R;s=VVZ1GX7)r0mtrO5#)n0luV}FIdZ0lw;6XKlc^)Xv@d{s+w>;`A;Xl1
zRQ_`sR_f%GG*1fydE*sWCjl4PNg9aTX5Kz$u}KH@R32ox@0}><uY$ogQDJUa?GF#F
zF*VOCAToaSfMMUrN|i=Trc!5~)P&FXNzmfp+$TMTay<*QKkWZ}CK3*j8E3=~K;7OZ
zvdI+-zw@EA_1cAwYWk4uT1jw9xgD&&2hznDTz_S63__0^Y-(CzL888ekmS{SYn=!*
zsWs1@S5HZa<})+hAx~|*A)3GY8#uLOLKzVG!1Lt>(Z?6`%-51$lC~k!H`nH0$+pLb
z+eCslD5p>p>4Y+8c*y-2B)AoK;YlQ3?-MOC7ztW}d5Wd_$s|b@*~xx5s|wjYs6iyp
zb+`3Z>AY^fBdgwc+t!=(dZwR9mycD?*2M|fRX6&i%j;=sqm~|LcY*JOVe{YlTeeNA
zTU;$~<4Ma6BBz=eryqI?Mu+!Sl4Svd^VNbH#mA~6K<;Ie`U&{T_S1&9jR)fcw&w@<
zt@x{x0HDD`HQHV)i`h39HPMS4I*TQNF>SZ+17%x{TC_h{t&SGck_<f?2*gAs&u$lT
zRur&>mju<H8hkZgh8tByW{OmDw#o+w9UX&38!vn0<(kK}Jx!_y_;a7o*G0_xdggl%
z&i0g8)w51MGFQc<WuM;LU1f#G?3_Du7QPHFD6y2zU-is5@UH6L2FmRNX26vQa8P>+
z?2GA+e(39TAur*(t$<sg`CPZxE2gvI+f-~`9QCdVvl!|3ub0^qWDmx_mH)nYFYl%A
z##5s-`k`5{e@V*R+4}3g&?S+(U7#c3s)tdc5_vHk2yxXupNI8^%LIuB&%0Y&!H6ab
zFD0$7yin8Q_RiDof)NqU{SBC@U0~M|M`eH0D5(Fo=<|KZ7ldAc<^X`%0n<+yE^I<H
zHYm{%&aw|o6wufUUC#3j=#;juMF%=9*e^urIxCcZ;Wm+eszHJ3`kMgu5P8?*?SSLt
z7eGaOfTD~uz=^K=0B<}^P@xz@hCu5`U}uw=8m3opmHafO5(=>x27`P3l|QvCMt)D1
zMXHXW@+IN(>L;Jy{=owRXXR;&tY<(LEY+R<q&7uZW3@29{R1s+y|i%#1hV_q5MC{N
z-57uWtiN(xB#MZMgk$G3K`|~Vm*m7bRGadhUO|-1(OizYjMkYv)`sDdtS>gfDHT)|
zV)aMDHq(%+A63KK6t={tU5#kmjPLBb*KTX9A3i)OQE8T&sAU`zMI(766KD!nh|Q*a
zJDjdf5kAe=jX$h_9-WBx>1H8tF|L6fKqP>1G&V)u7?6P6YC@POsn;Mz50;@Y%*JoQ
zY^<I7GS5Qmym1YsH6LV|gq?j3uF*7605ab3u7ANs2({#==Jv3gWD5}Um>cGHssAPf
zrlnUMe|CHoC<gZo2WLMvxaQHJ#Y614>B>+A9@6P88NS}|>i$;{_#pMCh3_Ve_-ijj
zRvt(lFpL6V|K59*6vP~UVss&OTA9li7+c*vkj1EqbR2>bOB;$}{sLOn^+(ao7O;q)
z!Wp5G9jPKLdnq<CZR7-|?=5$b22U}wcHYw|hg}UBW1==`6jw#3)h1BplsMP`LOotB
zHdH2L033yPA9nULOM=379ZPU$%<V4TIsOazR8kuq<)?k}<J`Vc^=<x=0ml!gX}2Q1
zM)Av<`KNv5N;`dY)7j}p4WcebO{B-NNC;WUNv;^gIDeVTmwMD1N=Y}2Oy7YUvmpyI
zUbGK!1V5y}S260IrW?_{4CfMI7Y#Du!Om~iq4#I9nE73y*)My76SpBZ#XzAvsbXl~
z-x6Bk*A7j20`<JL=`yAp5oLXz8CJ^7X#2f_jUeV{C;_s$&9Y!K=L-*6Jw@^#De@<n
z{c?>lTuqtnoB}FCsK7LT4kiPk={I@3yRl`ZywZn$*0-9a3gvlq*(SyORn0^9Th)Ex
zuL4BtBmuO#R>};{g~vrfkf#s9km=rK-^T}y3o(egBI`|{EEYNhp_y%jgxv0^g}?N%
z-L-WtU%z$Z2m#3`;bbM=FBSiqWcvCiGc`YtN^;i9p;O;Si*to{Cl&Z{w`z0yILjys
zWHw19kTBAzpaG~*tBSA65#cVqPu`&?6raME-D?~0m@+}&{Qb4`MhVf1xqm%RMK9Nn
z2cKUHL_&T;;VGc%RgltnS2`*-kkK;T_YYv3)7))^!Mr$j<I0TFH>f`_X}Sqeexli8
zj>FVI`ypx#vLy6)t7)+L_n7H;2<k9K8-IggT52LNwvah0iI*=Ks^2Vx^PW<nOD)mF
z{=KH>db_bAI8oHd`0-1>KW8ml%61L@T^_eSRxLIWz!B+IC}3RjXJp@lj%_CVUdsYk
zCi{>$-JChE$za9;%uAbY!QegW_mhSul$&|+JJ#3ZEDSJ;mWcN+poVbzHXBd4wp>#9
zJI%G+OT$0({=i=y30N^d6xA*%nDV}IxrcZRcCz0+nY_2OXo5u=KxS0>Bn_+$be6yW
z85@1$`qj0i(X1u8-Gca<{*bQ&Y69SIgOtupo_}6nxIsl^3HN?J#zg<I#h@7;=JH%%
zf}<HeQQ8tpzin&cRau5lChF>4fc26(5hDy+O2U<9QvUrpsy=%-q{9<!td4~DpQ!b7
zd#9YQD(X_v*FH@%-i$MR5SB>$89&67oqOgR#TUF0ERhNB52{>ZTNUsJ6<ujz=!i?q
zo=9xGPR)k--787Z{CwG0r2qCOIF0CMF6tKf1ewmrkgr|><a%}wMIXRKE?J(ZzExKY
zfBxtq%@y_zBJ+-D4{VhPj#%d0K_|mvyoP}+=zwIZ*MijNt>yE=>d`z2|Be$4In;Ir
zb5i2IJqipub-Y5&R{B|AAjE1fATx`JVb;Kh{t2fy+v#Q|=jVcdB@Ln<h;%ERDb_&3
zmvshwkcoji>elHj154&4GD8?^$bc01VPJ#~FMe&Vk61)~5QRGa+?g=L2~ZMM*Az+e
zx7@AFHr%k?Rd33ubJ%#ffN<9E1i+X?(JR8P^&0;qIbUaZ<i{=}q-JZVu{CVt*9lwA
zOBtysm`T3POQ{$Yx}&t}DH3B7?ir(8pSemsDQA>3@oC&YN={zy7T>hDR_PnRu+obn
zmw9%+u$JU@3mHjHn{GGTIJ1D=^z&plYFp`eWvb+uo0zF7G4>ptx_Y$FLre==S7&Kf
zlD3X)u6%m`sqb?A@sasrV+2q0Wfx(X2MlbY>hTSaKeo!63K(ud{M<`)IrvYbhYnAe
zr$izJ>1L<teh74F=X7RaY6CQ44b2&=cXodEOZih_g_8<Kypt{Zj6iDJ{I2ycF}82A
z&7Gq{7ELC2N`nXV@Ec)z*LEUm&zaN)O-V6yZOS4-r^FHhQ!F&Nzeh2P%6e!|jG4z)
z%^=6l%D1phBjs*O1+7%eg<M*;(o9md^@a--n^3eHM~4tvDjEEUp=?K5SuqQG6he)g
zN%Gf+5NyN>Nit`!SoBc08SOaXZDy4WoYZEl8cJ*FvOFFB^qR3SmD*@-$xE8zRlwtO
zeRo_X6Aec3Z5sJHSh!Rs*WPA};jWrekCpwzGJ-ebO~PDW!j&BfwC_i5i-RcAqr6f`
zm?L$XSQUswl;kC~pP{f>u9u6|iI`-P)o?wC`l-SCd1IY3sM{+KyY(^Ipf+MPnU^i?
z>#z!}SMF#wXB69|g|$jfAR#XpPFfqbsA2o-dU;NcOp!Z0FIPo}#VWbp{Z1KsA&mK9
zSu<S7r_3!WS^)fN7iw0PLDZHAai!y3zhX|OO(a879#dHV+~1>VzF(xzN*=3sZ$Fy$
zy|xWhfL2nsA1trNpXE|uXhTuO;Va)(Q8?}#fA=3<v}HP-meQc;whe|FB@0vDH7h^$
z$P9WvCj04=LY>Yk+{8C%@JmJ%J|Lku{(YAcMlbgboQ~MnN|cotm<{5%cKUOxB@5w3
ziXE8+xY8eRv%VmAd;Nuy^9=)5(e-<+)0<d$Y&gXvA(m)^FC6DhlBWr(B}xELyGG^*
zsFJ0LyEmv6qC%{Lh0${w-ek@We@|!QGfJr?#ret80gf)^-A(uJs-@RsOWMf9LZ&fV
zn|CQeOd4=rn;7Gz*j%+DI%DZSk2{;TJf|%qVID{78>%;zbVgk3^`X2v08qu|rKy@H
z%ih#yeYf_M|7ilJw>E3!l+*}joMmiB1vnypI#FN2<0BQXKqY4cI8_9<{z*fJ`Kh?W
zb{yW>d2VZhBjz-lAqIlNA*beFPsI1#TlxqBEc$R2jnyx+H2;QwvZr(h8Z00-AiJA6
zP+_>LWfP+G@Z6Tb>gtPDS?j3?CCP*UW4ny@byarT-IDy4vN?+U)KnLZ2hsb_$J|I&
zQuKj}6lIbZPiygMw#&#C#~LL4m?ZIm-J~*>>uhQ)@Fd)}#oggAUfw!bCl&znq>{%I
zb~3!&oNX3xDor6K5o;xA%(NyMg=+CHMamidnyjJAtO90T*S0dB%}X`RdpX}%<(veY
zq83!bucc&F(J_Ya{*09MS82lL${yQUy)de<=6t@o6K`&x#%HOa(RvG0&cX0-+D2!?
z6&TAhP|~R7JiG3&R&ypyN_p)7nzitHYu^ioI4Eckk*onp6s18s&4QUN7ip;_apUM}
z+6(#O$L+>dvSUKUs0&*$BxRbPYN?{~lT3N!Jq>kyVojr&hdsT0r+r2<hngD_OT_lp
zZ6-?`83VQt#{M4L3T$_k1rufWoh^gjdDZ(|xLBqGS5WAtZWN-tu>L;#Mq%@*AUrGC
zgPWG0CrS@ww{Az}(V0a$ZZ+UfYm!Z<+^O}7%+wDD6Cmg*UE-Y#qGJ0#N!_{=#mls<
zI_+J{OT3S~$J0$e845-3LD*6?Sw?Wk#38UuErzQ+Dxy_AOZ6Wvz~zo=!mdE;{ghK(
ztDHiOhbG|>wu2^jBbEG+zBg&u;8l;O@e@0tLyBc+5O?2YHu7=;ebf2TzObx~%?%75
zfn*^PT4mq3R?Xlyjy9@Au8iPjGVTpu<naS2tFpKCLlJK_7kd8N#bBY&edmhpL>2>Z
zh!>2-ga|EBa)^`ZgfvYSw6sY<zacO&*_C9k#ZAnaRNUPC9?yj$_XEh<bP#JSKTk23
z$E7B}DhRTpWF_yY6uJavy+hMMlTaF?{j(hREJ!UO3bl%!XGc4fD+1ei7d^BG$U64p
z9|(VTwyJ$c79vA|I~qTRTczQ@3u~)C(z#!Z?(B&kV<_P=KW}16E8t-GWz1VcMDj6l
zZvxrzH}!6PyVuExp>&h^eS-zS|Ge+;qMx)*Z-o5j{W@ouQz%dmT(8%pa_BOUs!*`z
ziM8gPgR04xj>%YS&U6&<oC&}XG%VTt6Ag{p>bZoP&RIvv89UbQn6wP~s9yIl_%)B@
zk@+|ZCve_U%+5{Ov1j*~;P4Y%_7+AA<c}tKIUbk?8Q%~QIXC%qB|L%F(^}E6RA$_l
zCp=#1cpjwjj9kL^n#3o;zK|^RxS8jSz|`|Px$xE|CvF{LK`nhAt7{8#7uZ(G<1Gdm
zsp&BLw&dgO<0C8Vv`R?VDK`l8^nHK(Uh1zANW|$jag!2E>}9&rOs%WE*po7=|Gr{b
zlTU0u00EUr+7R2kqRscwmV|Fyd{2St8-;v?%D}m;?>0K_!9o<Z^D^Gur-EcCq^Qj6
z3x8tA+_sQ)DWUg!BISRADaYFq_5?6_C8g^fmO{prIQ@c|1-4<IZj*|T+Aijz=bD!H
zY3wA0Ml3)Qr;r1%^(CH`SQZBNpu#ru8Be|b-7e$IBikZpLn4#tW&WGj?=?$tU2L?R
ziei{e6AjATA(yk)BWs(7@XaMq1$dh)_5~xaCD`Fik0HJ{e-k^%H5CJWfS)tZR2gRj
zBq^L^WPMG1DM|HyPxsVEXhH#6abgL-C5sIOj{*I|zZI;|NQ+b>i<xhJa$<%)CR0jF
z$GaRNgs2dVkT=f5>}*4BrU|5S+M;y2#JN0rd{`RTwop@^i?5+P&wNP5UM&+I;el{`
z#?xbXmy=p4IPILKoiGGZXRh3_I>0JPwz*Lz8rWjp+HdWy0vz87ThY2GP8oQB<!)0W
zyAD41dMC%!?ptKnpO(%tq1S{@udj+0O0hlN@xBnS^NoFt2=N=?VYcHP>t!$?qHov)
zb5~n!{D3b;w<1JaAd&PAdt6+7(HZoN-hDJdyxkW%sw66#&J3L{W{1X>+SrhBh9SAi
zx8r-8V8P}Bi2JTpf?81moQj-w%TQSRR79YWK7F9|N4=V5TKR>c5-VA81<9>a`#Ti$
z{#85|fjch%_8oVn8H2>3h4UeC7MdR&NuW*hMz`(C<QP2jM9BC4rSn$4w#Iq1G6QH{
zQ~QPJt5c<~R=}iKDyAv-kFek0^HQ=+#=)Tyljn>Up-AG?6?S^GiEiw`zM7lW^S>|W
zYH|AOD@lt3{4z5B|D%)g{};kO<wZqMFnIInhbsUGP<`M4JNDCV`qa+eM&Eh`itd$V
ztdAwAV;uEi#J7?jfS@^Ls2wH>vG^{uJdNgVa+oxJ8}G#=;&E<5Ejxi10LphYvo-K%
zK?QkDMDj`Noe&i}goJ%K>$N|HVNvK;%uJXE_VRUL<}M+?&B!ngp#qj{`8zc<Yd@1;
zQb>nqyOl)0I)==52bK+9wXRriv1;VS|KJR79Zw!oq>GNwwhQ>wxp{!s&2!W*GAg#G
z$X65Z?_B{?%8PV&@7_;xI=yYn>=*oqg0{N#qZk)C73En2)N_kTPjd;iPSk}-+4#U%
z8``InU;2$tVKPzd#Ykl4*-l!ug<qfS{k1JUX`Iix#g7I6RHq-L2G9Hwg^mu#$e(P5
ze+aa_1@_i=R>^s)lCTNZ&Qk#Y?xNpgMm^xx&gR6>MbSgUWp{`eJ=ROeltS5AHbzj~
z8wfnOhfPK{0{{)<zm||W6}k@|yNqNMpsafAfyiJ?!j{1qw<6FHii3ILls|9!b46M4
z7K%~^hS*xL>etT&foECOQXC7GgWgiM3#ZC47*5F$K5qf+%$${Oq^!FnBE9O`5(9tc
zbE{#2$``g3!#D1~nyRXURq&qN3#QyVHG-UPyVeL$MDr0dH5Z+t$O8eMm<ey@Lafg`
zZr5lpb%LL801|#>iR;RnyxWieA>6Pm)O^wxd#l#{c!-9P^D^UxHH;5xufMnJd=}oM
z7Whe8c{DRK{-d3VA7&7}x6u~Fw@ip&Jc#0^)lIMNsEBU6r^z;9YP7umxbJe1V6jFX
zeVC-If*{ZC$MkzdYV7*vkQK2}s18EBh9f7##E4aYfm^hzQBerRJ%+#2-MsY$L}IiO
z1^=uFwfNpz^R0-1rFbRY!A88#BV~aJCYaoWh{4z7x}=6x<Ms?QSPzafis>xF^60@L
zH||BR5dh83OEK!OD6FLqJh*9`BlEPIZn0dexkxSh(*^#*C&!cQ$0;Y1Uxg4#lQ%p#
z3kU{#95>X5*0Q!*yBwkr!;nbwiw;O0A*GXYOGzq|mc{Dn`?oc)CDBV-Mh7xPmX(6h
zL+*i#N3mmoM)bko4{73&WXcM>sE;Iu-lTjO`ANY+W(`|OlNKV61Kxp&hu5oQ<3mY+
z+)WBwaHM%b;|4*ei3*DxMmR_3JFc3evGa#+rI)R*Az8Ol3)tC5e$XyF6%b)xrNhjv
z`s`dMJQFCUoeVMl8`10y7w7x2YZ2uzN@am@q#yDdW~$u$2|yCJwe$slR01gv;XX`{
znLS8ju(8og{-38odYaPR#i1%Ee#S|k5YuSkkc}S|A$dl5)iFIvb;r!#ciMUu<-!qh
z978RG)C!-ER!dF(n%|6)V0;r{lQn8NM;jH{>|OIJKjs#+XMy5oWBS)xu}Hju@YXTO
zbJ4nptMz&dp>t(*)ep)4r(Ud07=f25XE6v10Ci#q|Jy6)@0g+lcr10zn;1EPjeVEz
z`>%JhbGJY@;qgp?yF@EhW3!-^?0%`93i6{!y$x|?yTwL4-#w9r99oTf9*)ivO9$mI
zrfd2H|G^NOLo)&ZPWGlVM2<8LW*3IEqcC&M51A60V7S^8fYIY3q^SRcr~mGJD{5Bb
zynle1)m*&eErg@{FN7aw%@;rGTJod@mgr`29(=j~y#DKFz!dfWiUj~e^qKz`@Q=U%
zj2L4O`Ne&%Or9M&v2i}&qw#iOWk!&pFkJr~BW}P`IOlFyBytRhFnUA97A%xG7y|?{
zWA0C_Zz|Yc-k02i#}H8I6G#Z-9}oh5>~>x4p9eWFDst9AWP-h6aCL53>y_)4i!31p
zD&&YC4AL~S-djU1!GKPFKF|MfZ(60<#0|sua^ZXs{=~{3Bwx&dak5&b-x}h5Ov|Jf
zoG>@={^3`HZ0I7+r_ZizFa8qUTpE#p$Y{HReUH3GJ=@>hnge*MHUycpSeC$WvX>*X
z(R2L;I@lEDqFTZ5;hXOI`;(*B?!9r0eW+#F3GoN10A286*Ks9nyumFb8j#lv`v6-z
z8JeHKML*{aU6-z*sPXaxlX8fFFHKxM`JNZ|b~lbeZ}_)-(9~&qsu>Jo2j(gEK$DgZ
zS(TS}OD`BK-qipPa&tDsaVm$Lw2cj&B7YcL*zRr2@$~Ws5^aXd9WK0t8|7$JfT0v$
z@T&=k(|>`A+MUkS2&s;LvMCip9c<azjs_DO6i1QSXIDX4#@NX{28D9&B;%(4LFq%7
zR0FG8AovJ;oR_Z#HcV6HNg`0&YdEXfYyn_DzMXb%#OCFN?5Ys)h?Q`|3UMiowFA%s
zx4RgYqaE+bUaAbtjf-32;2vNEJGC*F&NsjPrOzaVSukcy0{lzeWVhrW%R{NNMXrG9
zSlu@XoZQ+KN_H%qVh{t=gvW7ZAk{&FqNhj++C?47sVR&;aQ13-S_A(7+~3#iuA8gY
zi%7t?pHZ)eNDj{&cmY<c1a|^~B?zc$0?8(ceGu%=$R!x9fn<%)fH>b!+R)4dJ%8@V
zB@%|gOX@QKqMssf#O8K?FawWbKxLLysN?5%_Uw<Z(PB&i=BHLtx98{sfHEybgyZK0
z8ionTigg%p5c<J$fmMmVc0vJ3H+Xg-3CTO&G9GLLS;#v4vQ6&l5OFgHO*jD4J$gyp
zUPQbmR9&$V`yblnNnwZse&kjX!%uU{K_{3C$gL8;Ax?kzpQL#>8A-EsdiDM*nl@4l
zvIUUxmLwH1KNgLzzOROCQmX~M!ExLNMC9=!V}pw}Yy*q>1=?LNT}O@4BK`$Qk%+S!
z3DEe<9UwMS=iKRM^<3uq0C{Hc!~TuC<k6xXxAYqkbP>OP3pi{6&}w>08o|fnh!AY?
z2(c|PvO;gZvK_3h?0L++qr6rlDC#IBJ5&IU^gBzS9IvL!FuV(i0yZ}Kbx2t$qA$SX
zYw&*dlBhp#U_D4!%7r+t&k~ffs#25vqt$Bw(w7fTM7a+io6c1~(^*SjRq_>d(ZJaJ
z{P@@ba%wfZUs}$efPNb`o@<WKvsu#5ltsJIM6if#0$OH1Ajd)+nk=nSA-WY<7tZdu
z{b3zuL}3`8a-|?CLqnFo4vN>915<!5ba-VeC%1<zsI7m=eH5~|W=C-O*huO9!n4G(
zcFk>>h7-Wyj)Kxh0<q0>Mid*ZQOx}hy#KIWAFT36ei(+Bkq}fyzll7Ac1g$UhmL!{
zDI%P>Z)>t=BFX8WSb^rxe1O3CVCnG43k&kY3II3kPRY}jvTE3UQ+=762t2x6LDQ0J
zP#Jl4B;t9F%)9HZPAm)v_sXkM<ALOBj69lA0Jpz;ESi0(F_h9e9=KsDL-7ud`LQqu
zOP-#A8`-G|%_qv7<cN1={XsdogQ<YB0x5-xXC5)*jmv6f?iGo&y<QlC_<fWYuD#jY
zUddzxp%T2Opbb|@DYJ@^>|4!MvN3}QNNVAo#^XQ879Q?KY>^B`0*y=&=5vJ^pp=@`
z4!nWkDtj-+OJ<5W=s{iUnt0(-MhZ8hPKy-59MFJKrDqdrqIxCjE$sWQzhC>PXv=LK
zkCDDaKRbWBS6<Xf8#BB<tl01#qoK{P?ehj)Gy@jnvWzUxJhHJC>S_$^?n41u%Wz2p
zP@Yt49#kH&woXwJ-x+)b`}Mcpov-d+bGI&EABdSPa{C>T27WzvejtAGtYlIg?Cw<;
z{k-#%*%oDMHJh2S;V9hJ|3OU)w|+zn2EXy2*Z;wHYcKk578}Hz``;f#nfxz{4g59r
ze-q<o%1)*#|9Mk-X!-u<)n$9;zu)Fo-ZJ)#M|rWu*L)$1FJ2Se6~EG@P}f`&TRr$)
zq2IwjRE^;pHwG)$yj<&(J#qQti#ExJ9ZJXV`ZD8l&k!lTNQ)u0zpbqj*nJ1ND;6s9
ze7Be90Hp@^(`0GzgIVfbr=$!U=$5{Mcv97|RyZYT8wMt-cvywl#g-3rrNwHg^rZR1
z@Fx|owlatXT)dNrc`u7E9t$(a&keU?7we<%khikQ_~afP?iWlanF$GkQ}99v0^x`Q
zw#0HLVQ~QA*8scVcZ7SnJ>jn1-#dlIU~aR%=>)bgEx>O{5p{<a_*JIQL+XJkM~C1z
z?+4;6sDXczulcs`GR3nM^*b>dtf3``dz%{Q{VgphFy&j7GA5UE_?JU}{@vy;PfHk0
zpT2wH5|X3E+kN->ctbf5trURsVwmZn=>BERr&%lippA%FSS!bl$cO}E%dJaA8p*Fz
zo<Ipc0Il~oef*L^Qy$^?2_n>ano|489PLb2udAzyQ<5(s4>`kHS5J;bFyoq`@BxP_
z>JC&^;XO89Q;#QXL~|hTMz$S7^co+KM0S!B1ZCPBclkP(Y+p@8N3n}Tn=wR@l|}F6
zg42+bcYzzhr_7>MdbYF}YJyK9RDiC=<)*e1Sk&}i)lvXEqg$$5IsUA&tI*`11Ap2C
z){}Dv1XJXl(E6ifLp8o=R1m;vyiM2~o1zc-1~HO>;jjR221uiN>zDKHvAhGhAnxu^
zGQ_xpG>edq@OTl(-!wf(k*dWiv9@o9-3~dK$G}r0289HI`NUKZCBlbN7}D|$P+bDI
zD0i1Tbq)ns{DV@xaQ}myQMuxoQzB?T9x@uH+gUe|^2h!^3Uwg?-L9t#Iv^fy1%f~N
z0EaMvp9q8w(_%m!2j5Mmrfvm{JLTq-Fxyhc1t_6t30x;lP!m0?>n$$Ndj!Lf$`P+w
z-PDBKCXLGx1Ea;lXVW$I?r+>;19X&)*nk5rsDfIOrq$6SJtDJUxF6D(^&D*U>JY_9
zTN1d7cz8dUXXD2VM=YGrFp@ro&TGqQ2w*}$>2<~0&s+$1$t>MpRljfnIeT+}sjJDQ
z67}7X&pmGGGGMOal9cmUs5i(jN^<BJ<@Mo>_=;v1J{|7@=|g%Yz&KwW$%Zdi!g?dy
zP^~v31<KSQXdEJ|y_E$iIH{7JnB4Yv*WZ1xK(;XSv-vK@)6YW^HX){P!>eW^;-%->
zuh#v0X+Ep6N<C^>;qjCxRZ_lg@D934-ggwu&ilYTgj{QKBTNBDVC~Tx83jNdDN9$1
z4XP3?=B_w1L@QlnZY2cv-g1x&F#Tlv2Ts2qNC}2|-n!t7r9$!;ak2$^Q=s@$2bJXZ
z9(41*JYfBd;=*aNzm-P{!h*an2~?{q2IEV?uSq~ANOOS0)P3x#m1tFDt?aQ6(w^SX
zZ$L>x(5^jW;xl9%2E&Pz%I!jwvynK+?&h-&csjK$`)coIA3pB;$!O->+tdAvt-^AH
zJ|*lU$S;^-;D77<bj=(u`1{L?rM*vQ4mk~cnWDC4d%3QI5Rd8`z%kMZVt8c?@ZdNz
zjPO#%7fT@;>u^Y}#OczcWnm@-;jIwq*{qN?tbS3tf?i$imJw92;m?eG6cNGJiK8b?
ze^S*N|0Vd|Flv0r(?eI!;n15pP{bsBJL!?N@FZO;tpPSID-Kps9-XcA*rP?_j~CYk
zR>|AY0LcM(%X>3#C6)8jlB|{A0yjX>02deTud--Yn>qB}1t`TRM#slBZ}@Mb9>X_(
z;BZ!H%yzpDoO#u&9Ho}$LtGFUss>RyfJ*?$baqWY0kEmU(HpT$gzEptFIIp!?QN{p
z`9yJO!=B+3r?sI>DzJx(0MXHpubwNcr=B?k2j{i|#wzGN0i7qti*1qvlbcjrrDh)S
zL0PS{jEtsqYf!u06i7<e2VXC~Uv4hm`extUx3p-YBl0eH7>wx|6z+F+O4>b3kbh0C
zf=HxmTLL0KSz`C}-ZxCRpq39RBOCuJMmT((nx3Z<<p&)&6<mAA2D|ZD9J{{@bTSXV
zCh_!?LbO&G0cbpoN{0jx_)D}J>>#7&k5QblAyOkQDeHq7h$S?w{rxWWDBZXXgYf=$
zpnlQ@<OhHm=%9E<4PZAX=gy4pH5KXLRepAaH#~GVH`9OFG+CgPmIN-1V6y8;xy|%m
zOIKzK!0fq}wLa4n_nqixPdG5&HJ}sFMIkC;>*Y`Br7NXdl`#A0u7@%2yVM|h`mlvq
ztBmhf=cnQHUpzRjW{%)IdfeXArL17Ws#lCYyck^M+~H`OkGuj5KBK0Ql4t3CO`>%G
zA{3Ew#pQ}i6bv^BwYCH4mECv`Bk0Estf<e?jX@mujKoqt#JutUam@c0AN~Kg69sSZ
zKd;>C|Eq$)Fii?IBQTrHfm8Xfq9Hee`^#7NxxQlRXEC2azxh@v*?{&xpDS0p$Z4op
z>kpox?UJRO6*r>dJ!o2`dVd2JwV3bLqBwi3&2wKsdtDdd#?=}=yJY6^9<*WAy3TD~
zK`EfOH}H+q1D|?;m+nmT@7YYfmk(W5FJW%g_$QAi<_;^5h=IM`9i&R<0v2s97&uF!
zK|JgS*+C$9NQZJ$A+fGINSDnA>MR3`eO}x;$}tA7?ZomBVcKJw;LaUq(9xJ{U4fuD
zn%M8&s~fS&F9#Rt2VJetW;^xkzSYxX0RZ>hRZ+aLH#E>^Zvm9<eL&q1pRbdNeFp9y
zok%9gOwI!l%|Z{ORzUsW05x6g=nY+=BqyykKOobFb}MbrwyTTUcNdM{i!&$z^`2uh
z+bt+h&J=XSGik=*3S8S?0R_DuobG=fml$H&aY-CTs^fd+LLVQd!x%z}w*Ij555H=S
zVL=@9?Ke+CrS3xsaAevKFL^*WcDiQ;CiM>xlJ5c3$j1TnzM1oK3Ghs54@Vzx0s27K
zkvYk};c#zZC#Q;P8EQQtw?KC=@y!J_N-n4Glsbkny{h;UV8d$x;oHM^{jyLfprCp-
zie?#fv_Rvo1Jumg{-eot8+l@n8o<;O;iv=6?yXOG0BfvVz}9xJYm2=kckuBBEeenq
z^8stGO(7-sOhlU;#9;r#dy4j^FOcK*@2}KnIwC}ZwC;TIT=}zGBLK+%yR~)qz^8?h
z3v=5NMq~m9(<6@Df?B;U_`QP6u>O3F%!Ek&OKVW+nd@e)HwT62RDz?_JWtE&%7%_f
zWd;R>&1-N0_)iW?$X6BU+1(1XvtI*`$Gb}(zg?UIN2^JXurkKrM)^Z%CGRy|t&1DU
zgUDW=p8@3c**q8&7jr!03%5*#%YkEKt!xQKe0_n%2!#|yWQ2fvELzR$g#OO_$Cxa%
zHHrBbr0bmr6KdB$lfFDJ8pQll_bqB4D8WyQvea6NukH?Q*y+>cL8kboarE;Ke;$ME
zx@#b+7@Eci|Nc%)+1Y@66XyE!^9XDK@ZYHI-wrdX>=hmRygdM+;-67E1lR9PX2C{P
z%`0f`y8_AeYRZj~?1GdpU<cHCZVBL;NRx%5TF(Gu$N;wrahr2{I9OXUU?-mlB)O4L
zrc@1V58`TWfc;EtIM&s9AaAC4_D3I~)kfXwk`1;BG<pwV4VUgMejKHY1|fum8YsfI
z9E1mu#EVN|J^~|bZR-+aexm4Ueyg_CfML~bxnu+ClZPM><V-!xqvcY0Q+p{|m>Pv)
zhlJuManVpHBQ*2by*M60?EQJ_<A(n<W#BpsymCW|dmsj!-6EHmQopqR^TjN}-t1x(
z6h4@9O_(C+QXAM-5;A1~W-nDmcoe=Z0}dlG_t~EE7DltF1<4S;q&#OAIvF<AiS)N^
zuwGz17?7-$^{HeE3NHv~Ewhf7k40P(7}4&*<cYmKk?(j=Ok6ie6Kz`uHRZt%qx%BC
z0bwIHAM$vw&Q5dO1VzI?{X<fi@)h1qar=ebR?JKn+F4{vSJVApomz^Lq7_CuXG^VT
zP|>_VFv4(3HymQ@!h`04q{IzN)4H9vbowQuCJmRjKU9tk7*)x&q4<g1hM>DLyiPYY
znmVkLJZ+YOMuYI?8JY5H{e4p&bBCr02jY)~26&HF5^nl~AiUHfIInjNm~>5@ZUSZp
z=~S00^w4Z8HVIndZPadmMj+QVUPh%;Kr|ckb1Xh<46-<bSm)CbtCiN5RT!kH4_fW+
zt{;r@;-@rLtD}JSqN_w1Y!xm#JU?t&Og3zD$gcN#)`A@5ekk7g{JB{j(I9s)2e@$f
zZ>Rm-1E|x$7Pb4&0b#?FIxBrI*2AepBhy>4CbMP<odqj@(x;@%Zmdck9X8YJOcB)e
zDhgkwXxht<C@e;XN+!<g8YoyFKqz-djVdcmxktHSb9A@t{vxorUJ*0Es(v+$MW04o
zhZtkpHqo2|fnp61`g<ZsVHt$N(7f%;M0T%?iH<-*+P1`30AO*`j`&CtBG<;Bx1lr}
z&CK(0$O0ANh&xa-k@%FZ`QVv{z(5ebzXY)~HE>WMYBWy`6wX;Ab|FNS@49ye#LxW#
zTBBiu$F~H}iXig@13pdjaX2!pm>4td|Az}uiaV^JR&xPr;p%hy&_r%OGiMM;Ur;#g
z4Ur>Y7SXwW#Q9N`!?hvsboIFmLuEjvk^ar7EBMX6=ciQk7-1V+YP|X7-$<nnWcTdV
zWbD_J1H^IaPBZXYhyw+vE168(136HGuVX*?>C~s$&`P{BJuLdvooat;lc}J`)BX(Z
z1SE~s4v^xbfTW+0aM&G!fJMcl4u`6b0X;m8e!p2hyPoJpqLSNbgwvmf;Y5esKRuok
z{Z@IinJzV;3rN#mn0ozXb69gK$xnO68vn=JSN%7^zj}t4dY7NK7YdF$kXgM!HwAI^
z`|flI^gn>Bnkg@)Z#m5Wz)3M$6~R9r#u*^MBKK&&@R9i@2F}~7cwha_VS(JC1KW27
zc6xHjq)@53+=M>hL4!>uO_u_0BtxH(nM>kHuD3v}jDdB-_oEgXF~~X%*gqY%Sc`i?
zkR*Axo&yAVUIXRZH~%_h6cjpIZPP%UJ^N48@;qV_O54nM-bB6Lc`;e~{SM0#XcLBk
zpiIBs|8Q;0UE^NyL1u1FC*AK($qz&IhhAfltB|E-y3-J76$WPyeKzM4OH?6~(<7|Y
zIeO2+DKGG>umoGS<aN9~=&uLb2f*r|$#kjwW#=&75accQEa^_b-dsUH=o@-w{TC>{
z7V5o|_6I-IEobBH4g8ll?-l20-O_$C@u^@quPW4L4i&>DBYi1*!pFpit;*kRiB;_B
z1MF1uA(Qc{Yy^W~r_mqKny%dij__lw^bC@(HH{wiU7=5@x-{hD$|URORd=bx1N5UH
zBG0OuFbtFyYf{t5a{6BXe*r<L#wUC{)DJfAH^h;q%}d3Y2V|y`dZ+CDum+^{<M8!E
z(CAIAcTDaSJ^duf4n`Tr@Pu!YN1z=`gr=7V%<FsJvX#PrkNWeq-j5ucfsS$gola9q
z#?h_Aj=?A{>nLq@@ydN1iMt_kAA_=-We4JfPEeg48+GLbAevH*DbdDzsT*&9c_tl^
zAlb|)h#n-#$q}dg>oD%T)Y{YRHdGVWn~hRt+uQY=GYIHg7sH4_V<n(#nS*2i4688N
zu==?1f-w!&DdB)!jr+$xVPU!5^Nm!kxyo0~;Ap$`$HyAk5(U3gWq1WaEV;wl)KK5-
zh%1na0yb>aOQr)zV!?X+NO4f2ZZ$exsX*q2tO_gEm_g(i8afgr=c~Jte;`3&HQ)OP
z1Lq9tl8=LtC6b^{_6UvaQRRL8q%9U0NT#2yhvfC3P)nmXq#4KY$bp8<jq?Zu(&}R^
zEHowmnRia{Na<wn+so~nd;#Ua`g($-eG+RMD`pC^Q}%a;EyV&57zhEP1T?-mJ5lBd
z=xVmWeLvs!vVG1h`cdme;irgt7rHFS14#R(p3HB|e9%rn+p!^r1o;2-LuctKC^D-m
zKXNKNRCt)vR}F%JO^@<;WFQxTV^+B@>Cu(&-+dJP)Rsnd9CMm$DQ%Zv!`18>lCJfK
zTf5s(3i8D$h7tveku7kq)3a=Qnrs?SbXO+t(pIHgz4S6K@%~No#!Db^CeKhPXq@%4
zUX2i4d(liIT~fNJCH>GUMCV%h;15Px(}$%E`}WzVNN@N5c@2{VNBT|M!-d;6ci0YM
z>YXelNT=YhawSFcxOy+r%~M?F)xoAGjF<BsU>D$OYbgJ>97w=|y6d;Rnn>u0`N#C<
z5-D^@Qx8jwICmiFkIedh2&G)I`o$2CLObc+vfXD!-uArsRjh`|?GCJ?K^wPDZlGp0
z`c$1=Z>QJMqs5F~+F-cQS+kP^A+1Ks5p|Mi=e>B%CV}M(8t~v;inbLnwUC04foh%Z
z>Kr*ldWaV#GFo3-D(~HjT78nsnp&WKUiXT1pI|04;<?fGJ|Lw3ij$8Wf`oeaVo}CR
zD}d_i{SCw{UG}}<+LWu`%3gC3F&||Yu!i_DS!uRDr1knxIQ);n0Y8sW?bdw9T<b!K
zR*4RFDy2rLC|GgvWz`Pw*hr34RLc&4^bamwP~aBpL!c+Q4>iTQHfC!GJzq$m%ZNbM
z_4Qz$RskwRzw%X!H}7vml7D8>gd#!bAPEzjCgxOuo(Nw{j$0fdLDTxx<}?5GH1BJ6
z%c|L-jensm;vN%-ZihN^Gg^ir6(*R1xInkoIm4sYu(m>T&6|~A+X^Q)#*%<g16eEp
zyY(#leuf3?xX_0uP?=7KE_YocTeT<hm<vn^AK@P&qq7}TYU`NA4)({6y9YR;4Y4RJ
zqRH(~wOy%%BndO+4f{(SNL#}<u?l-=^4JF8eY@VA%pEpf{+Jc>`enf2dga73bgS|U
zhj#}o6D$p3s)ikz#_9_aqaPnr-d5<zCre)a3i|db0>)sb!cCLss>n?~N(z?un)W&Z
z#oIJ0%;xc-ytA!Jr^ucI1EUugCoF(EXxDsg81j;yA?Qx)Ok^%eO9rH)uxX@m>F#=J
zq2TofZyp4D;!J6?ufsTINc~?D@fG^U?#PS>(z%l6#y>T;%%Rr1nMA>1w#w6wH|a5d
zJF8|&({1SXG)>31Vc(c<G9Eu$HGOI&DU>+}K587l&yMEX+l}~}2U<PY(p<YmE+gSa
zThR1LDQ`+1O6=X#jDY=Rp}(J|$R0)LBV=Df=p`qH%|E_(v$;|yZ{!E^qNFg4sc?~Z
zt^qckQm9^^wnIgqg;0rN65-rNHcF9DS@nqEjJ9L&WXP?f8<ozSqnZ7D2azc2E6}1n
z`m*^RKQ|J-SKKVwQ1$ZYX6C}Pfc=pJ)>S`0OE^`69>iO!^nTBSz?c8}B!}=ElafYG
z3mRo7M+PXb`GGw5Ii3VkmwGn6lN_juPXgL)IIpCvqK29GsILU~%-s8>uBUnj2u2$k
zq7>LV2JWz=!gOFf>d9&OO|kPe07QlJ5}Ex}@_5vo<DR~Y$oMtn?lrM3!oLjsV4nU=
zV~Q7>DivVwT#uVQN5%SFUOVff`<*t_KcAGPE{^1LUKkSrUlmLQg-<QTDFYUSds28l
zU$WAlgQFK*v&y#%u*ZWoWS56HFj+85YO>bmw24FO2P&r`vaSqWqidjH+mQ-4Oj_i*
zq0LRjkNhV?;J@BU`)|TW-+Tt$nIf|5i&=mLRQn^H;~tCwWDymdM6GV1s9Hfy;4Re*
z&R`i*wp6vTZlVtmra*8tc8pyJl1ftJ{oA#FBkLOV7-#X4`8q-f#cD(wj$nbcoBWBa
z7w$g2oumGW#2xm%I%XfU$df{NBydFOE!=Vl^QIxacc<QM{bw8;sM*Z9%jU(d`IG}m
z+y|eJEQ7?|^L=-kq?t8=ini7Cj)wKUO>gnNb=4Tg)b3=%eRjB^ux?_fMk1zhy(fu*
z{}9YB8FSTydXBR%HHXUWiD+rHMjL*tVyC}>_}7<=PhM4Oh8b7SLZayVV{vuDHq?7R
zG<l|LFthnh@ScYS>|Ik2CYVLo&L6}WpX0Yc3h?}N^Y_-?+b+s}c!gi@#@<_jZ}&h0
z^ol~7kX52ylT)Sm2+5ESb*`}rDbA+CnK`+Rb(BQ)?LTPMdCW|%mc&^0<6!ihl4o&b
z0&i`SD;v_H7%t4{g*&K@t~!%Q()_|%Nx#Z|PB<*OXU6O@2aXG3$3%2fk&A7uX2;6_
zFmZkSYYJSLGrTJhqav}TD$JwN1p53R&javhB7H@HECZpi#&RIQrjz|rfk*T+Gn~?r
zD?H5v3}EP|TD0j2lOmnvHjFacwp(6Eq6khj(&V$jm4BW(3@Dp@rdGP)12kkB;Vtf3
z%XLZxliDT$vq1PH?bj2VS$S?fcdhP@AD=OO$XbMSv9W$&fV-NoQabd+AiLSdn(T6r
z2;GnYlHfM|s9w>MKCw3*PBMn`1V1+)QVacbV5d**-n?)lPNgZW{wf=xBFXl<w;Zfj
zid~?w`$>@Xv{*O_KUD2n#-KuB5=n}*5v2_b^`NlUJxGgM(Kyy-`AR$}Zt0c%$K0cm
zRW8VxqNaQqvE@Z$xOz~3!$gM;&Q}s)7Wn+4aT(T-Or7etu2eJW)zdUDfrOjwACx%2
zhGNoV|9F6HFB8_w@_sflv-h*jU8&Z^&7URVXacS$5~UQ7P<k5e#ADfaY_n@NalSW}
zyIMOFyI%9lE^XRawKTJxB%hg9vcYTe8^7~a^4OXF$7ieh@(n$W=_B4TeTMJIxqZ5!
zQ)B%E-iuA`=+adEFk;Nm_hy|K-Pp{6+<Dp|h2r?_Q4c}@fA8m=AI%)az6rcq>JsLj
zS|IPb4HwzA&bahiJ54@~uJqyr{}uCQ@mI|j&Ojh?1rmt#O1*o0xa?V<mV7zCJ&wEK
zfvdxB<M}8B);3=J58dKk?$bb@Fdq9vi<R6xtgu;tO`^H)PD`UKqNLFJ7|JK8{Pkj_
zEQ4ZM^>$!{CWgQCS+RlOPQCo5K*x4`jo=5iTSnLfxc%Ic4+A+rh5%ER;)S7evTM97
z!UI0-odIHK>(b=M6inn}31Vl4R571m<&oi!wwhx0TSXe~MmXA1-YSJLW?mhVw-g@I
zq3ffSk8EHndAYypRczCxC61CyTH$@9UY1tR9Q?dP;FG4Me|jjK{yY;*_pPEe^T9n!
z)S`{0Pu+yQA5kg{rRP(u9xyn%FSdo1l%Nob%+v|v+mTETatyHKTGFl|q@*wqJI1K!
zDchHp+9J-trg!g6{A7JC9&yfpn9-jx0mk}79TYZUbu2dIt&N(01hmPN{dC3>_I0~7
z>%;4GYYjJgOKjYx0cQ65!LHhI2BKP1#kPrOU}A$RGC|5@DeOpkJLj2}T<NG%-)yX&
z*JUC>B&DI9QN5JAw*h!hc5EzXOfnWxKKSBx<<NcN794AsA2D)+LFDL$xQ(Kc-rcaR
zu!V_Q&#|`wTW=qmJwL6L>34vfub$0z=yNKWks%_mX5O*^={m!_JTG*W8Yx63j35PT
zj4tg0&}toHKihE6ToJiB$%2s%2BQj(*Dv!Te)XqMzXk{mt?lLO3|`aCr#=GDhOZO;
z*3&V%7q<mJI6mpQCRe{*x9?_aTWzD_7IOLtQc4V$dZg3WW}8NqbOrW^?sQtA|IG0$
z#9klgrz_nYoQtNGhvkDQ-NHfQG=q&<SZg;GJ@TwlDZ#_xj4Ep~L9eAzi49ZUqU19A
z`m|a#p{4Fm%Ywea-4Jz#VB2YYklLVV;N#5;_}R2Cb*-q@&G`L0Y7?zv6x8lyeqeD&
zu)<#Leho+eVm4T1ssj-LnJycCtG?LR_(Qd<hu2Cn7d$E0G!o62U!n-np`O)F0W?)6
z*R#w=zSXV!byG;03`P+%6R)R8D)eP=@FfUAleL_bP_^U4BQ~^T(vi?s0odW&RW+qQ
z3{81Q;lctwPMah1Zdr4chTaR`=u51#b}+~MI$<DJWsmOW1a$Atn5!NqhJS#MK}|8Q
zQ`xy6keVcYCqJ``Db7n1S!N$4Y<+98mFL%*ACDr;(3bA7K5^DUFS&fxF0DYB(F$I>
zwbtzZZF4AJLJRv@(px)k7b-<3uUZ|gC8N^rvnZu0(PgwfhV|YO5D6E;<)na}JbOMp
zZv@ET??s#Zq^V)@N{$G+R-bdj?pG;5!AUU7>L=m@u`n?vb3Lt}KUY)fwr|{OT3;J3
z?6wsyb7OLLo2=7CTRsa{9#Hug>G&En(R?emgclSokEq+~e6+DwllOQ;G=o#}dU4Gv
zzRn{LT-!Rb^Zg$#*Tw&{Zxf)r6)o6xsW`c-R<^Zh$qV2`NB(D<M06hkVSSf^{1)2Y
zVNdOd{;3V!=?(>P#^;e)7DY^bCdgWnN{iu~<(sf=l{AAr*&OvSKF(oz{5o#RzS<KX
zx&tqqC{T|i>VQ^OG@Gb$98-Eb!DWuVR8hB-cz+^E_R=<vFy&2)Zu;4Nt9t|@K24F~
zo1xZt)H7e_`sDdK`#x^cDhS(g5_=Im5up#O-v-1Y2u)5G1M`V~6ni=%ZI$`KY4!xx
z31lfB{qfAF+>(yap1#$K??q?>ZdtVHV5C2>_V27b+5Wm*B^V(0C@%=g`69NVl3kuz
ztff~*Ozi@vQn!2eN6H|0aUBf?2>E~#7l2jYFqYB9@U^^;!qbJ6(CffOc&`XmjR$W4
zzW3L6Yc)89tJGKR^h85a6--OX%EFrO3$$o#vYATD3tRXkE9ov;nQPm~CF2nXa_>@8
za&J>VFftrJ7PvlPTv=<GKnlWNt90TBY^fV6E%($PVh&b^#ZlkU6=|AE&z8(QkWDgp
zw&0OxJlEY9MbS}Zm*oGVW=k!MxMJEi$u-;N3(Ty?jYnS(>FA~4UnIqlWP(r)E4$Lb
zXhh{WX~H9EgsWEcFUrrU{Z0A-PoYVAIYUWW19wMFveTq>rur6jnk3Tt;-j_g#y~gF
z9cqP8UQmZ7GFY{S52BfXacNMWt(XeqKb)LpQ9j1tomvMEim-sj%KsB7G;5|$-3_x#
zddmCjHgK$C<)sE#!gFar7P^*X7<=fGBW!U{SH;JGR_7_F>#u?|-uCo~GpmUc6m%RL
zHj(H7$no|#YJ$qBl8>i{>*9TO&*-~@-zSq=jrM>r`Du4RN#Z9UZQcHjw)c77iFRm>
znnRVKD)rZu;WsfPSZnxo3~Q|6S+4y1jg1hlOyp0Tz0wPXbyuS!cH&@$5w-e;c_(@I
z8Y;odxe3~-_NPpi8JP?q^Tp~QJDk}TyIq!%vomu88tM>3P#BWf_%xl0pu#45_{}61
zI}__>HdhfdS3rPM2bKR=-;LL-7;-ATyOS$v99OBe>An;lJkY!{gd&S&xP8_!o@3@(
ztNK--0h%;NUU+=|Y_Tp(P1kiyG3HXRVX3>P6H$VkA?DkHjfqFI-bxEgqcEkM))~>s
z3OX9w@HWUnL#OB_1AzjuURX>mz|dA&rCoM_7V$E!S@nq+L0%!+Bfm!H8%T!{oU)?d
z%DR}EVr1lotd8|HtgOL+y1RqaFO*o9FDbF=ztgGq=97f9p($+O?d{gFXh77pSE-L_
z3yc~;oa)caAxeNj_{Kz}@XU%9Hd*djmQSX-`?(80?<F<A*x>zjCt{U?|K4>#x4h6X
z@&EAl)=^b<UHhmY5`w^{k={s1ha!#2rV*s1K}w`lL===#QE8-+5JgZyx&%c)=?<k;
zknWa_-&{QJ7w`9-an3mBkHdHd!)FtFv+sMYHRm<2z-|xjhViY6w@GqpTOYHbt2<iD
zw;GVr(K{jO{J}8i`18i^)ZCg4QO|(SUpkr39Oa6~&kJ+MjFU=URue50FhOchCbMi`
z&Y4IRWM{=Kw<5jCsI@awDP-@o6!KX@ZQFK%IaK0t_i?q<LKl{(Z*%mjnMnG2GJ=_%
zq&4(u<X4uRaWVEcj$YtYV|VkEkG1F3Yac`zP|U>lgT0}H@#A0Kd)St&g9&AV{dsZ7
z=*xYd>3pNxdD@#{OpnVK{A(xsT?IVrD(cA`rGzR0vaWoIqPfe*&XNcdW(ZlnbyT_R
zpMF%0iaL+OL#&c-)<or^2a0Bl@*w6FZDh~6v|6ou<&<LCwOhYZgWlX}zs*;i;mjkc
zoGOKH<HA@K5irg`W~=&*E-oNEckWWHnCaZ-zGx$#sEsP!Fs7U3uKhc;v+4H}PDwq^
z=wnM76FHdp)K*}TUQZNmHQj_PYPQVisk<;)qm!Y3%KCi#*3&(Ht}9bUs54(t_PjYz
zRMbC_IJwTj&A%j_(Pve1Huv)xPp!mnV#xv@8ixzl+_?K1Pl@i6tH(WsY4}V?s&DhU
zcnBwhcHX4KjNIu?BUx<b*J(ptt~T4Fe4BS6((oyS&e)U6@@-Ckq$ahRJJ0N2fz5wD
z1gak75Y!+_Q%5CA`1*cwh3j0Q)`1vbyHp!Jg^YmrZl}s>xx~w7?V;BA^6fygk@ZF~
zK6?-3Z7TMsR1})L@776zz$n9nmS?*6flN1Z5+~Krsc$gz%dNQ(;DWn=6D8EsOfCGx
zN?l;|aIr<ay=9qWg!|<^wU`mAh0K$kSApG<FSXTjKK$zd@XUtBMpY$uK}_HJ_yTKn
z)iQnMrjk~k$b--t3N<G}4}JHpC0)<`<V7!@16ji8tCtOvJk7}iIl^c+0&5s@6UV4Y
z*rbV1mA<bVcNgg!7cHl!n%6DnU+}&M0R6e$a@f<@%UYZ0^Xn1Lok&Kv?6&SbV)E5}
z3If~P9|~nEmik~W+dAOFE>H%2At{qD$d%q{t@nRY>LYQ_ccp67NXqZ{HEur4u(cS0
z!3BXBC8`7`-iK!vn#a=KhB4(nOOuURA(&F78*;5@*}Bg}d)kcOQ<z|pxC2vUlSh!L
z2Q!OLYfpr|I1KGp8Gbv>RjXRRbW=>1dDuIm8^Ijhdr2%|qk6Kc>ci%}M$c=;?iOs+
zg_}u61qB}a3CAIti(-4kW^_+}twYiCBEkGoUrquMHIMHvDYM2_ZLh7vyH)FH!Ou@c
zSvvM*#dyg#H0W-awyDx^bR}slZgdh&?H}#WBfHZ|;VT-wg#l-yO>-nl1V14>42=n*
zehoo);ie=_;@Dwm>n>7Ky@S}SJF#nD167vXD!L|j8?}A9@>Ve3?Qo}y-fXSaT|gAk
z1mI^@2uEG=6r>08w2#(yA;)$WGIcvCdF!gsRmqw6Z&p^tl*cMgUFMZ|rQiee=ENfr
z`o)^V5(l!F(cw?NXf8KGJaW-l^di}t{A^>`?q#3hA03bln&H(&sNsvjH@u&o|Ksw;
z6FG1uB!BUSUMa;1XHnw|D^D|T#tL!jV0PYrfqC_(i7=TJ0f}oa^)@5?;)4ucu~$}<
zR00W;nmqXMM&)b2bTEpnlp}f1f=GwdaB+UFNT?41aZq?vX0mVd0jUQ@a>T2n?44t2
z#;jqM&)2k*IVa3ER5v55u8|%uc|5GFTUz=9^uxqSG2FK~hkN?m>I$ZQ25tO_pL^E;
z($wwO&sY<p`tobIhuq{UfTVOgwd{063(x8H4S<0ukT<*!o2Gy@R&VZ}T33=E3+;ds
z!8}T>^CBl1(`jUVV7a{QDQ8w~v!a|ty08kdO%o)<K=*E-ozavW-e!8J#JYpVigw@C
zw5Z2M^AFvyqLL;2dkyakZAndXt~&}p>#g?=8oYyJQgkP8^cgtyDDY?8-N$3n8u^7{
z>ZgCx`%(~`c_CR<lN+B@TSH($?JG{8_2MdJcm#~d2s^biH^w~IhNgN&Jtel?(>DSe
z58^BV_%QiCWM_T)L35p`P}x|dY<{G?&|dxfpElOqw4+Fvxw1+#%9E9(bWAGHy`(Fc
z_GSE?rrV2X6F#{;Dms03d#~oQ>Ww8YupPR(F#Da}XLA1I>g=IMU5(N9#`td#j@+eG
z;c)Ol4ofjwybZ5XlO)w`8doVRIe&jm6MT+S0B@@mf6?PVK=gK~Q*?i9Po<J=khN=b
z?QA3AH7&i)#&*V{m@5r*8*K6u@ir^jYxkC8>QcVc1*P6+AtUZDOum5CSQNXJ78ykl
zoi;$%8$S_5ApQ8UHD%CO!a%F_XCni&v~y-EsxS3ow8W%einBJ4u@ds9_a>H7DDd2(
zQ(MM{-9uo#|2f*$h*R8~b(yTEYDmJ)Zpbdl$J3numdxisD9s!-E81%krX;onORH`1
z<4@h|&Lrn`6N6m%dPe0>C99Pdj@d77GllaUY1kk*kYqdcVbrTuv@Vn>u98Qpy#}u$
zTup~Ls<(C4){lNuE;r`9wGF@Ek}=hqz`Yy~vfLM-ys|mi@^D$+t@Uot5VCI<;alH&
zFf8ZFx@G$2l65ye_sg=RB)FUsH=HC4*Q8#A3`I}v{DzZstEVrYK|^FKMqZMivC}YZ
z(db61-I|PX%ya-}ScA<IV2)4vxVUoh#QqlCFgc$Ro4vxT&+fqHy>$yTdXuIRQSw|F
zC6uG=u@}E3_EG02ArIbqVRfjpkBd@`D1p)2@F*}XZM0zT51fDY&#Ha*^S0fp;$xE>
zyim}JUazUNsT{6bVB4WR*TY^v>og;UiAiA2&6teVXHr!!JY(fl`}d&}VJ`(C$*V`w
znZ-;G$QmtTO`T^-$*%4%hx<nFu}JPi2fMm)DrVF^+grGt0^jxLc?0=wfm5$EK4_o(
zETMb0Ep%2WH}KS50tO}~FIShh-;zwrdXKg7G{1G@uXW<IGG8d(UH@3=vf>^UKS^gT
zr5oFFilNb;fbU-E^6Cg3R+DPDn0nauiu<XWt)}4!yZNsGsxXlpNK%vtqy02nYB|6<
z1aEwS>A~Nw+_5WOnl{uIY-G5(U)IfBUcNta@6s0upLP#ks>#~k`cdn%+4qN5G$I`h
zvhIE(5GcvD`5O_--G0=C(Dgac2MeuY6t5(vPrZ?Rs1Z5Pgof}BB>ZdnDn=?N?;Vts
z!~W~M;L2rCxgLLnW~jb~DROjqanrl(m4WO%o8I?Z#|B2^e_~xN%6&DIR?g)-NyjUn
zm>Xo>7~PVhXia{uFKf8GSr^8#aeCn<Yq;>s<`K7ZcjeU=soPuG!|jCCW(v)qRUQ$2
zzw-LzOFZjkX4)b9^0!8EuLM(|u8fpUnOL8lVw0ea<6Y+njuM<a_eX3ycYK7WH8ef?
zfk3;dSwFNAiBHKG4?|DO?JS(4CONLm+i1v?e6wNtY-D~J^oAsN9PkV#j8E`(ryP^Q
zyYAC2S9#vF?5e40RN?red+7={8%Gm&O1u1i?S`34KYabu({W*o|I(-W$mI`NdNJu$
z|G@<)P=|ZVOQw5He<X^)^3dAS3&oZoBCuku&-AQN#k=)QXL#NEJ0>UNt~)VTO9q_k
zey19X!X!KmzLcD5KPpPiHxL+ic?$D{06agC-b}xiPM<RKOUg&q$F8DRy}*2Km1=Iz
zshxEd5oZ*Or41$p`rCi6qoh8K!uFdAtB$hta3et9TcV`-CL8uCQ@?oGL;elIo}U}h
zy*#xYeOhnDVp9J#^p6j@G$QjCw-G?xetYHcC)K*sr~((()$25LPaiV+NhwK|-%Icq
zTWGoZs{e~3s5_3BhiWsYzz@NB?!5#>>#re1AV>fGkT_)bNk8m5RYv0WuOFE4n6I4n
z|K}SHKN~dso6O)p2!V%R`@ittb<~LyGN+pwg}>sIK{)UX#}Y@0p}VllQje65rJc%*
z2M$WjQ*+&CvjfFWAO^US81{8kDhz&K+V**TZ}8pS>WP&kuAc_2z~>4HHC=B`Pc5eJ
zbVb^kWJnU%LjK;m@DCtP*~m1v2w1U`c<&3xP8r;1&quEIKqnHo^g=AX`zR@E{V3EG
zonCHY&*9hW4_;VA#KL-^L(1RsYAo|nL?zw^r!>8T{XPEm`=I`!p2fcX{lPHzrxwQP
zCMl^B-!nI-1;tD`piGDgS8Q4%O4&&<+lHSC5+9_v3{=f53CWq`?{6$5=PD57m<)K1
z?}N@y7-dO-DZ-1%P4rGXs;nKTX=VY542ks`q8v<TyA3Tb!F=9IJ{D*^nEdx>@5HCD
zHpn*TdNM*ez!Oy-^R>*S`M5-+G><rbCh;{(L@+`56zWKaXYd*c-^N1BV%5x$g(wou
zprZJU+e8Z;Pes`Qn2Sc|S~5Qy&5wNg;W`on7R$skh+I8?5*Q804f8utaJobYuL~_S
z+aOW#8JB?~*{~_#WK_GUM*iqp4>Xdlb*SliF{P9h6#u|!AO@J3V`>&PZDu#h_ihOV
zav?^t)Jq11D19av*JH0YAo%|dsLI|QGV}nHIic~wsPS~hmm2pcZPS3EbRjA`5e+qu
zmUAgxG2w+mB!xO5(Z`NBekYF7<XXb()cqS=u?If&&$rj-6YmarZ<u+uF|hj#og`?l
z4`GY~9%uy8QkQ?xC+Ou;b5zR;9we8Ud(LAg2ZF+BU`O6`-Jx-zY_3!Qax}8xy}oKO
zv(45v4(;sAcEKnb=f(7aF7FGKN4no$ZvpAV!Vj=UEb3Hd8Yg@J+zn3!QTwYJjuiU$
zMM&>KqoZ2=j6yq#M_cQSN_boMq`qI#wH}^u&Lwvs5u_pc31Sv`K3zchqT#cLe%Hl9
z+!=HS=H&*TjhgNjcVB64bmQB-0hV!Q7wXjSXB$6_S*<mC#4hdn9H}Odk1`6$IiVKb
zbA?<za)!u-k~*&hxKKr4!0{Hbs(%3_k^S;{t<AO8gcu$V7ZBrlKA{=0;C?W;FV*Sm
z0qoJ+7!L2?9wZdg`Y+ylA_I*WyWJ6WDo60V)I!F7H;m%PTU!a0be-~Rq<dq)c1FlB
zsBoqh?#E;hzx<dW=YLGhy^~kojWQ)bw3)pdb9DfbJab*p#mTmjk=XvW7Hpgz=p%+_
z{iv?n!=}=WGO-U9<SNc=J?0C%CAXJ8%f*(AFVE>|&`OWe#y+(~JaUFdk^v9W)FV#@
zrys5l5UjN4=bY^|6X$8qg|%_Uedfnc<zl*UZ%~e{IPw?G)=d7&$#Zd$J0_R(9RN3l
zn|L<B>z6y!0!1?z&^&g!)~dsz9vMvdG^NZeB&~$qLuE4hLKS#LC*J_c$Qqavd~`Uk
z6Eyn+^#95Bdt$f#47CiLor2vd?LNr_HG7!Pt!#a5@z`PSi07rC-$x3XmG;5ez1o*k
zHRn}-h-1#xVd$t-BTp)71~bjm@F(OoVUMxS)6S;K*=zqruEx2s7YA**?#~Wvg3guW
z&>p7C>;bwEtRQ@|y8a6EPszxP_mF7o{h(zbR^PYu2IXAp@oPUzUALULWImWx9;R|2
zj-dJ)u+zIWmoCG*?WnHFn*C&7c<~|Mtr8#W#%{3uF5uwq{Jj`HdVAsh2oE_5hZ^hN
zdarqo91E(R#0yr$-7Vqr+t+`8ET_sBvNoH0Qh{VOE{1ApOm9*Ywn?&Vt21Ti)DA$)
zGcNz6(JkXH3<{qG;ia7_wkIm#yw+?Yh=skoJ1lJAd$OeJPk0sNBW5wqDIuNr_S;pv
z9@*oYvmB_{S7S3++-=#L{t?$QNlU+;N20J71H6OjC9c*<`aAz7#I8}NetGO)XAJyh
z|L)Zu{oiQl@U{Q1+O_|?vq@L|mmKNLb@NYm8qcXYet?6iWwkhR<kR>+2K6^sq{94c
zNZ_DydK1$5@%LPR;ox%A^B>0O&6$Ri>V_FCy>a8XA2&dV)^p1{BU*AFu7+;@BsyDu
zxT-SWS^O=>!^;<w7En{>N(sLy&|PT|7xLi^cVu@$*p#BG$<n7gvpuZ`e=_ITjIF9v
zM=Qb2{p~^fZ%;opWAlRp>=kF;_rw9mj$P2PS!5B&=hv|b6javJ)J%QrKxJdSU&o-K
znTokIcQW+LxjgzjzvD(#7CPrIeBJhyj~nVQ4=HSp?YFaEU-f+HS<*5%QL*^*LHpKA
zw*|0VPM|ZoiYG3ml-3UtS02PEM})v>SSPL2hVRE}iu-(lnd((`U}77gbo=0+EFVnO
zLrV>EYl6pcKk*J?cE?u#e0X1^`qedGFYoly!zIwZJy|(`q$G8#q-2n|ue*B#!@i&1
zz`@e6v%S06srLtLnLpAs=)KoM{mZ@~cX^~tLGJQbmX(53cP`+Wn{43m<BHtjy*t4m
z!v1%0NZ~Iy<5F~;48wMriEyLPt2Jb#g+ggyMVq>hzvB~i4IN!Fx%R@Y%ke{YEDBQj
z0TMESG}9(?lpEs6IPtk}h0S-@m7F`-cYo`{?+Y#V38FU2_d%b4GI0u7zG@SYCJo0>
zbt=lLoLK~`m-Q#e=^n0ZHunIe<MC10bU^i0kn6O&xqK+tDaSUDnn>Rjkr2&^qA38*
z=|AdUP}X@mch#S@zs`wIQObiVg!>T5eyGYip#KUXP^P@lRa6f@yk60L#WWqA7hgan
zh>~*D;83~yg%abio<@sFl(&0Adqs7z^1$aL@CZ+WCxsGs4l`TzF-|)Oi#SBwE}Tac
z_=QT!#bgGQHmEB2I4XHY1MINww-q7%U*U6$*45$o(I{7yTLM^o@}+02_jw0tyeeXY
zrv6;5ztZnq*jgaBj0oyL?nzUN;vQEwIZlhk>K?BUplTy79jPsS0EshcpoHiS6>epD
zY~yTgc8G<d`n+D2FTd2x>ia;%4p93@CpFjLa!SED<>KjV@1xTS`BGbaIS+-hm2GcW
zJBy2m2bh5>ZW@ZNhR!=Vc-&aQha~*iZ6v`jfdUT2*o--cfw)>g=8MTlw6$+oB@6<P
ztCM_O`=^=A53p%}iPn%SnYcfD7)aulc&keo00ajFXW!k0flH_3Y<|hvJ`8e<XY?Rw
z#`69I+aswCg`P7mLL4s_p$OTsC)mcOMokOBpUJk_j_G84u<Sk$ifB(WYi28F$FN-f
zNZitkd0<6tDY-N972K-eRTK(+ymQ|A1RReyKHDwt0tfwizOXKCfNedjE0f*%Fp-@7
zf>&y}8s)e>4rih}5JW#7McJV^_m;*+!x;GU-%(M5MhSP|!n^~;oZvx9W8NMFE<)&z
zSVTr$d0a1~BgKn%8}Sqm9J|9j6m3|qunZ^G<XP~4^je+!SPFNG3G<wG2i`~x%2kUZ
z24%j%JxzSdJ2}Ats@@`Xx|nek(o`WtV1i$;<eopKsuA`XkfUprjK-6%ZvB>JsJH2-
zpCCt|l~(C%UBCT{5d#-t)fEez9KR}}b=vM?&HZSxKi<vN0je4#L^QLCIuZ_W2WUPf
zqG+@0X{5R7xUMRB-1x)uQA(X4>J!U9_chQOlRnO|V*Q!k#lxao=+!fp3q4Yde{2I*
zcMw^1a!<bqtC5=_A8fRdR4|XEQ}y1!gP&>o(siS_<1WO6NmK~M?pM9jx_wf99Ywde
zKHW$hokUqqGhU|0zr>Vjx6mSO?O|1Rgoxnp+n;P0hoMcE*eh>9s@H$r3!p%^7mS40
zPAFqCPIbQPsANwVox_gW0PnYzPna=%kcf=oIc(LjtiHR;vUnv2haoZ<ELdK@vmJ`K
z`sq-Xs!wkNPF!lFp?LVHxO)eRP1IDJfoavJ4cay(2%fDF;uDaEA)=?(G$=v}nIa07
z=Cr5p9{b(&RW9|C@i#h-UuQd%97&JeaiA4p#pLmlJod8)F@r$U6O;5fMrCG8$?Ale
z_ajEOi5<Q=pY}j^^YLG=Lnr<~FX3fZDKSm7IS=Ml#%z3D!g7{z@KNuzsZMvsx$O%O
zUL-ZDw^;<8cVZk<pl!rN2){t>#Z+ROD2+gUx`lcu`3(%IhSq5_SZF%ZyQd&@A#4n^
zoN=o|CquDaCLNU`7rbGvv6?Ui8Ysse6D{UvdwnTXOSzT%_mjmn(PhLr2J=E@dR>Sa
zAHC~C0lDj$e&mQ?K|aQnX9%w#9b)B3E8Oc&d(8`C>}l_sQVd>6lh8RI7esxL+9?3j
zJu$$B?V`hx@ZsN^@=Y*}%q(TKUM@Xcthx_yRRXKNH8%^^5+D-AyntO>BnLJvt~%aW
z;y<-ioNyo9eSaLS2lS!(>}{EyE1V|qwCk4-^I1{sPXu}LANwr>^iK>4O~>Ka(f9oG
z@xLCpW<?0Wb^rE(|34mR5NP?&-+uUOF&Lfy`M`@OjQ?bJ9{weVpN{|A1G+AEW_~!_
zuzVEogZJ8hMZXrgJ$&`r@T}f^FXWQCy>**xa{x7TqxU|bp#3A<qYTW8P{+0_DB<`*
z<%0ED$O_1UE_phH1pf1iRf`{8?&#q6;_99{c<=ulo_C(U?k#N7=_qyepw**0vf=>J
z!c<8Gi!P%h;!pt$t)70&Xi7lQ&57hediE~;Z;~{a42hFX<fqr2LZ?T+^<8f%sa>_U
zJ#(jJWXpza#~l6H5oOKLt{F;Hhm~!E9c1j}7Dt*P-{;(HF{&+RFG360ElvGzIzS-i
zG;D$zz|+4sfNK2sy1s7xKZzl$$LNgMz2U5zhWbKX@2#d9WQAIozzz7}+8lMn%y~TX
z%rImh>OMc<9yUmOq8aUhml7qiV{$cdX;vrsap#noDLBeS+w!GYKFGU%Db;3>IDD(S
zO7O+4zv2-wABLnQ*%>CiTV>r30}8mzr6fsFIfxc<0B;xr&eWUGH#z_Z0qAjFZgf{N
z|0KY=olft8u-iSP7+iyC)wzS4KwfsyCAnL77C*Z|Rz+3;#BVDeAK~~(Ln;_=kO=&y
z!({LtpVB?+@8Q<K@oY@Bc$<J@{~X{0DAr>PFTPS6hJkmWfG`ZjJB=+S`KkcdVbgFs
zx8WotrD%6S!+JT+Q-{w)h3zoE11aqf_7S7MB8MZO1vww=Z-G{;rNld6QgQ-G8V^JG
z5M0r!aIm{&a;py0+N`Z~=kVf`aMc_mcmzrY?%-nqMCpt_`%a)``w2|4yMT9;Jh?RA
zO$2=K0zzNp4L7TFUfA0bGAr5Y-h-S-lm*gXj5iNw2$l-KGn8%nLt!KPfucl-eX%QD
zW8DBL^^sX6fZ|$*`#ma`5`9=P(+p6rbW_$*E7LNL*B;PXb#P%58^j4X_kEzVpZ#Tl
zOUpJwhy#jeK0$=<jla$P$cHim`t)Bv>%V|WuT*LYugNpcjGIFhhgC~mE%4OiJ_@Qh
zhxb*0i02*3pGbDCV|1sL8rg#&I1v?m3aI@A0W&cko9ts?ca=kA0lFdgYlrKiNUr4%
z=EMTX?~~XmCGhXoBCrFlf7Ij}QW=p4$bnv^Ku+hzKI?3{VzkdqG9A{6(jR&@AM|4u
z=&us}sn*%0#ALW!YfE}@e|_#n#oqkQcgRK29GsOro#BL^FA!<l8ON>ZF7HCEsSV1O
zJ2@8Lf<;f2P{ZkRcw0RD3;ghRLVRU3gzDJB#?)QVr==j+2jmQu>8LN8TPJH`2vvGa
zHJV%D+}8JU?sCcGqKItutt35e-oZMl(eluKZMZ_)Aqa(HA`a-1{G1w1i<Q7Xhm|nq
z3K*e~T{<sR&ET!XaCA<kheQEW2l};dbIczo)<-uPm|R07xfv%J_?@!ymBTh!KxKm*
zR&Fb(yp{Q?iWI07C7{dWi5t|#p`2cfgJ~Y)d)`_v=0C4_FN!PJ=Tw3$^&RS14Hq7O
zQPOv4`S)mDWu2d=QeeH9PGnzTO;yfV#1;(At~%T@Yh#=(s<;2+u^T=F><4pPnjEFi
z&)BYLzjPCSiJHZtpSPRsFf1IqaEoh#PtPT!x6JVmxNITKitE2yvV+oYL4g(p)!|38
z7soo~!UVCp4scS<ctC*E$_HkvXk-Y1RPjijm<$S7%YGq31G4hl$`)CoSJYj1c;8$Z
z%5T0DFj6{>Euu|J<7A>@sSO~`Ps&;V@JfvI#~Miyn-(Y8Bj}jZQK-V-*<NA$N66dF
zvT-+zYKei)HcoFP=xo}|8-^^s`+~L^S%BgqagG+OWJ`$CyV!;wI4<&jEFa*X^jz@9
zbwH{-t^yH{xk7Zrq;b&{zDm^46MN-!%zuS4yPACTo>=MWV2$n%$bAHX7r($@$MXgo
z?&1+_Eedvg?2vy6RT9o|KPE~4$XXRzy<zw9H(!OopdOabYZf(stv)`d4bQGV_%^|N
zgA?0jF@1eh)9IVh!>LPMgCJ#0ievdoU%Ppcl3~<T2WPK|<?zSRlqkufCFVALH>~=L
z=n)N^36vcf(m{5WK_XRRw-!J^=6Ph|UXT2{u?N%p5prP+MF3|^wx|=Dg;au)bIee5
zG%5vm9~shWBg%f*^Xg%nAxI?QiPPggPX3iOpY(B&zFE+mM@T<-Fo`mSnTgNRBWryr
z>2i)`^RzFi9Gz#rIn)Ms>7|orBIgj&30xPlRmgQi@w5~2f+3Hl_@@;8vfQ^1gX-p_
z-e{kmmvOE5V^;0?L}VWg@~?T^3PtW7pI`y5-VK<xeWT)QXL;Cgwm#W%>1%7{n7dyy
z9CqrPwJ(QIbX)DRamQQz=x-FL=Ng+aZ24=mpyemvRJ#BkC7w6h<@GDSrCjh69>1dz
z=uPrT4n#m*sKI!0Z{Q`L5iFpKC^N0XnzLq+cyjYPD49Nd+RJ-PsR^8*qJBP?z<?r^
z9uxatXKoc=D2yaYC|#tt^of{A@qGwzRP@@gH)mILW0Xv}0vGPiqkIOo_nEh0ADmpC
zhph4z8`_G3rF!w6yc6>LV(pC8rSw6Q*scMzgJNF9DT!1ucwjtu4W6?5z<Tpl(mZ}N
zOrRafQyoA7)LaQ+a%T_Nsw0Z^D1)KHD3#_oP3Y`@lT5jX`K|K`c$~dxuI0RlA$jIe
z3602GG-Q{0B!kTxEjJsqdd3pl`{3)XF>f-{rXNX=b})@hMx9f?s6OC&sngT^8`L#!
zbQj%{ExmkQOY(kPRPkI7w)+w6Lid7&peIki7R7G;tcy1E1$p-jpQV4{bDyUn;oz+}
zezp_yn+LGKso7zMHQ)U8`^zUsHl~<PAE=hdJd(cSzjF#5(=pFHPd$7^kd_OwW@EA&
znJizuXql4jB5r*u+;>oEKOZb5J1_O&r%PPF*U6$~P>V)|DeP~`=BgOgzcd2JslpDe
zJOwpENcU==RWExcmk0GhI?{^vFH|2agYlK!XMcZufA_f<l#k^A$gI1@&*d5L)3XR>
zIUt$5%H~Y>=yt~KC#70XE*!gqacI{B4a$$3-FObg-NxHDuD#jGVpv=%3t`-|P1yET
zv)I<V7Ank<I?8_l+MyS$px*f@5iqm)!Q)T($QKk<&y%opQPy5|dTO*HphzCJ{lB<t
z=PpXlzH<gep{HCluf17<THEk8Vv?}9|Iq30<F-MqVMC`2N<OFi3R9#-+4CtLBY|57
zRskzA5&a4f@u>^WUj?slCDMd^#;LeQOlxaGE!1<4=4#UG^;Z!!B2q)5Fid90H4Fsd
zX(-odZ-l<GVV2wy`bf7jC8Y^XuQ*CQ&l|>Kuccm0X+C9x<NXXUv_6gAB~aJMkK1SC
z&CvRM8G;YMhZ+C=>7p%^L(XzlvSP|!2+Wa`iLk>AijwcJg!S(ir60CLZvUn}JR&l`
zCv9<k<A3Cw&%Bj%)wG}u1$QG0H2#-yehd$9h2}o4dgN!90&=FIG0h6Vi{y9+mt^FR
z?=q+`yW;5jNN&{GV=6)bm=WFs!)A32!D9XO!r|E}@|sx1%L=0*;xqpD{MRWvmcM&#
zd>(4GChGlKW;}a$Wvo#uAnvLajvD7hMY{A6qLWqLYQ0Fx`7+bA)=B>TK$uz%x3*oM
z4TuM}Rc6u4p((m?x+L+YCbfk}MUHRu0arBpQ@u78OSwQh(7j$}RoG0-9|Zx9DN52@
zHM%&xZgl(dvKejw-~OHMU;oSgQ<s#bj3;f~Y>4T4hl5Ct9~Fw|4DgBeu)maNG&u_Z
zZL9SUg?71fOm5M-*Sup!UbTF(&N_z9d4-!ylz+9jr_g=Kto8-Wl*Yvt^8lZiaI=cv
z2k&K7SkekJHGko7;g>^cdI^aQ&Pl|!BeA9mnrU*F^hn^Tyxf(+;|(=$mKA%C3EcV}
zV``uKM$r`e>ibZ~J@#AlacKcn>?Lp5IQ;@{2ic}lzxvKlO;*qK5GUDxD+Kdn6_nXt
zN`Adn=)y&)KQdAumbxf7ZbTAL&mA8Xz^dgocYC6o`6yn+n|8zeY~nedSFyuB_;$<U
zB9%m$COSgN65LS~DQcS+8bWXc_Dq?hEN(5Lo-d>#iTsWm>eqj}D+vUX+edC}^7Gd2
zg8*KPhf4swe)@B&Du#WWVc@W3B1w@-?DM>|ey;xSt)Yw`_4%zA=_A%#cp%hL=H?fv
zR&njgGgpTl3!BQ$iCk-y8NzqiE^?R-GrgHZ-Trsghj!rka<F3o!EKIsy;lE}qGhO{
z<Eh&z+ZlIk*f0?#Rnqjj-8Ex2fR|_=CbOMaKXYchCWtzU!3gups6MI73OPwSk9hj=
z`m_P@r)!R^gR)Mt-o`S-tEs6bU-7ChI0zO@h5b>xbJq`}-hVelE2K`6yMA;x>!ufU
z#*<{aVxFUB*!kqm8zE41#If*Dr!lCREFAN)hn+gr!$Ltvh=qvLTU)B0-9?>_=&Pi&
zic}5l6{FWVz8Mtj)%nWDjx_NWWD(#g6A-xo9*L@4<I=_JPU=C>!l}+ym&bZ?_t&FQ
z5!VfkI4M4Rl_RPA{nrUb5igh}XPeb{C%TenHj&;bm<_DAr{PT0gzE8j+t_E=Jqq8m
z<el(2j{92)DOc{Z&2-)rbHSIM33KjJB}K6xi!J3m%^vH`x6Pl&wNy*lAOhAM(uq%2
z7IrU1R-?M#)Q_Nq{aXW6*s;CN@0cs)0bOkG@Qv8>suw($ZlA&!RiAgeIb`LW_goR!
zUws_9t#|)V*>a&^4A0-4ca)tO+v>Emb^LWib;7$d1pYB?M1XBEiFc$sl00PQe13b*
z)?yz#DcVvcqp1@pYa0vFewapc3Y}Z}4OWj*8p-p<L?H#YT;;h{vp#=IJKaWIe^q3%
z4`*H&Yv}jtiPga_?CO{-4=v_n0hYLXQD?&g!j>5@eJpa376a#&cUR{|X{;EJRzyiE
z&J4=qYi+(%iXl9$oi*#f{6sO6xijT**(0A@Fv@BpKbsV>#_9Iy-kJh30YIVID_`C$
zVuO>5=cN?LMIS{@ZD2|NK@-wzWMhZ#OngQp%XCX4!~fs{Bqy8SSUBF-)VCsVlV)`+
z%vSuFAFD<WUJ4stVwr-m7tH<IjsMs_dZuj!*>DXm8YNQlfsn7zo$W@R-zKo*M&9%G
zU5F6P9@VB|U&@YO_+#8dR5|UOEv1jXLt(^yoaq_};Vd)KX!G`^BskPCEYtEqs(&%^
z(O?|T`^$YNdus#lsA0QL)JWIswP)Yo`Nl7l{`DOx+cO;<p!eknWG0>#y)n!`S-Yud
zdM=t5T5?oC^944@k)0v<jMAHO)BnP;FH>o0LdV0+PgWv#f34w>WZkLg#F}y#&-QPg
zDoB3+QIb&PvR>vFkDo`5(!7aYr7!#~Dj<prJZ||Q+5MUf{a}GMlHlj}zz9>;_`2#Q
zm4mkb>#6~qt<>=O3;u$FUyW$mGkVUimtjgnorXr*w_kl}yjZXEq&nD{X8-9n_ReU0
zz?7|T$IzeWr1tc}VYMgcqOaN}<Cx7(`k_)mw=v7HAUZ#pgttCN=$vouOP<oGl@a1x
z7Ez}ccVDMTe=UsI3a})|f7s%NPl{9?<5l~qmi{X<n+!&GonT1zcYuyLcu)0Iz^W_R
zoD9wb--V>lyzJ&sk=f$!>F<E37|*8T{m}n-@%p5Z{_z0amGnuj^KpDW5sjy@y0rVb
z)87jNURG#2R5?EG0#ohCohB%b72;ef_j(d(+Y^th9`TwCp+%lJtnU!gy*Dnvr1qKZ
zPR9jz68oSjY}Xa2=?oNKSgC&&$wT%h#x(WA{K~rYR(?v97pFK^K1EYLVR#idJYhuE
zmQK@)6aH0cbeCMxGD~T<?epR_*YY2XRR=~<$swH}UZ^y7;pk!wA@1Q$Jzj%k@VQxE
zS%!qgG*j<<zUW+i^*rU55JkS8`;NrSmkC74pi3hCL$LE)%EB_mz~ALoU4F>1;ZxNl
zDpzE%(&@~`Zg3LiG--(}CL<K7D7vA?=906&>qKRXf<|vmorFDklSE$&i;gTse$tjS
z<3w%y!IwpEVHN;JGqh9Wx1RV}m~4^z61&iItu~YN<o~#G>clN_=SQd(b3k?-4?jk?
zvq?GXf0|wRT<D>t<OgnDcO?=ZyVVYzqW-}X=C-@Ndk(OwPgJ8t4u!Zit<%}kSBrNm
zDdczA<2=r-mOIR*L{&Xa*@qU|9%Zvw_|R5bXNk9$)@w&jUBoS3r@fA|U3lduWI%HC
zl=4}pTO4;$+8`Q=_Y>O=XH)!sLqL|^--xrnEF>p%xh<s2h9Pv^f4z>ZBmcxBx{Dl`
z?ksn$w_Z};UfJFD(;4Vn4Je|=Rwt3!VR5H9S;^x!$@6|oqz?v<XQ%n_W{?-LaeX-H
zSm;4PL^n=HB7${Fs={tpJjM6@=2^Rl+4Q5PUQVXRmyVGK1G$7=u^Lat4TFEW!Iq|h
zM6Ohu-ohfv{wXW*CG6-fpkvMWB6pQksN0VY;HO+@nP27*>3!#dDAY+-6#y@cll`?m
za>I7c<^wXIlaeX_agVCRG>LOxg-fm{g^M!5?(=)@r*f3_JW~(3mVy`;H+33Ljj<Ng
zurN;V=Kgs3M_!NcrIV|<DJFw%W%EqCETCTw(>a5boigdazr<<W`+Yxn#FM(#jjEmD
zpdG-ZIp2%2LlCM}ND(5skT|q^?KdkX+4UMUF6XGtaRVVz@6rN`s_|m+)(k7R4TKhz
z1FZ|%w=8XoVk_{;WK+{m-+UTDh|4-=<(~rst}PzIA()!2E?%PDwtfKBgKN%-H_I@k
z5!$&p_KjGn$S^w6kqg&{5|f2v&buE=62?UVt>Sap85`#}9`chuH&EO;=VN*Qt4Y?r
z2I`Uw{V%&hk@IqT@9AQOr)v2M0zu=oV#{j^N}|d1d&BQ_-pusKl1;{I386AIgP=vw
zHMKAaqKrf-LZyV<bTYZzYg$%yQ?u^d-n8MQ#64&|+dJm}(EM&cmkZ1c3b!QR4;bzy
z?s-^o)_j_@UDL^?P*AmfLfxU!csDHAL*BVB&r67kk@$X<Jo}d4jDc&e->8mV_^1v!
z>t~T1megG#yic3%*yhW)G?UGhVBy;-K>_k3IWk>m4b3CC%a@Y&bGU;hLxj<2tboD^
zA&_Xq!fIn3NM9%Ys1%Vmn5*17mFUMsA8+~XyI~w$5cE;Sy901hav=w!*}>X71v|y?
z1M&Ay8T7aD{T)-^isFM$;Am1{TLptpId&zP*op9VQ^Yc#x!#uy_G=u!-C84bnmhx3
zgi$SLdG9}F+hqsS>ML7v5sq9HHzg~0DFXET7a3EfUr-3{$#>(|rn3eK4-nc@xdd!p
z5~0xIQ6D{*e*B2F%+q6x(oQ*L*DOBd{pfEfiN5y}I`Z3Z)uW9=oPy<J=nukuVuu7{
z4x92A!p_*Mm++g7R{}jxONhH!W!5i$Zd+N4InoDn#wS`_e3|nc63>5`dr`a>P%{3>
z>&t|doF4#c*4p6Ez61gy-ARb5?lM1fKF=<huvcmszyJy@Z+Yd@KgID~^MN0Jq~2<f
za%xKfU%K~uyxlt-Zh$(%Xz44=r(415EZaAB+luU}zy(<}F7JYwUj(%(gZ5HAeUx-x
zti&$>roSV*PjB<N>bopu*wBEY6Kz`Qj>J08oSRTfY#gw&QF)MjLab+kYlQK2&QDUs
z#68g_#G5{Id#r)EyKZ}$A&w!KtUPO8>6(o4Pnf4BAaua1Etaf~Ar|K#&WMOp(vX~}
z3j%=Etx{GWDy3(y@53m4a&Gf!Q%A5qslH_?AR2{7=b!~_9eUUhJ2geaVv#Pq{RTNj
zLtkgBllYhP^w++=5>my-Ezh5^`AEueOuKC|8c5?aTO<YRE(ZMNh^4ozk_S^!lizF?
zQuZ!R9Rhh7G?=PD%8(;F&=Zemy8XEvx8m}2=waqv0Y()AnWka!dJ0u}NoYItzz@1W
z!44u6jTtB^3G8}&p>4BW-UX^hHh+8A&^V}Hn)c~-={B_~yD(=cg&Jre0NFQQTr~KW
zT$W+@;;{&S7fBw2tvs&0OT5+1TMZuJA$Kqlj-0#LWa$?IU45dY3UYRXjokK0Rl>C^
zoPVhK3H6s{Y-kseznsI;@K<A;3iVafIwo&Dm_U^he$qdov$BP(I)s)VNq&SqVbW0X
z>6xSRzz~Zey5hqIGYskF8tU&z`dA*;1QBN`7Jv;n??$k+y}DF3hV)svUmoc&c6O4r
zl+Q55+q@F~_0+k;CQORk{MOfF{m*N!d&A&i<)HDA%Fh{?<V(YJ;5%|g8JwieP#)>$
zN>~FtDA!a``&#jdz2kcr@-z|hTLLiZ7es6W`=`TcshV8<*jB+ft-qxBkEbjtD>VLW
z5=dOW5^?tXv}p<elhUt~oyHT0`MzZ+GYb9|{%wPHrHCG*w(Bq+*}CWK%g^3Q#e${I
zjb1V~gAQ8iarjj;z76EgS;j}ZlLRPRf8DDU79ZMO4uQgBD59)HaY-lXPM4Y|n={Rv
zWKS}e6Uzg<L_fRbQnpR)JWfin?Ty(uI&gcE9@32djpX}<f(3OaoorKxC)0{#F3RG4
zBG|>g+yzGSnTYea%vj^S0{O_gBI<4oWA8H9xLeOjEma+bm~CP6#oMecBn*?3%`p46
zjOVNZj8S&5AO|2E91Lm5n;u}YTVAOd=S!UkWAF}8t*sP2Qn~SEF+Bxba!kN_w+kZJ
z#Q8tXHw%AX!f+N?snt0Hm^g%q^XUFaE?Pf4U^K+vlvgi(HEUe?&ROF{+sfSH9+Ry;
zO=cthgjuUrF`Q7XTL!I1-3x}t?SBt?Jiqnhd@s*c#xGGfJbvGHfXT$PlU%&+IH;82
zPH>aiB-$p#o#bd(pzB3tioFgfZW35r5}gaw7M@*ei;vhTcmgDz7}<u4F#IvSeKjJ6
z;P7lNCT2=#vAryta;$>5hsl1y!jTP-3gUulOsDZj=C2QsN)HmSZ~P{d@#k7<*jCJ9
zSCvpN<J4qVUXp(#fuj_zh~Ny9#3G9-hcD2B&SrgC7m#_Y_b!RR?_dl7f=j_d1**wx
zryltmKS=h*%r{<nH)CKXvri%R-B>rMeM}cd+r=6odLi=w%v)HjV3v2EE0Q<Le~=O!
z$Gn)@Y-2d*=Nh~`3(-~W2Oo7q1N2V<hI`VQ@+a^zX2_=Mas(d-=*tokGNpE%TmLOX
z(S_4lWlfJftwZ<p{_-Y6YP9rWV37Ea(Y+DZ(=U{5C3>Ifn1m2aCNYE)PenWN@Y8Tc
z%-u`<jCp4*cTQX;J(f2o<5y>3N!4}sLYY@CQ%4&%&r813B}}J(bHLksH~+?cZ=BTK
z?RdyKNe2Ru?1ogW8~$EDA_Hp3QeCczWLUPyI#(M>7kxD?{KMjX^hV?O)Ch9!t(Dme
zEGx&dta?5&Zw@5LXZdzU!=cmX4=Kr#dy>!gbeXe|52e`Gd?Iem_~+gX>4PeRh1`4K
zD6DH(9M100^eyUATk&NF;ml*_U9<1U#!9dE*{phI6dfZNr{ZndGHRylOmX5Da)(2x
z_$dClJ=qK9ry?WR=|`kS4HZW`t0Y7#^2mrQhoJA=ibvviCa>d|>FbBk>j?bRfT%3o
zpRFVz7i$D9PPjbA7!66`9mQCM#Hp&BpR7M%fAF}`+k5`ZyH~G7Xb?xBTu6FQg2swz
z5z$D?ylj>kl&0dq3ML{qoNN<~ta8<q)Ko0yY)<7Kmf2hbn8NSRg;R;~@=k1BitnwL
zt&HBrzf(rPsm%=rZ<gsh&uKa+ZRuhM=_P?@{uX8lCG4;GYTOFyjC*L7%TK5G!g8$d
zTYUAHylDqHIQOS0+0oXW*C-2CO}~6TF7u7l<Ev8DpQY+NY{VS|4Fs{{@1uz?vFU3O
z-wcp)VH=Tq!J~6Q@$iyl<`x*beemo4=&e{ExM4Cv)cFj$t{wIybOLB1f>2IVpZ>CJ
zfOp@4-%;|0ZpR0IXU3(cu)40OEQwFlnF^Kr7_owyHTcjyoiJh_&m<oho217U6reiK
z6P-uah)&rj3+lE(;&*Q)ft$F|Ssk3o6DeUKj(>jYpU+*I4JUKgs2*O*?%>6C8U6dL
zJ>trnvpqcbTA>~i{P(ZGhWh`03J=d%D01|W^mX_){PPL#e>`AI_unS;=-LGY@c!q>
zUR7lRw&NCIw4-A%@XJiPkI-TqoTPz_I<o(4Pb%#22kwvoj2gUK$W?-y`ydE^a7+zw
z71HK`3UP(0<DKS<$O&l25i5%SZLn&hWcidE;;$e|t2B|3TbSZOF^q2CLf4twUw`;i
z5$hDG=kC^Eg9Rex!Sfvk1Z-z_j1VP!8-!cB8w<bq?}q|K!nOWA81av}9=9~mxa@yZ
z?z-uqAtFe`T^U6ja#Df3^D~1VZ?eu!zNoLigfk)9rr&-6Ao)8qf!<I^@!58W;>mRm
zubu^~wB~waxEJRt58o(9nu&uH-+j+@^EH^8fm3XT)~oC4-1nV#V6RI@V{aRnzv_SM
zEk?ejwiqw-*6he{KAWFuJWYwbo?jWI&5+YSlWuUe3Z(<G{v;x2HaaIMqYAh0>2-d|
z%vcl0j5C0MAWk|r(L$cwPN(m`j@`;R&%>9Hwrv#_{ynkm0B!O|9WcDo_ZEKI;w5_{
z){A%_5qRT@4~#Oyb-u)s@(AxJ;n?w9ZMnbtIgx!yu1}8h6L>!16^`ME_49(HzZEa+
zJ`c9|A^xYL<7CVX$*94={{ham2}B-*4&t3kX}TRL!|zjljnVuXMPi_ZY5|SrwQL*K
z*>~FUA{=bs9^a#eMy&GklllK5>-fZPh*$EMdga&BX}~nod>ak?5yzNixE0fpPm7Xl
zyh6awU6w6s^!zRj2J?dYk3v0tF&J`AjupY7BlHDqu3K4GfBPQntpVgWHY~)Kt7`X3
z(BV6Pe_})()8}Y11P|#O#cBbUkw1PLA@WCadx7?5yEoArEYOQ^T~)2w9<%juhVhZ-
zh<c?s<am|K>+8Ldx7ky~x=FP`@tGX1k@AF70P8(}c$L#)1Jgs}H|lojG4Y0iw)&ir
zHsU}r;yl49cIq!s9)CfbDD~J2Qr?|nOZ~F_1eam3m4<j5C@8dfpCU{KgaM!a>NvgL
zgDuS6+dM?+RG>3JpHh;fY_v9ddV4xL9LE%TQS3mE#e?}X;B(f?^+~OHfp%jWn#4Aj
z=AWrj6{;AA$~!YZ%L<3CJDg?c6U8A%IWwvgc-{c-9NHz?MJnMENC}TPMeCKYym>@2
zgRK2_;?)`OH2tL{_UNgHA$p)kY4>C{KiX+nICy;;x#BcYa?O1hVWG}ICk|scF919O
z&rAJiG>gJn5Qu<SEXGSW96U{(pX5NYMe^N&)5wb5)AMw}{`=d1A$q5$I2-WW(*c91
zILny|$^~15)BU}Fp?)eZO&}RP>@n71tg<U3%%66K;t?69{RK6mQM5-nYeWnv0;!IL
za1<RBDlIy<ufc$$%$cn7H=<&hL2y)LtdVsfQmhC#Qild#z!<X#PFq_0a(`nGLR7o3
zVnBa|H!N`r1HOp#pek7HMXw@nE&ffI@zy0lm*2kwbZ4WDCf)uVsYH|0PX*C#xiyo)
zbKY$irp+z-C?L6_Y5qDQSp7KXlh-5l)oJsy(a9LmpufeYd~I}lwuvq!#wVrkTsJ{E
z7@PW}4_#eIR*AhLLuOI1A6@$!Ywfe`5xB7raD*mSoiDG#CmnOXgDu}uQ@&r!G=vqq
z_i88}c~FBW+D*A08S=AO#89?32Tmb2654}=XtjG}7`b9CU<F_zOrC9t829VjW<DuM
z0|EyrN{}!!cZ8cy>T|f1FV`M5M`~2Evedm@_C9I>*Jn4=1_uA3-eSP;E0D5}me!2l
zz%e=hbS(ENV_OLQX&I%)v)i6xQYfhe>9J?4TT==3&&z6-X#qvTaE!UI7HK8Vq-F(P
ztq&;5g267qHVt=<<l47C-6yGgMz+J(EG5bRwJP3FK73O=!Z6|H&w^Rqjg57=sro+P
ztZqJ+qumKl;7-U{(mOebD_=-|GC$H+Q;Oq0>m%eK`!fYmp%0t|(Nj{uQ_i!NT$FhC
zI4D3r)6yYWOl{o~-I~~9Mcd%wr?)H?%>EE{(!&F8gT1s5%>w?0X|&!{EL>M|WP^d_
ze|<!dKaJ5zczS^d%R)5kc6i|Y>(d<(8h<5Rleo6r!C^1>Uq3T_`M(aae|_`+dZ6VS
z*?)f;^uz!5yzu`K#_<n<8T;QqQvLqN17f7&|Ifrb(Zz#38V7ecH=`@SWO@y@!?6@N
zC#MWSobvM1etL1<e{eA4hn@*`4(yY(QTtGO!&xf!(c7GvULK|c_33m)R+DYXE(#GR
zRq)IQoG)8lehRcn1sDOAdp?H?BP976M#+V1jXWu1`%mQ4&xVkOHF}Cz0KxqsL_vN=
zZ-uG~JM(-oc7H`GehB%$y07l`P<AOw)?YcjeIZrukg?uEY)P+gk`|gDNN@8U@o<5j
zA%7Fc`Nu-UHy*g+`~4<p&tm&$&${8@&Jc}xiAYC15FoT$2;TO}j)AI$SFKT@um;BP
zZ$)kD(vSi~+k!JHjf%S0x@YSmsbDlxF(Hq4NQf=_QS4;Ma(IjAu8OeL1%_`ne;8n?
zX<3HB_~;tEg16|b2n7pTP_S{eZ}Fej#Zd~S)*$i99;}kX>1wF{0~x5v#;pWUf)|o;
zMI!wc>T=(`5VyY~5Xf2M<|70tdk%+d<~#TRzX`7(vDpC|=$D5XS13Cdpr$ve=ufmn
z3m(_@7Y+q9(L&C-#%tDMOHhzV<prn~Uie`FG2LA#L^?DWSPGmdeTnw8n*mKb$tI($
z$1Rj$b9?Bl=gQdJox`zmhFv^GRPxg!yRffL7#7Fzj}N?<1-9JCmRp3}UFeOjy~dA7
zrAiTIo&$ZA5y~A~4Zb>rc0j}r%#lukYdF2xnXVBxH#>3`CAcVK*1EgYbCeYNxf7iu
z0W!Y{7104*g|LI{CQI32B*-VY>%N1qchJ^T4dd_tR;R&N5uDcmm<Qjk+X6^&Wta_f
z2a9bzHu}(c3BvT!5lWz~3w`0h&w72VH2u*>Hs5_CT&n%!1!!yTCj$i%O5tXI>iDbO
z@ICx;(4tI(|9QjeoXM@CD3_0@ENYR#w^M;G;VA{%%ffk6lQtI9hd~B_9_g6?ICr}?
z3ker4L1jV2F?E$56S2*HD|BuNxI^}q^ai?1?hztgx|rl;2iTs~5QS=AE><!6Ew#b5
z`2TjeRG$TcZ`JS|ly!6|0Sgr{ZZGr;yAbqs>J=79^=e?v`ADL(6ya*fbNKd}zy;~n
zR@T?PLBlC9(>cpFidb5R*0x{yF9y1Fgi>o#f?-yKdYyqF@sxhun>D`m8VJVeLIqP{
z=OPTO=}3OgX_z9beFv0Rgv>|fxnE3{(=$54J2QS&;BeHwxduY@iJ*YZ9$~mMcJH}S
zDO+o@0bnLiSCMV>370?=D1q_ILwRt>&R<yEn6&v<K*IqlVFiQh*tHv9d|s@O0q<%>
z&&z=U?&6Y4Y3Us)OV|&OeTeXqeI|kW-mI1RR?DpVeU)f~YryUo*!@=r0+^fs#YM+Q
zT=e=b<%sMnr1;Vmf#A`41_dAd0wS0LpkWSZd`Et(pf>+#!c1Y+mGhgBGAMX^f}L>(
z@kWzXzb@a&1VX({9d%up3ajU-a5g~gUDkC_l8&c<Lr?&#8dl(OL&D_dGzqr4o=cFk
z&O39UqojocyR3|Jd>q?bN_+aKGDmuh=*jwUwiJ|7_vvdTU5E?pApV@;`%lPRo3iwR
z@?l!s+Qb|<oPv0#Y|k<o116a(uOvM=+<sYDCiYqu8|e-p&aVsZ+E}GksPN_N2hMfl
zwUzW8&*EtorR0&k7O=!k2@AxA<Up!|m+yrvY=@qK7x=g&o*6|xu~Sl&5M3?5-4R<f
z4P<-+afAD~F<)5XAN-a}0Y4hkZ6aIYux4}-#Kyes%gs}k;>t$b6WTwywaxlp?oCxf
z75Rnvi2j1?;mgw96RB4bv0qStb%@eqlE^xkp+e^k4?dcF+*tC*f0pM+%n2cqhordR
znN~)_hVzS^Z&cPFyx=gG!g{{5Z-412k2#=@7yxdt$%&9Q*sb0|U_idmNmE?fS>mI^
zQ1NMiD5h<Xg1UFY_LW}U@p{I3t3B+_VS5%a;J>BNZ?h>xTsIFZVFpxLKDinA((GE#
zyW8@ipWyp5n*g3wTDsM}-Da+_duA!0|5g!Y+!E4#0B=Ao$=Bm=qKf?kpSv9a@a`$E
z**0@X5FAtGYEBnpSfA}X0bS8k@XZ9P%3*IZps>lG$JxNZqZm%MGV$%x3^7esHWHBp
ziq5<Vmv0)?C-68+&!1YvT9iG{ulwNran%p6uM1(_9vjt{bDgo@`{(G*u)y9b`QL5h
zf1KtK<fPv|svS9er>Xwe0sg-p`2XufPdmE>=Lx@0xjLI3?$rP2u}wnTl4T5cJwRMw
zsT6)1`#)Z{YV9;cLv4fHwhK-i3(VKVEVr6f6oC}VAexHp<;Cg-AyR&W*%@|^+QruX
z%Abq6jLw$-s%;`-cdpzhU#`0YPXFl$n1b`aQfWl09v8qS;cWB?($l-3NKcx0p^~A2
z<7+Obm4B%U3M)w<YfGqY#)A@V8(6%iTTM9JNuoWyY3WO~L!*07*9CvQ%ip<25ODGB
ziKz|KF7m%5uJZrE1(?tGwsHQjxa)N{qz?AUqTe=4J`Ay)%2r-08$VfvWwuvQ)1m9{
z$z=QhwSY4avI>&2I_G`zi5sYCKMXrTXEAC9%e{;9KstNKNkylI!&pN^+fgN)BiY=8
zx`GPtowu-6%b9~HcIyDyx}b(KA)1D&{vs2wL`ZKd@AOuz7o)5W!|pyFY&W#D`X~Ne
zR+!7H?m}K>2ffd${5>caQy@-#8eC%>zs~|@@m`p7fbMGnXe}Hd3q}(~*W7)ISy~0Y
zcnmEjn6MU~RN#4dK1BPB+h{_4!NgkLSIO-Btg1=sn`(yA<Onh}L{0k|w1Boe);56>
zlRWcH-mhCrwST5~{7FkP#okn$9DC6RoL;?;H-2@2`9xIm`}E#^@ZK-_cAVdKl0Rh}
zsRfW+`cQ5B5miJVnQX2<*bPDVILnEN#THkfcQ46WDhk-YJSk#t!`i|evo(asRVWdm
z*GaF4D5&==u-4}ax4_gX`Pf?524F4QR?Mc5-S{1bIeT|N{__s#Ly`x+P_i`3^ZicI
zBa|8x;a;&mfX(Y%@KQ+las_Bj0H4X^AbXEk_E6xA^7kj=Jr+DFJjlV#?q&2%2{%Bx
zW{Rt`KE-a0UBmhV3|K!6IF1@9)HRWc77U8IoWtH&XKbMGUCmI0t1SHbJSk7Uya#w`
z3qEf@6Of;?2NnFsk!&r6`r#TFQfU_}7h$YLTz1#KYoBwl960`mIpPKJwbVC(j$sd~
z_Wr~d3FDEv%=e9YiRLVqM-!^w0Vb$RK_j=P49=DLz3XC`)=OX~ZE8wdxE5G@d_yuv
zLeMkSw=Iv>Pue@&sQP=0qO?RL6%kx)uh_|1v}~jRD?vJixP$;N8r~R>5(>(Wtv%q#
zI^7bY^@-f};veTV_sPuIiT&`lrabpG`&F2$o|u|M5X)hF5HQr<!m^SjS_GlNwx{OE
z-nQ3fi2bIR#{ra|t!hW-?oGXZHnG9kc>$Le3Hxa`<<lWF#;Hw_Vzfnu`X<nde+Lu)
z$l9={O?`Bsl5Kh^5sc}sj2-<FO$7D(bLZZ5eY_<1F5m~<nuaY2BDWhqX8}6Eg5E7J
zj;EY{*ds&0o9>q)<oJP2!af3|DpqQiAi@nuG-X2<?to;1>#z+M51HQKwKJG|LurJW
zYs}11`i4<?fK&Jt?d_0)B6WrdlA^L+Kk3li>HPhZZNLY9j|PHN`pFi1*xMd@Q~=rA
z?qSO0D8L*E^ScC>@?!fC4hJ4Oh8txbu6xmSwm-3j_NY}=<pkd@|9O-+KS4P(n6Sw#
zoAUE$&L3p`rO<jFsmfj)TdzXme=Yf~vHpoy0mo6gy0M4;oXj78>f2X^+<J7eeg#vX
zc{eJbuJg-nBzc{5uJ*}4u__ZrKgmBJ0L+O{t>mTglC1F5!K7}YyK^%qH`!6_qpSt6
zwGWz{;!)Ir=bW{(l^HK>=N8*2+bBWm4&r!9{Jd2SEES^et!WlTI7AU{JPK!8OYU}v
z7-1{OErdx`p~5xU2IKsl7~NW>ub-1549|=O(eyqIrE<7roFWlsx{$=2d%ANFJO7ZE
zzE2nXJgw(2-x<*Q$iiohV!ksO@4BEyORP1)xe#a)+$OkF0(OV{vEt1~o6I?curpK)
z{vKhkFVq}rjW>Ak=^whoP_7M6CFw&^`-eLU)a1FTU#a$t%iL;9mVKu8Lp@oW=JjNK
z^+Mixgo*Z*suZ1`4<>G1Jbz7sQ7)Ru#)}b<3Zc-zhTk2c!DoJ~=L-%-?>J-5=fmbd
zahw2EqQ87x&0fa90V5wgF3YLZNAZ71JL{+@qj%pcAR!HcAPs|vG$;(+T@oTl34?@$
zbcd95w{(jFN{4j!03t|8!=Qk4*WIt@o_o&k@4J@EC2L?DX5M%2{XEb2`}tBZg-v9M
z`FQ?nX|q_X+7&<|GU{@X6QiP>f3=3R!)=v!-Zsg<>IWX23`m~eI9?E$xyBp+$GTWh
zbfHkvX006B_g`i&r_PbA-|I56CV~$(aj!@56sG~7!1=Eo-;`uM^R#Mci0QGpyVO}#
zMifLBm_78iLK3^9%ly%~w$hRa4{CMJte#IE(R}o?E`yG_JO;6U4dsl*v{Qe3lob(L
zZP9WWA5_xdLsoO!N6gprQXhg^fzYgoaj4<7FbgcB2VUKKQ49HvTTnC*By`Wv1zJI@
zRfk}nk%1~OSp~P>FvT=pQ79H(UTJZFi7RM;`O3~=TL`0bGm>e%wHaKXh)zT?qjN>J
zny#}j`>^7w=uoF+C!VYYTXw&!1R@b{&*d-{bGBgeuDxU<&)?NRUcXLaO;HRvkU0yf
z3th=Z3qOQzJWJy{WH!tGZjNy>2aFC?I1%uy4X+J-;BNhzu^mY<@<EM(ecU207?`>V
zEr_3F=x>RGhM|FHdZb~7`Jrm!+QZp;_beshkKuBv4JYA@w$JVfMxfa@tW4Hv%QyIJ
z6sMny$kC}E^4gMb2Jn&Jn+=cOuIA9Y0$N(@zbF02ET)ZOJoR%miPnUV%vTb_+Z<>p
z-fJ{wZbn{(&sM6ADL$Z=`z{vgM4YJMNwajxE^pxG<BvGHqm(GDzSlf{b!vls+RdAV
zUxV;Ll}#K$?Saj<RAmWc<=%PS<sv3QWZEG20-LSyx>q%;WG(w_;5)U~c^@~>FJZ4z
zUg>*NVJvATg$jZyJOPkvk{Yy!zUkim18z&tT1D)Uu3kxQ?xd(b%&rqnJDkVI7V}M@
z$8RAVEXbOa_|@v;rvlJS+0IOQ@jE+t`v==>i7L(8yu(vSGFyQZ%PhJwPWl#Y<F$WQ
zaj{o*Z~>e_sj|*9Fqy;Mh*8%#j}f@+>*lMI1@RXSs}veEU>E#%hv&C!*<#$rV42h~
zp_u~l5>I~to5tByYU(}wDkwLc#<7n<k2{x|tG6(NmogV`1~5c?4bv*P<yi5hgJz)$
zZ^|ZDMI<dNbeSR=d&3N71ZL@aLyybFha4b_g!c$UWueNZi2l;Fuf&<@1!2|V2Wfmr
zn14u$6k`PJ8ZKUFL=xGu6K8a|h3rUjfD4L$Kx<`7N`fn;uzdmE42{n2%;e>S9Ym-Q
z%E+GM`^wQh-&(*Pki7LUL8vlT|FddDG@ROAgb=>85z|1B;c&@*+<v(_gKdyk3iDyv
z9tR>?1F1}8_l<qqm`)*5218=WdnLnc@hcLXo-${jf>0yA(7?DA5ilIr6G0i><6A<U
z;foPUYHJJWfy&K^A3i->m>stl%KO3W*dFgMTeMWAZ3hnJ?6|o%`Ck@P%<(E^4#ycC
z0&`nB%{NkUhRA|Pj;XhsXW-g^@P_G8gp&had2qJ(!`dZbT#9t>lhZkyPM-eD^|Qxf
zDGr%ti%vA&3k{efP(thKP`={{>trGeA{$AOwr7L9;xHE&Q;X~t!QE2kpMd5YJA6dc
zB>uM@Y_ce4Qk`}Mde;s{CyxvXrzG@uFNqVS=+PwaXxH-Kg7H;>ZRpwk!F6swn`oML
zu^|s^$FBDlBNK5lhmKuy;b)W8R^PQ^0A8+vuB*us;AfO?K=-Yc+EST{*Vv4<&lR+3
z5RmVsQau03&!o0_V<67=7#X^ZJY%`B;OsF7*W44om`3h<H&LYac^`qmDaqqPZkAQ|
zQ^V9v#+fQY{uneMCA0wU=Y;B+oTpmI`Q~vJz6V@+7TNX|-W|pTSbv*Yd|qlY)Z~+_
zV2I(Yqg9hK3XvV1`hX0t!CFuDLQjZvx2Aj#DO*qmox+MOEup{^!SM$x+d#;|!Pc@X
zyf)+uc;zVnQ*ee=f+*Tm?Fuk{Ytoa=1@Rqa%Ctu&Jq{g;t)O+Vx?vS5rvzhyaffPM
zpQIw9`!U({!n)(PvB_C7oi)iZC=PFc6k@giRxb_{`AYU?3751+L9>4qMtj7L+HXyq
zDE}SofctAhxjNkkxBLl-tLrg6usevJbM;-)C*<q?q3&eF!_EkPHuU#V`Hku%PM-B|
zud*6*m(tm2h44{i&AuM-Xnzh%mDr~cdmrs33IM3&53v6^w!>&y$wlzwT<X}wIICjW
zVv$8-K$}WZ#hh*?#%Ch|;@ZeXY&aMwy=N*NpGv5p+tw|3RB$i^b;HlZWFERV^|~f9
z=Bu8nV2B32i-r&HDYGRl!skJQV*e?<(SfiOyj>4Y?!i+#rUMVb8O_7T=~?!8MJ+Y7
z?uos-EXGZ+OjI~<mr||?>9V^OCyA_ub1_k%n@}?y`D4-cJtqn$)2-L}ON=Hw)y89q
zh(^}Ligxk62)a7Oi;NOs!d`_xv-(0bU(!LeEl*CWu^O43k$#~xN{L!eTNIL(K>2yQ
zW}(jzFk~F;;VsTFQ$*bg7{3@gAeq+jCZznn;vqd++{KD41<Pu+>X}ZDYtLb-@Dm-G
zn8+vVVP;}()%#_#RJlLRF_^i(APA<*X5+yu#>-rv;BGcX80Jvm_4P?BDn~y+I*ln#
zZ-kmSE@Sc8dJs<?v*c2umRkRhY6VS+R~B|X7oooarj%=Zu|4phX&2xIKazGfB)<h<
zW<Bs4+0|vqIM%zi>HtfkU?oOeY?fo_HW?WBHSg~$lYU>je<Qs8^*d+Di=DMfBtmUv
zgnh5c>3sPB`Q3-<ubO(K_t1dFQRqfom>Taa6fDzAn>>stmw0s_;ge`<QHr2jzg_cJ
z`d(Z^3@F4z<9;=F5(q;XnNM)hiZfkbUhCb<>ui%LH8*tbLYFxN$M5=bZT9!D<?|gi
z5grJWJpENV=#jbJvgHD>-i?Fabp|9qvw@-I;mg4;Ohh!pBd?}I*g@uY?Xn;$BjJu$
zq|f3dMVdGu7Ji2eW7HUJGq1xp#<N(%YqSj|f*2!mOLj$H;WKr0zYJ-?X1JG|Ch_1L
zH$&FMIY|glInZ*$%T&}(rk^M>aQvuMpAVbmTq{Vs%P7OjES>(Gsf96dpVFb0LDP}r
z&|1Tk21U`kn8sio?1Ph+BQEPKYryg-5XGeQ6YDVlup)Fg19yy+IC+JhoU||K^rhW)
z&$$@ZG<PJ9NN*$!KJoSgNxE*t9<8Z}slb%{^E+Lxc)~LJ<uTSPPWw0ZB$ZsVyC(o^
zku9#ASQ8m(iznCfXeRMQFF(^YUo}5ZlKL~;H<Ct}Ut9pLY4xH<cp&RG!4Fd%x49Jh
z85#yE6#q#y9#@v(U!JLeUA0=0DWoIpwweaU8TQ?J0PosI$tlQRf_Sta2UYD9eKner
zi@;H)?z+eraL_=!<}tGJ68%_qH0Bj?m*b58W^Se+S8tSKp*O(@mG#^K`!aXYg5(_P
ztUFg_@iu`8IL%x6P~_u0HXD)i*ctawknW-m7Q{awT)#(SCHQ2fl)~U{HJy{*dOF7M
z@3cd+9V4b$f!P=f7<#@e8TK7Ew-bhb{Cw}h&nUF)>R{`%{sxM%tctw`6MbK1h5KWH
z4G-I+i0c(=#4g!>;=x!JNm(&_d9&Buhd^Ek<YD__=C`|g@_oB*F41+)qi&+=#TQK3
zLu?ro3Y-GcyAM2sh7(#;Xb>51*m?f06w{Mteky~+M#m+5(cA=aK|S$ar75(_9@=>K
z{!4QDu*->h8FHajR><LSSJo>}&4)h?awuhL%K#Q^k7t|@q9{Dgq7kP&+@#Yw_eLq3
z1baYV`~^#v{GmYHERgk&YS1QYR%36(RYWsffDp(6$cO0i-m+9*1;!tMy@pETUYrv^
zH~i#Jgim}<^q%-M^>n2FjI1!R|J9=xb`3fV7pd2G$D-K@gM@>$mC_Q<UY6Uq?zweI
zC1*-xbWzIE1u7^X+cXSKPmYMm!{jmK+hDP1dxG;!PQhLgxq%;5T6Ne_6g~oak3!ou
zeh22DDb+JcIoV*my2k9Xn89aZjTSy%)=i<pVxJ{ZAw%;-WPXL?QmPYKr++_r|4MZs
z=GF*YlKjbuu+o;3Pc<PR8d>$EFN;R-7Kl*E=*pA3OXzt-D;M!gVu}cO&pV#f*S{A!
zd5^*!OS=fJ5CpjVM#O!-r9n|P3|@Oe;;;P_s20aEic;^LGj_9Ph(K`G{4rj_8J_pl
zR-)Dy?&;yM9T_2VANxY2w_0?TWaynP65emYDW=tSF^4F}Di+*+kR5oX#}#$=7TgEA
zK&I|!+SAUwqbC%T58bTBpBi>Y)(`XD2WVBPY+$wIt$VfALp;LE@e^g1Z9;`ql)+EW
zxcaCYq&gPY<s>HVWI4mWE;z)H)=NaxXF$31;h16c$$IV3)K^iWGMqV!g;cEl1VP5>
z-=`d@e2$U2gqa>EU@~J=XQrl|9KIG!w2=1Afo7;qH~R5N|AGOo7-83e=`B{VM4;&u
zzA#R`{|B8o?pR6t(*5oDHxP|bt|+`!Z5^1lap-brbwbd}7UjLV)adXjKk~UMLl3EU
z*w6h)fzJ2%gOWSdR5&ngzFbwq17O61#BQET1WSSKWEP@n2(v2k1ul}p_x)(h52$Y6
zX8Q8zw1RNNH{&-pS?Kf9s0Rr&m4Au67!R6s`J*BQdAIE+n5Z$#nyctAZ5&h)$5AA0
z8R(L?5ESxKW_QA?Elyi@e@S4&yqtkedYGW>eWl+@14@|Ub+&LgvH$l_SH{?oAwz28
zQa06A8Sx;?aQf(XFYc-5XXozZWsos)m~u$*1TbFRxxzAKC3uW6KxC&MxS>xBZ!j96
zW4>I;IJAb(+GmW>$+c;<p%|P#wB?Pre7KH9DjA3C(vBKoDD5>dJd<Cb8T;k!dhRhY
zo#<#})@`3rx8V6%c3bjB74wPY?a&5U;%w`}dk@<+=e+*vm%Ibl<ui$jOZV#Mdncz&
zg*VorMdfS{=*_FRrVV9H1hc*Xssy(m%3;Q_wJ!rD8h~)$v$@yHSDyY3TTJ-2Ks6Sc
zXTv6k+pt;jcfZ{^dsX5lBL907(*{^4{ucf__jbL!u_DrbzXRuiOoZ&h4~=se82C2a
zLD*vB4P~Z&W2of~v3Zmq<8jLgC+O9B>*X(vpebE~Fqb~P4i;=lDsi-fmjTv#FFBK)
z(LTv7MZC)DpDUg~wKda!BofC`KBl*1%0b_zB0F5(dDmw2>GG?1J01@TZQWz&q|YGc
zo$fKm$m_JvJRvbpr$MKU4J6cth%fhSTD;B!+yt>SK_~v%r?Vfmk12fJ$dR4L6FsHb
zmP}g?Xnz<(ad$5c7&qpXm>I_>p<WXSX$&OpPZ5<*rOy}1n;d-YXga#I%A!f*fNA<|
zS?2u-&-_o?xVt<o(f%fM%W@@_?Goxe%srNPe<~hwqoxrjzpDK8=0d{AE{JZuL#J1|
zOcpwooniBS;jWXP!C#m}MZ)Fa7<VW9)=VnzYz^jGHO_JF+jeexg^-r__X!^2-Jv$n
zu6~rf9(@c`z^Wkhj}0da9jLb2Ql}%?RPN;^DZ7(rkButqU_stdYp{1_4C?iqGI1X#
zOmRvaV_7c9x7|=j5BRX5%*vo>Y|Q?gc3XP)*0vJsZVw5wv_-Oaa?dk%;%M%Xqp`mt
zvrG3l!$;<{sN*rv5@|z@KfU#~QeI9oY3jlm6z$1<2`k5!XP2ZYoYFU-YH=T`x6p`h
zrm*2>agYA!+}^_T{(i9QIZYN#7XHi!6f=f%i(569t-6lrvX_}^QgSF5JjB&9tOrFd
zXxHk2!LB2{L4%T%&0te(>1(w0R8lwCUXudGF;>Mr!UO(*D`F%Q4*g7s2XUI$DNP>{
z*Nf|9+ce}pt=@*i7WO*xt;9D<W|dzm_Xj-6e|pS&Yz9ywycS>X2HUegzLr6g+T*+B
z<h$NGr|bhbLGw5lzB&)jYi?4)=7oLESzCf`IEvr9U;ktxT=UtQT~~?Zi##|TRG4h5
z3&vNEr9of}mXNbGhKE+)0cPx^AY%EjO6YVa+(Vq$XWs2^l>MmJ3u<<f7b7^99Eswh
z7(z6Z%nezic*YUjDDR9EpGM9K8KZ^I)bI;pHKMjuicoD*6C!%0y{!ZW!%M%*5wp}C
zRy8haIL%XqpzB-m#9SFlW*&>NjDeIW@~d0S<$90NP_G)Uft|4FXLb!9!mm=S@0flt
z)5aX5Yw`&v<1B^+%k&|3UiZ6Oco~iw9R{R64uYrN6-{z`GiMnhT-Y1W&bQ2@kDE^_
z7xj(TH3f;h8d$vF_h`-(9nN~YigCT}wHMoOx<6H1K(l-^cQC$E@z%=`O@8fG<fJZD
z%iKv#i>0R+S1-M8kXNt!fK&U=2Pc(03pb{*Xxv4b(|359DN0EtvAsj;?Xr4xQ!;lR
zv{tDJ6{=2WzY=UQHXB~4uiFQxxV|~kKpY9PVXYpk^{T=_DV}vcw}K9Q%1Ph~i+Sgp
zoOUt%)>rEVacC{X+#iR6#n}z`76ME!hzsZr#y+-a6QJF5=fd!uN!<p0@eSuLV)+SX
zd?Ii7Q6Qn?BBv93P}DL{!$YG>!Ud&<t~+fH3*wEn*8hUmW?{xfnSgP&>|vIu*V;8t
ziY=Yw`WgG4!MX}Naqp=su*eib9eb=d6+^6IB+2LWw?k}o2V(b%b@6pTy8|j6gZ$$+
z4xw}%+=)<BA~)Nx2v=}F-ZK0m(fo#tLGy#{BR-uEvQvrH7>s3tTmd*!itp_N>s=$|
z9->i{btAxMUiu~So$Nd1ME98e37NQM3IxfVMz_-=-{ZcIaybR;Pbn+m1jM*{#vfcV
z2FpTdzlu-SH+}4qO#BO!kePf^eO-2{U=kg1RMDUoNpr4z{*9;&C8M<?9^hTttov72
zBj6kBX12We@O5FHt54!Q;o`wTq?29c0;T+bA^LX5&j8&BzRCuKihdg^Of$FJ@eFtb
zYYE+bLx9&X5XU}}x3=4f_@uZ*j_Wy|sd#zRAKbM?gN!QO=69~<9^@_77$59?67Lqm
zM6#pSF#EjObbN^Z-NrU|dQ6f-7zQbc;k;L=D-4yU^7L6%w*RbXfxNY$;|!sEDTSV7
zNo}dKuapxxab$OIJE;exfp+o^HT>lR5sLQDP2o=3kFT$QgMGw51n~M^kn`&Huzpf>
z_~QD@WokM=o_LxGo|q%I?yzPfamk6H!|!s<$;c~!qwhK{yi=h6wn+?s+M#$Nzqj)D
zyg{wuUK8juEh?L2v;xI!6*42-0gC+HM5}KBp#LJL5kZ!J+#R}j*{@5KD|js=ag%bu
zhCuR=Rpv$2$iJKkz(Fnj(qv3P{m0A$krPLZg*RcM`+ijZp@kVbi3a{K**Uiz4{c|O
z`tLV!FR_a6s*z0cbmazW1@EAt@hp5c6>N`IXc)4}G3*QX0Yi&%Ft19vv$B!DUTvq-
zq)rzY=dU4IgrnD*L~gZmUEwMmEfnCZ`#tMA{vwJeFoBf#21p)0|7>0t!Tw&YEGVVR
zA++;=v6i9l7Eh87vCbgQVd2G|x4iJKic<^)qA%6dfRQw$mg{P3t24sZqsF4+H|3_4
zTthYEnv6^B0x(PN>ngblM8ABDF7xhA>ki;p2?jQmOeH99BQw%6>qOqJ4aD>a<#Zpf
z`H7?ef2be%KpNIF{C98g*~_GiyLVCy92E_N(V^l*IMs>U%~UOHn;Xo>8gI~@3_fvH
zs3OpwTBqf;G6mpS3dlGoOF%k5DDfDQ!)&g99_qg}mLW*o{;gt8le!9C9PY$jC!2_(
zFvH9Oaq2F;X0$yKDo%fKoxZ>^d*!N8EbS3LnPqQhBJAmiN7ML{b*O=jd`HIk_^<HW
zVz0kV92^xgbx(Zfs+=w=KdFg;mN8JmRF<g)^hjdSBre1(dU+FL|6!jE4^>OA%J|IK
z2o~^3h4@cqK&RhVXb}1ig6dUO30ESeUp@A@t>=fWB_okQGbk2U*uxg7j%j+F27*Dz
zt3EItlSQdl+6fX$k)n&+i&3L%lxH4A)&ca8fl)F}kiyeWx424W?1Z?d&;)gzJy@6S
zTfU?YucUZl-d*CF)CQ_AkECg*FEs4p*ok=u^_WD@qw*41BL(Pn{ZH}|J*D%!e7>BA
zUWANBN{k2+N9v`#0ld#M+V4{&-1nxmN|ewmvYrN5IBYwDyD`Ky`r2Eq%Oy@S&?)AM
zf=VgI@N!FIJl-Kxh3XT>tsbfl;hlp73ACBq!*2I(6g@=_^R{NAh!k_!3R$*vMsXqK
z%GkOH0)t<s;aROLHR^!T8A5t{Y!9B!QIks7=e~<|%#O*4>{GkT(9*(RglFRrc58%^
z_)kR;+7v{eVle~*HV?Y<$9S%z{$LzEe$1`IcS0jzXE2guF4of&;qX8|prSE90#$g=
z_7?9U#33;ldjn{WL)&Cdrb-Jd7H#(fR6FL9TJtA_zKSkifb9A>w(Hy5$hl|_is_qo
z>P(aDC|~=gU8j4fXFoAv-1Kc)%(#qjzVe80y;F(s+Q3kS8Y16S0YGvS<y$W~^bl1J
zAK2n{?Q*oyPJA8N5%Lu<rlvTCACOt@7O%XOkm)rJyz&JywAG4&d=?aFy{~L(e<H|B
z&^w`a2vFgXX|$h_$8i3QOW{5pV)+zLd>|R>U7z^`ks9H;{f@`7j+CQ5NK~^cfw#Z%
zT?)Q$zV`|!z176e`qdqeVJHO2yCtQ>QxHWyD1!47wA3~YI}Hn7E?&IPkJzCiqkxd;
z89wu43<>X#mM)GqUszbmia)=X?%)}$KruavJ&7?*v?zVd{<T6|^7DUd0n{tL;D+40
zEqJNc^H$pW?&N*@iD%jO)hhbzV(`e@;>d4H7+_^5w3KU(aLZ^!$GjWir8dzf>$XF~
ztFP@5dLg~*3(_tQ96-xFle&~h?`G{UQjW?tkuSM{(17%r9H~ECDPlz?GW3m+LliYt
ze#~OvI)$f$Uxy-PJ4M;;lO%@(FG@9}X}bLtMP=fy#a!gTEesy}DDRVgSJNBa@9ex$
zk5Y^|b(yFumQsV=izxVrTRdV^ik6Rp_NWhnfZcGi%nEt!&Eihm&~us<^gR{9D;Kf?
zkA@TswuCEB4tjyQi34khkB)&pW@|0F@lp#Bj2%Gm5kszx@y9#UYfNo<M*G;aQJ!Av
zgp}!AQ6{EL57F0-NYH4%3>PH69Y&pU_Uj+%v#~;j<|N!{ape&>JFvSyCg!;@r3!Km
z9dZjgp}X3Uzl&nj{2`O$fsv}*86-*opiwRa*By10-_?ZIDoQ6pf|}K1$$V*(@0rZy
zF5hJoLd0)#GM0r|m1{ng(Vj+vmat8eN%ay;9C$C+A05Y1hB4q!I6%CNbBMn-*oMHU
zJZ24il1KJBL6ESw+tT70Av%}L&bdrX-t7mo+@lHIz8yF$X3_wAz*}J^Vj9VaM!XcY
z*LPm3g0|e4>8@Bqg5)Il0#JbL5%u0~Li<j`Cz+8%8P5~NdVdF5zF<evN-;0fwI<XM
z`{4MCZy`OOVXWNhFs=}n!t3G*u2=R-z*qCr{t!o#XD!`ft$p~2`C2|%xP$MCa@j0{
zEgI>fNuDWIL1GH)&1r@c>Mi{1%mZJ*fs4#K{?!?9A?UxD{KkWdLIxs|k^c4HfVvyy
z5XjFpPls0v$3kEhw&7@o?uAtZ;XU}vgA^fCH^m{8(6unMuXKmgQ3|Tw&W}4@oo3km
z17tGD4j=3A=EyWNZU?TCfq;XjO8JOVlEd!ibs>tB6))t|F(bGY<xXA{HU@(i-BPpj
zFV&o8D?aKn43Lc5z5UU(?Z(O?qth&|H+4|(Og!lUb|s`o`E$G?-0c<^&Mi~t<hR`7
z$eG1j&NGniI^nAXMiruM6vG+s&PZ1HZbw8J<`pNK5cG+Z8su0G9qqAj-)CGr0CJL{
zgYO@g4?tcrBNih`>_tlJCG!^n^;?fFc&8B2J+6uUQ3EDJg9<Ny0uEE<Bc#DuST7y&
zB>%<EyhpRk<690fd5`IL#g36cm6(ohkQQ<UY}CU^7^w)ZRv_`8wXN-U>VueY5SGcM
zHV7<JJjF5?X|gcNTOfns7cr8!XOAXm;p@F)hS+GHP+Q0)pAjUNu0=^?tcdWD00t8P
zqy9utDbR1wnXA_Dr3Wt>ZxnlDsm&tRyp`^HH^jro2y?pWuaeU5C3)I@bRNBx3eNkx
z!l>>uI?A0w8FSd{F-BA2AexM8iqga^agcQQC+`oOe7S?tA|nn8o|(WQRBI|AU%coP
z>W;ITiOaSY6Sfv&m^7iFr(YKN!0+Sv;cTzB0jX=V*X=}4NJ)<!XhT>{L%_^?_8UPo
zjng72(OVK+(I%Go62_OZJ$=8udE;3`ByEPS24?fU+V%>$Y(?hi@e6XF2OT`7EB|bh
z&ZR6ggI4r%j^5N}p;v{^pXOz_N+YE!hTN)eqgEU37l|c;NeL}z<jA*`7Qx3P5*ut^
zp36!(4=2Yl?QrP34&9i`CfXnl6vXOqsosHn`Q=YPaT19(LsM}6b|M+)_4%<PwxjKI
zPk@bWsq22q%Cy;-n-feCLlkwUxQIqP1Ak~`(PHsz!66*=NWRI~hEI%Ck{Xg@*xe6k
zhI64JEB}U0i}+O=Vs99%{H#D!S*o_(LQ?GzFSZ|aT)<yjW!I0K_Ip)RPOo6F?NU3u
zwR}4gm^0D<fd#4Edz^YjmuJq@_O6!1h;I>_!jZ(&>KOcs)a&0!7HE22p;0}$FaHj6
zmh1~O-JhZDF<DRSek`ACnOUQvhRhN@FerA8rls^5av*}GMl5f>vh#*mcD6*HOT0s{
zCAl9z4@xzbe@Gv24&_$>a-i7k)hkW~saw;_FpQzo)0HRcs1Xm^?#2zj%N05&SK(uT
zSV~QIAPfP5U<m5gv@i)|RRAECetF%LDO@bP)5ym1^x11%aa<=sputgPw1Q2FuzaQQ
zy3t=a*EvQ!txlBR8cgkWmz34(Vf$pXPus!(a9t%&{&6TBPNUv>=i707aes<|&KG^2
z*XRFJDv^&-j{K$Pv5K+xwFkL4kqS}uN``|G^)^eEyJ>U}!5C~l!djwFGO<@sy+9x+
zwjFkBDP-RQzRBb5fI+kuwaa7D5hU`{%{flvO@t}NN2JR@$0D%KFEowt>QTgnMSoQF
zlhBWAmo)a*rPZSti-vb`KOy2J27STbejDFS%bd=Id9#V1EAx5(PUq%7rHroB%<JNp
z6vy6J3l)oLiQSZf6(0)T^lHc%D?H(ziWv=y)x&d@Qdy@yGDM#pN0Jf|jrH&Oi7h~=
zP(Ew!O7{wUpC@YK)ZXxopLH!OQ*LU!je;YXR5r1}I)4eX{au-7KOC>pj`ExFreKoW
z<DEN3!l~n_1Fa(-S(j(>BEal8tBjp;r~AP&K4qlDGa0iEt-D!1_MGxLcXu3Ol*NVp
z4sOO*dVQA8Iw`5tkc^>M@0gOeE+~|F?1?k22$dGGM7|6Ba@Mj_E+-um&7z!q!W<f9
z!~Cg#w7mNmLA~m3K!{-G8tFXo&$j7=4<Ml+4`cO;Ik73pNfD&q-u37)Jf@*|?tTCV
zoE9aS)7zjT>u=h93(^aD1yxZCHM-Nbe}smx<4`80@@$HA!q4ctue9+^efw*d5Ph46
zEqij1E4FG^l^&KS(jIEl>oo-2C>4ZG57#w@l6JF+zV>BAdE7sEd2C@j^ReZ{Vc^#r
zpk7N0WJ6Fgx!YZyJ~3JDqNeWmPJgAkzFgRz1Qd)^GD#$tw@+;;{D?aCeov%$7}*&~
z5K*+?2XuXOlzJ^iALqZP1O#6Hd=FKcC67!tVr`=sjsVWHhI6pId6Yu(%hRB(_t7PN
zk2KTz;gbBJ4NyF?WAdGwx9nR;nT$e4$c~WVqron#TOxL={ht4Q29LDD6txKUM#~Q(
zua!JcGTkb9B*^XH83RX@p&8hP@NRCQQ<^23b}9=UGu8W<uP+P2F#}$ki3%j{b?yx$
z{p4isGM>TLpyr9+%xMx{hUxW$#+z~U!X;eqW@jSx)V{7>hBjbdVerfL?^;SPdfRlW
z&!cp`?WjY{xSZ_D1CMR~T;)a)xd{@WUg1R?uep2I62(Pq>u&Wnuz;R?%*_G&IRD!5
znzsXO*RG)GTN}C`&n($yLN~*eSTAF07yTS)vnWT}E6&)vhpu(CGJP84%4?j5%!Q9p
zv`(!&D$~&@j=v_q`N;A_E_Q{Hw`}{a!cpQg1@~rR?q4{l;|x3+j*hX2&ThJIJM{VR
zW%zd6(ZTZBa>EjzJ$^<nJwGVsr+d}bZJ}r%NpFm59^X2a*%lHR7v@jv-YDUPe(Op(
z31h_et#xDUcJ1{1<q<`e%!vXI%fi&}21Rq1HK%T+%=(S^U+Q-XXP>O@SoI+_JPn8e
zj(@C|7DV1o%lm&}^S&G9zx~yP_>&@DCno2^$JJ|~NVx_QMPv&W+L!QU53PYOeEchf
zx#KiH3=~b75;Ey8l+JcOpq-%KbOSd?CaHy`F?zeq8*~5!`(qhSLC$SS7FC&-izO?~
zJ<laDy5~#beuN+7;Imd6rUDYd9yqB0jiJ;~kGo`7P~Tlv7TrmdWd~(%1R|E1xA<y>
zh4f5`B>Rp@;tN(d@tJoaecoisF9HgYBU@72P~Cyg)Ea-QO1dg|7C#bne0I*T>?5YQ
zIOvFth+i*EoYx--!JgOsDVCMZXn^=_5p&SRr}dW)U2Vnj<Ws$&&q>2v)q_C-d(pzF
zF0UgRHp`D!0q0r%j_=*((k(+Ak)g{C(9GJR!|mChg+~G?))AAz=c<p7Bo_f9vHr-m
zb3udbtC)CShBp@j8d(fvL&y1{Tk=q09CukzEb#o(?o$i|rY|wt3M6J_&v6pz1&m>6
zjds!IjW2b6mHAy_Hr3x<ZE9-5DO|x;W9TxfmFnEM;YzvAdh1#>Y{OPXLcM|H%IW-D
z%S}?gm}FJU0l)J|kEUl+4>sy(+jwDNt!sV!iYo6=EZKUt=eo6oQn@g@q{X6a4#jCF
zUc70w!ABnRVxeJxr`Vz!x`qJj?a8EDTSgH>t4zrick#AzjGkR~@~I?TCovm%PiBIA
zv+ufS*Dy#6KW=+^KgdnSnYVQcB-418HpKaGGS)=>mn=JnVXQ*%g5UgRk_dYcC%x=S
z5apbu1aK$@ZVk5S`+6UoY@Iy6RNN+3^=K{WwHXk7Gjha_YS4TF^_HVml+o0HF7<<u
zuS|EGl8&rR7!eoaIFag?xc~5p^QHuRg~TDC!}s4>__Ld>Us$Ob&zn#8s=obhmQY~G
zt$T)sAr&|3rBR}!aZg5eZRY3<5#mLB<VnVk9d3Z3&HadDLgLnM23Twsk(4FQZw4GI
z{cGe&P}RvW_qS=@^sOOZ@fbv3qT9TOh2y}En-Y}P0_*>eNV7P;Q7EnK|Ni0i=lq{9
z#xX~r__Y6i@IQZ!3XX30-;aQA`Io^4zJ4?K=FOXBRp^mLJZDACepWWN*}N~%(`Xxf
z`uurYULpP^2jY2rwFd~7iFm%w_M#k*jEpQ7-24?xj}<vsllXut7LQG*)Y7q`bJJb4
zx1aU}cskABChLL@cr!QFQ|0*9lciSs6*^@v$v%DhBn1vKxSrAR1-1I}Aa;dwKD0(T
zo}Z3%;|&kQ+TD6*2UIzGJJIn86Pk~VH?;8pZu=0#tN>-9aBgK~rDE@rOH)?PRE}ie
z8}v8OD_6qZ_9mIn6mq!>6)d`yW{SEk-X7kiJj#v5C{Eq4^beQZfIgpG*g{crHr$0+
zzc`C=az0~QZthdTn!9b`xEY!uhmI8_Gk5+y&I}l4&Ydx3O>?ls0`lL_p0&J__yKSN
zq(y3(571xyzV4y6{?+JGaR~ujegX&6@>TM`D6rqTSAa}+K3b+<2jOA6{i|V*EN=w(
z{YNT591oe!7b6;=1kbK#H1;G^jDMgnUYI%wYJTEIw;fu<bJbsVK|h|8a~V-@K1^s1
z?mnroU+S0%6EQL_aZUwqJ(xh5rwY6U34Y&+Uuz4H`5{PO#%rf&7d>mi1NLZYpt&^p
zJzmJ;uU4E_v4)RCxqL5Dji^#T2Kn<}fwWfN7rHW-Q&V4!a<HMGXmN*&2H=3{ef?AK
zaa{$Dvk{-)_2ur2^_O5^_zD3I>84|c75eysqOQi!&yd4v321on`OJqb_hk)gZS*34
z0Q>uN*<IYwolxt6MNG_5K})sA9NV>rI3J%B!X|*^<lYEyLfQlAW>1_Q2)(%;eI%s#
z=I%ghwfI?^KYAySmQVvKISmL3Av@uIJMi&k7IG8&gD6mEE|pe|g!eWBhhYb}<zJsc
z8Cd)bwzi2nrpxLx{d3`>aFz7zcLM%)=2;0Fv>=4W9gtKzK~+UUx+F5Md#GA31{9EH
z24tHb^P}%VI#CJ$A>S^2@}f2#X8VaVH*2|PlCf)|Bqg+>*t4O+h4u@J+A+|21w%6A
z$raT!=R88c7gpT!d`J<}8<o#Ug~#}>!IiJN0GIwGuVlb;aS22}VMzzTUh}{RNIKwu
z%2;VM6_p-o0hT}UNq`XOmm&5u2)gSXR!ocY1P3+ugdVgHSr%9AgNAnZzV+X^hP_s;
zWh3yhJYMs8adG&Y6f0@GCkqI8w_lx^%8Q!<xKjAGPdv(-A9J+w?sJ4iHcII;A`_fg
zOaP>835fRzfq5ZX8C7YR2vc-nNd5ud<$BpA&<i2G5d$v+-iE76+0|qHF@2`)EuEV9
z)gfFXNYZTX#a;B3+6f7f8QfAMCm@IK;+L5jk=6Xo?O#qVzg7WSF5P2O!0Ju#w&lzm
zI35L-c?Sze_mZpE;!%mL>=kM`5p5G7lIM;5DnH9clHAI8+)pqVS&5Iv_^FVi<r^pC
zrp^Sew<O+xPOG=}wHAoC_5nNHa|CL(-pRTP&`q<yJ=Es~?gvD60CH*$F8iTb-S{=I
zo>YiS?q?MKy3g_QUcv_EPiDo2(AQAP5<$nZT(dCX2-i0&d@}w3I_ZsJo|$2Gy>x!w
zr3bpK-HLWm-=e+M4ZpcYeSQJ43mkX}UA|omDi`)*G`>8>I&S~S_SiID9b%uU6!G0n
z$Mje3R(SI`{wEZym<qxj=d44oFj<{Ge9!IUXdSQAV{h-v(!!Y5<;+@bmgItdoysSO
zD7`lr(`m1t5A`1$ru{UsTj~fl8Oac=pli=&|2CjfDTTk!GFbtw1HeE3b+i0ik1lq9
zEU?iecey0O$Y@=NKG%|LnzkNTeJ|=hf6Re9Ki9~#{dr`ON9PqKkEx8o!>q=BiWi+&
z47-_MRXNai0rx>SHcTY`B@5}sjE&-9bpdY}i%^{Qq|QkEhw!mXXhj}O;fiTzMKgM2
z7Wh=(m-tD+rD-+i8nlW}kQe0GmteeCq~%_T_Qmiky84CNEM=sW_q~`Nv!e`zeyG7>
zVQaFYgYP&^4OJd6kU!theZfD{y~?j+2G)}Zo^#B+vbG^7oplrAv*b`&r8lA~Io4H*
zUWE<pkp)tWKYxsS@x1)ExD*D%q-J)S3egs(WrAUfWek%^hCGv9Z#QkF6=wFqPaWKB
zi0PW@#eZOXswp6kc$%dDUn{4>Y{nJ#&y-kLO|8%Xh0phzRT!;eS;&7xtLY|9ex`?(
zu>bq#KOSVX0J*0B?;)_9|IZf%_!<9ull;%THhz1|#{c(YFvb7KWSeQD-1wiTfdv!I
zc#u^$Bqb$zj4_j`sHzT|H-31%=XaT1m<pakJA?m__KnzS%<zvCZgNJ&H-;6Qh{JA@
zn8fPBREa6`FS=msYx)y^x2UPfyXwig^{3CKl;#Jz;D2~*_xiVvks4-h_rjOP#u<rk
zu#z8Ljge#b)kQSNlM!f!>G)v>-~xIN!iS*P;@+F`j~~C1vX&^~U%eho4u*`X(B5^e
z=rK;BkoMxm^N{&jItt9ldhWyd-(N>dkOT~gd%i{A!6K?Xqi{_^&v{MnfKPewtl^EK
z`_AzF&JIPlU=Oaj2Ur7+etLQylCvj=diAcE!fw$Hu@K=KB533ydZT+JVTyE8nH6UJ
z@w>nP{vHIy2(rJd{wQl|*tG%Nmb3&SyKUUwr@N!Aetw8Ud<kL8tMj8JU^XIv!p5K#
zShv~JC8C>&+13MEOyzEV<b6#1=KPyPE}EJW+Nx$Q4Ax~dov6y6Xj1M80&~hP2mucU
z=4$efON|V0UBl;;jfcNDx6b#BgKXbt(~$oDk(8t&e=?W=&K&*u!@s~A^)uv4X*v7#
zaO4}YpJ^p|J|8V#5KppaQ5F5#Tl;Fizk!c)h{imo7%<8;4Ne@uk3&tIuns=hJ#ZEC
zlWi^|LEcypggPmGS@Vg$f-_pt5HeDPsQdiU;&D*BvO}wP7=N11XQ2j#UUkehI7xqV
z-5zpLU<UECFPo%(gLES}2rKCT+aI<3D38AL`cRt5-g37Nd;Et|;4G~$m<A-1PSA0o
zAZOPl`V07zaFXgX{He-k&!1Cz;#1NdUvJ&K{~LI6SGgz(_n>#-0l7*GS5vDyftJ$c
zF?6}bV^@C9`a4_fcG{&^9J0sNd@sw-!E|H1A}=(dt$OdXw8sT!?o_#a@HLjV&>_`v
z#j~*z_95z{tKIWdV<OnaD{kBGv*!i^=S+|r3J#J8mhn2kk`!E`Rs0@ssstW#!4%J*
zaXi-{2Ot4bXu3+V39@7r+yT+J1L*dtRyKweor_n`z>B961FeDg09Mk|djIARuRf-W
zC^}wRpA-0@U|>c{mq}5I#c{5&l<gQg0NW|w!v@_+Ghmc5SsO?KtJqzg5$BCjhI0G%
zDA+k@+bw6Ss^z65h5Q*f%AI|eYx0xXk5CkIhsMZjw{Gdj*aB{n_53Wm7fcD<Jo+O3
zMus%!$G;v!u>vL?T{tFy(NYm(+=Sz-xk81Bsr{lHe{=Hrd*4nqLTTg;VgszpslFF=
zopZfk@X2U|f<JsZ8h+poIBG0GP{el=@N1g@GnL8p<ylQkT4^loM@VA;#tEn?X@E_D
zIAH^vhf1pMBDDTIj9-JTLO$|QkjeTLz?L7<DBpw}6R{0Fn@W%|uD8!sbS~-APE1L;
zaaYa`QmV>B$;l%7_>b?HR8wCB6{zLIp5Bl0c~I*7P<Jn2|9#FpfL}crOqYup;b4nU
zuCCksDY~^6X5BgIMMr7=>*zc8O8MLFW@5xwwq)aE6KLr$wCb}=;mqvJ@*==LKn>&W
zG+nu7*gl`TI>Seeko?^icD>8C;3>$ScBQ=`ei<-o-HYB4E?`W+c7NzD*|yLV&)K5H
zoL8Gd$+jT$xD{m0IJiEzN?vZUi!T@s779EMA~OhcfOv^KEwZJ!Q8b~lSDl+Nz$R)B
z(i3}Sng(kH=oZk?i6Mq)st61JZwbMYYWR=>N5H_p(@XxUZU;zHqYYCmhmU^?mH({#
z#!$0CD*p&zHp18p@c@zrk5&XOHormt0}HuRvm$9SnrjhMmwo*r^=grf>R8I`)ial*
zekk#|1Y|jdeE2gknrmJ6bwA3Yb3$MIej|wP!xK7OCd4H4{;KE6#MAcf_3Tu+Ar%C%
zuYb$oLk68;dwLq{MZtN@1h}S`08=cKua}AnrQ|~7;JN%7)Gpi}MiO{3uOvEv44vWy
z{@0ciC6MA>gZ<dTJb)KHvAG30Pw3{tmtSh;YLs&erBFiI!-UYbn~9dJ@y4bz3B%)C
zv|&e%v^d=)yB^hi=5EZh8ei2%To!`v@hE5?QIb<N_`t*Nbu{+X{ZG)S7m7)GCzAj_
zX>%&LQjXm=-5i$yz>}e1&WFN3cSKr(`H;+tQDs?TsZU!xkN!~TTNLqC92b>u4XC)9
zE0GF2vBh;LE?^C=RCN~=jGKZI#{6Qtju6yZVS~eM#Jce>l^z?fk7QCoHN{|d4;PnW
zzCcj;v7uD9VGPb^@{zj{7Gkv~dMAI1fRzq<e~&(uln|_K3kUysI@s}z>lbY!J~dI}
z@vLoUV5!s(g+NUFyHJq@Jfs|#{YvpOW~C8@vuPP}rJsRQGa<6r*YVklB?nbux4#A#
zzu*#*k7+;<wS5VrxfO-nt8WV_1;fB6`kDl!*Uhdnmki9fU>jbX;B4x!<5|CGq8b>S
zo#Nbv>e-U&#H6H<Pc@qz7q~^i(W25DqfTvDCj#C$Cx>&u)!OUdbg({bU2%{Et0^P9
zpTeO}ZjnQ3{g!~GuI94xBL3fJN0DNaQeF6<Y#TW5CwT^DDl)v*u>7np=R=?mBfR_l
zv9F$<YGiy;Qk}I9b&#2m@~Tq2_C^@f@Y2vm@=8sTQUW+)X!ctje^kecf|eRv8C8|s
z6h8afhF{ng*^2QmLtP?awnqPPX!!pw$e|YpvxRE$fB*XT_y5YKEn)sKF>&wG{l||V
zcSMU|%>S$6*NmVaGc+<X8VwTY-2|TYcG83RdxI2QfzUI8gP>;|?Bk}6jt=?T?$86Z
zY{_`-506%aoi~VdN_B~aT(@*%VM2;d(E?WE1*2do56CEny#_V^m}~h1rz)n0|DGhA
ztp9zZ9gMi13~|ZC(Ym=MsrXp6#K;re;vK+?Km_(VQb0wc24|fQz^5=UFbWD1docS5
z2ALzQLz%(?lm7AA3IxL%V~RA=|DLiyQ(c4zeHv^z(ja=I<NRn-Kq)@qoo<8UYsj<T
z8PBX7&gtI*ObkH~9b_m=RCqq}L_yO^5xptZLkz?LrXGr&%sF*Jo9$$&-uI0zfg{@f
z11R3237FEMO34KHJ8Q3Fwe7+6=$zS8H6p|Y5)~@vmEut5DFG(18BjM?rj2O-d&^7C
zbd!?{&LC4e1+GcM%$8<Nmz=^wZmJkccgWV!0k-ZJRMJ*al_*!>HGL0F@(e)s2}psV
zOM#Jz4;(^fi^=D((Hk)L3x=Ygw?J?iPuTouyK&cr7bp%P<VLCl9oS9lfk#vdELSTP
z%q6iPnB1~}U;=Q-$b@x|hGmL*Rh64xXln-nFvVMEJjEH3_xM!g(Sqx#6pK)tmgyo}
zlEJa=`hRNy6fwG?<HY)K`u%y}vHJ>Ejeu6aKe110saHji@Ri6>a5#cjt%15ba?RSu
zOQ&!@S#1c&VD8Cdw1P435}3+<*{0T`t>f^8mMqmNaPCTdqFeLkxo)GgRa4CI6R!bY
z(wJT#`?;|P$rmAzr^TUUPPL}>!;F~qn^s2SfFQ~+Z_evPSkf{3AybS9Z%@2JPJ)6s
zsIg2*e8A1P=i$OUu0@*zphP?#zTmfb4@h}IkSHS8ZD-yDbXL;ONEP4U{(Cc`DU()#
z2}Q?3K58Jf>pNhj+)LO7>ks})Pt@!N#WZT&E4wjTl{qW(SJw4>?9@7Ke(nxyiSy{k
z;tKW3jKaH4gTbIx)#GRd%Cri;T>yU}U-i*S>x@hSF<imGpxz7fk#<n~wq2`#nSk5{
zXr!LoxA1Z5A=<9@Did9aYW>0d8>;c0z#Psao=j8BXWX$JW}s%!T;Z;Y=D&9p#8zH!
zn(qq7IfVKK-oO?{7((r+a0*xeH2+RTPzs3jHs{P5D`wnZ<opZcS<Y_hKSD;*#wmZ5
zFR~A&|4?PHDe7zH*7jI#RxCVO+TO^IiH7D`H?-xzkOjPs_q(Ql;}NYqSc^z^qC@Yd
z_1wti21@_0AZMv(RZu@Y)|;z#TNy@%MY{3$K}nn>R;<3*5Wj^v%AuF$KID*u5AFd#
z2DDu*tn%*YxeS*Mx!%>X;4)q*F7J{MvO^d#)wo9e`ur%nmNzuW?<P@eh}RE59;E@@
z%37FcsGfeh38)T&z~$3(m2-XKcO$^AUt6jd=unAdl0>T5C%eM@=SS0+tn?H}ZeWYx
zW<E)kKz&19HyU*gxg7JY`nb;*nU`AJ%xM#GUWhfccD}#Pax_l30)6CC>&1zpa*Mwf
zGScOWe=UaG%FoIdip12NMv8fMdI#>nkT~m=UkagmFL8!=7~j1v$+xTM+?ah6aHwK>
zYbU?>9(|@D&E4)^{9)rIN`;kc9G@Jbe)5A1w?E2nv}L6M#_`9?wq?q}*tIA}kx;SB
zQ2(>VOU-cq3L&N&Ro+V=n~XYvVE0SFwzBYOJ+@qQk55OZ0pOfFfQ75`KDg^Cgb^f$
z49oHHi7`0NNh&PqBXl&a5JcfGeoywo#r#PJkoKmYP-wTYllC}rX?I*^23=g99UwYH
z>%j3{(JoGe@wC-(ZQ#`Nv9+An_uB?d?hcuJa^Lq9;x)$j-b6c@JJa+(5o&rk_B=9!
zbrha>=kl8cbJUX!tltYaP+MyRki>N5Vn2@5`7IS;?yf$3qLmZL8-Jp#42H0zsQ|vH
znlZpF#D6wW=1jM?267)L7gDBvxNSAYcbtvz0P<{r%UM=>v-rZ>ItIzkMzOcjDZQne
zM@K#*-hnOS4U;ZgTSHk=+3M$BElGxs$OKB+%k>ZYv!Jdj46BuRL-*vV|A*wj!kAx^
z313+!+gz1l!+MNv0PYwy%L?iNFDk=qC<1as$0C^C^g)*d)bj+r3yK#V1GdP*S_U?&
zZSZXl@7O<Ejis18<0Pd98Hbbzm<xkg=a$qp%u4+AK;o${?2@^pX7k&R$%-aet;S@Z
z8ONGMH`dyp05{asaoFr9?P4O9S6}b@v4r`8?V<O^99P0rb=qA=DXVHr_z20IVn71r
zHJ^(70Yx|~wBY|yGJ3W*PJ9t_a~h*NeGS~u;a(*Ly;_Co@kEfFy&gzES2p;~d&V66
zz(&yl#`-Ikwa^_{L88Xj^V{8bg=zsC%G-d0^h`wl?{5oNb|M5x0*dy@;TAoQ_>{Hi
z>0SN^66|zVK7lND-uN^I$x`OxCdaJ#q*f$`-Skv4l)!^|SvNirL{UZb^WxjH!KC|v
zTU)=j{Iqn4f=u7TZ*!3RfQ>pilqtTd(tduIf;Ti|`VU5*;}@>M@&lT<uJxMI(e`)r
zyO$G!CCZP*S*McO^+;Ns%m)BEZO~(|^w4df0l+?b+hx6L=i1C`ZOpkzG8x4PX_PRZ
z@T9W3K69E6>=Nl^R_MKs@#g%ya?*D|k@MAZEKdl_tzdzZW>GCus2k;g?@m+ajZRKd
zE*Mx;pOwLa>U+9MU0+TeVVx-a`Tfe?w7c5*h`T6qSb)giy4^{T;D+D5^^nqob1Lyf
z^+@@_YLXaXU?se+dcvZ`A4fzWQ~j=~)10^0gjVZ*b1`a{V&S%cFT#q5GQah^wV*{g
z*;LxWy1{AIcdz|lwtwnaz%g0<4a*kj^;4DgO;9ww=f~bAKi?}E{+V3p-vDd3LIA=5
zXGL?$IhKK2{KCKeSVNwM?92V_-xDoOpxxF1rt<f*0MvN~QB?ad?5!z>MTUc%0e{Ld
z>q$ae4wu^?M_tg(`InoSkG3gB7eMPG(xa&`<3xv&{^kNem`k|Er&5;$s_zuu3}fOw
zxThwvRt-wVn6JLS8ZlYMw3_ns3}xNV3R60m2&2ml?V30UA0r=*K{b)Cp9WT(3|57w
z>4OQ%YEn>ZkfwMofJGR=p6&mt%dS)yR`Ud`(KuF=OVF{vdkaB_3)K;j)NBjSoQj#%
zLoMJ6WZkK5VT@Zb`KuNxTg1Okprlkq#YQ7OFnk~paV8=JFavu43hc!o|ML1CHJ_}y
z$X*vDW$Ybc@Tw`E+Rp+#7u=hxg&P{-Pea_VooQ%f<?Nm2*~^A}Uk@pjSz{JV%<S$2
z_|%+T6&2_scJ)~n9f9t$x&*^hY?}EKw#b_PzDN>2tcbN2#LJKjG7mh6kHa8jQAs5l
zOx3=Q-DS3vjSY`}5H<pa1R^6!ORcP}?!!d`G$bEk3dO4F<Z42{3%-Jau=}Ls^LP0(
zI7q36=LbI*ezdvIA*kLK?U=xu=olZwM#JDs2nEHugJTr`%iKV5Lipl4cQ1foTz<@y
zc!9^i__82L=F#l*TjBIRO#eyn7Bc~JqL{-S5~EI+Ww*Y{!=aodp92?5O78B4aXn=m
zZ|J(k#;A0>bpnA2v!q>Xg_TiGq7?3JZXGAm_6d4Yct4ln(<iHQVnCJI(|!-=o4vNQ
zdDF!?G<r5qFNcm97*w0Pb8zFg47kLQpvAq6>VG))J=@zagAn~2#jEzKruQdaV5G6^
zXR#;hv(A?t<}v}YF7JzDWzHnxq3YUQR<7W3p2MKPrEGmM;%_Z;bru)n4f7=g3;KE-
z7`b^_y2Xczg3XI6^HMEv!h>d;VMfDN(KRV|>y-hf^Z0sRS^q6L%+umpZe*d4qDsK=
zRv@7m#jI`hndRq-Ibok5&<O0-#X`T*x_LKswPhiW3nlc~7(=G=(o8|M^mu-@ZJGH^
z7V$Gh8&r`ZLDM=AScPw^&h%BQTd|G1vhYh8ygzPI-c@=t{IFGor>V}{1HM$CC4E9@
zp7-|6^zO{6hwL|Qlgs+u2~tESIFrwK?~5oNQB3Uzk*bAG9RPu^g-RZ2KEq^Rw$-`^
zzlYjfaH^C(Z4kZH0hl4=$!ms0Q}*9WwqM$b{8%KN!sVg1yefWkAdc9-1X;Y;P_Sob
zhM?236UA*L-T~6*uhX6&6syn)3Ks!SaS~bx0?-NcA(VEFzl%;^g2hYrLELaukb-OV
z8~}|FC*Z?qH>w?dpO7dRjovy1`6M)uOS%41WM^zrp6Qc|GR<w@l}mm4Maf(2R9#km
zJlK`o;nii#$SP$Ei<`{vf;o6hIbGQ>|Ac#O%RFcrS9Q}5F>zV*-D&(e21w0uoKym|
z7QZp{4?KOiH}d8IMp<fEmbtP8vP4WI`v<?f=#Fe#WPw%7sxZ#QlfbMK7QOVhX)Zd4
zIhU(-U5hN{s-%}Ir?8hewZFi{!Bdj83l|V$`-1YRC%DX_Se5AwC!lB-J`NaKZm#z=
z;1k2bF&GI%#I2&56t{|Co}YvPqLCK8sfi06O`-O?$x5>V3F+y|PU6Y5#KSMlq5WRG
zi~dvlf+cnExADs&*D-#VOqkqNRdtFgq?fRI1@45Yz4S$|RXN^Fq2PiiVK(KrX%yp+
zL`G_IvKZVyTy2jnnT_6#al(h2D}6c;GjNJO_P#&8$j+B~>g{YsY2S0U|I4x5>KWQp
zOp@-Y*qNAnhEUW3OS|45mFp1~l~z$uPu7mQ7I4U9r@3O{{F=D7!k&3iourt>_cPvA
z)=8)9F@N=rW8HFYSr5IzjDdmrjBP1-Qu1@u1LC&|JYf*KiQrTv(9S9aR68{l!-ELC
zzv_H59+4~iK3DrGt&#na>@&`gqr4Mpy!nE2buT~t0++2C$!4`+n&>G|)cWN!&nhO`
zi_9EU3!kZhQv*22HHooAdYt;(FZUM*+rh@b?0L;)LchX>lMQ!!wg#8f$dgCpYNuEF
z_1gP_Z=^-n>fxCMYjX|!6ZlrLddm`*0(-d;oQ)q{*Bd~~DLtZ0D@mp|{q7;4I!5#p
z#-oO=N0e}GJ=P^z9hyLdRY18k`JycfaN;?ZJqc6{hESc2d{*?MOlKj_p;Hwca-%^7
z8}r-*n2GDWGHB7pC`)C&Z;PblGcD#}HXolicGgxDiVb4OMfTa0)F?}Gl2lx#zgoYI
z)B0q#M(qDE_g7(2zH$36jKUA35k*Ns7(ht@LAnu!R7$#2TDnC_Bpq5}L<te3JEfaJ
zx};&~?p)XH^MBssU7PDT*2da!!$SpUxaYdQah{(O%QPviyH}sI*3Ry?93BzK9Dnds
zTi!7&i;!Zj1&<s?d#{_cTky7G+{1i72@0v-pE{DNl}KZ`KT30!_6->X^*&iS=kEN7
z{`@?<_ooBxrjP1i>=+WndvGPa^h~(W0XOv*4~Iu83UQWulol@cG8riP-sxlQ@jG;z
zeQ@cmS@9~0W>~h|RyBkb;x@lNMiedUAm&6CJ~EhaCpynjW|_0X*<!VD0>mr^?#(Tp
zXG!z!$kH@<9*EriIt`GJ3#LAPex-UsekZBSJPl_Az2nA3l5V(zWy7Lf&Z5L<NlD}Z
ze3qir_m0^<HDc8#D#%9SUD}2ZsKG`#;=6o(P%iXmB96W{;CX00kJxCog!9yU5``T-
z#|Y>U1upS+m;lem)5?@bi$15+So#xhgAU*qrCE$<_@o*!Db{jT9qm{EOt>_jpJOa-
z>s8ewAA^EhXobJ>bcwUk0hn;aWWn%@oHQBlAU?{#11lUmmM~@AkGC@N+og1a76&YB
zSaEShnK8w*3B%mTPcILNt*A=rN$t2MBM+GeovWfNDDC)6n96FaqpZKe#ts1M&DSR)
z{->4H;PndEqyt-dzrS;z^}U>Hf;_Q5%I4le4MLN1J~?06QL_|>3YS4{LWK%;=257n
z5722>{A*gXK?>f+Y?s1kd7L-jbg@IooO;=$c<8zz>3J5q!TzcG6L<!r#m?n^TpDGO
z^;8r0w0nFU+jVDp{i^ak8K-u2yjOEF8o~Dh6d5|X^AgNkppXj31w%~_x_&$rg|(%W
zyIs8kg0V0{Ilh=Xa=0mFI9fU!iOLLQ&v`h8E<UGv0ydM$K1`^Ggw0stcDlA3>?tWJ
z4y*$TG*60?(8&(zx70aKpa|&wpz{59)@anMHFelUJC)NM9$eh7@yHd=Bf{VPayz*^
zyaFMdlRq~rQX0I5K_V`%@amnyGIrO1?Y?lvqWHVC)*Wz@Q{5}hEtN=aRWv0{f~ml<
zN)JukCbsn=tGCyLpK_ixOqiwyNMg+o8hvvSCM{;`>UZXU^TG4X?;bT8r0+zBX?AO8
z+B6yL3M)U0|GJ*9UHUfq^YJ}2FYImUjtX~jCVQc240a%q>g_a})=#*?q5ERG#|PAY
z(O{e7u+=b=OTFUET@|4H0t-t`HTfW88to^_Q#v*DXnjo>mvTSNsemm$`4QTeBI38r
zS%1=5AKEOzvw0`bdD(l}E7N(oX8+==--7R1WnuyC&Gji87VM0TI%UoZ46ruQzNaT0
zbRWuYC_7fF2rA}yeI8(2@6wq0Hws7Z#EHMvDTzXL9eAijq3B8uFQ+vg{GVQnxsN_a
zN!&ZCg2wJXX^AU)c#pFup`9$Y*5FEp*k4Uj(z0JxNbWoFd@gTQviz`|?wCC4U9ot2
zv}v%?LG7$qXJ3{(fe5RxcME2oj430uelzqSn>`J?XwYDZ7Z>x@(BN)eR8vkWm7Q`!
zOHfm6DluzRF(C>6&2S;c6<JiDvmGrc3I>fl5v#<1{SEo|meiywx6cxt9mWcLllZUO
zc27--L%WZtu(`|QYkodeB?ztw9_M$(y!WuGptUP`__sKx$^IxAf)A{#S-c{mEY@5Q
zxRB`51o4=CBR!K&v~=!=NAgxDd+num#qDg&4x1lIY72q#LayWR`)0AKYvt78ScEih
zZe!5B?u-yI5L@_-*%JKFpz4qJpZUx{1w`=O6Ij}+hs8ZpRW28Lxy=13%TXJBcxjxl
z<%Cs27n8vFs3YMMS~(WWyO)@O9!a+pP2yUuS#Xlp6r1C?17WP@(kzLC^5k*ez1vC(
z$a}xP#l9Z<8q%J?C7gI*){a-IawmZcGelhX!7@chcD^D*`9ZyVL)JwpPZjQZmiBmD
z{lr!8P{R%zLwfgR+#Dl+XQVj&7<)Z!M-NR>Og#r|L_+-YMn|y#c9_R*vf7{sRnbzt
z9LqudvVo<bSKW&vc|6tq$+CTnS%#y#3e^WYp$7^bbK`X({ifUQG9@X3p}Lew@xDZb
zi|3BlYnA`4lN+?0WiELh`;Y@C=gJBEHxJ{$(5HKsqPdns7v^G|C(eW=n4N<M`@T1$
z4hUGeT`rA+e~LtKPU<`P%~G`PAC{vw>&6&I=IW^gi*(CEOgqy8jbl+0T(JH#gL)6@
z`^k0=cgMaGc7D=m1YxeG7tf|1DEQ(|{w~8$R*czJu@jy2fbCdU+Bg1nGoE{Y%ZbAD
z9Mk%%<(Fh-WV9RqmaIj3PS#Q>n!x1o;TtRe%JLmm)jc@od%j-jM$Ud|K-RTnGgPaW
z@jM<pbu!*e3SBJOI`*XssR_NMrzpx`AtxN}6?Ps`CCJ)F>g--i3{L^Wce1SE)34u;
zztdhl(M)ICYR;Duw3=A*d=N>_qHockHQ{v@rEohyK3UnYK^o)x!a-Le!Q9p0zKaXr
z$&~+1U18R(m+wCIKamK0ZmP<Hy;g~8l<@0egQwMgl9Z>8jbZSdd2k}8jB91#SEP@b
z7U+`pgjsHw`{F}@1ne2EV3r8>(`dP$vE+S3!kz5ycUV;YoY<loa}TUH&(vn#_4m>n
zKb5n{A-S)xOpgrI?u;{r#cy~cZDkSSbeLHD4x+5)0s#%v@uGwN&O}d15*<`L3#0^R
zeRkji3ZW4;-4}cHB+q)c8F1Gzx}E$AVcpKN%=3Cx<~aC{ir6LrO}f=LOdcF#c3^lO
z>55glT<teuKIBQblkzuQ_#%0TEq!{Ux3O~52x~X_>_z7VLJm!7Nvncx@q87H5JwTo
zDMa5}RowZkF~;i-X&ipyZv~YJl5H7S$O9G(=xD@6Cn*nKSea(KDe6+jBu;AUVO9hv
zY>7{%Z1VQ+Z<Wcyg)?muCXr>%)!Aj0+D(N8P35^XHK45<X<&X)u~7rS>ZVgkR6AXf
zw~9ggsAqd)*+|@=_9*A7bFTL}37;X=mw*f=X&Bk!yKN_?^QSq%+kd@V-$h-!DW;3<
zzp@h<O<2#({#NkK-dJG>Y6!TPn#=?i42RtzzePT?mPUfsP<Dm)=S)d1&{Axh8Ty?q
zbIo4@qZJQ_ame{gc3_%;V_A5jh3w_M2CQ=!64UmQY~T8$H;V_aYhW_hmuRt2u*x5<
zh0&lB5%>5?)NN0HmA2gqp!mS?)F@Udo##uOnVIfiOaVrj>MY;ddj<GoAAiw_UahGB
zRU9r8!ZC*+WAmHO4~G>|bE1yNXI(aU?C}b{_l;LjMZU+livSl}chr=>RQ3rQ`MA%Z
zV8eSwi;bthVJdFTIz*u&0`%J6UwG?t4-{29;y2z6!kOF54?kP<m?2|DaMlCMMr3_=
zI!yI0Hmmo2vt|Wo#O+-lbM*=A`8{<^-f@1e$+xClpCHN*h(jKv`A`&}XQ33yETjv>
zEx7|>^H0^XTP5Q2v*YylLd6B_?wwPxt$jiKvMX-vb$u++pZVSvk;(_Nds{#gNCI%R
zVs^vW%=6+?aU(w)z(>4eBh_I+;w=tOF2+;O>mlUza|3q+l#x{f>*PhgM;zk(P-M_u
zaw>re{aaJcT2;cHJIoI=P{Ynpo`uP&$jgH1e2+Puv}eR=F`d|y*3VHY*<!!0X$;Xt
zYpW#d1KgZI<MjZ?@3mNr+zp_4Qi06l3a!v0^T)+yH6|Ni2LvW_W&Hpj<?$WU9Ry;w
z61nPohg!x?u!$&=1}@#Y_^UdfJ(k%|9oASTtfw<rnVWV{hT=fKq>t#&R$q^tg`mXS
zdwsn+*MGC>@wC5uHd548N@t!3vfGX@iSe+=#%^M=FwVJZtWJPQY$!xH|H75N`}L;{
zZ<Hj=EP46*e7f3rr~ZUUsF=6C&U24CIlljbTgytVLjWppV~E+*u0cQ17Da-LEs5;_
zoB!7_b5GDOC;EG-En14E`FYS3F~1#RC2;k|@HwiCzMn9RcfQBc#G?D0&N@P6oh;uk
z2G<SR_4Wrw(1jD7F$}hCv~!O3Hv40tgHRDJZNY|u<q?U2Qbs>1uxhCuR9pv5JWEBF
z)}K$ux^KNpg73mjv6m~_T0J%StYgmA%Xk4mYJ0bh(~rw%;U4ni6$f^0w%<e6-Mg`0
ze|0BFJk8Kg9DbDP+q13(<MIPZTCHRl&XyX3L@VuA6Ig;<Rx>GX&wZ0ND^w=zeuBBq
zen!9##PH-uX7XxbKb~oa@cnaQYVvgN^W2+oh048}w`!`s5?8w*j<GEnO|XA6nAmV1
zhappgD3_sX2RH%ofwNhmE?VpLBz@uI*lAd9F4)*SDQ?^*_S+3i`e<s#d*QRZ?VU~x
zCqb-0Be<<}1DDmoLC)OIEmnLiMuHyHwNDkc&5$bl;o1o}G%l~I0E|*Bj(?F_&V!3S
zHHsl^vLaPaeQ(kI68NP<przgQ1^qyq(ZhtRm%7AW%ewEVC(HzwsY<hkxHqw?o=~m6
zdZjrWJi**+#&oOkIFLwo`-r18-=dDs+f5O#bms_a!2;7$c@(%x3_W}?8BhP|53ai+
z$UgYw<|_qeJPA~rE2~ELa%sOzvpE1<?og<5cIzxz7V4?C>@klqLbqF*zT`u`5Xuu0
ziEg5=ULDB7V7Mi{{vm{AsqwQ5TSKBtgPv}G2jenW5!p!UCir3Aa>lL?tRTNS-6XKI
zi<#^{BulDyAAT*{Rw3Y>8T&-VPRwG*5YU2)MHD1c{IuP0r-xS_0Z;s9sAHcs>(Imb
zGXi@Wpq#Ru+NUv(U2e6Md;jb=UrOhkh}J?He<#>b*xXyKb8vHT(<D>edIx7=%8f`9
z@YSiyHC9y&=I;SRI%<eq*U@DU>rR%FOpC$R;F<{dMdZ0j?0+g1k#{iuIFy={wx`_^
zoGa8bx!<HZHlcYDuCs+R^x4gGpLNdcr=Y2T06$E;{Q#s5X?jPusoIg|v@jG!xl&0W
z7XFtMBXZui>YMyfYKK!}@v!mIOVe=dmdb{sUrEDf!#SenZH0*6n+7jqNLNkTJAn{L
zZK{ZOH{Out;geZ8X&#b*<Uwl;k^t663`t<D<aw}3nutYJy%J}9u!1TSv40>@IKA9M
z75*-QqL*!1SrzFl2tp$luQ*jwwJaBe>uC$&Jcf7LvpPzUjO-^#zWSzFV_8e0V{tHk
z8tww)<EmP)Yz;L)ojLu@eWCRr7K6S7?wjxn&6OT2<Q!5W)>qe+u6922`~4k@Ba*MS
zT~V}0Fm#K%G|uxApAv<7XHn~}6Unaa==56kM)1?ssSf2E0V`>;smA>N7NefB|Kdd1
zj&N5U?(P`<C#;G2J@U&g`5rdul5KFuU{xK*Uq>+5Y~QL#>PoLTH^$&(mEod#Mo8Yr
zgtF%GgW{{E3QXU#1-=y+g;KW14du8<?8{`emDBkg^@t`aGGOs__aB-qBLK*Kc-sMT
z3b(=uhm9xB-=9ZzVGvZEgX@lVBMn-#Ln#a8u?i7f@^7E^gB89U4@KiypF;@v-<I<w
zw~97R1SxQ^=pVxsa48YnFz(ggf1Lhx>{iFmsrGr0XNvjnlPCJwYs)BTWDuOL^$$-D
zsMC>x8L*$L`Ov^-9&9K5riCK@j79vkjCN)5OVGMll@+73#2lPwOr9N0tkSeL@)tdR
zMsMAL@xXtKYM6}r+mQGmLYp#<5Q|_a-?#gL#pg}H5Z-g@7PIiR?7{7>077cPsAk52
z_>=)9)UqdAfcD3FYyq+EKOjo0oss-019QXWyFl#cSvF0N-VjuEGG%GwrGKRy`zp{>
zw)x-@0m~fa3CM++NxZs@aI?rA@cEvY%aHU-il*s$ZTKkx_1q+PUYa%!0n?mN&#&my
zD6PF9o7TM!z|p>F5RM*^jRNy!ezlMLNM)lM4)%a$5$*1DXA3%sNim+kt3`uOe*qlB
z#J4&(>y(P#j`?@wd9*l7<Lkgoa2+?m&cW8mR4gs4)4HYn2*dM}>{7-25HBVs@i<eM
zUBY<Hs-@V4w&F`ik;eV_!XPS#IxeEk91$O||88fG<L9`-C%xAysr6FqNFqt&8pzPw
zOu5F9Xwq4_{-)ph3(N$n`XwGtKe}Oy@Q9*dntP9|-VBChZ=C?dU8^Xeo#_JIA?BmS
z<dg6Js|5fY$D}&<4LUfBU2cO(ynMG`h5ynH!MPwvF4>sYf!Rq&vTZmcFZA+zpgO6e
zBPlFB!8tKgk_XgU2NNhiK8_}ZEP2bKh9!a3%spY!RrRV~LEsv_As2E%Bi#*7&rp63
zSn__Fgw}nl6YfnC;F$&{*Lgs!z8tt-wGN>p^A)8=Qp83SSyY(1JwJt}yGeQ`*yqsn
zmi9YC&z_vgv!B;s;~oX)oB?!L`CGRhAtJ3StaWenb9{Tx+{J*9REsFf27y4sB9qf3
zN)nC8!uI2=%wh=B2sBZ2Yw|^(B=D#M=k9g6elUO;S7+Iz-+oISp3DGy1ux^NO=}`#
z8>-5Uzx4!v=o5{cKj{GMtjANW;awElS(1a}>*EVcEG~1}CXw53<NmA(-}&*`Dl0H9
zVZAq<s$*Vn{X!(`KnXQpgG%OM?nkJMrT?bu$WqQIZJ&w3x>qUzFVO#TCQX6LPXl~_
zUv7N7$Ur)fC_l82@ZW^<ayb^GCp&x%N(3IoJV2wOX@nabM8%MaLBe6n**@()v$|jY
z#`>ln%=3tWNa4McmYt8Neuwv{PRm)KNnLR7dXKFc)p<p<;njGU>Y}{1Q^#Dm_@e3T
z+1u2w9LPi)saKi^*wacS2_aU(BA2yeLaWL@D>)*`Q*Jp|ZLZ&T+J0kB)+$nd6>HkB
z`pVwx+bU~yG3b`XuE3q@wjK9W&1CvR$LE>Atoh_V<>r*ITV;PdMeVdFs}&Vbmv1gr
z#<NwBll*tK#3ln^0~B99K@k%Y?YjwrMyX3pLy3$B!J<rP_Dp#b8AFomkir62byC<1
zcz%$&B;eWw_6}W1SSmcI4N5DdrVcDj+5Wxu>a=*;OWzebUwE*^ZG9OASEA%5rBJRH
z0;&&LR4gtZ_iZx451<u+@ntw?h)4(#q3`)I;fRI?*Kd{3*iXV7Yw5XVxt$ZS!G8u_
zK&u&d4ZHh0-&L>z79W$qyy&}T%bgOP91mN>#e0Syi$xAEj(cLW!LXs>MYtrnX{?WT
z2k)+x$tV{O*SpwetnXUMAEeizy?PHrCi=B#j8*ocIL<uyI89p-OLX&*qOtl)cyfmp
zdmlW8cSl$q%VegSCi{~9PGRxZTKSC5sV6PHU{?((z7#NbW^pLxH#9(@mC<n)Uo-0;
z;LhE(T1;~Jw5s?z!4G_7qQkaqJ$qf3JdXaGsOnE8PAi2GijxDa|1>SPz8L9EZ?7Ln
z=U$Y5JRyOz=KRhMSCrIasUG(^clehjo~D-;MLFgJrDJI~*?|2C+kxxl?4&el#a-mf
zNvfs@KJg_MMxM;;WNyS?`TY>P^O7{PcMQIidR9=4Z9Q=qv@BE|UGov<<<@q;fR|_c
zj4*5BW^I;B!F{yShh>&$r(*-*(r<mH?8i(nGgs*dwxh%SRlqsWEgyC;Z2z`r5S_Cn
zEtz_(*5Kw%+1eR|F<H<`ZIzdEOzl6oecAl5fg}n9g7F8Y2GkR5>J=GDPz%F#1^O@)
z3p4yBRnz$B!(6cUNNJ7#V?t~w-mcm{X^ggmYrc?2r%n!UYWMt9gr-)hj=!BKIu$Nb
z{O*L^W4cEY3f~lxSGCR%rBnWFk$y01TX+t3XlAip&YAqUT%?+}>%h+5lpq}@Sm?}D
zlbK-j?}_?a0Ky<FXqdNtwRM(x@6>Y6>@%LeizS0;X)Q$P>Z4!oF9Oy2^}t1zm?!P=
zt;K}n)V_X4cTb!6ZxxSryXnJ{EEZO<gHMH;SP`q!tM`{!?*ZR4(+6c33{J1+7gGkK
z=*iz6KI^1eYFPxP?Wj^=Iiq*}+wZ^nJjr=-;Sn7-AS3vKv~^m=GDKYGSWg1sIsD_b
z({B=UYp)0i*;L{tK}3D(J#!wO*yM~}S0j9k+wZMGOt0)*wDvU2yA=J|SEXA!y~FAE
z(OeCQ;}YfFItHUoCxHiDt_AMfXvNZ>O=sD+Zcm8ARxdyI0*a;^DxJ84(YmkPc$B2;
zsx0~qrF5HXm!G9i1?2DFqcjtHa~?~_d`n^G#jNUOsu<>da&hrNp%Wpn9?w~HWy0uo
z#X+|?3m^|E25rdMe$#RLHCFe0H%BF#OO^IGWZSelL?1A|>TyWG5^d517Oa}_=yAI8
zqolsSF<LkZIk9E^@snA?5Hn|ZTOy@m>Xu#Ew4e0b%0UhsJAuhhYrJK$kd6X<wXLcf
zbB+Jv96wh--Gt8ihz%G7ztvf)QaU-W-?d18@!T_=Gpt|H1+kjXt&rBScQRo~J4J-R
z>&B}2MD%@tsurf;2G`E)H`2l5V27tztS#$)OE}3iO|sBi+33wdXENFxFgCoSRoO{?
zX{ErT4`Zw5mDcZa?xyH|g7`hXpKHS>a1u+WggY{AIu?A;N%+<rse)$Qice!lmgYGx
z;eX0%y;<stJrI2<$(ItN(qZ<1ztRVdNZU)j5R8JKrCprYh+5V}xqypKi8N_qB{wkf
zcp+1m`7w$PLz9SZ9_g)@uEH(Gc<3x<v+dr_YufgH8Wm4d)TWrOHxcv#jo2x6VZW39
z&ZhG$X3jF?Rl_190XE$;ow18OA$T5(94I23J{o3fNjBVy%l#W~ahByLbzEJhP#T>@
z7OJX8KP$SF%ieQwFk8kmbe6f8!>?pd4J*ePV$rmYv3M(+LsoF=?Tb`Es82sRNOt+n
z=a%39;@wi`WEfUt*g+0VFqTkDe-Fgsg|YH-OGqN{`oJ5jtfQP?{ljtSorPRl{dqcS
zk<e4wH#&#N!fW>YI5u8gXOJzt#_V2{E8!1#SEqVNCfYoay3iqdeYzhml{ls%QRq{O
zE=95$4zP-(Uw|1#f=lZC9|{V?mWGM?#or5@ReEwQk+FaAg)bgG)lS70FsEG<wOH8%
z=^R`|9dg#BL$JW1vl1L(h4rB`)36?w)ad}->e<%~&eOxZHk*sCzLrO6D*6FEKC?3V
zJIUS=hx(S4)Q&bd;7M%mkmTd#7n@R6*xEf`Ag|twJ^ZqHX1hLJ!n(8EU}%ppM5ufH
zkOgUB_fI%2HAJ!1dHFokMIP)?Xm(5)hte!K!GH2hNFeZlO?I-5J-&|5nxkA~V)=K9
zcj`2EW(KR)b6#uhSx<*`=aCbS?XxAO@q_w;$796}8=o&8O`M>VyoQof`0RA_ywdIt
zPD8>>%Z*(<#Kz`DpWn)6M!JO&+WThuVqK_XMQ<oXcxL>dDLd-TM`zIN53UT2`$;%2
zk^?_YuAO{wBA^YnOQ=t<?|u1n>$25?{0GvaR6+G|GGyodDYZTf3R6=jfwMp&!6(}y
zjey?J+Cj0`>vz~IkK$0VcYFoDCIYs0vs7R)sAp|18jD8ge1P<FnO>P@{5*dwdz0=8
zS#1`!T>-Dy^b&XSzrPQ+1MWF^TPtKQR>jORI~&YWsJHl^KSHQ~=&n4(1yAKajV>e~
zrcC;OY%c!yum4BOy#Mr|<bS`~@F?`9;!{gXEG!y5J(V*0UxL4>x}otP<r?Uk`yNS8
zZTfwL!AH3e!z{r1+LT4K_=VR-($mwkZe%zq3^81yDli1Jh>*ZFJ5h*tBxC=IghkNh
zdah7ISr&4=$&ZHkNom(|WO(`B(b$+l&HR1RDk0bE4h(I-(NExS!&PnbzI~$y-yyRP
zatHR-c^*iH645jRTdJw~j+`x=J$OG@TmvYQC8HmSGy^4{l)1V2VsuMyY<Ky5{R_(=
z<@yT3zZb-Wyd&`$`Mv9^;3cq#m}k_y^|cx+*Ilh%>@4zfx?_{j8yP+PoIWs}lsfzY
zJKo0VFMO#G0_$R)1Xy{R*25$G;-e@Up>{2AXQo_=6bAu4-NHh3uiiU9WL_nszVNa}
z)yx3B@uIILJwgYMRo@8c%kY4{Cw!SWAkW3WWjN@S!GoWp1qAqp)vPWXjlSb=QECee
z=8=L?;BCk>5l{X0_V1The>^vy8MXdr+(uOxMCPC}U4#%)sCn^9-U@QNIPvBKK}q>E
zTmdl|bYB5t07`<utmfWio)lrY9r$j>XZy<q_or^3iY9RA>j-`Bi1)}EG=3@0ZZVh%
zHy-(^QH-Dk*_x>|^4vYrHJOs%^m2dx{8Wm<RewDSL>a8b^OIFrf?@lgUTIg0)?IBz
zav?=`WALRaZ%HlY-+yFtoc$4cR&)ZmDQ_}<zO%bSmeyP$>%-`>G0V#K#m7+VY&(CT
zKnndztwmFrP^u{PS0>bjR#A?Emg7x|w7cdPSng|Hb#3hk%e%9b&#hjirnb+qnQSR3
z^)~=%VsX^^aBeK_%<Tmslm85u_Ve{?D`G+uhVja#2ARJON;9ft?SaxS2x3U50(b2^
zAixtVB(UWweNB-|9HzD&W{(^Jn)r}=%KVQZaoRi>#f6&_F2DLN^njN)<69kDzQLhR
z(jKa(B^}wo^3SxBc~k!^U;EfiuRBdjkO6WeGB(=UYM3i>JDWbU-ug9;6F)i}w7%Z`
zs@`7d2geQxc4Xc2O|SD8%^z@4p_S=1Q8Kv;e9B5&NTBb!XACkoaUpRbB#ciI@jiaJ
zM{N2Sk$JvOO0uyI3}+F!rGpEQU?z4oGVMw8-ndvA{{#p=COHOfV-M;|UG~lELm->R
zhrH024)ClN@Z6V?CWDk@au93952l{Y|2@<rxd%iPdoNSj*WWQA@VMv`qgnyI<9;j}
z0M!&d0BvYt^S})Rfc;8+T6hOo@8*By6ym2<&M?~gUs_6qa=3>)t@IVCJ2^fj`N<-s
z<l18S9s1nMFf;n(jfL(X?ErHLtE9&Ad6D19C-PxV&0_CY4<u`q^`&aJr$X$a&)<$8
z9XbSO@mPjxpZEyn>+EY<jWtNcPF_5P??IkJF#ZUF@T#f)*JtzKr9~FsO+YPAQs94v
zjXd1=#xVgN37c53CBODa683x-8#}Yc3&Pcj0kD9O;bp|fE`zAC@t``sucGK0x9w>G
zVQ{trpb&2P*rb;M3(Y@^x9*A5<Z$#xU~-1~IT(65@`I*%F@1G&tl19e$ho?fS8d>t
zGSy9pEm+?K({0Gx=m9Et8(AN|oThF?=i5PBwMT?PNFQ@@pCwC4ZS9UCqXjABrnuVX
zpJzi-9~A^2oNZEpqcu0`m=D)*a+=_yKS+~nIb0iB94u^05$D9$7}3b6^Bo)TPW;~T
z`|iUK4$Si)nb?kCZFhemw)8XU*jO}Gy#jdPU7z*rfM++N^bh=}3UGn;ro7-R7`3F9
zM#MRgjDit14dmVP&@Hu4@&I=0MRq&2@nNlpg;@qU%7Tz@0`l)g%cQB-9i1mMm1l~y
zVo6w}-vIr3q{7k*Px|Og%^vWi{EvUy9*ocw@>6k$sL6%qfmFYA=t*vuTpXu<&GT)p
zPSICbnO1dtIa0+=XBv-w+WeH#mI;04cvIT)K9Cbn1UveU{<$mBR&7aC?LR|TJja(>
z4UNb71~ifv$B$iBcbf>d>0jbEy!8d=W>C@o7BEc?d$&-jTr%bB2v^c|9ZbUn_o6Y0
z_~{_zfo=JSW`_64HpdPNygOWL^ruGN!n=)sW^NFynHm%#*;=DYnpP#8m-%cU52Ts4
zuTljxVFSC@o$!a8Q9S1$3UU54?X$2u-3N6qFuh*(H#0Xc|2_s>=Hwv3jzo6ov$%UQ
zIb2Bw)Ai3cnPN2w?zDCmJi*D>t4C6I;^Q}@I<|F#4Wx(&^l>&RCfzqI{~3=NqbnR`
z1TYnB7JjY9#|Qu9-3cBEH^ASi-!swT^7nee$%(&A21AWKbP3Ll`!R<CxP=aFe-W?4
zA6u1jh&UPH@Fm+%u3SQOz8A;ku|s$oFPzx0J%OOc%^3U&_x@GO-JR_enN%gU?=x9u
zy(h$Sc*2nD3YKJjA$VUtYpFj+sCSkG)2S;YurHHsNx5p6|M>aSw)h0XiIkniusDnr
zJO9Z2Nx;j?Ug~4_<+(V$J|Z*3M8Msi{qBZ*>|eQWDW`T`SLqeehm`VJ;HO_9_ut|V
zK6r2p<<FGw#X1kV*P4R3CG9w7A-5J8^Eq)wh^v;AQr`;291=m+E(wFDNJivkC1RpR
z6-JdJV;5pLCOG0n{}(y}o%Jv-it+zX__-4kLrY4yIqNbl@^W)?>&u@5{XEdTBh>5o
zEX8ggGs576GJn<e_3O3Q85a)UPM(xjPm&-is39}{kC<G&(L%!=jYRc<lB{pvzR3tZ
ztdrHy&<J-of?lJY=+;!F!yjocN*`Tq?Fsr0Q1&n_=siuCLAb`k=dul3z)@;9+T?-Y
zYb^Qn3GXHtJcCx|=EbVppcoss&Pjs`5-CuDP%ks(c0oq16%>*dy8DW3CrZX0Wgb%%
zOeo6$qRKxrG4#;ZxNfW{LhiA0+*~C+yjv!sJ)n4M{w5O+8I@a792zKg7+$|#MJ0ln
zp_<#caVSLR9RTj_NxyIyTzgmw*hGkdzYZT*w}|pIfBjS%d>}91?c58DG$Fua%M5+)
zz(?tIVIz>y%md0C5d;PKtd*HL3f(EkIKX3OX{Raxv4f3Icjq(S6dG`Sp2?8Hx%Ue3
zC1QjPGE?q?qdT}OmN^upeTibX;EhzvEk86L`FNKBurk1hy8Iu#Kz-fn&CoVelin)b
zb%G=n(yygEp0x!KLCByb133ZbA$rl*ZN?Mr2wq3qk~DBqNp(cgD5=UJ_P-J7RNCuD
zxPF%Nhpw&2^Gp)V`j05JoD<;f`DYeR)OW)LCU+uWYTT!?rfa~QB*}YI7**T}f?OfX
zd4eJpe6SrH3^H8bB8e6tss?0HAHS0XlKYZC?XLxmJIa^+nh})Y@4kZ*2Ks>FgKSGn
zMO(EB;DyI5j{P$oVneCXEl&aA?SPkE#N@pls79QEp7Lngk^^c%uKJ%x**8#3b|{pN
zh8>n{C-b#Fsgm~_p$e%9SexQQY9(?|)Ywjm?RPR1i!~v(gHL^6LPQ{j`Wa~Q_)ilw
zN|}_t+y`$&8o9>{B6@iD8?mE}G0yg{Rd>~p04PGvW1*-x&c{3&k3fU^6ZfIM%j<lc
z+`Q?6BI_}3_F^&TmEPSPv8$&QjEdj>hnPW-rYwjAK{1l4^=CkA6$*jRnflj2J%$*j
z&ZU0r=?C`N!H^XB_Y5R}PIPy8+rrC;64-{gE|%%e(-%99VoYduuq;8SudAk1svt$@
zQ=R*9q3ak_BH^XOp9BKZYlGNXm;WRhY2*Q$TSrq#AN*TR16G$a6KM=vBP8etvaU^l
zA)?f~$-ZT48!Ufy0WzoC1MG$km42mY5iW!5-l#55(*5b3_XXMTy_b_R(1i?b6H~~-
z<Awz_{(lB+m7h-_LV+W&HiZJ+3-2^=$vGiSVpR}$!TV;woW?cKW=q~pE%@K2W#^O0
zY!|FM34i9yD>|VC8SrrhJD&V??_exrgI*FKYq&k1dRV-0Pa(CGnYDD@BLc&ZYjzNA
zit8>qbqj}@<V}?qK&O16#!$h<OK4?$s`70S@)~u-!E(8da4(SeHcVa$vS#m|K*8SM
z1#7r|3`K!DjQ>xhR}{rC6Doy+P}E3MY^wa#*uj;DQr6($>0<>|Ojh&b6G8AGm@=m%
zr!XO5<<i=*w>1EsA(E$U!Ze2HrB^<e>W9=hkVZ|>AxrD~obRJjI)ul_3X~S?$>R}9
z{q<F=KY?P+N*+VFJ|v*3*Q5~w?SLi+-){zyIhe4Z-Aih@A`qr+vY8(@K2D~}PjpW)
z>5nKF$R~Y#(WT43=52DDsG6jpJaf<(VkdbH?3q2M^2X-Wt9s_9tlumR*`!}J6v+zU
zx>#iL2qu2jFr_N6-oWkVw1{vNe!230fFaE6!3xt05FY{}H;r4Q*qIo9<-!elj&BFv
z>F7Ww?ciwN*NpJD%K72-<+<Ng^Xs1~RDB2DL1W-`j&{{hi_Rcci1pHXi`4Lf#XnF`
zC?^+8-#p<3sg9@aP#+9=pn)kBXLG>OoDXi=lNKkAJ_6T25jfpuR!^a;NFHa)XYvNt
zo1>Ua8jIe%8{W<|zy;34s&WW%qqCXH2)C2^BvUL%&(jg6!RzWOUBUD?Y-XHd^X>Ra
z>pF%aEQse4^h4l{2#I3;KB-mGn-$Gy7xlRs@`v;M(QX#u)uRd@+w+PlwVmL$1XCK&
z3q<%~1>Q{H*ULsf+8Z6l5-df*J4-7;FCMJb?c4O>Kc{jTldV2@{}*AXDP*3NgD^ID
z92yULuNBEk846+LW$OJ!E~Gt7yyepn5o^&bniU-Txh{7bjY1w(X44Z%N~TMP!r*=J
zCaS})hq;3J6Yx+rtnp0X9?nDzO}|D)QO1MUKdCvF(pq_S2P~}3^W_nIod36b`ri=Z
z-;E8vxHabg>!6ik1R#*%`PHqjuYY)?h9Ld_`v$o(F{>P$oSat8DT}U~<Hd7fp72lR
z5s4E2^WS+3MDfG!teT)Pm${(;H3!Frkn8$=7FJeJ>(k&Nq|xLXV}<{&GH?x_umb;Y
zg|dbV3k!=$)_4+Cd>MG{VD7+0|N7NzB-Zo2XcGnLoMm_Y4{s3iQvll33{Vu!z<#`t
zzX$xxOf;eVVqpi6Z4{ixoYR1c#1&?LX{ee}&U$(`>%q(A$zeQAL<NlUAkuE&-Yb@@
ztRI8C<HKl{!vk`k;E-Y3$g_0$tqb4)QQbgH)&Rzm-72`{6`xy9Aumrr@!AZ2*8;BZ
zx0cQi6(noGb&_G&=w}QnPh-$^=$^a4;Qu8oumTx~y$6u#HbYk-z;=`M+yIQ)XuA!i
z7u&iZ0u7>yB|X3ix7h0j-pjYR|KoWE{%JO7-<qPRmHB#1c&7=6mH^65wh&Z<ccaW~
zS_&mHkYh;!Z~RoioAQ=jj;&~E3ve`#o&onxk<ZzFB)0dUn?C3w6u+T>kNffr<sY>d
zJ(?=5vPY8&$o%suvzHd9Ab9p6G==x@KX!t4Ld)kMyy?+K5$M`lFCe+kK#mF$*r-Z*
zP#w{<wDt{WD-b7XH<;7sF;OdhF$X*t(0jmk=&LgSe9-Qiihs=vmh8`0@TA>Ya7BgD
z$O#!EDl&l@S;!VdNfP2=XT7ssXbmfuC@~?T&%&62fNB-9eiv1Bqu|3U8aJ+tbcSXo
zVCLveogwVGzeIk&_oNQ;9M89ecA%9&%Tx!<Q?xajE(K8_E#&k%LfN3$L?&%4_Tb-6
zoB*jFy3}$-?Eub^`CpYYEayA2;4S*4_BMJOL@yMJ6@yZ2vct;1B+(X(O-!cZwS6I5
z;pu2)1KCvjFM+W10WlMV^v(5E<zX(s>D@UZa~%Po<+~e<7T*@{Ay1`K!<2h1)pTP>
z7&ZVdMGx;fLDxR4qZ(4!Z9ZxH0Q*1I@YYsHGA$J1%E&@q47K&aYRUqPZqFv(1TQHZ
zlOxKi|HLqJ0ZadY5_YjiDw+rH1pLIqaSu%r1-U_gaR(|S#zBqH0xSs4AQk?F7t!+b
zW&WlnV0;xzKtqlHrlNW5@EQurFQNvFxcS+eYj=;c<-~&q&Yc&w<3(ETF;$@RMw@o9
z&E~tLt9(HIW=Jcoc`0!qY=Cl?`qu!xg_otQ(M|*7+dO!JT<rh>cMHU|lTG!5b+>`-
z1xVOvjO5uT-<+7l@!~d(sc7KAVazQn{(=|S&=0unTA`3T3IgU7Z%+a{-=aK=E90NA
z#u#Bx$~3<OrGa&laN@A)KZ`igEFeLXB$}Z@rEzfo^@fnGF8l&{xf?1*0CuUz7NWZF
zb4Ln3a3@q%8v5p04rBoD&mYBi2|*5CzFZ1{*iWM2pLkk=vMNe&4}<=6^h!S#?{uZ3
zt1@c(FliI>;XT9@LoJT?imP~wTHrhx5Mc1^zbLX?0;7h9vaC51%V!0wC$Ie-3xG8}
z^1^zV$V-lAVCV!Qpq0ZWk*&g7N@09f6*N7w6pGzjKwE?NZ>j*@;kWC#u0FDVwpBs)
zBnKkY&p&#Cla8xjIA@v`Ol7LpvQwHtLN@gqdYD_RE-i`oV?XdzaJJdWf4l(iL74!U
zkN(NESvxM9=E6l3`Yf|LVNqUKj>O+>w3_^1Er2Z!8Alh{^-_|0C(LMl(m6Z`k47jx
z_NBM8A>bA*ID7h2-aa#nmX!)PQRE@_)VDFzR8l=Cjxf<zrD!5>?Y@J69RL1l=G`l!
z(?&WhZ<2p04Mb;+X)~p@dTe{gh%;OFTjuoA0G>hWuXG{P)O|k)x&RI>CnHHwfRT&(
z9!K%HxAy_*33XwEoyZ{D>Dd9gLqp|sM`<g=U=x!XoWy*U=b8yNiWeon7!AY3GTm&?
zr>!xbbOGVF$77}eun$63>2dVbSWeZq(rY<|QEU)s`a%o@v0$+cDzomZvOmd;a)`i<
z{`W(mnBgFb`9+Lw|Eg)wa}m4BT&;qXMd;KX(+IY57uI~za$Gb}aH8y4-zOO@{7a%@
z-!s^HcfAA}|Bb%rmA(OT$orx<XQ)sbAVvL7v24BOz8(o_HvEW%qpSRVc}5v?Nx;)*
z2Jn%M=OcyfzJqJefxe+JBK}<kX3}*^Yac)<&_aTe@w3Hp2%?ud4<uMOBG>K}B^KF>
zkiy3if=2+e(G#Wsx#4JP0dBY3$yc4E&Cu$u1=PIz4b0z{{~`OjqfTJ(c4ts2&_FWE
zB#gIPJ$dlz01`x!mHYq;BMaPiP~1Lmu<-(dqtw?V?_C1f-bk$%_LwLk#%*)*F)qUG
zt^|h5w0$OhoAe(411~}Lx{$e%Y;24@OUUCN7$+=NZ)w_X-7Q!#Zp6pm<FL%pqihtl
z{|>;PxPHib!q4Q<Pr^IoS{uPQ*J+|~lWWkkG>9=U?#`xDgUbLm7zq8V8Ya1|a=1D_
zyP2z<H|EkxOd<G8<S#48s<+T=6=Eju*NTiUS}VK(5>tExfD`C_4!_ezUSUjj9kN#W
z0gjnX)$yc_DZL21aIv-q!2Fxhq9@h-;=JWO0-~r!kovuV6*4U?auxIswy@(piy!*P
z%j&X!kVUNwrEQV!{OlHeF7K3k<NSQ5X;j`XcS@bv%>5$J6V8`wmo{U5-y!Nr;IKOY
zoP~@CuaD#cV{2i|>39Cw6Y9kYp0wQw>xdO@oDZQg(F;$ygiQ1sd>ce?cCap!zfHyw
z_BmEr@Tq29ul?npXuta>VyLkI)3PJpF}-_G#(2^bq=>hhPelJxC15EzUhZ{t;3anq
zZn{vyBR)_8Nab|x31l9hW=PB$l>2a?V{iajLw$hyD_j99Cq#pi@VXRv#g+<8T2AeZ
zg^Q`+J=xd=q8t9G>+5rHm}WR9=zO=O3l4(uc;N;;=d)^S<fLrtEz6dePVm3*Ifeu$
zhoJFOOcxf|9!lF0(4)1`SG$f0Vp>zyE&+7YQ^5jL7TMni6ieb~oxdNy+$3H7cDd-i
zc+``?9==Sz121Bq#h`1jNl35^@d4|Pg)0JTlZtLYHyHnVi)1Yc>xiES_b^T!1)h%&
zDZo)~uFkd7bA`2Df^Og6s!LxIKt4V>X+fJsyCh(wfH~Z_SKhDYFC%%2=yZ^ilg~Q2
z@1P6{NrkUlGF01N1Bvh;Tt@8q-8o)@Odn9T*x>Y6{^!#_O|d$`zLk_KE99}az*wI5
z<StHz$W<)z5(Y(qIz3wh?opHdl!_O27RO)BR|KOi7fBBp8$d#32ZeuK2n;7r%1IF@
z33^WZ-5c)BrewJa5bw^EEr!*TNO^);t0{GmDT(d`Xk1N8%s`IL-UZKH`rLBLlgrYK
zlAkQpPQzS;%HKNprL?tEtDc!o4)1mbes9?qb_%axu?z1wx?ExwquBZGXZ&mw;zMYu
zy!T4KNV1Zg_ARVG{*;#<gCCQbU;+RBO;$$1GW?IVdJ*j7_3X`sKUYAcE$PQk$;;jp
zPD=Z$;1(zR{xb3tDy#Hm#|{vFMe>OIALSXgy>@V+j*WYE-bCz268qBdd@yl=)VdBQ
z>;Ql`*doZe==*Kaew6A@Z>cn=y`F*D`CUxSwky-)(x;>3>>qtU@LG<4Gs>Z18Yuru
zWVKDv1ThP<gcq$~JFUlBu+M^>5*J2n)YNEZ|3h=q0M>%1x++Ts;p$8=&q08%*rR*1
z!il%UslS8Kjgt(aAO(aZR(z7PA1dZ4is>fzh!#Xw6qia2rcp(6F$4winbR-pc{P^l
zJ-}r2NHycdb&Qci*D`<ZJE_WLBp<T;BIIt*cEgW66etPv>i@hSgK9UrRY1Ix_7^AZ
zE8VgP+!b*x*L4~M6A4TtCumzWyH1&<yd}K;K?yir90c?`e2_Wp*A@U^_$9D{Z0cLF
z8S5>l$-+ZI$}i%})i4-2zx;k`V~*X(<n0C8YMue>%E5+}ngMK!kQZEG&(%_Gdfxjo
zQ9nDl2o<|D*285{dP&Ez2VBg;?HUb07}-v-n48v1@DBT&doCe)1+?P_FIlhd8X8*&
zIuRZh|2K;}%g%KVu?cpF&0-+Hy&M@R+NI)uK9t0tp@JaY0ozd}YL(P#CTh>&;&O9K
z-=hcSW}(M4&6{s5L%4|l(#E2#O%ktnD6=%~=i>iRgN9d=$*aT0!$Pf@9H3qYohqLY
z@Jod;8p>trL1JJ`H=x96UAkLB7&}~?+0x0q4oFA1kXc8Mo?j$7YdASeE;ME$jcr1?
zgUfYEmHt!zUoeV$l=wy&_d$Z6Wh<{jaV(ap0L9BLr)g+k;<K)X`~-g_7`d6-vti{3
zSiZho+A{R(pqe0z7T%YGT8fHs-gruu$oq^G=fi3$Z4z{AvrE~CRpHQN0s@%vPHhDX
zqYtQ*gaS9<`@-(TP4`nxs^3-opj+#;b;90%79J>0(PgIDNhdCo><mpxlE>DL=$e$8
zQ()Yfp>lf8L~+^#x9Q=124QhhxxHp#`LQaZ0*{bmA|PUm>vJEMcEe|FsZGl&&~A|b
z&UYx>RS!W_t?-nn3w6EgXQ-z|Mh1aUxdThuci5OQhfJM`3CYZK9X0}qWzk;t192$H
zYDEF!?(MOaUfhfAN<+oodsz9L17993R@yTID0S{LE7L!IjPnYO!gj?i;`>UBuhmQv
z0=9GQ<h;v&m5o%n!8%F<#fOY^><LyZjX3O_&vmTdv*rnM%^@ddd+(qpxfnpsn8?KK
z=%p8!H)o<rTOD7uXF@d!K8DYMJ}2trPvT-ZH8TGAqdUng1jIF^#yW&2Wr|Z>f<r<^
zG2QaS0V?aJ-J-GTVC8Q2tM7F*l6OmL^9%Fb6EP$e8F2<<2|VJQWHb}%pu6Blb0*)q
z^TG<O|IEQex^+KnhlFaOrXv29GonHmJT7l@n_-Xp<(`vDHiEc16H7r}vyynOw09PX
zL&;{x0&p_Kj?1+5?yfLm!M|p&-LVfqiC8TKb6{SBKllZcVcBx)W|qwR1~AgKm=Y|W
zLIthcktdI<l^N*Lgu-Z8{Q6TeDQNT&(y#$Lf*<6W^<@y<AvS|SHfq{z_tO~35`By$
zN!G9H(V^co7J3H`$cgbwV8(ORWNEy^$5j-{{zPjsl|slG?tJ@=4-Ua##^&R&em2sC
z#_s;~mBy#FTD)}e(bKXeUv`3m_?KarUW4mYz5K=x@Ohd&X-;zX5hqLaPiKh$v!0x7
z@sv=)6Rw(`>8sNfI7=F47nK~<vgy=qgiY}*P?&L`+CHwlE<r-B^E#m_9kw7a3P=Jr
zg)cCPs+0*RjhF~{)(^HQP|g#fX~5@+I;pjw6Zdie1v;<Z7a3*U$fl}Z$LuYQS-)}X
zXH5RwyJ>EEy7K8@o5$vh`stA?qC%DI#<`_yKaKk7PGGMzp3OnXW<GGc5MDYYA(R@1
zg*@xET%glPc%zc1d{@l4MB+h*ycO!k|9Bg-zo4Z5=JaHmJK1Fr^C`*OJM4!56pv+Q
zjnDSvEB)%X0$0~x8`m;_|FaD*uq$>~*Npl3{{C7J5pF;XiOwAoRd{l;ZvV}Z@3wGD
zSDzwxY;UIDOyQVPcB=P!nm0;d7JVWdFVCoc=Uj&od$oaS4+LT^Y&;B?nr<`Q^nNV*
z=EV2QuVwz*<HBu%pJi$NUX45-c`e(hbS5bgUn74=l76zDHG%3Um_JixK?xN**a(dw
zF*#xmt|T8io|bl<eDNv#BNg4+u8UEWLGsnKl&pp1jcASP^sVq(kG-}xoANp7QY4ji
zZtoYKJux^Pac>dY>SAsQt<0GPE33&GkLbq<Vr8Wo347JsA^i{cwvT&h*H?(WL!}$U
zX#~yWe(d)ekbC(RG#vg{SlRTjZY%N#-}a|TTQ#OWPGN!Isugt$d3x>04{yUxqR&O;
zVSm*HR*x?tTCCp0TXtZg-f3;VpVI$)ksUY7aC!at*XhYcv;z}#z|M=b?FjirhaVhV
zd`70w7|@H3J$%w2utJsSXRs6^?dRY;PTe6Hv16PL-G*a)Zr^HU40Ye9Z?*rO+NN@u
z*hBfo_8oj|Dob1&3lFq?Gw1D@J~MmaJJWb_Zr<_upbo%|#z&2Qk0{PC-AvC{&$iU-
z+aJ#RYI5?)@7C~FIYgtkP$_`u`Q_v-2F80=5|oT@?6k%}f!48rzOahDgO1qrf7P`P
zvy_F2^$tGQn;hed*Si8mC~M#T4d+e6%Y}zfZWt}zfAoe9r_-LDF^@Ck|DLdxoG|*>
zZyXpJ=AE54p_?XV+pvkR&xjV=t(SJ^jSZwi3Gp>nMD5f2JN`6ZMQ2F09DVZk?G8D5
z5S>yeMm^l&?20k2ZoY#QzV4LjW*oe$rb+nc%3va|_%*7}OY_CevKPC4Ns#@NP}9W-
zQiS7<6Y<mQ-rcbo^z{tVm}7I-5}RxlgAaDw#Wum@{i3}dsL)Zt4^Z2aZKfyf_?_o#
zrY8ag@`wNF5e!V#$~n(15StsS*K~9BFiRJEFQ4PP6{=ONi-Z_7kh}a|bPA9D!fjr@
z+$Jw;=u*R5t!qDKXmmRz5OOipMd{nUnvM6ais=kOZ~rp3sarGOYwmuCQNZGUXY;L7
z=;D@!)P;8=?HN-X=G^Hu2`hieP}}wh&C3fBZa><bu*e4sgr%pAv)_GU`(D(Wj3r-B
z?#LP#HYQew65Md;{@JE-HAq124EWh~JU4JTf0^tscvg?v=`m2@?Abv#Jf<9*8iMdj
z#<q%_v$tv-TF=@uX2VU5kowtUJ%q`<k)*v3O%2?|I*_-B21FtaLk&(gy*k>lXWrO5
zj?55>sLalk+`_;Z;1xx?n3tiRiU_|Fo{c~k9g+2Hx3Lg0mzSr7dZzr%OAC!VsPGo6
zdhvw#zy+WbLuOK@YtsrJmelVHY#yKOf;J=<2?|a-(<IBY3x2G)oN%!NZfN0CW9`1E
zicGwyo7HdcC|J0v+dL~P)UPuTwFhT_4R)TGfnNhE7kA*6Em28i^&?yn8<^n2>L}MA
z1;(TGzq+Wt^sE&7x~Sc{*g8&Mm3HLQZR3H+-<O`t#>!U{dr;p&Fy;lOJ)z%tW``b2
z<NVJFaKDAnePaP%COT~yL&QMKefa22-S5NaG_Lp$&sxTZD%>R+D$t{xJOw*o{6xh<
zJC)ZPX}T#W9{w=#_ln!yc`DxR6``3|VJ~biy=U(`#h2FJOnqrN@VM6<a0tPiD9Ng*
zWM(&YhD7)NOLma1zSaDNa=c1+PfKJ$_Nru&|KkJ_poPv)ltZWXuDSzCy?1{+q+&i3
z>CdRRaVW%z@iIto$gXB|qVAd2*ql**gS`0g^q6U3V49H7r+CTf;g!z2qj1b^Thkv^
z?CJd*+vXmEZ}K`$>|c=X?q3>gY&p3joCuE2?e@9$E-C`Aj@#V~hdg#LFfg=gZC`D7
zzk7k<sv<eT(QJx>i#pVTX+y>2uJFtoN7O6m8rH17nLp4z*<NzC2>lCcM5N|~SaC)^
z6~Yg~J;nQOrS-Ijlr=aQr&rd#X#~@p7SCE#k4Wa<h#cf7K4-&^v%>lZ%?Dza^Tc^U
zbE2Wqk-okh`m?&~OB-Z20Qr2&mScv+B<7K))!S3A{nxUgFO7JRo;ol7I;PF|9Q?`<
z|5Ls@jU=Nz>y(vj3OjS|e|!!~RkivZ-yQt_goyt5Hr~PTqTG2tZd>ho1l7ZRUw9S7
zPMe4)e`1wBoIGNFah+DH;O@9w@c!?Jleck2t=>snRv=TT#)Rjv|KHF2k+rG^ZQsZG
z*q8l*&9JPtmp{7*nMg<z(8ncxLKp`Do)70p3_JYvp@gi*!iH*6iR{{!R3{hV9gh3n
zkq-B36n>V6-Kyjy9UcDI(eqK?u%a@0%KK(bu0sCrPNJWf?atXA`Ng>Va@9F@DyLr^
zE%>p$eb8vx-n~6O*Y&vCq4%tQs;SE1^lYBW+fOCBFvr7rq~#7j#z_qXN6h=>y!mbL
zV7J7#rMUiN>eOJ<{9Xbk2FBs0YY@u$Z_)5gZHB3E;o*)C;k-?lM?o#GA*(m78Or~v
zk?KL!{w3H^{(%PTUdHb@mG{nD(7g@J^E3I>@7-N?V6_C!m@`m8t)6+a{-$vd;)FWd
zZ~ta^glRa{x-0ChKZl)nJwvEN!`7C5xo~+UWXO5$BYb@4Ka7+ibi!;P%{Mf@XXGOu
z&C0*;)O0->c>R@K6U0KP(`%XU`L~}ogtMZ2iAcPyTw0#__y40i5r?jBrwuelM>b%5
z&4I4qrS(zJkn{Vz7yMBR_QowT$6q)w`X1VDQ;yGj=gZmd(D%(NZ2tUfI<50Y#it~r
zK95{P(>s4gPwf?^E$+j+4P1)_|B2WJsJx}|QcmGxk2s*onWAjla^pRL)Ihh*c9<Jg
z@_)S!$k~g0@@Bb8o*_y$eamh7(%VqFm1ANoG+KWtB|+5huhV04B&|2SV<6LP>VZs*
zLuX%_P^DeX>7y-<*}q4bnC@?WdQ6!NJgR*a-eTOkH|u+M#kyqYpm@r&k=fe-+5=CK
z)#ll%r25NFfs^w6c5cD3Kz_?CSQnIOz&nthl!hk`k%UegZ8Q7RTC*3eg!+G-2ceaM
zSGC|ulIdZO;dRND&q(AMO@TM^T<2ST#`j(c_X=5Ir2kHF$D@qUC$sK*XSIomzx>?A
zx6f*XjyDBLscLI*N`Q(;9E>In7{#M~X0}<RkW=niIbs;&<0U)DXkmVhXpzfTRSr@f
zGXmF_A5GIcP^=HT&mKjJg_;Be?F4#OsqMUZlL1-M&*yN&$U~M6c1|}j24eYz+AP)}
z8;jJ#I?y!d0P~|mFmVsBD+RU6Tc1DZ?HT>#Rm};a;)SZJ&mD*7P_r!>w5VmUG1dH+
zy~$U?yPd)^2wx}sVZvVE^#^>8JHNKT4E`i^4rg4it&t3gRV(CP$>d76{`1c4<tOGQ
zUDh{Rbz620_%D)t7zRdAHdJ2pZhhO&#$Oaulgb{=7qwX3^uG9^*O!(i`=(lc>P7v6
z&)EOP-g|~MwY7hPC@P53jt5a`qQ?RVSm<3q5l|@tp(7$9(n|;s0wPruqDWDyAfW_E
zL^`1f0t!Nq7Fvk(5=iJFw9Lx;pU3mOU+0>+=EKbXpiwq^@2tJbz3%&0atlq*XH<#^
zi~KT`9FxNOxay`AKl%W2SN;utb4y-5s<8r>T9#gQ_z~hWkhAdKd-4%p*YobD*R)SE
z^JNZQxY@t(czIsJKNy`oFtS*PZL`hwC;ha3se`nsn|wE-Ymt1kX>GHmb&IRYqk1~&
zGk$C>gBA|I_?8-0m4z1A0CuUFcBr>cYcGvU{Z_S($A!SI+SiLr>|9oB@IwUz*{ayi
zJZs#<um-7511+_qv5(c4L%G9e+txNurCEbod{%P7V4X6H>-{gPQmxri6uzQ#b=J{`
z9jZb#tD~7aI)Yx>bBR~2*#A=J4?>P*8iDx_-b`TZG%y4>jIE<@eo|sleaYeLD);D^
z8WOGs#3y-_6j@f-@(X#Dw;R{jMxhph%^iGXu4h1c)78fJ*R8CL6jnZ;%B#ZMKl|so
zY*o4-f`t-(nYFpxGm8pME8#!v_xd4rLQR2o=D~pVz|F}bxKJe^Tlvk;KN!f7N2VSI
zVt;up=PFKNlxVso5`00uE-p(os@{f+Qap$?JoNyVH=)8{0{*gayH14oy^R>ZquQ<B
zG4?d3!AF77bWA!tv)F^|WY_KQ>J9k`|9%|uqRp{YFN>M=J46UJpxlM6TV%}c?@&d~
z@K<LU`Q2SxWN>v8S(^EzZ0o}|HxK%f7S}k{sCEW+(tgnSrDgc%!qm~GAv>R}V=OG6
zy;|CzWS*!wfWf{+*jARqM%=xsD!2D|B-Vt+syK)QR*ES#=N+(o4#S5aFyw2Fs&R|T
zV=Hl<u`?x45ZG^ckOOUA2erJcVx7xuCuU{?7?}W0D_Z3lW-G!Ub<(|Wfn~Ixau2}J
zd%pM4o(9=0Cj)a;>q}d~QFsEjW<i{p2@w6R4nTaG<+a$;bzN3#&~q%VlDmrI__HML
z9Z+=?ZdwCnuUkxH$_RqCh`?->zq&lZgWw_}LWq3idhVH4TbZVV-6z<)ONOFF-xM|z
zZ<R<7s_YL8*F0OHO5+x<Bc>(nj`9=tAMUrx*Ymaxdz0m&<lKiS$5ianaP7VP;ml}j
z1noE(w0nTc@{>PLNU|gGbq1{H98zSLNo3TTo&)APBCW2pTWIy)b&{CBq2*H$PzvZy
zFLhgzXZ!5v+0hLuyv0j9#e2EYQAkhuh+vUb2Y@)TnC#SGjNYscb6o2zWIB2XJgTo+
zt{UfhOEhfb=d53ursaX8_GOcxZ=Pyq0gnY}zPSh9WX?J&Xut@s@-l-1^KDmRZ#0A`
z=5NCDJ)YAMKM#aJ=rd`ozK|UMOohQX@`(V|(T-@38G3F;We4>G<_$iMM%h@0qdl%{
zw_58=L?jA8t0GEqsP+0-$#gP}Ie_H^GsEbCN^(CRzwSLlLM~Uk7ahW{(y_F60%c5i
zPgdw$p4vviRrg(xvpJo+f{0`0zqUb6TDXf$+M~dtA}hxT_4x5M7s!tC9ef;?$qEXG
zU!rKzVk9u#O^1&)eW^Gtb2%+D1Y|0?Zq^Va$0S}75cRb2j3U7}g{#2icCA^lmO86&
zoIWGpaGKJlut=R#JI3;`W1JQeA{C(GLt^!Q`%+}3-c;wNzu>ctH(Fdrdzt3C7qr>B
zCz&&E8-Ezr8$k_Nu7FL*G7!uy9Vh$q&OP(BQ`mmt1xkU(L=8__6<1r(h#?_Xv}-44
zsmrY*%k^htiRW~@&O}LbVFdjharfgIV3!#fSe<^GFx-`W81ZX<)_*T(;y2^81e;Zg
zYx(NHPti&b6?)w_(QPm{Rkxn};`KC!jBQXGU0mIXkUlwj_N$%p9Y4<{=b+vWs)swv
z)bCN%r;kbcyXDfxyY;<BpU&fZd$(pR(k^y2C!TkIJk?05gZY2huMU|>b?54<%eXd2
z<$%=r2Ly|35-@0LzBs9WfzsLBf#lmP*&b!!>_a8&1*h6*%bVW<aQeDYv@t12MO!zq
zt$n9`g#UkDY0;^C_ay@G`6Av(z&}9TAN?h>35eTjzDP<dih{uNjjhmxA9dWUmS`fj
z;IQX|JX#2+-3=FFHU{%$#?)7;H!i8IyzCbEh_6J9QP#Zd*s21T<CH1vb*6O7Cc@#B
z>X`t<W@#oTP4~X?QrTzQipMLDh@O+N+f4QAV9JgP#fyXG^K^_VwnqN%kjSc)1OfAw
zbCKml_zFToU78EIz_SM@?by!U8=(1G&mCYPzGM+fjrBjU39{av>9f4et|4c4nz|&h
zo%~)I4OSXD*WSG3Pr>9slPSTEXOs6xU#q3LMg)*of|uNTc0KP*pJ21gZ=L4NaL_L+
zCoRY93Qv0CN;x@H(n&YI$Y<@|Xuxl^5<tf|@nTCMJi_CCb;<}Q;>*`+dhQ^gJ7_hg
z3mJ&xgfYACuQ}YV662Rv`Z5_{<I^dd_4Ta>u)xcxEYztD#u(G!Q#G|w)p<w&akB$x
z6E~Md6X}uIok^s+aK$A*i4Qgzgs&sNpIyL?4A&fiCMS&9xi9}M5l|~_^MT^Phl?f+
z!|#JpH+ZTlF5k=CP56cTy$OX0HRQ(oNug@MSZHpZT^9}+<upJDyQ%4PW%RbW@MNyx
zAgUot561{xToaQ%3)J2|5}Q{(H40Bx<(5y84OtSU?*1NRZA|JIucVd)fl?DE4K-Sr
z4YpPdsM3gI^~n^t71yslYufA8Vh@Cb%=#JCKpC0`i?0OO&HL@%9O{3jVfWcl`uC$~
zN&wvj;@0ZbJh8sPPtF(<*$h^wb(S_<k;%|mbg!y&-VL&Qxc&I6sA<Kk8=7Yxc1+X4
z)q!vhd3V?KGUe4_NT7L<8os`*U!G-^69Z7E0kLZvu{YS(miD?-7)+CyC{o+R&gixr
z%W4fNkX&52SETCh90aNsepPW8>y=NX9kMW8J9Txo<)M<%0FNUqERC%*Yx{%xrkkS;
zb&=UCL3MR-(G{5c_l2wH$J##o2ivLRt9AzmWrC>zJ5DQV_x2EPwnhgz8w5V5B=fiV
z(x|(8DHX?9J_oG9>#6suqnDW0aCOLUv|Y^TEV8+_ikAQ=fXzNO3FD7Wu+6b_r!$uj
zFMp!YZYVjRg?rxhRNt@l{k`E_i{9;)W8Vg^tJrq;d=Va0D(cvZEs-c(q?Oz>*hE|j
zCjII@=`|!oOjuQUL|9siWe9n+w$O^Je#&;1mQDmMRF)T#-xt51cby}S`3yL!fv(V)
z>nZ)%Eq1Lm^p;AcZ7(8j8!i-lf3FT%UTn1~d}j|x9={O*gK1^96%4i<!0a#td06Y>
z*>9LGiOmJD?TM=3l-A^@u+#_~P^t(Nkf^;V!&ae2ggW%U%K@!-mPJ?lrpaZw)*rU6
zMQ&p*I|#oFp@Ifpg3U<p5WUDvh;U)iovIiP>;zZ_d!T*Ger^LB*44r6DlCly=j&<k
zqSe7ta!vT`M$0MTxPJSZsB<r4n^->Lcs{bSd_Mh&mk0bJIOL$6ot<uVZ++RK=C~%0
z;t#AJI_Ud9KLUTQzt3Q=!AZPkdmgy%0z&>j#{s23A6ZyrO~5t(92(EL{(NT9-~{QX
ze-Gx({~U%|hyVL3hvrzGOB%)hBd|edo+2mWoPxG2_7*z8GWggF%fTXdMZEi$gC5Fw
zgbgQs`@qLbEwm3oYS^Ttq>U70CYAnp76e6L`I+9~2MJb{fmyX^tjL)&XKJ8C78a{Y
zYbky;hXFQPWgyqi$-(QqA3u$>bnk8u>>wrPeaqv`%~9;dQ!ML$H#Af|$_ZiY1HZ^j
z0N=)XSJ&QOTjji=-T)w8XRbcfs5HrDKHs1WJ*WW`+|J0kz6U%jG$=!rcE~qRmL21l
zIv(p)3E~N1D?9Kqpjel=?yM~PBx*U<z>v%%tlGSj1dnP=ih|u+e-H8z_W`7806+!I
z;3X@foFAjU(UO@qUe@MYdzVIz-G<Ce&eG`s2K)<5=2h*x%-7(m7*zK=vXZMCP(lpq
zKoy<|T^&%=U}C5H`ucLfe-*Y3oM!n9jizNY86}2O<8V{5WzGz~X1XKUC!~;V%b#fq
zP|PNP{uL_8_L3zqT>UbDW0fp3!jGPidD{JPSyWU13X5ugf40CPs5S{NfN<EK@x!lq
zEHOY)gSMucsh~dA03PPKB$8^eRRSuVPk~DmGXW**F;?51Y71dq*Ub8O`o<F=Tz<<w
z7=Vb$zo2X^u5?-r)3n^vqn)G<Y<|dsT}mn;D=qxZPJ9PEXe;&Wb#011Gerc?cow;P
zhvw#Z_YGkLCm0c$+!`lT$Ygbu&E-nKScrSJlQh1{c2xk)DaWhr%z;pvJMsJqjC|by
z_6iDY4I;#WctURYJNy6hLG^uneCApfzMU}WWBPz8l&A%DdICALaIAsqMqjt`Nfs6x
zUaC{|$R=1D)MUQb01Q?+@K2NC&ue*3s4G+fcgl)aHPdt0tA2&x9|Q1Y)~vUhkYfQX
zuEVR<)|Bkny1xd!)#rpB1*klN*;N43he*m#GmN$F1*PZi@Jz31Iv{8PtlPzT5Q_XF
z0dSRP&w?2+&#|w?Rd`2J#%^qaVqf<JK@v(#Nyv}^?fV(^YPMF5;D`0bw1XXNa<gKE
z$H}(#rB3>|4_v-c6?m6vR+5<lPx)tkHmWPVY_?jfsbO0wk3gl|{tgb5Ax!~>c1GzS
z3vidS3%N~KOHj|WMo?`3Vgjx_vCnKGPrdG6<oazhCkFuP&@-Dn9xrGAD&hahMA4+_
zgHdah^iL)pYt<m4acQf0NOEM<(w!;CWjYVqErF@u?rAj79jsP#z&DX3uX4NE;|~4N
zxi~m8s(cFIv1H-}Q^8}u4%8GHG4cObNx;f9>dlxWY<`skd_yboOm5|e!a!r8DwF|i
zBFG?Tz$G6;khLEB`<q@Z)43shcApgMA(X+?-yrssy9Mn7Be*P}mZUPu9{`wAOboH%
zG(})>l<fdZ8I3-Lw~=r3o-7Y#WsAheF=Z0%UoUMObrPyomZ9wx0}-&Z;dA>zF|iZf
z<%oH_7lZofD^urKMkWUy^sqzgd0Yk}w7kM|jqN)V94^e&M@+|AL0KDXyc?IK_z|oN
z05{(Ukc|R?Rnf#^7-0wE;P8n{aq3Ms`*%KtV1^}O!4G`3hdvW)&q&s^>XoFwwp$l`
z>~yvwX#l9i`(lYwzp}J9!}A!(*k{Fe6L=|cF#RDUNUO}g8KKoM=_6+_s$0Lq#+`^>
zSc%9v06gdcn9LJ3k+i*l5V@?iprBe2z!uH|*qm%D4$uWtzzX<PA=(>8seiuCRxW*(
zfEqc?a+UUU1qi)7Wg;RUmtVr^uI><k4plio>puekrQYWUSgTeJgK=D}c|52xT%dXE
zq<qbW=RL~TcAJVe@h^be=&3MHW{0JcZOa5rT#xSj#nN3jy4+4If`9*;7Q6+BettW3
zQXw+|iWyk=qZJ20BN_cfovQb_hKzdRHF<<)?5q~`+ee5w?K*_5M7>o1h&XVRg-9Qp
zIKjwR)awCRMJwjKHh5iOG;Z?!=Hp3Lk|!I>$I_roi7|a@0sbOs_S}{Y4KZk=`tabO
zFSyL7*b@g?$P#0V!#tOYN=EelXM}f-MApV##asa6SV+xL3nAr|S?DrBXT2rYn1o~z
z0=M|j!OvRC|DVs`@3R_g|NiUj$AkZU>VGYWEG*CR|NG46|9#EpXT-bzYmxllF8MK%
z<KJbKg@ygUPt4EyfAe;_hc^#asOip-%c7Fsx=)ag{%MD^=QP^P^3gKTv+0+0zlcI%
zx{0}_{ZHyB=_)zS7j{LSyz90&^ylpEUeNpce@t^2V=kNOiRRo-_l?r1ga1>V?fsHb
zCXP1iAgfS=vaWrbwHHzq`SWWmsxd4=Rxh>D35fz_@6KFASU96}b&XBvFR6tx9_V<@
zus+L`x~{e4!mc%Oif>K44c=^ZJ52l@<7IotjMxu;C6OH5aILYi{VGat`?aAGRjpiQ
zTd1HrBH-V9%v}c|a}b6d#$qG6@mo{S{gU|NvY#op3dFMBdVv7>5mVjXnYwVFV5POZ
z!Jgl1qKo<XxbGiuf<?=RPYJ2e#Pyk4sV-%sc)j@yC-I>tR?``0E-Gr+kv9GfXg=RQ
zUi3OvN>WxrQg-9_UxHl_RO`+5rEPa-qjzP#FVP)2O@2CJ^8OIibi5^-q@96jLEpLJ
zH$5}cdW1Zq#`Z5|#>Q(C?&i|}KDP^)hhi`Jn%Wv+S=F(v%?)FgHpCNr15&d|-mEZ_
zn!T@jN%#lj^ak<DDM!;*;cVaUwpkT8vvJ}O)ZiI8bIOI`lu4#GBV*FvJM}0bcNcmi
zONJdHf+63a9Yutcfyz4Qyl0B6WQF@_dtn#&ePSR+E;DXGRQaB@-Ji#Jxc5fM{=A;1
zwe2ZH0*7*1x6doxLcP^nvWxy-da@HR{x<VvB4U*fYkJ0vz4{(c$HW%*Po%TQzDw(Q
zcEO}LZ~7#PPaTUc(-+0CK7_O;yR2QV497N45Gr}pio>BC<U}(Ua;h20(hf3G3AM<y
z$dqxjO1^r}AK*YPF1|BO=1mgOq{Pj<eKJrws+6hij2e~8?Do-6?sx`ww<dWWw`_*}
z`>;aSjws31^w}ivpMiTGC@`735F3IuiAQ(XnswB&nV4U-(Vh06ZcQ(GJdDhd&xq$J
zKN}F+enIy5h<>&Gju-)6CH~3@t;7&bOzKLEzrU}mcm*$;Uq!SRKTcFu!PYM8CfXtH
zI0w)J-Q2SnT;g1*`Fb7a636`S_Vc|mol{qmF}ZUj7V>44Gx5n@X1hoImFYD%@`E{C
z@#?3zH%F)#UwR?BtIl*fqSQ)jul!K&bbL%R&CF{sSPzag?5VxHnA|g}oRIr6q0qzn
z_uduRI5p#H+b|Q$)wK3w8HVw4`Gi4-#5e^F-SX`A#X=KH8GYTak|OAG9aMHuCa-v0
zMo|vK+*IP8-k86pq=yRXS#MKi#lNF^?i_P0xY@j?rA>U-MIS$1__&2*dUoGN(spq-
zD$%a?Za=TGxV*2(1+H#o4!n*1(i{Ide?IPN?f#Os2*di64*mX^)#;0T!i-QoT1ZxT
zP3<RHT`f~+^WbEH;HE4}%MT)JM_y1ZNHB4=yh7YKnwU}lNT{Y13pLFo?faV|ce1>(
z29Rb>r~EHVyzL@u=TV5;ed3k9=v6j^5nWk5cjk1%gLr(Q{Y0CI;*>fn=+o5anx5>m
zzhu>XB2pOpMyO7GD_pz*r1%g`ZHU6d$5p4D_?8X5Fgt4<OM!|N5GICtw35;D1$K@v
zmMm%H>SwQd&PzRjPSuO6?An-8cV5I?vMKcK8!v~NmuOgCwXu{b+}zGjN+6fVa<JLu
z`0fVi!8aZ(965%;z*wL2Va3w7GsV?69(XvqunDMM`{z$@W2rDXG&k6U62*2J_#?%+
z%9HV?&@QMb>HaJc+s8M|$_=s4>oo}&$D-vVpIy4#73JO}P?4UqyV79fxOLyS;7pT4
zv2}i5|58hEPmV!hH!M7U+DDlZLma15X2k+V@Che<%3~I0646PiIYD9G2sZsojQbHi
z?S`Q?q+fw~Q?K-Fy6r3q9w(P3sxKe2Pepgkiv5tk>@0X?LnM3QS8`$1!xRqX^sM$N
zMxOP9Tc)%l-PXoE3M#eACbVGW8K1g7U-Dr+eTjeMPqFX(Q(!uQREJcHsT-oGECq{F
zqgDwR^P+D%p9XdM$8i#hoBRv1kELZvd(L8Zw4_PQn!w*LR%~^Gbozzz?sQIHrRLOL
z_tmi*@whO(6KjS&fiZUc8LF3tPwqgMT`}rX?Ud(wbHqJwYALyp@ZO=%yN%7%qWZEg
zQDpPlpEm723Yzrluz*PIl2ftsnmCDYG;y44crPutUG}&!bX2T-f*N5^Shf{#p>DhI
z%a-DWwM@e=&Ex1re{@fQU80#3T2igkBm-iZK$SPH)@sOp#*RmgK4>tbhe{XL`rrQ^
zf9(7vF?l*!?^4>QsZP3aX{J>^`Acnf)9<5tNV;9Y`v*O>*7K~%`7%pvXr)C-IW(c_
z9qN2TUXxdYN%<g7R-N)FoC1ZtM38><Y{B%UiI|0S5hKTyH9b?K=I}KX=xi8B$TU~A
z$#jX1zO;Jw)FyYqZtFYH&i$W>|4irY8upK$FdZTbwX5#Cnc7x2Kp(6cSKo>-iV{<&
zr;019*zHGpa|dgooYhUr=R3Qn1AmQp54NDWi1(@y>bVoE)#9qFOFSu+5ySh~E2gb`
zVew;O2|ueW1Go9b@gbUtSJigCFVJ871$l2ke=9yBGS}ocoyX8i{Lo;uy-G3_TQ~CR
zd#iUb*rZ=5?(L?Eend5_V0(+kj{g(DbYED?Nzstk@9o|Tz;QF`hyN1BT*j!HWx5m5
z(Jqr8_+e@`&eTx7l$6BOjoIPrz0bb8zk^VW+<$1I5CSGZC#<-sCdI-m{#bukwN00C
zO>c?lVkf@VxDytniE8o5d1T~VpWjov)4!YSlM_*DBK*17q(DG^)XoewG36od{M5u)
zH&HF<LyE|*v}uP#j^@n*w51|wVt0n2d8N#25OON39PKb*i!-V5t!O7?qLXfwCf4|?
z*cq;sW$GbqPj23WR-R~jKQ|A(R7meH(ChtTvWUusP$1J?2I3ZS(m%U64^1e{xEsE4
z5&YO>%a6YP^s$=-4WZk~jj%~HelQoTdhbEG3Oo@Vq6+!Z?x+Wsz1+|SH$7EbXbc%?
z)7#9a@mxUKVRFd^klsbIsl{ftxP+}yd9ATCswlEft?2P$f@Ro?OCjh)`349ulE_9Q
z9UQAup4ffrAxW7~P&m^9y=q;C0eyTYe5Hq=6s-L3C;(xRYR5~b66ETLaL#TtB2lD-
zB#vx)v!b^XXELl%wn2mT9w$NQZro-)3YTBYj-j5pvgJ{}A}V3J0b(}Q8q>3wqkNr|
zzeYnnH&9llHtQzuRT@UB_0DXUM{Z!E4HA-46R9_}BaGf9)<|q!kVda}qp}Luas~~L
zji@5BZqBDl7kbm2629%KDrW?yh?6|R#Xnt)YN+w0sEXg)3&~ngaZS!EHcOCMH|r=W
z%yA0lf3Y(>gK0LOQxtP9K(98DOr+$?rSi@Q>#F6g(*;o8K9X}Gd!mVBLAP{EU~X1u
zzUdfF@rFRVxlPr@7+$t=KR42_#Qw(>JwJu=ftKCgh6m7AX;hGL2fBHG?crj8scne%
zk2<@2PQ04Ghx1M)LGIGX`OwVXFLxzr!BR5+EWckY7a7Q1Y3TQAD;%ygs;1-feeq5?
zK~jhI?A4sJb4nW8^)nvOSEv#VK`+r-kz(o-&j&W_1^<oBeYtF^KFx+x@DlCZqZSB!
zmHvE8fHB6t-?;~Ec_h{(rK1r4L%v82srM>=-=TapvezU95gTtPYD@Xqq{U->s_YZ`
zJU6?&@9MVJGs|j?YFk9JN_=F!xOB+92)e;#`58~s3T2Jzo0Fy=Xc{h0m-=js8B2-B
ziIpdV8azvTT5h1yW;2Up44QNLZ{hQ=GOn54zUK;LW!!aiTT0r{DIP`81M0JZrV<75
zZz`M)+IplmQxyr9iF-E24h_)3m2wsvi5UqCnNQIA#Glv)Kt$3-XcoS^ET2)7+Dd-+
z0PtkXhK)OxcVY`7`umNS0>WSr$JEevdEMz`cL*vVfSrM;9aB1_Xez;1t`bsuCRy4j
zAT_k7yRI3H@^W1p&_YER6byeUDz{WYkT)JYGxnOxXy-hYhYs7F-7m@s&~>x1u^Fof
zalyVEb$NigWgsEs`+1es@AzbURO??$oT7jFI7^?Xh7Mj=h(~{ZHQ<?dzo&D6&9v8j
zajao51AnKk!f1`vF0SGG&rjJogLeH9y;iSE3T@b_9qmYU1Lu;=o}~Erwt9i4ksL=y
zH#LgXSQhywNn&W_Z&a90VHH`~^aJCL<o8W;(m=PJbLP0cm3YT2dbswkZk8eBR7QoF
zv2<b*s3xVGLqerYg*4$RR6SiwC33M{QB7~c<)i(5)jYd?!7yyi9@n>2R8ou3l{PU1
zIax^N&i9iImx}GGTsE!iKWZ|BOjZtI4DD7d$>$d0?vXby^<TX3D&uX1;vM=}bK>Ud
zZ11%R(;72_q`ICij=tc`^^yC!lMgQlOAzb+y1Q-cG8z83{Mt<aRYPZLmi_Uq$EoQk
z%};%c9$#2T{@q<Ho!8Le_P*e2JKs)!7O<{d$WZzbr8iaYfQ0nGa?I4|lU%b2{=06l
zC1ONLx6MBpamuJoaSseyX`E=Uvi{TBg*?~|DF_?*VnSSUz3`wRyDY$n-KP2Ph%xl$
z0tg=^I&3kwDqpg$_lT#S(X?c1_D~}Y@AzA7TXzuP+?>S5y#9FcW0^*OnSGY(+n`my
z0AaFtflQQ}Iqb(7ajdey#kP6NW>>~L55r-FoXyzgHAm^Xa>`QC3(KU-HrMs_xHxR4
zE^+Rmaw7`wCrh`cS8b~Va>mCXnpbpTh}3vQoXzAy?!9ut9rvwZy;Vd)uD)`0@t?jj
zI1Ey@vlps|{l^RURHVzVBy-d?pI>=DP;S>}a2Yi%WtLf)Z~yb}3#^sg5kCr&L%QL^
zl5<=oR1PsQl->@~usL7sSq8$ixNyzzri~HC*i2UJve>$FdfNi|FLasDEmTB(;Y{x}
z9oqZJ{ei3sttp-)g40mBA<>lfvhtJ5r~1lDN1}L<fu*Uj+Y(w8Vq#2^47vT6fZi0G
z5d0fMC?)==?5vuE-YaxO^~dzQFnJ#kB~Hn$YgT<1ep>)+C|6eriDp3$CsY1?sV=vl
z$8k39B|D+ZKV992xe!RfW%o*L9SP+R)g;A+`W>RVIn>3w;5lZ8i8mE8{TJ8l;rjix
ztMFPo@8`makju`tMP*dOX*Np!v-<pJ?4hNT&`YBE5UOZ7rnx!S5myMw|Hkdc;>`&*
zFZ!qeS_EYnaun7aq$hrS?7^!4e5yG`AW#!qmS5u?ytKSQyg&cEq^IzKOT$l$2RRp2
zcSKyM%<5EB{qPqPQ>1-{gs=A%xR|qTeooolc22Wxun$-FG<tgWmpc?;{&m3YsB^j8
zbp)ndBKXgHdngIg0*+qKEhP)P6*T56-sNN`q%zV{+*LlwsRiJ&Tx`YVB|?Vn5?_DF
zS$%&VY@qa}r?CUUb*r(%RWo5x;_?rRn6Zsih|No!5Eh#zwGMIr-GvShQav%SLq6P_
zc2+;)2#V{w7B3Wo`BHyUbN0v*y3YpX@#sKcaZLldJ^O=rO{Z4FP4uQf`qFPzWiPka
zbWM-xBh=g&)^$heg5g>dT`iFx4qve^Y5MokQW?dMr-Q^!7mj{Bif%;=+*f|pckHDD
zc6OjILiNwr`mEG*!PR2a#vfJGRP`W%te$Ijbbm1seI?*#V(u+;k@e^8PtKw3o%#u>
z^bkEuw6T^5A1v5u?wQIDeiNJPR{anvH(y_(5X0!loI~QV({9J>g@%(8I%Z8qH?AbI
z#U^P!&!Dfh^O*+H<)$H0Z>)Lh)|?k)eYsJT0abyrJicinad%84{>&LG{*nwnIuU&`
zChyggJJ?Q>ly`wkei#m}UHy9>-0tUi>sCMV;G^x7wQ~kcCrO#QkL?xTT1X$f2;<A7
z7O(d3n_4KGH>pi-6Z|yM{qlnzZ6IdNbF@(W_=k_JKkOir!I_5kja;e~|7OcRJA%Ye
z>nx?#r-hPY5p7a9dEdC)BV-zF>^vi)i6MKHj36%OS*u~&i%1e~wx<qK7Pfp`MBVCd
zChA!v@_U%M4{@OA+Vo~ABlkgD<DsxZ+;N=X3(DwbTcOhYD`S0qT!@8fGRlBqA^A7y
zNtw6KKGHi&!YBDjR6TLJXCqRpp}@EAYr60%B8(%;&(?CQ3~j)u81Q?zexRL7)17uO
z4Va5>5R}VP*tbT(Gx&$uO=gJL_B0o*PvMp!wDfWJLDb_`>BK9+rVG7RKaMs)g1@^L
zcNCPVwYSguh~M3<>IqXXp33jY`3eu;t9F*v`19Tyb6-o1mi+41B)hYB+eBE~7EJuM
zNffxAb+Wb#uHD~)ukcGAGYXk=_IG!lx84YLM5A%LVLfhs#$LEElRzjlp@sIrm~KxY
z6O^}3=vAIBo)DAI-}*)~O{YCaN7#zTDVinjsiQ`-E%Zq5F~0Z*R=CT^4&R2wmnp*a
zCM`k+MoQk&C}qLo$Wn^Y_7-<yJ^h7u-I2?cJ9KoMy6KM_AxV)UMZS#{P@7s<B<>n5
zWIR*$u36{Z%8CHT0nr}?6WxKW`2MTUVtUf!j2$P~Oa`CuPe0k!M4|9vBzTqg<b5;e
zCc5`nhShR5n%fTT-NA98#nz(}>n5Z$*!s*ux5P+NdiNe@ZwO}eW+p_*|8)$*H}A~M
z=*RYsN-@ORExwA=(o4Y^;tt%!vbO#UNc2x!@}l6MCbZFHCbgja^8vENpqoqZOU2~#
zuVW>rVF7vZyzqkIv!+fABXrT?H}k=M!wczMyTxTAD|$z`48IU`66;spFVNG(^%6!I
z7x)4>O}>C{eO$PB>b-vR4b{F1a+=Sv8GYI=uIIp~9Nj!|v6Bh^M3}a5OG`eWM?NqO
z+R4n}g-Zy*-^gr!9RBhSEsjd_#;O-4HPjhI!0wv%Sb^xcf0fZiiLwss(>K=oYT$0;
zXOl$P`}O-TFEO!oiob13TA#U9lqtIV7$^D)LU(#Z{bP2$bSxsZCp|a6rsG#u)b_A&
zB8Q~$>UOCfWB;0LgFjqS1#32@By1b?8MCJ}*7Qv53O0z!Z(?X#jZiCk#u)FZpN-PV
zcc-<Qp15%D!t~7UElFCC*?fD1@z;Jz>afP@pT-+B0lDu<i88ZHtViawv+Um@kTuSp
z!rlZkD`p&O44YhXZzh<>E^(~X>iJ;aJt1L&GRO7ST7cwqqe3#Iy6kTMh?EI7+1<2e
zR$U))TRd4J($HFeHh*_Hq)>%+Uv_aL7*(3_V7gz&R8raws;Fz*f5FG3e)}@t=3Y)&
zv#zMhrnd@Xl#DEx4t-@}QDR6Z2%CX9be_x&Q&WK@FLc<(&)iKusa{wXaFe{*e-C1b
zS#M!WIC&;f>H{B4(=V!TAF-h;Hjiz0c>vj~6Hxy<MqDzZU?J8Ct*~#?Bju!97sX6r
z6el%ZUvIi6Zonwfdo>$AuLYwOI|pA@37NiDP+hdXp)*ix<9tC7*`sP_veIIexVRGR
zJeXns+82)n%hfa6qN#big86w8`pf`w`M<i~yQ#H+_8TRKbrS<sylCz9_f3}yObTLg
zZn|Azd6lh%Vutb?JgQ(75hX!zsuI_KQaEZ{=ncDtu=E4y02M}YW@Ki75;D~G)aSY$
z>+FSiev^WPgev8oe@rc<8a7@_x#~Q<+P(QLr-Ew(ooLEYs+<zyXS;O&1bV-)91)*C
z0ELs5Ox$e$ez6;aywycEv__1sm2H?q9R;-H_sTIVYjuGVBv_gLoT=cFdE$St05;pT
z?H5E?4JLl8TzR;(_HPhz9W1cZKdQ;A16So<YmFtg`{gwj6Ek)K#_1btv|1m%JzO^@
zqNL(31cHkhYcQ~6oiy|!+P+Ec%b09z=rI<^sOvU7mNTgowUK|gkJ4JZmiqf<+p7;7
z9!_+w4PrkIHEmhBQ0Qe^PY@&3ND38)&6<vo$`QtHoD?EYBbmC_bMw8>Os21!K%JU>
zdV9GZ3_o0VIGnO7A>_)e$^Xys+3(O?qf&wCTQ*U_`#5_w@=(Oy?c|}PjWKB(8{2mC
z+5eo#V(tO30RJ9++fe`z@#py8er6c@e;I7>=YlMK|Jzkq{-41%{QtN6zY!?%|2O9U
zmmBk5)<(#~F#X=LCGtPI3J0yemn`0qN<P*$)a&;o@K4uxsC8bW?e-*3e<)fcQSVlS
zX6Qrc`RKMrbpL`9-r=4K$-8=V69Be&bN)=F4<CTggi|ULUx-580%+2rR-k&+v_`On
z--FmdP4kUgBd7O7!d%(LZ4{5Jm<t2jmJ|iA>?CQsddtfcDx}Cf>+rFYa{yM}4;UZ$
z5y$u=c~s5*y*^9oK~Q@!ymr;i)wQopecww65c4f-e4YK7+IE&@PkBYRkH|f2WZ@K$
zyK-n8DEvgGq@*YjQT438%Jivs8$f?T8;Cvj0-Z^SawLG39@qx{PM?4?hB44Gv|^{K
zN{arAsggTPx0ZtaYPCJ;s%i~g{J2>)8P^LK0r?m7lb%kuCyGWR0Gwn4_;po8e3`Sj
zR;C7Ig?#}K#|2<J27suE=6B){WgP(kzXm{|V*TRpBRqhJUMU>1>(%-Gnijx*m~1ha
z5Go&^(rp?Q3+(&mfV%B*(>b-V5{Zz1UxmY`gF*r=0QOP_l&$8Neq?;zJNMJ_dkvKD
zL9D%QCF3^Y9Q>WyRwxT=rF^}??m@munVFoSd!yyCmxPn6D;ymO#laa%o#%0?E|y4h
z`qIK0&{w|$)UJEwMqGPOzJ@u9_}d1rQ;1f{wt)qJgIB!_J>FJ#Tph?R8m0%#d;mJr
zZ<yrA|Ao8J;#Tb&zlJ3xVT6;n3AZ7$MvUFA+WMO7xj~~9ad9r2unZ?x>-Z(V5Cj2~
zNG%C_{X%WW|MPtwI)MGpkx9c&)9*mXub+aWVwgf>&m19FnH;)dw_SgL`*9BhuoUI~
zV%YJ&^-(?I2XZp4uAFSf51f1$s3c7?UD;4a_V>GtTr`+nYR6zh#=5(CGDyGt{Ogo&
zQ2cdz1L`*#e5U>V;JZH9s66Og3SVXCWD<`5xnoCCgpT!0jY%Xt5RwH~8(Qfm%GMVC
zLevt;jZ7|!%eQD=rRjtRG5`|O?G{uq8|v>`*EQsDqB8GBo1ED%r%Vx=k<%Fke<f*k
z%H;PBz!^C0Xm?|SQ{qeQt^#t~Ar(RNSO10>Cs^pLxp}~G+m@RulO^~rd8rULJnhpy
z^#>k_)&EaxJijM&KuPZXDL)Y)Pb#WGtD2=OjP$o>0y0#8o`Fa@00-4f#p@3@b;K#m
ztx<*AV+9qBag-XDIpN(-d6FwRa#ZwTQI0#6KJ$B^zZ;;$dO_m}ylANQnO&IA%j6<2
zY<%9F8UNhfyEXnSQ2zMx7Ri<kVg^_7R44U1He2F5M2iSR3}x%h>my`2B6%L_lUT1c
z4<KY^op?^3+eqPJAU_{DD{Wh=aHt5dh`5L)xPzl3D}bU=R_u}1z<@a%mJR{BWcE0n
z<02R)sK~ci?eX_FpRa@v`=vI723r~AFmtvIfTSvqQ=B=)DWoK`uKl~6ra%cizO=Vo
z;jdboF?NxS8eGg2P`9rcypvt$Kql?b$JAhwRK$CPn}6y8Qh$@~MYolgr!2dCYa41l
z?k}{9+n$Dh$jC#!tn4I{3D0S6h`}Z2x_eCZh@Ee}0eg?Smk95W)giOf0m8xQKn#4}
zKHa)p9lp6(fe<7RcKiW=tCxvh^scSPt22W9mx_QRZ<vokDeyURZu6Q18HHwY`_4}?
zZ*u=HlBTQcZ#NQCQ><jo1&=*1pKIQ``lsR}#|H{;X9c@kI84|oxLBFKfjm!?w$g!q
zD*J${FpWu`E01)|AOIj@J~v`cYuG6hp}9rT7!u8HR$~Jb+6r<5VC#y^iUq<vqKE+7
zh+*2zbVI9IouZy|`KUgjB|>Zq3NbZkBFBURxAYF6Om#Cw;4-L<a+oj)43m->$#Ok%
z^4b<{b+o^lwU4wrBfm{$>{GAas~8>{FVgBj2CsioTFCz-16?pdEQg7>7N)>7=zwdY
z7LIoJ1v+B8H<^qOC;%-+F8A9P35fZ_gIC{W&JDX@-Hu(W<6`=EH+y+Dvtm7{Y6xEd
zNSg=7dAQrLXHX#wS_lEmXe9gY(YFe22*Nm5sDOZgmbst+zrW%&PkjA-!6v4*=(y~-
z+e*pC8kqBW4-PR^UIZt%Z?gs0CzIV6l_5Ko-DexIocQx<3{<jh4`Ub4m;)HfV{L_X
z?LqQ-TfkqBFGD1mN)J?5G}$y{Wjd;kB%Mws)6;=yuf6)1Z|}WrCf&t$a>E|iuvtMr
zRaMd=4}9S~gC<L$5%mJ6{dc$4@apQdt-F>R`##J2)6yY|hvrHqMz{@pm|Cxh*$r6_
ztiaPP1)yZJXJ_>$o#<2oJBY>ajM3EGK)<oi3=mQBr>X4j0^nP1v5{U<1FfD3INJ#2
z4$=Tlwl;$y`|xElerFL3$YUYLZ1G*|Qh$2O=Mq3}4D)<C^QJTLSMb&j)8aE6zR9Er
z9rDB+gqbfk7JuS!h(d75N!LyN6?;at=44QEM>)svqmts7fk`*zLw?<-wboAs;q<n$
zUrF`+(h(6#nv4q5WJ7WtvJs+e_-gE<q!G?QBV$tKKEP)hDpCVlpiqCxo8As@J_-|;
zm%#wqO>T+5f7vOkz|OO<jStuwQZuUyeGF!Q%PXf>_S&P8CwX=!7~9fyYm22?{vV11
zH<gqh(zX@ZV?)a&aCH<+kl%O8ymj^BwBn#&KNQws)<{4SgbF{_727ek3FSb+F%oea
zw@*`BtHIF@iU_dP00|-K;Z1~!)EIVb*8R@!S-1tpl1jqb4MN5!U=a*o-i{P-H@~1w
zV{pA8e*D@tw$oD^gw3=Q$%rbfB|dGsS)X|VuCy$}RkgS6GZ{YkFiTbKNd{m<6K=p=
z5y!0~D6JPf;3FeV<iV^8WFadeM2JoXA%%IH5X}0$(<stbn&GzPLhS&n|Bbt|QkxFZ
z!pNxR0HiK;7H(r{SxE>n*biYUCWj<5wy_K}2w{rdR2}?-2P~W-NCBi4QBLbUio-l&
z#t{y$#S;}!pBmi$%;>SjlcC9>?tin&N5yjq+kDt&+AS=1hK_*wT2Rv(@&q`>zO*0S
z)+3nLEuHP+!zsTO;BV52DvlBguG&=p%_8LeU37bbzv0x2fT*w6*rDe9VYk@cWNv-C
zq=|war!vMx_C-y+aZ3A4@-9;m@Wl^W?X0TkKd@=n#m$j5&p~RY@>SpO^H;}+Z$-Lm
zxG>o;!}+trcFOA;HBMS?9$1kL2Uo(Hnm3=v-r&H@Y)zqOR8d~0*KPK2#(d_!nCmNv
zn1;1<YPkELP)snBK(;f6_j*46eCXyEEmO#(@}TdnhCDCWI;NibY$IUP+=+EnAva(#
ziP+Y<<FLO=cN?KHgofd&bs=?~l*7MmsDa5`N^>7QUt0$(ad<WyQ3HhUC`v!z@NbP{
z24NQ}Xvq?t#O6kTH*Rv7N~Z=n<&XNET@?3<TFQ`8Bki<gZH2N4pNjh>0u-A*d(^4d
zabddsTB^dHK&*Dk<2keU8tf!&VIJfZ@#4BYubOSdB6QVdq<<<HfjjWrjzINqQ*Nr*
zqF#`@;^}Yz6cM$aHvsu8`%{P5c7r9iT^K)m14rucg6Oufv$dn=kt)|0fgNZ7X}2w8
zH);&{Pbw{c4Ab1e*|Dkl1*<B4N5=9!@~1?KGl}O-q!)m~$k?m=y+_%bYxgmr5>R1&
z9m0QrXwUB*6+04WEtokZTCAnY)=R-C#dW%2p2gajD>p(9yYCJDT5(~E#F)TnJs3^D
zJCub*5C?~Q_7f9vJ8rNOlxGj4GKN4^3Q9SPzxlDSm&jSu9K<%x<!iIYG&{8e92yUE
z2xP40nWEXvopF{i(NeAZkp4i`S}v|an}8iKJu4rI8jA!Bym<$a9rIH-C4nTTLM)+z
zF?>wWLAJKpkP3<FwC!SAYHZGek#edDf{hA5sGjtnY8>rt@#<0)@n~QT0P7k|xiom=
zk%9p3Bwp<&=RdXTot%8N+?^xd?P7W1&j&e=1%tUbYA*;3wQy*<oLfrpR<lSXW{9ZK
zgnf$-nz`XNUP~*sQ^xph)-q+hA_=WbBGDPwt&Is=?$NELk@;3muAWXj?BkNustu7s
zXqBuS%|-&Hz$^i1L&dJ3yy3D-$7DS23+T_`NKTn^(hb3L&*S3U;MlOO8}gTzOFTXQ
zm$KZVbX1?3yKOElSwM5E{I@8p-~tH*;P#BIs%_atx7ENMkB-oWF!#01ZI7O>waqY(
zS)d9&e|0?+*9If3aV;>W?e;J1QYU8{4olyNOLli({5?6Jaa=`OUTK+>L93*FKz`8j
zXY6fl%(}(!?fqv0U`ai5(06_JRgvs2)5|u0LN+RhE6pLXy15a6hNX6?o};D>URTJA
zgM$=HqUpr`K2xA}-1GRVN^uC~YWHLz4!7!pslLq=qO{tmVTHn=OS1}x0OKg+Op}rN
zCA0qR@#PgO(zY4<Sq3n)tc;*@`Pr0^F$HzOTo+X<e2;rgDs3^C<W13!u&ViI)@&6-
zNjVNr|M``QNwrtpK4C0TnEf##vdycalx!JNG(jDRkl3|Zp~O5<7ksa@=m%Tl$`N{w
zyB11A(TZ_h@{GmTH@eu#zq?1r8<6iBXbi7Z3ZTz-Lve~#P}qJ(vLa6$u|in}X}VLg
zLsRg5-o_6*wTM-v4k|YSY5$WiyyVq9%i*rIZxC*(0E9k17?=sSve_e^a0qPU@PT|&
z)<&wHeT*!I8+j(y2#8jBkB$h2P@U`QxxO$!P{NEp`l-P*+-K|rSiq~`I-b8NzehQB
zA63%5NIT>0KG-m1Uh{5M@JdxcfGr#K-4;$kMsqRiYvO{t=WpjPoR)uHkKBdVp>e|e
zVb>v>fj^xfCvf6}f}a&@*C)Zg=O{5lnMVa|<TMX^{Vh=}RD=^B%_3uiHwyg#tt!XQ
z(cjwd_>c`J7>ONF!T>jrYZ7;Os1sb@tR3}frt#O;?7}a^#B$tOc}NEQ^bpT52_C?u
z?ol(J+nrwC?88=9`lQnmB|)PMR*oeBy>j1jw`d1%9LFGch)A10j5U;U68V;fqrGcD
znyxzBMsnFu+S(lqW}lD7p53j>TYEn)TsRV1NJCgNHfyS2lk6})%I6Wj-(Gb0gmIoB
zJRM9}ZQcG&*mCn}cdj>kXI_&}CXY`pd?wl9#={D0$!!apYMXe$kIYb!>p;CkV*{;@
z3f<X%O`aw^9ZmL9uH#fo!d#^J21^17`?}_a!wk3T@tZ-xt_tH&8iA|L#?gHVs!DCp
z$3{tfC$e7<zTtza(F$aY62HMoRhOa%{lE4q$<WTn)&0pWel9qtp@WPO{aDy8ban?0
zyC%%)8|8ZKqi_Cvj2A4E!r{S2!E8bsg;<@~{P)KWYy-W+fm7OT-J_45&Mpt$EM~m}
z$!OC6bdxxBWT>5AnhV4jF6gXIO2jR_9GN=%%O)GxMkp1*i~J~3*J@!`?MTyz(IZhq
z!QYnflw``^VP0&%hCcSG(^gjZSA%`{X<TVGyi4<w`>?Z%do!7ef5Qw8WYh--d4^Ei
zJw&t`PCj~0aTfZheAmyhyx9?AisKEF=-g8lk!G6=zBd3Ff?GrJ_zoELkQZZMZF`%}
zmAD6&R<~*yOW)}onLBcL=*Stb)4@X9{wV}`IfbVNMR#a2V<BFGKJrgj0&$`*0PErH
z9k|2TPJmY??m#H5n3fkn3j7&BT?16NtAZi&p8ku!bT(RF92R|u9C_o${-^JL7GpML
z`w<dm*AIo(Qi3_#s$(j{%FS&kEC@h_5Y@m(x-(6;3Ms*WN<=vIy`2A0>w*R3A#OoV
zs#0}7;5g2Ke|hHfFA^})z!4Ybwyd$KZ2_=bWeuA(mGVjSVc&}hv6HW0>$?iv)OQ&i
zR~@G7;9Q=cLS3UNtvtf1qdN>>t@kT)e?5=KzfFTcp3Pv}E!T2IPA{!=Ds!OrRHDYY
zpqK8x@7}yYwL|hz-Vlf-%5!x<;Z*a}aW<NJ)%b!RY=s)LU~ZIwaHBf`>e1qv%H9l+
zWiY%ZLLlDsf{73|b6={zBKEftvIPu%*SFj2lS<dTkjF7yu*nD}t)@0k$x@oJw7sQJ
zMI)6m_JfWS{U@37e#EsM1?EO?+@lUvZPA-+z}?JNm3Kfs&1=rquAloq4f$CNU}umq
z2T+ApLVh*vyWuD9vrk?ouvK$Wti@CT0gLAe1z38B8p6zlwYs*_PSs$<j>p}62=9F?
z(N1`Lufsg^s?ttv`QZYxfZUTxS%F+wrNVwq+oGT0ndIrroh|0P%>A{d?G4PF+^8r_
zSgZ*MgvnEQM(hLOJA=K7ixl9NGFPuwKOlHkc@9cj&WIAQR}l2$-`*!VMB+xgVGWdP
zlUT4J_QTav7u4*M5yR=CtHU$pxebS@4v=ZMov%r#yIO_UU8p?AH8#pVQ{R)nHI}xY
zp|HXzg$Z{Xn-NHA&tDwoljTUte_01B>A5lp*X_ffk$rS)QPXgdXzn0?`_n(IaoLxX
zF2}??(lR>#B4W_x(XECJ!O^vl4?jl_(!7u1O9zThKN;)YRHT0B*xej+N)+sD_<rtH
zj$@L=#a9cXR0YX5V+^3%T;%WiBKqIsj*rFxn=`S|!xs@dfZ~!7QK>*q%O`mM;`Kt#
zQ7$A~U)RZ!28vS_{z5=3Hdy2iYur<vDT#AJZ!7!1b=>g~7HbON0n*d#>p7;#-~qo@
z1vg`U-r1az8N~MKJ+zEp_?_)LIal3!X*`$6;#J;4_YX;4Sc0bU;cxgH8jQPpP&*yu
z;l}7eaP9T4VQk6m5BblvJ9M7?>{G9DpFc61{NcgOdE@#vIyu3qp696|BM2mZ6c>c9
zB|lvU_GdGjynVp>={=$Oji{D)dTlOOyH7;``&wcvyS0|`dgzUr$-QAg<#YXk+P?|O
zm&0yo(k+V;S{nv0IyBdh?}lm}bL8zdP@2!_u{K$N<m~6EEQRltAb??uj}Ra``eYD3
z%Zp8TnQLfMffWda3OHLCZf^h7{M&%hGCF^EqkggT#$7fMj&@4(3LbJyb~LIo&XG7M
zt2qKPk?-+I7lmXF2KKd7&-R7+>!iT46J8ZGz3M)qsk#)tr89M9HvatbTR+?&ezpEV
zq>@6z>9<$Ib=x0EPe?(}W+a_>q<l{GpwgQKrEd?_v<!7>k7rd|`d%eye?vGJW<K4j
zX&lTy@m4nNlxMU?{*3h+(0Nv00;@hMf0_sC6&WqFA3bKof115r3?sBHSkO^$$yKmm
zlh-BSjb7SDCCFdo0t*<qPO!@wx*2w(N340b`{Y_^r)ZjVyS<yX$Z0JF^KT!f%U<RG
zG#B4U$MYn+=zXvq3F4hbM&A$Ewt9C;<n8`zX=7q9H|3J6#y{$DQeNtbq*QCX;7Nv1
z+`*r`-21VeVjaH@tK1p6Kc%=y=`V!%#fX-E1AC(Gr(_H5e~-tO`Haw?=b(qic@Mm0
zH#sEV_3?JmKT!FJGftQJMQWoI_JE4?bhP6k-LChy!!MRAGlb<_%}*XE;O9-E`D<@e
zc~+hR`MUafU~1C&w%nREn#f++ck}OcOP69(JzkM%E$gYD?md>7KnJH<Wc@(&vs__}
z;@rnDy+@BqRF-<VTjRdpw;1NUcJkUPNaFm!;(X`h&rh63%P(l8SwAa4eHk2n&pX%R
zQ~JuNkMowo)vNnJ#b3F>Hefoj^t~`IzHyYP&Nk#86gPQ5Zk%)tpMYx6-gJO}vkUiZ
ztVrwJ8zJq>F>P>?b-Hs^;@Cx>F#U7pK{8$P<*17P9?&>-%sVoyvDgwCru2&ZD$rb7
zyXS^S?UQ?&X_;M?xul%ev#(dSUayvLz3j=Ou49L*r)7uUT@wxV!FOMTzEu*6Azw>7
z;i+A{fG+F-T35*gZ*591Y&+b44Cr`T*FU9xRwO(kr27qvAz#rf-mz25V(Y|2d|syK
zU+TI85+)<Pf<8arVvzxc8vML}j<++>2Ww<FMB|_fePSCFqB0|O&P=<VXO4#!!yT@a
zp?i1_IN;2zM!x_&y+^tUTCd^HroLa9D=zI)ng^By61VzKwm65AnJmXwQ|#%Y;Y`0@
zi*J`6oecG5?9uQCVL45=S*C7mBbtt0dK`-AlqLM+ofQo_x7^FEap<;rj(SVqU|$I!
z98a%}IVUGfX&;|W#kh@J$#>w!eA)-Pj&jMdCTqNPYJk-nKR0~JN864!*7;rZGuMN=
zxGe3RX#XSG-KXUpm@2bA7oWcuFy1AB{8P0Zd;MVM#`EHHUj*$_oX({H;o0wLkwPo-
z8iF&3fy0lap(SdUn*~`34p!URWeOHY&n=|Ltd-sLRaj~Z3cq^SZf*qR_TIMGx1Z<Y
z@2z-u5&?3o7K5{k9^t#ESfMvA9&!qwD|o3P{X*4i=A)$GEuMS}<r1#bH(Wm4AXyZq
z8QI=_$@qB#|2XgPzy?@j-{GT?MVz-%OK&5A^+Vd}N8p`wxP?b|ok9X59$&D3o1#zM
zXkYnRRqauYq{~<AuXaf5lQsVxMA|vkzd*}WT#|!c%GuzZIF&7=DK~L>zEmep&_W3)
z54Vd%zkJID2ej3n6LN3KX{o{o={|V1)QaIivY_J6p>{wVeR%RZ?+ouU&p~eB=#=&-
z-KQK0(ver%+dg!%4*`d&F3rpMoP^sl+D~t}<`J1LQO9WP!6EbxJMSsqoV=NvHC`C4
zG;4=gS?@!N1aHoQY2KNa#<$<+xP3F%?vK`vD>-Zah&w#+Q2(8_I#4f}3idIhIUvXT
zN^<{$1yD_T@cV?@UF{(4L%niN9p{gnAa;HrwU|&_oCG;|u7No^^;6twkCo%(Xkat1
zHo3cSN5}TvbG*~~VXKEa-v)sANqxd*eU&heafzzjlUnV6dQaZx6WzK_h$g(|SH_fV
zFBJ5S`Z%p5(*GI$P<@lVm8<C3a5H5+Owrt<Zo@lV3HnAVBM>N^syn5zH@<#X?gdo3
zXRBWajF0*V-Y|clU3%iEL5go{lb{DM{;;UcQ*q=eE<tD)+~Cr7_`?52^?CKppxdt8
zPJhiLdc7G=BYQsl{r<%rC%ie}F?U#J?92eh>Tc#`=<wGJ?Vet|W3r7LGO=V*qiJ?9
z`OY>l1bGa9Km&FI?+M<5MvdiVuUOe8lnK{pgYSZu&*<=M3-Z#K{+oed1znX*aC$xX
zdIjvly%n3%XbuSBpyjXh4?BEq@4+TD_mO4LpTW$_`*!9zFk<=i{Qn^Ct)rq|+x}4n
zgi!=$0O_2OQjiiDx`q$|1ySinqy!|Sh7w_DkdPQa8Wg2bl#-T|kdj8aq+zIY&))C*
z?0uf!e`lR_j%(>+&0>w;yzlG!T%Yg{i3x^A{80H~6EuBTBs#;awF8C`njp>0O@`_e
z0HU3-WrKS?UpMpc35VeUkYtDt9y7gjRk<jKrCA3a+ZI9pAS^Kwvw-*53;zYl!USXL
zF)w2Y(n*Fvtrxj`veV0-yBH;r4k9|3mVE#;XJr=qbj9e!L?yKbv(`Q)4iERyNMutq
ztb&j;E5Uux!nUJZ`%J_6s<?A;%1}-XaZN~sWREk&=ct3jBF@;a9!8~6OQcyMS)7gA
zpqfm>M-uSTWB`ZNWstn}@j;H0V76Q(W~Csc8a1LMm8X$akc_~!>dl`XAN20D*A#!9
z^s-rZ8{)B|H@!L%=J$a7B4f$5j9B6`P&0pzf<eAwUuXtjXg0;Q*8J&mL#fZHLtPm6
zN}eRS5WQd`gyte_Q>&UT5*$zefX<4pMt=#Fv(^l~q9T>gg5@oE*;{%o3#oDuO3%VG
z{C>2YVK<-*^-7p{NC<WaW(n@gOkP7sH#5eunzgdd=dzz=ga~8$(=i_QcRD<=S22^(
z+%7BAUQF`3jN@-kBmt%aa%|ntMnHDS4$^rLa}>7kDX>`)@VV!+?HI|wUVBu^6~vER
zEjcMg-3?%4Kr;pn58YR4f6s@bc8<E;3yFaQqCQgQs;>ac=1_l*Ymy2~>uf(-M(0rL
zlvd#lkw1*6-z-1QAyq+Mho@A`V@|ciVuw-iIGHrz?735@zoJJokAJ&aD@xyKGJI#?
z&b522_`wITi{w9zZeR}Nfz4prP^7fIshlY%NfuGx;j18|EhD>>URLYGnam2)%&CNo
z9m$#dNE1*8f)f^0t#Argyii?B{91FEEYwS?YUbn%7>~9MOy*A_926HSr;OszPrbbc
zt2C<PgqFa}VN0PE6lM}VA=dWsEgvC$BiH&Q-tyzaEbzIZ<@dV`m8Q&}-6{41Tgqbm
zF3PGc#he-b<AIpMMs~D}KILmdT-VrF0K}COUQ&>PJ7MqKJ02m5J@1j+#KNV~y8#l*
z$4h<LE~&e+L(+|>K!_f9t9G}aX`;4InbAtJoW|J_198QY=nkX4Q<<5pV|Uv}{1F!p
zh~}(}n)iHycZlJVcJ$uY+SENiT9NgWWSu0ZI?cZAwWMlzgbx)+&o?(|OlBM7A|!HQ
zI=E_gg^QBuwiB|UYF_kTn=Q;nv%+ThW13p<?JLfC9`~opYY-pAbi(>0aWF1e2uvMz
z4Aq56+)OCcNneH9!p@-@uoI~M`$~htXiUy-K*i5^r6d)pqPwiK0VS$L0v2ys*`Luc
zlZT1&j^&?}tIb`tE#sK}><{S}9W%=q<KEA`wPR>7l`T6$q=j5q0Mp&h-k+^ng}y<y
zLf6=I5T=SFRSYfr&LwXtAit0r(@a_hN82(e&kp6OxfHe2!eZ&{`awmUCrd-ET$smX
zw2FgUOb2u7Oj1CtZs&}S)<9BrFXRyE^TTn0)H;D~rviI$3;xd^A?f>aZ<INRK0!lQ
z6}A4ne<ULly}QD`eGSpN+OLUqAa_o8t1x)8P1Z*OfmP^MJq_8e7<Q|4EbXx!PWUB}
z^>KCV+!kH5jvK@2U{lq2mh5b^eT+NGVT1WT&JKgtM)AFNrR&ex(YEV)_Qg+&+lB6D
zcwS|%9e?6h`nc;c5{-I-DXczM`q!(JLU75|<{EWNM<HzGhLWY&LuL)W+e2-hZ*#jH
z9>hmW<h_y3cVia)UHijuDCS?ifU1$!zpEzvip$<q{0RE5r5F78fBepOx`2OQ5O8U-
z{Qv6%A$r7*e;*+@SnB`&fYXBL-;D|WxCs91gLcb^|31L~<7kp2U`zkpoxgs%^4}lC
z2@)9n>w4jTy!c-qSPCh>4gc4*0Y7s8_Xp~&5ZC|vwSiswuMcAX-?})$1HHZQfygR{
zUwI&R>Gv?$GafAW>4FR>SaK|Q-HhtEd_g?QZJYia&UI36xi!Mwe4a6PlczGbe;QB3
zuipRXd{ej_#wzXd-*FE-tO4dJn|aV19)1hS);)p7illVxl<=4!IfM|RQM%z2I(z-V
z=z)UltZzm-ny1RZbs;t{w{YKfNWrC=>z{AT@%-^m$@Wqp;C_II%xY129=-wREAJ9I
z+M_k`iLC?WIj?!w?E!T%2K47YjimW_OKv@E=6W7=XQP(C4BhfbP12-`q9jO{>s6T9
z#Z={{fk<KY4;B4tHh?_Sc@8KzpYEcQCj}PBnI&>Sy0$>K<Yo=92R-U_E%ja#-02oG
z(KijaRHjjPhO>J$z!@w;XBQxj1K0qA5h~id7UW5J@^yhi)swluPV?G74~np;GAJot
zLbpM3SAK4y{*868km%K1Dg6y52b!QnF$Odu^DnbuH~Yc=8275n=GuTl5`GUX!}x-W
zmlwk7`}x}?9PYk)vO|u=P8Ltr{rtzx4mkx2-%d+_r)>VPiJ!Csh-X^{sYt0Cc7pqa
z*r#~Apc>jW00Qa#aO|oR@C6I2El3E8Ym;@FZg2(mI9Ardd73t|h$-)pb1;GJn7RzU
z2mJ*YR5GA74{tR%+l4T@s{&IX6)$k|c%zVhK!KP)<NeR63B8=7U+Q0COLSWu;@bmJ
zt#|^24d6(qQgN!Q;=}LsEn}6m0aEAkdkR$J89ktvz70a^h+%zZE!Q5a-{mbu(L6~B
zgI)#UO>OoekBvP!NRu^q7CJ4V_TSY@wptmj<*%tk;SF1QA6sC?lwb$I)KU%HI<qez
zG;{!1wvU<G)#-nAb|q-M4y)VE=1F#_8hwsBDF#FJ+nv1S>Yv<8g}oKPW4t4E!R3Sh
zq-%+c9w{i)HGvl#U+wUS1A)WGI^2plV_1~Nf6fd}z;cBz(sw~<wi!S}*p@XAKxh4}
z=Edfu4KNH+H?S{Nio&45&FKerXm5zg7~&u4n!VD$)P*VdKo)cafFYsb$8XLw`9u;T
zdqJLBWd$G!<ZMiQz2_$B=1?x!A!0RZlX=Uf9NgtRe9u{Yck+F>MN>rt$<`ql^lOYg
z@8m1@e>{xK%j=#^o<jLJ0<#ty@UZk8C_4nsR1}qtb(D!UpN=Li|LQ!JH^^}~-}E~-
zcn&XcsAIHPA9ACxTPh>d^0gg%PX@2oqi`F2&zQw8xQI;rA-bA*Yqeo_<DZlLzzXW4
zJ~^xc_c-W`2h79y5;tmgdImo^PBFO|Q1gT;`vHfkehsmS`0O8d^1VUy&zl~N;zV0X
zxu?aPwtwjN2CsX?59_IW8a*~E%PWJ8hRMCu#i;7|)XT*7RM1D`_CLK|U(v48PQCx;
zX}6l_JDa*$TuOh+<GY`XjjL+b)hr@=VLHi-K@~}~GB-DyDn?{G+G=6z?9<oU9va_6
zJLrBevTupK40^8nkyYWxA4Pv@bV|cEg`?C&KRS>NzDT2PGx#v^B_g-Zy?C`&=Rs`?
z8ouAXeXug%n|o9!N+MFJ^-E-r*{<sjM+nJEflX1R(St(%QkJZVlp#f<b<TfX3qr8N
zQ7bgF@!g7D%<#q8L<y-#ElLwLLxrK7AmQnQD=^f`{qSk*9d&>%wWPucu=i5bw@P?e
z#&(Yx5W+M7YoNXiX=EagK*i#@CgKFiw>PohG{g2NWDeQFb$+5|p_`aQF6P@d%i>MR
zI^)1GxPHev=czSs&W8-Z|8T*%_p8Lc^8m|4&!+R4<oZtzwAks4ME@i|D7kC^(EQz8
z%AJGRH}@=fT6qE~%nMqZqcxk4x%GGw5YKkm>veN%MQ9`@@d<gUq&2Y$V*={tnCVCQ
zP4Jqhtba2!%Lcz#ljT6G|1@))T+|2nhN&rdl*)F|?y<`WyW0n*c}8zJ*NLICnY7MF
z!piILhc*6U1ylWv1{f?p262Rst0;!|m--NX`{4b^0a)2B69ej{l8ZYsAdttZEgDb`
z_@eVu$ii16s}l8|Bui=HG_Gt#ijHv?TWP<qKb#G(o>1M4CcERvBKkX}gx%uZdw+()
zxon3avDI5xB45xiFZ8xXGQL?%tSf!y{B%Zt?GN5_$?M*a&4-VTMEL3sXRFB<0^C>3
zGjxSV5<I;@WxHcIJAU7gM9PKCrGdfJxN{iNY%Cw<G3Gb(igr7t_-=*d>C#B4#jSd<
zLs)Z#0O#tQt+}?vvq7<+FGggCDE5SinYfLC%T`U4`PCMP&6plI+j73@U<9#*+e-YD
z0RXzT^=8)eDw#=O8P3e^788Vaw2UANdYl$}x3{j<i&5Ik)x8E&9bWo_Vu<9J&cc);
zOX`m}dK2V@8dHGmiWkPkW=$iHZC%DQ(HnQ{TN!?z@qJ`pF^isI*mqp9zQ;F)7~-{K
z`syNW_qwvDW{Ad(1>M3j5`_+QLmBuKZ&epg{ZsAe(_R6~ZxA%-&wUnp2G}PbUtr0Y
z2MAU->U--Ewa>Bab--zDzTLICx_~f~NbvXWz`c85=I2ybCn_(vqS$~ZQax9*19%ns
z@T%ZBXjr<l%(TX%${;E^O`Pjen_7vh&|NTxt^Zy6hk;z?aJpi`{g+kgtMYtU9GHXz
z^M0Aa_p%s7RQnu8^|#u7Hkzm#PoX2N;V^rem)xJTS>LPGa!PWwJ<CF{U-V;>`z|d^
z)V|FPV~qFPe=e&q9bw&yGKm&nNW#-YEd_6)<m`d58buDC-xTgNPr%~vtn52yHE-hs
z=enmmMddweU{mwHbAdcIth~K&2P}KuIFMy3_R52~=R((TW(Z5lC6P4-mnsm*xKKV%
zzX<HE2Eem}jV5jQXsDPGOvadq+gp9p23zbeCx)&iGk*LEu*vfFeGvJb3pfPgy*IOX
z0y!2F9ZS9uF9T*1-(?@nTYQI#136TNf`L+|OhprTSFt0B4lQ30BGzGn_HGOs1bL~u
zjp6)HzW#6wLbodZDkU$utgwP_mH;=-PhHUQ=i93moQ%zQH0#ylA)_Ks?eBQRb@U0-
zCno@*<W~;q-;5UCQ0mEBI3tz+dg5zt1TeHxJxuf*<5Sv;EU9G+O|1!-qZYksfI-~F
zr|^B`*Y2ieezx@M+GE35CFdczt;rb)?JeQn5xyZ>^vtAXq)uvniJ+S{OP@&A)+iz!
zm^`}z-}0PTgv!v}+bzBj9BBUUNv?mkNU<8yyNhnnEULt3m4=Tx^DCu}-*o8_w>Bn0
zPCEJBXWg8+@Y3ISfPO<z7Jx{;5;H+mWpQ_q*9D1*99o-CTJ_B*^}@$x@oscgN=2_m
zNW}v!rW*qA!F}x+Dh6GbdPwm3ef?Fx?Bm8>EZzT7zdQ%}&y-&lQw86H4a2!LC&1-K
zr^f-W*7^#~S$Y-t(B;)l5Ixs%8Yyy@83{~{qey3b=cE@1^7%F-hb(g|p-}`#3NktY
zwyAJI-`4M6EH`TwQtVb-nf^7+sbB)52rWn{X=!A^n8=VWB3u?5qS^e^@Fi4>I-(<6
z0LB5egsR|aX1q)A!wB!4?%T_4tmSgbw{f6YOTENR<k1{!tCcqxo`f3w4g91t+(89p
z$ZAgBixT56X&}(U=mCqu0Y|^%UraD2n`xf#x6gr(_!D`?tt)*gOZVXqVc{^&P%kCd
z8R6Dmy3p5H0Q<P0F`5{4)H4MQtx})h`@M9EF*(vfPjPBGzgtu7UoQYinN$ICz^*=E
z(u`ud`ZRh;Ju5J@-KuDpRx7E%@*|J3jD^bNFWdJYo~N>+ceUIfv2DkfvRMlE;3+`S
zFz2v3xCFZpVwW8?z*(i_Z&Ak`eMkz)WtY0PSSQMbQ5z1zM3i`ZyF~k&`xjS+k5KsB
zZrm0==y#M8a_r9x+fJ5TNRWvF33k5%xHom1ihkikFjW?W65F-qP&fC?6|q#BQd`Zh
zRUa4jqGsSaWoNo3BVm<og2YAP{J!pAOuLKmKsTVjSlCQryf_TxMxbU166e4OTEn?_
zaQK;-<XAKLxC)945BGcWnb8hiCb+)e5{hW<{45I+PgC%2#k|P!Tgx}y+eDR)|BT;X
z?0ggbs!qTUDebgbO8)u0ggLeoa*Qe2&DP(QS*2~G7~(1hi0adM{WVQ@qM%cJ{^SH$
zdfjL=s-J<d)1z^3CN5}4vJ3ouXg??EMRMge<`MGzNL|I<SmznGMs!P3i8InsP9(MU
zq~!cLzp(p?pWXQ9-R@6Q3*JF8(>hMyIo{;pVZDQw7?)-<CK;#nZ(Bjf*X@Joq8obB
z8|s>C8-2gkD%BT|<X;`yH2_;o(d8n~{YWygae-p4eck=YFP3D5onG8M)<yS(WTvk+
z8h6(=)rPNs&To%sl<8qoA&yhid^AqcMKM1K_)j&7G<vRmHABwaGu~v@fhh~}|1?PY
zG++<#2)D~iE))1Rx&VP<>``u1X&TKOeG?E7m~_}v9jScLX4b6QP&O2Ao)krgJc@e*
zOcwR9@CgB%T0~Y2R&_D_@TJEY*d44(NlFFSRw&J^mU9!;PNR_UQ?uy??I2`d6y#M-
zQr=ZKryCI-1*KUK2a&;%cCak&&STK(IYwcXrEW-E)>*OJrJcDPKx`IP3Tp{7y;j&6
z8gZR~;ajEm!N&5(uNyZm%R#JB*6@B9I-D(hiFKU?5XX-K{zN6I{}v-)unP51s!;U5
zp0W!DbvHx3P?xFDVV|Q;DS)>k)2r{}>_U{?5vs37FiDY4mqv=gNXzphlp3bz%*h>Q
zlF*}ZD}O9`4R!Pv?tK0FSPI1GtuHQg0#*av!k4s6p=i*{EN;y~{C~8KnaaS)WQ(1r
z<#d#JQP)+ZC}N|;TOJi%CUS4p;elfh3eLek)HTe$Axt|G(7upG7p@ylNT49DNnE46
zL^x^D144yANs&~j=r|hn<`i2R;DQSx1i~JWtkO9P!|Ul;vjp86e4}O0JZRKm?y$Vl
z%jgAT6%5%T;Yy1P>WJ#7M>-(xt^@i*I8?9hvCnZiTbHpvx0KJ}AExE5^b1HA0pcMO
ztgK1bP{SB_o{eWkVp}3!tv(H@4L+_u$V<&b9Pi!Cy;#hH_8Jc<k}hMuPwV0idW41J
zSKdiay>QJe-&wvHw@uO=5PFk%vmP+mC7!V_1QW^&-l(Z@=$JJ{rFBu6Z{vaVO`C@A
z{(C*A;fhyd_bj(fDW;RJl8`Vt$)%q=DYIv#3L%9{-;~RQYu?9nU>3*2*B*ju)-;__
zrfHOf>&k{KmI)uDa8Gc^Mvp>?gtxV)zEslt+LYqj&YDV>v}hAga0KaY0{1TFHOazN
zMge|gR7s-Kv^n3aZs%50li%KvZm*~mjG|`$L4;x#?oCic&=hjP%%V)yn>Rti`*Rd4
z0Xdw1R@fYF{gUb^>}i10HCQNnFxxZu82bWSD}0x|=QRN{J98}Q#aNdBm`}J>zV4cA
z_zlAlCq*LeJ@%jnv<f0wmzRHp%B9s>v<=p(MDyZ)h;_gTC@+P{g&zibM3qD)wF?u_
z&cVZy>)7urnH)-?^xmr1d{oAmVmu+picsX8+QByAS@Ki4C60HL9+8pIci`UED@wIh
z`&TW~Rv{`y^)4!?qwE!KE9jbcVPa6f`d^HpFxTBg&Ec_ygQ1`42xuDVV)qT3?AFx1
zrII9rcu|#3zHDk0?5KR`pC@TniLPUX`A@d6b;`;FK?Xx`yO;u7xj#2D7>(P6-LFez
zwCk;yI<Tc%7z|w*o=)<QX+3Gy>;H*4$}>bc3A1h)`$SELw)cqt8G&Ys+N<jD!*95R
zVM5zOEC>!Xjo@zYN297>w9bceQr14Z(IV{(awo0ENL9HCB>+03h#oB@?$O&_#Ye;Y
z^a|6gM8~g?-C3izq>~e9F=qD&o`BxbBgC9Ud`RM8YYjwPScUx(da{sVH_8ePqMr)q
zuZel2=k^mjnwjFkj5eQQyL&O2H^~I+rz#lrHX^b_ya!SfjdsGxsYZ*3S`P{CTYU_b
zi$2ZM-*tCp{voQhH{OJ-VoNXg^(--l`QC|)YKYpoEbwf_y4TcEzJY7!f>RfPd!8(0
zJNBJy87JtUZ&gdtGve8N{aZ8<0fO3Gn{8Wkkr&Zfy}MKfe<r@cNQ*A6^^7>_e-nI#
z*&d+?7ocH!HlpHGV9r-MRmSp}#TtQiEFiTm8d=TXXQBQN>=wK561LP|z{bh8&88Yj
zFU%Q!6Vi_gga6oe40?jHN0A3%k&F!T#HCTxKOmY|Pp0MX2sdZ!Tx5efifxwL9IoKt
z8E=Q8qwI_F@2H+~&U=PRCWc61%Ol%SmVAvAaE4+SAFKwr8XHi~D<VTn;kGKQ9S`E$
zgd4RTViVX!;g7Z;P_4Ngb0SFv#|rr{vn+#Ul13Q?G590Yi3*WOVHymlFsNt=r+l-G
z%7in}zAD7bs&I1{iNcu(7%WumpVSq+ars?(6Rx+*->*qQFLYhSpOQU#L{sg^=8`1)
zGwH(yLYu~4j&JOlc6tsm?kX3W%@D0rR!z?YTiLQ6@I-&U6C~Q#rql-M5ur#Oa%J(X
zVKsk&IqM@?xH!YaNFdrQIxpJ%{h~azHPl`;_#)BwLJpMv&}}>E=BX0qUgrg$BEhxB
zQ#mgmoQkWA9j_4L!rl+ZjeAUFbazpEV$_14#^2{Ksa#Mg;nMKJlCdoQv=Gyd6^<&A
zb<)U5<+75U75^h)YRKf*fW~n5$TWKY>~W)TPQ41-CHrNX?ZL{}N3z!A`)$nJ@%Lxq
zeW?Al)lg9<Ta2^7<e0s}DJo;&-iGH|^bQF+@-*&?4T%Z^)}j5G{~sym+2(Q0kwD+L
z1pmr_f(S@7Tcq@eaAOo?57TLhHC<PJ6r1F@z#`8Q!n^>-jRD`}Qi@T^B~pt9ts6M)
z3duH}n5^`r<17SGMr`*>-#ETk;%zLYo5V<+X}L!0aZ*c2sQW)Vbj~~gts}`Bi3kX@
zuEtJ4#vw`&XUK0zA?ga;gRKHK%0xh94$tC+3)uL<+QS0L2%rSFmMdYicP1hlB9nA^
zzNB)?2ayLsdk7~1O6h`D+6o#*Wh3;RrO_8qFZyW-6%cTZoX@wE#~(zI%xV~+wgFEf
z)OB=(oG~c-0tHG4C1J|TuF8IBVG)E166TgoP4z<v^f`9GZ<&b^>7lNpB%42}!D;8S
z92<0#@11GXVjSlCTKi;{XOsDHQ5WvA=Ks`;SE=!GoNa#n<6%);DLYfJ2eF8ff(m+<
zii==q=}D?X;w3*JmLJwZjjE4XtQ+pFBOB>os!r?9VfKF7t4ereSvxC#3q}^GJN$wL
z^q`ycdBXg+B7SsuEuLK|xzqz05$O-4ML1>i+P!h39=*WuTD86>Wxno0kkQ6BbFaOp
zZ%zY?AZs_b=<NtI#iJ<YARk?CiQ37uhQGX{L4RF=+xi(aFZ6bF#g5XiR=YKosn6DW
z88bSR>%r*NSs&<WE6cbAs+UTuyRH>s|IKYARQP+ccbUTd;97|xS#z<%F|eCWGi9=p
zBal*njRd>Xqu;FOUrD#4UB?op;{L}|QQ`shH+lj|A(~c`$><Wvxm%lD7MA=LGQe4N
zamVQXxGdr&%7?;<nc&O6hXj1A08P@F#ZF=@mFQ4(3jV(X+QaY5cQ|GBiLa)*xQAkb
zR7KQ1`z;?+PQ%A2oe9lYE<&73Pg0-`(9k79>$J^^0nLXGOc1+l4S1L*w+=dUBJZzV
z_rF|#xtu%8X&DHt;_lTj9v?-z6dL(gWrK>c`%{kfSP6!JYl5uS7h9WjOX<y@>|TU+
zEC~lbg)Aiy4ME!w`l%4(u{m^5D>Ut9Lim{y(JcjbG;ZUUqf5&1a|Ks8gV;*T<+qub
z%KLZX-*=9#By^yZ3D&+>&!O_lj7!O)s3FU!g4Zcu+2Qv}&3YRCtbeMG+?Hqxwlv1X
z0}n^|RK9!dt7-b;@b$#-x{Iqs@@cypySXPj<`WGyI(H?Fr|J?FP0El`HvQD*zMg(g
zt@1j2FDM%}My_dLA^W!O5%xrDMk2Xv{F5Qh8OoNvxvNW5=C?E@=3(p3#Sa<1MM^F=
z^8Zyo#vK%2Ip*4-Bo{!^IGre1Qke3+KD7Xd5Pu}0ytKWR%p+XXOZ6>e)b>7utzX1;
z!iuR(a_9DD;B#~S8)Mkv@drrSX?1y5nNvPTE+*(<1iG5N74Z)!s1XfFJ~v`z#I<1|
zF)WJ*a6=~=zQr#1E?X8tH^`sG<^wDcR@w1@m?XA?Ns!R2G$p3Z8)H(TgfrIWphXCE
zuA-b2u9L}2hp&Sv3%P8Dfsuv)U!Hpg%`C4=KX;rvgZxq`4DlTItob242F5QgnXCfC
zsj)(9OI~PDw^W;7aj`ez<M4z$R{F*b-zbmt)yyy?&)CsJZ9b;FW(UV<-zf;I9J&uS
zh9|=0J=>gV!m%BY$ee1fiG5;5`<Q6NbgleL;?w8{N@$*3&GXUVpSXt=>~=0*Y4wKo
zFWnUU^tclGlW0R-SKKnIj`Lol@Ah@cPJQ}`+4*e2e?@_9{%9#X`s3KJt_cinnA&Z@
zit#SguiXu=RQ~N<S^K{3ho~K)U{d@lcFxGAK732y4Q5I!@qnkdPW{}8q2Zzp9?NWW
z#a?6;<z}_xfIny(j4ISdCkzo<%n0xIrYwMGtV;(f@NB5BJr?0of%YWw>U-Akg6_6!
z@TLE3$gt!yZZJtvh`$}Jn#vUDg{gqhItL4C)zzP_JC?tdPuatxj-+cjbDTF`mxqgo
zRHw+%_vQH*`;t4<C{wd{Pz8jXIo)!?+{9zB-l~L5S_3HmXga~HtQgk7Cpj<EAH`w{
zym}b8jF8sFF6rWZb+Hn3lIBy-V<GHOGA?<}sQky2ui=!pd+hQzpj)ahBc@xK;=|Ru
z<T2K<9XNnwbXcfVWby7ie8$>gD%*_2EFBh<kGwJW?t4L0(~1<UW{B-zkSyo)oc59b
zEwX%?%!sA+;C!_MNFNEzG%Gh~Xn$SQZnaPxYYrZ%cujVPL$m5aLu?kex+cFa*Z94g
zA1bs9`4fidPRRnkRLMN&8~#%e4^NZOC7j>sm4+T%Tzx+#BQINOgndP37(RhuyhMIu
z-0|m--e5Pw2hsF`RLqNoxWTmqtX7tkH&fpta;;ff{DU3#C=;z+K><|fAOff7Erk|x
z-$uLPVEva^y&s@e<@lcBa`8<x>!w_eSD$!D6?c<v_WAtk#jmf@><ma-x=3K_CL3~1
z#y!|XNmR+LWQ$hg0bltQxBbtvr(x*Nn}@f|WuDb+wSL!Q_tlg&`Thh-eyQa^isGNa
zXwJMK`X^0trd*6%0T3Ic_JaXjOg4>YF<qfP^^j@+W8mdk0VpsBbjor7Z6(1yDTM~I
zfZV*Nip^$08OZX)Go^UvQcV`vau4BFkm@FqF{w0YNt=3xj@0@+q5y9Am@;PNMgi*G
zvmVT%2rL5&V{L?@qaap9>NwpZM)?@b16-4MSHeoZqg_#{a@1SSMj;};*096LO1oj+
zVA@b_H|=@+2u2*vxJ0qYff(CLX<yskY8$7jjXaF-=wWKphxEN}zlZ8KAN%c*XJ7q!
z^1e>^N#xE~gnoiLNzP>z0a-A&+#WA69s-<8!#o)Ucfm-co3J(Hn-U|<WyX)6XTv;C
z;pr+VE6d3;DZV9|9wqxr_r?k5>B*ovcV22-cdhgc7b=n*x;6Yd_^Xd$ymc+@xyEr3
zbHDS>Uy!)uQyq!)0Jjj`ZY)i-JDrHFj&JlA{OqZpuJeFlq54)(OjvuDbU3;r`X*$N
zeTe3O+fDd9mfX+wGNT0ryn~*~BC0pc!o0^Lsx}At!cfw*!M~=5#bY`E?+TEQhn1&Z
zqH(+54-~aL7S8fFyY6)vITsm*lU0Gah@px`qo~U^2;q3s!{2tfV96hPijuNMo3(x3
z^x%YJyI^YrMIqa@DXY$b%l)~X=S5T-j;)Q-bZrQMjQJ@l=oHobYLQ^?i+}hYv8_sg
zg8d3g1$BbzKxtqaY&~O9+^)v_)xTeh2hy?!?$p4VpfVo5V1DuZw^(d6W=)F|ejOGP
z1#oR2^1Vs#O(Q{D5&r#*mTM~rp%mdCHo`sKQ92EScO<cWzAXul7leN(Lf9vyEZ}K>
zX*L<|<-k>TXAIr?y9Z2AIoynW;i%t=5!sxK+v59}@?_6u<l)s)hKo!W3%OCw(pATc
zvggSr`1H!7FH4FQk;ut<zjIe0T*#jSQyq@BOC8QtVm99o0Jl<m&~}7m$i(k-7bv9#
z@w#|%iwhaT_j1JZ`77wF!jBY^vWoHGXH*r(>IHL~BHCu%GmWpcUVAsh1%fcOVA{D@
zuokQt*EKHqF)6i#V{?X0PBwJ1CD?hvyNl3VteBqhls~bUI3wh92!_@{i^3(0Y<b}P
z*zcU5w75m&o+Rq$2C#srt_Sjp?{M5M@k~r*==3olMdt&)vA~Dwg_K+o${xXpO_0_0
z{eZ}>s9&$&EDmFiPaP?TglDUbaIVawqdYN~IcU(_Wb1dU_aA`qZv0dRvfGK~@Y9r!
z@T)k&Vp#R}8{d2bkzJKqRfp5aOB)neOIu2R3mI|Fz^6~v@CxnBT|LV=Qzq~_8Eo)d
z_#MuK?2IMRSVLAUnUDq3baKR@cvjtJQ{S_-jEbi5*mqdZFxQija3Q3#K>ZqQuv3c|
zXym^izz;kI+jRB9BLdvM*HP--2!l(`U4MNFCe6K#QaTKFmNll4rNtoUkbE>)%Q{Eb
zx}L8$DnR(cv6%PeIdK49Z+n;0w$wIHwx+bmwCu@E;OC3RR1;s^?&9@DYId226HPA~
z0GRqZn#ruoj6|kM-oI@3!)rvyKm3i`CS#QjzxJE+Hi9aQp~p~hC<{yp)(k&IHWDa^
zXm#O<h*1JuV@&diix^SV+JZ2V!Aho-Rw#xE#lhlxIHL!VkGQ@k6dQu!fG|U1Fe8|Z
z;yRoy&%0QXSz>G59dQM!Mvg`;AQ9?Mw#LRL8a=CKvciXNJ=uC$hIxfS?!H{IN8P|F
zWMC{&?Nip9wF57v{4xfb5T60;fx;;>I>aMt=~-vVtK|JZxclC=c>AnX{`z&RWkUDN
zDR$*Pt}!{On)yV7=O#yDaOCOAWUY6UlND3MHRp)IKO+nQ5w82FH`?h1+PJoH*lE;6
z=t6GBF1;k)?c%S=kJb{FLOqpz193+AE!-mtsU*#ADR_p5pns8vkPs=YsrVr{MEkNJ
z+ws=eu8TX-<xPTZOmS@}SBb1GFr2wNE8|jzAJ%xmkm0aGc6-6}NU=$z${U&iJqv?o
zfg!5Be$KgwYO}OyC;6|KOv9#egsRYDk)1szrd8KYLM+|6j8oSS86`klq=%z4M<{IE
zcwh9o#oN9`Ki_x_C0i<uHb<K&;&hgo7X1YUG>1g@UMJ$fQpIl-)ZpGl2HUGKVVUW*
z8-nhrp@eN#vg>!#3ZB{fkKEH6qT9FjK?%4-Td+1i79uxgwXbcVG58HJ?^%4p+?--<
zBIj>O<`iARQk{NeRm?V<j#<$qjEI!bV=P+rFkRH$+&u?VrS2Y*K^5EQOo(<>n1v@G
z)0Fekak(%0nw|>Lj4>jeOvgY6RklNNOrUu~#EP+j22*a>=EHs#2P2TD%S;}|ltcO=
z907K{48}gGa3PjV7RDc+W+e)5A`vCB0tZEYLzJr=@DgWRIi$6te2w31D3=<6zyag&
z5C|NKzhu?gB(-I#32PXA?9B9SXb{iMS*R+JwW7Z{TwYuf-A7Y(vTAakGR)x8mPE%z
zE*%jk9aSpqIPS8BK=zcdBvIjdbdm4VPcO^kqndgNWQut@Mb?(btt(XYm@YzFjt+nZ
z6k85238tgXFgr#vymZ%<EYeyaJO0D6pIwg(N&}j4Pv%HQv0M3`*3sEg2bAO_YjJDr
zJ|PMDN&i~%7sB!UTiBwD%QLYo!oW*#gPh!`_CAb`(xF@gO6sziaL;e$AjLKLAo%M9
zA;^8q&5D5gfshw~D;qy{DToV|j8TieJqoeL<h8N-`Ot_X2WVqMR$+nAXVBLe(a4>G
zxh{8<b@MGEY9eu5geuMAA9#|$6QZnHB=iL|25JF)U!CqU0Z5a*uN(Bp14+%#m1vFP
z_ow{MnRwLVr7cwCHU&C)m%qahWu`TN)L|L>jxHb!=?b_Y3#A{yutN{4JU!#`F>>$^
z<`1UBxre_O%!H=O<TP*J0+uit=rTGQo{7>nyaXZpM<?Qa==QuY>Sq7J0Owq`MmlV-
zL|VZO5-5eB1pNn!>SBaxs0S@9WA}1tRB5wrxH-awwy@x)JR@YzS!2WoWbNqvR=~E>
zfC>CFnwv*rS@ah2gDMq@+@yUOUkV8OVq{!oyfhXwLSmwSU|wD#5GP<ZziyXQtt8j1
zj0`sPUa$15{lRMA{>3tK`v^D*y++u<@|rGYiY_tkJbs2)qqM7M@KGLBHDfv8Ka~M4
zL_4(@r;ZbL-sh}r68-#TqF6u;5GO;<!*Y|w7GfltX8fI<_|5JH-C?3GAtWbk82eq<
z?2c4uW`KO{r?qeS(xP=CAmKP}--*ENR<#)Hqq7Xpm6RG~6kyXUmQN%*j%8|&&HJ_h
zK__qr_})WYc{wX0O^{ut+!30f(R{maF!qZyt|!SxY~$4kMH20h9+Q^VV{>0RNllV9
z+9DC$#iAKio?bdfFr2QbS|;6b2gD*P7_;?dEOn!DgH+iRJlLhUoH*G6=K+xNC;7}w
zR`^jKZ^Q#xi%9eapmX(jGk7Z@+2W()R&|TlmN9c{em*azAs6E<_}N~kp(8g#oKRP+
zfpN^~=BP7iCY}`J*&TF2(*Ure+$MoB(bC&-UqNXp3S4M8k;S(@fH7SF3yI(yoFGla
zq)XXfE_%AR-X`OV-mr*x^*<Yl>drR^01M!=iK?TRt17B;gERE<;lhD1Bk0}GXMD;Q
zA&?-a@Dj{Y&~$4(Oo2O^E?h2X<l(KS>=p3-tDt&Uxg4z9<W><50jPq2G8%)x$U}Z%
z98pm;O3~0e(4uA8ENXP73Fc=6OppU!7H)pofvt+IS&L#G<_{$bSJ19Lg<6EZQ_fNP
zyr@5^h^lv7`r-OpOT{V`O2!b|(jx2)%Y_}6AZDqn@_SK_&1s2j`^9Jx22FizV^-LR
zSQ1h5bZ9FKv3$?Ds6yiu6AUqhXdva;q+UnSGfqPTMhu@JaP1-$o%)&2R?JzTYe+||
z&Ueg%c<YIvCZbK)R@b<I@k0622lk=doo<8oa(o1}vA$-kxbT>c&&iByui`GwnQi!g
zp{L4X-(zD#G!An}Ajd2}LN}q_utCoZ30<mPLhn9Kx5QsDqM=gOr$b8d;T8SJ+ibUI
zc^gitVM`;gNH$@o#x{Jfy)w$i#bA+4njBrQD)UH{-!d*LCWRF8X{CZ6RbNK(EmI7?
zZn=;utTNcfU_oA(AyFt>cC*C2AcWi5zMTP6F}8a-glgfnAHq;O(c59|eQ{oSuQ*ru
zJ5+KTjG%P!KFM4jYv1D`HaHIjXmVAER0bnO9x}4W#2KeoN0yJ$i@`-Vjoe4A^t$-!
z-*`k0z|iK;=o~%W{l~`g$Z@?VrlifzW33;%0F4WbtvU~cPJg4ZFP)4{yO3X+1u6ZF
zmbi8T?rZK}+*gP9@kDDlwPx~K<jQ=su5TQQxW>gj<TB1b$UJ&Smw)iuYPfZ4kME^Y
zlGv2=;|;J-cSZ4aUDM<E{5abfr=TN^wyJfWDx(>BuSb%f?qzFSY{|hUOmNITeE-(Q
z1Ew#B5u2CCqQGByQ!cfP(reK}(=KZfR2MAf$87bK|AliN_2n6Tbq`j&Gsj<%@yb*#
zUam$VMoucsr5eU&tA=K_UWcRD#@UkCOoQ(;z;&StM)&VDVC<lh1yrTUDh{VSLy`VL
zkeBU27pQ0Na%3@~Gp`P-7*xXc6`fk#!Px1mbL+F+av$tWa|0oJVns(ylxwq(u}1vO
zu{4MUi&-|Eb*0N&i=tf$=L}Kk&n4kvI|<n@Pr1f0J0W%qc9;UQUbWdLf<iSXDNo}L
z;8tkNyS`y$XA)#UmA}_TL$oN=JdbEB>?p!3%$*IMVLgV5De4YR;2tY@`ZZ-u+gBrZ
z&&ZH#H^V#7dPo<$X!I<@+@xcb_oE(LKemz~5G`n+=;;@Z&SY9;?xW^<^^~hs+o4Es
zl8$uP^hNV@%KodAw^2)C2mIb_jmXn0nV<W8hAa<o70mlN<k<Toej~C7MmcBScOT-+
z(ay3&Evx25QsveHle3fhfUXuPjHA}1)ADoJq1U`v)BAapkp6`wG0(<)!hX*z(wWWd
zT&YXtc8Ixq+*{qnimudumX+INSC)h(ATyVt{7??4qC&)tFwvjf=~T?-YSkl;e9;iw
z1R08N9R2M(o2u-F)V7^GVeoj;OeE^WR;!&|N9nZB-3ZcGIPTuJ34Qr4H;_NCGukiY
zP$zD}VlvC9BZ2gu$Y{YxK9Z}pN;Evs81*MO=AlDT4J(0nCG|?*f!eT6O6t@4ntSX^
zRAv++-JV7Z6?8`?6`d6$CHmg6X>Scrik`d~>!7*3#rmzRs!q8=JV@FuCHnJYi&JHT
zgdy(=qnhHmshJq)a`Vk@gQHXCsEcOVg~_Yi-aJ^5Mq-iCiahBenIP$Ki!gD%A)}hM
zcOS~P>)srE0K*58`9^P}Hu}95>lU|%<DIrQI=}GxIu2TGUj5p#*RuD(fmdlUt8jwx
zUk~vz;N0iwdB|o6N{Tcppy(1wv1EN2g@ul`ovp}~U&ewDozOh{m30ncL6Lb?y#vSN
z(<uv2^w$JL))PMc8gKdB`b9QBFFiQvy-oGhN<V*6`s!D~1#7P;H`{~mg~Qr^p^Dv9
z|IO)!1+G^7i?;IDP5f`By6XRj)bRgDy!ksk-8t7Ry#@fGd@xUgk&GYSoeqeUJf|Sr
zaUhp(zr_Q8UhNTEVsHO`N^i?j|FHUUW$^^E1t`*XZZI3c3cKN3vYZ+zg9Q#Jf0`)H
z?%xDpY`=Pv4WKz#WGnnl-fxdkNp)WzI~^QMivd;^Qf%bizz%R3WV=7qclrjr;az%?
zmE3@)i_UF#{*6gqC>2+p^IYrv@Ck+?L*)0QDjKtsCgIj`Z1Lunkv5RcF&2^G!Nx*H
z%zTF5ndcefA7FW;4tjRCGsY73^E0Zypvc&T=)dNI<m^}3<3XpkVpI9^(Oo>Zk0xa7
zlcVE1bC^w)59s;v<nepBwesG6KxNAS24e}rPoaF1P}!_ti$1_(OTi;S6^&PJTDE0@
z%22vnYNv}#i1@EVkUWWOoANh7?>)o;TE@<l-w89O<m1k#zphw&#9x!iKZ=0D%&c8(
zTwCTJrMn9>bHCe2SbbuE^G`jzf85k01qgup@j9?X6W=4==Xlzq%}9ya5y?-RNYs@r
zrjRVq>gD5w@G8~yK(4e5I=Z{8z~Av@lnVZpunn$XKV&R+S?sX^+U;(?jIB-UbWct)
zRv9VM)v*7OJ_r*70!qQGxK@0sec7EA!2f3et}(zp?rT3_aha$Y@WT5IL(#T?w|WPk
zEq%tmSG|~i7oS~=1Kd5ypKveCVvc>jF%b?Z$@4Q6L!Q9?0tQpg9Oa^ZjskX5KRlfG
zbvjV7;T5rq^)u9cN`Jkv`m*a|RSw?f4_+wfvz|;hP*9-K94q>imqGie3atKmZ2nO9
zD&^!h__mC`0o>f~K(V&_K7atS3|M~OH5DGj$-jKgWY+h=;M1BRo|o<l?%JYPcRM@&
zY1{oHMz0rg$mo>$ibf3&z2bm|uHSpJc5%w?@6mwp1&7oxg#BKZb^*<jZ*Of>_`F>J
zI0yP9mdsXTDp1yMLBy)43UlolZnY5bU&Qw$6g<$O(lLW?S3i6*)+9X#s_lfRasgpH
zo}jvO#29nlG`n<&zbxldiRW{g-BbR5|5yEGcr8!>E8`<Qs|4(9(oPSsZfU}<XgaH+
z^cmI+)=U6LSI-MTH3PtCvmZPQQV)5?d47S*X_$Wd57x7XqI@G7|6ScXjtzJw@_9yL
z{plg2=HF|dzAU(lPk8~WR(x*@B&u)MU&CKH%41sC5|dJCGv(bJ@T&dvHktDxa@|*f
zCj)M-n9?c!3;TUA^?ir3eDtA*jQ^tr`TN^qvJSx$&<jWpp-MR-C^q!=cP{bg*wYVn
zT64~I;(d3)YvCuOvI7k0ZsQEWapWZDKhFSKh_iY=zoyW?9(C1K6@UR^q4D6&GLc}t
z6@-ArCaSGj#0H~n4@81qbhvDImKx(<85`f`DcjgPs{fo1IJP}Y{RbaY%ka-r&iu@j
z6aIMNaQq|t_fP-%_y73d|5qW;YweUfH&yRuYov-ET?A4>iw7^bDjg(8DdzJtd^@7)
zf0D!drFb^3xlI7w+|3O>t=`?q)xS^tuYdEnz}=jE`fOI?LFjOIH~zPiQ);vN>lV`g
zwf_hc;D2jru<$_&AfXNbVsH$wyqy}HxC3lloNTA+&^X`@+Yfryp`~>tq9y!#>bn(g
z0yw?rGJrwm4HQ9lA}6ab6;c4csH%DFy7Yq`4bZ%Y2ZbXBpM3$3@b3Cp<y{~KY4_$U
zS#;eP7e57v>38p_+tOX5>cSdl528H#3)TK}<d$PwS6yucQCDVx*5I}gKpvOD>X!lk
z>GYrvkF4T}cVLa@J!kAI6b!`;118#E*fhxb&5L4|)HDN62lNrp^ZarJ6Q_mKER%X)
z8$drVe2N{p`&i#57vHAmfwL3n2K>F;-mh+}iFg__Ug^-kw;`@U8Yr%*BLx<X{~Qtn
zF__>wL+Pu5J|_>qREm%!8b1GC0T{!Jz8Vw?B?=>1Mq?D2>Zt4cm*KC!M}b8wdJs$v
zD!_u84+c9TD%ryopSl3zb)>&f+d+cgDD;6X!T{ctiRa^+<$ELPMHd#aE}CBeZ#AX+
zMb_WDB7Q}<3m$%bCe#=jkb}h|om{3t)9JX;36%O`Mq}aJip_#!r$9;?DMcL{*7y5;
zQJI=P_|*ZRNEiSo8I#=$tU~p&E0N^z{mNOrrP2dmu=weJP4<7O2zHHr8Uy>-Xwi$z
z|EhoT$ndAjM$Seq;<mEShU=%!dc_m3ltWp{3KQ&^14Ld`fFIw%3nRvWEISXwTfEA`
zxOwx3D63OW<LJdUVkV{roquUd27)~^av$cFaa4MP&8i<<_BgP}gjWDRojj3YL*aZD
zywT49pyij3-2cE5L_(BxiAI<0!<UtJ;(W)88Gh-l5%h7BfMw46Xpq>g3+$0L)$@sW
z0TC52+?MkPnnS717bS>zagygJJNdx>m!}pCtE$({o4FR#_-p<&iU-DT)dFKy{O;BX
z*VTYOig@+(fp$%CN#m93kHE}Ccv#*uHW700XjvxtN`8W<>=Y{|vc>y@NC0}|{Yd@D
zIo-_z>El_vo54X9kUL1#i%Bno1aVE_o;t`{A-LZkzi^Rs4Qt=!OGpGw9g|hJui8{w
zG^@!f)9a}8(;eW7X*Ef8L_YoPK(VswbCiYP5*O@ba0_hu^L2GV!F8>(uNVMAVh8J>
zPU%UO&-&<J%kqnAG+L1`qtCA{ANk@8R7Sm1m%3<|caD6gQ-C0RzI5AnaCCE(r~iMs
z0EG|oPnZ=YPW7zQM272Uf*BX;o->aUFS!`@o=ufnwAriF;b{&pcURsQFKnhQCrE?G
zJm>ov@yT-jN!rNRIq~1*r`TXc@YqS6#3*#k0I-u6=#y*;@4o4=0f7Boqpuq=K<}i3
z%Y4OZ1k6*@@XiZ4U~nN#dL{lPlpenl+y)9Wrp!=ibO{vp2EsCU4$!pIXaVh@DySGf
zB)bB5Cgp$_Y{3bjr^yxCieQ^8HmR=wBaVCopqyry-OZRKNdw=_mFA>yUIA{Wbt$v_
z)l8yTD}dSb5NPbyst(>8T&4$b_@z{gdNVPE3lD((B?$xKfM4z9h<<_QFUDZTqum?n
zmA?-peRpI}?iW9O+VNmx{jy_j=8LIhnUm?444d<bY9mD7s=@Yb^SeEE8LVra2QuDl
z-t**=YcU6nts5j&X`t%q2b=P71+dw$%1o{eM_(h!z`M3C1A_{6ympP+%3?~HO$N*q
zv^OVfcg|YU0bC+>yn+W0Uma%cXjOa#pzC7owSbh<IH8JA1k9VwfktWBqctE*CYB-X
zfV*w7s}d~3)@R1}S-YBh-c|E`yr-@qmjhh=P4S1Hj|})ufzNG^=KTmR-v&^X?hOEU
z*_2fo;72#0rNW%xyOTO)DcN@`8g%hDm_2{TR`WV3pMn8T1~dB->D(&NzDt0jVE{O@
zq>_X1da2FbfXztYj+_S`F4^der*7%alyty1riz~cZC67J9*(^d<>AT!+=N%IsKc)u
zRxXWqJ5&B!6GL_AkX@Wzao+Jp^-c8F(W39>|7_QhU_$?%J?jWSg#)hB0qA}PyP{YG
zS*R4(Hu*QRP>w`ZLgK6KTJw1K3~IOp!BqnBz&$`cfBh;CuVN$x0|nG`W9OD@dUSrE
zT(CRsyChFony(*3Xa&0uUG6MS26*EDcuUfU^xxY>#iPcj0~(^)q69Q|*<w@YZ4wLL
zlp6bNwb+27twYq52_uNn!Yeg)kn{s!2_9gpqP4M~HD)|rE7)zyVSP{>>77q5E15Vr
zPcq1x{>d?;HQHO4jQROv++j9_!8%2LX$Dj}vLWn8MElh>?=^OVXQfIsp-t6!nU{Z2
zUh)I34Y?nx#%^dN39z36aYz?j;P^)0(wgF5Y7sDq!rL?7?K6uAD8u~3*T*!q&MfA#
zia~ASro%=ry1ga5g)-WVRY&o%lg+&v6&<mR^34HG(Q2?h_Va_?b{BX$+FaSf+H(L4
zN!ABI$LMlf9JYvLDS7jnj3|UVXc5p3BuM*|U}>l6d%AHh*N)NE-QiQ0XpKG0q7w1L
zHJ1#VHwDhPrn+8TSo=|wf|H5ehsrWCryFeB(pjsZyqGf-Q#dNjPftm^e8^%dh05PC
zlB<OrRmeXHRMW$kbSb3wWX^O`fF`2C_Y(^T$)_=}Xvl8Wpc#%kl5X2C#q74whAsYG
zOleDks=^l1XZ5jqK~36gw_TwbxcC@R5<*Ea64$$L&0bNU48r&Vf95=()a1+;Tikm|
zA(J$fFBRB|A6B%u!HEulUE(fy;l663-}NrS=2b0m@7{k*d~gbXJ^_T0%b<_=E=$0E
z#+JjTy5*@Q_uHkP2oZybr-IS<y&lvcSOpKs&AoMRR8*OD1m1@7{WZ#5w{6ge&Fid5
zi;Z0;Ev*b)%5C4-nj1Jh(4^@#cz>U64u0x^m#Q*2Vlhzfqct!-)&QbllazXw#X-;_
z)R5e6J!Rd4xpn(SJngA_wZsS)ryyFxkE)mfhh0z3I>TJXnFcPDa+Nt+dS91j)RVlu
z<eQ92JW@eiPu%?cdV=_-7Kzpv-VCN6h<cMcVUg%R@+7&0$Gdm%5~)DpsY|=BSchS$
z_{s(gKLhjHyI`%f=XrT~^8n~;*UNT#Jnzj*vNM%5?u)=IZiPHYDr(6#iouUCFoaqL
zaAz5+=EHuj!dF0`Sh8ft*7X;Yuz0YAAEOH9crRd1{QvYwMT0SnU$Hc9DLdEe$he8;
zstUoHs;iG(EkC|YZknR$jllX4br4T@C!SF}UUzJ8ib?fc*cabE2{_(J2Cs=js_*vK
z|LGiTGZ##}mGtRQf7sa&O!#Ffcc&c&X7;KF;i?KK2^+7YzE>pHzbW-F9{zu1K#j;d
z`^S+;0=|P;;#?Qs8{~3uMZe`o$-%k%Zq3P^$V*vY-A#*c!ze)D82R}|TFncL4i#FO
zQ{fFkY>Ft!y-G(}moM8L@B8s{+0H%blRt)erLBm5-I~J_7n?)EgWS!!(`RAX6df}p
z+8e1aK=sKZDT^!F3tLpe2(;=!E+Ts*+B7Z8Oeva(*E}OV&mZus7(+iqA}D6Xy=f@m
z*`u2yaj;sv#nnN9>41h<w~8~=q1!jagT-6C7kSBPoS6JVMF2!yI${eiP3l`kl4!}!
zdah+y&VHWlxH$j>iV5jJG$YA=aWw$#(#iL!Yk1Cn50tWtf<bhVKYZ~L(k&{^->yrj
zZ82)+C(_=cvz`%g`<q~C_F03(9!RnEh%6q%aczC<eN)gKJrYy_UNf2N=6_l$Qq`hI
znlHd~^X(Fp4YXh5)5l)G9xJbn1&yqKX7G}($3)EMP2Co5<om3+%`ec${Z-87L;*8}
z4_8o^nhATtInr*)zGHhAl;rP$LUCHpQkJTO8MB$gw9=@X#6Yn{ouv#}hCoroL-AQJ
z^fQaGdJ)qal0bOYdjSRscy)XGW>Ja4*%mjE0E!1LD!!Ri?hyLAjfI`E#SNoYF#yc_
znR4&!W~<%}tUT%8$=<Q+K}EZ6v~ZhlM3OT<xdYnbM+_3bH+JvbjFRGiGGod*ZMY6}
za>Dt03!h2$$y%c#p?3k9Yu%^oQWjsJvjt{pEiOkEC=AYxy(lh9;;ulZ<j(PRIFo#&
zfV%AqoT$g2>0PiH|F(l8RO4BJ3{!JXvtt_?8#=qt<<=VZhs7Ez{A?PnU5yvq<yNeg
za*jya5PF*-d|ji_V(>xdr|>J-TB=xCoahJltn;;BISwQ^DsM^j^>vA2=Mx3)MQ`5L
zYf~y)U+5y+yd&PIUqC*Y06tl{;ulbRKuN0J2d0>@3u>0#p{l!kUk}tB{Gw3&XJp8u
zrS$LC=@g7!_i)?cy#{;#>FEF9x5_|PWoY=^$*{TY4wMQhNfVHwA{Wn+MFb1pYEsiu
zg$NQtB@ScrN`r{|SNg?Je5lvkb<K9IbhGzsRHl$~Z|d;8Aw5HQf61W*Z20wL@&V`R
zp#_U1Jk@4Aw<T;z_B7thp~i*=S>1-nwGPpHa%WSWE@R{CanJ7eHr8GNSuDKlc{8Ej
z4a~T*zm+4KB8ezMvJIH4$F$h>zjPT?a#(HyzH3>=3j|sj791l}?UaG--NFjzzvno#
zc?g(iu&X2QoovI(TRRT~SLWATTWP$d=L=G^k<iV~%UUT#EES!I{a#S0NcaW&8?!`q
zi#RhYi0wJ?sw%Ff#`0VuDRz2tqgWXG79J=|v}?PkG<BrO2)Ij{i+)R)Aq&C-p_5#3
zmy;n*W#&=v(^}9Jxp4NE?WkY(`X$QqVR-$#zq)P8>xAsE)y`s|B=bc+fBoU};G_RV
zA{fX)KjS7_z($~>v3N3YFYdwVwPvVXiE@y<PQe`%x3Z8ZQ34S(OBwch=`M#^9``IY
zf<NHta}>%~ZZ={E_!X3!Gsnvp%mhGk{BQB?`7ZkUF27oI$?7p?Jm|4b^E;n-0Xj@;
z4aa-nvevFf?Jjc(2Yav_-~eP4&ujtB5F53OThnQ(yYG5^Hsndr2)=(MU5XrKg;#=7
z^>{oVUt+5`_Tn2vCTI9(#kI)Q(ep#BAL5S!HqzMP9!Lp2jXTA*+cFWq+q+40bf|fu
zqwfuPOD)3A;-kSpipV4AEI4PW;31QVkI6NY;oMuTEn5gI#}v?`GMV{J2ar6;Cv5e9
zd8uy^ugp9nPl9dW0h6QV7jUV)-&D(O8QL;bY3Eaa#4gSrty-99989^qz^&YDalr#C
zFj%q#kWc>98rErUS%qgYUChnHG;U+|ZT>Iz-ZQMJZfn~{@fIw!TTzrIDk>miLpn%N
z1XPMZq(($UI!JE;l_n}tiYOhG8c67&M?r`NDbj)jLKA{O5+H;SLg1ab_p^2H@Beqa
z?~lhH9(p8M$y#f!G3OlP8t0Yw2BvX&C0C1AJEi?^>a=es0iCV0$oq-+B$pW-K-%70
z9hW<J<*3tH^2_seQrP3?o8lDHk9~*6`B6j*K*R5a7ov>&heH^dR_Y3Hd(Ri2o7<Wr
zP2#WNm_r<G&{vnjAbFv0AC~O_MdD%2?u0^Kp?WEhYV!aN2bsz6Z$~D<mcgrQJDtPL
zsC4g9BFe443YV#H(=!iIbbhz2kto?E)BQ@U`pQ5mmHuj7y&}n+b>^e#F750uo9jJ-
zujW>YkYhee?8nzOfh<WXd#o93>k9zjP=&+ia{-{OYn&BK(T1_gbn?ZAKfjpm$mWc|
z{I$&Wl`ld}mS+=RJ&8ICfgVZ%t9#^1_U=RO|C2hHi{D=Vt!#fpkkqKcU0xF9YVnj|
zKb_}IoO_h(yZtRapsdHzGEMpLra&Qs$MzQV0BFYV_eoI6SEe5L{*>m)T#DoU#!<HB
zJ$OD0l7FuypK7XBrx)2--~F1`*V-DJ@|kwX#bclFi&MDpEieI0&)&`OiGTMXBMHW-
zdA|~WCAzICw>K!ZQ{{joNNjcsk??k*9;)P(KHtH;tLWO8i<Fe!l**I7d@X99H6bt$
z<}1;KY-NGdb)WwZem+pR|7&Nt$cIQMC{rR5_6(&LrJp{cy-+?>_D1-_HC_D@yzu%9
zyCA_O_!BO-yI@MYp)cm6XAL9;zBPaESgD0wt#=0NiRdl9p?r^!xu;m#*yGHG(=R2&
zE>#`RVuk+?bm7*s?e*6Te}SBEM^OR<P&C5Mc$<pI#B1~30(mCbf&Ahtzog#m8#VBg
zb`pZeYmI-N2U0b;J&L?P+pZZzo!*hdfwg2qSfEZ|{QcmLGrgk6R`inZU$!$=U(y=}
zbg;g^jZVKBL+p<}MA|(3N~-kHB>cTXf<$I}<J#TziCC(0q2x`+jM0X`?$Dt=W39}8
z;9VfC0=eG#!o$1e2bisTK^EFlbv;)~YInx${dI3@Pj0aBa~f{SeFZFTH87CpGgsA5
zT4!n|C1k-sD^f!q^SSd5moD#<eLH`BaojqtsQ!w+kj;7ExAewnRL{}+>1A+FpufVF
zIE}ZZ6*yUDXk>WfY|#Etg~wW<7eY_r^+#9U2B<`cV+%o}_k6_BwxWhynHtmPLB|qh
zgFDcKg>jAcjwue&bIceV<l!8E3~&%Ny_}TDNykTEq&|z&i&%aN$}ohLR)MijlL+qk
zf2CEYOnhOtULE3!dI=KRO3!9^`94(0|Gj+$I9I&kv_boUOfrf0bJ`qt6mQfDFf>B$
zzj8?D0MJ9;Z?E1)J=Wz*QNZ(quIoJv!FT%>z^=Ing0fc`ZafumWbsJ+k?WjnI2kDK
ztjys7?>0E<pucJW#wEvI=FycjIUj+IwPU|97zEAgd+DwOw>y}LEYfwiD7UC3!-Vrg
zF?)s8E44g8DxdG~aQhwK4@{)TIal1>Pslfp>;LdZA*)+LowZPDwU<L5pfP{FdR)Es
zWR0VZ>QbFAIn8y<ox4R%rlWkDbHvnx{h#gY`pt~;I5K9Sa5-Pl0AC+c!>rFC7Q*zb
zh|bj0lqL?!T=P~II~<fp^6Gs;-eKaX%I9{JqZ2QQpDc}usuyaTQfz@ezfh5}D83A=
zgFfi;t9-aenuJM`u=_HRL4Zmn|7uHZ`%LWVtb=3!DijI5wFYssO=!|c(ezZ;1(apY
zhVSQ{M|pSvm-mXFUIHf%`RvGtI%%^opg_3+EXUjvZtLB9`anOfSub;G1Egv40iVLT
zJbGPl{OR(sc=3tD6EVD3^=Qi%KZ8V<%gvL|d!F1GYX}6Vpinb(*J?=na)IYN-i~A6
zBtvF%Ic@$w!S*W)Xi`qe*U!FFam}2)_L-&$^198}-<<s<`9{xr*MfjvQYBmi>;joh
zX%*K6r8Qjp3&kdyKJ66kuLph@{%q63rf+AxcdR$94$JAM9~-O?kh(bL-OA@OU;*j8
z8(40CwD*Uo0yzFc)Mtryl{r1{W1o+`mIMh1m6j}xmu`nHY(M8s1{;)$APxigAH)JR
zP+6n|bQoIsoeWpGbTm(;3=R^wm$HSs0zaQ=SV)Wxj`C{e9<=rC<T&)?0ea(k21wF2
zTY2*z)lhXDXFYB{C%LetY-9%z9Y2b;os53S5+>XA1wxpLD~Gma)(CZcRc|>2c#*SP
zpbB;(TM=#t@cUzVoK(lNg`r0<2T1#;Kt8M6@jncHCwuko-@86>MxH-v`@4##`%kwB
zY{h*Jvn21eMr!Ys$+{&f6#PL`^5O%NxiL({Fz^Mah}7BPl;LnQlrtOGg9Unla%<|P
zq9oWAJxTv#_k87@za_S><)?efKHaBhaP-|V2`QYuC=lix{U8jI5)qkwa>v}IW^O4=
z3+W0Da0c_~m&cZQgz^mTNr&q^(D%lwaGiU0&14QZr*m>ar%j^y^gcK}x%T2cAFBh%
zc3+MmWaQOCTR<}HRc4GbPx>)w4sy3KwH&p0N_Do3QHH62_v<a3<gHzJ8@H}Lg!i_5
z2iswP-s8yaW7qqr51wf}Z=wKJlA9+L)S^1KF9M&EH{B)$(1loD45x$^D&sVDZI51H
z)CBOBFt*~t{G5D7a~@+a>dq;%7V7xVdzUGIM1Oi+Y1ux0vkxCRWvNQRE{W?l&oz2;
zrmnYbO7xs?%+tt78A1sa{9rNnstJJlA>l3{gLaG^GDSXsxSRd@!Z)tAo%Cp^^;tl>
zK_vA|MWTCo+X0nKb)nVgPG4S11>1wr+0c*K`bpisBTz4({af|Qo=1}LF7tmf_4my=
zPutQe!K)x*la|d?AAJ`W`SHd@>Fs<)ozJrW;?!{u;DWCz$GPd~>0f`h0J_oB-k%VX
z7d#~B3b2dF4Hc(nE>Q-G*P(GM&(=>p`QpQ-<DJV7e~-ElEaV!O+_*aI*2keB9-jso
zi`%Nc8t?WNNt*7EdfqH3Wf&fJ@tA(Xx5xWh1U>rDcjugNz52*cmT``8x8l~%Q9$NU
z9)4xQ_JjY&aCjM~s7)&L(z{Dxx;}oe;P64pS>W#2y=?8v&hYV5yFL$3{`k4z)Nfq;
zu+U@cPWRDpWu1#cQ*j;r20N5OX8`;xasH@I1}x^5IaBisF<y6{^Ro*la1o22c&yg)
zwx*pMZzY_M8v-HH_yD!_)6+Qr&%UeU*R1UQ&gYOhLVm)N{Y!Db76>cwd7miRc#>&M
zh&S)YZEhsH00TKx?cFqIVla*PjUjAxMMTS#dT;a8)ip=R%=3QQmC%D8&u7^{)H;1?
zwf4k%IN)LZtdH}<`oy1~IMQxA`GDTCr@NrEW<<7=Snk*rq7$><J?{NqH+iSuHU6$_
ze0hGIQ@Urm6<s{F#H}vl{&dIj-3_+m50Lv=233-e`5cctE)zL-8}cgmR29D8QaaxB
z6|W<&G4I8;3+{*kaZ;K-JNe|C(D&U-MU60_qRd)n4!z}{nhS@ytACsZvm4LSi@TDn
zG4sZ;;!Oz1<S5~qZub!{Xvk2mC?9`iC~k^Ye{#((?wFz=+Gl6{dTv-r+Y&A0(O(C?
z)Hn;2cnHW-I;#x)lsyh~i=xbtja|yV8ar0o*ZEHm-jFQwU7$^e9}QOnT{IpRa|Phc
z%(sxza{PxJIndQ&E60BYl@I=RcGOoX3#K0x4hjCLXd0*vQFX34b!PF<T|=hgE1gW9
z?R-Kbre4*wh$4lkazp2xefW1Dg@oW6=^@O(yb7VVF79pFab|PzH9=bKW>vaXHqUjQ
zFPp~HgMGdA!SaLUsr`z=feTN8@|>l&pxD-Qaa8~*Gv-??<n-Qlp=gOJIG8)!EFSJ4
zFl9=}5+k>7epP%meQfUT7UG16{_fzy{`=KU7owPJ5|j0XJcI+7i1^j_@Z=&FB91}1
zJN6#4H2U|Lz!k!0(!F!RV8v4KppUx!U)uuk_bVCG%c%$S6_?P7FKvIN#eG9ujZ=*i
z7kUdx8Zxs<|2`JC<Me9NrB{eXg)7=o`05wZa|P~tHwG=%{(kkkt$&1&vikXM$kH;S
z<JNQV>a2~Pn=s3opm`wlzFuW4x4B0$HG9e4?r3QTA*#O0YQaWXO;`(Yaj<@2y81`+
zMreN6^S17((9Zw-NjN}LG|$bwHGI>^u5UQ?^-E2tp0!qA#lah7O=VD0s(PJC>>tc8
z8vYYHT(M6Y{!9Y@{OkWgh~$UODwn=|gANWn^2-VqGr{?xn_8iaZTBG-sECcxf^XMD
zq<0<vV6rdd6)`=h_ln8*W8tQEak%RDg>jL>ubw^L{7Y0eKwHMp^w)H6lA!MP9lc2g
z*WSMM?ILcG?3@R^&wsmqKk;qUGF!d-<yRHf0+{mEXi<$UhRya!r5&<8-<=Kf%m`X%
z?^(59=MK8@ObffrY_ztv9(2>%Y-9i{)ku8%*f#c7%{(peGRLgqqZ`jQ)eyVAod-|f
z&beC-AP!ffBmBl)!nsfuo6MB_q8NVhVz4rc&h|<%%+uGxPii%<PrL)>sjiFTpAMhB
za~b~6Vfk7k^l4)g96LvyT)|C#9?rpo*vBsGXTMc+v*b<Vq&(+3Urz;aFAndIfO&u#
zp_Cq@8|}ZV*>O5iiy9G^dDfxjFbjO}BSL>eZTRQcqygZ%`TI~)(1q_OH<CGh3xC5h
z&pX8fPSn*D=}7$XSR#K1ShE#^Rq#!JfBy-RO`R>pCz4V_zH#G52!P=cRv}Pmceg$`
zeaNq|ZLtE95}VnBqj4Mma}DO9nyDRjW#v4N@F!#SHuYmcKafV1EQj>I>nT^`2||GC
znkL}iR0Gk>9OxWEX92amzjfNtn#a(l5dQ~b&0uX9mHiBPKVF^)Ech1Z*3@z&{nSCo
z1JWZKPE$bN^FtR}LQiA<akE7M3+>sy2=6yq5is8Fz+sn@0AFyG1Bc^HSmWX0LZxIo
zBKI@2GS(e(K&{9SRJO)ixpnM$eC?E<!{>A0Vk+mOmiha#fsv|zu`9S_mw_KzPYUT|
zR?yuCW1C>|ng@JIUIERDm494v8aJhxVOfbvD~GnYpFGKZpP*_8@RRRf%iA2-UI@l)
zw0CA1??(h(@+QcJ?DGJd`(e<@t_T!2Jy)i{>H~2YxGV-WYYI<+2C7Y_2xmEddr$bM
z$A9HkjAE@CgM3g~9Pg9*84Q6*4FVNcet800@!l6f4R8%O4TDv#1I3F+j&nxEI33O<
zE_!cNc}w?mRw(6=tTKy1l^hhb$Isp18WP;71pdC#ew~Y28AM<?;_B(izvVqFN*;8K
zqwHpY<srsH!*46>C+M5z;=07Y#r_t-<9BBhQ2gh>+K3lr8vM^Gdx-(N%p8aQ9PKAM
zdm4eP%msh|H;(Oygh=!Jq`X-IS|QiD{-WHuMg?7utuQ~ub)Zdq52~;+*(u;h4wdy@
z<cpxDUvR#;rZyfgEEiNJ#QE{WNZ{xGY3*tF)|03wN4bLJ*$WSYDA~~P;JsV!3muN&
zEjg?W24-!mjPv$Lr31iI*t?vbNjS*;5n<up*POfgy<cnJRQDB_=5{Ww#&ete|Jd&Y
z0kq#g4-MyI;2CK9_zk@L`_F&*s_!t*`DYyc>($GVznzf4KoAz5{rw>>F2VnNqsf)O
z{@4$5asAgJ%}xK)tNp)S)-C>Te%+CxkEh39oGfB$&QCesLoNIKxhiqIJxe>2Wjn;K
zoit1wep!#chpR9jutS9=#hyk)LHF_e3O|4I&&8+)Z;wgpn9j2`El$?GmZ_4#|0sld
zE%DvM=*HxH!@gxz2%NNsE~ObLk{$iWZH;TzXvb{OlWRJFrc)C=x4My7VVIO?YdVcZ
zn!6CW4R`ySxwSD=sZgY9H==fWmtl>H)z`<d<{`^lMU4-UiD9`csqn-kS!v<>4m+Rx
zTMMwdm7lozKDo0AA`iDcBOFrp+d7DgO9NySUnr0WXJ7T2NlJVeHfuUNaV;-2Q>xTf
zhEFW#9$kHUMq@mGzEo;0WJkYM{&9%Oc~8l_(5#%vzJ1B*OnsNO5ebT#X`;c8go0Ct
z>Wdy4zj!5<gQBkexfp&fqX!@C3^A~DwX}4dYi0T=XB+ahrVv*5y0|1&g}v<+Hgl+a
zk}O(NUGcCeb?}gJp4qc1LtGj})+Rf4yJc$LKw_F`sDtgFBM!!Zr`q^|g}o^|T{AC+
z-AuH$8$BpIc!u=)q3#LU^fGi}imye`>iy~0ou*D3&AoBrIv#=W?S62LuxSLwlCiiP
zI*~V-h6-$aKN$WKT30GZ^DWoGoJ>r`9%Q`j7b{=~sU0>dAo%$Y1&s`L#{zQp1#<h3
zRckSQXU9SfOR?XMh+Ji`Ynf$2(o$y>++lBaCnZoCTJIGlhMD@?h!vEaazY$96}l0N
zlZTmEX%(HN9GQ;i!^!4RqT3B_T3Pd3%v;sv(S3_5B%*8iBkc}R*;P>r5t96v=IBK$
z>E|-f<%|$hoxL?vQLe0-*L20HuN8{uUD@QBJ1rR>6uJ%S=xb6xDejV1oyr}hEQ4ZH
zb*I7bMES6$C{`4yEg<>$&ovu%;PZ3$dux+?@bLN~*IV<#)Dzh<DIfgW_PD+c&E9R4
zWoD*gR`*n2E_g%MW$Bh#?&0Hsbqx;<{Ewj_o=J8o^Gb#(?S~8xYJLDJ(g2M0h(j>)
zX4?&hsl(5%-1z#&pXX9Y8YLwau1z=5XCFL{KNe`7=k(U_nZ&L7dei7fjus+;If)KQ
zDJAwFdcTboEiBF0G0zm4S;9Vw2)9cd;ma;@pAO4Y7|CDmb+*=JpLy(J49WX2c|xtQ
z_A3&%4ma(s(o1o=V4g-Zb|Pvc*{y$NITtxBY{Lx*n7aI^lvN0}HLx^iuj!_|7}hng
zww!*eRb1tlpZGXC>>2`^62HvWFH#QBl77-IC$A)9wNYz*Kr64RXldH_&r==}2gViD
zW)H3TmRKcP_SlJ2R@H{ggA|iz0uAHZ)1r`5;+1(1(-%rUZwqmrsFN${kQUazY3Y-V
zk`v#W5yTbLH6~joD<~B$&TbX^QAyT_4mDAO1I5Mj?HH@Cu+&qc=dQRk56@}%@RGUK
zprqo9<a+-H&QK4F>}>DkUL|PJ$m5e1fl~yF9}AbK1sV*kw!RPG$fqq}C<U3VZr^@&
zdaB`a@Bld^L6&8EYFhMo>_Eza>EuF(b${1p+Iw7DDq2(QWvSIJipmdnN#Rv?y{zM^
z$y_(d_64Op*?dg-R><OAMGbmi+MR}Bm_};NDYe=2d5!@V6S*BJM4E~)e6zBmoCU#_
zxt3SmORMs`Pv5*|1TL|K18Pt54b59t?8{CDQc-ghUX$C3&>!rB#T)(b@Ykh$m)7qZ
z{26SG_Ch&R{%7_K^f6_&^5S*LDGIWg;ksYYmB9=do0Y;|DOOS0^ir{UXi{%}p7@S7
zX3vR6&u{iPN#+HMs~++eW<|EIEaf4Vg-P-3yrwPv=*{#~R!kjI>5zDqv8LTuA^a)1
z8N{P-qi4O#t}@Vqkw~H5a~Sj7Dl-G?;4AOxo?j29)a76*tiKLYLGOFFL9}Wfcoe@5
z$P`J+@*U1yc_~>~J8LRj6V@Qh1GB1oZSK->z9_HcgTn{&FUgdkn8S&W(>z&`70bn`
zl78M->RV}Fsb&-7TNX~^CPkAqb57vNmXqO6-px)<NPG7)F1rx67U0@Ef5EJI6fTDD
zLfztRpBGq5=#}T+g=K7<@SLE;)6RNHPxCytVB16>a5JG0l)K8UyehN0)3?l&Ob%DP
zO*|G+xbDM)m`)Ht^!68i#@YbU-|vfh1bEHIeE+^a?t!Y#?{wQ}&J=u%)D=u~!VU0Q
z)VKKzOj4z9Sy-zY8L*F7j2sS|cyD-uQh+;vjh%BUwYSy?v%D2-?_vrY7nxpV759F(
ziM_N~R{+aj4u@LS`B;8Q+~c@vNr^N{@rbBTOg&)Ox#^y3*RdSGyA^#aU~Rzc9O^@G
zUInWe*}HEG;YT-<ZreFvta?>-mL=QBbT)j(-guRzKP%B-w7~N`=|r}aMnr6H1WYfb
z{Rht6bTokaihm>FA^k}*fgvgj*8<ORSt4P}X8H<TPOj8)^nR#Z#FrF9eeyfp%>r4*
z&~$NQ5bEc~h*U`3mFRL-k@rWmML<yV!&eUl!gTXaBF%?a%pTO)uhcCBzUqBNkVO-)
z7PgAUd9fH#9a`!WAA_!rlT8)|7ze}rP3^RR7q~r=x1>u1Fz2JjJxTV;E3OtN7RW6D
z)7cwEvc_AsKQh!TWL6+P3)+SO%);KMu?A|*M$reUmg}>OUERNLLeDYr4{4VbIx2cL
z8(S4H*&z-Ox0*-R={WN6cDzIp(%F7wImn4mH~FHXoD$7=!12Dz7tf@+KpC`qQN=cY
z*#xz!ddom^d16N5b({yC-^oTSx8(G+^Ty52zzl@hR7sDkdWWz@S|}>bOZA5J`g7cq
zODVGCK|Th$2+*N>1(Q!|er_GRMdOCvvbGkMt*kuVH&=jyOeerk-T2$dVU+6scJa8F
zmZ<90A4c7UVN<(YT{ht7w_Lh~`<Fk%^R^mJf4fmnwn@Gy|JqaeW+#mTnenT?jmker
zwV2M%Hm|trIg}|W7&rfh_2{u}>mA{MAdGBlyE)vy`!CnvMYB9<Nbf=2^tIQAFpv=1
zq26K(+}wOJfpT3q#^Zg-$niRQcq!~yvU)&uny0eqjSE}vaPcH_EBfQ!<zkZod-POn
z@^h`)^~<03;UCcDsg@le%F_K$qs;rhX%%h21!R>-lpe7oX#BzCv3mt&_93bB=s(L(
zMc$t8=!~EPEIG`tEF7F@!TjD(x?~}8&gw_xciiEtRn23b>81^`m|ymWhhw6v+e6J?
zkjMMQN9>}>H;IUY2z45KpoYj#_EpL2X6ydyJ=r=FjJ8CH?jJ6J$W88Zn!Z2Hf}1#u
zJd%n$b2{{99?u!G;gP}*xABK-3UaT6)NBM>Z2H^tjvz?(NigTP%iQ{i^OPKuw#-f@
z+M2=&<LyHfmErd)$Q8{Oygr0C>Vuh%8Y_?b-`=BfQo6H9w$jU@uFB9L7wTWKi6bR<
zHfzf&L7r?f1qz**V$xT<rp~kDAGWEckVZ@WoD?q`U#0#S9&WCd+bsKPcp}rp<D3>b
z)v&<+{b^`srK?rl$%`o522XMW>B7J*k@CumONDccYVlnguU-qg*3E+{+@wi!qRoUN
z0lSu$L@f5ZtTlb$CfJo`?<I{Z&LUU_$rtyU75U`j;I_yOoRgt`f+g&m#K1&Pi}>%T
zGpe^Ia3vEA_jemFOD~R-x6Er?k;w=fUr~sxz^J*^8Pq0rWDyr`Zk@dMFls<4tFZT*
zmW<EzLu*RcCtX2X5mkd<Z<M0Xs#-0+OtVz5M8Yl)>6<BCo=%}z++L}Dm`+9E?t7Ve
z4%HNYYr-g21@y|h^aM#C3*43Kw>naaJM4T-g^H<>)!dVwZ&ZLNTNJWrrz}5wDc1G=
z!{kh?Tqgrj6PX?UzSl7Sc=9{^j-Q%Jq@K#H5_jA$v(}IPZ`NERkpp{DF5Ywtmsxr2
z#n!wvSkXAFtd){@#kfjB&2wt$XY%W`<UIL-y%FOx17*XsnQp%H5?qfIPRVGRL^a6^
zcH-R%Z?bRRp^}#pZ+(C4T}(=cxrD0T;ksKQX>$E;3MsFzTMSpcQ;h7kZ;mj$A)7E_
zU-u~~ImAATnUpv)Jy2d>-{=8DF!Ve(*=AE0omyATV2cMF?3jyXdiqBH?8yFgxygb#
z@2U6r<MQ06Z52o9E=5%pcGCcKgEE6Lj1B0z17TySQ=*Ej!c#K*X7xY64&Gg;;+Y7y
zV#-i0EyW5;@;>~0MU7s(<YHwv3MaIw`DMZ~6AiGZL^W@=c@Xn(En9AU6*h$Dcs|R)
z2tVaiT)c{5dQ&^vXc({jW6*GJx_8+*Z>gaQaXGbDdrH?Lz)Z%V<9_2tds<TdaRYPD
zj3QfJScBH6TNXxl`hHQc%e*H+5-UAdI<~Hyx$sWD!;=l_C}*H14vWVv8Xws-qSEjo
z&jaxJ^fv~>AMX9~bD7P;F+}r9ws=$0Mez?xvr2+;pKLQ9Gv1kC(R<eRDc&$J_Hh$t
zXx&?9IbLzbLP^i6^-I~#u=9R$MLkCpSxVJ=2!FzXILP=&K9u&e|1lTsx|BvBO9wky
zUEyw*EV}nmq!hL>caxDE#3qL|>$~N~F2Z`x4Ky^WSg111h0*FY0ng?{#LGycA1abP
zSvRE_5m(+mAssLBd_^s&@-!(NM1r4oc=QB+kK1EX&ujHpVtX+c8~lBuYF6sfP)g6u
zXU^qGTfDvwnUq~!{Ztc?EmzpPR+VVzd&&<QXmBtEKgyRh6;SF>vo)pIB^m>XsB~?v
zT4ttViJt`fE3W^jcxzTskXZj{;1ctO(cs7#=<}pCTzJ1gQapDH{cDYi?bj}SKb4V^
zq7eActK|ISV^FJ_#&pu|e?OOzN~*w^yXiQ@PGLhBMap}fl87grS-E9a0{5yKJ6j?^
ztem4A81RC{B}(nnb$B>4MP+C4@2S^aXfQN1d|RRIXs)y>sMx&`UOiA3m}-%1)M1#U
zbK9t~9u7&6Hg_S#<92foek*WHpu~G`4d&M9{uF$T?yf-O)*~qUvh}+y!>P01LM;3>
z&r6rPYCy~r{k%PFq?fdJY31DUY$6WIHV0rc;fh8bxZe1R$L2xn{1zkmO?__-T69GX
zkU7h^zi_h6Wj;UueL`H9@gUo=?VdP#m%w}kx@L0~Lbx<<5n#tRQ<<3PaWe%3^wfBo
zglWx!R%Q(CYne>(^AT<P2Wl90s5H;4X>dy7j1z9>a}(H?<9W=-y@K2ENPMPw>LIGq
zyJ1!J3~P^ukZ8k=#l4r2H=~8riZ3!Gst0TF?j&}yxkz)<&mN}5YgWw7*^~oLh=Ug0
zJ|FMnM$%wJcB%AMwJ6#$s-bkf$D>ts#iiq6UT23+N;qS%A~kVF+R#w$!-%&NP11zf
zyr*S&K^%fdTaK!|?Czbzt<()#Zu~yMkJf@YQ}i||PixCuhq8(rjFfmY&xs4J^-EE6
z>p#V#k^Cbaow#i8q{L2!WiU<GT;!tVbjm<=)4tfY4rilQ{ZmRoj}u|7DW$eKpFOYy
z$jyU0Wt8s8S?Dy|?;B*X+KiR8U+?zEU0vw0)+3jpYtoty>yTnR5T~Jd3y0Nqp<>pp
zl+>G$@7?Nq#q#}nYKM1Ht3@IBHwvq_JU`bID_@2#HTKR-8_um8+3#tV%Sz2izSL!2
z5t5ty9OAhaV5s5jLT`e=j)w-5>9!F0h2N{9NXSvUmicFdXb4XBy86{R?WtlZdIYQh
zSK(~oVqJ`zYeQ|gT9-Veou9tHVQF9_J3xo{Ad++uOP>d3I_}G6MtBwGAg`<5{94=E
z%5Y1zDUhCCRvGYM2Ux_sNYaV4r(xwF<}O`i9Lip{?np?-l!eya_=<<VH+m!vT!S>5
zybM^&F~|2<e{IeZW;PWcj(0XHFrYb~>M)=avWi>EN>ftOT)R|uZL4dg)!S+18rs>{
zO)JPKQJV*?=G#@Az<ymTB~_~cm*|q~pbf6Qg;@Em`TmooP!$=Os5_XmcjFJQVs7&_
zWW8_6c^a;|@Apj&VoP1dwvz&gb$7kUr}c_|9l)LvKYP0_-aHLv_r<^IOh7CYCzINZ
zI6nmeyR)cBwag9Zz{^X}0>iu#TqXJx`ff^v&P^u!j3q2dJn!Lr{epv?myFWHHH%ed
zV#Vv%{9E_(QYuz{!i#g)$~sfj)>yb`%b7EsH*IuD6?3bsnu<=wuhm4Vs5x&ntv9jA
zuz;<;S4A8hyW9|N#=LDIVZEH%8rt@?KxTBQY2a3RC|tICLq<K>gd8{~?%8@q`WDKx
zSJ`-O4Eoh3;{8UP2ZHs0B`cHNT~yXlhg;pOO4L1*bk!X-Xvr0>F7xNSn{uMnF4dRR
znd0z_oAlt|>iE_g{?caMMOCU$o;^!_Bfk<hYqjR?!rU{b#L&*;PB6RVXC$mNs+-3Y
zI3=?`rE9&i;v}qO#9q?kl3zwVcH>GL7HOi&u+NJQ5mwT&O&Qh7vz@x`^eoG~hFxCj
zR*!Y8R|tKVAA82sr(-JR1=0S;XI+cHUQDvaCI<If3uVhbGM%4M<hM*n`L<SB^)(B(
z6YheaY*HI(AHhUz`ITE)SB?&^T3m=ZUJ$Q4UxY98q_rmBP&G-h(=2RxDW8%a^1`qq
z%d~my1kS^!#E^i2bP;@?kxqrL{heZCDI+t8X~fi=^Lv=!Vr5XSE#JLq=WlF>7?H@f
zycFguJO(S6yFZ$P%OE5-tz_)hMW>v=*rYsVK_u<ptgGeGC{k*_bFP=+f;o;;Uq_B=
zpz>{qcI>94LAuc3zSLzxqtVwl;wgg$zan7LDG+~0`Gt#qX5IN)*N10#rFD18{rDy3
zq_hPQalGOr%?Q(uu76~h->9D=G?gL-b6NY4IvkMc>$#)@)_Aur1(j6c%MEw`C2io)
zNpCe$C<<#mCo4f$b6L5GJ3*1ZG13sSaNHs<`IhIz-s+Kc3E`V{Py;QQBGKEOTMcRg
zb*f*xkM#?0Obj}rJ9;%F{p-rEhMCRcna%MkMY*amip4#9{EJUV+?<XGyWFOWeAzCE
zbVsx%d-?{=nm{v6i+YYq@40`ffhMM?6>6iX9@qwJl#tLBng7_;eO5ktDuufKe7BWV
zU1qnXYEV@bfz^^qLQW<b?UTMCJ$;{jLw-xs_*ZdTB4GkEcOdciwfl$=-llp<Gd829
zS=;$_%;Z%6qs7NAIN46w&W)t==%oO{;u%D_om3XYWstA8Btm8^BDq2*T(Q^xPDTg9
z%sO|WMgXAy#Bl-2Msr%KRd>2^a(Pab7O>fL+3q@Bf3>W<g|{U0w_9(_Fc7(~a(0)D
zrnSW0wRn;Yk`i9WbGQ27@`Q2nL3;9xEEKL-8mADXCtGUf^!=EIt4>yFkoJ$tzP$DV
zg#548XXHz=DDz7sDW~Y2P90fKvr9&e=$JiOiOa1PR*OApRMteSj%i+=u^fB;tE^{W
zOch<m4D-rx*&o+iVQwv>5t@X9L-Wk0zLhn};T%mQc6XCBr0Pr}Cf>WL6vbDBY3DUG
z=S<Sja!VWV5p9E9sRacOt22s<vTp-Q)ABcMT`c(p&I)GzUNYsJObpXB4nAS8f8NR7
zc*O1pzNlCuNp`>=E&nxmX=QM&o(|zz2Kfls$5Yema5JYL*TKk-Ep~+<oSja#h=*-X
zLt5R4UE9JO7I!$+>HPu$z9>2Qr`>@p8QS6brF|O8@Wqdp2|P)2BEv><ZudGe$(R7B
zxaYp&&Az#e<7Ulcr>1wh=T`+6^$K?*Cf#1qMB-7l40X3AOAQrlPd;Y&uoiU8n7M7r
zRtM$BbWbsA-bwuYDOmaAFyr?K;Oake89Q&>RoY>rI~A`xn^hu3*<X8mUw*3U5atOn
z<2>fzaL+*m*3Z8hzr4!w9Hmfo+x+#lJ<Zt9xwj0B6c+;L>4MinF-6INEPqBoVCb@$
zz)dN9jaM{R;}cq7A=N}J<9^<-C0n>+@LZ|KULr(s1KDLTe0b!bO*fX-Yw$+A=GTPE
z3FaW%GMRaS=-)gvd<IkL`+Gv<8cg64zkPB*cKJwD>%1vhtQE%7jY?Jd^&<G!_oeg0
z)xYn^ohG6GESm_foBVzW#M<qCzXL88*Yn-~`9I#CKi|ex_-^~39ozrsW5tF4S?h`9
z`j0n8%F6!dQI7oQ8*}3S_v`+-`2Tee{`X@3Ye4?*Q2FON{Qv*l9T$G{*Gl#2jzMOn
zLE`L-LN(vl9n&ovK?M3+$3L;b!ay_oWH7hAWA8<~V;2?n?~eLYnEe<6f<yS>WzU))
z_f>(ibD+1kx778a*AyxyX6KDeRSVDu@NAj6A$meAz#_QFyjLn#?48W5{3sgIT-MEf
z3U66zohNPd`T=F6F71MI!T|+)G0i={zx&RpP|o{q<ylVqE}cz{fWCO~LW-9f&wYo7
z3_R)*IVuexWjM2A_FPcJv8dT|JG4MEfIm=7M*C9ms4=;gC6Qva%NT$Vpm#tw&9>IC
zT0|28(cfRd)%1c(Jlqx3|LXxdqx#`Aj$iJB8=e}_whj~|RiI-cipmiuEM{^0ZEe0d
z(iJWDjoqVNXFIshSX~GvDS3Pm1=uKj0*BmzIDpgiS`FMN=WNE-Uvs=3YpTEh38X7~
zx2di_N91M)&m77GW><EWSFrR(j^2X`1fz%5gUa%avymJ>(NR~1z32fnRJ8Hfxi9eC
zFc#a-S<>!BYqlN!qZXyr@$`XbxxE{}kfIN$$VV;hD2%HKVuxC2K$&s_a2x7D+w=#}
z{SVn<L~IoRP)k{#YXlXusvVP+;2+-YZ<jE(Iqc`$FwAp7l@N;+!cGQL7Shn!9a$ri
z;++syIo(fEqe<)cFYgHlDvw+C-J!(BU^~yLJ3Wtbo~#1Fj?uFN^1TAUXG`#KsJtKb
zeG?GOJpQ~&Rq+cL|AiwbtSK*D&_pu!*<i6Iz1i>y`tWueF9J-=2eVntUZ0-73-G)S
zFKEifmm)Sd%C2s3P_~OitmbO@B3BFOz}ghd!F$@Moq+d|tXcKl)oR)`T9PCMN<%|7
z+;^H;sL?zyFc1w@OGgZQHz1t2!ZwDz8&^NY2WfrwSqrD4SM48+Nl6hM$=HUP(9_G8
zh+gC-VJM@yVK;e7CCCO|zIuC9L-Y4o2m#Y-c-JGS^WBd@fSfrGIvw~*iA|I`LNgwZ
z#~eKZPpR$f>~z3@-noXW&qajnLjj^vx2=IO5!vg?jk`Uq=`*QUYTu+<mC6X2*KB`n
z<5|S%*{w2+m@6t6-ag+oxF0^@E`|kq(8I&sEL-)R@HW<qT-v(%-q5{Eh;YGq!Bqh5
z^|`GuN*ni4eu?C(bbLeX@82(r58nhJ+FhR-v2*_Y;)Crb==Z)ad?{pgW5B%NWu>2U
zj5%<|cIZ-8g3iitcLRL`i1o$WC+e14h5Pbv?7`A&-QbdvmqpY9N@9R$2sxjj;@i?V
z7&Em=bg1Z#020|fV_E=f;C5P6kTEe2^qk!>j-mVkKoWiS1nL+S?|7LC)v(w4Sk7K0
z#JbI^tUTGH={%;@Oi3zBkN>w8AXDR_Aa_W_jkJq0VayHn%^#J{Zf)_x9s*u|RdA6E
zmKzYgJ9LG?G*MQS_oIEE37j!`@muoI6ABXWB-K5K94~X)>*tfQH}3K75WmT3vYuck
zwAfNRvRUIiT7~GwX?dyr{yh}I@45L1JV#SB4@RLb?`6kXF}R`=Za;fgUu*XOnbVj&
zw0SFg-JI8eqs*!Csr^OAW0qccMUn6F+RJScL7N>A01=cof@7=rtx@%JvZDY7U}t$F
zP``xY3ALc$C!cK3QqtNn{t^GF?8)$L3$ozgwncyg$OW?e<5gc60sOBtEP3ivp|CoR
zfgZoELv|8_uC+ze8U_~VihyigCcrZQ<N8EeCwoQMz}1(($j!*c5cnUBF`5~_Kv(DP
zY%(4NRZc*?<=z<ETt!dR4|JtqDc$u~nk12ciOsX}%Q!;SwsLstv+DxD6<_8=h*qHL
z%?!+v2w(YLqe3H%(UF1C2N=!wVdLX~_p}@9J<BlyRNpbXq`8Em26u<9)S#Q>qu3H&
zjo8<xt=^@3)*EnS)~!AS2okHps9({1EqQw}Ec6?HGn<aau;oW2HD9AqnUzCA4gf6N
zds1`hsW*A#-I(L;8h5K9w3@&MxEBxhOz!#<;X;4{@6zGeWPVei0NW5eue#Uo0Xcpq
zq4<^f->TOd0j9(s=!V^Z%6dYBC!T1$H(Ff1zGBS{%ChDSa{S`XFNFp@SArGw)`Z-7
z&`xtu6CxTDBFTS7YyCSs=B&of4j(biK>#}V0CZonJ6b&CKie7DK_wF=&ef`pkY~ls
z8CQA^F%A+QVHJDX2snv03>;=xrWGPoqQ<fyJY7hMz;P<=t$Of7<uPFBtEz50j@LN2
zv|hXXgA_945F5>8G>5+k`vx?{W;Z%JCq6|fgiY+>j7EaaqDU6#X1<wf`|#;1piBrh
zv%<S$N&V0)1n9|@3Ja$rpmtNV87_hVPi-;geXP)AfJ8dlH+5UKE;)Q3W5O*MbQ#7>
ztv%YsGih%`WL#;C*(6di^inTA{2*;M_S~dDLxuTh4-~2uHsSk}JUqo->k4eX&`6qU
zH(YvHw4VZ0Tq=x*e>I=E;N0cjfVsOyN!SbH{fO_vf5R?5*{R6`?-u?=*)iVDq9cnZ
z{wsP9of1=49SNs~j)@j0innjhC}DPObJs8Z>}Y}1^?_umeO{@7*!o;~pzF!62>QSm
z1pDhJhf;83EFwea$e|~Y*i<CfDygXxh|*g%y#Qffu(;tcF}JSuK9wW~WyTZPlt6T~
z6uh)ap>}+GrgzIOhYSg9_U1}~i4=J}03f5js}Yy@fw0k26#%((g&P<c<Yc)U;kEv`
zi~es8>zYHNu!|$xkWX&Mj=|oHbA0?no*_EfS*?H!q^Yu_0x8I-p99W^5MB>QF3Oz|
zUrG-fz^D45z%=wMDJvG}^K`S>3(l>ryvRuyAUf#M8^FXCSV&e`2@6q2o)4U+gFYC+
znO^y|CRhV^5F}0M(xn);nJH{6ccUcFs3vh(;^<<4gfr{x50VfHr6#8QJn*kNM1NDn
zmS)W@26JtAeS>2)9S*uX`0zbqcUTg>{&i{sYqyc{43SBV@Xtc}vqsQ$v!L5|fdBOb
zu@=P2R$U(cQH@mMR{Ge+jEO0QRa#^75l9+ERL|Fv8{qTI#inTw@$rapZb@Fo2kJRg
zAT?Hk_fJjupJ%F8<f7_D|8#er7o1MBLQSu+{KkM#o)~@tdlOiDBL%`|b*0WK#=<>Q
zDVIh(Pj2QbHOVwm@nV`+i5Oi&h`5@!KfOVBS|m&L=L!i4rf$LY1W7H;s1DCp6dY8t
zJLM~&1O$o1+PJ831w?y`#mdENXhJ;H&iY@T`#3xgVSL!Fv2#W<5MIg-!TWs6I;h1v
z{&KBcUy{$!kIMu3QVU4mTQqGQI9)f@rBW2d@g^cmS3qMwkyfYr#y{QHi|QDhC6*8x
zin>AN;c>Mo7z59Dt_BBd&lJ4bkQB+ia=Vo37>Zl~6BnQSS2uihpqy{)DrR#4RrO=2
zd?Gi7)7LN}!2b-t%B8LEJNP}IT(Lp&@M86%B2Aaehkt6F%-?RT`s>3Y*X2g6SR*!k
zJ+wR3hNyNqkg>fxlPb{tmhh>;qd^YOP9seNB)6AZ0%;s9G6HQ<>TTw-AL3-zL8FZL
zrr4T4&%9?Vb$<59DE1ktER4A<I15sa<E@}w=x@~>LAF&7e`gDBN4T9K?pY}pxu;s@
zH;v?mK(2<8UD4iNm@L1I=i*>Sa47YG$V5<lv-fO!&)7$BZdfPG2R9rI1Zyd&NV>Dw
z3B2X(`Wk;Y$IUrrapco`xF}=V&>5vb4zCxlwRvtMmM#}3ep)S(u6#FiwN_FRpVEo9
z^}TUhfnYJn-&=Z8eq?Hx%x@(A1=z`73=3ZHRG@ww-iE@0&?c$H{?XmyEH<NR9(Z~F
z&Y;Cq)<K>s{@Cy=pGL4G_6nN)h-ye_kQ9rPA88sBITK2pT4VoEhT02^XjgRiO?WRH
z83*fAN~jk9oH#MmRx<%EN*cj0%pZh`wNrgH01u}1++ZMiZPoYJ)ET?_i{@FZ;WpV&
z$&>ars3eMy+RK2v`Unp#`|e!Aasw?A<wMq(8(aXGh&wjYO|8CTshcIFHr8@*NV8og
z#qDRT&fSlm{GS~~VUk+J(9K5d0{?D_^i~=??B}tG+Y$%o|70^tv}AkAwc8@sTO~KW
zZ*vdlX1890JPq8R#ZvUbfG`s?XYZ@#9t$U<10T$n^?s^F_}ZD0xqhUOkt3yic}>Qs
zSP%XaZisiC+Yk)W_%Qi<XSUBcb$l2bkXOZR<vT9ccBDV0mDmk<QLVS{mW_N54mgf<
z-0bv%-KxCbX?^TCy?#>S8G~dpNFo&n!@p)P1%=t7Z!?0_G5pq!ZuDU$U6Tzn@~w>F
zla$c0qtzg18Ns1lww;tqEQx3EgAISJg`;1<@k$Bb1r90yq%Q%h`3dh%v72gosA={H
z=z3EHs4gAIc62j*9>vHP$!XZG(d9+94ZYz9)+0>cgO51PM^a@-yPHQW5gb?3-05&J
z43p?f;@+C`rR(mWVR}ZKft9rYQ%d$rDP5hm;EdL-Z*RV@<~-TTsGS_?5c(WUTe@3D
zOcyxxdld|FIHE6~7{r#^+l*{OBhu~40S#uW)`RcYszueg3^1b`x?-r_mB(NTF@5|Z
z;yS7i0v?ER`}v;zrHE?c58SY2P1O~TIQmD<$@=-8BD3qZkFWw3e+3ZEC8I`Tbs^c=
zTGaTdUHeW%-5D5Y9Tmn_gI!jY#V4%E=)k(q4foh;5EHunL7Q(h4eq$Kw$bwlP2=X}
zSVW54@;I{K(UgG3ui97m6<q=i?<RkF5>v7BJb!NpK7s~DQpOtmn{0a3cmw3tZd(yy
zBSZ{CNYZll)PDGU1WR50CR73H1$|Ha>9}UAK^zX1N75;CK2U{-t?aE0=NG;%3YMjK
zWFLjqC!iQ~ChP?WS;S$qC7e-2>SI_foEoRm#fW~iPSpu8^t1P&g9G=3qux^n*PBtK
zu1ry+OG$jeve>^bW)8#TQ3Bsl%S5$)e~VJQaG>C<WxwYH@yB}SxxE34^IXFi#&9pc
zidu2=i*2Qd58~$=iifnFN+_kHNW^YZkS)9@Kn?Oi?UeswFle!iqIarIb+?ZbOTUW;
zs9mQ#$YgZ2kCze1_@+ytwqpbbkG;-3e24cBPBkyJixR8{u;FTN=!~pb0odY`Tql@&
zCvj65Hfqu3`AQ2A^=f3pp{a7n+M^2u@}jsq*p|L^Acvs820GQrk*T0fO>i;9{oH3p
zBkM3TBV1!L!|yZc*Zg6dC00nNJe_#JrUo6+8Ad4&8FT#Q+6dFoj1$zNE)qx!%vHMP
zWZbd(g-he1UmO}x?<K!^TQtC_N7%p?emD7tcowT;^sv~bar!0sZ)mlhwS-92Hj6(=
zg{D|A2KzzRV?L10EA1$?cOKd1Zj5-)P+8jAIlOy{{=K<g9a%uGZgq6>cg}w122tDp
z!h_flirg&GqU9-s%c#5GIXCV<-Joj;p8{!vh}&)isfIBWyOH$i5eCZvoyL0CSMmrq
zHX+E_par4~Dv3ogt-}FmOJH<+7<psy38A&2W#h{+_+Drh57Zd_DzJwD>uTsr(1_Xc
zIqj3tWalvYW78EolDSk9A$W9?C?Fc7=?Qv476o;j8G(&T>KItiCv{R53uF&Ynt$Rv
z-MM*9lD6Ilxx3lG&h?;dAG@aoFtbpArWUZy^}G1a6$13f;a$QN$SVJ}koLFEF|wWz
z3l8qaL;kDUp3{z}W?v8RA7h8c#vz;il}Ah!tLvoe5S2|Yo=g)beQMtg3%A-IBg~_*
zIduqE=hzQfPqNJSV9)*_H;u|_zy_t(O3}o_vKbuGK$#~RAF>5DCWM-+XyyfpRGW7o
zE`dgKaaFE<Bwiv|Eut%%aodeFh{q1lI8#(hDxy_9E7UF!RSxUX=82|vah_JU)rB9N
zWpeA#sOJdwVI-A21x8D5IRTxHs>I7Og6_73ZP-Etbd_r<l=WpYNu>+2;4X;mwL(V@
z^T<p#&Ck#KuG-dxYy$Z&p9jU!IdU~DW60@a_6zL>C@mwHf8_NR9<%BHW`5Tc)(ugL
z9!!TT>m(Ii-zCpvd$$3;op^##-0!_)*(TUa7KrUu74zd=$nlzt+Ld<6zZluLj1v@8
zwJotrYG@L%2g}^bT*aE!D=41kn%xsZ$F4?Q{+>-c{If~QGO<Cv0Xrc$>QE_%B=Dfm
z-FY$f++tw<-K8*;o!n+1hGiFY>eGBis3&OIUj?-)QBl#>kTH9_dh<-(1IZk$NqvoU
zuowbLTjj5I+!L;)Hy%KyNGyWojujOw!|AyK;nzTO$sq8MKP)@oNC?QrwBCUj+w5&4
zNRFYH_3NQfXNY$LyBW%$YVdfL6HQtE@b9Pw*=9s&kzAG}9FOnKttAwvlXBTj2T-Mw
z*Fl8nA;|yG@Qk3YGLbWkMkbAn6~>CU)iBC^A9v%!_I5u4?`jGIzoCdjd#DGH-hcLE
z;0*T2GsJTO16}?dxVX6dJV*c5$PvAJcFublBtiy2M~aBfXtr&r2QSo7%_lZCGn^Uj
zMOvK#;6t6YCf!ytdaRjTS+4WLp^>`>kix9h7Rq#$Yjmd*wp08kaFZOKZ`22VRmKlz
zNsh;<7$FzY-KXtYVi;gi(@jX3<X;JW1}B%-$~Pd!H3awzM+XUxPamOLVW<=`-nMk%
z<Cu0Msc-7JBYjh>B~*g}NC0Z)Z?KBZb}BI7LJ~voW7iGc9f9(<H)ZPjp+(_tku23W
zs8qtIbi8}^c_%~Ow;IMvX>FHiz{0~;B)fGP?ES0clP~dLJ$*pt=5txZGrY#mWqxW?
zgw~OsJ~wf=FkBoj9cU3@%cGf~RMW#?lVUHAJo?CZKSm2*1${a(-D>?r0H<u(WFP9j
zk>LyP_FZ|6Zj|;DT&&q_!cN5QY$P%xKo%~RHN-lPp)vy@e?cLEcNUd5>Y>j_zqe?S
zblu1V&1sWvkLGTG6%btDY|y?}<8AkC*N=UItRl}LYS!`ErHDbh&P}kLt@B{d*1l-H
z6<Y#!bS#~oIWX%5yTeCqJV6rD<Og|i#G`)nz^JyHdpHFePCS|EXZE0+ok<NlSz^<K
z9QZE&l*K`S>NI#~kA)IxS%Oh44W1g>Oy?c}!60`}+GaUC{B%_}qcKP{f~f&f$p+cV
z^`9rT4h@$zga>Eb;%Va~A2c^61m=%PGOzJ^gu^xm9+h|ZIaI>uyT4^?VdPinJ{*E;
zRL{`BH2<vlTD#?j4^r$1ON1XjdX>!~XRn2on1cy>-V<5H2nv6$4CCoQJ`Q{-&b^X_
z43%tkMomz{SyJ2KUm2z)M;WPOw2_cAjr?ptui4iw2EY-w96TOsjgPDNUTMafhkC6w
zsyidW`%vkmUf-$s0F(=r=Rg>B?Ni*E^CxV;7q4@EjG+;sk0BvlzejmcUf7w`hMXt(
zNA^XUfn3Z{Dom*gZ(n;yyKp=pXm+&^#BS#Y+7v^|umWVfejP77;)xJP<O6c`l8MuT
zVvo2zi^eY|?q0u}0SFX*Buz$L*$c#b45Nw4v7(<kTv{t$)-Z=pS>ym03*Aw6Pc$sO
z!DlAfp=deA@R(2LA_)I6zTT%OwB<LB(RJv+=_NoY5lxu#W`j)%UI8%N1Yt-IzLndr
z$i7c4R_x`7!b8;p+dkvMcm^e&py_YKM>fF<jhFP3tsEA>+W_+6F;MVzBtiaA4F5Zg
z*njdx^hL4ycWiyFbyGsf<mLteWSSOx9_ua!W$}kKb@$y=li$${j>chsDf-TQt5NZ<
zrOF0G1OSXH{-zpve{oOv4Le1O>;gb3YuO%*{iL<_NuY&$cX|96?bqs0fM1RnYRCF0
zHj%!2^opB=BH7I-rwnd1IxsK5J&?-!Iz<m-Z!$0fQ(ltFp&Jq?sufgsYc4*_YrZ^~
z7`6b29Y><*5@W`&<)pIJumzoQ7Vc3EoU{}S)1a2CJ?{P_V7aFKmzLl7;;4XjP*>xN
zCl9;J!DwTJFjZM=p1UIYP4%N=#l?s$;&KSBS!*zFS>pGNMtwd!JG-y^9bT$dSC1!J
zH<qtY?WU$m6vD1L9jwF3mO-laJ16~I6Ym1@S6{@<RWJLkQF8hmO2FpeVvSj#n@4Q<
zrmgK3;VvT33vV$l!u?$&4WH17Qt_(+TX4-CmHd4g2}6@3j!QnH_t_vPVpzBnN(ja;
zpSv4M?~;8Me%g!VOAlN7^myM*WhrxJgK%AU-y<Y~t|1Y-%%3K{hMn{AngUx+pXe>n
zc3;s>_Z<rVe&t}a0@Mf+f|<9Y?$$<O4}v|c&c=mo=JnfK>NP|LQ}uelWr|057*9vD
zXO>)cDt1}{P67zS-S}^;X95?4ps>Y{cy_!Tk{3@HSXr9bF4<~9M=oby@<=;_*;uX#
z$H$ZB+^ErA$Og&ni#47YDi^_bl8c}Yl|Z3=y~Rm#nn4p&Yt3}FknS?5HrP>vuxi7D
z<&2EFVIt!*$P|(VAG3mBV^g%&1F-Rr+6`2BEy2GLt86Q;d7lliqvpddWtV1+*!;d3
zvtq)tvlsYR!18@x6WPOS&o%_NPK1hJ;GN+gsk$~10U&uIbvZCd1fR3YK$-+dmm_*W
zhmgs6%f^Q28g57QWWqcItB4f$u7CW)p|aHok`hX$4DVi1_Kd|L8&_`wB#G20sDF4^
zj1p71e*(gxVo5B;&<Wy&RjgwZTcY>q9$C0FQvP?nS|hx+xn3?cRRN0B0^uxocf<RS
zV~!!f=dUHm?w1E_?PIRHtv-?EZBdUv*!@M}Qm#>9h}Ge?IK>xy^J=wsbGfS;@*EYp
zO=-kiw@^e<Gc1T;JuX3-yz)#Zx{2Ep{me_!ghi9chEr=8{K<CG5^yT(Q})&z1atWD
zR8XcHDjH2^`vNXYwMCcOwbjt(1du6G(ygV`%w#D^Qb7PP3R38LD>><n=YlF=4pNH}
zX2$T{DQlWu5Mo2GS^}Q5kVEvHE*oRGvE1f8vH`w+@$91~4<X5+=|S1dM_ed}&8Nm;
zNBy+pXyU=5V~k4YZhqnUW_us9U!d(G+mCJm`88>DW*6hH36+1}rOQ-<Wv05*GjOAJ
zy0!kwntPxzUu%p}@*Jr(IphIio-NjJy!r)}MK0d0fxJNc5m3!~_=f5|l=8__no>Nj
zO!0RqC9~U2{5_^h#NGNgH>Pg0>q#Bj^}6@8E{{iQBve+qGL$7S)H`FOxy!^yeu3>G
za4K_YDSR|63>_C3x-OC&Se+0^&QSiwP+?X2Ecm1+bmaxW>MO5?kTqr;Uw{NwBPEtE
z?Aw}sVEg>;V6EDTBcl`OC(P;>d8@=_ZXW(EjX-`XJM!cDe~ms+g&V1l2`k@Sf9%|4
zzc05%)7n=jMh|rlKW5k38DoXyCh-M%0Upx-hr0Lvr~3W>z^$xggeW^nN!hZ_u`0=`
zkP(g%CwuQb8ZU}UHs??_k&MVzDB~O>j_iHxb#QQu@AZ6r-hIX&@V$L+-`mYk#Tn1%
z^SZ9b<Nml0A75UT{IQ1eO&{4oIiw?(D+$}aAKSiy;dE5yQzs6)`x2FG_{Wd;GR#L%
z7^KF`>Mz)%S|-=WisNe-6K>DLy3p0vf&Vki%n(#*cQn-)Sah9r_tGGpTP&@_;?```
zy9o!}r8n1Jk0(q0z4~OuJmmjd;ktIEOZ3104`^fmk5E?S|A%7O|N9O8-;nw~8$^Vk
zxt!E_RrB3OaH6d<h|DS;o+0CkSYHo<^Mzbb>f|~aA4v{n401X?tPj{jy;2VCmmbS(
zpT|r5=Tc8r^8dmUvZIIixvwaw*xTEi2v%<{w^}~{1_C%rp7nli&ejd;1xLnLGxaMZ
z(tu>*@Czf^*|L2CacOFqh3~`A8{&Lh9n;@BZ-EX-sF@iZxKY&?zJ{J0gZPR%FpVp@
z9dpheG*AKtzL{qux5p=sAQAmDHPsjnvB5&aqKYznrVsCDtGxro&xGKC$HYfQ#PqnS
zz{C8HvGl~f9UP*xt*uQw_Kf+_>db!i_vdH&o5Cq8Et@GmnbmkiK1(_}*y)F+*#SEa
z*UhTkJ{nCo_WB>wF!2@(s6UTFtAfIBB$JqRqO^y-Q^(|=Pxqhizu^GMGir>z8zAjJ
z@VsOQhvEZsp-#z?^o+xz2Y8cv1IPGf;8o5baB%SG11WjD9qMU;Onniwas$9^xaNUc
z*H2Go=as_QoA2i5=g-Klk2gmC0_d>xsOOn8XH3hipMinsw=*FVt>P2S`@mE@2O9Am
ztRR(Zn*kg<q_|oUf8*Q2#W65ZgSwXQW<L_whCVB;=RDMerrQ{~8HR53O+7x)(ZQL@
zX55bm$6$at2yqPv7)3oO0c4NRhhwVzyM}u7!9?4WQ4g3?s{~J-M)Y75*NZ`JHDnHV
zx_KYint4OxActEooF@(jzj^^X65_p=Yh=Cco^Hw>vv-|EB~$>^9N(g(4LA-)zzONj
z8NvkZ^uY|{Y2uI#6AYN2e*-2yfpg<ax=+_>E^}Y_cAyZ8RJT|+wp}ARErSLYd|1}D
za)FwyV9<c|Yl+qWP#5GfspFFcW}h4QsTw4DER$#x99(}{4^<2SA)_3BKYpDlM2n#8
z0`3mxVDjkyG%p17Gz;KNI{hi~2z8B_XDxV|6-}#}HgXzbF9d*bNG*ec4QE9a+0W*>
z?}{`-j$DquySM?QA}J^+6yzB6U(HMZ0GX>(EpUAwZW}g2BhWJ?t{Zj09CZ<lU>J$<
zl-re+VhD8E0cw|$wE?RK+-I0Cz(JZ`un%hNd=bLc!GT_jb9=6joagBL)@Gs@f|vKA
z@kq@lEV_AZ#n+rT#-+?9d+Yw#7-1W$=1Z}#EOdSNM4pfw#J7j^@Ll_U=BVlKqesR9
zc4=+1^+Txl1UVzyQ0L4C=o{Zne^yTYEH)|MhCm!y9Mok#B^(#%1s6KkZ<rnjlkT^M
z+aj~_CkP?m=ygWc`$yVJOZKEz+i|@}n;2`FM~nm>{(*+^jB_148NM1pqnKS>KjGC#
zdljB1IK<h8xVu>-j9z{kQX6RQ(C&(IeNkOWSR)R{Wqm9w(HbG{P2Od|%)mH_j|0c*
zomcC2XSr(wVKa_A-TtI9uWZGU3O+5RM@lY6_}^p78nA)>qc+c%HYN3Z-vY5d6^)fV
zwLZ0&`Rb#gZ=MrA-pWxkUZ45+@`^lHF|w=J+Fh*P>QPS$>iE^)5kuxzaIf`#eEtX$
zCIr|J-@NQ;*#LkhL-R_4*+b=K;I7jVaPA%`1D4~DGKS!{+&@o?OoMCyp^6Zq4=`fK
zb)`tDKXcYoPvoQqN2bMy^H=kyu1ALitmANny;XWhY59iqbEV_-$3JSX2Oq9PoH{+M
zrf(GZO{SjjlH6n%Wy_xLsJq50SQ(H>iZNjf-(yl)A2)Sw6pmc~SVZr8^6lxSwN9GC
z4m;sA5@^Et$uw`N8W1MscTG2VOL3WqFHbZ%i|}LXt%O(MCAhV5u!pEElOQ`lgW_+B
zO~C$|Xa1M-!jb=1k#*5G+aWL}c**0%!0T)Bp7T-I>!ua?{meHok@(*;JC#1|6uv^n
zb$*){W>!U-#zB_B_w*Xu3OtU7>~L<k7mUVkmc0&9nulO}35_^jp4hoEIH5~wtl{f)
z8OVjWFu#6M?#p-I$8heXZ9?&S!aEgy=77^W(P4K_8>YTw+Y!5Hta?QE;X?%f2a3My
zFYnUShDqCJ5y#bC$teVwX|FQh%^f8nu&9;ISp}&SZ9BCNf{Ej!%f#{iU3nx@a^h&M
z9|VZ_0oQSB5L#l7{u2jT%2kelDQ3!Wg0nN2oi3Jh&%}r|B<F^%uW;H&)|IB~t%+fN
zK@;iDUDXC+az~nof8xx+b@(HG#Oa{tjtQza(qAmy!v`_Bn|sFYkAgZJ)?bcSRAd}Z
z415C2@pMRPX`U{ePJLsO(i63#H=%$IX=&+fn;?LU^jStvS0<4%ftNk}k(qmIg*oQ@
zdbysGRJtl0(6c(VDFy7j%|ODa(-P@9!}+r_ZLhWPcmNXKTkplJ2$EVExXmcHPo)PQ
zysC5ESK2(k8%IjqaSPr^QK}9Pj1PQ;6~B)Mr@`IT<O#GP2(Y%Jol=@Tvg8`Tr(%mM
z2Td1`=MI3?T?dXLn1*=X`4{X~n&+Xs-}+q(6#RvW7Bv%ZdewK>+Yx6Un)18vE@?tP
zzj>$^Qm@g%X)#6D7(DY^NXQKDN9n+A-5HHl4G4L@2YL62^wU*tDbRkPeGfTlN;~@)
z6+R*y&{l<jkp(caS$V65R?1OYH}{)*<__@l?509a7rZSFoG^QUQ<0jRftN{~^NezZ
z0v2XK=#1vX3_x{affujTvvjH>Ds_l2_D}`5pq#*T5LkC+V?&!-sv-zaVF1>0&+fL)
z%mnVf5ZgTh?y#}0!OM^BgZE(+uDPuzhj?Z5U_xBHH{@UF4tdaTyg$N@T>3Gc0-4Bq
z(tqc?1g7M|*_k(91aM<P+zBTHul9Xu6*1n8U*+}ek|+aRdCuw_*{iU)-8nP7r99th
z(w(Mm|34s=WrW&vmYj~^i`?9Mee12+Up&w4xfMHk+<&l?fs~IttfaT})HFDixq-8+
zaX@wx6am9F^hKF!92)elK!M7Y)0N`DX!bWmEJ~Rp^m}e-J|%%{UWG@Gy$32V8oa^M
z^|~a9*Gd9&0InJEI{J*>H<o);B46?k^aXNlx^TQWEFiJeZ_ANkkc?UGz`(o}GWTEm
z2h-9PwC*;+{G+@J>>G;uSJFxyV<R(Be*~X4Dt)9}XBqc&c7HWGvCqxw7lK!u*he#0
z9T-<vL3!%i!p6eHi@2Fz!sv9nPd|fi8AUADjf0Wi4Um)Z*$X=xPPW29X#+rsij>?f
zY`f-(2VhpTK^}#%ixH=9+$GB6HX$O7m+Rbe#m8{b;up&?bB%kgVi>Ow<L7}w$}JHa
z>BnJjG6*W6n*jS(TmwF;+y1*LVkJ3RH)<~JaF~6KgC9I~5R8rY{?g^!aI|V1)RS2i
z@^+36C0{DP=en-MM$)2A6+cbe-YuW?X=?|y?!1-<tx6ZLyoUfLZ1)Yd#~pmN9rH@i
z|9n+26b1wrTYv0L>b+y8T%jzL*yGYlS^=>QaZs}-;j?0_?)C3;e@XLUsg#OQ=}&UH
zW}$>=gQ17sI=2@9!Z5y@vb6XqW}tKurdACqux#-}%OsKcB#pS(L=SmGyR(Do0Q9*^
z3kNJNeX?Po6QD!UKBd*B3#VPq_sdaB@P2US00OvxJ5c!$NR4>-If3#@qR>mB(T^=D
z{O_YZMP&UmKF4gt7cPQX7=95JAxa^p_Ear!&=-WE<*B^NWX*W?rB1^yO?|<7Lt}(_
zh=q*Rr(WJ=RJ;9`Pw4hXzSf%!o39N{b#S!bYZWJLLA0e)QPB6(?@3qRt_vAdCDR?!
z>gf`tSfLphF!(6>GK_fxKofVv`AO{@?449&&}m+%mh+nKOu;={c{N#)L?)2pQl&~S
z&kbQ*$q}}RAI<+DsCAg1OV%sn(`T$ghl?z+xE?{^&|jk5f*5|$bOJ13waH=Z-z?Ks
zZsG<l0@qSR_G%g|0ybNX-E$Hij)-rB%}mvOi8Xn);EXd>?0<r9dN*gX4q1`Mz9n?l
zm;$3ueJ<wree(ut9Hp=lXSF*Rj#bV3-3-)b*a|GDRa1|Z7BVCIf(I>(|BN5AoxqE*
zv&-P2Qe}tSq=z{QpZ(#$h?O%k|72}@#B?y}m#>RgIvc$ujH6lAB|V(#lF?b{C}W<)
z%Py=Kdmx%c=^#jYn5M*cP%B57$cK+7KV2N7%FS@`3a{`o@(pFUEKUx`JAmIllc6((
z`tDgGRAPU?)M61E^M{c$TjjRG(HYz>gg&y}FULUEvpaDJu$}b#=R}}Ela09<`FtUs
zw#7c)tX{YF3(uO+F~<Fi=tTLt8Ij?f9H7k3fMQ*TBzw*Le3-#e2pnxz%3wNaI{Phq
zwdSil8bbG$xE8M!etoO%6C0_@VMfW_zFb;=E;7kX@{xsoj<iZ7;a)YS<_hLL|KG=0
z4|<FRX8C8cx7>gyqF%VP;k*HI0-V@a%>*t9y;ApP_hkH$Pmy!+9dmS{TZ1tpl{Hl~
zf;5bKSS<;hVg10W9v0~+nxi*~5LV-%Ff7c6hAmZCCvcGqJUqLnzRzfY@rg2^{8rJs
zx9GIUP>3aFNv3!|0R+uJ`UTo}+S_y|Lx{vV?+8SMdEuRyNUGrx+#xS^ZGLaq5s~=O
znbtbx%YKFOVb-T;IX>YmZhZ%R`FlM&f#uE^8dbq&Hq|T5h#k*jI$pY6aNd0JD)u*Z
zp>R&j>PsR^aInW{GENp)2rD7cv;%VU+$tfv<!GHOxYasjl1dGmEksfqZybQrgjIvr
z|B3017t02XeY*xL9y<50j-t$97=Iz{C&~qbc8|@j`8QFAU&PNr0Zu{lQs{qfw!Myl
zfLnJk2d^|d<2m-wzuRBv_iV7*eu?&+d6vi5jLZz?w<_<0Azopc$U8#KlQ(oEoguB-
z^2QY{#`7uWlTDON+Nv@FiU~FT^As(<!@`J0hS;C@Z{LH91AKe}+YOFVl>8=7BlgrB
zYwI`fjI6NiE7*y+QKv9R_gU<Z;vHP6Tih&$kR{h+Q!LriT}vL@xma?UQFc+hA-&k0
zZHU-$hubS3@T|dxMTqR98V2i9O<_$Zz)e^;_%>WO_H{VV3Li=Lsd<pLs>TS`aEoEX
za^k%753;i*Idv|W>-bd5lb?dIFV!1Pj;hWxb3Rp>?AB&C%k!TkZ<cV@eu=GAd;GAV
z8_m!(88E3ZKR)Y6hbEMHFol3v6Wwz84NeLX95SaKS@4yZVqNPAlL}UH);jrFGd()r
ztg5|?t;xpPw9y^BpWfcD;OXphVUV-r{|(w@bS#?q^d@!n=Q9|d_5{8^0)HP_*NvM!
zOENVr>66dz*&b&v?L&jU)YO!oS7a}vwF{-_NYVWd@R`qhQr;weenS?`{QUlNdKb0F
zB8hafbd?2(H*P5Qx58~qpP&}Id<urL)#CZny&u?W%e5M87_>2R%8B1`s`sXM`ty~0
zdqdPSQ7GuLl5o>STEWSgYFfquapA5GeN-ftg>$aZDDmo}CZEf$f}v%lRBsKOB$>mO
z+$jQv1@*AHfo|zw1Fh1g?A|5#&=t@{6}%Kqx9jjy`&p;wpX%D;OJOo@V?v=J;&}pE
zgB-WF(Kdx|o8g<UTw7omR>M82%o^wYc*0K(^2^N^a8#tuZ}QmUNczn>?$r)-x^RSi
z3(>@oN>I-Rea+Rg8a?uE#wt1>Vm{yCA+2U+>c~s1l%WicTR=kJgRmcDj-?yk2q&%U
zE$5mW^R@rXBpZHy-+Q%k&>@goZuR>sny6P5*W&1^7e2%cmk7rG(@Y<gV-{#oA|=>T
zj8cTvZcQ>!-)CO)I8GVNAj|OiMQTwwhk@a2AE0iBFTb;V4-aojYrf2_OqAg?XtrdE
z*nr}^46}WuIWsw(SS>w6`(xAfS_nZ{H`mYT3a)`3hH4YL6kEH1M}Z|JU}ZKEr0Q$V
zDLAwTh2$q96DjO6EXA8a{gW2^B6=mrr6%ML;AuN2#G?6=iFBj>O5_QL3{R|1{4$!k
zR`{mmf^`_N@?Te!k1nrEP|^_Pow3Ir#Z+r%S_VzNIR|x$Tfv_JlPb?K;t!jjG{uyE
z1D3XH@!A5HecZInFXA>I!<VU4yys}7XnR>-XrBu=ACW&&H@U27$@9M-I!Ulkc3^J`
zzxr@5HM$3)GZ&;Lb=-?Ep}4Mw1gTZIhf1!;PYw_*m((uhilM+HlU|S3cI)?&c0!j|
zFO@D;je%+vN7dZq^CjEdvyDrIMGq@4m6pLp>gn=~m93bXS(_F51y~O@VFKs%!^*Ky
zx8&c8!Hd$oAKL10{!k!<80hI^CCyXlxt-8hLhFI?`XDGTR2oAYLkjvbI!N58$eBx)
zU{57Iyp2r!+S#zhi}lI1_Wt-<Hr4*bBVXsGcHsQdl-YINA&sYLdAZomEm8aXnxMZU
zR;{`oQ;>_VYB2w-B1p{d3Sav8Eo1d;aT&LO9UQ660xPnt-dmYJB-Ujd!VEuYBlYA`
z(C+4Acep97u8=g-&N9psdU&WvRGkJl@kiEZ4<Y&fS=M)@--aEos&uV(t1x1O$>mA<
zqek%W0R;wjsczKgH-a~-1Jzu#FkFW73|^B5KS!{ncQhFByMjisc>9H#IJw4AjZtE{
z);ONqlWz+~+&^=3^bNJihVdzpmfi<pn1Gs_bnbt6%guVkHi8>ms}mQc{21j&X3ZY%
zm^0XzaE#b}rpBibx0+BUm2@D)!X(jo_B?kq4mKq&AVpG}pdRe5TF?ifRH@Sa)RYYQ
z6&Rw}(Pi{6{5w?&r<joU%@S0b`z-V|CzpN-_uvEgqt+IgGpary<^eaH9&^nK9x1S;
z5_6~>Sb{wGt&|a3#`GkN3da~}?I#;tHYUfBu1;+)&KY52nHY}ZX1n<JIg-h9Gb$C_
z7TB9isn&MXX4c%h!>so5ecoy=ed;~++$;?38`}4@mdUB9na@=&(}>GE2^{7uy(7!O
zn@hoh0td#Z-ce0c*;D0dckATXNIaPhj0kEmgJa=gSUi6ma{DZ=p>ku!k(K<o;HA#y
z0KKVX+D_U}Oh>(O4=wNB$4U?Rr`lI(CbuGoWUU0Od;`HLyKZn=zq`XfYxU_ew}*QW
z)nobh*Dh`dO-^(7JwK06AasArzvWtLnncXMGpEE%^>7Xo!YU$l1Z$RM?}{p~(`Z$;
zf}yd^cD|8Ty8?RddOO!h$3OJ-Dh)4kQ2N5ZOPr<u!c8gmRJder?NJu4i<TD=yjoec
z%I5y6;?#0p2CZfdFJb=@XU>JM2SM|1QhQPy;~I^WLxXhLBK6iZt5g-;f-8Nw`7N=;
zySz><u&&@AO|%h~Yh_A`Dh}xLL}p6r{K9!|cbIP#!qPM-S0nG}DcZsRL=GKQ#?bSV
zQaO4-vAVsmlo;F7wyilz<CJz}OLnFd*sUr33{$rMJ{=g87??6MA2N&j7<`^P9&5AK
zpP!C5PVtYdawt7AL5U?UIvtSKI*2UosxKMsa`V@&ZB0^AzZTCA-@Uq<vdxk1x$6lM
zzMj@LN)6tw^~iARc4L}%?BzHA+a+@`^b8bv<fj!iddf_LmOZtBwv85*d?#(uzaalI
z{}WRm<}dU1p(!ruJtYcPI@t56WRx0{nKO{bk3y-bG^sLID9JBijn}R`xx|0jEa#rg
z`f0<pxx_?2=dR>!Q^r%})7#_w{yi}Et<M$_Mrww+K6XoiBBYeFXk3iI`3Zu29V{eh
zg#Y<r-M)40gMxIdj)V#peO1@p+<>7uI-J8wEEK;#MfK0>_4WqlXqMCmHEC$Y;~%Vg
z*-Q2)Lbul%w;;LXl)RPb`U&7^=`}kTQDR~vlygtv54U_V!tA93S$@Zg0urlDl4g<q
zurYce<S5hY@~5~DON3v?c;t5@F|FEJvJl<bqx^;td1O>do$gTAzSZLaQg?$yjQWoM
zGzuR>z`iG>N5-P+buBxBllWMA9-LCBzDeit=koH}f?st5-B1m6&7+Zh%dQ*4QL5xl
zNgBf9{P`b4p7~6T_8JLbSDG5`XJ8swL|CV#VkrA-jhGUD#@(`X(+X@ib>i9;L~wW(
z`YG)P?h2hb_tajK(tJz8kl4@Q_Q5spQ#3y9y!xIfrG37ot1JH<UITJ!v&yd_|5>%~
z0;0*k1sF2A(mwWBc#GD`C~8l!NEUh8qDir;7rdnJOs;?ycDr~>@o2kWf9P?sifgHY
zq7mAMt%D`%EScmdd3Fqy%IY(T6{vW9jaPv^vzC$R6&Jj<dPSwXeOTWR-C77Pw6=H#
zT1U6lopC6-zZFl`=yJ!~RfF`7a!P5=<AG6;QVjYRsd;-$`|J1vw|3-^Yp$rq@hC{f
zeNW*@aVO#y#V&{^SAt2UHYHjf0mg|1eQzz-S-dI_$Pv=1<e)&VAQ^K5MXJ*>!r99`
z;e`4@eUedqMxB^HKNUiL)M@>=zyhu(g$Ztl=`5I<d#5MiW!8d4(i9c#W;L$5fjskb
z{d%*j-m)^J6-)DNrj=_r7}ga}+8spG6ftiL(yUep2q=Y1PRW%@4Zv34=MhWSjN}J*
z?S`+oTw6yN#acZ=JFXAA)(YFDug6v;p|KYAjEVRlmd|{EfxT*RdNOt1v$Q+8M)g1I
zCVSjEti+<Vq9f?RSf})m{N5DyaP)~9Zv?=5k6Oh-B%X<Dmt&+CsaCXWx}=-6^)a3a
ziiPm5aISSDJ(KiC;g=VqgnniP#N%mv&q=a>zf19WS6FYZySz-1{%DA?)4TRw4G%ZL
zrFQikq`^xXCRFt6YOVH;Z+AJNRp<@Y=ND&VNbyB|gx`}4qM6PL4lx)uWo7?6rxcqP
z0GVyfii?eMcC?M^iTtIR81alkYr8X+maR7%_q(@+rP#&&G8H{!Zr}_<WM%rJSq-*K
z%hY6PGPM=Em(3{UMb{RumMIS7b}_;@F##{{ku6{N<Mg%Ka&IHOGZtn{>%F@JIF3^M
za#T|isa9?^)WWx+%7bg3_|#@iutalBfclG9wj3)3zPO$QFHQ39yQ9P#(JaUFDTe6B
ztsXLeklqoe^HU#BsHQ^Anb(Kj_Ww-XZV(irM3n6xCMbCgC#?I&?gO5VRKHYLfdW28
zLvFU`TfNUO++8H4Na4ErZcaTpZC%^`4b)7XSQlGUKy@5%&_?q~&E;lT*KdM9T5|aH
z>K7E4;D7z3qcDscby+q1j(r{Y@IQC2Vls^&dAoozieD)&>FU=|(#S*`h`tzpblcoq
z<{p{aQ&bVZXR8o9o~n#WA7p+XYFk}EM8Rq#C0>MO81A0!6Bm+1BZH|3`+t7;XY5~7
z)=+p6Zt!YL+xq?)9XG@DTzS1#ZMk-@Z7R!ELpQ9;DNn|Q<a@_21!M2(`?L0#d;Ah|
z#wOi(ZpwXnioZXjd_|<F_+7&g&iYNFa;NkngJot0T}xq}@!AsH4hX*P(*N4}O&nM?
zRWfS5y8iY%qQxoVactURf5Ba7(?hq&gDk0%@wH;Mkt>MEbp4izAUM#>UQ)u>{1$C5
zFHiYWr|A6KyhcGDt(W@^)9h8YT3xcIh{fivDmtcd-<m(qBi9zxwI4jF9JIGlwOqFc
zkF=tN)49><#H_Ppmw}>iGlklv$E89*-=6@t^5wmyUkBgfPcEtO3_*MT%H&)##2CS!
zJB$*PWFs6!^yJ4`;~qf>b{}z+SaF(^fV^>q*J#J)irk&V2|#zVF0J3aN1O&KI2Nd}
zm6nmsHIerlz1472<u)82JH!9Jr0w7j1^`X0f_GjmY@A<c#c>8Tk+DR$6yirn+^eai
zx>2z&Vxz2<2LUB{ySb$Zm!Z#`-?satPAyclgUR4;*=I2FV3&An#9QQb)tvysD_Y&f
z8~@oem#$JTEV0Ya@@HP`5>moqzhkU4O4RUyxgxm->EcoJx-H@q?8lenvLC)j+DPU2
zT3n_Pj#5|N|D`t#7*%=+zjzGC=fmQ59@NwWR53SGQTcTG&fJl;BE->355~w}ebv>E
zlp0e?=mj;b?+RdcIk(3b!TxYih~;MD_c2jp{(qFN@V`jdm$Ms)6;*!n^UXGc-|!-k
zBRQo_!@sJ!bXvOsf|_2Acv=-+?$6C#0X{*H7Sgy4?;n@S2)01__U;;)`P(Ysqh1<d
z=XZaRi;Y}neiA^082yVwey{C|Qdq)#kf{N~QZHin)8`jawURl$cjSIaQl-_55#(zC
z$*WJBCVd^~0W+^xVB;8@Ah^3lCjz1NaQg?_qPd|GTH9C8a0^Ts`+eY^Lh_*=I(%S|
zvspWFbmLi3#_F}sjRh(Sj|jaMt(KAL-}9uP&6vfVw)4(!N76{C1syesVCXr)cCR1P
zY75}s(%hy>&P=?B$C@DZogjdh>*;Udmj#)qrvgiKS_b$|W`zqJ>OLZ)@t>0&lSu&p
zlXeIE;MO}_&c9`KLgDBY;r^3;AdGQ4tgz8b=i}XJI+o;&492H+<Ao<Y8HQ^X+qn8O
zKh%X*a7mf=STNkNGz~2I1tgpTH>x*U*q-(i-Ff#!m+L_r0&=KZmcBD8it3P1r6Z%y
z8SYM-?)9UO*}x?Z9@!aXq40_gKSEBbH{98(Y?WyVehlNkh|q{y*p7+X{Yiv5iwAYf
z%m50U&xONx$a%8P2`K8-)Y9%51bj;Etoy?lIBNhCu3uDWxwJ9lapNy!5*Vos0d1&a
z{hj|BP+ZbX<*AgBk!ei+B$WL}Wl~*5V?pDtrrdWn43&43y+QTaV%BZui!5C{fGk+h
zBBST2{q$F$0T1iSXC=^+F-$Fk@$}h=y|$YV2W9~%#u2A{?Dsf9SoNHMtkv~!R;%+?
zXRNS54VBTN7{Os7xNVzO7t*rX-afos9N%&X7@2vi{$ner!_Q4|wEu9_Ms~wldd_;W
zOtT&w0z^nl)d~gA$b7-?`1bZW&4e!o8)q-Dig<5#*-;223cmt$qcQzjX0QH|3Z8K8
zEG~q>W&KSok~TMgYYxz>tL`N<IH7}qiM4Ix;hb2W_*-YUS5bfb9o&YW0H{(sVHui?
z^ks%ydrLZNJ#9zQ3i;1VW%;-uFich>P_)-zYgu1|XeS%!oEP=_1F2k%00BdRm$_O}
z2i7c#=2P@>8a_up{Iy}{(-8Rf{bel7alEjAM1B2oQD^o1_Oh}#ZsmdEbXGgINd;>}
zb%Wf^bS)8gI)1tVd2~8jUsqm;2N^OR6u3o3zKfpWR(g8h%xklCQDGXkcB;fsqyy|x
z!(KuD=fdk6%`_k(q75L^y@tL`!Sz3vaiRhe?P`kdC4~K1Kh8^=oruGWl{fW2LYbZR
zV`esHzDoMXkT~oD?VG$`cIfI8S~0rIH77$fB}{9-Y+szwS{*BOonZ5l45TEf-PIwL
zS(GT+nP+wnX*38MD1-5TzqjsVw<9nHI?-(JZjg*8!=1?zC2~1q6hQoFWGT>#x^I9)
zUeEUWKyXF9OkblA_<(6tCK^nqydS1{z&z?0{IW_Xztw?|w;720t{}E=I*A&0D(|)i
z!E1}-85yc)i_wIpFg^@Z<U=`^60tSc-MC<d#UHFTk!NmdQ%2BM5t?|`)TwW~rJEs(
zV^;f<%HSBD)s}iRS{_^3CI9h^z3`eqEIYTLl{67X$x|J><+Zb&1wxPgwNsSjkGF7*
zRj{*>N0S5w&JOlNGqgdq=j+e#5}pI=SOOScxH|e$gdV7`ogXAW;2rFgX(7wA>b%b3
z`id(l5xM({0}&*Vp?`dRvaUDDEuG=)w8AWB&7D7p+|PNXxz`tqs&$8C@dtocqD{QI
z+Fkagp+>&x_J5!8R|f_M4|?wJU|MBt=xr%(qRe#+uUJ{2bgPZu-V3{(sdiucZpL@X
z2xhg*5gsB^bbtsfEWm0dJHl^lW$GC*U{=$G%ooQ@Eklu@`a%S-_oH)f2^-s@Y02p1
z=!#8f*c&x?ybTHsuIq+(1*E(~sicX=tg@1wHQVByV$>HeZ)`2-Fj<E}z1hUw&4N%W
zi4M!$UyQ!;m9j{~K|$`EWvYRdwtF1)$$%GsWb04O;>PV1iDk}q?*hHRA_!M^Df%%t
zL|2pVk++pvXctk>y@mHw>)C-KAfLrXg;KTb%RP+;lPht<O#RhPc=`22+e}L5ThFeC
zUk;r|s<6_tzGRvF!ri%{U?ti9eS(fs55%4S9xN}E?N(LBzR$ggTJ`K^zESR6)!YyS
z=4hHY;mGSlzAcL5ow&;+FOXi@?FAoE=VJNE>L59Hc%i5iHN27af=_qdorg7AGBYeN
zB2y7~GMUre2D;q{wp;yGHNjinT5>wcDOdsADcp73MIt$V379d2C{V-o<aDoedaFF!
z07XDzVrL{-evq9CWvPtYSXVW*aiU{<3KMOpKm2Co)vYh45oMcyxd7ZurI2V=XJlSZ
zPI=|@swbESKr|t=8iKmYt&!y&J}`bJ=XE~sjd6|iNV6L41x(n5h<yz84YpFP;p81j
zZ~wJx#vH*+xYLG%qeKRmU;PmTIQ|60gTz4tuuq`MaJ#Riv2}EBNLvn#rNh4<MKqR&
zQca{QA6ynEP~%?&Po`RCs=*%(M}1CPP6|5&8BRLo(r%*Zh}gHd>Z*OEQue%m^41Uj
zU_%lQzSJ?`6xx;N2aIfDu77n(6UkVWT9}Mt)xC@3Z;xLWtLhGUK#t*m<yca4xx3<R
zT$(N2H<QHhhyMI@rFe36stGQq&#K=nIBCDjJXjH<1v_B%`qP^wr`*=dCm8NbD%d`c
z9z`(k_OH7+bzz#k^^%o~9REJ}*%;&S5{rZ)2fCtUg$(9@@Ne{m?y9IITr~V-kaG6-
z+~>~+{sUB=1{`NqSbj3IZNb=+qB^6TsES%u5^M_^>>fir)BroTvgp(!0Ve@B8}lF*
zp9j}LU8?<BJIB^NbnAC(l-vsIlqgB<{w+TpA)$eH`}?!Ei-9+!tzX<so@u(n5O<KF
z&Etym?W!_Yny)#xxf_LUDkP+7dz%HPGwAZ)wdET+*RC0u?mcL7wW4F-ct426nkARz
ziNr?OM&UP#41Ogrn`4f#x%x<-_34ADPJj*Ur}sBRxkXtO-~8%YGA)!XNH$ab$EZaS
zu0iVu%rSDwB-S;IN|Y%)S~?E314@(&ah{bTBi09@y9u7(Yi7Nv4VVvE+P-uLnPup3
zp+}xG`*l|iMlbf~wkDkH>(PhVD-Xv<J7QRyJxXG4RKX~(<^P!b_F>h&oZD`z^{B;(
zo|{SF;;MRWS!p^JShq-2K4vVW8<y8wVGZ|cVA|S!ic@k_6<khLk~eRUsxwP_>{4Sp
z+z4zEu8yJo$!NgzphAe$B5#MTVU(}p1KtN$hq67AcUYR{@qTz`)-UA@q{MamL}W&V
zBBkM0nb(}j0yiZ-DV%Qqg6)1CV)QHYqVg30ibT3iqVVb7dC@7h`F-;!n~oi&+kp*h
zi!T^q+dbRo#pRy!r>gRR0j*Er(hWw2spRTAd+|pzdb=6nv{Bd!)+4_56m%<QQ%ava
zn7N$Rt-&+XOi34%JW`1Mpyz>M<h+^A)xO3Y?E6sJX5EvidX)+v<Pl5w;*@s$&u)%+
zjju^!uvHTUN!3!<7QSrBtl=HnT=v<yB-D+muic|`6qxPUi!-*T(!|e_Qyyya>7HO^
z2LEWE`p?#U$@>}mLTb^#0{<w#*~Q{Z#T{5`;izA#E*hQq%!I`Nx;L~&#;7?D%jCJG
z{^I)RzQgl{+$O>Ta)|O_^z^rs3mHu*8~-%rf27}>_E<UHxv^jO2{T)@9K9PWrPr(N
zcl(X*WNKcZi<p}TJhJ-Z%+)H@&6>6W_L@UYl@58~yLKb~wf?YH+c!m<bZxXWboedr
zzKk%@b;s1$Iz(gDVsT6)#n#U4<X;VvFa^@cpZ)ZK-NKRFy#S5njEt&0b9uD?!S*gD
z)Tk<@RIEi0uFm|J;Sb^1ptN?#CH)$;7W1ol<bdy-@m5vMi5!lqifVkHP=2A}{-<ia
zs1|Ki6yNnXNY$t74QnfMNFx`|*cYp;eyo!ptB;o8h2^CDJ>qW3<6*e+L0H2TqkSX3
z<zhgN7;dg_seH4ZF&$#C?&ywK7#ZRy(OUa>_$R0Y>76dBSKF)H=Tb9K+HmfhhqKmy
zF0^zlLyruO?K^kG*$AeHPlu)wL-s`L43;+=DcrxAmu4M?c5_#{v$QnUIn-OY59Y$E
z%8#x-m)SRtCiNxEdF0p|<zB#8c^Vn$okGXOmnxZipsH%h-9jEYw+H(3WK_ED_;`|h
zWUuhM)*dKWrL1Xpo7MS54~!3xQq>!*xeQ;Vn~zzP1;^mj;YkCfzP5j2L2Dm_bCwyz
znUD-$d}|FXEF#{wxJi0@f{M%eNHDMC^QbKkVw}J~xv-`*5Y)i8btGRTySl)e$}@08
zABv4L%wOZP8)#?^b}Z%b<O1rk^;SnGpSW^4Hvz<Be{*naT7!QP?{AuR;G8vZAq~6H
z?GG97$UNu2HTM!DrC0E!X!e>hb6F$7-5*}{{-%p-#ig~K7)`Dqws!fvk#6{sZ0dl5
za-r-}ENUEwsuruQ<*V;qtM4`HTHD1BR>h2{>6tT))t{T6t&YKWBUAof?|E6uza$Lk
z4kRD_e)Q(=8^62si|jAz3jQto2mSy4RfZm+zkuE)O$Xak-~Q*%G^rQ<t{d<xm0u|S
z*Q;FmKksL168^Wvh5my4f4|75VwI%-dCjXAmz+*@JA>}yfk=XrpC+O1Ue4J$5C0M{
zUXTa{Z(~2Tcm6)~BGT&;Dmb$<n0=vJ`ug#oZrC?Gc>Fl6!PL|=z?-YPyZiXVBk<e2
z4~&eGsAVr?Lsz1&CC}jT<H!5?zG|o8A)6|4zX6}k7-W6g0CR`ez<ovf+0r{{u}3^W
zfEOqM^Z<S!!MC4ycvhwn7auIRESQb}jy?J(a$XBPoN{iKan9=CRn66n;r?5*+ftLj
zLS*JUld`rl<?bvt6#9_a{%G=V^BrOWv>iAg));#F@wGL`WV_0})Snlp&#sk<)Iq~x
zxw;t_ScP?8wey84@q)-#=}78<Y1pRLZ>7)qAg{IT*X6VyK(w5uwoOh+eM?<kJ&rpP
zy!f|R^yc3A4G^~#2Q=qDz&mq8CK@9r_W$0p(=?P`J0c;yD)$?Jdsfay`saldBuW!8
z(;lZ6O7w4hH!riTrT(1ZpQ-OJ+JQEY6_BZ8K(<`#>zm`rAz2D}33ug{prqCnfbf+8
zQC+SG5z1LcfpoF$(~rTu=!P9SwPXDN!Po0wG8|s&_!uOhwgOt<Szu@O{NKl;;*B_%
z0zSv@?Cfj;E~^L}pcQS&5;oI7$`gHaBB<PX*jh8yXfDLzAECsT=DuSxM`sg6wju8`
zIA}IpUM$EfAwZI8UqFFUUQ6)o&$kk`9q%pV&p{tx92?dtTCV*suK*$eu7Nuz{pKBd
zs`wW4P-UM&IP2(ii@}#NdLmvR<Thex3NgNb|Lh0st!98^`<}i47fLG?(Su+~R0d>f
z`vC6)C?K#EG{-1vI&UQPnM9lDT`+!7fXK_$cvN8D<V953;wx@&d--4?mu-A9!GR_V
zg6<M|HQH3#L5l5nG!DG?C3}HM^}64V<N+tgM>c8BRho@Ys-g7L@~AUdq3*cIaKCf&
zU_QqT$xL5yN?g>b*JXy+dhq@Hoe8xmsppPCi|ibj{!GdfPzSpel_|GEhyJb0KD3=U
z?<>3bhETtU-l!V^MkUwwY`;@;Ilaks!(tVYg^J$=GznY>*AGfH<1e>@IM0L-d&mdQ
z*O8u>n3%W#=(DD%Xit<sM$B%N4?HjP-DvU&a6E2@njX7$V%`3IdQX9;H=rBB04Xkp
z{2}}9sYxgr4c(NZkJvUeGM901bVSx7W(ZUZ+i{1IyCCyD#r_EVVXE&ex_3|cy42ZC
zsmy;bMKcnB(o$gAJaur01`K+6nX>FtA1LfwqUZ{&(~q5firNT-?gBF;J@Hq(a30d$
zG#G3c(yn@Q7@J>vjn|dGgYT*N?pzSS$K2)bJ3M{*G!Sma7<<V+B!N_>bSBW3Btzku
zh_Au7?%V^Hemp+(QKuB$fBzA<NV)PE9%ENWps%WY%peT?7qmkD{T1jlYQFpbWUF%p
zVUP!EHD<^8zQPU;rtMh<A_?1-pQ|FX{q@UA7aWumNR`$T?{HFINeX{I>-=R(uWsM@
z%8mJt^riSppEuI3OS*_&i$*)N;D3I{l#?^lv7vm(I;IsQx3hr#P{OV&IWEB08W@%J
zg3Lx}zX6ZN&cUw7sfCL%qGtg=5a69Mt<~-`A98YXa9^+6ANQ9c8h;yYFZK(MgRH@1
z;4YOH+!;nr*@xdJK`Z3Iv<EL*zuhO{z4ZGxeir-pxT)aZJin0YI(zjcq}G%JB;}dC
znK-n4;Z$4)7I2B=K#SQQl2uhzW%M-(*EpB>xQ*|4;{`<5vYBiOm#TbwX<(o-_U(vG
z9BjIdfYCZ?h0ORCM!ve%zK$pL#Rad}6ok$ZK)A9?VCavRESmsDkO5qq^{+cOcjcj*
z34XFqy$03Xx@hI^hh^Z=ZwJI_8;j3v7aV^89uI2Q(dB12d-FL}4#O<@EAiQ*diUim
z5C}fNA=H6_lM4>gkC%Yf!sY8pSMcfJ4pYZZ?10+rmufEf5&H*FUq=!v|NF$N;0LE4
zfhSiK=s1Y|(k+AtCiouzs+Nt-jM*Oxlw^wAt5sl=@Iv>aXu+6+2gN$rW91-e2&asL
zK_Pqsj8hbxuk+HpB~?zB_jpbyIuA=fe*B;BQPCu+f(v?4sL_%Y7qGM|y56ZFk+7*z
zX|73l0VuIz!D9f-y?P5R=WY!=y%5O-U+Rj2okGUo8h>Aa-*X(<P4q}E2UL~ZtKFpS
zMOG%*_I>RXNufjt{d*Fx169+T;3l<$*+i1aHAPb<FgCvhZLWo*+>%f3YNM3oQ6Oy-
z+Bx+Hh{c~7b9F2NS1WB=*^OQSsfu{pYc8TPTCmAFH09t3FkD{&dBt_-TI0=M1WXd>
zIiRzzZxaTdg-yWF&tonwXTHXFdLUO@tPuo9=X$^9g(-ZBoXgo~AwC)j?t9%Vm~);;
zGw{1L&{<WDbpN*Q$qpp-+j%@n+>U{)v1R~m(y#d2QsH9d_??s6h`WJbamcyM5TLQ#
z1pKh<^D=LgwUqCK)`2|xAN1FX--t{ifc()w2dgl$Ok5CyDDzCphi-Mi-Jus00z*NB
zZX2*VpoLN)8a!Ey2}OND&E>b@C&D2Uyngzi-7FwgC|F0D?7sD}tMRuTWCMHBH#GUR
zgl*UDh~xj-><aK;>4nq9(2B;wcB_r;QnJdxvC#%lY?gLzPi^|xeIYt59WcGX&45<@
zHN>Z0^iI4+Ek?x$8BWZc95tRKMfgSJanIgw-iK(*r#3TSq$KCfl}RXtz5$>%?GPif
z`f#grB=J}1R{9jQdddLL{RiZ_z+vX5I?@2@3{^my)@TEFX`o7sYTC7a=TXqABSK3+
z_xSdG@4(NDE&GsQ_nDk%TIA8@OnW;J%A5tr)}~pSk438feuD|#X1TpeafNed=S=TI
z7tL@#BlmXM-#33Om&X0GTym^eCw2Vk)Rz2sjozgEJQ#@FZI+Jot0pc|8kySX{4V7N
zsC<2c7{sYg_ZhaAuxg3=O~XNa>jUtgQmOlkkl45GV5!JCnDb~1(%Wv|M&J9X%h%=+
zHM70WaDSRmcjrVCq0tCo7qW)KjQ}sSCsFMmwxnY>@QZn9UdZjC->0yY98O3m4H9Am
z6$9Ikn_z0=n1`5XaBt7>ZQE?;Lsw0VSC)gCuKj@qPeP)gIMRH30(ikW9RlUQCSDDk
z4h^qwj)_)rm+4$!G%0ysdnjdjoRo?t2Nz?%`Z%@7x?@)J^ei^)-)#kD6IOCcTgdPn
zfKiVS0c-2PeC-XzdN?Ib+s4#)8xSWO16(2$fcT@n8mvzweJ`CA?H$@gT65Y|W7I|@
zeFvC7OJe|glC5wQFy6}#b51V{Wv;DAMZx4pZ$MfUNDi?1kDgPi$YO!zCF2k8-l-gB
z$Lrn;XCT+vk?y2Y<6Z_cs<$G-^3)CaD`rp$n_&3pAE^C5wekYk_Hlo$mcBU~I9sN{
z8$F+xIJBm(cpLrvc?xw+mxI4uFehQDQ(_BzuNFmDvCoZi-H~pxLza=h@e*M#;AGo@
z+XCo6&R>7W85p?}rA3<70oDC?T<?Tk1uXcI)RUfxURS+TX@Xce#9`iU&CHT0ZAd+6
z&PlXTcs6CwdjdQj{(&?D1(NCB_&H-S%2)ZO6M*764XiX`Au-4fsjICFJid85TPa|M
z7bkVbsRiK4`_etpp)~)Nz@9XbMT5pRuZ_V%nE~UcS7O17TEJP&x67-TA=&y3dnCKu
z{Glro393xnK<)nCj;tCy9~?uDdhfEwJtoF{b3<q7di${~Qq;}fmrovdV#Bb?B<)eT
zt<+>m+b<`K|DINMp!qq?5E8ED_QL=V?fr$~O2D0JxaAVXD<}mWDpzwmZbe+0WzJYq
zDLhB#9xFHfvKqwYK9p<U(&jlVLL7-0R_SNy-d7X<oe-RwLG<*##QvVkX=9Tu0PnD=
zw4)@zsH!}WO102R_7-tg!dYsHNnaY_^T!ro^T(2>?iQzgKH{3#3*h$nNz_k(wfoJy
zzImW^soMw@bl97JHQ}L9fI5eo*V<|7mO5EG?NPU}fvZZTA!aQR7x_4(JbIY=&=R)t
z`e?%V&$ogzVU&z_Rkt5Kc4h|(7_HLr6DnL#<<~fdd)Apu_~#8NBHN>UtkQhIe$$zK
z7FaMKhN%^MlcXGJ%3q0dzNFs)@w&N7UhwY<oORp45=@Fm?8qO?TiX4_Uq-)4hi`)s
z$lb`(9$ZfKJA(x$+1Mwwkj7->m?zT}wm%!+kBkLmFSZ4O{6;nN;4g`E;JxHNXo9RX
zk6+<Xg`MoK07(MWIC@i_=qh`i)E8_8#eDkudf3!XU|H@KmU4E_Wb+vw9h2r#E&B|A
zdg<??lkr?Eltv3mn}9tW;&i_TtM0S&utzR!t~CkBSb`6P=ncb_jFLV-6GNqF<zvJQ
z_PQW8WQ5bPZuNIhPdfeMeQanhGRrq-x>9k7g8~KdEf02AS%LGVrUGMxSFE6+p3+GW
zeVSkH4a2ts%^X>0JN1S1n74t3GMip6Hqr-_GUe02=~1imXoE)iZs+#k=G}VR-!^eS
zx^Kq5YFm6Q1v|(z%`wv@o|)SJ>3GcQ8pqdo|8V;KpUYLC7Bf)Qc_#Zb52z}Ib_6QO
z!(Ck`PMlseTnp_*_U?8qsUoyw<R~+u;|3;Sy!y>Z$ZK?ufIdl2yt+Hb@N~L5|5hG7
zj1RHNG0(s&2OOF8{V-p)!wtT%w&@${dc%*L+a!yV2CG;4v}Qon<d_zb0e}BF-F|&B
zuwZQhxK0fx+QJSM)ks^#{+~~@)v=92ka*<b8*G`iYUA-G&80Jkr2WYwVw?Hbi3<Q`
z*^#)xbC}lAh(9Fh`RUH>Ke78}Li?YtV~2s#>-v3KU0P#5j3~BKh*_ZSXX6#C3tnpM
zEuOhIvEVAzvK2Ohj%O3xo%&U85hfF+#&mxm+nR=mHmL_mR|CL^sY5D;&T&XKD|i#u
zKuejzy9Z6Ou@A7=jZ;?LkRo9>Zpou?mM)C;O}-_v!}@-P-W9B6B==KI0&B^>Fld=w
zYW5GL-JX*g4ix6s&jcUjB2jU5Ro=t9r{tBe<!(Jp%qS@?8UX@S*&LiXpn$6z$_5L?
z)ffY|19C|{;KDK{m}5%rh!HC#JTz~zVr1@Zm>OMgd<wg)WIYXJKlj+TiUqM4)kfL_
zhr;iR*UpPJDbz5&q0yD7y@UFIQYMfLiu7T+evQ8$YE`ZxQR7FezT^MshZ54Z6@o95
z($)P62mFuaOE>pNT}1VE<U7~F#aZN@g(n^PgSFmQCP@bNB5%E8|EVmRwV2wqr##GN
z{TP*w?Q#`$v>#XwGi`5iZSQ}@E1rQGm`j?4^K5ITnHw=I5wW24&u-+%lckwDtxv(4
zNJ!W;bEDwQ^~N@aU47(3Fb&DbjOEY&nyX~@ZO?4=?hs;><G5==-$eI{0Rw92X6{Y9
z6Ix$CU9o}qR)ol=Nv`j_42tJx8LPp*wnevVbv@c|rFXltXBA%QIpVce^R7m3qG9tO
z*~n&gz$h1PrOJqn;pG2eFlBIW0t}I_{>X9VSDA<BeMnpErNjC=ok|$2&~X)^-d6e$
zVc)ap>-XapDnc2}MSZhZS--oRfPI_iie3J|XJbi5g86MsvYAQ!ygK8Zhz$>9nYu~&
z@&2K27&3w2f1u6l{$LDSuABHV*k1o&>6Nntfv*1-VB(G!#0fnWcEiUIn`KfXgFxFD
zxFsrexPnv22o$Q~EOQ>ghU_C@A=Kb3$4@_B29~C|bzgf98LmKAa!H<g!E`bt>tV5+
z>$+6IK_>I9$fndVV3T3tP-N`HwCpPOX0c?q5MFRWsL2X3e0q`K2&RA>`nlSgq>KkT
zx+>qr-q40MY$cRd)G{V!DZCRy6}W_z?C*r&Lqa@$&pZ$rsDQK9>#0l2=*Bf1QU6%B
zY5U=AgkWF4aS4#BaRuYKB54|WPCx)s25O<arNzUL5M8;WR<P-$Q*4j7?Jg(+XDPI_
zx00%Ke@=N^Yseeyb+DT(l0eP&6=qWhtHYL$EjGre`VE>O%(>qiq(9GS?5B|;X=p@d
zKUE&=e!tp!AEn{gleY$`<K*c2Qg))qGL8>Z9ZUWJ#DcMA&@%5dVZ;0;k4YcS<_vi(
zJAW)G*+IUB2a_tF<8c-|>-9*#e-XSTUa;!jzA3P~Z+h1Bz2VO-zqhg!y(>R3{`;4K
z@E7GMxm6ym5NDN><KDb1tK9pa<;*3pj*T<1io+QnV0zwI9~3b0;Duebclm`ACH`QI
zQ%*f@SY<><-#%v|Z4u({^{VbbSz>dHPRj76SiVQ&ZN6PdZFSU=tl|fHD_1UQgG15s
z$IJ&0uj)+d?#K!Rx@MM6aSTIKjQ|E}_8Ew`Lmyuh%7V%ZqUq0+O3wcXhBihS#6W9H
z{SY=X{W3o9-wzf^y9cdGZXc_4ECg4Sfz)ssNX)gQ!i&F-2mFh-ffbt8;HN~>KLBBV
z5R}y&KHZ3A8uj%(@QnFX6?=R{^P?QA#DhZw8fpih96g&xsz49a!*y{LoLbRdOwvEB
z!nx5uflBn6p^DFTOk&9~#dGZ3jxXCi76z6}?0J`OtaUCGeHxTq^$6^fZjTXtmx!HW
zZDyU)1Bg+7c^sXCho8(fAQnBj*2@?3?cl)J`L)b+Rho;_X)H&sV<2#wF6)*Z$tE3x
zsy`ZH*V~KhmZ7sktu4DDvmv%GQe%qb0U;Pay$)3=_D#sw=pkR=?jK|xIs7L+&-vcq
zJt3GKC2;xI>F**K$4>iqg-SXr9$i`QU+=z3v7yxY6C#lF#`g{^3u9f>PANpb+xsw`
z?hs(NzXwdXxgpv5zq(S#(t24#jF=M+<Q>AUo~$(CD2d}4A+aU_3zF`HGlC;6o+lXz
zP+RVuME;G91ri~yRL{f~oQ)@20=@84$E3qf4%Ay+@m48+s5UvFYmlPwEL8O5EC=S=
z*zMElhp^_3VaL*pmaS>R3ys$o5(+gS=E~j=VK@s=`HyIm)S4=PUX01!xS~u66Lf--
z5oSEmB(v12^Q*9tWQ2Gb)1xO(Rqr3pE#zzP{gZbG#@pSkb9z8bm*BqT<gSK?x>!c#
z!wu<RzrcQ6zbw^n$eA-WT1ojJOL(qO?BE*ejP8j)@QrE*y$4Eded%a=eT5S10#QDS
zK{H?0ckfz`eNPc`hF>o4L&jYDYc39Oh6gPL;-8Q;0i2evTSv#<tr?V1oB$`Zsl_p`
z_q!T>y-NBK$Urt}oWFrLS#)jKw+lG>x1jNjTJoa4dG}p5FKw?)o7Wm~Jf3&4e-!xC
z9Q|kW;yFnx);xW_Wfp=<pK%-5Y?+OJ;8u}3wGNqyg&y>yhg%k72WbX13};b5E?C$~
z_y*b#(_KJ-N<kq|d7_uog|qSH+MelXn)D*4=JM`8e1nK|RLaHzU_t1O@E2Q;_?u2o
zmjyvnZY!34I()|&`;f%7aJHc;0KD6{X^1*C$_ZtU0jQ=AhGk%j!c)zxo_U|;e4}Re
z-8LTZk2oM<ew+~+zk4#x(U_e34jH=O>9^(|C>1=5WqnTAqdVw^RJ``gXPX1u#hLrF
zLj5O#ZAQ~vb5+$_8@?(oP%iqq)*kIjOZ`-(;p5i2UTH95BfG`1>c3WlZv&8V!U1jt
z5_>7_4%xT^YCsM-gQ(Fc0z(&y$M$~I@C{TJ(tJo#rmU*ixSQ0reblo1w^cU@FWJ{E
zNng9d)`68;fBI*MNGFqAn1mdEc)kW0Y_x-->0FXUfPJC1aM0x|SrPB}@vo#XciG>W
zj3+HEK10tKxT*f-0)R@_Z!W>;VdcN=c!i6FjRJxq2kP}sDN{}D8*hC9zG-|jz;Z&j
zQ*sO(MrgFiJ-R)UM0!uPe9%1}>pk0tpmQ(=2s#AvCLQ*CgD+AlVbOjOfr-K@$Uitl
zXmBo`NsCZ99o)!#JpJCmx$swtYGfEkMz^G@@-83^<T*Hs;51^n|Jd`TA<!9!d*$PN
zATyxAn)FtKS5trpw8g(=ofQ{C7m^nF{t%(AAByPM4)Q_aF|uOc7CuN<zdWzD@R4rN
z(ZO+MI_5?+1WMS~?>}H42==I~TiqRg4);v4O$6QP7fnc*>kbXMRnX1%t`&b)OO4Lh
zKrMOX+GD}vR%1YpEt80(4VDW(giuH>*E;vq25=HVb698gB@Ed`&4)}TKSTcu$KFwb
zU`^Waf{x4CS1ziY2Yqlr>9;Snd*@L!UFdx&d6mmuaBzobkjf+z`h4hf<@LO{A4R0o
z_Hz+yrY*%6kkfrI5gwS~r?oz!5{g=djIZ>=wt!#V$4{n*;7GrhbpYNvsgRxE+2=Vh
z4HR>HfD&e!3V`cqI;VU_+j=L^{9!Z)(y8>d<IG^TlI-sc9y}}v0YFN2GkFEaD(H*E
z-2mp5eP8)&c=kS*;kY)7?t~i<i09xG(h@V^Q(&%fFRpabo#p!rCOuX0V9_J`BUAS<
z#sS=RDOGdEuVBHWGg8jX0fa7B>WjUlk3Q;s2+dLc7-y@f6n_NvM6L1==H!1X#Qo{*
zP??;Eb;{ljOWz@BVAZqU8VcBnVpD*^uyWy!iP2ghVL57qLHyg~A;BiYdr%Ym201}6
z*j}M5kGXHJtB5o>BwWDC;V0sNVY}F;nAILs#SU<;Nr|O-j)%Yu@FTqr!HalM8fXn9
z7#MJTN2oE1w9#G9KPTFd#L@>L6pL7JmQ@8`ezBk(idjY+^d<FGv_)N`x(^~c?yB}f
zz<=U(xKW(**}LV4)+G(K4A7j3!_dB9ht?d3p;9t1ws31cW&i)Q_vO)SZtdIcX-}Qg
zYPD1qt(;a>P1PETnmQN`5gJ1k#i2D9HII?@bf7hz8Y_mhA_OHxP;*C4qr?zWf>1&e
zjUb6gBK#g5&UxSU{qy_pTi;sWTC63KXXn{_-}~P8b6?lKuV%`owuD2<oKN*!#qYy5
zmo|U|Ybne_`Py(7E1X4~-{d5Yo)KIwh|Tl*H3suX*-u3`Q}7WxL}#XFb@dM13G;jP
z5@r((B%>S4XoNDWyo?1Npm;bj*R&!1>`mBv+M68r1m6B9gXX8Ee?G5u=bnagg%iBG
zb>Z1-*`|tu$;a)Lt1liD8`SH;6h6)w{PN&b{%sR`l0-CXLd34DGeX|HbMt(C-k+aa
zgI3ZT{ucUcuOv@z^3(=TJE#-B$O+(7l@LI=qLd#0)6Knq4iW}+HVX@CR%Hs$0;$cx
z27t#N{PxK^5z`J}4-e^Y*yKLSXbtuAe&DS=`j++e^*Kcq=G47^;sJ5I<7nkMo>%ke
zrv!01=wa)}CI{~s48=I!ne*(M7-{h47!7585!-4Pg6E_S7a~ddxr$cBu^G>k&WUWd
zFLWrgL^!qkVA!S3`8)k~0Q&MH<gv`{7`6(K1-i2HW_j^KYFtfSyH5i2%N%BAHg5(O
zC1;?mla?9wCQ{G%Mx!nxo)ejjJ-zyndT{dX<kp$3+gXB`N5}j;GB?~;+L$o)9;43b
z+6oZr>w|~$bAZFc+jDz|``x`m*(Cd`%Zk`WDceQ4S38*dt~<bwJEpNrFR_3GdqY(t
zYHnjzX~M}pjv(sop6sDZk?35E8t$f$T^e4fZ(p?^s;h2Qb0c)w-bie9ZC}>nsCNHx
zzg3j1V~~45wMo60`Pm;Gwjl9HaD@M0jI>`cFa}@DqZ^gUH>J-%q$m8vn1vm=TWV}J
zp~HW^!jEZq@AI)MZHE$-@VsY*|GL#RhmgI*qvVdk9aR?8k<$8+UpChAe;_0Xt~7v<
z3_@4QZhwtU_=Nr(X}-Mw%XUzc=X2DP9d)DL6O^kEr!lV6&&oprThT>c!sV_E5}~%~
zY;EPM+!7u*YJsuBe>=vspRWIuwcvWX>}iO(aOqitUL~WKuKDiF-`ln{hpG;BkIVt#
z_2x<&SnJy2N<U{~Q?IW$j~ImIfl3LvC28?lcF3s44IJfbd<4K2yiBo$?`w1Oy8lM!
zFJFH017!i;yngFHaCKW1mH!0mHU1M<FVB|zipGAuk&I)~|Jeu;|9>F<2pHOyChzJ7
z+(sDk8~8Tx`qj>G4x+TQw88z9y|Sc>^FX{B_Znc!{U1N-n$LU03<E=3!khLvw;rso
zXuR!fuV+DD5j!n7uwqf|?M6TqmW%}2q%X{ZrNYOCHhrz)!Ja3nbAs1kk^K6#ZpR%`
zZNSc31B7xWKpc!hqu;GVH<A3egxEFFM&J<}I1Ay*m$u#<BHZNWQG98`*zlc*;j3Xi
z!^u^h-H?GbC9eCXUsr8k{ZtMQ2ns4<OzJzHtXb=Odhr@M`!eERm~t4vbvALOe;Q=z
ztk5M>2H?OUfzbqj{cMtrKJuu9xBID%kOV+qw(#LH8ziwK0@#p8S2m$yp#GTc&-~5M
zbl67{U^Wc2-rHzd)*O9u{?5RY#ZMa{Ul-1<hEW6p;T})afBLh;k$q=IeNkGBC7|Re
zrRt?ch7sLQ|JU{?K;7#jfGkY|X^)2h)L!e7Ui!D)D>xu6<HuitoEbSL^jra8?x6fn
zn^X%{C*hW8_!z)<z6Mk(O9!5S6x@J%Fzlj@vQ1Me`8gjzZ#hzXHUWQ!9FX8+*Fg9?
zfIRFR4<J$Nug?#}52o)vq<ab|+1>aNNIFgf^neEd^sL9ZW*}0h|I0KhtS=F$nzKpy
z+d0^kB0c@v<_yQo_`G~|N2Kd(JV^inIz2Cd!v+Nokj)7>AdVg#bp}rm1D0`Jn~DFO
z{fah4hk%M&;RZla>LmcumOfyC@PUU|zAyyNbX)-_!JYu{|9hS9RRB#o4HR$RUqrBY
zr#tUswx{8|ZpWvGDy3V^?HlR}fkX%U^AZ4smxujBJBYm@=Ki6i6BPxhgynhf_57`5
z)4=^U;pQgsVjV55x4`KcL}?fkm|-G`6x9-Imoa;pVv1e`K+QpQYk+dU(12$ZJq|KV
z{A~Xs{ov_h29N%X;@%5bFHCEdmxA2NYhq3%g3^FW5yrxCB;o59OnCrbAY*pAP~UD6
z2-!kwfIYw*0!j5bH(-!>t3X<F0vJ!NKz)a~HXhiHZ(h+)0&>|0&)m2|R{_jHD=NF2
z$_}G!VyHk~0(h?7-MeWeen+kY?MBsPThgS&;{k{9=WV0Ab8RD0HM=VcV~cAyXWfv+
zl6GH@KfdWvc7cG1DWZv9aLzSj)`6Fc4h!fLgLy7UeTDQ7q#?I{wLKQ_(7yTc?>{GY
zG)VsQ;+VyM`3a?(e=yC>kNnql|9ckC{|%S*Pyhb+B&CuhOr0cdQAx5L%U(XC%vw$O
z?x}&c@S=V7dzH=67k+bnXj^{JmYZd1uT1rIjo>QAVC<a-kP3gY-9~JFjOj58Qy`D@
znMfp>5sBtFt+KzGFX$Hj#3=&OKjskEK$E6J)X=cT%C3NUe#vUVsrHObZ~1)|%5{LP
z=m^yEc1(|FrOBI8b2GG8?9S$Vq=5=zBL0MB#O{5X%Iz&}>rd#dXXuV2hL)9ZBg<f8
zafprk!5%wGify1P=_212Vgj}!28LY7;;Tt!>wuCvyEYC&b!6v%gdTw5kwyDB{gqQ1
zs-{`_u_5wRb`_+mR=X@?9w({XPJYLpqycs#YPKiwaX8HE7bB6a5omEVqWOechZpb}
z9tNH;gpr0hycGoZ&NhRg6(;t>WF5<7bqQ@7b*b~WjLHOGi4|WvR&F;AKUYV*s0<lI
z4QN$Kkuz_$AL@^~L=>f{dwyakDP^M85=_Q5<cq!g{Gon9^rv$vx$+1Zd7~tZ6;dW!
zPkR5NN7&oMeWzizVqgB{h?O`2#4mG2h{J?9?993ad;HU?^w3Zn)B~ayWzyrRV(#^>
zr&x=ViizX!F?nmTxMwd+--?64_2YGtPwJSo$_5T$SbGg9?qn<cfNkt3mY&B5DFoX*
z_e>SGk2$SFkV|q>zEKtnCzEsc7!Qtkvm$*|k;A7ey((7f81=27!;Fg|E-~=0YiqNs
zC3@HBCFz%x-cch|Zh#^xzYNFamuC%X{w;fX-O8RWuMA2_$7jx&^xRcM4X76fHSL4i
zQ52QcAg;So!P-zIow5p!W!Sa(P;{uhx5`_EEu|Vo9IaCI_TXJl=S<KF47*XRWm5!P
zg^I!9f)pLdjSwgIkD%kV!6)OrJ8NC_b4D>)F6-puYk8ySy5HJtKN4o8E0ycphlh_-
zBhNUpC|;~}TN-k-TG4yoKgKZd8t?ODUfwb9j8bt!uzJuFaVSa0vkGgfWtv3+$)*O6
z$wn}ZB+xm9C~q{ug!Ulp=y8L?P)C1Zyia97(8K!*qz8y2vSyGDbg|dKE@*;a$~Tso
zTJ4xDkwell5o+X{j%Uo5ZE5C>L;Kfe<)MDOKhpLz20fBQCA?2J1y9fT#`@T285iu2
z*p`UC{S*3pfEn#gR51+=M&${s(94ELoe`+Wmwg!728Xwk+9(Z9)rs^r1%zT+P|vXb
zu2Mg2PA3Lb8$=WvIi)O2H1iv6>DS=h^NkgzVV?hqpzke=O#7^VqY^`_yP^e2&_+;T
zM=i7YpX**nLY@3GPh{t#yx5ZcT1)5?L#LOYj`4>E#OsB*5BVN0CVr13i^mMqEG3GP
zI)Ak>*K-AHrv0;CEfA0$pZTBbAs!QP^!o`%opY|7wgkoRt-ltWY<5O}eF{^krH#Mn
zn2I<uZ~9<M8)~sYd11B`<L((v434~-<@iylxY{NwfG&@RK*?(!M8gC#t??*g%EK>d
zD<v5f6|y;$BbF`&d$SdWABF}ZaaQGCu|$b2l#t)G4B-}yWffRgkFpcYXm4T)TtlXs
zcNHf(e$+ooSN~^n`Rf*-7f4-Yf2OW(sc{@M%ij{(@#;Ku;>+Wt=JkDmFX<UX9arw>
zHo-gD`g<PW*<5eYJ(v$yf3?n6t@9%WCd31+9m9*>#gv1|Ph9y{v8O*hmAE#l2~WoK
zbT?ieA!W&;G(JT^<@igOxEb6DN|*_e8EI;NKXByi<kX$0qZ6>>o}a)~B=aUEf0+Zx
z&5-moJVIcOCLD!Y49+x`NN=T=wo7J<q&=ARIr+FIw<??d!xdWCIs(3MtE0u!ka1`C
z2L~=N%7aaK*_AGes&H02rj>OiONxAyetBHe*{#h8KX|-BVn3<W@3rjxAenl7p|*35
zvtcp%Q2&_t($rhbUR@nk@tTn-sLmh0S*2-((E9P-g}p^s9`yu_{u)ChHSAbPO@#)n
zpDJ!R;=kjh<kCnoYN3`;y7LSD!Ej4S^$`dJMD>F@PbWiL-tVK;FN;j0><9Ovjgrk(
z&mO~*3ne%bMJde=+_ap19Vv*;&@5R+b1myMTZ)1_T^Z`e4CrqxwXtfU-oj|X7b&;*
z*q2BYVVi7-fnjDi(W?f<_xy(PQOi?gXa(pXl%$RaV`b5YHx9vauIQ9fV5=#6+nzji
zx96J>+0y%AzYIE#A1SWUtG82vFpQ=RPW|rj^7-ew`3{s9&!(YhWY!X=1>38gZJ8yr
z!%VgPYF4C?4qvqcrZuqw@7D;lMKr@NYwiRhsPC4X2XIr<R*LS7uZ*VPVoEz4Espr=
z{Mom^`s4wsLu9bpdIERE7qJ?e#a9(qv)aABf;mxzGsQhy9<gt;`psxMWHM0jcio!+
z5mia;{0$Aj;?r%fnb7j!Cf&jg-$J+6`#ZTkDDTS5;@Xv56nmY#Z_ufs+8@81gOP2$
zY~Nt4^5<eapO_?KlQOH=o0KD_Xj0zp&UT{K?Q=mMh|pix!*jM>xxOMFzEap#zy%$s
znO)y^jhV8{5Ham8$&C(;)_Nx7B<(9RgCI?dz3U`UG4~kqokntKmkx;@rh!~`r&zJa
z$607g53;zG9ot_!kz4Fd^y}AHSeGuVI8)qontng<K!i)7OwZjpJ4KV8H)SS+7-Q3z
z(U}uN+9rm9?eCVLZlU!U-l|w}0$sMB{n>9H2j)`dDFW9r$34S=v-o0Z17VJ42EsXC
z4`X}}G$_{i-lXVp40+|5uhUd!Im92ycflEKG-6s4;&4PxGN0P;U?5h+JO&*oZ`5Ez
zOa&zBQN5=O{@LILZult<WyM}WXOtQTbCbE<29FCmbO@__3Zeez>N+$hW_EYwf^>F!
zvbo<V8xuo&I2?ExuhgQJ+M?or+$IHo%Lv*rwo*l)pA4$Bmq1&Z^w2ldl`9waXO|`+
zq)w*N8s!e9TB*4?B1`uL$4(bL2B>2DGR@3cN4rl|u6`iwo+F2v2y+z8%b&ut@cYo_
z*2y$3NJ1@@*=QZ-cCssxu&&}9#0$zQkF_BP7p(8t9hQSi<E-o_WC4v`hFq!yGTCxx
zM?mq?gF1ORo~wWUG6I=4z>boy9#tz%Z_!bvb|&$SP6vK5><{e{D`ro;z%@5N&9C2m
z^N(}qArw<o(D*i#*QNQI%L|5QWk9+|@DMwB|M|iF3#o(+eY`w3^)dgvJzvYD=d62j
z^Z5W1bd0kJWGG80%uN}<gn5p_SCahHUHA1c+r%Mu?#ZDnqW#dsVok8Q-#do0O^<|B
zXCjFSO2u9UQKgRva8f7JXY<995G1BW<~Cyd@*GtEdK<fyZH=V-`*<yR@JVIVqv&C7
z`sh<xQ-<yQ<}ZQmpcBo(h+a`vhKUfOJLsAhhm(Q#8?E)-tjohmjgXso(S<i$aG09C
zQNi9G6!u2paDHEV>3%9H=)v;avcax^M5e4lsi%6GZyP6O3h>Ph8<QB9AQO9x7IMv5
z%P2ZNtIX!1E$mIo^R_Ym*rF2FlvfSf&|#mnKI~R*!gvYnzD-r~f2Va#9ENZ=R4q9$
zTd&x8R(C#%*rzVz{^HoD5qRljJLjg4j;Z2O`Uwcuq`OkbENoB&`YG?z7Zvw<ZD<S?
z!7gC!XLoQeX<5e@S^~r!4Pg$ZJUD4qhxuTcIJ~6|$5!;V3N*fUdF@@IxgXkaplHZ|
zi#=g1oI63nH8=%0>FsuwRhtH-AOvZ?hIbW))35l=NvEGz4>wdD(AAb<>Zul2H*nTU
zs>`*n&$TS$Tg+n4bzouyJm2Q|zHm{4JM9sM=o1|2gOE(OhqGPQ>7(U##jP^~&=z)Q
zRm=4Le{&-Aqd-9*ro|w#(S+ey`R*2B{BX8drzuhE!&;uDo{W_Hab@lLemHl2J?gMp
zD%AP<z12lT8xUBipiHQtO-(AYHs^1Se^N1z$%EJ)bd}k-X(gB}#LzT<tGYAit<$mL
zO>EOt_Rpalb-o`cu6^gedG`wu@4LeWD1)O1oK9PUgZ|1G!#|cidfX8CnmhcYjd9NQ
z#@O;gUH{_BwSJ8ocQ$ssr|BY!6L>bJO%3h{w>I|jQ2&5!nyuygU0e0K%=QTJl2E64
z@IIJGBx=fK8+-L;eAaOz@^J44tVLY1D9l;~`s+rogl0pbai-_e2^|PnlBV<q^ddgs
z3Z$iGY_h)CtM3z3->^95gIf8+qD3T&L$SLgL7mO<jgPs`E<CG;kaAb`e9sxEcJQuP
zPEU$LrY!>-Jy6x}budDX1Fn|PPOd)WH3|ekP=paW;?&PW)IbI~7D8-|fWIyADc0~E
z#JJuVVqfKHT`6ue{{`4JXd8`yHdaod*Ws5N0gN_6o=e%F^yvQ2g-;L1-abmru-smA
z>sS`pWIO7Yt%0IT;*#P5i;GsjU+VZH%Vv9unU&U)r1K9Hek-LO52d|p7?jPLC@tJI
z*i_I)a-MY!Kt|4f$fJn{D&<hr^+;_iEyJ;d4`my%MT(oX!4FyA>dh?s08%%d6fC^I
z9e}mAjAOo0PM^QtppKGSKVSPoNu+~+n<}-(31w0Lyap={dRRl2_=V{s9T;cc{QiD8
zc+j4*b`vyl87xSQuxwe4`8gtDL3SW8A@cZKhg#1z%43lc)|u(dRN8RSFa=!4jf3^M
zq=GF39y<D0SHf+U@91atqg9mqG8^vpp`aDwD+}$MeyKeaoV`Q#NHwEeFv(qQ6f6qV
zpDw?ene64&su1ifiF1@3)*-J4)b7ezO4ekHTq=+n2ttGcrJ-#ZEl~++lJI<<UggTU
zib5U5e7A!BQM<t^a>mFj*TnkE*p-Pk{Li9TN7<r6|DIWUugkGC%f*b!IjPHsPhT@i
zmL04b$;i^<<QHXT;RSc7i5Er4+crmQ%S-z9&jt@H71$@n+eK>G9Ao2Us;$SEwiCQl
zvV0g>B&4kU4Rx%*-&pSdeAoLacS;x&d}uuzbYswMamA{)Ww}rOet_y$fo}~`)-A2P
zeff5{LNp+~o3u2FOO_S*GrXDOZ@#cAwtr6CPJk7;D2PNV#4S7)Gmkz7lUwG9%jE|6
z=khH%74|h)(S~jUN4KXs-%eXZaDfYQi%7xGPw&pmP0vppq1xqzw0pA_-vG4_4A;iZ
zv9N6L-vbNb)Z4e|?_kMm?U41`iF=HLw44<7BV7y>@}7Zao81=?_POmVk8{a~53Z*Y
z%i2y1`MNd-5ke+ZzV?2LF%9TGuOjxbRKi=Px$w(;3TXu-G+3Ovmo2iwdS!#*x4Pm#
zNn?MHSRR3SggW+a)J9b~_l<Y83o`si(fTyDs)0aK?}gCrVkN8gDybyM#}Djl<fiF9
z{rB@1*nw(ATIakNJVwu4U2=-rCGM|&<8dNYC0FJG$3N7zA{3-}h6AhDkGrs2(2rIY
z6Jt{anf61<aB`DB@BD-1Tdza&R}*rC_<QLIRj&GA(ixiB`_&xvlBSISb1||Yafews
zJ;Ym#l3P8pak2N&w}R=DijTGwf^G+K&P<_8THsBGjpX!ZL$Y1PUd8J}BG$3T(6-It
z9vw^<TF^xM=qs46dtt3wPfoJ!j==Pj@lm!vvAybG<$D&a8xz2tvIMY>Oc`VDIcVTO
zYX$#_Q9xtKC@#XNQ_vU5v1r`5JtciB_Q<pvfxs@B*T9At&%97})$fUBnZEb!Nq1c!
zM_mZc;aC48tgnJ!ZqDqrToB@0XEyro%t=n|QY<5fpEpiycO5NUnOtbsd{uFt?>}d-
zdZ~goaUG{O-sWz>q8eM0PgXg*x{p%Sjk7O}_HgTlyPLjE-=yv@eKE00TmALBqnAp;
z3C#w1$2i*>=U)0u6l6_C*5}MB+zigqh#mB?E97Np`LrodXBG`Pp5m&5qHjJ9XpaHY
zQ+>*u!z@9+IieY>csy;%qTFTzQF{GN;)m6R4)`K}>d5V-W3IpcEjUV#HT8lut(Q!M
zCp7oJuGv|Klo8(GovAC-@v$w6`FPWER0Gut51~%%$sC+t8YSj8qLsGB`rU@#w5hlk
zVNu8YI7ffOEE%si99lnY5pkK`LjVtMq~@0xg@%oWW>81wIW^87zc0&2C18WLtjMVz
z)#)&-RohgG$I9vo+^TMVMN34^vJT$$2qYr+;mgZjV&mGy3iO%r*UeT9?e$`QmHim8
zo8&mGtoIWnx6|IsJFd~wC|V!vN^<(hpVcZWc*NeyKeEwAw<wKr&+K1M%&^_t#sTn)
zTD9>nlSjI;4>tGs8d#rfQg*tciM<XlkmT85j_hYfj%SU*1Dek|wN5gmgGUiT&ZB5`
z$2dm|O^BgW<~^zPAjCT;-7wCM5;Y!AN}DcfJ~I>@=pDCUS;s0(*zoaLzk1x|WL~f^
zv_7WLe%k0GD0m`AJ9ook_$q%Q1?*+;ZAJ^WY&~n!HsIMJXB@&B28+TLvi)>!SdAYC
z>j+(u(A=hvl?f%5hB9SMR0&#6<jU5l7KUTuUy-=SrFo@Itgv#>1TyHV4|`e68%KS8
z{qk&WZY|wuAhMj05P|64&>hF&q>PsbMnl&)pu-oI?0PMQc(JmR+=)gk((x(5+i8_%
z42kNbb{Q@U%`5JXqM*xtseZxy{B=i0o_fz`(~jK!>kthWnFaKRXX;ff^;Ig404Mxa
zMu`hVFgCLMwR-!Q>#MyaDLQ3!$-adN9<Bm&nmY)-tYMGT(4yt~LT~%&oW46-w*2zb
zrbd9Hv^!s)cCzE_Q04kjrSpQmos;j!_I(?SA~W30IVF;s@Hc5}oabn=4c8|WKTLEv
zDf1^Ot|Kp!tHz3?na?M>;fdyX3%sD=3Dyvfz~hDIH+V09=+<as29$SZ;u_(~<55Nk
zKAH(>q<yfOSj@9(=S<<a@p_Et)0vvs-@`@(c8qqlp=~-PO^ck1&)0v?j?E=H>{;WA
zXpZnZ!^>PBFBGWMF79%-;xam{8s~b6$+C9F%tAjTH@Q4Wm^&k#izY|&9|e8_+4)^_
zYiA?VLazMUJO|Vda84}YITV&|AJj=u-R0x<XrUmtEap}43TtX!)+mQoMAmSQbEdPZ
zKd_6VeC!oD7o*CA{6r0xSlyxPOZ}W2?36F}W3Me__&O~OPI$c=UdXTIqRF8^U09yy
zfgnLRg6W#MAQI)(>gQ6+DD>;)<xSN*ku@HP+WlAIx5aexDB$EHnxC5TZ^Prd7Q@PK
zBp6r<7K0G|VU!#?8$59G7()&DySE_i+JQ)Nx)L*pPo8PQTGxkMs{kjcj2m_gyI;$6
zstCaLMo*R4OSQ{0G<&V9SL@aby@-+JVbxI!zpu0CI7LI1n2~wA)Oq`%)x}$IKO2ON
zd*0H#QC>l0NOPFFO>bK(A*Q7QqFHIj{8&Vro5=2W!Gi102wNA8HjF1=7^#eR$97FG
z&+?iaXJ)*N56~0L;<cT_*!9OFYD-n?JWK;P_q1A=AHEn*WWFb?JA@7sO38c#Zmy$&
zdCB;TuSSu=P#S~QzDU-Ko}0VB*!n@;eLXHK-~{QcQxseOMw#%UXq|eS@pOZQ@K0{(
z`09rl(~f?4R+Kh%D(Ou5o?crDe?%2V;|?y6A7w?Z8b{ul`6k@68lrG+uH4Z%mMa(B
zH?s1sEAZF2sIiP{Cp^0WZtYls7K9zDlxeX~O4n$c9(-R&^2V(YOYTyI0f7~<S>DY$
z<8yGsT~TnOo_CIDXSg$6BQCDNc&Lax7|*zvm%v4+8f;XAH^Pj2grqXHDdE!!D8jW-
z0U7VrY0PP#8B@u8&o^pCLbzVx8#=Y&j3Ga{iAS+rjhWs`J$ER2>x-=h+ZPwPgX0ka
zwez!26<}~Nm9%^YIEuSbB8#<XoJ*rZbi*&+CvYiQDK-$+OPxLNHiNZOMc4U#8>K>0
z<Mq%f{mi*_+u9ZBa<j~EG(VwPy@^$q2NTHWEwt7fCt&cPg;I5c4(9#qXRPH~*K1sw
z(mV6kNg(g3IMOjG_w0h$C4)8WK+ee>B9Z8J+BLnKZ@LC^@DV@s#1t_ysb+Z17#Z3C
zNAtzpX~wUP^-&g@AI48sG>h6GyGSgo!e7{ylc?QgWo~i)h;g!}i%i8BxIR`V->7!f
zg9&Fh3Yqwj2*cjhnXmzeh|%$=62Bb&mS$W&6aRrtjVgEvV~dFzEO+|9xSu^b`~3A6
zR2BTQbEVv1E+gtqk^Ot$aauXaSd;O})sH)&jf=&0YiC(5N?siA7UcMJfS87ty9Hz~
z+za3ye2x$4GOEcM`3z7)1F~iUIax#cwwi8T1om8nQud6(t)j$E$gfWww>Ng#+fKem
z1!xaC?2+ERHQK2q_@aBS;|20^7){<tMtK6P8~^bTTXK#@Qkr6g|02l6w!m%lah^yK
zB080~M7bb+)(HE8xoy#5q2rlLFNxx<iF0s|0A&1R@Xi-kT^GDQ-VsL-m}Qh))ZG!`
zX)htQ?QD@iwuclrkR6~5PCw3y<e9g87YB;I@l*KfQ&ESRHlsrchlYB)JvQ(=85@MS
zWs@)6zZPOO=f9~_-|B+=BO->rUF-VI>23jbpznXN?SF`^1B&3^|F=WA@7t324+XMq
zl0Sr-e>?YGv*y<Ao#EfF*!!cAm;b7i{qm!cKc4*bqvh>C8aZ|8_74@`pMErQ5c8wu
ne{WCp|KHyK%cFPh_jR!`W0}FVKQ3r(nu>*~wMq4bKmPn5NG~2<

literal 295779
zcmeFaby$|^);_ElNC+q(2vQcMbV%12G}4WfAl)D-N{NDufOIJGAP?P0Dk&kLbhmVO
zf9rPdnLW<CzxP%C`yI#3aX35*H$3-sU)NgaI@ftFp32GGK8;O=edNfI)8co2lZOv%
zM~+~gJ9QHN<vD8!DSS9;D}P(`NP5$SDfo+-p{n?OY3U;j@cPt|<44JkoIt(={s<l=
z|MT^&qjX1(egAiiBS(B696A2)uaSX|$bUib2f5~7A2H%F{`iX1Z1Knbc#U}u`O<1U
z7GC&(Wpzi*_Q;WQSCBtP#pN$A9yua>MEo}qMW>^){aE2d?WNp9$8bMg#kg4b2%9Xl
zaN+XE<B!DY@2m%3x_rJrLU#K1sCZI+zev(x=BKP=8}CRzYCXNkAo`oWrj?i#&139S
z{ulk?7p?1iL+4{-UmF$qMm!i;;g3n?wV!TFE^y`;Z7ts~Fdi)1^N&A6E&S-nQ4G@%
z;pSL@;GGyQ^Byw$L5o-LZ^us&{Ognd_Y2QuoZ0siv2|~8&Ru(Fzx*nX(mv?dzQbRB
zoFM^$0mHF3^gsXO|8g<B*LPaNLCFqOx3PZu?f-Z^-IGVu3g-!=MUaL0zwiBje2wrN
z#$&0xof{H|z5e|1;}P|bjIj^%!;!aaLPB7G?ytRj*z4=5sXr;6{7vDI>qjkD3=23X
z7<l$)x6j{}Q10YW5fmGB<m1Dw{}Iog6UQS=HmpMqdp+B!Q*5C}zYrbb;eY>;ZA`F$
z#V-;Ldwqxq>|k6!)FIbTINkvku*dDfmG5W!*WX3_Z=QG*yvIdQXV1jQ9CjDaVe}U}
zk{F<4J{@`^N}QQ&OIDcd&Pk$Hp!aJ!^zAr!ss<$Ae0C0wB|Fcdk0m{ZX-27ojdO$i
zRcofdZP}k+XcI!?&U7ss)u3dqE47CWadhJGXfy+lPEhjYTeO6S+$M6*;h3^Y)ExSl
zzl7_>U1hHR{LTMxzwxB7OZ7sY(;W8t%W(b6&1k8^?od{U)75n6#SVMDI9z{ai6`Q)
zVMY()y#HM`pTl1N60VmRv1L2#UaUT)NX-83ePFl#Xov2LfZkNsJQ)j`6?R*p-~sh>
zBaHcySDEVVcEk_6J`pDv*gg>*lN8%=ymL&7Gs5kR-S)*Xj$DtOP+e3thBT+{6z$=j
zz1(BrhO<rPHc2)2zG~Il%V=-4hxx0S;j(|`b1c1lT&dAX|A(#i3wJ;#6R*d>R((Xl
ztwPc}TrZv;Sp^0=RjR|TvOUo|KYyulTvo$fw)Tj6;=uaG8QQ~rGf&RD@!gmaWEZPK
z_HG$ZZslYcMjdMN#1EfXA8=V<vFIxt%d?yMN}yxyvAH;0molu9d0+cAnrCo*8vFd|
zxj`D-_YXyEQP~c^jwOPys|ap8xXfnNW;>b_zEkzw9C)FdSi0Vm(j!n)HoK3*T$0&C
zN|A__`yGjXMHxru=ocCrAFQX$jf6>QUSNtSG|tm%_Wu4Pg~hN}XS>-W+<S5#oPK!T
z_Gg2haK!PNKnik7kKHA!FE>d-AJlBivKxE~YRS^CwR`*};kNG;$yaZ863tSJ=Zl6v
z9K)AFg$sGO`)z1-DhKjRJAeMhR+fL{c8M<*;Z-kEV|A_JfOFT?y*_gf^3P^g;_22>
zIN~xYr=DsS+%a2r9u44rx%W-aH0HAy^*$c|YKxe?`mFoTT-dI5+tgc5tHoHC`G~%?
z$0xjTunaNuK68EISm;|*-q8<Ginv;uXO^eadEz^46@Cv8rvAE#;7_hQN3`&+mDAN0
zLNP(smNwNil??6SP!(+~)<-WN3~ttNSIiX*#&%zynn*96C!=&*{bCU4u{Wc`6MEM_
zrtpF-kxSY)HVdVrDAA2Gl~SkA8}kl5I#$uHqC-*SFsDAbtlJdLGaNOzd;e@Y!wq3t
zPv=wDw2E>mjl8KFb4~K~o=9C+5m0I+Ka;}BdCN3)hO4Hu=<2U-@#PbN{L7!B2^9F<
z8(C||@N)*ej{D$K#VW?vDT>iMJXk8(WN>^&Q)t^Pz+EMw&FLLJ!s)U)d1f9853A|q
zq*pFjrmL<61J0)5Jhu0jrw7Xq$PDk+@4OGO?W7yKXpxWhV@<LDL`hzN$I3$FalZi0
zH6HA<5IflCf;%lHy@96w%t{f;<nM9*T^0Q-a%%B9&h|R-#W^P2jPiB$F6&x~V2LaJ
zMfNx=-#(j)GUkQQ$(fMS6AsWB8KQEUco}J_Iqx@yTlJb3c#~*5(Nt}Gd35wx#s1C$
zRoQlXh7THzwpywt@!c5o5bASX`AlhY{y1-1jtm*~vocc&#x+NplSlOpb80DF%%o{d
zGk477i6itLO{I_Ws^G9z7rz)zd^nLFcEOV6G~v%4lRu+~u!v_`!2oZSirEW+ZR5g)
zvYnT6q&|M3k-4ZVawb-nY`LvtNr&ieo3^8s{6tVv#glKIRXnAQ4Oi5TWYxdrv^|wn
znHZ)W={1^OvRvPoxmZcH&(fbS5}$RP?PFO@k$a+ML0#2^o?mjfgydFer1HiSznKd*
zE05dV)H*NyVm1&?z`g(hW@@cAfSd%5*89cQxP6YPXQ7elg(Lo}n`kbFZo{ya0?Wb7
z4s}y+qc}INlFgB4!>zJHTI~;bY8zN@H+d1~D`-sWRd`|1D67?{Gbv~+(o;52YUrS)
zxw<c>oy;}s&R(n)+Rv&<z7=@kyo})1SWC8H!(t+{8@=6R3(Yn4T)Ojv#f}SandeKE
zzC{h^O|{}Q<y7MFdCm71)7Fmc*w6R9pDOe`hI!T2W4+r*cXxA1+@m&-BA7wH*DOa`
z{scoAcan6}tJvW3yMa8*6MYXSVuD>XEXRwC%6BZndF@T)(-=H7?|a0A62Ed7blWg+
zM2_RuM4W8?&gxX~@rs^2Qxc}~-Q^&)nE^&d97FX~*LIY2lmYj^jLSl47>}a0Py=yI
z%8l?_g|DxkF<{`TYC9#^&eYu{f;PeV`m1%W=gD)%U*6o5X-_0IaGpsks3>{3B3fY4
zFN#ZComsa^hH)igygI06!F{8c;Mmn}^Yz*8;lj~CoQ5#w=6R+<tw0`Z8BLLxJjkw(
z=*#pPy!iC)(6_2g_LVC8=!|s9S4z$G7RZK<<^(RJM5^PqR|UzucBndY+w07wTbF&^
zA#C}sH1TD$WU`obWwJOe4vlp!)lyN-m#j3|^+BAYR4=fg5ZvD!ZArNOVr-A1(us95
zxPQcD4^wDUB%IS!*}*Xz-UM54P5c*TkFAEwLt#@5yRP3Nj4EEZuO_fOTpp8B*=9e9
zu>kMd;9$OZ0dH`By&%}+!IC3e{^W%xQXV_KgI`<ZZSIX9L|fOKuVb9AWf>9J=nF<x
zdeo(`4N`}Mme`f(!EE}z-&jM#BP)1E$snKIP^<Ulo~O*#sl;12KO*_d`#lkBbzx9w
zb#|+IB2mYEYn(;D=J{o6YuFQs1(8}=^mC0pej?$J+LR#>(9C3%yB8kp@8I~{$VT0%
z;7DxxT|g(%!U#jcd!Ct4)&FRWFQqfx!|Pf_9Ool>lqX9>k0yzZn#??F574`U>eAy(
zSCAFR%O6ge>!R_!a28TWkqHf|@DVAC^VsjVMN_R5H5d&8GhD|RhdVSZ)0XziTV?pX
zS@mnYAcPd<U%6cCzHzXxbM~6%xbU%49500vFe4&0yc5JNub<xAaX_yZHVK#|5a_V>
zU2ahfxQ+RX8RN6+&}70385OEyw<8=DN;mFviCs`o@Qw+j;PXjIFJdrYScWaZH~dnP
z2`j6jE{H~~0#af`qwQ2;7;0tQGDJUcmxs~5997R65igH>W&A~*SKL*paJir>9<Con
zQYN2!Cf`lCm6*^3kM^y^R|qiY)$`4woy1&awYMgOd{vK5tCVjmk+R$qCgm`e+l1gl
zbdE_gJk`GPG&iotW+l~E`w7bswpwKkb7DQiB&jR!$`AGyhWQ4!WV!$qR6a<GIY+ru
zK5-^Rq1s=*)OoGG+_i{GOyxF}y<#|<p+q4B*Ov^E*6CdikSj7r1NnS-Y`?u71+X#u
zmU+E4Q~63k<UnVrYqRv)0GiB2*Tt+4l@%tpx<*@?cde>3v(lx_S>|fnY6IT@-lbYa
zW-67LI=o+`WioGJ0gyAl&L{k`RI8Qeh0wl}wC{BLAOskzE?wWmiTf(LWJ2z)o13FA
z#Bk4>7fqpPlwWN@$oxI<vzhCR#vnGidG6h8^2%%0Wh6STthP6*riC*~mL&>zmm6Bk
zb^~l0e-|>kGH-+-?md5<@|iA5RDZ-}Caac`(N4XGq*<dq+|KGW`9!p>jC`nRlzG1R
zt=WP>cbYQ2AmiP7md}-pgE*|$Ha=ofwXujjEY^R7uB>Ni?Zg-2pD5jd9pXb9>vU1m
zV{fhQL_%}f&OG^ui(q*u+wIh<w)eIZ2KB`YWqbxITrP8Yoi8Qsez~-7d+{VX9f0av
z3B`S~5qDh0YO7&!+883iz17xen${#)+4ZEdZIj6_qtB$OfS?ddeVIs18-#^%j=Sew
z<Z&{APl~M-k$N7utkoSJDS6M-wQ)JBuQn<Yg^BzuqWD)L?6~0>w>w5V>~XN+@vLm&
zhJ(_me$W(v)N9U7N~ie&qkWC9Zj4~B6gt>yUJU^x>$Riob4`ypyi4y?f?Uv4ix|Fi
z^LZW{0~tShTWV!9|Mm#Io6(|afcPRErKg|iMw4D{u*i~^#x*v;kf`<=&u-3`aY(fx
z%CO$wn(#$J_-pgt{5m2C^V-XT{tJnQ4X?a0sa#o}ld@hcf#+vm`ddux!Tv@$^JZB<
z=*y8ECc?32z21+dmL9J~=yz&4p4Qp^8uoInW=J{pL&)GOW}Vm@0<ezaa`ZkYTsGz@
z1_0pfzOLJkFp5>XUZrR?MAmVBa1>u)wS~-~Q+maLJZW9MHTRvp5^I%RUDeIH@O?MF
zc3!TXd${bU`AUo&!pwgXBL7KqT*gR2*C<k<Y*Y+*w<i-?4WFN9znZF=b+P{ic|ibK
z=sZ<fHu|%=X<F!fZ2(}g%m$|7w{EQQ@(RzCtg!QJ8t)npaF#Or@SViF5bhJMXPDal
zMK3R&^wTrXXh0SM{Mp%O6&y~y?nu+{6?t;fyDpeEgRM{{aIIst?3t}mxz5hojLPWv
zH2ZA_V`gQKNN!8*k6REIJbdXDP;YCqn<e>FETp2i1WI=1i@UY*4`iuNuIU+PlwIFX
zuL@Hx5>8Mu=z)^GZkk<4vOLr$hDISESy1I}M6#es)31>!a$6W#Heb;dQd!Q@DC|~d
z_oZh_?xf|>A}E;{UhgM(ymW2^kVIt)*vavQpujlT+YkfxD!5*HDR#bSCcSaEB~7EC
z<;~4!20}jZ5D{KcHVh(&#a$&^2g&m#K92VvpJ)Bh))E?yeb;04%k5!ExsuB!@LiUR
z2`a68FWB5sHHxtpO;Ju0O;ty#Qg79)l-KIg3&l>Qv--dxW>{l&k1k^xQZ>ZtLtvHi
zz5ha-FNbSnNh*k8rzDj|_v2%HC^09nsy1BQQrJSzKCaiOAuBIde<H=23v7dLi)Mvn
zgk$X$LXxERaJ|7Q6+vwK<a(m!r@E+Gl~|JI_Fv@+g3i!gbqc{^tHy67VHad~Ocp}+
zYfHX)uU#amQ(eX<B76vnyz5>1wvVM)aYG+axo_&KmN;48FX(CR&M{J%c}6iFo-kBJ
z+;yI@nWz`a97^QQ--t=sM-+E)8q~Ng*U^fvC8!>yFB|kY*ctSt5%an1>#@HQ=WCk&
z{;DgS&WK^dJszW`XtIfhbgPg(!A7Cig0^<^eLOMuJ5trA99{>^j&@HFlci*23cDW6
zL&UVlW3RR)TQ1dc$_wr7wXyG4$7Sia*POUdtmm&3?$cL7O<P4&dTU_Gp|r~<4VV4F
zuSKg<1jbAlwHIuqn&f+P9|U{7(zBx92^E-pbPVs5R*{`}v0ffZ>e<ofs_&Cg9Z9lr
zkA3S|Z-0Esn48lz&C2>o(d-IJZ{ix}1J?oCI9D6hLMvT1Er7|D`Mnkz6UiF+*O=J8
z0L~_x7%<EE{8fKtqFJ_Jg&U61x@%qxRYs^A|4zxSeOHDS^~skbLbd*GLO87L^J;Mk
z)qBbvM&D9x_52<HyPzf@?ZQrY&mWLX%%Gl9qE0$4dwX7yeCmi|r-aN_XTIz&utf;<
z>e)_{`SB#V7oY_8(l$xvQX-48t#6MrG%QOwDM-XHbPl#VTlYvM)QapL6b(W#V#nu^
zfYKiizjUA;TH-P6O>)lOg|+eSY?qDV+w)vzs)fTo<S#oRpJ~pJ>3gG8blf;8a;nd1
zyzP~Ibxpj$G({$N{FMf3)TH;_lp9HNouINpb>^=1Rww#FU<A7nN-U@LZHyXucWq8{
z1DRgVDNj|;Ys#+}xjt+_KJX^pY^|r2Qz}cwZdME=P{1W5#wL<>o)J1=V{~0BT02*C
zOPc-pg_XE$^X}od0xCYCY;%1W#Nm2MC=tdda%8^<(vC-FfB5}2<#{$@bChfxC4ytr
z!}ws^TGgC4x~v~4u-;|0)~-U^3)O)vIu7^34VG@9VK2gpx8lL*&+TxeSb(iD*~?0R
zoE2Rt%BMd`=M!RrV_G#DVRW{VA}=67s`_NC$)$kdLa9&YK)~QZ+3XQe*{S2PmkD?@
zv33xkmfa3gE)_TeV6o$KfsjT?QyeM3p0zud5Xj5W2NnBP|7)cbWtw7!?t~YD>gH0Y
z1VP*96ntEoc3*DR5$Wtrs|2r=?QhRS(6`3*T9&(YSrpH`+-nv(;IFch=23rk?s`3|
zbWZrCvf3GW&ucrVk%vpf9+>q@E<pktk%j$3#1UlZvkE+7Qk*9er&oNOTn+Egmu*|-
zIk?F<;{EcXdI>u`(r*lBP0?(9cQ@fH>)!Snj@$OC_=aWq-n!k++h7^&Cz$v$8|>t)
z)N&dpVgO>j?}%KqRq}jBs_8!**bYbjn`6JdibVNLda(}<Qz3N~w)WO_pXmMV&T^DU
z5g;QUgdv*BM5<;aJ9ZC3U0Mm1RvhIsatdC%Q{4S_3Nkw8d`JlQTWHwjf^ztKuI&Gw
zGLWNL3+SklP?rC9srE9r9jkUFl`F%^v+wmkEJT{7V<{==v}HXV&LAaAwbWSrh&h#v
z)Wbzub>ysGM3p)z*fVMM)P%<B?Kf&oNj67fG<U+CsRG)=>%Xjb725k{^mPb27Cd+P
zH&^(s=Dhw1l&Tti{;Y`<XKavteEMjPOx~}u*PiVc369;&!j?iA`uefCZ3*dzMyn)A
z<7il9-L#nmIEi=ZcA!+gB^+_9ditcdwgXP10pDx-%tXmBCK?}Mq(moR6mpxA)Txgv
zGW++oRYH;8_aA;1sm>beHgX{a`(`_bhx<V#zEHHHF7M{hlVC9f;NAdIv10Uv5G4u#
zrfQNx5<w-W%R-LqWbQgi^-aAKZ=CRv7?7j^(ebQVz1Q>o-3cMu_7c4=dY}09e#gO<
z6qO8ujE%eux9b8Kr~n8DK7)Jnj&<q?O-3MgGmBRhcg(QodO_b=gfMBe$ctNx8HGYu
z(w)S4V?JgVugawma7SgZtl;_eKHFvkiltaR7YI@nj%6z`khdjk88b>=Dhu)fiW5WP
zGf)g9H9)`srFAzfIkLLT#`gtVx$O9MjPW@?Lv4d+q2>2<st6kRt#K)lbi>wMw2exk
zZ?qdcSWmNcqW5Tj;=UviUYKnXeCvDYC6kOdYL2Z-OiJ5*a`$IzWKYy}f=XQd+Cb@Z
z4~IN4ufBfaqrC)&o=T51vP-W$Ty+f<&IN?QcZ%rzc8_UB;>X0UGsh%023#yZx%yo9
zD03Wi<Bqnfz!KlQO!>?+a2J~aiP1%&WjYc;3DGpD=e7t)arKCCTknoYC-ZOzI3u3;
zR@5`)G<P3Ma(2!XD(W1+N0r~1*BS*D!)*$((t)*TX~%(wM!XImAD?(_Kf{cjj)b_X
zBMQY1b6-ch$q(T9RlfG6Bpc!B23TIT#RX?z%&mODdB#vSE(cKI0Uws}=U4&0Bq5(P
zy?c!LNwLlhxTGx96Hfaw8}t2@?9KdydXHF&tL3_hRWyI^Z=WrYe7KM?{f&IYQD3Rk
zY`S)|JVmeJK%g#_Z>4$VRYai8L7)EU^mu>0TYyirrSZWuaa{cwJ(EwIQNP?xNW{)H
z{&MkxecRnBj%r2ydfffq!Tnd=xKWm654+3@`oHd}nm>pO4Rt`miVqYIiF;WiGO3hA
zLdS(1=lgQYTW;}uqvNo=ve8a!#j0E3l?l;0H0`WHzNPEHM2w^Mjc?)lFOSIVv%jd-
zcd}?RFSsI-FG_>DG03-2LU<CN^1{dtyU!5Yb!Fo1fsHZ}rqb1~nXX&QQjTdt`kA!K
z*3MhwVYW4Hx!KFD<6%0KdMA=2E6zs{N<@sVb?V?_QrO9z&Gp}i>wm?hMP^aD*1=-j
z5+6jRS5K)j>#!QQ!T#Xu+f2P`kLeMF?XQ;ka;;{rbYmb-`4Z#WRlPe5+F~ii!cUY8
z$a>1f=!j0Dcg~V8Jg4DiJ{3H$J)#o?U7zGnZBET?p$Mx#gyY#*p!V+57{yOgZl2$0
z7K7t<FJo<2`AdbifP5!J(b%LFC5?~+s=3B@V=PlH*tTuG`Mm2TwRutD{FMU-;M7jW
z>1CSP=c`^ZhO!M0N9Cliw)0ftVjXQ<+txC<Wr;NcMZ=-&xC^zr!Zfglo2#v|!7F-+
zZ{U$}l>lW#bMm=~h9u9oPdc-_GpU5zt5bw}_9#+Kq{C5BOXU$QlzMFkXgd5a*9Tlu
zHx<nmQ?8L%4v9k?P)U2E@t*m-hmIa6^Bj(+9wQs4Y7jzB`wDRFziCvrb)$=*ZUt(>
z#}>c$omoLv(^J`3=1hd&Id{)(kY2Rk{><~!&@<lV_;N~J>inX-zGMfHD7v8tP^DJ7
zk=YVP%B4?=aVAF9gCZ;BYGy&n=&k;qX$@->8Ip!mEZ5S1`$eP&X&M_R^})x)3T$Ua
zCE>)ks2u|huKq;M`TFnVo^Wc7V$(X1Eld-3-!A?lnf-4HzUA6+veb*MK~W?eIFFRB
z+l+;)(UfugYK{9xu{+J&a!&-c&0H7p(+m2SHSzQzbeeqaE2`8^^1J_dLs;jGD3mSQ
zBo1di?_Z<-)b^YzHu0A`3~-<JBsZ2nU7B&1A2<&Y)>5MQID>Y)VfEl^^2>)?G~xI!
z&@Us~JEQt%BjeXzc-AADsa>O4yhEzSIEp|FksySDb67FP7KjN#51#ka{3;gwSMln3
z3vR$<_4d7^hk4NOGZ}P1bF>_n#dpX@&@u@(5U_vh+F$n1uiT38IL;|HrG0h>-$UL2
z86x}pLgjhlkG=nkRsB0xkdxGV)XX1JxhR|fH^8}lDf7r74{InhsK&OMyC{B<p#9^>
z7~8=O-10bn?vH=?#jO~>3}=Yp;C!*zA#Wf6WN&SgFFs)W;>!Q=J{8O042=uvJKj0m
z9{MK;{1XKJ2?GBFfq#&||LaIVac#CcXL;f4AF1%fiTp0TXOH)Ie-)j{SsW$)6&=<8
zzz%3EMd>K6H1#CBe<j8E>=SIE;rBmBDs^*D&;MegGq&=i6mTZ8KTRCrugB*1YY_EM
zFy$$a=sv&L9$JHZ6YCTkakT-#pWpEpUnC;(_%{=phlB~o{m+8I!@rLDu-8kRf$MKJ
zzds~UJVkT`fEH2kFE(TU^Q=QI!u9^Kw!gX=|G;H*5`a|cu0HwCcl;mQ?tlFh-A%Zj
zNMPcSIFVW|1aQ_}sgu8`a{J@$Q_K0o_4Lk%*W=Scj(QW0d&mk|IGzZumtT#RJRD4X
zBzzZ2m7A>R4^jSqe=frGaDCz=PuO7(@Eb(<{Z9b+Cjk7~x&Nb1BKRi&{1X8FK>+_C
zfd7XPfaiU31Cy1t+oBDzJ4E)uC(jt0c_M=A)tOFav;6M+ufgAD#ADu*i`8pUY%UW=
zaTu^DoQO4cl_9dO-%wP_T=`_gt3XPESIy435ve8n4Sk@#6om#_iZqMux5mY<lFUjo
z8OaII!`0pBcVu?j9QLKcYj|~?(J7UN4|?6LneECN?aohSh4wfQW!5lAjqz|um{RS{
z6nMIzUv5=Rtm5Ui(a$~6?Y6sAtNY|M*Quomka1i{FW=urgi<VUKUN=(VtSotzyG!%
zv)`fD8|fVOzi8$av<)~6nrP`e9;p>XPpIeL5-0HRBiR`}|BdaOxV>w*WE^xB-*Urr
z+<DBPt;OS(H|M(GGKf>YS<Q@%_f$7>Yh{9jzauE-_66(T3Rk~MJ}av7CuRg0JYj`>
zrxu9?h)|G5+M6bg{wL0B)5M62rfhedS*6$x_hL1Hg4v~8&+mvzS-U*Do_{JS&fR%)
z7~g}`F&I$+Si$WZIaJaoMW5YYO%h7n;rd_k?4Nn<Z!bRIj5oAZGuAY6_nXS8yA;{F
zOm2|IN|ytoUJ`)~Fde9_cA;)$g0WK<<iB{G+Aij#+!mVh-S6nrSF#(J7)kZ~O=E6Y
z>lKZ?5ZtEg4<z5(;lZ3cRML&i63)S5!(wgUW#XH98*CyNZh!e??DqOxRC{X)HzqDA
z0qDfb5SsyKGI^a>S~iJ2w90%yMal?jB`)2uPrpyS9<KEDMHH}A5(=#0YoL&26}bQ8
zuaAAQw7uewSpYv<-N=b!D19Ej?-g$1A%R#zZh(%U0vrk^6kVEVR)M7|!r?~tW~qfl
zkhkcjq~&9SjNA0aSddu7Epqb^%3jdERQjE{RFSD$`L(QOz)vX~#N4HJ=bw=<;~~<4
zN>F3HTsPzzDFww#zHYyL=V_2$H6PL!`0j@1Rh{3({gM|!eJ~L#iC@*yD1u25GEdU;
z4vofUT?~1Uh23(S$}ObZTwaLenkqr8^K|kmait*gcsD_4O0~T<Ljqc&*qi}N5aPdv
z@|?#l;C&8Au*Njq>qF>Ih)H!n@e0r8G&@XhDwM9}E#vnG{mKP2Dd6Ln4Z^ztkGulZ
z6*2P@mb2vt`>#Q{`e5T2K0kpB-(0SpkV}Hw&ie3TC4TcfwzaFdZWQ7X1GzR+Ra^uY
znCw_w)@K_n)ZCjQIT<g2`)U}}uHqBV+MjQ4EKt?Fpo&{H2R(`S5IsA!PrlwFqp|}p
zc*iQ?n-lRm%#tFFX#z3%tu!%TJjA1hi%5OYLT>Q>hCynN{X$?}6;vqP%f7TbS$b_u
z#j`KX@Ihu^B!#OJ1A>MJI=EcbDrVnBOfv>}U||Vvf2<y%U%mU>GjDIbm)Y$7_$ysR
zJ7qi3bb4uD$7$Gm5tIkT;q-@d=W_T72cKqBS|dNBzTQXseri02@^qXu<rnHBpY6Y@
zW=(?Z1$QPjN5%#RR7!Xt4#Z-$Q+OBSH1d?EACYg}*qP0--DcxM_F$ziKE8%o)=d;+
zw0(!#@NxsQ?8XYWUeF{e%0i-;<hnZ1G9zIkrevQJh$4ec<YRd4C5(FPTBTd(K&L^g
zY2U6iwg2h&OO+`ZWn@=nqQkwy*)Tz?@;jk{|Izd~5MT^@>`!>ecQ$ry+HNh655tYS
zY%aa<h(7)#`$e_CYM7RTnuAKydI0x8_`HtQ#}f~Nra}~C>acj+Afl!?22DZt9A9Yr
z%L`GMq0wq;XxV4eaQ*wCtB~&A%RdxNkRld8K3#Z6E8~oqlu~hAT=Y3HDaqUT?`DXI
zg#?ua{gqy_nWyD-U?Y0V``i-~pl6}*!9D+S{km!<wNxxWPp+BT%4j)=biXcHkG@L?
ztnY3f<UtgvMYmp1QXn>kR+aP^Qab0A&)l}C84v+9x$iesljuYf>eUNTrjSTSa?oR$
z8CK|S>Az9Iy|y<>b#Tg;!a;R^_*SoFZ@#%7O(J58;q(a~85v=Z1kvvekTH>)r!gJI
zke&J-gOgT`tnN3z<QtnXgv1M?6r<51$nHaO;<|Z8{4R-tVur1lMp@rq<Xw+?DmBqD
zv51ZgopORoL2q>>B_*V#Y>TI5`<atxXT0y}>$J4|9tNX&klRko8ZBIK8uCOGIiKh2
zyDh+)2Z|@Y3gm3JQY{?7CNPrUqu&um<V>Kav#BWuRgidSA_%e#@TCj%J-%^*WHGn=
z0(qFW^MgEs-kpVVs+#BLgB7E<cUPKQ8>-M+AUJeW1xa12Ao<UR?mrn7cmXO>xjbGb
z`B_e{aQ{$j8p1L}FY5Oid^lakNR9>BM?=J96`^cncR6IhR$Ci9gSkcsD2UB;7(}*r
zob?y!eL@j~lu^L8p6$>FPeh0G-~fC;l;CR#nh$f)2W{GE*2a*2B!HGi<&?rQT;0j4
zS4`C;sucfnjj)Xj1gLo?(hzB+F@zu-NY}W}nd;ym(&JYD+h2ryO7lUYV-Oo<QA7_e
z!7rD3z-~5_3z^5jp<&xLqjVixX!9ffR~~)iDKA2qQw9AF8qOXue2#dCHFNvgXim{=
zc0&bs*;2qN|6f+Bo+h*Vev~&vhLW1(Z_RO3WFwOJBZK^ii7BA7bRyQ}<@8%lJgfLO
z$43S&A?mg=EYR=o5i$1O_t>grkX5gKgoy1CLstrE-gIT0`}PAw<KkD&zVwWJq!|&$
zdQ7A_`%GUN8T3JRZVJ_>>G#v<6w%ZX&A@!{)Ocw*_UBzt2sIBxB)5G4<qV@T1PQB|
zpYniDz?6RtjExdyk5Dy7@qPkBM7|de#$q${4SzFbB&$sTfiUUg!!SUfA2YrXkQjr1
zQl5Si&>=1&)MP#*^nu%TbJ4CGoVy5`k=YP}C_Q$JbxS1PPPn5cuTwk9M@P?bH(vTR
zbt`ydqU@DVv9jdqRr^Pm+04y?NLrkf-ldE*8q#G_b}`yq2ZXD`NkV%M^7bb;K}RN(
zbbv_j{geXPuKQF|!g*L6JlGqgaW+D$nIjP8!=t0afO(s6wdRCmk+deTGy>vJhqLPS
z+IMyddH^Vp#JX=!wSWkFOfGd`Z6)r2zwO+ShS*B3KN)0Cz2jUx#tCBwE*%^Wa6(R>
zHQ=3$e<C_q=4M)CCQpG(AmXHSjL$yabYt{6!NEBulmOhQ?$@{C)wtJ98db`cLkYlw
z{6#PP0T?Cg1{0h4SEORZq_c{wc6&4P&z0{cXo{dnuWGcffkH{_0y!W)@RjLJW^;uB
zDwhpPrlBn3`9EW>=haIsmmf=Q(V*V7ew%rbdhYF&a`P<pbcOk6RYzpZmc(vtiJ;(^
zF`qtLjb95UP`1)t5Pp$EVkd%F8MfY@YYpy}D^&OV2YW7P>|Pxw^?C@Qv{j)e-<%u*
zOQxNWGEWf*hFkZx&8qNe+*hIorDOv(ilB<{24I@u^m+E2*zLR%NqSB*MnXGk>-19&
zxEI$Zzg+4+03=bVW)u@TZ)918&)*LgnPG5O$rkJTrDTD%M$EXIDo6uFT*z~cOTX?i
zy0<Zi&)sJwcH>}orFDKTzgH%RzCH6VGBe>Tr>dBv>A0$h7B+^S;4_)RI-Q0a=zlA3
zlltm{m^5s8ds0pl#WW9m?lI>^>7U_N;{`FKFM`I(n{NWg69jqe*E9=RQUUXd*Itb>
zJL@p;aN_N@%<PTb#maKhO^*YxfK}&%OX;#mvVsiH6@hWcOV|L2t&6Cha738aHj%DJ
zfOp%uq>Ma^Opz6C!vaS|`=Mc)7_DsV1<>k?UUwI>b8rE3G-2~>+3cLh?kE+H2x@mF
zr<QAVJ*<3pJX%<NXMN6A)O@RR0i0SgD&~W#aqKNWD6Au&3a^I=5P{4R@WECwgZt52
zwkE7?tB~PtAkMNn5@m?1DLmH))&I|Z1RKBOo+p@Ux6PLQ#?C0t?cdA`{|<MMa%@-C
zzkE&Ao7U$c;u~IltNMCsDk%;ROf9l#Izzn17(Q-9W1geY)(kRirnYki{=`qSHL{Mr
zowc3Lp<ooM7FJ3X%tN1BC`RRjE8yD&=kZV#oAnjP<rfoiaYAJ@8#r2gCwu+PVUmf&
z`P=__Xu`Gxe(kP+r4D$nbGp;~hRZIn_~Dp6Z$>h1picTyLHXWwEOr4%*wTh-9e>#;
zf2~G-Ok?r4klXZ6X~1L8n|&|qhoiykEF6I2I3$FDq(0bi?w3}OLZY*5JrA)2*$p8o
zW3Vdb*p-I|AhK1&Fh-+%@btR-9TPY!_>e5rkqJMa_VZ`(1vjbNuG~>*T+69-h1y#@
zF9|9H+Nyeag(R8Jf|?m~Oj<=_(Hl*C3uChr3u9CZeeZ4egWB`s%GZmu3qde!FHr6D
zSC)W7%@ZKIfZbeAUegR8+-j705dDA|K$l9e-IESLd|#}<VQ$;nkNImN{xg*Q{lz_d
zY>o(Og_5aV7KNw`p^J@*RmHj^RZoWj7@k59`K<*c3V$+&#LHt;yD00Xo|<ikm`#)L
z&a++K1qCeLQl<9NF@=b8Pvk+yT{qjYGci^d9Q;0q)^EifEI-{^hTTmW9l4MR+j%W<
ztqlucYro)JT?dV|%G_D-Nh#-*Me+`SqahOShv6y0IfS3~-vkt0E7K`=r*Xgg+pbOE
zw;mXlL5Kt%NW?d28e;{D-w*iM|4dbsdK5#N;S*7*cf|C5x<;1XO+Tdwroy4eV`GRR
z4wA9Y(PR4xU#1}=Vj}^%pH}B#jWl;Z5#o^_DaoP$nnOJ3!Q#-zI`?lL>F>WqHr^K(
z8uhJJ?!^4GT*)6%ufW+a3`xNjZ(PN=o~P>r-&SWVoPER-O1_Ck{dF*maO?M(Nlk+v
z?A3I4H5|c(hM#aN0NwCljf@W{6=aNwQfzS(?~E5v7u;sqbysN)7Fr@@0!Nw4Hb)i%
zEL{^&G%0x=P#g}g_gZGGaO%^|1c~7#ua(@Ue0aGrPN=+t)f?|sLbmPehigC679(PA
z8G9^cJ;mDCW|L4V1|-&H=FkY`Jz@R4M6juQL7KSyM3#T43Q3l$RUo=$?N6V%waYaD
z=4>A+s|N^9LdHqmfaLf!c?2_Le=Wl!ap$w)DCG7AH4|L6YP3{F`M$G^N8i)@gEgIl
z(AEQRAAFn5Xo^8NglmBF5x3WSvkdK0(HE2g712Dl*h~rbGabV#%|iI#r(t%|{9({c
zWQy?a#TTUa(aHTD2YYpcnGxj?E49`Bl^~SmfDMfJGsbnwI`&R;by07*?2ZM?;+dx9
zDW~Zd00~E+vt+qiW5JrKBxTI#5ktY}plKLHuN>$O-hgG<yq|GRwcs9C=W6F<q7b0I
z7Pn@cT|#P%p5}g&%#<gdY6@Th^xs%h>VbmWlXiS3RUqEWtM3NMp{ns^Vr-juUYmBN
zN2CY2@z0r^BuD10I6*A@8d~G>tUXOVKXpIFy5~WXH|a>d1^1w<?fSe)zcwIfQUPbX
zCQf~&RH^aQ=wpnI$YhAcFSn_@5m)f;l&l9fLNM+V?EE#_8Nb3{^;6U+26Sw*zurJa
zUMVEtvfj90adrnLVpyDY=Y?WJjFs3s`@lswxbWz+zcE*T{a*k1RL~VUfwbT4GqbpJ
zDv_d&xiQxt(*_6?;tQ<qyPJ!!HA(oD%_b0>0SGt_PiUcJ<?9@%=0h)pNYI*k1;ET4
zmI*YBytwU0Wdj(aQWTP1B{I_mId|?`4LaYR7egi?+tWyAE}qTKG^l%Nr?ph+!m61E
zx0&dPf*|TOxciNp#@)ry7mq@;+<mVCKp!Re4bpzV<KX5?$5@i&8X4r_%-i(FTavuC
z%((pRMRPiDv_~raY;!aZJAyT7l%><tP9vU%@?)HT4Zr`t5Lx<eyf|jW#c&pdCCezV
zQVGBajdwj*2z<#aD{`os7D9|iII#}R0vmv-z7g|xT;R0?hJwYU?Ok*trOhWAU9djs
z4p(>&Cnv>XLo~8LW~%Ythd~?P&Gkits^rY&yEddy%QTIT7T6(JdiV*x;Hjl277OJE
z?l)E%*==iZsRa3vRKw%u@K=7a<-&<|$eS%_r4+I-LF<vKMX-@fD6%qf6eeRvj6{x-
zJl~x)5@O8V&CLMvsV+?8Eyd3foE$WsSE&sAl`EvGOZAZn6_;Iu1&ZW!)|ZORIu)0u
zpomXv;E=YNMcn55%VFh;8X66++C6USIngPb`|F}mEy$RU%kNgZjpD|yC4t-JH6%VB
zw>Z~jaZ+A8<3cEBY_@-3IOE@ASJmg{<w;#ZB`YK$^8?y$<T@@4ytW)H<D|4?z`P33
z3bF3Y*mQtpPW=VnPpL0qo(r06roz6|0+&5+Yx~k`!)7<p_W23gBoD5KziA~UZ!WQ#
z*^NA<MQxl<!6rt34Z(X?S(DQ&NFM94zm*B3Q<70B!lHX(Qr_8!nz@yFV=c|njj<0h
z-7vzZ96O2o&Vh01i5>y~VU)stkfI5iEB*|hI}G3O5f8rV&E9n5(go|PGl)Z-C*^5-
z#K;oW{-Uogm=$<xXaBPO<W%D!Dt;f;gb+!SfZr#-CQ42Mfbi2HAYhEEnZA)@)Qrcf
zdiFrbQ7jKhaer|0X1QN()incSaK$66inFQ{P9Q<-!*3C9m*vFL5?V^E%~?4JJI|$b
zF{x!=#_Dc6N6Nq<>$Zb1=K1hF$Ygc$&D53)<nDg}W?eK@PXkQk5!w&OLnHCHpY9Vg
zDtm#Og5L~=CUB-3LC4_TQus0N6C*oL4c7~#2AaPxm+{(72JHsc9;~17=tL}dEQa+V
z?fWjuPSvM-dqWQ16E5)Yv(xV5nUyTn=mtx3iN`7J8Z|@4IfEFy2s~8kVfM-8ea9>$
zH|}kSmdJdIt6rJ_r#c04=xua*T>pEx`VT0I*E=359YpV+QKyUg_ym(=4Mh$EA7BVf
zHA8Jv6nDlu>n*}+{CNY+2n%=<FNHp=r0DE1RH?l0K}JZ8qzKLdYQtS>FLl`<C=cLs
zzr*5A&FX$+9HwaDLY~qY&mFA^VC>=YY07?Lv=tl&lqF4>|AVC`Y}V;Wp|CpDN?V1$
zTK%X4+_fRDUFdM0zw(mQmvzh#-%bm#L1UFmDQr(YXsejroM1>v#pIWS%8}}4D)th0
zYxRv8-0yz8dz*r|W9MMDA2WnVsi$VCz&F}9=-s17$3x>W7_Jf#k=$)ldVEHckb!Y}
zBJ$WtJK{?JdWLELGaqxY{ocHZ|KNZ0>C4Nsbv&z`&DCVi_lwXj7uj16Tx5FN?JfJ!
z+e(gk&f5_M>Uo8|W&<VNK<kpb0JCZa>CL(}iE0t}%i<yB?KS5#p;;@Sz)=oUwYy;7
zv{jyB>_%hE!g#ANUM_Bu5hZ<uQ;QUuUjpOO$&(Shj`L<{=crE}JLBITR!3=kjEui^
z6Ga_!%*}Zr7FKMYy`#*{Me;yfkY)M9%Y6_3edFhXGh46ab1+_^S<()C&$Pj;1!;1A
zC#x2M&ak+7K3-~X@r0;(f$d`);OF$yj?sNs_wovt^Qy698nD*kuZ7qdBe~3{=gFNj
zCJ#uie6?$CbF2U=b<2b8=_A&YM~@Q-ANgPZN1c2eTQNvn<*HlwQ?%5>4fl4PsJX5z
z{YVNth`pa@DwaisZq?%p-KqDVcy(Q)PsguA=P8Qj(GiSO)c^XQ@Ce4X=PncydI0pq
zT@yat@uphUcM(|iJr(OTf<?~fV21kUN10lG3ytbY)8J;*E^)F`8M1kAGcHB!U1T>k
zvVH*JM5E+`<dBzO3^Wnaa9FqOCZ?vHM6RB|dJ{!rCZ8CiDox`JR^y%!dIdfEi75Lh
zE^}=DbEPE4A2EPW(&?kZs54t*P!cPK_&Qt9n8C5f8Ua0uHl<Ol0gd@pm})VAgtbB%
z6pTq|p@ane;mN0kjTmfVhAtrJr{}Go?jEJuvnDwa%TzRZk^F{Le2O~BDS`xr1FG5W
znGDB`k>5luz9_s?Z-a+z0a(LMBnK+;_Pwl#N!DwZ{<0wdS(+bT1*KxppIE9QzTZ=@
zDoJ9(;8&|d@Ip=KEHa2icU$*aClq4rQ35Xc8!wH1cy93@u-{>)Gn_Z%stVcnBKCR+
z$7U87(In#Qkz3^yZzOoPpPWHgg+vf2tXfZ&4-(y%zY^r6B>AR5(m+k=p3+l#p<IBw
zsxZFB75}DE=vPdb#xpR7R^GB8n(`wF#O~qB*oMq~rZ9!mwBz_Xt!<KE*!BTA)TZU|
zGl}Mu-`+Wcm`TmSIN1TSq$bn()s#sWz&0PoY0-DX$|KHW|2<T4Zs+iP-D<}-c4T0e
z&OryoI_~ptqEcUI(Jt8x%JvHb0?zh*hVRkSukstr{OFyR&t8!TuZROjv_nOE^qT^s
z^Z)B!{nt+Rte}&lej-&wpdFsfq8+kpBeQ+?IeL52SBL$6qm{>*K0dBJYAFw_FrOcm
zpUCd0xBIHt!R)T8K<P(7B_>Z!p000;zOIp<3)OMI;&}#I^{KCk(n=9cJQLB;;Z2Ie
zW6;2;|NXs<-b*LXOM4r$MfNjnvkY#9^m~uMw|>2WCVSO(ykiF1U6?YZ(2D)AZ!o9m
z9iv<6(|v+OGf4k9c4#S7ODJsFhwVhOUyL+#%i_5ne7#%@$yNFQzcvGwDiA{-=tV9H
zBV{P!s%Ie#OWm;Q$kY{6nUYY7w?QY1wn9d`7s{YipG+Tt`7;ZI!6<j{iPQ<@k|PwG
zfK$fY>1?2K)yTR3`Rj!(h+alQ`<wca_9Z`t2JFa36+BSm-$P;Cei}P^-Y8m^d%#Iw
zw33{|cnIShw)&WX!l@ycfx)@wsO8X$jF4lLQR88XQJH9pImW#=@{Cz;-D792ARhov
zxSP5fq}7?OtOU!0kMk{56nDEA-lc&_{T(0uj^ePC$V)Ks^VT-&*rrq{lx!Ht%&P8?
zu^IT~S@iQ-@$Lylfj_ld(YrB&*lVZhgXgh1pw(CTyuCVSVqaS&i{2BF9*uQfuG7T2
zK;QWGi2D5$i4zpeZhyq2AD;Zb<J2GjM)aHKn-fd%Jl{&b&o1_%n5xy@HZ4P@Ciw^|
z|M<lxq~oDjM^U9?=6#Oh?givy1WE)}rJ^tR!!zwE6OWIhzY(n_tUhBZ`gH3#sV-Q%
z*ZXh6=ryfy^lwkkmg%>>Ml+z<5ONZhKR_u}^@~YI>H{cg-zIO%%PCYRmqS&VZ!=yW
zuUqDZzW6eX*vJ)stT_<MnkEL7^b0o{GnT(X+%*GI7D*n1b4qgv>sq#lnIqPDR~HqZ
z@3b@$KmT@?oaNr5<gYSsq!$PU&?*_RR*x0}`Q|f$WT$V4%W<kjxm4@F5V-GrfSCsk
z7mb7cJ#*-#lvQF^xZTE#3vSO*tV@-R6J+9;#%#?qRZ($k%Fvks@r5Z2Ftgq`<3>B%
zlh@!zd%=BkxC5pKeAvlC8`JxR>nt#fOh{AxnGOC}<saAa`*Y#BA{<1YbQx!upUPu5
zYv;=|_uL$K+A5w?(3j8g#vwUZkux6h*MvpgeSCG07d!Ph=U$g44fP4KH@y)5&7f1i
z4&kpBj@@ilBsxhG=B%wl<y|xFFauqK^6oRYFAVo)9BGB}{XP<08XtLyUf*8Y1FSQr
zaq}&l)O4~sm^3z392Xx58Nguj)zimH==}tJ#SfA@YI!C~K3P1a7YFR4_#D$=_*$D|
z0XENx6A^*1M;w_T^(@DX-m{ww&wv)#2Q9`_=!WHfV6E#&o=KL|E#a~p;CBI2v-H7&
zex=W83nw_&QlWNCC5xgn9cfWh>~o#<p^QfO{ELsK*wdPSlgSSWA##B#XH*$SBiHzM
zEtqq4eqL?rMIv>dqg~_F6BGnC79|aZN5;U6p{!uu*c91JEM>;j0IOLS%b;$N4kqUo
z!{t}|`)`g!^*|GKdjE)=Tzf8zSgRL2*tNy+trRJKga0$3LzEGO%PrbHvvJ|>q;D`!
z|8Nc6a}21aJ}+L{np}zIG<}s^;g2@o<P3NZuKHO(igq8vR7Z)}mT}moNRc95HR`=R
z_SZguu<O8n?*w)i*{75OW6xzh@*6pvbtHFu>w+Ony}+oLV(S_vCD%8=RD<usc<xn)
z&CXsj?v+oJ=!R%b#!=;c{P9Uwm_)*4Hl!jgsY|RxPYG;z3&+EbB!XuQto>G%r>#?t
zO_c_<(nRv}ebMat9m4_pQjICFU(Zhim=P;9fc=bm)EY1HMDvc}WXo&iBpHgqDQE}G
zh{{@)uDx0aZ*-V+a|ZURc*CG2AA5tYrO<tEJ6>0rV1W;NGFfyJqD1(&KD$8$g?OZU
z*8zB$V{b}_E(Eor(vDu04xMXT=*+hqw1AXSn&Lmfeaqw2o!TvsE~$Y~Ngq#PQ3?M9
z(}SOhQ<oEjCD>v)CZ7N8NC`t4$2fzKwjT(B3$iMX0fY8tgRL?LovWBEf2Gnn4QVkP
zdqTf0;wlG8R$l3r{FPS$<lMJ1WO6QK^xTR3$f}J1U#9nCXGx;v<EQTB!lHK*-N!ar
z+NZ0XZcmwmcYiwaqD5Z%hXC7mISz9@Fb#-`oK?>YCzn2iu#KpQ95|bnptmy$lb;t>
zCUohH-$_U<F^s*#e(~5Bc+(}WfGyXLCrGL^<Jv>96&VQ5w-LqP4Nd%w;SF)_PGHj%
zB#R~jJ^yvNcm+>R?=K^HND=WZ$Y~G@S_1gEtPg`3c2PqbatMR+xM)i3e+RMOKN~NH
zBlml<oQ}2(-VeK0_=9Xb1Xy=1i#>=tXS%5Rlc@?Z^G=>73x9m_i?osl(&m~}dhkkU
zbLdzU#{>CD`z38-Dr`ffYs>1JZ`#=e9am#e)V%1XvK+tkf`0_vT16ffwTF<sL#yx$
zHIR`A*R7uO5-Xa1dE>oMsGO#*_BoPMI`p0mn*RA$=vRN3Qglm#xWnYC0FzoiWKHoA
zk90wj-)<M*+n&v7#^XN#+Nz07LEr&gxDNfF9?1Gbd>MiZApi18*3)o^LgON>Co3{<
z5~Zi&A}LO3)B}#lh%c|fPPA7Wh}S+W_8?OrgXw9@2^Fg)hZ&Uo{o7Y5U;h=Y|7|n<
z`Bwm^$0J^@)!PpIus4NY;#|`%xgi%1>KPQv-HYZh*Ockb5V!Jh<SLSqIh0J7O)X27
zd~{TXwt+b9fiN(;BeoB}oWOwo6Eb;X2RKTMjhNmTKrn1tVewqRWW>+6l`W0d_QFhE
zd7UJkJL2M5z<PBdQ%lMiH8S8KyiA+h<LcNt?rpl8&)7HvQ$0*zj&t+^{d{jhGoW|Y
zLHF`N=>2y=&EA-i{UTrC5ks*E3R=+vP}q+<f*_}YjV$brlPozAY`FO}Xi=Qz@S6{*
zg)gx{aLwv8M}xCYmB~^WAxtAR$9|l=tX6{B=-}+s)Q2%Kfjo*z!^S_X#h+{SBi6s1
zA}o;|dt)Nt$Il1#VIWeS<G^9$XhDKP2}_pbJ1%JNzz|_Ks;Ly#2W2o9q}5T~+h>F#
zZm?$iXesp0(ts&(*Ycb}#^rX!k;D{Tz3ESc)u;5P_Py(t%??b&I5vS@bjy?cn{^Tf
zJIpOf@~#}_AF$mYh<R)*5;q9xzD~~@myjm~=3<_}Yb{gKVoXT`BFO=m*pn9N!k?i9
zU;z2#)CH3M^Q*B;*ET4W#IQ}=MXvS}5_v6~=9#o-LzjL_Sxut69~iokotR9k;fmGD
zhkv`j9~a?|TJY<sssm2tuX0vz{<d^=m*bB-!MGzb=R<Ch3H*B(Fm{&iLhkrIg728$
zvB{P^l5Q!P#=+*web9Q9rEi#f1EwbK6)l_XL6?=dFayCXC1{2(gsw24_X{)oHExT(
zE;3G&5M4KS^(9E`@BR7t9OoNleM6Z869IvH)-J(bJid-;kCu=NdN^JmD*Ylgcc9dz
z7ZFbuPQ?ni%)Ww=K@VC{Cjuo0)mrBHka=Yu*w#ACFmBaKs@k7ef1U9ZDYI}-vI4D2
zGEf)pTl)h9E0@)t{`jc>`%(xJ&_&`0dW!vsvI&H#n@<plIwAN#=nlRKB-A{<`NB#8
z0D0fgn{>u+eIK)n5c5C&mZn`=Wa$X3skCQ8YJMcA>9&PBO6q)y-0R0_I^_e7QmKKe
zN{M;_4Qckko#nyxCuM{jX1hM@ug0J?6aBeFq=9^mbLTbwBr?@oXq|AHlD`WPmOaTn
zc%0c9-y9x@v|H2!PxlKcewpghf3X%Lw$nU2aVySEV1!d?XdBAj(bEkrR0i^@^L*%3
zqPE9qyHaS#t%INj)7(M{t(XM}t3v>W_5^+76B)#bDE;Qimq7Sq`2DY;+f$SdfChoK
zq72rLUro*GiIh(;3B}Bp%H2tnye(a;cNHQud*3F+pa=%O<m?7G^qN;Lr#<T=y37D<
z!cb;Bi~NuemL2+{`28nR*i9E29bi^)O}`ubO`9bR80s=x$EmN?KntE%$a}ThLiAPc
z$P5TJF0q^e4DaobI|b`I(n!!pVd*mG0mJz|1{-8;K$E6<^;MnCV0WoY!A^;f=xZr*
zHvk7*He+{GyqSLwuxAzkinza$yxeA70;tl3*#_ovyJnHl;u3SGTmSXO|8}=9^n>k6
zYx_6NGe2&Vucsz47tm&Gc9U``n(u8Q%YM^-mwg*rYJH<1o3;ITcF)NTejNZR=()}_
zlFY?krlbxPv|=418cUwSa|pT}`uj*89J4C&m#=lsiOfMOEeo<zH;^9$9M@E~iTo9Y
z%+{vcx$LJEL7x$wvj38ikI^f*W+&Q^t1&Eg5`fN~a)!?{Chh3NhcUs-Cvi#dAtFW;
z>iNX)$#vN*h4FokP=Se?cBDqQ7z}er)3m`f?c&<?xnA?-vAXqdQI^o#Y|Un)=>0FX
zz~7?7DQdY%SP9}H$$G3Gv(=VDJQPyzZSHl)z%-)wP<r4aJ)cyF=iR(D3`*$2_b>q8
z1P1t(&q9|sQ<XR}`)p)=hi77MAuQZf$Jjy`I$RN&D215knL~&iG2)J*PlghTpn%ye
z+=ytlkXHe%+~<yTtr=0NtO23qV`_`Ubn<WgLV+?W&{47h^fTTYcc=E-=cr@8;~hJ9
z`R3r)-MGl!N3juZ#C&K7?MZGPyb`9V2ir3b&|<`Zq?&o6L})gQW^R|^87Bg)luLg(
z51K@&GPMr><Iev}^dQ3a3=y?H7k&K4vg(5fNmrq@{t)Xs-lq(t<90}l9|~Ctlq9$8
z%KT{Ye*D}{`N57*6uXhkkn2;sSJ%|O!kokVDiPvB2C{=^c~GmpV`DRNbRog5<J+1~
zVHnisCpUoBfwEk$d%(Lw4zSmYofa1>P~WkNS#=BgU5>c7Fi`60dFBLlj*Il@2@KmE
zTX)btsl!(gmc4oJ#=nI3mb%|@b^jss7?Juh{mn~lqok?6X1)b}atO~ULt!!RyUzW%
z?f>h^@O;c9d=vH9{REHu59}9p+^K6YT5|D@|GDcXppedMPf@`PY>+bQ&NfVwieU4M
zx~5acpD9#iJKL3ox((t|P2$r^#wLKo4A(F>ky^VSq_^vzF1`3|;VR7&I2CWZuhQzk
z??>REO=@U=PvkxWeTMY;O9NxX42qcmUAlnSBeta5+qxsXLDqk1R~>SJIp8w)e(TQK
zl){kUjUrXd1X~~xYc<#6e?v=NvElD?{3_8L$=Lv7iPc*LhG4#*%^(iUUn&4@JBcEE
zi1CComFuF&On-3!>>t{XX{0~$Q~&*t2oIkHCu?Ckt<jSoa?S;gqe?+vUQ9i4AL>U*
zlkWh5YCB8HsUruq-gi2IhINN%^&t#Q?h_M91~ar8{Gx+?u?9%*{_nL?L*bViymkYT
z4i~g4+UD10I*X~Y82gA*K*p@G4nn5dX^A3xkY(h+3A?bmqO3&sSPFBG&0zWnQQw1>
zc+Ukc>`(*RPjBa*^gt8tanZ3IJ5A6k#o&mXj1ddIDvhY!axf{KsI3I;Z3dr8j`0b%
zrwZ;aifzbU$p8f*|7S;0sErBJZ@e=FiKq}cuid+a{mCDL;9seL|7@9f7M!a6YDHZ^
z{iYwwQ(<bA<3wcYS$f{>89IZG`(WfAGY*=93F9mMVZ6uzuTb)QGGYg<qIQ^`J54#z
z0(E#4+6HNoI>4mB<H~08oJqjt&`Af0EAt{b*I5DeFpwnZ4trrxx!fZ<Ar2+|yYHkI
zFx5X2_^EhKhU*7rfo$>qlmSr}|Ma^AjDmmykMe+n%~5=Wh&BTzh|6k7SRwQ+l(Ac<
zx%)9aHit2HK)*c0cZ;IW5#!<6`94T4E`yV$E08~m<|JNSdw|_BEocoe2UDBbJbvN$
zV=1g)c7p%=1jPqoy(P+C8Mgb|y5YTf<nBb(wko!8De%Tc<2w~@FjW2>qB{2+9i@;R
zsyP~iO-9FI1$rM1P%4ZlyUDKwu7Y>QU9y~EEf3?IdwZlj=9Q0+D~@9OSDT`XLi=x*
zxP{Q&tvJy+5|AKta0*d6EZ&m=F~x`d_$Hv~BM0K#rHNe?kJ2;FO{ZjVEezxVi1b2V
z?+1yZXM0k~=up|H_}J_UOoE?<26G;~qffxDzPegSW-1GFtO@|yRZZ(r{1^a#I0Anj
z7;o)I{!-riXKf$<5L<-@u#nbq`o)_qlvEGL&ddOW%xCDOQ)F{myeBD+wZC(LH&!(b
zetCp4{AvVMEsK75-kQ~y2an#R0IJl+^Qw~cl4+i4rvouBRP?dD2GG(j6S=ncNlO<6
z6Qh#?n;S(Tg{Db_GO%*r<@`OKMXWIZ?`u6$OiP3@Q50@KcdvFg-FC=lig%_hS)a;n
z^=?t#106K4VhQVmf}!@0M5KHUsYrAxBW?vzg|PzlSDe#^-&8@8LU}`TXQ04RXDD1X
z2Ac`kM`r0xKyxN(>Ur77FwoE2lO*V_Re)`35TdVd3la+4YJed0Y}O-f;pJ87$g270
zssA5)?-><U)@=<pG^l_G3WyO9B@2?HNK}G=q#_C;Ip-V&NrDnZa>hc6q~r{u<eWnx
zNhK$VlD}2mPd|6q_vzcdegA#q{^&7mp^k9Q*=x@=*PL^IDzS)X)~*^Z6{-*$*ggVp
z1{%g~%x@~R0ZN#Iz_lm7;LrTRf4a%Sil>P6rGwhqrKo?{u3WCK!8BwPY)MOiFur|y
z4BUiycZvumM0TVzQNW{V*MXEtr5#@FJHd#r^sbi?vX?*(x{2yHxH<t7(C|I}!}{;v
zJ}(0lm#Q7z*#gwBwUz~_gRRL|^jbDB8gWnF1KyKC+&(~6Y%ZgRARk@;svO(wrlvXw
zEZso9CG$Q(Z5hy7DIDR^xX|jfNO}d|6yKnQjcydC$g-(LDM61x{+vS)2wgG@ony<D
z@|!7)TA<gqORZC@WQ5&*|0X7X{#}K~5HQfAazcmpkjCr|E-CLr&%}!8kEQ^K%8H?%
zT{|2}5&2cg0Etmk4w714-ANqg#7`u=%HPkZ{D#=>NzDUH3gFtIGmw4TaGF3DjJVF(
z-O1e~h~KjmKKWB`v^drG2dd-|kzY9fw3gTJ2@9RTknEpVmSBrvN3fa#jWG7E=U3&s
z^Uwtq!%dgS4=FzYo_-`xt5SEnBUxy|FHqO<o(hJ^Ahne&B4gI*2jKr%z#YsGNcp?=
zN`9gFHG7P%h&Tg38rRLaa6>KXTQH;ld|9`58=sxb7dfd4N)&7&2haeQ0Gh62i=96J
z)&e^q+w{IX>osdVexe}ZD&Zc;p0%1y_VTQ6Law!dbd`)(JIW23-)Q*6a(}hVR4ep5
zxRx;9AFA6wv2)d{1_TWQrG>!H0O;nJI8wXnnM!Y!Qy<Cs0|xl7>i@%^A`~FzfL+_6
z^T)YS^IdNkT?wUHKNFQf1!XKq13k-zU|u)FU;zRm`Ws}*Y)xqGs1OhsYONah8{y_D
zdo<-oF>4OObo^fJ%IU=ifZLd$!SUZ3$3N83+LxIC`A)1SB5nw!ff<r>F8XNG>!(Z0
zdCEQx1QFP1zQChgA?Q-3{aY}ugY>2=x0*8&8?w(urJww$KXP8)+6pG<-WzX%dH^e)
z<Gq)N`hqkyg1Tosspdy-mkx8N_7!-y%MjjRCQ>mQEy`NGW<BvtmV{Kl_q;8lp;A0<
zoC#Jx{uNZ+<v;CwKiri+UKwwFQmW>c&s7ucer!c-6@*i<aIJN5oqAVQgz#5^lRn&^
zI4-gI+&Ho}^<f#ppl#4Xpa^E+OnDoGVod~^!Ta$ws}*Zra}48<t6tcsNw%>Ib?#aD
zxMo)CJ$&4T{i!{$`x#?M?NasjS?H>F^N8@t-t_iC==SG&?H8B0g7^Yd2Hz-r027QZ
zJCk}r#%dX+)dT+5V}C;_fUymS%WuGkQ3KavaVWD+UA|5hoyB+`2JeSR9gjOC-TPXP
zTbwOG1HTRSw{lafo+$gxi~UBcAj;zL<NU0(k0C!0@xi6FIopeZ$1nuOvCMNDoP7UO
z*1KIzcIWzvz(oU$N%DL3YvE-vB0+srCuu*>okqZ*>P}WW!){#y;2_0h?x*<1ZhTVa
zBBRD<KQ=6<u5fz8?tq4f;1x!-8?M9vS-AuY&@g>=Q6hWgY|;NlVX)BX0fyOh56}iX
ziX#xEWt4}v)ZW&?nA#GIXz$>M(gcXDb&5&bj~*eSNJd_}4Q!hl7;JJN_uo@&%#-vx
zoaW@871RX97brzt7M;{q6&T-cei~ei;V=pz2y)5a*eJXS=b>D54kV$ID*`ZjGNeU1
z6UE+8iA1$>f(<lBri=Tehz^MQkc?7-uA8UE+yJ~i3{!ksVm>lWv6qvXabw%*32B_7
zL#DWBg7?XDnHwN%DuzhzR$$GR1r&EOVJJ2P=PX>XJH3<m{3dWHPLH|#3=cu+muLve
znW`5Qf}@{+TS!^61oZhZWfMF;#jx);dURPIuaOuE{(VIhX2)zl{@Lw(KW;xKMJ6$0
z2a)&`O2667$60CqjE`^hl5%&4?k0l*sBQ|M{UHofy!Cwe!BwNBS#JA!mDtY)mYJn$
z6r;8dNTAOnB@EHf+AV`buK*Udp<~}u_9L)kKCgVFwK!&s&yJZZcq;*Y;76sDB7d}~
z{I&p!m?NZa(%M_248N%MG+SXKA~j3QV;?z%<PKHeN31G~pa2!rY%tpQ!ALNMEUj$y
zqamPy*@uWcc7xWB6vXP;C?^n!zO(YG3ISjezryiz6%Rr6PKY5shd+Vm$J-`cf&+}U
z{@&v<)P=8xeMI{KM3gJ_{IMflAhp!vZ?xu3i0wE>u@8I12sEZ-P6r^_$@Mxu%EOi!
zdmnq{EllDn*ISt^#;aUn$JQqaRU6V%kgYtZ=9iZ(U@VSI5s`;qMSCnrK?L0wy@M^_
zxbzlAO{0jOmicNxAZQBcZuX&duyZw?*aft01_07+Y~cYIvm;mCqW0zPX@9zvUp{k5
z={pC{XavoDb6Cpd+li5vo7xk8KyLpDfxzE=Df&eOnQ-3V&W~Gzw=x#)bAQ6ihVb+{
zi>W$5J!lE0>T=8(CP-lsLo~=?mO*Is?DDDRr7Db40i%VS(u)I@d27C}>HID2gb}UX
zkVkKIytUvovU0=K%FpKZoMwYJEe8^S0__C`AnHXmjuk(sm?yEq$DJQ%myxgnj|Ys(
zS5Xg)Trp%>(>o0U)JI`8MC;kn^7nvfUQ3?S*d2<B1&FLwQbqk@K9sHM>%(sNC<nO2
z5-5Jp6Gzkv0aWZ95um!GU(An?{yoh9#T)xNaA$Q78PELq-SlPHFr0p;UF|x8Q4FA*
z!%1X?*u7w4ww&*En0*MW-ALRzjNJ<`<7(wphDr<QYaM}C9|rYK#JsffUTS5%41ZFN
zZ$Xvb1TcnzV5)M2#y*bmG+D+gNnvB?u*+SgKR1Pj3LJw?!V<{oX96KuyZ42$Fp=b4
zf~4lHrb?0<!MAGO!hgKzo#Y&frzMza=;!fL7=6z(-t!Ypjj5cji44Cxp$_@cNtl*1
zwk9+)8K`dy@TSWHP{-^sv>rV9e`3Y{*x7!#Ns|2DX;My&39LUZh&qw8@~pGKGMB<K
z>wy`cnNgAp63k64t*@Bl*S^i2oFbu>c?($q{TM`vu5_}hM>k&Ph2ibuL~ZR=yLL85
zu&ZifN-hj;zH!?f;&UB9pN;(GIpb}EOpR_#)c{~y0tbH#gHd`h<gSRXGxL=*XgIAV
zp$mpSGLMlygNllZIgnW39gw>bciY8wGG@sUgoqyvyOJ!RjBF)h3WXyaZxG8k+Kr#|
z1jX(FP0QdrJ&DRmAA%g<lxD~`pWP9_W!u{Ay)L9Y*fV<s8WDT%_>}#RcytMqj6)3H
zNwaA-Jm_8p3}T33Tv3VV7pAb0>^X?+R}*We7ZGPyVdzl;Gd;m3?5c~7_4q$7pdaq$
zzdLaJlqW}|W@W!n@C5wPA&d|kkCnYcSEL|}n;RJl88A0o_zoGpc2yad)%X~w4lJRi
zxbLA1G6!56<!b7^)RayDq#Iw%Nl`uTicR_&Q837XL6B`ID1XW*%N8Y8T<L##Eg$9c
zOL>p|6=sd1w}1`feen0LRVR_1R(hig90Zb49>3o>7U+^#a*Qip<~StB$fIWSA+X`(
zDvCN%$!vnkhZX>4V<$wg&_4TeO9U#lo*v{n{T{>na`G3P0O)5;5bRmq{1mz&*3G=F
z{`RK`sj;)&t2zC^ZWG&`+<RJRiW955{`TB&x68YpSvc&;%N*iAvH-HIA3f^))8O$x
zqOw2TZSN{lNzUe%5z!|bYX0Nv{qG0zcVDIA!v!vR)?qg1XI9N$Uba~Y%SXngwWIUz
z{=NV4x095EtF*X$;xqf1ckM6#sdZ%l_(`^f9RI7UL@2>kY_**_Fa7D}|3Ce&_iZwO
z)0tySr~jWm_NQ<5{(=GJ2}6m6KZ5eVyaoUH3seu_VSi=d5%?LT`j=1Y|6ZBDS_TnH
zDaJ5#j@W4b;|-2b(}9Lw%6&V5|HqByFVM=r>8anL&6U$wjO<rWJ8b{V?C>uyDI9@E
znh5lML?U};@V~wbwlplPKfPr?_rI{z8UODk`cDh&|LV?P6x{!-JAYL%{_mCfzgOnx
z%I?44p#NXKGW2m1a+P2_QYp}v0;@+EjM>|RNEvh)7{27LqaCK5f2+6cAQLcxh^AsN
z+M|J|HU}*-=*B6G|5G*oiNDi5^(CH4DVE(ph6p$2U$QMy94uUmE%~()`}y9LFf!v&
zke|Ad`r1ui_(uTQyXqY8oCp#c7d2>`KZVvg^iEk1BMRm35+KUuiwSbme<uRNCU8Vk
z!wA^3TvHhF7gB}uC}8qmOn8}l7}E-&AKTsj8M5O~@PX<H^s~HgM3A6XRs-kE7#zx&
z!Fb-a`}cc8e+nCabYZ`3|4bj7n+Pq!1p2HvpmIjQB&0?x7oaEpml*JW`hqQDG6g4A
zxjYS~mzd}2WDBfMitgP!Z9`fK%m<s9ux`D~4tlzmq@<&oip0#3>y)&wp4=DtpDz2C
z&vQLqSX!GhOjIU{N!3wkMFlq)SaD+A*2Unuqu)MctEB^GgB1a}32^$)S3a2V{wdb%
zzx{($>bUE-n=_<kP>S#1twUEhFbyz7Y$Z0iV2nIcR4K%fHH({xnX7j^PWJw{PyfvC
z=B-cG+()J4hfk)+#0JbpNBxv_LB+q+l~U9xtNb3bE>W?YT9W?^!AB@ib@|Ak#1--$
z@)=cm>^q9ew0yVxoB*%3_YE@n7^w*l(><1cC+eS>6#VzPCCTl5n}8kTR~T6te)j?K
zT9VtilN|GXROPtJ;ZhUcrsGb!w!zlh|Kw#3Gl#*qKBE%yIi@<`#yGBw#hN!J-1;3@
z%Lz|-!_yT|n0WCIpKdJ9`pxDW{aTfdG?C1+LB9cI;S*S^m0?s$CocWT<MDI9fbcc)
z<}E5EVDoapZ~;CiJa)2m9+J!e%*BZx35(Er&@EIdOoac#A6Xs877nF`HD*)}_8EP)
zueX0MQm07QYDlVAo9o`&|Hys++>iYWwx2lF&{G){Z|cmUab;MU&86QzsIOkPFSl89
zz3}$g%m3`cxRRI)Ln*Yo0)?De_~sSH-=AMO-J}Pd>qK~YDV^azYjW2^h4W6v!mcsh
z=?DoFyR$ib=YB^Qpk>%eob!;N_$c;x=x1-i58o%8g!jcYjDg1Bm<5((QX;8<=x^(p
zN{GOD;@P;9zULj4kbkylni;$w60v{n_hu*hCoSTCm3-2Nz@FgljM{wp;Ya_=w(u{$
zKzadlnHfc!l>gmj9)e+Nr@PSc3ov&Dz_eGqD9$PIJapaZUO(8~*b@I|73`0)>V1V&
zGL9;;{yyO)&OoV5;Yf1R-WXhh^TftM3=PtM0V;o{1Y_Y8(1wwUAVH6UJQ1br(UM(}
zVUX{Fh=YNu*n8R+!4#igbcA*>Ffgd3-y;M9I3F|FgqI?Z!tmR4!*YUM=R2@Xj6%ZJ
ztHu4cfyl?U|BIi-`yn~~rU(*D-Jh<xV$s&>M37td>cEiLx({TMwujXE4ks~->2Vr3
zsQcl_aZA_S61!Qs_&XjI;9ePn!R2DTtoo;b2}g|35JWSd93I&;kg>FX;o<Jt0x?yg
zUI<?!7}v?bTO*kk&&DExRZRy_WNUR|0+XsZsd8G3Y83|~qXW+19VokoL9uB83~LDx
z+%YHRQOXS2T9qZ3st@<f5crP*P!=~_L2m|L&oR6)R}MC|cnEB3XVb{?;4$rQ-pXd5
zfa%AIz^gO=?9O<%6Ob-YMKZEwF;u-Yrjqie6|7>EbCt74w{IAE5FAcwdnbdGML#A3
zM4&KJ64-&G%TWyWn=n|^zYv{BhJVr70wmJox+O_qQ(whC4SKeg!Q19nG=-;#abv6M
zG?x@|?oLjgqW{=m;b4XlPiL<ocTlMI`5H{*C+A57B#=0T4pz$z%qolI!$gN020!E~
z(j2_&({t$|wssHVI9qs{l?x4J7l-nb8K^+X1eqRatG)*x{vo;PZH`YmN)?G>m~UD(
zRmY<?xqPcVqdbj?+o10@I-b&XE*0bO&ekYKWtVJ%qyi066Fn4_BF2RaWBFXzAO<m#
z^eOPX-6?>H^{xt2ODk5^Xdh;(1~LO~m-R0>GVi%z*$bnDF@xkl6PV$#m}ltp!F1n5
z1EW_)gZ*S-7><LC7nQ;1&1zKySh)mOEP+GfE8am#m%SR_EDE}Ltx2V8v>loIn)YfO
z;d~c<6e9jt(fXS|5kI1$ISTXPO9OYoN*&osi|I!F{qcwDiF9<O_rU-HVK4Q5G2B)o
zy3r49pJ{;@XB*rO@z}pW!e|M`ECNTTK86I6r&$_`pfXy5T)y^}4{yPUJsiWPcZ%)n
z8^*|MVO7}pBv}=`;87ksG=QEW3ri6}vJuC~#gI`!V|%O=V+;EUi+q;BC(7zyvU%=|
z7mCWGK4!E&02%W;NRDhNvbyxoYPWDF0cmTH3@Rl9NgPRjuND6j*n(w=4q3H{m?@Vq
zqohj4`}`sC$45@&I_m;RP^e6h{!#`hmdl`|DFI8$2h1YnuhJ+s{jDC=cvR*`mI%SX
z!yGU#i_WA4X5fL54UDyc=CFd*dx-q-VX7#uS#QQObQj1l$F8V5C>N8ij+&l9$hF8Q
zHH)AztJEU9&bL!gTj^^w=>O{Bd|(S0<T}n0Yh9%^-UqEx45RV<VfqGUpqF5fV^OvE
z&Sk@pT(U0)qe6i68ZE9|I7^xKgCUIXZD%ux{e7-rQYU$RQ-gRUt~$J|<VKlCCU!sa
z|5XncJC;<QSMeH6^{wI@<bFupou}GL1AH%}D7hI`a$+t=#7aw7WMWiYpXjz?DY(sJ
z2qazhr+<|1{JTH?V~6<f@bvd@p)$h7hkzrxXQaNS=#pH5V3~MsX1dJI-iP??Sy|Y9
zAeX!36ataXnlKy61$hf5?(Q`nJBaq$Fv4i^JcVus6^thnleWZiqc2q~p#K_X2o-)^
zqGBjcz=P@y#PeWIi&lsDre0rSM+t0vN^xuzaBP<Vbj|1_w-VW?-do6K=}%`3pCz^u
z*kamT3-vnq04FtD;IlZ(Mm@wtI#lwU+mxmZT5H6}5x}8(*rCi!TY;JMb>5xIP|Jmw
zn9dTYwI&r{YcYo0?zfO#z$x~<t&##Wq&zy@uiUWcL%u*CVN`B&R7#+Vu>hSN@{s;u
zimT&RCS<p@B0jGVW_qpkXGNm5Md<T$wJHbI-64Q@oH6NaGY3}nG3l59gd%CZk-J8_
zx`7IdV5G}pXwE=(6%V?Q#VrixE{<=2x7GIW+fgbXCY*=7U)h1qFXkK}ePew5kD~0K
z+kfE!dJkj!u{UQd@R*KdHIl|JPUeAx33b(J%w~n^-iu37-S6ph(pzO9c{JN$rMDsI
zZW4#myBn#A8J9C!B_Kj7$6;k`WQ+bw260Ttqo^08qKZ+enDI5_8N9Sye0~e6gXOL2
z%?R|p#{sn%FE!{)pZ}_t(^CS5P8CzKY{&`v1iHuL5lEC;W|U^Q-CyNmCjbfD>^Q-Y
zdUgrp#s8Fpk1!TMs49M!z{*#W6CCJV8RZhAx$ajATBYd{C1L4-5Yn37awhXs>zCLU
z@Kqa3@r`fqjM>3b&x?8v9*|HldPlrweOWJK%DxMAOKVt;ECmwUPnZp$qO>4P<|4M?
zC9ih2rZQ`l8(6xau6jz~J2!0aVLw)(4Hdgj{t~teZ3?~_>LzmM?RagEEEb($nkE1O
zc#Mu&*_-OIfCIqm)$ia*P$7ZQEqEktT|9(e%mPZ+x67Tb|8NJsa*n<qWEHF$wVu`S
zjRX>3KPIRreuj8Up2J@r$&$sMvjFXoy$I6QpsixzI{wBNLnRtozZlY^i(oi^K`C^H
zOWv+uL84q<5rD)p7<mgZ>eMxP(glnq;NjP6S_FQ{kcL-UXOSiVd28b2V+svq2z|v1
zEoS(eRdDxN`ZG)s+I|dM$&en+@-ajHBfK7uF)3cA14xjrm!l*=*Hi>s{um;0y`BW0
zKT9!U6eRjzJB9eEQWxYfqBH^p`rGex-edD{?@{v4K*K!(N|)uOFLPXoH*ot^9|lUH
z$078Y<p#1Yj<JtkoQroF#Yg(l6#|f|WR;RJL2mo7`#o%+&yRrm`$A@*(*6J*F_8#T
znfd&>q7DcY^AzJ5Q=&ll9CQywJCLLB0pwz)<JD?A!hU#U!is?pk_8de5a_F=L&lyM
zu)~LlDF7kdO8;ifqZ)S??Iha$-+PUpUOoS+d=V--UW~LR4{CK1%T&YlL2a`lvHy(X
z5Nf_+fU8|bUh@<#;yEU@cPuCL_Ie;eyYu6Vxd%|tAJ*NQmA`pTQJ##db_PKUDFTrM
zjGId%eKYN`pLuT2>|yX|ZZZfH;)o+vKw35cdFQK)H)La2uQ|Bk(vZq4vPwSA#+-qk
zb&ZxVj?WH>2I+zz%Z&jp#VB}!;>MluBnI*-7Eq@V+N7--ps~7~Cm;Pt>C`-kU-Jo`
z-VIeCmLA9`vO;Lb!J*iuGz@;6q>Y!>zeKX|BIOlxO7vUKm0D~%DDW<Un!@n|<SH1U
z9L2;Ybxy%y@b7UCNKG}q8+AWe+|(dirAV<()6SkA0nyvEe~dlL-tz=Vffxk1+OO1C
z^3QtjU%ac%(!Ug;&9{}1Q&Cu-X^(F^=XMLFn1)=qj;f0^RytK@#%D6!aq(~rdV;b0
zxO$kwy65ux4R8ZNU1tImrV|-LQ6TL+DJ>?#A`zr#C4A@9<_5B(J7U<bn~LiOgNnrV
zS9GZrB}YQ~+b|SKR$TB9##IdP%5Lg4>^rX6eYY2{R4vHyljoawC3|egLbrmFeix^D
z_!?Ad?<y?7z>ycHl+y`#uY3S?<F&k64)X2G85P*VFb*RE(bua=!)@7WBp!0}P2Vng
z`!J@o>Q!WlmqOwP&mK+NKkNa^>E$`eXIV&<nEKORQToVeQ)NAb`~;0Ka{gy0weGNw
zo8gOmH8k5b;+05EPx-8*)|AiiaZ@dWx|h$(KW%SwW%=^xxA+g5$B<!Hfv<q!LLri2
za6Aa-$(?7u(WKalh;+4%?3WnsL)C_1@Ivl}=wq<{l}!+1=;L|83`Pl8=#UyQdc($O
z7A^i6M*?buvGO}ckG^lt`+Feq>2u1g885dpTCmOWd*r!GGiXXa2IjL!#2fkdm|PpX
z(@bZZ39t}iN)6ly1EoGekz|@;>bpT@MplWUiJr*@Jgf_pP-E=%9zpx$<h6h<%?Gg4
zig4M3pE~VcLEv9>*nfk0!!BbsKTfYBcQXt=3B%wMp0P8n2^avj&wPH@rdE{G>)@M&
zXp=&&>sG(b_?0XsTj$ih<o!4SC(BnxHDDs?HD4tEF2&J2>z8*7Nkygr9BUc69T2si
zD`2=jgE322!+G%A0EjcPtQ{a52-&#}5}^#1eP&MMZYtU6ke#$(mI4S~=z_K~=~Cm`
z2?pm>;(Lag@H;B<w1niVzGieNc;lC{rrytb{%kXuH)s^g-X@{CT)b(P=RnzS6FQe@
z+K$PRQOVjH0oRP|&XMyn`0ZF%H#i{80h9BReWn!lUiY(VFF;%PuRJ7SZd_FHJL{Ii
zC`-N0BCC8q#~dznNxk`gT#VTIa_h_K^Lf?B6QQE~+r>gNXt9pylPXmSexY8i^#f=P
z;~7?h!*!XO+wJZS@~_R*%36<(J<nJK9tb_@2qwCsE#fXTxTG_sYXHN9cijbeCp-OU
zesUA^zC!lfig%5uzvJqh&%u-_&95y<6HeJ|<apE`GDNgoJ(wzX5+i4<j`r@lI$G*<
zh`*Ync6L`p8_T%%a66uWg5kmz0Cx@OJ~8@8b^dk0Fl}&BgcT-_Y6*m5PGsSvF}z#-
zN}tl5GN$_=Fvk=`qBa}ROsXsnLYVaPg@Osu&HZdh2;YWa!E(l1m-6`#hbBNWBBk$x
z8L!kVue|Z<$<%8?3WId%!dZ&1AO3=firy?&Fkpin)Q^?fE%^b$Ofk>|6KsL6>zW&u
zwlaX4=5*UOe{{$1yE1d9*`7P52LMBb0Y+{r2+<HGqA$jIlm0aWNm)DP8|u+rU(A0Z
zNq%@yYbV%m=BP=u_Kwy0PBpfH%df1G?km5wj^5d!?2LGK{*s+`4PTLuHPuvOv|3ru
zqfe>+p_lbj{m!;A-^Z^{r7Y4rJ#_nheP(ru*YU)}<J9DUE4;6;zk7~3O&1!H#m6ke
zxj|DWkHVV0BX$4e{Qb*Kk%|rnV7?S9{)@SQW&G;~#f*{Uy1fr~Q<)#tjNv|pe(5Xf
zFoTGFD_Hq*1q32sI$(@XRI`$MJ^JJITxexi)E`seVpq-Jn)sl8#pwJmCv|VY?wNy$
zw#bnB(j=sAZbseo3F67fRlY-F!5BuuXpG6NjQiZxzFBbLj(eFK{grECE)L)$4gn)9
zCL!z-s68#E^Gyf9<Hzjb@Wy$+YC4E%Yzzv0DaQMQNdZ3n{uFL(L2uRP-jel>g?)ae
zeZ$K*wwfuh*CL7gAQ5&67PM1k-(jZ5jlis~RWQJO;`i{x7!aJ2m00Cv7en}FE@W$#
z=2h<OBd*>*jvWD}s(N=O-thw=&v0r0g=uD@V;lr!8(GR7dH+$U)S_OUw-g$#Cv;V7
z9hRgwo;@LdBTTWqzUj`}3EjSW$*nYU{D8I+#K}&*F2_Qx%S2U%^C_o%H6I$Ol;okE
z<|@(GyRz6mJhi>O^rOo3ue&oUBOFCr!?**UU`F~Z#SljJVhc2P-^n?PbiQ>lF4|Qb
z!24g%Bh=^MP?-4AQ9;PbY~yxXc}PA9=G`L$(2~9b-D)>%sq=dhp%jURRpjU8*P8P&
zhMat+nLSAF=*blVm)%WzDw;=rM7qU0_d<%m85Qp%j(>sP`n8=ih_ZDFyEZE@tN=!U
zD>)C!M@MwBeXms3#sLUmEz7~7n|DdZR05j-6DV={^)Iim&q0&h_BM)qU6CfXozt%y
zFy~ipyb2Z+{XmX-VY^I+8qS%DC#cx@LJBRHj{WD(srRpDlwR@h>M<J4=FY^Ii#5T2
zgy}IH;^~_+x&;4Vk0ZpWIJYbbUaTf=e`_!}A7>lwcYdz6^60c|KW}F}UG2*&^v@Cu
zq!kEC;l!Grw-VHvq=9UycULv%;xAuElxc_J3{lS(n<;touGG7SP2D3$)(la<RwLNR
zvbFrV-CS4^55qL&rJ<~xAJgJ`DJL>$Z}>cL?F?OpCglNPA*8b(zl9tMjxAP%mN;1~
zfLuLD8hi_<F*UD%u6alZlhp%`tpzn^XYWL){1`!O@8<kn;9xK&?2CgZb0N5!=wT@;
zeojr73!$d)W&z~aHe|}WFTM?W0PnF4g8%Ypd;?6=vKX|VlhO|XJTi7bukx`qW$y)#
z`V*c!s;FqR8ZT(bt%XSWF}po4dhu^y;20J<-hH5o*SNUDsBJMyx-Ve`Rvw$Y@$c<-
z+-ksRRFi#!%*+iDcL{8CmE%2+L)G*+3iCiwi<HPwNfXDL*igLi8eG!vxb?1LXJLcD
zIQW2@O}_^*S+)Nb)$Ss@Qx1->IBd6`$IZ51+bXZc(G^;N$!Vnq)zt<kt(Zd;e)|&X
z^WTP@(9B}f!zmH3{mzHT?Z+JF`FXn5ize^9dr2h6g)TgvV6NY)h>6Nl`lTyEOioQ_
zf`Xu9uhg$5=-_=A*~E>ii@*N-+?mP_+mFBb20jpjUqRPj#u|w&J5KbaSi8;jjdU1=
zhRQFk1R^d2v7FmFJO~O*E4F{F*3<qNj0?k%nr?(4F~ItUhB5o{>*(#{Vrv8&X5NM&
z1;8l&>U2O2G)o)U*kb;tZKmitFiyJC17I~PQIZ$APpf?ck8YV>Zx|LFF@&K@NMEjx
zV*EXD=!nCu%m>Mqn2?_e_hd}0?LGu%YSngfy}6{Yd7}U`d4^!8VT>KX49o<kr8!{G
zUkG`?Bm{!|{u)T7R)h0Scr5ZK`@tdhb>`a%dSN!OWGZc)#|_e7;mWU%^ik?*Vi<x%
z^!M6s%Uo8*uaX|Qf4duh+od4e@wFN9Ns_3zDZT?H_RA51J1d6p3mQ<TzVdVI5+!D%
z)MR7X8^Cw}l2fxy%>$Boe#<_VP1ddgu8sR~J<jEeSw(ln>K^C-_|D4)d(Mh>ZmYrG
z(h8UuK7B|l?Hh&-xtusvG_qpow<b><I}o4G;58-;H}71+iYfs9u2xd>KZwv+;!~yN
zA2yqZEVf7qWW8=|5q~J=N3s<D;FSEk^%}<Iou-b?(Xn{V3ZoEw_W9Hq!6tqZTz80>
zUahFoiA>^p;Asq})MY2a&cf~f-5NvHYrz0uWy;AMGZ6q}Z7_Ex;DaLw{?V8auo(qw
zsni4v%w_EZ$ZZIePJtj~8eJ?Q)JP3`06a_%lv#`~z6>SFVbp0q;9jIHYsVB8C8=~F
z6RaWIkit=hFL$eI%_m#@^%IpUB=JjZap1j**z_99OcD4Gif^w=GM&dedc%;APAq1x
zgrG&}DK@;u1dj=BCWVEf2wccCNpHln>D^mE;uB%)6&PhUCKzD8Is;!FUxWS^F4zJ}
zYui;S)*Vyin=q+tj2aAcsf+3OoY3;v?f1K&T3QL7yPyqc)uU=juP7|`z78g!b=h!O
z8fN3VFbsRP8~8M<S$6L5&cx`AEn>3sOvUSIVSXXKY=njNKnECb<i0qlz?HIRfu(38
zb?&#b@0*pzssZ|Q7$E*i1*z`d#PJci;7z5rQSBY9PY=jM6CjH75D;K&+|&2}dVFCq
zPYBqGj{+`V*_%lD$jvXAF4{(`=6qb+8F$q-ZKR6FCp5#BfI!vMQ01Cpc#)cVVQ$;a
zBHHy;`s^BlaTX7&SdH^}SF=tb@{W#NxS4}qh9_F2l96=O@Armw9xTQ+X_lFPIz%r&
zv`VGX``meUa5p;Z>MjBP>od;>ZogoW_PDCCn>%toSx6;(CZY9iBQuw#P@ia9ZTlV{
z8MEG$*l~f^@xG(F@%uOZdf&9@HTVl;ONB~Du8z!9AGY0<*7*Kb=-1^6%Yrke4Q=XW
zmKlnwyC2%6#gCku8ePus=^;l(=MCMQ^v4S7r_SdMHs%uLCL5HjWIop`qJ615<xh^>
z_M=AB->l-<a)|RYwP4QK(a7*q@vtg!c^tRm`-t?G)zm`Mir2(~U@4R0W9JQOf<ubk
zr<4LbH*U*@oX#2kSdY+LPG+?A)V5nK6q?vi4J@9wBg<~dA8ZM)RU_HG^6G`M0=k;d
zmL-_EXeqdP*2X1=nZ1@}K_hNCSlMBp%C^JFFo90_W4(hMNA@tM?alD6&Q}KEI|upa
zd)@S#C@(g-nY9iUT6dgTK^PC{I~}atje1pbY<Gb#|AifMk*(sF8rC5+<5A&?6e6_5
zIx78o@>h-hRfa`Ro8%8MKr!9B_cuM=AFEpZ+;H-j=3XSO*>ykpP5Bh5j_mpj1BAAs
zQf=vyiuh6Lnxf}v4hW5CgM6{mmEWg>mmvkt0gG}qW-Ets&+Tz8oZ&a%y1irqrn7@@
zeHfb-K0hY=&vCOyLKB1aY0`SqB`O*3;V0|A&SLKZI$o<GeI2$bs?ZsQIYS6z-G&Zi
zl+p|5z?$xp9FO_%WW6}d<7xo5^!eG_ub|>c`@dwEibCqk+eE-Xc?A)Sr?MdKqn<O_
zNA=wdWK}zj?JZs(h$VfsHZFkwq$8H230!Ivs($pY$N2N~?Hka?pkV~HTC(AD9<^r=
zAE;O^dNI=?jjnPj+*<jBMg;N0IdKnZ@-Uu2+1GZ81GIi)x>~C_OApZWlReOtJGIX<
zF)?hu-oaQJIg}GLYTU~S5Dcfb;JR><*#fR)#4>4_axu-PWU^5-wC$_2;>i}D3dzR%
zJno9zsKwYlV=2DH)!(mp^oJOSY6mAxOoo9{LX>K^$}d=z*V^};55Bh54d=6Ww!J04
z(_3sQI#hZss_GcEYK7}GU$6=u?s|>VEIUjO7w&K|WVm>2Cz$iLeN%#&bG2g_P4||2
zYz><rd0p|wuHr{r6~#OAadj%;*CfVurd*8-E-cQh4~DE7q{0N(dA7*Jo1y#s9`jLc
zzDuQ)$9Q2!y~XNtoEqxKX_9tW*Zh33<9r^Bvjv>5q1+9f6@o;fjb@tOhfkVrHNRB6
zUC>p@>@NPOP%?(0qTDREyS?;RcK;95t29=g!M>)V$p<v9eZRILG$}8Tt6v`FoG{<&
z|MgJe{{AQtclNvE+7YqqI{_JK6`yb26E&Hd8B+T`=N)eM%r*bG+`zfZQ7Md(bKbBp
z&_TP%`ct!)Q;8ezhrD_^B7wInL$f<4afotk?&AxTOIv;2ImU{gTUo1-G`5&BCXlV^
zFyCL8%WG#=H8tJu48b{;R(WAgUef*XvaWwj{fm9IvaRL)4}tUB#N*Wl$8MgDwbV-b
z2gjVS;IB9n$&}TLhQCc67nm3FS~)zAXY|_LweyHovEneJ=K0wDvBNBb<7Slnf+=$u
zA9eD`%UdjM?vv~tGJndT{mY5ZIr39cELx+7me;<?vhygCar9&2ugeKHMvMU>r6_r3
zwUf#!!!RscGe2oL*f+}a_|R!5{Rn!z(K4IQ51nTrLsD9afzB1I!^Rn+;f%Blr_+f=
z<Tw$se6S}1`?A3DvB3G8F1nnf@eyO^v&4p2vDr*(@QETG5;Jg!Fjj|dK`wScHY#IM
zyb6hu#Xu|w?kuex`+l1K2JIuk#R{fV5s_HPIlKO1<zR<H7`<a!P11s(0eg4+*C5rK
zeDY)kZ3=EM!ME&0(N(LnPm7Ol-$pq4VY;@k2RQ7$F$X@><<3=8dCB)s#rF1Yk}g8)
zOR583yYx;`?!5K8jzv-2t?E_SJvMZ_#J5IjY5UAi;7;b*lPdR6zmBXldvUyc<E*1~
z;}qE?JIf609@UeBcW)v1>$e>)l4Xr4uGVSzU7>z_PW97#-Kb=Y$y-0<C-P$20yR|J
z@?v#!u9DyD?ik4nj9N+!scTvJD@0Ov>q!~#`*M;ZER~m{r#e>+Pbp?lUQ`T|nxe`#
zm`U*T92K27zFuH3b3}f(Y`}s=Ekn!S^B~g?IljCsIAd4VwjVAnomqM3;%k-kAe_AI
zE$uQdkBoB)#!I^wOI3&GpF3@<HauJTRLG^6wQxLANyN&4vVZaU(bj1`B0dScG-{ET
zON>GI_<<&DO@#izX4`q$**<x$0353;{k6y(w&L!d4h*CZ#8bvmU>EDO(YX+l=T_6F
zBzV=-(Dhtj--b|EUmqe<E)ini9l9#Is@xr@-9GNlPtblzdw({c?_5>4Z-gmNDOo&r
zWXG{;+736e+{2RRaYAK%b!XN7$Jk>XXTd6+q}<7d*qJn0st(`x*vC%x&Pt*LNOpvE
zPFBjmTeHozC5zNqmDvun&N!lm-L;2G?(}<<=WGOCknDVEaeTS))hoDglFcgGH>v61
z{qFsh9$MB}68%=n$1LhkWiI96^GJ++ri<%Z@bYt8@^NWwc$leDj?Y85JZJR5mq1T*
zZEUwOJ)Y14Hwo|XS9%3K85&whW^gl(Bg{GcuHR4GXV&QzG3Ox8m24zl;z{S7b-mrm
zkFP86{MWq^hiS*^W}HE}Q!l#Rh`ZfLzIhZ{MaIr5Z+KNP2glG@y))FqJLAQstk8)@
zrOFUC518m-n{SC#8*1-gRgDl%<+-)`chL2>9Z~)(?%p=xp<b0nb7MZ?)k}Nm-0xn~
zBUYRqQkt<Xm0Xu1Mz%f>jiWp!K!uBm+JIS1X)^>nzlPaofvv$DQDNGNnOtK8HQ|Ss
z27TSZDz|!7@A6dFKnM16j&qafFnGV|=#nerYInT<)AKjg<kQR;SL8ggXsyoVvLNIG
zrJ9I!*E5{|)v00Oppe4)fi1B@EiWYwZ_ZyE8>D-NK3wm1iL(wUbi8-KH)LkTNH1u<
zCzgtBG{Q9PejL~=w=r=QiT&I^!o1-!q1fvI;+>brB(n{2-v%r=m34hYr-=KI<>$UH
ztjN<)5Z;ZQ^hFQgAYCVPf90@T)x5iH827fF<J+vVa46a{1CLEGo>JG<OQ!xBZDMci
z9qlWGzA=n<-rpbe3(@t_@pckTr9!6;EfuHbNilIb)V3@C+G~coivN6>Z6Mauy*2(?
zs*_PmFzxpZH#;9Jo5}<uADPD76xNp%g&k6<E;|;iJDcggAyb650SAIYAN3i9_=1zU
zMcxo~c&)`8cUqdFY>Nd4aMWmrrDZL5n8XKV$c+YGR(+D)q96(DHG5SQ=SWeR&r{BW
z>R5Y2;c@2BN5*n7vV$w2{$A&TQ~I`){#~X`Uojb^Xt)Zat;}osmT}Y7cj%(zVMa*@
z^yp%QHqVHu&a-x{IJS^1#V-fneG{p9XOzO9r!N%{o_84tuG*>kwOlZ-nTXAVENfM!
z`+?Bq{nD7(>WaWDYtq{*6yfK8?J&y8-OZ_{_8to1N&b*ib@7~Y_QZ&9%s3HlPrJ3z
zO76_<<mc!f!S#g$;y&-h>6-`fF87eZ=3LjZDrWXYlf#p0&y4W!4f?LFaNEUp31fA5
zp5$6)D$yP3>Ux$wP~Pt0B>T4I>gJn3zFUW$r{Y#$J$Zm&aZA=b^R7@}@kJ(HJm21-
z8IyTzH)819^cgl0ncPu*Z2fH)L79P4{4)KDpX%3B@K52O>bPEw(3sNSWn$+t?UyVP
zRWdLJFLpTeNzIU#pk*AG#r}|B_J=V-)B`H+k6+s3V@S!TRI>H3>5!tjU$PwulpN;l
zl|D5nEAuVOUY6{6E2cBbdzQrgnZ-&tZCDD~Bbh#YsZJRZ_t6@9Qr%uT!pj~m0lc(N
zbTqeIscEZ-(dM{Gu2;oAAyLwk)jiagXJcGs0;S@!%BJ0Stlvn>YpY2zos~+_Fm^jD
zWZ|q^mPPyev#jK`lmUMkHRzo~v!fnvek~qbI=Hj!^mP1{JR-F|PwE4QhWf%r{Kn3_
zS8dk0KE|q~ZqdO}`ClYXn$01<PGURR2_#2T9<gE3Kg0V-T9!VdlN>DPg2*dEb-7))
zFrdoy*MF*{IfJeX=U7}=<K#A;MpX5TH`gi1=(Mb4=*3eQktZTnhn-9Yh4QGQKM|LE
zeW^;V#y`%&s_LA%*ln1!ShslCpnfDx|1rbk(h2s*(RBjI)=;B<_RajMxfxpv*W0Un
zeY0(5;awW~25&~0muCkqBU7n7^2`IJ1hzQz@7(v^=`b=K>g{ITcvx|`vhK*R_sJPo
zqS^>sjCom2)1wt9Z#vG?%UD<@p3hQe4|gWkxlY-0zmYett1&4m?ON`Wtae)3FBu*F
zaWdVgI^;E4k`+5cZ4*>^ELDWcH+HfFPG558{f}$6d*4(_c07+Uk&$ny>>5FL>@=0h
z;}%%UxA-o$&(^80&31bZEX1WevJYc16jk}DSL_#W_OlQJCv%UG0|VYq#08ZzefZ&%
z-i$P1IoD{b@m895Xq@Nw=7#**8m@lR&~_l-kT{wUr1p-My?Y_oXS$CwgVZ@SotJ}!
zOYgYJNL+i!l*FgmEDw)XoJ)zVQDweIj->lkdsV$JSwWh=Gt(t~>sK}UPtSI)4~d&{
zZgP`-w`97XsJq?M%6UnCcWrDvKM;{%*2~C|J$@#!_5?%7cLVPs2;)qqo3&!p_u2_0
zsQ;Wm(-ja+qQSc!*UefjK^X(5u14>25mNC9-KH4LxE9~pD3H&$XyorhZ>aUb;9ZA>
zLt5^0y^<MKA@(Vb(t)?bsfNc&q8=JsnPsU(g4xS<mt$-raPDwUvE)AdG9*LXbz-BP
zdq_Efoq@Ghfo#-hHOs}ah%Y<SpOI}hG5o~$JKQ2-w@wW&vuo0HSQ#rnO5{GrIYFj7
zUd;DsLeEDi^e*8ym8HVP#NZQ~MeE^@(1p?o>b3Y5J<_@oT8li4{h2#XoiC2iTnVIS
z-`K`)KBLHdUuI7--2cjA#fG<zbYb0-e}h(Pvg7?Z=R5;(TsAAFpW8E^2#*jD>oa=K
zLr-`2(VvIcUf%j=*mjd`Wb#i)jwYD<aM2#5MZLr~9nox1e=K@e`|G7zo0B_Vb_`>5
zl*J3l<kwN#yxGW@u->Y`+;731nYH0{njb#yF6`i*lwWtW(>!x_M_I{)E*F_=``Oqp
z#v%FR1C2((h8kr45%Ha0OZ&>!Y|{uX>4g6(uw-4Dp5>T6bQyigk!#>B=X1T$#x7Zh
zB!kqi;+}CREz8A6zV|GTMf96O{Z_u_xHEaVeX!hZyL3Zy$Hut&{aI>c?*nCyu6PT9
z^TFnagUV~_WExf;igTa#V|zGi`McwYEPm-kzg(+SIW@ZZ+GTu(ye4>O$@D9`(l^GD
zIP`qN8Us9;tJ>RItjNwF9<lg#ql)GQG1|cMR}4gDTy~_gTTBd!eB#hOIAcW@H8rOg
zi)QxwT7WJ>B-mb#GnK~WG}=%#4A!hu>C5d(AJP?z;H#8*V&Z0;?Q&*ozrECCfYD=|
znn`Q-OvcZI)q)Cx{<8OGL9D;}pBt1@c*_37ksBW#874YS|B(f7cRTMzt-+SSGxUKo
zY={<X4O~;?rH8TSoR4#?xe~u8>bi1nD&#*cyY!^{u=0!Q*YKi+o~QAft&b*ZSiQ=N
z?lYeVavNPlQr~A5h}`ILwi)zP9#tnn*Om<xx!rxEA>(TC+0sW_PGjo*+u_1yL8{Jz
zW0KO@eA&62nzCg%aw7w69U7|~G)--9B#HWa21l0Kt;QL3*7w{Na)bOziJ8R{Zw_h_
z5_j9)U5gr64Jx8EDK!ggR6odHQ@f@1IVag*zX&@T-Emuj_Q^SQf|kohC+FP_2C!$2
zsoA3f#$1=h7o5(Ta4Barq#TU&nSQxN_aP$7P(PVmkbL8GbLZ>3$x(zyF^tNim*Ts$
zMLdh+14LzJ_J!j&mc^#qll7xLyynWCyAI!1QxC{+-S8kAw3VrQ_X_V57wcd}t$&*?
z`jwTgTiRe^4&g2v9Z6M?#icg|$pnS(1v}hnIX8DcD@~in==t2It@~N!IiqmhK@|QU
zW0^mmp?AUAH>aUyDjMyY;i?D~q=vg*rE&Jp3d;~VL5Q1pTRp+#tapYa3kj8VWx_38
z#@VtG4Y}avT)$gGAs4cvoLf`MEhGZ7v0iTSPmLtxP6R}^d8C#NWnhI|6?(?GtY`Tg
zk8Qw|y1+{5ot)AKDQz9G5Z2V!Z>S<kDunpc@nU(I#_0#gEOTe3zFF=o&<=AmR%!S9
zm@$gn^$#mL7iyMHhg4<y;w*yPOSJgj(OJ6vxw~l5Fv!00BaW8L7A*;DL{4$)5qGBV
z_|ucJydBE=j3yjY7d1^<mAQKBlHmAieF7#jM+>eFyR<1Li%OZmthXrRRE3^_BI;x%
ztIC>qVXd{Bc0>yf&8wf*)Q<`#6gwJIjZ{lxS+%SW&ebX$d0gVoL9^6itA2U&R6X46
zPMe>y8GCxMbX0b7w&CIOZu!-F!7<U<11a2I*E{!OXDYjKC<a1*Ce{@C-7B<UP6)t@
z`|u;*mc>GRQMcF3VSmizk%7x6@67cNd<J}0V-MX_q$d-n&Rx;NK8?f<MX#K;DVlDn
zAv`N4D?Iakzd>;C1j#v8GK8+?S{R<(&2vV5s?!uM4oidG6)IM(W+CLt-}t3Bv~w-{
z$KOxglGa%;3CP61kC!Kv|LFwFW==NGO~){)lGv2N5?o|!C);$1AR-~|BJ~Jb>;&_P
z82O;A5Q8{EwyTVcSI&(x9~AoYB}bGDGxF{8pnrMBDIhndLKhUN>d|V!b<-Y)kj~<J
zKa0TPoihPRV}l<)s;{RJUMhDLMDkrW4F0lI($;X)^QIC<BIcL-`f7Bx5r>-XcKhXJ
z8XhQ<+GggK!YjK8y9m_{KBcDT1QK5OmHBKeD^gw0HU@P_xHXnJvgdn^N;qYcBL%ai
zIi4QZ(3X+Mu#dS*Xwg~jw27tiUX3+m6e+%PGp}ZE+#tJ{FZrm^7jlcc#Qx>4`n!Hk
z-XHrbg+Bg?r{_-Lv{TN;2(8(E@M2N)kFHbx{iDh(Sci#kWW6N*&Bi^$l|fJ$4Uj6q
zNon4-CYPw5<;;9O<IY<pTPm<9`%8l|Z+PxRP@x-wK1RofK^L`5dO^Q+9920w6KB);
zYIodpe!PPZ$58v)`@V@Y2sabYs<~bM!sBfF4cY=Hyu22RZW^zdz{3rJVC@1#?1?+N
zs7+;((mq}r=#*BzIF?gY6^1Z4wvE54Z9|qLTRSK>hJw}b5A$p0M4+2#;1Z$jp^}T#
z6N`E;BQF(SI8UI-)tdL_!{BQB1tsPd-=vQ?v12oIzM}N}b?r)NhK#pyC1lBa-bQoV
zUGeAy1H_04Bi^!h5+(M2L#=GxO{u3cXS<%E>)ahhRh8zte3Lmyd<fiG2XWY}c&;_}
z<s#NzM$6DQEBEjh2_0QHNu6}IaG<AK$7VFdui>Ir)jOnORN>^UZJHOM+*33gImMia
z8I2g7S1J+g9Ts}^a(agMCmrnatAEk?7E*8gbCMRS$KJN!J(`(;aj$=@Jti#&9+ohI
zynEu===W;1fn=OKO4!IG1+k3A#oZJ%o=L@XcttpSl%%sCsqH+I)DDx9xge=hb+!VZ
zu+6@bvnat$I3bjUly1Z0m}xV6@XL#_(jLuoCiePAwkEI6EJxN=(z=HiN?`Xj-CxTI
zHUHkQY!gM;@shq>DPe<Qh3n#dwy8^KA3mBhio9*w+++pq95E_laHGYa${?r1(Ka&1
zD_Zwu)r>4{@;-(*v~QKUxbgA1$<o|VdYw($aUwRPvZ-^j<j9XO-^76y%`SARdiKzs
zJ@c6vbgJ2@sVN~BSGnjm1g+kwty*Tjn<9?voN~8)(d>Qo$c}V-X>Zl$yX#g$hf&w~
z>RzHKR{q#heJJJb#kQcFyz|wXItvWQxX}mGF{~*9jwOWGr9W#=pYa@Xj_pz~Z{wa#
z>#|I#z~eV~R`|^>@{Dx-F_Af%XgVeuI#32`Rjsk>ET<41*=UsvM>`w0iEEu>n!5QR
z4nOy#Qe<#Ny`;2|O7|W(u1$)d!(Y8RU+vBH`-f3)p6m$p>|a&Cd$G(M^H<)aWZjby
zCt`|BQd*YxC!+SHt5IC8WbegxhkA=bC0#8lS8@`ytpi)0TgPvAOx!YTIYCiXV~D3*
zlQqO9wE20Ne8ci7H|<CLc$I)S!E3kcuWrUjUYjMMPz&<YeWdhR&zy`#Fr%<X`38QI
ze~`;L+TrP(BvU6_&C{n5@ob2qDijCJ8EXqooevEB@3MEQi!7Q#Q%$w_Lz6O9(orKH
zI~Q_d&vR84Zhz=@P2{GY`C4*;RAZv1x&0l#sd+t<#xuHnzKJna%n!)0G_p1GrrF6z
zPn)#^XVBasJ57#unq!8P)RaR+n2>GcRiP#}rFNLtap-pgWwMfk59P?X!RXY1O@3;^
z${8!^K^l^(-Y(ybhUF=aew5vx0rOwn{*)@*R>9_%k$OjWHTrt{`r7t2VlXQK?ydB-
z$wRqKPYIQv$eA0z_fz!#!mYlsMR5;?f;aNro2Cy8=%#CJc5+%*cQj3{P}j-&IRnFs
zJ1reFlW$mN77|>#c!^_90WWDM5$D!J75$W!_-6I>D&F8@G7YYQAfL<wx+@9a8gCq|
zxE4Qar!axD)0jHBVohb<zxQfMHrmbJZKF|Ve}5XiIbKX@qMa_fh~y6`?0@Ja6^B>i
zn{6>*p77{dc1n5N7P-?$vuTQrN61zcrwIj(D5>~tz4&C}ONCA^@Vdos>y1|KE?Rdt
zTbKYs7GbnH?ha`<xVV<2Wp``G@O)LFzfDoE!d)(&7_TorNyTKlUH7fKlf}rw*LQ+6
zYz3a5FI^6le>CVCPH2}_LSClpW7L^B<j+${cUuSB*u}fRI$vGwNW-~f*&$Nhv3}8p
zU|=!WZS?Z=b|qQ`9fa0Ce^qw>S(4dW`}}l?KyKZ|#I3^hQbcxqZTq>Ov(w1SVK$xC
z&d!p|mBSuKKCP2|zuQvfO>nBfm$}+3Z8x1j|NF%nh~I2JM!GIH2+mKW2JyLmI=K^6
zxSs3o-SKGT&T@C%b7Qje$urwE9lnvB-$te#Vx?IogcfoG1-{!Txnw#x3);RHTvw$H
zv@v~SHbEP%b^kgKdBu{uryV_MdU{boS4&rXcL2FDgZ<Fli}IP;Z#!0aTP8F#6O&?W
zc`Z168B(j=?zGLHZ+g+}IX67C8}ztx#$T$EL*~hKQffP3+D1y>#T0%eaylRLHVRM7
z#4g}AMaArH{6@4X=gSmJo+gJ-czJ#$Ik9dQyXxm^#>xJ;Jb0;~kT!o$@ryIbOi$3G
z(Xs3KcmYk)WcnKW3gc%Je3CmVmTwsQaFdN(A$0u8rTMr`^O>^~=j|_k@7g!!D4ZUA
z91LvW&;59HZwCm@I^U!qh21tbEP>gR8zcS5DS^X-e#?s*UHkJlk89ToXHCB%Kd*+4
zQfT*teR>jL@uqdzBU^Hx<3oI_{d?c@pVF<~PCQ<jtPN7mpB1P^e{Qv|EnE&*V<-4K
z?C|?^RM-XY<z)V=ASXtM4L+C4t5EIgu%EUk{_WtxZ>PwFX<+Z|ciUXquT=Oqh>$eE
zBIGc!!{EM(rLB3}yWE5qq_ziRlvv4>O}WTapNhY59j^1?sf)EhEyBsvWw=B^D(vsB
zAu*tR`-+`K<j0Yk?i0RaGrx*!9E*;fq0I;@9`p~W-*3Fh8=OR3`uRfmD=~4-Qyhcs
z#gl9{+#U=Og>Al%`GWya`|5R`TFz=ZTBy}CWYFb`x$Yg>7+)?#q@|agN`1IWG8-%q
zG|c8%Sh$6jPie*BA5(fnroLSesKVT9J(M)y7(ksb#dK(2%Xu6p^XB93W@%63w*Zz3
ziKjyMwMhvB)!eLz@)aXXwa0dtH)JQ5x~3`2upeI%=W{8LoY|*d6yn%viBaJobCjWK
zv*hUt<Mz0dfKYM|{Ssp;Y}si^!jfgRvOn2<p_VGrvL%7GclY+$eA`I>;ga@^M4oUt
zqvg{!9o0iKrex_Sw3do_XU5B4gmAu(#+r8I6C!=XG(95w#hHdeFNtHGvvXzTjJx=k
z*;yH9D?i?SSt?l}7&7V@Ctcoo?$jQHXJ|r}<1Z0-u$jYKsT$K2i5FxtkgZ2MY*5+d
zKLQMFfY!}UqS@?;csF<RIXjKYa-4u#dhaY`Z}_e`6mU9wmQ1rrg|3Dxg;JCo&)Ye>
z>W!#rapvOiwN`qDf;m^nM(Nxtc{ju+B2z=y56XL#6MDNc$~_4sPDs?;>TE6TD0kQG
z+)XK)*_YBtzT!IcVZmtjB#Cp{pF(zjY#RRSt^9gZeno^<@Hi*u=Cx+!PN#_Z-^x0p
z-;<*|{m9zO|2lb185iqT*%!aqgstQtb5^hZNAEjMgq`CH_*Fo5cvi)RGlv9}nYAQC
z%6Z|967j6fXOTXA9N)OK+mF02MoX>T%*U5&zu`C#RTnV(OyEE$Ro>e_D<t`XP;>}a
zD&A~*@JIEXXP*kygbD`Z?aI}BjARJ?a*H&APuR;8$4+z3wjFcNx}?RXSCm}}?2YCo
z32G%0CH)+CW|`b*kZUIH&Y2FS*5uBJS=q4p^Blo=ND~fkuBPlKqzeo^4`$<q;uvHD
zvxZ)jut%V6aspk-Jqu%v#$vaaYME2-5T@tG(pt{iZ47pJXdO!#^UY-HG18ZB)2A-l
za0-9*>W>j5Q2Vr9&1)z7`Yj0s>k!E)Tr-(6+HL*>KQE4`M$=&QVGuSg<Amj9|3%Mo
z$-~anF4g0Gv6GxTy|J%m4P6r)IPTu5P#YsjW}nq$A`R&?eRwA`Q!g=;g;VpOWN(Rh
zgzPry-huIjZe{0)nWo?qISC^(b}xrEwOdY;@L$>1pL@7|hq6Y3<NdoQE-MZ05-(K=
z+LLs!Rl5RCa~Wses(or;MKb%jZ9ThW_eJW@99oE>XRdn-U+hqt<J@Z+JxN6IvZ#nN
z3uJ$(dLzG6?!qYixmDpqtv9tKc<iqiv}P)PBLNO@INQGfBf*0!;X#Ztp5|e_xK||I
zx$>1(pIs|~k4JhkO1q>!bTup1l*`-6Kc1?asV2%dVPI8y(m{#Ppi6q<Q#yZ#O(Ica
z;6{1YcfAnGA(_B>^*u_ws=-J0<L7t?hhtjVwe13qv~Hwlmc|Y5hfvb68kA)PaSW;0
z;H~P5o>RzeHe-LBWRNd8x%_xK$N9SHkYcVe4TX|JlUZkPv^nl2tLl%d8t)p1`6!<g
z`WYS2j>elL#ZSaa3uXo{X?^CQuC>~7n=&wZiq|Bra)58eMxephj?-D6%ef<Db&imM
zkM{QLevU~L6-j;XTO~hkrLRnDoq_U!tUJQrl{uf2pcA63{FAP4+%_prEkh=oY>f1F
z#i;Nx*`RChVqg0I*n7{gD6_0<xJ}rGG9jXcASgjVf>?k=2_iW|Aw^OFp@@=1KtK$r
zfaDAkB<Gxy3X)VpA(Ui^MMlX%@ZGoF{XU~lJ7af$f4=vcAJZci7Sy@V*=O&y*Iw&>
zW7^B%rD7FrRW`QV@x0@=Or^%0P7Rh<>tiqrL*%iu?vF^A@`^K*a>i^Q*LE%4y2f(p
z6*p=%BZ|e1mn>M*mviQ*?T-%Y{~X(|e>%HW0mxa-U(R-fS|#YVU+A*{4fLl*Fzw_Y
z5ur7~7xo)N+^z9s%$7tji|A_W%{BBqe%|*>T_}YW3Yeie4`Eo&T;h0?{@2_=O?gXE
zR?2W2Nx^B+EhQ-|yTK^s)K!*lscMTs9)6X`bi0#`Q>V}#EYfWyaunzyT_-=2#hO;y
zcbSGecIwDjd*ya9z5T4ufD3Bm{_@0<<;{Ehs*+P#DUQxonBhEAd<i!0lfV<M>9k($
zcwHtdc{`dqwK9L|J#U4UcX<Ymi@v^^i$=*OL<x^-rk!fKIo~ree_c#Vx_x0arMpAz
zC0BE|?tGP=e0|FE>zQ>}skTq(#5R&jwHt+%eEVcrvvr8lNTImXli8Dg&QyB@7p?o1
zk_uM6C$6&Q@^v2x<;oc?N%+aIXh`1zRuTejh$Vy3aqwE1zF-Dn5(gH@@t_yXQxhL_
zT6;O$Ao=!|vEQVEKHS)K-uo1y6VM*IG}U>k>}JrQo*PG80Asz{C11I(+(#udx4?bp
zD75ZT{{g9eO{@R?f85?3Km<=+&U0vdxlsn>eHECjKN}Qd0E5~0!}gI-A1;604G(oh
z#O2lm6j`|pjf|Ki9*t+8x*_sgihpu@qyzapQ6=T1>ZW?m{XZ!0KeNr0?mWMW;u_}z
zA!BhaF0Oc>q!;qPg85qW2Z>vod@O$Z0W2AJ+(VF&330id`;KQ<ZDXB&bz|_i?HU*>
zq86I6mt@HDgL>mn=NR0EkNkRkrtS6Hw?QDo-ko}QZD$|i+7_Ew?M!q0w<zZ}cev$w
z=BD>N%h~Z+;SK7)sSK2w`uu8EeSFK>!yXt#3<CDB6mYfUfz+;&f#YsyXvoP*bv#%6
z^`p8qawtJ=)*1o@Cb$ww!Z?KbDu);Ak4gT2`ssdu;xf!ibfS#2k&FAw^78T!6F#1L
zwKOanl?lJ?nD3bEHpLfLl(dP9HwUP{{tLJGgEx*#ZgsnZVoOL$@~q5P?0#`?ry)$c
zTZ6Z1JfEJz_J6;Ze(-9tl-q82$PXq@+yW0WX&8Fc*TcOMOFK92`8zCPNZvAWS5s4S
zNgZ5D<|Y2!hx*~xZd8qVc~7qIm4oX-M*A7iwr19iVP<1{i!J+D`^oz^_$BvO<93k@
zn&kEn%=374vVv!{--FOU_z2%W09svI{9U=el<^aHW_!zsS|h)$;7|VR|NZ$?L}-1t
z5}z~t%$fOv@%UZ1hA+V#6m<FLsA|T4G7kOkw?Nj(cQ<&CstmAOqyGH$AO8a19DVu{
z(1)k55{;z!xsvk-Z<|63Hq{g}Cy76J{pWti|1Qlp&*oqE*?*Vjzf1GO75L!`|J^nJ
zU78=Rzz<*e@2>gp()@4*e)z(Fcg=s7=7%fr!x#P^-8H^ZyD62sOpn5hDF)Pp!BzO0
zUcytKjc@pef4LB$#l<vg7|e;uH4+L;HP$^CWh%Mrtmsdj65r}JT;(huj`0J*t_Cn~
zV|}&C*xx(q^}|B!KfVBvLo$IPto%S5=){;YFzOIF19&o;0_DJB-I42B&9C_WN@#3$
zV?ir~4uKD$GMB!7JrVpq#d$3IBIT0InnwmbIrc@&^jGPD?N5j;ss1~k>Yu9${@6Q#
zRU$zsE(!P0(Wa-S35!C<s^wtn+85*=E`jms;l+zkHp|;aRDy&YQ?uZ_*BR|%P7^si
z7L75!Qmx8g2XojXFxl=MVX-jQ%A*z(6vTk&CG{*_;XFD6AOniyuT7tRSL!GgY$wPa
z9gRx0Yq(Y|0~(k|GHQk&guWADCBsK!1qst#wiSrZQLh0w$EhSKP&=VnvFW}rV5(BN
zGPnn^OGj+mD>3ih%@z+CwADVz1u%e%&yc%#fgp=8{yVO}xVyt@Ue~T&{TV6L&yNn~
zPrbS`gEDgS@(i0I`M6v+KNnB`h8(JSiGbYMwA-TnuD@43pMD|&v!GKm;dGx&5l7};
z^~{q2dJKtDv>ZLd>emUh3KBdSw*sSRO675%r1UZ;yHp7`d<y}Kc>RD<_w<&!uRLzh
z6f|??`i#r~$vx%gKBn-%=KCuBf7jVR-kZrHZY&fAEG#v{y$?YEz3Y`nW^KHBFd!vY
znhgO9o7-HUeJC#1S2D3a)tP5l?@LDj{YyM({eh^92mmz{eDvk%>cL=I%Ltrv-zSNV
zZLl>Nj_!3Yn!Ib#c2*ayux@LSp_X6{fC>S`9?P^rnQA?=Zn4nRFb&4uyIeBf4XXzb
zhNuN^ab~&#_PSJxcsTjQ*<|Wg;4s^Rq}ps+ZRBNT1KzxO^Rd9R;9x;ZVS~0&liRk+
zHiYL6l00nC;md7L-<><(8>aAA5V7wfhTHw^sdB!|tp`+}4ILt|jnJYF^CdR=7e+=#
z7C%=WUidP9;fww~!7lsfOxbawPeId210didB@xDB#$aYT2U=I|Bw`C;)@8XY*$S{=
zKM>7qTdLSxo3sXLjEBu{sm9C^4WeP!FUzjx%U}v;2q4qVRWM2|5T(;O1|!MI1%+S2
zIYk{$IHh}0@hTwBkn0N%$r`{sj!zS0LW?=9V*y69Zk3>v24!$FZWhZ3Z`ZZ)B*U?m
z*k^UbB~VR!4a!vIbW6_Q%DN<2&KX>!EPgqFNs;|yao_pAe-bib0*+odf6iMD6B#&G
zT+NVUKdXxzG@(c=_1sobmpWohfV=+!h1ON+w3CQ@rZOF)r5p@-4}<JQ2$e-K9ee1o
zedOHOWLsI0w)J=dye{O8^;w&?bY+E8;Ui#1d%zbaw`JCrrl}~d5!@t?TiuuA95@X_
zIZ9=q)iH8+5BmX*ns|z=aua2oj>*d>yp3SztkE*_huqH};q70m{r~uPhgE4uSh*O`
z3Np6ZXPsq*K7+5QUtSac>!!H&hcF+@jEG?&+8tJI3|05=O5-4v^A**!u*l4)T-aFd
ze+_PuW*<l}su}_SceigFC>5NBfD#Bs(yzfF@(irPZjI|WF!;+*iLYyEc?W*)(*rbM
z3cVin^eG$Yl+8}((j=XiPZMC%$-Q{}O(>lyF*69Bb*G0S?wCv(`}h(lQ8X*7nykpM
z<s-uSGigCFn2+t<+vD8#pI`?kw<le7TA<wXU;)&2Gfmo)lD;f*G-y}gfN_!lWA@MJ
zm@?eCZ%$oa1(CCtTbL|e|Iu#n;P54gCSI(Te(cREY&pIh%3~gmIt=>z%?gQh)Xw;k
zgap|T4|jWvSzLR>=WzEJjBorj7!L-6*W|;8FuEwkb?)2<s6^#&iGd;G*Psn_mDJSO
zc*xm7p5&vwoJxtW!g71`&P<2YgE~t02w0Xoo#%|FO9N3&+)Tx?Zdn;w`0=`fM7!xy
z_gwdV)FvU^YKx$JDGq~~#zeb*knrysQB~l3Rav(=W;c~HkeQ;I)R<cSi9f`>T=&+%
zj`5b9xOD9tvE!<%kAIRg`ltI!$<ZxP9#8*u|BR=|@`!UD4Rj6j5M3j*_!097gtK+W
zPa$^qf*@034OXk~Mf{3%`nNIOZ-bUdcY?a-Nr<w=pcqpRVlPvvSh_he#lEHLPnqpc
z%dZ65mxBdCJp@^J#n7a$yrf9FtHAPv?j~pjzNAaMk)(MGv<>&{wcjCky3tgp)Ha8X
z*;1#!YIT&#VY*$z5EL-{Z9a$$GY0>Y!!L8%*B_)9QA`Z{nfD6~OC#J(7ZOBIp*R=E
zTE+S8XU^d9_$6+$_nhOPIVTA7tk2XR=OYmsiD4n<pwXciEqs%2Nz(HO+e@9&a?pGJ
zxHfS4a)C+E>{XY|RU<s;ll6i$!^Vv(DHSO#!v%Mj-a@YeHk2#~Tvfyl*k@dW_d89s
z04a#Cap*YckcNQbL?;Yqh(CO(ulY}|LLk=%?)g0ebaICDo<TRY5_g`sO$+TOzrG5m
z*AT3cZo-n?bOEuk<}vvzI~_czpRPO~A0M{{xr>LyJ-A1ExhXJ->FYMu*0+=1ar*0-
zQXVwu%D#H9|3G(<)zGDW+BUEj96`<iD4{97lSmVKLM_lS6BiWg0t#%PsOxR~;h$|p
zo~_Ij280O#NSJ~_fwBRj%$~!k>2!(j_cS&(`oqzC4SMM#h20hb5L%=`c-EX#Qd}^{
zyuqI#N5^VXz<$PSQnt{0V}1FdVhTu64~)Ej5dOey9j5$;;oSLyB8sT@*`V}%g8Fl-
zc<7xK<_2MlU~>ke1Yb41{#(Xmzn>|QPdilD>*Kel9J)rBkb>u4WN!!K`p;f4R25qG
z3x|PlT%^m|_)Qy_r3D5jhyd;0uUCF6=ksEgD=JH4^g(-?hU}NkjcEqs8>XOoP#F?8
z5dX3(m`!UK{G)TS;FpwvJj4(l8)5RjzIiepZpgV_`~J@7s#oW;|6XGE+op>#b`xn8
zS24P1m<E?qB4Xjajy`+sVl3}7@G2jeMlzJwU|iyhc+HGJ=JZ&fWnY3=8*Km)F*$eA
znP@%vvWDu!YUTh#7Bm}QgDvndNS_31M&BN^gK2G@m#@$KY3TVbZT``hf!ef&cjeG)
zh^jh|-jl{7*9e|1CL*H50%9DgKT)2l-*mDy?%{E}cgi;-Olz~WO9<>c?}=)qNNYgv
z>Xd%1SI$Pxg{BK%ZiCIJ(=b#b!CqcoA4frj*gb@b$Ly%CxAsRdRj68m^7HfS<wpwB
zDMFWK`z=Wqz`%7xjeO2yFCH&4u2HoX6rZ$CdAw~B(FHaHp`$^2oj&gIEudqHvmm~x
z`D<0ozpjah`k{}Cj%wH3-qWgr{+fii!dhlGR5x1qOocRNw#`qH<6!G*tTYB1Lm{B+
zE0=%L532=TvoPD49!(G(J+W`@HXP+#2r3`B6+ptryVXMuWQ|je>q#JXAN1yp9GrQ#
zz0~|_h}rKl@t0<}?5o#PLzeKgV~<XG`+^T^JsfdE2w1sbh$3JCf-gLK<L6D3WJtm{
zKHN#yDq<H@)Z`c*9<E1prAi<-oGy8CObF-l$y2Xh(UVfv*+yP+SX~*HbM1lc#5?Ah
zk7xygDe)%g$2Nilr9o$|At71$RI5^GQvw?=uLg`EUkO?LznW|Rx*q>A?fLDSmH6EP
zcX8pBq_qrgG)%T_B74K8V+j=K8Xr*V&~Nw%G+_n#Kh=<%SM~cGJ9oXF%Ch`m0keRB
z7LDs?D-d$hGW#ffPj=1298~Ut;1*ZT_Xr@`YTi>tPeB9;_c{SI3c`nG&>Arexv)A+
zJ`QTvIy9hWHzvy}hNuDcVMgXEL4tJ^^vl>Zbes#eAD2YG%i=(+yM=<ud^hK#zev3f
zW^=wL=hy^wSOCN&X-aZOf`(b!FGSX?@{^Dsc=p!(qu{e^y9!tR;bT`+0vge<0K^IL
z=FsO&9wV>KM-spvUKZTrZ3E2FA_Nv`99|~v>?$|)d`Q)2iAxcU63%N2IqF{JR%qKb
zD49kIh`Qv|l--ExwpN%_8V^2HTB~eny1E*1`9&m&htu<#{MQ)e;^mvqLc4Z`lIHTh
zJ-ChWeX0pE_te%1EV3p8>XB$(i^y5!<=K7?#M0jDI3K~i6r|IsX_DIG5s@^Z{5gt$
z6tv8?A15EY@%nnI$I}EzHlJ~z*c>>7PU$EljD}8#1OAZ{l*D7+MGt}NbjJw(SDEE3
z&;T^+%zZU8TPks3t7DIs*WO**w{~E1tpn`0q74X2zEJ^WcUekx3|KV5OQSxj7OqP3
z`i9xag>tZMV27BU%lP=#%3JXh&>&R`+YS<``idIcVt$fH{atk%gV~D6PL<8}l(gB0
zLl)4r8JJR^4_m2KBb67`Y5a?{9s?fD2}Pn#j(z*k5sKa2P_K+l-YAF?a%zPC(Vsha
zZpIf~KG6~@UR;%JbD@VsEzEr6$2IeRN;2G7=zY0F6IpDVQ$HtQ0Yb4T9cM(qohhyt
zDMrx_m*56V%9hnvwK7?0V3I{H;Ao5PDp%KA0zb)Y{qtk}P!9?4AR5i0Q2|+Q@Z@K?
zsN&}cmjTj0p89t&F3u$b?o<Zw19Kr2!2_=;A6&l$!?4#JA?8(2{-f&!@R7#tVJz-G
zaoE7;;OcG&`pjHlAOSaQEQ%BVh&h){yI3j8c}cUOvC(7d`rlOB|N8i2wr*EptiSjw
ze)la$mK9%+Wqa@@`hp&kg2JUAkT_b<d_NdYEE9NT6sd=66Ei;K4S)Rm*UB$jS>TB>
zTEJ{keM5uaD^JR9jrPMIQvZH3?bb+lAo+MwgXZ6JJ^JILh!`G$iR`dh8q#l6k3ZiS
ze|+~3Uln0M2D_y#4k!IHU)cXge;cVRdQt=aA3mu=dx|r)#yXY#Qj}<T{^5IR{t5%z
zdn88xQzZHh-TLlJH?bXrJ-v;WzQ@ZNrDC8kAQYNw;lVZ_->g#wNN5aUVPUzBize$)
z0RgI)B(H@x()$JnGXj9O?*b)KY9Q8vq-)^3o@+nb*J#TZX}V*Vfq}szVcC&Z$aWb<
z7B>Q;qS)aM_28d|oUsw|rnt4sKWWjYA_3;vsXfw}+rIe_QYvm>9`qW-w>c2`S>w=#
ztR446HOp>hlmo;&2N+EQTnV4uTSLUQB9Q?B^FaxN4K6n3kByKBGoHBp(M=E}A@2+9
zR=ZX`+z?<+n<+?d0j>>Tb>QeA#|9;NAb2nFn9RVjf4%Z)=%4@6TyEeSQ4iN*0@TA2
zQJR2w!3s5)7xgkC5W#1_!U8}n4M=Ki)_P=W>~2s$cdrXNE{xr088d#s=*(E_b?g*^
z$d`kloBz|NIwkDkd4GXF#wz0bc;|O+%`tCwV9FOjhEWP`5Dy`H@ZcB*G4DXYz+@2%
ziH5gt*_Mu{lvaZS4jl+^J}E5+=~G=msSdV>q_ctmZV0%AsCf&{)nALg_LSdlxO6fz
zPd$>oY>KNB%r0_BQlr#Bc1)Ka=0h|tUC2(ZU;b%hwiqtpc%{Cv_p$lE(mG!+Xn&<E
zAV61mNEL^}r8HRpmTC<^NOy@0xAN}k9@xSFMQFUEr~uJT<;jLp0vHxKOr#`T+$NBK
z2S_Ebj>bt2^DamxC@fz^eX622M_&@3{Qj%O;CG3}pML2UPYyonwng{JzqM3g$-0A8
zU8_E^N$WzFc!l#T42TrozZVA2hCrK{BTmvMcpo)?jm`=mDe@GnMrI&laA4IvmMpjx
z&QXAL03*fGYq)%4KS27`0V#u`gbk`C@^x+F#gr}E$ZB+q!4PH`^34z}ixLTK;*)L#
z$#(M4^H$H^rK%r`u+IEL3m~m!PZbDKPUTVXNwJ25G^@Rzj@9cul<Z!Uao?V(ABU6}
z1K`KWjMnOYcb%Nw>L&8sT^318^CZlaJ^-><C>m7%1WML|Gyt80&o!MF#~2?d`y$WV
zOOGg_p3yBoZ><r`>i68zWu6LZ0j-{6mfeN&Gv)INs}pHi&kDzF&VnAN!|F%~azw0&
zI`*%2^ePCi8mx|RxJuWv$z)Dsj?Js6MQ~mf>p6gGbq488tBs$fc>fycBNB5v(GdG>
z<a0}9yaCoc(pkC{gX~U_Ue8VHec@-XIn1Y&#*LSt$;b|fh@dKw#?U6vG2uoIk98HK
zX@duY6;svqx9IK@RM$MH&x6W-D{Uaw#KYVu%Hg^h<>Ys(^>4oPt=Xz(ATt<Io$@V@
zF-ZCf5QVLh%J6NBT2>@btFr3;%rE@qvyB7Th75y`kNLY%@E3XwK3puBlkV$azENNN
z;T`B7GebixTOT75w+<@USO9@X5Lny3-<h}EbxI7JsYYtZ6$6o43bqyl)N{~RJqdrz
zn}uTFNiRd}B1n@;0b-H>BFjtdAV%L=WEq{VSJhXU@Bao`AG;$>q4zhyq7LxDV=7*k
z&$pyyW%n#+;R+hD=XTq#oB<$O4{;&NDgYED7c8AxS)?2@K!i5{K2x<(mcQNjs_9X-
zT>K4?T()3cC_PnY*;A}+QMGY%74*0%I@tg(DO%PLSJp)wrXsBynGyLeu%$w53{p96
zCP4bnb>qYHWQz(8M9p4JZ_1;uA5rbadYkkV=U_m0-aS*W8Blo7s4BfSqd^c;EsB6+
zb&&TWiIA%5XAYek|DYg>PKtuBy{Vo_o5W@-u(C5mGUcn)WKKRtO_9uee0<95D;X=!
zm6*Wf=8Qt1G}l98cqBQ_+aIyCq8WmC7);c2)wwy_N6nkyLbeWlQ~s>Vg|3B?_0b5+
z;d}dqPcMWIGRofFxA6uA5CTN>t4|}iO|NHZJzaE&1aF<Go{~K6CJZ#7FL@n3$Xn#t
z1lApy{gbCXXU|tPhX@b(xz*_V2z3Y(p;4CC9KF0T2d$%^h{yI%%71q|_+gg!^#zeR
zge<%1RCDax97LKUMwA-0?^Pj~Uc7g|d2M}<mh1dmUh^GE^&dUm1u>k67V~|3YUsaf
z+xOZH*y*f*X!mLKaLHt589mQJo+**NpEiKZ5pgr3y7V~wO*-O<GQf_~`aG`aDzmcx
z)8gl51Uv$~BLP7b9j;Mg-o*{v129Pe?!&`now$_;+U0KO=Ov3BS{3R}Pte|Trf8PZ
zVSib(m`2O8C4Bt|G}waSU|oW^sn(Kxf35vF#|=cHyB@Uf$-}Fu;)B94@reV`^@&%x
zg)|V+cK$~3^~K8)JHjx&hsKlF@hcfIw5mWwABI3vxLgd1i~Qx!6Su^Go-xx*Cm%pn
zL*B;(q^I~0E&IyYXz-zH%yL;|)v8F(CdpTGuN`Z1N_Q*08{SWn-KGfz@4O4>z0)t1
zymNAfmRtj(dp%uVvKTdHlmr%ex*97R`E3dTyT}>q;TAHjzA%82E>!{!d<huk4ENYH
zQ*d)6_uig=yX3gJ+UzPLE$-`LV|rr-S{-GmPZAcy*&^1=;*+_o<=VmhRxZ(5h({Y)
z7-oB_TQy)!_kE~KVwN?lNSmL0Tpzj2w*FMz8e_8i;+KGW^|m`{-(A6{6P_P4iaf}B
z4?C~|2W4o@bE0M9EMkGxtFgSSyCymJ7_%Y1_WppX=sG~E4s#%@zUm%&ZMpUNgUuI}
zdYnu*)7{N6+HrJ&FU1&2qurhJ@3uf%H4-17;PEt7u7mq_EFA}`t%l6)+Wwf>;~9?@
z0ZHsKIhWJznU~q_o-d<p<}{uVa;@wTj`;D(vf!;*iB(37)!Ci+JCa!g2<rGuOpbps
z`)c(tcq^ea^jJm*JdV47snz@WV;~Xl*BpU0E`>&+c}zSs#3Y)i`9!kRqrZS8alaKb
zBO|eU907JT4`Q5dOO;2|s4X8gbW5g5;W>eLp{%Q+QfbP4GGljQw9iX1ImbB@ZtG#G
zbv}=b1$BaF8{Y}1shnakDe@_UQu<~4*hvyc)@*UT{+NAepM6H61|k7Cx!j_zp<_5}
zH@tb~=MH82p_r4Z?WO(NY~PT^mDsle3hxu4!P;4zNkxp7svGjT5LKUDjCeUypls*~
z`QhGVhdkPVu3;dKE-5LQ1AnpAnN$i@%v6k<-yjCHO%9ABH)FrNe6Yte&ooxwt`G4i
z+x4K}Bokq`7Wy(D!1{&|>--`P=`K03=U>BKzkdCt&BcAUzicc^=uvdSr6G|vWo#G@
zZ}!5NAsqDb>v(UdM3$VaqXGZ4LNOoriym#Iw&N!eh3<@)K;u`msN?u{ChpVe?a9j3
z*vqAmiksh3SeA|N1*u;y%f9kM7c3tikBisGB*zU@Lajkz>H!=RPnT$XvNCH{Q2sb+
z#cd~zFPJ1q$jA0e6!lnpp1GV&o2sYLI4QusB;sfR&H%~uXs<RIdt9qbwe!zmN6C&`
zAAA{+ZlC|)@m=LEL;FGFsliN72}5X#ZJD-ht3=^TKi=1X4w)HWs+NGzuUnL{Zyw19
z%4gV&V}`(&Bb#GdVBkLa#k7<f>^*|gU0ppaHn_-iMW>mLr{?fpvJvR{27;j%4x6cs
zPb)#}uCTQ!nt9i6>7nizkHpt=25;t6xzpw2Iq3_hfzkt}sX;fEA&^zSF6DIjyaL;d
z?2T=tZd#NoT*=c%D|BZsmu5wEBfey56=RN8TDgLhuY_h_)|wV%L3dOVrQ8fxy9StQ
zozin&3_^Vz->3jfm$+0C3{fGKMGw4u^9%H3yBeiRpQ%TEPIVRnb1~&Qf>D<#`amgU
z$>s@ES<Oz-7hEfyFBQBD>+6TaqE3Ct1VC@05Wrbg7LKu{;_XgUBmqU~Fsj=bwn^ck
zX7ExNWU;iH?dx^7FZa*}i-SD61cbl@xr2EEBkK7@o{Y?dO7x0M;nKqkpI`9S#P=Tq
zWSrcY7!ybK<QgmIxLuzeQKv(8R#LhPV&8hPhxuAhFGN!=Fi0(CUR-5`bN2oozMT!_
zh;O^n?sH-DG?=YYqJk$JF1pk?tWT66G>ctA_I<)Xc@>&K87=c<y<YuW$ee;PW?*jy
z4|z8LpNG5EXTS<fqo}T>kx5Z#G0<3vo+l=jls4e={=fsQZ|SF6s<_%oLERlumCoz#
z&3e_xAp@w$XgWND*@NC&0`=LcvSCQs3g-gIWXlnkF)GK_U+!Xs2)_gn`2kf0UjuTE
z>}TB-iSwo{r*egs-s>xiCf1vypA+W2%yF^fP_I6j=!gk&$LGuVPztwh0kec0y3o5U
zN)qyi@&+jlQXi2{j^@i0@PkoV@kW7I8{~M$+Ow8#f`iW-s8&lnsJ`TV9M8G{$weEP
zFlHh4Ek}Jmm^QVpYbikneYcn6<~mfP2x#p&;ezCp_EqaoQ7RG^=i#>*L6{q0O3Iwu
zZLgVTJMN%o^Ok!lZv;gkEh@UM1?)Y_`Ft{WR+m;$To*n3IK2h(dEQnVf)Rf%qV_FK
zX}~|7-&QkQIce7mgc)mKseEJ*oPTrf8O1{&Klt5<W*@UNIsGv)!op)h(O?A1#sILC
zszq%8=5MymHixQl9uEEG(wPUL3j$)>^w60L;aK)I85O8E^NEK2b|*3zm!PA1X)*8a
zzfXRCe>H{Uz=mRf;^w0DgYVLD!!t4JQUn5F@Op2hvy*oJz!>5xV#W{}?Yhaw5;#m<
z2H=KO5I&#3b-Jj3MnG45Hz=m(AqjEB%gSiTA)dL$pXkK2#JU|p`570S${;+Wu!GjV
z-w=1r9Q>0@Hy^tn@aCULPOkLN^g?sXl-~&9eHf)>26s>)fU;EiEgk}X^4rca;9W!$
zJsjC(tT$cOq3gq#Sr)_TPUc7Byr8@a1R}F`8dL((IjN)w9AspBCZ0z5)T;KFRa`#5
z5~xk?#K$O#E9X#@*+x*FCyYD`cQ?V%9__@~CW$80|KeGs!^(?qkEuTpVA0lWWcFTi
zT|X@vuP0Fi(Vc1LFw{P$0vP2zcAs^)hxuika<2gNe&WRL_N~0^E4UkieFJCn7&Poj
z`eoCO4lZ@8G%dC!2h{H2a+>d8KM-b{-@80b(#X=?AuoC1n+xqny~+4&7@9g<S)%=|
z?d^^8+pn>v-l|(*+3hg-a7d>bjo6M^(l!WeLLxZB=H6ex<<)<p%V}HwZh13f5mtV@
zdRTqpi-d*%CQoe5>RU^fQ%D)+*KUY8aIm}7ewL<N{n_Gs({|1Vz0J80F%r_OF+WXb
z?MqfTLCiYQ8Pt;7pQn7VSwf5{;sY&;=@k#ki{c$PD4CZaX{gc+sKtjs1}0tzuvp8-
z`|I3?<E|#wgKH{weM(|Ug5C7AVl`uqXaS&Go>(oGRD6qkn%pW>UxkmcXisxo7z-~i
zZ((=l`i|#F#cZ!rDR3gO2`F>2(ZbGy-Zw$oz7ZnH;9A8#)DvI~HEI=ra?sgpHII@j
zUt;qeL-ckeF{>sXUgPuL=$Sm*I3bW3Gv7X2SKp}SHv}|MvwOGwpp4LH;JCT>=W0)1
zM`Z48Hp*J!o5S$@Dn*O0j~=V^$5)n7gA4eeko5F)G5ceJw{G;@%s{KE&F{h6LJgPP
zySqmhoXd}a=ithNeb7tQ{NVD~qUED9biALrLotn8n(3u#Clx*O&dH!BPAr?L)z}<#
zVoT7}D>T#WnE@VV5CUI73UR0?qnsb=s>8hC3*^csvE$XkvCH6D*;DB<|7st>SL>?$
zJ%yZ%m=6KoZ6X>93JO!~hAKHM7KB4Lktl?f_UzGVE=!)>TfvU9dR2Ha((VNHa@~c^
zvor7WuD|sMpDf;+UCE2p8`Mc#R5I8#E^C!o8}?k!7?u1f^LV#ZCSTn}_Au7(b7t8s
zs5D~+?}df2FEwxK>wST^5Hb?$5t){J!wq{88ZG!9LC9E)we`#-0U5hi77yjLm2(dD
zM9daSXZ+D*uzw*ulh^|`oln%VbcJr-3d=BM2z#ISA`z-1_Cf)RjZl5>$CGWQY%KMM
z$^t-o?8&=0t|F-LH314FrznJ~I{>k#4#6@KNJ`rT*AS1r<14O9GutXXSf+<o#K(MF
zOvfsuw3Naz6lWg&dOG{a0S#sBfdk6VUrFo`)jZN#aOc5EmS-nvS+Wmrq1YbJt0OZ;
zEw(k5?AClF@ffL3fVV;3Vr}-eFi`+Bg~QJEm(ZVyaE+1;x$E+pK_>8Hm<=?1gq<y@
z`J2inLb`AFkxUGqifG+d_q1itI20Te5g|+4)VDm!6TKV?oRJ2gyIHn22ib#7{G<Ne
z8vHzLm9_Zu?6IUN>;pNX%+EcLbfyohs@FAVH%s)t!*UFE8y^^ex`Q!tC{m`Hf7cGr
z$f0{V&YuQf-AZcRO=~gmOVI~~a`FwU7QLX8sM7_eL<KMiVu2^8_(o0i#L$uV1kdg3
zx<gvUTDL?mP#!D6Kl+-`0TkSkg!AsxfXfw0a7Gi>*TS^HZWPIvbK!cQ-YsL}RN1iW
zeeqk$zz5eqO8021RBN&pI`C%9#k)1G+_g$s<Zdb{yk9vp@qU5kvQ6Lq?r#p>kFGG^
z+^wG{+5#61Z+`PpX=Q&cRyQdDC$_fUiiZy#?68x!Xjjjl1@9ey5T9URsj-F0`IyXx
z@H5;q?WMt0%U*LOAB$XEHvlb3`Mfdf8UjG%8r8LBQbT|w0(?Ui6^S_F4lae|?A)0>
zuynikuD*q;$;XzmlD8xwM%J0KlK7xJGI~kx<KyU<yr?JLjv4yW4*NSu+|0z$<KO&x
ze+rudhF>2EU{_;gb5Pm0$f=6D2y4?VjWv8{Zo>Wh_v_)oY}I}JaiBT@nh-Rkw^2e`
zz~`83r5sZ*Fo>UI1`N}7S~0mz;C_7jtv=T;&deH_k&`KC+RhT2q$wCuF1LK2EoxCV
z%`;BSik@5<wk2EF<%PuVqxFK#C&UALs2tcHVAiE>0QQA68;?6nz{fHH5N;ZA`>FSI
zkinNq>X}TXLm)#;N$`LvAuN3WkmxMhogz(JZ$x8lCV)9pQ(Mcwe@8hm0r09D4Gz~<
z=SC33wuzl+PEG2y6%Nn36X6*VJsWn?VyI`-Mu4cN2i8If01|MScVUQhFE(vvH@KS?
zpV@v3&HQk8Y=QiB_b;BY-+jZ(R&blHfEH}sP>j1{7a+|D=ql+dCIFd#FuP9aiW>DX
zftzMxNsPAySy*J)^(xQcI%`bO`Hld%jzFb|)$s2xvzuh3U{U*cUXK*bZ<o63DwHVw
zLziV{iq*vlzOSKKt~!@XW0M7`j~W|`dTO9#6`2EA(lYo|-oFVe%7|D18y{%wgr7Lk
zW7i88Vv%W8UYpaCCjHGqZm;;OY|eOA&D?l!$dd%yZ&m=b0zQ7c5v>YN(##0mK`vUj
zmvotydhIsYV~tvQkkuS&>!~eq);)Ai<NArA(ZNyD=m(xAbKxQz?u8WqGD90JV7n|G
zefC0fBX8sgPIf%Yie}H%o!_*Keh6?&-4&5K)HHDT`|T^Zec$o(v@mC|IM()5^d6bC
z+twYo*M=rrd>^`FBd1|&B0L`>4gaG3)cnI%nb;?U8`7MJsKxC><WdAo|I0yFx<pvl
z^+<BBecWX(8>Mw>z+?0UO1;xU!mzilE6gDXhm3)LDaP!5OVWkPeHkA|sIL(|fwB0~
z`Dv&LY1T_s6XlLYHwP}$qG%b4z`#rn0c*jSowGfhZ0}Lp*49?xHXcAblQ>%TZJZ<Z
z_S`+!r*GSD9@%}{f^@w=m^TClHkei%WHR%}#7~_(d9li+rl#grHmTlE9BC-U#>UcY
zbSTKUJju&^A@Eaq8?CPz=%-2t4GDg?YWv-?D%TqI_3Sb6^R-l#QkO4>HlHo>2H5Tq
zcJh-&-&Km)A-5^hmYOmK#>>xQ-4F;mK_*C$g<sPKPunQ4H;yhC4v(g|c0X9l4t7QN
zG{KeG0AQS8VylcAj_q`8qIv?*W6W4~k2^CYy?rX6k*QrWc=iEVJLb`Vj&i-eufAj*
zbQ>F6=f6atE!v(3=iwQsW)oooC;Ewv7nwNZd$Ut>WjfhcL{rq$f_rXuo6iAtUKXlS
zojMbSOmG;h2Sj(qM*D(zgSmw(Bf@aJa$1p9!eQr2+YB&I7q<=xWNs#!X!W&s&5@cp
zaL#O%iM1xvy**J8%b^ID7n+mu%fP_Uxv-9IT8E7=?ws1Gn383cNg4N(n$N!~(K=js
za`?lmqu;goeI0gSvY%a8nC;D<YYJpmMI==E9!_lltF{4PB6h@&zSqdynEOzXZ=juE
z%kt_xX+3fdIVT^yo3}_l#1b6<;YB8Rf+7ES+|&joPu;HvQE$#i%+zUYkrtPLzqX4y
zG+Ss-E48ysotVRDRi=SDfLM>C2j??mqmXuLymY{D*=%J1I37zN$OA0f!m)@@?+T~o
zMo73w=hTRt4s!-2KzDtmcUfkAaRt76673HC#qj2GKR-X~aRNiMOUAy$<<Z^+w24ak
z<+HQm!t3B;o3<+v0by&$pac#Ae{b%-RDGa%&4)>fU+<d+x$-_8m1HG4W?X)<V%1G3
z!gRf9geI)c09rq)J2%`g)M_~$ct%qNxbYU#U9(_!e58oGb6f65clXd9F<qpAYHY|@
zl;}DN)Oa@ZEo+_)T;f3C{qSXyMq2oIwCHT2Xv+F*RexFcZS%RAy&c5!vksl#HXwfp
zw{E4Ntv{T6bm%*z>GN){qi4mQJ$rWB+w}b<ai%rGbANYL$kr@U!}lKJx>&ifq%{u4
z&x&J`tgp&HzT5*MBwM2S0=i<`6%dB7PaF3yT+n7|osjB_MQ2=#H-+U~pR%#_BD3N#
zdw*ql9OrZ5g2n8lJ6RZvEsVDsO&h<8drZ!RD|_tNU*%fWTnzPj1dA+gL@L5&1Gy=h
z!{PQbyekSFlI5_pTb~B!vRpS_pVCg?LBF}NXLv>KLy~xOSz9AIQ9ToL5o6gW=l}#J
zq$4zHV>Mf`ECYmFLwNKq;+ObIfZXVrvaI)}-Ur*WoYol8ZL2^deDfK-k3g~quhY;Q
zH~@z#9+u5yY35ym37-k8bSb}+&ti|f?srfUTAZKh1-n|_S$00>wfsl{`=&TO(z{ee
zv@v1yb|EoKF9euP;VvXs%#B1k^lWzc=COBoa1fCrt0hRSF?4UMo&#m@OioS?&9;T+
z!c9$t@g%sms5wp)EowAcTeaDf?jZNUhy(=&C2EIb5gbmZ&kpTF%#f6=cTN2iT>Hyb
z>4P6P)N7=}9@u>U{2!5@cbJRcMT5U`5`a!&MqChcWusgllQBb7jT+}CVUE}hBx?uI
zlVQi6Bl!<a77wG2;6pEp^P<tGA$8fsVodw046hz_O49q5t?5WGFwk4#X2CbgA4r$V
z9ho|&EMrh3=s@_g9DS073#g-aotlD%dXg5vv@K%94ABtF%GFDlg&6tu{Kj?|KpHxj
z->T$^Z2`C`6zHc-_nYCqHi&wHt(&v>0*<lrA6}JR$XQ3TuR*Ouhgi1-f@2gZA8zB-
z?*7fuw%IIkR@VyX%53hV+LnPG>IJ0y>Y4I&JG~1=P@`H47%Zodfc8m;T-&`#RDfL>
zK{=-~@5N1@*sPsJ+IwRBaz-k*^O|k%0{-B^gTh-vAzFoTMv`q`1PA2U^z4{SiF;;1
z(U=dN4A!#ni?FQJT$q0r6pSfPY`<4de8vPG_SLs}gcz^XiGKhTfLD(SAY)Q%Rw9sN
zNjJw@=$N&Ovr~LWu?I~dM$7?q;a22{`X(T4i~v1^m)LeAp&g@?;M#Y>ag46@ELIkx
zaL4DLLki)6Qvg7(GIIVqCAjD6BH~{Yoz)jE#4V4<-hFrt40)Cl0MeYiv{U$EH8pO0
z9N6~4Or}9Gz(SXSem&Ba7(8+fag5iwhe4aPlvG4u^$4j7@We6mCZV$8a+K`azn<=i
zp>Vr7^?pF8qLXN6`m1!cMpL0lJBtIHxJaF)LiZTR>@4r{!Mkyjx_1uoEbti@n*uku
zX@=h1bWFDT2sj(d`ZpCRsN4e%On8B&bKfk|cZDg=ma^{IN^Eu*Sef<@HEl!hws9gu
zZ->rCo!k}K3j$!sZjIW9uWuIk#prF8dSXvFnJ<PuZnlY()*gs7sls;)_L1=KC5SCh
zw5sORvDM@QHAvO3ab0`Kc}M<NCu-;YHH%|;8b%pS!$+?1-(JaHedDMxZ~gR46l8+-
z9`3s<BFIwnbD!oVyd$0`alikrrv6cy=6@1&ahOda|FAv%J@-A3b!YQ=g*$e0z5h!s
z)p@Iki>#D*@K3rOZ_xH!9V*iiz+fL&%E`%jA*fqEmnXL4lLcDIVP)W<#O#IGM3QL%
zeG!Z7W>Y)ueKL(_ad8_cKk%PlIo>A232ddCD2vs-n{h+X@FkSlTZVz%eHGo7<;ha+
zmV`;=*COGWMle$_hcKpr=Rq#09vvV&biWIRn%;(|vq<iGLbRJCT}qSPaY(LpK3~Qg
zt2{?U(l<TVje@G`#QybF6AFxu4|dz0c>I_`+5?@++kC!lxl@->i+Bn8j6+FVa%*@t
z9252SY+L0g@9$Y#ZEe)+lTW*gv{Yz%nLlwi4Q-wJ7RUasEcl-<r4ImUWjjXUJMNX#
zWs!SyIEG;$aPYjKD3X!rID=+vJyGfkckl=dv-!e+nrlbwVQ1n2Whj;8&yN@NyVz6&
zyB~qH&Vc2!Ey#93TpQtUnt11gi~s>jAZgp3F<vpDjb7ND4+*|3Qb7T+s`U5;mmVfH
z<#?%s4Z&;?&G~5map-*SVjOp{VB_Jz+HL~8e;N1%jKJWurwUFNM%_0)I*hRPVM*(#
z)(Filz`sWZf35qSmv<cQ;Ip5JM0i{X=c@#JhG3$NPA-K)?yb#k`p9PrxDgpvAN+%4
zn8#b;ZUvN*auSm5Rk;=FmAWk%T?t#_;2bqTun=;eM0--Oj<zNVp#2FK1ki`Hz$mi+
zV~l$+fOJNwckzZNoR8$!>`AV2xxQdp3u(y+@6qI;{H`G30Ac5~n)Oww&+T81r?{Oj
z%3`a2xIYAHp-nzc3s#28S_kbr)ZZn_KlqYX#LW!qN7>I=eyAJP?!RA4B5Q}UU7jnm
zQh|#fQdmpLyNNy6Ej><1U=S44hK%PFguZ}Bj~?Agn~#4NZl_aPsgfWg4Sg;7WXXHK
zxMBBOXDZH?K(eh;eB&zO;9f!+enX1XDzX`AG!zsU6O&6gnb8uUbXu|wo2>Mr#}sCQ
zM!><DQ7L}XCJi&<{PxOh-A4C)P0ub$Hr%`Ibqh8J^;XzgxW{_dR5&&STA*8W4?W!a
zizc`lCxC%*qDtF%Tar8lbkdf#m#X=EnuxVAO_q+Hez1p9(7O!0<sfUf9<_<>c8uzq
z1qHl-Ma`RKSnSN}2;Qt!n|M7AnZVOmSrYKirP4Td%;!<b4F#^CDc>xfrTnP^#X#E)
z#Pz~nNnW~C+IJE79P$@L88vA5f6L11djR_6TAm-7`TiRJQTX|n?}Np!Aqx{zu~F9E
z^K%vEkKQyl5zz1S)t(a5AMA!7fhga;p^7@fk+inS@nUSr$E%J5Jt>e~hhO|m1wbc+
z3Mcy%(4}<0%;EW)w&Ksd>A!qnkSb3<<$G$f$7Hmm4SKWEutDFVbgEo*E<yUNtgMW`
zc@G|IFwDq>O(LiZa0C6Wo9-HY0GT&C0tbZU!q%Guy2f^!wV380CPf+~)g5yJl*Dl5
z<A60JkuiD?cYT*KfAcH+`;~T!M_PIwICPY1zOk~ZIg?hQ*%Avfi=~-s@VMf{)RVhA
z_B0|5)Wj!`9{B=V;HWJ|Japv9^|iU-x06<9gl6e&^`LW65CW6v+)e^)yvUSk17H_W
zD%V5%l$3KARWL3aVbiUDK;VBu>R<hn2znR%qNi5kb(f&;bqH=-C5E*rP3FrncQAMY
zy~I5^sMZix->Wm4;+Q_s#P~j0Ty#i_^K@T@76NmrZkWIk!&hkAYyf#i%GfwLQqY0G
zRBsE_6jIh9lZv^3Phv6%LG0O=xBt{>`Lp{Yp4Cl`+<+h>0bS7L=R$T9fuEs0J3sb%
z44E+GDY^mf0i8g{N(ofU)aGN>Da}95XH6g1uUo411w!;iy<-V5*R8l9@l%NIpFdtg
zgoyioF3l~B&dU}ZXHn-2-9=O((~-X-J*z4%2ld1`QN~_ksvH2*t@6>qrzH2Sm(NqO
z*QXSl2*V{QIR3c{^wa?#mq_D)>Q(Gzb@lWBlsl9t1w5eHUXf4Ic8_FHaOn0#I?eR(
zk!L=B@???s-3-xgY;mDer^2!Qe%{Gbr{s6AIQi;}Z_{>k4dKuWhQ>wMsjFA7j_Qhu
zi5WnSVNEv^^^`4VIY`Lq=6c^oiRSzSKMdkCI?87R$D2yO*?=2FLninPeukHku{JVk
zd9wG6O-60Je3s$j_{KPQfhG-1jRgSo7$#iw<uJSUdu@$0m2n$E$ew%x?4rDxRpK9Y
z3Rw-_*Dk-+s<xwTa?*z2)PCS8c30fDl)=BW9XGdg-S$O@2}>17!>O<Et~@TGA@yBg
zYqcC2n;T9R281^AmrQ8)RvCF4Qj;Aj;P7cB5oCJWW&)D%5#Y6DC+75X?=^VR>QMKD
ziV2NF=5vKE@nWV7o&dis7#N@Lhl*#6KPJH0LZmv@-@|0KoM9YvJRZB7^?a3pg@Tgt
z%8+1YY%1`?w2{<zil-acecV^k8Da}-lUc|RB$7Qd_QY??eD%O|X}Xsc+LZpu$){};
zuFa-hd2x5CV$BAkO_XLH*`rALYEjwXGk$=2miA?l`5`A6|1Q~Y*A7jR$x*3U8^Fb%
zsTZX~+05x<)nzI45E-(Da@y2gc=4So*z67DK>MYMzt@EW@J-vv4teNqjh~Gsdx6c;
zWdpz?VJy$O5VDlUQ$B*%N`X5{O|Cl$1BTRdgl*`T;XtA&F(Q?i{bW)3XAdn{<WYg&
z!Tt=Of&?Pa03V#cjoegD%>f3~In9AYuUlETlrccqFtQh1H_NBMR(`udp;@oVTK-D~
z$m0p0J96vP>7iJRmV6{l8FbD_fxM7#C!o*M9w9IdLp!rbTn;^!!}8f!JsIxb*Dwq_
z?Hpc_Wzz@I4jBRvsEOYxKDfpTC1Vrujyk6nY?5I}2eZ?3_(<$($-bJ+Ks+@`#qjyy
zkD37+d(;7U1h+#rVg@#|79f*Xw9YrnHx;^EdZ$b@*CB>;08&TDHI$v-o1Yq3mDns6
zos}mO;;r6|KrL?uX0_M;_60y|y2s$Xhg{PYe+sO%Q((v0G_HU=lYs7(g|4JY;telg
z{1<kryYQIzoPJ_i+OS~yigD6KUXtreTu>O<ei}0|R;*znP}yGth+uZTg9V}o>)uzj
zwH{bgLZcY2S8^S5KM+oL3A07Ug)g7;K12I>DFp&?01Svn4B;A#K{aMnJEJE)mIiei
zubu+598c_tF2G%!GYeuVyn$+Z3K6N{Htmpt{)JkK%B%aP3)-kY<Ag-OahlX}cP~_?
zPhOtIwU5K_FUGXvfIl{|>*(?sg(yL0z~h2IrNzVD1#`R5sF?;K0=!AVtxotAbB0u!
zD#@ntjLXhyRf_;IFKL(l19$hY)6Ro6k4FX5O8v2ogqxoRC62+|WoM=1Vyc7B>;<^P
z0}wF<%$s=m=oirJFi90o$#D<0?ZsW4K=}WP!mBlQrDZdvvI`}OVO$b7>v}adiybUI
z_xNZ=i)JjvyVfq86Zr?hJ#y=&Y}R?ngrVu0?e?}_u+koK#|l`G`Q7QHY+yb(IYCy-
zcqX3Ob@jEL+{mf*D_p!7sl(*t`nnxzz%R;M$HWhJ2m>BVKE($TzffCfk2XhhK(?3n
z5J_YEI#3yeKmmJ;R*@Ds-mDNHg2%>;TTSt&rAciC#tF2jUrV@A6KC`)wIOG@dRHb%
zF*+EMgGL~C=<hGejCi-6%jD6W-I4B$?jm?x0qPTGOI(JPdM=|}=#{M(9D7oaCw8Mp
zafc`!3E9m6Pgpj!9|+(n=qOQ$Jb!hGwN~9fH+=E<yNeO?e8$Plu^ljHP-Y!S7K%w;
zfU)Av+KJ5TT^5zA*P}gf9iLYRUt%rGKe;=wCk={ep;;o(lqQ4^p*$#Ke2mvW5UIGe
z$6(Au&hgyiU0i&YI94irGII%A%OoSok<VrnL&xw`JZ-@2@t(%Z^5SQ33CWN_`14xo
zsw&qVL+92ebgV;V`|4PJZYDG^9CKb?#>Pnb;1lSb@ojhBx^3I}rf~iOXa`^@B9U<+
zfPpb?jHpu%MbKt!D0{6Y?fAiMr`(--2c2lQEw;u=Nsy_GdOdpd>ng+`=cbM;K3G+i
z{U}>a`Dz>>7oH9XUg2l~4cmk(+6*a>x5=of1upyES>paBF?zo_TDUDc#J=ptz}?%>
zwMuLZqya_{x_-`rYA`Ae`_!5z<4l1|HCf4Yhn9R1HVwd%Xq#VuuG9LbER{P3FjF4W
z+@$Hpd{jM5<y^fQTw~-a1gDM`!bmZvR~~+Zjx`w>&+wU$Y_dwpndW#t2NA71gm}Zd
zJ#yd~^nbdSuTmHF$pYHSQ!wZwd?C%m&rW-r7@*GuH>d404B|ykqKJnd?IDBKhdkz1
zKxCqgrn#cFZ-ZVp=si`5-*km)N$zy&<(zAyl`I;WXV8Ut;qLGKyLVGEpM*^0I+~jw
zZh^@_pv>j0KV3GquQjh(zMVlEFu%&*Y)JLz+0{?v*SUov?kFz4d(w|nvJD=D*qVtA
z*`-%T>Sx@LHX#d5_eoT5kb*L*nFDUn{C#2esO8HU7QLm1&}bIqfR?H(>aboaDS(4l
zYA3rzGC2k2ot|ag4|fkQzbA*o*XxNi^cRqqdRGlK#Wb~^lKhOC?~aBziwCI_hoCGa
zQL(|7>dc+_xdH9o#rG@H^`Y7I>_ygRtLU>NAza;JZ~uJ7DCwVm#^=$yLgi+z09E`^
zppvh&xGdJUVK;k%x-YX{<?Uw_Vd>bk>+-D{x2NI04TMMZikH5ZCa-)*E2fH5{x)g*
zd}v-&0QS~yfN;`*C#C{Sj&%&`DYfwJ%b*Q(orR`7OHU8u8+?c@wnZ&wIpC0~!QU6F
zf(H6Ap89yV5P)35h=9aU&9>!;N%5bKJ)l}np77!YB;Ou+gDTg8TVPLCi85x84R>HT
zgO0HAvoux$70|{InvP2@j=higZEAIK03u9J*O+~V0h^q!g7dzL7dGDA4~Zmo0E@RI
zVru%F_hPVzQ3dWn!`ktSd{MHwl+U;SS<dove<u=&Y$-ggv>uL6dYk+v3mg7X!)`8y
z#4bh0b+sPbHu)ugq|oWi#|Ko*_WZhQ7ovZL6gq0@mz9w$n&tD@QB*F#2NF;?G6QyF
zA9dXla*NJBg||<j{nQnbrWAX(;%O9bq-iFuAk~;6Zj$)aE_~B<5u}HFVKX+uWjYMZ
z$HYA7fGlMo5Hk~GJF*WScI)5GIe6?CGg^)iqmokGECDSBdVc;cqX`IZoz4JZFY!?Q
z+z0(LK8FbBcCou>rEza_0MYf~44}Z}zLZA;&=Y!y${<%v1#hR<VF%QPGuYx`h#LSQ
z9Vxjv9X`nl*cj3Rc*=qcYA|tZg6_pzi(A@KwPk~fQGyQfP~dmmh_*+GYGx?KigjF9
z>hn3ycXH=`YA&1h3@wd`jx^G_Ecbla8jQdq^#d-zqnVv?42zY}IAd8~p5>KAdJsTw
z=rG~~QjagJj|>zx36}kpj8pOVt_|Il$F>=b_Of78=?z~8ewry<&alB`k7kty3$6H|
zP@0<2sEnCKXrnsqKfC3;PF6djQeZy!UF-5s1MHuz6a3wF3EK0IePhlr-~(X1bN6XY
zQAQXi50%zK%UF9$zft$MR=75bg1kYWU~-`=|4;zMwNJc06xh}wC{GKU+c#i-Xfgti
zaCdFTT0|#aJ#fc72k|=E);s?02|eMCmx&!$)B%A=P|^O72(2iK>TNR-Tn@RB7hL<c
z+t9d9oh<<}j6~YG5vbnsRo=BJUSNaTkvAyO8bGtV+FSH$M(z*y5TON24`tn(F1Xvr
z`zp$IJsLO4g!%@ClSEnzOte6zMki++8uxP1o084UP*FH2;Mk;_samS4oO{fNK+-Q!
ztJ(<oVO+w7gS&(^ZQiUeY2~m;<F8C1Ixq;1)u@AT;SsKznhB5tj<ESd1Fx4q$o}sG
zN3^H6^4;Z<MJqlNWpvhrQO;ii$kZ2tl)L4vuF|K$d~Z|N!aB{tgLF)aQGtNyg&oj9
zxH6F2U;kWWC3>Wn_=`W8*$n7DIz^>fso!Ok52qJ$T*zLJq{6k1Lmqt?RX+SCOqJ&L
zM^T$w11}$N88sazwa}ZNfUx+rWJ+u;u$$@Ww4=%BL7Iz1ed%$zCTF~QA`~D*T^nc=
zU)1X}heUM_mcFxhjjvrq`IQI7+xeqsuifAE7*Y`PHHY5g8V+ez+K=95z!mf+GdUqB
zW+9>383>9N)zg))L)ecEA%jNwI5i+<ym?LYv91=TY7L<T?Cbs6uHT=X_l6_&A1T5j
zw_;-&QlB4w19h6)LJ*D(;Mm4ZWxQk>#q<rexyP2Ms?D`D=VBP?Tv|#frhN@b9~)Zj
zv6ol=`u<lB?!gR~Q0F1as1l%t^v;6N)sc)dwj+%c>q@J|snRb@;6C?5hC?%h?m%l|
z1iE8>M9||&qunuC+EBuwlNXM=dX^N98N=93sD<&_B<5)$te&AdAKvB{x%pypFmD=y
zj3AZd83{F6&6vT6oiOOID3hn*B@%&#qE+V7-~3d72|9;~V@4ONO`8(ykQ}-#NzrH7
z=7Zov^MA0z4t&M3=c9FZ88FsfKkWt)?KRSuga6->Apj7a3iJVX?E;_Td-<u#*;)|e
zQ%)zehj~NnLgz}42luSAD8<~-%qulkPft!x-X4;!&z&6%xoK;v+S#*bcSQ{yk0E-k
z&zs)Gqt*7rj{uR)gOY<CAT(amWOzljyxW_)%fLCiwH0n{ZcpJ`AFtGE34TxG{1#39
zL005u%g_SiJ9#ulpQuS&ffZza6S8Ub-`iKTo`63#p4=ba{WmaHT8ixu{dY@0D7dlf
z@2@rj>(&nfuARHG^G^3qk`?~^!_snZ|CKAjos0NWEAyk|lGYO@4jTtg{9^H&-{p_K
z??2$tAfF3eD|Dmw&(16V>HE2zVTb;qr|U1p&i`nMRm1^nH#u#C`bY1QTMWSenawR9
zmi{*4fqY6S6p*k|V&8E8`D6Ukh4|l3;lG>aN6+&A|C>g{;i}^wS^$5t9sWPtKzz9?
z8#e3T-IEQ6lP~8yyZ`VZlg$x71o$#DGs`8l?(#Uo#sVxzPMhi8GL3yFgpUV0g#9I}
zCE9TabN&`}Vc-2gtF54b=|>~vNZ&mO^G`wb_4NkLapW)wE~V?bVRw#re;2s{kn%;t
zLZtuFk@06g;J={C_mj-MA4W~7$X`H4lT>s1yA5|?EAW8>0Ddf^VN*@?+I#$b%W+R=
zQz3bfUF6N$nwk}%+W&oUfB18tVdupG;cn=H_{_IYT}ssrAz@VZ;DB;7JyTyVr3vY2
zMKjr7X%mTb9Qw5ZSM<8~C+W)HJ*7Xs6v6$f<j2hRu7vU1A1?B2JEDXRJ**%gBAwer
zh_+A%t%B4pxt)vHJ%nS7kOYC`U$?h6&&UT66j;RQhy!r=7H2(NPY1(V!B7z~6eC(t
zvXE6EJv{hlZ=m=k1;cco6r_<1^z;`&EcP^Llkw<lb41lQ1(sp~Igf{uP$gDuM?(ll
z^l>2DB4RO+ih9@^b~v(Y7t=yBf?FT{!-nX}fUxn4o~*uQe+JoM=!nqRjN1^;t{ppX
zJ^ToU@?IQ;{n(%%Sw(HvJ_%hiO{9A5NN+}nN{1*YMrJX80r95Yu>&q;T6Wd%x(f92
zF$z!l=iZ!amV$9!9j41wE*0f4od``pEOF@Z^l_jf+roV2-hLp)FU<6IlinR-kg3mW
z7G?!doICc^>=pn_1Axz<e)8nW^8H~OpfDl@oLppjk+I$uxO?>=x5^>maro0wq&d0@
zv)IExqgx)^Z@~1Pm<k-)u}BcsvC?rTyVvJ9$%X)XIzC#He2xprySRE`x^oWxi42I5
z3Du@u1=8RMFr$#(Yi+(Mu}R-+W=wF+Yafl^n9Z9`gjd)|t|)kQ=ZDC;1vEL6LLk5q
zYVUe70Bo0CSc5haH(eTNrWB*%zT;$lyVJit99s|ny6c8u_4l`}l=2po@9l+FNgBFD
zm?`zFOi$dxL_KumW=<{rLgoNHYfXH6P}J=?>1Y`t1cQgFt^tPmEFOkpJ`ZZkf?$pT
zw63k2g_diaq|?^g##-a14+NZ}jib1~xkjvNM5be(GM(Ld&ng3+QCPOmxtjRNC*IzL
zAu+<RTh9fhPAP<-bbQbg6{e4*SuqY&`>1&2Fe33=PED3f6axvo>s&C4x{UD3hi%MS
zh3UPdo|ehvep!x+;e*!*4(W*$3AS&TqHkYImDSv6vezLcE5{jtZvYpJu9N5rzyG-3
zuF1bfK-yzl@w$G}uJxy3w!<F)xLvIpJ(Wwpiwe{mZ$%iGrfVMSZ#UMu*Y)-FCDx69
zKgYhe+yEL0%l6!yy=dNld;W=BlwhaYIl>0;bY)=*>>}%o@tDLmCQyi^$Vfaa)g~hf
z8b{fD63xT|s?Z9lJB%(y8rKrl=eiIrU__zX0Az3yVKy(+qGaR<!e>AVNl<xa0d*2?
z^?QPhYx<JJw5v~{0eCJ8ONaRT0pkIOl$!H|FG4+WlKY`e?0E*4UvD0MagkveH!v_T
z2bv3=U)FDLeqIHF*I`vVnJ?aPrY?X^zriiykdlcaEi(2LNo>(|etEo2GT*-gxi8?X
zj?PL0rVtDq7uhf_Lxd+44E2$0iS>xrC!jhT)#7iY123Ys2uk%)2SJ#fott~jA;599
za8WZkng^wgKaDi)uhUc{K?T=&{}l^1{WQ)zRj<m03pBaU^{x5zDS}5px(>d#v|v}x
zYFeMceuKY|?;biVmFFS17Lhm)R3M=9kLtLNu{vp=piA5yeQev;2Te%1<FdbP)^JVe
z?W&MM73mMX2wJPHXoVaxIds%9sH&%+V~@EAYLL|U0&3J@d|QsA0__*AIiR6(T|F)2
z3WpaVlGg(n*OnN!0lcuHw6)J5eNF%w!&dI6d^WXe<OGobvJ}jjIC<6$gvd-|bKV{y
z^SC^IsA~z7Bx@iJkdN{~Z#%_g0UB9d)dhoU);Q~|grL}k*>hb8HejQNKGJp|pb)5$
zp&tp6d^T@f;IYYb)=w3GP68C1@pK2sXOj~MEk(l32m?LJVe}aJR-)1SJR`-<Vyigh
z4y8$YabwyED9a;I=w4p}#gA2OiLBUWsR*q1|6%XS1F25C|0I<(igGonkV3YU>^qU2
zxcAz!WnYsuvZYnGM9G>hT+6j)E4vnveJ3hK$d+u``JJbkX{MQG-e%rEfA4>{Z1+Cj
z=Q+<g=d+v^k}~4E+Px}j*H<phcM81{mQK>tyOjprYX)a);z92Mt=1oQ?_*WI`29VW
z+iXFslDcrgo^EDzYGIs7`Wc)Lir6sY8ST^9I`PG?z~2Z3ZMUBWA!4u|csFqaTAcnH
z&*xd2?-dt3k^xQRcpiItyXF(kz~J^$YoB-vzg1v`-mS$(dG#?D0*UN;3hHmzgIdZe
zpV4<5kl5RB<rOk?)L^yb641Tms=^fgyf74hN^#<3=Rg*>QQ1q0J57-QUpg<Xjs^D#
z@G%YWMTmPAY$ga-y)TepqvEqp!=>I{s61#f6u1UWvq#IN%4hRyZflh|*#fY;-l?1K
z%xcrIZ3{oP*64!Hg9OH;nucDJa<Tp2ZNUU%8(YXV`KuEpnGz-Iq9KweW`ySc9E+;s
z$QDc0%QtC8vtN{u3jKLlI|mu`xQo4`LHt?`*Y}wBL_m1>Pt9?Ftqkb_RD>KMtoT{&
z^)wWYserT5G=s$_xUX$Cne(M5bWV5X6*WP;F=p%t3MelCRMGdUO11nkY&W7ZlLQy`
zM)|LQUaAFw2=QYb&MSwVSzY$<WPu2j`{0!Ta0K3T*e~)uw8)42?BrdE33{29r1rZ2
z!i+hVz=~TKt+&(@<}52PsiYL;8u(N)Q&zS(!npvn1=Q!5RINPnhiva}{z)OlB>#hH
zFh3vkeGmjU{p9%bNdMrU<2bAiy-5vZB@3r?R{Sh~RZP26wx#Q~erVzl-^@Ss(@^2*
zA@SvpPtbXEeh(oyi6i(*#4>-zlo>yjXb6{XOSh|cAlyJp{6F>oD4@H^#ME>E7C6_<
zpf`Wy1eg-k^ZdZBlN|@9MBT3XGSTd=8QIx~VexN3B7av&2O-R*cjkSpuW3b!0OMU;
zpe!KQvT;#-Y+3Zqs_4b`nF-wvOQ~ZD5Qf~S>*@PfGNlWd<p>IwDKRQtFO4d>C#Ji;
zzdPZVxFu03NYOXWpBmf3xZUz|%4x>1E`uSicgO4|yM<FP>ZbJzcc4Y}dqY7BRGt_s
zAgO*TD5u)%yt3#zz2zuSaRwd2XF%cU^lpCIch!ct&vFCPgB{V+R19J|Ga+4rT5shW
z+t1u8>$5#4`N--~QK&>P0QkzlF_GmwBy4cueuHtn1}IL7r-)a=!FD<5eJb!_xPf3o
zm)4DqS2tt&I)(j<miA|w6*(96_K&+1h5V?o+na<optPQ;l~U(al8WcWmp}dddlYG#
zpr?(p%?3*O)udMAY<y|5lpopZ6^~2dE<sw_^kB!-J9&<&Y@tv5$cMP2K_N|DGw1Zz
z%23mJ2Sv*qfJ5-DdAzr^!WQ8!YOUlxFyt{zWp>3f^biC2^}o&p{*Xm6t@D%gWpO22
zAAC;7H}}4lS^O`Aql#EKs~Y9<hQRl4R4e%90QZq01RWgABS$VT`hb17yBsAQm(`}5
zc{Q3|_Gq#WG<p$<db0qU9e{FcB;*vY7w!fBse=H`xa}S4hzO?+?eQ2+odBwQ7_zPT
zbQ{1APS6M50!kT}F6)&lq)7mg2uXKs0+rLKhNfHiA-5HcBLcv6G;Z?8?_`yuU6Z&u
z(F%5$0uqubp4?^mOVEA}LHiy2jd$SP7qP5XDE{-g-OhGq>YXAox89`>)dKlN6_IB)
zY-&;20^YA7N#e;WnIh-|HS!tIp@7iEZwh{1``|d!JfOawS!tuUFboR!e7B=3p3vn)
za_~V39_ZLY3K^BIbN}&d862h$-Lc)#^bD=#+5>eFt+<&M%ZA?jnoI0wet8c+FZSO)
z!|ikm&6<jr!ngbUaO3kgR(F$mWz}^z#uk4*d>?7S0RQ4E4KzKer}v8UjcNUfN&3gl
zaOc7-f*Objwgpg>aza`Z2IoI_V!07M(fBJ^jGi9dQ^zI*0e2eIf+ZUUOPBRv6nVu(
zI==BNi0CZ17xjTObmve<CG&T@(_g-&0?Sl+K?Sn5qve}lOgoMJvdzw8rP4OOpHulY
z+WCVYP=$p%r0hg6qyAJjcii3mA*yOV7(P66uQa;p8Kl7P;O!rMGD8pgX1a`nV|Mg6
za!9<;fKY*$|5j`)_Z4trn>~QDz=et$;h0+@dCbA>h|F$ZRQAB`MN7UUw@7sCx|QXp
zb7#|=nofZ9VRb(+(n9W@E@I~nt>ypj%)0tES&U>VMwV=7o5Ti3y`-N-&rGeGKZ+l1
z71umX@%j8;BZEQTK`hFl;kna8jSghTfpIYxp?XZ7UZUklHwbAtAPb$|HI&s4oNQj`
zVqYT=c#k0^GKh{RfAWE<ECOV8!>ywwAh+|mh(|V(K+UKDQWrNeU%RqKWPn096mCxE
z3BY#fGR^=ftl$R4-NU^~!DY}fuLbXwy8KyP1TwkqU0m=0%D!yu5>gZ*?5Xh~k|8Cj
zL@<NM<rY$_4hil3wUqz6c=t26G>8x4NWD`_!<=Vm&$hb@d+UDbXXIp`_h~F~8c?F6
zd(-jrvd&|r)+>R6^ETqR!xRW}5UKKlgy==SZP+ecz72jDMAugC3U{yEnu(ISt3`hf
zeAQL(3{(YHapph@&GA}r@+2Xbe<c4#w*9o+dblLDXb!}{0_8<J&IJjVQwOIZnR)RR
zxrX$dqW6sdv4CdxZrcwU$5iz0EA0h9%PhukwNy?#lF!<NObXZ<7*~aDs!z1h8An3-
zB>Gk$05St%C=_;A_)_x^Cn3!rfSeZ1#foGZ9kK)p7DH{PlG@sQm1H8~#ruK{P74_2
z1RnWb)dnmwN}0H-Y5S&5<^~tYHvF=QoVUOxa+Wmuu=VpMI_w8U$=wspV7AW!<qm6h
z;#=AWZu1{c4fmFpM~S%BjGwvSjoe1T?MWS`EZJV*K{=e&!RMq8iTDVYRoDPZaDG+8
z(d8D;GvNl;X9SQq4Jw~6xgYQGh4CkeK;F@Wk?lL)!!&>!joh;G^0nZ|rZT`Bd(pb>
zUZV>P3PZ&wB2I6Pd<9^BW?FM&Be-TAJjd9O)XvMVV3`kT(e*2@W~ToEdCc$K=1T`A
zT-GeFK3&;p`fD&az*R9<cPZef&m$0m^2rfhl{5(cko9b4@!RReKr5-ID__N$><#fE
z$L<C1Q8}n0%$MgUZ}S*Qc-BCuRf3^2vKPew*LN$=cbpx;W1~~Sc{E-+1^NLeuky|m
zYw4YXpGKSsCrAuqJ)3Lrdc^mj2a>32DKZ5&2-YC5UlHpZavZGNg&;U2hv~>Nn#k49
zxRbh0u+#zkA9^l@dxgLM+lc-9P|2i7_M*>6YV_Rg29-C7+1c6T$Itxq%Yorqx3X`z
z%?<%tVakD$UQv--f7T%|t!#N$6H<#KZy8bP&LcDcGtpo@N2;UXqByQo6V%QxfQ`6W
z&^+|xZAr<D<3K@VN!270pvP5rsS31NLk{jmBb{gT5WD|qt8okb*8ud`uIVMjq=gi`
zyr6$A^1SqSpLnx<p9L7j0XJ^AltP2)<XxW&Dw$%xSR4cuA@7;ayJ^3K`Trb1en%aU
z`uG_y+x(g(V)HMH^83a6Lk9D=|2(sksruaq8J_P?-@ZkaC)WT_i26tb<$w2XUP6Pf
zu(;{^KU$1GeX}%eHO<q)mUbM}D`CJ?i0FLi*uP!>?oCh-6z>r_Q&9rGbP;cafBf#<
z_{|mcd%D@I27Etn^M&8JV{ti_k0K=e2b^Z+BjNAfBHvm{Gk!mnon|>4M}{v#)t{7_
zc_;iTDI}clVdBuJ^4+rJsu~qEkgYAts5gBQk`Y8y76y6ii@CX2AZIAwH>uR$CNC%V
z9OPo=(B*wL2Gg4)`jMh+|M44#R~*V$3Q8aVN|;9N1t=N~krFQ6UYapC2ezQB=St=(
zprNA;x)%E)`2c#BqZV}^86Hdg7u!RMV~bf4Q!xIT;(7&oHOf5QA(mtkHm>tWvy#`n
z+z(zdL&}q@J_;f@l_;U+*JpbU0@okztG4l=VHm}ev-$Ka^rAkLulc+va!sr1f;o`g
zLqoM;js4+0YQSO`pFCaFKUxdMeO_00h=oG$VX4~#GSo9-Klgq9<;l=AWNO_QaeKST
z)L?;(#_JX9!d{~C&K)L2Kvakla+E<0oeT1tH$+6)u7XqA*eiHiN<a`#g#JnVIwIWM
z&q3~NJqT9Zcf}7i1wdL;3&F%&t(9~FEG+m|7H@!j<=s&W$W$b}|3UZQPy3z1%<l7+
zVUTyapz>U}v&cuOv=@*Q3md9kD?mt^g6@<ukZTg5Ifr<eZ0@>LQl;R}C(+N>l=vtC
z7>SC&PBDM^&=L7fFWgYJlXr2+L!B#$Ctv|+xhVok5=5R29T54Ki~0G-cuS-du9RQo
za#>HWLozHaD(r{72QoY5vEm8naF#~j34qJF8ccp!p$B^;+4gc0JZn~S60I;Buu8x>
z$z0|HYD1E3pgb@t0_|vie9DXjkV*$c!nEGmfQ3|^L$4vU<5`8B<{MW+*s;%Icn-W<
zThmE3f=ae-p=kAK0pyR$kRsKufC!cMe)5seslzu9_<xLL3Y}!D!Mldfz0h@b)Z%9?
z^~`uS1D+BDEs2&B>Y&&#1A}NM(0(51*Dv$ZMeMc5GW6YOEC?E>s2IcZ6PwL>E3jT=
zZ42f;Dd1THm0&e&8g@i@835}OH(wJ0ux>j9RwvZa>S+$HV_nVtdB{TwO=Oe1PRFof
zvx2Pt!6xq=ka`%ZVtiLUnmzLI0JR`uk_Y(7CR#Pee-bLyg3hHm>@~Mo=YFtC#YD?<
znh5uR;hGs($NMxo-~2B~veXJ$$iO>G{h6(S-as<cbV-6>uY<HA;75?-K55dLjPZqx
zaL`rjO)=1^^3*vr;xCm()9u!acn`Tz5V{_lZaGuwji(@2AP|B*j}b4PK2g#`f0$m<
zrzBzm<`1B(v6wO>CM6^Ud4LB}1ADNgBK%6F1(;N8wX;09?g~6NG<gWVbhDLG9n!%t
z0Hv0qKEb5L>hL3`W7Hr{2Iwln5e$BUK=>1p9ocy8zd3xnWZ~u`+otq{ZTKF)!)txM
zt^|7^l(Ife?12;CDcFh%bbHo?Qc(SWD%6`~&(MQJO4Yc!Xb9!!Gppc*$Bm>u(uWL?
zzv({ER;jk}p3Jvl0qBSC5gQey^#&r4#h3I;lMIv1p5K0^oyLn?lQp3Z@Blww)qIY<
z=^>G;pB|LI81iti3OSfj)CT>3kPNIcBiBGX7?=6u7AmR`n*GP!qvG+&={6_z@>AiD
z4oV=$Aw42Hu=mK5Q6CeftyP8pATj?_G}<M{gasb)Sg`J0j0^Z|!q89eyI>h}(V$R1
zjS2`#RT6aXpP`8lFeB-3@?P<CI6hpkmOWJCD6e*207iZ_z(((YKz9e_^CPnK+Y!DY
zj2f@kGR4b)mAgLzjF}K5(hw`@a6u7fG<_68Ltr(*j;}Sjvy(#+A)s)a!as&zA+*W$
zY~d+k(!2LOW4Opg7083U?J+Qlh|Oc_IotR>dOF}h-YxZo*!QAm4NxmH7_$|RkDDo?
z$9W<JIN+{=>r$jh>Mw$G{)=H_iR=ATXv|tjiu5Kq7gQkBsR(57U)36K_Gr!F4c2<w
z9CTZN>VcKiGaJMlpL_E7vC3uU(eR$)jaHO9580K&jk6C8)&=S-x=C0dNDlI4sNB&~
zeIf#0wt<Dq(2g^M`a?qb+RdAE87It;7bEJ}LYsy+Boum~Y)HKaJMlTB17gpFvkE~<
zgGA|7j<1BFm8k+_-)2Vj^^QD8jNoI33`^cSDsW2L14b|dtVAdoyQ+@KtS*~&A+mo^
z@YWWlFfEToaCldtsFk?&Ur>UW)^A?+wP9J$-DRIjFVK>Nxx{y#_J)!S;-M=JF9THA
z`T*wuu{1Yr4N2<Q>cAY=Zn){*MO|$mWSRr2GMU+2y#3bPn{5*FQqOMg9eovTvt(X#
z=N9V4jgG%8#DevVepad5xLz@oJd2+SoD)Fj@fkKoCvvWLZS|}!44!lLf3bDjwlGBa
zwD%s=3aarmhOjvfGi6E7A%u;2+nU1L=}4+7*0LaBlWz_qD=#EJv$H)s4g&&rP+_fE
zlEJSj@=ZG;T0#?v)ob7g&3~hr-AG$aE6ti*eC5Oi*g?XsF?s1v&0cB49h0uQqZ&>2
zE6v&sXk5-5Ty3^8QZOVkXK8z}BN(zRKn8#czH8zva?h-*t8Bmxd@Wryb`HWzHFUZX
zfi4{%0(9Vw#ZmRv17l|m!6_gr{#53r$fIrV_N3u+U+US}fq4qREvkq<4VW))qh=bv
zZhKN5b2}glOvp~pz@yf6`!C}1f0I}Hxf}{&zn}tto6j!+)S^9)_NT>bYOc5*^0wZh
z6_T8oF2}jqT8=dh_Oj9p#%Q!HH5lR6K37q@re6mV7Es?lCAUFdSdLuWZka~qr;P*-
z9C-TLt*08!_sIvn5*Z{S{wCDO<7aO$!0c6gN!9EdsQI_=3GQ0Q=(~J>8GPU4AEkkD
z3>Nf`?B^x`ZV_1O76fYPE)f?ilVr0!|2`28$|UEN3sU4{)6D{Nth+yG9=@QmnCKGo
zt|26f%?H|_{#q0up!n&T5eP73=$Dlm#{nDrG=)ZjJ9s)+VOYTa`8p2{sc&`(orx1$
zo$tRb>Fa}a9my>Ia2rA8Sdm81YZSg8I+%Y_R`${jn6Fy$`0?X+Ahf=HmEoL%O9s6S
zY{@V$7=yz4@lLmG|GD4QD&!m|irwr}0RX!Lh`Y?OW9!AECx7?#->Q{FQU$Dx>{_|a
z%9{NHhu#=c=b*_qztfDxZ@%`G8OvtLxyaCctOhM;NI;g#MIlK2T)jhhj0{0tT;B!G
zrwYKW9-HRveg+`(xUnW2IU*P`Wj<(1*F9S73r#RMu%@7~bb{0#jYlzuM$I5h6Uaw!
zf5WNxPBBmi52qQGmyzoYKR3-e@IlD;;WXf$Ibg@*0R}H-pg{a|0}b|j@Zxtnlu4Y@
z>b&9_Lt2RW?8J0K`A|~TY!2%;Au62I+Fs=~apg4w<uz~Rwdm`Ap-6kQvzitY!9|x*
zb0<O%y0d)t-EA*5VTUfmjK`3!E}ilR^FSZD>wBVoonFW=m`_iO3Wzg41f4@2xIDs8
z)ctUlZ-Z)E8C-M3LiK?pyi3?A@s*%$2bX70q2t1od9Ejrq=#P>KR^&a&Jjt>5NBYj
za;H&vKX61s-~mOFQ~`6k4GZd7=TM)zE(JUYPzW<anLhXijh?vO+w0y>g{DrhfM-)n
zk*lpR5O=EdA+Y4k!SF=~huq&?cv9zfSV5Bgo@Zl|8`8c*Ifi^DSBYDO?Mu_YZ8oSJ
zcjoP5&HE;D0GQug7>K90LYW^IFxBZF|Ao^Yx%7F0inNqUDm#p|v(w&)=7#Is+vD2_
z6Jy)+Ze#Uun4HYmmveA(YoH}x&$qbkDVnweN~1_6tX{-OEl+tKCx7YEhhoH=XK`1g
zS|<*!+n*i+@L+&Y&k5U)ws7ZLl!Lk>zKTB&2fd-AYR6PyI0mn66G<D%(m=TT46@@y
z$hb7)q}D~iXdz^N3CAfBaCBBL;yNyS`e%CJCgOCcvha7CKQa6~kX+W5%;7nr87eX=
z?5qvnob39D*8j#0zO@+QS|)L=jHv2s9k^P&^Dm}aUSJDK<>1{A$l_g>2=WB${J2Zq
zaEr@65rL{7wK){wRx$_pa&vU(p+KmH4H>}h3C#^gyes6GWcd1eyHs#4Z}6Ps#0p^l
zhKN+NgSv%MfzfCF-b)xIAKwX(KolA&oS(G-1F`(eN_xP=#Qfu%NAdWm3(b6q#C!Zy
zcz)}arzIsr?bNN3tCQQH6F(*K^!FVC>q97z6mM?@6Tw5!ShOx<rTbm?>bI0pN^`@^
z&KW42pDnLd(OZc4EI+jCEfY^|b!7N<oE0KZseV_XpbpCV4%(GdQug$QaAnKIhYCVA
z;HeLp!1(x$hmJ5h7R^}&7oIBIey7(LuUrGQDig>bZiA_g=r)#zE8xTt-kV5V5B{1K
z96Y*g!~E^`AlQ+>Wb?gGe3S~6x&M`C7urE`AeW|A3g<&YnuSWo`lk#)w5EXFwQ2Nr
z-S3Q;q)u#rb7e8u+KW^6XHUsf`Br2II!?AYp|54mI@(*_V#Tgc_pJicPlY82hzeeQ
zM5*l_OQ3ALwrAJNQ+n+3J@9Fem6Kwme%dZHZXinZ^vj0_>K`dS!ZbBvq0>Wzo7@Sy
z-B=H$G+Lq=bVSNiPvgN21lir}5pg;ArU|Fnp&c)~8GCsIv|oc)rLqi)L+@A%!O`Un
zuK>se>spE0s-2>Mu#gPHu77S$nn|o%+3+KMUFQTl<l~KAg4KJ!)wDFT_5<Rn|LPhC
zB-rsB*wEDjXQqF5F1}nJn>VA$L_dNA#APpRVcXW&C$m-?KeT<kz46xV*7WIM`b$a;
z`NEwBQoa?wa7;gJ!lr<2#Bpds+>*&%iv0woU_8&SEpYT}cS*;A+mA&Ah!W~4YRv<_
z^;ap#55%o~AWE~YoXrLdb(71Xi{HkuDzurNKHxN+(|Nl;Bc%;G5a%6^A5-b@=+IxM
z{&@3Ozgmip<{-c*h1d*}Z`(FA<!;tl`(VBzs$)?s`Qe)p(yxuK+C@4EaMtcC^a}K1
z?%Ab`y;nAdyQFW7%L8Gcu(sEb(~n<mm1+_hqBwP|gsg8M9eOGFjk6*(NS(d<s&?^g
zcAca4%MIW7jvvUZ*@E_uABuL;W&qpcR8r#G1Kt~2_$p-m*{P2_`>&X-LD^DCKk^RS
zZ_-m$e4<Q${#VHSx0C;mUP*o2Aag;I<>+_3r)5UZvt*X$__b}z*_?4?r{fNC_{aAh
zx@LPi!cRG3OH!(RL7~M;>qxS7WKu|IWKyVZBrzn^;#2Kj8k$GZvNSYzRORT*udaDD
zW(~Pn4mKR-I?6RIk<~dMQR~s*+^|&0FH~n)MovM^Bz69Wb!2~h;Wt8dL8V=MjON>4
z{__v~;eVPa;O7I*+bI0$H~--qzxmhUdq`U-c=2=D^51%M-|;J?_ES*s@{^JFZT^c7
z_@919%AqDJ=_KeYYnKO$|NJ51;?HMAV08B!_^bE)?Zq^v+F_N))XFTK#6Ol`B8*nL
zNr$Y=LLfBV@gKfBoe*+*nEP?&Eh$gUdEe)^k(OS;Y;;ung{7&<AD`iW_=xF3e#f`)
za?c!l!TEuG*EO^WI;_?i9qoKyW$XA4f7h~nT=NB$Ep%MxRepY8d{PyibsL$6W&YXo
ztFYnuW!aMf$IkjBMfdYs(_@*+w4QaU1bkzw{_V%KEs{#u5J7et7|XUrv9q7Iv){n>
zkNHl8^ZLKM*YDjS6*dQ&ijE8wK^t<9g$>lFrmvrMeO@Tzd|Dtid1bWyx&tm(0BI~%
z4ZIplJb@6K3>omw<Pz=8djP&ng<NeIvSxK)zH{#QzVo4V)bBVI@8wEhy<-7^gJD7e
zddt@Qrh*3O=dC`F(HIl5Zqfg|6ekScK&h+_V<-#>QjNgC)>tuXHzfB258W6eD3;S*
zeOx7*An61NZCuF>n0R6tvV}Jqe0qfy^0*p&m-`t}J``wPnCGGj%~q_}@xI)B)i{&;
z(%<tmjq_=&W|*)FPyvYMJM>EATQ!^H`yJ8v{7GTwLw(m^1mL_^|8^8y{MvQnfKV*_
zl-9Nj02|Ij15mp*RsnhZ^-P9?Hz$mo&Nh+Uq+L=0?#|jn&blqHuKc(wC-G3jj_-<1
z*;lskDF(5V)MUf00rsY|(0d|zBJ^`yncYIWFKNCz<(D8gyG7rz64NdM*)gIt?T0}E
zJoY)yS*@Y3TuAm2P57+Csgfq$pdtN%57Y^If?e>QTJK$Dhz#rnfP5HSlv3J<A}nK4
zUF-gKTmE*uBEzJD$s;cC`5gNMw5jkXDxiI}Gpx~4{=C#Aa)NOdb#UPN&%aG4rvm8q
zSaK5%@S5l*Qt(8>D8*rz;pYyWWv?P|W#e>pwcD@-&4|Ltivf2~SvskAc~H<ADn`tb
zu)_B|zVlMkbXG008q06ombC_9;v>I<YZ@DRP!?>|MoWFRanx9_Jg577cmkLXpZ)OC
z<%M||G5&Gmk*Ynxpvh^aILmwBJ3l@}x`H2TS~X5$c>Z4Q{CGF$7-pYX3>+>%k<mC{
zhkw>t8k6nDdi@L;8_;8_P@>Z*ad$*xu3CW-5(={|?+EnR<sxsXA>G;W9>HkX&mK#F
z6sZHxRt<WuUfnRVs1-y+(T89F%nUS*%DO4tfSQc9KkWo?VH`6LF2mP}04Yf#je|9?
zRN5DP`*-&$h<<ozdJdYat#DwC#`VYSfE`8T(CE~6Ry_xFWZT(mHkyu&ASNK@Hi)Ek
zEEH{(4e5t%AOsz7$5bd^JyxKiQv<+KL4yjMt28h?E3s<}v28$DfXP4G27F>yXOdgN
zgD4jI`(b_Mt#hC&CUo*Yd!#Dx;z0D7$D0>opl6_bKMCl=NzgGJvOEguvU!m`l(sEU
zBu61jU}zKG_4#;_F%b-j?>w`C*_s4b`3<QszDx|wPb>w7%L_CS${<q2)h5;9KFz+u
zc#$rs*YBdBFb=i>P-kiQor4a<Fc74i7r`@FOMfu>yTYv>B^f76HSM%N<NFver&>Lg
zI{)Y%ROrOeNt<To{FHOnKL<(I9sZ0dhO}8EMvDMOs{qEx0MlP0R+A7JsFp3P-%xDD
zNGDMU$XT)L?I{OyE2pN^_j}552_<`7+cbuO{m3JEr^C>5JP*c%4P|TMya-HfFeO3R
z8%UBN6ZeOc?rQzWI}QdxMB$Rfku=Ojm8*N*bUsW&yP}lu^f7@$MepNjojDvp-L5bx
z(&xXw#X31Ul)-m-a;nwC6TVkLbUY8cb>8b!ZmeqWLc>`lZ-8WUyHAe=00$!(9*uYg
zJm~h*n0>kKmuD5(qVIr*+GU%eu)H09`9Rm<52P8S5lGu*LRk6)1!wn(BeCv#A?Uy0
zC&LeL%V<>&4R7<EKjwy}G1V5o``7~?CgkENIsZ((O`^X=g<tQHZ~c#%UkDvowf1i+
zNzjuk;rsdmX*%H-AkdxC#!sTh+h`lO;t3q$p94DJY|gU@a1VtQeE`AGaEmfe{Sx%*
z^ijj51x7(QA7*KgJ8YGfQBZR#1*;~^vL<u${T}IiXq?ohL;!yxfklO*KPu4I9p8>0
zwt~)EqXEa|n*>|iGT*mbj1FE72bx*T%=?7EB$%$WUwfm-RP}!BrI1V@QSaGEFMiIY
zzININXDkAuidJ|FceB>uu|#w3z>k$&*mj&HDdjYT<CIIZm>cnw*yWsHxB*0|_6Qx;
zR$2r{lZeiyrWzF*!|OIUnoDTPMeC5nT;X#1^<nv+hS?++6t^Ccqu`d<rY<%q8ws)(
zLXDEfD-H>Dnse7VbYVoew4-(Y9PI6B>$~;^itr9iSEFR#vw!dyjIbPRRK%Sl80+Cm
zTmEk4e@hfnxU*X>s^llXqxd?`>EuY^Dz4GB`_w*B9MC?U{b*xhQ6p%4a6Uo~@*5It
zGYeU@DQ=EPYM5I>MzWwk6L=UI&)t5)T|Abfy!dFFPY}UI6dKb?6EH}bFge#{8n~yL
z{WSHx2#SHHCGjm9FO%W2v<A~$xv)LwuGuE=^Ht9@2m0i>tc8F6bS>^jdL>te)rVni
zy|;GDG7SYC+nTC%E9L!52swM+6#^LUjCtPYZdxwSGDz`*JqXNDyc-7JW3>T%K8gqN
zea&dJ)*gxL6|LvjtygMH%v{KTY-Jd1y`PWXJgj%A)MR;zu03L_(3|rmuVFa!{;T1H
zX)xngS%d)zx;e#w$vZ1#2pO%Gy>jaz!owC_L8E5(G90x~Vc?PAfq}E97waq~_E+Ot
zzAvkYE0U@mDgN~J<EbF=oas7sm6+nQgIk70LpNFT`e79!HFidPBqgB*@Z{($aWE9-
z+-Si7&e;0W2N!+&cEl=ZEU@X}cHUHyX=bj*y^iP5obiN#;w`Y>?y95UF<_vHlOxcz
z2LaJgZ(QF%lxEo)*kSYnb~^dg*k(x*MYL;&u7@B8<1945h4ACzkMXK|O$eKxMtaVU
zgbYnZPk1Hk`KN{(;|dlB1<NDOf(hBQO-KeoVqk)14}lsBgTge)@2QE;w(0FlLU%a~
zJKksH2A2<h%MpyJ+$;&^H1bXy-;i-8vklT6P41_-na!;!K^Xg5?gw03J<)~y_161V
zG8A_OFkLF@;;+I;_S6Qrq=VxrH5bxA1vLDy|E6-Mp{IS(2q|sqKmu<IG0aeJ=u#|<
z{uOB)FJD_-(7$wzRV_-#vK%rLq1fvL84c@HE4iRl3KmS&^`;gOtVH%<GK92d*dMD`
z{!}?x^jZ{PPKl{of$v(O&6JUL^4!X7r?PYm2=2;E%E7CyNRjghCiq|pI1t}qX42BW
zZYcnHgjdnSB+Xvtr?mLn%*M1K;mmdT+{$TdxXmQ?yv-@<h8Q-T3M<bh=TFk~gxPhR
zdmE|<BbsnOrX8ig4^^uDc0#|k9KS4?6)RcB-RC0Q!C$Q)q}XuTC%oPz@6S%6RgIM>
zZSa9{EveJ`IBvoxpcHkyNFH3ENTubLQJ|^0Mk%)2E?fE>B-vA`%z3mRU^|QyP)RV1
z^C-G<xnbDp9IVIehI53ar=HNz!;+`Q?{%&_V*P|lu&yU$)&IPD9tAHl|IRN0p<Q9e
z{Uo6i?lAd5qCVnia>Gf`3>@B+6JMk0s9N6u7`JNqVtdvUeg8|yFLf>PnXvW34h1s3
zL??7<U^h(+r(PG3N;12+OXW|bX9~bLZ!Z!eMOD+{i~n#<{MGLHX4ReMUjgWYZ9Ni5
zqR2B0gIyJ1fV4Jr3bisMsD!~n{yK~RN`5&TAox0E?)JkWI7D|lfS%h1&3nyWlpdk!
zlX5An99*w_*H+kNWKm*84-<?C6>51YbS?n@CmWo7#ZR?cfD7f`_Ib_6h2QYO%)A!&
zS^KA@*Xd4?U~mtn*tKj9fS(3u&VJcbI|Y<&CRN}J>tl0$g|2!wm#vIDB!j}Wyes3A
z;pwwr46iM!-Kl2aMw9cMfnCRKoph4<180`64j12Tlz6uS_u{2OLNaZ;6EvJJwm}88
zhl4b69CB9f%Q1bCQ=g!68In@P=@6J&(Y?;eCJwWxiKp-Hl}<`&qlL^yTy8hOZv<C?
z#E{-OK%3QOH^jv=pTH5$!RWEwye`4B>@t=#eR`Uli?p4%5nnJyA2|QQQgZ2q3qXWJ
zCtd*EKr7AGS@r1DuU-I!uVC2ot&uJJF>X|wPqr7`TL0B)|EniW!KEP;WPMFm<f|i7
z5qa>i>qy%kvk|adDy;=0RLiYwa%fs1ZgjVF5)9E!Bc9Q`6cUeSoDzL1-J+IYW_1+v
z3@vx2y%lHq1axCt%R%OG#jvPmhO^^@d&ka$-RDL#rc3&F;ccKnpa2#=rwKKB%?}{<
z6fz^7Z7X0K2IIG<jxfj3dVl9e)w(HF8{&NOEX&uQk5l^%=o@Qxpt=lO>^43UrQ%@@
zb~CuwF;Eup!I5YKVM-g&3-W-pk_aD9drK>fS7tAT;)(r3?xT&n@5rbt?=T}AZUC<3
zR0fdsPfA>Fw<yluGMb%|W}n}#WerifKKZ&OF4tjCAPGxzMPxKRw*^weXuSugqfxfg
z1~hV;S6AUC<vdgQsJ%V2`@+~)%luW~`Q4SK6R?3iLaYC(<;YjhFnf#)>K%tNAu<IR
z0eq^`4~EX)YJhsw>yV5xN}Th3Xc7?x#MvD9CL0H+RmU2^dtI*_rmOPJ34eIl-@<y=
z?)EW7kbq=$SSpJ8u8bNvhk>dfY5i8AIFmUFrB?u&48s~JuHX1$N|&YiUN1O2t<b5T
z9*6nbQ+Y6hxHD4eQdDNiRE?Jy*(s`2u~{fulC!+WZLL8JWDNmc9aTm7#(Lz>2^^}E
zT!O$E*P9Di&$v)6pL4RS(z)|@pY(6Sv(6;64mn@9`G36z^c1oWSvclpm)epgLf|Bp
z<Uvt0RH1<*7lA^m71c6n>q|j1F+7&rnE8+tpVQI_JJD<PeicJnJI@7`W`aZ|f4)eE
z^BbrY)xkSW5inOJlq+Fr2n1zxC#Ffig1u@TX5faz3d$ja8jT+Vd`6yZldKzs0?7yM
z<km)?Pq}$;VG=>|G`Juibg%={7?+YqyN`G!4>)ha-V>g^wFU_zn)Sxrg5?YKe8Az<
zrx``39R|UiNgct$R87rGP0T-FLgIm4p+)j(5Aqy6_B|K+d8sEG^aM-NV!m1%DdYO>
z4?h%*wjAGWf9E1sa+H%2p%cm?ENCd5jSp%qfeCCPkI&@wVaVc059d)8+0T7)wReJ&
zT}F8z8u&L6V4A8y*~q0FWDOh=VG5U}@drZ{^>RB6?l??>N*XdDk&waN_&|xZg~l)v
zV@RW^xdRMK<MUqX>21J=!B~fK+N_ik+KdvJ)(t!LgV0!DuabMdvX!L0Ze9DLA)62m
zr+b^!3-qpqsg#<T%RFBDF290|GGe_A;4Dhe@G;yfh?)Bd3WaFD{P@7LUspC?AN1co
zf2e_!+@B+M`Z_WgX5+Ysq7#gM9WRLl=!@s-1?KnL?<Hc@#rfq9CS?jZ_C1|}EODT9
z((nfMwIs)n;!u_?Gyzo70^fu8DSFgHLm~vVKrydD`9lU6fO(YBP%MI0I(92C!Db$B
z;o)<yOZwmrZ$9a0qgXCq6~$r9z9bmhNQ9<?AiCUZ`7!{;6+;)B(QZruRQcNUY%)qT
zI8QiXSg{_87<(ua7QApTi~0zhEwEefa`J{8%K5Hd+xZGgj8!wByOo?SvKN2pW2Kcy
zfoyVm51UGOc1>eD`R7(jJDtCjQXb>#$E#_dWOpAfrYJzIj8p)c3MsMVx0!|VNCjZ0
zk%+nuu3$hfS9#B!+py%^3Y!m*xTfhJ3z41D*q6$#2b*`wd%qMv46u4jOp-dg?d!*s
zO~2(SkIFT-*>>%$XK9CBzy9jyhZw+_-E+ElU^l2cGWr5Of&HCViECx<*3a$0FZZsW
z1uHfF9IJXvlu_D~mZ8SjSb)gG;I$WL{gE<jjZVQs9J59mRm^cHIm=9Wd*eG#(E1H}
z0@<;rf7?Od7nZ(6EFBA!A|yHQ`|?)*;R`AZwV6%I9iM;u4!Cm9Gqv)z76$#*HS*=H
ze*1;r6-vNHa7vQjcsAelo<emYb%+?&|Gs|WpWmg_F}UXFIf#t^aN)kZxmqr!>byFa
zL;nzo`4VB{?vZ8e?sjzj@BsCZhT*h`mhW5w^X}8H1LykkMY397{zGKu*Og8uk=eQg
zv6Cs&7;;=t=4X^~EOBRqi1tCVq;t%nJf{Ng*a+0H<a7V{h7aOTP4pgnmvxQzny<b3
z^7j703!SZg`~uaq>yqNhu=BE&MCLdg&V=v-md1qiqWpdFo`L|kVRQ}V!Eo83$(=lg
zQHM%rTKGU~c)Zxid;QfOu%(PDhP#5zz@=Gk*7a=WEpoA|$1m`6{flRl{g}L?nh6V#
zf$};c#esH=5<v<}V?&UT3uk|w(C+$*veoE{AG3QtY6<`|;ZEjjU{SR~yHuy!=+^Gh
zj0cA3E}srU)M4<7amjxRW3=FF0R3C{9B-v`->Nz~{%=lhMa!0SN65eTVep|~0`pw+
zL~2x0W}GH@7;_h`bc#vTPo{VqXc5Rm6Nx2h*HO!)*$x9i?|1tdt@D`BeciHd)1IKs
zpi<H1tmcEeat1ibyxRWsyk^xT+4l6oK4HGJD*O9icIbD%0O-i7P_LorrlS0O3I+Qs
zfIu+ER2;26$|H}-1+ixa(D|j9ltiv*b@%|;b1DOZdeD_sHnaQ}7I%rD(8x$<C*ImG
zp9JYGn<{7{i1m*Gf`{H5`*K}oYm$F%j`lz)7UJY9_=k)cz0sy{vdXzq!o)@X!O|P5
zf8Kp@!W8L8FcCFR6glGwnm06X7KAg{5-qn;=!vpt&p=x?8I^Z?&%M9rp{Eft4Ee(8
zCR(^!q6HuaMA<eURQG$NNV{YRBg(t&^EA56f>o7F!7Y7|T?X3>9>FVoxg=&B7^f(C
zOGJr_mM%4jvOnXwfJYSrKvrA<8qNu@D^lm5Io#OU-(g2{@Ot6XDCkJu0UhgY*h{$F
z9?fxJ@JU=A(zDG78JbgTFG;9rzpaN$p$tYngG&A*v4Cc959fGEbnN<Y`8jO*Fn0s+
zmzY}V)2%E5GJjN7md7dL(1~32`;3hi7pVlQ8)4wYYh?$RsEqhgjz!&`>4G2ja!c%o
zF(uD2kNTXc8(9W-G(OnpR%>HuFXQ&*D$x@5n-_Hi&zu&zlXkZt%PXj<Z@l#7%fG$g
z3Y7Bd<<#?HRN4RKk^T0<cws|FI1^U-2xR=2?IMIXnm6#|iCVHkr11WnGI^a;D;hI;
z=&3~-U>Ni~$Mdl`8v;o|nevY8$Kkk(TWh4FOw!#M0UXMdodu=F&=VRxk)bH(n&NkF
z8bOgC8wlC2uM(n)w?JweMleM{1?r7%t@Ik;G<v>{D2IO=H{B@8(~jvD9t<~~dTH8(
zl+%cYM)W-Xo~^+lw_bo~dY{I2b<}7r67|`LTlwsPX*3M(GIftqrlj}B?U2rfQY3Hr
zjJ4>EKqwvafYCM-r{%~@hCdP*u3nd>*#ldk6-YtYO9eG2$?u(ppPzwiJ(RJbhvu9J
z%%8;8Jut6bqf@)S1Wpe^mwi3XlUkfpgspn_o>h_G>tV+3t`!w%ISmcoqv8-lD(|&;
zLf>dwtgix922X5bSH>*U0wz%=j9?ydDBy{sHG-k-C0;-Fd^xRYnHAvS>l|baP(U?a
zM*CGn<gPylLO<e8{|QgI>k}7$MmGL%Vz|mHe0OZGmF!U3y^rIG?3;snmjbnLoX-f8
z{rS8nA=h>CXC3^Annh4Wa9?#dbf2sg%b+NeHBKy}I~AF5Q-q}D&z^aWQj|tw@x8pH
zUN1G3$j(!w<d}0DbN0Fd6OlXR^Y2Bwb+a?xJX{BPruN8o{CNa6+w4n%*7+sEP3W$;
zJlkdYZbXWBJv941+-yk*pQ1G()F?RiT4_WKL#slaE$WO+hDQA3HUxrv0#7AP=vgXX
zy774I!j?nT_c9}Q#-1BV^>_&#xyI8Vw=F!0lM@*o%WZ|HtTCPgk~iL~Pnat({a1%>
z>^kZc+tmx2yp{)Lvl;ptsoj@n$I!hJ{fWqf-@=4>wVxd0cmLQ{;Y1<aq&UgM8*0!j
z{^L0N#hGNu=*JH%PHIg@_IG`0Z0fjf=nLbji{$5A>$_;+_QJe9Iwj(l4EM|Pf)_eU
ze)B%sDB+ze?^`nd1yTC#2%(2l%aeT^XT~9OT<)XQg6^uQ49<e%+1f;NQZFG+3n=DO
z0Y>MBiJC0&Lowb0vrFpKtQ-RE=Gmx401j&JM&Vl`(<Wrk9DFPWg{QL!baha7!Aa^M
z2f18+GD`KYY7uHwG&0yZDC9V^Hs0CRHou=k#~YyZM)?GS2GK@bR0~f*@H~!8jHdNX
zL@y{AEp>M~9kv3&T4A?Foh#Iz!s)K4n+=2327|Dd{26@a-#$!#O(&hb4lkWaK~@<K
zZDeQ4DhiC;8LJcc^QoTr4JoB*QSltDfIQ*pc{qeH_<J$#eb@LvJi!MjVV*A72dt1D
zi>@rqH97|{wNVMaJW-Sh)>}jy?4)o}>PU=(mch<PDHL>a)$AQ>&((c+#ZS)exqcpt
ztK+z!4wGPekuLr==RSlJ6y{*vkLQ!zlU(sZ9IEj)`$@KP)IdDcvIf;c;q4BDF>Oe7
z|Fnt0-FWpzl^FA3{H3OvD*y2_fkP-dhy-}7%(mV0UUF%Av?)x&SK~fMjHg#pJa?c6
zLj~iPhnf~3wJd)4!sKM{56IZ5SFN~POnAqi@2wPNrq#WL^MVuet6|6ga0XGkrGh|X
zRcLZWw=jXvqA7)9BL)+z)dACsN41MwJqF_EGt}jNVD;IJ!wHjKbU^bF;lW-)GORQO
z*UqSrUj*PU0wIGg&~d+WXtcc3Q1~FGoj@SSIr93{o^wopXgM5DzZ-hQ&rhWYl~mH5
zOoZjlJ|2i89mcSM#hIRn?^7E2JET>_NF9z{Tegf8^KjbQEIWU2kWq5au5loy);&sY
zsdTk_Dj3n3=Hw3+McK5{F%$!``3aqAGQ#B~%3X3&!=HLi*J82=rw~3syY9Z10lsSl
zfw><TPo)SxyQx|ZZBOjv-3QFHdE*5=bYV%+q)*q~pe7w$)p*YSVRz%<XXifNyV`=F
z=C*haV+^;9n&?>evDY^%boF;O9@P8k=?b$70N-aryr!R@TNN6(gH`go|4{qJF6j*D
zJn?MmhWTsH_Ix0`(YRF5t-aw6NB$>#NSM!JYpg~2*<KH}Qb;d{LrEvFUN_?_U+y=?
z=b7{KWX`Gm`c$$PDW3LTyS}D&?R<HSN?K#?QS6_J55I1*$(4+G3GKZ3GVMu+$N8Qj
z-(n9{v{0tgNGF*zYs^}x+R><S_)s5~Im}ZsZ(<z*x3VHn$w!&jfl9|U22w1pA6COL
z6X-&2)ud5jyc3w4R0Ut%DO-9qkyQMlBv+_Jf8tn;4`(~WS}HyM$Df?J$wVQ5xn-WA
z9Wse29xpigf$mfaG)s1d-Fdyg3k$!BaQv<vxLNBP?51g9*8@(w&4w}rjZkjJJc@eH
z*d9pu6ehV=*u_;UPdx%G5zcXW_hc*X+7B<F?Wlh*MQG;)%#&>FKu}qvHlCebk35=S
z*$x?!UVBB~!q5-6cIT+Wr)0{K$|RX}+Q8o9rMVscBZrJF|4CffIUxT}y`|Vcu0N}~
zpk)8fpJq6k^aIx8`fOkd<z);vNfKkPTYr7D^b0d4-H>duc01uPb~&j#SWSd|?W_t^
z^V(UL!@2)-tx4t5`cIfvme*Fz<r9=tCRZ}&%l_hA?XW8CyQ1f@AA^aY2MF(m?n_hi
zbY3z^n&oSB_lV3hnso!iBqeDYEdbFjGXI2q&HNCXN0HmsZeyseU4DguQG-9Q|E9P=
zJ}_-IU08+r#bJj6M&xKBuYEGpeZyWRT+$#i`mUem9eYQ}wmU1$&`)hKv<uvIG%3%>
zdOvBCoD}=Bz&EV`Dnw2!!6-Y?%g+I!;4}!WxhQ<nJ|ABxVY@Q);_34#kIGznp)<x?
zS;rxdV}GooF^fbBwe2_JMYQVaq?2~0U9g#?nnGlSEr%X51*A|?i?1zD7jDOSRFekt
zLq63Gt(_BZlvqYcr<iOY>2OOBiKNbdl01eZU)#`wWv|N{zlAo)owP@C(g%s_?7sAQ
z)7{7>kL{h@vUw566`*~MF-m*ItP=jGYB=u2md}@*XO5Ce{c6GwzaE+2Zm>8S@(zEd
z)|?__ixdFVWL+MIoKe(BD$-tp(ggO|$?m`aW@=hAYE2b1*(#F(?eQU3mE)&QVDnSx
z_;W~l>X*{uIZiAynQF+Tq__Zu@G%&_WVhU@8KNIu?AuwcBck1T+`~O3Qv%eUjhJMU
z66pAuC%}DuppuhB2^HKR4dyzt3NCMIfoojfBm?*@@*)Ksbr{<h?)?F+fWSW&0|(2p
z;T2iDF|^$AFOOzk6F%;m{P0kW@8m9jM#=zVEUtsY_gQ5=e{b!OWNM71q;*ST3lV|A
z*2P}?Nz!<m>!g@d#Des}kY`ReeqAc#SsMTHp=Y*mB5Qq<1In|id=sp`+!nvR&@%U%
zpX;1I+dBWibX^jDK`~<YpEh~L$f4}x<Pq^Unm84LwuW?S*`^(s^L>Js<b&AtyiX;?
zZ^s^cmN5}idoB~!lAVJWlhIhvljPps$$S83_*&wEh@34z!S`Prm^cNfj@6MYia98|
z?bmXzpb`kgh6xRYZF6>n>!_$P$$dQsQVnrbTYE@oOdh--1G-1WQ`_4^`|<$@Ns2Xe
z#b=PTkDNI+sF`b`NuCftg1u4PuO>QRbAmhV!_K)^sWy^^;EQLqRSXlnEfAr?+UDJW
z0<}OBAsFfp`-A`iB}VY1`HVP0YdV$)NPXJF^u8tESg)GV^sdwqV^i-#p`9g}3nIS-
z<dH43eo1)WB#ZBE;;6Eql?$cglu@Kny2jLc`>~2#khS&1{rJU+qS4HDjzj!rFDbT$
zY>G%yk2Ngf;@GbWsAgVo*Y3Ca<n@Sf<pP|MA(94~?(pDd9M*#~b`&h0oOF_xm#0p{
zj1tkFOX@h$ZoAxirwSXmzSKY_seIDzzMRO6DWkG4beg9!OeA10*~o&&t!uuGDphnX
z0FTq|M+Q;Rcka_zM4yi+-a|IU8t^oA$lvT>-As?;Q!HaVSj(BsXxpRWyF2717n@O4
zN{bJ^DY-g71Js0v4-@;AW^#hG#g>Zn77C{<PiU_Zh0F2=m5&zuHB0(W+w0dYd%j|1
zKUytjE-X%mwChIds0MAjEB$s0!VxVkxg;oo67nt~j>RxgW;n;g9Apo_zbd(WY6Pl}
zt^Kkei4<G`dqoA7WY?f$FLKqQCM#f^q86Mm4+j7~TncCmm=Ejn7jw1x;4abwqzEo@
zQt*Rv_bA@U-W7JXKt4*OfZdpYcxDZ9R{@|Oh-FO?G}}dZo~V&u10XjzOCPjCly}`r
zfhRSb*Q!=q1>6NZy$49Dgsa;C+n_xa%Yv8UFwiN`@M(N_7I%-(iJH?W61IpZIANQa
z%`l^2)pg1zmd{#~&<P#$5X7+C^O!);1Zbtkn=ooqRu2Bf#AEj}-5Wy0`kgiMKI+`c
z@LHidVsvXxfbOr?@5@5|@kRCs#j=rZ6y8#zmOq%75kq?_Ny#s1N|6?GSL=8XvO5xX
zr=7k=5};YUrX(I>NJH%b8MiVvkfb8FTiD5rFx?y<uTE}kQ$V5O4P=n&Q!)E*3dOse
zgZhRzj!=$*FpK`@Bql6P4A2@4G=ZuyHSmNqxLZ1UN()i|)4d`t3i5khaSOvOpCGXd
zI|Tj`E-i{|1C(;a9j<n=?FsMKf@7BxX%jgn^yZ)5pRzPKP5&qXn(KFrLLVg9bPR+U
z#gxquc|u~eqx=g|X@l5Usv%=F6AJ)ry}QqB=K`mNn3h>YYRKQ&Dfd1t$%r9wERaGH
z<yi{~xLA?*aTjYER(mZjg@1Z&8C!A``YR$&obnIpKlU@{H+r0{_9X@Qav}Za7ip;#
z^fYFKH;Ob8>=)#zycq^gB}I19n##qREJu3NJ4-&6(~t)0j0p!Bm+PxsF_+dXqw<z~
z4TE98xm36AkQ+#%cqw~15ts?dFm@>E$yQOWXedWKx+u1zqMUg0Y0>qi<8RCX)~=UM
zfzd^G7P+kZUy*{;aAE|yIdBj#c+If*E_k7IkP%^&%5U!mdXJfc@0YZ7kNpExkh?VE
zZ$UY_FCs;x9X#P?0E6t@6W_54_P$PQAI08Y+Mzk04gqihb1&<sTq~Moj&4LXgTatd
zXZxo=wrBb9%bj88I4*bQL&f@Sb$-OIUO<P^yw#YaXy<gGgVG8FriDCs=ZPt5v?0-b
zMe+35OSiy{V!<mgd}!ltyC6>Py*d~Xk#|AIoYo#5;?PATT#p;?_c+@sEP>!G8gT<&
z&Z6AjHXvWNG7Zo}F>fHqDR8Ih_q|vf(Jtq}r`uF_&Ccp-O)oxkx%tN}{@cy}=Um{I
z|IzW@pqEvK&61d=*gZSZD=8<HAl8K|)gCBiPQfu~5rULx%t&7Ne#Tb`9Cp||h<-_3
z>C<SG4*TPyG?%U|%#FP`io!_Y8hElh&qHVD=JR&Hja&DG_u*eNS35z?lbF(n%@g{}
zX=qZ#?I%#5$b-U;=@qnW<sPt<N$O(sC>xod^7$;!(@KXaAxp?%SUgbC1LH}c+bSUs
zmUck9zKo`+2+9(tACd<PBbNYzR|IqO+I2}OH(h{r)iHK^E*AC(>LO~3o<*?Z$O#Qq
z4l?{C=>_u*7br@IP=aK+jNFoEPy}9yC+Zz);`9jG^>q90BcA#&!e^6B#^0V>o~%ly
zi1r@A#@1v-c9ueOf7obkQM>*LX0G4E5GX6d;H|C#e2sd1VLUJVf>ACqJbxp1?dnuG
zPwk5S_aR7MKd<y|vJBE=_MMsCSi7z<i^iB}(c|YWp(&<Jqox<BrEjF~d;-rOWp$*X
z<tF~deX$7|AK_(5=>&?xWypIQF(ILR7PyTZWJhUaP|#KilWnpF!6l$_&~{d;GBpL#
z@G!8GRe8$hP4fHi?-&iF#y%{7p<}VJMwki@SVO1$dyj3vp3WLn#rc_m>#<2{s+$<j
zNZGtvT+49=wq$>RAjhYGiy+{yy%&j^q1u{+6Y9;(V>=#Y8ZGzjMEvl|w=88qQB1{8
z`zy(6yn@c63?aJ_m5eTMmukD*B<S4#lwyoI6&Ei@%}yo?d5t%Bv5+9N8ulm<hIU<%
zy9<s*hHFq_;W))+0Papg8IfnzG#AOKGM}d4y0I><i({?sczg0<%oCuAPl*Y>Jo5yX
z8>w~w6UE(jJB@r>pi?zm?aw^|y^BZ#r!FoIeYxv3CkNI%bs47h1f76{j^UtQTib3A
zj73ft{a+E!-*Uj;8mr$5cTLOW%z`xByo@2;s4ctgK?<b{S7zHOS8+Og1aloN_k~>p
z_)z+sq=y2}{0nkqRH!0`re>}gtAvqU-G*NZZ@R+#BaVTPYCGm-5Ozp7d`BkD9UB52
zJ}SNjhp={Pb{S!iH}qDyW#o4#85FxJUnj|^pqi4<q;X8|Qbga;?f7WaSO8q}rSVk?
zDm$pFg;nVMNLSMLT`+P~trHx45j2#S==xO5gzAW!SQX}NVWQ`=1#^Cf>aIm<rtBFq
z8r%&nZPyYaV>9M^Kld*Yg-_cLkQZ(qabC)hZbUiXmIa`Q4u0Zw=`?3S80!t3j{&(D
z2R`N65&qBRd3F(~urfZVH!c4&I4oU+jEagk-_SLwq|ajeTcVZRVfNS8O=(ULwDaPf
zuu(h({qrrCV&lud)wcQiczx?JN}ZQlA+t3LVh`0P4>KvI;Hz}=<|b2fG@x-IWo0@4
z!&Uk67x?sz1E_d6NYhvlj5Trk9Hc{-2|44`5~C->GyetB2zX$slz)XLjULBMk1y@b
zUjf4}fBo-Y#0`_{3B1a9`B|p*_nZ8i*N5LA2UB&Mer$>Bzex;WMXh82^=5tQ#`&kd
z&G#j7^?0eE)Itf5QPyw1zyJ74nl1q=NY#H_>t8<I$TXnBI(tubd;{P5%WL*`4=HXl
zVAhe;JsJOE@zICl(}wjMTzr>t_j~sDpT9?H2LkQ)6`cG=3;cI)^DjS&RVJ)o{p|CT
zg8y-;zxjatSZRT^AY=D{`I}$<kH54@AFbbL@PpI;as#OzgbjSD>$Kcoe#F0BhPXns
zew}O%um0@@IsqGa^Zi$ZKR=uA`5!4~#QMloe_iy?Lg|;Vz;_Qe@D7t=%zs?!Z$6;^
z1%Uqrfd2)6{{?{mWdQ%n0RH6-^1lq=e;L64N`U{B0RN9mfH>D3uWP?90gb6JI?!2c
z-6}eEVqyfKuNcruL_+^QIuDFO&MgUC4MvCoIEeX-zzFX}0Gq;n=8AhWG;0mphaM=M
zium#S;xW~BC?KeV)xN4<PQ*$fk|BWFCyl~d3X#$d$-RLx;-C&@%Ln&5oZc<Z;9<7-
zluhDR7+8E*CZonW;I4{kKRzKzl;bzn$bMf*Yn3fkyK%1V*4Nce`VW5K&6*6dBO;K_
z_V0D7-p6VDwB6YsJSZOUO@aq*BDfQWeA2!gfcN%EyKqbROGWdyFS1?8IC#0E!(M;&
zakI(&khTIm8}936A=DnYQc0jHl|ar9AY5Yy-{gG=QDG-L3RK3Fj&k8K*$qj`hYAmP
z0>4c>O+UyQA8X`1e?w>g_pG`fziONuXux)6Szpg#__=b8^YH_KV`wWZZ%TPW?&tRx
z=SNojp~$uf;2Gx$V2mV#q^-1p6YPA$(L9|zXuAzaAR6gs&jFB2j+8vx{Jn)RFyTPX
z_CO3hU3}C#)VK?LknY|g{q-+sQXtE<s8=#tsL|G>NkIcUT7iiBTH)-`@8)u+bC6|d
zhg=Ka^wrw%G5W!XkVLT35Cf;<gFK7-85b0g7&`g~#D*DxSxJOB@V!ok$#;o}(ul-#
zu7*3<+<?sn2F`&mhk$meg2*|@k^}rZtt4K9xw#9_nTX))EIG$Mu?CJc$zZ{H7(Kvo
zfNVU{^E>o7KZBDFzDp;OqQ5L@-W2uKkyL&J4BR3?kwp)Xo)5-!=L%sCAj>2~SC~+X
z5fi3jlqeCxkBSdw*9-K#yDtcE1RvP0m3%rA4#U_oR{6KV>13{4HaUGn?b34?5)j?F
zeJ-;t)WXNnyUrGT5$YNb4vNAtS&r%}?9jGPTb4jVJJg|{auMh<zKFmLV#<MC<-~y(
zma(cxvJYJ46uwt_RY*yOpy&d4>Ur&2Cy6k_NHj~ZLmXB>Z)NY_wkf_eH{vFdMxwWC
z?^lO2?m`8ajO&OL0je5SP%Fs1XF9;aYyV!akB?H#YrEwx$AX=K%X5~ncgE@qu9cr?
z<oDdV3B28s-O~4vymsXso1`M3>YPQ1NQgyb!g{PBe99h}*uw<Q%<5B-EgSH=VGgMi
zQZ+gqW*wYeX!Ml;vZ*!u1r0gT;lyC4xM4U-s=(vbaeO#a227nq#^pDgJR}>mDS0d1
z0c)}l0T~sbW`MD7LHaN?<TFu^C9Y6R;q;C*zeNrh0;vGwS1+5~0Am%&O8WhG@MWte
z%PA$UAS6r%dT^EyZoCv2-z-<lmj`%+s}Y?wvC(VrD7%c>0QUu}&+0DlaxwII*zt)?
zV)EL|s|g>$48XMV8|tG)1y_JLs|0Qjv9{69Ul#RmU-&)4q^w|#13V=YzV4CwaZ&r-
zj+YA|MrMGa%V(@}v8zf#i}Hw^dF)h0J@TPp_TO<Yfh8Zn55AR;S0&TwOh^-vDXX+|
zfdnaV@2<n&AgnqbdVHA19~?-ow`hZwdr#jr9}Rnwl?LWLm^jvjTqc-Oc~1bHp$Lpm
zG|A(^CLmp$LqkrEXa&OwRT1|Sq5PGn`rYqeiGPBWwutsgy6pn|!U2hax0&%1w_hjp
zX^=mX08}hYMrHCw{B3;mV;-`T!1-3Q-dkB1IdQ*%A~PCTy~0oPz?Iep6CTg3<<98-
z#*ZKTKxjCYeAgz{2F{$MF(Dj@ztE0!+)GbI%I8Wah!b8zqL`{P-={kAd$uEGCD<h3
zEYJQwEavSBxSNc+V|dM#tVIQwFFAoyY$#4`OcM4?VSHn-x<te=UK(SOH|N(o<r68k
z$l>F`FhE4^a(s~<d0_maI(cjiy#E<Q`;t3sG4<{_hUXfGGBR|;oR6QvUUDvY=~Vj}
zKnI$|e*62Cbix(1?Y_)=K%{RO>n$*M{i7NVL*S4*Qtse0eHW9)i!Yh<-3kUII+l4l
zJwUjKOcQ{=O0kUi76xY?Z4j1nK^G^eHxE}9#><@<1>K(t&Gzd*wDEW92M-+vwCW{`
z%n2GwLcVN!l4+p0z}4G?(Xbf?H{`%F0-^B(y)Eb_ePcK|>SHA(wQUyR97d$!<$5X1
z5TOI<1YNg+<az?#6vUK{+0Sg*pN=qJEnq&3VL<fV(bBP;+NnibpVN?OWV-;=IW*ay
zOKp3zu?{pNVS(eo;Xn>K>Kg0DT4PsTGHbw`GDT#lpZu#}{+E|7rxxfaF{9RB3$U%u
zOMxh(1yoDABMWfsLkdj$IgJ*S2qgJt1gamCh5+u1)a%X%*&ee4;%EIC?2Uz?i%5wt
z>Cib_g`@>bvJ`_rd2e`|kkW=Ve4D!54XVW?9<R4shQWoD2mcdcl_n(usE;2OUo`p%
zT#ZHy3F5wESMDrUE>LKHX5|@?-vuLGeF?A99vU1{3OUD8VC4>S>><Qy;&vg=qEMJJ
z9QraDOed_fN<WbV2I1m~0y)jco#pd#TiHRHDMTk7OJQC)-@Fw#6f9aQHG9{l<$>Gc
zDu;~PoKrY2$iv>J!vvi!8cy1?r)CprRS4<3L0XF&>o^xk-3ku;L1hq=lHnpdC^-R+
zONqb)B=Y&_)4t7imjI&X6%M^iRdDx~Y5KF@tQs1FFy-@Mdq@Ihe;@tCSNY60TeawU
z@nu4{w||lTYX>G9iaZ#7rOktGKZzaEkrZ1n+!w0GSby~bkm1mH&Zb9h22{X%!Aj%F
zk}KB0YY&@B1<YPhTanbpb5s0d#rg$&=R#!F{)4o0SuYS^%>V{PEpNj;Y3yJCL$|-M
zd`M#aIM{+z4sP#FaKhn;K;ygwqO$re4rn;w<IQY|kV&#_@~vqM+jIrVYp1Zpaf;oD
z3BfL-KFP2y^-A89B_bK_q23avG!AQVNLcobUB&rzAw?lK4V<2{Ag{E8Kz!1N+?n`l
zieOmzXo_DxBwdMH=FDYX+@0_AYp@alSS2afjqUfj5Z@L*DuFJhcCXK*b(1D|_?0ez
zfhSGX2y5#*%H@+3G*a0wh&3}G#%ZUpG|2n2k~n{MRuQl*-L_jGz2pAkR+xyJ)9`=n
zeRWt>>$bOah>FrBAkvMrq>9og-Q6LLbcz8ANTZZW2+}1;g9u1&I#fzrQc@DKh;K~y
zIcIP8IevHF@Ba5a_aC37E*5jmIo|gjWBg(af_oQF8fQLF!pV52I?xbj*F(ygSd~=4
z52v|$c9t$8cjGiZGaL;=X%gt{y(mF#v(S$agU-ol=heeOUE`~s?e0kzxv185A>y5a
zTyjCtAvikpDdtLTmqsU4Ioy0x9tgXj!&#mcpcKEZFk<h}Z1{}NIXv7_P&BP&G%ETp
z-rg?*23gll8^<e*4;df)<xPj2CBVPPIXaj+I#>-6uX?uE2gYEjNPyZ)MkuPd@?l;+
z9hzT^kQY6~FG<fg=M3D>e+b!J{3?%Ytpurt2@0QXc=(*HRt4nTWKT}`f-4Mq5Y}x5
z+St8E$j1mq$=Xo!n_r1IHW;gayQx=n?t$UB9dI{P5aWV~C5!h8aV*>m8@_!%<U*TU
zIMETRK>yEI1fX0$4~8U*X=>%Y8)<|q6o2X5rfVh%jHV$V5mmrpNZy+C(ZUIj&g1&W
zqxUGOB=DYy{swe8M!Z>&wrMTeg#BET{9=y_NnirmsN4Gw34eZjk3K^_rJNOFtv2d*
z&t6sTB8;HWsH2`(eAzM7&##>jc-lB3|1z*adzv%wzr1k(<E91hT~mflMg^H~GYCcz
z9I8IRzgUP>;!!x-ls<}^fLTf4X`L9Ra{6Y3`{{cT{i85_(YWxOc3ZPOE!U~jLgyKP
zDUEPLfy?RT!wrdXkuFX?BRJn2)6ww*I}~@IDP5O4UhCa<V3CfH#u;mo(`#5n)oAYG
z-;D<Xd;#u^jF&$_PLM<XFtfA0ef62!0OT8p2Zu($a1^3}upi~=QT1uEwkt9qLkGfT
zEW~T5DzK(|oBuens>aMCC3^6g<-)VQ1GZk8s30~9Q%8q8gYoPd_S{VQMo8|z0OClu
z2`B*FGug%EUf991|4ybA6}S<Xkp)3lJF?|Tr)!hushCTx|ABoEWRCh0b3f|Ew-N8F
z;h1ylSjvi1RYVefdtlq1R73P+?8e}G{cffh-&-zI^*@Q_{yn<`)Eq#^-ifq7C(->}
z*w5Y#AX1HPhcsa){e_7ig0`(8NKl!buISpU*xyk20*srUV#M<eNh0pLBLx`Ts@%FE
z$S^rSz?QcFMrW$94;NSNBQ=js<sz7<{jeGY4qxi!>maf1WX!;4MiPi0?ife{SGdGU
z#};%I9LV$#3o}m7mtKx=?C`E6nV5)IV~QZI38cl~qElV*83ukzf<3n6R5rM{BO+c;
zgr}X%sZrQuK=b!d$Pi!n{)^47Kfn92@pRg)kL(}5LFTUvk;S_rf_nJElB^h1`P`K-
zS6fFz9I^>@VB@*tvsVRudrm(L{L1vRP-W~#s2bd?vD!nHA;K0b{yvb@5dTs@C`(-(
z$ldx#GXm?B#Pwxue`m1J$a^*f#yOn0MI6S}sd$LQ67h)Jk9c~ngKRhtii%vr>;*Wt
zy%1Blq)i^4zsHXN{Wdqv#EriQ*!xK_5ytO=Fgz<GyUDjfIOm8E%5g5Rrpr9|IJmi0
zXuxr3@8eEG(lc|73Z!5}9I0e4BU}BDGid(UoJK24p<>L!zaSThs)Y>s^=sk9^{1Eb
zeqPjs`mST=KC!lD{@*>EsFB0T)r$fX`%v0%2ZKk>Q~Kt9uzA~^tHhk<I#=4LH4B>0
zDlK!r{pcWQ|DZH!?2ORiL&>+s&q~dsuUa^d9V-ouc=%#$GGk}oP1rqYyxzchrUB(s
zRD1CvoIW<zz1_3ldv!2yNUzKM;|~r}26+}MD}B4{1WZ}J`FG&2L4|OfOFCJe+=h8M
z2~R2q{ja(7%i__I@-*zumb~M58Si*Y*kBmaM}uVN2=*L&<o1bz<g!)ICXKB86j=k8
zuSR~<vvGa@^OW};uaTC~B4rkLLth|6@B;80xs>g>{WQ$pa!hqgp_fAnG?8j!47x2!
zJUyjy#1z?}1U7qYm%}brY{Hfqj7j*n{*bZ2A+oeD$gO1m`A3G>p;aJ#yNjomYvfW@
zDx$sXhBUmUlBaq)bS4<<BtA?o3lxRy@G=~xZm1<klFlf^E9Nf9MZ|G265df)fOeWp
z*a?Vr;gG!^1rP-z6lzKVOL@dM==hY?R5w(=X5jV1sjN7jLP(-m$N2n*E!r;3raEx?
z0-5@Z`*zPqzg0SN;P#6yfV$*3at3ZM-KhutNT0>p2#ghN<*8j(7pNu8f&4vsi4GEj
zUD!0JM{qgS|M|TBcyhmZ6|#Y;k$5!WO!luw{QDbi{X!5iKtavt$7XriiG<jb#DbeJ
zz7Mwy57~mB!sJsk$b};@#M!;?FUzqjU7vhaUFzTuWaw6)e71sXn0atNIJFQX66ZCL
zgWd&|C{IC23n4$rnPSq=Mjr6}A%Dm~=?EKD^dLS9(&zC81yT!iASlW8EFbCO$*O|t
zLv2>#l;pSTh;K`z_`87W&yO8ifQ?TEqfkh#Q(fOSNui;dp@tHohR>|!Hl=?R<V5W<
z9E*&*3qU(1z@`;?eti|xXB5bOkQ}lI-mTHH8p#L&zKVobz|eE`FsRS76W2oMxynf1
z-;JMOOl~BA7G_xgv^?P6g`5Oq*<RSdDG>WT%96``gJ6zy<|yLHwcu_<AK5XhxgTJ2
z;6Hnx_3cUqT(!m3=kdcYy#1h=aC95#mf%WRHTr#ebj{pl5aNX*2kOz-KrVNfz<hfy
z>LO3A_sdmRR+<q|)slxjgBcrS(kO0ZPRd=7_Hsyoc+|&4#F4t$0NbvxVnC7qm?Qio
z(LNc4fHoq>jtJ3doBFQz=T-fS*!ag=9<#0mMKjzqJ{T$Z%gvEd!GsZ;dSj3{w18JB
zsd3Q3mck+fW%#l(Vs;=3bm<m2mM(Nkr1@Y@R)K^OTY!GviXX8PhL!+c3!H*R0y1A7
zT<FC|`kUU6rCN;S6yOCyzbm5Q8m;S<T_`!rO?1AccPm-?iGy&k1u;qO6tIjwCvOjI
z-cxX{@0_0!@oj;o(ivbJ7t0WjAwGf%TaHXr&*A=wge9~5<{J7pw}oKL9*QrBt-!(9
z{%|$!Kc4Luc}&PdbsT$PG@iJ6xntz-pJs(q9f)*>y9Ec8XP~f;XjX|cSW_1ZhJ*d?
z;Q{(CdrtDX2T*3$K|VWgo$={nnLv;9(Y_g&YY{>7=>#+{Z`!UQ>f%<3&2EyN-yk;W
zVcFNO0l)PQVo?!WRWXbmMOKyKc*Bvm{ls_!*WcUTkSEoz8v=dvHbNg6cVjBpeNr76
zG}5C6e}CG^-4MQyyKj{|$^FYy{TqLkp&`_y?ii{+G5IO~{~kR5)&FKj5>j>y$=#}Z
zQusH1?=RmXV}N{2;zW_s-;e8mzqAk@4pRmViVy2ItNwPl{HMp^#10>0U|-Ag^Vaa+
zytLOZf<u&zJlbo=|I_dI+y7RP4Ikr_xAOYmzwdwJg1$V%#1-)Tjc(PN^XK#OZymP(
zdT#xR@G+IyRZD;Wg!&H``M*K)%V+t&LGvHt<wrL3zd`fALG!EF_+`5M|7p<hSs4^{
zd;X>JVat?3k$nL)VHY}Y7guq|+;HqkzsR=-Ub9zvn97s$V-uH2qDX#Uj2cwE=%fp(
zW26RZdE(qag(NLJHGQl*2k)70<<tD~Fz+YEz)GQRv1R_t`K1>EIa7OxLnL>VZnD`O
zsunOcq&))Qlnz`<?k*Rc@RJ_a)Ch-4`R!ghfRKD(l67bJgBHhQt3<sP0JvyHcA)=%
z5~fqSnhk<U`<vYlWIBeYdm-Iw@tE>33_*ZE59oJ*!zia2)Mj+Ap3+rY0pM!@-NXx+
z0TW0Ddlu4CFQ-D3S?$KHi3GoZ<%-(gJDiy^Bskh2{NKGe4+Z^6qzgbYDrh&1RI+1G
zSztBlodj9l8qB{{6W3r(YY{>r{uu~wV=jR0$vXVdonajlNq_K^PP2Zwx4lAxR4<c$
z09@V%|I@Pks#_I)9r@HI)}O%;<~G3my#DKL6f<yFxi93J{M&>2*Lix~xJf2wLn`p)
zzy9UN>3lu>7*>NS%o?D46aQ)q#EY{{RfsLo>eB0+Es*BXLV8{r1?9p!nH*|CP>O#I
zoq@M&;#=xlK9ZX?y^{YPw5csn(NZ^n%8hzt`kWKH3s?lV=T0Lf3$DO0ej^~W*tm}B
z2nz3Y!g52Rz?Jp2?%LiLS>zIwIZ6P*4u|=%;Se4*Dp)BU{pHXAYGcR;(B+M33Nkrk
z0M~1P9hoDeYn@_6ScqaIN8I&u3C*9aD{+-xnYnd(rC2y7kLkl@a<8jc9}!1MGiYa>
zg49_kCJ!TB`{~bL`(K%fhgHZ|BcHhsUOy*bA#Vu^s%Il+AY8bx`Pbj9AjqEtl=3q`
zaEatJ=i6Gy%{aRacfEz=HO**flmQ8bwxt_mX4VDrvhPSDFPz32OM%CaxXs_2Y>%7g
zCRA3%MEtFOlphzEiJ-Y}BvM$pSz<&p`X-?dqOUaQ=_#YY@AFTpSzg|}6Fhp?`h~uY
z&6zPEP#h1SOtI%8M5d|E0BRXcY#Bx^<?nqwzIVUYtf=NQ2R8o!6oo{H=Y%e>PFl_G
z(v6tYTx_{(4b!J3vv!o}W;)7F{ADTq@z(^x<VShx>?n<&_cu27rp!uY?t(IZ8|e&C
zNgnDYA<efYnR-ofecPvN&@mIX7GZqZ2aqIj5j11IZCM_OLs1l-V*Qw1%BTLq%`ec|
zpvOD64VDoPXhd$tswBI<rJCDTftZW)M`7cLmp1{6<}_j$5Dqt0>H)oUgONz~KW~h?
z(bJ<WWwGp|`0*=?Ihre5PuUB!C+=h88!HCrvf5XvIF&Vlbs#O$L)!IYL;Kwy_WC?^
zLSpP(LL|@Y7i$dIWgA`<1CFTe>bu|4^PbaLRbBhl=AM}vOqKF(VK?pPoL)u_6XMZ{
z$lUx#D|8L}>#VE~)3qofh;JKj=<8XeL8%!a=Xp`1{dC81^F`6Za%MuoYts<Vb~_9?
z%ZWZ`t%dxHe}te6iqsoGO4jf7Lt?K!1r?^l7B-6)h}Qt)5RTB#A{&-$cVdh@M5=$C
z%hPE#wI_S^(^-`NbWVr#o|ma&eg{pbv&KI239*0)Z1%Mx?26=>+ZZ<`vePk)eZp6f
z{p541d#`AR^S3X*A^Tg1_#!*BNF(*0euj2zvei6*GDO&VfW=)S(?KRE+(ovTZm2tF
zphFYc)d)STIIbhWb_Gis5_F8k0!2)lg89Hla`zB!#EEEV^PTU~6bSJI3!E0Ss&VVc
z5VPWjJ$r93R^-qVtg=D+M2^yGD}jIsK3jsqT*vD>?9MDPuJ>h=mho^o5c$4qO1xdL
z6EYBCR#2jg?s&HL2vor(-v*TM%KTl4h<CT)`z4(?zcAGp^ac9gyI{9GTQ~IZ#8;#j
zWd6BWP3n8r5XbSsL1CC<D!fMON$8oI+hqcym0b0=rMJ%Jj+OF`e*~Lu@jW-g67Ga}
zWDf$PVZoTK+XoxaPPhw7*JrVEO1*KYVBYov`24dwo#3uZ!ohFFJWTCM#08zH(g4~F
z%S*GmbYSl?J!Un9%sg60L&s8xtE}VP`T>F@{b&>d%zOv-O5w)>tKiK)_$=e8WNIXG
ziWz<d;?BdHJ}8+g?p?Qi6xqIAJA5@0(QBenwrVv4^?p0vJY}akiJHVkGnBU6?WVFe
zOEf>w>ge{spreq6J5>@eTY{T5B1y#)tZ7*KdDXv6j`PqWjV>8!L)t8T!&4djs$H<P
zB)QgBOZ6uz9!Fsx41u?ruI_EAJ5mW7&<!EOv^ai2*<VA6KGvwAatD!Wf4*Opn!8*K
z442YR<~|1`2dpTP_TvG}U313ySpjh?PZq^k2Yp4qBAun31;n0<1=Zm8!2RR(u_R<{
z$X9>m0@PkiQE_><fRaQ~b(E%WK$q|fo4)kYK2z#;cQKRCX7z@H3wU7T#?Mm8R!OU4
zHx&e}op1+>NW~*`h{IWwbP7iey#jM_kcHIVwWwBrx?e0VIo6M+n&W*9P?t`dF#0Mq
zDG~r=9oNSGSMjeYxQbp*%rQCag6Utp;VIO)1LhUe2F<aL9+I;X2jI#_^5s>H^t|x{
zsbB~EozOOBI*o<1F{=x$166Kx+zrM$ekyFnHZ^^EX#3*h;|;l$=x2^Jx~MZsT&G!G
z9o-*LP!v&sCfzW#TarG&&sfhaoXlLi0SIFyG4re!O_;u}<`t(mBv{p0Zzwjl3Z-p-
zPN+M4Ix=-)YoEvV)7Ik^<wo~0dPg;mZ)83JK7O=GmEz^xd8cw3O`m*eRQynGgN}CF
ziFx=Qk8VDlfPPO)G0#uCs`l~Jo?f3ldTxyP==m>BGPeF1Y$D4=m)bYDKW71HI>F6G
zL@it*-bZkp5$z{%T6#|a&jSl9r98a(0HG$eLe632MK^9$wn`xX9lQgKD0LGWp4Wpc
z`m!iA(Ocm7d(5J?q3H4kW{gdkn+80-FFTF!I}L~~NdYTiHgiw#RB=JrCE^bImxbh0
zI(zh?uLFT`MULrE)^&Q{4Qwge7^0WIE&EkvY?JKAauabO1c3557N0&}y|2*3I*BZl
zIdlcLoi!%KKm}xpBDBEaTzDB_{0hK6#Hkqv_pHtFus~<<-*Ewxc?#TPHjPu@5YP%g
zel}yj0dmc7#Qd6A;;lb+ndTXfxT<w9v^as-!S4bTc;+)KiRygVpF~OV1i;`*z%&r)
zcvhqxD|IyU19|jzwe(;xYI&!Q*OQA+^!sfR)qChX?-WI88#*LEbb+q(9moJ`+h(zI
zP2U_I0tM2*Kk49l<Y`&r1<?s;Z<>43PAccVhg>gQh6Pt99heBN;$dy0z>xBex-iC1
zR`%uqoEIW6n26RS0P34N_U)TwF;Njv5RF&~G~ZRtzjz)+2*wc(UZs@Sp|=RVx&k{h
zSHK6N;FDMlq*!-<G=4R$lUg_HHhYgJ8M<|zKQNpSS&-=FX-Bi?rV6CbfpbKk1>cQr
zKg<?n(3C>doS<6%lPzP&4A%WQKl1Edt6KQ&8of$nr8o2Rg9b~OwZvh$pmc%w7?Qf(
zMfgQ39O%9Bj03J^z)87315V+D8AQ5$aWvF1ukuvq$c;rwtc)GlHYnHBB~FD%2JN=e
zV>WxVF;7ZAy1$mxxNr5Irzj!M<peU-X|_hmM8j~P;i+@}PHOjvifI$vH+t6Js@%pe
zAQr?(0@&s=jyI2)QmvikE?QVzxpcW^iL-qY>I-_T4fTM+`hi=BpCEt7CX&17@pc+S
zH4mk_r><JYbDgxz->Ozbr!&MLWDDnE*9l-7o+j5d4RL{|i~TV-c4bPGLd>gLMDc(I
zrJ0S<x@GKct09KB_ZBhTXD+Us-^=j`nBV2`JkniSe<XxZLEN#T#)Q8zetA_*|7=x(
z+3y506VSqxyPYhAY5Wqs%u&n<Tl2#NZGHBOKgt5a3_aG6n7ko375T12KW-b71<$7g
z=x23aF3#PRA>!U9hF|WAda+@@cY`e?^xWap5jx0KU^9x6|5+PXD*e{`DUESx4r^>4
zoRod~-hepR!0^rq8gg_o0SQaRE=O_Di|t#N^ZaDBhbC4-txbyUE^mvw015OC;7&=M
zr4=Ywy+U{U%{w$VDUk|8W=)F&`<DBM>5ngV(<LW^K7F_>>_=ZQDoG;y<-PNUUzA^X
zo%`#LQ+UJM?RG)m^MARilwu$51a)83u62C)m#m2Oj64;#@6K0Ag{I4uPu3$%_Rrxq
zWkI^5F%8?rp6K;Q813V-(+LG(vUjknvvMz!j9ntf!0l0|z*2Muw*iGvTlEi?J!aDe
zz5_xj*d3(t0u_862eXm9QRBA<1c<KB6TBa9u{rE;R98_5n^8B#2%CqYP-pSkp2qM`
zL+JIKcrlGe>O72a_IvjWNGw+w*TM_ri1?I+yQlOSTdzzcF4x)V*T{Yy|2~KYEL#-U
zGmC)*SGaL~sz9DdU<&*@W@Y;0A2M_6>?>w!zYCP<m#b;2n6(<T!7UdU6UE_w#Gftd
za7nVAeT#&vCDS7`c`Rx9IPTh+g7)oM*=g;MuDyZh`p?rHub{bAm4NXT`*8w|U`ADW
zrA~nw<hLziJ%{osUA7`CsML23OrE0_@e^-NU1>!R#dJCyuXDUS)h;S~ER|$@`Lbo-
z(?X(MW+qxsfw9!wFS)Xt-K}CVdubJiZpF)Zp#p<}rZT%&Bw;rOWV|p%ieN<2rHn^~
zks&46*8RD^;bO{DdUX4AHfe|QAeO7k=g8`9rUsK-iEeb@Kf<&a6AnF2RbW!YSDhSu
zqw2U)x^G|AjgEJ%Qmm62t~1GiS02X<(-_CylgE_M$ixXDB{D}D7G;&FMlH?8?ooz{
zmSx`vkgw|fmj0S5Smh2G;eix7@|Y+t|6uX#CF?Y|a2X}cyP`ItN$T|ND4`Kuru0$6
zYf1^eeVwzu1X2p9W3r_4ihJoxk_TEf>ML7}t9$QU<0jsgb_DM(Pp`Wzp)T$XgP-Yz
z-nSc;=^R?xMxMi$GSAC~jt_Ltanz=dd@KgjSTi8{-V2aupp{Ory!QN~Z?V|WBUF<l
zev14TX9R~4bxCu)=fhm=JgaLiUFwXlf8I3VFt=K8ZkNsY8goVs>-1rq1O5TWPRznt
zIQ?awc$~T%@V=3J$BbR+)ZhY>hTVuz$lm7i%X%J7H<S1(X7syyVXBvG<I57`K4s0u
zmV2L`;<qu^a>+7{tFInNdJYf1I<tE<Mw`%l_O%R+#`KvT7VMTd&+<z3p4B_PffRyE
zzDE9axl2OD3y1tv$O?VvZoi5kl6}lYmzOO9+g<zKmX=Sv!P9Ulepj!Sovnw?^ggho
zuNamjL1CN<&E%yOxoPMxBlntD)yd(_Y8Yey6*o=(iopI0kQGmC$~v+sv8e1D`Af6i
z0}}&xGY;dntRB%7BPgNGGq0{UWseAlheW_&5a(G(qLR;cy>^+mz^WJli_hRSlT=)`
z4xV+S&0buE<l2AYA{IYYaF6K)Ogzf-Jx%`U1ATE7R3377;%AjFarH6Shn}RYdpkJY
zxz=QAP8gQisoy#+T;|3%{RAVQ-5tM~0Y=VQ6G==!VX7!p{>cM(TOBXVhCrL~B>@$O
zt~A!YPEDCR$3~87rw({<V=S?ptpPA>iff`Wy_QKtWqB4Xy+u1>F`kFvor>}_ziwxC
zOaL9c(e!5e#E6QEs&9T^_7)%g66+j3jt*uE<?g#fvnL4GUgp>_y%0*$TYxsV`$Qg<
zLnaZ<oTz&aH;H(tEqF$saI$UsO6pgjktyJsjQFL_c6;4G@McPeN4SC{{Y^U+W{{7b
zdRb7WNJ~s(lfFyez}m!oBGLN#7UK9rDbae!+;qDD+xznge6=mjjdwDaqkIH-`SEw4
zl@ql@4?O8H*rBoXNNwpuI32H54LQUwBBoj9{rCqhkgQx#kkNY_t+R)RX>|zQfwvZS
zWgCbZa!-c(@v-7ZRFQnS!dQLReItnkD~*y=3_NaJ2317bR`t=RFl4dQ_^v<k>~A2|
zZ7P-LBSy7>H$1Von?J{L?T|<e!B;3)cr5vwpD?g2vec3W&^BWxkd8bGRly%S#}~)N
zNPB_kBrDdKJqg~Vo4?ChS4R}t$Ry0>OZE(I9%G*)$B@U4_$_+laqp2PUOQ%pMCz+=
z*IvDMQ)0Y`5x_Qz8>NOx-jOe7qFJ;Lb4X6@pO$#{UD=F=Ac_MlG%rUi&0lCgfe}mE
zi?OF3I<5XRAocFD&gV&>;123=8xuHMG#voNnhLE@BumR{$-{5~uZ#Z}<zzf_o*WK|
z^pLwM`DmLBCf0)c_${I;lz80sEw4aK1@N$>XVr2G)N~JEyA{CP6z(4DAb<|pd{PjA
z-KeRKuQ)53?QDt0=j!HMsAH@SbFkp(ktiAv=LndeP+g-P)eWuN*w)B<y;$@4x{Vm#
zS6NZ7&XG3$mdd+QyatL}D&4J8EcfmP-VG++ySP`Z`Pj!l%TsetaYPF9mA4884R)@J
zzuQeWo;aV|-4di<8QH#}77iokN_TgiVDs=yDl6W8EmPa|fugiXJ$wm2rSuCHfyeWy
z&O}EBk{#~%gXA_}l|q!kdWry8!TM&dQKx$E>#weA$kF-@-RL?viE$?t5BtEa_!14f
z<8jCYy0DepKcJ*)3>9{83lDC-*tsQJUNq`Rv$OOK@BMMoDb_3}=he9~b<~it@xmyK
zy9#RaTk{}t-*;_ntv|K1y#ENNDt4eCpg(;_*_-&yn^n~Z)y5?KDcleD0<Jp+r8<SJ
z{(3iwf^LX-Z$rt?9ax!MGWoDtg7lfrAtJ+CXa!h!5#UlkY71SMC&WTg?RN%S;O3JQ
z#Dym7MiEI95i;urx0voKmgn-_i)oI-*5<E{QdT4?c}`6Erb!MYYK+tOWNXJ;eD%^p
zTCv5Eu>;`@ET1i!n6X^hEABVtTqVa8#Q$hc%#LMEK&vRLNp!Dm3AjEF!e&uG+7Rs!
zt_@6Nl?lB>Jc<m*@m7~WF9V@83X7ZSO^TuenzKh|m2*WAeE=-BhhYH(0t)E67QwRl
zv}*CdMJ>wW#d4=QugIrYD63o$=6h0Nt;q$MAa&-A=BjJN5>k`cs;-?%$xtUIS+cGr
z*p*i+V&&sB@IEIYD?p07aKV%hhse!e3Nm^A<j@^Euu^xFOsKP&;&VwqXcbd^8i4J}
z$A$)u@x4JWARt`AWndX{AmxM=;~gpyW=>Gmfs3+2DXh{%qt*LtuEkvp6s3Cu-&m@$
z5iJd*HS-;NmtC&Bi-B{78Ak)RKpp?;vtH6SZv+KA5!<e4*&EnaZpzs$ZvHuGMA|IG
z9Au$>_(M$i_lRU1FEfW9hHR!@3O?gW{N{?8BsT8AEmz}`n^C3e2drU>1YWO!X`_#=
zM64Mfdad)SR;p3xgG;2C9(<iAM^Kd6(a(y-pog?{vMiEwZ#9T|{I2Da%Id-`f+&j^
zaaosfcub6$A<A5&xWp8-Z+KY_?}mJ(?MuCg?T|GW9?;^Nf>}`=_{pm7S-O5-=g^(H
z(fE*ibBr|CW70%$_K5M5_hy%Ow(59c8JFCfi`u*`;4<Ar`9)`8PxO>VlfuNESt|lz
zWxah+wN!bhS*2Uk>$I)du3QKp+L5HaJB-ag?AK%01K*D*#4wT#smV?G{5a<KSU#K4
zlhAfl-YG*EyG2I+H$Sh-9t@N2y>%oe>2f>Bkyg=rH?URn*!PL6is`{Ta^T0;^4dEY
zlvBk=pedsgzO&%6$BuL0P?Ptyu3}>5vK#i5XMaSaH7Rx)E8nm7Z^tjhJ9t6!*|>=A
z8#}g;JFmLkbvJvBno-{%ii**#$4-lE?N(w_b*uQ9b067o`1w!m2pbM+SXbHi9&JzH
z6>cpI?|*$K{^&zeLF)d=Y?IvLPc!u6107R%J&V!hD_iwHr`mrc=Q5i(hawTrzAw4`
zwU--LdaPN}GGST>=SB>UCG0K{YNIx57gDZv1jp-iyl$H2cn8fQ61*vjzH9YFyE!om
z_m;_l8>O&u-kUH*tqiNbtSi=)9p^;W_wVT#dX~x0_;iy(e)9=Gb|#&#H&_#QNu(?b
zV+>ma027iLEs`&f1QaYM`=$p4b)$|^hjMJZgWjPYrF_OtKzYtgTSHci-3!e`a$G_Z
zk4ud1m-Au;Ud8V<#4bokO5l)@_L;1@Dz0IU+jhLaM68i_>Fo(Z+2HX@3?$*xN%32Z
zXvtM7Q5a`TL9SM`a6wN--Sm1@=<=SJvqly6=e$w2+Ots$q%RWE(s$BX=TQmEVoD_%
z##BK2PBo+zO%&lB#6M{&!;<Yy-*%tms5RJOPXH6I{ElVBGnbn@NK-CgTbd~FZCXG_
z@PMMCIICz-$H^oe{J`@v@s~<Y$UgB2H+?dcL>iQ_CybjIXT)SM;Kl#qV%p&ND#6wH
zYE~CPn!1Fv+{B%SUoS^YHZ^%*Cg4Bg>g9_0tb*d?vE=2@>V;mZXw$1*zdf97AHwSj
zD4%tI|DyTS?w718OvFh6stTizztI)b=2~)R5y$j*1n4YmC77}lnZzTWcvb9yFQ%m}
z3!b~A$MWY^$J}SODpry;>K<I4%de&@49IaBpKcoYtTr|3*ONCC!lj5^SyVM)&%L*-
zxW}@0t?Y5kI6}1RDCUle{-oK-x%0|rlxZTPti<Key;oC1eQLbJ0duMNO~b&_r5g0J
zk*Wm0SP$;5kDMijg!<>kgpD#lo6ttCwPA4XK&r#qK7Z%1p-qt`@I|(>3Oeew;)mnJ
z@0$<Kj_*=yshb#etzu5ZOnev_br|_@BT8vPU4^mB%9vjHx^z2l_7H!}t8|F?gzbfd
z!>{I(_#Eew6AEJAtGRH?qx`)lX}+T~^$uLC>Kk-^Mjrl^(~{aY$ao&<6n<ZE{cFgl
z=>}s=SrQ?XNg`46X;<oRZNaS&g<{s!W(;nw3Ro0W=l7t~KoMlLtNb}$aO|QaPW_ry
z?~`w&w;DKlvmT|Tg}h*Qzg%UUPMiJ?86NxbbHkbaOLuawCc;d^3nz)5_qwg1(4-F@
zIURxIhz>7#J>Z>n8@lciOF|Wo-BF2}5{}((IZ&aKrdwwuvftzkBiO{HqUal)uo3V|
z;OG%o)uV6b2N9{Csp$c9qUfG9O*c6z433Y^3y=z#o1FP30+OxeMT5G&vub%p-Tm^<
z-O$hEELZ~N+k@6UFvHl0qIf<1&v(@wOP$@@RStSol`;2dS;<FM!Kcgm!ll!7J4o5B
z47H|DxwZs%8VO}qW_(@vx^i=<UCQkDcPTblJ{?ycabvryQ>H4B3ke+8x|k_#V3NH$
z=q32<RGvqgom81OpGyiuu4Y8vxM13-8;V(PO#O5D^7nY7h7orGgKO(($3*7P>k)kz
z{+;sjH89#df}(iIU1)TawByRi-DRPoN?glwuI%QcaVtcSy89>~PN1Cssbus^NAv*N
z4Q2H>cVbkrNGw6Tzc}W%J9F#?0~>`~DwZrv4175JH?A4b(vMeFZ8yA^)Lo=mAc2;`
z2YoH>2IsdzA!M5NCaa!L+up|S#t5*x2F29#WXZ66J#v|zcvs2nkQ|y(-Po(2y<(9t
zzpavoMmuUatQeRCYz?;r9PtKy@7i6%{W|wpZ}GrLW^!W5x99a>phKaWZRA|+wx<3&
zI*Wz<zT=79T0wp*VV|a6__35xpIPql>GCv%S`$B&!YBJt<0+1D`pR$ZJ}X|2f4wVX
z=QtV<|CROFuZ2Sy6EL5k^Hv)7G=FB=gOd{XQywTI!%h&gqJ`I8%Qw@Ogcxd;cpN$%
zzOs3ieD3*4-+5nuIcKbxDCi<!;Or%1o)@CW%<0%fF}_X0RSE!XVu4U)hB7~qgpH}S
z*YyCe7%yXHB$@p9DMwYQfyi7HgEd=Q9xaw=4GnxgfWpZ_KMm}&+wueyZB-gd+64*D
ziXu_~3vF6~$!=(B@}nsxwetCPUxB7{eW_|JsgUkeD$3HvjM!pZ)FJCeO~8%ip^0@3
ziJ<z7&U>DKHs95=PGQ~$#YuD!w)>gsE7k<KH*+(eF2APq_kn7uy_-p*{t(I0FfxfI
ztn?E70C*^mj1N%byF@5xR|tg6-~(}hj3@<@bX?#0C+--Hh+d>j^Xcrkv@L?^*Fo4$
zFRSH9g5{+oDJktNIjrnpNw0ph9{WjYfD(75=JfkC04HV}cwZ@RUyPb3eG#9Q9?<90
zV>%5%d+>YEe)KCl0Q+v?kR_pUYWzb5W}G8p)6~%W1GlysassYN7Sh#@OGVF@Wpq`B
z&7}}oI8y8|BAxK#<s@H}swfnNX-G0OCaGPWo;CO?2?dztd20FfJWaQ!jTkjhnbNFt
z^!iZeJhJ}i)kpO~`xP3c;iMdqy~i^3!(%#bMlW`Dnc~ibNWE`7{Y@$7N)aQw?n4IA
zvS)59bJUkg<lf~ZhNgMz%J{}$OeTL7@;2!@knGA<cbIzTOjUM&z4lJQ4TR(BZ`%rU
zOy(-1l^?x7WjUEPqPOJWRqOEGsL6M7$@jx=QC;@ivdpNU^?(~Sdy@|InuEFSY1})t
zk(uHGQQRd>n64UPK}wRE!BhjKllP{sCoG>D(d&^i3;YKs^$+y-pRZ&l5pHDF$0C)V
z5YjJhn6RX@s=*$AmL7|QYPp?Z1(^*b$3TLinwJ%v`mJWjf%<{gqF>Ia0q?jR8__J6
zh%HC&(Cs7Q^Re8+W5gZt6KZspTpT+3=!W-Ym4QhUIvg6RRUelnxUMm%7$o^dvrcra
z2SJg37iPh#4)|k+A)P*y9uP+i{M8ubsAEPa8fJBwkIO!8l#?S1v~{A>yzGM2&erUn
zC)mO^Jp9OH3e5jY0I0kR80AGov%hZ0#CN|Dh}3-BRM;M8L~o>Ke*z8BeX8>vpIS3l
z5ZsRo%Gq^i&^<+t&roJ|o34%!QhDU0ZX6xn=k<$<*N^hSw|w_CSAA3aLYkCYZkks_
z*f0#Gn(K%8UZS>X$Icugz1A@la7orrNZy)!c8bwq1cp+JDpZ~8Ek#6CUs<<(YGQjk
z-8Qq_dHkfTP-;^)xnzxf7g-}w?1$Z%ez**SDB|jP%oO!C@=XNHC{<%Ou1fE-o6>R%
z=s7z%e6|*w-Id7g=9%jFG8&)``<8x(dDdI!F^2M-#<vnDMwTU3Je@d(g>y!Id(6h|
zX_KW5@>iaKL|3Y?cD()Cy6@ziJ5w=1MWa62+K3{Sxmh2(>P*KQXN)2zP>{OR1x+`w
z;;f$G>J)l(j1@CQ6nCJWShit2b_FlLMx=M-(Z|ujS0`a;C~n?Y81N9Xe8VuBU}V-A
zu-vFdx@wftfxW&>Ve!@>k7@miXZ=^(cB?{k=IO4=Q7QQY`|Z~-&aP~;#PH)P52mGt
z9v~2N2Wx<T#<5g-JAD$Hd}c2FmtNH$fA!D@3Xu3pQTfb2BlI5-I>~h2CqzFv29V8c
z69Q(5#H<9j$Xq2<<DLR0_Z)iUFfM5&%R5DrcM#+dsP{zdZC!k#l4Q8X>K*Z|aao*H
z%gKpOZyfZcJ<|Xt<uAX&yu~uQykSYqD4(M_gRbJq3n1ciF3j@jI2-e!xR86aV|CEi
zK~hyLs$({;K#Ua;EsEYta+G4%jbh!u;GN{85<Zs}oD5SjNE6kj$QsXFQCA}-*~%6s
zA5D|mv<wh<d_7iaJD~7tX^ZLxJ+3D*plk-jWrRw+^&Z_Lt;Zb8PL~#U$}}Ha0v~wu
zSnhM1v_Z?9xItwSY7MMQ<XD$^VPIl1b8e;bd0GmhdsYDpv?-QWDFk-u9tBnn`DpHT
zRy7nVTK0VxSGn@OfmMQ*IU3<2^*06`Q69UxCeNf;jwTK*>v$~p9oXZo&=99g2l=cF
z!zA=xN%|Ce6G%JaC2h(l+qc4kE8Qm3dTU@qEo2JFNJ|VbSxoKj)mW62#rh_OO+~!h
zQmTT>5t_o*Mir?ztkLtWVwIz&A!jae@1>+yXGF_(i4nGawoFdEQ-q@#7?jxl_HC$Y
z+1H>u=6lTNyse2hfezYvsK=L|<h!zcykn2fnVlbe{UpG@<fHZ1u-O%kt(qI7*o(y@
zQgp4u=?2+V+1}zi!>M<XQTMt4;I}d-8J@wql@dLj?J=b?k_}EP%*G_&qa2ua1T3*W
z)jD==$5p<cvRTT1<;=|I0ECNZjFyU&?f{UgxOLMija<d_UO1`=95NX2k(I36=aFA>
zj$ZP-c9ADe&ab|zT}r-PO&rzb<o7uDedR+(`+aLhPU_JyizqP`YvuDDwbfbfRh;`$
zY#+U(f5~$Gbeysyesxy!FU%rB95B@;Dfi>MsAkAYbET$5B9E)0|5CV2j_cgpwoam(
z)SzFXtw{d-5+yYJWRVi88efCo9K62ckn3jlV5O8T+3?v^uJqv=pO(2^gdE`W4L9H2
zvO`mHjZQEe4F%$6U3gI`sc7$9*uDU;^$mPtarAPz#dVF3Udk6>2y`5lUKL`qPDvDd
zu{DTQ*xY1$X|(t~M+=ZbsMIf(x9inkwbGf8ZM5X$2ow8`Mu1bSM+mHt>}n1$<--t3
zpD^)p+E6q6b2HHxXiFCu#DHbqG*MLhl^U@G(0=teFv<O%RKDTUQwr@@C)DOY7o%#C
zAvJ5)v^j8JodsCeEX{M|ezP+&f)N=Qy_nZf;y4jyy~VgJO_)N^ktufsfT7QI2}v}S
zUoX3|VnT&;8A`+JBXklR>9RjgfvlN-iL{+zJhBLeA(w#E=j}LvP7BGdSwm%&s%q${
zd4t-9oWl&C@~-uo%1c2i!tu!X=bM8FS*Y(f(t9ZsSqURI`dkx2M>;O4=OYX!{^Zi3
zoh{YkoyQsvFB=<ht~}XDR9X65s~;U*aq7kM_mGuiZdTs1dm|L$^kS%?u;}<H<?a_(
z7)WHLzFn|n%p#tSCzQPdeQQ0UW1rtM@g-lPfAh_;^DMn`@%EvpfzI<i?NB2ERn#h&
zzdvYJ#uf+N#y5UH3nt8zvPmeULYKXAcbq)ytpn&*s+Dn94konG40O_4hLf>mJFxfG
zIuqqc0|{;JfcIdT$|m*nY7)L-S7OCi{h-TMOB=uJ8Z>=k><`!&BYJh|r*r*!W<56L
zm0Litfduu#D{W+o7P&Pe8&d)zi)pZOVbWuKM~2&`qhF@xOAqvx@wSb{9v(HX2)A%$
z4Nx6FRI}t2F%g>L_dY~uagh}xhY0P9k4>EL9z*Lty#Nd-iP6AWYgd5Q{Yeeglp|%5
zZ3}9?$3_j~tAoe1M;a&IIC5tbjw>eul)dYzpEFd~lWM%``Wl!=?Vr~@+%a)B2+1wW
zo|4+!X9yz+XOO{ste61EYu=C!ncC`jxecQ{zw=Wd3zD)(gQh8bXN#JQV{zJfOf4H%
zI+|LD!w^~t;oR~V9Cnx}d*h(X*4c<?FN;gLtt)#z(qvGq6v$WY$I53{2W|F_VdApe
zrF=7DGA?g+8sEb|6axt=p`HlGhax2Ma#w7%=`S(hhlecq$SV6^!!7!waH1-}C(5zx
z%N3nzJj&Ywq#IE3lrx9mxAC@^z;aepVWsEzH+C&Gp+V02hB9Y6l5n8b&Y21=DNZ)|
zv`ZPSG>$$gwP?SCsGMW-sa*{p(uxU;C|xD*{a$y;B)!adKEPzP0)Vds@fd}#Fjg~S
z+^afTiJ5y!f9eW3jljCgQBv>ItF-iX^!@1wXG`d18)v)D>qgskIhsJ*Z$cqCI`&h`
zOP9>EOqkX}=E4qdf+CuK={#DD43k#<s9lm*RxKVu|9jNEd(P4qexOGgIUgre@z+qB
zQZ!MxF7G-cwF(T7AN+*<2=^>a>FaflHGOdS%X_|R-+JtMt71;Tr=s1#Zy5@zdwwjT
z1J%yi#E#x0dNyr4-zu>;a~mX7Q+G3pHqZ=C#l=6J>wmPlf-wt^dpHM>qyA_E{QfGl
z;#i1)glt;bN8hCc+OfVJqU#?Z@AIK~8%<Ad3{2SF^dr78-V<k}K~aW@b-3|vZ>g9b
zk@~u<RF1w4iSgOA%)P<tse$xjTQWPACF(MumS_R6=ImFXQ<NYr!-hkkSso9o4FXL2
zwj+bKS<Zdu5rFMVfM0?mAZdvuk&FV;@q==(7P%EGYqTDzedvy$GGe+r5a<~fZy{V~
z<b*n#y!*y4JtB=822DiLQ}I2NH690<z4>->-KzeR#HwfvpJDQC6++vK`)jRO7)ov7
zKv_8J=SXY2he%5W8S1?os&)-mT_1-IjO76D871rkMGdFeSi)RfOVc<=`K9=XORI@v
zs^$|7el*LLI%q8W806AhRLzd~gZUGDAF4~zeNS+IlzFO*Gpj(TZKcP0q0@Rs3<z2+
zKtrYng<0zRrc2v)gu;jtJo07FfwC}b??botHrS?UqhRu9^*&M>jp=;S)^5GB=OD1h
zXX*z>YF}YU^U{KMp-1hDFCfKa8%i2&7py&{fO5>+B-1H6kr0na)~zu)(kW<){77*d
z;hukJD<_p2byFoLzd5h+dL)KDyvZoaY`?2AH-Y2$Xk#7H3G)P^FAuiX$m8E`ABg(z
zu8kRnKGQ}!GmxN8es0S?-98K%ljaNI)rlTYKd5{;x(6SKEbJC;J=VC7wetCFsFMU3
zC$s|iWjq!S9kHk*(1G(=7l?r-kZ?!gp{Nux>{%x0TIVF5@(~PTAzS73o_Y}b_0fxq
zs}i=*b@0?OpXy%1bm|~4E6>W5{aQ}2I74eDZKFh3kx4(>kPsWnRlYgw7nD&Lxl{SA
z@V$n6lp(18m@mA{_QQyh!@SDLzL3nmRm-?F45@|f=dIVVPD}FbRt~)hj%wVSg6{Mc
zD9J&Dndt(~6mn;Z%D)wkx6}+gnA#intk_OR_iJhEF@KyRmEM0|X?0-y^RE3zqbzeB
zGcL-@ZeP6M#?Nmt6`%kHG|eozs>lZqSH3BrJyCUF@&QZmE|qmMqji!Qb;?z54)L%%
zz))Xq(MZ+XeOcTP5ptTyBNeh?EUb%E@@eVDs(fug&moBtoxK-oy{&)_zc1#DI0lCQ
z_WWAA>|qd`7v_9g)XIu?&fy9kz&019cHibY3ShnQXXLm?<r3kn$|NO%5NU7w95<^b
zZyHeER^4X8d{)MM;=J`F0pCpLYC-NmOH+v^Ygj<(C%bK;x8^Pzz)PgWI~7NF=QUy?
zMy`d7M4kD8pipXF{rn<+E5eG(P)!)Ag<iI~B?QV(zM75Td@I8n%8tl<Bgjz-AF<!?
ztwja&xXPB$P;pVduUpK2iHj?&Au^9xetCn55@&ub)rDcd)E~$V6Nb}V^?3$1vh**Y
zCC`k69@?d=EV!8J9TQikX|eRgqNpSqK$QB%;?V)1LnbJ#8|#AUduqW`$SEAQIaa)!
zq#`_iJ{7JPddG<8o}Ay3P=0mDiYODB|2yKQ@Y`MY=uj%ucL2c2rK5o%9<#+vmM-7t
z(<Qe5WNM#<3o7>Y3t?&FNtQg%PG!a5yokMIN*q?gZdsCf5|d-x=9>_bEfJ+YJ7s><
zkJmpcoX<y`wvtt{f{?x$uSZ+lQT9YAd2>6olRjYsb4g-HW@{o&IefcxA_ZUk*n7TS
zR`(*7cm+f{nKgoNVZQ$KZiDen(ZG~V`aRLAFd%f!;lG&iSJcbLA5s{7GHY)y$r`!D
zzLny{+=@8~fJ#f|C&97WA-DOQS6%^Zo&oc;j26d3T-lE$F<5_Pvgans%yp4+p>^fT
zv1{`bo~`zUdv!dls>T_H{ed}+MW!%1ZJEq+^Bt}@`K#w2`+$b^POM)TbN>sL#u``i
z1Ir%8Y{RKHQlE`)ql@8obMd$}<4{yorwh*R%I|o5dx#z5X6V`&B6;u)nD-yfQHoU7
z-zZ+7&1^tYJ8R>)v+O6HA#Fp?gmULdSio#Nd8=y88SIypyrgp0FU}xSf$I9QrMu5+
zjQcFrH>!EMt{MaEn)2)mZ_U}$58ee(Wz<NsZqgi39Gu7=SQ6XJvB(+voy@W6t1@Z8
zNw-k#*i%#Kl(&V3LS?(bMjTRU!gk(}*X-p?+H^BJ&5$Tl?!Gz}Slhp2@Do4#&r5Vd
z$MoH{QN6=oy57mO*p&F)nSr>eXI$RIegEFYNp#P;pOZ=<;&|93(rOUxkIyZ+&~dN%
z0nzU4!Z49<b_~Xy5cTX($%rLb-D-2D*-EUq-(cKvZcM`Mg6reWSwv&Ze79vy$2Wjv
z9FDjpoy=s>z0Gj!(7Q~$E7z-(Hms@vM90gsA*{J^1i=^wM33jAJx|NDIXK{8IqIcj
zn04N2xlO<y%q+Q*=8KHTREw1i3&trE<adc|62R5mZ1)K5VIzu>UVQPKFzk(<O*W3s
zL^#ekC7b0J#>lJ8;j-@=0hzWylN)=_R2MEAIF?PmJ+=)S&g)o?C*o?rt_s`5A7Jv1
zlr383Et7NU<}*#$fPQ;hra-9h#x_>Flqd1+Do|{<OZRdXh?2W9jjcf83>s=5Pfg4#
z{iN-b;4c#E8kLLj+U`4IMqtgalriWac{ML8YCi&}nRTJ=JVS^@q7?JWwF$M1ro(rM
zz>=4;F19!(J^pHUj?$Dtu-Pxq^hxN*K!sZ|t&)2;|23jJa|*lrWUCh@<kvLcDQgrp
z*f-9-M<rXMHKebZ^q_{W4V=X+;^<M7rLnz$l4|C{W-#;|)+z-yU6;wMPt#rNZAR?H
zSXbwU`?7ZpGmvR@V<v9gjKm?EOTbNjFe)^mzUV(UHk~X6;IY!S>$fM}8u`F`NX)-*
zk<J102EMn-`1)c`@aV+W)1fUPzkp{C$6QurXdJjLD=xy&FGAE8IRDS?Smo_4N*392
z?qFlrx~|MiF+3r=XAv%STRE<W<6-sZc(>`jCQs=EWQ6j%p*-9d<EbmPY~v0RvdRdX
zL!YZbcy^cJIaBk~_a;Oz()`d$r$v%_T#n$9-BlmJ;LKUhVbT+rE2k*bBr#pSQC>vg
zsFWUHU`!DqNwCkTdodwCfIZ-I!UJyXw`UyX%~I5VK&3D>@gvQubAJ8QjPc!rYo_EO
zZWKlyH;6`dAw`-K%UHCL-ZaY2uADlNxB6o12dyFDrpYxi9s~Cx4?p{qV&Fp6ucqKn
zd^WysdNI&q!{9dFqyBdF3G_}gjAuVy8|gms?9UnFpHs>H2FwqWx3-Fm{=DW$ubaA^
zrUbW8+RU!t%L3x06u>?Z#=*4R2u&W?CmLe0y(im6irbVMvPR@+y*8Qi<R&$eQdY>z
z70<nW7>PAQ)v*sOf;KD4V;wRcxU>S9DGxA-?7KLz_xNJco1^R)gw(#}24Ft|^o-0E
zy_rtkcg(BotkngA(<Lzi#GeX_y{Vn7k8Q))y|a|n3XE7pVZl`W9U5%}QD#jyjm<tt
zgg?%m$qm^i;<GTIG*!qsJ)x&$=7afYfI(=Hfr&ydl!H53Vng2FO%f}RU7|<ogp2jm
zX|`B_*P8k^7f>%zqV=C*mCX4FWY3ZcFu6P^H=!i%TF;33t<K3bhBpKk+cUd)8k^XS
zD^@GGKy_ii)1cw8on<s*7!K;}c)%DhX_PyrM@NiS{*Z-ces7fE0i4*8vc}jru4m0!
z1G9*euVhq%@mRa;lX0)|K74Bi%7-$?2-}YZU}88SHVo}}Rc*45#(g(F#*N<&xEdta
z`L!IGyk&h`fr@`4vDk)sg@r9rN*Kqs7t)GwsaT6x$Me|lG!5`wO#6A;%{a!JUno0h
z(}yyzynX0^GfE_|x2~AOo&Lq-W@dmrZ?T~?e&{@P%F3MR$uAW6GTk>VyvDyZq`M0Y
z-}ov-Q~m8NjdMly%>;v@p<4-t^czLR>>Y`+zaixBZsLTfm+DLQPU5}e1#H<xJLA5v
zWIAY5q8>ROqemU5dK`gut8D4!5E_cB3Z_0r9DY{`5^vQQdRYOV>}u!Pz4W5>JZJOt
zI`!3cSw2z}d4QMj^)v_e9Wu)a<sCVnrQ%!Eo+R%Trjk|$HRwmW9Wb4EtDL)*E|t=u
z1*}%*{MkHtGfuc5Wax;OcI!0=nLw{FfHNhzT3W50yj>_HlC<bFw!j8W=3~EQ#Xymv
z&DzYA(WOu06Asrzc{p8fI$g9sXh=b4O0K4?O@9n=v?C4VbiZkZwKci9gVC7w#jl!v
z`c<vm&jJ6ZR51YOwTl0Q!+f;v&8e!_|CGDg#xz0ZO6Ks6#`Z&|mhL|&zOJTHdI^+G
zorC*S^7>9@#1dF<srtJ!*>DMj%}dxZWF*ouGO-r3zAjG>j7)T97C_d+da~F2I!iNC
zHts6<s9Y04io}|H2v^%?#db=wX+<OWs`0<D1HBP{a(?Cfz>eb%6k9Y{MBW0zSZy>~
zB~Jr!g>xAm+AqDmd(dlY5c+(r(E3QTw!s%wj1pyTrO?BpRPGEc@G^0^*)77aLG+dA
zq_wG6{X9H!qJzDy<Jf{f$S}jFJ(_*TL{cvx7P*X>#j#t%7McnNE0U*B=dEec%hzzV
zb@WAXbrYp#K=HthjiL40|D*ph@7@a#=e*skUd=7Gf7!D4y{DNTwT5__4zH`{r(rMs
zw#t7!)mI6pO7P_=Gii4tCj7($!%m@vdrVRIAoB8|?Qdwtr6Co5xbg+WNZq0xLTot9
z<klT^c5lT}@*3I<svc%qY%}WZ<A>U5=6ymWG1xn<bTea&y45$rmv3WJx-~qqdpX1(
z|Ej?^nls9z$O)S%H~3TCmY}<S{V453BCRNWwUj$g&au^ziS(5xqM!8+AtSbRDs9<;
zf`%`%zVc%j8MQ_$4QAa!lAg3IkIzm;Pc=*bP=RE7fPo2x{dB(XBj454IE})ci`aaK
zw+MeN$&O{^{x<u^FaHQQz0sxF6}GLK=d?))qDd2Xd~-z{=qq+4HJEu;*3rS6;iliN
zel*Z5EA0K12*rc>hmlAR_g3aBM7_Cs!g5jZTKMGe{PLzCa1z<L{zp;I#vDT-c*EW}
z7lgAuA?hK@^GWvKoea|BERQp35QmUMkI5;?G&<2>s#*=Z=}|&1K$J7U{64{&=Ak~v
z@rvc=-s*n}{*dc-3>vozf0>EBt~y5bF%TT&<ZeSp->;0&-26Ex)}Bzlxe`MjqD=lb
ze#7?Z<gx(mCH-GA=_WKx^Yd~D5l|0$TD&cY%@2aku0h-34#+EWC7%qJcoqYx+bjf!
z93S|ix5jLrKQymLoZ1jOqt+2Kxj&z8|B|o%ft4Vyh6yM;G}DsYf7OzX3vVjx;-LWy
zCaI;0_>Bh`3*7;8MbaG4&mxYKV8lfDgb(U%7buS?q|jIY)9w8E-!fMaXCpuN(HH-I
z5_{-|Afj1V=NFO1wo>9$VMgddjv;U)0nLsXpj+hEboNNF0;)E#2AzgCRS%&k0>@nL
z8Bi1F*A&v(HG{qRUBs9BW*<Bo8br_LGOVQ&4y?5zCZWNqpTGTox<N*&nUf%&-LXiT
zv=`C+aq%HMJbZ8_$c1#yvriiN-+KN1KmFi;@oyC`n=)m?X7}2o=`$vykVs$n;NIx@
z>{kqdf4@Ed@!I=k5Y78NJFWlX*Z;>K{v#-2c)?YsAyVU)0r|_-@aO*kD|uW2A>zUR
zp>Gd^2?)>qDRMdfxW4~~S29>gq%q`Z{j6>K@7^bw2C%sK&ZDaJ$I1Br@G1ls!O3Nm
zU;dB0X=FnD;c0IerT$WU^Y`x42~xh8ypUw=?7tagzxdSe@U-V^MYVoj;s4#cL(K-E
zhs9s0_&@uY4V;|rjOD*TXBas46uOS3ZI>DY4=%wp>`O4I-J!UH8Nxh-g-|(}kFgF+
zUT2^`a|)nR^&iFy+i`J^MSseQ#4~~$Uy4sjmACx}o)xD4v!mUJHWz$X?}n4>vvosq
zx>7z9H?A)Y8x^11r;aty@7_gR^#mrxMgF874*`1q?+##IFWpuC5sUq&u>p-L8hZdc
ztH<rnV?Uh1LOSJ5p_M^|Oww*viu+B<Q-kyi2PV;ZZ*Vqkh1v6uUjt&PGGFQT=kvz)
z8b**#B~!yoZR9b0(ZqCe?SVnHCt9f;3VzEo6gRL~g?-TlsIMMX)|1A6`q9T6e760W
zx<|X~bMB)TKs6xxK_<uWEbH%!kk1F8NkN}glUJ(nxwgC*>5H$x?DXw02^Sh1#cu<}
zfhm5^Y{GcOqaMDM%$a1wI>Udnhayqe{C>>WM;ZPbox6fPf@(}AE37nmc1C|%haUbR
z(3uk#-T+bN*WHJOW#J$Pw*YGn`j#OLH98>hude2E9HjoJ%`%q=D&`yIVE%j~5f<Lb
zW#5jKk~YMozZzuTlV&|d>VL#hNEADq<%6V>zTb8O+TUXv{4?Nt&LEZo7Q=x5*_CUX
zA(tGCX{5|>QS=BLP>G=TejKV%<K4xV#jlfZKLH1fG=*TPh=#@QsEkt?L5Dt|6vVlN
zC|`gc0?7b+<<8BB1Ix=|h01^W?W&A?Kv^2=J<W90BVt>7u;b>3*WqwLwVUQ3<0AO(
z?Euej^Oly-z1|-l8~xeX6N^*lI^Te^9;YY!<o5e9serxPc{z_c5SLHMCo`}Av_F60
z!+cPa8BcxTZL2l=hq<7G=)WE%LWEqP(+XEs)-eh2^!}V;V_(qO2K#l$Hc95{vs2Gw
zjG`I}Z?pxL-H09eDLtdR5uC|_y9WLUk%vW#_bzq_|JXx4L_@3(49;WWj_O)GJo&0V
z&M%BlElh|N07&$ojse?v*fAf*R-FA)bdg>Mx0?b;S6sU~-+Tjv<<<=x5d#by7CekS
zzC8iO#YyT?qdXpT=T%$%yMO*39-0_slOV<)nbM;3#2f$NdKPk$x&J{><ay4z>;UWv
zXZl;Cf9!|-KCtUA)}eb7e@<yucuEi<4;Wx0`AhQsybn8fPQb0WioYhPxhJ?MyjSfT
zd0<%|%JaMF!asIKc<iP*Gp%>gwfPrT1b<IT`)^`CJbcvw3;)H3s_d7=y6B=n?COI*
z0(uzsdd<S*&7ZG;kQ94wYl&j25s<@hyM`OEK*eii76;Yob^5lm#MRTbhUUxu_z-v{
zV?zw~#@FN<Lk66m`A(!Q%6pDzBz671BKv>C9@yeGT3xi80@j*#-z<;8-QaD{>6#b+
zx_vT9$Ud+1)k{SGkEn!Kwhv@rFEp0}N##`wjtV4U&BVgblH%TS-4bLUezaJS%aio;
zc_$tw^Xle@7PuS>jlth9X6=@iWCYLefqMhz$F+#tUvx_P*RMxzVZS_*p8UMr;fqm_
zd;t*l{p|W&`>j&$Tkd4gXd#ym&|jQe93RoVmS3L!+EDwaYyQH82^=QR|HIyU2SvSY
z+rrv5iWww`0YOx95D`>jvlW$`a})%LDv~p;Tg65NBuJ2;LX$y|AQ=@<34%lg38ILA
zfaDC{T&+TL?!M>j{chEJRbSnItS;>Sg%#$SVT>`YEobG`6bn=t7t=t+-;}f+gp+Xj
z#c>1rXKdmJS0AstkyhRT!PLJa+y_oxT~WbF>ip^bU0?rY=6*U)N-CvZV%*Z7cdnYG
z|LzD?N<|}<q+d2ewr5x37}yV#NSx3yE8-u>g8tV#<J^#A5jC3zn~7`>lHKU<oX2=x
z78t3WAKqOguA098=HUOYkMV012GM}K^%q?HA3V!iihLh1Ao}Oe6omb^H~KsOkrfY@
z8B81|H=6%&TwqMUu^@560LDSH|B*Xd7lp(L<BJDK2lGFFjGw>w|Hq=S+5ZC$Rv}Zt
zMiJ}xPl$~+apcnp)g2hAJ5Q~Uh5Y+V+9-1;bKN(n0ocftQcs{BW)HRTDuD}cZP$@)
zz;A0Xs*c`5@3DXH$}u$*#86|xlXs{0^rTIJtkf2C_)mj#hdeN-anOKBGdGPJsF~c@
zvTH}g9H<!I@Dra+czU$mk+fdykKjS9^%XtM<x{(Wb>N;lC4uEvMoI(InwLCQA2x#r
zVE4>DE6`Z|aQIDF04U}@fr_QZ;R{vT(@ffmViRgrw>(MK4*USnblwg)E!F8Sfr>A{
zwWvGSYI>4<=)h@$Oxl45;Dn`KoQ50$4dSm}uI7Jb-?}CS#wzzoDkQHQ;@j_PIE4t1
z>|IvD8vJSC);U#IHYOOcE_QC$4pnI%EDjJ_H7}O*aK@Mk?^Ij$S6cI&(myuy&_bUT
zy$Q>-;@SSB`?hF0V+1yFgI{qDP$YTsP(&L3-0%V*O$|RluJ<}>Hsw_Oy-bZsk@14}
zTKwr$I?O#J?SFjFwb_b0d+ryU9quT4d8CS)#yJuSQ|lDP;_nQXEO{bHrI$2{qSWF5
z#Q10$xjMO!b-ffkAUc7=aSjdx%{<lcdwdJ>s>}kJUzVZj+tZ_QGw#1mJiIi8N-6c)
zvlHtDc9k7XOjjiv$Zyri7<?_d&_=eVz>9dJ=e?9M0cj@ntl;yP!a)rBC6c$=@KQ6&
zUjX?|k$T?Dk3cL)J&W%1E5Ge1C+`e`ZL)8pQ!l;TdTa}VrZOia>V4|#N!$tx$b2XT
zdlr?e&sB2hF4`S@E{6(C^CnR+OM>7G9?9MI%QOFNqHE~8J{?C%F5f0O7|?S8QuG@^
zW<>!M)EJHFeM%MvFP#JFAWG5WFMbz6;wT8$!d@qwA`&eLl5$PvC(_A`f8@!Sp4a%d
z@62@n<$S7>!Xk7`siD<%$%9ya{`ZSdUT)jGr8$@6LrZ%vBDjxb#v3d{&Ec0@9$xA!
zeu!uS9NkFUJQNZ#pJ|ld+)zt9+_{M>g-V8kEm&7*t{ob9F=zm0{I~_G9EK9O<<7fx
zzxfKC2sU!1W~qFCbqrKLF2gnm-kMX{Jm|J+i^P1upnd6#grAs}zGlI?dUf-}58YnC
z7g|pCry7zB30{HEf2$db|E<zknQLKNjQht6I>7~8HZshbkap0c|Ce!v1Qh=IPJ`p~
zK()SG19)25mjJZ+s2zS$1l9ol#zu(vwwunCAVjga*aL4Opm>hBgL*XG)@Qm<-7_&0
z#rRorV8hZt9MJY10&4*(p4T0KGuM-xU1yNMA*vZYfjY@e$RhF}g!%d-bbq?9cFCo?
zAkMnIF8z&A0W9F4d3`~s0lw-KLfX;pKi(p9<U@S`BdHuryYFlU$TQqPIrc@*JpyKO
z?yt*0VydOT8)<gg9I)fnzHA5pw`W5#AvW1pF8n%MPUCg1!muP!x0RDGc`RD;S0m5U
ztXlGGDInkm=-y@MZAOYv3g<_wK0!UXHhQE)^}dc};&G*@7Nk`TidZa%pDe;QqXc-n
zhY`-hb{BBmk3&7O`wPHoj%{0W?#TkmGG1GYwr{CX5F`Nkwr$}s5ce2@D`;7zX1_qq
z0H&E7f&OmC015}rNDCgMvFO{PzfPb8gn8DQ=YL?`>NnH?IO$wnjO4j5uLC{-V41yu
zbA6Fb*1OZ6pu@?=RMX3q$v%>9=Wjd`g*E{^S3@($0u%cTmu5BJ11bzbfcDLq&z@aP
zc&H1&LX)|OA0USGCz1l-hGmc^-v)@%mw?Hp7Wiy-q06b3X=(b^<#IaBpm~q-l3gRi
zija%mialsrb%x1<7AgEs&vA>0L1&V#=bwP;vITX<QrIT?z!(romi#r_;Sj`W(ra1t
zsK1oCrfEU>yoAY<eSXexyHIS}o1%M`XmY|o`mN7ZTwby<$q<$|Hu<f|{kg<{|Hrp7
z3=(NDR-*bKhCl$*f3~VbyzH7*RX7n>-g16Z7?1`{aP>$8321=HKLFvH6?)VAF{oPd
zD@0fj!;GIaqLS%YHEdzL92->LLA2}H=NIal`s&lXb6=s0&DN9yx>|Q7u3`}|?nm9p
z?WQG@MVP?sQqJTQmDi1`!#8%U`8?B*-wm_Qh<aN+foXl!^@vVG>*0B3nrmYhLDA(s
z-y*aV+X!kxI?o^zqiZPrZtwWh#4P&IvW7RROgeq4m8$K<WS&<Y9mVw2rlEm7$_Nb~
zIucLqAV1{r!-#QHNd{r__L39bJ_j}hzKJaxPKH=rVjKi1*Y8S2odzIlyy<*%4gHbB
zBQcR`65Bt1T1z{h29ku=yGzcETslX)Pe@r0PNAa9Amv|v^T!XyU7^#F<(Z;~yMcP;
zx8$f^_#hf>`80Naj9>p&vm-u<vybEN8L?gqO>%PBNM@0QBXCo1n~mE3ML9EO4Q9)%
z(Phf(YvK?bYRY9v8&vmR-eQYlC~*aw`T__hyHR%N36Qob;=4Q{t8R;X1MgwTz<p1%
zmekYY&w1!UNU3X`A(iqOK!<)|4_@nB`S$Q;1%7{d)evl>>&!&3DJS;Y*Gbxbpiwx!
z-^|unJL+{+=?-6vzLa<AV+4X4suA=_6n+8m*UrpWAl~P0i_=TojWqT{rEU%1H}srg
zaMrd2rV;|+z0ib$8CPMg+e>EgBd11Q1y=HqJ8Vh@U7!rL6<gV;3)Vx=e?x1m^%>-$
z_)^SF#iPCf3I#v`d;xtaXqFZ%0S~^_DkbAI0&#acVPkB7tj!aG`ue>LyAZW&NuRJm
zglbDRr1i^ZrjMmWFOJ85g8#TxwHMSt&w;tI&JYcIHFJz}@y@NDH@t6MwL&`WK!DV%
z8WY^wVtkH74$)WhHe$sDSn{mrZ{pn9y{;b#Z)!b<b-bHWPo|uic<@s)*<lx$3!y^b
z)S|-xndL+0x{7!FYhvlaBY(zj+2^uHw&F38w%qoG0hBb~1IzpcX#de7>wOu<iQ>p1
zYOS(0v#3|cw%OOoH!a}H7u=19;P_ym^m()`%1jnVYYM&DHlyC7?$L`U>1o#cDVcA0
zt^kB0UA@V4uLUb~UUxUxB0VG=b5oFNxaf%wGr}{Q5kkO$LV%jml$F@;7l^R&yp5pq
zr*SP1`EoyC3d(1W0hu!Md6Wy!3^<|~?J@Q(A9bN&*-3~*N6j2ou@M`YAuV{Uk*@j_
zGwoXCkY);ExMdPaBh9nn{JJp8%ia40u{%aew_*aEkDua19R<LS*`KZYaY?zzbwb8)
zL;u&#+<ib}x(u1R4U<+m{*fG}uHDC)fI$$jAiUT{yOeY4Q)m9`imGdF?1t_mQqRBu
ze4c%(ZMR@U?=lbRDtlYJ4mydGmP)0=!V)+rz~fRYNf!JWZ<9QmI&CCT$L&`6)16-V
zpHpksYx^r(KvruT@&J#IzCKV@X$>ZY|1;&fKJW)Sf55tyJF)~tPX<bbM=7xEGlrzi
z!jFG~g4#B)xvd8c#o!D;2ZgQhE`>}}kp8;8PLILo3hcWJC4^xYnIR;P(m6HQ){-I@
zNO|Jim7NJ}REbfhY)&m#+7J=<Maz~PE=>fq|KaB~e_*}aXxVV|!uJb3X0;1<dlGN1
z^*~<Fd(^}NsrW<}hBKbJU+`qrSsJ6h_6TQ_PQP|evxDQ89%xO(z*Jg#l41I@Kv?i}
zZUih^;l+@L3-h`=mYM@AA#~aYEn0U;?6^D*Xx#YpP3dw6M2=m*`H34^TwNcg6z)F9
zgw#b5aOIrq<W{_LpCt9V^;_88%TIDP8@LTlhcR<zO7;YUt!ui8|ML7ekoWQnaoNx1
z*7FMv`EzVDV~ODqNwu}gTvaXoW{y08EHPuZRhwijMdhaNP_sK17p$=fC2o&@fAaDL
zq>-!MN<bQUT5Q)@gr2=OcF*C@7q~gdnfJb(0<p?og$v!t`6)SIrOGL~(djy!h7VJf
zSbJy}dsK?7Hf*ZT$xF&H$&~);x1Q@X(XYRdkrL;+c71Wc^}F}hw+1KoAZgKS<Doaj
zE#FD)<T*BXu=Cxkk)yUz7=?3@NZjE)<extq;btAyFVukX3FIDF7516yd#A{h?{e2M
z<ivvXNb{(~+Dr#S5OTX-VwGMbWTwNi$7%Lh1k_-;z5`i-XJ1I*B2OQ%#W#Mqd1gNS
z>yq0s=u-KIKkB0ATk>|Hx<q|qpoI?v|MrcX6RSSjX1x?$<c7~pN}}0N?9A4^?&Yb2
z6fOyWCMF(w=$|0HovBET$YB+}&$2I8aIwlSx_Y;RoSS<^c;&uktq(7y8)O)t8kfmQ
zJr2U0lG|r|mG<f*_W9mi%g(pg?eeCsyzPndc<baLe$(!4hgE7(vy<VJ!*GG8)mE#j
z0ysW$Joq%+E!*<m+~g5!Ydx5p4!s-AIq+%g1vbKV^OM5zmdmoNG~0{G#?IzyI8B6*
zx0l0Kav!$sE*pQo-Se>1CuoG@nh!l<ga;K;uF!I<Cs=c+5252B*(^0@w`xEJ<tf7R
zLsCd&c-w8lFu#!(AeDI>Z6^0|MV=x^^79*=W~r0GQ2W#3rGYKtd_SMjCAFgQP|`Mm
za=9*kE2qNzdn^nB>uFJVQ+s;fHAa()A8EvAo)t;<{7QUg+x+rDA;{NY{1I(BXd7}b
zd_7ho4Pa%}Z5o4??W5Eyy@~y=;8d`zbTmo!W;<MRkM_x2=+Sjp+FAVLx;?mOSriB8
zw%IDua73M4fFc67kfsOU(DfvWBjsW`a$R<1)Mvh^7l1D^oP{KOM><kRT~vF<QY|<5
z1@j(6tr`<}sh-OPu*!=+vRp4Irw+&DH0m=<#|1rgM^5BKLS;d)B^5)~)p55b4mx5+
z?crI~`VGGc4|+1Z9)O8f0AEniuJ>(CG?%01!uxo|=q#|6y&e$DUv3gDuVC;mxzbZv
z$nqNcwE5NycKFiCwc31qalf)jisiUv#qC|XuNPYM&Gvl{I(vhajvW&yyx9!&Xy&#<
zn7vM=kR?^WAV-$2g3}qva}t^Y4SrnR84GRMCi+A=XB6&N(uZ~L-hHjVo33S)a`JX*
z0`SV>v}$<MK5W?MY_uDAJmMNo>3QY0g)0ql&DHTNhZCO~u}aD@F8w(_{YpXsq4f&3
zyxMCgmk;sBXb$SU{FIsap1RGKc1l=ZnmR@;%vdm?7KEE;3=*%nx!(<r>Mmq-XjD!N
z-4g%$Da<M@6KDjF$LG{GiHkxk&?MA$8nwprqWQ)iDov$YJMW{mo}UgcTQ2lmPRt}t
zV`Y%<urT{4D!={Haa9M!QhExc!kGna?&1)(AQFyb3-D%itC>Vhx;(bjGePefgFzEn
z3ga$!>hZ=V{DN*0-=uo;7@+(Gk+cva{jFV2CUuL^&@XY@*n7#C4-_n+7Eo}iPPg=+
zD^rt?n``5|Cdiep8rekK5)U2b4sGDS0~8`g&>!mq&gW2yR?`A1P(|^JYd8{~hw#@8
zLxWOTC^E?c&GGfx<j9(X2HD1YRyrMKJ;Ti}Imppc1+G_<y&9U7IPam0olVio=pNp)
zINSjG@9p-L9PzOzdWwXcPT!u+>C>~I8~&bGaYU3&qr{^jqN5S8k%rAF+6_5Y^V1_7
z8ccq-+#lUVv1cb&O~f%i9)rT;&_zo1#HEkN&M>Qrj&asQV{?Mv%!dyTPS~{;Uz*)N
zly?XX@cYbC;&ZvHp*i2Pv)z2X<3c~CQW_KTyX`U*4>vUTbDml5UWht>9}!$UQUAxv
z#9%423QMgF#=>(XnL&C~8iwU&zV(iEN-X{y>;JUoxC8pb$ZlTfvxd%WO{#h6nNi?r
z9Bl{Puiyd?R$L6BG`Dynb-X#Z*x{)W@ytG#gLKJ4>KtaO$FRl}u`J~&9qrOEB*UYd
zWPrA)=-QNQ5KPab(-_&!_*K8y-DMUGn19Du)Ko0x_uG>9F=4`AGFRGe!V*C;<nwz?
z8;pp?EO;LJ96JGgsPk9w`W3;=GBwZ_Vts#NtXiP0$JZ_VEcKtXQ%Cq+PCC_t%N2Po
z^pV_0nobC>)qP)W%8MXY_9_NXxkY^S9oE346OH#kM_i$u>{r8#6?=MX>{>GgF;X%0
zL`gX*{i|V{Hj=f}4cCmhH0CH@OWyAh7qbg{`ZhxVFQ{UF45q~9L!CIkDK*sMxJq@n
z2-Iu0RiUl|Hgn)hr{&aUyZbOF8Q<stx1b~>Dd<q03Z@AYl4N7W5hU!8<F&Nd7suye
zkv0e?lq{EK+IPnqq-LsGy?37jBRFz4k}*x3uAep=hH7fJLQOMy@M12H88x4ocqdSh
zS_j9jubd9}p^db)Cpl%++cfezd+$=1y?qcy=#@fLq$Kydv~k8>v05W;&{%ZF?#xn|
zOjZQ3TYL~PDQ-&2@jpD3QbC&tZQg9ux%Kn224_$U&e0;Bwzq`s{P@~f=|Ik$>9c56
z>F)4Z0~SViM{B-EBn3ZR_UXf_SYfg0u4^vWiN*y^WXml4Bp6w{2WN^_4g#DvPIXh+
z8ec_^epMI$)789gkQa6+h=yvl3GY*2^u=!GeHLRm1Jloi@`)~;u<}(>=2g<6Z{z~I
z<^<$?#2JB!p`LtaEjM)xslj_o(U61s*!#0F!PxGS=UQQjXCZCrroU9c-EUJqWzj&4
zLxM6+Vrfpgfl<IO9fy5+eCHkS$4<p#k&GHNPYGzPUer}je|dW;_W<TGAqUK}qpbEI
z+365NgV*xl&@kgv!Sa_2SqxBs!eVC53#P>%H`~Nt-86*qw+)Se9?)DkSRE2V6rdg2
zQLE+@+FD;$xzM^0(@!t1&y1n7vQWmR?QV&OPq38<McdtaMQCJN$i+J90?=+l!8TCO
zj{<OYNz$D4L6S4j_D2kCZ4)V@%NL{%t6unHa>d}Yr+Y&?h$s;r@;;ZihRuc0U|s&^
z-YaK^E?{R*mA(U)xvq~(!<MrieDFx|sl3{r^h@ra_cWXl9}O74cfaspt=^ue?<<(9
zy8SMUoY26`bZwB(qD`%uBlS84C;SVYtoT@1Z7i^YPS6eRfn<>|B-t8{K}rLH+6{4V
z-6EUyo%wt94q;`u;V`ByrR7WJZ}Mb0aQ0hvx`&N0tPeZWPhh>LE;^K>4u9cdZjQW$
zCupXLbo9?vAaii075?{Fd;5@^UZ=_A=vm*Ld>3<Tq1)y1_RHs^!pp*y(}C*#bdHYw
zodWaFC6vb~<cZQOKSeD?*vQ0E$Ifc%)2nGX*V<AKVp$DB+Akqjf4>8WTDcMDFF?Ot
zsgb=OX$_58qEK%Eo1VDPFKkgJ<pOb`^JZ`Y*qCxkxc6`wO7m}2iZy=)xvRjc@+qx1
zee0N}aj27NtHwpb;0{t7^!Fi{V6YqBDw=l<zhoa#)y(>`f7ydm+J|54u}BKpv1;{m
zZ9L_#*s~=Q2#aO}P0e~p-vpz!2RSK*(=T?aRGW){u;BPzr@{jz2v89Vu(U609=~Q-
zCvV*3A18Z1Cph`lP4Fgpr#_=jrvz<Vq|dK6SQ*SUW)#BUzoQQ_M{>iiEd`@)9bHTq
zEcUR&=L^hNZxNW^JkruTbKtDN)q^HoZJWX2DCA0$K<-EDGh34YhvW{V$&K2)Z@aMD
zPi7~#mVbIWiduyGVgs-IXh3=oi=Y?N`}s_P2^~?hu$%5gj6h{sF={m;F0(RCl#T4n
z-ifD6<q2nS@08Cl21m1bd^^ch$;FTQuAgWDCZB)wT75{g%<QUz{8qrQTlYS04RcOb
zyfZYSA4~cymB;Q5u4)`gt(Pa|TylQ7ryg=Lp&@*RQK+rsQD{@3=Y{2xx~ztkv2m5i
zg~rYHz)l5Q+9x|Be)wt_p)~0klP~l)&$Nd$&R6y4pXZ1UWkR<|=5qYc(q`~kY;GA5
zAKi8K8~!<&Kc}gOp6a#Q&{+Hg+51qL>);taDr09F9|uNHm$8j{-=Q=kJYVFeI;c{8
zeot~y8B@vEw~@MjCv7y&V5Oz}RjNJRP+#-V>&MnVIYrpzmJT6{Xx$e$p4wAVw!)>q
z5paN2X@K-nt3`7sv^?%(lbDfqg)mp7rcL_>W#jxiKhGe)J+IP3jExLZgm<nR0Wp;*
z%@4j|RVHrOpdrZcb70a4v|RiPQ(j9>gnW`;@O!Bp4acP@xB*-C>#g13iw1Vge?1mI
z475L+n%nAmCXXHfyG;zaLnoXq-ak3#;w8#Nn9Bf4=FwDxqWn}jcOSPH=Zp66IK8)=
zjYlIxgIMZS6~%%z&*#tfC)+Wrc4+lPYdK7zcFxpB4$!^wtH~KERna*DUDe|umV`tZ
z+X&LO#raXvu05;ll96BEy!R~lCJ7uTS9}v&<eLoTy*om-$tkn4a9c7vAwKUnqq_FB
zWWI+lKD5XYmP5@oN#ixr)u;CiGsaO~>6Z}^pMB>?ban{RNYM&F&ClbIEj{6Hd0*f0
zjle*~_k6R`!Lv1v7_23=&wxS7B)x#01SBQ;P}fzRY)f?>^@|!pY3FPs9|$}2o6Qln
zX1q|r3dlzY@c^dR)1^xfn^fWO<m|h*l$o;-Peg6_K-X5ZVt$!%G4T}8K&d6}f`pU^
za%ySQ@4^MjxuPTx={ucr-&&=SEtayi-Yi|;AP*=DSv(h{46%E{i>s^R{B~b@9?OXD
zpTMzoICHb6Z6~i@C~D(F`&?C7oHf#i?$QAUP8HGU{z|*F2OlIzD>CLZ-W5*W8melw
zv(77aU&(VV0Iwx(x-Od^(uZ~`AIbe7gQex^@K~!oGtIC>d||}Tt2#YjJ&6T_)zOGy
zVAkaGPEAbbGG$5V_gd`r8s#!ugPe<c)OdPbG7AHzMtmTphTx9O-&z1<?tGmb288&X
z37Sr-SP`i%)xsPhsZy0fQc%WRr;FJxK5azMjMdRFZp~T<elCZw(5N}{v6^lXk_G*_
zU=LBjrn?##3msv|F8=dX!ljrso+q2)44xkUwt?(7zrKn$qho+J%;Dl5uDhYGLa3dP
zqpqfvRGCQ2jj~bON%jL>*x6a8Ol~Vq{eQXFzuX;vk#hWtrS#R%d|Q_Dhn7dS&Ku*g
z=ZSpyspW<I&pzM+H&ULr%%n*Y`HR>6mq#Fb{*^E9RtCT7Kop$~S-Rk#JVM=h3??l6
z`=9;W{_^tw@e%N+X{lZ}`dpCuxyM&r(7$`Rqha8<u!=m)U$F)M<oR(i)W~pjYrkV9
zHyr<II?0|+o)tpVHwp<u|KK+(;}3b8Q?T9cIBR76JW&4eRsJt7fkSlf;dqzUP5VIp
z0>2N6@hq5$D0&SEvcdVQ?@^iW$8X&ul%;gZA^0!m8$U!zdA|Q{Na3pA)+rd(gbU8h
zL5if!W(tKWru6J-7UhCzA;q)~v<}TG_cO_V!0w9x`BzkZ-5%+*>NkEWPNJ7GMcXw-
znS#)HseHKLv`xGtSy~Af69p@|KQWP)d>v$kmX7vR+4-Hhv%ASytVJJ#4cCr&Mx<+b
zrZcP4sNAS6t6xd(l*MepKu;?q==?^WXXuutg_H8lxg;IhV6^4&r|H-|OXy05cV|bo
zN|CKnyz3^)^GWf<eDdv5XN&=xUMUuJ+}7B4LeFU<mAM(dJ6uEWvt^%^@)_j|JPsVP
z<QF+YnF2PMZVFc}rpz<Q+t1#g630t=XK&o&jkG15gifdItV`ttx@=m_ob_ub1-m$8
zeqW&O9=yHIXx6|{^4aS@aM)?+V-~nXM*;SX-1DY*m25PMJ1M$#=v%U$<-iOye-YMB
zju|Bz{vhct01?Q7H&-&3bR_bq4e9j_XcDHLzMdKDozgMXSt$LkyTFE9S~j8iT(FM{
zj7P~2MQ@x4K1|@kSEM+vh*}>1bmD`gnc=AA@m14n>wmZSh_~g9t9jB&%#Q}zhnWas
z6E8i~A4f3{BHM<)vE$pV3jt5fYAh4Pb5u;;=hlB{*8Dx!cvs4C2t`UMCKApv{(KRf
z3)b<Y?W>RPo02u}$G_7d4b@hzAHda(1<+4C;C^Fo(XbJ-ty+jZRrilsy9wTgW!Z!^
zo@@ZH3jc6ExYqTTJjWs|Kjc_O41CeZ;8-#9G2@twBg(NZV_$=d`E>hB0sqnf0MaqL
z{Zs0?_cHxR8)IHQCO%3^9Lg9LU8Q)|$hHazb5u)$cxO^bJn7}i@->&kGf2=|00KaL
z&v9_O3-y^*)%X2OI^pa#!x=F&mh1#C_H8S^+;?X#g#c<|z7zl}#<LIVZ+$;1vW~U(
zg~B%yXc+*?)Cx*!DCP+?n9RK2qfcGdNb~eUzJf;OoZRmvgNqTwhM(}~xO!j6`n~@K
zSwAKTag^>GO4j-ON{0_ktPvMQP7`U$;~}gQ+sY*F&ZV2A<%IoO9Tr#&p`}B-57|Bs
z*NI8S%Xt8-s4ye(kp11C*5SRJ5fpJ;+U^~a6>7V%j<h}#q>Mg3v$d!U;;?w_zdu{;
zF*p1<C$BVI(5k*VOrYT^#b(#>_i2G*mC09r&oO+%Rk_qdov&Mjw8(>GjCAMUibCPL
zKFgv(rbi{GqC!Rv1u-AOQ;Swsv#VMc)Z5-pr0ZlS_1h8^BExexpHHeZIY4?6^NV1<
zYdkzB(9_;wMvdePIaRBt*%A_|-}(qqF)PV4uiwILSS-q;lf_;WDUz!bvaju{@CTDD
zPS#~V0B5vk)3fx}8}GM~>_Qy<w>zC-{4}#)-UO<qL>&hpoywe`%x6vTPK}$AwV#^B
znO21e$~?_lS@pP=U^gv8RUhsrJ$lRt7S6Sf6Ysz`BR4B6w_KjbRUb_0zF9J>c4j&%
z6)bPffAV{{8M`0KB|PBbS@CoJ(_L3RqLK~_X`GnDZiQ7(w(2|o?t(F*V9UVI%?kRt
zfPNoPfA?s`S%6CrJlSY*oHWD#^yh2vqc9VkwR!a_|7_@&UoegieArgi_)p7!`DY(0
z4}d8Z?Uj-JKb*lJ4R8uA6eDk}vc-RYF#mS}{6Aj+btR(mO{>=*xI_SHtp}8U!;eod
z8~pd5tgN>lJcx@a$3h_?5G6z)uO0;1hXQ%GVc|UaJVtb&{aSkXeLF52Hl2KuL^{fe
zG{`_5IDPwUAe*8BfF2bg-DM@*(DAK~K*v=-KQq>lqW!c!)3nO<@y5H-%lkNn13L?v
z63!;7<EPkuniV|nW>gdG)z3UHeZT58DKU)AXE_Y@_oJqjw9jSrpWnNQj&C14R^Y;0
zxy|(4-`+XqDNM4bSCXyoZ&GWg)QfzE>(KKmapG-8M8;4drhzEW6)gK<w;P}f<Mv#9
z_RzYf+2Hp}t;L9OUIxZh@2qC3j{3xL)p&)PHi{$aJsAO{H$R#Smh7u|i7OOA@EtpR
zv=_FW_~P$AO&L-ID8vSU3O*3d=O0XU6y}A2+JuMZQ$*#*r{j=c(7hBe3{H?}gjqm*
z)NoqhL?c-UiLclh%5QS|;uj#Nbxz+IG}{b#gHUviLOaeNNV9w{PKxl%MEegnu+h5e
zLcp-|E0KDXeRX|ZRQLIW-Pc&e9ou>LyZ?%9*sY4r&xQ3{7%oeiI7%k}8sMlM?*Yta
z2YyWYP~ypi`{>nl<YKN|UX(x99&{1FZ&~g$qglXTq7SSC7q{{tRZGG%jfKhF5_zkZ
zG<iUW$fK!7WlYGVrdes~u?<uvl4V-rsNQ=mE!c_l)<kF$CLQAg0NE++F*jNBT#id4
z<t)F?6l4<Z4VxHGxu7YFiNhkdK<k!8eXKN(X<I}jBh-~qB{E#X%kz@Z%Z!zYJ$f5=
zJI|-_U1&zAwUA2Ze7e`_)2LKq6SR>{vpGbBhC;01Wq9an2O7hed=tYzb1WC+R!QOA
z*^=XW2%JReq?=?5`ZTRi43VL9u5{h@XX%z@G_mq%B<n6?#3s0ptly##A(Z-Qw(a}Y
zO=HGS%$`oEFRk3TQ5Fnj(ZMG2m=jM=7kb20X2>O_EX(}eBYO2Z8;BMp$voBczxGs{
zZ0_^w_ZKHAEBccH65Pp+<7F^9bO!y5YbT374<#(ma1S~dI_%<mmj8lY)Bz8Q^C-I;
zdq_4!>sDe*?Tz)Y2e#uww+g0N*xLA7>7~AL$kdSRSs7L;_COp~U}4Cq#LiHi7)VSd
zy}K1=!jt}l=lrz6fNU~Ts7LY=_S<qehjW5s(Lqzrb7l9ykIZQhA$`#u^xtxA#_%w{
zraONHW{ZCrm|Y`Pt!=lfeWYosA9{56(OaE<m7mB2NHvbkrA~Wj%FaQrI}KS|Q!6SX
z!*x-QmS2~L15UO>iUkVfCsT|#=H<=pwRB=oN0>-d;z3Wf=2xg>q4L+E5-1|E@#sA}
zd@TDJTT)!R6ys2`rLr37F?OrROfP867h5$tT9PMyu>I)fQQ`gMsS=#;#x1*!9Gr4)
zN>b-(wrf9xiwUD3Sn1f_NsddGVw8%^Zj3{|>GImCWI^QiFGTvOQ`uPs2@s+15J({;
z?(wFdG1{G01yaQF`&T$I822VsRsEHVEMINahnRAT*-1g#hvi;a`{<R0zI>gVn5cb@
zXHEVh^Y!~HzkXDwj|Xa^eXh^^U)?gx2aF>9iFf%cW_{Vd|D6vp$KZV?h{Y!4bNF|D
z`0G37)ZiZSTzTXW_+Q`g@B9UK38L+Od5>3Q?)N{qJ#!rk3YEW{8esjGVf%MJDcKG1
z9Vq1$F?&~@?2rH8QZZ8C*=N7L)hti8tX3_A|8U(Rw2qHWFh=~H(fY67!TF*<BY-9~
z;;&Z6-*B>BRl#~*>K76E2QN+bN_cu|7(W&^onvI??B6@-r8!iHSnc-Zu<|hA20tEf
zNG6L7@HXHtTeKY)+4Q#`$lMiAd2|*kSe*yfo>3k~=cp^EQc|Dd-EAxBATUCUTkF=#
z|NCbn4Y0Kx9{3}1px;&8Z;M=k<~02XREwa8(iwPXs)B~vLJ0qB(chSumxufyDDiX4
zHe{1Ffeh<mv+B@~-IT`(_JC0PI;FF8i<x*94(^(CodMOTl}W^RpurOvy1ShDA+1_{
zD(70ajzFZ=%=^VU`p}}kpxfm4$vqxqRqNkV@Z=V<;Pt?S$b8dWQv!mKPy3LN-YlSm
z41jP1_4ee{bOEz!b{h#H36UJMA|L^ED&`%CBL--iCTSj4ogZY=ILFz4F-zQPJK3P?
z?}UeQ;5xBtVvY7}h92<Z@=>CBZD)!QMneBI`c06s5x5T=>mNBBYX>}o#hZJF+Id))
zk1O=f;W|c;5^<p*J_<x02|)JcN5rA4RAKn3l*6__DEX=$PH^w|c{_X!1;P6<B`!%2
zz(@^Wi%AdubL7~cg2_7)EoQS)C4qMe++4<#gBlU?P8`v=)C!2<dYHf{q>9fQ9Dvff
zraRw58{Y<SxeMCw0E{%f&6JjWHQ=6ZF8gvE`f1x1T)YU~hAjYbCy#Pnm%QfM#yF`E
zwHuX8>-(FM+j=H`AvDbSo>&}KO-Z2T5_DkOXuLXCTDc!K_ugJ<F7h#i>>dDQtq7VI
zIMxT8qG~|dCh$!oG*We%w5jLdt97&()Uvl8YQF`I_qB>FV2&*y<JuQ+W?!Gmt}t@@
zQrC|`ZXt9Ae4Fn46%|W+HXcGt#~yH*S;BscB*TtZpy0d~1~4E@VE*pvgFcDSk!j^B
zK`LMaI20pJuQ~*9`=5XSX)GW~Ud{}layDch)xVEI9sp0=84A83yg{G;$!%{W<pPF5
z>q!m-v+XZPeJ7umHF$Y!@n~@R7kmqHSoz#OR0(f6zx$}Uk}ybRH$V%Gu`&?|BF>I|
zt&ydsZ3;eWT;_8WqKz!b*AW4$6c1ihEb2ZARcgCPdX#&-sGHK!mTp*L4_;2MiBp_)
zd~nrIYoDWHWOX$R%Wrci$9TmY$}qzuVA-T;$R`08lV6HT<>P&dUcy`V9zVQ*v=dPs
zZ{oIB8<GMe?h-JIbtYBJP=z#vS3ewSa1)v4yEa%%^fyHWcY>SUa8rEzVc`P85bRsC
z!{L-tsjT5_{W!`?GTa`GUYdz^F?wxAH*a$im4y+ENdZ!bv|dlzfW_2c;wKg|1lZc~
zJD1!K<d!_n%z+t*p~vqm`X*)3nq`qkK#*9-RV9S<2azXma8;Y2mEKbhjfzOfNTZgO
zNx}~R*Wc$c>}J>sY@OCYzb0D=K!n6y@)*$V17gFa-1O-kwYR%x8UT|N!NQz)q};L)
zfv#o&dSj56*WUXkkS!kZfdD2(Y@bAUr9NO8UCOONSdFaA(%6^rfEV&h*!(=*Y~j*u
z)1bhBisn<z`bdOKtXXV`@me1AR9+bKCNIqRD%a-_{j}H8@KR4qjF$En5VU_I(CFA0
ziSn}xb0te|1?><P>XT4W>+W@ohUCTqiRREk51*ICeKyQpw5SVhfLl`eTxG-F%Q)RA
zBrFQGaDzVJ_{gCGemw&I<ah)#Aru$ws{}b^UIU<#y1Nd$bw)s|<fYszxwT-3x<DK3
zEJDWW&pOWy=FSbruX_`EXdXI>zm^Q87M+2<O^>cU@M_=Nk{7D(4%ik25ZE`_cYLR0
z6!knU{(iDXYLd<(D(~(F<oCAkg<wv`vRwfD*H_NxX}eq0`7&Xx6GFqx!k3ypc^4%d
z$EbeZEdmM2qxRqGXeDE8=P4N?0V+eldy&Hwyy$#->C&Ccx%yv>01Q|-eOmQ?Wq9Ge
zP%XB4)ID8W(PT8j&vX2-O`FM~I7&}~TM9ywFh54*kD{^2VYxj**5*|^nT&x>YaX8<
zF?8LSqQlvfZc1}x3s=;2sU-U9@z$1NA!y2AI<v?(TDD0pW0P9YosGPU10{=G5(NYg
z^gKHHF_fYt<EuL5buWJhvKez}GAj-RdjzgCQ&8()s;)T7vKT*xy*oHCLG)1cme8DI
zyLt$9IWM$&``|<$blH+80hBD_BSS7c_kcd}W8U`=xWnd}R8rH}hgwge^e^LyiXNPi
z_Vv<vcTwTr#oq%oW$H`d`M%=!M}#c&LODB!nTS+E5tJ<Nd&xpuNss!2N7mJ^_pFmW
zh)HFk!n+~jXH7d@S(fRGXBwxy-$6oORnJQ}d_u(X13Cu^IwsQg7Vf(C(fG$ls7{Se
zLSOVAmrj6@8ccX+h+zawjN0Mwh)8z<9JPS|88HN9B6MYY&Bl9GI%p&xyc)VV!nDMn
zZg322mZ(<x@kK7fnM%<*zN^VU>*PO;(jw<&kjy4h1|<r@@sMvMXRey!NE^tbMs!}Z
z2V!ckJU}4yQJve<b0WN@kTw0@95kSm81`M0g}|7>Qez(V7XYQ@zLe!S*t&O%1E4y;
zy2ES^-9mj%^u7WUyM{(lO@oTd@0CE3a|LaWiNnZog`higdC-}et8+X3U^4fB0Gd^G
z=Br^WR2Ei&%*51SS(hEL0&kBW(EI@@bt0u6=RIcPA1_ww_xP{$Pgqp#q79449S;)D
zZ;s_~-vx;|?VHKWQoSZd3kdDA;mSNjuvOQ-n6Q34yIu4LE*~)0qni#<m!Vo!k0cZS
z`^P#2{Pfa~?MwcebR3gs7*PjLJDggI@aT<Wh5M!SrAUC%4Sr=)=C8cwUwP3MjE*4s
z$j3#bjeB1N<a|eO=h=k0GuM@2I%k`6M`KdZ!I12_3$LVcWFVB+Z0v4RFiUy%5e=z+
zb}8>VNOe5eP+MMUk09SI`FHjlBLX2TH`Sk3@<AtnXGHYEEKorsxPYBW;N}vX29@i+
zqr8$RZvWLJ<I9Fw@kb^gJWbzAcWu~MV+{Sqg)V`zbhn_TTCw=6?>!lr`qeB3dat+!
zeuOQ%b~vt0Wp>w(74^w;EE>97sbK$*!UZ+v;pB=hzd3aOOR&`eCsSrs?D6u0g4Abe
zX)cx}$pzC$148qt$9EH^Dw@8%?mwQp+>1a&$38$vz20y)-z0dL(i6dS8j#nVCYd3u
z+BgFk?xRdz0RHR))~9(DP2hwzxGpnpDVscjbCfmc27XmN@`#PgJ3tn{(8lfKO=&RG
z<_`E&{V>3J4@#V9(l8_F9C(uWUUN>l@#mr?`34XKYXu}K*WO-Ln)Sx1;~CCVb8!v=
z6UD`Q9?mgMLBkAaJgHcn>?#Tba}uJi>G?2njA2J;UI}O^p3Kf0dgR_Shdwz<%9R%b
zJDF|!d%t1+uHqwzk>=w42H59KygrGqX`X&rtSXt8UEIy(uN9o=KhnX8$;PrYspNd{
zIPk64A>B=X=qnVJTFr*inunjIou*RVQmC7IQGcH(spDRHXtwi6H*L#nN@3sUm#ClY
zaxuAVkWHH`T+aO|V^$UGa{5Q(BPm~%YSG145{vvhZ*?WfZ>W~4yRbzGFjFUIf%O-9
zP42PYmZaN~-bkTz+hqc-IkZNPEZ5LAjLCRZ-%Ql0yg10eCr>Yhd#?U|an>MR=YePJ
zQSD_OZ_rsE!89d3k`jLwfYj#+b5G7j06NWu<q3yI?_Js{4S=MxJH~18hz=EWOy=a;
z(3h#5C%DBr7t>jQYr`iL55iZ(PzE-Yj}qmUN=@}Zu{A&9Z+SR}nz?Qi(@vVc1<&)G
z>q1z(VI~)>o5)I<?;x%hoZVF~zA7#?XZw-nRKz78ew3q}b3gc47jGtCrM-^oXcCL?
z-e(aZKEvhd6vE)U=x%u%E$T9AHfQn@`M^nSCMNti2@M-gmFhp|2%3c~UhVbYE6_1V
z2y-}4^yLuWo8iU%b)1-tB$X}A{TB((wUsrJcrQccwukwxpjC5hXpfsLhen!j@I96V
zV526w>fe!cD8JnS!9dMZAI)R|4W)cwXD1I@Mx=_Gt@WdeA<%aE20sSZGk9Gz!J~W*
zIrW5raY)z_YJSBEDE^?DmcWOuVb(B%yD}5mxfb-9H3sh9Vj#3kL20wFUM0m@P4p>1
zN_Fc2iQ928^Fg;Z%81v43pP2m>DUY{jXZMUCpuW8)XQb^z+sph^)OJ={`j)ISF7jQ
zv_YPX+V{4jHhmwOi7p=C<KnnB+N0n^b-@ezW^x#ipW>;9>PoWnlXI8-A@o7X43ARL
z+dY3=%i9bz=#~cPiTuvO$vF7&S$?JSvWZug(BUI!h285AM8L&Xs>=X0up`IvjV?Gt
zv|PdVK?KPKes<RNRcEm}(#)89V1$7YKdh2_AiXJ6m?#WvuvU$mzFm)vD<Gz%z1GWu
zvj=!GqiNOJ(})&9D1FSX>e9}=i3cj68^Y;3xjG@$-ZUwg=7MywN2eI<k3m2-pGUdL
zrb=t%Twi_MOdFhyDp*zZX3c<_Gb?L}hl6UZG<B$&TtfY>Kfbir$8tpmUus%FSl4<u
z4BpY-Ry$tSpApb~q7k)vG`4G+>i(c?%cl{>p`l6G=#JVJ6j~zgPb5;@DC}1;Ev~E$
zu8l})k5~VC=il;wiXp$8!0oA7o&%@X<FEPZ<TmRw<dZBv+C4U1J@)&bv^%!NDMD8S
zmo*C?^X$fY3GM0<lVI6NW~>vc2YP~v8T=Z1wDYc*l6=q&uXna_bsn>RuQZe0P^+vN
z@RR>j-m<N;M)dvuJB;$YN?2A0dT@;_sw60FQ#mvq`QmRy>d!sOVevnLxyGWD_?Q;2
zU>kW`(q1Y|eyn2gZhgMPK&xYUS0M{sOW*Xqr_qX`habLg8Y*J=zH`q3B{gPMk$r|M
zfms&C&+8|CW(v`IH~Gky*Yf@+=nf^lQ}425M-H?+0i!`HV(b>s?HR|#F_g-w`f<C*
z<kRSyDUo34ESEA)+dG)>_-^ZWPwShEj^<U1@e&J(gLc{5Gg?zg#)5IPJuUL>OrGjY
zuJC=bUvsXYS^k=7f;QY(t%L;fzg<iNfb7GTYFJXNdY{3*1l*LPz(-W8zTKw$P-|-}
zgB+7-e*oveOuuGHIEr_+CEt-;pk|+dOhw*HQAa9sM?3&;n_Rlpd4MxV9G$WO66IOs
zxkn|=LAWwtPygf5m#*j6#$G}Dok#B*Ke>Im_1qB#RiMHlw;(YyO)EH!3n5<h->|Oa
zFz_KXKI$O=OY}pCnIw;$Wop53HYOx~&!a&%_i6A~A{3zYNEV2e5)lU8<MW=*vk_^m
zx}vo%;F|%rXPoHRBQl!_1}H}#mDVz5o#npJIOqX+@x);pK%HBRbeH!5-nY`_bMXn*
zkc7giqz7O2M@80z3B;#%$V=GUmlRouccQSq5)*+)f&F38H&~1~Se>}8hIXGF$$QTh
znt0)R(@GL3h8n>IUTD{?U)gZ5oZmnCS8`8IXvvieTX45<L<XwNxTBDEQcIb9_u+fC
zZc_XeLsKzi&5=Fjass3Xjt)<X1ykW)v*&WiKjzf1Nm8jMF3~uH#%?5%p56P+WnrR4
zGxAX3?na0=0*`6F?bhcpwB{P6H5IOGi5!HKfVJ)<Vn>`vcxv;KmB~1+$k;SN-f?E-
z`Mpa!u`5I$h~TqQTd~Ol82*uJkXMgF@*IUK&T>!efKr^3Y&0|4GvkKc&!hFk$Tzt?
zhif{Q5AmP3857cN72P2Vqh1w)Xmr*&MWZtf&ul*nwHf9;m+1=LEsnxv6FivTD{7uY
z&;Ar^r)I|l3vD&#?5A3dqpd5%ctqq{xso_;%ch}*`7rqI_MoHxHSH90onVVzL+ZtH
zxt9UP%^xMNt#{CxgnE>9n-h5G*&b;<C$Y+O0^^7So~;(gjStz8K>tL|MpyQsef@`p
z$u`injN_}x1I}G^TriiWqe}O1fv<KcvWY}W+Ex`#jXyXmtvN1fPN_H34Msr*<z{;5
z9nndrcrSgMo9@d`g$<XEao(r$A>Oi$b87BmMk#=3R7VQG!8(=?t_^sk_T7(`%Tw{e
zael9%Z_(YwNmsle)W0b)|L`R<5jo1~5CU)xw?oRJb#flza!$NY${gyplj{<IB42kh
ziOcit6f-6i%kOYCi>^RqvoUAVZ6hM3y(?s9$2Q5AJCf0*D39JmmDl5bu9Cmgj$m=|
zL|UJ<^wG18@uSRlLiH!X8ys+y0HM1IJys2lJfI~eg>(YDw;ozsL{7nOU@NcWn~;$J
zZ1)v)px+NPKsHM|yOp7I$6B3?tCa%=Q~60Q)(3&OI?`#BQmqyX9EGB^C4Kq{p{hCX
zZbONR(NP7^&W*9=W4p4KuayC?fg2#v*Q}faX14r$r&QQB0Vk7J-Q~V*SI+!MTJeUw
zaf6tQSrv3q;M~~MH*eO1#cp$50u&x{J??HtVDtv4m5=5isC=hHcGZtuKGX^rAWRy-
zwL(1-t1>TtdNDsE#pkNr-{v%SZg0k**szPD?xMWJJh(D%B8*w0ry!t-7<$`@TF21_
z8l5FgX-qB_T$1CS*!4~!SOEvt^D9|V{OBg@MQlo;$2)Rh6nN)H@W^c;W!H)bxM<4b
z!qCM}*h78WpCyoLXy^s5kKQYwB36tC__-e>d0ql76<tfyCff5O+~Tji1Cg8Ipg!Nd
zvm_KiRd;D6wWDXMFVv%Wh%mX8;V?6!=k%vO=xt+$vPbpcd2|R}yQIJ8;StOsS|3~(
zr4iviI2Gb}{>@V(ub86O-8MFTZ2Uv#)ghryny2C7K+<zLgVnFdwrHT0RIq(;7TOfn
zCbQUtU$82X0Fayw-VzG<@_>3*ZA$8PDn;S;Jn9DCBr3F$m1q9pgs0RatRXtLLmc7N
z`Kdu;W7(HusPzT!p4w!hd_=QGEpQql*WE!$_-I3qK`TR9#Ct`3MeU*xtG5XBmM$H8
zqmXi3H<t1uftF@O4?5G@aPgIo#X8@ms|_+9jR1%%tyF7~*Kht0rL%DF1G_7E)BCti
zcyz5}ItytfowiE(4E>)zew#`RXpT@S^;eGg7J^er2oYV`o|Omw0?=W82+wfV@Wi$6
z0N@MjZVI*sE$ldGy!DJ{0MVgo1zO*R@*gPr%sBiy9W6Hml{-<&exw2yh)AXu;A`3R
z^pAXkOmNl0G*tT|jWs?(3)sV&1;9rZ4L!6z_7nj>5B_%tFhUkNfr&E~{ih}*S4k<S
zw+z6E_Eyxq>dx{FWhe7Kg5YVy1xr6%6@*oSMW41_ItxdZCZ~qX?h{weld`V}c!HA8
zkPW$S>~A2ZT7B9R!bKuVt8H*!gr)QPx%@zLsw{}VR<HYEFp;F$<DH7y52gb8F6yS{
zN<kJ+q@yZT>r~ydR_Y9+gPLd5_`~fU?CE9WNPXa%=#SEMKnV)gGzbHJ5U6X+?Bk4D
zTfQlmpIRywPI=LEVS^xF8{6%U(6^Qd;^V@dfsxMLw=CdfaCvkSbPUdf&_0);-b)uK
zT2`cON^mPgi48~_8CFUv0WBcixg#44aBoUg2#+j^Y7FQ^g{*bXn0lZS0&JD*CTkli
z)ps{2%{cpgrlxsUz?#fT2s79t?xmx+%DB<_JZF^hR}>STxuxjNQchw9(FG9bB#c?x
zC_{WCJP~?u-_6#Py9`HnNXqcf4Q^z6;BQRd0rrgJ>RJ|d=JnyC(C{!KI2+aB88?;*
zjzZSayp1uMt0Z?YVRZlcH=tf2VbwN<f>6{bZ)Ue3oZz(SS}q(aJ)7iz5=K3BhEb{l
zzyS?y5GA^MxPwy?w4n*{iEXY8b%*kI@uh{42On71lU<+-R!JlI0CH$E#eFrGJnf3_
zbF}VAzVhnS3E*bCMp3auU4lKqJ$$$KWCmdfbW~b}GEOP;vc9<0dm1P@j-HNmfx~5$
z?E&4z?3e_kD!2EwTF{5_1@PGA;~!j+A*@M0;3s-ygMt(pJ;<UVv-szLN9|z8_&-`S
zc8E(o5n@D4RaU*Rk{tO<AKlynueJX?^yf^BkgUEk2U*_}wFY~*?v@$(GvIbSmmld+
zCNRgRWqk&|s5wFNj0Iq)`%IYTv}VEjhOJ9P-izqdi`8jX>p$LYv}VJ_2;hxR55FCC
zFoj0w71>vyJ~gvjdspc=oTG6l{^BrW7*3>>l<Ay#>r@XC$Wa@xr#lIfj<%6^yOKdP
zHJ3tbLQSM`#S`|%S#2znd7|$!shaS>YjK9d00>LK_7n9Y&|N&h&Vh;P-qjcqwN|S1
z9i-qxcuVF-kGhV3L)5!Ml_8XJzzR#bf~(d3?%deq_02np;KB23P?VZMkv^i^Z8#})
z!&$s3viRbNkt4}W;uWy{z<u8fY~1~yB3H(62IBkRrM>-YNzw1`I+p!O=JnUhyyu-K
zP7~-9jC%r|QL-mNiuvkYL`Kv}dY|&W&}B@e(75NBaZf&=kaD-WwxyJI3IT1j^P9P5
z+hjug)5(fTd&FI90AZ@JkprQYfTwVo$j>3T|Gp2YjJOeNoO#39;h5ADRjfF4q*BFl
z|5myvIz*M6zmuz=C38muaWH+0Sw4t*p~6Ff1wC?we@ATWc<?NCJUA%-lM}mQV<855
z!b5>by#`zN5!7dL%t||Rj$Ywj<q-e6Ow#7tfS;C+78gq|+!s9%2JYb1*na&>Vr>cJ
z{DB;9C@fcrPm-NJzaL}ydH&@?JJq*0P4~b_`h4p3ihCQgmSR@ODB|e<AxC5lo|OhF
ztLNF&oK_;el_B|;M_4r^zn=H#BN(;QqFk+H9?tU0_!}Q$-k|v6!^S4YzZ%ZJ@lbcz
zp}a#~OAsQnqyK3v$zR0$2-sYC$3Gm%AYiN3@qZW&+yNBjmpy$%LW%v8JO3Kpa5<=W
z21Y8iuh4q`(N*ev0Cuu_B*mQOpFH-;)cjvu0y3OWKx5=yj^0zUeYd>GzFELbi1DPX
z#*r=m_sWO5KQO4W^su9!^RHgH9U&PQc}R%D<#RM95^(@VrvQnW(>Amjepkt@q}M>O
z(&O>qAg9Fq8W<&d)S#y4e+tJk=f?vFq<0^57fvd7O)J1s9({_lmFG&c%^uHAc%1Mw
zB!6`=br)6$P#%a+8=><P2)AuYJ)8Y!4&)A}(!3{^XQ!a0NVf0F46emY0CGr8QQm=k
z4*+}@!FJt5LClAKAa7^~b6qv2Trl-nMN@stDtO(m6>dtURpRNvIfN(t<VKOPnDD1*
zelnCSEjl4KvE)dz-irBdRjRs-mWeq8hd}lhixvy=ecX7)Xy{`e!V93vMjvz{PEw4s
zgoTdd+f<g#{ck{srO@2w{$!_@*Oa=cuth7$;uWzf4POWt>#ZHmF3y_8f5?T#nm;iG
zXc^cexgDqSFRN?*ju=S&S9gN8PSk0?eeD;c`C#({#!>Gj@RSmt<upBBkkSVbZk-xA
z{Ot}Wm82XL*?^;UT1@gMCu{4WI+|LR3pL?QN*>m66;Ce3JxxXWN<Y`-1l6}=Ap5_$
zUpYYd=idPB{~e;8ybOTX@+v;gCJohYjV>smkPx#7IZMN)Acr6mRrmQWy`QvXfcHq+
zSoS?0HFoZBfIMj|D)KaC+B6BZyh$}y^;w>DTpxw8=_7<y;PNocX~d&y5?~a1d;b_p
z&N*nxMA{hB$v8zZUyzDnL&vAQaPA$iItWs8jsk|q#$D~^N-eD}6vOYyjZ%V1LYEs8
zlwAsN#H3%*5!BvbLw)Sk9EKOG+k-)(37gG!10#0vfHo?JLUN|z(;bUTSq=QKua!6s
zLs>bi({nD)<n9U9qVJ}BRRt_QiEL)I_K_(;Q)HDXE6St5^TzVoynnKPd&oWsPj_MH
z4f#<syTUKq0G*8h;<ZjDO}QeJ7u`T*YFZ;lEn|oh(hzKbFX$XlpeEbrN3(I7>%x8k
z$z{LoB@F`eldw_*?#O}Uk9AJ%&peirZz&{i>Op{{9`Np#iKn$;1p(L!6$XG<Mx@wG
zKmIL4pUo{ulN?h!{>XbS$)L>194&J8;L@DwNEfIm#DV@taAlnJojbvy7onkUrl2la
zF?u|q^!Wy+2Lpyc2XFc;7bz@wY3FOT;8&+fJEiU;nD6kpdBF5yu)8IVKnT}GoftZz
zsHA$}0ksVzmBMjb7_>mpMkmW$Ib6i)Vm7x}PK`t6D|7V~%9VGi5bb5d?5!D$1hhnC
zc<T0)2$-;rBOHa6m@Q-@<0h?wD$=zwSjv+$f$Sy&;fYm{nZ?Sg$KOD9^KkqhCrRrU
z_ZcyW3+*0BEwAyv^`Vlpt_ephHXV#{B)Q)|=incmXiED~7<5AOC$;Wx-Szi2Bz-w1
z3x-t2t^eqQ<?Zs1J^;fH9NJzz3y%MThle-C*Mm#IIhfdRnKZ-y=-o+Q?tz(5i?WN0
z`{(aYI`Cu=Wil&X;pJZ)vn%K5fBRrTXTX%YybWHhEAscpkUbTg!ulxTt*dPD-yck+
zeTx1vvA?wd{&z9_KVA$mUM}HDtJfm9M~GVh_=R}rlM)ZOpP;x8t<v5Adk20GD=O;!
zqBS~2Om;Y2iMS$y4!7UiRP10^anemAby7Sl&xVZE84$c;Rg8L20iDtS<lk&hEPD5l
zj!PpJc){_%h>a7cY4)ywyK$<N<GVzie^d~^-BS2<4C~V~KuYOt!TC4$c<%@NB<t8O
zb3(7)&%b&IYBF07QLWpEw5tF`TlaYIO5}HCgJ3diRp*NtN_M60e2Df>j2fn`+vzJX
zW$r@`P=oV+rr;zrJeB<)5kes-eLBl{<@NrVAJp7#P-2fqxhw~JlUCh9dp#H^S_}fE
zLbp^I<Rg?X9q0sy$VI4zMNzC%pKV|j9sLg9VIY=&d<`h1;*mXVHS_>l<VR=f*4;<h
z0YO*cp?+-PJlc!+W}5dQwJe<@cb#I_Z95(_;qUhFmEG5BX-$0xb-ukH_OBR>qeRkK
z3hCLds}<j`YW#97#ST3IHOQ|?Anx9-dQ*uHO=?ysuBU50;$l8WJ7{mBOc^2^^RPYy
zcNbBzm2FdJ2QPU=ptNblUB(EcZ3gX~qUrez^jgxMDKrPGnl3L5tjzu=z@h4Od>e5r
zopx|g;lSK@U*PQIV8pdB1bjB88iwjvUvZL%&nR*caIzbbi;%IS0RVwIl{v>mM4&a{
zQK%gs^;(?ou)aY?CopHgGuTllKIS*!|6m<kJY%@@YuWs|J3f^b$&9zj$RVgjK2+jz
zGFi)!*W-q<9VA$3#cJvErrAu$fWvrCZKb#e1YdS4NqK(nDg1_gz=rc-J4=$Si1~zd
z?bklPh2epajn2!7+z)$bzm^--m<=Z{u6XJR_rX}MrXa1w@NgbBtql4&22`kbkED2#
zV%i{bxJKr+8veD{n%u^#pWpaj*zFmdg^ePZ?{2T!m6vC@5*-qSy$V&!e?c!gfPn(T
z*^@W6NXv$BXY5c-kKVc!_P{<2{~k-dhVE8+P&f!2IG=j8l5D>yu|myswtd*Mw>U|T
zO<tF@ZCbGX3*1)#hgj5nUqj;XoW|0|I<Ma*06&Dd7HOfYi6nKbhapEbKLZUSF139{
zjP6R_UqRZ!Uj}LG@oU$ukL})<@QbWNMyoMDitnD%9hplDnS|_ON=SEQGjnP2dQqw6
z*VRE#W7#OjNOHah&I5}?khoky-grRup$;08HNV5A*uM^&z5x<g=h@|R7cFfS)np5N
zg+FRGJxU<4dyXdkWG=NN3^tM{fG8Ug*Fj9MX_edqJq-g0Qx1)QBBM@9Z@#QIPGB=_
zOIG)8O<6-<VS=z#qAc=Lmlti2R2QW9|Hq0Ff8__@d^e8|TCxA(yF~d-oXm3n-YMHC
zM8&@QS8OAHoaN^t{}5Av0f>FyMe3R5fnRw6s{iHefUEhxoSlEd*;(y|juXLpb~HL!
z|Hp;6oC;d?fd>i5N-1Pr{M)HmJTx)_km}^?bB{Ve$vW>$zXo}n&~_Tf+>m4INc*=R
zsBRoXZ9Wd-U&UuIcj20Fj!vk>s5M0IWn4)`gArQT6SFn^ulDNd5utkj6$4tgvIw%$
z^clGVAT%kI3Xvb68kkeHpAs#LGp#>DRiM5xQPs}w0{B51X?ofrL@PG5(SziSszdqn
z%Be5Y_Ca}~W;lD1251%N;5N)|ju#~}21Q6u!0997YPp_#<{wd0g=|o|JE#BpgShPc
zeyhpv9|n)j{scU5VnORX6tp}ZAf-P|Yo1rH0uG!Za;OqxLAxT(5bDG|=2;pm^I@(;
zvhuRLd9e-6V*id+BrK+V1lb;3`sTl46%9=&Sdx#GE)Qhklly2_Mj5$CQS=OuhzJ*T
zxstmb+N`wL7u-fu$^N($91N8$rv@(OLw&CSR7di4Q^see08>E1>;R~Xr(Es};uF=1
zj>+kuh&|ul0-^4MjV~KNjz=P)pgnUSdXAy+9icb#U2VYRvKtVj`kRq7VOxt5DDJ~l
zf&0rWcVxUM14K`_rUmDy%dc<>lw~n@S=J;rBeFxpT<agpD>|kcBHv2)$*h&?47{*B
zFO}DOk^paG6)<=p0VL}OifZ{#zAsQa&5Gt+-w1Fe@}Q&xZ37XK`{I2LJ3NCs!*dA)
znL9R60nocEI3?_#QZWsHvT8f<^xk$RaZysW|CJvulQJeLB>x`L5IW(H7#@m>q9doW
zEv;8FOrZIKHNNrym7(?DfcBlZqR(L%t8pkVi=|_1Cz>?l0~LfhkT#&c!7tnyeiEUS
z%40<{R8*Y+5k6%8=2r!5-fMCQJ5+gMX=yq>>%QY-72>I&9h|ZGkEO2P(+@ef&+Nt#
zhPK)*+qW+=Y!Muv+hua&))wvXijYHA;X8OZTLT}7C1!EFTZo>zKWy9HTm06exnPbv
zefYEOklkB{v<Vl57VX*M5+*Daj`<jt@<>m`SeXHf_Zkc(^Y4EsI8gJdFy4`H;Q;nB
zH9b9R(3gE|)0)N6!6JGWzWL>P>5J=|X|}Z|xB~1z-KH(aX0m*z;g|9eHdm?(kq#jP
z)(JD}F4B^`6o!JWuAeLJ=tJAa`@GEw$_EO*+>^D2-d($x^z{cOC6hoA{IHonN5Bl|
z_zUW0nFj#At;6yA`vCTJWBY$U5j-1i6Q(WqQZ8h$@_jw+5J0=#dk1K%J}4Tg*u#+$
zAVq~+vldIm&W$$;m6l|s2;8w%fZCWdrDf9@-{qH6I*!4HZR*YYdX}2>?O*@k3u%=m
zZi7<7bH+A6zFt%%%Dt)j{3Ql1i9d|QgCclGbb8-L>ibBK-C>gGK)rLEeZSOv-oR+D
zbg*n3K*)J_Z)_@_&2bqsQ{AxX`U{XVbO-uMI1&e%gswER+L=Q-b0zkD^(k$9j+F4A
zzi;in(;0rR|7w6!J?TAMh*98mY-Rdx?uVe0bg?TEGJDUSQ_>P-Vj+K54Ul;%5h(N9
zObxZ?T<MWP?b*J=n)WSt##wLKsaE6!mEDXyyWV^oHZX+20_%QGE61kT9cC<LK`cVP
zWMk^T4o2fjm$dQDRim*M`+@>$spq^F$D;M)#~@$$9vU&dxG-<q4_G1#aG?41p+m)D
z8sR#pT|#C#sIK$1Wtz$+_K4VjGlJ$gMG>Ao!J7Hon00RcvG&Yf+dpkSK6}@=s|Vmn
z$pZ{3mJ|{S33_>%0Qi6P|FQR#0a319yMm%PYy}lWQNjQvBm_hT36l_zm;pgLL^=l~
zhEh~eT3V!Ih8RVW2EhPP>692$kPhkQtOxg2+~51|^M2<$KhBTyZ-|+Bp8L6Dt!rJ^
zwQ7Jb+nP`cLeLjhU1-%b7wl@?Y9li4lXUZ-Q@IYEIqWhXpR$ZTaqUIsnNy*;!<c??
za<|7CzSXymOsg}z(gQh@?V(g)L$(8z$rAA2?KKsaKL;3@6E<F8?bNcvyRH=PI@fjR
z!B=RQ@d9}IortdJi$1oJS=25WDfQ2S(R9Sk4`k(I)+?(`Bwa~WHqJJv%5%GdM<>z;
zfku(nwg^b@j#D2+t|6oid3E7d{a1IwBHuE@SH=fX6*}_eWOun3-PRj=xYpM6F7#wh
zwwtc(NqvrU@(ZhGJ@bD(d5SG4ZBI7UgfdDXE&ci>EX%u8?%-xzq!h$;A0a?m-Trj-
zuHelHy(N$#V7`2YVvi<d&suDQ(A?<-NXcqTR~LtOPaU^$0Km2Y;icH?6QITHrEl%v
z4Ka$)KM|gXBdnG-VEHgR^W6LjCdnd}N7|l0;=Q$X2Z(HoKETsn+rs+o6s7Ztx+H1Z
zVQ5r!DZqBJ_ucZ6?;(P6#TBtpA;t>KO*@c52z*=C&#AFzD!7JyFw~MYjIQDAB}{~R
zN5q`6L}{-khbra(<)uikA3O)T3JSmzv?cK(O$Ih2obaj(h!59+wB+Bee}!93_-L#l
z!%?%kcrVT^#8Ga3wEZ`E)yguXn3@?grUf?`Vq;zj(}tt1oXUcxy^~MaRCAWnTMG}G
zwPrK7&jQJu#kQ`%12*UI0XNNeKra}31e=FGxcZ(mDk%&m^q(8|03y?aT#NRGlD$Si
zn$>J9%Y(Ejf7D!ZdO5vX-J#Jwt&Vgl-nt>#*VPKh1eaB}RU^BS(3yiJJI9Xv+=CvT
zh$nLgz%iF&A~&IozohzxRnv`PM`qFssB@?Ynoq<a@y$u?u!r>S4NjS0ikcs!4DJ0!
zLGolw7(YOKne64byf~wAjp61@>?Ja3`arlljVcX|AYyrc%5C0ePW#eSI%OkJ7&>#9
zdcJ@<AZ=+>F0dY159b&s%99*k$={9)@nC0PU(Lnbmw)cr)NDcK$Z8(lZ|L#2)%?g4
zjZe3~7fmS#TQDx~)#`B`TR0L6?t&wkA*94MvG$lS*+5R2<eluGKOm1lU$LjLVorCm
z-hvl9MXT}}2($!oP3m{)aPwtD#0;%t<Dj@)vt>BbBrDeD4or)S=j5R)S|V_cU0=8@
z*bO%kLTUEhpx5=U%3upar`ORP-$LOdvJ=!wPO|+sw+n=2rP-%YUMg}LKNag?;J=ua
zI|7!mj?nc)17`2#OiUwA6e*WfeFhJ3&hPnSLYAMJVBUWtHX*TBYP{kTW}BB3sh8p8
z8HK77_2@*JXC1U98sPdy6*1GH&Tt0%MAf9!D0)`Cd4~R|N`J|Ky@QQ5YU|+g!Hkrg
zz)v1NYPS?VvykcOR4+S7e9U+m)v|x@NcC&`gq<Nw7bWI3m7d5)oTn9UqKa_1wiF+v
z>7ZJrPNER+FaNgoaTtH4nGWn`_qj!O{5m#eQO9p4*J_p5M#yGYd{n&0X)BCxnQ0CX
zYCHF2P$U%^DZEi=@Z1bj%O?47_Tx0D*A|lR(n}QqiBs!I6(6a#dyec;Mk8QKcSmyd
zdmvOxPp>^$>KYvPSSwo6as28pQdsFt_Mbk`3Wn^1=j1h4;h4s4*0{mHZ3nM12GiRz
zILDV`V1-NyDxM&#NMAbDA-=~s6)<U3oQ!2R>@s$;u=VhYUmM}xaPGscc<xb>c3_ov
z0lB83+S!H=Lq;ob#1sY`gm&k?!$(QMHqGBY#+Zy3PX!FOCD4VU2QwNg!O&-%C2%!K
z@mPPHM`;Gv7uH5Jz>huXxeUX5Xe)E=(pZ~{?ZGpqlB?rutF@B7FGz}<#4pJKpEa|g
zn<6h8LzM3U>fWa>K>^%{w&v^%l3RiuI{h_f>!V9kYHcbC{nbxi`s!*mM<C|~qn5I9
zAwZ`^_S&|#Pjk(hxl|4fg3i_UZ1UBxs3tEJuOlZ&da38mYvyrHrQh;ChaKunTiO0X
zE{v-{FAYsL#Y_S1sA#7LN{?_jsHT>wL@R7m$S+?qa9iuH;TJ^ag;c{PXD675?kW|n
zgt4TG3~*Gk4?sH#`{!hvd7G^|%Q{HpDN%Z;;CZKYQu{TSIT=P^!DPGgHtkob^{KeQ
zG^l;#eWjVi>tww)aN+K&(04g8NG>Fv8C<~}GFUm#az^Oq!|-aNnqHU%gA{qu56QJS
zjDg$--OUF;Z77~?mlaOEHHzM*flZh=LZlGEgmIn@dJPbYR=&*U!5expK>TgdaqeRf
z*>}4o1vfmG04|Lk2!^=zbG-wZUb6u$%;s4dbHm0HW)@j;<eW+=DwF69o80^0%IT;j
zcyc1x5oQ5{3r2-4=g&g`h0<ng=HGKDby`<cU!Nmu2F?py*%2LJ6AoJ6h7bE0N_k4P
zpfEL`#0@Jqo?S=?M!iev*nKdgZyjnSjial`0GuAOUlB5eHi2r-t}C?aFGJhGKSr04
zZQT`OpRRL5kFs!gbHPO_j9Os98Q6Kd2+7Hc-Q}r%dq0`r3~28}E}t3Nw^~GAsp-NB
zhn}+hG=De$QasxhOcZBxcufw$N>Dvqb)X;ov~7z3Am1GWgyIj{t)g-ithi!Tn~Smi
z9Ey(y&T*h91`iVIqR?fWy@}4vqI{VIV$h3}p(`k7uH<JH?I#b2IcDNPkzlpUCnHhp
z1LriMh6VzPr!cR(edKc=p|Qk0Jx~+=N~ws-*$MPsi$;MoPWe7vZo7JCjj%~5GGB+{
zfKBXz0q?<^Y|Z$GUIB&>{s!j~<Q}FD?*2oF{iLoDyRB97q81_~AH&y4GFq1|qz+3Z
z;vb`NM4Au)x67B8w5RO}t-;=MW~9<ZBF*Sfi6V&=tEVD;&8P3VJGMIUR}`1b7w;!W
zc;OJPfQxA_)~XC(?&|r2DgG>DmwLWTS=WH8EVM@N92<5GaUcFZ3i3gRTYLlV4)@;G
zCh3K8ogfSrVT&9`m(QnG%Pw}Oa1{`bvb0Pyzw_{*b`Q^nDDA*L>GuOmp~SO3xzJos
zy7YjLcnvan<CUoBudDEL)?d2EsZ5xkTHp`;hVg_Q$4&6thS-`-7s)Z+3%;}6ICo%w
zI&3qT5~10et*sEo42=^n-N!P#wukP9ja`_2Q(Q$rGxXTfo(n?vXV|-5U4q7duQ-ZK
zOK+8q7ial0ZJ&em9TylOT=*S{CYUtTM?s?H)Vh2&UTF&^7_ib1%b`ap#-^VsfmQ2p
zs0LD$0_D<I{fqiUu2zCdNVNAc{eCQtICaED<VM{~A-|hfRjJsqJ=@LQpWFFUW^*Z&
z4wjM*3WFOPquXTQ!Z2Uia>KGSJl_^~yNXtqlJqb25L@+!D_5nZr&nPI!9ieH%NQvj
z)I|AYIarSvwmCLNg;&FQ667MDZt5@xWSOFla!E~+w`upu`ADk_Vz{+FiQOj}>@*G?
zkZ{YdH*L9W>;KmROFkAaRZRKy-6=dvW6txqEtnl@aZW3JKwP#D3%|3InQ7tUH;^hm
zL4wbHJe6zV$wMTFmX=I?l=Fn@Zj+iG4mcfHQA?34K<pNJ#qO`|Ol!`VB$SPpIbF0o
zWtW#pesNgPb~6$mOL<*D0*jMtUz8$c8JRX73H0GoVHIetfW5y`7UUIM1l6ZJYip<_
z_>0|!9w{GiIRQ>*h<3@T0f&uqd%i-%w<8wom2~yvwqS3pT(pqsZh|J#hAswOQ)yPJ
zTIMZ3#B=_9e9#tp8I`(Z*SWFn%rCypFgWhkjDLAug{@Nkz4CljU>o!Oa;L|tQjj;L
zJiTsDal}WReyILr`BbXzjnPlJyf=o%w~=lo?2Vnmgh?yJj=|RW&1y+0y=c#j2_&Xg
za<GXj=o5Pu6R+<m$<PZx&*WNmv|uUCx{C{9u6$-5y~Qi;GR=>Zdn9P0=!+Z4!t*?>
z7aC8V)EdCc)si$d#+^}B1pDj!#lueO%p!PT-^ZCYIjw0e4Ql-g42^W8ypB?ZE_-r)
ze-ZEep2>l|d(vky|J(xN-+uH#FEd75O`+_(DV<MF^x9~Z2O~{Q#`rO&m(pYfOzyQ?
zGB=)VQV4AJE)(&=U!mbmlVe;z9K38Oe4?5P9fx<JHy=t>3V(iV71+AI7=woDX`K{P
zq`~s1;p<et;tvP`OCSWynJdt*{o9^QNeS8GbIG-Z+U#31;8fT(`tntR2sf5!1jHJr
zKp$)vHE*)n5olK&CT!MJg$tsU_+~xc{;ZNLKcG20sqi@+%AoT_0;K)U{2V)IdkZ{i
zIo{A9`Sp@dyuCl^LRx_D_Zqxr46O>+KKhL6fN!dGvi-8S#Hsf;T%HVmziJ8DbMRg7
z*okFlO<J?*Dah6?exvE0h+Pp<I9qRYOJ36owt`cxvldPS<)k~qM(L;v(1PWj*c$h1
zdm#B-LtqA=j%mKmEhz|ej~UcSo7AepD%8$^;lTS&DyozUZ+S7tktc(VY1hD8PV2P%
zk>(85ES>vc#%B}O6oQvLVK04??&mCKJKS?i_B#?89X3j_0;v=?(jy@(vOCXO7f_^*
z&gU*OLt!X^K?;Srj~>~xbB5a6GNQ~_@T`byN#|VbfU%IC=i@xck|Gu*UO+wV()GYO
zQJrQh)Ac9vl*+&-iW*woT<#CnyZ3He#IjI@{9siM&xXa-&L<VbxfFL~_Sa=0=ciOp
z86`+F?h~FB{73*_!1BoF9lBS7UvkV)O$%5EwlzGFY{piaR2cs50!?;5=-2P!;UpDM
z&rn<$YAXTgAaZJA6XgPLJbx(Z!5+uV+mRI*_vqA#j{tUc%5)LK_gK^0lo^4-pz|Z}
zs}^MiNWy{Wjs@dHlO|`8_PtsW#0K^TCK0PgRTjoINqS+#or9Bro)yX|fM$>%>!u?8
z24IG0T3u|DM7Z-NTNe4gg1V;}c&PUp-}xj|3*mf5M%^p~s0Cc|pfh_eY|&PSS*cck
zsZwVOdOoXZ53J*cW6VfRN}q$OW~HArkh{mgZ!f2_?%6m<(;i07LzaukP)tBt85s+L
z_ERp?H|}S1413hpn+(EX{OtAQ)3Gg*v>A&b#6WX4)~v6P2-w6$F`m%u-MXc&|AsK$
zy5;5W^4g{Hvn<mc8V)|~J+m{hF?W!yR_TS50}>~<>kuS{HeY7y{CGF=Id9i&;I8X(
z*oeLj>!`||!dt$5?cme98<(7?R5?w$VZrzoJD{}XEB5;)rf>Fx&5ce)&Ah8HcfpMH
z`z6u|bMf*@?_ntQ`x6XBc2I1o-ix&M9`UB(wed>rc?7*geTJVfJbF7CLJ1wuLumYu
z4=g|gd?#SHj-4;-7(p&r(}sSWm4$Pqwf1WSr?~W_s<&6<dQ^fo%(@81z51j~v-3~G
z{YCKQ-c)0FJuuI<Qp2rk6*>@#VoxmX8{gM}*TRN3VWQ-)R7qksTU%MJA39@=8!iUG
zB*+0eWxhu%%7>sCiY6fL0=yIST6}rGGRX!;C?7vsVrEBwNS2E#HB()@#`#G2Mo$!Y
zg13Q0;fn;fxo0fm&$-2OjVFt)0YKz0JO5BJ_`KE)YcdeBn!?gOwb8=dE_<DH!;F)z
zP0Ss`#+=Ad-d@bZ%z}iT?z<=SITW^cubS?(N;%SVORoM9N10-UypFf|&tREi%cMGF
zE~^rG2lsDSNwD=XQUVq886ZGi%=f*e5SUt}G9~y<vzKPlH)6wu%$hmG9>AysLizih
ziv4%aVVDxslRi5R)E$b&KINgLVvpaI+HA|+Cgi{OT0F!Hj?g$Ue}6aFY$bb3xYOHE
zsk<p1ZwYr}KUyZAxeyY?q7^|YhjzM7<c$9me|B?TAs|!_H7?2s;-QsyutG*i94#=d
zBrctbq!MXbP&q45vXfrQkHIL!yqGOi@)0&eEsEC+wHM6h+Y22>haN|O8EHGTMjbNg
zWBRpC-J)C+KZ>qOHhtc-g+n3QXt87fl*vy4FpF}RMw&nw8M|oRnn?fRv@|<<`OMy^
z!O8=RIt(is9UgJlpm6(vt`Sr!Lqq{n;l&SQF%s5G<TyV+KMUZjCY<HM2eg{luAlc(
z29#SOciYQ3X5WNSm-sKEt{QLW&azk9=dbYOM>H2iOF5)x3);~FMJ6U~1n5*;d;&C=
z@o-QHCqUW2GT}Y<4F^y!7gi!@193ToFbnoH1z5z4!tsmmu{+sn%vb5_RH(ub7a|81
zj>Aeal#3$i)$*m_ekPi<#=GJ&)mI2((^BT);dB}pngQ*DCtAKQ+CL^vi~tM?aRGzN
z@&MUADpK&+_m{xoJ#5ci9Q`h}1`qukgIB<J=>>qg5@STX(q+N1wx>r<dZf-NxA;E4
z(0|!T+xJ6KwQA}4KF}5EL9{@lEg!ZUK!^Q{S2gx9P{*9MO@!zA;p5(}r!O*%o&Wgt
zWJD>jx+=yTWO{=JA<ZGgjx&(Q4ctI3SPj30?1yoI2M?A;h2vM)ug`z40V|&C04ocu
z=rm<(7gh1N(^2h6S1Pa@v^p3)3;IBglOEGMB&9sJPA&kS<iN_4B1wxj{zkTae<q4t
zaxY<H!c*P)D(n-5$(6lDYpU^Epw=5GHK_Y?vcK*0?hUI2L5>bG=8xpO*XrBKe8*b?
zbr3hwCNRd{w#ywUT_4rV`uaey<_RLvbOc^NQLuS4a7Q#!*ETg;;<`)0dQQmv?I+Of
zTL9!+%J~on8+-=@q2}&uM71olt|F&AVDwf5pofl|e|k<Z-J%Ou6-mR(`7)WNInto)
zFn!a0p&LP*ddWfe#*6p5`ZffnAMqrqrPZa>DAX%>F<D9@V0P+DOzJ0S26W_X?qhM+
zw|~?Qi1)xe!7=I@b9PI(LHFZR9;<F5F*VPK)btteRGPirXdEX$yq4fP+8g7+Ix%;v
z)whOGiz75o7s?1CF0QbtjljX-$gpE(QKeFrDv;hlCG2d}ZDIcjcMu{M)(^bWxvY7q
z_WmbeK6MIv{MzWNrKRFb8T1<ZpwII0IDh&&P2u^E2ds-f2V5mHLr}mVx(FHDTPpt-
z*5onwGH|GQI0OBZk!1H<z0{_%`8RwcFJ7{VK_?489+FLH^wuv0(4_KkSj05sV3iHl
za!kwDYafdT8+(he;HQ-v*`&-+XFxuPvl8u6XHVlM6*oY9Kg1<s$^=IR@&rpx(ETB>
z;Hh$Wsi&X)!^3-fr#2*0L1L7?J658^DqlVRy^KTM>+6Y@+$J4V0+^kA#Dz~tX#<iL
zC!?0TEG|_-iKD;|M!-JX2vXVVC)^DH_=Isn%5MT-Z@L)%{`C%AON;FTAX(wIg4<0;
zmsuGg;jK|`taX_yn$JqARZhr{&<snlwQiy2f8+5MW1N2R{$8uMaLh$fO8DM(qj&j~
zV|@RbV)=gmrtJ7W*hx)57FP(l!ACcS!#?VT4ub~Zk@ED*7Xw##Ci1b<C)<UX7NC-3
z0rfjl2Q79~xj7Ah73enAthMb7mRcqLI#94=sq|m~M=KIF)tDEbTjBOKIqNF)>z7Ca
z+FVJ66GHp~Ql}iAq!a~~*D0nc#%fJ`IPktX??V67l*yvz_$}h~)6fE~YWVC@+NPMt
zG{Pk<y=nYbHsqN$FdbB=4U0x=mIAIG+!|eB;Bq3@s_T<@sa`py(?_IgwjQEEePR#W
z%ZD1*sQg^!#zsq}wV=~{_U=Z2S;kK#j_+FBF#xp^+cFBIv*XxQPU$s}r&aABChbQ6
zW_4UAUz+LS&h_wUoPAL-we~Au$hghoH-adHeZuGi8rW#-<6g}$j}K*#UX+3KmUm0a
zxJ2QAy(^?WU6YHM?g$!K?k#l4h1rT@^~ZEj+DS<Os3iONhu+o%^RBdCAOV!mtZ3+r
zsz>_+OQe6?z@Ho0q?%N0EWYa4o^8%h9>}k0MhOyjUxKPjr<rg_R>khcT0Y&}BYQe%
zvd_m}qE~4c$O8>;v?;v~PET2NpH#vooDe*31see?Bp)(H4IFHTQft+jLgr#tXSUuu
z=yxSBb%LcO)|TxVb?Qas4(-vV*HWfYYgW!>@pq3NOr`4w4Xrt{Rf|bJcK#NXt=a{(
zi^H*F&lPa<jiQ24NM$I`3j0uHn-um-<3((`gL@10An{ah2h2^mw)w%qu_WTE=><2c
zR}P3EzLOZ|vFZ$mUjq3-#?Htpw_vL3&v$6|ai%vxE1%ZSDu+0n33Aci@-94?gSpcn
zyYAQ}eNZ2cd>o_C-5IT+lG?ioLeV8;#Wt77^&s&F>Lqmw<pvq7727?q;i$x0LkI3>
zopU?NNW|(aFFPQ1eml3kh`$_1Xr6Y~#5%y{-!0Qd=1cRknJ%h_%JT5mFUrCi*fF(6
z6H}`6$8M9dj7F31FX(ze<n9Q4JfkSp5ZjHVgCx38_a&7#c3B;FqZ1?gBz^=see6A(
zWi-o3*$=B<Pz$CczCF1i4mBceI-5Fzw`vpoIYW^L93M}GIn-Nsp7vv;*QJ7$CGy(X
zB@*_{F5Fh-ZM*$1Wei_cIFxo__G@a4)k$pwVVqtW*jS80>oSM4M7W{CV4QFv?~$Ij
zDu!rE>eqXe((>hneME8DBcF0J#H6=wmPc*I!>N(2qMZ7Iv4q9vAxH^L8H1FA<SM_3
zwGW=jnrH?&!x4&%fxh>JWeC8A?3UwXGExd)OeH`?d@wO}Y66NyT>@Nsdop0jqV#6~
z1p-^fJ?)NdFLuZBS+vV5s8-1^`jjE1CN3G%hfd^bm(dc)*?1>X^<pb7qiBZ{Yoc7p
zjrN54p&$9zkFhbj<;hjfG1(DFZbjgC2j6D;>kSvnBu(iy`-ISYHdreeuWU_zSq~a*
z%h&gIwGgq~=IuEt84okY1s8d;92;bhz4??GQ|d6Nascg+PIJZ7dB-Q{52VF-r{Rx9
zJXe(A346mc_tt|Vse@kfKF|b{TF`lW_OHO1t_lx%L&4fXyDb}@7qVbwsnb>Op?il_
zb}29@VzSPy11~`Vp68^IO&XnXJa+^tLGp~)fT^(I7Z&Zi2dCA{yjYJtU=c^RoDUw<
zyi&Y^H7<N=SXme!{DQ>a3@4e^OktIuN^ydpoMxUTRQ5pnyc9(<2t9AQ9lkT9f5`$b
zza|OrmhHAYcZdteg)uH2*lR687C7l5+Ev?R|G71*o{aOgLiK{COLB(9&YTpdt}jqR
zi_~QQihZD%v*ULB<s1e5V^nbtvbmg3l4<@tsr+^;VV!i_#bf2<>z7#n5LAfdFURTx
zKEAuO@#ce85S(I7)PQ!wIQ{zkwhT&C>uoBF*%rlgE?q9>)!ki^K1mL;X)rqgtCYJj
z<y#X`SG_wDaco5ji>i@k&>AQ8>jNv4H#6AaS=klWgrRury-sQd{r1IwE@XEa#P}^6
zUC2cmcI1eukVnZHyOczAO1JzL-x|Y~$<=XJ`d?lo9LwIjuI3o|BJFe$VuKh2QWg+X
zy>OW^W3<RXPz*K|4919fJS7NQ%%)oY(l&nMApE$NO_c0g0K!oJ;?6NnXHcEYF?{al
zI7{h`!xem5`ew1~uc7}nNb9ev<S6{FL(9`YhC2(M!68|#{XB{I0RzELl|)8jbK6rx
zOGpcXO*{YgzJK{6+hf>6Zk}6bcx;F-{<=<T`k<FU3NwYcCTFax=o-M<SpehkzJBgH
zXLYU2y#)AIZ-M4MLKI@4qq*z%d#3R7Q#O2Z5CyD^{Zd8@|7uv^cTy7D-M+tJJazrU
zJ|`K#rJg_q@Dr4uvhwp!$L$O?Jo{^;{@ts#_b}6DPo9oJ63h)#_~!uF$?5?#mHOxW
z{n!8V*ZaI2sJPOKD8qk0LI3*eKfib5U%zapGx9t3`s=^B?f?D2tq*3<3wT`5w`)-R
zmIwc<asJ2Oz23uCMSta9<-eKa8?XBx?v%|E9;NA?9Lj$=$p7%h-yh4pV}OV~rVIRq
zt!|hu|9Bf4|4-@@JoE+*qu;R6fBWtpD!=>pR}?mG**|9oT)5Y6_%Jyen{EHmNHpwf
zduDP4egD};oNvQ(?tKam?Tovf=&$-8^11QFR4*($zMZN^EK<AahmjdJ8|^8XwqUP?
zJ}^5xF)VMQ&GU=LgxpN8pA_V)UD=D{7Y0Z2bhnW+8kCJRkn#7jV3-)UUR~k6HW#|G
zVLO2jJ;@0J92%WT^V{7V=l6n^ZiPpz+H;J(m__fx7cKDg)S9jyjHr3Kh?~cyKI09)
z_}inhI~$*$-=>*oHR{;xaZJvnYy~~96Bcmz{dx{!l;P>&F*WYgUKlsR_}lypl7)#9
z)nuf-VNhVDdu``|ESuRDb}O2ZDp9R1bX6u49*R@_`3?ciq*o-tSR7z98{ZQ|Ly6D_
z)|jjQ{Q6~dqXy%TuV)Lgq+DJ3SVm5H<^ghQ857%Zh4Y)1geI=i|Ge*bHY)0q484st
zXMdk;QM<r&yA*=KkI^F5R*22Yb+u|uWK>b~bp`VMLa`kV0hjY^AIqx;^=(`<Y!O?4
zCm}Xmm#~?fVK*pisJs4GE_t@bvWvVr#rYKhDRm+b@V^s&ykM4|Waoanyz$=P@v<Xm
zPw&_q#7dC;V7~~AAv3(-XuN%7jj`EkXSnam-0+t(QQH+-yf$ta?OgG6jnFga<s8uh
z@7>0?J|8l79}grSPLq!c!B$?C5xa#yB;IlGSLI)dW6LZ-Gk3@`>gulHKj*$z=dSc?
zdD$K9fPVDWC_YPDzdj9aP`O{qP)YGa*l0)v2;t<x+_^rwnqvt6A{FU*Ns{@@%_pum
z0Idf+f8<HKO7vUjlkBJVZkUN|{ZyDJ8B5TAh<flCGfP1of3&-#V}<wi95E;P<`0y`
zi*-x&a9&l`wLB#M+vi}#S5^mMGII=c0@CT`+PI~&iBUCq$RkCD1hF=tqKU+^sUD}@
z^W*VUS;LfDSXs7nKrZkibtdqIcV9<Zs&{#Wj6(8(@OL70<+%+c+c{v4(b3-kIucSS
z0%?vpf?d1H97>(sCmuRwr1W?L;e(p~j+Df<D0-bw&rAY`dAd>+4h(k{iI6i;UyVO1
zuP=n;<4^M3?`sv`d@77EScFVNzC6ykdXf@^Nl(E+hd1hCB;(I1xyh?|uZ&O?h5#P*
zZ=6q*m;af-NpX6?saIr*v_F{Hx97)hDkI$kuJBJ26Awd4KoOmxk1TyX5{(7STm&ct
zjSFY1rTt?bbsaT?v-xv_WH=6U1NGXZas5}K>`z3x1-I=ycms02YR(9)4h^h<%R*m-
zy=7jzE;4)myu4~`JbaJU3c~Q}QUv^>%fVYd;f(x+^?zV1gK6A1H}$?Ax#o7Zx@>JR
z^)T5ZtGmpq@0i@i!}8&$!0o$Q<d}uPY2Rw&SWjIpQ22UA!|HkFzF#8%+g{=(a>nf8
zQ!(q)rOMRH?`Cb2%mApa1hH2vAk0%-GJaoU4OMc?j2W1&LAW(!(SBkUDP;aNcQbdf
zRXr5GLM7(Ce&bTJaNt&#_TLuYFa`g*ufN{(>+Qe4VpFHuz2hXdrg^hb*~aDmpT7Us
z|FJnCrSKa2H-E=zem<IC59uFX1wDfU$!?Zl_&+<ctC(R`6ijJ7{jswD;R}(&=HFgo
zZzddQkMKinwm*me_woC6|Nr#LP8v}Cu`}u;od57$|Mnt&{y~%*jyIDywBy15lZ*Ik
zD!|?c^GB?f!Sz1~V*mZ<NY$WV+O?+zF#nGN#{WNU{{77Qe{I^Nhlmwb|9yEwpaxlM
zCV;9f$+CNp-8y^Z)RHf7U^t#wcAUEQYfmgw4}3h;tJ8NKIZA)7IweI)Hxk#et7_}<
zUyu_e!}rJSnHqw?_J{#rz_&=1)+v?2RtiF$CqP#30P6<}2n`vY(pc>IwGO<B>C!R4
zN&ixOdiPGsKYzb_?+t_s;nY_hww>?QgCAde^sr6Up}SX=m3Mtkx$q<sBHtW2Ddz1z
zPnDG~XEd^lGk;rSTuPqfScZGGsq1^Bot&O^vB}PZr|Xa^x+-tMi)RRBumpH#1ur^A
z_%<x^KCU`~>ao04K!ts*(oAX}TcOXUDnT7+eE@>Uu-Q#6E%Xh*;`H*{U6<|-c(7xP
z`c+48UqQI0_h;TbPn-=MMgCt0!so3maQ>T<OG_4NtDqr|O_J%N^GWBA&L@A5dc8&%
zL6CT_;~jLO5m<6M^-i3Jm-huU8NLc5mjyH*H<DaKVEg*rpswgyukLjQOZlrnucDzX
zpbWSPeHLbcl%)PLy#45gyJ_bPx)Ed=2RxMS@YuUAb^bcRowqk-U2Dy90c(oB-0dyv
zPf|&bGEbe9^_LewdCdaA@P!Cs0%~G&F{d#e{_Q&<I<S+K>OUTvA+b7d*inivVg~2}
z+9L@fQ5Yh9O1fL&d@|`#=C9J!Ca*_y19b_vI%)xr?|Z$<@hmiq3!8)Vx#4dFSWiCo
zW}a17^&HWNE^0mch>zbg+hQF|eBA`0oOe!E)h$aPL&Jpqi0GJui^^YYIQgoWC}s+j
z?l+sr-}*?zI(jVJ`Z-g7%vmWvN}z7YB=2s7;=CbZ$YHC%gW#x`N1ip>=(_|$;iDSM
zD6>b$1lixY{I%&K6O!!!6}_3twr=1rd@tcT5XUyVef`(NNFXSK+cyGEYAwvxrQ<;#
z@FpMKB-H|FH_UH&<dlDSboh5z0ELMMf);ZDmjDDFnNkd=Eg-kpMiKkUfmd~^|AqX)
z2wlehck(xKc5d8es?;d3dD^*V4CIWQne7H;>sOg07k|e6J_dVJ^9{A0uE3ZD!_RML
zb3)>uG5gBLzh@H+yhtR3kT$Zk3PR-M8CETxY=&y}b_)MHMEmF(OLS#Q$LTAn+*Oks
zmweD=N|Yedx5JH8opQ_{zn*)g^Lxp!?QI8?4<#0Uj?6#nvx@4O|Mg@-7~s^(+&A_6
z6;NN;0^xI?Rc)-8$VvYL@GVl=H1qb+l9eg;XWW_HV+S+u8~^$cWSMEvrGxY2!no9`
zm@;~4wDogqR88U49}F-ri#<Pb%h(lj2*x1OwP2!bOY^Es{B`|QkYp0r;v9GWs$(N(
zf7Ju2P!5GoKcwqw6hqEl<bl&{Sr+{m_qCy&y=-S$jYG?uoL?V<Tq-X$hKP9w7P~|L
zm(ono1y(YDN5=3!Of$JDVe_^t8Y<h9@{H`x4BLWq@Q?Az!M-djTbL`d=(;lddp=#2
z3_+2+Sq|^UDfKgw-Z<l7Tu@r^cE*K=>E|zdzWSGe0$b{)GM2Z=pMOrae+s1NWYpqS
zQsmz8R{TAq{BvNH*kDIR_4<C}|LvjwXCMCS9@1qXd}JWhZrmAu{q;Y6b({`9g=+GG
zedKSC{cjt}|Mo`=GTweoCL43J4F~A2qx2tN(cgnlp>$3ZmH$s3+uxqzuOGQoAe6m0
z^z1hY(tkQ2KmQMP0Y1g+O#MM5BmKwA{>Q&EAWQM^O#7+-(Wg)yhEI`td}HT^aN@r^
zVUXjSo~;TKyl8RYzyID}@9?68;2gttMd&U>Q2&jgdD%@j4}G@Y8w+ZVLr>^x<F3qK
zU=XaR*#LO@C0{?N{d$uB$*U??3M&8A$%wLtmwRM}@!;y7RqU<eyw+>ux#8lByrjZ-
z+O|1T{JM{Sdet^e30mMl#N))F=*^oqFM#;h@kIaD35}fBfD`UT>t@Sa0Ko<+l#Pyo
zc6S7LL)Bs0CX(xG+D<+m0vM}6hSMqtVYNtcF7TYZ*)~?UCq>Cc62HOMUVg}E{&tkD
z?=EaRyg<3E3D)1E;3fY8X#(Xh{Pg&b0dMD4%F+}@)Lc+$7j<<y`S!7}b$2I1D}vzZ
z6qxeuvlrO^>ju627?A^|3nUG;PQ5_U%7p?~>neF|$wTzOrbUp4vxv4J{k2AHU*mHk
z*9R%Sf{I?K@QWX}7B*GhCkogb3>;-+C`lQ|-*!Khy>RB8WTyEME&g05nA=iF+5etw
z2g_-j_#Lbgoe)x8+f@`Y*HH{ym`n&05w7XfT7Bf)wvQBtgN{)m%mhSRbjrH>j4M#n
zCwtRTU-@@J*Oj@>QJ@*6);A!0S>!Mn$3YmKLr_hNMk`%+9d6EuSQjG&gbeBBfQz&R
z*?4wCTtd-NV4s%pvX^t(S*y%{Ky&ks^yu4M@>)>Z$d(I@3;c`RcKk%oW@!}L!kVE>
z?nzK!G?dD3h-83p&DB3y^K5*>tU^}4&oO?WGVI<a4w%*Mxq?tpFT}FW9r}y_HrsVF
zPo?GdCdxkEc)8Ok0Rm!1j!;#@mrl_*Z$@lsfxcRF8BS%DRHaIptbT+F1T`HEL|$kj
zo2AsD#5Mp?ZXO8KUyFxN-l@K-v@{-gvExDW^kRdXc9EmM@a1IHeqcRV9}uy6Aj(R+
zVK)j=padG;gQd=_+U~*uLDJS{(Y56%M6P91L{x0QBC(L%oOMkk#xWNE<3`!IsoWxE
z#nSjgDP`ZCIw$|mPe5|R692b!S!oI!k%eE+vnVZ~-mJcyLnK%dMoEf-2DIi0uj}(b
zWAqw7W~3Gm4!e#Y1S<3IS4b0HfVcJgtn=?PCL89ze;oyF=Q9wpl1@2}Tm^_Lnt_qA
zh%U539>}qZI8}j&#?>XmdfPW<P+GH_Vzzy~>*@8UtvaqBAG?l;=B)wq_}<@ce)KQ7
z@+V;DN*@4$X@@qRLjqjlbMUS0l0S}^oO5jZuB-Ho86iaEoG+Y4$2ROaRr#<ZJqXP?
z_xo|=HMv`9W*c@dVD<MA;t?1S7y?H6VnA`JFBiX_S{M~cLBO90AhwkVgNyRlgM<5W
z7HiLLV>TM9OPB?baXV1KuPpV3Ua<f=$q&(TATV}26p-FHnGi2JHYrOR&j<|8<U#4X
zqY!7VHhxU(?yn73>Lev}y+|JvEck?ImhF{yylpITb%GX>QzIZ<!cD<?6Z^JYPb&mC
zvCHg;DZ=l#cDE&E+|^eI>xyOI+z}pcnW18x_?{!j{o9|<pTP^Wu2l=ZzJJ3#+nr~7
zs#|FH^=jMY4Znqf@;bwK8mOvWyA+WsbA}QQ<?o&`I5fdbA_%Sl2lxgsK9iBP`{MdX
zrWnv?L3@Nstp7Y{Uk$Sl#~L>;^n!7E9zduFbq$-X)o$qude>PvCOUvyt7BG#vRnaw
z_9u{XBHbR<hHNFFd(-?aWS^J?b!KH#)Z09S3<BLv=&zNy<eGv~`P1n%Fe-{fe*j0q
z3M6S037LSTYuTWs*x6pB;t5BU%qX-#d;$hzMIFT5c8v-m1s%(0H+hZhIo%s{UY_}z
z!`MEcN$g-oH(@903#9wcXgZ>92sy2*p4FY-A*$ztnR8-3k)LwS`zsVsGYuPN4HS*3
z2lA4@_Bxu2{FX_pXQS5HAPp%qx!-jL_VEXGCO&~z9^>hub6^>73cebGR3YA@aFXP}
zxV^?&?NFrc9s`U4alW$ZiR+mLtpJ=tue?L^5tR!4bE(#`i!Hg=0w3&?kDX+VK|8Bl
zY6%<X{;to#s?;z8{fTzDw7IjC$q&f?i4y<Vy1gDDiORDp%woUc($pX|fts>HtU!~F
z`$At;uD3jDq!T~a1@w0-5%G~)@cA5t3JZ7r_6uGt+FN%p86i}pC0aq;$UUn;o{UZP
z(5_00ozUaLaH{U&kts8Wt^qbR*xa;ahM{o1omXw>#ieHKX<4rnJw!y`H3?$*C`1^H
z{hqE{=5DmtC(dDzTvn#-GMK{Kl)TNnnb;S8|HC}_faFqpZRf?ta2}1_ZudH<lX(z@
zv<Mnk%}vddt`uM4_B@Wr2g0u^P-2@S+Qkt>be&QCP$q}~)K#lw8*CAHr9LKvJ|<F{
zYWT3eCuS#cokih?ij${4LOWqY0CVi$n|UPGs@B)GLj9%(O*y35Jm;XOE_@ib8`FdN
zoH>w+Z*ujFK9@bz#@O;)w=n%{5A@NXkGi;&zN@-<8m&^L8oSFF;X|k|Tp4b9S{oz6
zm-EPKV7a@%-o)wAsu%G8y3vj!17lE)Y6F$sXI8GMLTI@&_I<P?FTyl43Mo0sgWQ#M
zuTjHPI=<2M(E}laWrS98Q+-^demr7vF8%9{06J38lW{GAhi;B2^rz5P$_C}$r(#nv
z)X*ZLS?$O*k0{D$_2T(ci0vKsX4IbeEjVoX=6TXHFiw42QfsO^y*xBS>{mIYZK=DI
zAQu2le*$$nsqXhB(~-KJW|&qd-}5QNQAsRMoX^uD_(c9Z+Kqxe-S>z>w;{nC>BZ$K
zupc!t(q1SH0Ul=l`RO?Ptx7RyinM$4%S^3;20W?3WNKZA9lVva0P-1)p=ZVJ$AA*N
zY77+WgBjxti>2}7tcwR%fg9CrIfh95ty;REd2FcV{KV(r@#Bju@#6-XYGu$%U>G`y
zDVvFMte?Bbdu~Y&-T{dR``Xa=@}sO66pi3Q<#O>mYajNF%aN@EkOAW*!Pl!B>3Fby
zPE+{!HtAoBy$=SyW2uOX1=6CcVCNKoP|u-tF*oKi^ZW6FeilZ9XsAe*fa67~A0ujM
zdZ_t*lUFZvIk1VnDD=gW|IEXh9OCO_F4>_V(#~ZNwc6*RW4RyVV2u~z=Ml~qrGkD~
z)H&MYzP?N=bBI_3Obk0$q5WkCRJVH3kLQ3l$y?C7+v(aJ#J!_~4~J3Dmm5VK-<XTY
zP;zUOAo}1MY-uO9fzXNmL0#Ed?FQ4^k?swu)E8sFHn|O4YDM+U4~a`ePByAYcB$xL
z%H_zWih=2cp*8wLO09tKIk6~97Z0Rvs-j}l>Z#dZUisWooBotD_$YLV9-q%I%L)pv
z@hw+_S|?+6Qvt?{9#=^7I8K=Kt$wljIqlPEO1|hTpR@HEsr%g*fN`h+jefgqxAxb6
z=cXgtsPk`0>3N{rQp<N<yUDwGZ29ZcYzF#JugB+c{D06iFB&ua(I6_W);No;zfv1(
zoujOTJtW|BH4f;8yJI=#AS6|(OtcBKb{SVvZF_e&+o24^!tCLyZ_bkG<3j=~E|!M}
zINOL1y(R>Y-KuN{x_@IIu<CH->|HGqx2Za(i@7q{L-nTm+5MlaeKIFqJZD($yuM4W
z$3sT<J-wwD&+J(q39l~QWgw@e5O-vzOUe=`@$7p?x=V_>?B1WSimq4&ZTJ(UKGxMb
zmF!ml(#97Dq%M);rkN{6@YyBc9oRJ|u)}5oT3OT!DS28it|pML3r$pj4sd`)weFn=
zwi)5Ac3GROOT%-a5niF!?rCi)Y(=hOnTNY5LUQmrw^v5w!-adCGwOk~#}{6z@PFt{
zTX0q(qb_fZqNPqDgwby%ckzFt&fKF;fA%!`oJ{HBZL~%DNgr<+moq$7$vfYH+AV(A
zB1`!OR<y$Dw)!>?oQlNf+j~Z!sbLJE@h+t*C}bXWsG;9;Im|#S;e4E#WOKV_n6jH{
zSODB=%VS_|s<z2^9m6sx&xFdK!gZ_Pb@B;cwl!ZFvPi1tg3jQ%8EOeZp6Ku9EZP|h
zbs^}lOQvHKt877sywV=KRQu?v><}Cz(}zX6yPU*0UplmlN_u(WQolHr5QBuWiJ1R4
z=9Z@YSFm<K*`I_?rMW4WBMSY5hlJww?vYB9Y8=al6j7u{wr}_IzE0j%hO=tULC<ks
zO{p)#j$T?ya8AmgH)ZiZn4Mae#>LOsM!-Wn8OEuUSm#F>0lkQxXYkTH{xPW7C^L)N
zMG#DXL8=R-lo*;w8-4EtqMYDrhfi0qYr$Ew3JT?Dva$gBrE1G6=Y^q|$J=mMAE=jC
z*RmF?ZF_^n6F#mOFWIo<X_ojwlp*JXRJ~egKR*J;v@g#hv<7K^Zrb=L53NfyJ$iGk
z^z$t#7mp_U^x!oHtHvdnC!az*$oDc&*Z3QKTp9ANB*<yIlvHaopTa#tD6S;Jle$>l
zyR-tF`%-IZ?YMY(9Y4!ajW^X}7!J%>%TCq(wRr)Hq|QVdTO%(FvUGWnrH`~XZ=!II
zKX_u-A14Qw-h=V9c90C2#;R~IRmMm4V-X1P8F?G#Sn<4Nv!BenOeP_A9?}=#2hDD}
z-7KO?=c*~(=DwUXuCAE|MEE%g{FMea@lwvCecYLd&L-IGn~PSQiLS>AZmt9IoLN51
zP7Igkuv-_Y@_S(rk!piS!hC!PE$^V_C}`7#*RC#J)8DZ%DGJJ>l-v;<mE~IH{<j^M
zzSxr}oxZ0en#e>IQ%3TWM~z+(!C};-cjB^F5!J=uL*_?Ujx=$}BtHothR=htd}vG7
znuTf+`28G7pe(b}&e*)XL!`5ZgR|<hSm3t)cdtjmeMf9MpW*O#1?DnSYDhfMXOkVm
zv+fz57`G%Q21aw$at0-&235ig2We_$SL{nxoVV)DOJ~`AI4d9QH-vO7TMRr85`rqB
zMfc~Hl%VUNU!=SolVOnjGB_ID%xOd16jq@K;*qCF6QAAH$~G4}rWDR9`oz-*)GrS`
zNvrR{xoZIvkucc}9#jJX(#(SRo_Bn4@63I&Ft)Olyn;SX^lD7vF3-grEiW_g#H%XF
z#!B2u;KiM564Hi*cf`csH47!bI-`}Q$js=z0=`~-#5n>ggo~BEL8!2Z>k#NS?2FN-
zxad-LvbnI#bfyzf3772V6e@}M+1TU4+Le8QZ?;80=T%VElR@+x!OlWm+x)w3ZC{pc
z=_IK%7fnAVjdIdun(3l1jZOgw+f_A-`n)*zqQ_iuSm~ImuCFWyiaZ$ERIXZEfZohq
zl{!<o==62Y=dbJ-Y6DxQ_oM$*`^Q8yO7SfgkMI?eZ0g6|=fu?8F$~$wLQev=Zk|9y
z?n3x*_4_-)OaOC89UI(4UqidPwNLU@hTIrnKQOJb8M^1<KHiE`ox#gB8#mJ@qIRC5
z(<+Bd@CaGVyRl$Bz%BFyW+(^yCphD|7(7b#^kmCM=?wg=-yYmB-+J#$8LVx7%qRW+
zZwhzn-sG3iOR>v6<J=u0@0J+!ql~Xl(Vppv%KVR#7U*qM!0kvk;kClOMSBoXT~v7Y
z0hw(zC!R*5wYZJ2B`&x;5~Nd#nHs9m*+a)s!ncKS4K4RdQGAe7@mTClJ)|^7x#%>=
zEy(^%09V5`Om;XqTz%IWD=Wj8JK!;eGEH|0;5tcg2^ydO7I^Kf9F|3;@pxD1Vt|KM
z>kuZb#sR6M9ipQ$cW?*x4{^9B%^74B+CvAk22ohTt4HT#P!Eq6e|aUzbWv+qiR~MC
zZPm$l*ZbVeXrh?u?Rk(f70QXBvM#W`qP0(*Q;(%&Fz~fPOAnVwS7!HMorOzMXCBu>
zg3qYcVE-kKQ9)fvW-stwwu`${l`I!%dGUyw)Q=+OO{C3Oo`&Is#Ej7tgKWiUB3DXk
ze0YUpy#gr>$j#B0QfO(s2$V_IL@kCcdNaiBE%BH=>tFa%l_mvVZ8|I}q+Ql0@;T4w
zF$${H8I7FGR0>9nvTU3fzOnzNu+Lg+*0ug)5rr+DJ5WNVLDYDT);Z6c3R6R_F_hRv
z#k3ai%&#(V`9P*s^Y!~cm!Ck)0%bV0{O5K2)pN`4Eab?XA~E_zIVj)r-5?794CV;H
zqc)Gt1AYS(>8fNYa4q`)f9i0;-43)Oo=W7}1C;EOSS7!mCl?gE^kW;7S{d+?d){Y5
z8BgWi5to%hQVln8IYF_{-Bo`o1#Jnc=j;l(%szY&XJ(R9rg3C|R4NrH=KHfQWQ3UN
z=$3FaE`?+aPbJxABnHrKUocdb7R73UFf01Ncd<gl7!pg`%X(<kw_=cz%@E|bQ<m_>
zU((}YZf1otbRL$xoTbV<*Mtd{=})?<z`UQ{Nafze=D5VUBQ19C<O3aPc!yu{qTItx
zRQaWA1H1Q3KjM0nocdL*|AKbYpc3;jh8w6;KFv+jr7CJBm=eAlE2xK9hs$rYKJ%_c
zPc^@-2sqF1tjViMT?bW@RFhH)>0>R`DE(N<&uzJYC%)Db#X&%s9afk!d$~!|juKTY
z3B;_Ft@;z2FAwC!f}s%UL)cIrukafF_~~a7OT$Hh5_5S__1=jdU{j^jZ8Q{?+~m#D
zI#-s%6#M#p!)F2TGjQ;_iP&xRO`!k>Tis1~oqS@TM6NMA|BK&bJDd4NCZks-9VDX+
zS2m0NMxz53*k!5mt&+qM4U<^oSTv4Hco=N5`%?*xdFY$-0UwFW%Ft0{?&{SycT~7h
z@-ikGS*d_3T3HfL?IM|yn+TnJd#qQDSk&)2GEo+={UtV+lZ+XvTNm1GtDux1K1vP>
zCbABm+0Se=`T3v^&ija8M7PQyr@Mx@N=y3Jl!#@0IYf)&5B3u$TX<4fXsw=o@Ck9_
z&)glR>q9(A7%Vx<=u=vqVS0^dm2%miNf<=&4EN|U;NKQZ^F6&Vj7#GqG{nm}(5(`C
z7|4|eqFC^+)CE5Q0E>{fQ-{toG^+^AQSgXwL%j@Z2Gr&NlaUI0<xd$sz|8u*%PDh)
zR6z{c7zUo7nnSRgl8B_|LsrGC;1W2xw1I>TYp@kxT8hZ$h45oLm$Ke?u(Zmr3T9l3
ze;`>dmk_Pc91oUKUUhv8Z(FBYikz&~HN^5Y@h|31ber_vB$q6^<X-}i0EJ~!LqypN
z#fQBQaj<GlHc|_Q1&VHbaBSCrOlACDu-ttE;)o=Pw^8ZUA=X1ZySm=JlKe&zUV}KI
zQyXX3U5LvV?g_TYO>zitev93H?qgup@Yw75ul?WOzmD{ON8MWj+kNSfd|UZ$1C*+O
zdV-7>eJ&`GG=cCg_i^AAH!u`%`jL8`$w1Gua>v@sy=czVXgra)3B%RTU*=Y9$=#VW
z;XB*R7dle<Hb(NmEp8$@-6oqCIpJwaz%Aw_Sc{KU$U)@kk6D=_Q84!-*x9&E*H;uu
z-6)8Y!JfG&8Xd@$tgfcYo^w^9`5@LuRt-e(4$UMtDxQ)SU;*}X(I-z92IMNF{w(vl
zo(JhXHf1`_GBHo~9;aq<FP;j23K}XKd_j~|{jpAu5x~lEtf2qXKz-6E^b_V2sD;n!
z!s8XiA%h3m@UY^<vs5A<n41}nEd{iEub|<}uT6qGx6^mUU&1!dUEeWAcTlTbJ*fHX
z;uxcL3APd6=w!7%8>HGP>yhPV?3%KePRm2kET$DO)h--mJ@Vlpk@x-2)edFvf35rQ
z@@A;Jmjm<Mu9C!c1h8j6Q(I_J82ybEl%ri9Yb(KWC?;Pu<}-lC*G0a6>%!J$oZAg*
z(HNrPZU2_xybP`bX8K8A)PS&nv1C^>vDUS%CfzsRVyE2$2BSGNy!kJwqP;5<QJf%L
zw?XH9#A;0LMAL4S{yN)utCd(S1SN~Aqdvw>-be09vpleWrOu^-W21V2_&lDz{Lt;{
zd+taTC@6%`Ug&CcZrT=EjY_+4BHYP|5nQgiRl)RiAV7f`1997s)l&aCCy+Dsr~0gH
zS9^$ZC2zmR5tB-&4$%ZiR_i!lVW_E%?pOcYB%*v_)l=YD@NP*Dh(&!sl=lt)ReA4a
z!C2RS*2gsQl|0Zt9X>}|kk>3aBv&|+&f2p$_wJe#oh}^CeufC|Ut2BK5*AlX-i5H+
zo}XjiyE+~#fnU5(IyE5n9Xb~zn%F|SCE-G<4E_ajWMcpKxtaYD>*pAq?#sJTLM9WA
z%j{7{c2Tfm{2+2N-u`zTlP*G|UFx(m+7SH!%w9t?Pu#;~3_|*ZZ(=^TnGp@8CD`ny
zD!vC}m`sIObo0kl^A(fGOCPcQ?${eBa}XLn%5X^7<p4Uph365m0Jk5=QfHpdwZuA7
zn}erj5RK-bfWO~J2Z*^l6>#0w(6;ABm2A0Ji9kqp1x9GgY^o>a<)M5Ai`$XjOp;wK
zqHmor;L51&J5_bXe#IsO&^%tDCUAQMA@<ziBR7|nU*fWT8H*q2m`pq(4%yWwg-F-3
z;&nS(1m>$9>I0XShzFB51w@l|*CNZ*p0KM;9ZJ6%sNU-kg}4KaR)n9p#-pP&3<-z-
zNOq@N&^vWCl}HO{NgeDwIeJHeX29M{hZe>526ghCuujms4uH_B9h6nmvtg~b<eIC`
z6*~;KeAL0uU?sU*{~A828tMU&J8+6kINg0D8pP9HFB{4c<vuL>Ez(e)oD~3_qhk<(
z|M+x%h2i3ki{t|Dz>C)xzuze(U+@SJ|8nn0XA%t~?}PmYkVP?NN`Lf_Y_P<KH#-Sn
z4Y|0ua-e{BXDeZPzeb$>4^5o!b~-(|51j1<UqGj}_+NBtSG=khoUa~a*idqTOO=wK
zegypi$M^v-RK9*sRuC~7N#zfX)>X{Ybs1z={|Mx0q=_aw+GW5t7e;DbEe<Vu$F+s;
zu%@QwAqJ%fwkwzx>BkN<J9_}EW@SHg6Y;KFP>A7DT0qVLk7uuE_}stKFm5_7AaKjc
zE$t?*CgIQ%5h@H`HZ005=8SWWDO1*SDe(L2y4T}kG}88zSBTJK)V6Mj#9g<b#N6q2
zt<<fch%jW0y7Sr$*)?Nl>G#eg91`b4g{6lvWMU>%m{*@?wtS88&|#?hK0F;rMFOL+
zy#>P&^;@VsmS^7+FQf!`yCx9~^>P%L>G%o<4lm7+JS-8r>CQK|Dsv1g1FDw0FOG{u
zrMIZJOnnxKt~%r1Ew9Zz&?km}3?6p^+`gQDFwb@$u$H8MsQM-cT%QXxlEl{DUVHqL
zt?Om6OKB!WFGbNOQpi8N&~t5vv^g|ZIv|%RbL--KEddF64m?bK{fA_?=;-rC3*b19
z%@Gm9oa^5=(+?B{m&RNaQCNa@qkF_f?Z|h>g(GVKV(F-w?(qjRsDiU@-i?1kPcOUa
zCk}B~s+RZMRM6+xfl2eiKj-<O)cZ4fo|KNC=F?lSw>Y@{Z;yQ^P5Sv|IG;uX^q|p!
zZQupwc6^#Y_!z$f)T1wa0m_1-Q2esZW1ubs*DLv?PU6>mbO{0_uFiR^wc;GR0S6Wb
zAT`)B<yj^=BI9cn$i}pD=`GJQHwm94p{Fwh!AyW`4edel5#N|u#NQ3Gqgn*#jyR<h
zxq@->wLli}!-sgV_Yn(&5n@Jmj@~iHGK<t~JoY$M2{hX@Q0-s9pa)INJg#2R-+ugI
z!lqDOjG^C3r_(@Pxp=w<seDLA|8ja`qPL`(yJ(l%T~Qy-W<~INt(&+@$!+q;_RioL
zB1#D|u-F*gem3%F#UrlUHcMOGVO<;0$}k3riIv1r!d*9jRG%5*bd+)rQ>iu4U+sEs
z8d{VkiOK~=dVSYi7~wGO>do^@^nX}glzcpfkL|~Eb5noo_bm-ip(U|^32^pdrRg)P
zrQJoC6IFS7(iq&pMDrsk8$FEdH^;ISPd8j1g<4c#F=>8gp${k7Vo#`Cc4OM1GcM~|
zR043ym~eXQNATkw<zfY~;VaxcW<ur=N6A~mm6$s7891&Tj(i&y7tLH~y*V+n_Y~_-
zy{4DN-n#yaRFMt~VC0zNtZr{WMw~dHgZP~ebv*AlRDq4kW@6>e9>J6A=K=xBN1)Xs
zxBfV8M4~W7TB=o@ggC&jQ!QUsVY6f>v@s5@zP!kMsf>A0<S4#|40<P{s2+bnlABsc
zy5k(ClG#OL=)6Z9=^>4PSPc?mk6pVclD}hJAPzA=fE54h-pz8pnYFc-BRO}S__O%;
zgLd$5DDqTb&SKWw6g&@xg;xgJbln$>MdHwRLFnFrL^L4bc5-U|tbx7kCe5<a9|clf
z%3GA@OV7J;gkz5#!aA!|5rG8A;yNOL)OMkVY1iYMU$(arbUO+_@T@(vtxUlK4~FRZ
zHeTqb>F29Q+Mj918^Sm_BGx5}0uoz#BHs1plDZRd-42Zk!Mkn=7VK#8k<y?<@$WM5
zJCW=eNZK1ZQ1Eiwb%$=%Ctz5q5zC0vCh3SXj@<wopp2koMSD~@LWqUpqohb#O<egb
z#LW3N!QZd|BreSc^FO?_r*)xL-LcVGK0%pG{}K_46lDYvDipyZ!FG;8zTW*Yu0<oY
zV~B1Zp7;F4BdrqCgdq%Zv3GMs;q3cudHXf^&x<^_V%?$|DYukhBj0v>=;<j=#uD{`
z)6IiQXS<<XD1E*4DdMH-WBuG+SiBz$zpzFuqm{5*Tem({u8kt@8T#aU+$K379OX0U
zti0`#?#F7<(S4r=!O``a&Sy?-?-Toqo2N43&8N?lF9_mYAw&IkzQ#p+=qdws%Tg-w
z+ThG7fG1R?RdWZvV%V~Qf!YGPnAZImFCMbPK^NvhvgapnDw^f<zYNqwIpfJ3)B?t1
z1l4$%%?;_=;H3~;+fhiW9bjs@M9#wOAA~ZG!z_w(aBA?Q2zg{{_X3oMx-83BPGpep
zyQNs+OPg1G*Rtq|Tz!j=$Y2z+1Q5BtdtKB(ZT_m$i5)r#<C_+B68bRZTFuqDx=?I;
z296%eG4>~1nBCETp2$X;Y|V6`WZM7YeIp$&w|WpI{X<Ohvj!f-M>%u>dNk=d0kvX_
zn0y580i4DTVP~5buEt7uGk32|r%4v<JTTOg$+c%Fla#91ftaWs7<GioeL}_+6Aj#R
zwcG%tMRGR!_Bpjug8g%J!u+Q2xG_@myNk>U4)p^?Lp|B|(J5!9>(2B3krJflER3yC
zPJ4t{S0kiObVc2}l;Y<ae3b8Kj`Js{?kd2oUQQ+$#&S&_zmXIaSmR-ax>G#=<v#Dd
zWY4?2r433?4E$@}A=03yoLFNQa5Lx{_(F6@s|&4R0K)NuEz!?C!)a(z39517s=|k<
zWE_<FW%|Wf1C*)QEWZK^i1(>wmou2db~$S&T%k%(1S@<-7Zo}g{lnO~2AOH1pSq61
z*`wHn`co@Q5$HdlFn=gPfp|V4z`8E}Y_?$%QFSoUCWKN8umHYY4^&JpF*`XlE=3ae
z5Oc!MVM|@Y(JIxAdEhMe3HmgTk6+5h?od)gRSnveQ!(aOLWN*qH%XwRn_jO04V;Ss
z-e_AeGV0Uh<j+Z3EBU<n5^=Kc76#S-?((><3vIKZzQQ41tTyJRVmZI|^rr^%0@&Vy
zgW|lE+{N^V^?&BFo>HH;Bi0T`^->Hv)@#jcZ{{0#R&2faD2wa~#rx~pg$}l4(`jd{
zLL7F+8EMb$k9j}yeo(N8$YI(O4dkW#>NKVgQVMaZ4Dl)qwpeGs=4s~M;;9<@vc3V=
z;L<CDVt%E9W=hOiVyE@aWzO(3ub;qP@~Gqk29ryP{GqxL*|@mhaHRrnP_sD2iOv4T
zw5O}OMuGEGH<`wKdUq`DATSLqA2115V=t<(qi|a_Kuu6|o0l#!vL;8<ADuItIK+uk
zCJ?-39A=KqNj0(J-nLwfeb#(P`w#~<WFl!+=jLZ0<;%-9P7s%+UM}8St8s{1TPT`@
zZm{ku6z=A7hA*ED@uWRTI1)>urnhbcN|_VZjlKoq{qskwlKX%nK7#J$oJg_{qvii!
z?7ekZRp}QtJYu1uf{IAjC`t-Qrywu}&7ngHkycV#3`CGn=@ujp4Tlbcu7lF8ba&^s
zwo~YD<{ifGkN3L1Z~mGib7JqcpJzR5-D|D;zR>VyFjgu|mA-T!Cr)Mr3i3%3-V`a-
zp1ideauep`5)WJujv3V92%{zZS@tXqs$%xFbP?sqiY0|Y8(mU@d@n+-`cUW~+1&?6
zTF;+}(IdQV3n6?G#L>4rZW{;VsE*x_zvxd-nP9M9b?J%Ef?&*x7Sz?N!<&$G6nJPw
z^l&K<)F_c0Rx5dL&_T2xjp(c@si3d<Q92!HnUDAKJ4{p7A@t+{OeT(oOPB~HCG3sm
zHA>8XRlB*Slgw^R9uyes^MV-$4$V_ZJw;MI%mi_Vfn*YObpoNnO;y>nmwBr~)IK`z
zBL22@-2cx9=Ch4M^7!&zfuB1}^9D~ho&}l@Qw;?Hg}wVm_#PIwjx2{}2(pi_zjCS}
zX4QU7DiaIAVG7QxVulfmMAbAL+qNah9}Pho&FYpjQ|deNOFk~eTnPp<4|Tmbj7e|&
zT7{#M-9yR$X`?t%E~>`0P9pHajVC+#E(T(SW45>G%*?l=!$T^nG=IYggoTB-@5RQx
z$o}oUZ)opAY*kPO$i$ST;s>PXTDav9P(V4~U4L_!eKbp5KpKi5GEYTr9LD-Kw=;K0
z>^aYbzU#qTwR+6v<NT9urI{;X8^Hfcc<xDvW!R1R=rDA!7F(y(ZBo5DbiX3*)h`*k
zT~VzGGw6poheyvpc;k`!l2E`bX<hJh^syI*L(Ucy0!iM=8J6>LtsXepRf0<COMLQ;
zDDvyg{xBRkP488vn(8G>Sk$y&7eMq!$XfaM0sVM<!kPg!=eA?KOo<X<pG7_E*Smak
z&L^Rl2KA0bE%*QskX&Vg7P`;(Rv-8t*e8dYH#R_I&$1^DukV2Qgr6L;9BZmFQQH<G
zZ@Cm7OF|g*-f}17%OAcTX(l_LdxE9#gonf};{Abg28Xxe=hS$cd*!;V>DNiKpTCz6
z!j&0)+N~@!<!ZuZ94xM}Oq=>tfWoW;aPq#oJ__kY%*%#q(c2`@sD`=o@qLjLpaeuD
zk#hJGpdD;}-DqJwBlzKU!p-~(M%%wl!2S+#f9(pc<ZuB-sx}k_>`Tlj&{jN@J$&s4
zXe(fv=a-v+5m<wy0iq)?fi(RA-q#5`NMj{M+><2b<aJru7YR|m@0DjC-cYf;GjaIa
z<N&dY4;Rj$3KM{IJ%u;8@&9Pda>0S-9)(D0{-=L1*?tGm4MaT<?+RnpakT>GJLD8&
z=Ji748DM7SG|$hdEKuJ~GU+WA_;py}&qwgruL!|MCTMTA13%4ozw_Hag<s+z1j|Ts
zPCf+lP?OAtIH&->5t0!TXnOkE8wTkm`jhWKV$iQ%`5U|c(USdJVKkBq8an)Fnb8PR
z`FpYSn^)&4U4RY$Jq$qiD{4lIA4P*O5p>G71J6K>{-dNnr$+wn3xxlXP62wU+n}v<
zROGwj{P!1&{6eLvOLcpZ{RH{nndq-A`@KB}9zi>z!~N4d2ma!&UAD13VQ<?}{>yuv
zO>y_&;M_XmlIEI5i<2?Eo<bGxb|(QvprFundfa_o5px*RtlfQ$a7!-n;lz2qct)CA
zM-PD}5*6bi>YoR;uokYM+{DHnRK?b1zgirD9S9#3n6||(3$R-nJK63~So?dq*Q{LV
zp7&t!8T~_qXs2%5gPlrAJ2dD1e9y?fJ(pvpl*O>Z|NP#+x{AoM{riGc9b9gB|Km^n
z)yE$Q)8XQ>S-q#X`&H8U-(Lk2GgW0%-w|EAzr4L2zZn^}Z*0+yPqJ10uQcq=h=3ia
zORX9HN%5;;6bJOW#}_0P9RBJT8KWLhHPXD#d;X0%Xb?z=4T6`$h*UGLc;s4;;^uR;
z(1Ymm_;U5oboJj9k-k0`7i$7#I9RI_6iZGr)fb{!H#9Na?kQ)%HZF>U@muSPo69Mv
zVFS&bzpwlf=i!a(a*fJ6|9Ic;5GYk+9QvS=KZ9Btpa}TMMe20CQ!GlT|Maj5nl+J?
zNT0FwPn9kZi6lp?^qiC{CDd?{?_*zW0m+AHlt=W4Dq@&BD3`Gkvu5XMRjcr!Z&VM@
zUZASX`kBM?n?EWAA#z*QbUk+C$y$2SQ}+(xkLbFL>8mcXo8Ak@kVKPM+$%R{+95`^
zujBGf7&w&OJf^TImBl@u@{N5|B_r3S)fRgT%7S{KG34~Hc`LK)PwQoGE&dR1dyAG6
z_8CRxO;7~yd;-_S5lwDZP*^<!lIO-b-PYG{%S3~@KNFs+jL=(UXL8OS#O9WnI7u<5
zM2_!RA$RCpAV@Fg>@@BNY)bW##n<PcbmQjLZL=4EU`;bDF{Un&W;$a^_Jl|L{+l<`
z;Bh=6Z2aR7Uw2pjA$7;a=D{uMr(`EcO|oQjEUaOZH%Q^EvNJmS>!F>pnVzjG>8$eP
z{d~#u@}C=07=2jR&7j+=b<rM$X7;f~_Bu$WGJ0+^%>gEEl%VgxA?dn_Hoyol{BF#*
zFY%Rcx9bILcD+1PdFIzuA-s;81O(87y3h{Vz7&)dggklSn#24c2*e74tIE(5rw#Q8
zFVLPUht>r(>*8~u_vX^GZ%#`{0Axz4<(=0WBl<u&cRab1hJ4<_{6(Akl|L>ta&mtL
zn`|~P7spLT#FQM2Zyjd^Wx6?MqB(n%vt0dGALYXA60=w$Cb-;X!Kz(~yFJo{UvfuD
z(^hW-8IR~I$VW8PfAxJXEvG6=g#0HFxf830pjvgyR^2B-iQ?eb=Oe6t1YF0`njJ5^
zzwiXkahPDBt<9=B7vj4uouTKiat@08-NP)gsipkgh~jV^4pMPp%5I|pQnt5k(1%ka
zPpqv<vTYX|@v3ev`_HFd$h(i1r_%RJ49sWxIjh(~=dvdNc)io8RIk<!dBkjQX%6Ex
zZ=XhD_HqdRwE;fSEDg#xzK8?u<@TXqgGYH+w0^&nJvih{7aOSLO(2O|^zxs%`|BOP
z#lZojmC0K&h)vJM;@Gd-zl;FUuA6}GOaF9@fvNr?vi0Bk9Dzy$Z3;*<<sx$pV?~>x
z>WPI1c8GJsQl7DIW^kKsLB6~}5l3{kw-yMC*#L+s$u>90sk(hOws&KQYm(Ds9$Ce|
z+Br>OKh(^gnr}d4v}_jvTz&=o%#}?H-jBXsV`L^ccwT!)0pzi$UcOnwl*5Q-8!TC&
zYic^opnYr~?!q}A=UX?&ni5zIKD`ONcuT}g!@q-7h%SI6+2v1@;)91RQ94SUt@d^G
zsvRjjv0Yc|d<fc}ZM>7hbIVDLvM^fc8&1H7_X3p)$Xfn=ByQ7F9r|-8MC$E>)8_Vt
z8;`$Ud{#Ide&fl{i2vQ;cSp&^<v@@tW_)ij*B@)`U%r^6g=0t1NH6xcrTQ;FzOO?O
zqB)a*`qCX1+HqL@{&4<yO5eZ8@`hVqPxAY^g@5-t|M;mt&;2`UaNcEW@SfbUfd0kD
zsTu^q!A)i=-oEy4KK18aM4G^|>aZTY5&8ock9e(hh#N3i)u2B-|G)blmuy0OUBk{8
z_IrPB(SP+Q|62e*ya1?<1z-Q23*c8D^WS3l&l~*z+#B4y-&x=F-D&Vvc%S$*$sz%R
zpMVioh+=kNa&MmDjHADnz?hL~uT_LTofyBx_UDTDl=!0_Yi*ka<-wblrTxxH^()`V
z;r{*MB;0uz-00+|AntG8!>Dj`l|#FSpv2=0(6M3!$7j!2*RQzQS`gWd-sEd)ZDSsL
zs@`DLo~-535g{nlMm@C5GNk5-im-FUTd#AO$F|e_>FWPa2ZV6QVLYQo+YrugejZ;r
zUf8iK-4nzrY@cAFicOVbqMv9cAzJdgN{Sg};cz=!ZE*3M_uo0|vbK_AC8@urLBJx|
ziYXeMO}->%LA|>xeTx=H5{t|x3g4Y4O=^<xrke+CiEC0ao1k`GYd{WKa?7fTqPVat
z#q92tQa8V+#w4bHhRFXXW5D-nfK%<+_swOG{Nf_c5!*LvcwF<;?B^#M*u2^~+1?dN
z^3_@j_nnvWf3Qt5<HbThI(^e`-*WTgK112wf!vhq5fLP_r4i9f6Q%L3TJ&;~HCG%r
zW@QW3D;|;BwavtP3!K+(x=m1%O3dmg(iEN>vr>pY6DOFPp0PZl5mh|2M8J?j#M*Br
z8>0A}V{*wYK=aIovOub`!Df7Fk(zDR(n=ixR#1k2IZb=(;FTndeCf3^frvaV!{rF2
zo`TN7npBEKR(tWJbdA|iv>3m&P7_6uU|-(V?)=39c89X~ROh>;)uduc7kRZ?bjrxi
ziA|aXT&WFfUydPW>l}%nb6|o}28*g=_a;qCkAU`oDuKM2TZiMYZw1jxKL_a*$FL$=
z&CFY+X?nEb`Rs;eyk)PPRU*-Qzct6-JsP|sNa-6w3TVGsevBqAtYRZExENh{;F7cY
z1ebyZ1Pr~^<sWM=T@YavtEBtDjFn`rXDZaQid*xFU=WeeDX?M|_v{c25SvUqSwKE*
zqhHrrQP^EVm_Br@JAY7F_HnYS#!@zouBCI1#iQ<oRE$p3vOvLj23p#y!vlM2eH#T7
zuhX0gjs?!{9nI6;9i=o43R!Cho=P~TI!_<Ih!Ws(Rw8ap>|XMW-<-8*{@5eLK7rY!
zi!N@yN<gcq5-D92C^1>T?bgAh<rT=K?=sKY$1y+bh?TCstF-xfzM!r^@$s7|eIJ7|
ztEl1{r2-KdF`48%zZ7rHlOIwxWl9^DFGXZX{+*%zj4qM<2>%EkY2SL@pV{13^C^$v
zEK0gxlxaS<X@((W9o-1X@o<+E<2Im5E*2%IZ66jYcp5k)sI~9jkbgjHE8oQ-a$DQd
znHNXMQ;K`uu}-`7S{-NAi`1V=N-<KRAe!&FkCI(9@Oa|I@%flontl&KK<)9pMKets
z*E7vOY4);A<=8fHtrx^oT25`?%UhK6xvz~2YCg`Z4|F!cCKE77Z2D|_tXXfj36w7M
zS<Ks?{u0ZtCA6^ZF35lt>Zwq49A?2r*ibrZH~Gh?IQHvQ8>;E$tQAiACA%M%pZCgR
z9SbQgN|hzsT^M~6cb|eT365^gH=(`@^(p1stMO(Vu_>g*7nuybH9K={P2>o&+BZA(
zKA(Mb1EW^_iMzE^+;LOX{jlhE7dL8sTt&8^zt)Y|+2efT@iLN5zc1lyy!J$dF7EWA
zo0u0mQN_K|Brb6szBSQHaWrQxO)k-#U650uPTcA^F6LOXTwb`>si*gsM|?T6=>%xw
z6PR&9IfXcSoGVx%MOVLkdb*<2K<r@+>KLn~3-5(8qpdd$WY^UQva6klr8?F&U))N;
zNgi2FkC$AzTw42-C{WbVd)gXRP|eOx;oeafaiKi#ymtL_H$5f#L;-R|Wk*5nm_?c*
zZ7h4Vbr~PgnK)h<t!W>(7tvog<nji$p?s=$<y};=qSb|=V(nVKm2D1@+nA@!p1Ir3
zQJjPBeZ}n2;eL6X+!+@grPDQOql!CoqLyYT-B+c9gj|`v@tEHjcju;cy%D*hrbM#y
zPq_FaWG;BM3e8T2ub4*;A3}Ktyo;4cVaDNF7eCePt-ZiZ;N7hpHo3)P+)lHw5LTYv
z@fh~cQ8CQxL_M+CitRI)>t4^+WLp`t+~tTZNoIpn&=G}2xl?sws5m0@N1E^ubyv^o
zn;&DR1DzdMbH>J}PGYY2p1>Sr2^Eqfz)jTH{^&;7!YHCuw!y`d!XIEk|3LzUC5o6l
zY_EquilJooZjqQK!yHVkR@5LLAEzW)yjM1_%kW<2!{JwWR2-@Vw-dXaO`F0CX@|%i
zO|B4gGOTrN*G$bDs>>Mbx+UPU_~{VNk0dwStSAut)EUW-vLAWL+=%z2sH<97-Zglr
zju}UVa^$eW<ZS9-Fv`(kCm8tm8~vgs&Ii{i#i{QOHdo=u_$&oXN9lZG-D<@0c2v3s
zbd>2742!F9#K%)8WRISVvhEjJp7?|jvQfk<h{B~Hgwa2mw+g)@@d4{t#<gvYWqkR@
zCzx?5kNa!kv9um}JeyO+A4J4*<3GC7%Xf?1@H{C-@aCWshqGBS`LLOiniye1qTbn9
zQ|j2UD^5}+42E2UU!oH^G?d5<x5$>BzM@&fW%VQU=M+juud^@Ppll2evvPRL7bL`=
zUo4HN5mnJ+P$cek==d%K`MX6V`g0^rBmU)rqdQj-uSTR(Y1yWrwqtF$#xT*R)TK_E
zI~nmNtIg4ZOK(%q`hsM$BUVSAD}-z~%d#ZS`J!CP$<-88*6yo_-Er|EEq;A3-nt@4
zEP{w+{fM!y@bHUX3B_|`$<3_{;RbDPa|$MNW;Ee>snGaYF(gQdv3DX{3@iC$6LC2-
zLBQHEqR5Cn?#kw1CZ@u4EK`f0&tNN0R;{kLK6y~w3YA+usp2g$nW{gi7?Er}yc}I@
zLeQdmFDyP)Ucp1v3F8(e(u9+Yt5}wKobhfhuMA~D??$y6L>saSj$@gG&6%HyiieKr
z1+2x_MYr^lEb#c8+}**+==H$;hDY@9SLpZ;d)~R=vX;w5<nmgthNt=5ZNk^|v5lAN
zh$2F?Uf(IDm+k#L6Z>kOi+w^4qe`HldS^Tpn>b(L9+lrHqUNl_w9rRE9v;-zFHBkB
zh!U)xs`K+Qtg)oLiJ@sz2omzcws_bsGej*lg=t8*5^fh?!`^JFaU?P<F1MbSsB7qO
zA79#D>}#A~Pt9-NFoDkcZ_cd0iKg&^;66mfC&hQZeZ<)1iK3ic-ibz$b*2OIjvJjr
zTAP(90)`|W=MvlTFATJtg0bV3EB&+-+$F2VtxJcE>V&d$zeK-~)bYC&u`0TpjS6vE
z{;5y6NP}mgVvHe4U^{m2z3QHJv!cB<<72d~UL6|*2Z}N8N5p&AQnWlaNba80CAsM5
zweu?eu<G|O{NF&(^0MjD>7C0Ix6m91{oGr5e$jKi_4sP<o+mD2I>(=P%o$xNyqJ8?
zBrkoUT4UWpU%WQx<EFZqeI~{D<ek=ZJ*`G=rSVj)W}}w=X2o%5=A7ycp88NW=Yo>t
zA*Y(;4lQgkmTAn2r>~OL(R&>4o1gq!17DXE_AyBKND}ys)m`Nx)i`3`b=`-s(`>FK
zeseKtN~z8%1Gn%L%GovbOnM(L0XyZWQ}M9ofrK?fmQy-KU1MS;9Vc@X3W}Ul_*0hq
zlkZz9%Ku~>Id3}E>ack;Jhdvzdc2i3qq^lMwaK!$gKhF$yE`ua#)cv|7@Fsn>is>K
zXT#$Bj#@e;t)3VgkG1@D|G2S!Z!M?_+i%Urdv|1vZ^Sc2WrLFY$2e?@`mNDH*7XUs
z(D<oNtq4UPr4SB`>}q0hhrcXoWvOCk;z#t-MzrVTWfOiOE2m{1tk~p7qoL`}-DOgd
zXOTLbxyp@iQ-T9$Wgfrm;~=%vm>ZasEts1=c-NM|$*%LUn_r8!a=#S;@s(hw){SwB
z5+3bt$NVM8?6j*1=dp_!C@qr^O|N2y^A(AzUYN9OJ0TsWiH_HT+XGrOL$z+o)-mtz
zjz>LgK1^VtzbN3L=kL8{C{|(&i)UcbqruR-yA4;SEVz^9JudU^GOU~N`(2MN9_{|F
zkjQ9&WNjR-N!?lsIwUe^35#C%w@pDJ=W46x=2|vo2&JzfSy+iI<+8uqM?S1jgAO|B
z^riLDxjT*%Te7_~o&t84CQ~x5Hs#o9HM*ScWfZv%hwnu2fLrSoi0+p8zN|@Uxhb0}
zw8s^iPR(yFP0tTBjninRR4Y*0-z*(Voy;@}k2kZGgIJtzEF|Jg`upI`C99X;EZe{H
zBQ7z36K7efdwvU(ik|f$bmDYstg&HufA!>c?}KUef^8zt;zh|G5?P})4%?1o0(p>>
z*4k$|G`Sw#x54JQ<>}dKd}dLgxU+52N~fm_iM;w198)uC6xHL>d)v-%(hN;5_os}B
zdp=4okzKDT5kG|uOfDX@k1pPNT_lwc;j?V-ns17Q!OK=ALo}8lWm~GXS&Spz_Nlte
z<2ueU$E@aTdK^Wq=WFLG#2j1AuAHj>E>!y7$^3rTqAU#yTv@JLLsP$e8#0_$io~mX
zt{h_&h(}Qu$~HqC*Go7%pq0Ny^e$?RcipnUx(yR|dQTXSMuqtFiFvR5eB2MGT;h_p
z<P~lvmMk>|F1s?&x<|@SZfRK;WDiSCW~WN<uM4++iK6*f7@hKLjg#`ZvQeCQVG=#Z
zbiB|N$RK^2BTr-GWU-{j%eG$SNK9s%aZV`+eJ-haE92PhNUPY*2q9Q2#`*L1rL`v0
z?Ep7}9F8R-z38P@8vLcUqZ$ETWaN-l=rt|#qm4YpO(+%@k3EMK^4wNJi<H$tw>`CR
z8Uo%y>y%wCYu5d)EJKUT-z5lpPsDF7`RrLFwTz?r>9>e!kMnI*tlfcE876B>ZcjaK
z$~7am{we3m0gGy?T9Q-`JK3NF%`oTHOzUZ930K2vA9-&J&+fcT?KUwpH`}M1TBX(f
zG~y}biyFoGZ<S}8!erM)Wt&G#mN}VCo_cmfl$=SgHJ9yOqSc5{u}xSRGw{Q{^z*IW
z@>stqhKjvKL@5ug$~9>UNok5rTtci-E2=ZaVwjYIdasU27NvWtUG@dxyIb~`kHlAA
zy2D2FjrSL>!DTG5leHR-Oc|{WA;lc5r(9^No{=YTt5WQpsf1)<j8lB_^>v-L?MZos
ztMoX(uq+!{-k%MM@7_pYyRQ&xOg3fFpLexPd7bce96Rk${Y1}XOgjYHTBn9R=*0ol
z*;H4XAiVrKD|evHO~T{wFGZNX`{AkG3sw7>?8k+Cbn*@mQIccE-G6FsTxPs4Hmi9>
z@p=BtOuWYWYd|fO)4XYSb-Lo>JrhPsd3#qv6h+yHxPDs-uD{%bagD*S*c(A?S8Oav
zzaBFU)Hn=D#Oc+svRY1_@scI%eL>I49x?T$HWLS`T4lzkW@$Eshmff}yD(HYiXY#{
zs;Hh5&yTs+q;!THqv9<F>m4$zfUWsKfg_FQMNBdJQ`3jJ2&q{;clRh_=+ZtM<MVwa
z9U)lM8ZrU(y}{WpMd4OH-+f$J=4Q)Df-)tOckGXZ*!0CqPda<4&Njbb61`s5dLo?!
zPlg~cQSZ(*+Fjvgk%RkOF<sAZxPA94f9FEJH@l11NqpV0+_Q_q-~XT8MHl;2r2$f3
zY$<*IyOa8t-(wjH1-1&NgoC>~f4}v6@S6>G0Ocj;oV)#9inQCyiR_0`C$H&M0sLLw
z@ONMA(gFrFEaG6L-CeNr-N&I|O$Qaud)LQY{^$Sf&XPY^oc&{gjBo>p>!l`l{6`JA
zh}4SBBx`?g2?|#ng7$*0mv%rS`$Hy3Mhs|Yr2S3W@W<`_^9x=nSi$}NO?&@cb^DJm
zz9RqzY*9PO{-Z1S9;{&UoHrCdYQS+YAf_ickl+Vb@P97gKNs+y3;53k{1*lM7X|zm
z1^gEU{7@A3Un1~-JrVGF3uJA|QsO=dRxPDBe(WjYT86#_5$tOH6Oa|g{CHL<aT8{p
z2X!Gc(3h<JwTtu{jAA$GDr5%yYa`LDW<7;Sj{5)VYCzwH)pkx70(F%W?7Ksh{x{VO
z!U4`a0^PCNm_>yj%T@NNN<?a=9$~}On+G2H!En8v@Jvgd_fXXjK4APigpjW&svMgC
zBZK*OFB;w<`AT6f#qNNS|G7(HG}2O9eGO!wekkK}Id&SB!{@TaJ3smi#312ADZc0b
zK?_=@0c3HIB}HO)5Y7LtBYFg~$T+d1;rf5x^M3+=A|D~G;`i?f>=HKq-b^lv1OQq1
z`CUBzL-q&Af)O(AcOK&(f6#zg?qEQ4(qr3y?Gk=<8zVPi1s~H?_lBW~A6Y|@C<L<5
zJ6rqchd%y5_#iS7G1F&v=?4v%Oalg_XShZ2{iE6C-S8^I3VuY?8vUce%6~54|GEqK
zpr%Ljod*cJFq7X}#4PSbrXtuSFD*a_q<S{`g7I;NxDzl7<T=^Hi44~Va+;{}Z>{vd
z=-j0PNIeGoMX7?<{@Tv<T1fMCPKR=9<|(VgeUNnl{R~}1#(wq_u)x#I-)nqLzzt+>
z(TZrMh1&?n983mL*9&cLtN_t>Ny8TJ?zV4354gL@BB$HZJ9ev!|LMvGIYRB~XUM2c
z`glq~ISk@-ewugUkTU&nl<PULy2m;!;1MCz9oNICdp!k~yD~TON1{CXV7%B3ME33_
z^tK+|od>#)%(G|`+t~a$jsu-@Xpzq|AC9v`SoD=XO9w`r3U`K-GZJL?9#hF5N!fyd
zFH*YDyCOW9z#YW&f=b@?rIgU-f~j<fU$D401vv-+*czvooo02~See_n^_2W{rasmS
z>%2AJz1F$A2qV%00iN`k1ilFcRIgDnY#0|UwhV@*z!X{AooLU#2YZjX!2}PNqN+g*
zOhJiXuWQxyFML~QJKqNsMq@Ugmy4H+?t#2pfTNe-+Q<r!Op(LzomxpN_thO%|9kf$
zY!3~>Sc4FbZ{CuXFRa*>(9x`<MUK#K)pQfkikAY3yK>mvDm~H4yW>vy&=D#n`o+`C
zK}V<az&9WM+tm?vHj+kOKRGULr<H`S<2D&$xHo1#)a2a=;bfWuri=SP%u2(sfJe&7
z=*8XVw$i)3*?Splm08E>VUpc`t_7GhVf1Y<@Z`B0ZotcC^HyhY)2729?hKcydJ=FP
z%}!)u{rkIMDsr|>$D3)6n_a*DIY?3bY+5*5et%=OVx3$c=E|7Sa&@3(2YmG}oz_84
z#Vfr<)yNM>r#I#Tfi5k28<{%;iV~J(i!Ix2;}Fw)g9)hh49-i2^YhH9J1w;w6I}Ux
zM$qB@1kfLNHWG{2&%8TGx*niuXHXl&9+zJ7hKp^$8h$U}!_eANtD^e7GPoWAZFt5W
zC`FZ+&|w&Qqg<sxh*dT<I=BO-^)*Y%PODuhmRBKX?0vmHRbVDFEu2!rTreS5?9G!3
zN<rnN&rbFag_tq-E|wp)H@=kG32d2!$N6W3y(#8x=85NRGdF>O+JkQ@S7)nA8*LXb
zw~2oLaMg5pwh#-%6XY<1sF-7v7&f%(O~%7U0YW~3mki`KMx~v{Y_^&goAnhnJAp)A
z2gV_pm>NHWjEiZZH>zYyu#u&eruFAxzxiCyo4$s1NilNn=abmQDr+D?;-2(lxBnb8
zgP}*S6K%i=Ree`NunDE4fpYZ<2M&EUsu$Ez{1LC8;z{AX(Ua+;rCj}mHmh+y7|%;r
zxu3;(^*UC*dx>3r5tcnmxfglo<ozk#cyJEP?#}Bu&T4l8^=|d+ejW+w-MGyUjA2K*
z=#D##h*G+Ha(0|YeCU${K|QPWHk=O`xw<Xob6|Hn6|a=B_%E*v&<UxyW|#|!G76}<
zqI<TtmL*)Bf;;1Yk**T|sznVZp}ejignCQ{)|it0FXzw?aM~@5XqsgLpIG^YxX=@3
zPV*r|fo7UM)G4VBgA9Y}_T--jA0h6-p`WyOWRbiQR@NX(zgq8_V#(`x*jxgFOX=Qz
zer5hDw}bYZa_Lq3t^ncLa_-FgBShQ*2ZLKD`FdBSN?=%C35{6+E^Q2)UhqJ}iFJ8L
z-@K|$#WT{Yv6?2<Rc+f~FJ1aTxs`@p4cJTMYz$;u_h3Vm8ELI|jLGz~KXL^b8YhS4
zf?lTHn(}89q@w{?V40)4!ZAF=Oni(F#BcgxjL}TcIAj;0QKaO4SIlUk<hSotRi<KK
zMlp#BpbEew)pbMelFfO=g0M8-a)St2!IQuYk?R(I{&*64Guo*|OJi1ng<1z*v*CXt
z)3)1M9VYeD&!GQE+B4(2GVAT!l`K8~U@!SFNRvMUft=xVm^;0sRjiN`0GwUO@kB};
z3mYu~&j-a-N6$r^q5=m7T9j!%$O3y!rQHs_kp<J8etR;33q4)U%>WWXPyI@Ijo$U1
z<v#g{HHCg<tS4UNCOr1h>|&50x<edaLxsxDDPBz0ix~7*OBo&<bW-G7YsWgB&MQZ`
zT}Z97NiamMoEH@=dSa32bbZaDWOHf!wDy?EhD)vUqobVXOO)7FT9o)kA|Le~6k55Q
zgD>wSt?0GdRY7KPL&cVf;qhXNqJ~xTiud-4_x%dKo{x8{S=o#OP#GC|%~=~;sq}@5
zoL)M+i4Fg9I_}O97x2@*eum~5jd9W}=!>Y6(2vbPa{1{{n!Hu<@Gy{)_XCZw`9NU1
z)8@EVg{%ZQA<Tgqty%#SV+F`*$b{DjZqKo7pCE1;X=jsp;pdrA7cNkcB$Ek>5f$JH
zDB#gv-}oT3A=(8#VsI5tN;j8=;ipC8y~M*n!)Wq+9()g<qVlaL;U5_NHo1yMCH0<!
zCgCjfEEnfEWCJT~bkcj^pgQiiTzie5CvM39OF)=S50Bv5M{mw!`fYUHD6Q+6B=S93
zc~R1epGVsT=Yz1N<3MdSH-k7nSkJ0twgWE)*^9x;v4~26XJ^C?lMJ#i8ms7ySwyU>
zuQKZ?pF=Yb7Ffd6tyr-KvF~a><+ie>KPseW&Oc{?jE3#5AE7UBYRHGfHtDRkq3eC^
z5O9q9^MkqW>T7E4Y>^fd=@tH+*Vnz(J6RmQ9MM~ho_5||ALP3W=TbRPC3WR43J*ox
z%B81TnzAY3n=2Y?XA4wt)Ve(w1Ilzc4%j77uKKifGGgV5I;_e;J#=!m>Zs=a=HQCz
zYd82N(nM{~PYS^?>VLT~Dc|pPsroYBfZk2UM{YdMyGgDii;&??`_0;Kx<#1i(qLX*
zLb0K$g-pGA6OR*h>jiMqrQ-Dr%ocYL>xUAkT)5B)9QOq)6Z%4=AhL0j*tNQv<rST@
z*MtQes(y|cX09y3oxw&a#7J~V`m`8y%qpC>hMmhHDn(J$92O?lMm$d+1W63udR7rh
z^-Wy|c<aIa$<;HY)>ZT837s;5yLAWgkkq7Ke9MX3s_8EipRW?G0|sF=DV=^#E-&Qh
zV~xRE98g+HRkcc5OY&mz#3ngdcHOJsa81Fv*zAIrrHe{2CN{6OS}S95A^`N|0)rIj
z8NW^{Uxb4yKmTVWBrE4rCa?98U1Zj4phMFS7ARoI`1W$6?l3$u6+mAYR8=G_+FHsf
z@iPjUmO_b*!GmM$O~zA2G4&QDxni=^4h)$W&2M6_U0ppkz%BqfPM&JVb+=SD&+iq7
zsFx|#9&6vzco%)3dip~m3F<&Z@tj|(@3cxW%c#w48Bsv5g)?lTn(NtZ+8*2>Pm)+u
zgUu2E&heVb!l5R4X-}inBF;p7<pXcvVCeNF{FKp%1e&ns)Y^L~ceTqIAYCjr(jVIS
z<~vtil8ogsc$ACAAcZE|FXM~~$_56A%Ac-e<LT<|4=nERc3Ozeg&o`PN^0r`oT&wB
zIib?7R2iFF%O&1G+Fa7PYDo8plvp?jG75FjsG0?#GNrg`tc%yH%g>SLZMyGrhM@vV
zHnH=;_4{;>t`VOfP1chc2(_p;2(4~tWawtA%-C8R4`}wyn3K=Od#^y4ow$nfdy&B=
ztvFGYCSx`U;i)^~w+9pO!pO}lseuCQ=`-LNeqlPC7)G`Z$_k7O41@Zv28sTJ`Q}WS
zgX-p<=xQ-k#29-7wWvcok_;)@C)P97Veu9QmoJ-{T%5<^H+|(NrIK@fsi<i?Snjjx
zm<O)fe?36m{OZ86rWw-*4NxVjh)(oHp{}6UZnvc;D*C^EPybdSELAX*w*&YcDOEHk
zfG{!X*!pf}`0mKNq&T<aOVXKj?0g7R4XQZ6lx&CueuHm-4l+F#wi;33%>(>`t5wqe
zU&50r=O8$a#!Fk6xZiO3Ajh%IR_9G6;24Nb@3o*svlp$_nN8W|c9~HO+xM<(raC4*
zLI@V3*Q8-bkkxYAbXzH@Tes`o1E1qhod`i52W&|p1yLqHEW~!vYBRCJl2g!aRQ?)|
zZ86EAi92r}mp`11=8pEqf-XnT_E!W@M+{l0FflMNp(Z&}Z6y_`<3gRasKXMsL5Z^`
zek1dvI4SCB4OYD~v1l>b%yS}SS`zCI+<8VSN8=MO`MU&z3SVZ9si#iw=9CRBnpdv|
zeC3yzZd0JM7BpjRTh))r>`_ILGhjKMp0FPe*;DGkVgsBQ%D}=w+d7{&9L`WMq<>%{
zgI75P<>al4pRQjctl%VM@Qo?|2J#A{hQ&`jK5}7as@HG=M`geM%1nwDM`og|g;<E;
zLzUNO8EEx#X&)U$QUT(%gnFe2B<R8r1M`8Fj{QZ_53WZ&B)Ph?3V%j#E)dG8v;}&w
zN!9Z_y3szT;&1J90X@9X3M`(_%17}|97XYcez5nn9U2egu!z>upgQyFR@|6l_02Az
z2VEyeAFk4k3%?w@AOw^iHT1&3{NSi^Zv=7{k0cU*myjozI?m3dk9t(oItMZ`s%2dB
z=E!Sp;&VPL=rojdRoXA24CtRyOl+(NOQFs(VTB-@Kcev}>69Wy{S^`%Hk%qagB$c)
z*AKV7t&2)lf2C%ccb4t#o816DmIz(LaB>3O&W4n?4Cn5ye0j<><p?AjWrpbFmNv7V
zT+j%sp^~TI1L|kHqih^cP0mS$wmGam$dT|QA*^A{ywSc5M49RXR8>*W8`TBwcyhFy
znF%Gr^aK6(T2WSxj7kX+<Lg&Nbw*DJ6-PMNUPw@=C=QQWr?nYacY;6-P04`{y8|E*
zu<&u^Q$X>lh}ByCYQvkr4|Cy>B(Z6=1#x&470{%rHyS-jdspmDtZMh!<)Ah~ej$2e
z^%z3-yEkm>#57mi>N1DR5XWl7_G(0N{-Rx>zR!gZ*Hy@kLrk(ScxF6AIq8jDd}O<7
zL9_S8Y7u%@W^x5H=_f_U?S#MIGBBqBb#gfbG2MX@uBQ%svIZvKN}q~_(Z&KRtf6E(
z8*Za|bBtQtlL-YK-5eK%?op#$G2*yYCx+BQb1hMuh1sMNS)HZ@Of%0xe9!|41n^RI
z-_nbUfp%#v&gSWgWS(64qYhu55S0U_adH~Ay*3D0G47SLWuA_pF5IY2l<Hk;$?1D|
zggKs>L5K)41}gb%2Y)5D%B=JAEOb5n-e>d9se~c2G|x{;aZ@8He`N%9yZG}n1S%X1
zB?t>}F1Y1>KuXRt2>X$5TyDDE|LS)xfZe2O*^sK46j+{<+VN(WmJ{5N_?|WpQDGg0
z*v%7!rQ$jlr3Drhk^sbc(QH3wAuB>v_az<)H#%1ywX68vYXR}4a;D%^GcpH4Gu<c2
zy>JxIx^fj#8)8(yW@Mn(V!P+X?Ht5p^}ORr`_~q%B2y15s9YG=p<Gu^0*Q@uNPJ7j
zHJ9_*E@nbn>}yf=7OM{migRInkWi3*;KH8mjX8Ak+@<<O%*SifZ=-5Ua)zt#&8@R`
z9u%B$L6Ug0ZaaY`1ns%Y&!DskJgQ73oZXg<Z6Lv+11GTu=owHWF?oiw>zBFV53Chr
zjYgkMTrQLETpWLw65UY&e9d2j<mAqR05E6ho;izdSC|C#Mz5+@bV>z)fhpet^#o=t
zqW5}aUl0f(o(7#l7OYuD)j5w-y4CbT!1Jc9^5v}PS(VYV%LhA8>xG6|G$UTgFmof6
z&&G5$h&m-}oWb%{7=Tb3OOshb#emFI0M(IP%GCqz){w3v+~4^Ew~P0p>>-`%mv&y0
z#}u?hs2m-ExZ`|@c^Z-g_bjH^Kvdk`19^}?Dk$+Mjd_xx4o&l_vw9`PTL_q8ykh?3
zHIK!R<&n<_o3v+*zlL>txwRSTb;HereA_)kFDuL?6K(hyV!FYKj#lIgv*3BT=Eh65
z*Gp(M=Jczt(uJLZ;K!Ocym~Sff}}?jt^0T5@{<wL7ha=V=XSpNj+zVJ*<{ez9o#@z
zCRa-71k)SztA4@)Ytb2SD9@5y*-g80E3ZM`3G1)s?)51%09fvUyF<m<ZPv0<IB(4E
z$B|a4(g&4KcOW+RTh7~D>a;H^=FNrwRv`FE=Iy$~V}22j$mxdFF%JGioIth1_Qvm)
zCtf1L@U?2G!-qZ)bDb{RVMq%!x@Wy?3Zoqgld64<LJ92>tzjGcj{BhUvLP!Pn~__s
z<yeKK_7y55ZmMeNR8%t|1kpJw+may;W6jRubD8b8L&RKzG6oA8$rSCu^^pX4lJjM!
zcXyTp;M>{x<uWDd#D;|?aTWq86?8L1oPDI<ZZ7Gs>yxl5PP~=>`Qed1IA1*w&|xqk
zDLiI3o-ZrsZQ4?Jar?=gi(8lhcOj|#k`IqwTE9)nx<<4S>QEf74=OBi2>~NMYJJv$
z7|SDR#$t6apaSc(l*yK*pwY=Mbs%XC{ovIeKM3p#@KQJWg|>7!uB`F|-UFu8Z3O44
z9%oZ;CZnl(WYc4-Z_B*h21q7prvTTS`hhgpD2{_BY^Cg{n3DB@yRC=*k<e2LyE{3Z
z#Q=VIQhkK*kwk*rN+D-nz$P1vwF1#o>-}NAUSgnIzSnPgz+4Jq?v*j65|UoPbJjRa
zQr3L;Bqr)T7zX7{1{?ND3$UtU-079tpBm|eR;$Wq!<$3c$b1Q3XG{Xrr-w=uACC1T
z(}zcA%$qS1@+io;XAr_*mPc0*{LVP--2q^D6sm!5BV|a=lIvGDBaK*VitCHm8jV13
z*^#Bt)go&IWI@7hr-<~_#gR!(uU$Qd;<pVOCh;vc7e#jh^Z3eFT=0q%UVGtvxO9;G
zH0OXAkw(*qIi#^xM*<P%=6hv?O1{IHY##$4R>%;!(f=@ji)~~cc)bJ_RrLJkesOgT
zMz0MxAjj^Ux~m@ez~c*KQC--`TB72aC+2*6e->a6K57|?X;DQdO~`i-0J-(O97BFv
z2Vie&9_1eNl}EryqX{Ka72>biG^U_Qh#|UAw#WW_2QccM9F@nYhlEonMr<v_c`nwv
zUqynh=AzDF2&vWcrvb~Kec|o!GiTS`59O<0@tGQ=v@p1c1n#86!CZ>K6y63A0?E@U
z&{HnAF7B+esCyu#*f^G41P+Y_?L3&5#NSNzutsOq>GoiTu}T$V1RsMhM-HBr<D`+6
z2RO0#)fpPI<F~iW9LLp2_Y@d3##*7PFWJrwtN;WiQ?K(%lJmkN9f8)QVBG^)FHphY
z26VTtd)mpSHjFQa7nNe6*k5gEO1xG*J=>$Isf7WcHML`5H;8#dEKbd-?GuZ`9hOtE
zzfI~hMhS0;^%`SAeV4}TGuzikdQs~p#1Ec{!E&x{^*qC&t8_#e9FA)XmE*0-I-YEm
zJ}4cSV)&Fxk4`U~^)!195qUA5r*3c3r&rY85Ero{60U5eS&dSBeyzHT(a64=1zvxy
z@<4WdDP5|wXmLGdU3d?Z=s9p+^k{aNWZ%oIwe~4M8<LDcE3RG#i%?*B_hdDXF1g3H
zqTu=JRy>ea`?dA}a-;VXx>LBU9?9wt+y?K2sZ10iUa6!~oYH?1Ub0?L;;~#b?f7C(
zD4r+6RY*pImgEppqevCe<?6Yw(*@LS0%px^*ayuaJqxksLXQ*>Qrv!ZQ+{Bbd$A`1
zFXoMj;@j#m6nrykv{gMlq4P=6M5yJbt1(swlrqNToF{>Rj6T8{W;_rSL7{1bOd1%#
zb<2|R3J2CEf#U6jOIB7jN0s4aTSieKRC9`Y$+Y9NeYa`I5Na?D&rt8d`CfE;roKe6
zkePjFXJ0hs<{jElUqON1!K62fAj?}^$T{r$r65$^Nl!1TwRj0L3#7!kvOM&485ym>
znwVdA)`qRtcfQ_#TDP8h+bk<osd%2J{uti`J_41}p7K-t>aiskC0xDc97)|4-w#F1
zSFYb)Of=>h(g$4XK7`fiPQM7}jebhf-hfqsSA>-<aF|q1KXTCjv<#Z)UN%MJ8lK}B
z^o>9h_o)s0SzVE==Av@PB)}&xZoMzmKTtiVf6eK*!nCoS-c8n$3XX5w!A>vzX9xm=
z2bCquFPXNTl$?_lH^g4sIg^L}7J%?dN3LBju5*?xoDctW5^+UuWez!j*ECS5s!F^H
zAxKZ8>1Mr6ab{BFD<TcR!(aHB2CKPR6|Z+s`|t4{>KDkNgk<(UARi}HsuFUn-|jhB
zN>s8^#&)W)b9GGF^%A0ZA?W;?VuV}e<0t@Y_lfZn%T2dx)5;Mys0?sd$Z@W0_M5N#
z>=2P9@jzP9>nhZ7h9JfxL;SgFQ~hbg#sFP&!hS(^pN08|?Lz)=BVVKDOuailqbU}R
z5rq_8x7(3Sd)0}js<vfm_R=3Q0`(tb6+gOly@oZAd!0C)Tc4;#x$*g6KLo<+Z8Ecn
zM7G1zj1zKL#2@=nhlQ#+Pa<cTN*KcjQ-Jd!VXZSOujiZYnpeo#R4>UY1cW-D+^na{
z{R&T9v8rnuTO<m_ybcgMs`x|QCi{plD&&BnK*Os3FO0ptiEDE60u}{{<qDg}WdyKF
z>jo<Ta~8Bl9Qlgw0}3>ap;57NbP@y{efF8O0}WeJ+^!CSSmCYcqV_q;oT=2K<I`^}
zb_PB`7AoYD6!{W`%FtVk+!7&m^t3>5r)GmW2gUfRYW_MCC}8TX{4B~_ggRM!O+*NI
zw`my~7ofU2ixjacKmX#YkTG^0>)#p<QndG~FT^bnYm<y{6ARjIulM%qyIrVQ-Ja+^
zm`jFQ6`Bz}OtsI4LgXsWzF&S~eQ;{@G`@oHWrL`PvRB?blk@eu<i{LOb=Z0Te!@3y
z3q3{;e14+N+J}1x{~FGr#c6xXC9dV$%S#~z?GE+xT?Lu)^`Wb^6B9?V4z}R%n@{<9
zKn*Kn0X&$J>q(SD)L1<ffBd6pnv;wP+<5>r3sER@-#kvvo2B;j-e^ofEYz5or)d*U
zc%EU6s@jSo!5YMc`9IPiz(==4y~iG+3-$S6+$?e<y$)c#&;W@iDI=L(eQV^vKFSM8
zbt447jS5Vqr^cnjcsU|ExhtAea&oi#NIZ;^F<4QBHuuAtvX>JJOL94B3W=IS6E)C-
z_i}9VF|$uUfYeA30(`dOv6cybxJZ9rtSs4Zd-lRZ6v8|?6{nax3osJ422_2bPWj~q
z=Zq{vJ+8hv<8ff{`2C&5?!PIE1`6y~&<z&AhRA*m#9X8f#aA|65F|zZC4BsFEo6rV
zAaan$E5FZ)W@8Q{I^M)nG=`tP738w_VC>fB`tV(aeb1tz<mc~RH*)k}e@0af4S<27
zS0^XwmQE4|pN2vg8I56bp}A52nEN0Ae$GqJK3{KZl0Smh3((+XN-sSD@$FTf2MSEM
zjh_OCgY?6*Hs)&LVgfXIwL}R5?EyJa>(GtWlf6JsZzzU}nsNULrT(fJ$A;ac%UFE6
zr^rGt1`YyRrEd4}f&w+$4Fam?SUHE&9Y*arX1x<>O>);`0=<0X7n*yp?_OSK4vNB2
zQ|6y7J-OOto#V2#8&1Z2@yKMtpnXC4<!UTncg4-@6ZpEp$x;FDc1NM{JFFCM<dS_L
z$gX)&_6*tIJdnS3v^(B>6v3kK<33*g+uHWG8+S+Y{PkPn%^*=+6BH8PO}X^<3*T{7
zk<`#IK+<=K7k3v2#E$F!<Ej>!U~0a1xME}{nD!Sx^!<hZehrr%17;!`Dt>Th3HPsl
z=#O9g_C;hdR4m5UH_m)VSM>Y$|C3!^T=AiG&8=~S>IZM2DF<%AF@iFBXR7|^q56-v
z(tr=Z$kBTw<oo{dt$%4&mo;c!Oq`zAvHaFBe`oOjF$jqW)PAX@q95(nWZzw<OfTHP
zqNCGuuYYmZJ8nf-6uLJ#N)0UWfA9vz)Zhk+vECndb1?qT?E^P9F6<#!ZqH*6fA9tz
zp?R-)d6gBRGyaS3|3|z2=LG(90{@?N0u9kP7Ihp--c!BxyE&anBqF8z$=qpoc5?mX
zVn?71IASBn`81~8`tS+o2%`^_*<U$>K1qNeba<H(4?$r(3@Mm)EsGu(@I7}Uuz_j)
z;{_L<tDgasxsFhfBhc0-q)MI7v#@9Hfj59vFnABIji*Y3hIu_BWv36d=qGw~(#vTB
z5WFh6y}C7-rh|htXKiVc0I@d-kGXCI@92Oc5Up#fI?R?e4phBr?6&FcuIe$~32T4n
zAb<6Bw^_i;w2wOwf5VzTrb_jGf5}>Ns<~T2hcM{31|JjJm;wDZE|gkVf-Q)DTnE)U
z%c*{74?C$l<{RsI=ndJYc1X0@%Rn{wlkIR=03uO9bP4GM7@T(kY+&&hAA@L5&T9yO
zvIdHJFRA1;)K8m`lmd+K>cDY|P$XccIKt)##p4?wnB|lYAu*KwEnAZQX=2;+=LYnP
zW98}JcsXJ0p({_G9bqX<JE0v6bzeIG78^}+y8XjJl#@RVmoyC0a|7th0iEbNp6#DK
zA2fqPT4+5KFT(jQFLm8=3Fmi)<{R5$Yb0B=zP~}<eHZ8$MxW7zSB6M5N824@wOY7u
zyqgfGVIGH`ZE=I=BF;`<T)TvWl%Ce0i80J>c`B^OVZKh?Y7|N`l9Y}MvV(0%7o;WB
zLt~NNDKV=60N3Ln^3BaCd_e~xcyU&P$dQ=+r<EgL9M8PvolJ-Ag;GjjYM8g<gidA`
z7yVHL`7@|G8*l?uu;&<iOUQQ<N?r<o8#-T7Vp?c1?6&jZkm15Xx?zs7mOTKmV{c0+
zUR^rGTDCzK;lMTt*eql*n(jFUtr|9UsZIn`Z~%+!_5i-f2PwfNzAz@8osFx)VTZ3^
zV(vgW>4qIN6&iV&1DE?Kbe>vtfTb)N3_zDz3NUih=0%-$Rik7-e@(m5!YR<B|J0VQ
zBfs!5h!bF%!9<z82anxAvI0B!fO+K@SkuHJ2PtQhT)HE(wo)M!4&}hW97-XljT@ba
zB7szT2}oRAWbrUmAT>_A9PR|&lb@jW%-6`7T<2CTg_OYD>6M`?OB%!m<)(&{b9xL-
z8VmWex1ql($Y0ek;Sxagmu|g(ya2_RR{rC4d{9)-Yee=jdZ7@SaNErmMn1CdZw)q6
zDrA{JQW*ZFTunr$O?&o6st0raogOVlgqq*b3jw0B6{lL|la#WG9oJ(4<)SNbgr1#G
zuua147RUTjlewRM;WQtpbfEAsac}hsEg9iUNq#N*G&X+VRO<x5Ud<`vob)!1eJ3L-
zKe){kGNptZq_|HdU4c;@w`kGq?YecOq($AL?o@MRAFqeb1=ZEUF4)AY8x^yzR_bcA
zwr=Bz$*p>!abG?>9UkWuTu*mYS3=rUtlMK-=T^OD%X86~xs?xAYYU^ziZv1G0F3f^
zGbGl5usXf-?ds;CL{sJ9cEaUQIU9CKf1$>ETDDLa`~<p8%JZ2g$WIM(w19?$zC{E>
zQksY=6g1`*pg+q;t8*SLuspHiz?e}<leZ3#`S~KKVW4aXmuus%o$dknP1>FQR-M}F
z3ZJ<&!y1FuN%FkbQ=6w!KWcRuMMtT0>Gy9nhEE5L#0kWfITiiW`ggG-g0OX&UH2O?
zmO#&aG?n<5y^afQqz%Qh6wbUqCB%e@pIHc-cAyh$i|L{%wS<16m=egMnWmx(C2e^r
zK5bV?JH4b?kTYfNK@hXi){-qN_cW2@(=M)ikMmzVO3bDki=wGT+7<_8<kM%MgGQ1d
z>3mL`L>7{2n&gkh+U7Hr&|HF61xJQS@U%S2ay{qX^C@Xqp^%*4$dw4J{i>oEO7H_u
z`)fKSs4hG_0+^SkWb6Gi+pzAW5jT2F-!I2I@~hCTB{ZD->T?B|R!u=~o0QP@D%Rqs
z=qmAT+mpAlp>L2Ci(sYb176x+5Cky`)M;bE=L|=x_k0#Ap*f`xhydO^XDpy(KS-sT
zE>$RwJB@Vyz1r%u-$MFIV?~eg{Cser+EHSqkE>)=at&!kYs@L!`uy$@gAVhMgmN0U
z*WE4XcT{JrP9<M7`E=Ef3n_%S&mzqqqX2g$CCLi1K%cy6hqedPr#%PBeB3{ylFme+
z<Lj-Vu_Ok!t;rCPer!Zq!B4&OHuo4`12FzZT!fR|R-tb|b1-wnG%(aKnrWGI;|6X(
z$)wt&k6o7O2GR0s=ocJ#tDWbKTU?f&4P2z*jh_Tn*KSDsGyw;7UBtMdBdkQhd8E;Z
z7fP=3k55GtE<ZBtYz}VivA2Hws-C<5xdY3yb=z5DmSxIYaVxb8Q{8-8&iA~Ta{RqY
zxLy6H3<is}^Bp8@1~lati1swDgttRqwtoJ$797o^04<888+xQpa+svEANi-qLzw)~
zLSl6KnZw^4-L<he$OHq0?PCo=c!D-#=d*jA*2zAd7r8O$PAz-+0tLRe%rE<5I~x05
zugFXB#GKG}r;=50c$Ox%KzKRuI&+?G>_xG3@A!wO-ucs%p7Iky+LW%91;qEvKNZ@b
zR`R=${p^8sp1WkN_wwvX!q|?EAplZ0gtv1_HYdrn-5*pyqqupqAFhp9vlpDGoMF&f
z%b`K@_(a8-ad8HESurhHVm)w~^_Syu4_-2ZaG{1eI7&n|uxu;ZJKi?~nlxjPvZ4Vj
zR?}hwC#^bW`om&EA895CsKd;0&#{d3X%RHJ8PU<RiZxKzZ$n$otK}27!f<u`K3tmQ
zaV9W+c2QA1`kuOM9v!`D5p;g>xXnT-<RZC6EvpG{RQxdob-KZ$?zTvg+15Ixp?RYt
z)UP;Vb3)&u@<P4VzK4AsUj1I!=G!4A{;6oyh}K+F+6`20g{>_#hFYAB%T+{zpCRFT
zSb{ABfd%W5k5g$FPw#nuM?OxfZusYvW!%eQ&=qh&Fn|eD-(#UV#^;Y(zwuNnE7!Sv
zg|@3z&O?VAdO8@WW8=>#pn2tzop{Z$USrpwDAa2nK%mP&??brmwk|`a^*AtUOoM=z
z!N0<Yae71`xl39}N@6i1mlNuu1=rjzlxsQM?pLP0(xN)<W?<x~`i~LanApvsxL0F(
zy5-+u7nz>I3d-(@=VtM36!xn^@M|%1j^eYav`1tuw7!ILJ-fyzD?0!}$#v5Q@y__5
zqoJo;>*{z?rj+}^_n`W&rn<egX@Ls3e@6(1n_%Tx<kfvrQEa~`^tyc(d3=FJ;bUQk
zq%q~?5Zr_-GPLxi;3CK`;Lv^K?781>3057ZlG<k%#U{Nk%>AY`|6|Hq-ne%hAk;Ii
z@d-&fspBytnT2SfkJhqdYd0&_aotMiX51Po#Ys(k(Vt5*qQuTdosrK%Toz9nA)#B8
znA-&rZlv6jqI*i`xt05A!Wfzn{97@&0%fz%@E~~s=lDl$Co=oToHV*i(8QtFuf6U+
zq1_u|oN;x@tKY+2Q8tKfsgZmVw6jf*RhAk(ei$XT=*!(pKz4@v?#+~aiV8Oj##cSY
zW0kq+?Zsk(aI3{UjLwPNAUJ=hKlk>B+?dnv-f~BLM0&#<G{p3RbEkrH>}I;1w>KN1
zo)i8^HMMZ=8in>_l77vLpoQcxX|@(Irh}A|UVSlxYO9}&ghMzD?wMw<J_};%*f8sk
z3zJY<Hh>1B%5kJ3B$+*(!gWvb^q$CEslGKR9<Ez(8v!6Ljcgr@8J4N57*+jg9?Tlk
zQ0v-_icKn!%d$mGwf*df#P2ZHINfBGBPA0zj2sFal7g*+R;s~MwE}$aZDhYN;kd&5
z&y^HTBAsW*I*W-HIn6Z1Lhv&~j%o$vc$T#^!*XMDqinMYs9j>aHK93gHP}n$R#vW(
zc+5N8X~JG|+sm0+VXP)CemVbyE<`f#?^rHLO{o#Rcz$R2i$7xE0$qD?h_6<f3p7f}
zGso?RI`}oD9_8Lp2`_`Sovt$_Ze4lsGyUDK@yNR+a9EvUVjlO~1Rt_}jCv>|i@AWk
z^F>La`k6a3L6ZB;D++S-iF=AxheAeSO5z%F98OW=ND!pK$!cbdba@R#HbQXMFmQQ6
z&8&#ysf%{V8Tox7`H4@E$r3;CnYgTC@iZcGVjlf&Z+{_RR5iggyNj)Ih-lG@Kd)>g
z5JozJ<v_eTNcP>?dJTo+?x(3e=kna=mlLEN=~+A?KlZ{fMRl?EZ3U(dXp3Ta7Y5-W
zZ>rjcVHNX|BZSF{iOEUn<s>`{^2VLbsRZ2gPXnX2)9^}gbHzwGjg_5Du&KB{Vh?_<
z7kk{|jxWDJK$!V{1A1C2_hjYt*r5e9a`H_DR?3Iz-`|97aDe<v5N;bGVQO%J_*?W!
zVF@&`*mfVJbV!@adwx-^OQ;?)EMxrEn~xve7VCsjyLnR@V{_;hh=o>JzNe1bLy$09
zaG%975)+G^8;&`n1*=L-s994DRu#vYTWPqu;$>O6%>8RAR;kYi39cAz<)viz4$br0
zW4(;}A<n=KJ3xpk-MdoGHOJh?FY%d9^*O_o^I*%T*$TVl?#60It3gW#iBm4+a7gn$
zorZgwpqug|Xmh`-o@^AC8LMH-zqYf9?=KOr?y~?&Yh<kLOcCCaox}eUjx;ru8SQiG
z`?3{}cY=^U>b>;7kSI1u1>wY&sKeJDlSYw)ki4I;sBQNM7d?&`q)w~mgpqS|hK;i_
z8%X9rBo-5D-WFBpq@YeOa;|JG-60{yznU;soA)7Mw1l@;RZs^6Z9Y-getE1)W7&k7
zjP@41h789XQ@G-mpvXWG=-r^4Cq@`~hamo0^|@x%$CO^swW_{{j{ak*pvURv#3%s(
z1V)jG9@c^?qkT3sRHxT@p+dk=(_u(-E0!i{<_U`f^-~u5Fv~Aj)I*vRAD7KSOWC5W
zG?Hu-ESJ2+IWk~Edn%)v9$kB>FP`nBizl+q{0{4|CpWneFZPi}OhP}rSuCwvgY;v=
zD6z5>a}VrQ2iIuiR9szSWMPTz?}7FX`!|x?@*43Sc?>P%iLJOzcoh8HHa1YSZ{pXw
zN9m5Qi)m@Mm%<3v%y-NMdEqNQz8xjjoQ``((Fh`6kz-zpYAqdwDY^O;iv)Y>?hvr4
zYd<?Hr_kfhDsg|&S6(W};EV~+7Q{j9R&8SJ$UK9>6!|Q<VseIht;cwg;`rf4RmYHj
zEE|m>!|R&$kMHeF>Ld5;0|>>3Arl!$<hgt5i*Mhpsi<mkh1h3l*XEI~@Ie&<MP$Bf
zzRYhK+7fFnCj`pwJ4Sy5eIp4bKm7h5_TDor%4CZco>5fB0QN{wBq$ijh-4&*v?xI&
zBUu#5AUT6=0viEQL4pK9vJH}hBo#zKvg9N=(-NE9cfZa!BXjWR@%!$N`#kf{85;Vn
zdaHKrT6?Xv^H6UR8+%_85+0&(9abttW=)kVCW+|7iJCpPgR;kl(@A~GZV-_wCk-&e
zCXWC~O3Qi$Db>5I&NWy1gvv?J1(BW#JS7LxQ9I2mA%@c~$Q|T?p*;UuO;~~rWuScp
zPSgQ?&jcd1Rj=M;YDNP`IFZy&%14F;Nxfb;PzK(Fh;a)-ycpcm8Q8Aax0@9%WS7}P
z4NRUEJ9hll9fZmIz;HkSRpMiMvGKanz+Ap*{sJx96Frw>>MngaHQ~83j<TGpQZqf#
zz9zBB$XU0}(=2jiLGHF*ra_pEI5*vxU8a4b=<>6SY8h)ifBkm2pojG?GfkdCmAZh&
z&xl6XnjJ^yndRCh7jEBkx3}#Mz5wVFjpIU-8P=WZW;%wNIIEej@Bd$c<A3c>i9*uZ
z#7CID>n#p={YsKki$Xc!qO`K-<vm}4E<v<mWCA~mGQ<xgF|$yZehNI_Sesgu{v9ez
zJbXC+cyXH)6xwFSZ9XQnxp1cr3&iyuTny4g>9Y{_pL`PCxSf-t^2M_K+j|G|(ko=x
za1Wzx<W%}YpfR4=B>(kuJ{;K^x?KTjj`J<;8SW(euvG1V-PAKDmW4rP7OErF_%s@A
z7(1Uyn!Eydi@ahL>vcV#R@T@=aY-_wZs);)(Ew>}TZ3U(6OOt&JC|R8;|=}A2kGu%
zWCi=xS-1VF^<rxzKu0oJ+0*wR^sx{c-SR~vM@To9?FHt<9Icai7hL79$2A6J@uvz_
zS9fJx+UZ5-ps`lOd>zOKc8d9Mgd5RFy83y>`Mz*IZ9P%SM|UtwlS9%OxRDA~uieu;
z)I*xuau&aPqS8ZoY_x}c@45~)G#dJF9~@~jORW-DJj*00H&x;&lB-L099@!VjE+ih
z(i_VnJ@rA8e&$3w9>FSK_<K!gZ8y*4y<N?@BlW>KVHO;mN<8*+Z}wX~1$>V;j1212
z@1_&3*2mX)5=R&UQ`*`q9Ozn$L>&g!Dwi$r!LFvO$h}d$d-07xQ2;_L<psFrse=2c
z^5SQnf6BZ)blr=qi;;G0-ECylZ7@DC(`9%pd^ka`*u!~jp&&<1$6~twohm`4$m7Md
zF4YM$ypgaQ(_0mK<;Iha`d9L5s_BOS^lG_GBG7U5)B{3U*gU;wTIVw-j+AiCX0-Fp
zv~yVpl+{Cn2uAB#bZ#_>A09weOf-DgrLS>Zi5olM@+Ue1*x4Dl^C^&Z?W7evhMvP3
zqu$<`hlJrNKsSdKa^}qde!}6DMg-JWfKu|HEnPk@^bG>R5Kw{s(VC~V=#{MO&rfI^
zoL@%nQ5-oPHqOb%K!Us9_Esd&c2!=fmeV<EV-F~+Tx8LtH6uA5?H^r#HtiWl>cB@e
za|TS}eCB*hV7Ypil@@_IP}3zJeK>7l-!Xj&P1lL6hEF}OZTZsCR2L4R`EZ~&;+g<_
zIFYF_Es3uE*(@%bSpA;ujjk9zd?dB7y(wQ8yL{g53ghD$$OfCo^B3g!^_~nf4LbHm
zG!zt1FVB0#?dbM%i>p}1@$1kUsdr?M3-#YS@<I@Jceb}ONM8kMx%w9uSg6bAI81!V
z=d4)PgA0146<dRjiRQ?M@0JA<cmP-yK5_8&sjo_Ym{$2HPvTl$uk_vJ9xsM-501#2
zPVF`bkH&#`G4OygYOl9fZ#kgnU64i_WSuLdTBQm{>gZ*c!*na#Q-LF$A@Vk}%`{n6
zQqJhH^=UFb)%^=F4O$isVhpG&-f1~GeB$%fmfcFE=8#Ay*y(lQ!RCi`CWb~9r^dGT
zyxHpHV}?dUgf6nO2NV1`>xNuA(W<*>1i1+agP1Y@GQlvuDWyuYNay%HGCQTaqA67g
zx~gI|bi?5Lofqk+%{5@g`yOkp=5Rh#!((wk7QbedzQ{jOIJBat&=}uK-yT$Bm#SN+
z#QkRQQc{=g@*tJF!+Zpil*S|NLcNY5D)V@d{vScV<rCup`TZ-o8>VAZHJKOLc=AWv
z?i{!z+l-J$B70pkG{;yQOx?r2i!+a+qtpv`mI|(m+4}Po-d+QqQ$BkAk)$S>O=57z
zQde^x2vlcnaO|*_j_~^^twLp*$N}UI4i3xoap0-Rpl`+UHEG1WOCPjKn$zl9<B439
zn~@JK@Rw1Zl30U%(sJ3usOwq&Xp-|xLgp-?m{@44ZcT;&hy~A_v+jXPM6^Z^zN7&h
z7If^FgZEM11kQfIgpXM7lclsv<%1UdZN@Pl;uR){3>Coqdjx1x>VT<K**Qpt`nt_C
zs-~|f8YU&wQ}RT(O}~qN!E0O_Rbl7Mm`wyav|<EbWjwW}@e^&sXN!I@j7^I}k$Q=*
zR7hk)Q=0<_Iz8<Hs}5!SW%m1qETLq9Yc*8K0KKKhLqOIGwJ$sy#1gf3Q@S#qp~5xI
z{a$I>xdYJ^X*|}F?bAeZ86jFV^F65pGfHOSWlN2dLS^Ziske0Cc-_U{a$uWjbfiI;
zrn|#s57;x*TIOl94UucS_%#HB>hT0?f*}H;cx3g|qqxNG7n{|W3b(1Hg!#5sS9z66
zAFAfrBVp!B7SztV+Lc+F>cLH;?QZL?MH>`m&vPNgY?~u@*BQBFBud=eieNV)OStSd
z)?M@>xq|^x5+=Zstg4Kc3%QTzv?}rue*_n}$IUDQN0}de?TO}cFLiNnO7Yr~9V997
zh&-{4Relg1S?8Du$1{`r^n*zA^a7_0V0Xs?OwOtUjHVGpNXvZ!+y=}>g0w8(;bGS-
zCy_Umzp8Pcv^9Y*sic$&6)#<b!@YkZMoAj=dj(J1r?HXv$ZE4P2PE}r<Y1JdI2mfn
z!MYiJkB#-_%F2*<4SB189@nc&%lKkXIJpYzp}Nv?`7Q|Q#AilN-QIZ?k&T90g?39z
zux9&9NbaS^;T#YKG^=VMVq{=2v$6z>EVfzCQ&a&DJVW^)N-IRl@*!2PxYy!Qakj%6
zB1e1*1v8dasGp_K%wzRWElBU@xgz)Cjr#ZtO;Q}2TRUGcr?!yT1N6Nq5MZB$^Tw&M
zs~9+;v4VI+nuPsyUaJihQ8T6p<Fp<qN+JzM5NxC>>K*8G8{P&m&G1h-r&0;unb{W^
zyU?Lx7G5}{GL|8d$`Lu@4*>9pH<RDnu(F{c#LK|3?r?*Sb&VhQn?f^abUOmH*UG;9
z!B8`sD3&fn@5|HK-e$AH(b-^1=VpZGgIk{&t5~YFy!wvBvI53jRSR03i%V(#?(7yo
zUk-FN%~}oqZhUZoPS%M>=O)&v*mp60f~R9*cn1}gN1PA@GNI}gmvD%exH1zDrKJPv
zJFw1*AxG%@{YE8`h>JDlLx+jEyR<<aPgzCf0vrm;H%~=xQbN_<@yY<^`_K_`%p*2q
zid7X?<jT_k<rtgbeqfr{Tufrz`@8Dx=(bugv<STM8|oKCv>9f%hrGRfz7F9n(`wKF
z_Ts@%UI0p%r=)u5{ZQZ}lNt~pF00-Q=xvFqICIm|K-|Iv@qcgugmF5_ns$Jd2PvaL
zJ!Y!bP0>EdITH2wPAxi<)Or=ceh>PQHc1JxzB05P2Vq?07-%|$<d>FUIo}7k-gCeZ
z(IDB_KZYCCMZc~>*C831H2KG4gl<pqa7ZqlJA2hRUbGNKlT#z+p{gpgz_Q8I+Lza=
zY|(p4T7x;;XUqVX)g*)PJ<0SDIc$}{SULe0UYrp9d-<N1`B35z#KFO}xC-Y~*bS?T
z^v!meK<ZD^>0_Oz!-OWB+cSjIo=Qd*VHBsPkl6B+vnOQeGkJHHPu`^U`KWkv9>~y<
z12wYa$CKuyvQn}$dtL6h)*!;ql|?`Oek2(_rHBeP8F3K;XkyyvK(&dRL+?yyu_w{3
zP@0r=5Yn+onHq7TTUC$Ue1vjFACcX7goln0NSanUbZAn*TF+O;+FEa76mEX=>VSP_
zg0yDv;w@*?W#4_)k-lq8ADcuL8tSKV1|pj7pR%5?>(`xuXc~*Cobr|h$)|Moyll_y
zE?>2tsS;3#e{3VOwsP7yNptL($?QHtSd5=A>uNEPKs4QIl|0cd^1XO>ESY3*sb;e}
zLse3EEBPPj_j!g*Q?<64*<w328DjXiBYz^n5rZ73>c8A6QIzFiRg;o9$l9V}h7=DT
zRPdu*uoXNgDQ~Y2G3djOplXzQ79FqQ0X2~R0VFRc6YGa{MfuVj$)&daj$KrwWR*M!
zIUiLIw$EQ&j8fGbJJ-v1eJ3iNMg5jDD7mNS%W`{rW)luHteoI~wGTDVDoInPH_o<6
zW#E|l`_!iBdgYs9*j1@pfgm=IQkv?69H;sTHsR155O<%_!Fd~J86B#0GXhIR{$ASW
zxqKbtJ&GrBgB-7P6;VeeY0*Aj^Gv0x*~>_MB+*0l8FgyoIHLxNoIuTS{V>WQc@Twp
zxVIgV9z5&n=c`s%+3IuYv52z`*-i?!Oa~o`F?U!fRli<yVhD6Y+&>Hy#jH5Oi;t}U
zIDYTc#j?}Zey`%SvxXpk$wArHM$ECy1y^`le-I%L4|J3-U8GcfhHbjg9UW<!s(6qs
z=^0YB%o9GBcJAi!XczTN$Z3zG5675tT)$#1`es@q)!FB&8i^QojCqr@Vt71l6GY$_
zHf5>%c&@1MTbU52gzg+rR9wZS*Ab5(x+J&oa*r4bFt*{jb>HAUlpyu@5J+{(gnX$2
zZKIXipLo%S)(pWp5I*$C6RI=HlgVv%Gc|S#vlHz(O7<M=p0hCws;m`(%L(?nm1CLq
z`Amdy()*`X3qQf;I$^svZE=lJf{O6acq$x4Ia7gKoXVMtXsS<h9MlDjc}!3eH|4I8
z$>>cpbfhgYJ|gs#z2eJH5w4SG5h%q+l`WNy+t-&#pQhPR@kvUPXkj|jcY9Ms?by=m
zDMQN<@y;|c@$HBEeunFA9<^66fNUO7KamGwtp*_CUuolfC8}tBR8lAl=)8&|EvxWy
zo-1)5mi$fe!XaIz6&r*OoY0S0`BY{42VE%us%qYJ4OFee*|wGCqu8<AYWhyjAR07v
z&qOK%tUZ%A0_*fYS5aJLPTEwK%lO#-<reDxJ}Y_ytVJKg(A4uKIH3A0EKyfkk`7SL
zm=>N^4M~{Y^J|K+;zUe>`5a_$qONGZr$L$|52NAe7QFLG9%Voy>S9MGqOyY<$qYys
zqlJ|fTMyGOkiQ@eMPC~a1IwAl-OA>ARVe_N3LZ*wnkXi&sh*NcbH5qK*iRAoq#{r*
z`ns%2^PN!+Zof%W2#KWU$6<lwVKr`EjV=?y+R|b&kZf><0MR&I=V09M5GdYcLA|74
zbDphB+Q-xg#mS~=<nH6)(#t2wt{7<cAwkiZfGUMrmo>v38BvrbyH~L0ek1K2*78!h
z?BhN)X0uaJrsD9V>I*eZT!jE%6?m6%Rwa|PQ>vCz%y!C|d5I%Pz;j|;G~U^>s#}04
zC!Lk@$w$pCj_E^vC$5k%zPGPVnj!p@oVEBJTUA`y>LC1Ql~3;)HKx$U%wuIDFFtUY
zMZs}icTXfC;U0Cf#ZA^2^feX_#s!+jf+W>&HvfZh?Pi+h49%C_^hzByZ=OKzEd~MV
z--~)cuwXsjSe1Be_vcR@8-wPKq4rJlK!3pqT{v)^7SUyq1xxLX%K9k5mkbI~cJzQB
zX`u+*T7^pMDKUWwYH2|9A3S!R<We-=>6bzr$0j+TX=r1cNdxXOh!<6z^hwa5B=7f<
zM#-6ud0Z+?Ak6|ivH$7^IHi?HFl`NtQoAoPz>O38%elLSP9KXnR;4r!Wcyo7l?*|a
zZPlE|G2Xl69VG*mp6BzKEsi43yHUmS<MD0z7DArfMF|EJLkqC6lJ?amHF?U;yyDzs
z-lIkm7n<5lSyZ+BSQX!Ai;5(WUW4TP<lUxMk{0{4+`9T)d}>@=#fH$`Q#rOPQo9dd
zSH#`g>N8Q13Q5$%Wm7SoH96^8)>jYF`e}>#ovTGJCR;gtU%0K%<;7=xa5S3aL-ErB
zl>=L$Z7o_}n8Ji(ibHL^>nf%0<{^CiO8eIk;#arPFICl&$1Jr?Sh?$Rwu5s$2}n^^
zpA2XKp|81q@%k=Kx$d?Fv7n9S@@V6&<qwo!{`y~7*^mAs30f$t8gf7Q(a*1Y0$3_3
z6kr=FBk%r`ywd~cRUuDg^$A%Q#x?@~zVU!|u>i8Dn~wT?<LBRb8^2(Z;IgB7;r)-;
zRcvrql89mh?sdMBvfj@QK!p-GAQc8je)bLOut1?AF!cKsjc+_)R1!>}DizQ7=mFoF
z-(eYmUQ#}Mp#IqbsKNv$r3e3rK5(OTA)yW{*giI{=pQTdhaV?_71;ZMWpdvOm>YdL
zGAa4UO^1!ocl0{V7cYQ0^adOMTNC*8s*+HJ$xLFu@;&Czw+2@m2&-8qF_G(M2a~jY
zHc`0wA9GRr8wP~ku`h3IiwAv7yvOR2ee}^Vct-ts>R@4e(@;Tc1DC-Nqk6cr8jbv#
z$55kWdE$!{;5}-S=ptc)_Sf+P8!oZhkHC!uJtYI*0=Mv=xq4Jc$?;0|2SajTO4Rzh
z)#u-n7$Uj7bKiZa@L%eQt>$hE{ROj?%G*l}k)!iEjJH^d$`JZ22O5RG%uNZA<Vs_A
zPRWMfDiO7|1^ftcB5zrg<1z&`PR3C=v;PqTe31<mJk+QNAuTF?3xA9LjZDBHhAv8J
zI6y)$0;C0b-0JJh_;L#(?5SZ(3~1#AchT@N11@5kxS+MNwv1Om;I5qUw$)rM4g0^^
z=Y0~#Tv#P=IBooPf<;M?c-{#jA0{LJQ^)`G6^%+Jq0+wkvZE0SMXjnjqh82D8oY{`
zJ~e}AD3ObNJ%S2=m&VZ5eaIPtd5FJdt>6YwczvcxLp{`TgSP_70^x7H@n`6cm6|Nq
zsYvAc@)Q`>O;c8@7v=~Sft_LBSh@DByK5w+%qBv(0cRD(-2UTZ`O2{LPuS0aR2L(p
zpbym&6Ho`g+qMSuGd^EP%d1aaErmHUj*$@gv<UZr{!zIphEKWxFt0ScsnXJ}TFph%
z|IJLwKN)p`STu3FXY?Bl3iB1Ca3|w*I|aAutdrT7&>naW$oEjpT^TvV5QO$>DOmu_
zQ}`ZlSHlh-pjFjY&n<N0e2O~!Uq~wd?GI%^Ih;~#)t>J;w($X0G7fcMUe|E0n6C@L
z5<0&j_L*~I&0OG{br6)8r|kLoZvf6OA-bbflxH&Bn%vjb#3*dp+GvZ#U#EKQK1|Bm
zayHMUv~~RFzXR8XIvNR`9Z1pC-wGC=z390cu(2dWw^I<Rdv)7FxT)MJ+#TY$+W(Fi
z!`>28ImS~tCelmK*Y)}R`+IncAm;Z)UXuR0;~~a!&v19K=j1Xh@QG~qVWhRGFYEb^
z6Fx8!zl`CS;S3)4)}X(_n1nP5wixYGEPtZj%i{09{q=zxH3hMqhDdut^2=I7Hm6;f
zM6t)JO*b$)NB(bq&(}}#op>zD346XTzT}sU$MK!tCL!H$Lcau}zh>;)|A;DwiE>$?
z*!%5|{MTo|ynz(bbj5ZYB%@!SCqMk>W^-Xh_(yKq{8PUT4dWKz;PLhJqdWLNjQXn~
zVd!B1qf^TIzkDN2`RcP9eglmjgrcdMG^U?S<ZAn10HPk-cYg1SzOh0i`al51w<hFp
z^Ct)3q74HmSHS%Gb1!hWu^XfgZ^X;}{@EJw2j8fKKMY`Qf#ujQU+>lb;bDBaYU8KK
z>rj73BKYQ#an|RfNy%}6YMLzML^z4g;ERbKowOB*(@-XeQ9etN5g=3acnVVS_#&Sj
z0Y=Mk0Cx+^ubXVMOF*C!xkSK6qL2avFBsCOokX1A;*gXC3@Ty)%g;_<186=Ru`ga(
z1N`(H2wKh=hWz&3(L`}WeVe9FMEEnx_hq(tpO%1gLm*N}@<$v6WPyu`3+odB|FZh+
zY|ri?tm0XXdnQ1hQ1~pY0Yqp^$mn1N+^22*N)ROu;-W}9dKWs_E{!$7nb*i#0`#{q
zL`9Eq^^cs4Q*i6uGjem!xwq}zP!k3lUl~oz_qObNk4=SFiVyDR-e?<$ay%c23saMn
z;|_8n!V?z6dl?clH1xsRL=Gk56A7r06&1d7@*9iz%XjNLK>Nke&g$T)buaUeA17?a
zAU@Ily&ye4i_i{7!4DPc6h$iAn0RhpV5v=3Po>rO*{!9$`MXZ)#%E#CAEv9^=y`(A
z>OZ+fC4*2XBRm1<jYrJd6s*8kiU()*1E$zfyFV4bWj|D~ZU`mjhmT!;doL5wP(#wm
z;|ng${)JE_HbG!@ANKS!E{N0tygcfGuht&dhn4vq5Vb3s;Nys7SPh`;h+GZ_v+%HN
zE;UVH2GxTYYq}k<`=gC*9>_dz-n#Q`<)uPRjwK)KvNT@?aWPTow~{w~7B`n%rDs=%
zZlE!H7J#@C^8#697MS?4087O|381)bbP!28RWV3~ZEm7np!*UsUN`Yp(DT<LMFGTv
za2CoNIc?I8xaZRqZ1E>=Y#qRRL(PT_@pW75YHeDjEZ^O|gR5{>$))$s(Rx@}&2d$)
zFHdAOpMye&c_=*VjN@51YNWbm(N?sgL(#1VX5VKJ9#9oNy`>x3ZOeYvMF0h=5|r00
zv1?Fh39oSB?t+>!m;W3>+nrGdPn;DUs#S5=yNj-UKv7FF-?PX1?u~8a=Md<~(Bo!%
zw4`$8LW(og{n#q8cR*rsj6m1jx98}&_d`dEx)ITu0cGlU;$>|K1m<0CHgxM26U_zv
zM>-B?PfTPglkG1X1Ea3{4)Bm4;%kVj$^!J8#GzbPkJvYbQlzaRKyMLHtmD7~JN}(Z
zYSEIZFjSlxz&WO2aN9HSxkQCnP_6J05aTFSckdHaZ-R@#HwN(2Be94h&O493Dx{v`
z0cxE=>#`gD0}h}kiTmupc|kS4@8A+bD@EUW7|fYNYKk!65M32V4ZnO;&z7d{t9_Yk
zTX{SOg>61Mc3NxYkIf6s@MMCJ;&M9B#Mlsx2@>w!_5>qZs>KLfsOvi3%v5eKEwqE;
zV%5c@K{~KY;zTh05yVKkC}G+o+`j1@;l0hVc#XXmae7dE8Ufz~t}9iuG~Fj5zgEZA
zp3f_DtV1}=AU!*Z)GP}N5{`G)J1X9c@&IP|AU>vID>2Ob{CPKNG-9hf?Xi}V@J{xo
zn*szb5i8hoR=>X&hPB&(1U!V-IlJ6V6brYhU@-whX5)1Co3{y2eRqrS*@C*V3^i|+
zf~wT+l|cdJ6)7KlF!I&T!XD^^dBjmk&b>VSDneLx<^6@aulDnfFBxb4h;MJ5dbW>e
zqi9AlXpSMS;kk#*H%tGOM1Q`9XQY)t`5%aJQy=Z*{P*!3DFkCH7FKB~r=#=*YfU*t
zsxzd0FXu@qDS;Dz8bz*Beq(5=)?VZ(9eMww%}RVH#-g{NNW6b(1V@^CY!Om9ij9nZ
zY?>nM4CLN9A71rBOg@9iJ~B=@-K7`JSE@1rm##|kVj`G?nkVkBB;|c9LE_JN?L#a7
zQLo^wWVFGz$r&PkOU)Y$U7-maw}elNz`ayUJ!#smDG%2!&6hyhBgGeMtQf*9sit_A
zWzrM%K?oFGwv9!m?m&Fv^|}Q-RoWWRZK@<*r8t<lgEKd35Z-mMyD->DvL1{heTD3o
zJX3u)>as#XNl~O~oYgsWPjv<#J<O!3vhS|G*-gC{8EE5qa?gcRWHjiqxP)IcRPJL-
zR2I;;N}|is6E-y#loc$ncx6X#?>YQPTL}bp*$B_+@c4epC<AAehWbAOF=qa^h2?B_
z-KHZOf*zO%Bw1Uu)hAiEcL63K?U%BT<Ea*80(d_`Y&N9E?TD9q@5y;%MVtu)^H38m
zlnrYV_Ayj$S(0QCUZrzaT$p8O3Sia+RZ!_~oglyWXd89k5~6G~`b-62(_56mj-IpD
z{#*=4{6l)5tR_5HOhyRoBR+a71|HXlQ1W_D?k_El9K|WqydX|17$Nugbc5Ht<+)~O
zutL<qEyByshaS@!V0SQHm#Kr+0ype{WH~glFbDS2Clt7{J}9vy?XODWclz{E`z*^m
z^~+e;Z`>BZs2XYSUUR^Xp0bYg1S*S7?2Ckw=7L>&j~&={0@&kg1*=`I_;A?pg)-tu
zWv2n^tpQ7OV~>*I9TeF3xT95Lj1>nsH%VKk`hHSU;m5K{F?cLoq&a^1jA7yQd{&W9
zv_Gi;`s2|y#E5D(uf{#4z~s?6&&5i;b0|UVH8ZzjDM2%M+8Wgz;QqEsaj+dMkJ8g?
zKp|tbsOdd{okz4`H9lsCijuKZM^={!H9c{`U?L_S-n)FXsJ(ZYT~eWrsNgaEz+lgx
z0axM#$%=bB8GG`&^YKdtaP1rE;PBlNxW+$byg3WD;llD^{J8o?L{{hgQ8;N2f`0@W
za-+x-@jw7|))n!FB3yaAb>AD+raLlwkpf&kn1Rg{kp7Am@9d1$EC>EisN)PAfdkx9
zhhw9`rH@~I(A$)Hs@5@cuul_|05h9=)5ei{J|#c4f?hGCABs=1Nb82s<AyS$oi7}P
zM-yTURDDZm57*Xti4M)~R@Od*zBdBIkoUhv_P#=>mTZI`(!lB@s)J#077D2EZUd`4
z+rzQbMSULox>0q}y$Ul2lt_GgyY|0)mhj3E4$8QMGb)(~iNnja*WGPMsy53QWhp$7
z*)Uzm%Q}RVo<^W{RQWPi<7m<{IyNEU3I#`zE2E%lW>Aq2;|fK$;WpZ<5?E7Aq05}i
z(QrGZlv)+@?!Z)pH@aq-JDES0j)p2%P;@BNiiG(HY)#2?G~J5mU&cU2P$4#@qml{q
z*a3VNLfslkujC9HXe_{5JN*GdWW2amY-L2?F<x1>|Gw<iV59-c;A7i~Ghbf@YoBjI
ztoIr(`FPcUDPX`O95AZnn^@>eBLTuo;jg>gL+mO&)&E(l;Y~q4@Q9%xCEG*&{W7p)
zA{o5>i=u7LaIe{PbK^lB$W~)|T!&Um<%kd*w4v;5U2=~Fxx+zJxoB~-plw;-rOsb{
zQ$~h_E5kg6fsDz*ryds89yFVJ#~lJ>iwdagcc>aCu+I%6>U@g<lZs59MsIn7uogR&
zNd#liPPW6fPXg^3RX!tc1lR=U<+B`sf)R&k>JBKWRIq81*deOq75>S}sc<D6`XfK9
z6goDERD=?jtCusYL-7PWpTz{NekY7RpYWsVX(EkLH7n!x>IPM;l0{(X4C7l0OsX-k
zfx*2ddQ?T_F;>QVs`HD<E#00^1dH+x^Kal`8EO*uOqyKU_pdv*?9wDeR&-LHs!WPq
zmoD4f2e}X@mkgqd^biMyx^_syyI1vL3D;4S0arjv;qU?=$bmv>N`Gjd@|5>}+ym~o
z1bQW$JER%a84NDNPfUH-X0S2}iUTou3WkUGkkDvH;mBRLbFUI4TR=`WEk(i_6RI=g
z0D_323#iFf;MIh2MGWAX<S0R=fugjiLsN4cVe8()4eH9tg!ifZ*1*?7GT)4M(Y-GY
zO_rm#6dz$*!OOd;gU6}P2vF0^(sNsivhdLXOwwveI+X3aBMCdYO2tgGNPQ@Ah27LB
zImAtPdT?qL@sy7RWSFwk`A>8#U!$ZuM`vf!iH&bv!!{T(ovs+Nuh%8q5!or6Ah>Bg
z>-q%9=}?`NM!c~i9dP4<-ddIW(P_O;@o6rj))VpX11qJ(eJWVW-ir$fxrnKfz&^*t
zmT2q;5Ir_uc3!Mv^kG+We(`EM+f%1|x=hE8ZZCZuQP<S1ACu(8RXVE|gb13E+`9Nq
zg=k|EIXZX<&XcpquEe_5f_sx%W9Eq~r;S;X+Rz8=Al9El#M}eR+F9-h{VTAQZc&Um
z+uzk;%3XQndElMt)%+}X>EL;&LCTmtOFKQVoE$jWUbq0d)#N<+#g>Zhcs>E+?2k}f
zm#5agdQyx5W?u&zNh*ybLP8%YDMONU6sq#4{zTP`V_;*qlNx@*scskrSA6=5Im+v1
zclazOf#Ne~`mDB!`RKc;hlEa`qpdiA3DrQWYWz`!2odFbiEid;ilC`WwrqF1GIh*j
zX0dBeuri6M=r~L1tfzVj&;;*O0n1V363oV#EY=07D3B|3-*K(1<SKsL?KqT*uvh7v
zK4MrVF#}YA_Yq?QUegZ=vw^8@u?5TuT)7{wFY>X<Wl{8pn7k%dF=u-MwZIgoWb3i$
z(HVq~ZjmMl!P=hB=o8l7J@gSF__bLTuPSMu=*dRP$dQ6vJw)gS!xHW?n#iMyOM3m9
z`_Sis9@8RSSa!%3l;65xjR+$I1sD@QkqNSOjBG#+5bzsrabbhNxyS^1;T-8{mEHt!
zI8(_?I8?8h%s(%fozO%PsEo8lnuSavI?Hl;I-4ZE?L$By>H9aEs*vbq>T)~>?gdA9
zuq8?lLaMruCQ>7aS3iG_S@&uCNH~g*J1#*iii4C)5b1OvR5FWT-L3{5%05897GQ0A
z$f7*m54iLLHo7c=u7<hZgopNcOp}>wu@B?I9$bqN&ST8pLuFJLkmLqv91@s(1wHUA
zfhHHco1cDS;5LvVD_RBXfRyG_$2k9(ly*qb9I{UsZk5{zvBC&}qmhZ9U=`VVBt3Ko
z5~#g`p_EeZrWoHPt$HV#FLkHVd;ez5ld-)Amkfh09H{~ctO-;L2C7(*`>rP#48*eH
zEB7d_9?HhUkxK(?M&|&NO(dEqX8QTNjTH?z^QKQeG1sdRiL1XYkPP#d6md8FqM#@g
z5kigJVLRzBW1qvkYh=Q0C!X{@uT_?$`hX0u$ugB#Ctp_Oq|S*I$ws5!Cd9fr$hJ$9
zCP4_&Ep&;cRMR-<s7!BbRBUVNn|xwOx@8{Z<kjNV;m@Ft*9atja;Ln=s#L>16E7jx
zupinz`-gYvATwsVJ9A(}X#2}=*qQ;5Kbw?Xw|D2dFupq&y$R^_vR%p|f^<(JH91((
z<B-spG^(o0XC*NQ=D0&z!)CROoL)PGQ=xS82(tH`)eMD`n9)A=*jfq0izWuZ{9-RO
z6Ltopl)-)6g9*Z_$z?ZIId0)hEsVr4r>VWSiHP>M&azu&HLB&+YrX%h<pinV`I*ml
zEa0ZBIf>vl?+G<=h4vFK5UeQgH4vUsOubpC-V_!X54bKuh8lpRvIWCn_UM)-)7ZS3
zOz^<1Q#bRmYHp88MVB)oSIxOy<C?+jmX{8!Vn1KpZ1gy@ttMU=1IeuVWa4mc%aJ%H
z6)M&E=*Fe$JBF{l$o(JDn++ULn>mTF;aOhEf)@4kpY^<aH6+51B?_#IL0?d_-NTOo
zM;=-+|I@tnPxvq+u>|ZoLK$@Zx6>d-{I+w^gI>oG?Zyo<VP-^rIs#g*cRkUAW4xY3
zaQ2Ras$737>|NKHvc*+k76(vi=wp&95&bJ7=;=2^(i8-KxuVH62$bmw0HfZOH$mL9
zgUhqJXm-myWGS);q=8)Zm2swrv*s^~0hkz6!ryNGfLw6W3I(8#4iM@CRijyz9kb&j
zTv#2U076W9aRJzD4RAF)Z{LbYi!8w%p}-u}6mt75G8G%=5R08zaB$`Fq<*+r7R4G0
zq`0mlla;dUX;O_71YndQR`mm;Dg)Np12350cmkv}=<!-y^6~&bM9dZb$J7@t2TVtc
z6aq3BU*k5&!&8M%+6U3lAvQTduCd@2at?>3K!Qf$*QmL8Vi=O%<ZP_-hUwm4bAO=r
z00NcRFw(6@$1)WT&_CpSC4t~r!r-AfbE6Aojy0uItQrO?mOG+2wJBHRh)!s$Ym4Z`
zOc>YU0U3Fa%;gSF5;c@35vNhwyNI4B*<l8WbI1jc%g3wP6FOeSB5KoZk%Mp#%7kVi
zabP9R#sO9_ERxENZ2$^|`iV@xEnsH7D-~=483s;e#`}N@I}y0Dp-4RvIYnfgk~BR5
z_&R2^LrU=Qq){ExypX?h$59a9(L)kcQ1z&2Hr6fmomGC1I;d`+S0mN{G6M;u<)wvq
z#E9Le5laSo5~K_)l8#7(+~LXOZ*1LFfsZlmM4C>~I{EGcGiq&CuS`h90ydvR4c=Lv
z1|TaOu``f~VwRLe46)lF2e9!3Wa$FZGi%0f#dPEabJ6BrF}iLh>u$e$W+WHm<-^ok
z#g2fvOT>y8D|&T+%kwPakA&TRKKWU?44Fb1K^=#Ge1y*ale`-><*yw`yE2oO=NE+_
zU0(4iF&9Mp;3EVT(7}!$OE9fRiuT7qrSwQy*7w?uO7v}?HR(8IdwKmTh%&?=*Fck!
zYrl>l?ifoQLt>9Sv0iDFjRzS8DO7pd+IlhL@M<`B0nC70XBXoOCd2{1UWoz#FjXf)
zCqxXea+`aj$X%LD30;-|%1$mWe0z?Shp+S0J(s)0&*+|(oHn>hAW}mGM7gx|in{2Y
zXSBc5FJh9aXjiB<+uRE1EkuZCywu*u4C@fWGvxzZ(P?AoDbgeKVGrRI!bEPg5Kfou
zz(?2DfL17y@u3|e4u-1<3kO`m^B8qHn3yE?V4{ty@FA!JzMtwLbUh5xws|)T?jC}~
z0@yM_k12YZj8QH7xD86>PNsm|D;}}S@e1xOVrYDTz$Co(qaP@GqN6*(OF596Vx~8%
z&9M&PTiXN4j`%L;M$-DVVQFz0uvoe3+#uo(VBR49F0`xS-1eOD7cEQfBGOY33t3Xz
z14aa!kW1q#06*_vcJ?k$BbEUNdjx~@R(h#h53`=8eEBhfQ#D0+ZxJH!6FyGzT>_Z-
zp(w@%bG!7Nfq&h$k$>dtegtN|EF#*9%~vD|#_n!FU}z{D1R8|TXF4%^Ahm|6-JW@-
z^`O$dpX?%4o49ymc3`a!GlztII=F2k&ZExo%e_OOgFNHK;Ng@)rP>wOW+x)$f%qb9
zXG{~x=0fTN2_or;<I3JtX!ncJ+|+KKA+O78-COFQI=={EAsi7!6~L5OY9%k9tMOkR
zN1(DBN~o5*pK1_thF(m*!cBi9G*S`vyo^s6w1a!I+I1Q0;=8+*Nwk6gy)v7X>W(|h
z7i;5%Qd)xUNRf=RG&uEC-N4-qNK%O(0wmf9dtM={Y2^iT(q^iIaSNQ-d*^WnG~6Of
z2{I(XNQVa6Xsml_QM6<OK;TUighkSo2uKj+lh9~yobi<V-jm62Q5l>nO9QBnlovFC
zsw_!D=v%DcYxPB=rJn-WfYl(;!uAqF#-G-ewgnO*AE-I#M;ksPVG>3p2o1l$nZ)u6
zfr?yJnlcu#aTQ-#MZ9(;rNTwC6F#9R*^VegbWElo0S)mMWAj0rx&zNExe8;qO+hqi
z?T|J{EUV+3u4*$$L=9~LD}l`Utw+NA3j!v~tNd}Ico0HNYU4OriFW}5@j9!u-A`@o
z#3nhof4qNLLwXj<2t`+ZNo<=}{Ec-ok2`3A6LB<R?MW~ldo&bS?9&C1#)?(8&4KI!
zOWX+J(sg{E^i6dIRkr|w24Oxf5U$Xkn&F2tw}12kV)z7;7_UUq|7Wx1C~K1ZQGELw
zl=Y$Y;pNZd5-<gXF5~tbC;I4vQT0LVr|Ul!l`SDMz6yJzKeElt-u$de->|Wd=@GbS
ztk`9iom!bX=Dvb-7B{|(A+4rR4G?yDoLao*f{pacPMD++r!&!+(wRj#{tF{_;F)oB
z%OIqy2Z^kUfz$kkY5!LloBe^>WU@E<r0XAPqqO*|U;669yh!o;Mx?&icU3JL)v2Ih
zv!OzE<IisNRG6(u_5RbI@lQYgJL^XB;RXyq^zoKUf9C>Uz@Q)cKfu9)#KGe_9sRmL
z`@_Xwj0+gZCV6G(@BC_3fB3iIJ86*O_e+K6ufMRy{+C~dNjpyt1DLx?b@#jF(~bWy
zsB)otzwn!b(@zdy^dt;`zWO@%#(#fZpx@{v8()R1{Z{dpWd7g%=!S1pLKF;S8(&{I
zwsqsYe8XS*`m1&!4498cTY5I;L4Ezv4W}q!8w|ijaL1dk7apcnMISDM&i!DF_{rRb
z<TgSSi`c_F8D3VH$-~65#Jn^vr<eUVwW=0{>9wlswQBI2y|{nlk!;L!=sa=^&aMtZ
z)X5w977W5rw~&bW!jbA@|NrxQJ|RJ_NFB_8EZe>O0LiLN*i=@Sk^9JDP|!yVD|Vvc
zk;UKmmYr18f>!22dnS{6%k7OPaYN>cM9yzecoLQee|3(G_s0<cwKJQ64oGiNbtJtJ
z`v}#!UT+FBGk`#saXtI!mq{PKE1^zwZx2ap`J1P;?prtX367fFVhNyz$Qz^|r^%;}
zFYU#3Hv^AGLSaW~;ql3kI;^X)`rX9g%GF#p-nqYwo@&)FlS|9lxaFL0gpK#Qn+lib
zCtUl-`7VFq&k3_V2iC_RCt^QY?O^Eo`6b^&7=a+rjpWrYxrPX?V-ZrvojphIBhq<<
zpXiy?4a(h_`=HzuhnjtQg(h9tfJX<nfYx8@)lT~}d2k`Y{2S+m=)v7J{-5Q9J};;*
zn+BBs!Ah$QhS=fjtV@TG=v|cbR~DuMk0H$@gV}iIz;CSzx(YUW2G95Beik!kNb1AM
zdk!!Md8Gc^0R21{iLEclo$``|$v+a$GVPK)OM3XpEeTTeuO>2&NWHfNvPOSoE!&!3
zl7EfU0DWQ07PJ_t!4_+@N}CeJPG(Zl<g*eo*GSHsIdJePN^-KxmVw7gH>}{$1Hx@W
z(a=oD`$EEFNR+yHp64=ntoTUB?QQ_;AXP&7^0Ia3S^2*xe6=!BY{bRv#+dMLRCG4)
zu;YKLLL=gIwW$Pu@y|AaC8oRg@|mh|k3n{<{(3wPp-*AD*pI<gss%(pmjH(^40-ti
zS$L-~i!(#zV9vG=Y3S>9X|%2fUp{x9_b)q+l4(dHBCQ_fkgaYQBM#KAZUSh@Hq9Fv
zV13ZOdq7#9KK%11ql|#WJ@?*yP7VIk_z>dMM6DVE)Z5KZ;!d~iH9IH~rA1O-+#v)$
zmk8rnE<z+vw)rC-c&rl_|NJhD?!nq{qFX!LwZcOi9%Efm@S?41eKX8IFS=Sv_)ncD
z<NG##)-PM?pOMqWOTy@eoV&|5ubiKxnn^^RKr{o&-5Gz!iT~-?nEf4Mt!{dq?oX;V
zBpeaSe0-77Iu7l+II+<g_18=cABLGLyc|>blcEL8BqAC)=U%gMd3nQ^_w@tS%0hw5
z<=tsl`Hhc=zaI2k|L8<0-r-9T>rtv7UI$T+;IN&$?>is*!@sgV?fZi_Jtw+O9R1^e
zOM(jp^LKdv1m90CAiH?T7ad1k`M*2W8}0&(E+fpJEPtEX#*yZ`D{1%~Ea1rxgg-Xo
zhTrjDpR7;{vaLtvnaw}B18c)!0e2?iTYr4c*Nw^L4$L1{t8wZ#PMYui*?$ATzX1S*
z6aQZVz;Lr{SHt@KCt*doH&6QV=G#<OdYTJvr8~%R^mj00XnuqExS{u9G*k7L*ocpn
zBHx}aEHp_`A3QBW%n6LF{Nn^(AE3UDwqLfV@owab(n?ynE~;W04;;Jd#O~Vci*jG0
zeqiJi;V)LacYm6>Nhd?lu5Rx18y@Yv`0g5?diSA}6`tw2prMK@9dzy<;ui;oY>xid
zZT|N*qLGSHxbf`u@%7Io(YYm^+Y8Kj%KC3K`J4B}$w=FK2LJY>K`|;0cJY@C<jeR!
zou+#GhQ2d%MM#-3sG!5HpmAIG+tkYwe?QCmXIK{(NOwEEhNHFcVovp|ub<-6o8RAd
z*(*O)c$9VV64U8|SSRg~cirfb5G|iR^9D!sPL1Tspq`UI_#Fpo4;^^h|LDtm`Qvqn
zDn%*zvUt9zR~C>Gv3GB9ou}K|N`=P<;KyVC>l6R|Hf!H*TBUKeZUR8?>(`=oE{dWx
zNSd!R|LW<|XUj3X_^G$)&C@E%-EZG`9Frj@I+evuHgKgY;=MJD#=J31jDvE1_0P6V
z<5?C(TCr7ur~Nxb(@`hTJNMCX6Gxb<s)s^X&zG9{sJo>!IqvK{l)kG=Q=3E7)2g)K
z=rm#SK`QZ@_nf2e-ca$GSWomwni<w8C)fR>OMpeLdg&*+8G^Qe!JuBuY)2=GOTmKs
z+2GmYg8>#c`lXs-(mQGPr5Rr-x}B)#vNY%&yF<8$@78;M@yubaSibnIA&zz@qW7*Y
zDsHD$?|q(k>SKzTQ*stBRmn588%KKc3HS^*i1(JARjeSe=q?oVpVIkzcGge#`d1Y-
zh9q=d9ecih=@R<(JIsT<bf?eDn#LaWj3kC^^VJR66Kh0#>}4=tb&A{h?a^C0x*o^z
zS{|~E;psZn?@md_Xzr{w@~zL*ik>a+)6`CNKHkfbHg3`Fw>Qn!=b}l<+t+IDmO{eh
z`$U_ft<VbTbB=e+iy8Pj9fsa1YECP8c%bPoySVx!rqdCbWE?$?%lHpr;tCAI=znkR
zdc?aWxPqzNJ=5DHkbXt&;hMv_MbqVOmhr5H3jr3c2Bp_7TD-ZuC@k~9V{h!XBC53U
zM*dZ9{i;EGaT`O_WChuZypR2(>3b@fWXE^4GN*SI*HK)rxMA9eyXrn!Q)kr6g0f{u
zoV3}nApP}<`n(<`sCUec^bR@yqivMN#HQ9D=e-FXak^S!*x;qGX8#$iyt7~;4@bKY
z`QW(gh05Ix^|zdN8<|+U^1Dc~yAp7y)va8P`R22jv~eAQ?48`P5;gT`c|r=`k)T3?
zzjI@}MbHWL_-*|!BMkBRc|tog7s>{;ln0&`dfpSa(!Q+ac_`g+B}u4MMU=Cc$#rJL
zIe1LAijXZv^IYxnHXZ6#Kcmc@+#Jq%&X?&eWma2XHV<5CGA-(QshHi~9NOIZGFZdN
z?P8F{6ehY&jhkJoDLq|P_o8X*wl$howQ@UNpRx6;W&QU0dvn@hu3_bLu8pJCeZ2P8
zCiiWpv&)vl=yRPM9!7*|I6Ik`(q}riJ7P;@w;vCrUvP;{Excj=;Kua!Q$}j}GQ<Kw
z8DcK8!CC{#dG5*HqD!dBcl>QfQ%N7H?@MajYPGj@O<ir1LhMM+>5(Fly}Zj$L=Mkt
zDjsBQ?|Jz4P2}!MvV{w{5VdDkKCc;XTkMN{Ar__{U$I$ghY{7q*f{7vJTSKJ1BFtX
zakt3IjLgHyHSLEH)vwh|w6`C%AiO(sF@=_c!BO+!5j~o;k0JbKZ|7Gmm9vsR@OWxI
zoLn^!tJ#H0t@a-l=S`iTt?n4@@O~1*<XompjULG+&k2clJGkHdeCfvk6xTUyJ(IX!
z{oNN#O1ViYtmN;S#SR70EsV*$ea1WC$wa?w_%N<JNZj${<;3I7arkO^@d$kLwYObM
z6U?Hv(nV_{RkniP^?Cg~*HM)u)1G58{{SCFr4MX@W&$2E%AV~Mzq1zWZs!+uHKNaL
z<zh_rpkQ+J4_<7xv8u$2t<KaoYzZ`reJ6gmUT@m;)IbpHaZzFpbLR@?E!pafO)@j(
z$@pK*_&Zl$omzDF8d41pdT8Y1wD^wET!q9ZTR3}hiIv`PKYo8KQIt_eL8n_pnVyuj
za}|%eak~FWs@tj-z3OZ%A7xL>^xMNTp|5mVyfa@XmNlC9TPnIlYqutu=x4us8Q}Y_
z`)HQP&c>qxXMcSvQ~6phw%mg<mU<0U*(JaoO&T_EiT*|YKt8KL|2CG=hhC4cdDHfp
z&FSGa)tmLhsB~gY1O!6j&bN%=NO@z=H>9giOEkrYZc=sC)fm6veAnv7?ppchq7<4%
zD<1s4tdXm&1T|@YU{D2ac7bo;^&q}HC5hJPlDLMDrTcl6T@}gOC@re{nOEoDH=PQt
ze#D6t%NckXv-09~(6-?8Dsp%CmFsRR(wet}lPuXg=kmPs{8e-=l)V-rcci7Nc#RGW
zQV%gj86?^Dqwhs5L=I-mIhu%ZG7P9bt>92KfS<5BKE(?uN82gTi?QY;Emu5BDqile
zHjvtOFfRI4eQsaq?c!MtW&8M~-O6(!v98ltrHn}~&RAA0ZgX?{oJ&7A@G}zVIL_<y
zd%ynptQ`hIQlnd$`Rl^arAIs|vtA;`>FE}5nE8g*+7YfBF-E*du9AyAn(D)zTA{46
zg~nDx*KlMu8hbtr6IK{+lQ`?|GtKS8He^AjBr((~j!u&Mpj&x*2>-!IqE6Lint<XG
zZR>g-XC_O1dL)2B8bZ<u`ixDYu_2C*g87;HE|*gYL07sOdUAsWvhu9LEyDa8>S)Gz
zRdZ#^Ay=yx=Q<}%mtFsqL25ou<Qd>}Z}}^d(Yv$-7*lsQ#tpno3MNQ}RSxWEO;`<M
zvl6vGC8ax;_&P|vMrN|rJKX1Bt8ibmiW#}^<1>H3K<l!H_3HqBl*|a#&!pkJN9#UD
zBXeNCtrPv;QN3r0vrb8jDt;p>9JcQ&t0=Ksclww&oJtZ7BUgsz7c$Q0P4aL}!C7HL
z*n<298!cR3kgIL-uUw*CqmtX==~TsJUMI8B1ukVj*6$Q)QQ`OGF4Q_P$bt8+_jwSS
zGW(9W%!<3AnCh>SviONE%t-!8*1`SFYwRKIA|4aCFn_wg@WlTL$<!Kxdy4(OtZiR^
zJj!SXd(Qp(u|TGYt5#pU0D^-~SW*V3r%4NRuZ}Y?ZS^%4OBHh&ocHDstF<#6-^LWN
zAa8HgFcmcymWnf7FuvNTjc$o|9-a4-v8A7sqD?3~@nTJr-}uI$m%|$t-*bJZ6__V0
zw_5Fv9o#4E$!mPs&^)``IY2Dj^157j-0>e$|4E2KzA~C<@&}ddOJ*}HhWR5qon9G_
zGCM)Jwc@nAcYR3@%Ew53l7nn1wb8D~?qq55jMjXXW47@XSM{)zIlYW}^(4L&5!1Sv
zftWW$-AfuXG}LldVk!12qL#i{X1?ROR)%<49<r|Iea>_LbxyxL$ARZ<fbXd7$K6?%
zPJz>grphJFfNg{kYRE@Vk3>@E6pRH@PnXE*&c%1%^FFvA&F++K=sA`_@pLqSqk71t
z&~PyqGSQ0o3C~o%xYaRVCwoQJU!G-*rO>Op6R`z)fhHsP?z?AHvxQq_WCtB=o_+xn
z|07*lw^~U*Aj0>E(7|=b3&!$y=7Eb(V_0iAMc0xcN~u-1i?)2k1y~g5)dl*l>W3Xr
zHtCrO!0{9%dWKs>XBHe#7K?kWrgL#*PUr+}nB&7pEi<{8*+8nQ1eKzSCOU@LYIgHZ
z3$_@U9g)ejskJX(?W=mN=Po2uvzoWqf%?uf{yEpX5UlH7yMf}mtm3)kCTC`rrjE>!
zAZmJS{Y1HA@4U#0-E6=2lQ5~Bp0-lk8LL9--MVK8r_Bqj8epq1#dSAzG*>HTPtH$h
zyRRyRCU?|pSDKAA2Aeq(9PEiZh}2V~E8c6TY+p}IZ&$m)7{od1M2Vy>mSUV)u{#*+
zSJ~=hc!-+6oiFnaS2Ng}^J9ylwsDht{t_nQAGO(0j(fhM`Ns`M(h6vl<29)oFJ+{a
zXXYl)_TyQHTEotnk;$m0@H1S#<mbINPiy9unlw5qN_~(@JwwsT-#mkmO`~WpY+m^`
zTQqT0@&?1;lh}IYW&sYHlF)#O`K-_#)efsRr8Hv{m$1u0oX>=cURUpPL>K4=vh3$O
zXi!KeOdBekK6UhTcDFy{en;)nC=_4$=#QaM`g4FD;^@^g)`4dd>c2hRF0NHToQogm
zd0Ot-Idb$7{fngI{O!|ky_Fh?auKTp?|qH}b3?y|8!qca5D2)tskG1XE?jo?$gydg
ze3>4r80uyc%htZ!3p+uznr)l=*3$G<&kmK&1e>%eav7rIMX5EvM8iG>Z^#wfb?o?;
zO5SEKODXFeKTE)wR|X9b^lI%Kb$6Mzo-D3<eI+bMygk2t@Ym#2sq6v8fQc!bcgKZ)
zq)6-5)L;8o0`5aeYrAkMp1DWY4e}R^DkZZd&*s~F@(->{?}&5ssDNuW+_d7RoS!qd
z8+TI?=0g@jM51O)8?pjkl&7D<zkhwq`6G)e@g3VS!xL_h&=1Xfiwvu{jE_=5hR!0o
zQ048cz^hZu_B+Rk*_r?g;t1RwIR<4_V}s~iq~W?4ldv@_JrJuYp37FP=fo^S9--%~
z<WN%MQ*u6g$^&I)Mc4XfSs+|t!O&1{<O$I)cvXME&5%rn_<r+69%8-S*vEjh@xmPG
z?B+6g*UakNx2IwLno~>D3G#P`1#<VQi#WdIVVe;o{Md4Sj@`7XHsz7C9(so^#Sho6
zo{xWn`xGVei;87zc`6Ho!_o;=!wRKiELk|eJ5EQ)j|6Jb+p$7c7;s$(z5B{S7*i!1
zkKq8AZO9UroS&YTN7<M*stf7lGcR>~iqM#^9%F2x*~9I0<E;bnbXXp8ugzylHMN^9
zX3Z%=k;xD|4@cu^0t!bm<hv86mDWrw0=o{YDzUyv9rYPd4O!}##khHTsNIY;s9g&1
zJ;BLH%yhTZ#hF$3N6*%dsXkVlYn}Y7^7vmb%KEpUC$r|o;{xmENa8i=PHnE#{29Nv
z0d_5#*rOg9uVmR?DL5ZEl4YLZC_T&2X5d$!N%R$Ko(NMvTe0~}s(<oMjcKKalcFz3
z=?B6CE9vM9MED}jh$6Fgily~iIJ}_2o^InvQh|7?L1zCzkh_(4h6wXRc1tn#-n@cM
zO0FEm5lga!$Bj+tg;U{qLGvHu2<VX%5eYs*K(=FlvCkRGm=y6tGJ6#6I9XV?bEm9(
z;Pq#~S3jyfya{o~aqR8R9KE0AMEXZ$u0?N(Iql0D!Rx*>%jptb{`nU$^o+-hrAnXU
z821Z`$k-l17tA`X8L%yiCoAilPT-jK3k%C|iSJANU76iA%S&P)mHTpE!Sn~JfL%2E
zV$nQIgQ6(7RW%YlMndvT`VZ#R%lh-(3Y)$c{14RTKk}|Wwra`fo)*yZ`n(%@AEG>S
zaMg7FKcZIX7OE=jTk+UIHa5>$i0Bsx(k#T;w?UG!i}9RlY?~f#i<4pDjr}_D`PPjV
zisM%|xzkvpslL}#@f(2zWN4s7AGOvRz4eU&ee<3C8I5=&0OaeNxI_74&--@_`*Tdg
z)=(-CwUjN~{bR@NKL>(&0|PKE5KUwJ`d;wW+WC)f{KrlbJqM{qxkV!Nx?JPOAEwp`
z2H=}>RP85UK~(u~Q0&U(n3MeH(0=e4XcS-oQ}d<RpL~O}f`B{I=fvuIfA3vyJgX9Y
zFaW-;2#p_1nEp9T4E<5ap!%{u?D)wgWGn&$c+<Xz?PuR$A5!k@2y!|2lS{}K8Gw_k
z0s5aq`@uKpf{^<C+m*O}b_q?v0BEcfp8f0_{5J^v8w4;OqLaP_KN*F8-K4{L&+tN(
zQPNwL2hu-Ub^4EhHTRk37%lW4Kls6ol>m3Kf4~3V`TxPV`yb2f-}Q&kjQ`z#|FJOs
zjXxXbe*efA|Bb)@o<IMdzyF@U|DL};cwqbki}*MH_&5LfH~;#7IsdFpy^?xvJ&g36
z7K7Qm?aevxQhcnK^@0H`UNj1vtS3$uCOCp!jV~Dd*e|@1eZ=WYt?P8~N>wQ3%wW~n
z)yHJ(|I9aWOy2u|9x+Ya&iXn<`?!nw7?`x>F7*1Sn+$l-yBLeieNay3l~%}K1S^O;
zpqY(TPUQtTb1n$J`#@xKhvMp=?sVUc-k`{Gr?J1-wBEa^P+Gq=-LP=TaBL+m(WPOZ
z(PI?S`^5lUFj8j5<9@8NbxmRw`lKX9LWlORhEvP71(_G<H|<j8Sd-3P5vjsAT(X(`
z?kO^%r@2GmSK<ePrpAI|0Y}}dFSkq~2A&7@Li26JONJZlY+FFw91T56)4&w6)UjwL
zTyVbSQXhB|nQ(Xg_TBORG4(Wv1QF%%lIH6t`?QrxBlqgX4lqax_qc&HR3a1nc+Fs?
zz<H(@JZwg03k$73f_9i1nq!WBYDBt|y+Pa+G%oq_8H~52fs-1zkBwa|_|dm*_edgg
z(&hQky1JhPe$U=x`VwxdV|rYY0wWU*)=9%paRm}d#&eOx#mK<lx@IB>Dt>fdP3bq6
z6MQBr0N#P=)6VBqUoXMgs~E&SFM#!UtOK;6DU}!K{E#T13tg=*fpFd*d_0-K_2ze;
zEAPF_89YTkcVWynzu;y2^y7z{zwN=UA??BuTVIND!~z9z6gcfmLuots{tmP^KNcq!
z@;hvTiK{71bS50&+i8{-2b~Zo$DG04qc=dB-bB<cE3z9*w5GtQ^)y&5U78)PO9P9A
z@{T;)c6ZB2F?R!hQQ&<*6S32NwEK9Bs_$k_zI$-A9J)Jym=vAR(S}|I24NQ2EMo5#
zp$(9)C(KvCW3!2~bK2l#ffXfmWVCo?9?dYS@f&G~F9*~AOLfpK`;-=~I(`g{dKf&x
z)>CsfM@$Gzh?pkoRu*Rv+b`p~!cK?wGVoc{)CMP>c7v(jvNSLjlFC1-gP1(H5tqBI
znlt8>9t?nEQZES6@2Dg`%fQhW$7T{haCHYvbtqlI@}Wj;zJK76-sHH_-5=U5&ozN&
zqQ;i`Zat5K{W-X!l);Q$cw7Xwol}je9$6iYJ&xNeAA>hCdN0cs8O<CD7cktC?FB1Z
zt4`I&<X~M<G#!{qQI51hM_pceZzQ&-oYq$E=`lHb*<XX8(|M&eIPR$ES=v69R0Y#e
zB0b{3_w@YvF$dx*ff~;bju1^c$rEnx?jJ^9W4&dgB>QXZ{B=3JJKnVq>^_-aspF_0
zTo-sZJtR(at~#K!{cNm^CW}Ust}NaYY>ZBC-)sM&UN-`~RLk%etN5DDdDypDAx<R=
zJ>;G(mbuSd^puB9oKMC<$G@ZC2)b86bWQ~rA4&T53q4-cX1VyHWdm^a!CJvv3QW3~
z*av1;COc{daN=8DAyzNB;Ah4(Auo;7EsjM(fc1Q<k@R-8EK9^=*$ui%-bJicaW5XP
zFCBj)I)K$$Ht~(>Bd(X5*Ux_Zj;9~bZh!DlCbm}<98o$3)QD#r4VA9-N8KP}P3nER
zUpY2%R7M~%T4_5g^xBL}e%~2j=;E;bv%LhE)>Woc9SotcJ3H0}1`#JhqZ5wUgHhU>
z6J1k&GTtn>MB!)YV1-S6@G*3G>!hpB5EceY1nm%hRih-!k<JH-Z8ua_<2#a)>0_50
zf+JVQjTA-Ioz0idQ3iW}-(@x_cU71Gmy&U^`FRhb%>Zt6xxspg<LP#3hUJ#>XyMXK
z{g>A(YVAbl^uUXxY(b{nRIJ6R&)4T(6SykZ^*j*HSc3zr3>tgxh2!d?kA%wH(|1Oy
zp0X@w2n@t22K3bwS_7Hlu}lUQ_FzqyM~LLr8cf4g#k)3i)c$9pjIl%wH*+Y=o&P%Y
z>>gI##A2TIa_fEy{0f+b@*{>~q4-EiG~)VZp4)S~EEkC(MbP7uk}^=~%u!WSm+s{*
zYT~>VQB9>y2%`NZ==W?5>&i|L560t^(4^bnb8RNl8Z4knH<OF(o*Am~rwA4vc&Lm-
z5#~+G-3xC7dUfzF>S0((7UuicSq2EXU=M|rIgc2JVy~)h|1=KHN@)8?XxdT^t9mh7
zsTN!ngte6mg_S-TfxmC6oB)Kk3TxprlwS80O<9~CCUJJcX~69~-Ot!Eo1Ih0;RpVj
zEzlwt`@BA0Y%Vbxt6=?l%=2mO`)25(Td@otxy63ntCNo0a8xtu2e~0Ff6F0w(IuKH
zhxUQ9CoUpd@Lb>x2QdHX{XguzcU06@7d0FSMuHJUDOM1$F@T5y3er>tq_-JBs)9-f
zX)0wv><$7pdM^XR&_wA{Y=EK^fuRcu(wp=S-?=0vkVhZ$WUX(l?|aw#S6BvSe&ybC
z&)H|6y$?6+tR8bcu_}W(ve7hxz=bbUC<of`r`T3i?Q~qu-qn5@!ep3r-NWua^{H(V
zKXB4=9&A}}Lo9xJX_9%9B0h1UuW%uetcK5DaGCdK0PQQ|)~e<=BOsee9CL*w!RA$x
z-=l0xgf*B-u5_wDeUk+r1hHEqpSk4k@A8{lCl`l!oE;PUm%rdKNl)fM`R9=};UIB&
z7zCvPyuRF4b>q^=Ak`oVqZ3^`mvAXU4=H8(U}1<o5hH$*zAOnmZ#$|*T0vkBxt^+s
z^~7d__?gLIa}E|8ha?{lc;xb2zl#)zL?$D^df3lG7R0gnUWgn5mm5J<itIz0ojlzS
zjvY%Nsg;A2TEn?;s@*4W@H<c9qJmT~GnMKM!o!A1!V-t3NfbpS@X6GzK#h%4jWDFW
zsPSd*^-zr?Bd@ueHpN;f@pM1bby-YxA5Xk)8qA%6`@l0Wfb?qH#5emNH!8Y5=gT~T
zP7bf?GyXJ+hdwxJl1jDc5ALc?_qV?ukDJF_56O)tDJYm%Xao+x9ho4N6Ml*^zwP`R
ziR8uXb|2nBWlNPIy$igB$MfA46Le4Jgu%nXK0;fruG;pKqS1_o;LZWfh5|R=f5s;^
z;D^>FwQU9a%hPb@BXoRGPCd}|KRa9`;GTwk9VbC#-l;(K*MLd#I^rpL`Zwuy8cy+W
z(j<2)JdZ+&SpI20OCC4P?IQ_}pVy!p=SBb9y5sP6Tq@7%M0l6>m*b0`&3!)7I<2Bk
z+H24XwgQdUbaZ`<{6=v>nAJLx6KTHqxM?`B@S-Yfcx3!Bt4aPC1|;29WY;GZ4*KHJ
zE^4{q6al0G&VK`U^OeT4_<Vn*^26<SE)BW1ZbiZ03v-m(?sK^9R%s84k(WT1hqsHm
z##d_L(kGn)ErQW>WA79QorQ1{#4M<N<cx)rPtFyAsPoH9pxM#}noZs~&xGdQX}#We
z;jx!Lfa=rpdJrk{!kBhAP5q;p+RE)T^SSL&;Vb7C^N;Vi9#{**<!xs*Nzp#Xgs59=
z34MBK2E2%b6GhrW)DPA^nvpxNpVLsJx+2wP5tFLx%%^(y9)2*h2zpPX)aVR`0|OwA
z>nHrdu4Mc68&OqdJZ^rJ>4#nQF!JC2W={lPr$LYuXmZ(R2%eAx9R++*rnoJ|#u3i%
zhpJvfpaRR>%5&x+Wi{0TbfQhwe?{6>_i7D3#DVmdD52{}>t;41H@m#CDn&obj;jq%
zOamD8+~O_dAi2@A<Hy&`z>;_$T{!**uWi5rxt^Q)S>6u;gSJD?$wPX6$jdV8Ws|n!
ze4W8XgILu*t%_ES#s_0ZPVis%LlHW|UEfX;r1>wTKK*mJ{=cT9iD>#qw|R7V;tey(
z8cwnEldXl9ni4eQFKl{jR+feo!S_+=+5OfiM@UMr3K(t!eILGK+Y^G-T&ed_(7TWt
z(B%wjt|<4v4YugqU_hZ>pzmf2E~b8?K?hBX!CRBJYhe4kkVC2VqN}fHJTgDqbYrW{
zrXI~i(quk30<<F)Ft5{ZjGMFViZZURWn(>^WPc*5=o#e!%<r?UN`S;To%{}$=?3lq
z#7Eln<+1dtpbk%%1BoU93<HUvz>;N=A!t%8Q|PX|XnPB1XYSlytq-S;4%3-lNEod^
z-aL%{1y%Ru$V^qPm<8{Xg^5l|mo3lg>Qc@EU-z+?G%y-?1s<Z?d8`5^)c;YkSZRiM
zDw*81$Ct5*JlS{Ly&{Qp7Q7D0vk*1T#_dw{ckC^r9GA(sva92bM&<77R-hkjL~DzT
zKTfcC=w@NPSThQ0I`d-Amwoy4lGj8P3fmJA<(aj9-eRss<Jq;A9N^yQbaC5-`qTGb
z7$-L&5wyVAKAvX}F(OWxBrudylK^S<BK|j`116ML4=46s4?@Ra+XKul<WwREN+a3u
zDp4S}W`7br8@&6((KuWbZ$_`g-hGb49O!xY>&&w!&gkVrzD@jCg_2!y3-DR?9g}zU
zTWHLIWUvk7&Uq%{Vp=b_S~~tnt!im$J?q`j{Ump{h`@@2YfQycBZ0Xq)Io(QRGvm^
z=Dn}+$mcg<#X1gU!n`IR^{g(M;-n^F0|plqVMo%8*4gsjpWc;<&mHHOQDf?q_Y5B~
z1w(bO-is|@+1?oDg0BtRZIwTPbME=_lF=6|*(q2ZBw&|TAvyaBo-&>`NJH8b_9TC8
z&8^u+W6!suCxgbb4s}ra<@@GOjC!<hZM}s`v0*5IaTI-$g1$+Kk2h$@iR~+#8;Q24
z1u3!07JHDwTK1|}+|#l`u#$wB_B>fPm$PpoyVk}=zJ<ElFs~c5RolS%#ULsm{Gh4I
z**P$wJHm3M@yr8d%p|VWC?}h^hU#Dl$Fd!yyN)i!&ZC`9E>@;%;(E2vA<zz1E&Mjq
zAg;;|!Fb4cVQ!i~j%;|b_e8r^Ea{_0pFc$aG%uX(KoGD5KoZ<^9?CCpMG3a81$OTQ
zOJ0FWRU3$Vr8FDn`=_UdnJ2m$9eHwNB+&1q$8<~YP_J|ExE?4vFEIB!z(kP>Ct4tl
zFVSlm@khcN!`-kQg-|3lUex?3|IZ$Y0UBT5HI%bFq3QOd;fcIYc^T{fLIiTF3wcm^
z@{YwlIafxx(`x^gza6yBQbMyXR)R+6QbLyk?s38zm2oZB6a5W-JZ$^)H$k0j)RFg;
zAq6s*DNwxI_QniOQy=6{y%ZRAROr=rJwWMXG}enqk$CIRZz*{0tZG%k!ho#@ucWz8
z`VHj14Mk@*SLH(*VUTO_Xa)_wB5vIwOVjX>mgHv2Q0js*>0%;PBZJKRNSCTLKiBJ&
z+?|&=nk59uDAGnJs_JStUVWe<#-s6?4{tsL0^}T^_xXyrui-n^d4I#Hoi=uBW(6s&
zq$}m??pVDG6_Kx=dH%fiCP)(PNBVLsBGce%VVGkIr$^$pi;j<AXUowaBu#w0$|&o9
zcKbSmo<8#yd*ls2{YbA+b4P+$_Cv~!WOzjUwGa7_KxJDa$PO7Jzl`@r6%TS8x{ASE
zVFRjE&o<&Vlbexg(Fx8+HN`&LpEjR=e|go<L_2dg`qQM@xBS<shLE+krRzJ9o9kv=
z!7BWgMncWZ2z^9q_smVeD|#kF7IMip2Ge>oAi2K<>B90E<fiK!qd!G*`a{I!Z*9)M
zJq_Ai#mJ6A<!Xb(FZ#=qS{PPd>-L$O<2LgadF!@Uw}+7?GpU7VwS>mmpc)Nq5S+x0
zhgIqKgVo4Mzl9FGE#)`;=U16iFxpiO5GuH?$6I6|BLX@n5JMgE0_Y>Fwi4g_6msvF
zZF36vn<|pipG8LTA+Z$YjAIfYnZy4=J!0<j9uv^SGZ(B|wPxFTqp25cZF{7q<wKs~
z#-H_C;CaOHOBL^2kE#boMKiF|A!1fPC-K7&a%j;ICe;i=qKN=XFFU}jFy-K1@lpYs
z!uqqJR0GP_p60!%({h|g(uZ?kfZ&}j2bI_P4(IV1eo|%QQe9}^sQz@;(EZfR2bD0f
zjKj*VMhsj0X9@qTuKwNbbb@dBlN?j?#GQ`c79AvPspU58Wu)IzdLn^X2|02*u?9p&
zw{y$+B!y~o#6AOj&q`B282p2p9jle8ADoV;P<>NC$k@1m`9%((p)oNE(r>t~pGSJ8
zkTf2Q_E=nS(vx%DNGjFtm<XTD+oM4Z>%9P=rPh_x=F0J*_6klHI}YO+kg}@@M7TT1
zLnaMM3j9pfQA+0+9O_c2!Z-{^n%<b7YSlJ`woVJN6UN@7%I|qNEY#%e3$K{uUV)Fr
zhv-7L`?cpGCuNI=HL99n^I(tazI`OqxYiS{em8t1ChAXkM!RH`r$}uMJOAR>A`{K}
zL4b@B_@V%}SiP3@)lJE<s7p;vEn59`NIlY7cKkWSgG~S=@$4%LI=BZ}#rN9$(_$>r
zC_u98<?_r*8W^d_p`9#=W9Ub2)Yx0xs}F0u-ih~2z^~rx8GHFPNWiM6<;?UZa^rt$
z1iG^coP9(j*oh7705c#W%7ZwgnFHa~5QwfCQ$46Ki9KJ^Yhk_)W$5i?w(br|;HiYI
z$KadfS#F`!417S>5izm|b=sBZ2ss+)KPFllyxEBtYrNP>SUbdwn}G#q;H-Z@6bd7+
zQVDYojgBOcGAe=kRWC^bzopUGi=U|W4(zXqvxeX(l?@OV#v%49vhTTv5hGy~-^^cG
zyYCjDi;00IuWm76$CH?)6^^FVXq@Uqt}b@^3*4f+9-xI)L_)dwu+-wH6t;*2J|qQn
zNu=}DYb3vTj_?;vfq*iu{OuaJ2g|fh=2HrV50EiD^8G1>jl_Z!YwfHd0p_m_ps-m#
zezUtnPkZKR?TqGSfz^W=tI6pLtA754xk7$u7UY;SFP)QcS2Q=OJ`yh>?-4dX>9Kf`
z>9gYO3}~S-4;4Zc#nLA~pMYOOtH<~HAK}%W`!?)d2d<WV(WcISh;M^>aR>bdaEGwH
z%W`r_!8q^UY7O$9>k3*VLfgiOTSz&YKW>wlqgklO!t}itn=*9i+W@{Xx&_W)q_Rg4
ze+~hTp4m17$fzEzTjOu#0<prsZ9BX_P9;ni$6+CH4)B#b$Q24}7Vl&<?o6*mx~xLq
z%Xji|Y;K}v$x``DRJf{14Fl&VYM#LAdm3cYHXZq+QOu7hHsFzU3jvL3#ak?wfW|9k
zZ$>@Wu$xt1{PKKF31mi8oAH?5=R98?P>y6wR&3!>8b=N|=rrurYm`vIKPrF>LzZG(
zW7uRKA4creF|TN}?3w16@0M!^n4R~E63=Ixfgt9?1B#+wqKH$m3%1q+03hZ*TU+b#
zDgJd}I$8j-x+S29{l0}8Q>TGX{9JE%HnDWan&r8`-w%L4w~yA*9rGo(G%e>j=B*{p
zR(ssf8pn67{L9FY)fycnWEEovhFV2{2sb93>!~8yLC7fv9qJ~VTM1?BoU*@wdT$AW
zgt)}-zfeimqrVfozCwOa7&BVT+L%{0F6HH+@fKQz;9$ag9Kg^T5&R>KN?yE|LVM#{
z?Xs{VhctF2G54Aayn47>wIyK@bx9y4$r#BSIZB~*1hI7%d_?0~L6RNMXD5(clcj8<
zzIUh^uZf^YI)SN(1If-@N<)Vqe;Jd-Y{RR4SHbUoZv)_eNFz=Kl*<{8E165cQzMn0
z<e{AcEn5C_72zK`h1vLZnG=lbe%%wg<5i7p$?D~id|BeTJUR6oT(5R7;Yf|d?}}TF
zPhe92L*6R(C08n5zPp%pXbYvim)*)jy$k}=ObNN=&|=ZLl;YBIcfr;|SCevQ6uLfa
zexZ$Pf2EEFjR#tSTP{lllxM||7&qFikE?xB>iQU}ezw^!uep6?=p&NNwu;)H*;(@G
zCBVlgR*|9lOX(IWngYFJwxbCk7`sn{oW!d;K2x1rJ#@->5g#;Bi}!8SnAslJtDmr;
z0n#?ZB$C$pq<p9Be>5F(>MX68-aYxd=4Ty0{9c8%AYoA3FYD6X{=q|9mcg&vS=q2d
zGvXKBC#3H@(Ph89a{YZR2`Z06RqfJU?85)Qef6K8<_#(-H7A~)=Ku3w{<j}o$k4ZB
z{GgM%vW@tUKLol|z<M`7lyv<E>DiyVbL9`xjNlC48@07BW97g9<4^l$<Mr#~UB0@%
z^Derh;N?p=n&h*7=NG;kW`4h5PuUGH`ttWS-T$y2ByiBtylInE_iqO$P9R7jeQWKp
z|KYBe-BjdFq)J%nJ+AwYU;4@~+JfvY?_GGQ`!C<%m>L>=$xSo#`o}MQ#p9LcMx!rP
zHactn<r`$jz#ck&sMd0M@xAgM|Ld)p?SvbUZCnQej{n17{q+j|4+sKt+avtGY61NJ
zARx?1xn86(t-G|yILCBb_*l|CENvQX@-4z`(ynB#%v#-K(s)*lMzY3{41ZRvhXOv4
zIip5b*TS+tLvj7RyE|kyDsmlrUDzsDF;Mm{|3QQ4fl+tE)HnH)d=<{&lcJOF(o;u=
z|I+*Y&s9-*6vDn(_if>S8}<j#o|6b$XYy~C-2b^3Am;ZBJcz0jIxQdnlYkbc7irlQ
zUeK_jE|ylL<3obP;98>yq=Y5Q+%14(Eo=r;pczob*K50L4$TY2mp9hEB}f6O$Na^$
zU-|8~g>5j~=LwdxywGrORkX`TphyomI9jHpgw&`Gwd7ad<vecB0hQFnU`c|@gBi<r
z<r1zFO344W#R+O5b3iq{dx|BK`5tu!TgCwqK@v(>xgID!%{yW|?6QHy6bFdE@M201
zwAq@@{Kla0!=Qr$<#mdU$+{KsQAlkE&3Xi=G6>=ufj5wVJep5{DTXbHs;pa^?>gyN
z$`k)t(g!*=N8@&zH|CI5M{lSG*M#|PV_>9EW`7<zwpjMOtW8`55I<(jzy%zGns&af
z0r0JA6EyZYKrA~fC$rTI>J>%Q*GHz2@6R2LLulaq$2C%~pGzN&%Pib|=ZCjY!`!Xm
z;90TqjYbO6Y_)oHG#6@MMb0>+ro1P@?EpfrdjOU%Gmx$C2HaB_K_k6Yq|rImDmoo7
zIw15wBh})!WP<LANdAhqNhhCFA&VhX5%;;NG5CXwN<JsWA6^lhL6P%x<kvOs<=5{m
zKaftPuyjNJAQxC4)yPj5Sr_R$^*{}Ef~j_IV<~THC@PlH(fftgiIj4%5D&DYoQirG
z=5s5LttBBFBkk6n%8g-fch}W+bwK^86kz1;ys+<~hj!-y*_Zz<wEP)t)NDP=M<WVT
z4&7e2k{c04gB&Rs1dH4ec?3D$n64Ep8i8*RMb2kE;B`avU2+3;A7}I|=lcRyL^U%h
zj^`L1{>dPGcRhl#`$sJ=EPq*MES}^{W@{i@^?=J=lFK{vwva!IIao)PfAWTsK!5<I
zMl4yrPS6aOhiURRO+H{5;|&7gSPo@#0CrSU=&9gblnxIz9^f4Qn@J1vLmqWco8V<j
z@B`>>4pys*$as0y7n~$&7m$$=u^kmH&IY)cMqp5k&Vuc)5WqVo850TVJ0|*|%pl=2
z{FQ?a>_Up$wIjwy1t-EKT;u58znXRd!#*!+hGBq?@$Galc<=0Blo(T!WK(}*29!2M
z<TFilmVztmdC4f1lwnI+jr?jSkb9U5@NqOl>!yN49nO);O!aC>iUG`BU_zv&D0m~A
z-O#zi?-!$u-Vy@yGvjYr-|{_CaslJVk&IDTe`O-YH{5i96QP-Em|q30y-;K_<9A`8
zHd$}Ndo`%cACuI2CsDv?_u=|@wW?HDYJQc9!zInoNl}9*4&A$xApn^_U(NQePGw5l
z!r<uzWn|81$kNpXCR8cuCl_pzGHP|FLuG}tvTb52X7tx$Z<Y-c_RUbnwsaYTGCB{X
zyhwuQN+7gCtcXJ=GqghM4y&eFrvu=7pmmKuIHl>|-j_0eBmKs^g9UoX3j9OKMczSm
zzea%I1KNUpkO7ns&?|I9u)A^&%MBYu02Ua$|Mani0_~@^b-f=8*OsRC94@gNN~kFv
zIy4-1Ye<$P0*r%r0Acq;1dwT_Ajo#53CBJ@sW|VGAY}MW^Yp(`C|LELi;xD+SG-v1
z%4ilXeNB<;{P1*Fg!VuWaMo0YHMPCyRiR5|M0}*|?6tlc)?;W2cp8iOsu!qE&#n`x
z-+^4{RCtpf9h+`zt^>QWyZiFKykKT5(zYD_IES3;fcm6k`G9U3VKkyOxFm7#7Sa%Z
zX4KNQ={?u$N3fc^CLLzFz@6(Yr@yE*Tc61`6orzN`?kyin0z1lMiC_7Kg86!Gle5}
z(UB3l_}>8d*bWB<4-Es>Yjit48{mnESUNMj1=E&W<EV?zaP6V(#!t5nR)`<;-Xs|9
zHf%MtWZ`Y%Bf9%$MX9zM1l^vx!Ud<94@2(SLzdA|UAwL*?g>4AtnvKIbq-T;b5qC{
zd}g}BBmBjqC<KiuqqzLUHJjP`9+ve@ow1vb!{(?USXB}?1Bupc!dI@Y+3u)Dja0DG
ztaDCvEGw3D$^gFIzME%|O&K!X#y1PmTq$yLhqiqjvOcQ4Fl=yVNP{VxM<h_lTmv~f
z6MdZuM8;?JO}iFPPAA(EcnQG9Q)Nowv1MvQ$JnT_9#17~7rHv&-%0j>llEDjcbn#$
zfu%D&Yt&+DFtk;yf^J*Ur06kAWcf~<HFr}j)oV@^0RG&zSg$@a=<V?ug>l_s?Lsz8
z83n0Kmw;`SSjD2PuRb)SKP`;h?3S1ine8kbTtZIeqFtYT?fMls-v(9ym=e*Y-OrZF
zH0b53Nzg@0t|HBPd5?C*(fKvni#?SNC}%jeusqQ1sC4v1q4eSgPhT+Mq{wd{1kkHT
zPHIM-=N0p(V4xXxNOJFBIvPutB6Etu$xi_j%1Amv?A^VXXEJnqW{A@AwEHY>uo6v@
z9+zTxX!Zjg?FEgxHHpl(0q>4_i~9Mb`aP8QHA%V~Bii?1Na->mkV_=n@On#N1X(<v
z&?(4#i4_mUB|cc>n<~{Vxc`zj&4BhdqJqMwtRhyuSa3FrX>-19aRA}!jeybF@8zPz
zy&Cqy=%^3u_VIYOY7I`zieZn;e(rLQJEAmP>SY+rq|B}e;Fs*go{B3-=IkQ5P7XR-
zVOio2yI(s_R1mb2D00dG$gpPe%euyWn9f(@?0$h<(i`fm?0mRs$2=A%J<43lM9j{6
zHy?g+-mbuFy=G_$nU0w=o2=v5a5liNAfC$bzGlcF!`-XnNdKeb4CO47S04!s9%m|T
z0*Zx$&fb)PT-|G)M4}bb{UqMKClexyA^K=Dxp}d+&Li%WRvnYi9g9<T5^|5o=XUTO
zv#?XWlOxNEsVlmmjvqjLfrSFOj|swh*EriJk6%lVM!plRs_o$$ILSax72<#NjK+x}
zf#hCN<E+NJ;>`S3GT?b%x=+$tO)Tlq%GZC7Hu{AIu0jVW(4#L0pjmSv<?cafrvIXR
z@CBC~2f?vr59Y$$L{=gH^))V&gJFs1WiFqB<K!(>Bl-X=KJiB$5W7FGY3AO~MD^hM
zZ6o9GWcPb+0?=eDs8_hs*W*3fj!uuT&dPn^x+28%@pb{QahT3+2E>@5SLWFs%BakE
zB%Rm*<YqY`<oz2sBLPH9F(yaO>G-wCjo-82KPJNl%^~7`4e=U|(}^Qmb@kkLAA$L2
z$F!{4Zj1tUb#QRhjp#!1!_f+lg@ZS5Als$9!!InEP9a-`@b=EdgahM%&d1d6DrAR@
zA?Lp4wRK!$8>v=Yn>KLXMcHWxGKueTZJjkt>1XDQk1i7B*%o6_i)dLI!Xbw_n2d=Q
z2ap?AN)1b~g9X;ZK}<khxsR=I3ae{Q@_Q^F+5`laLu(!(%RT)l9-8e;=ZKbEG~DV2
z6j8lEHz1of#L*QMrL}MImPRyWhw;Y{Ib1Ve);hJAytJt6w+c&tb`#lHtuf`g%*s-W
znEzwY?d-HXM4?^sJ4bHnttA#WZF?tkbPJ0{HXX->6IokF>GsNIL}VMinmhxCM1`L}
zSNb$q)W-w&D68Hnv+n5CUpg-9HFKmw|6<!O!PZwr-ONhGp~qer54H~n2?Lf!Z&y7h
z(+ER0>GmpHO6~-YF7ALUV7nu;Z4qP|*2za^(AnT{cy^E?g7tEh#Yqr{n!pt*Y{)!K
z*)ly_o5e4t?dkf~vOVFKxYlgp{t04RQ^#feTnf2XxA&q_M*B&XZ!O3bA*zPetlpy_
zcVfZ+Yq0tQu9~~-h8v&ij`6iW+@aSxqm>K6yb8?WXSY4mA&gT;M{>#0Bg)qVxjufW
zJkHp$|G4_9T@$X*_I2p~1P;KZA7n1anpT86Ii1vHqq-r>I_BpTVCe~IYY^3rrIYX4
zLo+>&Hzk|P!{?bg?dDRwYy8HGkV){}v_W=)8n<{dU6Hl&%lTo+VrI^JwHE3{dygr-
zk0vUV?NBx_@!kI(%7ceol^X|8tCr!H4n~%RUkm9fnK|R?cV5}1zKcZO!2HR3BomtG
zot8WNv1g;eDeeFm<2lfVaOtq(Goizm?=}cjo_Za;g?bOq3thVc<4|?^L^Gyqx7WXc
z1ULAlKGT$WIV)%MCXaMFX9M8RlQ0@gI56X!9ckvCV(H317f2Q@-f%Q!lN>Bo$@Y3C
z_O(yVgv(4$8gxn2W>JN=M&;2(V!fn4838?Xn=!G%Zt>PnDsDz^6MJitTxuYcZA;Yk
zN@JOfg7y?|L@O#yj6Bj*n;&qcvrcB20fkSSI^?RK#l%efNgpR<VP@GY{_;>kB1E(y
zv-C}x*RU^zQW6yR<($bpjXjZ0ry^@6P+$b7fyf<K+2+0&F5PrGMyj}!Gj{FVMtp2E
z_OcMhKmvG>qOX|W?p6+d__Ha~1-_K9;C72Qt%8ET{Fr@1jsP%tKJ;&P;126=ov%P1
z_HDv6Qp4+~kx!*#<<T`A6!zhd9=M9z^e6muaZP(^7~mG|c@C=;SdVRux@@MNe-_eR
zUL%8H0#11IfiouzVZoFhKiqLdrijEvr)kB}hg{>BS(Ku&`z=4ezBf%M^FWy{iF{_m
z^AI|dblE20w<vH%(a~KeI42I(bH5t{vQC#l%oW9J+c6o3Z$`M!m?z_zxNZ@J-&=$~
zAUAK|r##n(o+J7wuHRVjw$a$Vd#<oy_0HVGjx=r3#Mx3B&XtD-sT}@v4IMijcje2*
zm8ZA)<whem6m;WfG>cMDc0Lx;I=4I3D@U#<ywl1~g%>a4bxIr8a67XUllbmJd9Q1W
z-fXb9LpFF$b_$k^v*PP88RVVJr;8Pm6I#0z2>t?IL$=L&(a7jI#{xG!(?+0u0~Fo+
zQml2C(o*JxF@nNz!X@I|V;51G{Zj7m!ND|$QJPy0pFhR$Q_*Bx=VVTx;x$??f~AjC
zN<PZS5aTfCm<H_zy<9By3A8RhzkEeF)9gWW)=ziN{nmL4Qmsaz31<7-13&C0MCM9&
z?0G=3wOt7ctS4jEQ!hswS3ElX(*EP#7xe1MyLH6_3!$~%(JRX2pU^<09Aj#{)D?Eo
zB4r<e9pDfKg`z8M&nK!%>1}I`Jm#ya=wfk}!{^=A$K&!^$!Z$u<exOOy}n>GZg%%I
zrV92U|G>mSnNxh7ETCJPdE-t#-2r5Zi8tsQafSBV$S2ERoQb2lbp>hda4bKZ^nIl0
z%%Q$6-i(P4-k3oZ^p17-EYj+}KzrPFa1m(OWz-nT_9SsfP4|3!Qvv7OK6~DGF*Idh
z;HcS~$=Q`JoZ0|GEF|)NmSl30))q(aLtxzK=Do|vjc+pfZCvAIj&c0iwO$L{Leo?2
zz5&TW^8+;rn$-~T1K3z+-xU<G;jdt>S6bL;_c%C5C<k?2Wt0qD7zrr+d^{A$HHbl0
zF~mJJ2~Ff$F-N=RDM?wsbPIlrQqe*(1P{UA*u}Gj9_FTmk+oPqy--NbW)q$q3REb0
zeCLOVH+f%W#tg=CCH^ekPKzqvc(CmiTa<Zi4AfN~N|Oxs4*9hs<Z~pLn~8`1V4>q>
zx=I<ZXPUS(35m$=+S$qZBe`(`TbQ;0<4@KZWg{b8ziG4#A!1o$eB;j}q;<MIWk6sJ
zfb2NbYBT;cVg%}+CUt(=3Qmi+SokM+7xnoBFqO;^Z;fIOXr$9|vG5<$LNRI~8%Th0
zh#jMY@5_J_f^_zi5yazHi0=QnRDg+3461Giok5@@l${Qo9egU_y+xRkZtIY5e(OVh
znu$Xscc)%~k;5I5WT#!I{p5&XdVr-!vCg%?HUg=S*Pm?w%6$Ho@`=Wpp;4<a{FGWf
zRxLg|j@Qbct!P_Y3-T)_O{uU(l^M?lM|gFNJ6o4K7w2;ocobdaE6`&)Lun{2OdaUS
zy=^Bl*2qKY_Nz$SZ#~#5*irH&{D<!$@X6&J)uG;2fBJ$g;VjDQr(nTUw=PU%&26Mg
za=l_^ByoU2>66t#Tpw}iTxvMClnLEy43uQw4&{N1sKWXnw>K(9P2Rx7Y|u#x#t5n@
zi7CO+y-InhTF)t*CIYG3G;L}hrU`(%aDrvs;=B=~w?wLGn3GnDSO$O|B!qR8f$gX$
zGs|-_I=6G~*Fr=3Aq-nJJp5FiX`6F2r_5^W{N!={cJ=(-SGYQ6@r{|n{=%R0vWhPe
zO_<w>6^K&As_mAXS<sx7R;O9?^TNf`g2kd?qxE@iA@u?@p=H!yhw$n+<+qbWV=Hxe
z9*hdrs-v}TB!}9Z!Y>KtvJxC3gD)K@E_GUUDtg(6e`t{uxOMfyq|p23!!9N(sN0@7
z3LjwuD{C7#;gK!8Ltp|>fp{<xGOhrij9QAHDunE{6Kd%_?3EFkyffYdkc$=KV60*X
zE}f1n<3;3Ee;?C$e57cCe?GTb<p>EH$z3m@rY)5B6(2c4JuY&lUwwdVR>o3K--o~-
zr@mVLqMSu=G(Nd4y1Y)ISe?Y{juLUitrfcT<)i*OQ{?^&q-7;-eLHL;kiaw?@b`HR
z(S@K)x;GF;Za!&bgpABn1}k6iZn1CCGv2G-5U;^o%+d#R*Bmir69TCg5&)9q+W;05
zzD3E0sRABGRtGI>ld9$u-3Xd3hq}ZsLNIe%#1wC&4kK!mE<UYocFWPI>^c?)-U;*M
zI*U4$PfR9WKQ+Pq8aSPB$h{Cedr^t%sk3qkt|&hK0RM1cJVSYH%(*fn)Q$vKT65Tq
z??Mn}g-`sMWxhxRs|Saj;?cOa=VO;%yS)n(H1B*DRCG?+g@1-$%(;gYK+GC<;cxXI
z`Ds~H@2Cb2U=^ZGhz|ny?63hGwNB+xoF+zqRw)wvhO~9-UmsHEr>I6qCcqqFLezvG
z1Arm6aqw7nEy|Ej1Nl-FvDO$A5kk&8jcd%}d|SG%Ew7HMrE~gvRqx2W!dks)<>^hq
zv%z728igz4h7xLL#{0DG@Xpf7b1sSLb~)zLGb1@gBc0iCm~oDy;p92|yDYbmHiF<y
z@~ayC$;9ZP&S2Ab?Kh?7P7jJ)xrU0cMnJ5q5MOr;NSse=v)gC4%)aXh7AQX1T4!I<
znSH@x=Ao~NN}Y<sq7RQ$=H$1Y>xxwRS?KEAcg`F2R{Y~np1m|oYNEi`8das0@2nAN
zG>fU)4N0X<&-^VW?vYu#_@vB63sQ$)3t!r+4SuZJ`mCN2pwAAFM+dQqc`fg_Ucn+P
zqLWs-!@?M4#Dy6Lu5a5+9G|}9du;WRXF2KB@i`Pb6h|qwwuBP)uJc~}nXf-61@4bx
z-j`Twd)%L`OZb?MolRoKYBv4-__c>$HS>mrkl9Cp1X_T*o}ha<s!^~{m%TVf&bK_o
z3ha#`*7Pp&2ciPa`6>CG=DVzv0zDT4LWS#{n5epb<Yaskpoh0zbqb3JJ@jLZr;7r=
zUdhxZfK?NNi^sEDT>9|+F>W^A(~{c#=~ka$7OP^8rx<}@=t#B3na)-P6g*ryQL)vM
zko%Z0AOwOqq=hS(1?uoacNhihq9_6x+d>RRbS&3B4t$GAOuGN`tqhT=p(|u!CV<sl
zu1*;kg^pR-jQGQg?|XAEP{OK#DwI@XV9<3I)~gEkSyK8-k5=Z^vd)F=nxls$SG0D%
z8R?zC7?nC;!oOm}ygRysUBv?swNWipscwPUUaACFWco{nBcI1L<CNqP5NqB9xZZy3
z*#~Bbv#JX$SH-^4RyQDrpFmBXT&Phr#P3MOvl3)m-=nEy9RHcLX8X4!=m2nk0M?#4
z^hS7{jsRHd2obNV;%Wb5MGT{{pU6x_2;Gw<I1KRrcPy%<b!eQzqaVO!O2zTTj@jZ_
zx}Bjgd1MZOq>Kd@jj4vRN890vZbaXa2>{hnarnOCt+q*2RZUiz@mRY1`~YJ1+&NhO
z+99E)6``16OYm9V-ppypy2H?{up^YITE7)sQ^u9wMj)<nmP>wlPabg6Jl@PBlG%31
z{8?u2&>uqOiy_;m2jE|+)tn;CRy&zj=TxS(bqGc`Mk)InfJbOyo%!y-+gRvrWB{)I
z9RBOqDl42hC8=eBIO&?S=9r8)_XytclLdT(EZAowfhIokOgfZ?wj<kCMGby<+GRP5
z_}n@252Oy2h{v>5eSCg(REO)?SWkRJ9H6J%P(GY>Zb0)zx|1&<e6}W#8<|^EgZZyW
z1C?4v3_35>h|53Zs%tl31y4Ew5)<L4WuG$0toVeY$zJ%N^29bt{hmgzwBo?T)w@I5
zFDhMofvBWa^N*`^_<u}Q?`0*=3myB=r1!U$k;SjT*<I&+5?7N0By|UpFFLtzYO|g^
zbC3D7FL{B9>Ja@{1($*bt^9beGKV3Aa>?ADSh^j$0*Xwhpt4f;-lHonT>uOGvw}>K
zB-RP4+>E-7Du+3}p*ga~a9{SvE8F6Ffl$~Yjv0_C3WE;BVX2=AQ8EPhfpKOEB8laB
z@FC>^hg0Zubq)y}g?3`lOYO8Bm~xpNl)QXspiP^+lQ_oCboo|$O&0cJ44qoh%PA&$
zVg=Q`bT(OJg3crfAvyqP^R8Cl+QHgI7S+2(<qBlwFE^#lN8?l)Q+t)7b8BE4#X-#+
zrg9SKHWf*#V|NvAiON7z5y|OQ3e%%BYx(YWao{O!F1IHDLgFs0os19-3m~6z0I;QN
z5GI0$VmTJR+~mO&%beo!$$@@k*Yv9{@+AitK(C#w<S#JD7-e6RQX#BoeOXm<`b@$G
zoogmsxDBhG()D1aJ0O)+W{RDGeS^7xrb=Uh<JjQ@*`{p@9Ugbe>wL}PtjD4N_G}gm
z1Le0Zq&<Rajk0~w6pNcC&Q=0G_i#wUE`s>wEUhiqj)RWfmD^f)t_Yo0qqXYo%@XVj
zK2R|g&iv_V_6;u!8NsEY(40mc{VY2v-qdTXr=QXNjP<HCbt~l3XMP?x#a^64bUlmH
z@nY?IO1>1pRx_+>XXM@bE3|-yWKRhnvu4T_gRY0Bz7e$%u#pg7miAkM#e^($Py;Wq
zjFYUxI_VFYfWw^6uf7jdB}M094twv12Z`Qw_CK!i9zPRbbk;eo)q(f_L#bdpJ`x5x
zoGpOm*-h3I5<s6}_OmAp6O-svWj>NqSULUZ++_U16s)256_GrnaxI)|6BA=z$<O`o
zqm4^H-Q<we!^Z1)00;Z?IGQ>`vp-9~7V}0<;-xS7X6h^yIbZhaqf<JpoHxi@aJV*}
zOs~3nfn$<T%{iJ6LtzpzDNqap2(~2hZq3n)R@ZiL_2Uh%@AP3|94WCh;J>1Urm)Nh
zovgR^apCr#d40D*BvELB?hbYb#f)jktw$%zhLNU(Xf{(5f<;qx?e<b+;5uxa30B%q
zt}BiirIQ%|KOvq)bzaKI$n!NE%w8I_{s=wa7P*&IR+vI(^ibOnv8SsA+=sm=tAdSN
zN9txm1HKe?M|;_;Mb~G=834A?D<WLsnnuW|qdQN4>GXGadoEgBx~Re1q6<dTrP}tD
zJ0(jN)UD(5@M1&bIp?|@%VW68ARosK2j6jEI~og6=l<J~N@W-$rn|SLPt)oWwQROf
zFSfa0jyb9KB%RYC!}@E>rW$hZ++=b`RK{xv?{=uog-`bmbd<_@CH)N(!|JMjS$C;A
z(79N6wnS<{P&<QY=>P?|ie1ZFJ=%LHdE8d|v?nga{(8d5IMWs4s7^ZFDlBh=$F)GN
z8eB_nuxs-k?od3ggSS<nr4Z=%IfdtaSw9sAN5y8B$c$&Ug>P*tBE-^}U@H$|x}g<r
zH*JV!PhahRl2N?ibNi$A*!H6}W`3PgO`dKmdTuMu%RdsKFr~;#=Xk=$DTxWMaREL~
zD-tPaN&{@lt4#&icuf_Qq?(q6bj~tG5p=t7(1cb&p1We7?;cn16K(SxCpT_PWx8<d
z=HNxBY8#FzWiV)+eh%qy7%$_}(FvKVvlrcC88yyh!c4403wgg|N@;f2c%u(!Tq6<b
zcdGMaidjA-K|X=0DAWktMWd;19w&Z>i8C~sB7gl8aC;Vqs~>8a_XDVQ>?d_>-z{z*
zGK;ZAsi5WHEW&@Z1&Boa`&_3!ElMWKX)iiXEH!3iy`~l0Dk8ad14}MYuD5vE3nzZ@
zqDY}s$}c$jfJz2N+Bu$nv8F5URmKLtz-Tc|eUJC_PqP_-`&-~<!y7h9f76PJ^(%KJ
zq&DRK;sP=rpQRP9wGuz-(K2w$Jcb-6UKFq3HFPwzkM8;__xCS^#8FY1j>^Bohn&!v
z+1GodRs!m!9Nm-G`l7M7NOZ%m(zu^7vs}~76+Rbk7omIB4?j{Fy+yZdy=KxTVA!T$
zn1|ramgqb2w6O8hD5w+mrbL+uP8u(y*}CnqxDiMsB<2_A_?*(C-PrD`*DMD!b@vuv
zD5-1cJtXWp){}X2AW-uLpT{)@m6u?V(<O)yU3M(<tbLXRA`=&t#<u#!woMj=*cJpK
zqwQdW*&lnP)f|U8beA0s*Ot;UN1;_LL1K-Yg*hNDrK@^Evx+YnmbWN*J!4o!&#G~S
zCpz|Tc4>mhi2du+aK`Xp*jb+6RA{QZ2*+%9U8)ho32emsi^q@cXZq!&O-_gX`aSGp
zzUNiM?-)g}vLr@ps9cgcn^0?0RNp=)^N|k|F0(!{L-*R_w$Oc$cTL}AGP^~uIBu=Z
zWC??R4MQ-V%Cp+M_o+w5K(B)#*K4LO3CibJf$e#R&h%4#K5TjGHOij4F8^HL79-lK
zHhtNTaRsfOBMV%y^*~eDR=X7#Ln$em1qG5rAv1*VYC*_Q>iVIv9q}`tUCUPc!a&W%
zaf8;X(Ig=sy7NWCtxqowZNuEjQ4JPKsES)>$U1s^R;~H!*7nVdA-mnV$SjlhxFQ?x
zdJ1)3RKg8=sda?XXs+9QbD0tQ%39>>?v$2WPqxMGJ{sq9KC{eo=}8Nz0e{T%l*m6J
zbS&HPkrZjdRV4$;#HrO^Km42d^ol+ICnM$eAA%8eEog_+54)=?F|R+rN7@P4mc1gi
z-@eyBf9<<JR4M^qwv0Am>krS*?=)E`P%PlH(!OJK|DCJ;>vBBLA;R$P6CeKV4X7Ew
z1I+an{%;TYzg>mU13>u?9_{_tH_!_YkZPUuFR6#pkwL%^4gOVQW#9B~tK`4kz&Gh^
z|HIQPL!5b~ySe}R26Ev6I&J+MDErqN{?XPj+YKxD+?ATYLGR1<*>_gn*M~v{_9&%E
z=U?xjgNQJ_G1lhm=l!oMiM$UKRzDPP`L{bLSU%G7;CRg6cA(mZO)#>K%IschqIPdf
zzN>i-S|i<eXf)$hl!4c!1QXWEFlA_kr<rWm>bUS#y+k^Gz1iDB+as$V$^Vh(uDqkj
zt83pq0cKrU??(qAiQlg}@`iM40b%q$jDObXv~w@LGqd1lFg06U8Fl=6Kya}ch<AuR
zk`^DEh6(RjAc|#m^L_Bud#L@_EYTv1S#qJR=eGd{=~=c-(Dh>f{Q1p;zHLc6G{eNT
zmM+iJ2f0-VRwSMT!g*x!YLS*p?dgzjeLgLtGXX>;)%Id<MF1Gg`=Uf8;ldhmkx;gp
z!!VwzWm1|fW`WfML=CC{PtrZ3KUl*5f};8LO?WQSr%$wIef&0i;nW};1b59_Y(C_M
z30+irv-kI3^X%LJ5R=?sFSIqxQud86t*bEo$hoL#)X@e_8v}Egob7>8o59Zq;$R%e
z^Wo5SJ5|Iss)o_2Dh1x;hX_H<y)Y0AIt8ssGJ_>$r3nZByefK{;lgpfzM&@in_1tn
zM`%ot7GKL`4c#FpAGNy)D(t^AFr-V6iFRNYH3=4Lr4|iBWkEdbq~x4%o&E!mE~9F}
zydZp0x~u1<kE7m)T3%Cw+7_RA+4nkN5)51Ab2#d>OaG!GmhGy%@6jq!x9Ru0T)9rr
zwoB$#Yu%w4P`lYDW<^MmmSaIfdEvS^<1I%nSjmOOIit7NK-*@xdGeiEkwm(vn81v^
zlnsM2;m<#;(T*f76eJG~TmQ}2>+8;Q2!OUivs1wx|K;IhK;cwn<k1A6*dSVQ547Da
zv`r2o&&708&ur7;{DXs0b^_KG4pKIh$oW6tbud?DGu+!*zKL%WL_H^v&P+jt@B8J0
z4v_|Hf7`Twhwl)qJlnc<p~L8F<UHG2PBtrs94L<Vjjo6rJ8SgyU9O_>X4<>J%D*6D
zt;8|$?GWneBLH7CT#>eU`F4yfqIDVX^_yisWTWr3{dfu5+GLud{3qD~B4@*~9M}lu
zp0@>my^$^4YIFR$bJmT4lKtNab=!^LC~S`~Ik?=EOxo*LN9a&YN`Sfv>yaBi@O&!O
zR})=L;gOY!dr1-{L#hG@e?B!jA=$_&z4WQ3bU{M>&E>D*uS*dtfQVlrRdVhhNu~T}
z^o}fph}}5Hyy@E?|8+I|^@V@?mv2AN|NNfs{)?Fd962IVtAF_)j@ds~G5iqO4oQ#G
zoP*Vk?_T47KlK{*;Z2pPdahdjso%Za|2zu2ry%LrzPK%9WmDrHf10NVaNsRQHBbHY
zFK^)gE`k3KECGWf3(RFJ%|AP}JQ1*p%0%ZWGzcCHjO(XCKzkhVtAUz)41{mcSiocD
z;*8<qt?`HwmJiwu<}hqwec+chyQCu>)*|t`1OVMOe}e9`G7Rwtalh8JO!oWbw@r6J
zkI5hUyM=z4Lx8gCf_mjh7djRJjn7Xn|6308jqMd_0#1ldcSg-vm#@6;yELe&faC>7
zn->sy4D^#SL!8mTh&kYvN}%{~JY;py1k5X>zu6rU3wj18?k0TD-~7w5$Wgj?hg#iw
zfC%wAsyuKUekBZv#EH`M13qhxT5N#t1@gZhBMA_A!a%Rfc@cn3++A~@`y&6jwf^=m
z4iVA;IkvB5zg4_T>#el{)-P$j=AB)V0?=`{mf$P-aShp+2I2FFr09)r4CqGY)BnaH
zDb6?mtqLX7DC=#^uxz~0WZl$v-uuTBfo5wUE)0C!xrydK<Bw;K{Hga?Hf5AAu#W(V
zF<`K8abeCK<VONS;!Y<me;<E)2*3X?Y2LMt)*bDle{*j)V?|oRall0pA;3(04{9P1
zCVHv7>oy<Q$zL$l)^nZB@C1S$XFxHh*C}ra#{g1(0<=X@7NwF}xZpB)vG~sB@y5b>
zvp2f}lwiuJl!F6CeQ?%`ep<Rb<AWcLr1}m}GP(tdSsaiqiwm&l>^mM<G->M=yxO1`
zi-z=(I*)njL!KT$D&%3YtAN~UQhLr=xctDFXQ0CI0I)0np)^LxsZ#|J{eUQ<{;v{Z
zw!4f|wY%!&9IV$zQL;;@Sunb;xirR*?F@9vYKz2V|DhZhNiam&jtgjmVr;gqeR&Gx
z%ii_1FKnBv-)E2;i^K?yys}#&ZNc74wBYFAg<lO%uhq3Aq1h!TL={*>6Caa=LIew6
zRGae&J#1&}0@>{7kPkehyt(}?-%g<aIxIa!kiXnPmo+QN195cyfSRKPUvWC-l0;{q
zNfl@Y+{?W%-?~`i{X4VY9ROl&37nM&U|*!L3ynO8Jn_VO5~veL=3(EdB0U7k(D9GM
zUuK{k7ckoZ@)cD8Vu|WS6y4l3YUn!P2T*)iIsmM!UW%z}`5sBn08cEqgoUv*APZ4&
zK;Bb|*9bQ}kC-zsE;Yr>qR~ch_KK{9%q<u(WJiixHg<oZ*=ln@$U56@U`XF&_rjN3
zYpP!^_J_7c0b{}RF>0ryNiP(a%pnV28sL}=MS33IoYpmxiAj$Y3RLSZb|FEGj2H4u
ztlqP|yF;w*b1C6kxaOQ^dg8l8{RMm{nYIyIncgFo#I`eHAkk3`N<1Tv+h78t`182a
z>R?oDxV8F5S~`2RN&%#3O<zqnq-DXRGmoYMqJ5!xriPkli8tO__&hiLJ@1R`pq(Q$
z*=M?}cmaQIIZuD4?y3VHdj0--W$6E<`$&tQXXlKA#^MnvH%aIxj=?UE1);x=FXhlm
z2uJN6+;%1LQ1+;3u2({!5zWj<kfXz}|F#HyjzA7}0mc*ffutZUne{tpa7d0gWrFF0
z><&yP3qOq>(=kfo^|!Fxg4#Ui=>)HrK<iNvFM%i+b6@5;Z*J4jK2*!peV&F%ocNQ5
zrXI{ZVX4tzVQKmTfzXAryPhHy1w?KeaKJ~$ZON)xV9LYTdhtCzk=y_Htvy+2FbqA;
zT}<zYtj}R+EO##fR8%mn$+ffRr(wh*;J6agHE+sgEC&!?jdR<Gyc)QM#2PIl!noTV
zu2*9)SkN^u1#AGT&4uv`pdzZ(EH#k>#}JIGfhKZ13}VGI#~L_M@uM?zZhz<;NtbN=
zGHG3MB>vn=X{SHJm8TC>-!<<m9!;;v;;*ii*|CRm5M(I|71Y=9P#CR2zfQD&6c$2P
zgIuLK1j6K9OhCn^oDe@%017>^(Ddmz3k%&j7kV+Hl8DCYFdnPBJ-zbEraE-`xfa4X
zSq-ylfzi2|?<_$kT^XpzdPr*qjWJSuJ_18n87Z{dU+zhIQeMiKEhnXJy_2FU0Wv+#
ztydYu_O9C^M7EI9THk$(Mww9m<RGwgU2a7Jajao!xPvga@o0z{8l+k}SZ8aex`4N?
z$W)auv5`7Nq_`kr&=v_7M{^zZ;eE#xQ27Vi)+hFaIchKn6%E}-(>g^G2QUY)&&KX6
z?vo!r60hrJ9b>F9WtIM3c3N^f0ZA;CKIMbXPtWC_8ORx~m$0pNcaX|E>KK_rK;s+m
zKom?@=WCIO7pgm3G8Y|P1I_dR5AC8f6TV?rZg=fhBi*R`VwX(d|KqF>yKxyXhhk@;
zwSUz{%Z?OBR!F(a?c>URSJU_-Q{BE)%jc99!4VONq#lDipsg3gal&`C`e~3OuicyM
zb!hnfG)xNy1{7VLG7Ytp-2yC2^AK{JU5&aN2^3X#3V5wo8>_CeP9XU!Anw`d>9$YP
zKwsCu=!#!n1SW-0KFCH+KOfUEbkIk$U+%XgY7Jl@p$FtlR0Si<)Ps1~A4);CPzAbj
zRcJ^NiCE>8OVNrwkT&6%=<nx@%a$eXs0L#9!)SZ8_o#JIML2v#dLXJuVjTY9E#4b?
z$T@DQ0vy`3?rq_l2S8~3O;ik!9u9f<U^LYm_P!vglWc)WRYB<RV_CQzsg7H7XV&3;
zv@ac35#dlHG!srHVe*mIEKl(?bOSpgt3kBK@3?W=QQ8<THz(k7bPjM^9f2NfRe{~&
zBCPCSDI?$=^bD79R7_4AUnSGC6dpt}ZjQiD&+1b+SrnN6N5$!l_E39s|9509l2L&=
z)9JIao-5-!U#)xy-#-il@-h|?;|`b?lWY=!*MI=166lOs^${7>pSPpY0hW7hQFC;w
zG8~)WthCSG>$9<)NY5#($9H65s@-zmKEl3E==-OVpdp`~o;Ozpay`{Zl_ziSF++5S
zOj`{7>PYW-L$aUe)kDN=P{iMk7Snh3sw_wBh`hZthtyY-`Soap;gFnTUKK;9k0s>-
zgUvCM(;D{Sw8OQVsQ1@U3-e6UTks*#upL;mbfR>GoB9yfq6Lnl2LGa)QwAIQqLX17
zisb6%2CRyU2`*IBYzB%rvzKKCwEf61p}@hX3;LcHhr*?_=;e!ubSB$f`_pntPpJn{
z>RWk#kMxyk=oCmRk8k*9-4z)FN)k>rpJaaC{8bC!przrmEwR3PCk>MfCN&l(IY7tG
z!sy4iX@8^}9?hnWcB#k6c9hCIN#>i~59feBQ-bg@CA)gg<2OFX$c_7ghE=B3&L@T5
z80839G5u>7XU${0MM{U-p3mj#s`o6h&EixIW>3mRa{pR0d0Le-PM~}S*a)K`bU0bz
zr@;eoF1+z#)isMshj>?~|A7(#-NtS=Rqxr0xGY|G4(6+9Y_}J>NDG^&q~6>LDWH!O
z*^pW}NUIkKNZ6)MA2%a@`o*<5$rlD_WYgSv_~~BO8m9`M*?Gi}n$$xyxLLXVJrGQ_
zAxT<5tZftm(_8*16e34|otn)Y4Rbj7&6D(5^X^I~o2`$Amjfq&x7m9F5kf%w>0TqP
z1$StBPMchFBC@jZ`GdgLoFK+JJwCHWL$Tx2o$W_5E!22KZc(_@?GnzNy*rYFWl4Y_
z8QD9=3S#0_xtI1!9y8eDS-y8YqpNJw`F3Sq6{A}{YyANeBw1%R?Djws?i#f6mYFEh
z<O6dehhC%kDjN0+4oNTV+SCP`Bg~hD+GU(4tmhm_ru&uJ95*!wTctBnv)SbBByVj=
zA3&aOrOGD?rVN<ZzV+Z>DfBX)Mmn_ucs-bD9myTpp~-i6Aia8|z)rOl&XduKsp0l&
zP&B)TM9B2-B~;~5Tz2sO4ug2+7(Q#wa+v24`ZM8J@q?ooL|O)di?Yv(^aJy&4C!u)
zLE%)yD`8$oTw{T7z*0Io2tt=Z?WgxB2jh5O<0P}XBQJd+sD$BN_j{<!o>YyDp~Jb>
zYu@VdFueqNw2E-*n;Gu6s(*w_rcuXjho^p}tz`rqs};%P6$tv|-B>gXd1spA!gQCm
zxT9cz4hm=Z<~W_hFvhH(FYw}+gv;1o)<e@7Zohfw8_B)4Km+lJ21y*<(C($6Is62s
zaN@|}NMt?^4qbtpr$WTdzB)xXT!(|Ei&%Z;?()6#XT{R}5K5r1k@S!ik4G%)8G>e^
z^1Tlns)BUjoMrqfiyJ4`M8CkLgSw@*u0+#g1ry&KY(^Y8bOera($WMKfkGgwo~JYx
z_;2jqOC!uN!E78n|Bit}(k*i}_LO<%bzw=X!ug3FVA>?7rFTf8(b%3BYXy`9Gs(X>
zfxsRv+2#;HZ&lK5?npZAp=6!g#(7qJf9Ygmj=^y$w#m7ATcD39*)c|F&O$fT(t3k~
z1n3=BfogInm{;8Qh~{bqD~|v)`<0Fue`*a#ZdZ3!_mA@0QGb<3>xE_q%X8m+Ab}x(
zwsm$sG3{URzbnl=fvncKz8Wz8tsmq_+hazs@1w;uGPL-~I9lS&#6SqE&MD6^I9;^+
zx!5U2KrZ7=@#@`^wunwhz?$)PTi5=&p3J8v-oM%MZL4-m?kJx(MoP~r4IBOiO$-33
z4(~L=RFelBl98G17wV(%SCy8I@cpNx83cf4KqE=jb!LeZo!__Dh@(&{IMHvC#YQ>b
zRPOFL$mhP1vSZLXdDhPnxX2``mL9*h^$eosL8Vx&|FVwp_hrAIjqc&1vfhIGzD>ED
zD+9&XeIdPurMv2A*V(^m`b4UDqKr4y_vTaXG0kMGuosB#?@tDQhXh>~(g*?B4OEp}
z3M|m*t0F1Rz=VUoIX)$tnb$akOGwT9rLssvY*kxcKV&DbQw2N8V)$fi(f!;PTGWXr
zq0(|}x7LVDd={NO*>Wz#+Mbl9vt?BjN^yHD5JXW9$5``ov|)xKo=nyrh(Oqe5NxdG
zX;gTj9VEuc%o&ZQXKgo5Hl-LOE*^@=1X^j{2heEHu=7oRGU}27l!V0~BE90(HH;|^
zsW6iMxNT;NkOsN8mi{CxN)nv_3xD~|KcEIjNwic79BhhLtc9;QjadbP52pJ!ZT<S>
zmO@B+;4?IX#(P1A8WRD!%sDRVWmi$**n>no#pb@etVZScwtbWw<+2Lfg6VU?2hJ)O
zZeyfsTOd&dT^KjQBr8B+YJ_Ay3@<{zCQgAdrR1@WcJc=x%sSh^IjmYZRV08Z=bw;(
zjG-EEfpB*ii;kxgMuh-*_kOpjFL{_jTTsU)XPz{l245Qu7Y=-oZZ5Wa49ycuzC)6W
zLl`w=p)e{5LvZ$Dkkerp9H3>R3{{7!A)A9h>SvtY&0qNL5Y_EkeJ=oB5f5_&M+#G?
zRdK^8qrJy<?I}bbe=S>}0gFCzf;8vhF@2KXB0<yL!vpxB7AX@!D+24^z-jd4(kX!O
zB-$U@wDK{sd0q;9O80Zo)pleNfz$ysX+xq%G;jw|eN_c!7WZy$W8s&CYjs&yNT%5^
zj|3xgW~!hD_isBoiw4ct#2^7%B4G(?(Jq|98`gn0j3a<1u^?w4xh8@Y==fu>OC$_n
z^`bgQnJJi3gR)aJo!)^*;_D0tk(8~oP1^n|YH993)h%T?VF=@n8kaCbpAp;S;jd$T
zb*apcav=KlISGV<Rsjrd#oG&@vHLKpPbmYHoTbR0fnx{(IgGp>IM|iJcfyrOabg-t
z7<&TY)z8NPg>Np$48-6;lt=8@Sh79yrzjxf3bY<?9|cKFh0_TdYs$Xtrg?(+LX+Lu
zT|+P)PEznx-(>+wtSZv^AfC6L+vf~efTEoD{$4P%80pGREg4GV+Pk&A6^4>Vhr;Sl
z)sWSB%Duh;sI3Im8#N*=_1K%!{%Uui)J<BCUS^jMbXen2jYb$xG%AzA3dfGnvqHH`
zuQG1Uq(xlQp$$(?2(s@v&4M8$g21uc2nJC~*#cS+-Cy*?xVNnv_nL%gW1M&>N3vd)
z&9tyT$}^qkK##ffZRujp68pK?qdV$mTq+F4PVbos6tUKIUtdrUt;2}2RhQeIXv4#=
zVZOEh?0c@AxYi5s47$`RVUQ|(=&HIpd6zEaIlWGHzT%)%(<}ZCdQ=fVN2RGZOZkd+
z2D%j@imgKjiCn-uSxV>2%8%KDtxO<iYxCLq)X_bXZLQOHP}YSwUJX<3{!hcio$VQt
zWu<u=(XprkkXOU8B%oH=i6O$i<R|@WHYTCh<@>ijuY;ivkrs<@#*9A?UTBLbuLh4M
zP4_h`Fi_7-)>~^DAyXf#y84Of6y}%`!U7Q)S<|ZeE-NEx2&yR__BMgkU}nY_azF80
zQSo~rS0orcQVnN75VBDigGKha2&U-f@?bF`WuDj6XyQO(z99?&^niDmd}{uLZh|kl
zlZn6B9-S62Bg|iPNf@3cZsR6Nw@Ze?FmsMe4%R0Tps+8D16{>VJQ}PgDF>fDiBq&t
z@DgOVf6dv06jvGcV_~qg2i%oZ0WngY8N65+f*QFGU)JQ<*1Lllfjp}G-|$_L$ND88
zsH(^rS(aIjZ!EOD0PxrtWXJKFZ2L8Va#-mIAtV-xB|+@2V?P`^P0x5HzLq~-ZD7&L
zLC?2z`1ghC$-1PWGw6Y2m0Y%kA%IZ2gzYedw~?LP=MQFOUHWo_vUj|vdJp!x7ozeq
zb6NB@`=2})G<SX)NWWW}@pUN%2>Y`4^P$_x5*2&HQK&+EG!_N{J0y(@VV~t-DMX<&
zN}0Q)Kd$v8|H7Oc<@rWnVxhHgdyo5E;mM4Jr*w}ehFYb@0ojE>>pC6Yv;iO38{EL<
z#dqI>11y|gJVI(3#LJe1M#Snu11#wXn$<RR-i4J`_{tqmkCS$oCo~0{Tv(x}{8tTS
z#_oyg9G~5);rgaG4f^ygcddw{sBRj*I|V~>qpA+7(-8J-90SyO&VcpSbbMNv%y>NA
zxgy`CSU_D3t|;M1ZF^3WkmzqP3NV{Uu1gg}kt(u!jP8ZYE-TjR%J2DoX)CYquDV7T
z__40kUw5!<Pe8Te0{jxH*BjX%ZJ(8)>aSx(2n)?Z9+&U5vA=c6E59ky5Ki@R<Ht-t
z{?%_^f-)1p&BX9!P2%s|>UX|?3~hbQ{6MR30(jr~o8^yCS`$&EqD_}|-B;e>w=esz
z-|5{23>|^pTbDzGKl+=$o<B6qnW3bL>uw16(ZT<n=kkA-!2c^tz|r0l+JxskL7?h_
z{jb%qlcit&!ECt1xY!ia9n(GPVVU<e@W6W%qbX{QE^3WScEHJfhpdsKEPdD9=7>r0
z@&Ojl3p@A20U{m@U7UjL-lb}=I`&_rW1cK;Gi-dQ&PHG+h>!$k|EfOB?nn=3nGI)|
zo6J1=qfYsnWPe@Rj&881d^~(sc5wN3@4wJr-#m$&&5TPbkw2LjMcQtNZ;+%MWcpt2
zy{YER<G;*6Jd5d=J-k>wLPX*iXTQDr;Gh7`&{S9bZ_BfuN@E(JjwvA|k1#u-4CRAO
zT6=dOEb#5hI|hU7hVHnU0pq2y**64Z<^kvE(uaG-(FskqW+`v>`c5#2BmgraV`$XG
z@vq$nGZm9GjN)IU+1rtUn9!+bmoG>e{tP4)XrR8zKQI{dp6F`ka3`Vr?R>VV(D<Jd
zooYs&{xh?g1tnSAza1ss8PJSg=&K!w&9Qtf`^Wnd!bko;?LB!s)a%#X_VROuYq=G=
zrYJ5V`(6pzw;4s2wAj*IVeF%6yC^g_YYbB{GWHmR!7U+S#xnM$62r($1~c|~ztg?H
zqBl3!``7#V<gZzr?=#QY&w0*s4sf#e^fqwFht9C;O8F?VsqEv09J?|M+sR{(*fCC2
zlrm0IMt<x=ZnZ0vWw8hhD7o7K+z#SppJ3+Xfd~1YiYPTTe$LoM2)MkggznLj2>eXv
z{}Pjp9c|m~)syF%*>kwaZ?+^*-sS)CadB@WHlh9P8^eLO9)}JColq>|fwnG?`j~`a
zAp0T@oUpUQ?BXHf-bD7lND~2<zOdUZGYx2&B*E@q=C97}v|H9mry#0vv83yy&!<GK
z*>SW2t0LReMPxZ~KeHNIh@(xZPM&a#LrOkVi13{FHy!zRv9o(rAGSk5ER$vfqmOW~
zue5OjV;6zM5dO%Kcr^g)*quf|Umy+O{-G;iU%|z$k$gZk+k?kkpIAa=M`1gVkJ|nF
z^m3AaMhua$5olre@_IbrZlbOO7tin28hivM%Cg&j4*M%e0&fe&5$sknSR;JEG>@B`
zsd&vPfNyvaekEQ&v7IZ>DbE$?iIJ_k^<R}bI!Ximl<ymwCY}9wriy6a1z0l93$>qr
z-Dgy-ZV-qnn<;zFQ(9D%8~&o`*9Gk(u~+#DQ3Mq3xfur6el^eePmq6cKJg@A0##pz
zDH{J5?_ZaQRhDP-9gyOWor^SHeVhM;3iLg8*~TBd9{0aa<bQ(wxMH^j;KWEx3$Yn|
z9gol!2Ye99e(`Skuk-mgcU71M_#n0vHN|x;zX4$)3gGXgNulf4W&fMIaxnyyKvA3T
zrS<F{csfc4z~8+jmsUV+esi&}us1OlZ~{FtXr1doK6^dYFaUqzD$SUc<Kx!+G_(}E
z=Fei_i_m+`Tk+-r@Mm)6q4A3I!!<9@j`0D*lvZ)>Tg4Tt@COic0BPlSI*H$G?(h}l
z10?&d0KO}L|DysxyNf5Juhc)<&U~jXK9_f|p!zc=gQiRjSa8gR{rsmy8*SXiWg;j4
z?2PUYNt>umNH@GsVoEwpDGcJH`~Ax&g1go#N8@b8gG$=|d<9=4_;;Ohd^t5+6k?oV
zSlm0CHA+jBw&pS#olIzi=bbkE(WIb)5hpVjOv#cb@TSWz39^2MHg{x&aivKYUnb2|
zykDapLBK?bX{bBT4=<0$0AH(sqrt{A4rrg|Tk*QZ6_O$&A*3+>r}rnv=v!LS2T%v3
zm*-Yy78)8i7Hp+1z4(xR$6)jxSEXMiUD#_f`VMN1YRW4cs9!%5Ncm6FasaQmsw@wh
z(L}48M>FD(6wXAmSAFpE$;on0U$|B#tLRW;$0O3MH`>dT*#e6}RX;_*R&1J~o%!SL
z&0Rb^8&7v`+8!>tvjlxrwB%9A1{29~BT_pglLXU6MS2L~x@~+MvrIfZb;oR?C9KTy
zvNrN>KF{6wj3+j4|BYQ6PnM*U{Rhfvfl%rniQ{uK4djM11C#1xb+QV9{DJF8(BeM^
z$3*^J=jo;^s|w{U(6$j7L3X9{4@1jjE`^Y#?}0>ShIQcuQEMFDppDuh*5>cU_#$sx
zWW4W$=FA<&BU4Smi4UAeVFw-+ElUgIG97zwNUB3hv5z6sIJEpVnEMD<M7+AV6KNbN
zT#>)fZ{GgWwiu!iNcBXL)wP_upM{E3!>064k0BF5$^LF*9o-9IeT;~5=51Tw*5e&|
z>J^1Sz7Ab1Nf1L-%&C~(M5+ucoGHup<q8O*CnK3EnobP!AvNa{StW`sn>uu|PAj@}
zKNjG{oakpphxT!W#>*)=^@TtA{Q{EuRM}~;8!3`~?Bceh_T8qW<V<{AEIH+;e5Ro&
zhRQebngCj4XxTD<Um#2^iV_0-tEU!0b7Hz#<x&<Z>3&nOzgYII5V2JZ(LQa*1;CWn
z4D{|<;R-oAbG)}aCUc<80_WYq^@<gXZf?yK?F+fE<3*C$G1&v}EN|Mi_kwGRda)Ff
z*_$FV4<2o~E*1v{_08YY*HQ~4E}F{>m+zZ%pg#>&(c`)g$>uw7iNw5j#IVj~0-c|Y
zuM5N<riVFrXu)2j=-O14o?+?jki$C>EoL8AhIzjT1W6r2U|Q(#+=zuIAs*Y}RgZAZ
z4?>J2`=+||D`))3)DM;5&aqjMh@k2+kXWOjoOoPtYEQ-9(Hc|TDX5^F@I4HZ5lrr|
zd6N@VKYN{lGSHV$<dQQ^6qqeBEk15`;IU#J?u<x@++0pTNcB12ANRI=Gk5n<q#TpB
z%+<^W+kbKC1Xil8S#krR>e0ni!-rlVLn(3L#s`w*V`HPF|4iat^7t*(b@1MS(1QGF
zKYPC`Q<Y2U+`O2}o=?j^M302@vHk;eibo_zjCB*JaI>k(3FkCQYe7*-d%SqGqbX}l
zntBtFY||B3h)tS$A``<D;-4k@>cUCB0l#1nll8o_{vy(6b1KI)%KV`%RHP|>AKg4e
zL%F&TZVbJ+LkT=MOA?4yDPvNjh_7nlPl{>W!_^JXZ7<GNwc3)3Y+A3dUe`m?o>{R*
zJ9IVQ34yZTvM)!i)RN1!(5J5k_n}2wmG=d%yt8`eQPp4K%iu@}*x$0r+Q%U|HU`~j
zxRl1{mvPMqppsARt+98(rc!*jG+TrWij((@T9b9uJxz5oG=D0Ha=RHwFOQ20*G{V^
zx_D4Dk*0GtN*|(QS@JEc7)K&VDK46LBzvd%Y#mcibHT2eRi7JG)Y2XyG!q;8^ESQG
zxlL)R;2pa(o<8J*xLKP7n067OVfwE9I}R*NdZ)T;3XUf86k&(KZ&IBrm9U4ck4jEz
z{xr(S)ycv`>xAism7O^-aD=)iG<A$sl;ve!eM?+aj0(YO;4!BbgR3udJfepW62iPk
zMSeV;?gf%jS8$^AhQ<`1D4i_V=d$NDznN)4F*+2O!oQdvl)FdHkZI48Ka+@zb+G9#
zQ@jFBaIfqTXw^DIRyahzttBv8@#@u59J8JHIlJ^vCdaXNbA5<U+DaXZ7~XD$NHD>r
z6u#d!e%FjViFIsUw2rQ74C79lGjGt4c6xzBHUC)|%xgF@I@uRE%8=2U^UqLha|NHk
z{0`?HecK93ferCz9>iTUxrZrEflm$7du<KD>C-5ZXnQYd=N{a(6TdGUr7gi2^aWl~
zJ9?46uS2J8#^!4+3L$*57ff~p$1I8j>AGiiTS^ACB|Kf4fOTf>6cw6{%P#Y$<|AWa
z61F(;;a~@$Su|Y(EP3{Eg_FgWyQSGT5?bEUbONTVn^~AlQJb>`a?TUQ+i02d+M`y#
zV0i4^vcU}5Gq3bQvNl&S+&R+%WiBT|9^@Hk^SNM;884c~X}6~oZvx9K9vf>=^;%e4
zRCO4>F?f(E0sX?f4DK_Nkn*vyq4${-Gs|Xd`{00`D6aHR2P-_b;&Q`*i}gwwphQzw
z2k04r;JDb==CeZiF&iv3Ul$rrcErxo_U?7s{lT$x?mBl=pUUed7|ePx;9Z{C4gnwA
z3^|2^)onrtPuz`NvZlG^3NYqS_8FoiSMUMM(O)o4+S6r}Nd1nO59aBdemP$5ub~4&
zv`E2Us@t%6-kn|JqnQH5nQENdWjW7?+gVE(XapS}gMcqcUi@{pa@NODVxI(awHH;&
zJ091`n-J}nU;9E}INo(E`n8!h%<ml#9(Yzh^@vBlt6kBbP{(0%Sqsmo2;G(={KTSk
z>{?x#glVP(@hJ2VI99V4D=L5f?GkjP-=I=8y}=(FsF7;9#hc0+cr3xo*+G9sHx9mM
zb9^*ML^o?`{I}L_rlRK0qfL{dBJ&wY@}(F0HlB^41+CpfNTmo2Uq^(pjIcxdo<x70
zT!(2Gsw?L=@N|d9PowQ#nf;+seT=j^g4Ee;*GW-=B<Z0TA^afU!&`+sS>d&DKR)ey
ziWEp{%PjX{p5O*_XK1z+0oyy7^vKqd-tb&B0=5+-eSU4RE@GV94Cxv;rM^68`@=>Y
zPu(^=Zu2d%B1Uwq75Ij#Eb51zGnE+Y2QDpl>gMsVD#u*gn|7*FG3XZl9v3ghNH$+u
zX)Ey3-DBcSqga;xldcGEX+3O^m9faF(Szf1eu&ctI@@F&P6ziK9=@IuT1YQqpepFB
z+$a8r-CBF4?h`bz#cq5yiHadpmD5qv!!%Eq+}tk=&nh~)s)SAE%Wd|{k4X?0IWFb@
z(Sk8BvP~)$GV*Uuz^Bt#r>mn?@M8%4y!3754^s@(3Fi~PYJ|LYDbu=;+m9dT6fqXc
zgGjz_wGAk-x0xQ3tw!7mys|(WIuyvXSLIK4gDF7Yyv!!k+wh=ih+rVJzL(m&@G#^K
z1=?VI*R{b)Y)#_Wi3CDoHH+4jRW%>Vc;oXAIyG^W(g^AB5Tmo`^4IV5?>XzKPwO+g
zAkJ^8<6{x-AVqaqze^>VK9aY}dMcDW1AKptP|Q8z-gg{jzZl|+YVH~A9>OoV;1QFs
zzH@~MpeT<qFH*QA^JjlM&}xFR(%ik52QmgIUH7vqtfHVP;wUM;X!u1iuc*iZL%%p#
zZ6+gKL<$jSG41@UFce_b_I@qDpvg=LeFcj^Y!)tKNKQs0=p6aV%s?O4?j^VoEoaZJ
z4SU8awl(dUS!fR$*w8xlilAc!E~@ElnX9c)Zk1oL;;K#^EER|rBHIdAj#^uY+-$J}
zglZ1<wV|UzYvDb3;i3ZOZ4f~#Um;omrLey)IyvYdAR#@2M^gA)fnJ4j&ee)}&ss1F
zdP%lhRcS&VCU!L~rQ6D4a_L#mK@k_u6-16S8JKDk$Dv^I%WZ+JN?Bo3RWW$?zwds3
zOUB%Q)S=a@bNPo>Y^zfO!DA3UI*$|apBmPWTWl5-mU)wY1RB-pF%a5Cxc&H=ekOH9
zgGrp`o-}oFAZSWB&8Fe=&j$Fnd)<0kHVVN((!uT?8RIJTHnst<@>&u60jKA@+`PV$
zw+PaFSs0y5XO!sDu!Oz-kOXTSz%p2J@q;wJ4%j9uS@LX8-Zi~d1ZgE3>=J|`Dkk6$
zm|xglA*s6ps4hD>DQQxCP1}|KBqa*q&k-$0b68Y+G8z6@Aez!Y?n6Hcy&WHTiB@wF
z55b|+Mcn%uIqbRpSxT1`&s7cGxegMUNd7^|tzYUvnm6<2xUtE7;n_~p$kI1K4O%+y
zRSOi-r+aI}^-x-GUthP@yM(Qe7D(EgPey`FvbWOT&?1B0T7yJjFhHIkH7Tquc&%yz
zQlZ@{Igl0Cnh_H`k0loN&I}tvCEuhT7}ztJ*!mXgLms|9AdK9);7$is-tqfzpW(M-
zWGZEbb|EN^x^UTfZVBly_kuc<hgyn2US=8i9;|%d3&=oeN1w?+>WJ28In3t~wQ<h3
zMam)c;J_(d&`g;qZJu&g2_=xsGusu?E}UtEB^Tj_mgo!Q9@98Cv&Hl!^o_<J1>v~U
zdeK)&;-Y|i@lGIE@u9N&+T`|5Wz|*IG4}-rYQ#za$G|N%4-!ru>3(JP=Of&!+KP8r
zHBn)Fnnva3+w^kYtr|VPq<I5v=i~GJy@L-~g^~t>n9a#pidNc2OHF!kGwaqXQ3K*3
zsU-&5S*cQADOl|7MA~>yny5L;)mj(c<e>B3$H*Oz#agjk<MbLdC2UCOBAi9@u#9lj
zm>x9JyH(3)AlhLz0^)d(pe5@RbsP}NjNo9pQkhpvBWv$OopIlo$7rgp;l4{R2t83I
zs6C6&@?Yr_<RXI0@L8ll^4{5aQyo@fPI&xboI>t&KaT0~YD|5(Szq0SuY&C~>TDuw
ze9`Q_X8&EdHzj`9V>*>*1EsL=T^WiRACieRdb(2#Jbu?#r`P)0NfhLo$><-&C-@p%
zx17DGC37XCAzE!P5#9=|;08a&@LlP?loj~Y({9Rc>efg|;}-5Rk)LFJXmz#00d+R{
zfYTTkht+jn!px7*j*Itw2n)4?MJ)7k6^3Ni8xBFeGAXuL1B2|@p82zB5|#r|rZVKo
zX~-!F%zM7syaG`D01@cgX6GBE(9)QQRra8jX{^!lfp9#oD<qv4UZFw}-P?`&3#|J5
z!GUUvdq7eeA(_SPJGEl8jY#yR+^G1H9<)LWK2B#~i+Hre$pcplUG06J&5@8ftW%PH
zR$I%8_1<TlhP10@+(>Q;>nwqND0EJi2BRv#HHLhTrrozjE!v-nL7QFhoUj!YKFD|X
zmirJ~AvtG$#O&3Z;iw^dpRHPO%hXK6tCW1T-!;vbo`wR$eQ)MQc$4PYNrsWVzH8J=
z0tk6v(3tE(9Axl`fXv^=(KRO>|Gc&(TS>~HA}FbU<gd0i=wCKk4(l{1@29`(LPGlZ
z^8-%K=6Ni1P$UlHY9AndZ3SH$?aaYW;Y*yH2#FL~4|s;UkK?;TUZ8AS?unU}P#kl7
zftJ~S+UU`Z-WJM>@!u?Wgsp9k{Py?i2%vbc6gN{JBdHhs@`kw{=a=4r2EvC+FS@d=
ztY93^X{w_hbUc;bQ3tshTR-q)e)n!PPrL!x<x~C7sz+2Gr5z317>w&da<0_YtBb`K
z%6=bF8L;{_LK$3N#0V=@$?7K0ObdXYLxl;g^9Q&j0p}!xk!{=73IEs7fu`!nwK35O
z$zWqi-ULY3dg@WGuM@t_6o7|2JL#<zVP8bOyTyTXvJ%kr(RIR80C=m)Bl(~e&c^@R
z=Bi8-!M+;Xi=5lHPWWj69y^fGxz1uKL=C%{5LG{T*V<WjIR+7P>|!yR(fd{U!hDOW
zKreh?0I_eX=6c~50eFh97;JeE@-Mc6_5@;r2sI0l^}@pe_-Qp>wRMW`ck%x&{@=y_
zyZEnDeSEk6->v_5>;K*QuhV(|?)?9McmCt^fbe^6ynemm*DjantKmiwswN^|%j$TZ
zyO6tK!w)4Vb&gtn8MrQw0{(Wm(a9TmV`Uud38*f<zdp)q-E4Kf*R_!UUzU+NZU$OO
z>t6L-XZ7U<gb)yx6%PKIy-v6OYSnhYuLo6?th4;|YE>i<mvwu_Le^>6wE+wq#c(_J
k{!7GtN)$NO?pV;OQymew+*Gc)0r)$4!bB(MnB%qo0YF=S&;S4c

diff --git a/docs/user-guide/providers/cloudflare/authentication.mdx b/docs/user-guide/providers/cloudflare/authentication.mdx
index 37e2ffafef..78b8a1e5af 100644
--- a/docs/user-guide/providers/cloudflare/authentication.mdx
+++ b/docs/user-guide/providers/cloudflare/authentication.mdx
@@ -22,9 +22,12 @@ Prowler requires read-only access to Cloudflare zones and their settings. The fo
 | Resource | Permission | Access | Description |
 |----------|------------|--------|-------------|
 | `Account` | `Account Settings` | `Read` | Required to list accounts and verify user identity |
-| `Zone` | `Zone` | `Read` | Required to list zones, rulesets, bot management, and SSL settings |
-| `Zone` | `Zone Settings` | `Read` | Required to read zone security settings (TLS, HSTS, WAF, etc.) |
-| `Zone` | `DNS` | `Read` | Required to read DNS records and DNSSEC status |
+| `Zone` | `Zone` | `Read` | Required to list zones |
+| `Zone` | `Zone Settings` | `Read` | Required to read zone security settings (SSL/TLS mode, TLS versions, HSTS, Always Use HTTPS, WAF, etc.) |
+| `Zone` | `DNS` | `Read` | Required to read DNS records (SPF, DMARC, DKIM, CAA) and DNSSEC status |
+| `Zone` | `SSL and Certificates` | `Read` | Required to read Universal SSL settings |
+| `Zone` | `Bot Management` | `Read` | Required to read Bot Fight Mode |
+| `Zone` | `Zone WAF` | `Read` | Required to read WAF custom, rate limiting, and managed rulesets |
 
 <Warning>
 Ensure the API Token has access to all zones targeted for scanning. Missing permissions may cause some checks to fail or return incomplete results.
@@ -46,8 +49,8 @@ Create a **User API Token**, not an Account API Token. User API Tokens are creat
 
 **Quick Setup:** Use these pre-configured links to open the Cloudflare Dashboard with the required permissions already selected:
 
-- [Create User API Token](https://dash.cloudflare.com/profile/api-tokens?permissionGroupKeys=%5B%7B%22key%22%3A%22account_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22dns%22%2C%22type%22%3A%22read%22%7D%5D&accountId=%2A&zoneId=all&name=Prowler%20Security%20Scanner) — creates a **User API Token** (recommended). Opens the **Create Custom Token** form prefilled with the four required read-only scopes (`Account Settings`, `Zone`, `Zone Settings`, `DNS`) and the name `Prowler Security Scanner`. Adjust **Account Resources** and **Zone Resources** to match the accounts and zones you want to scan, then click **Create Token**.
-- [Create Account-Owned API Token](https://dash.cloudflare.com/?to=/:account/api-tokens&permissionGroupKeys=%5B%7B%22key%22%3A%22account_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22dns%22%2C%22type%22%3A%22read%22%7D%5D&name=Prowler%20Security%20Scanner) — creates an [account-owned token](https://developers.cloudflare.com/fundamentals/api/how-to/account-owned-token-template/) instead. Use this for automation or CI/CD where the token should not depend on a specific user account remaining active. Requires the **Super Administrator** or **Administrator** role on the account.
+- [Create User API Token](https://dash.cloudflare.com/profile/api-tokens?permissionGroupKeys=%5B%7B%22key%22%3A%22account_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22dns%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22ssl_and_certificates%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22bot_management%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_waf%22%2C%22type%22%3A%22read%22%7D%5D&accountId=%2A&zoneId=all&name=Prowler%20Security%20Scanner) — creates a **User API Token** (recommended). Opens the **Create Custom Token** form prefilled with the seven required read-only scopes (`Account Settings`, `Zone`, `Zone Settings`, `DNS`, `SSL and Certificates`, `Bot Management`, `Zone WAF`) and the name `Prowler Security Scanner`. Adjust **Account Resources** and **Zone Resources** to match the accounts and zones you want to scan, then click **Create Token**.
+- [Create Account-Owned API Token](https://dash.cloudflare.com/?to=/:account/api-tokens&permissionGroupKeys=%5B%7B%22key%22%3A%22account_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22dns%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22ssl_and_certificates%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22bot_management%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_waf%22%2C%22type%22%3A%22read%22%7D%5D&name=Prowler%20Security%20Scanner) — creates an [account-owned token](https://developers.cloudflare.com/fundamentals/api/how-to/account-owned-token-template/) instead. Use this for automation or CI/CD where the token should not depend on a specific user account remaining active. Requires the **Super Administrator** or **Administrator** role on the account.
 
 <Note>
 Template URLs only pre-fill the token creation form. Review the permissions, configure resources, and click **Create Token** to complete the process.
@@ -66,6 +69,9 @@ Template URLs only pre-fill the token creation form. Review the permissions, con
      - `Zone` — `Zone` — `Read`
      - `Zone` — `Zone Settings` — `Read`
      - `Zone` — `DNS` — `Read`
+     - `Zone` — `SSL and Certificates` — `Read`
+     - `Zone` — `Bot Management` — `Read`
+     - `Zone` — `Zone WAF` — `Read`
    - **Zone Resources:** Select either:
      - **Include → All zones** (to scan all zones in the account)
      - **Include → Specific zone** (to limit access to specific zones)
diff --git a/docs/user-guide/providers/cloudflare/getting-started-cloudflare.mdx b/docs/user-guide/providers/cloudflare/getting-started-cloudflare.mdx
index 9af3dbe589..efdae635cc 100644
--- a/docs/user-guide/providers/cloudflare/getting-started-cloudflare.mdx
+++ b/docs/user-guide/providers/cloudflare/getting-started-cloudflare.mdx
@@ -11,16 +11,16 @@ Prowler for Cloudflare scans zones for security misconfigurations, including SSL
 Set up authentication for Cloudflare with the [Cloudflare Authentication](/user-guide/providers/cloudflare/authentication) guide before starting either path:
 
 - Create a Cloudflare User API Token (recommended) or locate the Global API Key
-- Grant the required read-only permissions (`Account Settings:Read`, `Zone:Read`, `Zone Settings:Read`, `DNS:Read`)
+- Grant the required read-only permissions (`Account Settings:Read`, `Zone:Read`, `Zone Settings:Read`, `DNS:Read`, `SSL and Certificates:Read`, `Bot Management:Read`, `Zone WAF:Read`)
 - Identify the Cloudflare Account ID to use as the provider identifier
 
 <Note>
 **Quick Setup:** Use these pre-configured links to create a token with the required permissions already selected:
 
-- [Create User API Token](https://dash.cloudflare.com/profile/api-tokens?permissionGroupKeys=%5B%7B%22key%22%3A%22account_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22dns%22%2C%22type%22%3A%22read%22%7D%5D&accountId=%2A&zoneId=all&name=Prowler%20Security%20Scanner) — creates a User API Token (recommended).
-- [Create Account-Owned API Token](https://dash.cloudflare.com/?to=/:account/api-tokens&permissionGroupKeys=%5B%7B%22key%22%3A%22account_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22dns%22%2C%22type%22%3A%22read%22%7D%5D&name=Prowler%20Security%20Scanner) — creates an [account-owned token](https://developers.cloudflare.com/fundamentals/api/how-to/account-owned-token-template/), better suited for automation and CI/CD.
+- [Create User API Token](https://dash.cloudflare.com/profile/api-tokens?permissionGroupKeys=%5B%7B%22key%22%3A%22account_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22dns%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22ssl_and_certificates%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22bot_management%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_waf%22%2C%22type%22%3A%22read%22%7D%5D&accountId=%2A&zoneId=all&name=Prowler%20Security%20Scanner) — creates a User API Token (recommended).
+- [Create Account-Owned API Token](https://dash.cloudflare.com/?to=/:account/api-tokens&permissionGroupKeys=%5B%7B%22key%22%3A%22account_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22dns%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22ssl_and_certificates%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22bot_management%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_waf%22%2C%22type%22%3A%22read%22%7D%5D&name=Prowler%20Security%20Scanner) — creates an [account-owned token](https://developers.cloudflare.com/fundamentals/api/how-to/account-owned-token-template/), better suited for automation and CI/CD.
 
-Both links open the Cloudflare Dashboard with the four required read-only scopes (`Account Settings`, `Zone`, `Zone Settings`, `DNS`) and the name `Prowler Security Scanner` prefilled. See [Cloudflare Authentication](/user-guide/providers/cloudflare/authentication#api-token-recommended) for the equivalent manual steps.
+Both links open the Cloudflare Dashboard with the seven required read-only scopes (`Account Settings`, `Zone`, `Zone Settings`, `DNS`, `SSL and Certificates`, `Bot Management`, `Zone WAF`) and the name `Prowler Security Scanner` prefilled. See [Cloudflare Authentication](/user-guide/providers/cloudflare/authentication#api-token-recommended) for the equivalent manual steps.
 </Note>
 
 <CardGroup cols={2}>
diff --git a/docs/user-guide/tutorials/prowler-app-github-action.mdx b/docs/user-guide/tutorials/prowler-app-github-action.mdx
index faf0993e21..f48e0f806b 100644
--- a/docs/user-guide/tutorials/prowler-app-github-action.mdx
+++ b/docs/user-guide/tutorials/prowler-app-github-action.mdx
@@ -241,7 +241,7 @@ steps:
 
 ### Cloudflare
 
-Create a Cloudflare API Token with `Zone:Read`, `Zone Settings:Read`, and `DNS:Read` permissions ([provider auth docs](/user-guide/providers/cloudflare/authentication)). Then:
+Create a Cloudflare API Token with the `Account Settings:Read`, `Zone:Read`, `Zone Settings:Read`, `DNS:Read`, `SSL and Certificates:Read`, `Bot Management:Read`, and `Zone WAF:Read` permissions ([provider auth docs](/user-guide/providers/cloudflare/authentication)). Then:
 
 ```yaml
 - uses: prowler-cloud/prowler@5.25
diff --git a/ui/changelog.d/cloudflare-token-permissions.fixed.md b/ui/changelog.d/cloudflare-token-permissions.fixed.md
new file mode 100644
index 0000000000..9a862ee88c
--- /dev/null
+++ b/ui/changelog.d/cloudflare-token-permissions.fixed.md
@@ -0,0 +1 @@
+Cloudflare API token links in the provider wizard request the SSL and Certificates, Bot Management and Zone WAF read permissions the scan needs
diff --git a/ui/components/providers/workflow/forms/select-credentials-type/cloudflare/credentials-type/cloudflare-api-token-credentials-form.test.tsx b/ui/components/providers/workflow/forms/select-credentials-type/cloudflare/credentials-type/cloudflare-api-token-credentials-form.test.tsx
index d8278030f4..d51cf47ff1 100644
--- a/ui/components/providers/workflow/forms/select-credentials-type/cloudflare/credentials-type/cloudflare-api-token-credentials-form.test.tsx
+++ b/ui/components/providers/workflow/forms/select-credentials-type/cloudflare/credentials-type/cloudflare-api-token-credentials-form.test.tsx
@@ -21,7 +21,7 @@ const Harness = ({ providerUid }: { providerUid?: string }) => {
 };
 
 const USER_URL =
-  "https://dash.cloudflare.com/profile/api-tokens?permissionGroupKeys=%5B%7B%22key%22%3A%22account_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22dns%22%2C%22type%22%3A%22read%22%7D%5D&accountId=%2A&zoneId=all&name=Prowler%20Security%20Scanner";
+  "https://dash.cloudflare.com/profile/api-tokens?permissionGroupKeys=%5B%7B%22key%22%3A%22account_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22dns%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22ssl_and_certificates%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22bot_management%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_waf%22%2C%22type%22%3A%22read%22%7D%5D&accountId=%2A&zoneId=all&name=Prowler%20Security%20Scanner";
 
 describe("CloudflareApiTokenCredentialsForm", () => {
   it("always renders the User API Token link with the correct href and safe target attributes", () => {
diff --git a/ui/lib/external-urls.test.ts b/ui/lib/external-urls.test.ts
index 86535e7794..84f7ab4d2b 100644
--- a/ui/lib/external-urls.test.ts
+++ b/ui/lib/external-urls.test.ts
@@ -114,20 +114,20 @@ describe("getAWSOrgDeploymentQuickLink", () => {
 });
 
 describe("PRECONFIGURED_CREDENTIAL_URLS", () => {
-  it("keeps the Cloudflare User API Token URL under the profile route with the four required read scopes", () => {
+  it("keeps the Cloudflare User API Token URL under the profile route with the seven required read scopes", () => {
     // Snapshot check: fixes the exact URL so a stray edit to the permission
     // scopes, token name, account/zone selectors or console origin trips a
     // failing test instead of silently shipping a broken pre-configured
     // token flow to users. Matches the "User API Token" link in
     // docs/user-guide/providers/cloudflare/authentication.mdx.
     expect(PRECONFIGURED_CREDENTIAL_URLS.CLOUDFLARE_API_TOKEN_USER).toBe(
-      "https://dash.cloudflare.com/profile/api-tokens?permissionGroupKeys=%5B%7B%22key%22%3A%22account_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22dns%22%2C%22type%22%3A%22read%22%7D%5D&accountId=%2A&zoneId=all&name=Prowler%20Security%20Scanner",
+      "https://dash.cloudflare.com/profile/api-tokens?permissionGroupKeys=%5B%7B%22key%22%3A%22account_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22dns%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22ssl_and_certificates%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22bot_management%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_waf%22%2C%22type%22%3A%22read%22%7D%5D&accountId=%2A&zoneId=all&name=Prowler%20Security%20Scanner",
     );
   });
 
-  it("carries the four Prowler read scopes as decoded permissionGroupKeys on the Cloudflare User API Token URL", () => {
+  it("carries the seven Prowler read scopes as decoded permissionGroupKeys on the Cloudflare User API Token URL", () => {
     // Semantic contract: the URL must request read on account_settings, zone,
-    // zone_settings and dns and reuse the shared Prowler token name.
+    // zone_settings, dns, ssl_and_certificates, bot_management and zone_waf and reuse the shared Prowler token name.
     const parsed = new URL(
       PRECONFIGURED_CREDENTIAL_URLS.CLOUDFLARE_API_TOKEN_USER,
     );
@@ -140,6 +140,9 @@ describe("PRECONFIGURED_CREDENTIAL_URLS", () => {
       { key: "zone", type: "read" },
       { key: "zone_settings", type: "read" },
       { key: "dns", type: "read" },
+      { key: "ssl_and_certificates", type: "read" },
+      { key: "bot_management", type: "read" },
+      { key: "zone_waf", type: "read" },
     ]);
     expect(parsed.searchParams.get("name")).toBe("Prowler Security Scanner");
   });
@@ -214,6 +217,9 @@ describe("buildCloudflareAccountOwnedApiTokenUrl", () => {
       { key: "zone", type: "read" },
       { key: "zone_settings", type: "read" },
       { key: "dns", type: "read" },
+      { key: "ssl_and_certificates", type: "read" },
+      { key: "bot_management", type: "read" },
+      { key: "zone_waf", type: "read" },
     ]);
   });
 
diff --git a/ui/lib/external-urls.ts b/ui/lib/external-urls.ts
index 10c240ba26..e8d264f70b 100644
--- a/ui/lib/external-urls.ts
+++ b/ui/lib/external-urls.ts
@@ -61,12 +61,13 @@ const CF_QUICKCREATE_BASE_URL =
 // `getAWSCredentialsTemplateLinks` below.
 export const PRECONFIGURED_CREDENTIAL_URLS = {
   // Opens the Cloudflare "Create Custom Token" form under the user profile
-  // pre-filled with the four read-only scopes Prowler needs
-  // (`Account Settings`, `Zone`, `Zone Settings`, `DNS`) and the token name.
+  // pre-filled with the seven read-only scopes Prowler needs (`Account
+  // Settings`, `Zone`, `Zone Settings`, `DNS`, `SSL and Certificates`,
+  // `Bot Management`, `Zone WAF`) and the token name.
   // Kept in sync with the "User API Token" URL published in
   // docs/user-guide/providers/cloudflare/authentication.mdx.
   CLOUDFLARE_API_TOKEN_USER:
-    "https://dash.cloudflare.com/profile/api-tokens?permissionGroupKeys=%5B%7B%22key%22%3A%22account_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22dns%22%2C%22type%22%3A%22read%22%7D%5D&accountId=%2A&zoneId=all&name=Prowler%20Security%20Scanner",
+    "https://dash.cloudflare.com/profile/api-tokens?permissionGroupKeys=%5B%7B%22key%22%3A%22account_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_settings%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22dns%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22ssl_and_certificates%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22bot_management%22%2C%22type%22%3A%22read%22%7D%2C%7B%22key%22%3A%22zone_waf%22%2C%22type%22%3A%22read%22%7D%5D&accountId=%2A&zoneId=all&name=Prowler%20Security%20Scanner",
   // Opens the GitHub fine-grained PAT creation form pre-filled with the four
   // read-only permissions Prowler needs to scan a user's own repositories.
   // Kept in sync with the "user repositories" URL published in
@@ -82,7 +83,7 @@ export const PRECONFIGURED_CREDENTIAL_URLS = {
 // avoid ambiguity when the user is signed into multiple accounts. Navigating
 // directly to `/<accountId>/api-tokens/create` does NOT pre-fill the form —
 // Cloudflare only reads the pre-fill params when they arrive via the router.
-// Same four read-only scopes as the user token URL.
+// Same seven read-only scopes as the user token URL.
 export const buildCloudflareAccountOwnedApiTokenUrl = (
   accountId: string,
 ): string => {
@@ -97,6 +98,9 @@ export const buildCloudflareAccountOwnedApiTokenUrl = (
       { key: "zone", type: "read" },
       { key: "zone_settings", type: "read" },
       { key: "dns", type: "read" },
+      { key: "ssl_and_certificates", type: "read" },
+      { key: "bot_management", type: "read" },
+      { key: "zone_waf", type: "read" },
     ]),
   );
   const name = encodeURIComponent("Prowler Security Scanner");

From 03cb59c20ddbd7de490b6916ecc04377d1c91b5e Mon Sep 17 00:00:00 2001
From: Alejandro Bailo <59607668+alejandrobailo@users.noreply.github.com>
Date: Fri, 18 Sep 2026 16:04:58 +0200
Subject: [PATCH 77/77] feat(ui): install Registry checks artifacts on the
 API's verdict (#12843)

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
---
 ui/actions/providers/registry-provider.ts     |   4 +-
 ui/actions/registry/registry.adapter.test.ts  | 113 ++++++++++
 ui/actions/registry/registry.adapter.ts       |  37 ++++
 ui/actions/registry/registry.test.ts          | 116 +++++++++--
 ui/actions/registry/registry.ts               |  35 ++--
 .../providers/radio-group-provider.test.tsx   |   1 +
 .../providers/radio-group-provider.tsx        | 193 +++++++++---------
 .../forms/connect-account-form.test.tsx       | 108 ++++++++++
 .../workflow/forms/connect-account-form.tsx   |  47 +++--
 ...egistry-artifact-card.integration.test.tsx | 104 ++++++++++
 .../registry/registry-artifact-card.tsx       |  38 +++-
 .../registry-explorer.integration.test.tsx    |  44 +++-
 .../registry/registry-explorer.model.test.ts  |  55 +++--
 .../registry/registry-explorer.model.ts       |  19 +-
 ui/components/registry/registry-explorer.tsx  |  13 +-
 .../registry/registry-remove-dialog.tsx       |   9 +-
 ui/lib/registry/artifacts.ts                  |   8 -
 ui/lib/registry/installability.ts             |  23 +++
 ui/lib/registry/provider-options.test.ts      |  26 +++
 ui/lib/registry/provider-options.ts           |  25 ++-
 ui/tests/registry/controlled-registry-api.mts |  10 +
 ui/tests/registry/registry.md                 |   6 +-
 ui/types/registry.ts                          |  17 +-
 23 files changed, 866 insertions(+), 185 deletions(-)
 delete mode 100644 ui/lib/registry/artifacts.ts
 create mode 100644 ui/lib/registry/installability.ts

diff --git a/ui/actions/providers/registry-provider.ts b/ui/actions/providers/registry-provider.ts
index 68fa43ce40..b02405b4ed 100644
--- a/ui/actions/providers/registry-provider.ts
+++ b/ui/actions/providers/registry-provider.ts
@@ -2,6 +2,7 @@
 
 import { getInstalledRegistryProviderOptions } from "@/actions/registry/registry";
 import { ProviderCredentialFields } from "@/lib/provider-credentials/provider-credential-fields";
+import { REGISTRY_PROVIDER_DISCOVERY } from "@/lib/registry/provider-options";
 import { createAddProviderFormSchema } from "@/types/formSchemas";
 import { isKnownProviderType } from "@/types/providers";
 
@@ -19,7 +20,8 @@ export async function addRegistryProvider(formData: FormData) {
   };
   try {
     const discovery = await getInstalledRegistryProviderOptions();
-    if (discovery.status !== "ready") return unavailable;
+    if (discovery.status !== REGISTRY_PROVIDER_DISCOVERY.READY)
+      return unavailable;
     const values = createAddProviderFormSchema(
       discovery.options.map((option) => option.type),
     ).safeParse(Object.fromEntries(formData));
diff --git a/ui/actions/registry/registry.adapter.test.ts b/ui/actions/registry/registry.adapter.test.ts
index dc35be5060..7e96cea3f2 100644
--- a/ui/actions/registry/registry.adapter.test.ts
+++ b/ui/actions/registry/registry.adapter.test.ts
@@ -65,6 +65,33 @@ describe("Registry adapter", () => {
     ]);
   });
 
+  it("reads the built-in providers an installed artifact adds checks to", () => {
+    // Given / When
+    const artifacts = adaptRegistryTenantArtifacts({
+      data: [
+        {
+          type: "registry-artifacts",
+          id: "local-acme-builtin-checks",
+          attributes: {
+            version_spec: "latest",
+            extends_provider_slugs: ["AWS", "aws", " gcp "],
+          },
+        },
+        {
+          type: "registry-artifacts",
+          id: "older-api",
+          attributes: { version_spec: "latest" },
+        },
+      ],
+    });
+
+    // Then
+    expect(artifacts).toMatchObject([
+      { extendsProviderSlugs: ["aws", "gcp"] },
+      { extendsProviderSlugs: [] },
+    ]);
+  });
+
   it.each([undefined, null, "", "   "])(
     "accepts an unknown resolved version %j",
     (resolvedVersion) => {
@@ -387,6 +414,92 @@ describe("Registry adapter", () => {
     });
   });
 
+  it("reads the deployment's install verdict and refuses installs an older API never confirmed", async () => {
+    // Given
+    const document = {
+      data: [
+        {
+          type: "registry-artifacts",
+          id: "aws-checks",
+          attributes: {
+            has_checks: true,
+            is_installable: true,
+            not_installable_reason: null,
+          },
+        },
+        {
+          type: "registry-artifacts",
+          id: "acme-checks",
+          attributes: {
+            has_checks: true,
+            is_installable: false,
+            not_installable_reason: "checks_target_is_not_builtin",
+          },
+        },
+        {
+          type: "registry-artifacts",
+          id: "older-api",
+          attributes: { has_provider: true },
+        },
+      ],
+      meta: { pagination: { page: 1, pages: 1, count: 3 } },
+    };
+
+    // When
+    const result = await collectCompleteRegistryCatalog(async () => document);
+
+    // Then
+    expect(result).toMatchObject({
+      status: "complete",
+      artifacts: [
+        {
+          normalizedName: "acme-checks",
+          isInstallable: false,
+          notInstallableReason: "checks_target_is_not_builtin",
+        },
+        { normalizedName: "aws-checks", isInstallable: true },
+        { normalizedName: "older-api", isInstallable: false },
+      ],
+    });
+    if (result.status !== "complete") throw new Error("Incomplete fixture");
+    expect(result.artifacts[1]).not.toHaveProperty("notInstallableReason");
+  });
+
+  it("keeps an artifact uninstallable when any catalog page refuses it", async () => {
+    // Given
+    const document = {
+      data: [
+        {
+          type: "registry-artifacts",
+          id: "split",
+          attributes: { is_installable: true },
+        },
+        {
+          type: "registry-artifacts",
+          id: "split",
+          attributes: {
+            is_installable: false,
+            not_installable_reason: "artifact_compliance_not_supported",
+          },
+        },
+      ],
+      meta: { pagination: { page: 1, pages: 1, count: 2 } },
+    };
+
+    // When
+    const result = await collectCompleteRegistryCatalog(async () => document);
+
+    // Then
+    expect(result).toMatchObject({
+      artifacts: [
+        {
+          isInstallable: false,
+          notInstallableReason: "artifact_compliance_not_supported",
+        },
+      ],
+    });
+  });
+
   it("defaults omitted built-in status and maps explicit built-ins", async () => {
     // Given
     const document = {
diff --git a/ui/actions/registry/registry.adapter.ts b/ui/actions/registry/registry.adapter.ts
index 46bd08d8e0..4ae9de0c7d 100644
--- a/ui/actions/registry/registry.adapter.ts
+++ b/ui/actions/registry/registry.adapter.ts
@@ -2,12 +2,14 @@ import { z } from "zod";
 
 import { isActiveRegistryCredential } from "@/lib/registry/credential-task";
 import {
+  REGISTRY_ARTIFACT_REMOVAL,
   REGISTRY_CATALOG,
   REGISTRY_CATALOG_INCOMPLETE_REASON,
   REGISTRY_ENDPOINT,
   REGISTRY_FAILURE,
   REGISTRY_MUTATION,
   REGISTRY_SUBMISSION,
+  type RegistryArtifactRemovalConflict,
   type RegistryCatalogArtifact,
   type RegistryCatalogResult,
   type RegistryCredentialStatus,
@@ -23,6 +25,11 @@ const REGISTRY_ERROR_CODE = {
   KEY_REJECTED: "registry_key_rejected",
   UNAVAILABLE: "registry_unavailable",
 } as const;
+// Opposite remedies, so a 409 is never read without its code.
+const REGISTRY_REMOVAL_CONFLICT_CODE = {
+  IN_USE: "registry_artifact_in_use",
+  BUSY: "registry_artifact_busy",
+} as const;
 const REGISTRY_MUTATION_REFUSAL_COPY = {
   no_installable_version: "No available version can be added.",
   registry_artifact_not_found: "This artifact is no longer available.",
@@ -65,6 +72,7 @@ const tenantArtifactsSchema = z.object({
       attributes: z.object({
         version_spec: z.string().trim().min(1),
         resolved_version: z.string().trim().nullish(),
+        extends_provider_slugs: z.array(z.string()).nullish(),
         inserted_at: z.string().optional(),
         updated_at: z.string().optional(),
       }),
@@ -103,6 +111,11 @@ export function adaptRegistryTenantArtifacts(
     normalizedName: id,
     versionSpec: attributes.version_spec,
     resolvedVersion: attributes.resolved_version || undefined,
+    extendsProviderSlugs: unique(
+      (attributes.extends_provider_slugs ?? [])
+        .map((slug) => slug.trim().toLowerCase())
+        .filter(Boolean),
+    ),
     insertedAt: attributes.inserted_at,
     updatedAt: attributes.updated_at,
   }));
@@ -160,6 +173,17 @@ export async function classifyRegistryMutationRefusal(
   return message ? { status: REGISTRY_MUTATION.REFUSED, message } : null;
 }
 
+export async function classifyRegistryRemovalConflict(
+  response: Response,
+): Promise<RegistryArtifactRemovalConflict | null> {
+  const code = await getRegistryErrorCode(response);
+  if (code === REGISTRY_REMOVAL_CONFLICT_CODE.IN_USE)
+    return { status: REGISTRY_ARTIFACT_REMOVAL.IN_USE };
+  if (code === REGISTRY_REMOVAL_CONFLICT_CODE.BUSY)
+    return { status: REGISTRY_ARTIFACT_REMOVAL.BUSY };
+  return null;
+}
+
 export async function classifyRegistryFailure(
   response: Response,
   endpoint: RegistryEndpoint,
@@ -234,6 +258,8 @@ const catalogAttributesSchema = z.object({
   has_provider: z.boolean().optional(),
   has_checks: z.boolean().optional(),
   has_compliance: z.boolean().optional(),
+  is_installable: z.boolean().optional(),
+  not_installable_reason: z.string().nullish(),
   check_count: safeInteger.nullish(),
   compliance_count: safeInteger.nullish(),
   version_count: safeInteger.optional(),
@@ -323,6 +349,10 @@ function adaptCatalogArtifact(
   const parsed = catalogResourceSchema.safeParse(resource);
   if (!parsed.success) return null;
   const { attributes: a, id } = parsed.data;
+  const notInstallableReason =
+    a.is_installable === true
+      ? undefined
+      : text(a.not_installable_reason ?? undefined);
   return {
     normalizedName: id,
     name: text(a.name),
@@ -342,6 +372,9 @@ function adaptCatalogArtifact(
     hasProvider: a.has_provider ?? false,
     hasChecks: a.has_checks ?? false,
     hasCompliance: a.has_compliance ?? false,
+    // An older API sends no verdict; never offer an install it did not confirm.
+    isInstallable: a.is_installable ?? false,
+    ...(notInstallableReason ? { notInstallableReason } : {}),
     checkCount: a.check_count ?? undefined,
     complianceCount: a.compliance_count ?? undefined,
     versionCount: a.version_count ?? 0,
@@ -380,6 +413,10 @@ function mergeArtifacts(
     hasProvider: left.hasProvider || right.hasProvider,
     hasChecks: left.hasChecks || right.hasChecks,
     hasCompliance: left.hasCompliance || right.hasCompliance,
+    // Any page refusing the install wins, and its reason travels with it.
+    isInstallable: left.isInstallable && right.isInstallable,
+    notInstallableReason:
+      left.notInstallableReason ?? right.notInstallableReason,
     checkCount: mergeCount(left.checkCount, right.checkCount),
     complianceCount: mergeCount(left.complianceCount, right.complianceCount),
     versionCount: Math.max(left.versionCount, right.versionCount),
diff --git a/ui/actions/registry/registry.test.ts b/ui/actions/registry/registry.test.ts
index f81ee78d23..7ae458cc3f 100644
--- a/ui/actions/registry/registry.test.ts
+++ b/ui/actions/registry/registry.test.ts
@@ -197,15 +197,20 @@ describe("installed Registry provider discovery", () => {
     expect(evaluateAccessMock).not.toHaveBeenCalled();
   });
 
-  it.each(["ineligible", "unknown"])(
-    "denies installed-provider discovery when provider access is %s",
-    async (status) => {
+  it.each([
+    ["ineligible", "access_denied"],
+    ["unknown", "unknown"],
+  ] as const)(
+    "maps installed-provider access %s to %s",
+    async (status, expectedStatus) => {
       // Given
       evaluateProviderAccessMock.mockResolvedValue({ status });
-      // When / Then
-      expect(await getInstalledRegistryProviderOptions()).toEqual({
-        status: "access_denied",
-      });
+
+      // When
+      const result = await getInstalledRegistryProviderOptions();
+
+      // Then
+      expect(result).toEqual({ status: expectedStatus });
       expect(fetchMock).not.toHaveBeenCalled();
     },
   );
@@ -297,7 +302,11 @@ describe("Registry guarded reads", () => {
                 {
                   type: "registry-artifacts",
                   id: "external-package",
-                  attributes: { has_provider: true, is_builtin: false },
+                  attributes: {
+                    has_provider: true,
+                    is_builtin: false,
+                    is_installable: true,
+                  },
                 },
               ],
               meta: { pagination: { page: 1, pages: 1, count: 1 } },
@@ -388,6 +397,7 @@ describe("Registry guarded reads", () => {
           {
             normalizedName: "prowler-aws",
             versionSpec: "latest",
+            extendsProviderSlugs: [],
             insertedAt: "2026-03-20T12:00:00Z",
           },
         ],
@@ -433,6 +443,7 @@ describe("Registry guarded reads", () => {
             {
               normalizedName: "prowler-aws",
               versionSpec: "latest",
+              extendsProviderSlugs: [],
               insertedAt: "2026-03-20T12:00:00Z",
             },
           ],
@@ -477,6 +488,7 @@ describe("Registry guarded reads", () => {
         {
           normalizedName: "prowler-aws",
           versionSpec: "latest",
+          extendsProviderSlugs: [],
           insertedAt: "2026-03-20T12:00:00Z",
         },
       ],
@@ -673,6 +685,7 @@ describe("Registry guarded reads", () => {
         {
           normalizedName: "prowler-aws",
           versionSpec: "latest",
+          extendsProviderSlugs: [],
           insertedAt: "2026-03-20T12:00:00Z",
         },
       ],
@@ -786,6 +799,7 @@ describe("Registry artifact mutations", () => {
             attributes: {
               has_provider: true,
               is_builtin: false,
+              is_installable: true,
               providers: ["acme"],
             },
           },
@@ -801,11 +815,29 @@ describe("Registry artifact mutations", () => {
   });
 
   it.each([
-    { has_provider: true, is_builtin: true },
-    { has_provider: false, is_builtin: false },
+    [
+      {
+        has_checks: true,
+        is_installable: false,
+        not_installable_reason: "checks_target_is_not_builtin",
+      },
+      "Its checks are written for a provider this deployment does not ship.",
+    ],
+    [
+      {
+        has_checks: true,
+        is_installable: false,
+        not_installable_reason: "a_code_from_a_newer_api",
+      },
+      "This artifact cannot be installed in this deployment.",
+    ],
+    [
+      { has_provider: true, is_builtin: false },
+      "This artifact cannot be installed in this deployment.",
+    ],
   ])(
-    "refuses ineligible catalog entries before POST: %j",
-    async (attributes) => {
+    "refuses what the API says cannot be installed before POST: %j",
+    async (attributes, message) => {
       // Given
       installCatalogMock.mockImplementation(() =>
         jsonResponse({
@@ -824,11 +856,44 @@ describe("Registry artifact mutations", () => {
         normalizedName: "later-guard",
       });
       // Then
-      expect(result).toMatchObject({ status: "refused" });
+      expect(result).toEqual({ status: "refused", message });
       expect(fetchMock).not.toHaveBeenCalled();
     },
   );
 
+  it("submits a checks artifact that defines no provider once the API calls it installable", async () => {
+    // Given
+    installCatalogMock.mockImplementation(() =>
+      jsonResponse({
+        data: [
+          {
+            type: "registry-available-artifacts",
+            id: "later-guard",
+            attributes: {
+              has_provider: false,
+              has_checks: true,
+              is_installable: true,
+              providers: ["aws"],
+            },
+          },
+        ],
+        meta: { pagination: { page: 1, pages: 1, count: 1 } },
+      }),
+    );
+    fetchMock.mockResolvedValueOnce(
+      new Response(JSON.stringify({ data: { type: "tasks", id: "task-1" } }), {
+        status: 202,
+        headers: { "Content-Location": "/api/v1/tasks/task-1" },
+      }),
+    );
+
+    // When
+    const result = await addRegistryArtifact({ normalizedName: "later-guard" });
+
+    // Then
+    expect(result).toEqual({ status: "submitted", taskId: "task-1" });
+  });
+
   it("returns an accepted Add task without reading My artifacts", async () => {
     // Given
     fetchMock.mockResolvedValueOnce(
@@ -988,7 +1053,27 @@ describe("Registry artifact mutations", () => {
     expect(fetchMock).toHaveBeenCalledTimes(1);
   });
 
-  it("reports an in-use artifact when Remove returns 409 without refreshing membership", async () => {
+  it.each([
+    ["registry_artifact_in_use", "in_use"],
+    ["registry_artifact_busy", "busy"],
+  ])(
+    "tells a Remove 409 %s apart as %s without refreshing membership",
+    async (code, expected) => {
+      // Given
+      fetchMock.mockResolvedValueOnce(
+        jsonResponse({ errors: [{ code }] }, 409),
+      );
+
+      // When
+      const result = await removeRegistryArtifact("aws-guard");
+
+      // Then
+      expect(result).toEqual({ status: expected });
+      expect(fetchMock).toHaveBeenCalledTimes(1);
+    },
+  );
+
+  it("never asks someone to delete providers over a Remove 409 it cannot identify", async () => {
     // Given
     fetchMock.mockResolvedValueOnce(new Response(null, { status: 409 }));
 
@@ -996,8 +1081,7 @@ describe("Registry artifact mutations", () => {
     const result = await removeRegistryArtifact("aws-guard");
 
     // Then
-    expect(result).toEqual({ status: "in_use" });
-    expect(fetchMock).toHaveBeenCalledTimes(1);
+    expect(result).toEqual({ status: "error" });
   });
 
   it.each([
diff --git a/ui/actions/registry/registry.ts b/ui/actions/registry/registry.ts
index a67c83e57f..976373a965 100644
--- a/ui/actions/registry/registry.ts
+++ b/ui/actions/registry/registry.ts
@@ -9,21 +9,22 @@ import {
   evaluateRegistryAccess,
   evaluateRegistryProviderAccess,
 } from "@/lib/registry/access.server";
-import { isRegistryArtifactInstallable } from "@/lib/registry/artifacts";
 import { isActiveRegistryCredential } from "@/lib/registry/credential-task";
+import { getRegistryNotInstallableMessage } from "@/lib/registry/installability";
 import {
   buildRegistryProviderOptions,
-  type RegistryProviderOption,
+  REGISTRY_PROVIDER_DISCOVERY,
+  type RegistryProviderDiscoveryResult,
 } from "@/lib/registry/provider-options";
 import {
   REGISTRY_ARTIFACT_ACTION,
-  REGISTRY_ARTIFACT_REMOVAL,
   REGISTRY_BOOTSTRAP_STATE,
   REGISTRY_CATALOG,
   REGISTRY_CREDENTIAL_ACTION,
   REGISTRY_CREDENTIAL_READ,
   REGISTRY_ENDPOINT,
   REGISTRY_FAILURE,
+  REGISTRY_MUTATION,
   REGISTRY_SUBMISSION,
   type RegistryAddArtifactInput,
   type RegistryArtifactRemovalResult,
@@ -43,6 +44,7 @@ import {
   adaptRegistryTenantArtifacts,
   classifyRegistryFailure,
   classifyRegistryMutationRefusal,
+  classifyRegistryRemovalConflict,
   collectCompleteRegistryCatalog,
   isRegistryCollection,
   parseRegistryArtifactSubmission,
@@ -187,14 +189,13 @@ async function readRegistryProviders(
     : { status: REGISTRY_FAILURE.ERROR };
 }
 
-export async function getInstalledRegistryProviderOptions(): Promise<
-  | { status: "ready"; options: RegistryProviderOption[] }
-  | { status: "access_denied" | "error" }
-> {
+export async function getInstalledRegistryProviderOptions(): Promise<RegistryProviderDiscoveryResult> {
   const access = (await auth())?.accessToken;
   const permission = await evaluateRegistryProviderAccess(access);
+  if (permission.status === REGISTRY_ACCESS.UNKNOWN)
+    return { status: REGISTRY_PROVIDER_DISCOVERY.UNKNOWN };
   if (!access || permission.status !== REGISTRY_ACCESS.ELIGIBLE)
-    return { status: "access_denied" };
+    return { status: REGISTRY_PROVIDER_DISCOVERY.ACCESS_DENIED };
   const [catalog, installed, providers] = await Promise.all([
     readCompleteRegistryCatalog(access, null),
     readRegistryTenantArtifacts(access),
@@ -205,15 +206,15 @@ export async function getInstalledRegistryProviderOptions(): Promise<
       (status) => status === REGISTRY_FAILURE.ACCESS_DENIED,
     )
   )
-    return { status: "access_denied" };
+    return { status: REGISTRY_PROVIDER_DISCOVERY.ACCESS_DENIED };
   if (
     catalog.status !== REGISTRY_CATALOG.COMPLETE ||
     installed.status !== "ready" ||
     providers.status !== "ready"
   )
-    return { status: "error" };
+    return { status: REGISTRY_PROVIDER_DISCOVERY.ERROR };
   return {
-    status: "ready",
+    status: REGISTRY_PROVIDER_DISCOVERY.READY,
     options: buildRegistryProviderOptions(
       catalog.artifacts,
       installed.tenantArtifacts,
@@ -387,10 +388,10 @@ export async function addRegistryArtifact({
   const artifact = catalog.artifacts.find(
     (entry) => entry.normalizedName === normalizedName,
   );
-  if (!artifact || !isRegistryArtifactInstallable(artifact))
+  if (!artifact?.isInstallable)
     return {
-      status: "refused",
-      message: "Only external provider artifacts can be added.",
+      status: REGISTRY_MUTATION.REFUSED,
+      message: getRegistryNotInstallableMessage(artifact?.notInstallableReason),
     };
   const selectedVersion = versionSpec?.trim() || "latest";
 
@@ -480,7 +481,11 @@ export async function removeRegistryArtifact(
     return { status: REGISTRY_FAILURE.ACCESS_DENIED };
   }
   if (response.status === 409) {
-    return { status: REGISTRY_ARTIFACT_REMOVAL.IN_USE };
+    return (
+      (await classifyRegistryRemovalConflict(response)) ?? {
+        status: REGISTRY_FAILURE.ERROR,
+      }
+    );
   }
   if (!response.ok) return { status: REGISTRY_FAILURE.ERROR };
 
diff --git a/ui/components/providers/radio-group-provider.test.tsx b/ui/components/providers/radio-group-provider.test.tsx
index ae9e64b5a0..b8b10e2444 100644
--- a/ui/components/providers/radio-group-provider.test.tsx
+++ b/ui/components/providers/radio-group-provider.test.tsx
@@ -141,6 +141,7 @@ describe("provider selector", () => {
 
     // Then: only the built-in providers are offered, without a Registry tab.
     expect(screen.queryByRole("tablist")).not.toBeInTheDocument();
+    expect(screen.queryByRole("tabpanel")).not.toBeInTheDocument();
     expect(
       screen.queryByRole("tab", { name: "Registry" }),
     ).not.toBeInTheDocument();
diff --git a/ui/components/providers/radio-group-provider.tsx b/ui/components/providers/radio-group-provider.tsx
index 2d589b91bf..f1d175da6e 100644
--- a/ui/components/providers/radio-group-provider.tsx
+++ b/ui/components/providers/radio-group-provider.tsx
@@ -88,18 +88,8 @@ export const RadioGroupProvider: FC<RadioGroupProviderProps> = ({
     <Controller
       name="providerType"
       control={control}
-      render={({ field }) => (
-        <Tabs
-          className="flex flex-col px-4"
-          value={activeTab}
-          onValueChange={(value) => setSelectedTab(value as ProviderTab)}
-        >
-          {registryAvailable && (
-            <TabsList aria-label="Provider source">
-              <TabsTrigger value={PROVIDER_TAB.ALL}>All providers</TabsTrigger>
-              <TabsTrigger value={PROVIDER_TAB.REGISTRY}>Registry</TabsTrigger>
-            </TabsList>
-          )}
+      render={({ field }) => {
+        const searchInput = (
           <div className="relative z-10 shrink-0 py-4">
             <SearchInput
               aria-label="Search providers"
@@ -109,90 +99,111 @@ export const RadioGroupProvider: FC<RadioGroupProviderProps> = ({
               onClear={() => setSearchTerm("")}
             />
           </div>
+        );
+        const providerList = (
+          <div
+            role="listbox"
+            aria-label="Select a provider"
+            className="flex flex-col gap-3"
+          >
+            {filteredProviders.length > 0 ? (
+              filteredProviders.map((provider) => {
+                const isSelected = field.value === provider.value;
 
-          <TabsContent value={activeTab}>
-            <div
-              role="listbox"
-              aria-label="Select a provider"
-              className="flex flex-col gap-3"
-            >
-              {filteredProviders.length > 0 ? (
-                filteredProviders.map((provider) => {
-                  const isSelected = field.value === provider.value;
-
-                  return (
-                    <button
-                      key={provider.value}
-                      type="button"
-                      role="option"
-                      aria-label={`${provider.label}${provider.registry ? " Registry" : ""}`}
-                      aria-selected={isSelected}
-                      onClick={() => field.onChange(provider.value)}
-                      className={cn(
-                        "flex min-h-[72px] w-full items-center gap-4 rounded-lg border px-3 py-2.5 text-left transition-colors",
-                        "focus-visible:border-button-primary focus-visible:outline-none",
-                        isSelected
-                          ? "border-button-primary bg-bg-neutral-tertiary"
-                          : "border-border-neutral-primary bg-bg-neutral-tertiary hover:border-button-primary",
-                        isInvalid && "border-bg-fail",
+                return (
+                  <button
+                    key={provider.value}
+                    type="button"
+                    role="option"
+                    aria-label={`${provider.label}${provider.registry ? " Registry" : ""}`}
+                    aria-selected={isSelected}
+                    onClick={() => field.onChange(provider.value)}
+                    className={cn(
+                      "flex min-h-[72px] w-full items-center gap-4 rounded-lg border px-3 py-2.5 text-left transition-colors",
+                      "focus-visible:border-button-primary focus-visible:outline-none",
+                      isSelected
+                        ? "border-button-primary bg-bg-neutral-tertiary"
+                        : "border-border-neutral-primary bg-bg-neutral-tertiary hover:border-button-primary",
+                      isInvalid && "border-bg-fail",
+                    )}
+                  >
+                    <div className="border-border-neutral-primary bg-bg-input-primary flex size-[18px] shrink-0 items-center justify-center rounded-full border shadow-xs">
+                      {isSelected && (
+                        <div className="bg-button-primary size-2.5 rounded-full" />
                       )}
-                    >
-                      <div className="border-border-neutral-primary bg-bg-input-primary flex size-[18px] shrink-0 items-center justify-center rounded-full border shadow-xs">
-                        {isSelected && (
-                          <div className="bg-button-primary size-2.5 rounded-full" />
-                        )}
-                      </div>
+                    </div>
 
-                      <div className="flex min-w-0 flex-1 items-center gap-1.5">
-                        {provider.registry ? (
-                          <Avatar>
-                            <AvatarImage
-                              src={
-                                provider.logoUrl?.startsWith("https://")
-                                  ? provider.logoUrl
-                                  : undefined
-                              }
-                              alt=""
-                            />
-                            <AvatarFallback>
-                              <ProviderTypeIcon
-                                type={provider.value}
-                                size={26}
-                              />
-                            </AvatarFallback>
-                          </Avatar>
-                        ) : (
-                          <ProviderTypeIcon type={provider.value} size={26} />
-                        )}
-                        <span className="text-text-neutral-primary text-sm leading-6">
-                          {provider.label}
-                        </span>
-                        {provider.registry && (
-                          <Badge variant="tag">Registry</Badge>
-                        )}
-                      </div>
-                    </button>
-                  );
-                })
-              ) : (
-                <p className="text-text-neutral-tertiary py-4 text-sm">
-                  {lowerSearch ? (
-                    <>No providers found matching &quot;{searchTerm}&quot;</>
-                  ) : (
-                    "No Registry providers available."
-                  )}
-                </p>
-              )}
+                    <div className="flex min-w-0 flex-1 items-center gap-1.5">
+                      {provider.registry ? (
+                        <Avatar>
+                          <AvatarImage
+                            src={
+                              provider.logoUrl?.startsWith("https://")
+                                ? provider.logoUrl
+                                : undefined
+                            }
+                            alt=""
+                          />
+                          <AvatarFallback>
+                            <ProviderTypeIcon type={provider.value} size={26} />
+                          </AvatarFallback>
+                        </Avatar>
+                      ) : (
+                        <ProviderTypeIcon type={provider.value} size={26} />
+                      )}
+                      <span className="text-text-neutral-primary text-sm leading-6">
+                        {provider.label}
+                      </span>
+                      {provider.registry && (
+                        <Badge variant="tag">Registry</Badge>
+                      )}
+                    </div>
+                  </button>
+                );
+              })
+            ) : (
+              <p className="text-text-neutral-tertiary py-4 text-sm">
+                {lowerSearch ? (
+                  <>No providers found matching &quot;{searchTerm}&quot;</>
+                ) : (
+                  "No Registry providers available."
+                )}
+              </p>
+            )}
+          </div>
+        );
+        const validationMessage = errorMessage && (
+          <FormMessage className="text-text-error-primary">
+            {errorMessage}
+          </FormMessage>
+        );
+
+        if (!registryAvailable) {
+          return (
+            <div className="flex flex-col px-4">
+              {searchInput}
+              <div className="mt-2">{providerList}</div>
+              {validationMessage}
             </div>
-          </TabsContent>
+          );
+        }
 
-          {errorMessage && (
-            <FormMessage className="text-text-error-primary">
-              {errorMessage}
-            </FormMessage>
-          )}
-        </Tabs>
-      )}
+        return (
+          <Tabs
+            className="flex flex-col px-4"
+            value={activeTab}
+            onValueChange={(value) => setSelectedTab(value as ProviderTab)}
+          >
+            <TabsList aria-label="Provider source">
+              <TabsTrigger value={PROVIDER_TAB.ALL}>All providers</TabsTrigger>
+              <TabsTrigger value={PROVIDER_TAB.REGISTRY}>Registry</TabsTrigger>
+            </TabsList>
+            {searchInput}
+            <TabsContent value={activeTab}>{providerList}</TabsContent>
+            {validationMessage}
+          </Tabs>
+        );
+      }}
     />
   );
 };
diff --git a/ui/components/providers/workflow/forms/connect-account-form.test.tsx b/ui/components/providers/workflow/forms/connect-account-form.test.tsx
index 471034df33..2a906d431c 100644
--- a/ui/components/providers/workflow/forms/connect-account-form.test.tsx
+++ b/ui/components/providers/workflow/forms/connect-account-form.test.tsx
@@ -129,4 +129,112 @@ describe("Registry provider source tabs", () => {
       "true",
     );
   });
+
+  it("keeps Registry hidden and offers a retry when access is unknown", async () => {
+    // Given
+    const user = userEvent.setup();
+    getInstalledRegistryProviderOptions
+      .mockResolvedValueOnce({ status: "unknown" })
+      .mockResolvedValueOnce({ status: "ready", options: [] });
+
+    // When
+    render(<ConnectAccountForm onSuccess={vi.fn()} />);
+
+    // Then
+    expect(
+      await screen.findByText("Registry providers could not be loaded"),
+    ).toBeVisible();
+    expect(
+      screen.queryByRole("tab", { name: "Registry" }),
+    ).not.toBeInTheDocument();
+    expect(
+      screen.getByRole("button", { name: "Retry Registry providers" }),
+    ).toBeVisible();
+
+    // When
+    await user.click(
+      screen.getByRole("button", { name: "Retry Registry providers" }),
+    );
+
+    // Then
+    expect(await screen.findByRole("tab", { name: "Registry" })).toBeVisible();
+    expect(
+      screen.queryByText("Registry providers could not be loaded"),
+    ).not.toBeInTheDocument();
+    expect(getInstalledRegistryProviderOptions).toHaveBeenCalledTimes(2);
+  });
+
+  it("shows a retry in flight, ignores repeat clicks and keeps focus on the button", async () => {
+    // Given
+    const user = userEvent.setup();
+    let settleRetry: (result: { status: "error" }) => void = () => {};
+    getInstalledRegistryProviderOptions
+      .mockResolvedValueOnce({ status: "error" })
+      .mockReturnValueOnce(
+        new Promise((resolve) => {
+          settleRetry = resolve;
+        }),
+      );
+    render(<ConnectAccountForm onSuccess={vi.fn()} />);
+    const retry = await screen.findByRole("button", {
+      name: "Retry Registry providers",
+    });
+
+    // When
+    await user.click(retry);
+    await user.click(retry);
+
+    // Then: the warning stays mounted, so the pressed button is never lost.
+    expect(retry).toHaveTextContent("Retrying…");
+    expect(retry).toHaveAttribute("aria-disabled", "true");
+    expect(retry).toHaveFocus();
+    expect(getInstalledRegistryProviderOptions).toHaveBeenCalledTimes(2);
+
+    // When: the retry fails again
+    settleRetry({ status: "error" });
+
+    // Then
+    await waitFor(() =>
+      expect(retry).toHaveTextContent("Retry Registry providers"),
+    );
+    expect(retry).not.toHaveAttribute("aria-disabled", "true");
+  });
+
+  it("keeps a retry in flight when an artifact change reloads discovery meanwhile", async () => {
+    // Given
+    const user = userEvent.setup();
+    let settleRetry: (result: { status: "error" }) => void = () => {};
+    getInstalledRegistryProviderOptions
+      .mockResolvedValueOnce({ status: "error" })
+      .mockReturnValueOnce(
+        new Promise((resolve) => {
+          settleRetry = resolve;
+        }),
+      )
+      .mockResolvedValueOnce({ status: "error" });
+    render(<ConnectAccountForm onSuccess={vi.fn()} />);
+    const retry = await screen.findByRole("button", {
+      name: "Retry Registry providers",
+    });
+    await user.click(retry);
+
+    // When: an unrelated reload settles before the retry does
+    window.dispatchEvent(new CustomEvent("registry-artifacts-changed"));
+    await waitFor(() =>
+      expect(getInstalledRegistryProviderOptions).toHaveBeenCalledTimes(3),
+    );
+    await user.click(retry);
+
+    // Then: only the retry itself may end the retry
+    expect(retry).toHaveTextContent("Retrying…");
+    expect(getInstalledRegistryProviderOptions).toHaveBeenCalledTimes(3);
+
+    // When
+    settleRetry({ status: "error" });
+
+    // Then
+    await waitFor(() =>
+      expect(retry).toHaveTextContent("Retry Registry providers"),
+    );
+  });
 });
diff --git a/ui/components/providers/workflow/forms/connect-account-form.tsx b/ui/components/providers/workflow/forms/connect-account-form.tsx
index aeb9d413ce..ddc880e3e7 100644
--- a/ui/components/providers/workflow/forms/connect-account-form.tsx
+++ b/ui/components/providers/workflow/forms/connect-account-form.tsx
@@ -18,7 +18,10 @@ import { Button, useToast } from "@/components/shadcn";
 import { Alert, AlertDescription, AlertTitle } from "@/components/shadcn/alert";
 import { Form } from "@/components/shadcn/form";
 import { ProviderCredentialFields } from "@/lib/provider-credentials/provider-credential-fields";
-import type { RegistryProviderOption } from "@/lib/registry/provider-options";
+import {
+  REGISTRY_PROVIDER_DISCOVERY,
+  type RegistryProviderOption,
+} from "@/lib/registry/provider-options";
 import {
   createAddProviderFormSchema,
   AddProviderFormValues,
@@ -218,13 +221,14 @@ export const ConnectAccountForm = ({
   const [registryOptions, setRegistryOptions] = useState<
     RegistryProviderOption[]
   >([]);
-  // Only Cloud and Private Cloud deployments with the Registry flag on answer
-  // discovery with "ready" or "error"; Local (OSS) and flag-off deployments
-  // are denied and never show the Registry tab.
+  // Only confirmed Cloud and Private Cloud access enables Registry source tabs.
+  // Unknown access stays hidden but remains retryable through the warning.
   const [registryAvailable, setRegistryAvailable] = useState(false);
   const [registryError, setRegistryError] = useState(false);
   const [providerError, setProviderError] = useState<string | null>(null);
   const [discoveryAttempt, setDiscoveryAttempt] = useState(0);
+  // Local state needed: a request in flight cannot be derived from the attempt count.
+  const [isRetryingDiscovery, setIsRetryingDiscovery] = useState(false);
   const submitting = useRef(false);
   const createdAccount = useRef<ConnectAccountSuccessData | null>(null);
 
@@ -234,9 +238,19 @@ export const ConnectAccountForm = ({
       try {
         const result = await getInstalledRegistryProviderOptions();
         if (!active) return;
-        setRegistryOptions(result.status === "ready" ? result.options : []);
-        setRegistryAvailable(result.status !== "access_denied");
-        setRegistryError(result.status === "error");
+        setRegistryOptions(
+          result.status === REGISTRY_PROVIDER_DISCOVERY.READY
+            ? result.options
+            : [],
+        );
+        setRegistryAvailable(
+          result.status === REGISTRY_PROVIDER_DISCOVERY.READY ||
+            result.status === REGISTRY_PROVIDER_DISCOVERY.ERROR,
+        );
+        setRegistryError(
+          result.status === REGISTRY_PROVIDER_DISCOVERY.ERROR ||
+            result.status === REGISTRY_PROVIDER_DISCOVERY.UNKNOWN,
+        );
       } catch {
         if (active) {
           setRegistryOptions([]);
@@ -245,7 +259,10 @@ export const ConnectAccountForm = ({
         }
       }
     };
-    void load();
+    // Only this effect's own load ends a retry; event reloads must not.
+    void load().then(() => {
+      if (active) setIsRetryingDiscovery(false);
+    });
     window.addEventListener("registry-artifacts-changed", load);
     return () => {
       active = false;
@@ -460,14 +477,20 @@ export const ConnectAccountForm = ({
                 <AlertDescription>
                   Built-in providers are available. Check the Registry
                   connection and try again.
+                  {/* aria-disabled, not disabled: the pressed button keeps focus. */}
                   <Button
                     type="button"
                     variant="outline"
-                    onClick={() =>
-                      setDiscoveryAttempt((attempt) => attempt + 1)
-                    }
+                    aria-disabled={isRetryingDiscovery}
+                    onClick={() => {
+                      if (isRetryingDiscovery) return;
+                      setIsRetryingDiscovery(true);
+                      setDiscoveryAttempt((attempt) => attempt + 1);
+                    }}
                   >
-                    Retry Registry providers
+                    {isRetryingDiscovery
+                      ? "Retrying…"
+                      : "Retry Registry providers"}
                   </Button>
                 </AlertDescription>
               </Alert>
diff --git a/ui/components/registry/registry-artifact-card.integration.test.tsx b/ui/components/registry/registry-artifact-card.integration.test.tsx
index 3257f55dce..f7c0c48eba 100644
--- a/ui/components/registry/registry-artifact-card.integration.test.tsx
+++ b/ui/components/registry/registry-artifact-card.integration.test.tsx
@@ -28,9 +28,111 @@ const artifact: RegistryMarketplaceArtifact = {
   versionCount: 1,
   totalDownloads: 0,
   owners: [{ name: "Prowler", type: "organization" }],
+  isInstallable: false,
+  notInstallableReason: "artifact_ships_with_prowler",
   isAdded: false,
   updateAvailable: false,
+  extendsProviderSlugs: [],
 };
+const checksArtifact: RegistryMarketplaceArtifact = {
+  ...artifact,
+  normalizedName: "acme-aws-checks",
+  name: "Acme AWS checks",
+  isBuiltin: false,
+  hasProvider: false,
+  hasCompliance: false,
+  isInstallable: true,
+  notInstallableReason: undefined,
+};
+
+describe("Registry card install verdict", () => {
+  it("offers Add for checks the API calls installable, though they define no provider", async () => {
+    // Given
+    const onAdd = vi.fn();
+    const screen = await render(
+      <RegistryArtifactCard
+        artifact={checksArtifact}
+        onAdd={onAdd}
+        onRemove={vi.fn()}
+      />,
+    );
+
+    // When
+    await screen.getByRole("button", { name: "Add Acme AWS checks" }).click();
+
+    // Then
+    expect(onAdd).toHaveBeenCalledOnce();
+  });
+
+  it("says why an artifact cannot be installed instead of leaving a dead control", async () => {
+    // Given / When
+    const screen = await render(
+      <RegistryArtifactCard
+        artifact={{
+          ...checksArtifact,
+          isInstallable: false,
+          notInstallableReason: "checks_target_is_not_builtin",
+        }}
+        onAdd={vi.fn()}
+        onRemove={vi.fn()}
+      />,
+    );
+
+    // Then
+    await expect
+      .element(
+        screen.getByText(
+          "Its checks are written for a provider this deployment does not ship.",
+        ),
+      )
+      .toBeVisible();
+    await expect
+      .element(screen.getByRole("button", { name: /Add/ }))
+      .not.toBeInTheDocument();
+  });
+
+  it("names the built-in providers whose scans an installed checks artifact changed", async () => {
+    // Given / When
+    const screen = await render(
+      <RegistryArtifactCard
+        artifact={{
+          ...checksArtifact,
+          isAdded: true,
+          resolvedVersion: "0.2.2",
+          extendsProviderSlugs: ["aws", "gcp"],
+        }}
+        onAdd={vi.fn()}
+        onRemove={vi.fn()}
+      />,
+    );
+
+    // Then
+    await expect
+      .element(
+        screen.getByText("Adds checks to your AWS and Google Cloud scans."),
+      )
+      .toBeVisible();
+  });
+});
+
+describe("Registry tenant card", () => {
+  it("still names the extended providers when the catalog no longer lists the artifact", async () => {
+    // Given / When
+    const screen = await render(
+      <RegistryTenantArtifactCard
+        extendsProviderSlugs={["aws"]}
+        normalizedName="retired-aws-checks"
+        onRemove={vi.fn()}
+        resolvedVersion="0.2.2"
+      />,
+    );
+
+    // Then
+    await expect
+      .element(screen.getByText("Adds checks to your AWS scans."))
+      .toBeVisible();
+  });
+});
 
 describe("Registry card metadata layout", () => {
   it("keeps Added when the installed version is unknown", async () => {
@@ -61,6 +163,7 @@ describe("Registry card metadata layout", () => {
         artifact={{
           ...artifact,
           isBuiltin: false,
+          isInstallable: true,
           isAdded: true,
           resolvedVersion: "1.0.0",
           updateAvailable: true,
@@ -167,6 +270,7 @@ describe("Registry card metadata layout", () => {
                   complianceCount: 123456789,
                   totalDownloads: 9876543210,
                   isBuiltin: false,
+                  isInstallable: true,
                   owners: [],
                 }}
                 onAdd={onAdd}
diff --git a/ui/components/registry/registry-artifact-card.tsx b/ui/components/registry/registry-artifact-card.tsx
index 9bc2ed5283..4e3b256d0f 100644
--- a/ui/components/registry/registry-artifact-card.tsx
+++ b/ui/components/registry/registry-artifact-card.tsx
@@ -26,7 +26,7 @@ import {
   TooltipContent,
   TooltipTrigger,
 } from "@/components/shadcn/tooltip";
-import { isRegistryArtifactInstallable } from "@/lib/registry/artifacts";
+import { getRegistryNotInstallableMessage } from "@/lib/registry/installability";
 import { cn } from "@/lib/utils";
 import { getProviderDisplayName, isKnownProviderType } from "@/types/providers";
 import type { RegistryArtifactOwner } from "@/types/registry";
@@ -58,6 +58,11 @@ function capabilitySummary(artifact: RegistryMarketplaceArtifact) {
  */
 const MAX_PROVIDER_LOGOS = 4;
 
+const PROVIDER_LIST_FORMAT = new Intl.ListFormat("en", {
+  style: "long",
+  type: "conjunction",
+});
+
 interface RegistryProviderClusterProps {
   providers: string[];
 }
@@ -116,6 +121,22 @@ function RegistryProviderCluster({ providers }: RegistryProviderClusterProps) {
   );
 }
 
+interface RegistryExtendedProvidersProps {
+  slugs: string[];
+}
+
+/** The only thing explaining an install that shows no provider type. */
+function RegistryExtendedProviders({ slugs }: RegistryExtendedProvidersProps) {
+  if (slugs.length === 0) return null;
+
+  return (
+    <p className="text-text-neutral-secondary text-xs">
+      Adds checks to your{" "}
+      {PROVIDER_LIST_FORMAT.format(slugs.map(getProviderDisplayName))} scans.
+    </p>
+  );
+}
+
 interface RegistryOwnerRowProps {
   isOfficial: boolean;
   isVerified: boolean;
@@ -299,6 +320,14 @@ export function RegistryArtifactCard({
           }
           downloads={artifact.isBuiltin ? undefined : artifact.totalDownloads}
         />
+        <RegistryExtendedProviders slugs={artifact.extendsProviderSlugs} />
+        {!artifact.isAdded &&
+          !artifact.isInstallable &&
+          !artifact.isBuiltin && (
+            <p className="text-text-neutral-secondary text-xs">
+              {getRegistryNotInstallableMessage(artifact.notInstallableReason)}
+            </p>
+          )}
         <div className="flex flex-wrap items-center gap-3">
           <RegistryProviderCluster providers={artifact.providers} />
           <span className="ml-auto flex flex-wrap items-center justify-end gap-2">
@@ -309,7 +338,7 @@ export function RegistryArtifactCard({
             )}
             {artifact.isAdded ? (
               <>
-                {artifact.updateAvailable ? (
+                {artifact.updateAvailable && artifact.isInstallable ? (
                   <Button
                     aria-label={`Update ${displayName} to ${artifact.latestVersion}`}
                     disabled={Boolean(pendingAddName)}
@@ -338,7 +367,7 @@ export function RegistryArtifactCard({
                   Remove
                 </Button>
               </>
-            ) : isRegistryArtifactInstallable(artifact) ? (
+            ) : artifact.isInstallable ? (
               <Button
                 aria-label={`Add ${displayName}`}
                 disabled={Boolean(pendingAddName)}
@@ -357,12 +386,14 @@ export function RegistryArtifactCard({
 }
 
 interface RegistryTenantArtifactCardProps {
+  extendsProviderSlugs?: string[];
   normalizedName: string;
   onRemove: (trigger: HTMLButtonElement | null) => void;
   resolvedVersion?: string;
 }
 
 export function RegistryTenantArtifactCard({
+  extendsProviderSlugs = [],
   normalizedName,
   onRemove,
   resolvedVersion,
@@ -393,6 +424,7 @@ export function RegistryTenantArtifactCard({
           isAdded
           version={resolvedVersion || "Unknown"}
         />
+        <RegistryExtendedProviders slugs={extendsProviderSlugs} />
         <div className="flex justify-end">
           <Button
             aria-label={`Remove ${normalizedName}`}
diff --git a/ui/components/registry/registry-explorer.integration.test.tsx b/ui/components/registry/registry-explorer.integration.test.tsx
index 0d2668a4d8..ec19034181 100644
--- a/ui/components/registry/registry-explorer.integration.test.tsx
+++ b/ui/components/registry/registry-explorer.integration.test.tsx
@@ -132,6 +132,7 @@ const readyState: RegistryBootstrapState = {
         isBuiltin: false,
         isMeta: false,
         hasProvider: true,
+        isInstallable: true,
         hasChecks: true,
         hasCompliance: false,
         versionCount: 2,
@@ -155,6 +156,7 @@ const readyState: RegistryBootstrapState = {
         isBuiltin: false,
         isMeta: false,
         hasProvider: true,
+        isInstallable: true,
         hasChecks: true,
         hasCompliance: true,
         versionCount: 1,
@@ -172,6 +174,7 @@ const readyState: RegistryBootstrapState = {
         isBuiltin: false,
         isMeta: true,
         hasProvider: true,
+        isInstallable: true,
         hasChecks: true,
         hasCompliance: true,
         versionCount: 4,
@@ -1311,8 +1314,11 @@ describe("RegistryExplorer", () => {
 
   describe("when the complete catalog is ready", () => {
     it.each([
-      { isBuiltin: true, hasProvider: true },
-      { isBuiltin: false, hasProvider: false },
+      { isBuiltin: true, isInstallable: false },
+      {
+        isInstallable: false,
+        notInstallableReason: "artifact_defines_nothing_usable",
+      },
     ])("keeps ineligible artifacts visible without Add: %j", async (flags) => {
       const state: RegistryBootstrapState = {
         ...readyState,
@@ -1587,6 +1593,7 @@ describe("RegistryExplorer", () => {
         ...readyState.catalog.artifacts[0],
         isAdded: false,
         updateAvailable: false,
+        extendsProviderSlugs: [],
         checkCount: 645,
         complianceCount: 45,
       };
@@ -1693,6 +1700,7 @@ describe("RegistryExplorer", () => {
         ...readyState.catalog.artifacts[0],
         isAdded: false,
         updateAvailable: false,
+        extendsProviderSlugs: [],
         owners: [
           {
             name: "Registry team",
@@ -1972,6 +1980,38 @@ describe("RegistryExplorer", () => {
     );
   });
 
+  it("treats a running scan as a wait, never as a reason to delete providers", async () => {
+    // Given
+    removeRegistryArtifactMock
+      .mockResolvedValueOnce({ status: "busy" })
+      .mockResolvedValueOnce({
+        status: "confirmed",
+        tenantArtifacts: [],
+      });
+    const screen = await render(<RegistryExplorer initialState={readyState} />);
+    await screen.getByRole("tab", { name: /My artifacts/ }).click();
+    await screen.getByRole("button", { name: "Remove AWS guard" }).click();
+
+    // When
+    await screen.getByRole("button", { name: "Confirm Remove" }).click();
+
+    // Then
+    const dialog = screen.getByRole("dialog", { name: "Remove artifact" });
+    await expect
+      .element(dialog.getByRole("alert"))
+      .toHaveTextContent("A scan is using this artifact");
+    await expect
+      .element(dialog.getByRole("button", { name: "View providers" }))
+      .not.toBeInTheDocument();
+
+    // When: the scan finished, so the same dialog can simply try again.
+    await dialog.getByRole("button", { name: "Confirm Remove" }).click();
+
+    // Then
+    await expect.element(dialog).not.toBeInTheDocument();
+    expect(removeRegistryArtifactMock).toHaveBeenCalledTimes(2);
+  });
+
   it("clears the in-use Remove error on close and restores focus before reopening", async () => {
     // Given
     removeRegistryArtifactMock.mockResolvedValue({ status: "in_use" });
diff --git a/ui/components/registry/registry-explorer.model.test.ts b/ui/components/registry/registry-explorer.model.test.ts
index 1bed8de3cb..ddc4c7e847 100644
--- a/ui/components/registry/registry-explorer.model.test.ts
+++ b/ui/components/registry/registry-explorer.model.test.ts
@@ -18,6 +18,7 @@ const artifact = (
   hasProvider: false,
   hasChecks: false,
   hasCompliance: false,
+  isInstallable: false,
   versionCount: 0,
   totalDownloads: 0,
   owners: [],
@@ -25,6 +26,46 @@ const artifact = (
 });
 
 describe("Registry marketplace model", () => {
+  it("reports a newer release for an installed checks artifact that defines no provider", () => {
+    // Given
+    const catalog = {
+      status: "complete" as const,
+      artifacts: [
+        artifact("aws-checks", {
+          latestVersion: "0.3.0",
+          hasChecks: true,
+          isInstallable: true,
+        }),
+      ],
+    };
+
+    // When
+    const model = buildRegistryMarketplaceModel(
+      catalog,
+      [
+        {
+          normalizedName: "aws-checks",
+          versionSpec: "latest",
+          resolvedVersion: "0.2.2",
+          extendsProviderSlugs: ["aws"],
+        },
+      ],
+      {},
+      "name",
+    );
+
+    // Then
+    expect(model).toMatchObject({
+      artifacts: [{ updateAvailable: true, extendsProviderSlugs: ["aws"] }],
+      myArtifacts: [
+        {
+          extendsProviderSlugs: ["aws"],
+          catalogArtifact: { extendsProviderSlugs: ["aws"] },
+        },
+      ],
+    });
+  });
+
   it("offers the catalog version for an installed artifact with a different resolved version", () => {
     // Given
     const catalog = {
@@ -66,18 +107,6 @@ describe("Registry marketplace model", () => {
     { resolvedVersion: undefined, latestVersion: "1.0.0", expected: false },
     { resolvedVersion: " ", latestVersion: "1.0.0", expected: false },
     { resolvedVersion: "1.0.0", latestVersion: undefined, expected: false },
-    {
-      resolvedVersion: "1.0.0",
-      latestVersion: "1.1.0",
-      isBuiltin: true,
-      expected: false,
-    },
-    {
-      resolvedVersion: "1.0.0",
-      latestVersion: "1.1.0",
-      hasProvider: false,
-      expected: false,
-    },
   ])(
     "compares resolved $resolvedVersion against catalog $latestVersion ($expected)",
     (example) => {
@@ -153,6 +182,7 @@ describe("Registry marketplace model", () => {
       {
         normalizedName: "core",
         versionSpec: "latest",
+        extendsProviderSlugs: [],
         catalogArtifact: expect.objectContaining({
           normalizedName: "core",
           isAdded: true,
@@ -161,6 +191,7 @@ describe("Registry marketplace model", () => {
       {
         normalizedName: "manual",
         versionSpec: "1.2.3",
+        extendsProviderSlugs: [],
         catalogArtifact: undefined,
       },
     ]);
diff --git a/ui/components/registry/registry-explorer.model.ts b/ui/components/registry/registry-explorer.model.ts
index 212b114f1e..aa2ab8a822 100644
--- a/ui/components/registry/registry-explorer.model.ts
+++ b/ui/components/registry/registry-explorer.model.ts
@@ -1,4 +1,3 @@
-import { isRegistryArtifactInstallable } from "@/lib/registry/artifacts";
 import {
   REGISTRY_CATALOG,
   type RegistryCatalogArtifact,
@@ -39,6 +38,8 @@ export interface RegistryMarketplaceArtifact extends RegistryCatalogArtifact {
   isAdded: boolean;
   resolvedVersion?: string;
   updateAvailable: boolean;
+  /** Built-in providers the install adds checks to; empty until installed. */
+  extendsProviderSlugs: string[];
 }
 
 export interface RegistryMarketplaceMyArtifact extends RegistryTenantArtifact {
@@ -85,12 +86,13 @@ export function buildRegistryMarketplaceModel(
           latestVersion,
           resolvedVersion,
           isAdded: Boolean(installed),
+          // Versions alone: a checks artifact defines no provider yet updates.
           updateAvailable: Boolean(
             resolvedVersion &&
               latestVersion &&
-              resolvedVersion !== latestVersion &&
-              isRegistryArtifactInstallable(artifact),
+              resolvedVersion !== latestVersion,
           ),
+          extendsProviderSlugs: installed?.extendsProviderSlugs ?? [],
         },
       ];
     }),
@@ -110,11 +112,12 @@ export function buildRegistryMarketplaceModel(
       new Set(catalog.artifacts.flatMap((artifact) => artifact.providers)),
     ).sort(compare),
     myArtifacts: myArtifacts
-      .map(({ normalizedName, versionSpec, resolvedVersion }) => ({
-        normalizedName,
-        versionSpec,
-        resolvedVersion: resolvedVersion?.trim() || undefined,
-        catalogArtifact: merged.get(normalizedName),
+      .map((installed) => ({
+        normalizedName: installed.normalizedName,
+        versionSpec: installed.versionSpec,
+        resolvedVersion: installed.resolvedVersion?.trim() || undefined,
+        extendsProviderSlugs: installed.extendsProviderSlugs ?? [],
+        catalogArtifact: merged.get(installed.normalizedName),
       }))
       .sort((left, right) =>
         compare(left.normalizedName, right.normalizedName),
diff --git a/ui/components/registry/registry-explorer.tsx b/ui/components/registry/registry-explorer.tsx
index 0c50b7244b..84cad6e893 100644
--- a/ui/components/registry/registry-explorer.tsx
+++ b/ui/components/registry/registry-explorer.tsx
@@ -19,7 +19,6 @@ import {
 } from "@/components/shadcn/tabs/tabs";
 import { toast } from "@/components/shadcn/toast/use-toast";
 import { executeRegistryArtifactAddition } from "@/lib/registry/artifact-execution";
-import { isRegistryArtifactInstallable } from "@/lib/registry/artifacts";
 import { executeRegistryCredentialValidation } from "@/lib/registry/credential-execution";
 import {
   REGISTRY_CREDENTIAL_CHANGED,
@@ -62,7 +61,7 @@ import { RegistryToolbar } from "./registry-toolbar";
 import { useRegistryRefresh } from "./use-registry-refresh";
 
 const PAGE_SUBTITLE =
-  "Explore checks, compliance frameworks, and providers. Add external provider artifacts to connect new providers to your workspace.";
+  "Explore checks, compliance frameworks, and providers. Add artifacts to connect new providers or to run more checks on the ones you already scan.";
 
 const REGISTRY_TAB = { EXPLORE: "explore", MINE: "mine" } as const;
 type RegistryTab = (typeof REGISTRY_TAB)[keyof typeof REGISTRY_TAB];
@@ -319,7 +318,7 @@ export function RegistryExplorer({
 
   async function handleAdd(artifact: RegistryMarketplaceArtifact) {
     if (
-      !isRegistryArtifactInstallable(artifact) ||
+      !artifact.isInstallable ||
       (artifact.isAdded && !artifact.updateAvailable) ||
       pendingAddName ||
       pendingOperation ||
@@ -426,7 +425,10 @@ export function RegistryExplorer({
     if (result.status === REGISTRY_FAILURE.ACCESS_DENIED)
       return router.replace("/profile");
 
-    if (result.status === REGISTRY_ARTIFACT_REMOVAL.IN_USE) {
+    if (
+      result.status === REGISTRY_ARTIFACT_REMOVAL.IN_USE ||
+      result.status === REGISTRY_ARTIFACT_REMOVAL.BUSY
+    ) {
       setRemoveError(result);
       return;
     }
@@ -690,7 +692,7 @@ export function RegistryExplorer({
         <TabsContent className="space-y-4 pt-4" value={REGISTRY_TAB.MINE}>
           <RegistryArtifactGrid
             emptyMessage="No artifacts in this workspace yet."
-            emptyDescription="Explore the catalog to add an external provider to this workspace."
+            emptyDescription="Explore the catalog to add providers or checks to this workspace."
             emptyActionLabel="Explore artifacts"
             isEmpty={model.myArtifacts.length === 0}
             onReset={() => setActiveTab(REGISTRY_TAB.EXPLORE)}
@@ -708,6 +710,7 @@ export function RegistryExplorer({
                   />
                 ) : (
                   <RegistryTenantArtifactCard
+                    extendsProviderSlugs={myArtifact.extendsProviderSlugs}
                     normalizedName={myArtifact.normalizedName}
                     onRemove={(trigger) =>
                       openRemoveDialog(myArtifact.normalizedName, trigger)
diff --git a/ui/components/registry/registry-remove-dialog.tsx b/ui/components/registry/registry-remove-dialog.tsx
index 394bc05662..d5c8a788d5 100644
--- a/ui/components/registry/registry-remove-dialog.tsx
+++ b/ui/components/registry/registry-remove-dialog.tsx
@@ -31,6 +31,8 @@ export function RegistryRemoveDialog({
 }: RegistryRemoveDialogProps) {
   const cancelButtonRef = useRef<HTMLButtonElement>(null);
   const isInUse = error?.status === REGISTRY_ARTIFACT_REMOVAL.IN_USE;
+  // Busy keeps Confirm Remove: waiting is the remedy, not deleting providers.
+  const isBusy = error?.status === REGISTRY_ARTIFACT_REMOVAL.BUSY;
 
   // Disabling the submit button can lose focus; restore it inside the dialog
   // when a failure re-enables the actions or replaces them with recovery actions.
@@ -57,10 +59,13 @@ export function RegistryRemoveDialog({
       {error && (
         <Alert variant="error">
           {isInUse && <AlertTitle>Artifact in use</AlertTitle>}
+          {isBusy && <AlertTitle>A scan is using this artifact</AlertTitle>}
           <AlertDescription>
-            {error.status === REGISTRY_ARTIFACT_REMOVAL.IN_USE
+            {isInUse
               ? "This artifact cannot be removed because one or more providers use it. Review the associated providers before trying again."
-              : error.message}
+              : isBusy
+                ? "A scan is running the checks this artifact adds. It clears by itself when the scan finishes, so try again shortly."
+                : error.message}
           </AlertDescription>
         </Alert>
       )}
diff --git a/ui/lib/registry/artifacts.ts b/ui/lib/registry/artifacts.ts
deleted file mode 100644
index 68078ce8b8..0000000000
--- a/ui/lib/registry/artifacts.ts
+++ /dev/null
@@ -1,8 +0,0 @@
-import type { RegistryCatalogArtifact } from "@/types/registry";
-
-/** Installation eligibility comes from catalog capabilities, never the package name. */
-export function isRegistryArtifactInstallable(
-  artifact: Pick<RegistryCatalogArtifact, "hasProvider" | "isBuiltin">,
-): boolean {
-  return artifact.hasProvider === true && artifact.isBuiltin === false;
-}
diff --git a/ui/lib/registry/installability.ts b/ui/lib/registry/installability.ts
new file mode 100644
index 0000000000..19932302d9
--- /dev/null
+++ b/ui/lib/registry/installability.ts
@@ -0,0 +1,23 @@
+const REGISTRY_NOT_INSTALLABLE_COPY = {
+  checks_target_is_not_builtin:
+    "Its checks are written for a provider this deployment does not ship.",
+  artifact_compliance_not_supported:
+    "It ships compliance frameworks as well as checks, which is not supported yet.",
+  artifact_targets_no_provider:
+    "It ships checks but names no provider to extend.",
+  artifact_defines_nothing_usable: "It brings neither a provider nor checks.",
+  artifact_ships_with_prowler:
+    "Its code is already inside Prowler. Nothing to install.",
+} as const;
+
+const REGISTRY_NOT_INSTALLABLE_FALLBACK =
+  "This artifact cannot be installed in this deployment.";
+
+/** Explains the API's refusal code; codes it adds later get the fallback. */
+export function getRegistryNotInstallableMessage(reason?: string): string {
+  return reason && Object.hasOwn(REGISTRY_NOT_INSTALLABLE_COPY, reason)
+    ? REGISTRY_NOT_INSTALLABLE_COPY[
+        reason as keyof typeof REGISTRY_NOT_INSTALLABLE_COPY
+      ]
+    : REGISTRY_NOT_INSTALLABLE_FALLBACK;
+}
diff --git a/ui/lib/registry/provider-options.test.ts b/ui/lib/registry/provider-options.test.ts
index 8307d83e9a..ecc46985b6 100644
--- a/ui/lib/registry/provider-options.test.ts
+++ b/ui/lib/registry/provider-options.test.ts
@@ -17,6 +17,7 @@ const provider: RegistryCatalogArtifact = {
   isMeta: false,
   hasChecks: true,
   hasCompliance: false,
+  isInstallable: true,
   versionCount: 1,
   totalDownloads: 0,
   owners: [],
@@ -105,6 +106,31 @@ describe("installed Registry provider options", () => {
     ]);
     expect(buildRegistryProviderOptions(catalog, [], [])).toEqual([]);
   });
+  it("asks whether an artifact defines a provider type, not whether it installs", () => {
+    // Given: installed checks for AWS, and a provider this deployment now refuses.
+    const catalog = [
+      {
+        ...provider,
+        normalizedName: "aws-checks",
+        hasProvider: false,
+        providerSlug: undefined,
+        providers: ["aws"],
+      },
+      { ...provider, isInstallable: false },
+    ];
+    const installed = catalog.map(({ normalizedName }) => ({
+      normalizedName,
+      versionSpec: "latest",
+    }));
+
+    // When / Then
+    expect(
+      buildRegistryProviderOptions(catalog, installed, []).map(
+        (option) => option.type,
+      ),
+    ).toEqual(["acme"]);
+  });
+
   it("uses the declared provider rather than other providers targeted by the package", () => {
     const catalog = [
       { ...provider, providerSlug: "zeta", providers: ["acme", "zeta"] },
diff --git a/ui/lib/registry/provider-options.ts b/ui/lib/registry/provider-options.ts
index 820ea0478d..cfe391480f 100644
--- a/ui/lib/registry/provider-options.ts
+++ b/ui/lib/registry/provider-options.ts
@@ -4,14 +4,29 @@ import type {
   RegistryTenantArtifact,
 } from "@/types/registry";
 
-import { isRegistryArtifactInstallable } from "./artifacts";
-
 export interface RegistryProviderOption {
   type: string;
   label: string;
   logoUrl?: string;
 }
 
+export const REGISTRY_PROVIDER_DISCOVERY = {
+  READY: "ready",
+  ACCESS_DENIED: "access_denied",
+  /** Access could not be evaluated: keep Registry hidden but retryable. */
+  UNKNOWN: "unknown",
+  ERROR: "error",
+} as const;
+
+export type RegistryProviderDiscoveryResult =
+  | {
+      status: typeof REGISTRY_PROVIDER_DISCOVERY.READY;
+      options: RegistryProviderOption[];
+    }
+  | { status: typeof REGISTRY_PROVIDER_DISCOVERY.ACCESS_DENIED }
+  | { status: typeof REGISTRY_PROVIDER_DISCOVERY.UNKNOWN }
+  | { status: typeof REGISTRY_PROVIDER_DISCOVERY.ERROR };
+
 export function buildRegistryProviderOptions(
   catalog: RegistryCatalogArtifact[],
   installed: RegistryTenantArtifact[],
@@ -25,10 +40,8 @@ export function buildRegistryProviderOptions(
   );
   const options = new Map<string, RegistryProviderOption>();
   for (const artifact of catalog) {
-    if (
-      !membership.has(artifact.normalizedName) ||
-      !isRegistryArtifactInstallable(artifact)
-    )
+    // Defining a provider type, not installability: checks artifacts install too.
+    if (!membership.has(artifact.normalizedName) || !artifact.hasProvider)
       continue;
     const declaredType = artifact.providerSlug;
     for (const type of declaredType ? [declaredType] : []) {
diff --git a/ui/tests/registry/controlled-registry-api.mts b/ui/tests/registry/controlled-registry-api.mts
index a35af92d26..a2c16ce582 100644
--- a/ui/tests/registry/controlled-registry-api.mts
+++ b/ui/tests/registry/controlled-registry-api.mts
@@ -92,6 +92,8 @@ const catalogPages = [
       has_checks: true,
       has_provider: true,
       is_builtin: false,
+      is_installable: true,
+      not_installable_reason: null,
       is_official: true,
       is_verified: true,
       latest_version: "1.2.3",
@@ -107,6 +109,8 @@ const catalogPages = [
       description: "Synthetic Registry fixture built-in provider",
       has_provider: true,
       is_builtin: true,
+      is_installable: false,
+      not_installable_reason: "artifact_ships_with_prowler",
       latest_version: "1.0.0",
       name: "Fixture built-in provider",
       providers: ["aws"],
@@ -114,6 +118,8 @@ const catalogPages = [
     catalogArtifact("fixture-shared-policy", {
       description: "Synthetic Registry fixture shared policy",
       has_compliance: true,
+      is_installable: false,
+      not_installable_reason: "artifact_defines_nothing_usable",
       latest_version: "2.0.0",
       name: "Fixture shared policy",
       owner_name: "Community Fixtures",
@@ -126,6 +132,8 @@ const catalogPages = [
     catalogArtifact("fixture-shared-policy", {
       description: "Synthetic Registry fixture shared policy",
       has_compliance: true,
+      is_installable: false,
+      not_installable_reason: "artifact_defines_nothing_usable",
       latest_version: "2.0.0",
       name: "Fixture shared policy",
       providers: ["gcp"],
@@ -619,6 +627,8 @@ async function handleApiRequest(
                 name,
                 latest_version: "1.0.0",
                 has_checks: true,
+                is_installable: true,
+                not_installable_reason: null,
                 providers: ["aws"],
               }),
             )
diff --git a/ui/tests/registry/registry.md b/ui/tests/registry/registry.md
index 409ba9ead0..335c91fb3c 100644
--- a/ui/tests/registry/registry.md
+++ b/ui/tests/registry/registry.md
@@ -14,7 +14,9 @@
 
 **Preconditions:** Local and Cloud-with-Registry-flag-off fixture servers.
 
-**Expected Result:** Registry navigation is absent and the direct route redirects safely in both profiles.
+**Flow:** Verify Registry navigation and direct-route access, then open the Add Provider selector.
+
+**Expected Result:** Registry navigation is absent, the direct route redirects safely, and Add Provider lists built-in providers without Registry source tabs in both profiles.
 
 ## Test Case: `REGISTRY-E2E-002` - Enabled Manager Discovery
 
@@ -59,7 +61,7 @@
 **Priority:** `critical`
 **Tags:** @e2e, @registry
 
-**Expected Result:** The All tab displays the complete paginated catalog and supports search, combined provider and capability filters, URL state, and owner logos with fallback. Built-ins display Built in without Add. Checks/compliance-only artifacts remain visible without Add. An external provider artifact installs through a 202 task and an authoritative membership read before Added appears. Removal preserves provider accounts. Reconnect, unavailable, and generic failures have actionable empty states.
+**Expected Result:** The All tab displays the complete paginated catalog and supports search, combined provider and capability filters, URL state, and owner logos with fallback. Built-ins display Built in without Add. Add follows the API's `is_installable` verdict: artifacts it refuses remain visible without Add and state the reason. An external provider artifact installs through a 202 task and an authoritative membership read before Added appears. Removal preserves provider accounts. Reconnect, unavailable, and generic failures have actionable empty states.
 
 ## Test Case: `REGISTRY-E2E-006` - Pixel 5 Reduced-Motion Browsing
 
diff --git a/ui/types/registry.ts b/ui/types/registry.ts
index 9d3e436dd1..954b794b81 100644
--- a/ui/types/registry.ts
+++ b/ui/types/registry.ts
@@ -119,6 +119,10 @@ export interface RegistryCatalogArtifact {
   hasProvider: boolean;
   hasChecks: boolean;
   hasCompliance: boolean;
+  /** The API's verdict for this deployment; never recomputed client-side. */
+  isInstallable: boolean;
+  /** Stable API code; new codes can appear without a UI release. */
+  notInstallableReason?: string;
   checkCount?: number;
   complianceCount?: number;
   versionCount: number;
@@ -130,6 +134,8 @@ export interface RegistryTenantArtifact {
   normalizedName: string;
   versionSpec: string;
   resolvedVersion?: string;
+  /** Built-in providers this install adds checks to without defining them. */
+  extendsProviderSlugs?: string[];
   insertedAt?: string;
   updatedAt?: string;
 }
@@ -236,15 +242,22 @@ export type RegistryMutationResult =
   | RegistryFailureResult;
 
 export const REGISTRY_ARTIFACT_REMOVAL = {
+  /** Providers stand on it: they must be deleted first. */
   IN_USE: "in_use",
+  /** A scan is running its checks: it clears by itself. */
+  BUSY: "busy",
 } as const;
 
+export type RegistryArtifactRemovalConflict =
+  | { status: typeof REGISTRY_ARTIFACT_REMOVAL.IN_USE }
+  | { status: typeof REGISTRY_ARTIFACT_REMOVAL.BUSY };
+
 export type RegistryArtifactRemovalResult =
   | RegistryMutationResult
-  | { status: typeof REGISTRY_ARTIFACT_REMOVAL.IN_USE };
+  | RegistryArtifactRemovalConflict;
 
 export type RegistryRemoveDialogError =
-  | { status: typeof REGISTRY_ARTIFACT_REMOVAL.IN_USE }
+  | RegistryArtifactRemovalConflict
   | { status: typeof REGISTRY_FAILURE.ERROR; message: string };
 
 export const REGISTRY_BOOTSTRAP_STATE = {